From 5228fc5e9fed482ea4e93815abc72d3be74601c2 Mon Sep 17 00:00:00 2001 From: Brian Read Date: Wed, 21 Jun 2023 14:19:40 +0100 Subject: [PATCH] Add in software files and templates --- createlinks | 7 +- .../etc/cron.daily/dmarc-srg.cron/10dmarc-srg | 4 + .../etc/e-smith/sql/dmarc-create-schema.sql | 2 + .../etc/httpd/conf/httpd.conf/86DmarcsrgAlias | 27 + .../opt/dmarc-srg/config/conf.php/10confphp | 130 +++ root/opt/dmarc-srg/.gitignore | 2 + root/opt/dmarc-srg/LICENSE | 674 ++++++++++++ root/opt/dmarc-srg/README.md | 137 +++ root/opt/dmarc-srg/admin.php | 87 ++ root/opt/dmarc-srg/classes/Admin.php | 99 ++ root/opt/dmarc-srg/classes/Auth.php | 147 +++ root/opt/dmarc-srg/classes/Common.php | 50 + root/opt/dmarc-srg/classes/Config.php | 89 ++ root/opt/dmarc-srg/classes/Core.php | 362 +++++++ .../dmarc-srg/classes/Database/Database.php | 543 ++++++++++ .../classes/Database/DatabaseConnector.php | 131 +++ .../classes/Database/DatabaseController.php | 184 ++++ .../classes/Database/DatabaseUpgrader.php | 121 +++ .../Database/DomainMapperInterface.php | 96 ++ .../classes/Database/Mariadb/Connector.php | 511 ++++++++++ .../classes/Database/Mariadb/DomainMapper.php | 332 ++++++ .../Database/Mariadb/ReportLogMapper.php | 311 ++++++ .../classes/Database/Mariadb/ReportMapper.php | 753 ++++++++++++++ .../Database/Mariadb/SettingMapper.php | 130 +++ .../Database/Mariadb/StatisticsMapper.php | 222 ++++ .../Database/Mariadb/UpgraderMapper.php | 236 +++++ .../Database/ReportLogMapperInterface.php | 89 ++ .../Database/ReportMapperInterface.php | 123 +++ .../Database/SettingMapperInterface.php | 64 ++ .../Database/StatisticsMapperInterface.php | 71 ++ .../Database/UpgraderMapperInterface.php | 44 + root/opt/dmarc-srg/classes/DateTime.php | 43 + .../classes/Directories/Directory.php | 165 +++ .../classes/Directories/DirectoryList.php | 147 +++ root/opt/dmarc-srg/classes/Domains/Domain.php | 286 ++++++ .../dmarc-srg/classes/Domains/DomainList.php | 79 ++ root/opt/dmarc-srg/classes/ErrorHandler.php | 156 +++ .../classes/Exception/AuthException.php | 39 + .../classes/Exception/DatabaseException.php | 39 + .../Exception/DatabaseExceptionFactory.php | 66 ++ .../Exception/DatabaseFatalException.php | 39 + .../Exception/DatabaseNotFoundException.php | 39 + .../classes/Exception/LogicException.php | 39 + .../classes/Exception/MailboxException.php | 39 + .../classes/Exception/RuntimeException.php | 43 + .../classes/Exception/SoftException.php | 39 + root/opt/dmarc-srg/classes/Log/LogLevel.php | 47 + .../classes/Log/LoggerAwareInterface.php | 47 + .../dmarc-srg/classes/Log/LoggerInterface.php | 131 +++ .../dmarc-srg/classes/Log/PhpSystemLogger.php | 172 ++++ .../dmarc-srg/classes/Mail/MailAttachment.php | 110 ++ root/opt/dmarc-srg/classes/Mail/MailBody.php | 142 +++ root/opt/dmarc-srg/classes/Mail/MailBox.php | 468 +++++++++ root/opt/dmarc-srg/classes/Mail/MailBoxes.php | 137 +++ .../dmarc-srg/classes/Mail/MailMessage.php | 154 +++ root/opt/dmarc-srg/classes/Report/Report.php | 165 +++ .../dmarc-srg/classes/Report/ReportData.php | 370 +++++++ .../classes/Report/ReportFetcher.php | 242 +++++ .../dmarc-srg/classes/Report/ReportList.php | 212 ++++ .../classes/Report/SummaryReport.php | 400 ++++++++ .../classes/ReportFile/ReportFile.php | 194 ++++ .../ReportFile/ReportGZFileCutFilter.php | 114 +++ .../dmarc-srg/classes/ReportLog/ReportLog.php | 96 ++ .../classes/ReportLog/ReportLogItem.php | 147 +++ .../dmarc-srg/classes/Settings/Setting.php | 242 +++++ .../classes/Settings/SettingInteger.php | 109 ++ .../classes/Settings/SettingString.php | 83 ++ .../classes/Settings/SettingStringSelect.php | 78 ++ .../classes/Settings/SettingsList.php | 207 ++++ .../classes/Sources/DirectorySource.php | 255 +++++ .../classes/Sources/MailboxSource.php | 238 +++++ root/opt/dmarc-srg/classes/Sources/Source.php | 115 +++ .../classes/Sources/SourceAction.php | 156 +++ .../classes/Sources/UploadedFilesSource.php | 113 ++ root/opt/dmarc-srg/classes/Statistics.php | 169 +++ root/opt/dmarc-srg/classes/Status.php | 109 ++ root/opt/dmarc-srg/config/conf.sample.php | 181 ++++ root/opt/dmarc-srg/css/main.css | 727 +++++++++++++ root/opt/dmarc-srg/css/mainmenu.css | 138 +++ root/opt/dmarc-srg/css/notification.css | 65 ++ root/opt/dmarc-srg/css/widgets.css | 162 +++ root/opt/dmarc-srg/debug.php | 28 + root/opt/dmarc-srg/domains.php | 131 +++ root/opt/dmarc-srg/files.php | 131 +++ root/opt/dmarc-srg/index.html | 65 ++ root/opt/dmarc-srg/init.php | 58 ++ root/opt/dmarc-srg/js/admin.js | 678 ++++++++++++ root/opt/dmarc-srg/js/common.js | 163 +++ root/opt/dmarc-srg/js/domains.js | 486 +++++++++ root/opt/dmarc-srg/js/files.js | 394 +++++++ root/opt/dmarc-srg/js/list.js | 527 ++++++++++ root/opt/dmarc-srg/js/login.js | 141 +++ root/opt/dmarc-srg/js/logs.js | 304 ++++++ root/opt/dmarc-srg/js/main.js | 335 ++++++ root/opt/dmarc-srg/js/notification.js | 86 ++ root/opt/dmarc-srg/js/report.js | 427 ++++++++ root/opt/dmarc-srg/js/settings.js | 355 +++++++ root/opt/dmarc-srg/js/status.js | 206 ++++ root/opt/dmarc-srg/js/summary.js | 537 ++++++++++ root/opt/dmarc-srg/js/widgets.js | 961 ++++++++++++++++++ root/opt/dmarc-srg/list.php | 77 ++ root/opt/dmarc-srg/login.php | 44 + root/opt/dmarc-srg/logout.php | 39 + root/opt/dmarc-srg/logs.php | 92 ++ root/opt/dmarc-srg/report.php | 72 ++ .../dmarc-srg-admin-panel-small.png | Bin 0 -> 32897 bytes .../screenshots/dmarc-srg-admin-panel.png | Bin 0 -> 58071 bytes .../dmarc-srg-report-detail-small.png | Bin 0 -> 122782 bytes .../screenshots/dmarc-srg-report-detail.png | Bin 0 -> 120109 bytes .../dmarc-srg-report-list-small.png | Bin 0 -> 127423 bytes .../screenshots/dmarc-srg-report-list.png | Bin 0 -> 249064 bytes root/opt/dmarc-srg/settings.php | 113 ++ root/opt/dmarc-srg/status.php | 60 ++ root/opt/dmarc-srg/summary.php | 93 ++ root/opt/dmarc-srg/tests/classes/AuthTest.php | 142 +++ .../dmarc-srg/tests/classes/CommonTest.php | 22 + .../dmarc-srg/tests/classes/ConfigTest.php | 93 ++ root/opt/dmarc-srg/tests/classes/CoreTest.php | 94 ++ .../Database/DatabaseControllerTest.php | 133 +++ .../dmarc-srg/tests/classes/DateTimeTest.php | 31 + .../tests/classes/Domains/DomainListTest.php | 56 + .../tests/classes/Domains/DomainTest.php | 162 +++ .../DatabaseExceptionFactoryTest.php | 49 + .../Exception/RuntimeExceptionTest.php | 16 + .../tests/classes/Mail/MailBodyTest.php | 77 ++ .../classes/ReportLog/ReportLogItemTest.php | 175 ++++ .../tests/classes/ReportLog/ReportLogTest.php | 163 +++ .../Settings/SettingDefaultValueTest.php | 121 +++ .../classes/Settings/SettingIntegerTest.php | 82 ++ .../Settings/SettingStringSelectTest.php | 103 ++ .../classes/Settings/SettingStringTest.php | 79 ++ .../tests/classes/Settings/SettingTest.php | 96 ++ .../classes/Settings/SettingsListTest.php | 94 ++ .../classes/Sources/SourceActionTest.php | 82 ++ root/opt/dmarc-srg/tests/conf_test_file.php | 14 + root/opt/dmarc-srg/tests/run.sh | 4 + root/opt/dmarc-srg/utils/check_config.php | 271 +++++ root/opt/dmarc-srg/utils/database_admin.php | 117 +++ root/opt/dmarc-srg/utils/fetch_reports.php | 225 ++++ root/opt/dmarc-srg/utils/mailbox_cleaner.php | 163 +++ .../opt/dmarc-srg/utils/reportlog_cleaner.php | 84 ++ root/opt/dmarc-srg/utils/reports_cleaner.php | 85 ++ root/opt/dmarc-srg/utils/summary_report.php | 210 ++++ 143 files changed, 23175 insertions(+), 2 deletions(-) create mode 100644 root/etc/e-smith/templates/etc/cron.daily/dmarc-srg.cron/10dmarc-srg create mode 100644 root/etc/e-smith/templates/etc/e-smith/sql/dmarc-create-schema.sql create mode 100644 root/etc/e-smith/templates/etc/httpd/conf/httpd.conf/86DmarcsrgAlias create mode 100644 root/etc/e-smith/templates/opt/dmarc-srg/config/conf.php/10confphp create mode 100644 root/opt/dmarc-srg/.gitignore create mode 100644 root/opt/dmarc-srg/LICENSE create mode 100644 root/opt/dmarc-srg/README.md create mode 100644 root/opt/dmarc-srg/admin.php create mode 100644 root/opt/dmarc-srg/classes/Admin.php create mode 100644 root/opt/dmarc-srg/classes/Auth.php create mode 100644 root/opt/dmarc-srg/classes/Common.php create mode 100644 root/opt/dmarc-srg/classes/Config.php create mode 100644 root/opt/dmarc-srg/classes/Core.php create mode 100644 root/opt/dmarc-srg/classes/Database/Database.php create mode 100644 root/opt/dmarc-srg/classes/Database/DatabaseConnector.php create mode 100644 root/opt/dmarc-srg/classes/Database/DatabaseController.php create mode 100644 root/opt/dmarc-srg/classes/Database/DatabaseUpgrader.php create mode 100644 root/opt/dmarc-srg/classes/Database/DomainMapperInterface.php create mode 100644 root/opt/dmarc-srg/classes/Database/Mariadb/Connector.php create mode 100644 root/opt/dmarc-srg/classes/Database/Mariadb/DomainMapper.php create mode 100644 root/opt/dmarc-srg/classes/Database/Mariadb/ReportLogMapper.php create mode 100644 root/opt/dmarc-srg/classes/Database/Mariadb/ReportMapper.php create mode 100644 root/opt/dmarc-srg/classes/Database/Mariadb/SettingMapper.php create mode 100644 root/opt/dmarc-srg/classes/Database/Mariadb/StatisticsMapper.php create mode 100644 root/opt/dmarc-srg/classes/Database/Mariadb/UpgraderMapper.php create mode 100644 root/opt/dmarc-srg/classes/Database/ReportLogMapperInterface.php create mode 100644 root/opt/dmarc-srg/classes/Database/ReportMapperInterface.php create mode 100644 root/opt/dmarc-srg/classes/Database/SettingMapperInterface.php create mode 100644 root/opt/dmarc-srg/classes/Database/StatisticsMapperInterface.php create mode 100644 root/opt/dmarc-srg/classes/Database/UpgraderMapperInterface.php create mode 100644 root/opt/dmarc-srg/classes/DateTime.php create mode 100644 root/opt/dmarc-srg/classes/Directories/Directory.php create mode 100644 root/opt/dmarc-srg/classes/Directories/DirectoryList.php create mode 100644 root/opt/dmarc-srg/classes/Domains/Domain.php create mode 100644 root/opt/dmarc-srg/classes/Domains/DomainList.php create mode 100644 root/opt/dmarc-srg/classes/ErrorHandler.php create mode 100644 root/opt/dmarc-srg/classes/Exception/AuthException.php create mode 100644 root/opt/dmarc-srg/classes/Exception/DatabaseException.php create mode 100644 root/opt/dmarc-srg/classes/Exception/DatabaseExceptionFactory.php create mode 100644 root/opt/dmarc-srg/classes/Exception/DatabaseFatalException.php create mode 100644 root/opt/dmarc-srg/classes/Exception/DatabaseNotFoundException.php create mode 100644 root/opt/dmarc-srg/classes/Exception/LogicException.php create mode 100644 root/opt/dmarc-srg/classes/Exception/MailboxException.php create mode 100644 root/opt/dmarc-srg/classes/Exception/RuntimeException.php create mode 100644 root/opt/dmarc-srg/classes/Exception/SoftException.php create mode 100644 root/opt/dmarc-srg/classes/Log/LogLevel.php create mode 100644 root/opt/dmarc-srg/classes/Log/LoggerAwareInterface.php create mode 100644 root/opt/dmarc-srg/classes/Log/LoggerInterface.php create mode 100644 root/opt/dmarc-srg/classes/Log/PhpSystemLogger.php create mode 100644 root/opt/dmarc-srg/classes/Mail/MailAttachment.php create mode 100644 root/opt/dmarc-srg/classes/Mail/MailBody.php create mode 100644 root/opt/dmarc-srg/classes/Mail/MailBox.php create mode 100644 root/opt/dmarc-srg/classes/Mail/MailBoxes.php create mode 100644 root/opt/dmarc-srg/classes/Mail/MailMessage.php create mode 100644 root/opt/dmarc-srg/classes/Report/Report.php create mode 100644 root/opt/dmarc-srg/classes/Report/ReportData.php create mode 100644 root/opt/dmarc-srg/classes/Report/ReportFetcher.php create mode 100644 root/opt/dmarc-srg/classes/Report/ReportList.php create mode 100644 root/opt/dmarc-srg/classes/Report/SummaryReport.php create mode 100644 root/opt/dmarc-srg/classes/ReportFile/ReportFile.php create mode 100644 root/opt/dmarc-srg/classes/ReportFile/ReportGZFileCutFilter.php create mode 100644 root/opt/dmarc-srg/classes/ReportLog/ReportLog.php create mode 100644 root/opt/dmarc-srg/classes/ReportLog/ReportLogItem.php create mode 100644 root/opt/dmarc-srg/classes/Settings/Setting.php create mode 100644 root/opt/dmarc-srg/classes/Settings/SettingInteger.php create mode 100644 root/opt/dmarc-srg/classes/Settings/SettingString.php create mode 100644 root/opt/dmarc-srg/classes/Settings/SettingStringSelect.php create mode 100644 root/opt/dmarc-srg/classes/Settings/SettingsList.php create mode 100644 root/opt/dmarc-srg/classes/Sources/DirectorySource.php create mode 100644 root/opt/dmarc-srg/classes/Sources/MailboxSource.php create mode 100644 root/opt/dmarc-srg/classes/Sources/Source.php create mode 100644 root/opt/dmarc-srg/classes/Sources/SourceAction.php create mode 100644 root/opt/dmarc-srg/classes/Sources/UploadedFilesSource.php create mode 100644 root/opt/dmarc-srg/classes/Statistics.php create mode 100644 root/opt/dmarc-srg/classes/Status.php create mode 100644 root/opt/dmarc-srg/config/conf.sample.php create mode 100644 root/opt/dmarc-srg/css/main.css create mode 100644 root/opt/dmarc-srg/css/mainmenu.css create mode 100644 root/opt/dmarc-srg/css/notification.css create mode 100644 root/opt/dmarc-srg/css/widgets.css create mode 100644 root/opt/dmarc-srg/debug.php create mode 100644 root/opt/dmarc-srg/domains.php create mode 100644 root/opt/dmarc-srg/files.php create mode 100644 root/opt/dmarc-srg/index.html create mode 100644 root/opt/dmarc-srg/init.php create mode 100644 root/opt/dmarc-srg/js/admin.js create mode 100644 root/opt/dmarc-srg/js/common.js create mode 100644 root/opt/dmarc-srg/js/domains.js create mode 100644 root/opt/dmarc-srg/js/files.js create mode 100644 root/opt/dmarc-srg/js/list.js create mode 100644 root/opt/dmarc-srg/js/login.js create mode 100644 root/opt/dmarc-srg/js/logs.js create mode 100644 root/opt/dmarc-srg/js/main.js create mode 100644 root/opt/dmarc-srg/js/notification.js create mode 100644 root/opt/dmarc-srg/js/report.js create mode 100644 root/opt/dmarc-srg/js/settings.js create mode 100644 root/opt/dmarc-srg/js/status.js create mode 100644 root/opt/dmarc-srg/js/summary.js create mode 100644 root/opt/dmarc-srg/js/widgets.js create mode 100644 root/opt/dmarc-srg/list.php create mode 100644 root/opt/dmarc-srg/login.php create mode 100644 root/opt/dmarc-srg/logout.php create mode 100644 root/opt/dmarc-srg/logs.php create mode 100644 root/opt/dmarc-srg/report.php create mode 100644 root/opt/dmarc-srg/screenshots/dmarc-srg-admin-panel-small.png create mode 100644 root/opt/dmarc-srg/screenshots/dmarc-srg-admin-panel.png create mode 100644 root/opt/dmarc-srg/screenshots/dmarc-srg-report-detail-small.png create mode 100644 root/opt/dmarc-srg/screenshots/dmarc-srg-report-detail.png create mode 100644 root/opt/dmarc-srg/screenshots/dmarc-srg-report-list-small.png create mode 100644 root/opt/dmarc-srg/screenshots/dmarc-srg-report-list.png create mode 100644 root/opt/dmarc-srg/settings.php create mode 100644 root/opt/dmarc-srg/status.php create mode 100644 root/opt/dmarc-srg/summary.php create mode 100644 root/opt/dmarc-srg/tests/classes/AuthTest.php create mode 100644 root/opt/dmarc-srg/tests/classes/CommonTest.php create mode 100644 root/opt/dmarc-srg/tests/classes/ConfigTest.php create mode 100644 root/opt/dmarc-srg/tests/classes/CoreTest.php create mode 100644 root/opt/dmarc-srg/tests/classes/Database/DatabaseControllerTest.php create mode 100644 root/opt/dmarc-srg/tests/classes/DateTimeTest.php create mode 100644 root/opt/dmarc-srg/tests/classes/Domains/DomainListTest.php create mode 100644 root/opt/dmarc-srg/tests/classes/Domains/DomainTest.php create mode 100644 root/opt/dmarc-srg/tests/classes/Exception/DatabaseExceptionFactoryTest.php create mode 100644 root/opt/dmarc-srg/tests/classes/Exception/RuntimeExceptionTest.php create mode 100644 root/opt/dmarc-srg/tests/classes/Mail/MailBodyTest.php create mode 100644 root/opt/dmarc-srg/tests/classes/ReportLog/ReportLogItemTest.php create mode 100644 root/opt/dmarc-srg/tests/classes/ReportLog/ReportLogTest.php create mode 100644 root/opt/dmarc-srg/tests/classes/Settings/SettingDefaultValueTest.php create mode 100644 root/opt/dmarc-srg/tests/classes/Settings/SettingIntegerTest.php create mode 100644 root/opt/dmarc-srg/tests/classes/Settings/SettingStringSelectTest.php create mode 100644 root/opt/dmarc-srg/tests/classes/Settings/SettingStringTest.php create mode 100644 root/opt/dmarc-srg/tests/classes/Settings/SettingTest.php create mode 100644 root/opt/dmarc-srg/tests/classes/Settings/SettingsListTest.php create mode 100644 root/opt/dmarc-srg/tests/classes/Sources/SourceActionTest.php create mode 100644 root/opt/dmarc-srg/tests/conf_test_file.php create mode 100755 root/opt/dmarc-srg/tests/run.sh create mode 100644 root/opt/dmarc-srg/utils/check_config.php create mode 100644 root/opt/dmarc-srg/utils/database_admin.php create mode 100644 root/opt/dmarc-srg/utils/fetch_reports.php create mode 100644 root/opt/dmarc-srg/utils/mailbox_cleaner.php create mode 100644 root/opt/dmarc-srg/utils/reportlog_cleaner.php create mode 100644 root/opt/dmarc-srg/utils/reports_cleaner.php create mode 100644 root/opt/dmarc-srg/utils/summary_report.php diff --git a/createlinks b/createlinks index 705bc53..a48d6a8 100644 --- a/createlinks +++ b/createlinks @@ -13,6 +13,9 @@ $event = 'smeserver-dmarc-srg-update'; foreach my $file (qw( /etc/systemd/system-preset/49-koozali.preset + /etc/httpd/conf/httpd.conf + /etc/cron.daily/dmarc-srg.cron + /opt/config/conf.php )) { templates2events( $file, $event ); @@ -22,7 +25,7 @@ event_link('systemd-default', $event, '10'); event_link('systemd-reload', $event, '50'); #services we might need to restart -#event_services(event, 'xxxx' => 'restart', 'yyyy' => 'restart'); +event_services($event, 'httpd-e-smith' => 'restart'); #Backup contrib files # backup_includes("smeserver-dmarc-srg", qw( @@ -33,7 +36,7 @@ event_link('systemd-reload', $event, '50'); #Server manager entry #panel_link("smeserver-dmarc-srg", 'manager'); #Events to smeserver-dmarc-srg -#$event = 'smeserver-dmarc-srg-smeserver-dmarc-srg'; +#$event = 'smeserver-dmarc-srg-'; # safe_symlink("restart", "root/etc/e-smith/events/$event/services2adjust/smeserver-dmarc-srg"); # templates2events("/etc/smeserver-dmarc-srg/smeserver-dmarc-srg.conf", $event); diff --git a/root/etc/e-smith/templates/etc/cron.daily/dmarc-srg.cron/10dmarc-srg b/root/etc/e-smith/templates/etc/cron.daily/dmarc-srg.cron/10dmarc-srg new file mode 100644 index 0000000..515e5f4 --- /dev/null +++ b/root/etc/e-smith/templates/etc/cron.daily/dmarc-srg.cron/10dmarc-srg @@ -0,0 +1,4 @@ +#!/bin/bash +cd /opt/dmarc-srg +php80 utils/fetch_reports.php source=email +php80 utils/summary_report.php domain=bjsystems.co.uk period=lastweek diff --git a/root/etc/e-smith/templates/etc/e-smith/sql/dmarc-create-schema.sql b/root/etc/e-smith/templates/etc/e-smith/sql/dmarc-create-schema.sql new file mode 100644 index 0000000..5582aec --- /dev/null +++ b/root/etc/e-smith/templates/etc/e-smith/sql/dmarc-create-schema.sql @@ -0,0 +1,2 @@ +CREATE database dmarc; +GRANT all on dmarc.* to dmarc_user@localhost identified by '32katy55'; diff --git a/root/etc/e-smith/templates/etc/httpd/conf/httpd.conf/86DmarcsrgAlias b/root/etc/e-smith/templates/etc/httpd/conf/httpd.conf/86DmarcsrgAlias new file mode 100644 index 0000000..a561320 --- /dev/null +++ b/root/etc/e-smith/templates/etc/httpd/conf/httpd.conf/86DmarcsrgAlias @@ -0,0 +1,27 @@ +Alias /dmarc-srg /opt/dmarc-srg +ErrorLog /var/log/httpd/dmarc-srg-error.log + + AuthName "dmarc-srg" + AuthType Basic + AuthBasicProvider external + AuthExternal pwauth + require user admin + + + SSLRequireSSL + Options -Indexes + AllowOverride None + + Require ip 127.0.0.1 192.168.100.0/255.255.255.0 + + + AddType application/x-httpd-php .php + + SetHandler "proxy:unix:/var/run/php-fpm/php80.sock|fcgi://localhost" + +# SetEnvIf Authorization "(.*)" HTTP_AUTHORIZATION=$1 + + + + Require all denied + \ No newline at end of file diff --git a/root/etc/e-smith/templates/opt/dmarc-srg/config/conf.php/10confphp b/root/etc/e-smith/templates/opt/dmarc-srg/config/conf.php/10confphp new file mode 100644 index 0000000..454b626 --- /dev/null +++ b/root/etc/e-smith/templates/opt/dmarc-srg/config/conf.php/10confphp @@ -0,0 +1,130 @@ + 'localhost', + 'type' => 'mysql', + 'name' => 'dmarc', + 'user' => 'dmarc_user', + 'password' => '32katy55', + /** + * This pamemeter can be usefull if the database is shared with other applications + * to avoid conflicting table names. You do not need to specify this parameter + * if you use a dedicated database. + * Example value: dmarc_ + * Caution! Do not use an empty string as the table prefix value if you share the database with + * other applications. + * Caution! Do not change this parameter if you have already created the tables in the database + * because the tables will not be renamed automatically. + */ + 'table_prefix' => '' +]; + +/** + * It is only required if you want to get reports from a mailbox automatically. + * In order to collect reports from several mailboxes, you should put each + * mailbox settings in an array. + */ +$mailboxes = [ + // Just for displaying in web-admin. Not necessary. + 'name' => 'Dmarc@bjsystems', + // Host of the email server. You can specify a port separated by a colon. + 'host' => 'mail.bjsystems.co.uk', + // Connection encryption method. The valid values are: + // 'none' - without encryption (strongly not recommend). + // 'ssl' - SSL/TLS on a separate port, for IMAP it is usually port 993. + // 'starttls' - STARTTLS method, usually on the standard IMAP port 143. Default value. + 'encryption' => 'ssl', + // Set true if you want to connect to the IMAP server without certificate validation + 'novalidate-cert' => false, + // Mailbox user name. + 'username' => 'dmarc', + // Mailbox password. + 'password' => '32katy55', + // Mailbox name + 'mailbox' => 'INBOX' +]; + +/** + * It is only required if you want to get reports from a server directory. + * In order to collect report from several directories, you should put each + * directory settings in an array. Processing of the directories is not recursive. + * It is recommended to use atomic methods for adding files to these directories. + * Attention! All successfully processed files will be deleted from the directories + * and all others will be moved to subdirectory `failed`, that will be created + * automatically if it does not exist. + */ +$directories = [ + // Just for displaying in web-admin. Not necessary. + 'name' => 'Rua-Dir', + // The directory location + 'location' => '/var/spool/dmarc-srg/rua' +]; + +$admin = [ + // Set this value to null or remove this parameter to disable authentication + // Note: The authentication is always failed with an empty password. Change it if you want to use the web ui. +]; + +// +$fetcher = [ + 'mailboxes' => [ + // How many messages will be fetched at once maximum. 0 to disable any limiting. + 'messages_maximum' => 0 + ], + 'directories' => [ + // How many report files will be processed at once maximum. 0 to disable any limiting. + 'files_maximum' => 50 + ], + /** + * Domains matching this regular expression will be automatically added to the database from processed + * reports. This option does not affect domains that have already been added to the database. + * It is not necessary to use this option in most cases. The option can be useful if you have many domains + * or subdomains and do not want to add them manually in the GUI. An empty string or null doesn't match any domain. + * Note: The first domain from the first report will be automatically added anyway. + * Some examples: + * '.+\\.example\\.net$' - Matches any subdomain of the domain example.net + * '^mymail[0-9]+\\.net$' - Matches the domains mymail01.net, mymail02.net, mymail99999.net, etc. + */ + 'allowed_domains' => '' +]; + +// Settings for sending summary reports if it is necessary. +// It uses in utils/summary_report.php +$mailer = [ + 'from' => 'postmaster@bjsystems.co.uk', + 'default' => 'dmarc@bjsystems.co.uk' +]; + +// +$cleaner = [ + // It is used in utils/mailbox_cleaner.php + 'mailboxes' => [ + // Will remove messages older than (days) + 'days_old' => 30, + // How many messages will be removed at once maximum. + 'delete_maximum' => 50, + // How many messages must be leave in the mailbox minimum. + 'leave_minimum' => 100, + // Cleaning up the mailbox that failed reports are moved to. This box is also subject + // to the restrictions mentioned above. The valid values are: + // 'none' - no action with it. Default value. + // 'seen' - only seen messages will be removed + // 'any' - all messages will be removed + 'failed' => 'none' + ], + // It is used in utils/reports_cleaner.php + 'reports' => [ + 'days_old' => 30, + 'delete_maximum' => 50, + 'leave_minimum' => 100 + ], + // It is used in utils/reportlog_cleaner.php + 'reportlog' => [ + 'days_old' => 30, + 'delete_maximum' => 50, + 'leave_minimum' => 100 + ] +]; diff --git a/root/opt/dmarc-srg/.gitignore b/root/opt/dmarc-srg/.gitignore new file mode 100644 index 0000000..9e9b603 --- /dev/null +++ b/root/opt/dmarc-srg/.gitignore @@ -0,0 +1,2 @@ +.phpunit* +config/conf.php diff --git a/root/opt/dmarc-srg/LICENSE b/root/opt/dmarc-srg/LICENSE new file mode 100644 index 0000000..f288702 --- /dev/null +++ b/root/opt/dmarc-srg/LICENSE @@ -0,0 +1,674 @@ + GNU GENERAL PUBLIC LICENSE + Version 3, 29 June 2007 + + Copyright (C) 2007 Free Software Foundation, Inc. + Everyone is permitted to copy and distribute verbatim copies + of this license document, but changing it is not allowed. + + Preamble + + The GNU General Public License is a free, copyleft license for +software and other kinds of works. + + The licenses for most software and other practical works are designed +to take away your freedom to share and change the works. By contrast, +the GNU General Public License is intended to guarantee your freedom to +share and change all versions of a program--to make sure it remains free +software for all its users. We, the Free Software Foundation, use the +GNU General Public License for most of our software; it applies also to +any other work released this way by its authors. You can apply it to +your programs, too. + + When we speak of free software, we are referring to freedom, not +price. Our General Public Licenses are designed to make sure that you +have the freedom to distribute copies of free software (and charge for +them if you wish), that you receive source code or can get it if you +want it, that you can change the software or use pieces of it in new +free programs, and that you know you can do these things. + + To protect your rights, we need to prevent others from denying you +these rights or asking you to surrender the rights. Therefore, you have +certain responsibilities if you distribute copies of the software, or if +you modify it: responsibilities to respect the freedom of others. + + For example, if you distribute copies of such a program, whether +gratis or for a fee, you must pass on to the recipients the same +freedoms that you received. You must make sure that they, too, receive +or can get the source code. And you must show them these terms so they +know their rights. + + Developers that use the GNU GPL protect your rights with two steps: +(1) assert copyright on the software, and (2) offer you this License +giving you legal permission to copy, distribute and/or modify it. + + For the developers' and authors' protection, the GPL clearly explains +that there is no warranty for this free software. For both users' and +authors' sake, the GPL requires that modified versions be marked as +changed, so that their problems will not be attributed erroneously to +authors of previous versions. + + Some devices are designed to deny users access to install or run +modified versions of the software inside them, although the manufacturer +can do so. This is fundamentally incompatible with the aim of +protecting users' freedom to change the software. The systematic +pattern of such abuse occurs in the area of products for individuals to +use, which is precisely where it is most unacceptable. Therefore, we +have designed this version of the GPL to prohibit the practice for those +products. If such problems arise substantially in other domains, we +stand ready to extend this provision to those domains in future versions +of the GPL, as needed to protect the freedom of users. + + Finally, every program is threatened constantly by software patents. +States should not allow patents to restrict development and use of +software on general-purpose computers, but in those that do, we wish to +avoid the special danger that patents applied to a free program could +make it effectively proprietary. To prevent this, the GPL assures that +patents cannot be used to render the program non-free. + + The precise terms and conditions for copying, distribution and +modification follow. + + TERMS AND CONDITIONS + + 0. Definitions. + + "This License" refers to version 3 of the GNU General Public License. + + "Copyright" also means copyright-like laws that apply to other kinds of +works, such as semiconductor masks. + + "The Program" refers to any copyrightable work licensed under this +License. Each licensee is addressed as "you". "Licensees" and +"recipients" may be individuals or organizations. + + To "modify" a work means to copy from or adapt all or part of the work +in a fashion requiring copyright permission, other than the making of an +exact copy. The resulting work is called a "modified version" of the +earlier work or a work "based on" the earlier work. + + A "covered work" means either the unmodified Program or a work based +on the Program. + + To "propagate" a work means to do anything with it that, without +permission, would make you directly or secondarily liable for +infringement under applicable copyright law, except executing it on a +computer or modifying a private copy. Propagation includes copying, +distribution (with or without modification), making available to the +public, and in some countries other activities as well. + + To "convey" a work means any kind of propagation that enables other +parties to make or receive copies. Mere interaction with a user through +a computer network, with no transfer of a copy, is not conveying. + + An interactive user interface displays "Appropriate Legal Notices" +to the extent that it includes a convenient and prominently visible +feature that (1) displays an appropriate copyright notice, and (2) +tells the user that there is no warranty for the work (except to the +extent that warranties are provided), that licensees may convey the +work under this License, and how to view a copy of this License. If +the interface presents a list of user commands or options, such as a +menu, a prominent item in the list meets this criterion. + + 1. Source Code. + + The "source code" for a work means the preferred form of the work +for making modifications to it. "Object code" means any non-source +form of a work. + + A "Standard Interface" means an interface that either is an official +standard defined by a recognized standards body, or, in the case of +interfaces specified for a particular programming language, one that +is widely used among developers working in that language. + + The "System Libraries" of an executable work include anything, other +than the work as a whole, that (a) is included in the normal form of +packaging a Major Component, but which is not part of that Major +Component, and (b) serves only to enable use of the work with that +Major Component, or to implement a Standard Interface for which an +implementation is available to the public in source code form. A +"Major Component", in this context, means a major essential component +(kernel, window system, and so on) of the specific operating system +(if any) on which the executable work runs, or a compiler used to +produce the work, or an object code interpreter used to run it. + + The "Corresponding Source" for a work in object code form means all +the source code needed to generate, install, and (for an executable +work) run the object code and to modify the work, including scripts to +control those activities. However, it does not include the work's +System Libraries, or general-purpose tools or generally available free +programs which are used unmodified in performing those activities but +which are not part of the work. For example, Corresponding Source +includes interface definition files associated with source files for +the work, and the source code for shared libraries and dynamically +linked subprograms that the work is specifically designed to require, +such as by intimate data communication or control flow between those +subprograms and other parts of the work. + + The Corresponding Source need not include anything that users +can regenerate automatically from other parts of the Corresponding +Source. + + The Corresponding Source for a work in source code form is that +same work. + + 2. Basic Permissions. + + All rights granted under this License are granted for the term of +copyright on the Program, and are irrevocable provided the stated +conditions are met. This License explicitly affirms your unlimited +permission to run the unmodified Program. The output from running a +covered work is covered by this License only if the output, given its +content, constitutes a covered work. This License acknowledges your +rights of fair use or other equivalent, as provided by copyright law. + + You may make, run and propagate covered works that you do not +convey, without conditions so long as your license otherwise remains +in force. You may convey covered works to others for the sole purpose +of having them make modifications exclusively for you, or provide you +with facilities for running those works, provided that you comply with +the terms of this License in conveying all material for which you do +not control copyright. Those thus making or running the covered works +for you must do so exclusively on your behalf, under your direction +and control, on terms that prohibit them from making any copies of +your copyrighted material outside their relationship with you. + + Conveying under any other circumstances is permitted solely under +the conditions stated below. Sublicensing is not allowed; section 10 +makes it unnecessary. + + 3. Protecting Users' Legal Rights From Anti-Circumvention Law. + + No covered work shall be deemed part of an effective technological +measure under any applicable law fulfilling obligations under article +11 of the WIPO copyright treaty adopted on 20 December 1996, or +similar laws prohibiting or restricting circumvention of such +measures. + + When you convey a covered work, you waive any legal power to forbid +circumvention of technological measures to the extent such circumvention +is effected by exercising rights under this License with respect to +the covered work, and you disclaim any intention to limit operation or +modification of the work as a means of enforcing, against the work's +users, your or third parties' legal rights to forbid circumvention of +technological measures. + + 4. Conveying Verbatim Copies. + + You may convey verbatim copies of the Program's source code as you +receive it, in any medium, provided that you conspicuously and +appropriately publish on each copy an appropriate copyright notice; +keep intact all notices stating that this License and any +non-permissive terms added in accord with section 7 apply to the code; +keep intact all notices of the absence of any warranty; and give all +recipients a copy of this License along with the Program. + + You may charge any price or no price for each copy that you convey, +and you may offer support or warranty protection for a fee. + + 5. Conveying Modified Source Versions. + + You may convey a work based on the Program, or the modifications to +produce it from the Program, in the form of source code under the +terms of section 4, provided that you also meet all of these conditions: + + a) The work must carry prominent notices stating that you modified + it, and giving a relevant date. + + b) The work must carry prominent notices stating that it is + released under this License and any conditions added under section + 7. This requirement modifies the requirement in section 4 to + "keep intact all notices". + + c) You must license the entire work, as a whole, under this + License to anyone who comes into possession of a copy. This + License will therefore apply, along with any applicable section 7 + additional terms, to the whole of the work, and all its parts, + regardless of how they are packaged. This License gives no + permission to license the work in any other way, but it does not + invalidate such permission if you have separately received it. + + d) If the work has interactive user interfaces, each must display + Appropriate Legal Notices; however, if the Program has interactive + interfaces that do not display Appropriate Legal Notices, your + work need not make them do so. + + A compilation of a covered work with other separate and independent +works, which are not by their nature extensions of the covered work, +and which are not combined with it such as to form a larger program, +in or on a volume of a storage or distribution medium, is called an +"aggregate" if the compilation and its resulting copyright are not +used to limit the access or legal rights of the compilation's users +beyond what the individual works permit. Inclusion of a covered work +in an aggregate does not cause this License to apply to the other +parts of the aggregate. + + 6. Conveying Non-Source Forms. + + You may convey a covered work in object code form under the terms +of sections 4 and 5, provided that you also convey the +machine-readable Corresponding Source under the terms of this License, +in one of these ways: + + a) Convey the object code in, or embodied in, a physical product + (including a physical distribution medium), accompanied by the + Corresponding Source fixed on a durable physical medium + customarily used for software interchange. + + b) Convey the object code in, or embodied in, a physical product + (including a physical distribution medium), accompanied by a + written offer, valid for at least three years and valid for as + long as you offer spare parts or customer support for that product + model, to give anyone who possesses the object code either (1) a + copy of the Corresponding Source for all the software in the + product that is covered by this License, on a durable physical + medium customarily used for software interchange, for a price no + more than your reasonable cost of physically performing this + conveying of source, or (2) access to copy the + Corresponding Source from a network server at no charge. + + c) Convey individual copies of the object code with a copy of the + written offer to provide the Corresponding Source. This + alternative is allowed only occasionally and noncommercially, and + only if you received the object code with such an offer, in accord + with subsection 6b. + + d) Convey the object code by offering access from a designated + place (gratis or for a charge), and offer equivalent access to the + Corresponding Source in the same way through the same place at no + further charge. You need not require recipients to copy the + Corresponding Source along with the object code. If the place to + copy the object code is a network server, the Corresponding Source + may be on a different server (operated by you or a third party) + that supports equivalent copying facilities, provided you maintain + clear directions next to the object code saying where to find the + Corresponding Source. Regardless of what server hosts the + Corresponding Source, you remain obligated to ensure that it is + available for as long as needed to satisfy these requirements. + + e) Convey the object code using peer-to-peer transmission, provided + you inform other peers where the object code and Corresponding + Source of the work are being offered to the general public at no + charge under subsection 6d. + + A separable portion of the object code, whose source code is excluded +from the Corresponding Source as a System Library, need not be +included in conveying the object code work. + + A "User Product" is either (1) a "consumer product", which means any +tangible personal property which is normally used for personal, family, +or household purposes, or (2) anything designed or sold for incorporation +into a dwelling. In determining whether a product is a consumer product, +doubtful cases shall be resolved in favor of coverage. For a particular +product received by a particular user, "normally used" refers to a +typical or common use of that class of product, regardless of the status +of the particular user or of the way in which the particular user +actually uses, or expects or is expected to use, the product. A product +is a consumer product regardless of whether the product has substantial +commercial, industrial or non-consumer uses, unless such uses represent +the only significant mode of use of the product. + + "Installation Information" for a User Product means any methods, +procedures, authorization keys, or other information required to install +and execute modified versions of a covered work in that User Product from +a modified version of its Corresponding Source. The information must +suffice to ensure that the continued functioning of the modified object +code is in no case prevented or interfered with solely because +modification has been made. + + If you convey an object code work under this section in, or with, or +specifically for use in, a User Product, and the conveying occurs as +part of a transaction in which the right of possession and use of the +User Product is transferred to the recipient in perpetuity or for a +fixed term (regardless of how the transaction is characterized), the +Corresponding Source conveyed under this section must be accompanied +by the Installation Information. But this requirement does not apply +if neither you nor any third party retains the ability to install +modified object code on the User Product (for example, the work has +been installed in ROM). + + The requirement to provide Installation Information does not include a +requirement to continue to provide support service, warranty, or updates +for a work that has been modified or installed by the recipient, or for +the User Product in which it has been modified or installed. Access to a +network may be denied when the modification itself materially and +adversely affects the operation of the network or violates the rules and +protocols for communication across the network. + + Corresponding Source conveyed, and Installation Information provided, +in accord with this section must be in a format that is publicly +documented (and with an implementation available to the public in +source code form), and must require no special password or key for +unpacking, reading or copying. + + 7. Additional Terms. + + "Additional permissions" are terms that supplement the terms of this +License by making exceptions from one or more of its conditions. +Additional permissions that are applicable to the entire Program shall +be treated as though they were included in this License, to the extent +that they are valid under applicable law. If additional permissions +apply only to part of the Program, that part may be used separately +under those permissions, but the entire Program remains governed by +this License without regard to the additional permissions. + + When you convey a copy of a covered work, you may at your option +remove any additional permissions from that copy, or from any part of +it. (Additional permissions may be written to require their own +removal in certain cases when you modify the work.) You may place +additional permissions on material, added by you to a covered work, +for which you have or can give appropriate copyright permission. + + Notwithstanding any other provision of this License, for material you +add to a covered work, you may (if authorized by the copyright holders of +that material) supplement the terms of this License with terms: + + a) Disclaiming warranty or limiting liability differently from the + terms of sections 15 and 16 of this License; or + + b) Requiring preservation of specified reasonable legal notices or + author attributions in that material or in the Appropriate Legal + Notices displayed by works containing it; or + + c) Prohibiting misrepresentation of the origin of that material, or + requiring that modified versions of such material be marked in + reasonable ways as different from the original version; or + + d) Limiting the use for publicity purposes of names of licensors or + authors of the material; or + + e) Declining to grant rights under trademark law for use of some + trade names, trademarks, or service marks; or + + f) Requiring indemnification of licensors and authors of that + material by anyone who conveys the material (or modified versions of + it) with contractual assumptions of liability to the recipient, for + any liability that these contractual assumptions directly impose on + those licensors and authors. + + All other non-permissive additional terms are considered "further +restrictions" within the meaning of section 10. If the Program as you +received it, or any part of it, contains a notice stating that it is +governed by this License along with a term that is a further +restriction, you may remove that term. If a license document contains +a further restriction but permits relicensing or conveying under this +License, you may add to a covered work material governed by the terms +of that license document, provided that the further restriction does +not survive such relicensing or conveying. + + If you add terms to a covered work in accord with this section, you +must place, in the relevant source files, a statement of the +additional terms that apply to those files, or a notice indicating +where to find the applicable terms. + + Additional terms, permissive or non-permissive, may be stated in the +form of a separately written license, or stated as exceptions; +the above requirements apply either way. + + 8. Termination. + + You may not propagate or modify a covered work except as expressly +provided under this License. Any attempt otherwise to propagate or +modify it is void, and will automatically terminate your rights under +this License (including any patent licenses granted under the third +paragraph of section 11). + + However, if you cease all violation of this License, then your +license from a particular copyright holder is reinstated (a) +provisionally, unless and until the copyright holder explicitly and +finally terminates your license, and (b) permanently, if the copyright +holder fails to notify you of the violation by some reasonable means +prior to 60 days after the cessation. + + Moreover, your license from a particular copyright holder is +reinstated permanently if the copyright holder notifies you of the +violation by some reasonable means, this is the first time you have +received notice of violation of this License (for any work) from that +copyright holder, and you cure the violation prior to 30 days after +your receipt of the notice. + + Termination of your rights under this section does not terminate the +licenses of parties who have received copies or rights from you under +this License. If your rights have been terminated and not permanently +reinstated, you do not qualify to receive new licenses for the same +material under section 10. + + 9. Acceptance Not Required for Having Copies. + + You are not required to accept this License in order to receive or +run a copy of the Program. Ancillary propagation of a covered work +occurring solely as a consequence of using peer-to-peer transmission +to receive a copy likewise does not require acceptance. However, +nothing other than this License grants you permission to propagate or +modify any covered work. These actions infringe copyright if you do +not accept this License. Therefore, by modifying or propagating a +covered work, you indicate your acceptance of this License to do so. + + 10. Automatic Licensing of Downstream Recipients. + + Each time you convey a covered work, the recipient automatically +receives a license from the original licensors, to run, modify and +propagate that work, subject to this License. You are not responsible +for enforcing compliance by third parties with this License. + + An "entity transaction" is a transaction transferring control of an +organization, or substantially all assets of one, or subdividing an +organization, or merging organizations. If propagation of a covered +work results from an entity transaction, each party to that +transaction who receives a copy of the work also receives whatever +licenses to the work the party's predecessor in interest had or could +give under the previous paragraph, plus a right to possession of the +Corresponding Source of the work from the predecessor in interest, if +the predecessor has it or can get it with reasonable efforts. + + You may not impose any further restrictions on the exercise of the +rights granted or affirmed under this License. For example, you may +not impose a license fee, royalty, or other charge for exercise of +rights granted under this License, and you may not initiate litigation +(including a cross-claim or counterclaim in a lawsuit) alleging that +any patent claim is infringed by making, using, selling, offering for +sale, or importing the Program or any portion of it. + + 11. Patents. + + A "contributor" is a copyright holder who authorizes use under this +License of the Program or a work on which the Program is based. The +work thus licensed is called the contributor's "contributor version". + + A contributor's "essential patent claims" are all patent claims +owned or controlled by the contributor, whether already acquired or +hereafter acquired, that would be infringed by some manner, permitted +by this License, of making, using, or selling its contributor version, +but do not include claims that would be infringed only as a +consequence of further modification of the contributor version. For +purposes of this definition, "control" includes the right to grant +patent sublicenses in a manner consistent with the requirements of +this License. + + Each contributor grants you a non-exclusive, worldwide, royalty-free +patent license under the contributor's essential patent claims, to +make, use, sell, offer for sale, import and otherwise run, modify and +propagate the contents of its contributor version. + + In the following three paragraphs, a "patent license" is any express +agreement or commitment, however denominated, not to enforce a patent +(such as an express permission to practice a patent or covenant not to +sue for patent infringement). To "grant" such a patent license to a +party means to make such an agreement or commitment not to enforce a +patent against the party. + + If you convey a covered work, knowingly relying on a patent license, +and the Corresponding Source of the work is not available for anyone +to copy, free of charge and under the terms of this License, through a +publicly available network server or other readily accessible means, +then you must either (1) cause the Corresponding Source to be so +available, or (2) arrange to deprive yourself of the benefit of the +patent license for this particular work, or (3) arrange, in a manner +consistent with the requirements of this License, to extend the patent +license to downstream recipients. "Knowingly relying" means you have +actual knowledge that, but for the patent license, your conveying the +covered work in a country, or your recipient's use of the covered work +in a country, would infringe one or more identifiable patents in that +country that you have reason to believe are valid. + + If, pursuant to or in connection with a single transaction or +arrangement, you convey, or propagate by procuring conveyance of, a +covered work, and grant a patent license to some of the parties +receiving the covered work authorizing them to use, propagate, modify +or convey a specific copy of the covered work, then the patent license +you grant is automatically extended to all recipients of the covered +work and works based on it. + + A patent license is "discriminatory" if it does not include within +the scope of its coverage, prohibits the exercise of, or is +conditioned on the non-exercise of one or more of the rights that are +specifically granted under this License. You may not convey a covered +work if you are a party to an arrangement with a third party that is +in the business of distributing software, under which you make payment +to the third party based on the extent of your activity of conveying +the work, and under which the third party grants, to any of the +parties who would receive the covered work from you, a discriminatory +patent license (a) in connection with copies of the covered work +conveyed by you (or copies made from those copies), or (b) primarily +for and in connection with specific products or compilations that +contain the covered work, unless you entered into that arrangement, +or that patent license was granted, prior to 28 March 2007. + + Nothing in this License shall be construed as excluding or limiting +any implied license or other defenses to infringement that may +otherwise be available to you under applicable patent law. + + 12. No Surrender of Others' Freedom. + + If conditions are imposed on you (whether by court order, agreement or +otherwise) that contradict the conditions of this License, they do not +excuse you from the conditions of this License. If you cannot convey a +covered work so as to satisfy simultaneously your obligations under this +License and any other pertinent obligations, then as a consequence you may +not convey it at all. For example, if you agree to terms that obligate you +to collect a royalty for further conveying from those to whom you convey +the Program, the only way you could satisfy both those terms and this +License would be to refrain entirely from conveying the Program. + + 13. Use with the GNU Affero General Public License. + + Notwithstanding any other provision of this License, you have +permission to link or combine any covered work with a work licensed +under version 3 of the GNU Affero General Public License into a single +combined work, and to convey the resulting work. The terms of this +License will continue to apply to the part which is the covered work, +but the special requirements of the GNU Affero General Public License, +section 13, concerning interaction through a network will apply to the +combination as such. + + 14. Revised Versions of this License. + + The Free Software Foundation may publish revised and/or new versions of +the GNU General Public License from time to time. Such new versions will +be similar in spirit to the present version, but may differ in detail to +address new problems or concerns. + + Each version is given a distinguishing version number. If the +Program specifies that a certain numbered version of the GNU General +Public License "or any later version" applies to it, you have the +option of following the terms and conditions either of that numbered +version or of any later version published by the Free Software +Foundation. If the Program does not specify a version number of the +GNU General Public License, you may choose any version ever published +by the Free Software Foundation. + + If the Program specifies that a proxy can decide which future +versions of the GNU General Public License can be used, that proxy's +public statement of acceptance of a version permanently authorizes you +to choose that version for the Program. + + Later license versions may give you additional or different +permissions. However, no additional obligations are imposed on any +author or copyright holder as a result of your choosing to follow a +later version. + + 15. Disclaimer of Warranty. + + THERE IS NO WARRANTY FOR THE PROGRAM, TO THE EXTENT PERMITTED BY +APPLICABLE LAW. EXCEPT WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT +HOLDERS AND/OR OTHER PARTIES PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY +OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, +THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR +PURPOSE. THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE PROGRAM +IS WITH YOU. SHOULD THE PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF +ALL NECESSARY SERVICING, REPAIR OR CORRECTION. + + 16. Limitation of Liability. + + IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING +WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MODIFIES AND/OR CONVEYS +THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES, INCLUDING ANY +GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE +USE OR INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED TO LOSS OF +DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD +PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER PROGRAMS), +EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF +SUCH DAMAGES. + + 17. Interpretation of Sections 15 and 16. + + If the disclaimer of warranty and limitation of liability provided +above cannot be given local legal effect according to their terms, +reviewing courts shall apply local law that most closely approximates +an absolute waiver of all civil liability in connection with the +Program, unless a warranty or assumption of liability accompanies a +copy of the Program in return for a fee. + + END OF TERMS AND CONDITIONS + + How to Apply These Terms to Your New Programs + + If you develop a new program, and you want it to be of the greatest +possible use to the public, the best way to achieve this is to make it +free software which everyone can redistribute and change under these terms. + + To do so, attach the following notices to the program. It is safest +to attach them to the start of each source file to most effectively +state the exclusion of warranty; and each file should have at least +the "copyright" line and a pointer to where the full notice is found. + + + Copyright (C) + + This program is free software: you can redistribute it and/or modify + it under the terms of the GNU General Public License as published by + the Free Software Foundation, either version 3 of the License, or + (at your option) any later version. + + This program is distributed in the hope that it will be useful, + but WITHOUT ANY WARRANTY; without even the implied warranty of + MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the + GNU General Public License for more details. + + You should have received a copy of the GNU General Public License + along with this program. If not, see . + +Also add information on how to contact you by electronic and paper mail. + + If the program does terminal interaction, make it output a short +notice like this when it starts in an interactive mode: + + Copyright (C) + This program comes with ABSOLUTELY NO WARRANTY; for details type `show w'. + This is free software, and you are welcome to redistribute it + under certain conditions; type `show c' for details. + +The hypothetical commands `show w' and `show c' should show the appropriate +parts of the General Public License. Of course, your program's commands +might be different; for a GUI interface, you would use an "about box". + + You should also get your employer (if you work as a programmer) or school, +if any, to sign a "copyright disclaimer" for the program, if necessary. +For more information on this, and how to apply and follow the GNU GPL, see +. + + The GNU General Public License does not permit incorporating your program +into proprietary programs. If your program is a subroutine library, you +may consider it more useful to permit linking proprietary applications with +the library. If this is what you want to do, use the GNU Lesser General +Public License instead of this License. But first, please read +. diff --git a/root/opt/dmarc-srg/README.md b/root/opt/dmarc-srg/README.md new file mode 100644 index 0000000..acc786d --- /dev/null +++ b/root/opt/dmarc-srg/README.md @@ -0,0 +1,137 @@ +# DmarcSrg +A php parser, viewer and summary report generator for incoming DMARC reports. + +## Features +* View a table of parsed reports; +* Easily identify potential DMARC related issues through colors; +* Filter report list by domain, month, reporting organization and more; +* View DKIM/SPF details for each report; +* Password protection of the web interface (can be disabled); +* Receiving and processing incoming DMARC reports from specified mailboxes; +* Receiving and processing incoming DMARC reports from specified server local directories; +* Uploading and processing incoming DMARC reports by using the web interface; +* Ability to configure deletion of old reports from the database and mailboxes; +* Generation of summary reports for the last week, last month or last N days and sending them to the specified mailbox; +* Uses AJAX calls to the backend; no external Javascript libraries are needed; + +## Screenshots + +### Screenshot: Report List +![Report list](/screenshots/dmarc-srg-report-list-small.png?raw=true "Screenshot: Report List") + +[Larger version](/screenshots/dmarc-srg-report-list.png?raw=true) + +### Screenshot: Report Detail +![Report detail](/screenshots/dmarc-srg-report-detail-small.png?raw=true "Screenshot: Report Detail") + +[Larger version](/screenshots/dmarc-srg-report-detail.png?raw=true) + +### Screenshot: Admin Panel +![Admin Panel](/screenshots/dmarc-srg-admin-panel-small.png?raw=true "Screenshot: Admin Panel") + +[Larger version](/screenshots/dmarc-srg-admin-panel.png?raw=true) + +## Installation and Configuration + +Ensure that all the files are in their own sub-folder. + +### Requirements +* MariaDB or MySQL +* PHP 7.3 or higher +* Installed php-mysql, php-xml, php-zip, php-json, and php-imap +* A working webserver (not necessary) + +### Create the database +Login as mysql root user to the MariaDB/MySQL server using the shell, run: + +`# mysql -u root -p` + +and type the password. + +Once you have a MariaDB or MySQL prompt, create a new database, where `dmarc` is a new database name (you can specify a different database name): + +`CREATE database dmarc;` + +Create a new user called `dmarc_user` for the new database (you can specify a different user name): + +`GRANT all on dmarc.* to dmarc_user@localhost identified by 'new_user_password';` + +**Remember** to replace `new_user_password` with a more secure one! + +**Note:** If there is a need to use an existing database with other tables, you can specify the table prefix in the `conf/conf.php` file. + +### conf.php +Copy `conf/conf.sample.php` to `conf/conf.php` and configure it. Learn more by reading the comments in it. + +### Database initialization +There are two ways to do that: by using the web interface or by running the follow command: + +`$ php utils/database_admin.php init` + +**Note:** This command must be run from the directory which contains the directories classes and config. + +## Usage +In general, DmarcSrg is designed to automatically receive incoming DMARC reports, process them and send summary reports to the specified e-mail address, so a web interface as well as a web-server is optional. Most of the work is done by periodically running php scripts, which are located in the utils directory. + +### Utils +- `utils/check_config.php` - checks your configuration. +- `utils/database_admin.php` - performs some administration functions with the database. +- `utils/fetch_reports.php` - fetches DMARC reports from mailboxes and server local directories and saves them to the database. +- `utils/mailbox_cleaner.php` - deletes old DMARC report email messages in mailboxes. +- `utils/reportlog_cleaner.php` - deletes old log entries. +- `utils/reports_cleaner.php` - deletes old reports from the database. +- `utils/summary_report.php` - creates a summary report and sends it by email. + +You can find more detailed information about each script in the comments to it. + +**Note:** These scripts must be run from the directory which contains the directories classes and config. + +**Note:** Despite the fact that these scripts can only be run from the console, it is recommended to close access to the utils directory from the web server. + +For example, if you want to get a summary report for the last week, you should run a command like this: + +`$ cd /usr/local/share/dmarc-srg && php utils/summary_report.php domain=example.com period=lastweek` + +# Web interface +Navigate in your browser to the location of the `index.html` file. You will see the basic Report List view, allowing you to navigate through the reports that have been parsed. Using the menu go to the Admin section and create tables in the database and check the accessibility of the mailboxes if necessary. + +If Content Security Policy (CSP) is used on your web server, it is enough to add the following permissions: +- style-src 'self'; +- img-src 'self'; +- script-src 'self'; +- connect-src 'self'; +- media-src 'self'; +- form-action 'self'; + +That is, this rather strict policy will work well with the current web interface: `Content-Security-Policy: default-src 'none'; style-src 'self'; img-src 'self'; script-src 'self'; connect-src 'self'; media-src 'self'; form-action 'self'; base-uri 'none'; frame-ancestors 'none'` + +# How the report file processing works + +## General rules for processing report files +- Only files of the following formats are accepted: zip, gzip, xml. +- Reports that do not have required fields (domain, time, org, id, records, and so on) are rejected. +- Reports that have already been accepted are also rejected. +- Reports for domains that are not listed in the database as allowed for processing are rejected. The first domain is automatically added to the database from the first correct report. +- For any attempt to download a report file, an entry is added to the internal log that can be viewed in the web interface (Administration --> Logs). + +## Mailboxes +An IMAP connection is sequentially established to each mailbox, and the following actions are performed: +- Obtaining a list of unread messages. +- Checking the content of each message (number of attachments, attachment size, file extension). +- Extracting a report file from the message and parsing it and adding the report data to the database. +- If the report is successfully added to the database, the message is set as SEEN. +- If the report is rejected, the message remains marked as UNSEEN and is moved to the `failed` folder of the current mailbox. If the folder does not exist, it will be created. + +**Note:** The total number of processed messages depends on the limit specified in the configuration file. The limitation is valid for each mail box separately. + +## Local directories of the server +Each directory specified in the configuration file is scanned for presence of files in it (not recursively). Each file in each directory is processed as follows: +- Parsing the report file and adding the report data to the database. +- If the report is successfully added to the database, the file is removed from the directory. +- If the report is rejected, the file is moved to the `failed` subdirectory of the directory in which the file is currently located. If the subdirectory does not exist, it will be created. + +**Note:** The total number of processed report files depends on the limit specified in the configuration file. The limitation is valid for each directory separately. + +## Uploaded report files from the web interface +Uploading report files via the web interface is pretty standard. The upload result can be seen in a popup message and in the internal log. The number of simultaneously uploaded files and their size are limited only by the settings of your server (See `upload_max_filesize` and `post_max_size` in your `php.ini` file). + diff --git a/root/opt/dmarc-srg/admin.php b/root/opt/dmarc-srg/admin.php new file mode 100644 index 0000000..1633e9b --- /dev/null +++ b/root/opt/dmarc-srg/admin.php @@ -0,0 +1,87 @@ +. + */ + +namespace Liuch\DmarcSrg; + +use Liuch\DmarcSrg\ErrorHandler; +use Liuch\DmarcSrg\Exception\RuntimeException; + +require 'init.php'; + +if (Core::isJson()) { + try { + $core = Core::instance(); + $core->auth()->isAllowed(); + if (Core::method() == 'GET') { + Core::sendJson($core->admin()->state()); + return; + } elseif (Core::method() == 'POST') { + $data = Core::getJsonData(); + if ($data) { + $cmd = $data['cmd']; + if (in_array($cmd, [ 'initdb', 'cleandb', 'upgradedb' ])) { + if ($core->auth()->isEnabled()) { + $pwd = isset($data['password']) ? $data['password'] : null; + $core->auth()->checkAdminPassword($pwd); + } + } + if ($cmd === 'initdb') { + Core::sendJson($core->database()->initDb()); + return; + } elseif ($cmd === 'cleandb') { + Core::sendJson($core->database()->cleanDb()); + return; + } elseif ($cmd === 'checksource') { + if (isset($data['id']) && isset($data['type'])) { + $id = $data['id']; + $type = $data['type']; + if (gettype($id) === 'integer' && gettype($type) === 'string') { + Core::sendJson( + $core->admin()->checkSource($id, $type) + ); + return; + } + } + } elseif ($cmd === 'upgradedb') { + $db = Core::instance()->database(); + $db->getMapper('upgrader')->go($db::REQUIRED_VERSION); + Core::sendJson( + [ + 'error_code' => 0, + 'message' => 'Upgrated successfully' + ] + ); + return; + } + } + } + Core::sendJson([ 'error_code' => -1, 'message' => 'Bad request' ]); + } catch (RuntimeException $e) { + Core::sendJson(ErrorHandler::exceptionResult($e)); + } + return; +} elseif (Core::method() == 'GET') { + Core::sendHtml(); + return; +} + +Core::sendBad(); diff --git a/root/opt/dmarc-srg/classes/Admin.php b/root/opt/dmarc-srg/classes/Admin.php new file mode 100644 index 0000000..d852760 --- /dev/null +++ b/root/opt/dmarc-srg/classes/Admin.php @@ -0,0 +1,99 @@ +. + * + * ========================= + * + * This file contains Admin class + * + * @category API + * @package DmarcSrg + * @author Aleksey Andreev (liuch) + * @license https://www.gnu.org/licenses/gpl-3.0.html GNU/GPLv3 + */ + +namespace Liuch\DmarcSrg; + +use Liuch\DmarcSrg\Mail\MailBoxes; +use Liuch\DmarcSrg\Directories\DirectoryList; +use Liuch\DmarcSrg\Exception\LogicException; + +/** + * It's the main class for accessing administration functions. + */ +class Admin +{ + private $core = null; + + /** + * The constructor of the class + * + * @param Core $core Instace of the Core class + */ + public function __construct($core) + { + $this->core = $core; + } + + /** + * Returns information about the database, directories, and mailboxes as an array. + * + * @return array Contains fields: `database`, `state`, `mailboxes`, `directories`. + */ + public function state(): array + { + $res = []; + $res['database'] = $this->core->database()->state(); + $res['mailboxes'] = (new MailBoxes())->list(); + $res['directories'] = array_map(function ($dir) { + return $dir->toArray(); + }, (new DirectoryList())->list()); + + if ($res['database']['correct'] ?? false) { + $res['state'] = 'Ok'; + } else { + $res['state'] = 'Err'; + } + + return $res; + } + + /** + * Checks the availability of report sources. + * + * @param int $id Id of the checked source. If $id == 0 then all available sources with the passed type + * will be checked. + * @param string $type Type of the checked source. + * + * @return array Result array with `error_code` and `message` fields. + * For one resource and if there is no error, + * a field `status` will be added to the result. + */ + public function checkSource(int $id, string $type): array + { + switch ($type) { + case 'mailbox': + return (new MailBoxes())->check($id); + case 'directory': + return (new DirectoryList())->check($id); + } + throw new LogicException('Unknown resource type'); + } +} diff --git a/root/opt/dmarc-srg/classes/Auth.php b/root/opt/dmarc-srg/classes/Auth.php new file mode 100644 index 0000000..8ee7116 --- /dev/null +++ b/root/opt/dmarc-srg/classes/Auth.php @@ -0,0 +1,147 @@ +. + * + * ========================= + * + * This file contains Auth class. + * + * @category API + * @package DmarcSrg + * @author Aleksey Andreev (liuch) + * @license https://www.gnu.org/licenses/gpl-3.0.html GNU/GPLv3 + */ + +namespace Liuch\DmarcSrg; + +use Liuch\DmarcSrg\Exception\AuthException; + +/** + * Class for working with authentication data. + */ +class Auth +{ + private $core = null; + + /** + * The constructor + * + * @param Core $core + */ + public function __construct(object $core) + { + $this->core = $core; + } + + /** + * Checks if authentication is enabled. + * + * The method examines the key `password` in $admin array from the config file. + * It must exist and not be null. + * + * @return bool + */ + public function isEnabled(): bool + { + return $this->core->config('admin/password') !== null; + } + + /** + * The authetication with a username and password. + * + * This method checks the password passed in $password and creates a user session. + * This method throws an exception if the passed password is wrong. + * The password with an empty string is always wrong! + * + * @param string $username - Must be an empty string, it is currently not used. + * @param string $password - Must not be an empty string. + * + * @return array Array with `error_code` and `message` fields. + */ + public function login(string $username, string $password): array + { + if ($username !== '' || $this->core->config('admin/password') === '' || !$this->isAdminPassword($password)) { + throw new AuthException('Authentication failed. Try again'); + } + $this->core->userId(0); + return [ + 'error_code' => 0, + 'message' => 'Authentication succeeded' + ]; + } + + /** + * Removes the current user's session. + * + * @return array Array with `error_code` and `message` fields. + */ + public function logout(): array + { + $this->core->destroySession(); + return [ + 'error_code' => 0, + 'message' => 'Logged out successfully' + ]; + } + + /** + * Checks if the user session exists. + * + * This method throws an exception if authentication needed. + * + * @return void + */ + public function isAllowed(): void + { + if ($this->isEnabled()) { + if ($this->core->userId() === false) { + throw new AuthException('Authentication needed', -2); + } + } + } + + /** + * Checks if the passed password is the admin password. + * + * Throws an exception if the passed password is not the admin password. + * + * @param string $password Password to check + * + * @return void + */ + public function checkAdminPassword(string $password): void + { + if (!$this->isAdminPassword($password)) { + throw new AuthException('Incorrect password'); + } + } + + /** + * Checks if $password equals the admin password. + * + * @param string $password Password to check + * + * @return bool + */ + private function isAdminPassword(string $password): bool + { + return $password === $this->core->config('admin/password'); + } +} diff --git a/root/opt/dmarc-srg/classes/Common.php b/root/opt/dmarc-srg/classes/Common.php new file mode 100644 index 0000000..a33feb2 --- /dev/null +++ b/root/opt/dmarc-srg/classes/Common.php @@ -0,0 +1,50 @@ +. + * + * ========================= + * + * This file contains common classes + * + * @category Common + * @package DmarcSrg + * @author Aleksey Andreev (liuch) + * @license https://www.gnu.org/licenses/gpl-3.0.html GNU/GPLv3 + */ + +namespace Liuch\DmarcSrg; + +/** + * Static common arrays + */ +class Common +{ + /** + * This array needs for converting the align result text constant to integer value and back + * in Report and ReportList classes + */ + public static $align_res = [ 'fail', 'unknown', 'pass' ]; + + /** + * This array needs for converting the the disposition result text constant to integer value and back + * in Report and ReportList classes + */ + public static $disposition = [ 'reject', 'quarantine', 'none' ]; +} diff --git a/root/opt/dmarc-srg/classes/Config.php b/root/opt/dmarc-srg/classes/Config.php new file mode 100644 index 0000000..a853543 --- /dev/null +++ b/root/opt/dmarc-srg/classes/Config.php @@ -0,0 +1,89 @@ +. + * + * ========================= + * + * This file contains the class Config + * + * @category API + * @package DmarcSrg + * @author Aleksey Andreev (liuch) + * @license https://www.gnu.org/licenses/gpl-3.0.html GNU/GPLv3 + */ + +namespace Liuch\DmarcSrg; + +use Liuch\DmarcSrg\Exception\LogicException; + +/** + * This class is for storing configuration data to avoid using globas variables + */ +class Config +{ + private $data = []; + + /** + * The constructor + * + * @param string $config_file A php config file to load. + */ + public function __construct(string $config_file) + { + require($config_file); + foreach ([ + 'debug', 'database', 'mailboxes', 'directories', + 'admin', 'mailer', 'fetcher', 'cleaner' + ] as $key + ) { + $this->data[$key] = $$key ?? null; + } + } + + /** + * Returns config value by its name + * + * @param string $name Setting name. Hierarchy supported via '/' + * @param mixed $default Value to be returned if the required config item is missing or null + * + * @return mixed + */ + public function get(string $name, $default = null) + { + $nm_i = 0; + $path = explode('/', $name); + $data = $this->data; + do { + $key = $path[$nm_i++]; + if (empty($key)) { + throw new LogicException('Incorrect setting name: ' .$name); + } + if (!isset($data[$key])) { + return $default; + } + $data = $data[$key]; + if (!isset($path[$nm_i])) { + return $data ?? $default; + } + } while (gettype($data) === 'array'); + + return $default; + } +} diff --git a/root/opt/dmarc-srg/classes/Core.php b/root/opt/dmarc-srg/classes/Core.php new file mode 100644 index 0000000..00dd689 --- /dev/null +++ b/root/opt/dmarc-srg/classes/Core.php @@ -0,0 +1,362 @@ +. + * + * ========================= + * + * This file contains the Core class + * + * @category API + * @package DmarcSrg + * @author Aleksey Andreev (liuch) + * @license https://www.gnu.org/licenses/gpl-3.0.html GNU/GPLv3 + */ + +namespace Liuch\DmarcSrg; + +use Liuch\DmarcSrg\Exception\SoftException; +use Liuch\DmarcSrg\Exception\LogicException; + +/** + * It's class for accessing to most methods for working with http, json data, + * the user session, getting instances of some classes + */ +class Core +{ + public const APP_VERSION = '1.7'; + private const SESSION_NAME = 'session'; + private const HTML_FILE_NAME = 'index.html'; + + private $modules = []; + private static $instance = null; + + /** + * The constructor + * + * @param array $params Array with modules to be bind to + */ + public function __construct($params) + { + foreach ([ 'admin', 'auth', 'config', 'database', 'ehandler', 'status' ] as $key) { + if (isset($params[$key])) { + $this->modules[$key] = $params[$key]; + } + } + self::$instance = $this; + } + + /** + * Returns the method of the current http request. + * + * @return string http method + */ + public static function method(): string + { + return $_SERVER['REQUEST_METHOD']; + } + + /** + * Returns array of request headers in lowercase mode. + * + * @return array + */ + public static function getHeaders(): array + { + return array_change_key_case(getallheaders(), CASE_LOWER); + } + + /** + * Sets or gets the current user's id + * + * In case $id is null, the method returns the current user's id. + * In case $id is integer value, the method sets this value as the current user's id. + * It returns false if there is an error. + * + * @param int|void $id User id to set it. + * + * @return int|bool User id or false in case of error. + */ + public function userId($id = null) + { + $start_f = false; + if ((self::cookie(self::SESSION_NAME) !== '' || $id !== null) && session_status() !== PHP_SESSION_ACTIVE) { + $start_f = true; + self::sessionStart(); + } + $res = null; + if (gettype($id) === 'integer') { + $_SESSION['user_id'] = $id; + } + $res = isset($_SESSION['user_id']) ? intval($_SESSION['user_id']) : false; + if ($start_f) { + session_write_close(); + } + return $res; + } + + /** + * Deletes the session of the current user and the corresponding cookie. + * + * @return void + */ + public function destroySession(): void + { + if (self::cookie(self::SESSION_NAME)) { + if (session_status() !== PHP_SESSION_ACTIVE) { + self::sessionStart(); + } + $_SESSION = []; + if (ini_get('session.use_cookies')) { + $scp = session_get_cookie_params(); + $cep = [ + 'expires' => time() - 42000, + 'path' => $scp['path'], + 'domain' => $scp['domain'], + 'secure' => $scp['secure'], + 'httponly' => $scp['httponly'], + 'samesite' => $scp['samesite'] + ]; + setcookie(self::SESSION_NAME, '', $cep); + session_write_close(); + } + } + } + + /** + * Returns true if the http request asks for json data. + * + * @return bool + */ + public static function isJson(): bool + { + $headers = self::getHeaders(); + return (isset($headers['accept']) && $headers['accept'] === 'application/json'); + } + + /** + * Sends the html file to the client. + * + * @return void + */ + public static function sendHtml(): void + { + if (file_exists(Core::HTML_FILE_NAME)) { + readfile(Core::HTML_FILE_NAME); + } + } + + /** + * Sends data from an array as json string to the client. + * + * @param array $data - Data to send. + * + * @return void + */ + public static function sendJson(array $data): void + { + $res_str = json_encode($data); + if ($res_str === false) { + $res_str = '[]'; + } + header('content-type: application/json; charset=UTF-8'); + echo $res_str; + } + + /** + * Sends a Bad Request response to the client. + * + * @return void + */ + public static function sendBad(): void + { + http_response_code(400); + echo 'Bad request'; + } + + /** + * Retrieves json data from the request and return it as an array. + * + * Returns an array with data or null if there is an error. + * + * @return array|null Data from the request + */ + public static function getJsonData() + { + $res = null; + $headers = self::getHeaders(); + if (isset($headers['content-type']) && $headers['content-type'] === 'application/json') { + $str = file_get_contents('php://input'); + if ($str) { + $res = json_decode($str, true); + } + } + return $res; + } + + /** + * Returns an instance of the class Auth. + * + * @return Auth + */ + public function auth() + { + return $this->getModule('auth', true); + } + + /** + * Returns an instance of the class Status. + * + * @return Status instance of Status + */ + public function status() + { + return $this->getModule('status', true); + } + + /** + * Returns an instance of the class Admin. + * + * @return Admin instance of Admin + */ + public function admin() + { + return $this->getModule('admin', true); + } + + /** + * Returns an instance of the class Database. + * + * @return DatabaseController + */ + public function database() + { + return $this->getModule('database', true); + } + + /** + * Returns an instance of the class ErrorHandler + * + * @return ErrorHandler + */ + public function errorHandler() + { + return $this->getModule('ehandler', true); + } + + /** + * Returns the current logger. + * Just a proxy method to return the logger from ErrorHandler + * + * @return LoggerInterface + */ + public function logger() + { + return $this->errorHandler()->logger(); + } + + /** + * Returns instance of the object + * + * @return self + */ + public static function instance() + { + return self::$instance; + } + + /** + * Returns the config value by its name + * + * @param string $name Config item name. Hierarchy supported via '/' + * @param mixed $default Value to be returned if the required config item is missing or null + * + * @return mixed + */ + public function config(string $name, $default = null) + { + return $this->getModule('config', false)->get($name, $default); + } + + /** + * Gets or sets a cookie with the specified name. + * + * @param string $name the cookie name to get or to set + * @param string|null $value + * @param array|null $params + * + * @return string|boolean The cookie value or false if there is an error + */ + private static function cookie($name, $value = null, $params = null) + { + if (!$value) { + return isset($_COOKIE[$name]) ? $_COOKIE[$name] : ''; + } + if (setcookie($name, $value, $params)) { + return $value; + } + return false; + } + + /** + * Starts the user session + * + * @return void + */ + private static function sessionStart(): void + { + if (!session_start( + [ + 'name' => self::SESSION_NAME, + 'cookie_path' => dirname($_SERVER['REQUEST_URI']), + 'cookie_httponly' => true, + 'cookie_samesite' => 'Strict' + ] + ) + ) { + throw new SoftException('Failed to start a user session'); + } + } + + /** + * Returns a module instance by its name. Lazy initialization is used. + * + * @param string $name Module name + * @param bool $core Whether to pass $this to the constructor + * + * @return object + */ + private function getModule(string $name, bool $core) + { + $module = $this->modules[$name] ?? null; + switch (gettype($module)) { + case 'array': + if ($core) { + $module = new $module[0]($this, ...($module[1] ?? [])); + } else { + $module = new $module[0](...($module[1] ?? [])); + } + $this->modules[$name] = $module; + break; + case 'NULL': + throw new LogicException('Attempt to initiate an unloaded module ' . $name); + } + return $module; + } +} diff --git a/root/opt/dmarc-srg/classes/Database/Database.php b/root/opt/dmarc-srg/classes/Database/Database.php new file mode 100644 index 0000000..143e437 --- /dev/null +++ b/root/opt/dmarc-srg/classes/Database/Database.php @@ -0,0 +1,543 @@ +. + */ + +namespace Liuch\DmarcSrg\Database; + +use Liuch\DmarcSrg\Settings\SettingString; + +class Database +{ + public const REQUIRED_VERSION = '2.0'; + + private $conn; + private static $instance = null; + + private function __construct() + { + $this->conn = null; + $this->establishConnection(); + } + + public static function connection() + { + if (!self::$instance) { + self::$instance = new self(); + } + return self::$instance->conn; + } + + public static function type() + { + global $database; + return $database['type']; + } + + public static function name() + { + global $database; + return $database['name']; + } + + public static function location() + { + global $database; + return $database['host']; + } + + /** + * Returns the prefix for tables of the database + * + * @param string $postfix String to be concatenated with the prefix. + * Usually, this is a table name. + * + * @return string + */ + public static function tablePrefix(string $postfix = ''): string + { + global $database; + return ($database['table_prefix'] ?? '') . $postfix; + } + + /** + * Returns information about the database as an array. + * + * @return array May contain the following fields: + * `tables` - an array of tables with their properties; + * `needs_upgrade` - true if the database needs upgrading; + * `correct` - true if the database is correct; + * `type` - the database type; + * `name` - the database name; + * `location` - the database location; + * `version` - the current version of the database structure; + * `message` - a state message; + * `error_code` - an error code; + */ + public static function state(): array + { + $res = []; + try { + $prefix = self::tablePrefix(); + $p_len = strlen($prefix); + if ($p_len > 0) { + $like_str = ' WHERE NAME LIKE "' . str_replace('_', '\\_', $prefix) . '%"'; + } else { + $like_str = ''; + } + $db = self::connection(); + $tables = []; + $st = $db->query( + 'SHOW TABLE STATUS FROM `' . str_replace('`', '', self::name()) . '`' . $like_str + ); + while ($row = $st->fetch(\PDO::FETCH_ASSOC)) { + $tnm = $row['Name']; + $st2 = $db->query('SELECT COUNT(*) FROM `' . $tnm . '`'); + $rows = $st2->fetch(\PDO::FETCH_NUM)[0]; + $tables[substr($tnm, $p_len)] = [ + 'engine' => $row['Engine'], + 'rows' => intval($rows), + 'data_length' => intval($row['Data_length']), + 'index_length' => intval($row['Index_length']), + 'create_time' => $row['Create_time'], + 'update_time' => $row['Update_time'] + ]; + } + foreach (array_keys(self::$schema) as $table) { + if (!isset($tables[$table])) { + $tables[$table] = false; + } + } + $exist_sys = false; + $exist_cnt = 0; + $absent_cnt = 0; + $tables_res = []; + foreach ($tables as $tname => $tval) { + $t = null; + if ($tval) { + $t = $tval; + $t['exists'] = true; + if (isset(self::$schema[$tname])) { + $exist_cnt += 1; + $t['message'] = 'Ok'; + if (!$exist_sys && $tname === 'system') { + $exist_sys = true; + } + } else { + $t['message'] = 'Unknown table'; + } + } else { + $absent_cnt += 1; + $t = [ + 'error_code' => 1, + 'message' => 'Not exist' + ]; + } + $t['name'] = $tname; + $tables_res[] = $t; + } + $res['tables'] = $tables_res; + $ver = $exist_sys ? (new SettingString('version'))->value() : null; + if ($exist_sys && $ver !== self::REQUIRED_VERSION) { + self::setDbMessage('The database structure needs upgrading', 0, $res); + $res['needs_upgrade'] = true; + } elseif ($absent_cnt == 0) { + $res['correct'] = true; + self::setDbMessage('Ok', 0, $res); + } else { + if ($exist_cnt == 0) { + self::setDbMessage('The database schema is not initiated', -1, $res); + } else { + self::setDbMessage('Incomplete set of the tables', -1, $res); + } + } + if ($ver) { + $res['version'] = $ver; + } + } catch (\Exception $e) { + $res['error_code'] = $e->getCode(); + $res['message'] = $e->getMessage(); + } + $res['type'] = self::type(); + $res['name'] = self::name(); + $res['location'] = self::location(); + + return $res; + } + + /** + * Inites the database. + * + * This method creates needed tables and indexes in the database. + * The method will fail if the database already have tables with the table prefix. + * + * @return array Result array with `error_code` and `message` fields. + */ + public static function initDb(): array + { + try { + $db = self::connection(); + $st = $db->query(self::sqlShowTablesQuery()); + try { + if ($st->fetch()) { + if (empty(self::tablePrefix())) { + throw new \Exception('The database is not empty', -4); + } else { + throw new \Exception('Database tables already exist with the given prefix', -4); + } + } + foreach (array_keys(self::$schema) as $table) { + self::createDbTable(self::tablePrefix($table), self::$schema[$table]); + } + } finally { + $st->closeCursor(); + } + $st = $db->prepare( + 'INSERT INTO `' . self::tablePrefix('system') . '` (`key`, `value`) VALUES ("version", ?)' + ); + $st->bindValue(1, self::REQUIRED_VERSION, \PDO::PARAM_STR); + $st->execute(); + $st->closeCursor(); + } catch (\Exception $e) { + return [ + 'error_code' => $e->getCode(), + 'message' => $e->getMessage() + ]; + } + return [ 'message' => 'The database has been initiated' ]; + } + + /** + * Cleans up the database. + * + * Drops tables with the table prefix in the database or all tables in the database if no table prefix is set. + * + * @return array Result array with `error_code` and `message` fields. + */ + public static function dropTables(): array + { + try { + $db = self::connection(); + $db->query('SET foreign_key_checks = 0'); + $st = $db->query(self::sqlShowTablesQuery()); + while ($table = $st->fetchColumn(0)) { + $db->query('DROP TABLE `' . $table . '`'); + } + $st->closeCursor(); + $db->query('SET foreign_key_checks = 1'); + } catch (\PDOException $e) { + return [ + 'error_code' => $e->getCode(), + 'message' => $e->getMessage() + ]; + } + return [ 'message' => 'Database tables have been dropped' ]; + } + + private function establishConnection() + { + global $database; + try { + $dsn = "{$database['type']}:host={$database['host']};dbname={$database['name']};charset=utf8"; + $this->conn = new \PDO( + $dsn, + $database['user'], + $database['password'], + [ \PDO::ATTR_ERRMODE => \PDO::ERRMODE_EXCEPTION ] + ); + $this->conn->query('SET time_zone = "+00:00"'); + } catch (\Exception $e) { + throw new \Exception($e->getMessage(), -1); + } + } + + /** + * Return SHOW TABLES SQL query string for tables with the table prefix + * + * @return string + */ + private static function sqlShowTablesQuery(): string + { + $res = 'SHOW TABLES'; + $prefix = self::tablePrefix(); + if (strlen($prefix) > 0) { + $res .= ' WHERE `tables_in_' . str_replace('`', '', self::name()) + . '` LIKE "' . str_replace('_', '\\_', $prefix) . '%"'; + } + return $res; + } + + /** + * Creates a table in the database. + * + * @param string $name Table name + * @param array $definitions Table structure + * + * @return void + */ + private static function createDbTable(string $name, array $definitions): void + { + $query = 'CREATE TABLE `' . $name . '` ('; + $col_num = 0; + foreach ($definitions['columns'] as $column) { + if ($col_num > 0) { + $query .= ', '; + } + $query .= '`' . $column['name'] . '` ' . $column['definition']; + $col_num += 1; + } + $query .= ', ' . $definitions['additional'] . ') ' . $definitions['table_options']; + self::connection()->query($query); + } + + /** + * Sets the database message and error code for the state array + * + * @param string $message Message string + * @param int $err_code Error code + * @param array $state Database state array + * + * @return void + */ + private static function setDbMessage(string $message, int $err_code, array &$state): void + { + $state['message'] = $message; + if ($err_code !== 0) { + $state['error_code'] = $err_code; + } + } + + private static $schema = [ + 'system' => [ + 'columns' => [ + [ + 'name' => 'key', + 'definition' => 'varchar(64) NOT NULL' + ], + [ + 'name' => 'value', + 'definition' => 'varchar(255) DEFAULT NULL' + ] + ], + 'additional' => 'PRIMARY KEY (`key`)', + 'table_options' => 'ENGINE=InnoDB DEFAULT CHARSET=utf8' + ], + 'domains' => [ + 'columns' => [ + [ + 'name' => 'id', + 'definition' => 'int(10) unsigned NOT NULL AUTO_INCREMENT' + ], + [ + 'name' => 'fqdn', + 'definition' => 'varchar(255) NOT NULL' + ], + [ + 'name' => 'active', + 'definition' => 'boolean NOT NULL' + ], + [ + 'name' => 'description', + 'definition' => 'TEXT NULL' + ], + [ + 'name' => 'created_time', + 'definition' => 'datetime NOT NULL' + ], + [ + 'name' => 'updated_time', + 'definition' => 'datetime NOT NULL' + ] + ], + 'additional' => 'PRIMARY KEY (`id`), UNIQUE KEY `fqdn` (`fqdn`)', + 'table_options' => 'ENGINE=InnoDB DEFAULT CHARSET=utf8' + ], + 'reports' => [ + 'columns' => [ + [ + 'name' => 'id', + 'definition' => 'int(10) unsigned NOT NULL AUTO_INCREMENT' + ], + [ + 'name' => 'domain_id', + 'definition' => 'int(10) NOT NULL' + ], + [ + 'name' => 'begin_time', + 'definition' => 'datetime NOT NULL' + ], + [ + 'name' => 'end_time', + 'definition' => 'datetime NOT NULL' + ], + [ + 'name' => 'loaded_time', + 'definition' => 'datetime NOT NULL' + ], + [ + 'name' => 'org', + 'definition' => 'varchar(255) NOT NULL' + ], + [ + 'name' => 'external_id', + 'definition' => 'varchar(255) NOT NULL' + ], + [ + 'name' => 'email', + 'definition' => 'varchar(255) NOT NULL' + ], + [ + 'name' => 'extra_contact_info', + 'definition' => 'varchar(255) NULL' + ], + [ + 'name' => 'error_string', + 'definition' => 'text NULL' + ], + [ + 'name' => 'policy_adkim', + 'definition' => 'varchar(20) NULL' + ], + [ + 'name' => 'policy_aspf', + 'definition' => 'varchar(20) NULL' + ], + [ + 'name' => 'policy_p', + 'definition' => 'varchar(20) NULL' + ], + [ + 'name' => 'policy_sp', + 'definition' => 'varchar(20) NULL' + ], + [ + 'name' => 'policy_pct', + 'definition' => 'varchar(20) NULL' + ], + [ + 'name' => 'policy_fo', + 'definition' => 'varchar(20) NULL' + ], + [ + 'name' => 'seen', + 'definition' => 'boolean NOT NULL' + ] + ], + 'additional' => 'PRIMARY KEY (`id`), UNIQUE KEY `external_id` (`domain_id`, `external_id`), KEY (`begin_time`), KEY (`end_time`), KEY `org` (`org`, `begin_time`)', + 'table_options' => 'ENGINE=InnoDB DEFAULT CHARSET=utf8' + ], + 'rptrecords' => [ + 'columns' => [ + [ + 'name' => 'id', + 'definition' => 'int(10) unsigned NOT NULL AUTO_INCREMENT' + ], + [ + 'name' => 'report_id', + 'definition' => 'int(10) unsigned NOT NULL' + ], + [ + 'name' => 'ip', + 'definition' => 'varbinary(16) NOT NULL' + ], + [ + 'name' => 'rcount', + 'definition' => 'int(10) unsigned NOT NULL' + ], + [ + 'name' => 'disposition', + 'definition' => 'tinyint unsigned NOT NULL' + ], + [ + 'name' => 'reason', + 'definition' => 'text NULL' + ], + [ + 'name' => 'dkim_auth', + 'definition' => 'text NULL' + ], + [ + 'name' => 'spf_auth', + 'definition' => 'text NULL' + ], + [ + 'name' => 'dkim_align', + 'definition' => 'tinyint unsigned NOT NULL' + ], + [ + 'name' => 'spf_align', + 'definition' => 'tinyint unsigned NOT NULL' + ], + [ + 'name' => 'envelope_to', + 'definition' => 'varchar(255) NULL' + ], + [ + 'name' => 'envelope_from', + 'definition' => 'varchar(255) NULL' + ], + [ + 'name' => 'header_from', + 'definition' => 'varchar(255) NULL' + ] + ], + 'additional' => 'PRIMARY KEY (`id`), KEY (`report_id`), KEY (`ip`)', + 'table_options' => 'ENGINE=InnoDB DEFAULT CHARSET=utf8' + ], + 'reportlog' => [ + 'columns' => [ + [ + 'name' => 'id', + 'definition' => 'int(10) unsigned NOT NULL AUTO_INCREMENT' + ], + [ + 'name' => 'domain', + 'definition' => 'varchar(255) NULL' + ], + [ + 'name' => 'external_id', + 'definition' => 'varchar(255) NULL' + ], + [ + 'name' => 'event_time', + 'definition' => 'datetime NOT NULL' + ], + [ + 'name' => 'filename', + 'definition' => 'varchar(255) NULL' + ], + [ + 'name' => 'source', + 'definition' => 'tinyint unsigned NOT NULL' + ], + [ + 'name' => 'success', + 'definition' => 'boolean NOT NULL' + ], + [ + 'name' => 'message', + 'definition' => 'text NULL' + ] + ], + 'additional' => 'PRIMARY KEY (`id`), KEY(`event_time`)', + 'table_options' => 'ENGINE=InnoDB DEFAULT CHARSET=utf8' + ] + ]; +} diff --git a/root/opt/dmarc-srg/classes/Database/DatabaseConnector.php b/root/opt/dmarc-srg/classes/Database/DatabaseConnector.php new file mode 100644 index 0000000..a5f7fd5 --- /dev/null +++ b/root/opt/dmarc-srg/classes/Database/DatabaseConnector.php @@ -0,0 +1,131 @@ +. + * + * ========================= + * + * This file contains the abstract DatabaseConnector class + * + * @category API + * @package DmarcSrg + * @author Aleksey Andreev (liuch) + * @license https://www.gnu.org/licenses/gpl-3.0.html GNU/GPLv3 + */ + +namespace Liuch\DmarcSrg\Database; + +use Liuch\DmarcSrg\Exception\LogicException; + +abstract class DatabaseConnector +{ + protected static $names = [ + 'domain' => 'DomainMapper', + 'report' => 'ReportMapper', + 'report-log' => 'ReportLogMapper', + 'setting' => 'SettingMapper', + 'statistics' => 'StatisticsMapper', + 'upgrader' => 'UpgraderMapper' + ]; + + protected $host = null; + protected $name = null; + protected $user = null; + protected $password = null; + protected $prefix = ''; + protected $mappers = []; + + /** + * The constructor + * + * @param array $conf Configuration data from the conf.php file + */ + public function __construct(array $conf) + { + $this->host = $conf['host'] ?? ''; + $this->name = $conf['name'] ?? ''; + $this->user = $conf['user'] ?? ''; + $this->password = $conf['password'] ?? ''; + $this->prefix = $conf['table_prefix'] ?? ''; + } + + /** + * Returns an instance of PDO class + * + * @return PDO + */ + abstract public function dbh(): object; + + /** + * Returns the database state as an array + * + * @return array + */ + abstract public function state(): array; + + /** + * Returns a data mapper by its name. + * + * @param string $name Mapper name + * + * @return object + */ + public function getMapper(string $name): object + { + if (isset($this->mappers[$name])) { + return $this->mappers[$name]; + } + + if (!isset(self::$names[$name])) { + throw new LogicException('Unknown mapper name: ' . $name); + } + + $mapper_name = (new \ReflectionClass($this))->getNamespaceName() . '\\' . self::$names[$name]; + $mapper = new $mapper_name($this); + $this->mappers[$name] = $mapper; + return $mapper; + } + + /** + * Inites the database. + * + * @return void + */ + abstract public function initDb(string $version): void; + + /** + * Cleans up the database + * + * @return void + */ + abstract public function cleanDb(): void; + + /** + * Returns the prefix for tables of the database + * + * @param string $postfix String to be concatenated with the prefix. + * Usually, this is a table name. + * + * @return string + */ + public function tablePrefix(string $postfix = ''): string + { + return $this->prefix . $postfix; + } +} diff --git a/root/opt/dmarc-srg/classes/Database/DatabaseController.php b/root/opt/dmarc-srg/classes/Database/DatabaseController.php new file mode 100644 index 0000000..481e706 --- /dev/null +++ b/root/opt/dmarc-srg/classes/Database/DatabaseController.php @@ -0,0 +1,184 @@ +. + * + * ========================= + * + * This file contains the DatabaseController class + * + * @category API + * @package DmarcSrg + * @author Aleksey Andreev (liuch) + * @license https://www.gnu.org/licenses/gpl-3.0.html GNU/GPLv3 + */ + +namespace Liuch\DmarcSrg\Database; + +use Liuch\DmarcSrg\Exception\RuntimeException; +use Liuch\DmarcSrg\Exception\DatabaseFatalException; + +/** + * Proxy class for accessing a database of the selected type + */ +class DatabaseController +{ + public const REQUIRED_VERSION = '3.0'; + + private $conf_data = null; + private $connector = null; + + /** + * The constructor + * + * @param Core $core Instace of the Core class + * @param class $connector The connector class of the current database + */ + public function __construct($core, $connector = null) + { + $this->conf_data = $core->config('database'); + $this->connector = $connector; + } + + /** + * Returns the database type + * + * @return string + */ + public function type(): string + { + return $this->conf_data['type'] ?? ''; + } + + /** + * Returns the database name + * + * @return string + */ + public function name(): string + { + return $this->conf_data['name'] ?? ''; + } + + /** + * Returns the database host + * + * @return string + */ + public function location(): string + { + return $this->conf_data['host'] ?? ''; + } + + /** + * Returns information about the database as an array. + * + * @return array May contain the following fields: + * `tables` - an array of tables with their properties; + * `needs_upgrade` - true if the database needs upgrading; + * `correct` - true if the database is correct; + * `type` - the database type; + * `name` - the database name; + * `location` - the database location; + * `version` - the current version of the database structure; + * `message` - a state message; + * `error_code` - an error code; + */ + public function state(): array + { + $this->ensureConnector(); + + $res = $this->connector->state(); + $res['type'] = $this->type(); + $res['name'] = $this->name(); + $res['location'] = $this->location(); + if (($res['correct'] ?? false) && ($res['version'] ?? 'null') !== self::REQUIRED_VERSION) { + $res['correct'] = false; + $res['message'] = 'The database structure needs upgrading'; + $res['needs_upgrade'] = true; + } + return $res; + } + + /** + * Inites the database. + * + * This method creates needed tables and indexes in the database. + * The method will fail if the database already have tables with the table prefix. + * + * @return array Result array with `error_code` and `message` fields. + */ + public function initDb(): array + { + $this->ensureConnector(); + $this->connector->initDb(self::REQUIRED_VERSION); + return [ 'message' => 'The database has been initiated' ]; + } + + /** + * Cleans up the database. + * + * Drops tables with the table prefix in the database or all tables in the database if no table prefix is set. + * + * @return array Result array with `error_code` and `message` fields. + */ + public function cleanDb(): array + { + $this->ensureConnector(); + $this->connector->cleanDb(); + return [ 'message' => 'The database tables have been dropped' ]; + } + + /** + * Returns a data mapper by its name from the current database connector + * + * @param string $name Mapper name + * + * @return object + */ + public function getMapper(string $name): object + { + $this->ensureConnector(); + return $this->connector->getMapper($name); + } + + /** + * Finds the connector of the specified database type and initializes it + * if it hasn't already been initialized + * + * @return void + */ + private function ensureConnector(): void + { + if (!$this->connector) { + switch ($this->conf_data['type']) { + case 'mysql': + case 'mariadb': + $type = 'mariadb'; + break; + default: + throw new RuntimeException('Unknown database type: ' . $this->conf_data['type']); + $type = null; + break; + } + $c_name = __NAMESPACE__ . '\\' . \ucfirst($type) . '\\Connector'; + $this->connector = new $c_name($this->conf_data); + } + } +} diff --git a/root/opt/dmarc-srg/classes/Database/DatabaseUpgrader.php b/root/opt/dmarc-srg/classes/Database/DatabaseUpgrader.php new file mode 100644 index 0000000..505567e --- /dev/null +++ b/root/opt/dmarc-srg/classes/Database/DatabaseUpgrader.php @@ -0,0 +1,121 @@ +. + */ + +namespace Liuch\DmarcSrg\Database; + +use PDO; +use Exception; +use Liuch\DmarcSrg\Settings\SettingString; + +class DatabaseUpgrader +{ + public static function go() + { + $ver = (new SettingString('version'))->value(); + if ($ver == '') { + $ver = 'null'; + } + + while ($ver !== Database::REQUIRED_VERSION) { + if (!isset(self::$upways['ver_' . $ver])) { + throw new Exception('Upgrading failed: There is no way to upgrade from ' . $ver . ' to ' . Database::REQUIRED_VERSION, -1); + } + $um = self::$upways['ver_' . $ver]; + $ver = self::$um(); + } + } + + private static $upways = [ + 'ver_null' => 'upNull', + 'ver_0.1' => 'up01', + 'ver_1.0' => 'up10' + ]; + + private static function upNull() + { + $db = Database::connection(); + $db->beginTransaction(); + try { + $db->query( + 'INSERT INTO `' . Database::tablePrefix('system') . '` (`key`, `value`) VALUES ("version", "0.1")' + ); + $db->commit(); + } catch (Exception $e) { + $db->rollBack(); + throw $e; + } + return '0.1'; + } + + private static function up01() + { + $db = Database::connection(); + $db->beginTransaction(); + try { + $dom_tn = Database::tablePrefix('domains'); + if (!self::columnExists($db, $dom_tn, 'active')) { + $db->query('ALTER TABLE `' . $dom_tn . '` ADD COLUMN `active` boolean NOT NULL AFTER `fqdn`'); + } + if (!self::columnExists($db, $dom_tn, 'created_time')) { + $db->query('ALTER TABLE `' . $dom_tn . '` ADD COLUMN `created_time` datetime NOT NULL'); + } + if (!self::columnExists($db, $dom_tn, 'updated_time')) { + $db->query('ALTER TABLE `' . $dom_tn . '` ADD COLUMN `updated_time` datetime NOT NULL'); + } + $db->query('UPDATE `' . $dom_tn . '` SET `active` = TRUE, `created_time` = NOW(), `updated_time` = NOW()'); + $db->query('UPDATE `' . Database::tablePrefix('system') . '` SET `value` = "1.0" WHERE `key` = "version"'); + $db->commit(); + } catch (Exception $e) { + $db->rollBack(); + throw $e; + } + return '1.0'; + } + + private static function up10() + { + $db = Database::connection(); + $db->beginTransaction(); + try { + $sys_tn = Database::tablePrefix('system'); + $db->query('ALTER TABLE `' . $sys_tn . '` MODIFY COLUMN `key` varchar(64) NOT NULL'); + $db->query('UPDATE `' . $sys_tn . '` SET `value` = "2.0" WHERE `key` = "version"'); + $db->commit(); + } catch (Exception $d) { + $db->rollBack(); + throw $e; + } + return '2.0'; + } + + private static function columnExists($db, $table, $column) + { + $st = $db->prepare('SELECT NULL FROM `INFORMATION_SCHEMA`.`COLUMNS` WHERE `table_schema` = ? AND `table_name` = ? AND `column_name` = ?'); + $st->bindValue(1, Database::name(), PDO::PARAM_STR); + $st->bindValue(2, $table, PDO::PARAM_STR); + $st->bindValue(3, $column, PDO::PARAM_STR); + $st->execute(); + $res = $st->fetch(PDO::FETCH_NUM); + $st->closeCursor(); + return $res ? true : false; + } +} diff --git a/root/opt/dmarc-srg/classes/Database/DomainMapperInterface.php b/root/opt/dmarc-srg/classes/Database/DomainMapperInterface.php new file mode 100644 index 0000000..df242d2 --- /dev/null +++ b/root/opt/dmarc-srg/classes/Database/DomainMapperInterface.php @@ -0,0 +1,96 @@ +. + * + * ========================= + * + * This file contains the DomainMapperInterface + * + * @category API + * @package DmarcSrg + * @author Aleksey Andreev (liuch) + * @license https://www.gnu.org/licenses/gpl-3.0.html GNU/GPLv3 + */ + +namespace Liuch\DmarcSrg\Database; + +interface DomainMapperInterface +{ + /** + * Return true if the domain exists or false otherwise. + * + * @param array $data Array with domain data to search + * + * @return bool + */ + public function exists(array &$data): bool; + + /** + * Fetch the domain data from the database by its id or name + * + * @param array $data Domain data to update + * + * @return void + */ + public function fetch(array &$data): void; + + /** + * Saves domain data to the database (updates or inserts an record) + * + * @param array $data Domain data + * + * @return void + */ + public function save(array &$data): void; + + /** + * Deletes the domain from the database + * + * Deletes the domain if there are no reports for this domain in the database. + * + * @param array $data Domain data + * + * @return void + */ + public function delete(array &$data): void; + + /** + * Returns a list of domains data from the database + * + * @return array + */ + public function list(): array; + + /** + * Returns an ordered array with domain names from the database + * + * @return array + */ + public function names(): array; + + /** + * Returns the total number of domains in the database + * + * @param int $max The maximum number of records to count. 0 means no limitation. + * + * @return int The total number of domains + */ + public function count(int $max = 0): int; +} diff --git a/root/opt/dmarc-srg/classes/Database/Mariadb/Connector.php b/root/opt/dmarc-srg/classes/Database/Mariadb/Connector.php new file mode 100644 index 0000000..428deaf --- /dev/null +++ b/root/opt/dmarc-srg/classes/Database/Mariadb/Connector.php @@ -0,0 +1,511 @@ +. + * + * ========================= + * + * This file contains the DatabaseConnector class + * + * @category API + * @package DmarcSrg + * @author Aleksey Andreev (liuch) + * @license https://www.gnu.org/licenses/gpl-3.0.html GNU/GPLv3 + */ + +namespace Liuch\DmarcSrg\Database\Mariadb; + +use Liuch\DmarcSrg\ErrorHandler; +use Liuch\DmarcSrg\Database\DatabaseConnector; +use Liuch\DmarcSrg\Exception\SoftException; +use Liuch\DmarcSrg\Exception\RuntimeException; +use Liuch\DmarcSrg\Exception\DatabaseFatalException; +use Liuch\DmarcSrg\Exception\DatabaseExceptionFactory; +use Liuch\DmarcSrg\Exception\DatabaseNotFoundException; + +class Connector extends DatabaseConnector +{ + protected $dbh = null; + + /** + * Returns an instance of PDO class + * + * @return \PDO + */ + public function dbh(): object + { + $this->ensureConnection(); + return $this->dbh; + } + + /** + * Returns the name of the database + * + * @return string + */ + public function dbName(): string + { + return $this->name; + } + + /** + * Returns information about the database as an array. + * + * @return array May contain the following fields: + * `tables` - an array of tables with their properties; + * `correct` - true if the database is correct; + * `version` - the current version of the database structure; + * `message` - a state message; + * `error_code` - an error code; + */ + public function state(): array + { + $this->ensureConnection(); + + $res = []; + $p_len = strlen($this->prefix); + if ($p_len > 0) { + $like_str = ' WHERE NAME LIKE "' . str_replace('_', '\\_', $this->prefix) . '%"'; + } else { + $like_str = ''; + } + + try { + $tables = []; + $st = $this->dbh->query( + 'SHOW TABLE STATUS FROM `' . str_replace('`', '', $this->name) . '`' . $like_str + ); + while ($row = $st->fetch(\PDO::FETCH_ASSOC)) { + $tname = $row['Name']; + $rcnt = $this->dbh->query('SELECT COUNT(*) FROM `' . $tname . '`')->fetch(\PDO::FETCH_NUM)[0]; + $tables[substr($tname, $p_len)] = [ + 'engine' => $row['Engine'], + 'rows' => intval($rcnt), + 'data_length' => intval($row['Data_length']), + 'index_length' => intval($row['Index_length']), + 'create_time' => $row['Create_time'], + 'update_time' => $row['Update_time'] + ]; + } + foreach (array_keys(self::$schema) as $table) { + if (!isset($tables[$table])) { + $tables[$table] = false; + } + } + $exist_cnt = 0; + $absent_cnt = 0; + $tables_res = []; + foreach ($tables as $tname => $tval) { + $t = null; + if ($tval) { + $t = $tval; + $t['exists'] = true; + if (isset(self::$schema[$tname])) { + ++$exist_cnt; + $t['message'] = 'Ok'; + } else { + $t['message'] = 'Unknown table'; + } + } else { + ++$absent_cnt; + $t = [ + 'error_code' => 1, + 'message' => 'Not exist' + ]; + } + $t['name'] = $tname; + $tables_res[] = $t; + } + $res['tables'] = $tables_res; + if ($absent_cnt === 0) { + $res['correct'] = true; + $res['message'] = 'Ok'; + try { + $res['version'] = $this->getMapper('setting')->value('version'); + } catch (DatabaseNotFoundException $e) { + } + } else { + $res['error_code'] = -1; + if ($exist_cnt == 0) { + $res['message'] = 'The database schema is not initiated'; + } else { + $res['message'] = 'Incomplete set of the tables'; + } + } + } catch (\PDOException $e) { + $res = array_replace($res, ErrorHandler::exceptionResult( + new DatabaseFatalException('Failed to get the database information', -1, $e) + )); + } catch (RuntimeException $e) { + $res = array_replace($res, ErrorHandler::exceptionResult($e)); + } + return $res; + } + + /** + * Inites the database. + * + * This method creates needed tables and indexes in the database. + * The method will fail if the database already have tables with the table prefix. + * + * @param $version The current version of the database schema + * + * @return void + */ + public function initDb(string $version): void + { + $this->ensureConnection(); + try { + $st = $this->dbh->query($this->sqlShowTablesQuery()); + try { + if ($st->fetch()) { + if (empty($this->tablePrefix())) { + throw new SoftException('The database is not empty', -4); + } else { + throw new SoftException('Database tables already exist with the given prefix', -4); + } + } + foreach (self::$schema as $t_name => &$t_schema) { + $this->createDbTable($this->tablePrefix($t_name), $t_schema); + } + unset($t_schema); + } finally { + $st->closeCursor(); + } + $st = $this->dbh->prepare( + 'INSERT INTO `' . $this->tablePrefix('system') . '` (`key`, `value`) VALUES ("version", ?)' + ); + $st->bindValue(1, $version, \PDO::PARAM_STR); + $st->execute(); + $st->closeCursor(); + } catch (\PDOException $e) { + throw new DatabaseFatalException('Failed to create required tables in the database', -1, $e); + } + } + + /** + * Cleans up the database + * + * Drops tables with the table prefix in the database or all tables in the database + * if no table prefix is set. + * + * @return void + */ + public function cleanDb(): void + { + $this->ensureConnection(); + try { + $db = $this->dbh; + $db->query('SET foreign_key_checks = 0'); + $st = $db->query($this->sqlShowTablesQuery()); + while ($table = $st->fetchColumn(0)) { + $db->query('DROP TABLE `' . $table . '`'); + } + $st->closeCursor(); + $db->query('SET foreign_key_checks = 1'); + } catch (\PDOException $e) { + throw new DatabaseFatalException('Failed to drop the database tables', -1, $e); + } + } + + /** + * Sets the database connection if it hasn't connected yet. + * + * @return void + */ + private function ensureConnection(): void + { + if (!$this->dbh) { + try { + $this->dbh = new \PDO( + "mysql:host={$this->host};dbname={$this->name};charset=utf8", + $this->user, + $this->password, + [ \PDO::ATTR_ERRMODE => \PDO::ERRMODE_EXCEPTION ] + ); + $this->dbh->query('SET time_zone = "+00:00"'); + } catch (\PDOException $e) { + throw DatabaseExceptionFactory::fromException($e); + } + } + } + + /** + * Return SHOW TABLES SQL query string for tables with the table prefix + * + * @return string + */ + private function sqlShowTablesQuery(): string + { + $res = 'SHOW TABLES'; + $prefix = $this->tablePrefix(); + if (strlen($prefix) > 0) { + $res .= ' WHERE `tables_in_' . str_replace('`', '', $this->name) + . '` LIKE "' . str_replace('_', '\\_', $prefix) . '%"'; + } + return $res; + } + + /** + * Creates a table in the database. + * + * @param string $name Table name + * @param array $definitions Table structure + * + * @return void + */ + private function createDbTable(string $name, array $definitions): void + { + $query = 'CREATE TABLE `' . $name . '` ('; + $col_num = 0; + foreach ($definitions['columns'] as $column) { + if ($col_num > 0) { + $query .= ', '; + } + $query .= '`' . $column['name'] . '` ' . $column['definition']; + $col_num += 1; + } + $query .= ', ' . $definitions['additional'] . ') ' . $definitions['table_options']; + $this->dbh->query($query); + } + + private static $schema = [ + 'system' => [ + 'columns' => [ + [ + 'name' => 'key', + 'definition' => 'varchar(64) NOT NULL' + ], + [ + 'name' => 'value', + 'definition' => 'varchar(255) DEFAULT NULL' + ] + ], + 'additional' => 'PRIMARY KEY (`key`)', + 'table_options' => 'ENGINE=InnoDB DEFAULT CHARSET=utf8' + ], + 'domains' => [ + 'columns' => [ + [ + 'name' => 'id', + 'definition' => 'int(10) unsigned NOT NULL AUTO_INCREMENT' + ], + [ + 'name' => 'fqdn', + 'definition' => 'varchar(255) NOT NULL' + ], + [ + 'name' => 'active', + 'definition' => 'boolean NOT NULL' + ], + [ + 'name' => 'description', + 'definition' => 'TEXT NULL' + ], + [ + 'name' => 'created_time', + 'definition' => 'datetime NOT NULL' + ], + [ + 'name' => 'updated_time', + 'definition' => 'datetime NOT NULL' + ] + ], + 'additional' => 'PRIMARY KEY (`id`), UNIQUE KEY `fqdn` (`fqdn`)', + 'table_options' => 'ENGINE=InnoDB DEFAULT CHARSET=utf8' + ], + 'reports' => [ + 'columns' => [ + [ + 'name' => 'id', + 'definition' => 'int(10) unsigned NOT NULL AUTO_INCREMENT' + ], + [ + 'name' => 'domain_id', + 'definition' => 'int(10) NOT NULL' + ], + [ + 'name' => 'begin_time', + 'definition' => 'datetime NOT NULL' + ], + [ + 'name' => 'end_time', + 'definition' => 'datetime NOT NULL' + ], + [ + 'name' => 'loaded_time', + 'definition' => 'datetime NOT NULL' + ], + [ + 'name' => 'org', + 'definition' => 'varchar(255) NOT NULL' + ], + [ + 'name' => 'external_id', + 'definition' => 'varchar(255) NOT NULL' + ], + [ + 'name' => 'email', + 'definition' => 'varchar(255) NOT NULL' + ], + [ + 'name' => 'extra_contact_info', + 'definition' => 'varchar(255) NULL' + ], + [ + 'name' => 'error_string', + 'definition' => 'text NULL' + ], + [ + 'name' => 'policy_adkim', + 'definition' => 'varchar(20) NULL' + ], + [ + 'name' => 'policy_aspf', + 'definition' => 'varchar(20) NULL' + ], + [ + 'name' => 'policy_p', + 'definition' => 'varchar(20) NULL' + ], + [ + 'name' => 'policy_sp', + 'definition' => 'varchar(20) NULL' + ], + [ + 'name' => 'policy_np', + 'definition' => 'varchar(20) NULL' + ], + [ + 'name' => 'policy_pct', + 'definition' => 'varchar(20) NULL' + ], + [ + 'name' => 'policy_fo', + 'definition' => 'varchar(20) NULL' + ], + [ + 'name' => 'seen', + 'definition' => 'boolean NOT NULL' + ] + ], + 'additional' => 'PRIMARY KEY (`id`),' . + ' UNIQUE KEY `external_id` (`domain_id`, `external_id`),' . + ' KEY (`begin_time`), KEY (`end_time`),' . + ' KEY `org` (`org`, `begin_time`)', + 'table_options' => 'ENGINE=InnoDB DEFAULT CHARSET=utf8' + ], + 'rptrecords' => [ + 'columns' => [ + [ + 'name' => 'id', + 'definition' => 'int(10) unsigned NOT NULL AUTO_INCREMENT' + ], + [ + 'name' => 'report_id', + 'definition' => 'int(10) unsigned NOT NULL' + ], + [ + 'name' => 'ip', + 'definition' => 'varbinary(16) NOT NULL' + ], + [ + 'name' => 'rcount', + 'definition' => 'int(10) unsigned NOT NULL' + ], + [ + 'name' => 'disposition', + 'definition' => 'tinyint unsigned NOT NULL' + ], + [ + 'name' => 'reason', + 'definition' => 'text NULL' + ], + [ + 'name' => 'dkim_auth', + 'definition' => 'text NULL' + ], + [ + 'name' => 'spf_auth', + 'definition' => 'text NULL' + ], + [ + 'name' => 'dkim_align', + 'definition' => 'tinyint unsigned NOT NULL' + ], + [ + 'name' => 'spf_align', + 'definition' => 'tinyint unsigned NOT NULL' + ], + [ + 'name' => 'envelope_to', + 'definition' => 'varchar(255) NULL' + ], + [ + 'name' => 'envelope_from', + 'definition' => 'varchar(255) NULL' + ], + [ + 'name' => 'header_from', + 'definition' => 'varchar(255) NULL' + ] + ], + 'additional' => 'PRIMARY KEY (`id`), KEY (`report_id`), KEY (`ip`)', + 'table_options' => 'ENGINE=InnoDB DEFAULT CHARSET=utf8' + ], + 'reportlog' => [ + 'columns' => [ + [ + 'name' => 'id', + 'definition' => 'int(10) unsigned NOT NULL AUTO_INCREMENT' + ], + [ + 'name' => 'domain', + 'definition' => 'varchar(255) NULL' + ], + [ + 'name' => 'external_id', + 'definition' => 'varchar(255) NULL' + ], + [ + 'name' => 'event_time', + 'definition' => 'datetime NOT NULL' + ], + [ + 'name' => 'filename', + 'definition' => 'varchar(255) NULL' + ], + [ + 'name' => 'source', + 'definition' => 'tinyint unsigned NOT NULL' + ], + [ + 'name' => 'success', + 'definition' => 'boolean NOT NULL' + ], + [ + 'name' => 'message', + 'definition' => 'text NULL' + ] + ], + 'additional' => 'PRIMARY KEY (`id`), KEY(`event_time`)', + 'table_options' => 'ENGINE=InnoDB DEFAULT CHARSET=utf8' + ] + ]; +} diff --git a/root/opt/dmarc-srg/classes/Database/Mariadb/DomainMapper.php b/root/opt/dmarc-srg/classes/Database/Mariadb/DomainMapper.php new file mode 100644 index 0000000..80c9eff --- /dev/null +++ b/root/opt/dmarc-srg/classes/Database/Mariadb/DomainMapper.php @@ -0,0 +1,332 @@ +. + * + * ========================= + * + * This file contains the DomainMapper class + * + * @category API + * @package DmarcSrg + * @author Aleksey Andreev (liuch) + * @license https://www.gnu.org/licenses/gpl-3.0.html GNU/GPLv3 + */ + +namespace Liuch\DmarcSrg\Database\Mariadb; + +use Liuch\DmarcSrg\DateTime; +use Liuch\DmarcSrg\Database\DomainMapperInterface; +use Liuch\DmarcSrg\Exception\SoftException; +use Liuch\DmarcSrg\Exception\DatabaseFatalException; +use Liuch\DmarcSrg\Exception\DatabaseNotFoundException; + +/** + * DomainMapper class implementation for MariaDB + */ +class DomainMapper implements DomainMapperInterface +{ + private $connector = null; + + /** + * The constructor + * + * @param Connector $connector DatabaseConnector + */ + public function __construct(object $connector) + { + $this->connector = $connector; + } + + /** + * Return true if the domain exists or false otherwise. + * + * @param array $data Array with domain data to search + * + * @return bool + */ + public function exists(array &$data): bool + { + try { + $st = $this->connector->dbh()->prepare( + 'SELECT `id` FROM `' . $this->connector->tablePrefix('domains') . + '` WHERE ' . $this->sqlCondition($data) + ); + $this->sqlBindValue($st, 1, $data); + $st->execute(); + $res = $st->fetch(\PDO::FETCH_NUM); + $st->closeCursor(); + if (!$res) { + return false; + } + $data['id'] = intval($res[0]); + } catch (\PDOException $e) { + throw new DatabaseFatalException('Failed to get domain ID', -1, $e); + } + return true; + } + + /** + * Fetch the domain data from the database by its id or name + * + * @param array $data Domain data to update + * + * @return void + */ + public function fetch(array &$data): void + { + try { + $st = $this->connector->dbh()->prepare( + 'SELECT `id`, `fqdn`, `active`, `description`, `created_time`, `updated_time` FROM `' + . $this->connector->tablePrefix('domains') . '` WHERE ' . $this->sqlCondition($data) + ); + $this->sqlBindValue($st, 1, $data); + $st->execute(); + $res = $st->fetch(\PDO::FETCH_NUM); + $st->closeCursor(); + if (!$res) { + throw new DatabaseNotFoundException('Domain not found'); + } + $data['id'] = intval($res[0]); + $data['fqdn'] = $res[1]; + $data['active'] = boolval($res[2]); + $data['description'] = $res[3]; + $data['created_time'] = new DateTime($res[4]); + $data['updated_time'] = new DateTime($res[5]); + } catch (\PDOException $e) { + throw new DatabaseFatalException('Failed to fetch the domain data', -1, $e); + } + } + + /** + * Saves domain data to the database (updates or inserts an record) + * + * @param array $data Domain data + * + * @return void + */ + public function save(array &$data): void + { + $db = $this->connector->dbh(); + $data['updated_time'] = new DateTime(); + if ($this->exists($data)) { + try { + $st = $db->prepare( + 'UPDATE `' . $this->connector->tablePrefix('domains') + . '` SET `active` = ?, `description` = ?, `updated_time` = ? WHERE `id` = ?' + ); + $st->bindValue(1, $data['active'], \PDO::PARAM_BOOL); + $st->bindValue(2, $data['description'], \PDO::PARAM_STR); + $st->bindValue(3, $data['updated_time']->format('Y-m-d H:i:s'), \PDO::PARAM_STR); + $st->bindValue(4, $data['id'], \PDO::PARAM_INT); + $st->execute(); + $st->closeCursor(); + } catch (\PDOException $e) { + throw new DababaseException('Failed to update the domain data', -1, $e); + } + } else { + try { + $active = $data['active'] ?? false; + $data['created_time'] = $data['updated_time']; + if (is_null($data['description'])) { + $sql1 = ''; + $sql2 = ''; + } else { + $sql1 = ', `description`'; + $sql2 = ', ?'; + } + $st = $db->prepare( + 'INSERT INTO `' . $this->connector->tablePrefix('domains') + . '` (`fqdn`, `active`' . $sql1 . ', `created_time`, `updated_time`)' + . ' VALUES (?, ?' . $sql2 . ', ?, ?)' + ); + $idx = 0; + $st->bindValue(++$idx, $data['fqdn'], \PDO::PARAM_STR); + $st->bindValue(++$idx, $active, \PDO::PARAM_BOOL); + if (!is_null($data['description'])) { + $st->bindValue(++$idx, $data['description'], \PDO::PARAM_STR); + } + $st->bindValue(++$idx, $data['created_time']->format('Y-m-d H:i:s'), \PDO::PARAM_STR); + $st->bindValue(++$idx, $data['updated_time']->format('Y-m-d H:i:s'), \PDO::PARAM_STR); + $st->execute(); + $st->closeCursor(); + $data['id'] = intval($db->lastInsertId()); + $data['active'] = $active; + } catch (\PDOException $e) { + throw new DatabaseFatalException('Failed to insert the domain data', -1, $e); + } + } + } + + /** + * Deletes the domain from the database + * + * Deletes the domain if there are no reports for this domain in the database. + * + * @param array $data Domain data + * + * @return void + */ + public function delete(array &$data): void + { + $db = $this->connector->dbh(); + $db->beginTransaction(); + try { + $filter = [ 'domain' => $data['id'] ]; + $limit = [ 'offset' => 0, 'count' => 0 ]; + $r_count = $this->connector->getMapper('report')->count($filter, $limit); + if ($r_count > 0) { + switch ($r_count) { + case 1: + $s1 = 'is'; + $s2 = ''; + break; + default: + $s1 = 'are'; + $s2 = 's'; + break; + } + throw new SoftException( + "Failed to delete: there {$s1} {$r_count} incoming report{$s2} for this domain" + ); + } + $st = $db->prepare('DELETE FROM `' . $this->connector->tablePrefix('domains') . '` WHERE `id` = ?'); + $st->bindValue(1, $data['id'], \PDO::PARAM_INT); + $st->execute(); + $st->closeCursor(); + $db->commit(); + } catch (\PDOException $e) { + $db->rollBack(); + throw new DatabaseFatalException('Failed to delete the domain', -1, $e); + } catch (\Exception $e) { + $db->rollBack(); + throw $e; + } + } + + /** + * Returns a list of domains data from the database + * + * @return array + */ + public function list(): array + { + $list = []; + try { + $st = $this->connector->dbh()->query( + 'SELECT `id`, `fqdn`, `active`, `description`, `created_time`, `updated_time` FROM `' + . $this->connector->tablePrefix('domains') . '`' + ); + while ($row = $st->fetch(\PDO::FETCH_NUM)) { + $list[] = [ + 'id' => intval($row[0]), + 'fqdn' => $row[1], + 'active' => boolval($row[2]), + 'description' => $row[3], + 'created_time' => new DateTime($row[4]), + 'updated_time' => new DateTime($row[5]) + ]; + } + $st->closeCursor(); + } catch (\PDOException $e) { + throw new DatabaseFatalException('Failed to get the domain list', -1, $e); + } + return $list; + } + + /** + * Returns an ordered array with domain names from the database + * + * @return array + */ + public function names(): array + { + $res = []; + try { + $st = $this->connector->dbh()->query( + 'SELECT `fqdn` FROM `' . $this->connector->tablePrefix('domains') . '` ORDER BY `fqdn`', + \PDO::FETCH_NUM + ); + while ($name = $st->fetchColumn(0)) { + $res[] = $name; + } + $st->closeCursor(); + } catch (\PDOException $e) { + throw new DatabaseFatalException('Failed to get a list of domain names', -1, $e); + } + return $res; + } + + /** + * Returns the total number of domains in the database + * + * @param int $max The maximum number of records to count. 0 means no limitation. + * + * @return int The total number of domains + */ + public function count(int $max = 0): int + { + $number = 0; + try { + $query_str = 'SELECT COUNT(*) FROM `' . $this->connector->tablePrefix('domains') . '`'; + if ($max > 0) { + $query_str .= " LIMIT {$max}"; + } + $st = $this->connector->dbh()->query($query_str, \PDO::FETCH_NUM); + $number = intval($st->fetchColumn(0)); + $st->closeCursor(); + } catch (\PDOException $e) { + throw new DatabaseFatalException('Failed to get the number of domains', -1, $e); + } + return $number; + } + + /** + * Returns a condition string for a WHERE statement based on existing domain data + * + * @param array $data Domain data + * + * @return string Condition string + */ + private function sqlCondition(array &$data): string + { + if (isset($data['id'])) { + return '`id` = ?'; + } + return '`fqdn` = ?'; + } + + /** + * Binds values for SQL queries based on existing domain data + * + * @param PDOStatement $st PDO Statement to bind to + * @param ind $pos Start position for binding + * @param array $data Domain data + * + * @return void + */ + private function sqlBindValue($st, int $pos, array &$data): void + { + if (isset($data['id'])) { + $st->bindValue($pos, $data['id'], \PDO::PARAM_INT); + } else { + $st->bindValue($pos, $data['fqdn'], \PDO::PARAM_STR); + } + } +} diff --git a/root/opt/dmarc-srg/classes/Database/Mariadb/ReportLogMapper.php b/root/opt/dmarc-srg/classes/Database/Mariadb/ReportLogMapper.php new file mode 100644 index 0000000..a2ea7a0 --- /dev/null +++ b/root/opt/dmarc-srg/classes/Database/Mariadb/ReportLogMapper.php @@ -0,0 +1,311 @@ +. + * + * ========================= + * + * This file contains the ReportLogMapper class + * + * @category API + * @package DmarcSrg + * @author Aleksey Andreev (liuch) + * @license https://www.gnu.org/licenses/gpl-3.0.html GNU/GPLv3 + */ + +namespace Liuch\DmarcSrg\Database\Mariadb; + +use Liuch\DmarcSrg\DateTime; +use Liuch\DmarcSrg\Database\ReportLogMapperInterface; +use Liuch\DmarcSrg\Exception\DatabaseFatalException; +use Liuch\DmarcSrg\Exception\DatabaseNotFoundException; + +/** + * ReportLogMapper class implementation for MariaDB + */ +class ReportLogMapper implements ReportLogMapperInterface +{ + private $connector = null; + + /** + * The constructor + * + * @param Connector $connector DatabaseConnector + */ + public function __construct(object $connector) + { + $this->connector = $connector; + } + + /** + * Fetches data of report log item from the database by id + * + * @param Report log data + * + * @return void + */ + public function fetch(array &$data): void + { + try { + $st = $this->connector->dbh()->prepare( + 'SELECT `domain`, `external_id`, `event_time`, `filename`, `source`, `success`, `message` FROM `' + . $this->connector->tablePrefix('reportlog') . '` WHERE `id` = ?' + ); + $st->bindValue(1, $data['id'], \PDO::PARAM_INT); + $st->execute(); + if (!($row = $st->fetch(\PDO::FETCH_NUM))) { + throw new DatabaseNotFoundException(); + } + $data['domain'] = $row[0]; + $data['external_id'] = $row[1]; + $data['event_time'] = new DateTime($row[2]); + $data['filename'] = $row[3]; + $data['source'] = intval($row[4]); + $data['success'] = boolval($row[5]); + $data['message'] = $row[6]; + $st->closeCursor(); + } catch (\PDOException $e) { + throw new DatabaseFatalException('Failed to get the log item', -1, $e); + } + } + + /** + * Saves data of report log item to the database + * + * @return void + */ + public function save(array &$data): void + { + $db = $this->connector->dbh(); + try { + $id = $data['id']; + if (is_null($id)) { + $st = $db->prepare( + 'INSERT INTO `' . $this->connector->tablePrefix('reportlog') + . '` (`domain`, `external_id`, `event_time`, `filename`, `source`, `success`, `message`)' + . ' VALUES (?, ?, ?, ?, ?, ?, ?)' + ); + } else { + $st = $db->prepare( + 'UPDATE `' . $this->connector->tablePrefix('reportlog') + . '` SET `domain` = ?, `external_id` = ?, `event_time` = ?, `filename` = ?,' + . ' `source` = ?, `success` = ?, `message` = ? WHERE `id` = ?' + ); + $st->bindValue(8, $id, \PDO::PARAM_INT); + } + $ts = $data['event_time'] ?? (new DateTime()); + $st->bindValue(1, $data['domain'], \PDO::PARAM_STR); + $st->bindValue(2, $data['external_id'], \PDO::PARAM_STR); + $st->bindValue(3, $ts->format('Y-m-d H:i:s'), \PDO::PARAM_STR); + $st->bindValue(4, $data['filename'], \PDO::PARAM_STR); + $st->bindValue(5, $data['source'], \PDO::PARAM_INT); + $st->bindValue(6, $data['success'], \PDO::PARAM_BOOL); + $st->bindValue(7, $data['message'], \PDO::PARAM_STR); + $st->execute(); + if (is_null($id)) { + $data['id'] = intval($db->lastInsertId()); + } + $st->closeCursor(); + $data['event_time'] = $ts; + } catch (\PDOException $e) { + throw new DatabaseFatalException('Failed to save a report log item'); + } + } + + /** + * Returns a list of report log items with given criteria + * + * @param array $filter Key-value array: + * 'from_time' => DateTime + * 'till_time' => DateTime + * @param array $order Key-value array with order options: + * 'direction' => string, 'ascent' or 'descent' + * @param array $limit Key-value array: + * 'offset' => int + * 'count' => int + * + * @return array + */ + public function list(array &$filter, array &$order, array &$limit): array + { + $list = []; + try { + $st = $this->connector->dbh()->prepare( + 'SELECT `id`, `domain`, `event_time`, `source`, `success`, `message` FROM `' + . $this->connector->tablePrefix('reportlog') . '`' + . $this->sqlCondition($filter) + . $this->sqlOrder($order) + . $this->sqlLimit($limit) + ); + $this->sqlBindValues($st, $filter, $limit); + $st->execute(); + while ($row = $st->fetch(\PDO::FETCH_NUM)) { + $list[] = [ + 'id' => intval($row[0]), + 'domain' => $row[1], + 'event_time' => new DateTime($row[2]), + 'source' => intval($row[3]), + 'success' => boolval($row[4]), + 'message' => $row[5] + ]; + } + $st->closeCursor(); + } catch (\PDOException $e) { + throw new DatabaseFatalException('Failed to get the logs', -1, $e); + } + return $list; + } + + /** + * Returns the number of report log items matching the specified filter and limits + * + * @param array $filter Key-value array with filtering parameters + * @param array $limit Key-value array with limits + * + * @return int + */ + public function count(array &$filter, array &$limit): int + { + $cnt = 0; + try { + $st = $this->connector->dbh()->prepare( + 'SELECT COUNT(*) FROM `' . $this->connector->tablePrefix('reportlog') . '`' + . $this->sqlCondition($filter) + . $this->sqlLimit($limit) + ); + $this->sqlBindValues($st, $filter, $limit); + $st->execute(); + $cnt = intval($st->fetch(\PDO::FETCH_NUM)[0]); + $st->closeCursor(); + } catch (\PDOException $e) { + throw new DatabaseFatalException('Failed to get the log data', -1, $e); + } + return $cnt; + } + + /** + * Deletes report log items from the database + * + * @param array $filter Key-value array with filtering parameters + * @param array $order Key-value array with order options: + * 'direction' => string, 'ascent' or 'descent' + * @param array $limit Key-value array with limits + * + * @return void + */ + public function delete(array &$filter, array &$order, array &$limit): void + { + try { + $st = $this->connector->dbh()->prepare( + 'DELETE FROM `' . $this->connector->tablePrefix('reportlog') . '`' + . $this->sqlCondition($filter) + . $this->sqlOrder($order) + . $this->sqlLimit($limit) + ); + $this->sqlBindValues($st, $filter, $limit); + $st->execute(); + $st->closeCursor(); + } catch (\PDOException $e) { + throw new DatabaseFatalException('Failed to remove the log data', -1, $e); + } + } + + /** + * Returns a string with an SQL condition 'WHERE ...' + * + * @param array $filter Key-value with filtering paremeters + * + * @return string + */ + private function sqlCondition(array &$filter): string + { + $res = ''; + if (!is_null($filter['from_time']) || !is_null($filter['till_time'])) { + $res = ' WHERE'; + $till_time = $filter['till_time']; + if (!is_null($filter['from_time'])) { + $res .= ' `event_time` >= ?'; + if (!is_null($till_time)) { + $res .= ' AND'; + } + } + if (!is_null($till_time)) { + $res .= ' `event_time` < ?'; + } + } + return $res; + } + + /** + * Returns 'ORDER BY ...' part of the SQL query + * + * @param array $order Key-value array with ordering options + * + * @return string + */ + private function sqlOrder(array &$order): string + { + return ' ORDER BY `event_time` ' . ($order['direction'] === 'descent' ? 'DESC' : 'ASC'); + } + + /** + * Returns 'LIMIT ...' part of the SQL string + * + * @param array $limit Key-value array with keys 'offset' and 'count' + * + * @return string + */ + private function sqlLimit(array &$limit): string + { + $res = ''; + if ($limit['count'] > 0) { + $res = ' LIMIT ?'; + if ($limit['offset'] > 0) { + $res .= ', ?'; + } + } + return $res; + } + + /** + * Binds the values of the filter and the limit to SQL query + * + * @param PDOStatement $st Prepared SOL statement to bind to + * @param array $filter Key-value array with filter data + * @param array $limit Key-value array with limit data + * + * @return void + */ + private function sqlBindValues($st, array &$filter, array &$limit): void + { + $pos = 0; + if (!is_null($filter['from_time'])) { + $st->bindValue(++$pos, $filter['from_time']->format('Y-m-d H:i:s'), \PDO::PARAM_STR); + } + if (!is_null($filter['till_time'])) { + $st->bindValue(++$pos, $filter['till_time']->format('Y-m-d H:i:s'), \PDO::PARAM_STR); + } + if ($limit['count'] > 0) { + if ($limit['offset'] > 0) { + $st->bindValue(++$pos, $limit['offset'], \PDO::PARAM_INT); + } + $st->bindValue(++$pos, $limit['count'], \PDO::PARAM_INT); + } + } +} diff --git a/root/opt/dmarc-srg/classes/Database/Mariadb/ReportMapper.php b/root/opt/dmarc-srg/classes/Database/Mariadb/ReportMapper.php new file mode 100644 index 0000000..2ef23f9 --- /dev/null +++ b/root/opt/dmarc-srg/classes/Database/Mariadb/ReportMapper.php @@ -0,0 +1,753 @@ +. + * + * ========================= + * + * This file contains the ReportMapper class + * + * @category API + * @package DmarcSrg + * @author Aleksey Andreev (liuch) + * @license https://www.gnu.org/licenses/gpl-3.0.html GNU/GPLv3 + */ + +namespace Liuch\DmarcSrg\Database\Mariadb; + +use Liuch\DmarcSrg\Core; +use Liuch\DmarcSrg\Common; +use Liuch\DmarcSrg\DateTime; +use Liuch\DmarcSrg\Settings\SettingsList; +use Liuch\DmarcSrg\Database\ReportMapperInterface; +use Liuch\DmarcSrg\Exception\SoftException; +use Liuch\DmarcSrg\Exception\LogicException; +use Liuch\DmarcSrg\Exception\DatabaseFatalException; +use Liuch\DmarcSrg\Exception\DatabaseNotFoundException; + +/** + * ReportMapper class implementation for MariaDB + */ +class ReportMapper implements ReportMapperInterface +{ + private $connector = null; + + private static $allowed_domains = null; + + /** + * The constructor + * + * @param Connector $connector DatabaseConnector + */ + public function __construct(object $connector) + { + $this->connector = $connector; + } + + /** + * Fetches report data from the database and stores it in the passed array + * + * @param array $data Array with report data. To identify the report, + * the array must contain at least two fields: + * `report_id` - External report id from the xml file + * `domain` - Fully Qualified Domain Name without a trailing dot + * + * @return void + */ + public function fetch(array &$data): void + { + $db = $this->connector->dbh(); + try { + $st = $db->prepare( + 'SELECT `rp`.`id`, `begin_time`, `end_time`, `loaded_time`, `org`, `email`, `extra_contact_info`,' + . ' `error_string`, `policy_adkim`, `policy_aspf`, `policy_p`, `policy_sp`, `policy_np`,' + . ' `policy_pct`, `policy_fo`' + . ' FROM `' . $this->connector->tablePrefix('reports') . '` AS `rp`' + . ' INNER JOIN `' . $this->connector->tablePrefix('domains') + . '` AS `dom` ON `dom`.`id` = `rp`.`domain_id`' + . ' WHERE `fqdn` = ? AND `external_id` = ?' + ); + $st->bindValue(1, $data['domain'], \PDO::PARAM_STR); + $st->bindValue(2, $data['report_id'], \PDO::PARAM_STR); + $st->execute(); + if (!($res = $st->fetch(\PDO::FETCH_NUM))) { + throw new DatabaseNotFoundException('The report is not found'); + } + $id = intval($res[0]); + $data['date'] = [ + 'begin' => new DateTime($res[1]), + 'end' => new DateTime($res[2]) + ]; + $data['loaded_time'] = new DateTime($res[3]); + $data['org_name'] = $res[4]; + $data['email'] = $res[5]; + $data['extra_contact_info'] = $res[6]; + $data['error_string'] = json_decode($res[7] ?? '', true); + $data['policy'] = [ + 'adkim' => $res[8], + 'aspf' => $res[9], + 'p' => $res[10], + 'sp' => $res[11], + 'np' => $res[12], + 'pct' => $res[13], + 'fo' => $res[14] + ]; + + $order_str = $this->sqlOrderRecords(); + $st = $db->prepare( + 'SELECT `report_id`, `ip`, `rcount`, `disposition`, `reason`, `dkim_auth` , `spf_auth`, `dkim_align`,' + . ' `spf_align`, `envelope_to`, `envelope_from`, `header_from`' + . ' FROM `' . $this->connector->tablePrefix('rptrecords') . '` WHERE `report_id` = ?' . $order_str + ); + $st->bindValue(1, $id, \PDO::PARAM_INT); + $st->execute(); + $data['records'] = []; + while ($res = $st->fetch(\PDO::FETCH_NUM)) { + $data['records'][] = [ + 'ip' => inet_ntop($res[1]), + 'count' => intval($res[2]), + 'disposition' => Common::$disposition[$res[3]], + 'reason' => json_decode($res[4] ?? '', true), + 'dkim_auth' => json_decode($res[5] ?? '', true), + 'spf_auth' => json_decode($res[6] ?? '', true), + 'dkim_align' => Common::$align_res[$res[7]], + 'spf_align' => Common::$align_res[$res[8]], + 'envelope_to' => $res[9], + 'envelope_from' => $res[10], + 'header_from' => $res[11] + ]; + } + $st->closeCursor(); + } catch (\PDOException $e) { + throw new DatabaseFatalException('Failed to get the report from DB', -1, $e); + } + } + + /** + * Inserts report data into the database. + * + * @param array $data Report data + * + * @return void + */ + public function save(array &$data): void + { + $db = $this->connector->dbh(); + $db->beginTransaction(); + try { + $domain_data = [ 'fqdn' => strtolower($data['domain']) ]; + $domain_mapper = $this->connector->getMapper('domain'); + try { + $domain_mapper->fetch($domain_data); + if (!$domain_data['active']) { + throw new SoftException('Failed to add an incoming report: the domain is inactive'); + } + } catch (DatabaseNotFoundException $e) { + // The domain is not found. Let's try to add it automatically. + $this->insertDomain($domain_data, $domain_mapper); + } + + $ct = new DateTime(); + $st = $db->prepare( + 'INSERT INTO `' . $this->connector->tablePrefix('reports') + . '` (`domain_id`, `begin_time`, `end_time`, `loaded_time`, `org`, `external_id`, `email`,' + . ' `extra_contact_info`, `error_string`, `policy_adkim`, `policy_aspf`, `policy_p`,' + . ' `policy_sp`, `policy_np`, `policy_pct`, `policy_fo`, `seen`)' + . ' VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, 0)' + ); + $st->bindValue(1, $domain_data['id'], \PDO::PARAM_INT); + $st->bindValue(2, $data['begin_time']->format('Y-m-d H:i:s'), \PDO::PARAM_STR); + $st->bindValue(3, $data['end_time']->format('Y-m-d H:i:s'), \PDO::PARAM_STR); + $st->bindValue(4, $ct->format('Y-m-d H:i:s'), \PDO::PARAM_STR); + $st->bindValue(5, $data['org'], \PDO::PARAM_STR); + $st->bindValue(6, $data['external_id'], \PDO::PARAM_STR); + $st->bindValue(7, $data['email'], \PDO::PARAM_STR); + $st->bindValue(8, $data['extra_contact_info'], \PDO::PARAM_STR); + self::sqlBindJson($st, 9, $data['error_string']); + $st->bindValue(10, $data['policy_adkim'], \PDO::PARAM_STR); + $st->bindValue(11, $data['policy_aspf'], \PDO::PARAM_STR); + $st->bindValue(12, $data['policy_p'], \PDO::PARAM_STR); + $st->bindValue(13, $data['policy_sp'], \PDO::PARAM_STR); + $st->bindValue(14, $data['policy_np'], \PDO::PARAM_STR); + $st->bindValue(15, $data['policy_pct'], \PDO::PARAM_STR); + $st->bindValue(16, $data['policy_fo'], \PDO::PARAM_STR); + $st->execute(); + $new_id = intval($db->lastInsertId()); + $st->closeCursor(); + + $st = $db->prepare( + 'INSERT INTO `' . $this->connector->tablePrefix('rptrecords') + . '` (`report_id`, `ip`, `rcount`, `disposition`, `reason`, `dkim_auth`, `spf_auth`, `dkim_align`,' + . ' `spf_align`, `envelope_to`, `envelope_from`, `header_from`)' + . ' VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)' + ); + foreach ($data['records'] as &$rec_data) { + $st->bindValue(1, $new_id, \PDO::PARAM_INT); + $st->bindValue(2, inet_pton($rec_data['ip']), \PDO::PARAM_STR); + $st->bindValue(3, $rec_data['rcount'], \PDO::PARAM_INT); + $st->bindValue(4, array_search($rec_data['disposition'], Common::$disposition), \PDO::PARAM_INT); + self::sqlBindJson($st, 5, $rec_data['reason']); + self::sqlBindJson($st, 6, $rec_data['dkim_auth']); + self::sqlBindJson($st, 7, $rec_data['spf_auth']); + $st->bindValue(8, array_search($rec_data['dkim_align'], Common::$align_res), \PDO::PARAM_INT); + $st->bindValue(9, array_search($rec_data['spf_align'], Common::$align_res), \PDO::PARAM_INT); + $st->bindValue(10, $rec_data['envelope_to'], \PDO::PARAM_STR); + $st->bindValue(11, $rec_data['envelope_from'], \PDO::PARAM_STR); + $st->bindValue(12, $rec_data['header_from'], \PDO::PARAM_STR); + $st->execute(); + } + unset($rec_data); + $db->commit(); + $data['loaded_time'] = $ct; + } catch (\PDOException $e) { + $db->rollBack(); + if ($e->getCode() == '23000') { + throw new SoftException('This report has already been loaded'); + } + throw new DatabaseFatalException('Failed to insert the report', -1, $e); + } catch (\Exception $e) { + $db->rollBack(); + throw $e; + } + } + + /** + * Sets report record property in database. + * + * It has nothing to do with the fields of the report itself. + * + * @param array $data Report data + * @param string $name Property name. Currently only `seen` is supported. + * @param variant $value Property value + * + * @return void + */ + public function setProperty(array &$data, string $name, $value): void + { + if ($name !== 'seen' && gettype($value) !== 'boolean') { + throw new LogicException('Incorrect parameters'); + } + + try { + $st = $this->connector->dbh()->prepare( + 'UPDATE `' . $this->connector->tablePrefix('reports') . '` AS `rp`' + . ' INNER JOIN `' . $this->connector->tablePrefix('domains') . '` AS `dom`' + . ' ON `rp`.`domain_id` = `dom`.`id` SET `seen` = ? WHERE `fqdn` = ? AND `external_id` = ?' + ); + $st->bindValue(1, $value, \PDO::PARAM_BOOL); + $st->bindValue(2, $data['domain'], \PDO::PARAM_STR); + $st->bindValue(3, $data['report_id'], \PDO::PARAM_STR); + $st->execute(); + $st->closeCursor(); + } catch (\PDOException $e) { + throw new DatabaseFatalException('Failed to update the DB record', -1, $e); + } + } + + /** + * Returns a list of reports with specified parameters + * + * This method returns a list of reports that depends on the $filter, $order and $limit. + * + * @param array $filter Key-value array with filtering parameters + * @param array $order Key-value array: + * 'field' => string, 'begin_time' + * 'direction' => string, 'ascent' or 'descent' + * @param array $limit Key-value array with two keys: `offset` and `count` + * + * @return array + */ + public function list(array &$filter, array &$order, array &$limit): array + { + $db = $this->connector->dbh(); + $list = []; + $f_data = $this->prepareFilterData($filter); + $order_str = $this->sqlOrderList($order); + $cond_str0 = $this->sqlConditionList($f_data, ' AND ', 0); + $cond_str1 = $this->sqlConditionList($f_data, ' HAVING ', 1); + $limit_str = $this->sqlLimit($limit); + try { + $st = $db->prepare( + 'SELECT `org`, `begin_time`, `end_time`, `fqdn`, external_id, `seen`, SUM(`rcount`) AS `rcount`,' + . ' MIN(`dkim_align`) AS `dkim_align`, MIN(`spf_align`) AS `spf_align`,' + . ' MIN(`disposition`) AS `disposition` FROM `' . $this->connector->tablePrefix('rptrecords') + . '` AS `rr` RIGHT JOIN (SELECT `rp`.`id`, `org`, `begin_time`, `end_time`, `external_id`,' + . ' `fqdn`, `seen` FROM `' . $this->connector->tablePrefix('reports') + . '` AS `rp` INNER JOIN `' . $this->connector->tablePrefix('domains') + . '` AS `d` ON `d`.`id` = `rp`.`domain_id`' . $cond_str0 . $order_str + . ') AS `rp` ON `rp`.`id` = `rr`.`report_id` GROUP BY `rp`.`id`' + . $cond_str1 . $order_str . $limit_str + ); + $this->sqlBindValues($st, $f_data, $limit); + $st->execute(); + while ($row = $st->fetch(\PDO::FETCH_NUM)) { + $list[] = [ + 'org_name' => $row[0], + 'date' => [ + 'begin' => new DateTime($row[1]), + 'end' => new DateTime($row[2]) + ], + 'domain' => $row[3], + 'report_id' => $row[4], + 'seen' => (bool) $row[5], + 'messages' => $row[6], + 'dkim_align' => Common::$align_res[$row[7]], + 'spf_align' => Common::$align_res[$row[8]], + 'disposition' => Common::$disposition[$row[9]] + ]; + } + $st->closeCursor(); + } catch (\PDOException $e) { + throw new DatabaseFatalException('Failed to get the report list', -1, $e); + } + return $list; + } + + /** + * Returns the number of reports matching the specified filter and limits + * + * @param array $filter Key-value array with filtering parameters + * @param array $limit Key-value array with two keys: `offset` and `count` + * + * @return int + */ + public function count(array &$filter, array &$limit): int + { + $cnt = 0; + $f_data = $this->prepareFilterData($filter); + try { + $st = $this->connector->dbh()->prepare( + 'SELECT COUNT(*) FROM `' . $this->connector->tablePrefix('reports') . '` AS `rp`' + . $this->sqlConditionList($f_data, ' WHERE ', 0) + ); + $l_empty = [ 'offset' => 0, 'count' => 0 ]; + $this->sqlBindValues($st, $f_data, $l_empty); + $st->execute(); + $cnt = intval($st->fetch(\PDO::FETCH_NUM)[0]); + $st->closeCursor(); + + $offset = $limit['offset']; + if ($offset > 0) { + $cnt -= $offset; + if ($cnt < 0) { + $cnt = 0; + } + } + $max = $limit['count']; + if ($max > 0 && $max < $cnt) { + $cnt = $max; + } + } catch (\PDOException $e) { + throw new DatabaseFatalException('Failed to get the number of reports', -1, $e); + } + return $cnt; + } + + /** + * Deletes reports from the database + * + * It deletes repors form the database. The filter options `dkim` and `spf` do not affect this. + * + * @param array $filter Key-value array with filtering parameters + * @param array $order Key-value array: + * 'field' => string, 'begin_time' + * 'direction' => string, 'ascent' or 'descent' + * @param array $limit Key-value array with two keys: `offset` and `count` + * + * @return void + */ + public function delete(array &$filter, array &$order, array &$limit): void + { + $f_data = $this->prepareFilterData($filter); + $cond_str = $this->sqlConditionList($f_data, ' WHERE ', 0); + $order_str = $this->sqlOrderList($order); + $limit_str = $this->sqlLimit($limit); + $db = $this->connector->dbh(); + $db->beginTransaction(); + try { + $st = $db->prepare( + 'DELETE `rr` FROM `' . $this->connector->tablePrefix('rptrecords') + . '` AS `rr` INNER JOIN (SELECT `id` FROM `' . $this->connector->tablePrefix('reports') . '`' + . $cond_str . $order_str . $limit_str . ') AS `rp` ON `rp`.`id` = `rr`.`report_id`' + ); + $this->sqlBindValues($st, $f_data, $limit); + $st->execute(); + $st->closeCursor(); + + $st = $db->prepare( + 'DELETE FROM `' . $this->connector->tablePrefix('reports') . "`{$cond_str}{$order_str}{$limit_str}" + ); + $this->sqlBindValues($st, $f_data, $limit); + $st->execute(); + $st->closeCursor(); + + $db->commit(); + } catch (\PDOException $e) { + $db->rollBack(); + throw new DatabaseFatalException('Failed to delete reports', -1, $e); + } catch (\Exception $e) { + $db->rollBack(); + throw $e; + } + } + + /** + * Returns a list of months with years of the form: 'yyyy-mm' for which there is at least one report + * + * @return array + */ + public function months(): array + { + $res = []; + $rep_tn = $this->connector->tablePrefix('reports'); + try { + $st = $this->connector->dbh()->query( + 'SELECT DISTINCT DATE_FORMAT(`date`, "%Y-%m") AS `month` FROM' + . ' ((SELECT DISTINCT `begin_time` AS `date` FROM `' . $rep_tn + . '`) UNION (SELECT DISTINCT `end_time` AS `date` FROM `' . $rep_tn + . '`)) AS `r` ORDER BY `month` DESC' + ); + while ($row = $st->fetch(\PDO::FETCH_NUM)) { + $res[] = $row[0]; + } + $st->closeCursor(); + } catch (\PDOException $e) { + throw new DatabaseFatalException('Failed to get a list of months', -1, $e); + } + return $res; + } + + /** + * Returns a list of reporting organizations from which there is at least one report + * + * @return array + */ + public function organizations(): array + { + $res = []; + $rep_tn = $this->connector->tablePrefix('reports'); + try { + $st = $this->connector->dbh()->query( + 'SELECT DISTINCT `org` FROM `' . $rep_tn . '` ORDER BY `org`' + ); + while ($row = $st->fetch(\PDO::FETCH_NUM)) { + $res[] = $row[0]; + } + $st->closeCursor(); + } catch (\PDOException $e) { + throw new DatabaseFatalException('Failed to get a list of organizations', -1, $e); + } + return $res; + } + + /** + * Returns `ORDER BY ...` part of the SQL query for report records + * + * @return string + */ + private function sqlOrderRecords(): string + { + $o_set = explode(',', SettingsList::getSettingByName('report-view.sort-records-by')->value()); + switch ($o_set[0]) { + case 'ip': + $fname = 'ip'; + break; + case 'message-count': + default: + $fname = 'rcount'; + break; + } + $dir = $o_set[1] === 'descent' ? 'DESC' : 'ASC'; + + return " ORDER BY `{$fname}` {$dir}"; + } + + /** + * Checks if the domain exists and adds it to the database if necessary + * + * It automatically adds the domain if there are no domains in the database + * or if the domain match the `allowed_domains` reqular expression in the configuration file. + * Otherwise, throws a SoftException. + * + * @param array $data Domain data + * @param object $mapper Domain mapper + * + * @return void + */ + private function insertDomain(array &$data, $mapper): void + { + $mapper = $this->connector->getMapper('domain'); + if ($mapper->count(1) !== 0) { + if (is_null(self::$allowed_domains)) { + $allowed = Core::instance()->config('fetcher/allowed_domains', ''); + if (!empty($allowed)) { + self::$allowed_domains = "<{$allowed}>i"; + } + } + try { + $add = !empty(self::$allowed_domains) && preg_match(self::$allowed_domains, $data['fqdn']) === 1; + } catch (\ErrorException $e) { + $add = false; + Core::instance()->logger()->warning( + 'The allow_domains parameter in the settings has an incorrect regular expression value.' + ); + } + if (!$add) { + throw new SoftException('Failed to add an incoming report: unknown domain: ' . $data['fqdn']); + } + } + + $data['active'] = true; + $data['description'] = 'The domain was added automatically.'; + $mapper->save($data); + } + + /** + * Binds a nullable array to an SQL query as a json string + * + * @param PDOStatement $st DB statement object + * @param int $idx Bind position + * @param array $data JSON data or null + * + * @return void + */ + private static function sqlBindJson($st, int $idx, $data): void + { + if (is_null($data)) { + $val = null; + $type = \PDO::PARAM_NULL; + } else { + $val = json_encode($data); + $type = \PDO::PARAM_STR; + } + $st->bindValue($idx, $val, $type); + } + + /** + * Returns `ORDER BY ...` part of the SQL query + * + * @param array $order Key-value array with ordering options + * + * @return string + */ + private function sqlOrderList(array &$order): string + { + + $dir = $order['direction'] === 'ascent' ? 'ASC' : 'DESC'; + return " ORDER BY `{$order['field']}` {$dir}"; + } + + /** + * The valid filter item names + */ + private static $filters_available = [ + 'domain', 'month', 'before_time', 'organization', 'dkim', 'spf', 'status' + ]; + + /** + * Returns prepared filter data for sql queries + * + * @param array $filter Key-value array with filter options + * + * @return array + */ + private function prepareFilterData(array &$filter): array + { + $filters = []; + for ($i = 0; $i < 2; ++$i) { + $filters[] = [ + 'a_str' => [], + 'bindings' => [] + ]; + } + foreach (self::$filters_available as $fn) { + if (isset($filter[$fn])) { + $fv = $filter[$fn]; + switch (gettype($fv)) { + case 'string': + if (!empty($fv)) { + if ($fn == 'domain') { + $filters[0]['a_str'][] = '`rp`.`domain_id` = ?'; + $d_data = [ 'fqdn' => $fv ]; + $this->connector->getMapper('domain')->fetch($d_data); + $filters[0]['bindings'][] = [ $d_data['id'], \PDO::PARAM_INT ]; + } elseif ($fn == 'month') { + $ma = explode('-', $fv); + if (count($ma) != 2) { + throw new SoftException('Report list filter: Incorrect date format'); + } + $year = (int)$ma[0]; + $month = (int)$ma[1]; + if ($year < 0 || $month < 1 || $month > 12) { + throw new SoftException('Report list filter: Incorrect month or year value'); + } + $filters[0]['a_str'][] = '`begin_time` < ? AND `end_time` >= ?'; + $date1 = new DateTime("{$year}-{$month}-01"); + $date2 = (clone $date1)->modify('first day of next month'); + $date1->add(new \DateInterval('PT10S')); + $date2->sub(new \DateInterval('PT10S')); + $filters[0]['bindings'][] = [ $date2->format('Y-m-d H:i:s'), \PDO::PARAM_STR ]; + $filters[0]['bindings'][] = [ $date1->format('Y-m-d H:i:s'), \PDO::PARAM_STR ]; + } elseif ($fn == 'organization') { + $filters[0]['a_str'][] = '`org` = ?'; + $filters[0]['bindings'][] = [ $fv, \PDO::PARAM_STR ]; + } elseif ($fn == 'dkim') { + if ($fv === Common::$align_res[0]) { + $val = 0; + } else { + $val = count(Common::$align_res) - 1; + if ($fv !== Common::$align_res[$val]) { + throw new SoftException('Report list filter: Incorrect DKIM value'); + } + } + $filters[1]['a_str'][] = '`dkim_align` = ?'; + $filters[1]['bindings'][] = [ $val, \PDO::PARAM_INT ]; + } elseif ($fn == 'spf') { + if ($fv === Common::$align_res[0]) { + $val = 0; + } else { + $val = count(Common::$align_res) - 1; + if ($fv !== Common::$align_res[$val]) { + throw new SoftException('Report list filter: Incorrect SPF value'); + } + } + $filters[1]['a_str'][] = '`spf_align` = ?'; + $filters[1]['bindings'][] = [ $val, \PDO::PARAM_INT ]; + } elseif ($fn == 'status') { + if ($fv === 'read') { + $val = true; + } elseif ($fv === 'unread') { + $val = false; + } else { + throw new SoftException('Report list filter: Incorrect status value'); + } + $filters[0]['a_str'][] = '`seen` = ?'; + $filters[0]['bindings'][] = [ $val, \PDO::PARAM_BOOL ]; + } + } + break; + case 'object': + if ($fn == 'domain') { + $filters[0]['a_str'][] = '`rp`.`domain_id` = ?'; + $filters[0]['bindings'][] = [ $fv->id(), \PDO::PARAM_INT ]; + } elseif ($fn == 'before_time') { + $filters[0]['a_str'][] = '`begin_time` < ?'; + $filters[0]['bindings'][] = [ $fv->format('Y-m-d H:i:s'), \PDO::PARAM_STR ]; + } + break; + case 'integer': + if ($fn == 'domain') { + $filters[0]['a_str'][] = '`rp`.`domain_id` = ?'; + $filters[0]['bindings'][] = [ $fv, \PDO::PARAM_INT ]; + } + break; + } + } + } + $f_data = []; + for ($i = 0; $i < count($filters); ++$i) { + $filter = &$filters[$i]; + if (count($filter['a_str']) > 0) { + $f_data[$i] = [ + 'str' => implode(' AND ', $filter['a_str']), + 'bindings' => $filter['bindings'] + ]; + } + unset($filter); + } + return $f_data; + } + + /** + * Returns the SQL condition for a filter by filter id + * + * @param array $f_data Array with prepared filter data + * @param string $prefix Prefix, which will be added to the beginning of the condition string, + * but only in the case when the condition string is not empty. + * @param int $f_id Index of the filter + * + * @return string the condition string + */ + private function sqlConditionList(array &$f_data, string $prefix, int $f_idx): string + { + return isset($f_data[$f_idx]) ? ($prefix . $f_data[$f_idx]['str']) : ''; + } + + /** + * Returns `LIMIT ...` part of the SQL query + * + * @param array $limit Key-value array with two keys: `offset` and `count` + * + * @return string + */ + private function sqlLimit(array &$limit): string + { + $res = ''; + if ($limit['count'] > 0) { + $res = ' LIMIT ?'; + if ($limit['offset'] > 0) { + $res .= ', ?'; + } + } + return $res; + } + + /** + * Binds the values of the filter and the limit to SQL query + * + * @param PDOStatement $st Prepared SQL statement to bind to + * @param array $f_data Array with prepared filter data + * @param array $limit Key-value array with two keys: `offset` and `count` + * + * @return void + */ + private function sqlBindValues($st, array &$f_data, array &$limit): void + { + $pos = 0; + if (isset($f_data[0])) { + $this->sqlBindFilterValues($st, $f_data, 0, $pos); + } + if (isset($f_data[1])) { + $this->sqlBindFilterValues($st, $f_data, 1, $pos); + } + if ($limit['count'] > 0) { + if ($limit['offset'] > 0) { + $st->bindValue(++$pos, $limit['offset'], \PDO::PARAM_INT); + } + $st->bindValue(++$pos, $limit['count'], \PDO::PARAM_INT); + } + } + + /** + * Binds the values of the specified filter item to SQL query + * + * @param PDOStatement $st Prepared SQL statement to bind to + * @param array $f_data Array with prepared filter data + * @param int $filter_idx Index of the filter to bind to + * @param int $bind_pos Start bind position (pointer). It will be increaded with each binding. + * + * @return void + */ + private function sqlBindFilterValues($st, array &$f_data, int $filter_idx, int &$bind_pos): void + { + foreach ($f_data[$filter_idx]['bindings'] as &$bv) { + $st->bindValue(++$bind_pos, $bv[0], $bv[1]); + } + } +} diff --git a/root/opt/dmarc-srg/classes/Database/Mariadb/SettingMapper.php b/root/opt/dmarc-srg/classes/Database/Mariadb/SettingMapper.php new file mode 100644 index 0000000..ed57081 --- /dev/null +++ b/root/opt/dmarc-srg/classes/Database/Mariadb/SettingMapper.php @@ -0,0 +1,130 @@ +. + * + * ========================= + * + * This file contains the SettingMapper class + * + * @category API + * @package DmarcSrg + * @author Aleksey Andreev (liuch) + * @license https://www.gnu.org/licenses/gpl-3.0.html GNU/GPLv3 + */ + +namespace Liuch\DmarcSrg\Database\Mariadb; + +use Liuch\DmarcSrg\Database\SettingMapperInterface; +use Liuch\DmarcSrg\Exception\DatabaseFatalException; +use Liuch\DmarcSrg\Exception\DatabaseNotFoundException; + +/** + * SettingMapper class implementation for MariaDB + */ +class SettingMapper implements SettingMapperInterface +{ + private $connector = null; + + /** + * The constructor + * + * @param Connector $connector DatabaseConnector + */ + public function __construct(object $connector) + { + $this->connector = $connector; + } + + /** + * Returns setting value as a string by key + * + * @param string $key + * + * @return string + */ + public function value(string $key): string + { + try { + $st = $this->connector->dbh()->prepare( + 'SELECT `value` FROM `' . $this->connector->tablePrefix('system') . '` WHERE `key` = ?' + ); + $st->bindValue(1, $key, \PDO::PARAM_STR); + $st->execute(); + if (!$res = $st->fetch(\PDO::FETCH_NUM)) { + throw new DatabaseNotFoundException('Setting not found: ' . $key); + } + $st->closeCursor(); + return $res[0]; + } catch (\PDOException $e) { + throw new DatabaseFatalException('Failed to get a setting', -1, $e); + } + } + + /** + * Returns a key-value array of the setting list like this: + * [ 'name1' => 'value1', 'name2' => 'value2' ] + * + * @return array + */ + public function list(): array + { + $res = []; + try { + $st = $this->connector->dbh()->query( + 'SELECT `key`, `value` FROM `' . $this->connector->tablePrefix('system') . '` ORDER BY `key`' + ); + while ($row = $st->fetch(\PDO::FETCH_NUM)) { + $res[$row[0]] = $row[1]; + } + $st->closeCursor(); + } catch (\PDOException $e) { + throw new DatabaseFatalException('Failed to get a list of the settings', -1, $e); + } + return $res; + } + + /** + * Saves the setting to the database + * + * Updates the value of the setting in the database if the setting exists there or insert a new record otherwise. + * + * @param string $name Setting name + * @param string $value Setting value + * + * @return void + */ + public function save(string $name, string $value): void + { + $db = $this->connector->dbh(); + try { + $st = $db->prepare( + 'INSERT INTO `' . $this->connector->tablePrefix('system') . + '` (`key`, `value`) VALUES (?, ?) ON DUPLICATE KEY UPDATE `value` = ?' + ); + $st->bindValue(1, $name, \PDO::PARAM_STR); + $st->bindValue(2, $value, \PDO::PARAM_STR); + $st->bindValue(3, $value, \PDO::PARAM_STR); + $st->execute(); + $st->closeCursor(); + } catch (\PDOException $e) { + throw new DatabaseFatalException('Failed to update a setting', -1, $e); + } + } +} diff --git a/root/opt/dmarc-srg/classes/Database/Mariadb/StatisticsMapper.php b/root/opt/dmarc-srg/classes/Database/Mariadb/StatisticsMapper.php new file mode 100644 index 0000000..8ddbfe1 --- /dev/null +++ b/root/opt/dmarc-srg/classes/Database/Mariadb/StatisticsMapper.php @@ -0,0 +1,222 @@ +. + * + * ========================= + * + * This file contains the StatisticsMapper class + * + * @category API + * @package DmarcSrg + * @author Aleksey Andreev (liuch) + * @license https://www.gnu.org/licenses/gpl-3.0.html GNU/GPLv3 + */ + +namespace Liuch\DmarcSrg\Database\Mariadb; + +use Liuch\DmarcSrg\Database\StatisticsMapperInterface; +use Liuch\DmarcSrg\Exception\DatabaseFatalException; + +/** + * StatisticsMapper class implementation for MariaDB + */ +class StatisticsMapper implements StatisticsMapperInterface +{ + private $connector = null; + + /** + * The constructor + * + * @param Connector $connector DatabaseConnector + */ + public function __construct(object $connector) + { + $this->connector = $connector; + } + + /** + * Returns summary information for the specified domain and date range + * + * @param Domain|null $domain Domain for which the information is needed. Null is for all domains. + * @param array $range Array with two dates + * + * @return array Array with Summary information: + * 'emails' => [ + * 'total' => total email processed (int) + * 'dkim_spf_aligned' => Both DKIM and SPF aligned (int) + * 'dkim_aligned' => Only DKIM aligned (int) + * 'spf_aligned' => Only SPF aligned (int) + * ]; + */ + public function summary($domain, array &$range): array + { + $is_domain = $domain ? true : false; + $db = $this->connector->dbh(); + try { + $st = $db->prepare( + 'SELECT SUM(`rcount`), SUM(IF(`dkim_align` = 2 AND `spf_align` = 2, `rcount`, 0)),' + . ' SUM(IF(`dkim_align` = 2 AND `spf_align` <> 2, `rcount`, 0)),' + . ' SUM(IF(`dkim_align` <> 2 AND `spf_align` = 2, `rcount`, 0))' + . ' FROM `' . $this->connector->tablePrefix('rptrecords') . '` AS `rr`' + . ' INNER JOIN `' . $this->connector->tablePrefix('reports') + . '` AS `rp` ON `rr`.`report_id` = `rp`.`id`' + . $this->sqlCondition($is_domain) + ); + $this->sqlBindValues($st, $domain, $range); + $st->execute(); + $row = $st->fetch(\PDO::FETCH_NUM); + $ems = [ + 'total' => intval($row[0]), + 'dkim_spf_aligned' => intval($row[1]), + 'dkim_aligned' => intval($row[2]), + 'spf_aligned' => intval($row[3]) + ]; + $st->closeCursor(); + + $st = $db->prepare( + 'SELECT COUNT(*) FROM (SELECT `org` FROM `' . $this->connector->tablePrefix('reports') . '`' + . $this->sqlCondition($is_domain) . ' GROUP BY `org`) AS `orgs`' + ); + $this->sqlBindValues($st, $domain, $range); + $st->execute(); + $row = $st->fetch(\PDO::FETCH_NUM); + $st->closeCursor(); + } catch (\PDOException $e) { + throw new DatabaseFatalException('Failed to get summary information', -1, $e); + } + + return [ + 'emails' => $ems, + 'organizations' => intval($row[0]) + ]; + } + + /** + * Returns a list of ip-addresses from which the e-mail messages were received, with some statistics for each one + * + * @param Domain|null $domain Domain for which the information is needed. Null is for all domains. + * @param array $range Array with two dates + * + * @return array A list of ip-addresses with fields `ip`, `emails`, `dkim_aligned`, `spf_aligned` + */ + public function ips($domain, array &$range): array + { + try { + $st = $this->connector->dbh()->prepare( + 'SELECT `ip`, SUM(`rcount`) AS `rcount`, SUM(IF(`dkim_align` = 2, `rcount`, 0)) AS `dkim_aligned`,' + . ' SUM(IF(`spf_align` = 2, `rcount`, 0)) AS `spf_aligned`' + . ' FROM `' . $this->connector->tablePrefix('rptrecords') . '` AS `rr`' + . ' INNER JOIN `' . $this->connector->tablePrefix('reports') + . '` AS `rp` ON `rr`.`report_id` = `rp`.`id`' + . $this->sqlCondition($domain ? true : false) . ' GROUP BY `ip` ORDER BY `rcount` DESC' + ); + $this->sqlBindValues($st, $domain, $range); + $st->execute(); + $res = []; + while ($row = $st->fetch(\PDO::FETCH_NUM)) { + $res[] = [ + 'ip' => inet_ntop($row[0]), + 'emails' => intval($row[1]), + 'dkim_aligned' => intval($row[2]), + 'spf_aligned' => intval($row[3]) + ]; + } + $st->closeCursor(); + } catch (\PDOException $e) { + throw new DatabaseFatalException('Failed to get IPs summary information', -1, $e); + } + return $res; + } + + /** + * Returns a list of organizations that sent the reports with some statistics for each one + * + * @param Domain|null $domain Domain for which the information is needed. Null is for all domains. + * @param array $range Array with two dates + * + * @return array List of organizations with fields `name`, `reports`, `emails` + */ + public function organizations($domain, array &$range): array + { + try { + $st = $this->connector->dbh()->prepare( + 'SELECT `org`, COUNT(*), SUM(`rr`.`rcount`) AS `rcount`' + . ' FROM `' . $this->connector->tablePrefix('reports') . '` AS `rp`' + . ' INNER JOIN (SELECT `report_id`, SUM(`rcount`) AS `rcount` FROM `' + . $this->connector->tablePrefix('rptrecords') + . '` GROUP BY `report_id`) AS `rr` ON `rp`.`id` = `rr`.`report_id`' + . $this->sqlCondition($domain ? true : false) + . ' GROUP BY `org` ORDER BY `rcount` DESC' + ); + $this->sqlBindValues($st, $domain, $range); + $st->execute(); + $res = []; + while ($row = $st->fetch(\PDO::FETCH_NUM)) { + $res[] = [ + 'name' => $row[0], + 'reports' => intval($row[1]), + 'emails' => intval($row[2]) + ]; + } + $st->closeCursor(); + } catch (\PDOException $e) { + throw new DatabaseFatalException('Failed to get summary information of reporting organizations', -1, $e); + } + return $res; + } + + /** + * Returns a condition string for WHERE statement + * + * @param bool $with_domain Is it needed to add a condition for a domain + * + * @return string Condition string + */ + private function sqlCondition($with_domain): string + { + $res = ' WHERE '; + if ($with_domain) { + $res .= 'domain_id = ? AND '; + } + $res .= '`begin_time` < ? AND `end_time` >= ?'; + return $res; + } + + /** + * Binds values for SQL queries + * + * @param PDOStatement $st PDO Statement to bind to + * @param Domain|null $domain Domain for the condition + * @param array $range Date range for the condition + * + * @return void + */ + private function sqlBindValues(object $st, $domain, array &$range): void + { + $pnum = 0; + if ($domain) { + $st->bindValue(++$pnum, $domain->id(), \PDO::PARAM_INT); + } + $ds1 = (clone $range['date1'])->add(new \DateInterval('PT10S'))->format('Y-m-d H:i:s'); + $ds2 = (clone $range['date2'])->sub(new \DateInterval('PT10S'))->format('Y-m-d H:i:s'); + $st->bindValue(++$pnum, $ds2, \PDO::PARAM_STR); + $st->bindValue(++$pnum, $ds1, \PDO::PARAM_STR); + } +} diff --git a/root/opt/dmarc-srg/classes/Database/Mariadb/UpgraderMapper.php b/root/opt/dmarc-srg/classes/Database/Mariadb/UpgraderMapper.php new file mode 100644 index 0000000..1873483 --- /dev/null +++ b/root/opt/dmarc-srg/classes/Database/Mariadb/UpgraderMapper.php @@ -0,0 +1,236 @@ +. + * + * ========================= + * + * This file contains the UpgraderMapper class + * + * @category API + * @package DmarcSrg + * @author Aleksey Andreev (liuch) + * @license https://www.gnu.org/licenses/gpl-3.0.html GNU/GPLv3 + */ + +namespace Liuch\DmarcSrg\Database\Mariadb; + +use Liuch\DmarcSrg\Database\UpgraderMapperInterface; +use Liuch\DmarcSrg\Exception\SoftException; +use Liuch\DmarcSrg\Exception\DatabaseFatalException; +use Liuch\DmarcSrg\Exception\DatabaseNotFoundException; + +/** + * UpgraderMapper class implementation for MariaDB + */ +class UpgraderMapper implements UpgraderMapperInterface +{ + private $connector = null; + + /** + * The constructor + * + * @param Connector $connector DatabaseConnector + */ + public function __construct(object $connector) + { + $this->connector = $connector; + } + + /** + * Starts upgrading the database structure + * + * @param string $target Target version of the database structure to upgrade to + * + * @return void + */ + public function go(string $target): void + { + try { + $cur_ver = $this->connector->getMapper('setting')->value('version'); + } catch (DatabaseNotFoundException $e) { + $cur_ver = 'null'; + } + + while ($cur_ver !== $target) { + if (!isset(self::$upways['ver_' . $cur_ver])) { + throw new SoftException( + "Upgrading failed: There is no way to upgrade from {$cur_ver} to {$target}" + ); + } + $um = self::$upways['ver_' . $cur_ver]; + $cur_ver = $this->$um(); + } + } + + /** + * Upgrades the database structure from None to 0.1 + * + * @return string New version of the database structure + */ + private function upNull(): string + { + $db = $this->connector->dbh(); + $db->beginTransaction(); + try { + $db->query( + 'INSERT INTO `' . $this->connector->tablePrefix('system') + . '` (`key`, `value`) VALUES ("version", "0.1")' + ); + $db->commit(); + } catch (\PDOException $e) { + $db->rollBack(); + throw $this->dbFatalException($e); + } catch (\Exception $e) { + $db->rollBack(); + throw $e; + } + return '0.1'; + } + + /** + * Upgrades the database structure from 0.1 to 1.0 + * + * @return string New version of the database structure + */ + private function up01(): string + { + $db = $this->connector->dbh(); + // Transaction would be useful here but it doesn't work with ALTER TABLE in MySQL/MariaDB + try { + $dom_tn = $this->connector->tablePrefix('domains'); + if (!$this->columnExists($db, $dom_tn, 'active')) { + $db->query( + 'ALTER TABLE `' . $dom_tn . '` ADD COLUMN `active` boolean NOT NULL AFTER `fqdn`' + ); + } + if (!$this->columnExists($db, $dom_tn, 'created_time')) { + $db->query( + 'ALTER TABLE `' . $dom_tn . '` ADD COLUMN `created_time` datetime NOT NULL' + ); + } + if (!$this->columnExists($db, $dom_tn, 'updated_time')) { + $db->query( + 'ALTER TABLE `' . $dom_tn . '` ADD COLUMN `updated_time` datetime NOT NULL' + ); + } + $db->query( + 'UPDATE `' . $dom_tn . '` SET `active` = TRUE, `created_time` = NOW(), `updated_time` = NOW()' + ); + $db->query( + 'UPDATE `' . $this->connector->tablePrefix('system') . '` SET `value` = "1.0" WHERE `key` = "version"' + ); + } catch (\PDOException $e) { + throw $this->dbFatalException($e); + } + return '1.0'; + } + + /** + * Upgrades the database structure from 1.0 to 2.0 + * + * @return string New version of the database structure + */ + private function up10(): string + { + $db = $this->connector->dbh(); + // Transaction would be useful here but it doesn't work with ALTER TABLE in MySQL/MariaDB + try { + $sys_tn = $this->connector->tablePrefix('system'); + $db->query( + 'ALTER TABLE `' . $sys_tn . '` MODIFY COLUMN `key` varchar(64) NOT NULL' + ); + $db->query( + 'UPDATE `' . $sys_tn . '` SET `value` = "2.0" WHERE `key` = "version"' + ); + } catch (\PDOException $e) { + throw $this->dbFatalException($e); + } + return '2.0'; + } + + /** + * Upgrades the database structure from v2.0 to v3.0 + * + * @return string New version of the database structure + */ + private function up20(): string + { + $db = $this->connector->dbh(); + // Transaction would be useful here but it doesn't work with ALTER TABLE in MySQL/MariaDB + try { + $rep_tn = $this->connector->tablePrefix('reports'); + if (!$this->columnExists($db, $rep_tn, 'policy_np')) { + $db->query( + 'ALTER TABLE `' . $rep_tn . '` ADD COLUMN `policy_np` varchar(20) NULL AFTER `policy_sp`' + ); + } + $sys_tn = $this->connector->tablePrefix('system'); + $db->query( + 'UPDATE `' . $sys_tn . '` SET `value` = "3.0" WHERE `key` = "version"' + ); + } catch (\PDOException $e) { + throw $this->dbFatalException($e); + } + return '3.0'; + } + + /** + * Checks if the spefied column exists in the spefied table of the database + * + * @param object $db Connection handle of the database + * @param string $table Table name with the prefix + * @param string $columb Column name + * + * @return bool + */ + private function columnExists($db, string $table, string $column): bool + { + $st = $db->prepare( + 'SELECT NULL FROM `INFORMATION_SCHEMA`.`COLUMNS`' + . ' WHERE `table_schema` = ? AND `table_name` = ? AND `column_name` = ?' + ); + $st->bindValue(1, $this->connector->dbName(), \PDO::PARAM_STR); + $st->bindValue(2, $table, \PDO::PARAM_STR); + $st->bindValue(3, $column, \PDO::PARAM_STR); + $st->execute(); + $res = $st->fetch(\PDO::FETCH_NUM); + $st->closeCursor(); + return $res ? true : false; + } + + /** + * Return an instance of DatabaseFatalException + * + * @param Exception $e The original exception + * + * @return DatabaseFatalException + */ + private function dbFatalException($e) + { + return new DatabaseFatalException('Failed to upgrade the database structure', -1, $e); + } + + private static $upways = [ + 'ver_null' => 'upNull', + 'ver_0.1' => 'up01', + 'ver_1.0' => 'up10', + 'ver_2.0' => 'up20' + ]; +} diff --git a/root/opt/dmarc-srg/classes/Database/ReportLogMapperInterface.php b/root/opt/dmarc-srg/classes/Database/ReportLogMapperInterface.php new file mode 100644 index 0000000..609451d --- /dev/null +++ b/root/opt/dmarc-srg/classes/Database/ReportLogMapperInterface.php @@ -0,0 +1,89 @@ +. + * + * ========================= + * + * This file contains the ReportLogMapperInterface + * + * @category API + * @package DmarcSrg + * @author Aleksey Andreev (liuch) + * @license https://www.gnu.org/licenses/gpl-3.0.html GNU/GPLv3 + */ + +namespace Liuch\DmarcSrg\Database; + +interface ReportLogMapperInterface +{ + /** + * Fetches data of report log item from the database by id + * + * @param Report log data + * + * @return void + */ + public function fetch(array &$data): void; + + /** + * Saves data of report log item to the database + * + * @return void + */ + public function save(array &$data): void; + + /** + * Returns a list of report log items with given criteria + * + * @param array $filter Key-value array: + * 'from_time' => DateTime + * 'till_time' => DateTime + * @param array $order Key-value array with order options: + * 'direction' => string, 'ascent' or 'descent' + * @param array $limit Key-value array: + * 'offset' => int + * 'count' => int + * + * @return array + */ + public function list(array &$filter, array &$order, array &$limit): array; + + /** + * Returns the number of report log items matching the specified filter and limits + * + * @param array $filter Key-value array with filtering parameters + * @param array $limit Key-value array with limits + * + * @return int + */ + public function count(array &$filter, array &$limit): int; + + /** + * Deletes report log items from the database + * + * @param array $filter Key-value array with filtering parameters + * @param array $order Key-value array with order options: + * 'direction' => string, 'ascent' or 'descent' + * @param array $limit Key-value array with limits + * + * @return void + */ + public function delete(array &$filter, array &$order, array &$limit): void; +} diff --git a/root/opt/dmarc-srg/classes/Database/ReportMapperInterface.php b/root/opt/dmarc-srg/classes/Database/ReportMapperInterface.php new file mode 100644 index 0000000..20f7fec --- /dev/null +++ b/root/opt/dmarc-srg/classes/Database/ReportMapperInterface.php @@ -0,0 +1,123 @@ +. + * + * ========================= + * + * This file contains the ReportMapperInterface + * + * @category API + * @package DmarcSrg + * @author Aleksey Andreev (liuch) + * @license https://www.gnu.org/licenses/gpl-3.0.html GNU/GPLv3 + */ + +namespace Liuch\DmarcSrg\Database; + +interface ReportMapperInterface +{ + /** + * Fetches report data from the database and stores it in the passed array + * + * @param array $data Array with report data. To identify the report, + * the array must contain at least two fields: + * `report_id` - External report id from the xml file + * `domain` - Fully Qualified Domain Name without a trailing dot + * + * @return void + */ + public function fetch(array &$data): void; + + /** + * Inserts report data into the database. + * + * @param array $data Report data + * + * @return void + */ + public function save(array &$data): void; + + /** + * Sets report record property in database. + * + * It has nothing to do with the fields of the report itself. + * + * @param array $data Report data + * @param string $name Property name. Currently only `seen` is supported. + * @param variant $value Property value + * + * @return void + */ + public function setProperty(array &$data, string $name, $value): void; + + /** + * Returns a list of reports with specified parameters + * + * This method returns a list of reports that depends on the $filter, $order and $limit. + * + * @param array $filter Key-value array with filtering parameters + * @param array $order Key-value array: + * 'field' => string, 'begin_time' + * 'direction' => string, 'ascent' or 'descent' + * @param array $limit Key-value array with two keys: `offset` and `count` + * + * @return array + */ + public function list(array &$filter, array &$order, array &$limit): array; + + /** + * Returns the number of reports matching the specified filter and limits + * + * @param array $filter Key-value array with filtering parameters + * @param array $limit Key-value array with two keys: `offset` and `count` + * + * @return int + */ + public function count(array &$filter, array &$limit): int; + + /** + * Deletes reports from the database + * + * It deletes repors form the database. The filter options `dkim` and `spf` do not affect this. + * + * @param array $filter Key-value array with filtering parameters + * @param array $order Key-value array: + * 'field' => string, 'begin_time' + * 'direction' => string, 'ascent' or 'descent' + * @param array $limit Key-value array with two keys: `offset` and `count` + * + * @return void + */ + public function delete(array &$filter, array &$order, array &$limit): void; + + /** + * Returns a list of months with years of the form: 'yyyy-mm' for which there is at least one report + * + * @return array + */ + public function months(): array; + + /** + * Returns a list of reporting organizations from which there is at least one report + * + * @return array + */ + public function organizations(): array; +} diff --git a/root/opt/dmarc-srg/classes/Database/SettingMapperInterface.php b/root/opt/dmarc-srg/classes/Database/SettingMapperInterface.php new file mode 100644 index 0000000..49673fd --- /dev/null +++ b/root/opt/dmarc-srg/classes/Database/SettingMapperInterface.php @@ -0,0 +1,64 @@ +. + * + * ========================= + * + * This file contains the SettingMapperInterface + * + * @category API + * @package DmarcSrg + * @author Aleksey Andreev (liuch) + * @license https://www.gnu.org/licenses/gpl-3.0.html GNU/GPLv3 + */ + +namespace Liuch\DmarcSrg\Database; + +interface SettingMapperInterface +{ + /** + * Returns setting value as a string by key + * + * @param string $key + * + * @return string + */ + public function value(string $key): string; + + /** + * Returns a key-value array of the setting list like this: + * [ 'name1' => 'value1', 'name2' => 'value2' ] + * + * @return array + */ + public function list(): array; + + /** + * Saves the setting to the database + * + * Updates the value of the setting in the database if the setting exists there or insert a new record otherwise. + * + * @param string $name Setting name + * @param string $value Setting value + * + * @return void + */ + public function save(string $name, string $value): void; +} diff --git a/root/opt/dmarc-srg/classes/Database/StatisticsMapperInterface.php b/root/opt/dmarc-srg/classes/Database/StatisticsMapperInterface.php new file mode 100644 index 0000000..28df16b --- /dev/null +++ b/root/opt/dmarc-srg/classes/Database/StatisticsMapperInterface.php @@ -0,0 +1,71 @@ +. + * + * ========================= + * + * This file contains the StatisticsMapperInterface + * + * @category API + * @package DmarcSrg + * @author Aleksey Andreev (liuch) + * @license https://www.gnu.org/licenses/gpl-3.0.html GNU/GPLv3 + */ + +namespace Liuch\DmarcSrg\Database; + +interface StatisticsMapperInterface +{ + /** + * Returns summary information for the specified domain and date range + * + * @param Domain|null $domain Domain for which the information is needed. Null is for all domains. + * @param array $range Array with two dates + * + * @return array Array with Summary information: + * 'emails' => [ + * 'total' => total email processed (int) + * 'dkim_spf_aligned' => Both DKIM and SPF aligned (int) + * 'dkim_aligned' => Only DKIM aligned (int) + * 'spf_aligned' => Only SPF aligned (int) + * ]; + */ + public function summary($domain, array &$range): array; + + /** + * Returns a list of ip-addresses from which the e-mail messages were received, with some statistics for each one + * + * @param Domain|null $domain Domain for which the information is needed. Null is for all domains. + * @param array $range Array with two dates + * + * @return array A list of ip-addresses with fields `ip`, `emails`, `dkim_aligned`, `spf_aligned` + */ + public function ips($domain, array &$range): array; + + /** + * Returns a list of organizations that sent the reports with some statistics for each one + * + * @param Domain|null $domain Domain for which the information is needed. Null is for all domains. + * @param array $range Array with two dates + * + * @return array List of organizations with fields `name`, `reports`, `emails` + */ + public function organizations($domain, array &$range): array; +} diff --git a/root/opt/dmarc-srg/classes/Database/UpgraderMapperInterface.php b/root/opt/dmarc-srg/classes/Database/UpgraderMapperInterface.php new file mode 100644 index 0000000..562747c --- /dev/null +++ b/root/opt/dmarc-srg/classes/Database/UpgraderMapperInterface.php @@ -0,0 +1,44 @@ +. + * + * ========================= + * + * This file contains the UpgraderMapperInterface + * + * @category API + * @package DmarcSrg + * @author Aleksey Andreev (liuch) + * @license https://www.gnu.org/licenses/gpl-3.0.html GNU/GPLv3 + */ + +namespace Liuch\DmarcSrg\Database; + +interface UpgraderMapperInterface +{ + /** + * Starts upgrading the database structure + * + * @param string $target Target version of the database structure to upgrade to + * + * @return void + */ + public function go(string $target): void; +} diff --git a/root/opt/dmarc-srg/classes/DateTime.php b/root/opt/dmarc-srg/classes/DateTime.php new file mode 100644 index 0000000..f7a251c --- /dev/null +++ b/root/opt/dmarc-srg/classes/DateTime.php @@ -0,0 +1,43 @@ +. + * + * ========================= + * + * This file contains the class DateTime + * + * @category API + * @package DmarcSrg + * @author Aleksey Andreev (liuch) + * @license https://www.gnu.org/licenses/gpl-3.0.html GNU/GPLv3 + */ + +namespace Liuch\DmarcSrg; + +/** + * This class extends the standard class to get ISO 8601 value in json_encode. + */ +class DateTime extends \DateTime implements \JsonSerializable +{ + public function jsonSerialize(): string + { + return $this->format(\DateTime::ATOM); + } +} diff --git a/root/opt/dmarc-srg/classes/Directories/Directory.php b/root/opt/dmarc-srg/classes/Directories/Directory.php new file mode 100644 index 0000000..b3c86bd --- /dev/null +++ b/root/opt/dmarc-srg/classes/Directories/Directory.php @@ -0,0 +1,165 @@ +. + * + * ========================= + * + * This file contains the class Directory + * + * @category API + * @package DmarcSrg + * @author Aleksey Andreev (liuch) + * @license https://www.gnu.org/licenses/gpl-3.0.html GNU/GPLv3 + */ + +namespace Liuch\DmarcSrg\Directories; + +use Liuch\DmarcSrg\ErrorHandler; +use Liuch\DmarcSrg\Exception\SoftException; +use Liuch\DmarcSrg\Exception\LogicException; +use Liuch\DmarcSrg\Exception\RuntimeException; + +/** + * This class is designed to work with the report directories which are listed in the configuration file. + */ +class Directory +{ + private $id = null; + private $name = null; + private $location = null; + + /** + * It's the constructor of the class + * + * @param int $id Id of the directory. In fact, it is a serial number in the configuration file. + * @param array $data An array with the following fields: + * `location` (string) - Location of the directory in the file system. + * `name` (string) - Name of the directory. It is optional. + * + * @return void + */ + public function __construct(int $id, array $data) + { + if (isset($data['name']) && gettype($data['name']) !== 'string') { + throw new LogicException('Directory name must be either null or a string value'); + } + if (!isset($data['location']) || gettype($data['location']) !== 'string') { + throw new LogicException('Directory location must be a string value'); + } + if (empty($data['location'])) { + throw new LogicException('Directory location must not be an empty string'); + } + + $this->id = $id; + $this->name = $data['name'] ?? null; + $this->location = $data['location']; + if (empty($this->name)) { + $this->name = 'Directory ' . $this->id; + } + if (substr($this->location, -1) !== '/') { + $this->location .= '/'; + } + } + + /** + * Returns an array with directory configuration data. + * + * @return array + */ + public function toArray(): array + { + return [ + 'id' => $this->id, + 'name' => $this->name, + 'location' => $this->location + ]; + } + + /** + * Checks the existence and accessibility of the directory. Returns the result as an array. + * + * @return array + */ + public function check(): array + { + try { + self::checkPath($this->location, true); + self::checkPath($this->location . 'failed/', false); + } catch (RuntimeException $e) { + return ErrorHandler::exceptionResult($e); + } + + return [ + 'error_code' => 0, + 'message' => 'Successfully', + 'status' => [ + 'files' => $this->count() + ] + ]; + } + + /** + * Returns the total number of files in the directory. + * + * @return int + */ + public function count(): int + { + $cnt = 0; + try { + $fs = new \FilesystemIterator($this->location); + } catch (\Exception $e) { + throw new RuntimeException("Error accessing directory {$this->location}", -1, $e); + } + foreach ($fs as $entry) { + if ($entry->isFile()) { + ++$cnt; + } + } + return $cnt; + } + + /** + * Checks accessibility of a directory by its path. Throws an exception in case of any error. + * + * @param string $path Path to the directory to check. + * @param bool $existence If true, the absence of the directory causes an error. + * + * @return void + */ + private static function checkPath(string $path, bool $existence): void + { + if (!file_exists($path)) { + if ($existence) { + throw new SoftException($path . ' directory does not exist!'); + } + return; + } + if (!is_dir($path)) { + throw new SoftException($path . ' is not a directory!'); + } + if (!is_readable($path)) { + throw new SoftException($path . ' directory is not readable!'); + } + if (!is_writable($path)) { + throw new SoftException($path . ' directory is not writable!'); + } + } +} diff --git a/root/opt/dmarc-srg/classes/Directories/DirectoryList.php b/root/opt/dmarc-srg/classes/Directories/DirectoryList.php new file mode 100644 index 0000000..f4aa8ac --- /dev/null +++ b/root/opt/dmarc-srg/classes/Directories/DirectoryList.php @@ -0,0 +1,147 @@ +. + * + * ========================= + * + * This file contains the class DirectoryList + * + * @category API + * @package DmarcSrg + * @author Aleksey Andreev (liuch) + * @license https://www.gnu.org/licenses/gpl-3.0.html GNU/GPLv3 + */ + +namespace Liuch\DmarcSrg\Directories; + +use Liuch\DmarcSrg\Core; +use Liuch\DmarcSrg\Exception\LogicException; + +/** + * This class is designed to work with the list of report directories which are listed in the configuration file. + */ +class DirectoryList +{ + private $list = null; + + /** + * Returns a list of directories for the setting file + * + * @return array Array with instances of Directory class + */ + public function list(): array + { + $this->ensureList(); + return $this->list; + } + + /** + * Returns an instance of the Directory class by its Id + * + * @param int $id Id of the required directory + * + * @return Directory + */ + public function directory(int $id) + { + $this->ensureList(); + if ($id <= 0 || $id > count($this->list)) { + throw new LogicException('Incorrect directory Id'); + } + return $this->list[$id - 1]; + } + + /** + * Checks the accessibility of the specified directory or all the directories from configuration file if $id is 0. + * + * @param int $id Directory Id to check + * + * @return array Result array with `error_code` and `message` fields. For one directory and if there is no error, + * a field `status` will be added to the result. + */ + public function check(int $id): array + { + if ($id !== 0) { + $dir = $this->directory($id); + return $dir->check(); + } + + $this->ensureList(); + $results = []; + $err_cnt = 0; + $dir_cnt = count($this->list); + for ($i = 0; $i < $dir_cnt; ++$i) { + $r = $this->list[$i]->check(); + if ($r['error_code'] !== 0) { + ++$err_cnt; + } + $results[] = $r; + } + $res = []; + if ($err_cnt === 0) { + $res['error_code'] = 0; + $res['message'] = 'Successfully'; + } else { + $res['error_code'] = -1; + $res['message'] = sprintf('%d of %d directories have failed the check', $err_cnt, $dir_cnt); + } + $res['results'] = $results; + return $res; + } + + /** + * Creates an array of directories from the configuration file if it does not exist + * for using in other methods of the class. + * + * @return void + */ + private function ensureList(): void + { + if (!is_null($this->list)) { + return; + } + + $directories = Core::instance()->config('directories'); + + $this->list = []; + if (is_array($directories)) { + $cnt = count($directories); + if ($cnt > 0) { + if (isset($directories[0])) { + $id = 1; + for ($i = 0; $i < $cnt; ++$i) { + try { + $this->list[] = new Directory($id, $directories[$i]); + ++$id; + } catch (LogicException $d) { + // Just ignore this directory setting. + } + } + } else { + try { + $this->list[] = new Directory(1, $directories); + } catch (LogicException $e) { + // Just ignore this directory setting. + } + } + } + } + } +} diff --git a/root/opt/dmarc-srg/classes/Domains/Domain.php b/root/opt/dmarc-srg/classes/Domains/Domain.php new file mode 100644 index 0000000..aaf2d05 --- /dev/null +++ b/root/opt/dmarc-srg/classes/Domains/Domain.php @@ -0,0 +1,286 @@ +. + * + * ========================= + * + * This file contains the class Domain + * + * @category API + * @package DmarcSrg + * @author Aleksey Andreev (liuch) + * @license https://www.gnu.org/licenses/gpl-3.0.html GNU/GPLv3 + */ + +namespace Liuch\DmarcSrg\Domains; + +use Liuch\DmarcSrg\Core; +use Liuch\DmarcSrg\Exception\SoftException; +use Liuch\DmarcSrg\Exception\LogicException; +use Liuch\DmarcSrg\Exception\DatabaseNotFoundException; + +/** + * It's a class for accessing to stored domains data + * + * This class is designed for storing and manipulating domain data. + * All queries to the datatabase are made in lazy mode. + */ +class Domain +{ + private $db = null; + private $ex_f = null; + private $data = [ + 'id' => null, + 'fqdn' => null, + 'active' => null, + 'description' => null, + 'created_time' => null, + 'updated_time' => null + ]; + + /** + * It's a constructor of the class + * + * Some examples of using: + * (new Domain(1))->fqdn(); - will return the fully qualified domain name for the domain with id = 1 + * (new Domain('example.com'))->description(); - will return the description for the domain example.com + * (new Domain([ 'fqdn' => 'example.com', 'description' => 'an expample domain' ])->save(); - will add + * this domain to the database if it does not exist in it. + * + * @param int|string|array $data Some domain data to identify it + * int value is treated as domain id + * string value is treated as a FQDN + * array has these fields: `id`, `fqdn`, `active`, `description` + * and usually uses for creating a new domain item. + * Note: The values of the fields `created_time` and `updated_time` + * will be ignored while saving to the database. + * @param DatabaseController $db The database controller + * + * @return void + */ + public function __construct($data, $db = null) + { + $this->db = $db ?? Core::instance()->database(); + switch (gettype($data)) { + case 'integer': + $this->data['id'] = $data; + return; + case 'string': + $this->data['fqdn'] = strtolower($data); + $this->checkFqdn(); + return; + case 'array': + if (isset($data['id'])) { + if (gettype($data['id']) !== 'integer') { + break; + } + $this->data['id'] = $data['id']; + } + if (isset($data['fqdn'])) { + if (gettype($data['fqdn']) !== 'string') { + break; + } + $this->data['fqdn'] = strtolower($data['fqdn']); + $this->checkFqdn(); + } + if (isset($data['active'])) { + if (gettype($data['active']) !== 'boolean') { + break; + } + $this->data['active'] = $data['active']; + } else { + $this->data['active'] = false; + } + if (isset($data['description'])) { + if (gettype($data['description']) !== 'string') { + break; + } + $this->data['description'] = $data['description']; + } + if (isset($data['created_time'])) { + if (gettype($data['created_time']) !== 'object') { + break; + } + $this->data['created_time'] = $data['created_time']; + } + if (isset($data['updated_time'])) { + if (gettype($data['updated_time']) !== 'object') { + break; + } + $this->data['updated_time'] = $data['updated_time']; + } + if (!is_null($this->data['id']) || !is_null($this->data['fqdn'])) { + return; + } + } + throw new LogicException('Wrong domain data'); + } + + /** + * Returns true if the domain exists in the database or false otherwise + * + * @return bool Whether the domain exists + */ + public function exists(): bool + { + if (is_null($this->ex_f)) { + $this->ex_f = $this->db->getMapper('domain')->exists($this->data); + } + return $this->ex_f; + } + + /** + * Returns the domain id + * + * @return int The domain id + */ + public function id(): int + { + if (is_null($this->data['id'])) { + $this->fetchData(); + } + return $this->data['id']; + } + + /** + * Returns the domain's FQDN + * + * @return string FQDN for the domain + */ + public function fqdn(): string + { + if (is_null($this->data['fqdn'])) { + $this->fetchData(); + } + return $this->data['fqdn']; + } + + /** + * Whether the domain is active or not + * + * When the domain is inactive, all incoming reports for it are ignored + * but the domain will still be included in summary reports. + * + * @return bool + */ + public function active(): bool + { + if (is_null($this->data['active'])) { + $this->fetchData(); + } + return $this->data['active']; + } + + /** + * Returns the domain's description + * + * @return string|null The description of the domain if it exists or null otherwise + */ + public function description() + { + if (is_null($this->data['id']) || is_null($this->data['fqdn'])) { + $this->fetchData(); + } + return $this->data['description']; + } + + /** + * Returns an array with domain data + * + * @return array Domain data + */ + public function toArray(): array + { + if (is_null($this->data['id']) || is_null($this->data['fqdn'])) { + $this->fetchData(); + } + $res = $this->data; + unset($res['id']); + return $res; + } + + /** + * Saves the domain to the database + * + * Updates the domain's description in the database if the domain exists or insert a new record otherwise. + * The domain id is ignored in the insert mode. + * + * @return void + */ + public function save(): void + { + $this->db->getMapper('domain')->save($this->data); + $this->ex_f = true; + } + + /** + * Deletes the domain from the database + * + * Deletes the domain if there are no reports for this domain in the database. + * If you want to stop handling reports for this domain, just make it inactive. + * + * @return void + */ + public function delete(): void + { + if (is_null($this->data['id'])) { + $this->fetchData(); + } + $this->db->getMapper('domain')->delete($this->data); + $this->ex_f = false; + } + + /** + * Removes the trailing dot from the domain name and checks it for an empty value. + * + * @return void + */ + private function checkFqdn(): void + { + $fqdn = trim($this->data['fqdn']); + if (substr($fqdn, -1) === '.') { + $fqdn = trim(substr($fqdn, 0, -1)); + } + if ($fqdn === '') { + throw new SoftException('The domain name must not be an empty string'); + } + $this->data['fqdn'] = $fqdn; + } + + /** + * Fetches the domain data from the database by its id or name + * + * @return void + */ + private function fetchData(): void + { + if ($this->ex_f === false) { + return; + } + + try { + $this->db->getMapper('domain')->fetch($this->data); + $this->ex_f = true; + } catch (DatabaseNotFoundException $e) { + $this->ex_f = false; + throw new SoftException('Domain not found'); + } + } +} diff --git a/root/opt/dmarc-srg/classes/Domains/DomainList.php b/root/opt/dmarc-srg/classes/Domains/DomainList.php new file mode 100644 index 0000000..937be4a --- /dev/null +++ b/root/opt/dmarc-srg/classes/Domains/DomainList.php @@ -0,0 +1,79 @@ +. + * + * ========================= + * + * This file contains the class DomainList + * + * @category API + * @package DmarcSrg + * @author Aleksey Andreev (liuch) + * @license https://www.gnu.org/licenses/gpl-3.0.html GNU/GPLv3 + */ + +namespace Liuch\DmarcSrg\Domains; + +use Liuch\DmarcSrg\Core; + +/** + * This class is designed to work with the list of domains + */ +class DomainList +{ + private $db = null; + + /** + * The constructor + * + * @param DatabaseController $db The database controller + */ + public function __construct($db = null) + { + $this->db = $db ?? Core::instance()->database(); + } + + /** + * Returns a list of domains from the database + * + * @return array Array with instances of Domain class + */ + public function getList(): array + { + $list = []; + foreach ($this->db->getMapper('domain')->list() as $dd) { + $list[] = new Domain($dd, $this->db); + } + return [ + 'domains' => $list, + 'more' => false + ]; + } + + /** + * Returns an ordered array with domain names from the database + * + * @return array Array of strings + */ + public function names(): array + { + return $this->db->getMapper('domain')->names(); + } +} diff --git a/root/opt/dmarc-srg/classes/ErrorHandler.php b/root/opt/dmarc-srg/classes/ErrorHandler.php new file mode 100644 index 0000000..4ab43f8 --- /dev/null +++ b/root/opt/dmarc-srg/classes/ErrorHandler.php @@ -0,0 +1,156 @@ +. + * + * ========================= + * + * This file contains ErrorHandler class + * + * @category Common + * @package DmarcSrg + * @author Aleksey Andreev (liuch) + * @license https://www.gnu.org/licenses/gpl-3.0.html GNU/GPLv3 + */ + +namespace Liuch\DmarcSrg; + +use Liuch\DmarcSrg\Log\LoggerInterface; +use Liuch\DmarcSrg\Log\LoggerAwareInterface; +use Liuch\DmarcSrg\Exception\SoftException; + +/** + * Uncaught exception handler + */ +class ErrorHandler implements LoggerAwareInterface +{ + private $core = null; + private $logger = null; + + /** + * The constructor + * + * @param Core $core + */ + public function __construct(object $core) + { + $this->core = $core; + } + + /** + * Handle uncaught exceptions. Used by set_exception_handler and set_error_handler functions + * + * @param Throwable $e an exception to handle. For set_error_handler it is ErrorException. + * + * @return void + */ + public function handleException(\Throwable $e): void + { + $debug = $this->core->config('debug', 0); + + if ($this->logger) { + $this->logger->error(strval($e)); + } + + if (php_sapi_name() === 'cli') { + echo self::getText($e, $debug); + exit(1); + } else { + Core::sendJson(self::getResult($e, $debug)); + } + } + + /** + * Returns an result array based on the passed exception's data. + * If the debug mode is enabled, the `debug_info` field will be added to the result. + * + * @param Throwable $e an exception for which the result is generated + * + * @return array + */ + public static function exceptionResult(\Throwable $e): array + { + return self::getResult($e, Core::instance()->config('debug', 0)); + } + + /** + * Returns information about the passed exception as text. + * If the debug is enabled, debug information will be added. + * + * @param Throwable $e an exception for which the text is generated + * + * @return string + */ + public static function exceptionText(\Throwable $e): string + { + return self::getText($e, Core::instance()->config('debug', 0)); + } + + /** + * Sets a logger to log uncaught exceptions and errors + */ + public function setLogger(LoggerInterface $logger): void + { + $this->logger = $logger; + } + + /** + * Returns the current logger + */ + public function logger() + { + return $this->logger; + } + + private static function getResult(\Throwable $e, int $debug): array + { + $code = $e->getCode(); + if ($code === 0) { + $code = -1; + } + $res = [ + 'error_code' => $code, + 'message' => $e->getMessage() + ]; + if ($debug && + (Core::instance()->userId() !== false || php_sapi_name() === 'cli') && + !($e instanceof SoftException) + ) { + $prev = $e->getPrevious(); + $res['debug_info'] = [ + 'code' => ($prev ?? $e)->getCode(), + 'content' => strval($prev ?? $e) + ]; + } + return $res; + } + + private static function getText(\Throwable $e, int $debug): string + { + $msg = 'Error: ' . $e->getMessage() . ' (' . $e->getCode() . ')' . PHP_EOL; + if (!$debug) { + return $msg; + } + + return '-----' . PHP_EOL + . $msg + . '-----' . PHP_EOL + . $e . PHP_EOL; + } +} diff --git a/root/opt/dmarc-srg/classes/Exception/AuthException.php b/root/opt/dmarc-srg/classes/Exception/AuthException.php new file mode 100644 index 0000000..6ccd963 --- /dev/null +++ b/root/opt/dmarc-srg/classes/Exception/AuthException.php @@ -0,0 +1,39 @@ +. + * + * ========================= + * + * This file contains AuthException class + * + * @category Common + * @package DmarcSrg + * @author Aleksey Andreev (liuch) + * @license https://www.gnu.org/licenses/gpl-3.0.html GNU/GPLv3 + */ + +namespace Liuch\DmarcSrg\Exception; + +/** + * Represents an authentication error + */ +class AuthException extends SoftException +{ +} diff --git a/root/opt/dmarc-srg/classes/Exception/DatabaseException.php b/root/opt/dmarc-srg/classes/Exception/DatabaseException.php new file mode 100644 index 0000000..f74fcef --- /dev/null +++ b/root/opt/dmarc-srg/classes/Exception/DatabaseException.php @@ -0,0 +1,39 @@ +. + * + * ========================= + * + * This file contains DatabaseException class + * + * @category Common + * @package DmarcSrg + * @author Aleksey Andreev (liuch) + * @license https://www.gnu.org/licenses/gpl-3.0.html GNU/GPLv3 + */ + +namespace Liuch\DmarcSrg\Exception; + +/** + * Represents an error in the database + */ +class DatabaseException extends RuntimeException +{ +} diff --git a/root/opt/dmarc-srg/classes/Exception/DatabaseExceptionFactory.php b/root/opt/dmarc-srg/classes/Exception/DatabaseExceptionFactory.php new file mode 100644 index 0000000..467e3c6 --- /dev/null +++ b/root/opt/dmarc-srg/classes/Exception/DatabaseExceptionFactory.php @@ -0,0 +1,66 @@ +. + * + * ========================= + * + * This file contains DatabaseExceptionFactory class + * + * @category Common + * @package DmarcSrg + * @author Aleksey Andreev (liuch) + * @license https://www.gnu.org/licenses/gpl-3.0.html GNU/GPLv3 + */ + +namespace Liuch\DmarcSrg\Exception; + +/** + * Factory class for DatabaseException + */ +class DatabaseExceptionFactory +{ + /** + * Creates a DatabaseException instance with an appropriate message based on the passed class's name and error code. + * + * @param Exception $origin The original exception + * + * @return DatabaseException + */ + public static function fromException(\Throwable $origin) + { + $msg = null; + if (get_class($origin) === 'PDOException') { + switch ($origin->getCode()) { + case 1044: + case 1045: + $msg = 'Database access denied'; + break; + case 2002: + case 2006: + $msg = 'Database connection error'; + break; + } + } + if (!$msg) { + $msg = 'Database error'; + } + return new DatabaseException($msg, -1, $origin); + } +} diff --git a/root/opt/dmarc-srg/classes/Exception/DatabaseFatalException.php b/root/opt/dmarc-srg/classes/Exception/DatabaseFatalException.php new file mode 100644 index 0000000..f7ca5f4 --- /dev/null +++ b/root/opt/dmarc-srg/classes/Exception/DatabaseFatalException.php @@ -0,0 +1,39 @@ +. + * + * ========================= + * + * This file contains DatabaseFatalException class + * + * @category Common + * @package DmarcSrg + * @author Aleksey Andreev (liuch) + * @license https://www.gnu.org/licenses/gpl-3.0.html GNU/GPLv3 + */ + +namespace Liuch\DmarcSrg\Exception; + +/** + * Represents an error in the database + */ +class DatabaseFatalException extends LogicException +{ +} diff --git a/root/opt/dmarc-srg/classes/Exception/DatabaseNotFoundException.php b/root/opt/dmarc-srg/classes/Exception/DatabaseNotFoundException.php new file mode 100644 index 0000000..83efe02 --- /dev/null +++ b/root/opt/dmarc-srg/classes/Exception/DatabaseNotFoundException.php @@ -0,0 +1,39 @@ +. + * + * ========================= + * + * This file contains DatabaseNotFoundException class + * + * @category Common + * @package DmarcSrg + * @author Aleksey Andreev (liuch) + * @license https://www.gnu.org/licenses/gpl-3.0.html GNU/GPLv3 + */ + +namespace Liuch\DmarcSrg\Exception; + +/** + * Represents the case where a row was not found in the database + */ +class DatabaseNotFoundException extends DatabaseException +{ +} diff --git a/root/opt/dmarc-srg/classes/Exception/LogicException.php b/root/opt/dmarc-srg/classes/Exception/LogicException.php new file mode 100644 index 0000000..9ec2ecd --- /dev/null +++ b/root/opt/dmarc-srg/classes/Exception/LogicException.php @@ -0,0 +1,39 @@ +. + * + * ========================= + * + * This file contains LogicException class + * + * @category Common + * @package DmarcSrg + * @author Aleksey Andreev (liuch) + * @license https://www.gnu.org/licenses/gpl-3.0.html GNU/GPLv3 + */ + +namespace Liuch\DmarcSrg\Exception; + +/** + * Base LogicException + */ +class LogicException extends \LogicException +{ +} diff --git a/root/opt/dmarc-srg/classes/Exception/MailboxException.php b/root/opt/dmarc-srg/classes/Exception/MailboxException.php new file mode 100644 index 0000000..de67dff --- /dev/null +++ b/root/opt/dmarc-srg/classes/Exception/MailboxException.php @@ -0,0 +1,39 @@ +. + * + * ========================= + * + * This file contains MailboxException class + * + * @category Common + * @package DmarcSrg + * @author Aleksey Andreev (liuch) + * @license https://www.gnu.org/licenses/gpl-3.0.html GNU/GPLv3 + */ + +namespace Liuch\DmarcSrg\Exception; + +/** + * Represents an error of a mailbox + */ +class MailboxException extends RuntimeException +{ +} diff --git a/root/opt/dmarc-srg/classes/Exception/RuntimeException.php b/root/opt/dmarc-srg/classes/Exception/RuntimeException.php new file mode 100644 index 0000000..2e266d7 --- /dev/null +++ b/root/opt/dmarc-srg/classes/Exception/RuntimeException.php @@ -0,0 +1,43 @@ +. + * + * ========================= + * + * This file contains RuntimeException class + * + * @category Common + * @package DmarcSrg + * @author Aleksey Andreev (liuch) + * @license https://www.gnu.org/licenses/gpl-3.0.html GNU/GPLv3 + */ + +namespace Liuch\DmarcSrg\Exception; + +/** + * Base RuntimeException + */ +class RuntimeException extends \RuntimeException +{ + public function __construct(string $message = '', int $code = -1, \Throwable $previous = null) + { + parent::__construct($message, $code, $previous); + } +} diff --git a/root/opt/dmarc-srg/classes/Exception/SoftException.php b/root/opt/dmarc-srg/classes/Exception/SoftException.php new file mode 100644 index 0000000..9ed3ef0 --- /dev/null +++ b/root/opt/dmarc-srg/classes/Exception/SoftException.php @@ -0,0 +1,39 @@ +. + * + * ========================= + * + * This file contains SoftException class + * + * @category Common + * @package DmarcSrg + * @author Aleksey Andreev (liuch) + * @license https://www.gnu.org/licenses/gpl-3.0.html GNU/GPLv3 + */ + +namespace Liuch\DmarcSrg\Exception; + +/** + * This exception is ignored in the debug mode + */ +class SoftException extends RuntimeException +{ +} diff --git a/root/opt/dmarc-srg/classes/Log/LogLevel.php b/root/opt/dmarc-srg/classes/Log/LogLevel.php new file mode 100644 index 0000000..7653940 --- /dev/null +++ b/root/opt/dmarc-srg/classes/Log/LogLevel.php @@ -0,0 +1,47 @@ +. + * + * ========================= + * + * This file contains the class LogLevel + * + * @category API + * @package DmarcSrg + * @author Aleksey Andreev (liuch) + * @license https://www.gnu.org/licenses/gpl-3.0.html GNU/GPLv3 + */ + +namespace Liuch\DmarcSrg\Log; + +/** + * Describes log levels + */ +class LogLevel +{ + const EMERGENCY = 'emergency'; + const ALERT = 'alert'; + const CRITICAL = 'critical'; + const ERROR = 'error'; + const WARNING = 'warning'; + const NOTICE = 'notice'; + const INFO = 'info'; + const DEBUG = 'debug'; +} diff --git a/root/opt/dmarc-srg/classes/Log/LoggerAwareInterface.php b/root/opt/dmarc-srg/classes/Log/LoggerAwareInterface.php new file mode 100644 index 0000000..bf7a04a --- /dev/null +++ b/root/opt/dmarc-srg/classes/Log/LoggerAwareInterface.php @@ -0,0 +1,47 @@ +. + * + * ========================= + * + * This file contains the interface LoggerAwareInterface + * + * @category API + * @package DmarcSrg + * @author Aleksey Andreev (liuch) + * @license https://www.gnu.org/licenses/gpl-3.0.html GNU/GPLv3 + */ + +namespace Liuch\DmarcSrg\Log; + +/** + * Describes a logger-aware instance + */ +interface LoggerAwareInterface +{ + /** + * Sets a logger instance on the object + * + * @param LoggerInterface $logger + * + * @return void + */ + public function setLogger(LoggerInterface $logger): void; +} diff --git a/root/opt/dmarc-srg/classes/Log/LoggerInterface.php b/root/opt/dmarc-srg/classes/Log/LoggerInterface.php new file mode 100644 index 0000000..6a77ae1 --- /dev/null +++ b/root/opt/dmarc-srg/classes/Log/LoggerInterface.php @@ -0,0 +1,131 @@ +. + * + * ========================= + * + * This file contains the interface LoggerInterface + * + * @category API + * @package DmarcSrg + * @author Aleksey Andreev (liuch) + * @license https://www.gnu.org/licenses/gpl-3.0.html GNU/GPLv3 + */ + +namespace Liuch\DmarcSrg\Log; + +/** + * Describes a logger instance + * The message MUST be a string or object implementing __toString(). + */ +interface LoggerInterface +{ + /** + * System is unusable + * + * @param string $message + * @param array $context + * + * @return void + */ + public function emergency($message, array $context = []): void; + + /** + * Action must be taken immediately + * + * @param string $message + * @param array $context + * + * @return void + */ + public function alert($message, array $context = []): void; + + /** + * Critical conditions + * + * @param string $message + * @param array $context + * + * @return void + */ + public function critical($message, array $context = []): void; + + /** + * Runtime errors that do not require immediate action but should typically + * be logged and monitored + * + * @param string $message + * @param array $context + * + * @return void + */ + public function error($message, array $context = []): void; + + /** + * Exceptional occurrences that are not errors + * + * @param string $message + * @param array $context + * + * @return void + */ + public function warning($message, array $context = []): void; + + /** + * Normal but significant events + * + * @param string $message + * @param array $context + * + * @return void + */ + public function notice($message, array $context = []): void; + + /** + * Interesting events + * + * @param string $message + * @param array $context + * + * @return void + */ + public function info($message, array $context = []): void; + + /** + * Detailed debug information + * + * @param string $message + * @param array $context + * + * @return void + */ + public function debug($message, array $context = []): void; + + /** + * Logs with an arbitrary level + * + * @param mixed $level + * @param string $message + * @param array $context + * + * @return void + */ + public function log($level, $message, array $context = []): void; +} diff --git a/root/opt/dmarc-srg/classes/Log/PhpSystemLogger.php b/root/opt/dmarc-srg/classes/Log/PhpSystemLogger.php new file mode 100644 index 0000000..845495a --- /dev/null +++ b/root/opt/dmarc-srg/classes/Log/PhpSystemLogger.php @@ -0,0 +1,172 @@ +. + * + * ========================= + * + * This file contains the class PhpSystemLogger; + * + * @category API + * @package DmarcSrg + * @author Aleksey Andreev (liuch) + * @license https://www.gnu.org/licenses/gpl-3.0.html GNU/GPLv3 + */ + +namespace Liuch\DmarcSrg\Log; + +/** + * Implements a logger to log messages via PHP's system logger, + * using the OS's system logging mechanism or a file, depending on + * what the error_log PHP configuration directive is set to. + */ +class PhpSystemLogger implements LoggerInterface +{ + /** + * System is unusable + * + * @param string $message + * @param array $context + * + * @return void + */ + public function emergency($message, array $context = []): void + { + $this->log(LogLevel::EMERGENCY, $message, $context); + } + + /** + * Action must be taken immediately + * + * @param string $message + * @param array $context + * + * @return void + */ + public function alert($message, array $context = []): void + { + $this->log(LogLevel::ALERT, $message, $context); + } + + /** + * Critical conditions + * + * @param string $message + * @param array $context + * + * @return void + */ + public function critical($message, array $context = []): void + { + $this->log(LogLevel::CRITICAL, $message, $context); + } + + /** + * Runtime errors that do not require immediate action but should typically + * be logged and monitored + * + * @param string $message + * @param array $context + * + * @return void + */ + public function error($message, array $context = []): void + { + $this->log(LogLevel::ERROR, $message, $context); + } + + /** + * Exceptional occurrences that are not errors + * + * @param string $message + * @param array $context + * + * @return void + */ + public function warning($message, array $context = []): void + { + $this->log(LogLevel::WARNING, $message, $context); + } + + /** + * Normal but significant events + * + * @param string $message + * @param array $context + * + * @return void + */ + public function notice($message, array $context = []): void + { + $this->log(LogLevel::NOTICE, $message, $context); + } + + /** + * Interesting events + * + * @param string $message + * @param array $context + * + * @return void + */ + public function info($message, array $context = []): void + { + $this->log(LogLevel::INFO, $message, $context); + } + + /** + * Detailed debug information + * + * @param string $message + * @param array $context + * + * @return void + */ + public function debug($message, array $context = []): void + { + $this->log(LogLevel::DEBUG, $message, $context); + } + + /** + * Logs with an arbitrary level + * + * @param mixed $level + * @param string $message + * @param array $context + * + * @return void + */ + public function log($level, $message, array $context = []): void + { + switch ($level) { + case LogLevel::EMERGENCY: + case LogLevel::ALERT: + case LogLevel::CRITICAL: + case LogLevel::ERROR: + case LogLevel::WARNING: + case LogLevel::NOTICE: + case LogLevel::INFO: + case LogLevel::DEBUG: + break; + default: + throw new \InvalidArgumentException('Invalid log level argument'); + } + \error_log("dmarc-srg [{$level}]: {$message}"); + } +} diff --git a/root/opt/dmarc-srg/classes/Mail/MailAttachment.php b/root/opt/dmarc-srg/classes/Mail/MailAttachment.php new file mode 100644 index 0000000..6ced2a5 --- /dev/null +++ b/root/opt/dmarc-srg/classes/Mail/MailAttachment.php @@ -0,0 +1,110 @@ +. + */ + +namespace Liuch\DmarcSrg\Mail; + +use Liuch\DmarcSrg\ReportFile\ReportFile; +use Liuch\DmarcSrg\Exception\SoftException; + +class MailAttachment +{ + private $conn; + private $filename; + private $bytes; + private $number; + private $mnumber; + private $encoding; + private $stream; + private $mime_type; + + public function __construct($conn, $params) + { + $this->conn = $conn; + $this->filename = $params['filename']; + $this->bytes = $params['bytes']; + $this->number = $params['number']; + $this->mnumber = $params['mnumber']; + $this->encoding = $params['encoding']; + $this->stream = null; + $this->mime_type = null; + } + + public function __destruct() + { + if (!is_null($this->stream) && get_resource_type($this->stream) == 'stream') { + fclose($this->stream); + } + } + + public function mimeType() + { + if (is_null($this->mime_type)) { + $this->mime_type = ReportFile::getMimeType($this->filename, $this->datastream()); + } + return $this->mime_type; + } + + public function size() + { + return $this->bytes; + } + + public function filename() + { + return $this->filename; + } + + public function extension() + { + return pathinfo($this->filename, PATHINFO_EXTENSION); + } + + public function datastream() + { + if (is_null($this->stream)) { + $this->stream = fopen('php://temp', 'r+'); + fwrite($this->stream, $this->toString()); + } + rewind($this->stream); + return $this->stream; + } + + private function fetchBody() + { + return imap_fetchbody($this->conn, $this->mnumber, strval($this->number), FT_PEEK); + } + + private function toString() + { + switch ($this->encoding) { + case ENC7BIT: + case ENC8BIT: + case ENCBINARY: + return $this->fetchBody(); + case ENCBASE64: + return base64_decode($this->fetchBody()); + case ENCQUOTEDPRINTABLE: + return imap_qprint($this->fetchBody()); + } + throw new SoftException('Encoding failed: Unknown encoding'); + } +} diff --git a/root/opt/dmarc-srg/classes/Mail/MailBody.php b/root/opt/dmarc-srg/classes/Mail/MailBody.php new file mode 100644 index 0000000..5189b8f --- /dev/null +++ b/root/opt/dmarc-srg/classes/Mail/MailBody.php @@ -0,0 +1,142 @@ +. + */ + +namespace Liuch\DmarcSrg\Mail; + +/** + * The class is designed to easily create multipart/alternative message bodies. + */ +class MailBody +{ + private $text = null; + private $html = null; + private $boundary = null; + + /** + * Sets text content as a part of the message body + * + * @param array $text Text part of the message as an array of strings + * + * @return void + */ + public function setText(array &$text): void + { + $this->text = $text; + } + + /** + * Sets html content as a part of the message body + * + * @param array $html Html part of the message as and array of strings + * + * @return void + */ + public function setHtml(array $html): void + { + $this->html = $html; + } + + /** + * Return Content-Type header value for the whole message + * + * @return string + */ + public function contentType(): string + { + if ($this->boundary()) { + $ctype = 'multipart/alternative; boundary="' . $this->boundary() . '"'; + } else { + if (!is_null($this->html)) { + $ctype = 'text/html'; + } else { + $ctype = 'text/plain'; + } + $ctype .= '; charset=utf-8'; + } + return $ctype; + } + + /** + * Returns all the message parts with required headers as an array of strings + * + * @return array + */ + public function content(): array + { + $content = []; + if ($this->text) { + $this->addBodyPart('text', $this->text, $content); + } + if ($this->html) { + $this->addBodyPart('html', $this->html, $content); + } + return $content; + } + + /** + * Generates a boundary string of the message. If the body has only one part of the content + * it returns null + * + * @return string|null + */ + private function boundary() + { + if (!$this->boundary) { + if ($this->text && $this->html) { + $this->boundary = '==========' . sha1(uniqid()) . '====='; + } + } + return $this->boundary; + } + + /** + * Adds the specified part of the content to the array passed as the third parameter + * with the required headers. + * + * @param string $type Type of the content to add + * @param array $part Part of the content to add + * @param array $content Where the data with headers should be added + * + * @return void + */ + private function addBodyPart(string $type, array &$part, array &$content): void + { + if ($this->boundary()) { + $content[] = '--' . $this->boundary(); + switch ($type) { + case 'text': + $ctype = 'text/plain'; + break; + case 'html': + $ctype = 'text/html'; + break; + } + $content[] = 'Content-Type: ' . $ctype . '; charset=utf-8'; + $content[] = 'Content-Transfer-Encoding: 7bit'; + $content[] = ''; + } + foreach ($part as $row) { + $content[] = $row; + } + unset($part); + } +} diff --git a/root/opt/dmarc-srg/classes/Mail/MailBox.php b/root/opt/dmarc-srg/classes/Mail/MailBox.php new file mode 100644 index 0000000..49ad470 --- /dev/null +++ b/root/opt/dmarc-srg/classes/Mail/MailBox.php @@ -0,0 +1,468 @@ +. + */ + +namespace Liuch\DmarcSrg\Mail; + +use Liuch\DmarcSrg\Core; +use Liuch\DmarcSrg\ErrorHandler; +use Liuch\DmarcSrg\Exception\SoftException; +use Liuch\DmarcSrg\Exception\LogicException; +use Liuch\DmarcSrg\Exception\MailboxException; + +class MailBox +{ + private $conn; + private $server; + private $host; + private $mbox; + private $name; + private $uname; + private $passw; + private $delim; + private $attrs; + private $expunge; + private $options; + + public function __construct($params) + { + if (!is_array($params)) { + throw new LogicException('Incorrect mailbox params'); + } + + $this->conn = null; + $this->uname = $params['username']; + $this->passw = $params['password']; + if (isset($params['name']) && is_string($params['name']) && strlen($params['name']) > 0) { + $this->name = $params['name']; + } else { + $name = $this->uname; + $pos = strpos($name, '@'); + if ($pos !== false && $pos !== 0) { + $name = substr($name, 0, $pos); + } + $this->name = $name; + } + $this->mbox = $params['mailbox']; + $this->host = $params['host']; + + $flags = $params['encryption'] ?? ''; + switch ($flags) { + case 'ssl': + default: + $flags = '/ssl'; + break; + case 'none': + $flags = '/notls'; + break; + case 'starttls': + $flags = '/tls'; + break; + } + if (isset($params['novalidate-cert']) && $params['novalidate-cert'] === true) { + $flags .= '/novalidate-cert'; + } + + $this->server = sprintf('{%s/imap%s}', $this->host, $flags); + $this->expunge = false; + $this->options = []; + + if (isset($params['auth_exclude'])) { + $auth_exclude = $params['auth_exclude']; + switch (gettype($auth_exclude)) { + case 'string': + $auth_exclude = [ $auth_exclude ]; + break; + case 'array': + break; + default: + $auth_exclude = null; + break; + } + if ($auth_exclude) { + $this->options['DISABLE_AUTHENTICATOR'] = $auth_exclude; + } + } + } + + public function __destruct() + { + if (extension_loaded('imap')) { + $this->cleanup(); + } + } + + public function childMailbox(string $mailbox_name) + { + $this->ensureConnection(); + try { + $mb_list = imap_list( + $this->conn, + self::utf8ToMutf7($this->server), + self::utf8ToMutf7($this->mbox) . $this->delim . self::utf8ToMutf7($mailbox_name) + ); + } catch (\ErrorException $e) { + $mb_list = false; + } + $this->ensureErrorLog('imap_list'); + if (!$mb_list) { + return null; + } + $child = clone $this; + $child->mbox .= $this->delim . $mailbox_name; + $child->conn = null; + $child->expunge = false; + return $child; + } + + public function name() + { + return $this->name; + } + + public function host() + { + return $this->host; + } + + public function mailbox() + { + return $this->mbox; + } + + public function check() + { + try { + $this->ensureConnection(); + try { + $res = imap_status( + $this->conn, + self::utf8ToMutf7($this->server . $this->mbox), + SA_MESSAGES | SA_UNSEEN + ); + } catch (\ErrorException $e) { + $res = false; + } + $error_message = $this->ensureErrorLog(); + if (!$res) { + throw new MailboxException($error_message ?? 'Failed to get the mail box status'); + } + + if ($this->attrs & \LATT_NOSELECT) { + throw new MailboxException('The resource is not a mailbox'); + } + + $this->checkRights(); + } catch (MailboxException $e) { + return ErrorHandler::exceptionResult($e); + } + return [ + 'error_code' => 0, + 'message' => 'Successfully', + 'status' => [ + 'messages' => $res->messages, + 'unseen' => $res->unseen + ] + ]; + } + + public function search($criteria) + { + $this->ensureConnection(); + try { + $res = imap_search($this->conn, $criteria); + } catch (\ErrorException $e) { + $res = false; + } + $error_message = $this->ensureErrorLog('imap_search'); + if ($res === false) { + if (!$error_message) { + return []; + } + throw new MailboxException( + 'Failed to search email messages', + -1, + new \ErrorException($error_message) + ); + } + return $res; + } + + public function sort($criteria, $search_criteria, $reverse) + { + $this->ensureConnection(); + try { + $res = imap_sort($this->conn, $criteria, $reverse ? 1 : 0, SE_NOPREFETCH, $search_criteria); + } catch (\ErrorException $e) { + $res = false; + } + $error_message = $this->ensureErrorLog('imap_sort'); + if ($res === false) { + if (!$error_message) { + return []; + } + throw new MailboxException( + 'Failed to sort email messages', + -1, + new \ErrorException($error_message) + ); + } + return $res; + } + + public function message($number) + { + return new MailMessage($this->conn, $number); + } + + public function ensureMailbox($mailbox_name) + { + $mbn = self::utf8ToMutf7($mailbox_name); + $srv = self::utf8ToMutf7($this->server); + $mbo = self::utf8ToMutf7($this->mbox); + $this->ensureConnection(); + try { + $mb_list = imap_list($this->conn, $srv, $mbo . $this->delim . $mbn); + } catch (\ErrorException $e) { + $mb_list = false; + } + $error_message = $this->ensureErrorLog('imap_list'); + if (empty($mb_list)) { + if ($error_message) { + throw new MailboxException( + 'Failed to get the list of mailboxes', + -1, + new \ErrorException($error_message) + ); + } + + $new_mailbox = "{$srv}{$mbo}{$this->delim}{$mbn}"; + try { + $res = imap_createmailbox($this->conn, $new_mailbox); + } catch (\ErrorException $e) { + $res = false; + } + $error_message = $this->ensureErrorLog('imap_createmailbox'); + if (!$res) { + throw new MailboxException( + 'Failed to create a new mailbox', + -1, + new \ErrorException($error_message ?? 'Unknown') + ); + } + + try { + imap_subscribe($this->conn, $new_mailbox); + } catch (\ErrorException $e) { + } + $this->ensureErrorLog('imap_subscribe'); + } + } + + public function moveMessage($number, $mailbox_name) + { + $this->ensureConnection(); + $target = self::utf8ToMutf7($this->mbox) . $this->delim . self::utf8ToMutf7($mailbox_name); + try { + $res = imap_mail_move($this->conn, strval($number), $target); + } catch (\ErrorException $e) { + $res = false; + } + $error_message = $this->ensureErrorLog('imap_mail_move'); + if (!$res) { + throw new MailboxException( + 'Failed to move a message', + -1, + new \ErrorException($error_message ?? 'Unknown') + ); + } + $this->expunge = true; + } + + public function deleteMessage($number) + { + $this->ensureConnection(); + try { + imap_delete($this->conn, strval($number)); + } catch (\ErrorException $e) { + } + $this->ensureErrorLog('imap_delete'); + $this->expunge = true; + } + + public static function resetErrorStack() + { + imap_errors(); + imap_alerts(); + } + + private function ensureConnection() + { + if (is_null($this->conn)) { + $error_message = null; + $srv = self::utf8ToMutf7($this->server); + try { + $this->conn = imap_open( + $srv, + $this->uname, + $this->passw, + OP_HALFOPEN, + 0, + $this->options + ); + } catch (\ErrorException $e) { + $this->conn = null; + } + if ($this->conn) { + $mbx = self::utf8ToMutf7($this->mbox); + try { + $mb_list = imap_getmailboxes($this->conn, $srv, $mbx); + } catch (\ErrorException $e) { + $mb_list = null; + } + if ($mb_list && count($mb_list) === 1) { + $this->delim = $mb_list[0]->delimiter ?? '/'; + $this->attrs = $mb_list[0]->attributes ?? 0; + try { + if (imap_reopen($this->conn, $srv . $mbx)) { + return; + } + } catch (\ErrorException $e) { + } + } else { + $error_message = "Mailbox `{$this->mbox}` not found"; + } + } + if (!$error_message) { + $error_message = imap_last_error(); + if (!$error_message) { + $error_message = 'Cannot connect to the mail server'; + } + } + Core::instance()->logger()->error("IMAP error: {$error_message}"); + self::resetErrorStack(); + if ($this->conn) { + try { + imap_close($this->conn); + } catch (\ErrorException $e) { + } + $this->ensureErrorLog('imap_close'); + } + $this->conn = null; + throw new MailboxException($error_message); + } + } + + private function ensureErrorLog(string $prefix = 'IMAP error') + { + if ($error_message = imap_last_error()) { + self::resetErrorStack(); + $error_message = "{$prefix}: {$error_message}"; + Core::instance()->logger()->error($error_message); + return $error_message; + } + return null; + } + + private function checkRights(): void + { + if ($this->attrs & \LATT_NOINFERIORS) { + throw new SoftException('The mailbox may not have any children mailboxes'); + } + + if (!function_exists('imap_getacl')) { + return; + } + + $mbox = self::utf8ToMutf7($this->mbox); + try { + $acls = imap_getacl($this->conn, $mbox); + } catch (\ErrorException $e) { + // It's not possible to get the ACLs information + $acls = false; + } + $this->ensureErrorLog('imap_getacl'); + if ($acls !== false) { + $needed_rights_map = [ + 'l' => 'LOOKUP', + 'r' => 'READ', + 's' => 'WRITE-SEEN', + 't' => 'WRITE-DELETE', + 'k' => 'CREATE' + ]; + $result = []; + $needed_rights = array_keys($needed_rights_map); + foreach ([ "#{$this->uname}", '#authenticated', '#anyone' ] as $identifier) { + if (isset($acls[$identifier])) { + $rights = $acls[$identifier]; + foreach ($needed_rights as $r) { + if (!str_contains($rights, $r)) { + $result[] = $needed_rights_map[$r]; + } + } + break; + } + } + if (count($result) > 0) { + throw new SoftException( + 'Not enough rights. Additionally, these rights are required: ' . implode(', ', $result) + ); + } + } + } + + /** + * Deletes messages marked for deletion, if any, and closes the connection + * + * @return void + */ + private function cleanup(): void + { + self::resetErrorStack(); + if (!is_null($this->conn)) { + try { + if ($this->expunge) { + imap_expunge($this->conn); + } + } catch (\ErrorException $e) { + } + $this->ensureErrorLog('imap_expunge'); + + try { + imap_close($this->conn); + } catch (\ErrorException $e) { + } + $this->ensureErrorLog('imap_close'); + } + } + + /** + * It's a replacement for the standard function imap_utf8_to_mutf7 + * + * @param string $s A UTF-8 encoded string + * + * @return string|false + */ + private static function utf8ToMutf7(string $s) + { + return mb_convert_encoding($s, 'UTF7-IMAP', 'UTF-8'); + } +} diff --git a/root/opt/dmarc-srg/classes/Mail/MailBoxes.php b/root/opt/dmarc-srg/classes/Mail/MailBoxes.php new file mode 100644 index 0000000..5eca229 --- /dev/null +++ b/root/opt/dmarc-srg/classes/Mail/MailBoxes.php @@ -0,0 +1,137 @@ +. + */ + +namespace Liuch\DmarcSrg\Mail; + +use Liuch\DmarcSrg\Core; +use Liuch\DmarcSrg\ErrorHandler; +use Liuch\DmarcSrg\Exception\LogicException; +use Liuch\DmarcSrg\Exception\RuntimeException; +use Liuch\DmarcSrg\Exception\MailboxException; + +class MailBoxes implements \Iterator +{ + private $box_list; + private $index = 0; + + public function __construct() + { + $mailboxes = Core::instance()->config('mailboxes'); + + $this->box_list = []; + if (is_array($mailboxes)) { + $cnt = count($mailboxes); + if ($cnt > 0) { + if (isset($mailboxes[0])) { + for ($i = 0; $i < $cnt; ++$i) { + $this->box_list[] = new MailBox($mailboxes[$i]); + } + } else { + $this->box_list[] = new MailBox($mailboxes); + } + } + } + } + + public function count() + { + return count($this->box_list); + } + + public function list() + { + $id = 0; + $res = []; + foreach ($this->box_list as &$mbox) { + $id += 1; + $res[] = [ + 'id' => $id, + 'name' => $mbox->name(), + 'host' => $mbox->host(), + 'mailbox' => $mbox->mailbox() + ]; + } + unset($mbox); + return $res; + } + + public function mailbox($id) + { + if (!is_int($id) || $id <= 0 || $id > count($this->box_list)) { + throw new LogicException("Incorrect mailbox Id: {$i}"); + } + return $this->box_list[$id - 1]; + } + + public function check($id) + { + if ($id !== 0) { + return $this->mailbox($id)->check(); + } + + $results = []; + $err_cnt = 0; + $box_cnt = count($this->box_list); + for ($i = 0; $i < $box_cnt; ++$i) { + $r = $this->box_list[$i]->check(); + if ($r['error_code'] !== 0) { + ++$err_cnt; + } + $results[] = $r; + } + $res = []; + if ($err_cnt == 0) { + $res['error_code'] = 0; + $res['message'] = 'Success'; + } else { + $res['error_code'] = -1; + $res['message'] = sprintf('%d of the %d mailboxes failed the check', $err_cnt, $box_cnt); + } + $res['results'] = $results; + return $res; + } + + public function current(): object + { + return $this->box_list[$this->index]; + } + + public function key(): int + { + return $this->index; + } + + public function next(): void + { + ++$this->index; + } + + public function rewind(): void + { + $this->index = 0; + } + + public function valid(): bool + { + return isset($this->box_list[$this->index]); + } +} diff --git a/root/opt/dmarc-srg/classes/Mail/MailMessage.php b/root/opt/dmarc-srg/classes/Mail/MailMessage.php new file mode 100644 index 0000000..f8e6a8c --- /dev/null +++ b/root/opt/dmarc-srg/classes/Mail/MailMessage.php @@ -0,0 +1,154 @@ +. + */ + +namespace Liuch\DmarcSrg\Mail; + +use Liuch\DmarcSrg\Core; +use Liuch\DmarcSrg\Exception\SoftException; +use Liuch\DmarcSrg\Exception\MailboxException; + +class MailMessage +{ + private $conn; + private $number; + private $attachment; + private $attachments_cnt; + + public function __construct($conn, $number) + { + $this->conn = $conn; + $this->number = $number; + $this->attachment = null; + $this->attachments_cnt = -1; + } + + public function overview() + { + $res = @imap_fetch_overview($this->conn, strval($this->number)); + if (!isset($res[0])) { + if ($error_message = imap_last_error()) { + Core::instance()->logger()->error("imap_fetch_overview failed: {$error_message}"); + } + MailBox::resetErrorStack(); + return false; + } + return $res[0]; + } + + public function setSeen() + { + if (!@imap_setflag_full($this->conn, strval($this->number), '\\Seen')) { + if ($error_message = imap_last_error()) { + $error_message = '?'; + } + MailBox::resetErrorStack(); + Core::instance()->logger()->error("imap_setflag_full failed: {$error_message}"); + throw new MailboxException("Failed to make a message seen: {$error_message}"); + } + } + + public function validate() + { + $this->ensureAttachment(); + if ($this->attachments_cnt !== 1) { + throw new SoftException("Attachment count is not valid ({$this->attachments_cnt})"); + } + + $bytes = $this->attachment->size(); + if ($bytes === -1) { + throw new SoftException("Failed to get attached file size. Wrong message format?"); + } + if ($bytes < 50 || $bytes > 1 * 1024 * 1024) { + throw new SoftException("Attachment file size is not valid ({$bytes} bytes)"); + } + + $mime_type = $this->attachment->mimeType(); + if (!in_array($mime_type, [ 'application/zip', 'application/gzip', 'application/x-gzip', 'text/xml' ])) { + throw new SoftException("Attachment file type is not valid ({$mime_type})"); + } + } + + public function attachment() + { + return $this->attachment; + } + + private function ensureAttachment() + { + if ($this->attachments_cnt === -1) { + $structure = imap_fetchstructure($this->conn, $this->number); + if ($structure === false) { + throw new MailboxException('FetchStructure failed: ' . imap_last_error()); + } + $this->attachments_cnt = 0; + $parts = isset($structure->parts) ? $structure->parts : [ $structure ]; + foreach ($parts as $index => &$part) { + $att_part = $this->scanAttachmentPart($part, $index + 1); + if ($att_part) { + ++$this->attachments_cnt; + if (!$this->attachment) { + $this->attachment = new MailAttachment($this->conn, $att_part); + } + } + } + unset($part); + } + } + + private function scanAttachmentPart(&$part, $number) + { + $filename = null; + if ($part->ifdparameters) { + $filename = $this->getAttribute($part->dparameters, 'filename'); + } + + if (empty($filename) && $part->ifparameters) { + $filename = $this->getAttribute($part->parameters, 'name'); + } + + if (empty($filename)) { + return null; + } + + return [ + 'filename' => imap_utf8($filename), + 'bytes' => isset($part->bytes) ? $part->bytes : -1, + 'number' => $number, + 'mnumber' => $this->number, + 'encoding' => $part->encoding + ]; + } + + private function getAttribute(&$params, $name) + { + // need to check all objects as imap_fetchstructure + // returns multiple objects with the same attribute name, + // but first entry contains a truncated value + $value = null; + foreach ($params as &$obj) { + if (strcasecmp($obj->attribute, $name) === 0) { + $value = $obj->value; + } + } + return $value; + } +} diff --git a/root/opt/dmarc-srg/classes/Report/Report.php b/root/opt/dmarc-srg/classes/Report/Report.php new file mode 100644 index 0000000..e6a33c5 --- /dev/null +++ b/root/opt/dmarc-srg/classes/Report/Report.php @@ -0,0 +1,165 @@ +. + */ + +namespace Liuch\DmarcSrg\Report; + +use Liuch\DmarcSrg\Core; +use Liuch\DmarcSrg\Exception\SoftException; +use Liuch\DmarcSrg\Exception\DatabaseNotFoundException; + +class Report +{ + private $db = null; + private $data = null; + + public function __construct($data, $db = null) + { + $this->data = $data; + $this->db = $db ?? Core::instance()->database(); + } + + public static function fromXmlFile($fd) + { + $data = ReportData::fromXmlFile($fd); + if (!self::checkData($data)) { + throw new SoftException('Incorrect or incomplete report data'); + } + return new Report($data); + } + + public function fetch() + { + $domain = $this->data['domain']; + $report_id = $this->data['report_id']; + if (empty($domain) || empty($report_id)) { + throw new SoftException('Not specified report\'s domain or id'); + } + $this->data = [ 'domain' => $domain, 'report_id' => $report_id ]; + try { + $this->db->getMapper('report')->fetch($this->data); + } catch (DatabaseNotFoundException $e) { + throw new SoftException('The report is not found'); + } + } + + public function save(string $real_fname) + { + $b_ts = $this->data['begin_time']; + $e_ts = $this->data['end_time']; + if (!$b_ts->getTimestamp() || !$e_ts->getTimestamp() || $b_ts > $e_ts) { + throw new SoftException('Failed to add an incoming report: wrong date range'); + } + + $this->db->getMapper('report')->save($this->data); + return [ 'message' => 'The report is loaded successfully' ]; + } + + public function get() + { + return $this->data; + } + + public function set($name, $value) + { + if (empty($this->data['domain']) || empty($this->data['report_id'])) { + throw new SoftException('Not specified report\'s domain or id'); + } + + $this->db->getMapper('report')->setProperty($this->data, $name, $value); + return [ 'message' => 'Ok' ]; + } + + /** + * Checks report data for correctness and completeness + * + * @param array $data Report data + * + * @return bool + */ + private static function checkData(array $data): bool + { + static $fields = [ + 'domain' => [ 'required' => true, 'type' => 'string' ], + 'begin_time' => [ 'required' => true, 'type' => 'object' ], + 'end_time' => [ 'required' => true, 'type' => 'object' ], + 'org' => [ 'required' => true, 'type' => 'string' ], + 'external_id' => [ 'required' => true, 'type' => 'string' ], + 'email' => [ 'required' => false, 'type' => 'string' ], + 'extra_contact_info' => [ 'required' => false, 'type' => 'string' ], + 'error_string' => [ 'required' => false, 'type' => 'array' ], + 'policy_adkim' => [ 'required' => false, 'type' => 'string' ], + 'policy_aspf' => [ 'required' => false, 'type' => 'string' ], + 'policy_p' => [ 'required' => false, 'type' => 'string' ], + 'policy_sp' => [ 'required' => false, 'type' => 'string' ], + 'policy_np' => [ 'required' => false, 'type' => 'string' ], + 'policy_pct' => [ 'required' => false, 'type' => 'string' ], + 'policy_fo' => [ 'required' => false, 'type' => 'string' ], + 'records' => [ 'required' => true, 'type' => 'array' ] + ]; + if (!self::checkRow($data, $fields) || count($data['records']) === 0) { + return false; + } + + static $rfields = [ + 'ip' => [ 'required' => true, 'type' => 'string' ], + 'rcount' => [ 'required' => true, 'type' => 'integer' ], + 'disposition' => [ 'required' => true, 'type' => 'string' ], + 'reason' => [ 'required' => false, 'type' => 'array' ], + 'dkim_auth' => [ 'required' => false, 'type' => 'array' ], + 'spf_auth' => [ 'required' => false, 'type' => 'array' ], + 'dkim_align' => [ 'required' => true, 'type' => 'string' ], + 'spf_align' => [ 'required' => true, 'type' => 'string' ], + 'envelope_to' => [ 'required' => false, 'type' => 'string' ], + 'envelope_from' => [ 'required' => false, 'type' => 'string' ], + 'header_from' => [ 'required' => false, 'type' => 'string' ] + ]; + foreach ($data['records'] as &$rec) { + if (gettype($rec) !== 'array' || !self::checkRow($rec, $rfields)) { + return false; + } + } + + return true; + } + + /** + * Checks one row of report data + * + * @param array $row Data row + * @param array $def Row definition + * + * @return bool + */ + private static function checkRow(array &$row, array &$def): bool + { + foreach ($def as $key => &$dd) { + if (isset($row[$key])) { + if (gettype($row[$key]) !== $dd['type']) { + return false; + } + } elseif ($dd['required']) { + return false; + } + } + return true; + } +} diff --git a/root/opt/dmarc-srg/classes/Report/ReportData.php b/root/opt/dmarc-srg/classes/Report/ReportData.php new file mode 100644 index 0000000..199247c --- /dev/null +++ b/root/opt/dmarc-srg/classes/Report/ReportData.php @@ -0,0 +1,370 @@ +. + */ + +namespace Liuch\DmarcSrg\Report; + +use Liuch\DmarcSrg\DateTime; +use Liuch\DmarcSrg\Exception\RuntimeException; + +class ReportData +{ + public static $rep_data = null; + public static $tag_id = null; + + public static function fromXmlFile($fd) + { + self::$tag_id = ''; + self::$rep_data = [ 'records' => [] ]; + + $parser = xml_parser_create(); + xml_set_element_handler( + $parser, + 'Liuch\DmarcSrg\Report\ReportData::xmlStartTag', + 'Liuch\DmarcSrg\Report\ReportData::xmlEndTag' + ); + xml_set_character_data_handler($parser, 'Liuch\DmarcSrg\Report\ReportData::xmlTagData'); + xml_set_external_entity_ref_handler($parser, function () { + throw new RuntimeException('The XML document has an external entity!'); + }); + try { + while ($file_data = fread($fd, 4096)) { + if (!xml_parse($parser, $file_data, feof($fd))) { + throw new RuntimeException('XML error!'); + } + } + } finally { + xml_parser_free($parser); + unset($parser); + } + return self::$rep_data; + } + + public static function xmlStartTag($parser, $name, $attrs) + { + self::xmlEnterTag($name); + + switch (self::$tag_id) { + case 'rec': + self::$rep_data['records'][] = []; + break; + case 'error_string': + if (!isset(self::$rep_data['error_string'])) { + self::$rep_data['error_string'] = []; + } + break; + case 'reason': + $idx = count(self::$rep_data['records']) - 1; + if (!isset(self::$rep_data['records'][$idx]['reason'])) { + self::$rep_data['records'][$idx]['reason'] = []; + } + self::$report_tags['reason']['tmp_data'] = []; + break; + case 'dkim_auth': + $idx = count(self::$rep_data['records']) - 1; + if (!isset(self::$rep_data['records'][$idx]['dkim_auth'])) { + self::$rep_data['records'][$idx]['dkim_auth'] = []; + } + self::$report_tags['dkim_auth']['tmp_data'] = []; + break; + case 'spf_auth': + $idx = count(self::$rep_data['records']) - 1; + if (!isset(self::$rep_data['records'][$idx]['spf_auth'])) { + self::$rep_data['records'][$idx]['spf_auth'] = []; + } + self::$report_tags['spf_auth']['tmp_data'] = []; + break; + } + } + + public static function xmlEndTag($parser, $name) + { + switch (self::$tag_id) { + case 'reason': + $idx = count(self::$rep_data['records']) - 1; + self::$rep_data['records'][$idx]['reason'][] = self::$report_tags['reason']['tmp_data']; + unset(self::$report_tags['reason']['tmp_data']); + break; + case 'dkim_auth': + $idx = count(self::$rep_data['records']) - 1; + self::$rep_data['records'][$idx]['dkim_auth'][] = self::$report_tags['dkim_auth']['tmp_data']; + unset(self::$report_tags['dkim_auth']['tmp_data']); + break; + case 'spf_auth': + $idx = count(self::$rep_data['records']) - 1; + self::$rep_data['records'][$idx]['spf_auth'][] = self::$report_tags['spf_auth']['tmp_data']; + unset(self::$report_tags['spf_auth']['tmp_data']); + break; + case 'feedback': + // Set the default value if it's necessary and there is no data + foreach (self::$report_tags as $tag_id => &$tag_data) { + if (array_key_exists('default', $tag_data)) { // not isset() because of null values + if (isset($tag_data['header']) && $tag_data['header']) { + if (!isset(self::$rep_data[$tag_id])) { + self::$rep_data[$tag_id] = $tag_data['default']; + } + } else { + foreach (self::$rep_data['records'] as $idx => &$rec_val) { + if (!isset($rec_val[$tag_id])) { + $rec_val[$tag_id] = $tag_data['default']; + } + } + unset($rec_val); + } + } + } + unset($tag_data); + $b_ts = intval(self::$rep_data['begin_time']); + $e_ts = intval(self::$rep_data['end_time']); + self::$rep_data['begin_time'] = new DateTime('@' . ($b_ts < 0 ? 0 : $b_ts)); + self::$rep_data['end_time'] = new DateTime('@' . ($e_ts < 0 ? 0 : $e_ts)); + foreach (self::$rep_data['records'] as &$rec_data) { + $rec_data['rcount'] = intval($rec_data['rcount']); + } + unset($rec_data); + break; + } + self::xmlLeaveTag(); + } + + public static function xmlTagData($parser, $data) + { + switch (self::$tag_id) { + case 'error_string': + if (self::$tag_id === 'error_string') { + self::$rep_data['error_string'][] = $data; + } + break; + case 'reason_type': + self::$report_tags['reason']['tmp_data']['type'] = $data; + break; + case 'reason_comment': + self::$report_tags['reason']['tmp_data']['comment'] = $data; + break; + case 'dkim_domain': + self::$report_tags['dkim_auth']['tmp_data']['domain'] = $data; + break; + case 'dkim_selector': + self::$report_tags['dkim_auth']['tmp_data']['selector'] = $data; + break; + case 'dkim_result': + self::$report_tags['dkim_auth']['tmp_data']['result'] = $data; + break; + case 'dkim_human_result': + self::$report_tags['dkim_auth']['tmp_data']['human_result'] = $data; + break; + case 'spf_domain': + self::$report_tags['spf_auth']['tmp_data']['domain'] = $data; + break; + case 'spf_scope': + self::$report_tags['spf_auth']['tmp_data']['scope'] = $data; + break; + case 'spf_result': + self::$report_tags['spf_auth']['tmp_data']['result'] = $data; + break; + default: + if (!isset(self::$report_tags[self::$tag_id]['children'])) { + if (isset(self::$report_tags[self::$tag_id]['header']) && + self::$report_tags[self::$tag_id]['header'] + ) { + if (!isset(self::$rep_data[self::$tag_id])) { + self::$rep_data[self::$tag_id] = $data; + } else { + self::$rep_data[self::$tag_id] .= $data; + } + } else { + $last_idx = count(self::$rep_data['records']) - 1; + $last_rec =& self::$rep_data['records'][$last_idx]; + if (!isset($last_rec[self::$tag_id])) { + $last_rec[self::$tag_id] = $data; + } else { + $last_rec[self::$tag_id] .= $data; + } + unset($last_rec); + } + } + } + } + + public static function xmlEnterTag($name) + { + if (!isset(self::$report_tags[self::$tag_id]['children']) || + !isset(self::$report_tags[self::$tag_id]['children'][$name]) + ) { + throw new RuntimeException("Unknown tag: {$name}"); + } + + self::$tag_id = self::$report_tags[self::$tag_id]['children'][$name]; + } + + public static function xmlLeaveTag() + { + self::$tag_id = self::$report_tags[self::$tag_id]['parent']; + } + + public static $report_tags = [ + '' => [ + 'children' => [ + 'FEEDBACK' => 'feedback' + ] + ], + 'feedback' => [ + 'parent' => '', + 'children' => [ + 'VERSION' => 'ver', + 'REPORT_METADATA' => 'rmd', + 'POLICY_PUBLISHED' => 'p_p', + 'RECORD' => 'rec' + ] + ], + 'ver' => [ 'parent' => 'feedback', 'header' => true, 'default' => null ], + 'rmd' => [ + 'parent' => 'feedback', + 'children' => [ + 'ORG_NAME' => 'org', + 'EMAIL' => 'email', + 'EXTRA_CONTACT_INFO' => 'extra_contact_info', + 'REPORT_ID' => 'external_id', + 'DATE_RANGE' => 'd_range', + 'ERROR' => 'error_string' + ] + ], + 'p_p' => [ + 'parent' => 'feedback', + 'children' => [ + 'DOMAIN' => 'domain', + 'ADKIM' => 'policy_adkim', + 'ASPF' => 'policy_aspf', + 'P' => 'policy_p', + 'SP' => 'policy_sp', + 'NP' => 'policy_np', + 'PCT' => 'policy_pct', + 'FO' => 'policy_fo' + ] + ], + 'rec' => [ + 'parent' => 'feedback', + 'children' => [ + 'ROW' => 'row', + 'IDENTIFIERS' => 'ident', + 'AUTH_RESULTS' => 'au_res' + ] + ], + 'org' => [ 'parent' => 'rmd', 'header' => true ], + 'email' => [ 'parent' => 'rmd', 'header' => true, 'default' => null ], + 'extra_contact_info' => [ 'parent' => 'rmd', 'header' => true, 'default' => null ], + 'external_id' => [ 'parent' => 'rmd', 'header' => true ], + 'd_range' => [ + 'parent' => 'rmd', + 'children' => [ + 'BEGIN' => 'begin_time', + 'END' => 'end_time' + ] + ], + 'error_string' => [ 'parent' => 'rmd', 'header' => true, 'default' => null ], + 'begin_time' => [ 'parent' => 'd_range', 'header' => true ], + 'end_time' => [ 'parent' => 'd_range', 'header' => true ], + 'domain' => [ 'parent' => 'p_p', 'header' => true ], + 'policy_adkim' => [ 'parent' => 'p_p', 'header' => true, 'default' => null ], + 'policy_aspf' => [ 'parent' => 'p_p', 'header' => true, 'default' => null ], + 'policy_p' => [ 'parent' => 'p_p', 'header' => true, 'default' => null ], + 'policy_sp' => [ 'parent' => 'p_p', 'header' => true, 'default' => null ], + 'policy_np' => [ 'parent' => 'p_p', 'header' => true, 'default' => null ], + 'policy_pct' => [ 'parent' => 'p_p', 'header' => true, 'default' => null ], + 'policy_fo' => [ 'parent' => 'p_p', 'header' => true, 'default' => null ], + 'row' => [ + 'parent' => 'rec', + 'children' => [ + 'SOURCE_IP' => 'ip', + 'COUNT' => 'rcount', + 'POLICY_EVALUATED' => 'p_e' + ] + ], + 'ident' => [ + 'parent' => 'rec', + 'children' => [ + 'ENVELOPE_TO' => 'envelope_to', + 'ENVELOPE_FROM' => 'envelope_from', + 'HEADER_FROM' => 'header_from' + ] + ], + 'au_res' => [ + 'parent' => 'rec', + 'children' => [ + 'DKIM' => 'dkim_auth', + 'SPF' => 'spf_auth' + ] + ], + 'ip' => [ 'parent' => 'row' ], + 'rcount' => [ 'parent' => 'row' ], + 'p_e' => [ + 'parent' => 'row', + 'children' => [ + 'DISPOSITION' => 'disposition', + 'DKIM' => 'dkim_align', + 'SPF' => 'spf_align', + 'REASON' => 'reason' + ] + ], + 'disposition' => [ 'parent' => 'p_e' ], + 'dkim_align' => [ 'parent' => 'p_e' ], + 'spf_align' => [ 'parent' => 'p_e' ], + 'reason' => [ + 'parent' => 'p_e', + 'default' => null, + 'children' => [ + 'TYPE' => 'reason_type', + 'COMMENT' => 'reason_comment' + ] + ], + 'envelope_to' => [ 'parent' => 'ident', 'default' => null ], + 'envelope_from' => [ 'parent' => 'ident', 'default' => null ], + 'header_from' => [ 'parent' => 'ident', 'default' => null ], + 'dkim_auth' => [ + 'parent' => 'au_res', + 'default' => null, + 'children' => [ + 'DOMAIN' => 'dkim_domain', + 'SELECTOR' => 'dkim_selector', + 'RESULT' => 'dkim_result', + 'HUMAN_RESULT' => 'dkim_human_result' + ] + ], + 'spf_auth' => [ + 'parent' => 'au_res', + 'default' => null, + 'children' => [ + 'DOMAIN' => 'spf_domain', + 'SCOPE' => 'spf_scope', + 'RESULT' => 'spf_result' + ] + ], + 'reason_type' => [ 'parent' => 'reason' ], + 'reason_comment' => [ 'parent' => 'reason' ], + 'dkim_domain' => [ 'parent' => 'dkim_auth' ], + 'dkim_selector' => [ 'parent' => 'dkim_auth' ], + 'dkim_result' => [ 'parent' => 'dkim_auth' ], + 'dkim_human_result' => [ 'parent' => 'dkim_auth' ], + 'spf_domain' => [ 'parent' => 'spf_auth' ], + 'spf_scope' => [ 'parent' => 'spf_auth' ], + 'spf_result' => [ 'parent' => 'spf_auth' ] + ]; +} diff --git a/root/opt/dmarc-srg/classes/Report/ReportFetcher.php b/root/opt/dmarc-srg/classes/Report/ReportFetcher.php new file mode 100644 index 0000000..d535590 --- /dev/null +++ b/root/opt/dmarc-srg/classes/Report/ReportFetcher.php @@ -0,0 +1,242 @@ +. + * + * ========================= + * + * This file contains the class ReportFetcher + * + * @category API + * @package DmarcSrg + * @author Aleksey Andreev (liuch) + * @license https://www.gnu.org/licenses/gpl-3.0.html GNU/GPLv3 + */ + +namespace Liuch\DmarcSrg\Report; + +use Liuch\DmarcSrg\Core; +use Liuch\DmarcSrg\ErrorHandler; +use Liuch\DmarcSrg\Report\Report; +use Liuch\DmarcSrg\Sources\Source; +use Liuch\DmarcSrg\ReportLog\ReportLogItem; +use Liuch\DmarcSrg\Exception\RuntimeException; + +/** + * This class is designed to fetch report files from report sources and store them to the database. + */ +class ReportFetcher +{ + private $source = null; + + /** + * It's the constructor of the class. + * + * @param Source $sou Source for fetching report files. + * + * @return void + */ + public function __construct($sou) + { + $this->source = $sou; + } + + /** + * Retrieves report files from the source and stores them in the database + * taking into account the limits from the configuration file. + * + * @return array Array of results. + */ + public function fetch(): array + { + try { + $this->source->rewind(); + } catch (RuntimeException $e) { + return [[ 'source_error' => $e->getMessage() ]]; + } + + $core = Core::instance(); + $limit = 0; + $stype = $this->source->type(); + switch ($stype) { + case Source::SOURCE_MAILBOX: + $s_act = $core->config('fetcher/mailboxes/when_done', ''); + $f_act = $core->config('fetcher/mailboxes/when_failed', ''); + $limit = $core->config('fetcher/mailboxes/messages_maximum', 0); + break; + case Source::SOURCE_DIRECTORY: + $s_act = $core->config('fetcher/directories/when_done', ''); + $f_act = $core->config('fetcher/directories/when_failed', ''); + $limit = $core->config('fetcher/directories/files_maximum', 0); + break; + } + $limit = intval($limit); + if ($stype === Source::SOURCE_MAILBOX || $stype === Source::SOURCE_DIRECTORY) { + $this->source->setParams([ + 'when_done' => $s_act, + 'when_failed' => $f_act + ]); + } + + $results = []; + while ($this->source->valid()) { + $result = null; + $fname = null; + $report = null; + $success = false; + $err_msg = null; + + // Extracting and saving reports + try { + $rfile = $this->source->current(); + $fname = $rfile->filename(); + $report = Report::fromXmlFile($rfile->datastream()); + $result = $report->save($fname); + $success = true; + } catch (RuntimeException $e) { + $err_msg = $e->getMessage(); + $result = ErrorHandler::exceptionResult($e); + } + unset($rfile); + + // Post processing + try { + if ($success) { + $this->source->accepted(); + } else { + $this->source->rejected(); + } + } catch (RuntimeException $e) { + $err_msg = $e->getMessage(); + $result['post_processing_message'] = $err_msg; + } + + // Adding a record to the log. + if (!$err_msg) { + $log = ReportLogItem::success($stype, $report, $fname, null)->save(); + } else { + $log = ReportLogItem::failed($stype, $report, $fname, $err_msg)->save(); + if ($this->source->type() === Source::SOURCE_MAILBOX) { + $msg = $this->source->mailMessage(); + $ov = $msg->overview(); + if ($ov) { + if (property_exists($ov, 'from')) { + $result['emailed_from'] = $ov->from; + } + if (property_exists($ov, 'date')) { + $result['emailed_date'] = $ov->date; + } + } + } + if ($report) { + $rd = $report->get(); + if (isset($rd['external_id'])) { + $result['report_id'] = $rd['external_id']; + } + } + } + unset($report); + + // Adding result to the results array. + $results[] = $result; + + // Checking the fetcher limits + if ($limit > 0) { + if (--$limit === 0) { + break; + } + } + + $this->source->next(); + } + return $results; + } + + /** + * Generates the final result based on the results of loading individual report files. + * + * @param array $results Array with results of loading report files. + * + * @return array Array of the final result to be sent to the client. + */ + public static function makeSummaryResult(array $results): array + { + $reps = []; + $others = []; + $r_count = 0; + $loaded = 0; + foreach ($results as &$r) { + if (isset($r['source_error'])) { + $others[] = $r['source_error']; + } else { + $reps[] = $r; + ++$r_count; + if (!isset($r['error_code']) || $r['error_code'] === 0) { + ++$loaded; + } + if (isset($r['post_processing_message'])) { + $others[] = $r['post_processing_message']; + } + } + } + unset($r); + + $result = null; + $o_count = count($others); + if ($r_count + $o_count === 1) { + if ($r_count === 1) { + $result = $reps[0]; + } else { + $result = [ + 'error_code' => -1, + 'message' => $others[0] + ]; + } + } else { + $err_code = null; + $message = null; + if ($loaded === $r_count) { + $err_code = 0; + if ($r_count > 0) { + $message = strval($r_count) . ' report files have been loaded successfully'; + } elseif ($o_count === 0) { + $message = 'There are no report files to load'; + } else { + $err_code = -1; + } + } else { + $err_code = -1; + if ($loaded > 0) { + $message = "Only {$loaded} of the {$r_count} report files have been loaded"; + } else { + $message = "None of the {$r_count} report files has been loaded"; + } + } + $result['error_code'] = $err_code; + $result['message'] = $message; + if ($r_count > 0) { + $result['results'] = $reps; + } + if ($o_count > 0) { + $result['other_errors'] = $others; + } + } + return $result; + } +} diff --git a/root/opt/dmarc-srg/classes/Report/ReportList.php b/root/opt/dmarc-srg/classes/Report/ReportList.php new file mode 100644 index 0000000..9784672 --- /dev/null +++ b/root/opt/dmarc-srg/classes/Report/ReportList.php @@ -0,0 +1,212 @@ +. + * + * ========================= + * + * This file contains ReportList class + * + * @category API + * @package DmarcSrg + * @author Aleksey Andreev (liuch) + * @license https://www.gnu.org/licenses/gpl-3.0.html GNU/GPLv3 + */ + +namespace Liuch\DmarcSrg\Report; + +use Liuch\DmarcSrg\Core; + +/** + * It's the main class for working with the incoming reports, such as: + * - getting a list of reports + * - deleting several reports at once + * - getting the number of reports stored in the database + */ +class ReportList +{ + public const ORDER_NONE = 0; + public const ORDER_BEGIN_TIME = 1; + public const ORDER_ASCENT = 2; + public const ORDER_DESCENT = 3; + + private $db = null; + private $limit = 0; + private $filter = []; + private $order = null; + + /** + * The constructor + * + * @param DatabaseController $db The database controller + */ + public function __construct($db = null) + { + $this->db = $db ?? Core::instance()->database(); + } + + /** + * Returns a list of reports with specified parameters from position $pos + * + * This method returns a list of reports that depends on the filter and order. + * The filter, order, and limit for the list can be set using the setFilter, setOrder and setMaxCount methods. + * + * @param int $pos The starting position from which the list will be returned + * + * @return array An array with keys `reports` and `more`. + * `reports` is an array of incoming reports which contains maximum 25 records by default. + * Another value of the number of records can be specified by calling + * the method setMaxCount. + * `more` is true if there are more records in the database, false otherwise. + */ + public function getList(int $pos): array + { + $order = [ + 'field' => 'begin_time', + 'direction' => ($this->order ?? self::ORDER_DESCENT) === self::ORDER_ASCENT ? 'ascent' : 'descent' + ]; + + $max_rec = $this->limit > 0 ? $this->limit : 25; + $limit = [ + 'offset' => $pos, + 'count' => $max_rec + 1 + ]; + + $list = $this->db->getMapper('report')->list($this->filter, $order, $limit); + if (count($list) > $max_rec) { + $more = true; + unset($list[$max_rec]); + } else { + $more = false; + } + return [ + 'reports' => $list, + 'more' => $more + ]; + } + + /** + * Sets the sort order for the list and for deleting several reports at once + * + * @param int $field The field to sort by. Currently only ORDER_BEGIN_TIME is available. + * @param int $direction The sorting direction. ORDER_ASCENT or ORDER_DESCENT must be used here. + * + * @return void + */ + public function setOrder(int $field, int $direction): void + { + $this->order = null; + if ($field > self::ORDER_NONE && $field < self::ORDER_ASCENT) { + if ($direction !== self::ORDER_ASCENT) { + $direction = self::ORDER_DESCENT; + } + $this->order = [ + 'field' => $field, + 'direction' => $direction + ]; + } + } + + /** + * Sets maximum numbers of records in the list and for deleting reports + * + * @param int $num Maximum number of records in the list + * + * @return void + */ + public function setMaxCount(int $num): void + { + if ($num > 0) { + $this->limit = $num; + } else { + $this->limit = 0; + } + } + + /** + * Sets filter values for the list and for deleting reports + * + * @param array $filter Key-value array: + * 'before_time' => DateTime, timestamp + * 'dkim' => string, 'fail' or 'pass' + * 'domain' => string or instance of Domain class + * 'month' => string, yyyy-mm format + * 'organization' => string + * 'spf' => string, 'fail' or 'pass' + * 'status' => string, 'read' or 'unread' + * Note! 'dkim' and 'spf' do not affect the delete and count methods + * + * @return void + */ + public function setFilter(array $filter): void + { + $this->filter = $filter; + } + + /** + * Returns the number of reports in the database + * + * It returns the number of reports in the database. + * The limit and some filter items (`dkim`, `spf`) do not affect this. + * + * @return int The number of reports in the database + */ + public function count(): int + { + $limit = [ 'offset' => 0, 'count' => $this->limit ]; + return $this->db->getMapper('report')->count($this->filter, $limit); + } + + /** + * Deletes reports from the database + * + * It deletes repors form the database. The filter items `dkim` and `spf` do not affect this. + * + * @return void + */ + public function delete(): void + { + $order = [ + 'field' => 'begin_time', + 'direction' => ($this->order ?? self::ORDER_DESCENT) === self::ORDER_ASCENT ? 'ascent' : 'descent' + ]; + $limit = [ 'offset' => 0, 'count' => $this->limit ]; + $this->db->getMapper('report')->delete($this->filter, $order, $limit); + } + + /** + * Returns a list of values for each filter item except for `before_time` + * + * @return array An key-value array, where the key is the filter item name + * and the value is an array of possible values for the item + */ + public function getFilterList(): array + { + $domainMapper = $this->db->getMapper('domain'); + $reportMapper = $this->db->getMapper('report'); + return [ + 'domain' => $domainMapper->names(), + 'month' => $reportMapper->months(), + 'organization' => $reportMapper->organizations(), + 'dkim' => [ 'pass', 'fail' ], + 'spf' => [ 'pass', 'fail' ], + 'status' => [ 'read', 'unread' ] + ]; + } +} diff --git a/root/opt/dmarc-srg/classes/Report/SummaryReport.php b/root/opt/dmarc-srg/classes/Report/SummaryReport.php new file mode 100644 index 0000000..0597620 --- /dev/null +++ b/root/opt/dmarc-srg/classes/Report/SummaryReport.php @@ -0,0 +1,400 @@ +. + * + * ========================= + * + * This file contains SummaryReport class + * + * @category API + * @package DmarcSrg + * @author Aleksey Andreev (liuch) + * @license https://www.gnu.org/licenses/gpl-3.0.html GNU/GPLv3 + */ + +namespace Liuch\DmarcSrg\Report; + +use Liuch\DmarcSrg\Statistics; +use Liuch\DmarcSrg\Exception\SoftException; +use Liuch\DmarcSrg\Exception\LogicException; + +/** + * This class is for generating summary data for the specified period and domain + */ +class SummaryReport +{ + private const LAST_WEEK = -1; + private const LAST_MONTH = -2; + + private $period = 0; + private $domain = null; + private $stat = null; + private $subject = ''; + + /** + * Constructor + * + * @param string $period The period for which the report is created + * Must me one of the following values: `lastweek`, `lastmonth`, and `lastndays:N` + * where N is the number of days the report is created for + */ + public function __construct(string $period) + { + switch ($period) { + case 'lastweek': + $period = self::LAST_WEEK; + $subject = ' weekly'; + break; + case 'lastmonth': + $period = self::LAST_MONTH; + $subject = ' monthly'; + break; + default: + $ndays = 0; + $av = explode(':', $period); + if (count($av) === 2 && $av[0] === 'lastndays') { + $ndays = intval($av[1]); + if ($ndays <= 0) { + throw new SoftException('The parameter "days" has an incorrect value'); + } + $subject = sprintf(' %d day%s', $ndays, ($ndays > 1 ? 's' : '')); + } + $period = $ndays; + break; + } + if (empty($subject)) { + throw new SoftException('The parameter "period" has an incorrect value'); + } + $this->period = $period; + $this->subject = "DMARC{$subject} digest"; + } + + /** + * Binds a domain to the report + * + * @param Domain $domain The domain for which the report is created + * + * @return self + */ + public function setDomain($domain) + { + $this->domain = $domain; + $this->stat = null; + return $this; + } + + /** + * Returns the report data as an array + * + * @return array + */ + public function toArray(): array + { + $this->ensureData(); + + $res = []; + $stat = $this->stat; + $range = $stat->range(); + $res['date_range'] = [ 'begin' => $range[0], 'end' => $range[1] ]; + $res['summary'] = $stat->summary(); + $res['sources'] = $stat->ips(); + $res['organizations'] = $stat->organizations(); + return $res; + } + + /** + * Returns the subject string. It is used in email messages. + * + * @return string + */ + public function subject(): string + { + return $this->subject; + } + + /** + * Returns the report as an array of text strings + * + * @return array + */ + public function text(): array + { + $rdata = $this->reportData(); + + $res = []; + $res[] = '# Domain: ' . $this->domain->fqdn(); + + $res[] = ' Range: ' . $rdata['range']; + $res[] = ''; + + $res[] = '## Summary'; + $total = $rdata['summary']['total']; + $res[] = sprintf(' Total: %d', $total); + $res[] = sprintf(' DKIM or SPF aligned: %s', self::num2percent($rdata['summary']['aligned'], $total)); + $res[] = sprintf(' Not aligned: %s', self::num2percent($rdata['summary']['n_aligned'], $total)); + $res[] = sprintf(' Organizations: %d', $rdata['summary']['organizations']); + $res[] = ''; + + if (count($rdata['sources']) > 0) { + $res[] = '## Sources'; + $res[] = sprintf( + ' %-25s %13s %13s %13s', + '', + 'Total', + 'SPF aligned', + 'DKIM aligned' + ); + foreach ($rdata['sources'] as &$it) { + $total = $it['emails']; + $spf_a = $it['spf_aligned']; + $dkim_a = $it['dkim_aligned']; + $spf_str = self::num2percent($spf_a, $total); + $dkim_str = self::num2percent($dkim_a, $total); + $res[] = sprintf( + ' %-25s %13d %13s %13s', + $it['ip'], + $total, + $spf_str, + $dkim_str + ); + } + unset($it); + $res[] = ''; + } + + if (count($rdata['organizations']) > 0) { + $res[] = '## Organizations'; + + $org_len = 15; + foreach ($rdata['organizations'] as &$org) { + $org_len = max($org_len, mb_strlen($org['name'])); + } + unset($org); + + $org_len = min($org_len, 55); + $res[] = sprintf(" %-{$org_len}s %8s %8s", '', 'emails', 'reports'); + $frm_str = " %-{$org_len}s %8d %8d"; + foreach ($rdata['organizations'] as &$org) { + $res[] = sprintf( + $frm_str, + trim($org['name']), + $org['emails'], + $org['reports'] + ); + } + unset($org); + $res[] = ''; + } + + return $res; + } + + /** + * Returns the report as an array of html strings + * + * @return array + */ + public function html(): array + { + $h2a = 'style="margin:15px 0 5px;"'; + $t2a = 'style="border-collapse:collapse;border-spacing:0;"'; + $c1a = 'style="font-style:italic;"'; + $d1s = 'padding-left:1em;'; + $d2s = 'min-width:4em;'; + $d3s = 'border:1px solid #888;'; + $d4s = 'text-align:right;'; + $d5s = 'padding:.3em;'; + + $add_red = function (int $num) { + return $num > 0 ? 'color:#f00;' : ''; + }; + $add_green = function (int $num) { + return $num > 0 ? 'color:#080;' : ''; + }; + + $rdata = $this->reportData(); + $res = []; + $res[] = "

Domain: " . htmlspecialchars($this->domain->fqdn()) . '

'; + $res[] = '

Range: ' . htmlspecialchars($rdata['range']) . '

'; + + $res[] = "

Summary

"; + $res[] = ''; + $total = $rdata['summary']['total']; + $a_cnt = $rdata['summary']['aligned']; + $n_cnt = $rdata['summary']['n_aligned']; + $res[] = " '; + $color = $add_green($a_cnt); + $res[] = " "; + $color = $add_red($n_cnt); + $res[] = " "; + $res[] = " '; + $res[] = '
Total: " . $total . '
DKIM or SPF aligned: {$a_cnt}
Not aligned: {$n_cnt}
Organizations: " . + $rdata['summary']['organizations'] . + '
'; + + $rs2 = 'rowspan="2"'; + $cs3 = 'colspan="3"'; + $s_cnt = count($rdata['sources']); + if ($s_cnt > 0) { + $res[] = "

Sources

"; + $res[] = ""; + $res[] = " "; + $res[] = ' '; + $style = "style=\"{$d3s}{$d5s}\""; + $res[] = " " . + ""; + $style = "style=\"{$d2s}{$d3s}{$d5s}\""; + $res[] = " " . + ""; + $res[] = ' '; + $res[] = ' '; + foreach ($rdata['sources'] as &$row) { + $ip = htmlspecialchars($row['ip']); + $total = $row['emails']; + $spf_a = $row['spf_aligned']; + $spf_n = $total - $spf_a; + $spf_p = sprintf('%.0f%%', $spf_a / $total * 100); + $dkim_a = $row['dkim_aligned']; + $dkim_n = $total - $dkim_a; + $dkim_p = sprintf('%.0f%%', $dkim_a / $total * 100); + $style = "style=\"{$d3s}{$d5s}"; + + $row_str = " "; + $row_str .= ""; + $row_str .= ""; + $row_str .= ""; + $row_str .= ""; + $row_str .= ""; + $row_str .= ""; + $res[] = $row_str . ''; + } + unset($row); + $res[] = ' '; + $res[] = '
Total records: {$s_cnt}
IP addressEmail volumeSPFDKIM
passfailratepassfailrate
{$ip}{$total}{$spf_a}{$spf_n}{$spf_p}{$dkim_a}{$dkim_n}{$dkim_p}
'; + } + + $o_cnt = count($rdata['organizations']); + if ($o_cnt) { + $res[] = "

Organizations

"; + $res[] = ""; + $res[] = " "; + $res[] = ' '; + $style = "style=\"{$d3s}{$d5s}\""; + $res[] = " "; + $res[] = ' '; + $res[] = ' '; + foreach ($rdata['organizations'] as &$row) { + $name = htmlspecialchars($row['name']); + $style2 = "style=\"{$d3s}{$d4s}{$d5s}\""; + $res[] = " " . + "" . + ""; + } + unset($row); + $res[] = ' '; + $res[] = '
Total records: {$o_cnt}
NameEmailsReports
{$name}{$row['emails']}{$row['reports']}
'; + } + + return $res; + } + + /** + * Returns the percentage with the original number. If $per is 0 then '0' is returned. + * + * @param int $per Value + * @param int $cent Divisor for percentage calculation + * + * @return string + */ + private static function num2percent(int $per, int $cent): string + { + if (!$per) { + return '0'; + } + return sprintf('%.0f%%(%d)', $per / $cent * 100, $per); + } + + /** + * Generates the report if it has not already been done + * + * @return void + */ + private function ensureData(): void + { + if (!$this->domain) { + throw new LogicException('No one domain was specified'); + } + + if (!$this->stat) { + switch ($this->period) { + case self::LAST_WEEK: + $this->stat = Statistics::lastWeek($this->domain); + break; + case self::LAST_MONTH: + $this->stat = Statistics::lastMonth($this->domain); + break; + default: + $this->stat = Statistics::lastNDays($this->domain, $this->period); + break; + } + } + } + + /** + * Returns prepared data for the report + * + * @return array + */ + private function reportData(): array + { + $this->ensureData(); + + $stat = $this->stat; + $rdata = []; + $range = $stat->range(); + $cyear = (new \Datetime())->format('Y'); + $dform = ($range[0]->format('Y') !== $cyear || $range[1]->format('Y') !== $cyear) ? 'M d Y' : 'M d'; + $rdata['range'] = $range[0]->format($dform) . ' - ' . $range[1]->format($dform); + + $summ = $stat->summary(); + $total = $summ['emails']['total']; + $aligned = $summ['emails']['dkim_spf_aligned'] + + $summ['emails']['dkim_aligned'] + + $summ['emails']['spf_aligned']; + $n_aligned = $total - $aligned; + $rdata['summary'] = [ + 'total' => $total, + 'organizations' => $summ['organizations'] + ]; + if ($total > 0) { + $rdata['summary']['aligned'] = $aligned; + $rdata['summary']['n_aligned'] = $n_aligned; + } else { + $rdata['summary']['aligned'] = $aligned; + $rdata['summary']['n_aligned'] = $aligned; + } + + $rdata['sources'] = $stat->ips(); + + $rdata['organizations'] = $stat->organizations(); + + return $rdata; + } +} diff --git a/root/opt/dmarc-srg/classes/ReportFile/ReportFile.php b/root/opt/dmarc-srg/classes/ReportFile/ReportFile.php new file mode 100644 index 0000000..3e771de --- /dev/null +++ b/root/opt/dmarc-srg/classes/ReportFile/ReportFile.php @@ -0,0 +1,194 @@ +. + */ + +namespace Liuch\DmarcSrg\ReportFile; + +use Liuch\DmarcSrg\Exception\SoftException; + +class ReportFile +{ + private $fd = null; + private $zip = null; + private $type = null; + private $remove = false; + private $filename = null; + private $filepath = null; + private $gzcutfilter = null; + private $gzinflatefilter = null; + private static $filters = []; + private static $ext_mime_map = [ + 'xml' => 'text/xml', + 'gz' => 'application/gzip', + 'zip' => 'application/zip' + ]; + + private function __construct($filename, $type = null, $fd = null, $remove = false, $filepath = null) + { + $this->filename = $filename; + $this->type = $type ?? self::getMimeType($filename, $fd, $filepath); + $this->remove = $remove; + $this->filepath = $filepath; + + switch ($this->type) { + case 'application/gzip': + case 'application/x-gzip': + $this->fd = $fd; + break; + case 'application/zip': + if ($fd) { + $tmpfname = tempnam(sys_get_temp_dir(), 'dmarc_'); + if ($tmpfname === false) { + throw new SoftException('Failed to create a temporary file'); + } + rewind($fd); + if (file_put_contents($tmpfname, $fd) === false) { + throw new SoftException('Failed to copy data to a temporary file'); + } + $this->filepath = $tmpfname; + $this->remove = true; + } + break; + } + } + + public function __destruct() + { + if ($this->fd) { + if ($this->isGzipStream()) { + $this->enableGzFilter(false); + } + gzclose($this->fd); + } + if ($this->zip) { + $this->zip->close(); + } + if ($this->remove && $this->filepath) { + unlink($this->filepath); + } + } + + public static function getMimeType($filename, $fd = null, $filepath = null) + { + if (function_exists('mime_content_type')) { + if ($fd && ($res = mime_content_type($fd))) { + return $res; + } + if ($filepath && ($res = mime_content_type($filepath))) { + return $res; + } + } + + $ext = pathinfo(basename($filename), PATHINFO_EXTENSION); + return self::$ext_mime_map[$ext] ?? 'application/octet-stream'; + } + + public static function fromFile($filepath, $filename = null, $remove = false) + { + if (!is_file($filepath)) { + throw new SoftException('ReportFile: it is not a file'); + } + + return new ReportFile( + $filename ? basename($filename) : basename($filepath), + null, + null, + $remove, + $filepath + ); + } + + public static function fromStream($fd, $filename, $type) + { + return new ReportFile($filename, $type, $fd); + } + + public function filename() + { + return $this->filename; + } + + public function datastream() + { + if (!$this->fd) { + $fd = null; + switch ($this->type) { + case 'application/zip': + $this->zip = new \ZipArchive(); + $this->zip->open($this->filepath); + if ($this->zip->count() !== 1) { + throw new SoftException('The archive must have only one file in it'); + } + $zfn = $this->zip->getNameIndex(0); + if ($zfn !== pathinfo($zfn, PATHINFO_BASENAME)) { + throw new SoftException('There must not be any directories in the archive'); + } + $fd = $this->zip->getStream($zfn); + break; + default: + // gzopen() can be used to read a file which is not in gzip format; + // in this case gzread() will directly read from the file without decompression. + $fd = gzopen($this->filepath, 'r'); + break; + } + if (!$fd) { + throw new SoftException('Failed to open a report file'); + } + $this->fd = $fd; + } + if ($this->isGzipStream()) { + ReportFile::ensureRegisterFilter( + 'report_gzfile_cut_filter', + 'Liuch\DmarcSrg\ReportFile\ReportGZFileCutFilter' + ); + $this->enableGzFilter(true); + } + return $this->fd; + } + + private static function ensureRegisterFilter($filtername, $classname) + { + if (!isset(ReportFile::$filters[$filtername])) { + stream_filter_register($filtername, $classname); + ReportFile::$filters[$filtername] = true; + } + } + + private function enableGzFilter($enable) + { + if ($enable) { + if (!$this->gzcutfilter) { + $this->gzcutfilter = stream_filter_append($this->fd, 'report_gzfile_cut_filter', STREAM_FILTER_READ); + $this->gzinflatefilter = stream_filter_append($this->fd, 'zlib.inflate', STREAM_FILTER_READ); + } + } else { + if ($this->gzcutfilter) { + stream_filter_remove($this->gzinflatefilter); + stream_filter_remove($this->gzcutfilter); + } + } + } + + private function isGzipStream(): bool + { + return (in_array($this->type, [ 'application/gzip', 'application/x-gzip' ]) && !$this->filepath); + } +} diff --git a/root/opt/dmarc-srg/classes/ReportFile/ReportGZFileCutFilter.php b/root/opt/dmarc-srg/classes/ReportFile/ReportGZFileCutFilter.php new file mode 100644 index 0000000..dc3930d --- /dev/null +++ b/root/opt/dmarc-srg/classes/ReportFile/ReportGZFileCutFilter.php @@ -0,0 +1,114 @@ +. + */ + +namespace Liuch\DmarcSrg\ReportFile; + +use php_user_filter; + +class ReportGZFileCutFilter extends php_user_filter +{ + private $head = true; + private $header_data = ''; + private $tail_data = ''; + + public function filter($in, $out, &$consumed, $closing): int + { + $b_cnt = 0; + while ($bucket = stream_bucket_make_writeable($in)) { + $consumed += $bucket->datalen; + $data = null; + if ($this->head) { + $data = $this->skipGzHeader($bucket->data); + } else { + $data = $bucket->data; + } + $data = $this->cutGzTail($data); + if (strlen($data) > 0) { + $bucket->data = $data; + stream_bucket_append($out, $bucket); + $b_cnt += 1; + } + } + return ($b_cnt > 0) ? PSFS_PASS_ON : PSFS_FEED_ME; + } + + private function skipGzHeader($data) + { + // https://tools.ietf.org/html/rfc1952 + $this->header_data .= $data; + $len = strlen($this->header_data); + if ($len < 10) { // minimal gz header + return ''; + } + + $pos = 10; + $flags = ord($this->header_data[3]); + if ($flags & 4) { // FLG.FEXTRA + $pos += (ord($this->header_data[$pos + 1]) | (ord($this->header_data[$pos + 2]) << 8)) + 2; + if ($pos > $len) { + return ''; + } + } + if ($flags & 8) { // FLG.FNAME + $pos = $this->skipZeroTerminatedString($this->header_data, $len, $pos); + if ($pos > $len) { + return ''; + } + } + if ($flags & 16) { // FLG.FCOMMENT + $pos = $this->skipZeroTerminatedString($this->header_data, $len, $pos); + if ($pos > $len) { + return ''; + } + } + if ($flags & 2) { // FLG.FHCRC + $pos += 2; + if ($pos > $len) { + return ''; + } + } + $res = substr($this->header_data, $pos); + $this->head = false; + $this->header_data = ''; + return $res; + } + + private function cutGzTail($data) + { + $res = $this->tail_data . $data; + $this->tail_data = substr($res, -8); + if (strlen($res) <= 8) { + return ''; + } + return substr($res, 0, -8); + } + + private function skipZeroTerminatedString($str, $len, $pos) + { + for ($i = $pos; $i < $len; ++$i) { + if ($str[$i] === "\0") { + return $i + 1; + } + } + return $len + 1; + } +} diff --git a/root/opt/dmarc-srg/classes/ReportLog/ReportLog.php b/root/opt/dmarc-srg/classes/ReportLog/ReportLog.php new file mode 100644 index 0000000..551b205 --- /dev/null +++ b/root/opt/dmarc-srg/classes/ReportLog/ReportLog.php @@ -0,0 +1,96 @@ +. + */ + +namespace Liuch\DmarcSrg\ReportLog; + +use Liuch\DmarcSrg\Core; + +class ReportLog +{ + public const ORDER_ASCENT = 1; + public const ORDER_DESCENT = 2; + + private $db = null; + private $filter = [ + 'from_time' => null, + 'till_time' => null + ]; + private $order = [ + 'direction' => 'ascent' + ]; + private $rec_limit = 0; + private $position = 0; + + public function __construct($from_time, $till_time, $db = null) + { + $this->filter['from_time'] = $from_time; + $this->filter['till_time'] = $till_time; + $this->db = $db ?? Core::instance()->database(); + } + + public function setOrder(int $dir) + { + $this->order['direction'] = ($dir === self::ORDER_DESCENT ? 'descent' : 'ascent'); + } + + public function setMaxCount(int $n) + { + $this->rec_limit = $n; + } + + public function count() + { + $limit = [ 'offset' => 0, 'count' => $this->rec_limit ]; + return $this->db->getMapper('report-log')->count($this->filter, $limit); + } + + public function getList(int $pos) + { + $this->position = $pos; + $max_rec = $this->rec_limit > 0 ? $this->rec_limit : 25; + + $limit = [ 'offset' => $pos, 'count' => $max_rec + 1 ]; + + $list = $this->db->getMapper('report-log')->list($this->filter, $this->order, $limit); + if (count($list) > $max_rec) { + $more = true; + unset($list[$max_rec]); + } else { + $more = false; + } + foreach ($list as &$it) { + $it['source'] = ReportLogItem::sourceToString($it['source']); + } + unset($it); + + return [ + 'items' => $list, + 'more' => $more + ]; + } + + public function delete() + { + $limit = [ 'offset' => 0, 'count' => $this->rec_limit ]; + $this->db->getMapper('report-log')->delete($this->filter, $this->order, $limit); + } +} diff --git a/root/opt/dmarc-srg/classes/ReportLog/ReportLogItem.php b/root/opt/dmarc-srg/classes/ReportLog/ReportLogItem.php new file mode 100644 index 0000000..055e252 --- /dev/null +++ b/root/opt/dmarc-srg/classes/ReportLog/ReportLogItem.php @@ -0,0 +1,147 @@ +. + */ + +namespace Liuch\DmarcSrg\ReportLog; + +use Liuch\DmarcSrg\Core; +use Liuch\DmarcSrg\Sources\Source; +use Liuch\DmarcSrg\Exception\LogicException; +use Liuch\DmarcSrg\Exception\SoftException; +use Liuch\DmarcSrg\Exception\DatabaseNotFoundException; + +class ReportLogItem +{ + private $db = null; + private $data = [ + 'id' => null, + 'domain' => null, + 'external_id' => null, + 'event_time' => null, + 'filename' => null, + 'source' => 0, + 'success' => false, + 'message' => null + ]; + + private function __construct($source, $filename, $db) + { + if (!is_null($source)) { + if (gettype($source) !== 'integer' || $source <= 0) { + throw new LogicException('Invalid parameter passed'); + } + } + $this->data['source'] = $source; + $this->data['filename'] = gettype($filename) == 'string' ? $filename : null; + $this->db = $db ?? Core::instance()->database(); + } + + public static function success(int $source, $report, $filename, $message, $db = null) + { + $li = new ReportLogItem($source, $filename, $db); + $li->data['success'] = true; + $rdata = $report->get(); + $li->data['domain'] = $rdata['domain']; + $li->data['external_id'] = $rdata['external_id']; + $li->data['message'] = $message; + return $li; + } + + public static function failed(int $source, $report, $filename, $message, $db = null) + { + $li = new ReportLogItem($source, $filename, $db); + $li->data['success'] = false; + if (!is_null($report)) { + $rdata = $report->get(); + $li->data['domain'] = $rdata['domain']; + $li->data['external_id'] = $rdata['external_id']; + } else { + $li->data['domain'] = null; + $li->data['external_id'] = null; + } + $li->data['message'] = $message; + return $li; + } + + /** + * Returns an instance of ReportLogItem with the passed Id + * + * @param int $id Item Id to return + * @param DatabaseController $db The database controller + * + * @return ReportLogItem an instance of ReportLogItem with the specified Id. + */ + public static function byId(int $id, $db = null) + { + $li = new ReportLogItem(null, null, $db); + $li->data['id'] = $id; + try { + $li->db->getMapper('report-log')->fetch($li->data); + } catch (DatabaseNotFoundException $e) { + throw new SoftException('The log item is not found'); + } + return $li; + } + + /** + * Converts an integer source value to a string representation + * + * Returns a string with the source name or an empty string if the integer value is incorrect. + * + * @param int $source - an integer value to convert + * + * @return string A string value of the passed source + */ + public static function sourceToString(int $source): string + { + switch ($source) { + case Source::SOURCE_UPLOADED_FILE: + return 'uploaded_file'; + case Source::SOURCE_MAILBOX: + return 'email'; + case Source::SOURCE_DIRECTORY: + return 'directory'; + } + return ''; + } + + /** + * Returns an array with log item data + * + * @return array Log item data + */ + public function toArray(): array + { + $res = $this->data; + $res['source'] = static::sourceToString($this->data['source']); + return $res; + } + + /** + * Saves the report log item to the database + * + * @return void + */ + public function save(): void + { + $this->db->getMapper('report-log')->save($this->data); + } +} diff --git a/root/opt/dmarc-srg/classes/Settings/Setting.php b/root/opt/dmarc-srg/classes/Settings/Setting.php new file mode 100644 index 0000000..7278d03 --- /dev/null +++ b/root/opt/dmarc-srg/classes/Settings/Setting.php @@ -0,0 +1,242 @@ +. + * + * ========================= + * + * This file contains implementation of the class Setting + * + * @category API + * @package DmarcSrg + * @author Aleksey Andreev (liuch) + * @license https://www.gnu.org/licenses/gpl-3.0.html GNU/GPLv3 + */ + +namespace Liuch\DmarcSrg\Settings; + +use Liuch\DmarcSrg\Core; +use Liuch\DmarcSrg\Exception\SoftException; +use Liuch\DmarcSrg\Exception\DatabaseNotFoundException; + +/** + * It's a class for accessing to settings item data + * + * This class is designed for storing and manipulating one item of settings data. + * All queries to the datatabase are made in lazy mode. + */ +abstract class Setting +{ + public const TYPE_STRING = 1; + public const TYPE_INTEGER = 2; + public const TYPE_STRING_SELECT = 3; + + protected $db = null; + protected $name = null; + protected $value = null; + protected $wignore = false; + + /** + * Returns the type of the setting + * + * @return int Type of the setting + */ + abstract public function type(): int; + + /** + * Checks if the value is correct + * + * @return bool True if the value is correct or false otherwise + */ + abstract protected function checkValue(): bool; + + /** + * Converts a string to the value + * + * @param string $s String for conversion + * + * @return void + */ + abstract protected function stringToValue(string $s): void; + + /** + * Returns a string representation of the value + * + * @return string The string value + */ + abstract protected function valueToString(): string; + + /** + * It's a constructor of the class + * + * Some examples of using: + * (new Setting('some.setting'))->value(); - will return the value of the setting 'some.setting'. + * (new Setting([ 'name' => 'some.setting', 'value' => 'some string value' ])->save(); - will add + * this setting to the database if it does not exist in it or update the value of the setting. + * + * @param string|array $data Some setting data to identify it + * string value is treated as a name + * array has these fields: `name`, `value` + * and usually uses for creating a new setting item. + * @param boolean $wignore If true the wrong value is reset to the default + * or it throws an exception otherwise. + * @param DatabaseController $db The database controller + * + * @return void + */ + public function __construct($data, bool $wignore = false, $db = null) + { + $this->wignore = $wignore; + $this->db = $db ?? Core::instance()->database(); + switch (gettype($data)) { + case 'string': + $this->name = $data; + SettingsList::checkName($this->name); + return; + case 'array': + if (!isset($data['name']) || gettype($data['name']) !== 'string') { + break; + } + $this->name = $data['name']; + SettingsList::checkName($this->name); + if (isset($data['value'])) { + $this->value = $data['value']; + if (!$this->checkValue()) { + if (!$wignore) { + break; + } + $this->resetToDefault(); + } + } + return; + } + throw new SoftException('Wrong setting data'); + } + + /** + * Returns the name of the setting + * + * @return string The name of the setting + */ + public function name(): string + { + return $this->name; + } + + /** + * Returns the value of the setting + * + * @return mixed The value of the setting + */ + public function value() + { + if (is_null($this->value)) { + $this->fetchData(); + } + return $this->value; + } + + /** + * Assigns the passed value to the setting + * + * @param mixed Value to assign + * + * @return void + */ + public function setValue($value): void + { + $this->value = $value; + if (!$this->checkValue()) { + if (!$this->wignore) { + throw new SoftException('Wrong setting value'); + } + $this->resetToDefault(); + } + } + + /** + * Returns an array with setting data + * + * @return array Setting data + */ + public function toArray(): array + { + if (is_null($this->value)) { + $this->fetchData(); + } + switch ($this->type()) { + case self::TYPE_STRING: + $type = 'string'; + break; + case self::TYPE_INTEGER: + $type = 'integer'; + break; + case self::TYPE_STRING_SELECT: + $type = 'select'; + break; + } + return [ + 'type' => $type, + 'name' => $this->name, + 'value' => $this->value, + 'default' => SettingsList::$schema[$this->name]['default'] + ]; + } + + /** + * Saves the setting to the database + * + * Updates the value of the setting in the database if the setting exists there or insert a new record otherwise. + * + * @return void + */ + public function save(): void + { + $this->db->getMapper('setting')->save($this->name, $this->valueToString()); + } + + /** + * Fetches the setting data from the database by its name + * + * @return void + */ + private function fetchData(): void + { + try { + $res = $this->db->getMapper('setting')->value($this->name); + } catch (DatabaseNotFoundException $e) { + $this->resetToDefault(); + return; + } + $this->stringToValue($res); + if (!$this->checkValue()) { + $this->resetToDefault(); + } + } + + /** + * Resets the setting value to its default value + * + * @return void + */ + private function resetToDefault(): void + { + $this->value = SettingsList::$schema[$this->name]['default']; + } +} diff --git a/root/opt/dmarc-srg/classes/Settings/SettingInteger.php b/root/opt/dmarc-srg/classes/Settings/SettingInteger.php new file mode 100644 index 0000000..5654e2e --- /dev/null +++ b/root/opt/dmarc-srg/classes/Settings/SettingInteger.php @@ -0,0 +1,109 @@ +. + * + * ========================= + * + * This file contains implementation of the class SettingInteger + * + * @category API + * @package DmarcSrg + * @author Aleksey Andreev (liuch) + * @license https://www.gnu.org/licenses/gpl-3.0.html GNU/GPLv3 + */ + +namespace Liuch\DmarcSrg\Settings; + +/** + * It's a class for accessing to settings item data + * + * This class contains the implementation of the setting for integer values. + */ +class SettingInteger extends Setting +{ + /** + * Returns the type of the setting + * + * @return int Type of the setting + */ + public function type(): int + { + return Setting::TYPE_INTEGER; + } + + /** + * Checks if the value is correct + * + * @return bool True if the value is correct or false otherwise + */ + protected function checkValue(): bool + { + if (gettype($this->value) === 'integer') { + $sch = &SettingsList::$schema[$this->name]; + if (!isset($sch['minimum']) || $this->value >= $sch['minimum']) { + if (!isset($sch['maximum']) || $this->value <= $sch['maximum']) { + return true; + } + } + } + return false; + } + + /** + * Converts a string to the value + * + * @param string $s String for conversion + * + * @return void + */ + protected function stringToValue(string $s): void + { + $this->value = intval($s); + } + + /** + * Returns a string representation of the value + * + * @return string The string value + */ + protected function valueToString(): string + { + return strval($this->value); + } + + /** + * Returns an array with setting data + * + * @return array Setting data + */ + public function toArray(): array + { + $res = parent::toArray(); + $sch = &SettingsList::$schema[$this->name]; + if (isset($sch['minimum'])) { + $res['minimum'] = $sch['minimum']; + } + if (isset($sch['maximum'])) { + $res['maximum'] = $sch['maximum']; + } + return $res; + } +} + diff --git a/root/opt/dmarc-srg/classes/Settings/SettingString.php b/root/opt/dmarc-srg/classes/Settings/SettingString.php new file mode 100644 index 0000000..c15cdf2 --- /dev/null +++ b/root/opt/dmarc-srg/classes/Settings/SettingString.php @@ -0,0 +1,83 @@ +. + * + * ========================= + * + * This file contains implementation of the class SettingString + * + * @category API + * @package DmarcSrg + * @author Aleksey Andreev (liuch) + * @license https://www.gnu.org/licenses/gpl-3.0.html GNU/GPLv3 + */ + +namespace Liuch\DmarcSrg\Settings; + +/** + * It's a class for accessing to settings item data + * + * This class contains the implementation of the setting for string values. + */ +class SettingString extends Setting +{ + /** + * Returns the type of the setting + * + * @return int Type of the setting + */ + public function type(): int + { + return Setting::TYPE_STRING; + } + + /** + * Checks if the value is correct + * + * @return bool True if the value is correct or false otherwise + */ + protected function checkValue(): bool + { + return (gettype($this->value) === 'string'); + } + + /** + * Converts a string to the value + * + * @param string $s String for conversion + * + * @return void + */ + protected function stringToValue(string $s): void + { + $this->value = $s; + } + + /** + * Returns a string representation of the value + * + * @return string The string value + */ + protected function valueToString(): string + { + return $this->value; + } +} + diff --git a/root/opt/dmarc-srg/classes/Settings/SettingStringSelect.php b/root/opt/dmarc-srg/classes/Settings/SettingStringSelect.php new file mode 100644 index 0000000..d1a3188 --- /dev/null +++ b/root/opt/dmarc-srg/classes/Settings/SettingStringSelect.php @@ -0,0 +1,78 @@ +. + * + * ========================= + * + * This file contains implementation of the class SettingStringSelect + * + * @category API + * @package DmarcSrg + * @author Aleksey Andreev (liuch) + * @license https://www.gnu.org/licenses/gpl-3.0.html GNU/GPLv3 + */ + +namespace Liuch\DmarcSrg\Settings; + +/** + * It's a class for accessing to settings item data + * + * This class contains the implementation of the setting for string with a limited set of values. + */ +class SettingStringSelect extends SettingString +{ + /** + * Returns the type of the setting + * + * @return int Type of the setting + */ + public function type(): int + { + return Setting::TYPE_STRING_SELECT; + } + + /** + * Checks if the value is correct + * + * @return bool True if the value is correct or false otherwise + */ + protected function checkValue(): bool + { + if (parent::checkValue()) { + if (in_array($this->value, SettingsList::$schema[$this->name]['options'])) { + return true; + } + } + return false; + } + + /** + * Returns an array with setting data + * + * @return array Setting data + */ + public function toArray(): array + { + $res = parent::toArray(); + $res['options'] = SettingsList::$schema[$this->name]['options']; + return $res; + } +} + diff --git a/root/opt/dmarc-srg/classes/Settings/SettingsList.php b/root/opt/dmarc-srg/classes/Settings/SettingsList.php new file mode 100644 index 0000000..84b358c --- /dev/null +++ b/root/opt/dmarc-srg/classes/Settings/SettingsList.php @@ -0,0 +1,207 @@ +. + * + * ========================= + * + * This file contains the class SettingsList + * + * @category API + * @package DmarcSrg + * @author Aleksey Andreev (liuch) + * @license https://www.gnu.org/licenses/gpl-3.0.html GNU/GPLv3 + */ + +namespace Liuch\DmarcSrg\Settings; + +use Liuch\DmarcSrg\Core; +use Liuch\DmarcSrg\Exception\SoftException; + +/** + * This class is designed to work with the list of the settings + */ +class SettingsList +{ + public const ORDER_ASCENT = 0; + public const ORDER_DESCENT = 1; + + private $db = null; + private $order = self::ORDER_ASCENT; + + /** + * The constructor + * + * @param DatabaseController $db Connector to the current database + */ + public function __construct($db = null) + { + $this->db = $db ?? Core::instance()->database(); + } + + /** + * Returns a list of the settings + * + * It returns a list of the settings that are marked public. + * The value is taken from the database, if any, or the default. + * + * @return array Array with instances of Setting class + */ + public function getList(): array + { + $db_map = $this->db->getMapper('setting')->list(); + foreach (static::$schema as $name => &$sch_data) { + if ($sch_data['public'] ?? false) { + $value = $db_map[$name] ?? $sch_data['default']; + switch ($sch_data['type']) { + case 'select': + $list[] = new SettingStringSelect([ + 'name' => $name, + 'value' => $value + ], true, $this->db); + break; + case 'integer': + $list[] = new SettingInteger([ + 'name' => $name, + 'value' => intval($value) + ], true, $this->db); + break; + case 'string': + $list[] = new SettingString([ + 'name' => $name, + 'value' => $value + ], true, $this->db); + break; + } + } + } + unset($sch_data); + + $dir = $this->order == self::ORDER_ASCENT ? 1 : -1; + usort($list, static function ($a, $b) use ($dir) { + return ($a->name() <=> $b->name()) * $dir; + }); + + return [ + 'list' => $list, + 'more' => false + ]; + } + + /** + * Sets the sorting direction for the list + * + * @param int $direction The sorting direction. ORDER_ASCENT or ORDER_DESCENT must be used here. + * + * @return SettingsList $this + */ + public function setOrder(int $direction) + { + if ($direction !== self::ORDER_DESCENT) { + $direction = self::ORDER_ASCENT; + } + $this->order = $direction; + return $this; + } + + /** + * Throws an exception if there is no setting with name $name + * + * @param string $name Setting name to check + * + * @return void + */ + public static function checkName($name): void + { + if (!isset(self::$schema[$name])) { + throw new SoftException('Unknown setting name: ' . $name); + } + } + + /** + * Returns an instance of the Setting class by its name + * + * It returns an instance of the Setting class but only if it is marked public. + * + * @param string $name Setting name + * + * @return Setting + */ + public static function getSettingByName(string $name) + { + self::checkName($name); + if (!(self::$schema[$name]['public'] ?? false)) { + throw new SoftException('Attempt to access an internal variable'); + } + + switch (self::$schema[$name]['type']) { + case 'string': + return new SettingString($name); + case 'select': + return new SettingStringSelect($name); + case 'integer': + return new SettingInteger($name); + } + } + + /** + * List of the possible setting items that must be returned in getList method, their types and other data + */ + public static $schema = [ + 'version' => [ + 'type' => 'string', + 'default' => '' + ], + 'status.emails-for-last-n-days' => [ + 'type' => 'integer', + 'public' => true, + 'minimum' => 1, + 'maximum' => 365, + 'default' => 30 + ], + 'report-view.sort-records-by' => [ + 'type' => 'select', + 'public' => true, + 'options' => [ 'ip,ascent', 'ip,descent', 'message-count,ascent', 'message-count,descent' ], + 'default' => 'message-count,descent' + ], + 'log-view.sort-list-by' => [ + 'type' => 'select', + 'public' => true, + 'options' => [ 'event-time,ascent', 'event-time,descent' ], + 'default' => 'event-time,ascent' + ], + 'ui.datetime.offset' => [ + 'type' => 'select', + 'public' => true, + 'options' => [ 'auto', 'utc', 'local' ], + 'default' => 'auto' + ], + 'ui.ipv4.url' => [ + 'type' => 'string', + 'public' => true, + 'default' => 'https://who.is/whois-ip/ip-address/{$ip}' + ], + 'ui.ipv6.url' => [ + 'type' => 'string', + 'public' => true, + 'default' => 'https://who.is/whois-ip/ip-address/{$ip}' + ] + ]; +} diff --git a/root/opt/dmarc-srg/classes/Sources/DirectorySource.php b/root/opt/dmarc-srg/classes/Sources/DirectorySource.php new file mode 100644 index 0000000..2132a63 --- /dev/null +++ b/root/opt/dmarc-srg/classes/Sources/DirectorySource.php @@ -0,0 +1,255 @@ +. + * + * ========================= + * + * This file contains the class DirectorySource + * + * @category API + * @package DmarcSrg + * @author Aleksey Andreev (liuch) + * @license https://www.gnu.org/licenses/gpl-3.0.html GNU/GPLv3 + */ + +namespace Liuch\DmarcSrg\Sources; + +use Liuch\DmarcSrg\Core; +use Liuch\DmarcSrg\ReportFile\ReportFile; +use Liuch\DmarcSrg\Exception\SoftException; +use Liuch\DmarcSrg\Exception\RuntimeException; + +/** + * This class is designed to process report files from local server directories. + */ +class DirectorySource extends Source +{ + private $path = null; + private $list = null; + private $index = 0; + private $params = null; + + /** + * Sets parameters that difine the behavior of the source + * + * @param $params Key-value array + * 'when_done' => one or more rules to be executed after successful report processing + * (array|string) + * 'when_failed' => one or more rules to be executed after report processing fails + * (array|string) + * + * @return void + */ + public function setParams(array $params): void + { + $this->params = []; + $this->params['when_done'] = SourceAction::fromSetting( + $params['when_done'] ?? [], + SourceAction::FLAG_BASENAME, + 'delete' + ); + $this->params['when_failed'] = SourceAction::fromSetting( + $params['when_failed'] ?? [], + SourceAction::FLAG_BASENAME, + 'move_to:failed' + ); + } + + /** + * Returns an instance of the ReportFile class for the current file. + * + * @return ReportFile + */ + public function current(): object + { + return ReportFile::fromFile($this->list[$this->index]); + } + + /** + * Returns the index of the currect file. + * + * @return int + */ + public function key(): int + { + return $this->index; + } + + /** + * Moves forward to the next file. + * + * @return void + */ + public function next(): void + { + ++$this->index; + } + + /** + * Rewinds the position to the first file. + * + * @return void + */ + public function rewind(): void + { + if (is_null($this->list)) { + $this->path = $this->data->toArray()['location']; + if (!is_dir($this->path)) { + throw new SoftException("The {$this->path} directory does not exist!"); + } + try { + $fs = new \FilesystemIterator($this->path); + } catch (\Exception $e) { + throw new RuntimeException("Error accessing directory {$this->path}", -1, $e); + } + $this->list = []; + foreach ($fs as $entry) { + if ($entry->isFile()) { + $this->list[] = $entry->getPathname(); + } + } + } + if (is_null($this->params)) { + $this->setParams([]); + } + $this->index = 0; + } + + /** + * Checks if the current postion is valid + * + * @return bool + */ + public function valid(): bool + { + return isset($this->list[$this->index]); + } + + /** + * Processes the accepted report file according to the settings + * + * @return void + */ + public function accepted(): void + { + $this->processReportFileActions($this->params['when_done']); + } + + /** + * Processes the rejected report file according to the settings + * + * @return void + */ + public function rejected(): void + { + $this->processReportFileActions($this->params['when_failed']); + } + + /** + * Returns type of the source. + * + * @return int + */ + public function type(): int + { + return Source::SOURCE_DIRECTORY; + } + + /** + * Logs an error message + * + * @param string $message + */ + private function logError(string $message): void + { + Core::instance()->logger()->error($message); + } + + /** + * Processes the current report file according to settings + * + * @param array $actions List of actions to apply to the file + * + * @return void + */ + private function processReportFileActions(array &$actions): void + { + foreach ($actions as $sa) { + switch ($sa->type) { + case SourceAction::ACTION_DELETE: + $this->deleteReportFile(); + break; + case SourceAction::ACTION_MOVE: + $this->moveReportFile($sa->param); + break; + } + } + } + + /** + * Deletes the current report file + * + * @return void + */ + private function deleteReportFile(): void + { + try { + unlink($this->list[$this->index]); + } catch (\ErrorException $e) { + $error_message = "Error deleting file from directory {$this->path}"; + $this->logError($error_message); + throw new RuntimeException($error_message, -1, $e); + } + } + + /** + * Moves the current report file + * + * @param string $dir_name Directory name where to move the report file to + * + * @return void + */ + private function moveReportFile(string $dir_name): void + { + $fdir = $this->path . $dir_name; + if (!is_dir($fdir)) { + try { + mkdir($fdir); + } catch (\ErrorException $e) { + $e = new RuntimeException("Error creating directory {$fdir}/", -1, $e); + $this->logError(strval($e)); + throw $e; + } + try { + chmod($fdir, 0700); + } catch (\ErrorException $e) { + $this->logError(strval($e)); + } + } + $file = $this->list[$this->index]; + try { + rename($file, $fdir . '/' . basename($file)); + } catch (\ErrorException $e) { + $e = new RuntimeException("Error moving file to directory {$fdir}/", -1, $e); + $this->logError(strval($e)); + throw $e; + } + } +} diff --git a/root/opt/dmarc-srg/classes/Sources/MailboxSource.php b/root/opt/dmarc-srg/classes/Sources/MailboxSource.php new file mode 100644 index 0000000..60f807d --- /dev/null +++ b/root/opt/dmarc-srg/classes/Sources/MailboxSource.php @@ -0,0 +1,238 @@ +. + * + * ========================= + * + * This file contains the class MailboxSource + * + * @category API + * @package DmarcSrg + * @author Aleksey Andreev (liuch) + * @license https://www.gnu.org/licenses/gpl-3.0.html GNU/GPLv3 + */ + +namespace Liuch\DmarcSrg\Sources; + +use Liuch\DmarcSrg\ReportFile\ReportFile; +use Liuch\DmarcSrg\Exception\SoftException; +use Liuch\DmarcSrg\Exception\RuntimeException; + +/** + * This class is designed to process report files from an mail box. + */ +class MailboxSource extends Source +{ + private $list = null; + private $index = 0; + private $msg = null; + private $params = null; + + /** + * Sets parameters that difine the behavior of the source + * + * @param $params Key-value array + * 'when_done' => one or more rules to be executed after successful report processing + * (array|string) + * 'when_failed' => one or more rules to be executed after report processing fails + * (array|string) + * + * @return void + */ + public function setParams(array $params): void + { + $this->params = []; + $this->params['when_done'] = SourceAction::fromSetting( + $params['when_done'] ?? [], + 0, + 'mark_seen' + ); + $this->params['when_failed'] = SourceAction::fromSetting( + $params['when_failed'] ?? [], + 0, + 'move_to:failed' + ); + } + + /** + * Returns an instance of the ReportFile class for the current email message. + * + * @return ReportFile + */ + public function current(): object + { + $this->msg = $this->data->message($this->list[$this->index]); + try { + $this->msg->validate(); + } catch (SoftException $e) { + throw new SoftException('Incorrect message: ' . $e->getMessage(), $e->getCode()); + } catch (RuntimeException $e) { + throw new RuntimeException('Incorrect message', -1, $e); + } + $att = $this->msg->attachment(); + return ReportFile::fromStream($att->datastream(), $att->filename(), $att->mimeType()); + } + + /** + * Returns the index of the currect email message. + * + * @return int + */ + public function key(): int + { + return $this->index; + } + + /** + * Moves forward to the next email message + * + * @return void + */ + public function next(): void + { + $this->msg = null; + ++$this->index; + } + + /** + * Gets a list of unread messages and rewinds the position to the first email message. + * + * @return void + */ + public function rewind(): void + { + $this->msg = null; + $this->list = $this->data->sort(SORTDATE, 'UNSEEN', false); + $this->index = 0; + if (is_null($this->params)) { + $this->setParams([]); + } + } + + /** + * Checks if the current postion is valid + * + * @return bool + */ + public function valid(): bool + { + return isset($this->list[$this->index]); + } + + /** + * Processes the accepted email messages according to the settings + * + * @return void + */ + public function accepted(): void + { + if ($this->msg) { + $this->processMessageActions($this->params['when_done']); + } + } + + /** + * Processes the rejected email messages according to the settings + * + * @return void + */ + public function rejected(): void + { + $this->processMessageActions($this->params['when_failed']); + } + + /** + * Returns type of the source. + * + * @return int + */ + public function type(): int + { + return Source::SOURCE_MAILBOX; + } + + /** + * Returns the current email message. + * + * @return MailMessage|null + */ + public function mailMessage() + { + return $this->msg; + } + + /** + * Processes the current report message according to settings + * + * @param array $actions List of actions to apply to the message + * + * @return void + */ + private function processMessageActions(array &$actions): void + { + foreach ($actions as $sa) { + switch ($sa->type) { + case SourceAction::ACTION_SEEN: + $this->markMessageSeen(); + break; + case SourceAction::ACTION_MOVE: + $this->moveMessage($sa->param); + break; + case SourceAction::ACTION_DELETE: + $this->deleteMessage(); + break; + } + } + } + + /** + * Marks the current report message as seen + * + * @return void + */ + public function markMessageSeen(): void + { + $this->msg->setSeen(); + } + + /** + * Moves the current report message + * + * @param string $mbox_name Child mailbox name where to move the current message to. + * If the target mailbox does not exists, it will be created. + * + * @return void + */ + private function moveMessage(string $mbox_name): void + { + $this->data->ensureMailbox($mbox_name); + $this->data->moveMessage($this->list[$this->index], $mbox_name); + } + + /** + * Deletes the current report message + * + * @return void + */ + private function deleteMessage(): void + { + $this->data->deleteMessage($this->list[$this->index]); + } +} diff --git a/root/opt/dmarc-srg/classes/Sources/Source.php b/root/opt/dmarc-srg/classes/Sources/Source.php new file mode 100644 index 0000000..be94935 --- /dev/null +++ b/root/opt/dmarc-srg/classes/Sources/Source.php @@ -0,0 +1,115 @@ +. + * + * ========================= + * + * This file contains the class Source + * + * @category API + * @package DmarcSrg + * @author Aleksey Andreev (liuch) + * @license https://www.gnu.org/licenses/gpl-3.0.html GNU/GPLv3 + */ + +namespace Liuch\DmarcSrg\Sources; + +/** + * It's an abstract class for easy access to reports of a report source + */ +abstract class Source implements \Iterator +{ + public const SOURCE_UPLOADED_FILE = 1; + public const SOURCE_MAILBOX = 2; + public const SOURCE_DIRECTORY = 3; + + protected $data = null; + + /** + * Constructor + * + * @param mixed Data to reach report files + * + * @return void + */ + public function __construct($data) + { + $this->data = $data; + } + + /** + * Sets parameters that difine the behavior of the source + * + * @param $params Key-value array + * 'when_done' => one or more rules to be executed after successful report processing + * (array|string) + * 'when_failed' => one or more rules to be executed after report processing fails + * (array|string) + * + * @return void + */ + public function setParams(array $params): void + { + } + + /** + * Iterator interface methods + */ + abstract public function current(): object; + abstract public function key(): int; + abstract public function next(): void; + abstract public function rewind(): void; + abstract public function valid(): bool; + + /** + * Called when the current report has been successfully processed. + * + * @return void + */ + public function accepted(): void + { + } + + /** + * Called when the current report has been rejected. + * + * @return void + */ + public function rejected(): void + { + } + + /** + * Returns type of source, i.e. one of Source::SOURCE_* values + * + * @return int + */ + abstract public function type(): int; + + /** + * Returns the source itself that was passed to the constructor + * + * @return class + */ + public function container() + { + return $this->data; + } +} diff --git a/root/opt/dmarc-srg/classes/Sources/SourceAction.php b/root/opt/dmarc-srg/classes/Sources/SourceAction.php new file mode 100644 index 0000000..77c1c1d --- /dev/null +++ b/root/opt/dmarc-srg/classes/Sources/SourceAction.php @@ -0,0 +1,156 @@ +. + * + * ========================= + * + * This file contains the class SourceAction + * + * @category API + * @package DmarcSrg + * @author Aleksey Andreev (liuch) + * @license https://www.gnu.org/licenses/gpl-3.0.html GNU/GPLv3 + */ + +namespace Liuch\DmarcSrg\Sources; + +use Liuch\DmarcSrg\Exception\LogicException; + +/** + * It's a class for describing one action of source + */ +class SourceAction +{ + public const ACTION_SEEN = 1; + public const ACTION_MOVE = 2; + public const ACTION_DELETE = 3; + public const FLAG_BASENAME = 1; + + private $valid = false; + private $type = 0; + private $param = null; + + /** + * The constructor + * + * @param string $action Action name with parameter separated by colon + * Examples: 'move_to:failed', 'delete' + * + * @return void + */ + private function __construct(string $action) + { + if (($delim_offset = mb_strpos($action, ':')) === false) { + $name = $action; + $param = null; + } else { + $name = mb_substr($action, 0, $delim_offset); + $param = mb_substr($action, $delim_offset + 1); + } + switch ($name) { + case 'mark_seen': + $this->type = self::ACTION_SEEN; + if (!empty($param)) { + return; + } + break; + case 'move_to': + $this->type = self::ACTION_MOVE; + if (empty($param)) { + return; + } + break; + case 'delete': + $this->type = self::ACTION_DELETE; + if (!empty($param)) { + return; + } + break; + default: + return; + } + $this->param = $param; + $this->valid = true; + } + + /** + * The getter + * + * @param string $name Property name. Must be one of the following: 'type', 'param' + * + * @return mixed + */ + public function __get(string $name) + { + if (in_array($name, [ 'type', 'param' ])) { + return $this->$name; + } + throw new LogicException('Undefined property: ' . $name); + } + + /** + * Handles a setting, flags, and returns an array of SourceAction instances + * + * @param string|array $setting Setting from the conf.php + * @param int $flags Flags of extra checking the result + * @param string $default Action to add if the result array is empty + * + * @return array + */ + public static function fromSetting($setting, int $flags, string $default): array + { + if (gettype($setting) !== 'array') { + $setting = [ $setting ]; + } + $tmap = []; + $list = []; + foreach ($setting as $it) { + if (gettype($it) === 'string') { + $sa = new self($it); + if ($sa->valid && !isset($tmap[$sa->type])) { + if (($flags & self::FLAG_BASENAME) && !self::checkBasename($sa)) { + continue; + } + $list[] = $sa; + $tmap[$sa->type] = true; + } + } + } + if (count($list) === 0) { + $sa = new self($default); + if ($sa->valid) { + $list[] = $sa; + } + } + return $list; + } + + /** + * Checks if the param is just a directory name without a path + * + * @param self $sa + * + * @return bool + */ + private static function checkBasename($sa): bool + { + return ($sa->type !== self::ACTION_MOVE || basename($sa->param) === $sa->param); + } +} diff --git a/root/opt/dmarc-srg/classes/Sources/UploadedFilesSource.php b/root/opt/dmarc-srg/classes/Sources/UploadedFilesSource.php new file mode 100644 index 0000000..fe89b53 --- /dev/null +++ b/root/opt/dmarc-srg/classes/Sources/UploadedFilesSource.php @@ -0,0 +1,113 @@ +. + * + * ========================= + * + * This file contains the class UploadedFilesSource + * + * @category API + * @package DmarcSrg + * @author Aleksey Andreev (liuch) + * @license https://www.gnu.org/licenses/gpl-3.0.html GNU/GPLv3 + */ + +namespace Liuch\DmarcSrg\Sources; + +use Liuch\DmarcSrg\ReportFile\ReportFile; +use Liuch\DmarcSrg\Exception\SoftException; + +/** + * This class is designed to process report files from uploaded files. + */ +class UploadedFilesSource extends Source +{ + private $index = 0; + + /** + * Returns an instance of the ReportFile class for the current file. + * + * @return ReportFile + */ + public function current(): object + { + if ($this->data['error'][$this->index] !== UPLOAD_ERR_OK) { + throw new SoftException('Failed to upload the report file'); + } + + $realfname = $this->data['name'][$this->index]; + $tempfname = $this->data['tmp_name'][$this->index]; + if (!is_uploaded_file($tempfname)) { + throw new SoftException('Possible file upload attack'); + } + + return ReportFile::fromFile($tempfname, $realfname, false); + } + + /** + * Returns the index of the currect file. + * + * @return int + */ + public function key(): int + { + return $this->index; + } + + /** + * Moves forward to the next file. + * + * @return void + */ + public function next(): void + { + ++$this->index; + } + + /** + * Rewinds the position to the first file. + * + * @return void + */ + public function rewind(): void + { + $this->index = 0; + } + + /** + * Checks if the current postion is valid + * + * @return bool + */ + public function valid(): bool + { + return isset($this->data['name'][$this->index]); + } + + /** + * Returns type of the source. + * + * @return int + */ + public function type(): int + { + return Source::SOURCE_UPLOADED_FILE; + } +} diff --git a/root/opt/dmarc-srg/classes/Statistics.php b/root/opt/dmarc-srg/classes/Statistics.php new file mode 100644 index 0000000..a28633b --- /dev/null +++ b/root/opt/dmarc-srg/classes/Statistics.php @@ -0,0 +1,169 @@ +. + * + * ========================= + * + * This file contains the class Statistics + * + * @category API + * @package DmarcSrg + * @author Aleksey Andreev (liuch) + * @license https://www.gnu.org/licenses/gpl-3.0.html GNU/GPLv3 + */ + +namespace Liuch\DmarcSrg; + +use Liuch\DmarcSrg\DateTime; + +/** + * This class is designed to get statistics on DMARC reports of a specified period + */ +class Statistics +{ + private $db = null; + private $domain = null; + private $range = [ + 'date1' => null, + 'date2' => null + ]; + + /** + * The constructor of the class, it only uses in static methods of this class + * + * @param Domain|null $domain The domain for which you need to get statistics, null for all the domains. + * @param DatabaseController $db The database controller + * + * @return void + */ + private function __construct($domain, $db) + { + $this->domain = $domain; + $this->db = $db ?? Core::instance()->database(); + } + + /** + * Returns an instance of the class for the period from $date1 to $date2 + * + * @param Domain|null $domain See the constructor for the details + * @param DateTime $date1 The date you need statistics from + * @param DateTime $date2 The date you need statistics to (not included) + * @param DatabaseController $db The database controller + * + * @return Statistics Instance of the class + */ + public static function fromTo($domain, $date1, $date2, $db = null) + { + $r = new Statistics($domain, $db); + $r->range['date1'] = $date1; + $r->range['date2'] = $date2; + return $r; + } + + /** + * Returns an instance of the class for the last week + * + * @param Domain|null $domain See the constructor for the details + * @param DatabaseController $db The database controller + * + * @return Statistics Instance of the class + */ + public static function lastWeek($domain, $db = null) + { + $r = new Statistics($domain, $db); + $r->range['date1'] = new DateTime('monday last week'); + $r->range['date2'] = (clone $r->range['date1'])->add(new \DateInterval('P7D')); + return $r; + } + + /** + * Returns an instance of the class for the last month + * + * @param Domain|null $domain See the construct for the details + * @param DatabaseController $db The database controller + * + * @return Statistics Instance of the class + */ + public static function lastMonth($domain, $db = null) + { + $r = new Statistics($domain, $db); + $r->range['date1'] = new DateTime('midnight first day of last month'); + $r->range['date2'] = new DateTime('midnight first day of this month'); + return $r; + } + + /** + * Returns an instance of the class for the last N days + * + * @param Domain|null $domain See the construct for the details + * @param int $ndays Number of days + * @param DatabaseController $db The database controller + * + * @return Statistics Instance of the class + */ + public static function lastNDays($domain, int $ndays, $db = null) + { + $r = new Statistics($domain, $db); + $r->range['date2'] = new DateTime('midnight'); + $r->range['date1'] = (clone $r->range['date2'])->sub(new \DateInterval("P{$ndays}D")); + return $r; + } + + /** + * Returns the date from and the date to in an array + * + * @return array - The range of the statistics + */ + public function range(): array + { + return [ (clone $this->range['date1']), (clone $this->range['date2'])->sub(new \DateInterval('PT1S')) ]; + } + + /** + * Returns summary information for e-mail messages as an array + * + * @return array Array with summary information + */ + public function summary(): array + { + return $this->db->getMapper('statistics')->summary($this->domain, $this->range); + } + + /** + * Returns a list of ip-addresses from which the e-mail messages were received, with some statistics for each one + * + * @return array A list of ip-addresses with fields + * `ip`, `emails`, `dkim_aligned`, `spf_aligned` + */ + public function ips(): array + { + return $this->db->getMapper('statistics')->ips($this->domain, $this->range); + } + + /** + * Returns a list of organizations that sent the reports with some statistics for each one + * + * @return array List of organizations with fields `name`, `reports`, `emails` + */ + public function organizations(): array + { + return $this->db->getMapper('statistics')->organizations($this->domain, $this->range); + } +} diff --git a/root/opt/dmarc-srg/classes/Status.php b/root/opt/dmarc-srg/classes/Status.php new file mode 100644 index 0000000..b969703 --- /dev/null +++ b/root/opt/dmarc-srg/classes/Status.php @@ -0,0 +1,109 @@ +. + * + * ========================= + * + * This file contains the class Status + * + * @category API + * @package DmarcSrg + * @author Aleksey Andreev (liuch) + * @license https://www.gnu.org/licenses/gpl-3.0.html GNU/GPLv3 + */ + +namespace Liuch\DmarcSrg; + +use Liuch\DmarcSrg\Settings\SettingsList; + +/** + * This class is designed to get the general state of DmarcSrg + */ +class Status +{ + private $core = null; + + /** + * The constructor + * + * @param Core $core + */ + public function __construct(object $core) + { + $this->core = $core; + } + + /** + * Returns general state of DmarcSrg + * + * This method returns an array with general state of the modules Admin, Auth + * and statistics for the last N days. + * + * @return array + */ + public function get(): array + { + $adm_res = $this->core->admin()->state(); + $res = [ + 'state' => $adm_res['state'] + ]; + + if (isset($adm_res['error_code'])) { + $res['error_code'] = $adm_res['error_code']; + if (isset($adm_res['message'])) { + $res['message'] = $adm_res['message']; + } + if (isset($adm_res['debug_info'])) { + $res['debug_info'] = $adm_res['debug_info']; + } + } elseif (isset($adm_res['database']['error_code'])) { + $res['error_code'] = $adm_res['database']['error_code']; + if (isset($adm_res['database']['message'])) { + $res['message'] = $adm_res['database']['message']; + } + if (isset($adm_res['database']['debug_info'])) { + $res['debug_info'] = $adm_res['database']['debug_info']; + } + } elseif (isset($adm_res['message'])) { + $res['message'] = $adm_res['message']; + } elseif (isset($adm_res['database']['message'])) { + $res['message'] = $adm_res['database']['message']; + } + + if (!isset($res['error_code']) || $res['error_code'] === 0) { + $days = SettingsList::getSettingByName('status.emails-for-last-n-days')->value(); + $stat = Statistics::lastNDays(null, $days); + $res['emails'] = $stat->summary()['emails']; + $res['emails']['days'] = $days; + } + + $auth = null; + if ($this->core->auth()->isEnabled()) { + $auth = $this->core->userId() !== false ? 'yes' : 'no'; + } else { + $auth = 'disabled'; + } + $res['authenticated'] = $auth; + $res['version'] = Core::APP_VERSION; + $res['php_version'] = phpversion(); + + return $res; + } +} diff --git a/root/opt/dmarc-srg/config/conf.sample.php b/root/opt/dmarc-srg/config/conf.sample.php new file mode 100644 index 0000000..955b6a7 --- /dev/null +++ b/root/opt/dmarc-srg/config/conf.sample.php @@ -0,0 +1,181 @@ + 'localhost', + 'type' => 'mysql', + 'name' => 'dmarc', + 'user' => 'dmarc_user', + 'password' => 'password', + /** + * This pamemeter can be usefull if the database is shared with other applications + * to avoid conflicting table names. You do not need to specify this parameter + * if you use a dedicated database. + * Example value: dmarc_ + * Caution! Do not use an empty string as the table prefix value if you share the database with + * other applications. + * Caution! Do not change this parameter if you have already created the tables in the database + * because the tables will not be renamed automatically. + */ + 'table_prefix' => '' +]; + +/** + * It is only required if you want to get reports from a mailbox automatically. + * In order to collect reports from several mailboxes, you should put each + * mailbox settings in an array. + */ +$mailboxes = [ + // Just for displaying in the web-admin and utilities. Not necessary. + 'name' => 'Dmarc-Rua', + // Host of the email server. You can specify a port separated by a colon. + 'host' => 'yourdomain.net', + // Connection encryption method. The valid values are: + // 'none' - without encryption (strongly not recommend). + // 'ssl' - SSL/TLS on a separate port, for IMAP it is usually port 993. Default value. + // 'starttls' - STARTTLS method, usually on the standard IMAP port 143. + 'encryption' => 'ssl', + // Set true if you want to connect to the IMAP server without certificate validation + 'novalidate-cert' => false, + // Mailbox user name. + 'username' => 'dmarc-rua@yourdomain.net', + // Mailbox password. + 'password' => 'password', + // Mailbox name + 'mailbox' => 'INBOX', + // IMAP authorization methods to be excluded. + // For example: 'auth_exclude' => [ 'GSSAPI', 'NTLM' ] + 'auth_exclude' => [] +]; + +/** + * It is only required if you want to get reports from a server directory. + * In order to collect report from several directories, you should put each + * directory settings in an array. Processing of the directories is not recursive. + * It is recommended to use atomic methods for adding files to these directories. + * Attention! All successfully processed files will be deleted from the directories + * and all others will be moved to subdirectory `failed`, that will be created + * automatically if it does not exist. + */ +//$directories = [ +// // Just for displaying in the web-admin and utilities. Not necessary. +// 'name' => 'Rua-Dir', +// // The directory location +// 'location' => '/var/spool/dmarc-srg/rua' +//]; + +$admin = [ + // Set this value to null or remove this parameter to disable authentication + // Note: The authentication always fails with an empty string password. Change it if you want to use the web ui. + 'password' => '', +]; + +// +$fetcher = [ + 'mailboxes' => [ + // How many messages will be fetched at once maximum. 0 to disable any limiting. + 'messages_maximum' => 10, + + /** + * What to do with the email message when a report from it has been successfully processed + * and saved to the database. The following actions are available: + * 'mark_seen' - Mark the email message as seen. + * 'delete' - Delete email message from the mailbox. + * 'move_to:dir' - Move the email message to child mailbox with name 'dir'. + * The child mailbox will be created it doesn't exist. + * Note: You can specify multiple actions by putting them in an array. For example: + * 'when_done' => [ 'mark_seen', 'move_to:done' ], + * The default value is 'mark_seen'. + */ + 'when_done' => 'mark_seen', + + /** + * What to do with the email message when a report from it has been rejected. + * The same actions are available as for the when_done. + * The default value is 'move_to:failed'. + */ + 'when_failed' => 'move_to:failed' + ], + 'directories' => [ + // How many report files will be processed at once maximum. 0 to disable any limiting. + 'files_maximum' => 50, + + /** + * What to do with the report file when it has been successfully processed. + * The folowing actions are available: 'delete', 'move_to'. See the when_done for mailboxes + * for detailed description. + * The default value is 'delete'. + */ + 'when_done' => 'delete', + + /** + * What to do with the report file when it has been rejected. + * The same actions are available as for the when_done. + * The default value is 'move_to:failed'. + * + */ + 'when_failed' => 'move_to:failed' + ], + /** + * Domains matching this regular expression will be automatically added to the database from processed + * reports. This option does not affect domains that have already been added to the database. + * It is not necessary to use this option in most cases. The option can be useful if you have many domains + * or subdomains and do not want to add them manually in the GUI. An empty string or null doesn't match any domain. + * Note: The first domain from the first report will be automatically added anyway. + * Some examples: + * '.+\\.example\\.net$' - Matches any subdomain of the domain example.net + * '^mymail[0-9]+\\.net$' - Matches the domains mymail01.net, mymail02.net, mymail99999.net, etc. + */ + 'allowed_domains' => '' +]; + +// Settings for sending summary reports if it is necessary. +// It uses in utils/summary_report.php +$mailer = [ + 'from' => 'postmaster@yourdomain.net', + 'default' => 'user@yourdomain.net' +]; + +// +$cleaner = [ + // It is used in utils/mailbox_cleaner.php + 'mailboxes' => [ + // Will remove messages older than (days) + 'days_old' => 30, + + // How many messages will be removed at once maximum. + 'delete_maximum' => 50, + + // How many messages must be leave in the mailbox minimum. + 'leave_minimum' => 100, + + /** + * Status of emails to be deleted for mailboxes where successfully processed emails and rejected emails + * are located. If it is the same mailbox, then the more forgiving criteria of the two will be used. + * The valid values are: + * 'none' - no action with it. The default value for rejected mail messages. + * 'seen' - only seen messages will be removed. The default value for successully processed mail messages. + * 'any' - all messages will be removed. + * Note: In the mailbox, where letters with incoming DMARC reports initially come in, unseen messages + * will not be deleted in any case. + */ + 'done' => 'seen', + 'failed' => 'none' + ], + + // It is used in utils/reports_cleaner.php + 'reports' => [ + 'days_old' => 30, + 'delete_maximum' => 50, + 'leave_minimum' => 100 + ], + + // It is used in utils/reportlog_cleaner.php + 'reportlog' => [ + 'days_old' => 30, + 'delete_maximum' => 50, + 'leave_minimum' => 100 + ] +]; diff --git a/root/opt/dmarc-srg/css/main.css b/root/opt/dmarc-srg/css/main.css new file mode 100644 index 0000000..9e81403 --- /dev/null +++ b/root/opt/dmarc-srg/css/main.css @@ -0,0 +1,727 @@ +@media (prefers-color-scheme: light) { + :root { + --color-fg-default: #000; + --color-fg-disabled: #666; + --color-fg-muted: #666; + --color-fg-accent: #0969da; + --color-fg-custom: #666; + --color-fg-menu: #333; + --color-bg-default: #fff; + --color-bg-header: #eee; + --color-bg-title: #ddd; + --color-bg-dialog: #fff; + --color-bg-selected: #eef; + --color-bg-focused: #ccf; + --color-bg-button: #f0f0f0; + --color-bg-dbutton: #f4f4f4; + --color-bg-hover: #d8d8d8; + --color-bg-input: #fff; + --color-br-default: #ccc; + --color-br-weak: #eee; + --color-br-strong: #777; + --color-br-focused: #66f; + --color-br-input: rgba(0,0,0,0.5); + --color-br-disabled: #e0e0e0; + --color-br-menu: #ccc; + --color-br-submenu: #eee; + --color-dg-wait: #080; + --color-st-txtblue: #00f; + --color-st-txtgreen: #080; + --color-st-txtred: #f00; + --color-nt-error: #f88; + --color-nt-warning: #ff8; + --color-nt-inform: #8f8; + --color-sh-default: rgba(0,0,0,0.5); + --color-lk-default: #00e; + --color-lk-visited: #551a8b; + } +} +@media (prefers-color-scheme: dark) { + :root { + --color-fg-default: #c9d1d9; + --color-fg-disabled: #484f58; + --color-fg-muted: #8b949e; + --color-fg-accent: #2f81f7; + --color-fg-custom: #aaadbb; + --color-fg-menu: #9ca6b1; + --color-bg-default: #0d1117; + --color-bg-header: #161b22; + --color-bg-title: #262b32; + --color-bg-dialog: #111a24; + --color-bg-selected: #161b22; + --color-bg-focused: #161b33; + --color-bg-button: #21262d; + --color-bg-dbutton: #21262d; + --color-bg-hover: #30363d; + --color-bg-input: #0d1117; + --color-br-default: #30363d; + --color-br-weak: #21262b; + --color-br-strong: #40464d; + --color-br-focused: #f78166; + --color-br-input: rgba(240,246,252,0.1); + --color-br-disabled: #30363d; + --color-br-menu: #505860; + --color-br-submenu: #30363d; + --color-dg-wait: #c58208; + --color-st-txtblue: #4040ff; + --color-st-txtgreen: #009300; + --color-st-txtred: #f22; + --color-nt-error: #da3633; + --color-nt-warning: #e7a100; + --color-nt-inform: #3fb950; + --color-sh-default: rgba(255,255,255,0.3); + --color-lk-default: #0050c0; + --color-lk-visited: #606090; + } +} + +html, body, div, span, h1, h2, h3, h4, h5, ul, li, fieldset, form, label, legend, +button, table, caption, tbody, thead, tr, th, td { + margin: 0; + padding: 0; + border: 0; + outline: 0; + font-size: 100%; +} +html { + color: var(--color-fg-default); + background-color: var(--color-bg-default); +} +body { + margin: 0.5em; +} +button, select, textarea, input { + padding: 0.3em .5em; + color: var(--color-fg-default); + border: .07em solid var(--color-br-input); + border-radius: 0.4rem; +} +button, select { + background-color: var(--color-bg-button); +} +button:hover, select:hover { + background-color: var(--color-bg-hover); +} +button:disabled, select:disabled{ + background-color: var(--color-bg-dbutton); +} +button:disabled, select:disabled, textarea:disabled, input:disabled { + color: var(--color-fg-disabled); + border-color: var(--color-br-disabled); +} +a:focus-visible, input:focus-visible, select:focus-visible, textarea:focus-visible, button:focus-visible { + outline: 2px solid var(--color-fg-accent); + outline-offset: -2px; +} +textarea, input { + background-color: var(--color-bg-input); +} +a { + color: var(--color-lk-default); +} +a:visited { + color: var(--color-lk-visited); +} +h1 { + font-size: 1.4em; + margin: .35rem; + display: inline-block; +} +h2 { + font-size: 1.4em; + margin: 1em 0 .2em; +} +h3 { + font-size: 1.3em; + margin: 1em 0 .2em; +} +h4, h5 { + margin: 0 0 0.5rem 0; + text-transform: uppercase; +} +h4:not(:first-child), .info-block { + margin-top: 1rem; +} +fieldset { + display: block; + margin-bottom: 0.7em; + padding: 0.7em; + border: 0.07rem solid var(--color-br-strong); +} +legend { + margin: 0; + padding: 0 0.2em; +} +hr { + border: 0; + border-top: 0.07em solid var(--color-br-menu); +} +textarea.description { + height: 7em; +} +#stat-block ul { + display: flex; + justify-content: center; + column-gap: 1em; + margin: .2em 0; + padding: .1em; + list-style-type: none; + border-top: 0.07em solid var(--color-br-default); + border-bottom: 0.07em solid var(--color-br-default); +} +#stat-block .stat-msg { + display: none; +} +.main-table .table-body .table-cell { + border-top: 0.1em solid var(--color-br-weak); +} +.main-table .table-body .table-row.selected { + background-color: var(--color-bg-selected); + color: var(--color-fg-default); +} +.main-table.focused .table-body .table-row.selected { + background-color: var(--color-bg-focused); +} +.domains.table .table-cell.fqdn { + overflow-wrap: anywhere; +} +.unseen, .custom-value .setting-value { + font-weight: bold; + color: var(--color-fg-custom); +} +@media screen and (min-width:30em) { + h1 { + font-size: 2em; + margin: 0 .5rem; + } +} +@media screen and (min-width:35em) { + textarea.description { + min-width: 25em; + } + input[type=number] { + width: 4em; + } +} +@media screen and (min-width:46em) { + #stat-block { + float: right; + margin-bottom: 0.5rem; + } + #stat-block ul { + display: block; + margin: 0; + padding: 0; + border: none; + } + #stat-block li div { + display: inline-grid; + margin: 0.5em; + width: 6em; + height: 6em; + text-align: center; + font-size: 0.7em; + border: 0.07em solid var(--color-br-strong); + border-radius: 0.4em; + } + #stat-block .stat-msg { + display: inline; + margin: 0 1px; + } + .stat-val { + display: block; + height: 50%; + line-height: 180%; + font-size: 1.8em; + font-weight: bold; + } +} +@media screen and (max-width:40em) { + .root-list-block .db-type, .list-container .mailbox-host, .list-container .dbtable-size, .small-cards .table-header { + display: none; + } + .domains.table, .domains .table-header, .domains .table-body, .domains .table-cell, + .small-cards.table, .small-cards .table-body, .small-cards .table-row { + display: block; + } + .small-cards .table-cell { + display: flow-root; + } + .domains .table-row { + display: grid; + grid-template-columns: 2em 1fr 1fr; + } + .domains .table-cell.descr { + grid-column: 1 / 4; + grid-row: 2; + border: none; + text-align: center; + border-top: none; + } + .domains .table-body .table-cell.descr { + border-left: 0.2em solid #0000; + } + .domains .table-body .table-row.focused .table-cell.descr, .small-cards .table-body .table-row.focused { + border-left: 0.2em solid var(--color-br-focused); + } + .small-cards .table-body .table-row { + border-left: 0.2em solid #0000; + } + .small-cards .table-body .table-cell { + text-align: right; + max-width: none; + margin: 0 1em; + } + .small-cards .table-body .table-cell > div { + margin-left: auto; + } + .small-cards .table-body .table-cell::before { + content: attr(data-label); + float: left; + text-align: left; + font-weight: bold; + font-style: normal; + padding-right: .5em; + } + .small-cards .table-body .table-cell:first-child { + padding-top: 1em; + } + .small-cards .table-body .table-cell:last-child { + border-bottom: 0.13em solid var(--color-br-weak); + } + .small-cards .table-body .table-row .table-cell { + border-left: none !important; + } + .domains .table-body .table-row.selected, .domains.focused .table-body .table-row.selected, + .small-cards .table-body .table-row.selected, .small-cards.focused .table-body .table-row.selected { + background-color: unset; + } + .small-cards .table-row.colspanned .table-cell { + text-align: center; + border: none !important; + } + .custom-value .setting-value { + font-weight: normal; + } +} +@media screen and (max-width:60em) { + .report-list .table-cell.report-id { + display: none; + } +} +.bottom-border { + border-bottom: 0.07rem solid var(--color-br-strong); +} +.popup-menu ul { + display: block; + margin: 0; + padding: 0; + list-style-type: none; +} +#stat-block li { + margin: 0; + padding: 0; + display: inline-flex; +} +.disabled { + color: #888; + cursor: default; + pointer-events: none; +} +.round-border { + border: 0.07em solid var(--color-br-strong); + border-radius: 0.4em; +} +.wait-message { + margin: 0.3em; +} +.panel-container .wait-message, .panel-container .error-message { + margin: 1em; +} +.dialog .wait-message { + color: var(--color-dg-wait); + text-align: center; +} +.dialog .error-message { + text-align: center; +} +.hidden { + display: none !important; +} +#main-block { + clear: both; +} +.error-message { + color: var(--color-st-txtred); + margin: 0.3rem; +} +.main-table-container { + position: fixed; + overflow-x: hidden; + overflow-y: auto; + top: 6rem; + left: 0.5rem; + right: 0.5rem; + bottom: 0.5rem; + border: 0.1rem solid var(--color-br-weak); + border-radius: 0.4rem; +} +.main-table { + color: var(--color-fg-muted); + text-align: left; + border-spacing: 0; + width: 100%; +} +.subtable { + font-size: 90%; + border: 0.1rem solid var(--color-br-weak); + border-radius: 0.4rem; +} +.main-table .table-header { + position: sticky; + top: 0; +} +.main-table .table-header .table-cell { + position: relative; + background-color: var(--color-bg-header); +} +.main-table .table-cell { + padding: .3em 1em; +} +.main-table .table-body .table-row { + cursor: pointer; +} +.main-table .table-body .table-row:not(.colspanned):hover, .main-table .table-row.virtual-item:hover .table-cell { + background-color: var(--color-bg-selected); +} +.focused { + outline: none; +} +.main-table .table-body .table-cell:first-child { + border-left: 0.2em solid #0000; +} +.main-table .table-body .table-row.focused .table-cell:first-child { + border-left: 0.2em solid var(--color-br-focused); +} +.summary-report { + overflow-y: auto; +} +.report-table { + font-size: 90%; + border-spacing: 0; + border-collapse: collapse; +} +.custom-value .setting-value, .report-table caption { + font-style: italic; +} +.report-table th { + min-width: 4em; + padding: .3em .6em; +} +.report-table td { + padding: .3em; + text-align: right; +} +.report-table td:first-child { + text-align: left; + padding-right: 1em; +} +.report-table td, .report-table th { + border: 0.1rem solid var(--color-br-default); +} +.state-red .state-text { + color: var(--color-st-txtred); +} +.state-red .state-background { + background-color: #f00; +} +.state-green .state-text { + color: var(--color-st-txtgreen); +} +.state-green .state-background { + background-color: #080; +} +.state-yellow .state-text { + color: #f80; +} +.state-yellow .state-background { + background-color: #f80; +} +.state-gray .state-text { + color: #888; +} +.state-gray .state-background { + background-color: #888; +} +.state-blue .state-text { + color: var(--color-st-txtblue); +} +.state-blue .state-background { + background-color: #00f; +} +.panel-container { + margin: 0.5rem 0; + padding: 1rem; +} +.block-item-column { + display: flex; + margin: .2rem 0; +} +.block-item-column .value { + margin-left: 0.5em; +} +.root-list-block, .block-list-item { + display: flex; + gap: .5rem; + align-items: center; + padding: 0 .5rem; +} +.root-list-block { + min-height: 4rem; + font-size: 1.3rem; + cursor: pointer; +} +.block-list-item { + height: 3.25rem; + background-color: var(--color-bg-header); + margin: 0 0 1rem 0; +} +.list-container { + margin: 1rem 0.8rem 0 1.5rem; +} +.title-item-wrap, .db-type, .db-location, .dbtable-records, .dbtable-size, .mailbox-host, .mailbox-location { + flex: 1; +} +.message-item, .directory-location { + flex: 2; +} +.status-indicator { + width: 1rem; + min-width: 1rem; + margin: auto 0.5rem auto 0; + height: 1rem; + border-radius: 50%; + background: radial-gradient(circle farthest-corner at 35% 35%, rgba(255, 255, 255, 0.8), rgba(255, 255, 255, 0)); +} +.root-list-block .status-indicator { + width: 1.2rem; + height: 1.2rem; +} +.db-menu-button { + position: relative; + width: 1.7em; +} +.db-menu-button span[role="button"] { + font-weight: bold; + color: #888; + user-select: none; +} +.db-menu-button>div>span:hover { + color: #00f; +} +.source-check-button { + margin-right: 0.7em; +} +.popup-menu { + position: absolute; + top: 130%; + left: -5.3em; + width: 7em; + text-align: center; + background-color: var(--color-bg-default); +} +.popup-menu::after { + content: ""; + display: block; + position: absolute; + top: -0.3em; + bottom: auto; + right: auto; + left: 5.4em; + width: 0; + border-width: 0 0.4em 0.4em; + border-style: solid; + border-color: var(--color-bg-default) transparent; +} +.popup-menu::before { + content: ""; + display: block; + position: absolute; + top: -0.4em; + bottom: auto; + right: auto; + left: 5.4em; + width: 0; + border-width: 0 0.4em 0.4em; + border-style: solid; + border-color: var(--color-br-strong) transparent; +} +.popup-menu li { + margin: 0.2em 0 0.2em 0; +} +.popup-menu li:hover { + color: #00f; +} +.report-result { + display: inline-block; + border-color: var(--color-br-strong); + border-style: solid; + border-width: 0.07em; + border-radius: 0.4em; + padding: 0.2em; + margin: 0 0.2em 0 0.2em; +} +.main-table .report-result { + font-size: 75%; +} +.report-result-pass { + color: var(--color-st-txtgreen); +} +.report-result-unknown { + color: #888; +} +.report-result-fail { + color: var(--color-st-txtred); +} +.report-modal { + position: fixed; + top: 0; + left: 0; + width: 100%; + height: 100%; + margin: 0; + padding: 0; + background-color: var(--color-bg-default); + text-align: center; + transition: all 600ms cubic-bezier(0.86, 0, 0.07, 1); + overflow: auto; +} +.report-modal > .report-header { + position: sticky; + top: 0; + padding: 1rem; + cursor: pointer; + border-bottom: solid 0.1rem var(--color-br-default); + background-color: var(--color-bg-title); +} +.report-modal > .report-header > .header-text { + padding: 0.5rem; + cursor: auto; +} +.report-record > .header { + padding: 0.4em 0; + border-bottom: solid 0.1rem var(--color-br-default); + border-radius: 0.3em 0.3em 0 0; + background-color: var(--color-bg-header); +} +.report-modal > .body { + padding: 1rem; +} +.report-modal.report-hidden { + top: 100%; +} +.report-modal .close-btn { + position: relative; + display: inline-block; + padding: 0.7em 1.5em; + color: var(--color-fg-default); + background-color: var(--color-bg-button); + border: solid 0.07rem #888; + border-radius: 1.8em; + cursor: pointer; + transition: all .4s ease; +} +.report-modal .content { + width: 50rem; + max-width: 100%; + margin: 0 auto; +} +.report-modal .close-btn:hover { + box-shadow: 0 3px 15px var(--color-sh-default); +} +.report-records { + margin-top: 1rem; + padding-top: 1rem; + border-top: solid 0.1rem var(--color-br-default); +} +.report-record { + margin: 0 0 1rem 0; + border-color: var(--color-br-default); +} +.report-item { + display: inline-flex; + width: 98%; + padding: .3em 0; +} +.report-record .report-item { + min-height: 1.9em; +} +.report-record .report-item:not(:last-child) { + border-bottom: 0.1em solid var(--color-br-weak); +} +.report-item .title { + min-width: 30%; +} +.value.rows { + display: flex; + flex-direction: column; + row-gap: .3em; +} +.report-item .title, .report-item .value { + text-align: left; + margin: auto 0; +} +.table-cell.report-id, .table-cell.setting-value { + max-width: 15em; + overflow: hidden; + text-overflow: ellipsis; + white-space: nowrap; +} +.options-button { + color: #888; + font-size: 80%; + margin-left: 0.3em; + cursor: pointer; +} +button.options-button { + color: inherit; + margin-left: 1em; +} +.options-button:hover, .options-button.active { + color: #080; +} +.options-block { + display: flex; + align-items: center; +} +.buttons-block { + display: flex; + gap: .5em; + margin-top: .5em; +} +.table-cell.cell-status { + width: 1em; +} +.virtual-item, .nodata { + color: #888; + font-style: italic; +} +.left-titled { + display: grid; + grid-template-columns: auto 1fr; + row-gap: .3em; + column-gap: 1em; + align-items: center; +} +.vertical-content { + display: flex; + flex-direction: column; + gap: 1em; +} +.vertical-content > * { + margin-top: 0; + margin-bottom: 0; +} +.about .vertical-content { + max-width: 30em; +} diff --git a/root/opt/dmarc-srg/css/mainmenu.css b/root/opt/dmarc-srg/css/mainmenu.css new file mode 100644 index 0000000..8f1b960 --- /dev/null +++ b/root/opt/dmarc-srg/css/mainmenu.css @@ -0,0 +1,138 @@ +#main-menu-button { + float: left; + display: block; + width: 25px; + height: 22px; + margin: 0.2rem; + background-color: var(--color-bg-default); +} +#main-menu-toggle { + display: none; +} +#main-menu-button .button-decor, #main-menu-button .button-decor::after, #main-menu-button .button-decor::before { + width: 25px; + height: 4px; + background-color: #666; + border-radius: 3px; + border-width: 0; + backface-visibility: hidden; + transition: all 600ms cubic-bezier(0.86, 0, 0.07, 1); + z-index: 2; +} +#main-menu-button .button-decor::after, #main-menu-button .button-decor::before { + content: ""; + position: absolute; + left: 0; +} +#main-menu-button .button-decor { + position: relative; + top: 4px; +} +#main-menu-button .button-decor::after { + top: 18px; +} +#main-menu-button .button-decor::before { + top: 9px; +} +#main-menu-button .toggle-button { + display: block; + position: relative; + top: -10%; + left: -10%; + width: 120%; + height: 120%; + cursor: pointer; + z-index: 3; +} +#main-menu-toggle:checked ~ .button-decor { + top: 13px; + transform: rotate(45deg); +} +#main-menu-toggle:checked ~ .button-decor::after { + top: 0; + transform: rotate(90deg); +} +#main-menu-toggle:checked ~ .button-decor::before { + top: 0; + transform: rotate(0); +} +.menu-box { + display: block; + position: fixed; + visibility: hidden; + top: 0; + left: -100%; + bottom: 0; + margin: 0; + min-width: 16rem; + padding: 3rem 0; + overflow: auto; + list-style: none; + background-color: var(--color-bg-header); + box-shadow: 3px 0px 6px var(--color-sh-default); + transition: all 600ms cubic-bezier(0.86, 0, 0.07, 1); + z-index: 1; +} +.menu-box ul { + list-style: none; + padding: 0; +} +.menu-box > li { + border-top: 1px solid var(--color-br-menu); +} +.menu-box > li:last-child { + border-bottom: 1px solid var(--color-br-menu); +} +.menu-box li li { + background-color: var(--color-bg-default); + border-bottom: 1px solid var(--color-br-submenu); +} +.menu-box li a, .menu-box li span { + display: block; + padding: 0.5rem 1.5rem; + color: var(--color-fg-menu); + font-size: 125%; + text-decoration: none; + cursor: pointer; +} +.menu-box a:hover { + color: #fff; + background-color: #c45; +} +#main-menu-toggle:checked ~ .menu-box { + visibility: visible; + left: 0; +} +.menu-box li span::after { + content: ""; + width: 10px; + height: 10px; + margin-top: 9px; + border-top: 3px solid #444; + border-right: 3px solid #444; + float: right; + border-top-right-radius: 3px; + transform: rotate(315deg); +} +.menu-box li.closed span::after { + margin: 3px; + transform: rotate(135deg); +} +.menu-box .closed .submenu { + display: none; +} +.menu-box .about { + position: absolute; + top: 0; + right: 0; + font-size: 75%; + border: 0; +} +.menu-box .about a { + padding: .95rem; + text-decoration: underline; +} +.submenu .selected { + border-left: 0.2em solid #c45; +} + diff --git a/root/opt/dmarc-srg/css/notification.css b/root/opt/dmarc-srg/css/notification.css new file mode 100644 index 0000000..a4aec59 --- /dev/null +++ b/root/opt/dmarc-srg/css/notification.css @@ -0,0 +1,65 @@ +#notifications-block { + position: fixed; + top: 0; + right: 0; + width: 100%; + z-index: 200; +} +.notification { + overflow: hidden; + color: #000; + font-size: 0.9rem; + opacity: 0.9; + background-clip: padding-box; + border: 1px solid rgba(0, 0, 0, 1); + box-shadow: 0 0.25rem 0.75rem var(--color-sh-default); + position: relative; + padding: 0.75rem 2rem 0.75rem 0.75rem; + overflow-wrap: break-word; + word-break: normal; +} +.notification:not(:last-child) { + margin-bottom: 0.2rem; +} +@media screen and (min-width:20em) { + #notifications-block { + top: 2rem; + right: 1em; + width: 15em; + } + .notification { + border-radius: 0.25rem; + } + .notification:not(:last-child) { + margin-bottom: 0.5rem; + } +} +.notif-close { + position: absolute; + top: 0; + right: 0.3rem; + padding: 0; + color: #000; + border: 0; + float: right; + cursor: pointer; + font-size: 1.2rem; + font-weight: 700; + line-height: 1; + text-shadow: 0 1px 0 #fff; + opacity: 0.6; + background-color: transparent; + margin: 0; + border-radius: 0; +} +.notif-error { + background-color: var(--color-nt-error); +} +.notif-warn { + background-color: var(--color-nt-warning); +} +.notif-info { + background-color: var(--color-nt-inform); + +} + diff --git a/root/opt/dmarc-srg/css/widgets.css b/root/opt/dmarc-srg/css/widgets.css new file mode 100644 index 0000000..b7979aa --- /dev/null +++ b/root/opt/dmarc-srg/css/widgets.css @@ -0,0 +1,162 @@ +.table { + display: table; + empty-cells: show; +} +.table-header { + display: table-header-group; + font-weight: bold; +} +.table-body { + display: table-row-group; +} +.table-row { + display: table-row; +} +.table-cell { + display: table-cell; +} +.colspanned { + position: relative; +} +.colspanned .table-cell:first-child { + position: absolute; + left: 0; + right: 0; +} +.dialog { + display: inline-block; + position: fixed; + top: 0; + left: 0; + right: 0; + bottom: 0; +} +.dialog .container { + display: flex; + flex-direction: column; + height: 100%; + text-align: left; + white-space: normal; + background-color: var(--color-bg-dialog); +} +.dialog form { + margin: auto 0; + padding: 1em; + overflow: auto; +} +.titled-input { + display: flex; + flex-direction: column; + row-gap: .7em; +} +.titled-input > label { + display: flex; + flex-direction: column; + row-gap: .2em; +} +.dialog-buttons { + display: flex; + flex-flow: column; + justify-content: center; + gap: 1em; + margin: 1em 0 0 0; +} +@media screen and (min-width:35em) { + .dialog { + position: static; + } + .dialog .container { + border: solid 0.1rem #888; + } + .titled-input { + display: table; + margin: -.5em 0; + border-spacing: 1em .5em; + } + .titled-input > label { + display: table-row; + } + .titled-input > label > * { + display: table-cell; + vertical-align: middle; + } + .titled-input select { + width: 100%; + } + fieldset.titled-input { + margin-bottom: 0; + } + .dialog-buttons { + flex-flow: row wrap; + } +} +.dialog-overlay { + display: flex; + position: fixed; + top: 0; + left: 0; + width: 100%; + height: 100%; + overflow: auto; + background-color: rgba(0,0,0,0.3); + align-items: center; + justify-content: center; + white-space: nowrap; + z-index: 100; +} +.dialog .title { + display: flex; + align-items: center; + justify-content: center; + min-height: 2em; + background-color: var(--color-bg-title); + white-space: nowrap; +} +.dialog .title-text { + display: flex; + margin: auto; + padding-left: 0.7em; +} +.dialog .close-btn { + display: flex; + margin-right: 0.1em; + color: var(--color-fg-default); + font-size: 1.2rem; + font-weight: 700; + opacity: 0.5; + text-shadow: 0 1px 0 #fff; + cursor: pointer; + border: 0; + background-color: transparent; +} +.dialog-buttons button { + min-width: 7em; +} +.table-cell.sortable { + cursor: pointer; +} +.sortable.arrows::before, .sortable.arrows::after { + content: ''; + border-style: solid; + border-width: 0.4em 0.3em; + border-color: transparent; + height: 0; + position: absolute; + right: 0.6em; + width: 0; +} +.sortable.arrows::before { + border-bottom-color: #bbb; + top: 0; +} +.sortable.arrows::after { + border-top-color: #bbb; + bottom: 0; +} +.sortable.arrows.sorted-asc::before { + border-bottom-color: #777; +} +.sortable.arrows.sorted-des::after { + border-top-color: #777; +} + diff --git a/root/opt/dmarc-srg/debug.php b/root/opt/dmarc-srg/debug.php new file mode 100644 index 0000000..98dfd2e --- /dev/null +++ b/root/opt/dmarc-srg/debug.php @@ -0,0 +1,28 @@ +. + */ + +if (isset($debug) && $debug === 1) { + ini_set('error_reporting', E_ALL); + ini_set('display_errors', 1); + ini_set('display_startup_errors', 1); +} + diff --git a/root/opt/dmarc-srg/domains.php b/root/opt/dmarc-srg/domains.php new file mode 100644 index 0000000..21bdd46 --- /dev/null +++ b/root/opt/dmarc-srg/domains.php @@ -0,0 +1,131 @@ +. + * + * ========================= + * + * This script returns the domains information + * + * HTTP GET query: + * when the header 'Accept' is 'application/json': + * It returns a list of the domains or data for the domain specified in the parameter domain. + * otherwise: + * it returns the content of the index.html file + * HTTP POST query: + * Inserts or updates data for specified domain. The data must be in json format with the following fields: + * `fqdn` string FQDN of the domain. + * `action` string Must be one of the following values: `add`, `update`, `delete`. + * If the value is `delete`, all the fields below will be ignored. + * `active` boolean Whether reports for the domain will be accepted or not. + * `description` string Description of the domain. + * Example: + * { "fqnd": "example.com", "action": "update", "active": true, "description": "My description" } + * Other HTTP methods: + * it returns an error + * + * All the data is in json format. + * + * @category Web + * @package DmarcSrg + * @author Aleksey Andreev (liuch) + * @license https://www.gnu.org/licenses/gpl-3.0.html GNU/GPLv3 + */ + +namespace Liuch\DmarcSrg; + +use Liuch\DmarcSrg\ErrorHandler; +use Liuch\DmarcSrg\Domains\Domain; +use Liuch\DmarcSrg\Domains\DomainList; +use Liuch\DmarcSrg\Exception\SoftException; +use Liuch\DmarcSrg\Exception\RuntimeException; + +require 'init.php'; + +if (Core::isJson()) { + try { + Core::instance()->auth()->isAllowed(); + + if (Core::method() == 'GET') { + if (isset($_GET['domain'])) { + Core::sendJson((new Domain($_GET['domain']))->toArray()); + return; + } + + $res = (new DomainList())->getList(); + $list = array_map(function ($domain) { + return $domain->toArray(); + }, $res['domains']); + + Core::sendJson([ + 'domains' => $list, + 'more' => $res['more'] + ]); + return; + } elseif (Core::method() == 'POST') { + $data = Core::getJsonData(); + if ($data) { + $domain = new Domain([ + 'fqdn' => $data['fqdn'] ?? null, + 'active' => $data['active'] ?? null, + 'description' => $data['description'] ?? null + ]); + $action = $data['action'] ?? ''; + switch ($action) { + case 'add': + if ($domain->exists()) { + throw new SoftException('The domain already exists'); + } + $domain->save(); + break; + case 'update': + if (!$domain->exists()) { + throw new SoftException('The domain does not exist'); + } + $domain->save(); + break; + case 'delete': + $domain->delete(); + unset($domain); + break; + default: + throw new SoftException('Unknown action. Valid values are "add", "update", "delete".'); + } + + $res = [ + 'error_code' => 0, + 'message' => 'Successfully' + ]; + if (isset($domain)) { + $res['domain'] = $domain->toArray(); + } + Core::sendJson($res); + return; + } + } + } catch (RuntimeException $e) { + Core::sendJson(ErrorHandler::exceptionResult($e)); + return; + } +} elseif (Core::method() == 'GET') { + Core::sendHtml(); + return; +} + +Core::sendBad(); diff --git a/root/opt/dmarc-srg/files.php b/root/opt/dmarc-srg/files.php new file mode 100644 index 0000000..c91f99c --- /dev/null +++ b/root/opt/dmarc-srg/files.php @@ -0,0 +1,131 @@ +. + */ + +namespace Liuch\DmarcSrg; + +use Liuch\DmarcSrg\ErrorHandler; +use Liuch\DmarcSrg\Report\ReportFetcher; +use Liuch\DmarcSrg\Sources\DirectorySource; +use Liuch\DmarcSrg\Sources\UploadedFilesSource; +use Liuch\DmarcSrg\Directories\DirectoryList; +use Liuch\DmarcSrg\Exception\RuntimeException; + +require 'init.php'; + +if (Core::method() == 'GET') { + if (!Core::isJson()) { + Core::sendHtml(); + return; + } + + try { + Core::instance()->auth()->isAllowed(); + + $res = []; + $up_max = ini_get('max_file_uploads'); + if ($up_max) { + $res['upload_max_file_count'] = intval($up_max); + } + $up_size = ini_get('upload_max_filesize'); + if ($up_size) { + if (!empty($up_size)) { + $ch = strtolower($up_size[strlen($up_size) - 1]); + $up_size = intval($up_size); + switch ($ch) { + case 'g': + $up_size *= 1024; + // no break + case 'm': + $up_size *= 1024; + // no break + case 'k': + $up_size *= 1024; + // no break + } + $res['upload_max_file_size'] = $up_size; + } + } + $dirs = []; + foreach ((new DirectoryList())->list() as $dir) { + $da = $dir->toArray(); + try { + $files = $dir->count(); + } catch (RuntimeException $e) { + $files = -1; + } + $da['files'] = $files; + $dirs[] = $da; + } + $res['directories'] = $dirs; + Core::sendJson($res); + } catch (RuntimeException $e) { + Core::sendJson(ErrorHandler::exceptionResult($e)); + } + return; +} + +if (Core::method() == 'POST') { + try { + Core::instance()->auth()->isAllowed(); + + $data = Core::getJsonData(); + if ($data) { + if (isset($data['cmd'])) { + if ($data['cmd'] === 'load-directory') { + if (isset($data['ids']) && gettype($data['ids']) === 'array' && count($data['ids']) > 0) { + $done = []; + $dirs = []; + $list = new DirectoryList(); + foreach ($data['ids'] as $id) { + $dir_id = gettype($id) === 'integer' ? $id : -1; + if (!in_array($id, $done, true)) { + $done[] = $id; + $dirs[] = $list->directory($dir_id); + } + } + if (count($dirs) > 0) { + $results = []; + foreach ($dirs as $dir) { + $sres = (new ReportFetcher(new DirectorySource($dir)))->fetch(); + foreach ($sres as &$r) { + $results[] = $r; + } + unset($r); + } + Core::sendJson(ReportFetcher::makeSummaryResult($results)); + return; + } + } + } + } + } elseif (isset($_FILES['report_file']) && isset($_POST['cmd']) && $_POST['cmd'] === 'upload-report') { + $results = (new ReportFetcher(new UploadedFilesSource($_FILES['report_file'])))->fetch(); + Core::sendJson(ReportFetcher::makeSummaryResult($results)); + return; + } + } catch (RuntimeException $e) { + Core::sendJson(ErrorHandler::exceptionResult($e)); + return; + } +} + +Core::sendBad(); diff --git a/root/opt/dmarc-srg/index.html b/root/opt/dmarc-srg/index.html new file mode 100644 index 0000000..0598e74 --- /dev/null +++ b/root/opt/dmarc-srg/index.html @@ -0,0 +1,65 @@ + + + + DMARC Reports + + + + + + + + + + + + + + + + + + + + + + + + +

DMARC Reports

+
+
+
+
+ + + diff --git a/root/opt/dmarc-srg/init.php b/root/opt/dmarc-srg/init.php new file mode 100644 index 0000000..ed7d221 --- /dev/null +++ b/root/opt/dmarc-srg/init.php @@ -0,0 +1,58 @@ +. + */ + +spl_autoload_register(function ($class) { + $prefix = 'Liuch\\DmarcSrg\\'; + $prefix_len = 15; + $base_dir = __DIR__ . '/classes/'; + + if (strncmp($prefix, $class, $prefix_len) === 0) { + $relative_class = substr($class, $prefix_len); + $file = $base_dir . str_replace('\\', '/', $relative_class) . '.php'; + if (file_exists($file)) { + require_once($file); + } + } +}); + +date_default_timezone_set('GMT'); + +$core = new Liuch\DmarcSrg\Core([ + 'auth' => [ 'Liuch\DmarcSrg\Auth' ], + 'admin' => [ 'Liuch\DmarcSrg\Admin' ], + 'ehandler' => [ 'Liuch\DmarcSrg\ErrorHandler' ], + 'config' => [ 'Liuch\DmarcSrg\Config', [ 'config/conf.php' ] ], + 'status' => [ 'Liuch\DmarcSrg\Status' ], + 'database' => [ 'Liuch\DmarcSrg\Database\DatabaseController' ] +]); +$core->errorHandler()->setLogger(new Liuch\DmarcSrg\Log\PhpSystemLogger()); + +set_exception_handler(function ($e) { + Liuch\DmarcSrg\Core::instance()->errorHandler()->handleException($e); +}); + +set_error_handler(function (int $severity, string $message, string $file, int $line) { + if (error_reporting() === 0) { + return false; + } + throw new \ErrorException($message, -1, $severity, $file, $line); +}); diff --git a/root/opt/dmarc-srg/js/admin.js b/root/opt/dmarc-srg/js/admin.js new file mode 100644 index 0000000..3041599 --- /dev/null +++ b/root/opt/dmarc-srg/js/admin.js @@ -0,0 +1,678 @@ +/** + * dmarc-srg - A php parser, viewer and summary report generator for incoming DMARC reports. + * Copyright (C) 2020 Aleksey Andreev (liuch) + * + * Available at: + * https://github.com/liuch/dmarc-srg + * + * This program is free software: you can redistribute it and/or modify it + * under the terms of the GNU General Public License as published by the Free + * Software Foundation, either version 3 of the License. + * + * This program is distributed in the hope that it will be useful, but WITHOUT + * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or + * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for + * more details. + * + * You should have received a copy of the GNU General Public License along with + * this program. If not, see . + */ + +class Admin { + constructor(id) { + this._state = null; + this._element = null; + this._sources = null; + this._database = null; + } + + display() { + let cn = document.getElementById("main-block"); + if (!this._element) { + this._element = document.createElement("div"); + this._element.setAttribute("class", "panel-container round-border"); + this._element.appendChild(this._get_database_elements()); + this._element.appendChild(this._get_sources_elements()); + } + cn.appendChild(this._element); + } + + update() { + this._get_admin_state(); + } + + title() { + return "Admin Panel"; + } + + _get_database_elements() { + let fr = document.createDocumentFragment(); + let h = document.createElement("h4"); + h.appendChild(document.createTextNode("Database")); + fr.appendChild(h); + if (!this._database) { + this._database = new DatabaseListBox(this._create_db_item_menu_element()); + } + fr.appendChild(this._database.element()); + return fr; + } + + _get_sources_elements() { + let fr = document.createDocumentFragment(); + let h = document.createElement("h4"); + h.appendChild(document.createTextNode("Report sources")); + fr.appendChild(h); + if (!this._sources) { + this._sources = new SourceListBox(); + } + fr.appendChild(this._sources.element()); + return fr; + } + + _get_admin_state() { + [ this._database, this._sources ].forEach(function(c) { + c.set_status("wait"); + }); + + let t = this; + window.fetch("admin.php", { + method: "GET", + cache: "no-store", + headers: HTTP_HEADERS, + credentials: "same-origin" + }).then(function(resp) { + if (!resp.ok) + throw new Error("Failed to fetch the admin data"); + return resp.json(); + }).then(function(data) { + Common.checkResult(data); + t._state = data; + t._fill_data(); + }).catch(function(err) { + Common.displayError(err); + t._fill_data(err.message); + }); + } + + _send_command(cmd) { + let t = this; + return window.fetch("admin.php", { + method: "POST", + cache: "no-store", + headers: Object.assign(HTTP_HEADERS, HTTP_HEADERS_POST), + credentials: "same-origin", + body: JSON.stringify(cmd) + }).then(function(resp) { + if (!resp.ok) + throw new Error("Failed"); + return resp.json(); + }).finally(function() { + t._get_admin_state(); + Status.instance().update().catch(function(){}); + }); + } + + _fill_data(err_msg) { + if (!err_msg) { + let d = this._state.database || []; + this._database.set_data({ + root: { + name: d.name || "-", + type: d.type || "-", + correct: d.correct, + message: d.message || "-", + location: d.location || "-" + }, + groups: [ + { name: "Tables", items: this._state.database.tables || [] } + ] + }); + this._sources.set_data({ + groups: [ + { name: "Mailboxes", type: "mailbox", items: this._state.mailboxes || [] }, + { name: "Directories", type: "directory", items: this._state.directories || [] } + ] + }); + } + else { + this._database.set_status("error", err_msg); + this._sources.set_status("error", err_msg); + } + if (this._state && this._state.database && this._state.database.needs_upgrade) { + document.querySelector(".db-menu-button li[data-action=upgradedb]").classList.remove("hidden"); + } + } + + _create_db_item_menu_element() { + let el = document.createElement("div"); + let span = document.createElement("span"); + span.setAttribute("role", "button"); + span.appendChild(document.createTextNode("...")); + el.appendChild(span); + // + let mn = document.createElement("div"); + mn.setAttribute("class", "db-item-menu popup-menu round-border hidden"); + let ul = document.createElement("ul"); + Admin.db_actions.forEach(function(it) { + let li = document.createElement("li"); + li.setAttribute("data-action", it.action); + li.setAttribute("data-title", it.title); + li.setAttribute("title", it.long_title); + let sp = document.createElement("span"); + sp.appendChild(document.createTextNode(it.name)); + li.appendChild(sp); + ul.appendChild(li); + if (it.action === "upgradedb") + li.classList.add("hidden"); + }, this); + mn.appendChild(ul); + el.appendChild(mn); + let t = this; + el.addEventListener("click", function(event) { + let it = event.target.closest("li"); + if (it || event.target.parentNode === this) { + event.stopPropagation(); + this.querySelector(".popup-menu").classList.toggle("hidden"); + } + if (it) { + let action = it.getAttribute("data-action"); + let title = it.getAttribute("data-title"); + t._do_db_action_password(action, title); + } + }); + return el; + } + + _do_db_action_password(action, title) { + let ld = new LoginDialog({ + nofetch: true, + nousername: true + }); + document.getElementById("main-block").appendChild(ld.element()); + let that = this; + ld.show().then(function(d) { + if (d) { + that._do_db_action(action, title, { password: d.password }); + } + }).catch(function(err) { + Common.displayError(err); + }).finally(function() { + ld.remove(); + }); + } + + _do_db_action(action, title, data) { + let d = { cmd: action }; + if (data) { + d = Object.assign(d, data); + } + this._send_command(d).then(function(data) { + Common.checkResult(data); + Notification.add({ text: title + ": " + (data.message || "Completed successfully!"), type: "info" }); + }).catch(function(err) { + Common.displayError(err); + Notification.add({ text: title + ": " + err.message, type: "error", delay: 10000 }); + }); + } +} + +Admin.db_actions = [ + { + name: "Initiate", + action: "initdb", + title: "Initiate DB", + long_title: "Create all needed tables and indexes in the database" + }, + { + name: "Drop", + action: "cleandb", + title: "Drop tables", + long_title: "Drop all the tables from the database" + }, + { + name: "Upgrade", + action: "upgradedb", + title: "Upgrade DB", + long_title: "Update the structure of the database" + } +]; + +class DropdownListBox { + constructor() { + this._item_groups = []; + this._element = null; + this._root_item = null + this._list_element = null; + } + + element() { + if (!this._element) { + let el = document.createElement("div"); + el.setAttribute("class", "round-border"); + let that = this; + el.addEventListener("click", function(event) { + if (event.target.closest(".root-list-block")) { + if (that._item_groups.length > 0) { + that._list_element.classList.toggle("hidden"); + that._root_item.element().classList.toggle("bottom-border"); + } + } + }); + this._element = el; + this._update_element(); + } + return this._element; + } + + set_status(type, message) { + if (type === "wait") { + set_wait_status(this.element()); + } + else if (type === "error") { + set_error_status(this.element(), message); + } + } + + set_data(data) { + this._root_item = new ListBoxItem(); + this._make_group_list(data); + this._make_root_columns(data); + if (this._element) { + this._update_element(); + } + } + + _update_element() { + if (this._element.children.length != 2) { + remove_all_children(this._element); + this._element.appendChild(this._content_container()); + this._element.appendChild(this._list_container()); + } + } + + _content_container() { + if (!this._root_item) { + this._root_item = new ListBoxItem(); + } + let c = this._root_item.element(); + let cl = []; + for (let i = 0; i < c.classList.length; ++i) { + if (c.classList[i].startsWith("state-")) + cl.push(c.classList[i]); + } + c.setAttribute("class", "root-list-block" + (cl.length >0 && (" " + cl.join(" ")) || "")); + return c; + } + + _list_container() { + let c = document.createElement("div"); + c.setAttribute("class", "list-container hidden"); + c.appendChild(this._make_list_item_elements()); + this._list_element = c; + return c; + } + + _make_root_columns(data) { + } + + _make_group_list(data) { + this._item_groups = data.groups.map(function(gd) { + return this._make_group_item(gd); + }, this); + } + + _make_group_item(gr_data) { + return new ListBoxItemGroup(gr_data); + } + + _make_list_item_elements() { + let fr = document.createDocumentFragment(); + this._item_groups.forEach(function(ig) { + fr.appendChild(ig.element()); + }); + return fr; + } +} + +class DatabaseListBox extends DropdownListBox { + constructor(menu) { + super(); + this._menu = menu; + this._name = null; + this._type = null; + this._correct = false; + this._message = null; + this._location = null; + } + + set_data(data) { + this._name = data.root.name; + this._type = data.root.type; + this._correct = data.root.correct; + this._message = data.root.message; + this._location = data.root.location; + super.set_data(data); + } + + _make_root_columns(data) { + this._root_item.state(this._correct && "green" || "red"); + this._root_item.add_column(new StatusIndicator(this._name, this._message, "title-item-wrap")); + this._root_item.add_column(new ListBoxColumn(this._message, null, "message-item state-text")); + this._root_item.add_column(new ListBoxColumn(this._type, null, "db-type")); + this._root_item.add_column(new ListBoxColumn(this._location, null, "db-location")); + if (this._menu) + this._root_item.add_column(new ListBoxColumn(this._menu, null, "db-menu-button")); + } + + _make_group_item(gr_data) { + return new DatabaseItemGroup(gr_data); + } +} + +class SourceListBox extends DropdownListBox { + element() { + let _new = !this._element && true || false; + super.element(); + if (_new) { + let that = this; + this._element.addEventListener("click", function(event) { + if (event.target.tagName == "BUTTON") { + let p = event.target.closest("div[data-id]") + if (p) { + let id = parseInt(p.getAttribute("data-id")); + let type = p.getAttribute("data-type"); + that._check_button_clicked(id, type, event.target); + } + } + }); + } + return this._element; + } + + _make_root_columns(data) { + let count = this._item_groups.reduce(function(cnt, gr) { + return cnt + gr.count(); + }, 0); + let enabled = (count > 0); + this._root_item.state(enabled && "green" || "gray"); + this._root_item.add_column(new StatusIndicator("Total sources: " + count, enabled && "Enabled" || "Disabled")); + } + + _make_group_item(gr_data) { + return new SourceItemGroup(gr_data); + } + + _check_button_clicked(id, type, btn) { + let that = this; + let state = "yellow"; + let btn_text = btn.textContent; + btn.textContent = "Checking..."; + btn.disabled = true; + window.fetch("admin.php", { + method: "POST", + cache: "no-store", + headers: Object.assign(HTTP_HEADERS, HTTP_HEADERS_POST), + credentials: "same-origin", + body: JSON.stringify({ cmd: "checksource", id: id, type: type }) + }).then(function(resp) { + if (!resp.ok) + throw new Error("Failed"); + return resp.json(); + }).then(function(data) { + Common.checkResult(data); + let msg = [ data.message ]; + if (data.status) { + if (type === "mailbox") { + msg.push("Messages: " + data.status.messages); + msg.push("Unseen: " + data.status.unseen); + } + else if (type === "directory") { + msg.push("Files: " + data.status.files); + } + } + Notification.add({ text: msg, type: "info" }); + state = "green"; + }).catch(function(err) { + Common.displayError(err); + Notification.add({ text: err.message, type: "error" }); + }).finally(function() { + btn.textContent = btn_text; + btn.disabled = false; + that._set_state(state, id, type); + }); + } + + _set_state(state, id, type) { + let flag = 0; + let gstate = "green"; + for (let i = 0; flag !== 3 && i < this._item_groups.length; ++i) { + let gr = this._item_groups[i]; + if (!(flag & 1) && gr.type() === type) { + gr.state(state, id); + flag |= 1; + } + if (!(flag & 2)) { + let s = gr.state(); + if (s !== "green") { + gstate = s; + flag |= 2; + } + } + } + this._root_item.state(gstate); + } +} + +class ListBoxItem { + constructor() { + this._state = null; + this._element = null; + this._columns = []; + } + + add_column(col) { + this._columns.push(col); + } + + element() { + if (!this._element) { + this._element = document.createElement("div"); + let extra_class = ""; + if (this._state) { + extra_class = " state-" + this._state; + } + this._element.setAttribute("class", "block-list-item round-border" + extra_class); + this._insert_column_elements(); + } + return this._element; + } + + state(state) { + if (!state) { + return this._state; + } + + if (this._element) { + if (this._state) { + this._element.classList.remove("state-" + this._state); + } + this._element.classList.add("state-" + state); + } + this._state = state; + } + + _insert_column_elements() { + this._columns.forEach(function(c) { + this._element.appendChild(c.element()); + }, this); + } +} + +class SourceListItem extends ListBoxItem { + constructor(data) { + super(); + this._id = data.id; + this._type = data.type; + } + + id() { + return this._id; + } + + type() { + return this._type; + } + + element() { + let el = super.element(); + el.setAttribute("data-id", this._id); + el.setAttribute("data-type", this._type); + return el; + } +} + +class ListBoxItemGroup { + constructor(data) { + this._name = data.name; + this._type = data.type; + this._element = null; + this._items = data.items.map(function(it) { + return this._make_item(it); + }, this); + } + + type() { + return this._type; + } + + count() { + return this._items.length; + } + + element() { + if (!this._element) { + let fr = document.createDocumentFragment(); + let h = document.createElement("h5"); + h.appendChild(document.createTextNode(this._name + " (" + this._items.length + ")")); + fr.appendChild(h); + this._items.forEach(function(it) { + fr.appendChild(it.element()); + }); + this._element = fr; + } + return this._element; + } + + _make_item(d) { + return new ListBoxItem(); + } +} + +class DatabaseItemGroup extends ListBoxItemGroup { + _make_item(d) { + let it = super._make_item(d); + let state = d.error_code && "red" || (d.message === "Ok" && "green" || "yellow"); + it.state(state); + it.add_column(new StatusIndicator(d.name, d.message, "title-item-wrap")); + it.add_column(new ListBoxColumn(d.engine || d.message, null, "message-item state-text")); + it.add_column(new ListBoxColumn(d.rows || 0, "Records", "dbtable-records")); + it.add_column(new ListBoxColumn((d.data_length || 0) + (d.index_length || 0), "Size", "dbtable-size")); + return it; + } +} + +class SourceItemGroup extends ListBoxItemGroup { + state(new_state, item_id) { + if (item_id !== undefined) { + this._items.find(function(item) { + if (item.id() == item_id) { + item.state(new_state); + return true; + } + return false; + }); + return; + } + let gstate = "green"; + for (let i = 0; i < this._items.length; ++i) { + let state = this._items[i].state(); + if (state !== gstate) { + return state; + } + } + return gstate; + } + + _make_item(d) { + let it = new SourceListItem({ id: d.id, type: this._type }); + it.state("green"); + it.add_column(new StatusIndicator(d.name, null, "title-item-wrap")); + if (this._type === "mailbox") { + it.add_column(new ListBoxColumn(d.mailbox, null, "mailbox-location")); + it.add_column(new ListBoxColumn(d.host, "Host", "mailbox-host")); + } + else { + it.add_column(new ListBoxColumn(d.location, null, "directory-location")); + } + it.add_column(new ListBoxColumn(this._make_check_button(), null, "source-check-button")); + return it; + } + + _make_check_button() { + let btn = document.createElement("button"); + btn.appendChild(document.createTextNode("Check accessibility")); + return btn; + } + +} + +class ListBoxColumn { + constructor(value, title, class_string) { + this._value = value; + this._title = title; + this._class = class_string; + this._element = null; + } + + element() { + if (!this._element) { + this._element = document.createElement("div"); + this._element.setAttribute("class", "block-item-column" + (this._class && (" " + this._class) || "")); + this._add_children(); + } + return this._element; + } + + _add_children() { + let val_el = this._element; + if (this._title) { + let sp = document.createElement("span"); + sp.appendChild(document.createTextNode(this._title + ":")); + this._element.appendChild(sp); + val_el = document.createElement("span"); + val_el.setAttribute("class", "value"); + this._element.appendChild(val_el); + } + if (typeof(this._value) != "object") + val_el.appendChild(document.createTextNode(this._value)); + else + val_el.appendChild(this._value); + } +} + +class StatusIndicator extends ListBoxColumn { + _add_children() { + let div = document.createElement("div"); + div.setAttribute("class", "state-background status-indicator"); + if (this._title) { + div.setAttribute("title", this._title); + } + this._element.appendChild(div); + if (this._value) { + div = document.createElement("div"); + div.appendChild(document.createTextNode(this._value)); + this._element.appendChild(div); + } + } +} + diff --git a/root/opt/dmarc-srg/js/common.js b/root/opt/dmarc-srg/js/common.js new file mode 100644 index 0000000..36b5c03 --- /dev/null +++ b/root/opt/dmarc-srg/js/common.js @@ -0,0 +1,163 @@ +/** + * dmarc-srg - A php parser, viewer and summary report generator for incoming DMARC reports. + * Copyright (C) 2020 Aleksey Andreev (liuch) + * + * Available at: + * https://github.com/liuch/dmarc-srg + * + * This program is free software: you can redistribute it and/or modify it + * under the terms of the GNU General Public License as published by the Free + * Software Foundation, either version 3 of the License. + * + * This program is distributed in the hope that it will be useful, but WITHOUT + * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or + * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for + * more details. + * + * You should have received a copy of the GNU General Public License along with + * this program. If not, see . + */ + +const HTTP_HEADERS = { + "Accept": "application/json" +}; + +const HTTP_HEADERS_POST = { + "Content-Type": "application/json" +}; + +function remove_all_children(el) { + while (el.children.length > 0) + el.removeChild(el.children[0]); + while (el.childNodes.length > 0) + el.removeChild(el.childNodes[0]); +} + +function set_wait_status(el, text) { + let wait = document.createElement("div"); + wait.setAttribute("class", "wait-message"); + wait.appendChild(document.createTextNode(text || "Getting data...")); + if (el) { + remove_all_children(el); + el.appendChild(wait); + } + return wait; +} + +function set_error_status(el, text) { + let err = document.createElement("div"); + err.setAttribute("class", "error-message"); + err.appendChild(document.createTextNode(text || "Error!")); + if (el) { + remove_all_children(el); + el.appendChild(err); + } + return err; +} + +function date_range_to_string(d1, d2) { + let s1 = d1.toISOString().substr(0, 10); + let s2 = d2.toISOString().substr(0, 10); + if (s1 !== s2) { + let d3 = new Date(d2); + d3.setSeconds(d3.getSeconds() - 1); + if (s1 !== d3.toISOString().substr(0, 10)) + s1 += " - " + s2; + } + return s1; +} + +function create_report_result_element(name, value, long_rec, result) { + let span = document.createElement("span"); + if (long_rec) + span.appendChild(document.createTextNode(name + ": " + value)); + else + span.appendChild(document.createTextNode(name)); + span.setAttribute("title", value); + let extra_class = ""; + if (result === undefined || result !== "") + extra_class = " report-result-" + (result || value); + span.setAttribute("class", "report-result" + extra_class); + return span; +} + +function scroll_to_element(element, container) { // because scrollIntoView is poorly supported by browsers + let diff = null; + let e_rect = element.getBoundingClientRect(); + let c_rect = container.getBoundingClientRect(); + let height = Math.min(e_rect.height, 64); + if (e_rect.top < c_rect.top + height * 2) { + diff = e_rect.top - c_rect.top - height * 2; + } + else if (e_rect.bottom > c_rect.bottom - height) { + diff = e_rect.bottom - c_rect.bottom + height; + } + if (diff) { + container.scrollBy(0, diff); + } +} + +function bytes2size(bytes) { + if (!bytes) { + return "0 bytes"; + } + const k = 1024; + const sizes = [ 'bytes', 'KB', 'MB', 'GB', 'TB', 'PB', 'EB', 'ZB', 'YB' ]; + const i = Math.floor(Math.log(bytes) / Math.log(k)); + return parseFloat((bytes / Math.pow(k, i)).toFixed(2)) + " " + sizes[i]; +} + +class Common { + static tuneDateTimeOutput(mode) { + Date.prototype.outputMode = mode; + if (!Date.prototype.toUIString) { + Date.prototype.toUIString = function(prefer_utc) { + if (this.outputMode === "local" || (this.outputMode === "auto" && !prefer_utc)) { + return this.toLocaleString(); + } + return this.toUTCString(); + }; + } + } + + static makeIpElement(ip) { + let url = null; + let type = ip.includes(":") && 6 || 4; + switch (type) { + case 4: + url = Common.ipv4_url; + break; + case 6: + url = Common.ipv6_url; + break; + } + let tn = document.createTextNode(ip); + if (url) { + url = url.replace("{$ip}", ip).replace("{$eip}", encodeURIComponent(ip)); + let el = document.createElement("a"); + el.setAttribute("href", url); + el.setAttribute("target", "_blank"); + el.setAttribute("title", "IP address information"); + el.appendChild(tn); + return el; + } + return tn; + } + + static checkResult(data) { + if (data.error_code !== undefined && data.error_code !== 0) { + throw data; + } + } + + static displayError(obj) { + console.warn(obj.message || "Unknown error"); + if (!(obj instanceof Error) && obj.debug_info) { + console.warn('Error code: ' + obj.debug_info.code); + console.warn('Error content: ' + obj.debug_info.content); + } + } +} + +Common.tuneDateTimeOutput("auto"); + diff --git a/root/opt/dmarc-srg/js/domains.js b/root/opt/dmarc-srg/js/domains.js new file mode 100644 index 0000000..08cdb5a --- /dev/null +++ b/root/opt/dmarc-srg/js/domains.js @@ -0,0 +1,486 @@ +/** + * dmarc-srg - A php parser, viewer and summary report generator for incoming DMARC reports. + * Copyright (C) 2020 Aleksey Andreev (liuch) + * + * Available at: + * https://github.com/liuch/dmarc-srg + * + * This program is free software: you can redistribute it and/or modify it + * under the terms of the GNU General Public License as published by the Free + * Software Foundation, either version 3 of the License. + * + * This program is distributed in the hope that it will be useful, but WITHOUT + * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or + * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for + * more details. + * + * You should have received a copy of the GNU General Public License along with + * this program. If not, see . + */ + +class DomainList { + constructor() { + this._table = null; + this._scroll = null; + this._element = document.getElementById("main-block"); + this._sort = { column: "fqdn", direction: "ascent" }; + } + + display() { + this._make_scroll_container(); + this._make_table(); + this._scroll.appendChild(this._table.element()); + this._element.appendChild(this._scroll); + this._table.focus(); + } + + update() { + this._fetch_list(); + } + + title() { + return "Domain List"; + } + + _fetch_list() { + this._table.display_status("wait"); + let that = this; + + return window.fetch("domains.php", { + method: "GET", + cache: "no-store", + headers: HTTP_HEADERS, + credentials: "same-origin" + }).then(function(resp) { + if (!resp.ok) + throw new Error("Failed to fetch the domain list"); + return resp.json(); + }).then(function(data) { + that._table.display_status(null); + Common.checkResult(data); + let d = { more: data.more }; + d.rows = data.domains.map(function(it) { + return that._make_row_data(it); + }); + d.rows.push(new NewDomainRow(4)); + let fr = new DomainFrame(d, that._table.last_row_index() + 1); + that._table.clear(); + that._table.add_frame(fr); + if (that._sort.column) { + that._table.sort(that._sort.column, that._sort.direction); + } + that._table.focus(); + }).catch(function(err) { + Common.displayError(err); + that._table.display_status("error"); + }); + } + + _make_scroll_container() { + this._scroll = document.createElement("div"); + this._scroll.setAttribute("class", "main-table-container"); + } + + _make_table() { + this._table = new ITable({ + class: "main-table domains", + onclick: function(row) { + let data = row.userdata(); + if (data) { + this._display_edit_dialog(data); + } + }.bind(this), + onsort: function(col) { + let dir = col.sorted() && "toggle" || "ascent"; + this._table.set_sorted(col.name(), dir); + this._table.sort(col.name(), col.sorted()); + this._sort.column = col.name(); + this._sort.direction = col.sorted(); + this._table.focus(); + }.bind(this), + onfocus: function(el) { + scroll_to_element(el, this._scroll); + }.bind(this) + }); + [ + { content: "", sortable: true, name: "status", class: "cell-status" }, + { content: "FQDN", sortable: true, name: "fqdn" }, + { content: "Updated", sortable: true, name: "date" }, + { content: "Description", class: "descr" } + ].forEach(function(col) { + let c = this._table.add_column(col); + if (c.name() === this._sort.column) { + c.sort(this._sort.direction); + } + }, this); + } + + _make_row_data(d) { + let rd = { cells: [], userdata: d.fqdn }; + rd.cells.push(new DomainStatusCell(d.active)); + rd.cells.push({ content: d.fqdn, class: "fqdn" }); + rd.cells.push(new DomainTimeCell(new Date(d.updated_time))); + rd.cells.push({ content: d.description || "", class: "descr" }); + return rd; + } + + _display_edit_dialog(fqdn) { + let dlg = new DomainEditDialog(fqdn === "*new" && { "new": true } || { fqdn: fqdn }); + this._element.appendChild(dlg.element()); + let that = this; + dlg.show().then(function(d) { + if (d) { + that.update(); + } + }).finally(function() { + dlg.element().remove(); + that._table.focus(); + }); + } +} + +class DomainStatusCell extends ITableCell { + constructor(is_active, props) { + props = props || {}; + let ca = (props.class || "").split(" "); + ca.push(is_active && "state-green" || "state-gray"); + props.class = ca.filter(function(s) { return s.length > 0; }).join(" "); + super(is_active, props); + } + + value(target) { + if (target === "dom") { + let div = document.createElement("div"); + div.setAttribute("class", "state-background status-indicator"); + if (!this._title) { + div.setAttribute("title", this._content && "active" || "inactive"); + } + return div; + } + return this._content; + } +} + +class DomainTimeCell extends ITableCell { + value(target) { + if (target === "dom") { + return this._content && this._content.toUIString() || ""; + } + if (target === "sort") { + return this._content && this._content.valueOf() || ""; + } + super.value(target); + } +} + +class NewDomainRow extends ITableRow { + constructor(col_cnt) { + super({ + userdata: "*new", + cells: [] + }); + this._col_cnt = col_cnt; + } + + element() { + if (!this._element) { + super.element(); + this._element.classList.add("colspanned", "virtual-item"); + for (let i = 0; i < this._col_cnt; ++i) { + let cell = document.createElement("div"); + cell.setAttribute("class", "table-cell"); + cell.appendChild(document.createTextNode(!i && "New domain" || "\u00A0")); + this._element.appendChild(cell); + } + } + return this._element; + } +} + +class DomainFrame extends ITableFrame { + sort(col_idx, direction) { + this._sort_dir = (direction === "ascent" && 1) || (direction === "descent" && 2) || 0; + super.sort(col_idx, direction); + } + + _compare_cells(c1, c2) { + if (!c1) { + return this._sort_dir === 2; + } + if (!c2) { + return this._sort_dir === 1; + } + return super._compare_cells(c1, c2); + } +} + +class DomainEditDialog extends ModalDialog { + constructor(params) { + let tl = null; + let ba = [ "save", "close" ]; + if (!params["new"]) { + tl = "Domain settings"; + ba.splice(1, 0, "delete"); + } + else { + tl = "New domain"; + } + super({ title: tl, buttons: ba }); + this._data = params || {}; + this._content = null; + this._inputs = null; + this._fqdn_el = null; + this._actv_el = null; + this._desc_el = null; + this._c_tm_el = null; + this._u_tm_el = null; + this._fetched = false; + } + + _gen_content() { + this._inputs = document.createElement("div"); + this._inputs.setAttribute("class", "titled-input"); + this._content.appendChild(this._inputs); + this._content.classList.add("vertical-content"); + + let fq = document.createElement("input"); + fq.setAttribute("type", "text"); + if (!this._data["new"]) { + fq.setAttribute("value", this._data.fqdn); + fq.disabled = true; + } + fq.required = true; + this._insert_row("FQDN", fq); + this._fqdn_el = fq; + + { + let en = document.createElement("select"); + let op1 = document.createElement("option"); + op1.setAttribute("value", "yes"); + op1.appendChild(document.createTextNode("Yes")); + en.appendChild(op1); + let op2 = document.createElement("option"); + op2.setAttribute("value", "no"); + op2.appendChild(document.createTextNode("No")); + en.appendChild(op2); + en.required = true; + this._insert_row("Active", en); + this._actv_el = en; + } + + let tx = document.createElement("textarea"); + this._insert_row("Description", tx).classList.add("description"); + this._desc_el = tx; + + let ct = document.createElement("input"); + ct.setAttribute("type", "text"); + ct.disabled = true; + ct.setAttribute("value","n/a"); + this._insert_row("Created", ct); + this._c_tm_el = ct; + + let ut = document.createElement("input"); + ut.setAttribute("type", "text"); + ut.setAttribute("value","n/a"); + ut.disabled = true; + this._insert_row("Updated", ut); + this._u_tm_el = ut; + + this._inputs.addEventListener("input", function(event) { + if (this._fetched || this._data["new"]) { + this._buttons[1].disabled = ( + this._actv_el.dataset.server === this._actv_el.value && + this._desc_el.defaultValue === this._desc_el.value && + this._fqdn_el.defaultValue === this._fqdn_el.value + ); + } + }.bind(this)); + + if (!this._data["new"] && !this._fetched) { + this._fetch_data(); + } + } + + _insert_row(text, v_el) { + let l_el = document.createElement("label"); + let t_el = document.createElement("span"); + t_el.appendChild(document.createTextNode(text + ": ")); + l_el.appendChild(t_el); + l_el.appendChild(v_el); + this._inputs.appendChild(l_el); + return v_el; + } + + _fetch_data() { + this._enable_ui(false); + this._content.appendChild(set_wait_status()); + let uparams = new URLSearchParams(); + uparams.set("domain", this._data.fqdn); + + let that = this; + window.fetch("domains.php?" + uparams.toString(), { + method: "GET", + cache: "no-store", + headers: HTTP_HEADERS, + credentials: "same-origin" + }).then(function(resp) { + if (!resp.ok) + throw new Error("Failed to fetch the domain data"); + return resp.json(); + }).then(function(data) { + that._fetched = true; + Common.checkResult(data); + data.created_time = new Date(data.created_time); + data.updated_time = new Date(data.updated_time); + that._update_ui(data); + that._enable_ui(true); + }).catch(function(err) { + Common.displayError(err); + that._content.appendChild(set_error_status(null, err.message)); + }).finally(function() { + that._content.querySelector(".wait-message").remove(); + }); + } + + _update_ui(data) { + let val = ""; + for (let i = 0; i < this._actv_el.options.length; ++i) { + let op = this._actv_el.options[i]; + let ee = op.value === "yes"; + if ((data.active && ee) || (!data.active && !ee)) { + op.setAttribute("selected", "selected"); + val = op.value; + } + else { + op.removeAttribute("selected"); + } + } + this._actv_el.value = val; + this._actv_el.dataset.server = val; + this._desc_el.appendChild(document.createTextNode(data.description || "")); + this._c_tm_el.setAttribute("value", data.created_time && data.created_time.toUIString() || "n/a"); + this._u_tm_el.setAttribute("value", data.updated_time && data.updated_time.toUIString() || "n/a"); + } + + _add_button(container, text, type) { + let btn = null; + if (type === "save") { + text = "Save"; + btn = document.createElement("button"); + btn.disabled = true; + btn.addEventListener("click", this._save.bind(this)); + } + else if (type === "delete") { + text = "Delete"; + btn = document.createElement("button"); + btn.addEventListener("click", this._confirm_delete.bind(this)); + } + else { + super._add_button(container, text, type); + return; + } + btn.setAttribute("type", "button"); + btn.appendChild(document.createTextNode(text)); + container.appendChild(btn); + this._buttons.push(btn); + } + + _enable_ui(en) { + this._fqdn_el.disabled = !en || !this._data["new"]; + this._actv_el.disabled = !en; + this._desc_el.disabled = !en; + for (let i = 2; i < this._buttons.length - 1; ++i) { + this._buttons[i].disabled = !en; + } + + this._update_first_last(); + if (this._first) { + this._first.focus(); + } + } + + _save() { + this._enable_ui(false); + let em = this._content.querySelector(".error-message"); + if (em) { + em.remove(); + } + this._content.appendChild(set_wait_status()); + + let body = {}; + body.fqdn = this._data["new"] && this._fqdn_el.value || this._data.fqdn; + body.action = this._data["new"] && "add" || "update"; + body.active = this._actv_el.value === "yes"; + body.description = this._desc_el.value; + + let that = this; + window.fetch("domains.php", { + method: "POST", + cache: "no-store", + headers: Object.assign(HTTP_HEADERS, HTTP_HEADERS_POST), + credentials: "same-origin", + body: JSON.stringify(body) + }).then(function(resp) { + if (!resp.ok) + throw new Error("Failed to " + (body.new && "add" || "update") + " the domain data"); + return resp.json(); + }).then(function(data) { + Common.checkResult(data); + that._result = body; + that.hide(); + Notification.add({ + text: "The domain " + body.fqdn + " was " + (body.action === "add" && "added" || "updated") + }); + }).catch(function(err) { + Common.displayError(err); + that._content.appendChild(set_error_status(null, err.message)); + }).finally(function() { + that._content.querySelector(".wait-message").remove(); + that._enable_ui(true); + }); + } + + _confirm_delete() { + if (confirm("Are sure you want to delete this domain?")) { + this._delete(); + } + } + + _delete() { + this._enable_ui(false); + let em = this._content.querySelector(".error-message"); + if (em) { + em.remove(); + } + this._content.appendChild(set_wait_status()); + + let body = {}; + body.fqdn = this._data.fqdn; + body.action = "delete"; + + let that = this; + window.fetch("domains.php", { + method: "POST", + cache: "no-store", + headers: Object.assign(HTTP_HEADERS, HTTP_HEADERS_POST), + credentials: "same-origin", + body: JSON.stringify(body) + }).then(function(resp) { + if (!resp.ok) + throw new Error("Failed to delete the domain"); + return resp.json(); + }).then(function(data) { + Common.checkResult(data); + that._result = data; + that.hide(); + Notification.add({ text: "The domain " + body.fqdn + " was removed" }); + }).catch(function(err) { + Common.displayError(err); + that._content.appendChild(set_error_status(null, err.message)); + }).finally(function() { + that._content.querySelector(".wait-message").remove(); + that._enable_ui(true); + }); + } +} + diff --git a/root/opt/dmarc-srg/js/files.js b/root/opt/dmarc-srg/js/files.js new file mode 100644 index 0000000..946f041 --- /dev/null +++ b/root/opt/dmarc-srg/js/files.js @@ -0,0 +1,394 @@ +/** + * dmarc-srg - A php parser, viewer and summary report generator for incoming DMARC reports. + * Copyright (C) 2020 Aleksey Andreev (liuch) + * + * Available at: + * https://github.com/liuch/dmarc-srg + * + * This program is free software: you can redistribute it and/or modify it + * under the terms of the GNU General Public License as published by the Free + * Software Foundation, either version 3 of the License. + * + * This program is distributed in the hope that it will be useful, but WITHOUT + * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or + * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for + * more details. + * + * You should have received a copy of the GNU General Public License along with + * this program. If not, see . + */ + +class Files { + constructor() { + this._container = null; + this._fieldset1 = null; + this._fieldset2 = null; + this._dir_table = null; + this._element = document.getElementById("main-block"); + this._fcount_info = null; + this._fsize_info = null; + this._limits = { + upload_max_file_count: 0, + upload_max_file_size: 0 + }; + this._directories = []; + } + + display() { + this._create_container(); + this._create_local_file_uploading_element(); + this._create_directory_loading_element(); + this._container.appendChild(this._fieldset1); + this._container.appendChild(this._fieldset2); + this._element.appendChild(this._container); + this._fieldset1.focus(); + } + + update() { + if (!Status.instance().error()) { + this._fetch_data(true, true); + } + } + + title() { + return "Report Files"; + } + + _create_container() { + this._container = document.createElement("div"); + this._container.setAttribute("class", "panel-container round-border"); + } + + _create_local_file_uploading_element() { + this._fieldset1 = document.createElement("fieldset"); + this._fieldset1.setAttribute("class", "round-border"); + this._fieldset1.disabled = true; + let lg = document.createElement("legend"); + lg.appendChild(document.createTextNode("Uploading local report files")); + this._fieldset1.appendChild(lg); + let fm = document.createElement("form"); + fm.setAttribute("enctype", "multipart/form-data"); + fm.setAttribute("method", "post"); + fm.appendChild(this._create_input_element("hidden", "cmd", "upload-report")); + let fl = this._create_input_element("file", "report_file[]", null) + fl.required = true; + fl.multiple = true; + fm.appendChild(fl); + let dv = document.createElement("div"); + dv.setAttribute("class", "buttons-block"); + let sb = this._create_button_element("submit", "Upload reports"); + sb.disabled = true; + dv.appendChild(sb); + dv.appendChild(this._create_button_element("reset", "Reset")); + fm.appendChild(dv); + let that = this; + fl.addEventListener("change", function(event) { + sb.disabled = !that._check_files(fl); + }); + fm.addEventListener("reset", function(event) { + sb.disabled = true; + that._clear_warnings(); + }); + fm.addEventListener("submit", function(event) { + window.fetch("files.php", { + method: "POST", + credentials: "same-origin", + body: new FormData(fm) + }).then(function(resp) { + if (!resp.ok) + throw new Error("Failed to upload a report file"); + return resp.json(); + }).then(function(data) { + Common.checkResult(data); + Notification.add({ text: (data.message || "Uploaded successfully!"), type: "info" }); + }).catch(function(err) { + Common.displayError(err); + Notification.add({ text: (err.message || "Error!"), type: "error" }); + }); + event.preventDefault(); + fm.reset(); + }); + this._fieldset1.appendChild(fm); + } + + _create_directory_loading_element() { + this._fieldset2 = document.createElement("fieldset"); + this._fieldset2.setAttribute("class", "round-border"); + this._fieldset2.disabled = true; + let lg = document.createElement("legend"); + lg.appendChild(document.createTextNode("Loading report files from the server directory")); + this._fieldset2.appendChild(lg); + + let fm = document.createElement("form"); + fm.setAttribute("method", "post"); + this._dir_table = new ITable({ + class: "main-table subtable", + onclick: function(row) { + let userdata = row.userdata(); + let checkbox = row.element().querySelector("input"); + if (checkbox && !userdata.error) { + userdata.checked = !userdata.checked; + checkbox.checked = userdata.checked; + this._update_directory_button(); + } + }.bind(this), + nodata_text: "No directories are configured." + }); + [ + { content: "", class: "cell-status" }, + { content: "Name" }, + { content: "Files" }, + { content: "Location" } + ].forEach(function(col) { + this._dir_table.add_column(col); + }, this); + fm.appendChild(this._dir_table.element()); + let bb = document.createElement("div"); + bb.setAttribute("class", "buttons-block"); + fm.appendChild(bb); + let sb = this._create_button_element("submit", "Load reports"); + sb.disabled = true; + bb.appendChild(sb); + + fm.addEventListener("submit", function(event) { + sb.disabled = true; + let ids = this._directories.filter(function(it) { + return it.checked; + }).map(function(it) { + return it.id; + }); + let that = this; + window.fetch("files.php", { + method: "POST", + headers: Object.assign(HTTP_HEADERS, HTTP_HEADERS_POST), + credentials: "same-origin", + body: JSON.stringify({ cmd: "load-directory", ids: ids }) + }).then(function(resp) { + if (!resp.ok) + throw new Error("Failed to load report files"); + return resp.json(); + }).then(function(data) { + if (!data.error_code) { + Notification.add({ text: (data.message || "Loaded successfully!"), type: "info" }); + } + if (data.other_errors) { + that._notify_other_errors(data.other_errors); + } + Common.checkResult(data); + }).catch(function(err) { + Common.displayError(err); + Notification.add({ text: (err.message || "Error!"), type: "error" }); + }).finally(function() { + that._fetch_data(false, true); + }); + event.preventDefault(); + }.bind(this)); + + this._fieldset2.appendChild(fm); + } + + _display_files_info() { + this._fcount_info = document.createElement("div"); + this._fcount_info.setAttribute("class", "state-gray"); + let dv = document.createElement("div"); + dv.setAttribute("class", "state-text"); + dv.appendChild( + document.createTextNode( + "You can upload not more than " + this._limits.upload_max_file_count + " files." + ) + ); + this._fcount_info.appendChild(dv); + + this._fsize_info = document.createElement("div"); + this._fsize_info.setAttribute("class", "state-gray"); + dv = document.createElement("div"); + dv.setAttribute("class", "state-text"); + dv.appendChild( + document.createTextNode( + "You can upload a file with no more than " + bytes2size(this._limits.upload_max_file_size) + "." + ) + ); + this._fsize_info.appendChild(dv); + + dv = document.createElement("div"); + dv.setAttribute("class", "info-block"); + dv.appendChild(this._fcount_info); + dv.appendChild(this._fsize_info); + this._fieldset1.appendChild(dv); + } + + _update_directory_loading_element() { + this._dir_table.clear(); + let d = {}; + d.rows = this._directories.map(function(it) { + let files = it.files; + let chkbox = false; + it.checked = false; + let rd = { cells: [], userdata: it }; + if (files < 0) { + chkbox = null; + files = "Error!"; + rd.class = "state-red"; + it.error = true; + } + rd.cells.push(new DirectoryCheckboxCell(chkbox)); + rd.cells.push({ content: it.name }); + rd.cells.push({ content: files, class: "state-text" }); + rd.cells.push({ content: it.location }); + return rd; + }); + this._dir_table.add_frame(new ITableFrame(d, this._dir_table.last_row_index() + 1)); + } + + _update_directory_button() { + this._fieldset2.querySelector("button[type=submit]").disabled = !this._directories.some(function(it) { + return it.checked; + }); + } + + _clear_warnings() { + [ this._fcount_info, this._fsize_info ].forEach(function(el) { + if (el) { + el.classList.remove("state-red"); + el.classList.add("state-gray"); + } + }); + } + + _notify_other_errors(errors) { + let cut = null; + let length = errors.length; + if (length > 4) { + cut = errors.slice(0, 3); + cut.push("and " + (length - 3) + " more errors"); + } + Notification.add({ text: cut || errors, type: "error" }); + } + + _set_warning(el) { + if (el) { + el.classList.remove("state-gray"); + el.classList.add("state-red"); + } + } + + _check_files(fl_el) { + this._clear_warnings(); + + if (fl_el.files.length == 0) { + return false; + } + + let res = true; + if (fl_el.files.length > this._limits.upload_max_file_count) { + res = false; + this._set_warning(this._fcount_info); + let message = "You can only upload " + this._limits.upload_max_file_count + " files."; + Notification.add({ type: "error", text: message, delay: 10000 }); + } + + let bf_cnt = 0; + for (let i = 0; i < fl_el.files.length; ++i) { + if (fl_el.files[i].size > this._limits.upload_max_file_size) { + ++bf_cnt; + } + }; + if (bf_cnt > 0) { + res = false; + this._set_warning(this._fsize_info); + Notification.add({ + type: "error", + text: "" + bf_cnt + " file" + (bf_cnt > 1 && "s" || "") + " exceed the maximum allowed size.", + delay: 10000 + }); + } + + return res; + } + + _create_button_element(type, text) { + let el = document.createElement("button"); + el.setAttribute("type", type); + el.appendChild(document.createTextNode(text)); + return el; + } + + _create_input_element(type, name, value) { + let el = document.createElement("input"); + el.setAttribute("type", type); + if (name) + el.setAttribute("name", name); + if (value) + el.setAttribute("value", value); + return el; + } + + _fetch_data(files, dirs) { + if (files) { + this._fieldset1.disabled = true; + this._fieldset1.insertBefore(set_wait_status(), this._fieldset1.children[0]); + } + if (dirs) { + this._fieldset2.disabled = true; + this._fieldset2.insertBefore(set_wait_status(), this._fieldset2.children[0]); + } + let that = this; + window.fetch("files.php", { + method: "GET", + headers: HTTP_HEADERS, + credentials: "same-origin" + }).then(function(resp) { + if (!resp.ok) + throw new Error("Failed to get loader data"); + return resp.json(); + }).then(function(data) { + Common.checkResult(data); + if (files) { + that._limits.upload_max_file_count = data.upload_max_file_count; + that._limits.upload_max_file_size = data.upload_max_file_size; + that._display_files_info(); + that._fieldset1.disabled = false; + } + if (dirs) { + that._directories = data.directories || []; + that._update_directory_loading_element(); + that._fieldset2.disabled = false; + } + }).catch(function(err) { + Common.displayError(err); + Notification.add({ type: "error", text: err.message }); + if (files) { + that._fieldset1.insertBefore(set_error_status(null, err.message), that._fieldset1.children[0]); + } + if (dirs) { + that._fieldset2.insertBefore(set_error_status(null, err.message), that._fieldset2.children[0]); + } + }).finally(function() { + if (files) { + that._fieldset1.querySelector(".wait-message").remove(); + } + if (dirs) { + that._fieldset2.querySelector(".wait-message").remove(); + } + }); + } +} + +class DirectoryCheckboxCell extends ITableCell { + value(target) { + if (target === "dom") { + let cb = document.createElement("input"); + cb.setAttribute("type", "checkbox"); + if (this._content !== null) { + cb.checked = this._content; + } + else { + cb.disabled = true; + cb.checked = false; + } + return cb; + } + return this._content; + } +} + diff --git a/root/opt/dmarc-srg/js/list.js b/root/opt/dmarc-srg/js/list.js new file mode 100644 index 0000000..495cf77 --- /dev/null +++ b/root/opt/dmarc-srg/js/list.js @@ -0,0 +1,527 @@ +/** + * dmarc-srg - A php parser, viewer and summary report generator for incoming DMARC reports. + * Copyright (C) 2020 Aleksey Andreev (liuch) + * + * Available at: + * https://github.com/liuch/dmarc-srg + * + * This program is free software: you can redistribute it and/or modify it + * under the terms of the GNU General Public License as published by the Free + * Software Foundation, either version 3 of the License. + * + * This program is distributed in the hope that it will be useful, but WITHOUT + * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or + * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for + * more details. + * + * You should have received a copy of the GNU General Public License along with + * this program. If not, see . + */ + +class ReportList { + constructor() { + this._table = null; + this._scroll = null; + this._filter = null; + this._sort = { column: "begin_time", direction: "descent" }; + this._element = document.getElementById("main-block"); + this._element2 = document.getElementById("detail-block"); + this._fetching = false; + this._settings_btn = null; + this._settings_dlg = null; + } + + display() { + this._gen_settings_button(); + this._gen_content_container(); + this._gen_table(); + this._scroll.appendChild(this._table.element()); + this._element.appendChild(this._scroll); + this._ensure_report_widget(); + this._element2.appendChild(ReportWidget.instance().element()); + this._ensure_settins_button(); + ReportWidget.instance().hide(); + this._table.focus(); + } + + update() { + this._handle_url_params(); + this._update_table(); + } + + title() { + return "Report List"; + } + + onpopstate() { + if (!this._scroll) { + this.display(); + this.update(); + } + else { + if (!this._element.contains(this._scroll)) { + remove_all_children(this._element); + this._element.appendChild(this._scroll); + } + if (this._handle_url_params()) { + this._update_table(); + } + } + this._ensure_settins_button(); + this._ensure_report_widget(); + if (this._table) { + this._table.focus(); + } + } + + _ensure_settins_button() { + let title_el = document.querySelector("h1"); + if (!title_el.contains(this._settings_btn)) { + title_el.appendChild(this._settings_btn); + } + } + + _ensure_report_widget() { + let wdg = ReportWidget.instance(); + wdg.hide(); + let el = wdg.element(); + if (!this._element2.contains(el)) { + this._element2.appendChild(el); + } + } + + /** + * Sets the _filter object from the document's location + * and updates the setting button if the filter changes + * + * @return bool True if the filter was changed, false otherwise + */ + _handle_url_params() { + let cnt = 0; + let filter = {}; + (new URL(document.location.href)).searchParams.getAll("filter[]").forEach(function(it) { + let k = null; + let v = null; + let i = it.indexOf(":"); + if (i != 0) { + if (i > 0) { + k = it.substr(0, i); + v = it.substr(i + 1); + } + else { + k = it; + v = ""; + } + filter[k] = v; + ++cnt; + } + }); + let changed = !this._filter && cnt > 0; + if (this._filter) { + let cnt2 = 0; + changed = Object.keys(this._filter).some(function(k) { + ++cnt2; + return cnt < cnt2 || this._filter[k] !== filter[k]; + }, this) || cnt !== cnt2; + } + if (changed) { + this._filter = cnt && filter || null; + this._update_settings_button(); + } + return changed; + } + + _gen_settings_button() { + if (!this._settings_btn) { + let btn = document.createElement("span"); + btn.setAttribute("class", "options-button"); + btn.appendChild(document.createTextNode("\u{2699}")); + let that = this; + btn.addEventListener("click", function(event) { + that._display_settings_dialog(); + event.preventDefault(); + }); + this._settings_btn = btn; + } + } + + _update_settings_button() { + if (this._settings_btn) { + if (this._filter) + this._settings_btn.classList.add("active"); + else { + this._settings_btn.classList.remove("active"); + } + } + } + + _gen_content_container() { + let that = this; + let el = document.createElement("div"); + el.setAttribute("class", "main-table-container"); + el.addEventListener("scroll", function() { + if (!that._fetching && el.scrollTop + el.clientHeight >= el.scrollHeight * 0.95) { + if (that._table.frames_count() === 0 || that._table.more()) { + that._fetch_list(); + } + } + }); + this._scroll = el; + } + + _gen_table() { + this._table = new ReportTable({ + class: "main-table report-list small-cards", + onclick: function(row) { + let data = row.userdata(); + if (data) + this._display_report(data, row.id()); + }.bind(this), + onsort: function(col) { + let dir = col.sorted() && "toggle" || "descent"; + this._table.set_sorted(col.name(), dir); + this._sort.column = col.name(); + this._sort.direction = col.sorted(); + this.update(); + }.bind(this), + onfocus: function(el) { + scroll_to_element(el, this._scroll); + }.bind(this) + }); + [ + { content: "Domain" }, + { content: "Date", sortable: true, name: "begin_time" }, + { content: "Reporting Organization" }, + { content: "Report ID", class: "report-id" }, + { content: "Messages" }, + { content: "Result" } + ].forEach(function(col) { + let c = this._table.add_column(col); + if (c.name() === this._sort.column) { + c.sort(this._sort.direction); + } + }, this); + } + + _update_table() { + this._table.clear(); + let that = this; + let frcnt = -1; + let again = function() { + if (frcnt < that._table.frames_count() && that._scroll.clientHeight * 1.5 >= that._scroll.scrollHeight) { + frcnt = that._table.frames_count(); + that._fetch_list().then(function(frame) { + if (frame && frame.more()) + again(); + else + that._table.focus(); + }); + } + else + that._table.focus(); + } + again(); + } + + _display_report(data, id) { + if (data.domain && data.report_id) { + let url = new URL("report.php", document.location.href); + url.searchParams.set("domain", data.domain); + url.searchParams.set("report_id", data.report_id); + window.history.pushState({ from: "list" }, "", url.toString()); + let that = this; + ReportWidget.instance().show_report(data.domain, data.report_id).then(function() { + if (!that._table.seen(id)) { + that._table.seen(id, true); + } + }).catch(function(err) { + Common.displayError(err); + if (err.error_code && err.error_code === -2) { + LoginDialog.start({ nousername: true }); + } + }); + Router.update_title(ReportWidget.instance().title()); + ReportWidget.instance().focus(); + } + } + + _fetch_list() { + this._table.display_status("wait"); + this._fetching = true; + + let pos = this._table.last_row_index() + 1; + + let uparams = new URLSearchParams(); + uparams.set("list", "reports"); + uparams.set("position", pos); + uparams.set("order", this._sort.column); + uparams.set("direction", this._sort.direction); + if (this._filter) { + for (let nm in this._filter) { + uparams.append("filter[]", nm + ":" + this._filter[nm]); + } + } + + let that = this; + return window.fetch("list.php?" + uparams.toString(), { + method: "GET", + cache: "no-store", + headers: HTTP_HEADERS, + credentials: "same-origin" + }).then(function(resp) { + if (!resp.ok) + throw new Error("Failed to fetch the report list"); + return resp.json(); + }).then(function(data) { + that._table.display_status(null); + Common.checkResult(data); + let d = { more: data.more }; + d.rows = data.reports.map(function(it) { + return new ReportTableRow(that._make_row_data(it)); + }); + let fr = new ITableFrame(d, pos); + that._table.add_frame(fr); + return fr; + }).catch(function(err) { + Common.displayError(err); + that._table.display_status("error"); + }).finally(function() { + that._fetching = false; + }); + } + + _make_row_data(d) { + let rd = { cells: [], userdata: { domain: d.domain, report_id: d.report_id }, seen: d.seen && true || false } + rd.cells.push({ content: d.domain, label: "Domain" }); + let d1 = new Date(d.date.begin); + let d2 = new Date(d.date.end); + rd.cells.push({ content: date_range_to_string(d1, d2), title: d1.toUIString(true) + " - " + d2.toUIString(true), label: "Date" }); + rd.cells.push({ content: d.org_name, label: "Reporting Organization" }); + rd.cells.push({ content: d.report_id, class: "report-id" }); + rd.cells.push({ content: d.messages, label: "Messages" }); + rd.cells.push(new StatusColumn({ dkim_align: d.dkim_align, spf_align: d.spf_align })); + return rd; + } + + _display_settings_dialog() { + let dlg = this._settings_dlg; + if (!this._settings_dlg) { + dlg = new ReportListSettingsDialog({ filter: this._filter }); + this._settings_dlg = dlg; + } + this._element.appendChild(dlg.element()); + dlg.show().then(function(d) { + if (d) { + let url = new URL(document.location.href); + url.searchParams.delete("filter[]"); + for (let k in d) { + if (d[k]) { + url.searchParams.append("filter[]", k + ":" + d[k]); + } + } + window.history.replaceState(null, "", url.toString()); + if (this._handle_url_params()) { + this._update_table(); + } + } + }.bind(this)).finally(function() { + this._table.focus(); + }.bind(this)); + } +} + +class ReportTable extends ITable { + seen(row_id, flag) { + let row = super._get_row(row_id); + if (row) { + if (flag === undefined) + return row.seen(); + row.seen(flag); + } + } +} + +class ReportTableRow extends ITableRow { + constructor(data) { + super(data); + this._seen = data.seen && true || false; + } + + element() { + if (!this._element) { + super.element(); + this._update_seen_element(); + } + return this._element; + } + + seen(flag) { + if (flag === undefined) + return this._seen; + + this._seen = flag && true || false; + if (this._element) + this._update_seen_element(); + } + + _update_seen_element() { + if (this._seen) + this._element.classList.remove("unseen"); + else + this._element.classList.add("unseen"); + } +} + +class StatusColumn extends ITableCell { + element() { + if (!this._element) { + super.element().setAttribute("data-label", "Result"); + } + return this._element; + } + + value(target) { + if (target === "dom") { + let d = this._content; + let fr = document.createDocumentFragment(); + if (d.dkim_align) { + fr.appendChild(create_report_result_element("DKIM", d.dkim_align)); + } + if (d.spf_align) { + fr.appendChild(create_report_result_element("SPF", d.spf_align)); + } + return fr; + } + return super.value(target); + } +} + +class ReportListSettingsDialog extends ModalDialog { + constructor(params) { + super({ title: "List display settings", buttons: [ "apply", "reset" ] }); + this._data = params || {}; + this._content = null; + this._ui_data = [ + { name: "domain", title: "Domain" }, + { name: "month", title: "Month" }, + { name: "organization", title: "Organization" }, + { name: "dkim", title: "DKIM result" }, + { name: "spf", title: "SPF result" }, + { name: "status", title: "Status" } + ]; + } + + show() { + this._update_ui(); + return super.show(); + } + + _gen_content() { + let fs = document.createElement("fieldset"); + fs.setAttribute("class", "round-border titled-input"); + let lg = document.createElement("legend"); + lg.appendChild(document.createTextNode("Filter by")); + fs.appendChild(lg); + this._ui_data.forEach(function(ud) { + let el = this._create_select_label(ud.title, fs); + ud.element = el; + }, this); + this._content.appendChild(fs); + this._content.classList.add("vertical-content"); + if (!this._data.loaded_filters) + this._fetch_data(); + } + + _create_select_label(text, c_el) { + let lb = document.createElement("label"); + let sp = document.createElement("span"); + sp.appendChild(document.createTextNode(text + ": ")); + lb.appendChild(sp); + let sl = document.createElement("select"); + lb.appendChild(sl); + c_el.appendChild(lb); + return sl; + } + + _enable_ui(enable) { + let list = this._element.querySelector("form").elements; + for (let i = 0; i < list.length; ++i) + list[i].disabled = !enable; + } + + _update_ui() { + this._update_filters(); + } + + _update_filters() { + let data = this._data.loaded_filters || {}; + let vals = this._data.filter || {}; + this._ui_data.forEach(function(ud) { + this._update_select_element(ud.element, data[ud.name], vals[ud.name]); + }, this); + } + + _update_select_element(sl, d, v) { + remove_all_children(sl); + let ao = document.createElement("option"); + ao.setAttribute("value", ""); + ao.setAttribute("selected", "selected"); + ao.appendChild(document.createTextNode("Any")); + sl.appendChild(ao); + let v2 = ""; + if (d) { + let op = null; + d.forEach(function(fs) { + op = document.createElement("option"); + op.setAttribute("value", fs); + op.appendChild(document.createTextNode(fs)); + if (fs === v) { + v2 = v; + } + sl.appendChild(op); + }, this); + } + sl.value = v2; + } + + _submit() { + let res = {}; + let fdata = {}; + this._ui_data.forEach(function(ud) { + let el = ud.element; + let val = el.options[el.selectedIndex].value; + res[ud.name] = val; + fdata[ud.name] = val; + }); + this._data.filter = fdata; + this._result = res; + this.hide(); + } + + _fetch_data() { + let that = this; + this._enable_ui(false); + this._content.appendChild(set_wait_status()); + window.fetch("list.php?list=filters", { + method: "GET", + cache: "no-store", + headers: HTTP_HEADERS, + credentials: "same-origin" + }).then(function(resp) { + if (!resp.ok) + throw new Error("Failed to fetch the filter list"); + return resp.json(); + }).then(function(data) { + Common.checkResult(data); + that._data.loaded_filters = data.filters; + that._update_ui(); + that._enable_ui(true); + }).catch(function(err) { + Common.displayError(err); + that._content.appendChild(set_error_status()); + }).finally(function() { + that._content.querySelector(".wait-message").remove(); + }); + } +} + diff --git a/root/opt/dmarc-srg/js/login.js b/root/opt/dmarc-srg/js/login.js new file mode 100644 index 0000000..22a8385 --- /dev/null +++ b/root/opt/dmarc-srg/js/login.js @@ -0,0 +1,141 @@ +/** + * dmarc-srg - A php parser, viewer and summary report generator for incoming DMARC reports. + * Copyright (C) 2020 Aleksey Andreev (liuch) + * + * Available at: + * https://github.com/liuch/dmarc-srg + * + * This program is free software: you can redistribute it and/or modify it + * under the terms of the GNU General Public License as published by the Free + * Software Foundation, either version 3 of the License. + * + * This program is distributed in the hope that it will be useful, but WITHOUT + * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or + * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for + * more details. + * + * You should have received a copy of the GNU General Public License along with + * this program. If not, see . + */ + +class LoginDialog extends ModalDialog { + constructor(params) { + super(); + this._params = params || {}; + this._params.buttons = [ "ok", "cancel" ]; + this._params.title = "Authentication"; + this._params.overlay_click = "ignore"; + this._user = null; + this._pass = null; + this._msg_el = null; + } + + remove() { + if (this._element) { + this._element.remove(); + this._element = null; + } + } + + _gen_content() { + let tdiv = document.createElement("div"); + tdiv.setAttribute("class", "titled-input"); + if (!this._params.nousername) { + this._user = this._insert_row(tdiv, "User name", "text", "Enter your user name"); + } + this._pass = this._insert_row(tdiv, "Password", "password", "Enter your password"); + this._msg_el = set_wait_status(null, "Enter your credentials"); + this._content.setAttribute("class", "vertical-content"); + this._content.appendChild(tdiv); + this._content.appendChild(this._msg_el); + } + + _insert_row(c_el, text, type, placeholder) { + let l_el = document.createElement("label"); + c_el.appendChild(l_el); + let t_el = document.createElement("span"); + t_el.appendChild(document.createTextNode(text + ": ")); + l_el.appendChild(t_el); + let inp = document.createElement("input"); + inp.required = true; + inp.setAttribute("type", type); + if (placeholder) { + inp.setAttribute("placeholder", placeholder); + } + l_el.appendChild(inp); + return inp; + } + + _enable_elements(enable) { + this._buttons[0].disabled = !enable; + let elements = this._element.querySelector("form").elements; + for (let i = 0; i < elements.length; ++i) { + elements[i].disabled = !enable; + } + } + + _submit() { + this._buttons[1].focus(); + this._enable_elements(false); + let body = {}; + if (!this._params.nousername) { + body.username = this._user.value; + } + body.password = this._pass.value; + if (this._params.nofetch) { + this._result = body; + this.hide(); + return; + } + let that = this; + let hide = false; + this._set_message("Sending credentials to the server...", false); + window.fetch("login.php", { + method: "POST", + cache: "no-store", + headers: Object.assign(HTTP_HEADERS, HTTP_HEADERS_POST), + credentials: "same-origin", + body: JSON.stringify(body) + }).then(function(resp) { + if (!resp.ok) + throw new Error("Failed to log in"); + return resp.json(); + }).then(function(data) { + Common.checkResult(data); + that._result = data; + Notification.add({ type: "info", text: data.message || "Successfully!" }); + hide = true; + }).catch(function(err) { + that._pass.value = ""; + Common.displayError(err); + that._set_message(err.message, true); + }).finally(function() { + that._enable_elements(true); + that._first.focus(); + if (hide) + that.hide(); + }); + } + + _set_message(text, error) { + let el = error && set_error_status(null, text) || set_wait_status(null, text); + this._msg_el.replaceWith(el); + this._msg_el = el; + } +} + +LoginDialog.start = function (params) { + let login = new LoginDialog(params); + document.getElementById("main-block").appendChild(login.element()); + login.show().then(function(d) { + if (d) { + Router.go(); + } + }).catch(function(err) { + Common.displayError(err); + }).finally(function() { + login.remove(); + login = null; + }); +}; + diff --git a/root/opt/dmarc-srg/js/logs.js b/root/opt/dmarc-srg/js/logs.js new file mode 100644 index 0000000..a216915 --- /dev/null +++ b/root/opt/dmarc-srg/js/logs.js @@ -0,0 +1,304 @@ +/** + * dmarc-srg - A php parser, viewer and summary report generator for incoming DMARC reports. + * Copyright (C) 2020 Aleksey Andreev (liuch) + * + * Available at: + * https://github.com/liuch/dmarc-srg + * + * This program is free software: you can redistribute it and/or modify it + * under the terms of the GNU General Public License as published by the Free + * Software Foundation, either version 3 of the License. + * + * This program is distributed in the hope that it will be useful, but WITHOUT + * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or + * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for + * more details. + * + * You should have received a copy of the GNU General Public License along with + * this program. If not, see . + */ + +class Logs { + constructor() { + this._table = null; + this._scroll = null; + this._element = document.getElementById("main-block"); + this._fetching = false; + this._sort = { column: "", direction: "" }; + } + + display() { + this._make_scroll_container(); + this._make_table(); + this._scroll.appendChild(this._table.element()); + this._element.appendChild(this._scroll); + this._table.focus(); + } + + update() { + this._table.clear(); + let that = this; + let fr_cnt = -1; + let again = function() { + let fc = that._table.frames_count() + if (fr_cnt < fc && that._scroll.scrollHeight <= that._scroll.clientHeight * 1.5) { + fr_cnt = fc; + that._fetch_list().then(function(frame) { + if (frame && frame.more()) { + again(); + } + else { + that._table.focus(); + } + }); + } + else { + that._table.focus(); + } + }; + again(); + } + + title() { + return "Logs"; + } + + _fetch_list() { + this._table.display_status("wait"); + this._fetching = true; + + let pos = this._table.last_row_index() + 1; + + let uparams = new URLSearchParams(); + uparams.set("position", pos); + if (this._sort.column && this._sort.direction) { + uparams.set("order", this._sort.column); + uparams.set("direction", this._sort.direction); + } + + let that = this; + return window.fetch("logs.php?" + uparams.toString(), { + method: "GET", + cache: "no-store", + headers: HTTP_HEADERS, + credentials: "same-origin" + }).then(function(resp) { + if (!resp.ok) + throw new Error("Failed to fetch the logs"); + return resp.json(); + }).then(function(data) { + that._table.display_status(null); + Common.checkResult(data); + if (data.sorted_by) { + let cname = data.sorted_by.column; + let dir = data.sorted_by.direction; + if (that._sort.column !== cname || that._sort.direction !== dir) { + that._sort.column = cname; + that._sort.direction = dir; + that._table.set_sorted(cname, dir); + } + } + let d = { more: data.more }; + d.rows = data.items.map(function(it) { + return new ITableRow(that._make_row_data(it)); + }); + let fr = new ITableFrame(d, pos); + that._table.add_frame(fr); + return fr; + }).catch(function(err) { + Common.displayError(err); + that._table.display_status("error"); + }).finally(function() { + that._fetching = false; + }); + } + + _make_scroll_container() { + let that = this; + let el = document.createElement("div"); + el.setAttribute("class", "main-table-container"); + el.addEventListener("scroll", function() { + if (!that._fetching && el.scrollTop + el.clientHeight >= el.scrollHeight * 0.95) { + if (that._table.frames_count() === 0 || that._table.more()) { + that._fetch_list(); + } + } + }); + this._scroll = el; + } + + _make_table() { + this._table = new ITable({ + class: "main-table small-cards", + onclick: function(row) { + let data = row.userdata(); + if (data) { + this._display_item_dialog(data); + } + }.bind(this), + onsort: function(col) { + let dir = col.sorted() && "toggle" || "descent"; + this._table.set_sorted(col.name(), dir); + this._sort.column = col.name(); + this._sort.direction = col.sorted(); + this.update(); + }.bind(this), + onfocus: function(el) { + scroll_to_element(el, this._scroll); + }.bind(this) + }); + [ + { content: "", class: "cell-status" }, + { content: "Domain", name: "domain" }, + { content: "Source" }, + { content: "Event time", sortable: true, name: "event_time" }, + { content: "Message" } + ].forEach(function(col) { + let c = this._table.add_column(col); + if (c.name() === this._sort.column) { + c.sort(this._sort.direction); + } + }, this); + } + + _make_row_data(d) { + let rd = { cells: [], userdata: { id: d.id } }; + rd.cells.push(new LogsResultCell(d.success)); + rd.cells.push({ content: d.domain, label: "Domain" }); + rd.cells.push({ content: d.source, label: "Source" }); + rd.cells.push({ content: (new Date(d.event_time)).toUIString(), label: "Event time" }); + rd.cells.push({ content: d.message, label: "Message" }); + return rd; + } + + _display_item_dialog(data) { + let dlg = new LogItemDialog(data); + this._element.appendChild(dlg.element()); + let that = this; + dlg.show().finally(function() { + dlg.element().remove(); + that._table.focus(); + }); + } +} + +class LogsResultCell extends ITableCell { + constructor(success, props) { + props = props || {}; + let ca = (props.class || "").split(" "); + ca.push(success && "state-green" || "state-red"); + props.class = ca.filter(function(s) { return s.length > 0; }).join(" "); + super(success, props); + } + + element() { + if (!this._element) { + super.element().setAttribute("data-label", "Result"); + } + return this._element; + } + + value(target) { + if (target === "dom") { + let div = document.createElement("div"); + div.setAttribute("class", "state-background status-indicator"); + if (!this.title) { + div.setAttribute("title", this._content && "Ok" || "Failed"); + } + return div; + } + return this._content; + } +} + +class LogItemDialog extends ModalDialog { + constructor(data) { + super({ title: "Log record", buttons: [ "close" ] }); + this._data = data; + this._table = null; + this._res_el = null; + this._dom_el = null; + this._time_el = null; // event_time + this._rid_el = null; // external_id + this._file_el = null; // filename + this._sou_el = null; // source + this._msg_el = null; // message + } + + _gen_content() { + this._table = document.createElement("div"); + this._table.setAttribute("class", "left-titled"); + this._content.appendChild(this._table); + + this._time_el = this._insert_row("Event time"); + this._res_el = this._insert_row("Result"); + this._res_el.setAttribute("class", "state-text"); + this._dom_el = this._insert_row("Domain"); + this._rid_el = this._insert_row("Report Id"); + this._file_el = this._insert_row("File name"); + this._sou_el = this._insert_row("Source"); + this._msg_el = this._insert_row("Message"); + + this._fetch_data(); + } + + _insert_row(text) { + let t_el = document.createElement("span"); + t_el.appendChild(document.createTextNode(text + ": ")); + this._table.appendChild(t_el); + let v_el = document.createElement("span"); + this._table.appendChild(v_el); + return v_el; + } + + _fetch_data() { + this._content.appendChild(set_wait_status()); + let uparams = new URLSearchParams(); + uparams.set("id", this._data.id); + + let that = this; + window.fetch("logs.php?" + uparams.toString(), { + method: "GET", + cache: "no-store", + headers: HTTP_HEADERS, + credentials: "same-origin" + }).then(function(resp) { + if (!resp.ok) + throw new Error("Failed to fetch the log item"); + return resp.json(); + }).then(function(data) { + Common.checkResult(data); + that._data.domain = data.domain; + that._data.report_id = data.report_id; + that._data.event_time = new Date(data.event_time); + that._data.filename = data.filename; + that._data.source = data.source; + that._data.success = data.success; + that._data.message = data.message; + that._update_ui(); + }).catch(function(err) { + Common.displayError(err); + that._content.appendChild(set_error_status(null, err.message)); + }).finally(function() { + that._content.querySelector(".wait-message").remove(); + }); + } + + _update_ui() { + this._time_el.textContent = this._data.event_time.toUIString(); + if (this._data.success) { + this._res_el.textContent = "Ok"; + this._res_el.parentElement.classList.add("state-green"); + } + else { + this._res_el.textContent = "Failed"; + this._res_el.parentElement.classList.add("state-red"); + } + this._dom_el.textContent = this._data.domain || "n/a"; + this._rid_el.textContent = this._data.report_id || "n/a"; + this._file_el.textContent = this._data.filename || "n/a"; + this._sou_el.textContent = this._data.source; + this._msg_el.textContent = this._data.message || "n/a"; + } +} + diff --git a/root/opt/dmarc-srg/js/main.js b/root/opt/dmarc-srg/js/main.js new file mode 100644 index 0000000..23ec371 --- /dev/null +++ b/root/opt/dmarc-srg/js/main.js @@ -0,0 +1,335 @@ +/** + * dmarc-srg - A php parser, viewer and summary report generator for incoming DMARC reports. + * Copyright (C) 2020 Aleksey Andreev (liuch) + * + * Available at: + * https://github.com/liuch/dmarc-srg + * + * This program is free software: you can redistribute it and/or modify it + * under the terms of the GNU General Public License as published by the Free + * Software Foundation, either version 3 of the License. + * + * This program is distributed in the hope that it will be useful, but WITHOUT + * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or + * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for + * more details. + * + * You should have received a copy of the GNU General Public License along with + * this program. If not, see . + */ + +class Router { +} + +Router.start = function() { + Router._initial_header = document.querySelector("h1").textContent; + + document.getElementsByTagName("body")[0].addEventListener("keydown", function(event) { + if (event.code == "Escape" && !event.shiftKey && !event.ctrlKey && !event.altKey) { + let cbtn = document.querySelector(".close-btn.active"); + if (cbtn) { + cbtn.click(); + event.preventDefault(); + } + document.querySelectorAll("div.popup-menu:not(.hidden)").forEach(function(m) { + m.classList.add("hidden"); + }); + } + }); + + window.addEventListener("click", function(event) { + if (!event.target.closest("div.popup-menu")) { + document.querySelectorAll("div.popup-menu:not(.hidden)").forEach(function(m) { + m.classList.add("hidden"); + }); + } + let mm_toggle = document.getElementById("main-menu-toggle"); + if (mm_toggle.checked) { + if (event.target.tagName == "A" || !event.target.closest("#main-menu-button")) { + mm_toggle.checked = false; + } + } + }); + + document.getElementById("main-menu-button").addEventListener("click", function(event) { + let el = event.target; + if (el.tagName === "A") { + let href = el.getAttribute("href"); + if (href !== "") { + event.preventDefault(); + window.history.pushState(null, "", href); + Router.go(); + } + } + }); + + window.addEventListener("popstate", function(event) { + let m = Router._url2module(); + if (m) { + let p = m.pointer; + if (p && p.onpopstate) { + if (p.title) { + Router.update_title(p.title()); + } + p.onpopstate(event.state); + } else { + Router.go(); + } + } + }); + + document.getElementById("main-menu").addEventListener("click", function(event) { + let el = event.target.closest("ul>li"); + if (el) { + el.classList.toggle("closed"); + } + }); + + document.querySelector(".menu-box .about a").addEventListener("click", function(event) { + event.preventDefault(); + setTimeout(function() { + let dlg = new AboutDialog({ + authors: [ + { name: "Aleksey Andreev", url: "https://github.com/liuch", years: "2021-2022" } + ], + documentation: [ + { ancor: "README on GitHub", url: "https://github.com/liuch/dmarc-srg/blob/master/README.md" } + ], + source_code: [ + { ancor: "DmarcSrg on GitHub", url: "https://github.com/liuch/dmarc-srg" } + ] + }); + document.getElementById("main-block").appendChild(dlg.element()); + dlg.show().finally(function() { + dlg.element().remove(); + }); + }, 0); + }); + + Router.go(); +}; + +Router.go = function(url) { + Status.instance().update({ settings: [ "ui.datetime.offset", "ui.ipv4.url", "ui.ipv6.url" ] }).then(function(d) { + if (d) { + Router._update_menu(d.authenticated); + if (d.settings) { + if (d.settings["ui.datetime.offset"]) { + Common.tuneDateTimeOutput(d.settings["ui.datetime.offset"]); + } + Common.ipv4_url = d.settings["ui.ipv4.url"] || ''; + Common.ipv6_url = d.settings["ui.ipv6.url"] || ''; + } + if (d.error_code !== -2) { + try { + Common.checkResult(d); + } catch (err) { + Common.displayError(err); + } + let module = Router._url2module(url); + if (module) { + if (!module.pointer) + module.start(module); + let p = module.pointer; + if (p.oncleardata) + p.oncleardata(); + else + Router._clear_data(); + if (p.title) + Router.update_title(p.title()); + if (p.display) + p.display(); + if (p.update) + p.update(); + } + } + if (d.state && d.state !== "Ok" && !d.error_code && d.message) { + Notification.add({ type: "warn", text: d.message, delay: 20000 }); + } + if (d.version !== Router._app_ver) { + Router._app_ver = d.version; + Router.update_title(); + } + if (d.php_version) { + Router.php_version = d.php_version; + } + } + }); +}; + +Router.app_name = function(version) { + let name = "DmarcSrg"; + if (version && Router._app_ver) { + name += " " + Router._app_ver; + } + return name; +} + +Router.update_title = function(str) { + let title1 = Router.app_name(false); + let title2 = str || Router._title || null; + if (str) { + Router._title = str; + } + document.title = title1 + (title2 && (": " + title2) || ""); + let h1 = document.querySelector("h1"); + if (str === "") { + h1.textContent = Router._initial_header || ""; + } else if (str) { + h1.textContent = title2 || ""; + } +}; + +Router._update_menu = function(authenticated) { + let m_el = document.getElementById("main-menu"); + let l_el = m_el.querySelector("#auth-action"); + if (l_el) { + l_el.remove(); + } + { + let subs = m_el.querySelectorAll(".submenu .selected") + for (let i = 0; i < subs.length; ++i) { + subs[i].classList.remove("selected"); + } + let href = document.location.origin + document.location.pathname; + let f1 = false; + for (let i = 0; i < m_el.children.length; ++i) { + let smenu = m_el.children[i]; + if (smenu !== l_el) { + let f2 = false; + if (!f1) { + let a_ls = smenu.querySelectorAll("ul>li>a"); + for (let k = 0; k < a_ls.length; ++k) { + let a = a_ls[k]; + if (a.href === href) { + f1 = true; + f2 = true; + a.parentElement.classList.add("selected") + break; + } + } + } + if (f2) { + smenu.classList.remove("closed"); + } + else { + smenu.classList.add("closed"); + } + } + } + } + if (authenticated !== "disabled") { + l_el = document.createElement("li"); + l_el.setAttribute("id", "auth-action"); + let a_el = document.createElement("a"); + a_el.setAttribute("href", ""); + if (authenticated == "yes") { + a_el.appendChild(document.createTextNode("Log out")); + a_el.addEventListener("click", function(event) { + event.preventDefault(); + if (!this.classList.contains("disabled")) { + let m_el = this; + m_el.classList.add("disabled"); + window.fetch("logout.php", { + method: "POST", + cache: "no-store", + headers: Object.assign(HTTP_HEADERS, HTTP_HEADERS_POST), + credentials: "same-origin", + body: JSON.stringify({}) + }).then(function(resp) { + if (!resp.ok) + throw new Error("Failed to log out"); + return resp.json(); + }).then(function(data) { + Common.checkResult(data); + Status.instance().reset(); + Router._clear_data(); + Router._update_menu("no"); + Router.update_title(""); + }).catch(function(err) { + Common.displayError(err); + m_el.classList.remove("disabled"); + Notification.add({ type: "error", text: err.message }); + }); + } + }); + } + else if (authenticated == "no") { + a_el.appendChild(document.createTextNode("Log in")); + a_el.addEventListener("click", function(event) { + event.preventDefault(); + LoginDialog.start({ nousername: true }); + }); + } + l_el.appendChild(a_el); + m_el.appendChild(l_el); + } +}; + +Router._clear_data = function() { + remove_all_children(document.getElementById("main-block")); + remove_all_children(document.getElementById("detail-block")); +}; + +Router._modules = { + list: { + start: function(m) { + m.pointer = new ReportList(); + } + }, + report: { + start: function(m) { + m.pointer = ReportWidget.instance(); + } + }, + admin: { + start: function(m) { + m.pointer = new Admin(); + } + }, + files: { + start: function(m) { + m.pointer = new Files(); + } + }, + domains: { + start: function(m) { + m.pointer = new DomainList(); + } + }, + logs: { + start: function(m) { + m.pointer = new Logs(); + } + }, + summary: { + start: function(m) { + m.pointer = new Summary(); + } + }, + settings: { + start: function(m) { + m.pointer = new Settings(); + } + } +}; + +Router._url2module = function(url) { + let rr = /([^\/]*)$/.exec(url || document.location.pathname); + return rr && Router._modules[Router._routes[rr[1]]] || null; +}; + +Router._routes = { + "": "list", + "list.php": "list", + "logs.php": "logs", + "admin.php": "admin", + "files.php": "files", + "report.php": "report", + "domains.php": "domains", + "summary.php": "summary", + "settings.php": "settings" +}; + +window.onload = Router.start; + diff --git a/root/opt/dmarc-srg/js/notification.js b/root/opt/dmarc-srg/js/notification.js new file mode 100644 index 0000000..8bc9990 --- /dev/null +++ b/root/opt/dmarc-srg/js/notification.js @@ -0,0 +1,86 @@ +/** + * dmarc-srg - A php parser, viewer and summary report generator for incoming DMARC reports. + * Copyright (C) 2020 Aleksey Andreev (liuch) + * + * Available at: + * https://github.com/liuch/dmarc-srg + * + * This program is free software: you can redistribute it and/or modify it + * under the terms of the GNU General Public License as published by the Free + * Software Foundation, either version 3 of the License. + * + * This program is distributed in the hope that it will be useful, but WITHOUT + * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or + * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for + * more details. + * + * You should have received a copy of the GNU General Public License along with + * this program. If not, see . + */ + +class Notification { + constructor(params) { + this._params = params; + this._element = this._create_element(); + } + + element() { + return this._element; + } + + _create_element() { + let el = document.createElement("div"); + el.setAttribute("class", "notification"); + if (this._params.type === "error") + el.classList.add("notif-error"); + else if (this._params.type === "warn") + el.classList.add("notif-warn"); + else + el.classList.add("notif-info"); + { + let text = this._params.text; + if (typeof(text) !== "object") + text = [ text ]; + for (let i = 0; ; ) { + el.appendChild(document.createTextNode(text[i])); + ++i; + if (i == text.length) + break; + el.appendChild(document.createElement("br")); + } + } + let btn = document.createElement("button"); + btn.setAttribute("type", "button"); + btn.setAttribute("class", "notif-close"); + btn.appendChild(document.createTextNode("x")); + el.appendChild(btn); + el.addEventListener("click", function(event) { + if (event.target.classList.contains("notif-close")) + this.remove(); + }); + if (this._params.delay > 0) { + setTimeout(function() { + el.style.transition = "opacity 2s ease-in-out"; + el.style.opacity = 0; + setTimeout(function() { el.remove(); }, 2000); + }, this._params.delay); + } + return el; + } +} + +Notification.add = function(params) { + for (let key in Notification.defaults) { + if (params[key] === undefined) + params[key] = Notification.defaults[key]; + } + let notif = new Notification(params); + document.getElementById("notifications-block").appendChild(notif.element()); + return notif; +} + +Notification.defaults = { + type: "info", + delay: 5000 +}; + diff --git a/root/opt/dmarc-srg/js/report.js b/root/opt/dmarc-srg/js/report.js new file mode 100644 index 0000000..fc7e0ff --- /dev/null +++ b/root/opt/dmarc-srg/js/report.js @@ -0,0 +1,427 @@ +/** + * dmarc-srg - A php parser, viewer and summary report generator for incoming DMARC reports. + * Copyright (C) 2020 Aleksey Andreev (liuch) + * + * Available at: + * https://github.com/liuch/dmarc-srg + * + * This program is free software: you can redistribute it and/or modify it + * under the terms of the GNU General Public License as published by the Free + * Software Foundation, either version 3 of the License. + * + * This program is distributed in the hope that it will be useful, but WITHOUT + * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or + * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for + * more details. + * + * You should have received a copy of the GNU General Public License along with + * this program. If not, see . + */ + +class ReportWidget { + constructor() { + this._rep_id = null; + this._element = null; + this._close_btn = null; + this._id_element = null; + this._cn_element = null; + this._onclose_act = null; + } + + display() { + if (!this._element || !document.contains(this._element)) { + let cn = document.getElementById("main-block"); + cn.appendChild(this.element()); + } + } + + update() { + this.show_report().catch(function(err) { + Common.displayError(err); + }); + } + + onpopstate() { + this.display(); + this.update(); + } + + oncleardata() { + if (!this._element || !document.contains(this._element)) { + remove_all_children(document.getElementById("main-block")); + remove_all_children(document.getElementById("detail-block")); + } + } + + show_report(domain, report_id) { + this.element(); + let that = this; + return new Promise(function(resolve, reject) { + if (!domain || !report_id) { + let sp = (new URL(document.location.href)).searchParams; + domain = sp.get("domain"); + report_id = sp.get("report_id"); + if (!domain || !report_id) { + set_error_status(this._cn_element, err.message); + reject(new Error("Domain and report_id must be specified")); + } + } + that._id_element.childNodes[0].nodeValue = report_id; + set_wait_status(that._cn_element); + that._rep_id = report_id; + that._element.classList.remove("report-hidden"); + that._close_btn.classList.add("active"); + let rep = new Report(domain, report_id); + rep.fetch().then(function() { + if (that._rep_id === report_id) { + remove_all_children(that._cn_element); + that._cn_element.appendChild(rep.element()); + rep.set_value("seen", true).then(function(data) { + Common.checkResult(data); + }).catch(function(err) { + Common.displayError(err); + }); + } + resolve(); + }).catch(function(err) { + let err_str = rep.error_message() || "Failed to get the report data"; + set_error_status(that._cn_element, err_str); + reject(err); + }); + }); + } + + element() { + if (!this._element) { + this._gen_element(); + } + return this._element; + } + + title() { + return "Report Detail"; + } + + focus() { + let el = this._element; + if (el) + el.focus(); + } + + hide() { + if (this._element && !this._element.classList.contains("report-hidden")) { + this._element.classList.add("report-hidden"); + this._close_btn.classList.remove("active"); + return true; + } + return false; + } + + close() { + if (this.hide() && this._onclose_act) + this._onclose_act(); + } + + onclose(fn) { + this._onclose_act = typeof(fn) == "function" && fn || null; + } + + _gen_element() { + let el = document.createElement("div"); + el.setAttribute("class", "report-modal report-hidden"); + el.setAttribute("tabindex", -1); + el.addEventListener("click", function(event) { + if (event.target.classList.contains("close-btn") || event.target.classList.contains("report-header")) { + if (window.history.state && window.history.state.from === "list") + this.close(); + else + window.history.go(-1); + } + }.bind(this)); + + let hd = document.createElement("div"); + hd.setAttribute("class", "report-header"); + { + let ht = document.createElement("span"); + ht.setAttribute("class", "header-text"); + ht.appendChild(document.createTextNode("DMARC Report (Id: ")); + + let id = document.createElement("span"); + id.setAttribute("id", "report-modal-id"); + id.appendChild(document.createTextNode("?")); + this._id_element = id; + ht.appendChild(id); + + ht.appendChild(document.createTextNode(")")); + hd.appendChild(ht); + } + el.appendChild(hd); + + let bd = document.createElement("div"); + bd.setAttribute("class", "body"); + + let cn = document.createElement("div"); + cn.setAttribute("class", "content"); + this._cn_element = cn; + bd.appendChild(cn); + + let cb = document.createElement("button"); + cb.setAttribute("class", "btn close-btn"); + cb.appendChild(document.createTextNode("Close")); + this._close_btn = cb; + bd.appendChild(cb); + + el.appendChild(bd); + + this._element = el; + } +} + +ReportWidget.instance = function() { + if (!ReportWidget._instance) { + ReportWidget._instance = new ReportWidget(); + ReportWidget._instance.onclose(function() { + window.history.go(-1); + }); + } + return ReportWidget._instance; +} + +class Report { + constructor(domain, report_id) { + this._data = null; + this._error = false; + this._error_message = null; + this._domain = domain; + this._report_id = report_id; + } + + id() { + return this._report_id; + } + + error() { + return this._error; + } + + error_message() { + return this._error_message; + } + + fetch() { + let u_params = new URLSearchParams(); + u_params.set("domain", this._domain); + u_params.set("report_id", this._report_id); + + let that = this; + return window.fetch("report.php?" + u_params.toString(), { + method: "GET", + cache: "no-store", + headers: HTTP_HEADERS, + credentials: "same-origin" + }).then(function(resp) { + if (!resp.ok) + throw new Error("Failed to fetch report data"); + return resp.json(); + }).then(function(data) { + Common.checkResult(data); + that._data = data.report; + that._error = false; + that._error_message = null; + }).catch(function(err) { + that._data = null; + that._error = true; + that._error_message = err.message; + throw err; + }); + } + + element() { + return this._create_element(); + } + + set_value(name, value) { + let definitions = { + "seen": "boolean" + }; + + if (value === undefined || definitions[name] !== typeof(value)) { + console.warn("Set report value: Incorrect value"); + return Promise.resolve({}); + } + + let url_params = new URLSearchParams(); + url_params.set("action", "set"); + url_params.set("domain", this._domain); + url_params.set("report_id", this._report_id); + return window.fetch("report.php?" + url_params.toString(), { + method: "POST", + cache: "no-store", + headers: Object.assign(HTTP_HEADERS, HTTP_HEADERS_POST), + credentials: "same-origin", + body: JSON.stringify({ name: name, value: value }) + }).then(function(resp) { + if (!resp.ok) + throw new Error("Failed to set report value"); + return resp.json(); + }).catch(function(err) { + Common.displayError(err); + }); + } + + _create_element() { + let el = document.createDocumentFragment(); + let md = document.createElement("div"); + md.setAttribute("class", "report-metadata"); + md.appendChild(this._create_data_item("Report Id", this._data.report_id)); + md.appendChild(this._create_data_item("Reporting organization", this._data.org_name)); + md.appendChild(this._create_data_item("Domain", this._data.domain)); + let d1 = new Date(this._data.date.begin); + let d2 = new Date(this._data.date.end); + md.appendChild(this._create_data_item("Date range", d1.toUIString(true) + " - " + d2.toUIString(true))); + md.appendChild(this._create_data_item("Email", this._data.email)); + if (this._data.extra_contact_info) + md.appendChild(this._create_data_item("Extra contact info", this._data.extra_contact_info)); + md.appendChild(this._create_data_item("Published policy", this._create_pub_policy_fragment(this._data.policy))); + if (this._data.error_string) + md.appendChild(this._create_data_item("Error string", "???")); + md.appendChild(this._create_data_item("Loaded time", (new Date(this._data.loaded_time)).toUIString())); + el.appendChild(md); + // Records + let rs = document.createElement("div"); + rs.setAttribute("class", "report-records"); + let hd = document.createElement("h5"); + hd.appendChild(document.createTextNode("Records")); + rs.appendChild(hd); + this._data.records.forEach(function(rec) { + let tl = document.createElement("div"); + tl.setAttribute("class", "report-record round-border"); + let hd = document.createElement("div"); + hd.setAttribute("class", "header"); + hd.appendChild(this._create_data_fragment("IP-address", Common.makeIpElement(rec.ip))); + tl.appendChild(hd); + tl.appendChild(this._create_data_item("Message count", rec.count)); + tl.appendChild(this._create_data_item("Policy evaluated", this._create_ev_policy_fragment(rec))); + if (rec.reason) + tl.appendChild(this._create_data_item("Evaluated reason", this._create_reason_fragment(rec.reason))); + tl.appendChild(this._create_data_item("Identifiers", this._create_identifiers_fragment(rec))); + tl.appendChild(this._create_data_item("DKIM auth", this._create_dkim_auth_fragment(rec.dkim_auth))); + tl.appendChild(this._create_data_item("SPF auth", this._create_spf_auth_fragment(rec.spf_auth))); + rs.appendChild(tl); + + }, this); + el.appendChild(rs); + return el; + } + + _get_row_container(ctn, data) { + if (data.length < 2) + return ctn; + let div = document.createElement("div") + ctn.appendChild(div); + return div; + } + + _create_data_item(title, data) { + let el = document.createElement("div"); + el.setAttribute("class", "report-item"); + el.appendChild(this._create_data_fragment(title, data)); + return el; + } + + _create_data_fragment(title, data) { + let fr = document.createDocumentFragment(); + let tl = document.createElement("span"); + tl.appendChild(document.createTextNode(title + ": ")); + tl.setAttribute("class", "title"); + fr.appendChild(tl); + if (typeof(data) !== "object") + data = document.createTextNode(data); + let dt = document.createElement(data.childNodes.length > 1 ? "div" : "span"); + dt.setAttribute("class", "value"); + dt.appendChild(data); + if (Array.from(dt.children).find(function(ch) { + return ch.tagName === "DIV"; + })) dt.classList.add("rows"); + fr.appendChild(dt); + return fr; + } + + _create_ev_policy_fragment(data) { + let fr = document.createDocumentFragment(); + if (data.dkim_align) + fr.appendChild(create_report_result_element("DKIM", data.dkim_align, true)); + if (data.spf_align) + fr.appendChild(create_report_result_element("SPF", data.spf_align, true)); + if (data.disposition) + fr.appendChild(create_report_result_element("disposition", data.disposition, true, "")); + return fr; + } + + _create_reason_fragment(data) { + let fr = document.createDocumentFragment(); + data.forEach(function(rec) { + let ctn = this._get_row_container(fr, data); + if (rec.type) + ctn.appendChild(create_report_result_element("type", rec.type, true, "")); + if (rec.comment) + ctn.appendChild(create_report_result_element("comment", rec.comment, true, "")); + }.bind(this)); + return fr; + } + + _create_identifiers_fragment(data) { + let fr = document.createDocumentFragment(); + if (data.header_from) + fr.appendChild(create_report_result_element("header_from", data.header_from, true, "")); + if (data.envelope_from) + fr.appendChild(create_report_result_element("envelope_from", data.envelope_from, true, "")); + if (data.envelope_to) + fr.appendChild(create_report_result_element("envelope_to", data.envelope_to, true, "")); + return fr; + } + + _create_dkim_auth_fragment(data) { + if (!data) + return "n/a"; + let fr = document.createDocumentFragment(); + data.forEach(function(rec) { + let ctn = this._get_row_container(fr, data); + if (rec.domain) + ctn.appendChild(create_report_result_element("domain", rec.domain, true, "")); + if (rec.selector) + ctn.appendChild(create_report_result_element("selector", rec.selector, true, "")); + if (rec.result) + ctn.appendChild(create_report_result_element("result", rec.result, true)); + }.bind(this)); + return fr; + } + + _create_spf_auth_fragment(data) { + if (!data) + return "n/a"; + let fr = document.createDocumentFragment(); + data.forEach(function(rec) { + let ctn = this._get_row_container(fr, data); + if (rec.domain) + ctn.appendChild(create_report_result_element("domain", rec.domain, true, "")); + if (rec.result) + ctn.appendChild(create_report_result_element("result", rec.result, true)); + }.bind(this)); + return fr; + } + + _create_pub_policy_fragment(data) { + if (!data) + return "n/a"; + let fr = document.createDocumentFragment(); + [ + [ "adkim", data.adkim ], [ "aspf", data.aspf ], [ "p", data.p ], [ "sp", data.sp ], + [ "np", data.np ], [ "pct", data.pct ], [ "fo", data.fo ] + ].forEach(function(pol) { + if (pol[1]) fr.appendChild(create_report_result_element(pol[0], pol[1], true, "")); + }); + return fr; + } +} + diff --git a/root/opt/dmarc-srg/js/settings.js b/root/opt/dmarc-srg/js/settings.js new file mode 100644 index 0000000..442c953 --- /dev/null +++ b/root/opt/dmarc-srg/js/settings.js @@ -0,0 +1,355 @@ +/** + * dmarc-srg - A php parser, viewer and summary report generator for incoming DMARC reports. + * Copyright (C) 2020 Aleksey Andreev (liuch) + * + * Available at: + * https://github.com/liuch/dmarc-srg + * + * This program is free software: you can redistribute it and/or modify it + * under the terms of the GNU General Public License as published by the Free + * Software Foundation, either version 3 of the License. + * + * This program is distributed in the hope that it will be useful, but WITHOUT + * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or + * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for + * more details. + * + * You should have received a copy of the GNU General Public License along with + * this program. If not, see . + */ + +class Settings { + constructor() { + this._table = null; + this._scrool = null; + this._sort = "ascent"; + this._element = document.getElementById("main-block"); + } + + display() { + this._make_scroll_container(); + this._make_table(); + this._scroll.appendChild(this._table.element()); + this._element.appendChild(this._scroll); + this._table.focus(); + } + + update() { + this._fetch_settings(); + } + + title() { + return "Advanced Settings"; + } + + _fetch_settings() { + this._table.display_status("wait"); + let that = this; + + let uparams = new URLSearchParams(); + uparams.set("direction", this._sort); + + return window.fetch("settings.php?" + uparams.toString(), { + method: "GET", + cache: "no-store", + headers: HTTP_HEADERS, + credentials: "same-origin" + }).then(function(resp) { + if (!resp.ok) + throw new Error("Failed to fetch the settings"); + return resp.json(); + }).then(function(data) { + that._table.display_status(null); + Common.checkResult(data); + let d = { more: data.more }; + d.rows = data.settings.map(function(it) { + return that._make_row_data(it); + }); + that._table.clear(); + let fr = new ITableFrame(d, 0); + that._table.add_frame(fr); + that._table.focus(); + }).catch(function(err) { + Common.displayError(err); + that._table.display_status("error", err.message); + }); + } + + _make_scroll_container() { + this._scroll = document.createElement("div"); + this._scroll.setAttribute("class", "main-table-container"); + } + + _make_table() { + this._table = new ITable({ + class: "main-table small-cards", + onclick: function(row) { + let data = row.userdata(); + if (data) { + this._display_edit_dialog(data); + } + }.bind(this), + onsort: function(col) { + let dir = col.sorted() && "toggle" || "ascent"; + this._table.set_sorted(col.name(), dir); + this._sort = col.sorted(); + this.update(); + }.bind(this), + onfocus: function(el) { + scroll_to_element(el, this._scroll); + }.bind(this) + }); + [ + { content: "Name", name: "name", sortable: true }, + { content: "Value", name: "value" }, + { content: "Description", name: "descr" } + ].forEach(function(col) { + let c = this._table.add_column(col); + if (c.name() === "name") { + c.sort(this._sort); + } + }, this); + } + + _make_row_data(d) { + let rd = { cells: [], userdata: d.name }; + rd.cells.push({ content: d.name, class: "setting-name", label: "Name " }); + rd.cells.push({ content: d.value, class: "setting-value", label: "Value " }); + rd.cells.push({ content: Settings._descriptions_short[d.name] || Settings._descriptions[d.name] || "No description", label: "Description " }); + if (d.value !== d.default) { + rd.class = "custom-value"; + } + return rd; + } + + _display_edit_dialog(name) { + let dlg = new SettingEditDialog({ + name: name, + description: Settings._descriptions[name] + }); + this._element.appendChild(dlg.element()); + let that = this; + dlg.show().then(function(d) { + if (d) { + that.update(); + } + }).finally(function() { + dlg.element().remove(); + that._table.focus(); + }); + } + + static _descriptions = { + "status.emails-for-last-n-days": "The period in days for which statistics are displayed in the status block.", + "report-view.sort-records-by": "How records are sorted in the report view dialog.", + "log-view.sort-list-by": "How report log items are sorted by default in the log view dialog.", + "ui.datetime.offset": "Time zone offset of displayed dates in UI. Auto means that the report range is in UTC and all other dates are in local.", + "ui.ipv4.url": "The URL that will be used as a link when clicking on the IPv4 address. For example: https://somewhoisservice.net/ip/{$ip}, where {$ip} is IP address from the UI. Use {$eip} if you want to insert url encoded IP address. Use an empty string to disable.", + "ui.ipv6.url": "The URL that will be used as a link when clicking on the IPv6 address. For example: https://somewhoisservice.net/ip/{$ip}, where {$ip} is IP address from the UI. Use {$eip} if you want to insert url encoded IP address. Use an empty string to disable." + }; + + static _descriptions_short = { + "ui.datetime.offset": "Time zone offset of displayed dates in UI.", + "ui.ipv4.url": "The URL that will be used as a link when clicking on the IPv4 address.", + "ui.ipv6.url": "The URL that will be used as a link when clicking on the IPv6 address." + }; +} + +class SettingEditDialog extends ModalDialog { + constructor(param) { + super({ title: "Setting dialog", buttons: [ "ok", "close" ] }); + this._data = param || {}; + this._content = null; + this._table = null; + this._val_el = null; + this._val_tp = null; + this._desc_el = null; + this._save_bt = null; + this._fetched = false; + } + + _gen_content() { + this._table = document.createElement("div"); + this._table.setAttribute("class", "titled-input"); + this._content.appendChild(this._table); + this._content.classList.add("vertical-content"); + + let nm = document.createElement("input"); + nm.setAttribute("type", "text"); + nm.setAttribute("disabled", "disabled"); + nm.setAttribute("value", this._data.name); + this._insert_row("Name", nm); + + let val = document.createElement("input"); + val.setAttribute("type", "text"); + val.disabled = true; + this._insert_row("Value", val); + this._val_el = val; + this._val_tp = "string"; + + let desc = document.createElement("textarea"); + desc.setAttribute("disabled", "disabled"); + if (this._data.description) { + desc.appendChild(document.createTextNode(this._data.description)); + } + desc.classList.add("description"); + this._insert_row("Description", desc); + this._desc_el = desc; + + this._save_bt = this._buttons[1]; + this._save_bt.disabled = true; + + this._table.addEventListener("input", function(event) { + if (this._fetched && event.target == this._val_el) { + let e_val = null; + switch (this._val_tp) { + case "select": + e_val = this._val_el.value; + break; + case "integer": + e_val = this._val_el.valueAsNumber; + break; + } + this._save_bt.disabled = (e_val === this._data.value); + } + }.bind(this)); + + this._fetch_data(); + } + + _add_button(container, text, type) { + if (type == "submit") { + text = "Save"; + } + super._add_button(container, text, type); + } + + _insert_row(text, val_el) { + let lb = document.createElement("label"); + let sp = document.createElement("span"); + sp.appendChild(document.createTextNode(text + ": ")); + lb.appendChild(sp); + lb.appendChild(val_el); + this._table.appendChild(lb); + } + + _fetch_data() { + this._enable_ui(false); + this._content.appendChild(set_wait_status()); + let uparams = new URLSearchParams(); + uparams.set("name", this._data.name); + + let that = this; + window.fetch("settings.php?" + uparams.toString(), { + method: "GET", + cache: "no-store", + headers: HTTP_HEADERS, + credentials: "same-origin" + }).then(function(resp) { + if (!resp.ok) + throw new Error("Failed to fetch setting data for " + that._data.name); + return resp.json(); + }).then(function(data) { + Common.checkResult(data); + that._data.value = data.value; + that._update_ui(data); + that._enable_ui(true); + that._fetched = true; + }).catch(function(err) { + Common.displayError(err); + that._content.appendChild(set_error_status(null, err.message)); + }).finally(function() { + that._content.querySelector(".wait-message").remove(); + }); + } + + _enable_ui(en) { + this._val_el.disabled = !en; + this._update_first_last(); + if (this._first) { + this._first.focus(); + } + } + + _update_ui(data) { + if (data.type !== this._val_tp) { + let new_el = null; + if (data.type == "integer") { + new_el = document.createElement("input"); + new_el.setAttribute("type", "number"); + if (typeof(data.minimum) == "number") { + new_el.setAttribute("min", data.minimum); + } + if (typeof(data.maximum) == "number") { + new_el.setAttribute("max", data.maximum); + } + } else if (data.type == "select") { + new_el = document.createElement("select"); + data.options.forEach(function(op) { + let opt_el = document.createElement("option"); + opt_el.setAttribute("value", op); + opt_el.appendChild(document.createTextNode(op)); + if (op === data.value) { + opt_el.setAttribute("selected", "selected"); + } + new_el.appendChild(opt_el); + }); + } + if (new_el) { + new_el.setAttribute("required", "required"); + this._val_el.replaceWith(new_el); + this._val_el = new_el; + } + this._val_tp = data.type; + } + this._val_el.value = data.value; + } + + _submit() { + this._save_bt.disabled = true; + this._enable_ui(false); + let em = this._content.querySelector(".error-message"); + if (em) { + em.remove(); + } + this._content.appendChild(set_wait_status()); + + let body = {}; + body.name = this._data.name; + if (this._val_tp == "integer") { + body.value = this._val_el.valueAsNumber; + } + else { + body.value = this._val_el.value; + } + body.action = "update"; + + let that = this; + window.fetch("settings.php", { + method: "POST", + cache: "no-store", + headers: Object.assign(HTTP_HEADERS, HTTP_HEADERS_POST), + credentials: "same-origin", + body: JSON.stringify(body) + }).then(function(resp) { + if (!resp.ok) + throw new Error("Failed to update the setting"); + return resp.json(); + }).then(function(data) { + Common.checkResult(data); + that._data.value = that._val_el.value; + that._result = body; + that.hide(); + Notification.add({ type: "info", text: (data.message || "Updated successfully!") }); + }).catch(function(err) { + Common.displayError(err); + that._content.appendChild(set_error_status(null, err.message)); + Notification.add({ type: "error", text: err.message }); + }).finally(function() { + that._content.querySelector(".wait-message").remove(); + that._save_bt.disabled = false; + that._enable_ui(true); + }); + } +} + diff --git a/root/opt/dmarc-srg/js/status.js b/root/opt/dmarc-srg/js/status.js new file mode 100644 index 0000000..c2ed644 --- /dev/null +++ b/root/opt/dmarc-srg/js/status.js @@ -0,0 +1,206 @@ +/** + * dmarc-srg - A php parser, viewer and summary report generator for incoming DMARC reports. + * Copyright (C) 2020 Aleksey Andreev (liuch) + * + * Available at: + * https://github.com/liuch/dmarc-srg + * + * This program is free software: you can redistribute it and/or modify it + * under the terms of the GNU General Public License as published by the Free + * Software Foundation, either version 3 of the License. + * + * This program is distributed in the hope that it will be useful, but WITHOUT + * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or + * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for + * more details. + * + * You should have received a copy of the GNU General Public License along with + * this program. If not, see . + */ + +class Status { + constructor() { + this._data = {}; + } + + update(params) { + return this._fetch(params || {}).then(function(data) { + return data; + }).catch(function(err) { + Common.displayError(err); + }); + } + + reset() { + this._data.emails = null; + this._data.error_code = 0; + this._update_block(); + } + + error() { + return this._data.error_code && this._data.error_code !== 0 || false; + } + + _fetch(params) { + let p_string = ''; + if (params.settings && params.settings.length) { + let uparams = new URLSearchParams(); + uparams.set("settings", params.settings.join(',')); + p_string = '?' + uparams.toString(); + } + + let that = this; + return new Promise(function(resolve, reject) { + window.fetch("status.php" + p_string, { + method: "GET", + cache: "no-store", + headers: HTTP_HEADERS, + credentials: "same-origin" + }).then(function(resp) { + if (!resp.ok) + throw new Error("Failed to fetch the status"); + return resp.json(); + }).then(function(data) { + that._data = { + state: data.state, + error_code: data.error_code, + message: data.message, + emails: data.emails + }; + if (data.exeption) + that._data.exeption = data.exeption; + that._update_block(); + if (data.error_code === -2) { + LoginDialog.start({ nousername: true }); + } + resolve(data); + }).catch(function(err) { + that._data = { + state: "Err", + error_code: -100, + message: err.message + }; + that._update_block(); + reject(err); + }); + }); + } + + _update_block() { + this._ensure_element_created(); + if (this._data.error_code) { + Notification.add({ text: "[" + this._data.error_code + "] " + this._data.message, type: "error" }); + } + if (!this._data.emails) { + this._data.emails = { + days: 0, + total: -1, + spf_aligned: 0, + dkim_aligned: 0, + dkim_spf_aligned: 0 + }; + } + let days = this._data.emails.days; + let total = this._data.emails.total; + let passed = this._data.emails.dkim_spf_aligned; + let forwarded = this._data.emails.dkim_aligned + this._data.emails.spf_aligned; + let failed = total - passed - forwarded; + this._set_element_data( + "processed", + (total === -1 || total === undefined) && "?" || total, + total !== -1 && "state-blue" || null + ); + this._set_element_data( + "passed", + this._formatted_statistic(passed, total), + total !== -1 && "state-green" || null + ); + this._set_element_data( + "forwarded", + this._formatted_statistic(forwarded, total), + total !== -1 && "state-green" || null + ); + this._set_element_data( + "failed", + this._formatted_statistic(failed, total), + total !== -1 && "state-red" || null + ); + { + let el = document.getElementById("stat-block"); + if (days > 0) { + el.setAttribute("title", "Statistics for the last " + days + " days"); + } + else { + el.removeAttribute("title"); + } + } + } + + _formatted_statistic(val, total) { + if (total === -1) + return "?"; + if (!total) + return "-"; + if (val === 0) + return "0"; + let rval = Math.round(val / total * 100); + return (val > 0 && rval === 0 && "+" || "" ) + rval + "%"; + } + + _set_element_data(id, data, c_name) { + let el1 = document.getElementById("stat-" + id); + if (c_name) + el1.setAttribute("class", c_name); + else + el1.removeAttribute("class"); + let el2 = el1.querySelector(".stat-val") + el2.childNodes[0].nodeValue = data; + } + + _ensure_element_created() { + let block = document.getElementById("stat-block"); + if (block && block.children.length === 0) { + let ul = document.createElement("ul"); + Status._element_list.forEach(function(id) { + let li = document.createElement("li"); + let div = document.createElement("div"); + div.setAttribute("id", "stat-" + id); + let val = document.createElement("span"); + val.setAttribute("class", "stat-val state-text"); + val.appendChild(document.createTextNode("?")); + let msg = document.createElement("span"); + msg.setAttribute("class", "stat-msg"); + msg.appendChild(document.createTextNode(Status._element_data[id].text)); + div.appendChild(val); + div.appendChild(msg); + li.appendChild(div); + ul.appendChild(li); + }); + block.appendChild(ul); + } + } +} + +Status.instance = function() { + if (!this._instance) + this._instance = new Status(); + return this._instance; +} + +Status._element_list = [ "processed", "passed", "forwarded", "failed" ]; + +Status._element_data = { + processed: { + text: "Emails processed" + }, + passed: { + text: "Fully aligned" + }, + forwarded: { + text: "Partially aligned" + }, + failed: { + text: "Not aligned" + } +}; + diff --git a/root/opt/dmarc-srg/js/summary.js b/root/opt/dmarc-srg/js/summary.js new file mode 100644 index 0000000..65db930 --- /dev/null +++ b/root/opt/dmarc-srg/js/summary.js @@ -0,0 +1,537 @@ +/** + * dmarc-srg - A php parser, viewer and summary report generator for incoming DMARC reports. + * Copyright (C) 2020 Aleksey Andreev (liuch) + * + * Available at: + * https://github.com/liuch/dmarc-srg + * + * This program is free software: you can redistribute it and/or modify it + * under the terms of the GNU General Public License as published by the Free + * Software Foundation, either version 3 of the License. + * + * This program is distributed in the hope that it will be useful, but WITHOUT + * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or + * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for + * more details. + * + * You should have received a copy of the GNU General Public License along with + * this program. If not, see . + */ + +class Summary { + constructor(id) { + this._report = null; + this._element = document.getElementById("main-block"); + this._container = null; + this._options_data = null; + this._options_block = null; + this._report_block = null; + } + + display() { + this._create_container(); + this._element.appendChild(this._container); + this._create_options_block(); + this._create_report_block(); + this._container.appendChild(this._options_block); + this._container.appendChild(document.createElement("hr")); + this._container.appendChild(this._report_block); + } + + update() { + this._handle_url_params(); + this._update_options_block(); + this._fetch_report(); + } + + title() { + return "Summary Reports"; + } + + _handle_url_params() { + let url_params = new URL(document.location.href).searchParams; + let domain = url_params.get("domain"); + let period = url_params.get("period"); + let format = url_params.get("format"); + if (domain && period) { + this._options_data = { domain: domain, period: period, format: format || "text" }; + } else { + this._options_data = null; + } + } + + _create_container() { + this._container = document.createElement("div"); + this._container.setAttribute("class", "panel-container round-border"); + } + + _create_options_block() { + let opts = document.createElement("div"); + opts.setAttribute("class", "options-block"); + opts.appendChild(document.createTextNode("Report options: ")); + opts.appendChild(document.createTextNode("none")); + + let btn = document.createElement("button"); + btn.setAttribute("class", "options-button"); + btn.appendChild(document.createTextNode("Change")); + btn.addEventListener("click", function(event) { + this._display_dialog(); + }.bind(this)); + opts.appendChild(btn); + + this._options_block = opts; + } + + _update_options_block() { + let text = "none"; + if (this._options_data) { + text = "domain=" + this._options_data.domain + " period=" + this._options_data.period; + } + this._options_block.childNodes[1].textContent = text; + } + + _create_report_block() { + this._report_block = document.createElement("div"); + this._report_block.setAttribute("class", "summary-report"); + } + + _display_dialog() { + let dlg = new OptionsDialog(this._options_data); + document.getElementById("main-block").appendChild(dlg.element()); + dlg.show().then(function(d) { + if (!d) { + return; + } + let url = new URL(document.location.href); + url.searchParams.set("domain", d.domain); + let period = d.period; + if (period === "lastndays") { + period += ":" + d.days; + } + url.searchParams.set("period", period); + url.searchParams.set("format", d.format); + window.history.replaceState(null, "", url.toString()); + remove_all_children(this._element); + this.display(); + this.update(); + }.bind(this)).finally(function() { + this._options_block.lastChild.focus(); + }.bind(this)); + } + + _fetch_report() { + remove_all_children(this._report_block); + if (!this._options_data) { + this._report_block.appendChild(document.createTextNode("Report options are not selected")); + return; + } + this._report_block.appendChild(set_wait_status()); + let uparams = new URLSearchParams(); + let domain = this._options_data.domain; + uparams.set("domain", domain); + uparams.set("period", this._options_data.period); + uparams.set("format", this._options_data.format === "html" ? "raw" : "text"); + window.fetch("summary.php?mode=report&" + uparams.toString(), { + method: "GET", + cache: "no-store", + headers: HTTP_HEADERS, + credentials: "same-origin" + }).then(function(resp) { + if (!resp.ok) { + throw new Error("Failed to fetch the report"); + } + return resp.json(); + }).then(function(report) { + Common.checkResult(report); + report.domain = domain; + this._report = new SummaryReport(report); + this._display_report(); + }.bind(this)).catch(function(err) { + Common.displayError(err); + set_error_status(this._report_block, 'Error: ' + err.message); + }.bind(this)).finally(function() { + let wm = this._report_block.querySelector(".wait-message"); + if (wm) { + wm.remove(); + } + }.bind(this)); + } + + _display_report() { + let el = null; + let text = this._report.text(); + if (text) { + el = document.createElement("pre"); + el.appendChild(document.createTextNode(this._report.text())); + } else { + el = this._report.html(); + if (!el) { + el = document.createElement("p"); + el.appendChild(document.createTextNode("No data")); + } + } + this._report_block.appendChild(el); + } +} + +class OptionsDialog extends ModalDialog { + constructor(params) { + super({ title: "Report options", buttons: [ "apply", "reset" ] }); + this._data = params || {}; + this._content = null; + this._domains = null; + this._ui_data = [ + { name: "domain", title: "Domain" }, + { name: "period", title: "Period" }, + { name: "days", title: "Days", type: "input" }, + { name: "format", title: "Format" } + ]; + } + + _gen_content() { + let container = document.createElement("div"); + container.setAttribute("class", "titled-input"); + this._content.appendChild(container); + this._content.classList.add("vertical-content"); + this._ui_data.forEach(function(row) { + let i_el = this._add_option_row(row.name, row.title, container, row.type); + if (row.name === "days") { + i_el.setAttribute("type", "number"); + i_el.setAttribute("min", "1"); + i_el.setAttribute("max", "9999"); + i_el.setAttribute("value", ""); + } + row.element = i_el; + }, this); + this._ui_data[1].element.addEventListener("change", function(event) { + let days_el = this._ui_data[2].element; + if (event.target.value === "lastndays") { + days_el.disabled = false; + delete days_el.dataset.disabled; + days_el.value = days_el.dataset.value || "1"; + } else { + days_el.disabled = true; + days_el.dataset.value = days_el.value || "1"; + days_el.dataset.disabled = true; + days_el.value = ""; + } + }.bind(this)); + this._update_period_element(); + this._update_format_element(); + + if (!this._domains) { + this._fetch_data(); + } + } + + _submit() { + let res = { + domain: this._ui_data[0].element.value, + period: this._ui_data[1].element.value, + format: this._ui_data[3].element.value + }; + if (res.period === "lastndays") { + res.days = parseInt(this._ui_data[2].element.value) || 1; + } + this._result = res; + this.hide(); + } + + _add_option_row(name, title, p_el, type) { + let l_el = document.createElement("label"); + p_el.appendChild(l_el); + + let t_el = document.createElement("span"); + t_el.appendChild(document.createTextNode(title + ": ")); + l_el.appendChild(t_el); + + let n_el = document.createElement(type || "select"); + n_el.setAttribute("name", name); + l_el.appendChild(n_el); + + return n_el; + } + + _update_domain_element() { + let el = this._ui_data[0].element; + remove_all_children(el); + let c_val = this._data.domain || ""; + if (this._domains) { + this._domains.forEach(function(name) { + let opt = document.createElement("option"); + opt.setAttribute("value", name); + if (name === c_val) { + opt.setAttribute("selected", ""); + } + opt.appendChild(document.createTextNode(name)); + el.appendChild(opt); + }); + } + } + + _update_period_element() { + let el = this._ui_data[1].element; + let c_val = this._data.period && this._data.period.split(":") || [ "lastweek" ]; + [ + [ "lastweek", "Last week"], + [ "lastmonth", "Last month" ], + [ "lastndays", "Last N days" ] + ].forEach(function(it) { + let opt = document.createElement("option"); + opt.setAttribute("value", it[0]); + if (it[0] === c_val[0]) { + opt.setAttribute("selected", ""); + } + opt.appendChild(document.createTextNode(it[1])); + el.appendChild(opt); + }); + if (c_val[1]) { + let val = parseInt(c_val[1]); + let i_el = this._ui_data[2].element; + i_el.setAttribute("value", val); + i_el.dataset.value = val; + } + el.dispatchEvent(new Event("change")); + } + + _update_format_element() { + let el = this._ui_data[3].element; + let cv = this._data.format || "text"; + [ + [ "text", "Plain text" ], + [ "html", "HTML" ] + ].forEach(function(it) { + let opt = document.createElement("option"); + opt.setAttribute("value", it[0]); + if (it[0] === cv) { + opt.setAttribute("selected", ""); + } + opt.appendChild(document.createTextNode(it[1])); + el.appendChild(opt); + }); + } + + _enable_ui(enable) { + let list = this._element.querySelector("form").elements; + for (let i = 0; i < list.length; ++i) { + let el = list[i]; + el.disabled = !enable || el.dataset.disabled; + } + } + + _fetch_data() { + this._enable_ui(false); + this._content.appendChild(set_wait_status()); + window.fetch("summary.php?mode=options", { + method: "GET", + cache: "no-store", + headers: HTTP_HEADERS, + credentials: "same-origin" + }).then(function(resp) { + if (!resp.ok) { + throw new Error("Failed to fetch the report options list"); + } + return resp.json(); + }).then(function(data) { + Common.checkResult(data); + this._domains = data.domains; + this._update_domain_element(); + this._enable_ui(true); + }.bind(this)).catch(function(err) { + Common.displayError(err); + this._content.appendChild(set_error_status()); + }.bind(this)).finally(function() { + this._content.querySelector(".wait-message").remove(); + }.bind(this)); + } + + _reset() { + window.setTimeout(function() { + this._ui_data[1].element.dispatchEvent(new Event("change")); + }.bind(this), 0); + } +} + +class SummaryReport { + constructor(data) { + this._report = data; + } + + text() { + let lines = this._report.text || []; + if (lines.length > 0) { + return lines.join("\n"); + } + } + + html() { + let data = this._report.data; + let html = document.createDocumentFragment(); + let header = document.createElement("h2"); + header.appendChild(document.createTextNode("Domain: " + this._report.domain)); + html.appendChild(header); + { + let range = document.createElement("div"); + let d1 = (new Date(data.date_range.begin)).toLocaleDateString(); + let d2 = (new Date(data.date_range.end)).toLocaleDateString(); + range.appendChild(document.createTextNode("Range: " + d1 + " - " + d2)); + html.appendChild(range); + } + { + let header = document.createElement("h3"); + header.appendChild(document.createTextNode("Summary")); + html.appendChild(header); + let cont = document.createElement("div"); + cont.setAttribute("class", "left-titled"); + html.appendChild(cont); + function add_row(title, value, cname) { + let te = document.createElement("span"); + te.appendChild(document.createTextNode(title + ": ")); + cont.appendChild(te); + let ve = document.createElement("span"); + if (cname) { + ve.setAttribute("class", cname); + } + ve.appendChild(document.createTextNode(value)); + cont.appendChild(ve); + } + let emails = data.summary.emails; + let total = emails.total; + add_row("Total", total); + let aligned = emails.dkim_spf_aligned + emails.dkim_aligned + emails.spf_aligned; + let n_aligned = total - aligned; + add_row( + "DKIM or SPF aligned", + SummaryReport.num2percent(aligned, total), + aligned && "report-result-pass" || null + ); + add_row( + "Not aligned", + SummaryReport.num2percent(n_aligned, total), + n_aligned && "report-result-fail" || null + ); + add_row("Organizations", data.summary.organizations); + } + if (data.sources && data.sources.length) { + let header = document.createElement("h3"); + header.appendChild(document.createTextNode("Sources")); + html.appendChild(header); + let table = document.createElement("table"); + table.setAttribute("class", "report-table"); + html.appendChild(table); + + let caption = document.createElement("caption"); + caption.appendChild(document.createTextNode("Total records: " + data.sources.length)); + table.appendChild(caption); + let thead = document.createElement("thead"); + table.appendChild(thead); + [ + [ + [ "IP address", 0, 2 ], [ "Email volume", 0, 2 ], [ "SPF", 3, 0 ], [ "DKIM", 3, 0 ] + ], + [ + [ "pass" ], [ "fail" ], [ "rate" ], [ "pass" ], [ "fail" ], [ "rate" ] + ] + ].forEach(function(row) { + let tr = document.createElement("tr"); + thead.appendChild(tr); + row.forEach(function(col) { + let th = document.createElement("th"); + th.appendChild(document.createTextNode(col[0])); + if (col[1]) { + th.setAttribute("colspan", col[1]); + } + if (col[2]) { + th.setAttribute("rowspan", col[2]); + } + tr.appendChild(th); + }); + }); + let tbody = document.createElement("tbody"); + table.appendChild(tbody); + data.sources.forEach(function(sou) { + let tr = document.createElement("tr"); + tbody.appendChild(tr); + let va = []; + va.push([ Common.makeIpElement(sou.ip), 0 ]); + let ett = sou.emails; + let spf = sou.spf_aligned; + let dkm = sou.dkim_aligned; + va.push([ ett, 1 ]); + va.push([ spf, 3 ]); + va.push([ ett - spf, 5 ]); + va.push([ spf / ett, 8 ]); + va.push([ dkm, 3 ]); + va.push([ ett - dkm, 5 ]); + va.push([ dkm / ett, 8 ]); + va.forEach(function(it) { + let val = it[0]; + let mode = it[1]; + let td = document.createElement("td"); + if (val && (mode & 2)) { + td.setAttribute("class", "report-result-pass"); + } + if (val && (mode & 4)) { + td.setAttribute("class", "report-result-fail"); + } + if (mode & 8) { + val = (val * 100).toFixed(0) + "%"; + } else if (mode & 1) { + val = val.toLocaleString(); + } + if (typeof(val) === "object") { + td.appendChild(val); + } else { + td.appendChild(document.createTextNode(val)); + } + tr.appendChild(td); + }); + }); + } + if (data.organizations && data.organizations.length) { + let header = document.createElement("h3"); + header.appendChild(document.createTextNode("Organizations")); + html.appendChild(header); + let table = document.createElement("table"); + table.setAttribute("class", "report-table"); + html.appendChild(table); + + let caption = document.createElement("caption"); + caption.appendChild(document.createTextNode("Total records: " + data.organizations.length)); + table.appendChild(caption); + let thead = document.createElement("thead"); + table.appendChild(thead); + let tr = document.createElement("tr"); + thead.appendChild(tr); + [ "Name", "Emails", "Reports" ].forEach(function(org) { + let th = document.createElement("th"); + th.appendChild(document.createTextNode(org)); + tr.appendChild(th); + }); + let tbody = document.createElement("tbody"); + table.appendChild(tbody); + data.organizations.forEach(function(org) { + let tr = document.createElement("tr"); + tbody.appendChild(tr); + let va = []; + va.push(org.name); + va.push(org.emails.toLocaleString()); + va.push(org.reports.toLocaleString()); + va.forEach(function(v) { + let td = document.createElement("td"); + td.appendChild(document.createTextNode(v)); + tr.appendChild(td); + }); + }); + } + return html; + } + + static num2percent(per, cent) { + if (!per) { + return "0"; + } + return "" + Math.round(per / cent * 100, per) + "% (" + per + ")"; + } +} + diff --git a/root/opt/dmarc-srg/js/widgets.js b/root/opt/dmarc-srg/js/widgets.js new file mode 100644 index 0000000..99dc1da --- /dev/null +++ b/root/opt/dmarc-srg/js/widgets.js @@ -0,0 +1,961 @@ +/** + * dmarc-srg - A php parser, viewer and summary report generator for incoming DMARC reports. + * Copyright (C) 2020 Aleksey Andreev (liuch) + * + * Available at: + * https://github.com/liuch/dmarc-srg + * + * This program is free software: you can redistribute it and/or modify it + * under the terms of the GNU General Public License as published by the Free + * Software Foundation, either version 3 of the License. + * + * This program is distributed in the hope that it will be useful, but WITHOUT + * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or + * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for + * more details. + * + * You should have received a copy of the GNU General Public License along with + * this program. If not, see . + */ + +class ITable { + constructor(params) { + this._table = null; + this._class = null; + this._header = null; + this._status = null; + this._frames = []; + this._columns = []; + this._body = null; + this._onsort = null; + this._onclick = null; + this._onfocus = null; + if (params) { + this._class = params.class || null; + this._onsort = params.onsort || null; + this._onclick = params.onclick || null; + this._onfocus = params.onfocus || null; + this._nodata_text = params.nodata_text || null; + } + this._focused = false; + this._focused_row = null; + this._selected_rows = []; + } + + element() { + if (!this._table) { + let that = this; + this._table = document.createElement("div"); + if (this._class) + this._table.setAttribute("class", this._class); + this._table.classList.add("table"); + this._table.setAttribute("tabindex", -1); + this._table.addEventListener("focus", function(event) { + that._focused = true; + that._update_focus(); + }, true); + this._table.addEventListener("blur", function(event) { + that._focused = false; + that._update_focus(); + }, true); + let th = document.createElement("div"); + th.setAttribute("class", "table-header"); + this._table.appendChild(th); + this._header = document.createElement("div"); + this._header.setAttribute("class", "table-row"); + this._header.addEventListener("click", function(event) { + let col = that.get_column_by_element(event.target); + if (col && col.is_sortable()) { + if (that._onsort) { + that._onsort(col); + } + } + }); + th.appendChild(this._header); + this._fill_columns(); + this._body = document.createElement("div"); + this._body.setAttribute("class", "table-body"); + this._body.addEventListener("click", function(event) { + let row = that._get_row_by_element(event.target); + if (row) { + that._set_selected_rows([ row ]); + if (that._onclick) + that._onclick(row); + } + }); + this._body.addEventListener("focus", function(event) { + let row = that._get_row_by_element(event.target); + if (row) { + that._update_focused_row(row); + if (that._onfocus) + that._onfocus(row.element()); + } + }, true); + this._body.addEventListener("blur", function(event) { + let row = that._get_row_by_element(event.target); + if (row) { + row.onfocus(false); + } + }, true); + this._body.addEventListener("keydown", function(event) { + let row = null; + switch (event.code) { + case "ArrowDown": + row = that._get_row(that._focused_row !== null && (that._focused_row.id() + 1) || 0); + break; + case "ArrowUp": + if (that._focused_row) { + let id = that._focused_row.id(); + if (id >= 0) + row = that._get_row(id - 1); + } + else { + row = that._get_row(0); + } + break; + case "PageUp": + if (that._focused_row && that._frames.length > 0) { + let c_id = that._focused_row.id(); + let f_fr = that._frames[0]; + let f_id = f_fr.first_index(); + if (c_id == f_id) + break; + let s_el = that._get_scroll_element(); + if (s_el) { + let r_ht = that._focused_row.element().getBoundingClientRect().height; + let s_ht = s_el.getBoundingClientRect().height; + let n_id = Math.max(c_id - Math.floor(s_ht / r_ht) - 1, f_id); + row = that._get_row(n_id); + } + else { + row = f_fr.row(f_id); + } + } + break; + case "PageDown": + if (that._focused_row && that._frames.length > 0) { + let c_id = that._focused_row.id(); + let l_fr = that._frames[that._frames.length - 1]; + let l_id = l_fr.last_index(); + if (c_id == l_id) + break; + let s_el = that._get_scroll_element(); + if (s_el) { + let r_ht = that._focused_row.element().getBoundingClientRect().height; + let s_ht = s_el.getBoundingClientRect().height; + let n_id = Math.min(c_id + Math.floor(s_ht / r_ht) - 1, l_id); + row = that._get_row(n_id); + } + else { + row = l_fr.row(l_id); + } + } + break; + case "Home": + if (that._frames.length > 0) { + let first_frame = that._frames[0]; + row = first_frame.row(first_frame.first_index()); + } + break; + case "End": + if (that._frames.length > 0) { + let last_frame = that._frames[that._frames.length - 1]; + row = last_frame.row(last_frame.last_index()); + } + break; + case "Enter": + case "NumpadEnter": + if (that._onclick && that._focused_row) + that._onclick(that._focused_row); + event.preventDefault(); + return; + } + if (row) { + row.element().focus(); + that._set_selected_rows([ row ]); + event.preventDefault(); + } + }); + this._fill_frames(); + this._table.appendChild(this._body); + } + return this._table; + } + + more() { + return this._frames.length > 0 && this._frames[this._frames.length - 1].more(); + } + + frames_count() { + return this._frames.length; + } + + add_column(data) { + let col = new ITableColumn(data.content, { + name: data.name, + class: data.class, + sortable: data.sortable, + sorted: data.sorted + }); + this._columns.push(col); + if (this._header) + this._header.appendChild(col.element()); + return col; + } + + get_column_by_element(el) { + el = el && el.closest("div.table-cell"); + if (el) { + for (let i = 0; i < this._columns.length; ++i) { + let col = this._columns[i]; + if (el === col.element()) + return col; + } + } + } + + display_status(status, text) { + if (this._status && !status) { + this._status.remove(); + this._status = null; + return; + } + + this.element(); + this._status = document.createElement("div"); + this._status.setAttribute("class", "table-row colspanned"); + let el = document.createElement("div"); + el.setAttribute("class", "table-cell"); + this._status.appendChild(el); + let el2 = document.createElement("div"); + el2.setAttribute("class", "table-cell"); + el2.appendChild(document.createTextNode("\u00A0")); // Non breaking space + this._status.appendChild(el2); + if (status === "wait") { + set_wait_status(el); + } + else { + remove_all_children(this._body); + if (status === "nodata") { + el.classList.add("nodata"); + el.appendChild(document.createTextNode(text || "No data")); + } + else { + set_error_status(el, text); + } + } + this._body.appendChild(this._status); + } + + last_row_index() { + let idx = -1; + if (this._frames.length > 0) { + idx = this._frames[this._frames.length - 1].last_index(); + } + return idx; + } + + add_frame(frame) { + if (frame.count() === 0) { + if (this._frames.length === 0) + this.display_status("nodata", this._nodata_text); + return + } + + if (this._frames.length > 0 && this._frames[0].first_index() > frame.last_index()) { + this._frames.unshift(frame); + if (this._body) + this._body.insertBefore(frame.element(), this._body.firstChild); + } + else { + this._frames.push(frame); + if (this._body) + this._body.appendChild(frame.element()); + } + } + + clear() { + this._frames = []; + if (this._body) + remove_all_children(this._body); + this._focused_row = null; + this._selected_rows = []; + } + + focus() { + if (!this._focused_row) { + if (this._frames.length > 0) { + let fr = this._frames[0]; + this._focused_row = fr.row(fr.first_index()); + } + } + if (this._focused_row) + this._focused_row.element().focus(); + } + + sort(col_name, direction) { + if (this._frames.length == 1) { + for (let i = 0; i < this._columns.length; ++i) { + let col = this._columns[i]; + if (col.is_sortable() && col.name() === col_name) { + let fr = this._frames[0]; + fr.sort(i, direction); + if (this._body) { + remove_all_children(this._body); + this._body.appendChild(fr.element()); + } + return; + } + } + } + } + + set_sorted(col_name, direction) { + this._columns.forEach(function(col) { + if (col.is_sortable()) { + if (col.name() !== col_name) { + col.sort(null); + } + else { + if (direction === "toggle") { + direction = null; + if (col.sorted() === "ascent") { + direction = "descent"; + } + else if (col.sorted() === "descent") { + direction = "ascent"; + } + } + col.sort(direction); + } + } + }); + } + + _fill_columns() { + this._columns.forEach(function(col) { + this._header.appendChild(col.element()); + }, this); + } + + _fill_frames() { + this._frames.forEach(function(fr) { + this._body.appendChild(fr.element()); + }, this); + } + + _get_row(row_id) { + for (let i = 0; i < this._frames.length; ++i) { + let fr = this._frames[i]; + if (fr.last_index() >= row_id) { + if (fr.first_index() <= row_id) + return fr.row(row_id); + } + } + return null; + } + + _get_row_by_element(el) { + let row = null; + if (el) { + el = el.closest("div.table-row"); + if (el) { + let id = parseInt(el.getAttribute("data-id")); + if (id !== NaN) + row = this._get_row(id); + } + } + return row; + } + + _update_focus() { + if (this._focused) + this._table.classList.add("focused"); + else + this._table.classList.remove("focused"); + } + + _update_focused_row(row) { + if (this._focused_row && row !== this._focused_row) { + this._focused_row.tabindex(-1); + } + this._focused_row = row; + this._focused_row.tabindex(0); + this._focused_row.onfocus(true); + } + + _set_selected_rows(rows) { + this._selected_rows.forEach(function(row) { + row.select(false); + }); + rows.forEach(function(row) { + row.select(true); + }); + this._selected_rows = rows; + } + + _get_scroll_element() { + let t_rect = this._table.getBoundingClientRect(); + let p_elem = this._table.parentElement; + while (p_elem) { + let p_rect = p_elem.getBoundingClientRect(); + if (t_rect.top < p_rect.top || t_rect.bottom > p_rect.bottom) { + return p_elem; + } + p_elem = p_elem.paretnElement; + } + } +} + +class ITableFrame { + constructor(data, pos) { + this._pos = pos; + this._more = data.more && true || false; + let id = pos; + this._rows = data.rows.map(function(rd) { + if (!(rd instanceof ITableRow)) { + rd = new ITableRow(rd); + } + rd.id(id++); + return rd; + }); + } + + count() { + return this._rows.length; + } + + first_index() { + return this._pos; + } + + last_index() { + let cnt = this._rows.length; + if (cnt > 0) { + return this._pos + cnt - 1; + } + return null; + } + + row(id) { + let idx = id - this._pos; + if (idx >= 0 && idx < this._rows.length) { + return this._rows[idx]; + } + return null; + } + + more() { + return this._more; + } + + element() { + let fr = document.createDocumentFragment(); + this._rows.forEach(function(row) { + fr.appendChild(row.element()); + }); + return fr; + } + + sort(col_idx, direction) { + let dir = (direction === "ascent" && 1) || (direction === "descent" && 2) || 0; + if (dir) { + let that = this; + this._rows.sort(function(a, b) { + let c1 = a.cell(col_idx); + let c2 = b.cell(col_idx); + if (dir === 1) { + return that._compare_cells(c2, c1); + } + return that._compare_cells(c1, c2); + }); + let id = this._pos; + this._rows.forEach(function(row) { + row.id(id++); + }); + } + } + + _compare_cells(c1, c2) { + return c1.value("sort") < c2.value("sort"); + } +} + +class ITableRow { + constructor(data) { + this._id = -1; + this._focused = false; + this._tabindex = -1; + this._selected = false; + this._element = null; + this._class = data.class || null; + this._userdata = data.userdata || null; + this._cells = data.cells.map(function(col) { + if (col instanceof ITableCell) { + return col; + } + let props = null; + if (col.title || col.class || col.label) { + props = { + title: col.title || null, + class: col.class || null, + label: col.label || null + }; + } + return new ITableCell(col.content, props); + }); + } + + userdata() { + return this._userdata; + } + + element() { + if (!this._element) { + this._element = document.createElement("div"); + this._element.setAttribute("data-id", this._id); + if (this._class) + this._element.setAttribute("class", this._class); + this._element.classList.add("table-row"); + this._cells.forEach(function(col) { + this._element.appendChild(col.element()); + }, this); + this._update_focus(); + this._update_tabindex(); + this._update_select(); + } + return this._element; + } + + onfocus(flag) { + this._focused = flag; + if (this._element) + this._update_focus(); + } + + tabindex(index) { + if (this._tabindex !== index) { + this._tabindex = index; + this._update_tabindex(); + } + } + + select(flag) { + this._selected = flag; + if (this._element) + this._update_select(); + } + + id(new_id) { + if (new_id !== undefined && new_id !== this._id) { + this._id = new_id; + if (this._element) { + this._element.setAttribute("data-id", this._id); + } + } + return this._id; + } + + cell(index) { + return this._cells[index] || null; + } + + _update_focus() { + if (this._focused) + this._element.classList.add("focused"); + else + this._element.classList.remove("focused"); + } + + _update_tabindex() { + this._element.setAttribute("tabindex", this._tabindex); + } + + _update_select() { + if (this._selected) { + this._element.classList.add("selected"); + } + else { + this._element.classList.remove("selected"); + } + } +} + +class ITableCell { + constructor(content, props) { + this._element = null; + this._content = content; + if (props) { + this._title = props.title || null; + this._class = props.class || null; + this._label = props.label || null; + } + } + + element() { + if (!this._element) { + this._element = document.createElement("div"); + if (this._title) { + this._element.setAttribute("title", this._title); + } + if (this._class) { + this._element.setAttribute("class", this._class); + } + if (this._label) { + this._element.setAttribute("data-label", this._label); + } + this._element.classList.add("table-cell"); + let content = this.value("dom"); + if (content !== null) { + if (typeof(content) === "object") { + this._element.appendChild(content) + } + else { + this._element.appendChild(document.createTextNode(content)); + } + } + } + return this._element; + } + + value(target) { + if (target === "dom" || typeof(this._content) !== "object") { + return this._content; + } + return null; + } +} + +class ITableColumn extends ITableCell { + constructor(content, props) { + super(content, props); + this._name = props.name; + this._sortable = !!props.sortable; + this._sorted = props.sorted || null; + } + + element() { + if (this._element !== super.element()) { + this._update_sorted(); + } + return this._element; + } + + is_sortable() { + return this._sortable; + } + + sort(dir) { + if (this._sorted !== dir) { + this._sorted = dir || null; + if (this._element) { + this._update_sorted(); + } + } + } + + sorted() { + return this._sorted; + } + + name() { + return this._name; + } + + _update_sorted() { + if (this._sortable) { + this._element.classList.add("sortable"); + let c_act = { + asc: "remove", + des: "remove" + }; + if (this._sorted) { + this._element.classList.add("arrows"); + if (this._sorted === "ascent") { + c_act["asc"] = "add"; + } + else if (this._sorted === "descent") { + c_act["des"] = "add"; + } + } + else { + this._element.classList.remove("arrows"); + } + for (let key in c_act) { + this._element.classList[c_act[key]]("sorted-" + key); + } + } + } +} + +class ModalDialog { + constructor(params) { + this._params = params; + this._element = null; + this._title = null; + this._buttons = []; + this._content = null; + this._first = null; + this._last = null; + this._result = null; + this._callback = null; + } + + element() { + if (!this._element) { + let ovl = document.createElement("div"); + ovl.setAttribute("class", "dialog-overlay hidden"); + let dlg = document.createElement("div"); + dlg.setAttribute("class", "dialog"); + let con = document.createElement("div"); + con.setAttribute("class", "container"); + this._title = document.createElement("div"); + this._title.setAttribute("class", "title"); + { + let tt = document.createElement("div"); + tt.setAttribute("class", "title-text"); + tt.appendChild(document.createTextNode(this._params.title || "")); + this._title.appendChild(tt); + } + let that = this; + { + let cbt = document.createElement("button"); + cbt.setAttribute("type", "button"); + cbt.setAttribute("class", "close-btn"); + cbt.appendChild(document.createTextNode("x")); + this._title.appendChild(cbt); + this._buttons = [ cbt ]; + cbt.addEventListener("click", function(event) { + that.hide(); + }); + } + con.appendChild(this._title); + let frm = document.createElement("form"); + this._content = document.createElement("div"); + frm.appendChild(this._content); + let bdv = document.createElement("div"); + bdv.setAttribute("class", "dialog-buttons"); + this._add_buttons(bdv); + frm.appendChild(bdv); + con.appendChild(frm); + dlg.appendChild(con); + ovl.appendChild(dlg); + this._element = ovl; + this._gen_content(); + this._update_first_last(); + this._element.addEventListener("click", function(event) { + if (event.target === this && that._params.overlay_click !== "ignore") { + that.hide(); + } + }); + frm.addEventListener("keydown", function(event) { + if (event.key == "Tab") { + if (!event.shiftKey) { + if (event.target == that._last) { + that._first.focus(); + event.preventDefault(); + } + } + else { + if (event.target == that._first) { + that._last.focus(); + event.preventDefault(); + } + } + } + }); + frm.addEventListener("submit", function(event) { + event.preventDefault(); + that._submit(); + }); + frm.addEventListener("reset", function(event) { + this._reset(); + }.bind(this)); + } + return this._element; + } + + show() { + this.element(); + this._result = null; + this._title.querySelector("button.close-btn").classList.add("active"); + this._element.classList.remove("hidden"); + if (this._first) { + this._first.focus(); + } + + let that = this; + return new Promise(function(resolve, reject) { + that._callback = resolve; + }); + } + + hide() { + if (this._element) { + this._title.querySelector("button.close-btn").classList.remove("active"); + this._element.classList.add("hidden"); + } + this._callback && this._callback(this._result); + } + + _add_buttons(container) { + let bl = this._params.buttons || []; + bl.forEach(function(bt) { + let name = null; + let type = null; + if (bt == "ok") { + name = "Ok"; + type = "submit"; + } + else if (bt == "apply") { + name = "Apply"; + type = "submit"; + } + else if (bt == "reset") { + name = "Reset"; + type = "reset"; + } + else if (bt == "login") { + name = "Log in"; + type = "submit"; + } + else if (bt == "cancel") { + name = "Cancel"; + type = "close"; + } + else if (bt == "close") { + name = "Close"; + type = "close"; + } + else { + name = bt; + type = bt; + } + this._add_button(container, name, type); + }, this); + } + + _add_button(container, text, type) { + let btn = document.createElement("button"); + if (type == "close") { + btn.setAttribute("type", "button"); + btn.addEventListener("click", this.hide.bind(this)); + } + else { + btn.setAttribute("type", type); + } + btn.appendChild(document.createTextNode(text)); + container.appendChild(btn); + this._buttons.push(btn); + } + + _gen_content() { + } + + _update_first_last() { + this._first = null; + this._last = null; + let list = this._element.querySelector("form").elements; + for (let i = 0; i < list.length; ++i) { + let el = list[i]; + if (!el.elements && !el.disabled) { + if (!this._first) + this._first = el; + this._last = el; + } + } + } + + _submit() { + } + + _reset() { + } +} + +class AboutDialog extends ModalDialog { + constructor(params) { + super({ + title: "About", + buttons: [ "ok" ] + }); + this._authors = params.authors; + this._documentation = params.documentation; + this._source_code = params.source_code; + } + + element() { + if (!this._element) { + super.element(); + this._element.children[0].classList.add("about"); + this._content.classList.add("vertical-content"); + this._content.parentElement.classList.add("vertical-content"); + } + return this._element; + } + + _gen_content() { + let header = document.createElement("h2"); + header.appendChild(document.createTextNode(Router.app_name(true))); + this._content.appendChild(header); + + let cblock = document.createElement("div"); + this._authors.forEach(function(author) { + let ablock = document.createElement("div"); + ablock.appendChild(document.createTextNode("Copyright © " + author.years + ", ")); + cblock.appendChild(ablock); + let alink = document.createElement("a"); + alink.setAttribute("href", author.url); + alink.setAttribute("title", "The author's page"); + alink.setAttribute("target", "_blank"); + alink.appendChild(document.createTextNode(author.name)); + ablock.appendChild(alink); + }); + this._content.appendChild(cblock); + + let oblock = document.createElement("div"); + oblock.setAttribute("class", "left-titled"); + let add_row = function(title, value) { + let t_el = document.createElement("span"); + t_el.appendChild(document.createTextNode(title + ": ")); + oblock.appendChild(t_el); + let v_el = document.createElement("div"); + value.forEach(function(v) { + if (v_el.children.length > 0) { + v_el.appendChild(document.createTextNode(", ")); + } + let a_el = document.createElement("a"); + a_el.setAttribute("href", v.url); + a_el.setAttribute("title", v.title || v.ancor); + a_el.setAttribute("target", "_blank"); + a_el.appendChild(document.createTextNode(v.ancor)); + v_el.appendChild(a_el); + }); + oblock.appendChild(v_el); + }; + this._content.appendChild(oblock); + add_row("Documentation", this._documentation); + add_row("Source code", this._source_code); + { + let tl = document.createElement("span"); + tl.appendChild(document.createTextNode("PHP version: ")); + oblock.appendChild(tl); + let vl = document.createElement("span"); + vl.appendChild(document.createTextNode(Router.php_version || "n/a")); + oblock.appendChild(vl); + } + + let lblock = document.createElement("div"); + lblock.appendChild(document.createTextNode( + "This program is free software: you can redistribute it and/or modify it\ + under the terms of the GNU General Public License as published by the Free\ + Software Foundation, either version 3 of the License." + )); + this._content.appendChild(lblock); + } + + _submit() { + this.hide(); + } +} + diff --git a/root/opt/dmarc-srg/list.php b/root/opt/dmarc-srg/list.php new file mode 100644 index 0000000..b1f2c87 --- /dev/null +++ b/root/opt/dmarc-srg/list.php @@ -0,0 +1,77 @@ +. + */ + +namespace Liuch\DmarcSrg; + +use Liuch\DmarcSrg\ErrorHandler; +use Liuch\DmarcSrg\Report\ReportList; +use Liuch\DmarcSrg\Exception\RuntimeException; + +require 'init.php'; + +if (Core::method() == 'GET') { + if (Core::isJson() && isset($_GET['list'])) { + try { + Core::instance()->auth()->isAllowed(); + $lst = explode(',', $_GET['list']); + $res = []; + if (array_search('reports', $lst) !== false) { + $pos = isset($_GET['position']) ? intval($_GET['position']) : 0; + $dir = isset($_GET['direction']) ? $_GET['direction'] : 'ascent'; + $order = isset($_GET['order']) ? $_GET['order'] : 'begin_time'; + $filter = null; + if (isset($_GET['filter'])) { + $filter = []; + $pa = gettype($_GET['filter']) == 'array' ? + $_GET['filter'] : [ $_GET['filter'] ]; + foreach ($pa as $it) { + $ia = explode(':', $it, 2); + if (count($ia) == 2) { + $filter[$ia[0]] = $ia[1]; + } + } + } + $list = new ReportList(); + if ($filter) { + $list->setFilter($filter); + } + $n_dir = $dir === 'ascent' ? + ReportList::ORDER_ASCENT : ReportList::ORDER_DESCENT; + $n_order = $order === 'begin_time' ? + ReportList::ORDER_BEGIN_TIME : ReportList::ORDER_NONE; + $list->setOrder($n_order, $n_dir); + $res = $list->getList($pos); + } + if (array_search('filters', $lst) !== false) { + $res['filters'] = (new ReportList())->getFilterList(); + } + Core::sendJson($res); + } catch (RuntimeException $e) { + Core::sendJson(ErrorHandler::exceptionResult($e)); + } + return; + } + Core::sendHtml(); + return; +} + +Core::sendBad(); diff --git a/root/opt/dmarc-srg/login.php b/root/opt/dmarc-srg/login.php new file mode 100644 index 0000000..57a3f99 --- /dev/null +++ b/root/opt/dmarc-srg/login.php @@ -0,0 +1,44 @@ +. + */ + +namespace Liuch\DmarcSrg; + +use Liuch\DmarcSrg\ErrorHandler; +use Liuch\DmarcSrg\Exception\RuntimeException; + +require 'init.php'; + +if (Core::method() == 'POST' && Core::isJson()) { + $jdata = Core::getJsonData(); + if ($jdata && isset($jdata['password'])) { + try { + Core::sendJson( + Core::instance()->auth()->login(strval($jdata['username'] ?? ''), strval($jdata['password'] ?? '')) + ); + } catch (RuntimeException $e) { + Core::sendJson(ErrorHandler::exceptionResult($e)); + } + return; + } +} + +Core::sendBad(); diff --git a/root/opt/dmarc-srg/logout.php b/root/opt/dmarc-srg/logout.php new file mode 100644 index 0000000..eb1a336 --- /dev/null +++ b/root/opt/dmarc-srg/logout.php @@ -0,0 +1,39 @@ +. + */ + +namespace Liuch\DmarcSrg; + +use Liuch\DmarcSrg\ErrorHandler; +use Liuch\DmarcSrg\RuntimeException; + +require 'init.php'; + +if (Core::method() == 'POST' && Core::isJson()) { + try { + Core::sendJson(Core::instance()->auth()->logout()); + } catch (RuntimeException $e) { + Core::sendJson(ErrorHandler::exceptionResult($e)); + } + return; +} + +Core::sendBad(); diff --git a/root/opt/dmarc-srg/logs.php b/root/opt/dmarc-srg/logs.php new file mode 100644 index 0000000..89b0140 --- /dev/null +++ b/root/opt/dmarc-srg/logs.php @@ -0,0 +1,92 @@ +. + * + * ========================= + * + * This script returns the log items + * + * HTTP GET query: + * When the header 'Accept' is 'application/json': + * It returns the item specified in the GET parameter `id` if specified. The parameter must contain integer value. + * Otherwise it returns a list of the log items. The request may have the following GET parameters: + * `position` integer The position from which the list will be returned. The default value is 0. + * `direction` string The sort direction. Can be one of the following values: `ascent`, `descent'. + * The default value is `ascent`. The list will be sorted by Event time. + * The data will be returned in json format. + * Otherwise: + * It returns the content of the index.html file. + * Other HTTP methods: + * It returns an error. + * + * @category Web + * @package DmarcSrg + * @author Aleksey Andreev (liuch) + * @license https://www.gnu.org/licenses/gpl-3.0.html GNU/GPLv3 + */ + +namespace Liuch\DmarcSrg; + +use Liuch\DmarcSrg\ErrorHandler; +use Liuch\DmarcSrg\ReportLog\ReportLog; +use Liuch\DmarcSrg\ReportLog\ReportLogItem; +use Liuch\DmarcSrg\Settings\SettingsList; +use Liuch\DmarcSrg\Exception\RuntimeException; + +require 'init.php'; + +if (Core::method() == "GET") { + if (Core::isJson()) { + try { + Core::instance()->auth()->isAllowed(); + + if (isset($_GET['id'])) { + return Core::sendJson(ReportLogItem::byId(intval($_GET['id']))->toArray()); + } + + $pos = $_GET['position'] ?? 0; + $dir = $_GET['direction'] ?? ''; + if (empty($dir)) { + $o_set = explode(',', SettingsList::getSettingByName('log-view.sort-list-by')->value()); + if ($o_set[0] === 'event_time') { + $dir = $o_set[1]; + } + } + if ($dir !== 'ascent') { + $dir = 'descent'; + } + + $log = new ReportLog(null, null); + $log->setOrder($dir === 'ascent' ? ReportLog::ORDER_ASCENT : ReportLog::ORDER_DESCENT); + $res = $log->getList($pos); + $res['sorted_by'] = [ 'column' => 'event_time', 'direction' => $dir ]; + Core::sendJson($res); + return; + } catch (RuntimeException $e) { + Core::sendJson(ErrorHandler::exceptionResult($e)); + return; + } + } else { + Core::sendHtml(); + return; + } +} + +Core::sendBad(); diff --git a/root/opt/dmarc-srg/report.php b/root/opt/dmarc-srg/report.php new file mode 100644 index 0000000..a4191f4 --- /dev/null +++ b/root/opt/dmarc-srg/report.php @@ -0,0 +1,72 @@ +. + */ + +namespace Liuch\DmarcSrg; + +use Liuch\DmarcSrg\ErrorHandler; +use Liuch\DmarcSrg\Report\Report; +use Liuch\DmarcSrg\Exception\RuntimeException; + +require 'init.php'; + +if (!empty($_GET['report_id']) && !empty($_GET['domain'])) { + if (Core::isJson()) { + try { + Core::instance()->auth()->isAllowed(); + if (Core::method() == 'GET') { + $rep = new Report( + [ + 'domain' => $_GET['domain'], + 'report_id' => $_GET['report_id'] + ] + ); + $rep->fetch(); + Core::sendJson([ 'report' => $rep->get() ]); + return; + } elseif (Core::method() == 'POST') { + if ($_GET['action'] === 'set') { + $jdata = Core::getJsonData(); + if ($jdata && isset($jdata['name']) && isset($jdata['value'])) { + $name = $jdata['name']; + $value = $jdata['value']; + $rep = new Report( + [ + 'domain' => $_GET['domain'], + 'report_id' => $_GET['report_id'] + ] + ); + Core::sendJson($rep->set($name, $value)); + return; + } + } + } + } catch (RuntimeException $e) { + Core::sendJson(ErrorHandler::exceptionResult($e)); + return; + } + } elseif (Core::method() == 'GET') { + Core::sendHtml(); + return; + } +} + +Core::sendBad(); diff --git a/root/opt/dmarc-srg/screenshots/dmarc-srg-admin-panel-small.png b/root/opt/dmarc-srg/screenshots/dmarc-srg-admin-panel-small.png new file mode 100644 index 0000000000000000000000000000000000000000..c97ee86971c0615b152f3ae5b5630dd811093e45 GIT binary patch literal 32897 zcmY&=2RxPi8~2TaL*gVW83!k1hY+%|$&Sb@DJP+R_byvHtL^?--q8B8t?d9l2 zkU$qTMR^17k(F#OKc?2bb-Rvjfo$Kkfn=u|@v&xx+nSdzF}MWjT;o>5wx3T~KZQc) zkw%!uohBjr!hC**=a%7`ndGATM=7($dj8GhOM?$o%lSIKB(Lm^u=@Y|=Q(e?0BMtp_8;k0zAI zOt(dzUqIwB-Z?455L0006nDnd{I9+N-1HIzPgihBQ)9H+5raW%-l7Zmdn9Diy*;?~H zcXP4mdULA%;!6=Nt_@!neCvAytGV{iIt{a_EkZ4&$^` zRowh;>@$Lrp{48Bub)1Bns#UC$Bz%=&cz14=HXs^9p6Q>Q&O%a<3<)eYk7Hi9;?s6 zyP5aNncv*pRBER~qtw;apX*&@EXq0H-#9qB^CdQ^V-BnOxUZQsFYePPg@~3ul~2^D z=5j}P;DZMni?fW3`r@LZv-9&2p`kwp2mfsQ_A%kMk~1 z+E&Ct%@k;P%=q{?=F{Jqw%jtYac8d^H&XlT6*oSwc-ES}Av?>N)#jZ3`0>rs!S!_) z(L^U_XDxMgaw;lWixs$JmDSZ;INY;;w{G2P`SgkU?AacpgVNH{uCA^pPo6a2S#5}E z3dSx^Ha1pO(RLMmKEkQ_O6TyF)or+w%hA-{Z#)tU?RBUM*d8$Qn)Da%+5Fn8os3Ja z`1|+o=6sJuwKKEckf{IfFne5#zP>)I?*d!prLR%9cM{)Ho;vk#XWWa5NkYfWtln|B zyeP-lVYu8ThK}ENrD`ZSC56>zHtD#ipyQlNGTSSyY0UJ;+7>lH24;r?tz zND{J0)lsfqNF9f6jR>13wobvS1>?v>%M~7SM=P>N%;#a{o^tL-VrxtVD7(?YQxaNv zI?s}-BlN zce2~8DDL${E;8zDZaMiNLIN~`DCuDo2%yv@ZWz%JEA7~X-^fc{ror{(U$$zQB>hHcTSk~x%El!VS zU|_&wW47J6!ggh}daZtE;#SRr3u?)#c~#ZbvL}a|2Rm!Ik{+)Nc;+O!*LH}I3BS!Q z!G_)7nGg5g)P%oSthzT8e@^80uwCv|pN-iV!3Nd-Eg~xEx9*F2jgu!+Ayn_Hs^rn5 zBO{+aeS+2YJ|~AIPI+^5^7!A;&SdpXzK%5hhqFm4!9#jFlZ20uHdl;7^(ZqM_2POa z9UYx*^{9rry2-6uMx`cmn|ou<)r#yjEAL0&G#>jRO>R9`t8F^ya^}+oEhhT<-uZ0) z9vd68%kklqkzq0GetP*{!{LSo5@b@^aB_T5bUl-V&0R8^sV!Tuf`i1ZI9QX=o|6At zie)n)+w(;NW!)ncL)DLYq|)Ad^ijX3{$1?#QdLQkU11}*D5gqnog30h8S|UGw}c^p z(UmZHHT5M%;ki-3Ki4U)C_%Oh*sp?|AN>F72k)RPgs^HDX=&Q~^8To#iw8HR)bi{l5s- zfDeDaoL~C$=egeETEI?i{llHrpYK|%h3{64)UGugKrtMB?=)I@w?FxU#zQI~sT=`nUx(1!`kX0H89bH-jrr)}XPiI$3cu49KkWG4YrHbk%!(szb0bD=UkMmG$Ir8>{T@RLEE5t-zC=z>ai5s?(><>U}+Qb^G8g zz~);&<&$G2l+M$<*@H9nYY z9XAXA8=LDbqu)Ae36S7kuSMske|;ZnM@Nr7J)%E;cffj|$-kw;mo1boVXlx!@W{1| z^(p}sGG%|zcSH8g{>P1b!Pu{s+6GGJ`6Z&vqAbw|5_QFTDL>w8hbGZb6mfM}4@{2si?5 z*+TNxfmXtg0fXY^CCU_sofnJ*G*n)B7R1fOn>*JSpkJ0wcFwVo?H0s@A`27yOQ7W#U6S~=3j z#>P>Mml!B6UAlx*6S(upw=i21_~qVgLz7_CaIMr zbTTKX&*E!8zf{KRbU$#RjrEp-!mNIg^89=wyk^@+kD(k1tBH?Qf5*LcdNR|qQtr^8 zRFmz@@0@)mhxy!PG2vIfX+0N`nk1;0=9&7&yw2BdrdyD=LHhfHSwWE#LgeQAfMK`I z+=qS#Gc)XMPH)Ef3T&W$9$KR%olXdFNZ)VAQIqQJs%vE)m&~eXCqA7zjHR-*4z;b@ zEb;n&B50=EA!gw8^;FM6`LxCr{vJ`=oCRrDjaB}vrtEh|4L3_ImkigtrLdRINUtN@ zJcQaZWXF>yM7)MU$<*unOH&gMwa-PO^Lq@Q$sTcDq}h&;JwuibdWwFW}ZLTu8RNIfR=#=)*H>F!~q5Q8QwnotfcBCIeG@Q_U@NhAG*^RS+Sun!cPzcfmO z$oKvh9-h}IdCg3^0zEa^!}Sc)0J<};QCI|JRAe^3>L6<+c_yE{UCfpUNt+WWS$@O! zhmW0%8cDS3eEH{c^R;F9N#{xFnBasf5cnRPN>HX8oPjh%ndF7=Y%7O}7;& zeQWU8{c&h`=okAt->>zLnmRpD7bu!r;vGD>^G|kvG%`F?iU=u=rJ2d~o98^a|ds zv_@m_Z_iqP09Ao|9TvR~B*}S4g*XQt(>L;?!PsX5GslzitYz0lITiz-f8ZAo4GRmq zz{ORN{k3fA@>?fpo?HZA<(c$N*1Cgw~E6kj(ux9DrXajiXkc8YkuS&&E$%}u^8y}lQuNrEDH z{ya!qhTz7Hsd%ZT%=^I?^_z}%LjKM)U){+PCOFL#2v;3JrhJY8H5{$n4?FoJOe~X_Nb42QY)BNpbR~!HS{d;fkdV1rbO?&c%Av3S>IPr-OfGvwlP%BJkncgHOz>y`-4IhY)%L+UgyCcHV-|p_^=SGSI;ZzG1FS1== zEDpz_;|wY!?)**q$I-q&dph;J9>v9o5z10t3l(@9bdnqoOa$_9dg|&J#oCgi8vdT~ z4F8#2+oR&v;f-4UMh>!#Z$Eg|k}JLWJ#*_P%*&Er86JIzMo=b&3_Pl&U#;bMh;d}z zEI7{Kk~f68{v^MJ{f!dsa}uAuPNRLM3DG?5xal{PW$N z(dzpuXAl4&{=dTLqobqI!7t0ov{hAi+hmXX1_zbekfM zrvQ$}1X==(7+FudaVMALJ3 z{a0DTKGfOw@88eP&Kg}(pP%c7#4xw5Q_M6Zd2GAt8w1F#smaDD5S_RgNRwhfcRi+_Dv*o?h>5~JC_HU_o{A5-mSf4iR{k9GWF!g+|%URG@5f+|jTX98FlJWHM zVL)U5Vr*n2ffdTeJr+@V)lwd#V{=V=ruOA?~Y(@?(Wc(lvuElqR#xS_od!N1hJe^?)`yUt);5l zVTp`I4GaK`d1Ml|O6fqbCm9|QL6t>*+xyvjpaIl=IJJEAt%SBa?{3nN6OY74MJ2Uc zOZRxWyF>G=H^2YxW}-(JPA%LDD0PdFdg1q_?fh-KzSih`?y{kKqKr;r=NS_o)=%{I z>ST6>kEqDBE+{rmmgyDuQk~lRQg-?B<>CQ{EqT5UP8<$3kKORC7f9!2XAhp=TU~XI zpXsfY?$N+e(_C40m$VUnf<-@)!wLvcc8M`jMzr46Eg48kO2T*Fkq*qN1XzDv!>LOZi-d zxtoDzdmag8T$;3=X1_hC)yu1W?nf2l5JHj~tGk1G^`;gM0&^&5(;pI()*q+ z-0Lq3L)fECjf{#6cnS&%lBRerUR2Z6{NYfw5G_s6W0Y!PTyMzOYkbCdGiBcEVQpjS z@gV(rVd!%{^;;-JsJ3e^ZKFob%{b@i)dsKZeB;cJasy7tS4Tsbjnn75(+w33ynaE)*cbpTSkmcvgd0hVak+w5~fSf!C8#KXy z4#vJVyk}=;r=_LkvfSEK6Qs2>cRE9^^h86b_ic5;r6a<_uT2=u_1k6L>Usra(cV{X zo8QRJ6Co)$)~o= zNShhiy}3f4?a-ZmiR_aEKVr+^BQZs-&hU?N6)=&%KK-woqTwEqZ4kq3X|n~%!#a{3 z{$0zzUT4Qjrb-wN3;MLxO&4iXzBNB$y8n){$&y6gZ@>4IVDJkydAV*H6q1NVKjkDQ z$e*(a#_CkA>rgPQ*(0kIzSRJOLF0T%142J%1_h2&Ie3cQeYSyr&`F|4EV9yXLm~WL&g0NN3t^ zT0nwg*Wds}7O8)}Ibg&P(fJeDzx_;p#pmX%?Q&V4oaf|h;a1+Jet9Ogs4r>Sld zfEIZse4%TCdzFlCU)3R|!_nT%i(!Hno@hzHcsOVrW$Rl0eUego%I*;x=_Lwp+Wb8e z(@!)vI3&&&2Gb%WA?K_T{baq@pY<>PSab*G^HMSzt(NRrJ8oNXSzNp)TS|PlG%rSX z>*DtI_Js=o>_|>aF3kyg~dA<$}Ej6`pz~OFWBs!+`c9qGM_-kR+ ze zQ|h(%{}f6F>{eYBq$d|#m2_Q#W9DIp;K8FS69tz9@yC1FQgio4^K?U*nE5JI`id*q2a%%1;)A) ziLk3AAvG>rWT>+xkAtlCT7o9}1ln9fR0v~!$%KSP($Uhw&4Ifiqg!%~0wrbkawI5Q zke~lXvBAqGc9TYC9EJiFCJMOPGEk*}jX2m!h@q4CxBDUjr8{4Oo(=pKc`s-lj72lGso|(a z+ZQGqUPga@Ef!K4```Au^zq}zEG;_&gU3Dd6(*&ydEoA!Idg_O>iPTkVr*>9^P6W- zY$@%_o>Jew6%II%1-nRQ|N8X{bZ?7*y*a?@vDW)RkqU#>!eODIOjjO!{^f$ZaKXmb z7PP*+=by~W#ARea{eSc34X9o5@$sM$PJq+_8}%B67^m8Ihbn-}$BxSZ%9_976yzLfJ(TZ4M5 zU@ycV&5|&=rmd}A2462<3NgmnOXnmfKL9?y*k8nY<$<-5 zom8@iLE#f{u>j}V*x2CIB(t@`6s)RDD$2|G=rpvo699-Tx<9DNvKeMGKSkcbBPb}y z$Cm~Asd?Gj^78AKF98_=Oa-wzH8mAV8@I*t4+=tC)4x+L9ZUcHw$RXrs+Sx;ZT%eG>4MT{{H*ii_^*4DP1FQy#*P&%i-O7Pgp!2!yk zXKj6X`S+Q>*o5zqk&%GovbEBmJ{{@pwX7Z$5fRb-W+jhFbfnE>d^`Kt{@J|5n-?!g z5SQuCWJUe$Lb2`E!VDBIk3vI3<*+&c>K{L*p{1SktW8yi#j`Rw-#^Za$lbkLtjWpC z&wn|yE1rfw*1m5HsEe_cX{ysSf4^$}XPPuX)RIP#U z--Tgu?eFhHy}NYQ&Sm=RRO*d)hct*BPil9jc#my`F3p8hb>pC>lBZ;VR~p$(Bg z%sS=d`zTX!q!NdU_g+AWFT*WW(B^)I>}hwYZM8r*O4O+)BpXb8tw!L7p`c zSX@$~Q8JKk6W%;ZkIIA6%)`SYEKFTG_r9`HBD;HedAYx^0)=2phq)Yln*gu?bs`UA zzj*QPlrMBX5;p?5Ya?lCY2Dpg26k$d;iR?wk;R80J=77MQ}gW;cb|5D`$nzAFORXU z00MU9rf>8OLix4br!VfN*|gTJKJ&U#-Pm%WXA^1wRO;J--Z^EjUvC{8-3|=qS6Fa2 zke2>A$T}8~+W@7qva)h&skFElEW&2Dc*`<2KvXMyX*LHLUcF8z`QiwaJZvLa_x^f| zctgrkfXV;+@-u>i8u5pcq=(IOqrD+-wdk*|Yg7j|$V|JpS^oDRZvPFNoHnrosrszR ze<7Kt1z0>-MybU1bK5i)CXb8L{pqTDI$AC9xW}FPHIbGNLAHfcINn?BQ+rDrPj`br z9>bE*w&I!Kz5@>;am$fknt)=IKXXxz6T6k)&@f?JkvFF7&4V{&)2Y99_V@RvWM-D= z6(i)7au4yf%Q;uVbz0SnIs_ikNCVsM{d;Jn?~pFCM2lA~ztE>nUHgmn-c7(C07nv% z_wL=93mn0i@7R~i!V6sz(H;PgnoZSFDkV{u?#U{Jov!60g6~)=U-3st`9@Vdx(&r{ zPJ#8Zkc*hkC3Z~=s!|n;4!$|g`N2@jY2jMME!{5dv? z7G)F2fn&RdcO_O=S6{#8`=9H>ld2w!1zoxwEJl7Yv47AyA7MZYk2@#w#aCbUCazD%2!h1T$;r9z*8pBpwZGo|J8)Be*SU>cMsntF@T88eOhDhcAF!DT?#8%l z8}m!PVZ1@ocyg40jRf~7!AZ@uj^1KN_`=JjCgmw4ub#iCqWYik-B znnQSf4+$oeydwyw1Fvqt9>;vTb-(^HKmSV3!_~jO^{^5%#hl1bpU##I4Dj`p)KUwD zYeOH@&x45W588`DmnhWZzxCb`&?q<&umbRk-$>Oxw$QVjnu+b!$_0J)qTM-HAD$c^ z2{s;X{O-!Et*s>sj*O2##``HpTm2R%`$N9<4f*-Ezr>z{XWgv#y)2IrvF*HBZru(- zd`n9UJU%v7`oZj1uzGWoli8D0*VkELZ3NsUF+`>rUn{c9Ym`Ihf-Q*ol$=amWBSH` z2P{4aGbri4{7^Bp1U03ITfLy~wQ)r_PA#FW!oDvbujk`oH8cPLJ`uM02Idb+ zeiuw(^P4v_pl9}97tg!=t60AX?6wY&r}@z{KKO-tn4jf&ItZuMIEg2R)uWAjzca^c zy&AU%Z?OjKTKW3!m)mrR-Jdx8bV`uVxE#>O;M@bC<|{wnamdI7fPe#F(RZ;hol`q! zd2=tG<*JFkeo9)JZIy}F%E&f6%fQeOG?PsH(ZFB=L!&M3JXd-L*o{CcZ`>HjyA}~} z__wW%HPE!6@4qr2)W}`LB%Ya>$rc(F6?OZZSTL3$y!hoyEc(;Z_KU(o&~It!>F)EsYIz+mH3iZufFy4 zcu8i%@({hQqND`yP><&F-S4=H;j!W2c2}krA<1k3E-uodqAyTVHcwG61K{rI=#a9x z%c?^V^oZ$_Zt?WyM9~y^YjZu*;=?d}4WK!qZL)l1$t}(_5|Uq;Si{;H_9%BqNh;Mi zf2Y(kn5bd@$8|bwGO=BhQ7{~qp>tj0jw1in-6vm@IaX=xkPuB`lH3avKWU{W+VHQc z^boNUz;R2KcE^L7I#}dWgi0oIEUr096!z5g6PZ^de&$3B`}nQymIOny-HreO{p!MLR_EFUL zT%79qCX4Rpo;O|w9_K}#o(bfd&)8Fc{rnwpU9!k@+LpJ7Ias*Aeh4J2-UE&^+<4)D% zoH+u&4;25Rrg!>esa|HdxK}E%WPOWOOth`u8~t;iSU#~gIkV!vVQ;iid|mQO?Yc_` zU-Wm#Po{*f%@i4X^iq*rr8#0fz3vvqhE{O-Ub?+B1TG)Gx)yknG?g#oz1!?;|E|kJ zE=*iWst98LQouY$;u+242tek(0+kb}fTia3ChSQd&NmX&eSFi{^uN|nF0 zO*EmbDRk|l6b^fSC64qK)fb05B5_a1KBBTscZ?V94xa8Lp`u>1FL;ejOgM`&daX@> zzYj!~Sbkx78K(x)-N=gPmW>P3P;c+lgBsQ3tvx?{z(j$@LsR#0yLI_Zz5*wSkY(xY z)oxNT*+iSpj~<<+CQtsY#(AAZoq0tuKJbCJiByt_*(^t3tN-(`<|R8t8c*AbCpN~J zU4Z%3l3`ck)PyNuBRf@(8m9pWWl4y@MuvxzRLbi8%hrq+X;0G(RU&`zP{rBthYr2nHZ!az^$O(U5bQcp9)uB#F43;0}H>utzDVow@M9vcBoDU^>y@W%AvUb@FnXC zXKS{R!&&O7zj{VHIpinHVMRji1Hq*zt{hb@EoTP@U=<)$KtTk~pjZ6ZDgywa|Izl4 zw)Ef6P_50ONP=t)0{POLS^;+U>A_p~vqkUfX>0d@hz@(N%hpYT2`C<@1}B0Bk1QF` zI?vShkMei!RJ{{9Yr8=hsQ>T!8hw3ZqfKDGK;NwBu>U_&F`4z=%81{bU112dW#vnO zPJ5EYplV=p5Fs!!_p!0E`gOy|tP1WYklP3r--WbW&c+|z7r&+Qo@^D#mfn0fJ=>lF za4&+Ad4GH@VCehz4e+f^U0Z2EuwTvgny9gE2PlMeTN^T;QOw-}=>iC7Fc#neb7mI_ z8$fxBng?^>wpfZ~swF??{xbwP187}(TH1TaIkmAo)GQl{2oEPj^7HdSbd`bR0lvXN z00LNTiD7AUOiW2x*-6*^fNROK=@tP`l9M;U-acCOYJ>|iH#Y}hb>>T4?N7Ve=E3cL zr>qWQ%DW^8oBJ*^%V7WFB3LImL2YgO-d{7X+9CurShZwGU8D{;_)kZ1feOM$7h_n` z)zgy@9qs$Kl^)hh+xh!-uHdic1|DCL$3Umqg~eHZ+9`27SrCp9&-4D3KK zv9{i|v78sNrC_)&g1Dc3%G~vC!+!6DY#8J*bxlMF)Qy?xX#@cZ%@{|5VADI`#R!nSy*7QHC8nP;{(*{`H9^2 z$3-;kwX#!>@=H|x` zxX{iJk}nwu0RO7BwKec?h7}l>MEtdcTcB<9FFsbq=@q-Xt4r!?<&lofZ-N{HjOZyu zJ0L&^I)n#aor9IK2Uk1&KkqS^;`Rc6bbc>C`KeQ2Qi%7DEo(B&2y#Za{xgHD~uIAlwQ;K)t)`TQ=0;$|Pa;NaV-4rq0kOT3?KZ&F(&U z(&_A`ubtArR(D~C?$Y9Ca899KP%=wa1|04G`Qrex<&Pgf{-gZ&?%jiep`oDxXbU8w zVMq1C@^|mv0qLiGT=weKZDY@|53ZuuK_r=70<#nXNC@(E=botCna4<&RNDj@+hO@( zhwrVUz=R`lS@uAMt!)4p&hK+LN}`QY&JY?YWhEuB9l>$~ zcq*1znwOUc?pvW=9II@==I<{37n*mSosZ$B2Ef)S8TbSA99+420Dd4GN(3B!&?|Pl zfB(L-^ZU^i4*%;#^_ub+AkFF;8r#19etw70#^C=K{floPRFs&Q2vzt5EazNE2ei4G zm!-d0gp>+6e;`=>{%s3>k#o}MinF65A3uLR2%B&@;93lo-m3Q7+kol>N}F(onnF4G}dO;t4` z?!snS0s_kCXDC0owYcf}HE}Oqu@wyo_yzX}76VDhqx_dIUvdXyW0ea)FpY_Et1*T8 z1_f2UFxe^t3I@o^5Bu_!^oz8V?zKWg2TRyfGTX|^3hpn+i3Po9BC+WB8K@rY92~I8 z@Vm;uV0PyKilT0n$<@H)L$Lqlur84G)XtSL!-RsCsFuPB&Rw__ytgWo(w_Mk_+DgW z5C(FZSKNNbvdSJW^c6t3wgy(mWyb6N{{CiW;}8c1%QibTbzpEXT(kG+=(T_(Iv8pJ zG$&wZMg12zIUPh9Lz-c6Jku-I^72^t1gaS<4T$L4^9=U&LGOG-Aw)zUrVf<>8Cqo@-Os@(^i+VV&^>3|IPreyi>g$j3JLyZnoHOe)#s_O9 z%_&IFU)8?8ZWC-CBf#h#J-YB@+K0uA-j`QGf&Hd0DkjF#_>l=x|LD#_X`hdHxa*Fh z9fAAZh4+!?=e-}cdur-eYnw+!c;yzY2=l{NBRwV?N=1KZFES)Pe+J`9cwnUq)d$v4Cl zohfjDg>aMM72ZjpC((_h68^R{LlN+?MJS{BT&Ke&@&a-Q)scwMgtON#%4^a2A4dG7 z`%h0HYCa|mVe&K~1}>n;4kVwOo)rHB0lLJFpvkp#^}>*aphvWb@G(9YK}(w_1Z0Q_ zPlhOH(N_2Fm6((&C)E{6ISLU&ivp%M+1uMYJ{~t%@Rkj9JxgVg+kNmShLu&;+j_T& zT+UrMrQI6P9f!XXoKeV?d)*7?q<>N%Lt@a)Gh))Gz7Y_y2>oOiT9~(w#eYkKB&+^E zcBcQIQIgT|xL<&<;PjOVt0qiZPo zxblfUD@JkmpZ#XaJZ8II6j`jSOQjp~tlIKZVG<(-POzJ!$P6X3{jW!4Q|TzmluK^EBnX#s)w{Fgs|7}SoN8yGwvTB0Ryh1lb1Hq%05*tm zXDb(wp$KE>1u0R4q?Al9HKsI5?Q6B7f^ z8>A%2CqYL5bKpVE*e@4p&}@J+1O9tEx&neN{C%x%vm0`L6*e7dcyLuUWd0DK5_s{j zI!?BSEGz&QSC4z%GBFteh(%g50I?nb@Ll4Qhmg@HLO`*FNN?5^H$Yr}HuoSPZ3xxU zUD5);zwGhf1d5iett}X2z=J?|-47t5m3^2dPw&{qqh{a%cme|98+bb7xpRA+B0cV& zo^S}5+yDXR>h=$P08wyal66W-3N3ki$pW3B_j&G+lK4Gog6@bWGJ3BVr~v>rM^b7|Yo3_yPX z^+BWV$+$$M@KT4HhP)Ln#{rN7KFGGhJO{WH&@G^UyjRHE1(*d!2J{GMlCOkb>lMS$ z04O{Vhid`4qlF2@Uru}=HY&AEjVVqIl#sHaQ;4Opn1~2?AYek48fsudM^}_t9jZ*=9jYa3r18~k zc1szjL2h~*(DQxaCvf5T-WcH(P7;b7a&`>*#}NK&5>8YbM9GBJO)oa z)RJK(5)%_cegyML_GnT2-q0JcEbt%-ugd1+*M*^fk zkfQ#*F*x+UpLc-n-Gj^)1n;VVaDkvIOmUW;-U}9thnLrZUxWCB_qG2}cTxXvZ!h#t zJkSALa2|r=Vf5y}$EY~3KdrRu$$<$2Fw-)-e(xNZ2@HYH4w4zZGC(}?s31Xx(3=^r z2L)pj@7uV!iG&JWx}>|6heE*N0LWFrCk4|5ATaOmLvxty?+@|21mhj!&eg+?%F5?w zH{GT`M*)J%$jAr|4hElMdir*hqOjNMShkc`cxdSJ7cW>OT!L`zkhOlMH-uA511vB! z)L~r?py4atvw!Ec29~L9Pfn>JB%fisf)EHr#>muF$;fCZi9-cJV7^4wb2(#j&EkWL z6|j9+#VKGabt z1&OzW4CYJC^OWzhWvFX|+$*oHZ?)y^;Otvm7-z0@n(~)>gKGpfi58XaXHH zHR$3Y0zSo_%a`U=%V9bB-lr=Vvb5#qN0zr=8|Ho$?iDnD9k~1R+$e?2Gi@3M2JZd; z1UsK#m6ev)q;ko)HrKCrNa3ys(G#QOVVAma_V1kgLm(<9W>PwM+~R=mcd;hmxuFQ5 zb@8M+NQl5TfSkpE1GBg@6QrTw#dE&O76vODS;bK@tY#@`z_5+fgd@vm)JO>A70u!R<)qP z_v7wZ?#dnp^)NFWH1glV#JtFVnqgjqcb2_UFhYo+*F}iV{MWf9!(SojV9YZ)>gU}1 zeHy(b=lA(8M-o4jFT1F2s=1n?M|ffLToT{a+uEORx8D9KWatP-OrGbnMR4-_R{|qS zLL&U0OX~68$kij0SNe63#qM075G#9~BiI_GMS_(@x3pbhZ~2+ncE9~BhB3#t)>Hxl zlZ|)q*Wj)QjyQ;9t!i+jzU!e=KxT~VU&6o}BR525?8tTG+=A~n?0s>rJ~#>p#^R{e zZr=QPdC2sdE)Aop8do9ZJ7+KQL~}CWUReo zjJCT3(}Lo2BT$zada*oI!PtMRmn@Z{7KVMGxIp4W z2D&hwp~5diZW_Z9kHznWP!R$3+t0=il8HHw*;koB!-Zb@-m*EE-rQTBCv{}yA1RCX z6rc%kb$nqY>KI-K3J7F2PveJRpglU=yEosReV(2k5}`6^D^1N#D3IGQjFEyH9vG;) z-5M>2ed{`-4DoKEPL2fWX%~sd>KAxe$kRtLoa?CqUL==qC_}bVOJf ze(V6o--I)}FrT248{W79`UwbfY<^(60CIytgzc{!31iS;l?z+}GT{?ThK7dv`u%wO z4&>iexMOfp0bg;Tr;}7zu6QmpEHE$X)7VrDzjqw|G+ zh4PE%6=g8%=ukCcFKYg9rAkRj36=sNL=aZ1VPD}pH)t%f(Dx#!SbzH*!-!h0m=ohd zDRoP^BOHYFWVa12HvYZaQRLu#9F35?Zsf%mt;@At+wb?ayoy@yU8>OpW&UI5Qtwyh ztu!K$%r3eZ2!H{ufU&M0j^KCI`3$}`hLp(s-qFEMAPD^sWCM`{@GcZVik6HnyautX ziunXmJ>GxI1r#c^R##!&o(vj-mxqTFSdnlDV3gn!78ft}=3V1VxrjjnpnIyxnKKV? z$^NMTFRv7s%UrpB40X zrsx^F<+7ICc>yDrj7{2I{qyJ5n>T44bAY7*UP7IJ_-`3)QdU-W9{-q%YX{|s0Ks1Z zKnVw{wSr(Y4!tphb`HV>ezY=9`3{IB5P#6p>INlSSA1O<-@?7+g~$HOO4pcD2G>o% z)D^(~-fv4yO27IhK}ds9*MdGYn_}?9pDH>px(dR~^Eu}W;^bwX5qpLQZ}ss!YD-+F7>-L(DX%C@N9KS2%o zsf<1wBDHueC@5*1??bfFN+H0TFridJ*c^vy48@QPg;9x(?a1m@>gP4EvFcYgCbY7u z5Z(b05m6C|;zZb*uxzKalzx(Qe4Bc@=6^e+HQoOol^)@7tYC<&^Sa&!QBK&unOA?I z-EGYBJs==>OhlOwi|?n&2vxxU*H^Dpkg4(sUiof@&q;LZoQv+22_eL6zWA?6v)|_a zen3GUWMiCW^KMNVny#thGYO>c{INU53j`YqG?`o4`?=tMh{BE_^leEA1cICr?~v#t zDEZj);@y@)v0GtqWQyOfFY@xvNH`}Fbz2fDEPj7Wh9}Je?7^o5DL?7ZKYE8}^cgW> zZ2N0d68~%Y=Nxz=X^`iE<+6x$))4kiv}w`-c3P!P99; zf>0reVXg(*t>*GunoUs~LBSK#%gr^?eO5;UWc%2yGtIfQV{u6hh5rEmdVq6 z?#Bbhn#-|&r1G=5`9;+0D0J?sC0iTQF@rDUO}=n_mjaP1LJ<-?u7<>T;QuCQq0;EPO?0(}d!wdURh5x>~QGyMHs1iQ4kmLVv7*A}$eaGW<@MWOk znd|Dl1OFbR&r;)x-$4K1!NV~13AuwLNjCItV8xKUgbD!(0bU_Agui6>W>a7c0&4x>&=45g9`5eXUe%%Gfoyu$PrQEp8u|o;rO4xO+dSYf8!1;Ml|5zbXW2NK&Y#Vl$4?&fO4fiv{6 zxpWIa7*KrR3$#n1xvL{pC3SUUYdb2+$}Cczd|X_1ps!EDp!NRt606^OGZ3J*&!6$5 zHy|8Bz^b&ApO?2|=I`rU)y{u@6!%DP#sYslMFyAxJRcCqCsjT5=~G|OQrxAl_k%JEDNn#}oGAo|sQ`UP zIfU83`Uq$|ffYm^b{niDSSes)1!G}u2L}0}<*4JR5jn`-`ukrEbpbMo4_Gd2?wNc4 z3WKiIzqV6dUES8!cB^y{7Lm;ULP7pouj=Ft0P5$|!f(<9NRT6kbu>afo6W@D5gFoy z{)#6n@))xy1OY-&sF!ynkgieCM{!huFGb&NBgri#9$7XEoO~sCJny5sn+(&mS=^Ba z67!KE?w1&m?BKD7i5!g!y5s>Y#^L{-r32;0pned5V#|^+gTRHb(a8N!A|lL0+-t#2 z+5;coA$n9{t1bSKYSku}E?k&R?xWp88<6eJ!Z-;@*6F|VqC|4POdu?A-W(=u z=An5a<<2a0cn*=rfSChE4Wv;2@6XxLpXN6UpFdYrRz9A_Ga?v@8FtJOvLgI`g~NXj zUsLuJFrg5*5fB)3sDjHHX?I#5KEz>oe4P30*=xzqd*)j>vG@xlj}3LGlEmRYJ6H3j zeq#&&OexFk{C8gvff9v9Vk zAKz>YtV(6ek?|w$B}KEL>TRqL*Y~S089LuC&io4s^vF1loc_Ax>B^)Lq%oyJNPx8_ z4^!j`Y3X|889;;h{QrQNOI|LJqLp?IWz+?40%)cG@hBT6+P`Nc4o zjeQnG@{U{~m$KjrV|4C<+u()Q!mT`V3+jFT3xVy^R?SL}!oLUP?w`H3oWRiTO*ZMH zDFl;^50?@2gD`RmdmI}QBtJt&h(QrdArWMRI5I+J+1GEf_OX?5GD?0?p+z6Aa`&#h zE%6|UG9Zaq?^x^c(LpeB(a%(a9Uq8ZVTdq!rPWvDLdeymfA(yZ2|vs7wr{J7fuFPd zeO)0M>evZdjggoHdlxB|1k&tLl^-NSaeIYl4ib`S{z_~2R}L*HJ-nHwv>5xDvR|~+ zfTyojm;!QH-Z}IrdG@4TzXpw)BzfmAq<375-Z(g-QBuPtg8^6W=&~qY$)C~=PtCvb zfhEg+lIDKx?mz)uow*<)S8NbXM0`o=HTQI1g8C0S05@wp1-Yi{2`YR>^mV-#1~X3$ zil?tvdtPLV=a&$(L|>+~=iovJ*l?-}Z0V#o>6jB<8AUao>*X!}!E>brh2lt4m3x_i)%XvNgu2kND9xJfMnZltyeMt6{5nni(M_*ilI<%adQtQvaa{@ zb(HfxY-Z6wvnlBcq%Xn8jWEjw)F~GX!^aVv)t2r9mgKoI0+R_wH*SE~0wE8Gu4`sX z4meaD1Kg9zy$>Z2Jl-CegJs~t9I5IsIal#uP8~jOrI@Z#UN(e7C4PCL{s2f!?3*l)89T5YdgF&U`nRt6t&wRhVsA>oM^(NOb zeeJ8;__25%9&*~8vnYb>?f$LFC8dkc8Nz=_ID>!HU!)CE{{q8oPk4i&d%kzw2Lj)~ z>IFL=wE&BBA&gwkJSmgWHMIRxAi8t3seOIAhM6}?`T)~OGG7%g*5pa`u9FGI{&0ZL z^&q8W?mnMVU|3u)!zz!|Xlf-tZ(Azl)+;qUIFiYs?}c$sp49L2n*_)Yp2A!!1ov1y zY~1#q)BOlS3dn%R$1g668uN_@W53Qlh@ZKACm#mW6nVDy>mU#^?-NhIe=>*-BBTkI zI!!Po&5fW7A8*}kduM2L&)M6#x;hgZ=@d80Zg6Jkx%tdSEsi=0rc2}Eyv99-ATKyM zFaRy>x4R?(0;xFAvE6=mg6RPvcjySi!^6Px;5q<-?#{Xb^&c!O(Az+-SsVdKJ2^o^iNg=w{0p`Tw=^EK6awvXetzE0+8VDhie8uf z`}wR^kq8VBK=T&8ZUMuV5VT*Phjxt51)5ZHOGzE%o*d2tk1g$A94xbt1r7mZCRN?z zE~$Y&O`%>f51_^AX=~wOnC`%H+nuegW%w`yj{j5FcZXB?#{VB2I;8AEDl(E}S4j3= znU$Grl0A!TWsgWS%#3^xrLrrPY(g3;g{*|6vhsT!-|uz(uHPTOb9H^{bMc(>oacG& z`+mP)>*nQ^l)R4`<<1=ktXv)q3+g5&1BfTVa@hO)3R#)hd~QetBJm7uJb8nzw;;|$ z2MJpF?VC46Lo;xk=;&;%ZZ<1_19y!s$bOMbkkXd>Qll6!&_ED@thX@0Zfd0)uu*IO6$$lYO-&dmx^Ky`C8W|dj zJG8Sx-tG59jYhTT+9hTd$_TzS`OjN&E;;s2LGIl@TWvObRRH9N{R1SkJbbh>VfPFJ z(SP>S)!Wz1&8&9s-TC3|z|Cvflsv*BhnAMtM;8|@^@qCm229vHojaUuRgZr-xJXT_ zXe50b|E5U#y;nLt?IvHU=G}AWMr~~alPW!&<^0#4r)#maB&f%ny?f4ebo8t5g^#T{ zAr&V}_v;C3>gzhYy7$faa@NF6MCX)SDuxM^jBve?>`u;g^Obtd*F`6M@E(Ek0RQoU zOC^6|RBq|-M3J;(hyUvAqq$Fw^>^>OLI#7<%My7YW@hieMG%#o&z}$3SpS2R7np?5 z;~$U9{}ecy`17ZC<&cGmNtBTmaEdJ5BJ}6SAoQ1$TLV~(2^i&(o|9AYpzC>O=fBWI z*gg8-lHDZMZT;0*eBVCh;(jl#M<^RX)L_N|a)qfEv;$NDATnIPb!G`%Exmu=2dy|j zUNF?_(`A*n1HZ=N_wg#LsH5XZ5-~N5_!faSW@d@pFOthcIJ`9Z@F*(On9q{qWx%m8 z$o~z?FX`^?2Bm=}FuUkfrSZG0s;aMQUzik(htAL zrv}j6ke=P}XnNPzw}9&gA9GwjW%v_NJ)+UdhNh-V$Z+^RTr0^)Y5*0E2!o~RK@=+F zmf}WsHp(#GEZvw+J>HN=aTRJxZbkch%Nz|)z-^80Kf(EHrT#~Q-Ir(7Qfkz1pY%N& zRofrm{O<31c;w}y!H>LF8IB>POD$EdC-jla){bf-H%U?YR>kgP0kg*foo5)pT~HC+ z|GFbpLbx^L--}ZkTazm-n!l`eS)7}m9`k-Tapu3dsVOGz|0>F(8I_f!y}zHLrg|* z`^zu(H(xQ4b}Ire&6c^PpQU^4>ec&z#a_hkgs=27<|X-@%ECe-fpO=~p}szGxY>XS zpgHkF=oB~-Gz`W{N>9;IJ@oht50W8A7A!D@h6(C+-rf>whLEpm>+8obLMf2`?U(Yu zyS>!=R+o^4gY+5?5NO=Tql&0;X))2g8Xyon>p#NuP7w3>Bv&{#=Do~+rbCx83Qj1f z&;6f9P-8~j5fA*&<=@&ep2{zty3kZZpkh=iB_-vHX^JzkC^r`>EFPZ*6Cq$2-_i0N zh3O1RE&Uw%kF)+{K_=)lo#5bLXJv0-bWfb{aCNOVFNa=+g_sBK6ZjCwR2XZ> z;WL=r-@poOYI+#`-qkknJjmVxfPoq5G0;k|Q1u@x3hZ?KzzMNP*RQqjO ztf0^Fk!Y=>m-Cgpn#Pcq4@#*=f8tBuH7rZsEo$yP`}Ou74O73GsB3>YHqzU!8l_zY z5OW~S*6i9u5GA8|q5$vl^S?Ve&NZ*W-tyX+-hm1nZBBOg&8z<%V?g0^{ak1HqoGr$ zh0M7QZTn3V-&!r^l1DgEj+*#j&_PY4w$ zN*(XohO)8_w_$Zflhpc#N-095qr*S1G)EJC2P zxJV9tLly$eMOHvBMH}XyLHQ5i%$}ezCa!`@!7q-6(UzOvW0`L@EQbsf2)*c4;?sWPkbj(ad`Nxtab|-!d?z;7MdPh2E1G^ zcu8|%=9D3DV}Zv53E9iwb#XgzuH=Q>>#Hh&Mtm}sgW+LI{C8l0l|=O9d>_A!)ca(4 zVuJ!r;L%XsB=b8L?3O+p^PfE_#2UeUFI-XG)%B#hxrrusOlHv;8uW7R>E4!0|o z8ZfX^ODkC3aMueok}t?1hYql)tE*5)HSlg|v#tv0<-1$}9E$R<>a;MhS=bSeu+wMW zRWf5FW*4QVs73yP;p~8MkzhtU-rLE+0n(}br8LO0g5+-F;e=+dsi;UmL1FJ5&at3N zSoeXZxIePEV-(bA4N4Z64ZxWtaQey6=9ZKwo+E&fk-g=P--KrDC_6pbAPmv7hevW! zlKc7dUG42iXTTtVtwKZN=#eApz@Ys7f!tsu!m#mf_IE-8J>dx$WjuyZy+Jv7Xh+A| z@*+4OXo699)z#PI(QmWQmhmZ4&U-~dlbmqz` zN?`;8K3c-PceAb;=A|ZYFJ35QE>%_5;WNtltdWX%$c0r70mj~vK~}Z*7rDH%bn!di zq506|Ipu3n&qha0LCX2;M89p;OPV6;LSxcd_PG4iGdFbw9L%Z`=paIWQayOMhTmcQ z;H5_4C)?Q{6SUHPtp*ddrs>s_?8d!={QPS4i{oJdO_FTZRJ$in$IXc7zjWq1gHAQe zZai@*1`Z`hN2nW5diRA!PAuCf>}7iJb4Nq#gi6_j(1XO7mnFN$79-tiUX|>VHO_Cc zdNpVw^-xWjZuueaBjsr2r(y}$(`aStxSLf7ipVJGSijVKW?!lSt6y7vI`>fnsk6%4 zJ-_OW1nmj(p&+E_T-Oy)IaBd@Zs)r6>ewSXA|;?Ob2xY4wF!~WF)CG!^hz2Ux5;j7iFa^qjrl{|&APkp~a$kP>&%#t1RuGKFdm)TA~LPgYy`+4y=QEQt8#mz^W zHb-Yp>I`0}z0D$hbW|WVr=igBcz_gNv0(eGeKmh)Yjo)OT#n)o$KkLX;u+!-nirh*ky|A;rw~gmOXFrMCF3otQ z_}){E{6xZ{vC5=y@2)X5;;mJmfZK#ohQpK8O7jWvgUbI~1a(ASv#q^K4xK|t-Q{07f0=JZ`?f@X z{~fJCPq}lECN5L>Q_9G($cK@0>Nyt3C}NymT9H@!7Gh3VkL%xd>z~5I{*Yst)4(zM zcJ=O`R93#|_R%_dBLDB3H78%GFvT*4)LW5T+hiQ5X7B4UMmd+%3H}iMmLD@J?fF~H zKs&rpHX1=MZv2o=75i&Smoy(R4y%1oKj_feibDVS|&ntS#KlpmZ zx?AN@8$&1!;lg=WY0f>MBh+t>5HfjgORTBcEbuN+k{xdeG^)vKXFO?oHx_{u()jd+ zmt#hw@yU|tRI_=)!Q{Wy0e%Q^Ytp%Q%?xw6CHZwzx(yT#^5kL; za2XaY!H<|UT67}k5=So|X0h@a8R0WU|vi5tp)+Zw~C62kI((bnq(L9b$R+T6fjmn zNB#c&3j7>U-0|}9!D;yr%yC|xQgJ^_Fo>DlaK#FH?p!@`AG;hEf%PBX(}U47^q-lr znc37rAR<_iJ_5&!6sI2eC0tVI3F;KNdp~`;gz(&oGtEs%l|W%@F9CuGq<}RH3Xb=K zpcw!?(Mi@lhHhMX;Or*F$q@qw)#-aS;kp84rKJnY!BToK;}ha;$;WU62)+ zofG@Zaqq4i1t`duarr@kK$Z^l3i(NR;eVkkttc&R>+WvCLxrvf&jGp~z&?`;f%uZR zTm!CtmoCZQ?MlzeGBY-2K?WQ!u6&6U^aWcO_Hao$CLrd5o&JB&G60q6!B~&StFOqD zd4p)GSo!hHpSI6O2q>G$V7Uu!4RFxntec)f){xc`o9 z&a%wdlwa*lq2Ew*rHuDyyFJlI^RsuS)skVY$phtGmQ@U<`a8Fd<%{Hp5xf-M|M0os zNgvKWF8pRED^aO(C^DDX5O4ETd<*Zo6`Amf9&u}}pGc?Qo*}U_;J4S~?{lH=ivP`y zd~k9r->`T}ZBzAUKd9~h6eH)($Z=Ta5Dr>0kxxOLtJH)}?n##oEWGG-o9X;d zxt@aAt%gj((%bf5`-kUaA3=HSg8b`sX%EQvLk9yUcS^6t*@UEbmNu*rm~)3Lnge!8 z%6W3{qVZ{(49V7P{@hw6tdu+TL~Xm$t1-H`d>*c}r^N~r=FH3#JW&K~OUk#?mOdvF;px|BDwbqUCv2rEc>Ex~xOEk z`5xQNwKJt7qnKr**iDs4L9_c3NQ*X~3r!IThN^SL)P63c6QZ&&T;|?Ps$8Cp3j&#< z#Asynetgz@%dl&ytPxw=e1hOJBya^5wvJLXeyN}2d=WSzzeR-v8E3ogmp`j7=xhtL z>+-r&_}~udvwh6|gr302#$Lx2tEy~>^p+Wx{NOrvm)jHk%(Sjbc?N-v)`lF!bEzXN z8QT0UVqY6U({noqvf8Z081NDz6E~nQZS`W+qBXEFySDEDg))IhiJ3qUR8&MX;vN!l zrEu3|$et5ZF-k{?art~wK$3%Qk4k438G7#-Fh!EXkyLq3#0~1|Km@ zXiy-LE_YqAwr03Z`r_JgmVNt$wJe_fL{urHHE4Y?^?BFIA$k^=F`pI6o*EaYjPu@vw9amYpK6 z8E`Ef^LN9EMZf{}y zeN%C9OtAjMbs!PWFYhM{4qNU_eo3~dLaoSrQNc$~R9*fP`k_VWv|X)Cl4 z2xAf)O3d;($$VOOl)pGp%Jr0`(;@biXw7r#@0vUzOgYcyIw2}TyY${4Y0fUkI6k! zZoUFI9>FtNx+l%dAnwBgacGB*iHQk1yZ(TvX!{*u!ZFxkr!mk&92GbDQ;gFq3ZauJr3Yq)>^KJd}|_l?U>o`S5)MajkG zfSRG~t!@}$fyF|WOKqLiYO@lyXG`-CZ)V3A#gCytR}#!Flze(0Wf+;OxQEd(G05duhc+XE8_Xo9M|2g>n*7Oi0&&PH6I_L4GNF{CEh8 zHQ|o-@t;tOAddqTRz+1+-^5}b^No;pQN-5CG}1i*jk*#as>Fz}`P65lA3wg?@}vIf z0iL{yrl#7O^4eO{QUkY*vraB*(Swd2Zm#Yw=VM6>b7D8nxt_aYq-Ciq9F}{x$Z@sX zN}}|as#jHQ2lH-@TAx3k5b0PT?%UdJ#eZkKtE=2^X(=(Wi({%3Fk#%paxbIGd8^}L zxgYKEjsmpR1^vPq+FEJ%d;`EDm6){0-F1z8de3JlxlJn;%7~Fr_p$I|R^YsE=|<#; zo=jo$-kh7oUs{!+m`pJ>dqvw6dN9yPPKPnB&oM9#eM-qZ*6Ou5(b>KCsN;fP%ICfp{UTkPAZXI^e($$pqs(${(v!Y=!>H2kNV~tj;fKME3 z9EOIb#~ofjFMJ;5Ww%&kt{0**`rS;DJ;vqSQ6&<>=2q?=ynnxXde@DVt@N!6l%i45 z9K|PYNrbeI`OP$Mhop1s)~!U!kYktHm%rV-{cEv+V6;?v_)T{9k8FRZi)Hr*$0WMq zZt#oP`uh20b$vrK^xo|ui~`fXbr@*75oqRG17WMExOm^p((hlthH;$`wc_mIaWqR8 zKtDMJ4an=RUAv&S{qW%f6vVwo^JdX9YtIw}1h2Mn?%IV^P`!SrVlRUG0xT6DAAkM` zqWvDU*^>)xcXvnjBIFA4^S>DPJ_L1FLBS~Qf^Y|CTa`P%spS`lM1-7|~)&s+EN3mmC=pst~IM__;B&zBZ( zi5_4->c953!S77Sp;YbD*Zi<+U*^c4ey6v%a+;%`)pD- ztLyH`#Wm%}pHv?qr!{ui8`WC=9zV6Kz5QUdq@;Ax)m|yUvRczMbubSdkvULRUw@28 ze)~_#$;wAj#+lwCk47!^6rtJra-C=uk-W5fR{H%{XD`Vg7WX|G56lR}*!7xiDsAL| z8H$QlR#ka@c@_;vY+G9!1j-;+pp8a(4|gd-d5lU2>?Ke*l?}=|b>Bp)8yqtQ*-xbO zP-TGU>KomiY`^e(_5)^22}w!xSpY*JV{&vX>KM0W7vSMh61dtY1=nZ|652t&aMH)1 zu*H5XXD|qHh4@MPAZk6;ykhF^?vADiQR&~hZ(+=NK?H@>3?G98T8uLQ`Pi2N0cJ3m zqCrNo+UwV8pqQAMy$4NCfl5Gn9^$={M!`!;UU1Z8@0_I2qR$yRl-f=sM^J{*c1^sN zCXz>-hlihEt8z#q>avE0T2T?-f$^Vktako-Fh4J5=j`mN?X7O^8hD*aG1st+<*RMM zKHisO-}v?ms776mW~a~M;CLx!ciP$6|746&9_c72)+!TwGUH1T=5pY`D8O6NR;-QM zdRpDxoe4=oR(+lctR?lqIsq%%Z{ry}YyzfuU<{=OXMp@|-e{Ht7D>6!yraPG3o^X)h z=;5v8((GrAv&eVJ=F>_VC6XM-rSzmGz)z)=wnDB}DuQzy;87_(-VevM(kP>tvv&}~ zM}vf3c^@Q2Xy3V8QJ&FZ4>-V$TWo|yFD?D^96!m(Nz9w;U}gt|Dt@w7y1Mj2JxlQ> z#2G3I=qWQ7U%J||_{H9QQcLBY_P6cq=UIQ=07M?AaBNu?jT3pGX_n`8P?nuTTrkeN z{$p-HE!$uY2fq@bgh8$cXvBhC^79HnlD`86W=C!pg8-$Z80(AjCz~SZqA71do6pS% zIF*%+M1-|1E)Xe?!0HKvq){mU>h{a^YD#6O|p&2FlOd^54CvTKJW=rGk>()tZ$#OMMt0ub$VMK0yHW6Z& zN~qb6#<9o{8QKv~Y39*UBE?Fhb$)0s2QiEw*BbQEJ;eF#y=_Vp`?nJq!@`Iyl9#$q zFcP&=!v2;%shmueV0|~x8lo1=VJY!_?bq^6CXGL~tT*0Tcu~!&+L{lzIxld`$bhFX zwBK^(K;3E9V*+n#S!XKqX5~LJcDN=nQ^!6{*z>$brJQHr)5r12DUPW<+wyt{k8d&( z6q$)~T@;Lp(b~MH1gXRKekulTLe$~dH~G0oHc*TAjqHz5l@%_Q;Ol~wY8jrgsUKT! zZTQ-TT)B*`Oe80ju4?k7iZ4ts%N))Qn{?TEHEer9tdHInw6~6h9<49J1uLswy|fWw z&u6+hQTu-Z%rC`}>bt(iEzC<8ZuaYE(;p{qFkcavlypq|-ZFoVvOuvIg>oM+HM(*! zUhLg<W# zJbU62Y=WQD_?%U28sXNIXBhwQOAkTOL-jiQFEXZeJ#}A6)Dvnm;+}_dn|`V8V@?ON zyk6rF$p1MmafLlj+_~A~KbOgP_bc-V1@#0QW#eHNjg|N0&#hMPtnlaA5pJkH36I_; zn&bE!<&2~xO85=33Nox?{O*7Mb+)xBv336MK|c}U4YbkHQVtAPy3Zv+`b`xi?Do5M zofBh+gzh$xd|^mT^J|HWRma43+K zpHmP!LdfUPIY~pQ$UQ^-IBJZIHR@kkQ?r}IW8=NUC)%!DBt?V~m@}1Mp2tOT@zh?~ zLP>wOV5`VV7J*3Q$!KfKHBWQuSS}^e04R9Pr^j4Kpw=HT@M15_Hh8Bi<-)l7{*1=9 zK(T83y!$EFSpFo$OrNr??Dd%OUFZ0EHY90_lE}kIry#cY&fIM#!8EsyasFTij-0E} zGwM&n-mELISJfuJ{Yf#4vF*8uf4WQBv&M&REivw)B;~dAmmiMGSM6L+E}5=AGPiwB(|n2Pe8_gl-B3oWs@U$fipw{M4a(^`$~ne4jY^X_ z_W8sjPa?m5YeWZMuB$2{)i1o_o?KNIQfgqZt=b*IO*SPhmm&9-e@m$Q-bZI@Et7=9 zpmQb1su+4rGd1e~^YM0#BJzwbPN^ur_!+#uor<7ruDmFB!Z@A4)9O|H@;}DhXAKbq zTFO_2uL&JA3Xue@^CTjPmNHgalQE1CMc|2j>7%e)6j@3AQc(sY)JYT1GZ~fBxT)L- zep3Tix6|A!zIj(^hA5wG0Z5^8Uk6#%sSFj7yS(*)>Dc@+#FPKJKDEd^LH(C7{S{Iw zT>%!YG-%5pOk-5O<^WKmMT}1iAXLm*14F;K{NHn*5fEQ!;ucv#Bt`D2Co17~%i&`OxV4n`rJk-kWS;nP*x_2oSY93v zTCXCPSkK`RyvtoHZtK?JH{@>P!P~# zDTYNGq-@6NzW#V9j~}C^a_GbC?>(1Q_T@n=K^gw|EqfYwP`J}Of?6NtSgP!DP_ojT z=heOb(H%Zr)O?Cc+FE69rfODd3w3`3t>pCj_NHI*9Pl;K?~u6-&kh)W^dKAxm)6L> z^Y-?3q^6)TwzBH-y7|#vR7B+WaxkkJ4->w1Bar-8uU?TQQ=piUd+Lgy7Th{l*SjSp zZ)<&uyBy(Zg#9m0SKwIL(vQXMMnjX7V4y9GjYoZDu`nWu22uoUL8F|9y&pWzojd0B zmDnN%miR85Pt((o{vmlp(;CGcM4xf_`v-vJ&iXK0TIP|W>72&heo*NAkq+9aIgGRY zzKy8Siw%=w;lK`$`;(}P`~BwU`=Fl5`P_V|<045Y-Kdm8Xo`&_ za&$uMpn5Zfuo`;_g@I(yU$m(@4VYP?mdL>KLd*uaW_`|@ia*YO&`D8!EHvD4;rM^W z9sT1rTt3X-#K_nKHuQs;7n}op-wi>F19 z2DW~wb#O?CZiX)yEh2oFZKDhJ_V$)gdm!bssK^mYyAsx?n%g{5O|=EC&c3e!a{m>n z2V`#>@+3hksHn6c9O^(E6gQXtEl*&}#Ws6@g8Ndxzpsf$x_%L4B+D4SD8_+VxWm^1 z0UtmN*c0%R+KzF=)mcD9h|>o7&#+gXYtNp45W$fHs^OJ5(<~1d0`|;b;cZ_)EpY_ylBT?QH-bzS6 zn2wxRDdd5TdxP~*dr7;=MfBY>`t|nvCKZt@NOv>SEtklh((CcyX!dc(oufai-iSYP;X?!O~%Srh~L;H$p~ z9R_PejB5jl*l~trt{okqpB*j5~+k4*VKf|I@0j zu@?qDF@Lu!PgAaC=MTEp316#P4ubEu3%i3ty17l~QpSy|#->(O)FkTg(Z`BmiHWgI z-v1h6sYjcK=M&A#w=*!8A#Z6eDCOb*jbyB|tUy%Cw}}bpO7TK20|MH<-Yu)Z zArIg*j(acYxrnIf(HmX( zT<61IU&jYOwTaP58Kz%3K|lu0%OnoF`|mz&%twNcU2FhsGBlGImyi&j2!Oq`O{=P} zZzE*2k!63<#5em1d&i26m0h4FmR35gcElAv;M5DezR3} z_Ngm>gC{gDzhTcAm!N2)(n+a+!-s1$`Hj-{4TUbAcQFe>AI{Av?a&!+z;h~iX*Phv z#Ra)t5RH9R9d}YcnD@uLJKX0m1vX?P?9%MzKizPxps3(b(vJ9{YH7cPxCS=i9_BE3 z-}CaG&i#SJ>P~TSW=6&#%g6Vy!G)Zh9Au(M@&Zz|m6jGe6>uGOzo}k;JsTnzu_F-z z|GvN{C@dm!t-4t^^4!WZ$l%<2R&VpvvDVYJKzi z^~VVMfGEr65jf2ME_dki<>(hL z)%Wk`|Jh(ezpbsU+eC0IkB4Wf^ni?+nRz1onzv43Fml-TCU^Ac=xD)(oW~P0{9QOp zcgLO`M+Ej?o(QsYF0m9j%Kqzq(TT;?wb)qNtNZn^7eHxSTc2TS*3^_1EiKcRvkO&K zU{>Mop!KSvX>0=R()#84(N(%J-u^8l3JMZyznB{fV>nGLCKkqL@TjMcP^_1O17Tpm zHhm#nB7OD$lc$c|CTPW2m9zx490DBb%Z_XBJ}lstkn<&jD*7FSwhHzWf=pedWN(fH^|LUvK# zk;!fUb|{c$F$2I*e(2CPj((&|S$?}x{p$T-X`d@KX;o(6=Fj#0nnpaCRl==XDJQp8 z@@OiHT;+9AgSf0(I4Wf)krvCsWx0j}arDH~V~M+M0HLsX2ZcFM-##TcMsbarQIn4u z_Sm|}f_Js5LQH|-4raf&3vSQLRSvr9UrX2GPa7*#6=39E-J(ySnZ`Q$hlyA!$u5(G z?GM1_BSu+3fJQ3@b3s%T5heqmN+L^zp0Q)q4GA*Auhs>U4$?> z)xP6jq_>}sv_5)PyonxK91N0FA z{`pm7=-}^@!-~fYbqTWcQ-@#~Ffa&H4ceU(YHj;sdnp=2xwc1R#R>9eCEq!4LO_z zTYb8{G_zq+X{Vr2Aw}h>;RAaF+MT5o+4)Rc4BqdZPnR!UfocFb^o;i2K_-^_xK8$d zpCp=nzud?y7fj8_MU|+Ltx}wvKyzBxPOMq3IAJ8hvwc|M^}0+zuPOJa&)(2iXXJKE zk=nno++2tJ%0_*EenOp;s_DGxm962E{wI2{s z4VEhJhJCjd1vWr<_Dnf_&aF_C9APGMjy(n-vP{`N#Nf~-_$oqFgD^<%NRFv<kApC2bzIu&ht}pB>qqPk>XxILwA)Xoubq$? zNkL!3z)~^g`@2*(f{Y^R(C~dq z^_VQ>2z&hY!<#p6-oNK$ViJFS3%U;W&LA3Pb`lY)aAFZPsPIcsw5VNsE~@R9ic zJ$3=z7mQrbm%ilW2Ul%gK9Qh^JL^5(G-nTQZmYoewdBmO$_Tvz`8?h!C;4t63+*H& z)P0U})sPz0n?Kw9CUyBnk%q#I16k(LrcknV1kZs`W;?(Q=mUGM&W zoFC`=&ffc8t|d#Kxb7?F9CM5@Z$CL1QS>`RcTiAJ(8a|N3MeSoPf<{=n%}w#f6{B& zTMfV6ekrDIkAiZq0r~HhNVdx^J-AFYuXk#Y~InEOZc()-zv+A;9(JWyDI=wZA{3lw2ib`uig_l_7GB zaDDmoaT_^m6qHx`f=ze-{Dk6v`@j1_ak(jyKkqq`(yp+h5u*1=W96ehGY5x^v^0YzBbMLwH*QDn&!0d45k@H~C@2^a z896aAQBz%glKJ(sFF83@`uh52 zX3KMPPYhe`Q&Kj@h)t!*CI$uuc64;a$N!UiA30yI^nC*ZrDSEDot$zvgFP~T|9)}p z+BFM{)wX&Z<9`Rl)hI5Yc6zvJ(x*+XPhi{}Op-YKyToD$3me;{`}29LcGeYzjJ>6v zuZ5H!?vZ3hemaFyJRfk7r_R+|p&gWXgF??t`T$bxN4Fk*U2HYiF57tKP7rT^;BzHuD z|1q<%x%3N)$g=dWvYF!7)zxKZFByHRUGvesTthcRO1H*M7@=RFrmkKwE`(M;Ugc~v zQfL&-s6BIUqRxA&t!x?RW+V1tXX(6zg z&x~gBbgR@<42oFoO_h{Qq^-pB^ne!6tHSGie<)Ql zy3~9i(`u}=?rf+1?09#zN;GnM_t?wJ%kI6+WOYVf>+qk?*h*BWQSUrBI4F7Y@VKwW z<9KInq$o2p(}O?JJu=#NW4ywCbui~MpZlP}l=(+FYOOl2^OOD6)v8Cz1Ep4)LPGV$ z#ZN|lW~t_R9Zop!4^aO3)T0o&_{c1$^-;=DvG|09$1?HM&Zc9fR?22c#l;SbT?zFc zFgTw)QBqbO7#bqub=jJ({~(~&^ZolP)tgmeMPd}Ag+`Kz{GLSY=KWuuzg5Z6kWS=3 zhZkv09Bxk84Cg1gA8u4uR$6|C(T0bGWjaP>HuyHqB=9&FT7+h$r#~_4ZRqOSfE!n? zU`-U0m6gq%o2YVL6A>2|H#J>?nYXgE)F`#g$jG3%e~aje>6g5`sVe79^&;c>xrL}f{Faq*5lKX zJqIhRf}*0Ls;bRkc1%J-LS3D=wY9ah*6qKmr5PwlO+(W&H1s%`2li~8x2|=dVA2*0 zE3)i9G4WWTQM(;ePlF$}YPQ-#Rcb81^2(^FsBhoCX=rE^Uh&`;c=YJ2Xb7nhG0vU$ zX)+1=1PedjqRxL-l9XJ96|v*XUZPj_b3NS9&eN%BBbk7E6gVjiKqMEUN1GTmj2yFoJx95qttX%@PyPZ!wEHf_%~lfl+6oASy^Ie~Y=Qh$?8WK`W)S|T7L6VUq!cSN9 z_s-qJ^YY?6ul9uY;lt;p?-?{pDJUr;YjP$hC*2R$3JMBr?d{=c2dpL0spcLX9Yw6` zLCnn8tA}%`%JEuNMI|^e&|~ZOb3wtMaIS_wLFB~8k1pJ#_>-W%FG@XU)p45Kfs;3) zZT+^$eo=;_f;KuJAYg6f2b@e;4LHRx^w{kHs4gOr=z3e?Ck8@H*aL(pW4ne+#XqJZEb}Fk+C68w<4~kHGY12=zV#9_~pwN zR1DH$(;h*N?^9ECA~H%F8TgD^)T+b9W{MRti#j?wv&|ukxglX;VMRr|Z*JTzf0dn0 zUm==-TLEDMW|T>%y4-nl5{?l!H+LK9M1{SHxVWDdE(S(OON*Gb^LV-KHPm~CWogoJ zgGoZD8^0jgSx;80M_MCyjyG!kuUgN7jg4vT%708p9jY=j6MdSf?grGrAC=jpd26L) z7nvlMm==6!9&4GkTARA8XBri(mF#h@VDLPpKT$5$>X04sR@jk0S)JD{ zVf~!x8nNBtR>#hB=QD;ZJ#KVRD@~WWyOq^cjVJN>xY%zxIo-5LH_6qEw6sa_sz=0l zkyu8%anj-F(#1m-hr@ldzu&&KTSwIStL(^YknJBcj6cHaX$nfo5a%V`b}2TG^myjQ zpQ9m+hu8n*N=!^>7F~@84H=vMbwUC;60b^O%-ZJD-#^~24&@OO5!o$w4i^~At4O+S z&j_ojeM(5s9$6X6)voe7uhhaAE3@fd?}ErTQR%3zu0F6nJkuB;EiFB=4)M3dYV4rr ztLV6Vf!f;o`b4_?BPZvjUr9tnM90U+g(UWNc9|RE?IjM&3f3pZxw*OF;eFi#m-O!B zeu$royB2d=@pYFMV|{(QAp#d48I)921w4-OOG`Pbc)Tw>P*G6m?Mre<}i2BX1T$47IpuKwa7x6AQg zj?CLVK9|wj+Fe`RtzY~=^-dz@4r>1S!2ws2{S&1p*0OaZkyz~KYkPF!svDivL%Fs* z91kct8xQ^S+&K?xsXQ&*9p>BUI(LKjCOz!g>X{?o)zG-~J^s=i5RZ>Aw6H#{892Nh zbGxrwM%GvSX#K+GRAkeBc})<(vdp4OawI{4OG4zH{?)6Qw8~wIiz`)0VP$YX(I!}e zpf%gRh<=YAZ$GDZ_j4sSq4<=isO)Ds*MPON`pzIh!IoY)b*3Y%chFLZIjO09`ui_# zADuhjx%>4ks<>#HwVSm6HlNPHmCbDRqVhxL8&`h-9BD_VliZl5#oS-sy}Z!;nw(6o zsv!JTBq(emGEPPcQ5Yi-(#*!n8panJAAg4Vm|+Nll%aEHM~9*F-8*+!Sy|0jw2c2; z05M^Ag-beDIV?l6Q?{_M$V~z4($&?ab(Oxop#kBfN*)TJX!ET}o<|B|Z>I6?$ONRs zww%Dm^Uybx&O?A*+GKi>z~vKf#l*q7(9L^KN=vM~HsTFF+;c-TFz?l44CQIL9%F{4 zriLA?9~v3sO;xfBE0_2rN_iAh;z#E%=YI2F82w@4PPnhZ9lD~*~cW_TL(__G&Xxz^JF6KV-nqHC#OGTd{Ic;dfT5VO_-A}|EWv}ht?sM!P zeD8ZWJU#r?0JWL4*i27Re3;4m{O7kS#2i~oT8M3;4YxO2`SA<#FxK9RB>R8{VMOt6 zmrSTqN_GlwQvJJNX>KR0(MVs8sqv1IqT_{yQ=5%Vf(jvZ@d`XqWo^~GUR7QB!;QVu zP28rGG)1vnn4vX%>}G=4RQECYJSE17BaV-YUtB>aLWENdc!gZ@=;LWYQhG}`E0IafbL={I_>h(&p{!q&x>Hm7$hf z!6ZVtx{1RzRbC7SwXs-*7wQ_R1#SlXA+iV$(z=2Zf%f1@>8f_&9hYhnC!X9Y-Ob5j zcS`g^_2g2yINx_yAI1^eXUsyB?&js%-TjzIoWY)X{6i^7Q?=}|{bwmtfutSgjkf!t zuYImm^(gHo-q6~W*u`SSUh)=FRFyZ$`&^pI(Hh9f&NQ%EIK-JySHN15Ij!fBED}Ub z>+f|MgoZ{NI891lAX`*!qM>z+As{Dm(`rh`eS&@n|B`PK5)uv$j#Lb*u=R)z)G3c2 zr#%u4eo2W|zXmb4-Ur=|A;Qy8)oCT$$4A7Gr)hEbyxdP>2r;<=JE;( zv~fqR85#DN^7FfVb1A8*6%`fAw#(T7ZZMi6YBKHSL{17jvThWHd}-f5+MdO5LZK?4J6Yo5nxFrSE&?CiOf(bxQJB(V;@5`N^#<1^lM6D?M&7H4tsbaXUT zPPXSS-co5$br&YiM=xN9iqXQ(zAw+VZj4Z(ri~}&F7qzBP&P|DkXlhoMGb?Gd5Y`p zKhed|#ooi3bm<*A98e#H?|+9--=)C-wJSK<7w;X@ed^mBXrZ!dD~TO+iMTVyriGhk zb~Y9q79xnf-&d?g1SO-x-V0kfB&;!mqZOs)g86@w2*` zw*m_n7qcjwbE=Mv`Nb>C$}vE%7DKu7i;HY%yS9F*YdbHL*MuBp zU#oW_gZ^`yNt~Bs>!ZpC9)&BRiEkN7HPP77{iutmcjeZS1m&lbhJ|8;W7c|Z)Zi;= zRQxS65CT-+N@h}4L=$$Oq?&342d(UPmWd*>>9o|+c#V+R?guR48I$_EU+-4jVd#SS#*7d!>Kj34e%3JCP} zCiA&3HKB7m2lGGKE#~kTA>0In?uV=ci%i;9+93?(RVBMdyiVD#FwI*q!pTf{5Nt9>p>Z^c~kT+-oY?1o_F& zl)n5_osP0NIXEl3Npw?ZP)A)@y;jwOiLY+2cCIESc%<06Z}{=|#JEGs&9u*--Db9L zlb?Ls<+RqGP?$<%yruhHb!IVY4$sd&Liv(#lpuh`fW9e0LZVT@_S(Gn#!;okYM5P^ zVABWYhNFoso|C1e)#@QP^gWRh!jkMu)}&`@(|!VUZf?cSOzRVp6%{F|!fQ%>&YO_s ziFl&c)|RG)G^(Pkr>OkiaXTg(wJ&{Dxs@BmTfQSjJbX?k zxCW?<9L+LANy9qjdI{O+OVUw5h5|W7a`!6o{^7J9S92;`JKG&)e(@cpBFsOkrPgsZ zstkEKqvu+n!^HYO=BaWyJ7UAS{WWju0lEJ8Czc$3z8$uQVg4c{g!^0TLgYjvZgYhf z?I)b8b#M!(g9pyKQwjJS-TM)%qMW(8*&EP_W7i*!Npo`Uvu-$^ ztoF&WC054UjW{~1&Pxvj0A?R{C=1p2>iP9hJw`)%?Wyg+cV%%daWBp@w~gi2+<^}H z>8zK_8+{#V0=k#3GTmI-=#`9B#g_67$#7hU=a{wGwG-+16=h`^7CjQVtgL1xv-kE= zdKE^C{d#-Tbp`I+qmq@~+5O69($eOCaY*uOboYjLh%;bM{et1v){HQlVh-zZmj+)< zV6mbY#(~f1{>)dQ{rK@?Z*T9BSHr_<6;7nUPArq$$;pekx2S|NGC5^7WoF~$ zKTS%NL(V+Tw$CuEg=d0KE_0tw$k)xb9)%`}ZjoQ^ z?0tn((7k`YpcA(Yf5Kx-Io!;6el3jWI29A&?67^9SaHy5^mBY9=*I|pJLRm#KFgJwoXe; z&C#i;ym#^|Lop4i{Pw7LUf064Q6*$03Y**46hM#1#p2F$UYN$C?0A98YWKr0dwXvT zn%9H`MGC|%m6TQ*19sS2GD(lsT|b|1-k~4g6(?6vy*M-=Jk*&wZ78CzDyFY{;vKM# zNA9+@kf{4}q%nSYK6nbR+Ea0B0lQnF2o7jUhXC32jHR{~uS)U3&<~=FaQ;{GbxV{= zNKJV0BpdfGn#%xo`^t~I`d5`9!$H*{` z3H9q@+i9uKou`QpuzBbyCm+|a6Q0w$bx-h3X?ogxGY~;&5w%`$bk$JMhqf_2(X8V? zX`73hW30}9Y1*DNI~J10WKylXznX`GFUsR|{}eulE=fzj(K_2cRgB7vsG@ zfYY3=oge!q9k<+U7zwioY&<}VAzCo$C1%j?8Fvmb^ z=Ta~+F;P&w^A!msn4X>O`zneta`gT#ey&DICKN{xA3j8W2;4$@E;WbKni?){B)rSO zVD{qtG+Nuq9q4t7!R+P19OBcCDBmaS?0LF%{Jc0+qWtfYG8Dz?yY}u&no!iFPHpwxQ z_&$MQj~)=EudC)(l<)9%Scl_LSW3#rJf?~YOwNQ-ZJtVx7*;lMT1rYvefvbG68>T) zo16t;bJM0SbUfa(7C@~X++r-7VrolGjQ8TRu5(lI1VU& zpk6U(3RKU3@dNh5oW_f|NQqQLL{!wlf;1N!9ni2N*J< zYN}9~F&yw(axWM6i{rWYG zk%^Ypyf;N0vV*pk7LwTTa+Xkm!|mk6aq9dU)DOGU@1zWjjCcW!^EdO!3d7om0qgLR+$)6gWtD5Vqw2wz4 zA~bh4^V&ESZFXEeq?J1lf-YU9ZR+a1;-)NncX|s0iU2He=ZqDrZtCV#9mry_r1nMJ zCZTF6@i^R{ST8HPe6j!5Rmi?H#m^0iGuJE178_=* ziNkbrgNzdw>>{kP$x%11<(+^v{2R${ZnmLIl}Mw;-a9L8E+dI^hzKe^?pz4L_l}sl z^pYGJ%Z_FcZRMN3e z^c#F3-K(VPdwJE$QO`N4=4g~ahO&EPWV3DJ#r_o36~#1}`Q78`>1oSWAkF|x4nf@o zjC-`E@Wz{dmgk-c1juduOb_<;KYVTuUGZET92}N@X=#h1Wu>5UKr-Y{tOF_@M63Zh zGK(INJc0Dv+uIw=RysyQ)_;ZwphmOCZ9kGu6>i7@WF|JYBAEnk2908BTH3ar zo`PC;)qA|NH;{u&7w6*Q>iZ@=maiuS1u#q?u!fA?3Tm%OG~DxsAc63!~Ww1 z_%N8GY3~;v9X$j93PcB_PyqoFvj-$Um}w#$9EvexdHK+QfcBs7?*dxq2La8EK-uvr z7uWI0iLs$!AOVa1(bhD=VWpqO-hTJ@@85Q_jr!ZZn2!LE|3g3^hS*)`Tm?#NrU<2cmN5BT*!K-WEZFdheeHC>kj@m%%*13;TatB-I`E-x>N4!X$jcP zBZ`WO!ow9ug5Uf21cRP5{qy~7QxNFz6yzg!6%Mt9|DFRmw!vKORY(*Y8(kY5mcz{O zO$-cHpmTwCMo&XC0%92;=7WuiDz|-ej&HF0K46d??Ct{I+yahX3;`fztuHM^s~u8J zM|(TKFaVDswY6T__cB*xKJzZahp(-9EOwEQn-6A>z>SUw0qTmB>ITpQLVUPH>KgVA zNC!}zI|B!1U8#+$knx0^d?qWeRzX1ljtCMs0hEPZ6&@4QIyv9p-wztYRHdT@fOcSb zaBp1)%5iUh9|TedTifYTTPLSUQ1>APPt~}?%2n8P4}g3D(is#3hoI{L(gk~ifZJYr zW~RAzP)X+5`T0P9KLFfEnnx=GbgHUDeC`KF$H%~eaC32ChOXVnIQ7z3Vf%9;I@K!d zQiFn|!9D?>TK-cch^WM@&&L<^-H{wkPI6XGPVe&*c6TLR-Kow_X+=dg8X9qWJk@@? z!;J|(Uf!la!r8gG;+NAuHAtI9iP((Mc&;2h!XidT4+1eB$pZrU9U2;%*bT@4pJ`!n zadBb6X=B{AH4Jz{Fd|&Pc{4LT9hAlk*d0Mc?BwKN|A6gqzXvu6t=sDuBpWn7F#(uh z7J$v{?E3n8J32A2VzIHKjRE*P4ohE>l9EzWl_kHP;=s8B=m_v{s?0{W%4vQ0XG=>9 z9)ku{3io@yzrF^9T4HQ$W=@WF$T{NQZ4(aO2%~U?jpctrnhnZac|U`GnY^}U>F$0C zrv>Dm&pgi7!2IHtm>C-G!N&LX^?mgUg^Vl_G{62?g=b_9(mL}Z5(x6p^c@ZRg^p#Y zZ9(dX7-3Q3KEMiokBxala*axdWk8^?FTkQBFOTK-jv=p&Z8$$aA2woRL&Mhb8QhM& zV>>&nGAysd`lut!ZX(AU4Z{~NUV;P+2fC;a+t*i*fHb7p+Mam-Zc*%?bZ!1QE^Z9f z;Le>p2y)ER>r6B>8DT9Dk+kc)JfT7d3qcF$mK`108D4|5K-3kdSB~!E?mM#s(}O%+Wq)gtzTm$a&hurkI*bP`j?Ia9fQ&0sZjxv#oZfI?J)r zpqh5r5Zk-EitrwJd0PjEcvd5SF$(j^>SJ&qfa3wC_8$@w_-|7%$yl}PE(8Qn%^|8H zw`xrz=nIiGMCRt^*i=%#qb@EyQc_X?nVkbo0_$d^tDeYWaPxG51Cx-L7~bJMT5Lu| zMa86Bi+20=Lu7cwSmpY2(owc9UESS>obk=2l$#VbXQid23<-?EhjaV(?ZnAZe3m(h zd{qP3WmtYGwA;ETE?HR`20z$zkWm69-Q?opA|@sV5*9NjXWnLQzksu|^R;VlA^6bH zOf&S$z7NFz^U9TxC-!b+}v$roQu4z zv(sv_x&lF-@#A21TP2E)fuXafr>D0!Y=Y#8=`V=-=K1FuHH|GUe+~=IkHabNsdV|T zZe06-6qJ>fN7irL#e*c&|6&%VJ7?skzy#<=+)isP)*#mDRyz1~FAlvp-FKmDH!?LX z2hWPNGl)iz_;P<7SnT5&%bChqfk8p=cKE~J>+1>8(TmH= z8M(Qi6A~ui1OS4-!^H(Skp=99tE;PE(#!TJ23SH!w@?I2%gBJ;sXQ)Db3_Ay#2FYE z7>bI0uq3Q#im1^)fBbl^tDD%pn3b7%a(uk)!n^Sc?t+((5B4mwREv}V00Hh08*6JF z4Gp*XHe5KBdwUKC{*Xe}ApS^3(Z_ID5xM)pJtBGM_;_BUHXL_%_uNW2RnO!S&D!C# zT)lQpv)D8=Hg;usc?4P6f1RA11T&SSrDb+Z452#{ROVJNlVBF3qsww!9hCmW{E&}t zqO+5MocxX6CkS0|mb|FS3bo+Y046|!>uzlYe@JM%Fa{a_+U#r*tO8^`RW{#8>;lI#XjMMXKXgR>C*N0WEm zp{Qr>P81mG=>h)_Nj)BUjR=e( z?pi){Z>+sIvGCD@ZDeR_+Jfh_HoQGq#{Alp|j<}djKQZ7JP7@*W>7;-X}QM>ytHc z$HSWHoXAj7?YN3p&y3~QFg_lC&Q<4m>ICV31O=G5@86$&n*o=Id8Ne=qmN!GgizZV zgpZz1t%sShv5JyX1GAKxni`b<^O>rvc&e+-xZQsbVy5}`S62}I5c7P{i6<)^+Xn}u zd;wy*@RFWJ&B9DTY?eUqlG?z_AU~BA7sJUgq64%L&+i%Q3!-?X(>m-xDFmQ$uj8Fm zu#J8A&MzcAy8)*a%Dw_*>oVJfzVR_K5*HJ&(E=Eq5PNWphlhtj0RT(IwJ(o zSFc{d3dAzi|e#9;Q54fu23MAJFJ%9}xO)`H8iG zs{;N{5vM37O@-1sr(Z1RT0#*N5WN*LGBa0Tcaf8mU%h(O!@~n;cxI>^9?O0P7nA;S zZz`Zhj5~K|HR)hDQK*lZ=;gp-5PQY#7 zmse8ie>|ygT@BL!xn!;9?9Ai!Gda#O0y@<{VOdF8NeKtD#$}rvLIR)%qiX=QhY5W2 zl9K_9tw~8qf$h!V{KSzQC}C2lONgDo(No%%EF1uyw{8eyV9LXMBm%cc4k82_Ti?)7 zbn`5L-kUdW0C5?u308{~C`Ph&jKdf!oo_|-EVn$n?U1(*br%E4Y zp2ubD0cMU`fj$Hn_%z59eqe3x?$)jKsPOT*sahi(fCmOVK*mt1EP?gV+)OKS7+_vo zBppQG?%C}I{eqB?kb;73kh-Bj7=c6zKN%YtL7KCgs!gcDZw?{jgxV0iuk!LV3=I1_ zI{^0q@F3BikdTmHOHvn|KzafL=(7hv-Rr6VK-8=Efq)ADlaPQQ-#K40 znsI(|2A!BAAAb&b=?VB8aF4%ufs|e_NVuN>MGD}<$k^B#V4UyD5}xXLr0$;KGcRYJY6 z_+Q(-KOew;bVLNbTKPKHLuGbuX+NC(_2M3(vf zE4Ij@08WZEI)@tWWr?O%{t8FMaS|pzx2E0S5EG*--F5rLIs=sHvXMe<0&?Lxu&QAj)i} z2BkkBX9X_Wo)mFxuxkG;4@!5$pfduOZQ{QzOR8qA8xpLW7HN zlDDY&cR=Y^0I`e7$mA}W9uwM_nPouu&T;(fsYdy76RKhW45|(|Q~$LH|1V^YA}94P za{m8-@c-vts2F5a4Pm;P6)GV}tpb2O!Mq)*nU$XpR`L(cvp@vdA${DmV-fLSk7e`% zM9fQ?2Wi7D2*7A`4w$!y+0CKV;v>}8c2!F97THtYm!1%K;jBQ6L#m8VU;YM>YID4z zo;0Vr8;)Ma&ivn=mshgN284MfCG7RgNJI0+d^`9(Bw=yD6y851g5pdT(rSfRh7vR)=#W=}4g-T=81pSFMXRK$2 z&;~U^@2_9w4$EPH@Ie5ZJ5dz3Komm*0${M1*jR|kY>>}@7=jmgfYpr5Vu1qv%C(zHlvsbqWRA$GYo@z@3n&~vU@pkW z$VP+!$lthe0|Y)2OmPaV1F%^Jk@B4Y1(%-E2`9)7BOD0K8bHoaoRM=w`v!a^Y86GK z#0WZE6+)54QDI@grwJm!iyfM?vzk{2c~i-b8>|OV6hLWY>-h)gqrBpl!>3bqTpx{` zCs%1ep~R&@a&seyWdlKVk2;4)NH zR8@t7^z}mq|fWb)$Fi-W|{O=q* zn@A4`RF#ztnfNG?Ivzg_&=o>56epnE_99VlSa^7Qt(s;9?2u02EV>r~&qOn180r_v zQG;>#awRJdAO?tMB$${#q+@a=ERYQxR8j~)^mP{}S#RII1+lHD$R1L~NMDY6kq9+3 zIta?jcAKLkTg>1xM`#;X7q*KQbQ}9EL3a=^sK7ovB4@0R(5zc|+X;1}3*=ISp_$nT zH0Y3nG>BI=92pOs+nYCUVBII=P__SeS_0gWJ(G&G=?L?)8`LFn*`X3&g+U=8B|01X6c(QX0s zVQfs+&^a^m@$ub7UIEY+!K7K5?f>@Q?zC71d_o&3DYUAdELA231_pAsqpgRD-O=YR z7;)GDwPE&^3r2uE6h$CjGR!S36w=9%a66?lX?k|8aPmLZt0im!5p*7*g)z@`(0zB>&uy?^4Ye$#|q!x7T zU{XGQ4EN}fzYVt>M8E=NUkjd{l}fRfvYwuvgTo%@lt=x>JyPCspk)Wlt$=lgs#gs7 zKpGlXa2%YPx&gBbJK^F*;vevi@8||msO%ys z@_D~i^L92jH@CNE?VKUKT5x@tR1W(-*x080_kU3wG5)*VivNGW#eX$QUT2@wS5W8$ zdNE=r-HZ}qqzi&ASVsYGAs)mK+)WPA;$nY&K;0ME}#hlXhtH-(k9kP(3^k+OR4(%y<3>? z1d~ci9Kni%UaD?DXk%wr`2M}Hbjjb%j&jKk=LEQB_Td+h!{H8GzW@8#WYW|)gKMJR zTYP^BzyEV+;Xf4O|CLXCQz>91V=L28ufB9W z+R_U;B*PIeD0gX2AQ5`w^JL@~!l*=I7Ci{{=DqQ)A)o4A-jVzSXQv$xm$gf@`xVpMH7r5gV{kuhrfyOw4zE;Qv zgD&0Ae~i0(=1r73=|tD~l>Fng94FaI+8V9R$Wv;6w%?Su5ZC!AoV-G8h%uM&GhsN7 zbZ%YORcM9l7#LuG^vGbx@Qi22)odVBSwsZz1lpNG*eNk0v6xJ zy?DhO#dP2;Atch#4fWoC#?nw1Kz26v!b*9)&g9%G#jF931Kb5k;;4)Fx~>7+!}D~l zuzeodS^UJP?-zQ9W(+Z2L-`&p@h9CXDx2%?iCqc{sP!$OniUP>nkE9NOKKEw>UzK zur+XN@5F7~iMVcAfhFrF%1ikfE2Q}mIq9}U17-7Uuy_7ENaxVUAPEGptgH=arJ$zU zT>)p=+Uk9P%0P1h{R)-k;J^S0o3WIg9V?QT0@S1l#HK6aT~(Dkq%}~| zfF?NITLy~b$_R>$jm<_7Y_TJ7WjSt)t5f6bxbOm+;-I3Vvw->-C^)=3@1ZCJVpR=z z4p8g`PTYQq@?7qn)eIeidumN%ERy(zk@>(k`8YU$zd!uIW!K-0LqD`*>i!V@DN@bi z9QO2`)^lv6j0HS*W>yvyQj5SUAR>UAHtrx`V90@G0JWW+X)`gB2#;Rvdw2mf29}Nk zmq{1s=l2jPKtl^&Tucn?1W2tO{ps=mr@)$^MFyk~R24{aAW3c*C<%a%ljXK=Eerua zIeIC7x%tk==N<_+fHYNV9B3PE>+1ubx+3GZov95F&@lda3N^y7WZ}C2Wr1x2!Ca@# zt43o2k|~ty@xZ-6pK49bIUv&ctMFw2UNlS0DRJ&VWeB}tSa8Vjv7v_B8j5|JoDhH#zi_eJm&(mLngB;M1#(|WGU^1@0 ze&q`g9+Y_KtcUq@TItV#6D}eu>J8}_GW*`afiZzGXlk$ykvaUpo`8-G;x42!ey=kZ zkm{gC4(ijztN;A-4-ng++df0U2Lqtq1v;p@rlx|B26QVZ`FLOcewCQ0D zLm))M=tAngY!!6z@rfclrB1edRpq7XjL&_k=~=RqUwzzucn|MhO`sbklUUbQhiTGS zGDjsK-^lRu$1YHqfh#fw#siA|=0uf=g#`>!8~X2n-~q7Q^z)}a=s7^#8PkCX4i3pN zUefN4jy2#(VbGSx@H?o9u)kwNLwi7MfE@v6hK`MG7a%{lH83$Tp>l%a5ExQR5BMEE z4Rqe^PR=RleFa*Li<|qTYP0qcIdIE?foM*|we;|u1F*n>RtLch)LEoxDJS<4@Y$L{ zB*ukPbX3&B$_f-$M4)N_!32$CZ~--1NN6VP@9%GEWfjM6Q3_qvz)~XxYG8jAG9vDR z{<%C^b81s}zOcEO7#_a+`^PodkUTs*(3a0g_4MiR;9x1x2tf7%2ETjjR=N9OZcWV} z%4vP1=<%aRZ+(GlWxX%~Q%9l~`W1d2Dc51Nd=1)+8TUr#SzTi1@k!eU3(s1et1c0%nf zn8Zv;`JRr~egTaq9nj&(3%E0I-(U6|2zlKP=#dQ;@F0hr>})MLx$nxw1qBb2eSL4`B4{H4xl%oN@M>az zd;4KB?C9{j$Zqw)!FzY_8aRV?A&Y>`wQv>K`P5WOOfK$=x+y(mLA(S=i=E5v$PkJt zM6unxL@ovN6#CLLFr+HbsJdL7xgMAV(jEV{aRveqPMo5xEsJw8U^6g5LW62}&d$!f zB>BovUZUkR1ZimGS+o~0L#qedRe~?j;uTm2sv|%bzob;iC(>d_V6{FP`sL`aRrN57h<9`Rb_$X(> z6vQ*cXt5+4*Dg~6m41p*D2N+}o?XXMhZ9CaOH0IR=OfM@?jEmkoXS@F_%y)>j)Z|LO-)0?ACU~F*j9NMH6JRHX$hcokb<8d z_T$1Tm>Yz{+AvFjS_hKGX=rK!mFJ^xiUQ4PGIm_2oig;%>uA1xH(CZ9IypE5uy`h- zjVvs(($WsW0nyahh$#;q31|H&TbDY{}_?K4`ODR5-s|@i$h@saL>Jacbz`<<|Vsh=(a=( zEQ6U}`8!GHUCCYeHIh=MrlmzoGryw)8c?VNMIb_0JT;61j<_UZO^fPYNV7#x@)^xH zIDSBY&pQ!wSc)OQWD=2+m6b(TW(rluH|S=8(*|N6fP1*0S`b3aUktVV{3)3GPC9U` z*sT5{t97~OYcq&nbjYJcl5`If*MBZrB%+bj=#kNUqw`SR)u z!NY@G~ac+rcYPAiUeb zKdGvnX}#`1@Vh{> zbOO`>X&Ce|bCW-pzP`dP9#EMH?#QZ-}BZaqAYJy4_}8}(S)wh3Wc zFD({Rda}|$&87I&h8`RQ`axs@pPOgb$194Gll9?~frd~ZOaj~9+5V6&_`gVqiFrUD z1;tA?_K9EDcd2e6i2rJ50A+dax>ssZ5;j;?V;!2y+K57nZ=rE^(#I z?7SXbehiO^83P{;AXT8o4wm~KGcx7^4ZLTq^Xf8qRIJ)d`kaDQ{C)A8dn-}?l9%2~ zxY0DZRx0mwLZuq?Y<)P$G^FG94o2ZE84=Jnl#w+C2sfp7KmtNOyUmY@iG=$*d&`QE zb&KGpa)FEjlEcapmB*`E>C@6u(*)&s+;D|`rH&z89a*=y{$icJhn+s@^gGT6kKdgQ zFN-p1=2;L9sZ6Ntk5oaOpBP?IaSYs1cw!lZuF+M!~MWw zi`+_b7Uq8X^p{qW9j(GKChHb%l8N=+l=f>q0`Bg++8W_SRk8vfvc(0!zNLKf%v~lL zOOR2wHagz~X0RVVzVynx z{gBPL1JsXKJN|8ndTsCo0?bA@yu)?g-j0q~wd8#2<5=* z0G3h30l2vVVikb(Gye+*1!BMG`>d^wVONG;O;%-ns_>W55&qx`^I9=9Iqc=sJTky( zs;5@~d@qzxK<^_FKai;4g8Iy?CkT(sx%Cjr%)P?oogF*3tZVhm@87?7h&_U|bK+eE z>VJOzM?HchIWgV)f_LuTU2Z^8{3ZpP06=$^N{)oIG*XQOugj89APya{xbQyi00U6x zpdkrCF2At|kRG1j0oBvjufU;A1C_nl8HbOHoBBxv!(5$h*Em{Km+D>dNU!mJ&H#oz zsd2QiK$mAVzn5nmgOx;MD!!<;rNu~;N>p3w`=5dZQc|~Q!Xt3~{BJ!p_9()gq@%EF z-7=`RZ?ltVEH@`X`EoDa<3`^qmn5VV35i<|!RYBlBblnuSY{6b+>Y3dhYj$Uoq+*m zY8;su*3=ybeh{+mU|@LfuSA0BQby)8zbAKG=Vx{cJZ&O8JV?VuK=FNe_l|;sB3{7T z3oIs(Dk6Er^E?>o=)Nve$Suytc?16xgyPPIZ72ad7q#-8Ix_3<~u_9G1 z^XaA1o*tM3p}+z74%IvO03d6E%%9ZfrwCE}d^SX2=Z{zO@?god-uRK@6WTADb4{Mpj`RTeZhcJoZTq#?$<$`MqQSC<@- zc`x8u6+U`eT3SlA5z04bfcXE?+Xb2$)cm_UJ4$VU9Dml=1LbaNX4X2p4Nvj{748f0 z1=K^W?d@^k)CK1SJR$(H4tS*8z>l81$2$qTBrEw6 z4oDJAZ}6C$ey51(EYNh$!37ChLG_rc7t|pz8z3Ku24Mi_{r^MUo5xeRzJ0^(y&F`B zqNG7fB^i?;GkZxCMKX_38Iv+)R=br#rc9y8l+2MKb0u>!&q=0`d7gQ{EA9Jvp3mp` z<9^@!x!-5~u|L0GWm)UG&g(pn<2xPLYXFO^Lj1V4wme?b!ZiD;Zaw6Mx;|9m5O)Vw zC0;I85%^^BF8q$pu|2dzhL5$|XzL#BzN3Dyi=}Y<5Zbm)n-qhg%0BE9my+m*y0@dy z*%8D6&dr3_zj4`*;4Kp@R9Bo{**p_SZz{j0;9XMWQN#9yEjY-kP221*vt0*#BC8*% zx{j0C_4jdkx4Zwz%geie{{uEGE40_>nwxBVU`)1(AN?dp!PCq`ee(cAtH8wSFS?-=rbdZnPAZ-B)3&5bM(-DvmPR}(%bI8ox_nme4*7WSE zaARP7f_r_Pr~%FcSD9FjO%_`P9?#b)K{y|xn?5igByf}DAtn3kp1HN#ZSaSl|M2_< z)NAEs|4n2J@!gQvZIa|A{F}{aNbLEg$k?>0n)K;6C?C4r{WnLzw`Vu`t?@EuIrd+8 z!}I3uP+cME&E|hl0>nt)vflW#zcY{PLhJwo@Bj37I8(5jnch@1cW>$J6cZ5GTm1V= zkf{cJ2u5)a7(0{)7*er=;pwAs*x+`)KcIN{5ptHc_I8)ZYxyJ^Fw2l1-s)Te;?ei} z8`yD2DlULN1kiYzlK1v^$ytGv*wQR?H(RL>J_`?bfiL#iGX_7|n9|aXx0RfR780Kl z6!z=8*1<|fJ+V-qiOa}r{PiYritw`kwu|?F{BHbj-!Sv|H$)DmvvphMK$U{!>a?CPS_y0538E~lzwF!zdPRk>6k!DhW^3u{7D6TuDKL`lfMWwF1s`<{^(sOgFUM6j z%U`^Rjh^hX@sp(>K(LZjc#UK4Fxo_wF-OSWa0ehcwG#~oxd{{vR&C3vzKUI=afOA2 zm3twrVCROCE1}}>NfB&TC?K)T6!%WT1p_t@psVfT)C~x!Y@F!OJenLu@k$mG@D-ne^MXvg{;C8j(Ju`$ za|MS@af4jJ?x*~%A0@1%;Bx`V9Jdp&@DrWXH=cM?8U8=!cy*hS5)+4edwKOgZYIjw+b^P}>&o*; zO|^h#j6K*&5F*)m=+Eo3p>EydjzCZ7w+r$7-V|6yeTZVUf6@+Q0lCN|AN+aapgQZiBEC`)oB1 zJwD@8XrHh%va&f{kT6TB6k{fR4i^&vW;ADo(+dbJ&PgO8N*rnks_Jh#Lv~L9U;ou9 zIH8vT(DNBWc}RY7K_To%nPuAgru)R)!CzndJMZGi{3KhtHUu;LP0){v0At1x&wkFG z-OAQhl`jyXYy0~` zCOmO$%Mhm!DTMBhJqJ2QhjzynPt;6i?vjR;wGRaWayXpi$4GD5ZZ5@bdx)DqGu{Po zc3sB{5v=WPZ4iZ6etyQ&*VXBSyM$An-UeqqlwP=}jji?@_snMTi8~kvGV)74xy^wj ziKqP?dSE*NXABi19~$*n7GM%$mEJ-@JR^-FFz_PU7*jlWd|r9)-T?zkSLdL9bfvmk z=pgl>zg3X5c%DKCv9E!FO|Wg@{2~(~si~<9NoxTv&D#B9QDNw}NHoBbp&SWRfgw)l z_V@RUSqcXNDz1lzhvS=SXWi7mo~_OSWQAX6LrpaiTel=XitMb5let)>P=~6xB}TX` zx$AD?@UNiDj#OpwuYhzz1U{W5Tc8=*TxS477bZXNr#lXHBbz6z6!aeg%X)Fkhasm+ zoxG)@59v0v04$`w{(dOc(e`wbd{NM>qJF?qJWg`b#+nHg0|yh$4U@TPD@0l?*!U?3 zl*OzvZTOLnwl-*ecqz#ttypt)YYO;6931j;!&c6|8&_GpeSoo-9PEm_Fgr5?{W%`Rm)`8kOIzvU}uw4XJ zp)^DiCAL=WR9!J?eOM0QdjOpwVY2P_NA;-*wA0`Sf~!PPQBhyN8-C5B%*+W%AYhPR zj29mOFJE6@wqaJoU0(pXd3lYtq%v`;_2oi~9jHR?5_f_VsigWjJe;bP{iU{c0y{W) zi>}$WBq-%Z39$GF$~Eu9V!}WR&|m!8Ccr<4XGDk|_9=Y*mEBMFtc;#np$ra|8EFt9 zRPzsO1{z#x;er7Nc#<1-!mbRH269D(T?G+NvH0VRd={&x8|Q0dVU37Y6Y}@)eYX=( z`c>``Q9+c^XkXu_Q=c7;cBv|UWmrKDX`nQo2BrAukKiDe$BRyoVqU#MVrPMyR#H7G zX_IXL#mC3T;Z&HzhSZ?-&k)1-w%IFp2x&c<#t-4^H644FZ0Uo2M9T4LczB9zOMo_4 z1gLA=y2X^Ov$L}Ro3;~XE`5h)7`M!e23Q#G$H3>1J^S{_oXBKjXTKs(wV@}O=wHZp zZvhksRSd}&E;g*E!t6CjsPIwLic5h}oR1SnHyy{j{R#li^A|53Cn2VoEN;?CgyG|g zmR1`jGyydJUo7vSYP=0O`J5AT6z!a- z`t+W)4uX^$>y9qR?PM9%ez$nhXF|{_vSn*Q=8nP!n+J4#=(r%d1Xg4N>VO!jcsb6} z43&jG!w)=$9_5%vpR2 zz!P?tm9f0>=g*%Tmthx!nFAkFrTW9h)3We2Vf!17R|!M^1aoMBD%LbV{kz0}?bx)r zwZ=td!}_;L@`dF8FU7yyC@08XLF{%oB%m=H_1e%o-(!gfA_^7kc8|T8~a$TEG%Du89>^SO}-9Vssk$3=+&{mh6-7|0$srv_WMgx;n2gxaS>(BQ~iQ8p}_q3asFm@`gq~;r8J><<)z5PzmD&A$HTzCVcmt54aXKj zIWOW6KYlzmC2vEKrkB<(m+yFZr2CE?e%oO+g^0w|nkF^xJWz_OE<=8rJZFB$Wx5uhcjz0r_tM1j*kZT z&t6ZOkIWo?%GM(lX?OWs(YK(*Q7Ni}WQR*5oka6AIQR@sMzBqQ@sLV|6bW8oVa?0t zXf`LC<|8eiv*<81?jsGjg{-06moC}CN505&z& zN6l{H4kTKcO()+j?Zt~jkBarv)NxT_ZGdw^aE+}jAv(GN5&Kvf&|RKFFhWi-suD<; zpFMoICAbP)&_UREQJe;_qfC8BBHu`SU=3Jn?d<`bU8wU4<>lc4kb3!KzSRIV;Zs%B zu$0!up83-B=%gW?;VH^u8aLFer%va{GyBW-D+wJnV*N-%40y{#IJTy;5@)f5&JZVP z2cUJ-xKJOH85iuo5)wtw*4FQU6o)JmZcRH%=tJ52OY@%t(mPTP?Wr9KXY@w>=y#7F z2X+eMvmsVBQ=LBwvstwND5e3{q0{S3yCwsJ6ks}p3?v`%lZEpS%5Yc=aiXKi;)kyb zm@-sT(DV~!ao_N`;4w-3dQ(zT^46`Cu&^*oeOcLZY}yd{P!J&g!B!9D185920?)&)oI%=X_jC`_}2XKF(#b)K=Dn#Hm`~a{SLrM-21tj;$gSP=W zQZtDkq@|t2-2kJ3f)k)Glp9W;CNHZhDk7fQ4ZS2{FgVrUeBZNijqk0K$sl5gVrjW? zZEOuQ8+~w)TxH4Ww6k21p4Xqqe<`PzpwypYn-X_MK$#B$+0Yn0iin87BY{E;WEPk? zvn?&k0u#A|m$Ngxg-C2C>x{{V3D5{0`Mm-q!(00^x}G}Mo-VV=jp zbYKex3!u*D`^r{({Y&@lZ-ve{Cl7$*!#;{bZE0Zv2sV-Y=>gD^&2?zRA*=$XjfMb% zCN@pv&@l2CoJEHSt6)90HHg(vrX583cyad=CJCg}{zGGlP6_&8Z$|zER4cF`pwU!^ z-w4fTfMYuJJ214Oe$H`|8G^|Kn-csX2>s9n-H(-ol3wCF>&D_{jraN_Cu4nlYTYxh z|LN4}^BOrZ`9w{`Wg3qKR>scAd?`2Cx;FD^8S!N(?x6C9k@4gX`hA=&*ICJ7cUbUO zxS)dZQf4bajsM8jt=h1ve~R2>TtJx)13hfS1d{$U$YORAu}A}20Hf25CRA>+qpG-` z?(0ia(t+EAkP<|r^Kp4LtxCykCVLCPmKBVnGaY2?_|HAr4BH!%D-{9)e{8r@+?Do0D`4mf(RugyIS8 zspOHDa(el8kdVo(y+}F#0SH!!L4RK#L{vh8f=+|y@b*}T$~(Gj)M2#(j^@}ej2-l{ z_aM1cKTVW{xdVTSs28&T7Di}*qkn^bVB~uZ)gW7qBp&@)7*F9h(wnA+`JAltfVC9{ zrY2v4)Q0`|<>|*8r;*~GOrFxj>bkw4?(01)&)eg+%WJE$aIyOb1iDvM9`FBO)ep53 zd$Q#sQWM{u)wmy&eZeK9{jpPiN#d9 zP59SMmNch)!OvrEIbJR1ra!nTb+4AEv^t4q|55+SSd>b~=vNg61J55j?f%HC?8L2> zPoGFMN}8GpN|)pY>rHWL;d-6{x&Z<@@>+HtZZy5#&37K zpT!CJNH<>jf=nQNM{I*eqIO@>!P8yCI*(#454q{H?V@GxowUPFix-GdJi^%Gr=bxH zf`1c=tI+v4M!XxuBu;B9IhvZkp3!^jq3sO4vt~a}_?>5qp|@7dR@T;JImu2R3~h>o zRO*y$sw_*-8$qeCU8|o)bMx}{5Mg6dal0NNY9FP3p^hP*nV&z9rXJeYexk5RgA6%1 z0}>trsb*k#c^Q#lDDkye{BfX@$Y*;OWIobebhrZyZs-;Y3kt+IBYB1D5i$%=5eV2Jwdfh@`co*p{o8Y1Hzzt$akfV@4&u&Eok$RAb?;@rIWKKQ>4}uf3xeB=fO`? z5UfpEfqh0C&Oq8lzwpc``Da7&v2~Gr(bk;&sf|2OP(%FV+r>C=c;XgU_G8oZe*Cx= zBdJKW?x8qdke0>UFO2uAtg14rkJ(P>!}kUx6RB`13Ti>Pb>C@oy;u&Vu>?E`8ch0> zOE8`Tm^%_bEkNE3ts4Xlb7*{jIBoz&FBSh6-d=8--O#RrWHnj`ld;S*SrMIgY^k)k z@T_of#1scsrpBX4XzS>})fZ=DgWMgB@WtnXJmTUmpy;sYT~@ZTu{llxL0y=XbQ8EG zydQuDkSeqzqQ>X(W5~NzkiCpkl$?NuZG{yz==DKq zfvz6THg-JepFSNsb;_3u<5|WU;%acU0oSPk4pmmpz@ZMLVIKN*`@()~M2HR==_*NuYX3qdn^F#b9gQT6;zwu;cB>P(xh=r%L#G>Jy1DaxPqq-NdOJ-1Mu<9%+Hh6)Q$0bM(_OsHpryB5X+V=36GQ)-yj@>41lM# z>;V3{U&!)Ur!$TiBst&;vomGj(LktNYg^l-T|PcPY9k?xisA}p|Cywnqokm~Eh@UA z^XOq^O%1sDIG{yxi=ggLQ;u?hI544%~rJX42(JL{c zHwu)i%DI`6c|Q|-cj7vY7k_$8KeP~UWY4ywS@^$RM@<7KS#mBSvJ3$^jyoK5 zh$S;fvx8X!2l*@d_AK+^HEz`KDCu?+QNqEb@)Mf?{uTb)-%k&)u)2G2EUC)aesj(>tpHZ>VcVyW!8E??+LA zQlCVF6FpD`_8Q4y#2L!vh(hEaG~SV|aM>83DaCe5%B1`uJk~Vin0NWE6uqKwGNumS zv8)_E6C7h1nVFEeLv?bNc@d1|b^^EusHgOw;nb+-T*J9wO%F*2`e`GM zz<5ARl9Kn7*__pWFI5}40+SiJgT1lBcgOIKaukaohE2|63>o+tw78dZ(&br10I;C! zr672S#_vU$A2|vxwu?j)uT0LTgJuob5L$d%A{t$IOr$9Q)_;4W{}-ctP z`k`!pq{vE1LGju}3Qb;PLqi^j(sSqBK<)+w?Inf#(8Zw%;?#aOvB!JkNO`Z;TXix2AoU|}mBXTTzPe+1I1X`K*0H{3 z#_Gi0Pd-RvH zjI%cT%^TyEltY|6NZZTKc5QLPflom|qX%9pdGYU!O=IDLa}HTr2(F3oPek(}GYh|p z<ucuxe}tXl#?Z*)~3_UMjcnB)U|xErli>_XYP87xs0ZJQ@f!R5*A@0UB5z z%Ua@T3VoBF4#p5fjs}iS9B`nTOgs!3Ub%5n9u`F;<8xRG*Vn*ls%Q+L*a2h&_3~u| zTtE9%QsT9rx3snOSrGWWGDIBdUP;Ctu#ZH8h(ktOGzU);-5b@(3lM zd5ZWd1_nWZL2ScN86hU9cE1mhE(!u}jDoD}!c6kpwh?rZXp^9#MC(L+3<6vyz~4Vw z+h6y@$l%~>Rt?a*sO`|n$0`jWyyw{NioC3PAPngFPJV-;cceX&ott|c6%b_1h(-*o z>bDlmzJT}S?~2})@SAs1S+3t>fih0S=I2?8NS{9wwEyM`h8|-E9LujBba@Vy>(IeV zOv0bZsXAoUY0l%aURokZN(utH%cwJzu;EEv#twj&KTQ-x3OPW_X<-6N-@zDFn5xt< zTry7pwvkRWRH*;y=;=EVqJ+grq7eu~aWV{a3~{pFG|Yh)*i&VV=9FB{HaOOaJRkDd zxT&F|atiq*UmzOxXp+V+Jb@h>6IhbHy{VlOqoWaXd4yPwg08Bv(zGxT7%3n$6)p+q zB|hgu+7~Vwa&l(qoUu0oXM1Nm%1AiN;t$?v4-w&cnB#Yj0wJ3K!SLMiojUbQz+Cf} zG6N~b01*>j{e^|BASZ`RS*$&XU1z3-;QJ!SW8{3rFICemDJy$KGnMjER|Dn^b&lrx z`l-3Ol>f0J*?x$nSds1An9~S|4h{-?TubN_(AGZW0*IOCyevQ<>6Wg5AH0M$Qq_M8 z<3BEqI3d{szAPfVWase!Ko*g9qiS#NEmUgYl98{5?*A+|aShlUS&?6lgAZY-00n?) z>5=(Q4jhSSO@9q%+=m?-J7;|;?iwg_?KFcDyaN3-Sj(Y^KzYkOkTdJQlz# zpoSHoeUQCj_UH)`Mw6nlM?;+Y=FM%Ol^O9^T~;~TOQByJj?+;5`0^qT3J3i3(BL4r zT8hp8VE_6RkZ>R35LYma&>WKUih&l_5up+*p>M(B)WoBQT^eRY3IYH&0!coUuL9cP zi|eYtA89Vtz$-kQ8tKPS!9HMIdaUxj;l}mrh=(I5>N>A-q0Im)Y25It8iObj zQ#X=z6xC2N7X6bL8p((pV_=*xI%uRBNY9c}?QuYY2Q~S$Q7kU_EbLA-b=zfNY`lOJ zlfvwF9J{8GziB%?>L>qw>b?4eVQS?8Y#nG!ph-b^ZOZa*#)iqQtQWdEbQQpe8qaSl zto_7Jw*vwg2ySp5z~2jX*3Vp-jSDrQ50UYO3za}*;Y!5Gs=a(@ftYHF{SLYu0EOmt zQCoiVZ0}p}7-t&S8GtFb%mJ0$o7r`rn`iPBlwrTF?a|?l&)_r)xfmQt2sA-H8>hvR zoP0ho-l>_HvtKvpzgkL|G%;Nf8)RmFC*A|kdpfEno6g_*JjF1yD*5=spfgLySuk>i z^v7>m;Kh%J$69REj`Py8;kc_^} zN^3i)QyA{9;Vkx-)UP5E7cb#=ZTtP&Daz@&h?dxrEkVt;=Sp84wLIxQ{cm-q@#FfQkM&XiysFl!+MlD&VQ}_i?ig*Oz+TVTIE(MC`ArRFyR5Be zsk|DJ zWoM6Xc-NqDH#6cEZ-l}CkN<*GA^P`UiZocU@iez)nyKmBy;!`8y7d~>g zpH(`cwQbXaJi{vi7f38cY=;+Dq}%t^U*cRj_Elk|E{@5$z@?#iF;XrusX0xn=EV6L z<)7oN1$Qr%e{3J04jvko%U?b`-q8DV$Ygl`Z7NE8H@>m@q^kbgnb;r>j_$rw5xT(N z#Al$dkGNMv)Lj*ihyYj*_#a<=>$Yv6aozxwC!c7Uo$)z{JwnGpL;UB#1E2|b;q(R_ z2Weg|%G}(s7c9frvrSDCPP1QbeIN{B_)B|HT{s$L zAv*0t5yZE2Si(gV0R-&q!(hT-V?ls)d1a+i(gI9QfIU!o!p&3X+J&4g*ojsElgAE} zp^hVak;AHOt*v1_-$Wpl^@0qnX>OiF?T1P^xik9DP^rbExoEjGTR~r8JwU;aY&QH4 zoP0jFB3Qn`XEq6VV$N9)CVHT%WN9u zu2Y*U2-A3eGGKeoL2%~Yht+C)jb7I@wKO&N-?3{yXwI1x1f03J=Z(gQh{aew?c3Uv zf3*M{4jR)z0JP9v;r##9JBbrq8F}=Jb3`4qC_iclH7kz%h(x%Nt#!l=P zw|#vDCAtJScH~c?CeUQw>shq;;{ZlIqHYC@om-FSYU)vQ~^sfjI_76Z9#PHpXh z?722WE6b&v2$uOtnecOL+Gr^)(`2T17w`HBSydHt{fVz`d-t;CHOF2lvsm5M@?p)z zuQ2_SqfqbZu#z8d1i^D3eq{8X_xl|?{7>qzV#BmH4uN5mCdKC;Nn|*~m|R<13$0z< zavqq1FNo)Ja>27zR8)j^5Ni=n=Q@lMND~8viFJcY{G=*blM7%G)d~3}CgyWU1oM`P8KV{%Xm&CF;6{j8oAz|l~QiJ3G+ME?w_JVuQh zC%3w?^0~U2oZ9Dq_@j(5SQGdG0D_av8h^9bcP!B>3}Wat3Z@rG?y2O>+fX~hkQopW zp&$p%6U+;7cUUxz`#GUU9y_hMNbF_!O{{)U$r!Hcp16qZB2^?5nEIw zQ9!d4tmhKRREL4=@V{VLH#=$ZuTyF3>Rz%~0v!2LZJ`Lhw<9!z!^0@Xo@Hgh?u^YD zBOMrpYT_e}KMHJx@ zt||Fi=y+q4|EIh(A&-R z#Oh!BGjDcCp9cl*aF#BHwr*&LU;KH(=~JMLE=li^f0CiYj+p>IuPHLeTg#WFqxiKhrWbseci zQ?nn#vd1U(pK3LFx&EbKnNH_tV{{ANL&es7AiTip2lsV~J#*7jk9-cV7uw6k9WGd+ zUYskh@bB_EoT#pLZ0{l^!%RzZ$IqpGNmaXg@|Ob57Xs5lkm292O(NVdFz1|Rx+gaI!F)eJy8o0gO`f@hGd z--P0_DQ(Xtexj=$*Z>^bc-f$_!sCt(@dOEhm#)**XV3ve73t#m&$8&cL=l1>4DpED z$(;binSgfK%t3OnDYfM_uADjL zt956x%5^bWk14`gB#To^u&ePC=~T?im$#dJrbRnD=WlkUvkER)j?7BA9z0H&bEkK% zqT#as^uTJ`UA4h{U(`WGiHiLbrJd(l*|^%Wy62f57#igKwo*?xu#-k;2ny8s& zEPicj-c?8R?oxSVcxSFr(c-`zrPIl_z0Kwr0FynJ!qB_=4;*9X`*!;&Lp#e&OMXH~ zN|EX;Fm)>BD3_M^J$Y{UT`e|M++YvDR2CNU2!&&$XV@yk!uAjWPhqZLC-z9_1(1{e z5$sk=3oxlHbp6g#eeMS5g2-uuni-F&8~9P>;enY^_MtIA6?pZkZ*cHFM#i6b0+0uf zpTXe^?jjvL8Q|KPFDc^AOBnW{a^s~!3F@{U7^J{jBWV-`9=b|Mi{7|7s^RH~HgA0s z2{ah|;>&^Naq?ghoWn?x#-zg!c=o{V0c^0Y18@L@2KYOBY7`xBQ>3|tyP)VMeye9 zBBK+#?!R~WI(YBXqg^J8-^w3c`|F(bXnk9K`rq>@Ix9{NG7&}ZX?|c=rQ&4#OcmPw z{p$Gls}enVksh`la&iy;83=U<|r4_%VnxR7>m3NN3_BFE4(nXJUTaw$6?(d#xWa8+NM>6PX`v2qS#1^N(xK zG@0(KB{Zv2!JV<@{QcRW)jo!g`4x+07{y|5b%NLGEvAmx+l z?5fX?6jb|enS)g^Z?VsHKRLcvnfu!@{}QS$+WlIHfLNN#R9r1Jk-x z2lt8^BH}HNLiUA86fVeT2V{he5wHhYasSS2e3am{+1Ys&nZ1C@0i*cI&ZL;4#3ui9 zn7mX~gP>VKh(C@EI=RGk-bamSC|(%X#uBA$1s2F_;Kk)#vRf-$2(JZjTXzScw>2)2VRV~YY8p^JdL{Nm6MGEC`QzJ zgYu7<+FcPbtG2rTa&Ia1%tMU=2e_g#lAh2^^+>meQiTaSF4smJEmOE&WG_Ww?-%~9 zJys=<%562{Yi;e3oBEG~f>Z+!8sk4~gyAvD3|mT02jF`UPpTW=AUZoPka4NU0Iur zi!(SNSg!J+Qlu=)?y66_F;K<7aiC@WF(*(pRIQkRC!3>qhvlr%!OKrd>asm#ICmWo z7=bTE;oIl}d=QZ+{Jr)YrfA#!W zff&iB0WuU2=5W73>9#nYj4={q?b77p3X|)KUl1lNKy0ICzb+uQ2mOOe0FHBr-_`); z;Z#SVt=4dOQ@)!z9PPZXPL0C-iGUm1JxPaO`y5&9`)KDp*+a8oYwE8rtQP9N8_vd=i`xA~Q%oE&vR*g_jsYl

0+WNjS{6}O)X>0RGq`x#XZDhF&lc;uw^y{P) z#^Eup11i=F(nLRRO--3ytEVlpvhV2?7@|Jtxa*QM5zQMkbXiNOqs`1&WKE;B$bu>8 z;PAQnWcIo=H@797&mw1fL|TP2)1IhFU5-{#*C4EjbaM6v2ToQE#$;bmR^d$e;khtl zmm2%3-{?75Cy%JtfI0YQ-lO9Nk#R9Xyz}G7s5KcAV`Hp?AH|kj!H)d}0D%jdukEKS z#j$`q?U?LRTHr`QBMg}%oca;_2#pO;cA=fX*uFKN0zH`6f+8dJkytJE_^j(Ua!Rf~ zf(hYWVLxPwdAaEHzk;B^>@S2z(bLjiUSEFn$J%k6jt(zGox@1;A-ilin86SUs ztxbdsnY+8Wor^Am9X;{f^QI9&yIRkcm1jk3PdPbKS@%(FS%03se3wOrw(@i1Olfr( zQF)bJ5iy|*2SkJ^m6UpvNKqDA(G)jK z4FUrFuc&J)M;E%M)fFtyo6&`ag?`Pq(wcF}WNTyEvcSudNKNLgs;nfJ zMjpAAulMD0kZ6`@Q`4srY*>I;=4bLh?#-L()IJ8+7MYj`+QHVu9a!5)#2j>*Yd1)W zuAnvG09*#Ab>oCoGZqTq6o`);a;L}%x7F1cbf*^G4&5W!^h#Ez2ycR0zHe|)Hnj+Y z9kw1i^a3P6_xZS5(ZO+clW!QbgL?i9@F*64ghnfLy-A3P=^GtAL_-62oTTf%w6>d5 zYq$JhXg2$650V$MmDJkD_tc==PJOpa+WZYrtLG| z)zwmTjRXA!k8^heJCkBPZ9WzAcHg?7&C<@SiRE?vI$EclYc7W%-Cm2CPdfv+pu%G(s1CK@;kPwaM2LDJpG$mfA+_~IIB zB}VrUVey6p7xM1sP_a_Ddw3+=IiQk^8WB|>aK0fuGgKc|s6-%*ZJLfj#fnx7WhqR$ zF>)wkfh=B>aO}E`eV|CSX z;^iM^tE&b*J^4R4Cp5-fdw+2196Cf~wV9>c^=7t-z+{<3Po#-&no4<5Wq_m{2`@x86)>>DG zf2p_g?9bUxL%INYV&&w$sE}%V(_yx;zR~z=cItTvqX@6bZnldgU)+l`GZM=+f-&B& zVu~7COe+G9_kXlp8p`gm~5^F-+;l_<80($&4uJ}q^`zyH4f;DHpV*c&%u z@8ADJ8aX(%t*r|f^Y@(JENEtH96%8`JTO81f|}Z004$j8fL)C|m&)7w60(&+rYb7d zqBlb&g9Zo9%{)Y%7^@i*a}0a0PIG3;z_!_d&eLP5Eac& zNI>W$10$n@qa(C_At}g`S;sZl`XDkoTFPetO4u7J( zmd;cM=}@f|6`pKf_?Qtg4-+2LhlDZ^S7u zR^3{~C@^T8X7>HSJ%hLf7ZYQ@WKVc74XeR~4dEMp73R&c;5z|(g`W|EFC_KCS3yR_ z@ylS$!nK1O1);Z!hq}_BMnKaj+W7*v40}c8oOf|I(hK1cf?O13ku&}&_Al%Y-ypat zpx}+4mhc2l1{SMc?*gzW;HFV(ub1*sA}YF`oVN(kv^E=JeW?#U#-|~@>dCpoJ$<$B zI3-+{TI+KaI&GkvnXAZ1yYseAAY^hk(f0UguExYIOS9ce z2=n<4v3Sl_$SA*eC7oq{#Wek`J)`?qcn)k8c&W)D__m7SkWe;E|-)qJ>qx`|JuBCUVt&MC{c;hrT? zLEaRh2Rx6LT~TU2BcP_La_zKMuN~X(kxvT;ZwiD}8?v(w8r#&H45@E2ZDD+SdxL$x z=lUOW3^Ek{9oqBKnfUvYZyNoNsC?rH-`~mt$>l~yUR~U7@rbVa%Ny?_8I623Jj>Ni z_07*F8Tao8LHg?^kpH^Y7|1@_-_XUFWS-v4w{Jate9BI35Y3Xy?+2!lQvl0T=wd$p znjg!Uj}Mz7+tUs1{a%)L&46BkLlYPn%wr2t=)`X)mSfg51LZkcSy=>(PyPEZk!Fj@ zH%LA^#Xt!b=Ep9{ltl#%a-1DvMj%;$#u)nmHYUzPv>P9s?+K_Vw4+EPpY|E6*EA`W zgTKxs{Tm`_f_ z#SX?mx%I&ZjADiD1Rd^vV8aR$tH=Cg2ZbTLkDT*_<4fo^FZ8m@LRL zdkDIy57SV`yCRCaPcb|}Hp+#+$axu{euko57P=n+V3`|ksexJ!=NO{YG0E85%n|A2 z_^N1&k$>^zpinx_CAhg8>*^MJJh{mnZ3~LRP+<5tT@Or(ZRkUc|4=qZVWnnfe@ML7 zR~Uw;x^7tPF4G}R^*XGi6#ID$NQ$g6!%(va(imVsrWl)`;4^VH_|}>IAoJNne5ZX2 zV+S75$H-`CX#tiDje3n=@;Wh*m*L6!a?yJ9T`0=bbab3?Si`rcg~?wT;^cTgFBc)) z2k7-AqrT0lMg1x;L#Wu7{KeQW)_EfR=x<{v+K$9#=y5ozSyTO$YCyL9_IXc zM8WYPMUjICM+f$nl+;wRD$_@&3ArifFJ1B$*ExHZ3~dj&3MM z@m!)!OPzfWpc;YDyNS$4j}A8+jmKrcYY*{P{3mvW$SRmtkW`333eDlmc#ctWe*@GD zADIG0T|+|$X1|~hqaffyqUs=!4#Fptf;ptBdp+U6fTgqcW$VUMuj!NJhf@s#Hw?x26g?ETdyH)k>m>whdiUFm~1&$=SVr4uNe{+c7TC_a{p-kF(~5tZVCx(+^PbtR>A0E|mz z8(#I=gp80U!8B3H$rma7F0CeqNgip1r{U?-dc3u`yef88B+wx0fteFeSL7Lhve(Tp zQ2|9yZVj0$Qc;nn7y`k2Q)pF**{_jt8r2U6?WVUupK;Sh^Jawb)#t*N<$0ZJHu?QFMzMK(mG zqSC~ehq>!WDay}ZK}m~_H@4rp8pqRCn+?a|%UNT&{oKw9@ed!CoG{Y`d4oj;r970G zDC(FJe|-Ob3jB+Mmhb`$pIx=@@v}fXDG2!LPdTxD@)JlE*Ae_w6|`;hX6+&u9TgRR znDbHpQVF-ys z&K(TS1UPw&^yI)9E^+a2ny8c%ae!vHoO_5E!8x=4l2W~&ew*AKv@qzW(bbH?Q4P&K z7aLntaM3HcZB^$ae?55j1meuE=i@qI>*XR`$E5k0bIvz0sFM>sgMIK!Fa6InUlBO=-f;6{`SFc#eiu~60_CoB+r%ov@T@BYQaDbfFJ&M)gBnwxt2(BX|{mri7 z+Q?#@f4@xt<=J5)=+AK9&@^C(VY7n@8Kb8NIi>&S>S+#+k>XtskXcg@Tr)5{JUnfekFR~s zVPh2UCh_DuZ!d3E>F^2#N3EA^>wYg>~Fr%YhfYPh< zS1=_?>^Ph@9i>Tz#&j?%;%n}pq(qQ}f>9zDcf&kz z9oxqB>wMGkTGvX$kW6G@;q!Z<*GuQ`w*}D#VmqmJ`i2tS5H4qQ#<9^GpXuJY2BZebQ0hCI}fyd5A~yl6@_jSuYU)gy)Sz7@5s;pPlc?%w%mr}WRv-B>C1G| zDgl8(bcG2CNddB-P?z(aVeyYG?~gaJ?K_!>I)3Yex_a8Ce`{y)ZPJ$?a_a>Yan{wH zQ5}8x<*AhAWW>?E?iacO^2;lfQ7-AxO)WG9avqZ9Y`MSR^+l z_v{f`iV`A`_F~EpiU!)PY+E@G{j$DEE}x+F-2UL|?R|)u+e+)H)mwkVoWED>sZ-1a z?UL)K0tGJ+(|oyqsBKR~e$L&__8SSNxwVG+a@#0s1tu1q(5*s6g;Hr9+XUw!a)e9< z58cB*bdQjHRYj5uE`BS^TmR;=T`KDHW!3K2tX1snRsr@m4+mGPTxVx1KN+((Zb^GK zKJOuNIUrpF{DrZekmKQn0p5m&0`MwfS-g7OR#GC3d6d6QqGX9fXei2V3!tL_8q=F_ zM!$-S3x59mD;>}KBDwSmdLcuO6Q6HUIn9_(8i z%dUFH^>gx-jw-w2r^R+tqKCucI8u{7UXE?d~inLudh>l*=yN~huNTcWy_Zoyd+X?G z_xrFjv0fps1#CZGoVj-W>R|RlhwHJYnJQWZP9Z5-wq7aDJh$I}N;}M1+oc+hFH@&c zC%@Idr51Uxb|*?>PSD=(#V;w&!hiQ)b@Fsij<6Gkq0391Kcc&ujIHX81~9 z1+gpk($RC&cjwg)zX{?BDAm@`$uy3S821QlTKUQ7H`3{P^`8MsnHKI7&i&5aKDSNm zFW;HWy{P4u=lJfOS7@H`oiCoECY$h=Nm_6QUb?3lw5j{KC3GU)fF*l#Xj;HwK8S5nn zB7Lr0F|!{1-i`f2?FvaV+rFw;rowTaiD6K5rs~cf1q>fCaSNVNFT5x5)%kPgr(v&I z>a4zPlfCWgrCJ}kBPotY9y7SW5kSGdnV#sb$U!T|>P~v9I9?YRu~))eu@@EiE-EVI z*FsxQ^2PLSAo;TM=+H$G>XfyHDhgtAFqs&yf~EvUm~0I0tvw9K5%h^iF>~Sw4Ib7} zJahFr=m4svCPfl$jp%?1OtPt*l-=e~x7eP!cZ$3Bm~sAV|l-0x$raSnwlFpgIP89uO3S zmMsHPO8-^h)<2>C*-k(Uj;tUmns$(v>ls z^+2QeFWo;`jSa_Kx7Um2Tv_SRPh*i?hdH#$d#740ZwiO(Seu;)nCzV!Z{w^n9B-fg zOQ*ZETB~c_?rK)c%+YNRil(0D@*AsJTJDIHy>q!@w}h*+PC-ObSAoTVZQ`w<^lRbt z{q%BbNlJ>!t-IfOAFYX}b>FRE;9cGa!(S0)M^cWswu-JZ#ORcEa#xXWDI zb@07Ubm!M&%si2@Jzg=K9S_dsQtw*sAD~K9OGu2T^#};apPZb|9`9PeJ#qhDe^oR{ zPM0aZNLie=<{*9TM0R@E>WYVz7cey(w^uxz=mpw)bf)UKz}WtX1k9z1l# ziXyl%y`b5(WIZXDd&yxelihEh!Xc)f!2rF9(?b2*bvVT*bDtmV$g+r-6D#c~Z8m+y zboN*P#Uit~{|CVE2JY`Pl{sm40+yF$-hIVj`|(Jt@A*^t3IggH8g1wzJfaYkUp+7l zxQF)OLBvVvL|nz*hC>|zAcV6jDmDloBB!08YL^nZVQg%N0v)FWlBlYJ(2QdF3WU9Y zAaUQmvhLeh2-OB@jP2rlJK9bb0-r$QD&SKrA(Aha7s4-=u3agMBcjQWlk=qM`SC*l zW<6p#j-;XIAvFVKrKR=T`*3ms9~}JP#Nt2H+l%giaG(NncF?)}%3=Zb0={HodK&SV ziwLtMAHFwR-(Nqyod8lw0t1*J^Tfbw843;HhG0KfOIo`qo0wH zp|Smlj-dTV_2v7vB%1O44M7Ww4G$w_eC#iV{hTN{LVWCfDNe@c%ExFfaCftfIaayt zFM>EV&aMjppkhAs$Vp4Lkl*;O3}Z^;uU@}C+>}CX6xW2Tv|NQZy z!=xtsg|LIVl+Fv9|EIk#kEZf(_pYa3g%XX*kRKt1Xh0cD=AjIkGla}h#xm^&5|K*A zNaiAQ$n0l~LK#CS^R&r4Z|Af1Jm;)))_I@xyyu_ykN51gTFXkY_kDlw@AtZ{&lHoE zrm)>achVd{8JDy__kz&r>37Tngd%Q*|L?IQzkRo2~E6FGYGC@t1Y1x$z<1wLe+UMKeNMv^yh|o05I^qpj*?$BQ5F z(w2Pk?zvv_{IWQW@23G!h2X;%7})po=Ske<5!?Q`a{}lTVQ&R8tjVb`_^#tjMX!1F zgeKdbppcNJmT%Sq0oBQ|k(W>OqvN#|;$`(zM5xKDpBIkcaJ>QV5Zv355cDdjQNSp4 zs6rqrS@Y?l$rMFpVTJN-RvHt8VSj9Z2OeK1&t>6lpfwr9wxt}B}l>P+3ZWwX%h^B*#h2C zFEp=kPTg*ZGW$+gG;b?rj&E6>%V6;oY4|*D(G}aet?kBlBOB9vn>pVAY7V_(di&Xm zn!-Z57B?{#lP}~c;!v2j^uuiq`CME_PFqcTPVrMki8uHu$R6yUUT_c)c&S8@!EET< zUr}@Hv}wm&E|Ym%TAF`dHI)^g;OW3X*N_5jC*rh>WPf#N1oM?GIVEx=krHwti_KEj=g(#Kz*jt?Vi@3FDSf> zuF2R`FAG{58q(6z@?rFZ!AbM!5wb!AU?JI86YSz`4|d~jIZs@@cfNGME;c3xbL#b*Yj+ScCojyKve%u->ugzS2;yHQ%D znTcswTaLc9rA|ldYrW)P9%5&;w6@Q}OqzF7Q`Bx><>vtnU2CrkGxIIq6|D4n8MM7= zRZ$oljy6a=%HCDz=vud|WUw=H!C+L)>SxdC;PpcyEd5>nMa=NnDoC$7V;n{#xv!-6 zYY9HL87OhHFn`liS!iEyxQ9KiuB$pZ`i%;180c4&wcXP_#RDb3iFLJG2gsxu74_^l z;k>;~eMQ0H!PJ&+nD^mIXD;+M66T&g`3oGQkFDe?0p^rA?w5Z?J;4EyT9^wOtk9+K z4Nmn%D0yJ=zfEdK-7!{HBZw|$t*?bACML?V3BkY)Y<581@vsSu@)f$8?;tn-L<4q# z@KnU02woGS04`wl#`;V)AKa|mM);l>VH16_i$(I{#RvKhN>04qwgF$>A+H6%{Xn~cQ=-+wln>S*CQl6EzI%uP#{^!564 z(s-CMn;YG=QEUP3?O~rAt)_qGFh1r9UUlCc$~~xTmiRGQ6aV4R;Q04Pwg$%e$l;-fi*rdXu;%f%__+T;(Hw2aHp{13wJg8gq{-g zed&L9An&F$QZsWh?VRm*e9t5r$_{tAE<}kb3A>VF77D$%UU-7CLuAd&1z?w7Ngv z&be6>u?B@7kM3KVNn4ETbcTiSNK0~7m__NbKMk{J{U_Jmj_i=+cq^N9^vjv?l5UO8 zwns!1Rv&x&bGM2o>)}{w*o)aNpBNr#dLJ?Vo$F*q$-~3!`|=!?XSzWNJ0# zv+R=3&5_(%MjxBq;zp`367L@ztR#VkQ#NTV?V;T#v}&yT&)IHR0#-`5J9Vn8UK<%E zS?W~r20oc8W*CeQ)W0AVpPnhNrOuvYCtxRVh2PqI1@#uD^dOkW8USCwxRF`d$uH&& zE;d40K5863X;c9lNq8y{c1wU5G`!VujQ8BRJFuuEOIC0HdaZOLa4tIN1NfAnon~d( z``aNl6XRnX)HU5&D~FJFHyClGWeg+{ za|$n>Z=Ibl5BJT@%wX;4WSLU0Jx%#dXp;|7g`9H+&pOy=7btd9{DD!+nbW6Vin=0GtOi6Iikkw>ni(>l1qyDBe^aq0qaTM zK3F|2e${zFec-|OiOG-$+o`q2Ch7Ll4e{IFYp`2q5VRc`9j29do9s-{k$>#yQRn&l zQajv3#N1XtRNdP#SU=j6mew#GBvmPu$+IwVUDRpz&60v!wNj)L|NLce9Y-!6+?i>i zcV32vr$l{ow*l{mU#=e_7$4KtrWzQCN7*)bdpCrN3jTT1SVit6%Zn#YiA5JW<$HoX z`o;uTUP>J$2*)PJDp6GS*)`}F^11$GoxHPSdfMQRRQ{MB)GoF$lKd`?n#0U2?Fp4aD)%wE;HJwx?4FO- z9yaD;Aicne5%!=e0MZ~ofokcunG=X>SbdWIr~fOv3y%08UBR*nn-}ax9U?(P#6|?! z0_KaTzqf7ON_GZC%xRsemAUyiQg8L6>B7Mg{(%`?d3m|j3r!7;@bK_dtqddRg&WI+ z#P$Qs1o;Y8APi&Hde%wK$a-BS2a!PrMIaECuOrkPa4%Tg->h@a|C#>&Jv@&Bq55E9 zcnj9Ujb3$#(aVPk>3`vc$&*Wl4q(f-Ze`#{<>n%eA`r(` zR0HyfPjGYZ^N~acP6nJ=STfhBX=n^GO(@qg`loK=U1kdIfuWTxYR{e9`X2KZAH+k5 zIX>o$Afu86yZ?;PhraCZQ=8)hBp$WLHatvQ&%o*`?Ce_dx$f?Z5sdV?14EaYb#)fr z7Sy8%6AKd%uo39sAoF8V zG(n}WxADoq3_$mVVn|#&to}B7D?#8j2^0@o7b8U9pZciC~ zv8B#-H5mzdcb4d(%W68;sybU+Ej?`IO4!@u+cD3JI}l&|<~B?4BVjvX9ZMY-r-fC& zn$Meh?8hOwHp@cfdvIY+Y9CdvO_p?H0%heIXCCIWgZz@~8< zjheE1l$E*+8kaZnD%Rz1oR*Gm@jdIj+|^1L^tUqR(%igib^~~$M??cWelUdt*$TgJ zQ<+J|F#GAvY8h*LtE<|KoPRx_zCrTh zVUptc|A6F0eYHdRA6$U{C4BwAC48~9HEwPmSehAvz8*#uy)#QZOn-N;IkVHd{3K$* zv$J7napT!0aM^VA^q3AGMhS&Bd2)2L_UBCglB^+_d2NF zau*Fvh%6fhFnF$Hoqq$X9jt&iuV0566(R``=bKhHzpwH`;?fboo0XMY^L{5{oY%#C z2%89cEz}<2OU+>OVeA@fUvY-{S{=^j!SsB*lLqhMWF-kdh4NZd{1F0zl(^ zV~*F#D^MAzt82)!^={B918Y?Kr<>0RPrp##;Le$kJhJ=;FEZ*u%$u?h-rAnv;bDek zCuOr5mb}G=-H#>XZRPd*O^$0OSvocTPk0dLT zd+hTvO&+F8|FQeTCMBt=JX4Tk<6)wB&*vMnZ~vXu(c0i$aR+Xk?W?=&UU@MP6m+guL?GbP;PK4;`}_B)K2~#2U2g6o zbLJsa0dXRr`ZNqv@B#*dl2Oc^jN7SIjKeH5F|m5UjvQ-LR|mKfw1r$aW`g|FZV46x zz&^+dQwy?TW9EU=4NM7)vWf8X!kJ@GWa%F`*cpb&5h|L|(FC36C~K%;E^7`P?_v2* zkn7@FX9V;Jm`)%5 zL+J(gn*f`Fptg7zZR^HLE3}bh6K)4!%7$FT$ zgJr|c!GWUDBh#z2^gJkN60(r#1mmNDbpdQ5fqGe-7oQ(ysXp`#4GkrPb&sa(^+VzB zOEAg?nRIp@^0WenkxWPy1~*Iy>1AR~6)(8X6TjsprYS|;cquSWvPtfvdoWMB`J?V- zW0m3+2H`=D<&&rQW_4GI;(Ka3l2Y`G6*YAWq}z%Qo;B>%3OF!qo7`M=s(bjIImd$< zqxAkzJH`VtVX^S_$Cun3k82E19a5}v^?bVb*irh9Vo6pOPiSdrB`^RrF*pA>U^jBE z3O5J|x&SlLoyBqu_4kvlRKT;WuTLeclgNxRia)4@m>&G~E%W*gDHZ$$=Q&O1ye;Oc7f8w3(2E>dEXUzZi zO2ov*g8I3A=Rrd&E67j2q1W6k0Xq#FBcrkbJH%WZRSJ&-t_wQk*qB1~c|Zs+A^pV% z2DM4X?;y*X0u>P|eoQfPGBZa(1IA67nVA`D>cMmVsnKE;7;s{}FMCOF%GuC}9Y{CGca}^?F{2~^J z&&La|j@%1Ly&AdNq6q9$)U3XkekJj}$Wl$9SFu8*v>)TdM23hVj~=Ig9)^KmRmFSu zb0sge@UylTte5`LaOg>@!KLNel``g^jngr`y^b$)b~-QIyv4xp{IxfN?oQ(-5wrTk zBGwhda%vZ!keKxr&+yfD`VSao8H#awsNi188pl3n<^L+U5@Y$Pp zyV-epc{^owbm+l+$j!AKZjUA*M+J}Bq$={hMZ0Wz}*H4j8!bJpa8g3M?+)2 zhJ*?F9Jm6WPw}shadHCr#p3p+wF5~S<(|S=8bThx5DmFO&S}Im=)gAdsHuwCMCNOiDrQ_YoMY2Jx` z%(;XHn>zxoZLgSzsRV7hmr2!IvWgOz&mCM18fs3tQ1CoZjY7)zu{^M^v9Zy$)wKzC z;apwEtQSl(?>N)6@{NM-$CL$^Ix^n5ol9b<%`=r7>R=%yL~97_SmxBXg_?W(ed^-UU6HkB2_&le`N@6{R5&(+}BCo z4`}}2HaNUy_I)Zaky5I+FD%H+UVqG7?{3|({a&cIoHIV;?z$Gt zE#%bOJTM#@4x5)?Vm673WY*#i;bNMePvPy+MOvA})%zhe$1V?BPWiMA^nc57UwJ=y zvRfcW<22x|XvvRsQ(-$3&U4c$RJ6oc0`z$P2%u`{9tBRy$Sp%bL++WdOsNIaNp;`c z@|+daFBoO~_yONO;_@GT_`=K#g$X4Kup_b#3+^SL$TM^tgH#V^6h|9rj~n31&wpK3ooryf%igDtdb8X+{PIr77fO zW#Q$QAT9t{1S&hcC|Gb@q4{O=1bH^FJ`A>G*4EsS=f&I>)02{X4}Ug06$Z$Ze=zxS zDBoW&;-Kxto;NVy2tElY_@KWcA1yT|#t3DQB1a%?Z(rX`(`E4#gAx)}ndej3Wz3H> znU#4`lCy&l40`~CvnT?o9bPsQBqUlkZOH?t%E5_<l|x zRu-nfP2T+I7Ld_|V8o@29b}eTipKvUt^ZS`wL*t*Wc^zPN^UaCXla@~u;v}|4B^uK z?p?oK9*kKF3nNmYVuafv6Vc6%1@kA@raQY?Oh6&wpNDR~ASuZb|95UDgIGC^YzVMG z+r31lgvyRQG#C0JRT2}1d*c6kJju$^`)YLE#(N~GC=o2Npy0!i@R&T}Qg~nK0^+Vcek<(d; zjsZFhS95PY&I=pKZ{ZSSRE+t*#b0Bf8b=_Ic?Kt@qpu#M2@L;y{h_WCgaq?V2p7 z&s}!IQ=vd%pFdh;^}z67=Sm&j%vPg&%B=f*y_oWt#(L84-Meu9d?|QjWMlb;II?UQ zZ~*yY!R#G^IIwu|;BNif=8#YRzP|9yhs{7si~9VoDjEcn!%)OweDSL}RHeT%^l%XF zq@+Y<(Q{v4d3U3S4M-+b$LxS1%r**_9^?LOkv-*IZe*O8pPR!L_7@E@`+c^&QfA`LY)q|rF{14?NL-SRFq6~2jZzNXr- zBR=SQ01uWc;63UB8|;>FaR=V}4k36fCYUfl`}IZzb?N8wa$^wq;oGuqf?K@l3q61L z@atEp-E(m-vjt^$OHjN#cC;Ymxw0o~P)iF#>pQ1|CI(r>o=Mk}c%&#;;BMkmbRgPD)$8;Wgu{vOF z#Cm(=y?Ws=(@NwY6LdfMv77Mra*7wBL5pPe%k!zT;JgRl%+h2TeUsnyoRtM)`E%ng z+5DjO>Gp6Y~8dbbxZwxA~WJz_L zHN}rE2P|MfD)43s#&+Owe(Zj%u-+mgv`x2fN*wwoWIud?O``Z})3eCPuAl|P+-gznV#Q6#@UC9-pio$Ia>O!hneu%)I5TKRI|gw1wMxyKCe+>T2g zJLB?a%1X|MncMFOLXnl*cjcvw)Jjji-}A9tB2{(=C+C3&6x$xW6FFP@`8(mNRF=rr zGo^gR2G!!Gsd)KA|>`Pq12!!h*2JA0!*E2`>QjLi7dm zz|t! z$6A+G-PZh>BAG;sM3--b&E9`^>8QhF5fPHUhQRGJG|rXrzEmlfgg+ECPL{Wc?k~1k z;940As{PC0UA|q5UNi;O)$7Km6^=S!#|+s;{5dfnsoEZ6$&_AFP?oYfJ+PSp=31Xf zw=yQHZPb_7-=&ys6U(=poCwh;I2xE^V@wq?SQ(H{>Q^Vyp}VAJmGHOAN3N_QZbQ;73pEAixMxv zyIp?~&+rG^medCa9gdN)$*9JWw!aF_+SSbYVzH`L|f*wyUjPT}#X>cH-E zv$txe6b3?|#%Ne&7ad(<0#mrW-fXm@iGj8FW9_+T%QenDEp7VAE3?3TOCsrnGQ_yY zTT>F8d&E_p`#Ko}N8_th*7`&k@+^qP7czK{p5gB~to-nMdmfs^jH%!+K55fC6nIG& zg<6k%3SO&b4X6;LahqvKdMU_|Wk=F5NZThgHOnjzA%`>(@hFw!wi@aNb&ISD!;*`E zm*3|k?IPLQDJi977PAbwbu$MfQbjJF5*~W|IbzvmAVpV+j_R>qL?riTo`>Jh8s^Nu z(pe+Oh?$#z2wPD9tKFWk*0r~U=_V72nBARi=Wtbds-bqW#CAz@MbF|BAw^s5X7rnc z`Q_2-`#Z62tbRn=_`vhGrM$i`b=hW}agwH~P<5C%GCoQioghw3jO}vT5!_i*E#zTh z(vQ=FhDnI62qa|;0pNtzG~$4pLMHC_oWn2`LO39>E|A-PRgS0Fmy{A#IpSbaW&UjEQGS z$BS2|KY25Id?0AMLY?S3S=83t%;x#U{0xRS3c=i8OKb%;5=sq{TQJcA<%b&zweUWK zGDFdPhnU?K=WUH{@&kxjB|#mq1ak*ii2k3F1@$RTs9f`}F<=#ajhZw>-YtG^V<<@9 zYbl{#wBQ?ccCG+}0tPMd2rC_g)dfPw*RS9*CA3(AMcw3q>@c>0{;%ZOtlwRh(@hh4 zokq@u%2#y`tdEWr?42LlfA!m3nSDuS7Sju&hYLfxW#t&<)X)y9SMDAw6Cry^`t#X= ziX5Ic-Gv71>kSv;Gg(YmQkibK7QaoR|5ZtBkXl(<9{0FokesAW=@@20 zC>a^~UYJ%E8@At+i=GM}A-BMehK~ck5lFuS+kCXb{$;^li0DNb|(WBLd#(I+GWwXR$W^;W=!xnjvhrs zC(IkjGVp-`VtZC%c6JLQZ~X9_gW?rV%TT;x#)VF-6O7pVP;|otKWQ4L0%qACFm6orWYkAe=0BU3)0lT zGZG)NEcoP?rV1PopFg()tr7F%?aXe!(9t()!tk4kkul=w(?5&Uj|V|T3xii6)Z-%~ zQ`6HhM1Ku+4Q(${V1P=KV}mdaL0reB#K(^w-5!c`US@a+jvGSjN@8NlV0sm;43E2| z#l_jS;GiIKUl%0b0#1(IKrIFgwI-*sb&3$*0rRZlVlf$+YAkOMF4ku1K7M@U?;k|s zhTugHNs@#kQ)GuA#&eL|&f|(=pNA}_rM>+e`bQ3qLDbubeZbYg(*l1y1U(>1i6an7 z%m`s;8&HNH@H*bOk&=})bCV8`>cN+zpA1~N^-r~^8(P2Dxlu7_mLn~da)%6ya54a))vdR}hmu}gSlIQi`&(mu3IdH|8rl}g(3Y`L9GCV< zKXL1&N$?1(ias_e*>v_PeglUvk{fhd94W;K=P2^uTlnBBTm`agDw1 z#Z?CQ5eHvJYxtF!yWg5`5HHNP_4r`Xnn(4)wrFLdpmDDsCZ~P9y$Shbu=<+KHJ0qp zf4tZ6pS9LBKJ7nr``$_|8a%LAQ~+u5v9`8mSeBB4F|l32{eUvuJ5_$og3zXrF6b?d?KlL^1QNIcH{POKC2T16?szY%In+pj*I1DT!-C*6HVue~$n%^lJSL6Y_p%rsThObtR7GZ@l3I z;Ujv#9Y;!eC4Z-lgmV1LmuBzpj6lQizo(Nl{riu2z^<>W+lfikLCcMF!O}J9cvUcR z58XVEZ$SkHcGkatD**)QXyt<&-$E)l($=uN4q2Yx#M5m5aMPy0@ykhGAlF@`Yq6M> z#>JUH2)K>0$ZFQ2lSN$p8GJo^j}fCsz@O z;%p%sx3o0$&6VT0$v?%Igr-m>>qD1NCja|en=laEM^$+X%yQ#17)F4q2xFy*u`#Z|nund$iiu6s z3)`!_!J$vT9FvXzh|B(iHrk|arzvR1NZi6Z-wBuPR-k|YTsB>P%QmXv)- zLJ}fN#PgcZ_xn43$MO8}xR3k3g_(IT*L9w+?R-ZV8XRO}=4U1l2yBORwT%b_T6{}O zPo)0eP$W$m{*V5`{v-Pdg#2ihRVxPkTi8a|=m>#uRg6Fg2q6&u;zt4F1cIjwf$+nU zKu}H~5H`6!czsM2zhJaJd{CRPPW{ir^2}KLWP_{jDR%;ay^i`{nz)_poAE;?k3&Ze zFpaV@5O}tnZVX?>I}#3Q?>F}D`FZV}uW{qz;`7rAzi1C#Cxw!TBw_kuUM~r53GU3h zUwe4tX+wqg2Qx%JE+UcK-JZ`ZYlk3tml6^nE1EOTAd6CGGuE1nQg2L6idgJyon+h%?XAZoxOH<)vN%Q93y$UTe&L|AN^w4*J#*#ep8<|7tZRJj#Jb6+&zIpUFJ5TG2 zJt+kX;jD~WVzI-YEaei3BB2zTWx|P~309}@_m_-D`uIMYr?(kq87n7C$LY;V4toX& zwzV*SJd$BF>=|~JuHoIVtF0WL2d~FY-;88dw_s%t33eB^@Mo6|7=!7>RU)(>8D%Yn zdz)xVD<>Od7@d>jQ-Au&e(!*n|Kd%NnPb9n_wKFXn$H{yxRQ~beK^C&>Xm~$f4=E+ zqpYXKlJU(MMp;fyPI?(!Vj_w93NkW=*`1U$()prWx7b4|oJ9KD0Uyp6bUQxCxKVGN zsIMayyO*CW_N{Hcso@KKF?=JFfgeQHe|6ng#fi(PFSaqVzDi}yn~sk)Oeg)AWL(b{ z`X3!VJeZ{fA`wbY&8qVSo*o_nmH7NLLy7oiPft%iR>n7u z4i3k&j18wAJa`~|=5?N_RFn=~Kl64;?i&jWmmks@pAd_!epZWHz{(h*Z6q0Iolm|W zeDZ`8@6I^A5K@%Ri0eM0h_24onE5|{c5pKrToH^unBLaqsL;A`Jb={R)|Qo>?cm^0 zP*ik)cu16sKdQl2j)$2cpK&!(Q;M+8PAEPh8MkTo+2`5W9UUFDGVg0@tZPCxFfuY8 zIdUX^w}rEl)0vmH5y{E8KIv_Cl(db~TS z8*OZDwbKl_nd`gqZG8Ux*dC{+w8h~3`STtgh5BMP1>I|FYtGKjuI59o`||ViqXpG) z@1%GSOYyEOFSGHE0&5rEawd>m7`9v8jT1Vqf`#-NeC-3T=b9Hq+e3-?ruUct$?Ax1> zk%x~S-4t2>Z)H(P&i1;gl!C0RlIu`a#^HED4L?U~>qjQp78SnBBheb{n-zYpOjo+N zxLlASs|rs4>Mz3{ZD=_EwJt)6cXG5j-s@LipnGjy#KwbB{3lMH+{DS*h9zc{)o@Fo zx7^38$n1=f(aQ@T1!HtQ7Jr?I(_`3a=dlq8M~@!;8Ypibb`9u1 znyOxo{{{vI;tW|CgLTq#%uCzfy?a(#y4+XlelquLxz}_`Qc{w+G!9AQ>ikoEvEvfl z{bgPjd6qQ6)pkx!q0iU_lt11V{6n2wa>FUvL5^0G=bH1aJ zv1+TDs_LCPcUJ%X!=Jt#o7=R@%=q|moAc+tPfT3-_xI1?cxl;0{UWmu!>$wxB`7H9 z@4}RWt!;=^g0Upqh7B87Swqy4DQV+haxL84Ugqb|)`YSM2nc-1IgPD(&eC#bye&PL ziR16`@`n_)-uLev*H)Kt$a%?k-`bu%dp0U6N;1y=S6?X|6Z`6LxX{3xE7(K(xogiC zl$uLZu2a&;WOCJJH8nNmWcD&@xjbKBwT)xN`P#K>-ZtmXd9Ex>Ve#{C-fZJiZJmGP z#tp0iMYnId((%1T4quj*yfrj5SZl{Ul*4N$+B2F9FLszp@k%E&WJuT-nVmejSRKrS z%Xg;GE+#(yq`kdlqW<}O(<@i5?AWp6`}gnmMfdeGP=B6v{s^RF3L??n%XaF0_15+! z0}F3mL&Mn;*TCjcULGD4DmEeYHx`wCIyyS?{JXF|wr#U%xXIW5+OzlNxx?=6d*bwR zUc3;Lu_PpY2z!^;{S#luGYyU;$PDAo9zA+gJVqBE`}*~3I!4y=drM&p~FY^-}yU)D#SpI#^-F+@0A)%(Grn}%m(*66+eI=aimy;A- zK7aX=y5~a6ha|50s!G80ee{h#^Yhs2=bfD^9KO8B zt@vyIF-5J|xnE9EF;&CgPhVgE?Aesq*yC96SFV&sMn)zk^2szlek^KXVUcD?77$>I z3=a(rEiElAEAzoiyB!xIHj1NFpq_9DC>Q!HI{W+k2Wk%e_#w#^p*hYf)miu7S9Nuo z*Yp58J3Ed_|M20>3XZ0Jers_%Pliy^l9T(}GY-ezxkF1!>wE3m71guHk9WL0*Nh7P z*k}TmX6MeGiTdAz7+6?YSwFuxb2!cL>YpDxf`Y$BMq*P^Qc_cQlZX|ozYk-*$LZDE z$_c4m{r2sft&7WU-pHw+KlP6s!Qt)YKXTweJ&qP9`PgVjoL;A$Jnm!jD0-54*fwtF z>He}}`%X#q)al7dmGke(F}ii5Zup_1{imlhGpRO5KuftDU^s)%o$>;#^ayS4BnWO}i~B94}r>RKNBbyCFEZ7WKOro5kUa z^udD%-QC@Vgi`D3wBz*lqL$0rH0)DRiPV1d@S$*q(T*5hZ`A>`E1$(*PI!xy6m_Sb zLIIV_9uw{LRaKUQ71yx*Y~`-Zeyzs>mfgGe-`B|9yi%sEpFcNP=RY};bb0yr===Bj zrc(9Rvw2pv&Vv0;-po}x)CuDQ86EMygral|FI>2=d-raC|Mkx7lfe>O?wgyM+BrM3k4g^E*5)Ovc$t}+ z`Y!f+VF{p*=!+FRd2${frYgu`!NJeZuXp&cmX=nk>Xny%|NdqkO~qehv*>2DqZqQ# z)2==Z%ylP;c68Ph5&D`R_^ zzxJ5GUNJW}x4gi{fAMw;E^K^!d}Cc5{&uRrY;kpYj+L>tt1Cf!>jwIuygV7;UxlP2 zVzJHd-u)V^6yoMCbnJe4?;fvm@(V)=?X8>!%%%ot2<~WlXd!D$Bhjpk=_Ms(V@}$@ zs+N`)FJE$reEa!RD)wy%#R>%pcfQU#KPziTC`HM4Y3AOp(`-Dm!TwK2{kk{)JJX_DZ40ftoO5SnHXC7=g+V3;aEno z;zxhs-7a0aboHuo(uZ47QRfP}vGUS8COnj{q1>a^ruwgyY6>^KeS65jKv2m|G`u!Z z{-V*TQ>QLn$}cMNM0pJZ*s!VzndrzIxnc6A9DA)}!ka-;+88(K*fCj`0oCKjkE3u( z#_4U1d2DnMJ;%9$j{hWT(T^X0YdJK07rHNq8$5WLo$Z6Z{l&tc&E6fIw`q&0hIg7? zhMb5%c4FBFl>HHijCPs^-%$GTYPJi<4gYGpXp<=PP6{Gq8yS5J?+0X2P|ACaE_tj`j1vE&39?2x(!Xr}l=9S)*4GqbSl-$LVK zDkLNXFn1u5_s`@Pv~&*dz+1Nr0E;3b4qdyZ7G9g5m*>5@Bpct%up%Tbo|$jc_`)>* zE8sU!YfleG#<0%X8N2M@T4GT0a`6t9=@F#Bmv&Y#)Yi}vFfBB=7Wn^T;#Kd6d zlw?VNimkWi+q@Z7wz#k`pzYX!0}NzmHUG6YxcNY&SbZ5re0+Rh&T)D;g1F@5oSY90 zg_hRV?R|aVJCoz%rbb5AxG!yXnsXmVW^vr(9gy2^oXnw?3EtzaX|G->Jberl-<}Z(7HVtzI40(pudixwH5u6PqsF=_ zNZXF%Pk_bslN3JSIMNJd$gEwR?Gqko6QgcC%m?=G2g<-bHk0Q zsjba<{`|Gq^cryP;A_vw+F@=Uo(=T08#itQ-}-wx&z@nsYo*`6vlYH?&lg~C0!v`2 zU?oRr&(6+*;($XrDwI8b{4L3)0*Ga6%=q%$7zhKseLzEsPI`>4D0?`S?`#w|Ff}v7 zisIe034n!Sk@@)XQ{!iVWFP@zv3y)yTwAuNg6FKRuG%!-0!$IW^}~V%NmW!lxiyBo zdGqAN#E!UkK|!>M`uF1FGjnq}Ue(|zJe2$U`_D+m$&qh@Elu?nudJ+W=Hn9pHm;~h zG04Or8jfhyS23H2#iG`G$~0`BIm&qM!~MPfUIN5bWlipfh7v8Q8WsRD$B*OGj~g21 z0ZoEcC@3mgyz!P*QR%I#dyMLzt`h~R1{Lhkkt5qb zERK#hBO)%kxL`kdxVb@X00#ogPf>C|@8B>AO}9l{|I)Po`PsckL}d7F ztT;%`pzmB1NI-luibK5g8GC2vdwLnae*Hp40oC-!#~nT#X)NjK=GOk@OL2bwmA~^B zeSLkgrM(8PU2t}88JPuh|2i@Py8JoU!sYz=Cnnk88Y%bh^9u;5xqWMz9ci>7FZ}4t z9vZR~j6Qkl)Wq=c{xrkB{(iiKqNN3u1!VXWE*w{cv8k!)>C-9~+eJ&w*(bGe6VXAn zwL?H5zSc)pGmnE?0c@Q+cMhx`5S8ZCDjGa4pzO839wh(n-d@lbRJ^_~U%Y^`aehqf zTObD*$co;=E>gG+9F`UO<{tt?Sz97dt zxb?6>Gcz-@v$M6gVm|=E85kJ6$jL!1az1x%yQv_ghjCnRRl(@S5hWFs&HVh|$HuV5 zu2u&zEPZ%c>C;YH@+2)1)&yEB`XUD{LL<*`MbOs?l$a2>wDc_d9&*>`I>?b(EtNf# z1-{YcbpQnEW!%w8&o`AyGkj{4^^mywiKCn1d|M<+r^8Mjd({>Qg7`~uVsa8H$knO< znvN$&9Gsla<(mqp6EY-{J}{=SQHYPV9xBlni6`nmF_dr(+D~k=E5t!x_4d}kFMmja zn=%SztjS4~E8@iq=`H8Ttc=M95J;EUE|^j@W2%N-QRB_+gCk2^Rk20#N`lU6XBkt@ zJ#3LnWMw@)>ZSy4on(R~^3W}y`4kSw(J0L#;IZpQ@=2N22@le9Su*Q`6xU3S%H(EC znGlLdn3ZcW-{S>9J$u?8Te>anUsc z8MR#6qN1<1)&_uThU=bC6W>SPaKkU?~QJpc>Lm#+BxpKm_k?mqc^Ni|jnAS`73hBZ!Les6mwA!SH$vjsl zchOA`vX{4}WzMKvO3v;njnZun)d{ERu<{tTCoqSi3HNn%b%DUNuqzQ)W1+FH%Xxgx zySVaxzuCcQizCYwsmkI$W3+P>xta@S3=MC`#O%-P08Si!=ETI_UP{|jdAZfUre#xc z&Z_HaL-A#;a7UGsBgyisuJ<`eKTcZMS1uErG+wd`jo%&on|67xx|{GtFVdFdkl{J5 zGXzwna^!ud->E~|{_oeBv{!7b!?xdrh*Ru8e3yi0IG8SNOsGm_9r}b-xVV4eU;?c) zW81wKq@}TkT1+C3qSsDP-2s2Onazg;UPS-v{{z!O^B{><<^Savz0qQZ8LWn=%1?@r?@Bi2K zp+oH3eqbwSl#Y!IdFghQ51+rEcy&=D-Q&BuqHt9}&MoK)Cue5k!mon2VWq7e8FLfy z2k3S02|m8Ee`R;dA*PqBPZYL>VAIO7Z&>x2-6>A+y*&Euo9dO{A+^JH^8BF`S=%NO z8d%rE>hCNI2l2)kM%8Cu)_&&{6L+k*tGAs(yc{IYpY!U~JxW?aVxmZhCGF0*cPoq2 zUp{~SF**4$NikY4<5{PDoSrA7iKkDWj(toW@x77YGfm&}tjX35-4v7xC`#q>bI>Eb z3{))$mSyf^2B38%!Ki(|pkDZ`Esuc<;Eg2XsG8*b#PL#db$~?>snOTa4|3FWVy|uNR->Nqbd~3|hmoIsDnaMkL<)Qu88YJqAfzFDHi9xyq ztuHGr1;TBptCLC8kJ72NlzDPA)ftFlZS{(JYP3~CQPCgJ^FyLWhYvU7h}_)V(CPt} z6ZNHc?qp$Se`1tnl;wd&4I(ZUqe~koEG4C%W_WY6VoQ5Fm&jd!u6y@z6gs!IbY~pi z6k-U85lDF1w<05B6w(EI?eoGyd1dAM+FK!%_5ndk@eaPZQULIzlb&TP2{v@G<4Nb| z&$zdTMY$lKgG)Va0Md=$b$a2?7mHl8B4+lZ{$Al5g=c(bCY1?8c|f{HQ&g`k{7g(u zP0h-hzzG~TG71QWO@o52pQ^pJZNkHpH9%nKFcD_W*|28r z)g8Q%larI%wr%62{AWY%Pld>T|Nec@lO|>nZfI=x?!h>MSw~6JBxV^ugFplWijFS$ zT=PBr6WGaR;7#d;k137{K9JqPwuxzAQDdW{Y=WvwEy*fnm#4PI=mOk<7r}Xvm60)h zX}cl1(c$97(kpXM^u@G@+r`BP%e;=}nCw3L26FJ9ADs>(4NuS88tGF5Wb)>hbaQ!_Eh?7gjreV?~{>n1yBImsgjY}z1szh9^dbS zcoW998Qe_xAG!|6@8xezoPyEeR$Vwiuc;m$0fB#=CoPgyuejA+=hO;gRf3EL3rYGT zPh`EHpC4!#IqdD|ZxAR5i4%YSOoBw?SKe~8)AZMKfbSs9LwZGdl;B3i8JHd@UjYq= z6mGZfk2Zyr4@0NOc|3^u_}JO*Jxn{fvyby~ zXvH#R8EK4el==DnLlUlNkS)YR4k7hAndeWR5?}tEZ4}zJb*nu85l2TU!-=8lV7L+0 zGH^_7$gkW+-@%g_`Ls=QXz;p)292fJd5(#R32Y`M6de$Osz5qU3bb+wNy)!!E7MR4 zAp(wn{o4NNQz5h~h}o!qyG`>5A|B9ZK&9Y=-O(4@ZC*kW`8GQ0`Lip(riKCqB;WKW z-gtC$FQg{+@Zfn12E)XBMkR`s$zn?z`rX-60+N|gdYvWf7)u2i=$~g8E zUL>ZW9%0ksNNk`D!^0(tFflPP24BLzpxaJ&<LwZi(bxc27+ zZV^R7NvXTKnkFm+c7~(l^NNZJ=%CQ>CF3Ao;uwh{US3|IluNjQ2crd@2Hx_~s!~8` zJ8jJc;ZO>ELfjjWkBI;pI(ph_94@@NY?EwgU0z_0A-BO+V8KG-dUgH--uM3e{Cqfv zkRLQYuojk0($BN94jno)3*W%Q@8-=(S;sS>0qDBpmbAAUXCB%$YJkA#Cn;(^Bns{voSzd} z#xVX%WC+uC%%NL(BjK`QIRgYBMIbYe4lsp{7%t=|qo8m$-$1R`}fma zExR{#S%oM9bKTtB(Z&Y4dJ34vHE2ylun?`xj!Ecalat|Wo5M&jBD+yGZoxyC9=J9? z-WC!l?Vkw*O4saA6U*met;U0B&un7`S_^3`ak<8!&q{{<1boXZ*MP{U)0Hn zp*8w7x}~QZ2^HJDJUyWl3_-P+?klYwn*&n`r5w`NSG_tfk^0f1(2n!*g?v+@2y{)Q+!}{bB{QBp zd4cr?9Sa&hbk>8!?w%g#W5OX}96~Aa@!=#yCAP3%cz1UPw7Pyc=ANE=XRP~}H;UAq zFF>pKF)|WN;@@k}ts5nL3bYi~9fUTcEJ#3?JU!!dMR|F7Axyv<3i%kgEtr8O%nCn& zOUNH}eyA$YL%AI47gQh6u7U#umz9w&p$rl)g+fb_kd`*cGL}o! z4{1gJ1W+SgqV?VskQdCzW|Ug!38%!At{PvB*FbZzF4Tp z?B72Qr%#`T{-e79X#%31aEP6J526qslT{ke7eE(-S-#&nm=wf9v-HFVml{r!<-N}X z1HgmImQ?`&evkuMYvH`?K`#zzMf-so!@17D9?{3}%I6?&G6! zcPokb@V7iaRhOp{@J1j;_}Lo&=5h0qpaU8tD~CoOb#eHbUa~i_eeb-SvB6LEZhkzP2`fvccl~{Ns)ZVj9F-pf&940NJNzIruf}_^8fJ zavPKy;LOY?Pkwv9f#r;w1HJ25y3U`e-Y*ETII^uf>#dChSdqhPfrm;VmjR`nK25bb zJUl&N)?^q>z{hx5P=I5D5C)_Spuow;ck1+M2OFCXoQ{f08H&^O>(}9c25QdyTO35O z0vcEKUsK(?cQ4`^=pZPi8=nzA(pn+;$bo}?emvy6-b65MD}wI@Zn@S_d3+l2E2<0)x*rKR1UK5;vT zL&;9mXM9q=L`L`whatt={Qf;_JCQyJCW1oJF0P2@&!20$(tiLdulgvBcS%dzpWX&> zQnQ6CLR&00tJ5AHoUJW=Mqy#$^?GYuA{4tOiwvW^^76tVQc_Ygk*(JG3H8?1dC>GI zX@+Tr0q;&ib8H^9CYxATa1@_~VjdB(fts3(|LQeBuj3M~;=#gzIK zN4~+yTPmzvQ>!YEs}I-tPZ=7H$%bvBZK;!{UuaoT_i(-a zu)n!yL+kD7?5}(0-cVgxa zIgoy>TsWv^s{}r1zc(rb)=2`0i3LawqXyKF1o}no$-n6Bn#>QZH zA!tUY>^C{gQx}befp$N58Nw8oHgOY0?5@AcWVVxwZiK{w@T2zD@+)%<)z#HqU1Xoh zZF9*Y8w-HSh zH^>=?DTFO{uE*w)ihc zgB1lnU-neZS_ax`=p9y80d?M^X^Gx56m%z;C^)f+pBUGK2fU^c)g0tyDVX4|rF2KYoW?%kI!C)3-swY61! zmkg0Y>+S}Y2sqjb_Y|Ff)22;~!TYzypccb-I(hc&uc0AL1d$&o(FyW_PD_x82(Kh3 zB^}-x)8z<-<5hS#tb_VAt?)W)ASzEgyQfH-Bz*uGLgPT`1uxIa$zfw*0TW9CjF!F< zjqST(!$k)N7;w*Wa@4N;7LC$DA$jA!UXh-@ElNklXTj0g8RUr?SA+mUNh?A91$>Fn zhKdA4w1G%8l;B=oUIyKS!vbUmQYyupjefwx!$Y;E{>wGMt@m_y-zh2i+JD{8-u@ZD za(@0LE3083es5L5WCIsxXI>&bx)pM$dE_BcNhv96TLF9mEHyK`pPjw)*Md>6{aQ5L z=Mgx}RaKhmsj$e_W`?ymI5-%CIr;gSTYdp&!d>|0wv0QSmf@OcvNeXDfg$7ZV>|i# zpea!1BI>`El$4~gCBEQWxOsVnOK5=`Uyw_z+W_Ual3Xbw7+{nowPOeV0{rSMcnq9IP6}1V z17DjNu04ug&(Hs3Xo$qagFu!A^2mENH2fh55~+SDkmdYTucEm41#~~62$m-}FLDKf z(VI4J20XAq-t^~BYH}(miRES)k~%PH&>P_*?mYQIn>f1+U2BZa;xs~cPENZ@QiB0Yj7UhyU*tED5ruNYOCpiDxjz9of(qrB72QDA6TB2s8WG{~ zdkG1|7KOFvXP`wo>+FdWop-h$ zhQbCjt#bK0y74mL7b0mK(7TWdLCHgS1(`Px;7@k)I9EU(Zst%x%@v3!ZM&~s=Ry(B zB`k0TSn3b@txQ2o$+f8b_3c}s%b+?dHF8v5eho-7%nC*&t%W6olO;q(WLOdNNAeKc z2%)g9GOyiXRxths1_p35(A>+f{;_v-40+)7v+L6Q_%Vq|C_3N_4KnD`P;sruVWVSX z9Ap_nZ5|dmZ0gN-j-;xqNk|YoZZx9u|AtJ=S_`!9=;S2JT6Srq;ZxS};V+P&u|TP~ zsWuO&-=(K;Lv0>{?x3cyKL-W}{Sgo)hxNa?vXL3~W8n9hwzTG_gOJ z5#~H=El?qKWs^ul@|-le-t`B322n??%~V^PwHAsEuua-U z%?Dt&Eg)~-)-GPWh#Uzbks&YPwR6m~5{U`>E^Q67!cE3c>tv*mkAPHRc*tDz0Cjs4 zsM}k6D-8Zb{JzwE%-Y)en;TM9n#BH6_X|)pQ65RhH`L0^^dlzZ;o*VIDd-i5H75lu zz*w^A)hk|eW%qqs+Iw~ByuD9EXw#-C{TChzjlcaoBLk{C;{chDZ@9vjlL86|8W~vC z)O1}Z9Vue)tQm`F674-UK2XJ=^pU8|iU_0urFZuBZg#`e#LNZ>4oqo;JPqwK!s4MW zq>@YNFJ3r9FT#33JQbS?0>rR;hEc>pNk;KMw1Ma+;}a7iA@4tYkYx>yN7cK{IzNod ziCPF8uDg@|osjvLKvYoU8T^uS4F7@aaSv_yq^KyK7ypGgaBj1u9}sWOe=k@j~>F%+KGFAUguhaq!xrK-~hQQ{h1u zFmo4|X~Z6WWPn{n~~8%U}8LZYC?f3cGX(ITcH256^y=@P)g2;NJ0 zUX^ma+LCY(h!YWieX%`cRLFok# z*3t^r%LwY)dll}EvN9?DO^)$e8B>#rF7Ryir=(wp9F$Bpv2dKDuH zJ|JO`UZ;@RF_n_uz55^$Lj2CXdwE1K)dA<&5jwTC^_`fQK$6~}Lo^i}q6dh9$^wEj zRUA|dyK^>wmH_>PT~L)Mw*~p!YuElwSFF4M^Mq!J9zQ&{jADq@gCP*)5JBekGJYeJ zka}&QJ3-dw=hPGgQ{YrG7Z+78BXjxJ{^xXOP6e)<*yu{Ts;_ zgrkw|+vooMW@hGvLxyAOG|=nUS0S-c6~G%e_|<*)Mb`hGnL!bH1W?x0 zv2IxzWP*f=8gec;5A;v)Kxjj5?(P`4K_=S~o*Zr?91F;_I%$UJr&zgr`a}5jkChQ2-qV zhla|7@XMaW_ej1-H~`7ujv;FdgaeM(j-cVzZQI246R4vbKvGmT(%t=Uhm$xw@q=G& zMrb~L`SRt{r`x)sKrgubMP^jIDi(``l*o@_oD=qcgm%x%bCF2s0jFSTU-R|V45}NO z10of^iutH_A3nsrwS{pU6l_Dj7aLn^ov*n8V`BSxMdF)*W{?R_{fJNTa&^6}mjT%f zQUc~EB2!ZbVS!eSsoXWf2OAkt%^4^$&;y`8cSRs72hxzJj}ZHLOG{UTgqTBL!fZv( z%poo#;~Wg;@=jUT+4GRkk98Q`r$rbY^@y%m%_15`%8SR~&K(;UvQT{=~ zo0_mEKiAe`;wK|B69YcM8pbGXC-^Nm~O*oxw{vjJAj72 ze2Gp~@ak2A+Vpz0UwzpLQ7%*@ugT9&SUwiMv-Q{ti1T58;qW3OSt z&&L;7}R4AI=w z8saOAr-m5IF7FDn5+*guupaFgE_HWa(hBDiNySzM+W{y=DhVqX>%i{9(=!`&qsKN( zL#KljA;BAo4lgJq1Y21zK=J83%Rr+n;4%R@ zTV2R`;U-%B@NM>*1MR~m{AB+J){T&=ck6Jr*Mc9@JFlkYTt^jZwt}nD?+;_g>kE+s zXW2sii_(29$&8EMi_?Q2EoBs(dOqcxR`k_k>PVUA6<7=XC^E+`La(f9Ug2AcYFwKK zMHF~^Q*>+2nJD(P$zd4fgK#5v>;Oyx_K6bG5L_9}$!(>cBttir9 zPy*32ou!M1DsKv=_s0n+k6v?{z8z4)jNN1r=0Dkg_@|fBwi@+A2X!iQJ5$ASP@5mm zj5X2`e5y6RltnJ=p!eDQ>5xjmV59G?6|<`TPpi>(e~(r%Nh}NtR<9gesao_Z4xwo#$wMK|SzCNe`0(Nb zf@?#LK=8`?OP@-u#+LmD3cqmtJkwUZ?)-IiayGD{N;y=$QQ-CH_wN4(@cu+ zQb=g?)2uWe2#Ov>bpqJ*NciS$y{bi9$RskJ`lwK94PL<6;YpRP^Fb8bE6vsgDV(QO4D#XIV zvTqOVRhop?8B6j9QB!CIA(CM*aqr$gb91%H#z@V? z=+a-yG?ujLhSBG09>dTi+xr8t)(iqb}x19m;w9Slf+60Y< z9N9%e!Z*~+?XOe9E<~EA7+zjHz=C&P{;OB)L?RiRLtpkrwEeLUNt;L{ zS48q*R=)9F#`I|0;NUt2bHc*H0Pittih&H+dBd*zfcu*7?SjCh0$T{xc$btEh94&} z_HgbT&!$bqAaoEHzTRil*8e?7v~1juNLw?F|kJk~S~N1LFi# z_FW#0$KN2k%0VRVyYy8XX@-aUgVD#B*!V+8?>>Iixb{~bw61v+`}tXJZYnqooHrTP zox66Oft7?DiQJw&*tFAAQ~%JJz`ph=E5iUobxBM}FfVn>$j`?~`J+97ZKdqHWUZ}T z2kM2_GMCYtNs3@z^gD2%%L0AP4+9@v+bbHfdf|LS2&lw4xcT_moeFi zG!9}y@Gxdn%}E0W*q$TVjSmPH(-2idTcDyC=1*Wj1xHnXj1I}QINEL=8QNLnN3Ykb5x6A zaMu$q1B?rVasZ)YbXC>VY^<$iSPKdY5WWXYFD@uh@mnpytfssjsc*a?SBQ%C6^9k+ zLnc;Jw6|7=af;YFI{w5=2^6^yQg|&N42d|sDJWLO#fp?Bw6dZi9udqsz5=3!L*N<_ zOm!ZI1d%FOoahLLLRC@{@GbnUEpT;^j{$8Z2i7%4)c$kR5#A0Vg&fu*f>z)<9G2jQ zPli9Fl+Yqhj-h~&5v>d(v~8GQxXEFp`@l>~q|UasKvv94SLY*1yVH9PDn2~r{z`v; z$RTIW2vBshjBEbUWf)xqL>(PHXKRa-===03WZ-p8%g2wo&!0a4xun=Z>49_soER1# zziG)GqfTB3T~L~EIeUAPnn$Te;;YEQ68Y|(p7wR74Wy;=B?+%q*NU)&e4>a#(wP${ zwv&hfe}Y&1LV$K?`8Xr%e+-@BtCiu61m~ifTvz74Bbk7J^hWNR-mgF}7YA5x1wll> z2I4ro7O`i|g~3q2w|ehw*a=lhm@VMp=B8(20#l&S_U))N%7SY|YB^3F*~SoJg+VZj z16M={lOw^i1@_$4#b4!E%qS*=wn7qYaUWXIrKtkjaoz=Ufvhjwiva54u}yR@44?sz%RjtF#mXW$8n6tYtw2H z_bMpVh{H6)7p9}r+W>Y7i;Km#Z{H9~S;{Ic zzvw*hX5!noPsmgt(Jm5#!KQf-Z;WqYTgTs}eu1x1lN6}+HeWr;s} zi^$r_%+6T?iGm3k3F;r0lR~K_?O7sKpX;t2n%C`mkD_q za15aau2(PWM21Fa-gUxv!tX8kQ`Y66l8WbHf-Nss5d~r==Nx=z`$^3;da3wL=+$03Pr5)?~iPV z@i1qR+XCA;bn>L4l2U0_R>WId3{Jz;f$j;UAAH#h5h{po9bdjox21=p;{gR?7UAc& zZ}R9bpc=>s!XkiA`{Go=6YxohIv_g$q!@4CwTtcR4^eS(2l@NBTQ5zeZno0lviHs& z+#Mv6vtr)0A`t%1o|e|1FJMV7@#b4wDAJe&Lttu)V)>MB;H1sp#pqA;J|C~;w~Vg! z-$gX4GR$IAnsxG<;A)>f9(uuDyxQeMhZz0pg@#VMR)_Uot=+t|MLk5(kQa`{mZ3n? zJ$@TycIB#jTU7P4WEdfdf&5iaa4?7}+FSU*f>=U_-6DJY4Mx_T^txlSwOiiS(1TQj=_m1T9w*7?>?7_?~oU*EbXxD^8GE=t%oJ34q+I|OH*5CiD(|BdQzLk{zRbxZV&A%GNpYd&$ zGlnuHk%H#azYTun=0ta{@pQOVhn2I*b#!MqgzvjA{2^Rszf_sMwm#~gY5CB`o{*lrmYlP)G@qRPFJ{?6G0lC;k*U@F3_&})T;D{$n%=_G z)6!LRLT)_XY%!XTr=*2(I+8twsVF*0!0eON!$%e!%l?)Uk1TX7JH_^$Rh<9))|Ba8 zrTgQHW38o|3jdtYR8w7V;i;W#+*a_F|M}vFto6M_&Q^aRf%DT$jJyj99{g9Ei35!c zGskXye7bljw$Q1;ud(Tu`S|)7EAdzr?Tm(#q3kC1LN9pQZ}i?=?@9CQ+Wjw~VvnUK z6SIfk_=C0N!&q9zEKM-OL~LS?L-gZ5a5*NSUH!oaBxjS*Qs$ zHHgo84IQ^HQbwF~&z^!8FIuXq0wBpOuR^ikHgb zC-~3OkVRTau7VlY^r+Dt1B35#%TPmRQuM{f#>T*8pzI=Kuul^6j3_qy`ybYTL<9NW zYaWFmu_PRxil`kH0pxNR4Bd_jGXG#eAz6ph#xJ_ymLCRWx!Pi$;eNpqFG`i!*XAyGDTxa1WP?%;?8KQI!>+3&&0DtNfA7vc( z36JFfVNN%cz+f0kY_P5O_`wG>r6nb-f~w?IhKtjYRwWux(0g4fF(!gad8WvoM_SPi z`5rib5GgMU;0XlAk_bM31$rFDx5$6Md%-hpg8QZMKU1oql$)ZF2*F~pnPFqMV2h^2#gr=+OpV+>G(NV&?E(LLM=bsIB~ zs|d&hDNWzt*-1UrklRLCNbmTXn{R1St7>Gt$t<&sr(jICXRwrbx8Gx^o)Kn9+oR4M;t0`E!3spVF2bn5r`*-cK!dEjG{X3wv9^Jo z9jn=On}8(a8ALlOF^>8bfq_SlU1*`I*dfXhq`Kc`L!|HGy5#pc4sL*{Hl-xiGdy*OKLCczDk_7xUXPhYQ0Iy?hbu{aAVDf@ zlem}|8YSG8)%S^ehVIV85C#wS#e{%PdMWHSI9MSxRWcYw;O+~xCc}}sjyyTOK{y(0 z(Ta?;s2b+sag4#iRvQtK?E!m2)M)7&^{Oy&Gz=&o3O&t04nt0Lb0052wzs$U_4==X z`dDO8`z*-|pqLi8Fh4d-fU5q*(4HmP#N7Pn@URFsGuAoEDO?L#*3FpMH-;e;MAwh# zcW`De$_Ai|p6H!VpNx_B%`(1W)kS@HPEe4r+P6xqAjl}zWX3lBgsuHOU&s(>JvlAy6l7pFI{ylJv zkQua;uFAzD4FaAFyCCB#NG1~}k{>*n`L)7AX1GMV#6jD^H41Gx_%>XW_YaizNJ+7Z z;C{H^84{36#>dBDuKKS`6~ihgrsYt(24ohPd1UZnfRfpsLH>YZnngM1i* zkdOn2BDdXc3aY(EN`sO2s?R3O%^+n5b_R75E;=Wb@NDPWKpDr~rg{_e^Q#k?sbCyg zxw)0dL?io!p_R>>Pn(!9a*e#sRIIRNoG zC>HnJ1r`M-MY!x~Ru-NCRRj^dqC%bW6gm)~&3-D=t7*Z=bTP^^Q3Opg&Cv9}=l7&% zW;WW&4WGkvl#HV>z~cP|O9{^$;x0cSg7dk8EGH4O=C80SHiXu+wi<@Cf-Hk1qIHH+ ztiV1n?usg=D;gBF067VdN|W8yU-GJnrDr==ge1D>o<09oS8+}dS^(dX!war9MgHE# zCLPaj_&wTu+RRLp>n%n#@K_E{Pi(AQm6GrE(Yv8w0EB2!linDJUZM^=A$JS3V<`LB zlW2z&g0kliydGzS_GLLN5~GU;Wo749z=ys=!;;rB+GXl9R<*uMdnB2Ehym_P{VqfUkKZFb|>LMF#ZDa9n-cby$qZI z-Jvp%i90DNepu8fG2qv6dT|JXoPCAow7{BM!ZMx}!pPDWuKL3iV8Ae|Aw!mx!|XIdlkBhO+S^KR2pFv~6p7Cm*a?X= zMs1Eq7AYyo!P!|I1rS#f^F^c+7A3C37`2#PT=cqhi8@b%2Z(g9BJq?*Y{h^?K;`tx49Q-BCIYE-vAD^cH^0+r4?t$&djE;b3CW0T}^= z+}qGO`T&*i?5u$Cw{2~+&AThL&0f=&nzz`>;fmsJ!?5dZZ-??zwR;B=md&F*Zee(Z z^yycui!L`B**nBIDY|$DLgaD&C`PG-k7FaMw_y7glp>V~`%vrZQ2)>|p4E=wL_CU+ zWG!{}&C>s2>AVAK-v2+|QlWA(l6Fa=R6>Qcza%6HAsSW+B`ZQjLzfguQc-3}%7_q^ z5Z5S#?8+!3m8g*VJwER5{_*{CFP(Ef=RIDp=X&9&k<~_|jnmZU7VeYDQFY}$r@geL zxJkop#1v)@kh_UVM>wnTpGU+)4V^i&pAvyhWRvu^vC(*!qt~vRw_n$MFxz;muBDrV zxX}lEl5A|iRtkQ~I?huM=ahkS+CT*Pk~E{^Kn`O+#!ejCtlPY9B1txSb2LIk+%0Q=dzNJSa{swB>ZTh+uoiu%4-( zxF~^>rB2LgI=eU^;Eng49g?LcDzQpxYK9_Ns(=U)2mT~yXQN@mpj+9h{C4X+%VUG) z!2aUw`1myU4F&FOL#5d9s1k6WaPry8QX$5c*O5L2@5~oHa`4~@MoF9;Tb_$dy-k#% zWLXVkg5Js6A)$r7_ew`HTjEvhgB7L~#Jaw|o!iNG?7`yAOQpJX1zq&0#?B(~vW8}@ z*5IJq(8#m}!NKhuC;5+nQ6lX!ppUb&x2K447F2{%RC-+uwlWzQ zk}^nrVH>w9;Q>a5hH55WVcFTA**ZwP0lYanIc$osy`agWteG==_6#?-;tzebsme}W zxm5ifm(L@T3R-Qr4A5eE?nE&8fy$ZYC4y(Pjj1U23#^w?!KUD{65R(34)xh_ ziiv_LdFOxXDJU-m_2TLyY{VqZIeHoaXb2Dnh(vjyZ9r8D(S1}^$5Q7+RAf#&TJJ;1lbie0?A${oQ$J0GumTgKmD%o=;zq`$p*LC{boQ7U z^;9M_E-5oD%3^(W*ub3Q#|J0f5%iNNDv?c|K0O)+9pjbY2sn9?wYv@(09PppJ>G?^ zt5-D^_UA-3>G9Yv-$nm=R*!@lv=LPAl&(1TZr#66CEmqj;e3fM&3NEju&5`>BvxNl z6+O^Z&>t-=dg?VFAF`f`mzs|n^%%~3!h|J|1wj`#;zl4dYW$q@6Z`f!T2RnVnMol+ zP$a6axWG|{)VwrJlG zqBqy>-OHij!b6a^YpRoz3X!sQvJ1bBYYF?ht^(propkELLfv=65wd4t0FDfX4K zaj&2|8LF>e9dwcYoZt?q_CWU`Mn=-zr33Y8+)!oEe@bjyOclFef#i>fM6@$_a>i-r8&#&4Dj&@qFezL4=+F#4gaA0#jw>=Cx;HFpYoO78Vl$2m`3D~!wgG--5R3u!QUV{xwGviHfup06Ji-%B{{xqq8? zXpDA)wNin&=f;hN4mz`O?Ac|KEv2Wom{SDWqi>J*Alj~3BP}ebUm(*i(|LLPoG^Yo z)ajH|i{Thwz`RAxipM5+c)SGudbVus>eb(Q3rKm0NFj8h7i)z>PIu6td;5l$;;c09 zLz7PlC?weg1+l_83^3(92ecLh$!pf|aIid=Ub{B)lt*{Z$CZ_Zw0_Wt!N-w*X~fkv zHol=radSf_zL`8_kPjMMz6NrE=@!Ed2wAS2oMapqaA-vK?9b!Ca7bbgq+%o}0!>SU z*edEw0<(B}Jbv!JeJ0*^6tMDgasU@xkhEf?Sz+N`I`TQi5-QQ$+}xCuxipM|Im_`D z^#CZj)}?1)A=)0#33q{{ny^!iG(@dGoa6vhm~)OzPJW2!1NMk!f)!75h^B>Do`wu7 z-->hqF(`3FPKb~&H$nWs5vsFM4GjFD0a@&6grG&2c1O9_y}J+#hnK=N3+D9V#-C^A zF}TeD{{XcH;zn9fN1!JC>mi>&E7Q1Z*VA!H0L4&S#;X8EuVRpA3tWf=z|%M zX+VDvfN7>>R)!0e%LfP*$YppJbj8%dD3b7U0sBB-Z;y+Uv9A(@R<{>osv$}04uui7 zq}H7+8E6Q9aV7JAQIV0TPcLz70Sf@<0GrAjuHm)O(m=K7nV7^o=*;8PqAujYW4lBV z#-Gl~&L(=f+YPZD0>eU4&239*jDP?M&kjxNPI^+Zcx5vpX@gDsZ@i&^&sy ziZ#bE$#D+V%%_GC6{OkJ7mm8FeAiTBYU=8=0Z=iVg@SgN+mCM)oieZ!7b0KeOO90_ zEY5+EBUfX|^z!{3{z5WTFR6Xsuo1U5@+Qf+W2J2qv8tYO2hT4Iw*8x)$UO`fXxk<{ zdG4Gp`d#1>R8Ts*SO}BIJ&w51{!(z5m?m>JvqW&xD{Lt9ZynxCM8q`fn z5q241Gw&RX11B0dqtf;n^X4^t{D^W0x)+d@=5Xb!r=EBHx{{0gU&AbeKKvd^Flj^eumr8y8zNDl&NO`1KP^r}FWQY{xyTfHnn}*D%X#C^bw=Ji#PM&1fi+`Me9ueC^LP7!xsMLGwEg_lF zOFU6}4wVR1OMr<zm3O&KnSAAJAxcoH|@@Arwrm){=d49w)pL$gSxc%uvp zi?wu{YN#aqsQvqOA~=xf4A6H_gP=;ga^;G!MDRyy+ee8l`5Um1OH!**61naJ2Og&W zwtc`0;qEx<%Kx(}Z2M2r-A#K*FAmx7@1Om^mn#^27L+;sBAaFo^5u#xQ@Qa;0p;(k z?ZdZ)K(S=}_Iry%*029qU#}H`kwegCTUu7n6bwgm=c>BzL6&VB|C}EU#4BS=GC-;i zYZD-TXyTTMyD|M$ilRN(OWXU+st2?`9Xf1Yo! z>;S9_g;s&bslO4JyPS^Fgn9iiPIL-)3I0{IBj(R9iLih_dyPHs*91b>9&yq49XSVG z68pHWwl;`BLw*+=$==7w%qFMg$tf%7Ea`k^4U2Kf3~aO<#V>4=0@>HWWnz#1Ha#;9BP%T)j9nM3TJ{ws zl8ucGk&xU3etw@gAW&&j&r50PDoK7naCtu~f9{^>a~mz}eP|B*^#izekAK~1>*J$Y z_`N;FIY9l)!_JO@1~GMEozKj}n?uJgX)h}~-|AKGGPQ6+S}2eJ+62wfK}TAXJA2Jc zA0a>O_}J4$&s*;wuAQ1OBYNZOSq9(lq?D%pPOJRr`nv3Rm!`yT+2Zs5x_+zZoYmV zMLz{JR(A6y=@z?ol>ob6-I%<4wHQ?WWqJA^zvs&&U3pu|JTus=}ye z=++nhUB(aniyA9jQx(!473IdNf7@7>85Z3(L)rLLsj8!-=bHM%y>|5I*c5Hm;Nei$ zV|D#8o?u#}U#}BwkL9Nxo_G5G_r{mqo*!MUceS;6b6rZ@#N2twMPiz&BI%_c18Q=~ z6f`x3`JtGoBNmr zjz9Y76*9PQj~dGx2;6l^50P{lfz=g}d-zFYYe;jj*08z&h6YBg{ra-|P35%ME-Q7f zIddIf{*ri;XJe_p7Dubf}llID6}VdjzcHwwv; zV-|MazjUQs`unDPA3gT2-ETeairJ{w6K>xBXzil&tNN5$*Tk_h4dvD@;$M<%H*Ze- z)|g#2c6-G!`?^*?f0+j|(LQyyKdvrp>}X3H*if4GZMc1{`Oz+e_ew=q#j5kYO_Q~@ zk!uVgf?On-OcRz0B^gdM`2B?iqa#E!9?Uf-0pd6GWMSbO38|GfU}qe?mSynEP~EsCi_Unb=%`HQ=3* zRY(#D_2gK>fZ-*%gSkBr!Xk|+{fhg3Bfd3CLgHy0QOAEzt}+e*8Ga<=VBaoO=Kc#Iqu*!WTuP z`jUg2K0q)K?7DwH4h(E+3w?dJdCo)Jzcw&1oi(0pP7v2ckNHF_5`_W}st^sk2_eEW z1q_0>O}R%G+1k<)LUt0tD$AEQ@H(9TBpgHV!JmSG0z;Vy;j*Z{d=$_Z$+ckk}45hvro3Y<;*a^XT-lILc!J)Y-!TC2qF<!fD8= zp$e^y@>L)C?Vtt2UJ{)!U@pY;fWOki?!kF;3+6)5sltfCq79^%2z;8DoV@|F5RMM`YCjLe5qu35;xFJ4^l>gq~J1+wuoi+ZLGE?#HZ+B!!0LM-_Y z`3+mny}DD~=GgUhu_Cg<^6N#Vnf7z9mA(&R)XJ&&jy;bHHO2D2(9@C=jBIoNU(ZgW z6WOWNgUwQMT=Z$PqT~ihIIC3p<+rNb^*PNrh_3?@)%+BtEfT1v)E_XvI|(^~5Y|e|M$2j*Fdw%JR!V;CLo&NLN%HdYxaG(i zc4#RnI3^ful4{?a!$cqKn_WxR9Sj8_{Er`xGBME-^3%k2N^sn1eI`Vi-}Jpv-8;GL zZOQ54%E~?QohX+MN)bK0B>d0ASMpbt<6n<)|6iA6o2l?~`-i)Wb>1o7{IQ{@&4yXZ z2NeRwbWJ)bkN&!iK{5OZrXSV5@$TjjhA3RBb9KkKo?>6!_Y@cPEErp*aLU`dqx*wb zMUq8ZEBPxkH@evZFkF$)@3M8H_)hcxqA9X&lMXx=lj|Vr__x; z#r1FAbwtmmx~*nbVR-F=OK8bBe9=?TCxFCIMRMq);sT)2ma3E7*C5)awoX&(s+8AE z^aAMhh^;|zW~HU&)%xXGMC9!*35&DEA9EWXh=-_pc7KiI1MiziB6mu>^r8N?xwh## zx1>B8(Kg4an(r*}3SPgS*2VGIs~^uVzvU1C>}P5D5*H)#kvp?Rs#;EMot1d!;4!l_ z+6`OHcJ|xgU-i#xl_526YBje^9h%uYc>fl&YpUO$%(d8;@fM5aGtcOA&646A-)+j<&vF@NuYD)F@=%NCf0inHiFcm4>Ur+WexpzeV{Z<@< zHuUcRDb5G-m<9L%iC~22^$#vtVwA^3s)Kp#18iLDqpvtLW|o}xk#X_qyMr$l#P#57 zHf~;g?Lz$c%X+~rHLoSXY0dnWbUWNX*Q`?Q`Kfs_@eMYt}d;p zcJ5Uez=*QD*KRAseoFn>b>rQmL#hX)e+lE5Mvo@TO7h3Kv6E7M9KJ9~(M9_B-~%Iq z7hfOJ>udjvnT`hUG{dKgih?AHFZ9CwX4Z&|ALkAil``>0)22Ou;RmlknY(%ORoD** zKOz8WP${RN|2SJXP8IDyKgkWFHK$afF#}=;6-AM5v`jg_v{14AZSm~e+@@%tuPro% z;vCXDMoULE${RZsAO``k6!-X=ppDtPELeJe($*jdx%*g}fLUy7(orZS$U^47velnG z8=(Cii!KMeQ4$&76o62DK@>eW+~7>%-7hbrmQYhm-Mw3v%M#8XEZZmo8d#<9!exEa258enERiBg_D&8FX6wG;$b^KO%ml zsj9bZ26_`HO-!o5|IrZ`9Pe(gpeFZ_r2$hzZZ;H1O-AN83@cbni}(N+HQKT(UkswLCzmTmB|$QZn$sV98-x zOV}Bu4Rt?lIW7{^z`GrfaIa9@?YjMr29-G`gi}(ap=TY4E&XqB9BMkm6fa32LQq#+ zET&_$XYXF3ZN_Vf`15SvTTh?1@!b<*2;0y5H!}L#`R6y>DyUDv1&69-H_FP$O#m@P z_ZDcO7UK{Ebjr(N^FpD<8vvd`S;mXn!~M9sOG!yl4cQ0i__S_1(f)(fuBYr3Oj+>! z0O{-(@(i9ndK7~A3e=pIgjRK|{}ZA!1Q`w=UME6WKa3-BPTN2;#kY*T(?y?tGy0s- zu@i15Kn^opwr%TE+$AO$?%KY}%gUOVnm%W21&~pRq(G}s#t2!5Ue`GsdBa=N1Bh}U z2LNb}ijQA_ivn@NWIP7b0TLOd!cwJ{0`I;866!G z9BjFrw2sLt~9AOHKW z5V%K4LM#LOk-f%a`-Dh1CuccZA9jrOMh+O{fPlJjz?Y*8Ja$aFlv_Ek;l%~iCqk3} zN-6;#YWXQJ)G7Da)bsPaY&UJX;&gNlnFvwdEFNSqgxC4{`wNjroEYe8#)X{65FRjS z!QU`Wkbb(;50Ez|H*CH;=_MeRVg!*8yo$RLxsXl-0fE_E?of-uP#5S#UI|+b*e)B! z13rwy5sLVHz?)9!fvOtCvyG3g=NgN(4-rUTGqYnyj=0U5RceXs5wfb`!QnEnZE`B0 zl7WNIfanky5m5nFNa`Oe4{R5TS&4 z|K-uaMB;`tj&UFwp6v7g$#MuIKP76OF#rrq7>(=Vh!&y`P9XOX!W_{7RRU}94Ut_4 zgngBjO*9E<4^qc8A=cH^hbe7`N3mM;Z(ovK*cjKIY$k^R_ta(Lt{yu2okI~*Z+w{9Vu$H@Dkp+Q|k!$>5HMP~#Z4(VpZ zx*~N7x5-152UtGZ!s4Z1)JYqQFr7W|gTKgvZ$x(?l2{~Wr_cO02t`0uKqgdG$8goC zpTK|}j8zWgD|=?nFZyF-zjTYtsv1j>8&HDU=%DLdN6ct}4B!#do56VO6)v%L7nc0aT$IZMw=74!A;X#)be=)%3aOu~US>A|WHA1{I8_ zo10X~Ml5dDB|FC(C4oS4sMYGcDoRo5QuLj>gS>Twvk@Z4Q-3u%F+iMlnVeKawg3Hz zckhZAWR(nP99#&hKTR(I;^q};3EHr~+|Y`4T-Jcmj{f-vOc(vjli`;0F4s_0Tv=bC zO$Zn;@_z|mIuU}XqUWTeuDqc1Rsdzea(4KzVd6wmD81ZSb~PWEXT% z?ago!!l1#mflViZ-cNFJLPf?vFCpR+=u6Ea&ma9??`kcHj^XbGcvq^c$sy=zjrHUxFDU;-vD;yhom~xC@EDW zlD>>|_|m00dI=mwj4e5X*hMPFL8qN5Uks8NgQObN*r9`W&z7(;uV2SgH#H}6Gto(L z_zx@Zjg{TSH1~B_JqA29^P${$ zO)z9E{B6LF0!m90POuJ)5;}VpJ`D$2AfdEA!9}Tz1g5w1PcfZA%D~0nUNUW;xAub6brZ2x%J! z7~7q@Kf(q1JF`EMCkx>X^yTjuclZ7y$1M}WuGz6>M2N^yhz6}(Ib_(d$mh@y5;71} z6&YOpbOW!+wE=4SZvZ1h8YO?#kUMR257i!MS{E?&@{g;}W7rYs#DQH2sUOAcxy8`7Dj!srT^^xi*Kgxjt-my(f#Aiuh#1f7n z!15b6y4Bi})H2D_vy0Q6&CL@5^*WcAR|OY?(1b%4DKIDI%sF#@ap|FDq-K-Tv`R&8 ze|6*RoSEQE*7%>maTxvqEdlSv4ag)DrossD^G@~B<ADHR1yC9fmMKT2w?c|pI zpD4PSPkOoWD&a}`hK7PXeDY+uttFUk%aC6>AG8|A+^l6B$^5k5efkhQL6rywC7R-zxO6Y)PvV#s|K2RNJv0Uj55rpD;rPHCyW)p3TiyNG98+9>((V8~*jT_I$K)1Dg=;*qGt9`f>x#o~^FH(E1i z&U3`71U`_?^nd{Pe*NBm`C`dljd5Vejw^<`>C;z1vGDG>@fjdWwhzC6VdrlP{Opk< z3%Smy53YatJ+j%Le@UP>YG8W;uFyZy&^819L7lE&Pf#w&9Spafk^PuXgmjysiR5wM zgCWYFo{Am`fiMy>b}?DO$B)aL(PG!Z=%Wo`&ob;-uEe@$aPEwmGjS_p=YV~8aVFMv zl|?E~i?_hC!EXqCfx$tpR1O66%a`H^#bs;AXt5OyXBp7L!kJM^@H)V{V78{o%mYR@ z)Xrnz@4?5`UhBc9-|{Dy36&Ekl4RMv>Vdsz3vY|JqqO~TMFqJ$SZ5cR&Sn-3|2feK zu#F>=F))dD-cuft@*y#|lhSTz;-?QEm_^XsQ+#ORiS%?E-QMV)H$q*RE-sg2%UUe{LtV5@`9I6NOv!)(O+ckc?*9fdj4JWnB~3Bjjo!fmNdQK-BE z1I4u6Inr=~z^#Gx0*BB`b1I=;s2+?)+}m5ctsg`ue_~D!lKe?5wlwEi*^g;U7*lue zUhEB@k}+us34~41Z9iLfe*9s@7zZG6BI}^+=bT@bOvL^8@zRM-Q28VHluW2JGU6Zu z@)Z-5U?6J|E_@g8xRH_FR_oa5TU&c-i3Bg_r%z7+=|_!X-2f2cz9!Ss*H?BG*BRY# z*uG5%^*TFJiq$fbj1pw;<3og5o9$5N;FNU z`+yaIl|@u6D5E^3?B{6T-kjf-FLQV7ggavmp48~|-4NH`zk}IWx9RN>u+tT6>1jaS z&iWT-X7-v~pEGe$w9dKDTgQ$H_hgHt?b}E25HqFIoDZVMq|UX2oAjqY6R>EgJ|GC- zoWO_L!%kbxSF7)bLXo0>Gr9W+DZtfV7lnFGo!VHc-gfn1lX;`Rthhw|tpC~6CtY~` z;6+SqoL56tVUz3cSuf)fTc-*^2@WUwgqn>B3B0BmXcqqZ`Pma_IUUpEqLk9qSz97Yl8 z#rNooylpd0BN=Ec2b%V+B^8S+8vPZcOCfJbVldFxr;xTM9xY5FUaZmZ`<+RFjfabW zt2|tPzxUb3gl>wx81f?arB937)+=}VyF^#}7o}JfZP3*L@0B2mG}zo^*g?y@sZycR zj@u2w^Hg8zriUJxF5aOlwYMxieSAP#Q`nPVZKDT$(fTCiJ6+nzK{otzWUu}iR}NK2 zkGM8hC%kJE6Z>A(YuWwWH@c(TR_1kV$kU&*+&UZW>ITK8D=RFo6_tK0iinGq30pdP z+=PJHJ6aWvwq&%2nmYu3-SK)&ZKusIh5e;%S+_c~mozD?wr@RooWp!j0(Qj+~e(rfelf<y$Q-2&+?TjlgY#E%k{!(jE+GkwW97-q$7#zW6n|t_hOTezx zZw*apqRh?LeX7h#PrcqS-fH)bwD+p@^Rfs2YS{EW-0lG)=;)-hi**72UTjg#a0vz$ zqJQGLTX){C!RB4tjBllt?SWRBv#*!+{T?pW*k^vmx`yDUw)D{~;T{g_Y#LR>G>3fI z;3?Uapqd+MYGtNj6ZCM*qPJpVVPX>VCL%Vm%)FbBZHSYB zQ=B}wz*&)Eg#+K1`cs`8 z-MvC+T~6vYvoaaQlLQtStWx`ofr7S_Hr!Jw0iU z12sAI#qU?D_?gdSh|8a=*r5P^L7WbZU8k@@VqN`^<*SnJzm%VK@Q~-3BW=%q7T=*o zrzv2Z6H1A-U?$CKjcW7Esu2HG@fHn1_^+C*@&;J8Csb0(?JYjuW&A#HBa zhY_|WBynD}%LtR{*rTGU8A{TYTq(117E*kk+VmPP7v6b?OJD+8T3W`&z5cj5FfUnB zV-9Igeg7$c%!Nx;r)?jF2>l+)OX3w~X_Otz|M{m+_*4NHCHS*RKkO|BsVGrgdo_-% zV5)PQ@o4yugv|gl+M+pldA~vLy2z3U{Lw<|9oS5(1?ChUCTOT{N{%+@+oRrrEN8c& z+D=k04czqm`kYo?@`giAFQF!YaZ+y5+HP~^sE9;bB3Z4u4GK(XZF1GwRjf=#Eg*Tw zJf8UTVOz{0J0|Nfk0v4>_msz%EhWatnS$0w%gejDV)Ne?xv|o34e93{Qg07}%WtDX zs&$SJ!KlFVkJ^l)>0D{H%6c{Zb%98egON3|zs=-V*zm+S8w`UiZ2A`w`q{0Fu&>Xj6 zWcvybJDKe_1k2>1|B>daXqO4N3q3$QjNr@sFP7!@?PnCc0?7DZ=w#qNVZt8}CUY{l zlE6H4a!j*A zLv4%<{6SCD?n*`;vX@R`!(~w~V;Zzx!jxpwMNGP!tk(j?2%<|u{8fTb@M+Ku!r~)C z%p=d!C<*ngS-@+#3**LqG4C2(abWa+nXzCdy1i+uCV_T?`Jc)Zl)N-UQ>RRcOdrIl zY~9%|h(4K|$>?c_feEoHLSiM7(qgBJ3(6EIxV%ur5^IBlTY+3pZ5pwB9x65xMgb5( z1Yq|CcO7q^fLGc=pl1OJA{3HVma&x|zkU_+Qd3h4k-GvK0l-m6zoSdXAiR3rx-J4( zMRqhr{Fb~AvPZ#NpmvF}tmELI8YX6fj6QIZD@4=K4KepvB7_-WoWBM}My=nzq21y% zw?=ft)CiVg$)v}Cl{m;K>sf+CB-1}z7!<;Ig1^v;0`AN~KIgr&cr=*NbBZ2%ev2g< zRvQaieSTVR$@Zd5Yo%ac!g?WNxRDeJf*BPxHH-WnpO~1ShswHt zzkZme9+s47lhDN1Tm5>4FiQAoZvX8!1WxCGWeogJHuNP zqV1%i;>n|dKmv&DRh6mnA3t^B%h~(vT7Dp!N8qQx3q6fgOXl^D^5!A#BPc1#o7+J6-VF`EH#LcMNzq0N{);GY zfPUsrszrITVdq>}q5fa4?Yd9OQ2;x2@7^K(V{slFy$XCC<4y-^Q{|{`*cnF$NtNdD z?Oj{0l@}X+2;gjU?e*?*rL5Lb1TpaoOxh$Qdn-SA`O`%LM1}CyJJoYse9Jth$zhhMj-XeI<9L<9SZ64hBQ~{5##q z(9-fHquaCGb}A3oK_yd~N0d<0{Lv`TXa?mNwC9uqmR=WoFA1ni=u9!Zc_HVIF8ccNsQ-m|c^5eEA4xDCCjp(lVrd@x3#Ft@KHHwQS?293J}U$h4J_~~I|IIi zzu#?4If<^En95P)=?UXy{PI<9wsQ4o8Gs^tD>FAlOj0=ty>tT%fNpQfoy5I+?FM0L zz`mhE{vit+qXMZ22rZEIkQK+Qxv!L7L>FINwFI1s5ydRAJ;wfQUB*lz-O?-pus(yy) zOjE>Vhg|>EsjuMh8~|+SO@Nckhz=YUbLEwTHE1FN0$FWn3{H#Tqemx~cwuAKiQpWO z8GZxv#+M=VNZOmX&B=+f$(7CEd9!Gcr(A-0z~mtu{-ZXwL!RLS0I=_Qqvqqv;s?qC zHm=o0D{kM}gu8>NO;lL+3BqMU>O(|4y|TxzuIR0I-nV{yB;(t&VauBS0a}g$BD^gA zm6_9IGk}nY86l05?|KD`f#ty~M}*C$|E@OwP9`*$)!#8RO(B*rLI7-c4~(1Z>G=lw zSHJI;217g9Yr}PfiB|-+i3C;&-7?L2&P*Ny0MJ)iZT>K17hyxVY(yrPE??$>NNorO z06oHOg`^ZO0S!@DQW8e-K-|f419b`*H{3hx{N^&wMJORq*3k%iSqW7bW zwC@?Afs{S(GZJcvHwS^!!3KG|Oc)_U?dAF9ss*PwkL?BExrY^4-5*AqadJMbs1Vz9 z{DE&+7=KvWI-N_Y2%`sG4plzIOW~C(C6Z~B-);c1AfMi3fdnaXshh{Z5VfPDwZKH#>& z`9hK@N>M$0J5*B0l9>z!9D#>}3V=ZIt3739!#2mn#{MCf97@x3+O%E!_y1cHn71xj zRn*?IX_}5!eJ=`i=MBV4py{yD68kfQeF-n^N+K$&+*1ABK9$(08$RL2KD!)+K?wl7 zoR;LDR`1HnklpvNN$%Q!)ah_3)#}v~m9K8;XqHKye4a0!O~?*ZSXfq{qa?nWVR|%Y zB2mAk!z}BUd%1r%(;DWcs?oIX6!O;Vxh~`2zFo5f)s^8}&9UwoK8*c3u6mB~k2Nb- zD%uqkEs`q@Tg`j*$N|56R#sL=z0a`)e|riY2WOkjI2TvfGYfC`j-U?64Qoa!gc&S4 zI@);lnRh_#jOeoo7(GO4XS9yZEUC*OaGbZLg zzullgk@SBzYI#~5JWynO8Kx{vPfzP{bh6j%f?~=0d{AB&4G|cEDG4m9uc-1 z)f#i>*}#)|On2{|EG$ed@%sMd85EQd?QZ9g=Wci_0#IKVSQSLrk6dZ}>R*)Q97N~{ zM-qnX=?Tfk^e1w@gDqdfQc3 zdm)8ZxR)zrnljVRu)`jolESKhJaO1*NnoId5oc_4TF>ZGkV+6v3T-1J1-J19Lz>~Q z5jjK8;H2U)jDt;8+TL%#0OnsN?B0z~CR{`}wb4pbyAn=@Og>?37(EkR2c$hrLZHAM zMp|fqI$t3W#ZDj5fUd68exY07GXN?Uh69_v#UOC?i9>9;8xAp_c4#ZV6y-XJ_F-#+6-0`a+QA z_8Xj5w5*W#XY%sEipyB$gL>coZzL8IJIBdvy|Zitu|scuFOSv}11}?kE9B zdWM47D*A;Hk=`M~&YQ}f?095B&tc(lO-8t2jKY1fQ&ig=tRBS_$FbiTZ(o?3YitMm z1P_!0c+NlL#-)uvd}Z^W=LAi06D3bZo{I>4=1dYdSGmt4!OzM`I~!AXViG0i)t3(* zD4u9w3T0R4CTw%OW2~3qpF`0B$jHcC^mtA8Mommb7~!&M(>S^Ae@C@>MGoBMNaGn3 z7q@QpYD++Wt~!VSF38hBz1*5uCxQ8?sF!0!WrZORM1lCGhow7on4U)Z&Z zb}44dCC-rXp*mndi5uFk6NpMytk~SyF{lz(CHhJZuVZ7j<`&6VlSu8LCBg#JaB@vI9GLNk~XJH4D*Q4Q@xt z@vCvv(Y1KeUnDx=Svtu{&|>kc zE=@8l4>1P9D^WQ*wTVVaJm&&%2ULGLyL`bZU`m)W$abUR^K)>BfG`J9oIU#)paSJ9 zE+|$YhWo*cUqz$=%7-=+t?uiqn_k?y<;ywCA~Dq0-$%Tl5cN+K6qDG9&^DTLj@iC2 zLo5@%Y(5s5j?6Cm%Ao>kMci_cK4z|3PA*6sbry7kluqklg8zj=1`&cl#?QbTmmNe=x-KBRG+%G}PF zS5>2it1O5)?a;^Ht+Gn7=wNTT!ps^tH!N~vB{VWbxTd*o* zTw7`j3@n2Ku+UIF;TgLF&3*SSxW^{CZAfjd4_5pa$Z*6^R4f2rCJS!LZP5~XFP=8z zYwGIE`9im7(LQqaA&i(Pir`QoaGkQucEf16J%wnYw8L)7YQzhQ5D#h>-CS7QdlHT@ zOVSl0bS#!<;$0G+1FG7T#KbjiU+1My*%=qdNC%)I0pgrDFD*R0gm0hqL}Uy#Bz4~! zGIAN{@U|JJ7pDL`FLBHklfZwL@#iBW|HtIX=u*OWPop(BeL9A`2VdX7l`HYI%5&dt z+gAVV>|n#a2n<0aKz*p3lN@z{sfL@Hf@9H~$oA-QY18lXoUWK#@pi;xN9Y~nW!%L$ z3z`YW$erh0gz!;QU~abFe-4zu+4DGP2s#Vjz6|jbYEH&dP>`^iLV%OvnNkyqz8p;h zM;}4^Xd&=HAV>)gE^y7F>P&IbU-tA=8m}tkH!WCzf=I}(+M*?NOMCaOt-03C+PVlV zZMX5~^AFqmHwSo{7Ee*Qny_sBY5PA(H%nEm+|1wJ8-8v_Q*OVS#M7HbCbQ~_YowhvRTtc2fi0Z`_%tn*#Eqgf~VJr{nt7yH^Y zA>h#)Et1lQ!0UwY6cB%DG zec99K9T(Pg6Tfg-<=BjE*WBg%J5UZ@>f34TxHM*Q(HM9C1E1zaAJN~pwboi{eBaxn z*1lC}-m0&pTbMrlnBwR|sXE%u?IN8A`h9QZ*VsF%ly$edD7rCf_^4>NF5kwGA)#5f zUCu_xKkrsqKI&7CS%yp<)7MuXx8dB;qwl%M5EEt0K0S6shjw9^d0oMw%!cg-YDMDV zYjDmm&teKg+PnU&Ln|qp2b6;VPzc;HSnYStN_RqoW5ETRp*iq3eJ+z}>$JbcJmMH)k+Ke3QcdS+P za`eil*Lqb>&1|l&${XI_S-q=go2zAyKz~2Cv1{CFZyt(@cyc{SU-!o39s7+QKhoTp zv1r7!SC%d^>T4<&w5|2~Cph|-cK%Vv=b|sxB{EB{JG`})-f<4aS8c6NL_7;nRaWA5 zQfzz0+=|iFVq^x8=t!I+-+sE4R+5lNiIy4jwy!9Cou^atEFd^8eYQ;T9JyfoW$`sY zQH(<&`uWqR9ZSo zf8BW&QaWaWYwDhkvLCJUA0BOfZEGy1Ir>)8rdfsB%Fn)(G{3ne{i7hg3YdKQ=M==E;()T>{HPh9Y; z{X)x=poam;2isgnYL8JmaWjL>8%(NlmmlBH-!)Oec4k#jAKS;DLhKE$nqIq5 z^#1UN2J3?6kjCP}To>602u)h9PEd@em;@7tWNTVBNpzjw5aA!V^=ZG4MSI5B$v%}l zLPlJ4&h6KSr9foSatJ29K%4Mz#+45f$x0)ae?xG(tyHUPXtNy*g?2eNw*4}aMl-G*D+hd~@7!)Mo zB)!iTHjDn31RT#vwZmGX_7Ah;t)X^rD(BfF^wEf$kgwccF1B3im@Xe4G}``N%SlIF z;$r|qiyPVlj&!z;+EL1EE{p?D9zQN=LXx$}G?{%Lu;BDj?{BUDiVahhP-{E1*f>EX zCui6+*yag5No?niemlocDoixiig2Nb0q1L%NADaiF83rQGg(Pmdo{Eo@GWD~GZr8J z1n>n$XR-E+vRx*E<!PG%acTP+|R@;$^=mlZuIJ(@gd?!aHd|$^6AqI8fTF5M`wR4fzmhE^^Q4`o-X#Z-x~K?nZo_94f|YL3T_NLl$+aYp`puBD6`9xO4r-(X&Kac ze$hkG7aVtV0KY*Z!u+E4_woDG^r*O4OzoyPaSY+@M;E=TtgSxRq!#h^$XkTP5nZdF$Z~i|&V8E&;@c5i1+Zu$kFRlZrY&0S^-oO0(v`|)DdXrT zg#5M&#A#Hq-WDa}a|;WF^qz%hr|DPrK9+l^hyJZ35E~+Y5Hokipd`u;+_Csm3 zb8u8ubrHQG^L**1!yqJEOC~NiZ0|9(Pwpi3b*dglv6))B-^bT0SE;GgMz1&1(GlV} zGoN+tRZ+b!x7UWwpWt3m-ITYwPB}&${WeEs29{qRtnIfl(8OVYmdS&p#Kb>MrM(Km znv5;$1BaTtg<1R#h1LGzsrV;{1!ArP2g}w9ZH~6Ks9*l>nj&1F)c^1n?R&&_Ig-%$kk!TlWAE->MPUxA`>SNPX}(fNjFMtq8nR&j%Fkdy5@#eC zgb>`Rsb4;RT*@Gw6>GoEpFJCghrcjWe7B=6f&eBOQVidi+be?EMVD69?WEo2(m*YV z<+c3?BrwAo@K-3sik}$Ab;p^75;j0Ea=Zqeb_%D&oxk+3t5`#|s0xv6Cn7(ki=) z&yNP+dHUoD4I2eLv!2A)_uR0)L049XG0u7knxrJxj}$$(p}1o(Q_-DJ&w~}?>a?~Fh2_Zm!6u+JVSE$IlYA*D zTd;JbXU#u1LbcE^Gk74}#%uB7CxBch`mY=c;Y{BHnhU~%P8VvU_!Z)GbYhC#sXjm*>3{iYNt9*;RJ8E=1J%^J{&51tZaH!NpL!N+E@*C)?xmP!iw#z(sZZ$k8-Yh1~fv|Cm zP?j;3+=~gDRSShWVG~@+QPMo%VsdUlXx{Gj!sA6PQZaL(jmZg z@jfuqzYDa0r`vXwl-$68@S?m=lE+7mbb@>*ZU>-qHbbH9=k@d zVeGGf>Ks|`^j%UCw&(_k%tGSMvS8$puhqd`9Y>*6F9U|?NqmO62Px$I2U|oMvE!AO zyoRNPm6e7z3AaS!^b?7gw-J)zB73Lw?@QG8XRtq5BZ6{3 zm1obNznRns5GUAMfed27NcP8X25LiV2TKbdW;lJrA_Y1FIP&C!2XkHY@z=r`yU&=> zPgV6Y+6Q5JBT0fcZysYCaWuk2Z^7h6r2+0Irf~ueF;cW2H=Bz-UL$iQV;1s3t!+rd zs-8dh+1)nl*z2t6gJCqmCnxVSvDFgsKK+TfCGT|=Un~2^rtUvN zk{dCiV0S`>lyrymo7;TB0_HDB1DOJNhd02DnuCH7%b@%K(}n-(&z9TRgfWc|rwai_ zyiZ#3@Eu>);0+LwiqSk>NEr}Q12Ca-z80gT{6tz_#cjrn zd~ogmZC4`UYrI~9aLjG}o7Id|B78v|44QTXGLTuGo{T(7N=P_M@*B`F*~*N)McFZf z( zQhfPFrRY;_x4xj*AYV-HGWG#*S2jJ0rKeK1r0X{Ij}7c65J_zvc8xywfYl~IfnKGIW-oRm-vzHK$OwWvuoI3*pp@cp3%wO@ZUA*lZ^%bwME-`8)4w3Y7zAuKM%R__MSvjs z<^r-1p2BXTXTS``kSC?>L_h*Fl$RS188VyEXH1UF&u2m=FKv?yxG$(xM6N>DX~T@v=JTD`t5F|oncK+j(oH6@?fv_1XVlx3G}<>> zS%UUzj#*7+JS7uChs_i}`!2dnnzX&V4lbVDuaomGlN4gXJj#2E@gk9Qo8?9{3$QRB zHZ%EMb1+wxNhl_o9V(-G+?rfn#A`vtZ@E=-1lmY)>qQWLN>ZjqQ_}PN@U06s@#S@p zgvO%HyhNBy!m|9KH{A~e{%&1fV2Bg_dcM4~P4cLMOP4a*7Khu8(i+GS zs%lKGQ_{x#fTTi2yu#I$X=IZBzQq0^z17>xi}_K-*_m^4*iw(T{p5WA&!NnLfxHk4 zaPIuUVRo{7O51U`lrdoRj70t={%63b@=iHvd(NCsQ`mT%BIq{w0+qJkKoDV}+_4TB z0aJEolYGfuBpwPC0zxA|W&W2NgAz1rX7O?`8hK|xvBX}+ZUaEMy;52>eOpQ5_bA# zW>5Hmckjww&+$q#q1!BYyj4TOzssP6(aq8d+HN#@gapSpNc8q1nfLGbUwz^X@@Gw( zCZ26^YQE)GKB=SgQCDg?9wfjiXAgjW>Fy`^Fstrz=;CtrQ99dZdd5nkuR>>i>)Ut&{8= z|HzkFn5C#IDIuT`2>d1Y)ugvJQ?%&~8Z_@>P`6cfWKj@t<#A;LbNCn&3ASE~Xp&i8 zLx!M*ElE{4ox{JPmY|8D!IZM)W?bRy|E=Ty2=sr2swDRffuh6EQn30X-#fL#B zW0sChx`Tz*V$G+%%YHLk`T-ZNnwp&JF}%Ej-+Rm$Iw?VmK{3vJ6JbyWt3I#Anp8Na4DEv{>!uYg8l5T&x*c#hBK=a>8Y z_z20j=yAD2pd5i5^htNLA!FPG9dK16^!Bgz_ORd{`6sSO8_og|A+r<~M)x))Ejb?w z(L&7tW5+)f_r#F!gM{r~|G-|qFBu6ueySGgIqY-xbLXa%*Zuzale`d<{f07+aAtM#N)U6N}4M19GonuHlc#=?i;?fv<4!be@}!_30E3kYgSp= zTSloCYm0rGJ#QXP-0ntE*eg*;6O=c7{(RcUC3p8_U=f?%!VSpggni~Vul5uWrVSf7 zjUi-l6jBE)F;V72wlF-IeAgaV>mDM7Zi2 z=oz&&4{$TvzaW8F>H2ryeVSIZPw#W}X>!A^+`$2*##yNwbGO?LoP4Lv&G)+W_{q8x zsU|mY&@LQdu06`~ao&6Rtax1_{rTqk$85#R_NdegN;Zl}!AR`2KlAL=l*7F%yG+{- zj2{O%!MjV*ooFIUcqAg@!E;TV{5C2~u>>&yWk@?RviaZ#kAZ7Q2c||z?V9g0*?;tnY(N00{HL|pI?+`zxUO#xvlRK3p7*7%%c)0|y#)cGkFfu} z<*L#`>2;1nYX%*%_;vi)d?GH^NylH}CPZopgAcH=$7vA`EwT=h?%bGpRpmy>nCtEf zdo4Z{xG5hkI)@cI&E9KYOyI-JXWNp3lT&*yY-UAO&h^M}$#l&k2HZv~%ujpb?mO>^ zBp}tioA#dFyKBFGJw;RDsrNWtuD{xJlWWB_&FtU}^v#1N1_8UoPpn+#JXQYWiq`x{ z84J5@r8P*5IpSvd$ZEq}7sNBYjjyXz(#0rg!F|UQ^TYPrHDpb@qB3f7j`>UL=93Z+ zYSnZiIHhW|9)60d3z2D%|2`;Qb650AkAJvK$gRgv9&h}@{7>04eQw~mIAJs?AR#0vV^mwHgi4f(GKGZ9A)0n%NGX)DG8UqcA(fJl zL^PNiB=b?pP=#B(Fcd;Ix_Os7EYveL-v032x(|=#2AfhZ zS@wGP;>GVVGknkoCtS{n|MKejqpYq{A5ZQ*9@$=%*|}!D?vvXuuIv1bu^IN;C-m5; ziiSVIicZpJ&z#|`W{Q36%QySjo!hn%0c$>N*ydF>cW>CZ%YU&SMYPGhdEpPO^+pqP z6w&?IjUFTYet25v_D<6tDCUsj3+s5v$=YCrlulJO?z-Z`?BGF(PEoc)$NwI^$`oC$o?a}Y|{QoRmzhu99 zc5s75^IJcCZ{G)jHv$**+?>#*CHKtfy`i(E#;&}yXIakRkU+^Ohtv)&)eow=y9D2` zXx@CL{_xjrvyUvada881=|`Z#1k>!txzpB6vwGrmW>Gig9bYYebyGdxCYzAmHrD*( zp}_qG3eKm$t(g}6%i_?I^PiO?k2>yrp?Y&(#DJaa{KkHKdv3uI&)nlDcMOH+eE#Kv zC2vmG9~>^3xTjdLM=yoIRezSpNhb8kzECsh&fqcDi?YWEb8@whyE^?A@TtIOusugo8>S#?G%8F6{vwO_~Om2<1^ z-@S|QY&mNSv-skA>Ix)*X)|D6BKCwS?bCOMlayqbY%q1yDIq%%7F(M0> zKFx-9KN^^izJ=llo?)PopzFuN1hUrDoUkp6P%IH;IbL0Mt%Thy{>YKpZf*<7eb}+( z%q2X9h7RrQa%-e;5d#O}adUFE*|Zh!&h$9Df=e_}krPsFwSGxXg(RG7Kn> z4cQ6$D8Md)58G%e0Hv z707wjEfh1^yp;u?bDM6__~e0LREXxG4vfT3fEw0Xjl`&oh?0_G%v519uFFE&#_>0A7R|s z$G&71#PD3-igw%I&u{zAowD8Za#+)2l}$1{oDHb%%v~Z(wjJSzz+mS zmY*riSeu$S+YRlpqWMh&s&7x8tr-OE=d$J;h7GqxTgF@so3F>%3egvZmZ_<_`vfrj zgM=dZ`GGVX;eQ&kEBL{zVYa8)R|BLkrQv$SaPxl#mdfveU>`5@m_+pIvzn={`gCCHO?iYcw1K7ar0ro|anoRo7e=pV{ zO=eFa<;|}GD~(lnmo?U?{VjR^ocH~PyxUi_C!|K`3({vg^4@}%89sAh#!R9tm?yp8 zPaRk@9TQwngWXO=j*-4mp$S+dc2A6LqB^@n@%jWw+*Pm0NaYvIL!N34JKng2HP9Q%=%EY5P4n(h?E^-#zFl zDP@YxDXsj#XpR19s0RrO6B2LBSm(SE46yj) z6d8FvSJQ^#M&uOOzzyNPaM&RRddByKh!mrAXD5!)_v5yFN(5Iobf)7*f5$0kyQPwvG7$vwTiu8nk}` ziPJpJwR*!2medA>3Nk`4IX3J32Vv$8p|IOTu5K5e*p03r1?( z&lkYmdTP|`oZvL^g7yzcZxG9XqX}X-eSB#9BQ_yx|Mbr!av31Ou?$g?4deKl$_SC0 z$8oZ2`*xZ3VWMRAJq#OseYXgHaZqZYlnj2m2!Edhnh0#@cdBpSwyhiK6Ly9&pB7lU zr_5{K``pHS(WP6XO~ZDV=&XTC`|w?dZv9Jt0a3}{Jt>gQaZU$v1({BD1x!eBH4ZJx z$00mn9EU2;85MG$xFX`S@e+3|{nzg>oPt$mKQ7BUQFb|l_JL9uD~xD#AE?z5dQ-Dc z-oUFwKJB)9^W_V*(Gvg|7~6j7Mw?#d71G!%DJ#qNN}#t#d|F3QKsCao=j2IWwm$3n zN8p55?J_e<>B9yN_Hp=qzcpu1b;>OF!)&-0}<`>PaU+XO?h2mY?m_Ii|Rwf@1jUiZ=sroBQhaM2ahfY>7MGr$m4vRz=LX1XzF$D#6H?oiU7s>W`jvHNIIKV;DMYQ}3eeo~;ekyS@ zk-kth&p?}>J-e4Ug&ytbQJG3bWm4{otn%lKvCLBy^>{f=mz|OQ=m!ClxFiTZyudc_ zbo29Tr%j6rdH$oZv9z+1Y35Okn6?%Sv9K5uP$T733{aK^xdol>OP(y)KUc!SvJTpP z_^`?}W53$1rzmq6)8uKzCM3MCt(DHFIyRl7wV_ouFS9Oa$= z(TcL!#MJKVR!}%{<(o+QY92334kiw~nUyQQQUr3&pPF$d)S*|4zlInrHBZNv5N34| zA(z<5gqW!4A3uM-ok(qwno>vpdw>afYV$5WgCImnb2X^dtj89*qjU(s4){c)3FUYa zbi!u<8(U;MsMx3@%x`!3ka|&E$&J@fmcH5EJ zkZ}0$rf=_^ab!cEO6iPI7q#}|l9HwDz2y!g8<)c~#iq@lcuX@IIV@4((T2iEGZok`n57!BH9jn1@EL z=q5@B1|5!xWB*cgaoHgFgkFw?OU5qFt;dqcPW_gk0Xlk=rB8y5I&v3WSM_3AZ7Ze1 z^sE=-If4OfFUu}&uCDl1tzs?F?%*KE-X1izotZ6t7X>ky5zsJy5(i6uQYAQmW$L zkHTAb(U(_zvXfIOx0X*k<4AhIlDhcWwN-t^Dcnf*G@(?7d&Wu2(;5Uf0AURyCOQa4 zdtNs-=diH=b+B(RRp*?sPxw`6cZy)R%yJPD?n+ISW*4P(n&xOC|zegu!4Fc-d(%9JX; zC}Ly|GTAQwO+CJ~tmSu0=b8FdVL;`Caz~yH0nS-6Z(iKqz2N@6If6mqYYxh9S3@R; z*B<|bA2`jVOm{bEhmC$;)}t!rkY<*KA)DB zgUFMHR3a9Nil_c-DSLPy@N%cdhd0~tsnku?;;O1D)XiKvQ%LGvh*8&hBVY+(CqWT8 zY;a(8MVq%&u`DMYI6JpaLrgPGtqo7qNexCS|HQmcZxsTnto6-C2TLeLrhv}EZ@{G+ zj{;Vob(c;Cdy3|RPc0zJO(VzaklYp- zysm%?t}1i=stVVk)L=c$bbl>K-5tg{cs?Y%q%vF=lNGL_oqO-zJwQG%4rX?37x1948t)%veJni%PDYKIi#UK#!Q;aLQD>nH|S6VALobrMq)8 zz!aCE;oH3%+b~cDRA21x)2Hu+Vb7kqXc*Kz!5+_GcVJ*(NJ?jAIc}=qUWa*e=UN}r z-HOs9=<6Fr8}+=c<8%ENB5t9X@%HezH#dWq0pbfM4BCDq&rFqY44dd!D;Paf}E}TvmFCOb+y*PVJ+v^1ytrs@+J{oxIgx}94lEtlES}!cHY}MIOa;3bw zulHq(@rjo|iM}q-?eKm<^t=&L-*3hQJ<}s&&x-_dc0f}sPyX|LG}^;$(WM6iMypjA zd|p#|bC752;R{XC<;Hv6CKkBI2j$e8X6mOHl?BiX1y;5#^t!C|AjYb@MJSfwD?EOv={f@5kGc}&sJ$FIjnq9L`t{0cwGu9b2Y11<^ ztMWHa&4xRQkLJ%BpA#k@ZuXIv`PjV{Ofo9PLprYZZg}OFd^_` zcdskuIoulkG3A3YPZ#-)8|HUuQ2)HKhkH$_TOKx}>#-&!r+3Gu2Gkz6sp~AABUKvM z`ThDt`KV~^Z!*>l1a%VoEm|tAW4@@g#TI1{e@|-K76y6>d8)3n93Oy@d%LgF25J5- zA2n6;|9kp8`~xbzsuaC zYu+rx4wVD08O+`!lN2rY@AnM})slYn@AK^nX>zvz`&R$=$0KXvlZ%3mCUuqi|9{WQ z>gX`}sP;}i*Tm`)JOj>DJWY=%n%_wlXP?wc6ImPN1F?pL8fFtFEo&39-tcKwXIbgN z7P$yW1VhdU@7FPg_GA#=RSeGu4IAOsaDBs~(m;jMEk5QRV|>E46o&YHiTryY#!zvU zdE5C3K73~3+CPJAcX_*5NfvI%I`!zea3?*wHO?N*$wh#*o;q38ojb=d`lPg^JEX*D z3bd3D=l4O_egAL3fTX>heF=*hh<*Ye%Lz1|+T@=nXyfC#0}NexnqE{)CehmN(dB&xB*Vn4(n}fzdQh-4YMIBN#XeLr^Ax;6$YxJvh zNO&^!6&*c$)}Q$soGei?XG%LjmrST0{9*iQpFMlVScX}}9uEU|{n6Ewt-3OMH3K6~4Lg=Ha1X5O85 zZq@H33cl&9B!xE!=#EY+qn086bu3f5*uc0#b>nGSoFnpdU3a%yaLYR*1dMZMF`-Jz8physXV3tKc@MJGkaR9HRK((oKg95nvqh zQ3FO$c~O@V5ZisoTw4LxeR(Y|CWbOJoXRQd+O_Wtg$#>WFhH_rDn8Q4111rqi_LBLm~2zm z)A~&4W7bUnEk1ht>C1fnlM`#BikWey_C}*}^96?!H`mTd*>5~GZ3brU?yl-$_t*|Y z3i{&1^7*cLE}8deZ9TQK8@BVq4*%OVbnUiBbRG6-yeQvmr?*SIQo^0~(jXsGpUjXk z8;h4aH=7;P(BHMyZ{n7^66kp={BK z|F>l>`M1N~?z`P>V~0Ys%AbeF2zx1KThpli^#gp@fBZbvd#SJqPZ$t!dw!K!-kB?{ z^DjnwWw;NFD@q@{=HH)wT>gap-+xTxf)N$7P@l(#%ejPAW@do`-9a+ z_pK6MCT`vpT9-Waoq3gV(nzYbPD&ByKT8g*le&5ar^Q&qXa2*+{4Q(x8KQEwvAgL5 znGNTIP4!2J>LlrlwJmS_TJ5MFqpK3({Bd98>5e{-*oKA9X4nKnKArh(jW*GbquFUaK> z9QB`veGc6n=|%K>XgFRMDOX-*ML}Z*mBkbyUsU*UO=a^=zsozJel&(`xG{= z2xz%aYg7YWI{uV=HHyq-Qs+o^!TmccP^6m zzk=&3RjQTv=>Q8`Jbju@cW5B#F1|S8)tI1u>LQ<&TSqiqX|a>el-)1=c)djZ{_hcs zwVwj69NkoXIBde1TZuxEbxGo7a^>>nFQ7p{MKr>I2Lf-N{cRSs5O~(iLPg1NL-HOR zD5%9so#>Qf$HocH0U>264kwf_NbJ}#d>fJ^&{LR|mV~RUR`-FJ z+i=IxiW>H%odn;SG`^m7-lQ*;_|i(VqW3!JKWrr9OQVMj+sB&zkXqAwv_3yne5bl&_mo5ty zE@Xxl{QJKv(5c^G8~O_o3}QXcYb)zP)dWsc$?)p;A3x%;7zl323q@H*j>HJ;&R|m8 z+ZVw!CBO(Ik@F3zFUTXr72Gj%+uMEvHP9$xYeg~E%;<-WM6mMN{5R`=F331Fz^~>b z;DppXfge$$!Sv`|nG?ErkG=H468WBrBB_<#y(VPuxRZCmXrNETX!(|X#q}<0-lcRh zm5ThF(N8gPWJ;1>XXm&rF|K0_{=D7vQ%)zX6K7kUZiq)3ntGNc-Tdj)R1lC;XfOe* zL}3XSySts}RBk%t7RKKtLlbI6{;x;Z$b0(+(?V4JrT7 zY03Psm+}u}8#|x#;}zqtE=qE;3~mOXNY8L*uBw-ZVj=Kod~to!iD@%uQW|i8*jyCt z>w#_PVAC39c3C`|(Ow*y0$6S|Nb1=xyth(P^z0uqFj*E}`$yVrNUR}yn4CFg6Wb^i%8@wH~#_+RA}i-79-67N1B?73Z_OtE8l+pge2L-^anH& zNj@e+5_K4ea{uYUX@xihdNhAN;{NYk1z>Rtnl-mnS3y%rfx<|K9tsOI*dafGyD0nE z=ei7-!3(9TV=nsk#ku)7D~D%{%7ofF`VLc(X{oLOeXL`TliZ6_T84X)=5byFSd)o$ zo(tGvF#ych`6FAXUs`sjV|TANGIf@f&1~>_N1=5q3^0f<#`VL0*ugt>wR!5jzDW6O zS8(ofOL^UMf}Pc^>ju|!Ih2=fPkcj?{KSTVi!RCHpMvr7x-W+ujTk{Ne&l!aYC0@?y_=Uw{GGZv zog7A(+O*-xp7`+8LuqplnYdE`y5COahBW2~{L5D-7G}bj-2d z+xhJ68dWLdP!eSy^!%bmMcEoOR%|zMqJq9`SH-7k`#1q#N<*DH>U(guzlPvpw_l-S zP|8%NKX>A#Q`V2)T{Pckvi#bGF!e|PyQo{1B%P-f?=z=t<=9i>t$C9IeVO{+x;>NA zr)B@B-<@Si-LkoBqO~Jq+z}4#9^HfF$_&n`>$xF@8?PC!=#r{wvbDCa{_v zMDbQgPiLN6%!@odNtsmTsPUrETgsER>%DvWQM*%NAB-O+h-}2?FMT~_Q#aKnQEE}p zeZBtQFlmhtho1M;5c}kZ^j(y_x^|N4)m>Y@OI3T!8{9wTnPXRPnI%_$<{x>U{&4i? z^I;$Nt4a;Y8)cg#d%L5&#jHcRr$f7s@mRd5Mt6jCY5XMfu`*8YRy!RDO?1za8NI~M z$FldlgR{&1e_5}&tK1Y4qh#^$iEH1(fzo*g*IDkJHnI2gX?DHel`l}t`CRp7@2>HS zOY;I(#ka)Cg;Y6}wunLs2iB~O`qj%~d1CdSksF>Z{2qL0ePEKWRJD7ynW2h~_VO=X z&OX_6%q7*j%HeUAN@2h+|fj{3;tk=GC$G4>w))}i-1$C1f z?(Cis>esJ&yLImU|DJsO+Ad$SR{GhHv$Ey|L-_@!ResVT*MvAoT2{`2%#4iu&pp@% z);GP5xN+kK)^PpAK4BftcHiozdfG$Iuku1(ZLP|T`%<$;-CrW{%-4t4wo*j$f91zn=EqPWWI5JKU@y4uX;CyItI`mmQm`*)`rpH!q;8b zbn5z;+n%>&J{G~9s%J3i)co=QM>S&#><*|8%0KHUn@m?6NN{l^yubElK89G6I*-6|_vMHj#p1sC-L&h6s&oMO;&1WH=L zPbL|Vns9hj>}=E+n2p?x_E25;f;#a@E@z>Ee$%a%cZ z7~!A*0Z2jTN7rZ7{->E?3&kj+Vk93-2vrl+kV}joU&wd?1tBDUD#~uk6R-i`&=N8w zqILPCT8|NIXr>H<_%KcYXR)yYB_BA@AL2fk*TqYh4$=2O611}u9g+e?B>rJe)S^)H#5R?juOoj8=QiQ@Lfc&d07o4T z=S&h2fiiPFm&yeS`Xy$==H>#!OnjHHQD7WaGY*0joNWy1A#Vv8JzOuMu##muae#lgnxhRW7YA@{>i4J(yGO&3fOvt3@*x-SCQVN>(4t5lGTPlh{gg&;*J z`jCe)ed9U`Hx{unpg|YXPw~i^^_)pb0e57b6K2B51Zo`s0YE3KL71a5{Q-Q;&22+1 z&vY33;Ba-pfr2`b>U02URH~L<&YHdM(z^QD5V7mK&uE)^b_buM0-U zw{8goBE$`=SFWVBsbq}CJPdR5yv95E`S}kXOd$%Fd2d#hFz~}DQ7>C8Vor@D=F-v^ zgdCD1%b-pxbF+r}%L~*jXlVFpoa5ePvlT>1vqy|wkzJr@O}}Pqz?}pB#Wa}qZQc7) z=`-;ThOuC$=+wWUe*d48jL|#WNH<&=7<|^RY=uFJYt)#`m8X|7Vzg%_F;~w(n_3Y7uA(3R&bmlcM(Gl-lUPf6FM3y7Sa zgi?Uf8>jV=h7fHnleo}@JuJ@LF_46;P!teOf==NC?&zoL?$JMeS0%p^>jwBKqma(A z5R5(b|95@JW=9Vu19_ZikjEwTFgQK-mgIFe5Z`5J_u|Dy>=`KaNuZi%strX(2z;f^ zhw<}=k`HzU&EF>maZqxA&%v)@SW>Ly`9-NyHT8`2W)O%?7V|{)WAk3w1lYoCXp zWzqfCx_St?Rqu2TU6CeR49WSSA;cgyeJ3bL}0vWzHrEG@lGxZu~&j!Y2DnOqDDbMrr+FFu5$vW5ve zc|m&}EU-Rg@QPm~#TGXOl(e+EI+(415xc#e9W34Pvu9Vqo*{eR|RKf3oCCgqxBjR{)SV?j5q=^&z{x1@m4fTJcZ!eQ|v?@JR zp}A4q&!UBc!O%q{3lSLJ0#jN%It4>+tKhL~_5S2`f8UU45_b(-0UA?mV9y}Gd)Td9S?#yO~A`gwRJnl4!4}tBewdv*Zn%Ok^ z;P3NKcS95b#1rgKQm^%~H{;VramWe7_MNgb1h8gryERgCMrQ~inT z{sUgww71Gw{|)&#TH5)`){J&f)8j`s%e6n&Q_OdsvvCMHGHmud5omYc;oH#V3EOPN zq>aUPrsL%+BD+>OrS7gWtzN9DuxY2NzIsGms7GkS=xM^){-jB5pj5DA$&uHd4{oN& z#ofN%Ci!%aE{k4^&Vti(Gn#V>`||xceID+aAc-`%`XumJZR5l`>736)I#lkB_SqLS zt9#~;m0-+ugPPP5rP?m`xUyDJS*VS&*Zuh*(`XYQQ)lm8Fj_rl*58SxE{`ib8nebW z&e>PLx7GiIMSFC3ue-WNVKJwwrtfBbkk`@4-ux@ZkIee1l6`#z@Z zS*Z>)BF#Q9Bmgt3bZKs%P>*@Vd420qu*wUB`te^c(cZBueJQ6J! zjEzejIDGhUMm;41bKA!d$i!QWIP|t+616;Ouw5$t+;AO<#*bz7?Q?r_ZQ@L+#(fHs zmiACt@9-}l6CHMM=q~N1k@jnpj<@vq2@|reUcI#B$(Mq`st@qbeIR(>D{JS~ugs`i zP94I^gteOy`}Fsqjt|DcR#?5-d`F=lB0DY6&I{Bvd?z+|HT^3MXI9eJ!V7?*i!Z~u zL&7dXT_9sUy|TRY{2lR_Kb?FXPnS1%dnh($N>^N|KR7M_-HLA;UdQjdqLG$$O582c zay@t(*5spc{5F^_Yoq=?T0A7uO1Xc{m^hzU!&IYo?W2A!5Ip1ZZACUY`9rNIpRPE5 zz}~d|gfVf3&|QOZQH+o8T3JF)!+snC=u}}YI1fG8-C)0LXZ_;_(+%z0ocr0DDH?6F z%k+p6$&NSDu-B83`E#+ftPGaxCk{;@7t>>pSa5i6!6Qxot)i`wz9dxo>r@N#VLOs1 z{0|HV`MKckcvulEewu&6Yz*z2Vtm|+-9gl(LQxEX3tjrqe8^+_;jac zOS@RZZFchcdiJr~651Pn?Dff+yJo&Yk6y+~Z(lx1Uf{VXJE;Dk)#gs3w`=JT8yjRB zD4gtK>FlJcuXk+?_Nf+;XO3Xowi}nVMdfEz2*d(FWDIOS*{-*TpM*&Q=#p!b#^&4IcsLswi;*xdnYXB7qgJMe z%E9{LZt)6-bW8`YuG;=$z`j==TF&ay7h4;qZq{ABq4dw0=J6|?{hiOYuW0Y7w$?H& za8%#<4?^NPEPGcqrT?UEzkZhvKDSBVtw=-ckQu8NS+ld|$ej&G?8b)nGYWJay4+5) zSDTdI?2t#g`HctTH^;tjzp?3AtHPi8W(kwGpZssgi})&!tk0DfbicIg#qRLylX-ER zZ?xs;mG%GaZ9ezlMRR}}p`nB4PB_wYxrU;M-JJDQp=6)c0E6) zx2Dr>KbNSXifV(Jt1pbW+U_)T=jcH%{Xl*FUtT2(+ukr1b{7oz#j;CUt$TLW>Dfsw z4-J4`Eo)s(RTUo=Y|sArooA<}DmweuHRY=0WXEls)jQWrd)a{}|D|}G3_Gy3Zp9^P%t-xjEP9WF<&V{rg{Z6xe!pD>}0B~{Lerw`au04BC>lmwsvjV zyy8m8(1CZ)I*@ zcG^hwQ-u=r=$L}&d5?$zojdVeq?fNNnz%!fmxs5-~rE;UJwF{@(uNp8gdMBi811zvi%Op^JQe zNaD`nKOJS#RJ=W(xwe*tBvyX&T6Ml=c6oEZO}V*=QPs`Q-@W*?{KfO-OMF(=yiF+? z-%yujYQ(q83q!OZ9i9~7>&?=_Ng=4oYiG& zU!Jz>vM18URMR*j*0n9wQE~9f{|&@Kdog?I`c!pX;+arE%T+5egRms;L>mu8G_K)5& z-uVgQk{zA3KG!HbJv1j@GfJ&oxoNmG;Q7*X}}1<>55_)FLsVX3jZ9R z{4lH^4`ElMub*F9S_=J<#Jc-MMYw7)DoSrZedf$>Ld}4rt@Usu$fOgZl)mEs>~(D| z1+VlIDc6}Z26T~ieln;-XsGH`1^qXRYp>;0{}?RJ)vmR?>9uH?p{d!M?q8y-mm8V? z&MteGUiPH^gN~AN?Kp)^TZ?ALttf5j4Uc<2) zH@pLHc)!@(e?k8lSu?D@{k1vavh>;wIsN0V{eNfv_vFR7b;r)GXg~JX;9APj)VW!| zzx5h6=EvBVo+ifU)!mdA51)U$*>3Nz%p+%-{hG5p*7OnGj9K3DBC>jfqpH|0`qZgA zPsWM5HL3&++EnK7SY5m&Xk7154e|T+f1A&KJln0;P*(LmX{)E5$^_&&IxAioNHC+F`Df!*^hf54Ca{k*eHQ;c- zsPEt6w)dU<)yS>$lh)bI)lRJdxuicB*gw8~`y^J1g>w-e)WOmu_mF$KZFYl=bzMcEr%PZUIgfPxb2D1N_aU6q1b{3Had5OkD0NPQ>EwMS zvyeqjV!gjVFQ8zog!qhkk7C#&KR+61413Hl%c-b1jMEyV#VRAgp9FR$7&em1UnqQN z@jsDufmzVp3=%ECa8{9;5)u*uYZvNBXzwKnhY?ip-9fKu{4iSpnStT0Ax3ZoTmy~% z1Hd@*#L!Y_9Z9{YscI67>VzdA4`q9HlUOkq8A6*eP#h*4`sh zDNd*N>Q(c9ul%zrjQtX)j~yo(BD#GxX6CP;O$mSJG@mo72vj<^yZrta^XpSQy2f@3 zQ+F6RsYk8((HR~)I42UUZns?>y==H&Za3ed&%6US?Vf$)%d)qdeLwHN( ztGP3BCtWw``Fg~g>nRQD;^7yUja}a~e^p}1(3cA%ySy&HP<}CW;f;phf1kX{J-5%b z_x436`c$^0jf`DAzckh6#oWt76pb7KYcs@NgU>unxfi)v_y2O*XPd#k6&8);Y->!Ol=dH(SNw<_u&Ue~@n z@bXlbsnJF~Up-z|Y*xL1QLCft+Bf;T_l}vd?90XdhV~~MTJHsk2miu5Y`)nu*gSMB zEN=T)0_%@^r15;gOAvcjGOrQzs<6JW2*s8Okcil?6+jY9{lKB!g(!MTP9~q@L`$Eh zC$qaz@G*Z!#&ZBS2vXz3i-4;jX0-z{QEHnmxVMMJ2^AhL5t;@ew+)v!ehp#UEiksB z*|HA6&8B;KQH<_X|Akod37IPW#0T;Iw>#k?DTTEJCe&FMcQC;c2I(!}z;q|4^tJza zAbi2&3cI)(qN5Plp#|#xFH>f)iAfdc804cl1rzHEZe2h8Kom9tR0&_Xn)mNHEVM~0 z6y!rISFbLA{1~=2{f7JTaq6=aTSNqd4pF5mg zou+(ASw6AXpQ~@0F6}BSEq0jbig3w$N%fsoy3ql>H2zvX|CzGf-+7=ove0Mm@VyOD zFE$!B-M!LQ-FCjXU0rNw|HH3rNm}*u>0@SmPyaxiQM%j)%ba)v*E5o!TG2ZVQF8LG zab?AD6GvK%thNnWWl(Rsc;4bElXo3V_3Zv?*k767Nw&9;23kJ3A=g#=n*j{D~Tb7184;&>^sr) zOjE&MS{n6(s@T36q5&pNJz)NU>r0M+q{_R^{#YjJ`I-h6#ZPX#P0gTddij!mD zP>deUKHo+ER$UW1^=S34-@e^1E*>X>3=VGL*OtFx1K4zJ0o?~kJ(QSHa$tkkHvTjb zM;6!L++A2!)_J>@uI|*>H;`0FLlRW(`}c1fyZvw3ovl|cbV%}BkA~nlFsj}z*`l$3 zCZ){?zb`4A`&a)VZi~wDI|^?e+M#!#{L!NiG;^Ruygyr1dv32|a_MMP#`1ak^eWX# z2YF?vMPNT;*wCqdawB0^gK65$!>v)6Cf0HO%% zac0DjA|KPI{-jfP>0ygYgMMPd$WCFXn*{xKnun~dT%6C%FGmV}#&@y(knzoH=PY%x zQs&%;Nn_?*o0GHadzRIw+_6)2^>68E2P*jvaqo0u{*?HU*XOR?rg^k`*)p$(xet8P zHN?i5ez{MAQhFF2d$v+WLus$f{7-Wup4$0n9_hMS|F8JoAI<$P`&{>x>n&e&ruxUd zTLWraYr7i^JHF?H|NG3^&rdI^&9;2HdU@I3u0MaORYec(<+=9mn+x+tkGZ~{O=@F_ zcfh9n!A&<>JX-I$n(=SH=TwIKOiXr3-|ru$w^QzR(6Ad@C#xl#R2Ze);w7!B$@LnmTnb3TX_d*qu78drx^QQ!vZqUgp*pbo1^i28N8h*V(8aqc%i^)9twhd3jGZpEcIz#5l2HE9w zsc8yy-zzc;UtUPo^es-@kY#F1l5T2{RpGN>kME2WLr!I9=| zGmzjUZM~@ApI>6RpAh-0_Yl_!qc}>lV@!R5+uQi6lub4w+>h=8SC*El?<$~L3A1Sd zOcxFW!%p9v{pWl%Tw?&se2>?@?5_{*$-UA_=vY#5JZpxF=X3Y06Ak;QP&f4YG}Fl~ zMBOjOqTJ4}reMS3O_^5@6x8^CzOo|hg{;IW^Qwo@UVTY|^4r>51$Sb1>6f0fF%(DM zd0k)ewlF(#xA6&^ZZ?}<{IIC$Zl@WmV_#DD_>SVk&X=A&k3TYNRP(p{i{c-3_Uh|u zK3!OlJDzFz=%(LY=`n^+m+6TkMAMb-?Y%!hl-zM~*PydO$}RE^E;Apy zy9_#)dwAW!LZ3eIeHsGOk6oG7upqbCxNz^Yif5mCSN?WyJ=<_CcZSOVX9thBae5+n zG3wY|zu^4T5CW4o;%8l@Mq)T-2?Ss%vm+4Vh%=NhJl3ErR)@qDgVd952DvUK!lCL) zii#O{CeKsaGCrXQj1xxwXR&O~3z6o>Aj07c z1EOW)ohY(D;qtx$N9T+T4Sh|N;^^&cyM1jODa)rA2eHMjk6DlKXg46sF^K+5!BjhTZ2s{Bp(CVr5FfDoL_Gd*a`Rg|eX9EFW9=$Z zQXx|Iwl=O33gskBO;GVTd~o+-p$9+!@yUUH4wTsf@LvRA{`i^Wro6YciI z{*L$==MeXHeM$G~IhNx0_sfQ^&s-n%b;9yV4fIfNE8fm>ywUHCNLS11Y+U6`KhJy9 zzYd-Hkas0}P)<%-_L%#Yz&h%-Z?WzG-C=PhdfG!GhCGUR8!u;jL5-b zu9p{`Eo*vHcT!xYk~6IFS6 zt6tr^gAl&r+-K~I8punSF&;i}U=*I$%uglit9yU_j4jQ&QYTEVelE1~3_E>qTXjwR zdF2klHbc2V{{MX2U3*Je9M6)gib-5|b3okhQwHrxQb$IL$Bl!=>TPV+Ix*j-=Mj%C z!P)v2XT+1+G$x#wQG341DW{K0pWY94#`Ircc%r{|&*mi_iH1eIC#YLvk;V0~k7Z6o zc~fZBu3;^9i7?kQO-er(6EwYgbJ@ER3&oivS^B}Fe=vuGRQvqj#SJHR?PA<6uv85e zKWnXCJTSXt#HLf*H>~oV{j<{(dDFX_gF5^dF6Wx*XoR_!f%o+0;KDAl6}RFy)OS?6 z>8=_H^7pF{YWP4c@F5&~=P=S{%BU<#`O?eAZu=`cYs;1}X^S({lYFmBmk(SoDYxJL zNGZWKcJSy}$?%l@mM*=o?HiKhyYW}>i|dbWC_vGk{~#%CYD~MgtW%&uS>G^2ZP{>Z z*+seS&We$ecw?9GdSRj3!7Z+fj{N4o*qB<+6q!g_AKBce?p|Hj=y4atcdqVq-hJB2 z%OYjENMA<7@Az%4LRo{hfU%*Xy&iH_8e+#VSXnSSm|$3_Eq7b9ZQFs0)*|1bI;Te( z_6m3HJ@;@QgK$8s1ntdv2iT1A_K(>r=k$hR}1s*)0 za9CHOo^ZW=np{vcodZ_}Gbw4xbBE|hX_{}g7AQJ)Nvo+de$~Bgx>I*%bi@1heP?y7 zPwP0HaP8oQ`2>$6y%KJ7K6MI$hIu!LsOgg>kb|a9DkOM@XtJ2>A$~upPKHJ znI3M-syEgLU6|ffT{pF>)B%mp^W?v;?OC^J;m4&mxwp#<{br15NxJtqYvpgseF@ZObzj0`>aJ{XI|xW$&EvvA7B4n;h2;*s#&+sd%2oA;N1NCfo4>+EFaw6;cdrlwqIMC=9wz|-m^d>O*Osg3Yvm->-x6s>>Vv1wXV?H zORBN5lV_m*cI|J6U)wxAcWV7HhvloE`OzqfPJfJf?CY@E2sB zahEhBZd+|%mo9tTYrN~lr|atH-#K|hq~BP-O|HyU(c)DxTb#i0;lPKTpjbVjEi=k+ z*oQw$_UF5NR-4m(Ql?`2XsPbAv^Cl%jJ1!2`izq(9A%n3RC4VKsc#k|ww&bS->~(- zLM;ls&YkDYpO3fuRx69ozY1oVF31lN>7S-}p>Y^?@ISPZG{*_*2C$G?kSa^}=2!c=WBH@6hQpN=GT|@#Kf}dL;iA>Sl3W<$)c6{O zt3)ST<@!1`%4f&wODOPgchGyz`9w(OPQ6Gl7$Oi@oDo~L92vDn$>MkW`f>i{Qg4bK zD;usmSdH+x{T7xGE-h?PJ!Z$2Na~yt8|5!wy1HS7vPgfMtr;8)f|n#QE~(`$4s|Mi zUq-4IF&m^5UInCykC}_rouVAGUQuJMUtO#-oZYQgSJ@*?lOhojf{qP_uOcqlSyt{E zps;a)yt(nIbLYs$m|WAl=iLm?N~!PT{DLJd#!t4?p zBoIL`-f!tKYVNH_9Jg(gS5MSb&?~=a>_2~VOYK$&OaG#n!019I8WEQ3Q6&r=5D8eHR3 z{z#eZ|{bGjGZTFUb0KWXtUv zTi2;e@5f^5;K72Ivz(nXR@6m{K`{k zdGS{mgE9qBkaq==5ELz#GzeoMpdZDN8uk;8M2Qb^dx44~7~H`w!z~(?(WXtCNL@-~ zbOR@i3jF8C3c+g$Y6f~8bck5#bs3gF@ls8ST%)o9$=XVVh+S z>VHbOu|SnnQT+7q_9|TbNQ8nd$#)^Khtf@8Cw!-mz>AKC6=KaG_jElovz63g%+wz+ z$}K7yN&7?xQMHU#;s=az0D7Fe0`2S~87N=B{+ow&1FG#y&PMOJVqa`gQ~)cxlX?Gbh=7;B3s-`4#vd;DLu0<|pDC z0GegbF4XgF8HzpShDG1;#J&Q%D(GN|54Q$FCyi$as=D=}PreK`u3Tnl*X_cYH}j&9 z(ZtQCDEvZ^J9%;mKPK6MSc>Po96UdakGWS(K*g}TD5y60`ku5kkUp(-_U3t4V<9IB z+a$P8yx4FY$zg)j=9uinzzv^us}Unwgn$9QJ*i+YO<5U$qzF$hFMH*1F}1X%t4*%* z_cJY0HG3cly?^_5-+==Tv2Sq8(i%M5G4>6jS7s(tVhtVD4efchzkdJTVS5zQ1+Id+ z*2vIs^_Q2e6xTqGAIjb_Gl;2V*n`Z3t&#D~wFSjmv4&*Puq)Wb?%clpBP}Ii6h%c% z&CLVwmp^^l%)$bSZ7|LfJSQX%tN;F56DuUDdCizXPbnxiVCBdD7&awTUN^*jAo;wl zID}z?{IRxncYM4Myi#AkHz5JB9fd&5W)!!xPq?txFF_h(Xphmu4P>*-il(A<%E-8e z&4qm|N9DDES{eIT2pMe*n(Sf)-zyS{S3=RVKjZhcCr*G!Wk(k&Z(Iz`=6HjQ;zJZw8!B8b*ke<8z zuJCxF74z!y)1dg_dMyx;N=M>XE`%q?8Z!M%4sZSS3sslsYdc>s*66>NYUd`?^eT>(tiHbbgUm~La0*Kdj_hO8rSQsNPur<$m3#WMA43VS z{Lqu^lhBg&+nr5hb#%wH?NO`gS+3~wNkK9eeg*0+v50Oc?;zo4Fq9y<@%A%=!Y7hy zFVB9B_+74B?k>w?SqR4e0A9GyOh& z+IZ~P*+y~XYI#hWG+_8}28$=y%&-E&o`BU090J9fQ*YhcwSa}}H`dL6vC)>O$Ls`Y z;G(z~Oa}xfMdu)m@U4>;tt*|#Yz0_D@zNdleaTlq1+c1y<*5xqWBnI=zU#-dav!A%x1zZBxkfn8l-TbHlvB1Qyrr z+Xw=8EI#HrVaJ;GA$Q*{8TB-42J@rxa$L-hffePc$b7=;!hB>L|*VbxXz0|&qnu|{|K3! zuzVkDdFxRU^{?1|m6eSq5!24_BX1SMvM=X)s46Usz9&%~AASa5sNCzWDY7h8zV@A4 zw@94Gym~bdU%P+-JARu!P|W>+F9&jYldY-aqyp221dlRu4P8C5hiXi6?$^gVl0J9z$Lh_8-5o^qFgi9-F6&a zARbfqzI!dv6DZsl-OtV`*iw=(1ZygB+6>4YXT9{}iYWD7fBcBM7`8Yte=#c$ZmsXC zZTD?t&6*^$aYglCY4m|TSl4Xj>lq{ZtgCWH9DMIOyly!-hoP_)zB&UcDu3gEAdDz!oH03X+qC7$yh9&+eu^ z)|)nsIh4q(yLJRcNwN(7n)9twUE3CZxxP5)K%m0^Vd=~RYHGVSei{&kkdP>elIB7Z zDWVc8Ns=@el1vFnlp#?P5y{XbMaWPxL`g|PQc1?tlT@fE6{+ucyq`bbw}(2Nv-iF4 zd#!6-gKayT9%ZheNGNm=$^{1uh=a)L;E;Uz^3;u0xjY3Rs=~}5=0vPLo)(Oz(r@0> z)X?bLyEpa;oD_%_d8&F`xyuuRa(m*b9aJjUufwEG<%lPrq`9M$iW}UYEdr(_TbdAO zWYb{dWVfP%L88pX779Q1?{7k_K>V4o)HyqK3Yd`ED22XJTOa^nPx7$FJ8m;WeJlX@ zSYrkjkX-|;Cv+P$*D`Z>*Ym(&|^qd}FGYO$Mil_+U1T z*DG2KeKoacz* zCfRU1scT3Am6Vc#@tAhw25zc5k??>cGkDObmXG<+^&!nuli%k?m4fvOUs3 zvtu#fZ2+r9r%wfdu^qSh{{5Zi=8y4QVNkJH{rIU|$uP}3OLoBIfL_0xfV4?O4MiR3L z_q~%=ujtp^;^T})r0D+>YAhe*4R4#zJ^YhMlBFFsxeJA7%eq2Q*iLw&X zc@uGz;wIP?(kP+$EqM0q8%oUpVgNY@Al+jyIcDGiXxtT-9LzAo3-ld5t~2JRNbKh^ zA~Qwob_pW8h71ahUl}&Zwv>>nPxYL~iP(QA~dQQC6Jm;{5#`$Z<4I_UC! z@l2cVxjV$trHwputtO^)d$uTb3dXRyVS~Kn5*HVC&6$2}u#LmoYtHJ=N2TAbG8!Gy zV~YK>vCCeyp9@Knt`W>lEK58z?w#%7?&CekwBiq)A&++O9lwuLLuWMzI@&q}ju$nm zMZ#wf*nDV~R>^|}chetz4UbNLZV|Fmzv9yVzfWH4@1Hf{d|>#)72l2f5t$Gn{!VFs zj(NZSxDAY~Ty}M6<>KC_BJTYdA67H-f*r*trTdqW^8J#yF+hPuSC!4mNB$0T-*gu!OF4j$I=JhA78?cJ1~7KW`R3EujKBU?pM zb)q!R+=-0)EN<*^Y{;Z|+%+Y8(m0xAJ{+U%sng{6-F}01Uz4k|q)M~@E4+C|W7USR z*U6LIHG<{iYm7BqFc|xvDV}FumAg}6uZtQZ{Z1a~>>INns0(HBm4GJo19}O?R;hFT zZtlOnORM$4)2EjJrRDprVo>AT(DdX#$K!2UMwz-Q>&?HLxN9L<`D?btN8Ys_D-nPG{8&xR=V*UPj2RiO|Dkt) znrQrx!0=&qCwEd9^3*e{oR;=?__%>GDxZehHUAC}Gw=6tRQjV8g77JtC*DGe28Fw5 zU-swuh_F{8ej@GX;zk7}EV&UW`f+|{<3ap{+Iwm4TAk)>-8j!N`h9WxiKZumipCes zTHiZUWBbQ3+c)b>`2Js)x6a2Q`&at!o}$c4M8$0sZTB$$Wb9xad8)WjQoG~&{1D&eOZxM_G+P(=i+G(CIpfw&|6yEhHM;27e~w;6Q*Y_6sXD0{Drt*W4?gVDP;t{ zi92dr6jaBC=Wl{04iRJVQ>HK&cVBaO=jazrF_4fj`b6Ph@p8fMewFS$KLk(P{!3j? zuY}~~tYXpM%dtYS8Y>jK;oNz?U{4$U?znN|*uvO)FW>7ev75YRECD#ws3=R_aI#>( zq3{!FeEa8l-IB;eS{GC>z~7Y*{&O0!9Ah(JjF(sTz<6Zw#D#K_Y?o z*K5}N^f8ZaJX&I(u`iB}^%*J>J-vkA>V6+vJ4Tr*4;&^Zr)1fKx)pz6^gmevW3%s7 zeN6UOKm7Fhb3AaV#{-NtnmqnCt{6I!-IIr|=?^svqrG_99S+qqb}K?<8Z*#>W4^-c zSIoq@bKX`5^m)C0;^yU_)IWvAGCUxyuInOlaL$6hdH#il$`bLjY!|$<_DWfm@~mv- z;e!E1j}=nWSrKxFRvPy}WmZY2%&MqdfR}(U9S!h}KysK<>~*{&4s~{y4^$XnS8xtT z3>?V*!HIz1@JM<2cZ}Ux6A{m@+@gy|A~pfn1zNU?`8w)lB5kg(wfdeOMeH{VoKugN z03+e>yzR6OdmkswRW~Y1=cxGUWXIa~uygnHtjB^2{n6e@&rcCia`!L0z>~x=_ zaWl5-3_S=iz(G!Th`Rslnckh13*L&Zm&+bJ&7`?k@YE-}`rEvFSGwsxKo}-L6jLxv zW~qq843e8B9+#pRvT3zd=l1&2ajYN!=95+E1*zur;8Tb(yyF6yJf^;&0cczzIOzudEwo9>?u*c=_er1b@JeMQ;?T!X` z{pYHcs`PK#BDFhCsIs_z(ks$2QE8$4*x474J@0pNYR#}d{lP#*7~HP94!6PS8Vd$n8xja_vdGdDNN^TgP?k?S~UqIjDa@|2QK`ZZaZ;) zQ@~~594$YeggYSyg<==t*}8k^#j2~TsfZkxERkG#n`(rzlp+nPn(wdK&;Il?l55u6 z^C0kjFH_;XQHWJakSR&f?XD;JeMOoMzEb-h+a+e*Ao8dKS6t!VFhkx%8i$!YH`lG( zIq&IerUi#Ldie|3Q;@@(Y{uO>nF?)9IBt^bV^wRHdN zKD+d!E@bQFij~M4RsN`Q7GIDwQ)!p4kgpbhK5?UIo|2`fowT0+hwF-|4V!(vb2o>s zTJ9tsX(>!WCTjHQs_A_Xh*iHN&ky^95r5=+j9XJEZ+h1yTCQH)^0Go_Dos0dDYQIP zkhNH@-uJHQW9soNdIBXNyrr-M2NqKjp1Lc)#|3K7*gXZxQC?$*kD95tJJ03XP<7G2 z#gn4MkLJ1P471v;=pZF4?yeifjf=B&@L1Ba=I#9W!-{*KC!UeC>b>{tgWS1Ohx3i6 zWkZ{1&(1R*H910gn7Ej(K=1ye`7IaL4f|*!{vVdAD8;DukmG&*N;<}Evd$S&B2U3g zn??oy^c3o9V6$U|HR`g36%{87Yw%7?O*N)~2hF82>-D8q&clav%QVja{GhUT@29S> zt*xblLQ_g0*EA-?%F6#?WQ%_8BkJr$%XZXMS8t;9gPe&r`Z=283wC64(ju!9Czcm7 zn9_BF+l$AO`wC2?dHU}&?+FwU(_SKk(W0@KF4EAaf^O> z13(N76)2JGjSBF_>2+|MYY9q5&x*hp^N{|d(v}wtVuzA`WK}91FH9a7C^-VTYS=(R6 z2)(8%RWS!+R&C=)I=I)2xg9Rt*pfN)pIgZ z@j`x11AwCKMTiNi+WzICi}wFac(9x1r}+&?ugG(bICW|bKEV*C=>+*nVd<(aOBC$o zrFSRNKY(sg&=RHd?UY$37jfsWufs^v#-I>r1&Imd{=kWo6%_-OEsXw<1ACS*7Ij&! z;MIWcE{QncrPEWk9#WJb(}S0aK{^V=ji8m=%jQN$`<1UafgvAK8D*gX2gIFhV8AZs zjlh5jeU7PrJ0n*RR~sj%O9=^j*aHHE8yNKt%7K(yoR=5$Y$aOHZxBO9&pH?dcje#o zuNcJiywyp>Mpw1N`n)a=uGu%j-+x2&pENkkg)>+53Lfci_v4H0?=fTdOuq0?d8=NV zw@pX$vFfnvvxYA{wfcL>mi+IKq`ykM-Z<)8PT1+;Z-1}Vd!>6k<-a>dOK)55)M$tf zvC|p$6q5biG%NF#f$v|`m6jj{^1tj~9a??a=aTH^rMd3SyY+S}oS3$9;8Ve$z;&A<$ZrDG;Y|>EVC*fL(!y0HD zQQgpLz}B>m7U03m5CfVpaSa%yXsfn1e*Bo1w}NZVSqgcEy9MS(aFBRRBL||8r;O7} ze3M0S-~t<5q&Y-ifzr8XT#!z?6dkC7MzhUFtc#W@-{M`Bb!KsS7*Fvb0FI#V64nT|cmdCDS5I(II1 z<@NbIaWwAqdqD7%T#j^8q)>;RBi ztaLH{6g9%g1vUio8n8OxzYA-Bf>7%)$f61&Ygnz2GU6@3 zs@nPU*(4?^`^h{z+QDfsa#{sm_+7qU~xS9f0)uSV_ITstLv64LDW0; zZ^T=YA5h5wB7D{VNw$5BoMFWgR-po{1ZIbzkme4r(tT?0-(;*`#y}dLj>K+X8gx(l zWSEsKo;|i$B*;q?B47wiouZP_HRZX0FhxU*@mS`qwclUF4U@)}M{=y2`fN7qvwjU#?EO+p*PR!U5^u z%C+4Y4g!76=wy|}?1|Q@(>rPz?NDRODY!kD=kD$f_5@X3D0jmY9iw+ZviGVcNthXR zU};Y7BCsz~@V-(~L~6y}0Q3=%$S!FTF8|^_8bB%zP!~q9Lq{!NyA})6P-!CPFNcN}0$g$jNwLCTB2>s_6#4C& z877pTaneyY3v*qu$`u+i6Q>zx&3q@e8(mOQQBhl4+iVHYr)MlACZfE_=|_>B_BrC zJ1?%-k$C3*nSP7%?FwZ^Eq^?zwCq*TGlN|c(j^T)d^Q^xnjVrKb(Qo=n$o@6-4BKP;PS zKi;lSzt9__-1eAj{ytwmDL}c+qL0*vUjv6uIJ&EH?dDmt_R)~<+GWBTJAT|A7?2x; z70cF-J9@2hF#7E34xh&Ul7kKzrbW~Kc)N$J*JFHf%nG->{cWtLmBQq49g@X zGh>@Z&>wBQY&Ym*MFlH>MlL9E_t<$kfzL17skvT99f%QO`^jeec}tcIAFK6rWRmR# zmy+P|0aX3m@Sqx54{v<({6Q@c2b?JEamY!6II=O9u1Zdw9cL}5WyG0#1k$k*hk*?Z z2SOVVKVgAjpE9^l5N2zp=0vprV15uMAu+07u-NH)4tq7EB@~BB7YmCz0u2CjX)k~( zVvi@-sf{voGOT~E)pC+>yx2Xs@v--VxnX@(J2TE2dv3JL>p8)NOxl&Le(!G&auXJu zJO(s7LY+=bKo_EVS_3(C|$q4vA+IdQqopF zGBI0BW#T{oUA%VfH+uEsTFZnQd^NqwhHTf)2QH%*6`cBSF8kyw%QYuDG#fnLT-#&O zYtD$m(c$4&j{GePz(AHpc+Z zmJ3J6snj~3dHep(pDTe&zbtsKb-%3lba$!Idzp^h@A!O*GdgF^ftke6pMq3RF@Pi7 zfGrN~@%t1d{t@yzJ3C3@7QH85^i}9vCr+-O12&e#v^9_upmdL=1UqHH-FIP7G!mXl?7dP>#FSXD-LB^Qk zUi>a!qo3W2z1^+@JvF^PiM+8>9tdbKYA?xX`j?up?|o;8-r?4BGYJ@beGiG=(zrTV zG&FB_hvd4zSUvWo9{P6~5#Z#+_Ql93M3|w3rTr`k!jqL%R8q=3Z#y|tViE3fsbRP3 z_I}p##Jw)p9!iH|B2iOY>pn{(?B2-luZ6acCMFVbEE3+Q(DAN@Vu5Omun-E90j9{l z=!hoh>P8eS_jPhH8`t8OBb%v&J4k2e&mtUo@`QTed)rAL|H;OOx}iMwsaX14>Amd4 zh=riPqVVr|VhNA!PQY@!6i*bsCqV^+*MByHh$>-w(3X==rD@7Ko^2X;l{tdk-XHuu zzkb%Uc$=PkHiF<2hK4mZRv|%q_X;EQDA%cBnB_@Q^GHcKU2`+z0HPOr@OVu@#28wm zmS4Yk1h&H1@T-=7=s8&;?uz}=xk2Y+ws!e%%cvRaIMztE(f7wjg*h=V3gW~~AXvZt zQenP);7MEicMhi)9Zf1M33_}oSK(qZwCL1{T9}#V}pB!8|cyDdc`Y-9Oje++zPTqL3?BpWdE9$LF{aoJ# zHN9*4ao)S-!UvJe!Q+gqYB-h9tD@8o{&S6!Yv-?uRo=HdnG&+`5xqfIB8;t@^wIxl zbo7(jpIT104nu3;)Mb#qEZ{G8jlVlOICq}_@R3By3C``Ldxb4_IGKZzFdZlCEy1VW=s6T%qv|*8(vgJ}xkZ^tUT;5DU{*BFu zM)i@~H7O~nLnEiE4Ll%J7@{;kdQ^|%0R|6?gt0b{2~Qq7*~rP>tmY)9ZnPZaRv+hF z=ln!tejzcDRh+Tm6X4fFUNmO_F~(F`Q*?BS-@ctXvs+2;3*;$$SLH zh~44$8l*z2>T_1D{G)ldMeSZ6Rf+u}yYIDqnDcc^w8H``oonYj+!`N!*skSpRV04D z($b5uiucsLw0{0I(ETV8?cwJ3wyn8&*h=d6wa@Rhz1#GB3IlvnQU&-Q8~C++p;F;F zqDJrV@1k9TqE5w4_}xc#OrDYTw8BirxHYVO4*O%~%Kp;=*j;h*Mz70XGEV?cwwgEZ zc)@b4XoL|3)EmsvK|?5;DY@>_8$*3yKy}Z#o0tUB_*7I?u`V77r$9}O$$l1mBpz+L zVzQ1fAL(e$SD*_M#>s(gb9EF9eF(k0gK8i5F#fPwIGQ}u4W~?b%cQTD>y|Ct*>sGs zH8kF%qW0FaI%8M{F#P(pFT8Y^msDT%AG5mY`LFIlpX%c7j_g{l^8!yV;tF-yH7rAh zW1b-84i4A}5FAlT<4NK9C|n_css$4=HeLp^}mtwUW3=3)zW0_Nc$csj0oWwb32+5xy#v zU>oGlrvUM;F3+Avc9O=eyRBWX;-i&}*BH+^vSLQ)z7-+Y*S2Mt86U83D7}~Iw{*MD zH;?+_DIHr+Tb+K?9)6@r+3ZI=-*KU}{@@R(AbZzw*Wbx!OwLft2wv5H`+>g~f|J(O ze*9kbp#}>0nf_b)tv8aNZO|uW^tjpWUR@mre=Z)p*f{OagS=9+E0ODO-Hp3?Ui-H4 zZ9AJcrB~`coY z^w8!ai%-ouMvXl1j+gD#Wq)?~J8fX*TmAAaQnCI$wZ~{)vM!4)_7F^0m#uz`5iCQi zjQAE;!LJo&WUhPxs-f_v|dt$vtX zRuBD0zC$joXa2~!TZ-N(36)mO}tN-(!DGU8GRVXhHJgvQ|Mj+YM{=&iY~)N{hcq!&lxuV1(23W$r|xv=`) zvNQd1jNyOKWKEp-sIsqhgZkx?I_ulBrT5|`ZV`chc53KjhRKW!AkoYt|jT3o;H=H%gO18DHQ$5rBqj>+2l!aw#XPz8e|3oP!EZB0z zn3!j^R}H+wPS3qw{O)LB)sNSia+~{xy13d;H=43Kc1`J~Wkt&jyQiB|O$^^T zLa={ZmFL3r0p;fN>r(6%8p+OoI!G+gJ~i^Mp9eP@RX&ID)-=P>z_!~+R{F1? z-{@&E^Zx`@_kw&Pu{--u^0RDbtS_-e_jh8Dl6p6+#1WX$3Y?T%MH zn6hw{!yc30#{C^1#qEt3TNv*#!y-)d1po4>HK!+$vLg)2yS7cy+mW^Uo8IMocTwZp z^p?QlV7knoe8guYIQxy--7HsZ6?C?>AzZ}wL-B#*m0JFrcf6QEih<0gSdC3rm3`+b z7?lQ$6S#DoTpFk{#_!(9L>0YNynxd!?O^@)Z}5=6+jCI0jQRMx9&3l+9JNJr=RV(= zCPkrIUlmUWC)ZY-Dn2PF>hDn*Z`LaNqxKEGUyD|CSjYNVhKG!hX%HxWK9Hx_ z)on4#`n>3Z%;QbUPcy7###HS;yT-MudxD?CZ|ykkQCAeN99cNpr_aL@clZ0vdKNj8 zW*G}4<9hfFl%9T7;`qtzgYl}r&+U3OW2c>OqRWP-NBXAkIZ)td(p@CKwl!aVQ)2%j z$p*usms_1x-z|$Ol9cp{>Mh9r@L?JQNjNdx=Z0K-dj9;9A1mfs?%DRZLoG=?HKJ!? zILg6|8=EoOhl^kx<&t2P8uND35bPbkpM zTA#xw*>V#lxf({>szT!`k>zqv?CuliWtQe6hCsubj6`3<(d%k))&O z;)R5>7j|g(%WV){8vv=UUV3=vq@eB$*C@d>&(g^riEDrLZEr*R8`bNgg69x_^D@}~ zzLhPXbV4(C&2SO>uuMD4%E&s=y?$8J`oMLb=U0?&f72sCNqqH+^1_Q9IWvB2m42#Q z-g{fqk!)=d|4NsBYaTvm&k8eqwj_Vx=c)CgpKrGnTIF~Q5BuHSojC5nT`@m|s-@3n zi#`-@8nx%P{=-|5=4F3x7Pda%(V7<1SXGsyKQHkvET)yKRzaxC{IfLh<{LPSRyRr) zssFmWY>Jr2(6NF2<=fw5BL9VIjj?y53IZngtN*&K;axyvqRE*O<%`E>)Ze?Rw!N2$G&#q4 zlxv1tzaRWCYv07qw!mi%%t|QW$#ryh-!nT@_oVvRvFGVezBu)4?9?4LzN(=ibnvws zH}sy0C@4EW9B}Z^s2)XsmX}TLcKuzW*PJoCGt08-x2xC`rE%j5@F{%1rtW$C-=*E3 z#&_iwxAYa2?3|@8+5Js4A$2_fDs?L5W|J8`!1wRphkDg2$X53K^?sTC-ohH_qUX+^ zuM&4@7Z@95Mih$K%xS+;QU{EzV7&8Sob+Zxc=I-V0x(l%5{JcRqKIUc6d74l7QfTS z0~q+dVzJqFGHEPxtw`nthR!QlVaA3L%#6o*o~c^XAR(#eW25(&EyB z+#8pges?#H3A{f;MNG6MR>ea1v&B;tm1zgI%LPx;c@|o@>{S0AGAnJnHwV}XF6k~E zu&1S4vH9ZZYz)4R9eWBw&ge=gAtwcqE;KanH`Hpm37%=-1H_E>1v?lu%0w;lklcie z)M`+>K9a}~Zx(uAXeBbO-f+RI7YT=xS9}~RQAI-ryw+2|JB8j!@ol>HKUY7V9x3Mm zElG3c{Nk7;^N~^X2){$&v+u(g>l3#aCNVP-HBu325Ldi#RPRQl z$IscHb7vK8Yx?0~*CG?7e#?Ac*QM;oN1cZs+ox>a8L21{U2K-W&Vh*#u_x*gMX!9TwH+%I6v!f}~HTq9!^|JWYJ!x8sfpz<;GY{OedmUJ0E8^;P z;eTTT{vD32I0I2m2(_r{vPH~M!2ThLll<8L79y+eAP~@N4PAG3qy?q> zirVH?C#~$0F)bQ`FUQgt(mGrYrR# zOI$-vJIxaj8vlCx_GFESmoHypXN49F*phAm(jG^GqhmBij!fBkJb6O2{|lX!unqf1 ztFb?u5xt!;|1Ke5QUbIL2?fgj>UXzv^!kYQO?MojpwRgB>!o53z)prY2vJcU)YsM~ zS*yaLYxTPaaB3Ro+u42%J5ij&d7k(lGo>TK!Yoi*LgeBbxD2+o1A`w5{q`O|Zfb5O zTmU%+)&ApQD&n{Ne+N`(vhRouzLsT{`cIv+={M{3$3zqe( zzZbawd^+Z{{KQ^@dFM_yrT<7D{MK;T6jvFm&keSgwlkfM3@BHP5;U+V z$l(yX7?i@qW`r#yY-5l{r^xW@YQs$P$*8{zUYB5hszUANHO=bsN8^%PTr=HWZvr720 z(LnyPJzcQVftm4Tp7^0M&I7{9fVPODiG6;ccrmYp>iUA6Fp=}X%#z%gaGm zscbr>yW$Ds33TG+{2z*MArrJYZ-|ilyZCFQWeuF=2N9-HL~m-67;^9lG69MxY$2Ja^jE+exeDPb|3K*5cfr z+;not$~)0_rX88Kanh#l__85G$9#PF)VIBoJXL^}@?VR&7xTF7|>p_xN zG#tuzETuaQU9Y~*qr&>aLg#|}x=A&slgj1?9O|6>c%tf$jmxhtZ8{fgA-P_?MYqjT z(_&)Hsje5ldR^|ixADt_%Emyyk;&1sqeuOo-?{999k|JD9z}vMI2>%$B4x}H&z%zv z^MH~8rqNM-$lRu9W`o-?1n4e|n1#mL{_Pvizg(75hUEgV(I3_rumY`ryy`{1k^Vkj z)e~4Q>LCMBl6khPzhvd&_Bbwt+h&h#oN5Sz+8;QeT3O|~i#-WEAsAlE>=5yqjMYx5WQ+h{o9O2*cwfujmTAYBDRq+*e~!_drz#d^wUo35D+*g9n>P64bfc!Yc*W0t=5?G_4C8MD>tjz&4RiT*=VWM+dL zX{PK6;qlg^hmDNTuL#zIwM-P6NREbnuwYH&Wrj{VG<C+{c>&C98MC#_W|fuq#wT;d z-n@OgKt^bi&7G49DIBrR@L%?Eh@I% z7YB>>%v_f3Obgx~R^FJq=#5C_{iwnkY;K#ugSkyiB^6*A$Z9(6S2};^PIP|tWi0(E zA_XM8VQ^=E*)izp0{ul$S!nJhWz{`io;v{V+c|Z1)v`|WCX>wRAA0-WwNEkIsd~g5 z$0>#?IH80L9xp#)#DiE-zX>kmYieqG^z11b$iNYypoui&+kppiNjnmt36mc@xQ75c zI9UDy7y6OvYB2#U2YyCym7SF_6m}%xd2XX-kG@_lIvpMy&>1JUeF_Hslm-3z_4^pm z%?UeR+hYj2ChJqY39t!7>4$5Ru2X0e&g1Xjj}TbRoqOcEFN6zn?RlzUQJ*^}KGfYRr3~u7m|(7n$)r+% zvm>|c5^Z+?{6Sw}3X2E5AP|ee3wDkU4(8H(gM)hsB!Wz>)CV3o+>?e^X#Vn@M`1F3*OE@8gg_)-z%>! zL^`fGWAMoPveU)mRjn^(&8U%^tiAd2lRlf`ZYSMV5u|y0wC4Xc_AH%{HM6T~W&Nuc z@uNarYUcc$ac0JnZ8trERt~Ry5%Ft|SKiH|(evx?B&7tO%;&#jkN@{Ru>asxzn;@0 z{)6j^GMYOMTkKMK!z9LoV8D2fdwLpDE-YX0(nBBOo!D7{fIP@lInUYO*doBU{o0#c z!)6K9M~;2xN)9NUQ|Z5FeNtWU;q|ft1NnKN!^ZQrV9j7Qd)=WdI;#HGGVrH;VG7PD{|-QO$2nsLyJyxI6>D7TTClLb2D9|M1JL= z*)RTO>Jkoxe#MEt?(t&}rU4EEl_SLj%U6gzx)ncv4_GSs;GqY=qN_iD9(%+b16BEd zk?{+5O=qDNxLv#2iONx{OE>Cjpho54BK1>dMn^Id+j6!@4wlP%cs;mpZr_$;T{({> z7uPI)-?k+~=lbe~clH++UY9s-nquu4Im>CZKzgH@|3n2rplI(!qJpye`dRj2$!`WN z&BVpA>|(vG*=jM1Jzqn-RIV-Xw)pW)C1Y#b+qu%YXLG0ePh1vf^K|XxtsDR39i2Bn z+Q;u@-KV5pzokxBxP6Xq2puaQvtez{gt6(VA_^m&%lb$N7>|+GYfQp@1CuC3QbQ+r z$_R4v@`z`Dl$(pVDK|bVs4IiBHbT0qkeA z$roe_pR|G;vhQq>vW2jY#JGli#J~mNHbFHa#3MIz1qFvABE0$FL8eE}o*gMGD{9+W9BY_)fc*56RzO3d|L1Bt{wiX{r!#X_g>s86}UCT zGh|@sphnquWnc6K+BXYcdz*E%zH7+%xqkhjx9XomPR!DJ@4I!hMa0fmJIDGDV!s&o z(Pw+-ukn)?jg&RA8pkQIXobv5Wf^5bV8VgwdpX;Uox87HJ>Qh^<>T1X(E@?ty?$mB zLtQKuzSQeqUlx&Jwd3@EIIbWA*EbXn>5a(Zlho3l@|>V51~hykv>cVe_&*xff|( z6~gp|lrnuuG4$=Wf@C*+Dty zoJz;(vta`X&E~XStapkz3=d~24UiKB0KZ`82~Ww@)n@5Zm`Yywzt|fh?V6?O6rnu0 zj~SXRoKtXBE?CY{MkC^V`yJ^o>ayGY{Q8LRMrtJ@*3)6hk_MkUSVA)%WPQS@e3qX- z`+^;!Wua_TQ*++fqdOQ7W2(YNhVmor>Q($v2;^Z|8lK_RfQTXQQT`(h-aj**a%_Wv z{JU6)deuKZ^87MaTB&u({qIEA<8hXYCw!@lT`IPvVrWHW zsPpmRJ!C{?{uPxLk1O`zZk9v)o%EruXJ@b24-yK3sftaHhj_kM-}ULtoZ#+RMb62s zA(!-GH*PVp*xP2a=3KGImm)#9i1q5}H&%~!7xPn&ov*9+Gvod9M*XODcV6#n8BrSL zuJW>PXwHz-T@S{E|IPV2?zhUyMuFgSVAjidOJ=TJuJYAwrC-=AqQYSxoF}QL=xkr9 z7-xC!v;iX1%=`Dgll`>q<(T|9vo$gGGPmXxY!sAK_xWfV?kdP$o|c+AE8)UVgQcT0 z3*?V0Tf{58>TcCjmK<@t<(P9y$;+Kf{47(GT8^Dn>K$QrT_70rB6`Q0M9JP)0nJUM zy&^7`G-xlmb7AY$*RAHiJ?7_}Ejkr&Xx$2NlP@hr_ovx?C1&%`%TJ@#clQuD-jnT~ zx%F!QgG$ALhT7V@cRbEcZKDE|3p>wIrTXK;+{$Fe|7fQg|J?2un&;P4xeF$4aeR;G zsx&&ZP?UY$D~3Ft;61V6ReieYp{DhVly!8jp{8Q6yYFP>j@(lfB14?=zOZTy$|iE{QXjYzr`H_=$T5 zXPvY8g&(3_vW``Y?Ciey7(%q{Rpdy&hJ7`Q(SYn!bz8qjna`9>%s%3iU{2M!3Bm}H+JAQekfZYCZ%1em7R7CJL8r&-3zx0wDdJ6{_n4M zJV-JBk>yZ6-2QLRp)P?UjT5?Zo1VtL))D@5ySZ!ASMC4*DoP+F{BoM@(6Pc7%nl5f z+1LAjFETnWCQnrNbpPSJK+nv^_Ce!gxeVP~nzjnRQ6SbOR$6;Jd5`f=@ty*xrFLo` z+nO@}{W^tF#BEPkM8cK&tv97G9N=_E4eyPa-$I1%rsvQmzv*>rsYGP@Ec-IhX;F`v zMZK8(rj)@fijFV*-y3O@czk}*f(2-fmkoW}-6LYeiEi)Pcsy3U`M5#OOVC$-q<-D# zsS`c+Dp-)bu;A>up)FXZquX9e0*J`?#}d^P0H}mdf2{h$n7xSa}>V$pbC^ zE?agdEx*QiXw`!q4ldtoJ-l7ym2k&iA+23iULNe6ilExck-8`1K#T$M+_XIUBLOv$Fe>52e*$(JrcV8K42=s(Q# z$)d7Mj89p->~}-!Z<3?1!#z=`)Aute*-%bSAn}Hmf%R>91FP9d6MJt#lj(D5u@7r1 z+e{;r4^0wNY08(BafM%Ze*vms%`mEO1UnoG3(^m~M0!}~D1 zK?1rriW}Pt%XQ~h_OOV6sz4f*xWMVGFpU7YYU^)M92iG{1DkHY`!~$4g4oaGLqPzR zPJI{?6JzZ2#d_kYXSF{e$#A_HtIV6Prfflm!3Ku^EIRltkgLhK1r7g(nJkJeFajXQ zDJW8|IXEp?kWl7HQATy1PN#a!;c4wp%I!Jh7uuvUUiIcxgsB<`gOx2thG)P5+P_}{ z#xQ`sFd>nqA*tl@vaI|6Dt`uLU3jDaV>U z`2%&w_|MlHlzWk^|M6;ylb*@^>lPLdV50@fh%>N%M5N{nW$u;J8qmsQVE7sO&$Ib z%2eBI?Z7SO$~lt-o|Et>$Bhp_#v4VP|FkSxKIVc>Fw04Ape|<-t3+C|Cyxs=4%?af%|HH5O?1Y%d31m29Rsg-=P13GC71UBID!E(1Qo% zd2zZ*{9aHT@iuTjAf*9{v6E&um=_GF3Yc&7f!M0JbNi!)Ukpd-#h_qGx@Tgs2aq;s z1@KooEGl4n6gxho^MJZK;+YT46@@dBIH8ANqHRI#Py8T!=++>jXt!DTZaHz}$Tbj7 zJ~4dXE(o2x(Rd6Ovz)_fEibi!0dC!?Y~^yNy+ zDm5Pz6s+coaqPW1EXd}`hP!_Q&o$h)5WLXFaetB1SAVVf_HD#~0nJ#0386G`6QU;f z?%m6bA~vT_jTb!yWDQ}5j&69w2=Ey6>qt6irr21VQ;VKF5t>7BvjD?|Pubza$T(mx zGOXr?Ab0o;jj!0P6qE;M9AW~_Y0VQ0WX8z!;Wf@8$z|uH!HhK#6G-&$-&m4V1Vqx} z_m>f)b_H4^+W8YPG2wn{exr(Nf0kcfl7#oBTv$?4Ev1*Bk`c(aq<$^hh&!4906}J{nTza|dZ-{-Z~RlP7Pkd)edd zE5*OYBZs<)?C?<}1kPC)VP1G50M|XZ9pXKEQdE_CAC#Mb+sI=QF4@JfuLe?OxaGuc zMfIfq!ELX45OIT4Y_nyZa?WB~v!C~bBY*k2M z*@1kD9~UMAs6`GMYxNpU*1=(VoYg*tXDky@d%R#~aL%@lS{`!UtOQaOlfRAA(5Ts9 zARNq3@H_^x2>Qg_54H3;+i@{Py#%PZkg5vZB!I5)#KwP*$ufH%&3)f~{hmL2HbQUZ zK?n6iP+Ry2ILFzk<^AA1BDVz~)I{k><-tU2_>f9GW<3Nr;Nb$kB5kG;-eS=AK#4xy z*$iDzSP)DjR@3hOrX5Z_2Llb^_=hPS$SBtfaY~iRMnXeR6mH(K#r}ew zh=>R$ew;NN1$~U*5{k)#g#+l3{ssyks4H)JfOs)#T6Cvi-E6Ym+$FzzSbLG?T1%<~ zZ&Vm?d*nzl4`DiwF^pxLh1fLV4zmFgOk^}N`=`~&aAw-}8ds9|t|FZr%{#e$4@mjxbAg>pWWFq|OF z^1qgrPk05Po)K9(6nU+sckGmos75|vv@~(eD=*eQUKVU%Z}0E88xyl^+qTBEN414itZ; z(CmXcp)W#E;6Guem~D?Z)L0g_s{$Sl9< zimKzsS8p)z&>1JwhYjt+?8$CkUhmkh7@rBL-nF%yicD+)O24y%;Z(&uPB{1hd;&R` z#9(;Pprd?s_m0qDtlBk@?qP!g1YtNXkQDIbUxEu_cz8HjXghx3mR{z$8RY|)Q#Ax< zBtS6~;^G1-aA3NBs?#Y(g{_bc+S;f-Ni|cH#w7Hx@~{yj{^H0d8pwgfBj@aV_V(>< zVE-dcS+9h({%LP#7SBe3S{tv?UcGva3?G8%9@@;0AKrLeAYP|NwG9G4E@`$n#P%1T2g~Fe9X$i-yC5%PsVmqc(K9|d?`yQM^gRi^XDxTLFfzF zB{Wa`VS!j-6=o0>4DVqS)zp%obt8ae7B))5y$ z7)1_bj}cXsEA(KYFpe1;A{Aa4&H!7zkZXjBg^`T&ZSOoPaGJqKk5*Dn0^yIcuvL`C zVi4LimRUS`5O`h#Cf>RQdg#UAmqqu1U5+i1niPn81XVS!Mm6=AjDaVSX12{e@ zF<9&H+=Rpl28gH6oLQ3QaSh0ky&kcTaH1`4a%owX&?*gij!+3KvHNjRQ5ItR>C>kR z(Kbs<@JHUlP+8e6KmIG=(G_s8+tSdOhpLUrf}x+PipnZ>P|L*Y zOcaol5=5Vz8Evpp=|rK%`0;b*&gJSr_F&Ic zMuLP+yNJI_tZGPpHA8UnS4i$AAc7ZV01~16?b|m>?Tvl+JB#v^(UN8&+@QLpL2|s@ zPeMYd7{#%gAu3!Aj!RP6xk=+fu+;sIcOdD)W;V%%uj+h~H}&t+r^@>_3m17EPca$A z3_95xw{y{WI4J5FoH20#4W{zM4Oox*(Cr!`4;zbTD{l~!#$)^sogX0J5qiXFT2gWY zg(?Bh0L0W;)!w&_Mrt9>Bf~{4l6GZKEyNExZ&+XE+a~}4@R=Cg;Lncm0w&4VuM|?N zG*4{*^J}eaXe)~8{drZ8NVYV7cwbry4Spq*5qJlzKH<1tO${EZg5F9gwfivf+1XQ5 z*K>1B<4Dg^zgTP$;l;P}U|CNsqvYjDBN-ZWpP>QSNM#J4L&N%`f;q=~zGb{=%a-Go zi3n{VgVFPFC;&C|35us)qZmoP&OiuO2O131R88bPJk?cIw&3|IR+KT8DBXA4; zRd>x&mmMUI5#YwQzygXz!x?d_`~FiL=;-R^Y+8B2jvG{55)!XkI_=YB?azEP3;@rn z5^N)L-lGQx(T0$m^D~0ARxZtT(-F9wye0rbG#VMMIdRA7&{u6yH)blCTstJE)+x2w zaKyCTXI~2f%akQ@&`#1V)p(zNP75RuEcEAY`t*DHfedb1*<>+s!DV|G{tu)@x*m$| zL^Bhe=XUbcsqW4C)-<>xdybFx5yEiJ=!0^Wol+!^vqA|Yj8@1{jw@>cURJpa1sDa;ICX82ir z_s+e;awImzmgvnG>RPMo-le@=VZ7Oi!_VI}6$F_3iVezsdu2B`Az)#^pj)eVR)}YJ z{Z#3@M&utv*)}9V^HGJ?_E||Kq&H_Q_5FW5a+{{MAaPJUlAU+`4DN%UJUOm0f92%hP6iH%JN=>6Kzx=`oG z&Cs8pO_m&du}_uvl07@f_=p!s?29P^K(K>FJd@HSgA^(^IAlUJbPe$=s)DZY@C5H@*?>X%;p^rUN# z)oN3I&reR5%{Q)-zV-A({2AS!2=H;T~(ReM9LN=xmemOMIV z?*Dc~+kBG@TGJC%RaN?OLT@LX`s`lTQ+NlJVU>|SqN?NB)r2mBRG}ss!<>D5TA=9x zxiMaTv8~s=IUc>{{q9$K=h}*&}h9TAGT{>cGqIBNgddv;+T zsiCU+8cm*GijY1>u?YCF{F(#s55DOG4?sNvoB7L>7{KAqjz2epgY$(hRCB)JE6IJOY{7wv7A^4MCwd_lZUGWE_FMKBkP-G5wlMzF{YHf_B~i#fe0OWtm}NjA z+&|o`_L_czsuvLx6Ywdg$8JRf`R5Rk>8tA;v;JL;AC!aZUSEAsRyJ6`xN_Zx%nFXF zcT)GhiOLDDhM<1$zS;Le>{B#oUX53;YNixnZhyt$nv%Z$vG`<~r}Y)rS5Tusv6@kV z>A7M^ywDWYC0h^@&lTJR(=jCeb5TsHwJO=iw_G3g?9^kq1AU?0lQ9!|@$dl>R6QZ> zu;2Fya^sblV{*}OQlhs;qHU)t!+{$b9-e>QMy8dY!^!f?7mpxQ9i}UIbTXcFcexHj zhtC}ypG>=uzPbb=SZ1b?v2hlX3wk4_$n&RloI~lSuP=mdWXx#E8wkD4t)Ff7?``N7FQI;|%R9555hN=JC&@?2Y;;j>Hi7lipKab@yR4(S#iMGXW2Eu}figLhN zpPZ;&(}hWz{tTtz2R6ViqAcNnKjI@aAZEPAYx+@a5GJlq!(3|a5@?a!cLh@i?cBiw zRWMc(=B!z7|1c+OQEK_<8E3Hw$hRpZAl+ldB+Xqh3!{{EoJX%!uqZqG+fzT9iVcom zf6xA>KW=I4-0`Ah;=IG6yDGs_W2f!^xmLKF%>5L(MbOeCx(1uEI6x7;zn8!_Yd#jbz)=EL)3)c6Mz|WD_p$7M@+Ftu|0I?YXGw^ zU%v1z>8CJM=MPJMgz?T!?lzwu_9M@hF+eg@0?0PJUu@_wHQLnneJOYO>{&3RY0&ri z!%80{ZiABs>Sdgb_z-;NS!OUo->_rhtE_$&oH;$c72F0@0-YJwf9?J%jBS+{mq}ZR@>* zFS~^ekbg51C2H&uQx@Q;h96v_jU-sN43ucWAg0C3y3mNZ(^#P^P+yJ#Mwh0;VTn-H7$qyS-Z7j zxL`-m=~^8pNB#J?rA|1q>=sQsed)@To!>URka&|3YX71{Y3P`-_tcVBOx4(Wc;)e~ zK?`06hzfKKKZU|4!UIf?j*d&hZV=gZ;MvO2?wilVmlsH{36<}eHfP9EWpx#!#(M`P zT^&P%ZoCiv)NfWw;TKQ0(L;@P^=0rWmuk{yzK(B@YR}Cw+Rtt3Mu=&+)qk;dZdZA- zOnKd03yV6gA~#{zwI#08@;bYNhP|?QsJ{H~9qq(X3k-G+Rr(RMxm)|y3` zd@(*g#Oi&JiQPSu%qx1I0^8+$FekP2#qvdrvW2vfGmsDe}`1CbPU)bJw zzC)~QVpRN~{@?1x{Tk70t!0yGU4MbcvL^c{vm&tnyKLO6a=zo`;})*n*Wz~O54&Hr zbr?VFlAYD7QxpvLe?qrE1A7x_2!RGCC!>eG9z|rKaOS|iV0ZuW9p1eBJkFT-SM> z;~g>Xc(Ci|*TIz4q?ES(OX><|6mNQ3xC;B4b61)BVpZJEn^tbw&H*-3Lt`T-ukc0O z%=EtGE;Jtijo8`PzK)M;tbG?_o1f9p(eard*9S`6KFJt?E`=#P3p{9@6tSAA@>N~6 zP37P!;kts$#l}TV-ZKX)4VPM^{Z9R+@-w}7u78O21f-8wljzqxv=ZKTi`7iWud(|J z7omqi0|N$wX{vEv?^^nBi07DDQMRj>mM-y1xDPCgY*(RJA+<>n?hR}amYY>=ckdNm z@*TTvp4S^E)GY8X;bWGNCMtR@Ay#lI6>jQ#dOimd1l^%|9#s{Ovo|ZXrMF=bhX{R1 zfTv+Gty#?IiEv5|26GOkFg`y%zpRXRo$MBGE{+zn9WB+6QdTz4)B~nJB>%pp1^qCB z#2Kaz>+sU(Jw3wdBuc-f!Q+9|9{+*8PD<@t)IWzuMQtE?w1ENP7A*h$+a*oCdhn9WN)M)f)M~&wJDKTy&Er(QufN^_;0B;2$eTclX9gvt2jxkC zAFddLWt^B?M4N*Wy+}OY#z~X?`fT+AryWN6#Qis{-~B0Oxi4kJMC(J!pspnCNg$?} z6k;kF;tO0ZRpge{4Dp(yvzQ)7GsL<)B`VCb#ewsnYE5|C4Z4Y>Aqx(1?s6qhI+ zFnnmnt;6ibX|G}DBc2-~TF*)G!#cq~a7rLeB7i4>SPeaQRn<(v%0p{v zHJrWBsKe_oSA}bBPu2bYl59OA!Pxw9AX7fHb{V9tnwum*u-)oC= zGKXYQWg>jOe`hw=jJLc(sdSw4By!a&1JUBCt{*=;S!eH2NIhYn>pS%gLh zQ_-r5P-n8xQEF*r*yxUb-ZsCoUc9*AWm#(3#^t%hazvo%eTdJRYWB7ALd(*jKaLtY z!Ly@bU3tTuI|UTDwpztswq|?v+#ln4`==`?+A$Sqg?$pZub2qJAHHeTe0)~(*>)wm zq(Bb)f?w?+`q>>1fq#QH3P=W~K9X{BD8Om_{)a)s>LbZS)O*Kt`@0zJl}i`z4)aiM zwZ7Imy}5>A%tqt-Ot*w&O54B0O@{^qD@6sj5@q&1lhADdn7pRN*Siwk2_I zHD!9%a{YK1X*>o1E4V*~-uJwC!Ms-$JR^V&O%zA-yq%uN{YzNx?J8cJ8PDwc;p)Y`_ig$Vj|NAI^%D&a%~-L=cOFMs#|ee)PnVTf zd#u4RkSRi6Y$6nqb|7)?*LtyL{K_}Z=PnzBwf%h7EEnuULkVf=k`lie=R}!}!OTI^ zH6d*&nHP@ZU8X7e&yEh?(#>!@)6_ymwA-g^`uf>$W&Y?rH*)0kOEv{JN@B>_FSl(o z9YGbm_=C2gL3_fa#vz{y92)?R;26Al18haGRC43Av!vCGsn?s%M{)8}cB2BqRjDu> z5Js}m@gql$IBwgpRbfNgdT556vUqinxD7W&l*NfPYd2+Q?Zdw3%eXR_9S5(k(lPeNm$~?9&+kd54 zy?8l$k(Vo#hA`7MGdpoMXa_%Z3=RoBBA4vuJ4X*k-=e-Iy_lQ0tK7MSW$w*$eoN-9 zQ94g#?Cma}ybR9h*U_en?rj%k(la~k$87-#Bi6c|N9WDMkMe! zIc=3={Oa=Y*`~-S3c^((c%I)pX_-hVUye0KBln_JQPm40$A;^yJ`h2kAV0P+q3tPT!EFB*3A zHdmMe;toP`3)G&lgwYzRteSr-m;M|0U%?~0;+mYCEN9;hb75-xW8^`MwGFli?)Vyv zqd|(nSP-{8Ps}bh`hy5o=7<0;1S!+_!~~gnb*N}ky}$@v3P_t6uJ?i0ED-m(!ebL* zE!BsEl{ET=O8YFP8ehItVF-?)1jg*VXrxuv<_(bwhIuQPkJvL*wLnkMP5`z*h-ZKs zW;tXRkGueHmLFVCb)t^D6`6nfROnIgSmvLdqVZJW9t%6ytQ6CBO`>Ce~oe)Hqj%MuB%8)2N~b`cv+-2C45 z?4sLsRQDLV)Sff^Cr zoV?4|CUk)A;F(};M}>zgKw$wd*Uy0M0g}OAx*DUdojdDcz$Gt_-fsZ?546{%K|vcH ze8J5|M){qu4+n<`Gg^$j%P#ezcymJuh4kzc6<=inLtwmJetuTqbY9410`ddDNJegj z?!LZlfz+g3ENB#aj33$}5)yFOQ`0H1AOJIgasrj+3_hN5UKb=pI%wD7xpe8n!#rHc?%@y3lbuyE&*i;jNYgLveR_cX6@z6v~b!k64)O6zJ=y z>_6MI*$0e#v7U&CM_p>^%FYX-Gs`ohF<6w=7bywn7qNF~2feATet+E*C+WoVVaw;w z88@zvcW>m9qb5W|{GLDmF2zRY*K(u0)x$lQ`=DhrYg3b7w-Eu)1xe|@Eq{&_aBfD- zJ3YMaY^|)i&?W3Riuo}BHp2VH4TQ@%gM@)Q8pjZ&Dy%bLENXq}(sou>GEWgt5d2z< zW+7zB$jAVkgh93f!kM=0-viSTiQg zhHQw;L8tk3dK$@*Hc{$Ubc4f|`#(7yzUK z)afdiQGfpY!eafO<^*&_)DxJe$#R`=ae1th_vz^+PFR{O(iVHsF+NQtN18A)9J&HK zf|AnGR~FcBy;l*vsUw0Du(|$?R+rWzLxv zl|OulEZ{Q`%bb1bTJZ28Y+(`uRrzXPAV%~DI2_YY=|eY~W<1e!CmjgvzS>XH6QV`- z9_wE!cz#Y+Kl@v+&$(}#A=P1mzqd(c({g3UOZA+$ol0wqX78*1wG#Tpe@mxg68A-T zUlhCF^@EO2FW~Cw9Tdk{7UUD~Y{*!J9&c>nI3~-$?=*#k8guPb3l+J{#BmQl&7RJo(<|g1wLJ zmyWrN5G6+m*oK9g4k)aG`ISRbamh%;g&$z(#LV{WD^=xFom4PQct7lnH;c(ORA{9* z00D!c>9fQ6x^)A0+F<<1_uQV=FVtNGVQ!~+M9s)vmWzqzSN(d&8tGjY;jiwGRvss1 zQIX!%j$(shwGBL!R%x~;)mW&ZqdWP-eY2y4<*3YZ6O zMwX-5LDi{^2DY~2z||@Eq@@joZ#}*I1!{reZ4%vFt1@<-prj%>l9wQ}J23*Fss;H9 zjDcJuQS{>N-jp%sxIJ;RgS`WPV#IzxKlO8J3Z*i(ncsCNJpC!TuDwAVxCsO5c6lKE zgfrxBl?di?{>Hw2d&G50aZFWR0KuYk05PBgLvHlN2%G|_3g6mTzEDg62>GjHj32V{ z^KDU6J&*oN7^!kq(d>1E6#I#IE7wnzr9SEmL%W6k8&rQbtGW(;I(rNT0eQW{|A-KO z(>%H16m2JErRQoTp?eH$+3u&2ck|0ww_$@1I|98Z75Fh4T=#1@neQJI+w} zMR#tL54ab8Z$932yI=}K66XlRC}-JO$p)v^FO43C#|_`x+)L+{x_&MtNIyy6ud9b4 zSTewg-(%*5x=ioVNvzr%SMcj7AZM0WF>GcI z8J(Vv>GmXPTp@ z6D|MYJMc6p1hWUcm2cpX;8req@&xkolvGg4(Z-OrlFu<$M0*A1KA6sU$T;y)?_E34l5=FT3*u= zRnikSFQ0oPeR2^eQ2X)5ZPCxnw;la_@qGImtAa-6oxD<8l2cpc7fXJggOP=Os@H|q zw|TOqM}{e=J!p5{l15P2Jh2$Sc4gb5pR=S}SCXOb1ZMI#Ba##B3 zhR;^^xU67rt^(J=2i*@UKP!S7Wp?X<(E|)Q@UQfKe3~Pl4}^yK9}cN~OJBXtV=c9` z<{=_R9Yh%rn4UEI<_*T8dIppiFAhyHDR7sZX5nED*;F?(yuK)S(3MX7Y(U7S%#(ZQ z=mXgI3^i{NkqBwkw(VzQ=DGQI@zra}%Y(t=wk3}RxMZ_jU(QEHV!~|93IaGJOCY3!VFFSQun)4716>gJ6ToeZ4&aXZ2_qw{x1-079T$p6xf&c4l*tGZ zejn&_*b$(L!V6;@$1X$l zm>393KEPV4y%y}Dj>LRRC{Dv?eQgno6r~t;?HsN+uyAqxA$Y}Mu(}HT`p$izw-qDS z0Jc0RRlyG;hrp=bu#~~P2Llw1&Ky{DSWnLArLY`9lLX9*KY9L1-_nU9(45hPVU`D? z(IMd&v@Lit)gI}sA+#g9+g`!138jKhi&1V`+*AQTiL;wC zabtDzwPQubqr&iLy!6x*4Dk-zM7PHI{JlBTH8Hgx&?dN^Jjs4kUn|NWueYG=0oTbW z^~H73u0>gewkOIxBDcA6Obc_T3!mC280U2TD3O?{HqJX~f4f!Z{+zeL!u@IgYON?% z>AZvbnfm!p?eXz8*}HNjndbJ`rB7^eHBB-NzEF3?1<6dN@AdTcuZ*>BThZ0Z%eI!% z%JeioQv?l)NNRL^%kGygMxt8TnKE2j1#e#WI0{x~8|a(v&C%0Kd}4e&GyHH-Zug{3 zpJ>8ut(@M8{QeG~)uk&hC1LW0WWtvz{(PE=O1+;#D@`gtu_~Z4IR$dPLtDi+0Xrt|B zC?hhB3qi0kw<u!AVB&kpUGZ8?2oW_xZPYomGnPC3(U}1B1o`}~-=Z^(fg2S6z^7C^&ilaS` z6FQ0;(#K_7%VAz%5wgxeP3ax0d^Tgi#zS(R2laXc1F<6>)=ay@J15*c2aXT!qC2EJ zu{(U^NqUfFokd4Z#QESVAr0nc3W6u)l#P=A3AQzPg=Nj(MZ2E$D?G~?)zzC3v!NH^ zNjavE*}}#Hhr+WYIX0-VEbU6ZBegK$Dxq>c&Rmy;dM8^}I5+W+ca&m5j!@OF{ib|o zOq!~#lfk#2cI&OoQk67bI_iwxu3=t+@Kg-Xq9elV{7r+66pk~89RB-|pOc4KG}(vQ zK9$!lT!8@BQwPV7uI}Re{2M0K>IQOygh2!^;YgAni z$4xFB{-X27$_8x?1m~(d`Q2Y05daMscpJ3blo>qe@Mw@FC#Oq9gmmlmgo;O>APam8)_(Al~(mekpkM_HtXEGWNpql4!N zI|452^Qb_Nr{5+XW2g$A%G+;bCUh51o{;99+qYqKC~M!{^ySN1O)=e?8(66bYbgUx z+4?6kJpA>Hv#Zcok0){KId}Z~W8=1ZR^qpwhb(z=4Rcd3ywCQpF8G(dmH$|6?eapp z-)>!)#Q$s2TiCiIU>ohoQ;b2-o1=Kp{;_Ag!vJJNT(SvTgC8d2g)}i|LtAFlGIXN5 z>V9r+mi}tt*TX#zmXgkGAMl733Tt3%Rqb=C(BqXD$lQnlERUPqnbwT6)AFIFQZ$}% z90Ac2#V0@4``0!NjT zcUje%K@`(c_){T~-x>F-Fte6zVxQkJQ_gU{mUaW^ZvKG}az0`r3%`whw=C-Y7AYas zf_kW@C*j)AYB|G&TH1h`0~C@^OV_Q>y*A?fFuO}K^7np9hgLiosCRJ5!9l=xz{Kg> z?EVOk2a>*&0era8BwcnHSXKYMAUCA+`jXxuf!&HHHqF1xN}tFL)jhXWKG{6FAp5^B z^x)2qz^r^!ZIav9orb2BniPd^c;x=^HK)lnnX9qs($>EXGAt@XAdsX#7$=ttrtE_a zdyZ1=wC@{2F+bHGZFtDom}6z1l+q!KJDU`z+jO72jT15fCk2=Fty_T#;U4QHKa^gh zOoQByf)4>gB_*-BFTLv0V9mFXPJs6 zFR$NM*K4`ITCKrw`X zSzcvt`R?Q-D>Km@*;_NT^16oC6LrDOg_$!~E4q1!{rm6og@Sty0y62&(UEl&p*%DM zqv-GNFJO07WE|0JnJ8_}te{Hb^Q56?hk@NeugK7lBKoHTnjg#EB7fnVd_;h6q(-FO zcwX$@=xWVHI!Cq|ApW@J0pa`vCU#ngaj#BKa0v`8rE8VIm6NNtEVzEoYln&}n{*^k zXb|!T{>^vkl8q93<}t3ZnBIB8`3==ZXBa946SOd6f;Jce>->Ew(c5lN%w_UEG`zxC zt)BPF;)+98i$tw+1VUd7bXt90tdL+BmTHZwNksO7Hc;~ZnL_4 zIhr-3c|0nv(w2RP{cnO+$V(tLQi!VZq z=3w^G?e06dby?|Pf0826rz2*r&l+|W+ z?r6y{>eb3|0qO(2E2Y0B*k(;j@F;tV0(GePVQNg~kO+7OXGO zpxXdG0czKbzo&TZH##y@zzBq62s=ValqEJe7vWF6I(k@3i#~U-vAP_jazc5lB^T59SSXglydksutKj0|Vr}71h@8;W41-Jwj3nq6$X564SrF2l1}aGdKFms>N&rj%8>#Jq zr`x+~vGYM=hm;jnKQKM;HeUjZf@leyE14vYt_^gpDa_meZ9o@+BDw;GitrBtWvxcy z*L9l87;>zqlLxnm=RT{yDyCVtY(agWhHxEobDel=5K=L&TU`F04i*(AYG<=M$YglD zZoDU)BkPle#h|^LKD!L@!DkFpFn&XH6fB5=*?oemBwU3D2g$4)m|MYnbbm;lrjAY; zdIJoCA(@oMibRGZ=z0zVmCI;8$g@dI4AFg$KoUhefdzFE$cmm`33yR;%dgT83$X%L zynW{mhJed(oZJoNovjQe9gg50!ubyqlEi!W#Qw{=!p{#zRw(rdtY6acnjjJ*nG-{= zsLWz?lcW&e2mKN$xW$@bU}8GD5{FyGfbFEYd9>4;J^?YY*5>8{=m^ktAWG`=W9yCS z?-zgn_5!mD5;L@6P_F%jVg~;|4SHpltqkygMAf&z>5`O&;QgSUA}1`WaQXp7EVh~B z>K_<*K6n6~?FIDFkIY_3VMKtH4#ML)hLJFpf<-bcWm;P!A(5y*k1GR583+=j|E_`p z*RdAtW;E`z3%wQ)%cD|*9m_RO&s7|vU_hWxY%;;SP`va(j8L8GBT0_ncdRWAQmF#s z0+SLlY%nQt-5^D85N`~4ydyF{G1p7g$rGd_=dIYC7>YfDuFGT$7u*begGQ;Ay&-swr}5#pn@}J&X@@S;Rh%& zyX?)$$q9rkfDgh6M>{*H!|=1h%{)6R3mX8IJa{$Ic%a4AE0AJ>khB131oN(2si|i{ zIKWlTw52xvaA6O=-~xsrSkh>&A$i2Rcx^fFSy_YOF(77;CZXv)cH{`UV@?8X%kZyX z1L$y3F2MN`%1%rfAeYClAO;bvK=7lf2+R+0Nbz!Ut$@K&@%%Yq_4PD#-1X-%nSxIO zgurZUq#OyiBZxkb1G)e$7l^aP(S&C~O`tt4DJcQmPRepWegt)t4EFH+XJT$%4QVlM z_r6J21+Z%ISxT*r2^k_w$PqU;PEBbkDZ&zCJB`iBsi{h?wRvwecLdJw~yRgy6IB$T=iJK-_E%ZYC(#P|X7Vj){mUeDtXN z*)tDk=UTrd{1y&xTp~ZP5-wg8zQa;ODmQV5L6ZpL?AZ5o-)i@%WFt{-8QWO+v*RMc zilrdHgT($OF)+*%0*Z_7Mm^#mt>=~D0XSwdr%&UouevUhTw{es|#0^5a&co=_ zaYo}-!dL(+z}n!ev;6#S-l>S2As6+o3(*lx`=|+AeE>Wlu>$0NPtGwJV6U0@_gT*- zdx*J7f;nV0==K?cUW2?sa*eUkk=R<3hvC) zSQl8<82@T(M}mdd@=aqmGpPn)JKAgwUlj7{LOqJ5;0hibX)6hFVa6Ya;E9`&-?N$u z;b=qs^yc1=z4C|j>Zk}f4=g|q`4(Ahyp2~naUP+&?$Mv0a8+pa7t;Ld+wg>%u>DVa z3C{K&TzCCt6L@wFPTEZ!Y4+>&GSmkKB ze9lre#xUU%D`y?K=xkwO0Ynw5W^eF{(TZV@Vy8ZZvRGOgPvxjUGYE9|74X@?F{JSW z7=&bE@?yfRipQmXrFnEV@p}VxpmtQ-#jdm3>Ei}$-vFS)Y?+gjmcUDO@$jG}#P3FI z`@QU~tv!fU1M}p7Lzx*@{rZy_CC2MczkG{ViRjWWm}-aA!2`djpdc(JhSm>)$yO9T zYbX>5XIS0={6sdRt1bo2;EuFY|Ivjpa6^!nk(rrTg4Q)fo^Vgaq8#1e13Q?Rf8t&+ zuklH39KCk^x<$43HUhj?%!^3g3REI++aqQAo0yn_`bTX&ecrFVx)~-n^yST-xYwhL zt8fckeEMZ6OE%D1U(h;!HgNEEgA0pMyIn3(p+-TmbRl7J=Fg z=T~XpPrNAjk&ue*|AJD6casM_UNI~W03DJMLD&Ug&&O=tH!@rof)5-W8EI5tgn1Sz z=?2IM+9^&#kS1`Qkj2QBEqK4bn|Gy~0i?%)gi6pljb^**!2q=Mv!0dMOQa;St?fjn zp2O$oV5Kr|m(v!A!!%X_aspXdcDLPV+FyWK58%+jLF{e|_&(aEru`^nKyk#ub_)kC zP;<{+7vKd4=Z~l;CP%CALsR6$eiKhCD!lIe4jfS!Is&go zb|rksL4L&5aRWyt${cajybm8b!0H8O2efb)m6B0>%*>=1(#XgNn_HHvjr?*5eT>s+ zS5Oudv_kEJg9z9CCorf0Lf{YK*4u*1ii?Xh!$YVs&KfX^25^PH|9-~Q6j5smsJS2l z2229^Io1_u1D)7f(Zmfn7HW`$FNOnYxhooCWTyyXSMzP_Jdj%B;O5U^8-Uskk#Kj+hJp*z( zCb+obtDyMMj7NEom?x7eFIhDfL@0qLfT@XX&x0P&bPNm)(I8l#KMz+)V5;!F8_3Ro zL{rJY_wP2_zv5+L+zh<_j;(zN_o*9hvVIJQ4uC3?llI|R;F;_WhgA2FI-TOiBht#Q zT&n5n;aT|eaMO!Dl`PJ5x%A4FV=UCa-eMLn68^ZnT%C)B(E+!5Sg;< zA$kIp65{{Xnc5Xd_XRw(I~qceSh#t;!FR1cf6~YZcrH*8Guult$?zQdsRu8jbLTR9 zf8ZA(*Vhn&Np$@N+$AUe^RW$r|4>1JT2Pvv$PwAil9ZI$;fJ9rtUqr=J+a`0zq86d zS6Wu~b#58QS*G5Q&*qasp8oyprKcmUpSZsJ&tD^ZR^$WSi)*uR07FnVUiTC#(M-o4 z{JijmfhGohc1&ZPK*DX996?SFi*i&g9U0qXRpj%>>qMWLqEvA>cg}xOE9*`Ze2LHX zz@ADg=k+W|_!E?)fw-R$Eg~KU(pq^r7@N4>kjT`gYS*^)@iU;B$ZmwiCs-laAX%fc zpLk4YDtVWVEBo~d-z?bDk*Ooeo80rVdeAquX<{Zmba-L3x3@I!(cxXouRXT;sj4B8 zV;Kw%lsTO4wA}aojZ>{!dZ$e;Zjwr=((y{wf#p)f2;&Vplr%p|s5-+YylqoDdrl->X_0GC0H6)KEHWU`#ONhaI}>hceBUR{EqSDe!7%T|)+pXs_e0)ZBmEV}{g$=@HS2@D;eSIcm(@v+XD6%U*Ltx5-pib3^xRu{jXjoPn$z~|GU}xE2j5jZ zcXPi9j@~rO?sNQ?AC-a*cGxMsLY4p{_1YkykxOy$-) zvFjA(BDw48Ez*tUNPw%DArf97j;@_CfDA(0B|&n)$L*Z+EEW=eB! zUI~noaBB@6T#Qpc_0^H{YfUh|UaeYjJ(dpc(xi7DG?iB}>XP9h6cTbQ^_!#`3)IG_ z!N({5lpkNwEyP6%HT^!XW2yFIAk972PjAo1MIIpk-smJG+mKA8d*l z0{F7Bv(Y^V1_T@t=(zq&$u~xo<)%SFWJCnSK42_S1)nA-qVU*+;pk4*=D!0QsMSQ+ z!U3=XRn52}dSm^6gC1N}Ioz)YuULlWk-!u@k`5fW;Sm2-R%5tBI&EMu(~)iT7lB6$e!G@7_TGO;)*2)NlGubgw-c zRuPd*DSJf^1f9!2Ff%vnxLMd%>tQmsRt4D zIRD+I2iBCNPUVQa#n7p>^(O|*I90us*SV)N_5(YkKAfg#>6t$|)Q}>toH)yn#9x?5 zeN%6{gWmz(N-dKgbT^8O&lnma@`H)r&z#0#1~(L@%EYK2n!|AB$kk1AHs-6__bBhM z1NMQ5N8{*P-Kp*?g6sR~Ba4v-5*ZeTfvtKo0`f=?Sq0%YEd$3{ZW@X1)Qpd=TQb&b zY)m__ji^h8qSepO59fWy7S)RvbJNp#yFX>uh|>k=*|LeIYQ4V2GE?l^t&sW-E#13! z;)wA>p0*@~BCVGUJihPVz8x!6U|fiiGfW0vm_0Hrss@Ar!?q&=6S$@z$%l#x<874r zW@h(v@-E@UB0~r4uN2u!W7E^R$CR(l45{Jw;E;hQymo>{z3+nhDDrN$#=Ly+Kui3t z70XL-9q{cjT{O=zIM-@kr>(~e&jn`c(6;MHYrvh!4Xm-QE-?36?e1-w4<%iw{sb5o z<{WP7_}sFz#a<4kh7hYlrL>%s)cQ<&6gK=Y_)BG^lDG1T{ox6b!32t$*am8vw91_%e8(?PmjJ zH~1;!#B1ejt&dr*vV2FV?w55JxmtLl_x6h$Ha^P0QJ{;2-V$9Q8mo_j=!wKcM4Vk* zUN7|!sIY$+Z8^rZ;kI${h0S70IkbdabFLqTS46FViIAEBTTZqs+tD~`O;#au@PJay z^Lj2_b1+wPd(~tm7_y&7IeR(syvaU_n}{0|YFeRvr%B+b7y@OJ(&zV3GiIh;rWNMAJ`d;c3|%iuD^BHiDV;v{Z|*C zz)sHt7Gb5Q9WGpe1T_~IA@uBMM!2YiR0U=lp0-EH6?9X4e5 z$MJq^gTyj+4VVa2;K4ruz=e*AP<`v9@aFAx`-ndh{@VhWc9I$aaD(E`Y~DKmOXTn@ zmu9p6K!-o_izh_F(D)k~7-W=B+pf5oMoLjJZKn3`wn}8QFX${ak_kDef1D{MX2!D; zAPFD`Ym;-iN0M5+CH`qmD<>%~oF0Nb!~KofCO_>?4J%wFr0TmiZ=8_JG@%{;P+J-< zdtN;KhX;k^$Ki?1$Dh^cxKJvaKKWZPhN~Uq@LeCdsB&~T#9w}YR;`v4UU+$u5p>m7cV>B`=nTOjh?u^l89Z()*fzQAh zCLMNQctN0c)nYkfYnu;04fX8Iz$FXVv+Ua!*Eq_wRkF6BK^Qp&(2HREqIHAm_j?k3 zlXD(R07(0EG*Q$@S+xCJbdCuhVtuQ-u&ZXu*?F{%A(S<6pN=U6j(MS z01rT|0}aR0atMD3LLst*N2>yyqzoqnc&k@DJa~aP6N;dj|81n{h^C4X9q8@ z)8)$pa9#&i1z;Lr0bmX|+mNQ8gsODsZ8U^RUS)ue0mPvVAaE0Uer?(urM?A%T6}$c z_WFhf2;sAEu;IGIDTP5Nigwaw#JF$`2r)#oBx;?mtmOXlH0JfW2lsuL2h0oP2J#^w zMwSh;X>yLH09(exG3y(!{Er8ozEh(~Fd|7Z#;QjsdZR66C zW15lLf`1?P+~TCJ9^7nJWPr+!v&tf)DW*L#8~%}aT1 zbuDi(Z-cJ%xg-QLex;)rGFv$iWiB`p9=yc7k2BeD=AO@lb$|2Ew+tfQkp z*veq}K@q%xWPk&AhHX^9Ioev{PZOH|?+9GR_6Bnc_JyB|Vz%$sDeQsB*bYcMzRaJ6 z1-zt>z+mt_fMYD;p(Fc40#Wm*bO>O&Ovq~j?o1}ApjUo^;I5VyG`tK1@I&BeI3R!| zV9jT3t@2s(GB@Yxjuv1HA~S^n@t}ytH^*CTvHp*?o}7&04ib*G{{G~aZ_1uChGx%mK^?W)R3H2dIEo-r|*n4Dahd#{3npyR^_cc7sa?o%i^a3-Pi z<{+IM~qGZ0#dZJtZR;OF^Z!Uy;g z{HYGqKNKW7&ae3x`vWLANdJNTPZbG74yCnS^cZhH2O29nb^E8J^9DwfXiQOhz><%N zkr5*`yHDk${vPxzGGH0xEC5|PNm57oSTc4AWaDA3f>f)`@#Q^mC)fReJJqV~Xy z$%WvxAo}G5dVj$6b*8ry5@a3w*$DLP!A7Z2#9)U?Fla`JUbiv)4pw_j#L^@G`)Z%N zp3@%PB%GG~@lAPH;G1*5lbVT=uVbt))Rn;oM(ptK2fxLF?i4x|(-5>)A%_E=Jbb(EM&*h_=$8^@cO}B?UG?X; zr6+Bky^FXk_Q1%P;{%(I$3jIl)8FtHBU7`VD27^&Ta>$B1|h!mz-4JYg17KFS#A7u z@%kph8iupppy0@tJ}k~Sotwh1b3I-;$ej^QfJ17CP%}0rGULgto9j4L+i*4x4yLz!LvIco3|y^Ncm!e^#}x&x7j*wy z4!lx%y}Wv%HuqzNhZ9EEWOiSTudk5h3&8Hks(=X;Bta=Mc8|e(gWVCn3NRjKE*Ua1 z0Pg_k`O(dc1OPHb>J9&IDu)d~LqPPSagTJu0>T4DkN4si55&w=3{^~5M}&s@nfB2W zSP?jH0ZQ}kzkJV3oEO;~fX~g1jPCc?lRlL&D>4#APk>h|%n^ZzJ{7ReYinyUl*(jY z!=zA=rx+kI7O8V8AMZ1nRHK!pbTIk{3vPV2ewa1Y~eVf7;b4%-_q z#>BLYB;8{a6~eT=98R>rEy>{zTxK>jcpyyxcOwawzz`O12e%yNvzU;KzF>%H1lJK4 zaGHXfXtz%$z-TBJEMVB!qR!>>o0&DF;X~AQuZ5q}U)EhgHgV3*HrrZ7J<9%m5m zBJ)io?bGB{TjCXNf11_Jmq8MUhPx_#m(qW3cu{q?5Z~dpE^@o zM$DTkOO_hWTQ==HW_65rPx`Csz?6?NNt{wn(}7h)d(FA^7L&Vm(siSAqqoB2pNn0F z@`=oS*#C3QZM-)DA&ir&$4%}cJ7TGzPWSnxWqEd*;xejQhE=(7ZdElkf7}r8j&1qI z8fJ~78#hEfz(89q!IhNW9}5~9e?YYKf!iF)E0_mvZ~ICAl>P&GRI04Qa_s}2A#|Fx zCl#lj-!~Gy^4hZVt)SAj?%%)VU8?=BJi2`t`qpToafeQ47Z-5w^*N6*wBk zY22*A`T6#n3jqUF9A`^>k8fpPJ4is9X99spDmpvE*Qh=}|7;^&a`?2tR z8SAYdEr(wRCw&m52aiH3^R>a);rkCByoHeO)vICfMe&Dm+P6=*B1q-kJ7z*`@7~!0 zz>b(lv}y^&VJ>`rOkN52#MhIJ^&#rnNm3WWal#^h2QWrlWipQjxQ&I)ip332TOiy* z3UX;#6qju0gsVXT+wt>`j!=@~6o)7N9bN*1=kdm*7B1nE4T!X>@|+z(*^0wJ_`m@Z zQScY<{KNGK!wo$jJm$`bzOI>a09A;RfzWS`N!UIS^FZcZ`IMAnYJGcy&&`Bgg_)HhLM(_|L5c{Y{{U#BurS^ zS(_9Uyt_Mw9F&f>R!4(&A>BRi!MskY{fP~6%H>hnYWBC%ZYyE$ThORjC)hmw-0yPr z^F>7($)AKdd!$19G8|NqzTYGL8}K45DqDM z1%;6p+uAlo&%J@G;>G|V(d;~8R>A;6U%uobu!;3PWUnC7;Npb~+qQ2P{9BH9O-Jpm zY?0Rm&^VLtul)7-pxRsnH=#*jCNNtZqNu)m_tbw@s{06J782YCOZQO_DQptXNfxJ1 zhjPPZ!|p1lnVuk(KuX)#+%jfiyl?`y5?zs0`g1V-{jsFb4)J}@Fn$m>EeqwNLmWAx z!)$CqBB#JZ^c0^Q9X(w90j|v$iiDTy%rYxwAqPGEy)QCR&5NhI3y@+DyZO^X-rU5{ z6`6rowCwct5F!(NLPB5B{18YeLnj<`C=*j^Qe=SLh@T1*1=p3J{yJ;I@=2c}&-8^B z=G%!dU;==TvyvO-KZqu{mmmvOhK)MxFWu14$Tx-_fh+O%U%xJ2yeNmM3KUA$u;x&L zqZ5LtLOzh}MY6Ie88Y-lKm!28dnMu)^5sWo+u65m;X`~BhT|I}ttL@a?!WW_Qrk;l zC4kd&3=I%DGQp*Yh8>h|oY!bd==Sp>n4qwSbTx;)4vu%S0WdM?OW$;W|CmO4vDX=| zilmoqn^M+~H(Gdk{V8KJ3APE=wNu#XZs34a!P&A=<_2b$gdN1&uNQPLr6n`8QurNq zS#nS&{CKDx)N&q6RR~mQolG!JrXk7(F#ZxS(f2Y@Ak11`j5$q6bTx(FKU!7g74cjk z$@HS5^;t8+)zd4UPU}@Q9xFH2Q`bxqOb)OgNbz!1P#mA(E%jwH;v}rpm-A;ZZ^p7y zb{--$WqNqqnbv9fR)=&|*n z$t3q+a4-iO+baCMz-PBdpC&#|7vSvfPEPIt3Bh?2ld?T5bQrPixz$W6*n5AVj7v>P z`IM*28+L?r=|}wn>n;dd&|^Uxf=l{1Hi{$UporGRaRA@%?J~BiKMYh%EgNCBA%F1T z-0~{gD7+X27;vKLl9Dng?%l*C6Z&7=BYCgBe7S-H9~j&#T;zzBtEyT9=!q62J$(=t zHVF8nE382Qc4f9f0Y2mzGqcYqZ_uhBjtrI1EG~P}N}8S?NhxH-os)wudM`PkW~0ZL zs-0CIN8ahu5iAr8Uzs;;A`=a89-?`{*BOHmEj-9k0YM|}2*J4Lj!9VeK|DhYD4a!-w9A1vVlQA;G3dK~Hpc*N-XmajKwXP4n*(l> zY?|?y8e*}6IK;@na0X#*mlwhS>Wl5W`PU|z&5}hz@7!`Av7#(c-9k`08DgM zfEVC0kU0BN=K3E8&@e!GgiFpmvb#|K4-XHc5~>0h0w(}yoM@Ra=XZB6hjlRXYshyo z+9^GKFEKGx><_dUJ0vYtL2Gt%Tfho}0Gw20K!O3D8h&K>q2nh-+!gTA?_a-?u^V`n zuzdqvLmA>Ooe+Gh3;+2_qfH-~^~A?g!EQnZE}8_qg)g8uVW-PVNp%8vMx;aic`z*< z@IEkfJ+c!4l;A6U`HxAa2^VS|72A_LZ#BdHHwllst;r-OiO$>i@&ww?FhEAm=wO+S6_ z2IInGD0DC*%T!>Ddv`XhsrUz%R<57GbJ`Df4NqNWE;T>Z8p zDfP;!J_?gpjGP09TKew#MyM%dpnucY7OOjV-yR=LYk0cg@Tt3eBH$7O&nczo>s*}OeEAi}Joqy5OG2|m zFoxXJy2;Pe@cs`8My*G{6=C9%QSDq-5Gv!{H5vPw%Fj$(S5p%q6Nh#NVhM%k0WZMF zKNFD4X&jrdoH#0=f8oN;KXFJkns9~V3Tv2e%f5v4vlISE%(Prx6ojeJZ4JcPK&KPFnmV!$^FbMQB>gx#rQ&8}C=fSK9-xzqnFxQ5_??bkn z5%t(G4POwKz6Cs%M|ha8gJE zu~Vx7{DQjz$S}DQuDILqV?e73e0qvG%b=jgwEPs zSkplG*3lzJ<|lg?3Q4xf#kQ2Bl%%^&T5s9EDQMYPSz8H9QV~%)w@lIsvR!#D^4N|i z875`7i`+YLFKW3Vk?*NYPk&P~^S- z?9kPVd%dQn7py+<9^DZaR{N%*DVS2LxHm5$ccVPytykh6Hg$b|VtO+5Ov0r%vM#c2 zJ2yVoGD$d-&~o95Qk#-L<-9g(S{y9Aov-6o_HTU!QH%^-f9Uh*Y0tGh^YPI2*Xff7 zw{$w48`!6@tU|&34TLBNqCrhc+-A(P_2#taoJ8QeF3ORpX9q6As>2;27&xs#tfSvV zV{UBOzh}~kvHa9-&9!Hev~ml1JARdg|Hg$?W=)!_V9G?_r(l)hqn~>3hX+&YQqapb z&O0n=>-LEoEDNP2|ijJ8%cSGCNDjGJ!o_7w^^depd)^}0n z{R>>ODX5fjJv07Wyrts0>#Z=|4><}EwrgJd)F;!SjPOZmcny))Doxq8~g zj~eYAx;A(vU|51#BEG+MmMK!Xq162QSyzhj=}eutd@r56;1~YE7}Kk((>!RgJMO$1 z=DFG8z}%C9>9#kDU%gFMR4iz_bz?Y$!3)87(DvQ&9+%>plG@Y33RDw88~nVEsV(eT zK-%`)UcH#Q)ZH>aD(|*k1n!!Bn7C1!mXu`Y=-4KdT0AFE85rH>I-Dd?WGMPlLE`7J zmp9$|GkrWHc?-Hu%Dbu5QCv_kP;LuBz&spi9kxQ1IfCLuY$lGCbu(x&Q?sb* zsp{w7+?BR_(L&CVAe7GOsg`Q~NqD%YZ7O*eo3N|vuOmM>`C z(_aa@1SL(B7yIN{+343t_cUmDe!8&yw{{Fwm7KJ+mHlxjQU4>-`P{7-Vpnr&#EdXF zWQ%r=9!BlKE-OwC!aihCvuvduaq8Z{1P97M6`=;6o0wVWzgm@A@VbFxk>^Jh)G8&l zhmk;Ln8kBeKsf)w1Fx7wgMasv&BS|Q7Um;6yACDDVvrXu0>~sUZjIceIbP*24W)oZ z_h!}k69Sjuzh?bk|(3x2GifxvKv5JiI!;=ms}u$XhpE2d5JA@Moh8Z_+T2gO6eEi?_+A;XFSD*|XXKG&;INiLU3N0X-RZ} z*ezk6qbhA2XH-H?d2e1*$dB6XcshP{3t&%NHx$GdiKYV!zs@N2UisiF*yy@$9_u{T zkMd}zk`lN5t|ru>7{#hOa;~8DAze=ImZuJv znr=}|H!l}atnVn6p=du`{`~n8N=;%2J=fS+ZjU{9#&iL-&-HIo_ z3#$;Ivq65s|{=r8E?sRPR-u-rLGzr5yFd;7HrEmS;#_xL^2b2sEw1PY6X^#9A^&HKynbQ`Fr>hC1t zg)B7aEp{=owUxaS3TkAP(j2zyWF>}XJy8sUJJO_Rm{&V5E6tnxwp7O-ZQ<>E_ac*q zbX%1uuCm9dbojg4{`0!Gb%yKGiFJD41AHc8aAy>T3Mg4s3)Mj=?u%7(QO z9RAw*np&=Z3hefK7D&e2zqSEP7abi9QNuO@#0kEsQ>g91%aVh=Mc5Go$Y#MJM7x5K z&jc8d_$g@o?%msw%+Gq2BzOXRKWBE)eyRdSY||Mh=J44j~%!>eDd>)C!mnhNWgdo zsuFql7+_mob#b|^bpetiJ?}2VQwTHAaRAX0wvxLvr7+Op=YIuzEnprvZorhi4E8IY z2(qqv-KdD#wv^a7ilQ@zjo3nuyuUg9t%Wa6b@3M;TYx&%U2!%2 z&7Ri}&y6|%7P5UR>CE@$jjFvU<5q%o6nkdB)aVes#ld8X7?Q0}?>`d@pt4lAxOEEu=b1Mi=eUPPBAz z*ul=8kdze0NKUTn1m6N#L7xCLPvT7ZPYgedMc5FIb-KjTUn?gW3>2i15<3pMYv*-6 zwe2_$M0M*7snP;SvcV7j1Q=oCzQen~U~e-)7l5eRqmv>(g){X)^npitJIYoJ-I#aC z!@p8aLBR{=a^P12|Hjzw8M;G*0uTmDa&o?*#jaT%+m7B5(?VF;B9;)dBm64DW^)V< zT>dN%Wn|Zcux?r<>Kq(XpfUf%(TlL66v=ake0-FNpI<6^v3%?6FT4uapdtAJn+=UQ z_7PBPTg(9Aq>g(6Tm^sA8=D^}0K^DY$iW;HHs4r8XysdxJ&Ds0rt@WwAHVco{*BQ} zM0hv=qXRG|0s_E|EIzEVneSExLIKm&f%xaQ%g1u2&Q8mbBe0V!lSx$CPFVJchQ@>l zpMcM#hAwRsP4yBbp~?sPL)zX|{S!iL0dbqRZV$}a>HK15ez&!a%A&ZH)sS=T8)|KB z%V~2KdVWb3pOuX~Dl}o#tgJ)N2A!S#h6Ptn&uW4AF&fOw{nGMP01zTL)to0~Cku_k z&hVW>83CW4d$F-Iuupuo-hZ%bDEAR0Lz=p}kB!d^SZ|-+9#If=m)LMVF}O@qWUqDh zwmU*QQ^n8qXEF*2&_h*;b>hsV%g_+>Y7^l1&5aM zKi@RhoM($B{rrVKvMSeXiu}L2t~?&fy?sB{QN)lUJB=2JA;i#F5~D<=QN~t3$k`NI>DoT!2LQ+bDv1fg+IqzTZ@ALWjM<1ENJkQ+U`@ZgLNhtVS z4qK5cCz~t2&+?$raxMTAWCYU0h2*3NG?4)9I9NsC5Qkh2WfRgKfK5>F#<-?xy4Zv^ zK070fW^!-7qbgbGSKvvo0I_slc)Lwg+`t5ZW3PO}TlaQ}URL-*fI8lZhx>x^3rHJl z4_I>G(J~jffYU|#v=`Qe1>xg)7&!3(+y~(_IRB&Vt6~*G`thB_FksS?M%Q9u1i=90 zy01XrX>Qc*9bk*|SfZhorX*axKxt6{9zR=S@Tqfb?N>tP{w9H5;~$&78p zbgP~1CTuV!YM0tV!&QZ==jmAqgG9BIpSW}akq57xxK&B>K{5N-X(F@L2EOBGJ=2M(T2Uft6fgf?P)z_niVb^+oX z4;&yI9hEl8e-4+GSgO2HDk-Vz$LW{W3>(2+`sww2mxQN68QY>i?XxeHIBljMD(xI{ zHWWsH1yTyZ2!ZS#aEWbT1dmvyr4jkd>2s1VUJ%5{s4|85NYR>^S}NShcd2Ro)3Ii7 zI)P9C)=Mg5+vFyDbb!PFBEBqFxv0jPtJ96T9)ZTNJmPBTD3v)wQ zP8K*8tLf{fsZW&c(-?`)R%vH4EnhbsmD^dqO5CZuQ(?slhS^O)eji>H*7{fATOV?_2%w6C-voaS67MAi-SZ;r@+lIAA6FQ*TmF*puR1R zuGNR6DtwVZ6esH?ZRaumNQm~Z7A3rn9GUs2q!M;Fma3gUIuje2*iugJ; zce1`17_9o8g*=<{b+sd~fSSjO`nx{#ELKWnux&T$=ny6+PnN&(Xmr4PUu8O;u#c`{r=^hb8~Y9M0Z=hrK>jq zyh6?tx}3s=?Rjlj%I?xVB^P^lf3nnAp>?diNb;9)viy=CKm7X1vlAu5pN^3g#m2|| zhLv=5P3@M>ju*gr&|Y1M9NEZUQ-T^%0FfkscpQGnG^Mznh6-u^cXI?CObEQ{ zkbx4R<9ROd`N6g%A6n{vZ~Auw;~;q4c!RPT7atF`BcidEQTYQ%30JAaFyhr@MBu3{ zIy;)V@M~xY;U&=bHlk{UPZVX&^@v3vybndz1%x@&`(}7Rw6@}muyb%Qpi*}r9M{qD zr=LD*dbZ2Lbh~2Mn0V=0iyPcs3HaK$1`GHF5d{I}1pMx}#`*q=jZeq~!w9Z0b3+lB zo6$pJ3H{NqrV04)*=PMHh09z00AQh~iXI3@79g}91N4@XCjW*h$xkeH8;4=|50 zTt-oTAfo~F+2O4LLJPQ+=;!+T?YVOJ?ryLta3#8+zw4SC3UEc`BGrT0F@{e@bI#V5K=U}TUw$n}r|>QC+JpfG-mN+^d+*xw5V$6=`~wsY{x?=dB_(?`E&1Q=x-DqT!d{5226l^^ffSi;MKnH9Bk5p_LJ-nx;J-~ zf{(01W(X%5%EhC_h^;a8R6zd$e*&A_V_sfskXZ*fyw4xhPxR0G@%7q+U=~7Uq~TD= z^z(zx0Gn+*7{ppIr?DHkv-<<6qL{E)EEdWfnp@l+uzkCBO(Dh=`{O6hzPOJNp}?TX z$jf6Y9b~inIKddzQCQ(#49pPeb#87dxOd_FP+XkSpYNoe3S2(b1H)CrtVwR`evEC( z%C2acJ&Q`Sv#STjZ{_5SO-^Q5-vU>do80>54PIUW;pI4f(2_4KJ=6T+94l@tFmNQ~ zB%q0c(7xw>pS@!~I393lc#Wo2eYw|R-l7%Xnq%L;mtCT&~L*&m()4HcI8}x_$exma?>T(=W=xv0bSt`w&lJ(o4-__@jdD+2L{0kk?EmEHs+MmtKkt}^)NRp@( zYi9ox(7N^Mj^=~RuaSU@7N7Y7Qv!5h85WWXp%g#gKk6oL+5WmZc{dEzC(byX~ zIj3onU`tW3R#Z{>Vj)W?Z2u6|IPRLXv^%4DOUbD1ooQ-cQKcr`X~=b2kh-?ku=MvI zd2QGE9{Wxu3AlP)Rg`&~y{-7+%c{ThGOzNqyb9C-6Me((+}Ys<*B`=;hoj`a3VXCQ zt76^{pvkWtHfwb_G@)tz**v7^w(EEpPjb*XPxnN_zLP<>q_>Z>uRRmQIGpBtGHDWa z7SKb2zMNN3xtM-^n7ORFq$Xg~*@+8|-`8%+Z5Ck@a~d1j24VL?4NYvfhnR^r9lbK- zQn64Vswue`S$PhZR^`UCSp5J1Sgc{cPfIr2ZlHM0OBK&&&S_c=+#H%wIAxyN;8Ni{ zy#0yNk-8jJ1EEsUoE3i#jYqXN^^Tqp*-TrcKasv6i}H0YE@;<af?ICqbwWjIpd_{BI%Zd z8V$;!@c>VY*70uo@f-=9+lZn?>lH9!npzGaNypKzz9o_Gg^&R6-?#NTiTZJqS)~rn ztB$-dJA=0w`b3&_2X1;u)w=}M8#>Jn9>>^WE-n($Gs)}k>W~WO=X7n>ttLKvIfrq5 z;S=xM6~I*XBxetqZ<*Pg6g->j-XK*wFpfX7s6#!Gfe~!G;**Sv=KYa%-g<^tZLCYn zjE6IKexG}#qxUY;mnVIGMoc?u_0IYXn;{sd}-|Yl|oTU zE`K>K`SRuk{`qp};B}cbkhS?6pArQTlo=oOKcD=A>bl9b1;d^9EY8<<9`QO(`b4?F zPwOWVs%qK?XO_$LjUM!}7;w^+q3#!4WbY@tM&iJfj0;Uf5!*Qh1-*<{R|?d>RG3mE zVC4YPRm#>MUwfS!C`t_#g7Sm}!@AL1=dv~MOVlcNX^ZR~_tg#gl8KU!e-?G1V=!0Q z2|Hl~`R-VA#p0@<>Fn|Vf>A|P9ce{2aC^HH&Mien&6KSO(KS&@*}(_On61{zyl`d-(k;rzRrK*mjgEXST0IRnhz{{{l3QfmthSReh6^< zsjQ?!<-j2GX)IDY#YZD3#BjccmtF>l?_7=mxNsS-^w#zIbR8E;_29wyhz<-Lvt8Zx z0D`p;eS-UQtpD!xftd~0X4%RLt^4jX(w>jfwZ=EX1FO%!v~!T87~0}f0&l_{s!TaY z<#{n0QQO5S&cO)|2n%4k+k+O?!ri#yMynsYt9(id_LUZ*@yW{*K1eXKB1H*K(Cw6= zU%wu9cmw))WUpS^@cHM;$~&$KkR5VbZn~Fz+`ceX?1d5;x7MAd^}Wakz zSmAXtdj}U?gl);5Jj`Hls6nSQgMn=ZL_xG*VDc7zWG_Aw>?tCH8!>DTOk z{*XN;m%Hmu_-IBKRu5sY)5nwdJ_a6$E%thsO1K{+4kzwdV}vz3&SW2-dst?NQ~+r* zhE&}w8zl8?INgo@#;}Ra2pU^ppMm9J(>m^l2T>U?NU`{;P7q(34+sfyf*9O4F*r6d z_ez&hoS8)(^PGzjMx0u(GC(o}Rc+(v;NA!I3Pq0j6rE=3OW=B3-A7y7IJ#TVF>z=D z=tb;1;E#G(V<6=fC(lfGw3wrlQ^ahqqO6FZgl>9eCQ&!!V%`79c6;!i9f%ZDgxUs{^O&fmpnFAl*b|)RAgt%-v(c-f zZ}vr8H#9#$8QP#sdE5fNP$d%g+k$HZs%MM`DypNO;dn ze{xknb2^gY*LAp9TckIzd_|0_^z$A+s>tTThcp@us(7ondjQ&k!3~dc5Spi9eG?lS z3+}?>;$lnzm7M1Qz)C(gzVW>KNhj*1$dt)S9wM{(pu@zYoxxmGAD0^TBOv-9-%=j{3&4!}8CMJ#j9m=@D9t!H4??Sq^_VQt&EJk^EH;-4r^mv*s!{cUi>@mmIeG zhqz+%ovTdPwoTKe(pxXXc)A}gWf?#~Y{C=(c&1`G03obZSBGKFQ|AI> zzwXF?DYIDdcFlaA{5dcHY6wp^ZhMfMF!+ncx=+vY5#6J|v9bj=kB`UArb{A!0Vpc(rHWJ|omdK*Jy#ePrh{AEdjcfwEZ; z#y$e;lOP`Da8Yg{Qy$k{BDi_~{!Re#KWM{am#e8ix z+Vgg+Ssgu;@oE)Wh^f6IF;Mx!?@;<7&>>mlna{J5yYOBE0omKvH)8CK<)K6U9hKoi z{@eV-r8z+?-HUN?OzGzbs7L{{&0Jz)@uk*T_JV~QOMsUrvw7oXYjoa53bqImsKVBj zAgit@Xg8$O2S2_a7=J5RvVM~}Z7o>{*8}DU{TW4J95R#kZ#~exfx?129j$Imqxj_5 ziPCp1cBmvnh9Wgn;mob>3Kuuttlr+dCI2ad0)tY~Sh#szSgxMVJ|C;pda67U^>xp; zvsg7OT6DprmI!4qk{98&ZQ^%@Fid+rXp+jg* zavDaxmpR{Bt$KcmdQIoAhv_fjNX5Cug77`ZfdizDqyO zHV7B~9SSiLI5mLrvnUh^lWu*1MIxadr{qN~VF*)y6obgtn@Ox^&CIzl6+x>#l4a%P zp!O_Rw@jivnrTfW!_b2bcRQ1UBFT zu%#U%DECcBk^Iu{NIUGBdO1Ms<1B8}xhb1zOiHGD^!cB#w@O;6Zcu_rNDYo2sp~UQ2sDRd+X)O4Fv&Ht4RyKd98PzGKV( n=K+8EG7ov4_&*QO(xGk8`tJjJ=GQ*M0|=`vHs<%t4n+M2QUu#V literal 0 HcmV?d00001 diff --git a/root/opt/dmarc-srg/screenshots/dmarc-srg-report-detail.png b/root/opt/dmarc-srg/screenshots/dmarc-srg-report-detail.png new file mode 100644 index 0000000000000000000000000000000000000000..085c4b14ca7cf6963a652316cbd8e996273fb8b6 GIT binary patch literal 120109 zcmc$`c{r7C`!~9hN`)v<%2b*NO=O-jW{fgVDW!!>6&W)W5{je@No6LN3)Qw*+%iA0iM~3Gz}BSM9^cyY0mHRjr%Qjw&ewPey6IZ`sr`lCu4WKx+HZvmV(3Ut?|}cgH+$Aaj|WmBd9p}q&~Bq zl%}QmNKPZi+Wt4-p{468mGsr7uI{;IGrL<49y~}>V197xgp@ww*a@^j{ zq+bx&8On(NehA!c%=_<$s%`)8y-lyejC~%}A-;Q`r$_2PBqt|FL_`SXAKbZf=aVN- zcI;s`=dJGQT5C(a5mC^%*xcGGD=mGHk&%A?e&+%G!iRIWe!M=rzOt}dvASNMv;MBJ zp@G}5U@bqCyeQ;`%hYzlw7}ZhnvJdPL*cifp`q#N>8dAhrnTog{-vg*Y-(;UH~Es5 zc0wt%Y+#0wk@5Y94<{5~vugOru`>$WPbX@oT;S!E^<(69Tr_u>+#|LoPE+=HH^Yd} z(9n>msHiY=N@{AVZq{82HaBrrF0P5*-ZOTSdQ41A4t?R_;S-%%V)oPGtTcF&g9i^T zOmwz(cIqZ+>B=^Bb(x!+3!Al^mX)pK5xWs7!M@j`>uaj(=0;0P%LH9wQW7Nv#p`n> zyNK2GP@c=WX$w_wV0-|Nec&jwL6TL|zu52j)Em&SY-l?0c=VyV}!khlPf!X}@^!V!lMgaZ&i; zEV}{s$&+%5ig}KIxh3NY3JlcMZ7ZG~R905L+E*FCQv2q-td34jvIhqzr*7_piGj+1 z$CB5bo%55EE%fvb`<6Q_j5Xu#)O~R>H5~~Tuodk%<5^b~bV4)5pvEYDqsP9`W&Kxy zvw}){>J6{lTp%+-*OW-GBP@2`&;q+`SS@{LM-=c-->MA zy4CmTQ+IcF9T7Hy9KUySkyt}tsn<+v^C$h>(_CEgfleE1%TK5dZQsLun1SJGGjO~{k>Buls{Jq(=8^3-0_;F25O#rjV zm(e}r8(*6{bOj13G7jEs6cckWY;6s<8%wKBeZ`Fq~OxsuY-8^*?iLqp3> zF8IxRXj%hb%wap?R0REs@_`Flr4 z?^sxfI4w=T;$;zY5k7a$W}w3F(i6%%ckjLxvYV_G+jLqSZ^s?!CoA>ZGu2ZlcFjOq z`ms&{9)7m%Fg3GqTx{$Kx?LgM`hqTNOF<`87!MxoBg5zEW}3HS$>9I!uxXw8m48UY zf%Hv6cnp6N6XoH{l!sPY8KHv z`a zyDQuFcBH5?jikK1d{k7FLI^h%1w~Qkad!6UIq1W&BkwQLNaE7Dd3Y*M+{BH>8dp+O9JJym zbL-9OaXG|GY{JFFzsj1E;5>E8q9eVkw6yf+PwE~$!djX*%gLpStP~|(T~2>mlHb04 zYy100)sG(^hZk`}QJjW6!k3opFJ8>j;8avrekQOAGth_PuE7xvHl-Lx9PZM!j zI}kfKI4C70r5GW2zr=Ir?CdNB8@(?+IS$q7snmOF=9gc-%nnusEjw-C*$95E$_fbz zvR$4X>h0}K$@2aE`}f1S-;bX>QDeJ-?~3m|YO-tBuAkuo`{?OgZ07DX#$0(JrGSOf z(%5+D+)WBe@2Z>IckIyA&@d=;iQq80e!cI~r9A;CY^5b7^YimGl4@#dLC2N)=a%O! zT2l-IE`@89S5)X|YcH>?>?L=j`I42@gS{UfeppgYMy8^o;z@zwv17+jDj66;{4e0k z-rd|-*U{0jn9#xF9Cp1!B=#pYG&FSQ+Nr!bCw=MCR<^;>(b3*s8U_Yg3n8ms@xyU! zo@8WXlvGrI$J;LrF&;X!iB0kJ=~Id*ZvC94)l~+1`rm_ty;Mbv{--m3dC@FPX zN{8nf8yj6WmWKI{BK4taJbPy98`yR}xq@?ue)2FLX6BGYn zcg{4QGp&2K@Tax0+RW6nE~OUVyD_q)rMa1wTq0thlVn`ybM`8f^)d6>u#2@VEw4Hj zQMsd|qdj))sYpZ>K@Iz0)7;ebTJgAZ>x63^MU+9lLv&0Gs;1NUVFIf)P|qeucg}tE zgIwp;OmWtCd*3Mj#?~<`bWvL05kS-N#YDl>)HE?zFVDWdx?17#We!%>N0kHmIrrk% zBSak+$I+Lu1Dmp%aG`$Bp6NWHwz07ZyJ$JtoBA?1*rGdUKbw@ZH9Z5v>dMN4i4NX> zuWPchCs~nV-KF$nO8fM!J zHAE|9WMph?Z1CrK`}p|y`AJihmzPs9UKqhO00(a0zPkVq?1R((#~WtPC_?YQ_tuOVfQ} zd=^9^@%^r@e8-DCJSh>kIVLEmsquJ}6&2a#XYqUvUA)`W(C~gwk;8Pa1lkxLsTVa9 zcA~DjdLvN;eNW-lX=`ii;`J$(g{7GrZsJA8sYi|;&Ckn2KLXmCk!>dq?O_%^z)PeP zN%f#I3zlQo$+)rPCa$96EzHliq!`u?&q*Jtf5oLsP9~wtqNk?TfPx-py<72k5c4BI zhMer|HyiI}KI8y8U|Zq#`CF1b@_eL4wbnT@GD1O4mYO1RxWBBja$tuM`ui0PjhH=( zF+%sp=$L7zCMQ2dM>i8MnqIne3Hxwmal-8G-N}iGDop0V`m!Kh+Kq&_n#WDyeSZ<0}NBz(` zP4D6_EwW8J)p#54ORsX{nnF^2SdLNhx(J-xWdclPY^`rn?;(Yz0w zJUp>t^2BC5U|U<;qeqWs>v7*b5LOez(1vdMXv@})vAf)-PO-_`pp(@1T11l?(2vb(dpTVGn*1Zc$g#*t2U7Bv}Z>4mAD%^z>hqYJmU zx4XEwu!uUDYV)5uRaIT>OT4z@Pz$xRw6v~nCyHCRkloLk8jJoiAK3ura_wu^uAMt~ zZvI0NQ)tuq8#zr)O(@`ic;3+`PMqlM>Qw5X_ouI?eWk0~jIruFZ;y1H=x>&(tvxR7`MPYY`3)vH(Y^73??tv@z~(V+TUy@onrWDu zpWgrXByJ)nr)!@kYK)|!;t%YnQRkT8;9wNAbyJWaYq8^xf6Y9NEW>`l`n-}z2QC(_ zJlYUl9h<3s`Eo+?l+7;xd!xa=6Q&?%_-uR8w=J|Ut1)U7zZwYY$d zx2GiIumD30T@DI8AoZ=zgiPGlM2%zzphaK{>+k5nXrD)q9ML-c>gCHORLvhhegF`0 zX0pi#V*Ac-s*Qk7-~Jh%eW&p_kr+%}!Z0>0;<~MO)jg4ZEs;bag@ke~dkVO6-_z02 z;TEDCZ~jRs1TW7^W&}jHpZl$}@*9ts1aXBQ+USPaJ2*U;`sIvf-SmMMxCh{>wYj;E z-=kz;rlGMBC{dSb8;{JTO9PcGu8MMUOG6=sR#v6A(ym>-+TqHZk(v3*q3zLX@`Vc* zrah=u#LdGyTWo#()ipIO!Lth~CmDaw*f;GfR$cdet)H@xHL^5vS$BrQ^qsXCAI^b}8*>ZEHJ8x6Asocb~PK*ADst&Q|7CZ|e!s6`i&2qgVa>ZL|MLO^%u1z;AH#c`5 z`HP4MrRd&YDx930j*hEddsqxMJ2%!>X(hq*K`1s&-#sBAN|Q4O=C!Yfg@yIxJIab& znq6Fs+5A<6^&)+Q)`jqdhEeE2Qk(cfVBp@=VHJzi&!6iW8cMb1U20b_+%&q|ttDPhM`u!%-afrz=Lys8{vH z0tl6rm3{sC)&FlvZ=_&bt{o3EpXmLutH*<~iOn2qFAMXC>b~{;b%@^v<2&SFetEYJAdbANzWQ z#8GeX=dfLRa^T>>b>J?nZ8A3_=uF08;~)^dMQ$gQ!%gqc0aC6mFHeB>%bvjJk)*fJ z*GorK97I*nqMV$Zz#OffD+LasnVJ!aBSFb!<>h_DXHi!H9_vZ)(%uk+fm&TI5J>bd zp0)0VuuS3sN|~EC2b&W$@uogBP>$9H0>tJQ7Rqzz_U+r}x;7)ba{etynQ&NnLtt6ic)>o5^4KVFo~(rSBv>?1c^V^&|ZKl_6zeTRS-9BqWR_ zX{SN4^YHBkSU+;49~c9uNl;J_CHw2oCr`FpSWH|meR4%?AWt%mxQ|U%R`LeLBcSlA`MB>VT-fd^v~v4HXf%n)awnFV!}(Vw9ku zpdjfZFH}!n)zsXxb7z$DXfUTHM86sK2T)(Zh9F+X{N~OEkpP-OZ+~{;&W*HoRJJB3 zBZ?^ON8D|Y-WhvgT+gXf@jx_kT47t*)=u_G7=N zy6Fj`2j|_$2nF9za~?}ZwM{9Iu?nD5-Kq)AupW@1Xett;%iFPwuyh0~8E;Vt{qOHx z3PN%sWNvT~Sy!X21fOlr?+9y$6yFLj<57WGWAj3?C@oZhQPFEi_;15v;QtFR1E2Z7 z=d8H1S50;Q^IZsag7%;O|8-#gx3Btt@q?0qozH|+AEP)TD!SpAwN38nj~|MF&7_8> z4Mz4dD5w)6)5W_D=$!5z9y{Gno;9jVVa-#m#$np%Wu!w78e(xG6Le9J$sg`+SAL+SL#S=8Q>2()_8Yr7Ft_# z=)S#s$0sI$?jX%X#u`+fJQ4shSARm6MZ$A_#jWLTxiP$A0FBD5BQZoKp1*omVwfR4j*oMjUzJ&0Yn~3mp$- zysrzG`4~HU-QP|WXozXOU7*zDxDthCJz#G<4pc-m2KVZrOyNjicjFyE-%>+w zMI1F`WPU>|WtRtdQ`6TM;p3yfy}mpgiRb6KzQABmu97h@Fc5D+>MPJFLqiz@*%K2I z^z`)|=SPZ%=d33IRA3X5E}m}J%x`iDy{}eVhH+8%%e-mlHMsP?s$#WQ4!mGLNKX$1 zB|zn9WbGa(0KvgE-@c9X?tnjQSgYyNEElNv*=UR82<{f?$-ub1r>CyIFQmHrtM$=f zHA6$!nSN=9gKpwR#>OPi1|Q*5PQ;34m(N_-KRGl+g5|{hVhQblg9bIVwJd`7Om(SN zp+09>bjl?6b3TB5XPkSNQ)6{BHd4lqQCda7ZZce)wW#{;-MjX-*e-Su6jBTeD-wYf z?+mxl_(<^|AaZJ?Ve^^k2D0PBMu*QFKQ3cnz`WxHSb3~g7@8ek@y$IhtA4xUt%YbM zLD=nixw)y?q?oqJ2STk`Tbi+7p6)A!1pZD_6jn%YuTkD%dU~0{?bAm~PpQYKo`Pgc zAWSbfCC?DQCdPgF5_lPp*BYkaxpNJzt?0*nGxj7HUfX8{2}NH|4?NNWz4XM1+qZAq z4OCFA1QkNc=o4$lnuH#VOX61mdSa!Z_6mCQX0*Q_wd4{_85H%cWMnjwa0CuhS2j0i z4AlI}dwBjI8yg4zz+Q|E-^JR8j;5uhH8L@w6#cEL>Y=@TT{T)?c|*e&l}J&pi%?XF zu{Otp+Pk_Gllx7gRNG!W@naStvFj$H=(|k*|H=X=DN#wv>Feho%>^@s&K1o^RE1yYo>*(K;!jNU%fj zp0@#{oZN(jr#d8M8jK=CM_v6AjVD&7fyucyBU3@oXpYE#f$k~TSx`_wGK@1V06pd8 zNItWHKEz^3kMVja0LO#md+x8YTp$pfL=2Bfkx8#Op8Q(m}jni8%BF`QxFHHi?A=)4_w<`ug2{9x{?qRxL@|_S2Ce zA+1n$;!X?e)fN>!x?Eh%9|3-B?;98v)>(+onae6a3*8zDF)W@@*VnJoEFL7$1*o#_ePCj3a{?!i=F~TZiVB;o74` zMLIorbaVHvUFeNtzw%e{z~ut-?4}IBA=cN|7B1!CgN=k)~mU-3f%D)6zp^IXQWF z9NHT;f~Vwld3hgSU*8umu2@)DR5OC9-!L+Il*^m?@gqA6OJqrjWFR|~69i2_264e< zeCCOJnyRWsQHbz;oJ3s_tss{Ghdp%L;#b}qm(4(SZS*#pP)JqP4j?MvCac(nsq>zm z4l&&Cr)_%x=ysTRN*PQdG7wbdmCow z>DCyaDern*GTIo6H$Uomn2G6jP3ZlRx+rXGR!``90fz+|X4%YkOkjsWxdi4w>qQ); zskQa*>@3HrQ^gR0b0BC!gr(emNn86N41PpVK+5JB6_u0_r1(|nT6-%EpvpR_?gdn1 zssm??5YoY)MydqP6xJxhJzTpXkMpv#dv08<>gm~pN{wYo5rtZ5-jP0v3q=uZS8hy=5wUN z7tymLAvTr)S^_Pt#A9{%^Rg67{8r+dmUu&05cBosr2oC#X8yq1`fNsWLIQ_~@8!yo z>_{qC=Z3_+zRL$FD@c;IUN#g4vc1ys@;lk29^!4j;L~dZ7 zH78u-H$k&Q>*3T$GD_8gAOivk{ryhH6Rcr>7BK^5lm@Ej$?j{f- z{FY~qMEIKYo0>m`)v8mqXi2KYX+P4zuL^xpQ%*@AC52K*u4;9;P1tT@yCZx(4w89Sk*(LmJ&i zQ=|8R z9->eN25)r`ExD?uc3DNGGBJQfY_k5tj`d>%IAUlpSXcF%RIu)0e7?_okJ8@`c?;2z z-ABPV0|yfGbP*bRcJMrWBDcaH{D=L)4%*5BchjGK=lTcFSUp8AI3%PHHou)LQXqzx zFF)NlL*Vhvk2$fuaQw-t#@%0e+6D$2^?YgV=C}_lz7$+SVF)#`JzD*H5a9s{n)y>i z>!}ly4^t8n9M)Iv7x&~mm=J`mf(8(2CE(5BY&J5VvfxyHi5FuawD^|iE4qU^kTC$0ju-|E2wn4Gj`%Rtm#REIKc zhn3etiAaR3bI}k8OLqlLnslp|n_(oqOGpqTeU`)T9|w;IJ)9r8lIMU;P3?6lU$J+1 zIQF0JC&e6~sjojVHN}GxS;-s3evp>7_*UACFBwdWiTV#-AZHmLpqzkyrY`nwb^y_U za@WM4s{Mx#C&k8kc@5(W zkB*Hs^l-gfZL-@v{W8J+y~GPSm_?6i-rw~^!G~JWzg&b3ju_3y=xCCZX^Z?L1W7{; zjVD?9X}73WdX}3%Xa3eyP*j8fX>ZVu-NE9r6g8B)4NH!ApZfv=Draw0;KsVKSN)yp z`8(F^>r$$wT9yeF7jlOm;aMDWvtT^+M={qOueYzfu`n|eRjC3@f*K3?_{_zN$StL1WJGV&1-ZH^96a>zb>M)MwDgt6moN_OMjNED zW2%P$%wPZd{Oy|@cL=$V7<*eGaz7( zd>~xGjt+;SM_UZ-D;|+U^oG)l=ARoMe+R4CWpmvwHEXwg;QY)C+!*_|gCW(?CB6_f zY_j#bygtRmR1Dc5J|}KbK0JpdZ((B6oOWA9U0of@B|iU3Hr`|x71cz08mzfvUZn>w zn9{80mqRRGUz@ANt^0?eZvk_Ba2Ga*QK`qx@OKjGtW|aw3V6fr!@~A;Xf)rxc~=i@ z-?r^aVTic3t?dUDf`Wka3Xu5+kS`#ad-v~qxVu}WOYNkj9JI*>Ut5~|P$;giruGHi zqNAfDS|b7n_<=ZSc-hA0+{O^+`SWR5)M}$kTvM;6e<3dc-x_xBw7^+jUM9dR7{DXE zk^I*0!EJD*0M$UqNQJz2*+G`;u#kX#UR}$e^8Mr!=ERIm3E<{h7qqvu(KgHq! zK|RO9hvys7P*(dqBqR$KIe?WzKb#ZX>jKT7f@o!d2B7sMz3jlZHYmM(Ve4>|c#;mX zdcrexgtsu&O}h3?f+1rfB5g2r{SKZ7O)h|8h8OxB3|BB0l7Nol9-BU^j{eRCmU&uZ zz=|IWwAYg|)V*-h|hSS1fp(GhhlsNfbY zg>zMCx3Azu%Ds=`_dFZV$cVz`46X3k-{IAmML*@Bfozy zLgiUuGY8PF9^yE8l3z$DHYR2-c@zl7#6*)tDAew( zlL(jQ4$kFwxF{`!3V(zR>*e-Y9BLD$L$5=Y#6Wdl~g55b6$tiJU55j{AMm_%0K0aIFkr8hTeq{QQg$4Jp$?ig{bK`Kr z()O&&x&H?yIr0N;TMJ0h9ET-HQX1;&VdqSqs-9$*w}E(ob_bb>UH(;YFf_v5Y!{&M z!GcLjI*lL-{u1BCi%=917@Y&L0uaQ9Od?eW@gq(Ulu!l6X9$$ln1qBCSaE^u+sGtb zTna$=qoapF_(4z7T{m6s+!@7R&vN((F$z1cxY|jyr=lVTIu4p8yF5&wJd{i#oa$eoL4S*6!Y6pv&sj8#*!l1 z&`KdQ{fq!_h0_X}h}-F z-8*-_2o8=uvL{LvDJP`$pK0RO`_bq?Y%)+%QE^4A!hf5(np)iD!-o%#q;}xxkK}@V zeVpq4^@}8*WoI8uLDm&{luU<@(8NiQN8rd2_o|y}vFPQ9#t)oie-Zgr|=()uKF{#fL|VvO6}5NScUm`FrCG$Pb=%Xgcw;$RMMrz*A+d1b-uc#y#DpNBc@pj}Lq5%Fm5EycVh0Vi0~D{#48(lglQ zJ32dU`41m92x5+sewj?$gqQGYn)7rCV zPdHR=I5drknmh@gA%sYJZ!m|uxorunsi=k|f@A@{I7QU|lo{^X*!+{?d~9s;aoQ;S6FN55}_plZ`_qH9&L&rVKDr zIa9F~#sFsAfpi}~-X@y!;6Z&`+sM=uDj$>}+?eX>>bcq3k!`@+A3uJKt0;8*`>8pz z&xni-$+HZ&$Fj1ruw@2L!>k2J5fl)>rpJ)X=3=KM-Wm3a<*=OCLR|bF>c3TLe!$J> z<-pBMU9Fl3G2AjXmehA4C1RfRaVm}PO8WH4Woi04z6%`C5pC30>^A!#pm5YVyJ?QG zZz7U+9;$!M&OUbHL{^Uu2cFcE;-$@t1t^h-g{7xoFt8Yw#1PnY{=JRdZBR1cI{hcZ zR@~Qt_o0=oPU7;LO56U1l!GzZg%VVAut%GO;TJO1>t$<7ly z12&hB-3H{`VT7pLV}Bx8{f_Ga~llcfCmj07tUSWA|A^9d&23~{l13bySYGo<|M z_|PE)-_BmV7#mwBw%aMXUOkQz7R8o~rJL>Me7^>RKE3zvI%@nlzW0lXMq+ZbrUDn@ z-_8w>$${!RS2?EKR+g4tzkZE!+pDFdug}DG;o3nhh@H{(_ASNj=bJYbA)=&p-yP~v+e z$Hjd`mS*83HQUSAuYn%;?5BHc6X(wR>zu=i^Qx;a}`~ zLwtO8ig1E8RSxtiLEU?!cxy+>`+#3ZAssfEJhOa?jF;*$w9U!k;Z_$jA$vYlZn@AD z-rJQ>;80;hxOAUrVvmwyF*hpx`qX1~p#v%t zlap(H{GgcnGZd9Z-`Gkx|xb-m2By_WUPvTi_%D%BgYMFDtYM=tt8q$M6|Bd8?r=Vf*kv0 zB_#{jmcYd+TKrwi8VGw)+*cQNUZG>dK zdj~91ngVls;72dmePW}|{TEZN`uQ{F^2+kEfRGSK8fJ?0fGk^D79rGJ{RFQd?Uo;0 zZoJ&wB(7eii>$5G#+(QY737d%E}+)MTs(d5TwwJO1PD~rAoe?EW(vWI3JM=AwNzC} zql{hh9}^Sd(^>14Vxc2i5A6bBdta|x(EPIQGk-}-gKs{=x(@wFbxH?8Z={)6JwXh> zBS*qi=Mt^?!;dMvl9G|ZvQf*1bsB?p(@HbQ}aL%M-vEI|uH4+l*KNJg$}bv6_o6-V^{66(NBFv{n$x=xCx)Z7w7*X^7_zN4sh zIyyBJA`O5Ia@>&nNbU?Y9`IP0N5By9*f34_Rb8ju8v33dw zZ>SA_V9bGG;iEy(t#`=>VlwGGzA;`GE$4+dbnO~1AU%5(Ok1e435kidp}Yzw>5h0lp=Ls0hKrN4y3Yza zh~&5C=4;UZk^bP~qGG$MrNw`5L>0+9YOl0=qiU(n8TWTPsU4z`M56$|3qvKu3nC_3 zDR!V&8eD+He_9jn4y`1Fvl3pcMi^LX(&I|Zh5wZWkbYd+m!y^YK4PDmy83zK0`K|MXVyKF2j^u?vWNPR~NThM0h_DLVuv0?Pb~UEWRnd1Ry| zfY_Zo0vOl;9fpl)sH5WmFmbgHr5ZxlgYWW$O{sa`n@Aj^?IOV}K>@Miv8Sgnq?~`b z9suXwSx5)1b#$wf1Z<@`#34PfLui$24Hv$3(QSTk=N%9sh(&_K6LF%vTm<> zr|Pw980~u%85v+Fh&L8>Uh$SX5{?DsOVg2hV~2bo)*J|-G=%^^f0ALLC~oq(b9>qD z;kIei%0S9;Ibv|_8e-}2d}3mLBT_11f&zR^Q!|MDA;yB~eKSm|=~oN@tg_781F>=M zc43Ao9&V*&+h;aZ+~G)9Oj~kuaEz7hp~hnnDlkrx3H%russjb&pA>=`)PxXhToO{D zY@Vok9-5dBrj-N(EJ{TAqliL~E>93aNuUH`C!kpUUj#q1@Bh&t20v|%yM`by1|IXq z@X$v`<%b*`9nZh{0j1dG=XDR)-OzWby^bPqlmHfvJB|=fA{GWlpY4~CXrPD!l^lH3$)FfhPX-pZn662IV_*i zECSPA%KR6w@0Ktlrdv}|+XmacZPp%=$!OwX>K$xNEy_4QBYldqf{5P%Q$x{b^OOy% zH>}0U6ITUel9Cij%<2AU!(&zoVlZQpx`svz;vaZUa8BUO(bLhPqPdCJDJzr_V-h4O zFhxEJj~YZ_)qU%>&F#hv^17{*%-0^EG2shdG@v2xFTwn=PoTd<|D7X2Zbm^d z4X}*@@J&=dd@I!5=|SRQ>f6wB0q=?$;~5wjFf)tDS!;XyvicuHurMZs*#L|sv&xgO z4lqe%w~m+?DfpBn*0O_e7D_5sFC5UZ#@IcW11%IUBO{vq`{7<$ zzXA>i1_G`7s&^Oo5~2XW$wA8PA=S<^{f{FfBhhm{VNht5U7j=`iG5|x*I8VA9SH(l zIXDaG1?m_gN5E8IrkEYU?4-_pYil<7hMF4q7qpw15)hQ-1EEDB8UW;CXwO_E_Oea7 zp{onpkM`+TAP!&%@`3i(z-H>|o|CNMr{%`rj&ezS!iAwQixBsRhl#Q|V-g-3dO6d1 zx0B2v(ibu^LKdAg+zvJIs3%--MwFuG&)>m}r9p2+$doj|n}K5j3j1?|t8OCC0uiP! z0oy$(IXRvo`k}Camey;OPR#Y;$-z{VV`2(6!BV?(C)=_|G@Ls#1dX%*N`g6`5T?z5 z3t+k@G#J(a6xK;>wg!>GmO(NA59h#v15Q&Bs*3Nz+PF zF5HF^3$t0>M8iJ`K-MN1et}gqIY0r}XM0RlM21@8v zLHR&bu|onj>^~tp>41h}>faJ}&i}|~`(Kb@-5_qxSB%XW8hguXZ~um+K)!PEFT0 zB2BY}R*HO`_)&^nf$mC^_sQ*!mTm7-Wlrx5_1^!PuuJQ`Oxfjql=|Z0306&=e*=~U zrhZfVtDikv<+RapN@(uK_>b{4^|uj1nv#-|vm&ru#~~H&<$6Yd)qX(O{>)>^D_5>y zTwh{CJx1{$rfY1_+O*Jr(Vw8c{CKH-8d%&1Xzle(`JM3R5c}Xs(8`NEoF&(Y4-fBx zsZb>W#|u3PMvUTd$oXN$-&=V4=c#FHVtTF|1GKKFI1b<0P<|!30tX$yPy1)s|Ln8E zDJvX0%g{w%iUqxVDfJU)WSAgLh`?W$VQ@PF0ihTFOemme=q{??u{gF8K!SYsJ=|DZHs{Ml6o%Cs zj|SHOj|H(M3aMPD7G*yz3k%P&W5I!eWD$_> z$Ote=D5Sr_4Np&>hrvYQj^lrV|C7|Zt_uB@U_{dQL`29X0C455Tsh0iO6XpNxdcNB zJb&lDkdF=D_sd1_n>MereIrro*UmgSS?w3145*`q+tq5T0sjo+_91#As;w>bY zUq9TbYG43UA`^#Txw9gE9}yl7>dxt6K!zD?5Ipkj+cCl`9tjT#NQqE{dvYZmv#xEg zg#-o3)w}}&ye!>5ed2a!g<@6jH$CJRj$Uqk@7}mVV1fPm3NOJ3BZ-6O65`?r1gzEP z!w@QlYr_6U`M}Rv=-kG-&ZjJAVgk(lJMPK{ltZZ#{Ft#KJc1;HBK&Ow2PYhaW7c+z z#@EHsYvfkrRNQQ{reQY@V>Rz;J;xw~xHOt_~;EV6Kg|Ym5dqgxLBU ztS~x&-Qqqg&=e&aDIBx_|GjW^GPfX*gPR+FjX{noljzP0feE9nILnLtu}?ri$n)o< zhvHr0;%1~zHD?%$8DYt&ACY1#%jVrV&2@D&gy#Ub!Vqmy*~Cr`?P+dCG4=|#qP_!E zKFAMq0vCX9fNP?W)trO&WpBGLQb{vR_~E(sN(c-X!w^6oNroQxY5|WD5P)2wsih?$ zJ{~h>bb`>&2;#7X@4*>bdcRjzGchjid0-$CO02VpaFBwC{DBmv4Uhds8&s<||Csa&mKby3?p@?$h@}PH+js z9WUm+U!>fEu1_EU$b7qvfdc4yaZO}&3=E(oe}g+9N^T**ssC2l-mWb* zX?Wb8if+yj24zh{Ltvf*_R|+|E1XAXb8bF9IT<+CQ=JT4o5TZgj!t9a+~VTT>gr1u zGqbY1yu2Dm@1eD0t-N|gKU3a@9S&0UTpdaf0x!^p4-Xf)ZG~aipCSW`vaGJ|jIgj? z*;@g3RzSL~UixTkfPt9c+d|08&qv?u4ONzv-9acSE|vi0S5le)%pvo^!BC@^mSHKyjbq@Vj*wYhujI8FXlE7W%3XPL`i_xb@QgDQ_Cm))xyp7l-6+sya)RG z9jNyD#m3%-0%~G%>>f-6r`3rpwC=duTL>7b$Bo)TK+3r-)uXg;K4%=#D8 z>@#xBGbS|M{A?i0N(u_T-rh9lYhX65tgc34P#QB%duh1@1lm#Q5o0emRtn>z;(G>M z1Sq6-k`9QQ|0hmPfm#I#mvnj)>*N30{zur@*lxX8O~yjI2mp8l2bG*h+rch5?|cps z5ds0xslgk!ZnboGJ7X0EC@29(tEdEo>)@+E$ddiIXy&y7cR% z+hzM!Jn~2CnMY-w(NLo(ojZU2=&GE&JTO!e z0yn_T-)zyAp(>VS?Ky3=v2)=AR8ce;?0&%9A{BQegBbl}KGYKk_zn=Q1YI|rTwFFt zfd|}>TQ!XKH>|BwG0Fge8wv^-lOqZysKMEPYX;}a{Ad1eU!f@!pdl-Md>rS=lOw!1 zBdh`PGd-6MCR`H{PKA7Y`}Qyd6Ql{mT-IJoMj=SGck)F9j{6|VPPK3SG@`4#Cz;-d zDHVQry5z0yN8`@wf`yE-2*V;x>-3!I`@<_2F8j5OZmKr@mS+y7QeekD+3r~ws1iAEX zPXU!z9`4P7+jyw>mRJmjx(aeIER7em!z~1aZ~;GtaZe##;r7E>UwXg7?|)dp7;`TW z@&?l|jD`BEW2869z#X!Rnu#e^V_a!T6vELUqoEiUfhe+tpm_W|R3nVG6mD(^5saXY zL2Ve(g@l+3JGnnRkTetrIN?x_17o%jAknFk+pk0V?{maHBb}{*nOQdmkJmUz2%P)5 zq2*xSN^n_EPh`1qRChb}Ba%V;md@2yQ2!=LXjfL&7!0`zgobcIIMyX+UbPX*l5#V$^sa>Pg9c zER23nL_K@U(nxC${1So~fdFY2NE1pJNdP6_1Svf|J)Fhhb_C}XhIh5EN`AF-Qca^} zz9!1pNA$#W%4JkroFIgG_`y0PQTW1`7#T0WYAi19!&*hE0|g#0t9A%cj#OP2DRKJ2 zDFT6SJD~`78=?OHet0;E-n-392e7amUaegE+a`s_Y|DAtKEW z%6uqJ*@To8_X;Cn)Ao7LaR>xbb`;HzPy{xLxsAHA0)S$;qQZ;8Z{DFH7zzZZXqEdn%Npk~7)xxkoaKZyMlOX$A^IO!EO5VY(nr9Iv-$Fnxx&`N< zTE0Y&tbKj4bn$32=L@URxOVMv$DV^g#NOVdQwvan+_!{Y#km-Fom7y0 zOR>IbVghi4bC7U!mCm2}>FIZ>CqL&R8c{mAJ?zNC7@7j(KKE4+F?{KfdxDfWwqu?D z4_Ap_T4JIZKs`z1(o&+|0UCg9gfFOQKa&m%7!_vlZF!#+CLpiZk`XZOF@Q5ftu!(K zFmT@0;cU&aaVBTpLw#3$K8xrNucGfn1@KJ%@&*&F}5rPOrMBr(V!p3Uxcn-(` z0zKoH!(?iA>CtalvxOAL0Q@U^*LXYk38QKcl1BNU-Wn z-m|ldRg1^AfEsd!kM9Y~7wkVYYvZ7}rN?~h{lalgr`*jQQKW62&~K?tAQgvSj1~1Mmb!eS+3|4hy=G64(YEu^1cq9) zS)?VcbHP%m4q^_%pm-P_JV7NfI~lGPFI%>~VU`w(uJ7kygwgjGPpQC_K(fX07i@D@)nzue6gLC(VoL*c`xHWls+_H3> z2Z;0NB}B)?NlwE52@n2j=?#nd^ZSrNfv{*#9mh~7Y2rJd-MjaJQwnkC!1y2Gf_U2n zL7ZCj^sE@yX3y?YHH?qKcO`bLqOYW20hI%9p>DZo5fXMufgBnMVb4MPoEGcatfx== za^8VXNa^{%P4nK$bZgfh$xy^o`_RqLj7?0`4Gq)iVh9>Mx6HV`|L{?%L4WQ%2pb4~ z)c8&7!BQlat(J0FvqsEvIypTO8yvC7cJgi_ zeSi=K^Iddqv3g6GcS%KsXZb{Ugs;O?3NIZ1;&`@_%VGLY*yE4)o=&=$g+wa$!~z<& zSFc2ah~Ueic_+3!c;kgMmDNj^7E0-_|B8KSK~RMU8#S~ zKFPv3oON`1pHPpXUFLAP+js5l^*K@kfKdq;8<9)Ljyv$Rb}!G2 z&=7o)<*2D5Hp2%<9x4ow!fOH!#u*sg>ub3O?F+(qX)98U_pR;j2oxc4K$p7q6am7Kw)A{oD zUA|9u&mjY@r-}-Vj$#vJG`0HaQ!#O;VxFZXywLRZMs%XEKRGk+BcQ?90%aR2i&#kG z^wTb}=?|xy%{akchIN`PSBRVl0RY4)Ox%w^Z2OZ{kp!T08v2qg6VKaLiEs ztN6Z=n)lIf@-loqxd>%d*1G+VO0k2`P?@fFavHWgaO#belpwMpv_2nv7+>WGz=ur{ z_Rlm%r)MVy3&sEvx@mi9#&#T@Mw`rRoq2kR&Y|>vo@QSG3^L2HjO&4q?Jt*%H&j3iR_zuN)ZPI zK57oRdHBaK1ui3tgINfM39zYq*ttXnDQpB&uZ{azP~qs3ycUckGoDH2i!zkbq!YLn z3!Xm*TveBeO-vltzdwoBlF~HA zy+}hwLhE^i$5k@6hVEA(5?CIV=@Bv7ojP@rvI?ykH@K-?M~#$CA?x*QcMttg;TW43 z@u;+&psa1xY5#f5PVJ?nn2O$|`>4J@ariJJJFzqEk2A0U!37RV=;%KVFfq{dHBJBD zyC2vBB1l=SwnOpbu*XP^BG6GV-mk+s!vOH=0A-V*4Oq~l;meAiOP4Pn{>LKhuh!_* zf{`C%Sj79*IV){GZ&H~H{K z#QWH-=-kB$XTtrGipt6V%uQbCNmVD4Oq^x%-Qq`$Z%z4%d9P{QHN%g@~c3{By@ zDC?RyrRSv!%6&qQlhV8&zw)mp&x!26chmIb7{P*9y zs;U#Ws?xZHcb={zK#%clOhDJO zW`pxIkO!1TRqWBPUrXgZ8y)LG z;%w(yDn0sq{ietMcbm6T>VXMG$Ak4XuaSp*45F&nlJox@K#0zx*!sR8pwLs*cRR^5 zbMs~slQ@zdiQiZjiz}+BStEmGVNx;+j$t% z8ZZmL@WnUx=r9>0L`yPgP&zlzT;!Xntb!n&-Sx#b0m799|D|)2nNoJ;>g9qlIUHo%k{df|E@#BQfW94g%ma{t_KQv(mm!`bgmSp7yNvBK z9EB{m>x)fhcJ`uq^JdJN6}X9l^z_8UWeXN~{Jn1o))2zWRwplZaF(jwR+v-Lu%b@SC&qqTl|NZ$ug=RS zLJ7gkuS>ZbSA>AZ{47ttctJWmp2#t^D7q8!-O`>7ql-iea6e2=%7o#Xux<{5YuEI; zlV9zd+QTDj??AinPUx**Wh{#PJN)FFw=Ba{=4J;ygNV+wq}6Iqf4UX&@Lw04H4;N1 zb$ae<^s@TpD77a465Rz~>3#`su7jF+M%271Z!UgOV$^IbFcpN+SsEio+_rrn3or<3 z=`e1p8Y@7i)IVNE%*yN69oPK`(KEJ&xU#TNQ{&WBN$OyG$nX*0ftN=iGW@#!Yi+6o zCwa}m4Lrw~uCO5>fAI}6d%gCWZ>@oDX3&^pza<2wHjUmdZ}(sOZtL@t)2Wa^4r6q6 zB?K`jucdvb7|84kSwW4Hdq)Rf65X4mZZC~*zssk`4)xo|0b%73fT^N%? z+ss3cA2c8+NJ7X=zuHdxIU`qRo|!*%zj>hCX)tnN$Uj0_=GRHCoD}3mAlH1*-B@j^ zU<^TXsG;!Ht7+!udkdE3CM*zy$SmNWL64;cG`LDXYgNM^b*n2Ma7a5C#Sk)q4L8vx zuHdKm=mrOUc+Z}k_wTz1o=AZrv*ue^Fz#dTQ%E~b5NTh7?)|jb!H^FcO4`zZqDgpf zW{>pg6e!-~PK|w1mZFsalZ}g8#gPZ*9_@;lV=O;3UDaL5@tj|Q_Pbl>$P6VBy+hSl zE)u!Bbqg)0*9GBtu!1nNwBmGGEOik@0xL~=w5_Qg+vx_Y$ z_`P!x5E@2BMMSvrCvE{KWH}@1(3|Ek2l;%+=t#w?sBdUc)wK%=dFOdZI}FuyqeenN zKmbq-H$_|_fL6ZSpqak*6Of6ct2;gOu!KO|x`I_&x=V>Ez5pTmhc zY14gc8I5vYf$ym?I*rSTsiVR@bQECmyb;>053o2)uHz$tO{G0M*?}Nf|J(^-AY@CT|99&ISCf zKg+c{i!VsaIxnlEeOs3^spHKJJ_eNnppdb%FkR81U-;U9_9Y)b26i74g5HifpPEl6 zzI_7fC)9htZ+^_+@qFUb?OfvbXZ!^GcBihIY(w}=z%V1<$D$G4KV7z1x^(E^!3AHf zofJSL{C#?F-|!rShG!y2ukB~hk?is^f6F6sU-)?3Ik;+2Cpz(Ce8ILakyEWF0IHEx zykNnjUA;8q2Min5TR|b>=+UjDcKHs@Z@YAdn|A%kZ^>=s9{l{-@@}q8i|nhlKRBKV zNz1$zf$LKca9>l#?p+TE3?zZg15kbDpv!dr&7pE_MMqkBLQ+sul4Q0sS8h@BGL-t< zs6+erEA{Mo!}h_>>_IARbp^P)xx8bSE)Ym>5Jg61_h`L96ZhO9rv$?s!O_#L>HSGLoqbeU^OL3h#j5q!j* zW{Bj6DJU!?D%|F;zs7Lt8yOi*pPp4!<%m5DQ8v{J0X$!B@7HxsPIN)+d-0wzLyi?M z7j5pMG`GoNLSnk+%wcqfUNdqyrPOwSw1KbUe;v~9l`6fnt=>r2ee@SG*+0MC<6NTn zGV=d<-Gl^g`&SJ1?M3va?XOsCiQs?RUukl?oAT!Z^?Y(r?q%D3;UAC2Qm*$X}I4El}ah_+KU&<$L?T}0=)t`gy4J)flSnvv>-5Q5oN|FWXikuLFrOtgj^Z7Z>>mpO zF%JZD!%3okb?g{haNBOl&wmzWL%_KH3aT)hm|WM7}nO) zT{nWFVBe(;<0Y%Z*4-U5Ivm!anV-t#d)KKB7(c$Z-ZT0{1aQisr($Cj`}BERSh(}U z=&@t9>FuA|BParo1`S-&`2OF`B6W;@@v+^~Im7pA_#aN)zAo);G>)+oL(!(qcjcj7Uhvu65U56{r02zDz zS|7b&k}b0wT=uCM2Nk7UY4IuB*xzV6VI1!?auCC|U*uw4x`b(mn&1Q5*Qqew$7p61 zpPE1XBi-pJBjbDO{pHo+5b&gv@m|8@BR7AScnoMp9F3XN2#TQmp}mk3Fvk#=)?M~5 zP*=g16c#?wz=7YNjx7=dpzuR8F}p&Id#_!4j%f@a4F@#msm&2Y2vorCvI8|V07hq{ zF??z-x3*x$?AcKBV|8>$5P~pc81Zi@8(Ec@l;)q`uPtGvoj}mM|1SgnwII+E7kSmq z0!m+EDJc%CE7G^EAajvE0>?glGJnc{gtq(tYz!^=J?g%L_O%_#*=jR8SG9YlKF>x|%GnDg>>EQ6cO`RI-a=amb(AHDbAQmJHS7x8w+lLSBsi53A z2@}Rr4sNr^-Kqx9R_Pq->f2N1&yc>S4h?|#N6+}Cob>GkhLlZ^(tpxFkPsmJ8jSea z-k#nb{aAG4a;>rI>g}u`CD@Ji5#C4Bo%Xnsw4^>agV?n_k&jBT`E4baEnmhUgXoc6RN00#YgUg@_g}dL5=20CpLF zcp8g^3%Ajpwc(EL24bX><~%xHcJy$|zImoXDWO-RbNazEW#JYnCW;EeY01N|FATt2 zM?B`Ev=cc0=me-NMEpq$B#&4a=MkOBx!B2ZE8?!Moja2`QVCzxPSE_wGsD=7^~qli z0EEf>b6HtNd0j_;hxO|TS#KvSUb=MstBWN(%3SNZhK9j1wya2SH|T5r=J|77I8$fm zuU1n&y4~c&3@AX8H;?emtDS{c*PT^&BK8x(;4-?k_*@4Ho+!uu{+;s`>pQ|xoqA+I zg3zHuFyePUA|F&jz+$oz6uJL?bI}iPBF|GmH-(Cf${@97mz#%2SZL_hmgbw-{ebEM zKdQ_0A3pra`}h5!CO|Q-tom-R2Rk@s?CLpUA>307tg6IU4^R*c8sOdkRhLyLX+B!yQ1= z`W4XAw-c7*`Iy2E#6F`PERaE@5Q&6&rLTc#v}e5uwM{|6Z#}9sIz|X)|JgiFjAY&M za{P74++_W8-W`xwKySa<{lXvFCReDrA- zIl1j(4+u+FVK#0`aGu<_2f8${71*!Qb_AW;y>qAOCbYKAUwvA;9pFuACs2EXL}`nh zc1CVK@C)uGx#NsejG8=-!L!dK^3`G*5rRxJg7`5tP&SdT`TPI?CZ^kNOEhRf&ma$3 zAhdFGqgNUa?EIG?+CZw58G0-6(s4IWCgQ)9F+>ciOK-yDy3dpd(VMzcrnOIW$Gf6g z&t-1|=}9)hnUAb{z7pLMK!$gv+uCD)+^U`*ylC z>@zM*8u@5*Cut2s$!pR>b&_5>^`W8m6b;cE?~R#tCG$B?pu9ZU=j{DC`jjmwBZdxD zoY#q?fN#UjlsQA>J{g7Z)PpXhQnt^Gd4I!IQm|RIYP;<{{cCi_8minKnp4k-m<4cP zajKJH9xcPAnb0r%tu{PM?wDP#osul)&p$>Y1W8cKkBckyK)P01@t%ZzWymD(URzVs z#l^+AA+}}8Ll*3r|4z3`V$UPbD3^M<_K>_Qa9>KqB5wka(Aqo2y_2G)i*9 zow+C~oEA-nhS#A>v-_k3hKaDEw1H6!j z^PN}jX}goU_0YEP4fflA2SR#R1N7%xF+Hd=EIB zeN5~7_7S~)r7q4IiCrsU4j2vRXt)1l)ZQ_S<**$)UfGa%;X)U|c$@Rx>l*dJvB`)|vFqcV#hM{O#MBgg*8eXE;pr~cjw#MWV~e#Aia z$8Q&n{58}A4H4^yh>-^{=MhFvAl{aX1#>m>{dN%xt*A6~H9e&05(y2xOkRPW9^PuN zq`$r@U3#K3)$eTe)%7u+61vFhzHR8fTWu!kYJ#v^ha;52Lc!GuNe#ai9W5A4G3t>! zw`1_$H#nvC-wC^I=;~%hQPX!z%2tr>IO9!juHVMX?P?$LwAYz<9oP`f&H3GBvv&j@ zDC&%oQhtFATHXDCmhFV%mJt=mx5JyKyjASoyPBxtMaO`l+(lhW%{E2Tp1ho-o8kP& z|BM28^rUY6`f+wm_Bg#XjY~&09Dd}zKHSWo7wSPAIG<-R3>{xbIQlQCQ7+u9DM&e+p zDH!tuzn^kJwSx4^9+!RP&vXU4kQ6{0sA{m{=e)kPi-2o+n2~{X#xExAgxt9+X(tuC z47`qGaD-p)DHB{>3;%s>2)dmVm-};;GV{pjsM_@Q^!Zpwe&yWCj6Ws_)acvWn!dLW zf3$t|Rh>ia?ovsFJ%yLI6nB=+b!u{NTla?3MnmLi}>adg0ZQoEz}wZM@d~%O)7&5fWxE>E9lejErC$i zm=((oM35ti1ye7);XBg|-ML?iezvTfxa3zz45FN^5f}{JFI%k+KV)QNje(V<#hQ|B z-}4tioN?Un)rje324u2Z^{^9jA-Wq$0lokq(XTC9v8VhO49)p*=a(L9AW2U39Uad! z!EBf&``q~`&EMp3R*&`F>DRwQ`}XfrH+O5Veriv4IS2bIjGSJ_G4^{&MI~>?ITkti z;e!ll3oEN_KyDOBwGf7=d&e_vKYaaa#1UTGaDAmtY!mG(JyT1%yBmFS$7Ny2)J_n`d2D$;gvQ0 zCu8Vehq4|+uFa*)0U1+^OG{t8f1ifaPq@R;#UWPkbp*OF)_G88Evl)Lt^^!S}exEjY_zFfx)fjEod4Pq2FTWb9xOUoU*cCnoignub^gn)nyzz`A< z`%Pe`d;9wJO;9Iz@N?KteiGuz)O7E~CDc6t$zybMWaQ+!S!xd54|*qQ)JjYNayDi% zc0SB*OyUS1co`v_1z(t|c?n{-$wD(;p&2+)89PE6y(-u@f~Iefw- zboXvvn+^gPG?O0gMd>d;pfTAKQbuPR!x$`g;yO9wtQLTif$&6`!9+A#g(fmgjcX#u zNk}DE4uxSJ0YJwC%?bhAEbp8ZIq9N3?(&MgH?hIt)F%Pi{A{8>*?^U{6WN&YguM zPx4eTk-?84@M!CD@6A%N<%Rk1;kmQxw#JeUB2r$6nYptlnqhL%w0MGmi=Pz^UR&FF z@KP7@@8H228&@N~M3>(f&pI!v-E?&JL^}98QOARkn-}W=L%6 zg}0YiaY+%G&Pa#-9*vOrHxZg!>F%(ztAHQ5C~1D#P*kXld5B)=s5D12xVD95Fr2KU z)8`SElaW#Txqh1W)hx8Dq~Ms`Qs0Ac!rI!Jf1q`+y0lbs^}9?HMlu|4`T0uy%m*5J z9fM@}P}h1;A0*LwJ0=LCYfH}UKjc;SbSw=mqk8LF)8C_HfX;>t5!3mSVjxM$Vj?ZJ zzx~7x0XPVlE>_%hYd_mHB7r{Dsak!&zu{BKw1MJd@%VA|udnH2qD}Q0uBsPY(06^kNqwi=s~$dUKTtK*LkEkwPO1nlq`Y#6V1X22D*j zzbz&92O$8Ii~j7TT*V8Uw9$-DVboVd%&fKOK&Sz{)ZgmsGZspwYXZJdqmhci(ldnN zdf?u%v>=KNqC=YE>%P;ky(KSy!kF(!Skarg67UwKC4@ivg>JprWGC$?d=hIIk?hZz z(~C;Hrg)4+r%y>dj~Z%sQ_h4{~clc)j)O8A0RKjh8=meQSu^!nTW@(`avc*_Hs>0!RGT|pMC1vQ0+X7VfB zhq4A`?FH4Vz}E!)3^&Wj=qD~XMkvO-0c-pIz2VAx0i2>cdO6zJ)xU^h z`+;!`r2TwL%gs&S2Aaro5#Z%Fxw}t}p*`n>0WHFUNv&i@6E|1Va%|5|Ch`F%r%m}1 z8M15FXdRtKugcbH5$oaQd=OrQ1971gx6Ux!;!wIj&j`snv}wkxIlo1Kkqo8uMMIxh zPe-s%vjTc6J>gpq8OIuUSI|EZL}+17YWs4l=QucM>bLAv8pgdKWG*5qYR-@B>}+c) zJ3KTwj)K4`CQ^BmCT$-VBM8hVX+KQq2M{@vUUb*!0){CV?yb0}8S{oK%Lx~;0+Fjg z#SnanNW~9DIfDPSM0hpF)_Am`-{z}ySUid{Bwwlhp~MAd`n|Z z3<ydx{nM^MVEj z2V*e6u0t0}yi85FQH!q$b?z7&AULGRFxs#|RP@KRiXGfbKtWEn1Tci{cYTYdOPSzF zxbNRdWwea>GApb1N%J+eaXPMBcN;k$Tu$2F{@m0)v;l%K#v2oPE>_T`-{_VBtf;k6 zNe+d&>|4BRgH8#mjm4l)BNc2X@F4n*|Ab;8-lK8M4h89Fi6R}%=|q^MxFLh?vCSg3 zTBj#S2`6pM^y3q^ZUlwnaS;R_I_d2zot?X?YVJ2*!7fqKIw|=WI8jI-Z?RD3cHPE+ zj*2lMp^_jFj>svQb$GtTxk;ZqFIxu(nI!AmTgd5p{LziZh&?zIjeh=WA2cDe`-#R3(mx zIUp{FK?07KLlBi)Z=K}`ntfC%_DnpA)2CPZwEijr23>hRcJ|=dc6Ck7OuoHAL3;J- zjDM9pP@Wsj(Gw@)*;-Dk&4MPLXWGr0j$qZ@OzRw3_dpNI7{RQ<|1u188#(x$Q@FB> zV$a2y3q}J9ayrt*@G}$I>Fn%GD@i^SLa~l^aEKp1e30?4`1~0j7YQ}LMvodr3}pga zR)@I}6FRoYOLCdY!N;suSpgF5+w=Brbv(boWI7uPBIo}W$Gv=MN(Cj2# zitbp-L`-BijiG~8kaA@K2O}jf1^F6>rrFxY0uPYb82Uh5BfvJ&`rtTDRnMRG34CN+ zD}tJ~cGsX-=_0Ii`T0|{M1=ZInYdPk@Xck*j^b}M&S4h7gZp#K#@I<6{l(qV3TIEA z?B1u(F68K6q=e{#om?0j8#UQ~s;UV7;JHzXPy@w^TCr%70;j{u%bXdt-@cieNH|6F zeHq_)j`+n*=H)cl);#X>oCuZL|>I@?QXov1Bw!5)FfvS0sIy4kEA+j;l`$~{mhkRMpQFZd{RpgIwF_7u=d>(mVL}{U>zCIN*FjoMHI=+PYL)0YXHiIh7ANrlnjk|LFI^sEO z`_T=uCh`vZ?jn2vGUrw_fR3}P9$Rwvxjkf(3yi_tnXfi}d7D*QOG8ILWbf!GtNNSr zQt58s^?;Etj5v;KW+8XBSA6+$`b8yurl}#tQ=F$$>FECp@(w7tH{$P%45=zdc^@Ai zm9S4=ztVW}>uY&Ag=x{!rLvRItH=o8a-JLk00duSSYFw4Xe{pt5k>$|4b4p(fWmoo zcD}fWGCA(#Nq590$U>MU&b*IlxLzThN@x-Frcs91EVxsz59Q?@wlm~|b-)z@i?)e$ zXJ3#-y{Djn*rl1T>96LtVFP&S*#(JPlon48R~~sWdZ-GGCY=Dv079a8a3L;E(BdCH zjMYagdLWLO#ipj>3Q8uN(W6m(Dfj4sw-Uru#Wz7<~v7X{O%(B%}HO%tE2EL z#bcQJ7xIw>Vd{ciR1)M|g}Dbg1kbzNx72TMS=4i z(X56!ZiI%$_V>{M$8=mg59D$G4`AP)U+B%m117Pnb|L%az<`9f|}1}4ygB8Sse!= zX7%?kKC60mpdVqKPid<(=`ttTtuw3dX^V0W*FyIujtiG)ES52I6DqVgzfrPOSIZqo z{|A0LA@!5XI3QomKzgWl0uXY{2IxM)7evK)H7kP;K zYqyvA-~volp`kOtu+f!s%%K%3{4&U3pPCHTVxGdQ5HiT7xQ&plZ0$YPf|x=H!|IhQ z0Af9cFZMm{Rx;JFNsr^wc@pSE9~QB1X)Wb}P%|Ktu@2;dw4D?uD~I zXoka!d>mzhz^y}~kH+_bZSw2Sm~pw&R$oQ2ra*L(bkn(|SF6~i8fe0~2rHHoWqxYu zk|h8Ib(q_Gy#PItG><>-+TUCaa{v=TCD08Yg|Hc)eskgU}KHH4I^!@k+vCZ zLw%cBfwQnSN9v&Q}7+*^fE-7 z(euA)h7}8pTfk1ZZQI@`W{AYaoo-&gWmyJ?CGQ`6WL`XtIae!YLMT&eGGp54gGcFq z=!2oy2ZkPf`ejC^L*2a=%Yy~6i)KPdyNHQPkNLG%f=WC3x%-#LkYFekrcVF(=@Zl_ zOo`sn&f$`g!G>;jDBtL@X?E_NdPQP8J?rW7=fjroOnWGg85RM;>!Knfh+B?G#(I}% zHUnIQhUaM#iYdC-bl^g{-jJsq1eE)5E`k81&TA;;s3^FQwq7PeJnPqYNy`2Emhtwf zU}DdXj{S-up7}G-5NHU7{SCQ_fu;)E3-ZLLL)3Rp6Y}Z56}zxiNw- zz2Lj->^U?@B)Oq|{bQ%Y>*g233`CYgIkD#A+UmJ;MKuuZZA4TO-tu~-fV*CrQ4iAo z#hLiVLs8&XM+yY; z`+}8|XAsF2Y}He;{oc+)mA$iGI(5#ebg$?t0JXq9(>e56T-$Opq&4TkOew>k7@CDU zXfa_j*Nk4;78+^>;_dA{ao3<`HGG!-R=0C1OG?@`;ALe}!&=j`M-Sp3*Q{OZMN~+5 zx31SeAKvr{6bZUe$!c z?}2cutRxiSHcs{KW!2S34;*;O&JvhdngnDgJfXBz9Ayh*RSyd z#GUT)(_w%_=YEvn5C8nrS6NvPaJ}rNPwO@WFQS)YutZF*15z!f%BhBQqs%_2Gkyoj zu3EjCw~WZgVZt5$kk!Pg=y0_T$_Z$u=n$J32#6XG1Q*F+O-m*XetRnTu9rd7lts|m zieDnpijjoJxAm{qRXsw3gy?@A_~*F7uAlXx7H&&NJc0-VjsY1CGy7!`@pC^pxnW+J z6-iPreO;!<7=0Rrj5*)}or&E0>}WxtbEC>~By&^)3{ONgVKon7+S9h3?q-G%KYfzq&RvYw!4T6*B`T zm5iy!lcIPdxgf^(m?gYJ)>bYj-AT#vG?%ipE%ic|;RvAc#F%V|1kZ^$a6qKvfRxfB zxDIU2977gtn*E8%#;4|@tY=jL0wrp|H3)3nO2NBmix)gK=-NxV zl=fCy7OH`ltz#!`o^ZnWpnCPCnw;Jfq-6aH=)olfB5FCd_6#16Iv9WX6>6C4t3tjZeLaworBL4NkxqPIpe zq&V5x?Gst8=m8h)1?mKWcU{(=Ze3{6?R-K)6YWZLSI?xL?EdR2yT!{lmTO>*V)nXrIGX+3`$9Iw=Yl37@7TQ#dR;+Ov%_Lb3%IM|f@*Zh35|1v}P1YqYU#`Pwht1|>w+m=r zcbb-rIii0Qdjzd~?yqVDGZXrCJ%0Ovjp6=wufM-c9Pt*MD(0UvJjZCcI;Vm>rx3I- z;pJrc45o5$Bc@JlqtF~N@fX)o3Fb0Pk860wswA3yLG9?s0g~B%|W!U)3smxJ(>CMSbvgP z{tdks0X!Z3UvVg2nI#xS^9u*Wt)t1jyDKWDM#Ez#wWZ|>xGgHc>)b5pl8jYlXqTA zkbwhz&B!=LPY)}&Oq3)!=Hy@F)_z6%FK^JHaM3bFhr==@$}qocA#Qgqxw9eqKb}HG z)8al3)`!W?+&4S^eraC{uO3k%<2wALK#%3?LNguH2S1yap)W3!A)^45Cu3X9E1HkMVsGqmcJh$Q5!NOH? zl>L7x^1vh7RP#iEZT47jB4yR1F6i;Wu}kuSuT{dXIpz;d#fdScKc!wti_$)whX+(8 zQ~MH7ahKrj!99o{jv?z_r-zn<*{ra9ChFQ^6_v1ut*l?1*e8*Vnw*Wi($)yi$w~4| zTgX7(oct&~7Re?7RRl>i5aMMRMaErBT-^Qgy2!}LtO9apc5UA-2@tt)BRLx^?aC)6 zskS!ZvJF5Cw^fwEY}`oEE?YdnUyavKnl#g2?@{eYhWFKwA&ciOLHOz!WUtMM+KoB* z^l28bBAc)4qwh9ZP5xD3;fKa^@8^~j5Pgb?j>a?Z>*d1WSQeT+NH4pw{0j{V;Ox{3 z>>t)NH0);`D2AjUW<7CY_QW-1#kWvyuwpJB!6mC_PzB{xCO|!(iH{#VR`d6;$?Kdw z^I{0nq;#SMC!juZ8bhANaAh22Eacq3Yk+-x>MBi-d-cm%5Vm-< z*YCL+du{T%!+AG7LsFJDB34IwTKnW{MtWW1)ip1Ih=B*7p7SGA()y#exqQIPLCbD! zJU?v!n-fiAMDt?VWLse3lP6!jdBeQTXC~0(?SlvHJG`EourIrO)Zv-HV}?<4f<#65 zb%v%(mlQ)Ea7_nl+~axBIv6@QC}W>jtkR0bWrnG=jh>poSy`gw{`|7wMY!|R>Bec& z@yzvk8HtW=Sa(?>qv@iywKT16z8f{x+3KGsfbI|{^!MZtW@mSuBZ9=lszx`f5I`nI zAAbD!my=UyImry?_r`ZupZrV`+uTDtT{Mp~o6$mE!fa%r3G6}ttyVNkRaF&u8WOF% zF6*}ASkEb4XMVK3%6A)dKw?LIGj1 znmj3}#0bo7@TSDGe2KY?Dh>1@!ZKCD0)I7Tqhd_(UrmAn1KF3MD2$G5eYdoOFglO~ zI!1Te!KU1)<6J*v0Bo}sz-8)TWcC^wan!IqJ~lbs>1q#78-VX8X_N<#Zll7X0|yqq zu&yrcGtR{Zi7m6Y(+>rGnqutBZ&*BE*YDauF_;9P&-32FPfySJm#Iu(S)KA{V&NS` z=iS`aAr-)hc|J!Ry$@)u0MaqPz$zC=mm8ISgjhWjkDPpFZ9Y!WOpRFCsy^Lc4?nzM z&+_dZ1kLCEtt`89*vE-GZxKut>yKqcAl^1S{&YnxjE z|H*rDad$tLkbqJXQzB2R{97O&_;pr}>{Ibqe*1s_(c;eH zZy0<0Ydc_cirPXHXo6s|g0d;Jsz*#C)5UqmWTd@Do0c3QSZs!xJkq7iS!Yg%3@x~A z>0$YC=V)`MEggUj;mNt; zdScAjd*yx~oZGOa`rE1bCoPx082@T`+CBT6J$k~@krg}*rZUq9>_v(B(%p41jXO(* z$07jhACY&sMDFaZZz*0TN^ADLtnZ>1nsl*O9zSojG*?4L-5rJpVKo0No|4UWxipB~ z;|bOa-|f%)`1tI!xGSeOU0mW7_|$lFZ{d9J3`apNzygm1pRHVLiX2eW-%p;L8&w&a zcq=x=%k{s$iRK!~Xpdh{k_$m|Z!E`GKAw!KfAToYI!Z}MZ%5jC%&e~-*{lc$Myn7k zv3l0-?}fldON^bVh{Yt^>E%t9nv>2U?^qF1kX^~kl?xV56+nvk^S*<`u4MC`;Xp5 zwS*A>LBi37i{^!b!@DCYiKyj|JSs(+%7l;3xU?3*CX*TC3XY(vcN1xou=nkpi>-2i z;&dM0gx(N3y@|7LzKG`U^;M@ul8Mo85vdSzdGw=&8_FT51G9IR7-b`-PKWHSBL6#%tC&f@sWHV7%XA`SJrW+0naqn02+kuV>{9ln^ z1-Lolc?=9ibS^L1SuZM}EY;+}yT*J}(>=TvZgZAVqH2l8`w)6`Mh(`243#|#B#=kU zE^9|3ri~^tA0O$wd4NiTXCAUy)8JYg_&-{JHEXa>vC9tqhL2aJ$*|{ni=UFLGJgD4 zG%RSupajQ{zlFnr@GS_pBPe_?cem^k{>X{hc}Ab6%cJOFM~#YmQF7Pa>2zY^=|CE;2p;Dtj!OxI}ztZmP%t5_%Y>eSPnLYl{ml)J-o9<# z(4#Dp=FC*4WbiyjwH?;)hbD3$@?AMb_`7Fq=`!G2exALs2GP`^(QEd`<^i)Y1mhZ3 z55N#aJ}l6IH?f}ru&R=2n0 z$IlT@wMmmErF!4>Z+|0lAsV(ZKD^i#7JJ%Or=8GSw-i?Lc<|NBmm%E{`IH?1o!{}m z7HWZ;!$ick%8(=J+$FSoR9}2hd#e>$p$vhz77|!qG@j6jXPxAoqPrOs3B9z9T$O?O zoJY}omoT##)2EZri;_t}MvA9B?i1NVBq#iXs3R&{b(H-~;JM?$gm;pBw6A*A)Gu@v za63F<%N8ya7oWxDGDA_^6-=3!Q9jG=0}xvoG#+FvlTKthf~@*2pS6J z*>Rlr9EZ}%zff+|m2ybfCcgsh95SR*qbd!_3GzZx8sEHm1LjoC7tPBnjAEm`EHA#D zE^{!qc^!!me}rnhavxT3!LZ4N%2$yv9sWpsCU5^mw3N6KlBSV}u(-HV&XpXY&baCY{pQ>EqlOC;ICdQEwaK-3}8}jYIWF7_1IMz=MP~^wL>GNR) zqV74~8%7Q+I1IB*w<#+n!HWl8j|qo%s5o*n2n6W#+r%>7hOo2a=H_&Q*jl-E?aa7b zYR3Wa2b{&W@oYI3^Ti5Ag*X^Cn+rx$b#~U^74a6j_lmjv1`|Z zw@xcaB@?|EF%7nEpyG~&NmjFt7uNxD1L3oL64@wK9F!d);;iY@?;^-rd{Ky!zxlPx z$EtP5Zp;@ONKS_2|eQBmqz3nPqTGy*in-i4}PMAP#2U8^I0@xug$Wui+5jkj2)*B+IDGM3vRd zYZSV3Xa7Z9ZH6tY-QnSAk(o^qtK7KpihNIO0OKl=RT#^BuY6HXJT`D%<-1#Bk3QYT z*2LMYrWqGz_6DQN`&OL*_6k@slS5a}G&}i~Ywo zc^n=zZB=e8dIvmco(r-DYw74%%$cLj>M%@@q_soruz2CwlP4JoZtHsEh}wKy^g{LT zAB(c#MlW^<1w6Gcy5So4J|*w{s|za-ocxa3_A>!B4$TiU5kDvg!Z-qkC%~CLlb{1E zR^7%c&2#9D))76Cjg1XRd1z=TN~*LQ2;V|x$CqxH-Q4hW;6AI>9N#=px7;iJ!|Ogg zkmJ<(Dr^%^dLVQvDc^!iXB>HO#4VubxVHY?5g2D1 z8y!4EVkSry2R!qVtDL&y?XSRocFBu5P6x|;pzyBM+e*+)X{nV`*EwE9(iDY*)@Uw5_!|~6UhceAwkP+YPFA{p0XJGp=c{-f82VO zi@9vraQ`tC+>NZi(*&(B+C&y9>^$3P>FrP9`80`qRe4j6(EH0&6cfD};q8KYjk4z; ziY%}gn7kAq+*nO5DV4)2#ic~T>R~|$@!=ox(_4PZsn-`+`;;t*m`05Ew0?ESg4rbI z!IhjOgIsxU0?_35hmLv8v@Fnxp0DW>^Yi!5G@mnPs?2$IQKuxuE*5i@o6`o%NEBJ# ze{9rTvmLsPN3y1h^Dk=^(`O_m-ri$pTl$$CFT3E&%~aeGu$;KxNit|lKjcr39Auf@ zN}1$Os(0mgQ8h%4vPsuqu%q|!Zc-&!{Yq;y?bm`a*x60q)=NgpA4gm2a!bpV2*SF{ zR-cnt|Ikig%P3WK<3Nx3S5{~R&_)h2nrd$73OdS3P^O=iosGs-t<<+LS!K7mYoB>X zLqi`!LTBdlKHnycoyV_NBE>f{QM7-y>{HS{MU zG?b`tlXrn$8}=_>4bl)IPZnVJ!zp%IdwGXSKAz5SG(Y0^E%f}ims6U54cZ%+%5O6S zk{V7_RtvV1RI2_ovil4Sj-<$KE8=uuBMh@mmZZ4c&dG^)xSN!Mq9OoTpvIyn1qBW0 z^e2yc;J8y|u$I#IVYsCJ!q?z=^GEO8J92A}^SN5GoW?-TF!$HEab(k;&X`3s=42W6 z2bgc(Z<1KBHrp846^jUs)#POZIp4YLkFHCpWWIiVcsWicc1(b@EWEwdl=6V&JNTMmW)K}ELm}A84e~u%8PB1K?zBSVP6!)pej>#CZ z)a1*`%OjN*we0978(5}Kr^EYrC+f7pRp%nBIdk|aHhP@i`1QRvm_AP$V-2jW3QL(0 zvrWxwpZ{}htdCKtj5^IeXA^zJz*}2AJ&Oa;!GHhquDA8TvJ3r0OkiT3Ws`@rwbU8a z8hi<)!2H%2su};@KAM`8>JgFI?L$R{!>UyqsGf|YKz(De__IB!yrPA22)TK)+gvNF z-9@_@eK=Sn42G9duc?t?2`RdNo|mwiZ{L0*B2?-d|62QE!1MIY^H0d8^?RzE2xh~y z8!?UE(}UepUgg(HZlOnX>*W*6Z!P$0MHyuE3o#CItg=Kck2;9Ec0Bljw~R}A6sxxS z2hgo(Hy*_Q75d=buMaJDc{9u=nR(yVu{y$cNcQyyYL5?lEgHAZ(l-e!5=a^M%wty>XQV$W%)$Ss9g_`c|S zIPP(s;;L`?IX&~J(B$Eb0R$qJ@y4#|r5L^FqY85eTGC=WE|Mqm^$?Z4_P z5d>dyuY4Y~sW39Gtnd=~kH?PnnNr(-P=i@%*VB=a-8O$`<3Ry+viey_)vafFn_V50 zzw1d(89aG&b^m-raiLu|3mz=eNb=q*EZPjiWXJZzY09B=8Nu_ER(v@U82d1x*?ifu zd0H256zQcknd7h+sIdZlP+@|*!R>*C9UCv5@%Ar(9?etj;PxWRCQs|SXZ@KSJEl+S zBI?$F=7@fBrV3y~<52tFCHbN1AxiD}rB}~x9C|`tYSW^7%WCBHK8j<&>mFI(O3kwZ z!$DL!_mT{eOE_ud;o?$5rv!RIG&Jeu^S`z;i4&dLlP0Z#tM+Iqb0|u?{r1h$TM_J) z09+)69%TFr6$RXC#NxL;OO`HWbQ7yEV&(X)y(S&7vU%ogGx%LD&EY< z8oc}G5HlGB)))MuJ``5CZ^7e<0*2R_7^|zG>|KJpDJ%a_2>w~&G~;+phdPd0Qc2YH zl~$~FaYT9D& zmKHqT0zAy>bNaEH&42K_yOMgy@?P%g-El%ca+RyN^m$>7gm;WIsV-HQd*5_*@rXUp z%C{BI(A2Z!8{lWkJc*hOz1pvzKlM)T0lml@GKrU)B9SHEZd3TXH1DmbqG8SwewhzY z{AMQ8IF3R|NMUoB`X(QQME}r~mu;|IcfZxuDgE|r ztjjiX{pyU2m-I230EGD0lj}ZZ&U%33Gt7Cb&EH0@G=*iGU{YH+@XmO5gtMuwubej} z0Um&-M@Ah^3rz>+$nYCeL$X#ZlRp(aiAg?ATB&~k%V`4TQ+!$tZ+_(c@_05dq1j-& zwnSdnM)533vI;v0LFxJimh8Uwy51KkYh_}qHRL%HF(-&cx%Wi(3i&UWhR4$qGQj0^ zo6F`N+YFiJT*&GN2dC zd3o>LeR7}os81rNoCdq5iVDN`<#;haP4W1!{;5n1FF(=eM`yOTzC1@Ekz@J%>C@5; zS>7dAU!5IiS=0c73AeLC4d1@u!g6m7`&2W^?D(%g|69x_XL;<_;h2I24 zsbW}=Y?V>xchTj5Z|RtxVVx$gnU`Tyv(km6BqOY)JT&-I=K6eKJ?drdhU%sc5_?#q zbZYL96IoxW(ul=QpN7~Eo*j?7o<;Edvcs4IRJyYZDWwaUP}rGNKX<{xg=}=&QCJj0 z?9gh|%Z*2qAhv+u8Qd&ee3SHm)(1uIa6ZH|=#bmL =BUExEI^GaZuCBExyXaRq zWt48`aGNLh&jo9$o{8}CgE-=TgG_x7AoPB#!#SQstkgHrGihju{U9AZYv1lp=ftE} zkA7c%rU3PFX=SCjjK0qcXnKNM2yrhsyd=wmNbxk+O`BSA_qe$4WeG>OZZE)njzwmd zm#VpO?v`zKh~9GaF2h1~>Z_s7D|V942~CiFbZpm0s^O|eC&oA_Ux@4TClucqyI||` zqze~L5NymUgq99selMV3@yNZ6%Q?XhN_=FJg}RHp2%ASULH-$BG~ zxKS9GvUDRg&S!cvQHvwH{#2a_>-H{BAaN0azi0&<-8@Tb@`|{`|0{R&c3Woc5BM{* zV~nx9!$|vGTwPb{9;QDVx*x0e|FBo0`a@nGFX(o8Sj6Mp_AmRNl(>+X2_f?*l%b_H zhd`(aS>q$KAd%E$B$Ci&pjYoE#r_Tr<3P?}hQV%$ zjYoa`>?p$(t0PFAU4)Yp8jdbCd2ushjJ#jl@^31H_qWE_!7ttr&PI<3YgkOiqILbd zQVS5IHO*$*&xC~v_v>Q$4}JtZP2XOa=Z(o+l;v?6l6b;|w}@_-+1|Z7eykCVJE~MR z+5x8#k+nB2Tq%F)`dfSLeINO;Zp)LJidt|>^1v#m6?vhKgl(Of?rAl;UwApfJR~`N z-!9$S{1x|Jt*YjZ2Oq$o=FVA5pf)H5H@WtTOWtjeg8uR{aAm+-S%cy$0`l~`%(pBZ zAY(cx5<}O*0g6l5iTdCJqO(2IuNH-D(Y{E#_^GbxhIZ%m6X^Hj?K!Ue(CVQ}##c>x zOy+B^i#+|T*af{O*9GHF)~pS2Xa0`PcRHazKF!{(ZoQW|D2eB@k~yu<&u167v|np; z?uYA{d4GFLgzd~XoW4UQ_QK-xo5$4l%}7=mbHH(p$FszOT`Ee6S1o!OCMT7cw|Cs0 zexljGFT;kWW{6pw_ZNSmX2Gp(zYVs1Vg*Bo01NsiqfI*uFC%_W^_?Trls-oA4VO$V zJh+-xka?Xq5Qer7lS#SO>|rqp3Df^kefM+Psku{H?=?NhUtzhzaM2Xe6bR6#9>8rU zMj+m9@|1aACSQxumDC(Mi(H;KhtsWxy^qg7-^)v)jfYTM=(LyQ9T3SL>Upf+ouJS( z*v7%3r-H&t;@24l&&(U;Fx=0$#hXs1mYCljYb{Z5hONyvoIoQ&} zzR|zxLaLUv#T1oOV{UJM`eE2w>F?Lt<)n-(&JGdoNJ-qKjACRVALJcqhuN%#q$3nu z&KL|A4{ejFS^LW7|NcKSYsI}Z+h{#{eXWRTVETq4t;a|Pt(TIbS9ATw{}ZeCZ_e=l z6P?I*MUhuLb3uF1!lNTsnUNpjFuHJRbJmrAGhI9U+gZe)zOr~AR;rWd&-d-!`^~OL z^S!NCpXZ-CIiABi>(nniJ}z!j{EN*K-t!h8IkosI=*@Z>eAVk;|By}l?QXb~+(Z1G zu#Eal#V&HoZ#T66fB}=+GV6Qw?#&kY9?ocKIN+FJ244fZ^ui)!)P~Cq#MBLlP5J=hQYtbDu*|IM?&Yn1;B)$c8nMH?`BJhc%3JWGR z`uB#K8W%(Y{DbS)i%?jNxldoUru92x@35q=u#9Y8VBIz$q_Tl1)o4Grv5;l+9YRh@ zgI1I$hzMe?13lJ+en}TE<{;<&#~MSQS)An}=&+JcrFBhQ7tfn;1~4Zy z1dtcl1^Ix=2~a6qxfKN! z7#JC;s$ZdL14QswTmL?l0A4b;Yl05W>w@LW$j8udDWR%4hLM25d71F3A4TK~qsYDt?h%`}% zDEoEkyS{t<*4q0x);^B4{qY>tgZsX(>vMfR=lMS0gOblNtgc@$bpQm#Q1p{-KHxRQ zApJ;fH5$eqMl5yZaT1+6jj>5^9F)m=J!riVjye2(DtuG|91tT9eJ#Gj5qRuLW#|@o z1T|B)Q#ZNYBK??u^}%jIvv|qMmEpm`JHrak+jxtW=fO2GS=K@1AuEpWVZ884zs9XJ z(a%?06YhEr^E^D~#KLfBh}K5jzW|@-n5?x9WEX?U@D3qLGT~adCPms^xOj1x)cdj} z<3H1%QdOW}a9-Th|H1wHA2_GWtEpJTMs1MP!%sr%!QU-|ma#6KoTgr!aJztAm5-tk zzW0p=Mw32b`N<>3EMEg@iB_rH+12$jLV)B~3?L9;ABblmPmzLNQm`eKj*lO-Ormf@ zfK{DFIU03(qcttFiPW63&2G2s&hs)aqNWg8Gj71MV7!{YR#uwqd%-CjMu=b-^cJB> zW~jZ>2{St%^QZRv6#Z#(%4S~XUNfM^4$t)&&w^mZAR9fr+ zuHx#(2@CLCu|MK}FcQq{4;D_d!n7E$CMfIJ#P!QS^iYZC<;ih`<}O{aVtVw`&AP=b zg8>5u;95gd!go{j*S`K;? z$*-mxk&5D6xIGl_7K-7!cSTA-Tsn*IiUgC!F27q^nDJ&0{IuqZDRzT{Xo`83%VnXb z^FRwt-anGwPkn5aeGbeYMLLX-egZvrXOfCbEPNkIR#g0)Zpg|0$zS-HXTNRq0$WLJ zgpGICxI)@T*GI;0Bj5BLf3|@8g;$hjzu6auFb?TDV)+^jIao90&WPAC?@m5<_AJcV z*%#kCO$|Ciae4zKp&PCM!h}7jz?G3aDO|iN>JYaXM9v)C=Js&0x*&l`@esK2)eTII z516-HVVI{DwxCj#yl`x>J&fnH6Foj_qpV-?^9A!w;)-g zt8CLXZrQrk(&f7OQOz0Hz)=ZsS@^V#XZ5y(y{9N;TFQ~ZclPazYbR3EQhW9oK-dC4 z{dPvws6~*f-K)G(GX2YcZ~=bw-)0ZteI=9b&GK0XNk>IXDeOzALJ8G^i^{>vV%!e% zQ8tk1UcYhV4<=KI>gX`K!ez25PYFa$2%da^p!r~PxU~Ky8m_1vE<@O4(ulZHltTE7 z*=~spqulwI7q>GMqp4(DLt1|z+fgHYl%^&Y{57m`?PK3%W<)<_MZAgK8cdr7^|4|C zPqQ_9BRWYgSl1E54aK9z{3!@BHD5X?zwj(UI4xPG@50XFW zQh@#k)(o>3p4V;oA|{X3*47>}CEBUQKz`3n%~_2Q?Br%=k=K)pnM=u{8r8;>8Q?~L(6UQ>lk(J1%t6QQ*VrDzSE3kws!ccp^_ z=*%PAQEbGvlo1b&_)C6VuSNGS9Vg!WE4D80OG|f#@#NC)AvlbQRWErC6Tq-_V<@%7 zQFVv*hGI&H!h(YP=4s4pYX`>wDspI~dN#{`n~$m(VpwWT^_nXWDKlr0>3FlEZScw! znWHsf?A&dHqZ_RtQ;7S7SM{^ZOy61Lbc`E2Hty$CCyj7)YT(ODKl$=Wsc+|$4gWlN zNh0JI;vq)7IAdrhd z%#wcg{)qvo5EuKV`$wa-AL+1-s(8wPY(fcoDun#Q3fO5N#_}01gYL^}HcXx`I1=Ui zv1loGg9Q&~k3nSiXj((5D1f8EJ`{9*V#{maOi)fkE7@E`$_SkJciM(hwVQAAp-Y_X zB$E>sVxd?#lVa}ivSZ=l&!U+6q-; zsuY)`nCVuA8jcQj7u9;(DZp%O zig@?^=S!YzX=wot#nQ~ZIzO(sucg_rP|u%lH-X;BPujS;Lrxq{)D>0_ z-7?ldmi+0{B%TQly7&67Zq>TmsAc*}Nf7c5%cXJ6nWK1I(V$^~v0r?X=v}Hq4Cx|c zI*Lvn&A0v4(RGa4o2Q+~cP?+hcm^a;m+)_xIGX)X_-;hf0q8bsSTFnf*h$w{KA-mW zG9^-0>eI2fo8$E*PH(pSVHGyHUtp$k7-a0@pLW^}y>+f6VNPlck`wgypn5(=QNF$% z6)sC!@5T%vDd{I*A&Y|+C1|+{pe0IRhCyQ|Ot?R;pP~;y7@;+Wzo!8r>P4EFv|iVl zI{Nw|juv(S_8r_SH%ov0I_!uybLuhLeiP85rxN$X2fCBlJzOffXUH zuLpY@t;UrVE+)rnBYReM@!cWALMJjLfz1N`Po+1_#H7%MLiwR{+WgtWLgDGW*&(~z zLT=Ih*CfD{;JimA@ah)-S+v$9AxJ&BnMAR<7i`b05Zsl%H+$W5nVI3V4KOw|yTx%# zm!q-VIl)&L#GggFZZBpms49`z0eRO(PVm7Pk*>@J` zR<_^r?Ya#jRwbWb*mxYAkPiXs^tE@MYoNT^;7W;&*18j(mQ$+#0omY95wG;Mdvv@lJU1-J3ZVTj}8?7WpKRwoFR zA{%I2#T6P643ty0*wAk>NZ7Zx);~bUWF&-l6f^k0Pn}V^O1gV@3jYnp#u8yUUl{U6 zH*^$vY#iMvbB*-^hy*ipnYvv0jd4EWMGf`!Q>C(hOL){*_ep+pW@caBRf}e?49~gh z3PH=E?EKt|`DI5;F%4Sve_LO3S;OLL%r>G&Mi2=jG87Em6oPh(Z!*=J z*m$#e>m3BI)DV=&KoA>Y3UpV`=F{lmMk-j9$XpUs zID`{a2QxR%OHJx9aX`07vn;Ix^=W1@5*vPH_ zSe?ieI%b~Z_p26mxHA9z2&=QKh4yRDwX2!xe0Y(|hW(?fp2s|ad);~05rD*FkMEZm zus`Z-{5*Ys2U24LXqR#uur2Utml^%ce}~D7g||0f0YXQ2O^fXR%&M8KjU537dH+Rv zZsk%zSzMrjhVq?`1_#qCURn8k7%ab`OQqpz;SA5=3Mb8J_3FJ^1qurcA_x4lRy&=m zMH)j5X2OZUM`2-oFHXk>Hu)N1|2K&N*f#gQXT6~!e@cTr=Oe@M^NU%T266A{`W z6vP|U>?+!7D5i@yrfkJa3$Xt|(1i%9*A>prSRL(($Re*K5i{P_P{*3$L7h03Fc z4}baFniw0Cu_n;6bge-U1U=IMx4G8V`1aB;-rkA}f=;AaLl$IM%FhqX<_(@=F~ebQ z*CTwE-|n8FVS|%{CLVuR%TQr+Jt+L<;z73qT30LLq1SzBDlHIKk;CL*zB`X8)gnme z{VB7l4G3Rgl90Vvolv?l5xWO0FgRYF%DBhQ_XNWIHAR zr3465@FBgskZfwwtptKwSICVNO?!;lZnfYuo8YP?a?%fUwDJi91 zy+Q@u!Q0vvbEBxdv@|6}MLy2HQF6!aVYHLcw|2QF?Ub}SZ z54J9DFJgE4Y2KD@(rH}iQ&RN3(=gWRxu=}jfWwvfjb7-m7@6F#Qb)hi%NGCFS#4vI z*Vw!3=v-WowBO?b<20J7KRCb7*8Op^X!dbk8wyyR%qf^NA3t8qnv5&rf#wvrTUJZ2 zrmLsNq-g4}5iVEw?NWlydc;Tr3Mep2mJrA;piITG#2cQ?6L{66Xso?XJYh@Q5t+3o zD5&yB6PDxVjxNMHRk$_Re@ddE(M=pRW5$%BQtx3C0XX4gnv|H>wR`t@nwdKyH~opd zax`RX>73F;wwH`m`^;U|IG#UyJA!>|$(0+x1Dg|}JVDr_Wui=Ov_FkWmg&Hc=opvjLk%)nLgWVuDllmv@w{1O$wzqUp&r!00Pb#ez z_~MoPb$xb)8%&NvVeLdUEA#wiF*K@o`zek+4>F+1XeB()_e~S-Jyia}Ih8Nz=+WG%3QTPu`QO*AaKQ0nk z_l1=&eEok@I{YvF8t1N$ezM`oj_xG9g}a4k8A{fFi0UCx+c}`U@J}NB_PQN93V*Oz z_`md;|9||N(W+Wn@HOD%hfa&8a^P_yc#XNx6GYOm=r>9h3SsKG53EHngqis_ILFfe|O*-W6ZGRDwE57EO$=V=44%>^+j#yq`OTwDY>YDk+&68hMmQ}; z<^qg68Lm;-*EmyHz?5Snw=G%SPIR|bSmbwO0J7*ue8r|_W^+Rx6N5lyAQeUD%*?ox z(ls0gCLG%*ewLR9g?|c9Y7Zl-E1Y#ks;PBjbhw+lu>jGf5$|IqHC1BJd4MEH0X}*3 zpICf-@~8)Eq^7(~r>w1g14M<5SxL!|4UdLLhCTZ)H*?Sq;hMD*o-_|~1paB;#;3}2 zmUEcBLKNYX$GO+T2;3J;%2AT@4r*l1y?feLxiq`+1};^3npN>-{PUuEP7g01eQ z*+;Sv_K2ZByr2=s8U^bGxObTTFryH1iN&^w&W9{iR$FJb6P>)$_6D4plHT%Ya-*z6 zGol>k4og=c<4HX@?kE+7r-{!2wkx}3z-Rb*Be}kfIiKVaU~t008rtIe&O^BIv}Gkwyygsdb=ew9Xydw=2ee zNvQZ=l@7xhXpFECo!F22DffcMfeHNt_o_Tpyi+G8t$9t}_0F($)5Bm&FE`@~-6lcF z2Wd35doYg;S zYVJnf7pen|@w_8wSLsI+|lPrC81^9 zJXs}cm^2T1v8nCrAY5FlPtVTe(98BP!kh;T+WO!Zx(X6VjHHC5+b2bw{5yZlJoAhR z>doY2WE!Z1DG2b>x}TK=UXJ=H~38mp~+-l?O{aIcdwnz8i61@ zeLCKr+!S~k!;Dn4v^LR*Y1<8!dJpg|rDWGbBw8_1vr0}{v|!XmSIEGp}3Yi2W*N6H7g#8&Kt&#M1U}bo;B=8eLWC@{zQ!u zJ`tP(U95JgN}Yhf`KJ?cKmZPooS{`LwWbjH)U)2-WpN;$|i{$y2W_{P+1- zBhyqMsUHCbaz$5w{p#f~Mx`=^y+W=CSMu zmTliAPV^c^q80lR4?)-LH+l0f+_)j9;MsP5YD#lnp#ShIUtRUGeVla{VZDtzwSTz~ zXB#%zqtQT()21-oWLRi$4l1QwPs-U(k4{8J&Q^Q=v9;NgFgtTKw9LUd`Mdj#l8w*( z4!fqn<^wK;ZZ;^9?9MLQ&eSX0$$3X#${yoj5^B}ZNr&bDYm{pwcE`F_DeQIPDhx$O z2mLCtJ{9%zMZfV9e?OB7Ssrf>tX5C$C$hiAa1Z(#LN<(JGQ~zL~e-)>+ct(on`hRhZv4_O zdDcKJ1HJu6U$tJ`nVvnt1 z5jR*_87T4tmm1n5Z8~h09>){vSNvGlfVIbv+S~KJ|e-xac z9(U{9xryN?q;-O&a1AiSHn*X+cHPE}vVoc4bSJ0v5eVSEwRLp_ZaU)_^d0bDq|T<^ zm;jY)SDR)l`3u|TwqJFqTfb8*_w3aRD3qFa%2{{{KiT=%pSG|aF%Lj38QYA~XEj|d zHoDa2Z~0f6i3g_{g$jD{SFe82(=#}Q4q3=K>54Y?8P7Y!cz2F@fo9A9rw&M;@&K>y zWQ<1usTbaKhXW+YVObtl2?Il?4|(j7faX_PIN$8gQQ|PwK}9?nz-!9H zD^f}*N-&Pv2pp+BV)*b%hQ?`WY0S21&zT(YmG245w4$U$ooOBq9PgCD+woZxNm}E^ zG37$6E>Q07-1*HLWl!c{N8KM8`IgUKt4h;AjI=!`x{(xN09NMa-OY8etQImH!4@1R z8LeOiL&j#J=p4MBTG_rEvfaCV&z?Uo(@B#jAH)ENbCBNFYt|!&-dX_cjZ39Q_#=4t z%qCK{{O~i2!NW6(ktWHY*+MuCiG?@8Hp|B{R?n`0H$zc2`>5ugH%9l(t%1DRuQpG_ zDUHv|dSUQ9WE_~2vJYq|1Hms}zouZVE(nc*b2*E!*vZ<`dyR<{WC4Ld|I1~mbBwC< zWOe6v8r2(}PpE(2Gy2!hF-@1LP~5^9+2-Uoxy7x2W?7kfCf8wRq;%LX*KnOqV>aA3 zb$+Map@X-MeVFZ-@7D(V!1tS?X4QNxs&(!@9m|*Z?)liAHG3i*x}yEbgpw5Qo!qd{ zEdpH`fdMisW^GV%%wonYxIU}#68BWmhcyL#P8-A+oc0~uKO7dS-hEr$((&Ed+5NvC z$$#zk&}v4$j8qhod!IZw$oE>QB*N&Rzg{V3CWs>kMhaTQFA)YcYSgTzjXrtco6x*i zxJ9#K=*&{AUG2Mi6$oljVYpr-xK+4A2J7BENN4Fl-G@OsUxReaEVi6e-fZCrF`8|n z`jOX(Yp5;Az{cJ^>h|pc<`?5vOycp8`5NCYuODSn@*nBRvavNtlHT8Md^O^pFVACw$czyDv( zf;#pRea_I=J&bsJlm~z4Y=l7X+rF>b1-?q|^3LR5Y-oT`Gw0;%FUqgL*u*XTRnWdy z^Y*^dGF!0VR`Hj7C+G0E*Krl66=EPKZa5sO<1(QBNWiZjQILr5Pno6eT&U&zbCPo{ zhI1XcnkNIyj_Z;>3QSrLog7YE%OI=2^0T1Pa$0L6z7NKYPw-J-YFPCu@e@i+KWKYm zY~^*y=Q3KsR2l39UFgTWs0=L1VIz2p`{{13;oHPU^sNh_;d0_kLXx-k4bJeCF#F}l zePAD7(iZ0o>y!?9;aty*zm6Wn&Bjd$1 zP1oJ}>BhQmFWYz9{k&%k$4-jkHOc+Ix75DxxWTKZNaV4EuBY5>(ISQ9Szl~T?qp5# z{QUYrvvdB_p85Q@%!(>8Bxm!Aj?)Hq!syss&8kxQ?1z}*{?WM#=c`isZCE{`ewo|` z-4VaO*=tw~^0)dHKWBHaW%sEARdIKiNLvWSHdd?un|c2-Irw+6v{|x?s8PeB^7@%S zPi~(2)12RFM?U`zRM=o&J1hiP(;#356=%g42rnJqkf*nZCTsXu;M&NgS>8 z6}F2;jqvRke{bTGh!1`Kz{d09SL4OUszjeQ&r~?t;W8< zA%F?x9^+HOx!YPy-m|E2FTajsIVU$)VZv%TBNgoB6A~=dG8nfVKYZ9v95Q_fd-9rJ zs@wljoZBqHa2%4Hz)k1LVGCwJ0ylZbS0kZ%k{bVQTps9VW!nz&a1E9`PCUuSP~xwc z##w^r&LdVa<2bPq;y;XVgcZsMn7rvJKkl_`--~HM3Z!M>3v>=N+HEP`VO0JMhwMK5 zH*v42P;5a9eakj9O18PVdHB$wrC&(09i+M90AhLc%e!}H@hsFd@UZi)`L0RYC0X&Y z|G@>&#ybW&kIz;Y^O1)HB&3Z$#<+z24-qq38)ytAGEh1w@frTN->Eoc$mtt5=FjO! zsw^1ZNU;=+C5R$b%>$dy4~8HyUcOua3~%dAoEV-}_H@NHG^B%lfIGJ69>00>7g;O2 z#{p-)kI7&%v(e2B?P2}*?^~I(n+^QSNvU0=tKh=3yl<QH%Kcvu39y7?Uk!n z$-WxaUx6!CGqFe4A0YJ=@{Fq?>IV!C5oQ~&nLENjA|iLEn9*2zf9AK$gGro0hVQ6h zvtmVTR8%R~yYnt=VxE%PvaNxz5MWB$IpK^Lb7em5kjL#76s|m^?<*k4VXsR6Ks=wd zb@|7S@&gCXmR*bu7svu-3&kv02uy>vK0jhBBsg51&_QAF8yL8d{3_mB-({U1OeZhS~y%o!(rG>9I)Tcf!ZO^URv`lo3_{pKw)@N3p#bFD9ju@?^_DT zN_}T zkJ!0o$6SITIaoQga3(qPjFY{yuaSojz?tALwOL34qCH>&t8{P46&CRw>emPiEE4%n z$OHs?Sk0b&fq6DoGbax_@~fDbqd04;Gx82rc~m>7@LB6T5?GYSH-=nSPg`=&z) z;1)UKUSuS-W!tvyn6p!X07TUvA4^qCDah{~ZIf`1ZTI!-Z5)Nvl|JuNzAzJ}b>M~S z6$WTZ=!df6h9x0H?W<&s-DuH636@ezeE8Dw6o@DR^r=mq6W!)V zpFdx{HLh2O4pmA;FJEFqKsm_x2#vHILLGv&gi~7Rd0=_~=!is=)#FB8jExmY-}vhY zQi1SCnAS4&5)9Tv2PkHrKCPvU4gH6CLU7iAZVV|ftqtD0GwF+(XCek|qPvv4*+(eb z)fQYopEIO!|Ln$wF$(?m(X>bgjg>+ELV|CV8mVvBa2W{AK4_tBq{}^|+u!5w&rA0Z zm9SMJ&&PjAMWrsuSxQi%)}{S%W_7V>SjP~%;q|{XSB|@I!Sj20XDfg9w#I%aqg3&0 z$jo%Ys#JSFAD6Bu&60i6Ho-BQl8=1_*#uQW=Q8vKd~EOyvP$nSyBdA!6uzMkZE3KD zwCKq5{Zjf22DBnW{(v)^8joecix(T>uKKG44{^w5K(jYYqS2_E^3b6jMdIT>h7&@D z&OD8CU}*3Cn};(v4rgA#7#yqz9eauU6g|B=e+r}p7|&n7<^?2Q9J+uMwJ0~fPS9tH z#>!f)gw){2j~@=0L$37jXyMUBSGT~zf^y>qE+`@|-~&d$yEBqqOLv8YJOeZ-2|U2a zZEwHv5BW$&QU2C&gu9Bw4R?Ir%^OP;#a(nKKI6&M@ZY!Zi{Y1?{VKM z&RXPEqxG04eA6m@;~ghsV{c&5#eAirvJy7}Tf7NGiY@7V+TQh_Q|5n?7V{V}R{=UA zZ{m|i282(_J?wkrv7?u$j2D_5=p7F`Eyu2c+nXA z>}FOxd<)z37G11*m@C4SKQOkYd4xoUI##fN52f#^Zohm#bm-QtNum<2mE$Z3pKqFE zhGC!@I)f<>bKIJ3ssvRt`JQwgYfOi(@4&=m>VA+q1{wttDLQ%f?6gNFmc~HYGj=}d zZ~*MUlc*vd;@`17+ceHDRTs{5aUG~4FC_N5YCBpu4qSmtG|&LnmAFH)xj%W5rT&?^ zT*7e3uwnh=<>|+INKkW^R#q+-(yQRQ9wHByqbbUVg9E$7gre2E6lF)-4jDb#6M

    EQkGUjQVpJe@p7&=^Ob&|cSGlKR`v;Uy)v&Iv`k&oCoJeHU|3 zV!ntEir8qTvBNVOf3~XZ4JRcGXC2pN%Ee;Y^Q5vL-KFyXIp9%fltlg;f_m zzocX<(V{qH(?ha-(mC?x3ktwp9WXafnJNzPE)(=>rR#uE`JS2ti#GN5ulAh_cQ)+0 z#98B8c7x@{B@v4F;Cy&IowC+}91_b|#?(_ig^eI9t5b%$Y~XlC_;{Ph+0UJOeQ{cQ zKx*t>2&n*C0g31-kyhb`a;Bu4Gk>EDaJ_>JPr&In6puZ|<47~ojA7#)o*?Ks`=+rTm88-UB|+UZHSLnMZo;vF1f8cwAln%_ ze0VR3T8On^0|j{2r>6@8O9?}`xr{t8-rICd-e?JI1dMNCPvDNo@rvcg>v#R|&yjfl z!^FsbpV9P&)ZIW_-pwmKs_)vA!JgxFue4oC3T{t~2PDauBmbogj*Bz=jTk#U@m3ln;eZkNMjsd)$Tl8tzywTGG2h$XO++`0DDTb2=L^@!d9M0VAM{Qi3cxvLANpMDvmw^Gr_051i-Fua2G(Le0tJ{O-xT zDRn(;HAm-m$+i9w7oZUk(I?_zpFod#o3!x7I#KHtRA;NI3=oMoOgb0&PR+78F5PNs;#85S zL1W{MRgGDC^@~1ydzhNqRMvmNn%D0$GyCMIewQt`akiCQ*kx-=_1G%M<+)wV7EWJy zd8unnMM+a-rMH=^?4K*w=KuC|^OVAhX`P*+VU)ddmijEj5HcGZUi_M;C-Ht}w7H!! zZpxcJSlM&o)JNTWZn_gBu@fX>F6KZFG(7)V{X+`$LWg)9upBPnU~C zrW&TfUxV+vmwo+iC34#Tc);>EO(ovmmuxflDfE9kLF2`dI~Qw2X$1unh7Zqr@F3RS z84gG*cuA&Xm3_U~f6P9856?_TjgIZpAhxy>aSm|`3o74r9w5b>sS9Nhgi;ETlE;kP zafnR;auIlVpMl397AFocHpj zl<4J+b%Tl9vQUxpL!mDcVSE(@U*!Dx+sIlJf|4+>0ubj5=_9q8Q02}n?RU1-ybUz8XVk21i17#{~p*AlSM$f7X^u*0|Wi>dnslG#z<&3w%_uUlN24ks~AuW z-w&JqaZ!={Y}ckEu@B-_yT5+0^8M%J*O?M&$11djw@z%zJ3Xc6R@-qGmQ}}Bn-m9> z_wvyA{=O`5n)_g@u2$KJ0X%Gd&P=s2Zz@Y06xteb{-(_#g&FoC38(kHlN@(Y>u~dl zA4$ba9|t%UeZErU>gipRbGvT&$NlT}U%zs_VB7gSz3z)PQ?VSAQQ)6OI9QnGo z>f*3V!%`YL@9C94_{E4%Bji8JH2-ceJ$CTO*jc65o8w!?oES1_?x?^%IsH;x8n3jp zZrOHCZ`CBtqc7IRColi-p|CvlX=?w#dMQjhQHY~MW@uSiS@@=_MLr3gkwr(Q8gZ5o+?*3`f3}~wvDmY5+QUqq^)Zz<=2tltrLNnx` zQ1T)S;UB?agn50bU$oS{EWZPL8M6dDQO6`3GEu1<>%!B%khq@=0Xjkc9{^3JNIKgDCOkDOV`V$)nXModimm<#- z1+G5oviSju{t#^Y^sucpu&e!VvdHlSByQd$XHTB)sCG5naVN$!sl#H2eV_LoP&TE}IXBA!j zIj*~|?-^EXxA6W6743HEUP~j&5}&PVZ?n zzt&gGrWm&{U4yMIxaFO}erC#e9jir)zJB|L1Nc~AQaU#~$P`(%oXa5sf(9G6q!BV6 z=3CkX7j@40n|vv7aZnfa?#;{7{RFJkkT_MiC1!ockG<^oCdiX50u$f|s6HoAravah4D`3EkZRPQM`o1Wd=Ux1g;a9dCMJr)o z-`zpQrVUG*xAycUF8Te%>a-U(H9H!~^!$Z-Xoaz}+@EFBC2LniT=6wrXg=FBh>-ydbZQ0=Or zs#t56sy1_3P7?e|jmz=$f^2C|UXTnDp(0IJa+i5Mo{XZfhv#e{0as0)6?` zrGq-_acR;o?auMd*{OcA&zbs+kAp7i-co*lt@G>f*J*G6{M;y(JbZeT(zueR+EN|T zCqJ9F>eGs)s~zO-xxX%ry0kH+TvtBhRYt9_{$7uGjM!@C2r?rKfmx z_bx0dymWX`pQTq6Y|erd+1l!;RIS;D<$Q6ik zmm>4tcA~gAms=I&GlDu&l1c5loRo9|21hu0G63^#LEEb1_Y5j8jWydp2ib~*NWfwx z8SBkFW4WWTbhp|*$wNJ^KcdZM+b+Gj7V}=rk1$ku@Cdq-$cqiOZ6)m*)gO`j$&;M& z)9)+VcYRtoy(+%`gH|5K9~kdBY5>u~Ww{B62j8IEZaDP<#Gr8u-1*!&XKbM+b=;^H zfAXY-jZNnuq=K7u7g<{NltCR2ntpYr65BPCSVx(_%=V(Yz7bTF44~j=Pd72?Br1Wr zz+AWuF~eHI!lLBs*KX#{U}hpOK+F1;u2gDyPT>u@nS;X~%+ zG2B_A5k~iSvT-WhTzFyA^}||+KdF3beEn-mrr#$S`-lYXDoYEq4c$Z~m2)QltjeEm z6glO@C6AQn>thnnZb;AYdAfVrEd}=rl?Bq3D@zmAmmZ;xH{6@{^mg>NJ3prd1eb>; zhq%XKepu*>lLx3xKBWE|JWP{eSVLxR1%iQgA~;kL&vU4|F zPeJ!2ErDDm$1fo%?J9D*byyGfr`&C~jwI3ivn(7Yz~e#%#k*WI2BJfu2u{2|Ru zf6GHwLxVncaTkdqzW3R#r(0#2Ct29lDJSP;&dWJVqXkg(sO)UjZHul;KX-bYxM8!* z*M8qjZypO<{RSOB@;NoSgCflT)Eq z@k^Bm!#UG}@9cfN=>GPU?@eD?-!vrE$5`GR7@0Eu&xC?WvI4Ug@v}A?%B?A zE8e0M=*lQ$=*+`-)Zb&{e)Q;bd3Nhc>3{x-x*Gkwoyhf+`hXceLo=-91TP=vT(Z4; zbG(_Em<-p|jd)V&eSC1KqWQ?qVf%wO02mdL^W^KhC(fu*!Z&c!McYP+p(BI}*6j%S z=w~3o+J*$ldDS%)z~Aa1GSHcJ0RKR_F*9tm-zLr^B_i_BA;MF!&iPhZSf4OSMVK$F zR)Qi{67MFui;>Y%M@M(?VoY#>uD^F44<ND(ilDyrh`VXHM-DxjEFy?j9 z&tm@Iy)l+?!2duw6qTq$AQcRpII_XNyL|cN1G)c5pEx5{tTD2A)_cFYNU2I`Zu6J;^|r?h^|#!i31=M1~0OQT)4*PbFR@^0$( zVt`gS@v7QwLdE>W!_%7w|!5-`R|L*q^*@)`?g}`mlYM7>+a6<T0`~8`U z(i|c^u6ng5KDzjMq0J#1k!V)O*Hzcoooljg{BwR%VEyz;>N;qBfvE>(u*4xwNQw@G zgg~pHALuP5(bVMfy8ZU&K5tSynUJSmOlSXY{Oh=|``rQ*)}^zwah#!K68P+!0+mdS(8yLOn{>2kCJ52PpgL1n_3hBVXE-NU4e zPkbMHJ%Ze$hq<|aKPs^A7UtG6@;&9`R2+&x+^G$FiSAbZz&w53fZ?eD=VD`LMQGPz z2#83H2J^Go1NbiFP8e+;@3kryO!t8d7}{6zkFG8cs@bc>2#eG?E%~jGiNTUG<;lnaacMxL7V%nzv>G zzOiNFkCJWUU97&zY@8-Jse`EI{GXz)w{B%CADVrr$BwDisTT<*?)>LMzyewCQJRM| zlLx+8SafUcKev;|zEimsr4n7`HF5gpY3ZL+Q(Nc%8QV^Y@XQ)pqf35=#~*$?sGuxk zyDAJ4MbQjnL+gDBw@ydC(|6CxbJ)ge+O+(e+8UKLl}TBS_sgv-eUg3Hl*hkuyX?gK z3OI`praClV^^8kvP&uGtaFTNJKs%Aa(gjPu2EKVJ8EyDe_EYeyty{O!JikqHv1d?W zpa>xE^+|NoC#Qn+*g*FXhGbE(u~j8C*GJ=Hvgz~7cAb2f$btSd^OF~;J3Z_Tu!xyo zT3;84P1>|Bpr-9xtA&xd>oFyf0Wuo9oy6Av516fF+i741shLb9+XSN6eN=-P1LO3nV>{)m-rJ*Ltnh+obH_v4e(kccW`#U(ZqBUh3M9>ujr$nvUjMi{P)+UqMpp;t^$XVDP4-Gl?KYuk?fVV)RLk9@ zq&jSUT?dpsdX>roSBIUMX41#>CVZImI7Z=^t*yPOSR%>0|KT3@X_<Q+j!h-+cZ^Q|2vJM&+&vRalBE}&IU2LnVf z<6{BC9S?}@G;@R21Lj;u2fQGC6CHNxt6hfPlD3emYATU&?UQSU12NgY`k@?%i#h%DE2c`=g;M zM{{t(qvaWs`1ZyJ)AzJ4?;ZkX7@R6LRMejgS6(>I?2>7}87vPQJ^Jmteq9xB*saAC z7RVk9-_yh6UU|#2M{U!yEyB&&<&)dzmt=r}KZiI3s-o2!fogVq((pPE8VdKC89>jJ z)s1d#KauzRtg)iLxO1fHzh{tj9aj8%N;$kcleoWwQ%SW4|1rmuy8#N&HZGM|QnHJg zUfZbCf2Z_+`sNkGr%4#~MtQ(FPXh9_RNeQzrY>4^JlhetG}<#=?Ege0yrj#{*3nkB zw$<<7Ypi>3T$j4f-@G@DJJ#0jaNFT5gHtyo=`h;$HrQ6GEOudXAY&*d8{xssDISup z$wbRplZp6dyu^~lyBgA`DsGiT3^RK4)cyV5Uo~8`s5m1d`r5UFkC**SQscM$7KW;| zen1;oxtGT(=@0++46=Da4~h1*e}s>=c?wbF;o&wrR>6eP_&a?3eF002%{%n{EzpQr`C)ik? z^U6$aXg+)XoKl4yok2F<)xTm7|8b&MWvA%fX6D9$Cg%q& zYEGQBOa_>cu||n@?y{@6ZSO9G5+fx+VFOPmJs2h&G7eO6lJxi(YICxHosc@nfhy?V z;TtTPBdQ%*g4Z<)vBJcMdT)X|8g+?l>HC$*!=Qt}&Pe11o_X`ejk=_1C;H$%roA6WgP%#t z+_rI*vz3th#ztr$nB`GXkt2Ix%0RcR)mh-HugtHjwhYK71Z5 z_75@`lshly!GpzD=Ckp#`+*qsnX%@-50M;N_{?pyi6WX3%yF>#^>dgH_h&?}wHbFd zez9c+EK}yH4Q&GVIin~+nk>TFl*`yj)QBPOBajDW+#&YF7t`bNxtu&vHqf}y*)(bAAE&|Me?fy5C$M!C#I!1e{T zC@mbmLhVJu9uyU27-d1}BJ&uhk#zvzHa119n)V{HAR*sZxzjP<#C~x7`m56y{`YC4 z-U~wyD};bc<%X%MVkR@IM>ed*q^noqEOO>;<$>Q+peUt0Y}kEgM_k3le{Ox+4GhbNX>EG4qisi(l96##m*c@# ze}O;;g>FqF&oAFW(2Q4F_f$<|otPuzdM1mJ-7|w`2!L|{MF4ImvvndD;nccl(M2W( z)XT(3it+C7A;5)3Tx!?mrtd=|f+{|Kg!7(>RF~z6V-tI8#H3AXaQfH|m`~k!#te#P zPpw|556f`c+_?qxydl{>z+W zW1$Xr*-k_kq zE`#pfjhSgb`^KP=Dk=wl3+bQiZyXltFUda{K3tfM%k@rPMAb)d#cbJ@yECVpULP`588L(bdxGD_O~yiH=v}2l|rFpFck+!IP6x0fG6LF=2-f zck9wcITV(akLP%9O{Y$sG!oH2iY^1?{me6*W!1CwQ+#m9jPVoJzJcee%2xI|>eMMC zQ`3<{hWPBoubt}9JT;Z z?cl1WPak>6dHHf2Rmbl%FgOgp?%m0CUpM)C>M|mOqtx!cW--LD1+TLb1GXwz zFji%Dqv;8NE*?ovCy|InGoV{mak0XGqW*50+g)_G)D<#%wqFO)kt0W9v5bm|N!{IT z$yQ8a#^}`irSfHPoG{%NC*iI z{%FbOQY%k&E=?bUsetcNkg*3#wFeq+-dy39{1^K!R~CKG1*;DUsm_#_3&~eYxX#lA z+jkpnHy2jAOBc6w>jW8NX$flgx}ap20q+MtUpSfPhNQS&8?P=(-QLyZ1ly-O^i)^Z z2ag{4=*x#@uXb_SU8LXgtnsez?#Mt+7QDixvzSk!!UWIxUYFg0p?$95vr%k8P_y3m z5s!st1ZP0WJAK|S2n29E!FdPC%TuU0xGj^5@EGQy9Jxlt?WnuX!p*WreRTX?OlRbF zlae=)i=b6W>mhuCwX7L*+O&fa~Su%EiS7a0P9vga2M%1bWJ$<@19?{C#V0gZ6`aTU#|ATthuS{h>-#YqsJAoT9Z zkWe%%&COlVRYUHe0;NL7#Ds}x`WZ|y*da=d_Hm+=l$0RXk&u*Z_vZw! zxWC-d@#V{xbP@freR`b)kz^4%m8^BbXkI93Zg-|(D0=k@ceo5owmIKkq0|rpoa`$+ z?5e7;TDp9gxbd@Go2tI9p<(UHm7V`jRBXunIdgWF-Jo*ANfvYFpp~80tPb0&+FIyFPgo0`c$d!wzH>C z6ZVo$Y>>J6H<-FRxKYg?^A-wKZ<)3l{3&MBWt*300|(W_WB$ZgTf)Y!H&ZhcR-0`xIDP)Jaxc0{&{!DN1^ z&X;%}D!FFjPJ`P!vmIseHfX-Ly(i2QYUZf*w{by6Gq0bbf5)FEi+yANezVo9MY4IkIQ5l$cj?I|(KFUVo(iG?gWT)avQjjlY4FKr^Jm@)vr1(XJ1G272Dvj_$3K!cDAhcH}9*4-N`W?q?ux$pdj-d z@!kfC`cidWd+!t@np?hXSwhig-kR_WHV>i~Ix_1lLGfFosZAWgaPnTY2hAXS<*TcJ zhR7+NbUFDK7WtpBxBoNM`&zfZFG-R6jsUJTSNt|l27(Bmb(Z<~5b1z9J3jR}@OYcA zLU@nbrv}Y!2ubs8YBCyQ)XPzmj~U$_1p6B%^5DT4ckc@7=p_kJe+m{T9{bs)=g}Td z7fi3RQxZUo94@2OF5Kh|25Z01D0NHbu>)PWwN0VgmMYbLH=5f%a-wGP8tq)8p!5?b20z0(ah-g zg&>0o-}>A;(xbNaFUo?*n5o{Mg7&q^4$GDSn-ok`s834iP;`4yZfp( za20OZt@i)5;N8yE#j5Vhr`^ly)a0zUlx?I977-|_zb{C?FRK-@U$xDmEGUSdzq=`; z4Xdu(m;kobKLr&zIO^gN5M~rbB2fb?Xr0}dTe*83OxGN+J(O}Tb%UWt$bY4G&zd)H z-prY+${z${CXC8o`6@aDx>UF$00|EB>Dfez%E}NBY5W(+2YchWPUZHg-d5aUfW7@Yo|^4(uQD>0@*93zCi?v4 zUGHewdhF;?jHOb`KaCwSq@0TXjPD`r#NgU0?J?m#>1-8Ra?+;M`S&G z*riJ+5ocgxQc__4c5DM1HJ>cIO1Uw)#obuWVv5{*X*5N^9e)azC@NEwmN81-x%BH*rY(!&b`W$;r;%LeL0hsJC|pZ0g0;Or=SN!C8JiKv_$R2i6(9C2ZOoF6HV? zHIOQ>w-53d@8eUKtp%6J2AKhaX$TwW+Ii47g^wn$j+`?f`Gy}qw#Cds`pId-uMW6} zdvZ}mMp?!NVXG573vO>=9~>*5V_`vU3cu5Bhw82>PojM~|9l*F=+IkaoMAbA8t!wT zs4sgYw|RhAyclD!ig|q{-d~OCUKt-38@u|=jo^$@_lcR6w2lC^Oc4+G950}`f)I-( z9RxvnI_#^)A7Ck1p~U8 zP^_!W#LJgZVU>fh5E-XZSQ4(rRiFSDTs5Xe!Cx`eD+lI|008Xhg0T444!)) z0?)j;bBl4}5qafQsM%h_P6BkVxv6Qxb_J@9_5T-fZyt_S`?d`)4Thv7Bodj+RLYP! zAw*J$WC&5_WS%Q!C=sDDQ%T4aDpQ#vp%i7FL*|f~cfY!y-!r_=v%TN@ZQmcCzjWVR zu4}Dzp67Aw$38eXFo~E`-s{Knh6mzT+P1L&2?jIqx_b4{?Te@g0sm|wq&;RS&s#uh z4E^8r$##^cm~tdcWI!OMu6`Gg(XCq~#_r(gsAqpQ&3!JkxPUp}yS6v<`y0ls6@Y*+ ztfsmlf%}GdfSd32VE;bF#C;UC3LNw>g+YugRvUbypz{w24^p+xz&>x~Wk@8(D zW;%)#3N}D>IXN)L-AYM$*~W$|0vi@6)1S;mu(IH|3P~jJo5P1Tc1p1v`WIZMTizOs z(Ic8$`~^^G!1Kk3WlY3CUH#LI&D1qLVBupER<(xe?CAdesuE>TBtB~6WHMlSFh_60 z61B|n{bJcoo7V!DWS%}RphO#BAORxe&F-yReGX4a{?gGiP>E`b&+qgI73Gh*l;3VO z@#xK>=px~Fm8xHxLmMx2u(8eBTD0Ku>6Wt+8nF#?7TJfvOMFPve*0p3woqOW{riH8 zXIP%x5Zats{OXKndO@FXa92CSKH8m%dafMHLC^=Lodxwd;(e|9UfNrmC25T%{V;#Z{IM zWjqToxl%DlVH&B1Dw^BOVbA>U-$-zMfV&9JZ4v$EnLtXC$uXcCfA5M4sI*4GMa40!Pey6I5+O2TGSGq%L0n zOZ)zxSht5CL`N4E7P_WwHDyP}AX?z5XPM@KL!@gTrM@?kI)8pa!|1-p<`2PU0 z-N?8M8Wp&A*_tSt;1G>>9FYc7FFcvIK0FziAN7Iu5H7svJkhz;eEcYhXAWEoY~vXG z;CMxhW+L)oP2O{PXsG;)3$Wqg?$Qb$5MlH?y1Unb?M%4=aze@uo;T^eFi}N3FdeCF zq&$lhniKys9>-2u{@-9n_Os(-W2NhBo;TRh&0*bQq2LQkU>#2@Y@N{Q*tES$EBc8k z)3dK5Q=3qA0YcN*CiM?k=b#7ppG2q^vwf^02)%6s5Qz9u%+(PCgIkHaMnkY?DsnXC zzr70s6p~G`O%WPK$+&n_;k27VKVa$)Ibmj27B3|SEE(0FhRZz3&ZZ@S6&r5;Pt5!+ zE`rF<8XlGaDV2}pyaTc<%mn!behkXbHz?1}&KAQi5ELTdPByFm5a@+yjF9;aLV+mk zQ~}m9>>euGC^Wz!T+#rYBn<6>71c~kw}rC234wB?tjoi!0yKHhoWsgPhuA1C zCMM_HxC?snVGPTqe@?rzZ?#$XEDF4>Ia=9iCFII0|w`UuKK?> zd);9FWiTqrA*wcdlIq4VtrIxUvcKP{kWK$QW%*yo_T-__&jcU>Xlty{Q>+-tNZ60@M6+hT&S z=~&==Gs1gf>UnNX^@bLw6&GeHZ`%VF(T4w>Y&_Ah4gKEk$R4S!B9z7!VdHygY1xH^ zHM^ql`?oKm;5s};C5L0jwc+c*1Qzan<#{troGcE&`D;M8;(KuxI+bS|~ zT2m$pL8m9=aUyIjAE7|+eoz9obvP8u`vE24d<1w{ZUQOGz5WYA(d>cnL4fQzF_Ha@ z&FRx&Q2{;Q`){#p5@-KZEQ(zYq4-amn7dLdq8$;$jReC1M7Hj=}i;{$@+pR!{4 zU~UDVq2?jFPt+y%RdFtGMD%!R&47^^82P zDkm(B-u2+g#Zikk5c<07*N+WFa7XTAc?IDuPG7^H^t~V0e2<8VVyrkWG6$OhRCJ(` zb4-W-h-D9qyuyEssU~e{UNN|_rLd(@N?g<8rn>D(!Mip+Vl}twGT-FhW)BRj+xLly z$0?NZ#_NVspZwVa(rXUJw(W7Y>{~140w){jAD3BeYhQLbEqT_7-2XZxBUCqfs29e_ zlcWr7cTjG;C3@>WljyhYwjVPoYxHT^pJe1J_p&(WLU9#s$sPaF^9hr!$DEeRzJQ~E z6%I^oejs-v6$WU=2)x2}h_;w80n~{0-N$nOzi8hLNFGuDiMbXTfm!^hR&(5LSuY9c z&rlx{Vcj|yOkf0s>re6V#H=vs2;t@?iNY}>RYydgv$(&r(L(NN<4Cg9%#@+ z(InFLHk1vcUqFU5JW0rif5_Eu4?`EZUr2~Ybkl!;w)5Jcj6~OwiuIr%s(bwi%Y|6J z_$qEc)Pry7xz*tYo6xvR*AdfDxUu~bxdL4YfxaE2xaZmj(#n7kL-sDk&j7R4YYGZC zva%*&{sv=Ea3v6B2>S3-JhYsTBC1T`Vq5U)RiFw;akvf~M^&j#`}WS9M@ItZx3}8L z;mVkqfMjwVfO8kb9-#JNdglnx}iG*mXfTy zc7g7dBQ&oB7+gQwU$BB0~ZA$5zb*PK=^6YuhtED6H>%3`l%#jaF=ZExuxoP~&M!Tnp~ z=^KY9Vy6zipZA}9ni}o4q3c4+1yK6CBv}=On+i+MV+-^4mbuqoejmskYO}tXMQ~K7 zl1@9K`xtRr0IO?D<2~xOz#o> z^t)kgabIVs0QDWj=O9W+gireW$HvAiSna@Jo$y;&aC01`ovyx~S1-wO;xE1pq!tM+ zC=I#MU4ubTZ-HL5OM)Z3C`OVzGU@9`CpXpT_Pn4k#^q{NdH|$T`_KM2w~z7dwUf8%zB)s+4#~rb2+T-)}yuN*=Grlt9OU&j5wh)VQZPf{~7B( zCSfD-GRkO9vTyLNRJ4H5MPakD6OcD{ostk2lBTa7 zn8?s0uI{AYQ8?xA+P%Bg&lznEhnA=!7NV%`dLNMJ0ue$L(;j~IDE-ugT>i6PN(7f&=m!Xr zpNNxEA$mzxr5lrYEnXkbg5ju0_85xo-fyp5v8v@(N?4P9v2@VbLG!ZDtcD?w7FOYC zXCq{T<=I~&4kJC?Iy!WdsUP*$TRTRQWuERTVvAHmINDEWRk0aP1JH{g+4cgfn`n?= zx(zRT@Gc?_A@11D#s)UelW7|`su639;rk`cTVe3z1u@EPtgjEQHqP@Ch9YwqiA+7+ zrjCKt-m-u-8IFSov-9&A2-Gk!4<0;8Pp3APdSAaE$dk&?Pk*OCK9*GYLysO&*|Sg+ zdPOdRUSBrP?UEhDUX6gDcV_pmPn57A0z-Kq?e+kYq;K$>T|V--tjyQV%?;2s7B(7< z6Km8Rt~*KXfCQQ=OnfS?f=KENkE|!pG0X5puo;esbls9g76ORO_7N72yN8(1{(j-# zKK*AhGJG$$ZDZRu;zwi&wO#P-G!tmkPl+Zxp8s8M9uFB6N?qyqF{cbpb9#vHxUH6S zX214uJ3|X&c~$Br_PyU_7_-_}Un~zyj|aCCepxwL7<0*nDkOz9aCo(nU+EDOIB5ue zd$Ni7%V&8jKiGdra3SGfZwIJ z{MJO*k-K}2{swsh^#BO$158V&@R1Qvf=zheMW27T<*v{Fjaz=}EG8J3EBBb*!2Gdc zxv*EFp%>*S;^iFny>J653Y=uV;+{RzL3E6anAMkHurlLTjKec9kPF1DrnBcQS zb?P*R5%5r1gh!*tdFp%pkV|6{3ha&W!$z~cHK_D^Q8(V#n+p@TF_NVE@P8N>Idn;? z;+%GI5sRho#$xYcO3F)^4lcFjyoRr2Pkfdh!K#FWA@vlo25A0J-VJpzRqhnIlx) zpGoe9n6%~8RMLgRu-oX3v^u-S2eioH@-{wtT1^%f&Kjk%BEwq z)K%3Z*N1}!^W)=JzwOkTRD23=l;PGniJXhOGW-~%1t`R9=ou7F9J{h5iEDZ7P}gH) zKU(_DbBjJJX08^{VCCxXb#>+G9mvcDy%pf*;_`BYzBKX$!CHkArixli*=O&{06k>X zWg3VB$RfXnFloqOVSPj9*ErPu`f3FjtH%S#yXw_6G@NnVJ3H4mHbMc9!;At}cf<2B zu=N|Am=L0+)DviVzYetRRnL0Z>e523TCLEVTt#^*qUXw&ueYKZ!(H3B03-XPTuLy>my^I)qVbj zG3Dm=?ZK_tQ?|V=m6`cB+CDXX;yxGkuuz<>%T|JLWAdE(|TJ9i$B--E5GMfmtRQg$t( zOplp=$AgS$E-ps%yjIMGXbK!~M4&c8K?sUe8ws_8^Qj&7R<3!V(*xnX;1Sy~fYqk? z@Zj|U_^$oH3V_WxT79%JC!+-R751U8Mscj*Lw`qGrTPK55}0Vgam4YO0&XRuLk7T21VuWWj0`JvR^r(G2;3L{m1D3NBxw+^^7O}l0v$Lp@7KbO=BitF-oP&9Se5z!= z+!s*df}b#*s=Hc=%^HRpz*r1`&7MEsbTe>&Fvm=CPOHs7Hc%c@KLI$`WJiLewhn3# z*M0S13%D7fM;shPXRr1hqg62st5H+nHz3IFO}nTl|$ z5!RFDIhg8*ih{Vsb9R5TIM@VBzAuJ_Y{z)FkZ6kh_n$O&{&|x|o~}lrmUq1M`qk^@ z`XgCiOYXVlh~;Luo}XVUa-Gea@3-8UyVFN;^Ty&W!^<1vL+F!%795F97=`7Z5XP5u=qhr9}OQ|BoKY{)7 za)rV&mJ|xcQpE>EFMoWnAE>$QxUN?xSFGHI{6zcQ##@%F3nHa|_F6BueT-$LOv*Zk zi;X5t`7YC!HX5XDOzx_-qAdAfF5)h2^mVY5Wb=Ce;Nka|I|aVior+!@IV;#VP-YIy(-;&f4X0Q3 zPsd~Cf{appb})degL@ZSZs4=}`*#MO5B7iG96+^N1vGK^TiRFN!YxTzXq*u!Ar@VS zpkTZ4g2XJkh+4SE0X`4!h{9eX1q<=gg zFW39O_$KWVEnU^1BM=E=_(kosNDk!`7H;fyfbkjW7B?0yJ#G%5^lm?>dwh7Kh=Hqx z#j`ti>Y&;vd&`!5%oh0MNevCC;joJ7XZU5@N`v-YWaF5XdAHb1yVQe?ie3pmqW#7i zvm=nfLvL~O{bhk~c>k&zfA%RDi^dw$B>lv!7De4cz|MSn%;->u0$>6uUT#;TxN6|! zasSet_<*xrs6AkxHMO1B>KMQtcxu5P^JT)Vp&0+l*?kJ#RHP>c`3*=-d6I8%y;Ky% zEtc`z*J-ba3ufMdpItYYiGrzs$(}mTHF!T|b~1i@jCW-weiVBCj~02mw^qYVzRV%L ztrWyh7~G??!B`cGwT%NLL~;tZ;G^BL>G|RI@4RM=oD0nqk@_diq;J_8%Q%? z7lPjp(7&dmqvQMcc|dPOVoD08ucPDRna`g;#FiTqvy7=9MwXz0I6!(z90b_`Hj0dQ znjs|aSifXz+sPqF&qJ5K?^_h+YnWOTxbU}e;1-C*WF{qHH(302>4EvCY6{bg+oxli zMP|}*N8y{epPk(=6&qaz8JJ~U-D!t zFs|k{jms&h1*W{O`G1~Iyfl$cwP^!nv+-_CD2KrVbv zllAhYk=%TO?;1=1NfGV%DlC)(<409kSeRGy)QP)H$Ic+6F)Jg3lxvs^vK0nwzKA&s zv&?{2uDlsOe}OBS-mr*54G}Rm{6*Xv2RqI`ef>88isp=~)igCR$1%-oML_`q%1L!~ zt`QiJg7LDIoOA#F+KP(f$b)HV`2$Bp1kz&cmjd(!SMB!hs>)q{!ZCys1RExj(cz!kfMsNP*xR^9eo>fiF3@>Cv%bJ-G|%04tkNNW+kP!@Z1( z9^qQ0;E2Vwqkl!O6=Ve8N*ACTBRX<&au`wE-vSUENP*?2htsI|5pRXT8F0ME4Vf=q zfGlrayzz4(J3G6)nfzvGMNza8Sokm}#ViSOOm{3#Fz7VY)bQw{NJ??#S~EAwHo1vcy+VSoWvy&Yh3xk(LPw8jhT2IXu@pmksNs zf|J$UpO&mojJsBanh!<}?a$DDjh9i<@*?v!nl0WJ(B)b*xUKH#x#;l0otm0_S-N() z+jlIr1#N$MS#W2%7Ja^H)fS!zDv}Zu)VdjroD^?}_3DLu=(lan-Aw#!h&#Cp-k2O$ zpFGq9nZ@ZwF(dR)V{5zG-3 z_#Sh3B+7HzP(I)mVnkJY0M<%5dO)qs;mn;!WW)bCcL~~yjqh+K)gGX_IsEYWO0B@2 z^e>`c>s3@#2tUA&Va;HQsHm#0B9kSAwI3t{f|Q4uaq8hgG6JH}+FywM1yN5q3hr;< zb}$O)$?Jkc{KG~JI2zvpDJcVGqhF#AIwzrf7|G2}PEW4YX5WQv^^rmv?GpY_ zkQBVf9-Pil&f4O82S<$XiXdYYq!faJ$gVM!CuRW`oczn0H>w9rs!RpeVV#&Swoe9MW$$Tk-%3?(}!y;cA zllKuS8F>p$rVTvXjHgPur#lwXADyfHo%+ElK0xNu4fFW2D+|ddtfop9diOkJJ8Ueb z66NnY*gU8-89ba3=jsyvI>K)Kj`*ZpOY!gGPFL5n^g22Qo5^ThgvXArSFUQVn`GQB zRi&%85)|9!gke20%W%L!&4Qc?6RZg&4uVGNUk4`ipPZuX`9clMdH`S3+W-gZeTaKy)yp2^-F@6|$0od9R z>!CP4p=J?nIf|hwx>+Y`vUlLL!c`T1sn|e>DYs%IkbqWICQ9R z(Du(PmWMdGxX3#H(!QyW-kKnK|DYVe2LENe5M^Ivq^)CWc=p$PGquCDzuoRkzZrak z7BOx%Zg@irYbIHb+D`^zxNf3Oa8UBrQC2Uv?2NY=!bMs9ALdeA1r>~S%1X|7UOIYp zmyDF5lt-&-cbe{L&%z!dg74!2W$EDIoYa70&&e!zewYmIu5%UUx8^5%r}jZj=~R_- z!su-SmfX5rXC0^1HucSf`)+qn!{wu2u6YSBbqN=5C)OI)1f2yay~ocx`iNqqM$=nW zS&7Q(6C5vrp`(T<-wdGr4JOKUz?4YtHrRN?)J|pJPP@u9$49G&IVPe*1_cArNyGb>k5h#E-I7xv9AV=Nm z?nrLrqmv2DXyW~GBKA{=PBUhf$;liZ4?-7gYk%U5fE3Y)L3W&1{UOj>H!#fz%qiGp zoC6mc_SwfYPwwe0{LE!jfpZecF`(_EB7;>9`Wx8cFEs3!5oAo0dhZJSB_#=YvclCwppp?i|g1ECJx`<=k%NEJUp;7g~vs&`=aSL z#qchUf^A)oha$coQ|(aF3|Z`bC(3YyjJ=G5jnJ*knkpG)8DM@ODtBj@Mcmwkk_bE3 z;`G2d{2BKfhYL~01`S=6E}cV5!_Ay$DypV;4M~2InH>(R7h;LX5)RX%kvWPINEl+&OzmX=ZVdbH=>rlbi)?td_Yl5kao|-JnrUZl<)hKx}W%hK7T@d zqjy5hk=^!PUJG^S&YwSUK^|&oiD-IcdI7GfZ_|q4y~d9;=jQL$;Ae|cRrVUU?m`eUzivo-Nq z=gVflV?1XWDC98;@@A@EFv>TQd2Q_QQgdQ) zT`G$!^~mpqnh#lfeeYRt&Ng4c6+-?3_})8IGeE3UKPN82bMj%0NfWkH>UG`))F0(< zumNy|V}YVr+Uaw-`5_*mjt=tMr<3d>fxRJk9#!=)y~iewFVNp(pZao$H2iR#jK|~n z(4dOO>bJR_kWlpU$oxYp=yb03SEDenh5bK=>p4LUn|6B@#@tqV71{6(CVQ!2yURWlha=d{NpPbb)ZhM zo$Jj(eTl2B`IpWe&f4(q&y(>W_n;>~)CwcJo^{R2y!fLwUgvfx|HeG)!mHu^M^5RU zXCzc?qQl}&YwK?!bewf)?y)eqWcBPV@j5*8EaO3j?Fj?o`QUmZ#Rwo%=%*Is=%+SXv z_r;@=0H_03>icPS276-a!9U%ONLVlc{J;q2KeuMdJb@@Ln5W-YWyG)O>gn<2x?|(T z1#@)FT^P!Kg_Zy!$C0nbLC1~nLzxK8tzB#G(}Dsq@Dx#UO1Syl~P*PMbSe5|}w4^+iZ%0yz=o z1~7zx7~=l*SJ+`tzoNmZ16ehu$Q5T3+)c5)z0dFYR$8d|>54=kNts#4kHobq}o8r2E- z%QKxah@RfM0Bie3 zUnRn{!gKl?ws}P0EbsBXLEX)`fk^1H6rb7zmGdK^$ zV$f@#rh8|R2XLuKn#ec^F`#cA8!ka4oPu^u$y} z)ZQV#wjV(~5_A1J*(3IG{2q~*mNqgts6=vWmywaF^&>#N^@#03{6$-#{dNMy2H3I~ zXzjC?1kyc$8PSm=4>DZFeq6;==)sQ&)D_6(&^dqpalJ+NTj!HcEPnUf5T9QfN{Ku< zBqL*pNqKj7+53%7*RG{la|%~ORe-HHr*#Yjb3D@c=Y8QT@OLcHfyx)hjv_Xh7x42c z09FsMJRpE#_b`aIiH`pi6@g9+Qx;e$^J2JQ)~1_M^BsLlu=kh{W*V z1LB6pV>O@KyLq5c;{Q8@&MrMw{Qm4ouIc8Yb7Q9qI<_2rs-re`+GT7;uQxoW(TsK7 z@kodHW#Gc2f#+_lE9*PROVBm5)%oeK>75>9x2*no(4cTs^GM(povA@uF8k^TL1h z=7tIcm;o5owfrNfj4izR0HS^y;p)mC{3TdvyLksmoJ z@VYM!UWvfc?9Z}F=5RP{8Y5@xg zE8ka(=rycVuq5#Zafhf1t&B31UEn-ygslVe315&UnknP4jq2Z@hQ?ROIz zFIeUQKCidmOS)FHfK7QhIlp4NqpB0<)b(8a{S+G;>XZ)!f5!)uWC@KFB!_d=Ehm>s z&m+BANsH+@>0VHJbAVrpMSjC>BD7IFi2b z=fX%K!{PK1M|3OX|Cvr~M(3q^X6w+o|G0+FX?9CEAWH>dEmsbHZ)|J?%yahaVHufK zYVk2^1aknU?S+$*r6tmhwjSa}f>t5;CP-^18gZ%)Max>xUyN(PiXrde?Vu63fptgDV5SGKJ zYX*1DJA-@!RhD>E5%TVUUHkS4o$o-205>$W#mj&zP%;1^2e&=w0c_x*EG|OP7a7?M zffS09la_%0Ajg199BvmxIi!qGCtW06TO3Dxz!yC;;3w(H$&LX3u+sn#-cEpm1?qnn zUKrA5nmrOzsCu6aAan^zqbg($7X)1$Z4vC<_(ZgYt_{C|!wyMsUHxkS zTwMVhNXqboIyMR`54WCoWDus}EXM1>qPY&aQUfsXCMDlsO9HTj2?G--XsFosR=mn_`k|@XxIA|$xT~xW?#kqrxEg?Q0Nn=x}&S6PKa%GT~_5whU%Fy-N zwTOYwm4%td=#>Cu&@dn26BE;wD5;G?nowix(HYzq%mDs6J>Wh!)6k%iDGIxB zLjlxkSlGZe8^mpb6#9pY48$^gAQ6|~5Jvhs=gzT7I3%jPU5LVFSdWr=ZDo<`^hQ6# za)C5K_5HMg0Shf{Hi+irH@}$oS9x);xn4K|(j991Exvr%KIK+tBVbT#$OEVjIj&GE z(zJX=BiUPz>X5rbRH0iCb2zKrAcGT_z8K4qVoEX1BIS9t7fzxqhXFHRY)nMNVQ>;) z$%bVX;O`%3Q`bKYH8>su-s8tfHcPtN+Mo5&-|f@9k81($`$y0>fYyeKKf-0jl7rA_ ze0;pKqr>0c9+FJbyb1k2BA;+t0r=w@!8M1f2}>**(DR);CrwODu3SmuqS(7@7lvx$ z9+8T~YyteE1Q_eSeS07TTSItypNhhr1Uh`nEDN(SAl{@LNg}2mGqr%JQpBZ6U1@qk zelrsMCm4kgQ}grKdZpa;HNa)|S3a*rk86D58Feby*>L+taC0_xn6mXXDH+kH3k9Me zM>@h5kw!L|p*#Hb>(|g3gOYMxC@V3s2h6w&$6=3yl9J1{tkRc*?dpYcNX@~|RVIaG zvEnJmG>TCO{A4+dO?roE_Ra3c>GK@sjOOorcf*xn6zT9WJVzb+C}ja7>eXKv5PC}LjMh+8H#5~hyp1n0>D{1p``TX7T^sS`T0wQ zNVAfHzgJm7@kVlFOeyaPXlQe%eAnlF*VmSX3D^mMlJl@K5tEZX2MKhDz0+N+K0A6=qaf3#5Ni|=R2Aq`KK)gNT(C)2R(^&Sr@g%h z8zY`25M5B5&;CSR;=8t(3M%31W2Ggs$4iQ`eXsrbcU?s+5T45|-7H1ef3W2$O6vcB zS0ad8*heHTe@?_?;>h9>s{*B&sQ-C+jCf52ZAQQXdSKm~0O89&lQImKWAUWdarzY?l+qQ1C z=`NM2eJpY*7<6maw?W6WzTv|_AFEO3k4i84!2_q^&q=VGfDl#V;lYbwguv&KYaXF- z;Os~goYvAJ^MkH!DKa1+0PG5FgdLu0MN~MPy^xT|Y#oYO?q7l*X@FJaGy=nr`_MLq zwc8(QN(UJT-6XVc-9Yt%v>)5Vs1yQ=#2gY;z$EAS@aSkXk2q#w|773!mVuf1Ee>?- z6-_Z&289!;2|l>}G`d31*natP)XNA>$Ei;^HKpTG0FVuW&w#9{H}($9urQH(jl&U} z_YP1DF&rX4$>D#Q#4?yBag?rHY5ix032#!I6nU*i21pO|O}oKjEC-q_4A@`2 z5)cx4X0Hv5fy}R@M8+_6N-!Aj2u~f=5R!YF?a5bp%dqQX9tc-C;&aN0?Qi|y4uES7 zbP~HMgbt)U(o1zw_fO#MCL@#%sODHqYNW*x+1w;k(uv{lKHM6j~XJbZ8ZIH5w zv73a%!&5L}@j+#S5CfEK*!6Lz#((`{-m|CUN9Tj;XPvm5_h9+!-tr9DtAJ8}8ZKi9 zww3ANyM_iKPR@QT2-F%ZQZ52-cB^vsD+OZG1u7{IFYn1FvHN!VIi^*3P@B-%hhC-% z{QxKpyBW7;0N%GnL##W*&?31DFr7l4Sh<;iV&F)?Qi960(39$e+xJStKbHv^#c_^s zu5osrgZM?XAPbnw(&8exXCh2n!M+CIOxo7qBxd?JfEJXMq|hPAzGGuo@Za!(aHYa6 zRpaC1Zk%zId0RK+PbzvUJO@y(S_)m${GL%Me#h%`y&C4%p0cBjGoUy$zcdSW6eJtls*pdMw$# zzypFG_b;t)d5GcwI;|eOr*h!~`}z4XlcFw@g+|>-Tl+yw3^jpg3U|GH`!aSYY69{_ zj!2x(=TSG9XZPaJ11^Za@Lewgk_#N!08pUr!9xEK!eVJ>ck1>;lfS{qKPS67ta5G3 zJHv4-goVj>Ke4epStEfa^V-{DxVjJ>Wxi|#DO3jpBXT*9>DA9YyiFPXbZ3teD*`)Z4Z(9!^p7HW#SECFJVflr%}((0cte_3})kTrHa%frN5v*x+2fI*nTL z*9SI2-mU^Ex}*d40UoaV7kVjfl)nktrvtR}q?T5W&r8f?QOH22j?wa4phkE^*YRTb z|FG7145mRB$^1Ib0rSI%4Hh9N zbh*Sy8<7784q8Z~3Tre(RS}quNp0BJ{b5W30jfaZ%G$GK-9?1zT5a7zcp(jeyXPjo zcePLMC>bJEP>t-Qr#}LZuW7-3GsTqM)?5`zsvjY8#8ZNmt{bj{^NNMV8U;XlItwdn z=Z_rmKS4)EUsu8cEcEVO`gq-OJcKA2uz_-?o3mHp6ocyzB9z}?Sk7y*jYJ5 z+BWXv+CZxE%26&%EU@8r_OdXMG8@iaxS*aDJ`^*c%11Ko^Jqn6D83}lnQy&v6CDCs z53ZThN6d>MX8jkgNSaB?n7ku?TezaRCy*iUw-TI<%qdg?pkuD)x}#-+ljuVk91WQ$ z5m6!yp!qxq#vIOm5u;MauZ9CkVA5AF=+o8S(p znwMdw?>4QVUV-}`jX7m3x<9hwwl6XQ^b%phSL6pM1WMVtMw zn$ZYjClG55$C-fT+Z%d!7M6`P1gbAtkJ-SN7YqzMKPMi8LxEGGZW&vp7e~FM(4jcg z<`;pY;h1dN51lNIFDI#5?FziA#;H?0;_ZOU70C<38+gTc>`(}Kk3FC<9hDpj1rxV_ z`Qk+~pB1nNE-nt#LIBzktP9Z@s04u9Iaewau{+|P!ROHz3Nd+hOn)WZf15{mg6W3` zd@H=&#Cwql39)%bR@Qa`f?zln-;MTPpD4LcaR=e|%%j1^K8vs>@I+f-J_r31wgu2{ zil<`cuuF4wdV)WM(ixl8{fw}lfOBcEz(TR~=aKR$s+8z=U7cUjpK%OlF9C8m&)T7E3dl=r+6l-@Ja z($Z(noPlNIWIB1Myz7cq!iv9@rE z;}`=G$^1_+$Y3!2z-R;06Hj+{)srVDf8-p8D-`BZq)RmIhKVi&?Gj2_pi&^1kE9L5 z+Xtn?!p5ff@|R@10@P)YvZB@s@DWT)PBsNEAG%OR99&~6WEgaO3B(8F#*&@9SlI=3Mn%>OHAd$fn9$VvB#UJ6- z_W^|(RUIB3d?hFMp?mV53`3ueYk-tKNEC0^n&ZR@T6z8sur<7)!Ey38_TU7nD2i9Oc2);Gq|cn1&e-&X~Pj6tl0F83k;4eWM!3~@rAurNeX zv9H4M3MwXFtTAj7SRqkSEm-bQMe#Om5C6LY?|%%!RshNk4%*XCZYcun!i7R_2!iSn zfZ>smwYAutyy1k4MUE;#HbIz{5`X7sfB$h!AzS{0W~UH66o{)?wj=8WfTWiQv69El)^CeW#tT>S|{7T|5BmD9uZDoVVU^%pSC0h zG3lrNZ@x*G7c&1B7r^!$b)^*of8c8IcbZ`aiR~OU<)$0Jc#vJqcqbqAzh-y8>md3T zjHs=_Y_7wjhCEZ8IoJd~efoq43lzELwh$70)n$EMufDvT1D+PJ!6Kkp!+EK=C05e; zfT$<~$rly_6Ea>V&RyNAKp zf}EqgqC%+&PB8rw6J0l?6rNv#$ICXRgMI=a;B|sS_g<Qw!Ac~ z8=4uZ1XSZR(LwTGf8u}uY&3OX`r%6g!WoD z9h6V-P!+T9Qg1?+4732eEO@`$Ub@6UPtWCLkD_lCa1Sstd{k^S__9361e68_2T$I; zxi$ng*ISqIkG&4Chc*JF^n)xaI=b=EVQdh3IKpCL8e_ymas6|%vn7zrs2Um) zaw$g-G*4V~;xvS&ra3sYd>03Iox!*|Mw+!0Ggxpya5CiO&7dw;d6}Au)^|;{z%)k> zM9lgn#V{@s^I)K6M=w2gs1+sBGibY+`w{l}Kw%Oxg;fy|H~@sl$pfDdW(x=HyQGQd znVH-{m`kEW!~XEsjok!}Du6L>-MU4ugw1R}A0M0;f|B`U6XZ}qf|eJS`H!iIT9jt2 zL{dhEdKAD9)cLDG1Hh;{c@p1`4-K6VH)(ry1POpSU9&KZWaanxBFPu9ldz7@`dkh#CdrzwP zCO^pBKI?!itpSG{fe3l1RO`^!0*)g6R9-8%e^034GJ|^^~-#b6FNLvAIopF61mJ_KPdjsXH4OYi`d4Gl}c6|*{^o5Du|mC7~FBMAvk z_^iS$p`<|ot`ks#QE@u&w|L@V#3kpw^eUf)G>T#2y_nHbe$55{ad}|@rQ;D15jq04 z{w3zM;Y(GpayGTGL7at>E|@`EX=sqWvVj1l6(a%kM{uL70sXPL8FR=3X{}vdKJc5y z5DxGx1@K_s+&4Id0ES}A#Hy3na}ShaoMY&j$=JaOz$>7Wo_&cWGcpMFG>Q)38femB8I~`Ur>>Zpww^c{MTxcwSV0*rOE%Mcw>Sl_}mAYHu-JJyeVEbcX6d z?`Zf1NMJyM1gO;onnH^mHMWdRQ%8TEivdyW*|VS6vjCkedX+lFD)I{n`5^251PoiX z+})3o#Or8EVVOlThpxAPZirN%*^mHiELo74Yk+uHRu15#;PQs?B0ev$87vFrIdE}p zB5L@pfd>+aNlC{h&trML-c2}w;`nwq>No5ISQb~Z>p66S%&ER-U>=%!QUNS2BWy6_ zM6c_bB1m^Qh2&XLAxiQPHY1$&$f#}v>z=gXmqdj&O@S+_@BIfy?|Po>-&!%Zji3wDuUEKkHVRPh8aOT6a-E$Y(U^^;b2G33G-3M0jzhj z9)OMiAb?O9o1eh(xrylgadN>Y5;OxsJw{C9H8;90nuhQ4Tg2Up?wC`Rg`E1M(gZ&O z!Y`Rm5)}Hv5EnKpZtVG}t+C%3zq+htUAP&?&r(m`irstkBY^fWTAuv*v&G~(;BS!D zX56GD2Z6A`PmRovR8|NGfM^jJiS6{QX;m;P3qWKL%7#fqWI0Lv zGAG?LXTo8P?A~<%HB)A$MzGl zV4~}jtSmY7ih#u`tEy0E0R%;`d~X!g1ik3FX8XV4Mgl#Ghzf+QzCSw3vNE|x-#9U) z%Ke z8uUCYSDa%w{99XFRgI|V`f<1ac2Is*rmQQPIL=q~<948u(VZGO&VcIZhYd`c&cH*$ zXQ7wkeg~#(U;vUdt>8xh8RSBD)Cnq9m8rgg0iNQRy~d9sBLRa7pu5GLz&sAM9mFh{ zRZAPm%M*`|)pv9h<0gQnVjh8Ogc%2rrLLNq%Qa#9aL$nv-rlRg!%l;hsY7BupjHDd z576TMN3S3W9bv?}#o>$73r@l)vZ*YCU`ZVVx&iPloM5NxGOBG-@m_(E&0rv!LMoy*5yK{ zp6>Xc@zs?1n@sGA7e!&C3pn8h*3;#tdr7QiP zv{LOR*X>`kRIx3Kd*RLT;N{!sNph%3lpG)~Ed&&({<~z#?%;g;gz}*eYqo3)g(p_7 z+&vw0gG5;Xjsdvyl?#9AwttjUG#1`7@Q}&zouOD8-*JtZ^V_pmju}WHKZsEe`ORr( znuqXL$^7di7Z?@7Ig>U9W7T!h@2klL z1QM;!{dlF?l-bvRy@Kq@m4#K;-ht|ShM%rmUb+O`4o}2U%q1+uSiO}^@xj|3Fa|aw zDgq=S&}LCwJ-8^H+?ECnwC5gMb0cxr`>m6DRu z4P%!RHc~JP2UHqmMU~7@DrjzNzCTkpe9Hq%{%cMC3Gcjg&aUlrMIEXx&nc*E`(J8@b`O1@)- zww)?8buR^%9RpS$b(GS?$G_|KE0uNnwdp1WkoeQO$k}t zK02mC8FokBoGV+8opa-sEtAxr*B`38O(l+$L`PmP6jy(=VLMxSOQyrnz1QV~gP(Ia z{cpinMrva;^>~}N2L&|ILeWUv5R4uEM-ir(wZa*A!GfiDQ@-g8tpdk+cHOUEzSP#& zL&ysJ9afk4@&@z^eFGW-2_T0*Tb{wp+{A>PdyZ8m7L0A=F|54Sqw(gE{3!WG_6<0Q z!MVZs#$DFEbtW(RkD*6TFWDVd#!w>}j;h;_w${znUP{Yd+WiOLh}v3iA^HWYN7H{z z&a_33MvPt=(=WTLL_vM#DB<6+HLdr1;Ml76$Fy&K+C)yCtEjzSG ze)jg!h0i^~kAunY$n5tJ>3QcTy82x`JNC1A+|8nG4e2%1zO+K&r92lyJa^4&+Fy&w zwrAtpe@vb@_=q6X)UsU!oyOZPyOVF^(YR6Sy-#{irLm0e%T21!4hssxyV!1GfPAZ|F$y9{C?k~?NLyJ#nHMYrnO>{U>yv@G_n>UDsrlaG%qQTg{=a2aWW zzb{ydrHP4&?={epp%JM!IT$bJdy2QI9Zn}GYvrV+i*s{HuCeb;o`W^v;juy9&Q9n~ zRXDJNuV1aRe`4Rq5$QbM7Fp4&o*-M2k+GG4RcKm9#wU}5dIGxtyQB;Zffn#I00ZHx zsmT#=2TC@Z?BD20;jL+M5Mam_0v!%Sjz}PlHul-Kxl)?}qZe3>62s65;l8xy@v6eB zFAgfCfQmzC77^R)3S*_>K#B6z}LB8H(JS5*MSd-Vt%_S+%!qQC8tk!@bmNsK&as{RNn0K}- ze%{LZ+mY{94I%Lc^;tZdL6lF8kF$F7waFtozxh;p;sSebjC=H9A*owOTgP%CHXFJ6 zqrW_lnrl_5_D<4?+vmq$<#t`_9Gx_ZS??5ZkC3IM^!wnsUO7`CBz$~+qOYLOL7p9S z(c9Njl1*kW4|lVDYmWH=p2)!~bcB3@>^sxUo%j1FF!z61k?@=jvL8*us7`O{esc}rbj6S|9B?QtFH3*QRM#x zbFgKQid3K}=J)x{@nm4a2Y3b*3_)NHzCPK*T=MqkU&JSD6w=28yk^+?(&+&agLOKt zreZLI@vx9)DAaYBTSAtNa%w-x=BD=3CuH*AD*>G=`nhd;B-qg_!FA>>{=kdk;@g^? zcsS`IVLWErRlJBo7gUrDen5c3H(+bUxDX7do|#2@rOgx+fL5@SqLZJa7sDGTdxs&; zDU1)n4#1=Z{Wc!RD4UqbNQlM{A!YP$79HlVX=wQ*^;b>=ectue+(F4J>c8mlv>t#? z1$R8d@M7vRB<|!Mko_xRb8tv3R7!~`F$A3r{)1E3+~ zg)RcNgbl|dIbYdYkNF8!0D9AI^h%&%AyL6z$<7$7EUek0%BnB@g>Mqqmmg^Ghv`A! z08#Br089u^Sl&0VbIQ;)G{g=?+7V37u^-~P+sqf-bUwZL$~9h(NY;-nMyY}fd<-+v z&vHJp+-ZJcmF}eAq+a-F3m+MvFOjTOrfC3Eb7rEA74ay=8oQ;s&xD0)8t|Yp2GzCj? z2}r=IGKKL1H5;Y(+{u5}LxSd2`|%^v86ukDbHWobf)>Bn^=|X&(eQ)1*0q+2STWG_ zRrDhIMOjgC49q4B2=JK0Lbt0cUdY1S9DWEc5a06fXOv}va%N<-S3myXMFk8d!0)K} z1@g`Z(b)kYfO^)PMJ2Enxa)u!JgLUctMaj1NMlIwe%g;u)w(T$Y z8up#Z(@{WXOkUx)$ZuI0Z>TFm)PpwpHLqtFHCd|O5LY)srs){?O& zliK{xOAH)#5%iZBIQJ^e{`gwK{>?8hsNc0}a2};SH4WlcKBOlbWwMK&Aw+q@0n?-xdswfZ4%stk=i__#Wz5Eg6smCd zvWd{RwNHSd8^;@@>n!rLpnN`Ct~1itS3Wco7Z>*r4GxAI05ykq@7Z(NvZZwqw+eLZ zaLaQLl>woE4IQ9K$TYC=Vqoa#gysy6Z_xG&(`S0moKb_1^Hqzd5etAr9+=kH{&;X$q|EJX)4} z^%%TOP1vk>n6tz-Do;fyxMkLBYyiKBjW;DK8jLi8TFVR>^)NcD!7BtbCnEZhjrvXu zB^5U6qKHA%I8IHYtOVxjKuzWfZ3@t5xrDIQ0!hhW$4~bH@95t+i@1o4vv)#55P^UK z_gIMb@G{rr#7-IYT{CzmfP51HkJv6`I%elPWbSGwxu=E)Hb;Ik2+$h7+_j_dsntbG zKW@KIYCli<*r^F?Y*rk|c$r~u-GjWw#W72J7W?&jS-Ue&y|LRVMI@$HQxi`Hegu9u zc#!X6l2CIXVU6Xet=(3F*lW~!W+e5)iEH1>^QsCSeAXy`^-TN654;hp%s#p4#h_j@ znVGmB8T&O|GR@cg8fp0X`Q&)+Kk!RCQQH^`U7XK3^r4<|UuG0Y>lbG}b}0 z?tkJk5o@(;%MnkyRNl$XeE+Gz>mdwp>nS|to{?v(OJ6fRkzQ1!YuCrwv^pw{92?|l zLX3kMZCL;K|F(XLTCeF{Wp*MlLp9zMx>jHyfR8~=oQOz`jqMqH!~J`Q!gZ0k;-G<-E~bcEzC+4<^@oCl3 zXNR@LZ>kg*HL}|{RmI2md7OtHrw~$i{3Y2T1*J3i@!@rfDi>r~Qk2tTURTiFd~u;y z0i*z~_l0)=A6w6_VpKxWk&XUK&xS9Xg!0khC3L$hAHlk0Vlp-`z<=(O$ASJx>=z)o z+R|j~yAJ@Rh8oVa{OSdWg~s(P9UP$S(g-_UXwCSi{*=5tnK#E=lVKXn)ZFi1oA^FI zV!k95(@rfUVsI`kM*(L&@lmu)1ZCZ1$A=29-_Ee{VOAsJ@OfmDr;m8Aur>A~8?LQw z7P?|x9k{xp#Q@lL`Hu0A#*TJ=HcZJ+=l#aiCf$Dd?qFI>)F|gzuhr)SgQHQ^-LLM1 z=zZ5K)-C$X*xS?4+SH<@Yamb-Pn$N;NBU#5n89`GgIOmJ(X?kJ%IU)F6UHf(T3*_g zjRavh{aC)@Iimxont9}E@1#p;;*Xrge1eeJz%IHa-ztH3i$Zhjtvmfg`^>0+FNCO+ z6!|(-HX7&>Beb4Q`z^$Xxl*;S*Lqpx{>-*w)3JS;otO7uGG-ET{*>`hY6XP0kaeb( zAD<69a-u4OiYa*hf?Blc+T!4*qS^RYme_m|Gmr#i>!hGsZU$e$2J%J>Au&)gO9rv- z6vUur4$CT)$^!bwaNMl*Ck2>6(L8T#JjucP2=EWK$RwW_vck<~uO!XP@dQZ(%C1h=Xb?wz=pJVr{M5qY5q)Ckd?uP3R zx<$JESZjZ^^}5hcB-)iuI|?@l%WT%rnIAS^nPxb2nKE&ma=y8Ldyay)-0-uMpCuP; z$tA-GZDr{}usPFQ^P?=T{nvUg;QQB~mDsk|7@Qb>l>)$DAJ)z*>%JAU*B;*jsf~ub zC_C~ixbqJPg0Z#ju7>y1*x1$e(5)!33RHqB$Bu!hq96hk2LRdvP3ZC5{K=i3x#0`K z*MI)3glJ~gbpix4gf72U8L~f@lW` zL6BN!+M!kh&+GN$jfEUXd9@xM(fa}8}$L0)J0Mb$D z*B+di9c~7Tv@PT_tfF{wvBg1y3BMX%<yn5TnlrrIhJ?thi0H2YP2rI zzz0m@!vk7xS%ArYI}L8=)GYnrj1U0CqMz?QxShgn|8`OfF71a8cUovHakRne0Nx2C z?=S^_Y~%dY)O98daK!P2A~IJYFp5de2pi2`nm~?H|y`1XtuQj zf0UH(Wyk6&9O6r<&peuO}pT^&hzq?)r|d#|4uuiV7h_ zTF1c-+PFO)xRqBt^r=jVK(@OgS4Szi?>b1I9&|oCN*MZ#ryCBO4T=1XgSEBrYsmuXd$4Xy^OlrqaG`qhl|wQw>CmPri#R zy|wR#zrloVlaP{ks&o}V<00|49_nR3RhL*_g>j;D5? zBy2-=cGErt+kWMnDri;<3wf6&s-6T>9F6dtV*!B4$3MW#-&>z)iVrv5I;mj!Re=tc zkZpSmVIi@A{_EViYtUQiKB=sHBtSyPh3C0w$2Fwb1K-rpxFb-H?uu>zfiut`zI=3! z4@T#kdya$1%dcLh?>&hE1*a(VfH$V`pC=z3YJUD4V}i=d$`GudviRhQSoRL!6Ja4C zN*)Yw5aG0#7B#w0!t2He8?vI zVKrn`+zuU(CwTtr@{>Tm-p9$5mcFW;rG*B6xZ$oiGln|Sk9!&x_U9B-RWJO$vv5>k zgVly~&8dQJTds}gVUh-56FMHanQTxpc?rO%PmIziBk{bep2J5y$$K z{g}s_&ykjjmpS$ZV*JJN(tb(;v$k)`@%WA?|JTcY2oE?5!`PX#XWLp^EX1nl5m1|RdXKvTd3ZE4^DjNYk2kY-9TAJ3iFIUQd z7=inJ7!lEe#3I}&50hlM0C_%F#GRlKLMICuufVsTKDPItPW;Iq{IhA~rZ~+E#od-? zbrbU9Y?l{3y)oG#;iIFS-A{X?WhQ{Qr}uRt^y{6<=0BuR?okh)QP;JUloxFNBigA4 z@}A@d{=FA8tqfo0Y>^j7zBRnEUHUKnrpNh@R9KiW{&Tz1C;aRs|M`LFYKD?_a=IM; zW_jQL`ojjHY_|`Aq(|5rGXJ|MWPbok(GG9;4${?9)RIm8DA8lf_Fkqb>O9y%NB{*- zJ`6beGiXT_*A`+B^hV+b4m`pYb_~Ibms8K*2&t_cM9Kw|B9!fRX=j!xa7E?h;%hA| zoEZH_VlB*{v8lfSu7yR>rS)PKd<_doasVB;7LE;mwHDHw@L{75B0LMC6iX$>)&wnG zU5I8O1^$Icm`#1CwuFObCJ^J$;H~a^KxK*0JfK;h&J$D+eF1JRY$C8H~(hz&G@pdLobSdTtW z3y+Sr0p5$nZfW@xMJbPMnu`$z@BpImuSI^^C~nwxF!Zh}`)OvhTNz8>=U`W0!bY#Y z>mFYagjPZ4_(&1xLtQKLO4kug!N*X1K+QS(7S=G3?MP|giZJ3Sj1jf7Q-@(dQ?mvF z0$7AluaqAr-uqC%ZHg54`K!BoJuVbs%pI9=f+F~Pib@zcWDS)bk8P$)FoYDr!Aq0l z0D@rcEQz1O%})0ip-JGzeMC${cC5PmV?e7!xlCRcavoA8$is> z3NfBuj*xw3wilC&-VEaE7#SL3=DNlnb#5z{9 zi&+o~OmJ)I#=T`+K(H^JA0J&ZylX;2K`#cx*lt63ML|GZgXzB%1Xhrc}pP0PmO zYB+TNQK=U_5E2(}2IdM~5X2Ku%K>?p&5%~_R}f$>=D8UJk>~m?yMTD%7s?H}{rm5! zNkhE^Jr6e*7Y+^pa`zrQP!{c)JE3HEsf47Z)r1oDc@M)GXg-D|`02L)g}O-4-x?1_ z-n%yl*=$5=QqllIC$l7JpsmVm#^eZOuj8CRU=>EPBRvZ#WY=F=!h{Zy#)&L-HD73! zdBQRvK^`AR%j`ALCyU=^XG`PzpwS|p1A)f88}h*Z+~je;8OH70z4*Pth`GlR!P zoHf1!#%H1Dvb5hRAOQA+k>^OXKs~B$$d8ts?rQbx&ffvpoc;7A6@#k1)Vaa~GHsE%Xrr0evz_0rrBUSQxeodOfy z6h#(O9pq9d8l4V30`-9kNcbZijsMai-R{?YV?1hDAL&Q#6QB#Asw=xR z;0GTLBsMsDAd!KNH#0Afhnd+=V(9yKaMdGzJ*ax_yyIKaRiuNV7Ms3sM+Ma4WQ#iFT>>Psv$m>m3;c-I zh3GA)`Qf9;_^6Frj&F>c6bLmaD-vp)#~EFQ<5r+~nD3kTYd3D>IznqdUqDlH z^JVDMhuL~}jJSxR=|`SkJiT+X{=M`$^qol-IIa{G>o7}%g1FC&+YBY&%{$Gf*|%)j zVRSUQS~IqU!;1@)qW0h=To`mGfVzbcE0B_y_ypMb)~yw0aEo{YPt3O1Cdyb)E1aZ~ zD;fZ29t8o-p4KFUe>m|`-QZAw7EMS;Xe%@Iz{m(G|136Yp+zwClms46m90mv4l@zH z66PpC5qn*;_%&qym?9U)tS)0*gi-HR1iLNa?Cxiv`8gX|O>aqgXO4>6Y3X8+42=|gGbFlGP5=dcXWot+| zb=7rrTA=I9N<}!M4mm}49g$d_qP*TuK2S2C3A^`+6CqE-%1%3gu{Cre*9*(LP$kOF zZ6sqRctgzTU59TtlE75$JkCKp|MV&57N{S5Ks?&%mKc0=Ya^;5Y(H2BpG=>UT9EKTml|^J#MC@<4om;S6j?+TfJ{A39^r(rBGvx@$l>a{ zTKoD|@w9Fa4-z@&=oq%KiHBQ6m5G}0)d|7bgfIy)vAcXk$SZ`or`bX!r=ood2?8Gsr#IHr-}_*f?{Ys% z&W{hvpeb8H93*ytBERWdqyqg}{XJp7E6Gdu>JqL;R<15gN?`Hv*xA3snYc_LTU?rm z!CTO}^6ZECYm{v-ZIWg_<#i|#t1y|qn_9m2FaRV8iQZ?FN)J0;%{xP_4erGO0&SR~ z@Nl?XyY>fBhE3mKQ=i>5a&Y6!^$U(%SmofETN)pON=)iG@8(tpyUe|Nr%;DJt;gVK zjGKJdF?S**gmaV0HbgICB39BHOajLSw7l$|{k!ctBF)D5(pa}_fj*JGo-!y)7t-EZ z3oV7^$X{b)6_*C;fD?kH>G%E}YRn$Un$RrMVtmuG7l+TRo{bK9A5m+Skw3MOTVTVv zr==Rn4Pj47cWZ{MPoR3+HY{v%5=h1Sg*|^h?j$3)aIQnZxNw(X9zH#WhfiEw95pxc z6S}}j!X0_j?By)pP>%8D3ml>=SY^h7rT~i|%ErTP-xvJ*OIq!~rI+N`B@AVP5a5r6 zL{Tst)>s2!T!){6^TJ2nD<{YE3VAk^#IQtZ$C)u6c1}(gU7|kY>25xLT%w*6_?&mN zkKn-C)N*P<9x(@hp}2B11nE9UTrp;s@WpPVO`dN9HBI#a$^9{?1lRLZlkIQLb*J0} zjmbu&Ci;u4As7Vp?97Wm>>EH$0G#uqf*sG?5FG|_%j<97zBTpM!W865RxS|l1otOH zl8jc8e*SY>^M!u^I$c%pJq3KuLA^;sk|LHQDdSCs# zeo357eJwG=t{6LpM9h1DY1rxTYp+=)4yt%HloQbMTJ5|UXJWo4-Y2juB6UKylMrk||Kg{u$I5VMBNp+!ut#vEqIuRQ?_#$}G;gaW(- z31IKe*qb-sfHlY0+Q!5re;k2ukUo>`^^i$#4;K;^Mr4rHtPWN(KvA0%WuOF@1r4DK ze#vx~e>?R_n|0r545tWKNn)a&n(H(t&zwT|d2TKv1B23sTUn{FfMply zZ}P8Q**3DQe*@iqgaAGkdN5K1?M5#7DZDFkMX-HgU7@~nxq1~9-!764ACo*Cp2DV+ zZ~p>F`=I2Fly>>WWgHC|{ZhMudD1(ao7gJZG|3*-zHgyg|@Oo$;> z02j2t;>;O-QUu-vA4-6PyRG&~I+9%xMGP-9vnBK+z%0(35l84=W#y6kSHX0EtHFRZ zVaec;!ls3Hr2QMiH6{G`5C;w{6~XE1EHziY(}%r*kpw_5t`(jzEGtN)g^I_bXuK|! z(Ed>rladN#DzB)(B)s~!Z|@3_r*gUfz==&3jkB>KngOtvZNnMdUA=mUh@i@DGT(}z z53FK*>a9=<9XBa-x`OoB4=(*)o$0DqDe!b747|Kt8h#TJ3e=vDA2q@BoZNw%rJLng zy%dOT5lPf$ddLO=tb+95#Js#;3epk+Y6uZPKwZ@coYy#q zjhhsK?iP)k0I4L;4V%VrZd!G*;-(!t!AE2d`m6CmKnjnmV zC~O07+>n%#QltYtl%FfWPa%EE7s;i@;c>WRP1l23@Ir@w0oIG8c z_{e|37F%9#r)gC&gy@OW&q_CY}`jw;N4L%QSkw9D=O{d=EVh(+f) zVL-$(gBF^grTpvY?|(1?GMKHRjP85Y&@hIX1ZZPECLDcZ9ydWxd7bc~XZ2sotlcMw zh8k!KW-q_f{HdaVP7exvlQ$-YhL24v=3g|lh7OO8qN)aoKHggqb;Ubygxua=Rq+Mx zlR}km@WP_+Im`m_vLSNM+IpT^i1qr*^K~Ir3IWMa$^vU=6(-#!H>6wP=0*s>TRa)7 zrM@Q5$Aoz`iTPG@C3{fD&5*GPH`-;3B`nL<*4BboflIEy5%8v{L2fWDFD}lO9KsKt z_~MfI7ne8+iPguUgHlrScmehExTe5dQ0*)RbI`O#g#$(LU;rNf?DW3s7iY*lZ)M*fAhcpu$&BD6p1L9Bk*cyraksU6HUc`iM{DxIqQo|fu&-7AZ}>(%x5qN0WntK{Ht=jeu8BV0f| zuvsC^zp3dG#E#5Q2c|kqE#h1lbh0iD!sg$UQaXI=24Fhl+Le zwl5J441}nX9~wS{AZvb&b~px)5R!`zA1=Gb%;P9a-QiZsrw|&w=^v2g+t3ikHY}8E zjb05bD|5q!KZdpLzVY#lLz1kdrQDG&{V_IdpV*54jo`yp?PW-h#XTGUGqBpfwyF{# z;9uJX#Dexg_Cz73PG8kV-G|%lwHXz-)Im-)Hb)(JH4h`Wg~lIAO#PAW%e=A~GaoMR zU)$v(V_;qN{@u$+-s(Ax)_4wa-gt*6?dYcH{K)!6i5O~y4IBqlRaDMn>L(G6NG@M3UHv3&OX!l zP||eb4jTp?k6|Oq{DM+;6W5`p@m!1LL-^uYI8`l0$c~Vgm(M@2cPAuHs5E%1d$H*t zU2<)D?iuO{&{fw?=vi(togi15-hY;Hh)=m5K?ogEra+~L6r-z$qYwZIVxXW5M#p>9 z>4&ijl0~<}CmfLqSC1n@3-9o$ zExo9b5zXO>;2w~LNEU;-0-8`+&qby*>{;T64!MH7A^*hkY!+fMP(%Ub=&6u!*}8da zZbjKftS{k_aF;}Esd%tK+aqyea(Wt*(;WBrz@P=N1T#3T0c|aGAeR%d3!cMG`~{29 z@OZepJDXZ#%R~BNja^@5S!vpE2##ie-kLEIX{GCGuO3Avr&6^cT$qUFLCV)~M;FrE z@S6U2VEacE)#EwlS3Aq;eyIvYcQ?Ka#?E!0{^|s2Fyh3xytHmIbvbzqmrUB&npAY@whsMRs514DnvljKyH zkhwStK!XfEeZ}R_EynSTv}@pP{rFaOX*xXPK2A3qX1LmBc4=6Dd78KX-mA(3r`Xp68noX{!! znF<6JfWR#UCQHeT)YPk%i!ewO8IyzT-wbADX1aQKpq_>r6-Hfnd4MXR9%Lq-Tpm1x-$- zIykGa^}sRYJzXz|^@kIX`Gf>211Tv`z2q5nWBPwbZ__a{-eAIrM?-V-gck#QOv~@f zsgOQGln7gb4TKznQ!p5V=QJ`k4UNG04CyVfUl7v3<}itdFDV|t*CAx#L`UNYOiWCK zXj245y90_;po`er-o3L0GXbRJu2^%`fPh=2k98jdHs&p)E zEiDMcNGpQk@;(-5>&zG`jVx}z!W%CP-|&@e9uaMg^S&I>&-c;r&D-qvl*CzmYmGzF zwUa7JFL)W>@Ny>@#gHPq!=Jve4r6o_{kVL7tnB=dT&^oU!M06CW3OUp;SK-k$7Kb| zP9eLjxKlFoGOtyTRs?=I?|Y|gwAvMS7N zTL(+>hQ{O{dYuNJCJIaY&pQ^rvHlQqSai*e#NuQ2$FpUMRN`Uh=Hd3jhkJF<{AluG zXJh_0Gh>^%LKb`$hx}e_%p1DTx->LPk9uYk!FJH$GtM9Ab6?-#h8T?;B76=w zuMO__DK>TUT}O^Q;=z0(A;JPH9nUiMbKDbJVg>Y`P;p|S{Haq;z>^h|m=rONAPMVY zZPknJjGNnG<73!Ou8ll2FQ5Nc3(%4V6A}1XE2}}w@c=w0Cn<>`D{wAE*xKM(!JeRE zC9!)qMtMQs5UFO0k{``QlenJKP@p*=AVhe!qa& zXiU&1NQ+PfG{Lk7=xKNnu~#TZQRk-W{Dac1=eM)9MMM}mavb_3B*Nh~kTU~O4FHNO zb}0v@^2ttW)B+_j8H&Cjc;J980DzMW5E-L!BI{N!p2IppiT3u2=@SbDz>RnfsN(>l zJrH^ss2>}SRFlh2PD(?N&EIUa&PY#Jq{G5SFe8X^d{6!W5S17n-bM#WG&OO$+LL`9 zLJvS#fhOe(z}|(b3hr}7rJS-d+%z}ztC{ftb>L85nS8M+(;{|DuZL!GR8%KSH*iLR zf^Yr=U;_Qng;N742hiN8Uik;FEpV%rZBpJh+Hx@zpn5_=f??_bY0=ERbVs&jvS*E4 zdpYLbH`lYS^i%lH_qX1!JoF50u_qeFchCvr8@`%iVk9(pwVw;OI-sXT4IoSWFO zwU%7{ z-?a9{bj7(o4)!(SXs*ik<<%V%l6g$B7jqQo zfWN`gmI;Ol{Ym{&0& zcUCCq0WYl3DPO>i1a4sWy8|i!JuxgQfqq!90wj8BO1d-1>3#h8Ck(to@22?jfzoQ$z)6mj}ND7AbenA=^{Inv7AH5Eg zb#eYE)ww6hkMOvwys<2Kh;td*@yHo`GJ-hE1G(Jo_$`XhPy(W7z53Zb`Q8tK^t803 zFJJ-4f>chPMwxu5il8OmF<6Q9RzO$4+zHQ+UzGM`e362wrDxkGR&p; zY|j~XI@$|qjxrHmdF4s&eM@dv#=eV~8zjHwPzbG~xuMsouRsT7Ms4qh<3BbBOzv9y zF;_V@{A{eGyQHE={!ow`TWh>Xkx!Fz*MftNbnG?O0RMZMnu>Hcw)58nI%nj(rySrb z+`dJztLZaQS9_h7wr_-gB$S71LFU71oYW`}mr&;3yN|`y7q+M6b_~kNSmZbwB2!ii z&K_i7w3Sc^YwPNgQ(yN>NB|8bh*&9m7%x2>g?HVH2@eOsiS%7e@WpOILEuCk)@sdV zN0lNCZ4MxB_x$YibXc`;`O6KDrn{gXc~@V*1Wi~L8%QSiK=^^+kj443^{hk;fN$*j z;7xNwARlh_ACB84X$=OzAQvga=OD~@{{0FLhqb;b664W=>{NDdR9IjanAJ5jHp;Rn z6>IBZ%-lziKw#>IL(NW~egumV?k&LwF&b(Z+3zU2&z(PiikXstlm~zo-dqMkEOf4L zwe{k)1W1@OsIAR!bQtwK&{li>EcDY^kB~HlX};LjEG6+lFkmm}d#bJcbnEY8 zluS^9WS=~fdN>#j5ul>suAUx`=e`u!$^B^r#&t=-nL55 zN)6uL&eFyxxgr0%DHZYT?mj5oW+;ZbR0@hii}$65aCYXlo(xH9Xwi!_Xt%y_;_YDK zkUY1{m<$#1i?w$hA;$jx_N@(JFL*wWpZ?|iYdE@@@ZHufN)RxHD$ND%E3dR!iu``z z+y%mSLfPx4?InIwOWs$@anlvkD{6(AZu=bbsvmm0T%&Cboqe3EZ*Goksgn@`vMq3p zV-+hVHNAL2^+))A{Fg5lQn6J)ZgEa0X{pwj6urS^#7Q&p^($Df7eh16PC*^NNiy`; z?kOLnvAuCCIGBV>fHB|O#@@{Cv$?R*D{KIwjbU~~%)N5v!+14hu`R#bTcFU=7ab#U z?j5QP#0ThUX#w~^P)WaxT!q9+=F`k)Kz*P*^_wl$2a$^B5OW79V9a=_m8T@In>JVK zVlLOR$N}MVU|s;hd;M9y22>vo%!H4Ebc#=}ytH+29ARS)Y_u+oIu^xy?jB#w{ZKV) z>}`OxG3^SK&LhatkglX9n`w$w@yi4&4W7!2Axz(qZkBchq&{{S13kUsPonEpotRAw zUY(UdmE{VsN@}dFxf!wWSV9Pc+)IkU^D#W(?&(?i+646G@NqoD5Jh++nDOGpu?`jt zu0p*fcj(X}_W!%-r^b_#g!;nYbw+;7j^|II{UfrPm3i?o72z7=y7Rr7mYx>lp)HAj z{GFf2_+|%Y=M`z3Ulwc~tIp*-e?&u(=h_Vy|Ipl*G{pV3D1yivGUfF-TgfmIQ7CkC zjb&~AGX|RP8i)<~{_f}Q5bkZfZk{h4^5d2?W?Ex1v{$Ud8Y^B;yo0zI#jj&dA0`t8 zJlUVJt+n;-yv_KqTLt1p4J$DN!P9dEir&w?y)bx@{=D!O-NSkjxh2?qz=3wv_|zOY zP7c6==LL4FQ6Dkxt2rq=tAGd9)JS4~IKS

    itF@DKxtQM`!#kiQPg%nc3OSnMt_L z@L%EB)ShOIF{_32)!cjy%oPX|ghRKP@2E$L(ILw$A;`);Yf~WR&=|pofCZ#Nv-5ld z?3@(bFD_w3%*5enb?ZyyUz2E=kfH`A3uq`iSlDj(rhyDTI8F8LFg`wLl6f7dE>pFw z55^yp{%`0F1Egpp9}n?6ROb?r0ve7ZJpeYDvhwnhJfuALwYEATWVPRO=A^+f+bwq_ zR8ASq6W8ZB)lN#Hvngk~6?gXI^NHI?Nlm-Iy*S&5`Gap+bl} zM1^7-X zRzGiSt$>{!Yysd$9r3n}#{zENRDnJDTuRWfWJo8Tm6a7QMafgz`15lY@ONvMUtScC zc@Hr|++incY{BU1Q@@fE7k2ONiN8YUC$@h-M%1QRLK*-(9QtQz5#Q)5fN@be%NVae zj)HiO-xfVIJ9`X(O6@GPs*0PgY5f;9B6AG)SxJeCKw|1IsH3qvD~840b-G0+gARkm z!T7qB4oN2JGpOlZI2i~-h}qqnZhXsd!7K)M;2Fb)cFAM2q{o?=Our43;Cl5*j1%9( zx?4=_5&{8mPLV?|0|Q?NmGafZk|}z!9AyO8e@?{Ww0~?9trR1VsasOZV?DVU!ZYo6}l= z#Bv}TZ$1T#993YGwI3Szj@2I3h&>`Alw^~8a%g5m8PdT(8+pAr{A0&X*!4l+!rp-9 z6B_4`prFJIfc7X29Bclt?$rW7l%1Km2trn-o1PQ_f)osm(4IZi1d@GSUTyIz-BbhX z3M7v&HXVH*FB^NSt+O)$&U3sff=!QY*T!%c<5G>yEG$qt-C})pP*UclLL{y?>@OFkG&+JO9Vt3cC*9b0FX<%E};*!BxgDz^wO;`&UNWcSGtIt_n2vrwK+E_J*$A zH3&Vu^UZyR3f5hI+X;E)AdAha@ef^X}if?fqFo=Qak@&+Hy8E znAbQSO5g-*PNCd*6KU;XI>1aYJKPF%9CD7Z#6fA!3OOJw6-A8-?<+-?WZ82twQy}5 zs+g$0r&ADJtu)51iIPD=OiX@bOVf+>QnBNMgZ?_`_5lP3Nl{}T)c#HViiV`CyS1Dj zEj&C=$5d2O$ix`VN4@|oGa$6kNnq~cdV2bY2QDyAzeSAghruamiom<8MpR;KmD{S3ty1WrKJbE zhqEE>7~fLqxipO$8N~~*YRHG6$!|H#j@UJ1;2=Q>4<162(Xit*sHpJxUkEu>16`(Z zGZflLbWwZ=>GcgJxbNa$3~2q80N@YhDfo4Ry|8<9Fkf9_-xX(YxZX#bvhF z=8yd{%mb^JS8ww0P!9NZDgV^yjeDuNJ%#i`I^8(nVXLU4b7#D(yI)1z#p0fKzcUYJ zf9o2wf>~fNp?FMyVqBp2l9T_clvi4)+F;o249A|&&MvV7&Pr9e?k_fN=#PBL5a17| zL7*wamLj^kdv$Ieu7DA9olVNPu9ChACT+jjx+zTh&^y=x#(7L)6YS^vdUkhg@1yN* z^|VRgW_$l;V|--yH{ko^aiNYUrY`SDTccAy*dlsOV_|vf%wm^h$HK^NG6nbk%?Sv6 zak8QM_Ap^0bDn=S&3`#h%IjbLEUj{4+z1Le@-YGj)E?HH(pO7Cpr_u7#<96p&T$zI z^(uP&hZeiu@Lg@@rXn=tmV3#+n@%D0Tn7#~8NPD`6A*ioAs~JwSvQ4)-S#V5l z>ODI9XI;7fd|S}cgz{9x*$8t-d%MqALU7F&-PhbK;|GYAdha7ULRJ< zlWacvIdaT+cFv<3+AmeD9Y0?9CxC5q1c50)+9e?HrBoo=LE&G5v{>WSV6GsUR20bB zJTnj;K7COY-KdWDBWnL8*Ma{*NYC6Yg7k#UH%78a)I@oCa^Oqt9B z3bzN1?1Nam@9=EYdw`8_;*{@Up_$o?Mh3d3B~NecGmu&@34xjUhfr-f^5FUZWHr@0 z$<*q9C{t0sw97X-|9h(RKR@*UqW`?0isHddk&Y6X9{Bt0%u8S?j)mJd6=PJk^Y zf6k=0A3uVsn6MWX`@@Kb6rEKEgu2ZaH2?Dx5Zo^E)28lct$5PwufR#(RL~1QvtUgM>|3 zamg8x9UYX!|3-}^1Efr%s@|WP7XwUvIvX5>9{;- z{fhq5cz2DZStT(rkXTu1HRrjsQ_Fx>Gv2pml~P!EqWUXxJV^)~6SN7yX|}Pl!g<{Vz6JpUIK2o0bAn(8g%%aXJh)N(Livc|3%?Mb%u9%& z0s>X)$A`HGrn8O+*(+65Re4XAG)hn_K=d$Qvej!d&eaG3sCL~=?uI376MbHOjk~b@ z*!Ibxgy*l;5k!~WWS>tPHN~XZYYXWU3yXE3!NJhJtlzXrMFBM*dN|Ov^V3K*16ja@ zeGN`=RBlkC*@+H;fh;(2@x4zBbo*(g$A?qEXAZ>qSG^wVOw3xZH8y_#e&0RbO>oID zT>a=I8Lle8MAyWrc?*DorrgpoMd5u>yP1Q5ad)fBLKO;-9~}zhEltvMKwl@PrXajL z!s7_koXj9hq3<7Vgz8H4*3{&rMS&suPvu%X2&=%@u%irfk6|I6%%3MCVhQEoZ-El+ zFr5(p^8j!`xBxtD2sSnreGOQSoE=SSfqnsAIblb0DvS_8raO&4(o;sEdxE~s(Qyqt z1fD1KBTo$X@Pt86<&_;jPqUwR{%Bp+SD!&5psC`dAslO>Sx>6&H04So`R1Jf~M zV-C2nw6)=Y0AG$oUr?H-^z`D87J(^Z1Z?P`dsrFHX{f1D5}tqNI>BzBLO>KcoRZXj zZ~{O5WOuay#dt_@kawuu?}mz~`CU2g;bXGBThnL;}%nBe(!XvhUqvkC;jL!v>!A(Yb2VVRrwoeRt5 zztOS3m5Dz>fxSWO`D3Fmi?wjr^{2x%|O34^%X)&>}!P#;cZe~n7Kof@FKy%Ul=8Yh5SS0jAx(l_7&3I`frzfzFmd=Obhy5by&G2Q8PdO3Vv4`kec zgEKJnQ}5r;PfSjKKUkY%fd7~p^r`P`B6g~~&&@Fr&wSP@*f=>C=hbUlGm-*nQsac5 z*|B@d+(!8L$4%1GYC3c@GyU>UFCTA~E#U|tBN#YE{_fPG)r((|ByFk8*{i>Wjv5^~ zLF_TBjD9B{ks8e{T&s_I9dM~6%Og22X<4TsJ4uKF;bqy%g<=`YH?s{J8Fm{vk9qZ{ z%woKfmZkKl_>s#c;yO^bt~?hxBdM90(CqvBLD<1ZhrV=@=jJePzo8u~RG^Z4luZu6xoUz@02r_ktaiLd0=CJ|+UyoNF%Xa6 z9Fh&6D^?-M@*ag&fL>w5o+BPE~0;9#{OTd)q=Ol zxP80U2?lyG9u!UpEhF0}Rs(f{WDV{$J*uo+L8LA?S$N5iagVLXywbJ#)xNGzpCAEE9K`Y@ zi`LazIy*aCT9D0YYDYO!04X-iP&2~gUUxAYNmdCFa1hQzZ$&Q=qYmJE_H@~`%_!~M znW|b-X$%EvW^l0fJXV9;ywRGIjZIak;jaZ-xE94u=E){%1+D*v@DW@-3cYhT_Wt-Q zsQa+{2(PCg{-e_ep-7-=1SalaYpWI^5Y>>InYsCGdLuz>JxDsHpnLZ**RtLoeU`Y? zQ~^*8+pfTp0l|YuED4V`718v)w7B@3M9lpa6juQHC+u}axVU`%>SCdnQ_$XwaFh=p zCL|Ka^=)=!gfM)Wxn8(GD0E$MF-nVPW!I`Nh|kVlf53XzyJZXA^VyN-ZCmdOe7T}< zeBJQ$qubE5^^Tb1+d?e>FbWQ>eQ0wbr3Ms~dY-H>omoN&o0|F!EEleQ>W_*JPhb(l z6LzucF%sX=sKEV&1{j7*^w$u@nBGq)pMafb5kG#c-|SxtXZjUD?q3TceNfI#*U%$Y+o>-}(H*Bgk#1Q6Tk zAR4^y=(}AC-ol)b^ab|0nay2>&%akM9hRoNc1=qUHJF(hA3sHAwx2JNn9E2>+4s_g zLB_@Jt0mv}R0Fe(U_{3{`3|#x8={iqWupG~(ply7A~o&Tx|7g;plm>BEt$p5JB2ex zj;cj?-@a^4Irto<@LMU}aRVK06;21s)-tmfj9rT_8KXN%|# zDjO%h;gQ3Wqk3A}6#9>eUaxe>RfqSPjN_<+Xnb1;?4u(|pBTsMlXsNF=)$(MDtKte z4*z%&XfgI227rfcars2fJjiAtTPFsV^n^O=LOcc74o|#FZC)s*K>l`kZ0w0oLfgZK zadv?%V&-8ft;g3>8JJlz^?7|8$tq+YA5LDF)B)a*UXjPPLH#KE9hkPYweniRgMSlU znzboj-iJmQoi8;*@|T+!PM_`Rt!5MvAqXVT zk9(!qZ|CkTr@)U0WPXIaH z>zJy!xet`8xP_W(YRtjMU9BR22f5eTFK(~QYs-bADzpv`e zvCF@FxP0`58Ag9?f1>r}F@s@qIg6nJe}_K9t*Ea%_vT)(QRO@-nU;G}<4X27p~%-Z zCLYGNlCM&?U36;sVW@7;$-to8oua>aUCLI;$La6>R3A9w!ZNfXzDjpAUyJ6vXwh}Atu7&Ksm61Zf9VUAwy{X{?_aMQ)>c$Jm(qg5wkZa+X1uDHpm$?$ z%-g4}w^QeoW94|T;4#Pi#f6$1Ov&ZOU3M-qH$K-+y<-`;5_~?sZ0h*vEtc)l?ulL> zbaY-ui+}BPIj$LYS72(s$C7UC6ycEmR%=~F@9GDci6g6vgVP+Rlv6H4^94+Mx(_M% zg`bW%|1=C$wvvj4e8EB56N(J$LN~NGAad~^=r@}H`04Z zns$=lBrqzwat^c}WS-EUM#RMda>dJGc8f5n1=7Yc7#dNeAjk|OV!&u&Fd$%hysO(} zH)Jnp1_ckIV&Eg`Ku!QMI^~EIkJ)I)85{fzrX~6vQRv1hyuk!e5gN0og^sp1C?0ir zm?qm!Y0iaiK|KK}=4M5VoA89g6`R^U59z?0H?g39gPpi99d(-lJ}=e47)k=dh@bY~85eCH2E*@~o|4~>mg z+@nIH>AA?)cOu_gXJrnrRTXEds%bn(P8P_~Gp;_JomE!wr)DiO-b??XwBD_-C>}4} z<=_2j-c+~JaPic4U8tiL-hE)cJim*Wg2Nb=vcYLyLR`z z^@UO0k%YC%f}JuZ^qZm_exGn$aKJw$(FqHwO2qD5auDA4;IY22n3kIQecU1SU8IbA zIywTRh{yV*{3zwH2l#Z4)g@xn#H|F(&Fk&Rr}}R_%E}(%&2`(R;4=gZ+geb$P&hY(m3ey|0$- zxbt%c25lQwj(>VbL@1b!7*H)Eqai9X zaw=2F8LJHC4;=PKK9~9(qWL&-^#Njb1O@xcLw@IeG|gis6!fW<@#+s7e*lkJ^;F!f zkx_`D6K33F9aWzlpH`UfBrLxe*<&$+Ea&XdA=>Lh^0)mxZbK()64~f8T8)71V0s~` z1sbdg4CeK&VVo49=p$#7%E?iU-jZrMEQ2!#VBD{w;VoZIl4~XG&2UiHf4`Dt%D|&) zoGXP&`|x2mzK^$*fBuom%%OHo`0zoav}fluZQ)Hn00}s z0xR+6jT?YJ`equb7|o1x$s;$h1ydQxZo$u#w)gayn49N!j?pr=y?maKQ;#+eR2dZ| zB|b_t11-|YzC6-6|95T+4sfVwsgBrQGCC<2`eNWxMXy7t$K-KJg1D`P63sYQKfiO+ z==ILTLgXb7zc^{oI}xt?p5k}DL)&wJ3H<;54R0|VV_#t?Spfx#uSKpBO-(o6R2ska zOCi6Lb3+d%ozeU{U<3OZW9>sIj%MjS1BSSTfOpANk+-Kp}*43k(coe0e!J42X%q2w*v{^6qOCY@6TO62ESuCMQp9S+@?s{ZP>rH?T8T z^g^1F1w$FEfQUpWZlL(`9X}grfc!wf0?_zFhc>tr)@$GBLk) z68Fh35RD6%n8@cC7jNa8oRWgV1%B3K@<*e_N0SgBk*hWwJ8k=pc|k!;o~#$vK?wOh zrjcg{T1ZDvKb;=AepRB%EWdRGIXq}# zl-q&spg4#4!id|lwFzE@&z~RLX%<5}1Bl2Q?ql-!Tf;rDQ(!hXpgzSQS)D1SP896J`^$C!utyrBpC3~|0s zVb=#|ST=9gMpCdd3&GylPEa11jw=#Jx?J;U36c?Y;poMV< zT2AC+fa%UNDolqx#IX~g5HbqLL6m~=u3v9#GlL4nYY2I1zoGL+2LOy>3gV63hg@52 z4oFE#3b%9kZVthmr7C}J-q{;v!XjGI8 z*BvayU%wpqk3pSnZT$mIy?+XBRu-1IPv;ZrRqQbc$A6Pt7rr(626#8du+IS97nv3g zV8R>yGNmPyu-_&UQ4MKrcHBNIQ#YBmA2@JTOT`{L7wq%XG=UoJc^8*s~1cVVtF#_E{oOF6y8p_ zZVy%7KY0+im+7-hNj@K+sPMQQ%kRX|u%4gCM(Nd&7AR&Bw0P zcy@rN%yYAFa`v>go-#Ab`#ePWCSjAC+%wH~Lt$>#*3ogBA~HK?`^jq)$vgbV(8`cV z^=NESe<7MTm;+p*Vievd_NyN5uUGrrx+$4 zdtQf6|=$~7MFiz0#Om;pUY;d7W#JY+4H&5%?VyfM0#M~ z31EVsj2r;o)KHD72U^*iczwff4`C4?d+FPq6{U=3n~r>Q9~h@l$FKGv3ZWV@PH0T# zJCx8Z>;gCFb2056~Q{o+6Yba1yKw2n-ZCG-Cw07|Jn>)I-hqopb=nr5F&{+R-sT-{aUne;2bJ zfpA0eX+SsNTmd8-lp9!xbL1!M1$J`*!6&!{7+Q*1ad_4RAe1TYH0!|>ULY(?WT*}d z8HB3-+#Qz$v5~7uuCowm6*?5dgO?UxU9gxzTLsM~>R|*N{(C^s<9f!M<(Gc4v)y*326nBx zckiAtHr@I>=r|U?Sg7*MXQz*t5Pm1~85$8JvZCuDzj*1HUP|JHVnix75NWPE2(dug zdba5YF`#?sj)8zvOA;@xKc=x@!;9i!2A=0}aoawWDuthzF;Q-G%X2aQ911owoWA`& zYgM=_FmXj1v-WPm_&ek}Wwe&LPJKlX6Z!lu{`ahhNevdaVq@Ofvrf=!p32YwTZQHf z5u({Ra79)0sV=P{0f-DP6cwSxiB?aC&^JzFXlYXqF1w413pA_9K7sS)wz3sma2U$^ zpK78M8yNO0Fn?Iv;FGXqig%aO#%Z9jK{NfLu5J%&2rMDpEEH@C_(%j1AF|Yr|2eYF mh>;+kJ7FjL|M8p7H6q34x3JjcV|lzDK{~E+EKkwG?|%T8;PeCl literal 0 HcmV?d00001 diff --git a/root/opt/dmarc-srg/screenshots/dmarc-srg-report-list-small.png b/root/opt/dmarc-srg/screenshots/dmarc-srg-report-list-small.png new file mode 100644 index 0000000000000000000000000000000000000000..78f6b3c6febb166414659cdec8a097802b65ad94 GIT binary patch literal 127423 zcmXuL2RzmP`#yf`6XF=*Em>J1B$d6gH%V4D5!rihNeI~@ge2o6*?Xm9Bw5)zdu6ZR z?eqQr&->9konGg4p0DS)@9Vy<>n>75P5vq&Eg=GdxT>fiqlG|V!;e_cke9z1<5>NI z-*BHvsY)Rb=vbmtQ#|-Hqq%~XDgxonhCl>{A`r*$R^VR*!i^7sSTR8$gi{a*YR8Nk zO;Pv@d^2Tv8N|iqfA8xH65yRHjtY7%2n0#nsw}|*F&=`7m3PyS zAMS`yl#$Z*{Igd7%$KgyOG3Q7cK9TFBHIJLN-FprxuRwcr)8Jyw_Js!7wztAZE+N1 z7sht1PUM~OIf6WKma<74MUN;G5++FTU;#(lC>_ z(2>K2rf29%5s`(|{kNNvp(x#UP95~C$EQa@hoA43y?XrF>{`*Go#e#l(4-MXNuetQApcmLl(-dv;CS`w%! zMG0*%lwVsm`#;o=4YD+jow|(tsv5WLinq|@&tmhJv$M0~HnArMHiBp@INX`YTQh?QVU#t;z_9{y$wb+7gF z^`#qs-P`Mwq07y~%}t5K^*uH!_3-qhN#5ufphn_`g@utv&U1<&V&=Aly~UBi?>~AL zlc_bY?)fi?O#R2e(8(I7z;ZwR_T9U?%ErgPa7aZ_wfIYdB-Es<27)o>dQ|K&PexHK zBdR#kNQov193~4I`~t;z7JEBn_Q0~J_dgCPl+VFNqEenOa}~aNhTwMh-M&z1rqDMs z%tw<44IT#*9&_CYM8jUOL;Y3@QJ?5;H-)-rGas=O>Qw#IJ-fcXzOwQG7nkkoP_f{J ziGADBf$eEy(Weivd{WbyWBvVcZ!cfC_I8N&LRsdx$;ru;mFIB^p(pQ}O;Azo|NZyh zgUPE-gmSrLOxoJop%+*2LnbCB^78Vev$yg;INVR4u=kLa#XCHC7Ss*1|*p`qDy!DcQwmzX()_|K)K0dvt0EcpMEz@9CzNmEl&I_?ZOl}GD}HmWT+ zA3ahRtFRp|X=rHZ^V@J~JYC?GIR2aK;5&DHvu?MSh_`NQ#5{K9w?h24;^Tan$8Zd@hhCyGoWFYs<9nP4?Hd zrm*ls@1r~C`FrxeHit&Yog^G%bI5;@BZry?v zGQKz-CZ!W}+?nqhHV!yjHNFs@3{g>6A08g|5zTa49U2@Q#6s{qt$_t$ql$8IaT$ER zH(LH|cW1|a{ZCkgRWM`AjH935+26m`&dxhAH$>q0prlU@HV?e(v4c#;zP)HR+3HTc z3tvjjYxIHRRnEtPOm9vuu2qcj`4>sX>2!IvgoXL}Y5v9ed06`-%Wd7MU%zq&mg)We z_5b>%g$R^nbgVXHSI_*a%k5lUmy?rIQ*%7q9`)kI3;2TP&sUNgPc2`(Scer8ikWj0 zXG`d^;4gk!`>nY6Hak1}?b}z`8-yt!=Acs?aKlltCJY{wF%MDxzU=ng*yTi@N4o+a zNE)TGeXya8eS(rCal~cWnie@>kwklJH9|mjI>eM4W1&cAiCf!l9}32tjC>Z{q(Cpb zyu?9F2be!@L*r|UrnC(ar?pebViD$IFripY&gqC|g3LY08%`{Go3o8AloeE-D+()^~PxZX0~Fo2)y!Joy;j zMo|a?yIB{$c6KU-+8YzKmGG*s_Zu#G3fnSCzqrBoXy-}e@#Ds+i~3E!O^J(LiN=ew z&5OQ^)4s`ipWObxaI$B%J-<0jWxjp;dwiT5g{1fX%k;U9Fru~JT0pHAB^{@L>mb4$ zhrHm@@v1+Zje7d@>CKxr4Jz$#(9l%v_KM(PH(!ozd3kx$cS(e|{-2h;eaX}&9LD@* zNk&u=Yioj%ynN@;?h?$oh_LXt7h_3raacMBSVg++qHSJjTXQyyk_UT2)@fW^%Gw;E zh`?o=i;)!hLdv8>*6qH7{XdrcQtsb4hgPUo2gpPSw&u98u1KtJesS#z+j;dCvMDZK zcPPP&kmVKEVi_VVI!EF%I)iv^Y(yEJ9i@~FOWKkBO;1zm10m6Ibx*c&Qx6;GTlA|p znB=o6c=a+3Q#6o>vcuaHlaX$Pt0?Ip>!us-1)N&c0{?YfBj{KUL}Kd}H<@9Dg-LSb zBLer`-w%iU)0U@D64Gsh%At3>o z{Z7OK8)4*sWEuLiyiZ(NQ(H<3YiMn0aS

    Ai9*R0F~zVtTmo{GRk*I70|Tn6xQ> zDoVO?!u`6e=Joq_CNx%X0N{d(E(>e~GE7>uq0@@IVEoswVC9LCk?&J&kJ>Lz0xn3U z4`C?RnEqXE2?WA78s&X)b`VP^6pT792sma(G#Q_^8@DCV_PO*)T%5ua$ybg=qnxV^ zPxjYO&Nc&Lm0#JqT`SVXBaNBkF{*pHC`{H`hRl|y7dnnIHawg>SSc?La9RHKx_x#E zJ=Y^~nq8DLn^(K(&rX+rcK-Kn-&an`zO~U^66u$wy5pTr)Tc!k}it#@6XWwftqEQ1xLP#$oR4N}Y0I48ghc23o7UmoZ1y!N7vRb5?|3Pi6=+4V#69fW+bKsm{-FqHR&K7U>&mXH@m*cxER@T>9k<7Pl zMViutNlT$Z`<7}QXRurO4vSAV8?#utK79Dlc)r?rKfOl~hboGdHrj09j=lv~s9Dk# zZj5)mk-)R}JX~Bjh`QsIBJxNJ2qi|P2PL%|El0QrKnZF2tuuUCNLfv)D9feZcf_ri z*CDeZ!42BoH^=+Ujt1PrP#6c z(Luu#7YOUUYS(4SNJTY14i^b+(AHeTMoJ5A{Ks%FR$OcE`|;O3dG8q9<@Z`2e7_!R zD)g+(r>m$wN9(f>yXgy0t@y3(*NwT{t42wFrq-uLNhX=w{<|l#>%NmeU~gMFYJR?d z?67+6IK+?O#Ln;A`(mEr62F>yw@;6y740##(Sf*FSCG#tRGttFUCb|q^aapMBDbu4 zcUV3afFR~N^n7dad& zaL$irsT)Ve#)<}(t<&%kj&zkT#=iaj{hQZ!hUm(bD-c1YzZ$AbU$IL@*TjBE%tv^|=^q%zo zc$)pdXR?m}(&km*-Z1wQ&=ySfxVIjYAzZIgT=WOJ#kx!2q z`t%s0VLPwC=F_LQQAq2w$!{+VR8_Acrl}hbW##1L9zVV|R6t5fIv3>W>>NK=1(9^6@9pi)9QXZCg{>E_ zelR0B1%=b(7M`r8d+k|-#OX{FZ^O$+2}*gmQg#1+DW|5U5|Gm4B2EX5&jxqlcmqcLx2CB#YI(CPh2mKzJ#%?!EqM(Oi4v8*JJBKDFfuxv zKPAy^)56_5&0A6@&B{DJDa?H+AK<-H5TLi6ocgJokD|lY5g{4QIrmJ&A0Kg85FYSD z>)F{{VSvh$e1_{n`z>O;d~^?+^AsqyG`gI*5rHfURA^*&fXyj&?wIEW+C}}o=uzpj z^S#L&pMbJu0z_akPvhI--gB>kzTJu=Ubnh`lgX15@huCz&kpazq*vg~Njc2Pl{wvf zDbu7LK=@W^>tqV2k%1<9`uY@t80TZ2b3@Ztibxqz`q<&sJ@5KV8qa#8tiA^lxrb^T zl-_%TPXJTUgxgqKdv4YrxC&1Iq6tEIuM`$!`t9o#>zo*0>={E{0Wj$l*5PnILA~K< zF&&BmJQrm|Z0Bx|gTD(zIhbvD?+i9c4C;95;%w^Qzkh&7R~C|u&u2&jK5B44=$%?v zT=f6fFQ3e7Y(=x!6ohm2>Qxp+XS(Ef?}~?4TW7Wg)FsaT=Elav#_k^TB4?VKnjm6} zgqzZYd+m=t%kn>7E`a~BOB{9ODJKhyh{Q5T#JEiU`STpDyHS5IX?(Wwq_l2F$;G8y zh3(|ea6>riQ(>VL@}7Wz=-%%~>f%Q%nNLvCdU|?OXB!?+VM3zjzkAo^aLY8e|8Qc{ zpIQXFIOZJAJ$ciQ7s%$-(gU%rCLfQ9L@x3;C`PDh!cRILh#$8y)G!3p?L4^d%hA#ba2D@tu5zHY&aeFZDBt4q_>e08Ff9TPu5 zY18{=cWBLkSH%bsB@({V=4Ab0L9s!lyQ?dmkh6uI-CC6K z=`6tMjP&#<)R$4asf+Uis9UEtE63J#$=<$s;|QNjU|0WR_buS!AfR#m+t|;Hn`}}j z|3>3%4XBUr(sdsBiYH^jiis|EcrRx6ybm@eP7+IfS!sy>tnagDdgeeZDJ^wyb^Qn9 zovQcoFg0cBbTU5QNxny``s^7y=1T-AgANC!;I0{3P(otrc}1q6lQeVO*UHK%x8bK= zUS8HrC+C-J$x$Gx;o=i=?MUw3tV+4Qdzr+n40|3?g&y_B`7 zqMRW0a?-o#g2$6INi{kqg?kytQzZQ~}z9{v^ zzAIHJG)%7HX$vL3-x^zanlh6zU|ukF-E-5}<8;-TzmF*L%{@9o>bWMllPV=4u8f{+l&Y{cpiRxko8l|aTO3Uvgc>9OiJr+hCvS1T$4 zf2#)SpTXhhRU#wa^h9>~7wZlI$|zhCn#G`N|8|XMcKI$0l;@u})A2A6dG9#hp>j{M ze3<=aYEvG0bat-65qg{A!TIvz&$H^JXd}tfcMElYcYA~nkIpm&mSnzurPi>UZMJ^1 zV0FUZ^XvR20~2L_E0b_2YBr$dC4c|OaPk&*nja(WhyQ4q=A#a2+})>JvR>X6ym+7z zVeViwL4?fKE6vnEhP5J@<_~VB$sv2r+Z%brY5NYa^%+S_gz6}q&R|8c3885K1FR z?;){X9gm0x5;*!gRUl{5B?)@uJGTYo&=TzvEQ;|SEbWVc<;$=uyew6uaRCm_&HLE|iONO-ahsNo%qZwZ(>Z05Wcobsp>BlciUav);TrF+H*xpvGshPg&o%k!G|#rRv7tH!SiGTXY^*Ar0EnC`P@LRec$ z>AI6Wk3XHkZtJ^xTGi#@OSc-5h>I@AK2Lmd(|ACaO#Tnj?2uz_!_auv7eOKM1q*SA zb=7v#{N7cxT{g*6B)Ac_D*9&W^26c`Y04rK5B<6WnH1~A82&`H@4G0 zw)5`YySX|=P;74dWoQf1QAM=}NlLOM%)DeR7>I05kzwwy@F!~foDQJF6T82yO$G>$ zZ_!Z$`m|XKxc^7hiu#IAx%7!uT4Jbt-y`W6%FD~iq}^-9SXuK53Z8j;Lw+;J(<&TX z0TgUINHyJjoR@6G$-w~>prxhd2qw3o!Ki4EFsvmw7&}Pvy-pDYIeAj5V4BF}`^w7X zoR2Ln(va%Y(*6t%wtrdMp6lFfyznm_HhB6}?Ed|v)Kss-t(kxSTx%zc3=EQPWo zlqyn(R?7E@9T-B2w6tW68GR*}YhPJgU47(mzUbgNoLIzG;mvV+c_^-7B`PJpdBd2{ z_36{6KY#wz)Ly>&vLqzL#r^;O%+AcDkL^sz$XIi(j-eNOEj7wE8c~hAYBB>jg^&^8poMnUG5~MysoY; zt8y<$HzR2C;^Jb!fk6DQCA<^$+SysapnG3oxbf(x7=V9C#te>*b~zc^+7|U&*E!Be z>*x$Q|NZ0nSq%ZXol^(bkSBR+Q(aAMV}1QG2PIVF*%~Q5i-1%MwS~pSH}<>%8`z}v zc6I$nM~6G?$tF^YotBnX1LY(k5fP-eE{hg+k^Q~B%Z0MAcqzkNq3>5r%mY>7y8Gpt z#wo}!qEyt>2yuh=R)>LgJUBQw@oj)P$$tUJn5UIpEqG!32Uilw;5AQ{rxl5+nTrvDr1 z(d2T`PPT5q=%=T?!Hj^NjA|!%k}(gnHCV{2p==VPSC^FyGvx6Qeuo`|NDn^q50ICa z=Qe0|-eFj!^}*b({BH3j;IuOU7jbw7*)%>QLsUrU7I~y&@ZnZlo?o;Md*CIw&SKp< zre+XKNldJmzUy4=+e|H`GQC2MnbdXoFPQPL^!vij$XmT6Rb}M_1s3#D8E>Z^1=9ze zqC1;@c4^-^QJI7FO~rYF^gX zAB&1?mo4UgEfv6;;77Hap>>l|5~Q<#rrv#a_&&5KpTXei4ImW!{H)4_c(5ZGww)61 z-@7ODPOa=ij-4C9II(YTn`Fdq2E-jj+8viW>9dN6XAsR{}fm7_hmLX%@F$O`7nzy1I@#V{W&$ zw)!_pFflc+yBlyPy?sl$mi6e-qk)l;kHf31V?(*|Priw!}GC zVJHUp+@gW>*c&py2?}gB`B+?hgMq=p-d;^nvHy96GNtMN_sEZA?V31cH3`Flb3R5< z^TN|Vv$TwkjaAP31-M_Sba-iger>AJm^ltuZ-e3?P%%vStodm6H>cF&=YRgx@bEZ* zy;yc}V#d%iEm+dn7+_{L3kP{*`0ww+M^NuGEXSp!&_v1@1)RCXcA8g?rKhJqc=3nw zfi;gbtCjL->FMcdXukLL$s@0XLEO98A9FbP_YZ~ZG~E;g0aDy- z`jcDOMVbm*(I7-C+DMt-&)xWFMBP@j?d^G_P?WN8ma`-R&j0r3D&_6K2tZB%{+Kqp zw=cj>>i^%)oMr?%$n0hlU<9FvoN*N7<>kG7yJzzt;NoN|D>L)k*gA+q5K};nsjjYO zj^kiwmj`Znv|K(<>&2h1g&#kDY;4TR;h2nLb8lzai*v#Dhk}NS849sXq z^Lt%xsFSom0crZf;)~Blbp%Tn1lN(_X6X<2ia6i@?;LY_nmtvas`fkCuidC2LX9=m(zluP^(1eaL`3v7ukner*ybB zTyBu0iBKE$|E@#7x}XSr zWAgWJs132yE2|uAB}PiZBb;Fl|09M-8P7~1dbIp?-p*0$$;#5L!83`VkvTc)&(RCz zIuqO|Ty#dH(0=ObcMH4aB%A3Pscl`gWk+k`n5ZMWC+rW5bQ`!&8`15J&CgGFu^48q zU0<)r;aoqK34@6xa!(-m56KkD9QU!jz`@$$!?*l=z6*1zU$GvDT@lg!zH5;({nnJv z?ER~x#<|e-Zy8@IuwWyg3>I8*;JKUil3*|zXGw`UZYyZm_x=5pxfu%hE4$FfqpoWa z$@Ed}@o(RLZHw6QE7bm>tZv9=uAcGo#m#f}P!z-0mM`3xFR%v!xOf!aZTeKzSf_R1 z8VRU&9+_|Tbsm4+HfB*Imv4=d$wkGT&L@tdBkfrF=yr{Y8Kmi9%}KBgEF2) zap0>YW0RgfH#?f2;v_+axtTm{b8hQQfhCxiCY%h3dy11KbL$*8uw9NVK{i)YlxN14 z+h*sKHkV6e>!>#H1uEE2}TuTvSm)F;Ozi zDZx9pP&Ef6HuW>KI;|rJ_qo}+04j-tMM#O9w6^! z{rr?Te!|_#cl-8jC=Z}&0f+}l7nGN0&j62HB_UB$RfTGam4!v%-n~L? z&X_qUR3aiG9%*TTz7B|Ee*QzViGqRx5A#KIF~>pi zp!4L32whB25Efe3P+$Mg&=3_#1S@%DkClk~8cn7sN}4vhV|7ozcu1b!YrZX#Lakue zCF^7y$k!JY`j_>S%Hu}tlkd-v{;7#?-&*je#xO`2>FJG5O$D5v9)aAJtuZn=Ngpl8 z#mOlcv%0+8d?Uh?rhJr}k`T}+oD-N?B_$;*tHr~^sxAv~Nc3BOt*NO2+Y4=UQgZTL z;*cpo{K{%-4MQc-cT?ZKbv@cyfQ^=iMsG(ynDpG~VuxMOZRH{*C8ebF3g8xg2yHYQ z4KY4;(CgR4A!!ofY`zO1D2q9XD>CiUO@7(H$)cQ zYmGf;!nn8&@`I=kfU|6AY01c-6Fuf-x(dD$Z||Ch27h47;TzhijfwF?HXBatjg6-O zI#s(Y1vgKxmNwe+(M)>IMFUX_QBALSsJFMbqeBj`26^OH{TJ|@f^;1$?D8>m0QaBu zWv;KR2*a`f4u&!UVlTuXqiRph-#m86cj(4#!2XsLA8NgP5=sYYzGw7 z*%}{fYfp+RC*u`Z7<{*|tj0l^1(OGqI{={W-K#*O(Up}?I4HxVvtwdnV7D3M_H!gE zbzi_3$L$Ybup7?RujS^lA4UK}55^}5w~o_I-QBMx84u?_VB6Z^VmHH>pk#rE_BsBy z4DoVweIFi7Hn$&#fCPoRy-~aA?%~mRe!L2sBsX^s_9Mi|o(EHHL=S;s0ILl(n0U~- zuMd8bN8)B(52L114m~f$Mo13)D|uRb>K|Zko~zBNs;-`_zycT2?qh%DZhh>-K9PT zA?MH>&@5ahiY4PeDCIr3w+FFo5^~JXpFh(b8oIu$T}~uyM29Ky&(i;neC1>5^Eg&Q zNW~om=^Qugc)=ewyee_SU`}fa6an3TAp06cLo5Q38e-Awn3&6Sa+l(RmJI|aSHLc(HeX=#DI$IQ%(gR*8taz8cj$uv1`kej%Dr9rWdhnpKj77I&D zFH!pLAEBg^#JJdi`N2pMBsra6%_$&%f7Ml3j6N2&sGBO0cx<%5=;)|-J-vka{d6ou zdwV;jERajDU%&qIN563@_P>0-lajG@HFfnq3}&p%^r4axA(bJFhLW&C{{;-f#^%-} zg^G&Ghx~jUZEb4-+A!(ngaL0+dIW;4pa*CRB_;h@_x0nw)nXmn$B!TD=;(lR33Q+Z zOfvYJ{KT^idDNAZIC*%6R`;4sG>UZ+SW?r|ZPB{cY3IEj4R`tYehv&Iq^E;UwY{9L zUrd!n+RN8{c<2dX0D{TZR+(I`qLLEuO)Wdsry-9^)%nU2^Kx>qiS{9i1EHg;I=H$g zoy~XamJRp;l=8kbHcpwLKkJpVv9h*X3#_;b*Bdp0tPGyEUjjX2&Rgzu9f+t5ZO-;T zWskX$hCVhnHZU*1JHa43_CG~NMw;-YfHjOd;%knA?wgZhckc9$kK5f( zH_+Dy{SpPd-Nd^4@X%0xULI5z<)d_jVPC#{p(KHD0->R&7fC7r zSMww*7ixnw3os0f=$*JM`k6FudBHCKAyabUO%e9gtsf zm<8R1u-nX88cAh07C`51Ct&a`YZG`F&r)I#(Tav~|BuFNfRxZUm6erMI+9}5Jo8WJ0@@WgQlO{?pFgd2 zFNW~!vPj(NREK|&>9cVsy$6^+@VAYZKO>bw0l#L!FNL(VwN=j&7vty0W`Yo!t%2Mv zo3j9S6y(gYbvUOaKmgR&gH?_f+;D&Ymg#a=wSXm(g&ZCTYEkg$8I?YuBPlhgEXmC^ zx3;$4UF;!=Xr0@B9Uc8Y9cr)Z3jQ}E-C~`Bfz-srJZ(;6uZ6@PKa?N}S%RhzDxGcK z83PeaHT^!E=ciSU&35;pX6)(iuA110jJy)eXu+?itW2asb#&&>Z3C;l;EabIL`2O4 zT*xIqIGym->S7AdfxlwZPA=C8lXTnou!S1H?eOZm%*>L{pW9Ym&CZ$?4Cp<58aN`Jd%(2CVAx6e{I|tH5C;g{~$lXlZsB5;t+`!;FHREt_D(2 zN6LUhHNE{x@XuveuAgK`bwsntPpfiMwhbtos}1Q1!^*swXrtjELJnF-!xt~RuIzcQ z`RravWq=u)0M`(Bq`=t)m4_U2+|dA{w|Z)`b149>62(Bw1ZnsYaQs?*)0;H+ zo#4(8f$i?8f?rvN8Dvbh1c<`iZs0m(=>mjO=h%t~@YU#G??>rsfJM44*7K2wnAp37 zgt=``U>d;U*Ja_okobh&|IoBT|6NLo!oa__woqMeND=SS(pp6Dqve3{0yk^Pild-i zg+5a#VHoyZGr8P;AOS1%>px-ZqtGE*9F#x0yWcA1c{0dpYRk!mgNf9;9#Q~tt1dTH zq4uZY)$QkOw{9us_N%C>&MZV3@^q#bpPd{4HWvH$^C8fSz=n#6i2=>k-3_Y>y3*=< z@)nA~9;@AxGczJZ1qR&82OImn!O+l~q{?@x~4A%VnvV*l-jC zGnPXPHHw9X?RjRJ=;(+AT6c(&`o-wiTkP!5hNv*5Mt{16vd-A3F*rmRZWW@xU&GoK4Jr8oPQ3<_0wr! zs*?{g$_fN>i*;Yd;|@s$eRMqVI89m@ZF6Ai#>%>az|7m#HTHod}yYevR#^77xesZNGC# z;+VNI2V&I$-|SFnQ#)~+wDWmiNv2Ss#ZTB~lmPD6MT`LYgQL@M*v`AdDFvi;EwMX& zI}alSsb@HYE5%3b zvcIMWTuS*U5Tp6poak9!=Zf>3aY9DN6f5%!Utb6>>>2~{6 zs0(}PY<8B%%u*D^svm>T-EZG@^S6;v9{8tE%vPE9X?dN|aS0M%?%f|fn$qXnb-LJT zaN12@d}RHyO0?5xdQj4EueTBZPVXYo@u$-HNwjp+$?p)^Hd4b|qE36UQ|&vq5|y@V zu51iV@gZC?)r~EnO(tM^_or6bUF#d zYpl?9TJ&JwD#ScC%rxgcY^TuY_`q@B2ie{Er6<$ghfdYO}@{UDAQ?q`H44JSL6$ zXqhmgd<5rZX>QZ>pUT@sHNAaQ51h)Y;RDPhm`ddtR?oE?cIr>pY*x~8j8FtkEu&Rt z*j3xN`zrFw_!FgdpS5iMMMvM!dH3Z#59>D)>hYwG{66->QMDkh^7AL$vjP~C?dpW& z1iWiM(LNU==H^RdR*Pekv**D=QD?qF84kUA-N)qV(uV)d`D1gLRF}yVK0z{u0t|38 zdBb?+RgP{9D`OBM*yP(ip|%-YFj=$5EFci9tgOJuAbt)HFYS8bn%!y22}T8?9O)R5 zfhYndis;3K1y*);-hy2tSv<=0&7%$q74K_YVrVNuqtB{r35GneZtWp=WX#b?HM+~4 z^r7Ig=-t9zLdGAy&|afn!f<3wtJ+9R-U(4pxWILn*V}U0ec%_hKp+x2{#kT)?>~dF zUDX)0YWI>mn8R{7-l;t>zVV+j4fVk>`_l_96vn}j*hp>5TzBsED(AO7^HOuY+vd?3 zRkshb7B6Ip`iDC1{rEMMtjqhkihsv%=95yS`c-tEQTN$=Irhday3VV_#BURmZ_N|> zk1sW2#prS%Y&(PpriP7cOQ<4v97eug;Um`NYTl`TED8*}KS%>#Cck+^P)$c7ZU= z;R;S)C;^U-y<_HpnugMs_WJd0*GnJOCBejVcsLikOMfF}3uD6PyJ|26$wn@B8(dFN zhU?b4-*%q^O|C%gT?Ri`^(Bw&OC?ik!R)Iu?UbOgP2=BXRD!q(Q-j*pKq$-D_HM@=}S z05QLPyT8^7cRqkR$+*T74sukL35Psjk zHvu4xlJ2et_Cp=$I>;hWzd_9a<@{2n4-e$t))_IMeaN2B*?@um0G(Q>?jB6}4%pqt zSbT|~_vWCDzAqra7z(f*bYK4?jImkz(vrl57edm-%o!SlfCnH=YU{p zxXbl<Hjjii%KaPC#8*_^1FF0(co4 z8$jc_9V990I8cD`CAoEO3HQG%-Me>h--fo{ z1f2$?4Xwhr3M?tM35>|fF~9RuuSgj!ZEcn~1s=mHNmN_-)$2fQIeiFMVY{jLYi@h( zPes%-bYomn>z=NjULo{-_^hEp@!i<4PsX@)-tahGf!>C(#3!^a((XZx z$f8Jc^=c5!rdTM<`wd#!mfcWo&Wg(}i)(GKd!g=trvW!|rJFDqtE%;jJAT^?*T0!b zzgQbB7v$r=c{BIx*MH;HE_9uPzkjo^vQ~WkT4e~J_A{*i;^LwS-`_p&0r>gXFJWO} z#!zso>l9U#mGSZNlJXvdiUai5g0mNJX9LS?%gZ3Pr{8}e3^Xpu#4l?BK?@JiG9UcC zU%3;sI7<%vAr^wJvugo}()oiEECgtBLPGyZgB}KS(F6N&s8cT~8Q7zB;9G=|14H?| z;*SYm2KWXpT|y*(zGE;0%dQN5|1`me3Ku}L4OsCHTZni~I%1&00cO#J4^&-H>%lOn z1q%s8qn1{DR#vQt3GCt48PFXifcSudMfc($t|5yk=2dlLcU^=vj*72|n5>Q3A8*`NQr$LrCM@kwFgO~Z^ldw{FyN{c1N z()c%f-Unhc#!y^Dh6ZwfJ%o;c-iLT`DJ1fWW9Nr>3RWUpjCR?&>CZ-pc$N zP!uFe2%(_pLlI?D@dpAoyi*T5Yvks-uu_om^5$j$^d7)DTUlMb_3DykoUpHyWb_2G z9awLl)5C3OMXsua-DpdPWg$mGk=V0E(a%Ahd2{wJ0{9Z zTY=GfaPOYmzrU9*q*pnRqo95!lZFZqJ7^kAv$fFo&~Db8K?fZvt@C%G*lx@I1Kn)o zk!{ujli)!>wE+1C@&G3#VWM5NWIFn{IQ5sXD%?Ku#caPhf18JABF7l4 zg}la}t-{r>=2h^I(C^Ip3_W9xKvZk+FyeK6nQ#1bR@8X%cXKGeMD;BjwjkzrBoh1Z zY-{rZm@5W~-F?>kHZgHV zQVDppI0djAI6FH#Io%;yX|>}ciMR=O5CYrGtt-1!&{#4Z9c)y}3(S+BWTEyX<$bHV zxf#J;6F%arSN+y)jUOU!QND5%eC@Uh1oZzLV#l_|C$#jRn=>YdEcnGPPIm#BoT}Ol zHVq4wY(ifXv>erq+R=l5!^Xx7eAnPy>YURo0&~XQi2SDy}Dfp0=XK7^x z1vr>@ZN5R#4yGo@Gp@uRm;INS*LRl?NTyQnj%Vi6j8_tsSd%f^X|Tb?&JX8c*MqSH z7y}5&FbAF@M2HcP$RHnn{|+?BB_i?mKCaztxE?73>Rf6gzyR=4y!4`;KbLl~{ueBuJB~@zaas}>s3m9v0iNFM*W8B>Ea9eh_pehuO|rc8 z3ZNJwu%n~nvO(}C5Y)g<*Me^Yq=$zE1Afpb+#I*gnMgRW3waR;1EAo63J0~s0=5Af z-4DJKyZe=6Vtjl}2I=BwX#@z6=;kJUHupS5LEXx`ebM}RSd96~FZ!=z!QWbOBFH3b zojoelzMY#L@Wznb@T*vT>@gy?{;omL&8gUb{mGBUU=*!0iEIi@4mDEKN93^Aqp9Sn zi7%asYEbPazKDC^jOqMt(8IufF=7Fe$HbN||j z2CrSK(qR!kzBg~)0EwGByb6~<&;q-agQNI-L_g3d4}jp$%Y!YSS5rfqAOb?rs%y=q zg`2MP-h&4~slc`Y9$t?-32+ezCqQt4Uj+6nz+Z?I^+u(`tH6vK%|aJ}&f~}HBj|_B zahGi=KqEm%LC0wTkbA%fmX$dIXdQlndnzjKVG4WF)6;YPPX%l;{E+776~JBFjefDT zw*GF0{=TpS5j;&LA1D*>M8T#Nq>F)W=P`#yh}yOle}LrzO61be4)GpTMGK3zb$6iE z<5|ECCr015UO5%>_!np5r_xehAt6w)FwlUWBDf&862OW>-LvePDG@Na?hc)Yp9WVp zHa1F1c=EJhM|mxF|7W;MDt`EWVA;;rwsm42{7N8TJbd`@e)@~n@T*|p0YfHR0wDDl z6Ezjt+06^iplz;?S5xfLlymz43IO&ISax_bIwl6<=_MBx69dQ%z$73#z~xW?OnI*s z3yS+XJO5gC1&a?*(gOwRz>|ZW8~WKKfGBr#{0VcSqeDeaJ+|(y@*W?7#Klhecn4Mv zdelu!5KMqD`2y292Jh?0)6T)#i|x2kLNfSr}i%F1GTAOgV_(wZQoeuH8OFLYGQ z{61Xn?v33Gi3KX!?Vayo&;Ul*#tN+HgaGSo^@zJ!|-G+$4&=3Cx0mML>@GJNs zDT9)^{U-WSpRrr=@DXL)tM0XTmgRv@8(Z&qu;45duwu%HYU*YIw8%kehX0^ghbYPP zi!t{S0-^F1wCXIs{n5*&V2F_Pu>?$^yB&P52bRHBN`fB(3G#WxaU--fH69O^T0MIv zpR1`d^Xz^)q{=?5hyrkOawKE05V{=TXdGLQ+1+X3ejV_K0ujnbNr)FBr84&!ussO@ ziQAC10Fo)9HCw01i3?iOtp(Dc`^~sh|6Z7MPy%#wq)-aek<3}bNgCl9kxI^zT(QUKJ7$qtQuf6|cnhM{JAIC{xDope_q zuc!`yL?!41BEx7T7J?h|$L{{;-`I%h5&|Y|&ctc&_Pvhlpml>hLP_Y<-=q{ToWYP} z2^u#T|6El!i=wE+14(dnA9?G9=t}xt@IfY>W<_ zdP?l_MTSI`ZQ%F6w<>JuVtZJURA}7OD)b>cQy`Kt$?{A*z~A2=^gl2MuB?y~;!3~5 z#>Ha9AS6qb-Upg)j1I}3W*!iY-vSqK)2mNbOAAt`uaGTG*HBww~}$f zV`#m7s51~HjyMbE4JB#J7xQL!o5}Tzx4a|MpZMYV@+-%)Hq`!W9M=4Gy-&iSJkn(* z_C#sT+^MKBk2gv0jRXO=COhVBsx5gz(SD(=(y8#IevPt!xGvMEF1N$T~m9x>Y5!?1+6U-J~bmqh=LkVD0at8PLLse+V{G{ z_&r@iajEWXX62XvsqavnP-J1Ny;%xLQ2#@YQ>iq`*V2g&*)wcZ{O|s1GdKOtwQOHv-Ea4=Yqq zM)P;tEJ!jILUT*xeTF#y8Lr`=3;1UOZpI-=UZrjZp^|reOXEi#BF(O3CfVRF-t~R- zTH2}I_)VgGtq)JpT{}-ny50I61y$l%`oyj$W1V|t2CjA7s5!SN zd(X#xHeeQ;?ZsZev#s-ax;@$(eT7GEiZWSj{Jm!>LvnOpn2XTVD}x{0cf)MkUtLr1 zcU@Uq>sILbnYWA}LLiugS;&+Hz1^#BDwyf8s|TBKa9mTs!V8ZGzl#45Y)PYbnfKM7 zyw!dg%B&!nWU0t>1%=Q}P{)$F8QVE9I$8}>NS>Z!$se!MRAQ2;*XC^?$N+!VZ~YH| z?;o?C#%aE@U&_2-E(NbzZ=ch6i;z3Ac1W71e4(uL!M>xag2KnbLQ|Uj;$l$Gh5%YF z?0{D}T$<^f+7nGpsR4oWWyrfr2Jb9K!JiCewa7-*Lq-&U0Fe3tC;<4KsebeSXgU*c zs=Ky}A3}%336)TW&SOdlnG+{uu2d*8W(b)wg)$R`kTF9N8jML1LP&)qmCRE}L$%>mw?WQ1`@i?S?|ZG^vhG@3^sE^Wi`9^J{4%)UGdVfAE3AFO9es$~W`~7OQTmInm(#$D-Ib13T=MRM|NW=-;M5Dy9uEI)k7=+x(Bz6b zRxgkBsIcRgVvDtgVoQadJUXfI-ahDR7(#J?ynXu?oe=o$pWrOV-9VY={l||G#zQ5J ziU!(e=#AjK!G#dBhbv0lp3gynf%^N-1^EL9T+vOyfA!-plYpi8_z^RBwCs9uB_nH^ zR(T&F5zTq22#}a#90@m{u^?M&>lpe%30h@WSN~$HHan~qX2HO~fRT5)o~^U9m~IC| z#Q^P~du!eG{JDIE$FQJSit&Br;g()!bDX%HPfO|> z`%2v_ZmDRQj05R^@H6*kUPp+#^^RJYW+nZ48eOK|Wv8aqSb1?KQph#xMVOjnv#Pe5 zo7zME)4Zo?f>o4gzW*)0<*cCBd0yh&3%?2&6}`Q`I7&mI(Jplb{acjCu%z_#OwM|v z<0TtC?^8{Bi7WQ!&jz?R-cDXy&SnQ$KtOvs&BTU*0gG#6)Q2o;P3kpSarh>%c! zC-2`pBlk~lg(HE1hMJhQadGZ9CGuV^udMWiG6rfb> zp%WY&Z0;n<#z=Q2vEboDAE;-}o;`~SiD>{LOc}ujbki(LHk{dk%6JZ{Ru_BFMb>|S zZ>2ad5BEzqt|r$s9e!;conOnVE3cR&lbw3YH*{WhPEOJ(I_PmifClaiM#uS%X4j8x zE~jJKqX-m$G2lkbap@^3e}2|8W86p}pd}62eNGN70iB~?KGkTW!4h0xfX+2aVNCp; z?d)nrjAY52ypa1PBqx8H^}eCLxA`%?qYd{H)|+~^l&<0F)77)DI8i!_G^1d~MdOBb zmz~sKv;)=iI&c}uJmmZI#fvpyBQOZwD6-BZt`4lPnuXw*<0aHixF;qg>|zYtxEBxt zhK7bFCN7`@kl!}Zk%u1px$t`6o~AoxYkzF`U7@@9WWOOg64}wb;gZeFgjZnws-t7e z%#vA^_bk>lfl%7DGS@7I7m0=+gx3+O_6`o592{sxh6Quu2=Mjwg%cBf8f)Cy@S$M; z0A;9VZK3E$*82^Ubk+Thj-reI(E~Zb6(!)+Q0?s?69Dl}wX;@-hRq1i?uD)X?u z&T#a8?4Nu1Xu@9phGpNSeKe6Zt3REWFRsok)Fg@M;!hHJ17x}n6}f$fIf+DES$tM= zFhyshV`XUAiObYQadr$O`tjDJ=3bQU!MkvS)A*k=qy~sA(#s9ww)E{ExK-d~E4Y1q z4Ie)$u3|L({t1X3944WfI2v~z%M|J|%+ApxEHK#k#hpyyv)$_poo3GV_IyN3G-n20 zT){O8U1h8XSTe4z{nkbf;-@YAUsiqTWypOhv#i>9e6Pfojjo%L}SS z6_vV%1`y4#o(KfAEMhg#zCUwjSKFUp0p1D|=pZAGUJBxYRp&qqb&UovQs_>=O?oRUt=?B|0e0PvTUAXW-m5*2R!{h?i+o9#DQX+3@SMR_8^O&bc z`D?8leIAnE@1gMI=rTBxyP zxs-f<*~xMhK6-@S7zH-{K`3{A^jBAAXV=dx!B)r5&kudBKAT$HSF{{JN4olF&bmc6 zMP5hTt^B&*<;iLXawj~Tj@4Y?&Do~S0AJwJ_7?1WZPVK-reR_ayU@I z7f%2S?jH36y~2Guf*+d~evB=Cxb?xd?NBq7p6D$B4c3pA9vAc{>bEl=c3p{>`#SeB zgwjtTP%(B472UcrnqKI2)qUvrOxe2;EsBI z$2+nUkPH9Qmq}xp;7$x_TWQxccAfl?hxz$alaoCamuxL8a53ZJ;yTZ6gC+$^0Lg0@ zl9-Q;<510Pvn?^|?&*OM6w{vLf(=*pLYjfzE%ZT*^*%U_*1faaDy} z!lP~#kR{odxyBCpkHJBOHYBQwqUuGCf%0U@O)cq!VBc1#V4wo3tXWpjsq=?ow8(FC z9|YW7O<s=NH|_3b9(S;sdlW03W@;6Z&6b5T#xc&AOU zoxQ!5u5LA)Y?aTSn~3hL7oY4b%DeCv4lhCg%0Se2ijW#X1$*btohMH|4!J-wj~}cw zfdY&xCp|nC@Bl!W3-p$Qy*-raVrDOH$V4Z5ZtcjJw{F<72<34Zv_fzh5{?@fBxYv% zqbACibA+kz{(S=BCK*;wO2?B^!qqTgg3MO3CJb5U)2Gv4O7=osTUNHcq4+>ha(2`X zhb=4cKMsFt%q(+n2o6x?;SgVL>67e}TuXWWa*v0fIA_mp`n;|4 z^>kIAR;<2|K9fTDnds5$M=rUCL{!a=%Fx`qWBu5=Tj7drUHZVI<^CtmsYA(44&32H zw{QGu16LE~2|OWC(ha#l?pDz^4NgU6U-WiA=)vfMhfs1s)s4s0O_mE|RaD1^F@?n( z6Hpcp`99QlzkWUWWFG}P2*+#mL4SBg-mNkfy9$qh1;+`@;J|298rWA<g;tCt7u%pn>gKF zHi-^4ggM3-l@kVS4=_qj-H-KauJT)Y?^>5Xyq zfB#uSR!7!EfA`?Q|FDj)6t>zxKLqC(rjphDnB9!lZRSSxf!;IrCKTPZ2V+P$xJsd( z&68A6Sbh~cwJznI6pq(?TZg|T<;Ky=FfdA_pqz%??vs7vy@xo`H;zZ(^&Id3U`W4F zH$jUfCx_(?t)3hg6V!h&lYX*4lL%Qh?i!qXeq+ys!v=F494wM;ilFMi!GQM+>^i74 z@Y*?|Fg(OJg+YL55`Zk{Fm98+y|r{4e-kxJ+0&;`U;gNM#;xS{8xvSJe_p9;* z@Pq`~4Ju5&=&+dZwpo%KeKT6==J`YD%O!`!f^(ARp4kjMBng}F8lIrEk82g2ZYBT!h?TqDQq$@v?nDAurX|=qeGkR zYUthj=Hl17ewI|6e)P$b=}O3PSuO+N1gsL!6MMRfF9z^jg9DprVP?jy8HX*_`&-hR z^Z&3Yzx|XFv^+|`D5I&?-=NADi_;K&emr5b-dft)P-v`025t%w(Z zkvOKd^QF`TR1~iMxfd{JrlF>SuG_u&_3NL@tJoWCO1sAAu@RqOJE*8=0v&0}=L@Nc zZ_bxn8lIZ@du!W1LpWT9T-fImnYV5oirp4-1xuWm1>I-lU6kPU;$%(um)WCUVG_Ye zhYu3%?eMU$;#LEZ9g>WAgX0qu!$_8Ac4)(_4%G+Tys#^IU&cYdyu2(I4gM3p%`cI; z?RFnJI<`?DT`V_#GdgD{B`+?{lhl04%?(-r$b4nFKrsa-0ScBqF#>z{ZfZ(`bfL8C z#si(Erlx9BXY{(2hHUNZh+ZxzJb;4Tfigx5lO2qBGcxE1a2TPx^{nTj6bGJgOdR2D zo_(;%`y|GYIr>6O=udvOFN5fjnjk(Qc9qdtrFa|OaY$Z=x7Cii!Cs5oG+ZAh>#k_G z-psvV67>&ClexsXlKqAk2nQmr91nS| zn*R$nexX@iR`zLR7V`?)%Bxr1PFJMe&g|Wp^hfS0i|O#tBOlRh_OLKcA+@Q%SC7gg z$}1l4to(5H>f`z9Cq*Ly#j+~z7yk49^f7Vz%s$)SFI;~f39K_WKVy({VjB$=6`7}w zCoF_aAr|%i*)%*mYa!CqoiAOWe*2$D73I3S&+gBA<`2-&kd2~8Nk=Krlnf>auJw8x zBYfG(ewablDbYFFe>Y*uJXjzirUN1#6?m_yK{x3iS*D@d7P;L?RFrzFsY>jQ<^3yS zK{sm$LP^CUOp0~#23(Rsm-j2Z+e7%GezaxPclF|C!VRG#TNgEc23+d?Mvox%^qJ?inq1J$ewH3>*|p% zYLe%=XtsQou9}sM)>#YhNPu%?m%mkyt0{NHq}X-orQVnOO~rSxu$bPjwWNQw z_M|*HQ1*?9NNDoZto4n3b3s(e*UY-i{y3Nne|yVTtC(V<^L5PYZUX;Z*?B=p$&u~> zH7p=yjG^z_$(_%%d-FW?O4wPGy~7+SJJ@;#OG^c4BzRR!tC#KxT(77We zL}rw9RWVg;(MRY0l-uGCApIoT8})CWrrJi6oIw}PM9;$d!0uOSm`4@W(AZ}-f2Gow zQ)@n1*UQa@s&)>=G5aydgZO-Yl_Fh698#hY{QLP!fq|P_}sL4J{RsYO^XXFVqU5XJn3t z5Y(tr7>~0Jo~~`Kow_5&#v*cki_51~;#%+9gUc-sMC9@xkGC=^PHt1VN#qSAJQhjz zC0u$q$bXbbwdUh=pSEhy@}OwH*QH)JhpAj@>Ht9o3h@HRxvuL5C4ytO{|ZH#Czp?9 z9Ha}lyt$&`Eeql1U7mWsD(~TQ1ZBoY-6ry?`BjbV+lSi>BL8f$JSgrO)4H7)w69Ex zO%2M$41*y_8k6TmSH`;Pv;AeKGBc!kYAG5NW%JXDN-Nj>8L6o$wY-T|75DBbCJ67s zC`Q57CQKurHJGM$SW1S|g=-&M^U0Iih1LrJiQb-`)U|w30y{zmdv{)zkY(CJF9y^` z5RY7RT`uO_nhC-xqVVWR+CCf}bF3ioM)PPmKCfHkjw6$(8H26N@D_N_1ix>(5nOee zmGatkD(&=E9-5z%gEpH32G8Jy>4F@=7<$u4XG34A(V;977E8RT_2xK{o(7ww7TGP( zTzXKOC*Z38P3v7LI+`cYGLT@*J}x**5+j*ca@`SRXW)$t`m*<=aKey$MTujZ{kid$ z5#q5Em!vIZZQm|`an~f(+FU9TiNAFZ#O|W=R)S=?ke^yK3K3Mqh;n`&qNS7OV~W7s z?Jf9VubAkEsgNk)^$$+j(@=k#r}0LD;p^MV0ls{9E-0TMiS4<-aZT08$wG?3rJVhp za1&Kzkn9+967~4zEz%oou6Dry(w85e3Bp6U<#(^dZ4DG;pbO?rjTUATj-#nFPtM)T z5c>U9+UOdIK&G+SQB2enV$Vw99ic5T zQaM2>tvGzB+T_kD9^y5@!4QJ7vMNCUAp9W0=UI#Em&Ny2CtJM#RHp3hZsd2Coar~G z8N#Cy5WCIO?%Kl#R3ZvJZL|6mkuZr}ye!+uni@GYl;dQ+2Fsw4J38v(j2|bi)rT)J zGkd|!!a~ElgH>dUwFE`vm9xr&TX!x9l9Wr51K^ndIX61b)nt9%PSAewa*K*4>9}xu z^^p@K?)wp>Q-Z|UYa}8u>n17Unw?aJ@H9XD4(O?l#=Pk2=^0!28yV@=-6IA(+xs7$ zIk~wnmijsAjy&pe1kRm<{o9{EZ8higAM535N2;HR3#q%a)Me{G=+-6Ucpujf5XcY9 zrYAmszEH=rmyKn|^*>)qp85Lr*rjS~cbsJV9q#`-&PZgRm>Db6C7IXu*9~tGsd{zv zh3drNo6#4d0?eHpdy|EpittrdFo~7Io29=kICyVS&6-)yvjHIz>9=8G`nfc%oKi1R zki;&P6EsaKp_WhQT;toNXk@s;*8FLSu57eFJRP)~Bc48`D=~tB&3o=^JLHf@VWBlV zCpzBdzt$Dh*ZT^X~2*PCB~hEUXp=jBDAljL5xiY8=?0Dl-P@LUWf`vQ45 zC>oOOF17nVJ{0YGXI%eTwdCENj9rUcc?dVwER4Nh>H5A}*~<`kR+Qu+FLr{WRZHYi zQPEI+`GW0SZgJ63OD-F0t;^2g-j288ACR+yhfB7_UJUz~`<$W|b+)FLo|zJ06jU6Q zqN4=;!hr*ldyizd4?cgcMK0D*HL3D;vb0Plzsb+P8ylOkFzFQ)!(49iw7c6_%tW@t zqJH}C-x1Ry1zz6J+%9G%St4)m3XDaN5?$Vo?fv8;agf; z!DGIw;MvO>LCnBKwT< zK79vhvuN^rKXlVaNn|zp;-^38cA6Lo@UXEgEO7tz%P@cc?8_3IT~w0&{3&70)1P*v=2}a<|LiHx#&F8ONy&3+p~rdMO<(`4$HL#BpbrloMC>>A zd~T94(lmfc|CQ69KDVFPq)8orp(<-=u+PhX7iF7DK)M3Aj&3WA(gWxu)eIP)srXN< zh=#x?DY^G>jpD{5?x*DCI@|s7rCWi)uii`Rz(6uDEt<3|_r_nRcmfX;fxlWwpf0 z8C?pi&cfyH?$n-cy`0>!5K7>~hppkv>qFXRJ}Us9+K97%pHd7zUjEQN{aC6X{wY@pZn$I#IrI87>}cyPO(Lq`7+}9R3nL5-|iA-T8NuBHAzq)NL;M?YAep zWWe%3Sy?&*ji0VA_f7J|eAmF$Wf?f#352{34k8U5ohTI{n%n;*d6>-dYq6(hYxt(F zE>J@H{8vUgCObQKANqT=vak2kCqA}FrN7^{hGmJFDjqy=fS;}Z{1xsH8r}L^w{8>| zcW&M4(fQGF=}!=eB_+i^L2J^*2+()Tn=)=2Km5e6k;BlE6AU`~6bQlmtlDI^Xe&7; z5Ck5adiR(yM3DWL?lCC-<|n@khlM?tb}a96T2e^=Z0yw4>?-nExVM<$TD;a!j`se7 zf`!YM|7&eMT5Z}{7c7=QVd;$`)?vFS63GlPCpHy*&V{>*BY52LIho1M;BUZWS?Zonkh}giu=r?bM z;spj0o44PVE;x8wV1B;YL*Cl*t`fU@&HTF=6H#!Fcr;lYV6~MXT-&3xGWYtmH_zaw z$x>Kv`31tCIrZ`E(1xV}Pef2qzD9%B+RE(Px2ypPYbJqgM&lRm zI#o+@Y{lWaKS5Y8-N$QwtOw^1r_8jdXyLX9vU+yblP7Q*IN95a96IE+`ZxXbY2)jW z4<9{xc3{I@w=G>%;LstUGrqZ}utbRL-COk3^QdmCXIK_3HHFOg>J{DGe6!bdZ}P2M z@Yp}SxDV4GrY4;;XZpgnR&Lqy$lm^`t@U==U|y~(mo5d81V{nx?J2Xffq;~AvZ;M= zXQPl9Xg_{ez5XAPBT~@1_WgpA_8PDQgrDEq4@)1sqI?1d;z(8f$ROPNl*w$7|FL{& zZ}%Iloskt)6c?XxF?unV&;%HPb!k-0jbDq4PoMXh##OaTwv#9nUM@~f9qs16;;g%O z?tHLMXJKeGe#&;@*3XxrVGXLQxw?%~yC=Te?-wluN~_W|b3cpbd5KXNM4Lu<-q@Wu zv0e8P1Ff8rQd(SGiM93xwZ`0%k~NP>X&c*}DLO|Q8xMMTJR9PF-Mla70$t_4m6QN7 zRfx+>e~qAMp`7>6?b#)lY+ilr>{JqWN#Q|y2pdDAn;g8}%BMe#)%<;wx%=>1qLIkz z%6Lt&L+8%a+lP}==--ZNg0<}L_p6;#iCcgrf|fdV<6Zz=!r~XJrKsq|sHmvNBHyMI z4NYIP&)9zd?s@3%xBlaT@4GImh;C;4@0QkRyP%-ZgVpZNX+yz}Xq(}P8j;=jzz%2z z;pG1K>4&gbkvIpeD4|I8@QUH~pKORY^6690i$ARb$I^XdIMi%P+w9Xt1qH3oyze{2 z!ua>_QpM5LtH8X_hw_yeJ>d&`|44<06rsw3PlY$@c*9aJ!Fh>m5ydJFvMp|m zR1ZWhpU574U)=VN?{k~?Ey~5avL3a*LZ?%AoBPp_N!;&iT@!0o6at%bwUTp~A!<*a92xO!vZ{%+;w% zMpi7aH?IZhc-#hSl|m`!jEoFSUzFUxFToO#ChLl}V|lL4J_5FsnN*!42?@q-Zg1hj zv3b_BHfpv9{~(kfPi@DM=I=bF{#Juycf=|UJ} zS@QLD>?Tg>UY`m5(l=ijX)xD#{_fpp?4qr=XB_Qh?*n@B{4AN}49-Qc1y4QU=TP&X zOC(G+^6X%ZC0dD_q^5DfH!;53tM}kR>*;TH-H%5_%g!#>ZFYXwqEl%6ta0KO)~y`Z zjuIoSj;Vf5(+m&K{r;o+@vap58$&g+&fZE!wddWG>DdOx~kp=^bm^%{Ap-;V9CK`V`=^4y~Nr z$B!XG`F-8Y&oEol@nS*I!)`^14_z#KlP8xb?fZx zYKBmLwmEI`WApb#$M46-FI-Y@zRhn;Lj{#ZLj$Q^RY=Ro$f(X0Bffo-rOMk{Dk8?q-0QFC+-`G zhzT0ucEEq~uqMNY4{lb+wv-2^1#6I{#NPui^Wfyn+V7^e=Y4@VUaG3}Ln-G=EAn#H zJM$m>T0UfD70eWV(eD2IBeT^F9V; zESa7C+X>+^`E%cEm19f_BUOVaS+X2kudA|DD_v@gW|P@gwNF4ZsIJbm!Xza&w(fDQ zefq5TR78Z&gHs2U`eR5*8K!siBcfiFn7>Cj#=FOMj``e_?Ig zKT~z;<k3q3n6b-xA~Y~Z5fb~n^FY3f&0G_ujcuo0wUrlKOJ zLP%=wTdUZWCl#`ZhF3UqEw4x_SPbJel6mgD>;RhcEW-kY=wtA@b^`A;^*?MR73ByTRlb0c03$|AzfQ21s%AH8Dqa#Hk(QM;cYZvE zmFCQuiU;N8*G81d)I{oQsytkD1oO?RdV*v@h7byoK#nCbZnERhB$rGFmru!5(;JA` z2wfqw1X-()U#bvksWnandfJCM0ydHA#r75ges}o zPbyN7Vfe4@nUISVBO5^mhEN`s6pu~Yi3AD{m%35n-4n_kTpk^R~K6i6jV<{>t`mRnb}6w9S0=YPg=ENc;tt;xC`( z5lnX1Foi&*PM6(w$mi6rvZ7Xb+NN9Kd6!aGwc}_K6XbTtDb0lr3YEOCs%IEHt*0>b zrqo-%AZCQl`>p=kjDU38UL~ezp5gi0fy_to`|g&E^FatQ{%7*b`9Fr<>wj;@UkFL~ z7+`TzgJ$ox+RdJ?e#WZwbEn-^CI`7RFxX7IJQGEKlu}Y<{eo;8Ii3O zzc%tdh;<8hHj!Y?9&KSW@O*BU=(Ock25p;PBes@tloI&$uQH5Xz1k47Y|^qytMztX z_SLyIf9tx=B2KBTgj#|6;;PGwZ_~2v*jf+Wu#_{fDwVIH_cmb75IDFvmdRZx=;t)89JqSko(dv6LyTrVm$sl+rfi&im-NUDBC! z#Wx2i$`5oRM*;@}w_cTMoxQZ;7C?HIT**vZn@_P>^*L_v3eWvTjsNjt4<8%6;E_@) zlveL%+Ay@*+(s7?kTvl@GvqzB@x7RdJKGuVd}1i9tde!kG>+i%whZ~BxZ|CIu@d4JvCA=1H4W=y*wN6WKp@UuHl00M*7$(-&%>Cqx4;9zA>)@XXY{&XK}=UP`kr_q z!?qSqot@f0ayzJos!vOCGz$D;p-}~ z_)yQp*NB}b#K?Rs`u#A}1`tH3@*#VMhuH5xXt_*M&6d)PlP#C|Ttsyk93RA=@_!HAt1>NW9)0`n-B_i%6bIN0FuMHa;0@ulyecrv+#a=G%~6j!u=eZM^T2^A z6)8AvBk)3{0=hTuGHV-UYniY zNV*F-mS}duz~M!lLZv+GDS8LD$TQJfOD(8b`1IMVv)NQsh-ad=$Gzm)eO^|b_mr$+ zbo9ICG6x5t$nW2#-cSA#q8B2ogryXR#9a?d^pD@{wacLY#H|E|DT)@TaWB%gVLG_}$2Cnu6E6 z4O=9vGf(>aO@r$o(1qOYI|lo--|~-VAi-^CpiP`J7xzX=0Pt$@@c_v( z?UsjoAHO#%c;Q(Oq@Usk4~{PQz>g{$?F#`X)XK=?(~UKMVfzB8Kqz<~oZ7$!LQ)Ue zB3U!~#*GaD&HvJ0!GeIE02)T>U;a>;03_>|p9gY3fp5UEOzH0z~p0{WscE;3S5HZwOoAIfG6! zQ=~0;dHA~6V-e1t+du{n%gD*4WMo7)^+H1rwa$=35RYD_(v|7nitg@i7&Q|Ucfh6z zdsfU;^rqA!+S<)f_J8@puGF02KL`aJn;QC3YaTAvOHe04-MpckEQ9}bacK$8F8o;} znP#`k%F5o~Kq1nvBUtjNzkf~74*>Z{FTr>0u`FTRxpSn&EI#chUu=CiGl171#yj|| zo{UG=_M+s|hLr{@tET)D4(gP!V9zH#-I}~|-*$5?#Vp6x^nEVu{C-fP^=NJky1q0P zR6=BWjqkm9s!^ zft7ZXuON$@QHfgBckz^MfvAoHDo zaV_n_y{-hRRYZ)UZG$L4gm2uw-7LH?|66hApOjgN82w zu{*e_s(iaRIN&ZtxP!O1EIT7UfONS_uk6cU-dT9DJdKQAD1xOq(C3LNC@Ang7;cPU zTJSoeM-XrVgUeSJ*}Luc-<*d=mTT886(VqY$Vfg1p0PRv(?2|ySFb`mhMpN89K2Z3 zS~(wVN{2*uG14KV1K+p~KdWiX-Vi{XA+dxe*iXp}pB=CqV0u(y2k66#2T>GaLWtrR z>jwj0OuFVmn<4tA1MZfMqK$i3qrjL3cT~fH);koNcRzo|lcVgn!?hgKh0) z&nd^6vctNGpD#|>>{^`q(j`;be_nRXaDNRSK}DZTK=btML#GV;7v|4z=DdbN?cA7X z)bV-yrbm5=PX1rS_!}9Uk8?MD=@%@d&}}Bbt&1QE8JTBzGwz{PQgjUT^@rUm^wQ-wK1A&1BE3GUP}t94hgMR4aN z?4)4HfXV*q%O)rCc==xJScn()w6qMeNOqB}g7K-Oi*mE$S%0+W>bGN;I9Y8{X zfheBLwxywP?tVA`xSA}kAfXe>|DUS07mo#;<^=`14^9Cg0(omur!R0f_>dudWbRa! z<#MvKV`pc_ARC|P)b#XKusMbVvhOVC*FM{(+W{6Ub{5RHZEe9c+LxeJVUm%M@Ts>~ zhZF)_3!aOI4*?$mXa=7Gygq(@RpsTsu?=CN;Q-=lf&y%VrZ?&aPBMZnjEx_Gnc##p ziYN6$n1qjxj^ag6>f^WswHE|f3gsne!Z`e32*q;=ksSP@p0--~X^O$pMxA1l?x#(a5g}8dc-$ScRVED50;Grnh zy*uBAr`IPue|t*pVV#pp2$xT&(pz8DpH^*()Di6Y_`66}((N$%i;@Cv8(7u1 z>>^t5kd8k%g|COIh9v@O&VTuMSl-whXD2zL=q67)`7~Q-rUEWXL+vdW)2W0n59O*8 zf-qj$Nr6+ZsedhzLQ5b75HwX)PVtcbIpLvF-k|CaEhrIC#tlxUr0fc=s}+ZVg+j!5 z`F{dz6c_k$T#&};6%&EN4xf3TvN$`+2W<36qsiN_-XXyd!qN^YT~bKT53owl7I?y% zPxy(}=!UH?*;7+A2}H`syDc`Q|8mr&bT>Go7cXAK9_GDZ`>cnG;QuGdzXHtGrG8&# z=F1zZZv1RhAffs31`rd(dFI{nG=^1C)2R=45(1u`#5xsDczswx-RmJJ6OqHf$O z`;Zg~X||CxNEA@X;(xIUHIW~b_RCul435U(d!H~F%t2z2dN%&-?@m0y@o%IK9oirN z=5zj;cmUTG6^Y#vl&GtL z{Yr+zUn>Xp1<*?Hb@9Hyd4fFB`g5oM33yX<#@s4!{y_^GRClL&RR6&#m@R;;=VE8C zZN7svtpu&mJgI+)c&#?K!I$FXyd=y>g)x*eyh2HBh`JXjud5-1W9kFqqq;lIRVoK zY6Rf~knB-!0gI2D2Y~lwX8~p|@t8D#bQ&zpL~FcZSZpP6P(9o&E$tYYMIDI0fHj)k zUXEf7#~zk6*6!H&xPw$GTp>7J;B$wSr^KkYyBjtsEK)>!bWFgsb3>I6djt$Eelq1} zw*Km(cD~IX2F_b+bF&pYY`GxR!&DMdk4TCscX_Dq5x5CpI4mtdO#7k|!;8F~kYFvo z@rS|HSLP8<(E$(z_d@ul0B98j{rWa)=fp%H^JsWQ_U)5Q(P6B=5fcN;BJje47ncyE z0ogPcQ#hh?Q0494uM0|2b94Qp8Qf-q>tGQ&Q@dBTzAbtui&`7@;a5FK;h>8?x*Ystb;eH!PCz)aB@Rb#}sEhf@nw z+>xYzy@MbW1?W!550rAB#6Hox4pRl&Q%`tRUSic5GOVvrkoqmT3+3SD}l z_bgH{R)?pQ_97ycoiqmCTTi?_W&4tcO}mj=YtYsA9>;}xyCY!|*$CilIH;d-s*p`+ zGuI}TK(cZA?woAV@%*y&R~HG~%L#KdCq;qp~|^zg9?T>sv;Sne`jKN6SOX*zUmer^7aSe zR6?v=$CJ*;#uezD)%9gC46f`9;yC<(^k!>T9PJk9F<)*e0}NhsVL z(*$g@U?gIUup{T_5B=#Gb$fGOLXrKl;+_(t7V#T+$$$K4RLm{LjMJ>oi03uc&OAIN zEbH4V6`1)|mg$l8%OP>K6D$!lhaa@t@q{qeVK()coAJzB#k0 z@6&HJ+HPu)4^zP7LN-f+LtWbFyum&Xay=r7VrdkU~!`zZS!N?ea?}(d|2bPHGdMe3?|VqVO2Vd$9qyK%!x*UanHhu2dcja{lUbaGNDO#N+X)fDujJVZ{$N!Ix9 z(BVTOMqkQ<=3jF4?B4MxC&$=6V!6cUXL+uPi1YmE@h$I0UDIbD{yB43wUf-*Nj|*K z;0v3wmpj>laoxIk8tx?-Jvg2}3NbueP%iJkPI8319qQfR$^!iuv_=O1WiujnnnFWoOq7 zZVg?%+W(uf-?Q2%cBe0Gi)8E-mPLKXw((XU*VI+nO?21f+-UNJe>m;cpdACQ&vMV*|+4CDC4#vl;{wQp@8q~JE=;0XcjrGrNEicV^ zH~n@a3@u!GbA`o33Q6s1Q>naB9! z8!MbGS_Jrw)3*%ni5VgA{@#Zryi{c z3^yEH?6@8wpPA$ESa^QW!RkP%OWLG)8t2f5pq-ta2C28^_MQgU(bE77UkL(_)=}CJ zLflO&xghdyxd01xCRd6+q6g%CWjH4kDnAqtU zVHARu$8Pjy9q#%-=Og0o=YeY1Yr2~W;s*`{k|IYV&yIy#a<7rkigGb|xx1rIrXqZ_ z2eBDaDHdH!w;u!C@9w^Vk06r~4hn7}rmw6D3rC21V_yeu+KdDt9DTA}SK&g0CkWSt zX>Zi4_*;H{n7iR_MjS#aj7D6;*Znd^JEV?Ud4YHUkiZ5rsVRn=IlLbITR*5wk?)N_ zY$RJ2H+$l;3ra5kRjAlYE-q<){JDN^P#WbVOm=`IBpX`6dd?8ahmH(8;|uss8SBBv zgHs==THv~G!2Z(Tp@_zX9l*Wl5%l)@Iy>PO6N>x`!odNnv!McJB1)Q0srG zC3xBGc78xg!f}pcrfK8?aA7(@JFe%zZSC|7MPaE(4|-iNK_zJYgLM=&T59U)EqW{B zKAjw(f>!40+IXh_p3Tz3j>p+xFG4LQzCZhH!Su|`%;e;Cb^P>cX({Wx^5C~wz|X*1 z1D_dPLRr~wZWZu-a&mHl*W&D4r2n8nL=$WMt{|dCQz%F^!coG`Xj8iDlIG9{U;>Gu zFVUt%A@jk)g1vwrD{DW!?Z=eFo6=Sp?Ri(vo_7KB0o@;XrqSsEA8v7Z6$=lmQYo{j zv{aIf!Nc9%+>?gLo7?tPw(!}ron{Ei05a_ev4ng^WCszRN7Q?`DWLO%7ErPUd#h`k zho>j{jDWFx{w$3J2QHM^i{6e7D=7|?zpiOt1)eN#p~1}cE?6aKL!(T^)ebkHyu8hq z?@Kjh>@T!ooNC4hAj5;--zy%kcx}Xzi@}cW6 zx|ubHK%fo`I3)~g7ebS~kyU122BTp36gshY@87orR?bce4L@|{Qd-CGO5eTHOU*?Q z3Fa6GaAIO!6()G=P`2>L!yGld{XX!=IS6w?fCYl3Y;4dbL9Z0=3px@$iWy+-q7=s$ z46V1|8jIRFhi3;j`D8B+iqS?!aVjhTz#RYNK+-LsKUjP^F$h9+z38o&F+4o1L3W!R zZbXVN$jNbW;3G&VDJjXxojG;t-zOs-Sk%}gS zdgzAp*r#`fKU9{rlgv1vBNOMc<8p8hOPgV?Iy}v>t~=@6f3Ru`;rCj}OyyoDDj@>N z<=V+>Y)Sb^sjqIE@OFmS4yX5fy*f8i_A8OP3^V!s>>u;UzNGzn6+S!Y=OG6S`%m_-gH!FGfd?hIct4owzaZn!vG) zhF{Fd@3Dq(SpzU+TbqpSyEIo>E;cpvRIh;R2~H#0n{eA6+j!=ko>gMSmi`#%ecH5d z0FG%SiDb4V;jv~2buoE#N*LWt^q8b{(Vd8FwA5J)nr}fso;b3@9-JCh_|5SM>44c6 z&LYBfeB4)Yk4`x*#;`ZnwRTt!wZO8wgIDUn0kqALWhTC~hjGiq+yweN zG+c0JL~Ra>>j{9-N{vK7hv8^lZ|nD6Q}?vK9JEyZvwxW=!Tw8BGxu1INrH}t;ps=G zswJx{qo{UN*HV|(Qg6}Ov@AB2v?`%c{jIAjW7jW@hx(^A|0~iLPD$+dl?XZyK>HP^ z!)b3jvxsqTTJDh(h1)g{&o=rlrTflQOeYVVSXf#z6y8pt1}XIpJqD5J6A%<$kIbSv z4bVl1%7atb`LuG-kwy~%o6FA#d=8G%xOH!t6N-N$7%7pWgXgAc1nzoZy|r@i7kLD* zFCeBpLKR~OAY70V2XvCHZ61<_Cl|bC`pb+&ka_zwoOEu=vl1@f>1ok?V|+=_jX{8A zVtRXCqQb@0%Oe)$~AYy*QAp(j(y?7MfLesC&Ez23fzE?6c0&Byk3#N4c0tx?Yo zd^PJ+jd1H6{W?FlIimoxKYmI)5gDJ>CLANm>IBu^>Zy%4r;9DmDRI>&@oArXSm==G zAYby1=ithdr99(^f`Z=$Mb8bz+K;5|3={c=pJ z^82aklU-*7CT$ykjPyki8h@fGjq>kp!ai_F^74+7SuQ#|$3#V8SHS+dw73Y@@xPi# zTwI(KrH-!Ww{L<0`WqO_NzjHift8!o>`=y0`vyY~&~@6|PXwHn1j91P!%~ zTd{9MI3WVdm23JA|9uSUs*7IyWw88aRq_R)W-qV?-<$_+eP9L&hTm?G+3Uqcla|5f zSqGUJTOMg(#$6sgDoWOUgGWBq8BHVL5g*@IFZ9+<3IR3vq)UuMP)T^qg(tO->Rh{f zf2WxrY`$>U^M!~rT2)q7Oi~Hk`uTD3vN46{=uhCeCsD+ze!c`T0KsjPVE#;C014F{|{49&@6SsQG=pMx31y2ajyD8KRTGfVz5h4=*}$ z=>u%&EB7{-;zB>^ zXtq;@*He8AOi$k(W&v&hC^3tR()Hq4i~(C(#ao7kc$H;d?sIfNep9+0oMNFs-LS}!L#8#>$N2?~Qx3G>3M6X;7z295hpDeEP@xk9+ zL3M{-+;NxR8t@x?KY+HD$nmDytHT$IwhpQ)40w!0q-ABxvEjUU(GLRyT3xXkaD|c+E4v3@Nz2HnI1DZL3|RrAa+ z68XHUitBnK;k6`36!otI?uV2cckkH)bbKE64sfU07&eZJJLe)AEt!GX>g^5rxQ~!S zOCNjZBm!17<3NzwbAJXSkF4W_UG?JmrKOiHUPRv&$q!Ib65&L;p+SD`JRfW;@yFgsDq3Rk_PH7_HHRgLIa z>*&0{!K+ql*&BY|zu+1LbQ{(;ICWt~hv)%Bx0{->#z5_riv<864~1-Dp_ypnC-XU* ze=<|c0TBZpG1`y6oDt_TX}Er(Yu{~|b%U7}?gXaq)D_lu<~H({_AJO}B!;(lGuc(MOR^J0$+ zA0zXmR5a38N`Y@9C>K;myF_gMn0jD#!c;>Go@T={V`C_JMAUA(xxswHDvK`RSrZuP zqeIT6#Qtf<`GHYHHG=S`sdAoNcxRj+8gx)JF@lw1$1#L8GekR^FII&hoCP;$!|AS{ zzK<^$&?10opb0KuM5|9enFDtL%t?49Dkw-eGYx_u^G5N8@ZAfZbhoFmfn1Y#N>4@y4H?b9a|yd3`3d2LFp=ux^N` z$4esF4aN;MvXoUo^M~eOC;j`dr(&%S5|bX;QT*Qe<&-`BfqI??IE5Md4#30kOm;#*orp z_z-65<{XX)L87cmrr)lC`4tSrcA{0&#)`V|@y0=|01( zE&-zpixK2bt;;iPXdKE~@Sbb)7}>Fa0RaN~G9Z z-ud=rCRx@{DH`>1sn3Rlt^DShcn}ZHo;`~d2)b%}j-G~ljy@kcE#DKSj{MeXb*&k;8Q@Oi+H$-3jFd8|d8ok7&HZ8Pr zU&=kfIdU!gJZI}ERzD4`?`>C8o$tSX9}t-!(m8qQkxN39&(cTxMs$Er`ZRBR7Y~UM zsjuF8JR9EL=NBcT`VZzyMgr#&ikh0#a46|;@0S-@9h$eJB2s>cH;NCfaV;uu&4R%X zBZF57XBQoA-xf>jd*VPYK+A4G{0Af(T3pjQl8GS7b7eR zQG1+h8Nwc2H&S`Y&kBIxw)naZBb1V~^9%%#lc&lXJmHUeE%xt zr9@MeI6vn-H#Ispy1v$j(;k*u{od0*W1CyXMO?oqo^_^6G99#gm@{NKr4;W)xfnTA z`bqPjcm1f%&o{jy%ij-fEiV6am%>sYqk8F4>!)MFao)MK$NqwtT?J3V;=A4m&m(n$ z(YHN65`CEsxB50AiLX!owOlr$`}3=XCas@9eiqK+aX`^VJs zbOU?7^M7-1>)tojV4Eay z_7wH5c3UNG1;&sUmp_gkW6o0gR#K@!L(0g=a;2+I^s}I1MDl#nZSa zV)cyAWY*8k&eFV(?)H^(essqB?tt*35h9qcTscQ!Ba(nZ7NwRfD~6`%fa2of%zThE zg7*oQ&S3v~Q~zUCPR8k2m0^U)qG)qRatI9ZXMDHrz#9^&h>SjDU-xWh7$mmaqMQwW zI*)shOQeHm{IjTxeWuwA$?Mww&FTI(S+1KE?*@8kKP&RluT4AnuKl>;fY2uM!ZEip z^jyd%IJ#BI05WEaVLh!5znEk+78-T5v%Q4G>1fAAx^0$Ctl z+xZgcR-wrn7#NtE;)@)TPlw`%xNc5EdWE!ZZabP9&UZ-4psF#d^pT>WK#7RR8sy%1 zNmo`>fF~$mQlYB#9eQ^$n2at=v|~Hpl?B@XCp79y#t`(cFtI{H3{X{nStu!o5eRip zAp<39{$_h6Oy@zyS}oaH><6VNI2frT=h+c#LMowggW#%AZoCB&1MW%8Aj4=>vf5y5 zx3xU8*;{$%UF=Nb?iwV>%6-2Z=^t78IqAQX<>v3Ab2<0Thl-Z+>qefUIyR{ME%x7A zC!?V7M^74(N7T<7XmQiC(ru$d(^F|i)DaQs5qrN|r_DM2c6;J{Xg8^IV$&gHtUeMx zlW`=R{EPht2!w=z0^@u@g>bz>Vu4#3CbnO`+%pm|F*b&`mUcECr2s$wd3L~!xFjc* z)-Yeo)9vo*L0cHFT087~Ip=bwcIlfpusUL8X~(5pY$%=DB1k1iL#V~RLrr`C5GVqe z_G0Ee?uxcCSl+5=<;u5O+$`Jd_y;px7Qo zCj&fSX=$mN^>sl3;gmGubX5^+t-zkx^sd()Xv;J~^2!k6^gL^__u35P}i>}sbcCA=`Fu)T@zz!Q*SY281 zKn*n)1TS$KnShn5VYLPKe;;@g3itpq}6kd+vAPb-lI>Q`UH-txfz3;lvsR zvfC{%X&m+Tp$wp9m1waq0f3Ef!^c})T@C&hY5}zJ=mXFT;t%E1;k8FZPhK|%Ph%*e z1R13fJOhrDVB^Thv;J-H8?BCs_d;xw)x}J0oImlZAq~SQ)<`Hnq#iV7{&#wyTQ&s$mC z8TZ*L`w~o8bJ|x2s!4L%RoY$yf7nlgl`@b9p2J%sd-jKZV_k-MC*D#2JCStbaeqZ1D<1;CrU?&f*);fU^NXDIZztCCSGGqKebN-UEf6t48$U}917bHJ?^|J1JQ9wOGUQC;({oL!$>`jek zVTOb<+tL?wyhK#gW{j8e%rVO7k7{Z%qu=vP)3l!BM^~6Zp7r%z4Z{!G?@cTey%-s4 z|Eit+8YBMve3a4%UnKk~m1Wg8HV*My09~-C3k^ba{Zn)~U3Pd+tiJ))G+DWbGgG7& z7oSFnD#Apx48<+7Ch+Zk?0zd^u`2LWM!ym)kH9N}FtytWAn#yFmz7<~@2L6iH6pdE z%|J9!EvpS`(kdtBBy#{nrkx&=DS9T}2UQsexglnq=&0eJ?#U5X#kgk(^l`H@s+=*1 z#D(YYa~)pfX<>gmmLk)9P?e8}F(k7MCo5du)Hp9mr;g6K8|FP~7$*J+l58e7CA9{1 z=(#*yFlYP%U+U&?D9fK55KpPMMA)uz{>;=AelwtLiDZFT6(rVxSRDQdzH}~}HdLE* zVdn`S1*gDs!Bhyn0D2B^mO46Dg z24M=|QP>tU)d)h^x`+paJbMu)9OD|;ykN}m#sYbSZXmG)B_qme`DZK-T4q;$Cz9+2h1$7IBNt8d}iI>gB+3H0m<(c z?LcMo^^;;z`AA8kB9~&>xBjo(0mzIT)d#`*X?L}s=-B_qlkm$lY5&G&u4WDMOh)CH zQbYCHxUS!Cl7B}USP6(wiiZg2X1~!rx3#tv$+XvXlsbdkvMAkT6YPnxg^tz}`DwNX zldnGC8oDe?Xyc4)0O*2(2aOVJh0Bd)BqiT_t-!7Wv?^f8hI#M^l~cLb*VpGLZp25A z+C@6`WUR`H7t4S(D8sU>FbJeOKRoY2vkG%%+As|LaJ|5=k~fw(Dc4%$Cp08mx&m>y ze&A8>TuP`|wi{)A?vSbNfw7>6WFHP@I41g4Xwlum;J{>SwS!a+G#|pBEtpIzalG0- z#YtrQ5bGXY&tZAv%GIlYjc^cP_y)*BpAX(ecjVJ&XJ--khb#RuZ>(*xgrsDT`E?)L z=!Rj~Jf^nn3apMZ@j1jvo$w4sBjavmMP0d?+_3%r1^0K}SX9yEf!j9zxV_qK(YN9V zluoUD|6Wo=#MRwhpPP@x~AP@TX-zj_rXvmYNa(^tGUOS0~sbs%jAI)JkpR;sw| z_~>yW0*%CRh_i({G^YNkde$U}oZ{k29JE-kxbHA{V2Vg+vf6QyL}ZN|4OVHoCgd+Rb$Q=%B8z%MmV7fT0xZV@IjzD96!1>z>1OJ8+O zA+ZbF-@pI`05%Oa1`7*1HE{oQc*zL9hzOy+i=JJG4Ds{@7tI*ysmK9xvIe(8U_eyh z4MMF{Q`b`8ei60&ygbCJV}ywPL{%dyD!RjS3aYCxv9B)VN^E97^fPScY0h}ZJ7WvR zXL6!_j_*%Rr&=*8em)qoXApl{W>qT6kW`d2)x#8b^7njck7~AMm6NA4ZI@l+7&rK6 zMiq_Rbd7(7Xv5WxY(^12`zbjs!X#rsY4OIaCU!DtTHb#2J; zGUAQJay8AbfTR417m@_Nil9ux&>(V%@LEqGj_o#H0!tLi(`=mtB@Xa;ICz5ixlCWB zYEy1K-MtD-8{tF(aXGEl1D}Jp>q1UtA;6F;UNk>}m^|L3NVgOUqakkmt(~pIM^99} zS5}NDuFL>|1@hTCus9c-wh}rt`yG1HWOXd(Fa_c@Uc!%bs=@Qs7;7=bDCJfcT%nV=Hzm#pTbh=aYq)A%f7u1Mp`~ zJ7xOs=_Kp}K;g{Wv7}}a;xElKo^O_Pkc~e2c`fkZ_YpaFm86iNS@p=k!#2+juqsFX zS9slQUvh`Q=9>#`@s7xsJP;P7Dljy_EbC?QGii=!22_39;x9vUvPTD8OI3o2IU=ux z2TrgBaVIp7ItQLRM;ZL<-}(cEq1V=F(l7Jc|pAPY3Q+Bo$Arir+b?DldY(wh9%cJg<7>DqK*WASbS>7 z%n37;36TE6$kgj>+khA8L4GCq9R*lCs~e?Q3ox zYL%_787%x%n65FsbVVR?ec`Q8)QLeJm9qyVUP^GyyLmRZyr-P{*DG{Z#N=q{{baAX z&U@>ntxo*&Pdl=B=HI5O^TcF%EQzZ(`);LtrRYCn*4UKax zB>?tqT3g1?NM!*z`MLYskJRXd;uWq+3b!^cGty(b|GqYL)X;06_qCFAv6Uf79(li& zwE1+rur^Ql)VPf9d6&Oe`dRk1AXxnD#<%&o1%;2*t+z?Zm-wZ&uF~F+A~CyJ-EMX% z;I-bMc<+rng-sp(#{7{(c`MWxr^y44-D+x_qdCP-zJ8RYc zp2n`ftbQq3sD>vKj#P5I{w!ORRHPy8=FVd9B!-{SC$FS>}oMK*a z12&~yA)BANQst;32N^#o-GjoVT&i3Yq^zm&mt2SL=s@W$^6y5}KxmjYrSBHo8R3w3h}&nGMM8$Jv3ET?|N z{-%1rd@kRInqlYoXEt|#k%ztnwL^uifRcwD!0zNe>cWd4ZE`5j9@&;;v(JhJ6Sovx zY9=YH@P_CHAZw;}A#H$}J_juf-f_Oy6oCJU%SPMgNh{&Hxno|4=^pDA#V15sdg75q z(~WKrnOI1v><{OpXY!>_`^Wm#%@(T-0*JhRP{T=|I&7JVe z`R%O?^{+wyooxCo3@TmR$*UuO-$ERgd;|)Z$Uv6~%d4LcvIjBg1cuHte*7v@UQ#(a z=V`iEJoE6_?tRRMDQb;P>on&za6r&>-A#_fM;tjsGu{3^Oni8f-yzwo1&ABIkbeu; z2GMTRJGjxIPo;VU_UD{CtHH?IT5(d34^uukg08F~tZf`h zLf9zB)ZbOeK&UHbxfmh`utJ1|ydXhFFk~>S_!KNvBfVNdq4@LHFLv4I_BU@5aYn<* zyWMtccHb7>nCazhYsOHdAL4~0*aC743P+FSSu=@bWZB^zEmdxLv(gZjBXoF+OG^(? zhpKTNxR3i~8_0OTfnE+N?97zGN$Lpa%hk;xR0~N-c_XFBZJzY{U4*bgB7xCzP1@tc z#2Tk0j(P}t;MEO%GjA*;Ob54ztl6rZfg5$mbk~0g(lgR+x96BT2#3ingrio|2--+hPKb_)wv9cerl-Lef?NpkQJ8CMXaAa8MjHt!KtckLriV)4 z;Uqb;TxapG_J(5BPtK8A*wljY2P@OKf?-$Y`tN}leSRw)rkI7_UUn=_Uya>nSba6q zC|z351b#@1el9JstOVurVfm!cA@P)!;X7-d4CZ?dkMGS>z0>V`N37%oLxW!QiM5pt zYku3d?pKAmt*$?#guUo7#e*8ai}5 zCLP}6^x-+}6X+P>0FUAlxv7rOK;WkkoZ^L0m3G_HEK$gy#b>CsJ@K1ZSVbBqNZ)vj zWNbQAHPDQqC52D}PgItbkdFyXl+5Nb9O!}O80qW3_1%)Ln({ilOO_?-HmYh&zMUY( z!*;%Tb7Sm+j0$H=wW*_>-4uNMF}C_-zMp2lsq-ix16TGbOta>em&J{06g9Z%j7yz| ze-__>E|W22J635Yb2N2#i``kAk2`7&K`N5v2t-d()ezzovvofB90*v3sL*$FJ{3{) zXvkVy=i2p5z~|_H>vT>a4ix*n`}Vn%_P}&e9^JK_XtCkmnC5TaqIGz^Hx@dOx&iTw z5(ka8DFibVgZSBNCC{(-o$W{1%Y%5-{QKp-q*I@bqj9LIIY(6kI1BxqnN<&j#$#gx zbMB5*P@TX_pG4$qqL_odg9BESSijdil5GO=YVaiC_OF|*V=6;>B?ARCV?5HX@gRU7 z4Lc*TQF!bJ9-N~XCWBRIE> zR>JSW|9I8K7j%jt{8L24-c0Rn*;t+~CRdmR+EM80>9H;ErxwG<<25@V2Qk~@$8SC6 zk@qFQEP~Vgf})}$GX~TwhY#bSVP#iVZlPhuTAXudPKyDU+FN!T31g`(qt2z!G(aE% zU9*8y6|ID#6LOAHTPo4alm=&AVjzd^VHkU{D~~?3D#St5B2-{J-1kI zVUT4hc}T5Ie3VM?qn|o)U|=M2*Wy*JOifJzW&*l{z6)_Fn%v(fZ{fh=4tbElvUnOD zjJ-W|!C&Z3B$9t1sI9vjya|qa$PHCF5rOh$_>~TCrVV1N0A*H>{^=_RD+;pU@K3+6 zGY}U~cGs1Q;)8t&EI%Q5Y#1IOxW6H#Qp(hhRl)JJd-hQJpAoJ z{};4|5VS&mjtRE{JCWBZfcr z($u7!`OUNZ&w?iwHH>Gs0s5`KCYyW2?}M`dwHfj?hUT_`d!Q*>>#18V=(6YgR{Fvk zh7r99NoWTkurI)eEjLEyR|uKl(*u#ZejNc}!;a#9*|S}+6A^#eHjdYdY3*^^Fzsxd z`MB~ugUmo?ir${wGMY*jXp=6ZRyVV=Q%%?0ZW*7KqLYXIv9AxTlX}ZESfGXaxN`7NA~`|b1do(943zk-P47+# z5PeTp!r8K&g_+sT!2t?&aM_TdzLS_{3^=yk7UZIkkPrp-hwZlKDZFu>0ib)*nwy^w zPL6Cs;Mg_19m$dJ#TiaPK2Cd&SOsyGi1<~9;X?@&vlaDC( z=DEfLlN|5VuW>2Ih-8e`%nSK9vX^iNs}Nn7U99SEHUIZ!bn(QZUXT%6(^tk1j#MX4 ztLWX=V{#qZm|i;W7512`Px+70DU(ww5zYSzUsXGtsTd$3Ecm)EH3hUq0D6p6xMF4Z z5~D;{>*}K=UWq);@U)z0;FVrh)|CuAZKxF1t5|d49uHqucz-Pv+POX>ma@ zJgU`DLAF|BU?LFLZ7qT+0-iUtUNO)F`d$nRmx~^76%rSxc)UwIGOpp8J{bf$u_yF^ zFol@;)diR_@*$*K^hL!A>bgMQsv)4INdOSgaAxcHEEc6s|M`=$o00i`DsJtZc8UN3 zGb4Dd$SoG_h8O_=iX4r2Br3Ff8DRUijVtUtcZc!?dhT2Vrid`1_(3kjo5cms4Wzhq zjf{+-)C(~Ka4x%Nv#D}L3=YV(ASg!;y;bF0s|Q*I&s9_*Ku0P!x+^z8oLR*(+%SE! zHI{e}Lx0=^IUSR}bKxd@e0&N|TD_!awl(R{>q8?0=ori?+n@dYsSU#re)7?yyhPT7 z-?*>4yERT%dhl8d^S)TV!rN5h(2V&F7CFWpdl&==2_RhzIidpIB?O!)6A%hzFu1yc zjHF|?5}v`ff_vjo2sCo|aw+TOP{yW!5*ITr*>J=*Sul<;R4$VZT(Bwr3Cs#NNy{h^ zC%xUlf?lVx-f>riY*z^&Y6}-kY6~pgc8fx?>rE<$)vC(rvax#0uQ8zJBg82b0VtUW zWWdMp=y1m>eS|f`9V}4Y9Dk`WR*L04?|>b|saZ^WQ63I4JN@cWwpGR_?#8JO{tkyy zhw0->FBDE+RXZSZD(%Q;9bxtqZoL*KL2AprL%({g&#cNsu19gk+kBC^eC$S?YMjsa zg(r?|>+gmZ#Ev-V-ldH6E-`h4qXPRwKw${(0iup)!y1Gw`TQ{q2|%AJH?H(tm;iny z$#V4YVMwM3_n?*smXsC;=8^(?_2~S8Fl49^4t7|Jd>el)%R0N0GXjKt&fVxqD{4t# z=@?;&h=_=Zp}6d^7aMp8PXMKRZXw<+KhOIvmGzr3f|M>SDjGuLERl=>1u_i9Dp%B= zv|>U7C>a2Zlhgj$J0Lv~ez}6Bl&ntjc^Ma3@iP#xS+T7eO@Qk!8L1$?Bj_ zlMWc+9BkqK=tx=ZgMjw9Rsq*S5WaVxod31*bOJ2 zqc}v|V3eaj76I%D zqw}Vrfc^abV#Fbx>N^!3%(*}Q?vel)@Z3g6Mp*CNLhjz;bT^KrnI%-8Fny`Fgfvx5RP@)JyFeUF9amg@M)&?En{9EO2?asGOmUg6%neyJ(DL$` zi-m}j9uCoFrAFj?ZPt4Bb~9sS{>YC8I4)t8JkkEq2|&iXEt}nl2wm(H#Oq>JGDOT4 zz_z@uYJP|35e=z4g^^rZkYQd34RJ|?ZSg&tUl^FZ_4nSJ#t$}A0PBnP7e)dXTBgW8 z`W&G5A7M(bm86)}LJ*yJ;G6+=EY&v} zls!svfja1c0z0ToQyMMCSaMAjW)DVUIFviz2vd<5_|eE?V4UJ_#ijg8JKHY`7^UA; z!QZOER+cPm`~fFO5Bu%b=AfgLquU(->T&`3fH?Io^POlvr^#TiRO4JLJ0r-FkSSktLBk{<4Gr!Em+J{ zUgo|us&w1k6zc<|EYM*oCGAYq};u@@}h^ zdc|~ZQpnYRYN@|wa&KR$xD{|={bAG*J*$TN{%c1xj-G65zI^AHNYPILFRrD{R5<8f z@(s{o?x5p`sm)TDzO7FV*=k;L%ZPr&h>2Dr^Bb8ipV9yFoGgV!`xP`^13Trt2F=Gres~eO}dqjp5D~I~(k^iB0 zn_hQ|YmyZ&2GW=>wQ*H`PWYu>X;3G4pMxn2^*hDFOxgH0HA=l@Tq7~X{P2dt$OA5I zuR%tMgN!}5tz5me8(MBF=9cYgBPHpudtxzjbUgK|Pp`J!JV_%@nq*3VOD;@!EG=%i zTx(%A916YA^ubTP@%Mthuuaj6@|6)MA#$1YIs=2Kb))d&(%`*|F8pJm7k)e+c5peU zZZPRKO8kRlBFwG$xy{LS?}ksUS7H2sHjZd)Z=GX^+0Xd^Gm088k(EBCrKGU z!Vdli{{4#iVs&e24ljfGed90q>k;OwD%7>;&TG*esWmRDd^6u~JSjZ*-osR6pZnXG zhG9#gLy2J(@dw-}#X|!p)-v79WGVc&aDChy_x#tCaxGtjW&mJ34aLuEQBD2b-%7`p z*}iU`8F?ry_VM8nuFzbivbc;FwA^Ii9co`Aa1@A(yUwNO2vt6`~fq+$yi z^9}2|b>=F%MN}*rzj~aeVlM0okm7;-96T0!y5U0n3}c8{>ob;%1&pFmL0P7MEdzc4 zsR55jI(1*P6I385vVit$a-;MHe^r4D_4{`2E4WN{_N&kfz{>&yN&?9;v~cq)?|bb- z4IqjDO=5M!2h;%CFvv#P`W~xo%ugi&_v%OZE^1ij9Dr5xicic089V7QXg3mA0v6#V zeRPotZ679Mem{uaEwA^zkf90?z*!BD4zPn?)}qPQq;G7)utf4pBLPhQDmj(EK|(?7 zKRtc3icdMK4IFuReB|l2iAbF}gOYR4%gI#V&CLqo564n zt~-46TXRRZoV>gMU_pML)rN`)MW^YJfajnSolS05$wc!4kyOR%M9$ot6EoO9uiM5! zKtt9UqD0NBT_t+atfTV>iycvA?)ex8qN!D2FU0G&gX6&VKgYs?nwD@HB}c5v`JDEb z`S}=-Lg+{zjvvHUU|Y^HsO#<9Q(!22EVRZZfvE5y_jJvI?&+8RHKZ<`2)ft% z`=!i`-o5|&ay#PYGhgr&)h6A`B5aHoTF^`FVPtOP1Kk$Fq+7R6GgAYCqNfZ-wT5dS z?aixKc%t~i&_C!ApeiH;YSR_((EKY33n6TxXJ9xKQg2oC^(Iw~dwHK{IYb;q6%`fl z-%||=n{IS=bs1c}3Q+`lRLI_71`9Rmr%zy1pb$k1T2fM{QWJl&7hP#iyYV~MaoC~6 zs*qJNpvHofN0k!+w?E+$m#zs!5$zhgU)nxLW>_wmYsG=eLExo+m#&@tct@@RtZYB2 znNYj{T+6!H z>tJAw8T_*gjXugKcd4N+{=J?pN!Yx;bbfYXwzVX^hG}7X}7cA1ZZDFCs}3 z#w6AS=)i$y-}lk+XdaAWlADz70mT3}=1G2IoJQwtegM-_#Gmvk;(I5ewgX zwYf0ZfzDkfe{&RnuRyVJv}7wv$YA7`5g{;Uw`IfJaOr?ipq;|S)|Mq1jmz3IcJEyp zyifeM@8IMo)iX6i($_{_x=Dc8EAZCn4=7WiHKn&E>7(irl_$UP8p4hz8+ zuDAxAr8sqpy7&}a&oPh`Fo}#045UH45ZBDh{YCV*j=)9e z4+pTqagks6vzl{i){ z=xDd0kf=J6f_5ODB_+3S+z785f`ybm1#oS}CxBZpbV476sXomw?t8Bc^9U>G#wA%a z1Q}Jc+U!ftVu;mdgKuuNhF=b57k;c13U!fsGUibtMA(i5_l~YE4{Cm*&SSwZV?0AQw_Vv)W@c^0*w*3nJBi%GKkgONsrf6X$(^Q*%Ex@$yewST^=K^n3 zT_DNZ9lR)Q-CLbsq3z$ElkXAi3Ex5*dGW}=Uo755lN&xVekSZdG5l0Afzg{Yj(~9^ z=Fk^3eWpebXRCdQaFnB3!36_dC@vuaq|TriqwYK=%#$mIIs$OkBd}RZjU-uSCfakb zU!X&xNJm2sx=~C$NUSffmVvLbZGQ@5B0l<>!GgLW^!R8)?f{0w%?f6)BeU;hUI`3p z8-`!Ni4hQ)>@>8HKPr$c%tlfTME<-MxX{r`99Vf&HJCLqQIUt3DMgdov71@|l?9vD zR8WZ{I!7-bAK(YV_{4-Keml|rBZ~C7%8nd2-^3@&<{Eym7NMr1N^`JkliK&MF8M%+ zQbO*-)6tyD2^e{necKG1jPc@cVST1~k}*@UTtS8*VY2Pt!Ncd7*DRV(-h1XQJ~QL6 z>0LmR^iP#Nh{LOXOYpDEe@vNiXH6<>D-4g>_VX~puC}YMkDQ-PRvfKFoXYX6Hjn9_ zr#r{tB@PnQj&%T$w52;ahc$au^eQu5sJ92QH3lpN7b2iIEW?^xiJdf zB=Fl?T3XuMW4wGOSsijQ9-)Moo5}xQfCuR!xS8M&gOP#T0Gun6iuLaP%{Q&qq=9nD z>bovjU_>gKh;@psZ(WXA_|&A_MSOfWgyO-uM>2fbOa<@|qA=7M!OzCsC8dRghzmwq zwD*r_89s+81?af4>fXz<>0Nes5qRm$)Zq#lN*wZSt{k*Pj~VKpLE7 z^x+^o$(J|hW&OCVn!6X|evAPvg~lDlErq&pF(^krn7@vS1{~^z1$^t~;67iP@K1B@ zNzcYHH`C{htsQcr4uw}ApmYeBe0_Zd88JA;UaBdOWkuoht-l|v*FKNYBhsleZe>WT z&D4e&Ei8XfxB`r;@@*UHoVnbNnA%>bWhOi=b`ZU>HRgfJ4(XvFHpu30o zb07ezP|V{Ca0>@52Ac2#gS~K69sIhG<9+wb*RM2B&reKEkzT|^jaYUW6yfF9z4pK& z@f-nw3EIFO3-7JF8!SP#V|$-61KTUqr&8Y*q7DQKN=ibe2tgOHGn5G3)8u|**zO0O zMlM7HBQ5h@d!x@6^8MVXnkM-6JVJ5Jt=gVEum8)odU+*(h|&1?i<9~$?qk0CT$5f& zGc7B=JqtrQk8<{T?R%$l^*xgYE1hF$k4m~WLkCRWy6N6XtMwb&O=m{N>9DtZ&v*xG zp2|J?^1y-}=UT6S^|c~!fKh9(R$nR97l~H|yrs!qP>_~p28uX57+E(#y`TRA7o=8e zDpKNtZ2w&MuP)%6u~K01y+OD{0F6*$6Ww_tpK?TBD{a93K+px$*W(+%iw>Oqd@h|v zIa-nhH1P0eHkJMRB!P@}z5pl=&x@T;2HvFa)wOguXw$i2q&M&WUXxov3$Ri^uPc-+ zCMZU+LHOtaErP%Q-@wJJ!S^6PJkcsQ-Z#4e&^+1|z0aGb^lWrlsV#L*h{py;z^^Fu zBi;*id4uB3wF#-IP7B^zE@y#5KU6{h`nGa<>D(V-KXY=@CRYhq23DH_P_DO(W~D#{ z+%^tJCpnq{ZY_bht^<}k-ggkDa>lG|_$XCj;e!4K2AL9vY5mgL1~MzsH6L(bIEAZD zJ?k8#25i)!$TG*~-r?c{+N_d3!%XeB0LC2NbXeNreY9JaLU0FpFa)R* zFIb5qTZcEb1)MODKD6kPY%s``gsX@S@4@i9yYlF$$UP)eV7u|j99M0tHFS%}~1umO>*e(sk%7F6p-YWgFZ10I*Z1p3#=ZNsr-XkHpCzxIGbckUc}7fY>fbP^`aM#$=R1AGCpXUq;i%ZcMGdiV z`qgJ+qWj_(HImv-OIV%uKVU~UKv)1f1%M@&cT@)<&FV3=pNaqVbB?UOon28!Aw#(>uKl9hUTHg~%- z&+}>`Po$r3j%%MK$7GyBI-aYkLoDLdF{b?VrMFkI7)pQI;gn5}#e~azM=wl;EPp?K zH1$f}%F)kfov7p5{wK{_ZOh=I)U@6ecs6q2zb%ENBzh|9++Yo@c9(0REB4PfDBS*9 z&7P6sN^4{8OZ^i+^z@Hi@9~s`!J-XjPw5JEHRg4F{;%0OvQe2wA6FN2O?+j}2|k@p zdnAikLawImujihs)_BdLcezJov(KONwmhhxd9!Hok@x-f?ttvlmHYkcZTp-p-%yaO zKBIk7zPD8?;Cn`yOmxCDDgRQdn40}_<-VT_{1+bmU}v1B?dxgfiW)n1S*lS?i|z{C z>6vvk_1uw)q<))o=3FY(D>ZORDf&0=v~sPw zIbUVc5DW1L>mZtQ!V<~Nc0w{*y&CSz93q-O?A)JzwNTUT+97eV-WEWb6m#iGd-^h~ z`g0d{-@aormRmxw>#aT*bq_eo~5}k*P1Fa#j0j3<;-g4jU8*{utPu>c=WgArL5h^8IqnG3&ySpZ=1s zJ2?`AgUan$_|i3%@;iz?J547VgqXorx-4aPmI3Mo#&yuH?s_2 zVsXIS;>J17M|*GYYooe)Jcs#y&FJjzgn?g1K{QQYC6n~ncsbNmR=%l97rlGqx$^BA z2;|UWwOgN6J;I!H>DUeS6bd$-V>i60kDg;ZucclR!_FhfB(tXVw^LT|`)ds^zMFP- zXg~m5wMpJL>jce6p5mKX(VdJ-72T@W`&>SmJK5U{&{2ZMMezn6lV7ZgFaQE(vtwv* z*V%n*V`&>xV4&JY_kFk4`f>Tg)tw_Z33Sp6>T2SF&z;UrEREij>pP=rbmtnq+q*7Hz^pnTq_ zky#Jirp(YyMXw`NRf8hkN>%Y*#-m4%007<|{<2NRheuO{A_%y+ax*c4#e_S*12-VN z!2rVG%RdH$44M#CPGK3DnfVn=HSWqur*5H91Q+A2(Muq1+!HeEp<9>*16&&%Om7)I zD=CRu0`MUC{X60hFp&HR=n$n-9d6#-J4>9PrKG_#igEXoC~4TXz%AnXuYX=|K$wuD znX~Ts?%>Jj@tCviYRF6G*zV?=dlZN@x(?j<_(K1dSmlj&{aEc`BXjkf4)cRpnb4f5 zXCgJgZBN-+rgu#3>&Hg_{*&~K?K5y({Zc`dTsUr5uS8olpx$QRDI8D@Wj~-p@Yc|w zY@6v0&A}!d|LY~a1qmO#9>E$!Nkm7vJK!;Z*Th7W9{A(|A|<7yxJe}Y1;Yaq&js(^ zI$?3e3sh(un{nVu096AwglYu+*2tG-=G@l-8sG~ZH(Dj|^^Ng`o<(2Zl%+NPHcO2l zkUIn(e}ii-6tKp|+ZNkcq+qhcZhJg44z1GPmG@{&yQlg79gZ9V0mIUgboCr74d_j; z9{zK5ad%%vqXqL;5j7YP!{6klr{}8biz<3;UVN}je#4No!Xc=lBGRn$?_VLR?>j;k zyzZ*=gIO{g+2F&5e*&`*MjOy^pwas%Xoq_h9`%V$KHz%6)cM2BDy7q>PiJD_=RUMI zSe{61yS;@Pen(P;_ZEeCQ{jEzr1yOkYy?hGRYj;ej^~N;X2cOYL zeB6!<=o$(ZG#WiUJqwc^@G$6}#yI+CZ?89~EhwRMc()~nsGx%Y4p<`y!z}W^ zbhy&vIYUnJcenvBZuR!g99ZsbAgTO=GX!m-MswcS4^Hs?Vs!gL0c}M(&h@y4U>f4I zbnrPLdV|D*8Z~(6wudfa%yo0%+KhlqwNj&P6mwgA&7e2p>&N8Cndvs&?;|qu~kovd=faZYA9v7x-!gwXwqr~45 z#j5NH<|9XrE7P)mXWQ(uEe?@ShtC-h3HIt!R59=(?BX-c@}nkw$#c(~@tGz!M-0H+ zyteUeDeySdYrxY8>7m1jdquAOb25OVE)%^)-# zaMZCDsQ?whWc?Qd5aJ}bCt@?hQzWrz+fxv?hlRyCv}Q&ZN{xJ`i#x!lLE5s^tO9fs zh%N zG8J5`?qcR8OK*Uc(zZ6jwoo5-_f;kSLa<-P5r$7ps|<{eOl|nW=`UI*kkf?%)1)A! z3??>J_`9-hEkdbPCZ8@y8wQ~!JWk9W%d!He$1(LexyLCwP)gp|ypBo2_YqV$G$Gar zk0_s7m3k9BzrUivjj%XX^$pY2Dcc-h4Uf0Nbu&Frf0d%O3>%hm=|#~vQm>a~8) zTsd8S^8wRuVvpxE6CI0Jem_e7t^OvV_%r|B7f!l?lXF>IFpS2-Z*RXQ!Zg^3|3IRJ ztIova=tq~y1y6xEoD|sZQ(=U^1+Z>3FO=;Fbb|p%%_kjV}^v^4uh?l3k*AIqeJjTv}@PampjVK_xmQ$XI%{e91h zVM+!Mb#1($n%Bgt$b)?%&lTS!9CRdei`@`(d46D$a)Edcd8mbZq1L)d{(8P-((R5r zaZl@6ZndUZ=eOFM@yj<0M8_URegQ8P)O~~K!YmLRQyf`B@hI>EHX!#y#SP*g1_LtpvnzvZf1I#E$F35<)5WBQ1Id!PRFZaJlAX~gqbr{4XBN<#G`>1 z6h_%+B8LFoyRpQplFQ~~v~s6OqGdq9OQtqNgadiFt1uz86x#hDv)=MA&KeMXzHmNn zl48*)HG)tYVJp@mP#wq{5+fzsQ5>aDbjv7eHJ*C`y?x-#aR_&IcA`9og3`9w)5%F| zhiCyL9291hq@LwI@CCtD4w;=Ih`z&aW!r}g{l3>$HoIy&t*{u7%h*@Ck{d#%6J#;e^4O`a4L-XJHtD7qP+FQO2TPDR?8x{`)=Pw-F zdV1%TUhi2e=6S1f&#)9LYk_9|(<(;yyZ^>se_9t<4fc|fFNLC)pan5bF^7}-;)9Q~ zHM#G7VmCtnOfM)NEdNkFi^!g0eb?h>6z;Nm3}Ff=6Im1~KwQ!kAt63HW(jbg5l6u{U@!!Kyh%8 z(EcRV0B4WTb%4DoLR5Kr=P z3y2>#9V)@7x*HXW6fn2X*1_M;uShZr;HmV48YC7E<3si=N27`@nXQvy!&Cu?`cR0! zG?||hn8x=hAGD07x8Z7oYv`OiW{J8v)n7wMREiCQsRK??{FK3vPMAlIMo=D)Wmy{c zO8_hU(b9s8RN)K+x9no(^ICYEHG)c(a8-D1$j?zi?9D)7hBrcWF-TJ)8LniGuP{W( z-C~r@KguOJr5`v)Htq3}Bf=wyr?jGC+d!tR@@;YXwNqC>gATg%l4b3w$4g74H%-lrj(?Q zu1yxr_e>>qd^kMc^nJc=LEa_q$T(%sH|a(#EhQO_rk01_jjE63N7sRKVcE-79Qk#c)qHrZFTjXs=y^UbA2HC zHyY(cpfdmZ#PmoIbe|zFbYE1o~4)?UndUf(m1I^-eU^USZo+q8B-X3q-)qZSO?L(4c z@2}Fw;M~=0UE$kPb;F~)i>Ivg^`e`!y<~~%UKu3`vxy5giCuaYoC3c8O<&}cGJE6A zcZbXM#>F%IZQggztDjkrd9*SlvYB=0C)elEGwCP{zzQbasIIgBW;TN+f_!ZTOcbR@ zj=#elKZNj6WG(qhrF&Nt5~}2;-cFOO#d+smwcQbpD%oxeY^}&E63MpSPKa!EH`mu! zri}Ot53YzzNj=JpDW9t-Qb`u`v~x**C6%iFAmw@Z(S~p14k;sfT(5(w8)oLr>mi2)cD^$C9M?kvGFQb<*lj)T&NWPvbNkkRtLAv7O zDOz>^c29o4KB3BEZq2^r|9Nz&Usn{@XO7I6*+uoo=+K{T4~rAGUj1S@OZjx{vmVWA z2=%|ln*`aWW|!$m*J%lB!TqUM_$SUhb-U$p=l0R8W&0L}AeP}68;`j1HoJ>AO6FdB zWeiJCzHIyJD14af?y7~%-VcEl@#I;(fkVpqsV|Q;v+XA>EGg+=W%3&j(WiRLd6`PV zM~*@t=g+by_Fi1Wc`dpSi>di3GBx-uGa0$3zAla2KCTKs{Imwm<^3nXqKeqbxuAK4SoMb z|3Jmzi%m8i1s2Rzn~m9-a*eE#wu_U~`5D1xUkghltH7XaNuKJgW*9*f#%~j(cvzK zKKeOmB)<@*0%~US1k^q;k;QD;*kTrk|WU@5mB4h}&yw29ATF zHBL-tXDtrT8&nT$4{lppTHp?Y>mecc*wGsmAsjzxX8O#($h-_%{MPIi5|Dy|0R5^@ zWopgfXUkVG$gQYQZ+net_3X*n$f&xZnaZsS7#%2a2s*$m3gfo7+ael>C>9|r#0d|Q zj9>>^Al!ShtjKM2V(#zk#5si~Ts7m6pG(y!%wExH)D(b=P14ESZT>)No5+k-U-E0R z`sl<2uY&ZX>;Exz=HXPnd(__~?P`-G?Ia-~NtAQLr<8L%p>9Hi*AX|^L-17WY z_(NRZLQlZi4M{~fh;*|%F}sIfZrv>5S+-WSO@3l*jOObj%s8BiUbK&4$IzbwgGNup3_?^6wQ-*jz0#cP*krl-vb-N1Bgi@R_BLCJV0hVK z+cC9(LQ5PaPz7WyN_`Fb7VxltCl7pwC+Ue6@_HA^^j#+#ERp64t2>?DiR}#L%>&n6 zANz1J(}4hia|t$y-Y;QnC^wj0^62}vikTvwMi5{SPRc{m+grD67)q!xSte`(?fXix zG2n`a&~~hBYp&j8Cpi#?8Vsrnd)9sj$tyU%s~T9G$Zu_V{~Z49Ct5fbuj0?ki9U

    D8Jp^8WBHmO+j{RzMNw77XqGl%cu3xI8ridYIVp$$t75k>3KE% zp{meMyr%v*CfOT|sd!Dw1av+KS>P(;8pPj)sEO8}kr`aZH~{<}!^9c;yj(-1JQ;L; zK>hQkEy>T{u-%IqF&~3{Eu@Ayqz3OE!q4b4g_w(mD)`eljn9Fo+r_9&Ep|h%m_@EG z6-Y)+2Z)OU3aXTZnl0Stq$;>$vkatBq%k-RKyt)e1Zf%hf4MNb(Tesi@VwiNyn*!MZcLT)@wiJcu*I!yjnv-La0%Xi3_N|_5 zTx*D)D=A!xm!4dm`<%_!`!LC4)Guz^{KMt7&Zf1wwqI(*q_xSJwZnQE#5c6miGfp+ z$Nr*geYfNvY;`~S%}xAUZ}8N=!nw8iiup~_({T!NOh;-r%2b@Yw(L%kh~UAiKyMW_ zs*3_57{nfXG3`Sq`37N6VT#HC4V02vh#vbxUAvmQFp|_ z1;uo)N32e5eH`)9q(qZR8RJ$<5q#22_hNL?(L=$-i=#}Qly#u_x}7mDCMJT)mbi)F zlD+^^A<#CDI((DAU{S~he-QSYLr%DK6!I+I?n!pu9a!Wz;0rP2_N%G^keYcka8)t} zp}Yt!LWn$Ob|9U{q5{^GW07%rn*|weCxYz`x{H||wz{7IWfzD9k;y0v=Nq&`Qrp|*~ z8zf{>6y7vk`F<4&5ziVdK}SJbnME$J1t?_#?C$1m91bEi`6hl+NPfqE0!&9J#KZVl z!nxMXXr1P|mwYf)-RA5UQ|EWD6Ta06dmJnNlKQi_``T%~&rdE5i@)tN4$Gc8upq^< zSM_;#;${+XU+OXXTOtp&MGBmoY@dCuVhah2a_@}2Y!k;vQt$JL7vTj~BRfW?e?fVB ziJUJKb}WV55)S_w6zzFwW51sXc$K{ykN#a>0>rLoYh z5|cZ;+3Waoh{b|Ys26~1taH*8J(uWf0q_z_KCCMvGv-onordl8aA ze~7+aeSKa4n&Ut!QFDrAW7|K>Q>d1)>MIx%d3(Z`iWUmxFz-UcmCfE~CMPC5kg2Cr zgo_p*&Ty;)w?C*QoJ{UB&EhACK{vJ_L_?i704xbRHVsqlq$?6lu%+lN63mdNC-KCj z0iH9PrY{h1hM{=4sb_wZ!hO}j)MyiYzL4Y{gC_0EHw2BZ+cw}UB6ZUGn60BNqfKs( zA(%z|nr{gEA`zs_s2pHUj(`j{g0SKa))VY<6+*QvD!}~%Ms_BP#`g0iFp6sz49(A@?|%-U5RC|?BJx20~*ce&dd3@HD0`YS^DSw zA)J~YT_)lx=2^G95B%`wFqh8Xv)2BM**A?CROLu_BiTJ;>M^b{8)hzLVV2MV+wi~J zHhB>^TP;#XbtPG7Yo56|HAxuQKjQid7pX6|s8Vy;+v%yO{f*oHZKIGf!wbBe2l{|y zKhU1aHOZv7-HJ%Ru;`0{EjV34aP3L~Ku&&&)v&vphVTN@#t*-6cVM-+YHtq+1(@Ib z`WS}bwU^2(Wte31!LTYAg;aa4A>v6vRS@EtgC*ixU{XwPN45s{_dV79qrMp7wT}2H zvqD2=yPvnTq2+ZUlM(>xB@5rM!UAfJMml8Z+}sMWX_=j+Dv)C?cm%o*%7GyBMKQ z8JU`HI&c#1YrSVSF+3V%P8JndUZ^`$qb#8#N3dZGllzNplJRCeb zVRh>XqKZYlYdjiM_88)|_V$P`>-+W% z zaC?6DD=kw~Q-R1YU0nz)VC5j#Z%~_jI47T@k3*$`Ue2_Xg8-*LlOLI}rQwWou+#U2 zw`E?v(^4v@j~6Fx9;}w$Gi90CZ7BSj^};eR?yGMr)`T8xdv?f%v1KXc*PTP8=*rWp z&#zUz(Rpzq@^s2yJsLG80e|%vQO*0_o39z1kz*x=9xFmb6+f500IWc#p8KCRL2#{Z zkTMN(UL`$p9zEl8A4Os81h({?8cUZQl#(~N7D3(F`Wzsa@i{4LJuD1$gB28DvvJYk zFB%E51}NcBhiA{$0ACzHybt?TI1a0tkxFV>w*7PE_lfLnLyrsVQ}b~<#r;SpyP19KAps-D5~lC z@l1ceLUt!AE3vm%w;>DyQHjipcOfo4G>5C`q3kL%^AHoU{3Ui(@m?q2P6fv7?LlA} zOayq&;1hJ0VP{M)ER0UGDeTeK(}(d8tO;dq9u533P|DNxD=2P46rA0A6D~i_{Tx3E z2@hHT!t!Sd9mEm~HZYll3;fPK!GJ`Y;z|YkTfYn~+0b-%kAO`NrCHO^tZ{`gIH%4PUm2_bzo) z9?n}|o^T<0*==r?n^3Ez@i?*4$ua4BOyzTqsYCE93sXBu`MqZ+3iZM-?^+#4Y zyO|lm6KbBtMO*3$v>LCUxbljnr)j?7@BR7YQimc5U-ZZ#{VkLr-ORgJiL+-++7++WrFUK;dpm=hJL@)j?CpHbN36Y;osgCicIc;n>)x{= z?RS1XeBE>~L^f3CqR^@*j$HNE7nQRWPP<&cE<4|Fnz2jmqyzAZT&Mhn(Gr=EBdMO6XK0c z87i%=H>Fn2r+2Oq2FMm<7jw(5jLz;C2EL2YPk*MLqKV@=mcP2!6Zc+v zVzZm0SuEpn`vKddCP`}aFCBWs%0vB!x!Oo=9U}Ui(FYAb4#+7J6lO1DS>>k=k4a{) zADnv56RFu+t(MWt-WhM0H56n17?J9R%iX4B3qlfwpM*%w)$jdu`DGZN-1f>UU@^P|X;sDh-p1MZ}~?b?SEz>m^hy%Brrq_wb13(xPc!HwpSI>>(K?if1qL9j? zj22MRVUs4;6OVW%2t}S{WhU8I3XIT;`}#EiKR~3T4yAPj?g4r~E_Oz0aS&LI zz8dUR2+Ys_->9R^5~7Y+Fc5XT0aPe*Lf8@pn&U5H>w@zK3bbN+mYxS+-C~_O|Jrs+ zjvZS7R2Kh0)@k|BTZ6c?tuc*j<~!cf+1uMAMhGVr0L41#2tGjifM<(HH{iHf20-LZ z%v<3mFDaQ^Scb+}MZtC!T|fennmiGh_(9E~&Cki{Us#5tp>fF6YX!j)*Af$PG6}|? zp02L?kr_OF(NHU~secv1X{m(H(7C9lIBe$&aYR}JQ32=!QoB|?QeFO;!+wN#KTvfD1t(UA52`$IcZYrfyF zX-eax@k@Db$?e0$SoL%rhu9U){+5vA1iL-dAFg+o+}!Y1;b$YNoHI2=3;{tmfMo<( zaqdB?)le|4!?v@t69-r2+FuhB=%NA81Mt@DPS};9`{NULm+?^`DDQZRKHqO&zHFhR zg>M8XGwKYvYGh^?D=QXmp=dutgOoOR-diKCw6hUlumG!X3Dgl9w+lK=&Knuwlmik5 z;92b_^H#n6#Gor48_HxwRpju7m5b?qd)N9RhNn)04!ugMDlWS%tYB>AA^1IzYZu*IJZ4r zPXprc4s~Y05r*$O_uz2GMhB_|Mz3&p;P8VYL5tk_A*YZUCrFRb98esDHXE)2s3B!# zWoS>Vo5nErJ7`FzMn-UeQRrYlRgj_ioQC&yd1Xt0g_#*_kAU!EM~mRL;X@>jP;D_f zilvh_3cCR~AWX6Wd4@EAou_A+m!l(-aU~r1670Bh=v1mDCk#GIUdJo36FZ;vnF?&* zw$1Cr>59`k0?p|(9{o9>r1kFY{4ejz{TD~-oZ|l-9kD7<)ozJCSgk6Eu_+^>05sJw#Nd&jR!g;uTC=A-zJr zcyJuK*NR|k(5}jvFg$`i>SUU(TmGe4Ol0ZxjNCXOM}{4xL%>kfgK${#auXtPHjboO9@Yf{U_uHThjjxH1m1QOkl~7pi9u8m zLLZ*l*k8H6U8(Tfgxo2zC@@UK>FAyT{THO_EQ4h@UANN#)Q(RMrpxBbFvI{shqHRP zx}}4|Hdg}vJ`hMFGb-HSN2h#eG$s^aE&SHon`#4&J^mKpcNO=>rrm)pz`;>PZyijG zSOLhwh`K|}?y$vAq|A+g1Cqs!moNnn&&3x}IX1{@ECa#DUdQ$IHdM+uo#X#rD$ zw|#Tv1?#)Iw>#i?#vBwj!G{f^Qc{``mS~mKq(Leo_CKtJ*A+dYZ*;O$c2gohXkqT>+q zRrqnue#FBxM}Z1vC^-M|#E}6B#!%zAn}`Av)W3p#N52ip&_HwCg!ue2Hghl@t8mBp z3HAmsByi&ivYOr;J7DP3&DW~gZ+6zYz=(@I0sT|;z|`V0#F2nUBfAq={LTCo$YSy^ zBjR%k^)WnzU4s&glyQ)`)6@A_L$15I!Q})63JQ#VD&GCxn z8q|Fl)*wifOxNzgfrj7;&>P}`ts}>Y=%89}QWTbx!?>VwAO|0BNKH-xq=MfJ@H4?# zVu<9tago!~9~4hPk^m#e1++s$LHajYzdceN$?b*>(k!rSn6KPucnYJn4q_68{E;1dvToOvE0?Zx|Xo^NKuv30XG#7pNdT# zjvT#v!RCnAU5WX6xhBdT^ACM%vhOWF{NS-5KWj@YTiWxeH3jW5z3+l;kGZ%et%jYY z0f`V41cCq#VOZ%9`ij)N1S1U8LT{(Rg=I9=K^BCvDaZ-~<$9-F?Bq=DV8 z@}CNUMOyy#7D3E07X%sc&6T+^d!fet;L6!Shk8CZ=`lYVN2M2J< zpEy!N=WUFGDkML6X_0QI8qm_x0&dPqlf7s=ZZIQc{CSnTHvsvYcd~odT4uAu{R9NjNVbr{e{O zGMY#19MW_2lH?HqSFMx>Ca<>j|wHBF&wL2cBX{AAp6ji9swM|2Xb)EEnLmvNNKD1R>}8LeMfG;@@R5x^Q8m^(rPk zuSmi*E#&`B&FNq$OQ`WD}5AM5)^|F{!g% zeB{7zmM7X)yAS4bTxiuldc>{t9vLYKbm9K_u=e1Y2Bet!O(xFoT$??vN>Q$!?Y?o0 z!?Ye+{1c~hC-r9Iq%%_dcC%T0?tHRGoE+f$`gGVLQkFkwu)tXTf^L76RXb(^V zR34lpZ^dkV0n~pp2V*pVN1P$oqKBNf$$^I&Z@{2zrl}%TVJ1pY#8R0k=bPOxp%d{8 z^ivI_*~&RK{Vw&ZNUSg;?2lFE_7U9$iz{fnY|Gt31ae@7tuhnc);sh|_ZB@oQI^Ts zhs`V|nVP9|v_7ck>$HhMtBI)ghIhB{m)<#f8^CzG9qjh_fZpdlZADf@< z_b2+UxBuZ;v(nu6PrJkKf-m2NTgB{a0nZ{%fZ)Up@0qFI&zGS z;l)>cB^TXc{HzERtMgz>g>ft=5&F#1w)pTR`OOw_w%7;EvMKR12NPl-r5X!i;xXE6 zECjbGP=H#zs7-iqj1&)Vw?XF42g(QUBCXB)aI-&6-WZlcr6e8T%$1;oIM5LS00^%Rv1fiPdJW-72% zH5N2$<(GGJdOeCu{+%bS8_=5ernP`&`IDgReEUfL`P`IB-WIOR z#AU2=TT*@foUH@t`NiwEhJDyC6EFXt2f4mtlh6%#apsJ)1s)FAZL7pIo2bWvpBk$T z=ccxU!92mI4-*m%?ULr_uZCw`o?0FJP6&N_~Q4j*0Z&&SJbyWlAI{J`DR)W|QpS_X}nk0s?46s{eVZ(IF^u;G&u z2Myk`l2VD07x2_+rdHAqv1`0Ay*v|${vC`;qIOj*#hH`gN_G14BPtMdY#z3rIzd8~ zbz=I#!i~G~m*%2E_It@b>75TsD1Mcm7A48DSH7q){~GN``i+(6!H1)gGltCuhj~{5 zWeS?dn)S^3ZtZ$%C6#xnEB8a*&y>N9oA>tBr!Q4Mlv^{LZ!zXAyDHWCLWBf{8mDQc zO~&qxPtFJ?{HA72zu|-{mhjz8)eat>=9!h(|u8Ue{;;6;frT)MV|cpJLkQrYk__TnKP|gM3Soz+UYmzN= z&EFhY=UkWUvgg7p+wBqk^N=z!w0+qd-kF{>lbr>+(wbS>sVqpQ<=$6>b9^q5A>?tt zVYhcUdE{9bdS|0kZexBc9F?q7c5|6=yHX8!(t8W9tG6cXfhJU?+-xNVlQ zw6mYCI+h2T?B>fF>~(Mk!jL-BZG~ABk@lCLT{@^m8^-OtPk~ zzZU0-k&ie&0jU7j1b%~=aiXvzMJMjRtwl=yy09Nf$fyexx#g&}yI|w)%u?AO-W(9> zkaXIoLN*Haah&Mg_r(W7HpfXyw%$HeXUYC(+>KV)YGCz;8AgluFl!^$2f)w;B5{bp zjs&wHG6_C*%qhVpVEw*YVGFRK{NK?O_=^#<5sC&b`(nA7j|R&14hsq*Drk{wO(A1~ zf+QdIk)OV{w5lVvpRhWX@QfO|PT~Jq_Ah#^a>xmvU5^1_je{1S@$6Rjxt zBdAHeFnA`MicCG1QhO!?Qx{;$hIEBl4rabMqG1C8AMxc&N5a(~HxFa5jhU6ZqoXbl z^No^k$RFwQ(}~=G7(VU3KG(($9iFE3TmfNphj%F=y7aU(hz#rU1Do#kFKmrEMMFdm z@hlK9uy+(>1)UoMIc09_O_0yS8I(ePWhjV^917v_5mr(Qz?av1=lm)Nqq`hefak_F ziW4kxECCrbu#CXcY#fRKAc)=%=7z!PiK!_ZX#g)mf0nrTF2;P7L4Dd`=*2g6OYXVzTz*;Yk>`QS~O-tCdu zEu#IUI8bgn9X9VD9pWYO( z;l6QxWUrJU2XF8*ZL1S1r_=a0`P~u`o26*Wh`q|q4#O@CUpgw@{ua6s)nBXJ?APH<0qS|vZ z#ZAr3xoNz32EhX&4o(`N4uq>4l0|Y2Jq9W_lJ8<03P$;d@j09%@q0KJR8y{@w1o>J zZ@4l(bax+QBCh_-Uj3;i|2MqB62Uo3OMeEdy}NhcKuiW>AapHbOVw>hP(?s<1>G<> zR-j^A&eY4x3;RJHX6U}?Y<6=4eI`I@8dG{)r|N3>7^oq^0wW+V9re4mzAK6Wo(>6k241ewpgi-}o6Jw?0j`bWKI24!^ zB5--?IUJWDg&{_fNQxUEZ8a*u!y46_@7|%y9lJN+GN^S*P0h{N{D!Ne$o_nuG)(k( z`zt}-{<{YcSPc{!&3e#Sb6X2#cb;gUMI^@Vf=!J5FMH0|W;AvVPA@`bUgr`)pMq^9 z5m~xVXiYFX>$y&yR#c>`L{T}8_>Dub0bmP`seNcz&cR`)A_S^Hhgn!aw6WZLATv~RUj46S^$UzY!0q(k%2}90ScN2A`4jRenttexWm&fn-Fk6l+^WKQ|i zl`{7H^mTgSnWP(8hF8vhIl~?Kn9uXp?@3)Qmrl0@Fj}fTgtgnr5H}AU)7%jl>>;~0 zwwi7mZuCBy5%0SX z13Y{B`mh8MxynD%)^?2}cKBet!ie?1Zvz%8?lgcX|&Hl{HrUr~*2f^8h&KC(6 z1e9_OyTlw?{sx;r?zUTPEcFX1uP z5O|Ja(x@R~^jembK-j9J z`6W+NOTjQ1@D>#p6-5rTCXcS)4?76#BS5_R48mdmdrp6aFw@MA^7;y+PaG$j0W$w7 zAWX`9IA?q~`oCwOuD9U7)jU8~FJl(~wn8o1XWQ3i zs@GmH@&CFpbu6Ryj{OflS^3~d3kQjB?p4#Oks05++=%ojMdAz(XdHqY26q%JY%D5x zPOI-KJZJW>*WuBIH3KHV zo=J?p@EYJt$85||3JLr;G*Ehanjm0}M^dl7SnOtBL(~kWp2EK(5ehm2K5XC*0m!<) z0{l4x_5>g=k;%VrmHq{&) ztHYLHPJhP}ALOK~8r4QYs9UnKoCs2UA#2RZ1lriJljMgfFkPW5;UN2k zx6G@o%^GE}zMQ42f3M_(f}RhVzMjjxum`Nc&_SpaRXO;8agiY!4S+(X>B^RJ0;UFN z2gD#0ju`Fm_AwyJ;i<{ZBI5uS`8|9Qa2rtp&e6Mlojgvj+zWUBT@{=nEn?HyiUpv!hdN^>` zMs^?nBO3b5+0rIu_9dm;dq#C#%yw$=v;KMW&O_*kLGaYAU+0HDpBO&z>)tJWd4XN; z;|`|Z;mbQT$&ei0Y*{8vfenm)*wdX^Y(Lnu{47%JjHD{0oWtr;Y>c?W6_OPZ4#Ozn z$wjiNKqOLBIdkID+bgmmTc_FhDCi1B519Mw@;;;)I+bfkm$j80F?FHXtJ5$3-kVE> z-HvdBUcm@xD}_?nXQ;IeDF487D$C#+yMwA8MmR(+3={_(F?qek@DuAb{bADm4IFGt zA8)@8m3iXq%gK2t2~i0uIvhUSTtkdY`(HH2M-NQ+GWlj@Q11(b=JW(vlMc1|=kB8~ zux^5ChDbK6D$!>bfe1ayPZ`F`4gQ;?VCjRA+o?#4iLRd6TCFWb`5v_{*@MZmYZw|k zp6uD3m`W^a{+PLeS>$<9N>PO(gQE%JXh_37H%-!o?OrLV{Jm95n^}keIFrS9n7B3a zbomMYkrHR%O(IqG?|!h4RF&8L0*`#BqTleXTAfL>yX*^)*Limz1#rqBD5~=SCqkzv z%EkbtOCq8ivz_XlFKuGrtW2j-wcJG@Ujbb8QR(r%+*jqUzp-OQ=b-bI_R9r0&`icn zHbx62{I&$BAAGa_4?|uz2s;(pY62EHgg=6PPlC(AyeV=_f1`> zVE$02!*P??MmyG!)1H}^WIc5bSGP!~D+|cH^lvZg5xRJI#L4BIhuGRJV`AlI#gMv< zZ}v*keK|1lCWb@u)k(8Kjq}4#ncnUNaRPuG+xzH^C7Bbk;Wi^~klkinev(D|%pojw zH&K@bluh2d%3kr?Zd<5z^2&$i({JMa@-=nGK03b|8gFh zR+q|B-dx^S!Iw3e(33ZP@675^J6uh1W(-n)o}7*f4sENH-+Qaor1I$J(Qea!r_<9j z=EfKjPX2eRPS{0&@+SS)f9W~FvW+99vKA$m6e?<@1e4NK9fWV^ABm@U_k^rOeJ7tw z**CG@P>_>Sk*lYoyYcgpjBcsUe}`^W{I?u)$oETH?7nyQIjMtRdY+{^_Y95H*V+`d z3#!+Z)Yvn}E+JcH!7Dq^K3T@Gq;=xHZtT$fnD>2Yem*SHr zp8NWq-b7iycYTa>PRbvxB(ZCfBDqcBp_?Xa9{~RPV)LfS`qx*AwiS!GHeJ+SymGix zjdklcPpcNM{8&wAx12+YGaLAtq?_lYUMhB-4ZV`QFCvW4!`94n3)E*G=3{lU1&y`g z_uILDbl64$YV9DTtnMRCpUJ9l_2}@mmu}@IMaEbuCaUUoe*9J@s*SMq?^Qcbk?2NL zQe@b?CA^Am`i3V4a-TOgT;n;L{wQibcb-aAuT~(L1zm9Xu%Eu8L2BEGV#e@3=}<-D zaXJ;sdL(S_T(SZS(=GwK~?Cfn^*lSZ4#C6^-vMqOOl3_=Y(6cP5>u-nG-*M+G4c( zLYKV`M-c7yS32nz_`zBx+1U^%$WIcUJb@UY&dkP2PlM^`PI*_>tA#Gh!VKbOAgN_hjT6kc3W(GztZ ze1KRht3$CH#Ot>$D9+8L2_L5xdhlvfeGHC!Lu&9f6cXI}oKhGcX`yKvM^0>Qh`tJ8 zuA79SuQ)sBn`8sxg~;CeAQN8?$?djW0+hDyk@H_J;KUKE>@-jr0A~is%D6!8-Mfb< z70z%RVdBEV*VYp~oRONS&#?R4Wk6rOah^?J<67m@p3cq%6e^04E{esrIxe@)v-Ic^ zxiDjfo6ALN{h|$3<_6FuIRmyAoJB}gj_hSFV-ekU=vqfQ$H^(e{4xCS*g)ar000E$ z|B%$~tNO`SzNw{5fQ^8oCNQ>si*J;!Q z`w84(W}zDn^q@rz=T;PCY{q{> zrMYrtD;KrnG6~V>WRP5MkgD(&;};FzmZ}_F%3thWI~Bb{kRZF0CUWb4@9_EJOIxvX z#-L3b>MvYAiub~hzOtbva6f^AT19~dL=FTF4dYldvKUfYZ}wx_i)By%T%X*vgp!3V z5i`ZiqEjpFx2E#*-YxJOGV}0@bw?n99)6kE;$rfGMsDto{9NHH`$n$z4coZg;!d-= zm3CiQ&sO6VH%;ZP_qP(xJUKH~vM}$q?09FwQj*1o_FS?f2a|lBr*m`BudmLfA=B{l zLvf(&!_EgUlqqS?zN`E*2RnS2kaTBwTwR#OS(o}ig*Kkk=+3Ig;0W+bQ=MzyqNi6} zM+(DA!rF&s`EDg3oVMmRu(o2hu)+Vsn$xmZ!zU3L#%<=+Irp^q&xd4dFQuItdL%!x z);#aSIysDYxo;)6&^e}~ql3p6*_}i7CZ4azzxllOD!slfOC7$Rg#{ewFiOO%i$Y?r zc-nj!hgtr+i0Q)ZXd%tjOwipyq=WqCiMcm6&PoSpI_*WCzyyTuN8g8jd#_-0WD?<24(;;{l;k_ZI?l zz@vZ~Y+t|j*L3X)#_dEpbZfuzz_~goXrH_%rshZ~5^jG^Q47P>j5`+C3_iX+kF`8} z7z$eT-eC-cl?O}FMURn|y$ZXNdHpbE$1rtEKr%?Ob%VI;`|DBo4KkELCazBiiRO0z z&H+3L&Z7Iu+?bdujV3+d`a=CAz(-?XKxIIQ36?EbL*0jg_A4K0gF)FnjM zU`K#st`=e$D75Hw{4N zTHsS!l61<1IoQwdB64APZC;iBb!k$7#Pa6UGrKddzS+JVYPd<%5)6v&IWyV$qSM79 zPSJMJymMQj#rgBOSwh#NO_I}hv+cjPo!92nkcQ-B~2FvEJTc60a; zz7r-Cc=O?@N_0Jv;%uJqu@E4jTaMpvqq(uUmlroSQd?|&LcFl3|Y06aRxh>ni`{0S!SKCgemIkA*l z44K#&tE32AE?600X(QxdseQZ?>j>sbJQ4cm{GKJbkKcrnq?zlAEzF$mskY-xH3*Xht~ym=Axn-5DL)k z_O_R?{PFZOc7$-wpluGooiAU$z$6H)(*fp&+FI3o^DXkd-y}+|ixw7yh_za0$TolA zIi4qY;;3j)|6|LvlY0}Q8bp*bbPsj0h!v>Ij>WQnVqhItxmR|NA&sp0K6-U3du3|= z*-Fv~S1oz}KZn3I?I(hLIp4@f?{$p*6{qprP(jA}3{O^p5mHI9Nb|trSwU7c?(N~~EWyf#QOzSW{$!=d+xRwASa?mB+qFGp&^ z*bOQW6}N<_E)O$cP^7A+rY1rL@c6wJxdeI<)K1UNn%%3g_}tqIITqg!=lUa_(_6g> zSee0g$XTkKAeDGCi%*ofzK!E)02~i{a0of@mo6;B{%$tK*yU_rxO}T`Io>GCb9Qw5 zV?o$R(6NCteT_wTZ|}wsI(8ilE^)(dSHj|q5b4dcXQOq}Z!P}j(r(9^4+TUk4RTd% zGtM)hpTgz$_zJ*LQ&V0Q9v4J0^|_oc$sCLb8gi>Jb=ir%EiB|?BAU6;T?D-eN_-=w z3F;IKP$)7+`Y`_`oLG+sliNm-LKllgJ`e-@lr{)x=-fmI8(w=f&)_7mIDL`&F$7@O zLY)Oiao#~DGhF?veIZ^t==q_s@QJ_e#ZDaB8N$KVq7Y-E8#k&pVl^YtUlrSB&sa`MnXBfp7C#;?yK9_I3Q#DX7xpN&}2+Es3l%D+>XrTp=@VWj?N5@2c z0eBT3eDeO{^=kuxdq|4E=!C$)GE3*_x=pMaP{V4D$^#jKUH@FDS>jYKfBoZn5m4~bV>gn z6J^HRk7PT5dlz$Y+U7Z%-DmlkZQL(Aa^Yfj!o|d5-NQ3QLl4Gh#@vzzW2z3;INg08 z_vcevnD5h17df;|@}uW>pLV+WOXuU0i&K&p8>LQ28jJ3|!ZHEHr^KW);~4p3Oe)Q& zYQE?u=MU|AKIXewbLqJ6rebR8d$9%X1WESLQ%Q85#)D4@OfhK#?m~~R${d{YxBqOujaE;`L&{J%MrFKx~^o%p@wzqhotB0|JR;r?R&)zXL#-YD&`I`AYi;a{NiS1Ew(GNO#@aJ(a zslSoKcdyv9G^_Ngf75vHsy`i?Hm{q;czd*KIrgX%e}0huwDq{$>+|lz3b(?KWre?X zlrTo8y4!-c2%e#sFSI>b+^~8xD|E95v5z2*G*s6H`4is;#O}UuNRVcjeVbdeplQ-@ z=*EE~$4h_pySSX2Z<221w@URn#WJ^r{{Q`dLjA|xRc~lO#5?4jU(wGtJ!*Qk^n_=h zRqLOFsvqSmX_p4Wx1KNRd#w2H{1G1qS(?6=PfL;qbQpbF>HKclXSQ&iSSh?9H^Qmr zw)ey7J;wP9*YdMwtUJA4@rT}?EaF@48c$LEaa_{(R?J!trA=&Vg}r!*NuBY+yW2(1 zkB%3(7XP|c7r8spE@6@$w4<%{G4uSV^V`}L!sa=d z>N~$)V*fd37zLvNv<)8Sy}g09G66aP7029!)u!Y>-HqAd9D3bVG&acM6k9KUE!p^R zY?wq~y*VLA^yRi=-p8|L`${8Zea>_nzYAhKX2-76!#`5X(Cj9*%_m62Y4k&dbM~VU z&ihJ)`#44fC@E%kB=28-(EOlfxLD4$@6Tu$Uo%Ok?cuN*v;kdyJHhWKznrr7`1Qz* z<89-YMPVw7`xu&fs*K0vE?o0>miqR6k(^DZN%Yy<|m1U`|8)jFWp4twiXS zPdYLjrpCsz%PWX2MmORCjaCqVZNE}L%b^~{7d9plx=~c_3S25-g802mZt2Gk98zAr zvZRm=qtH+6D#5Oqimjg@6=$$LzZ-Qh6iG?&GI7RD(xrY-)P9lwX#Av8;ycIZK!Js> zb=}o9zGm0z9@cxp8WG{T&n_iik}P<7DPOiWo>tE>(wO-1I`s75fJo=Z3dbHMQkYAZJ+)A{rks{%+_m|tKbd% zB&FRBV^WTzqFhWR>mvL_A-}_K>|Lz>VVm-j3 z0-KF-v5O5}8+9(<0)B{)pdbh`vz4p*_o)W#b>af~BKEdKIw~`_7LGkp?M!`v2p$vx z;-YTM6NvoT>(+-|D)}Nl4M+}I2DfI0n{SrL!A(Y?ASB8mC9pefXdP}d*@DN+tAGC@v) z)m}6POD0DcHF3GT4DAD>UPvkQ^z@*{z?Eifj1UK=><2n6i0e103=%#L;yfCN3LY!pCjYlB3^xglufH&& zLZ~c(n&|9211%obI&8ZUx$i^IDBe6R-q^S}SO%b?()#p6siN|XacA`Q1~9dqh!zU2 z`3~9E1=hNP0$GnmrrVKp3tCld;BTMqEAU+bG$bCcLn zI{Bug-?TsX9p6j7ClMGHVHF<){;y8W5Gx(uQDTyGAFq9cAb$@1X zO$3@ZU3L~_0}5A&Qxn@#|6UxO*Bx`1-xrLzTS_WDImh{QtW1R znc{X4>8xYY_(6&YFYEiNZoeO(xmlX&GQ)@M4i@PY(xFk|-icxXL&WHyc z6*oQYj$>9;J@~DdaRbsTdF8@9mm#i9i`+#R2QjQETb;|U5c4hF(eCw$ zrDtimZ_OmV9m=LMcQ`VQZEf2bgK$Z$SKfL3Tf8O~dx^{oONdbc5F6p@3gjie1P==e znM2-_Jy;nJbI?7!)&PS(pdrG}DDScOAUOm6i^id^_HJ?sc)X%o5bB3XHr4Suc#TsY z8(*wM&-KCKH^{_}09Uu6;9n290HrqE3fWW*QIQF+Q(*|H#qv30LqouVSwjvW;h7I0 zJx1T~GXZu)?+5V>Zxs|qz}R4$g?t{VDSP8jwQT_;4}|VT!5t@B>T<@z%!u)K;}GZ~ zf{!3$z*m8x`WZ$_M@Wr@AS+Bfbc!e#34{iE8yP!y8Be=(FS|{f*icosXL4)F?|)-o zH(tC)N#1QF^x*u?&%*77ucK7R&6`HDwv2mwDjaGP2zZ|`yH*`{y>;WrOT(A^0q>8P zJCe`VYbK<%M$b^c&?)m&hE~+Wth)x8UyC1hHFP)`1Qe)twq#zDy)_490Pa&Tp^->l zCz`-xa&r=4WGJ#|U&u9dmobsyaImq-?Y6_%p2-P6I+iQ^Cou_$_R&p>YPbefQ^p`| zAqCtOj<`*OrR~+LXZTraEcCKFXO{lqDu1*yv*SxgM{4JI(iORdn2QO_AEARFsi?|C zC*h=c8enV44_SrZe20$C_LB!O!U2+JR{sc>IfdTr9*&KqAb@s^vVfZfu0-7{%V2|U zbqL>{;YdWcR3AA?KxV;*Z;(k9_{#f1!N-%*#RzS3q+eh;mt7x^GRQ==yddj{lO%FK zICM&Hy7({JYbiQxpFF+iSNM6nQ@rN$6Xq5c)`rE)xQI$Z(QDlaE8SH1RQdNc)FuM0 zwKA9Ob-%25&r*;OdGLSE7S*P~Y0R7O_{Oj&h-%J(JO(5su4O!?ka*)^)??YYI68HE z3Me7T=teyj(9bIJ>|lNdvfuF&PS*sa^gcE<0c1_bCYjJ0bX;ClO^rqniF2D6G)X{J zx5MZM@hNHcP&|H-g>0~dKe2BLqhZa|KXoXO0LyZCm{&y)PX<)#j_wCI+Kf{E@gEi? z+_Q#)P#5s7VrfI)%Z@Z-d^hY^^#!6X(QJfUk+Ag$;?LA>0y>5Ac-_zhA?moMT_3I;F}VzWoYj{y1=KvHaY&p%~QIP8(WNr zH8*qhkLZzVDxPw!e5kv%Pc206Zc<*yi+e||gcsWJy*?~*qBPzibTO-a&dY1EuXFUv z?S^{ci$K zgP-39vlW<1aRd*k`3O2pfssZ8(!X$$LMbI*l(0+z2h$=KYZeC2W=(i6AuGb@7gh)9 zHRO0Z+v`EV_yf&RZ3(0WR!=BRo#Q3f1~JIN1%RCsv?Wxhp_KxAjJ6atI>i?+Ud+zV z!}@@P1Y+P4y%i%fy>G7VXW0T*G(>1T86m7fw8V4mzUom~**J9`CUDTTgrZwpTELkq z>;c^d0ocB&paYzwr6Up9A-pmi*+yA-U?u5-j0J3@dIX7%7HI?%Lql*WK+?3dTUQsVo7wW^bT#I#h9IT-IZY_MQuVWQhqyy&rt9mqOA31Bls>Y$Nj89>N<+yd+0 z27jve^lK+Rx38^`2D1!8R8xYLVPM55a>L?QEh$`>m=I7>p^kL-^|?u~L-#A+i0#Y$ z`)4xGWOqtqur#iRn@Ecn&v4WWDl)+}1KAxrL}0f3DiD}m&)EvsVy*(kl}y5O9eQcG z@rK#ijMefmQWfSmsL3d|H&r;6VlD8nDM!Rrymaec@sKX5(_ZO=aZk!gjd@BhDf+~c z_UV@E<8w>>99VD?;}jT)@@IX+%RhHKj}9PB?B{&s;H&xA3_N8fWtB@#rX zm+sV9#H8Wv#-1#8yV8Io64aGnl#sAg3gyv&k^5mo%WZ=9n3hx=z3+aOYfzNOT-X`; z!qv;0dhNup9Yih0;526(kt@&~)3e4rz>zcVnptfU=ZfGNV4=h1(LTn17jvqd)Op_` z>!v*DS4uZ{laEwGdux4;dL((%63_NtdWo26{?jkhl2B)KiYuY%cgF z-i<@(D3*9d$6JIRGl1JI;gfsRe3@n%@s<;*%pkadMVuP2@hL0?!OG1J0LeepkO-lD z3DI(qlM`7{EbLev_*woBP2U|)b>IJgjC2x`#32c(BpD?ndxfkdA(t6R5<;@K$|_|< zRzi{_3E6~7k|fzAD`aQ$dmi`q_s{*fuj?w#`F!5v^?JUZqx#2@8sU^mGof0NxVW~> zJZ|#)sz}6+yIz%OR)xYpMK*=^9$`@*4=%Rh)dno)A-{)~ill2m%N2->S;WLP3}O;@ z4Bu9M0$=DwCW5fAwLV^YwX1G;7RefV{Fny#O3KyK6H)@dmRH_$NEM}Lf-oK@7+Ku@ zZ)@Srw~Ysnzt~Tfw|`2ERT*!;0!0ZRT=l~Pik)LmHfTOUH7Qyk(TDqV!Cd+ z+#CsmlTq77o*Kz0i$s)7Jh~gGrE}8x(v^sEqwn<@^od`k5@em1S0asOwXRHNUhaR? z7IJs&**Zt3s!&D-f;ep7u=`d~j3j%xm##E_jyYmg*x&`JJ!fPg`qFE8I9DK7a0_$X z&qc_C%?RL8bmaMwp3KTgyJ>FD^;>55|J*ZmL6JH_#zkGaKbM9>IzQC&mgTydy64?xKF8Pn2ey)#raj5%FQo7mc zeNxX0FJI`$KT@gIy_{z%wYIBqBPoxk{HUgc^tHaltv%o9&(-JoC)1pSJ6BZ)1A}3J zW{Khs{|O}ozUB1nHwn^T?O~ggD$(J+(%Wvq zINUB=l)Lf=|9KNuJ3Yu#+1Ix%o=1DR)11^*cup_(_y7L3NrX->f$r~BX^;CyRS&V5 zM4o6%dYF~Q=9xjUuqS3RE_+>kf2Q4*8s!1)qC0z?zvre_eRRtxas=DVeZG}gwG((hthR~NZ`5?J>!>y$3 z4;-SOIy9<6_2%YC(gSbVPcx_7z2+(!jc(2*DXtXOd;hW;`F$pOh_Y1Yo6SK~{gOE^ zGt;(m>!m+8W{3?qDXMs5n_#HH$l93mUhek?iomhBadmbky}_6hcDyyVc^_OPH5i|n zoc5HdCbin$Zm`Y6wzJPpM)6`W+B6I&JP1D?e1z63B~yxy%=^NAy`%ICEbnko z@>F?Wg=$6p&P?`37#D^D@I=Aj6jQHO+aS3Fpg{;hB~pXhrpk+o!nFh@)1kG$Zj7#J zAAYBJpttA{iB86QmBe$BA>5?#_v;7G;afS&zY!|X=)D&L8=m_p3*b}=BXn}&n!wn! zTi={3ar@#*#l{K-$|?L5r!YbRZ4EO4;(mn16?9I})uxjSV!RNcLdQ$AOe5{t~;qI|z zR8%$r9n`9lfAYsE7fEliBdY1ttn68mh@MnZ7b^mu^2q7IwS`TI;FQjYn} zq+|u6I2_?0WPz`o)kgqJ*bW5f#QJ`p6qnBa+aFESFn|mr5qb50-&()%W|$ z5e6;}2AKJxN&vhpzygIRuADj&(Gl@xmgAsB3bvsf3$TQBGyYr3a-TFnQWSzo5VFBc z+R6|%LDO#4{SKn+_&SRUlBN~BeviL2HgX51^f!x^fdyyo>{BQCP&c85_Hpb_%t*%xdZXf#)7DzQ4#eiLj{Qi zhHy6oGeP5s`oh+h_N!e=D{HPaN71(<9z-<6+6WZ7y+)t)#56 ztD>o6Vtid@rO>D0OH+Qu;+B;jkMWsfW6sB#`A+jm<7LoE9K)+yu)=k%)W%=pix2CmV3jsKo8ALky@w-+_kL@ZD8#Fwct=K|lhkR3djk z6_Uz9--qp!ZyoEtI`)A%yeR=0{Jrjyn<91pbD-BwlJbk{f)l%`DI(FKDD@RVI4ObU z7a2z1C;UtzK7(Qao}#EJU`hcoNd3UA#i@S0|E?}$DNfl1{-U^Vakf7v{#_y~h%1L@ z6;pKp{|7F@C)ioi%fUg85!Prp>`=1P)gYdMGZJJ>q%T1eCai$S&N}ogpoOiid4Z*a zcmu{j;yvw{1!K?yKk{7dk2mIZU8L z8sU}9M}N(0U~3Ru#k14MsM=WY??kQbi63K*#bHNTe$Sfw%ZcrI?iC;`5m5EDrDe9` zYHpU^a{$L_kftpx;Mm7D2UDe@*9W*RtTQ+xp&^7C2wf+J{AbQIzylA2nO57q`}Q>r z&&tjHo^~5_YBv*xTnuD7XqwP8ddftK93*1LgR=q08;IL=_(UZnP%gpJ1SFb*t8MUh zcCg2<2r(5^clEs2Co zBC+f|~KkvrT3Xra;i+0z3nSFN_ge2-&xQeH4h$ ztX%~C6~}9CtL>&;^FHJ=0P`^rFe!El;#DI&12U5@u!l&^sDRIp)`a0((XH7GC7vrb zd;89NPX+9&T)uel0e2wboy*{--7!{v)Q8Y`)NZ4ch#70kMY?U}OiG6D)OIVqE5xT5 zVRa+;HaB+?$JvPg{CZc)3Y|rEm;%F;l# zZtp-{V4B+oAR38%=*cA$E34NQ2O_JCqO>xzTlw$hr<_2VS&Jy}0gF76T9iOT9WYKQ zfT4f{dmu;zy{5-wk~=UXBLnoy8e#Oy_=6eOh2oq>Zlljec0^4-2rLkUKH(b?K-2{M z@jUI_+6BENG2C#XdpI75(xk^OIM@y#VTTuZv4CUbVir3;Ona5z~1AYeTB z2xQ%RKHJnh45B(Phvw$qw2gsdC91jci?zaxM5EP=?hc;@XBlk}GJJt|HRzaW!kLaC zq@}HG>kIKpoq!*C0yz8;bby_)Zy(}65Z`>bMi?_6(g0w|SH=Zz-$JTf(hX$=&1q&G zvKI}`LU~3!9pB1#uUu%ib>eHmoMC0nfwx_GSB#b6dncmS+o*76o_!Nua~TtwcTx zr6{B>MnyZmoMrx5W=^7Ux{NwQ?4l?;6#f(mxa7ErPw>}tv!>jnu&@zL7NgMOTwsJp zP6)s#7{s=Fz>jx~Pr^n{fCWRF(fMUPe)9e_yZ-o$APQ?aF2dhA@PGm6AA3{^%6zj8 zIL>54u6xw-U?*(`l@=M>pFWM#02+Nr_tCfOfFy^0)5GHw=O0V3u(CB2ozuWr(rb zChZ?yX+lnk7GdyXjq3m+==yza^df7V$YQ{H|I7Zi4wI`F3Ky=f&>yRbyJe>;{{8Yu z!Yd8ut0f*TWh{@B59^s+DYl4-qe}G!31@n#S+4S!r20?0qC(b-Ig5YJztFezue|WG z@1N`E{(H<@hBY2H9Gto$`tzE+AvuD zl-gEq_Od)ieS#c+eO*RDHM0ft)5qzINsrcK6;6ICJQ1rAG$8rkFe3-$PG&{Nlg96Px z_6>$E83?!nQ!ulD&?87Cz<{Mi^q14l8m<^+4h&i8)Zj-DT02wlh1y$--9|CK>C#qK zVtj@&PxIM@*);nB`YItpz$s_GRYRxsu5TPq1L8YWW^eU|A3OOyKi^cEy0rbw!qc{- z*h-8Na*r_IRVm}(R|#{>Gf*N{Wra76w+`ufjh%NeAJq9Mdg0~`KT+oafhyC}KBr9& zF}^U|p}lS0*1n>?eCwJ#{VXf@!m zt41`IY-28sx~}@=*wN*HILR`=6MOH~Wz}B3A4?suatvCgosu#KOxXxHMaQWsq9&i0 zvKO0vJhEi{`|61|L#e+6jx6RzGf}1;uj(t$YfRpLYR8s=!w;!AJ~%LYQdjI#UmY#E z5#IJB^PjVG4_{E-A@+lPX&0GCvR7XWeO{k-*qd~bVdBN(HzJ{0I>Bjm3w1sT;=3bS z^MX0W7`ELS`ZAU0L153>!;N19W)7(ASGBb|sAZl%9LW|gQcOPOwROhoySt+1j?t?F7el;Z z;|Qny=46X7^XnWIRixllzUO{z_TD=@INZiK&h-*dSIESTQ)e}#CsPcF$W z_64AIz?D{Jo2mnOJUY_8ZGW95F~h17Drq*YF#80uL&!dF%m=s`=fE$=HGxR=vlg4O zD;Z2+n}%x)|6!mAss?n>ETQszUyEb^+*D+bcuP1z5%#Tjt-BZ2jfq;onR|RTyzV|h zmkF}@pJYsA({+IxL6DuUD?)c;W8Dkx3&XR;#(!b2Jmgw}VH%jt;Lu?HD>z=kq@Rs} z^2T7rYAn)xpcO^{m4gHvzo4q@oWQsTWY^|+t>;@vM_0W!U=Ys748Iow_xju2zmvDP zpTGNLRmNw*rm*mD&dl@w>I79j^R_=V%F#;IOEf*r^Kie@wPmq%1vX1d$+VY``L_pB z`g7q?ARLg1@4iBozU9>vPSrH$gsh`Mx@ux-v}zAJm>B|LdA0IT@rJwm)b{E=qz;2r z2GOAehl!C9igeWLsKuaDKzH2L#LX3C)xOEP(Uh~QauFsO8yQ&`iXmOQAdif25$+XZ z!Uf}(?AEU>-H~|Y=vXinf1e5}BWO^pthhY!=%GeH7K6Q$^C?p-7L;>vbg?mnzy(&Q zc-7t&2r(i1vVwsHs0VRu&hOmIB9i|0Fj6-YiN72qKxlEGZv{aZ&d0zv5W5DN1PEpL zu1Qk2z_@C@McwjR0B`eoD?gVnV6ac0?l#-lJv>?WbI|E5vz0K(cdM@mthvy*fQ*uy zoVMN|`x7bfMNY$jLp+bcJ6b+h1j0sVvQX3Q|sd!P}H;;mZ* zPXb5)h-HILjZIB>GMMkc;yy1={;Zz1_6|LaTiviDFJ9bFHr9k@QSQYH_?5JRbprhr z{wf{>h!~^J29hN}41~F&3WqAVqhlEfPvmOw zJOm}E`zVLr>hNJq3HcT#mx$zQZl>79po*+r7(-&LgkJ;{g2KNa&lhYTf|c95U#OJ% zqkZi~k-ty;t3ho*keX_I3E_zpupkjn7n;oE`v^^<2%B8)79(*#jUu`x}A z0t|B9e&fAiTlVy*5HUCfkBH!iJOE5(5#pDnXBKE?=<4LeekPTeFw12VK_A~jjfM4Em@roXD)QkIzwm}|Asij z)y5(ZDRa_*MubT?g@B#FWKD@@q?ItG$1b)N1Jp)qh=b5#z5lDQTb%KeKm!gf0CBom zPyhkoQ%OUzJmV)Q;rHMFFf)TW8RVg#t@9E80j8v2Y)zm_jy|Hqkc9=T$8qRu;W4^% z*{xv6sHgi&^g}UNIb#p+76fU6F3+@$%lSTU`?qh^!?R=)F|zp`Oj;o&re&madY9K(&H`=$d|Brfq<3n{8k-1oW4YpxKgn zynO21898*v3aRMv@Pk+#4iTc1j=#};W_PZj%-%!Vm~K~`0j*F$c8AbK!LbAGWqKQ| zWj=WcUH?VC-0^3t3)5cZbNBAEp9eW%oY&R!q-o~6b4PVsZtD|wi=|%^D!7o!FP5I8 zLWYQ<)myu}r6ncd0g0iV9?Y^kJ5hw<@WBvUiW7j~*vJTM`VbI=Z?|cd%@$qqb)rTd8lE&*4BGLc6a~Zo(v5b^bAm~WHxqNx6Bm>`#5msN_ zt=f+ohsXnaHz@;O0L;u!POacw3Z$R<20Bt*8~CDceOV3Z;Hyk~e8qiGOD z13@nU{t47fpaESDbjGHpFhVwh6;jA?Y4)aSy6&-gvD<#arghqdYUZVYL6+dQ2E&@o z(9|;52_t+XutOC-*cW1v5-R?|6a?)iY9Bmq6fHK&o-!NwcObQN;cxf$9wPn%7sgSP zeM?_!q|fRAnDeT5z8E&V~4{Wv>9~)C-oi!F_ z;SRG2eyMx@ZYta{86S&Tbsmb)o+*$D{por1dQ`kKQ@5SN+tV%Qp0N@&D$UJB6}JR50+5+#p7yGFrVjOpbCt#BKs44 zM3#D3t%dNIctWFn;i-g1P(DUPQ4ay&>+0h8xobCVZBI`U?(49QlMGbh(!QpvzgSU0 zj5=doS|57^24Ps8&vK^E^R_Wicr#m?MWv4)-+x~f+(qc7IaVoS+QD=4=jyXzNGSnN z1u|mtkHAUV?*OI(JeZL}@mk=;rRLCUR~0{HxBh_#1iEyUG@z5XVE{h@$f_*X8KSGf zkOMa#A2SZ|bX^o+h)iiS&o~&Z4kaxq!cTO@f7^;Z(Z1u~R!TD<1R4jCRGPv^ma}Ax zqUz8%h;#b}m?sGR%`-qQFe!Km_}2j@q>2Eshw%K72BH-3A!!1tfM7Q_`-xyG1pfv+ zS&$ruWj8>_x=Hrvz!3zNj}6$FCZ>GMn@9>f43H$?DGL8g6aW*hz$73;>hlBn(#F}$ z8pdR8xu%y5S!Cd<4hlV}agYF9x#C!C49m_<_k4hofZ6G2P++0722v05J1XIW57KqF zJyWXOw?zT~%+H>lVC7-dmNxM)6M(7om&a-c9{_HE0C3O=CNq$eE|29Nr^|o)7H7*3 z0BRLb03y>5BS8U{B~NeQ%7=~GrlJtiTLy`zfE8AVVEhw{u*316GG4z4G@(73eq?m) z#~5jV->}TSZ2kShQfVI;^6vG2=NnqpCNGsdPrNX=EszpU7++$q{_3!7vrMS| zkv3`={-XSf2M$Wve^UBHX2sxCqp}#a%Vs0eXI@U<$oK7&eDKlNFvD07kT$H{#S*Yo zWRmx>vB?uDh8|cM;^H~&g<-A^-}f*!Gs7R7o`Z4h58zVbv?uAB*=y>l%Mu(a#Hw4Y zz$I-&aRDYb0onaDc+BCGZ?!9gWuh}cku14i#3REMOXrS~ePKezl^81=y_oJm1a(JA z?zbFKp300=XD3!;f#KeRkJS0d++!zmYTy%y>tf0@p^+wN%D>oG9I%sv1SH;1bq{lN zP+gMDZ387{(bK!kB;*Or%I-S!=Ms;oEg>6wp?{T^2_rmed4lnH82i8Om?0-nn;d>B z78r#q@leY{!$x356jMwLi@`8bQ)n(Glihr>TSg&1REvVwipCKRhOI1&n=C3MG2rg+ z*@~6|gXe<-K)GFK{5WBtc=6c80Y=?4y1$lSy_2mu649t&FtEiwt~u$oiDbfB_KIri?gm5 zjAK2dl3)r@wH87{=j?xaiY;_9?7GCwh1|49(%qXPvDfQ+*T$OL%8T~c%${m`!qW6m z@$YY+-~N$P_sd_p%N{@0H@6bGHfI>+{7+k|cRqDt-&l>;__fScZz#vUs|v-(ScD~N zUCuK=S4=Hm$wqKs7H)p^Za}E2`L;4B!1~$Y5fMz(*i4PWVQ^yBo|X?!`@K^^R1>8c zY|0#pB-3=5Z)H&Q84O&%;YlkaXfvXNa5h`v)22aM6SmVA0_fO#ZC%g$WOd3keo+pW zd!@o2u~t^h@pW6?(ah3+p63`Q?Tq(9@S?u{)l}$%=btBP#|Lxryp^@H*L8k#Niv1E z8p}5>JXWq}@Oo!h@YRt}q8etk| zP8(K>^eh=Y?Q`k8>tCmx{BsY(vt=I<#rK<)BR7Mzhf6akw{+zGmpZ5U90hC+n@3 zo|fg-neM4GeY>q<{^-z7uaM{C3HOH@bB1V@580XS^?GWU8}BkYHtKZb znA&rXk>$?TkGV%!J?A7PB>2v&bNEy7iPMNs^RRao3s`K^Fbh0PHlIdA^J>ePvk%Am zd|$K*%X5Y8d_hB`%oFgZGM{trlk-gUmz>tlY?j-zCm=-fb=u0^`>IL@A5@(@H&Ue8 zmnPX(I_UE3hLrn8-gU)cX}@c~_Zm;L=e)`5^Y86PV+IqA+gpPlB1tJwr$!{goFp+q zT30`-CzcRY<`L#NuuCW@NTpviQn21tqfz{FzF`zEhGePXpRO0u3TB8t&sw585o6Ud zDk{gosKBf&Ptu$nno8xdmFm$UES4?3n@)oCL?Ha8STA69cwlfeg@|aS>-ODp;@ckb zz36_Jir#Fhz^c67*cOdTX^-se>^~^I_WMVH{I%EB+!B-#DOzpC)U5k8@0n-uiAz~@MO-g^*r=c3dB^~-P21%%it%a3|oCOzvxn$>JNUr znMfiA$GiWz{0Xm&kJaY#u_%1QFHS4?iqA~ z6^28hPgNKP|AVx?Qp-DMp>anK41sodg_x8`c@BA2ZSxI;3p5L+CMH7;5;OtkE-v$! zb^B5E0*?YA{Bh}L}Ji1Z@N+NksP%IWdL}-?BQYx7X{4* z#b}@m+fvwhG+Lda+A%fiuE;^PV=Q+bEo+>+pCuaoSJ?T|qj4?!(_AcW>Pa@zMpe<> zt1r)AJ+B@;JAEt1B(x!}VVH>;VsU)YTGtXcA5*(ycVc7S+ZX;cV?4!Sk$WLZE8ED( z^G;wpG+1@hS$<|s5!9}di9l|^+0@Mz=L4knhF0;g%GZi zUs^go?Z)-X(b6&v(!E5jQydIa;s0H{h_;X+WB^>mfoT*$4sxje2;FdNfu;+nkT6{& zr?fxUXC(7n<`JK9Esx&X*Mw3U8oQ?$6oa)))&POrd`l{+%8bOxxel5Y{9^R@&-2_D zCegu^rI;$GZ45|;&TBM8SVMV*`=iz25d&lgT?Sd`@-%Yl5B}VdZUOSK{Bc+o3L_Oab7C zWS-Sk&n!J2wV8>+-u1Z_ZD3HSk6}g(e6p*hg^DW!zYP^R#7jLrGSbojCNQHzMKU}z zgz^gj$`tHwzV|!8cM-&K?2*^6pMY!3t|=IcCTvr=lAD{GFK|jsj0{YovP@_Mw1}8k zU^X5eD?fg)h}Pg2n9Yza5t#1auENxaB@~?vX7gKVXyTi{vY!5#nQ72lax)igQ+_@< zmKfuIRtNFWj8RXq$fqMU6FYL_bJr~fSl#p1BW4*a?w_|#oYP=`AH3tHY}oJpmUVeP z3oAYg1LgbDn3!&Fk@A0FMe6=5m|q&Uvdq}x0L_Ds0NzCE02a$d#U~^v5^*p@ z@p{SZ1KGZ#18x(owl21|$S_i@l$2*g^fRgz<1O5CeN|MPk!@&FRC)jQR>(?8m6n$y zlomhE8OCvt+JW$QBlq~odrX`^UUHI5#COIKdv);H7vJS$Z8kJqSKT#vXypiUv-M zM4Os^gsI~WIo1xC1&?}@a|93--w;N|Bu>UPxB}qQ0A)foNgMP^9Viw^JC>GI+)wqh z<;Uc5$6Y<(<)M&TNkZln^1(F@!m}M--PZYNkc2zG+KAp)g_08puMTr-Z!au`xnkT9 z;b&VQrZr#WOSwC>*#-^grn?fWa2CljaA%G1F~83O;yXsRs$bg1Ey@~y{G ynVRA z{#_ruzb))C{UJV)Ty9>*z3YQba2;`fSiA1F9XkeWm}T93!&L-g2h123=FGBpPmK3z z&=?9lGm*`um~8*6#B}E=z8F*+myVGU*?#1Rf!T#8Mmdk>fU5HwG%Oki2?uL9AjYaT z7e^NW|$+uZ$KJfcdr8UGAVIA`rso< zcvxSUNN#n-!iD1}v^$aY=lG++v1cTL3?=ssgawG0^V?BdY(|#hy&L6x6Qw7C(Da!P zKrDO!kEN@m;hn0a?Q|wQ-}B$AlWh$wq;cRPm6t)y;kl0lvC62KA@IHyf+Y zv7Rvq6nWV)?|C#idx(q4?X$!`7^3+ZqrS;+ec^iqY_5sS1sA6O%44oq_A$!$DNwAH z_=FT0&-GC};rreiw7%MOmdCHhi?wV`?7808rSo6&HRUQ7p+K#)=mes%XAdk%CR|~4 zS9zb=><`qiAvd@Y9fYKWR2{+yA^|YQ*UfsP$B(|pPY$7he0TA0@a;@;0ePnCjJTG7 z4TCj?#Fk2dfGRG{7C_u^cpRU?Ne`p0wKhQdV78E6|$a)uC~7BG^h zpm~Cc6z=b~v8J6?@B+k|l1zkB9x;uy)RZuz0eA;Nmm9Pi&K4FHfc(k4J!NR$#l>%~ zExVW*;?^O3r}zSnicLJ`0C0+ge>?clE-oNaP#O~TU3{b}CBBMo+Cw3}G^7S%J{sNz zSn~<6fg}jNjaUK(0zf6qRGlR_s?1*H=0-LR1G|9AKffJ4Wc>i{9U?cXhoYjmreTq~ zS0948i__99t*z1bQ-yR5I&lXED)hrq>ic&+7*+BzAt_yD7M)yU^sLVExxxZ z{}>znEKUrd(!vhja)^RRqWN(V(xp0*hGb<7E-Hmb;9x2!Ggg#YkZsbTZ_RMv)69)cR2ecRvFGv>~`TI8}`kUPn=4U`y} zE1L+0-&T08rt#78$7YNg3xE)B`=K|t?D2CM4T3+`UI<+I3N%B$Ag3E*dvRi#C?J>W*KcMr;ToIL5 z0vA!jv44&_`Qe(Z*2$-x^?wv^1lS3dJ@7t#XsorZOy!Wcr1K?BpO{Ol^4}M?XxLh6 zTOdvzW91WnguD*K``U+Z_3JI8F>3ZBG`~ zsy?bM*{-jhoLPSzI;JBra-(-v{R@;wsC5ajKtX?%tq%bE+fnQL;h6&d<%b>> z#|Za$Z%KxX{GasY64sBmGXYlb62E&SYpFK)x_ zgALbi5Bz?$Z6v`^!Q|59{h@s0_{irHb1S1IU76!+oXhV|vK+R<{GD@0*~U-a6Ll-0 zL#j6^(w8`xoG%@EA>wt)HMhXfN9O_e%XU_Vz0GAq+Myt#v!leG5z;j#z94p!x32E9u7XO^3D%uIQH!l=w z2r3ehco9+~-^?t}NIK!y*7w0JUO)RgpoYucLiTn-gn6~;mLr_YgI}{v99moX zbRBx_|L$ei%yztpAuerDW0q}c=F-oC8$vy@HdkK$8tP3r-9GgEy7wzbF9GDYibzEM zF}bnd)_!M`=e1eskjD?>CuP-Ir_cTCYVM5`3ppp_HS%_-Y46JDWwDU7-Hw7sN4hYj zhs-0t*-k9Z@V)*A+Q^y#Mvl9wMbxZ$x0MCzinLk{-_H}>LeG5PfBfKGyJ8po@a-_8-P0#@#(A`<2+pm8zXK|dCs0m#7j1DLpIHYUl2 z2RAQX>_qJ~P#+2QH!$Q8PI*RLIm5Ha{i+y4z{Bhk^i3`ux!Pqn8n)w^7OiVY%d|)hni8KVZ1J>te74Of9u?Gk+=mA_$Da|4s zm7FF;pcUBcBRM1MZA9VumDz&X)OXu?NPOUkB*6jKz(g(dDgG=tasl6}@;=ee#w7g5 zkC>)mkjx!Aav%kAdxI7m%we>QjKnT`@xXYoxQu#rOF9htQ5mv?Vuq*kxN*zQIc6Hx z$l8k@7o|^XM|>K!T4p+T_ridujI7a}m{F&ooJ${Hs6Y8NyEtuY%(e5YRXk9NxDS_( zqhPqN%WD#v&HG&LFk|-nH^;7(vPZ_GZFy(*BR(zl*+)Bn$2oz~TbwL9mWgmy+$4k8 zZ%*f-?S^^jD|^=x!1>TH)t$A_%ESj(__~UjGko)S?t?U4MS_j&Ch=y|Cdw!WNo)8% zCEZ#r&X&Skm3h@*7XVr?1nZkJE{uB!5hL^N(`OQ%!Po3|^6Khr6J}4CtGp{I0qtqk zTUPljhLy1XM#;puelABpA-Q$bx$>^xn4%A?{a^jUqIORz1%WL+#F{K+#caO5cz7_kN4T3tl453d?>q*0w3Bta1Gb8T7slLyhn$VeW1la6C}s=tksq@fQ1C0F|W;5dZ<|iL$c9 zhC#5su}`p!-oC~C3gS14nD@d^gg6y{er=bfXF&qdp%Za&Y0YquhAbL^?Qs5h^ym>7 zJ`fhcu6|^%FP((6G*FdB>*Ja&4h~Cz5;sFh0Xd-H)#h2{LbQVlKKXOvf8VT>#-x8yX;Qi>a@E2?m09m{+Bhf+G9L@U?T!rJu5gywx2&ew;pFg4U1JH2m)=3f_ z99y8;92`Voby;EI>9cz9bhw5J2X4&l;etX!I0^6{pMf3T4mwnBTetlJ8g~Q{Vj<2f ztzrfU8nnlPy#Nce5Fs}GvpFs#VL;1MQ^IOd2One^3!YIcyO z!8f=SV|py3OS?MgsMi3XA_g8+_UqSBA^4d%{HR1@y8zyHaD}tc#}d5 zwwH(?OK3#0Ff%k0^w6DcW^%#Pp5b1%Q?V41p3LiD9PoopCRqr`NXr!{h1%NcUki}= zIzgKrT%cYcr}@N*Ep~i~TH+^sSV{v41c$q7O7eOqprL>OODmJ=voTPU-dXR`1PBt6>Pb- zG46Nk4~Kk{pM1f|zbS|a-}1L1Zo5pOSs0Ag6ptu>!qorN-bsll2FhL8_gh`huZ+EI zbFoM?wDv9>=q?!PFmcLN?y-2tt`_{BShFOop6YbqH3t3C@tg&!M_E5yiFx}e=Wkeo z`6GR+tI^NP-6Z9c%H~0mK?@2#ct)$OsmBD_W(IH~ODIzB>+0)~Lk&wtiZejWV4I7( z66Z^;1sh%q2M6ZOYA00c8r{acKSpj0AD6SIDJN6Cq7^GBzSN)b;0?}9xXO)l0T zn2hj*8T=Ft)e?9dBk`sx(TcHKE0dA#9gDK*A+?S@F%=9zvJ9zuP=bS@vKx0}MNtuP zcdu`ic^CyvA;89^;bg!rDS4J*Ks`&|y+cWd@#JF)XA|&;U_-J5WeJR5qSb>$Xn0Ch zd10`FJDuQaMhs4Z{to=gfK-CYiD&UQggPgE!ASx-p@N*eCG?XNcK9x?R`k%{ z#(*2en#W~d$fc}f<92p%05AjX#&4&kvD^yybIKk+jo1%N#3j3 z=3j(R$b%0YOS<88)F|Ey6b7;do#61q9`I#+Z_#o?*hRdSY-I=$?-9B{M&aAIrt!lu z1%=NRF5TFMpe!2Ekh&B1EEyF98pKS+wQ5f)r|?zxzfwpg?cFPVMs&RJfIx#TT@a&% zL2zZD(bMuWpAxM$C}G`G&vYMP{V-WP8O~O(KF{P=q2%yDG;62rdfT3jF$*`xZ{liZ zPt?zE*#6G7b)JYC)vb7&{Pg3E@wKG?TsO(NxVK9AjiA>IxMKHzd*Gvo{;7U^!A@Knqkb@rlAP|)ffy==M z=3%gO5@knX9<%b=Ol$>~go8Ih^e>*i(@_t$5b*)>hLnbep&lDh&a>K!$zo8ria_ zqM~=q*j`+1Ca5a%P|eoDAftb;Gs7P*rtQ!Af5DC&3hb$Fgr^{a zbYdc?CP2`%95Ko-Xm^r@fS`Jq$Dyu?ZD=Ju5~&l_gc$`S5eD0-{Fo#iB@Pk9S^#7> z3|5oi@S>M}UcyZY;q=B-sFAsTevf4Owi;2$2$d`^rRW@Kt>904;=8 znEsOJrjEjh&FagbQ&kb&7_xULy473W^iG04F}t!RJSKHoV|3p;(N7fqEAV=0v<{Gm zgpHC53&7W$G|~nKHq926(4ft@g7^%2ngCqxqqy2E-W;7tF-WgmIXsM8F)4?19KZ z7{bbc`HJ#cU#MaespVm(!$`f8js~SHGG!E=En&ieH;7Rl9`yhsU&T3;9il#+;HQi@ zj~3HL6uPzT>Cd#=PyI%31$3BCsafD?C1oIE5TD>L-P_f~UAI#hYZave8Skia{<>yw z|MtzB+e%L`4!~)v_lQ5XuX>H+eHHQeZF%C(+k{gSh1&w~nnGOoB$$8gXSm$domIBD z$E0*7Vr|lJZf0rS{qLTR%V$F`%<#NZEiGUu35CiP7qeEsG~dJjj@YM&D(2rFG}B5ouo*vw;t$RS(Yoa0 zIwS8GVb4zGb5&+v;p-f(;v8%~IR+4l&1c6^aWkGSi5+YA8f2GkIph?l@})czDqK{{ z%KapK!F)MPzxZ4Ah_io8TIQZ=p=cL(yGaMTN8(KFk9k+m*U!dYsP-vx(%mg?n#}Y! zFyhG1w7Y&0EqUkOdC$FhvLnb>)aT{&^ZdEm@TvPPvR-`K8y95rAAWsw$e{jH12J97 zw2FlE;{P#75S(@ODwU9Dj1@-e4t3vxd{?GoTem`T6^QNV69l=4L#37)#X_rF&ueYV@Y5T&o zz5XN6$oJ(}_nG|rUVd_v)q%eGm9@X&TeirS)fKjda;@dD(OmbPSH$MUKEG~kqyJ^5 z=)rJpWN&xxRb$byuEQ%XLi%TY$}yn)Wpd-WZZ@&DXpov?|JJ;7bNX@db~tR22a_JtKtfEZpJ1! zmjeb-L;X=-b5}pZE1d}=zOVdgz?{qjpZq!DcoJ;|{0zEK#Fl=Q3faadhG&|EG?2Z_g) zW1(LBjepu!FK|i9*-hXvL@tLP9jm+6N9d49S{NaryYQ@8Z>+(Htqp}B#|``uQv?a{5#X9i*`x2tk7 zlUh|6sEP4DYr?t*sRF;MZe>8u0=_Jp+-lxPJP!M2eW0n1E1#7-q(-$nqmKgg7fy z4g0|>9R3HYna^sy4|T9#@1)P%2-LW!Jz>S#2!Om8HnuQN2y=w}45$PMk^x;bM;}nq zU$6|owYzrB3uX>rmoG0%;?Yz@SWBDY%M}|#ESuY=SQsG!15dbM*j~LF@JCL2E7B_F z#eHVQF~rQ$&xUZ>Bo{V>({82UB!Jv=d(OU;O|J}wA3{P1Xn=9sBMrnTAiME}Zk8EM zfJhJgR_|%tE|%9k3UX`p1$HBGc&7P)c(BO<0qJ*oX%)#e;FO?!gRTleW{8v*OW1Yi zJu)1GNz|mSwvKN~L{uvOvmU0{Is4?Kv}M?sp7ie>1v?5mL;o?I{d3Hy!kr)!L6xxb;gCVg>u+b!yY5OV(ySmG2S-+Wa`M(-_J-G@n%C{@z>Wcn8SI}^ zr^XgmAh19J$IQ&k-@h-r?Lk$rO*)d8i`p~4-4o&Lo3e8F2zt!_IggdJuyTT(K5#~n z7hz2x&5Vrx)!cuO$o<{3yH8Nmzq;=l;#2A{$@;RTcBP z_YNb5YhVg^dg3#X1@@lhV8(9?s>V*qY`G(X4*wSXA3sIMocGEo2XrMI z$D*31P=0}~BG4eo5djts3eNMz<>iopLA@{y=Vu3r(&FNF5VjfPA={z}0L|IaaT;wH zDj<~OQ!s|RXl#sH9=j2ar4ZZf*hik`!|Bi5yb3cxy5q2Vg!tqg{06|KFn z4tUcYLksj;t8Jn7-gMk4I>_I_R122IrTLZ-j zZi_IsbiRR|U3t>a;2%zW^>nOuc*cOAAkPRjXn#$J96N!Ja!LbTe9B)?o*=p*xVzx> zgWn`qfkp>^3zW1dUaT6pu@<+nJwq_A{q^fRLTb?ceXTgd%VaizkUbba0>=h@l4mE$ z#~=oT7>vhZ%vBZQb+?PMfad*f1w8ESsa8_W+3Y$>U+~L`)=*8iq+VSV~j)) zg{c~gz!0}BfR%@=_v#|Thk}Il;xi_JJCv8BaYT%b_2tX5t5Y@jzKZ;FTaVH=T*BVT zZWZ23(ZQ|<1{@kBTpu{95jfv<6c@&uH*nHK+l$zHg;X<9c2wXR2T`zs%Y*pdYQViO z8?6DepbQ8VD))6aHa6y9XQw1aH`^dB3YZ-hD4~xyPX0M23gM?B?RVd^T()JKidTcYW9Ux$7%Xn5zqop7T@D& zu+cH+=mTs7V2+E?OqjT~cvkvk*3GMQb(p@&`?|61s$yjh6KVWPn_8Xm=Dz|H&6o$I zfuJdc?B_1uC7#FrIbqRg`fn}$_=GX7Q23)dQ6BnQ9n*N0kG7ewZ^)KaB>uF&@HSiN zIg{ZrReG_Y#-vxQAD?KNXCoTS*0{+;8uov9uCTw_%=^+fs|RfZmNaz7aQ5M40@9As z9UK5=I7mPe03#E8RI~>PjXzpiV2O@-1tJSMV9N^Ab#ucSU zHFxzY$UGJB#0G$P7@p`5eV{idYnl%!j6jJ<&T!l!^TySm3%=V}-eholQfOmF2#%?& zk@esh!G5f17%48YEA35S0(!5FneL+Ie(;fOVY6Cmy1M0+g*S|d(UO&eGeYvQY8c*O z#D4I!pWIg*ZGXZUA$@fqMyaF~doDQvzCe0CZa4mD%+NuQtL5d4+#iT$tjeUhv-6aU z41?ab7%KpUfGZVjyuD$(4zweRHwzlUV{8gG|MOvo)e|OfgeBkF(+HlzS3^Jn4Ca6S zL>wE)P+(O+MxL7ssAOa0v@FPad!TT|VNuw5=@=9!a)Q<0kcZ?1&I%gKfoUXOVFPu< zsi*VZrM&$CtVm2(;-dPTDF}w9@0_8&!4yH`;4B2F-$cRXfUBNvmPWcR)J1l72nIx| zK|QpOQh(>&k3XU#all!fNDVUDWa;b|P%kmqv%KT^q0+-WU9_Xk(0-jIP?=Pw!S2cN@!m5({N#yr>@Ff+jWHprum1z4ci zPiS;?aJZ+Hi8E8P1Pv zJg{1wJZv73I#h%__aP^RzT<|_Vrf`gJYC=V4BT9RMl5`n56~@~J0@$%|!UHCfQUZZ1N>;j>ucEl80CmFx zsB;3SHzZdGXR10(rk*;(&>bgY1~0TnuaJvW0JadAm~WH_>W3bv`N^4~b`gV@6m(lK z^2UV}lMlEo1u^JYQwejq$D5^G>=ei>s2NN1~3RC$;2a_H5f z)YD-pk6+GA+x^Z3G8)*tgBS#G9hh82@4j#qL?0u1wQWo@vjs&8nK%cFWVGR1snp;V zUv{^)mYjV1Ku_>Q>bSXIc^;q+~^8v5yd6v2&m9`#RudzED z+iG2wI`k!Bt-|Htw9{;uoq>bmdlyBz1d z->>)U^?W{_k5MkJ$xi^&8{0KI1BmD(H@0{NU*Lq`JQbQ`QUAs1sQkh1g#ag$zh4IK z34D)R{71Q!L7DOm@TWzwfRvgQv#BfPVi-X|TQHE+YNv8&yyeFet2Dj+FfxA%J`z%o z)uUiyFMzS@ffyti@T)h&2VH;?*w;(jDPv@qQmoWn$#q;;lI0EA{Z{-l=$AQqeuK1i z?;yr%tjIo^-ZE-t470k_RN68xpI;7|{JYszP}UgQ0>zdCV zM7MrCMgtcJiNk6_X0NqdBxGrg7`orW3ecUmQoP@hQ&aQ4Ncbrb;W4xV3u*zOBpIy? z<2p|gsgtz%36MulRr;OX1BTV6<*urt-2a*AkH&An-_(OBzp|3qR|h{o32 zt@VGa&U(MeT1a`Y*#1HaKE(HuqQat`ZN@hbsrymUaz$>YoGW`c3*21?e{!vOn@JU_fUKZR}p;@Z1~CBU32yE zJTJ<66u-#-`!qZQdxHf z4;VpUMqK%RODE!7jdjFe$d{?7JZl2CWm07$BW6|e$6kzGF1s-@eYvb>aoX@eea;>i zkB<=|!xv_UZC2isnhj~no%S}!4$^77%g8`Z4}Tz3jD^lTG9N;Y)}j;nW}>^O&(YYw zqr4-HcW3S_{Cvp5tc#C_N4U8o1{#WI#t$TZrpV4MS+nOPs+`%`@nQad1gv%bz}p-x z6ZeaSIEnNsQP%zyep(yy`d!h1UgSOSmRo*sQM5ptp}WPEFyJEJ^!uFl7WlQ zZDIHNr0e?EXXMhnmK!s~l4V`2=enX!F`}i@uh}6L#w?)!{Hn44X*2&THewZ4Nk*5| zVi8U(o`w@QD+@GX*fnCC4KT@SwA-e{A9Yfe7na0hcj{C)k1`E7NpI>vLLUBpfy~XO z+8Fo$zbo+rH5hsQpDS@dofoxC>(4mZ?Xqo!OJ0w+ji2p&)-pOvKE8n;4$ipy8e+Bq zI0o|4en&X*B8ms)Kg?l3>%Zh0C4_=Mp*2wF&fzX5TaeGr!zRx61 zCS(8ri3w(146}SuBqN{xCiVd1TNncXPk>aM+edCW@$BmXEB%U~9j{;}uu!pu53m;E zGQ&>+Ux>d8*#xD|Gre>YQJX|WDE#FMAPFI@*j<)4ITObaL`|X`prm7vD-F*@=zT!x zPHWlfg^%#=!-ufLVC?ogE<%_!3crJyCGRr6m$1!io?HN9EcWFN23neS@N__>Q4``) zr;0)u0M-^*{3cl&n2*u?`vf1%o*v%#uc){IJ;RSStSUJg7_Hy~@Z&e-?EJ(yFrl>27uvl(P4ho3SOra!$W#o)jjgPG!7mmL z{-SjrvWb`-kwD#Ob=H((A@v`2 zl4SNX_6f8yy2w=+{{J)>wPq zoEIhJ-m$WcJrJGa={dX8G@FreyoYxsX?^?3l)y@cX^zjv!uYJjhn$MQ%J{VSrJawh zEBi2=Q{}tOPERAhI&~tc;h2mJY)nx8`i6-sC`>M_ps(rMjy4VX)t^73sCtr^2=q8H zA%Qmg8m@mx<^OnSpbaH8K#&2l6*zqu&ng`%diU;^t26}Z6%`e@uoyD@^nptZlE9#j z0}D4VNofJM-X z;H`$8dXC{W28}@3a3Uani7BKK*?e?TXT%;OB-k7bPuSA3%A4s{K|Y0az$;higiB4b zZrRz{p@{{Of-kba5bw93KRhOhilC5dU=~>hSpZcsvTR^6jZk%9Kut{$Ys0Y=EoG%R z#XX=@XriE@r=q0a8zSFrmw!s|fg|bbpz}eFu--{kdMGN$QAJ(|cTk+)ri{J`^aj}9 zWVQ7cI-SUB!^F;?A3F}VR0<#LuCVfqtll10<@*H+1VwYCZbI(CR7v5+qUi%5M)1L# ztSrR4-hE~hitj%}b zXS{c~?-f~)a z8VuwFAAr&vNHC*=?X~VU?ywtWy^uM8uB9*1ibS-IA3w;W6@*X*0;8eQ-SYj&h`?tz z#5Hn+VP#^(19bay1vQo>Ol?iF7L;3$_f$DVhydwRq9b@T6bb~bJ-Dm-hDKf%a&hhLX;Z+&HhH%Ii( zA7z6B(&u&7tRtt;eI{t58AmD?2Sv6577`WpZEWm!-T{s?>qKl6g*J2_+4lgDq5%>8 z22RsZq>%a}jXglrq3w9~y`y8)x#(_{VDcM~UP??r9`tR65fGXUq{!@DtZS!+T#3(n z5wbua*nB)ZF&e3GbprB!^QQOu(lF=c$m+^LXSlEkKA@1E#r+fi?AWJ-M4GR-@p!~Q zZ*X;Ox0m9Le5|>b@~v`|rF;_d8b@81ukvu;_V|U-7__8ygNO*F3!p5Y6=woB8lZ}w zBE_ZSS}ow^b68^iP|$Pp@&-SLnYfYJ&cK(pq;ja-z#0G-%s&NFIp|H2FFp^OXuM(4 z+!%gR5Rxn`R2-}j&n6229E59PNG0-z0N?`XKx1x^10=ddf_e2DU=#6DfHcA8;84M` zm`KEPkBWew0I>vP&__sO?o#e}h$^Y$jdDt%&&E1fUuYLA#mmQlA>s_i*@YK{!*yC3 zjLZ;f2_Fh7>xWhy8mTA{v4lY%A^Z~m-01JyL(R!1(QH-G{vC+dbWn7W$nP>LbtkWOU*6YukI3ugU zqtO*cc;Kc)?NCw!+yQ{?gjAY8Z)%4DzbFUyIY1bjhw1f)UB`cXtYTlC9X|oP6c{1} zBLNdG*r=yrJ3~){ryATr-4$pekqAU_k9-!RIMqm4Z=%hQHZ74}^{% zIf6G0pmwCV)ecV-Q~+?hm*C=0?Xv$5VfRqio1H|G9um&Ns-P5yIbh>fNDP5abA^L| zS2qY`5~z5k)SlrvB*K5G~-XNxrMr-+^nr{$5;%9RoyFd{R6Em+`)&Qish$weXbw46#JIt zhHBh9t%G`zPfoo#a+O4c;?m2HpNk3S%+?a#Tek-0Z^}vqx7vLj{FQUqKG$46>Def( z{7vG@;mVm(y?Fja(nyM-`&o_ z;#YeE))VR8*;G9^!6$9{4WDlo-M8cWuB`{sglk>OHpYH*7mW?`#Yl9npr+CnlpJB= z90=wXR*#ltVU^@hkf;@Wq%$>B<;BlQajX$&0&X>$ygI?V%3ku%Y)`g8#LiTC|3%vv z>fLfS`R96a`szDKpW7+Fs}j=6{Md2w z=)c~`eX_uS~u6WiN>3j?x21dlz4CDe`rGWZP7gwCOk8{Xf6q zQ}hRwM_hXetN+X#(LyfC`fSiw2MpKzQxQ%LyB|Cm9DiB8wB}pIX^n}x(hZqI*8LL1 z_hnAgnx~nbT>G|Y5h(80^wi9;;ZjgT(~i=bVUt9nXG5>Z+4uaCo^Pqo+C%?r*Y6vzB(&8}U0xU&No(jKvJC#}`Vlrjdzq;73G6f_ zg4y(jo=&?@4--YNPp~;o?)V-CR)p`|sjTKaI^Gg+t5lY75Bx5e!rj{~Rww`bVWJkb zT;5q%o3x$lI1(Yc-*!AmC%8iLe3t-^-MaBi;_s$F2)?STo8HB4c#ho4j**n$UT09E zsBa6mKKvOHh!^cCr318=Jf_bcVfA9^>G;{leT+ZwZq+kG(d(Z)^`$4eJd zwiTS2gA>s7@<=Y;%bgT$ZXfB_(G9CKE3?E)v*%=}m+i7{-;vu=ZNXQ6V_>=Q9_3da zX6NtfwKl(hv9okvFjiqHnJfd8 z-1{#e(pMg`WXzauZF+FVpC8D%@ZIKgSC|h!zq)BYocdapB{JYRy9#C>w{G0<%c{P> zR+;G0JMBbadLDKHIHHhvF*=_8`3ACXFBk~1$yFD`e#jm6Ts8F513wsZd`LV6V0i}m z1}2s&XTUfEV}_~);cyaMw>Q=n;8uVss&}qI23a@-(GAk=jWWHbDz<=w3IsSM8PGW) zty26e2&n)GXlNu^?;eW!hee2qvC?l!DT};8bW{c}2S`myAQEvU6oW#5}_T@%D-?|dADqP<~e>G;h5i6t)BY^UM7({CB z%`Gb0#S#MIMx{8oLh$7!D8l-e2bvDhWYK`+<;|j~g9rwUV5qchM3HUE5YIKtqCZ!fii*TF-J6y#_K*_wM- z>wB44Sz9F5z;XD0X2iHX=x;tlst&VZ(nmNXgZ|i4f*_ zecmLC=xuB3>gxrkQ}tLvW^VZ`+yW|{X#n3&Fm-Gs?8G^nM`tlc6JkS5jdBW1R?Hk6 zFrv1Bm-585O+h>68!e+CQ`qkPkN}_A6w4#9^`%t(dWNWL(a`t~gXkXDf~W_OFJTKWP%ZQa}!$<3_32yAT3=F_#9-GsR zqEX@uKUMh6@(7B>O{pVP+Q)RXwW-c!mX-0bKmYK-)6xfitgJj@SaaDb2E z?2Ix7;xnjpAiAm;8XmnHau`)N-aVK&=H`^Q>q~w(D2jiUIB{B~*-&79qkh9@{o%&s zkM(c6Zj=@*_w0-~^zrGGgOqpf&hC}S=#A;NuCgl^=6k(o9R{ijH3gsB#y;DhY5alf zV##pfPK}WH=#?_Vr79EGNiqnOB(-iU^NvSt3xlO!!`eodOxCc}H~R{o?(ldQehM}U z^}}~wsD&~-vO0bAot*91x5ePsnX$2*A@1#InVliGe}-Jl_o?`v`M%)q_nyoI%dD36 z%aQgSUj(b-x2p+8o#b~uMLm+os`^opLj4Sfm5Zz_>zloe-HRWWnwLsvWc;6h`G;t6 zVznIXp^Y+o5J_Q_i7NS>=!fEB%@$XfRfxa@6Xc}p*THuIT{S&D9my8hy}UO-6C@FX z&j=)F_hQNzT??)c28o#dJbI*;{vFQ9ui9#A)C3=tJINC0y_N>iiu^(F4Q?e~40byo zZXHU{hQB2R%^#bqJan1~+HEZ@XGJ-#NpZXNP*boN?bK>PDY0sX670p(m$tDl0e(We zuhYjh8)bFj?lVUs3`fi^okL7%_z=Jx^x3LA{F&L{&hym?7RuVv34j0m5u|@+l!^Qs z=p~UPf~l28YM-}S+(|)<&j92B@{vxsZfm=hJ`137P1r)#dAqaW7!b+C7y2H5b0U)7LVyU)UO^XTWV2~~Eo2O-xR}Yr4W}*-J8soe?MK-lc1y5QmcxbDIu_z;(;z~NXi2M!r{K9iq< z+(Tr^dh-Un1_%)+drCl|a#Sw$TzHGzxUj1GLd0q~3snzbu8DI`LJMxS&>&!tyeXi# z%3B5EsW+Eg=+TOSX#}R%T3T>k!A_QuarN3YjH!XPD~95Uecq%N^#Z23!t7k(bmih( z8vd9Kkq!Clpk_94UA;-g8+YfzsXYcAt@D$|OLx}L(Z@gOPPkzgpVe-1SdIDMzeh>& z%e5NzR+6Qi=@SxP?y;Zf=Zp}zXCWN$J)85AX3W{NytF*F%=`P;r)V<27~J}zm7|~W zE??OvK%C?#p>XSOe1%z|W505dad4j`+>NjiK2ZC;x-=uszlF*V^f!FL8B;0_9kSWm zrrutis25!m2Iy;pfXYHVph$8qzZC7)fB|brYj6`9X9|_ zxq%-EyQa3WD)I4ORbdcDd3g~9^5FRID!u8|)w&?*Tcv8-Nax1-IvsRrsj^01=?baR%pfO=RIxfw$@LZez=3w!9<3=83z8 zXutS96Aq}L2)eMbbeN4r0Ginp!@C2dU@Q7~@w%@*J&P`(A_9TVF~%A1&K)%9W&Np; zsc`8Pha=N4A;g@sN{_+smyhu}Uq(*rhxHG-#R`)f?xA9r-kESouoyi3bJ_XlnVMYI z+d%l$gs4Op!QqBWYfD~*86qc2kjt~FT*R8`GtMq71i=lE4BGE)$`k<@+mos4d)OIp zr637ADafwUB!NiIUBR`(Gw?f(u0@g&$P|X6Fd9F|!T9DV2(Z6@zo@?g(G;cxDY`WX zT+@8{94W#q4}_M!$xOD}{|6p34Degwfp_p=lSFq@)AahvWZ21PNNWS|r&vMZItT!g zULf|RU-HFF19w>yboWAR*n($ATQ<3U4U-G1Fpt}d0B-dtCb|H};WMda#$w<fpQveGy*D1bVD` zLuSx(4OImLF?E7P{*_#|(BDYGEUB_^pX#f?T4spZ!4iU(MPL=GdYl!&R1p^?%nle1 zj%7ABHs?0QymI!T5M==%$l_~|6EXz7 zZhgHe=!992u^3=`P)9>gmVZO0CxW^7vnwXL3Um^rXGJ%)BO?fJ z)JTPcKXmKJVeC8GPeQgrL2OtEH=Y;d;+b~|jVn!KrQt){4fvhF* zhK7d9Y$sW35zb&rCb5g(_MWa)c)z~*Jc6%@sr&iF=;7Jo53ARM-hR59!~S$xCt*W< zkKUTcd|SGn#=Wp@A%+n<{slJaxgHVUI#rmHki&O#^?u~c^PpGSZ(7t{mp-2PIJIC! z*($Y<(ixsl|CVGqWB=z|aO5eNp}$C|`u+Al&&*_2gKN}nFdlCbXk+hJSx`QFsVj^d z2xA>@D$yP28uZdRnSvoPW2yvry=fB_kj#O|Sa5#)N_B-Xq$x4+`Atm`Y%abQVujGq zV_GeWHy_qo;(#%$#fFNS3?(s)tFW7TI@2SY9sHPJ9&oYEyUO(f2|$TJDWVHdN^7BH z-C?rw3&zF|HBwRD!}{=X9fGNQCz1aGDc9H>IAy{v!gfG#fh-a+&Ic@s8H*KIQtjy7 znCLKuQX)v2&O}otml8Ka?T}a}pw1@MiZL?H88gn8=vAU?;ky|7GUYik@5BROu!$m? zT?Kke;J6LLWZotL8&Lv$46lGYi)>fRGg$PPiJlaM4jXhE0Sr;Wr!~k3T2yNc-5rPt zj}if}G#>4^dg$2mlooM%wz*Qzn!|?Yr7fIV2sGmxcqr5L!LCOmB;ch5Tx@SNK9!9G z!enQb5T7UdrDZe^q$N%!MTNk#Oq*s?u(QV)JNh_yR$T+){WefRCGrq_oQNTV4rtDT z&4H71g@aSC5WIan%X#YHr>KukFfcDJo+#hh#1Z=vCSGv<4kI>#g{pjpT%4V)XJYlF3BPdnyfe7I2r}a9l@6zp1D-wv4i7wdyDG3M#is1(^cj} zg3JobU!Sk#XEm<#Sgkp=ubFu2U#2kTJ9SX|_tly+`-j7d)0EsBO{SAr-G2L?zg;p` zx$(E()bow>>~M^cCzzVJWk%r~)lRXgTkk0vUh4Wy2sRh3R=yGzWKnt_;It6E1tuAN z+w4-gD*F8TCEF+i3H6N+)IRk)md~#rW&A@==i7PVUuSRU*OK{zKQFkjrY~$y-#Y(h zd+Do)A_Eua^tRmPvP0@BT<==O-~0cGB}&I{oIY{bLdWwH@!A*ep2&G4k-r_H+~3Y7 zF$vV`W&AqfVV08Cn%vW!-k&)1rL(0!qtv-6CE?@z_mC@ct6Xi&7fAf+AwCl>=RP@g zt!M6GZRTJILIZ5RchvVsR(BB$S<}kqi!WgHew`L~59wktqm+xI>l9s?6W!-5Nd86j zPx8^N5U(lsl^$xFWSwiu$~KLcNv{%XLgQ;fS8vq1RIOwjx2?PYa@nWEEp!W(w2mZB zB2i|A>%toMPjUNi|GaPdE_1KHygMSZxBk?%yq)TNJT^B~x7gK$rA@i_ZU`3eOpVw5 zC9KoQ#0QV_^%w`6bNXEl@vpdjE#q6_&EI8qwmml#Z|tKwbN1-f|8k_*)k+3u2d~}a z$u9X}zxR60wx4G=91hkq@6RgR<-nk`oIo758yX6J-{rF1N{8Eajk}St{mg=B54A+L zQuJ6xp@2GbS+nDC;&J7bJdg3MS z?6s1Z^&nP*+u<0IIpI2ycEE;@)A;tz7B3&_^*s5*hqBfS_dR(%be+8tTlYT9F`rb) z9Z&e|6n|1siQaGL;cP9t3pkeNQtlCzbE(eLq^0_&amU zuIdID@#R=gcpVG${Ah(CtxxESyXK(neQWz{ak$9X=x{`9l zO&0B*K%jMH15a^fM{$wSX`#T};Dlmy8s=aryl(6F$UH@#Bg##NznR4u&Rhz+YUU4u zEf}=A!hfQ%zx|=EZriujUtrAjee5a8-3oF03`4Ra;AbMP8O}3%ZLH>OZ9o{HUrL?E zp5|`?Z%@Y1#}f!tcT*Ngd=b>s^d_MqhedY}o<3Xj{pae>qTJ!lwiS)K)bsH2&?A>P zrcZJP$D|)g>KowHKAP7x`SSI5fy-11Gl{nYK0cRDb>Hg@mbE-5)5ny7$~$diD)f|( z-o4zuxRTsTaPPOK99{^$-O|T3obH>1sY?FostBYHDh-JYsv~DRgEKP5{I}NezaNB0u6?>5=KB zTVpQ;W6d5o$Krbzm0`^A9#=T8xVShc2M%wJ#0^lDD%^L-3PE)tUMuM7b6udf<@+BYC8Hf&?H7VbMWM_jsJv3L^*>oI|GTgQkcM(@2HAOIO(% z1pQC~fCK`QHGL5*2Gnl&4qb{@$qfn{NW?DRJ(o^ z`FZzS^5uU_rsdU6NPNXOV@0jkz`gESfvEN4TOu+Cmmg8=qBrn&7j4+XM1_c#?>Pa1k9oTQ9q{Y<1oukOoWjV78>SqfV6AwaUXc;tMBr!XJTA~3gP#|yMzvCdW%Woui z>X3Mmqb(7{(`vUXc-Lky7h>o!_=kverFUcfaQx$vJ7zksP`8^qIXNMOO!q3RQ*>`b zua5WO>IxmaIVY;omrXV>lfG~hl@Anw57fwh8BJ$`%^@F4*QZK=-VlO9%m-k70wR*Q z8W>dAXJ8Pyg|Z<*2C8aciFXKpCMPlf^_=RXR5=6r78dNO@M>|eRa*BB@J5Dg=8-D~ znv{9p29XI-@vd$_XcDxy(M5$l6yb0J*u;ZhmkP5NwM4X z{6ts2ice)#MW;4_M%OnYO;PNVvQw;P@6W>8;l;Ap#dE?u%U)|Up_yBGt3OPZB#8=b z^#0oLyw!i{k=4d<=7zf73pM^D75 z&v(35))PvqR(Rbr*&$9s-ynS(iGT3%fnMbWW$a7yQ}7}|>k@3fefxG_8m#yo+n-t;y+MI`0q66&u2bbx!s z>Zy8s6fQsjKKoawNr=4_MJuJdNyc(D; zH>UF(bwrOzxd@R`-*&)W1{tt`u`TF|q@g>1@g%eih~S|OPzpA;i7oY*d)+kw^(=gq zvN^ZN2P*QzPZf;0>S^v{*H_1_6{ru@W6o^G4W}=RG3L7*pmPB`3G$>C*e2{%|A&+$ zWTPzg1+W5NCi0Zt82bUQ_LG7|uA|MrfB#0JGjx>P`XgCJcDK*MMTsk%sS*?^Tmx|* zCmnxt!^|HctbE{bkIXG2bmW0rUUoJ_&)_>rCqM$t!vEEbC%J751-(`ac;NB&NPUjc z=&*le)dBrAa4kq&9ZAUY0t)fx&+Cdl?IihdvSSPS4)G2s_#UW1?{MSBjee4L6lh{Z zbf=39%19Rh0nw2H)G8cAVviBfg3UP!!GtL5zzlouxgbU;0Zxp5!FLpHF6dC>>VYQ4 z)k`O6hn@s74=*#2O0-(g+hEUvD>wjn#ckqpUxsJU=uEp2AKk+P19<>86Oely(w*Dj@@!JhUsJDNt=(a^Ae@vf1IAP zd$4TXtuS+?cza6d%)#MSLCMM^oJj85z5m_CE}j~iy(gljg0%MN?Kxd*V3l#s{8D(< zl>-+tnvKj$u?cJLb&*a;(@wxq254GB3&%i;E=fkFtEDAcb1(W@Xl<}5h;o1|gzg0d z8iKR$OJpPrlYpEn!Ka#Z9!)=7$PK!n=o%x9_-u!5zdfBS!j2%308|Fn0k*+gw=QP> zfKCKx%%zzJZA2SAT&um&K!!d$5n0GN3PH*^jEhakvGHaTOrH&yDnT&>uYv$Snk>42 z4D(`u!?1eNY7tj1r$C!T4)xx23o(`5{WF?E5)_sg4FFjzAy9dsU)4@q`4x5u_C%b) z6;8xgycj6BxNH}gt=ef?yuLg}F~JsAg~h^u2V{&G4cxzo0W#`9rgq8(z#z^{{8f{U z_fnlHfP&(U^%YVCQg+E@3k1hEQ}w{_A*=WSy!Lud$}z3P%EVXe+U-?M(QU`O2Gps0 zZY0=jddt^%V=?eoQJ8?>g%enm<0vN+R6F)kU=yQ)kl;djF+78l8Vm=pkVH9v1naV9 zwIQEji!ND4=<5vJuUv>r0R8bE@M-AieAPOEX=fS)RP^CN8XCGH5(7i^9vHFx{HdAN z((mYosR;iaGNTR_#i@FfAx#rE!Eb}piw8~tjxcp0HcXFPk!NHnoq$3WW8)NE6bVPI zzj20t26BUC-DCp-u_9~t^#Ztf8-f+-r^e>S%@{I!&YAf3Nb838XxZb@f7g1i1z#3rsOw!=z5P1={oi8m{5cWz z2deY|UAI`1dy=lf_&Hr42Lj3@*a3hAO;(|rp{gbWf+zs%Yizn0eNt8x0hY94~0}pXe9xO>%P^SDvW4p zism(hMp)#u1A0%;&S=#*!~S)VEL>y4j{tEMn*_#ixw+B&^dQ%QQR_$ogPxxNHtLcW zFUe_y_93T%04d_o!Gk%Xp3}do;3{|Y=yP3RJP!x5iY<;j1w{$_n@JY9+|X>c*hql$ zSLx&hAw5P>w{L?_i%kw?A=ODT8jFf}Y%Wp$HcW}}l9%4QrbEDy(MpxYEdbCJ4BGEu zZDX`lSgtIJdMTA254?Ez`V$Gl)z#H5MaJTsDP%n9`B|Hnl?9!g|_V_UuTVP2f6$cY?G6ybOO-PWP0kVHX zQE#YWyRVnsUilCI^w}si%6wbp){!M<_=vW~3vqI9QX=DGo0t-`UmQPPz;#jULHgLY zG5Qpdv$tE8hHB>NmDN6Nr=6)dmf&Clgqbm-~%3K8%C}Q60-odaSd;Qg4&QOC4+5pzCZ^m@u%7bx?W*5*0>667_Lw9I{qlCZ$PihEp6%5>TJ>lc^-ZMf;3gEh zMZOit@Ny)k8DtDPyJM|d9`PtKfunY`dh!!qvh=~gpJ@JL2CyskIDlCXBQv(p zXHCL}Q;oMq#BCnyF zibxfW)GZQsW7(8fs0LbdnkCdU^NlVU8_W8vulDm9U$|s@xB$+#c;@HFJE;E(siU!) z=nAaB%n&;bM)sNJ^POI#W%txasSxBY%*@&@{_*WfT>2(wI`{9$#j&%A2PQpDj#vjwF_ryd(#T z_DI_Ab!XUR+-rPRi@P~2U;m7Y#LZ@mvJc+wq5@=di3b}*PW%wQA8iD=e8c; z>hyZvM%?OZPh;{HQ#Ako}9mq*ufz z$CaMm8mi?hU+tq^rwl}fkjRRtri?HFbmx0*uEwBm5EM8U!&=Lck+jy zF9G-D`t@ds@P5OI^-kJ4_?7$z%abAvit6bs9qP6|AI7%u9s7O%eX1u>WzLB-bUEcX7v_m6@mzbuJhif4@4H5TVWDWcB`Q z^%9MCqiB8QhK1GUfRFbZ9;vX?VU@$dP`yceYk>5e_3Gy0Lp`gh?u^Q4zk zf8yc_CUXE~pzjfm!DJ_pKobPxLwbQA{X4FdY}1TrznBq#cxJcs}*vb5I%4EFMSIu za=bd}`p_98B6)40cgw#m>QU%hFuyeu7iU7g7Lkb#kVf(|U~h=8M#yZTG$)Zg8Mc4= z@O**No|~JyJh{YY!<(NlwX%lpQC8NGm=qsxY-l(#K29?TR=Jt3iLo)90&paGemwUk z--ndL8&;KPbTDEd-{HceIX791lF-Bnv5`4aB->abhV(-*0;lyufA z=4xo%74Y-E)w@u;Xa48D8o3B_QdLJ-5Al?cm>}@*H5zt4Uakn(8qNx$9Omioii&FA ziDqX&1%=e$Fhza>Jq_-~(9qssV96D*mtVQpFbo6(Iwb;qVfSCIBik#pvC7~tCeEaC z28nLq5*lSHb1vh&B`fv_^UW*)SB~s*oLof&89*?M5U)vf!O#gL6-e{O$BW%(_B#4* z_2*ZAXJ8;&hn6?F6K-(2!ghf&iqNL4$G;{bUfG&L9K~dGJ0H7?|_N08C2m@TUht(155#eG*5b1TrG3 z4PrH)ycY%o2(ld?7Y#PYCOYN(su4^sztf$_l?gWA?9a<}5KjXQyNjOUg=Fd7I>PM! zJ-${Qz(A&0H&9T5-U0Kr=-S_KM#aOMuD>@L3Y?;%A`lndWZ$-pk!^5X8F(WXPym0w zxVuSUXl^rZ#Y^7jNnF{EYv#ud1n=9Y7I;gpXT)^Juo@_|-*H&I@)xkL!}U+cyvr6> zQfrzw-fxu2cQ3LF%$h2!WmS0Te%nX3x$I1@;3X2dKKzJs^D!_Hn{E+Rzxx(cEu|2NS($>Z^zvX=kBz?+7e~G4No*{{ zksbCw2By8{TF;Btf$<3fL3f#tkG1viOoIaWkwAkfd+VNOdUA?0(^Vp}M~Q$V32HwP zSQVpY+Z^a;qb#bmM3+pqDfkkbLaY>rgyVVvu^N+rPD!t@fkHH^2c8;a$oZ^8VMim@ z6&7ik-w!Ba9kxu6vC<2q>n|f?7$bp?!h?>a@|5M6^Cp0NpkmF@dg^L&A__2YTDlRFB>qHjel!MBP@Oh6}EE6yXcx}{x7UK~`da}I~l-Fbn z0??00lhd+UjyfNCU$kJv3+BVe{wdgwK~Orx0T$RhMh$3CQHeav zZMB1i7cLx@D;!so6C0fdNZM!E9bNpsfE@x=^`?C@m>70;h~_~f&$v@eEwvfev1mV8 zm%U2SWg%O~+_1=)&am#+FAI^FcU=>J7l5*ZulZCH=AMT{MHPd<#=U;+8f`$u*)(m) zc3?uC)dtoXeA_PPJgFY&C&3K}{G7tzUQG5cnjmPbjyDp~Z!+vETAG@$lA|)w=O-YO z7xKGzZ(2qJ^G~C{l8VC}1Hu7DE7E^kLJ4{qt@Hx?A6gkZGyDQx1IRU6QLc7iDi>$^ zSp2H$kJPy?RvDi{;>Ep=76R|h&Ua*WWQ__*XM9|iTUogB@o3^h)kCcXH5Y{+c@*y{ z&k-!Ok(NEkPjjhLEZp$&L$0vaXDa3$U+lrIcx|8A*bD1CM5@8;q0|em4`qOQu%8qZ zz$3;@HWAckGX1m2IklhwlY9Ux;Mv3fGax4_DrI-r zLqAi#m9h#TGwH@3@Jg}`GO(03RW+a6g`TGKXc##Yex*w`}=y@ z#0Fo5F-;}k`qcmI93gIns=WgoE>N_*R|oh2)JDoL(+8J;ZUb^wt|%(>j|DrF`6I(+*muG~m@QNzmCfTBlj96NQePkcl(-`?7Avtt|v@C(m$WOW=Qk?HzqgajmHWr07MJ7M<) zq>I)chZv3*fHwQ@!dDFnEKv?th(DQ`5frU^Ntey=9jHt|@sNO?ZHIFOPFXYoz#tiW zlFPTtq37?u4!jv-4M#@=P071WnStDEZ;ye*@q}+cwnz!zkW0oJdHy0bs9?c(<{`Ng zy$|f->(ir{xa~Y-VtE0N1f0;#IdQJQw2dt2W1`l!xb|OQ>r?lI=*!Fj)cH!pPcs(B zIZixza;S9hLzT0r-!_%k?awD4{7W@;E9JbtOYF>^z7PGJCgvgsn;&i5>@VwP{&_oZ zhQ4|VM4hVgLpG1(uaUanUbiOE@mz{){LTVR9tXu1EJFljsp%`G!o*EEg+IC$>?mb5JYa65FrzG*p-yZ<=%m4i zH7#^BhYlJbP4+Xy6`;$1s#!YynOiDu0(iGwzK5md@113fRd4`}7=R!dV<4FH0olQ- z!R7|%H;~jo6NgDDnV|?mrHWt^hGFoD(@Bz-J9?Dbb>|~1#vo;AF5jPlER%D4gyxB| zYZZw!8dq&?DSrqsy}}29n2(7Lo&oQ*_O@Wptzh`%gi!he-V9f~PMb;|7?2yIo`3BZ+xN@>%fy~CcPdRlWYwYYY$ zIoxBkA_n-IPeALTFOnS$jv9(fPB5V|aTJDBQhFZ6sV@@aKYbenS#X#&Qeg!4=llLB zA!a)2zz7t?t#)KH{`w*0o;$_E@Cu&bl9VGmlnD6r*%EMaK!U@-G=Css4DboG_MR2z zM8zzjb(Z~Hrojzqp3Rh(TFZa%OXVUGZlmYmILv z%Be7!g#TZat&yr2vD)d*Zb!irS3WLH?Hfxf{;|we-@LZ$9nv`+7u3uCI!IUS;X!Mk zpG%j6bfM{{0!4PTU))Z__r9nyCaY@D?*==^KAw z26$B@2BvN}`q8Om8lXaDXV~fwlk#b|c%fQYdc$f1F#H*Pj6{&39Cwf_9QLQ!c=>cr z4YWlYZCDg^p};^y0T^Q)_INX*9KhJPZXLu@83~_zIv+JF{|WB6c3NzV`Ru zJ|XjZQEQ3U5(SC6+qUd<(5mL@ai2QPqTSx+_PR)O{(!`6o~rU%ueHIa)7P|A1wr9D z`G`JVk>2SJ^;_#1euj(pw9~e~Hw`u~mOpeZl~=~!iTIIVtf=#rz+42{eB&zwj}Nh=WUn;D|E+cL@7Hu<_W z&L+}aAigHixm@0TA~AUFb?m?I4y{rn&53XFIz3~<2bewX=nf=09^5l$Ytu7ot7bAW z%&%_9WAumf%i#h=#eZl#QViW>^M~hyE6h1RX9MGQ$j|@b%+5r2VDLzUIelg00Ldcq z5GkVN&s<-ShuhhD%3JbVnEpCFTkx-_*jCG>_1?X#z?|`w`Ng@Xai^K%$`3vNdo}K9 zepv9ktBb{WaBEWMx4KFB`e;nNpGUI^xGut5im!webr!rqB^FXmg%iXwO7yKa|3#kI zLA;oL?y$-kNi!CjHrnCR^Z!0O;2M?^biz1PWO}PS-|$({s!DhIKU|e{u1^OI z({*F(t*nQygwTaJ5=~7^K8tIbi<{B-iR=(!7bL0*h0;(34lrqDWo8w~5IsuP@5ev_ zF=V<*!F50Il{R;_b?w)$nj|7!R&-?zu%>D!xFpT1PwZTHC|7&-&B23yPn>ug+#hFhy| zOPwIh^g^l$7$vRcFjFq%fZG2d(+ zf|MX8CdR=)o7({`)B!hw*`@FJpL{Nu6e>8Iq^uNmh8PuT;qQyU9NtKo1Z`ht*BdwR2_X-J0h2`z z$P>bMjW)?o85t0#R@{S0ChUF^Wo{vz1D1vun7T?+3UZL+G(_q^%`TY}wZHoe)|u*2 zvmQ8C(So8k1ybjys7N@OZ!|GBc0yHdYtUE!6L*_zR>^HmnCa>-(0jj)CL`DFf<&h}BD;;^V8!L}vM{boC;E1Rp^6G>R#5>QEk9b9pj3=c%RzCm0AQ zqf6esJ0dR+i+^}Mv&vt<{K+o=7s-2Os2*M0uyn#VGjT7-mtmT2Z$F;2KAMDxD>>Nz zt2GTA?FqOGmmG7Qi?yW_u5x>r>gbm~+Q=`Dg_>>*uWzho)SF)V?~=FA+#2ST+W9k& zCV%W1OIOdh*LYOVX;49W3^#pb@48LpUhBbIXHFj?-G1~ zbaO)&h>nt#;A1)BfstF41%lg*#VQF@ZSC93DAV;dqFyNSCzE~QcL%~_qf#7z;VLJk z`V&NKKjy5=_L4_Nn|c&brqGiB9zSv;`$i-6b@hSspApQ z=Js)*f5OmQi7>?__kt(<6b7J0#%M$(w9q@C>u6JSOSMIDh%JM{ zvz(KO@=c`3w9gKxsgj!^yo*5U0sQTOw8g#zYNH+{P7QmG@+NHf7CDNrFbe}}rXQ{* z1e^(Fc3KNCbr{vPjrE^EqyU`x8EBOV;uWyXrRYQy(CSx6ChOjb(^BphsuV}7EPEFp z_4H{*3H3(B5))9?V8U_gIg~%;hoE-FFqWLMNGFonHg=Urj|(d#1Iv_7&o?xh>6ko< zUtRq#Iya=e$va=OJLM1Bf^T_`6a~9 zehc!Z{DeNzdG37aPP2=rPW^wo{`{6$U8UH`wpgw$)00ov9c_J^T(Exs!ka$zA)5Eszu=pv zW|E&Kw{KT}f9wzG$+oL^ge84VS^j+1w0D)u8g6SZkiK=AdE?LJuP1N6Z0`TZs-s2UtV9W!_IdT!3+!|MobLXX z{r~IounTcj`{S!`yiX7g+rIe5g@@OEuem1f+noR8wB4Kw1!61qoxHm4`xh3s>aT)d z-{09hRjzW@#%0B7ypM0ryDztiD@(NS&b7Pu8{WLU8U6n6?Si{84PQ@Pj^VC0YoB$_ zmdKI;Vst00=Y@f&c&j literal 0 HcmV?d00001 diff --git a/root/opt/dmarc-srg/screenshots/dmarc-srg-report-list.png b/root/opt/dmarc-srg/screenshots/dmarc-srg-report-list.png new file mode 100644 index 0000000000000000000000000000000000000000..44858fb9f0c7357d61cecdfa61fda65a9c37ba46 GIT binary patch literal 249064 zcmb5W1z1&U)HS+50TB>HQbeRdDQRg532CHLQIJNu!2$&lkd|%`38lM4KpN>ry1QX> zC&zQX`~Ua3&wc*8pL33JHhZo8zVDoK%rVAX@0As$@h)G#j35Y}tc;{8f?PaCkPBXy z(BW@Z^rGLwFW9y++V%)?<;VHIXyJFRP$0-HL{{?tBbV5fF=suZrV(Ugp8q3_dbtAu z0kfR6Bmq(5tE&~?B#C6@Uok~!r925>z8=UEp_Tu`h~0>kIQ1QO_;}2%ss>8uW7J(& zzJ0;qWbVyF)YQDSlasSar0)JublhWQB8*GaZwSQUKgtQTy}vQU{`+J3#RrxD{r-sI zgUi+P_rM!>705Pe{{95PQVho*sej+p%lG(4z&{^EAf9Pc|Bm#(kDYjPmHpqJO{&JG zHTd^u#XYb6uNRn#XG8wJt7;&WQR&mCPnU6U+{5Dj&W7f)dw8k; zJSu*FU**vN@uejE;OOYZ)m2JD!sIVs%B@C<7k_8$JG?)?kDchF?M~5WPoKud#y)!V z$gP}(Dmg!&gP*_j`}eIFn`$#9lu}jo#-Td-@<_T8{~t#?JGZSF*_a_RT;Dfu-c(jr zhJ=Kqq)bN|dS#`h_2D%hk6y&W5)>3Hi8qD2sjI8YnSWd`B;j{OK~9dw@a>y7@gkn) zHZ~K?Zza#y#Jpy5asPP(b96H@GUk_;TTKewQ`@S7 zOG@}&2c@RY_*qFmdK4CW1%B?O6b%i{(~#ukCov=MKYmPa&_^aWT}avV4)SSuOrJcd zH`M0iE9n^KJYVUf_?ej*r*YMNy9Qsphl+~UT)GKa|1NKG!}{iUrRz3alv4kpPfW~6 zs%)r;9W5Ff+DyZ{tF+=05*Q>Q_CsA=1VluIcC)|Q+T_1yW@VYJk5|2a|NiC6m*V0H zwzU%@gF{2Jv$JTmud(odejumK&umZEzy7+8K&I~Z`8i0ssiLKI@P6-vC^08zEIyL= zSl)ALJDan=gqZRpy@<%@>es+Rzo@9eFlIHlW_Wn`;cvKvJFNd2^Mxe>92^`qHMOJc z{QQlR!)^C`p}&VQNlDX>c3g4s(r|l~EEX==4PoAop~%dB~Q{P+=_InS_WE#y-oZ&p^8JhfkIJ<;!h0Ha2SNq}<%Km6ggD(?8)(<_ta@?PFudxnG)O2-QYmT;NTXoq@8Rg{U z%)ecR&uZtgFB`q1nd{=>5)~8E+S(f6@4vS^p!D!zYfle+g6H(lKtAhHCT3>pXbExg z=5#nA4K*PnB{tjZ3&TYgtL!;7HD@W(K{rLcJkC&_pFYLLdMx&&H8(dyknr&GdM!Nu zH@!H1zEZO3l?*${7@VAxM9nfPz6*N^C)H)XgK|q4ol;!wltLaF?yE6>hsrYhx98`W5N9x#J!=ZEbB*0VLfL!r0i@(NR&h z{IRe!CnqNmk8y&|iqV|2%^|cW5>)V`7G`EDMB$;KwE1;|P}Wjvzj!^6W03JS1M zeSLinG_UKrdV5oAezmj|X}5ROKl#@DL&avI+RBq-wXm>|SuK5|q$fKo3y+K=@%wj9 zYHDf$fup0{WrX8-*DcPKf~Y96A-ntc(fk^c1_((>HC0uUYhY3HPSes7w1vD;CwArNTM7xWMM{oZ*hRTLpWs;Q+5;v^+ziPJ^z|9PejF1u$1?LF}2*5?YeEFis zHt_rR_RivOB>3~^rO8QKSaP>dgR-FvS(%w(VPOY{hnqH51G)MTFxy*O*SVi7ySW{; zgfdcGzuuf2$!_?O>@JOffX=Pd4U+Srf zj?Q(&#oc|IZyUZa`<*-4!hVIn@ow-3uMGeCwKUrrx!$T_XeequTDr62u%#{`G5st2 zj)sQDjD>_m1ALZ7u3ih(kdC%?2y0AK)CS-7$Ll;xud!67ZPM~`b4@r;f~3lz6ff^rf#h3{38<^9BSxIjH78p*!U~EIe_yo= z7D{{j`};>m+~F*vQ?$WZ@;W{0PLYN$?7GlJ-LoOn+R?GMw>PK6%);VeZ=b@4gNUB) zT*G!oGaAf)d`IJJA}M4O`6!N;SCS^?H>MgK9UUQYJFkxmzxX3*X}OXiGP?ucb&~J>aK{|40bU7z6-==}!@)XMR%+@~BO@`l7IZN$FH{JvwAaCupT=b)D=T5^QU0Ul!EeUxZEa7C zjTgfLNZGANimfJVU(PHSTaEY!1RR!dz;2@Qt})1;U+I+R-o3-xmlv`%a?I0kp<1I* zCyV#R7JSDTUlo2S(yP5F)>dkm(944q2WZwm<=54&FQ9?&!3t6A%bCh z<9IA0K7PCscVAJlqpt2TB)$2LxYp+8gVX&9Z59$lK29LKCWZf>{lCc;Ilt&iid3IE zEvyW^wy?N|bwv^j(}aOBGC}BYxU&=0M71jLIkdSsQ?GdCv60b(^+hp~SYn~glOF<# zl*rd_hFs4!!m{6MdS5xcSIn{Jva{KQa}!_XrnqSbQ>T`bskV{%tsplWj4M_AGn5Og z%ruAf%Th9m?*Yu@v!a?_C8-L@|l8Co)%x~FICqB)Q&)wi<5TBnP8caXBn zH{fp`u<~)_nZ{G}T9>L#(T^v0i@5ui(>2X4m!eC#ycJLubzK+;fi9Wg(hk#=Ababj zduq?rmQ(t-^EyoJhXUG2Lso5>*FNb!#3jbnyka@>cmr?XJxj=Dh+D&um z5_0EG^RHJ$7E?2_mvCMWY7vm0@inA9Bp|wI+9_V}GNN2&A~tAXXeheQC|`?(k}~dD zYeaZtBv-UNq$&U-CeNP52{?W^6w^S&1X#Ce*}Z!%8dRJ@OzN=vzJC2$?DE*v&w!mY z^9<+{hAj7@xl9itzhq@$huLpT)}d1fd7Zc{KU046D3;6ginssUw~cUUoYu$3j{K`M zJUxZa20V}Va&(HIMt?j*r(>XneSLjM_3+Zt(qbgJa1NoX`YT-@_+1Hn;qZt`)L_0p$BcpDG9spuZ>F{o%2-Af z9NIp2o#ISgXPAKep5ddgq4qx41gf<&v3h;xt67vO&Vyfu*2tDAwqDHxt#U(PtCx zpIk(h9E;kZ?g{RG4Y0$D&U~DWN`7#mEdhlC6qQ z=`r=iiwGkB`J$Yhm;tSV?8^%0vvy^*3$2l_3%J_iMt12@ny|T=>gtZQK4`d@uN9~4 z%1W%q+)yX?79ECf#I%#VlZS<^RenH7NO)ox8X7uL?KvWM_jAb#j}kWiSxM&uNl8fs z1-vsFVq)T#ZP06=OUXe10vt%g1;FQEYWb@131GBtyw-#pGr*Q_e4bE*B-O6vI?8`G6@vCdnfbX zUJ|^nQ`T6UUo`s_iEclS8qnD66m6kwm*u1q5n|wW_?VVvM;cN6TD4WR1xpHBis3aj zB9E!2@@L|zx*^F4-*ueVb^Jn`wwb1xvp)SlJ?K@EKSbdo@2~?x2BWS}+N6(GhImXz z-mPg4Xm$2_Hf$PlnEZ5oM*Al#?u8#gBAiGf&Eb0736h02Bf(Q4P{d7)sxc>|A)Hxg zdG`x3^xV$g<`W%1>FdgSU>>+KW9~uc>Us(LC6{TUcJNk0o3{m8svzrFR)pe2A+~?O zR98~&9TR&`dy#Sb`40Hn#3Up~2L~5}n{W|G%#g?e-oMAj!3m9sAkj+8%#<eTvp=ZF z`VAO0*Pseup1O^Vjj8E;dki06!ka^5Egc_%_5l|fKsZFEhmM%0E)HlsFtGG_55GJ2Xe=0cg?3qNGZz1N%x(W@JU+Tb%C8k8O z+FQhoyBI#R&Jj2`*k=Oi7Sd^l1V4XT&3AVl>|ZczNg3IeDKPX9TA9GN==Vu_tVy)t zd9>B6e*5-qSl4S&516Q_AFmDle)w8}dk9z56s1 zDi8D2kN4L`Jgi@xcWEMkC?imoPkVKapB~%qVIDWFYlf?0`1Bn0*ynZhy;$m~642B! zl#5`aDy~eS*eTq&=o5*-{&4x>diod!!tnYKjuc|F9GY|3cj(7>)1;QsR-(x5VCnHv zL-RbXinRG4&kLy+_*_(TH6lMN?`+dK$+cB*;v;S9ZS3+D8-cTYlw*_ld!j33MH2E_ z@>V6oy#Z8@1sGwp_k z4P7np_q~i~h9}Bc!=;9z{N7~Hfa+;`_|yMqE-F{2#-hc)1;sf>N~N3Nn~u3IW~0la z%Z`&5pVKUT&-n@o>#K$5!NESSu^z8zUAl~JX2$PzqrTqg40Yz4zr^NwmOk3w?=)O! zcEYU3R&v-Y2@zOdfA+g6COLC>Sm)pp`dCm>ny((`@l|dLdK^S&)P38E*KpH5F)?v+ zem*iH;sJvIG`Eif###lPA1$S(ruOuxBIms$GjuQx?s?D{2{Z6Uwz9IbWBGJ-bt$s^ z!~cj7Gc(U>=BA<}0rWHLqW87S-j?(Ud@hKTxh-qQzi7*H6h$DhkkKtFtb4EmzhL8F zH&yzyc({z_{44I5-zzf2JH0(fdobE-?|(`ZE#CI)=P$Po z?}j|ZyRlnG6$3oW7Qgz#W^u6I;a|F?Ju-fR7FkWi7sF zWA@zK_(6|>7Sf5{VOe}B81xnpXKLjSFUhL0(o2B;nkEF}#_39JCogFc0ECwat zT&kHOAYZ)voz_NOPmdf?hbnmnRoAaxeQaUzFyr0(_rO));2MO-#aTUl+UxQ9>||R> zT>RCWH$Nc4b%$&e6%}Kc8+=bkw(I))HRR;{&vtw3#p~`3L1%_RV;~_R!NXIe@vEz~ zueUcCJ9cfNhJCzxUU=%Cm$kLEo0}Vwn0@|Qo|>wg-u!q|_-M6cV#~C{O5}9FPflLG z(qWM>sOf^w!GQ~*5m$5@bmc%j66hZpZv;V>2IZi1cNw7bv-SQ-bIy=!w^7=t|Kl%qJmy^MHssZyHs6K zqkSH)JaXv_&=A)bhcygmQkdztv+ig+nGVJ03zw)_H?h3GN{U+lsQHGOrv79AALR%%Ew*4f1iL7k3oO%!$jo#bQ(DsnTx9{rHDtA=nF{FK~$o1N{3sm z>=-oTKxOa+xws0Ae}C2r3}=R7-0+bXuqhW+<3-OBvPf5 z&gILH_74PE8R_UQS#HGGi0oysak%gV+2odFC?$xv?a17}UpF#xOuN4&0);n~IBeus zs=?WEN1ULSmlu!~r-$ojMWWRko zc^jJddf@W3waF2{NC#ALh#2%N4Sx8CnwF-0=hQ?m*38T!h0hK=BGoQO4zDHr^oWQj zModOfu~khCAN+RS{Yd|H7RYb)#nO#u@ir3sUa+9eDY_8}2pW3mDsi~vo;`*;I*K=D zLpSlRE$AY`j>B$Gyp4TyP4Q>^=#Gn;O@PZXzawfBHM4EhSVuRCQJoT|_t}GP>D@ZV z1c~OE$cFo&*OqQvNko6-8r}pBQt-i){LXcDvhqolxs)2iv(uF6pq-122~nna&{*v&LwH7FRWK98`Tqow7Mt%*CVoSdJ$N%z;r0s;ePJ2@=+Sx|f`(0`3*efUY?_JZ%4s(GgjDu^Byl zmMV8;KEZo$dpqFcN3V&StgNijZQgl$dTjfnW%kg>TEyohB~8`8#W`tskNuy_+Fus;b7tjy*Ar9uRL=`KcL~IO%2AiYg)y)$SskZh?v36=3qX$J=eY> z^<`U%yqFl>jKWQ?84>|GZEe@tU*T{JPu>ITgSXcTFOgR9)~>* z4aR`bpN{JD#&|;0?YP{J<`Wdu2|TmTM3%4b&zY7`2pbzCqu}^>uer9fO1s3gG{?zW zG!zj%eH!q$Wu>KEdB?fBB^|$h`L~H30~ZWzdtArYtSoXOqMho+w%l)Fp&`u7@3+%6Kdw@I6@4d*wXLby$f`OJj3=e( zik5+qkuli%*)w7aisi+{Ls&kfxxF3OVcxrUr)>EhB26$~-!=aE0dmfEp4Z;WP?5y| zFBRp{fT6dr-OMHAtJb$CjsC>#4>>IdIbLRvO*aMcadXQ*dU6~=+Q6O8Q#U*Ukl40z?~rKQ`nv?&ntvvvjF zznhz*DiXDHb+Im9ywqlPvO8c%1&Q1%ru_SNRV5`Q1%<#HBUx%0J>IN2MjT|&Qvd@6 z9Xlj>uakpssi}0KEnjnU({-cf+oE4ju|dk*Ib>qaDk%_*jL-nCyV0oj`?H{fNZ+@_ z3(NcK&pXD=R%*Wyvb@((WZfvLMiccAIMb*Z!Nll=phv`(a6Fo()INn?&@HJ?mJ-{q;O2bQ6qHm*R3f7-EoP{bL-e?W2~eqarW*XP@NWX`?E$)$l@;h=$q;yLz^-)0 zpH>f96c!c1Vv`XQI|5k(pb(gRSWw`*fxEqM;q_J82W>HYL4`+Ku-Rst&!Jlhaq893 zQOnaSvs)Sb2I2)B9bH&>_zV76sA3l`T+q}UfYe(oa(p%C+qX^6jFdS38;SwCi6!zs zZ|cH90wKWo$@xoFRTUsENNs?8q$DLlFm!NqWMyGtQ25;Y$4JG_&W_!%dbGlM{k$aq z{@qe{m5}gzNlC&z`#Ct7V;#wyWVopJA&0b9$%j8$|E6ga;n~ zd_@0PnJUuU{Z{z>`_+T=s;{|oZ~RCRpUS*dy7P$ zcw0VRnZ^jx7C#%eP~eTVOnn}v9Ba#liv1F{6jvyS)OkQf%e?-`{S7E;@U_2Y++_Xee*A^!_>a|`NQ(1B93;*sHMRTMvbc#17u2|6pK z{%pm1_3>K8`f#XyZ>9<`<4d;DpRbaT7!+F$arRhM(Sq2vkYzn=-13S3VFb(Kg25${ zfIbxMwg@EqcHJn!A6;Gf!n(l`5l;WSQ2A9%OiY$gb&mH|sfyj~fgMmwmw(JbrlO*9 z|Ni~BBJK0GjvCP_KR>f)Ttm_x9^c}|ToJ8;pC$urO>68uxGCgwx96~E@P#_uPJS08 z@Y?b28SipE;&AA-JLx~t1r>IxGPV1$_&+Z|RHO6Asz zABMC@twuYq#|wU0@~<5HQ^#*4*sqMql@Ui>cbV$LAPMCWv#Vu_Q-M~-JQ*eVl68Y= zyriU>a?tx0`PS!Rn-dZ8yU_raa;l~ElM?C&A`H(~wzzgM_x4^12P?(BQp-S)SFeml zOV6|&wi)zlt}rV4RGxUhzkpRgR*`RZjYa38(9OZYT3@`4v(N#D5YW%1GO?gfhLHKt zH0`rgqnWo+~#pvw>F+LJ#4 z>=z0B@F;k{1|+DQ7hnk0;q??uRf+SMJ^zy%>;GH;Jtg;sZhW)Krg>SE(ZqPZ0D7D!CRG8EI;2%BRE*5RR2KJUDm(Mf2|`64djKE9QG1J1w1lR_gcv z=PF>5pn#kD@Av=z4HN(SP5ys7GL#tyD_!kD*8>^2>TIGnOHI_pqNAguySp1)1HaQ1 zpzJOEuyYD2Fzx&t6$QobcOR9Ii!C%00nq>h8lQZFeEsV6>(!MNjU1i6_B1O-lw3QA zsr7HLL8V>Q{+6Ep;G6|52OU}zb&%2+dy-KaNrk5av?_qtX!$vKvy7aF#|c#C2Or2@ z9B$2$XkO*NH6~jsz4v!Xl&PlY=bbnINCC%3N=o|aJMew@5>@=^^L`#@&M94>zz9kyp~b$b}&jF3lK@POn?COD@6S(|fB*?NP~)rC)a>l}4c^RDmzGZu@m%iDX>4o+ zrHPEs`Uav`;iRCX1U>Va^<8f@wcl^BuYsnd6fcC0h=_;)5$y@2XbDL<>w^amT3TAb zp#V)hl;Sv1Zxnc8(0oK%0el0xIyyRndwp(huJiqAOS(b~lwOmzsBe%zzh4DS#HRXi z4wCHl?rs{>mqto@I=ZOnXgo>*Zf@?v($c}k#%Cu7n}LCWW14+V2M|Oio$}&E zIJmg6fY zEH^JNu#r1p9$-|A9W1t@XyJ0%nB1Q4TnE?8&O-OO)QSK+XzJ)tG-};np8(-^96k)x zVW{#I1*)sgyGwoWUbq{<+qW+x+&nxr$7_P$o8h2`uML6y2HH3Lpe9<@8CW3q{WTEl zR^y+PUr*k2^)r&S`&H*_IsL5}nb=kdSWF=`rZ*zF^SE%*;$lv4`WVqSC$g z#ln4ctU^;yZ**iNM)WQ_duKz#G)Ru_dn=n88&M*j0>}ncur(Xqp811+5>e)F%fbA* z#>Vrr2$xB{2EYmn@A^gL0@jtn{Corv7OpC>nfR3U>({RU5?0VK;5QJYZW9rZemp%r zGvuQ=VS|Y8XgItO7U=>5jSSW#{v}H~dU|N4ybm^}AR;lbu=eAtN6!})PR`e_Hv}9O z@I_C=RC+wKzs;xknqi1BCfE_*9oQC7Rxw$FKL!|896{orQ865!=jwdT5759H$jEos7qNgR{B2tlh>6awF;lB#JHM+RD0u!SzRma z5dA#dHCUM#<)dt&F@|Onyfq!SO(RuRRH$=?gl@9)@)qy50Sy-s5z!jK8YAlMRT8!) z5f%}#w?09I0DOge3vdN?MkbbufIwMArLHEou#lU)D|`1h9s&vHJqS*6a@Qe$n-W*w z!KL6`0Sj9a)h557AUMc0H8jv`;i!Yy-P_wc?krZ0R{XD_uNNC4K@X5GwAOAiUt(i# z@WxcRZqI?W18@>K9P77lp_=pa^REmQWR#b?fw{y2{)HwF(vqd6CA<-O`_2T>&ZnHT zG&EaVTX2bwRHE^rp#>0Hj~jfg#>#hp22z0T2H6XatFW#i8U!yMHuhCg()EG739!yA zI)D}E+O<%C)?{R4xHp9kfB;BOPY03RlGhy;4YG8V)2a?6TqC1NxH3}v`!^RIous&U z^8A-As&ZAp=!Ru>^s;(YZbg26O`y9%cmC$>TZnkijmi6V5mi-H(BQ)@!s|T2A8yav z^WOlO7&6J+{5-UN@&ILS-7;G0%>ud_C>yAgkZgq=mx%5)&dtr8NK5GHdBEA(>6)mL zh9U>uFfD04x2 zSzM%X_`KJf*0dZ0w7E(zWJ55uiF#QiNQUd)|M(N~Uzwh@`Kz@$-v|S;@(q#y@eXsXealru+}WSaLnyUteFO*`WbEEv)}W1f7cP z*57;hKX7p-i97*61hhz2iaW!^fB^mi0>lU$VcsX3(u~$Z3=BVqhK3p%Qm&O8h5%{& z1sIy;epV#&>(}1yZV0Qm($kwl;jFirn4);CK8J@BA1<%>A6YL~`|w}6@ca=Z zih?Mgpshdw?+nsa%RB@byHM{c5aJG&a~zy0zLtfqCA5dgdyA(q?B_HNs-&GIV)?9T884LOC_XqNaBl& zi{FM;7?t8J$1BV7^Mh}E+u7L}$TK|KXut@SkE^mOnbH`tYlq+XQi2@4BvIivnG;(*QM(_^?bI3%g#-u|%rDB!aFlds$q z;y3NM;h$`0Z(meYw7k5`><_j5`?qgbwW=gCN>3f@c>lF&3)I%tp&!KDXYjZ}=m?(VzLbQ*Bm&B!2R+|RqfkcxJToqZkdC7#K=vX4V?oP-Bj?z_{PSPuds2{8 zP5ot{gE#lL=$YF!sqvmc`a)`_Y+Z!nGc%vt*=<$1??Z81o1Z78qFP^C`V4kisBVyx z;C7FXkNFJ2*PI`4hY_fXg~__t-@bj5XRz=4qMq|%u=hl{tNE%iXY|Zuus7g9HfCmQ zWOsKLZZzlXcsrcG0$@o2WP{8X%m3n!=a7z2_r+7v`lp<(LN^O{u)0n&wmcyb>ipl> z=df8#en1lld#EZ;&4B03&$s1^eR8Ah^567%1@IA?4^VR8bETk&nImUVjFs6^CL)F= z3EXjbc!8h*zVY=%KbMREUda?g%?VXMZ=-JB^nz>zgdX-a2B7NFp!on`2!Dl(2@O-j z#Du7jP-SBgG#fj+yI{XUy9FvG0O;%>F*CEQb99rLwOjWFti`7@E!POKJ{fO`%n*cp zfnWoM4|305-guwf!-sG|e5*dqNxe$<{oL@js;NiS`1*!d{M3|{yW~3d5@^9Y0%lXf zK2j1A#RQQmiEM9<|7q+lsH&-fdG8q53dk&A4mO0ng#~42SJKev9~+}YoK^;>AX=uU z)wH$mSq*c40;)V8I$k(&kzrvhhSjl8p`H)%O?UvbNCqw(G$io!1L6aJH}K8%O-<6! zQ$v+%XpoSWX5`~@h8)kDi-Caid1H4M@6si}b1LfUV?dR?ynqE~y?o)){|gj>xUUBN zBBtG-%x)GgXAe9%v@AY8J^-4aW(EQo-IaL%^k|p%C7$PxmDN?a4h{ke%tV>JshC(T zfP8`*H}urh3cwf(J{dPh=v|>vfh~gK(earlJ7B5Lf5Pk73XHUHzDzjC;Kl)3FD)%W z*x!RMmU#a)n?a?PhDI^uL%>EM_R!QngPH=70v7lG6*@xcW8vT+Kmg{uHDq}tKxDeR zxIh!F1zoY0mJ0}KfG>^#SKHg!?X8YvBqxh^Bt}PTL*)RhO^-FRKjA%5Vq<7-z65pa z+$O#@T9#LX(lIowDJc(vpvOOId6uU`QD&AD{9kGzCjT@MAF*Bt&}j$~nFgTj7JS2)3+ zrtJkASHH5qq}BY(CH101Y(YNXabOm>57I_)u~W>@(fgz4&{^ z0=ESPj{yZkZhh)M(7*fgsD57a*;ktwvfktQ4}ZVy0vG9x8?j+wy|1@_c;G@ZgbVF8 zVQ#!1AQh>(ZR|Pnzm4&@^ZYyO@PB|FVYKM~YzFB652f}095SLCHMznY(>`Tes>c@D zy6TJmcfDX6DIw=UQH{wcxw_fk+Y43rZnQkE^MCV9jx}vF1Gp+J{oBtiEJ~urb@JxG z-~zK9{?MKrP1gU<=Lr9)vZ}msB_k{Aebcm~soB5O-KC_Ct?_pyNlEu*WG?;JyMk>K zEvV_Cyj(|n>jg{+34N=L#QWmnR=7V;;Jxq(bw&N+^@nEjUulmF-XRMdQYL1z|<*48oElO8aebsx49Uc&m9{{nfGw1lzo9YfvT zJ@~&#opOL>ot$_P8Ch9uoN4;M3*uQXk}@*H2W?)tgRHKuJ7_aj)e|4OOz$u<`nA=> zg@&eNXOH}DT$I|lUY|$t5%Z?)c_cW3#sy<3w-Ov39Dpc_iDy+>?~T4{0|Ny>#atwm zl9GbP5EK(22!WUpeBn$9WB~R!ga>BkNb$fqh%B_1+_>cU77}J?HvL_wZdh1YC|t;V zoBR72HGmG?-Q1iE4@DlfudASm>FDSH2L%3Y$hrFZ2w)mYK_}pE?%$$ZcR9RUVmZ|F z=M~(`M{Ag~>S%1F2l6I4865$`KQM77PoF+gRwjUqLQc-iz>uDmbr?dAGJ;IX%*+hm z1|$q&uZMvGKN=e`5HPkko5CGJi_8{D0eSY?H8oXLPGHTPc+miXGSbtBM@0NtuPK9$ zxwrQbih3DPJP{F*K#6PnuU~Rdbp!;ipCh_{Xx^VaQ&&+5fia1&ut(b3W|o$t?<uU44!Ad5NZ->7jWOf~MCo?OiY2aJ2Sw-S z&pG(884Jk7RaL@gXP1ChNTJg8hFl3ewXpK9&JVT1Ux2;<-49k9L>x;?=o!9#`C_ga z`7${ZkO7()9GaZ3UuB+5R7~eEc{UM{p!uYR5xtc1eT}lhhsJ@Jl+>o$dSLGw;3ja? z06nXwqB6DV0^uNUrt!m?>&cIIyUPQ|2M0h`#oxZLM1+ee0cWJI&k<%l5ZEDixI{eL zBSW!$)ASc*qi`m3$MfJeDk=mIp_kPMmw%u83CEZ{o-5Qe0Qc9gUq9Mk7X_mToJrU% zF0KN=trx`P<=X)Lm0Pc`4&X^&U>}ZCgeZZ7sIO0nz`Oy3u6wy;T$bjT-L2j>X(WhAXq_{mhUXl`GhkX`a3c~Czit_XkFu3@oCDZg$)=&&8)0Ex91d)Qtva7 zu{$t%a|b9JLBWcwELm~!`r6vs#zv|0;T&G8;U6Xivc-R?@l|NR;B@8Y<^od+921BG z;^N})`%nf2!mC%&eBd0xmBBd=edp1U8=zrulL1jrxR4;=c$=B|y=50TsKLMipc@Eq zI%YsAb9Q9_Xl`7QmXvXWEg^9M)Ua3aLayT9!D|AL4jK^_E#Msgnv)aw z{ylZT-1%_ZeL;TyD7{l(T=IHRJ7C_2fSg5c(b4^=tD6EEpEY9Q=T8$@K&v%w@Sfa= zfD-lM#S6%Ru>N)lz3~>t+bN((+a2#&mG=Wun|bZ$=Lg0iU{1iCp#q0^aIo2k189gF zH*VnK;i27PV3-3$uzGLOAs%vIax#s7^3!L}fE9#u-15?VQ}hb7l%QzAWTVE}nh3jt z=#?W|G%@HtVSIv$)}i+ly15RF`%F{olW(w*pc7HvxB(SjSG)H} zpAS(c+J)u~whP*CdU|>Q{~#@dNJ(vfA zbj~JH7?;x6YH4M)3f~w~mxZ}GTmu&G(1PgNwQCUBYh!{yeM4Bo_H%J@;ot;-_a`Kt z1=*Mm68%23lHiSs_Mqf^+6?;7=k=;x!SPNt(>-$rgK7_1#SZ{VfMS&eZ~Dw$Ay9Zf z-dzQL1-NT41wuGQ1C$5qZvyfJY*c9}KO_Y(;%I9RLHAT%E`TuIxx>Z71F(~wjZINT zrn$2-GCW)zd<;rT>`Y7qBqR(ai;#LD5pD1607k703~Yz?9EKvm<{&#=9UV;`*$Oow z8HWK<#GN}2ZzAvk;9ZQ0iaL)npm_jZBs?zs-3rA$m|s#;GxACs7%V^tWcL5F=>mh2 zz+b~T1b!4$clga+4i0D%!Rs`$=>n7__$q)b0BflwudacC7bINx;|x#n#>NJec0l=m z&WGTfoUUBC^6~w95RVw@h?gATqN%TG7QLX!a)lPLzFr(5<1nfP7D~1lMnoa>IHKFY z)dBcS1Y(t!w;$Z5P$%K2HBHaX&tDLOnidxq2eknxO9KOg`}bd#mEA+2CtQP00R|Od z$PoS-x+C|a9Ww_9Sp0GbZvYu!N+u64udc3!UhU`4bZA4MJqDI{Mv560h>D5|^4Rmm z>zqcl2ye{k-l{Ib#L5bwL|s`KDED9O?euwL=wi^{LC^yu0Ic)q*ch-{uwyb3M{o)- zuiO}{+}(mf#~W9$kd>7cNKp$8ckh0KY?z+Ta5E?a@-K`+KRE;h4!!&EXco-Wf~sNK z7B#i7Kr%mN`kxm-OI4K+Fas$mFdI?^TbA3ygD20SsDi`?eVGgRB%oKLs|6VW=5Z@w zLK+SdP>H0hI@~apf{pzi%I@Hx79M9JdWG*Z$ zz{&uL11B8f1KLvHzX3=G8$W?z_rbv^7_fIz0 z!*wl5$)}(l!dXCq6B4{3Uqe3$3^B~>90Cys8_&$n&Ug222rNNlq>`c{rVr$KP)A`6 z)6>$bKze|p3}1tVB%s}d3LN}!++kcDx-xKWfbHsIK)|$J85}o=9^g)A*z~lt_<4B3 zchaq&KOZbKQwsoCcaiP7gPWkuz4Da>n%=SN6ch=vw=y%OwUNVgQQl9vCvsCrujd2Qv=2T2cf`cThUo*P7WffeZEbJ?BR){~fIsJ6?i>9@xz3og zzh|BfYaHZ}$n@p=_fHK|dNp2g$xLQui@@k`M9b^y>K>dq=^z|@d>Kk@a2nxg0MbW% zT4y0?S3vlbm4&41mv=%z-2!8?48>cpZ5@)s$qX4;n0xy4>B2`U2v_h!f`B-~5PmZ7 z(M=Rm=TYb9(H$*_a~GFjNswmk#DO@`8M+kH&Y)llo-2TQaI195)%NpOu!WQdTH4w` z5MNaiJtd-`xWmE%NPaS}`pBOJ_T4`y2nzvn7lyt8mq0Q)dI|(ySI}*+q<}W{An0aJ zO3DQUFm)=UlabM_#amY3a{TNGbV-@s+CTiVD%7lj0Y=@->}*Jxg<$XEHv0rmQxL=f zkOyLeMCAE|CfJW?*44TLLqX`u%gMn&pf`Ye0F}600fwl2p(4_t$*UZZR>v+#U*z}=?WJ8BY?&MqWZ-RgZ!hKpHt z7ZXM~lo6=7E)ywL8eWr#*swpdKh1t0Y!Em#HIAWq;E@F2 ztqG~$foBb}#M3=#QP0hjrgVFNx^5>Amo2hCDq6?mBPy^WS)hl$Ug`np` zD1K*RVfmVxdJzE}2M)xRl*2!Np4bu7`&~zx?QMbFg7+K^2Z$JS3LU_NH!a`O9q*Ez zKw8fX8QPp1JKjc+`w#>!2O5@1LCZBF1o|ETKTy{p3B#Q_IKKi08s+qfB*c&%36^=^ zFx3mv(7_vImv`qqLkMPQi^txIHjH;adqyAGO24WDy&GWJot%81(NVpgl$T!3;vxV} zK>P{Se5Ona&>B?#QfP?5GXon1WdCAP(qgvgsTe#U;5$5Bf|WI}VQPafu&2fllt<1) z3k{8k&!4ZKexxa@}xhi2TmBHaHx>h@5aNTI;MzHjV6@k?t%rLMVZ;r2U~HX}Ab&LIL!=k`Eq$ z3ZrjeFy7Y}zQ)opYquB@+|n6{>IV1~;zxP$H0nL7;gvcv$ODAZ>dp#klv3uIzmUZ)o?7Ee!kfQy92 zO)*Yj7f>9i&A?-P^20#HCPFu;bP;GCY#kg@Yfvzbf8N6#9YNwkzwja@s9V8XAk~`_ zfn9(za^(BTYcT*t3r2B}qE3t(E`OktWv3CPz8NH44c`A(+$``=iJ_sPx4yogG`lZ8 z_+xhUbY3QfFTjlp-r`)t$ftEaW1RCAs5*EOLAoJ^wE$tA_Shbc`v$qB@S=(9HV84x>A(rnDl zuLEK&H2V#yz2%WtyEg-674N4GJLDE4Bj4lti=UcJ3Y22`Rp3b$VDGS-J!f0C>aE<_ zI!+b}`sc8%4D2dXFCft46aWke0Mmm2_)yNP!o}7z9^X((xe9Zl^kkx@)|(y$$UA zy&H-E`T%tSt|4L5%LLT)E4hEYeB{I?vt2h2YN27ZM;V+RP%{B`0%(A45&WT5H5R$B z^YBa?@VK-bOYWoym;VC2(v&lLhYMZR5L!MU1X43H)XpCa0p^@FY;M3nmR6L~7_Fk*!ptPWEc{@RMxyi2@zn?EYbmJDx|( z#cAe-;pIlz&FM@5i7OU^M9MGo$@acu5)y8m-d(LcMkkbfl(>DoJU8Cb7G2TS7JY9X zSNuuWhrrIwmylKi8b5`E+|Tn~)eZQm4la>TU404I zCs}{y4+^p5$S%U$480De=m;Bs{sg9o1c{Poh*OjfMW^yQpmvPVuJ622qjJ!Z5~(07 zn^j$X6LaY|{fBKs#dVguGcMTlgqQLz0v;#2T$-Ma>Dh4_a`X~xn(L!w+pw{Kj^I24 zOz{vAg_sAA<7>U^9=)tZ6rTikKHoL=1$6;R13(-wiyV4*0pxRY6BsTw3gdEIdIabW zNHIuCP}D64U*&=e4ENCUR@WFXM=`usUvhH5M^XnrnIPm!LlOYak6_&hN%pg^+l?1p z?s-)L_Jx>VAhXg*%gYNA!L;o26}IxNQser3Bl-8@LSKl$SGo@u@~I|a$VZzcLWWMf zfkh}|P!yr~D1QloVP;5|kaM0tAMfr?g1TJ4ht$G~ZYHkUh`YEPgm}I2^Q(E292Xng zl>%JDm8DzXR0sO{()LK9@<0bk=tSj0ewm7loV=yE*@#cGxAI-%lbMT2>FK-&b9jV@ zU;;`e&~89FD~*OyKg$DxOICp)GPEL12{b#j+V1Wbwirt0Nu{omhQIQsiR5fy60xv< zeqrHV`MI3S78zi=)*VRvUXt+UmPF+gQ!$tF5sqcH(8|YYn|IJ_=?nwtlKf2lx~_Ko ziFgu$w>4C2nV`nRF6NDziR;R1HIfO6Dcz~Qa%&R|qNW(f`1dZo+4P5MWljcNPkeEB zRWJStw7q}{A@M?P9EZH2+Sc`I=2j#ol_N}!B%#vE%E(zw@a_a{1H;JLO9cklGQ`Ka^Mp9wJ_sEqNT{;1Z1gst6Dc!>(Bk*`6Nt&x$ zBM&|fH{8K-4cRK=>+~) z>RI9|Az65^6L`}A9ea6+gtkbgBm>S53nO~UObOF98Na1#Hrty2%+AtZC4q+$ObO2# zFaZ(A6s+p*E;#(c{8t!rUe(@pBr(npNraWZefvwz_s`G;0H&j&3epP)P^4l355Rhz z?hiZ)94Zj~4?RTS3qdC{iK74?mYEIR%Ifkme4+Y>4?6u}FzfT!!+-kOsu$C~y&vUt zb&uQmCZ2LeLxuwKJ|`y!{UuELB2uGq_w3VqAE=rqY0-B8^juuL&v$YU9*YLSha`f~ zLH`vV*fNzDas^B zz_O^QcTWy>!QINhkQ@fy-{-Hqwq{x~`I;0U!C+r56D1;lknc!|)fG?jf6?~daXI(> z|L~`wL8a0XO%#gIl%^(8$tXoyG$=)B?=)13B<+%rkd*eGLQ6?QTPoUVNaKDU&g;6) z^SZyk$M11}|G52ep4WM49LMK)kJszDUh7jmX*Q*iz)tu8nFX5-*-?$7DPm@Ngd{8U z5a>EjP+rRB5t*rZWRtF*(%j?n<3)Hl<8m!zH;_1Q3X^QXM#>X)6>(_o{*E8iu|`#m@gn_u}J8uucx1DX+3Yw zDx((^=t>FIwF#K`^U z&*9`L6d+D%TZ>t-CULmq^&CzHolG)FRaR1jwkJS=G*CrLJdkzG(GylZxdp2VyJnH= z+w3nurEe$hsHRxLz#t`+Wb_C>qm`O$t+0HirPFLTg#;%tbxetY+;}T~-R*BnWYAKc ztf-1ASP-vhZM6scPwab34M3=v1L$kk7?t#_~hC6eN^EcZ{#q z+w-xt6@pLkH=!3Z^(=mLBxk=g4Zih}pYtRw@ls9o$T|HSCno8AIA!*0r-eMK(copQ zApCj5Ma}%(|98jz!l>V)gdA&C)xVFdbBY zOu1O9em0WjC@&)oCHXf9VRt@bBR{k@_+pI4FN(I=iI%crjU-(n@w!7QCUJ7|CYgDN z=#Y?Li}u5%0d*H=XpTkmL%TCOz41C|IPR$11FZY%)Ai-cRvw760JW<&Fi=)#`0I&p zqVdbDg(u>EM1-#=z}lDR@@H7z&5HRQHik_Zs%ZEuXefo*-eVzkbZk~@*eZFGxkd<; zOMCqm0{tqS9D}+$H+m~@Y{Dja^!PETFx+zJPeE}4c4~~3oV?1xcXOW(qr4&cpBF?) z`d5fnAdkr3|H(*mmoYSo^m70FEzaak52u;`{U4O%#%_nj{`=dhTAZLFL9iMQ9K#r~ ze|_6uKbs{)@n!Ra^#6P#6;lYwLx3Yz zBk&brwjZgHUD!=$&mx2nAXh$Q9Z|dwTA9`Os-8vv{W$z-W9z|_AzKq>VUd#vOkoQ~ z_$L!1W7*I(WKU@@UYTN66I3QGtbaWTKVuwg{olVYSzUyJ4v{zEQojzb+w!Waxvo9S z>f5x_p&MfgwWujzT5vvn7t&{tk+ophkrHsa4!=5ql_6jj^h=5HbFy#YaEs9Lk*m(_-??s zq#9&m;tVc~mX_;|j=5m{b_&VMuK^kx8DE<3x{4K%dP|TwXaH%R+qSJE_l7kB*ioW* z`M&P}@<&ma2Fc^Ml{GeMJuCCP4yL9Qa;}YXi+!gz9Of#At|}l6zlUKJ-!3E+yc!!G4wat1fq}D30ysjH3#c!!3B}#Is+sGFN0edsQ6kFCEXDJj`9YL7z}7^J7CCjcZOFf^2;I>*6gZZ1e5B^3>`vx^Hz zK{DdcR{RQZ8HhBh@UKHd_*RtlVCk^*mp1TlaKNddMCiRX3(Ck4kv^-f9e(Ey1jyZJ zBpGQ?6#*WTk&%H@;e-#6dLVCPlT*Ml!1y@)h(F-bx($@kN-Nz~t^^ z!7DGvaZ+1LeVWXFswqI{kDuQjGIB9CLuY>gz*Q zQ;MycS0{L5`tldTrG^dk;wr9jc)qb3(cXq8M@Q- zxm{O#ZAw?-e@yzZ_~}{cPh9KVA-D~31z(n=!e+Uh9h}MU7_~h*dvJ27Zy=}V3+KJf zl!Sz|1fK_Ai`Wy{dW&D44T-WF1hvS6*A*9+nfZim9P8eYoc!u4&%H?R5IQ{rCCgnS z-z#o&F)~i|YS>Hny-a?|z`*5`+v8F<-_=;z-r}T2E5>P!1X~yo@XrkW`_o#$nquoA z(al2D9Z>lTwkCkNfOru_W@T*b{SibN#E>8rCpxm!6cv#fun+&w`=N(Sr_rQAbqW#) zYXVym<%R*CoSt5u{iqIb;(JQ2uD@YPfYh+CurOdRBAtdrN|*WJoM)u*k1}$aBb@|k z>eg*lCer|}@q1Ck1?W;DX5jd7NRw0Eym0_;i?#!pKmHi#>qBay9fQ>jNiLyR>QRi1 zpukH*Pk$WuFXvT!F)AlOEdWwRko#hii7zDy)zJO$hf4DCDMBj*A`yrqY8Z$^(las| z8ye(n`@C=@K${Ca1E{>!a%!HYQQ){4sG{#jMS}n&b8mAYa3ANL3{AZxH6qBlptQYbXq;8yY4)4 zZO6gXpP{2BjFUlKS@L#kWlP5Tw($h2a-+V`mDZ$9aB@3UvKm;v;q}i&f?Yz8@c2Fqkx&V8_8G6OU zWTs9qkxm4sZ?GPml~qzWaA_&Y$@t!!-9$r)BOZ#eJdYI@JXNpgke3=IJ)rzXGv!E}I6r#%0Bfjt~*bw~mS z?>7<>5I`NTsSB^RJeCIO1U~ZwzYrZ1P(hqFKxUdvUWbHyfM*nEDwz>f)6lD+Yk`GJ zWY;d|@i(7s6;Yevf+)mVgxFa*6h|f?d^$Qhq6|DgQa<3s!kN2m8%1t5ZsyjZGXx;} zn2-><-I9WW)b&@;W+PA%zZ6RuA)aV&Iyw+D>bH78y+!t33Ehy_QDt0)HPzL8b=4+z zOBYf;qG%H3phNZ}khVMO5FYqn!_VYA+BY!3FC_G1VBju7x!C%rS9q3_H)cL27&$qg zrKGg1*=+JxyMA3%2LUP$%}x;ICjaJ1@jzdjp|9YxT`Y;q{*aUOg8fm4qqdq; zX9{1mrkgN&a;)(AHc0imn}i?xx_L(Ku^dw>lliqq%3qXZWuK^ZhqpA!M|nEcu8DV zeb@4FLIU5JxbRegH}KD$0azUv0FVmk<==|^I6I`c3&;f;P@GTbHb(6Wfc5~rK@Z*h z37yu!jzYAZL86K7^BwS7p@&8vf=?3atb`jGI3iKsKnQ@frYC$KCm7Zd7JW&{YVgxm zj*AGI$V*vA;3T$h`tl`&0c+0hFdxCYL6UeNWydeA;9i7=3tEW=ve4~>!cLZ)+*~L@ z$i0ADNmIN;75?Gp`#Q>Tlcs%Co z_;@Ir7@=_CLTvr1XaCj$tRd;1NBbErWpIXQW@mo6p^gAOhAl;QoS&&(SX-Da{pnK< zPR@pCQR*%3bo`~t26o65LZbyuzOX^ghtAF=6alamp-cV?NW-IObk3#qG)Lit@E4x7 z#oE4TobTua0WYAV!*_x|*FL@zhAf9i6a0X~q{{?egS&t-iBPciLj~W&vYp6&^9H(% zZI)?64{J8@?Kjsq-T!}%E3RJ$3+?+jqdfiG){nMwAQ@~W6zAF8ov{Zi19AJiY z(j|PN8sfiTsD*#(EKEKHTNW=@OH#-3w2ZFNvq-DA?0F+XK`NR}O_kz%0eGo|((Q)x zoZ%urAH`klAByfx(($)Xojm6PI={_{+H*wdxh2|kFp_K2VV-f)4(n;QDT2I{PST`G z_667baQe39SF^8UKgUeCtNmnYQml$h7_Z*$6c*ZcD6b&c>GQYlz>k3&ZnBdXlb@w) zJ2;=;ece$$tEQ`kg6R836)WkRA@U%mBIpTAsOqkjI2MAqVx63Lxn^YeW|dXW>(>=I z$8eo)T7MHt26At-d?JwO$;dzgXbej|E@#;Ea9W{}mkJMotvE*fGGPS41Wrp_YQOq? zH-eoZRkz>2TY>Wi#Dxofe*T745Plje4di+o8p`e4XA2!ATuSB*arp?g-uG2;7ZmpJ zSipw+W0Rof^K<#H;jVzc1QqZINn5|;n}y?8J1&EO+d#Fk$H7EnjWi_6%fB7_h8vlg zlM|qkq;)3?2S*BaYqVS;$5vi)I_V z;9@?FJT@s9uUlGXVZ6qv1HaU8gX|kpOz1%R_8lkh1TUZfbOo)OwAMzwP9u}9D0A{VC zF2s*K?fQ#>E-JL9QK;^{6 zSqb=QUJVo*m6Lzn8H{-l39w(uzTQX)x0XUP8&H--HxK9|XQa`tRV~TWb=qr;zb6nq zHP|{4QrZ8d)H6|9HWxMNqd+!RR@$2t;MGZ=riBA%`eTz!4ldK~lKlMW#^IE~a-Jn^ zD`4W#Isr-1`F>ZV|6qC8MtO0W-=cjBhdFjw?6M+LP`SKr&dkWl$X3(VRCiGO+LZX* zrxPD7$1RJO`o0g!a|_k&vJ|qC&)WJnEaN%djWI%0^nn}~)z(W@)gULDEMDCh_tctk zGBQS|yf0k$Eq0Sd5!5GAyl9G=pPf#J2S%IXypGNc&RUetDHpZ4!vZ=_^dQK|zZ@ zJGq@-8SM4{Qu_M6Fm z?5p5pi86AsE4L9c9`*s$Ldtdvu3pc;fc!=c=nApy zo+NtQ5*WgRZ=Oj4`Wj4av5wpOTWzY`&*avh_#h#t0r~9v#kwNPNB7Ls$x0ywQ+I1q zH{WcIuaASH(_|wwQv%omxR1;37N@3)&$OwLCZu9r=Z{T9d$y}*)^C1*nDb@l2jV{( z6IE1RSuib&$5IhZ9ke+)2;#}hS9Fs4khs>Xv3|X_4*8B9Mpn{s4=;#|xXBwX+dX{B zflK_Y4-0i&8P7P{rzWync~gtirZ^4(yd-PuotPee6bOc#z$4IpqR}rBN$m7j7*P;r zGwuF%b_hCyLd;^Y0dC!2JzK z1fdB)vz(&c%gQ3PNJR0A!#E8A%@_r);X`v$Ry5fvaplpaLq_go3OHNyc__-DfkAW} z;Z-|`M;RJuB*IYC=gWHD&8sX!(qlF=SEfL0@rn1tFmf-jgq-vmUwe7(sQYc}NXq1G zQwKq@^aL6$<@YCnOgR}@UAi<6W{+OQWB15lb>eQ$;1&z9>h$j)*%9t!fn-J~72`xPq z-O}P<80s?~M4!M+0XaR{Nf-o`pdI`E<`lLJENZw*(Z}G5c0-gBK0~Moz%Ojk6vd)E zhDC|76>Kal!sqhBr5#*R$B``YFgZtP$1Jl9Br?dP2Xgo?wjN=85~=w~3V|$4#*rPO>s5 zpZ#->KC@&fO#~1|T3-^{uZ;?v-*U;C@Tz)O75I^6GOe;(;8M5r+dA(~edKrvXi|C; zPwRzmojZMkYj1{5e8o>ufs`UkEiHV&h} zn}q3dMkz3-!f4-P&G=hepHq^TqqKNJLcWB#KncAy~Fg6tNU%ksle?)tP5dX)3w9Ux&XDg^)auoFvB2MQ&(3~ zLSi2Aj##4>`r&nEM}-CHc7D~iazWD#Gco=C8u9+i>my`0_W zy?J&NFbc5e*xdA7-PE_Mp}=>lwE1_<`joc`5#>e@8VbtEm87SGe1-HkWqedmm@QOQ z>1YN76U7@6m{t1{2!lg|zWoQoZKbw~eRQz3EwkIE>W3jUY{55c-sp{yExgz~eKgck znIC?yDl~%k_ZXmIgZ2Ql`?+&lKkA2uguu-}Ms)o&G2c$H^)3UisOT(|2WW3F-9=$A z0h(~YaVI!zU8k0E-n_x(p`&)NJ%^WgLGlsa`fj_D;!vOTdQeFNu(Jg zt=@9ZGs@`oAmRteu=?4Tg)1qVYs@P6lZ=}eGtJEk$i%-t+m>_e@zP%0W%07EX8m=Am!jUg~A~6s+5uux&(yVtrPC%_!6=X(qf~1@P}D zrR(r4^@)?h4{#0QH?LRsPrL+k0tf+^NZ#HUX+$4224?omGOJ?l%a;sXm}N5eiB`pF zHvlxPFTEeT2a+bIR)0(`XiX)iuI;kiy~}E+{tf4|o&I9$I?7e;sJj_d@2i$vJ)|I~ zi&}iQL=zb*!wm*SB19f-Pjtgf z0#6$_2JeqXWM!n`J@y4q;RotkjRD*snG(6faxGf~fVXAaG<9~O9|#sJgHd?}(JfHB z1Sr=?(w|*FlDlceocm8@gKWK`3ju$4)zBiMKWs-iPB1&lqZl4#^uhwXlYW4;U_}j^Tp`rAwo>nMhhP3 z@5uaXA)wp{p-<~JOKiA#_$yjY1nb0Ot_ToY?VU1iizr{_F!yd0RXpfF;IOER!2Esw z9FTAroeB(Sz(*gw)8Y-`gG2>fm#yCVF*CoyT{`S3IlTr{p4)VWBEgG!0C9o*;e zs*t$29~=?7VX^~cy!-bvRYwC0#vdi$P~3blP?Dw7=g|m6>@pVo_$Qsf$E0{34a;3<)lB&b}yf*)`2#P#tjoxx|ue!wG#yxexrb1|Ywv>Hu zygSjfYb0CVwD;|0GsG62pPx)9G|*Iq{YXiMCr5_TYjCud%&2f>{>RmGi7PE*K1)8) z@(t(YudigRD;+4UeGxV*H97riD0yY`??aPcqOZz$mQ1@5>KR8o<-cncJJzM{_(N6% zBym31Ul$q*uxwnK9h2w@#vFui9N^Wk?Ps14+-Q7l4H}<-T zs)~PYPMy|_5vxNg;lqbMwSyO)?^-+dX4I>s!Cbx;!d_;$bKT~z*NEWgZlgE z@#Al@vM$@$sP5g5TSQ^+o5ovcz2O`H5Q{Xfh=`NOsK|2pOb0nWTW~dW3#eI8NQ=X+ zlADVb1Swx0Xg#1bx^?jlqErYD9JS{wDl41iHd(}~(Q#XY>;f2c9*GZVVPTO54I(78 zfq*Hd*=rYo)%eX#a@N^=Z%RQmmmi6$Ih6p3a%s^sEmkEm$YAq}q)=isI zo<4=HK&Zd?3IqXTV{QNf;H-gE9l8OQK5O{no~lJHS;Be*UM8Y;5MBqcDt(Oad@+*% zMOrUMw^fU4Do+Y5gaE15u^Z;50 ze`Qgw_6&!2J3kyp5TNMl=0bFC{V@II%i9zc$&{oggK#;_;seV0+Wpn**N5vTkyXMb ztY-@w)AF(#p6gf^i5og*JZis$v%(W2sDKwhLZTHTM*HGAJ{6Nxu+`@@!6NV4TsSpCN^Y;4lZ<3m5=~zmy1|M9hWv z5F&9BB-OgOlmSf0+`1M18Q`cmB5~uu15FUvV^yx4^gX1ue;*DrbjSdg?lje4x1&2i zW?4XG+OuaLTUy}zqK05Ttu?Y#Q@Ve|45+XS(`T2c70?xG=q%`S|Pu6|6OxM*ikX83-ceuN^ z@T9;o%Z`;^DaFJ?YmMBuMz^&5HaE$*n#dEr_Msv_ugt6b>zNGyPg-}J!!=CTceb$P zL!n^WzL%`^g$bDvw7o!N+dry8e%{-gSTG&{Tkh?}L|jf751N!@3o7)PwJ~INona)C zDafdU2RCcEaUZ&I40l-LFo-Ep-Z8I)$RmrUqs5&v_SgGuAMtMY@d|llT7jsY^7YeqkqAyA8rk3VOl#nb_oia8yW4x zl)-X$ceRZOl?Q?WA`MkHxIs-vN6F5x1%#Sc-LMB&i?{P4J$+MfwFQexXv2ZGPoNUw z$pHP0z5-uPlr=QiKo5jfv1ARL0}&%zNpWW-TL2abtY80s(5;>JA! z*=pmG&|70WyJR01=rGgZrcT%ozu#b3{u^jTT@K_#WUr zBt#mU`PstW`?~>IU9?4!qFN`gc9~QPz+({0mEaAO-U*g09L^>V~Dd`Zve3ni=iEiJY7azd> z2F3!%(c@C{Yg$^3cv>A-ZkU>;phAg?k_47}<3>(qrXu>g^^id1pW7Q&i<1Gb4;@D3 zxFB7Bvc`*DswS@}2^<1XG@}?3B2l}7m1=4#8z#Yu@RfdttSIz|rqd2mTL~$l=O-OH z-kM;xv5RM9Bv-gY(<&_~4`$*jHt&0pcm>`f zH;<)J!LQ#O;pk)EuYvINja#J%0&Dg>DDc2xtv{-p{>cwW;L3Deun8(F5Q$DmNZ6)! z`{!q;3vm#YEDktvhc4W#wc_T-(>=GB9SZQrFynf9vXXo6lN*`9@!=}z@RI)EZa5C? z9<_FZ!-Nu8jo*{t&FcG045PXgp9#QBT_Ghj;hwp*?7Q2&cHGuf4X*hO2OhNK$+@|? z2w>UHd?#?8vcgG4m@PLa2Q$EEZbC-~v#TD&lPS$$tkj;-fGD`imTr0lpB3BDY3W9jN#21t=2WL2BJzea9c z1kQeVY%DG@G4b9#zc1nNd>0oLsoExBqAF}Ys{o?$#(^^6a3GP@KYu>*r}~##iGvAW zjdK)nNFb+h9$$Fud|gXxIenn6>`;hn%XS-KYK%)XkM&y?l0Y`Y!9n|Hz*doc7|Es13&qKV=ioksjYBZj-L?456%gyrRf5c3r-bZSsJ8nz- z*ITO;l#z*hKZMf*VIrA&&!f)R;Cr#0;9A8tg+$whjqL^o;^M#pk*B+Z!dpQBgLbgRj$?Wuw!OWy?9QD} zU%g^HzcehrW{GT4tLklk9_&6ta08+T4!FEI02ctKi7#?M3SZ*{ZC^avs>L!a@Tej5x$ly>f2%1 z3=0Wip`pZO2jRS18)fCwNf6`!qj#+4;kU`l%cqf->LcS7Lb&P1M!DY~%F4WA5CtFx z6nyPmiQ6w^OQ&9P#UtV-c?-35b)TfC7h={Us3Y9w*TYMT0HLgCp|Bzq$iSK2y*ui1 zk;d;tnELht$4NtYKBC^k#{hJk6jA`$Fv96o4S}H^Qn)jMj!_-qeN)VN zhYGQvKt~rc;{Q@jO*blXPN6Eq{9O1ZiLr z5*QKyNfjhMzzVKFr?B_03r@#9MC&3 z{rNL)pE3DTVQcOH4lewdl}#f*evqgzl0*D|%EO>~>W{Wsn%P{VcXR5YqC{nKb@K0t zF`>(QBa-XdzjsQ^a1L#rS#4Q%JUDK$Uytb9JP@rP|L(`o=4YHXxxFRb9={KL?xo#D zli8a6Whh%iQ}y=JLf)Jm_pt2D_Zdq5^5;jguJybxueL7E7vCvLLtL@Ha(MahV@plf znC1g>%N<2of})zQIiB~F7(S+JsckjSm^FO%p-s9iwLZ1rUBRI-N6L1pJ`HaA?C82GztL1{kZVViMK+|`*mU@3k=5B6d0=i3fno0fK;6nPj8PcC zCV_aMok+iVbKTJh$n_!Gc=|NYypem|x|?NXW%z&gMip9p+D)JU(L8!oAN>$?%RrR? zIUvXff52IMhezX@#nr3wP~G50Kqhz7#q{UTmxrP*Kx+upZ;F{Nqr@}{k&7rD;Jct& z2?+~ZtCe5%&Tu_Gw(@T+0D`t3rKTpEQu*4UA>zAq2<}PjW`rgp=bT|$1REdBCsJ96 zR~F6uSc|Zxp#}s6gFi*ku%qHrdco?wZ#TgI-vA(C3jrL0UJIqEAwmbXZoOh@86;+y zspkf_4KjuxMJKx+9;0C8I(LmzEREjj@L}>$RV2E_`uig$s12;K4qVQ6@6L3XC&H6W zm-?8n1!V?*6^xgp5*q4=-@R)dP)S0P2=t1?TyB+f)8l1?V!`9rP!!G-NLkU0U?5*J z8jceT5Ke#&vPJ@9o^3MZK*1!&m^7-4RZk)hEWRMTkUWi|0-_6Kwg3}IIOO;eqGyDtfr>g6 z`qLSqs(*4Nh0ngOdjI|hS~>U(K~UjDRaE)~-e-qsQRe#o)Xe|irDNJ=!NS2`I5PKJ zE5#I-$P#hyr0433ug*(ProM|?F_b90ZT&l9{M$%<%&nNkyE01LbreKxOIWGbp#>8@ z&dDiS8XA(10(nE9e3thBB2tO?0@VSSbzsVelhLn{(?5U~77p6=1lYp|VwTLLM0P=d z?tAx=M0db32`Il%$B-$UKktsd6#^70FNjegVT3-4fW`+u5rh!*U>q)LNaTPq)&!sY z>g*4tWBWpu_z^{=aXyud5If4TiGza!ahf+A9T6VzLNAj%REmrjW5yx;Dm(kDJQ{5| zK6#)xzWYC1Iu42Qg$tfY%LB4Npnz5oGpx`P1U`Xjqd11)`cppwRMQQ;zg;6llK{1F zo50OB2c6;SLG|N=l0}Br8>dY`t0YNQ}_VzeK zaF%92KzL{>FkGnOfGnn5k(H4dv6r@?NWF2I=mWJZrWJxVz%Toc=qMU5m|{Zh;gcu1 zz^Q^F@}^1Z7Hae+c>E;YHeUxZlm8j8p;w|8xu;-(bf*Dp> z2X9&=xwg6o|B2t z$B5>e`?&cKecyf4XG4b*-^(u?tKi+yp)l9Du;$yrb5A02UhC2eQ`yTOpFbBo`&r{< zhLg3*8fAlj!_4cMmBz43hJiJ%h%|cSLBJyf)E{nfHX2HNtOlhX?%1J#eDlt|M2A;e zT8hHU+4586xE(gk(?>WynOJiX5{<#hrYPl?ZYD? zwy~@yBeopscOJq50!xL8A0py7ijTL*{t}y|oK{4LuCbFVSSX4zh)(v8{ps^5!)h@z z?j?-*Eu+{6*s)GY`<9FkL_<;poCftbG-W^>d`ji0Jw4Y}Ij@4whkPC4HJB0o4kx2G zKyLwzBvh5ci|J=)wZt_yIUX);_nnxvb4V_6ZS+av!$f=)43(TW&QewcqwS$3pdL!Q zY|_fbf8A56dQ8F|KsW8D?tBXS8Z!)LAfM~ z9S7~Ml|P&ZD1oqS0R>Z771>J{BOnP`5-(m@LqCPr0qvmPmFN0{qRjI6jYN;rAU%<^ z^h*1Vix8n;5~H`BIhkVlfQGve?ovQs=Jhc*H$nAD5Z6?HjEpFV@WF^&AmlNGoe*Ag z=w3{TnZM*2zM{kbdr??=P1m+DG9vf7O{}%#@0edPnquzy&E$6o!fce{!9>@pS?o%} zqfPH1W^sFooek;V$RhgQ!^ur`bw_v^foH74DHIR@{}y~#_}C<*q(InpRaJe3h*otJ z3>G4aCiiWIE;mI8fh;(#2Tjd^=nrJSXHW>B6LCW! z3QyK=RKSoS!R*8gN83x12IN=w=x@ZVTUjB^w@GWPmSkqt7N;c1g1#T-4Y`IgH#`S? z&vhKl$d(}m69Ye*dut=W_ow6^CrP3t;{HgYdb_#|aJ2+pL)QPD7|=0vsRm?aV<_Zv2LN_w`SvsTZ@J!v025M3c4^iY$^lSXyN6Mf>ZE8%}rQ)Wg|;DF=uZ zC%-kZn=QE6jwG_gT@@lAn^^jolAQS8NVU>ApeQD^+s@?-wlQQyTx#)rz-_?YC4csu z^EpL#GJ1>4=Fh7Ior`6Hc{c>}1_$ifnE2*PbJ>PwCp>(+d+RWF4>uGzg5)!_&b2TC z|0UU4B3(RxNwzu<{kLQ*l%$3Hmt;#!u7;%8dTH^uV(Ttu(f+>_TZNiKs0bg(>Oq8P zB~#$OFy2yLBDVCIowyHKA}$8#FfpUfvBx<;H6=*-A<7Z_C|$wPEQss9zx2T~q}>#Q zV~X~qYzQt3NQ0VbD$yQ*LZe#YPK*RIf#cZ|)h-m9*q&$~+na7HaHRBodXIoAFlCUn zBViuH?Eq@^SC1!28M*EdFVB*&KsArmjn!AVNoPAVpAs{A>@UMd*DVNW{jh+p9l_No z=kQgT)?GR9SBP?ip!h(P4)=~qt?mCOmDRK=UHfTVqnBY$!F>x=0g_ME-Wj;L$=u5M zBbUYxgrIEYcsvs%%SffXZfDnwu<=8VdkaEw+F+UO^v29R&^TaMHZe2HEl*VfzC$aH zExGQHi~5VSQ~n-8XicEJ@*gNise?7HXfm{U+uVyh0ETL6)Ct_Dp`YLT#exeXS?L8; zHP$s=I7v>n8e^zvQ}7_VQ*>0!#lmi+xiv-Sx>3{SAD5m}cxC0AH-1g{6;N+PwM)x% z{O6nDsKi9^(MHRphyD*$*xBtmrKA*}B(=;7b{)SH`z55i;pMIje2+4t*LGr|eO9`RmKM{4hU{&exW z4oLeg1Poc*AGb|WZcm_8p@u}#k)v_97S;-oWi(JEWMYp&4)66CKB_>~YbJas#Hf$? z>xQK938CdXasB_Op|S`iX{h!{BeoTdA-k~NzA8@~cQOz6^^KTusMp^pTO#+mf1l0J z5Q6oGP)8A9o^fw6F^vs*&2^z_1)Kqz$>_2eEeD+{B0!PhhG#wxl?h5GawIjf=g4|! zvhC5g#~2)(?b7i!$ZLh*>j^y@tzYKht5-$jK!`xrg{p8waDBVPfXs{HyD@#yoZ0x< z$j*aLh{3gF2AvsT;s9u0NJuEtxilbI2mee+3IZ#P5S5a}fej$oAh|;hHvNt=EoFd2 z;N6h7*we#Jpu`y*9NcluRbLk)A&$}W`fO9#_G2G`0S}_MRbE|x4CRCdmxIwEt2iYv zQKf4ulkj811BD3E@3`;aWcrP=1@GQp?_?U?${7F?K#m8%{h^@7MK9|#Wn?-?TsG0^ zU7xJ&gyItQMA0*?l;&6SvG?v(4bP@!J>AJNJNx;b0^y}8FmD4oyHM^d>(g|NOE-?16aMF&k@Ydk#>dF zPj}t?3}&N_a2$G#kSUoK<$mq(PQ%bszHEP#NIsH@t^!picGxUtW?vyHk^em=Dkdwd z{OE=lPL-#FH~yn!n$JZYZ{f2=o@tr)sg|F9TT|igpfqcSfC!Ar>CQZ|o7vG|J2T8d zw5RJ4)QXE4r4YyfsNlD6r(EYrx)HGo2*eS^iJCLKj=gMYSzaP|>QM>i%@QA0>>?DKN1f8tiCAnfJSm;Jde{-daH+@jin{t3*SF-u2a;p@#y+ik z-rn$6&J$tz1^I(!YWoA(WA|KY3J~qh6}s^`G(Zx%rn8Re-EE%I%bN(ZiwV|=FY>7> zEnP1h%%~anP(WJRYvYOU-|<>avO0FM@dQ^_#B7;3|McW%h0%alZ$#xd47bZN1o$2n zmzI*EV>a;Q0CPX5TSN6F_fnOR_+zFZWjrekxFF5IM9Bb(vU+gZHa9@>bB%zl(`XoH z)_y3NP$5c4N@9qy{A=2oO{|K4*PSVib_{4oZL8X1M6bU*a3P*S$TU1Mg z*QH12niImc=ngc2I8nG$3?TXGgc&o_(d|XMY5balaN5Kiez+v`(Dx2~fv6Md77`V= zz@3d+5A|zhJN+AITQFx351F*ia&6EI9bW2ZT)WLl&G9rvG0HZ@`;E4+{DISz>A`yD zHPojxy2}fnfv@_0jHkzwh812#h$vwUC?bvM?8+V7=|vh5SK{u9CJ)c^;tAgq8ehio zLhM!H^w3h|Ul-X(LSW5yibvjRHGrychlx#cU_$H1{n+Yv)DhV#iZTlp2aR(vz(Qeo zKs}4g_5yBi7TGW8;(7P`>zo9{E?&xxWSjTQ6fU|CyKQ)xqk`#{M#o0scPR@c9^ zcFGUkqZ&m$NRldvzyFt1Da%K~S*_k45+%Hk#KzkGt&C^@-o9fp;7V!AgX0uvLS;Cm zqp3wPYP=&O?UmbL62p)I$f04!M9u-uZ-9BQ+O$D5aqLOU3P`LX9aHvfQvQ5bwk76f zVbGu~0Y3xI$%l25|6f!}bz}clDH$9)C@ozQSZqc0;f$3#tg4k26$s;Ne#J^12P0Ff zRHCU5Vrqf2p~uBdptCJa2MbfZuBtMlf1N3*KL!`wM|K~#))ZKBG6js%?y+IoP%}Im zdGDV8NH=&yeK?(Q1OoO~;b#h~#jK7pjmNlGwXXZSoq3d_yR9p!8|ql3ca1dUJ^+&d zJQWQl=E(^}1Qm3H#l(;nr@+-RbTNwkH|^AX8GvMle+oiqpR{klPCYJ_*;ZgQ$VjB%f4LT`Cq6c#?&8Hr1^whRfyLGOrK&h*H!QEl3egBs+Q`2v&vNv0E!DwPO z*HH07PlQyM>RG9CCO`z3DYQzDzOY2B5R@k>{LQ!}N$zTIg();#04|CFzm613gKvOg zw)3XhPDlTJZM1tBx*g4V2>bQYVxI;lSGHS6b(~ese0xqAE zeA&2ac|*~?`~#2q%f$TE&psEXdk5QUo#Pgq+GmO(0x!H3J3jiX{F!Asr*mk-n%x=WXIRFaw>l+1_q6IZM}_|i|IN2?)5f6h_8SWE zDm(|L>p4D!t3}luvi!ImW0vr&VYOgkt$L^ujC{IXY{4+tzWJBw*y*-~Hw?+GzG3rxbahLZFGj&X8>NNKPQ3F;y2SX`2q)A$?d+ z*rU@HLEWlKN-2mws=oyHQ?|V*b}_&=0x6Y9#8axJtQe_nY|Ma<2suj!4|a5S%kJ2* zu5Yd5&}<%Ol%!YVXm-N9ic0zoKK|Xw)#LZsSmX`nUF*2{l+B{fpO|+KzLENtIW_d- z%ZJ6;Pg@M1WUa1pEX?(sjMwC|8~!~Swh$lf_$@kjw&8>5><3Y=fBfFX3Qme|%vArZ5-iu%QyVAwfxb$o`dD4Pq4$`uo=`F-S!UkhhYQsh0@?%xkH zn=h*sSdDK#xM`b8%FoEr;>h|_)vc#eH<(H@99Ynczp(DG1P52% zKZ_l9g#QjYCZw{0ti^SZ)M5(Q&_bYF(ivV?By`uAy@uo$Mr+(PQ`A!fTD|LtF=XSx zO~1(K=;-K{3*cws+qZdKgy1^ihePl)x2QyLP*8aT$%6rLU}fAs&xNCQ%cb<^PzVM% zx0Y2R;|n}hcL}Z^P_;N85q5}~7Jz`jd1_}m16zd-rr-mRWiBgm@Wo(aC*zFJNj9b0 zM&YE7LrBr}yxd&LF?ZKvP0`#xy4u?2VdaI75ElsULFnBnUINmc`BB>)Hmzr`=WE7=EW^A~_| zrE{sgjPi5`qPKE$C&b4i$4VHMdt9!jroIcD4j7pE^v(bV6~sXrD@p5e1w@_i4UmMm zGcX#-xKLrg%at<7I69tJ@&^iU1%C|Gpsnppdk1V> zP#nMFYORt`CrG=Xq5&iXyeqWa*-EK8pl%UZhGhHwr=zP)s%uGqfLCd!okH;jlo+;7 zSY1phvbZmEGBOelr({s3!YS4F?KG-FWi_?o;b9z!xo_TJlnz(|^i{A(UUA=2(XUH( zL{k&QJgF7jFLD9egUvt?z++yye0gwa2(y#pz#whCXl(n^5)=r^F+eVmy+NesTTUX{ z5n2nMQQuZ&1kGSwBDg_nE88cbC5bbN%cO0Rg_W1MM}^&F*`jyPnoJtW;_Z;@)u`?-h_+xk%g0M9YmJGSd9WHI0Aict|P{gmM4`dtuPA^~by@%lhi~ z@6)qteh*UqcwNO)n`==-QGK2D=3(#ma^&RX=q8;aF8wVw;dlVao^kAVPd4Z!;&WwJ zwaW{H?Tij+i}fIO0$^6NMK%PYRKCqa2R;5B*+WUbKMCPeONPT|=A$u{;fCRXXz4ijKYko< z$>BwR^E;G`WuaBRicgDjb_u>jOZ~8yh$jG*#AxnDt$j6U` zphxt`F4#cy4Pr?A=l$a6JDRl58Ya}R8JxM_)_O|Zd1ir$>OTJUuBPVQ>jU$zJy`$i zt-3#YweN^Q*YmaapV}mZgpZkQ5Z-;X_2bfNg@t7_D|=SdT>6xdB~l7@%+Eiosre-< zllX5f0Qtnkbe zIOZjEcBS9u(fT>vF`so&k(Y|!#zvH$j;6Xg|4RS(_>12QB9i-f-Ih*$Y2-hBiUk_& z@*cxCiSO4HPcnH>cnrvMHd9NjDX;m;_a$ncJQqbC>POlXGE=s`~nK zg=6bicP$^q65M#kdGVD~9dpX62+{|XHu4x2d&Kwzi#FM|~kMc*Bzx%Trd+ zlHSjn<=*qc(>f_Eh&JEJPQ+KyeBTHIgV49eUZQf>z4_X(Nf{UWtkl#X)gO$kkubUj zM|aSTDN4tG`%ySM_d_i-)Zq(_lE7ytm%V%u>4&6u7Ke^26%z=?pz zd1=ZxGct0yk&V)OyVKsG_JyIl(ObsT!ggj~tuOR)$;fm!yjN50VW62x)$WXq z{gL|UE8CuHS+8s<2}-JjL-rP@hku$k$VePm%2F$rTA;zx>&i0UC1=+DDpT@mNwrOE z%y+H$&bS0_YC`eI5!2akEw^rc-}kJRN?z>eyV+syM0s5}NTlPfY$g^Ldbxdkw%hbz zh^O26^Ww4DE-p2?FRLgBIk&e?Q)QBZ!}Pw2_#~*PzP*o{ynpv@wa&FwwQW=^ah?y0 zxjyoiY+Et<@WDM<{_ulDo$|@*j7QU}${@tQ4n@-XU9dc|>^Sf)a>dS$3B#K?4k$;e zrhxcx8`Vh>(q+zmqgF|oaY4v-h6LShw<!Rk;mF5w5AMU!>wnehXHjQB&s zu5&*_Oie5EnKt4a!5glr37uE+e`;8=4DIo&moHuLDqg?d=oA`NZ4xh)Y4>q^VMFML zHX6LJdLgPi{ubEkcD*u!ow0pNcJ^h=8hHtTwht8F34cMWVe{C|HPbt$t zT>ShPhQhR*+6~E|l(BI$W6I&G2Drkt#n)q55fRHfk z;rI8C!;{foxIh(k)wMC<$Kr{1b3Y6RYuCs!94F%B&E7U`U^l$0&hOyx=||gH?C$=F zZhJmH;|E@|@|^pV`j$71kB3uDcOThS`|I1d`nKBRci)(kUD_6TMfma?ZR=p-1S7$y zcdenc{fW2!@8R(L*nmV2!_D?$uJJ|TGdlDOjrZ0ITiq#$)%_OJ9uv?Kx!RfRNS3(v zSW@)kchlok9TT5Q%R^--rH_}prfVy*om7928+7bM+wKd))r?U(a<9+Kj8YW%(WxAX zX#ewDoDW4tP9X0;6R{U8hzxv?Ndg_2728Q>ZIV@|Iad8smqn=0; zo%<1{to(&$y>zL2Ay0^`y9=_rDj)1ekAi)1efVXmlO1eXSx=u*5=Jv$EwvHF_aSZ+ zHj}hMM=fK{j5~K&Jr+N1^IREH+|E2ZQ_xe`crYh-j-0p`=^k=>UfxBF#1SoK?9xvMh&e!<~ABb3m?F8y5P z@%(V+L^CjNIbxHo z%~WkjbkUWLsEgJx9o9uWDR!E^*k4?m`{LO%Q|oc%?aan52lBs_d9#XMa^uQ4)mrPPPDihAQm{;V38K|!@ekP(}&w(8^{Q4 z4r}TIXP#^1%!s?Z)98y$d;L1PEnJ5^%X!ffewBT67lj=|3o4ZQ$cVlad`I+*-nSFK zUWiM>5mEZ#xx1B+W?JwGcCPYN+_&L{&LJ5&GnE~J1d))#c3#lEWQo&1?^IgXW|TMe zruEP6U!fp&a-GkZkQ-hJmAukV5Ygcpy}!6t=sey&Of6m8OhMt}O~xm+_%Js&HZ3hL zKK>|N?3=~=0&CYJ1q*Ow?iPHKCOIj-fQT8#lMnK@vu9Id54lom# zII>?;b4ftp@Y?UhiT6>)S1!KE7UMejx}nGLQ}c<-6X%N6!ffUgsR#@X8eLs^KU}|M z=<6fM07pO?eY7~m;V_jndvDhPDk{I%ufrDOe0}yhxfVu8AA!{zW3>V+H|*L~*PCtW zA0Pj2`Bw`29!_8$6JMd(az|tA@yYPv`yTPbqC#D z-hWJ;K&w>De9a5tmar3EHsLqBD8Bf$?)Vc;Yi{`j3)7SbcbO?jb2M8z@Ku95G(s+YXnG)O{`LDO&pt^@(-Svt>_!g-*wC;4RrjmR6Cdi`hw;$t9!}wK z$3=bc;MMrJpMqL!-LJ}DCMV~Fi7gsvNSe zY&2J0uS{vh(QIN|v=VFY?A*@BN0H&`)-~K%+qYvQJ;~g*OC*Ex>ecR}pPD$lt1EcQ za)0^;Ccbst>c_i8rpRyErC#duc+AU0KIiFhq+;f$e(sdLv-YM+&xDMVcxA*M{p4qx zN&5QyO~tYyEpJ?O`+OrMPsH~Bhq3Pt$GZLhzDh$PQX!F1p)$%IMF|Os$|#$Z%xoem zArX~Xb`l~Zdxfm*m6c648IjHNy6*4&J)Yn3d;WPG9rsZ;uIu`IKIi#9-{Upr$7i&B zl05<_M)rLO%Py0#8jY7Z5PEl`s_>KzVg3@owpf1o(#$;)f}|w(zQeo=^TRnfiJcyD zi@P|NzGC?l%w0Y)d962lX6D^HGD7iq%YH$@y;kPAvdeZpg;Sp3{|1mc=;nAzDB@ZMP5~~UE9Cyx) zAvr7QqGaMF5Xi`MuKws>tn@ofAOJ_D-Rs)P8xZ7D9I=u6AQ^pu6T^mEx{!h-GFNvwG^9Y8PAqV(fA zeTqTckx)ETY468yYx38x)u~%Oy@f&z5w^Qw+T%10 zxCV1~|2GkKC#_9QbG*Ilx^pKlNs9O82cLCbUOslYZ7^n}&U(+D6}p1~ea+1|&MS9> zV{O;|is9&EWDE!u^2^KD5q4g7F`h_t+Z~>wDU$kVE%%b=dQ0>qdmqSmVtV|(KMQwE-`8#wZh_yi97CHP`!}b7;EARAZsN!|3d{0`rUj3arWv4mfFH3c! zxcyf9R@8Ot{7KPO7kjVBbGh(=qX_nOI-zcllsf-m=5UzEu@S_;>FKua?#I%PmR~)= z5p?0Ap3$w&-D7RhmAjbSWMVu#b*?GGj`|_l-l;h=186Sw_wP-=`>3b3HtS+`20yy= zK8FpeAAR0WDiyhZd+p4T55aTl^30#OqdR?HNUkX5Zs$o zJ5_maN(En9t#AAlct?_F@8(e8E7SZ}e=Yc!NS`Q@5K=|WM%2z_zU`3xIFz-q^?se| zrJA}rx+aGSQStF-P1;UTynJ0>?{t`4=IYgzFp)`qewpOknSP3Kv2jHnlfMd0y9JdvMnMXJW$`KcKp|`gD`ENXMDuu`$yP$p73}t?KxXp3M^RY8sAiIx}9aZ zd-quo&e34c(06C&e*_IXk-WSi7@<$`&LNMrwXM9R(Xg99Mf$90bG}%$2c-imo+KZl$DJv&rxv(Nl^#BdWE6aoZD^@JZiXiX4=p2W-+j`nk&3zEi?{vFWhK8 zbUMc@C^4~ym+!#0Z^>c8`~UV|^mQw>vR}$YshzLDKsQ#IRb2B@x2L3m=X+@>#6=8U zw~~%s-hSXfB!GKmfB&k|bu}t^&v+3CxHfR6>a2EuYwI^~aQu9h@4(VuJ8SzQUE|eO zarZx675=ZNq?xIrLX+!ZINIM2@d|H`eT)@`So~!|yy~)<1(}5Wjm7{=&Mw2a-V^l` z+=OCPOXVXmA|FNR2vo{02A?F`HBJdDWqzkfRWIF&ODz0mqtq`F;rcVtwM6&(GfiXu zG`%-cy2VlbdwdIoszQ#3ZCRE z#xX~Zy41DVoh_*UE~}*6L_-_=G@F{b*=={C{t7$0#7@H4gm0-N9P|3Ry9vQpoKCn! zF`qm&Q9oEdWM&pPJ*|SI;YX{=4GuE~W6waSI-KU>@-r-#v6{ajElnZ($zyp{rgUZG z*RMD^xpy6nZ#_Lh)Sc?e=9&Fdr&+z#$8!F>IRC=@K=ia>5 z;F^dC#W+Yd7Z?5I?t0$a*mSYP%5B%WgJ}EdbL)8_A-_IcvFlU+eSzfmB_D?SKJL0j z#)J!Ua^!9$x@+;<2oDwmOWFH6WVugP&2V?sA7_^!A&iY*Etbs4TulE$E#|t2Epg(6 zT#Y>d9f$JvNIPqG&SXlrO)CpQsyuV z6>?fqzqMog+{Uun4dx1-D|#8>wU*O!XIb8-77jK$N%s;S=e&D<#j5b=f$PJ8=^N=} z1>23N-2!}b$Lf!id;gi_UR+Lox28$aem~>lr5AtuD!xgGC4CoT^0ycFSfBa(r+v86 zxIkFT_j!?f7kTOiJH+KDe(X%qc89u?jg1mD_0iCGik`}unSuKHZPKQ;7{hiC9PXLWMQQ^i^HR>_RDVO3KP|6IRxiR)vUy{~>^cuvm2 zz@JTRZQU9xTgML4jO64uoVPkouyEULFRG^zvyCvjb5P6Z+m0iG9S~nM{+Zz#&QnqFIkJhqX{l2ztk5e(Qq@ESfr3`>FYmreklpHwR#fQ~)x>Z6)-r%#J;jIDn$6zksw z5`jC#5nl<%L8ilw`85m3Sho`p#KbNqd@`Qtv>w`63qUu*@&>=xak=Bvt*u4o3K%J} z`v|wq@Mym7U4WDG0t15d1?Kw>T#x`!NxR4fYA>k3bo^-E=5ELW4-WDc9%AO5{~L1lBMOP7T(Ta>LAkBGnqnwd z&99K*l_(-Gd}Qw6;H>S;X{vAeL*G@wE^LI1sZ8?JDMUtkdY#<|K7X#8Y}W`4730>P zs(9oTBlA`>@8I5)^0K^$to{h>aQ#uj5M{;K7tCVrqvskb_~`BGljKn6NA?&TIaCMS z>S%gh#QLCg`)2y|y7Exb-u26M1OA?!gG^=jx(HlBL|omP+IC#3CdGB7XIA=mDg8u+Ag!@+Sy&{SA3HqMQMjEr|1VVP^s?CQoE zxYB!(&&bOkbBQ2T{HcGV^q}04&6XQCZ_?7x77cp~=W*Kctt@f^T~l=1wsYkz$fP$;*3g>Nrp zWXO;ZdW)_d7OH=WGi~$$gL6r(=`L+qpRutu^k?T5A9>hod0-U4Z?+H=^66Dk=DFD? zF(25b7$3EqxBacl(t6VEo|S{9vU;6V+sJ(7qk$V8?29=U2WtNsv#aI(VkQu-YA19S zhsAw%U#lE{B(R;{h&+JgZeXAQI)ukqlRZ6k($h73+$YBm2M3K9kW_#CxC(q0CryOF z?zlu2&Q^-!B~z`Z?Y0c)weCFS5<%ua4;?KG#)R4~yE+xk%iRtKNI@BDJ6^ zV#*hnjUQM1r-Ijq?muczmcCRxwFpR2Sd(O24g1<*BTV-fyM5c*Mo@s$AE`P+#&hld zIN+T!99-MytYJWKfc+=Up~6a0VbO5a>u(_NAxtP9EZ2yMF-eu#6%jQwx->OVI(W2I zi}3iv2TnrNmoGc^K51{v8EJ`ozjN>AFejOD`h&~YF7GaHz8<8wHQ|_(kN|?0d)=8h zF}AB;fWh0j^Oib3+pRZm-1e*Y- z!?}(**>sV|NAGBT)6rtvX!xp(KGW-k_BxVMCld+2$NZ-?y2=k9-U9|l%;jrk+mR7h zl$KgAjO9U_6MqaU+lI9EK{v$YNBkaqh^MP}P^;1MJdI*X=nWFT|K<^LjdKjK1qCpD z@9`8~!rbNDqdcfzZndd%CiRXhc>6rpZ86#dbrhSQ0O8L*_Et!?|#4K>%#5-*c89Hd2eFk zQ>wa%h%`HU`>R*pOcHmu5yV|LZH6lL%hz-^&cFJ@UZn3ny0&z3b5q<#6coPaf7H$y zRwp&Zut$ibQz(iE2(&Vt&)a8x=*S`4$|hwXGI>U1Fe<63S9F;#V^bF+jlf+ zd$1P*RgnK5wo?=P0Md<#5HFO*d}E}RTPBQDYAfA&#r#y@({aII?r9SXiW`sQ4ZXn_WaqqY}IgL&7N!j9)ICE_$g{PM1|Fj^j64d*4vtwx+;b)gd zVPTK1ST|1R|nkCj{ zL19n7`Id)A9@3%jRVPJ-lO8LlK6$#RpQeuIOie=*DzR0gT6pxx`iBoj9p5joY^OQJx$)D>REb3K;4?ZPv?xzj@k`YGCG|?3{H1rAy`QYVM_w|vEZ;Pq9 zdFq!pI$!RHg_c$X1O!6^jDx$LkzZD?>Wvu-OR%_0Z9o9SLAsF22A;;|=3kSOn;06R z7Ibkbao?MLVQ*w_bz@tb)x?jHkPuyT$WNTOYP-0ZDoELqT!z`ISExcyqx@ z)+>2hhpzu}7%kUNcnc`QJ2)!pm2Z8>pHYK}NeMBLab${pd5fG$l9rYc+1VP}y<(P@ zCmkJ!Umm%}aq@nD43-M|g&yRGVKBiW{AH#~Y+b7}&0rHS?_nj z%DT_2bMQh85d?x;c;)!()ukm;_5y0G!EH}lOc)|R%mZ(qH7jt$?MxQFl}hM`WRJ5MsrAS2mseiS%o41sIql@Qb8ORE z^XT@uM~++KkJ$jF4Marma$tGD zfY>K2Qm&tdxy|D8Tn|!#<)n8%XJh5Fho;l*X0*fJt-eu6j&8x20^;Xx=H1K23d-t>^K8hWuOf<>xOc&@0xy8E}c2>h|q- z6))4(GmRzM0ttk7|BP(|f@m%?&*BnIf7*~u{uU8h#+VwLAVPu?SQ<7ehY*E|9LpO) zoSh!Gn5`YU=<4h5($J)j)ZVI5eUZ6HH5K;2C!aY#`@dL#@s_Rm+2uiNZ{j4cvHzUW zcq=A(g`|{y2KSb%>$i<-F8Cc7VOKpsxDZuNy+evXV4*DSe1EsYb#6QsKK3U&%k`Hj zn;h1BVq${)8VuG;K9TMi%)Ym^IehEZ6`+w9!ZL)Q27sx=Q4wk*y@BON)-wOWd=wMk z#4t0^FQr}PV;|{D8OQYwBHZTKv+*xUo4+*pd$-+b4GUdUl(~E6y8Zs=eG%be;j`9e za7&0!pxF9ris@~%?b#qMLVx}*pZ~y8ni$`|x3aY@-_SAF(gNR`K_e=pgL3~zIKe6S z6ej7oN2bhujH@gy?VITq86WF#Up$E-qE7beqr(Snj%rKbKob%&9B-cPi!jsDYDK4v zo_>Nrc=_@dI#qEBZ_7urcVS!%F_po!_sQk~ky~H3YU&zX6O!wHd+3fS#ZWSREjqKZ za`uv^)#SWx)ZCwI?5wY);Ny{$^oxRGD`Q>DR|MD3fT_hJrAGI)r3Q4IWaX+O&K>UU z$qgvf|0O#VeTj)j<8EzbW#7-A=kCAh`I+fibYA0MB+NdJQ@+Wcxm*?}3bL}^1_V_5 z30iz?;<#gVMO)h^BqZ$ppi!3kiP$FGgtWBL%#5#YXHp@wLU;D8HZMxvhn<&%?(an17;eXzW;_CFy(PnP%pZw!#^5Smi|1r3$W?D=01qHk5!fssu9 zGBJQypP}<{IY9cK`~4r#kI(ypuM#y^hG1@qjv>Croc{jzwTL&!nMAs8mh+48ze|kx zr2gNx`2RpDA&LF>e(!jH8B%vZ7$<)Ev>MF`hCkSe$}uvw!O$V+g6K*y12-%Z`1$y5{9{*pKd`9vY&I|val z4Tn{9c_i1~LHlDuLiWg(K;9qX-2e-?J?Yi~CZ;~m4)NLb73+KVMgcc-Ng+o@JLqHy z8&G2)Rrpyn_aHwnmq9nk_2j^J*y|xpg89-izR+9oH(Hz6eaOPAncrC(27`&Hb_xhS?9Nh)!L4Ls0?%FWR3H&~Kc(XZ z|0{4pu?*n00Fk-ky9Opt2oXMh zUS43*&XfQx3u+&Rh7f-|1AsiIKfG@6$e{8AXL*H)bDeE%Sv6nY`1`|F_#zts2%t3p zf{Pmj1?F9Z0)QNG<3UIIN4R*$)=gj~fm~f)UIuNPcLi`jFm3qhUtVB_us4{**Fw%* zR8`H&Cu613l4SD-rvR8rFDX|4D%@UJoBkSD;XQ<#2UY`Q4e$-O5+qRX1kK*TRb|u} zeA@F6h=t0Ovn~*(kh8jUiG-5U@9|@z8q3##X_?DQln;0%V`_wr?u=L=pV9pa3IY2IK=k*4^?o6y5Fde0YKo83gQ-5^EE-7jTPk zTI9{&v3b;Prnioz4vSjvhF99%I(je=r=WCqmY+WZZc0^mki-DA!lhk6m*pRJ-^9cT z-rLXw-?QT>6o%nPfVRdDk-Fk3M<+3(iwl(4E`ZW*=s+6b6I^68biteQqxx8bi0E?S z8LhA=IC-;;;{qO+gUQ5$hBrSrC^>c7R?0N?Ql?u8CBFhDg}= zD8w{j=uE7v-$Ix17G}^4T!jx8s~Z{`s;Y>V3bUQSW1b3}`2G7Uvp2?L35 z(Vg=erb$-Aa_Visc@GT^n)eor&&;I!gX$+lLRJS~TIqLRVvF0WfZn`s&z@Up`a5m5 zlpw4E@;;bS7hbCA5WieO#DZ`b-mzQ)z6-k?ntFSG4-bQ=S%3`%v@(tNA|4|4-5c2t z(8=`o&i1|F{6sM>QvA_7DOTLntFp5385svp@j*!D@gAZ!XiyMVjvyGJATj~ky|%J~ zb#3V{vL1i{B52xy5UE>Q6Wb;VP6AvF^|L{ZhIj!m)zcaRU~a;r2JB*|%*}N!+nIg) zxK=Xmw*ViVs*xnU>gz23Qrvkt>izp~4Golpj*R;^imq<_nVSOzmz?Q6So&H*{QM4% zj-3$OgpmFPW-z50&OaoI8JssRfG=ugEJ{7<3R_Jb%N^%U@n&sIj;_lEX4(1)|_33C<*SOksWS>x~Wc~r* zLJXR-WGw1FRZ)-7vSs^ce#k7?oP9(6=JuM=v|HG2-s6X_o~*0zm2qJ$iu@e;?gPCz z!-!I|`WJ&{-&=X}1HpUmb$zv_#651pEuZ z_L`!iM;h2HCr%imErRzU5ccnXO%y9Rcn})smj3YR6b+QyfTGSogA;c5aq2xaVI<$a zeZy((A&d})I7I0_MS?CcjvO5L-4gRJZD*+KxmKR zQxb@)14Shozjy4~1(`4f3h0Zkn`)z0YS>HL)nRUK*1eWuPblr*I|Kd&KhGs5K^0Uhb0T$SLavbK3^jt z&~bXiz8ju2OqtG{no}lwPsU<>>G;kQ7KYuQOtx0TX@m||9;_tyKfJ3|%UqboHR((2 zeAPGh66>eOMlP2fto)JDMj+I8gf#`X>%?cDxnus_yPPK@Hgj}Gt=?WwSCfj*E1M|^ zeJd;`1w7gXIZz2E=$1U)35i$eMX|n?#XhG)A0G;@pn>4Nf4myH>+*fb6GL|gfJ6jh zXhQW54-*d`@H*l43MnnsDbdk- z7KQ}EtEyi(TOkP5VFT?+oVukfBQS-7Jv;usG~LAxsr?`TD3WlNy?xt>xS8+7f+zyE z8Q3dO&X7Hh-wO>5EqzPP2?0qMsKJV>`0Z40^_CMK@_}_5H}vl*DJefTLT?{>1cPQe z2%2C*f=5&d;bmN-;0;me+oB7nmt7eCy+7=$TCQa>?eQ~b8sRtI5L5U>!P$8o+=cS8 zGEj3Ms3w{+KvXtcT>u`ix~y!6lQIqzw_Oxq{>)e{(R!YnYZ-unFzyB@G(>WWW)6V> zhab?XYs1BY&CcPnh&(MEO1Ml2$dz6=aUvGH4fyJ6ksu%bC58nbL<~rWc$rifmL^2Jbw;*z5^{E`{fuR#X=4FuBo7Z ziXdlBx02$xxF#d$c;Ofa>*v}vzv&-j%O(0=w>W9Uts5U@8|mskZt#?gWjlVH=xx5N z8{Eo+yI)ra75ZN2%jCN9oo_1y>j>!)vTN+3kX)*JtKDx5+!(NdXuM-%Vhr^3wq1RI z%n9iP?k|1}v^|)E&(Rb)2)926V+I7xta$QWm;OlQ@U zhl@ySiZU`5{v)k{oTam|kw8$-HV=o=$g5Y4&<4=s%f`8S|Nb~M?4ZGb5gi1Yp-jCD zmK&szklid_WhCEK+SQexljDHO0cU$C1jVqNqx_y|R}lz+tpVDJR&yw9>`@AULhd)+ z2MeE)Hz(u)#rp8!7v8_ZkBJG@jkS%N-8sw44(6)K%+R-nYanaU2Rdo!hZ}eyWoXK81{8c4z^HynTCddZ)}uaI?q9 zK{_MSmNbp+<7 zD|GUd1{E8Z0nh}TimKb&m!LD#bEqU*2C)Zm9CDSzV1>eq4xB?60a6;i3JzYHpTDl8 zM0fsS1`u^O?I92V$4yR7&c84aGHK^VHj3KO?iPn<*jYq*IL-PpNf2pas9>->bd?d@ zkdPw!!?kbr@860BE40i|0mAPE3FdTXIyyH);Ai19TwZGHse#meW!Ebb0+Kr@-5BxH z2XFE0c(3++-dmL1+Tqn70u$YvBh+C>oDEkGu|8=Le3CiTzWQ}8mT#Q!Sn#&Sl}lc~ zqk0|rm8fszg*_C>7NqUv{-GhP{=xgv0sdVSgyL&=EVzUuIu*>>Ysj|deI;Fkj|!oJ6!oR3Vjz^fd-v`e2|s$PqX0UGJZJ|G*`7U! zQ*bV{OlHi8Aim{U1FSy_?5p5$CTPVrH4Ti7k=ll$e!{*fHOV5<`miXC&UFHZa09Uc z5_$VVl|AZ@%vz_-(r?`;fqk2?xp`K4`XucYr`;Nb>YQyTCGOUTt!S*u%PS!Nuw*4% zfEI_2&K5qf*6J!R)U^&A@b>X}=Jo;VNDu(-%vDR7=j7qRhE}<8!yvsTJ~0tOEt6K) znFKH6Ff<*2d|-gTe?AI!U#VEdpUv)Z9?@gvqK8-C2F8k)C-0N-{{z%^$8HLqqYbrWS1GmW&Jmf~yEV@N)nQ z6KX_oto;xjz0E+x#@iISZ~e5&xvo?M!bSry@?R+}JTCRXQb*&~t?{ujVWUQ7q%2@K z)|-c6SMA)fLrO{ty2t1d#9a-=CinO(TY9k`$=a3U)PxJrrKznY9|6VqIs{HEEGT1O zT0Lny>sG#ty=Ng2g?k2(JoP&qQ?-n%@jsD>I zejmnO#!j5Bm{o#i{bDgmv%0vU0h+XtAt4<TQnyjxmxVe1+ z|1vjEhMc~s9m^3R^Ro9Sgj0ipFEB$w>(0G<>FS(Gdq=NtZtcS@gUA)6i-uFZ+|9@i z$K>X&Ao+koqUP#Oy)$&FYdZ*3UQ*_Qq?Q;X>b=_o$?4Dm)zOD&484;5@H^>;i!HJc z)FAzt2?^tfmn|(VbH9z5A6z(0M+a+xk0~ikhYyQ@;%`yquNbG3YvnF`oLeI+Dcy{2 zbmM+_%U)7aVKFf#QJXO^bkS-vT#MA-H364wml0$*(8NY^{}6=-Bxq6bN1Sui*V8)- zU$AvI(1gp*sa;IG>zou3(Tipk-WoR)?Fs~2)I+K%+I1tdZQ{1BA!K$Av2vGC_l%=Ls0-WlXaxFYoYP;1oT{etSzb|r(vJ0YNABpL(y{GNl;CVNR6!wZz56QsST?(3SFV6SZ)+>C*?+*r zWfOPkaq>e2bE^u<0aR-!OI2^*Cfj`ukE!xK&LVVk5qnaARqLasTCkHz+0>D_AC z&?)nL-k2Nx)xz0HCF4tuRog^TV|Sz2TYJs-n!e>sP8;neB6=cpPC}FBw^eTQW!}0W z*V0mZz{$A0<4|M3!$1B^R>>M$e+&e)3%EUt+(|A^^-&60K;Cc1!^=<<1{hY*$Jo^L z&JD#`7|#NiR%}vGX~%7d==I#kM-yEdOs=0?cn%|NmkrTy#nGs_!BJ8Kzge+6v*`TT zWFK!8kyBR>QH;C6agfuRdw9!_cnjwSrQx`-?&S72>>$}r;4eC)_Rx$C4H+04{~Wf9 z;jV(3vD069gJ)`zt1@thv$5eXh!C-6bK#1$F2n|uymYDkv&ItFiGAuYxBxdEseqR| z&h4_wO8Yj4Z3M(=GM@K)VvUz*~;hWf}&ap&h$*48*c)6h&7)Xe*2nfKHD68b}10=U01DDWI zBFc;vIt@_AA`3()z&Qw^3#1gdEV!gWq=s0Kk)odVbP4_8vb|?AiVVi7 z>&>MZ666MWp9g13+k*8{wi5__?9XIk;N~GHAb^RX*XPke%^0X&Ao@Y#1R`5=AoI7j zLK89lYDQXMSFCKf(?4rHRyV81tesxe#t4}_oa=E!o5s$yIL|^nGUQJUo&*wt5=uG( z;UJm&1!lytzWh?Ku*jyheXyY4xzrN&~8as_JgV!KoO zp2Alwl!w*%pvE*pd~~q;40naa1w+GFKfeal7#(&4-?$kh&Qqq$ksKp)w}OhvS%V7o zTemEAh$43*zvFB6eN_vAPJwvFZ0Pg6BsGXP2g;Spz-A8<7brdmV2RAQ+%%8?88Q_O z%L0uAkenb)jd?>ow+ha2C_~I+>LDM@owjmv+$;j+CW?4Q0po-GE_V%(r-MF^#}-bh z1R}>V91bqt0ueCyKp|4(Feix>yBB}0bUD{C_&`qX1!f3s7f>B@Y2^_$M4=AQbHBhe zXy+Z?+=2oIc^LeNL1P?sIQ(V#=*aJQcot)tfuIhPiB`iuD$2^+2*pf8obZ#r!&_5b zjg^__vy*@Z7jzU#EXev?(`>B~&(SFO7Ag%90!(AFGBaPx9^co)DuY#n(x+p@GS4aX z&uCC+s0NNyE^1W3jYj+qlOrQRk&%5}LM^$!O-U$8HN^T1P7qQ5k!-yiN$!V38f z(V9Im&{$}3)FuvR7B$067Qn;pTfX9|zGJh{b_IyEdnW7_ zfAF;VS?E5Y(OtDFflA>brfi;-t;buDV*D-qsg{?PK^be|n$^?VVM}$Nig4kILX~D~ zf%{Ky|FB`{hXclUnE8|#zGCR}DIozTcK_9P+X$!*(A`nb27bxI{-cCx#~J+Il|3{d zS190QsZGpzV%EH0aq#b3xN_De_+W;E1Lf=0BIgxe{#^8y!FMTnxR1sg_0dO4$G)BCSe&)yI;xA=5%U;uk0zRmOb|^X+34T}ZUgYutITt8*+y<|X1mLhYne=snDlAWDL|t@FnSByz?aDxii03)^WQkg(AIK~{kAWT$G{Y%TO5 zzQ1C@;;IZy*4;8U)gty&O^l#lvjQ;iLXL-g`nTRAs`v)O@}&v`QE?~(N>aV zppi=-DFQj8Xh2AlKhanUf`((iAlb&QyDe` z3XM{4sc0ooJ&2kyxthoT?x9$^01|2sHdH5rJ}O!y)EE9RpvMP+66eK%{p6{%{j*q? zFib*74_Ui#DiG4S{OH~lYc+H=HI=CD7nIlspPdj}q3su=Z?uWuPCOQqUafmb;|FKY zE$txfy>2vYLF`ubWi7QWPM@+r=<2lHuA#3n|KKW89q;~gK5r`X?WbEz^DC`~Ip}!^ z5O&Q;O`XL+wu45KKpdn!xqud_Hd>k3s!++9jmbkq!)OckEZ;U~(2s5`a%S>9i6;sP z7*DsRhDZtMwlCy@j%|zc4(=p1PnsZZ4NVfbIHWdRyK?0uC+D-%%BIR#SFnGnSgX8z z0o4+;iK9P%?&;_VA>OV4;B3g*KeM3Xf4KCUabZYBLt_n-VQlL7NC>)wVLnr?e??A? zZKD+Z?EHoMKN=R)Q~KVZe~s* z>G#9h!s8N?wsx<8NgIku%_0}ZE|#siq04Zt!MM`;uU!Rp52KuIcK)_w!oqY%1~3fm zE_70pl6p2R6;zKorM|%e>{-SlDc7xQL9Vx$?V6w>eU6zFT5xER3|MvI7R@Qvvnhss zudJknG7SkP6-b*t#>bP|kD{l8KqDh9-P+y`UhhG<2M)(?0;hO*T!~}9fzoJgirpf5dU_9D0Sd4P!?F1KmxuWv28Psu zRPi0ua(XaJuL-9;-zJOZsbbt^Y3XeQ1dmj=Q+WoMlwyyAwzZQ0E?Z-x5-g^;)oOC9 zh??!QY5}34M`&qZ1{P=x%?2RMV%Cg)kMkp^ z>=x=du{kX3H9mWKf5FL3&daWq5*C{xH?52o-W!eWT9K@F?|Pfv@~K&qDStab@UX?I zNv)2Z{Zv?K_?$9DfXA(+d$B69pS?AA6X?Vorkb1Nw-JPzEi_&1(SxzKEi>jGwrsY3 z!TmhztKs>LUYkjcwn>V14HI<|0+QnXh@NR`(`dRs?_^3k!y zC+I05?R!&&A(bA08rVsiU!95OQnDY=2glG!YhA)=iIKLvNn)R~uh?&4;b$>jR9>X| zJGSjrr+Rt)=8G2<)YJwpUi1Rur)U&X&#`T9qLZgS;PgK2iQN93d!If&cqoA^UY3u6 z@m!9!i)*caoeQP#zJPZPYvoM#V)cU^+%m|L*Nu_y8d^?WUkV zc;raU-E^43K#eT)_3M&hAf0US%EfN?Wdoa-5W{^M#dA(;7Vb#c-v zR}@TE63jy7hfp2grt{(;w7}yGd_=G7V0=SEF<1wG&nUq?PdRYnGOa2 zvDdOlzR|2i;nRg$KduF&?7yvQTlY3aU(05|cF~ zBx8XQm>Wgi0rOjEwXJg`rKCvMPW-?&rY;{xmWSU(Ll^>#Gc(s*${?!?jdlK})u>ox zUlWD|2Fyu5g8q15e8oc zwgY7DyLRn@k2}B<^cfV}xXvSapJ+`)7Yw5WgsCE@B{=h;N-yO}K@APrIRHCg2!8Vv zppQOqs!_IqbvKp*AOmsN6R5o)cE>_Q!wNXlOXVb`;U?m*e;$4vF`8C3N`F`-1#AlH>k&IrxO4 zA|j0E98%Gy|0hF)T-doU7w|I3X|1jK!WGd&1s>K#hwvDYD%1A#zvzpaj3c%}rUdnjPRc1`v;);k2(j;*G0 zNQj&}%EQmU0MTtIdwu_I)bw7OOzrg>u^FU8$S_tR|KG18XJ_{p%SAOw{fS2UABO^L zOB5Fg;@6zmZN{Q^+W28~g32>JSgOa?YrLdXiq!A}+jTn5XG#tM`ipP$;EliW#R`2s@Ijf4&~FbIjSfWuKh;`(CvUE(!?rO5LEz6TcQ%$P6AYnSRiE z9dcBp*gketz5x2IWuGbVhL<9Yj{fJT2oFWj!9ORWDs-BgyW&!c{U!a|FB4P7R;YR0 zN|5~%71>EM#hk$=`R8ka_)N+OcY8qQ+eWGTgTl+p&(GqpnoiT7KXYL8-@$O;d^p*^ zKRuR;@|lK~cI$7K1z=y8e6%z+jx~?%*bc3rD=-X4QG0f`1MLZq=it76Fw}e`-4Kjo z|DUg@86@LDRBhI#r6a-|NEH<{ozWggTxjzMg_ZK zx~`M__ZzPYA9|ZbtML8%@5h^a19^2tM zfV8m^4l^fSa2ZMgfV4gzLc+>~;LrXTdFSzkN8YCopRWm9k0>BxMXCv)3FOkzL_DO5+zhAUaZr4D-y*W%(7O4x6o4ZN zx- zo=Ey(HSrGu5Q!4X(?h(|Xc1z}nWkQgPeD%Ck0bKly*RmV^->Cf!Ph!N8$6 zwDk0+;EG6dN+Oap8tE{aV1oSoSP-Dloc=!cS&eOBXnY@g2mu)$<@`BJ2){_ z2pCgzr&$kiyD92Ks%!XBgv{4GhKsj{2MoiWN=Bmz@(8BFIA+blBkdDoD7m7#Y%Uqx zZ9O*qqHN*&wy&ojC6sl!;WUVd(AH?!5tRtt=wt9ehJgj%h}!EHTEF-dm?a$%wc*fa z5fTEU+2DwvDf|dfzd%+L*2@rsCyfpZ3q#$OqLmL80b;jF@7;JAG{;G35cq<`XD6h<*;3VkX>NMZU5H=N*)(P~9v!4UtgvoQY;8IQMYp zai39nv;6oOyB7HYx?&G8N5YYYu7FXE<86J{G6RVqB?Bcl!=!=ws_g2 zmb}Se;&Wk|;KKd*Cm)}_%7yW@i#G9fbrph{nY~xP!x!R z(x^%J*kpwI9%HyKFZNs_E!^5%`xS%!{0X3%nlUEhyqyu>N?fPdTdc3Y%mO>!4 z1hA+@P`RMWD%xD#>j}TWS1pj{MYVSxh%2xndetcxhW#k2dE5}pfpr5Km;NQj zDTwPU&YR(4_CMvS@>`ocX&UQ3hA8fNd-#3w$D?0`&skmh#Z{!SQ(&k0Xm=U!SxKYT z92FNq7dtjP&u&VVXCJJ_Ise?MI{oJS<%e(Fc9~G_(_yG@(~YbVSF72I>%47w$4=-EPEep(S^4sQfJ61XYoq}7-`b>OvECx#j%FMWJtINyqG-JWAPDBLdFQCte znJmwI8ARq0WC6PXrWoEW5Y$D815h7J0?-v46#p5XLSP*=M^Hniv$zECgkoZ$GBNNy z&d1>&CY%;?{{kr*oYI#s7d>1gyVnUM4uX5m(K*zQ=ntR+1i#L+yu8;tto8MQh<^YK z-|Vc> z(PAkJN3oCI*Q>5$2v9gRM}~(HX?uHnwWC@5(Z{mPmnOB%V7;`m%J?&Me&`zps=P#m zA#-!2630RG2vGE*Qn>n#-%B0m1MJljXC>EgpaZ8KKO1Petc-k!6`fO&6M3AmEl|)n9>9W9@_7on=A5Crsn(i zVng=sv0(MXu53Za+1UYiqBwdkMExS#S@GX)oG4Y}78i$$Yl&R7gIUQO^*DUsc;EUg zzsNT^$w0f3_=XR@4>)?J5Tvz*u|EdWC2uf3x$szaCKApSRnaIs&0HS0jYSrjRXU{2OQywm?}8nbG?{;(@S0OXk3H8Rlu+Qyy$xWYz(EJi@@Az zD`KQgq1BccekAv@d3DRCJId0~qS{wN{Hs~DV8O3ZPYE8zbpCu^jl~@wg5pFe*K}HT z(S&Cj{M^S#5gwFScSK-DcJ;NWOZd?nbDv91y*v3c#rrsNN{KQwEcXz)oxF;A|2uwC=a8&8AN636Ah_Hf#5$RqkMxrFUSe#46rx%6)7j&oIj?BxuOEw5fQ87o42*KeW_Sicd|Tt zka(sbOfs5d;VY;WUotYLJnm%6uORZnY)FJb(Nmj#i3K+ZZhF9b9$)={kbCp;WzTL8 z3alKW_Vq}p#dZ=BwIp@Rfp5_8j~Ix;MZW5~Vi%ym<^-vGW#!ii2`7_P)iK}3faLih z#5W0q3&k0x$46130I-fe7&t6N@X4_Fx-t^1;{qsxBfFSdMCPYAb0EVq2tC+<2Y?gC zFeeO)0DVP@etP_}T$}mVPdkEZhOKgc*_Gcs1#j{hAX1l4yCj6Zdc_=E<1VRp^JW0@ zTJsDaDl}|(`S}4Ar`WRxjNVE-qVGLQDp%Ao^nffm5G0o*C4sWN{5z#)XbvY?V8%UV zEAeo&*~!Tv$q&k?CU=qJpO5OCY*tV~z5ysAnhAsKFOZ92Tx%s5FLmXL7e0oXnuPU8 zEnW&hg@$mkCFF8JCe_39s48%DK6G$+HPim<5cPorf#hepqH8X!9Ex90i|(n3DkunJ zcp(H~L24kame4Ug^k9G?0&*t1CX4)rst zYqh8EbEFAo{8pN}w440=TT9*|HYV4_^tmJ7uTOD5p`w;ACuI>0Oiu0I3UXyEs+X;a zzx4XAq}KJp*2czS6~qG>B-2OG*a6N+lN+Y2k!ZXkWkbCidwrbP8($@&Yq*5~7IWn~ zbqc$p^5s+9H)K;7>Vm9+0trrIKf1dWq@EoKa&UAUxU2$f74lxpjL@_5{aAuZ7>z4< z@3EAjx=;+m6ywAC*aN;0q{TSRL774LS8Xq{9D-$5n1rkN*H(1eE1H|BT~$e~tgX@H zM+q1%?74Lc#+6`Hv1yYJmK^zRadGb6e5@qgA+Qb*Yo~((?0mjiRt?WLHa70uOS8~E z*Njdb@&e!&Q9{qX0lKIb*uCL*I5>zsuzR=?;;^=@;f6GX-T{WjfC~JXI&{3i3o2S3 z^v>>NArvYZ7{n;BSTz;{{%BhopT>4 zDYHy_VqzjNra=E`FFzHI4kS0hJVp?e0XKhz}l(?3zNA3A*a%26LIa$}fx znNj$CSa$}m0vK07WMILk2g(F?6<(jU=yZiy50J!Jh$?Wzw1qz=%uharon5CML~uf$ zi0$E7ROAZN0Bn+jn}PU6+_Q5J`innY@drRoqesQuoLlm_k!Mmr7Y~X1X{8l|OZmYU zaj;63o@Vnu8C)Z_P;qoUF=YH*VUp7o=ep!tZKm|iXYG52%e9_0R%S6-OLv>Bv{OmC z-r1OYebqCuKU<-f^|IAui|v>P2m2Hf{F zHS2RUtMh*}(K*E>o6%p)h-hwYJ>gpZlEmwFF>-qV|KmP>983W?nVEhPr{7zEi79l| zIcahg_Z5w@P!0+$9eSnySOOA@{ag`NEb{0S3+@A}iiJUzM7@ zVuyu;=z?p`!;l;($J_gMH=jzlS-qx_=%>&4)bn@QZQuPr=X2offenP5yqCAP*A$sI zP_#fa{!^qQoAnRXq&DKejb=NZ|6Btfwp3o;s@Y&BDDe0Kv#ZFZ5HkU!?fGUQR|$C( zE<IUji*sU)U&nVP>sIhUTLFuU z?o|CB(%w5B>%RXRKPr_Z$x14F??e$%$X;oX8L6bqWMx!#5+zB+VI&F(h04eZ$t>BM zP?^~ozvrj(Jg@t@e)skLJs!XN_Q&~n)S1KKbG*mv^;|DHh+KFh)B(PSvPj_o#0cx9 zuiKibbBs8G1Qf_vqiEA{OA;UmrW9hB2+>L6jrQxs>&>I{YX+4-sFw@9%)Mq#{E=fm z7UZKaKLZpPZ9D@NioWxJePP(3^3{=*k?G|qgdYwh-h!uhwJF2`Q03(|SuNX&t~+73 zY zTLs6O@4Hot5!<_?Z?o5fjt5(b3(I7BMjRT@B+WpAIl7#o|>Nn^uG=eJ$!$AWPPwS5b8M+NrraiWt`9}+I=fdZw&kS3`XhBxAPvqv3 zmoW7GM$4m;QswG?Ix2sNi6HLvtX8`!b0CJ86b$MDt$psyjqMzmPtyRN5q$6lpaARF z_a4>nR$q(1`EYB;Whk&7d|NZEFwfKU{`$IL7f$B`odA-dz}x*HLGI#-J^kfUl_Ihm zar~kgh}bBkZ<;!{dC;g!d%_?ee3V(9g9W(D+1Xj>m~@f}gAvBm<$hA6#0*2!%T7hN zQ161ea(?ao;rnw zg^39WoO{LHA-Aes*gRKz6ai8YwL6w z^?SYbBdaHQsURd;)A*owWTJk`FV&i@#tgH4soVA6OwafGuv$mu7Y!tgmk%d3Z0y|n z-DWtaV{8CR<%+6MLY~b3N_%k9t?Z)NAy3c${V=7GM{FW(rq(_4@R z5Qw4sHA}z>exd2{8+`gSC002IPXC)nsr;vCQZ*var)wy_F%fmYxtq$r(WV3#G%sCn zWyDxYO8ReqC-hwS8hD2?Dm^2kLKb}=JtYM=B;^!Tps}&64N`3|Sj68;5x2T`7dB!E zd9rR{LwK&&%91y!fkeUzg7^8SuEJqq36ngYJfO8#*cfp}>tgo4LgvOFB2Ux}V=3D6;Rfl(D$Y z^}97St>3am&W*n*N_JLycDJdG&SC%Q#Lp^9+Dd-)SX{}EwC(Ax#NF)nYvKtr>&(cd zo`-$j%FZqpFs@zWEm~+KGt$zyZ~DuzZVhX`*{j}OdFs5QVgG4QSzc;$-U;6udLIlimLecL z)i14EnZ>Ww4be}YJbpZdbvLPCBW~2a=cofqIYiGrJ8pF1#E~(o>3#Rkr+-vJe_%Yd zH5;FmXq1rF2j3ODk+z273y~dSZD;N6SD}4Lpq%^OB$R1*t70QYVJGPE4_Ij?H9}XI za2F9YCq<(o0-ty`{|i?u=`$Ngu1%VTEBIbWF3928Lzq$u!Kr@R`?%_4YeTfiLX% ziBQV(WH`vW?%;p3w%zNJ9sy=T^@>|SW*5zhAYHIofyWV6WfsznL!5?J&!k6QZ~E?- z%6P*w-An15|Geppriku|!U$8*cQjXboxA9Kt|TbyLzY6;%Kpfs5h((1gj>r$CDH#L z`Qf1%yqyC&d2D;kJkw^?F7E7%QH+Ok_Dpwi?Vh1 z0q&^k)=MsJ-Ddf2@%dFAbJlZtD;V%6hidxk$<3SP+Ew-S>AcyY#p6y#jMfRsUp=`7$8G0VkQ*+gS+-Hy-$IyC#1gN@L4RX-o+7!GJg>N{VqSZ~MVh zse(JkafvxJVMYzT-C(@9=usG#QMm4rO}*JAVLpRg%@CxlWKwe6QF9(`dkqk@zxN)B zF?1(r*Ofdo?o^Kz$a^TSm;pF|Kma5wn1poNm7pEB>n;o>Z^UJb z0f|z;KrUat%y{g@fTs>wz5sK;tTi7;MEL3ov(6#tQ2_rQa)7*JguNd)b|CeRDS)Q0 zcMA9`o_cxuFuXpse3Lt12;gkv3sFu0L`iE<4zLv1C*uYy@2LSKaofBO-TM9K+4?cY zl!44O0tM8xiYSp#UCrkWIJsL{abq^F%;j@|`jm^Q16c#3uDKy+ExW4=e~Hz&9{h3O z@xi6pirh)@$_iGt-+PDZv~+mK%HCC7_wZI3~?`|P`Z_V&h$x4=-^3m!mv7tNy@7gtwZ4ULk>r@;N<8?32* zP2#2iKjFf;MKKW$ghbTxqvdhYITN<8y1M{l_a zbswv|XUa>oo#7^2E08=uI{SrG8MBCmf%Kc8#DK!s9a$ zHBeQ>{7GF4t6K1$ul>y1Ri$E8t0rirQhsIWA#v*ucc#m4js%*EE~=JV!&V zoV0WvCc(YGwgy!@Q4|vR6Gm`T`AawrsDXY0Pd)toI|M=RF7K`)4Ijp!Iv90}wIv~o z^78botck-eF*P&<`v2SbBOcT1q#$STv|0#nBc`4j=xDO2zU) zgVAvf6UdJ3{LI~wF zo@-P!;SmSQ>(8fcklKGqp@`$%W-x=%hh|~>Qfz1HQ$f-F)Bi* zh_m|0k@cY}0HM)q1Ds~>DieG|{SwzA=#@-E;X7)G)*;L_$?f6QgL$XTjg2*v^nt|S z;U1KeV_@kU?JnvrF1A4NCbHU~HgdLp3!v0jr#rpPq^hr+={`rN64F0p-->l6h|fw3AJ1FGbyR zlLa8@0IF_ucIV#`k!xM2@zem1jILaFgQx^%z-l^s1Ma6yd2c_r-*dZqH1%6!qdtm0 z{;|K+8H-eyBLZBPM$%9g%z_0XYODHPjnG{$g#iaY(}98>>U}_jje(psm0fB{uBg!`DlkYfKNb z)1t9j0;-6=FAL%}y~oTcN>3kg-*JYqAeHSO(Z{q5)-^T>;s-iuqi`Rr{+AK%OV{{0WF?t}k;Rg8(w$Hm2goEi&T1b7Q1spa*>?U5RzD=mkiU;$d_;*x`G1vPFg zEFg$P2bvKP9qqoncm*GBq()3kjKX}+x_lFEIuu3d=&2~c%9dD3p#Q=!Ud>DVks3&5 zN0spC;ltzV)BuT~WQ?lDEAHMhTJJcyurxnE4}SI!2V^bThJpjwUxEhb^&5b=F!i{& zfNiNg$9i_$%GGhxB719#gaZ658L48E@fG;h4{r!&s z=Y<^GP#D#RD&^q7003)ml#sZ)DB}TqK-1&gnspZRyIXs*F8QW%0><5gVLTOC27g_9 zYb&;%*YDBXKc6-XzyP}-)Hw(F24y@R)NTcDa59J#JC&5Zfi&NIalcOpA`hS&nW`28 z=8XFY3AKfoMk3@Ai&lG6`n4iFeYdC(}Sd4d8u z2()Lrxo2-r4|}8rimN%yyLQAchKt^9J?P5Az8kjvfEpCqqdv}47z2#803Hub{8@=s zyfhIwL1-&rtrf{`ptOgTQQE1ub&1Hg67cs=P|I=FzaTY>2W)j-tr;_0kzX#rFUNch`k9{E^zaFeg>QTxP? zN}AZWkU!#+o1>1W5byAoekM8cBQGODBSKEq-dg-LmVG9+qB3*dWLjNV z`|+7QLt*Ydw0CkMnf++#LK?oN^Y7n&;X?e|1CmbMRGSWacvz1bF|gdErVjUCZ*xi6 z`M?1WhUiDDV03+N9$Mr3|?92M^%Kh-z^GsHb^fn1i*UO$yOa*k&%GuaqjvPm4c} ziJ4T|plIEZ=Lq4gSMJ93q`2P#b=`Ql$B%!hVDq_E9WBXXi(Eow^{1V}!yhAsAUb&@ zah6IHx`(c-AVeYDETe){XhoS0^(iO+!GoPpYZn)<;ZRP}N282G4tl+tO0Ac2fF`)N z!_h&MNr0w_WSc(MWbo{OkWi9gj|uYbBZXKe;&|)~uu?B#e^w{Fq0KAPx^nxUdzvATV?6+SFs53ZRRse7H z+Zrb=shoo+8x@@Ab8QS>w6(3;c-GQVQQj0g7(b!xk>TLbG53-loiFVvQ}uMLtWX#` zC#+C9Cks41rg$zOCG}aL7)_W7oqP58$-~;$+hz7=YTcqWlCp~=hmvE0J2~c*C^?>) z9H{m@Id#*j?oRALTydLk>Gr^Esg|Lvx~8es5o^5;yUx43Wtlof*X;4r0C)PLrTmnOvffj4rzrwoB-K@19bHtw)5aw>c<7o0cZ zf`vuq)7MMbZKfbp5PzVO2mss7!voX4Uqybyp_`JD^7JV$VhY!++d$-TAiaX>u>P|z z;QElJH7|1pj2zS|=squgOf->g!X8Lu^@8Ceg@uj~0 zw7q>;QJ<5<^|~Q0zaYP7cQ1dasK8;K*CY`e7PfUE^$`0ZN;H!ke$u;ct8sIZMVDlR zgf{aDaB-bMbBDT7`kqcQqG#mLIJYF<^$DEXxkFKngTDXQ!ho;-aMqoB_atq;@b{TN zTf%*8s8C2hb97Yx+`Y)i!J#3j%Lc%Mj>mGZ;rTz;cD!3Bpr(DqC)Y+fC8B>;-r-`PI*Y>q>k@&k1TB^u{K0f=lR~MiKnwgnFl>?>1Vqb_@cq3U(5r_UV;5zJDCl{9&si~z(9-oku zvn1$y&6Ouo15yZZF(`|stHp}a%!^_>Xu`u|VwQIQkyoZkbmxQ| z1oSfmAv@tDfiQ&kz=1`;*+{tn>DTY{1}L30CQ%+2Tpmsg!voMk2s21BYx4K#2z8D?*IF9#8y&myP+AFbapVyJg&f_-rSHwfl_79P4Hy!U zW&zAAE&U#b029F@>3R21%PfA5NnzW(Wy{RuB*&tgFKe=PbL@T_v*FKrPQm;Cl85Y- zKmU(BWFP;YN}sz5+Myrle`&C2JPwp`O)Hai=0D(0R}<}L~0=C_Ik6c zlT)A58{iuA7a{d2ER^?F$GYT-s*Vyqm4Ic9+794$?3Nf0kg z-+}x&@NffABG{q(sc%$S;X~bnIDv(RUKLefF0+%90QJ_dU!VR0$)#IR^WhNpOlE`Y zDk+I)C5;wP7A~`r(o$JRn$;5s7({H7R=!24@BW^Pq*8KK6crTV&5|brEPdzAM?1A6zI$)pme9`u)6X!V2PKkFnGC7}E_O{N!9? z_O*b!@SMT9jIdKaB|rS8V6GWH(;oJQbL{ofMapORhg_Pb;QOiaQSVo&k9giJfE>EPf^c6xrakUtEt)T1fn@T)AnvxQCmaotday_(=t zq~YR=D8z8oLp_9p+(dM{f=aG`5Rw!Cw9>xQ4=0oDt*n#_@7TAzT;qBk(ZYm+Y0LqK zEtU}0_do;J39Z$l3LF@4yF+udndihek-+Yx`)Zv5TD2NkL zkD`$pJVr;dT7UZV>M~EW{&!i3n!oU?CSf&UCN5&L@7}cw1s+;hfRWG%2Texfbm;5v zFSU{oVE723KG>b;yLWGN<7_}oqtD_LyF#r=E}_<%2k>Z=cj^31)p-DYsc}@-Y$!K1deo9 zkE8O%)Ne!)*cRH+7@P(Ijz2S(T3`AAXp3NF#pBGWu`52o=#9|Tqs6)_C$()%Pg(xL zK&-)l|2(c%9vkDSsi}QSqoYHFp3Vnkb-cui4+v&QRT)VxtPvjyK15m&#;TwHY#>hoFOh)N#QAhu#t# zi3kn-6B3V`#}P_S3y1cG8IF~!A(nvwJO-~%#BNl5*HZi zNYD#>JUqP*WwStgK<=5dLEjFbQ!{x?dASjYI&MU*PhZx1g!KjVZSz>A-X-q*zCNgY zTXO8i&5XKjoo}c!yU@a!Y|-rts#nDi6i*C9;-uN9nO5^G&LBV_QTr04s)8dtz2()6) zhAb0N2y>|$>Re#Xh8vlW?=?DMbg7YVNcXxc0Wxawa^-e>nAr?e^<A%G!vFz5aP^)n>jeG0rYs ztV^LKy&1CGFQ@G8KK3i{Dp-t zat7jJ4i*;q2KH z7~b+?%Rx9EUqnGDh!dAH_Q{}=JNn#)>h0mZmc0b7Gd{+7XBe)3=}I_b@yVDpnIdl` z`E&5%=6F4~`3Va!pO%)TFs3`c>2To!Ou1`vKjThCp?KiBKSP=AwW=JCsHo71F^Mnr z4USfK9o)R1`$L9@c*k}cLS>H5yNI`hJQ-$MrE8|C3B7nqdS{NG?3-=2!rK(V%gMWr z?V5c3{5h3EO?E5h!JKh=vi3SV_(Zf}X9>v)xz7H|yb#G_C*H{$6CKufD=1;$$uy`E zsJj6vHx@%x5qmzH2^FLUM;}D&%02MGYYX&p{0vkJcDSbiiy3`A*}vf}mG5Wh@=2~g z`9O`*??{}oVng04Ohd!=$b|p!fftA8cEVDIR*?Di<9nQ{O;m>qzZP<2D=xiQOuC;e*j*(WWg2*p zCR^&jjIOYdlF!n?$fL*THFQ)&MPpiZ*_w?t@+mo>8bfLM{kzSS-x`RRf%zhc5Id-D z2nXXGlLl)@6YT6*w{5##9YN&Hd?uyH=L!}hxBBHvS_3-zb#=}?Tj zUt%AEJCTs<0?*vS!FoaG>Hwo1U2q1Q40mglsjLjL z)-?t;2GZNpRY**XFlS?1Ir>KdYCc$`r=>O$1>e>e$V_yPho!`L0K()H`OP8=tV_@7>;`ck!hhF2?P~C4(H)l6N zpouyzAA-8DTeon4p`ks_WAK+S;ps_lY}E*m$uF$ z`Rvt8V+(JDGBUU~N>Q?Siv7m_g8wm))`@v|03>#kX-On(dqtVq2OMKN7l2%w)_?b}=Da#nq zfjC;|9i5z=U*+b)ylrJ_8iVJFeg|kDz>M2Pgz~;@Vo{FO9smk*Zm9Z){}s>DbJQ6A zX9u2XEN!U&O9mc8LIC13M$K1`pL)xdnopnbxIo__cI{?p=-KR6*sTG_;nVDKdV{Bh ze~$Gqa1ge$^&2;01>)`Czz2hP`Ar8r!N7^{KXCRd?d?%_h5G?(4Wemll=w6V4>EWV zmV0^VWzhj7!y(>?k%Q_7-Xim!l|VioFe+&6MwI<^?0v}$5d7gC z0jyZR_AqoT08t!LU|m6k$sV?GK%d`gV>Bg)F8<&P>s@d|7EK_{?nMZ)z2`bzq4T)x z;(`H+a=7-rybk&nGh=503!_!U$qax-NC^FV-)BveeJHKLRGH>n+OenaEC71kS^t&+ zBJW$QM~Q8P4+NiSUhvHIbsKS+qZfTtGdnl8b@OImZ_$U?PiMETF4Xx%pB=o#EGd__rsSFLKduWycFffHo{#3>XU%I{Me@r^L z6msz$^z{QyZxE;b_3P}!gx;_rGD>GaNS#PMDX@h-Fp+IeFLgqy~=!-YQEnh=#RrEs`1MnP^tK{s0K%e8M zl}!5qW^;9LKrFRKs)3?0!AUGm#-xnf%*6w!LI<=a*XCSyD{7xq1EIpx6yroI1g4`^ zGhys)*>sNur=NsAy#O_nBEQ`Cw~FEaQ^H9t4XM5;25~7k^x#o*%YA2SZQb(r$`A1B zZ4U?N2`xd-=qL^$Kmwf#v|)$XF`DVZsXn;$U$GdtdOV`D7qe+HF*16dn7FRol(blY zPV4TEHfZ9y3m-`;^2^HZ%oXKz38D4iyZT2oVI2Z7t}$1W>ob%xQ~cLVAO0cWJqpWy zPYr6y2`vMk$0ELZK!$Wp)WFct4b;Yx3=-_0JSjtt_^9h|aPtsP_e5WZ0veG#0Hw4S ztHphZ_c|N{5lLhiYvU0-@=C9FZzcBt&J+Q`@8Rvjxxx2NL`47ixIGZnzf~l0)ivPH zpn#Q^H{)l(MU-Kj`yxF!NVW`O@}BqC(QCrm#m{gX@>GQG*cTZSKZe8uIv=;lQoDW8 zo4h>go%_;KAMM{vaRa7I06T0&Mczt9h`*m%C4ApM){ zgZ^JCj{kS~%FZ_$Fff-}#_K_Q@J{6LpLdV{yqAqnD?=ndntNtymE5F19}V$8*{{wp zwJWBc`{y4n|BtWz?-~?B-}29QjN&)b(AEY74qXjSI_PSE^%x65900*+K}6ZBod)9@ z|Ml*N^I>AVd6NpDD}t7Q`HF^WLcz0rdj)dgwr_{lJlBLnPVRAOZ~mWeC6oRoiiwLr zpbMN*P=+AzrKt%fqi~$wk&!q~QXyr*|25_fz&ECr@rNO7M{}HrRe_DHyQRe%xlAAh z=bW7m72PG1eITj=B_Lv6Xc9RCN(gq|ELcJ@KIV!f1LAFJfDPd9AgfU3YycBY=sXzr zFU>TY6Y|BYb9N9I-42+gi>bX?#TTlR+}zxZ93ry!qPnSRLE@%7=aEL_c_Cu_>vt+Z z698*~0b-Mn*T=q71tblu2O;tp^bW}eXl;)JN5$;*Vq^_iG^}+Nnj>=X$Rhf4}o9{dmNwAA~Y^#=PKq;Xn7p+6s()FJD5DXUUA^D}`CCK&0q`DY!gwaiXHUwC^eqMO-Kq^y*q#o`95* z#DbRuXc7{lNp^<;>Y&?1TtUHZ(xD`Mg1vww5RDD#JxWZBWN3q{9rkbP4U_4$wK|@! zI#JX@#{q*pJPw?9a8e*Le&|y)Hc_Yfnr*9w(z|LiidHa`Y^5$i~ZoG$cP zEyQ@2U}azx$j`B?5g^4qfBqc`qGg_T^As|fZ7IhQ^(=~=>(ttr85v?B<#d|BZXJMi zPb@;ok6nmG38fFTGf*EtX|P^a=T8z~)uXG@$j;4$l6+V!V+B_?xR|@F7#6w=P3fnP zA4|wcc!tpQ4zns!MsOthH{06UVjcvoCO5jeqUSx6ZfKBzc3MfC;%C5&>~dU!NcauI z%od1!Fhd7Z>>t&z%DSXsKnXDP)5AdKz#tMg+UL)|a#YNjv8y8?szUN2&;Zgk1VCaP z2;5UpebRU_4wiOY5LsDtq)8{N7&kh2Qxoo$L!o4v?&J8sD8o8FByq zIV|U06sPNpjvx(!#>GlsRi+WDTAgT^;ZJwE*_3TpSU^ z8&?d&A?Jsy%O8<%=g*_-sOaiqW!rQZUcxxO0E8_CYb(w~@sh4-BmtwWE8_#R13(*0 zd*0h>D+%bqh6Ij1Mcbl@{=D=hj(8N#n5=~}a{ad}ct;>tfng&C69gP`VvAi7w2v<= zID|1R3ORvHMXVUE?)cw<*x2~)Bg)E$LYtw|&jrcu&E_GnQ z3St(wPVlpUjgN#dK}~~`9B9Zg!kJJb4QKS|KkQq>b0_T;F7g$LyCooE(OUdYQyTg7 zP-^qO-?XUcEQistl&`dw8>w+3#T)1x4*TYYhLJJMXr4ka%P?vxixik}ycS;t1bo1s za8N)rMbFIK($PUJWky|!_=g4j3W_^uSmmT!ZcMA=8L6oeC?3*+5K4?{1yQl5AQLt@ z8L7VxKNWwRoSDJhKo_hGGWRzwxFYC1T5fHXHcEN^95wNc(H!ua*BZ@=yuF}Dz!OIt z4-|m>{3#eT(D~xZR$}e%iCcD1G5wG`S5%WyZ76^C4JG~S%Wb>)WXGbjRj((INb`e} zVjS)q=|8_peg68`>A;m=3pJza?K3B)w|-KXSgg4yXFc9g&=uUZDRPtfDeo&T3#Tka z#|%0@|7bM5Wg?oM=Xbu1EKVX71{H~2F~4y68QqCzF`wm+oYAOHV83!?#x^(C)W^j% z;>Cq0c3+y>kMJB*GF9BtL>*jbLG{}7b$9LR*V0dCDAHaBZhaMIzzcl_F{#E<_ZG7S zlbBf=rh$+!7z*lBI!X!v03}K&La_6DNk=p_FCwr2Wyz&|I|EQag3=+q$H8l0Fo(}z z{vAGOboc2$b8HZ#R~A`t*dIGhlBK4$mS%j0kWjsNA@AX;r-peTlF$)pYu5mMl;^@I zm~@;a5|T19?%)l5wU3#bleOahGIB#zUs}3O1=DHq0z0sVAjDhK9EgBTq^$!O!L$RW zojWzP(1lW#BEL$UHH`1-9f+B*z#QxYv2{@I-a9L33&_Ml&-moYuMpngh|AMZ;=BV+ za6RKW3PrjW>XKPv#wh_~co6m_9eN~5A7N5RE-x$NG!u230nZE! zWd}Ju&>6W^!6)`0BgZlY7?2^)+H-Tyt%%+LvjQ@)(~53kT`imYw?` zQ-I_)NGBP6pAWLE5LF0~D5@Xyy$<)7=;(;?R5;r<_)a1Vr5?V!!QbK{MFD!>ZASD{=Y}W}<*40iX58GY8Df&feVd?zRo^eT+pp2yraF0D%>Ykt;!S6TxJ# zz7YaK#uNJb(2ybqR{!M5eJPT`pL>}DaKX*Z&U()@8O)1g0C6%V3L#^`QZOYaXBHv` zClL4&A`ZTJQLe1vywR=xYZVwn?@Tyow|+=E|K}X9i`%=YlfU4lEROY z$`q(t+}Ds$!U2jM!oKh6A?1qoIrd0RZVIai2@4~BGDb*PJ#17;5Qg9p{S^iH`QI}d?0F(t-pDhO-FTWdq6#ygY*14mzR1bxyZuGc z0YIdx|8n2BKA*72r{~) zYh3Zc!Ab$rQ>qVrDH16!2Q7JCfC!v-`^98&OY&>#T0Ll~~xdKR{8w`Z_)By$J;zMTMB^w)j zx^I#7hv<9QRXPq46SM(?A^#M9zYDguTWDx7Vgbt8{Q(yE8*CVdSsD^M0~NNz5zadp z)t8W92~#8{VntQI&dp`JM@_m0oQOB#jnAsLU?k$lU}_Sfr9{fX8WOb6;@I7nzumGL zfiei9Gf@24n+R3BWNpoVYA0SF*$B|4gKfe!j0+t1!=Al+iKHRwEF}57y&@E>3>nx8 za5_W|CLONULbSaRyH;06a%XWy_D6v6r7X|Iq@} z)XW#gxQ0wSZL`R3MG`24y%4i;@pMiQAsTeS81w;BbSLDaF)<>~CK1GqD+?J9OG}>8 z5$j2qOKpT`6tYS{){{-hibzjMaloYdKvxpU+OuWIXA&aRX>jc5`=NzeiZ3Ye`ZHbg zKISZeaT3;ihU*BRF627k=N)_$e4UmsEz1g%K=3wT)&#Gpcx5>z>^ySnl(jr(Jy|<#R%>&B-q_EUAJa`OHfv`#L;#c8$WseM49NCa?LMDfeAG{-9$&E4R zkk(<~#7dKa`HVq3r81fSSfs&&7kMi`4;<|e6$uL!2;1bkl`rDS4wg&5-HZ=;TpQnI zesh<9&G}}RuWj0|cHa9SYw^kN^7}qPY(38Mn|z3F`eEH+yeU1p`pN3dVm(_ zF_&ZV_zyCW&>oY#v?0>4hWZnrl`>gN`N{tBdNoG#BLC3*7A6Vwlev9wRA+UHySmI& zRaMQ*ykQtX(+hvb@LrYx3+y-Z*ET1}OxakrNRvT+ViJ;awQdfpQjysI=+kqN@Q=gW zzBOwQ?sL6Nzjz17D{wD%d(Cx%JrJixz5IZo#s@D9$OF2de$?p@FiR7I+6osoY$z5e z!7qqTwIp%_BV!~KE&$)=q6sf6C`CN(&HIaqnU|W4jjTcEUY+=|i(4B7FBVO>vFQ1B?YfkM`W3%dmW9KJESmCO~s-4ea zpip$7KEA~)XVvxo%e-f9=cj7BO?)C=zy&E!o|FlxxG4~}hGZi6_EoWG>FMk)Sy!c2{f{E%Pg4T*~=kE#SL2M6uY)cYb%t?p-Cj6F#b>rV8!}XqH@S zu5kTF_Q zV6}=r0(!y_Mmz=>ZM+o}iZFMEDTK!>kTq5;S_=c;izDa~^YcxRj3Rvy(+5R|KM{Y# zP$V`B3}HY`fjaYj@p9b2>d*ulP&6iZBbu#cifM;9G2N7t(-MZ!ykyQ1N`J*!^Pnra zO2~KUf2M9@ssHf`l*2IfVo(ZJ)Ji~D;%yiKJWo}1b;Z`4gA`d^#g|KQi82pcLLjvx z>xlp@B}S9#@XQ3Gq zjP$@AhLxo0A^#Y*jSL@-3z^VXV(>v8Oh=nH6ACnfLH+%EZok?Q_A;cd%Rm?oc{U*s zBcNK0_rNrhZp9rCSf4Jwv2sf@DR3xrl%8EoF%n6Bf^b}Q7IkgSv^=c6}=Fd#^` z80KNTA60>HM`uM+_ z=KQ@NnS*c(|7Psi6z*T@Qe<*+B@B4Vv)xw{zQ`OcEe93MN92^2HPq)20hG2ueW+ASMM+$VWNA4v?a-|5A;+-R?nXrOwr;k66z_~UH{5}ze+ z+8QbxYC>P|L8|e}yeWJ$+U8)O%mcu5R6cX5mLE)!XcQ-)~!8 zQ0Hz$v5yG-(sS7WM$kT>8Q9{BwOqEyk?@^z$Te8EN6N9wKxGHC0^ocJWb@M})WpuW z#b_y?Km|^f%Az*h46_cF0InyCPfM`3>!f+8?+CANnfEb z3t7koXQ*d?Z~62GEYXgKSRNymW0yB-0?C3nG~evC4P!&=Ir1PUC!8o?5TL(+kO)PA zd^3mYHndjH)6zM7&$8jYXhu? zD6G)J5XpFmJhJ!9NBv$Eh)D?mf!o@Q*lBV9D66PocF87%f_3-=fu`@+0T+wK*|Y0O zar)0-LTN3y>I!HMM;eCW2nq=~8e8sp5;$9h&^NGnAc}*}<*wUTj++=CMA_)%-B7uF z|GK~qy{$RN*!ShX^cjI;6>79^D_}z^%FAuL3k!;rdj@U{pZ8Xf3|;ede4I54Zx`n@_^7RJ?QUSbM-{f^kLp@Xr00I z?%$sabh7TD6s7?vYh+RSF-yfrMKtmC=hA=BqBLfmtxD3RZlZQ=AG^OYmJ^n{!=HI~ zo!r>zp8D?F<|E12yJCR%Y>Ow@zSFslIHW8g(sZ26l5Xm|*C@P?m zxOcDuDxCh9;cExyt_d5yB)LW@c7%U5e}kdhE#BG0fV*$sXg=?`$fb@U8AU5IVtu^r z=y#uhE4p$;U6c)Zyr`SGIXHTe2Oc3IewU{P=mTz47z-2Y&V+)qLNWqAMUj!sLlE>F z7kphO@|AQAdLPs|fHJO0Z%EL8HecZ@MgzS@863#=aX^0%Cmw=U3-Yn)+7$nKGov~eSdZ4`w8%Ydi=^81Gt`i?&_)?bc!D`3&Mtc`_==K#O8l|iGVn{m^}qk z#`?poBwFDlOG-MTk%Hk{VHKs~x8}<=YCnB!WI)@8S+umaUSJ6D6&#wc$NzJ9_?qpv zdY11T&Q!|#i}VsvuHg|=Hv@lbMq06ur zRfZD(x`v?bWQV9rm*ZaVb=)tpGy*sc2^}aGQM#6Ws|j`wUb7y9Dia@!Ta!ou7M7<< zE0?!;vjeGs#bJ7Citb|GlV(y_MMP9oMe`~!5o|ENob7^|g*m@n=#vPnU+XA{1oYydjd}VBV z@su}jc8t@BQ{%!abzR^LdQbBcty5qpbyx+gDgK9XFyrf`1_zkUZB_J5Ut<#KA7rbJXl4G%jR;?<5U0-dyd4w-FHNZuk`EzDq>j9F z8EEIamG9E*WjcP!oQSrLfljBNEnW{KLPz(l=dhH|`}dkX#$e-Lg_ zA+R3S#x9R%CIIWe@s55$kBliWtllNz(=78CD~8m_BMfPYiM}l&8Y3ro&@6hcEXl~b zUmsdeSs;!@ud@r+Td=GNI7tPExg9qs4c>RUTzwS$wCZbg-^pdxbF7C$eC6ytzDW+K z=?=Us?L9qoTFO5@?e$mJCUe2XU;K%7X0GSFp88%drET0XnlDDo+WYzy59lo#rm2C| z7rznsct`CC%r{QR{RzB`bE7Y%7HgrtUR+d^=6eKgRp4r94V0vxe(LDR2Mb7}0=^im zQh-S~I!vgxnCx4TV55=PfY#`=!7`uuc$l1rYIie*tPk8q$*INr3s?n4*NtKJ z9NH{=A&zSCJFp_R#c6@*{w8$ft1Dh;&{N3Mv$L@Wu27W%*?ZlA@u7W3$nv2o57ty) zL9YH%4hA@Iag{QB2d)IXs#!W4+-i$F8J9bpT z&R6?bU>Ti&sONFGQ7M;yT`#I_$L^@us&|-JIeWAVMXfMfgxwhSO&g#SO&gyq^uML~Krvf*S^o;Bv;pnY`4C z6rYql1SDWMfoN2F_p>6fcqmy=vgzsKenWwT4P|a%2%#CdP8VaxbAes!>*E|Z&9bUm z{yi68bP&Z1Jv|D<-yO~AAbs&M+`2{W_LDxa6#ur^zy#tT{C=32jUfPQe-HuNWv@?; zNFiQmT{0gSLG->jhwLWgPG<-PpjaUF;GjaI8bI*ZpjNSc9iFczg+G4mi53Pb%J=Oc z8leC)$#YoavkZ+VXl0-7t(2AwcTSPrd%D&X28}z`oH_gDBTrP6mj0uAi|&HXzMivH zt=*d5VpdEg+WGHnU472ZG-U;yHG>c9a7>3z*hNLT?e6&3fdk1}+w^!SGzzJfI;1I(TK7VVi!nR5mk&FB@`O# z6tp6%tV)zz;n9QzKw)|MSjR`o4M?yLim8x&bzn(vVKle9M{w6RzGngwdlQz##J2xH0gk*BD&jKjBD3A&tDqiPtBuA9BEA zfbs!~J(Q@xkx*G;WgmM+OspGgnN%2RKK$+@-~nJFfE;0HLY+_j;2YXzKw2&2tj?9kj? z)f^7WJxKhSsMUncXrHiN^~c)U58_(fbOJ&`2$KmJ9e$RUmhaHJ7GC;A>S(Qi-7lu= zK}rFI#MFv-J>+)b!-D!XNXQ^dvYd1cxnRX@ZEx#Fe-P&uMmsEC1r|Opa(Sy z+XS>Toz=O8L?k5{R_Ye#=P_3XAqA&u`~9_P8LsIhBZ1O$vV6P4d1Z*cl$FcStm7vj zio42c3R);slBfL;S%YpPYi73t7~hKgc#^ci--*vNamLae2GmS8TEfA z&LLquU7?7MIiUD2s|Z0cfI%i*!%>ZCM^*FY-U~cS*Pk>W!n=UR1hs3l7K#8|QTWu# zPUwL!fv^KN5-?i)4!pXt)D=4V8=^7T4tkKdxNFseia#9Dq#&!ILj%wLH@HC%^S+lQ zv2%d|XTJvJ{au%<3CLt_P7Wd1U3QOPW$|Ts#jX;701npf>B-t`R(Xpqi#=;d>t#l` zS=NzgA310WS9&dwKPFzkewa-4^QCpZ(l>Z|F$jy>&QTfK8?*>e3JNs&L-#`D7 zmeMZ`E~RPLtmc=n^C>wODWsK5M>kvd;(H`n2z0W!c{@ow?l;q4KbrUfZax?+=#JpU z%Awy#UmSjKP2q=mXc3<-zM2@T>)(x#14L3!yh!@j8=?(5j3mIL$BzB_kx>MD0Adz^ z|5_MkCQ(`b{Zq?^%R4&@FwYmRLNw4^;W1bX zp`qG7g2U~MDjsHuYoGl4zwR!o60@^8N(bjw-Mmz|0T8*P(tQw52&JRgEo%Rj`%t9S2=nJh2^02d3!qa9*rzJ$xGyw?E* zFQWF=6C(3OJ^sy1!VmV_#|kSJ)?t7MrgX#Tta9oUbZNxoPGLnevo3Jx@JJ*i^npPb zc78iep&N5R3e<#H;XEd^;gi@&sn}_ANuW{eEDIuvOWe7<^G>9lFG9)2$ zqB#vjMF=G+B?$?ck|<@YjG>82rcj15G$RR>k|gzhE^F_-*0Y~?dftDYw__jsI2M)r zzV6>}p5OC3fXp!4=T6}O^uJBwWn<%TJhzuFy_K9ye#7;7h8@dOF=WID3^bR;J@)9t z^`FgglIA$RO=#R(&}Nz7=askEo#5_qX3g@$jomCdyLw%|bV=yVOwImH9Hd8~06X}o z0ap$)`C)cF3aupyP1@*1=ux<|c~Xe#@si29JBX9A_4h9xsj>`!7>bSHb<9!-7I z`l)i{He2j1mvEi1%8ixVi{Ob1uKo`a{N**LWgJ@4Xc}a6Xv4gW>z$f=gmn?~kG^=Z zxa5#X^X=O-pIb384%jvF54ZO#rRqSN4*4uf!?yh{Gj1W~&|r!53>0OMNxuE`=Hd|< z!qDW-Me_l+FA_2B>e{`#B_RW7f4zTDI-{?`h!Xim*wjOq=P~Fdu8C4iQlR0kShXrN zB&43MNZ&_SR0>|r2g%2R@u}8}*S{VhucNpp$tc4v2^vtggqw!M%-OTWM7*h|MMahe zJ93tsXx1G_^UfE0mA5Y3fj!9I6b73R796Ql{fCRUuWKDF6U>;Md0-Om;|$6u#spT3 zj*e02bxe;(k6sH0fWjBMl6?uhxy_q4vD>X~t)Hc4yy=;)O=dUIp)o7vT;B?fepZ7p zlfK$dWJU%1;zg&R@A=t^iRpWbO|S_%Heur$W>IuOynS3!(_5RX8KT%Y6O2MO19V16 znA<0pfi@ssA4)v{{vkg|Q!@!`{G)DZELtuH8ZW?rfIhFcZeti^X^ACD9o{iHJA?6c z$SQM(Gc#mJ#5~df>+xGS&IK*tba0G)cT;TKv7SCq>X`1jowMVhgImv?n{@HwSJ;Jc zAKm<7y~RXZd3hXVG^P*)Wr7>{$a@Z*eSYb6$+Npz2N?B?)-~GyZ!Q2vHw(?oVDSnv z`ri%DIHx?iuj1JzujpP+wU+G`l%O9QGV=H63=K79Wx{Q$7%@6%VbT4)?x=3Nu> zN}}W9hT=X)^~u@Je4MRKgG8|=&?JNORtD^Hc)r|wbK9F;H+Q|Ce=tO2u3lV`$EAwn z<2TEyb`@>4R&0~m*E|2gYRl29a)-su*NG~5d;E%}_0+bEmJSIeDR=!F9~V_eevC9b zTzlaCVyB3xA*XA$yqK6eswn&3`~00VFWt-RUH2pQ>xfmO7M>gqJu%MNw2Oso%*FV$ zFOAo#pIls-KPL2f=*>;H;vH7R&y0^gGN^96Y4o*ojcvvCSwmAZEY~s9j4^d# zLI)8%AVw+pKm?`h5&njr(d43bV^B!QLq@Mba=P(rF#VvS_U<^EAuJt1UiD~03C=RO zgLJ{sX2#xD3l_w{D~ylPNB0LGLUM@=xoAW|sbbP#D$}vN1AOIrfirb9nT#GUxVbM^ zlZU_@iJ{Q%Q~`MhNV<`3RyFHfgPCY6)(Nidg}%-o(ho=aBnd97OV_VQ%yq5$y}e

    lhaZ4QZnbC;hr($2BM}jCkeuPchz5q=r^kb>de`W%sUwazEKJE>HeI)0 za?I^h-Y?dZdw}0R_#hGPQS!rOySlwiPC_56FRWvZLDYHo_YH9`FQ&Mj9as7O{q3h9 zuiT$*ZVB=6;?EB2t{bk{l_QYRwI*^oLTPSi3HeYMCRRL*hPkwM-MZ~FjXZU+`2Pv* z3~pR!2|QYcJaGMssd!YY`$`{^-bHuyPYWDkb6>D`6Knw5p$NzmdKy~GQ_gyxzi`s$2OVttxR`Z$uPlXjLYdGr?t-B zq7k~Z#rgBTLO#H&{24YowJckO{k!qa%P4@EFHwd(q^{ zli`Kn&y-`M(MnbpF(f$f;o&pEy;#Z_W7!oO!X45*zsETy26Q)TOL5Msfj zfK%2}H_}vv4rdhehxH;aLy z|LF>z3`3MnKfevxKKUmPx19*YhuXn)te%F3*#q&ueqILm@7+7ZLd`2@g$6f$-x@e` zULWnMS=C#+CwOL=ZUhWxUvsoONH5)VtEy)-Wm77kk)FI7{cfc(EOi;dL0#@dsM3hy3o3 z!pqD|s?M4Ywbwy$9c{yu#ZTW?ML(Q8^!J2e+6JCEpZjN>IQqn`_-x9$;x8%v&eZrO z9jr)-TYIV|p7d?$YbE+->m? zTfEBULYzC#R0(H6Tc>a7?uM(6Ouv3DwD0T(#XS*w_aZ&&8tU3k#CJgMHj#Ak90l2-%f;!7O!IW25n6g4;7k@1kQL%I&(#)45I z_krh(Ssrx_qgBx0k+4EWj0m5*QK-fVoB8$)6$r&hd%p~7W;!hzTzniPHsfyzGI{y( z=%jR&X#|7w!Y8&mG<}*+v$sWzL0J~}CaEfzw8N4rvU0t*pg6Z?AR#FH%nIPo|-le?czf1Ce+Obw4O$Ztg5qS;hhF@1lWPo@5S}x|TVK1>MH%MbHrK<*$Lc z=|*0RiMhf>j9Pla;BgE1D7PCeM34$c0h@VviRKENP}f!$F=1~f;t=Epczo~PUMpSa ziRU=#zkVgeoXys}%a zjsI&w6-79eaanpWZyV99Z`*OLc~(|mD}}sNeK)rnz(7P&tBO;8)+p~VObMdoB4F@e z#IG|Be-Xca+*tm@O)1sofCSEm5#iy;tShK*k;}lMzYH@BNWdfw8|(RIW*YHDN>iFw zF8-wkhkfh z$BTB_X!i-dZ6k2PYRfWt?X1@+P7C1J3jWHzmRlQ|9sVRbFj1h$glT;L@nZl+9ghq0 zuWwS%`*QNYb9x9~4kKG>W+=4c4kFmff)t;A0=GEMBkK7bzxQL1z)2`j;0XCRsBT^C zG!Oc_Nc2`lQNoE@XmiGs6Sr<19fzg9>hR%q@?+zB{kq;hBzrh=jJ0cxwk#}J`-iNS zp5+#Dbms<@nwH$}I#r)WiAw7gqAq)#KlDvrlo5M!X5U9T5@V}V*Z!~*jn=bw9I(3W zVTJXkCZAoQ+Yi-V-&S(4&&cIwZQ9Bce!V+ylbDOo^1`5TYXPTyHEepzW zi}ol*i&gpsiZWjET>GV~7A=xneSRrKPAp{mW}rJRe_qPR+D0 z;5-Kf9irNDm4*3xhCua0c!m|FRepcts6TAAhVim}WuLxKo{~R3e*c>O7{n+mXB8Lg ztExI{ACDchouLq+IDkhT1gKz`x_U|Fr=Hs#LeB`zMtj2g*?u$Mv&pqiaQqSLZxa|kHNFNw%8D_^oR>Vk{t9T?Lz zjt}P$77TT-w3#hw4w-~%eJvXh`)q+_&Hsl722O*6p0<4-c|Tq$pfjW8C1ipfR<7*U zyKu;@82wH#WG|p70jUq3B0%t0oabWZt8KS!wEsL;@0bE7h^B^yTfrl681?@4ZU$0` zww6i*u3!zOCO_yexo!ouDy0t{FSt8*vHHyI8E%g_S6{zAGDYc3eEfN#4%5 ziL<<%9bDcW`8eic*u{$dIlt4sZD{%FSe@%~G(UfAtk2l*mv4V)+M<=xM}2O@;Nm+M zdN(~mM9cMVNvG|2nYlT&COQxsOcf&z9qw5t_xQSWRL073&Cyy9_Hsh@@Bf8B7%AaP zq$54Uz$S29CJ@5(w+)kHK;9m88lnk-n5(zFpJ=tG!v6n(N;Xs~r%gzLMS7}!3EseI4dy>k?`NVgfAsc<+VX;&;5hK7#^6i!) z+KMcfj}C8A%6ZrZABTLuAP#D(1tE>|`hnNjUhOq^ZVg$0a5KBW7ZVGzYiK8zKAO7e z*>L;JZcezDp36RNFW*T2@Yd zS2s8tBh=M<>jm5Vxrg%&I>=Ab+CN3khR)~8H8k>JjSCk z>bSvSpEVg9uKT2nJf~mn^}(ZahoIK=Eha&xN(tJQ3aPry*}HpBHkEIDm)_y^)n_lQ zz9%0^9#!WQ7qzfgbD>I=UQU5=rnC6rG`AG>zG0lr1OxtVs7#eEGuG+w`U#XmV) zjv9scrGGhk&HCJepCkGlS{w{2mOl}+rA?>Lw4NU6;Dih_c|`AWxf87qhDeELHQt#; ziaK4*AxSyk#aLCr=_lcaGGwyb8#~YS>#5N|Im=d0E*=FYDMWNL4F^sr>q(hazAV4Q zx_J7);x4=afnd_}l(J0K$k_)>+$>@Pu(~Uk)>D=_Gw1ek1K-EwY6X40XYBjstS1l@ zU%{!te{rXRIRn<-SOz11!UEu8JPZ)k7IUQSbP2W_bt*<216Sx6Nv8&-3A9FQAqu;{ z{Bw{zl0qsgiN3f7G^b(aLj<1%I*N~#Gp0`$jE-_0A;l$6TnMZwPa+zrt=a3(nY2H; zyu3$er^-5|danuIQ#y;D;;EA7>=jxT^M~BEBl4!U_xE9zu2oU(L^fdOO{olu4#_)mnkeKaTm9qMq{w zFLM0E9G#qc&LWM4%a~3j+2Wq#<>>T9;+~d9uDZ|^KYBJxy-n)g8104wA~_e%4T|jfkzbnfPg@%i_*i4<68PcP-cs zuM?xI=%da|t{G~`E>)Ff*k2z08DHBBja?u2A;>8}P*Kn~R{SN*k@fl-Z=*U@zXMtd zlp7`WXG|}!pI%t9a4=k%=4yE*HI-mHLrd9DhqJ^rhAolnf##G27kx&fquhWk_TKuw zbOKpp`>mFism>0VY)hE@JCoMh7jd3Re$StXL^duiuVBVIXqAoJlLP6nm!fWab`uQ( zhwvozMf|k?trOBUgO;`1@aD@Zl_M%komThi_D!Q++@jyRjn78M4Vu15DX70>XT8qn zhDp57*wK8kdFE7K#pTa)s~?|#;;G>-KUw!w@>E**mk1k%cXmZVbKrZ?nqfy2Lk3q!@(c55&mwo88klt4NJjcX3JhO_b^kabF8V*AEje31fAa=c z<6#n+pn_}KATRgMpY?Kj;D6JWS~A~w5MGwz+t%8urdC=d%do)R5cbHlV@2|N(S<>Q zL8@qCatwWZ(ks`NbkgbWGa;`~1=pz?Eib)eZVnSZLImvWlu}^KL#qac^EFrwKB?Bd zMxX;dci*r<=gK#!wR7k)msnWrjCwqLaEEK>@=1jvwgGO0NQ6^)&z_^vSACovJUfm` zS=K;szsKtg{}CIUn?UA%DN3swGVOrsutr^p8Y;vtL+nRvp6={Y7%?h^!$3kouh z-^Pt%Q=*K|Ji#P{aZB0!cvfnnU38i@t{%)0;36g8x=LR{fljl~hQYYlBd((h7FW;4 z#B{tCo_LoZ^Z4bUxCd=z_m*=)d@*69R`z>Id(o1Yn9(=5=(hk)z20VEsxy$zn?->(N6JS6r!7FPMxy9 z7c@t(ft@z(+V$%rh7H5FkD(N+?;^XBj{`O}4vK1O62<7*zMM-)+vb+^9}>~{&D?cx zQtY%215q|kK#n+ualPf_cq|ZDcJ<0v?c@&2Z4*|95}5&$qnUDTfv32snG#+3nX+O6 z2jnC_!>7f?vt#F#z5R)W$giHKA=hbZ!xM!$&H4n^hxg;vwP92Q7KOM^=0S< z62wrMsS{6$;Or$!e&Q&f`Q;H$48~Q?E``ffj7*-2Z*5Q~8te~)D4VW@kvWeTF{aU* zIds=X6lMVW?Ph6%KcHm|b~F>5`2aeT%$c`x0rH!f26}x&Z-b~6`NYv&0Xqs0udl1~ z3tydo^kuug#eb1?oDFZkU&9%|95`!Qe>!96K?L-MIOxvHV$dd^cwh_KAzB|@Jv~IW zfXcWxIcxWkz`FsR7uGg`(_h00<|FUv^e3yYe}Bs*OX$PqoXVqT{swsaQ0b82zQ8Jm@Cz%GY2NyMiMjb9h-yVe-E|&5 z64Z|^KbvGG(-(oNL$2LES-R_X7&jZ%ufMz4jyc<2cvyhU`cXah{9KY`*J;A)4w)M9 zJFZ>53SA6`dPd&JKsAk0{vtwcqORL#(2)4j$=9w&6X(Hy4ST`bXK8mEpbsMpuGWw! zAr<|1sJ7JLOae1}k@fvht}g5Op}$;Dk=fqx*(WtcqNFa@v$nmBXgf0j0z$)?49SqY zdJdR_B$L0=?nmf9h#$W)_$7F!q=jwB%6z{DosaUE;xehzPg17sOFvbYHhobpy*4|} zxae=b$f-`KLa$egSx;lf?)cgexbTpEeV>sjn?rwq&(@mO0*btT^(u9x$G_Pu;vFY1 z0>~u0VBEK#1QvI|YM_McQ5jJN4(qY_j?OO-EUhl$iK5FYhO# zE86v}-76I($(Y5CA9EwjqTGMK3V}=`(fPkv zGhO~4C_TpY%P4TT-56$>srJ+K`_G%=*LjUFe&z+;pA{TBt*@rbKmTsvw@+>%|3YKUw&XSO5QWO3(JZm^yX{u8}_VxjK*nYAockf~IlV!h?X7v3wUrh7b52 zx5c0UfuePC4tsC|qO@>U%5Nw+_w=>cE!J#Ev6U;v70&+T zZ)@&*EAOE}<7O{68npjw+R&n0ZUYDretv#~qt^ZJVCoE+d1kua|E)DyOI+4%jnBY| zrYZp3>zHoYjUDTAx{Ii(?Q^7yxopnMt>+Hg1}X&lER+q~p*H+d{MK$K=C(U9b;z_( z`S1xIT~w^3=bA2C^S$d7d!>)>r=2X9Ik5Fo@WA-3pX2W-TK7r5|8FjU+;Sa>HzLVL z8Rtv(+^l+2BFfyl)9#Z`lV(xetxpR!%(aZe%Lbp3?y&;(7f?Xt`=gLw;?D$;#&g4laARdL|4AuyL)8$00QE&8_?#4R7zOG_?Xl(HK7w}+ z19mF;py30{YfK5tfjY|uG*)J=L}o{X^E7^t!>GwyKPZ#Q!+O*{VAIF(jz`Bo0z#H} z#|esiOjV%edO_*DWIV{|Y9VrCrUU8Fg{wDXX}EXaK0Fd)8OC@V&n!brhb@;xrUooh z#_{H`U>fHcB2U9*VAl~0OASD6r#zV1W{f=mF?ldOY~}A()Dgvpiz+~9ph+l>pDHTk zCSonXt-<$GueRLhki7KDHFznLL&V3OeHrxL`IJ>zPg#@1$Q_Z6n&7Afr`AjrQ0^r3 zi{dMiT-+0e4h`~hL<-25L?)v9_pe)@pM8US6%!;Bfb?Of@&tdx)vI@xs9JUnycku} ze(;wo1MiCcMP_Rh$ZV*ZjgPsyxNPkCK;lS&m+gclDQ?n#NJYChY?QWtM9oJ@1xMf% z&LvXfn8wIRNhPv#sbDj^!SjX`d!30pd{(A5fBBnz{wyK*o890+qIgG}DH1UQ;_dx@ z7d}V0gHzez{~{Ir_5Ded(t<$*3n-GoCS5dz_oQUA>zY779>Z z3KcNLSnuvWFucurCSwy(-1OZ83`S{+k6Ca;Bw`9gW8L$~J0$HvL3;Q{`)HAg%%4FT z_o3sXUA0R}##jiZ4D}_*ZqP>XW;Hk#NbJ#5a>@Yc)C#i?-YcaSISbD5N^uZav$9-^ zZuScF{YZa=;(@Z|MD|MhHW!zwnwkU*>PR#!4{dA8F(~aZDx&XyOw8yslFX@2D!^>= zs~WgaAJ#sX_Em@2NF*pUKqyorWxEnm-9XGUqI+WoQC55R?j?b><;7xaz*g~&+qmf2 zNZnV~QIY4|y~}2!3hySW<@aJ6C6OtoX0CBw)_7G?Nk{nQyeI}5GS7Io<6!d4om5EiXFFgl%fRM-$AKAv*JgTlVR&a^yr0HnbR`w|H zk=p?8qp$W>=@uEQs$_Fno`)yaS)jesb`a4(k?rAva)x#& zEKFKtICJJox*x9;UO^=4u zyYZD%Vo0FvAr4*Qn-Fjihr8npJza2i`F{+{MvrEj*E$P^Wx|X@&B#S)!9J&hdr)m+ zuYE^xY@jV`c)Qr>_L_Tfm!XpY1{aBfr&y$UZv~fp;z~Sl0uzyb4Y>cO=iV!QGZ+<+e*pV~L5#G#DJ$A)TL=xN%=^;*lex#nhaZZhq{-^Ux~^KNgW~(vt-fhXL|d<3 z{Z29yeW63xHqC^n!OLSJ<+9{2oB7&4%^$dN{Le$*H9h*4?@Qe`;?0Q2i@J4!k6GjR zH>r*(04*RE0j@0}e-qB{Po>a-SkhEF>MQhnRX z0y~h68*e~7_rKj#klu>lDGe#M>Okh)4WJ|ljyQNWsD$&dZgAZNr_c*9r$)JQ*z{mT z1m66pl@!hp`z;r8fJ1TV(r%lhpn^bsOdKQFW?=wB6$uVNK`>+<6K#en@S8xLj3(~o z8|exet>stYf92rfa)b5KzA z#&>lc*t(i>Bg{Bpz@3t&!?=U7AK%WwB$0_V2KfUdzt;(599+q_95z?`T2qr_Srn26HIDX#k~~(duBze)Wr1)p&WLzmZcw7++_>C(Qbb(P#jcUf z_0OM9k1i?nHj*uBu6X(7?3>G$^ZvR}j6zOQgFlMm`Ac}CS(a!@GfLtMYx_R2cji-8lEhDi@dA zQ(3`S9H7ogK79BUi;`D0ExPSjcPMOq1_8Y)g*o$))Z&`kMP#__TE}#U+6jTSGP@I) zHL{)TPc$YP3wy>3=fkDUs6KsyJ-Bs>Qg_{40*4^sqbwdUaZ^AP$ACa3jDHqDOic7cxbmzVe8Bk1n3p2FQw$C^iITYg4zkm4^cu(9BO&M}wh{#U9>M#b*ZGU;~l~1+Sj623BAlYxnfSq7Xy!uJ@n#NUr z_ja4BAx?aS42~`!=6nU3IzbM`5z|iab%aX=+?BOheWvoEurR-zbiXHioktoy>*kgl zzhL;>uA&T$^VpN_9BfKKXk$}amKg*lghp#f@u~eAhNga+rz#s9v*WCZuq&j+U(G$K zdSR?(|0RkuCMe98?rACQbNhGuF5z;6oGViz+qN{g`5D7&s~!K{^1GvjxI3M_@St;=^*9*Pmsx{&QiwzKi;VI@;TZA3i)R)$?h=RG3tmnf|6K z%v>Zl30VU~dlZ~s(&0h`RWFpe%n}*K+C#VMssz=r8YXidKx%zN=nO#@TrO8DR3gj)x3X?d>5TNNB^QFCaG|_sBPgH z;zKvL6ce>e{IK)F4#G8zOr?= zMkuRle|p0zn(& z{7sg-CNWT?D#TKhP{Of9nh20g3m0zNnuu-;1le+0rEsiaRLmq&UD?0r%b9D1#F0!5Z+!fwQa@{O?rS%{DES?^kB^KG&}*rz z^WF5*|G7i7dDF_<2_tqb(ok*dKhfaFyJPmrr|gsMr@Zp&zHrFxqw7L5D(94*9M@uo zv`B=N)=Vz}0^ne0OyG4WGBQ-J8gU((vGUgO5@P=2Y8!DS5Q%n_-9vi+;QgB5k(YMq z0-NAU#fS<5SqTJC6_vnT$C=jAL6sbx)Frhs%Glk(6;%-%Ex1`OJI_Qp8c6H& zh6hMo$%=`Xd2rqyb-3KM!75xrl0oyaLax;+EXlsUHC*fV2>T<*jv)AQrqgl{_}Ev) zXU3O|>N5*Iu}JYJHa9QK*swEwbxLO3i4(QJc#0D@QO_Tk9F2f%!1y%|Ht#aoi@(41 z?lAEn-3_Ip&>o}sByJa&hU56QV&C?ICaqrm6@E8lIq`o;>S%3 z?x}7XC_^gx?L!a}dx0?~<|;JwT+d!6Zx}P2-y~ZCK2m%M+wDpz$2MHgre~OcV%ZNm zu|2OH2cTQg&8g95wF&#sCm+p4nYumf7~8lk_36F=g^HMj-R20JcFI=Xam9+8BulV& z#vRc8d@I~)9nA_#D!~sBd8u3o`Z}BIQfG%->Po%p;4xUrXwck{=guqo>E~2le3Ga$ z{K1GVj&)1it)N{+>)O6(ke>4w?P_74tD{VyU5#)l`26(M$kevAFK$?E^6`1T>3a3* zo(EJ~uYJ&IX<1Z#!DVTF{fW(6I-E!FKXr;$y<)JB(l zm}Z=VcSgTX_GMnpz-@9jSW z#sy3;FBmP<0%6A5@dZhrT{x%l`MC4&;mXoSyP)53*+9+Aa1L;Hb}^eii3X0LHa=T` zD=QdhHT}dIg4;T?1nRP~a>w2%6cZ?1NG4&<&koyMTk1!%lT|D~4n#=NYaarNKVPKC zPgNalkcMmI{QBodKEMg|*=0d-nw`C3%D+?){8%deZF0)l3f zZAUD<@lP*lo;;E`UrGnK7yQdZ9A|YF4)fqDLx>=~J)N+V0SQ&H>QY%!yL^&pE2Dj2 zOe*EuO-BBAh<;sRI7>rf@cQ9_!>2kp#Gq=*7%@oZh>bkszVG*kMoGlpXVLqg#K;b} zd0({YOh#GE9Sm$Kv;hdHF1NYy%`XUYpjZ`rC+N^rUJ!dTckUqRm{P)CW9A82N(ikM zL9_Sp2;Q?NXYmsuCn6_jsHSEeLt~s8UccVNh>pGtTGPDOM*Za1M?=>}=D=gjFNth8 zJ2Q43@KRrNa8go+(Plz7zBqN#!q}P1&qs-8?TD{Fd-QZ`dZ)JV14Dyu1p0XWG%^~K zIdT2wn37v-i)WvbI)!k@UE96iitGeWV|ka*sv~1guk2$z_OVz>8LHY-n<0Y$2~CZPL#H#haP z!0x((L+xfPwX!-M7M5q$&c?cvn7`(ND}%)R2hF_+!C33?go~NJ>Ekh2X9S76n^IEO z-dk=2E5_C8BqfkZy`j0mg^!==m7do9g_icm%!j%wokrdJ8qkJNH&Bo|G66n0nGCg;7zqcxb>aI z170p1w{^t(3J7q@la*P-U&_{@;*!ZqG>tZ%<;R?+rn{s3hbP^k?s=nF0( zX6Ri)_v~?VcCP*LBd4d|>>`oKz`y`s9^5Yh7JJSo6|n%-#7`6TsT{oQTaKjTULGDv z*g4Zo0&NDUu!Ml3sjg}zWFwJU5-qlA6ZENclO6#%71G`9**e1ybhWO_m{Z6D7m2b` zZ`ppwwl5;lix!UQqS)7)SKP}cr~D2WBnqxO2E}rR<0oXZG+mk!eG3)&m7^kNwj|0_ zTOsCX5NhuBA_fBbXnvP%swtib5dC)YL8SvpTa=_OJ0XqA4m5!J*F!@=*N8oPiihu!wFk9rh!A5b9IWzMu47ss1H$%i)Iu2dPYG-Hp zWV5dATD4lnx)n==c7-X!rUhIViRc~qqHwQWkif_6AO4iVtIKfo|$)j^& zf7vR}o4Y2BTaHVZeW`Nv{x#i4^pDGsGLy;E<6BV*9E*t1`FQ#g%@#iGoEb_-_79#F zo>{gm#cM7)<~y$Vg1xK%>Aok5x)}g)hItAcPoM&LC`P%MqmEtu)*RAeRsN8Z)ekZr zbhw_aG+Qt8pi|+bo1FfbF~JZ)9{u*_x|w$-pxeib=UB{Fr6w-bqPzXKWM z?dXl1tROn%qYQ0b=u=nT$^Z6NqcwDiz(uIyl8uH*4DXWuJU=$`S|Qm~V&1;bS#uz& ze}bD;sq-XvdEm|LN{@iks@Hoo_l%CjI(95|BJhd+n!rNahH;8}7NfT(`b71BRoCF$ zR4P}BUcn&MOEo$eRf}dM0xP6`Kbx9L=T=WE>VS3uvGz|6Nr-x%9Vq6_aXNbh-<>Nu@Mj7 z*Z-`YJ6OtR8!qJQk2oLsd}#2ijrH2~5*Bjr);*kAGk@Zn8Q1)aCC8V0#U#g?&$88C zdm*$aG$LeF=HYjWR&y5F%e|Gas=2EtTmJU(^{ubYE-T0!2TZtq z0xiqX+p!Tc4y$&V%Q0~@_h6xm2+FC}VYGr;c!PcY`uO3WuP0A}>|aRHO~U-TGtP>~ z16RcyJ>r!)ENV)*k#ZqaV&7WJIRyOgYWJ~^iC9@UZ_j)rH{47rn&<0Dq=rEpeR9OJ zss^rIS18B}^Hcs9=T!17STgJd>hC6z2L_j#nks}}vtYfqw{Sdf^Y_QsDrUMKRu38{ zo|~QP>wfaosXB#gz|ab9Nn1)YH@vyP zBqTKa(4oTO;!${j(TLz^JKg?UL&N#__>3Q0eGnBOIauAeOB|GfkqroJ*N*Lz%=^)R zoysd+f9cZx@-g3rPn1&J(>a9bzM7ggJf4`|nswhs1je;%>lx2GISmz^AYVXN_lQZX z$!E`|hN}5on@`V-1AIm_kvI~do^q1*EaJacAPL;L_) zK;wP;+OJ$pE~*gx5Kt9tq7)~`2I>~g=2co=tf)~r{@ z+Gh@o+PvoL^?fB>4{vvuu2H--(c0W6>C@}81lveYwe+z(p1xU5t6Tc)mOdhziMN|a zhrm^3xkveKN;{caelFm4hsWLD^{k&W?|9re>vikX%f5QQ_}TZU+p)Ou9YpJgd>QT_ z*ShH2o8tYcS=Dv*8r46em3r8$Kx0zXn<7Mh-zW*Zjou&kv57W>{ zL;wJ<2AR^as0Ae2w(xydQOjUZWcAZ%nx<+4-$X6#4hqyaS_kC**=05{0w zZIl?PAA&5irIvIv^kH%#+4zDW*eo%{QmKL|ONVDn+_P3T0UKb55|T{-y@VKse9IoR z`f(3}yiATx1b1W}W)h15ZK?lT@(_kcsKqL7V8n|#>Vy0DIZDdbUZ9ypk`0V1E8dZs zg;&i?n8po1==rBje||XHcHOtXrz8{YFEuq3GuGto0JtQ&FeH+EnUJ@898D_em1?KJo6rlXhg=g&B7&u#$0_Pp6^Ks}~>A5IA+Q^Z2M{@7k^RJg3`N z8EY#mNfCN(Wtsbwa(Q{uk~%XZCI_xaf+tsIAjtYKL=C^+FL{6)gz9C>-U6+1djn?k zDa5+fF-Io2RdS*|D}v6=V~zsxGztnou^W)cgiKp-VQG+WxIuhc#2(;7jr%#48|*EUUB69vk%MMk?Jk8woYIy zJ#^>~j`ZZ4H_JoMdJc1lZ|)+(WBdjtI1IVUc8Ef=94 z#Xs97-D)PUT#J_*Rg5JyVg~T7u&`tc9)P48)H+lBU^8U z!23h{7W}*JZ-!ZUQO6}I_8I5QQ)>1uUTb9J4_!uU!++RjS>q-vHU4^&+b~PDeo@z^ zn_j=<1YKqH^)ig|S->UNbpK|S4H`jp&w+0rwi=FvTpg4^a+W!u=42f@=#*VFa#a09?@{O7f+fBRwW zkQS`G{!#^v)77Qtn>uMyS*Rlx{&-3<;X4fv+19ph+JW2kOhx)1D)1`%vh*LGR+?Mt zYHP8-!{C6cUBUk|7^Ul~RY6*ltP`~I>-+Q`81fJQEh`KULpJ27dB^SFSe^2F-9LVj zpJ7Uuz1e@;p5gb@)8QXBU>(bUPkF6t6=n=6hhZJ2FNcN&{QXA6vsO+zl1+0qou{+l z(;*lCfBap?u-A)|dv6>w_#YqDZ$7HOpEhO#ljQzkyEU+Q&VRocm#}kx|9E>%HOg5K zXC^ul-*_?<_(G1aS#PLW0{APpJTSMqsPjMn4b4qpAi(WlM64qOuf@)Ug!=FqQxoz3 z6gM5zcLWF9Y8_6Pde~NYb_xG*8@fonF;iO4Iz6L^J{+z$`KLwo-ZFaMM>)LTeNpX(tMKYI8ud>pceUn=_*v=i#?cwO>hstyS@z4_BQ5S{B6 zx|RFjKWPW;4>7lvRa@!p4jic*oo1Wfw zA|KoZ){g6&YZq8KyLyH1_PiRjyyaRxR0Cf5fQsEu^_F&*+OgqZW?p~zPZG<{yaBZT z_v^99ITsx*EhSaEsQD63qR4Ki@9xLxV;`k=5=ah~Q*yGosw~wEj}mKfI!)<>VQOkA zKEJME>)draTN@Japb1YZ>M$V1CkC&}j_uopPNM<4l$e;|Cfjv8erVv=ux2i)qI!pd zhN1|rhw;Czp*{a{?ehLPZ^n#af4O#*Zv*vZ!{TY#Cv-g=a^1*L6K^vH62|8+G%)Ew zeyXPC8n6F~KcyhfD=M0$6eceLEg@a74$1>WffBM{`1h-_Qhr`>EGYUVRuaVZ%rY{u zZj-)(*M%8YFi0=_Z3|EQ0C~V~+0Rrl=G?$km;Tqv$ihqWtdh~3M8d3KuG=a}tT)uA z3{zT&ZU@3nHYSd&OuWz#<=d*j4MlFNY*&aOq#qc$_CpD*IKhiEV~SE3Ga%5;DVJ&I zA`TwBTUkH8AJGt(Ae8fD)OHf(Rr&6nRJg@8*TXoE1Z-k#MzvQS(@@z(*@UkG`967{{-Y04=xJtqI*41}OFX z6F%w_uivhG7LIVIW2w0q_qZ8lC;7q$G+|xys570IPI% ze%A?9pxU5wZDVpJqf|AkI$AO>Inm>b~>)ve@Q?q23zl^+k44rl43Tw}9eN!maDeMfi zHi^#}+OuIZHC(}NYPTVdYHVDOKOG1yfI5R~M$ib#J1BgLYgjQ*E`Hv9~(^YGth|~GkKa;U#)bX+EtE5r>i{| zhnZ)UUpjVr{Flh|#eV0>5Pee77Vs|U%G%cjPnP+<{@HNBV6{(V)77+{t$tHGTcvpW zg|x^uZ5-;AvpCz=_Gk9^g0)!<6IXjVXgi$Ow%EAw`|>3XWg$(!<~1I;c5wJS*(J+f zdWKd_n(6=C<&$2`=Ur-hp2w{0bEfaQ9~Ui>lTKLjSX_NP<8O#Ll{%up35~RG~#}Su$PUN^&visE7HNCqaaMRpui^;J1Em{ z9w&R#!VV(JcW5q1a0a9c>67HX$&Y(BPF5g~LK^!RGk7FChvaD#qIj0l1>oK5l@=dw z%sgw#3@j~#gu+uVNt|!-@1gJ2@G&evMLcUWg1eU-p}{&HoKQeDnW;s9vivxubl^>4 z%>n|yHk*f}&U2W^kX|Y8eVa?iT0jPYmt;g3D)K@HK zkHNlF;`C!)=8@2OvH1n|r-Kn?umk(`>qkr&S4&x^{AyOQU=TKceg*m~6~e>TZrDKB ziZChoB%Nv{FL4*nZ`rfsTFZBWh%i&FTQjIwx7+vLVk5iniwNJdWI)gBgGRj?apO{I ze%0BY)>)lJu2GkZ9=?4zui)F2dKZ|5YRepx)vD{&3aTzn2|K>e>QS@&m`+#EWiQrC zZd<$bT=m(R=Vp$6p?x6lZ70#ONBXbcK0EgLK)>G}o_FpBT)BDWW$_|W#^GL05cr_+ z*}cq(*>YqB!J!_{b7U$B4qaAL(01tVF&(WOX4{*9yF?klL!i@S;~B?2n>b+tQ~2IE zpd2_b^;90iBMK#vh*N=2nCn(Ttirmjx%XjHNeKxe5NU-m7zBCd(rZD#NSjDMn6YJK z#KX|w;9<;y!tVpmgOtLT8~mc32qOR)85tB|wu9|pIm7D?lEJ)*&YrOC&E%c)`2_C= z1;>T})*BNdvmT7*-}9n?C;>sIC?W5}=2L!)$Q@l4=OjWm?DIdVHu$EK(9qu_c@k9! zo~Js_n9Z$SJNoNg2@!6myF)^#Y>slw^40>*?W3D%z0pau%X6Sn^Y_6fvo_s`nVF*} z9|$@@Qo$G^c?1pDPq_NvatJ}o$r*paIO^$Qg+?tR)H_TSEG`%{a@_Lj;}1xOWIt8k zJ?&H^c~Q80Kq!X7Bif3Z2r@d2s=T~vY*46S%25YLM_kJNKh}*~{y?_nN8;{(8G$8Y z1g5-fBLZ-`eIBU8+|7jt=WiNeiNhij6DM1ya4O-rf}L2`F>*^?NSRxUDUt1bGyXhV z{D}Y45BTwE)~0{?fK{wj#Ru#-MUJveSe=fsDW81cEJKEYmjbV=@pK4bgxoy;(9+tgyzgM1# z-ZMEp>1Uwo&F?uE-YmSXo@~80Q>?A`(a|2WD<0lW9BTWk_tzk&$NIXrJYL={KWO)= z*S%E_u10;cuIwbX-Q!-_-ko;_E?j=K>eJp9DY=N)+2Jjnm)Ty~rl#{Xa$AXUJ60{6 z9Y`Ac!orfsF~XV`DiqR;q-)n`%{L=&WL%Z{2h_t2;ZuRNZ+}Ha!78k!$>T4pFa|h( zS%q;zP^Cfp1On$nhET31*UkDrR$+NK-a2bra0t4)yVGX+`)BSTu9!`Mpc=;ed{x;| z5u5S*@-r0mO@Q7?w?fUf-lmGyl9Pibs&CJp_Q3W60nH`R{5Ua1fY9ze2OVG5uf9fEfaaSK;&L9Yq-{JBdV_gee>$ z?!7ZLg5OX8v588O^R))1F3XRtX@{a7#Ea;MD`do%)Nt@o?VKDj7+HiN_(khc-T`hw z`2S3PaviD!mCD3T4bGmrf;pIlU=CKP13|49#r>R=jHyCqTDV{iHVW+(EUUk$5&(#F zEGn~)C9ipJaxzbE1r`98v{TqkJTim@oGNJg-90=MR^;K-+Ptk(H-}|snud=YdNkMZ z@~bK7cBBJ?;FV{0^P>9w#!Q9eS<1>}Q)qg{x6Oy3KwTu?|Tqt`> z*boaBUZq$$f8KOj#f7vqD=yB552@>c6}ok7Pa6Ov&RYo{k!@E;L&dVHE-#~>y=lg zSf*@h5pW{1e!ZAO$EL?WhCB=#?>*aRaq4f`U(!obm{v!rk4w*YjtxcvmhtfI%BK&T z{!r^q8Xx;HtFg!~Y5D2KN4Hn^nUf-|W691QHzf`hdugfQ-1y;xid+b91&1~yL%4g5 zlI_Y$7E8E(`Lg}xS3HB-#M7szVIn5E2uuey|6fTY=rFO*CyTjU;r7L|Ecef6Nle4y z5gr7NLt&o;4{!S%N%+bFE<|k27zVEVdp*9Kh!fAH>>bFm>7OM`ePkq6$h%dIarbPQRt8END{1=QJfm%YO4%Q;4wz zt0h>xswn)#Z!*wJ>gOqOfNGso7&9qs7RrI|&Qkc}iSKob|Crf0D!uiH!qc%J}AN+l7;R-^-jXtj-0$5=8 zDQ+IBHuk8cx%tPhUw4A|^mMelM)nPzw1S2jU;i+E%Q@arx;n8RI+jt)C|v|A6XzCE0Zpzu;b zzHJwH+eRu#Oh}#=i8Mt&xZyckl0w7hcJ8`;UsRMY$OVrRNG~TVEAf@9;+~{DJwt5e**fX6lH0+LPDl4$>d(8Ocft5rtS*zk`87t@+;NFzU&MYm%rIlOJiDm!e56dtNbgk}UF zWPoQQ*1WtHZi{12e zp>p%I+cwzWUs8N>jKLG?Nj$6QXX##kf^gtjB((c{7~Nxk|NadR1-$MTbS2!y>T-2T zU{4bxXLzu4`)c$>N#wf)+R|^cWmm3RbwFHqm6KCvBX4#pCf|}P*55h2_GJ1+o&c9P zrOQrR`Os-^NXWxLaM`kBS)tI>$;|U`cjsB%xqkGB?z*$vw@+oher2!F)tk86`QJ0v z6Z6+vkWdkd;tgoub@}q|`rWsuCm27M8gryi(383w)uTU$?)CX5MwoOR;;zPY*=8EHYigT*k_!=uiu=f8c(PC~KkgqeNEjv1KV}2j>lq-U@ouUW)yA4DNHMDWj`wa=pu!_R^zrUn?HZBhn1R~ z0qy{MmW)xFmbXT-9 z_e+-=MY(%@3sFxariAH%-kNvDc6Q~xt-af|9vPXTa78GmYq$B$lgM=Nos_U03PwAT zvfSLk#j`%${B-(E+mmy4kmC!#C-pvV)udUOV_Q=+-py&fePfR$2IKmSle}8KSXX)1 zmAjs^p5KgjDw)u8=XTpUtp(9V8f!DVKk3`0Z_h33TbC@f-Mf5WTD?!G_O5ARRk!Zm zx+L}L@#C)ymVk3kKdYimZW_qpv@^hMcu?l;xQ({e&)&QV(J^`&>mb{%y#Cuaki{Kk za#p=1#Ozh4_x>m8Oeba2T5TPjpnw1pMW@=xo_S2b>iW5t4KhV*wc^p0f&_vCiF?&~^#=lMOqgZD9wvH_{T>UBHT zEnCQ959nS-#xF7^epFAujD91JJyP17C}7Wfegh~W(Y{%|A6-lZCcJzpdd$P<31WZ| zUXD=6uzx5Kj%_v=GQ){Z!wJb^#GGAw55|Pg9u5wdEzzq^ur32RL{g#hsk)jW_h)0H z0LJ|I(J4zOpJl7y2-9gHFU5_3vyj$_-s@&CP6aLwnf(lNti+Yu6%tk`rE6+x1rLaT z5f-}?dJxizwrmIWzxiLoolN;%49?j$7qefZoK#4Zb>{ZvjlmszQi5!oo7KOlk9UUl z@o7yZomziI3kaJ?B;2>UdcAQ*ho&YsSNW14f#1Gekli;=$Y`mrb+uHr?5!m`Jo5Oo z9c^LHOLdTum zVS7yex3!rH8!Ep1g8MCAv4SY&+PWb2G>iq1W3o86YiB@vyI=>PFp1jEP=?V&y2X*?#&}`1Uc{#aXIFC8pBki|s zyYl7rP|2F!GXAulL1ZF^tx)O5zCr3p$Fv^Qrs}7t%=@&D$FBTvzYwUIL(_@r*$Q8Bq<&VmmC4@C&FQ~?uF}5wnKA3!k`0cI6YaEM znIcf?lomEzA46Wd$veekih`#S7KD-4-hKOk_o!;Z*N-28rK7ZUblAD{D0jg>cbZGB zIa{tL8Ryst!j}L~nKy4t%{ZEKrFS;&b_dMjEav`xUs6_cspTL}Are^=W;Qrt& z?QfO19DFNb8e&3-zuMTp&uH|L={GWe8$lNIsW;u1FJ9bHe)QENV6H0T#>w~Z-(^4r z&w=0<1$8=`-A1OG-PbqQ82%DY>{?(1hS0d+W1S1+;p~k$toIBQLu!@9b`XK-dt2sN zuE1hRs2C84o4_KeYmF?2nmSz~m+s+1j*#3VZtXa1H6^|0re?fH!=04{CGZesF5&uh z>dvkTsh}LVk;Fl>T*=andpVQT8Kw;=v}_hS0^*I6pSVQ1?DB!<;oD2vgha*Wl**$4 zlODv6j=C^;lFhar;=XR*@@^H+@fby-;$Nvdzx;HwXvn#+@#6J&?+yBGZ`i)0?VAvb zs8zR70mdp3gaP~75)D!oofCTflift@!xc+Z+icgPNn70GLQqRETBo)7#F8QTlAY5otCDP zu44}n!zQTfS;Mzx4RD}3dVA$qE>h{I=|pz7fAk?F2HpM+Qv?yB^H`$#JS(fyw~jiO z9Q7*>o_SUt!Y~8`jX@x11fQ#=^?cEE6br7duAJUN!kKORua_B6biuL(yRlO@NuX+A z#s}VE0AL^$v{AHRtZP|nATJOmXpqzBh37C%`}~rb=u(&k|kD0~n#zS-%<)ujN6Teb|{|02z;S)J5_3m4|VlA3b{=8+p)m?RY?$!6N%#yjKgmYN^2C{dy=Hg;Pxx zO9Nz=E9oIw!vB%(konHPAd;3Q4OEOm0>AFynWJ_8U#UJF7hAilP2@H*}y zvN;}CI$WHha`23m!kIzBGc@1Y`UBIEns^~0POJ+G#RML)`7^lvAlth1?lxkNHjduWKd5oY_YE-IX<27{9E)+-Kg=hY zabzB*zE^8fUkvj=Jhssw>~C62(G3?E^1U0EXE@hHrltKZTGsVnKQdjxI)^q)N5}ok zk9i9g?0zsMcRKzzSH0oQyidGb9e6`LYJ|l=+nO`R=X~d#m?_z!#a*;N2+L2 zMt5#O`1JV44WQy{E9MPeES5jl#Kc*kT{&+Y@&~JE@6;YWd$P2o<-4mej(^RwHBzZ+ zAt)TsYN zwUVq+zE}2db2-dq1Fzm&3eP0JvazwTr{A6N#xQyQ=j#P{!-$u3HjNpnBEB|7YOv;8>y9AFm&9qg&D+PIDdWJbY6B@M|jz16d~? zn!H1+146hY*bK|o-N`3$K^Zr$=9BK~BxUxbF4Ed;TqJxFUG80E^YE`rV_*noNGr*bopSa5DrPUt$AnO!yV=Qy zX<<=1-G-n2yqFBda=$w3IwwcRrj{1ZhUX^yr2VP^*)0a(xojQ;!?n~lNU;zBU^SgO zus`5Wx>WgdGr&@n^`8Ca5 zBLWl9>C-b$o-pZLrgJtaNu4zgmIYaAa>45ap?oQ{RPQyl3_1XDNIv)-WM;9dvXdJs z+q;qvMM`=1rjyD1h}XkkI)O7njv> zotPSZ@?;4F2yRJYNPFl|2RfLgzqfBJ{5{YAlYfe=Q<{6Dba0RGfeGV1tX6M% zd*elMWSyqo!<^5_CR>*#rJQd$lY=Q~iWDQSzGA{QWfc|Cg$rJf#LDk_KUsM4OqbTy z>5da+bY;VjcI@4C;duqcj^W|0o}~xwgB&dgmWx^%52__p=));?gxuadW4^yzpZ zF8D6{my+bpC~P6$VYCUk+6X95j=6t@Jn|5%nZzA_Zljt!@R^m&s)M&cG z#u*X~?DH?t!zpImo9;nhH{D8a`Ids~?oaJW_!BCq10iB{rD+shV9UQikHDj=v6tbV z0Hda-7wLxf89aFSaQInbQ3dAPw{P#qZ<#W0Bd9F*Dm9TswMaC~V6Vg0t%8v|R3weJ z8J^@v>gj}{XV|f$zqE9^YeSC(ZnUloGlopI3unc|24|6w+`JayN{Zx}3^9$QG? zU)sI}>oDqG{{8!RHl`E}(sO@gJ_B}8inBfYk=k~___(5ijnmN+Cw?dXrPq37h5wbA zmHw)#D(Z*FTOP^Pt#z+WuDkZ2|A3Gsokh#1*`&pX#a~NrFnk#*5_MOKSf@U2`@9Re zni7_WypMLU8mMQy;>Vo#NYL9S4_b0{iQ1^}^4-C^KWz@y+}ios3!knMnO}<(bmi0{ zPC|YV%|Frc#f!|B1Jqa5Jyilw(Mo-Et8>1~tu=PIiw<2I%OpQd~K))JW`(*R6F zxOJw$7Lf-obr`Q35=w?`UVS}z2wg=`ax<_!pD_ail6D%fzop%%Dg5W0p|nJVho=Hz zgFK_}z^Q`*tiGeJ*-gwB5%#R;g|O(D1kWyrdcO)cU}ENUb<L^M9GX2G%Z`TH+RU!& zOx?drDur?tu)$}kIh&m)7#qHYn00Rcaw!c^0nnZ-B4or&W027FQ)UgMAuTT}V*q4E z+|BNpgcI0e_w?ba;eLZlc&2v}3uN*l(3Eg(nU_#*+OJ)EeeI*8R6gJt3Mj7On;A<15mTt-TE6HyT^)Jk1fd(vAPtwQ(`)tqrdg?kuZ7G@2j``?efxPO0+ z$jjTigWS{&&s5GYfeE8VOs5DZuj_))P1VNIa%S{G=Bwz%jW{#*F;OV(iZ#oN-GdIy z@bK)QhbupRQ=~C@us4awEsmYnMlAU&yUBGf5~^V+K3vLljFbv9Gf$rSJ~HEawWF)8 zt;&`_i46=>8K<7UAE|dOexNHyAmNp*NhLLiln4L_Rvr*D*LKg<0KYzWmG=&doMji8 z9wD>+bNnjjpqj`vj%MD^n!9S+d^q&U`T4pv$9o;`-%W4+v}tLUWqVSSQ_W@{i0s`q zKCOeJ)~hRB9p8)|Z6o(iS zC>0emW^I^AQPHLP_GLY$%^!h72|Sp;3=D8CmDP5U?7abcE|vc?u9svFzj}px3{1T= zFh=n#Mma7(dRIfVIevbIXP&aT287`8&_b!9AW1kv!yGY@kVhDl(?eVw{lA-TJDXX{ zM4A2l1-nvk72KotpJA0tQtm9wnS5^}S)DL`eD(6dJUbI7KD&EYNVCVza@sTj^*5FUzqc2S${><-O2!_M6I2t9&GRQC8Pbvvt;X6E4R z;SssfWd$`e8%50(gD%WI^Ay`CslcmnzbVn!pmBa{TKZ}r3LZ6S(sr5<#z~4czvO&; zJiFd82U_wviO6}3hgI!Zy_n`=^08jO?~jK1cK5z0l-~fM>1=^5dtyY2pJ@xM#ZC&g z;%M@P6dr0$mfGIi=BrbjdTmI}R>6WWij$x79y&s3Qqp&53H<;O0E-x3=}CZDi#a=} z8@Sq0z!;@Lp@R19GflMoD`V;8j&*C)#7B)8!`wgsSk|h!Fm04VaXEsdJ2!eEhc_w1 z4p*#2(=pl$%0X7Y3DJ;|&-Y`?Zfeh65*e*4wr>}J`jH2Iy(aB4Qo`so&Amn1?7p1} zAzqzCl0|pn3^SYGDagPX5*iTPra-^6E#(G=hJn)+1b^?=ANk-*7Kd8fI{NF+nzeJs zjz#B}+?w=e%GS=jGt66Az1*S|BP+#kChOlV+qdUj4Eft6*J;DJcbjItNW9B=$1vck zC}SzvVa?pKBVE>w68k7xu3xw;S`V)3*dwc! zFYh+)!TtM)+DfynAqe|h&u%pE|Ev4BL*@o8!Aii!sRY-D*pal!=O44W91 z-c^n~9aVZm+Ag}_mCMkRen(6vK=Oz}NzMELow3WnOmWtNp-~;xxv#BlY$#u@J9jdk z(QQ9IrXi#o1#jBCdH$R^TOAy{e!Kt&;`E`?f*5z*I&BC3ZL8mgkGIloZ`~&F$#l{P z(74y9)7k3M(hfsBj460wEV466*AH24jT zjSJ?^m*X4HHF}8h6ybP)}}N7Y|iuw&wc`8{k@!xMJ;mTys4GEgwp{ z+MsV^zIWNUdGlR0LjSf=LdjNdB!{BDssIW|T`s2?f4;#In`__6kL?;I}H@jMd$t)nRYXnlW^dugVQ zgGCM_8=tCPT$=WHs)EQ|CLuvIe}2i0;_0z>)up;O{dOixGjreL$HzN7ew_Jwp!iCY zrRw$ZLmu#1l}Oy|9k^!0h7BD>{2g7#0g27+~p@IHoFEe2MBL9Fe&u+=kd|;zsqL;*N!*Nl7yjV46kkkpnqISycvZ zt|w5kN181y4$9b4({X|NgCGd9MhTohXs1eh#%|_4pi=<1`>zd0lvhaYeo%qy=61F; zP4^6Sr2=;~O2FB4Khz{oc0=UKSqmQPjC}dzB-T9j2>YjxyD z9vPU(Kb*ttX7LuRvt@K#9jU6h@#(+;adExd>qR0&P6#(#`Yn=c`b%%hQ2MBwbK;|; zXDEek@tsImnrEr!=_tmTL ze**K!6`wI<=;X=L8AI`urbR{yHZz*BH5d9nxU>3;H=5aP9XFr)T^2O%*T>GY)6Eq_ zx@9HMgiqhyihCboo=5lZ`z&3;%mKf$`G=!q^N@l6gzF_H4xJzAw8|>rcE<>#pY`=n zFG17CjTbL>(4_Z@S$tm4&kf)1;$dl`mKH+|P`8E@L@!Ql=I7N~6lP*4-qO~;!G8(Je=?a;BYoc4* z1wuND*p$uhv@FwZZ#t0OeSSpR1{ZS|mz$xX#`yyl;gz&y<4;&dwB~8SwOB+O&Y9zr z0TFVhmP8VojbdRrLD zM)LUaRA>PE2M2Cp>0q!|rbFygtsKIhI3^&qf+2c%){$CACuaOsuexREFqzebN|V1k zEQ?D@LaU{qrS;~~qsv7T)+T?whs$jbQSI0J4v7W)^L$}{G;00L>gZ>B zj}0E1er@_HrasVRCsNIYroCi`+J_tst3m6t^CSl;=d z%n0LTmWfsRmA*maJELjqB_RR-|JuW`t2MoB?d-DkO67A)NEsq3D7Z;)3Y4R72&XFT$+*mB~0*S#MQZh}N!p8_x=aLFULpV>F zv4>P3jBax^#1pW_w@74dJ-Uosb_DIMnu@kN8(yy?%#NbSSHQmO`iko}Z$7-f6VzeA z9J=ap<#9gwm7p|I&T&%8Cor(}x5ysm5ZE{SdrJ_tibD?4xy*Bd)T9DSYzXsQ>zt+A z>~q`wO19xx&E_t8+>acB^4cz5>rT){U`2oa{6O;6I;C(okiqlxX%bJ*Kt0E1pP^zy zP|iUily2Q;vE15vczVwvb={w;+R;=wP5r7Q_E<)z{CnAh2bPBiu9q2u`s;BycR^31 z0j;g|l@~5A-Mabn!IShG5+w=N^|op|Cs*0E&psj^)~h{gkFzeHEyx!qdW<1LL;Mve z(eewwyQH2y+die*Uw3Wo%XDCh>XBVGu zYW<5Y4eLQP=(T+Z0CnY8Y)yG|$l%nz-@D}o&3rI}#rJ|<@|k%fUoPx2NUHCV0VR`% z-y>OU_VC3JLFGDnW(Au*R*vVgU%XhfG--(USc~YvgYVJ8#jn2Qvj&xHR>(QVX4HMj!hqsKmzG4A5dO+IXwxil{Bui zvB}BFAu_A~rwIG^sc_VHFCt)Qgj_VJFAr0lsrVD$A&CoF83{isH^;-X6g_3tlcA~4 z0I?jkhO~WK_U`Ml1nOl+Q9#PN=qoli$DqsVi;T$S1+HfI@2hHR%9uEF?{M?cA!5GL zby5*HC<9@=zFKxk45W8W1NR>v_st%z7`ei$>9k}(7mvo)hr5s2hbPTYx}SST+0pD= z&6wi)qmIpiU$(s;@KO5g`M0sxUVPf%P#tw@@5)s(HmEu{eVeQ0dwjv)fqF$nlnCZ~ z$=~1Ekdn7fOYwvLB+8SHxa{E>7Q2Cgc~B8g>aJM4_~3~XUn?q}@BS^$-^BHJ5+wf3 z<*Yp+-hvbIy2q`JnN@VIJi71F-3L2;6*}BeqkLyc=IQIW)OtOrxG$^Z4O3zHCE8BP z?-otL$BQqP^<_72=jK*&nm!3O;oOI@00$#_$8wet^Z?_<$tif)v>R-}@vY(1TE|s! zL-SC&QM0$8jt3C`JN&__%xoE*2P(J`%F0=;^ah3qIj&vvi`v_|;C)usDP%1;$0D9c zOzabB|Exb44R0lF`)BFnTg&QPFuKY5I*SQYaLZd2-O|)_=*SU1`wpVhi>tW`tPoGW zDJd^EUbLvgtWe~*N=oqcV~uN`bj!{h)~^S*M)zYW^uHuE;DI}}eZt!aWG#$dZIP(< zC=o(J{Zn6GmE=t;1;+H-HA|QbL-SfcU5u~I#U~&CPMEa)zH?}RbvEq~gzGmQN`2DO z-1&z_QwSr`EItt)-fjDKMCyI};&>3CEH=%vO}2R7@rZ~O2v#A8512FGv#t%C5f3gl z7=nA&=-FIV2*XnlSd|%0FfD)$!KlFx{<`a%h~7-`Xw<#<@!1N34>P@tPobgRNIP zmQBTP+)`>k-P!K^vd^iNoyYJa{HJ5z>^q8H?N1QeA(7YITSp$JX`4J-Uhm%8sMFuJ zV$Oj>omZRQj`=I|d4Ie2;w6_}A0DHi+_kl?>w!9n;N6YpCJz*Ro;@F%M1j)voW{bP z&kKt1#pNI!w#jsXMGBJN)X`(;7j2tc@HnX?BO*OxDL zV~;?Q7|%|CU9aVR%w&7t|Brqxz2ZB9%Z^O8jdCnYWk!MTNmp)OpA zpPzh3=_?7LV^vjINPzZ|9zX0KvfP zThcXlxxl1&jLkVirDIkuUmNOjX!&R~6%FLuDZSv6x_If59hA*y&)%|zH8Oh0gn)Y? zwZ^llw5v;Jm8g8SRx2|++~r3bOLl8Eml3Nh;KlA)C+RB=9B;V`O--H6gS>j5CD2o#dOjodjwH)alKe_o?Z4fdgCH-PsN9CbIOQ~y5F025BB|kIEzdbJhUiG*SJ;g*g>tN%IwI>OKiXq?? z?kLIC0R;N=fk^`*CQOA|?*J9?arW3mEC~}(tkoCV3-g-7%jN>$d5~aV*cu6!FVEvf zm~#dq^Gm!~t$O;2n5RKHYLpLdZ}0x24>maW<}Xkhx&6wP=NK3mce%c1;(OgI_>l=Y zU^n-XD5rOfy9?!nvzFyfc`k$#J^&uST_+CuXN6wiDR?39>~*RMn57_z(Z16&mlnP7 z`9B8Dem|@H_pVDvF~Gy}FeEu>y7&&>$*kiW*#Ylp-}F@E#nQ9PY|_nHjlQS%{>SU} zhrpyiV0b5%>RmiKT6*>@TyN&<7aU(lMMSRHM^p<_iHF3)j-WjK3}XU(a4l;Rd_!o< zA3gf|J5)#^!gHr2Z#rl{eK*D7mtM{zg}<2&0So$aOE$mP`xS_5kz}J&!$mbCr7Kp# zFR_0Pp&o~h?jkQgzZ}Y6VD4}Q$$+7TaMD=>kB~Clxidxh#A7SFPLcV7=m-(5;L;bG zN6QUrRR8m*!8&(ghuP7)%3em?00P35D?dOCe(n6iw^{O`2#$<2iydn}?WEefkCV*B zPq_c#R5QK`AjELN0(!E+Ua6EF1XxPQQ$=?ikG;(Fn)oLrM0}oqK&2|b>3@;HIdZ<(VC`~I-&k<{zE=eQ=WqEdkZ!B#5ItNX71`BG$McbyS=_aZ*dxSO9o zJ<zbF&JUpM1)t4`!!|0(J3e|`1Se;WK)+WP#LcmH8W9Am`4Tzd3x@c5mLjlHt` zQipqU(c80@fkSEf?f{M@At7}$c2!S~Um*YIYwDwatDKJo8#p!^F}&b2K2jwhw}l(6 zg_8mEO6xr{0(rh&`aHagu5QmG!V&A*r{Ic8%5mfcdvLvCO1l((>s62?NSG%`w)9MQ@ALFg&6zEPTJ6~F7o(s zAsGQmP@sNURaFzdmRSzb3&UyCu$tmtuuP=vAU?+ezOL&CsqVhFAr#qi@dDLWk8OnT zv3jh@Xz9ku*Kbr@xO7R|vrXGiJv_Z|bKu^+44`g}-%cDoy3)ZRfy?!<7q3dez%Lr# z^w(rm?K23CDxn^-q56qp3IBDt>s(={NlH7xSdgnuk?qZMQ&=tXLc>BCgjq#6?1&L( zBoJW9O7^3CAY<}P28SB4ZFLlQY4+dRe zcLcd@bgs3Hd|(WQT5Dag09M&6o0zi6BxTbXKINKo=Tv&{#y_0DAvG;6aGxHY`ZT9p z4)~bQpPLGy!|M)(gpio>mtvpbTy`Vjv=`T|ZC}tiXzyO5xpRjpO(OnSUS57+9Tt+~ z#Y4LvS`#Jm0b&T5Q6vUJ z0HP4x7psPmPjW0g-0gS6%Y;ors}8_`-+iDy-bmbttXG9lj@vLH37L<0hU}Y~Z72>l zyQBHLO|Bc+6zq@2TLTQy$)D_Mf0Fbj&vp;GDB^%-59j;b7ud^W*&k>hM2HNGI9hKG zCN`wwGFn-^#9sW>oFLqbGBRWjz~;!T+-PkLKsloCa_~I)JB~+Rnp@1?ce+JF>jch( z&!2~j3X0$IS(6+Bu*@5@Ol$%^Lq`t&$tCsIz%q-Jr?m*vxcz~%X{MmEJb&I_bO0S; z!>6UNP=TF9ne4;K&{~F1AoT4h_l8el3snTRArqdfqIhT?PIQyi)wLW-rrTTXTong{ zoNB^Olr3hx{`DERsq6pHb8;%SLfNo6J9NDG+}T8K2sq(`2N#vQb3tb|Tw6uPG+$gU z><;0$n46oKy~iW*7ySdw-Np+z>%;~xQPm+t0Y6PJ0=DryMM%m}OGn==!moo4Pg2qW z1~{AG{lO2``+U&2{BAPZFLq+!pM5gu)JB}G`SfYe#R`!Z+sWR$JB5vHwsbCvyKjHy z|B0(YuSU&7ya1ghZ1!-FJr;>gtgJa}OMB5m&>_=QrqO6FAFa#Ml?mdROGt(#Zk_cfiwv;LtNbL7ue3S~ip#X%DNi`-BB8bkZ8V*)yKdLt3Li%GUa%5`5%ggf`H3nW7 z{B7&2hM(_NX{(yA&Ai*RZ%fXW;+38|@0N>?9}xf9EN^Mvx3k}lNUymw;p-e3k=Jb1 zHxXB_oJ^k{c7b1zyFR$*iNP1n#8f!vkNdT>-r{Y1tbLGV)w%Un|Xzh=uMs!jdO*(? zuy`q-Lreyx+<{DT`*yUwFbX&qyKBJ3ij18cfT{wQ6BkR%7=6W|{>a%GP8w9tAc5o4{8r#%6RsSbX(< za2Juxph5GM)hzCG)@JdzO;AF-!if7I* zIdo^Bb6xtjf4P#6=g+QjySay+78dsHeTZxoUtjLSES{uZR^VcR>TDuem@V@|qvZX?*DL;j*7IzOV76p9A6MJYX@Q z7{cy~=LnK@e%ytstfxgYdRlr#*l3P&+u}q?}wEpC?BfgEdY{9Oy)CQVRLBD=XJoT7Ku1sK!7+fb!0=FDXF(4UcE?>;K^K z^#1<;jmPsvRI4HtI1vgvXFs~M#u;tVk5G9B7WSgr3tQZo+-QJ#TPCa(d4Z*X1H%1< zH9<;PfWMJQ#7-_XrHiQENl~xuciNnJ9=Coe6e;-VD-z9P#$-Ee7z~MlE-o`?`UD3D zKV0pB>(1iEQnEpriv(LH^Jne9i`yqnp3GRxl=O3jjCdA(#6p!Nixy4U@txSbk$y9$ zIDL^3l`te3DTU^i`|a9wZ=l66$tWexZtht9ozDn_E6GTiwEAFS=REtBDVtm>hFRTT zg_qUSr`S&x_Dw9lVv2*{WYj`eATh)Ah4Zw~*~cKG3C*e8!J|hnoH=7-Zthjgrr2*m z>Gn~}Z@^sa)X7)Z$oG!hmML^7bIvr4cpEpucx>63LXc!^J@K=^$W3(L< zLE+Lg)GQ}tjvYLxE^u&8Bfw<0i9F4UJ)K04U(-Hhcng$R#Xb+Zt<$cPY>uBncwd4= z78C}H(P4AA4)CtNMVmg|slKbLn4Z*8#W9u^yXv}^2UPYs7Hh9$@b1^=7w^haDhHe} zQP|!#?S%T)ISnbFu8eyu_PEEcp|Md>X5+W~WoBxY-(_~Zp|k9dHHBhYVd<3JF}{9Rm5FSm3WNwN=r+-b*mYQHJva@A|QJqjs)ckW-s(N znCTB!QZfU4fpSWRNV~p=9#%y~)1_9y&gs9W<#a-6^8cEaGuaF?jwE_e6gjz1`N%Ma z7^b6h;C>f};Hdylxg4Tm3mSWaPscJ_O$qr`zV zaYKWVQ=pz>c))^AqN_CUAleJ%qv|u^Y4H@4uDfHI*jrxr5;DUv#dOn{pZ$Qsot~!< zHmB4sjTGb6#jlcVdivhZ9AH+Wl*XFw-aIkyrhZI7H1BL9VWLnwpp1XG7eeQtf96L1 zJ^PhApVk7TV6nPYQOrx|-+1~PQ(DhmqHk~elh?DwCZ$Njfg2M9gJ*?N5j>tgECM%xw?Rc;H{!acx3`N( zTwb@85s7y&pydRPuG#-u9oZ`~5_iMi{ zJr-nNv^(!8TmEX)KIi&`g36@)TgQ@*NoaHxHLYxRay>R%k@)buB@wk>C9cOurn>rk z+x1v(kWu{uea39{<1vNLpKk|`R8y<1ug_MybnDg*4CA2jAaw#l0}1zTMBh(9?43I^ zT~;hxMx;QmeLg^tYT~QX-KOj_AbVXfw_q<6*+=#Qo!y=23*74XIWf1O&9%2t)6ghR zu;>&vr;F%65qBCc(F*?Wi94(Q8{&>yw-Xwf&Z3TZ4v7X$5j4Q(slZJD6#PZdp32C)H%&u$oR_;%PGdNn+jS)ms+em zqjOo`U0J2D+onM>O-maxe*}C|c`e6tg=11`0$a~sv%16x?BjC>&O;g{ln)Nl>nErb zzy(91Hf`MafU@{}b05XD4JH=$idRhL5xL;phm_}Jo?sqtR@TieEkXJ*>?cMWSB`an`K|KwEZk6BXg782z&EQIeYpGCQgR?X5=mc(1^r?o+;zHeX$w6 z9X7cUo;L80(E`K4Cg~VY;ez#xd3;5px4j1nmX3F<)hmv-pNDPoZuM6R%bi`_d1Oqd z6n|?HgCLdv;K65XPXSe_IgxaYjm4f4r;^=!tz5M#P_MVh3sV?>i?o%Avsy2zJylb+ zX}5o&^xsl?9%-4c6^W?@6-v(!nV(_v`-RdcYrE06hi9y7PtSDhaN<{STGcwU<6HJS zI_-DduPS>f?t*pIn!;{wiUZ^H%8oqItmU27Zhd=m3$rS-R_%9Cf}4q(SFDIgPuJZn z(u*w&H1_rU-7rApRki;i43zvz6GEGoiK&JijflX-^L8ez)RPKgzPBs3LP9zIwDf;r z_87mMP!}=pUt9o~SANH~fwO?-)H;PC+8H?EBR7b?#$KI6?ZtYWtQ$6b;y$Z*c-pDn zs(b0yTZ~brx3=2Ma#lEjUx!Qklj?<+Os2m)abUmh%$=b^z2QPViqE!%6TRG>iic@8gb zb89oK8HW7Q0gW9(imy5ino900=T1rA6fk0=Q6fIBLD8MS4C*ys-CNdJTebI=TUHPy-RM33uusv>7)+fTbj(+R`}EojCt zCCv%1s&^^qd$>cg@7%R32nhTk;dNotF_dpKH0-{2lfC^k$Et-ayJ#$hITQp1KSpg5 z7nS>WEFKRrkm=%Y`!r0JpZ@ygIxx17jop(R6AJn4+1;Y@Yr^}jo}zs862x8X?OxwB zN!Z`HOBZ7O_zY=e8IEE57pLwBwY?}_UEeDeawX1Gv}^J!r}PS6 zA55@WoP9d^x|a6OmA9|ijDMgVzhnQB!OgoHGs+H`?GKgIBDcJ#fIGY?X+o_yF$7vAkJu#^ihZT$ms_To5da z0+h9;*92tG34J|sS6BbtyQji8cI(4h$Kms|RP4MU1KlKf6$cE5Vx) zuu+dgqeAmAS|BC2i(`jPmX_*V1rRaH>E;POH8KV7Cbqt-o_aPuK7%O|Yy^YM2!W~) z6QdY&L|`;9y>c5iBtWs?#$=A+wzD*kwKt~)q7i`CTaq!I8Iw4+QKNcBPEu{3pISdF#T|lB@s&^Ob}yEgGI)yfwQ>_( zYpK^eQ=K0^4c9nUJX%lPsT@Ehn+&qu=EP9MbQ_XM`Tq)eOkLcTa87q!G!h znif8(u8$KpCF;hgni7de)=8)Kcb?A(1KYh@a4=mvLFP+hfcu2jd9p?rXS0EP1G(zv z&3f%zPKvT)XOoX!ubKkPdw0ls$s3~WOXEDd)9277@hH-HKPkE{&Nh`(Owdoi+vT<# z0$(FbH~=7l<}1k=Q?~kP%eb0hlJZ^XOF0N50vAaI)^~`VQ=xHrt0mm(x_}{7hUZS1 zQ>c$DRQd93LA=|q7ja~+@YQE$-$4DRZ{Lddg(HHulWU_NlwBYYBBJihMfNyw%%ZzC zhh%S`UOX}?U)gD5_Bw>a|B!w}r#PJe(pd+vlq~hu`u_O`jSG7z{b2a?t}GF8)-gDB z`|EjO)4Lq$gQ@A5E32*z!|0~1yyT0vnKgkU!Bw!MwX|T3xa=z>pi^k?mUng$%ZF83 zI^vmH@Q|qnN}=vIF0Fk1w+rbt)jSXuZaGhr3k+j|^C2CVl1M>@3^7rV(4^GzuoJFi$S2jGbn(>GHvC zt4uoUh=0G)_%ga$Br=c~tW#v`bTMIoaqF*okAbeew4?T9Y5ebaMkYOXXv=+@iWbQ9 zrR1^49MyyNz36&FR(-C)&5*^#Y=!TRiDA2fZB@WzZ5k#hS3ZlFH*V_gwOEcqA^pLC z8J+h_3GmMUCBdk~u#?D(j>K8JA)VyHO<$(fKapJ7n|sh@!_AEGQ!0KPISCN^<;z^UcuO;9JL>$am|n% z%hGXIV3fwkD{t=NDo^G4ZY3eBIlWblZjK3g%HFQ6R@HA-RbH(rjN`6`KUlKT7+uHg z;Xa#V7;(_oEVAR~LgBd}X#r(8OD$&ZC)jM9cB}0V4O?zyb?RYrrh}*SrBHg-={*N@ z!=5B5N#G>q2ZybR!cQ)A#X8(R`}OGZDQ02*@b{w7PkCkD(b3UZ_e@Ol&n(MwHX1HP z!?y30f7Y0p>J#qa6#%t;?Fa&X8#oqSLZX$&czSx;e(WT=_wXT(+k@&tm{NG4-ipi~ z5AHT(W1k>#&vKu<9lb;%E`eAs(z{q^+K2>hN{ z+x^6VPdguIq$!ztD7GAL^tfBWRE-}JP6Py82> zQQAntTmB2lDCUO_SPbkn4(aLcNpOH&ch_W1JQfzV6u7!x_xY12nbztps}E35iJ|S| z{4E*pTJ}D$E3(f10LtN^f3nh0=@WEV%oEL1izLRf*`mNe3}pk)K7_BeYn8rD>LY@? z^8*ius@#jnDPRIIc|J)$$F$2ePKH#Xgme|p3p$z|Vu$lDs&6^&VwXNS8BZgrAaqsx!H)CpE$0gso#Vm>S zszA6Caxc!D8Q~bK&!D;>isoY5tC!|7BrWGw{^0R1y&_QVXYEgg$29sSx-#4(28>zR zd0k>ke;9DM`QNUa&ajWnoXoqaI-O#SKRl~sEyy(Nu&NBj?DE7XzZ;kwXzc*dOU}M! z(xH3WKWNgYEBU&gCmW;FvCcclzkD_S&LHNYoUfrIv;eu*-6#v5)}|1e=dy1Gn2BL* z;nZt&A^AL=b=O|-2{2=^r(3SlY=4q*IWBH9yAd3yMXZ@2cC4ahTeBtP2bcu)4Mw>6 zEj4lUHHZQuraEu7ub3rnxcH*6v(DQQ2lu#bZgQEmBR@mCczK~_^~K>;V$BbOCU|~m z56Qakeaz*?Yx|ZLAB+4<2E?VL?3a12Xj^xyG&Jk}Ye&z%qD-eu;=i!9!3K_hk9ilpf!8%I0<#o2eb?XbTIl> zRaftmoq}v)5d#;~80Q|plZ7h*j@%8LAK8b{K5}X4-1!W_KBzR0E4EUyh-f<9f7G%} zMI>-8RRk(rIDGg8_Iln$Pc#1u{V1)xZi4Vy1M8UbIDZ6(WMLT`AfJB>tVAIDtd|Nl zfmv~5`DiNB64m~XPe4;j9c97GDk>_{(UT-a^;^6c-zcBh>CS?_TW81j;X{W)B&l`L z=AH58Jw4lRf3vEF;t0!yKLgZ_Fp#Q}?$NCqeyY%c0{85J zi_NtL^M%1QV)HsVDJiV*b=YTcI|s{*FJo{3xTTk7^kdv-$3`!L0b*5=$IQ-U!*E!m znVV-Da~={%Ma5qeeUo|0DON`wptj>f<&_1wi&e$M8R#E34}Q;#1vl4rI`of+j~?-4 z4xjKTASh@jZx9%K>e*qlzHBafzIjzOADW5XTlU)GPboHw*8Lnh5=6zG|4I%w(JUhXgs%!;)G0 z`s^A}SaAY#3K5@j)9dvncl>KPHLhL1e#dGjt0%r{N9^Lypi!fa_3&e?#HqUK<46B- zE>1;#Z78L~hvRnbqE&#~PISsh@vM`U#m}DUlanTu7tm)I0%~jVIyNYl8#hj+Ro>rj zD+u7~h^saKMqg>IKCpND|Bf4Vd+CeK#nW*H=dYu8#<@v4Xx6?#6}X{J{CH3(5-!?i zXpyMU$OKSO3h4dhr@!aLi;W5Jw&2#e*{5w*escS+=75~eBI{V?&_l_II^)&VKP~b8 zI$+<8{4dbOVznxWlyA70hFRxM9 zCi(GHzgoSzx=Ap*7rWg31)Gxnb5ml@AFmaO3v{D}gvaNhjIa7#zyDS>irvvmS~vaf z#nY#OZ1MeY5@oUs(7mqtFWyV%js?ang(9_gsMj_N-pg8QgGAUQtj&eZ5%og%55|wo zY7#A3q`~?C^#$8(+-TO(`y|ZZJnNaByZCK4cJz|b%iY%h-<%+EEl6lAvuMD?6vkmm zB=GU>1$y)s_%LFBvS~V7+N$fj{h6ZGv9806L4O$BDEKS=H~gZ7AF>V42(FIAR))+L zGgA0Z?4)krCz|p6(|~Z#b_o5`7^a(IMNQr4q(3civj1E5(vFrty<`f;P@F+((1(k@ zKYjTU5AI_V*Dp5Fz%#?z+S*OhBKgth!mfWZq6!#QZyB#z^%*iJ@!OX!y^Y^NHacCb zQs@f665E29{Tf&eN(VLkO+T8^;m>y%pvww@pH6`ehl5PpG7RUS8BjFfQG3iR>FohJgpRqF+JGEe=ThshhZTfcrvX43Y*a@%oQ)2HGQU`Q zdyN;}eW;Uvb=t0Gl`gFd#b1Zi@AjJ?i)Oo2&n#QC4Fm;>5aSq%x}cmg@X)S&iHYr( z(;4(0zO@4jEPPye&;*~xUAs6!A$^Iadw8_LCHmdk3dKw$0@H%q0#Eu3lyA46{Fj;0 z4)ENkI(?}Mgr-_ZOLOmDRi<~Rw0$_A@OWYrMT(0MM%VYX*Z{?lDnt}A{%2xivpl7( zpPgI8z{uwyEM?`iF*G??&!NED&w~6n4%>?pC(@{P;V*ITfxd@Fo-FB2xNDi4i=wvE>N`6ZvjZk7 z&Ezix&%_YWrTO)ifXKv8J3`_*R|jyySJy6G2Fl3XQ;`#Vd|Gc;{(xn{FQOoy$MVBs zIV){C2HS~m=;?MY{2bspjPW$jn(O!T{(9vj5BRruwl`C+!rS0GI$!YNB_w5sYSvJ8as8u9XT zcgoEFk(IUcSie5vSrDXzFkq1vY82Wyo6QH><@59NJ@Jx3_5lwcra6>z!MzWj z_$u0Hk(j9UaKkE>wJyWrx4hnEqink1J)8BjEysYJou_#x>~6g)F%`Vg0%p?%t|P!yc^*E|eRfrLko0Uk`B0 zsJ~cMdbRZI%CpCvdWRY9a|l)|m^jowtDowWuxVPYRaT`xZhzjOFr&p~=Pr_9==%Hj zTe#hQB4A!uW#5tg?xQWwwycBHSNAGBTn3X*P5DcwPI2*%esCU6%Wm zI@+96QJ%-Wrrv=BqW=APP%6uR6dO>~VA{LFh{MMc3tpC(M9fe-Qe7MN5OH9P8Gnx2 z7fKk>#+84~H#9_doB6wilfVNWrcT71mS3OaOK(zn5=c)$QLie)48ihap@o4$GDgM^ zk<;Gjk;%w{qa`KGt&y1*r32`PUMi7_Z%O>Zw6#4rZGyzcPs;~4!CRcU{7#&TV$wy0 zo1(E^H@$iU%)Y#`U}e4ec8?hfyS~{aH#{5H|N(Cv>qm z5_~n6U$un?3!PGCiQ)nHi~>dYZ`GTA89%$z)fJ1~;-Mq8*-@zUv(y<0!^>H-5kVy-vsyJ8q?|Tz*V^ z!Gr~FhrBP$sDEmkEcM%Z%?) z+%}kQSYO{uX_Z}_J* z>nysoJTZpF7(B=h2|A`-L1BhFtWtZAw5 ziF*e;+fObIT@&Yg;A^4cgbCYt1?FS$eMqad4|1*S?c0g4fN(Sa*yLUp_mC=vlxq9- z23~B&nZT&t1A=nsyjXM+ymH%MEwBgI0Kbp0g)^vwFta#>PzpjyH7}tG(^<&EE+J%c z!}ALrq*siVzOsC@8)oNsnfxlW4~B=6D?5JhdfTb0Awo8Yn2M-O9%-Bv+%=YX)EL$NJOLNRYWBUcS?Oa4=E-}B>^B;n5SW|bJCKb_vT4Zpc z>om4$%8Eok+tCw%_5=mt2h+EQAM12e;_yYut!Ga(PHbdvU)ug5i=b=MYfW>w(#YxiP{*&N@~AD4ESiyFsYEJvVXrXsN)2xe@m~2Z%&szFRnn zK!peG`-u8))490#c#R1YvW_bC@Z;7qU9#k=-D`Cj#dYCBJCLv3v%9C&P&eIa05 zM@w@S&y~-Bq5+`zvas+Ju*=!AYuTf++ZAk-m0dvXVbp-mSI%>p_P6rLn4sp;u88_VO?xv86m;-Mm*UB3kulPPJ%3dq#bZy??E*VEW z2V*ZxQcnjFqc8WG^Vc^v8#cJYhGof4Gel4-lG1wc7y40=7tjxE75XSJT=AdNK`n5= z)pDsliD3@HW(S8_8bY!;Z_&+wg5GTJrP!~Budgpd_5Wb)&BJnR-@f0gxim`BsE~w^ zP>3=QNf|;YDv=@T&QOL*NT!4&DKgJgrlK?}^H8J=4U$Au3eBz0>3)9ibKlRq-nDIO zZL9xixUTCwkMlV8{kwk$%!<7rF+q#}!DOC4y)|4+gr)=8iNK6fQHkTeqbUTp>N4Sq zL%evkhA77LsI4Gf0SMqZ<_K}imkxWN;NM37 zUiD|K@fV>O;RJZ`#EDYfkL}3}>3w^izI)fnK$TV}{Sg;mB=VQg&^ejzg(aR#!<+p4 zC5%`lT~j+ZmNz9=e*dn%a~yXOPoy5IJ53|j12+S9^I3_vQO9rH1WJ{UZ6{nR?dQ(L zh$c{POT@v0A`v9NGu3*7mY~+!yz#L~^wFa{b4X7c^JnQQPq$;@AXH?D8KeLzsks^qRpf9DJ!|MJ3>ORNBc}qh$(Lbv(!opG<}S1Ftk71SP;I(k44WxfSE+>XMQgAs_bZ!uE$uO8lD5 z6e5acVJ}e=A_nrOwL>>YFc~*8=Svorgp`zKW;ilZ>T^z8#tc{}5mDD)pU^En{s_OO z8<#Gvz)RTQ-%cnkw-5 zVDUo^Yev9=UBX7xjED_{x?R8Lfras{;j$vWOFb2K^r)_y+M1HIK&lc;zb1Rz+bTQS zruDqk|C-~Pq!u$vlRMpqU+n%RH)G1UEhCgiN1gR(>RH_-5UGT7UExospRuB9^jGS)|{o=lpZJ%Ii#;58vq%lYDC5?~}ECdiPFW zX2L_~?(Pnk5~4@E!@I)5$}eA*J3GhGX`YzYAmrMm(*Nwfmob}2O(DtdxF!-jB)bc4 zd1!`PGatY|an>PqQpJj>*SiaAMK}nTN>gy z3_eL~4);tu+a6!sU?+9z#*KsbT-W>hD(pPHb?iyU7<29&6|9WtJOhC@ZNUGq6xchZUXY&%NxhyNNc&v_FU}z1X}`s;L`yr^Du!t5ql)@ zK(|&|vdKA$@YTl!9QYhixKK>t_{EeeWBhf9nlaCE0!{*}mpu8RvuP8>Nx_BzU5B<3 zcksB}`*&5Lz&7PPW=5H&X2PkA!NNM8RHhufOV?6%|ADl#6KtqvaPWdD2k=8(C-cq=PZ}*g#5i_OrcKTKm4-jjaRQ}~QVHt;%n*4>)9xH72-E4<5yLFW-HfKx zjUDu_rym>};Hd*sY8|aT>L?Om16sc>JRB%W+5G%`RAwnqPV&uho>v@(^@NLx;T=Vt zKnH|kj$s}xhRo91y`v^MpLVG~(5RYZysBT(fyDAHucaEl^cOjwd19>|+Idz-DN*9= zH7kQ?GM3z3@uvSkmH9_+dZ&D7i8QZcq*74npmhbyZL_G4FxU*PvbmW-RL*fGueqBwFq(anIpLOdPDlyN>@JBQt;YS{Lxd*gx82$zu%&AbPzQ9gKmo;M85Eb2o;IWV=e~V!M232VhdP6D`ylVYbuQ?Yu66h6W;JUqP@RK&Fo$v zjuak&b@G72Xt>y1kl;V7;MCGSD{-!}Tw&1Z`6mDxDeO04Jpkg8N$+?5%$d$QI#kb! zqVut_WRCD>_V>19W2V%w#E+0f^f60DCpz{&G{k@HyieLW$c2^2<(OYJ+RN1wQR zCZ&G6qI}Wl;^kv;!-w|LfDETw?PB&>N_*_u%v{eYJr0fgJZS5P%35Ic zZVu*Z5@u243jro=znxBY;-P7_H7kcZzRSdo$T#$x#2+SHw{9+fDq_?cF$*&~aRypP;nRGpGZF z`?;8y7#L&~7OpSZeV!?t;6af}4Kbk9(kG6f3MOso#Z)TU8}q~GUVV0$qkxoMRE zq!}+vY2lsIS~jfQ2MW*gQDaUhwVYh~NgiBWruhPSBejl}3DkIT*CufhQopln^mmRs z0+A9o8Yyu^8tZ(08=yCUMfDmam1T7ZjFrD%?~^5OFL&BvngUUButT|{X!*h(xWWBT zTr2xV56_p4#AT?4I;RDkB*4Ta${I63`Cukk1;xNY$?9G zoRj0Z$HbI^)*;s$+O*aws;)>j)h^{w#4Zk4pVB;R(rK`KCYrADR{+<>b^i zvz1zF=+u4}Pib#{6wsx?)%p>P9joOp&jZ6^E3Pwq%_OF^d@{-(!PV{OyJC~E^At`@ z)9BjO5_KA*FpWfLpb)oMr?HsFk(l?p`-}KrGPlOdi{gZQ zwT4I9hln&Un3=vDv?l-N-0U@F-}b&Ow@O;}&@fLWuajmk$32csZ)^MNbr1Z!sIqKP zWnROb7nRp$F7^NHf6hu~%A@RlnPzg2+;U#(u36k<;noyi8}BiWECK;ar}O{>4-fBr z)*UE(O2OG{g&vo$1YWeIL^7+B(X~y^Jamh>0|S8He~lR#G9k0M`+*$?jGXvBeZXnu z{4w=EZOJh!!02b8_Het&y)uim{cBqhy%6NI8Ea>$C=_*;VI0*|*@AHgGuAq|cU z&l~1$fzb|46+Z7Iz5Zah@}`mRiq*eTToC6&jekEQLtNe<>_I`!)_zJj=m2yqQsm?* zVx{w`olqLbWOJz0L}1`RtUwYJPpt9o(yI69G1f@!q(o*%UrsIt_$DL8V$G`F+>~!y zSkkOtc@-3P1=Fd5#opf6KpkF+aou1d33gsR7dSdrRae`c%X9evF;8{%H3U!crM12d za*HX~$mBI|$_Us;>45dD!<}h|3shSzPp2+XPdy~Ndym!YbEy-C4j2$Ru6sX+xKW=n zgt-MlE=BcYadm+D|6~a@(3BQo#Xesu|8VCOld+1O!stfTVomUl%*Uj&Lq6;DPG_nL z9i@rbhbB#=WWz=%Ke@$De70{unWh{rzCpm4bELeBhVB9W$oevO^k^4cstcA3)Cz%n zy5+U+z>g8KW0%~^h&`FAT8TKf%58tmtnH%|_H|ugw`TmB&2{ZMg+tbUeED_v)d3+6 z%TK%9D3~!}ez1#;`7zJo?f1)iD9-QMZ>IE?_Ob0N_r6_oez<7!{^dQ~wVqU!Dt<6< z_j{x77_#Z{CS#>yb{J|%H1suwPyUPKI{R`f5yQH=?Q3&aE?Y*la>5EK3Hv^?T+RN{ zcfNj0MQ-Ea^ev6JkW+x6*#408mW^@D3LPX(+`r2=VN+0Oc;6~+2@C9TfYxx#nJqbG zcr7SR;KT5>NZMAk89tk77pQOUxat+MEwQG}$*PTn?4l`b?4HiE=^ec4oVx z>qm+WsXLo9v^B*=43x55{~`wE@kB=_r`~G2FgsgtM#tj_zDMZNVYH|&C;X#Z{id?d zpW#$Ofid3S0K1Bv3Gh9y*jruX44wdLih!d}(Hg0Z?+fnK^Ut1UEt!WZu7s_DS^fOb zH3C;nO=onUZKQ_zM~}5#x}~Ew609#<6qyGO)>3T4*MLRJOwKoEx9Y80ShvMj#YGHU zbaiw}zCR>3wl{Uel;{bkaCV@W*~CCdgv*Wz$~)<;fj_SRNh7am3;WU7!d6z63T{wf^N^W(?OLoT3{rx@CpDhj z@8;{3MTYV#cPoaOO&ZrYuTlDm+>hP$k5)ZA6m!2@#Mtz@EtS^Q*Ye*Ky!XBG`Pr#G z8+=D_zxm9m9YZ^3<1_*h) zM2YpmaWCoOFihAc6Cf$VB#Eo=hPb|@Bn#*`e9^#S%9oV>`nBLmffpJuiM91Z7~;qM zGs?XK+8W*C9c<3!tuCrzw~Vw5*?u_T(AVq8k?unlbe-o;TEJkfD^}GH!SHEYxMuBr zmu(LUTDxxDRfqU3)@M5W#j`f1_&T!*iXI?*Cam|?-Nzuf`_Q4jl*K>p9^L=I?enxR zSMu7~bqYi2(nh!+8hOpNkDN={FYBfQ`WDJu!JD`TT&btv!Pa}PYd zK7c^ujJvrhu4MvbhI#rbK+9vg#dp%tr}l-lpSI^b6mB+uI@G;Z`z@Nzt1pM&+KvB`3ZLw;JV+) zk-GV_;9_sn^T26>*Zq9W!9ew1R@Tzx%axvstc3+XZv6Q4$fXVO^ocIPO7Q$*CKz0K9eH*Xrn=Wf! zyUOQXO7^OdiHCFUBz>)!?iAghUy#=fit1!0Au?2oO5BjKT$Fb6dB?WjZv5e0g0H?_9eKi)n)eYBxD-s|vBcZn0J zjps;2Ye_CU4*ad8tc;A3{f#URic29Y$TX7GN$d*$Lj(6mV+Fh)Xcu2t#r7^(X1lu0 z#ggo6em}fh{sdtFY>A&Mgj9xR-r%Wl3S4EDXmKC92GSCO(a(dBoI7Vu?+s9wS6R;# zJOXzWH8psTnCky>n zbLWC>3_~I8CRMjpv<&YW>Vp8SsAvHebr2lBd|~A_=MScnX|@n`5)r%9beT$Rjwrc$lbcXI`*p6pPF(uCNOH9rJ;{ux5>n zc(d7gc{AS({K4Iap50r-St!}aTfmQ076ro=*cc81wt!d3eFFSK%1+g~W;kXuuTVyM&vSU)+^YkE{4-+BVSuF z-r`)rM|secAu`>pPxx`WNN%L)|t5VRaLv(?6oG zT8H3&GdA1QKQ2oKnfT+Pt`Ir+zwbfdsFDk<^3S?oTEdI|=iP5Q_HTc=m|p*;i&n_x z{*$m-yT1Fge^OQTi>#?QaG@d!cS|xx5!Anw=}k!|aE$ELtHQG**TApkU$0Sw8|q;; zdJ2#pJ$gVZ{e7fMa3=HTDO0BsqA@?w>qNaG5_RsWxF*>@rdIpj4G!R1L9 zW6CRrfd>v8K+er*kpJhqXM$WzGy)<_e$+MD>vsiGSRx6_efI3G^IVF?FlA)9ckj_d zfb8Ho_%HoSC5Bz7GgC2-RjULw^QiB3lP3>b`$g@jEim;*=S84mA2J2YO~@hm7?Fgx zY+2)pdyO*CHdQq=gz2lBTm6Z}jm{{`TPP!WaACl?#)G*ujGaV6VsQhQJvq#6Q{+8Y2({_iO1B)rPeCRvETUj< zV-eu#2{0Ha+jzl?LX^uTDJ{Kx=~CxFrXz5)Jj|kU%KFW{Cb=WjE$ zs%B=Uc@Qh+CtS4}h!NFbj{=j1q;uy4)FCczUuG$kP||8E^90`=o(jJXW%FRI zwhIV1s3)0h0HN7@0-55J0Q3wTbv&;U`Y&)3jl#Fs&9d7hIUNOJS^T2l=#7+a2g1XH zl*u^T8yj0azmwji-S73l6xbufWfhc^5GF{hcRYeg(aV?imNCzkTz`cF>brL^gPBGfZ$$zMNzo;iD#$3R|EylW_QBHT%bF=O%R8><6t z9t4IDK`jl_is1xR$nKjSm|b-1My%gv#-c%E7#2`)a-bv_M)5$Ys~hU#9iSemJDX#e ztsev&kqKxWCLm&>fR@@EkT8zGpfM-FbU0alWpjfdQS~|cl;&mfX)Bp{P+`m~;PGdc z!s>x^TL>{~0vxw-6DH97GF<>9RaRDR>FfV>VjC(fL{@>L(kklMRlk;%jXg7?cwVpS z@N}hlDq|(KrZ?#4IiTiZ)_FjdOX8=OasM$J=*(PSEB(P*Q$a|+YN(8T%>AIoXIg~u z9CnbHv7?}FAi#J#QV0rU2BJgvsOCQ1JM| zB;S*f?6N$=maXk=zf(&?spIf7fEB~hOO>$e-UqrUR9}&Q3}$^qH}{TG5N8dw^bz|N z(>*5Pmd6jliZ?6A_=UIvWWEL%i+EYiX8NnI(gIx$Ceh(+2-yvoK9*Ed{AKw+s+?V< z^;Qpb4~L-s42xx$-R5Lvd7#GOCjJ>M!iQ$?M9#zA`4^hYV3jdAg(?9x0LyP-r;U2D z02bOFf(u{*u<%3K*?^K6@O#1cXZ)jRuo$Q)x!j4*iFhBeXN!2NtUH|g&!8vW{y1DlDFW_F z0|yLHUY^YC%gE?HyLNk9bvsV?aDCy4T;rVse7anC(0IR-sw#N|NtDfKAi2IU-i1c> z-R-)}z0xwUh|7*apUOCGrHPyc)ofy#M1KElO>rB+zF4fg?Qio9rjpoU7$-b?ROlh zEz7b^i>*@Zvu;{B&zH5W?K&SH%3B$c&0&*tY@3;hOW3vaI0prUEA&|j9)-~Hy6WnN*gatr zHdYVbzMUwAz%Gqo3)p2IP8f@+3iPr-g=2uQQo%lKVZ0D0rq{QiQTl?ipwDC3tm3Dn z8&v&O(s@kdeb4xE>_Wb^NBCU73MHB?5t7KZsYW};%|kt~AjF=q$osOM8r@Up@7L=a zM%m4SWj#M&nvoiy(0MY845uC;UZOF<^AHanTTKkDi*XsGBnUWQ*3X3@p33ffq_^UD zPN56&YUvHSi{wp>*GLP#(wnCYoVDaqd~B?c9NGG9&(@og&5qP=-S@*H2XKiVfQ%Dl zi;qLvPL2QYqpKDz+G>|d6i{KIW;UiFfS)wy$}{8mxbd?`LMus1di(lyms>G{?ash~ zAQ@?o@`@)uEfXBJ&6njG41GjfPDj~F>j-!eIH$SU`Tt+mW_z1<{@Pb(^3Tj$K7Y(w zAN}ZuBVOg^{Ya}G{W4;D?W3}pUuV4C@Kz*p{}dDdD&gn#U%MA*wJv?tV|Bl}0X&QFn>kLKCs4Usxi7q1Cf@^{{f)989{(Z>ezu?H8x`8eQ zeFQzZR>&_VP>iT>dx3Uk8kx+FiOmBCWpO||243(uND`Rzk-n7#agI>pKM`r-_Rocp z>5G>Afm?P?4$deUFUXMMnp${thtEHK+O+3y-)>}_&E?*C5Nka^Y8-g6G-fnfxBWt&x^*(>~ zDjJ3@%Qf~-qCLMFt-Bb82NU_joe5V&io5wtSn-wnq2C5P;Z{73v06A!nQKVVJ8T{H zUzktaiY2R+fSmMCuya5tni?9&4{-TS>IODUKkMtMAhDt-eEZh!=LhZlhd((U?6I@tr4`LKynRZXWn-+y*1=65h^x@Wf5M`St)F& zi3IJ*%rW>Trt$9{I(&VE@QDJ#mM3)40Wyj4`XFbkM512P3_x=ru zr!p_Y-S%|rGPi$+2Z}Dg1`Y}Dsr{hwY~ADzG0D?wHum038$%OzVr(#5HJ9NQwGF@? zo%-!tw`R|o<3k0Dkv-+j9V$Bby-+j=ikUHQ-Y!j}?}gVZAb$X+(CX7?C@U%5x_OfU zb&`W|3L^Qi2ipeah(wHmb#&m-!r&wc4VJa0j?Uv!FLqR!o)V(t1e2#bgYAH;5kPlz z*lKQt@5YT1qS==nTqr(4Un_Hm4IRp1JqTcqFeupWXManP0I8g-s;;Mo;8fI{5lqt)Z@^dV04R5cT;JO9w@V^M0zh=R+`^|K8Fcf2GoVC6< z*x_BcvC9V0{Q=Of2ko16m3HIVsIqVWAao+2XV`rp-}i4$Cs;e@S@Z*O5m+}g0fG7d zK6e{b1b91y8Pn%5;kw}uOZ`dlDO!mJ6-QlrL`T<^q+JD7sXu)gq5k zH=*f&-msaNHV5P686?gNvjk#x8{aru=@`_&B55? z9=tu_oZ4H-0)yNOH~+l-#a+7utq^%3@q56ez&at4l$;hU8LnJe$)pJT^~(x0u9&cI zR*VLfKo!Bx_%T9B%M=O=4==|w1LH^`>ofFGIoolX*&4bEo}rqAaR&i0LMCj@4&!mu zyGIAe1|4Us3+vM^I`h9-pDvdDEc={(gchYnyWqG}T1DyQ?iLo>cb4FMK);L4RaoWM z72FZtAUqzgmpBHXiEdsUI4Er};sQ=lNYp*6Oz~Qv4p=5wu^-M|dQDfx2vN)xc?TUVN zlVyPZ?H+B*;GN;X?ZsR1TDiO+&IPa;xOFtFzjdL2ygYrpK1eYfQ$U72nk#2;N`>6Q zFc4S>Z>oFQ*^EUyZ}cLHpdbS=WIxA)VZFDHdvqu!W+9^K%1XJBBBp{5{=}0iWoPuv zqMl|~7VM+|ZRlqY|0sj8R$eZ((FQ!9(SF;8r{|Sr8|dm&0{B zaYtSxC@qO?CoCEg+a9!(CZ?ua2Cb45cOgZkwNN#4>PsLW2Q(i&M51O5Ci!IqW5Q^q zE5xXrr0eg3Wyf@h#(gH7h6BwtCB$Z*&1xG3IuJP$zKkaas{hw%3^F-Pd}~jJhCbsX zpx*@6hp8yJh(Aw+R!U^hnNMCrYi2y1c$G&HPcWxN1=q=m8klRc;lZYzPU;Ejo|E5s zr+?kDX>Au#T<(&dyK{D3+#xP|a(3;$|+me*eYWAWgb zW8!PZqz7?QF8gTJ>v_PF_E+V*c0cMIF@JH)#Y=tUiei^Z-trfJ-7S8~@S{p1-`1uf z$t2k_U)j=zWCJ+F5W1A?KWX|$-1+r*iI0l}ezlJvU*W1+%da4pOeFi*xw4(;RgRVIXJ&6+!R zXUqYe<1Otv0zR;RKU?R#VNnhSpVkZ{EuEmaISc)UjB4*o-e0S9|A^+js;Oeb<%1@z zaFyu&x?&t>@vQ}4s;V9@xz4QjwC7BF`{+ULO6w#sIT62AU%P5q2gxn0d9X{*l*S2f z%xu~Y&8uuiObA(+5Ur(4&(~YrTVQV1-~Ru=3f*X_^Z(2W73u8irs7N43}S}PI!@)h zkS6Hd&3BNDZ!h&E6g8{`dL=w;0UekF;-8k7EGME|W2lLlC26{Rp$Ok#Eqi}?A%{;| zyVgvB8Fu!p^twdqNMfEeMs64!IEt=fLA+}aft(&5#>p5zj-NOYbV1|SOUlH80~gjv zJgTTWk?NxrLJb060YM~Fop_~;;^F`%;$E)kx?W{ueBjJ&7&3B1>)O7#@wo@w7B8ND z;bp?SRWg#2puL>vXl`BZm=tdfR!9d#*M`S(6xkg% z0f-f|)x*+ljJr$$Ntx!WC>y>N-ED>}$cYz=?0QY5s`2YlmIjj;^wA*J$X7b{?-F)8 z^^WdPRvY`c?^ZYD5$e0?VoGh!6BWTG1xnaqcjboKxn(7@FXxX(xxrA{>6^eE<2^SUA1wqD}4L?ky%^LsgvigZOHgi674J+ zwP|f~aN+SkZi-V<`-M2Do*4V8@Id0dPtj9Xc=lD-UZ9mS*!9Ak#MfT0N>dwKwg<%? zO*H%Y_2tXhnW;L><<6^HhOSRtQt0cX6d)(Fx8Q3p6Zhj)l&``2Tlh- zP<<%3VC}Y-XsOE%>a+G8$vT;vG*;YC)Zyi$pZwhIP z%YBK1?RsOV7M3pk%#yA7DLr*~ZQj)ybF=ANq%zXC+3X$=$&TidU&T2T;T2=yz_G!; zUs8?bRoT(~zvlF(h*awkzgW!S>a(T0r4Z&mKzC5W9)QCO`Z%h;R#QD;N}gF zL;Vb*8nn`QyuNv(rLKPHzyVjtJH<25!0Min8fpL4hxYUrlce%ql1A zMfTG^_ysjf&KMZ{2M**yY&l~WdU~1>W8BQamms84S%A@Nz8SXgwzpK&*Zr%UONVzW z%Be;b2zpz)@svRahw0N_TEt@#5YG}`4q1^;xGu<$xQJ@&_2s#%v6mjY5$GxE*s&C{ zFB;A=bwQespWiT8S~4=hftw}?q1$YwEoqfZzYDr&anRK^4I6jIwDimxyI$(Mp>`R^ zU+H4@x2T9~)>kP!(%1Y=HM{cF{y zk2OOjIJn?T67M?fWkUD$;-D8T)uXk0yqd6m!}h0l%pM(HmHhs%q!xGcsfBJ@t{b|S zZQH$nN`Qrb`B(!LKV!d5#(t>phC8k6@I?82b$x~Nvckm01%@t>Rfq3vy=oH>Y-43+ zc_`#Qd|Xw;#yOwbTM*3R0LEX%vLVnJQ8x68?Z{CE@+GV=-TmGh$Wu?PT*4A&7Xm5kWY5~^d0$NlBh&Ha_jhxQt)@0OeS zb?4O`N?uB7GPb(Iem0%_3j1G+7~ETq#ua}px>LI;uW@2my=4V&^eb+))dYM_eeze7 z(kvN~39>VrQ;{Q+M|VD4SoDVfqVFg3i!%5XMS3yM5;Hs4?@4Xzu%KRO! z+&XKN^0s|cFnz-NjNI8U+qu^^vDTldgIH#V$KMDF5~@aj`@bk3m*y{aabdgIzIKjl zd?F|M+w$FM5;ArIa%(Mx^^MPWojr{3`3j!Z0ds4Cr`#fiF$HKte0;jn6ud|d)PKA& z7~S_rMTx=N4sB(uc1Y`!r;Y7x#@axx{sF$Q#_%FM_x+Z&z6#fKa&!o&D|tJ_PP$os z0PH?7jsLFgQ|_FH)i(_u%;@lGQRE5h;2{!6$-Hc+ke(E#G4Msm<(%s_SiDMYhJ zzkaCXCcFB`*>A30b+tr0_&wQ}nW=^j%kga)dZv3jn=5;8*&{)ZXc-fFdpgPKs$F#s z+ZYz*o?v{dm-thmo7lv(!Zn^@LAUO0pR8?ga?_PfTR%xQj&E9QzW9;d$9<1Zl&nu* zbH-=xij`HXl4sXfOrJ0^`PiOpg)TiJd?r=QtXTBIS4_BzwDQypTPDVgMvx;XnStzq z4S+8WwViq(@P(S%+RVW)$>fFu@xkZPT{qWZ{(MZw)6+k5qiI))Z|gHnMg!RV^R<=o z9ujmcgT~-_x8=%ubcJMuIqp2LV?#}e7-6JJCp-FTC}cAx=MDntu;PTT)vIeqM)T(HSyOseb`v3(6Qk0~;~x z@$6m`cKm&_p@k_$>PpKOpz{|mQ(i?K^_ z<^u8_b#z7`)o3hw3R=0w=x2V2U>{H*d-FfE)Ca>{q;eU-Db9kgaXi4X=9Ai!|HVjc z3q&*g_^5?>&z@2nzGH*M?|PVNTdl};HbDUgxQ*_c{tT$fWa`!jZiWbSzQebuqyc4W z6x0DKh*YFaN-1(3`>6dpd=Xpkzg6v(AUn3}4#T_;l*CABfo)(RuGesl+=)r=mY8F87NA3gHE z6P}Q*bO_I~%l>>5=A-M%m5OUUS-F9uh$@j4m3ZG~K6=mU^VhFD!p)>#IyfAH?PmiW2X?-aIEpJ5_NLPHH(fO!F*?_0$>!rlgF?2 zSKrMZ&oNNj|11@}Xfv`Q=xZ6bA|ANGKW=Pl8e`!l8buX5Y80MFmdP+*3t=w6(~Qre zN?MNyIrY1wWbLy3FAm55E?tnaqq;dM_F2D}+pjD3o(;8~7b*E(zx_!2SI?fQolQHG z8Wy3Sd0lX&R<_Q;$4A%l;_kfi<|NNx%Ebqo6@LercezvS)eeU3)5%Aab||Y~(4LH9YyY>AH#!AasViM?^U$wP=y>D$ z^-j&PU5)9)C}(X9XJQorv7e9zJcmf>u|9(@Kw)}%x50ze76=^@3fr3AW>I)*JcXJ! zd5?v0Um49r$M2B$+1RN~K%TZM>ru}8 zF>BnUU>~*UKU{#uA1oB;0_wY^wEcM2H$8;YNFD~=6$LCdSOmkty0$! z1#jOH{lZSkhlS5me1x~xtLVvP$*x_yGJdV`VaAV^4quegX$xR-!mniiDli)MKiI5R zGoC$pa(7ds>8(ROdBv&NuwXEiY(nC?Qm1m&lUS88L02>1)v6a?J?#yo0zF7)7!BVC%QAFgDgn} z0R4rz#>N$ovP-=L513uMj<4LZb*n_aD={7;{adhDJ~B$57+Ut5caUxBBI(}Op=0np zo(atXDvZ;-c^7d{g+jhFK=VG=nk+?j3u;Z^6UY?tTeDcEj2lbiE07}YPg z6CRjlEur1Bz+&13d&X?YtO;!6!wWB)oU9|#SKa9xl$e<4JPRUa^nnB2Rb(N8p0kM* zKlcFIl~_g2|3*i(3z%{N%_4kjB4yc|nW_5w6RROB2J!-fxc?UV=UXPKubTc}l$b-Sm_G~9`vdr_AF-TE8M zO|^2dbRH-sk}9l}d^q3Z1AIMLdDY{~{M^OG#jzLb{w?XhnUwmLWA4n5e#L^Z*%f8CJN)Ba4TD+91?G2y z|G1LUAw!x~2sH70vSR6|f0>S2+F5p5_~f6|)0U8baX?l6cb@5F+vrIKAL<%$7dBE; ziX8Q?-|lxm&ljQ;RzN{xG)2*uEA|$5B1qGUSTBdAs8roOz56HE&Q;GUXS+1X8};sey_4f zpuUZ@{b*=nI zn3#BdzHU2d63+G`)_hjkKS`(QT}QwGtiZhfTybLc5`PMn3YZzFuLRhWhTc#OA8+hDs={ z{eO3=0mn*rHy9%h9gpUvx*)!6to)XSfL~87`d?h+*Kj>3$VuI$a!YsBj*_ECPv5cY z^UZ0ecVsz?xjNAEsssEr2!6kvnl>Fb?9o?{P$Pe#1Hzisi*_ZUAQj zhCU5#%a^h;YV%WWeoGcF=B9R(-L|0bbtpx4FS5sBz_Pz(P#uT*3;6t*)lzye(R zuG4ixC}o_-d* zk(Pki))X=hgKULiJRwJYdkA^P2wH{=X~oS)M$6*4H)As0EG87 zZGtUq?0wc}faYJncmejyiMk#&2owOw0t?E*AGqPBMx-6*<$;a3lGnopW?D)F-3XEX zuwjj`!@aeH2^XDk-)If)63u2oIfX-MDD@Ar3`#6EkxsJP0JxYEzRJ({$5Eo-3ADet za4s!}*yst0d=?zB$siZdNdzwHjvYIA{KiVz8LLzKksKPdefx|HFZt^fY<0duK6XO` z1x3Y^s4glh99~R`Fd62Q##GCt>d&J~Jkt(Tsu7PM-nLYpi~05az5MDqjxjJJfH8>w z#t)p6$NMH?3(U>fgHl?5&HppXYKClpXiDJb8NHarCS0~+L7(siiC!*@PillYF$8m1 zhF+^zqt2pu7DR|d!AdToz@jDQv((quW6ViIg$V81ir4+CthO{ADGfrM5fY-f4n}yJ zQqbu8wa34wKfQ5O`Ab({+xmkKPkVITSi9|Bx}Nl<{jWr#)K4v1k-CKsS2_(`e{cHh zQ?Fy3+MDuU8y+#V_*CUv`$bBEv$QH*FCLTfY;jEeoi)mY z<@4}ker#uL{lWXT31l<%sH;FIXgiZP{_g+lGBJH{k)ekjJeZZ4xd_lHwu{AaZ^6Cv z>{;$Avu|+`2hb(`|*yH2n_f)?y>itEE6u*E# z!OY<8vC-zWe>bOY?YeWEH}qth#NS7nVQ{#AAk#GcB#l&XuuSyCt^iMPOhGQte#L8p zW;||}FUnqyjpnpe-66}F=+B2maP}%7-F1h{D3oB!i8jLs#SoZJ^NZX<=n)o=-{4gZ zE7EtN@!xxsSMRM8PCbbn#Js(n7k~J&SJ0TkKY^B?Z<JV*y-DX49Rp1#^)_qVD?> zInU!AICK>jOuO8AJW3SPOAwZ}}}x~JD1cLc`Uzkl?Z88CgQ{zW3x zU$_}_Dqx@!tmhA^&hAIipw^+MzJA){#{x5yHN=3F{Thh6|A4NcsCec$I7~7OV`ae@ z9@NT`&`Z{&=We9)aLINa0_k=3`yz@N>R|1ri(&i z%-?E3z(>`c5VCMeA5n0^bvm5}1Txl$m&d?qjT6nVYR<7U2PeX81y{>>2Z(crH3x}c z(RD{3ar$%?{eDqVSIqediS3*dNiRy@i%T{t%|#GV^3%( zwDE0a2TG?9$qGish;P~8HwgV?CC4mZei0TT8ybX4j#y|rFdal9)t$l%(B5cQ{rdS} zEYAN_eAIeeKyWz71z3B)`pPbPvx0C0xEPRWFy`h@(W%VU_=VcqVBo-bBv0eVFUIj1 z0yzdh%H=0HAo)GGGbL6=CMIz>a*40LhPrBkBKRCJ}DsCzh3064gD2RHs=It!2%AnFk`CSARAH>|0d*d5;;xMujs z?%l;b&7kE;iC|hj9K1@1!-$Zz1f)|O;4)t<%EWv9AMTzTZSoZi~j!k^mZ=C&JS3{^Mi z4YxHvvY`E9o7?vX&kIkOe5}Z^ioG^>R)PIck(}wE^y0JKH`~f={Iz*O>en+0pwDzVgOXC8K+9rs`sU;2p8@+@Bojtg6a{)|){na!{t>aQVSbgFA+C=AS(WGybDSAe`=XkvmH-*q-r=rU}v3|l#-0c5zkZ>RUzKWVS7g<-fgR&1zY z=%4v#c10bKi-o@CpG;~*27?D59CM<^H<{{l_dVBwI=>$edNB~TYHwNnESKg~T1EyY zA4Jr-4i4lA|NIjsjNKXTt5iE^Dd z_yeA}n?)(M?(4@`I{Tqm7$PzNM9d+eJmHD;h_<|3x_%!L7Jhj#$A%!Tec;A46k)~| ztpS$S#_9q(3hkoc<_cP=H#mWD#{eI_8A>x~#_NU|^TI^0(cSlN;u?Z80qj^$n&fbE z`K#lz%s%LaI2d2ObP1yq{u90P$GS!i49ZvEp5I_5g&9uO8nnd5E`%g6-W}#V;AH#2|Z6kA(c!r)?KV}USXIA#RNGmMBUpe+(u<&lGOFa#3eCJS>G z3tn{8ff;sPMGOLlu6ma!I1Rzp*u+HKP5VAK(Q>elF*L}|UV_S!%7{0_juITB`N*z`%r9-v!TMPbNstDEGsXM+Iuincn5`!yn4kTDf+5o8mUH?RD0#%7k2MTy zMO=ILizjcIyTbJ_kQSewE{n2~k{hj?nq(squhyLFAt(U}83j@jfZfOrYJU%M# z-`cs}%uHHUuA$YZ zOs(^HxI&N|08Y6>^DCoaO)V`~>G5lZ>sl!`RuvAy1b9j={o(o%3m5^7T6}z(5qO7H zTLTFVpV_bw5D(Q+(wXpE>JUC)xfC}C4&ZGH<5A8N5qfU-upBMwbge z>pxz$xjjL!4hL%-E$Q#Gkg!BJ$pJ5G%v%aNZ~DRh#;)(z^KBUEO2Y;+eVUIHweAum zJ5Rz^29!aB5q$Ed`>rqPqFBBSpHq?QhYNW?icpJ6tbMd8TY8z#7i)#fi0?DtrK^otx?BSkF1G)Dzj*UiVe79?we;U78D)@5U*Dh}4Z>&1HX zsHuo)mv8?uCCyFTuv5vr*Dg;=jw~))JFKPWjgRSVtq^W0gfK(;1PR4z4u$h@~aKFE^wqe88sQop0AH6MNP*(dK=~nY9aXYx?Cv zsz~7VqH(BC8@PFC#b7a+vBTeB%teDo57cXkTr^Z!LU46odX@)k3>F@Mn zEPQO6+rJZc$z0$8bwTH~Rt-5V{pABY4vh}4Qp1!py7#ezeqrh9j6B#mr zGApAV&B@eZZ|(a>?Cw{W@hLGWNqa@aiPtf&m!9R@=rvKy6`xkS3zKxgq6rF@C%o}DoF|L+IL%=V?l>f6RFjMdi*XN6Bnu_ADHTrxW#V4(~TjH*G2~R zu0r;aep$Wk>4KSGd-qGeKET3G($(k%+EE;dqhiNEsUGF;KYH|j0RPAeype< z*kN#@r+WL)=*xjZR2;AskIMGxtaZkY5GLJCG~nLOxNtD1tTbxs&?$Y*hd|3LhbXf4 zYyN|kF6Fg?uc5ES+hchTDSyF1Wbs&Ay+kbHIDac%g#v`c;e`uf=*r)9D4n_eTsrOZ z=n$qMAKpsBMrCv5*!TZBQxidoWpmY_D&|?UV2A|FIB4qBIqbo~`6Yy}@|EVZg}n5; zcXhwcB-4p#H2C1kpVhyszX!}oD8E@{ddpKLFi@m4C3~+_-KRjYl@1MW z12eoT{D!TXh~>cJ$5m{*zF|v5n6q-FW!JM?B@(>qj%1eBNA(Vw5LIJttu?0a zC`!yJirOc88@)!=1D(%5#+`ui$jCx3pPu51J8K^eX>jtQN5USdVMwP2ZU3qcmg@mU z1vjJv-{jV~>`I8=#9;}F5%-As@*?IoIYv}7s&3z?ZcMu+l zJ(;n3-JDGY|KS42e=Px92ibL0^Ty(p-1~y!QN^}^!9dW@Zw?p{E1SAe{f^T1P>e?m z@Q>dZZF}zRn>X+=g0^iFiLiq$e`*kHcBA30Gz}-J6JYGEO%?M#wV%EBo861GKHRG7Iqv!-C5t+jsZrV(St_W!fM?lqJKg!k_Z zLX__`GAG$frbZ_9K!3MU>9bzAXVrIgpXoo>zk8Q~&GEmT$2twQaEi|_S+XWqab^6q z=L_t+J#6vYJ9D1G-Mb=9&G^WNTJQY?z7-`Tr!IJW<2q@|YUoygeBMa>bCY2O_^TFi znBKpyp|9WXV?lZUMLppL za6(S<8I*LEjl6FB5xYfZtyzwVHVE3TCnS&pa35_jUk@MN3D3gWj%%!aix&)TY`d|P zH(aM1Xy``WN;-jq*5%fB%&8}OK9Qannh&OOjk*{T&iJ-j$hk=jZMs1f;X(wh42s@SVOdgGcm?wlLI_kM@B_^J zzOyN_q{JWlKOtw;+QL?|f!_2$i>ZeP{d%(Yu=UU~V4yM&6m6P4bZ2-ta^>L4Df}&n z{CFKMW+s;O9`T7e(t(On`!wc5@zz?cHDpLg!FwMsFZJ&iV`9o-{?k8{*WSXwWXzZi zsBX+OTX207F6NR;`~yl-u;!wNzwnKxl{KM@)~xvo z3mBM@POkh4s`mrZT0kpUw38rp^UHN$FJ3k?iC<+w-O9Q`Bo8VbDLRgVNnamkNEd5q ze5#oHJ9J`S!D_SQRQ}c=s+;jKGOJwRbAAL-__2C&$^+A%NGUKly24SuDovX5Dq%1so-G5En zuRUSYpBLL~3;$T=*|?}K-?=Kl@6#$#`qjsU`iGl(iOOsNkz4d2eZG4)4*t2gBKNQNGz|hiJBUubbbD^fuL4hER+=|KO#>qFAG7#J zt3E+#u?JFk+L&t#n$5Rhv z^xVObvRgO2;m1d}Q{VW9NPBEFt#DaO3$6u40kniXNSHAcogY<9h#R-+?x?MG``ndO zmcPP`fgIyzU&LB*gd^*mTY-}mjTfjR+!)MlJO*8?C<@$%m)~GDHNZ6B9oo^#%Ao!k zQuakIWA(y?7-M*W1@HN&@-uuyB&82*xSSCmRPcUXk}V~eY=~I$Jkcg& zm1+2q-n$2c0j5rc5A5JBf0ve+%ZZ=h}__yXkuhOdlTjvQe$ zBs4dcGpSCyEX=28LD)TS_G}r6EnmN`894Cd;OYAuhORO-HMP`*EVaz9>BE^?PppM_ z2T-HsUW2u3T8%Dwu?$QBU&4LgheMVz z8B0kYPtx%Qv1V23G#6eA_&+GI>$s(idIgft4uY;hDOOkat*iaj%$)U@QjLQ|A(WfE z!^=}@BIc~afE{51^zQB53$WI%UAG$C#5Hw>lE})&W_#)HPM12Bn%(;sL&gsU(D75R zf8M}9t?RpWYZA787!zNfnf$^Ftg-xDJ-i-<)HMtGh_%oWzFRliGj%(qBnPIW9;E?ov~7K8e#G zsg6j5Ql2S9dIu>PiEIhzxK+%gVHV(ZN!8%(eLE^BLy#06I8gNH5#A*{1*&``JvyJd z{COVP4n4@RdiwNjMa4(}vW$K{JQntWYGmizou$rewY(eSwBv|h%6~J0v_Ib^f01C+ zl`EAtr(oR4nFZ{tBbHfz_{F1tuwx8&n44_>2fIhPMCG3zcX!499xxoJc<`T8rGY&z zZytYcHi4|Xa^g%!2L7FXfBNldkDU4T?<6dlmRYcF4j#-~oEWS;f*pn-4>7Ry8;l@}lfSvJ`{~k@ zl7N5w%y>)2ec+XlELjTNkjLNUycgV!`6yA)+_>Rc&>Nd4xEO!FJGkTB^S%CjE`OG* zT_p7m`xgoUgB|JXf?${7$JMJCRr!HU@Ov#C`QF#ECTs1oww9l&!?-~ZHsigowu$^+!X=%WNgkYLxeRr6)GI~s9I7#n9( zS@`ViDIvy&vcItg`o?RSE~gc97B}SAu8!@kqy!PkAiG0M!_P5Z>q@5ishIQw?}dM5 z6dfNHHhu2geYOtEmc9G4v3Olh&q%23Aus>a;?8AAq8mAC83RFHfAoGA1)jO3CB{>* zPVnr*7A8M`6~4@kKG;Ar^ce6bX79?C?`f?+Mku0uhX#lD+ArT!8x7oMP&Z=?G4$tg zW0erje@#s?(`T6|f~~!~-%ENMWS>7I5d1uewZ;^gy`dTjLM=??x_|R~M~wy80)76; zqeo=SShAjI{vtHxg?K`OIcTn`aQ3EtI}s2jpflA4)KcCMkwtAaOql;iveJp| zn_q~YAin6|AI1AHf`i%z(&eSKwYU~t$Ajg6;wyFNFC{6-IKurL4IxK!SJ9(4Zy04F zLu>~G4^)XuHq-M;S1w5lb90n#zWTU9>x>_dS&wnA47nF-)iq;a`C~TW*V;TG&=BpF zAk~Ey-gG|t#&&a69B`*G!CAEm{<%oRzNJYR)>xw)EG{2L(49{GFCc85VSdN4W5#q1 z*1G*}jIE*l_F0cUtj8TF^^Vx~jCah-;N1egJ)^h?%VB49gMHq$E6gK}6!IY(QF1Q4 z?xH*>k-MKeo;xYHK!^}im-||jIB@)Un_ism zr@^lfQ_#X0JfeCUhR-g?In6e&j;fs!znhfQ5iQ5fBi&PPaM_>!i(N*%H~9@~lw^ng z5^dt0;h&@)sT`EC>Eo(2MmBtLCKMy`!aPJA!-rNJHdyfst}J`7NpiDcN}Fly6DAjg zN1=Ph!k7%#p?Z2LSgWs0`46_x#Qv5R7C##rh-(+DO>Fm8oW52XtRP}|>wx{$BFfCl zLeC8wa-O=23@Jo$H}3O%n0#`n$DFmpis_lEAH|^CxS5oM3j?51D-fMvA(+T#&oXS` zl?ij{2-8+RKb-tm(2MZqYX#hsNo9O$lQ2>te0KcW6SS5qQ(7d&MfhVp!FXDemTtJ3 z-5)v@SuoW@k~TLH??a9!<|NOBBCdU)sI4#MLU3DO?3L&lm3GQ2DVfF2BAD=JO=&@8 zU4pz##wwABeu~n7gw@)H287LQ0j8i#HG9t1U<@-%HU!+7(a%lWHBL@%NgBEeJ>1-A z;gw}wPcO(y!G=OiZ~>yV74O)Q`gvOH6Y%Oj=m{y}Y_5?=b4=fFBU)TxUQ_@(O%aA| zm(w@(d#2$fph5n@qD3tnJOd(3=@W&KGIjT!iH{FsT!!%yKQYO_Wg~7ml%PCNkSXRZ zixaMx)OWes-`}di!THt0P8+)Escke{I%{nBZLiFVvTi}o?yeMVvR~)F^ZqWEs_StF zQYy}Vdi<#%PH2yM%!ur}&LhR^NBc0zgFP>6uUN9!yW+h^babs=U_s9N%a$7#-P)Fv zn-u##!Th(ZxJY?V==I{4bKlrrw3zAqy{N|qRTGWvk4~@b^hWAtQ~i0(882*Kr&vFl zHeluny%YBpmo>T_n7rEg%fkt}Ef<@E(--*EDq75aP_ui&x_2%wFLx|e9~gXq(0>(^Z#t0|YuGqhms~UgrU{A%xtuZqTHCD;k#<`3mSU2@^e3D4m z8m*Te={P1a~oKZ8!pNzrAv}t*`@;JJ9cwDD) z#h6AULKcpzHsGd>Mp%xSxp{Map{3)=8LE-Cxh>9Wq}O}H z9q3rm-?uj7g?+%z;oBe{0O4c=js(9O<&5o5K9nCv0Eq#1WU*WTJg1h(vSE@=>yduV z`frS^9nbEdO)O{K;|!b*`c*f*BD5pTM5uib?laf|aql6BVfJ_XHd8j58~Zu+9x;U< z_}CJxC`}GeSO=PIf%40`i10-DcYIBfX4Dp6c7FSl~9bwSTSjVbxC`O(QW49M4%6!U8{I1P}@jS z0evO6F~zHnp?0UC_})EOhFja5dGoSNkfuFkRX>~rC365HdSp_#Y!;$8o=#fvB5r90 z=wSWvlDO*J!b`-@j}Rj|Jgyxu`=Gued3+c6eK0*FUw;j}XK;Cbs_z8z^8l_yLCOUayCXHqjqFFK#aq*NKQ}Y;6~N`lc<;e(bXAvuk$KqcTdC6zbF#x4M=}g3C@#WFVAMf#&HcUm^^0@ZvePgnnxMyY z7PV^~L;mrfJ=21xODc{2Q$)oterxWHqzt;TAc5_^aBZ?=)2dk1z(`&aHF*Ai@u8lU z#5^A1F{*jzRwpMXP6PZ-myF~8msoqXNIoC&hp*K*=Dx2(>VYFH;Gt2A_q!$UvrVeq zFS&9@ZY4)OS#*^h1bC~|{j?5qx3cHa@L+2bvBWqqdWG!VC2q^wMUy|ga4KGCy^u5Y z-w*9R;YYcD#}1O8tm{^h<}z;OQ*{~(jZ&_Ck~4;^*k7*-!wlQ&W;IfI{xHM_Iyh*l z#GHF{VxRF&gOU0l*FHUc@Nn%+$gycN{VT6FtWb$*uyncgxV~xL54Clc!4IXk4lpoi z^^SUQKJ)bCs*ZPE?ym3GU|*@Evo+QEYrh%S?ChdqBlnpsn|j&XW%c>y^Fhf;x(CO9 z-nqF`tN{J8-{H>8u(XUOnhKZ!Km+83i=MI)IxmD7$nFNH8#xegC1~O_Vf6vl40Q3} zy%0orI6d7EJspQMEN`J2DZT}f9+>aSOBa_;2)ieEd_FLHXz>;2Zc%2#hYdqwqZnPl zsO{?}_-S|qCfZyC2(co-XRffodDWU4H~V)G{th69YTe8yRrs2Cy9Y7J6T!x7XCNPsH4LsWp%z#D!5 zu5*S);RVp$4hpYGlyIZHNOUO^OG5ZP45;5!GJI!a1ZiHCRo8q$d1vS<@V9dARu_S? z(nqi5kf-7=3P1(QV5^7gJ&C;he0J!z=*}c)kfMmFzRydZ6{Z94__X8If@TlhdgTW% z!p(09n-m^aQD&Dnr#vgNJ8#W{pEnR)eOw&a!BAM17tAe={u+Wes>zQkl&(jzQ#3hd$@H$c(uip`E;;Nv8{Y*o~ zseVHagtNlQ-kSjUITzr+s)bYTTb;ZjKQ(uV@uQ{@7TwvI}O-I&tdT zT$+UlQ@95Yk4@wRz}^Nf6&D67sllFS%vFj0HlH?aE#b!vs~UUr%PIAXSD7%90Da|y z;B3-5^?x9dWp4aBPpjjPmo=-H&TR_sD60PW5$Oc#i>faEIsXgV^uyPUU#2|B{)ny+KMkhTHpM{5tI2XgA|+cYk}_#=}PuytzqT7Q-gBBoih+K=G)0?jHrpg&>4eAP(! z7JE!iV%d*ggD9ll`4ZA|AQ6{YVQG~4@S*0|v1DgS&lcz2CIkd=jz|<`hG*Y95NEml z(hCZddiSP7Krf2rn_Ug0lhcOEwLgArZP^DjgnqkuxWYBBy2Uz2`za_iC~asAui$=T z*jALOTtB{JX**`Z0dutQR-MpCy5vgEZ=(WtB9MGb#lN)QTc7Zw6$a8@7HODbbuofX zLVR|~cMC!2K4L`UL5A&o>_2~a51j@E3D9tZrjI>I6|`{vd_U}3T=yuquj|J;{@(~x z0r3kxN@Y0M3v3uPsYEo^1ho0EoFGL8FdpG`lF3-$j69zMUi|7pv2a_~e9^6YU*^y@ zWG#Ra_8qf8RW&u&;#*^&k`9ukHR@}v@zTYE5f}U%KHl%p?lGW1_XWB-?;e{_uF9unHX(B-8t6Lj}`LFKr>K2|ip#RL5;_)tz4=*(H80;~>X!gws-rsBN(uU1NNDyuDYwy6f+57Ia7d`BG zC~Jf1XIZ6AusI~{I8A3_u`+5@4?CPTWJW!|bpHHEEX<`G zs@LoIudL-+z;)8S%vt!|D}_Nq;5|wt=&aDMbJ@A9liZw~wd4E5Se-q--X@g;jB|Cm z*)9lB@Y$Q6{@6EsVcEMQ{E=z?#bQRul#{?AS;<{z&uR^jrir64gXVPDgD#?oI)>viOM%RJhkcIr&H)zW)oz8%0u?WhHNL{)VB^5t1mro_H@ zrbY>;pa5{D-{{TRgK{usS}M0B7Y}qI+Dk4vy99@Jhm@!8&@)!)E`moYP#||2^!KZe zfDzDKQKAxh__^H@0z1aK6m6RESqQ0OBKG3oMG73Sjaa$J)pMlm4t)?kp6&Io<6lr z_4S4mf242)$5eI21)wGd=C9Q9+s%9EbLb)nA%<8&peS5Y0mc_uGL&(;%)w?9@IsJz z%WK@t%L^Qq7~1jE4gF4L_9u5uLJlJ2Sz$?@*ST-DuJPBdj#j;FyN}ZvoKV{7*_@{a zhnrp|UR)yDbSm`J;2xb)9G09|F{^pb+WX%WCmt$!_x6GHiPNJujB`xfA3EaF_W9)- z^72iysx3wFD*+3r+`&o3WQeoW?bsim?E zQ4sU3tcc2*qB3*Zw9ePHPhPoV{qTP0fX?q<*AA#1=il9YS}%yu3|Q!5vN&}!Gs{#} zays2Fb8ZxDY6`m?V_G~xVQ-^)(i3(pB=eh(ml}R+Gg|KAq6aQ3SeU8lq%WG-XcqZ; z$d-b~xEND5Bx{dV`H7%MUfNV5y$ zm!`@yoafG`_=btl1;DXOmms@YrJ*8LBlHItkBZvE-b;vy+n!Q_A$7ggD8@>vYggds zlEs>#hvyFNZ8tv1cFvr^3Y;ZyGQ)peRFb)U{X*!6mxt4*D{4lVYA(7pdc()r2u>NF z#8~0w3z=DR_!W_edrYi-yR;EY7z_20?i4ppdbU>e(+XHIiu}fEE2w&{2beKLSWds2vx{BZ-HBS_5&4ilt?lSgCeO@`}df7oPXg7(q&B zP6j6{B5Wm2L&JyX`25-vM1H&7?L(7e9JZZIzgV|H;)N{#@pn)2wSGhWyOwpGxP%0i zZ*9kKWd0$Ex%)(QuTdM*cTA6~ZO(JFJ)Rad_N+S-eMG;$+A6I;{Jw;jO`BW59e)Mu z{izOTCM-SuhWeu_?U zOG-xh7X1$_tj*7JL?VWO|HZ?4en#M71s|W5x9Y5rM1{K1-L7kiy6`9lE{BZG7WEN2EFNo6*3U zLyqcJJabR#t2sGLoA@g8A!Ho86X_m~S6QQ;iV%0rlX4O$ zG~kb1YF3IN!Q~F1W{!=`O~2nB;z8YIW!pDhD8Q3|Yp}ep6@Ij!X6{M0N;}0B zrqFrRCC)l`H8s_4&5f0o4p(-xufmxX2>L3 zttnGFF8qPOirrQueL3}V@PL0o6CFh9f@Nh-chgm?E~KWmS{+)x2gR~>F$d$U*8{o*$*$-hgVtv+Y%w$R=s zEqUUjAy(n1JBbu^SANzj^j?(N&b+SolTJ&k$JD2c$o+yX1`D6aUWq@ZTcbv?B{QE+ z*4*Ev<=W)qpOkzHVQ|6LvdbF2?aiLYy_>w@_2z1v;6pqN8ah^wf!omG!?(_)4>_Q( z5t+vjK4DR+gr3{pTCR!7r8yMxLx)P5KycN=le8%ujA?HpU~x_9)Jxtqw|{bRZ{DG5Fo@qx9!vyjnn6PX0R9x637>SIL(NuIA> zw0AA2dc!}iDum6_XmV1GzXTr$X!)Tq)|pUg^?u>os$Lfro%QvQ$o}0S&@dq}5mrx8 zJ~UEpxVnXbC1N=slZLD8?x@%bOZQc{*zdg;En4nNMuA7AuEfz{4+X>N@H2gKz^ zGp^D!F`y4a$3Q=yFzqMfH<$`3(?7CM!0OFiXDgG8apBFc^hdr5&+~ANIli^amVdLj zCT&otpBH`7WaplR&daX6Wb*y-gjGRysVH*RvN~`(WBQ&$c18|$<+?Cd1YVYFR=NCu zq+U)T#^2D{92@qF>lsl0&Nf0YmlR}r%iKS_*Y^3JJFI7lxJaa{n+$0evzZZFCp%(| zEw3wPJay`gYuCv5kp8+d6)~vC@*Wj_K_lLQlqNjA_D0Ju$aZgZlzn!lMBAsIew+QF|r^--KzIzJ$;ENyD94V{xmejH_MzQ}Ii(ej7Cg(OxwO*%Ac>Dm&x z|ACe@HvgZrtVg=dtIV$u9J_D-exolZ$oM61+hYS2lbLY8S)*r2|iA}(B@>%ypMwT~Erw+j{qiQ|D!v)I0cZlcio`wfr=i& zENGA{-;$9J5x7DTP^ieHp0ekK?}(eWr^rOrbOC0+6J`niKY+(@(9 z0h8TyklD0p?L+{laMGB7R$GK1XhqgSHJT7lcSE_a*N?P-j{2XVlQ}u9Z)w_K6Ni#P z9=@B8PuBd;{vDTGc`1alRtCb+fXYT0)v!_AI9~m10rX>JdXCq#86YJrj!7N;-{h-? zYyTi$H9gpCsI0N@`o*(nC9X#%+(FEv{o5(V$_u8+=Sz(UmFVr~F4>Jw0l1LeYF{`W zMYD_0JETEI)7?cr5QKRDjh(_CB9j-w8UnceJ=grpL8 z;3zW~{edHgq)nicMhzvn?5|m)=^Md>;?;!<7TLN3PUhq{>dLpY)E{F+ z4zH?LM9*lE61l~dy*a0L#%$sAG_xkNY2I^R$E8|(=lS|%wf zI+8LWI;ze2add`fYk01^MxSL97grbFItQY2ty?tt8W;x39)2LC8?0Z?el+-#WQ4vA zFn~{(C$wchJ)D3Lm0R0tj>AXf!GjqOUoHXMUcY`cMVXc&dl`6cQ{?GVzlOe0*mT1^ zLEic9_yKSUZo)#xd5BzWEiHVpSt3N+(Z>zd)O?tqU+FfUy%#1wTyWz*15R7PxQGLh z>lJM;$xq1RkoH@W27qoMK|({mOTSwe_>I&#kEix`d}pL}J|jp#`5SfQ2m2vm;Ay_w|vx{*))L1zOGqd6HVJ}_AZk-&s?zS-Zn0|nM z>Fikoa%h@`v^Cfem6aVV1HX>*I9|0U&k1!G12%q`xhk!Hef^RNpKmfjnmbn>^Zut# z>l+&O4|~iR#W3YXNr^=)y6=y~KN${^WpjWtNZr24+GwS;1KMLA2VOLuA@=m?WF^AH zML0YWmr6vqh~1t(WuE)w@ne`z5U{#*?yRk)1!Dx_+ZtC_wa7f~BW48J%bbDy?dT;P$64YR1YX1K2}MEP_-I0Y<sUa+T3^0V(G&Z3(P4=_8c)`0@O0NSlpN@5sHe65=TvktXc4TwHGtn{u4Kfbyde1 z7YK>~fj4IdYHQa~R)Hea9Ng7D@%QR^zgNfFr+BSJ5635ZZnn;fC#UdvC)YDmJ<+C_ zIf-z0_girxCWc{0aP%c1MAY2e9F-0@BTpYHA0qFV9S(S0pr(RzPR+W)^Jd_!;iN~Cp6voiL{@YHaA1eKrW^6k#gXt=$6hk*-eR1Gh?K*!_1(mwT`mbHpQf3wv#FD84mkWpir=9B#nEzi$Xyby`#hjQcwT^h46N zF73C;fAe`N{2XW%0b+Y^oT}%mZ=j-b;>;ag#mxFcFRZ?)D%JQnJ+qxR@65S#Ax{_m zp~nc{s%^{O^h#b+8-qM05I*YeyPyMf?iM9W~itd z`Et}>#4T_jTr8jfibTLE0WT_Gjs5G_ZMkfIROeZGdfAOqe~^Vp-8gTpvhTl8cBQra zJRBI)-fH*$e+)OsRh)l`eLgJXc07$_$#gp)%q!BUPEd2ylPB71xea zltzHK@@7%b{HLi?i}-&emHt1OQvdK{QZ`Wy)tkpY{`aSJ!d_BR5*(Qkq|Do;Xz8k} z$CLh>x<+7<-MhDOm_Qx--RNM{b?>JsjlO~>=bto$x}QJ4 zdK=l=_6f`R>$?*~f2Vq7ui6tGU5Y@OLk=7?Lx8quSUFAD zwT_G~fqnzT6!7EOJZ=u(7nhYylsFz(jk+8|dl~>i5M9-=m*cw++Xm!9)+lW})zjYl zeYLG1Rs#s7qHg3D{9#fxMA!$kY@mTKTC!u@Wx6uL6^h8z+3bV<7)K{I!0iE%k{w!3 zcHf?%JZxBgPR`Qm?;F;xC2x377jEc2QjQxR2(RtpA$&pvkRdCJAW{e@6MY-q_-@9; z)$68`TEXR@fJfCJ*+d%`xTsZCW0u`lY@P^XgyAmyOD1y!$k?|vDM%?u3Sqh21-|Y@Hvs=Xr|nSrFu1W3_4KeD`{`o;VB}kLtf>14av3B$ z9}CZ>rYFlsYh1^Lmr)3UTGK%k!d!uizYthHDl!kAbti;`?Zt!2KYUoRW{va`x=sFC zLjzA*G8D{J3xMfD(cR0ktJKqnU!8N5fm%)0yT<_hCb&ux&}5BW(eh7xtoD}iY_k=OG@&_NrT`V(?LjG zI*M>BT!iWxBawUeBt>rc-b3@@HphT8%NaXGven67!aMfj4lPEV)b|tx5X1W~cd?{Y zZ)s_vC?+sUMIq<^Viq+2;9kVY?L`ShmZ{VQ{IsR)fcu+SikS%rC#5RE6oVSDGX216 z8b=N-Uhj>9Wxw{$1`r^oUR@+4I0W%%;P7WC0sy2nchVIp5xy|b0q*hr8;QFuaqXZ^ zd|#(dowEG*kzWh7=K00>f>|0bz~u(dN$Rj*%ZiqtN{piF-0Y29<^!kh`i!9nEN9Us zP};`EMt0@3z?FYUyLhxPDe7#w@ z>tvt4A=|~o65GpL4N>YTGejkE$?0NaPD(S z$H8<9!wral^i{ZdHC72O6gQ-1VncK{ExG@#TqPqZ^-~5Xwp&Wn_qT{ME&1i<>^|jk zzJ!9d>bt9J`|Rj*-QwkW!?9Q);CYGOJu-v4p+l#E>&_Sl>D8!XS8x{vip)v9T4x7-tBnoWix+?am-GMw4n zZM;Lagp8cn)2Hc8Kgyam9FJ+YW9OuGqmIv-v|L?lbhE*S-QV03)~VIjf9~Y^B|O*R z+sf807y-JJq#P_-VOT#3^4jLgYB|ZJ49;-#pi#RC1kLB&XIC9N2@%1-v19k;R!;iB z-f%SNEOG!CIC=7WSw@HES2(4TW@p3j&1A-rqeoG_HmQEO?^)`HwZ_v}b?jkqx`WsL zGZvNr{#hKoOABy`Y!1ifVbnoEVFyh-yB>2;rJxLDrRf;z)l(Hx=S^CtAksp+k9fXW zj9^2~(RBaoyLJirmfNSNoEn|)tKUYAgaO&6OZ|^pK>HpsWC;0M!7qRXzy0#{4Mt|L zF9X$wlOYA?M@T!Uf7%Hvl=mzvxs`L>%IxH02B~$g4?+e+QZ!S0$jXMZMY{(W0R%YS z2+wffQ874gp<%Rw-^PBpzc}$!vkE0Nhd=vURz)s_4D`C$PL19iJ~H<=OCFA8dl3^MCdy~g6 zeEq6V6;F?bbE(czXu>P;i59Vohrm6Kj9fDEAOQpFf=0q1{W^S&=cFAhy%nV(1(WVk< zCsTvA4)5mL+0oOD89lmIj-nruCpcQsv)(B*Obl|8&Ys<#;b49UGZU5Kv;cc-k!V=C z;}nCbG-Tr3xTQHcsKhc9+$6yDbmeVp#fkj4h9oGGD&UNAwq{Ad@s;xAw3aYbTttAhD}F=r%>D)X2=iSWZf_RngJqY;Hk zf<|JDw)XsME9W2;f*c6ONz`K^aUrUazuJA04^&nu&x<~CM9=-LDLX`OYr%UYlkw!7 zpE_k+@d`-LZG4{!54qVxqsAL()Gc7`mv_5TzwF?HW#51KawphIw&85dha%QCcE{pG zMKf(FQtcWC=xwvn6p2PGfE0iZ>84y(0%b|XLe)j9KZN3c)+2tkt81q%FK5qJeMy(D z?fkG05Pk%Q$u5OXzbe8;5L-udF${9Bnh@hm_@r3pD65>JamcV?LPT$AX=zT* zU;;mB>lDtNJ=+J47Z@!0@XRgwb9E4V!fE8eqR6xH@j%c6O?GVBMl&N4RhSK3J~(r| zY{;O*CMBhQEysWQOpcwUEj93Tx?Pz=_;?lhFr&$n8UAva^G>nGID{>q(@5A_Wi{>; zA)KAmMs2VzK^ZV*n@A~~GWXuFZX#akP4}vMF!I9t>Jsd69*aj&Ivw?`(VmWTtE#H7 zZ{;yyD=?lhA8+{9(+Nyg1`Tpz@+BB4!Q%}K%)k~=Ck(=IDPGecszu#OIAOr$#M)J_J2h1k`6(uHQ;uxVovu19Oy;Wplcq>Z zOUazcB9UeKFxR2u3P*ohRA;np^C)M-nU4dcZ>MaETcdEMvzSO^xP5tTe_vnGwhmXX zZk$)0UU||cg$C43Vm`ef_&lbZuqU$;ID5!^X267b59$rHyjkC=w3BStz#-S;=7(&# zEpiY{EX82T1ypbZ&}!Nw9KUw0=LmJKOT1qALDKsV9XLP~$W&uvv{NM?9sc567VQP0 zg$K;n^fcY-)8y>F|N7M;#tJ>w%PO*|OTSiEa~*B6k0%A3pOD@**cj~6T(yTsq0fc3 zHaQ?SYRNm!MGo0RDt1q3j&3|#h8qH?mT%uzh9>Ad2tk=QuX2c+qvF-m;v=}(>8*g( zKAiGz*1Pw+e1QnK|ml}ZZIrT zwQF|7gL@ZTu=wWMEbOPEW%iY5P}Y&xnO?qVyK&_mr;#vO;2Df{ErHm1^w6PO`0s>t zRCXEbL(`5G(yZCDo7puwxoxl00@6@g;Uq`xulqY^{W*{PsW&SB%>@V#orE_6KaD*- zcIiD#X!mQbiXWvIyog0kb-5@weT(A|9fhvW3GGBYRCiBL0|<+pr8qFNtOZtYvlI2e zgb7JF)GZU}ZO<=KRbaGih4aB)v$mMEr(P&7R#v81Qe3WhR%x$W>nFR2d674UtSO9+ z3osi8K9Qe0{QbA2?o;54bV*X!w{y|+PnZ4t+6A{8HOj%clYd*^_0PtMt8{PtZmH!g zoqkl;;wT}~=_UQ7URlkN^?kGT9D0JFw)71{8VA@`efwIh>otCHwge|Q(_ODd1~hNx zV`e>@7v$M%@yLVO8MDU^Fp`=&7Pb*p-r|MIC#7c(9YfkJr!2xUCK$L-VMRuiBUmZ~6tKSy_{McAq z2c_W_Iy7oy^`il{#!ow?KF&^Bth6)ua6J_Uvm;N_C5bj|LGfA@))5B|!1SG7zn{?Z z1L$te_V-&OO8@nYRh%9&sY8b#7AW@)7G3+iUJYN%b@gi25U4RR zGz0w`25^I5WkShF&2+RO^wX>_{dxwWco1T7K}|K8>Pksv@0|4kymO@Dj<5SHq)_v* z+l1NEv)|NSSgF+39O)-2L!u6iM1ZhZi1d*2=fC9j)h*!4u3#tB1%3nl0m-TC(C{Q+ zd9PJc+A_QAx=)cBJ*X*GLnlnF%)9i**Sg75ymO)|=N&UOXeZk4*HhQixJJ#T{>LPL zeTi}z|& z<;3u*dRz1r8w)H|BB(TcYf2{e3s)O4!rsa%!6Bo)I+Le;S{B<+59~8V^>lh$$m{!e z&l=%e2Q3K1jL(3)afjmpF;=Eu^wLU)I3HN(nZJS|%&qSOKWebwai|A4@_IM&W1GQb zRz4^Lx9E(E<8Hp$K0bX&;&n;OEv4?h?l-4$9r*wLGOn?W!9QBYHvM}-azk!zRvXMb zECF3Uyf0jSm5B(VF!CTta6qkBoqgfCcSz3h_Tq~_G{2gxllHXMbIXTWcHSRedWbLk zL9bOg1dw&oB*8m9`&wb+!J{3bJwNBCH@=kEpBsPM<QGu7TG~%JGH_d`+FB%u z>Cfel=y&z_(iFbDZgJUrwJ!_$_g5aHRO;Y(T*DZMlD+D&Y?*3MhSsQ2SzpYV$#pKB z4I{zwd#0;ECF-}hou=&vqwKA?ebBgo2iz`Lw7xSwJ~kFca?{={;@?P}_@42sQHof5 z>CT zUs@LCbJ^W+{*6C=T+8Y1?uMst3){c%rIU7DraATwKS*oQyP>CB zagv=@IY>$ko>D*fPK!_mE?uz?EnV=`op-c8BgJW4@P?WL6kN8$Z;T?*r`37s5nBKL zJ9TTwz^O*TQW**o5(Hq?cEze3!vD6ficg+V@99Tdx@f}(!g*RsXYf%Xp~?5^7L!@^ zh(4I=2v}XK{a8rG<6Qft_U(S;njkQA+=}O*#Pkox-Oc`U`Hn580#&AL7@Q5i9tsbq}*+Y!Z*dFm*JF`)x!gi!gyi8BD?5NI}v9t zeWBO3J-L$iFsj0PfAu!5`7lj=4$EU_( zrMY_b@RG22ltnpIIaJv@E#6hw0CDXzh}I%a8)qPG&c5KF5HF zoW*>UJ-X14q6`HQ`l2B?X`^#3s*ww9yt>`^1fxMv-o?aURN@cSp|zvQ0I&yX35iXU z?8`mI824YMSk=#d`KH&dREj3GHFQW1-1)@nbbphvLqm|eXx`kpswU^eM6}bATiaiH zK);`{wI%yR-K0E-Wp56Pr^(MVzxC=#&mIzDC}0QtlrP(?F#nDbz?uKADutBm)K=|8 z3_ZCA8-p#uud?sM&kmOA)xNhm!?R`+ol-fGVD^_?GIQzD!NHDh7OA=Y7i^?eR(ev} zH{0;!qN3E+pBt^a7GCS|+-$qv1HGVS9leX|%`TWl9?P@)eOv8_MS@(@=obs-ch+o9 zj+!~Wi|Mp>ZR7mQ+ax;VRCE+^feOr%XV1Eyw8o!hkLf7@BE<51QF26$ms-K8xO}-{ z&z>E>UZ-6-vOm8``u_A>n~UN^+9C9#-MhE*DWKA2 zSmf44rSoGNxSO_d+3z|@h(w1U=u;?$gkUKhkOyofAm^b z>L^*euN^)tEQg#9GQnk={UC{f(BPue*}m6@_!K1h+-?-&Q&hU|SUPk{SBBs?hcE-l z9H2&fS9P!Fn}9(B2NG4%zosKEG!?=#Ol^^}d>9TYC|w;qAK`&?@uJjMIc5b}Sy^nX z!RB4WDhj{xPB4qOaVJXH5XfqPkoq5*1w~IV3Dt6J|Mf{TiGYo>L?UL`K=RxTh&voY z_b%%t5>)EEipd?qv&uoD1jw~C&w~j$B<02~LOKK^Q+{T7r61Rv+f&)=J1M8KkM0)8 zssYOQdPaf&czm{b^L?_g04u)>Bd<--kPUWGf*i(3IN z-d`Etl#@X}Vej}D8;c>2dnki$r-Sr0s^l$Ow*tN1OP!EHZ~8Bc+`??>yaQl9igRR?%&Rn)=X=$$M;~{OEot(2V|Au_&!`phEKQ28po@wn9 z`F>16ACHH@y1hlBeYf@v%Z(Qk+1|bF_U`4u6HO=jFAmrpcPC)}ExGL64pXO=y%X=# zH{;Gukwu%!D=~NX^wNM1AwQJ8Zatl&7$iN*^TJ(0!O`4`mCK?e_pMpwbfpVefi^af z1%k86wG?-74DmNd_5GCk?Sfb#M6}PV^GczfAy{Nu_G2D}beAp=mb6x`a(Dkmt$)z` z9e4qf)a-Xhs9}Tq>EC|FXswd$5J2re2_8OocMo7{iQ_xT&Us93A3nsbl4_cNkH77p zcc073NSR`MHHdB!Put4MtSWb?7e_WloK8wg9#+<|1gqY@g}m)( z5R_ZF2x3i2iY@iFg~eBrFKB=VG+pXyS2h(+jp?5dWKOV&!-s#NH?<0NEMllr+u|i8 zk9mHzO*!+rcv!c<-*r?S(tUN-muGGTNB&MJ2Tsh%QGi=~Q4!hk$SsMH7Kx}(xi*0u zpzfQiB6%qfp8*wwAs*l3D6>o?=;kTHs6b#IvEzXVl0#&sOpbX(yUY%`Wz%2R<02># zlh2&RzZx62VBX9?xEmtmE}I1l@D{#3eTc8F z!?06-GP=s&_Y|N>Kx?dw`Rq*x9fF?DDk{4nD8A<`PfW01Yl zWkDvv35~~1ED3iejLsg{?&akPL;Dpg0;O+2Kj$lF51*>pB z8(ZY`^WyFn_iWPM+w19T{eX>OHweZ6A#X3jR2mTRr}YKsYWg~ibm%dI+sNo4HB)!O zgxdkvK_imkaK7nv7Ir3bdW;3%uj~9TgQ3L^CoWx@A$9AeEBs)bm|BjT?_b(gUf=K0 zJf)pK;rb9X!~CA8G2fLNa2T2@D4f}be;I<%cHnzoy{6!!9e3y13m1CJ$?=$Vb#(Yw zmGCcHUy^AjkU&f`kS%I!cQ1W=vDDPu{Bz2XhN-hu8Q$l2P4CpP!>Ya`{+pa4rKvJ- zAW#pe&bF?-Pai*CJ2QW!t1B?7rKu?{!e8AZ_jfyM9=`NP?`X@nL;uY&X&o6FqHq>?@%TrEz;&6A!)vbyK`W({hPG1y`YCv-M?PF z@Rt?e#peIb1SzmlFXDRtcpD9Q2{ASX{@A5*f2Z$M1SvnLh>DCn`FQzgrAwt(C;itC zMm~D?aKlY`@4q_}{qH}0(to_%Q!iIO5-$dJyX+;*Db4ekE+fF27$XNZ0YZ(p)n8TwSA&9n*|BKv~HcBM)Ek0z%_dg}e$;eJyi$5MU!pMEQs%2xW&nJ8J z?!R)8%=Sq}K+aZHk3bZY_evLuo85Xf@yUg`8x8TVxyF3o|EomTqFhm+qH@AZ7xr`O zh!^SU$G@8u(^`ke{MiBGg*tWs2qbMw$1cDB>auKFZh*F--v(H$sFT{&QP<7B<**UAU$g z@`AN77}L1t_QzRmZIW$_Rnfu~&M=DbKA9e~zC{%cGPzmbIb4``Se)TT5$F$>opg6k zfB?dfjWdVwEOr8v1cNOYQjBL}LEb>&2Xu^ZR-cTLl9pyS2-E-uoDve_X;D4>E`wDG zfLl@$W<^prT4mIdpFm|U7lxTo2<>HrA?2C#ofKcQEE@xjxdFQ>~p z2M*T0fVSCt<3_Wyo-nedvIfbOsg~cvB8Fh4I1Ei(5_2}7i&fK{s zs*(J70z}Xwy?xs{YKTgUZb#SQOqwVHG~^)@Gw<>Tl}T6~K#(1W98`GZOW%J1g44v% z)7MVsT-4k@EaGrXOgYO`B%&(iOyp9*=V6d6Gg)#pg;DLEg>d2&K`OE zk5vqIF(xI%h&$@*$M+pJJKAvLv!E#EZ8XG1HuL8{IG}BGFFvSxTvNuu`9CKc1doh< zD{dfH-8G`KYUH`or=Ks17S$ytvFsV1-f($&0==1>q!1kT}Od`sALm(?S8?{_J;!VvL2u0kPGdG~^9XPOmzbBJo zD$Yy%jCtcW8%p_RFRl{?!x*J}`UKUg4fqQlC1b4Rb)<(-U7)jMk;g*l`d;<#H911$ zP>~&iyJqgAKEVdwpVJ0^O(^=3>y?#s` z-;y>!YV?RTF+9S}%TE$%v$M|x+155{Z7e{cKRsHGbx}!2c2&oYzkdHV%D*!8TI_nM zjeE@kq_m_UZ$lP(gD=BDbLno~4BX#tXOz3c{zO9z#l)aNFb0=W;tY}nt8Au~WBo&< zFV59e8Za=gXP$2VujX;49=*y{?qnYsyDKOn>-ms{J=G;en@UFobjy=C_x{-krQ7O7 z+KunR4)^}*@@U@UQpYQmUy^U!yz6RMXUyf>TyiX_U{$D9Y zQh%cq`6|OFf}XXOS!#r-u{m@EsIH&p%*Ao1p|-aAiYi!(V2Z^lIy9zp`?_Ac_w4yr zV9-`J;|M$oICE=V$HBtH0$x7sS+TI>A6XX;T_h>O0xjBn)A)T%*#V@c?xjJ)3M}vJ z_4=Bv^>dq$n=%7gppQ>Yaq(?9n+XXrW}`;3kw^3Lgh)#Otd|UWZti`sEH^t_!#=f- zQaWram#bbyKdsUXhM_Nl}8MV6=QN0O>#VWcnGSZBo4|Feg0|Om)9= z=M3l{v{W5p(R>*n<-}qqod(!+)(7Q25XD}PjI`$8a1<_`y>Mf$;Vq8a-A9i?&XP=f zi0=50>-`tn+u}Kox1o9>{VwZOKL(%hP_Po@6aIZ>y>a;eHxko})t4@w(}>Yc26EOHbx`n`Zak`?WZI54>sHf3!S1F>RbO{V2=%vTg$r) zeo|g~E98^D@0cID{g>`)0Jfux>L?OqL3jkhbOTc?F7_jfk&cIsXuVD`b6@;#L^86n z7+tGF|8p7{fZK`WR#`ll)#LnVOc4f6r$7u;ZEFLt8%#a5U1nH51=q93Q!S9uwhV!G}qqgtMGB$V2E*GaW1YBs& z&t7(gpq`LcQ%Fb1kT~B21xP}Ia?_f2A^?Nhg5jd$H#+osQqZ<3iC)tB-0TXkv}4EY zn8Y!GZu7GAn@v1Ca0Nl8$Z;SSZ9aor0EIz?pVD2RzKY7qnD~*Oms${58|sggzNu*= z1{ZR2Po0-)NfBa+rJ%(bjzQG2M5nOp+KH%yD2=`J?67#<+iz@pZ7s@)eq&b3J+55K znr&>GsG~V;#qm?)E=?Sp@+88oibt|~<;u(4pHo(UDDCpddKi9w{7t9=?UCspGlQ5P z(zl)KBFo#ns4GILH;*0b=Pxk$^tZe?xp?B9-Mfzy(w@`!S=vT3PA%9GR+7P%{A+{0 zhIy&S-l5WDwbS`;4?)G4*|y*984=o@w)}FY9yu|3!US)qAYMCR&4x8rXRh5s-o^Z< z`%1KTYj&JCQ5@nobv~O&U<5L=Id=5u@RRmWey9JTzHE=*gguvF`rXxYG*zGCw;hj? zVzR=!b@NlYwf39IiE0k%8=9N-9PWShu z9MXH))AWMbmA*gwzgJR?N_xHKM(AXP@O!X2CXbvves!NQx87dN>QgyEE@@JYT=PuT z;V>>B4|NeS=D>p!BN8wVeSj6R*KXZvV(y0|k;(>GNle6J&tlVlSl=hlK_OC#weAi+-e#zj!fj*s!py^0JN)JNRqb+b__4AU@+ol|t=>c;9sc?ijOY zC-iaYsrYX$z)KfcPehyb?;j0+?9HtWT|(h2nXLC5^bP{${};YeD&G8IIThUpnxtn5 zPh6C$2~>Q^_yAh@L38bKM}|&PAM~oGbCg+>&Bcz%eS^liY!ZVB0z|-&H^UVp2E@!; ztML?i`0)9YC(Ls9Lq#}0=K?J2Z-A}puWtK{du)06#`c^FlmwJ4G(_WPCV-?e(=JoP zevwquiv_<1%0$b=SYeDGL)uB-zJ8Q=n2a3N^JbAX2RUipUJ(^r?)T$k&-HFC6nKIr zE$8QSb8~_s&hHr3Gd5tvDIh*ZJ8O?b;L>yM+-<+#^8GTW6(gpV%3`VUm;u{j3UQN% zdq4m$dqiD*IUhI+P&LkE-;_kEHflJ=T5!KmRc&wVObjALNmNCFN~}Js1KuLj3u3f_ z9eMlzi?#QT>-pdR|6f8#LXwP>Bs562ri3I#Rz?(Mk7N{@(xgbpC|OBF!yXMqNruG zN**{B@C?3AT;IcDOKm9%5oR<|7*owGhd#w5HZ1F*W;qtRyruvtxyJYnRUR^==es+` z%|)@rd*2<~b|b=3^8C!*&XRn?z7|e9H*UOwXlC&e1@Gr?Fc<#ScfY4w+ORoCN&`Y2 z6RIYS8WlfG>+GWjp8IIeuYLjETY}om$g+@LeUR zFJs@%3>kiBshCKyM;8{I)_kRpWv9AF2Aqq4g>TqNQQ=Y1{MobJr)*=I$LJpfo{mz^ zo1FlUnH(uPHo<}@mYxj@zsSkYu83GQyLHrj-9Hxf$6ZM_>?(wws5vK zRt;=?7xxfy(vJCfE>T+#R#HMfvw6EF5l;7ZXyD8$`Zs!#___ZbJt_R|f6$XC6XLsX zZ`6MTxWfFT+HbPl774xfJsS0^=R5!xE^~lj_`IUetb(pAI}d}|R#pL#$-URx?{6NB z70T07y7z!5)zrFP_>kzb8--g~7EL|ys8@_1xIMEs$C$|djK;C%5#(UBA%X@6A6bl1 z+w}S>^=N;PzVVMmWDCqpQWaP|5byCDxtKZRUZr2{g&WuA0Rn>O;-X0fTnR`a(Y0%L z`AM(2Uz*;tnNZCwyCOSCsXF1HRPzaAqt$cp{3z}Rv<`z5C*w`9?hsImd00ctaN4Ge z7t`X!Ck`Eo2a{%b0sK|q)+_CrX(0p1W2&;18V33_ioSrrKo#+G{(gSP$E>w*^bV-~ zMcd9xfmd(?3dG-8vp$lJyXC6fue-mSny^Ew$aA;ckgr+S?X z>&q%CvhsX-@2$J}&?6(=>X`p-^U0B2n|n;^RCLZAb|%SAqB#U{l_Wh+8W}Q8o zU2+;v9sqj46S>WTt)cxEGu)d6I?^WQdp4=w3C>N2CPb^9Yi-j89^ssEZfj|=msbTRXL7+bxVL`rxwN&Y+INjMb zx$jU+6h3`w*QeE)Hj-DU3i$1Aym|4x!&oG3;qGos{(-*>1<}0$8M}Ud_CxDgkUx7- zVxI(yL4^N#heXqo8sEI$9|S~>4n>~iVf4>Tz^}b zt=6G|=05|J<} zqpKt67%UB$#_5Z9?krldS-NP@fX$GG|K=fWKu~q^-62L)Ea#_!oD zxCipIpw5$LKphFAZk#<#*{mqzVq05h76U~vgUYd6rgxH)53*b#trkXSLM^0`Uf zsC7@am9&i4-|z3AvNbqj^yG6dDKof;`t|4$>(uF+9I} zvaq9QueUeMovX_dCLw~w+XHRT{vAaQBZrTJHbg^uSm%0InaOKff+suyKNP9i|8WU?S05 z3>`Xt`?uFZDrAA%z#pRP$Oh%agcxyVy>uqRv@lMwaevR$S*dOJoYS}tgs>A_LKPH7 z4g#tG4_2Diq;!aL;PBz=TZ*TxNSevOS6e*ch*-)>k@*+(AwkCRZ3YT^>73h(lx61( z7FV&GWjAeITiqqOOFCoL&3T=>di8+|11qWpUXgy3v%|2Gg9#okj%uzEQ&fU_T%?-V|&img4{GR>AVCDbHGGb^W z68$UB=xroK#?9WRXU??!jaj9*7VSd~eIBPSmr!~o)IYvt><(B%lO*w`;E|`Z0`ZxqxioO01 zlF^Hu$G@M(N3a!a3QhwHNpr)64$y(1UOS)}Pu=Tm2?k!rE@wA`=BCKdgB4k3|2D6r z9PGeHU`_gY%#rr1ZO3$V{1uDy9KE+6N%W_K29{%I}MT-bE z)g88O?OMDs^AcUO_dWVqSJzSZO&Mz(f`MPVi`Q@5K#c9AGtl#ad*)oE8om}pze8j! zj+7Xe`A|VB@OkmAr)4$O1LZ{q1jtQ0w|$xEsl$iIxHdPAaJ0g==04t&d6F8Y?XOfZrSIXh|uIN$szmxDdd9&xq=g3&aJzqwwJikr( z!v6fx&vz5s@}nnx<6=C3YCj<$Gi4*lkhxM+ujy^W18P)V-l1pCOsEWZqN0Y2+_TE? z88i&y)TSJYws_1Qz~@=dm0AY|zaQp`pO#dF>F&N+bG0FidBC(bCHi?8$m`V~loLN# zrIgk9jqfOo9^r=ndOGez}LZP;2j@`G*1^cbpHR2 zuM}@%WVf}%>qFZHyVoh3XGEFCjgPIIqURaru>yae=qp#KlCY-teJKNMPh19ngzHq8 zH!Vvr8So6G0nZCAjy?6CDOIeuHR?%T3qY6x34dBRL%Es8#$Rdz{yS;uq+sDgXZYoc z@}Rqpl>_e<)mQxcK$Qv-ciGjJiPd|dxv8)w|G zbewK)&#FYS+p-*0h(@N#d-JYL1-f+c(Cs3b3Q-3-wr|!HS2J7+DOb0b*|c-~ZER-d zt$T9M9x*=;(buKiGzx7JC>M)&b1BIR_5kC79Kp$lYZ75#{ge*v&R32LmEM(r6st@xmD1^L>4h&P+^t3KNYz%oEvrg>2p0js6CJ% zuHC#zSK>YPXmGG+|9ag^8WAgBoTJ9aofv}um@#`BylgDDZ5tD27LJ8_mVUO6qPluH zACE2#p5dN10E0Pp7tJ0H9TcHum+mPq7MEOeB69k%^zwbze6D$?k38UGbI{x_?APz6 zf{En=Zu>g!t2??`BQb3E&L7{FT=qMApqO%=8ffBmErjfBv%L&9mx5#c3J+DJexP1a>e_30>opC*Nqcs)+e}S>XCx z<{mkA&C_!V0vP^LkYgn#l4%x_smlzE z^N6@UvCSUOR;A8zSAkl6Zb{fF+I{P}(5`r?Wu@~&5#nQtN;J7NrZPC3w5NSO!9 zlJiDmiEP0+Jb`v(X2^)`&x3C#TwidvMn2(>v{ZwD`ul zH^P^?crii0l=ue@9JqUT7bJa-1loPheW(D)3u&Zb6dgL0jmO{?{Td)1aA7;U64p8R zy`EE*qMqIVEXapVRiF0ZdEHe`eEH5b;_&n@?CYI6(frzSvfg(XETlFkn z|ES*ma-~`etN;*jp}crh1TPBn^6+WrCI|hYQO;qc{2_Y*nG8^wCM*V~x`#pwvoNN6 z2;g{#BwS~lJ;r|w8-cMk&;k@DZyVIySj7fD?CgpSB4mCdp8(Z^Gp=8|<~jF^?%UNI zLL@=qhxB2>6BJo#Y2x9AC=Wpi@N2p-dzezt8bXiwuNqCG52uSLbbI#cL-Yt4vVMLU zO#cga^q2FVoSMie(NtxhkrK}XWm%W$_y4ALS)Fxoc5%_x{xBo35=^R;7ov?N1(V)8TEz`xb$iE~O` z2a#>$kf1fXji=CcZCjh{DzooaR^#vAo8Mobkv1goZ+eMX_1av%Ylh*!^m~}Ysl?ZK z^}dFc!(Q1fYRUL*dB6SR%Xc81O`Y2D_`Sb>Yeg)0bBj%CVWyBJJ1R7P`uq!-@#0;> z^NTcw5BJy|O)gYt4}s|Ai&b-Vwh z^!y+AMthZ}s^BCjHW^ZevGTX^UjO_U!k=kWG`{8phY@yBz_jn z2DZL^`wfOecw)oRo33%0e-t!4Z4 z!HF8U1+qipy;tA9e-~`AUcZ*<(c?v)5*CG37z=0}{{W@5tcLS&Ro1BrNN=wG-DlfI zXN`bBEcpE6z>!>@K&fp-wH_CT2`4n@tBY@Zd-V+}g&?P<(Be=G>^JtCOMJh=u?4Gl z<*l9Uyn#6uXW8#0PWs;uA3kL4hZr+EThCj|>gZTYIaApfz8;VWZmG6DE<&`f`Kj`c z_d-ln8r;76@}k@@oI&tWWF!QdyOmW^V^P;4p4dcm-_rXYDFr=-I!IL9p0BuVp>M*n zBq70Sm`wK9ZM2(3-$~tridR!3d^p=V*!!Q-b_~ocA%_7T$XrfnG!7CG-^a(nf{riKFAF&tLdX|>E3pDf}D2+Z~56O>T_2whVHgaeLT)l2)e9)PXeJy32;mblH*4sXj_F*!Xiz z6T=baL3|MIl83%MnIIU=;>-VwQH8ZP1O;Taa+1>&Oe#lRW)22HY2*9rQ7n%1WwPX_ z`uQ>RKTc?|w=j@DiHoG;frB#Vn|rWF1R~{6k3m0q&Jd|lwm@bB)S^BL0W%sPT zsP%v4be(%?zZSkIM+TJ?uN*MV^H*)XxW05k#dXDBoyMKqXl?zXt)!ov9F+SR%CHoi zCGGC2uaDI{rk-!!IXHuv(f28yfsKmH3VuTeL|-xoE|Y{8K!jxH&Q&!v{U>c3rbEI> z8;BS9I*g91q_|5;%5?6)`xdz)=;MUnNf0O+PLVq*Oqyjz*+7-D%a&MLJ}#>f=ycn^ zFIaSVhOx0G<-VpS_U8thBf^Lj1ZxAzNZL_xVy`bzz8yOvFlxmbKt^JSn%Z}UkyMom zy1TBcPweiDejn1hrX+2fr@rjxeIpY)OGr%m!&LjmYG&l1yz4q+SWW3v=9fdn&)m)I zB{GPx0Dm(x&49M&)_OlIOn%dk_*}si>44m*72w(|WI1n~xdhY{+7BmUY;^lhQXG(2 z6pm6?$0=LL?p^ks*Do)>&wK(t$B#`DF)z^465@S*J}FR*ja+&g!+5(j)o``>!L7`S zNIbrlhh4GQpWcXF&=T@30eZQ_!OQW0dHPhx@y7tq2giU8ByR*7G>7nwqRb_39$6bQ zr5$>csV7(5HDA75p{?H743W;^wT9c=T!agm`T05o$5Z5ONckQ`kWwHMK27%LOc+|72pc5 zY&eHZZP)X)VeTXmYui`)m5o%%vl8u%J9eGeS?_tP zKE3^w;v-%9_df~kG&AGOw_mnTPmJxltJz}MVYXpcuM{>?aW<*Y&@r)@5JI6!q4c38 zpnX4#U$1Q2Y|MtyCUQ}Vl6JuO!4Ko;$EnZopPO*)o!Z*fi6mbmLmDv^J2=Q9&`M)x zt_DcAwUrq-aK!G?_Mxl_&d2p@)*yD?u`>nC5~Oa@%;KV=yER*b4@D*>>K!-W4Zs!P ztcN+FGkKVdkSPeR$qLmGY|F~)XM%3<*Ey`=-{@IM(_L> zx!f<=8*}7v{4kj(Tc3hs(eR5z415?w4K+O`((eHW2qG7}S8eTk zwfU?niMubJg=LPhOmX=>Wf9??8fjWTyFua7;*G?b_46;)Z!h?k zCUq90+&%7l+)t}ZbeNqYC2nYVv+}^s-37mg^w`tYH>@C4;e&R=^U$XWj;o$CDO=Z0 z61NqBx zif_35+i9R!I$3Htg2&FxW=|mW+)X0f>A1L2e~M|zarV%q;U?Sr3Sscv0{kM(2e3nv zlF&nk49~p`4GTjI{C2(<9iP#(X^_ErcLaW~T{{uWi#5X^9731?yA0IDrsm_^rlbv& zvjOAB)1y*!n4Yn_mdpBdDp-h8mO~Kaj(G+isKZw)!;`04TH&KR*7k8y>)_I~6>%5m zQG1Qsk(QjSh$#lKt<$GRPLFUt1@ZYA0L!dd8ql**6ZXGt4dBMjK5o>gE%4bar?LZ< zf+)Mqprd^CmWmcPvyNZd( zCoQcM8I|BPao;I!kNzU1AXKZ(ePO#HetU9f2VwSm@QG| zSPJ1}%y)R~Y~!H7nXr3jvT2c4Pze#Ujf(q%+Zi9XB}*{w&jqevXSWmaoGo5Gf_H20 z;9xOZe7M~OdTXrX(Dh#aj*kp25Y!Zs{46Yf*491@jT1!@*XI&j!yHmwcI9dzIYxAfAO-X#$GSorX$?Play_19S+M-ED!{pTpV3*A z>l6et!3Yw-h3WD!eH0@yTu3Fc8%4#xWB?I@6D0d zb|X(tbXaA%%5vrIa~I+-%*);u{MB|vlA}bca(DoS;LusyiC{wVJRqWu88u39O{N@S zU2Cln^^8@BYqfs4}>!_6G!DWg^%WSSP!;{B8hG9tA%o z=>i`~UeEdV{rk>v5Wsp)VK~k0N2~Z^Zr?xSKI~?wH5eRI1|k{mN+ z&p|hS^zlf>uKM1ZmuIO}IWd-EO|7Oj^FjY1(it3Xu5cgN;edw4&rBKjQ43;aBuMK| z)mJs6BDpy4+bPP<%>{Ub3w-q*cm3np?>tnCxE9(UfizENFIWwLA{<*Z_b6;IOzfi6 zLRL)}XB{VKDtKZT!VlmW#{qy6 zou>MwGAFsfTYT0Uztr`MEGpcPL4p%<)0rfn` z5?iTA+v+0&?ryVAGY|aZoV767ZtS(E+jo^( z>055BiYlM$Rp(Xpq9Dahw9>uYPAmxTtRXY*IYlQWB*rDoSr}2!Nuo))U(BIH($~Mz zi=&Gmh{b8=P7H2wjO){<51l>9B$!`*d!yzAyrb)r`rs}`9~LaXH5D)g4;w49KTsl3 z@l!~r<+Ty%MSnzM-RZBGhhuJ_#a#dkK2i$@RdfnsJ0uwZaDhQ_In?(3bVIa|sdfMf z0uA}M+FxvNCeWB)<)~3_rh&(_jy%H3PP5j;m@D#U+hwQ5sx$Cv$IaXGpnuiPjg3i% zqvY^|&iZ6;>$$|)8=8wmhduZ|mP;;OlU`i?%k1KTX}fm)qL*tYWFB&r!cqD<=Iy)l zGlF@CB-nN7v;oz0U7#S09TQxWO8OUWIFm1 zmdr^r`7HndYp|d0e#+>~Y+s`yxJC3xeS7o}QltQTtDBs2cQaPxxs*gJ;66>AQd3*I zw~4Ma|MBCCua*G@eQ1rl*&wK zkioP!#WIF0%0067zVm)7^z94%yK~EZSh%1iGfhk=Bkg8>9jCVFv#nI>>c^!>Ii>ii51G6vJ)U@)68!^69k<>zPQ@a^?*dQqA)*q#OK zc7{Yb0S@a12KGI_Kv{M8a2t=);2j`jjNoC(vRV}|HKjwo`c`334}a_PHnn%F$L=_W z6PL=CXES1ge+s$9XXExwkPrQmvIY~V4>esiWb3bg2?!o%;{LGN_YQ>Tq*JYLRKD15 zP(S2rwkkYylUCT|mYBL`r?*?mu04OgIxI%E_TB9H7S4;`b>7h0;c7#&)Tc{lI4d5c zLi)v`1Sh!EREBm>{}^)7I@c)MYRWZ6>8y!=tF#IV6<=|59isy@dc##!Q%DQc@;uF|^{15i2{j}@U!@FJ?^!J$e67-Vtvhf=xw0z)Tjd}Hx4XWDT=L0i7%;}zz zyO5)IjcBZv)-O6Yv_TRP-)@$cFb(WIU;y=mGftUMWog-3Xqn+DR)+K!YiFAlVQQzc zFuB|P-Z>Qksxn75r@QQ)P^>9ZJfm!r<~z_lNA6Pp(zb&NqqGfuu3lq99TD5Uh#>|eH-=lR@~d8#dV0Pbt|si>}#UrHU;Co zUb5FdId8b1(TathfRbbl}&D2{p`e>jkZ?(0&enMQk1~0 zQav&WJN+-Wx=-KRasn!j>^{NBYvpQRqZJH1Zt8VA5FGqU*nS^wW1~GtcAs|Lqy;)z zL>MqtWe}G6zLhGIGjpfTsSRTc*DU_F?UpT~VyYn$j7KObt)RZj*{K%}gt)j-|A-0Z zE2)R9AHIi)&*ef{^p&DdFeYDD5GCYUog(I%kIs+b8BJZ?7Rm=8%=G##lNHY=H!O&? z*|2HTk05Pb+b=K90BV5VI{c`(t{$}>X~;3t3+34^Ik#WtC zA$AncvD&W?XVlc>CAkTnX&eqB(Q=o%-T~9@ft(V+!_~v@&{f#{?(SyIIle5v?Pv`p z-;^ws4LfB-*3h^)k%EGcsQ(<@Nf0wJ2>L`3C3sJNBwVGUAW32IrwD)V_PwJLEsvTh z>F#InQ~v9B z?d)4Wts;v1ruSMj)OAO5rS;nUFFSLTKAA1j-=aJBPUaWy7T+wpLGg4MKzpPjnMA$< ztctrj6(r@!_#?zo6`SSg@Wt6w$Skd|894L3mX;QD5omZv1LYHT6)3BkJ30jMSgqUYRAmO z!{^4zEpD6>GJqx`v88@Vx#k~x#V$$u)AdW33}L9+%k@5#nVlS4M~}*W(ckYg?VJl9 zaTowH7b4)N?Vt`!I^?2hf%09$!Xu~~wo%t}*pe@e2L=ThS8YD6bacUe$Mp;Cn7Cz5+g(JWpp~t)_0ZgS!4~!9 zOOJww#w^zG93a=vInkVLyMU;%d>LN-*D<_q-8xn%GX=gU(62Z(x>aHUQf#$w{^`7W zaCP3A)YH!hTUvJ?=knm8D+7A(zqNYhO3xMpq9#y_XZYX3w9zyybwe*JyCM6UpCU0+ z-Cp|i__5zz=56`poH*~LebwOAy5qk5;?#}lHDKg}%)-i)q=7kRGf&?;K?}goqXT`7 z1gDx_S zTspYhxkZDu+ukasnHGOldF818!7A>i;d48yxRM`74SpNQ-<1+s$G$HdK5gz|?On0K z*YwV%-+Y-BoHeBIBqJT{o2ezMM?4dWz@HJ0nQGwCscEm@A+5wSsQn-$xZ5VlR~nvE zY;^A=a&Opo?EqEw-ieb1bJ*9f3zt+N-<({jh$J7`bo6Lk328KQAQTR~_ydk_XVu=| z4NxmQXCSEJr?C$2sHreh`p4sL%c8_3RW|Q*9i^7V%T3x|W|7_7I(3vkQ*xR_xsnTo z_H)OQ9vU&G-z@H`7>oKb<|9IOmp<*w zS33O0#GykwO-qZvb?e=mH?vGk4n4UKZ+ZN9{@48HmaD0lDKmwEME>@UyFcXIuLa?X zkZn#q8o6ZfM@nGOE|G|P6Frbc6gqqwx~O};SCeCEISu7Ct=*M&kf>{_{O4wdG&rR7rCdS6@GlVnrig|8p5tTY7o)6lRtu+Z9p+NW)c#nlE5;<#{ zHR`Xj!b7Ps8w%`@9-Rv}$-o5`<|pmjiD7mkPjOF7D6WONY?L~w(SKlD! zYCJP3%NmQRI5kk>H7f?B7klm9YwbB{Vt2929m?C_QIpBiXkrlDNp`)2NOa5EJ;A;C zL?^*efbz-u+4ejCFq+Tr`sx{6|N-5SYI`SRsdpHB9Uj?|<8Z73G`NpdKWaGkdrM~4j? z22c;yWpFfsEYVCfSbkY!V>4&zQprx|kkdfLscf0T(44W8>~>Vp9<04;^PnNp7Qbm0iQsBFcc)sEbV~8$hNB-<{R8G!0%REtd8M7*SU?HT@(qF2 z6d}hPEpd0?%Eg#x-@bh|2k@Hl9G=IT&%dWv%?ywIr=p^Q^AT45I?JFU224xc---*| z0T`+Zt{hkN1o*kdJ`2VOixx2MqBW=su#)|QE9yV59h&M|>ekjWUN$)zg9yZ|Xw4ns z1=Rdk?QoHSx@>w{8k@-Q$}+$de5yK#kH=&g^SdBV&-UZewNWlJ|8N4eb+NF>793Xc zR5EPdUtbIRlcBtbXwyK-HV{*rd|lWdLO9QYK>*GJ61P`9bK^T;g>mhO&jq3)5*uVG z$@O_f4zJ~s`a`$CJQEfNMGJiy*sjIzYF?@L-S&0!#G%d(9C!*xBVIl- zlCvloqZ_ab>Rf&>1t*0MlpQ+@Mt+4`!QF6=AbSaJ8}w*_dTBoa{#;)m3()gVg!bmz zzp~=)!371^Z1JtOduDJ8@Fx?O%ezK}>g<$G((gvJg>WF}2xf4oOGu=Kb%+@KX06(g zAssirPba_QL4Fl^JGkcXi6bn|jB?_Dw(2q$B_u@VAY%|FhPaGC;NNMkywf~y5!9W7 z$Bt2MVbnObx&W^0vo?-UqM-a&X6WPCk7KBaUq z(XN;a@eRSvW2d9MWwRsYATyBw7T4zLwuy<*0&$q~(JvqdT9tqYBn7nD2l!OE(wVfoD+slEyhRCE9o9agzPIg&oBh_!rW1e5lP!n_W zq}>e=2TqbDe8fZ$&&54 zg*vsy*Vh-E14!=7Y-~V)Iqyj<5CaGC-M0^v@0>*x=N=s47x{zACM&C`kUvTDZ^tB# zr3>8vLWz-5kP8CR(E3fAcuaJJp<~y} z=1bt{1@k=&E&uHYXCN7H*gb8g@)dF>FgKK);pOdZqI~Gt$+mlPKOwi$mM%?lP1y6T zVfTx3le?aE%mHp^$e|Z}RzFPBrEzpSQSR5_9Ttz*+d`KXrWzY=RP3@DFE9L0&J{{e zhh6v&8s3*B2h;MpI{T*m?z?j=Mzn|x2XFr$U$5H1G9T)$I7+n0q||0~Z?>#WNE0k$ zzid2q`0(d1UvmB}Iq@tp3$zRku6J1NnooC+?EGr&q86{jcTQ`^yvMnN;-$Oj%Q)w* zfB$s@XFcF@U8kzk4VhkXqTSPvF|N;z|J618-K1sz@+OzV#G;X&psn4#ua;4ee4!rs zVA!5OeX6Uio%Hc@$zX|B8y6*{h4i{3@z0NDp!iGvFYY1*W5VpC>`Mw(xZS%ZAKR4q zP5xloK7;q$zRdV17vOK}HQ$lJBb68Y!&bRBc|NcV)%QLdP{g3}3a%%m1(qf{i@J|2!CEt;~ z{^PwEE&Dej=Qe>uvuoERh@4*WgbU-xLO+=IrXyblsI$UUKK-xefBPHv^{Gk$U0~9& zUYNXuUsoS^U?C-bXz0>q%YIZ;XzV84NAl#e)?q2zmMlmT{j0Uz!`(aw+*#y%^srvF zsy+&Q)tyR@04=DCRCgG3MQg(2T-jxCQgo}>zePamLW#29vExUJ16mVCOXtlGLoF(0(M-MpsB;WZ=rvQW6-W$f{ zfrK|?g18;Bib5bzGkovY>(Q--Zi~||M?`?S4Um@3{yh~*5Do_$*{+P-8fH$XU5AAU zBnWPIX7)uS_JlL8d7;=mmhYP-Pi_r|z{{7_0t>SYV=9VNtT=&^W)BnSRa>_*?HI7* zoUt-QaisN#|K}UYN%=6{>?`FnSVm&^3DvIq9!+xjHRkw-rVwsGx&Hl^AbcmyaYY;l z)#b}-K{?@)^TWGvOLUf!LZRcbyz3r=T2)M6nU*3HfZZ+feJIpMj;&%JdDN!r*4Z2K9Z9m?b;wq3a>^_>qi6N0B`jfxrhExdSplO--s4 zcO)`}zdYj{?z9(|6o`5g>=jL+bwjGd-Vs&-?OZMYTGLvzBc^#?lSX9o0wKj1<5C7J z28xgd<@)x;-xSEaorpu7i5|=EA1-N}4R-+W`rD5P=|6B_EAuCEX)j;aX5K;r8-4Y& zqwUAHa>_b7OKAne%5M(djX@kkJOUy?j$W=|(%l1ps_sH70onH;r zuUh$%b*Z=afi;{V>CSr-Wj`-}BEUxaZi!?aam5qm4Vs3v7-v0oxZJXX;o)w`Y&oN` z{Q$|QrDN-JvWt>A7Drm$y}s^^DikMC@?X98O@b02NH|qOA%UlkR`@Qy{8RVhO>>i( zf|l0%Ypc!8=i1FMH3juq9cRgn5^RD^p^udO*;iiyGHIEvUc8udYxDBmyYC_2P?`wi zd2e%l1*IGxoPvYuh2T$qQJc&qv>}o=(rK4iT?7}QEfyD5(f#A9!mpu+c#sF3aLSY^ z1a>yJv~=l^!Yfeq>%)7zh>Q*W3}pGZqAHUpOZ8T;RbeQ<=>vW^;GTUjELyUp>)3qG z1eOE#ZQ%0UW-x#S8W&HTw&df59eEBCssP*W~?_NBA{$Ys&kLn*o;6oXonHQpl z!zqJ1Tg)SQMVxC}iz8U>N5_H(yN5{6fFb7Z|AcGMSlI%*XPNyEtVJCsX*G=%r>Ma` z9ayL0rRS<^xlEBm$E?jZ*KaW*6-oa#S(Z5(4iiElS<=BQcWv@ARiSN_2RthRnIV`RcfN<3D_ht$TKFyk&OU zjQ$H%qW6ysT)yf~`R%eT&aHY2oh?)?bWC-gXX(ToG!Sc-bG^&wvi7}uzsTu4ZNKQu z8H2gKq8E2eN%gonPIFW{4Gnjbj#wM5EN*ign6koSW1jo|x+`uTD*I$oh_SUc9A>7Tju7V zF>$-62lN{YrEP=nTMcrENHeMoQO$&mKb}s~ESO#{cf(Bz8gO<&3u_N45M0WCb)bP_ zYsury1<=}v&2Bez5UxEKAj}>{P_Iwan10V#ko_$gNG=0%Q@E+DrR9J~k22W1v=Ai! z%CdwL)6UuS**{SCy{r#=`sm>kCw|peEHR}Uy+LoZa+4D(F;kTqcy8hh7x&V}acwZ(-O0$D}qLqnRMYiaUvP*?J0G3g9n*nUdHFBYLM!y^$@Z=h!1;Mb1V!xvY!Yw zC#^a*wYz+Pq@T8ecba&AbjpTdm_ieSQ%$ zWw?>a(+|gP@7!{$Wpkf5eePIo>*d=~z z;oxYZ5=;aemnGy`2n3uH0AIG&W|HJ7^mq=3{<#qJgDqd{mCOk6#gZ6g6 zlF=enP5(rZXxF;O2i;nxKkat+#gu}HzLx4~3iZo5w&0l0v$W)K!_cHei{`hsnxptIL=|xrAXgZf=N23>a>6Dh^XqgLEHV9-V*#Dxj*`Xs@7y7Mx>Q%hk7Hq`4aAMu=N;N2^o2_DsGk> zUOv>qY>dvp?#-ipU~FL4UY)`xN0ymd=3*fl)Uquv6c2UdDW zqkPL_fDZFwZKmKa1sDjVNoBubtT??@ZZ~e8es%5=swMsUPe`ZgitrCCLTO6 z3%cJc@Kcd9baK$&DKY@zuKo3UKdQ-U8AyOM{Jwa!f6fYWp!=U ztjNK4C_}ic*^}E+_I3f%RZ%IW8JJ!CXlNI&l(yzFefnwPI|C_qMaV)(DzE(!1FC|8 z@YGMhQ5dW3Ls>)hhRsr>S(xCurPjN%(Q@=Cj>u+VR{+7~&Z8bxP%uCD5{C|{EEXw{ z)tTAIiZfTl0T}V6W6cgKyknt>$rC;SPD5ulX6EMhy|mBpOzhdSDIY%QFd-pFJiWNv zfC(>BQ`^towRX&j!`lxSD1ts<;R4aGDN5mT3EV1jLK2C_2F#0XovK=jrEma<)=i6B zmo7=fj29FA<)6WH-ODhjASfdS1KE(w1S~Q3T;6;hc;1};3yn)d!_eRifCDr$IoShM zkEq_zlw0?B!?-2WrTm(OUl=m9@bqeJ;1AeG%@QT>}tc_`r zuYNBcW)yPKV*cvD(7vro17fPvWYUcKObf4@I8*8I@52jbS@sTb`R7)LlH%tX=o+)~m!tqP7ClCVisB(Q8Fy0Sz2gZ`V?ApfLFMSBN8P*R2y1 zL2(KT4F$R5!O|NbF9MVX--Z@ztPH;1`+h!&a;cv%t4U7%2O(_~UTFV8NZYi2eX7Ks zfkwz!UhK^HZ+x^pCJ|yHm`jj9(D^90y_;OQNFWj^C}s$i!dY)FiylMn?K{d#2ry%$cuUI!Q1)9IvH?XuGnuh>`>DKJ;{vh^^}5)2Tl3 zQ!vnBc=&Qg+YSy|f}_gZKPDf~Xi6VH78J_NEU=7+%#112FrD&C9}N_DbsKjw0c*i< zw^lL&OYT)B26sDui{T2IZ(PcHt1Ym8Z^aoVDufpc%M?@+oJg?ZAObb3tmackppOUE z*m1AoV&Xvvg8tjW7(31~lw{Vjnlk}QtgKvcgX7q%+5qDOvy8i=T5J zq_3F>xoZIYL|hCBK;e+vv8$U;D)Xc2`uenONg!y><{d<{nNS-mhnamg*>3xDJ$cj$ z3i@QqN4M_o;Q4?9c*B}CmiKm`ODp8ddWV?rS#KbNe=r7jH7XW1?_jYRDNWq|?J%}Q zR4sHpaL^qA@)~-yubu-R&`3#eaD#G!L`~?C`NXl6Qq?9Ve6gW{%;#3OQQ z_#v+|VAP7eM~^N5>d_&0IW<%;TtgrgH?>JpyuJRBhMy%fvBMBGVBy3Gq^7F6OSSzG z6JTZnWrYA|0UGJmEA^9oq2^t+SO*B7R1rsy$N;d=p*hv$L8tpv6#5UknJ2XMf6&dA zEcs8mnc8N%VoM=!_aAJt{!-`XLT+zR(7UgVo1^6>eHt+2j-k+iadQVbY>pj{; zo@tf*FlD4asOvH^h7;76_k6ly50Qw0BBwvrF<6tLN&x+hTa(J&U4wdzlq|sb>4D84 z%&bI7D~G}a{FUFm>odY!0DqAM0Rde7HvIVfd}C1~26j?6!Lb<#OAZLNu8i8ViYMI|w!=*F&3&WSsHq0}uZWTfYvtsWtLYhI6CUsp{`sd3QT*_8W4?Ak9uV%RJM*CL#>oj=>jE^>KX zv`$s*E0xY7YJWjaIiAsa|OKTGmCvtB4debR9069_Z)ID=d~w zZG%s!{Y=68qPzG=r%LyB?PGK2s2;f#6La9BHW`APt2}gYs2_Q^%o&g|%i$ufn#K}} zD}j?Qs4bb$@E@E%M8VTRbZ~JR1LZ1RqGgG~>)atqen;CuNzveHH!6BK5aq1BpblBlq0!@6)?qFaE{vE}o6I z4T9C2&3lAvARtT~+jdLL4gN~bow&&Gu-2C9%8&W?prBuWa@{5BcW6N9y~Wje-IS%P z>N@u9S@=dxQMz5T`;L4a`w|IbV^OE>d(1*+TwUIlboyD#@&CfRifU^N;!2#^bOGDh z4JZ0sn#9_+RPXjhyLMoZHB)|=S273go|zyie(v%M85~i+y`!akpg2jvYX3-gt_%E{ zhRi%_d?m$8ca-ZG7FNRxGV3`9*{vi|K18#Wv+Gl!OxR#xS?39`7t}Ki+=z142 z%8qH~=H}|M1mdYW{9fI4X{_S!T*KG{{j}S+`IMD7|FpcB6Yz6NO7Z{%;!}@U-N?>8 z5>~3Brg8sgi%$2RzRNBU*<^U8aF!-r-9w!UFT*qQ2JGd`T5W4I(_4b-?_N~*+Q2SAuJ4ltCa_;5% z>-P{Uq0fUsuymcq_tTR-WBukDySOCq-d&Y$T@EyL4WPgUTFy^&>92C*Calqtjk)od zqT}rwm#0vN$^iJ(d7BzKD-QP&Azg2*fx@vlsYP}soE%ar_GnMtUUxd^#?=@+!W%21 zgfjn@XXA%86>9>9@9*LukrEy{!KujWc%RZ~Pse6!o*3(JG&C>Zc-pI37b;zE-&=9z zdiy}b4Y^`s?b{7FDmhT{f@wRe^7kJnw(TwYUg&z#&$#-q`_jO)~y{lQ|tLj!Ci9J_3@3B7F?Y@HMUh(FFr%$5^jIZp4+u-mo zbJng}#Ywp@;5-N*&LcOU^zrBvC@rh8n8*=v5n$E?2=u1eI5NL`=QCddx->MnV=a3i zgy=atLD;wVStd&6c$_%E?3P#d*V<2Qr%w;QF3|71k|iany2+>+8C=st6CmH!uJ#uPY5M=qD@qf-DRo0pZ5ogELG3x}grI1_+%2>r^J zO%$*#5MgW7idFiWa*|!U?&A!e`kIjr4Nan#-fSwf9cGNOYaArJ#PxhZ}) zB~h8W-|dBOzA(*i46?Vgi(rtSxJIrz5sU63n9y%*@QB`};6pj=5S6=bQ98usHZOpSQJl;SCgAI6o z`hhmb)Gs`5!hboGC+vDoS*@Yrm2YA(1BN=j5X%iT^AAW7?1;4oPQ_GJ48{0awMr$i zeSJ-hKylb#JRjW^)`l2>t+`8S1N06WL&i?A0#2Y2k4@eu+7WGng@BTh*wvk2F@OL+ z*sVBIynT1pr3aO#f~K_r6OcavkN068LCUw;C*=#*D{ppP_?M z!Er(lmG(m^_NjH6mCfJmoiz?cf1bQkSJE8-?liU6xh z?SYkpeblGtMKeD&o;=ZC9};qr`WqXcA@g=2ZM*=D!^mNS9n>aH{gKv#?(&X1e`w_%9EQ)yz9=ZI#Ov5j;a{$H6GHt*;RNSO>pT zvx9v3EU-n7z9m#7bLfyElQjtE)T7sAHe;zHW>nd$Z{IGF^Pzb__9M?_ z(CU3_jYbA9K7P0E#{v(_LdR!W4VNlkcb)5_<&(c?n~%v^F;U=Z`L@5!)WTZs+AYXj zwe&<>^DhTyi_tN;l_!=}iu5QMSljnHIs*4_r%9fB8`UjE6hyDZN7F*drMIVodKwZP)!tCEgd01Q%H$|{m(6d_zRFh zPUE?odWhyYsi;&i!2)euxAi$q>HFN=1RqIfJ$;Nsh7O(1vT!>}xcf&<(G8{uK*}=HfUf%f`KQFdFpK}j0*ckJDT#dY6Otx2^>77B9026t`&(Npy2k7y6$fpY)^T-d zKc;@8!H>H)#N1tfFYTXPfFE1Aoj$qVXRO2NNYIY1t_wYj=6t0fEam#-9dHC;LR6Ss zl)eK%x6t)I=Q_o?AReXKzWZl@m(Fp{{|3-`x#oJi_Tn4z@Anmv5yb@$zmNlq?S>Ud z{d*Z%S+brtP%mnB9xXyLsW@T;RPq3m2joX25;)hPsjHd4BHc0e}&P-kRe_|Xc>MLZ1HbI zBt`|=t2teK;s0nwV*uQW;*C$3)PMnsd5C_Pjlq+&@h2t_oV%z<6L&Y5!JAS(1g{4j zjJ(^(eUJS2@87#`HhgiQ>DZXlsMi^^UcCz2rk9@)2N%Hl(|is6-rL?eJXsqtM7qm7 zBW@wpF&L&k08i`x{YQzTt^aE|Q6a** zKSZ)w1i(MAhB|1IIP<4=JisV5GQ3tp^X-5o{8+C2?+b^^dhd?rkRuqa{>Fs=kGMAv$hpt|{Vz+|lCmUg zNn{CGQj!+3g(O=^Dv4;dC8Q7~AqiPhB9bi%g%(s&Np>YlB}r)CxAXY8XTEdK%=!J! z`S1ASo_l6gSJ(AkD!5e|eg@Zs16; z6~MrNSfI-Al);*VeUn!+qb16B4qhU#byVX6|8CUws!T9ygNzUF4w6fCH7`_fE9)k( zQ_6Nv`Wtyj$Mv-95Wj1G{iMHGH1!AM5C4nfBrjz?e9qsK7n1_I{GFrHzQTI?N&i1S zZSDRzZp00j`WJ&qUP?}Ed;f8N_y)v4ehB@03}pL-*_}T5#GYXu`{!3wSnvIhSNDH- zE#9&J<~sNNBzim&?I)l8+|9bAv@|C>Td;$@)(w*qo^7pzDxXi*Gs z!-lwS=2WfqCYpmIIIb8s#KwNg$uX_ni{sPevn`AEmE61T)~<2`5~6>+<^y$q*|cfM z%RhSl{O96pY%Y}k;w(eClgDk*eN|{xxw~o4Xv0wX_8%bWRaJgoBGBAJ@fRv z^{)Y0J^^5}E$tKA3MYUO2FPls?~;++_fRY8OmknpJa18Qz(Bg|ehi>Y;&yDM2jz=( zst3^Tz&!x2dcFR~x*VOKU=clG3 z0-%_<=A6S6v#s}&Eh~6twYRIn0wf5nF4ede{0r6)wS#gPXRbjYBEQry2r-~W`vrX^ z-qyMv;`tF^i}&4H9uNcSt;by;2%9_sDdLYmu$( zHH9ZwWpe@GP62cE%@Px1<@fZRsb60tB!M}AePR4gBO~KOy#|i;PHJ6q*bZnoFOn`%G=Y0sEaM1F8>)3v5z%@LDaBV=Nbijhafw;W! zTBEr*@M|4e@gy;kHsI~th8iHx|K|3j3`vOa%Uk$3Scb^9)wgl!49+A!olbGQT@Jf5 z^sE%A&K+rUy)Y1f2Ls?7yAiPwCbXl}z|&a8Tb>wM+yWqc;NU^f^`U-qSbcD_10g)( z>lf2rL46@j(r^US;7Z;@qws?Vx^3-YC}t@q4=`V?5MD?@JRM!jZIC!V91K+4r4_IwdGYwH7y~tAY9O& zInfbuai3FCX8Q$do8pK|cGE4CfRbMR$iJ*TS+meA{NXW(xsUWu-S@*bnxF{&IAljA zKYC;Vd8T~Ls#UpA&KWwR*Q6dB+#*HH?rdclVGYM$5l3L)ZA5)OQM18Eml8~%!TymU!ylv!o+?|TVH^YqnJRR#YA zwk$PN9HtbO%+5qvI|Frg3VyoFk8=|H*koj|)+%1=~1Qaau>{3m%2N zu{R%DtV*Dxni__5J9u20ntFBKM|)fb2#(sxaBJ+&x|=%k0s$Ha20XR9b!!40#{9;+ zB$EvG$7eTUE`=dSm$rbm^FS0d4NwV?E=(WpPvcMY`-2VduJR5icH^{=iWUi%40hDo zC`u+g@snfCt{%v$H1FW8*HcF3@`VeLRw~2l; z9W~hgVf3#>$wMKPtoDw%9rwyUCdboz!0~7LqTPt%`<(2zEb~V2)E&Qv)Xi8l?&7k% zmG)O0V%}Mnp55knD-;R+&H2Xt%m*es-;}*Ev#{RC^=5tOl2DgZE`h<@2amop+EOHH zf7{~Cxdjb(8%8ZT@wE1-^opU=6C~d)dB1Y2)zW$&C;JEYyf4q~mat#{!r&_Pwa+I# z4fdLHYlU&nz zvMj#I0cO;>;RMP?X4~P!i;_vSJ0v8ZH7H|tpUmdXv#4>VrcFps6#P27Yf(?B7_&{r zthn>+!-u-KVYhGHlEs~dhA31~S3X`uMPbF|qq>p8P0yZU*M=^UPILb7sB1YzlMK&4 zyu8$Hl)#&MDbwll6_JP_8am&KaEKfzIlCSllOR0fa8TJ!>3WPjpZg0;Uss3QO`fVnOu&VihV77h2sHCa>yPc-+fFpgckto1cWmwJm-x-; z-LKyia1DcD0gHoqv?&{mcKbbdGL~zcJ5n?JbFFHnxd()&Au~J$p6FUFxc;C@R&PQC zif3iz-VW9p=YD_rLIhA9tgKT4k{ysu8+`Mo12~Av(pC?*KZGcs;9$A8)fnF+uo^5a zy~hmeo(a1ew~ROe!A$sF=Sda$jA>JS_Tt4@V40bJBVUEyy!yRRAwgey*NZiYsUhZG zMhA{VdfHf3;Lwye_UgDz55EtW>LwDkE9}rbrg==wm>&1#+KUb-DlE79@b*%8&``~a zx#CyF$8WYerT^S#d*1;c+lue~4^K*Q$+kZE(RcE$nqG5k$~zL&>zs=Ako%hV@7*BA zvA9~B@7FS>+3MTVPv)+9OVYO(Bn=F&DtEk;k>+c@Ant|I_|BhMY=K6JcGJ$z}B_mTyj2qNo3l)rVmQOehz1ZkajN|efD^Sd_ zciuw$?&Px+sxeb&kR+N?%i?aBe9oPcXz&E z)OXa~d(mUxoxFPG%1ry3u2*WV+N{63bhOM&9i5qrR_f@;h_!2H(mPw(vYUnc9=qZe zmFVIiwLMaXhCiF#8;(xg{NnlM;r^$$uMOHhJfFgR>sJ(D8yv!n@BFF^v(TDhtdM}B zbYjzn4OeN1{@k0U3&o6(J@)FwMLHww4Ng?7o>&4~*zTXrAUbH!xtTsPhbdulmF`)} zL{F-JK97^waQ}@0FAGs<{#tlhn>SZ+%gP`l3ewDe|Nf-SLopEtM83BBu5-|`+Dzwn zKl5^)Voy!rMyYXLlW@&>_pXLTG}r~GM`9us6rd2Dv3@N5uI9**T|SOVT=WgOiN#xA z?N(w38HoFXUpQJ46zQ!;ug>JcvxrYS*FDv@oe1>`6#%nf;Ls^U?K&2;D2^GE@%r_# znEHu;UClcqJm+odKcZoQZAAA7*Ul!l&F7(RQ=;{2y;*NEkhcaWQzjg!og%Isb$<|_>(5)Z`9jo5WK zuxDXa1Ke%62uV6%lg$s0ha0S0rzC$}yNTPyie`;=!YklZv)lvbtyveP1CnU_;haHT z3E5NO*}cv26mG^9s#&X&PnvfZq>kMOthKNZSs~NFOM;i#DW&~9H$R13weR}Xx5O+j z`W}(o*}L}FTSxCj%Y)4BuX1jA{$%1BqdNE7a}$-`#onB9ZnK8PERn>NhVP-79fS8a zwoev&c0FUuz#8+y{^Eyk=d6$RJm~q;-skC|nNqwN}!@b7J1pdb8DP+@&T)j#pO$k^A`Xe|d zjRLvq!GkjyYddx9_|j&QRDD+aro+WhnXyl<|$r2-ah;v|?;5N-$Pk;V=d>YC*C16)gquRUC=vncY=={6Y9Cx;mJjHeJcrJW8r&64^wP*Ob8Jlr?YkD z^U)kOEExkKd8w5Tofm*j_aD29Uzj;k!Fa=lAGEU#u3Cg& zOt3ykc>T>S6)v$n6sg&}hK6aPOXCp-xMf(Jcgcud_sHH|H+HL1E3u_XLn%Q_0nHx& zPL<$>L#F{3C-gVDk$hi1Rn9@F^P7>Lme99?-5SFc8rqAXHokRRd*yUgwq5v`y9$1s zj@c|Xnvjk5k$(7LgQ2PEyhCEblIi%#lU?^uPyUsh8@S4+cSX>7gT>~P92PCv*n3go z;nChcW4xyoZ#^>oSn&{>!sCZ^!*yHVG>5MlweZ=s4L3FoEXquA@gIBb(l!AVkLhRVF zT9%y92|H`;*!WYG4<;AjDU#U48^feRx=`%(D_35=fA2Xy9s&{V^4an z;8s>r;yoaY!7`{ds4II*dfOwk@{U=z@-exDjcEJ+`gZ@0(g*5}BGbf7itdLssrrfQ zLzGY!=-uJr z_&&jNJWG$(51SVCc=(6cIo_Q=xA&*mJg<11gbROPmf>l}fWS59jP%b=##6fY< z7YYq~{?9kHI5tQuH_5|Y(yL3qvb2r`1QQkTd{h|1Z zbS}P-Fnrzg}F2-)ZfwoG!Wtnk(txyLat6K~S_e)x3*aOCGp+yS=x3Uo)u2DIe4Dq7Z9sIIy&c6RK(lS=iO3l;n>8=O0X zzo3BkSyD{3dJy6~-1?hd?7k}dB&qsyF3%7B@w-CJjtjdAys{A^Iy)#Fi#RE@uKwAY zO$!GoL&Dqn(fk#z`ZdnXe+qsF)MtdBZ*G&KkWn7uFpnzmmULPtdHdyq&+lKu7w+Hx z$Jei+U)E>~DX2DY@?snEy>P#9*>F%|IJX_(7MqvzrZhxvU{>PcA}C!$6w7){>Ti!q zo7-^Ih!Nk{@98Uy8z+MWf2xmgs#q|6A69dtGfN~gZJfC9#WF8Xm-m!%@=JU9QYt!( zgcWgdaW+(rWJkNEsQiS=5|epV>y^Fx5V`E!j;o$Hk)_l5`ug1I56_y6!7s6BM zBQpkG#+nJ+>HY*=L1wVKf4unn@fRMhuaC>opg$GjwU#Vj&Q4?QOep50xJ$*k)*J+s zWBle9XYEaQ#m?a_76_u<*UM&1I8C6p%-EHuU`b*ZaV@LzTDw@?$tMv4wswdc^R@TL zg18HjcQ+k+-*$b}EXe`=5;R+%`%l!iZhl)DH6YB+)wrtMqEUBUui_x*<}|PA7nBD_ ztM6D}UF8_;GrpoEu&ukz@NxOHL=-X;QTGl&a4lgGjS#-&#V|I znD0BD*|9lV3NYk}+5I{8?S9C_SkIvs?D6Wu2ZYGHSqC+>mN+>(Lo8pmW{n`7slGR6 zCM&z`+Z%*1C$%At0dz~b478y2h(=ZRA%iMDmg~A*ZjXx+j+kUI&slJY5Z-9@rK1wo zpXildw8?w+Pk;vpF@OY2XygY!xF|oZrf((WdHyKX4qtsc2B>cMlYA%8d6=pd!nI3R z2;snGJ)7A}!}RYTIyUr_o~MW936QL&x~(l91845e5Vo0iZzl~M>R}^rp;T3gDoA-Z zeXwt*mb=r>m-a7ci~XZ&s!JT>_4b&wL+D#=pi?Iw8yO!+C<`a4H?-8{MNhU@0 zQH`ZUB4o%4v-r*mPRGl$*9G4;Ru=8nk?-8Co5v!KHGgi+8Nz~KQvdG32`pMQn2JbB z(OfSQIUzdEUR-7!@}|V9b(Zc7n<+wMQuxRMM~T{&q~vzS4V{XU5_D%QUHT4fE}e3i z*sAQJPtdND-{3``G;4+oa{x3?loo}XYiWNNR$bzgcCGH5B(+yhVZkXCLe&aSFbAtm znj{t7KCTPxSHo@ox>DvEoEN~tD%#Ul@PzFmL`2YJbdmCR|}hq-O|6(vcG&H#z|r` zivhy<2i7k7XCCl|npDKcsD zKnLk#XLR|YG{C#eQu}u9nB*oWA_2?7(Xq$fPYj>=lCy{K%YP|LwQX44;XafP7`t!Y zzen)4aW2kh-YJqJ{(62EzrA1abk<2p+m_H8qeZzgxkEP3aE+*6`+jZO!Zi_9xrGiX zr$@C+QMqvW#y8hici#yc`rZlq5IXg&dfm`-AupOPAh`vkPnDC)Xpi$YqhxfF<#Pp=D#pwR*1NM zU9f37`+}u9J{mSR6#H!b$6@ufl=V-2-guU8KRVLC_VWa*rxL@4U4nQOQ+Nd^mA_84um670 zH}|fMV?SC3wu(W@%3s#Y@kTr8EL*ZfQ8mpklhz4GTg&dVQwT4#H!ra4BFxjYgjc4?9 zeUFqDY?!NSPuWuT>S(1Ixt^H(TqRcMqz-k;Nt4+Sd8s}7e}~N7-({v0O<@>e)Agym z28iI6MaZW5;k$7DUO^^2EG^5aUFNZ?>=C_CrgKMDb1paP>86-rSFJt@o}eOo$id$A z>!YGg!1^KY4_anH{S~Uf;z6QEw8VsZOC(^So05{kDViR4XZh`-B`6PRtbm(b$4MlT zCrUS`L0hSnn&&7qP*WA-hVLr=d~Uk;%cjV>f@jH9Pl^w(Jz~(P+~t9;)``tOGQ-@z z-LCpFJa>$wY5bj*O}a^Y?|%5u^WuuBrg7tT7T>Olzu(YZ^ytM)2O2NY?y81jclXMj za~G$6=wd#4L}u8s;Nfv|HpP8;Q2u)Qhi*6X3|iiAJv3VMXxyuDzUS(S-)Kh1Ez?H#sd6oIUYglk^gTXt5EqwQWKX#$nYshvs?>QCYlQiRoZBg)a)W zYvywM13ZKVPCI$x1XvGH{cwL~!!svOiYqOs`;{}Bc#Ic?=hPg7;^KB`uc6?P3Ihp_ z^(w@DNTBt^2H>jc>$?!Xpo7EMfOK5+NNx&ZR2*+jz#=UZ6^^?K_PD#d``Cbo?rki1 zZP5qSceR^5VDJOBnE21uq$&k}`8Gp^V1#8qG;>=|%XWIO$GaP*8CdVG}K3Vm|Pb`nLGh$p?e>ksB!4tsBN7z=(8=++y_P z<-NbJva;qGL;f%DGb&s-b~H}Rj4{3^>A_fvFcvKeUxI9pS)4N!qIF^?n$SO9J=ZvO zrKO{bPV@KA!mOfX@m%nyt+g(JoC<7|sU+w7)`4{-u=qxEfufYbnZe2ytEnG9pn;jY zRwSdZCasIjD1$kU*vxFxr$1qQ=5oFq5fK~^(6?W|?ANcSUozs=1dK8D%sCA`=fm5# z5(6gxWcLIii{+Ptkr86P{!^W?oFM-(kaaK&!=~t9sXZ=Uf-zB2l1{G$$fIyuztHck zptnv-!_;YxA}@o+nGJrD6`PaFv+q|8$fd#`IwWDE^C~;LOSFmpVGRg3wZK=vhpCr` z&i=Wo$!C>m2`H41)P{&a!S4_&$kb!QcxzSA1B2j`lGb7H`fF@-zkQn(ctfz1V6Tg< z9*`ToCYZ$K`KK=&umBBW&O)#5*3x)aPvNnO9WMOP;{wh+?$NCqUyq*>_SpD>vbb^T z68E9;Cdn!GPkA3n!~ccpTh? zmBs$)7&Y)7gEty^y0A65$4VMQ`d~Mk!M@vABGNuVjhb+}`PFPW%a}Bqev2!z!g|Ik_v^f<*VYl*tY zqwGK!^-)n#Z&~4>&Xx}{Y*n`RI$Sp`as#j6{mYj+KgRx(2(w3a6k*K?W@`0ajZ94D zZV6L6|76SA4~F@lZDYaRcdxsicYkvVzA0ut9{+N`Ik?)zs6SD32eM7o4`FD&dl&Kn%FJH-4t&jtpC; zdMC|)i-FYr+M#0Q{(rsZ&Pk^KVHc$GZ|*ztTL0nj)1%kbKy}1#y}Leq@E~b*#rZD# z{_VTz20fiO+@G7AKb;oz|La5e>$5lz>*}%2Z|Oe?XTtCQ-{1Y;{eu$!^TqiU|J_7M zDh^+L60=j+Ms*r84mBc;xUFqzkONWT9K{`@pH!du(A4AajHwH4Y)jbQOd)ai)F~zf z37b`1M7&y>4*rQ;`FPxrv15;9tWD@6yoGaiU;i6N>OwH2JZc7I`AG8W?spz^6UIoM zVvs?$^!!-=KAwE(7|XB4s!L?`ZDYa8I2Y(VSxYtixE7InSN%W_!3dX|Q83@;CSCru z6&ecFL;!L?fJ$wz_hxvYt2CH5Zz@c0>X-R21Yidox^(LX^PsT81=g9%-E%{z@h*v{bQzHic z5!x}W(_1y3so!~^Ig;Q(N0wWLLS`GI_7I)jTQW`F-Ir7(k~1XTHNjN zae;VFy%Ot=7JfFir@pHP2)DE}WTY9J{9a}2B4VWR?N2&xD| zf{W)1TejQAKfixJu+63Y9(i^roQbHY#W*2dz4{;~Myl;5Tyw~)uxE&wl(vjn`J0OU z$Hnf4?R90$|L8wLj2^ZrVYdPcm%L#0-6Rj6!bbaabN;Eda43Z)T3y|kl|T;xW9r_W zQMvsd3p_U?t@=tN*8cvSzBY<(ovfqb)>d!q&xm%@nAIviWm4sD=hyu)>L3?0mXa!w z$Ub; zc7}LS9G=X6k3}1om*^3j{J(MqXN4FtZB&E{iqm~*`A%qSsP-ILl34sxA$$arU`a0I z!f^-c*F|ziz`H}%Hl+^pXN>jo-wjxY_Jj|De7b{ch%hDEyKNs<;o*1!(AzvbEbQsA z?PQtfy+_uQTmUdVqY;Gk{3t52wzPcZd%dVmIj(k4%M3RYdJ}{`LLB^l061J{?_RnD zQV9<$LLQvGM9y5t2dwIP*hN5^gU>qi#`M<@c3L zjtF^T_}V3J2*NJjcIWxKWe4)^R?uT(1;#vz!5WFpaBmqENNssC0GxZ_IgPtm5Ary| ztYbwRVo0CYRpioGy&ifr?_vJY@0=_eJYly3JIeK5OpLL-)Xz`%H&a#)c81t$M|-z= zb)d@tX)A;WuXsCW;#821`i+kgq_h44FYIxU8t?(www1?dc)q z^mekI)@#>3k?S^Lb<%;OM~}j_favxKe*w6vFe=s5`tDdw>g4XXic1!*7q&|u>9M?r z@UYQd36a_Q$D9@Y#`d}?OV4uhWC!a`>-%FoY-&_-E8mQrrQ zPHx+_I%0^BPF7c^(HVk(Gi~hoEysu;n0iP{w^Lok{+Fyj0%&CW^_$zhB7tbW`u&;3 zUi+dyHnwx6TH=Av=Y>ZtSX9&gGi~J^YFrT;s1F zo9qOW5gow@d3l`~Gq@znxMk6~51zPozWE!!yr}Ar+p0S>SifU!&l?P=U$p*mY^-2D z0nAR;>{w4rei4edB>tTKJK}169sRg4Kr`(>#rR=Lko}W)lEGkHe0}?X#iS@r2E`9D z%9IQY1l}yDYT#6eL@Y&FIkDhjYYVzkH#ww})(=erL(u z$+=mwO9x(>@nQU%3AUvhE-tdM{B3!8{^Hf@^FyxQ*zn=G8EAor#f@oBuIfHBJET#; z)a*Z251~#@`S#*mw=r%wlpY&44<8ZK2<2JK*?i_%`OHJm=}8^hlT!HDnA^=&49DwN zj~;zt0Iw$^>m=I)!%y+)l!KVa4`Ie8SPNVW65l|b#Tbw0SBRvtUBTI56IFh4&S_gJmUAyh0hq=O0>)i>ZP~~PC+WV%PX6OpuPZlAE^l=Ojk++SIjC9RpzbdF8`5pQo3Vi!!0>uUjo03Eh3`Gjd&dJr)Ay(w@ihEvhSngPBO!Pf|v4Tr}X_DHKY7fq3ueFcIzoXHk~ zUyW~X>&f0aM(U@@&4^0 zU#3rNbHCT)#ElcFCsGTyJk{O0Tv}3FbLEFs+j8ohe@13?4Bq!O?W^YzanU311|>TQ zJC@9aCsRI~Z_Qho<7!epA>64xTV;D<&bZ6E>vZ0`2qeXl*Z7t}YC^cdHK`N!1_vz$ zpq_Adf`V>dy~+x<%k1@>F)lU2Ssq(7H|4cmHVUV|0AXPd!MgU(aD0hY3-2}X?#PGU z^{#HH)5*;{p}*9~Xw$}xr!}^2Ft-MPR1c(x@mHT*W(ocD-Mc=MxAz^p@>xcP-~kiu z7|h{ck_Pa|z()JdOf;>J@OVMGrZ${22s7mNnoL);cj7P?6whQ5nB1{>MNMrQ(&m)` zNap>fJ7Xgf#^pBIcFvT%SG8=sn|UJHpK!h3BWpTx1|WSsMq=gZ@dhLwwvD+g?$xcQ zcgG&EmXgv#UOlYYR@cO!*ZNYeL34;p5ThTI~uDQ-!UJag`HFIYefSu zD_J4akpB(#W>2+LqIaPk6LNC@c-O0h#M#^LLQhDo<;=P~ogqk>y9#dm4*% z4>+IfM$_YyTv<`^>h()@SE4fsBzV{^tGrD-p2L^tUIAMc2RQ5+*b*d8y`(=wcM8pj zkZJVx?HU`K7?wfCmO7d5x*Xy3v!GS*PvxoM+2IH(r9-Tz|oWVSaOD zJu`?u$&KB9%Y_Xa91x-(+@k2dkyuz+UF2PDRv0wt<&X52dvEIXFqN9z`2G8>*_Oat zCuO%5WuGXu{*bAxIb-zj+*Br~-LU#oLj0L^zae-J-I8(ruB^;qKlB)@_#HHfYw3mG_T* zm)(78f`2M`%%volAb10melVsxzWPY5I3AEgJBo`_tc8j2!-v8}EQ32q4ivhe{ri&v zP#EZhli7X$^dU!{17tzogLs#3ZErtDwEKHi7w6?FfqDvaGbXVw81dbp@H3CpKbTPU zquBw{ITJV9WR_mzOlyeo8?_mHkUH>rY!&S?@Ezp`w~YKfP^1F2-Q5!2>_ZC2!hfvs zt=;MpoYRq_M{nOQscrSuYQ%PoXI{DkoUq{wg9N=)a^KvP!vio=NvEHaz9C~BSM$u0 z`i->%Koy93edPp?$45Wb`RGV_`}(&1jLJMRa0)z}pIAymSV<1vRsCHWn}r1THZEHz z+3cY9IL=_I;ZXfZjd%yc4Bzv3cC(Csq@6<0Dg@M28HJu_;>68dAS~|v0WT5KRy+ps zqje&-wwNX=cvr39VmiJSD(?A*;&Ptpo1lpCI|J(D_stC0R;=CjSn1F|&)~_KZYJ$S zEMFOq%Dbp5P)3b53r@By=I)6q^DZduxZ0Dg8<2A#K6%Z_z?@+FBOg{6EB2(D)nxD` zq*Y}Nl2Oz!e41$5or?Fr9eVItYCb02n=m$U`~GqW-U4*7`7`2!uJ+QJofP-bSI+0q>f^$S+dTP>WnA*oeTcQ&Ry4VG&mvrQz@91?N$Zrb!{ zM~7}~b{ls7E*rLBSo!M@X&;VSj@WtDP`RV%<%rh{j<(smO9o#IoBVaqeu)E5uU)v% zzIZpD(v0bc4js~*Hf_8FnjtI$?~!Z5W)y2SFuwd2&LdoM^V@ik2%IYayZ?Jm)d(;+ z{Jt{GP;$0?_uEteOk^9=$0aaxyQ=J@SWILnZYP4RjbeCv_4h^5@$tBs39N3~_a}?y zV8?ULpe%Ky&))U4IuKfTaP_mT8EkPommb|y(vIAVGoeqodqLHpJiy33|IBpUiaR#o zpfJ)n0F3?%xtPt&&i%CKdz&?>u~R?OWDImvM`mlWK(F6GQ>Q`fH_82NBFcfi?B{<}UnZIn#iuy?*}?OqI87 z^XjVTm54$x82*h<@&&^Yu)&Pn!UO^4hPPK>{TeeS!QM}sxq0W#sVDS@jm^{b2oH*_ z7i<&iG}l;J&A4Q=vEkCuA10wke@*SZu-~&WqeY@EC)ALcJ6H)3sivl*Wqk5kf)PD5 zRD|<)UCkILjt{*ht;X69#O?A|S-*AYF8Li_s` zjdKQM)6-iR-Z-)N+?qX$gXvi5*}Hb`oE5ds*VFSUvunOV4fhqaB0;)3+}g%Q9RwM& zTjCSk{baiCPg>hgi>+*S!UsKh`Qc}Vk5eC4o(>f^K`$Xs)7?MfcYBdmRO_M9U!I;! zYA!7E?}RXdjGGmO-um<($<#mFQfC^F!jUIAx^D# z;k1w|SDrn6D(<#z)24z77e<}P=*R8)xpfQ-6k8?shQ?CBu?$DB2ibq!{*>#`h1pHq z8`vq2_M0P6{hH1eXscw}b~l zH=DSzAPMmif?;oRlSH4R4~*fd|f-y%k$wF6DTQ#g|%7Xe&A`D zl)D`q323g9h;0er)2ZWjGRQYT!t@q*YqS)&tvbdEDOGzi|qC!(s78X{85K%dh_P_ zEXkh{ZDiCxf{ht;l!Vrr2(TkBFR!|4qfI+9gY>Z!^it2oPtN1S0)wr`#9oMA+uUJ; zo7mzI>{{u~*~TQRJoLc39vkkf4CVX`_ZK2{XtN{|AzI|S^t3-SGj@nkq0!}0{z_l% zM@^aaqjWecjAt<0h>LxLF$Techn7W_gQzQ&uU* z#%S)iUpzB2|3_lm%4Vg(@lPEVR2HYE1}lw=TKWFNz`TXx@0HJ9NtYg%|46#6f$jO* z@WntN8HE+#bnFM6K1hO+5oow*tIXU!Gylm2*thwCK=xAqaP7PVTV^_nPe|+b?-%pd z+X0R%bhJIaAE=H$rr+=K`#0k0K#@TwL)Tn{d<~2XOFt-PZ)MvIczRQJHCChO^DYwq zHO0Gwdi|g>^$KJ^hKLMizIe8uwg$?1Pq$zd%e}{&KE?MWGzrpN!Z?%2&=2nfPj@zU z{5a{x5m4~Xu?||Y1Ovl98v|Y$eg$!(`2*^lHW-x{0Iv-{d1utWLJn!c{pLKlOUPjc z^9$>+hQ`LUu>!WndJZ~K+K!?77SH<}bkdINsIagK=^VVaUTOpJe#b1Ki(A+$8%92t zqEdpnyY1Jf_};vT%Ks5|46It_5; zzchsvZo1E`LEqoKbLZVpH~=%8H(kvM5(~?TpJ9*|x%%0-YfwrC^y`;DV3~D4)eUdi zbwVK~W_1h++D(R9oFYZ?YjLBRs&8lkyaR(c#Qlfa|~x_Vdq?MZ^MDW z+{Fg#=bg@Ce$lP!H|5=28DnL(axUFN{z;Z|F~S(-(80zC?{GeB^73R#Xs_ta1*Vaq zq1547117GO_%wF*r-w&$sy)))r;T6HmXoNxDeKvr!C~53ZMR3h+2WHZ(~#*982L*1 z?a%+@p1D-SB&$Z)4$RaDdNHLXuF$>HywOi19;tQN=F>LG{qlykxB>CnvEv5#!TA;t z)A|Z4jdKo`mU~K1)2JCO7(>8j$~nV#z}%1OZt0He+>-U0r8%JGd;bnuYI`7^eVqaI zY)+gR~*_j{T|X{ie2j>TR`OEE$}Co&sFKle1uoU>Uz{ zTd0NkXd!c$e<0{Gg|@#}bKwZY_Q z^Dv%u+zZi(e^pwqqj%zl55uP*`!rqUui`p zmc0wjh{xXZk$4^$SM9>(fJnKyzY7W!!rGOEuiI1ocH6VLCd(umtid>p%*<$rB{gvb ze3H)KrMq)1P1pr}(!MY@U0iU+DcTVYb;pu>`j7H<&>12A^c&OlyM~|5LdoU38I!D4 zbAxs)Y`8S$uGHsOuiA}18~8)fhbNF~^>&A7i_w0iyYSb8BnJ{hgmI3l8$pqSSPajU zteh#ouwjL{x$ibNoEuzp8o*T{X?u0#PNcc9 zxk*%^WWUaVYk#Z7%e|KGTGbs-T_2#TnS8_Ksc$QF%p0KUgDFU)@P&kKG+y%^Df( zj0Ut?roSn5+`)JqvpIri5Y)`*HoqLuDItYH^1rK@7BKc&;=1ZYy)eW*%FF$XfVV$f zu4-&}5;3A8UK{O`Nc7!Q_U2VxSSls&oF1xN%h7`#RN=m4 z#R|9~f?rWnnE#J#2pLP#$AztHx2Z{T%Ews&yw zJR&=U%FKEp$*P>T+QD>4_Jovc9a&!SR(}%{9q{$_`drG}RBmlL2P6CMmKrfRxr^P_ zcM#F}mrF|rq$e-9UbIBXgiRsCNtWH@)&V3!(Yj^nauEGf*Az^hUb;p72NF)B;h&HY zaUI44<-L11tZ4j_H18R#kEpG%X+IyAR=MS2omQ;7pajpI3 zX1!XCvT47a1H)ej-+h1P-kGX~wrOcs%w7hq^8amD@X2?Jr$(6&M93DA#et2Tonqtf zZCkg3a<+UhBx)*&crbKY<9QbVD)Z4+)1C)*0Ym$qcQdy^0Q# zS$Q)PN#k53GDL={NLWocZQ@?l+^~73^Xqt1;t)bYLwnP+jme-+1HnwiZM#4`G-M7o zRzOjqm$zy)ejh6C@ydT2D%*H~2na24bI*{b&axEvAoNYi>h{cGFMBAR&=;cLAVX4B zd$@WvGp<5X5zHYPa$k@@v}MG*(uze4V)cqc#qvzeVL?Ta1 zltsRSr?JaE8Qi`g_&K{`W=u@{j zU^bxn!Yi|wP`@YE(;)iNgoa(dJUy%rox9$;pUet9eEE5x9*^gHcgk!pLb_M{{Ivh6 zQ=OL{hs#4d?C?Rcok&^6XV%5f54O%Du0s}_MD@a1wT5Xv&G9qb(i{WeaA1Pb{pwyu zWfo%q&WY~(S2d+Ll!WWM?A!@R^kr-e$OK!-&L1|l6QSVR2_L&T_tU3=a&lP6gwNS! zXlMYtbYPiZ>YA84W5YDIrqkCDj`q8Q<{u(qub_&{;o(#0A$YO6bxZzOs+~+J)Gfrr z0&KjiK)Yo|MSWR-C@E~9jLbdT4`Z+V=pbmm>Adr$hlqr@Yk--S=Bmtty*n4o82103 ze`h}|*VilYy0+|`Y4#oMxp?cst2wANGF+IH6;3P*!Y)@=*14QcWP^4iaAEKs`7kC1wFt{4e8Kw-7=X$Z%M$1ofLVJl@(=WB~A<`lpoNn2k))(XR9 z4;h#}_I=SLT0iMVOvb%!`KOJ_Skn6ZynEK!vB6_4~CnRWZ-0bM=T+6q( zv~0`)J^{@g)g*u)N-6YCUft7s5>PyjhFS6g2sLXKkUK{7F;9G(+?8RW1Ni?Zs4Fn8Ed1gdzeoHFl0~-NGDa05M1^x zgQd(sXh4TRGXxw)!H;RC+(k3H%EfXlLpl`=q=)M;HMPsl1FL17DWBlH9M2F#AgUvB zH^nmx_t*Ai@yn_Q7ip|Do`N;yN7ZkS1^wmS1D)Yvjfql_NQ9d}pT$LqRYGOuvCrPS z@xgNalSsdoSPXV7Sd#>#6rMhH3V${ex6IeJc|(+}rzFgYwibh7Ie+flJ3#mgD9k2t*Lw%Y^G(SXJ_LctHzx1zY`n&? zf3fjiu368s$dyCQnm>FqcyeT7&ncUpe0zZ73O4NYs33~G6_Ldi&Zg&Z4=9&DgT|rt zJ@X3y)5`)gfzc$*y!Ry zLQX|po_mj}1r%3m<}aUd@w-h=x@ck*+hnYKvcT(3ov&8+6;d8B0h@(~u1>LZPp@x- z;)jdm)h3<@{p7PC(A#@%bl0D|ZDL!7tEjvruOU&h zyvgNXE?lc^r2F<=Zf;)25Cgd^ z`ouNsaWsHQg$%XoURo~&{@a)TupB$(Dj)whMqB$mEUrh18IjpmFMUFjUd^%qhEkyxpL&+9K1Rw{nvN@ z4-c|a&vH`!9x=FzHC*QN=WC*}`As3I;hu2!?$(8BR0WD(oWR*DZRxZ=_8*@)|MAKl z_c#J(uyDh1g}Nd>DS{mv^Dl>+e*!9{0wK$}QvT^f{CSX0p_-iG1lvl}bL$e|sw%=OUYmimLijT>A58AcpCE{+;dy zH;~kodJNlvpj&QQ>$=(i@z~|Xw*WAA%@qJYm@}G$vB=#vf-Hu|K!n-Dd-v~~JpRNJ zv)bwVV%y;}&2!$lNevwMv$(jptW4X;v+ya^A;=^Gh&345GOc?v;XGJ=A;ACNjrJt{z}b-vd7{G zs74}@v56~*0=aHo7-49TnAotZZ&YYK4>Q8YXSA}i9dT%SvIMikB?JxZ>D}0W^gQrt zu8k{i9a_Cv(b8N-=3@*1aDGs+wRJPa1uICnRoru$x3~%?O*)=Z$l?{cc!BmXNl!~! zBVvZRXPD0YKQ4X!|D2ll9^vbVkt5rQNG1SsNBr%$935R_C~%S`n2Y~-q(cf9vB+JfO( zasj(cn6ZUzx@?&fSp=e{2{jx6ZiQ5Y#&FFhwawKyav~Wi37#$~s7yeMcUFGwa(ez# z6+7xZeEh_=pQ7FDop>Xm|H37~`2sJn*wQJWg#aPeZ!|%pq8DfwVCN3@dlcnw-PEdWZZbe4!U3Bo!H1XhgNiLD6^0E_02bJh_t}<9vZa@C`q}*+tJs!V&{aT@R?}5i( zS#EJ8KSx^o&|=O}>`LPS;?lXZ?37K4u_3o^m4nG5foBJb?m$9Pk{t)TchPQ2KZ0z# zPchOPyvbKY*VcsV7MOQ_6f+1^QP^~Jq)YXLG+F3RkPPV->r|JW#0!>_!)pbvPJfC$ z3yj_T017(0AVfaP6pQNQh{OAu+DjslADizh)^Gf3J+gcm{aMC>-v9dgRZ-QIJ>34N zL+r7Sp4sriLM}E;N>-d6 z+kfRHXmi1HH&2+r|Nr*cv(8$jBs={69gjW@)?3i3DICMGV;wTisJ_g%gm26zgR9l~ zr?$+bR#s8qNq9Z*VE2@3{{67*OJ4%Kd-h~O9=odvq;{)BBC;S?PB_XL68psT2UTQZ zbXXJ?>~?12x+D17>B!@bo+ac%pjsbQc|Gv`b-0muk0&NtF>n3h_5R?m^OnH}i}=#L z^3Ow$4orDftP79zAA1!BD|HnWsTW2(u`Gh{ki+6RrM}?rs0U=@ZF488!fgvC^Egzu<2g+c^fV#wccF~LP?yY z8c;_abM7seJGX?RV|Z!betGR$`ymPXRGgW z#^OW6?y4-IZSdr#m1EU#d?5mxVjF4{&YY~>)?CHo40p0eZ`qx(y&5%abR{ONf4BbO z?_c`Y460;HhdfpssFh-UDE<9<)1_BNiFTV0ZtHnw(8na(6e24wURPtJJ??uvKldcEa~qh04yup8T4d z(``W4cQzXaYOT9on{{-`kQG-~3~;nNH0sFfkkV7@Pv6~o_tl6yDs?K0FOM8Q@Ur2% zWp{1Ajdko+7QJejN2+1u1~)HKwKh`?KO3kF75Cy%=OXGLBDU|ph=l64;E>>CKlkk; zfVqtSVAlfr?o-nN^v1vt=IrJ)B^-|VHyYuyv;S8# z!j`6qf2R?u9~wJq)CPO|n)349L)S9+P*<<043&z6>*qf`VpJH*d!5fNZ#aad^5|-w?gdB4f4n=ORu- z9Nv?`GcFR1A0A|@q1NKF#rO8$q!B~6UW_T)IKR)g{d>D*G`HDrzh-x1{>}M=!zLQ& zZtW{_s?X1VQ2QV!KH4fEd3e2|;_~5YTPBG_2G6xEtt<*{iv~n%{%*b6^zGxf^a}xV z_a|n0rVhw;8{b`{L*&z)%vab>v=c46xib6ZOWa;MU{D9R&;A~oKaN|p`$T=H>v!wk zeazUgnBz%^7v{CKs-4isb`}3^To4e4@upCv<6IjioXvosW)kaid&w$SEp1c|Fwpfc z0ZI^3O!DX52$Cz+2O6M)<9e}_v#4_ab#A-y;*`dErK4igv!X|IJ*aTLk62%w<2SUs zT{&>&?uO(Qt}ELEnvz;SH`Lu6`CEH`2XF+*# zn|JXeC9FJjB4-n$1Be@iTOQ;|MYLm2+>YM}Rh)u;W2 z_`scsYOv+Az@mo!@$~5|a%S+q0{r{-P29f2EoH7uqOeL!yDcyG9Mx977J^TGiQt#d z_F#U9^=)H%XqTMjTtI&EaWII|8dijwz&G5kxz6!9Ai!$plsx4Flm`LF;A!~HHzQpPDeCPZp zVxS(-L?)b;=v7r&$svGdIW}xBzC#O6Pbi`>=9lJfP}xXX#;=w2;lU$ETDhdex2H}x zeJH)CU@^KqZnu!HO8h9un^AtAPmgZeZ!yoP^S*(QJwgAohJu6}DE7oG_SW1-0Eyhg zxw)&n^(LSnBSOYv^9KDDO8pPh1ADqJKL0u^C#Ty7?Gw?sA#BEiCo2=G!k#_4!M)y)VO)k zB0mgm&lz}mA^)V&;CIS;unp`CO4!ej=f{lC)gRcS+4k18qv$%Lm(N`UHG|;eo^H}P zG;mEfHJ3}())$c`W>Yl~^SdRdf z@))66ahW>On7}U60fdT^7x?IrXzJsnBvP@V8sb|rN^WQDI4F`SVkh(tuaufn8*tlC z%uhS3EhBz-zR8oCAEm{vFT$l7TNj4;2IkgZt=N)Zax{C0N|D}U?-TyZPu@E&xoUUp zWzBU_ZFl@9O|Xwncd%ErPk!TiW7p8ZGjHw8-tl9{CX*`VZ_-P(c3k`tUHMU6LxU|$ zU(rz(nidv2V;sV!*a28{Dl6lMU5e!tYjprD zUG(s1pXKRN4&&mL$$sS-E5FDiy*} zp7o2TrG|zd-{E$iGVuT9H+aomE;Bu<2JjlNWYncMB|LCEp1a0Y@lW`f#FF*x-P^(& z?mBnR&R-LTumXkOz2cTdJ2xGUinw6(zFgBCGoaPCWq0hg#K8#IYN(RZy7FraLAGf) zVQN20aeFlDwuf+!WA)DF1@25%<%Gktc6KkEm2}Gsn~?h}n{9+O{KAE0Fcr#g;kAWo zgua)CIxBAHHWVh9$$VWoziGw`=V*jXawc@^{Q>G|)ovq^P!fGb~Eh(i=|WXVi0Z5)EK4lclu4B#(N z>BX~W6fT4*cyLnb;Ut%qlsq1_*I5ez>AuacDMUQwG>X$hoUTkTHZj>nyYF-tmz>YJ zxvk9OX%QIJfwU;ExN~5R;xarvx3@Aab!`7wFsgevg`N+ZWxd(h^u$CD(EfgDA!%*C z1)Mk*zJi9pOU0!_?)$!ODcYlCsnLIND$DdnHXYn;NJj8%;ipv92c(s6)DjE=|LJ&n_F~lXr8o zYwx^1uas`tANNtcz@k_z79fJv-2Qt)x-)f!?FHXr#*G8%MKXQ+vOSTQ5L1Xag2f(l zk|vQnY$d)#)ToI>cRahpaFUd4Wiq6N^1dI=!YAhb{q1-?!8(9}$M~1FYc-yM9Q)2w z88RKLt@m&J{c=FB7ZYZHkyre$%Fa6==ly^Gx9T)d5|W}4isUF;sO(NMLqpp3C}q^4 zGD;K;g$NzH%n}WyJxIg{mDQA$P9?PK`*=IQ^ZA_f=g)t_?Y`gl>-8Mh^SZ95gN22K zgoK2XlM|fbVY<4DhAM0-OFd1^R0Pe-Z0XVqZ!QkQ@DsK}zSb`YLae0)8fFJ67fAsQysVFrr4#W%gtM1GI7;L z{kZx=u9U1Xzvr*N5gcK0LRyr#)OFp_M_0}+zxQI@)t>h?&xC(;&8SYuOZ$GHRY_%@ z(~+^W*SxnZI3LnAcBj{s`mmZ`%rVK(>!&yKdPCN`+LLqaYP6n|%1prp^B0j_pI{h+ zPl}7-!tC?ogoVd$h9ZA@L7tAxx^c>0BYHhQH*gTuRX|<3F8qdPy^e<$LTc$y|gVr;t3$;qc~2ykOh^UqXbOeA7AA2L!0LnT62tQjaZ zqRY^aaiG(hHQsHt2_~m3T34Je|GA^w)~jWe_j?;xIP;~pnBW(OHIGJ=y!@5=kjaj^ zCkkkfCQtbgbdu1#F&cWOZ(bF~Z^O?>&h;v}^ua{YUCQzjo~)QY@P=@ZIJYU>^|)0| zBZwy_`@#~zO0{2?*_XOp$tR2=%lI~^Y{8;wPtb-V1Xk%Yr0g_y)GbYEi*8#WTAd7N z3XyXPPL)(I%*k06pPXhtOzf$E?{l}@&r3#ilUr7G^nnxf0NhzsQZ&n}szT1rU)UB3$-M=ayl>uJP2NzVm{W%zAAJUW0Mf;j z2_u_YnQu~MYOhOGcfT46i4OH_Q}pk9(ssDH=P*@I^7>%3wiL4$^J~kTky8fPrOas;+Sro^SEzdS$(lE9r}1$ z;%ey5F|hmn`i`3}r+-=%Kk8=-4LS7K{`XQD1`~#mLCU&w`SM)NP*~1cIyv2P?Q&J6 zXL;X0Ja5~JZ5|pn<&XAsJRfJQY`d^Sf2!d?QSkE6c)QHt{u@p2%zv0RI%tLB8sqVA z!eZB%ybC*aMp0+t-KoEOy!q<;w8z}_f$feBY8I^t&r(-iv)3)sO%4B+vuH!Ru1E6f zm+mX&yrrcAOUf1^(XFi&M#EJNAlaCnDi)tb=Dc8X#??TV<-H=s(yG?9NsgFFu>)0@ z+(;=QBQayag2#OR90$Fk#t}*S7AH>~RpIO?;Xiz4#6t6ji*4^}=Pm*?pIWk^a$-MvkB9=j{tJr}_IF9M7sAWc3#Mr^_ zr%0sb10{=#kIzkc{?5hC&CGPD!a>j+P{)%NI*%C<1_q{X{UmJgXw&J|5Hve>laHV7 zpzUE4W*0AZZIdxGH?Mo9KS#!8;UGi9w2ZFof&v}bR=Afk8sReuuLZvpW1L;zk-W2H zswu5Yw!bq83Ev%7%TR_v_5LF>x}(y+@=bjTL9dFfowI=-uh@*=mS1y*{xOcmMl4PswUM`b7y^dx68-LLq}6na?W=4J;M#4X!}b*M*Zd2x#h`yx$}jwQet}UpC^B>`rcWSZfLdP z+q$}Ekv6T*t&4XBR4G=cz14NwH`^yCUYS!Apkg~-KXQk` zO84K7H+oCX8);y&=a*N$0ba*c#XqA813iq%_V#+W-%Y(0_U!fR z6^j<>p89qI%*nf>#>RqjTZs z++X^PDKOl)arNu9bIol%eLwltV}skm;uU%4Sb%+NOUnmU4RA`1oTJairt01MmogG! zri;&9Ejf{y7L->t;>UH}4Fo991z)v2F0{=W-WN;G0;oy7EP^-qf1wU%l6-u0>Mv*z%bZ7-X?eod^V$kB;iUL+k+bFwflJfSP2 zbN?e*lLa+FwL21|^d*&-$aWK*zcVNK@Rk}yIeV=&`kSQB&M|N@2;1$9GXW?N!w&b* z)uP?hjZg?LDMFJ`+S1#BRmh#)6QrYW-n_gdIzLPNhs^s$5}%%JTvu<`8_x~eO(I*k zCHv$l@jz$7PP$) zY0THivFvrun6P#lC5H9w*9K>?{poTD-v7jeLMqQ>-@fqaME=CbkCe8T`k) z_-o;~i<@dbEG(>R)S@TFx&kMXn@i;GnErHI!jE$P^~T)kTH86vo`(HazonfNjSYquT0j|WV5g^lzB4pD?mrdrP28UkGuHc zhemosJuQpG+W|pKWZFENPo^ixsA(&ttsYrikpCT)U6M->-Al8Z$-H@#G%{D|8R2U* z5B9@o(`Ays^M=){FX7r`Hs) zxEL4L$1DyC&>L}EE341t<+~@hY7f{c62XRe(`Q)!XM3_L+UtH@d>}|UH9V~%S8}BI z)w)aGTF38ft^7|+lD(IVm&bgM{2niB?oNC&(%QUsTalGYvhwJo?Q2G!-)z5QyJLKf zQgQL{4~`#ZK6URVqDzNDMl;l$-ofRT5ECp5C_VXwTp}mvGv60eK#In*29^-~_I*bL z#ahbwFqj7(LPM^nbf`Ern3o|2p3(mvDSQ6Iqlmd@7r{re7hg$ZgyFyWxp%jSNIBK6 zv5zF>m2?zqz!jJ#XK+2X504e6)TCm?=&XyaOj)l+zJ;6*lpuf zJY;EC>8lWb0{Jmf<`mes!g}KbR8>{cHkfM8`|US;Zv9l0#YG(D%b2Ji9!70hRax2E zrbeAak*NE+jy=o64WBoJ^}oZ0&=6y`21xeep5WUVzvJXr>&fNKqaZE?ma!?04yQbH z-I_HMz1o`@w>A4PUVwVI1g_8wi4-X)pD*me9TVH+49gT`A&~>ir11;Y6-uqx0l z4NvVY(%qDO`{rdYS)uFw^d&UzXzkIm%bteD9;vrmzWxY!ea3vM=Z#i(n}+s`PN~9% zGosz|2SoT==6Hv7^xic^$=l$V+*Q>H@~v(X2upl!=-iwRghF^_=EBlB7nc~8+ER=~ zJi=N6w4a|$f`mG?ow9=JvWGYA0aOJT-S6fcqoRNz$FfrB*3X_b^1TZjg{Nx;lUap> zu5AroKVGguzSBh27tGLDsdZ}kDvxi!;*8mbSW(}qe+9dFJtlD-1UG3 z#>7T;--5ef**knVK#J-l7dup_u&{lOqv|cclnhu!Sw_bJ(;krW2A=FDM`4P?*Uu)D9|`jFV;+wLTP76h`nufAoMYS3l$s2>v43w(Z#Ka(5#4cFl>x}n4y=eFw1iT9u z1{tY8fo-&7N8P7S17b{Jwi6zHXuW_T9TTz&=OLaM?JvO@nq+ZtB-8>x^h*oiW&Zf~ z?En^TvWKx8PjRb*V}Tn{kZrf%^IT-maqeGU6{1C!n&VW-B(p>v#XgWd1su6CsXmT0 z2+9tA&7Fgd&ZchWQCwDac_k&Kf|KJP=H&eHa=&`3AbNvPgZt`|=;yCq{f?)jyIBiV z5qtvCn){nvWHCrvYpcWip(a*>;SD!=WKnfpUC{U)Ca+%5g@GA?STGwqcWw-XE^<<3 zL?UfAT>-YO8X8Zwfzj1KE#4Yk>dT^ygPtA~B)fNj)@)9tXv zEv|gu@T_^=6+Sb zI?1)Xsp{gQ;R4#)BTXcN`WqIubjcF2>*gp{Vhjd->oNwS6pR@6^zofxndWux#0g94 zqvgvLLm!|<#bk`bPZ3q}t$R>jGQPz87_rmh#RDd8J_Ynv)J~8}#4TPhz?EJrGJ=3k z|IpsiadzFbpgb%S($MOZH*HiKI#c!pw z<4Swozmf#{&VE0NvA_RWrDF!H-#MDzdC#$~5dU&-nSJZE8pn!`zZ@!y_6xp3+qZj_ zRsNU$DxGb&#lxqeaDy1^u{QI97 z41`gzo^A)DTMXY0WmjrWYr)1mlvhP8GD6)vRdU2OqBkoccYlz)PI{( z?$`SFa@=~KsG$qBkFv;@_a9)UH4DcYPwmIVY{N` z_#yxMp@aLsnW#M%2Iu~hh+6S)TCCpG#ftxW^Wq5WjvPM@XS8(s%B}iu;o1?3J5DdM zwmuaZ*)_+9N6<^{pMICwH8{P|#8PAFuP#u6Ih0`4Ke7-_{u*5+m|zA52L4*Ghgm8! zQKMk@HqXB5S6BaiAYk6kr;CL+1;raO`1kl1D@D6GK#D0n;9>uC9(D*?8A#o(x5fO~Pgbn0e|O z=Jq@a0E4j&8heAmgDX5)hnun?EWw#Fkh+Nz?VT`VaO-O0w^Egnhltnln`qOYv?)q- z6N$ig82#6!+K>jB3?yY^M36ApG?KUVZNm#wb$O^u{`pcD6u?5%P{1R>s7w8fik^u* z+*JWXX?xY1_zQ86?v-$?!=6%wASodeXGb)Jj&?1|6 zrCR8aRh#PT!-05y%se>j2*Ja~ru6OGX-a}GBwRLpA)z*}zoB8O*+`u-%R$ZAfjkD? z(xDa5NfV=#@XX#y0N<0gew0@ppx(KzXGv=HhYyU%dQ1CsngEKzie;h*d`5!{iBix) zxZ;`$WATJ3!$7J=x=>+hFKgXI(!QBQb1G?qH$yPWNN-AkX8&x5Ei{pAgjuSMEej>2 z1>Rvy4($IV({aQm4GaXt_MOr2?OS%jYxw*VCj8+2Q-EWA#`qUeU$!e?$m7*<4d%V& zfrel=St16WaV`ULJ0E*pB|bkJUm4`4FLLXL&s=?DBicFgyjj8NF{|<^!DF&` zvs{EAEF^S?5n6n{{+O>W&$t56c)Y&;-PqX04L)2rh5^ESFyTZ03iLK*hH3ec7LuztXE5Qe^i44TE<4$_}3*)k*1mf2M*AE3#J~-V9*OQ z7A9RW!O;PwZ)t0*8V#?oZ=0%$3gn!49uliu9bz*xGqLiiXkpd{E1NkUEu5CTG}ne( zN9GnrBfFD=p=U#3fum@{d(cr78n?T5m7lpEEn7J3ZQkxdC%(3Mu;4*ld>`dlci*qH zv;vX|+_rx|R!Jfw&Jj8}Ky)yyZX!W8NRhqA2wNZ4X#TW_GK+p594xNJfN9CVE?ezMQXI^DG0V59rTX&EcDLvQVTsaiE{@0wq( z_GURk+O*D5m5XOhx#`)W^)P6s>O%KpF?ycoqvJmXPM%_u`uo9Eo3_1D4pt1dI(@fj zd+mrivt}#Bl`F$u1dlIs=p0ry&*EYSPKqLp-X-y}VaLT~Wz$#hlj&n*q4eaLxXOgx zB^InS)X_0A@2?&@-D#-q#I6BEOTB34m)+uq$eV*89;yHZY^cqwR|w$>xDhQ=a& zG>QyCnTsA3I7lR#b4aP8veFfXF-=1AYhVf>ls=*J=gr#yc2sh17Ex}|@a!TV@LmvQ zPP`q<;T9uS61?$*q>jA#Q*G@%w-0if;gG62%Jw)I>FDTCK1$7_4i_M`otK`jz0F6< zvPN4)+YIm3(P3mEl{uqQ81b+{Bt`NEv#H5v-rJ(vWaiOyHf4yJmti-NaEWeWLPvmL z1_=nT&$4g#9CjUDNfzy<4lz8uPw)v@SC1jl!AFj1UA$(TRK4Tsm3#SB{(i>VVxnu2silRvg~vAUeA75dWTX*VFg`M( zHnMhFhDzkBbL)=Wp8A{l{3er6M*~Z{?xwtO`#j)#&kf=mqW+Zgcg!<#8=JVT$573^ zx5uU1?Jim_5;cD}x7*O8z1?VuLZY{th1K5Cslf~VB6shexGShss^dljxskI}?Mg8A zyBqHT^N@!iCR%>o>cy*9tuPO@kKSGT^cYSIL85Na#+`Rxf1|r=WsD63uuHuAZJA8r_Hv9N2}Q! z#)--Z0K5YC_qk+3Cp$u08<)nH6w`z?>j$KBo;ZICSA{ec0tVh9WhEuX7tx6<1Mvc^ zC^wZk242ThXP2j^z3rr>Eq)WBUt}$uxE7^(RFqx!Q7oI;yg66!kRtvv7~um5Thrs> zLdSMsK+uWhc5K$!1x~{ayJU||U>{^Vb~)fBvORkaT+*VZ30tD; z52$6lAYePF4i&UW1Q(B;A+&}CXa7huSH)LwGg*Zy0*sXrAH?fIZUAAYo9CTkQZsU0 zmh)jV79EYlAOPr%nf9Rcvld4(eLU=?jA3^7Q4>5Glw6VT@d1}-4>@uJ*w z{$fW*2fUfT?4BpsXZqkSWY@z?I$LF~N5F*?H*Y+RA|B;B&z-Ir3jSNs#MhFUIfG=< zzEE@iNr^NPwP^RjgEGhP9~mCK)XK(2ZhSiM!Ge?HWSn~mX1H1tZV!|cfj31j^&do5 z1oL?MX{+fKvI4)8b$zk;#(1Rt6M3dzNK;hn&o2 zyY?IHUSb!$i+;xWB*e$N6vN^#UzSpZGKp26!b4`>VtYi%S~0abn+@6n4QHk7gr&h1 zG{0uC1y)DXs2&cYsG;lM?Y$qHcIdFq0RgMowLCM<==`3y$Z#gT;v-w?`vUTKe*StUjT}qJR)Sj!n=FVeh{;gG0P3K*_P~Rg z(Gjkcj1^g!aTW_OMgdEr zw}PBCE@%yB8rvKBIx$aPy?(vE zaFJXKZ7_3Rs(o75UTi9)ATg2M!e2zR^P)?I;d($)_d5n^t2(dzIPnn)1EFc@gt{TK zwU45Cp}L_m#{iObFq8mUXNRIrA3S)3Lwg=LVQ5Mhi&&8Dybu~)HEc%j_1Cza-Zvlz zz>9~A9G8tH)r~C_AE!XUFI||duRliV5CUN?o<>OcnKQpC9MtVmig$L&eMc}Na0t>` zV&;g@2aM*Io0(;OXymn^OqiMW%flLsejG!9c(}$oiyx2pi*G39rm*}BQ2_O7IELyZ z-Dl6v1JAsFzyHxn?X<}J#ib##?uPwxBt>?f!&Oy-j^mE^6Jn7v!-)1TV&W7$7dWyc zdzuHQ|FnA@MDB~)Wvjv5UCnEcjQ70m=@^+?IllBl{)O!P>>dHXMk$2d5vi=+JSlA3 z@U_e37yI7t(-1!JQrwBgC*w+=B1ez2>)d6BiK@su@>2U~jou>BaD%1Or`tVJu7994 zGpb>qkM19DZ_x!vOX$AJNDh(tAI2bmAmcnPi&{3-N)}ZF_y2b7m5vg=4m1AugY5c$ uFN9D!^Dn)nd{&=-_R|vo-z|JgmvflI#2G#3;1wql{Wg2StQ#}z_WmCe. + * + * ========================= + * + * This script is used to manage the settings via the web interface + * + * HTTP GET query: + * When the header 'Accept' is 'application/json': + * It returns the setting specified in the GET parameter `name`. + * Otherwise it returns a list of the settings. The request may have the following GET parameters: + * `direction` string The sort direction. Can be one of the following values: `ascent`, `descent'. + * The default value is `ascent`. The list will be sorted by Setting name. + * The data will be returned in json format. + * Otherwise: + * It returns the content of the index.html file. + * + * HTTP POST query: + * Updates data for the specified setting. Data must be in json format with the following fields: + * `name` string Name of the setting. + * `action` string Must be `update`. + * `value` string|int Value to update. + * Example: + * { "name": "web.report-view.sort-records-by", "value": "ip", "action": "update" } + * + * Other HTTP methods: + * It returns an error. + * + * @category Web + * @package DmarcSrg + * @author Aleksey Andreev (liuch) + * @license https://www.gnu.org/licenses/gpl-3.0.html GNU/GPLv3 + */ + +namespace Liuch\DmarcSrg; + +use Liuch\DmarcSrg\ErrorHandler; +use Liuch\DmarcSrg\Settings\SettingsList; +use Liuch\DmarcSrg\Exception\SoftException; +use Liuch\DmarcSrg\Exception\RuntimeException; + +require 'init.php'; + +if (Core::isJson()) { + try { + Core::instance()->auth()->isAllowed(); + if (Core::method() == 'GET') { + if (isset($_GET['name'])) { + Core::sendJson(SettingsList::getSettingByName($_GET['name'])->toArray()); + return; + } + + $dir = $_GET['direction'] ?? 'ascent'; + $ndir = $dir === 'ascent' ? SettingsList::ORDER_ASCENT : SettingsList::ORDER_DESCENT; + $res = (new SettingsList())->setOrder($ndir)->getList(); + $list = array_map(function ($setting) { + return $setting->toArray(); + }, $res['list']); + + Core::sendJson([ + 'settings' => $list, + 'more' => $res['more'] + ]); + return; + } + if (Core::method() == 'POST' && Core::isJson()) { + $data = Core::getJsonData(); + if ($data) { + $sett = SettingsList::getSettingByName($data['name'] ?? ''); + $action = $data['action'] ?? ''; + switch ($action) { + case 'update': + $sett->setValue($data['value']); + $sett->save(); + Core::sendJson([ + 'error_code' => 0, + 'message' => 'Successfully updated' + ]); + break; + default: + throw new SoftException('Unknown action. The only valid value is "update".'); + } + return; + } + } + } catch (RuntimeException $e) { + Core::sendJson(ErrorHandler::exceptionResult($e)); + return; + } +} elseif (Core::method() == 'GET') { + Core::sendHtml(); + return; +} + +Core::sendBad(); diff --git a/root/opt/dmarc-srg/status.php b/root/opt/dmarc-srg/status.php new file mode 100644 index 0000000..81fccf4 --- /dev/null +++ b/root/opt/dmarc-srg/status.php @@ -0,0 +1,60 @@ +. + */ + +namespace Liuch\DmarcSrg; + +use Liuch\DmarcSrg\ErrorHandler; +use Liuch\DmarcSrg\Settings\SettingsList; +use Liuch\DmarcSrg\Exception\RuntimeException; + +require 'init.php'; + +if (Core::isJson()) { + if (Core::method() == 'GET') { + try { + Core::instance()->auth()->isAllowed(); + + $result = Core::instance()->status()->get(); + if (!($result['error_code'] ?? 0)) { + $settings_query = $_GET['settings'] ?? ''; + if (!empty($settings_query)) { + $settings = []; + foreach (explode(',', $settings_query) as $name) { + $setting = SettingsList::getSettingByName($name); + $settings[$name] = $setting->value(); + } + $result['settings'] = $settings; + } + } + Core::sendJson($result); + } catch (RuntimeException $e) { + $r = ErrorHandler::exceptionResult($e); + if ($e->getCode() == -2) { + $r['authenticated'] = 'no'; + } + Core::sendJson($r); + } + return; + } +} + +Core::sendBad(); diff --git a/root/opt/dmarc-srg/summary.php b/root/opt/dmarc-srg/summary.php new file mode 100644 index 0000000..65244ae --- /dev/null +++ b/root/opt/dmarc-srg/summary.php @@ -0,0 +1,93 @@ +. + * + * ========================= + * + * This script is to get summary report via the web interface + * + * HTTP GET query: + * when the header 'Accept' is 'application/json': + * if parameter `mode` is `options`, it returs data for the report options dialog; + * if parameter `mode` is `report`, it returns report data for the specified domain and period + * otherwise: + * it returns the content of the index.html file + * Other HTTP methods: + * it returns an error + * + * All the data is in json format. + * + * @category Web + * @package DmarcSrg + * @author Aleksey Andreev (liuch) + * @license https://www.gnu.org/licenses/gpl-3.0.html GNU/GPLv3 + */ + +namespace Liuch\DmarcSrg; + +use Liuch\DmarcSrg\ErrorHandler; +use Liuch\DmarcSrg\Domains\Domain; +use Liuch\DmarcSrg\Domains\DomainList; +use Liuch\DmarcSrg\Report\SummaryReport; +use Liuch\DmarcSrg\Exception\SoftException; +use Liuch\DmarcSrg\Exception\RuntimeException; + +require 'init.php'; + +if (Core::isJson() && isset($_GET['mode'])) { + try { + Core::instance()->auth()->isAllowed(); + + $mode = $_GET['mode']; + if ($mode === 'options') { + Core::sendJson( + [ + 'domains' => (new DomainList())->names() + ] + ); + return; + } elseif ($mode === 'report') { + if (empty($_GET['domain'])) { + throw new SoftException('Parameter "domain" is not specified'); + } + if (empty($_GET['period'])) { + throw new SoftException('Parameter "period" is not specified'); + } + $report = (new SummaryReport($_GET['period']))->setDomain(new Domain($_GET['domain'])); + if (($_GET['format'] ?? '') === 'raw') { + $res = [ 'data' => $report->toArray() ]; + } else { + $res = [ 'text' => $report->text() ]; + } + Core::sendJson($res); + return; + } else { + throw new SoftException('The `mode` parameter can only be `options` or `report`'); + } + } catch (RuntimeException $e) { + Core::sendJson(ErrorHandler::exceptionResult($e)); + return; + } +} elseif (Core::method() == 'GET') { + Core::sendHtml(); + return; +} + +Core::sendBad(); diff --git a/root/opt/dmarc-srg/tests/classes/AuthTest.php b/root/opt/dmarc-srg/tests/classes/AuthTest.php new file mode 100644 index 0000000..6fc4fb0 --- /dev/null +++ b/root/opt/dmarc-srg/tests/classes/AuthTest.php @@ -0,0 +1,142 @@ +coreWithConfigValue('admin/password', null); + $this->assertFalse((new Auth($core))->isEnabled()); + } + + public function testIsEnabledWithPassword(): void + { + $core = $this->coreWithConfigValue('admin/password', 'some'); + $this->assertTrue((new Auth($core))->isEnabled()); + } + + public function testCorrectAdminPassword(): void + { + $core = $this->coreWithConfigValue('admin/password', 'some'); + $this->assertNull((new Auth($core))->checkAdminPassword('some')); + } + + public function testWrongAdminPassword(): void + { + $this->expectException(AuthException::class); + $this->expectExceptionMessage('Incorrect password'); + $core = $this->coreWithConfigValue('admin/password', 'some'); + (new Auth($core))->checkAdminPassword('fake'); + } + + public function testEmptyAdminPassword(): void + { + $core = $this->getMockBuilder(Core::class) + ->disableOriginalConstructor() + ->setMethods([ 'config', 'userId' ]) + ->getMock(); + $core->expects($this->once()) + ->method('config') + ->with($this->equalTo('admin/password')) + ->willReturn('some'); + $core->expects($this->never()) + ->method('userId'); + $this->expectException(AuthException::class); + $this->expectExceptionMessage('Incorrect password'); + (new Auth($core))->checkAdminPassword(''); + } + + public function testCorrectLogin(): void + { + $core = $this->getMockBuilder(Core::class) + ->disableOriginalConstructor() + ->setMethods([ 'config', 'userId' ]) + ->getMock(); + $core->expects($this->exactly(2)) + ->method('config') + ->with($this->equalTo('admin/password')) + ->willReturn('some'); + $core->expects($this->once()) + ->method('userId') + ->with($this->equalTo(0)); + $result = (new Auth($core))->login('', 'some'); + $this->assertIsArray($result); + $this->assertSame(0, $result['error_code']); + $this->assertSame('Authentication succeeded', $result['message']); + } + + public function testLogout(): void + { + $core = $this->getMockBuilder(Core::class) + ->disableOriginalConstructor() + ->setMethods([ 'destroySession' ]) + ->getMock(); + $core->expects($this->once()) + ->method('destroySession'); + $result = (new Auth($core))->logout(); + $this->assertArrayHasKey('error_code', $result); + $this->assertArrayHasKey('message', $result); + $this->assertEquals(0, $result['error_code']); + $this->assertEquals('Logged out successfully', $result['message']); + } + + public function testIsAllowedWhenAuthDisabled(): void + { + $core = $this->getMockBuilder(Core::class) + ->disableOriginalConstructor() + ->setMethods([ 'config', 'userId' ]) + ->getMock(); + $core->expects($this->once()) + ->method('config') + ->with($this->equalTo('admin/password')) + ->willReturn(null); + $core->expects($this->never()) + ->method('userId'); + $this->assertNull((new Auth($core))->isAllowed()); + } + + public function testIsAllowedWithActiveSession(): void + { + $core = $this->getMockBuilder(Core::class) + ->disableOriginalConstructor() + ->setMethods([ 'config', 'userId' ]) + ->getMock(); + $core->expects($this->once()) + ->method('config') + ->with($this->equalTo('admin/password')) + ->willReturn('some'); + $core->expects($this->once()) + ->method('userId') + ->willReturn(0); + $this->assertNull((new Auth($core))->isAllowed()); + } + + public function testIsAllowedWithoutSession(): void + { + $core = $this->getMockBuilder(Core::class) + ->disableOriginalConstructor() + ->setMethods([ 'config', 'userId' ]) + ->getMock(); + $core->expects($this->once()) + ->method('config') + ->with($this->equalTo('admin/password')) + ->willReturn('some'); + $core->expects($this->once()) + ->method('userId') + ->willReturn(false); + $this->expectException(AuthException::class); + $this->expectExceptionCode(-2); + $this->expectExceptionMessage('Authentication needed'); + (new Auth($core))->isAllowed(); + } + + private function coreWithConfigValue(string $key, $value) + { + $core = $this->getMockBuilder(Core::class)->disableOriginalConstructor()->setMethods([ 'config' ])->getMock(); + $core->expects($this->once())->method('config')->with($this->equalTo($key))->willReturn($value); + return $core; + } +} diff --git a/root/opt/dmarc-srg/tests/classes/CommonTest.php b/root/opt/dmarc-srg/tests/classes/CommonTest.php new file mode 100644 index 0000000..18b9348 --- /dev/null +++ b/root/opt/dmarc-srg/tests/classes/CommonTest.php @@ -0,0 +1,22 @@ +assertCount(3, Common::$align_res); + $this->assertEquals('fail', Common::$align_res[0]); + $this->assertEquals('unknown', Common::$align_res[1]); + $this->assertEquals('pass', Common::$align_res[2]); + } + + public function testDispositionArray(): void + { + $this->assertCount(3, Common::$disposition); + $this->assertEquals('reject', Common::$disposition[0]); + $this->assertEquals('quarantine', Common::$disposition[1]); + $this->assertEquals('none', Common::$disposition[2]); + } +} diff --git a/root/opt/dmarc-srg/tests/classes/ConfigTest.php b/root/opt/dmarc-srg/tests/classes/ConfigTest.php new file mode 100644 index 0000000..cb1bee4 --- /dev/null +++ b/root/opt/dmarc-srg/tests/classes/ConfigTest.php @@ -0,0 +1,93 @@ +conf = new Config('tests/conf_test_file.php'); + } + + public function testEmptyName(): void + { + $this->expectException(LogicException::class); + $this->conf->get(''); + } + + public function testNestedEmptyName(): void + { + $this->expectException(LogicException::class); + $this->expectExceptionMessage('Incorrect '); + $this->conf->get('cleaner/'); + } + + public function testNotAllowedName(): void + { + $this->assertNull($this->conf->get('some')); + $this->assertEquals(1, $this->conf->get('some', 1)); + } + + public function testNonexistentParameter(): void + { + $this->assertNull($this->conf->get('unknown')); + $this->assertNull($this->conf->get('unknown', null)); + $this->assertFalse($this->conf->get('unknown', false)); + $this->assertSame(0, $this->conf->get('unknown', 0)); + $this->assertSame('', $this->conf->get('unknown', '')); + $array = $this->conf->get('unknown', []); + $this->assertIsArray($array); + $this->assertEmpty($array); + } + + public function testBoolParameter(): void + { + $this->assertSame(false, $this->conf->get('debug')); + } + + public function testIntParameter(): void + { + $this->assertSame(0, $this->conf->get('database')); + } + + public function testStringParameter(): void + { + $this->assertSame('', $this->conf->get('mailboxes')); + } + + public function testNullParameter(): void + { + $this->assertNull($this->conf->get('directories')); + } + + public function testArrayParameter(): void + { + $array = $this->conf->get('admin'); + $this->assertIsArray($array); + $this->assertEmpty($array); + } + + public function testArrayKeyIntParameter(): void + { + $this->assertSame(0, $this->conf->get('cleaner/key_int')); + } + + public function testArrayKeyBoolParameter(): void + { + $this->assertFalse($this->conf->get('cleaner/key_bool')); + } + + public function testArrayKeyStringParameter(): void + { + $this->assertSame('', $this->conf->get('cleaner/key_string')); + } + + public function testArrayKeyNonexistentParameter(): void + { + $this->assertSame('default', $this->conf->get('cleaner/key_some', 'default')); + } +} diff --git a/root/opt/dmarc-srg/tests/classes/CoreTest.php b/root/opt/dmarc-srg/tests/classes/CoreTest.php new file mode 100644 index 0000000..350a909 --- /dev/null +++ b/root/opt/dmarc-srg/tests/classes/CoreTest.php @@ -0,0 +1,94 @@ +core = Core::instance(); + } + + public function testSelfInstance(): void + { + $this->assertSame($this->core, Core::instance()); + } + + public function testRequestMethod(): void + { + $_SERVER['REQUEST_METHOD'] = 'some_method'; + $this->assertSame('some_method', $this->core->method()); + } + + public function testSendHtml(): void + { + ob_start(); + $this->core->sendHtml(); + $output = ob_get_contents(); + ob_end_clean(); + $this->assertIsString($output); + $this->assertStringEqualsFile('index.html', $output); + } + + /** + * @runInSeparateProcess + */ + public function testSendJson(): void + { + $data = [ 'key1' => 'value1', [ 'key2' => 'value2' ] ]; + ob_start(); + $this->core->sendJson($data); + $output = ob_get_contents(); + ob_end_clean(); + $this->assertJsonStringEqualsJsonString(json_encode($data), $output); + } + + public function testAuthInstance(): void + { + $this->assertSame($this->core->auth(), $this->core->auth()); + } + + public function testStatusInstance(): void + { + $this->assertSame($this->core->status(), $this->core->status()); + } + + public function testAdminIntance(): void + { + $this->assertSame($this->core->admin(), $this->core->admin()); + } + + public function testErrorHandlerInstance(): void + { + $this->assertSame($this->core->errorHandler(), $this->core->errorHandler()); + } + + public function testLoggerInstance(): void + { + $this->assertSame($this->core->logger(), $this->core->logger()); + } + + public function testConfigExistingParameters(): void + { + $config = $this->getMockBuilder(Config::class) + ->disableOriginalConstructor() + ->setMethods([ 'get' ]) + ->getMock(); + $config->expects($this->once()) + ->method('get') + ->with($this->equalTo('some/param'), $this->equalTo('default')) + ->willReturn('some_value'); + $core = new Core([ 'config' => $config ]); + $this->assertSame('some_value', $core->config('some/param', 'default')); + } + + public function testConfigNonexistentParameters(): void + { + $core = new Core([ 'config' => [ 'Liuch\DmarcSrg\Config', [ 'tests/conf_test_file.php' ] ] ]); + $config = new Config('tests/conf_test_file.php'); + $this->assertNull($core->config('some_unknown_parameter')); + $this->assertIsString($core->config('some_unknown_parameter', '')); + } +} diff --git a/root/opt/dmarc-srg/tests/classes/Database/DatabaseControllerTest.php b/root/opt/dmarc-srg/tests/classes/Database/DatabaseControllerTest.php new file mode 100644 index 0000000..03f9eee --- /dev/null +++ b/root/opt/dmarc-srg/tests/classes/Database/DatabaseControllerTest.php @@ -0,0 +1,133 @@ +getCoreWithSettings([])); + $this->assertSame('', $ctl->type()); + $ctl = new DatabaseController($this->getCoreWithSettings([ 'type' => 'dbType' ])); + $this->assertSame('dbType', $ctl->type()); + } + + public function testGettingName(): void + { + $ctl = new DatabaseController($this->getCoreWithSettings([])); + $this->assertSame('', $ctl->name()); + $ctl = new DatabaseController($this->getCoreWithSettings([ 'name' => 'dbName' ])); + $this->assertSame('dbName', $ctl->name()); + } + + public function testGettingLocation(): void + { + $ctl = new DatabaseController($this->getCoreWithSettings([])); + $this->assertSame('', $ctl->location()); + $ctl = new DatabaseController($this->getCoreWithSettings([ 'host' => 'dbLocation' ])); + $this->assertSame('dbLocation', $ctl->location()); + } + + public function testGettingState(): void + { + $callback = function () { + return [ + 'someParam' => 'someValue', + 'correct' => true, + 'version' => DatabaseController::REQUIRED_VERSION + ]; + }; + $ctl = new DatabaseController( + $this->getCoreWithSettings([ + 'type' => 'dbType', + 'name' => 'dbName', + 'host' => 'dbLocation' + ]), + $this->getConnector('state', $callback) + ); + $res = $ctl->state(); + $this->assertIsArray($res); + $this->assertTrue($res['correct']); + $this->assertFalse($res['needs_upgrade'] ?? false); + $this->assertSame('someValue', $res['someParam']); + $this->assertSame('dbType', $res['type']); + $this->assertSame('dbName', $res['name']); + $this->assertSame('dbLocation', $res['location']); + } + + public function testGettingStateNeedsUpgrating(): void + { + $callback1 = function () { + return [ 'correct' => true ]; + }; + $callback2 = function () { + return [ 'correct' => false ]; + }; + + $ctl = new DatabaseController($this->getCoreWithSettings([]), $this->getConnector('state', $callback1)); + $res = $ctl->state(); + $this->assertFalse($res['correct']); + $this->assertTrue($res['needs_upgrade']); + $this->assertArrayHasKey('message', $res); + + $ctl = new DatabaseController($this->getCoreWithSettings([]), $this->getConnector('state', $callback2)); + $res = $ctl->state(); + $this->assertFalse($res['correct']); + $this->assertFalse($res['needs_upgrade'] ?? false); + } + + public function testInitDb(): void + { + $callback = function () { + }; + $ctl = new DatabaseController($this->getCoreWithSettings([]), $this->getConnector('initDb', $callback)); + $res = $ctl->initDb(); + $this->assertIsArray($res); + $this->assertSame(0, $res['error_code'] ?? 0); + $this->assertArrayHasKey('message', $res); + } + + public function testCleanDb(): void + { + $callback = function () { + }; + $ctl = new DatabaseController($this->getCoreWithSettings([]), $this->getConnector('cleanDb', $callback)); + $res = $ctl->cleanDb(); + $this->assertIsArray($res); + $this->assertSame(0, $res['error_code'] ?? 0); + $this->assertArrayHasKey('message', $res); + } + + public function testGettingMapper(): void + { + $callback = function ($param) { + $this->assertSame('mapperId', $param); + return new \StdClass(); + }; + $ctl = new DatabaseController($this->getCoreWithSettings([]), $this->getConnector('getMapper', $callback)); + $ctl->getMapper('mapperId'); + } + + private function getCoreWithSettings($data): object + { + $core = $this->createMock(Core::class); + $core->expects($this->once()) + ->method('config') + ->with('database') + ->willReturn($data); + return $core; + } + + private function getConnector(string $method, $callback): object + { + $con = $this->getMockBuilder(\StdClass::class) + ->setMethods([ $method ]) + ->getMock(); + $con->expects($this->once()) + ->method($this->equalTo($method)) + ->willReturnCallback($callback); + return $con; + } +} diff --git a/root/opt/dmarc-srg/tests/classes/DateTimeTest.php b/root/opt/dmarc-srg/tests/classes/DateTimeTest.php new file mode 100644 index 0000000..dbffe6e --- /dev/null +++ b/root/opt/dmarc-srg/tests/classes/DateTimeTest.php @@ -0,0 +1,31 @@ +assertJsonStringEqualsJsonString( + '[ "2022-10-15T18:35:20+00:00" ]', + \json_encode([ new DateTime('2022-10-15 18:35:20') ]) + ); + } + + public function testUnixTimestampJsonSerialize(): void + { + $this->assertJsonStringEqualsJsonString( + '[ "1970-01-01T00:00:01+00:00" ]', + \json_encode([ new DateTime('@1') ]) + ); + } + + public function testCurrentTimeJsonSerialize(): void + { + $now = new DateTime(); + $this->assertJsonStringEqualsJsonString( + " [ \"{$now->format(\DateTime::ATOM)}\" ]", + \json_encode([ $now ]) + ); + } +} diff --git a/root/opt/dmarc-srg/tests/classes/Domains/DomainListTest.php b/root/opt/dmarc-srg/tests/classes/Domains/DomainListTest.php new file mode 100644 index 0000000..6a8942a --- /dev/null +++ b/root/opt/dmarc-srg/tests/classes/Domains/DomainListTest.php @@ -0,0 +1,56 @@ + 1, 'fqdn' => 'example.org' ], + [ 'id' => 2, 'fqdn' => 'example.net' ], + [ 'id' => 3, 'fqdn' => 'example.com' ] + ]; + $result = (new DomainList($this->getDbMapperOnce('list', $data)))->getList(); + $this->assertSame(false, $result['more']); + $list = $result['domains']; + $this->assertSame(count($data), count($list)); + $this->assertContainsOnlyInstancesOf(Domain::class, $list); + foreach ($list as $key => $dom) { + $di = $data[$key]; + $this->assertSame($di['id'], $dom->id()); + $this->assertSame($di['fqdn'], $dom->fqdn()); + } + } + + public function testGettingNames(): void + { + $names = [ 'example.org', 'example.net', 'example.com' ]; + $this->assertSame($names, (new DomainList($this->getDbMapperOnce('names', $names)))->names()); + } + + private function getDbMapperOnce(string $method, $value): object + { + $mapper = $this->getMockBuilder(DomainMapperInterface::class) + ->disableOriginalConstructor() + ->setMethods([ $method ]) + ->getMockForAbstractClass(); + $mapper->expects($this->once()) + ->method($method) + ->willReturnCallback(function () use ($value) { + return $value; + }); + + $db = $this->getMockBuilder(\StdClass::class) + ->setMethods([ 'getMapper' ]) + ->getMock(); + $db->method('getMapper') + ->with('domain') + ->willReturn($mapper); + return $db; + } +} diff --git a/root/opt/dmarc-srg/tests/classes/Domains/DomainTest.php b/root/opt/dmarc-srg/tests/classes/Domains/DomainTest.php new file mode 100644 index 0000000..a953938 --- /dev/null +++ b/root/opt/dmarc-srg/tests/classes/Domains/DomainTest.php @@ -0,0 +1,162 @@ +expectException(LogicException::class); + new Domain(true, $this->getDbMapperNever()); + } + + public function testConstructorEmptyFqdn(): void + { + $this->expectException(SoftException::class); + new Domain('', $this->getDbMapperNever()); + } + + public function testConstructorFqdnIsDot(): void + { + $this->expectException(SoftException::class); + new Domain('.', $this->getDbMapperNever()); + } + + public function testConstructorFqdnEndWithDot(): void + { + $this->assertSame('example.org', (new Domain('example.org.', $this->getDbMapperNever()))->fqdn()); + $this->assertSame('example.org', (new Domain([ 'fqdn' => 'example.org.' ], $this->getDbMapperNever()))->fqdn()); + } + + public function testConstructorIncorrectArrayData(): void + { + $data = [ + 'active' => true, + 'description' => 'Descr', + 'created_time' => new DateTime(), + 'updated_time' => new DateTime() + ]; + $this->expectException(LogicException::class); + new Domain($data, $this->getDbMapperNever()); + } + + public function testExists(): void + { + $this->assertSame(false, (new Domain(1, $this->getDbMapperOnce('exists', '', false)))->exists()); + $this->assertSame(true, (new Domain(1, $this->getDbMapperOnce('exists', '', true)))->exists()); + } + + public function testId(): void + { + $this->assertSame(1, (new Domain(1, $this->getDbMapperNever()))->id()); + $this->assertSame(1, (new Domain([ 'id' => 1 ], $this->getDbMapperNever()))->id()); + $this->assertSame(1, (new Domain([ 'fqdn' => 'example.org' ], $this->getDbMapperOnce('fetch', 'id', 1)))->id()); + } + + public function testFqdn(): void + { + $this->assertSame( + 'example.org', + (new Domain('example.org', $this->getDbMapperNever()))->fqdn() + ); + $this->assertSame( + 'example.org', + (new Domain([ 'fqdn' => 'example.org' ], $this->getDbMapperNever()))->fqdn() + ); + $this->assertSame( + 'example.org', + (new Domain(1, $this->getDbMapperOnce('fetch', 'fqdn', 'example.org')))->fqdn() + ); + } + + public function testActive(): void + { + $this->assertSame(true, (new Domain([ 'id' => 1, 'active' => true ], $this->getDbMapperNever()))->active()); + $this->assertSame(true, (new Domain(1, $this->getDbMapperOnce('fetch', 'active', true)))->active()); + } + + public function testDescription(): void + { + $this->assertSame( + 'Descr', + (new Domain( + [ 'id'=> 1, 'fqdn' => 'example.org', 'description' => 'Descr' ], + $this->getDbMapperNever() + ))->description() + ); + $this->assertSame( + 'Descr', + (new Domain(1, $this->getDbMapperOnce('fetch', 'description', 'Descr')))->description() + ); + } + + public function testToArray(): void + { + $data_in = [ + 'id' => 1, + 'fqdn' => 'example.org', + 'active' => true, + 'description' => 'Descr', + 'created_time' => new DateTime(), + 'updated_time' => new DateTime() + ]; + $data_out = $data_in; + unset($data_out['id']); + $this->assertSame($data_out, (new Domain($data_in, $this->getDbMapperNever()))->toArray()); + (new Domain([ 'id' => 1 ], $this->getDbMapperOnce('fetch', '', null)))->toArray(); + (new Domain([ 'fqdn' => 'example.org' ], $this->getDbMapperOnce('fetch', '', null)))->toArray(); + } + + public function testSave(): void + { + (new Domain(1, $this->getDbMapperOnce('save', '', null)))->save(); + } + + public function testDelete(): void + { + (new Domain(1, $this->getDbMapperOnce('delete', '', null)))->delete(); + } + + private function getDbMapperNever(): object + { + $db = $this->getMockBuilder(DatabaseController::class) + ->disableOriginalConstructor() + ->setMethods([ 'getMapper' ]) + ->getMock(); + $db->expects($this->never()) + ->method('getMapper'); + return $db; + } + + private function getDbMapperOnce(string $method, string $key, $value): object + { + $mapper = $this->getMockBuilder(DomainMapperInterface::class) + ->disableOriginalConstructor() + ->setMethods([ $method ]) + ->getMockForAbstractClass(); + $mapper->expects($this->once()) + ->method($method) + ->willReturnCallback(function (&$data) use ($key, $value) { + if (!empty($key)) { + $data[$key] = $value; + } + return $value; + }); + + $db = $this->getMockBuilder(DatabaseController::class) + ->disableOriginalConstructor() + ->setMethods([ 'getMapper' ]) + ->getMock(); + $db->method('getMapper') + ->with('domain') + ->willReturn($mapper); + return $db; + } +} diff --git a/root/opt/dmarc-srg/tests/classes/Exception/DatabaseExceptionFactoryTest.php b/root/opt/dmarc-srg/tests/classes/Exception/DatabaseExceptionFactoryTest.php new file mode 100644 index 0000000..6c79108 --- /dev/null +++ b/root/opt/dmarc-srg/tests/classes/Exception/DatabaseExceptionFactoryTest.php @@ -0,0 +1,49 @@ +checkException($e, 'Database access denied', $o); + + $o = new \PDOException('', 1045); + $e = DatabaseExceptionFactory::fromException($o); + $this->checkException($e, 'Database access denied', $o); + } + + public function testWhenDatabaseConnectionError(): void + { + $o = new \PDOException('', 2002); + $e = DatabaseExceptionFactory::fromException($o); + $this->checkException($e, 'Database connection error', $o); + + $o = new \PDOException('', 2006); + $e = DatabaseExceptionFactory::fromException($o); + $this->checkException($e, 'Database connection error', $o); + } + + public function testUnknownException(): void + { + $o = new \Exception('', 1044); + $e = DatabaseExceptionFactory::fromException($o); + $this->checkException($e, 'Database error', $o); + + $o = new \Exception('Some error'); + $e = DatabaseExceptionFactory::fromException($o); + $this->checkException($e, 'Database error', $o); + } + + private function checkException($e, $m, $o): void + { + $this->assertSame('Liuch\DmarcSrg\Exception\DatabaseException', get_class($e)); + $this->assertSame(-1, $e->getCode()); + $this->assertSame($m, $e->getMessage()); + $this->assertSame($o, $e->getPrevious()); + } +} diff --git a/root/opt/dmarc-srg/tests/classes/Exception/RuntimeExceptionTest.php b/root/opt/dmarc-srg/tests/classes/Exception/RuntimeExceptionTest.php new file mode 100644 index 0000000..26118ed --- /dev/null +++ b/root/opt/dmarc-srg/tests/classes/Exception/RuntimeExceptionTest.php @@ -0,0 +1,16 @@ +assertSame(-1, (new RuntimeException())->getCode()); + $this->assertSame(0, (new RuntimeException('', 0))->getCode()); + $this->assertSame(-1, (new RuntimeException('', -1))->getCode()); + $this->assertSame(77, (new RuntimeException('', 77))->getCode()); + } +} diff --git a/root/opt/dmarc-srg/tests/classes/Mail/MailBodyTest.php b/root/opt/dmarc-srg/tests/classes/Mail/MailBodyTest.php new file mode 100644 index 0000000..25e09bb --- /dev/null +++ b/root/opt/dmarc-srg/tests/classes/Mail/MailBodyTest.php @@ -0,0 +1,77 @@ +text = [ 'text string' ]; + $this->html = [ 'html string' ]; + } + + public function testTextContentType(): void + { + $body = new MailBody(); + $body->setText($this->text); + $this->assertSame('text/plain; charset=utf-8', $body->contentType()); + } + + public function testHtmlContentType(): void + { + $body = new MailBody(); + $body->setHtml($this->html); + $this->assertSame('text/html; charset=utf-8', $body->contentType()); + } + + public function testMultipartContentType(): void + { + $body = new MailBody(); + $body->setText($this->text); + $body->setHtml($this->html); + $this->assertStringStartsWith('multipart/alternative; boundary=', $body->contentType()); + } + + public function testTextContent(): void + { + $body = new MailBody(); + $body->setText($this->text); + $content = $body->content(); + $this->assertCount(1, $content); + $this->assertSame('text string', $content[0]); + } + + public function testHtmlContent(): void + { + $body = new MailBody(); + $body->setText($this->html); + $content = $body->content(); + $this->assertCount(1, $content); + $this->assertSame('html string', $content[0]); + } + + public function testMultipartContent(): void + { + $body = new MailBody(); + $body->setText($this->text); + $body->setHtml($this->html); + $boundary = substr($body->contentType(), 33, -1); + $content = $body->content(); + $this->assertCount(10, $content); + $this->assertSame('--' . $boundary, $content[0]); + $this->assertSame('Content-Type: text/plain; charset=utf-8', $content[1]); + $this->assertSame('Content-Transfer-Encoding: 7bit', $content[2]); + $this->assertSame('', $content[3]); + $this->assertSame('text string', $content[4]); + $this->assertSame('--' . $boundary, $content[5]); + $this->assertSame('Content-Type: text/html; charset=utf-8', $content[6]); + $this->assertSame('Content-Transfer-Encoding: 7bit', $content[7]); + $this->assertSame('', $content[8]); + $this->assertSame('html string', $content[9]); + } +} diff --git a/root/opt/dmarc-srg/tests/classes/ReportLog/ReportLogItemTest.php b/root/opt/dmarc-srg/tests/classes/ReportLog/ReportLogItemTest.php new file mode 100644 index 0000000..fd13c45 --- /dev/null +++ b/root/opt/dmarc-srg/tests/classes/ReportLog/ReportLogItemTest.php @@ -0,0 +1,175 @@ +getReportMock([ 'domain' => 'example.org', 'external_id' => 'rrggoo' ]), + 'filename.gz', + 'Success!', + $this->getDbMapperNever() + ); + $this->assertTrue($rli->toArray()['success']); + } + + public function testForFailed(): void + { + $rli = ReportLogItem::failed( + Source::SOURCE_UPLOADED_FILE, + null, + null, + 'Failed!', + $this->getDbMapperNever() + ); + $this->assertFalse($rli->toArray()['success']); + } + + public function testGettingById(): void + { + $callback = function (&$data) { + $data['source'] = Source::SOURCE_MAILBOX; + $this->assertSame(55, $data['id']); + }; + ReportLogItem::byId(55, $this->getDbMapperOnce('fetch', $callback)); + } + + public function testGettingByIdNotFound(): void + { + $callback = function (&$data) { + throw new DatabaseNotFoundException(); + }; + $this->expectException(SoftException::class); + ReportLogItem::byId(55, $this->getDbMapperOnce('fetch', $callback)); + } + + public function testSourceToString(): void + { + $this->assertSame('uploaded_file', ReportLogItem::sourceToString(Source::SOURCE_UPLOADED_FILE)); + $this->assertSame('email', ReportLogItem::sourceToString(Source::SOURCE_MAILBOX)); + $this->assertSame('directory', ReportLogItem::sourceToString(Source::SOURCE_DIRECTORY)); + $this->assertSame('', ReportLogItem::sourceToString(-111)); + } + + public function testToArray(): void + { + $sdata = [ + 'id' => 66, + 'domain' => 'example.org', + 'external_id' => 'gg44dd', + 'event_time' => new \DateTime(), + 'filename' => 'filename.zip', + 'source' => Source::SOURCE_DIRECTORY, + 'success' => true, + 'message' => 'Message!' + ]; + $callback = function (&$data) use ($sdata) { + foreach ($sdata as $key => $value) { + $data[$key] = $value; + } + }; + $sdata['source'] = ReportLogItem::sourceToString($sdata['source']); + $this->assertSame($sdata, ReportLogItem::byId(66, $this->getDbMapperOnce('fetch', $callback))->toArray()); + } + + public function testSaving(): void + { + $callback1 = function ($data) { + $this->assertSame( + [ + 'id' => null, + 'domain' => 'example.org', + 'external_id' => 'xxvvbb', + 'event_time' => null, + 'filename' => 'filename.xml', + 'source' => Source::SOURCE_MAILBOX, + 'success' => true, + 'message' => 'Success!' + ], + $data + ); + }; + $callback2 = function ($data) { + $this->assertSame( + [ + 'id' => null, + 'domain' => null, + 'external_id' => null, + 'event_time' => null, + 'filename' => null, + 'source' => Source::SOURCE_UPLOADED_FILE, + 'success' => false, + 'message' => 'Failed!' + ], + $data + ); + }; + + $rli = ReportLogItem::success( + Source::SOURCE_MAILBOX, + $this->getReportMock([ 'domain' => 'example.org', 'external_id' => 'xxvvbb' ]), + 'filename.xml', + 'Success!', + $this->getDbMapperOnce('save', $callback1) + ); + $rli->save(); + + $rli = ReportLogItem::failed( + Source::SOURCE_UPLOADED_FILE, + null, + null, + 'Failed!', + $this->getDbMapperOnce('save', $callback2) + ); + $rli->save(); + } + + private function getReportMock($data): object + { + $mock = $this->createMock(Report::class); + $mock->method('get') + ->willReturn($data); + + return $mock; + } + + private function getDbMapperOnce(string $method, $callback): object + { + $mapper = $this->getMockBuilder(ReportLogMapperInterface::class) + ->disableOriginalConstructor() + ->setMethods([ $method ]) + ->getMockForAbstractClass(); + $mapper->expects($this->once()) + ->method($method) + ->willReturnCallback($callback); + + $db = $this->getMockBuilder(\StdClass::class) + ->setMethods([ 'getMapper' ]) + ->getMock(); + $db->method('getMapper') + ->with('report-log') + ->willReturn($mapper); + + return $db; + } + + private function getDbMapperNever(): object + { + $db = $this->getMockBuilder(\StdClass::class) + ->setMethods([ 'getMapper' ]) + ->getMock(); + $db->expects($this->never()) + ->method('getMapper'); + return $db; + } +} diff --git a/root/opt/dmarc-srg/tests/classes/ReportLog/ReportLogTest.php b/root/opt/dmarc-srg/tests/classes/ReportLog/ReportLogTest.php new file mode 100644 index 0000000..a1c8968 --- /dev/null +++ b/root/opt/dmarc-srg/tests/classes/ReportLog/ReportLogTest.php @@ -0,0 +1,163 @@ +sub(new \DateInterval('P10D')); + self::$till = new \DateTime(); + } + + public static function tearDownAfterClass(): void + { + self::$from = null; + self::$till = null; + } + + public function testRange(): void + { + $callback = function ($filter, $order, $limit) { + $this->assertSame([ 'from_time' => self::$from, 'till_time' => self::$till ], $filter); + $this->assertSame(11, $limit['offset']); + return []; + }; + $rl = new ReportLog(self::$from, self::$till, $this->getDbMapperOnce('list', $callback)); + $rl->getList(11); + } + + public function testSettingOrder(): void + { + $callback_ascent = function ($filter, $order, $limit) { + $this->assertSame([ 'direction' => 'ascent' ], $order); + return []; + }; + $callback_descent = function ($filter, $order, $limit) { + $this->assertSame([ 'direction' => 'descent' ], $order); + return []; + }; + + $rl = new ReportLog(self::$from, self::$till, $this->getDbMapperOnce('list', $callback_ascent)); + $rl->getList(0); + + $rl = new ReportLog(self::$from, self::$till, $this->getDbMapperOnce('list', $callback_ascent)); + $rl->setOrder(ReportLog::ORDER_ASCENT); + $rl->getList(0); + + $rl = new ReportLog(self::$from, self::$till, $this->getDbMapperOnce('list', $callback_descent)); + $rl->setOrder(ReportLog::ORDER_DESCENT); + $rl->getList(0); + } + + public function testSettingMaxCount(): void + { + $callback26 = function ($filter, $order, $limit) { + $this->assertSame(26, $limit['count']); + return []; + }; + $callback51 = function ($filter, $order, $limit) { + $this->assertSame(51, $limit['count']); + return []; + }; + + $rl = new ReportLog(self::$from, self::$till, $this->getDbMapperOnce('list', $callback26)); + $rl->getList(0); + + $rl = new ReportLog(self::$from, self::$till, $this->getDbMapperOnce('list', $callback51)); + $rl->setMaxCount(50); + $rl->getList(0); + } + + public function testGettingCount(): void + { + $callback = function ($filter, $limit) { + $this->assertSame([ 'from_time' => self::$from, 'till_time' => self::$till ], $filter); + $this->assertSame([ 'offset' => 0, 'count' => 44 ], $limit); + return 55; + }; + $rl = new ReportLog(self::$from, self::$till, $this->getDbMapperOnce('count', $callback)); + $rl->setMaxCount(44); + $this->assertSame(55, $rl->count()); + } + + public function testGettingList(): void + { + $callback = function () { + return [ + [ + 'id' => 1, + 'domain' => null, + 'external_id' => null, + 'event_time' => null, + 'filename' => null, + 'source' => 0, + 'success' => false, + 'message' => null + ], + [ + 'id' => 2, + 'domain' => null, + 'external_id' => null, + 'event_time' => null, + 'filename' => null, + 'source' => 0, + 'success' => false, + 'message' => null + ] + + ]; + }; + + $rl = new ReportLog(self::$from, self::$till, $this->getDbMapperOnce('list', $callback)); + $rl->setMaxCount(1); + $res = $rl->getList(0); + $this->assertTrue($res['more']); + $this->assertCount(1, $res['items']); + + $rl = new ReportLog(self::$from, self::$till, $this->getDbMapperOnce('list', $callback)); + $rl->setMaxCount(2); + $res = $rl->getList(0); + $this->assertFalse($res['more']); + $this->assertCount(2, $res['items']); + } + + public function testDeleting(): void + { + $callback = function ($filter, $order, $limit) { + $this->assertSame([ 'from_time' => self::$from, 'till_time' => self::$till ], $filter); + $this->assertSame([ 'direction' => 'ascent' ], $order); + $this->assertSame([ 'offset' => 0, 'count' => 33 ], $limit); + }; + $rl = new ReportLog(self::$from, self::$till, $this->getDbMapperOnce('delete', $callback)); + $rl->setOrder(ReportLog::ORDER_ASCENT); + $rl->setMaxCount(33); + $rl->delete(); + } + + private function getDbMapperOnce(string $method, $callback): object + { + $mapper = $this->getMockBuilder(ReportLogMapperInterface::class) + ->disableOriginalConstructor() + ->setMethods([ $method ]) + ->getMockForAbstractClass(); + $mapper->expects($this->once()) + ->method($method) + ->willReturnCallback($callback); + + $db = $this->getMockBuilder(\StdClass::class) + ->setMethods([ 'getMapper' ]) + ->getMock(); + $db->method('getMapper') + ->with('report-log') + ->willReturn($mapper); + + return $db; + } +} diff --git a/root/opt/dmarc-srg/tests/classes/Settings/SettingDefaultValueTest.php b/root/opt/dmarc-srg/tests/classes/Settings/SettingDefaultValueTest.php new file mode 100644 index 0000000..9cce0e7 --- /dev/null +++ b/root/opt/dmarc-srg/tests/classes/Settings/SettingDefaultValueTest.php @@ -0,0 +1,121 @@ + &$props) { + switch ($props['type']) { + case 'string': + $t2 = false; + $val = 0; + $ss = 'Liuch\DmarcSrg\Settings\SettingString'; + break; + case 'integer': + $t2 = true; + $val = ''; + $ss = 'Liuch\DmarcSrg\Settings\SettingInteger'; + break; + case 'select': + $t2 = true; + $val = '0'; + $ss = 'Liuch\DmarcSrg\Settings\SettingStringSelect'; + break; + } + + $cc = new $ss([ 'name' => $name, 'value' => $val ], true, $this->getDbMapperNever()); + $this->assertSame($props['default'], $cc->value(), "Name: {$name}; Constructor Value"); + + if ($t2) { + $cc = new $ss($name, true, $this->getDbMapperOnce($name, $val)); + $this->assertSame($props['default'], $cc->value(), "Name: {$name}; Database Value"); + } + + unset($ss); + } + unset($props); + } + + public function testSettingNotFoundDefaultValue(): void + { + foreach (SettingsList::$schema as $name => &$props) { + switch ($props['type']) { + case 'string': + $cc = new SettingString($name, true, $this->getDbMapperNotFound($name)); + break; + case 'integer': + $cc = new SettingInteger($name, true, $this->getDbMapperNotFound($name)); + break; + case 'select': + $cc = new SettingStringSelect($name, true, $this->getDbMapperNotFound($name)); + break; + } + $cc->value(); + unset($cc); + } + unset($props); + } + + private function getDbMapperNever(): object + { + $db = $this->getMockBuilder(DatabaseController::class) + ->disableOriginalConstructor() + ->setMethods([ 'getMapper' ]) + ->getMock(); + $db->expects($this->never())->method('getMapper'); + return $db; + } + + private function getDbMapperOnce($parameter, $value): object + { + $mapper = $this->getMockBuilder(StdClass::class) + ->disableOriginalConstructor() + ->setMethods([ 'value' ]) + ->getMock(); + $mapper->expects($this->once()) + ->method('value') + ->with($this->equalTo($parameter)) + ->willReturn($value); + + $db = $this->getMockBuilder(DatabaseController::class) + ->disableOriginalConstructor() + ->setMethods([ 'getMapper' ]) + ->getMock(); + $db->expects($this->once()) + ->method('getMapper') + ->willReturn($mapper); + + return $db; + } + + private function getDbMapperNotFound($parameter): object + { + $mapper = $this->getMockBuilder(StdClass::class) + ->disableOriginalConstructor() + ->setMethods([ 'value' ]) + ->getMock(); + $mapper->expects($this->once()) + ->method('value') + ->with($this->equalTo($parameter)) + ->willThrowException(new DatabaseNotFoundException()); + + $db = $this->getMockBuilder(DatabaseController::class) + ->disableOriginalConstructor() + ->setMethods([ 'getMapper' ]) + ->getMock(); + $db->expects($this->once()) + ->method('getMapper') + ->willReturn($mapper); + + return $db; + } +} diff --git a/root/opt/dmarc-srg/tests/classes/Settings/SettingIntegerTest.php b/root/opt/dmarc-srg/tests/classes/Settings/SettingIntegerTest.php new file mode 100644 index 0000000..76bb93d --- /dev/null +++ b/root/opt/dmarc-srg/tests/classes/Settings/SettingIntegerTest.php @@ -0,0 +1,82 @@ +assertSame( + 222, + (new SettingInteger([ + 'name' => 'status.emails-for-last-n-days', + 'value' => 222 + ], false, $this->getDbMapperNever()))->value() + ); + } + + public function testCreatingWithIncorrectValue(): void + { + $this->expectException(SoftException::class); + $this->expectExceptionMessage('Wrong setting data'); + (new SettingInteger([ + 'name' => 'status.emails-for-last-n-days', + 'value' => 'someStringValue' + ], false, $this->getDbMapperNever()))->value(); + } + + public function testCreatingWithIncorrectValueWithIgnoring(): void + { + $this->assertSame( + SettingsList::$schema['status.emails-for-last-n-days']['default'], + (new SettingInteger([ + 'name' => 'status.emails-for-last-n-days', + 'value' => 'incorrectIntegerValue' + ], true, $this->getDbMapperNever()))->value() + ); + } + + public function testGettingValueByName(): void + { + $db = $this->getMockBuilder(DatabaseController::class) + ->disableOriginalConstructor() + ->setMethods([ 'getMapper' ]) + ->getMock(); + $db->expects($this->once()) + ->method('getMapper') + ->with($this->equalTo('setting')) + ->willReturn($this->getDbMapperOnce('value', 'status.emails-for-last-n-days', 333)); + $this->assertSame( + 333, + (new SettingInteger('status.emails-for-last-n-days', false, $db))->value() + ); + } + + private function getDbMapperNever(): object + { + $db = $this->getMockBuilder(DatabaseController::class) + ->disableOriginalConstructor() + ->setMethods([ 'getMapper' ]) + ->getMock(); + $db->expects($this->never())->method('getMapper'); + return $db; + } + + private function getDbMapperOnce(string $method, $parameter, $value): object + { + $mapper = $this->getMockBuilder(StdClass::class) + ->disableOriginalConstructor() + ->setMethods([ $method ]) + ->getMock(); + $mapper->expects($this->once()) + ->method($method) + ->with($this->equalTo($parameter)) + ->willReturn($value); + return $mapper; + } +} diff --git a/root/opt/dmarc-srg/tests/classes/Settings/SettingStringSelectTest.php b/root/opt/dmarc-srg/tests/classes/Settings/SettingStringSelectTest.php new file mode 100644 index 0000000..5aa2488 --- /dev/null +++ b/root/opt/dmarc-srg/tests/classes/Settings/SettingStringSelectTest.php @@ -0,0 +1,103 @@ +assertSame( + 'auto', + (new SettingStringSelect([ + 'name' => 'ui.datetime.offset', + 'value' => 'auto' + ], false, $this->getDbMapperNever()))->value() + ); + } + + public function testCreatingWithIncorrectValueType(): void + { + $this->expectException(SoftException::class); + $this->expectExceptionMessage('Wrong setting data'); + (new SettingStringSelect([ + 'name' => 'ui.datetime.offset', + 'value' => 333 + ], false, $this->getDbMapperNever()))->value(); + } + + public function testCreatingWithIncorrectValueRange(): void + { + $this->expectException(SoftException::class); + $this->expectExceptionMessage('Wrong setting data'); + (new SettingStringSelect([ + 'name' => 'ui.datetime.offset', + 'value' => 'IncorrectValue' + ], false, $this->getDbMapperNever()))->value(); + } + + public function testCreatingWithIncorrectValueTypeWithIgnoring(): void + { + $this->assertSame( + SettingsList::$schema['ui.datetime.offset']['default'], + (new SettingStringSelect([ + 'name' => 'ui.datetime.offset', + 'value' => 333 + ], true, $this->getDbMapperNever()))->value() + ); + } + + public function testCreatingWithIncorrectValueRangeWithIgnoring(): void + { + $this->assertSame( + SettingsList::$schema['ui.datetime.offset']['default'], + (new SettingStringSelect([ + 'name' => 'ui.datetime.offset', + 'value' => 'incorrectValue' + ], true, $this->getDbMapperNever()))->value() + ); + } + + public function testGettingValueByName(): void + { + $db = $this->getMockBuilder(DatabaseController::class) + ->disableOriginalConstructor() + ->setMethods([ 'getMapper' ]) + ->getMock(); + $db->expects($this->once()) + ->method('getMapper') + ->with($this->equalTo('setting')) + ->willReturn($this->getDbMapperOnce('value', 'ui.datetime.offset', 'utc')); + $this->assertSame( + 'utc', + (new SettingStringSelect('ui.datetime.offset', false, $db))->value() + ); + } + + private function getDbMapperNever(): object + { + $db = $this->getMockBuilder(DatabaseController::class) + ->disableOriginalConstructor() + ->setMethods([ 'getMapper' ]) + ->getMock(); + $db->expects($this->never())->method('getMapper'); + return $db; + } + + private function getDbMapperOnce(string $method, $parameter, $value): object + { + $mapper = $this->getMockBuilder(StdClass::class) + ->disableOriginalConstructor() + ->setMethods([ $method ]) + ->getMock(); + $mapper->expects($this->once()) + ->method($method) + ->with($this->equalTo($parameter)) + ->willReturn($value); + return $mapper; + } +} diff --git a/root/opt/dmarc-srg/tests/classes/Settings/SettingStringTest.php b/root/opt/dmarc-srg/tests/classes/Settings/SettingStringTest.php new file mode 100644 index 0000000..3e80330 --- /dev/null +++ b/root/opt/dmarc-srg/tests/classes/Settings/SettingStringTest.php @@ -0,0 +1,79 @@ +assertSame( + 'someValue', + (new SettingString([ + 'name' => 'version', + 'value' => 'someValue' + ], false, $this->getDbMapperNever()))->value() + ); + } + + public function testCreatingWithIncorrectValue(): void + { + $this->expectException(SoftException::class); + $this->expectExceptionMessage('Wrong setting data'); + (new SettingString([ + 'name' => 'version', + 'value' => 111 + ], false, $this->getDbMapperNever()))->value(); + } + + public function testCreatingWithIncorrectValueWithIgnoring(): void + { + $this->assertSame( + SettingsList::$schema['version']['default'], + (new SettingString([ + 'name' => 'version', + 'value' => 111 + ], true, $this->getDbMapperNever()))->value() + ); + } + + public function testGettingValueByName(): void + { + $db = $this->getMockBuilder(DatabaseController::class) + ->disableOriginalConstructor() + ->setMethods([ 'getMapper' ]) + ->getMock(); + $db->expects($this->once()) + ->method('getMapper') + ->with($this->equalTo('setting')) + ->willReturn($this->getDbMapperOnce('value', 'version', 'stringValue')); + $this->assertSame('stringValue', (new SettingString('version', false, $db))->value()); + } + + private function getDbMapperNever(): object + { + $db = $this->getMockBuilder(DatabaseController::class) + ->disableOriginalConstructor() + ->setMethods([ 'getMapper' ]) + ->getMock(); + $db->expects($this->never())->method('getMapper'); + return $db; + } + + private function getDbMapperOnce(string $method, $parameter, $value): object + { + $mapper = $this->getMockBuilder(StdClass::class) + ->disableOriginalConstructor() + ->setMethods([ $method ]) + ->getMock(); + $mapper->expects($this->once()) + ->method($method) + ->with($this->equalTo($parameter)) + ->willReturn($value); + return $mapper; + } +} diff --git a/root/opt/dmarc-srg/tests/classes/Settings/SettingTest.php b/root/opt/dmarc-srg/tests/classes/Settings/SettingTest.php new file mode 100644 index 0000000..f0824e7 --- /dev/null +++ b/root/opt/dmarc-srg/tests/classes/Settings/SettingTest.php @@ -0,0 +1,96 @@ +assertInstanceOf(SettingString::class, new SettingString('version', false, $this->getDbMapperNever())); + } + + public function testCreatingWithIncorrectName(): void + { + $this->expectException(SoftException::class); + $this->expectExceptionMessage('Unknown setting name: some-setting'); + new SettingString('some-setting', false, $this->getDbMapperNever()); + } + + public function testCreatingWithIncorrectDataType(): void + { + $this->expectException(SoftException::class); + $this->expectExceptionMessage('Wrong setting data'); + new SettingString(1, false, $this->getDbMapperNever()); + } + + public function testCreatingWithIncorrectNameType(): void + { + $this->expectException(SoftException::class); + $this->expectExceptionMessage('Wrong setting data'); + new SettingString([ 'name' => 1], false, $this->getDbMapperNever()); + } + + public function testSetValue(): void + { + $ss = new SettingString('version', false, $this->getDbMapperNever()); + $ss->setValue('someString'); + $this->assertSame('someString', $ss->value()); + } + + public function testToArray(): void + { + $ss = new SettingString([ 'name' => 'version', 'value' => 'someString' ], false, $this->getDbMapperNever()); + $this->assertEquals([ + 'type' => 'string', + 'name' => 'version', + 'value' => 'someString', + 'default' => SettingsList::$schema['version']['default'] + ], $ss->toArray()); + } + + public function testSave(): void + { + $db = $this->getMockBuilder(DatabaseController::class) + ->disableOriginalConstructor() + ->setMethods([ 'getMapper' ]) + ->getMock(); + $db->expects($this->once()) + ->method('getMapper') + ->with($this->equalTo('setting')) + ->willReturn($this->getDbMapperOnce('save', 'status.emails-for-last-n-days', '231')); + $ss = new SettingInteger( + [ 'name' => 'status.emails-for-last-n-days', 'value' => 231 ], + false, + $db + ); + $ss->save(); + } + + private function getDbMapperNever(): object + { + $db = $this->getMockBuilder(DatabaseController::class) + ->disableOriginalConstructor() + ->setMethods([ 'getMapper' ]) + ->getMock(); + $db->expects($this->never())->method('getMapper'); + return $db; + } + + private function getDbMapperOnce(string $method, string $param1, string $param2): object + { + $mapper = $this->getMockBuilder(StdClass::class) + ->disableOriginalConstructor() + ->setMethods([ $method ]) + ->getMock(); + $mapper->expects($this->once()) + ->method($method) + ->with($this->equalTo($param1), $this->equalTo($param2)); + return $mapper; + } +} diff --git a/root/opt/dmarc-srg/tests/classes/Settings/SettingsListTest.php b/root/opt/dmarc-srg/tests/classes/Settings/SettingsListTest.php new file mode 100644 index 0000000..db5fbbe --- /dev/null +++ b/root/opt/dmarc-srg/tests/classes/Settings/SettingsListTest.php @@ -0,0 +1,94 @@ +realSettingsList(SettingsList::ORDER_ASCENT); + $mapp_list = (new SettingsList($this->getDbMapperListOnce()))->setOrder(SettingsList::ORDER_ASCENT)->getList(); + $this->assertIsArray($mapp_list); + $this->assertFalse($mapp_list['more']); + $this->assertCount(count($real_list), $mapp_list['list']); + $this->assertSame($real_list[0], $mapp_list['list'][0]->name()); + $cnt = count($real_list); + $this->assertSame($real_list[$cnt - 1], $mapp_list['list'][$cnt - 1]->name()); + + $real_list = $this->realSettingsList(SettingsList::ORDER_DESCENT); + $mapp_list = (new SettingsList($this->getDbMapperListOnce()))->setOrder(SettingsList::ORDER_DESCENT)->getList(); + $this->assertSame($real_list[0], $mapp_list['list'][0]->name()); + $cnt = count($real_list); + $this->assertSame($real_list[$cnt - 1], $mapp_list['list'][$cnt - 1]->name()); + } + + public function testCheckingCorrectSettingName(): void + { + $this->assertNull(SettingsList::checkName('version')); + } + + public function testCheckingWrongSettingName(): void + { + $this->expectException(SoftException::class); + $this->expectExceptionMessage('Unknown setting name: wrongName'); + $this->assertNull(SettingsList::checkName('wrongName')); + } + + public function testGettingUnknownSettingByName(): void + { + $this->expectException(SoftException::class); + $this->expectExceptionMessage('Unknown setting name: someUnknownSetting'); + SettingsList::getSettingByName('someUnknownSetting'); + } + + public function testGettingInternalSetting(): void + { + $this->expectException(SoftException::class); + $this->expectExceptionMessage('Attempt to access an internal variable'); + SettingsList::getSettingByName('version'); + } + + private function getDbMapperListOnce(): object + { + $mapper = $this->getMockBuilder(StdClass::class) + ->disableOriginalConstructor() + ->setMethods([ 'list' ]) + ->getMock(); + $mapper->expects($this->once()) + ->method('list') + ->willReturn([]); + $db = $this->getMockBuilder(DatabaseController::class) + ->disableOriginalConstructor() + ->setMethods([ 'getMapper' ]) + ->getMock(); + $db->expects($this->once()) + ->method('getMapper') + ->willReturn($mapper); + return $db; + } + + private function realSettingsList(int $order): array + { + $list = []; + foreach (SettingsList::$schema as $name => &$props) { + if (isset($props['public']) && $props['public'] === true) { + $list[] = $name; + } + } + unset($props); + if ($order === SettingsList::ORDER_ASCENT) { + usort($list, static function ($a, $b) { + return $a <=> $b; + }); + } elseif ($order === SettingsList::ORDER_DESCENT) { + usort($list, static function ($a, $b) { + return $b <=> $a; + }); + } + return $list; + } +} diff --git a/root/opt/dmarc-srg/tests/classes/Sources/SourceActionTest.php b/root/opt/dmarc-srg/tests/classes/Sources/SourceActionTest.php new file mode 100644 index 0000000..cd1f9fc --- /dev/null +++ b/root/opt/dmarc-srg/tests/classes/Sources/SourceActionTest.php @@ -0,0 +1,82 @@ +assertCount(0, SourceAction::fromSetting('some_action', 0, '')); + } + + public function testMarkSeen(): void + { + $this->assertCount(0, SourceAction::fromSetting('mark_seen:??', 0, '')); + $sa = SourceAction::fromSetting('mark_seen', 0, '')[0]; + $this->assertSame(SourceAction::ACTION_SEEN, $sa->type); + } + + public function testMoveTo(): void + { + $this->assertCount(0, SourceAction::fromSetting('move_to', 0, '')); + $sa = SourceAction::fromSetting('move_to:target', 0, '')[0]; + $this->assertSame(SourceAction::ACTION_MOVE, $sa->type); + $this->assertSame('target', $sa->param); + } + + public function testMoveToAndBasename(): void + { + $this->assertCount(1, SourceAction::fromSetting('move_to:/target', 0, '')); + $this->assertCount(0, SourceAction::fromSetting('move_to:/target', SourceAction::FLAG_BASENAME, '')); + } + + public function testDelete(): void + { + $this->assertCount(0, SourceAction::fromSetting('delete:??', 0, '')); + $sa = SourceAction::fromSetting('delete', 0, '')[0]; + $this->assertSame(SourceAction::ACTION_DELETE, $sa->type); + } + + public function testMultipleActions(): void + { + $list = SourceAction::fromSetting([ 'mark_seen', 'move_to:target', 'delete' ], 0, ''); + $this->assertCount(3, $list); + $this->assertSame(SourceAction::ACTION_SEEN, $list[0]->type); + $this->assertSame(SourceAction::ACTION_MOVE, $list[1]->type); + $this->assertSame(SourceAction::ACTION_DELETE, $list[2]->type); + } + + public function testMultipleActionsWithWrongItem(): void + { + $list = SourceAction::fromSetting([ 'mark_seen', 'move_to:', 'delete' ], 0, ''); + $this->assertCount(2, $list); + $this->assertSame(SourceAction::ACTION_SEEN, $list[0]->type); + $this->assertSame(SourceAction::ACTION_DELETE, $list[1]->type); + } + + public function testDefaultAction(): void + { + $list = SourceAction::fromSetting([], 0, 'mark_seen'); + $this->assertCount(1, $list); + $this->assertSame(SourceAction::ACTION_SEEN, $list[0]->type); + + $list = SourceAction::fromSetting('', 0, 'mark_seen'); + $this->assertCount(1, $list); + $this->assertSame(SourceAction::ACTION_SEEN, $list[0]->type); + } + + public function testWrongDefaultAction(): void + { + $list = SourceAction::fromSetting([], 0, 'wrong_default'); + $this->assertCount(0, $list); + } + + public function testDuplicates(): void + { + $s_list1 = [ 'mark_seen', 'move_to:target', 'delete' ]; + $s_list2 = $s_list1; + $this->assertCount(3, SourceAction::fromSetting(array_merge($s_list1, $s_list2), 0, '')); + } +} diff --git a/root/opt/dmarc-srg/tests/conf_test_file.php b/root/opt/dmarc-srg/tests/conf_test_file.php new file mode 100644 index 0000000..6d3e212 --- /dev/null +++ b/root/opt/dmarc-srg/tests/conf_test_file.php @@ -0,0 +1,14 @@ + 0, + 'key_bool' => false, + 'key_string' => '' +]; diff --git a/root/opt/dmarc-srg/tests/run.sh b/root/opt/dmarc-srg/tests/run.sh new file mode 100755 index 0000000..7accead --- /dev/null +++ b/root/opt/dmarc-srg/tests/run.sh @@ -0,0 +1,4 @@ +#!/usr/bin/env sh + +phpunit --color --bootstrap init.php tests + diff --git a/root/opt/dmarc-srg/utils/check_config.php b/root/opt/dmarc-srg/utils/check_config.php new file mode 100644 index 0000000..f062ce4 --- /dev/null +++ b/root/opt/dmarc-srg/utils/check_config.php @@ -0,0 +1,271 @@ +. + * + * ========================= + * + * This script is for checking configuration. + * + * The script can be useful for checking your configuration. + * Note: the current directory must be the one containing the classes directory. + * + * @category Utilities + * @package DmarcSrg + * @author Aleksey Andreev (liuch) + * @license https://www.gnu.org/licenses/gpl-3.0.html GNU/GPLv3 + */ + +namespace Liuch\DmarcSrg; + +use Liuch\DmarcSrg\Core; +use Liuch\DmarcSrg\Mail\MailBoxes; +use Liuch\DmarcSrg\Directories\DirectoryList; +use Liuch\DmarcSrg\Exception\SoftException; +use Liuch\DmarcSrg\Exception\RuntimeException; + +require 'init.php'; + +if (php_sapi_name() !== 'cli') { + echo 'Forbidden'; + exit(1); +} + +const RESULT_SUCCESS = 1; +const RESULT_WARNING = 2; +const RESULT_ERROR = 3; +const RESULT_FATAL = 4; + +const CONFIG_FILE = 'config/conf.php'; + +$e_cnt = 0; +$w_cnt = 0; +$m_str = ''; + +$startChecking = function (string $message, int $margin = 0) use (&$m_str): void { + $col_w = 35; + $m_str = str_repeat(' ', $margin); + $s = "{$m_str} * {$message}"; + echo $s, str_repeat('.', max($col_w - strlen($s), 0)), ' '; +}; + +$endChecking = function (string $message = '', int $result = 0) use (&$e_cnt, &$w_cnt, &$m_str): void { + if ($result === 0) { + $result = empty($message) ? RESULT_SUCCESS : RESULT_ERROR; + } + switch ($result) { + case RESULT_SUCCESS: + echo 'Ok', PHP_EOL; + break; + case RESULT_WARNING: + ++$w_cnt; + echo 'Warning', PHP_EOL; + break; + case RESULT_ERROR: + ++$e_cnt; + echo 'Fail', PHP_EOL; + break; + case RESULT_FATAL: + echo 'Fail', PHP_EOL; + throw new SoftException($message); + } + if (!empty($message)) { + echo "{$m_str} Message: ", $message, PHP_EOL; + } +}; + +$core = Core::instance(); + +ob_start(null, 0, PHP_OUTPUT_HANDLER_FLUSHABLE | PHP_OUTPUT_HANDLER_REMOVABLE); +$core->config('debug'); // Just in order to load the config file +$empty_buf = empty(ob_get_flush()); + +try { + echo '=== GENERAL INFORMATION ===', PHP_EOL; + $uname = implode(' ', array_map(function ($mode) { + return php_uname($mode); + }, [ 's', 'r', 'v', 'm' ])); + echo ' * OS information: ', $uname, PHP_EOL; + echo ' * PHP version: ', phpversion(), PHP_EOL; + + echo PHP_EOL, '=== EXTENSIONS ===', PHP_EOL; + foreach ([ 'pdo_mysql', 'xmlreader', 'zip', 'json' ] as $ext) { + $startChecking($ext); + if (extension_loaded($ext)) { + $endChecking(); + } else { + $endChecking('The extension is not loaded'); + } + } + + echo PHP_EOL, '=== CONFIG FILE ===', PHP_EOL; + $startChecking('Checking if the file exists'); + if (is_file(CONFIG_FILE)) { + $endChecking(); + } else { + $endChecking('The configuration file `config/conf.php` not found', RESULT_FATAL); + } + $startChecking('Checking read permission'); + if (is_readable(CONFIG_FILE)) { + $endChecking(); + } else { + $endChecking('The configuration file is not readable', RESULT_FATAL); + } + $startChecking('Checking write permission'); + if (!is_writable(CONFIG_FILE)) { + $endChecking(); + } else { + $endChecking('The configuration file is writable', RESULT_WARNING); + } + $startChecking('Checking access by other users'); + $r = fileperms(CONFIG_FILE); + if ($r !== false) { + if (($r & 0x6) !== 0) { + $endChecking('The configuration file is accessible to other users', RESULT_WARNING); + } else { + $endChecking(); + } + } else { + $endChecking('Fileperms failed', RESULT_ERROR); + } + $startChecking('Checking the output buffer'); + if ($empty_buf) { + $endChecking(); + } else { + $endChecking('There are extra characters before the "database()->state(); + $endChecking(); + } catch (RuntimeException $e) { + $db_s = null; + $endChecking($e->getMessage()); + } + if ($db_s) { + $startChecking('Checking for integrity'); + if ($db_s) { + $endChecking(); + } else { + $endChecking($db_s['message'], ($db_s['needs_upgrade'] ?? false) ? RESULT_WARNING : RESULT_ERROR); + } + } + + echo PHP_EOL, '=== MAILBOXES ===', PHP_EOL; + $startChecking('Checking mailboxes config'); + try { + $mb_list = new MailBoxes(); + $mb_lcnt = $mb_list->count(); + if ($mb_lcnt === 0) { + $endChecking('No mailboxes found', RESULT_SUCCESS); + } else { + $endChecking("{$mb_lcnt} mailbox" . ($mb_lcnt > 1 ? 'ex' : '') . ' found', RESULT_SUCCESS); + $startChecking('Imap extension'); + if (extension_loaded('imap')) { + $endChecking(); + echo " * Checking mailboxes ({$mb_lcnt})", PHP_EOL; + for ($mb_num = 1; $mb_num <= $mb_lcnt; ++$mb_num) { + $mb = $mb_list->mailbox($mb_num); + echo " - {$mb->name()}", PHP_EOL; + $startChecking('Accessibility', 2); + $res = $mb->check(); + if (!$res['error_code']) { + $endChecking(); + } else { + $endChecking($res['message'] ?? null); + } + } + } else { + $endChecking('The extension is not loaded'); + } + } + } catch (RuntimeException $e) { + $endChecking($e->getMessage()); + } + + echo PHP_EOL, '=== DIRECTORIES ===', PHP_EOL; + $startChecking('Checking directories config'); + try { + $dir_list = (new DirectoryList())->list(); + $dir_lcnt = count($dir_list); + if ($dir_lcnt === 0) { + $endChecking('No directories found', RESULT_SUCCESS); + } else { + $endChecking("{$dir_lcnt} director" . ($dir_lcnt > 1 ? 'ies' : 'y') . ' found', RESULT_SUCCESS); + echo " * Checking directories ({$dir_lcnt})", PHP_EOL; + foreach ($dir_list as $dir) { + $dir_a = $dir->toArray(); + echo " - {$dir_a['name']}", PHP_EOL; + $startChecking('Accessibility', 2); + $res = $dir->check(); + if (!$res['error_code']) { + $endChecking(); + $startChecking('Security', 2); + try { + $perms = fileperms($dir_a['location']); + if ($perms === false) { + throw new RuntimeException('Fileperms failed', RESULT_ERROR); + } + if ($perms & 0x2) { + throw new RuntimeException( + 'Other users have write access to the directory', + RESULT_WARNING + ); + } + $endChecking(); + } catch (RuntimeException $e) { + $endChecking($e->getMessage(), $e->getCode()); + } catch (\ErrorException $e) { + $endChecking($e->getMessage()); + } + } else { + $endChecking($res['message'] ?? null); + } + } + } + } catch (SoftException $e) { + $endChecking($e->getMessage()); + } + + echo PHP_EOL, '===', PHP_EOL; + if ($e_cnt === 0 && $w_cnt === 0) { + echo 'Success!', PHP_EOL; + } else { + echo 'There ', $e_cnt + $w_cnt === 1 ? 'is' : 'are', ' '; + $strs = []; + foreach ([ [$e_cnt, 'error' ], [ $w_cnt, 'warning' ] ] as &$it) { + $cnt = $it[0]; + if ($cnt > 0) { + $strs[] = $cnt . ' ' . $it[1] . ($cnt > 1 ? 's' : ''); + } + } + unset($it); + echo implode(' and ', $strs), '!', PHP_EOL; + } +} catch (SoftException $e) { + echo 'Fatal error: ', $e->getMessage(), PHP_EOL; + exit(1); +} + +if ($e_cnt > 0) { + exit(2); +} +exit(0); diff --git a/root/opt/dmarc-srg/utils/database_admin.php b/root/opt/dmarc-srg/utils/database_admin.php new file mode 100644 index 0000000..09ae8ba --- /dev/null +++ b/root/opt/dmarc-srg/utils/database_admin.php @@ -0,0 +1,117 @@ +. + * + * ========================= + * + * This script performs some administration functions with the database. + * It has one required parameter, it can has follow values: `status`, `init`, `upgrade`, `drop`. + * `status` - Will display the database status. + * `init` - Will create all the required tables in the database. + * The database must contain no tables. + * `upgrade` - Will upgrade the database structure if it is necessary. + * `drop` - Will remove all tables from the database. + * + * @category Utilities + * @package DmarcSrg + * @author Aleksey Andreev (liuch) + * @license https://www.gnu.org/licenses/gpl-3.0.html GNU/GPLv3 + */ + +namespace Liuch\DmarcSrg; + +use Liuch\DmarcSrg\Database\Database; +use Liuch\DmarcSrg\Database\DatabaseUpgrader; +use Liuch\DmarcSrg\Settings\SettingString; +use Liuch\DmarcSrg\Exception\RuntimeException; + +require 'init.php'; + +if (php_sapi_name() !== 'cli') { + echo 'Forbidden'; + exit(1); +} + +$action = $argv[1] ?? ''; +$res = null; +try { + switch ($action) { + case 'status': + $res = Core::instance()->database()->state(); + $tcn = 0; + if (isset($res['tables'])) { + foreach ($res['tables'] as &$t) { + if (isset($t['exists']) && $t['exists'] === true) { + ++$tcn; + } + } + unset($t); + } + echo 'Version: ', ($res['version'] ?? 'n/a'), PHP_EOL; + echo 'Tables: ', $tcn, PHP_EOL; + break; + case 'init': + $res = Core::instance()->database()->initDb(); + break; + case 'upgrade': + $cur_ver = (new SettingString('version'))->value(); + if ($cur_ver === '') { + $cur_ver = 'n/a'; + } + $db = Core::instance()->database(); + echo "Current version: {$cur_ver}", PHP_EOL; + echo 'Required version: ', $db::REQUIRED_VERSION, PHP_EOL; + if ($cur_ver !== $db::REQUIRED_VERSION) { + $db->getMapper('upgrader')->go($db::REQUIRED_VERSION); + $res = [ + 'error_code' => 0, + 'message' => 'Upgrated successfully' + ]; + } else { + $res = [ + 'error_code' => 0, + 'message' => 'No upgrade required' + ]; + } + break; + case 'drop': + $res = Core::instance()->database()->cleanDb(); + break; + default: + echo "Usage: {$argv[0]} status|init|upgrade|drop", PHP_EOL; + exit(1); + } +} catch (RuntimeException $e) { + $res = ErrorHandler::exceptionResult($e); +} + +$error = ($res['error_code'] ?? 0) ? 'Error! ' : ''; +echo "Message: {$error}{$res['message']}", PHP_EOL; + +if (isset($res['debug_info'])) { + $debug_info = $res['debug_info']; + echo "Debug info:", PHP_EOL; + echo '-----', PHP_EOL; + echo "[{$debug_info['code']}]", PHP_EOL; + echo '-----', PHP_EOL; + echo "{$debug_info['content']}", PHP_EOL; +} + +exit(0); diff --git a/root/opt/dmarc-srg/utils/fetch_reports.php b/root/opt/dmarc-srg/utils/fetch_reports.php new file mode 100644 index 0000000..0ed7ccd --- /dev/null +++ b/root/opt/dmarc-srg/utils/fetch_reports.php @@ -0,0 +1,225 @@ +. + * + * ========================= + * + * This script fetches DMARC reports from mailboxes and server local directories and saves them to the DB. + * The parameters of mailboxes and directories must be specified in the configuration file. + * The mailboxes and directories accessibility can be checked on the administration page in the web interface. + * The script has one optional parameter: `source` - the type of the source. The valid types are `email`, `directory`. + * + * Some examples: + * $ utils/fetch_reports + * will fetch reports from both the mailboxes and the local server directories. + * + * $ utils/fetch_reports source=email + * will only fetch reports from the mailboxes. + * + * The best place to use it is cron. + * Note: the current directory must be the one containing the classes directory. + * + * @category Utilities + * @package DmarcSrg + * @author Aleksey Andreev (liuch) + * @license https://www.gnu.org/licenses/gpl-3.0.html GNU/GPLv3 + */ + +namespace Liuch\DmarcSrg; + +use Liuch\DmarcSrg\Mail\MailBoxes; +use Liuch\DmarcSrg\Report\ReportFetcher; +use Liuch\DmarcSrg\Sources\Source; +use Liuch\DmarcSrg\Sources\MailboxSource; +use Liuch\DmarcSrg\Sources\DirectorySource; +use Liuch\DmarcSrg\Directories\DirectoryList; +use Liuch\DmarcSrg\Exception\RuntimeException; + +require 'init.php'; + +if (php_sapi_name() !== 'cli') { + echo 'Forbidden'; + exit(1); +} + +$usage = false; +$source = null; +if (isset($argv)) { + for ($i = 1; $i < count($argv); ++$i) { + $av = explode('=', $argv[$i]); + if (count($av) !== 2) { + echo 'Invalid parameter format' . PHP_EOL; + $usage = true; + break; + } + switch ($av[0]) { + case 'source': + $source = $av[1]; + break; + default: + echo 'Unknown parameter "' . $av[0] . '"' . PHP_EOL; + $usage = true; + break; + } + } + if ($source && $source !== 'email' && $source !== 'directory') { + echo 'Invalid source type "' . $source . '". "email" or "directory" expected.' . PHP_EOL; + exit(1); + } +} + +if ($usage) { + echo PHP_EOL; + echo 'Usage: ' . basename(__FILE__) . ' [source=email|directory]' . PHP_EOL; + exit(1); +} + +$sou_list = []; +$problems = []; +$addError = function (\Throwable $e, array &$errors): void { + $err_r = ErrorHandler::exceptionResult($e); + $errors['messages'][] = $err_r['message']; + if (!$errors['debug_info'] && isset($err_r['debug_info'])) { + $errors['debug_info'] = $err_r['debug_info']['content']; + } +}; + +const MAILBOX_LIST = 1; +const DIRECTORY_LIST = 2; +const FETCHER = 3; + +$state = MAILBOX_LIST; +if (!$source || $source === 'email') { + $errors = [ 'messages' => [], 'debug_info' => null ]; + $mb_list = new MailBoxes(); + for ($mb_num = 1; $mb_num <= $mb_list->count(); ++$mb_num) { + try { + $sou_list[] = new MailboxSource($mb_list->mailbox($mb_num)); + } catch (RuntimeException $e) { + $addError($e, $errors); + } + } + if (count($errors['messages']) > 0) { + $problems[] = [ + 'state' => $state, + 'messages' => $errors['messages'], + 'debug_info' => $errors['debug_info'] + ]; + } +} + +$state = DIRECTORY_LIST; +if (!$source || $source === 'directory') { + $errors = [ 'messages' => [], 'debug_info' => null ]; + foreach ((new DirectoryList())->list() as $dir) { + try { + $sou_list[] = new DirectorySource($dir); + } catch (RuntimeException $e) { + $addError($e, $errors); + } + } + if (count($errors['messages']) > 0) { + $problems[] = [ + 'state' => $state, + 'messages' => $errors['messages'], + 'debug_info' => $errors['debug_info'] + ]; + } +} + +$state = FETCHER; +try { + foreach ($sou_list as $source) { + $results = (new ReportFetcher($source))->fetch(); + foreach ($results as &$res) { + $messages = []; + if (isset($res['source_error'])) { + $messages[] = $res['source_error']; + } + if (isset($res['post_processing_message'])) { + $messages[] = $res['post_processing_message']; + } + if (isset($res['error_code']) && $res['error_code'] !== 0 && isset($res['message'])) { + $messages[] = $res['message']; + } + if (count($messages) > 0) { + $pr = [ 'state' => $state, 'messages' => $messages ]; + foreach ([ 'report_id', 'emailed_from', 'emailed_date' ] as $it) { + if (isset($res[$it])) { + $pr[$it] = $res[$it]; + } + } + if ($source->type() === Source::SOURCE_MAILBOX) { + $cont = $source->container(); + $pr['mailbox'] = $cont->mailbox() . ' (' . $cont->name() . ')'; + } + $problems[] = $pr; + } + } + unset($res); + } +} catch (RuntimeException $e) { + $problems[] = [ 'state' => $state, 'messages' => [ $e->getMessage() ] ]; +} + +if (count($problems) > 0) { + $debug_info = null; + foreach ($problems as $i => $pr) { + if ($i > 0) { + echo PHP_EOL; + } + switch ($pr['state']) { + case MAILBOX_LIST: + echo 'Failed to get mailbox list:'; + break; + case DIRECTORY_LIST: + echo 'Failed to get directory list:'; + break; + case FETCHER: + echo 'Failed to get incoming report:'; + break; + } + echo PHP_EOL; + echo ' Error message:', PHP_EOL; + $messages = array_map(function ($msg) { + return " - {$msg}"; + }, $pr['messages']); + echo implode(PHP_EOL, $messages), PHP_EOL; + if (isset($pr['report_id'])) { + echo " Report ID: {$pr['report_id']}", PHP_EOL; + } + if (isset($pr['emailed_from']) || isset($pr['emailed_date']) || isset($pr['mailbox'])) { + echo ' Email message metadata:', PHP_EOL; + echo ' - From: ' . ($pr['emailed_from'] ?? '-'), PHP_EOL; + echo ' - Date: ' . ($pr['emailed_date'] ?? '-'), PHP_EOL; + echo ' - Mailbox: ' . ($pr['mailbox'] ?? '-'), PHP_EOL; + } + if (!$debug_info && !empty($pr['debug_info'])) { + $debug_info = $pr['debug_info']; + } + } + if ($debug_info) { + echo PHP_EOL; + echo 'Debug information:', PHP_EOL, $debug_info, PHP_EOL; + } + exit(1); +} + +exit(0); diff --git a/root/opt/dmarc-srg/utils/mailbox_cleaner.php b/root/opt/dmarc-srg/utils/mailbox_cleaner.php new file mode 100644 index 0000000..5666da1 --- /dev/null +++ b/root/opt/dmarc-srg/utils/mailbox_cleaner.php @@ -0,0 +1,163 @@ +. + * + * ========================= + * + * This script deletes old DMARC report email messages in mailboxes. + * The mailbox parameters and conditions for removal must be specified + * in the configuration file. The mailbox accessibility can be checked + * on the administration page in the web interface. + * The best place to use it is cron. + * Note: the current directory must be the one containing the classes directory. + * + * @category Utilities + * @package DmarcSrg + * @author Aleksey Andreev (liuch) + * @license https://www.gnu.org/licenses/gpl-3.0.html GNU/GPLv3 + */ + +namespace Liuch\DmarcSrg; + +use Liuch\DmarcSrg\Mail\MailBoxes; +use Liuch\DmarcSrg\Sources\SourceAction; +use Liuch\DmarcSrg\Exception\RuntimeException; + +require 'init.php'; + +if (php_sapi_name() !== 'cli') { + echo 'Forbidden'; + exit(1); +} + +$core = Core::instance(); + +$days = $core->config('cleaner/mailboxes/days_old', -1); +if (gettype($days) !== 'integer' || $days < 0) { + exit(0); +} +$days_date = (new DateTime())->sub(new \DateInterval("P{$days}D")); + +$maximum = $core->config('cleaner/mailboxes/delete_maximum', 0); +if (gettype($maximum) !== 'integer' || $maximum < 0) { + exit(0); +} + +$leave = $core->config('cleaner/mailboxes/leave_minimum', 0); +if (gettype($leave) !== 'integer' || $leave < 0) { + exit(0); +} + +// Get a list of the configured email boxes +$mb_list = new MailBoxes(); +$mb_cnt = $mb_list->count(); +if ($mb_cnt === 0) { + // There are no configured mailboxes + exit(0); +} + +// Get the names of mailboxes where processed messages are moved to. +$dirs = []; +foreach ([ [ 'done', '', 1 ], [ 'failed', 'failed', 0 ] ] as $it) { + $opt_nm = $it[0]; + $def_opt = $it[1]; + $def_cri = $it[2]; + $actions = SourceAction::fromSetting($core->config("fetcher/mailboxes/when_{$opt_nm}", ''), 0, ''); + if (count($actions) === 0) { + $dir = $def_opt; + } else { + $dir = null; + foreach ($actions as $act) { + if ($act->type === SourceAction::ACTION_MOVE) { + $dir = $act->param; + break; + } + } + if (is_null($dir)) { + continue; + } + } + switch (strtolower($core->config("cleaner/mailboxes/{$opt_nm}", ''))) { + case 'any': + $cri = 2; + break; + case 'seen': + $cri = 1; + break; + case '': + $cri = $def_cri; + break; + default: + $cri = 0; + break; + } + if (empty($dir) && $cri > 1) { + $cri = 1; + } + $dirs[$dir] = min(($dirs[$dir] ?? $cri), $cri); +} + +try { + for ($mb_idx = 1; $mb_idx <= $mb_cnt; ++$mb_idx) { + foreach ($dirs as $dir_name => $i_criteria) { + if ($i_criteria > 0) { + $criteria = $i_criteria === 2 ? 'ALL' : 'SEEN'; + $mbox = $mb_list->mailbox($mb_idx); + if (!empty($dir_name)) { + if (!($mbox = $mbox->childMailbox($dir_name))) { + continue; + } + } + $s_res = $mbox->sort(SORTDATE, $criteria, false); + $max = $maximum > 0 ? $maximum : -1; + $lv = $leave === 0 ? count($s_res) : count($s_res) - $leave; + $i = 0; + while ($lv-- > 0) { + $m_num = $s_res[$i++]; + $msg = $mbox->message($m_num); + $mo = $msg->overview(); + if (isset($mo->date)) { + try { + $md = new DateTime($mo->date); + } catch (\Exception $e) { + $md = false; + } + if ($md !== false) { + if ($md > $days_date) { + break; + } + $mbox->deleteMessage($m_num); + if ($max > 0) { + if (--$max === 0) { + break; + } + } + } + } + } + } + } + } +} catch (RuntimeException $e) { + echo ErrorHandler::exceptionText($e); + exit(1); +} + +exit(0); diff --git a/root/opt/dmarc-srg/utils/reportlog_cleaner.php b/root/opt/dmarc-srg/utils/reportlog_cleaner.php new file mode 100644 index 0000000..4e38711 --- /dev/null +++ b/root/opt/dmarc-srg/utils/reportlog_cleaner.php @@ -0,0 +1,84 @@ +. + * + * ========================= + * + * This script deletes old log entries from the database. + * The conditions for removal must be specified in the configuration file. + * The best place to use it is cron. + * Note: the current directory must be the one containing the classes directory. + * + * @category Utilities + * @package DmarcSrg + * @author Aleksey Andreev (liuch) + * @license https://www.gnu.org/licenses/gpl-3.0.html GNU/GPLv3 + */ + +namespace Liuch\DmarcSrg; + +use Liuch\DmarcSrg\ReportLog\ReportLog; +use Liuch\DmarcSrg\Exception\RuntimeException; + +require 'init.php'; + +if (php_sapi_name() !== 'cli') { + echo 'Forbidden'; + exit(1); +} + +$core = Core::instance(); + +$days = $core->config('cleaner/reportlog/days_old', -1); +if (gettype($days) !== 'integer' || $days < 0) { + exit(0); +} +$days_date = (new DateTime())->sub(new \DateInterval("P{$days}D")); + +$maximum = $core->config('cleaner/reportlog/delete_maximum', 0); +if (gettype($maximum) !== 'integer' || $maximum < 0) { + exit(0); +} + +$leave = $core->config('cleaner/reportlog/leave_minimum', 0); +if (gettype($leave) !== 'integer' || $leave < 0) { + exit(0); +} + +try { + $log = new ReportLog(null, null); + $cnt = $log->count() - $leave; + if ($cnt > 0) { + $log = new ReportLog(null, $days_date); + if ($leave * $maximum !== 0) { + if ($maximum > 0 && $cnt > $maximum) { + $cnt = $maximum; + } + $log->setOrder(ReportLog::ORDER_ASCENT); + $log->setMaxCount($cnt); + } + $log->delete(); + } +} catch (RuntimeException $e) { + echo ErrorHandler::exceptionText($e); + exit(1); +} + +exit(0); diff --git a/root/opt/dmarc-srg/utils/reports_cleaner.php b/root/opt/dmarc-srg/utils/reports_cleaner.php new file mode 100644 index 0000000..484d777 --- /dev/null +++ b/root/opt/dmarc-srg/utils/reports_cleaner.php @@ -0,0 +1,85 @@ +. + * + * ========================= + * + * This script deletes old reports from DB. + * The conditions for removal must be specified in the configuration file. + * The best place to use it is cron. + * Note: You must leave enough reports if you want to get correct summary report. + * Note: the current directory must be the one containing the classes directory. + * + * @category Utilities + * @package DmarcSrg + * @author Aleksey Andreev (liuch) + * @license https://www.gnu.org/licenses/gpl-3.0.html GNU/GPLv3 + */ + +namespace Liuch\DmarcSrg; + +use Liuch\DmarcSrg\Report\ReportList; +use Liuch\DmarcSrg\Exception\RuntimeException; + +require 'init.php'; + +if (php_sapi_name() !== 'cli') { + echo 'Forbidden'; + exit(1); +} + +$core = Core::instance(); + +$days = $core->config('cleaner/reports/days_old', -1); +if (gettype($days) !== 'integer' || $days < 0) { + exit(0); +} +$days_date = (new DateTime())->sub(new \DateInterval("P{$days}D")); + +$maximum = $core->config('cleaner/reports/delete_maximum', 0); +if (gettype($maximum) !== 'integer' || $maximum < 0) { + exit(0); +} + +$leave = $core->config('cleaner/reports/leave_minimum', 0); +if (gettype($leave) !== 'integer' || $leave < 0) { + exit(0); +} + +try { + $rl = new ReportList(); + $cnt = $rl->count() - $leave; + if ($cnt > 0) { + $rl->setFilter([ 'before_time' => $days_date ]); + if ($leave * $maximum !== 0) { + if ($maximum > 0 && $cnt > $maximum) { + $cnt = $maximum; + } + $rl->setMaxCount($cnt); + $rl->setOrder(ReportList::ORDER_BEGIN_TIME, ReportList::ORDER_ASCENT); + } + $rl->delete(); + } +} catch (RuntimeException $e) { + echo ErrorHandler::exceptionText($e); + exit(1); +} + +exit(0); diff --git a/root/opt/dmarc-srg/utils/summary_report.php b/root/opt/dmarc-srg/utils/summary_report.php new file mode 100644 index 0000000..041cb0c --- /dev/null +++ b/root/opt/dmarc-srg/utils/summary_report.php @@ -0,0 +1,210 @@ +. + * + * ========================= + * + * This script creates a summary report and sends it by email. + * The email addresses must be specified in the configuration file. + * The script have two required parameters: `domain` and `period`, and two optional: `emailto` and `format`. + * The `domain` parameter must contain a domain name, a comma-separated list of domains, or `all`. + * The `period` parameter must have one of these values: + * `lastmonth` - to make a report for the last month; + * `lastweek` - to make a report for the last week; + * `lastndays:N` - to make a report for the last N days; + * The `emailto` parameter is optional. Set it if you want to use a different email address to sent the report to. + * The `format` parameter is optional. It provides the ability to specify the email message format. + * Possible values are: `text`, `html`, `text+html`. The default value is `text`. + * + * Some examples: + * + * $ php utils/summary_report.php domain=example.com period=lastweek + * will send a weekly summary report by email for the domain example.com + * + * $ php utils/summary_report.php domain=example.com period=lastndays:10 + * will send a summary report by email for last 10 days for the domain example.com + * + * The best place to use it is cron. + * Note: the current directory must be the one containing the classes directory. + * + * @category Utilities + * @package DmarcSrg + * @author Aleksey Andreev (liuch) + * @license https://www.gnu.org/licenses/gpl-3.0.html GNU/GPLv3 + */ + +namespace Liuch\DmarcSrg; + +use Liuch\DmarcSrg\Mail\MailBody; +use Liuch\DmarcSrg\Domains\Domain; +use Liuch\DmarcSrg\Domains\DomainList; +use Liuch\DmarcSrg\Report\SummaryReport; +use Liuch\DmarcSrg\Exception\SoftException; +use Liuch\DmarcSrg\Exception\RuntimeException; + +require 'init.php'; + +if (php_sapi_name() !== 'cli') { + echo 'Forbidden' . PHP_EOL; + exit(1); +} + +$domain = null; +$period = null; +$emailto = null; +$format = 'text'; +for ($i = 1; $i < count($argv); ++$i) { + $av = explode('=', $argv[$i]); + if (count($av) == 2) { + switch ($av[0]) { + case 'domain': + $domain = $av[1]; + break; + case 'period': + $period = $av[1]; + break; + case 'emailto': + $emailto = $av[1]; + break; + case 'format': + $format = $av[1]; + break; + } + } +} + +try { + if (!$domain) { + throw new SoftException('Parameter "domain" is not specified'); + } + if (!$period) { + throw new SoftException('Parameter "period" is not specified'); + } + if (!in_array($format, [ 'text', 'html', 'text+html' ], true)) { + throw new SoftException('Unknown email message format: ' . $format); + } + if (!$emailto) { + $emailto = Core::instance()->config('mailer/default'); + } + + if ($domain === 'all') { + $domains = (new DomainList())->getList()['domains']; + } else { + $domains = array_map(function ($d) { + return new Domain($d); + }, explode(',', $domain)); + } + + $rep = new SummaryReport($period); + switch ($format) { + case 'text': + $text = []; + $html = null; + break; + case 'html': + $text = null; + $html = []; + break; + default: + $text = []; + $html = []; + break; + } + if (!is_null($html)) { + $html[] = ''; + } + $dom_cnt = count($domains); + for ($i = 0; $i < $dom_cnt; ++$i) { + if ($i > 0) { + if (!is_null($text)) { + $text[] = '-----------------------------------'; + $text[] = ''; + } + if (!is_null($html)) { + $html[] = '

    '; + } + } + + $domain = $domains[$i]; + if ($domain->exists()) { + $rep->setDomain($domain); + if (!is_null($text)) { + foreach ($rep->text() as &$row) { + $text[] = $row; + } + unset($row); + } + if (!is_null($html)) { + foreach ($rep->html() as &$row) { + $html[] = $row; + } + unset($row); + } + } else { + $nf_message = "Domain \"{$domain->fqdn()}\" does not exist"; + if ($dom_cnt === 1) { + throw new SoftException("Domain \"{$domain->fqdn()}\" does not exist"); + } + if (!is_null($text)) { + $text[] = "# {$nf_message}"; + $text[] = ''; + } + if (!is_null($html)) { + $html[] = '

    ' . htmlspecialchars($nf_message) . '

    '; + } + } + } + + if ($dom_cnt === 1) { + $subject = "{$rep->subject()} for {$domain->fqdn()}"; + } else { + $subject = "{$rep->subject()} for {$dom_cnt} domains"; + } + + $mbody = new MailBody(); + if (!is_null($text)) { + $mbody->setText($text); + } + if (!is_null($html)) { + $html[] = ''; + $mbody->setHtml($html); + } + + $headers = [ + 'From' => Core::instance()->config('mailer/from'), + 'MIME-Version' => '1.0', + 'Content-Type' => $mbody->contentType() + ]; + + mail( + $emailto, + mb_encode_mimeheader($subject, 'UTF-8'), + implode("\r\n", $mbody->content()), + $headers + ); +} catch (SoftException $e) { + echo 'Error: ' . $e->getMessage() . PHP_EOL; + exit(1); +} catch (RuntimeException $e) { + echo ErrorHandler::exceptionText($e); + exit(1); +} + +exit(0);