From 60c5f3fd5ad4232a6b7e605cffa59e797ebea0f6 Mon Sep 17 00:00:00 2001
From: Peter Jung <admin@ptr1337.dev>
Date: Mon, 4 Mar 2024 19:44:03 +0100
Subject: [PATCH 01/47] initcpiocfg: Add microcode module

Signed-off-by: Peter Jung <admin@ptr1337.dev>
---
 CHANGES-3.3                     | 2 ++
 src/modules/initcpiocfg/main.py | 1 +
 2 files changed, 3 insertions(+)

diff --git a/CHANGES-3.3 b/CHANGES-3.3
index dc0c84633..5312c1e82 100644
--- a/CHANGES-3.3
+++ b/CHANGES-3.3
@@ -12,6 +12,7 @@ the history of the 3.2 series (2018-05 - 2022-08).
 This release contains contributions from (alphabetically by first name):
  - Adriaan de Groot
  - Evan James
+ - Peter Jung
 
 ## Core ##
  - Calamares logs more information about how the executable was created
@@ -22,6 +23,7 @@ This release contains contributions from (alphabetically by first name):
 ## Modules ##
  - *displaymanager* module can configure an alternate SDDM configuration file.
  - *networkcfg* a bug affecting NetPlan + NetworkManager was fixed.
+ - *initcpiocfg* Add microcode hook to initcpiocfg
 
 
 # 3.3.4 (2024-02-27)
diff --git a/src/modules/initcpiocfg/main.py b/src/modules/initcpiocfg/main.py
index 0939054fb..13a281bb3 100644
--- a/src/modules/initcpiocfg/main.py
+++ b/src/modules/initcpiocfg/main.py
@@ -148,6 +148,7 @@ def find_initcpio_features(partitions, root_mount_point):
     """
     hooks = [
         "autodetect",
+        "microcode",
         "kms",
         "modconf",
         "block",

From 408ee0338a6a323e2e08adc164cb198cd2bb43b3 Mon Sep 17 00:00:00 2001
From: Simon Quigley <tsimonq2@ubuntu.com>
Date: Thu, 7 Mar 2024 15:26:32 -0600
Subject: [PATCH 02/47] Active Directory Support

---
 src/modules/users/ActiveDirectoryJob.cpp | 91 ++++++++++++++++++++++++
 src/modules/users/ActiveDirectoryJob.h   | 29 ++++++++
 src/modules/users/CMakeLists.txt         |  1 +
 src/modules/users/Config.cpp             | 60 ++++++++++++++++
 src/modules/users/Config.h               | 20 ++++++
 src/modules/users/UsersPage.cpp          | 28 ++++++++
 src/modules/users/page_usersetup.ui      | 87 ++++++++++++++++++++++
 src/modules/users/users.conf             |  6 ++
 src/modules/users/users.schema.yaml      |  1 +
 9 files changed, 323 insertions(+)
 create mode 100644 src/modules/users/ActiveDirectoryJob.cpp
 create mode 100644 src/modules/users/ActiveDirectoryJob.h

diff --git a/src/modules/users/ActiveDirectoryJob.cpp b/src/modules/users/ActiveDirectoryJob.cpp
new file mode 100644
index 000000000..33706c48f
--- /dev/null
+++ b/src/modules/users/ActiveDirectoryJob.cpp
@@ -0,0 +1,91 @@
+/* === This file is part of Calamares - <https://calamares.io> ===
+ *
+ *   SPDX-FileCopyrightText: 2024 Simon Quigley <tsimonq2@ubuntu.com>
+ *   SPDX-License-Identifier: GPL-3.0-or-later
+ */
+
+#include "ActiveDirectoryJob.h"
+
+#include "Config.h"
+
+#include "GlobalStorage.h"
+#include "JobQueue.h"
+#include "utils/Logger.h"
+#include "utils/Permissions.h"
+#include "utils/System.h"
+
+#include <QDateTime>
+#include <QDir>
+#include <QFile>
+#include <QFileInfo>
+#include <QTextStream>
+#include <QProcess>
+
+ActiveDirectoryJob::ActiveDirectoryJob(QStringList& activeDirectoryInfo)
+    : Calamares::Job()
+    , m_activeDirectoryInfo(activeDirectoryInfo)
+{
+}
+
+QString
+ActiveDirectoryJob::prettyName() const
+{
+    return tr( "Enroll system in Active Directory" );
+}
+
+QString
+ActiveDirectoryJob::prettyDescription() const
+{
+    return tr( "Enroll system in Active Directory" );
+}
+
+QString
+ActiveDirectoryJob::prettyStatusMessage() const
+{
+    return tr( "Enrolling system in Active Directory" );
+}
+
+Calamares::JobResult
+ActiveDirectoryJob::exec()
+{
+    QString username = m_activeDirectoryInfo.value(0);
+    QString password = m_activeDirectoryInfo.value(1);
+    QString domain = m_activeDirectoryInfo.value(2);
+    QString ip = m_activeDirectoryInfo.value(3);
+
+    Calamares::GlobalStorage* gs = Calamares::JobQueue::instance()->globalStorage();
+    QString rootMountPoint = gs ? gs->value("rootMountPoint").toString() : QString();
+
+    if (!ip.isEmpty()) {
+        QString hostsFilePath = !rootMountPoint.isEmpty() ? rootMountPoint + "/etc/hosts" : "/etc/hosts";
+        QFile hostsFile(hostsFilePath);
+        if (hostsFile.open(QIODevice::Append | QIODevice::Text)) {
+            QTextStream out(&hostsFile);
+            out << ip << " " << domain << "\n";
+            hostsFile.close();
+        } else {
+            return Calamares::JobResult::error("Failed to open /etc/hosts for writing.");
+        }
+    }
+
+    QString installPath = !rootMountPoint.isEmpty() ? rootMountPoint : "/";
+    QStringList args = {"join", domain, "-U", username, "--install=" + installPath, "--verbose"};
+
+    QProcess process;
+    process.start("realm", args);
+    process.waitForStarted();
+
+    if (!password.isEmpty()) {
+        process.write((password + "\n").toUtf8());
+        process.closeWriteChannel();
+    }
+
+    process.waitForFinished(-1);
+
+    if (process.exitCode() == 0) {
+        return Calamares::JobResult::ok();
+    } else {
+        QString errorOutput = process.readAllStandardError();
+        return Calamares::JobResult::error(QString("Failed to join realm: %1").arg(errorOutput));
+    }
+}
diff --git a/src/modules/users/ActiveDirectoryJob.h b/src/modules/users/ActiveDirectoryJob.h
new file mode 100644
index 000000000..8877ef7e1
--- /dev/null
+++ b/src/modules/users/ActiveDirectoryJob.h
@@ -0,0 +1,29 @@
+/* === This file is part of Calamares - <https://calamares.io> ===
+ *
+ *   SPDX-FileCopyrightText: 2024 Simon Quigley <tsimonq2@ubuntu.com>
+ *   SPDX-License-Identifier: GPL-3.0-or-later
+ *
+ *   Calamares is Free Software: see the License-Identifier above.
+ *
+ */
+
+#ifndef ACTIVEDIRECTORYJOB_H
+#define ACTIVEDIRECTORYJOB_H
+
+#include "Job.h"
+
+class ActiveDirectoryJob : public Calamares::Job
+{
+    Q_OBJECT
+public:
+    ActiveDirectoryJob( QStringList& activeDirectoryInfo );
+    QString prettyName() const override;
+    QString prettyDescription() const override;
+    QString prettyStatusMessage() const override;
+    Calamares::JobResult exec() override;
+
+private:
+    QStringList m_activeDirectoryInfo;
+};
+
+#endif /* ACTIVEDIRECTORYJOB_H */
diff --git a/src/modules/users/CMakeLists.txt b/src/modules/users/CMakeLists.txt
index 7a8a944b7..25e011c8e 100644
--- a/src/modules/users/CMakeLists.txt
+++ b/src/modules/users/CMakeLists.txt
@@ -55,6 +55,7 @@ include_directories(${PROJECT_BINARY_DIR}/src/libcalamaresui)
 
 set(_users_src
     # Jobs
+    ActiveDirectoryJob.cpp
     CreateUserJob.cpp
     MiscJobs.cpp
     SetPasswordJob.cpp
diff --git a/src/modules/users/Config.cpp b/src/modules/users/Config.cpp
index 1e6db0f33..ff10131f8 100644
--- a/src/modules/users/Config.cpp
+++ b/src/modules/users/Config.cpp
@@ -9,6 +9,7 @@
 
 #include "Config.h"
 
+#include "ActiveDirectoryJob.h"
 #include "CreateUserJob.h"
 #include "MiscJobs.h"
 #include "SetHostNameJob.h"
@@ -656,6 +657,59 @@ Config::setRootPasswordSecondary( const QString& s )
     }
 }
 
+void
+Config::setActiveDirectoryUsed( bool used )
+{
+    m_activeDirectoryUsed = used;
+}
+
+bool
+Config::getActiveDirectoryEnabled() const
+{
+    return m_activeDirectory;
+}
+
+bool
+Config::getActiveDirectoryUsed() const
+{
+    return m_activeDirectoryUsed && m_activeDirectory;
+}
+
+void
+Config::setActiveDirectoryAdminUsername( const QString & s )
+{
+    m_activeDirectoryUsername = s;
+}
+
+void
+Config::setActiveDirectoryAdminPassword( const QString & s )
+{
+    m_activeDirectoryPassword = s;
+}
+
+void
+Config::setActiveDirectoryDomain( const QString & s )
+{
+    m_activeDirectoryDomain = s;
+}
+
+void
+Config::setActiveDirectoryIP( const QString & s )
+{
+    m_activeDirectoryIP = s;
+}
+
+QStringList&
+Config::getActiveDirectory() const
+{
+    m_activeDirectorySettings.clear();
+    m_activeDirectorySettings << m_activeDirectoryUsername
+                              << m_activeDirectoryPassword
+                              << m_activeDirectoryDomain
+                              << m_activeDirectoryIP;
+    return m_activeDirectorySettings;
+}
+
 QString
 Config::rootPassword() const
 {
@@ -913,6 +967,9 @@ Config::setConfigurationMap( const QVariantMap& configurationMap )
     m_sudoStyle = Calamares::getBool( configurationMap, "sudoersConfigureWithGroup", false ) ? SudoStyle::UserAndGroup
                                                                                              : SudoStyle::UserOnly;
 
+    // Handle Active Directory enablement
+    m_activeDirectory = Calamares::getBool( configurationMap, "allowActiveDirectory", false );
+
     // Handle *hostname* key and subkeys and legacy settings
     {
         bool ok = false;  // Ignored
@@ -990,6 +1047,9 @@ Config::createJobs() const
         jobs.append( Calamares::job_ptr( j ) );
     }
 
+    j = new ActiveDirectoryJob( getActiveDirectory() );
+    jobs.append( Calamares::job_ptr( j ) );
+
     j = new SetupGroupsJob( this );
     jobs.append( Calamares::job_ptr( j ) );
 
diff --git a/src/modules/users/Config.h b/src/modules/users/Config.h
index 599fcd6bd..afdfa8efd 100644
--- a/src/modules/users/Config.h
+++ b/src/modules/users/Config.h
@@ -226,6 +226,12 @@ public:
     bool permitWeakPasswords() const { return m_permitWeakPasswords; }
     /// Current setting for "require strong password"?
     bool requireStrongPasswords() const { return m_requireStrongPasswords; }
+    /// Is Active Directory enabled?
+    bool getActiveDirectoryEnabled() const;
+    /// Is it both enabled and activated?
+    bool getActiveDirectoryUsed() const;
+    /// Config for Active Directory
+    QStringList& getActiveDirectory() const;
 
     const QList< GroupDescription >& defaultGroups() const { return m_defaultGroups; }
     /** @brief the names of all the groups for the current user
@@ -292,6 +298,12 @@ public Q_SLOTS:
     void setRootPassword( const QString& );
     void setRootPasswordSecondary( const QString& );
 
+    void setActiveDirectoryUsed( bool used );
+    void setActiveDirectoryAdminUsername( const QString& );
+    void setActiveDirectoryAdminPassword( const QString& );
+    void setActiveDirectoryDomain( const QString& );
+    void setActiveDirectoryIP( const QString& );
+
 signals:
     void userShellChanged( const QString& );
     void autoLoginGroupChanged( const QString& );
@@ -343,6 +355,14 @@ private:
 
     bool m_isReady = false;  ///< Used to reduce readyChanged signals
 
+    mutable QStringList m_activeDirectorySettings;
+    bool m_activeDirectory = false;
+    bool m_activeDirectoryUsed = false;
+    QString m_activeDirectoryUsername;
+    QString m_activeDirectoryPassword;
+    QString m_activeDirectoryDomain;
+    QString m_activeDirectoryIP;
+
     HostNameAction m_hostnameAction = HostNameAction::EtcHostname;
     bool m_writeEtcHosts = false;
     QString m_hostnameTemplate;
diff --git a/src/modules/users/UsersPage.cpp b/src/modules/users/UsersPage.cpp
index bac30f350..269312330 100644
--- a/src/modules/users/UsersPage.cpp
+++ b/src/modules/users/UsersPage.cpp
@@ -162,6 +162,34 @@ UsersPage::UsersPage( Config* config, QWidget* parent )
             config, &Config::requireStrongPasswordsChanged, ui->checkBoxRequireStrongPassword, &QCheckBox::setChecked );
     }
 
+    // Active Directory is not checked or enabled by default
+    ui->useADCheckbox->setVisible(m_config->getActiveDirectoryEnabled());
+    ui->domainLabel->setVisible(false);
+    ui->domainField->setVisible(false);
+    ui->domainAdminLabel->setVisible(false);
+    ui->domainAdminField->setVisible(false);
+    ui->domainPasswordField->setVisible(false);
+    ui->domainPasswordLabel->setVisible(false);
+    ui->ipAddressField->setVisible(false);
+    ui->ipAddressLabel->setVisible(false);
+
+    connect(ui->useADCheckbox, &QCheckBox::toggled, [=](bool checked){
+        ui->domainLabel->setVisible(checked);
+        ui->domainField->setVisible(checked);
+        ui->domainAdminLabel->setVisible(checked);
+        ui->domainAdminField->setVisible(checked);
+        ui->domainPasswordField->setVisible(checked);
+        ui->domainPasswordLabel->setVisible(checked);
+        ui->ipAddressField->setVisible(checked);
+        ui->ipAddressLabel->setVisible(checked);
+    });
+
+    connect( ui->domainField, &QLineEdit::textChanged, config, &Config::setActiveDirectoryDomain );
+    connect( ui->domainAdminField, &QLineEdit::textChanged, config, &Config::setActiveDirectoryAdminUsername );
+    connect( ui->domainPasswordField, &QLineEdit::textChanged, config, &Config::setActiveDirectoryAdminPassword );
+    connect( ui->ipAddressField, &QLineEdit::textChanged, config, &Config::setActiveDirectoryIP );
+    connect( ui->useADCheckbox, &QCheckBox::toggled, config, &Config::setActiveDirectoryUsed );
+
     CALAMARES_RETRANSLATE_SLOT( &UsersPage::retranslate );
 
     onReuseUserPasswordChanged( m_config->reuseUserPasswordForRoot() );
diff --git a/src/modules/users/page_usersetup.ui b/src/modules/users/page_usersetup.ui
index c21907415..6e6e5423e 100644
--- a/src/modules/users/page_usersetup.ui
+++ b/src/modules/users/page_usersetup.ui
@@ -603,6 +603,93 @@ SPDX-License-Identifier: GPL-3.0-or-later
      </item>
     </layout>
    </item>
+   <item>
+    <spacer name="verticalSpacer_3">
+     <property name="orientation">
+      <enum>Qt::Vertical</enum>
+     </property>
+     <property name="sizeType">
+      <enum>QSizePolicy::Fixed</enum>
+     </property>
+     <property name="sizeHint" stdset="0">
+      <size>
+       <width>20</width>
+       <height>6</height>
+      </size>
+     </property>
+    </spacer>
+   </item>
+   <item>
+    <layout class="QVBoxLayout" name="verticalLayout">
+     <item>
+      <widget class="QCheckBox" name="useADCheckbox">
+       <property name="text">
+        <string>Use Active Directory</string>
+       </property>
+      </widget>
+     </item>
+     <item>
+      <layout class="QVBoxLayout" name="verticalLayout_3">
+       <item>
+        <layout class="QHBoxLayout" name="horizontalLayout_2">
+         <item>
+          <widget class="QLabel" name="domainLabel">
+           <property name="text">
+            <string>Domain:</string>
+           </property>
+          </widget>
+         </item>
+         <item>
+          <widget class="QLineEdit" name="domainField"/>
+         </item>
+        </layout>
+       </item>
+       <item>
+        <layout class="QHBoxLayout" name="horizontalLayout">
+         <item>
+          <widget class="QLabel" name="domainAdminLabel">
+           <property name="text">
+            <string>Domain Administrator:</string>
+           </property>
+          </widget>
+         </item>
+         <item>
+          <widget class="QLineEdit" name="domainAdminField"/>
+         </item>
+         <item>
+          <widget class="QLabel" name="domainPasswordLabel">
+           <property name="text">
+            <string>Password:</string>
+           </property>
+          </widget>
+         </item>
+         <item>
+          <widget class="QLineEdit" name="domainPasswordField">
+           <property name="echoMode">
+            <enum>QLineEdit::Password</enum>
+           </property>
+          </widget>
+         </item>
+        </layout>
+       </item>
+       <item>
+        <layout class="QHBoxLayout" name="horizontalLayout_3">
+         <item>
+          <widget class="QLabel" name="ipAddressLabel">
+           <property name="text">
+            <string>IP Address (optional):</string>
+           </property>
+          </widget>
+         </item>
+         <item>
+          <widget class="QLineEdit" name="ipAddressField"/>
+         </item>
+        </layout>
+       </item>
+      </layout>
+     </item>
+    </layout>
+   </item>
    <item>
     <spacer name="verticalSpacer_7">
      <property name="orientation">
diff --git a/src/modules/users/users.conf b/src/modules/users/users.conf
index 669cac038..e6910bcd2 100644
--- a/src/modules/users/users.conf
+++ b/src/modules/users/users.conf
@@ -265,6 +265,12 @@ hostname:
   template: "derp-${cpu}"
   forbidden_names: [ localhost ]
 
+# Enable Active Directory enrollment support (opt-in)
+#
+# This uses realmd to enroll the machine in an Active Directory server
+# It requires realmd as a runtime dependency of Calamares, if enabled
+allowActiveDirectory: false
+
 presets:
     fullName:
         # value: "OEM User"
diff --git a/src/modules/users/users.schema.yaml b/src/modules/users/users.schema.yaml
index a67504321..c751a5226 100644
--- a/src/modules/users/users.schema.yaml
+++ b/src/modules/users/users.schema.yaml
@@ -52,6 +52,7 @@ properties:
             writeHostsFile: { type: boolean, default: true }
             template: { type: string, default: "${first}-${product}" }
             forbidden_names: { type: array, items: { type: string } }
+    allowActiveDirectory: { type: boolean, default: false }
 
     # Presets
     #

From d33d9e8daeef7540b03fecd6f7053567f7e34321 Mon Sep 17 00:00:00 2001
From: Harald Sitter <sitter@kde.org>
Date: Sun, 10 Mar 2024 01:33:52 +0100
Subject: [PATCH 03/47] on Qt6 we need to build with position independent code

otherwise linking may fail with

> copy relocation against non-copyable protected symbol `qt_resourceFeatureZstd@@Qt_6'
---
 lang/CMakeLists.txt | 1 +
 1 file changed, 1 insertion(+)

diff --git a/lang/CMakeLists.txt b/lang/CMakeLists.txt
index dd2a47b04..efd3182f3 100644
--- a/lang/CMakeLists.txt
+++ b/lang/CMakeLists.txt
@@ -36,3 +36,4 @@ calamares_qrc_translations(calamares-i18n
 )
 
 add_library(calamares-i18n OBJECT ${translation_outfile})
+set_property(TARGET calamares-i18n PROPERTY POSITION_INDEPENDENT_CODE ON)

From e8726111f85d78615d66cb3f987a59c1e40f598d Mon Sep 17 00:00:00 2001
From: dalto <dalto@fastmail.com>
Date: Sun, 17 Mar 2024 19:03:02 -0500
Subject: [PATCH 04/47] [mount] Ensure efi partition gets correct options

---
 src/modules/mount/main.py | 25 +++++++++++++++++++------
 1 file changed, 19 insertions(+), 6 deletions(-)

diff --git a/src/modules/mount/main.py b/src/modules/mount/main.py
index 4202639f3..bfeb23ea6 100644
--- a/src/modules/mount/main.py
+++ b/src/modules/mount/main.py
@@ -74,13 +74,14 @@ def is_ssd_disk(partition):
         return False
 
 
-def get_mount_options(filesystem, mount_options, partition):
+def get_mount_options(filesystem, mount_options, partition, efi_location = None):
     """
     Returns the mount options for the partition object and filesystem
 
     :param filesystem: A string containing the filesystem
     :param mount_options: A list of dicts that descripes the mount options for each mountpoint
     :param partition: A dict containing information about the partition
+    :param efi_location: A string holding the location of the EFI partition or None
     :return: A comma seperated string containing the mount options suitable for passing to mount
     """
 
@@ -92,7 +93,13 @@ def get_mount_options(filesystem, mount_options, partition):
     if mount_options is None:
         return "defaults"
 
-    options = next((x for x in mount_options if x["filesystem"] == filesystem), None)
+    # The EFI partition uses special mounting options
+    if efi_location and partition["mountPoint"] == efi_location:
+        effective_filesystem = "efi"
+    else:
+        effective_filesystem = filesystem
+
+    options = next((x for x in mount_options if x["filesystem"] == effective_filesystem), None)
 
     # If there is no match then check for default options
     if options is None:
@@ -214,7 +221,7 @@ def mount_zfs(root_mount_point, partition):
             raise ZfsException(_("Failed to set zfs mountpoint"))
 
 
-def mount_partition(root_mount_point, partition, partitions, mount_options, mount_options_list):
+def mount_partition(root_mount_point, partition, partitions, mount_options, mount_options_list, efi_location):
     """
     Do a single mount of @p partition inside @p root_mount_point.
 
@@ -223,6 +230,7 @@ def mount_partition(root_mount_point, partition, partitions, mount_options, moun
     :param partitions: The full list of partitions used to filter out btrfs subvols which have duplicate mountpoints
     :param mount_options: The mount options from the config file
     :param mount_options_list: A list of options for each mountpoint to be placed in global storage for future modules
+    :param efi_location: A string holding the location of the EFI partition or None
     :return:
     """
     # Create mount point with `+` rather than `os.path.join()` because
@@ -235,7 +243,9 @@ def mount_partition(root_mount_point, partition, partitions, mount_options, moun
 
     # Ensure that the created directory has the correct SELinux context on
     # SELinux-enabled systems.
+
     os.makedirs(mount_point, exist_ok=True)
+
     try:
         subprocess.call(['chcon', '--reference=' + raw_mount_point, mount_point])
     except FileNotFoundError as e:
@@ -259,7 +269,7 @@ def mount_partition(root_mount_point, partition, partitions, mount_options, moun
     if fstype == "zfs":
         mount_zfs(root_mount_point, partition)
     else:  # fstype == "zfs"
-        mount_options_string = get_mount_options(fstype, mount_options, partition)
+        mount_options_string = get_mount_options(fstype, mount_options, partition, efi_location)
         if libcalamares.utils.mount(device,
                                     mount_point,
                                     fstype,
@@ -349,7 +359,10 @@ def run():
     if not extra_mounts:
         libcalamares.utils.warning("No extra mounts defined. Does mount.conf exist?")
 
-    if libcalamares.globalstorage.value("firmwareType") != "efi":
+    efi_location = None
+    if libcalamares.globalstorage.value("firmwareType") == "efi":
+        efi_location = libcalamares.globalstorage.value("efiSystemPartition")
+    else:
         for mount in extra_mounts:
             if mount.get("efi", None) is True:
                 extra_mounts.remove(mount)
@@ -365,7 +378,7 @@ def run():
     mount_options_list = []
     try:
         for partition in mountable_partitions:
-            mount_partition(root_mount_point, partition, partitions, mount_options, mount_options_list)
+            mount_partition(root_mount_point, partition, partitions, mount_options, mount_options_list, efi_location)
     except ZfsException as ze:
         return _("zfs mounting error"), ze.message
 

From bdd059ffa81e0cd75fc9b19a39006d0311731bfd Mon Sep 17 00:00:00 2001
From: dalto <dalto@fastmail.com>
Date: Sat, 23 Mar 2024 09:43:15 -0500
Subject: [PATCH 05/47] [displaymanager] Fix sddm config file writing to the
 wrong location

---
 src/modules/displaymanager/main.py | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/src/modules/displaymanager/main.py b/src/modules/displaymanager/main.py
index 7ec6af774..217cd56b0 100644
--- a/src/modules/displaymanager/main.py
+++ b/src/modules/displaymanager/main.py
@@ -732,13 +732,13 @@ class DMsddm(DisplayManager):
     name = "sddm"
     executable = "sddm"
 
-    configuration_file = "etc/sddm.conf"
+    configuration_file = "/etc/sddm.conf"
 
     def set_autologin(self, username, do_autologin, default_desktop_environment):
         import configparser
 
         # Systems with Sddm as Desktop Manager
-        sddm_conf_path = os.path.join(self.root_mount_point, self.configuration_file)
+        sddm_conf_path = os.path.join(self.root_mount_point, self.configuration_file.lstrip('/'))
 
         sddm_config = configparser.ConfigParser(strict=False)
         # Make everything case sensitive

From a659db1f9ce55771fa3cca2546e1eb4dfeaf3dae Mon Sep 17 00:00:00 2001
From: Mike Stemle <hello@mikestemle.com>
Date: Sun, 24 Mar 2024 13:27:44 -0400
Subject: [PATCH 06/47] Update Presentation.qml

The `padding` property is present in the qt5 version, but not the qt6 version. I notice a syntax error as a result of this missing propertly.
---
 src/qml/calamares-qt6/slideshow/Presentation.qml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/src/qml/calamares-qt6/slideshow/Presentation.qml b/src/qml/calamares-qt6/slideshow/Presentation.qml
index aab7007e6..1eed2e842 100644
--- a/src/qml/calamares-qt6/slideshow/Presentation.qml
+++ b/src/qml/calamares-qt6/slideshow/Presentation.qml
@@ -196,6 +196,8 @@ Item {
                 Text {
                     id: notesText
 
+                    property real padding: 16;
+
                     x: padding
                     y: padding
                     width: parent.width - 2 * padding

From ec0316806fb9df2f4983e0c36ab4981ce9a4b3bb Mon Sep 17 00:00:00 2001
From: Adriaan de Groot <groot@kde.org>
Date: Fri, 29 Mar 2024 02:09:18 +0400
Subject: [PATCH 07/47] [locale] Fix build with DEBUG_TIMEZONES

---
 src/modules/locale/CMakeLists.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/modules/locale/CMakeLists.txt b/src/modules/locale/CMakeLists.txt
index 990032e87..1cb7a4f84 100644
--- a/src/modules/locale/CMakeLists.txt
+++ b/src/modules/locale/CMakeLists.txt
@@ -33,7 +33,7 @@ calamares_add_plugin(locale
     SHARED_LIB
 )
 if(DEBUG_TIMEZONES)
-    target_compile_definitions(${localeq_TARGET} PRIVATE DEBUG_TIMEZONES)
+    target_compile_definitions(${locale_TARGET} PRIVATE DEBUG_TIMEZONES)
 endif()
 
 calamares_add_test(

From 8440a6a5ddcb3284e68312d2acba14399d24c18a Mon Sep 17 00:00:00 2001
From: Adriaan de Groot <groot@kde.org>
Date: Fri, 29 Mar 2024 02:09:51 +0400
Subject: [PATCH 08/47] CI: switch openSUSE build to Qt6

---
 .github/workflows/nightly-opensuse-qt6.yml | 33 ----------------------
 .github/workflows/nightly-opensuse.yml     |  1 +
 2 files changed, 1 insertion(+), 33 deletions(-)
 delete mode 100644 .github/workflows/nightly-opensuse-qt6.yml

diff --git a/.github/workflows/nightly-opensuse-qt6.yml b/.github/workflows/nightly-opensuse-qt6.yml
deleted file mode 100644
index cd286d5db..000000000
--- a/.github/workflows/nightly-opensuse-qt6.yml
+++ /dev/null
@@ -1,33 +0,0 @@
-name: nightly-opensuse-qt6
-
-on:
-  schedule:
-    - cron: "32 2 * * *"
-  workflow_dispatch:
-
-env:
-  BUILDDIR: /build
-  SRCDIR: ${{ github.workspace }}
-  CMAKE_ARGS: |
-    -DKDE_INSTALL_USE_QT_SYS_PATHS=ON
-    -DCMAKE_BUILD_TYPE=Debug
-    -DWITH_QT6=ON
-
-jobs:
-  build:
-    runs-on: ubuntu-latest
-    container:
-      image: docker://opensuse/tumbleweed
-      options: --tmpfs /build:rw --user 0:0
-    steps:
-      - name: "prepare git"
-        shell: bash
-        run: zypper --non-interactive in git-core jq curl
-      - name: "prepare source"
-        uses: calamares/actions/generic-checkout@v5
-      - name: "install dependencies"
-        shell: bash
-        run: ./ci/deps-opensuse-qt6.sh
-      - name: "build"
-        shell: bash
-        run: ./ci/build.sh
diff --git a/.github/workflows/nightly-opensuse.yml b/.github/workflows/nightly-opensuse.yml
index 5b742b704..49c155a77 100644
--- a/.github/workflows/nightly-opensuse.yml
+++ b/.github/workflows/nightly-opensuse.yml
@@ -15,6 +15,7 @@ env:
     -DBUILD_TESTING=ON
     -DBUILD_APPSTREAM=ON
     -DBUILD_APPDATA=ON
+    -DWITH_QT6=ON
 
 jobs:
   build:

From 2fd98c913ad1a7c10e0c6923bc92d81c1a0b3fbd Mon Sep 17 00:00:00 2001
From: Peter Jung <admin@ptr1337.dev>
Date: Fri, 29 Mar 2024 20:05:41 +0100
Subject: [PATCH 09/47] plymouthcfg: Use plymouth-set-default-theme instead of
 sed

Currently we are running into an issue, when setting the default theme via "sed", since the "[DAEMON]" entry in /etc/plymouth/plymouthd.conf is commented, which results into that the theme is not correctly applied.

Signed-off-by: Peter Jung <admin@ptr1337.dev>
---
 CHANGES-3.3                     | 1 +
 src/modules/plymouthcfg/main.py | 4 +---
 2 files changed, 2 insertions(+), 3 deletions(-)

diff --git a/CHANGES-3.3 b/CHANGES-3.3
index 5312c1e82..1aff89918 100644
--- a/CHANGES-3.3
+++ b/CHANGES-3.3
@@ -24,6 +24,7 @@ This release contains contributions from (alphabetically by first name):
  - *displaymanager* module can configure an alternate SDDM configuration file.
  - *networkcfg* a bug affecting NetPlan + NetworkManager was fixed.
  - *initcpiocfg* Add microcode hook to initcpiocfg
+ - *plymouthcfg* Use plymouth-set-default-theme to avoid issues with configuration
 
 
 # 3.3.4 (2024-02-27)
diff --git a/src/modules/plymouthcfg/main.py b/src/modules/plymouthcfg/main.py
index 5e66fce67..529d3426e 100644
--- a/src/modules/plymouthcfg/main.py
+++ b/src/modules/plymouthcfg/main.py
@@ -48,9 +48,7 @@ class PlymouthController:
 
     def setTheme(self):
         plymouth_theme = libcalamares.job.configuration["plymouth_theme"]
-        target_env_call(["sed", "-e", 's|^.*Theme=.*|Theme=' +
-                         plymouth_theme + '|', "-i",
-                         "/etc/plymouth/plymouthd.conf"])
+        target_env_call(["plymouth-set-default-theme",  plymouth_theme])
 
     def run(self):
         if detect_plymouth():

From f0c2295606bb1a8efecf0bc91bda4029c498d728 Mon Sep 17 00:00:00 2001
From: demmm <anke62@gmail.com>
Date: Sat, 30 Mar 2024 20:11:48 +0100
Subject: [PATCH 10/47] [localeq]Map-qt6 needed changes for Qt6 & Wayland
 dragging & zooming now needs QML entries osm is the only qtlocation provided
 map plugin, preferred thus useless now no solution yet for warning (API key
 required), upstream bug reports offer no fix, example
 https://bugreports.qt.io/browse/QTBUG-115742

---
 src/modules/localeq/Map-qt6.qml | 30 +++++++++++++++++++++++++++---
 1 file changed, 27 insertions(+), 3 deletions(-)

diff --git a/src/modules/localeq/Map-qt6.qml b/src/modules/localeq/Map-qt6.qml
index b485dcadf..1e7b489e5 100644
--- a/src/modules/localeq/Map-qt6.qml
+++ b/src/modules/localeq/Map-qt6.qml
@@ -1,6 +1,6 @@
 /* === This file is part of Calamares - <https://calamares.io> ===
  *
- *   SPDX-FileCopyrightText: 2020 - 2022 Anke Boersma <demm@kaosx.us>
+ *   SPDX-FileCopyrightText: 2020 - 2024 Anke Boersma <demm@kaosx.us>
  *   SPDX-License-Identifier: GPL-3.0-or-later
  *
  *   Calamares is Free Software: see the License-Identifier above.
@@ -89,7 +89,7 @@ Column {
 
         console.log("Online lookup", latC, lonC)
         // Needs to move to localeq.conf, each distribution will need their own account
-        xhr.open("GET", "http://api.geonames.org/timezoneJSON?lat=" + latC + "&lng=" + lonC + "&username=SOME_USERNAME")
+        xhr.open("GET", "https://api.geonames.org/timezoneJSON?lat=" + latC + "&lng=" + lonC + "&username=SOME_USERNAME")
         xhr.send()
     }
 
@@ -112,7 +112,7 @@ Column {
 
         Plugin {
             id: mapPlugin
-            preferred: ["osm", "esri"] // "esri", "here", "itemsoverlay", "mapbox", "mapboxgl",  "osm"
+            name: ["osm"]
         }
 
         Map {
@@ -177,6 +177,30 @@ Column {
                     getTzOffline();
                 }
             }
+
+            WheelHandler {
+            id: wheel
+            acceptedDevices: Qt.platform.pluginName === "cocoa" || Qt.platform.pluginName === "wayland"
+                             ? PointerDevice.Mouse | PointerDevice.TouchPad
+                             : PointerDevice.Mouse
+            rotationScale: 1/120
+            property: "zoomLevel"
+            }
+            DragHandler {
+                id: drag
+                target: null
+                onTranslationChanged: (delta) => map.pan(-delta.x, -delta.y)
+            }
+            Shortcut {
+                enabled: map.zoomLevel < map.maximumZoomLevel
+                sequence: StandardKey.ZoomIn
+                onActivated: map.zoomLevel = Math.round(map.zoomLevel + 1)
+            }
+            Shortcut {
+                enabled: map.zoomLevel > map.minimumZoomLevel
+                sequence: StandardKey.ZoomOut
+                onActivated: map.zoomLevel = Math.round(map.zoomLevel - 1)
+            }
         }
 
         Column {

From 36485c8571ecc432bb50db7857e5c6a39dd2f977 Mon Sep 17 00:00:00 2001
From: Adriaan de Groot <groot@kde.org>
Date: Tue, 2 Apr 2024 23:20:35 +0200
Subject: [PATCH 11/47] [partition] Simplify logic for checking for unencrypted
 /boot

---
 src/modules/partition/PartitionViewStep.cpp | 9 +++++----
 1 file changed, 5 insertions(+), 4 deletions(-)

diff --git a/src/modules/partition/PartitionViewStep.cpp b/src/modules/partition/PartitionViewStep.cpp
index 8b7225da3..8d9aae609 100644
--- a/src/modules/partition/PartitionViewStep.cpp
+++ b/src/modules/partition/PartitionViewStep.cpp
@@ -497,11 +497,12 @@ shouldWarnForNotEncryptedBoot( const Config* config, const PartitionCoreModule*
         Partition* root_p = core->findPartitionByMountPoint( "/" );
         Partition* boot_p = core->findPartitionByMountPoint( "/boot" );
 
-        if ( root_p and boot_p )
+        if ( root_p && boot_p )
         {
-            if ( ( root_p->fileSystem().type() == FileSystem::Luks && boot_p->fileSystem().type() != FileSystem::Luks )
-                 || ( root_p->fileSystem().type() == FileSystem::Luks2
-                      && boot_p->fileSystem().type() != FileSystem::Luks2 ) )
+            const auto encryptionMismatch
+                = [ root_t = root_p->fileSystem().type(), boot_t = boot_p->fileSystem().type() ]( FileSystem::Type t )
+            { return root_t == t && boot_t != t; };
+            if ( encryptionMismatch( FileSystem::Luks ) || encryptionMismatch( FileSystem::Luks2 ) )
             {
                 return true;
             }

From b396f70d122f6cdb5d90727010df896d34ded17d Mon Sep 17 00:00:00 2001
From: Adriaan de Groot <groot@kde.org>
Date: Tue, 2 Apr 2024 23:23:56 +0200
Subject: [PATCH 12/47] [partition] Fix typo's in example config

---
 src/modules/partition/partition.conf | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/src/modules/partition/partition.conf b/src/modules/partition/partition.conf
index 0f23323f8..0975179de 100644
--- a/src/modules/partition/partition.conf
+++ b/src/modules/partition/partition.conf
@@ -193,7 +193,7 @@ initialSwapChoice: none
 
 # Default filesystem type, used when a "new" partition is made.
 #
-# When replacing a partition, the new filesystem type will be from the 
+# When replacing a partition, the new filesystem type will be from the
 # defaultFileSystemType value. In other cases, e.g. Erase and Alongside,
 # as well as when using manual partitioning and creating a new
 # partition, this filesystem type is pre-selected. Note that
@@ -248,9 +248,9 @@ defaultFileSystemType:  "ext4"
 # for root that uses 100% of the space and uses the filesystem defined by
 # defaultFileSystemType.
 #
-# Note: the EFI system partition is prepend automatically to the layout if
-# needed; the swap partition is appended to the layout if enabled (small of
-# suspend).
+# Note: the EFI system partition is prepended automatically to the layout if
+# needed; the swap partition is appended to the layout if enabled (selections
+# "small" or "suspend" in *userSwapChoices*).
 #
 # Otherwise, the partition layout is defined as follow:
 #

From 14c8893b032093413d4040a75885a7fc458c2542 Mon Sep 17 00:00:00 2001
From: Adriaan de Groot <groot@kde.org>
Date: Tue, 2 Apr 2024 23:26:42 +0200
Subject: [PATCH 13/47] [libcalamares] Turn off Clang 17 warning for MOC

The build produces a zillion warnings about unsafe buffer usage
in the code that wrangles metaobjects and slot names. That is
generated code and we can't fix it.
---
 src/libcalamares/utils/moc-warnings.h | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/src/libcalamares/utils/moc-warnings.h b/src/libcalamares/utils/moc-warnings.h
index 7d54c26b5..05ba34bd6 100644
--- a/src/libcalamares/utils/moc-warnings.h
+++ b/src/libcalamares/utils/moc-warnings.h
@@ -25,4 +25,8 @@
 #pragma clang diagnostic ignored "-Wextra-semi-stmt"
 #pragma clang diagnostic ignored "-Wredundant-parens"
 #pragma clang diagnostic ignored "-Wreserved-identifier"
+
+#if __clang_major__ >= 17
+#pragma clang diagnostic ignored "-Wunsafe-buffer-usage"
+#endif
 #endif

From fbde737802ae23eb663c241105d1c770205431f2 Mon Sep 17 00:00:00 2001
From: Adriaan de Groot <groot@kde.org>
Date: Tue, 2 Apr 2024 23:28:42 +0200
Subject: [PATCH 14/47] [partition] Don't redundantly specify value binding in
 lambda

---
 src/modules/partition/PartitionViewStep.cpp | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/modules/partition/PartitionViewStep.cpp b/src/modules/partition/PartitionViewStep.cpp
index 8d9aae609..119bf1baa 100644
--- a/src/modules/partition/PartitionViewStep.cpp
+++ b/src/modules/partition/PartitionViewStep.cpp
@@ -223,7 +223,7 @@ PartitionViewStep::prettyStatus() const
     const QList< PartitionCoreModule::SummaryInfo > list = m_core->createSummaryInfo();
 
     cDebug() << "Summary for Partition" << list.length() << choice;
-    auto joinDiskInfo = [ choice = choice ]( QString& s, const PartitionCoreModule::SummaryInfo& i )
+    auto joinDiskInfo = [ choice ]( QString& s, const PartitionCoreModule::SummaryInfo& i )
     { return s + diskDescription( 1, i, choice ); };
     const QString diskInfoLabel = std::accumulate( list.begin(), list.end(), QString(), joinDiskInfo );
     const QString jobsLabel = jobDescriptions( jobs() ).join( QStringLiteral( "<br/>" ) );

From b950f0f6d42f650a2f0fa386dbce86ad31ec38be Mon Sep 17 00:00:00 2001
From: Adriaan de Groot <groot@kde.org>
Date: Tue, 2 Apr 2024 23:32:53 +0200
Subject: [PATCH 15/47] [users] Remove duplicated constant (a regexp)

---
 src/modules/users/Config.cpp | 2 --
 1 file changed, 2 deletions(-)

diff --git a/src/modules/users/Config.cpp b/src/modules/users/Config.cpp
index 1e6db0f33..87d27fd92 100644
--- a/src/modules/users/Config.cpp
+++ b/src/modules/users/Config.cpp
@@ -444,8 +444,6 @@ makeHostnameSuggestion( const QString& templateString, const QStringList& fullNa
 
     QString hostnameSuggestion = d.expand( templateString );
 
-    // RegExp for valid hostnames; if the suggestion produces a valid name, return it
-    static const QRegularExpression HOSTNAME_RX( "^[a-zA-Z0-9][-a-zA-Z0-9_]*$" );
     return hostnameSuggestion.indexOf( HOSTNAME_RX ) != -1 ? hostnameSuggestion : QString();
 }
 

From 922b8aaaec421322cd430c06d812ba2f4f0bff0a Mon Sep 17 00:00:00 2001
From: Adriaan de Groot <groot@kde.org>
Date: Sat, 6 Apr 2024 22:34:27 +0200
Subject: [PATCH 16/47] CI: install opensuse-qt6 deps before building with qt6

---
 .github/workflows/nightly-opensuse.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/nightly-opensuse.yml b/.github/workflows/nightly-opensuse.yml
index 49c155a77..a7c2f83ef 100644
--- a/.github/workflows/nightly-opensuse.yml
+++ b/.github/workflows/nightly-opensuse.yml
@@ -31,7 +31,7 @@ jobs:
         uses: calamares/actions/generic-checkout@v5
       - name: "install dependencies"
         shell: bash
-        run: ./ci/deps-opensuse.sh
+        run: ./ci/deps-opensuse-qt6.sh
       - name: "build"
         shell: bash
         run: ./ci/build.sh

From 17b72b0fd879cf0d36c12a62f341ff0c55ed6acd Mon Sep 17 00:00:00 2001
From: Adriaan de Groot <groot@kde.org>
Date: Sat, 6 Apr 2024 23:08:02 +0200
Subject: [PATCH 17/47] CI: appstream-qt6 for opensuse builds

---
 ci/deps-opensuse-qt6.sh | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/ci/deps-opensuse-qt6.sh b/ci/deps-opensuse-qt6.sh
index c1138c1c6..1c7f0a3f0 100755
--- a/ci/deps-opensuse-qt6.sh
+++ b/ci/deps-opensuse-qt6.sh
@@ -8,7 +8,7 @@ zypper --non-interactive addrepo -f -G https://download.opensuse.org/repositorie
 
 zypper --non-interactive refresh
 zypper --non-interactive up
-zypper --non-interactive in git-core jq curl ninja
+zypper --non-interactive in git-core jq yq curl ninja
 # From deploycala.py
 zypper --non-interactive in bison flex git make cmake gcc-c++
 zypper --non-interactive in yaml-cpp-devel libpwquality-devel parted-devel python3-devel
@@ -18,5 +18,5 @@ zypper --non-interactive in kf6-extra-cmake-modules
 zypper --non-interactive in "qt6-declarative-devel" "cmake(Qt6Concurrent)" "cmake(Qt6Gui)" "cmake(Qt6Network)" "cmake(Qt6Svg)" "cmake(Qt6Linguist)"
 zypper --non-interactive in "cmake(KF6CoreAddons)" "cmake(KF6DBusAddons)" "cmake(KF6Crash)"
 zypper --non-interactive in "cmake(KF6Parts)" # Also installs KF5 things
-zypper --non-interactive in "cmake(PolkitQt6-1)"
+zypper --non-interactive in "cmake(PolkitQt6-1)" appstream-qt6-devel
 true

From 2c52adc8e8fb7e69237eda5559634153e28bd2b9 Mon Sep 17 00:00:00 2001
From: Adriaan de Groot <groot@kde.org>
Date: Sat, 6 Apr 2024 23:11:32 +0200
Subject: [PATCH 18/47] CI: expand functionality of build.sh

Make it easier to "just do the nightly build" in a Docker
setting by passing the name of the workflow to the script.
---
 CONTRIBUTING.md |  7 ++++++-
 ci/build.sh     | 30 ++++++++++++++++++++++++++++++
 2 files changed, 36 insertions(+), 1 deletion(-)

diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md
index 36199a5ca..a73f90589 100644
--- a/CONTRIBUTING.md
+++ b/CONTRIBUTING.md
@@ -154,10 +154,15 @@ dependencies for the image (in this example, for openSUSE and Qt6).
 - `./ci/deps-opensuse-qt6.sh`
 
 Then run CMake (add any CMake options you like at the end) and ninja.
-There is a script `ci/build.sh` that does this, too (without options).
 - `cmake -S /src -B /build -G Ninja`
 - `ninja -C /build`
 
+There is a script `ci/build.sh` that does the CMake an ninja steps.
+- If you set `CMAKE_ARGS` in the environment those extra CMake options are used.
+- If you add an argument to the script command which names a workflow
+  (e.g. "nightly-opensuse-qt6") then `CMAKE_ARGS` are extracted from that
+  workflow and used for the build.
+
 ### Running in Docker
 
 To run Calamares inside the container, or e.g. `loadmodule` to test
diff --git a/ci/build.sh b/ci/build.sh
index 60b3bc7ca..7108f9d1d 100755
--- a/ci/build.sh
+++ b/ci/build.sh
@@ -5,6 +5,36 @@
 # - BUILDDIR    (e.g. /build)
 # - CMAKE_ARGS  (e.g. "-DWITH_QT6=ON -DCMAKE_BUILD_TYPE=Debug")
 #
+# If SRCDIR is not set, it is assumed to be the directory above
+# wherever this script is being run from (this script is in ci/).
+#
+# If BUILDDIR is not set, and /build exists (e.g. in the recommended
+# Docker setup) then /build is used.
+#
+# If CMAKE_ARGS is not set, but the script is given an argument
+# that exists as a workflow (e.g. "nightly-opensuse-qt6" or
+# "nightly-debian.yml") and yq is installed, then the CMAKE_ARGS
+# are extracted from that workflow file.
+#
+# Summary, pick one:
+# - set environment variables, run "build.sh"
+# - set no variables, run "build.sh <workflow-name>"
+
+if test -z "$SRCDIR" ; then
+	_d=$(dirname "$0" )
+	_d=$(dirname "$_d" )
+	test -f "$_d/CMakeLists.txt" && SRCDIR="$_d"
+fi
+if test -z "$BUILDDIR" ; then
+	test -d "/build" && BUILDDIR=/build
+fi
+if test -z "$CMAKE_ARGS" -a -n "$1" ; then
+	test -x "$(which yq)" || { echo "! No yq command for finding CMAKE_ARGS for workflow $1" ; exit 1 ; }
+	_d="$SRCDIR/.github/workflows/$1"
+	test -f "$_d" || _d="$SRCDIR/.github/workflows/$1.yml"
+	test -f "$_d" || { echo "! No workflow $1" ; exit 1 ; }
+	CMAKE_ARGS=$(yq ".env.CMAKE_ARGS" "$_d")
+fi
 
 # Sanity check
 test -n "$BUILDDIR" || { echo "! \$BUILDDIR not set" ; exit 1 ; }

From 4406a879bcb192e544ef5b7a8465aa6e560c4b65 Mon Sep 17 00:00:00 2001
From: Adriaan de Groot <groot@kde.org>
Date: Sat, 6 Apr 2024 23:38:20 +0200
Subject: [PATCH 19/47] CI: use python-yaml instead of yq if needed (fedora)

---
 ci/build.sh                 | 9 +++++++--
 ci/deps-fedora-qt6-boost.sh | 2 +-
 ci/deps-fedora-qt6.sh       | 2 +-
 3 files changed, 9 insertions(+), 4 deletions(-)

diff --git a/ci/build.sh b/ci/build.sh
index 7108f9d1d..56ca770f1 100755
--- a/ci/build.sh
+++ b/ci/build.sh
@@ -29,11 +29,16 @@ if test -z "$BUILDDIR" ; then
 	test -d "/build" && BUILDDIR=/build
 fi
 if test -z "$CMAKE_ARGS" -a -n "$1" ; then
-	test -x "$(which yq)" || { echo "! No yq command for finding CMAKE_ARGS for workflow $1" ; exit 1 ; }
 	_d="$SRCDIR/.github/workflows/$1"
 	test -f "$_d" || _d="$SRCDIR/.github/workflows/$1.yml"
 	test -f "$_d" || { echo "! No workflow $1" ; exit 1 ; }
-	CMAKE_ARGS=$(yq ".env.CMAKE_ARGS" "$_d")
+
+	if test -x "$(which yq)" ; then
+		CMAKE_ARGS=$(yq ".env.CMAKE_ARGS" "$_d")
+	else
+		CMAKE_ARGS=$(python3 -c 'import yaml ; f=open("'$_d'","r"); print(yaml.safe_load(f)["env"]["CMAKE_ARGS"]);')
+	fi
+
 fi
 
 # Sanity check
diff --git a/ci/deps-fedora-qt6-boost.sh b/ci/deps-fedora-qt6-boost.sh
index 01e3e3449..7026927a7 100755
--- a/ci/deps-fedora-qt6-boost.sh
+++ b/ci/deps-fedora-qt6-boost.sh
@@ -4,7 +4,7 @@
 #
 
 yum install -y bison flex git make cmake gcc-c++ ninja-build
-yum install -y yaml-cpp-devel libpwquality-devel parted-devel python-devel gettext gettext-devel
+yum install -y yaml-cpp-devel libpwquality-devel parted-devel python-devel gettext gettext-devel python3-pyyaml
 yum install -y libicu-devel libatasmart-devel
 yum install -y boost-devel
 # Qt6/KF6 dependencies
diff --git a/ci/deps-fedora-qt6.sh b/ci/deps-fedora-qt6.sh
index 2d2e83ce5..9f91ada18 100755
--- a/ci/deps-fedora-qt6.sh
+++ b/ci/deps-fedora-qt6.sh
@@ -4,7 +4,7 @@
 #
 
 yum install -y bison flex git make cmake gcc-c++ ninja-build
-yum install -y yaml-cpp-devel libpwquality-devel parted-devel python-devel gettext gettext-devel
+yum install -y yaml-cpp-devel libpwquality-devel parted-devel python-devel gettext gettext-devel python3-pyyaml
 yum install -y libicu-devel libatasmart-devel
 # Qt6/KF6 dependencies
 yum install -y qt6-qtbase-devel qt6-linguist qt6-qtbase-private-devel qt6-qtdeclarative-devel qt6-qtsvg-devel qt6-qttools-devel

From b78721d4b9f11648ec21aacfe2596ab5e194d381 Mon Sep 17 00:00:00 2001
From: Adriaan de Groot <groot@kde.org>
Date: Tue, 9 Apr 2024 15:56:03 +0200
Subject: [PATCH 20/47] Changes: update credits

---
 CHANGES-3.3 | 18 +++++++++++++++++-
 1 file changed, 17 insertions(+), 1 deletion(-)

diff --git a/CHANGES-3.3 b/CHANGES-3.3
index 1aff89918..d167685ff 100644
--- a/CHANGES-3.3
+++ b/CHANGES-3.3
@@ -7,6 +7,23 @@ contributors are listed. Note that Calamares does not have a historical
 changelog -- this log starts with version 3.3.0. See CHANGES-3.2 for
 the history of the 3.2 series (2018-05 - 2022-08).
 
+# 3.3.6 (unreleased)
+This release contains contributions from (alphabetically by first name):
+ - Adriaan de Groot
+ - Anke Boersma
+ - Evan James
+ - Harald Sitter
+ - Mike Stemle
+ - Peter Jung
+
+## Core ##
+- Various Qt6-related fixes.
+
+## Modules ##
+  - *plymouthcfg* Use plymouth-set-default-theme to avoid issues with
+    configuration. (thanks Peter)
+
+
 # 3.3.5 (2024-03-03)
 
 This release contains contributions from (alphabetically by first name):
@@ -24,7 +41,6 @@ This release contains contributions from (alphabetically by first name):
  - *displaymanager* module can configure an alternate SDDM configuration file.
  - *networkcfg* a bug affecting NetPlan + NetworkManager was fixed.
  - *initcpiocfg* Add microcode hook to initcpiocfg
- - *plymouthcfg* Use plymouth-set-default-theme to avoid issues with configuration
 
 
 # 3.3.4 (2024-02-27)

From 1645874973669475954e039fbfbd5b3d126fa938 Mon Sep 17 00:00:00 2001
From: Adriaan de Groot <groot@kde.org>
Date: Tue, 9 Apr 2024 15:57:30 +0200
Subject: [PATCH 21/47] Changes: post-release housekeeping

---
 CMakeLists.txt | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/CMakeLists.txt b/CMakeLists.txt
index 7951b8e8f..6ef843413 100644
--- a/CMakeLists.txt
+++ b/CMakeLists.txt
@@ -47,8 +47,8 @@
 
 cmake_minimum_required(VERSION 3.16 FATAL_ERROR)
 
-set(CALAMARES_VERSION 3.3.5)
-set(CALAMARES_RELEASE_MODE ON) # Set to ON during a release
+set(CALAMARES_VERSION 3.3.6)
+set(CALAMARES_RELEASE_MODE OFF) # Set to ON during a release
 
 if(CMAKE_SCRIPT_MODE_FILE)
     include(${CMAKE_CURRENT_LIST_DIR}/CMakeModules/ExtendedVersion.cmake)

From 51d6dd23ea09f65168cf4c011a951c1a9a5a9a4a Mon Sep 17 00:00:00 2001
From: "Eugene San (eugenesan)" <eugenesan@gmail.com>
Date: Thu, 11 Apr 2024 20:00:41 -0700
Subject: [PATCH 22/47] Mirror GRUB's splash screen functionality for non-grub
 booloaders

---
 src/modules/bootloader/main.py | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/src/modules/bootloader/main.py b/src/modules/bootloader/main.py
index 189902839..fe4ba2a1a 100644
--- a/src/modules/bootloader/main.py
+++ b/src/modules/bootloader/main.py
@@ -127,7 +127,6 @@ def is_zfs_root(partition):
 
 def get_kernel_params(uuid):
     kernel_params = libcalamares.job.configuration.get("kernelParams", ["quiet"])
-    kernel_params.append("rw")
 
     partitions = libcalamares.globalstorage.value("partitions")
     swap_uuid = ""
@@ -136,11 +135,17 @@ def get_kernel_params(uuid):
 
     cryptdevice_params = []
 
+    has_plymouth = libcalamares.utils.target_env_call(["sh", "-c", "which plymouth"]) == 0
     has_dracut = libcalamares.utils.target_env_call(["sh", "-c", "which dracut"]) == 0
     uses_systemd_hook = libcalamares.utils.target_env_call(["sh", "-c",
                                                             "grep -q \"^HOOKS.*systemd\" /etc/mkinitcpio.conf"]) == 0
     use_systemd_naming = has_dracut or uses_systemd_hook
 
+    # If plymouth installed, add splash screen parameter early
+    if has_plymouth:
+        kernel_params.append("splash")
+
+    kernel_params.append("rw")
 
     # Take over swap settings:
     #  - unencrypted swap partition sets swap_uuid

From b8049daa454d647bb2732dbb9f6f155b01a4a05b Mon Sep 17 00:00:00 2001
From: Adriaan de Groot <groot@kde.org>
Date: Fri, 12 Apr 2024 21:39:50 +0200
Subject: [PATCH 23/47] [bootloader] Factor out running "which" in target

which is an actual program, drop the round-about via shell
---
 src/modules/bootloader/main.py | 9 +++++++--
 1 file changed, 7 insertions(+), 2 deletions(-)

diff --git a/src/modules/bootloader/main.py b/src/modules/bootloader/main.py
index fe4ba2a1a..6fe01f8bc 100644
--- a/src/modules/bootloader/main.py
+++ b/src/modules/bootloader/main.py
@@ -125,6 +125,11 @@ def is_zfs_root(partition):
     return partition["mountPoint"] == "/" and partition["fs"] == "zfs"
 
 
+def have_program_in_target(program : str):
+    """Returns @c True if @p program is in path in the target"""
+    return libcalamares.utils.target_env_call(["/usr/bin/which", program]) == 0
+
+
 def get_kernel_params(uuid):
     kernel_params = libcalamares.job.configuration.get("kernelParams", ["quiet"])
 
@@ -135,8 +140,8 @@ def get_kernel_params(uuid):
 
     cryptdevice_params = []
 
-    has_plymouth = libcalamares.utils.target_env_call(["sh", "-c", "which plymouth"]) == 0
-    has_dracut = libcalamares.utils.target_env_call(["sh", "-c", "which dracut"]) == 0
+    has_plymouth = have_program_in_target("plymouth")
+    has_dracut = have_program_in_target("dracut")
     uses_systemd_hook = libcalamares.utils.target_env_call(["sh", "-c",
                                                             "grep -q \"^HOOKS.*systemd\" /etc/mkinitcpio.conf"]) == 0
     use_systemd_naming = has_dracut or uses_systemd_hook

From b4edf5219805e48be1b703420fc2deddbf936cdd Mon Sep 17 00:00:00 2001
From: Adriaan de Groot <groot@kde.org>
Date: Fri, 12 Apr 2024 21:55:26 +0200
Subject: [PATCH 24/47] [bootloader] Avoid indirection through shell

There's no need to run the shell to take apart the arguments to grep.
---
 src/modules/bootloader/main.py | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/src/modules/bootloader/main.py b/src/modules/bootloader/main.py
index 6fe01f8bc..d09508fae 100644
--- a/src/modules/bootloader/main.py
+++ b/src/modules/bootloader/main.py
@@ -142,8 +142,7 @@ def get_kernel_params(uuid):
 
     has_plymouth = have_program_in_target("plymouth")
     has_dracut = have_program_in_target("dracut")
-    uses_systemd_hook = libcalamares.utils.target_env_call(["sh", "-c",
-                                                            "grep -q \"^HOOKS.*systemd\" /etc/mkinitcpio.conf"]) == 0
+    uses_systemd_hook = libcalamares.utils.target_env_call(["/usr/bin/grep", "-q", "^HOOKS.*systemd", "/etc/mkinitcpio.conf"]) == 0
     use_systemd_naming = has_dracut or uses_systemd_hook
 
     # If plymouth installed, add splash screen parameter early

From 6d242b67f943fec6ee6abb532fff1fc83ff9c1c1 Mon Sep 17 00:00:00 2001
From: Adriaan de Groot <groot@kde.org>
Date: Fri, 12 Apr 2024 22:05:47 +0200
Subject: [PATCH 25/47] [bootloader] Start building kernel parameters earlier

- drop unnecessary variable
- build "quiet splash rw" first
---
 src/modules/bootloader/main.py | 12 +++++-------
 1 file changed, 5 insertions(+), 7 deletions(-)

diff --git a/src/modules/bootloader/main.py b/src/modules/bootloader/main.py
index d09508fae..89058eaae 100644
--- a/src/modules/bootloader/main.py
+++ b/src/modules/bootloader/main.py
@@ -131,7 +131,12 @@ def have_program_in_target(program : str):
 
 
 def get_kernel_params(uuid):
+    # Configured kernel parameters (default "quiet"), if plymouth installed, add splash
+    # screen parameter and then "rw".
     kernel_params = libcalamares.job.configuration.get("kernelParams", ["quiet"])
+    if have_program_in_target("plymouth"):
+        kernel_params.append("splash")
+    kernel_params.append("rw")
 
     partitions = libcalamares.globalstorage.value("partitions")
     swap_uuid = ""
@@ -140,17 +145,10 @@ def get_kernel_params(uuid):
 
     cryptdevice_params = []
 
-    has_plymouth = have_program_in_target("plymouth")
     has_dracut = have_program_in_target("dracut")
     uses_systemd_hook = libcalamares.utils.target_env_call(["/usr/bin/grep", "-q", "^HOOKS.*systemd", "/etc/mkinitcpio.conf"]) == 0
     use_systemd_naming = has_dracut or uses_systemd_hook
 
-    # If plymouth installed, add splash screen parameter early
-    if has_plymouth:
-        kernel_params.append("splash")
-
-    kernel_params.append("rw")
-
     # Take over swap settings:
     #  - unencrypted swap partition sets swap_uuid
     #  - encrypted root sets cryptdevice_params

From f6cd82f9a4d1c2420991e14e65680fd8c2d51379 Mon Sep 17 00:00:00 2001
From: Adriaan de Groot <groot@kde.org>
Date: Fri, 12 Apr 2024 22:08:54 +0200
Subject: [PATCH 26/47] [bootloader] Group local variables

Put the constants -- do we use systemd, what are the partitions --
together, and put the things-set-by-the-loop together.
---
 src/modules/bootloader/main.py | 10 ++++------
 1 file changed, 4 insertions(+), 6 deletions(-)

diff --git a/src/modules/bootloader/main.py b/src/modules/bootloader/main.py
index 89058eaae..0a9e96598 100644
--- a/src/modules/bootloader/main.py
+++ b/src/modules/bootloader/main.py
@@ -138,17 +138,15 @@ def get_kernel_params(uuid):
         kernel_params.append("splash")
     kernel_params.append("rw")
 
+    use_systemd_naming = have_program_in_target("dracut") or (libcalamares.utils.target_env_call(["/usr/bin/grep", "-q", "^HOOKS.*systemd", "/etc/mkinitcpio.conf"]) == 0)
+
     partitions = libcalamares.globalstorage.value("partitions")
+
+    cryptdevice_params = []
     swap_uuid = ""
     swap_outer_mappername = None
     swap_outer_uuid = None
 
-    cryptdevice_params = []
-
-    has_dracut = have_program_in_target("dracut")
-    uses_systemd_hook = libcalamares.utils.target_env_call(["/usr/bin/grep", "-q", "^HOOKS.*systemd", "/etc/mkinitcpio.conf"]) == 0
-    use_systemd_naming = has_dracut or uses_systemd_hook
-
     # Take over swap settings:
     #  - unencrypted swap partition sets swap_uuid
     #  - encrypted root sets cryptdevice_params

From 131b2eded169d8785aeb94911e432a25fb7941ea Mon Sep 17 00:00:00 2001
From: Adriaan de Groot <groot@kde.org>
Date: Fri, 12 Apr 2024 22:10:39 +0200
Subject: [PATCH 27/47] Changes: update credits

---
 CHANGES-3.3 | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/CHANGES-3.3 b/CHANGES-3.3
index d167685ff..2db789bcc 100644
--- a/CHANGES-3.3
+++ b/CHANGES-3.3
@@ -11,6 +11,7 @@ the history of the 3.2 series (2018-05 - 2022-08).
 This release contains contributions from (alphabetically by first name):
  - Adriaan de Groot
  - Anke Boersma
+ - Eugene Sam
  - Evan James
  - Harald Sitter
  - Mike Stemle
@@ -20,6 +21,8 @@ This release contains contributions from (alphabetically by first name):
 - Various Qt6-related fixes.
 
 ## Modules ##
+  - *bootloader* Adds "splash" to kernel parameters if plymouth is present.
+    (thanks Eugene)
   - *plymouthcfg* Use plymouth-set-default-theme to avoid issues with
     configuration. (thanks Peter)
 

From fb83ad326bf52f8dbc4382949a93496e1026582f Mon Sep 17 00:00:00 2001
From: Adriaan de Groot <groot@kde.org>
Date: Sat, 13 Apr 2024 23:30:57 +0200
Subject: [PATCH 28/47] [libcalamares] Document recommended translation
 contexts

Jobs have specific contexts for their different strings.
Many jobs (now) misuse prettyName() as a status message,
although the existing fallback mechanism means that the
name gets used as if it is a status message when the job
does not define a description or status.
---
 src/libcalamares/Job.h | 19 +++++++++++++++++++
 1 file changed, 19 insertions(+)

diff --git a/src/libcalamares/Job.h b/src/libcalamares/Job.h
index 241b2883c..fe678fa63 100644
--- a/src/libcalamares/Job.h
+++ b/src/libcalamares/Job.h
@@ -109,12 +109,23 @@ public:
      * which of the jobs is "heavy" and which is not.
      */
     virtual int getJobWeight() const;
+
     /** @brief The human-readable name of this job
      *
      * This should be a very short statement of what the job does.
      * For status and state information, see prettyStatusMessage().
+     *
+     * The job's name may be similar to the status message, but this is
+     * a name, and should not be an active verb phrase. The translation
+     * should use context @c @label .
+     *
+     * The name of the job is used as a **fallback** when the status
+     * or descriptions are empty. If a job has no implementation of
+     * those methods, it is OK to use other contexts, but it may look
+     * strange in some places in the UI.
      */
     virtual QString prettyName() const = 0;
+
     /** @brief a longer human-readable description of what the job will do
      *
      * This **may** be used by view steps to fill in the summary
@@ -122,15 +133,23 @@ public:
      * module does so.
      *
      * The default implementation returns an empty string.
+     *
+     * The translation should use context @c @title .
      */
     virtual QString prettyDescription() const;
+
     /** @brief A human-readable status for progress reporting
      *
      * This is called from the JobQueue when progress is made, and should
      * return a not-too-long description of the job's status. This
      * is made visible in the progress bar of the execution view step.
+     *
+     * The job's status should say **what** the job is doing. It should be in
+     * present active tense. Typically the translation uses tr() context
+     * @c @status . See prettyName() for examples.
      */
     virtual QString prettyStatusMessage() const;
+
     virtual JobResult exec() = 0;
 
     bool isEmergency() const { return m_emergency; }

From fe68b45fc56f20ae1152bc10beb308fe06deba54 Mon Sep 17 00:00:00 2001
From: Adriaan de Groot <groot@kde.org>
Date: Sat, 13 Apr 2024 23:37:49 +0200
Subject: [PATCH 29/47] [libcalamares] Explain updating-status-text mechanism

---
 src/libcalamares/JobQueue.cpp | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/src/libcalamares/JobQueue.cpp b/src/libcalamares/JobQueue.cpp
index 64cb10e88..c7548cc5c 100644
--- a/src/libcalamares/JobQueue.cpp
+++ b/src/libcalamares/JobQueue.cpp
@@ -188,6 +188,13 @@ private:
             // starts the job, or if the job itself reports 0.0) be more
             // accepting in what gets reported: jobs with no status fall
             // back to description and name, whichever is non-empty.
+            //
+            // Later calls (e.g. when percentage > 0) use the status unchanged.
+            // It may be empty, but the ExecutionViewStep knows about empty
+            // status messages and does not update the text in that case.
+            //
+            // This means that a Job can implement just prettyName() and get
+            // a reasonable "status" message which will update only once.
             if ( percentage == 0.0 && message.isEmpty() )
             {
                 message = jobitem.job->prettyDescription();

From d0420ea3ee1010cc998f3e864f4eb60f1d9daa06 Mon Sep 17 00:00:00 2001
From: Adriaan de Groot <groot@kde.org>
Date: Sun, 14 Apr 2024 00:20:57 +0200
Subject: [PATCH 30/47] [users] Add translation context to AD job

---
 src/modules/users/ActiveDirectoryJob.cpp | 10 ++--------
 src/modules/users/ActiveDirectoryJob.h   |  1 -
 2 files changed, 2 insertions(+), 9 deletions(-)

diff --git a/src/modules/users/ActiveDirectoryJob.cpp b/src/modules/users/ActiveDirectoryJob.cpp
index 33706c48f..7f24f5931 100644
--- a/src/modules/users/ActiveDirectoryJob.cpp
+++ b/src/modules/users/ActiveDirectoryJob.cpp
@@ -30,19 +30,13 @@ ActiveDirectoryJob::ActiveDirectoryJob(QStringList& activeDirectoryInfo)
 QString
 ActiveDirectoryJob::prettyName() const
 {
-    return tr( "Enroll system in Active Directory" );
-}
-
-QString
-ActiveDirectoryJob::prettyDescription() const
-{
-    return tr( "Enroll system in Active Directory" );
+    return tr( "Enroll system in Active Directory", "@label" );
 }
 
 QString
 ActiveDirectoryJob::prettyStatusMessage() const
 {
-    return tr( "Enrolling system in Active Directory" );
+    return tr( "Enrolling system in Active Directory…", "@status" );
 }
 
 Calamares::JobResult
diff --git a/src/modules/users/ActiveDirectoryJob.h b/src/modules/users/ActiveDirectoryJob.h
index 8877ef7e1..035c93ae2 100644
--- a/src/modules/users/ActiveDirectoryJob.h
+++ b/src/modules/users/ActiveDirectoryJob.h
@@ -18,7 +18,6 @@ class ActiveDirectoryJob : public Calamares::Job
 public:
     ActiveDirectoryJob( QStringList& activeDirectoryInfo );
     QString prettyName() const override;
-    QString prettyDescription() const override;
     QString prettyStatusMessage() const override;
     Calamares::JobResult exec() override;
 

From 2127129227cf998f1f9f11b84a20ce6e541268f3 Mon Sep 17 00:00:00 2001
From: Adriaan de Groot <groot@kde.org>
Date: Sun, 14 Apr 2024 09:25:03 +0200
Subject: [PATCH 31/47] [users] Use API to get file-paths in target

---
 src/modules/users/ActiveDirectoryJob.cpp | 7 ++-----
 1 file changed, 2 insertions(+), 5 deletions(-)

diff --git a/src/modules/users/ActiveDirectoryJob.cpp b/src/modules/users/ActiveDirectoryJob.cpp
index 7f24f5931..5db18d2e5 100644
--- a/src/modules/users/ActiveDirectoryJob.cpp
+++ b/src/modules/users/ActiveDirectoryJob.cpp
@@ -47,11 +47,8 @@ ActiveDirectoryJob::exec()
     QString domain = m_activeDirectoryInfo.value(2);
     QString ip = m_activeDirectoryInfo.value(3);
 
-    Calamares::GlobalStorage* gs = Calamares::JobQueue::instance()->globalStorage();
-    QString rootMountPoint = gs ? gs->value("rootMountPoint").toString() : QString();
-
     if (!ip.isEmpty()) {
-        QString hostsFilePath = !rootMountPoint.isEmpty() ? rootMountPoint + "/etc/hosts" : "/etc/hosts";
+        const QString hostsFilePath = Calamares::System::instance()->targetPath(QStringLiteral("/etc/hosts"));;
         QFile hostsFile(hostsFilePath);
         if (hostsFile.open(QIODevice::Append | QIODevice::Text)) {
             QTextStream out(&hostsFile);
@@ -62,7 +59,7 @@ ActiveDirectoryJob::exec()
         }
     }
 
-    QString installPath = !rootMountPoint.isEmpty() ? rootMountPoint : "/";
+    const QString installPath = Calamares::System::instance()->targetPath(QStringLiteral("/"));
     QStringList args = {"join", domain, "-U", username, "--install=" + installPath, "--verbose"};
 
     QProcess process;

From 28a10cf8c3ac99fe59ffc362e83eb6f21868a8c3 Mon Sep 17 00:00:00 2001
From: Adriaan de Groot <groot@kde.org>
Date: Sun, 14 Apr 2024 09:53:27 +0200
Subject: [PATCH 32/47] [users] Use more structured data than QStringList

While here, apply coding style.
---
 src/modules/users/ActiveDirectoryJob.cpp | 60 ++++++++++++++----------
 src/modules/users/ActiveDirectoryJob.h   | 10 +++-
 src/modules/users/Config.cpp             | 22 +++------
 src/modules/users/Config.h               |  3 --
 4 files changed, 49 insertions(+), 46 deletions(-)

diff --git a/src/modules/users/ActiveDirectoryJob.cpp b/src/modules/users/ActiveDirectoryJob.cpp
index 5db18d2e5..740431cef 100644
--- a/src/modules/users/ActiveDirectoryJob.cpp
+++ b/src/modules/users/ActiveDirectoryJob.cpp
@@ -18,12 +18,18 @@
 #include <QDir>
 #include <QFile>
 #include <QFileInfo>
-#include <QTextStream>
 #include <QProcess>
+#include <QTextStream>
 
-ActiveDirectoryJob::ActiveDirectoryJob(QStringList& activeDirectoryInfo)
+ActiveDirectoryJob::ActiveDirectoryJob( const QString& adminLogin,
+                                        const QString& adminPassword,
+                                        const QString& domain,
+                                        const QString& ip )
     : Calamares::Job()
-    , m_activeDirectoryInfo(activeDirectoryInfo)
+    , m_adminLogin( adminLogin )
+    , m_adminPassword( adminPassword )
+    , m_domain( domain )
+    , m_ip( ip )
 {
 }
 
@@ -42,41 +48,45 @@ ActiveDirectoryJob::prettyStatusMessage() const
 Calamares::JobResult
 ActiveDirectoryJob::exec()
 {
-    QString username = m_activeDirectoryInfo.value(0);
-    QString password = m_activeDirectoryInfo.value(1);
-    QString domain = m_activeDirectoryInfo.value(2);
-    QString ip = m_activeDirectoryInfo.value(3);
-
-    if (!ip.isEmpty()) {
-        const QString hostsFilePath = Calamares::System::instance()->targetPath(QStringLiteral("/etc/hosts"));;
-        QFile hostsFile(hostsFilePath);
-        if (hostsFile.open(QIODevice::Append | QIODevice::Text)) {
-            QTextStream out(&hostsFile);
-            out << ip << " " << domain << "\n";
+    if ( !m_ip.isEmpty() )
+    {
+        const QString hostsFilePath = Calamares::System::instance()->targetPath( QStringLiteral( "/etc/hosts" ) );
+        ;
+        QFile hostsFile( hostsFilePath );
+        if ( hostsFile.open( QIODevice::Append | QIODevice::Text ) )
+        {
+            QTextStream out( &hostsFile );
+            out << m_ip << " " << m_domain << "\n";
             hostsFile.close();
-        } else {
-            return Calamares::JobResult::error("Failed to open /etc/hosts for writing.");
+        }
+        else
+        {
+            return Calamares::JobResult::error( "Failed to open /etc/hosts for writing." );
         }
     }
 
-    const QString installPath = Calamares::System::instance()->targetPath(QStringLiteral("/"));
-    QStringList args = {"join", domain, "-U", username, "--install=" + installPath, "--verbose"};
+    const QString installPath = Calamares::System::instance()->targetPath( QStringLiteral( "/" ) );
+    QStringList args = { "join", m_domain, "-U", m_adminLogin, "--install=" + installPath, "--verbose" };
 
     QProcess process;
-    process.start("realm", args);
+    process.start( "realm", args );
     process.waitForStarted();
 
-    if (!password.isEmpty()) {
-        process.write((password + "\n").toUtf8());
+    if ( !m_adminPassword.isEmpty() )
+    {
+        process.write( ( m_adminPassword + "\n" ).toUtf8() );
         process.closeWriteChannel();
     }
 
-    process.waitForFinished(-1);
+    process.waitForFinished( -1 );
 
-    if (process.exitCode() == 0) {
+    if ( process.exitCode() == 0 )
+    {
         return Calamares::JobResult::ok();
-    } else {
+    }
+    else
+    {
         QString errorOutput = process.readAllStandardError();
-        return Calamares::JobResult::error(QString("Failed to join realm: %1").arg(errorOutput));
+        return Calamares::JobResult::error( QString( "Failed to join realm: %1" ).arg( errorOutput ) );
     }
 }
diff --git a/src/modules/users/ActiveDirectoryJob.h b/src/modules/users/ActiveDirectoryJob.h
index 035c93ae2..77fd74057 100644
--- a/src/modules/users/ActiveDirectoryJob.h
+++ b/src/modules/users/ActiveDirectoryJob.h
@@ -16,13 +16,19 @@ class ActiveDirectoryJob : public Calamares::Job
 {
     Q_OBJECT
 public:
-    ActiveDirectoryJob( QStringList& activeDirectoryInfo );
+    ActiveDirectoryJob( const QString& adminLogin,
+                        const QString& adminPassword,
+                        const QString& domain,
+                        const QString& ip );
     QString prettyName() const override;
     QString prettyStatusMessage() const override;
     Calamares::JobResult exec() override;
 
 private:
-    QStringList m_activeDirectoryInfo;
+    QString m_adminLogin;  // Admin credentials to do the enrollment
+    QString m_adminPassword;
+    QString m_domain;
+    QString m_ip;
 };
 
 #endif /* ACTIVEDIRECTORYJOB_H */
diff --git a/src/modules/users/Config.cpp b/src/modules/users/Config.cpp
index 4a36d6d7b..2aaf3f352 100644
--- a/src/modules/users/Config.cpp
+++ b/src/modules/users/Config.cpp
@@ -674,40 +674,29 @@ Config::getActiveDirectoryUsed() const
 }
 
 void
-Config::setActiveDirectoryAdminUsername( const QString & s )
+Config::setActiveDirectoryAdminUsername( const QString& s )
 {
     m_activeDirectoryUsername = s;
 }
 
 void
-Config::setActiveDirectoryAdminPassword( const QString & s )
+Config::setActiveDirectoryAdminPassword( const QString& s )
 {
     m_activeDirectoryPassword = s;
 }
 
 void
-Config::setActiveDirectoryDomain( const QString & s )
+Config::setActiveDirectoryDomain( const QString& s )
 {
     m_activeDirectoryDomain = s;
 }
 
 void
-Config::setActiveDirectoryIP( const QString & s )
+Config::setActiveDirectoryIP( const QString& s )
 {
     m_activeDirectoryIP = s;
 }
 
-QStringList&
-Config::getActiveDirectory() const
-{
-    m_activeDirectorySettings.clear();
-    m_activeDirectorySettings << m_activeDirectoryUsername
-                              << m_activeDirectoryPassword
-                              << m_activeDirectoryDomain
-                              << m_activeDirectoryIP;
-    return m_activeDirectorySettings;
-}
-
 QString
 Config::rootPassword() const
 {
@@ -1045,7 +1034,8 @@ Config::createJobs() const
         jobs.append( Calamares::job_ptr( j ) );
     }
 
-    j = new ActiveDirectoryJob( getActiveDirectory() );
+    j = new ActiveDirectoryJob(
+        m_activeDirectoryUsername, m_activeDirectoryPassword, m_activeDirectoryDomain, m_activeDirectoryIP );
     jobs.append( Calamares::job_ptr( j ) );
 
     j = new SetupGroupsJob( this );
diff --git a/src/modules/users/Config.h b/src/modules/users/Config.h
index afdfa8efd..e49160f4f 100644
--- a/src/modules/users/Config.h
+++ b/src/modules/users/Config.h
@@ -230,8 +230,6 @@ public:
     bool getActiveDirectoryEnabled() const;
     /// Is it both enabled and activated?
     bool getActiveDirectoryUsed() const;
-    /// Config for Active Directory
-    QStringList& getActiveDirectory() const;
 
     const QList< GroupDescription >& defaultGroups() const { return m_defaultGroups; }
     /** @brief the names of all the groups for the current user
@@ -355,7 +353,6 @@ private:
 
     bool m_isReady = false;  ///< Used to reduce readyChanged signals
 
-    mutable QStringList m_activeDirectorySettings;
     bool m_activeDirectory = false;
     bool m_activeDirectoryUsed = false;
     QString m_activeDirectoryUsername;

From c61399bc8a69074b88fadc0669af79b8800db186 Mon Sep 17 00:00:00 2001
From: Adriaan de Groot <groot@kde.org>
Date: Sun, 14 Apr 2024 09:53:56 +0200
Subject: [PATCH 33/47] [users] Apply coding style to unrelated files

---
 src/modules/users/Tests.cpp     |  2 +-
 src/modules/users/UsersPage.cpp | 41 ++++++++++++++++++---------------
 2 files changed, 23 insertions(+), 20 deletions(-)

diff --git a/src/modules/users/Tests.cpp b/src/modules/users/Tests.cpp
index 1f9efc35e..ba2fd2dab 100644
--- a/src/modules/users/Tests.cpp
+++ b/src/modules/users/Tests.cpp
@@ -340,7 +340,7 @@ UserTests::testPasswordChecks()
         QCOMPARE( l.length(), 0 );
         QVERIFY( !addPasswordCheck( "nonempty", QVariant( false ), l ) );  // legacy option, now ignored
         QCOMPARE( l.length(), 0 );
-        QVERIFY( !addPasswordCheck( "nonempty", QVariant( true ), l ) ); // still ignored
+        QVERIFY( !addPasswordCheck( "nonempty", QVariant( true ), l ) );  // still ignored
         QCOMPARE( l.length(), 0 );
     }
 }
diff --git a/src/modules/users/UsersPage.cpp b/src/modules/users/UsersPage.cpp
index 269312330..d31f42f5f 100644
--- a/src/modules/users/UsersPage.cpp
+++ b/src/modules/users/UsersPage.cpp
@@ -163,26 +163,29 @@ UsersPage::UsersPage( Config* config, QWidget* parent )
     }
 
     // Active Directory is not checked or enabled by default
-    ui->useADCheckbox->setVisible(m_config->getActiveDirectoryEnabled());
-    ui->domainLabel->setVisible(false);
-    ui->domainField->setVisible(false);
-    ui->domainAdminLabel->setVisible(false);
-    ui->domainAdminField->setVisible(false);
-    ui->domainPasswordField->setVisible(false);
-    ui->domainPasswordLabel->setVisible(false);
-    ui->ipAddressField->setVisible(false);
-    ui->ipAddressLabel->setVisible(false);
+    ui->useADCheckbox->setVisible( m_config->getActiveDirectoryEnabled() );
+    ui->domainLabel->setVisible( false );
+    ui->domainField->setVisible( false );
+    ui->domainAdminLabel->setVisible( false );
+    ui->domainAdminField->setVisible( false );
+    ui->domainPasswordField->setVisible( false );
+    ui->domainPasswordLabel->setVisible( false );
+    ui->ipAddressField->setVisible( false );
+    ui->ipAddressLabel->setVisible( false );
 
-    connect(ui->useADCheckbox, &QCheckBox::toggled, [=](bool checked){
-        ui->domainLabel->setVisible(checked);
-        ui->domainField->setVisible(checked);
-        ui->domainAdminLabel->setVisible(checked);
-        ui->domainAdminField->setVisible(checked);
-        ui->domainPasswordField->setVisible(checked);
-        ui->domainPasswordLabel->setVisible(checked);
-        ui->ipAddressField->setVisible(checked);
-        ui->ipAddressLabel->setVisible(checked);
-    });
+    connect( ui->useADCheckbox,
+             &QCheckBox::toggled,
+             [ = ]( bool checked )
+             {
+                 ui->domainLabel->setVisible( checked );
+                 ui->domainField->setVisible( checked );
+                 ui->domainAdminLabel->setVisible( checked );
+                 ui->domainAdminField->setVisible( checked );
+                 ui->domainPasswordField->setVisible( checked );
+                 ui->domainPasswordLabel->setVisible( checked );
+                 ui->ipAddressField->setVisible( checked );
+                 ui->ipAddressLabel->setVisible( checked );
+             } );
 
     connect( ui->domainField, &QLineEdit::textChanged, config, &Config::setActiveDirectoryDomain );
     connect( ui->domainAdminField, &QLineEdit::textChanged, config, &Config::setActiveDirectoryAdminUsername );

From f674214741c5bf96d43f6c629d71919b96046aac Mon Sep 17 00:00:00 2001
From: Adriaan de Groot <groot@kde.org>
Date: Sun, 14 Apr 2024 21:07:31 +0200
Subject: [PATCH 34/47] [user] Rename members to emphasize these are *admin*
 credentials

---
 src/modules/users/Config.cpp | 6 +++---
 src/modules/users/Config.h   | 4 ++--
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/src/modules/users/Config.cpp b/src/modules/users/Config.cpp
index 2aaf3f352..b98919bde 100644
--- a/src/modules/users/Config.cpp
+++ b/src/modules/users/Config.cpp
@@ -676,13 +676,13 @@ Config::getActiveDirectoryUsed() const
 void
 Config::setActiveDirectoryAdminUsername( const QString& s )
 {
-    m_activeDirectoryUsername = s;
+    m_activeDirectoryAdminUsername = s;
 }
 
 void
 Config::setActiveDirectoryAdminPassword( const QString& s )
 {
-    m_activeDirectoryPassword = s;
+    m_activeDirectoryAdminPassword = s;
 }
 
 void
@@ -1035,7 +1035,7 @@ Config::createJobs() const
     }
 
     j = new ActiveDirectoryJob(
-        m_activeDirectoryUsername, m_activeDirectoryPassword, m_activeDirectoryDomain, m_activeDirectoryIP );
+        m_activeDirectoryAdminUsername, m_activeDirectoryAdminPassword, m_activeDirectoryDomain, m_activeDirectoryIP );
     jobs.append( Calamares::job_ptr( j ) );
 
     j = new SetupGroupsJob( this );
diff --git a/src/modules/users/Config.h b/src/modules/users/Config.h
index e49160f4f..fee1c3df8 100644
--- a/src/modules/users/Config.h
+++ b/src/modules/users/Config.h
@@ -355,8 +355,8 @@ private:
 
     bool m_activeDirectory = false;
     bool m_activeDirectoryUsed = false;
-    QString m_activeDirectoryUsername;
-    QString m_activeDirectoryPassword;
+    QString m_activeDirectoryAdminUsername;
+    QString m_activeDirectoryAdminPassword;
     QString m_activeDirectoryDomain;
     QString m_activeDirectoryIP;
 

From 0ef3842da6072e0607e9f80b60d13b7b98d64278 Mon Sep 17 00:00:00 2001
From: Adriaan de Groot <groot@kde.org>
Date: Sun, 14 Apr 2024 21:33:39 +0200
Subject: [PATCH 35/47] [users] Factor out show/hide of AD controls

While here, expand documentation a little.
---
 src/modules/users/Config.h      |  4 ++--
 src/modules/users/UsersPage.cpp | 40 ++++++++++++++-------------------
 src/modules/users/UsersPage.h   |  2 ++
 3 files changed, 21 insertions(+), 25 deletions(-)

diff --git a/src/modules/users/Config.h b/src/modules/users/Config.h
index fee1c3df8..07fa40d1f 100644
--- a/src/modules/users/Config.h
+++ b/src/modules/users/Config.h
@@ -226,9 +226,9 @@ public:
     bool permitWeakPasswords() const { return m_permitWeakPasswords; }
     /// Current setting for "require strong password"?
     bool requireStrongPasswords() const { return m_requireStrongPasswords; }
-    /// Is Active Directory enabled?
+    /// Is Active Directory enabled in the config file?
     bool getActiveDirectoryEnabled() const;
-    /// Is it both enabled and activated?
+    /// Is it both enabled and activated by user choice (checkbox)?
     bool getActiveDirectoryUsed() const;
 
     const QList< GroupDescription >& defaultGroups() const { return m_defaultGroups; }
diff --git a/src/modules/users/UsersPage.cpp b/src/modules/users/UsersPage.cpp
index d31f42f5f..1ecc0ebef 100644
--- a/src/modules/users/UsersPage.cpp
+++ b/src/modules/users/UsersPage.cpp
@@ -164,34 +164,13 @@ UsersPage::UsersPage( Config* config, QWidget* parent )
 
     // Active Directory is not checked or enabled by default
     ui->useADCheckbox->setVisible( m_config->getActiveDirectoryEnabled() );
-    ui->domainLabel->setVisible( false );
-    ui->domainField->setVisible( false );
-    ui->domainAdminLabel->setVisible( false );
-    ui->domainAdminField->setVisible( false );
-    ui->domainPasswordField->setVisible( false );
-    ui->domainPasswordLabel->setVisible( false );
-    ui->ipAddressField->setVisible( false );
-    ui->ipAddressLabel->setVisible( false );
-
-    connect( ui->useADCheckbox,
-             &QCheckBox::toggled,
-             [ = ]( bool checked )
-             {
-                 ui->domainLabel->setVisible( checked );
-                 ui->domainField->setVisible( checked );
-                 ui->domainAdminLabel->setVisible( checked );
-                 ui->domainAdminField->setVisible( checked );
-                 ui->domainPasswordField->setVisible( checked );
-                 ui->domainPasswordLabel->setVisible( checked );
-                 ui->ipAddressField->setVisible( checked );
-                 ui->ipAddressLabel->setVisible( checked );
-             } );
+    onActiveDirectoryToggled( false );
 
+    connect( ui->useADCheckbox, &QCheckBox::toggled, this, &UsersPage::onActiveDirectoryToggled );
     connect( ui->domainField, &QLineEdit::textChanged, config, &Config::setActiveDirectoryDomain );
     connect( ui->domainAdminField, &QLineEdit::textChanged, config, &Config::setActiveDirectoryAdminUsername );
     connect( ui->domainPasswordField, &QLineEdit::textChanged, config, &Config::setActiveDirectoryAdminPassword );
     connect( ui->ipAddressField, &QLineEdit::textChanged, config, &Config::setActiveDirectoryIP );
-    connect( ui->useADCheckbox, &QCheckBox::toggled, config, &Config::setActiveDirectoryUsed );
 
     CALAMARES_RETRANSLATE_SLOT( &UsersPage::retranslate );
 
@@ -314,3 +293,18 @@ UsersPage::onReuseUserPasswordChanged( const int checked )
     ui->textBoxRootPassword->setVisible( visible );
     ui->textBoxVerifiedRootPassword->setVisible( visible );
 }
+
+void
+UsersPage::onActiveDirectoryToggled( bool checked )
+{
+    ui->domainLabel->setVisible( checked );
+    ui->domainField->setVisible( checked );
+    ui->domainAdminLabel->setVisible( checked );
+    ui->domainAdminField->setVisible( checked );
+    ui->domainPasswordField->setVisible( checked );
+    ui->domainPasswordLabel->setVisible( checked );
+    ui->ipAddressField->setVisible( checked );
+    ui->ipAddressLabel->setVisible( checked );
+
+    m_config->setActiveDirectoryUsed( checked );
+}
diff --git a/src/modules/users/UsersPage.h b/src/modules/users/UsersPage.h
index 2d48f1fa3..379176ab2 100644
--- a/src/modules/users/UsersPage.h
+++ b/src/modules/users/UsersPage.h
@@ -44,6 +44,8 @@ protected slots:
     void reportUserPasswordStatus( int, const QString& );
     void reportRootPasswordStatus( int, const QString& );
 
+    void onActiveDirectoryToggled( bool checked );
+
 private:
     void retranslate();
 

From dfe07a51a34083b0186a8f524d5e96138e44be52 Mon Sep 17 00:00:00 2001
From: Adriaan de Groot <groot@kde.org>
Date: Sun, 14 Apr 2024 21:41:57 +0200
Subject: [PATCH 36/47] [users] Only run AD job if it is enabled (user choice)

---
 src/modules/users/Config.cpp | 11 ++++++++---
 1 file changed, 8 insertions(+), 3 deletions(-)

diff --git a/src/modules/users/Config.cpp b/src/modules/users/Config.cpp
index b98919bde..cd56bc3e2 100644
--- a/src/modules/users/Config.cpp
+++ b/src/modules/users/Config.cpp
@@ -1034,9 +1034,14 @@ Config::createJobs() const
         jobs.append( Calamares::job_ptr( j ) );
     }
 
-    j = new ActiveDirectoryJob(
-        m_activeDirectoryAdminUsername, m_activeDirectoryAdminPassword, m_activeDirectoryDomain, m_activeDirectoryIP );
-    jobs.append( Calamares::job_ptr( j ) );
+    if ( getActiveDirectoryUsed() )
+    {
+        j = new ActiveDirectoryJob( m_activeDirectoryAdminUsername,
+                                    m_activeDirectoryAdminPassword,
+                                    m_activeDirectoryDomain,
+                                    m_activeDirectoryIP );
+        jobs.append( Calamares::job_ptr( j ) );
+    }
 
     j = new SetupGroupsJob( this );
     jobs.append( Calamares::job_ptr( j ) );

From 51e05241fefa683504921b97ca2d37920d4d8f20 Mon Sep 17 00:00:00 2001
From: Adriaan de Groot <groot@kde.org>
Date: Sun, 14 Apr 2024 22:15:13 +0200
Subject: [PATCH 37/47] [users] Use Calamares command-running API

---
 src/modules/users/ActiveDirectoryJob.cpp | 23 ++++++++---------------
 1 file changed, 8 insertions(+), 15 deletions(-)

diff --git a/src/modules/users/ActiveDirectoryJob.cpp b/src/modules/users/ActiveDirectoryJob.cpp
index 740431cef..deb4c82d7 100644
--- a/src/modules/users/ActiveDirectoryJob.cpp
+++ b/src/modules/users/ActiveDirectoryJob.cpp
@@ -66,27 +66,20 @@ ActiveDirectoryJob::exec()
     }
 
     const QString installPath = Calamares::System::instance()->targetPath( QStringLiteral( "/" ) );
-    QStringList args = { "join", m_domain, "-U", m_adminLogin, "--install=" + installPath, "--verbose" };
+    auto r = Calamares::System::instance()->runCommand(
+        Calamares::System::RunLocation::RunInHost,
+        { "realm", "join", m_domain, "-U", m_adminLogin, "--install=" + installPath, "--verbose" },
+        QString(),
+        m_adminPassword,
+        std::chrono::seconds( 30 ) );
 
-    QProcess process;
-    process.start( "realm", args );
-    process.waitForStarted();
 
-    if ( !m_adminPassword.isEmpty() )
-    {
-        process.write( ( m_adminPassword + "\n" ).toUtf8() );
-        process.closeWriteChannel();
-    }
-
-    process.waitForFinished( -1 );
-
-    if ( process.exitCode() == 0 )
+    if ( r.getExitCode() == 0 )
     {
         return Calamares::JobResult::ok();
     }
     else
     {
-        QString errorOutput = process.readAllStandardError();
-        return Calamares::JobResult::error( QString( "Failed to join realm: %1" ).arg( errorOutput ) );
+        return Calamares::JobResult::error( QString( "Failed to join realm: %1" ).arg( r.getOutput() ) );
     }
 }

From 685e9db3f79611430cf6ce489a6b81cddb0acd4d Mon Sep 17 00:00:00 2001
From: Adriaan de Groot <groot@kde.org>
Date: Sun, 14 Apr 2024 22:16:40 +0200
Subject: [PATCH 38/47] Changes: credits

---
 CHANGES-3.3 | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/CHANGES-3.3 b/CHANGES-3.3
index 2db789bcc..a427dc26e 100644
--- a/CHANGES-3.3
+++ b/CHANGES-3.3
@@ -16,6 +16,7 @@ This release contains contributions from (alphabetically by first name):
  - Harald Sitter
  - Mike Stemle
  - Peter Jung
+ - Simon Quigley
 
 ## Core ##
 - Various Qt6-related fixes.
@@ -25,6 +26,8 @@ This release contains contributions from (alphabetically by first name):
     (thanks Eugene)
   - *plymouthcfg* Use plymouth-set-default-theme to avoid issues with
     configuration. (thanks Peter)
+  - *users* module now supports enrolling in Active Directory, if enabled.
+    (thanks Simon)
 
 
 # 3.3.5 (2024-03-03)

From 30ca0bfa450e27a86dcb6868cde95fbdbf1b3743 Mon Sep 17 00:00:00 2001
From: Adriaan de Groot <groot@kde.org>
Date: Sun, 14 Apr 2024 22:47:53 +0200
Subject: [PATCH 39/47] [locale] Fix TZ assignments for various locations

- Tehran (UTC+3.5)
- Muscat (UTC+4)
- Dubai (UTC+4)
---
 CHANGES-3.3                                |   1 +
 src/modules/locale/images/timezone_3.0.png | Bin 23982 -> 21322 bytes
 src/modules/locale/images/timezone_3.5.png | Bin 3294 -> 3340 bytes
 src/modules/locale/images/timezone_4.0.png | Bin 5009 -> 5105 bytes
 src/modules/locale/images/timezone_5.0.png | Bin 15043 -> 15038 bytes
 5 files changed, 1 insertion(+)

diff --git a/CHANGES-3.3 b/CHANGES-3.3
index a427dc26e..e8d20fafe 100644
--- a/CHANGES-3.3
+++ b/CHANGES-3.3
@@ -24,6 +24,7 @@ This release contains contributions from (alphabetically by first name):
 ## Modules ##
   - *bootloader* Adds "splash" to kernel parameters if plymouth is present.
     (thanks Eugene)
+  - *locale* Now picks the correct timezone for Dubai, Muscat, Tehran.
   - *plymouthcfg* Use plymouth-set-default-theme to avoid issues with
     configuration. (thanks Peter)
   - *users* module now supports enrolling in Active Directory, if enabled.
diff --git a/src/modules/locale/images/timezone_3.0.png b/src/modules/locale/images/timezone_3.0.png
index d5c003b4e778e618a5d82b23a31bbcc1f5fe7abd..5cdf8e04e09c0b9bbb014118652368b0b485c7eb 100644
GIT binary patch
literal 21322
zcmb5Vby!th)IGXELP6rt(v7rq2`Jstjg)kEr_ut_-Q9WUl8|mVbeEKL*FEt5zVF`W
zx%Z!YP@XMr)}CvwwZ<HC%(+A4<-}2t@R0xjK#`OXQ3QZjZvg;C`85LcCn5aJeb9gW
zG!qt<7nhWkCpB;~vvg!MvnF*=6c+-3_fcL^{1RQC@B&xr;zMh>XFqq72|JDZD}%(#
zgg|sZG_zC?W2B!lC55Bc*WWkb5Z-H)@-}eq@2%3k_7^0Ti;xRtQe1bD%o6?SLU?t&
zeATw-g?OE!lAp|v>07KJMjeM`f1^Tn9!fg=`p>UliAAF!2Keb4`@{lmD?M)UE=w5{
z*;q0N*Kq3^`2;v82q)+Hc@E1o5!KbX=oy%i1dgBA#mfho+U=Nl4tA0hC{mJWA~2Bi
znBtog<51#UL%H({@we_AnCMgMxl5*bEmmUMKWLAs#y84Y;L$P|ydj6{E6nkyW9T-U
zkzk3+I?E06={pJAjP6%~q3DG*mnY-#J{G)Q(yHN3vW@AKB)v9RAffnVifhVYd3QHk
zr$zH=^<BdR@1rJW;tgf%__%@irzcKZyQT3>{#AQKJkJR#Vf$Qw(WmNlOU5|YmY<(i
zrp@r7)*WF1+NXH;xHcG6RKIZyqY96f=K5xvCrItx)vK@=`>MRIQ4#3!ys?$gZ~y>=
z?B~BQqDw5$3&bpUWpzhIeHT(&dmCdjOCwT8H(Mi8BUdwH08kGoOE8PyqC@@hR1^9Y
z_Vo`v9vR*Om$AVkw3QT&nSK2E5sMhk@AB`3?75$A>Vtgjg3ob6HA`9{eG2ZotfsZs
zytfXrRUc<&stmjZANJhFPOXuy7Ph7t=Uta3R~x;FkE_Izbp_E5AH?Q8vLoYGFt?kl
z$7Xf$`yJf)zija<2v&$44!5y84S3KTMMTmbWwgb&#PIh%2zuUR;(eVT5YpJ(jNNds
zst~xjAh<tw%F`XVFw<I%cktBm7jBzh?tR!W6|{Y9#%{atzPQ@ANoC$xqVU-myuAd4
zle9_P8tw=(JsPat_mkh;_6&@-EsWglw58m+9a_hRid%S!D!(OJZZ!PMZRh44s3Nyf
zP<zP3XA(xiM7jdEy{TP91A~oLl$$1Y>X?2fg^U?S$nuX|`t+>SD26E!S#B%6zsG)*
zkE>GK9yT$KA;VH~wCO>^ChyMx-?$1!3{~L$`P--SQ<ss|w(_tEC+e{R+zxwTEH)<l
zD=B6`^6`%>38GJ`&9xv2?(AFt+lI!f-=H0f(4t)j%Pqtm8Nsc`Y<Z-*70gv~i0V(t
zcW?%>8cMR`A`Ddbvw*2y<0d&KTy(MJ&)8^(IK7F@@?kvbFS-gv_9Qv7KvrdcNB$0s
zdfxjJ!#t3%a1D-1nfbiGGZDv(A{b(R5xQ7u*)vs~#Iet*X`N?QGOTIQ8qUO@<2P?n
zzwCZwD1pboo@g=VbNp>!s75BuY2LDCwCZ(+N_=^fC3t#fw)#wr+IgvN;h#q;7OIrp
zz_?Omn)B^Dxl*^w^}Xrg6c>^Vd5@gir5l36JTCK7Qm4B)nkiTOA%T1eHMw&G1Or8k
z-~~}%-}o>M%Ob4CKAj;0T!}3IDEF#2d^+8}m8q0_yO_=yQFl~}{&l*YvX8j-YeH8~
zpO}E9tA+;v>~*&2j_y%)e9LY;+j}=D_KVY6k-*2vMd$aps4=lZ%1vFaw{lK>yqcW-
z_M8(351@IrtcB9MwH+^q_#^(GDQIQw9dX8*VW-wOIB>I0HolQ^W=;5Zf;Bm!T6DkM
zJE(W^<M6T?QR7I*Ikvbuk5@|kI<lAO+6*Mm1Dijf$mFBRQBKW1uUo3?w|^W`F<ukq
zPM53iKJ({|$+?2NezEJUzZ3bCg{gmKDX>p=Dkh$%v5$VH(R$UYMZ|XX!Kw<EIr+V<
z;yefcuolrhg#Z2)SX$B&OH!!eG}dsC@o&BPSCA<#w?}SEskv9OW7JU<e3N7qVqN3}
zLGfNMa2)vIWgnnKs*kYLR3Y3)4o-F^zOJ#slCtQ9zd#?Emg99e(0;RCH4qCMlRN{#
zj6;NF!7DMG;VE`kR~>!V^0CClpNg2ms`=+6rL2V^8#Wny3~vP~nsyb%2|_aJ;iQR;
zif~1ej6_SuJ*Av#WecIB^t)Dhlk{*MZ5bDV^qFyPKL##sh~l(oC3(QVT;Im|ejTaE
zT-|+o6QN`ER!R%*klA!|byjDxPb2KoV&C2nmfsYv9xUZuEd9b#ezi{T@gDJVREF^v
za^j~OE=Q+(tjS{&g|qJ=j%XJB@qY9}8Xk1s9e>*j`NdLDCQSxRe-Sm;e*Uh))D?Q+
zuG=5i2q2ksr>(t9QQ$@hEm0Lm-wSCh`W6(}x|*|VhDFr+TQonoB)@JcR2sD~*(jLM
zYR7G_p~XBHW(quig1f$7N!(ACigaU$p@Pxt+X6?#!K`kD*0e2|qf0te?l0HJ+|Ry3
zWuA`bbiE(y9X)%1-hVT-^!X<PtGe}3l(0bLfZLiEVdQ3yU}Mk<0q}r-vTdd^JLkNI
zl_D?aE4XDvoF)D5joMc`rO%q_-TkC(pWo)9k`sb5CjX(@gt92%?Hk$XbJ><rm@UlD
zg@s}*`hxmHYdo|~7~~D>eoyJuYDaNnL~;3v#(46KFaM<?j8+pump8~{f*q7(%c%(F
z-ZNken3K%p^M_CC&qNG7SaUN77#wb96|%z|YD6z*Fr@aSNYG2OO4;TGr*SJY*P^FY
zq$VV<!&}_mJG4i3if`B)38n=9J$5xFBa^39#QW*Ge<2b}r;=}jyY7wMYjZd?*GVXW
zqWL%ct>8GFc@S1T?z-++TQuqlP{nZRW7#G4#ZuKiqj^;LkH48S`|4-y&qz8{Yh!yg
z{T+f;WlE`d7jPm=R*g=d(Ftf-W5kjO9LBbIO%|y-vNSm1G4$mnka<t6Y2K}j&hW6{
zF`j1ymMr)=SON$zUn>$4f=}ksm?bQA|8y>pso?*)dc7W+TrkaYPF58i0iS#XqiiNv
zD7k!!i*+MhzO{6?EqvIgvk+?;bXxUxK$K02C7PYbkKLzOiI|H}d_trg#2oB^+PQ4q
z51S#zu4}cf+MCkfQuD>Z*uEHSto6WaD-WrSE22@5Pz-!~fv_V%o+Pi(nHF1ZW2+E%
zKDqFPg7w}>;>ndf+L7c3`W?BL#DPc1Qf-(Wf-J2yLTxOi2EAxu4DB0GwUb`K)*{kB
zh>dQnP2UHyTUZjrq8k;h3L%S75Wx=4$d+o!k3A$3Vp8`%71lp)`cpi8?s3`C?F04d
ztiaF+{_X!WSew~88Un!UB>qqqRNoJ8UtP8M)8tlVZSkng`-S^Gg|Q1;X;gd0?>uNn
zV9}bgFB1+N$D7%4OckOa=v4VRP=z2Sy>A%%uIdPLT1|5U6MKSVb9TD#2Bmf-W>9jV
zE-S-pXk*2s|INn0h{@H;7Jva%l*Jgif&cgaNQ4|F4BIboqW2zoBcVD-7QBM}ArZ0}
z+}}_aWBR9<Kfd4)8#W%p&>Q=Q%s>T1n53ve-dFh>on0JpbP{1MChql-4Q>Y$ncPYp
z_6AyJDOKqNdEL{^zRiM^sO8hY(f*buU#HtO$<FoN8IQ;F4q^RvF9%Mm9L@@R`62VO
z(!w0hx}^6B=({FtKdnk)3WH`J4ZSUNVlfy-PYC_X=g*_&ZAMCqup}K_ZmfgGR4psw
ziphVb<l7}jDGgvdcYWyoVIUQyn(40f9+I8yZG_Ihfnm-xDV1lW|1O1bFg(;sYgCJ`
zA$?1&Y##B0b5KQG2b+~EuLfgB>@NTmY8o8$=<Y1A;(-gEEQ72WMQEw&&yaDCqJ1=X
zx+skBn7Ud(IwqRh60>h`{~^?hPhM=Pg!U!{e@H&Tg&LzYW{+Dq<ErN7@Hc1qM9bdC
zpYDZNo)smWto!W#hJB<nAydf*-fi%`36mks;h{{@Z7i{KMwTgX<O-+CB1;sKzCQ%c
zK<{XnPCwcz;Jro*hr1A8yyB+m2RP`>dyr5O^2Ae>9fAj2x=Dh9?R8DN6SHiE_(f=a
z`S1yj?R^`fikPh8QEFJ<XDRqo{qBbU^ycs0sVl2kmN+~6@!~Hg%r(E6tf4<*JM}fQ
z`KWHhjl+pjQc1m+PMVhUJ0W-MK>-HFliGr>|NQ=Tpfq#!hDb2X`<2FiF^5b7xAoZY
zYvR^Pk^B;x;W;E*l~RE+>ZV^E%Ctv=tYKDNl|L<JkRgt0TjNgsNxOk^Z?jVlw6<{T
zI$Lo_FnvC2mJa4$`=pxerrR^AC=CP=xYgXh)+X9%p<IsncP?G5YR`8!kS#DNdna_A
z*(=pZ)WEbly1X~caEMZ}zZ`5gohCO-{CO5p$#Xaq`|k{;0O1$i_iCV@aJu#+jURKH
z{&eG2*}~1|ij0j>_4f(pP8nt6Q?GgE4XR|+{7d<lS~jB-_uyD)4atnTPZ|qGC-8Z?
zVCWjt>ip)foy|9jyaY0c3HgLc9qrq+NC3Jmn_=te+DKk!MsqY@4j&(K95PT+(Lg#q
z&J>*P^ZASL*i3zwd?yd_(2bo|ZMTH%<<mw4`h1?nELTDm^<ux2pRgHRg=N2@Th=MP
zP5*Nj=B|dba^r$z|Nr<p6^7?Y`6qahHRf}U|3LP{%(h}B?{W%>2LMt)QslF;YwE$0
zOYAo_FXr17n<Gp*H7BPLwn?@e$$>ZUpM)?Zn|wQFXJ8BoOg4~buinLbWpp{IbJ}|S
zMiUIO_<&%-@Bc<fNC-pfd+xh{r18xW9+kgR1#+`@4=il)zo@@Bsi|FE<xrLFrYr5-
z%UP6_pOv-xc(B0$Kq;o$!}ZR;P#5hg>DRjz=V0(@fKu{k_{Z}i#O=V0B%R&;SAaHy
z!VxSK&;UU1LP+oB!k6vkLjAK5nNzC;05qV#hGv$~kFD6t1wB=v3v_r~R6po<=x5~h
z^M#%$_P!1PbijYsgZ@mN1?ChMU?+ro&PD-%o8tMxH?CV<6&t`uhJ6LS5ov5l21~w*
zyXT@D9#|E^yI_LesK-CnEroY-Twd>e;I7}3>OSKTsv7F#ROGoT_}Dx7e5)$W%UIZ?
z8m6K7rMYg0s*LA1k*qE5M+h2sO|_>1&9#YPPTF3j+-IGhhZO)2{$i+JfCNtRL88wx
zvtCBPnk1R$XHC-;<h$ISeRonU<Y6fba&lv@$I0-XkdD;_><ojQ2RcCA1RW1*lxi&R
z6(|%;Egf(;=bC+?{)JmvMmbf4slCA}ThpvKScw9wR6UBmGpon+y)r5Yv~}k7PVw?4
z07Fzn3RIVg;9K*bPvB!&Yav32Sn`ytNfPxx!3)l`+l`&0MtsI}TXm^w;f?FllS#D{
zj69fOq6PEW{hrAh4vn#NZr1xZkp=*e`s&4RtO`S#rrR~)bnknTYquR2{6=g&^LwgO
zB`8@}HaybLTh!}Xrr3-Z=D2AW%6P4)`u(T+cg2MQVW~7zdwNiMjZM@+pmzv06}8l&
zls`!A$R02Npun#KI#F8%IWSV;q_-6w6<adz;+C3hg?x*>;@=s82IOc}h+IJ+FTBUZ
zndqw8V4cyo6fb7d0>S~eHXZ6N4%*;2ulk}PhFYsHJ<0Q8P1)m~N}Q9dDT4=zl#I1z
zH_^1{41|pvr{XJkvay=DCR&K%5zDtNilCp|K!>QX9`xxAK(Z%U?&!qpTw0>Z%4$$O
z9qjL{4m5I=QSf&W^9FFMgQ-%UP#Z}|{42p2htzLd(<p<<+WP%B>hIa-h(k=8g!H*^
z!qv23BOmPNh61v!i#1QH({&}(QvX%yNsj!%Ff7X7?n=QZx*^8#ON;MmFjEr_(B2oi
z3KZs3luZf`+zm45mx@H!Y>2R(JN`<Z0A2jmY_bnf(^6^7z8$*S*YYPP+Q{YOHp_G&
z*G#E8GYLdleqB`8mXcGEDx36rg?J>xe#4mO->6PI7Z&Bp#P7Mu*!-Pz%T(7iFCe0O
zJ7+w<pEEvwr?D)?Z$~8f)OwXbMRbCBXCo{?d(z*`y-vw`xX$@t;bY~-u@+-VGWBOg
zB&+veW%blDLVP=lW=Z5j)vh_kImd02t~=zpb8X|b>W~gu)%^#DSH6D&JD`@@rc=_J
zsh682GUV3Y8<4T84He)d4w4D~vNRjDW?;M_BV#o2tlW<>=ZJElUt8bozEr@bEQ!~s
z)oO}#)`(Ip)&4-gCQsE=S!q=myU<X`gC2FPOdg&1<=sS8GN18X@`89dopDasw0Ui5
z?JjOYawG^O-35+|{=F`9w|YKXZm3e97n{^-Ub-wu0;s3F9H5byeQ^8^^+KdY85j~e
zX@%&H(I0|Zmii0()IdsWYe?vBcGL7WPvTpfo58`hSH4QMq?Q0E%7|G6Q&u=db^*<3
z$N4brollot*IPJA^6$v1qxrbZHb?mF<?@v~R$&M7Q<5s7QK|ZH)ruk5S4WLo<MvgC
zA;H0kNdd}27_DuBut28sf2O36lVM?kFhSVWTE+uCBX7;rR0kSA7hsgBE{X8i3d6j~
zcHB=7mmLmEn+tdxUtCu)ET2>*Bx&5`Sz+@Ul~qRho>V*LpU4s9e{jFOk)HCEAz@u~
zG(<TBJhIbNy(UjR4?ek}&#98pcV_jRbxIx-`T(NMpRw9N0OYk^@Do>ZUw)O>IVsrG
zJKrNDDd{~aSt1*oTKHU)cAry=Mm>Hp2I$6n%Hb@E5EO-8@zq)dR8%R*)okHzEcT^e
zP3OCY-E>r5(OSwS!hm8rL0P&w9kwJ4po;JU528wxaA~QiSS{w7zo^MVTFmE*R2{eC
zY>)RgbniMU`dp{~_Mkn4S3f9L4P*KzjT#o10=}C6AwFjTY-e61f}S!AuqT>&hYsCO
zP$;i>aU1}w{`~)c0pZS5NAy!}8%>^zOZEi8Dbn`L&cXmAZwTt4F{4yps*3a5xD;3}
zH|M0s@nh9kIqanF09ek1^}!)7FJH0M0?v0D<t4nJ@Nk%Cg2y!P2*V@UZJO8Tv=kYW
z20IlBy4b;a917Ds=_DUNx;(A=)e9&cCBx`B3F|?PH~r+NDx=AQES#38%OGK=A(riM
zBA<(Ac8Gr%*&SL|rQXIjtv$>1mU==&L`G9do_66Zz_V9I#|9R_hkfy9F||Y#?+J~n
z<@^~)7)MCUS-{7zrD$x2$2d#*C*y014~8d-9`CiSq7^j)cd7E;LPNF1u+$A<1Cv@j
zYyWTUawAi3`&9{J{e6b0b>0<Hpw#|l7nDSkV!w|Lq%f@d9k2c|<7Yv&tX0}%LQtn%
z36b4oV3rj*MAPV%0b?SVlzbvNPPOymBb(O1k8P>EzcS8kUflI#Tne-WVP846-Te*;
z{FC}b^#I?R|JG3j4&E;-*Y=zAPF6W&<TqoPj*?o>hFoMULlT&jnws3ectX=IGw)P~
zO}9+_-6-2&Uf#7#6?%ql;w}L_t_PbR>#MT2d9`-r3ctvO|0+4eLW4Zg%PL^Yi{yGj
z7zpQ<9dhf7j2wlvcFwVj9L;KeQGOwGT8GI<>O1Q@E3SrOBHFgYa86^-_U?husCM31
zU2Z>WaPW^YL3VdiIXNrX|DhF5`B?k%u4MCdb}JB(Nue)I9L==x3|CT;f#?ODuu%|^
zw$W+(@pO&ET~D(1Spgn?uvM+58RHw(p;GnN!!r1jKY>i+myN0F_X)&;P2QiML=-~Z
zKKMcXui7x)M6%=Rer7GDeNHbzn;@s-zO-M0t@?E*`$xBJHYokUe<2gRibI+Xq{$0t
zm-UV#*7cUvlC2Xus~(&1FwJuT-B~?J=eA5Ug2`GfmdTD&F&s!pLTqA`|8pSrL}(#G
z2;_u<kYt%~8z~Mo_Z++F?x9jxq(tz0+{2!6L$64=2;KJ4lDc@wuo#VO&WG2@Nh;{*
zYBKE5;Ai#{VW#}Z$?0qHcIS@Q>n{JTS&&yL+EC)KgIG#F?H6}VOVP4|xo7P3jQ5I#
zr|rd0z_LRLKSREov%EK=F-D3RWrCb90+q(3&%vtn12%fz0;;p)RlBQUHElatRQb79
z-G^FZML$S-L7Y;&bdIoBvv}lERRS%>>$Mrr`Cqz>C5y9<RYg@x%@$tPfI6Q@D>8H>
zb(<eq4cd|kspbsQo#D5{9&H72NVO9pO^S8Ky@B<fHs%NU4~pvM8lC=HkeiU5f&s&3
zlF`=d3+=K|G{6E;?1eoAE7IVnF7W9tjy10xPp_F4QN+uenf)qNohwppQ10sq%Kzgc
zP{ZxjQ%EARnEXYUoP3mC$!>3JH)L%ol9U1HX#8(lfT;h0Ez=^T%|^-O>BNH9y?Ulb
zkGBeiAPT9k4~tyM@VlA-kD$v^Fc~|uw7M<5b}A1$hv4b)l>@Ukvi>vZyli2r_hl#=
zwUdWkd?^dnYE`aAv`Q;9g3Wk>tQ^&6CkFb12lm6bs_DXcNy0U3LB!q$|2pb%;&)kr
z%0K_v0hg5|5rr-!y%AU0A%k^&z+|Kq`Q>f<N#)xc10FFP<y8gm?X7_Ov6{$HqU%4F
zFRs9S!IEmE_j4bo>g)#7p+QYDcj2@-_wzOyNf!+5E-lXd)F38KyfNzL>Gx3q&ZaAp
z0t+v1Kz-q5Z^ws|Vi-{@u`aI6aovd-s0!WNs*ff2eNg7cs9+}$>sPcy$PUaRJ1)^q
z=8qo!DR|R*()tuy31#V})LH{jy3Ot%F}T8`*E_$E*n@OvUMgv(6a`5)GZ~(U=ErsQ
zJJr^}>8uZ+>>r|pdqZ2Izok+WhMZ!ofx$9P6%_c%LtB$OeK6ef>14d%$tWAg1rFFp
zd!AA$0X+$x+{X(wy4}<6<IC@H(XE+IQEX>bZ$`1<`Lty<a5O|j^0#_(PV%TH;)KW+
z;wSwM&#2B>-y;=rJGA`bIi14H8TE9_RlR!kze8TUek(#F^c{;@B`x0`9IYuoQ2fi5
zC!N9hT|O#{88vk^19P0r@D)|^AIx;5R4E=6YAafDuirE0OXQ;@?thcUO$2-jFQ09E
z<NmS(e~?oPV<V?jZ`proTX!^~-|`zbb*!7NmVQ$vnV4nIa4d;vohj3Z$Cb;sPoI(-
zSFeG5=wYWu3)!g&jYjn>SCyKJYhe4IwNU+qE)av$6niv+eY(UWj9@6!MylAYn6c>p
z8AK~gkA0cPLezSC8?@3-{(&Zl*~i`5cp>*lOdBF(p(+zCVQQQ`gPQ!hTBcE3ix=qN
z_3wb5G?blCw8h1`qroqu58WoqH~FTN%1QiR6Yu}fkR%to=+L}&f9Se1i@->R2Swp%
z#$cm^%rgAdNOEE!fm1Ty-23zI<JCP~Y@~OpUSamS96EhZ+~Co#*b^&Bw?XhDLCPho
z)$185-j=R`?YIqidE$mn``O4oIc-jBS<t`Mv*jnniGc<RwjGop#cg4cbKHya(JKwi
z1eA$7<{z2TOTMzNhpqE!j!&1l1Y=F{eTrI53>+vqxhgM03!2}i{6H#|TGhz=RJGIW
zoTnJFoxnPLhV0N<V?F0Md%@Il0|TsbJnv+^>E=637t6hsX-6CKvSr+eU}wJW2TF-(
zYA%cdWiks&??;>ExJzvwI@xza;kZGm_B_lV>AbHTBGD>D!YBF`_$quhW&4%eW{Q5;
zD^U<YwdrNs)Y^vJAZN0~lIcV~F1Mb)=hqj)jA<Ts6)kIXB(k}5UPCmOcBB)z*fB?8
zp*zWL1*hwstA3Xx-y(3^G*X&h`Chzzh6Yuz%j2b$n$=>|wdszScfHYI?5_gi=#bz(
zDKOrWvpR>$dJ8`eu0Kk)pUybBUAGcULPg7&7vgroy$y-0{VAeUjdF4=_o$h$h=|n5
zKJj&ctL!L1FUJvH=X@2uVm<eH$i-;R>3tug^AKMg3J>|`P%uuiMhyMiK^8^|T%=lq
zQ8Ri|qBpS<70sx~U*??!u#moR@JzcFt)FkPvCaGpM;Q^Qa_c>D3GDnl*-sGyA7!>%
zY1F(XUpS8wzU^YuD3%cEbp-3P3IG*;Mk+8+Z#Qkdnz_`ugN(HA{^eS>p2OOhlsVR?
zW@Y5;Vga#OMo4_82<)fr!ZMp&zm!OI$zRygS$fs4RaO{t{(v)Tw}D-jD{!*va|z>X
zYRPLRibQ6nJS1;Q`%N=q3sEzQQ&;kBsRlkgJ^rA`U{BxBkn+`XR+o)?@tz}=rzn*3
zAvEV>kBIQzUVW|G2&Gw>gK#t$>epHI(OzxlIsTNeWWkqa_|p~T+5Lgem|Y;@VEKG;
zOUs4-ETYYC!zRA7EcR^8v)YMnX_=>qF^cX&x~Ob&x|D<7>=$-;Sh=jt-zA^bwXDv(
zhYSF^h7?elqS8EoT#O+eD+MLyz=3Gc^ENFifRv0us?ISaMXAhT#t4_>BR88srHNg+
z4Qs;T;IBF_YTeZG71A-{-js;*KNv}u`P+)kW_Jo@bE77T8{dPLk4yI*Q(e(#gmBNa
zaMC>tHrkOt=f-9Ee=3&v#ydV|SIUJm$e|S_l{yEW9ByQcYFOYDj9aYm6c#lwEE-v+
zctzBjqqa~NLrrd9av6<nzcJo0$w>7sUAi3mvdb&wN_&#;gO@b-9#_V$cS!IL%A|j*
zgA{M(Sh(o^(PXPkprZoeuS?!T6_eu2l&jXedSMnfmuk^v(#<@du{;j5(JiSWJfcy?
zTB4DWdO3z6>*V(dO-PCe6<UE)R~jzo{7!QmT&>43S(OVS-J2epqocI~SEuRqp3T~O
z+PrqTq<OW}!-NsxG`x3_Zyg=Ob%~`JP!d(q;}A632C>P&@2(H9PcL&TI^Aet+3+hI
zMYFBL1mZLjzj7U~HEJus+~t>b3H^0=B&?-QOUe`WAjb0;74|t9s*-+agn@z$tt50+
ziVxe4`Y^5d>JC__M1@$YRHS$h*;CJYWEf;wyVlI5$>SCl7de}$=Gf=5o%+kTPZU=J
z9!MU~(~HU;)O{>w?wx7DI&_H+J)V|B4tX&emPw8!yR22lW=vujA!~Jm<*w(@S|+ip
zlE>8)N=W{M*dRooOoA0t^1BR~gv9qD)5R~n>v820rSsOwpEtEL)+8nK_03X}Ml5XL
zjSad;n=KqRi~kLB{kZbEx?YyP`M)jS^V)K0t2%1;J|#lqbo#Swq>0tKiD^zwPHpx}
zKk;h~k!A}S2J_{>_xp?S4I6IquNM-;rWp(FV$58*B%>z6hTnr+yl9#~d{}F)+i6mW
zl#r+7ob_BPL-XlCy0PnWRLYk`V8JxYpQ&ffU|9Qxg8TLAhRsUqI=vw~`bxk@zXA?$
zg?ILa1AJAEb_85TTNiA8K4uZ+=d1awT-EB*1zUpY5)wJm%4u)4YmE&)vqssw&-01b
ziDx^EtEq}%d`pt9J3XvELhfb1H*Iork2$Jl+FA%pCn!Opdsmhw&efwNXT!Y?PNXIf
z**VDjs#*}QH9WF!67f;(23+y5cJ&DMo(4YUbiIBK_wFHeW6VEtT6V#cc8N&?q8<Vn
zVUhJt3|5>B*sQY5`iXR&1_WDY9=0abr=DvKZ3<Kvxp8^0WzZy7a(LP#!}Ceay6GV!
zn~~^-{*Lp@vYBS&{G3eh2jt;#(>AIoO+4<EBB8;Mq`s?Q?VxR)8IRrBupYsNBTO_w
zjiV+Yv+9{FcN8aNxU`KezH6f<%;I!c@$qBtGqo;xD<PbONilqvVE-Uoly5*6-{<^e
zqw$|<?u6mIw~Q2H$jzqsQ3WpxW)wu3DJhH%b7}M~QOlay42s)B3dzDdQ&p&_q1bmh
zLf~h>w@C$O(eK|-VzWJLwZvBc`m>_c`gC<*pJD_xz39d8IywL2#N^o*{)_rA;nU63
zfT?H61{WdJHlF*vgypkcl!b6K<o*gR0~OjbdMXF9nlXD)wi!211Jk<`i57gRe3N9x
zW<v0x{SYc{iouDe4Y%fQw3wbpxk6!V4%?QHfxUjdhpn^wexlVD`76G!uEG{OLmWcr
zh<>&-feV-1Mmg1o11I(K`t7@p;4*|ccrQ==&Zi~*724(YtG1xCi*iH&g8H1?n7%%`
zYh9>2Y-+vmQ%}7esYUct%+>DglYM*jvC(I=nZ%%4ITO3aHo%I{m|HV=7NVGFL>gz}
z26e`|ittwkp1InSYA-G>4wL#hP=%zFRodTIW1EegMZDUm;wnNAJ&hU7iBJjnCUvIM
z?(3)lllJ41mD_#y892aVwD`6M5h_Yit1>vp=v9wiN+$fG%*_(gL=^hKR>jQlyEHb7
zpJvNdZh%a+RD;DLOOpGvdXS{8$Yv6%=_^!-2CLno%as{?)8vKzsXgFwZIhGpMS{(~
zCx6hpZ8%e#HaLm$xxF^TykJ5BAk_cOH>#n92_w&#cM!EVH^l!Fcb?E>DZ93r`kBJ0
z1znI(#N5=!iM5+7b7OBkrsMT;bQrVCTr)TQNhES1)A84@j;2{vg8Sd&PCf3fP1ty@
z%@EJ(93=yKR$YIr0ALKAseQkiAe!;dR=y~RcQA$@+358eyo1tGZ{Aw6RMo$Q^ZSwE
z=C7{09y{Hfd>?J#yd{xKESuyUc$#Nfu%$<SWREMVF*-+om6Lw=q-U)8l&3Ut^#v`i
z{TPkJdv*84Z!5)*J+GmD3swEy&S<oomi0PMBlYGLGcEXCcpPtDQY80Q8M5Y`HeEj3
zSB{onmUNc;1bF8E_6V4Nai&65KNTk-X{a{t@5|pck>&m`!<I8$nvU<tXZPvm#O6_>
z)dI%%0{%H%j-g-jyISf`hNo-`vz+b8|41I4x|ZqwmPj`-&R>@Y-WWre90^G}NfSn{
z;TPY@Pq`G$?y+qG+a?iRCX-i5*^q;4S#T<x@$&1`hHncCayXccT4>TA2C8TZ%NIIf
zI^4g5p7$W0-wsb8C?b`IA(b?b)3D$C3%kOh9GJn%>JV=wX|N8}BSMGe8#*L31TF@>
zTjU%2pEE9c+PC}pXswLkyE8Q7JslLFl;l}C8T&wP=fD=Fd9FQfq`BjbW=M@1@Q^>U
zJQRMoltdsAgA<LP-FP#d7!t~p{2KNKuM-w1WtWkJ1$+ZfI_o0^7U~>U;Ro}7nhnyU
z#C)v}SxEYTSz}t6Ym33A;4E<c`&$2qK8To~SNF&r(DMTA2*5qpMjDPbR@^WDIs}X|
zjf{PrKw(KJq|TLO45<yCZbk*veV(~(=34D}pp9JJ7^LQ3f8`$$1A7bhGWR_lM4(jg
zuRgT?5op(Ivoh{IS2sKAa<0{m5uu>gy00Pmxg%msHE-Do=(zp<Le1C8o*v2wT(pTE
zhcCbGo5+M^UzD5hm_2l{mBD5drOpJ|OS9_~L<4$6!g|nQRgT0TH~(>2w{<?M7pt_L
z3E`&^gzx{-qP-b)Ex-C`c1jgfkfZ^h%FGnHq<b4z(Jp_452N>>!Q~(b17w~oUZ&K8
zE!(qqg%A1H3&<s_q}gqE(jd98k#u>mvNdDglwt(_zQu})g_>D&_x?}0N=U?`BWmqW
z%uf%^LHjz)KnE?}^Ym19FLfIqs>{^61(qksRzR|LLFgh)pJzlAVTwFeiPE_@Jt04X
zgBFnreymyJ__38@)x#6g@r0Q_dHMMA<3PRqTqp5Wp~Xs&%|Q%%ikC=cbk@+Oq14Kk
z-E}xTZNYydNsg6YOT?v_Q|4zuXHpldWaxAAyBB9)hX5)Q=xuO9HH)|iK@N7Z<m5A~
zM4rjoW_r;PDJ3eIFyU}K{I@YVMaIkTs(Vn3XIlo5-d%3!3N+O(JHY^{$j@4Zo=VdO
zg-y%)-hvVdO3<*CbF7QGY$&@!7gaz^VhD<~BVN2~^HI@n#jM+&=W}W+@RHJ~nD5KA
z@Jw5_b75_5($o48)J3jgmDQfMtoBt=IC$*oAOjsYrmGj!&?l6+ACWA2-E~YyWz=*M
zQt*x+c<!x;_4?0MZ>5ws<=<WHzuf)l#St{qIBgv9nX*Eq{a^WT{0%!X_%E2?fK|_D
zA)=$WCbo!hQc7)Kr`KNJI9jOIXOrGVTlYv4s@B23<TFI^nt#C`p8hhxIp}@_HG-jA
z3_8=7yq&i+?^0U<k_@pn*ON+)$18Ms2LL-SxoC-;vFqNWl;59Pa+M>^_%J;jhQh-g
z0Uv2KC~g4U1kWI=?nL~!(0Y^i^GO+9zHu4MkU%<?WKK1E7J$aj0sSqg3C4`&0??$&
z;!`1QONEu;DN#NnZ&FB72)^@7-Q<KKJ^#3q@P5o)JOB1nGd|$U_TSo@9rPrfjx^W(
zY*ew))gLDy=hPY$#W&2a)Q{FVx@8K0h{Q!Frw}2xodjg~T#viYyaH@FXLq5-tCqFj
z%-MYWB!Xtya9BL$;q5lLf>S*YHeBW)dRTkH4pES9-EW4Ig72i?GAddQfVyHZ8GjKT
z@C6^~w7W>pY;n2pk535^gb*Bg$<QhWloF@m+dti&DXm<yKm4AzIzaFR!$1={U`)Ox
zl-YB1kljF?lpMqVhgsC2O87@8&alJ21fcgTH=Asj8$onF%0s(VDy?6-Ea)baWB1{5
zq{AL_dOSa5jH*`hVgT%L?EJ5QPhE3QW2;eC^)_kbvNP&r5y<@|M-K-a8zh<*DrMJ^
z{12bDDg1<)nPp5eNZg$5iv)V0`?Woga0DJ&VJ5#V5^TQ<-*vXLnb{r-LWvoImP|S6
z#=-(x?)n8=&ImF}T^OM<5Nru04Dg9!9qs<6S<pNnmP*zl4E^FA%ZwCe*xB8ItVNn#
z@wC^VHU{u%_?csU>blt-T}qJy2lIJwp6Lix_In!Ge2>fj^0=c-FaYnT$$-7+b3L_$
zCQyk1JwH<udnspcpb-m|dC8}t`hhXUL#gbK)m95}N&NILC8SGtrZ^cb$77_j%<iF`
zx5&_`Ir$fOKh@dXPe@I{0rD0v2okut+3J&$p?DUyVbD#Bn3UBTFgIu|b#Sm^{bc8m
z(2})$0Rowcwm}Ds8+g>6+=s}*0;X?G-4Os^jtv@ttK~-s&SObB<GPgy<;cbElRXmb
z=^(t<xARXYF74MV#MkBzbTB{zdtx*c)h+%!-l1XFEmn(KSn+Dc)Co_uDNe@7DZuQm
zM-yu&j_E=hvK}{>pZ>gB(dmcQ%BS#OKtlEw?BjXWI-CYs>BWe}I{l_pOKl*@kwKUX
zOHLM|9dsHO?S9aQ7MgK)^>p_;$l{iJdEtM00X(n)-`kECDlMtjZY4ce5(+Qt{ybGF
zTG!4q)6Y^>k^?dH1k<aAHHx1{vCn>U!G*O+X^b8|&O=km{g}vuwsWX%U5fe~3M;7(
zA0XrRHM;z@cOgE!=Zta}{5O##jZa}|YA#1)RDmV%9GXn_k`~pu{U9<4?IDh0?13+Y
zR|4Rxte!6cm}F{*O{^}SYmZs2lQ)_xXuzjdJt=54xRg)rVaTe8k#9qGm--(E!|iyT
zz?rzA<hc814<6GAWVTwH`%fq7P~zo69UQ!T*L!q$zjx&6<eoHu02CrKlt8=E_ea8X
zJsGaZ6(WKIeNK*6yy#g{a2<%d6tfh`Y%*@~p@J+VI}G0+x{1}1otNwkJs3V~$%IAY
z&La}NM-oF*Yrnk^ba%Ja2z>>pQ@!Bq67O-Vi7|W_Jh>|FqxtX>!DigiQ;bVX<7FHS
zP)hs~Vx4v#e4Iy7_+M==MKxGfSvnbV(^Y^@$(J!X#y5X?i_o8RD?$ivJDGhBr3dAi
zfKNIv8Aa1+%+sB?joFdX6Gc1*mnNs^VPzeYvAAg&M-(*@>?Jt6<LZ3<FX*DE{Vt%w
zJO5Gzx*gEsRiNnMWVpZJbLQTYR$mPYqh(E%m<n6SB6VlU$Y5b(VS6Jfg#QhXy7#T*
zlC#CWp|BvHj(XrJw7&LoAUm3(Os%XB=S!Wf=ULA4zctO%z&Q*fEO40RDc9!F-^aVU
zTxsju+gEYYKpo5c3>O`@AoL_v4k#TaheIw_(By8ksQs1yS_@Po_$?V1EJF`;nE!a@
zT<W;%OAE<}<-`Yvb9mY$5!XeUX)_LBF223?La@NEl#}+y^{ZZ=4}z?$Y9(jT=@7gG
z1~<XGr?!pZ@!X5?d`KSS2{ryNgmL)8Jx>HpOqEb}Cr{lIuI)b;Stjl0{4&C@z8r|p
zkXX6hdVRQ&!}o8I{4m(73>(9a4BS)74EFh~7V2(&Z+gM@ba{gK=yaO5Hn58t+S{C>
zQ!h`IjW2=)?FtF%0HFJ&Gi*iRwwl7*exQJO<^!SbKnLqj(oRpiqR$o+Ng6h~#&SM4
z9pA;pM;%l5apVXn0RSKV#bVqhubI||2%oY<!llb<C7hTnTQY;75;I!n`-fji+!(m6
z@r=%a(K@53NAJ>gBC?^*N8x`yJ>{>dsX>?2V%7qh47J8wRtszk5Dpie_nQTOVZ{l4
z=*i{wM06Agkk8l4P(l5J{qi(EAq(nvwwyIiYaM4+D~E}mH}cXueV6eg0rV6K6#>`x
z2}HO;VIs&{gBr}hCw~2x^F%<D(C*L?0j_6378RjXw_BZiRLtVz69l_eYUj@>yH_n#
zw|3ufiXi`Hg<$R3tW2LxWgVdy1epNp4wZHU&=YAPWQrq_>qMDI*!n1;Ps>satLmBG
zVtabmCa$t#*ds%}^n1o;5p;Ln+V0W|i7O@m^zvR<0<XO}bvgG*1$xDOQb?MC#@5c%
zqGEhOwS)PXQ=!Ot1|Lt1qKI6`fE37R`|s?*k0+Nc*kP6^P(<kAR`k66Km2IfK}YDz
z3WKmOKC@P4HEc60hy{g9uFy8kmmrX1aY$M?BPRve+ugeI)YsDBLZTGMU9$Dv#2FY@
zaNwGxLPN_ph+-8#ei^D)qtCvZ4ZC@=>AL(oxklOkn|AN%y{y})ypmFM_1t|@Nngg+
z5j2!%NY7V6w{Yg~<9t5BW$9AOuDSscv1ymo*T`QGt@A&e&f+>$c>QL69KO3t#em1o
z@W1okZ+l0cy&!O#KDBKzlz%@sH{|7WY5Q20(a3l)i%a6M1SK!eA36Hv)-s-`zmhXh
z;{N<mH_EmmSlHKrhT^i!XC{&P2R5r~hnG6(K=_R9`HqgJ7>U#w_FQFiVe>}mmtlNW
zC>z~oK2<-3hF_Gw0y5)2P(j0Arr0bq6T+X6R_KyJkX~@m7GLmj*P||vPiQINEp9bW
z0sHk-=lO3$7n6~ziy{;P#l|QQ0~iTFL3^fbs~p}pXGd-IMP1iUd<=C(pG=@{Ur53W
z=LDtRJ>ERI9}Dj3kN_Q0LV8fMxObs5EZ@IH93qhhhmyPzH~apJrmcb_N>#*R<F^AF
z#Wb4tjp2%b@`@C+JplEk79zK|WZKR+P3O&mQGmiAhXC)jex!~LzU;FwFgqa-yhy6o
zRsHYw=iS~RnaqJK*=>U7gB!gWczB8EQ77`W!T+>Tx1d_f4fygtlQw{x7GwHwB6GG#
zAz(5JAw?)UIzCFbaR31J5TEDd8*F{IRd4evaG5f^rkyJunU~FJ@#b93`)UnWt(X(=
zb!Xj!c8)<0%hJVKbJK0b&$b+}R-0h*YDzbcfD}E`30D6qh@5wj8xH80e`!?OpJ;yi
zTh^MUGwzYnym^;HyKICP%c};ZW1&4oh6)4q=;OHYtrE~&;uEA9I<#+`^CACCo%UT_
z{K_uj2SHHC8Fg3YSQ37k?qKbELg{z)=Q=g|fAfwAyH1OtVD?{3VDoZp@*MnP)eJ%H
zUwFF@yMmlF`+?RnV3=qIDgih?Icd=&5(}_`W%6KwDWVs2kWR5#s^*W6<qD)AY#y6o
zWeYM~B#sE->PhZ)N>j5+biHZrjbs*21AvP_;unzqcYmGcwUjo#Fu@NgR~NFW?KDp@
zvpcnvE=-T3W@TWFW?XM7M~Tv<$v&E@{tEa`!#?{I5)iJ{HB*0;*iIxpE=D$ok!}3_
z!0%V*J(RR9+~=YBSXHUgzys=xm1xhh9rDwT@XEcp^YW9$%(!%QAf|niBs+LQ#k$Aq
z%i#zTQ0bl-^fK!3k*lG_5w(W{J5_l-MRrkOfiYR1JzajS)`~#Po|mq}Sw~8W(h^_U
zP+yHSM++)6e!ifLW^em>fQR?NE#F3l=|4_y_T*m#qYm)XXE<<J3|kmCL+jz`uP>Yf
z4R*cX$vOSeylWjgt~ujqBLq4^g<eeLA-OGSb`gzUL%R`RoR7DbbUAHZ!@H`=G@8rM
zpmmlGsME*ra^u563J(6M&P$coQgk(srrLY;*rj(^0i6Ns3q=@yBYL6L#5rEURx>yx
zBvl<^rqKxtiZa`izxuOlkx#>VR}vRN4vPAwq!p5GIvGe`j=v%erBY*+FXtB$>+%3;
zZpxNDUH(?GXf{uX?f<s;f-rYRk6M4uoBZ{FbeO}d4H+R!kfeTfZD-w2N)>O%(V<gS
z7@+dwivhBY>yWPs#ZtYoEqXycD*2)iDeZ(L5pHc6lWojiXrCV}8w(3aT1hi2KR(}&
zOJt&z3qS08<c?}KF|-ZmB?sczT2&IB7LFw5hd4Ps`AJNfqKfuR3o%^by#ldS=@&_S
zWJz!?k;~HF8^K_y`t?mzDIQzy$~@joB{hwHi&}b62TJ71UX~@<@o&`c^*}Dm)Jm&H
zDneX>BsEI*VB6aHbn~Qrsx%jeq;Mq>8L29q{NJTuF2U19bt=BlEmfFI{r__5n#UW%
ztM-OO1)ucMzZ>*Uvc~!9i~9%vNSY)ELf{7du_a|_*ez5`6N(P;0ll05o_XmbaD8#~
z&7^fyRf@Of-taAr*#twZOg+)j!iVG83$^9rLz0--8nwTB0KgIOQl=W_yENEpvz4&?
zAhSV{FS>278wnpGGO#~i>9)yhY$USrl`YC})e0BD2fa}6;k$nY?R-0`TQPCuMy>&3
z?{c%s;v@2O)=cxt6yGvdzxAMZFamt%pJCG1Y3&$U`YvC5$Y;PrI7TW;GsFU)I%(W>
ztTc`y?EpqgB~<EqUN^)78sd>upLHT9{o~!=+E*7OUV}r|fnHe>U&Rc!m~aN4ekY+*
zGVlfWDoy@7mcDzka=jAnjlW9<0Pv3vD9Y@MosE1sU`Wsm%k|H5H81DKvYV`hO&e2;
z2Fc31^diVvH95^h$<A252}t4V8CnCG%rT<^wjrwKtx&Pgx5;Cpm-q<}1d{xsYj^m)
z{>qZjt;B41OiE|v%F&3nD=4-ipWUM-+DxcYoq@^DSf6_KERy8mPgGnnw1L)BzwsGQ
zT>Q<eHR-5W+eRad_Q#|SBlHppt^Z|O1b1_2F672iV}H<4pp!^>3Jn%$V~vC6z=AL7
zyvq+#h!mXWn+(<bryIdm-qhE>DXBonp+O~0PNK-rtpAJpb9{r4Kw4tIn6wn9krh8}
z4_XIQ_oUiozQ_uw|FI**TLW+Rh3+Bcm1V`>+Eer#G`sBVpqsC@mX1F9E=!@%Xn|b%
zoP6zzJ;@4sV1htw^b>(hn<=>3YC}>vopp!Q0aJr*$n2mrb^9M7{=S8^xjSKVt1Iot
z7Av<Cq1pt%Ds0w&V0HDho7SH+r`CoeRHG)#_dUqk$IRK_tZ&4E#7oO#W)UT@sB2I|
z99>?XcDzMN@vf!#DOL$*^h;#JUBVf3)e`;>l$Kb_J{pkS^`sXNKkkAs3J_+olLDi+
z3|1!AaBaLPF}xZ$rdw*iH(r)RcreA`Qcq9HW!=hBbT=1>oga8*Ttn1{nV~7H;Y&)k
z?RBoZT=QAV+H9BZ{xrVq%hPh!cdmxOcQ^(1-($=Bb~qV_M(c<||44f|OZ1p8K{B!3
z0zUGe)eBygwHF>H!2t2N&yiYhxcShe&YLHm)tV-MJ3c*$(c5g>7Mxtm&wTiS9@@i2
z&a`cq^v#{~9je;=kHW(s^Pz8AWT-;B%SWh>dX?&f4zB=)msV-@N$&@el?B6qDgLMi
zyH_kAwmeM_WUiP(91|KYG-R?Q2~4)C9qQtMo+;(`yd+4yshnhv!$Pl+4UDCvw3M$r
z505v%yik?TzN@+zN}KC;_r%C~t60Y+g?=r~aXHDdax7-QQmydJXp|3*i)?eei3#xh
zro2CIJ)x&LH3czTzI%Lf8<hord>-TFNOH(xWH_@gRWEMm$Iq$e^`Hg8;<%d?dDuC(
zY*3AI#G9)GL2}br85v{{N7bahHmdGGW101TX+GmG&v^w{GFZO!fm+(Hgx^?eGlRe6
z2Gj1+4L3DR)fW0!(Xox^v43KFuJe@P=bilSen5MAn4$?H_Bo#I$p8U*M*2UVqaAy}
zU#8T5cN1gA7QLG)DfNP$((IhGdv~RAtn8pDh>(^lRkx=d|J$MDV0L&Ic)7VgoYV2B
zxsZq@!|$({cY+4+bfB89|4XtpNtahByE(Zpj+D4AyCtjTEK^&1g>{Q-vi&ukc*(9-
zeNWp!^`qbnKX{z)Yc)9KF$*Es;Wbp82sqB&5ZRHEKABrI*xyvFv+~yW)?2O^+Hv~J
z2VU8P*6`oGu#x0^Sf@XTj${%)a_F!ljLWU0cIxxA^3e$STpzlS9Ttr3=d9S`)@y3U
z3n!^Ic~r5dM5N3P-KyF7As5}7vk?jL)m9n>i`vF@95n`Awnmw-AZ29dVH=G9eE?2q
z5{|+Jp*YJN8Mf8_*M^bWjGw5)BmAr!&JU}Ljtf!B4*FqK51S>CkkD7MxwXcJDxz-I
z#YQ&9ZC9?-;j!B$TwiYF26#Xi?3j%-ufpWTxUrW!p;>i8eoI`igoSZ?Dl!ss4q}Ah
zeE~DWAR3hIV*EEXXxBC;D8!*WvX~<ZopQ1)fXLa@X1@Bt2IovRsRLI9)l4x|g8q`8
z%EKDkJkYN6W-CpKAw%bHS~1o_!lL<<QZg7_L=mCj5X4^kT3m}uL=tq<HYS8#Ra?t2
zDjvTEfdS0_JL{zx_bW%P;_PIP7Sah`qc{HwJ7mb?ZJX;3Tz8i?zVm-E-cbzVuW#6F
za?a8Y9*RUeawTi#{*V)w7YsMv--`c(5+hfa?LqRFq9*dmz!f<9^ZV40Iu4TEiO;iX
z_;NDUtXNPfLh(Ow#_O-mzqV!v;lDNgIK&OU>03`&(hWrX1b>zrd`8Q3M~oJ#%TtQq
z3+}!7t})h_e)I(nKH7+aaIl+htGq?8M~W}{{ocDk!yh?w+Z`@+(G+aBPTv859`1zz
zrlLLecpyZVo#I9_8u&8X%VygvFc`6gteI0O6sx+QDVmeL?Qv|%LZYTt%mo|#4lNt=
zWM5)k9$#jw<HssuZ*AGxzC)INb=EC}oYkoQcK{dl>VP_W^Csq7-<#4@IG_aQ1<`qA
zbs&FCQ<q79wEdNxVbBU%;7wpE;k`3n5<Ve`9k3E5r=Bdu3p_^|E~QEsE=OUuVk@(s
zs#`K;|9U`ffE}(f|CT;jqAScph3!a%F|sx*ZvQ%9Xi(+%0cM(|d-<jcPy1iU=_7Q7
zUfS~@u^G2R{DMT`MJu7y++MVN?9#$16Xz+nT#?I0$)8Q#4fegsMXl1lFJKl~wjUA1
z$u}fN(4;cq%#%_JG>)ejLp%*O5XpOSBPKKvHLH$rLXm^oF1owVR=B^`5Fh~R#xHAQ
ze7~8|T3^tp(^^&(?gH8Tk=$47m}{eVUmlU(pQ2%ErpeoVpP>UPNRjFmq3IMtuS^;4
z4oa1hR(Rc`8AHd+$iq>D0_X+&$9Tpe7Bq*sK8!4Bb<?W`RiyesD)&OV1+mBWVZ$4g
z8^pV--P<;|Lj?WMy&+bhLxT^^6v^JTq5F@v(VroWhx!W%eB|YCJF6V4(6Pn_GVS!9
z@d<x9(q~)ekW9(*gS`27qWB`s2qtZYdh=~Ww12Lp+Vj8ou2@R}pyZ{uko}`-&tth?
zenxP&+jpXge)k#7>ug@<(z}znko^cUhUW@?EL1Zwb$z-gi2QhWiWb_=&4=%~TqJ*E
zaP_qizD$zQh=PKm*V<Lig1%6f3QB5TQZ0+l8K0-$CJygzV**ZAm3mUs%f(SNW6EQP
zhoT;47LT}f0^FwnsDS%_B-I3gd$1_^?L*}KppV_5#NWubXSIXrOax^-eM2;8qq4dz
zp-fO&gZ@J&lrdSz%|%_A;O@eg^=nmynUfb-eiMt-X-t_@hqs#fUkgT{YWD89SKbo`
z%U}M3JNikd1J&@(v8=(i7@b)GNq3IYNoe>b_|Jd==7*)`<#bC-!ED%Nyz8%`^bT_*
z%daw8L!w4##Dc8n3gY~Xq5wVF7p@&xzmYcMLaFuE?Lvo0aCx3efY1Wtp)>^6$h2z6
zaMy2ic}QeovKOuGL~<)g%^C>{`rguizj*p6*iO4tUv-AorC@#f@enUsSe5%P`LGcF
z>8Wk3k|y*W1Ifk~+0nM%>HhKZBa*qR?cU<Jx^?@n$Ux@T=UgE(tHEtL${a*eDNHz%
z9GoQ47t{4xCReS{qoXWz;#zOzDuTpwW6~N7mYL0jR=3~(S6q+^$flEL(;Td1|9U1+
zH>B?;8ADPD?c+wK2;vfCXZ1X5>yT9jL91zuF)y!FtqKu(c{&z5S^Qtk9Qh-ZTYID;
zTe=j<a@8%VER%Jj6lIj67>spB?!`sOGD9<#kSW_lR~Tk|J|R058r#_SecuOJ$~Lx{
z!7%f^+<)Tx@qOQO&igFqoM(T6AfqmmE;z^+lVLNiY!k5d9gRu$MDM}yZA~@QD)?+z
z)t0e5A)svK&+s5+o7Nab1=nIgLqBpRI*SiibH?Us2J_3@zF)*bHJf_l%L}Z}X6*io
zang@j#kvQgSfZ}kVLc<s0H`O9K;=aT?vKr#)o|Z|UCf|GHO%X8?148w<aeokdML&}
zwB4}20Oi3~&Ri}d6o>;!LAr22_vSvl-6V8P|M1l_<T*$@8~4tX+8+U%j?DQXzU$Qs
ze=9esczsUp&F_xY-#Q<bTp_mKKgolr-eYHP<l?^F<ks8a1+2lf!-IKO&w0&w($(ss
z&ys7#NOwo05MJ<w|0{dc*7xPc>z$p=73ws<1(HFB>$|4V?M6F8dA={+8+y$`Q+}M4
z?SfPHLg0s`5JN{=lrwK{*hJpLWUJV7A)4!NRIol<rYa&Hw+sm13gKGuA1fCLm)mm~
zb}PQeQh}(&b|jQR-AAI_k!uYDa(N*@GU~tQH0)9B1w`V1psHs|=q=;#;4JrVj|r-=
zzqenrd|`_#{f0VMmh@2wG4KFxswkp`+O83#c6PiV#@>W41OTo}^CNxTnb#DEF8#a^
z{`Y7jJCpHI<G3{WjjnY#9Q@(Z*e!(k&r!d9RR7RS<S4$@n{3k3sIQN=V;i9Ck#>)w
zivY?TUV=TpSF^KDM+u)f=y0M1YN?!hLinvUw#&JDrafYJ?zyJ=uzO<Q_Vc<BTCvLQ
z-i?9j+GUdB981M2iR;xlz>jtmqiov1{4x7tLCWOI<x8(imiH0@Z%CTI>>jMPkCPR=
zsq_>380P!^rWba49EvD+DC4_WAl$(V<dzrKcwPsxl4Ep!=d<yMGjNqPXqvtERrTB1
zh^Gz8t<S5A0>l$l<N11LcHg~rcrBAl8i^7V>;mS6|C>)hSx3`$=_G{(p0K=HmY9f{
z)HAEZwJD0S_h^)A&sQK4b?XR6;lN*!OtyQs{%)@M+u0IL#PkP>X2O&Xxb#4n-|&pR
zDd2zVug#J_Ooi~NnM}K?F+6M2L3s3Ly<yvLF|Ee_MN7z=vircGdJpJfGR-bz5t312
z5$T;B49gZyO-vqBwW5ps^`I0#1q1{7^^kxi7d{OM>_W?bZX|~U2bASt``aD}%v`wk
z-T*+{DYyo>_yq5bZ6Z-!9G?>1QNue4Y56ekm!^izZW{UkWxI|F7A5KeC<nw)9LaJg
zvg5{T?_M8iGbw4d^^u36by~fJET_&68_N-n?TKn~0Xb_P*=G_>Wt{C+w`D~2@_7E_
zP=0vpj3Fd}@2Y36c`Le}B--I4ZG9gzcu}6ZVZi?cYoA>4cjt<QcY$&U;c@OU5M2I<
zW=}QO+5Uljm0vR=sV<{`{{7!A|Dhl$*_QWlVSJzB79mq48H|14-!nbluxxY1{fPV0
zC#LFRvlf&VfYNw+$Ps??G|o7Bfy&gOZd6!7@p6Qpljd(L@`Wuq5PeV5%<CirgKl-f
zW|-S|-Be71v!kU{(4NdmrB%QsD-oG@SYHYfTk1(~c0vI$G#*wV^;PgY2JBJJ3g+Uc
zV{uj@4}VO^yghaA{+LRR8OB9^yzDBR=$(=lcOF5|+U%JjOdJQ@4L#bS;q<-(91hK4
zr7d=lo)|ZzZ*pZ#2UJ--(?h|hUaj@4bIQ<4-7jrVapAhjlL{qPO5<M?C=SgiH{73@
zo{oO!ET0YxfLc?PZv>yXVD5G`XXM#Fk7-fxwU2qh66!E6#U}0of91x<5n&DfaMa3<
zZ0kpblJdbNj1Yf9^W(Tnm=KxEzgXrd<_r32v^&RV4I&q=@2v@zgz@tapSI(FITtIE
zeS*74>eNY)dKH<UR=7V+<1Fqm*=tqguO4ihvfiA)T$M8@QG_s!8Yk-Td5l=W%JKZ`
z#m3NDG8wEEm4<aS@z~hh%xALatJdE*J^{HIEhvMEGJGmtk|zZdyo8`K+6*MP{~ulP
z0vsKND@oaE^Ax^Qj@Gi>S%>C&pfPC>u!xrITx!EzK3P~A-)V-6GwMpFUEq)Iz{{%j
z(@uAaQ=V51(W;onLF^&UGWRiUhoR7u$lPr9bRl)0ILSkxzKyPwzECWst9HQzZY<9*
zPpIDwRI;<Pm6)pBT$`k&vKGkgSrkTd;S*^Hi=QZkvzE=0)a8|Lns7%<L2OdthV+6!
zKJYxu0wS0b%}9<ZZi57&S_dV))qW}}25fs!_ZP=yNSvKt0oY)<b|8jo{baA5%4(+g
zA21OdRH0D)XlVNCucYFtP<JbjD6{1t7L>YIXiP!AA36zcrVHyX*E*QRfEOHv{6|{+
zg`vslD<}Ok#V!zUson`H*DDAgoNIupgtG4kDQgz(uP0rbQ|_qOZ<iLR$-E>E8j0)T
z4DK3o7AZ6jpB3b;qt4tbVcnnFSk*UEOSKvBd^HpI1^czUX88R3cJFkk{#q1~y-A^1
zX7$dO1+F)hE!A$1g{Gb;vb?=ut_CXdRePSEwB;mrEIUWiLHuDfeBQ=bNVg#31JPkc
zqp4X;E(@J6NxbdJTIm%L>k9ulgg|bo)PZVB6L6Cy!n1o~0Re6|@RC8l#u1a=(@obM
zh^p~=9TiR<DZA6e8Rm0mt7oT1299%s#_gC>ePhb>r4*ixNNjED6r^nNXEwfiYVFf6
zaXnrLZliUItzV)_=v$jI)%+{isY&4>$PE)I)@_?>kx;RGU{^^wvF#8cZ}fyxL7R?6
zcd0{7Shbt^;P4)ojNa_*<qA^Qd2Vejz%@6*U=VjoZs#)^oChVUD3<k$Il7OSOy|!M
zzGrjYmwWg*{*I1RC}OOl5K}(t_r1=fOBR<%;EAc`Z1&;psu+*&9Ir9Gc(_m|f*oz4
z--PZ|w_Yt56)-F5ll+@$?XZd=N>wOHrA+v*HoU$Bz>-Y&OW*aZ^XZahmJjv~l1KSN
z*$sUvK=q>WJ0u9H6`2*ZWsFEA1keXs8rH6T+9q#_g=Z(>Q@^jz-)8ARZi7p_KC2X0
z%i(O)l2fZ<n#7+E@@}-@lqiEVQaOEF=U7euWdI;lCgNa~_?2bc9rHv=t9J@BXHcQi
zF8~p}qGgeGo6$NqBjQc@<}lpWDy~7|BzPNymc&-bMh!slBcBCFwhtN6G-D(170`Q6
z_#O5IKpaeR_hY&$Rc}^#c;u>;rmL0aPCDb~`&x8)Wk3D1wP8v<Xls~TN`p26FXmu^
zVg=om{j1W}-@fn`odx>5l}7(MaIzzeu-dxI#(t1<tmNn3w|_{XwUgT%eq7hey{0py
zrh<EaayfnSn(7OhfZHkd4p&VnQ2U}!SS^M(noD`L$!hOu1w?@v7!gBxi~44NJgj-9
zZ<d{_SX^U1Q+6ISuAk=>Lw=R_)bF#9MuB97rlhKcwC|r?viTD)5Qy*odoKP)$7>b<
zjv=|t;(t_WDNR|~o+rnfjClU${b+D~fj%mO(`LZa&w!F&BSFDX@jUd&(0i_Gi*QLo
z3uLau&imH~!@^49hh6@fA=$%a<QuW;Z)mA0Q=<WCy;qH~U67$I4b%bCh55d7ELh=z
zGU)ETM__!Z$74yI14dz)mMcb&x7g23YS;sd-6p#E{(+1<BLI5Z<CYgwxf$<`NF`a`
zd1f~6>ewY)Sn%y!!Z~9*LGsPf^CKnzQ?N1rJSP#z-#r{@ec6uJOEhk&XThnJr5qgH
z(`(g|C{y$G5IG0DBv^dgfw?r1t5eYbc04v%0jdnDS^S(MnQ+d?4q=s&n7iy!<zoX-
z<_5Yza1TQp#c+*80Dll2pwA)M3oAVIqGGFCR~8f9yJ`MtXCJPS{~msAV5v*0iRYP3
zCJ!6gJ+2=LPcG+jGY{bcMJy=?9qeRGEw$*fw^#MSVJUj>%HkiZgYotJ=FnrMIkP8K
zK}C~hW--jQl$6v8ztxEuF{+f&D*X14^TN=cRmqs`8g^nCuV7Q|$IuF`^?Mn^UE?Ts
zNaJXITU++D7}d^7`<1UFwb6mNq4m{}AE#4^S?s}5G=^jZP;`M|ZtJ8&p1n;YemsYt
zs4nyI%#K)&wwI6!_X%>>Gn=1X>jqgLvGq|}j;;W?O&%|lE37NbSEFt(dKTz2_#2>S
z-i<{9()^GTpr?NTc2DrdTHsj}5O<*e7yxQIP}c{D`~S<K)916jqPkg<pg{A^#eid=
zqIdz^fuwhr4jq~2W#lWJ87Ot3b34UIaGD?3aqD3NbY+Fgpup<bIyqmreVD4MmlTh`
zukXez*_brE%Y{7yU`l!~?qyYhS#FyM+HXXsGRYuq`9o<PARx0}KYx1q<!<z;n$n`J
z#^FrkO2$y65@~n15S6)r`XsuQjyMr)9S0gY=V;`sFC?9+qelM9d}WKLT2}{P!La3M
zxq~~Mv5cP|*h!%75A&0t5yjaHL7O;g;s~owNvR|Cdu3@kIwNOOq)I5WTqw7!aKKkW
z;Ld?f{E|x#1<h<a&6(M+o2S_X#nJfJRnOalkQFT!R2|=dFU*Wcvq1@Svsbf0s<{%;
z%EgQDOJT~4Y$siz`W%Wj<s+fDL~I1s0Zd`-v|7-es?LVwiv@QY{vUC853%VsYGE`6
Sg8{n^^zebv{Q_NN$o~M|w(ai#

literal 23982
zcmeFYby(D0*DyM$2na|cDGicCcStu#BM3Oa%rJC!+$cyRA>Gm~-Jqm&gLHQzoo5j4
z=egf=-t&Ind!6(B_j19-{Pu6{wbx#I_1Y8gMoAj|8PPKU0DvwlBcTcaJVpZm5Y&;M
z!bbvx>V5(MNa?QX+V-j-Cvt0BD+tUSOm6RD4JHRW!yo{F^JHPn+vw$LbjjPAXF%^K
zC?DQEr%PNSbv|!Ym(YYNI%+uhv5UzCP|X5fCEi|5wKSdiAK?e;<Ts4{%sv_dTMsU7
z4X4cEcK^P-D2SbNYN{nGuLt`6wm3A!x2W%fSsUDL?z2h98_Z$sTuV&4rGAc^d%P-8
zW?dozjJQ0kP3dw=_0)e+!E;$ZLcf<(Pb@6&;&sfmLb`oEecQ4|+~z-|N!vw9mrar~
zcVZf8F!w{tps8HGMtB^bcZFn*k%HX7VsD9LX${~(dUdLC#(gn5_qhqBG1w{SN|9+x
zK<eGqzUUAc(k;qCcEIl#yv}h9&Crt>$615ZndyErr*w5now?w^1uFh340Jk*e&wnz
zkb9JwTWH_lqCe_Sp4LPX#$)Q#MT)5MVVUGUJAGJ5E2VUB+0TfpX|st8)NaIV+t15}
zHET)4+AMqsJ#x`NGui(7>o}{-_8x&jb?lEcwO2>Tw_6K)BtJZ6Ff)l2Qk8*!t*Cwh
zzgyk~76PcxiFrI8UD?zxd`|I4)DV4>!pg(VyXcP2#&z9Rcr~90%T6@Fmiuwy1`unV
z?lM$;>aDFdrmn_`B_F`c4InCbXB&?4NLGV8=u3oM)cc|3K1DKlWnGnATdO5SKw3`c
z_pCJp?aWtKB}4NA0|k;A`SF#hdeXfW>V*|L4YWK=x@;AuklxymXkFN(Y1x>LRl0n?
zbLz=tVb$y<0rpcI^md|hvgtVX-%M)IB<`tgJErxrt|5(>!paLGUB}s9twmFgQy!lq
zn}5(N@wsl63@eGWEW|^BMfx-KE~f{G6+C%!q)pyBuIaQGs#QrIq9JuZwvGJlcO-xi
za#|YiYP~1q<?nh7<uiXu?i%9Pkw3%3&wY{bZCDZwxm)&Ya^w5c7q(44x&tTj)t$HE
zEbrEDP?jGJczmA1cr&$>L^7=F%ag^HE}Wdg{h{0@a`H?UI*vzTV7!b~5oaa8Db3|-
z=CVQ!P1e(je4NU)*D#9w&eC$j{<X=*3H||T^6tTgFl{ZKo|%m0lyRKAEvaw@kU4$h
zm2Ua&W|f;@@9?(AX!sTyngNPW)NmDyzHwiR#M45rR%=j=z_s1(M3}#>D6%6!dR0H2
zbAql=6N-_{Hlp@yJRrvrHzG@3@bObzBGEeN@3$B|#H2BhqQ`4xu6u4({E%JHq#;nB
zQ)ND*+{~55%3)u3ZGVf@-pPs(+TJ@E3+`p3aQi)@{Nr=t2%-(O&Sw4^_<PCxRZpcv
z)d>IAQ;`ETesHsJ%~$#`R&mRjaqm*?!mK2ugKc8Jp-B``p@Eu7S!ieyBlXLC1^QRH
zE*3&6F7GivHu5_rrRVv9j}w2il)3sb9T32#z=^al9pZ$vR9v}DK`}v-w$N62PSVNj
z{@J`w`W$hXjVV{uN|0~$B=+)z4R4^yy|rg-Gw06w(o0WDr;*>vYy1Y`(c9A@_KYg+
zs=88N>lpBf|1dfZEWo0!78=#={Dt@-5f+UGK_MzS&%xZD$vmF<hWqaE0;Ah2q~m@C
z<}lP)@^c=0hb!FSeQ3e?kJq(+6~^7)@m30iqIkcpH|7XQC4^-5e>or*a0Guu%75pJ
zw{<KWVP=Pb+vhKk&cU5-f`+SA7)mjMW2e>`isnWkH9Y)^-&H&a4NFVWq7E;H#G0!c
znQyZ1_lS+dDC^@4vkDww&$x<E^y8#w=SIy80Y>EdGSa=Mno}Q(T!z+PAeU{W;vC4c
z_c{f}(*^NgIkbt$nmfL?6?SmKqzXdInsQqX>tC|fcYfJn<Z__gw{Xf&-t=@%urQE+
zN-4<@rxRsAyS|sowo?eJ%gmBNyE~G1qgBA)d*p`?)vDd(%z`2tB+#&7n|b?bp#zhJ
zu7I0L_y=NE!?!k$pSOY$O@p}!h=QXT@uevbX>&{>fONCO4L;(Bas-c*&_*QR@WCKQ
zcx=*o=2@)#DE89dQrQTPQp1D<l{FV^e-{P6nf6(EhpZLNhVwmKUOUMmVU@okiB}z1
zj+|7L7?XgFXm)XBH}|=@qis&;)|~v;!a<LiSgL9UE5X6o7D_aOMwZnJ=cYiMD#uN8
z(DQ<)z$2+oDb9Em;(=4BS1;;|Gg<^*GX-6fP2~*YBt%WG?fwocc@s~HE)n)7OiWAm
zN%@62yT7ve7Or1<@?SZ1%vCG|hE$S}p;ty_B<?kRgia_XCee!CPtc#iMCk^1sFyA;
z_~}sFQ9W|7HXR2@h+m8THNG`U195j;LyxEc8ZGYlGoUYdJh5x*9o}R*!YYXfMU2}+
zP=|@+$j%<}P#^l~bk|Mw`c0P9Rnkv9Uoj&55(N2TNDZ@n1iMks7PNd4nh~I9q>sEt
z65KEofhZJW(l|+7pu`#J0!>*BURF2jt-L^=Pc48kswppqWuOsmqW6YNu&b-AE6Gj7
zyi=#SJ~~m8`gDY$a+%;QGvx7_;sjAzX4@@bro4L*ElzbB&6r-cR5S1mothX{sl)s1
zmFZ`@V^%3$Jmv&}jo;~Bn|jWS<y&*L&9~S1+SQCQsOv3IJ^BW{+LR(lsqeh(@Iv6k
zwEZ+VDu)60+Q$E>yM|fY8{N5Up+L6hf3c!HKCS;imr;_o!lyCm9pZf(#3^p^w$wd(
z?fP9PF1-ooEJ@dXG|Yx;BnSPeUWvCIO#o8dtLlM|n)V2XrF7>AUk>oC$X4o;;jw}*
zOkDhptho5!;Q@S=M2~PGnU>cCpXMr~1Iu}TiMCRRI}CnM$C54-!(#B!Nz*`zl)p`t
z6^~e4d{vE4a`m==znXVzbDjbDg9y1&s8S${>Y|funq;sO$?5*=Y2&m9(piE=R=g0-
zUwLn(Xrpj#&owBH0?B)k+rz?QbNd4fiISJLUJ5tPwYfw)&7@F$#Z`EE_GIyG7BT+8
z(}Sa|OuJdS(9+Tj%oLo@#P*_#(nZ}YO*Sli+iP(uR0(l(q1dRIEYWqbQRq?5fxKBc
zL@SqeER2a&y!oU2W^<8EtnUUiqidAR2<Vv%Q7E7M%t`;iz|;yGmthM}`<>zE_46QT
zIigbofvV$?=^F|@&wY`z8Qn78IP1t}S@JW(DKe_pCNE65%r7s0RqE2co+qpx;=j?s
zi9M%o7#uW|etpYrZ8I~tEHrP6MBqL|BW{}kVD>6Ou1^`{S@HJPO||OX(Y++e#&{j=
z8r6vK{JHlaHn`ZWzOJgy>UOOB^7L^~q-{xpJ2wFUfQbu($7|Y(3j9V^7AzoRD?>1g
zvxPNWG5`QU5oc?Vkr~*Y+z<?fSqf3^)iqI)!;FO}wYU^n6|Kd=CNLRSTd<m|lDd(r
znGv5crHJq|L1%tA0t>J`h}_x2+|rKUS%~rvUVixJyI~+D`5zE_Ga*WC#W&>QR<>Yr
zP8LoUR%S_Om?Jx-@H28jTVn{ns)W=73iy){rHQ@0H9rvO<mANS#KB@^3k9<A@$ms!
z*@5ir%y0;1I~PlPkTbKT9n~F*dmIvAJ0n}TIK!+g$?tH246PjOg(xZE@5vvK-wC^<
zGkox2fxG8F=<V!{fwJ%iPWXP{06=zDR$gXSc4l@y;6LZX-zqBpYqq7`0~g`^1UiGP
zfov?SKnsiiFvHGX((&Kx{iieR)Zt+>P!()v<zQ<BmUIML+Ee{=QEPJtyMM0fU<bY%
z`a`$5F$4%F>d(smoFgr(_~u`8?$`*0Sy=y>aR>cRNMoaa!C5=ln*V_@HUfgp!4_~r
z?BJN${sTOG{=X*tr`!31{12n}C9I4b?y$&82vOb<z;A421T*IU^N|$-X654oaWS)U
zL)e%(Il*kqe7we-%pAt-TpUJRoJK~hkbj_(wY0MbSsH=wP{EP2z~FdT*+85SE^a<%
zb|WrhI0|kMGanB-Co?-c7|h1OeTUfaA1IV<VQ|p~ng5fjJ5<JSRK_3(FAp0S%nSj;
zrHj)D!p+Rb$qGlx%gM&aZU`~v1atmDb;nqK(KoU}l<X|5{~mc`4zh<>*;)uuD!?oq
zod5ko9cBSmvj^QVjg5<!mz$S|n~R-|i;I<=``<vCU|T!5)ZXD_V`X9E{qx4yh+hhh
z5d@bWm<0$523lJ}|Ga?H%r9;W2H9KLs#{r^3sK(DM1D8*k1mi4K1eygf|U{IP8<FJ
zgN^SL<v~@%Kv3YHM?v6!1^oZOq-J8}Wcj~`=ii|J!Xj!5k3wzDlx>v_O~FR?|23Zf
z4ESG|RN+R-&feBV_J6Ud{~Mg(y;#b?=UUmi{9}DJu+9C`y(KY+{b3b3`5*1&2N~UQ
zQHatG<OnwYa|Ccc-oG+30a-%9a5MR!BY%&>{u6OE=H)OpGBo01W;5brhs&5TH#3Nj
z0}Ov;XEkQ$V`GJIaQ#Q@c2*F3Cy*^z6be@&_&LK>=+8NmzxpF(^#2js$pj21l9832
zpOuyJ{&*jb`~S>-4Egvt4Z%D-%xtW1&Ew=_<6s8y@E9}mfQ%u$>}*Dy9IWjBk;4D)
z`w;}*S@yq=OYqM2DJt^+^FRgfY$LzyoyMp+SX-OJz_$PKp#K*9{};G_%zsd_|JC$=
zg5A#+x3YGD8ygdQWhcx3a{2!R@E(H#%m{30XZ2r^{!fs5w*12Z!fC!AgF9BZp9cQR
zQ9p?JohA4``17DX{|8rqqyC>o{#*S0A9no@yZ&1o_-_IKk97SHyZ&1o_-_IKk97V2
z#;#}oPW8c-@W9mxp2(jm^NYia08gNzilP8O$!F9n5F-5fsiC~I#9eg&05}(~^Me0F
zv6gvj2Y>PP?hiq7h7JA!fMhSLD2cR;i1-|d%yFGx2>>7m$V!N+J5O%UI92OuxzOF5
z>Y2q1ckk$}<aOI(m4>(>7@6w`QnM~2HTfJpLV2uA3uccyiUV}w$Q;T$J@UqlrT(jg
zZMV8p(vl(Cc;@TW)P_aM%-F@X4cPp3CC%HF<ovxg7vt@2m{Y^$;Ot!4NgX~80Py|%
zFGRf~Z;?9sQMVt6Od<2;O%0l9`=&veRHwI{GrlDqFWz7ROz<AvZPr>d67>_jC;~5x
z0Oq;YG2ulpWO#=QV4Ya-I=)<!hzjBU836d}JA4>GhhT^L@bPa*Q{4Du1b{aJ{B5Xw
zq~^1hhZp~vBHpx_@-ViaSN>hcPaUZAJ|7A&p??Zr8ZgiFJ}m?9vt{ju7BI^3tE{W9
z0;frvx2{?JS;*}HFRcjR5AykUD~R}$!Qg_P`98(?qkw+)`U|2P&VEH!EEwLi;%FfF
z)2wX<XAKl3>Ji|{Q~2t3_(U1enu5Fs9ezw1Kwo5^F;zcrQWNG-4s`PJv4YP+Ypqs1
zt1I8hr(M5St311Bg60RF#vN(1v?z8BPX45xaxy}HiG2DF*%-NV=HbQ!2Y-X)v^NUN
z0VYgjRa7C!SSp#E+HV-J6ZfSD<E<I70pzUkEfpLQq-E+qe@4-^$dPN_VP6Fv#r6h%
zuq}Z$4z4pGdQQ91Fk!OQ4Tb#<(00#a3}>jqf)$OII;==O3V!u~!npu;-kvfp`>dcs
zb9&4nl?UHooz;R4KZqIqNh8ohM8$mMf{wW^QJrB?BVNw|LR%;cbRz$iwpt1Cg!P8E
zxup5~XHaVfmXF2zV73<6lwsW?PW;Hae~5S6{o<y>v;1oAlL`;chPa2f)p<piFUQg2
zkUoX1x0S;d=?y)NM}k-v`ZL^xhHmqIBjytFjaFPfM+$`zA>aGC{WB_eY9w^Woecz4
zI-{Q@p|(wr5mKfpa)kAyy?0z$B|SC3Q63fejhd7${rTOcIe`@0(t{8{lWAAqd_#WQ
z^*SCh%vm7T;{^U`?$=1>^my*saNI#(-)zZoFD+6UnVFAh<1#OyUt>0C;>D+uFW<J~
zcAZNHUIe%XI1lY0KYmW+P=*`g76)lzd@5SlYjZ)Hk5?0>pbTNRKpM|xuR)0RPKv6?
z0P%<GWHOHP*qi8P2{rYxevqNuK|@aS9mh=$yFrDE`ybJ^#+P|psTOyzE5R_HY{_^;
zm_>$1S^g|&W5eFfQm-K**<wUs?b9a%cQ*!N`;mOeZ0^*#cIgne<5~L*g94Ans|r=I
zj!5|fW5+CcneNk>zBpEscK<GY0)nC;cI(Yt_slPygjrTR#H4L~$uGFktc0$fciT?M
zgnbbsmea^TM_ij94F6?GnbrU)|ApKGv81RiRyEaSVzNj+X~+obLI6B^3|H>AC}`fC
zh2Ou>qT)l|<hSCRt=NZFW5Hsmr|RUlwrw%7hD?=0PK4%bJ4>g6M_02d6?{a8xO(Gf
z*!EQos5O;2^RjRPI2X?|nT;yCF6ze`{o5gG0qQJNK1L2lOwS9qlB=tA0#{<DoyF-n
za-yd`vzkRqy=SCpzH&cZpB_1(>V-gsnw&eS8J^r*hPALY2X1^wo%E5d8e5ga4yjBg
z)b)$06w{RQD+{i`^P<j)&dL{GOEOR5I`dC-G-qf@QT$`KWmuB?LM>Q#$W`Cf&d1f{
zGD>A&AwwwX&Bo?0)|~85mG|;ADCM&<w@s$IIZX#6!qV)C0w!;uMeYN+ry9{BArSm5
zY%v@xqJ(?f^B!@am4v-}<z!XPX1HE$k1^~dWB64_ZEx%r7e@&BH!;JnCw<T{F#lmg
zTjq}d!<z`%s)@G=FPj!O$iF?Bldm2cP@q0KL~J6(kLC_J^OT;=r8Cv%*u)Mm`f?HE
zNKHnjeY!0fpq|DrLMpOcvx5#%?7oES`n|sQoTcszSV$2`Nc8%8KP!XKO18H8w#m~L
z%Fr)zHz1CO)JjN*VxC@`ewC2uh!z-~L#LFJ{5aiQS<}Xsj91W9hm2DO>Bl>cOV<*{
zVGu|3Yz9lcfxDtRGp6Z}HaD|2e+gWCi+QeJxlyys+EoAIqi2!_7AFc;Ddy4RTQ7o1
z(FXhj0~gYVIU3ln*2{aIzJJUO;MIC^XJz3(e~di*{~uHRzxDW@X0RYCf&tAJazY&r
zY<|s9i0J73_%9xxkSRDGO*_qjg3JP)9nvz31LH>K@Gb{NnvZfNZbj+@?+Uagw+Lte
zuiwJ~d9AQN48;3?!H&28ez2^48I79K$S|z(izI}{O+igp2dAcY@NoUdLY>s}=_~4|
z=ns}ymt`QZ;#r(;T5OzutbaT^k%5AgVU#wse<a?ybdpf{%O%IoXkqhvN=1p*3@%^A
z4*fh$*HyNNdwm`liY*_L$dE<ujZO+eQ3)}hzS&;MH3$DZ?J;eL|A|5vAE4eKfbCGG
z%FxYvUH%0mA!AthHuo>_exqzvg^=hVQX^CjVvHBj+$@-|c7n%$)bBOpQ^ZVJ87<lf
zBhmw7wxpgfWqJ)|0+fT0Y|`UNG_@&-f(nLDtvak`q7oTgjD<dHmyi;Df2J|BgLA_o
zxB4$+iI&{_rj{JLz94E$F%FeG)APsS7UJTno4lfkFHK*2V*uS-Z!c=B3Br+uzLtyb
z(ZR&Q!D8cp74nX#A|}6eB+Z|{grw`s_KfG{W==N`7&q{1zv+6W@hWP})`j1j3ndK`
z_x_kuHB1_&b9$z~%sh5On&PJ&b3EzOi-qM|VMZ*MNHa@6qdoLE^w1hJjj9~9&9(TN
zxE0H|iiE#4TJ)@hltpCM&5FmcogwdmqaQ$`>oUe{v!hi`Y77a)CR<E}${9o-hseeK
zV_KSRbCBH~i5=X8dFC$P)eH!6h%|t|ZrG3bQbRO*#Mmyd?@4+er4sL-gD($#QJGmP
zngZHCyvQl`K_q?3U!WxkGc-OEh)maNz&zW?3QJ?{d2RUQLBBN&3oC$={1`<W+j_rD
zCyXOq&sV9wey0;bn_yfXLPABgSjuc3kf3jZDdkrK(Qi2s5!-{GJm@E<4r(unzr>*o
zlwY7icz74BJ(8ijr$FpkT!qO<!BuN`1xBBeUhTMrBd5PM&cWerVzTlN9p4P~oHtna
zGOW!8^8Q(BTk_+$-)du%c#cqh1j#6XRlc=AtZ;_5PDzM6!C-r$iPdTF2P8eaJ=+UR
z^}Ipq*DHmdnC#^4bcTBte#375Kxw)q_-nZ7q^4Uf?r_pRp{%{sH;pUuS;dJ*VdAF(
zh2WwIA)Dn-Q0-PR`~_H(#VhNrJoYjxcBf^5Iu$&CGxL4m=2(I}VN>c*75A!if6=?&
zbKWddtdKL@k!Y;>=&b#6jTSgZmr)q2?4^y|@QI~gP$YrOV|l^%u~YP$J0!87JH?bQ
zhZH)H*IpWE3sj#B&<r{^(1oj743TftPTP|fX~}n%Omyxjui`r@_<)*?G@;~7Bf0Eu
z?^#ZV#4(sis!>4*54!qVn_NIO(D7tjZ;pqvvJ9GPO^=!tqxDLag3#C0+|l;vtF&EE
z%u776140zk#+Fgvma>|dmuJtLA3dB9K>>O?q{@kOW_DJiI<}2bKJF<3Vw?Nne$U_z
z#yA5pek<W*_*+C4jWrDBWqsH6@EQ-N<u^Eg9}cdWDz(qRkTVSvD~>OMTa;MG&!a)J
z=W&|k{>ryXy$naW>`vq{WFAKg6Kl5~2*(e0G71a#)v)knh2v5(W1)Y7=@ye7IXZjO
zDI1BY#aXKuPEx?Pc@>A<*SWkmt>PU0S5qXWkM8xA@lhmZ(cqYiz2e+JGgoVY&)Mv^
zRIYGPjtSF*Nz7MEthj{@G<1fe>PqWsZGt(E+mT@dDQ&=Ck+f`2;Ni9ByE=|z^CpL1
zN{$XCm{1EXqf9i(43BP>_~XC|f(yCxWOHP!Ut$r)5bO^=U-Z>|E!mpNEk*r}U`vWa
z4D%O5;i{fTgMQh`7ek!SA3bmZ<n0~T2`lHy`fTY|q7t-RUStcR7v6CzHI<$T28T;Z
z80(0#C+8SfIOdJ2LS-2R=6MFYQypX~+NegG*Oxvk2%r0=^TOrg&O^LMeEP}AN>NPa
zaN4}Zp_C6#=Xps-r$S*rtAmd$2U|G!JkA~hdleO@<O}*`&L8(_Y?a<)Y#{&lVwziW
z;xCU&QCu>>EZWgsJe-IZU(T&wSX-%Gd>oa~JNtE*AlaYp1wV6sGUZV7w?v<3vPk+l
zXz5|N%?59}Xj=+?W%xe-;3FM>98mBzqvfxUkV1bOq<eRW-%P?DK2p*3K3C@@6Uu^e
zDKcUtEq)rgqC`PJ`3Q&r9nFryb1?ICwu_Q8y94O%4)YvVz-$#762mcDT@fOVUB5iF
zd~YZ`hK_KrlWUQBWVNMRam9iqXKDS@?iNf~Hmje<ppEB#r#(esGOtCP4?OGVQ=MIS
zp5|6Wq|s8U;x=Be>6GD%v6U=jPstJE<aQtlxEV}}a8)i5&M9+x02k|etMkPe(ZmIC
z#Y`x;fPQe}_XO_DdHd_vc&sL(dSYjGJnW|&L=JarRSzxNeBTR3bMDc6?N8b2fAOgx
zj_8x>;A^4}v7-sK)=<rD?#n!+<c5V=b;zb~vUe_eN$cYNDk|9)2Qxm%gx?!F8inmS
zuNyk-AH&#ol6loU|6z_bAwza42jS1E+Q*jXQB}nTUMj1V#+pqcL`#+eU1l<2)Qb8{
zqH(4Hsv_s(doWaYBQZHF7RAwy#9Fm6kapc|KN+bABb|D>xxu$BZ?oZv!_+MaISw4N
z(_TeAelhB~5lMkENEP8JKEzR>M`@R6Yuf|TD;Xnl?5*BTXsAEi;Vl!XsUS*DGRM)a
zxOP6h?!8MFNEIbueFXU9O$$u-&X0*%^vi^f17;nrgu7RR!+-|VI9TCP8=MzAv0d$v
zt78&!$k7rl0*hRWvBhGR+wPYbd;Pu6PA}c<PXe+uRn7GEBi5fZxsU6tFX^>5U7Yt&
zWS2<`T#hTuyq^G3?i;sQY<~N)r)NuKCf8A^K9CXc_N<webeOdZOEFL{yDraxdL-T;
z4uki^n!+76u_8mwpWrZ~J_AFG{v9MhM<@N_<-|9O<uMt~p2n*u_!3!}>CroqR9IDv
zFM)gdW#U}V=lqP20kb4b`S4q!jANr@GhFtaQ*Jl4&=B`*u-b>ub{{b~!eJ$ZivF=6
z8wDZ~4uw8~EE5jq-B21AH{H)RYI~oKMjfXWkwAWXH85$j+&Sx%$A$FCvGP;lrmb*N
zEAz2hOtl$|k2hD8;sVgqE!%L;ozwA?Qc`x@Alm~KpKE$|^HjxfTvX-8%fI?+@6FpK
zRJ}V}FP!m6pNd|sZ6|@IGG&^zF4j0xM#)PVWyXT|A%bivFSV<n9a*T!^<b0hpAM?k
zN)1Hx&`Ic2tt(w+2KzCWs_E7lSwhqoW16Aqs*@pyOZ|GUjKFjhfD#@AUN3mxR{9k}
z8IDhk7P-yi%JlodNecgi&$m}IgLFkb_AI*$D^1sn(<A%ISBnD*xvc5~{Mg7?{!7Qi
zCZx6ucFwHfEcQ@=&6zB`){4c{cRdOrq^?_PirLw<SG;MAD+|-f(&L`KE-p?`JUP6O
z{w#jiP_%ZO6-R+d1?(C}U1^vR(}DwYZ|13Qn)*SjahB8mzIFe6D^2B$IThuhV4dNF
zK6|qHiM;Hmy>O`H^?E#d|1QZp5jPFam*q`kd-4+0)SZ<tXR+i7g@V*V>ikXcrEvg>
z3<Y<!9L7ny+dYhHDNdHzsNJv_l=Ic5^`ZFky%M$J_H4QHBJsA&zK!X{ef#uTT|CMw
zZ?KHUEBpTW^aNndV$Cfb_Hn6%g17RIA@`2q%M_QXq!1lt@VR|g2A5eOR|ocRZev<Y
z%Z!Jb0CsNIH<+&tEDX<i8#%X^^?j30B~%QL85Jx3AY=GNkQ?d63d-lDX|@%&?VPa3
z!(%EG<u;T}P>}a?VTbV}jG5cDy3g}6kN#5g)s29kh~(6Dl=$Z(^SN)*a)FZAhLK;4
z8{)=|XrpQ424knfyS{LjJ29IpK(htP^V}5aG_*j}sajrc{R&Ale&hBhEEZ9!Q^$EV
z+WFM99?IPE=b?oCz1;r(=p1D7neDaQd(Qi{Ayd!aP0fh7y=BlffKKo;JduS^!oujE
zpuoZim7iJ!z{!@cp2;F?pIsLar0?Wpvfzm19h@6x{kc1b*-(A^)nU-%G+6NCofsin
z%02@8g}0aAWYaN=;c<~PXSt==I9~qhCd**|mp*ieyoL4JQ6Qp;DLMz82&rwHR%+H&
zyWSK;mFd3wGI0__AX@q^SRwRf{k(45^uGPPwENuW3msHB>W;}d+hY&15=zk_)`nnM
zglLaMyunQBbpzSL%JrDig<T5oaF+Uf5GpbFbk7DC;d^fL^DqG5+v0VrLH%VVa}1ql
zf2iuos0fBT=}7+9_1e<rf&k?ODc!<2?Jxy!{Np5{C0(i#-!n!=DmFr?w&x!CSWmvf
zh(zlPjVwI~z7=Wkn^|%!JR4-?cQw#S>ET35XKQNVoZ#JU?}iR`cNgNnIF9r?<@7uV
z?RQ@@xTgROp5GTZ=l1<nmR_pAxwPs4K}<)sGv(;{MkmxJ-fJ@$#(Q?LYJ6!sM7#}n
zSIvQQ?rn16y?~9PnwA@jhhv8Qwb$b!9OLQ|kH?dKc2KR+#H6KXN^wiHE_UzbiwItP
zMyHI@ngyH&jdcYi-|uvX@#V{IKTxHU^KbgJyp|fJZQ!x?qdOu@R}$Ua+^meDoKkwl
zyTGugggbhD-#EYUd6at?WL86%W;DC0RojxCOQ*?#c%CXS%E;u>u#sJEUXN=1f+s#)
zn-EXW+P%)fk5(Sjrxsp2?R(~0fnTPA`BoO^BQ)c8{8O+CXiyg$)6TbQFV>2&KV*Dq
zWdx&#n+8A<b)2O$zhmrqQQ!We@;cq84t)u5hR06tkpX~IysPFHUh8FMRYYVs5nk^D
zG&0K_Hz7r_Tfb5a)=A@t=D4xtIjQ1Kd>yBXI+*Lizol20Q@(u}Oq(c7FFth|oHy*>
z%agYeH{JYw{i>&3c8aBg+uUunFsT7mz?b~F_=4hRryUr7R@q8(r_--N@;cRy>@UMq
z@@h9$Lbq==is)`P1i&P04}n9}l;>qT^9#K>PbWcH@!|?3Z`F+YES30|dtUZ)$y2*D
z>``NZaCcKm!a-Erx-G-SAVJ>p{bUBxeDH2cIRjd@#nWUBu1v3P3%z(tUr{lQl-hYJ
zG3-!{rI_>O3!@oCpOG@tzEEXlBe$iuf93|&=?X6t7r;AXEf0?;%6&{I9T7Puicb||
z!l*OSDC57pAM2sS?TN48E?<MhCns2xBFDr4DaRy=rfnA*w9tyk>ez@*1$>+{F&0)d
zf)(VY;lG+auSx0<7|;T`T&`QEbAHE!1YUk`x|#GC=9RmT1pAi0lRLF7jwltEwXngy
zvf}pY(A1Hm8|a*vPye1IsvPAk+gTD4#kBb?-x350+mFR#yBsRN%7OW^QIwnb1~^rT
zK4&8g$(!U6nLS(HY1%KG;pGR+D>S!T000Bnj??AmrS^U$E#<GIitWJtVuWI63ybEr
z{+xmwXtKo<`_m^OQz;%^T6;(M0;R@2qI$%TmZRxPDYiKQV&z`x#Q@ioFviQEaybfj
zHj(0+uW!|ydPBIaZaY4EZP}0z0<5z@pWp$lju^qZS3d4>VK_lmiSrJyK4SzTsIte^
zquK*A?+Sljqu+}!$P+IQ&DZ_J9b9o*7?)>i!MQbhR<I?(khNjl9Olt76mD1J)x32e
zq?$={8<cW8K<ed_jsWPR?SY56ujPL^^~={BTj^Ed1|-Bt7>@K6yO?1|g7UPLZ<pKq
zl0TX$=2Nd`0|~mBj~dE3V`hj$#=lx5jrNA;q=e8AeS}vh^e8t@2(l_&Xyzg_xU_!X
zPyq$w-KcYTxI&Quyt=F{aOcEKWqq9mdJ}wp4BXBffl%%|Z&kDO%1STIEpsw;tNF#Z
z%U@|k08(e9#a0l*1g4<sE?gu;v7(u+)d4#NJue?4lAzxU@V<v3z1idNuFK?gjzS(`
zKQ<icucDPs->hAnycXDpGJL5AP4fdea7N`g3&oZwd=LS=Q}?15yteDUk-J;i(*G8V
zA-1yqCu^s0K#(P5F#ZyQ4F~T<3mq-S<*n!bkC<p{YQXmiYF2pCGa%P^xHad#`F&}n
ze`W2MBV(h!CdNQ#I^2{8oA=SZtj!-Qy~|3Sbr@tECan*s=7ORrNitDz)37f9LgC@_
z)W9DOEG0GB+MQmIhNo=4HM(}^6!lme-h26J+L)V^1o3`v)+9V$o1|Nn?})C|Ps7fa
zvLp{iuj)*%8=Q1}5!BMZKG%Ha`ds=U`*cqsJ8#h~CTwIqoMTTq9E*h6TXN|~3TD3)
z-l)4N>%nC;OYzsHe_OO{a{5BVro)bx2rzGMga((Y0`<MK)=|<e;O<3dvgnO96Eh1Y
z^R!DgSMC5^wtglbgtRrHoExn(DuUATBYxNU{vf2qt2zR;>362G=N4uj27nRqPc$W2
zyRcR~Reuw4RP1;XsJlqGi}gXKYCT?tfm(wlM_dglsegjarFd;K7<1t%DR+BCv|jv<
zD<5?G@?y^u$BpSer2Zb@PhGg(dUM!BGi*WXsJ@FG!91MBZTTZA+=m(~Kt-1tW)G<q
z0`4D)HGHMLz36C)l+HwWpV@M!i{B_i1i85_GWfgY;%HhbFNnEV<is--5~vCZh|nUJ
z;v7q6N<+H0bLu-opIwG~xo!}u69F`@<_rknr>7k-dvjn0tY5a+P?j)U#TTHhG*b-Z
zw9Dt7W5XeiUT2f3=hz=LY1q7`%0s))p|f+0UODL1w%h>239=1jQKm~h(162ojB^+m
zpGkZ6M57Q=@!n@c;ka#PZ{7A9K}&6eDc>j)$#pCpJ<pZ%jeeL<98QwP9N%y=pg*7_
zAGI_fRUUMu&;%EgqW(aE`6F<A9A<s!eU$4A@_mhR)Y{tX=%J=|x?P-W+EG;}zAs`Z
zoqW*wHjuw?lRhqhz=1(Cd@`ED{V?%rL-sP+#6&Tlhl@2+QSEv9*n^lw;J3%@nySN8
z8CCO7p7bzjTaPPW&2V|-@IK7+*}Lk+S&<WVW<tv?(edhF9r4Xt+N-(Fei<j(hVY)I
zMXCRe^OBR;Zgt~XmTVS--3mPlBc*kfq%qMt8ymAhWuJGO+-d^??@N&1Wn<kfD@(4k
z6eAnAb_$n2vKf|@siez70*PoRm`U+C!_~BcP}LTAZWf?q&X}W5|B6Br5PA&w9(X)X
zc6~7;VSk!cr5E9{ri^~8Sg4@Sxx2fqk8{4H{efTSOiPUc*Rzm%D~BCWU>{6zSA9M-
zxEbg2&@J9}p`H@m^4HxH%)-qzRZ;E<fq#?im)5Dr$-KwXGYv%eGK%n>45&^+)Sh_0
zF=_kuT7vos%J5L-Ru}u<Wu8Qc)6L-Ua3oUFTyfOVa^P(C!liKBSVldBSEch3W30<G
zSJS?P9~)5qgcDBl>+T7!y`Kxc<5tNug-$wHO3ykO_uSj($Oy`9ljhTAoT5A@PDi{m
zb2rPRPZc!YC<3%M?k&U?mDfd)8N1$L<qhc4=#%WK+)V+)$hl72_0eAAPN;IaE!-S^
zle=@Hi6;x3bB85c!k~%Ch@oGvT5ICi#^rE=a4vTh&Gf8^ZuHeL?ggap+o|VfZKZL-
z`H45WdnBegJ8;j!dhBsaiC6vLCtFa?;c?!nFFeKHty2*Km~gFw;0%oZeU;>wWWi%j
z(qrGbMGO|&;692~!$>|5%1fwRUnnd8fX&ea(jL%ZtRfUXIZvrwgC>dnwTSS#`^Q~C
zSe~IXab7hYtfP~-nw~7~+oHUN&r;1$=V2nhjKP1g3}#&5FqQOH!#L#+J=O9J&ypI2
zhe>H0gz)-&2*&M(h1sO*84!u5D<ME;pHHycmjW>)PuShwV5h2azuV~+Dep0$@L3f#
z0^oa|O4n%K%vPO4PH+}&;SRFX@3*t_ioO|UctY_BgSTuhIX6fK7t1rJsqBD(u0Osg
zf2gDJYIbVUb=ylO;}!FANtTIXYs9*})oGR(B}G6zZB$aN>-s?CvB>SF)vO0u9srP!
z@W<R~Odj+VhI~&?9J|PwLPk{*a;Dzrqs!0+u9QTDD7B13j`Q>jVp^=eVTvp10e5dM
zuKK-xe||X~0?)GVV$|=?PNqryx|FXwe$0Hn=}xn<{dzkH^jO^W+HSIb|5=lBwjeJ+
zDr8G1l14EUMRZYpw#6Yw(4+OX2NeTf7)Mq@5HEs5K(%peor43c4rdnXbOhW-ttG*W
zLBeGV5enRK=tznQA_GFkp5)>9Npux4A8C^kvKu0SW3$)&O^1arD$5}^&z0!e+p8U`
z9*_^hd#)d)@C{nePW%R9M4eorM){juK_}00_5Z#LVC6M8+G?IWBs-!WE>&ZQgN5jj
zf{71!&xL(wL3s@<Jk~O24md41ndMT<$?S7pB?>Ozbc}o6mZ$_%KNL#EkoG)XMUnfk
zO8C#AX1ls{z>Dv<o@)*SvH<PgKf=G3gyDHH*6lhjIg6(p@Vt90MtaFGJ1pB;X+(l!
zX%nHam1<Os_2g9KG{vBG{n3461NCxH<a}O3$gFuz!MJrLTG2)zuTX6QOUFzxBcM6#
zap5a8_oNhFT+h`#&sC9I+;lWRK1#F(+}r+c&vJ4<RHeBnqNR!+Fy>CT5rIiJpXIuH
zwfD5btt>n<1jQz@qHR`9O_CA0nX>y0KK*O-QU0CCxqP4>9i5n{qWC3TZ?Q0GuWKiR
zygJN1Q6$TlxtJs#Ks+^m1YD(q91_?8w9yBS;8zpY&<o=fx`Se~0#SZ^P*T(3tu!kS
z%ktO3s*#G%3iyMX0}f`bFXLEbHD^62|M7ZjBy-R?j8Ct4%Wcvi7CD)&@bty%bup>4
z`AtAuczO_l4dC^Acw}XQMRwhtP#ly^nex+7lZUp9lL?)&aPDf$RB?I4#L?VfCo)Lw
zVjjn!nyiWf;d|c4tUKRyd@{o$T(Wb4J`_4(#YRO*pHUfmoUmgsprpvG^z!8P$iVAZ
z_m=;<x!SHCNs{C7PTHKktRGR-LkSvB#xMQ^o=~TziLer{BlNSzdw)p-6M%xxM^rzK
zWuX54F*_7-k?k?(30tgq`GS-2In0;xK?k~?qkHd8x=zJIzNz&nS@I2-|BRC<$1Y2^
zO!z|QC2UL^n%SBP>)wHsUgoCvljwba_4vD~&&#_)WHIuX0?Bc9sQ!U!;pE$QO)DF|
zMU8EG;WA-qk%<<VANWS4rpocfCCXo<qu#sL{0|U%aTYx8<>!J^HvL1}KR%MelVAZi
zyBBSXo=67)KmisX{9H#ENCDw}MKiPPU6uQNR`O2O^Qq1v7JM=0TNyh7iH~wMRn@#r
zHsup<P&X>Yn!uO2I2Qi+AHbAm#T!#>N58x;rN6as01EhjRigs{eZNWI?LXOk8D5X0
z(w0$MQ!(Fyvx>v!k`yH28t?wVI0;=01O9TFlZn&o{seB2#C^9Y)nVyJ396^?$==nb
z7qm)WE0d-|oBq(;M)tF-Vjj>haK-PH<Vb;<IQ`c}O47H9C$~i^nUb{ZUr|a%?LLH9
z9igBxCQFh6QlnD+;6Yv=hK^bpCr)fh0ed<<VKtZXdGDJ^o5*rVvHnl4{NGecnf2MK
z10|;P=IuB~l@gk>1!6m<l3a7>`o<K=;IG8fS?gpjMMqwKl{93Zvs-nO;%{8Rxd$1f
z%GoonHCH-hR7Xkdfe3&?pFhok#;`$4eWw*aq&VN+Ars^l$Bz&$saAfI=zM9i%c-G!
zG9a2L*>%v=r+9SIT6EHz%iF7qdd)z1{H4o5Jd54i7pjgrcXsX8HGZ|N7$<#mF^esA
zcfkh$P?Gs-X6HsdI`t|1&+}h<SQf<F?XLjeO}+1g`LAIQTQ1|HW3nH(RtA2n@Dcdf
z?+`-SqyY<=fFec0VEntG?=IAJyI&W2=G(Sdu>s%W=cB3b=2B<qBp0qU5Z_tTKjlzs
z60(aPw@TwWs_T%zyl7kf>v<ehJHI{8JnOIh%4p~i(?~UKQ@n>BQbJ1IwMP}WF66VW
zN{OUj?fPY{0zW~5^WgcW$ZeO9fyj^V11bseec@vSZ|)UV8{Ko+tI2BoyVTOh38jOU
zLEb_<+w(OY9GGM|FR8GQz}Q&{(CcvbBLOqqy8b!J`PduK)~b2-S)6vnSSc?)Zm1&W
zH}cKx7=huPRXUL?y1ie)gAW&oeh1SUQUsiFt<L#U*Ff^GjXows8hFiF>3a!Dp*@5I
zR0kQm(NAggi+5fVnU_+7r6dTcp580WTELd)O;&|i-tmz0wVhFV9%>m?Z~yEuv@WG1
z2jTnq_wSf+R-SL~G}#-?)uIkn*`xWB1!SK+J9ui4Im*B(U+~g|iC6mu`GG(Ar?-6}
zACo@jPEB5h+yOpn$q454b~%-ZaC??jAMS72@#@j{^Vf#(O3A!?*-}G{({^p<wbxNm
znJ07f^6@88Ea4x%?TSHP4}xt*2l^_EfbLt!(OQW2jg?Wz!M?)MCfUpdz5qipPeG*M
z3-%I_>PTShlw*UF+Ei^fH{a!+kYJF?!vqcEmQmuW_Tj@rlVBXW%Xg4flMi)9C@vP1
zRF206<({s$4boDqd4O+3X@8Um6`ql`r|qUKA6s~gA$A7qKqp;;z;-$*rdy@7>`d%K
zq=s7kwLd!|8&0b7>{y->-S1mxFy7)ozV2zyoQ$zaQdl!~wiW2$4Kir<WNXjlb`dxe
z-XQ}wYaj0_p!4<C`vDu`y2WqJBo-HK1-eRxk868cvm`faY@F`sNp6vO=;WgkHM&Bf
zd)Dsalr1rnY~ey7z+SPiQS*5AA(w7<(_V|6Bw{NQWk-wBz(_X+0vCXZLp2QwT(m1p
zpdY-phsV8A3p=jfQ`0(1;TWPPtul{)q3mU!fl)iYOW@?s>pFcTFsh~l3=uNIxSj~g
z`Mb|a4p&?!J<NV7FLpFutG9XS4KY?hw9fvBSV`X3aZ!fF`a3V_YAVg!3&Q+6<;tNx
z%Zyju!rMwh$C)bXh!2wBZxUg-ZJ<mBrTzRCnZA=&m;>bP|C7@p!)s={uV&+_F>6?l
z%FqyGA|OQ2kG5M+0B`8&5W3zK?KND+i{~a|dg7}x1(qF$SF16NF;gZ^jcGv>q6}z>
zav+#<po|G6B?VfvW)F8dy+*t{<mKpnAL%bU^R45SX1g4E^tiJ0MZ;mrE%SOHM}SQE
zn5MQI8H`^~17c`M8~v%=a3ZwwSgV~~ye{}^or*>s<w0A*TQELX1BI=Ze-88=U+%=3
zd~R=}5lh_Q`xFzSrBPyRTGHzfKPpw&RPAmSLCq0e(WC7c<~z8`br_^%lNT!Ya0!af
ze*T84!Xc(GrIOOnh?9PdEhTDz{Hslsz;Gk)PxV8&bB8jC59JW%%ub0(prWwQ#80v|
z+kC(P`=7fon)yJl&AzoDzGJ$T4=?$2_d0vN$ecG^o3$6S25)@%qQRJ)D39f*pkwwg
zj)yg!cNTl)SI>L&<!&{{r5N!_MdFKfSN4UcaS^|)J!<aWy-J-g4KW40W^BHT0>9<K
zGB?(5=JUgI-kHU=0~7G$pcg`K!(<@!jTOXnj#!LT$wyOhdXKa9049=m-T1#W_WEw^
z#=ouwN+%KFoiX*Y%ZTfe3PqtB+GKa<PPi=Qc(rqXfR~xx!!5A0om6t}PLhDBN6ow7
zo>!8a=Jna22twsgJN)+Gvg-cl)3vJJWT`}dXE}*v-k?+G+`S=#MjK1homrUzrlkNW
zvLKGzwm3}c0-0C^$Xb2C+UfPw+0yAtQLcv`a3&}#bm!KiPHis-mdTLYW9US^Suyx_
z-6uLC*g5c`Zd?_z#HEXY@vfc%dutmH)sHs*6&j%6tV#I3%bj@eMDMyA<C+I9P>&mo
z#%FlY3Ir~m4-bWx9b-K*5Qut2iuRaG9+w3<E!!9KT<0xrG^APR_A0lSOeziVKJ$ky
zJO;47G5%zv*x{YxNPKKefh;jx+VXQ^lJo~F-{h>gK)|w6Aq{<|tgnJ&a9&p7ZG^uk
zp2pudKuJlo%btOA@KTPSE^GPWP{d|X8;W+ys5yOQ2YkZ@MZw(`@9m?HZ{9Ii;R%kj
z6!>H+3Hb$%MwF06J&1gi^&yV8cKj571FOK1LIY&ALf9!y6h~z~pDGe*vrdH&UikQv
zM<$ZR!g_VRuAWg+;)`Js)~cHJpBHI|4S@s}Gkr%^C(fC=y_&;vR0icM49}vbybcl!
zB*FpjX~Zz#*-YXK;Ugri?Cci?No2T}`jvdH`|U6AA>1T0H_=E|ySuveJ**B#3Z9{?
z83Vb)s%2RxPxbe;%ji?|2(&KWP~6J|uOCZw<!|U1ZWHVNx(6BGMOXY{Jlb$%$mIK#
z`QKW?m_c*naj;@@BjM}((94%xwj7%_*{d@YiY0EKh!>5AW(Fw|;D<6C$z>+630lZn
zot|ENVMoj(bkp>l%srp3*MHt9$zAN?>$`U;-OTo+!E{^VjuJFVPP!j8m$kZ&mglZo
zNmHaH|BjqA8;Cs(yG3Y*+tFJ`X8Bl~28(-1O<m~)kSF7N;sgAB-WNqj!jF!EG=NV}
zEO8b%8rxY(i7Ul_u}3%~q$#fPAc%-(R<{?k2rXZoIwIP^tr9(7Hi!!JJGV#SObSM&
za6bQ_Z#SPkV@n}K9I`?=C{ZSl>@g|!7}XG>B;Rd)dbO732R|wkJZ(+9I}^@2vK3wY
z%fR6f$N2Pl-;M$_)X{`y#0j|h)~+zZlw`JUY0#9OJMDO5CgVr>t0^vWE4SOdX;(ys
z$M>$CvBd^D%sge$Z{Op@K+{Br`|Z76A=>g<wwwOGP`Yicu+LaV0(#d9WVB4F*D93>
zFu?F9dC8x#fui^z@2J-fNG1}~uyd*~kq>1!bPellx^hKorCG-X%ql$Q{B5gat(Pv$
z6<xda1E}C}@$(~GC*J~6HQwJ9vNbEDxPFrEtql!8pnE-S#Fev78iIV2gii`8qT~H#
z&C(Rh2tmRXFP}mbCE}aInjtN(G`kPde-Ag*WlM3BXp@*3I>P<Iv->>!_jHaT?f^y~
zE-MX3$T4wcuf08n`uOtd3ydBmbGKamtz1^dKHy3J#f{9&nEuo$=j(cJ){In@kUq|Y
zgEm*1nl}vgJzr2~<b9|2BMkbZ6faq%{ysHd<g0xy;D9eVR)}AmN&SAbg073aZpZdb
z_zPeYu&Nr|sQrt7E=Q;WGl=KX$Ni%QB3HPo&Shgkzv77qJ4eZ}uWd=)IzRlfrCQk=
zCP{J+(!c?;UpdbnQen)&3=r12)&475fv<~t*XMd!*D~(gZ#KLqI;(<NdY#Dn%C&fO
z*k!zwh2M~vQf6|Q&EbW#O@u<9)p%o7#pSHwe}Z}dr;Ih3(Ay+#O1?LD1!pa76<_~C
zUzGa2X(VFQq=L3}o__gx`ck?-P3NKF7u|+4>q_a_a;#E8i~Ye^7wV8;u?H(N-wTyv
zQ$v2dU@H-+DxqUDKeE#{Ew<K}g~KcmB2n{&EZ$<ImLd7YsVpk94=u%qr4wX1#`cm>
z2b&=Y2Hbc=9C`V=ig###UtTYhk)rlk$C$H`XX?GJNFVn+4cN{3u0R=na=~prb=jCZ
z=q-&J6er%ORqUMn)<S(rKGJ9^nGuh>#|+F+7$;Lk3n$KB#$#?rSwW`^;<>V>z+Rqy
z?p(W*DV%9Id*y8UX+5fe{NWmC-v_eWVcpr$I^n|_dja%e`f@@#Rej~#$xgEqA&*g!
zD0v~tIe7sP!Kp8~zCPkc9m>3O$&&UP>tGYX80$@sm6d^cIYktM_#!O%FOx0b9keCZ
z0tS#Cin7pNY2j1xmN=I4;SI-^t7`T5RwELb>N25qmRY;pNL^yDC^Cin@?nOw`m?(f
z#+1E|#`LpeY@@?MtTkNNcBPl6?`*Ux>OlcArjWK{Qv;WB&gz6X`h94C3sJzs4Ya=K
zK2JM6rcNt7v6RCsv*^Nfy@t_VOS`=fUa!t2(q}cODA{|mKm?6xTxRs7Wlrno%#}N>
z%u^v9YNNtK1&aZY7?3X;>`Zo!tGf|;E}@E4gu~mW6661vlF|^;q@rrcyq0GAAOfFC
zDArq2YF2JTXpg);XXotnZVxb_TgY+zESj)Bq8&b>`aPU*ibcP<O*#|bg+KnJaY5p%
zr7rvEwow|o;i3_70}RsJO)P@R^>}b3uwpDwyjWBBm)AH|8SrWiIS=vP$UrBMJa2^_
zTL>+#n!m6TVFu;|D9Cqw`jl<8Nf_G@;TxTmN!49N&J6vsw1Us?=%-3hs?|f+5w9d2
z@|FXps-Hd}k@>edU)P6b8_8bdFRlb#5Bnmb2;@c3T?%IU7%-G8m&lxDw5;^b#SRw3
zyGxRHjn?<0i6c)?@R_ulp@V_Vru6)5A|5{|C_~^qa%R-K^2)%W=TX_-W@Y;7=iE1i
z73q|A{LmLlQETxlB_DOk^0fTq=E~3*AIcOHG(L4%PP~Wd2h@cXRQw)ABFY5FPPQ4h
z3pE?^pUIivb>3UjAPRU0q<NaDJbOA4^jXUbVxxNPF`U+3vyD9vubxRD;Cl3PMcK^4
zH|P0-`U4CuXWWwWqMJqD#XlEOW8A2*!^JNjW<~Wo-Kp=kan1Xep&+liy&C_0JE!ci
zRQ3D!YzorN#Gdg$d`q+H#lX;&FHVPn4csl<-Fll(JTyb#B6ioJ&rTVRzbcEt_m4+U
zXSG>wo{_)~dHCwfH&sQFoIcW-y{m&Ge=h^fFn;2_jha$^N9*5Jfi;C3I_blN08Na7
zyMkhVm-6k7+g#iZzDR+Xes=Ts!7jn27ki-ZH%Ehw(zNYGllfnA-ylBZv!a!=wzA5U
zW?k}geEVsAo;TW*jAP$upGBp$5hlxHJU&^=79b;YIoOnLAzw@<dJxCw*W<T#db+n+
zCv!oxyu@cCUm_?qskf;NDbP!(h}MF~Bw8g@lPBPPT&UBk$(+;ky{3~ic#0tI@V9u_
zZCNU3skyg?TC18-LMSOdD^jtB3(L<uPG;OxOaFNKnWX;2rfOo4Tx{wgkx8_Z)3w3N
zb14L?6U{lj6lfXWR*3%)_ISL+cFB)tT7b{BO@B_g1{oDz9+16jl$A%cU?}%ETE3f-
zaf;KLQVC6}NX3rG(@IwhvYSyRo2}cLvQw)I^#L7GyW(^D>8HO<bhfPz7ts-=L3nU{
zI_<uDb-WGdrOEkY1_Um;oIeiAjvL`5%G(Jkhc=a8Z(J=#zok@TW8Cg}$iW%g>b!Oe
zH+o}^J!s>ysyb9{lg@td9U2w(Wrx%1<?Gm~84<rE@!B|iAz0OmCB}yJcc-G@Rk-$I
z>B-BRR6MNQJ^g-0RS-G6vk^_q#TcVd=b=e0gDTo{waQI58gE~NNlfZ;5K#xA0}>8T
zqWL0YJzT$jPqRtTGY!!paXD{_T1@>G%gf1Ed2le@y#Hk{Gx4M^ym6sWxltf`UtqEG
z+m8C2JpHpE`Oc5Pou;dzwwj&co)58H{~}2JpnN)2HclrT{{t_Y#P9X+kk7qJdcP@Q
zV{#}voRe^?HOAacDmZ$I^7zCKbz%);ukLWFEfYP6$^YB4zrUDd9TLbBm9T)siREw{
zMC>o)W?3K_&xsWY8Y?Vn6ekvNGt-6N2~gfp)K<$4<2@X@>E5GfvP^!#jtkF#?~9}e
z9MVKh(oBloj$_7klXFB*w@35zd{=aR<G<FOPAqu;U%gysRMW{8|06CUhN1!@79P^1
zOHqVSqzK5aAT9J3q%0jm5h+0gR4@{jsu2(&Xy`4{Nl*zW3L-{8giwSCktPH}LdZ*W
z*Dvq9bKa--Z9d#HGq=p0nftr<MoDQEJiAx)IwgsnFC|aNv^+kxc0t~tL%Ph!@#pU)
z39^PTplw>8dMv@%sb0A%TXM-(L2n2prrXl$Jn+T)4m#uoXy(Zw(LKc|*l=eiqN|0n
z=InFXP*F;HgAH_YYA!AWj?tePW-ZoD%F4LB=dC`VlCXPo=&1$0NC1=#`V$#zquOT@
zl3jQwYZ@$w3!4o=&z#gyV+->~xV!1mOnjk{L4l-tlTeWKUtZvYS(<%1xg*~1?P{e7
zNBq(<Q@mb_oWcj2|4h$+S24+W6=<MeH?(sb`DA*h$0Wq|18kkih*<Xz<M|<&q`XZS
zD{MTJTAPpaym&fR$6Xb4x=;1l66*fwb>x_x$!HEgFm-J;m<?bw?G>?sOAjnPnZ*{I
zB~}hCY-1*Gc9}Vg+h_2`vd;>~6FEb)$@<kzn^v~8D^!b!>)|02DP$jUi!rWqer#ln
z{RvDGoj=R8nX<m7<E{wOUUfYo=Bw>1)@As~PR#3PaM|Ch+^5sg6{Jtmv5Rl4mEjNe
z(W#(-<3#Cy##Z|Oqm0d5Qp<V|GZSLq;rK|;c^LKJpr@}zd13dnfdDI^(e79Jh33Uy
zB%sU*@*bc`^oLtho?SNR!i_fWCd5Q<q8yINnvvcFVvt6p#>E>F)YS9!h)>DBxprT-
zn?A3GMI2!{H<Fa%%A#&t{Dd3uM<3_127lKejDzX46M2{OWOdMqK9YSx$tis3LvrUy
z?nQ}Sm}g;M7x0zfmvUgIN0)AO6@$MQ%Ge$JJCuM_jo+z3Z?Tr&;?Pl0>HBkAV+WU;
zPhC}$=;xOcJ6Uk2Y<fIxp}^!)rsY*a(pX{qVt=V~?CHJ0LoI1eL5%a;?tNzD;<nko
z=8-O+*~Iq&R*fa%U2>-sq%mi+G$&~X)Ff}4Gt$PJ{Q7%JI)oPa$wwc~*vV)$Fpv<H
z^uNnC6z>ZN>%qw-YZD&Y8<AChOHx@aQOzz}UGrzD1tM7vxNv{Zzf6&<dRhH%w+4mo
zFCt_)v-m8$)4RnR%=^=UztbTUiD8zuKV`tIb{W&9U{YhX3Mf2~ot!)JitlAV+(Z+y
zoTa%SDhd|8J=|SykGNN9UGNklY9@Hgl1s6E4?dP#k9{fERcHo07QaIYuZ~@cS?{jr
zeI#r>m0fETf&GZZm)2Vt>gjLBGcUXtGVMS>>GtF5{+%6rDgB6pzS6nkUG!3iLkrnK
zP|s7<+N<INS#kQE4iq5upRe@vBrYLh<D*B%myE2ZAC#H~lch`^qcpcI>W7~Wy|{c!
zb`kCAHE+I+Vd!s7y(~w;nacMKyS_10zDH@E%c3$<j`57iW?jK_9k6lUZg;P(cg}ui
z@?e{BvJ6XSjko8MS}MRvv*gcUjc2{HX2-$Nhs@2B*B_PSJT<pNKdpG0@?q2JYq>qq
zP0NjH<z<aQ)l^2iN%9HbIIYmcpPYhB%04fhc=vFeZf%^^5m_Y9!?M!~QS<9#GV664
z>ofF9*r1+MjCX5m-0poMT0>Qtc9|=g3+UoG5UQM`x)U@VGq|(EfXk;pHdtTnTOF;*
z(wm4LtK|3TB(dn3a2!+PV(kRK<c1M1(IrDNMK|?bzwKg=bM@HQt(f5Qpt8|r>p#>e
zex(S(m>974Qi$IQf<>#aE3dL?+~yJj0jsPjBB?8KHxFLaIULtc`F*L0TJ?cWW}%+@
zQl@=*mvmEfMS9FvhKV<WaZeyFC$!gIDjLYAPak8&ulK?isj@m+IK`BW+<^>$*5+dh
z;2&i;LH1*Ip5MFxRr0=zRVV1?&N*t8#iI<iZEx2Xj+i+RWXqj1-z<A*M}_TTZPm*C
z+whitsa#1n93q_yg&HOu+<?9Y>Zj>hRRgTwN^Z6k6{?$BQ0`azkTx|jgAh{qC<1f?
z0N5!8hPK@pzo-zWM%cmaa>JpE&)<}kl8Yp2@(;TR+FN)<2Ejt}s`+#0mM<UXiB@OB
z$!At;I=5!fi43~w(4RenMcvm0p-Qu~FL5x&N&SQh8|7P}iJAnV3SxwR{LJ^9g+1Ux
z5gveNa${%9R{=XzQl--rMSGr4Hf)JCHNJZ>k6gXj#T{ByFd4UtikttK>7Y<-;3bbn
z8Yw9<1d0->TIn>I!#sPrfp4A~z3^)d=i1`VRf0sue={y>R>%!#*U{~O6hG9*!Q)5f
z%(hNAYTILkOJileG!vfBn||!L=CzCsX&=&byKn};3*-`IXNSm%)NiAoy?X-?3+(dY
z+SG<O!&2+;1gP)w_ca2IZcH@|l}*jDSMcb#M-YSN^|q`|d$atjB{~CMCwT%%Cw%8=
zuy)xkcwqF^MSLlB!FXQ)6=N~FnUf-xW+vKuQa@sP;T49uEw<9ZQbk{h1{1M%ko276
zA9&c^g-6v+ZZE5Dp7ov26hI6vVL%8=h?(rIMrXZLyAa0JGCM*fZInU^xr;s7=AsnT
zX+TkR8)Jq9&aO7x;bz-)G?MUbt<)PPS5yT$Ym?{DpJT&^>3{(#1*WE2(LPRXPXc}U
zO1?#>X+f)UUhN0rx$)liTw)-#1F=ypkfY)VwMt?6+&{<Lks(Y+-uj6Ot^OS9%3N>G
z#cx{qWR>zMq#s98mf1#pTf%(BzZomNnCW@pN1u32cf;wXMkEAZ3*TN`%aFWCIlz&|
zKKDP?=!+$l)znYK22jlBm#%qEtn7Z+N}1itvE%;|13WKm#34eOU4qfV%@eCg8}q`q
z7VF>5<gD_2AP>Yj1VEYk?+k$sHG}%VS<j+S+?qDp(Y0NjTKkc(>strs9I`V&JrXJ|
z-unK0#LR|Z8l_NgT0rKCXnl;&^i;e29OMYcoNxYXP%D6Ro=PUmm51m)@EP~eu;s&G
z-QC>X^slR-Kl}dR?4}A@>9S>EA*#p?48i2Rh=~t9nqj4~lu-FKGwKfk&SIyB>Zmkg
zdyQBmIDB>{wU;EHUNN5aa|wd_x%_*|=N!b3q@SV$9}|(!p^Q-SzaWpyuv<tQbNT}4
zpc+Sv!#4MDSo0M2DQ#~$&oCSsbQ#}gtdw6n(BY8tbGzI!X+p*w>lKF0*}<+Z4-ITZ
ziO*mDSVS094;raCu8kY3P)0|NyQhg6Sx73u)x)nd={L|h>djJIf@SFk0eo~1a)wIW
z4kQn{#;@V0w-~e8)yA<h_Hl((*znS>x>oIm$X%vw?Z$N}y%&4fX9)C2NwpyrW>p-b
za-!|LUd;SE|5EMtwvBhKSR!*oXK5(<NoSyj&gfB&7+P$^6-FR}HLjt{f%CDdD_gf1
zl0g&6!rt;f#LZm<k|YQl_t{#1VOER$Rsw){Q0#sI91Z|Z8*R230RY=#0rp$~+f>*u
z7jE_wkAqkKL-K3z|DsLe5;DFm`GC7_*zPU>EawZqc9%;PdcUMvW>?-oQZ}+cYjZ9S
zo-0lp{b*RNYlgg=faIhozq}|jI&f}>q=FLuVbZ9Q&S$i>R0of16Q`5*rLym6(7niY
zcS)E1940?Q7yD)pn-#}1R<jPP>J!CS*VNHU_xbP>tup(QZk&OYxsSuIE;xEuFoT>v
z*49=ZcN$Qf*hyqP?0`t92TvJ7FN-F1w@mq9X{Dr{?@vmH_u(2FG+EYhu)*th=Mp*v
z${TpAb2HN$zDDC{(AV@OEVe(CH9a>6t5u;R0B|bD;~H5oo5D6}Goyr88cyy@q!q`}
z^uKiPT1pHU^GY>$9x_sB9H0{|-ze5};_pG(!Rnh*ldjGzk5CWVhCffc?0+iff6&q|
ml3#=WuKiymzXr7QU4G4b2H>ms2W)r%04`m$G^sK2O#U|lC{aBC

diff --git a/src/modules/locale/images/timezone_3.5.png b/src/modules/locale/images/timezone_3.5.png
index f803c691f8bf4eca545d5a77bff0b13c7b715a30..7900d2e753275efe926126419227d43acc9cbc56 100644
GIT binary patch
delta 2292
zcmV<Q2n+Y#8H^f`B!A&)Lqkw=Qb$4n02q~HU|>AW00c}93=Fw>B}GB*P6`o`Q3?!5
zAThbPfB`pPWMKGq4MZ|9T-FUNVdcl878~F!0$K>9KLD{vI+)GK0%9jY*b*Ric}YPD
zkgWq^Cl?ff*gzLE@DzmvIRn`~K(<0U5<3ZroswFd3}oj3*?;i}zva(oV6gbYz`#5a
zA(k|afnj?)1B1jJgqX@g1_u6C28L~y5n`YH!Tx0wJ5-WdQ34Y2(|2SjNGwVOOEZH4
zG%byR;nQ*k2Hr>p2H^_~3|!F=cYpzFF)*M>3@1VW0CLzigrgrvvj6}932;bRa{vGa
zq5uE}q5(zSF#)2JtqdrWP7Gmx3ra~uK~#90?cG_7-Ble2@N@ply?1tMHz=rp6yib(
zR%LN3xX@yWBnr3%W1?13q7XMU(Ud2Qs1Gi|#uztZYz-JKR)}bk5QwHtK}5lVwNMmk
zX*-?H+?o4dd{ARuJ40vYBJ=sY-ZSU-J8$<p=bm#y000000000000029Tnd>1f1pcZ
zw;KR}{|8szaQ?|7?a?RJy=C*B5JG*(NAZK-d({ac&8wkpKi;`^ZK%4{Bfv}$7y#ff
zuDs#AWk)S&U0v1T(f#|{pZ)ynZ{8k42=DpkYZom#w)KW)PkKT7U~&J*-rXPn{Ka>U
zb-Q1H>6CT50RVWaE5<v0jaL7ue@PNoWm$aICx3Rq&+Dq*-)iNr%JSsZNtz6fjTU=$
zw+E7L_X;rG>@WbpVZ8JsrwqLA!sq`qZ>BE_p$>H&4u%kl7{g$UF@_N8qEkIOysv%r
zfwKC>7tY@_KE)F8iuGr;217F)DMD*33t6$Ze|X)RjiWQL9DpgY!vFw>fAQF_%8BZN
zYEKAB8DmUi41NDHBxZSX?BKlCC)<x5d@zJ?>tyG?{70*r18ICkquE#)W4-vOEIIKR
zF&^DnRNQ#gEvs%w>c-A}2S-LbkMA2^w`NOcdRGQ;cy<^7;PB#yZ(8}L1q=JHO|!V<
zzYVJEFflgPxw-5VU#rTvf9tomKX~_swf9Z@r?FS8KdYx_U}$OH%Fk`J^2_pOdeYx(
z{cWzgEUNuQQEjcOde_86`O}AY9{B#(-?4e$46F~}ze>B^008_ySg>sIAC6wqb8eO=
z&yF$v$FmAChBV8PQ_?hDmF3AR=N~uJbLwlB?EJ+IJBAM#mc02Ze=Fv<dYj97`x=+^
z4mK~#^K?o0Yfy-X%oUR~wz51qA#bG1vOGCsXsC7a*%zJgr`xaJ{>SjoH#Gsw7&{CA
zFi9WTxbp4u7xi6}X35c$8DEw4a8Z<7J4Lyr?o>PLB=%=nc1oVbXNC~xg&2>?^0;`i
z_3OG0old>2EUJ6Qe@4bP9oSuO{KDHd4Iln50iHZ(7yw|B_U(FnL#roW-Z#*^I7#Dz
z82|T9eUiq(Mw+e2^YmqPPZ$d!WHE-Gzn+txx)@_<<ngpRPfja~GUWa3+d~Kf12Cgp
z{{{e)v~JCo(ckYHzv_{l!|&=$ln;k`az6`-Nz9TY4kSr@f6`&$ACrX;V+ctS7xXsL
z#*s}1aCia(08GKRF1_VoD@)2GO&TF~@29<06&^a!nHcF-ePHeo7yw`jKCu3rQ-&6_
zu1b=ys9QZ0ooY`})i>Y0wcOLK9)P(+U;uzA$eYd68_n#wNfNtu4zM%cxur8Qx^45?
z%|*9*0Ok&Xe*pldU}CJgcVeQvr>;X+zO2`E2xSrPdT9H>$GcG<n0o{U0GNV#zq#eU
zUAy+ZcVfJ=t*+`>e+wbT5b9Vzqi<fbIoq{?xyi$A05Ao&-4^Qp=N-R);ez;R5|d66
z!~7&ohGw&evZ!|CjpU9yuHWuTRba*m3;-}iJ8s)if8BBY_6L@pdEC#ko_K$n##7TQ
znIC59LDWvC`eUfVPk#Qb2cDRXdcfQ!FaW@lv}NN%<F}vqzyoJ2d`_#?o4+!~S$Yt)
z4$V%{xnuF_eCK`ZAFsmNS*Z%lQO+;`z!7-&1<TVUiA4x?Ia@XJM*7UY{?@f851jb^
zD>j@re{Z(x0&|nV002i|-SREPfwAJp?SsXAbzO(az5RTIVu(o^Pe_`vJs!p<W}zZ5
zhjr}^X#jXyh@n1e{lM?X#zwEp@_2t8Vje?17-Bpr&(ozdajK!NL){)LzB}G7e(>ds
zH+$_Fm{DDO(jEYwZk8_(`M{~irzgGiIYSGNf9qM^KiK$0vnM@!y6aSBT@LRbf8YK0
z?EdD4EAJee?)d=@B`^TM%!nVo>HL=u&TC%RY-P`#)|u;2x5qo%M)sF$u37cNUry`X
z0RO@*NdPcIUUK1rKPPFkY__tMF~;fpCtVCNP19rQs>;v0_{86xe#X+_Uu@bwYlp6Z
zf4N0q0Du{C*M>)mvoBe?J4xf|S)Lp}t(hT)kT;SSq<MN~J}=CF(Hoci=Facz7@f8P
z0Dt3_BmkH}503UeGJ0VA6XWgjtHngMwW{hWgb+UT!VO299%77Hvz5KLZ=i8?jIE_d
z-YvktbA|x`X2FUTAv^O!uUpnLn7y^xf6U*K<#F+$pVxH=Wm)a1i+X>SCyQbl`zJeh
zUDaV^-^6G3J~8^mdB6V2BWu@&YWi0I%vAyd0L-GxzrAX3Xi>5vYv!*{v$!<Yp{(k#
zvnq;TRb||g#A<)c(>Jx6*?ZGGnM`OXi%vP*9xd)2e(c~oKX=KkzYB3zUV{MUe+YpA
z0A^pj{70(>1{!%!UZ!<BIWWHWp}nK))@<p75W>ectzL1>s*Rhk-Fngg{Ni6#bum6V
zv0-$i^QA@ze+WHee_DIa=3;i10L&Ev0{}e5tp3#U-WRVp_Fc`M?9!OV{t!bW)Uhvw
z&>KT&gc!0ILu`+g_l%5mF8%b%JdJmEyJz6(OJD$ir=p8O`tH@QK6Y@ZaZICG^`}|3
zIBO&eV+aE=CcQ}-dfOwNdpezP<29>q+S~1R0kcsG?g5h^0TdXf-(LVpBxhseDkGHu
O0000<MNUMnLSTZv)nB{-

delta 2225
zcmV;i2u}Bm8r~U@Bv=GzK}|sb0I`n?{9y$E0004VQb$4nuFf3k0000WV@Og>004R>
z004l5008;`004mK004C`008P>0026e000+ooVrmw00006VoOIv0RI600RN!9r<0Qo
z0T+J@u1Q2eRCwC$-Fa}7<sAp`2LvfrrH56ggSOME^zy2uMJbjfB;?v8o84HCVYH}#
zfPfr<ToNE8B=Kr(tF=``5L6Tefdn}c10j$QJMHwCc3OLkTHA4|ZEZVNW&19*$4ni?
zvB*+CpPAoevv2m<ndkS<^PT5?@`eBa006Tk0-phYaM)FDEC{n6$_>}toBgl%5-lUc
z<+pz^%#W_k+mIh7-90u88#T;i0RX_e$*sS<G|YKq{25bLWu1_<;H&{(xnoS2x;i^t
z_i$eN@_^Y7=Y1@?{?V(Ke`%n=0002*GP57bJ9}|g>H0;TrMJyppMP2^^^Fkyp5ARZ
zap8`Cl53WB$2Zq*ExtJl5kmzA004NGx%U2?3zqdJo^08d{96<bHZANZnP0apHl?Av
zY;ALI;`!G8idUn+uyV?(toNq>e%hLxw>JI*<3d$iQMi74EPU(931Rs&SA=NnP*{Ji
z$p-*{OgFCT%;Oq+%KM^VkZSEurlR2RVpK1GM6dVX@I*x_s{PCMCZ4L^QZ#AC+T0;+
zshJ0TmZ5S}K^Qyl(*v$smp8O>W5KaA*XEuu^TFJcqwsM|XKGG}g2`*=C-O7`001)4
z8HwRTmh38Pj{?FguLXqHt!2H5r{=ED&sq1<lyLoySeUXhD@?v;?CXv>>%rVm)m9jP
zrmo2zQq@+JTi;oF<D$n)S2c9UcQ4%?f3m)_<i_guqR~;E5`~BlPWa~N!BMEt3;+Pg
zG=qi=98kHj;F9Lv#M5sS7+U))UW$UnhJ_umvYM^MBV$X>J$hyo48n*0Jyt>8IpON%
zUy1_5xS<O+7oHUbgISF|<v&gDQoL4w{~Rm5Yw>&(Ahs{rS$0p|w%8SuR%E^JThB}g
z<7>}8FqZQY00597F1~rxanZtk>znN|q;FY@7WywlA>e!U9VK(8t;rdF?+aHSIG?bz
zC!QW^;Dm3EK4HcK<Hpo&D_-8*m-xdQjrSkB7tciBzoKeW!KiTB;G=H+`DI~$)o&+i
z3;+ORf~v0K^m&8Jn|l+#IhX~0x?1{@e~5xZ$KtNi8y4<}&8Y7zscz^lThX+qd`DAH
z`FEpW@$A8l_0KR8jrZM#UGbGQ?M0W)TAO>k&Hw;FhM0Kgm}Ba;$G#SYhG$#*D_%M1
zh5o+e%Psqoe~juc=|%rr2?_syRR<1USEQowv9j{f{8MxV001(?{LKaF^9S#pu{Jl>
z*i-(CXz{-PZ7u%aMlJ3tZL4W7`nawD06>Pg>H8OjRO**u?)v<~WqaTF0Q8}*MV+PJ
znDfZ^lXL|D05Zh1HQ8bMeK{i<c9rdH*_V9zaD{~^tUOn@Emo3f`TQV%T>$`q3^8|o
zewe!<|KgUu<a38}cVTf?>FUaj`KMm;)$=t4001(@wfBz;GaktOOhb2kM{9q@VcB6w
zA9!BaQ8FWW!^ojJ0ssIR<cd4Sgo)o7GjQ6PoDoZR$NO6MB@fG?=lYJ4`bjIszE4L0
z03d@*S($a<=LOS83|g>%xiGe5XW8A$_Ll$pFx--~yz<ff;W`2U02yZ3sA1{A5Nfv;
zhbwOX;;`svys;<#!)PJ@>N^z}qM)+5=CPvFPc1%KLjV9E6HQ(*He7puP8fOBX#=ab
z6wPVvulVab6&RX&%6}CFmHY{}jXwIihw=vK1^@tLp!9A-b$j7|;F>K(Gh6$UFTP{9
zCG}VAZ`xD-gX;F8*|Q$Z{eVsY06>PiW>xlp+3WH~EZJGs8-<4SV*VWo4b6RtKi6%K
zO`WzT=U80;0Dufu)mC_P&6c8xjl1J38+*#{YwU?{ZrW4+(?b;=TKg;ZFX}42YyPH!
z;gj#l(f|Me$YgteQ<Wi=x-)#F@Z`bgUHS3%Ty@ulCsnr>6)x?LcOQzt(9)NDrFLua
z<S*Yc%Ci^%03g#{IO~&PeDzu3l3PZF%WgeCOusKDjITXsKvi4eg-dtGe{?9$Fht`%
z5rvYG>F-ZJfqL5NY>fZ_fFs3q>+-^sd$NYsZY`ePx-a>E>Y;ez^P<N~mshnFeQL_e
ztRWZOIMSp80Kk#t;u}YW%8dmdTe7pP^T2`V|9NOgzPxmIy!ZO;v6?8LoN&Rk5hfh~
z0FD%s?;aZ_tr&asg3X1a8@kKB-Lxms-*O0c8=89)uSUV-{8TCx${Igs;sF5QND&2w
zu(Y>4oF4yw@Sypd3eH>HReIC1y@_XE?-rwFy@}_Vddh#^(wF?xTiR*ZmrO0(9&4Gt
zI{VZpFbp*7003}=x%{@#;p;!XBwTy{xZ`UdD=t~|c<G%D-SMu5UGa{^JIhwocb3e(
zetRsdzN6%`QK)EX?oAwQXm}+GAis}3*EMr(?io>kVDRK;001}=<t#WeR6bgeemP*y
zBjb;++ZH=1suSmJEEsm#t>+KE?}e*F6ePle&4ptdcb7l$rvF}bU-IQBT&$kIv0!vf
zd(rSHFbr}_5&!@k;ilf39je-kLVagxsP8BVHIEgC*$?N1;>G74xL(?L-Z9bpGn@95
z_c!-{C4LgsFPi(3zl-X{mcHcQqM)!peTaI=uCnh{Zz(!E{h7wS<p;(90092aWzYL`
z_(a7iM_scj`_#D`^1ra4tuUu<TkO&(V9Z?HRa(1bXIW!IciAnqj}=dxw;})iSKfKy
zKR)<Da|Zwb?+Txvbb6S&Iy*#xAXK##hA1!~9N3Y#{b!ejZK+w|=~PolrS6Jqoyh_K
z0RCavsA2zAvjGe90h2HS3JgbrzXMjcrua1k-A|K90c4XU0VW9mNkvXXu0mjf%6MP{

diff --git a/src/modules/locale/images/timezone_4.0.png b/src/modules/locale/images/timezone_4.0.png
index 674ce4e6e5a9a0703139cfbf25fc7c30149acd30..21493ae445f3c9ee9887204003ef98f63c9382f7 100644
GIT binary patch
literal 5105
zcmeHLX;4#Xm%a!M2oVrb(umM$TWugf!Xi5eh-?Z7L}U+3Km-h%1cD^kf(S^1&DtWQ
z6_6GTTi7=d1Qf&!L}cF$d|?SYVNK@7p8hda^HojNOx0I4HL0ZTse9jZ-?Kb9=Q(eJ
zjg{#!At@mM0FIfPUA6@PUI+m2*bDN5cM|j(--DNFKVxH?P+L<Y0DxwAq0zd%0N+&+
z2&6vpoQWaRO6d5L>p~E-ACUERF+3V*Z}d+1vCAq5moLZQ9`vsKQ>UlkN1Ox;41fwV
z?d;z7M?5bW4vGH|9%*iPG?mQjc|lU*{?H{!)m4c&J}us1{Yy1Q+TuD#6LNoZdIs^H
z2Zq-K-_WVP=<=Pm)>hr)uuQe&`yNp`ybs=;iOudd;^$}I;C~pHb=;G5_?C^4(6Rr`
z>G~1zH5$(QXEV43pQY-9BWjAt_orzg{QMJU{QT3x5Qs~k7%qm#ABp(G9C874D`e<m
zY`&~11$6dkkeOpB0Pw%y{&-Brk)Qy4A7*kh%ns`lhVux)05}{@$?uMTsFz0&MhP3@
zo5R$V0vDa*F7oyW!)SYjV89EYf<US$f?tG+JyK0uRa09{T>*jAMj)ajF*W~5ArR~B
z=M(vt0zyks1!<2!XsfGgBUBX-DxgBl3{DvU#Ffo28`?)aTON0Q?81s3TH|n@sj}!w
z4wfMuIcC>?GWj4Lxac`-HCy~-x%1cKk|y8%Wae6BG8zvkj%3wb;*~JGe}rL~bi^;I
zrQnuZqLg3Xc@yytKTJpIiQzE5?##=H1!jpqo(uj!$6!OX<|hS4)D8Ecmc!2+El5<F
zr%%>KPS*DXD(8Tjzym;&1Pu25S=f=S_mWYeQQbBuFXCayXJyG>qv>D$iL1&aVOT+h
zC@_{$X)X#n8{qN_4*>jm4hjG<PN3LXaQka;zbY`M^cDcTXrxU5sJ(^&7gqD}0*|lx
z_wxc{7r{rf68X`PR#%g6j}p1BlD&FD(`Oz5Ta^Jp3Qf70yypl#cA6e^_s61h8Tp1c
zGUQ0_{CRQ8T;(S--8v3~O1({LQt(1^h|RJ6fsqlqa9Tv*6caOh5_oJ4Ni(?V5GU4s
zlnU<s|DXTG2-M11;ejb;<~2M3O#Qm<Dtd5v{Tmei$sSifDYIv(OFLh)^y`=By5{CZ
zS?AS7TXSbR1A%g@4U*p2eiCtc&DfGcvlNxdI~*0&*V^h~84#vy)t#FTH;5}~B=(MS
zAUnrdWVt!$pyYyNTbVW9DTef`CW8k+pWQFv%t-1thq^D$CWrSeTO~7<r93zb7P@%)
zcrj&`Ju@GVxr?tm)iTbAD{{^aV72XT>L_zqvqV<?q<(`gW0;2^^%?=RrUdV7h(;5r
z&u3(NKgLn38i(VZ#{*0oPZ+4EW{nR9#J>vHU<Tl3O-IKgtn=cV21KH4vD&(;eal_j
z(u7+PGaV=B1(Uq3)-SR_*q1-Ki#NF{_xc^wbGx}cAo94UTkP*E9IL*%3Qv-)VDgQz
zDld07uG<hdH{-0}E&@AXT;><pk*jC}0E5mNy+-BNBC`reZ^@k8x;H-?vF7IOPPQ#r
z)M-mStZot{7eoAg-CnUb6uM3kmi?XIgkQX;USQrUvP$~_3QTor?)Ih)y0P26$_TR^
z1M{-cAuR(;pA?DY(|w4g_yGmU9s{R3C^2+xyl-LY%aZW}Lnk~Vj!xWfdqZG1dh$dV
z1X+j!ue%sDf76z|=fsWaqW;m`YrCqBXYaVV%5zqG)BHKhJAJBH{k2!oDe3L^w#F(3
zCS7$YtDb_OI<XvdV=-*oxvWf4minuY^Bg-OQgcsM`QX#kE@xks$eAhAk3u%9k3^S3
zdM6Ujmb}^8;%sg?T+mYhWB2ynG>Q0pe~CiXh6?->VEs35w>EggVt<Skv$gPRqX4fh
zksxTM9(Z!7Y;t{iApYxKA+78kbXL)Nek0yMXOI!z*fS_4Ea|?x-hcTaUtJs;h(XHX
zH=5@@GTT+7NMlIcq!+eyOR_9hKBc*SZi&e|D7&yZqNAiN-4wPvHqw({-GNoi+v^@M
zr$WG7ps#vn7G3ex4r31M4CW5EXvN)}h<G8Nxqle$wQ$uJ?>`hw@6S}AG|FfyKx2|G
zfk4zOOkZy@gZVfL!h~VMs6X2_=W2^^%Tdc`4+j`=8@>eQ(&l!G{=KQ+iB1=t$Qg!G
z=?@ltuP8`TAD_xBxvt4dmXEc0D0ZdxU~zbRIi*(FMN>rxW)F+Kx4+%B(U~dWtni?)
zudRX;89j!TtlK}z4`gS<)BPk?npyvd77!usE93B%jnuq`dE!a(aHZZGA~tj(Z#+MQ
zJgL-<7z;(KFH4b`kJ=68iIEbvP!WexIL7g&aIYK1%u%{v;6^@Dud#aX^kI6TN1i0P
zvODp$d{Iu8m7<cgFj4wWEPrbQcgshoE6V*>G(@E%b_(6ICz={G3hl35a~&VK1+Ovs
za^|j6Gt}r-y!~AxK^iR91|=u#C(#ok(Zde;y}$f%#S>pgnJ8H73)M45T8VNukexn4
zNK404C7ug;QQJf&$yH}<zat5DfLHIU6&XW)t5GXBYtBL%OXlD+FDY+)1RF5!sz=Ll
zTd3B?22M1ya#EIc!q%0qQA?K+ke%6aulrnbKAaxp?{Sz{%EE+7*b1WF8$mQm+oZg%
zBIi(fwZ$*SEt9vy;7-ly8jW(;a61UH<FzBkk&=i64U#YtO#Wj3<YaPS@aCJz7B&-E
zbe?C?CyobTmaAa1M#Hb^)o{+zvqr}4Hek<`O623<B~MMBJcZrk2$dki8rl^FWc1k`
zySdmiEt{XdcnwO{=DE8JMR{N_Y`mFCLxnmlR;*a|V8@uSlaPH9<xATRxV`^CpdHs%
zud{mbK1)sk0tCh9Mz1X`oF!>R$oC|T=f2vpd5pS1wbP**%TSyNS`Sm{ulg8}nlZ{&
z_uF09c^OikUM+^<#A;jbukm+0<t4bXoQIV|4J^=U4w6;}A3l%{TzO<AxV?UgKJWGh
z&q-@+QHQEc!h3dn2ma7jSrT<~c0TI6SK@cBGr+D7LgsJ;knf<znHbpO=H4j2x#NzO
zl-o+#C%6Nu1h3qeTC75L(XRd(8Z$bb{u2OA<E&e=|8Y-ndUA5pW_F5}LX|!k%8X7q
z2w0I-bJ{KQt}WG!6|01Mhq9D(YnsB=*Jm1|CSDaYf9Po=;}ZGn&Jx~ri35o9?Xy%_
z$DL;4-RZ{sw^IQYTP6GoJ-tauS>ex|&U`HOaTFJB9lGfO#2no(oYY*k>4OlT|LnOl
z?PKP#i(ky8b%`Fnt*6QA$=JEYf!3`ZhX4qVQKq$k4sCbZSyonrl2JVnz#!YP3^<)7
zBuyvG`1679&|@Iex%!@6l=oEsAjw%~WvgFO$IkEk_~#=ii|O3j`IhLtfkV^15|&G{
z<Lk=JiLz9_RX6be0441t_!=OiCcQ$fmxd+@FEm{Bo@&gPj^qYlGvj2dE<rp#rySBd
z$iAOQk$crQqR4d>l~eq^tvg)h2kyJc)a4Pi$^HG&@Qw?omly8qri><DnfSCGbXI~;
z9+cW`C|ydPbJ#!hOx578r=`Z2i-QjF+o_IQ;j|Awz8v0BU7KsH9<M4EGZyL@e7cgS
z-?E}0`N;quP_Er*t7hS##&^CuUJQ8rwjw`EX)|k&b5~8M-I-KUtm)+J=h8r^-tW}G
zt{hNQFXU-Agke}Sw}wvdyx>3ID+F@Cw;LShZeg=5yDc<nB^DbnnxTKv3o_~McGLNe
zoA%lWFEy9A@x-g0y=0MrFMY@t0OdmL>!wDg6^<mwHZB>}l%Q;n^jE*qup3xXcFiHM
zdNuO!_0k{7@3Jf5_MSXL2rkF`z{uLJDI?!mS<$Vc*Lp^cqIXB;3M&KB<<v`Vf0pt2
z{ZOd2^DMV6S1NAMUfm6vrz?o&2|LPE+Dt^~CLw!X%LAv=xK-azJt@0G_f#*`NWFpa
zy@nU>MJ}m55xg;Mdgnd=H|E><6AB}J>_%eWdWJn=r9wAWEa^&yhITQ}Q0g~Z29hQt
zYbljGjf0X_55<fgIp(#YF+Q|yQ<2`Kh%lvs?t1gqhu@4*lHP635Nli1FbH2^Qv-9K
z8br8T1Y1`9&NCF_(sB$q??<z*3-%Om?fmI)t_}Q&5#>63Fs;1hl<R3t`A4Ui5!5?B
z9Yqfl^pNjNUqS;Hf8_FTmD<2A7hm?j(Z<QF!j<u_S_SY9iS>^se~U@B0Q*gLfzNSc
zH?_(uwL<lyN&rqE3JlLP&&uC`F%;+qU}O0=gZ~$Zt+6Q7RTQc~zEh3i2;2cD4fHR?
z@-M@EpKDO)^fTlyjdrMWQZdQkDAD@P8-~J!Px2Dk&%5;3i0r)<UQ>M+5z6g;JD#zt
z+y(ZqxF)BDn%(u8j@~l&#*2-qCt+52`IwxOX)*wy|32}@j@n85(&rB0c<U_Gb$TQN
zEmQs+oJg{((m@bqrpfS5nFdRMLHUoF$IARj%-xZ_Rhpg2Ji2l4%*1x*S2(ty*g_TN
zKbFu3Fri=q7S$-T2^U`CWc0H&bWBilC_$Ka#m6tzZtiiZ^vHlJU#~yqSxx{`3WWR@
zIfaJED16k!t?H!uz%r)vv8NCG9ah}UP{BGZt02;MQ>C6@+Q(krSUlK#-tNv(*q1#V
znLpj@Pd2CW23>Fj3)-j}yl5{etG4;#%|Nm}riX5GpQX;VBi;6-9m=Pj{dua<G%phN
z5}xtu`a^`%U}E$sqesJmxh;H%;BPjN;cjmAo1MFG<#ij3ocBPWtD;=zl@dKwgTY%^
zs~QymC(M0c*o-w{qfo4^kG01V$lHx)bsSVEt2N|o9SIr~g8=0O)Xq_MiF*}(TL-|M
zaWFpu0Jp(v1^khT2I<@XKpaAY7`T1&VKLm8ULuuU?g<W-fI(_^(?}D2r>0qebKuoZ
z@MV1Vm({6ks0@_rv3<4~&?=DDehRGNjy1Lty>V8VWC_%J<31<G=F74rhLs}oQRJKB
zM*587_eBw4=R_FhU$@woWz$S?%xJo*@H{K}P)9j>Ev^G6qsv(?*?5y%+$06@ai9cv
z-{r~X=J~`$>2QZV{~V=Ff$>F<lN9<4yEo(HVsH27^Kda#@Z!;0uZBKhX=yP<HpS$u
z`o?-xk#N#?XfH5Wpk0D6iDWf~7C?~5$>aHJp#B?YU{?Omi|A*zkJDs$roy==0BLM=
zx~)3A<hCZ`I`9QNLujpo=QT9k+x?tS-Gl8&-4)_zis+NUI&O7lcYPqe+FeP&l3w7;
zbCY{S0DK0U8*oVx6ld2rX(l(0MZxAu)A`2Kztv@SIcMTUHDi8+qC>H{hL?)j;x_m5
z$;^8bPba<vR2A9TfTt5i|H88O*NMr0QE%C@^NgIM@6M~d;toLOCRUeAjnKdRJ1(dd
At^fc4

literal 5009
zcmeG=cU%)$x8n+;6meCWD2RZpASBX4la7c82uSFJB8J`qh8DsGfdvGVD$-fXQl$4P
zf{64YB3+soBot|(=9|Iqz31+Jul(_T@2@w><Yvyf=bU@$J$FLxX{s{NUZ4d4fI;oH
zvJL<orw4#z_fMVxAt5*G+QESet)QU*040%h`xeyT^D&H$sv=O>bCC!>T(-KcqX7Wk
zR{_BPF#zm>Apb7_-~k7KMRNd<dJX_AE=jf8G9coFrMjvzK!HAK4LQ*u<dn;8Lkx(>
zfbL@|6F0y=XD!r}74CbEk|u23V>gput<kvHn&wp!eo4GSMNOp${5sAffBW{+Go>c4
zuZBGq?CkE=xcpc{{sZ828L1MQMliB<&1DZOrE<abiwq8mV5D+-5+t|E(QUT9<yMZ}
z<5c!x9d}<Mxp#bfc9MNk#}oHvye7w2YI@i41OOoGn8Y_Mz4*0iDI^;?9G`={v^T(a
z-}Mh3i}xAY6C!p-k{3XwS*eZ#z{wNMpb7*9P}Nr>`KlkH3JJ#mKtc(Aof)*DKd3z*
zi-BJ!O1XTtf-vM5^L8iNpgRy1WZzF^Ct7CL%q2J|KcOgDTEFnK0zg`g-O$al>@j~L
zBkZK!#n3?h(|$ye@{OI)$6cfS6RJXIK-PWZ?rK6#V<KpehfNtT*>Ft+;<-lYgT=n3
z6w{!d^Uw@>F+Xj&ZGjZ=)8Ilyl~_#sxyi_2c7nRpRX>$MSaq@EHrX8muKfS6|1AsH
zq!^8W>G3L|yo3&PzsMRLX!^fj@JAzGvfmYIGM47u5<L*y`JB$l06Od^hLmUL=U%qc
z5;PUywc>ku>^Yg0b?Z623XdE-i&sZ-o2`d8>RlE;?_b6eZKOd7Muh#L-vb6zX$c>r
zX9FUxono21FTEJ_IMEvg--#$0iq)EPO1+1;`rb-;z)N@K0)oG>!Ed~@zkwDxUt<VH
zarskoR>Q5^%~5#`v%}Z@8qK%A1?&_J$>^?rN+Rt<7D}8yjO5*;n=~Qcovxe@rakl`
zg{=DMX)(*bko9>LC}-~}!zwE+$cjv|<NFCr0lU{hCDsCFLi<%7d@W5yK7!-LYuzp_
zyZSAh1vfeT5RC_iK?qGp#9@Q$hxaUp!v!>M@!`e^AN<G#@7Jk8V<o-GcJ79u{Qg)?
zozY%BOwIT-TSk1TJ4lw{IKw&aeVIaHGj<+5&luDUrBjb(!aTRMM&nI{+}6Q<9dbAr
zzqw}can-wex{`YutAB}sg0{Ne+A>r1hH-8}_JL-q^VXfF#tL)LIb|Q)qc+S3+QvVP
z_mG-?9*M59+$@n(Z5f@Np86o0NO2%?Q)52+I*<2k7BMyA$NC8<Yh@9P>MbWbrt%UB
zn5QaV#0s%bkuu*(qk`QQ^i~APhlCv3?RYt1r^9L{gem)r*hiD^yRF2Fa$)4nB^p({
zv%Kf0*kLr!s4eL3s3)dLOy!(Uea)IX>K{d~bT#FvwiT~0$m*P#d!Jn?WRf_UGdEpN
zGr-NQn7mtQUopeC{m}v<e1Lp-;&;o0=JM_xg|$k8`BKJ`d29W%=C~>rY6b=dg=(Q~
zLf?}OaqRwH%Ohq0SWS1PYVI33AP~1B=mt6m0?J2PNay|@m;W<}f86}c*3CqydYv<>
zkjnAcpH4b`(30x;(xWbnAVBlrM6%OGPLmNtZ_iJFe_VEF-%O=xuu2eW2u6WQSQ{x#
z{aaGncJ*Rg{8;%{=~C0T3e@^lO<W5ZEAHwgEudw2)mZg>Jf=<=3q)m;l6+0KO5Yc@
zbnLlbVkY@0`H_nIE3($V>A!ViXFhN$#~zvz<FQ(GnR<O4n#Vzj8LC?YLTZCpz0B4K
z<tXkw^;r>wq}yd#SX@?HN-js;Zc4ah{z{R0(zn$Odqqs0vxCh^?{L#|CfLEyw6Whh
z(gxG6Y2*l0ke+dv43wZ;CaI@nN$W6@Od4^svo4F81vMgIgEhV7qGzel$Lodc<I4Tz
zOCP>I0JLAX6l*pqH1nU^hRb57uBB=x21zn8EUj~(bdkcg>60p&3RWKbV9p7%JZcc~
zG2B~b6LYMiPjEFH<KPyG2!4eaOTtd?tVK%atcgTtFVkDfIh}Nhe5+#eRb6VMF3lrf
zd_k<yZ<#ti8E>1@N>_M?9`)fcC@HKiOJDjV=<Ur@L2U*S7q5-G^tO#IpbtIgpJiat
zB!jK?r|pUBQQS2ACz#~4<3t@73NmvUHMEkxnQJ$NY=@JK%f<40$=%$0k5@G7{JJ_a
zQzY}fH+%Bcmy(-u@x9{}O1qB{k&Wq}A~wihb8%sn4>ppE#p-&=f-1wOBOg}EF6@if
z7*Ap^gD#X*OSyTu{SSKFb=H}ZdtN-kYlYI{unD<MG`kri{@%9HG-rm^E!5o*Qe-yr
z63pIvDmTPew1m6=-o|`~=e^bwy(9Xrvju#eCwg&tmaFyX45gW9ot-<P=Oyp4<w=|g
zlPhxY#oG<_xBIh2_NcS!Ns~j(MqXa}831fFo8f5lJ?)`uv!!`-iaYjpO~%C*o!PGT
zE0dxapH0R%&KJ8|Z3sGc@kTZ$8{c|TdnSq*?@U~N7M7B$mM?oT1U~}P3OSg+b{8)j
zOT2&gB8(DNOkTIw%b{q=aPXhFJ0-T#AzPC?YL+@}X9r3Yx)qaCk?e;4&@mtUjbc6V
zE@P@tT5=6xAE8C=u8p3Z8YAB#w-}IJX2!x-3^!g2Qs8L)?#U3W^LSLn(q5QueuT0t
z$FWoo#b?K}CRBU0R>ZGdJ?aJ83%VS{ymU3=LvMPGA;E&?O<G&s`-);fICvgdmAH6I
z_!duxui*_SM&yGR=&-2{)4flNb6-LRde1SWhbr-&`kgs^F-4mj;wG6;&Bb@JsI%T~
zIfCG|z8#LLC)W^atzn;?jCW_M8`M!9c-&^mY7wGwlel(o+nXFI*4u@1+$SYEb84^a
zEIEfCH9Xx0{kz)D^})0RJ-%!j28Jew{lS{y%+vMz*)Iwd=u&&|)yov}oAl+)*K%>B
zkVbgvBb3ISCC>zNsPLM+J-kGSNw~I#9yT**K%l#KhiQ9R={r#g8$B^T;^SkUgNPiS
zV}N|;yC8E*(@Fn8EtZRu8@V|=OyUKe*59NDS5P%pANS+=buBlop?$!}zi%mBL8;}O
z!W%2EXk`6azwO!P;;je$_$hCj8CYl)Y$O^v<W5o?Suo;N16v;Xb#a>k|1=xYbMpz~
zvVe$pxJJEdyROwy^g3t0&+NwFvkO%McmuZw<F#WeU5%UROtwQbzo+^b>Oq}b_uxn4
zGJ-%YE@vn_n#R}X_2`X+em+_jK`$=+_DdQ%ztSyFGB)Ss)ARVo&z@xbLz2PaYB;ZR
z*MTw24QdQm#kB7uvS-JGX+OZmP@XPB{e;xF0iUoM`B!k?Y6BTRq+X;<mIj=|-`H%7
z9Se@(gdJS5gqlow5u`8PY&)-kS`|_68kD6wJ6%kC`8p^zn6ClTS((L%hT(mQzXigO
zS*?xF4URg+Cs{oluG;T<lG;b3r>F4WIOt}lP#z8gMNT-c#ojyHT~qO9>l*~vq9_lf
z9O}4IHUphg4Pv{NT8pW1p!)t|HX~kJVl)5s95#ER$^qRL#mAh}J%!rw(pNfrq)m)4
z-&b~CX$+sx1n1$K(f|adeleI=Rbczp=`L>@;_}aQsmZBlrL}jx^cBBT3=!KB;<r-o
zCCWYA$@ZwR$G*H<g!67*rS8>dNW_1_Ogz<qdTPVVT=v=vt%=x};EYY{^p11Z8pGE_
z0~K*QQ_{>(11^fWSsMRH?M0<Pl+nRF6#)vcA`5t?9w$r=Tyg3x$Y^2lPYp31V2OJZ
z6epuEnK`GbAtEZ99(tVVD0r$*hXk^iB+KOcY(Jr%sEah|yUA5nIabl~yIM#z$MYm4
zPUZ@fJ=8w=>0CDCkL7iK_s1Glw&&giq$`5_ft(utl48fHQ`@xQrYH|V&@P7Yzpk;J
zHyQPMl}n7_0m=P!XIxz@7Mcfr%%X*hhI13f))(hS0`{048%9)m!EOEZCTqnX7|OLV
zbwwtcg}^H`FRn_KHu0Rt)pV8Sf%t)d>G$Dd{NqG6@PwfYSBBKT3^E2FuR({2Bgv3P
zXXv3{ssM8k(F{$IheP=9U??X1A<SRsAudM;8GmzV%8%!pKQSlk5V(-2IMADMMtUfy
zNXf%}H+W@vIq2BJQuE#!HaKdu&EV+RXQ6=gH~&ow=k<%XgfM0=G`aKiT|b{KC3P(0
zH92j_rt)x64Y%^ff-gOF%h&M*8?RdHoTrj5-ZX>`LLgsJ+o53Y7M6>l;<B|tM>^?6
zK}vzQ;H~9}6>6-gC>3KHdJO%1Zx(~~JzL8BHozjs928vE&(xrbdT-tSq_ap<$Z2l`
z{bBx;Vc0JH^R+*Y@Y+=yAB!_>>mD-l`(^OhwoTR?ck*&uew7dzPtSiy$yvi8dM1r8
z<VhH;>9rCdlBP0_5%s}n?!AR9<fVwY;fW?$^k&3ZP&a;FfbM8f-9oHpFXC(FN_fM}
zo^K82;odkuxbF4vSCATz-3_!*?k-zjxG9XE>LRH>iZmeW#6p-0`jQtU%QtEUz`ZZD
zJZ~XSM*#ICFe8}%LKWqOTCRf(j`+_d55JE(1oz#~yqc59=MuKY3cj?7DU{ej%I8bb
z!7+!wL>XDf@_^yNUJ=nNiT`RMol%<4UIiL1HSetr)*B20@N78pJx2Z(27iqdssLzl
zKLpUf2N-#Pz{QJ1G3QB`aD;N$`U-vb7AsvW-yN{oG13Nm4h#k>=zRsV#>kT08WDdA
z6m65<4EJq5?06QoC1~SIuYwZn&abO-n#K%LZfpg3y)AXZIoRG=dJIbSk7K1*;(pta
zJ%JzFQi0vwA2yU`UST`yRq^2CzEXb|uaCV5vz%Tu5+^Ye11b!%ern=c;4l!UVVt+s
z?dLIyv*%zna?L0wRv0vdr5pp&vS?az!;&K7f-{Pg71vbr!41aWytsh>|0;=&atrtu
zrib$IhxZ8oP5S*u`u^2BKW6=(a(jP*@V!o@K85F1Vkn7K@mZ}AN3S2;FVSe$&ebku
z86I~YIfzY)gDO>;B#n}ecAp4ZFSu2WF(w<y$pRLHSH!}jA%`gQ<#Qx~3#!imKG$mC
zF{Y5S>`FQ%hGbo60m3vf8aA45C%xD|pBD7tiZbE_S^779YIFQsz=4zhOU3_FlYxXk
zgyoNlAA$c>MTCU^TU}cX+(Vs04agU<O9+Fkc->VD+#guDTT5BFS%U*048I{P2!7$h
z_iu<wiAYF^iV47PNWtMgEY_8OB5-tmVEfSPI{{o$Q254uI9y6hL<%k<02c-c{AaK*
wkbn)6pzHk59c$rc4PdcYAzLSVjFp9pwUDzLI&oPBJc<K=nu?}!p`tnAAF<uq-T(jq

diff --git a/src/modules/locale/images/timezone_5.0.png b/src/modules/locale/images/timezone_5.0.png
index a15aaccc09ddb9fdd6491ac3aab70342d72da645..e6ddf2d7a90fbde59fb25c5fa6e4f135da8dcdc8 100644
GIT binary patch
delta 13654
zcmXY2by!r}*B(XXDkuU{Qc8Ds8VER))X?1w-F@^TNDdca=n#+?V1NOJE|E^@2Bkw7
zy5pPS_wffj&oF20z1M#C+V6VTIzK&|Jj-hD0297zXD4Z?96CCluvd)4_Z0brNZanI
zKV#<5%O<pQD6P<;6EEIQM@ugy(>|fGG+5g6Q5c_0aGY{WioIvh{gtiz(KjX%rZ$?C
zdtqtM(=|QY{RgLHU-5z1o@OzgU%Vs;nAG;%YP^yvC|r<UlU8^L0_l=NoN8ss)qGDx
zkW6#K2($))`p;364Rj=K@TRnpD8Rw~r7?X=$OwTE2>bJ~J?<Khn!?v29!+3`_mSYO
zDfYvIp5zG9=O39r$KBwO0d5p^*w6R|X^2s!jn=lS7&N?mSPbCB|2<4hi5*Zrew4<5
z`yw_-n2#+NIc_XwBK+%+kc<1?0}v=7ykp~&?eM(|Yt_HWWiSW>14*bkEi1h1<nVMa
z)R)E{RHpS5XM}|gxFi)O_LVnY_*npPJ`17a9jk1OS+g<*@>%cblKevm0&(#U^;YZn
zpp@6sFcok%Xms7WPBr9R@^HH>eM<u)9|%;|zz&@~xVT#?Hx{93rppb9&*2GRV<36h
z8=~<+gwO({^v|a|AW#~G1%nZ#q>#rVYETA2GPMyY9%_&t0c-Rzu&aXN@p<D$`+cda
zUa|(USGRVvyi9ghGrs)PB<wGIC&}Gm7Q3<m6E<@dIikB|QMmboK%?(WvA@>_$<(LK
zmV`~IUSg*M0u@BI;QoB$xr+w^i2;A!P=HLE;$Dlsq-pU*jk67P^qii)NxW-Hhx261
z{T^<QJD^qKIAReQGQ$^Meh(5zaSztK0Nd675(Xv7#>I-h1QNt^-=-wp8C~JQej8+J
z_71)8Yx0T^Dl9BgrPJFT3EQl!--bGYct~%z0F}o%ANOb&3H9KDzUvdGFQR3Ar13af
zr|~35)YrJs?feQo{hi}6?dHPCZYEK`-Ve|!E!ImPtqMIyVptF6ikwu@#(^R9YSjE|
zPYA)4K)6kP`Rh9Lo@I^CRg0Xb+az+-`oTL(T}mqu5B2SkS;tL8%mUopqWSgCx|wz&
z-2)k=j)xX2%j+&%u~`;@7x0?=Tzu{hUCwdQ<jWm-r1ihaZ$>`zBL(F(w2|>7Ko8r>
z(`O%h32*0-*N8C+*Mc5AuH8u$se26sgYz;5y^nV0vT1W^ytD267^I~I1Ls_swUKCT
zdG;;eB~+3qRVn1T%_B`6Li_w>ducLvE$vj>tigX;3>k1Zi7M7}cm7>v<nCD2h}pC>
zZm)*~Y=LEE(laSl=n#;lr7<__;#x<BOhqZAwe|CSrS?@SYWq}2iSeWXpsBJD(yOeh
zRw^SRJkD>H?ekjC5pGMZH!;~Y#Nk0@2I3LC^+M!hgTM_v_rR*Fx-F902hGrxw_6iN
zSFJ?#PVpal?1`Bnu!x808nw$rG0~L`yRC8Fe+%Lb9x?u;h7r+Yq)}NIYVT!(rsmaG
zJ~P1~-Sfm24C&CR5g@@?W?sh6Ft4!vU(Q2bP$C%)BfYOo7QQre8*ZK(o*Ye_O+6t~
zB5Y5cdE)qJk%bx3UBvmF!<B~mWNC#iS6)THa}i;WaMXYQ-M%hMKXP~kVd`L2WyU7T
z-{e*BvcA3+d4+%qoW*jw`D#PE$TQSD7yM4MWCIFbMEnK;hELK$c(ADMLp90p&X=7}
z2Vfin!$Y48>c<)`eM*3Dc{TSRIk;5iCn+X}qyFw()jRtcit7geQuDLNhY<rMjiUOl
z_N=gy$++$(%WnN&{OpBGAw2CJ&kY`NrbuMZ%uH(pPV7v(IAZ!a8|JmQ@Q<aM@<kT%
z2~CgrT0sD)#mX_Vp2ho0yB1zO`#WDUt&AlvYtN;r=p@;|+%-;oMzEMnGYL#1u{%6%
z)Kh1Dq<!P(ZZnuQv)FBKK?(M;#Y~rm5$iQ?;5$3prZi+rEkzGLGk^P9O1XWhkUc|7
z`f;?tju=Wfq;i`gc2O!*=%b#TDK;YPuN*e5qyUenGN_$ZEvFlOR(11gS6<l|49-)h
z>UW5yqtp(1Ijp=lyRKnI3deKhHti`!(CPXo^C{i%dZczXS~z^!(%($tV0H+PlP>b_
zAGTyJw6$Bi(_o|qI5OVG^88c@JxC|{;d<fX<U9V_N&KBYkvyh5AQ!zllhV4S&FEUP
zYQRBttv=Xi(`6?mwaM3HttZ&q`XCpspLrnpQQe#|*4EFj+?OGhx~DU)U8Iw2Lf?v3
z)Z+m8)^{Ruc37EDuPC{UkBXj4xii#!PapE0$@m57RD&#;S^`vhODAS~4xQMp^NBg4
z1sjm83K|=q4jKgx&S)aHNMKJqn^vag^%G#EsU!&fIE})A$=3JNC}RPmzyEyI-1~VU
zA|uT|<i#|{m!!tjyR9D?(cbDHA=p^{Qa0$_+aNb10ZqH;_SWy=S}O0?JL5zW6}OIp
z-ZbjjRSUu&(FOeFjPrTO0Bqi|Xlod9e<v4D;#%p7l=HLqIO-Z|)cMP$+zw;2YS$+w
zW(M228s<t5J_z?fqY;jN76POq9NggeFbc*0dZxG9Q~UZ?YVRf)9AeM9ORWUi<Kjs-
zb`znFu%O_f5Y5(<l4mR<ot*8fZy5MfY;CF5A1=b>p<A*>&>@CwAevZ{d&VO8OMf#V
z4VRS9dPw*uJuzw!!DpOD1fCLfkf<O#CnCyWqg!4<kD=|)mquIl3&)$>*0ddIJ4Nt6
zsZ1VB>X|wG`YTaaUFo>!do{-kEK)O@F^ZbLw*ZrXK#82WszK^H^5WN)T#C=A2{gms
zq6;~ihcwYu8CyW;UKizF1GvvM=hQcFtC|6voLw|mS($nM@MCTiG4|@=k>!{pV<ABd
z#cR-N6EBeG`?F;D9&XQQChsYCMy!<@psas8<!%xQQ*x?56Bkyft&)mME`a=tdSR@p
z%Ske>g>~UXMbr5Hv}5+Wc*T;b#@-n5qEwc@+_XTgCxB`BvByekmp>-2`XM7N;I|Te
zVAum&(}!koChXXPf%Kcb^H<jyF@~<&zs3W4uXz;IrtF1{iW3gnH@Zvq_LUvDQYFVX
z&&G;}$HjAyufyepjZ!H4F;sL7iyy_b9e>&*ba(MP<)0tZ$kuFTWqqo$$?KT=WUtpR
zR^m!K0d&Mmh`YbGi+z#z-2A;~VAcC759HCp)G%p7HR`8-5%p<NX&v;4QBAt6y7Fl=
zHHZRs3svitLPLR(l&wc!S;l4|0h$IU;adihCbR!Ji4A`!Vd~6dkzkQmt;7%uo9(NF
zjM-4z{hIb`G6@&o(M9sji3qs-?ZNATv?>EX6>T(Ueus_^EQtyUsg`6=I&Ncta?B?m
zH-RwL2uEH~nM|or#*!s)-;qb~79yTrGg)q2Pu8PPxylH=j|e2f6!l}AAGEZ;z@aZ$
zd|KAfz6N!L+W+8FmMiJw{WQ+-Y0Pth$0MB7&xwxO7IQcvJSHpb7g84yd_a{26&rI;
zOh~Pkb#XofsTxJ-m7!a`ffDsRdJ<Pc_#9|_p`2cX(1)(T2;~MtG&PBKg4Pv12ZA1g
ztRG8bX^UarzcoP4*82fnb^Y{)#Y`wy$$J~GQZ^4d@w9$2opk?pCe9U&#Z%N<ot<$B
zGF4b5jh#Im?fbkU?tF;SBXcv3*ymfj0j0}69kM#oW-9h^7OU+pESGDDn$CD8Qy|>*
z76xy<d(!jtHBG3c1P+Qwe_B_gOPwZH{T5eJtRb9%JJM9yiVn5QYUBitBj)Bqr;0P-
zZsL@_SFH+Q8Y2fqn@&IUlO+}s1LuvgJ+p)1Sc=}8tU7_CE|{ZatDd+z$Q{Q19=n!M
zx`5r+Mf*EiR$vloo$s<w+gP-Zj~XAX%|~YGyXNCRsRq2AZ;+COxgF*fy$9P+QJK9}
z!;xip+~3EP>}iX>i!rpN(%zT5%cS`9Qi`Uagnw?Msqem%Z*Pjprv4fr23I$V<9<R7
zWF+sTf%Bd$L!5mskE?dFQsXsj3>^;fs1Gjf6VW|vDDXyw$$y7;;qTXGsp}ngpbY!j
zWeRv@OlcFxyI2}#S99EG@Vq1t8su1lm`;SoT&?+NpvMRZ%v9huc~>ua3q;s*qsG;<
zAzu0TFfW;a_1si1ICM&*Y0t&oe*#dVo~eV)eN`Mw8L-J;a}R%mfDy?{5;f^w_uK01
zqqb+N6%xJVK<?4EA%Il&C?Dewb+7g_;VQu>S}tx$-JmtU3_N>RC?Z2nXgfq2XQ6Tt
z?DLW$G#O=aQ3~`N(fS{0n>0%<NCbE?sM~o;x$+8gg@uWgoJMaCICcU=Vi<PE1RKlx
zUzdbjZc#Xvbco2jKJ~v*Igwba{;JnFv?rIoW=T&yuEkx9Fh|o+qs`-WOZ5?L9Y_JE
zCOeNf%uLJl)K#4+GU?CKYOGDO_hB$mz~PWZ>nM|{`Yk_~b8G~Pc)R}u2xQb1xjSBp
zmaCM%-y*nikOgWXU!{*Qy^VxDX-HS!s(5S5%Mg0y>x;z?N7N?&c+n&{mX<8uGj+ug
z>#}>u*>YyD!5Ayq(W;({DLF9G&G0=N+9N@!8seZ;AxN6Dzx*jb5AX~;O31HroRPN$
zk-zlAB^nZk7r>fP5rKv9jBkjy_X&KbIkHoGPy=YV%#UZA&_OulG_pkXg*whuNuz!V
z-w~^4J|)Kkwd@}{%O1VO^a}gYlaq;uS60X*eAwP($a}%fGFF~WC#`;ES-ak#g<L27
zl1b}#x&`bvehMieXepvJ!-C^sjrG>*KnLWiVoLr9vTZ0szhL}Lqu=O9>1XZahi@fy
zDS^T3Cf&2G1E-k>d}|4Ph6>o^slsBgK`0l_VdAuq4JTQtW7zx7WZ^oNU>D_RxSj%P
zm|t-ZzYF@<J2|ZaZS0y>ET*g_<UQ5q)S#4hYU1-LJ7kxq_}CtT3y&mae(qayua!?~
zGuEdjUpexlAP%*b^2R<6i*Y7rUDX+Y@wy+@qLp_D&Z4?|O!bhf=ggZ4eu{V!GNppN
z@twXo1KD~whNXq!rwJH4yN`>NRDvDk6m_s#Q{<%nJC)C9+lA0IQA6t`)|O!fQ{1w}
z_RTlC*(y7EIyV%@%B5WknlCTDDCEoZt~$0Xz9qu)R;5=A)RysICjsnGGf}ZU^EURG
z*Qqhv7n~cIQXUU!(7-YmF3tH}9N!>C`VD%pdg<vrFgx+9xZ0<QiM*ynFIP^^j(sjb
zL8f6*h5FynBV>DU3=J2rhY`rQ{U7WIk-<&dKb`e_=e7~mB0_~n*~JiZT2zl51by$J
zXC!^x?1~8Udpp22RU)mPlX(r2o1<`yVZX@^Q|7|iz~yzOJBTKtqgrJD6wE=!(_d<P
z(#D(a%1H*^qn1udt><oVB8)WpQBOkU@A=;^9p5JVr=I(p^<>1ks`KQW{%+1;BO8g>
zo19hWjo%rHWc<5s+W42omgV3Yp=SgFA82Bl=(PdP%+w?vx{Sf;I}NCJm&aJht^65Z
zs1a_g6Fm8m5xr*u&ixy~rhzWAeqc0coufzwFZfQcxjjv6!;c><$QHX;85R9F)I^j_
zxWtgQIu<E6emccs)3}E4K)v`<%vSo69ytbU>t&V}@TfWD-|lD@6jZl83dmO*vtLM|
zOaMM@&os$Y{mQ@hTUlwt@geAAZqFI&#tRcY2mMOlFH{75CugT1H4$f;MNlsUc@Xp2
zWd1<+sJgJ<OKr=x=(z(;B?6Cq`-EJIm%~mrwh;E^zVu$}E0zp9JGX|KskzL#k>)^u
zZ8^){1nwOetz>J63@PY{pBXz)Ers-17m&r;Ge*`tJRLjh@b0;Wp1b$fqqY9>&;BIE
zWa?GNhd*xuc3WHkV5PENDgO$1ZF#ac67yOYL@tZVeh$6?{s0>AzlmemUselT+!kG3
z3Mb-ODSJBpT|&?bUrBH?<j?hWuiIO35GyX%PErWOY%1N$aJP^`Oz?VeQvgMfI9q$B
z^NXyXe-@PCi@afJ=nbkCtA7J;zl|p=@DxqwES9F|3%4Av*WAh-Q?-qrM5rGeqJFN%
z+^qgI2`IbSy2@9RzUz`abStj(_K5JCT$RdF!sKY9`W7D&jEAugPNFn^(8;2siZu4?
zR@7TlKIgFZ4g7ff2LL!$8)*r&IX|AY$76}ss)^;>8(m*{)q9^RxkLLW?X@M#F}2es
z90-^<Qt9$LM1luw&LY5=-B%!I{z!21Y{|dp=5%A>a&w76sTL2fB?L!5%0Mu>4+;&s
zhaMuBN^TEs1_qXL(#{hyug}81UVcKS##}krWLZTyjSV28mDGBU=>Kf}`-9{1`art!
z>$?e5INuVOE|3Q2NEcC?@WlqD>fZ|_90yBfxJ@V(5INkanM|U89f5SEZ2ca9Oz#-_
zPS}qPlNnGbiF?;H>F*Nwz!<w%OMb6<xVxx~kTv3aV|+Hc-b`TQ__qxz(8v3~CgGcI
zfsO4k0J}542cE4$Z3Zttsr*-GFG=z`I#47&P64>@QU<t{OELPlrszNOr=(=m;7GYv
zkdZxv0tb;Mm-!(j_$`aCap&|}yitcml!^Kfnc++kAn`R!@!7P7S*y&^RrAGlQ%K4E
zmc??m`R_Q@YP7LApfuI~5N~iKT0c@>H_S>qI+m?4+3gvkoIcJ&7v4?!C3{VdDdol<
z#AS_3=vRjlOeViN=>BP{N6uWp4I>Zxbacz)+bH?R!NSGKdq3U|i7Lb>U+2)*1Ut1Z
z{O!EVplI@qizO!|>g!zal#5@c)j6x6q8#mws~~3pc1~yVS>Cld&D9-E&CZEmE$hgd
zq&C`v40*_d{@7px>?h%ql7~(W(Dox_`j3w8_v!1#iKj7B4UV<nTTI`{g;QEE7b6NF
zu|Eo|S&&JIZAszX{OFrsJB!T&gvoo(*MrV<&xl2g@LYb}-a*Df4>qCz9Sfby8x`S{
zEWl@2#1O1YDXH#{&?t{#V}56mo#K{G5fL~4X)o5L{O01Pf9BccPfZ35Qa=)qA;axC
z`#s?8wK}Y_x#|PP-;3XAs?5=2S566URD0I!V`{SUXBxHHH?KgSo{|o}^ZRHLx5u?!
zH&^GYRYRW1Y3FA?;Qd5DF(`a&8bGP`MYc;xI~Z_Y#K^b_rA2Gp`R#$@9emZJ_;W^$
z-5!4ztf=R-6B~*uNZ1DzU3Xnp;_&c`>g}zh=acNdvl6$Y;m82rm%1t^81ufHv*wqJ
zpl!qRP=pAHK}sx2Lp)$vsrl-tG_osulKpwh3Qmk`q4Ax#!hnUUfg0IS)bttEVDq6}
z%Xmc86M6r9`Mw*rXz{^5`DoCt{5tO9KHfkAF5Y=r>dpB!M!Pe~@{Q{Kt>0fVGr%}Y
zwl+Saz8d(xJ@NR7M#f>4m?Wh>-+Lfaa>w&M|F5a%v(=*B%rd_wS-c;(j!96P{Xs_&
zqdF2I?|bf^UiSd9v@_C2d!^SCw5--A+MwS|^4LgIBexwG7~b0Qs^*CC#Hq&1{V%J8
zPG^whLZQ=P06b&6?1h_~f(;T*-S(Y*?)NO^*yyJh^P@mzX6yq{MGS6z?d9234^HNN
zw}@7NJkP7mhn+~HW_!)WlO=Yzj(w2)o{^d_Z0)cO5V&5NGVcrz#wQxS_t+FNbV!JO
zSRHdQ=sZ(-yn2eUPDxK~Omf#m)68IM?B`_-q)n<rV(qBx>FSoXlR&>caA$(2b$rli
zY>yP~FVH{WS;A^;k=oQtSv%+1o;fH{j27^zIadn~9xA!szCxb`ID&fdbQrL!q?~yN
zaOC!c35$>r55d?bNP(tAQg!fqu8rcqJJH_%L?(lh@NTnrV*M&bw<T_)8|krckba%!
zH`3k3`YU3au+;hLs>;PW&dvp320tI0DEv^G(|it+yG_&IbuU*|pN9@aZHcE!nP|A9
zo)1&2Z;q;L$bp6NT~D@+zd?W<+PUhY8_5fnwPprTA|npo6lN|9%G-Yi8&11Y`k^y9
zifW-`4}(uHkuWW8C0BE?X?{VgFPBO7!?68Ii@CDAVAP);*lO7YB`3?Bq{p}ZNFcL2
zKa607YMy^`Lm$&l9F#;e=We63e(0mj+u4YvsnuKM%zyqOR{&yCo$37%UVv}kS*N|N
zIfI0_o7DO6^7kq7$Eo=@E1C;jCg(+WK>g}ir7Z$WKYVpcoX^f4SAW0$6*KiYTuX~b
zoK$lO5ex?hFvMl9KMsfsdy`M2lrU2nVNP-WyraOyuT@Gqpyt#cufBKT!p*)j$$_+D
zMW<S*673&e0O+PpH#sVp@eB~P?6;Q}Vn_Km;oCc%h_TJn58HaVq-Pr9{th?pjcTfD
zCZ5Xm-M>yEnkX_O^oq7qjuw2OO=n%SYyNYp?6LOm3Q2z+6ENbz7tZ=hfhAvJ-&}-m
zXXf9er?KJU62hQf8eA0D+imHjD?mF<@9#FPO@9TPHtRl<8W_1)geyXeiir_g0xKHq
z1|-r;+Tb(N?!VvIa!n4<%}wC<dHEfEYb>nL=8I&Ln~wQfS!$3E8P1~8ui1u|D_+Q2
znTbH7RwW_iVMTh6QniYGQM|6Z+dr?vNf6=VpO^$J5L#Z}4T{UvnL1nthSUn=IG7QH
z04?(B>e{CBdfg=Gq#l2Ds{!=;87@Vr@u_RXTy0I4Hk|By%bMH!H;T<Qx~scAJW5^U
zpN=J?BD%&pl$DPsa&z#ru+hQ4-PVKAi~7)+Nl4AG>tN6wHFnON;P6Cn`!ouSI6wSB
zab!XiBz&^C6a)NAn|`N{8uI=w==UN}aJ;p%WoLYlH#3aXX*c9`gojBBcPegt$QSr>
z(0!`O=_lH7Sd~|m%qdv=#`*1%M=AZNz*ynqV7a7YDQfpL3C8R3p5Lg1PIS?8Dc*7S
z%im}-zoS!l^^L8~FVCgvA!(wWmtvqK_gh@{T-A9Z>-op3vKSRt(<ek30o%Rcy~zmS
zg+NWEi7vm+aFRXC_#ypDGIez}wC*g6Msh)|lkR_U3Q=#^J2lY(y3x@wQ6-WMd!acP
zsD073Ay<}%g7=I&uZ-J&E1Gxu*l!Qe%4^9WpNWUEV+FH5g(E7K@4|!5WH`;%lfmNR
zvHdDSm7XysrAOV3-{1hr${9&b#^d>QvUm*=HHg0X9v}5RbZAH367AGwUys&!W&7g!
zgJ%BSy3*~ysv84;rN^8)B0`=XOnISSkYPTUOQipJ=Tdj_kHFxlH=r7(+jz03rG)9{
zMouhLqq8oob7?W2-p_L!-Y(6r7CE0D<L`3|Zt-5N6sMg7>k#mF!+3LqZPOn%%@5P7
za1sSOb_IF4wvD9Z53-Xtqo=?{TENyfhq%c3Bi}8Et1;KH<>hDSJo-;(ezoI_R|z_O
zz+#RSr1bC>jQ^RqyXVzoZcarv2A~$O;ru|o@$5OOQuNjkr{BciMr4+&HGFu{-qFSp
z{)RLh2qPKVTn4s#$=H~&DS?EaVN)GuY9q#wcJA^No3aj2J>O}*37Vq^*tq{FgD+oz
zMXjxyF4TfIGwAJVOA#YC_epz}cRvO=U!IOy1bthA)a%KvGBJHE(0{}V6&6%4iYMxn
zQ@zAouewe(Nv9wW?v=UV3R{K|NP~1ZBS0%!S>mr`!ZqeIj%WhIX=O!H9Gs?R=FonF
z+uXDvk6D{12d_F^o`LO7h_Yk6h@!7{s<85myYz7|uv-G1);Vh)nanE{jE%R+8_Nj)
z)APwNaud3_>r70{FV8VP84<>Ygp(6<GmJln7L!=KVW;R=F*PebO%%L;q?m0D7@tqx
z9KEs{P<z&rW=4;@OWKdO)y;p7v$6&oxi;>16kS@5P_eg6>k0|Z2`Bd{=T#nL%Sy+J
znHHDt$sy(r90PcINA%MygSP{`*rpg6@RzwXL(i*@txA2NYw2e!zQEf^KLf6;0OD9n
z2t?HT0YtS*Gb}7@N$~|tq5`;S_4O@`XQi4*Owg4;HPy*p_DpK6h{`Rm8>Z8LtW_8h
z#45G6J~grtaA@$?E_+c$(fZeKGOsBu;+ZrR_Jdrq(Kmadfv)R5g9jU-S$SG@!xD*%
zkHO)jN{F$sa?-|&bE1H?ANceE%zO@wfYRnTef@D`YL!rc*uv_SAMm!~f@M%=U@N0U
zb$(zCT}+&uobWRweBC|7_2{J2B<1Yy;oHsM^Ns$=DfhU{l(9j>G~u>v<yf-<%Y%ED
zOw8Lo{sq?4dCa=6QZK?ZJTB?>yNY$D&cqPqcU9qSb1<TlrvJ{4N0-yuUJH{<BY5)y
zvXPuTjY2UBnm7Rl>6g{poM|Ru%-Tic4CB)}Uq}WtksP@NEMr}YNIs{G6iT=(uxt>#
z5OfR#0s$~p{1z#T&$vh~AW}8aw%@;`U%OqBsmie(Hq0t(4-boIl}l2L=}et5+0?8f
zkr%E`P>%Ls8X2=ju0*MaPi4om$yy(Dy9X#>nH43l`(Ey~R+NLP)r!aj{3w=x3chu9
zBbhPko2wcc!d9N`dDUWy4CB`jj791aV?`$+e#47X)K&Y9t=zT!Zo&28LePw_!@8ge
z=fGGkC<(w($K8&~t}`B`y0MLh_oc90NfFUXXM06-i68^30;QA<LzVSawdjel?>cQh
zAoDM6XWcnXYIXm8Xd9&k6y~2`{JBDUJ|g-}GP`POBV%Wdb98#a;o6Kj6gf18TFM13
z`<w$k2Ms3(P5)p^+@Ka}_hrk9UFseFU+CK2!DZ@FJKdwazfc=0yCN;_!|bdjM+K5(
z1gm?0oDPd-p4k&<iIUwAOs2W)1^7FlpRn2GdT@44|LmHtLiS+sc-w^UWC3U<AwH`R
z)h#6ZpN8@~IvwNGT_|;ISb|t<?9ZT2Bj<|>1CPshmWVU?_ZV|sn_F;bJC#KSl$nGp
zTCqs*xz*HNZ2_l8Yid`Qk42pET&S|X;5Ka-?F*Hfs#(kkE!m=`;RRefDD0WDE6X_^
zSy=Igfx8do@+p#*-;DY-#gic7SK7jV4h3_HB;m<=VUhxOUwgSfNQe`MmSJI7+kLNJ
zRiK#%!}@%ShtVEM-yaW&8C0&03Rzty3xK{;W-@z*&4{Mn=n9jnTMpKCPdgAm1q5Z7
z)YR0vj4x8eOp%IG07A#HhWYwS>U>atVyGX+e<EP~zUiM^ML<trj7F}u08-vz3C}^Y
zIku;Xx0@&xpbZWTJKJ(T^!0t05|v>g8jJAC7BUKOa`+}tc7A>sSZlq;Gok4SMtoli
zFFm?HV4}f#BLCrhOk4FYCy+)XT_*osKNic10&a$Q34zPS^O=h38smN5#rJTjBg(<V
z&-7i>FY+cL9@CS=^7i_Qe!|n;#6`@$ufji*r$36G8oFNYKHtXwME$+On9E(?_7}sV
zB62y=n#JlSN*Ev3^x-USETjqJbiq5LiWZvWHmC|v6Y1(1n^@gZw45!`f;bHdO-eTW
zUgqg@2HNDz3(43MB8S{z5PnxJ4bJy989f)D+Hw>f&<^=IzhM2(EHBz#ot{?9?(H@m
zrDA#$^G5$z>X#5gN#IJyub!p6XXda&Chcp*Z%#L4{aGKlMv0%2-PQd}?wwDDRn}q#
zJRF^pB<kE9MlNnn=k{iMGG5HBb9AB^7|e2ufuH;F!ei1-Qpd}35~7#srI$adkDG^H
z1ItA7jVQEEBP%va$#G>(Y`J^B)aPepwbaS|E`z?nw;-}(UCniKV#&}zbclH8=Csx`
z6d9)_Yt(bL_l&a2Uakyg`fZj5t>RTbczEF*B(>j(pL4zU`alkCneC&0^4+a&>`3kr
zK)N!B0nC>(y#f~ZV)ae~@8~YyIy*McU?FaRwRDS6V~WSMG2X%vNdlM8v3JeZqA7@`
zml4pOylC0IPcwYBq1JHF-yL7~5+2@Ik)=1c?zexwqK;Igoa#9s8ob<JxY@)5xNVXp
zDpwLQ+tYif#L#!g5Y=W((*m#t6dD@e$T#)Z_Yy^EgBfy}H~b`a&NzxHPtg&yX_ST6
zy{McO+3UX2z=IHi>voW?#_jCT!q9)m+pH&)68eYIXNnj!s@cz_*kT{g4+3sKfepRV
zAa?S^N;GR~98_Bnk~WMVif>Ou<Kwh$v2dF6<;#lHF-$BMt74u$YLuPxF<DEQR3M3K
zWT6F)NM&#O{|%F)KaZ5*t<7e4ByjqfdAX}I?=pI?W%w0ND|L6o%=i4(D_J#R;v6>N
zRxSz5*6_%nD4MWUuu>9SJ^hrg5ab)6u^pv!Fe-Yz{%13U?i8!!SRJ`zB(=DUz!Iz_
z0^s5?jUp;nWZ2TC=6ywpHLo+*tG(8m1E5PS=(0Z(hF^{u1a>5e!n-DWML~%VajZ`1
zm+bX4h3rYjg5O1kLy@<NrcPPVU&X_=-+RAju*-7pGwgAVyl;`+MJ^Z5mfLnf8~%oI
z%$}(PwRi?&V_vKQcalitSGo@>0PB*NB;>)}vQs{+@&^hF>l(b?kc50U2nH6Mw%ufZ
z-zOo(=E&gMXDRw)a?Mu>yy+8<R6snuxAll9$Eosm&k|2R4ZG?Jjf!aQhihK4EGW&?
zYCYocH#z?hwCvxiwNx`Gi!WzG-p!8h2H}XC*lt9_QbFFt&S7zU*cQ~93Dir8V{9u*
zSL>LCg#K#$bg&$7!9V6&B@D03S!)&mMLxiQunk9=C-Z=_#Mtoe!8Ye*b6@r5V;cej
zF#Db%_Y7SC#sRs1&ounD9-)jzc3H=5oJyl=A`tG%5*qsNIhM|vPks?4u9ixGBJXQ{
z#cED;S_@y!XY=H;5sr>alI79H&S;GitCR-L0UH}Yl#^ksJkYKr@?O~~uBE7^4_hk<
zrdLANaCf!uJTkA!56rz#orwD$MlDgoG_dso@?Ap&ulnZDKqLU;+%zWJ$&9BfcT4aF
zb|{Qu6I7@#G%^*x=PJb8BHP7%^B)bI@U2i$v8l>S$`iDcx@&WMY!9cy@~(u81Cv$2
zBX#lxdA&?5Dt($5GgjsjR7}RM+Pl0vG;IQ0jpP8+&4Fu^_jL%cHEbLQV9skSl@2<I
zF*#6`%}^%X;gvdCXU&`xm6CFpm<=*A#}Fv=oLsISaW1MD^T78i`W*+J%bLw+#qaYR
zdd8EmQ*8fQN3CmO)z5q{U?Xb-s1>6JMN;GTh1vQ=;5#%QIb>qN;U*Klr5T>O(|GmS
zHV3|*gyK}{DP+mjeiPqTso~4(@^wxBJ|d%xWk~r)fX&1N%T04SaI$St0kD7)?%raz
zA4dD<&qh<}u|wZ%d|%<s2+^UozGU`jH@h4-JWN8|xw{7;%cBhBGFiOs?6*;);R;AA
z193T12*nU%A@Bqb509l}l!vr;hjfS~HlA!+{klDh30p@GA<^RmhZlhLz@$IX!0BS9
z^c8*64MhxX^3~=YE@q0os=FW%dE979)hcjPo$7th)%$1ry-;vBjF2da_aZ~?_3*uR
zyQ{xD`HxJ__kk+s2C<8=ySnyCU+-b-H9C|2=JtmLb5o<-MnTE~6eQ1E3)3m3Xs%aI
zWJJ#wSUV%ft`=yDBWSD?Y(S;ATJPthz=FZv&e@Egym0R|$@B;fiYjwIq<ucoabjjN
z525n*&FXv)4g8_$!yFtVV74ELaR$$qTdg=d1&C=LpVUn}I637{*V*J6i5}!%{O!jv
zHT%biR!vA%=Hh5hZP2V1l)xt9ga<MWpDsh4e5uo^rw7M{b5aAIhp*UOuWELBs(q`k
z+cKLh=A<(3eq{cLtKxF0qaIY(^4S@4B>r^=zvm{@?*HtU>6IP7rbi}UXZuE*M;Y<3
zGkj;$aC_dp>iWT8qK881dAF_r9cFs=C@V*D!wj^`al4nJqp`yj9jY}8RANH>Jok+_
zwZX@=ywVZ?8>{RBqi_EcLIYVh4C8C5RZ-6xZ#K_WLOk9NK@w2snmuHylVsh&dh@`N
z9Y}Xs7ea<T|3A)JFpVp)BB$O!mM|rrM~<$iwv|ef#;@x|G?T-hXe$l<S;B{!Tn=NT
zc9-8!5SZ?n;-J6sQlg6YOt<#ysn63yPENs)9DwoS%eC2DG&g>n?+T5tOd(w=-%#P+
zGfw6^KD4-*_qL&~CdT9yW^Ga-^HS>1C8Y#Cb~iSpW9TEY^@q+KC1g%_ue&>~oGX8M
z-qkg{ot{;;*$Vl@L7H&)IGTOXdG}JcShP#1%HOqG$9_fY!ybNQd+=By{Z3dIYurn2
zYM{}wBeE0r1ju^9z`$AE1`#?kv@^<gU0lymQ>NXfH~1ZKhwH^LPSm7wi?0fj%4x8a
z5ed4S+6Y#=+HON!q&&jQi0kp}5afm;T~kA-9=4Qs;Ob|+@f4QKSb?P|)7}SKoVA4C
z{s$H4D!q;H&{Pv>E`N{zqmqIsq7|rQGS#~+@<xdp&oZS>ur&GvxwE_PKFV=qNN{ja
z6e;<-IQqk_Fwm-ZvWcEXZ(ZUJ7tO76(sHDz)vC|-JQQYnWd%CMX-Ks>syrMP)6^cg
zOyNv^OiY(K=!yk1SG|D$f2{#z^9x47zSY@i>3{HM;;yL~aN9zeT+G%PGxK7sL*A)H
z09S(q*=U&4cDe^U_#2)!fw-Uz*jnO8K`LU=F26l3cMG0s4ryqoQ3cCWVqs_}9^V=+
zfd1x+Vw(_!kt#jlbn59Jeywd2aCNl39k{0_LHE(Og#!y}Y&lW`BB{zSH#_IDNb-b{
zQwMl3N9(Ld+U9PD9P9WMbJE+gRH4K6Q5<(8fo$^I>}BcHEF}!;>qI(Z=;rk5{>v}L
z_8`94hC(8XCYC2=r~Y&bs+##Ur<W_cfD%Y>juDfzXj2oK<eQmaGIHJ07q2@=Ch+x}
z9QL=`BCB3lX5M%0jHD(e&eakVZNCd7amodNKp!&4L==}vl2^xyCLGT`jD$!DD~hh9
zz1R{n-an-M1LAs#lY?BI$fx;Cx0TaMt6GmesQozg&<yzjHT{(QBQvg>1~kx5xfd7B
zkzl{M-n1jly>?MqCZ+|670xE?Ex4<MyFEb-8RHC_M>n?HloM)s!I#rO=z+AdnL~lC
zy%li><wxe|JZuePH-fKtx<HC70-a^+>1O#NLJt4^U^Hvoo`ZMX;gRqD=@MF00wM)J
zMz5teNZGB`xq;k6a1&6~$j%05NnH+~9P3%Z{5rH57}|RZ61VD(BRpn8jd_zz(9_Mw
zr!u|)81a~~F|xs9z_1!(D9Zvd2&MX%d)szvYzF_VZnu2;BORz;6P7)8H;^4?U}y|?
zFcA6Mbev**;68#+cUAPmuXDq`u9kDE4)McX6Wqp!g^3x?NxKpq1tb16Xx&^@WKz6?
z;Sg;|t}ufD3xiF1$}^5_JMM@LMQoCW(+Paw;eed7UUxU<pVHZ4L{s^2Y@%&>5ZA&S
z`iym;$y~!EbInIWi>16z?rwq%PUvrW4>mwb$xa20^+casVGDtZ?AwzC5*u|W<v55j
zlf0ar)up8cG|wt9@$l$z`aGzS#d}Q~u_~Nuk4~;EA&;m2J~>CF+j@&vCX2TBfaSjd
zm{rg56i#FR#9`PFj3UFqczm(_YYG2K$>H8c;0Oa_K3$^y+$af?K?!V4XN3i}Q=Gt(
zS(>YVL1J7yCIJ={f2jNKtwA!_Fl6>rPyU{<V09PekkeB?RA|TFY0;HD{Nt#wu*3Ol
z_tfF-RFRGfTJhKv8xGQoNB~bVGdg=WAz*M$1(ujnIs)R0ytO6dJnQq#aKUm$v>m-)
zdVm?wvd_W)=`a|r!|Yz9Kj*{2rIPu9MdJ(6_OxdKf|srH>l_9wY($p%W${j*!0kD}
z=eBwLv?FYZS*7l(P(*fUS7auzA|ik0?soed;@F;L6koYDpe)zdwX{IJ{@2K}D<$tS
zM9*{e$NyLETp%nY{37KH`i3VCCWp~tB{rndji?cfYoJ2A@xe&S^g$9*sI<B&lI-~>
z=FsL!?D-~)6)vne37_8*0e0p~<~tz@vF_Id-=7nUW*oQbGqduVr2SoJat}C6qN*S!
zK;BgX9y8)Xhmbx~;d=q;(G;kJpQbNMQn=i)#M)H=qf>E(!(2y6UueIA{`7M<)y>Te
z<pXrGK8o*)Ctec4?V)_m2)<bDx-PmP?GCS6h2;b`3NFw~1pI~tDNGD-iq;r&^_(~u
zCl4G|`Ggm*og!KuYLFy&Rj}ffwLPT-u$ZE%tm=^q(n5CRM{&o;e<grIMC8r88<yIs
zhhgIkkeLI$z=znr3sdX?E47F!5AS=G=RL<LdS=XgG&&%8<7@AC^&ci}VZD{JSXaT0
znDdP;D1j#>;|{3Bj>a`TWeZ#TW)K{z*x5AlJ}&XKOb;io;{g$TYQfqwjw==XN6`2B
z{0nQSyT5z%&j}$kU5$W1?C#hd-5?yN0U3A7!@5OiZT0=fa=b5I*P3AnsAXm2HU*`D
zGJRE8apPw4g@j**u5)zn?%gs%{#LBnfp18S4i+fu18koYJWg}Tq6o&}So`ZAuD6%%
z_}I7_#$csC?d|P>^x2bVb`o<lU-@r56niWM+HhBw80Q3c$G?+WHr$5<*->8;y|u8f
z2;j(d3st;;eL$r@pJJ4hdHX})%4aI_O>_44{hd=n)9%|QO|f9~G|RBXMpcQ$M5Xr=
zLwM9<E2g@#=!`ptbhvsd$mT;&LHAz9&{aLB$q0i+(niX+FL!h^ZZS`&Z$PFk2><j}
z^e+XmD^1Z<<>UYT=i3uT*v~^N)7m8!tO?L7BizP=;(A3GftD?Hbx3?wb|srxg@|dg
z1x^y(jbJM-*c=Tv&lU4+wSS0>2o?epv|(l=BBr(GSS|ue`;L}V*M{f8Vx$_E2Ac#g
z7n@}usn1iM_OjuXrQNzv)zA0oYp5EsVV`FZNp93hfX$QscQx_~F4jFH9X#<m>t3a2
zLF==NDnixG+j%@3LFA8aWBeOQ*gb@NtX9rJ57CARC_&h-0wp4IC$3DS4cNiH%z$kX
zmP5|&YrfX)M)(oA1iSjXbSkS@`U}N)-f4M<ySn+5L>y`siV9oPlXu|k#KcyW(NR?}
zkskY;HhZ#A!H_)8>!ak@Ik$kUt@|GjUYla+NrJLtpM+kVW3Q)4CNXmlfjsF{=%>r&
z)1E*2xmjF21z<A|d$$_^c12*s2}<L|)ohZOcXq#%5%YKGPo(cbil;sMJGSV90GmM~
z5lV~gHxu|Eir^OPY`Gq$R)FQ?pt-GGq9Y?JZ{sW;<3AcvVbm|G3w#VJOZuPswD?3#
zzq_4N9jS|gXvb`u+_e50noqPJ^I`Mqh|uU6?HSXzv;%w|lv(1il*EjmdI3e&uMD-e
z%ui13REubg^ONP~kRBLOgABQF0j$F6;@I}Xa?6{<JD`f&oC^f<#PJnfSiCyJJJE9a
za9e(PR0QeA3Uge8aPNQg%AG0GbaQ-yV^UfOAyv-p>0#xisH7K$>(d}E9vo<ZgqNKN
zvD!S+B5Z^Cp-MFKgXp7Pg(tJuF6dcdZgcWFDNrQtZI_Q$1>_w?7H^9(PA<FHDVWn}
zFf<%G*mRuoI1+os;Y=k^A>ofWH#Udxyk%Gy!xWjoRJmwoE|3`B?eiU!P&A~+m4UmJ
z&J8pWt&L4(vG2RYv4}j^coo>gR`iw|to!<*Zr&~Oi=))XPdb+n%S|lXs`upCvG1+i
zNdmZv9%0Wi7+S;ucc|45*Fm1j6I=*^dWmr;8_jJKX5g8T#p|Wi{2KRCM4SBT=GBmx
V?rWRr4BSxf->J%#yfOXv{{XZUZp;7x

delta 13886
zcmZ8|WmH>R*KVl5X$z&emC^&n9g5p&2~dI+r@^7P6?ZnLR0vv%dw~Ka5IjKe7IzQs
z?yf;@!ux*X-tRI7gCCo{=2~k$d&)ECtaop6FGk@3ZQiSx%8j4BQq$1{f_Dk|K(7Mt
zHSxVtej=xy`J#)|;*H&T)M2*n<I$68JKxb7Pj=Dv3Utk8O)0v<zALV&@WmJ;4y>pH
zV&;F<ZTe;@?Dx{}(0&U1>TVc_7Mu`#9?*`@pz4_(&?iY;jq!xfa4>^FChzo+%k_Ga
z%hS^=<sMxR5wXx<+MEa}{p2*iYhb(XW>NFe{spKv-DvF&2>Zij6kQ@hOVv%6RbaSA
z3rb<Qa~A|k(CyVq=?8KBjeSM|#MkuS2Y~{;SAv86w}oT{op=#3rGuhQyaXncPpCm4
zJ^7eV5s0{}Hx0DZF@rjGyeUPrDS7u)`Wi`Jn_zd8Xr1ybm_?=7X{CAR!KO7cBcmxB
z+F1kU=UK_%l+ciY4^qPa7Y`I@v9RAJ^NuXaYUx-i%(f@ac<V$%h4TvVGFox<Aq~v_
zw-E$tJRq%e^ZiWK^{E#ntq&_j|9a%_Y=;ODXn7PM9eA#Qljp68u3A00Zv=x=<o+p!
z7O*L#-n<3BAdP#J{llKR6%_XbcScdxR&X_+hxJ;sdAhF#bLkM33t^==1-<Wn+@Sp^
zzR3>mXpN|nOap^H#Bldg`<dWuV(s2tf8P_^JAA8SRYV|AO3mBmq~K@wOlbb*!`>z6
zS15Lipx#u@%<`sIyG8-r@j;-sRM^vjK>rxt!v}#r?ELx618VeR`p*l|26yQAT+I;b
znc=bf`=5F4H%c;Mp9CJp=wtQM&4k-2D6sl3Lfk?dxJOti*q3O5|B(jz!E<{YwXGvU
zF4kKSMlpjP8FnB(;D5h%ySe}V`+wKua)o?-$$$4(mmv-fjekOHmtE@vsnNE!_Vz__
z(Ny#!?4FaOQy>FI+)`ZTD)Ds^6hHNS-MIiex$bui`Sh$0HHgA>Ygf%hyo}&38&}AQ
zpBzN=8?&eV>BK$neuGx%Z&eF-ANu<Jyl_M$2U=9y9hn=RP)2~yJkea1I{tim!b`xQ
zHozoPTx?6nRxpTBfGbP@6i<jdR@YnK**ciAQdjtT;U?NDNySC(bX4S`#07A1t2%D)
zFR8zROlb}VQJNP}Y$huQ=w|5%{#MSg`ICUAVakK+KwvT!F)n{SY-Ik@h&`ad(9CHe
z7>+!zHW($MoBr{NS+j3d!uP~+AVMQTV&J7zR9aeM{Yuq$IC_F3E9SU%U#~kkOqVlU
z@N-@lK2p;KnHC}jhpUwL16KD;ct~#1@8i4sc&Z}5u(#sWFtIz|YqitKc&9D*kSwc%
zX~fpA7TOyoRH?E=2Fo4kR$g?=8<RAbbtqG5qa7NT%C|#yFC85vnQNNUld*(Q#f<2{
zDx%!O!=EBv$CKdCk;<B25sexv9*N(Xu`AmiHHdB(I!n!e1{gH#bW#O$yJvmU&<SNL
zanVv<i|J$ryzGB2f2K;Sbx_Ej(x9f9`QUfv)dwT;pRMJdJqVh)JI_r_&f+T{26HR4
z@YJtA_rk0>C&DQo74|oP3^Z=FeAnOq)F&D>j6@aM744VNbHq`Hh*UC6kT<J93cl;=
zzR_L~6$W<Nx~3uFN$)qBHAgfi%fG)Fag#+-X6I`D9)sIAy>&G6+kPwSq3f!T(bTm#
zV2WQpfTO>0OQvsBpYH_$M<%bxf8$k=i#{?0VeO5%zrRtfY0t=cn*IeT5q%nx5!HH^
zJ0HE{le{@Tr>w>wB|v6AZiw-m-m7vcKfCs-1yI}Tv8jf>MIsBss!t7364CVS%SpuU
zqqar}gOG5c3UVD`cW`9|GW()%1~tEtMyKl|l|M?n72xOTP_IVQxMlhYYjcz)C@V!g
zw<%ECB8IEE5-G(jIT`yO>dRIWlg*r?#fAh6C^QowPsNL^wpA?*%T_{wI%m1l4E+V5
z!`7S{;$^)%Q4~V*u3`PFlaqB)ZGq%scptf$>?=v-mPI&wn$|Q?xWJBR$;|7Clh8NL
zX==2MT)2<;!@7&ljLXOu`_p3)7J+ReNms6+DHjtt-_w~*I{j9W)C#pjB@PSEjrQw^
zRE3l2a$k$x-kFo$AQ3B<Wgfd&YX?AuQEc2Op;yxLsIjw+(N`40qJ&5^DCs)Pj2UEH
zrb(2p&pknz6LjAA-s~LBU8V^Hj<?3V0D*WEPuE8(4N?4+2RS|Ke!5T8=z9&_n<{tS
zm2AvykNergqOGnTo5YO0d6ATsW}DV7Ot`$*VV1lYVuvV=psPMdXVh-WIRZ8;2?Zm{
zdI@2~lsV?IC0^Y5FGzX6!R%+!Ls+|zJI8jdCp%MJ3;B(ta##q@kq*xo1+Ny?Zf@tH
z-5)4?6`wt@S5s<(slc=litO4}_VX{c^>`C`JnnVmoz2(LrKcrWOMG{v?q>bI?17ML
zF*6lTO*9($#?Vmkw+xCWks+_V)y#Ad49|ISw5XV@^z+z9CS#_cyoNFM;WMwT{Ajla
zjKD&Gd2{W6s~k9n)VbUl0rs(V>uDdTi<dG;2%%T+3_&t7LShCNsvy2;M5ODscAAq%
zt?yavwV*L<B)s3A$0A2VL=uy`T<`N$u9;#Fp>gc;ve>LE+i!rH>4Hd}%7_x}md%$a
zZNx52MG6}L%Xa<a`K0J2RR3lj8cIn5ID{qGjz6Q5w7<5PGnxNamRFgu`_DK??>Wv)
z$Nj6v7iVoNRj(7{{?n-P&`ysNO`S`L)<B+U6B`epo$XzpjD3>&no7}%-_x7rt2D`y
zHad&xWNmmyD(rGM?q$vkJkW<cjg2KLcZ--swbqZ|k`lgHQLTLV0iBe#-6jffq>c<D
z>C10^DiV@DR2jgT8N*&Zp`wK8lEEvE;s1j*h}jC+5=~%6p(G7>7RSQmg4=1cU}U|&
zFNa{-y59Mv5T`G}ju!m-ZBPlRT$HA3j9r&tBFvVV`q9GjCnTe(igp2ov(%;?chNKp
z6bxHRnwGdsD9f?=Gc&v&uMeC)e)<#;i1L6sEZtk~=)g2wmJrwk;>SJFQM`kN#E_?x
z@k#HgJ8)E*|FvR8|HM<=r&A|?-3*z+tE%P^5pQK?K0Z~V(^q5}ThVLdKm>UKUmt9?
z4mjPLvmj{Bv!&BfYWXN5Dm++>Ir}|A{Fta*N>FI$u~wIDt8@5f6(F25+>!VQ5_*q+
z<cSj8u1uvg+ZA!s8@Dqj6;3~+Kiz2T+Cp#l%zNXyF8lM@G)NS{DTaqXUuX4uBHF;}
z+snL_iiPBfYE^^D>V+1f^)F0B%McfP+e~w_B{0TOos4BxOV2eY3Lk-3#l$8oMvOch
za$vgK#v}8?p1B)%8CGCzOE=YDy>RAE6drBIBCn6Zq;J*8q@@rpz|1C<!uwbw=Yuz^
zNL{6-=X^Mp+q77s+|k7Jg3%7T1wOX3vKZS#Ofuewzj21yz%1f~IG(o92`G>xe`de_
zFyKY7B2TaaQR0_%ZKCk6)#m%^6msHQMs>R?`&tPyLjZpa>2lj20}es7VZIKlJicy<
zUgdg;i2Dg)tymNs=~b`jm39v{?B<KuAc}Zw8L^toQeFF8ITeuywOfuL1owT`)Fj^W
z*?Z&O8}I;RNhF2aMdrsUpl(yKS5F<9TDy>L$90k;SffL!^HeOQhe9{qzvTtzvc|$$
ziEKQuJ19<}8d3h##`YP#Vop9cZ&4h1^B*lnA@uyYQOAB5P~r0@X_%$0J9J+8tWVQ9
zl3lTp^f!khR?0`m_(>IHPQA3(`;}3aFFibV#?!?;$IV?rJq79)TfPF|s4<t0bS}z?
zoR;Ry{iq7EWf#7Ki_eiUqSa&HdLxdl>01Gn7Zo#u`HM}KeNj|hHyPC&$L$dg5`W%_
zse@c2*l)!=^P0oUKiJW-fRIkdXU{S;Yo8p~J+zt)&44=R5<IR1oSbfYB;eVtX69Xo
z+jb(-`zr=ROUuyE(}~4qQY1cIo-Jxk6`TPsv<ezM5vc7xY-W%!^4&R`?_dQUOMm#*
z2;w49#=(7XY5FK`#(2kI6%dV8Pj!!ftF6<_p$=(=lGwFqb^2^HN1+vry)L+C6BCX2
zW0mRK5#xJj2nR!15w>jAnz1zk;g$0dRl8Vqv)Dna`seHSIih<}qn_haqjF1frjht2
zilVvO^LU`f!4Jp26)z300QBXAfhLl7^ckja|EFy}73H5Kjy`3KtkGMCw-6dc78tRm
zO8nGtzdu7tWQ%LGG}~`+e&wWBif&RoaysVCNK&sw?rItAbzTIqJTZe`$))~4?~?gs
zrBfu&PB3VNmI;Rk#()d8SqyrG=XgfXU^cG3dDQ#bF86UNPY9sp;KxPXpUKM7mUKd}
z|C)zT(7f%$7!$K8ani|I?`&1?e%1-j9Nh3)FtXQsLgH+&PdAyWAHncp#&CkGuiYc#
zoJMbn8f$q?)-`1gVW*eLh3>shtYtn~i!kxF4r$?nJgA;#i>;WjZ3|n85mEydu5U5r
zH?+nwTlp`t48XYmhVnPH^)U4X+^iAo+>B+leacg8%#_CkRj`SRC`A2>FNYmo7ZDV8
z<_(Ds-&LULH&&Pq<oB(voBH9dAKi(x@m5MU@~y^a^Ggl9kF^`lTTI$a$4@pmR6&$f
zxCm9LAI`0B=6MA^nW-3=>0{QgMJ_^K=Vg}}R0Bw}tfbUL>R47{Nuevd&3q9lq{F1}
z>$}B&4K!hm?_kF4Y0WNFlRAH#BHr86!*J)i#>>E+x1|e!z+C)eJB26m|FqkWRX9wN
zJu)N<6x9Fd#E%Wb)oxCPWG-e5vQACaqoUtPY??n9DdaJEIB2H9J-I$WHlh|A+M8x8
z2c(N$ZuQH~o<;8xbGaFUj9UJ}ZMaceU!=&|enckTLCa~RH~VmZ`##6W6wRfrUTh*?
zdC=$mEr#IO2I<ub2au~{N4NVukcpVYNp~7MLhD=uLy3rC8>N7;GSh_SS16m?FTNhV
zH+RgFszi<j!ymLGbW;v3Z`RVz>;?QTf=2yWb3SbOEt{<-SPkOhxpjPjLdp8Ogl5%!
z$KbwJeA`eM(yWVF@ZgU*S^C9>Lc`V3>(RT|6;YhH6+@D0>cS)PCn>8VP(NaR>Ae<0
zdRXjCU7!$tB6yTE*BW;~#rMc_dlL97s`}l#@7uMYIcymV<S@dLK*KyKoeW-_^sSy6
zqo|bB<TIo^*i{waaoaH2t7REcN#SELVW+#43_iF}{toH*^Q@R=tf+CzFs&15O-%Q!
zpWm#pA^^B&Y~p<ox5{{g4OgvxE@dZzQj<kii@aS|(!N;MwHz{+G`jb2Ff&4w)>|hJ
z<}I8ip1cGKoVcI)Etz;{Y~I=9kjF`Qdc@5T&;_@1RH;K|s3WK>kffWz+AO7T<~P5R
zFB6t{knD<((8=NXsdwyRBAoP6rGV#oJovrY?Gm_ixT+mbPp(!7TS=6j4<q)=&C~tQ
z)=m%dv;sDo$KLF68|orG@OL5aw_;xbuZ`!=;je}}@^^K>G2-6(1zR0;f2(F2!)HTM
z3?8g!w?Xux&77eOCwHQW7Y5&Qwg2NRdGSgM;TK?5?d2tHN3hpQxj#t^0>ytx1`bz_
zk|<EbZcbr0E*uuR@=@^5LV{~P!gO-*Uts2|1l!RF(NHn!6nPkVu7$ll-{lt|@0auP
zMpd{yb7^azu-K-*TDH|gm-dhY+Jgb;_M2LRK_=O+N(`fpmo<W9pLO~?FSHOR+b~m_
zvHEQ~^GE&=kZNVjOdR&w;3?^6MV`j9BgvO~IqwX)86gr2sI+^J498kZ1iW5ccJ8#n
z8w?#PYV;NKM@$xfsL;Q$X~+fUyww#kFfDgUt~D4HzQDe+QuJa=PvP~}&h_?WJ|m-k
zg}t-q)))!TQ6lIU*7<-y-F0gn3Xi4K3kxqt&=E_PoP*ywlO*(Y#hv1qr=m>|!KKJt
zhKto8f-e{hXYQ1t`0~vo#+rz9AHqL(iqCNQU;@F_BqksGn@$cyu>u#-P7TrwYJMi{
zUq2VKj3ly4=q0K15}uwKf2Zrj6NNQm?SSNludXrUUdra8VqHLn9qKJI39QL9FiTAT
z_{I`W4!l|lQ|SZokZj?Mh9vFT{=dJDy_)91o%t`yX11Zc2#?ox&8p!^xsmk3H``9q
zm)Qgt4FkXiFw6vsr>?`XH^l|^WQWL`gQod6!@t|P(uz&O6Ar@YIVraG<KvyRAx4#w
zSS)-v`sD4k_x3D3#M`Ou^~gh$0Dk5Npulsg@qQVdv?#Jy&mBTd1uLK<5nH~6C-D&Y
zV(KQTOm=KU==TIzcQBhEM^wU}FrVwQodcPGl}e!gq^ezGrxEl)`Zlo)%pw>j;iZ&H
z?U8VJWEdJ84BKkn_y0_9s*;xajHsTWYt4(xl8lVCQ?~7Kth}vY292l|o!G@*lk%%O
zaWpvaKQfsm3(A_dqc!G>3P^_D^Cv_@B-30*m3|T1->4Z+q56+OdXm;Y_#hKJg8-n7
zc4Ux7pGrxr5>*e~d*l_t)Unb#*Xri_L3_wTiokPw%=LYS-JN35{v$$A;~ncQW%ug(
znT58PO6qF7@+^bC_=E>c9U?XKj|_<eTY_-9x+6L!Bla#WYT8tVJ4A{wjD(#+<%Y?a
z`r^3ZJe&7w2y41b_Mc-@JieP0AgwE!?mN+iWnbkZX?jKQi-!(*e5UCazh|#ZW?zrq
zF>!uJ?xcY==u8_s#;8dZp^JZ4*X0p%+|8x%);HuM%3>i}<B^Ku1)WPU*#TEZ(jGtv
zL@9{7h(qfxUPndY0yp3%q6;%(5bD;at5+=FOwEsm2o)sm|CSx7loyOtzRqH(3Ud52
zyVZ8NLsjp-WW16~3sQQ3<7B+c7l9qN%PrO!cW}%Sz3zD#4fU{6G=h>5*gl)gWsz%k
zoUT3|pGp<GS{ki?n_OoLGT@*Ln76{EE;BX0L7TgJ-VU1~CW}iyRoxIumu>bl6$V-+
z#f+KYuo6<VmR5ediI!lrPWLl@OEVYcZJF}?vm!xR%S-*6Lwy3dPb#CJ6cL<NOrQ#X
zCB8U2Fh+B8qY-Y&2Beh}QIS!$st%uMK~6}re_AVRX%-&7b{>@AlO|O?xiRtD6*Ts;
zhJbBftKA6<1>@ZLv#IM|3Y1%PHGkURE6MB{o*iqQhtZa1yJRiA^kcf-zdQ=W%T5Or
zaxHT;KweTFIE)ldd#2ZyIJg<I<Ockm_WiQuSufNA=>Zgw9h&j05l^B!ud^bb5?N(w
zfkY{A!A>{#F`lQDngBh<b6no@SZ;Tt0Ng34@l?{_e7N!VMlbYTq=+T$y5c=PD;(mx
zGkOup=CInS>EZc$H3_N)Q+RlDoaOrht;Y=K2fKcYbd05J9wGQ2)^Vf&pTdm$Yz=7-
zH?R}wQQ#baKI9FcEk-hC1r5yPksQiE%zFjP)R{oFBsgc4;P11^Fq3FwJ-oYPM0Kf}
zqwb_t#%J>e7Q7g;=_77hu%u%+Dm4AUee=cDBhU(|>oYu1f?Tq+o34vyI_6}hw;4k>
zxpeZp5NgH5RU608h#qq(`SJMKtnoRJYhIHhy^p*pU2NW}e+Wux#>EX(d38m+>eSSK
zRR$dG5a~KaTrGtNmCSZj!Z)Riv#lh!f>Wjj-q|hV^V>i~L`M~b+@A-F95ZZN{lshB
z!qJ@{G75eneot4<US^%AI~X=t{&BV&Eu4ut3-W?2$0nt#`;BU*Es9N-0AV*?6=Ti|
zbH9ULzPg*B{Zi^K=!5C7@6F+)FrtqC+Bea1Ri1Zc>MeKMi9})2X`fEtsDtTy=$E9g
zJU$dGSY6@p{iyiZRp0#*yj-YU<{G{U8y(Bp<&$@GH{4$>du)dwd{%fpG-py?2KWLF
z(#CX+2aU0RVUxdRk0=0=CtwyH4hEMqbsjgT?=FL5G)R@i^Q(Op=>M3pfL1`aiBMo1
z_xC9;%~e26=-0^MNYPt0fqWf_i0bVxr-j^z+LeR-)9HhM^9ZmhhS_NhK8OTI5`TCl
zAhwM_Im)#jr>Lay=Arb6*2CG34^-B{5FrBR(`}<4I>0vlbY<C14Tfd4fe{qXi2LBF
zOg_viZ)fz?pS{^#L2j%6WNixh^vdsA2OG;|i}F9+PDm`34Nw-cQShE9anu|7J@&yu
z!F9|%j3OG;jeomBXUI!`%jIY!yFY+}VhT6Cb=$rVo=o(cAoNPiVuI7c*-RNrOszw+
zfVLjbi0!;--Dj@XCA3Ki!Kx8YBkLu_Y%1iMR@Q;@qsmUI8(YvnuGsjjEOU28diUU%
zyP<eKXPDufKbbEoq?6go%$Cu;SR+F1{Q;TOzfPp;Ycb{>F3CFTTYkn()D)^}3Ata1
zsQ|!4_Z(xaxJ@1HU{-NC5%;CSgO?;0u+^NDDb3=eS|u<!H+!cI0$ILN>d)kCfx7$s
zIw=^0`Q@cZRotM`SaWlWM02L!uldT&hN`s`j8u4DdCn#|NxMv<j4CxDKcP_@&Ba#>
z?f)!$%3$bb{fxjyHnubStP(8PkSaozs8QgyVn8`{vyZVuBv(k5@1iPx0?E}Z^UY}T
zDLux)2@X3jN31eRt1}MV=M}4Q4Hl4KgRGDGZ5I`3d|%JwKRoZ~nAr6{5vfOc?)2e<
zjBe>J#+M>aZ&0aqqbt>gie9iB?EsI@2ZIjL6CBLwl&7!XW`b=q-Jip{^*Cbb*Gcp3
z$zjeZWk+NjQ4mEASwO)KXt)_Kk-3ha#mxMBF3t<`qPc~f==98Kz590jtiM%%|Blxy
z`IsvCrKJUMD;wRt#r@uqNTcyFf!Z9MW2-+&h2Fp4m#xY>BajaEoCZ5pR`r3oF|h-`
zo6|H(JPI`6(*ApLSEE73U3F(?i|OwbtU!lfw7-KuReS*aD#^Dx*>~1Wsroo1VKW;+
zTEg4MuOU91*FEnia6R0aM&vt#9u{`>X3<@<u}<094}#`Ek*44N8cMS=kI=Mgo`up#
zq7SM(w1ZY#sv{X{#g&U_8ZObqg@1_`8B0`S{++%@fX%^i9`!y-t+LQvBxgd{?OsRi
z;f3WrfIEQinf^HDN(AZlxX3ewjYLhJ1|g?ULh)H6w8eoj7M8U6<-VAAGh2*{q;}WW
zk+HM(wdy9iB8iKcoQjRUHd2VE8&c|Yfr;RqG(}^|E#vy?S@Ggm&$K<w@XqjDohn!X
z+W_yh6*HlfCOa!jDGK(bqHy01DUG5k*8nmljqi+>{idt?r~z5%fGBZ2vkdxy?jLij
zWlBze7u%Usp=V&cDuQn`IwI9~0{A-RnU27}<U~X?5APLIknE;5_>W$ANs0+pIek<A
z3q<w#8ID#;v0X=%WFJrXRtURI|0-Xs+fg--aj>46^jmhH^#<xKEU#J`Qexv}fa+LM
zcB*VWjwC1XPV$%v@9buEXlE1&iL<yR%P{e&jL@~Q4DYNo+vL(mPyd-}?G&oeX&RaN
zBu|I4{v&L**jrICBvydAXTpAKa!3y9L@cX|F#QdR?gkXDG1ALjrIg#fUWn94BlJ+s
zY226A#1TknJ~9=l{ZQovBLD&CN8ccMwSUCC(Tm<#b3UJ_x5}0Av2a^loUCw=u(Ph(
zt;e_lm%qzD39|18u}vo=p3le-!D|9)m(y}6u6dK*vV0|2!YsDsK0CZiUpdip!O!}4
z6nI2K^j&@;44UmH%HpyBoQgztooo--r?Liqmc{z;IWzm|jRM+rpsLV)TK~c<uT@a>
zSR1}|Rx<G3wQHuZSE$CxVV%uh^t>ftN9Ie`TS!d+wSR$~_0}o&&?ITwB@Aaxo`xg!
z6F1YX!v5i~pOS(I4>dyF$4gKxW6iHXbZ{`gMoFs<7;J+m54I*LLF<{vQj<YYd^`k?
z%(0ix{!4*Ws0>(Lyg9v!6_dfzL|^=|zP5^bvQhy?q@SKb=+Sx%-z?gTR>{o<*_jV?
zyRE(#5KJ8G4ZS`BF9eo!wvuIg^i}SoxYX>NzY}@1l*x8Dl88OGN)Q;XMDqHM=<80U
zIekABD*sj4LfT11qG)NMav0Ls+2QdJtKX*&n$>ep0b@~KmDqz9ix-2WN~~zz)33(#
z$?(gZ;HRnihj;l-aq;aOBN6ebLWzsRThe#i`0JJ;Z`L#!%)`FF-*_`atXh5|bDhIW
zM86v#J<T^91JQ-9y8L{_?rg@6%z=7jGN4YbX8q^>B`|tGs4r8>?0!g46wsH$O~lY!
z>5a`C`nT#k4r33ibMvDsUA?*Oz?M17A50l9{7en5uJ)w_(~|?<(ofZR@@hs0GKbyf
zP2Xo`YVJBUsZ<Ifs{QLuRBZxvI;(9(qnsvCe@9i!MBS~F97i87bP8>z*9j)4*KaLr
z$E<urn&rqJ?{x4V5}U=QCFar7NeCRqRscdBz-0a4d5fL~(w5r{;qT5i|8xYd5n`(m
z9ya`NaU~C?etxJ>FLjn`bu&uby1M2D>K43>B$>_4eO0(-B@1IGcP`d{4o0x~A7tsk
zez7Tkf*pC)qWsm;2V?o*DCB$FpG=8`!gk!b;gD|1?2zYyZ$KdGV@2>QEii!fVrrJ}
zT{$=_s|pJu!#WC~yEiiXKYKad1-QUb6o^d%d^@?Ys3e$uOUPJpP9|)Af;D2B_gaDJ
zKsQL?*y{R3qSstD{mRF=u=jrBr8%zBB$6Z7>;7&K(HlZ{l%!W}?kbDP`J%Nc&gA0q
z>9;G3S>0ws8EW-FcGv41U>b8S$nPulo-`<y596;`sj^y=6CGMajIqTeE|iZ;xJX`{
zjKLs4J$D6~){tJp=%TIf`ef9j&%Fmk`52okf@=8{RD~Zk%s;!Enk;dpT)z+hGUC)(
z?-3VO0U3GCODjI(@ggeGM_^Ra+grebcBOcwI)-w4&GpfvOfVd<$cuO?V!U=^Iv**3
z5#)88y_R#G^*?1NiIVXR%7)@``Qvz;nK9H(TtTOK-*Qs*?9kTvZ+5(<;9u_@+_vDd
zr8QeE3%tTP8q4@K?F5+EU@gncyG&p6CmZ$^X1%VL(;I%TIDmNmKElPlO5!3;;jDDJ
zGb8=p4nd2|fGXxS0vw~GBWGH$bzhx5F->p&J`3szGL17E%wZwsyzl{A^deemRGX5r
zWbg`{PWgBFeJ^bRmMCx(cvTkNUDSnvwN`fpLpK!!vxOD~hq%q7#Jum%LP^LJsXuEF
z*;PEz=>e0EmpPUSPyR{j4kPXu8X_wlt!H_x$4RONY>d!3hTII~R2m;IXQcVg2&KE@
z>3QK;T$4CuAp&(Ccx(axyJc%mh(3R=+Wsi1?KWDnjennwTu_j`FFdj%2$`A6rb3lY
zNB4`c0440NRydAoI@U_o;8^!su=7tlj34f(BZ&!ck0rx&GO#KT7m(!XyhusolkqwV
zy$dvyU!%8F3ga(By)>AO1Hx97{t&-+crs+y@`X60U3V!Zxe<@c9j60J#oZ4%!gEB@
zx=&@M@~@tM2y#P*TBtrCf`Xss#a<3}|J+J1S!o=g;s8o>`cLZ|7{*Url!B&9ExJxE
zf(oFn?mHFW)@@~rWwdfoUC$%coj;fIfbxqRXp|X>T58prf=q!K`Tf&oUM<5L$&hB9
zE)VgC+hfYFD%1!+MFOkQ#M}A}=V^X65PH>|<%41tb<}&}gns3aUq6v%oto-!*TXMg
zvWQP3dwv%^X=E&~l0aa!<l~m(>MC29C6c^dy%OT(sO|a9(JginN)lD9fj0F9I+HdW
zMV|S(Fs9O7@95s_O=4!(e#l&Zl_@PjD%45Lu3Ww6${5`&bN?I4&&2xPD*LB&-R4(w
zVq4agY!^qCG>yDgVb9pCKN5`jMk$FJH5@IS!@1IzvAngH!^W5`jMHP%lif?NrAT7=
ztHq!dm~97mzkEk^*)4w)M$Xa+7?0gFx65pwEiE#Y?P2Z|x8D*wOe!J`5~*rNWsGku
zBwCI&B9KUk7Hv4Z1*YNrLpb29UCVU$s%h2v&8n63d9Mho=0>#^%SrDSOZU3Xj?H)l
zY`yF~XP?Z=Lr&nv?(_zkV!F{EXN;<GZEHIv4BbMc_{>THd%Ytlp!T}QFWK`e19g53
z7@{<I>^60%tz)xqM<F4~uXPn~uF!R}UDj}opz6g?-8E6fIeETOAKxH!v*oB#T+hJQ
zN?p01j+#eeZyD)ojn9U^M7kB}HarbgnwW_0=|IA1I91p0Hr+*Hh$Tgi_MNWxWt&_c
z`zq8HxE`*YP0Rc><kc54Gp0Zmjbfn(wxb*N5FdlVr`K}n@do2D756LW)dIHiokVT#
znArUIinVR13Qs4CJwn|>-ftA^MU*U~((3HueW4?D6YArGVPXMu>ruuu=~~2X+K0m;
zH)k0e=g-d8nuy~^`WjB(A`3XyQ>r@IN_3PEmd!}Uh<sz7e+I=Whax4?*}^1%$jf2Y
znaf14=a}ou)dtLu;IKNkyB}aUj-~kC)nXB_ez<$RUAfy^;iD_$j=$L!0ahb?MqGc`
zBXhmd-SV_jkB=q9{uLOe0g;@IVtc89kYAwXOxq3Cz>0F?`dchJwMP0RYu3NbK9wr4
z<txse{R0LE?5NF_2u#xgm#TKTm;l~y3BkcaI-S}5!*G_1)Jnhe6dmh3A8c;B2rRJe
zTHJ-M$e~n74JU`t<k<HQj>qPtzTStzoQ&$$<feFf^|uU|xrE0SAH!u-C1R^y@>oVd
zEY|bs$k9Y<S}duve@_^;kqDP47yIQAU;pMF_wy}&4FjxYa>RSfbG~~VUFzbS49wAE
z8-gr0b}&1txlr1G4FBw#_;a1Qd1cdA?96HT7L#{(6A{{JATIt}u05|JcHCZozJZfc
zm)|{3Q31lKXd!uX%5YgSc&SZbQepxj#dg^QZPZluIY3?{O`wJAnI_kcwK$idIUO}y
z1|EP%8KVa0q?D`S3+(0K0(NG{O$FhzlBG`lj|N*2&n;^vby2%+Qi>r}8H<pGl*eXr
zofd*0Hv4KVnoe(4Ca+u#1Onwg;oi*Nk{+P2880v4J?;QQtL0#5XiBsve9nMaGcD@h
zh4<y=<!>eVb+hm2rQquAChKCS7JzCcjOgPS5*B8dLBDTA^k}se8nsZa{Fni8bu1z+
zc#(TG$?!~K*A|b<CJc9Z&E==aw%yBq?cJlrj^?@RKbnyN8!-Q-rlyKhv>mChv8YD<
zX3%J1n20w@3(HGaiq!@Dsg-44PTk#PW7goA$QUpm$W>5FP}{vY2pR%houxsPBDf4%
zsr#RcQd?85g2IM@>xO)EE~&_r|K@`MdCmcTbKTe&Z52rVCpMT(_JPsdi@u778d9bz
znTa3IcY2G|u5XBMradEit`k9e4{xy`B;oPtYc8f9UB~Y#E0BN9E7PxQy&bH<n)`&E
znQ>#OmYI|H#yJ4sV5XrHca-*AFqtR&bl=2VqR2Z8dpFM1)YN>=*&a!H9_hitu%89P
z5eK~QU;KtfvBk7Q)gfT*PK_k$!mFnE>#g;hy`ToKt@bTlViR^$U?m0ini78cOeWo2
z%{tDIG*1&zky3LoO9)7s)Gzpw-d7|e&pj@yN#pQ4=fp;0=L=i9k4*ARaZph*Fx`da
z4P>3n=kTl_nSU2c?|-7R-8?tH$J=moK5!!~W>m0qgErA#Vv`WR>vbQ;#4s0NIRah=
z*Bato_TA2+4;+xx*^qT4JXLzkIKZ-+j}LjH@5||`#exkcahX!wFBOJ~m|B}I`0T`)
zY0lQJCxU3_z+Aj&m?noV-J<#Tu~sRnsYW2pI>qmVt|l$5$pw!~-F^xm)JTdnHSde`
zKsfKJ<fI-O{h*Zte-$cGe_<B(hCJkxP)Teic~eq~^U*)-&R11C-Id-VH%rlloRq*x
zjM9l%_D{+$aLd<qY7*+5hXoIr3}0q&P~{ANS_FF*=q=8;=Un6W#k(m)UgYTsJlma`
z^4=Zzx^4>E<G4k~@Nm>1Rhw$nEWPMUexCb=oZ65R6t9dp8>`GLlXuT!Y^d#X%JfQd
zMZ~?TlHL7+@GkG$0CBsbnrlQd;E3h92Y}SJAy9F9NdX7$n>@Up1-cw`r@mwCpTrxG
zPb};WSm%1we)Mq25g?<7$7MFP5u@vmmS^j3IzIDIHZJ_e(R5w1ZuZ6pB`(bSu;)DS
zx|R<W6i$e*nyNSTAF~{GiXHfANeP=~jx4h4K<?~`-`WV6IYzfAFFc~EPZ&|{ocYqj
z%W`dQXsCukhFlJrc|7Unx0i7h9oaQwow0eZxT^Sed*CKGcj2m7T?ZP;-siM;saL?-
z{<6Z?xl+M)S?ldSL1;_RNc^*C8g2$)n}4yzT;Xd2w!|Byt#8JeT+LfqI3((PG{Bk@
zaT3Y>p#?<w1cUo_3B@4#GHL2Y0t|FA*IP%wbFV!XmN7{W@1{j}B7&`;Xy~HwBSF$Y
zi*OPgPS|<dA%&YsIx-`BXg%3B;?O2@%!1E^=6cS~`vC3e#~*EYpOJqCY!n+yZ%e*3
zuC-N)!bK`R`<E*kD{~g|lVGm#v2XSU+%0)Q%UT$CT#3JoWNE+q9X-+8n-Np+7EW_K
zTwIT+h!1!lh7e<cYuT@lHNQ(IocoTWjzGL(?kiDDu@L)L9C*cExH<wzHH)5C10Ctx
zakBEc@P6YT0LMQB4!u*4V5ocr4-cOTw7?M`Al2Mv@rYIY@sp}Oe>^?37gl+oTtP<1
zZ^sLHE3F2O?mp;<$w|84;3VWCUV<xbLm%+vV>ap9V9Y_WB1@L*KWydvu8`Z?{`>F5
zp9Ok1;yNeh!eTUZBvcuvr$#<3Fg|9=*8%Pu(mSmaEuhNLw&rVX7>l|6aZd98&?13?
znr29bNLB$(sDy+_TjVqUDmQ7h-R(MwZznTC3mY?jyW8{ul8fYDPAA#B?h*WlQ3w<i
zl)nTA5tVIE&sc~Q#by!9xJs)L>-+FH)or2aYQfSwUd~L6nK2JnbM!!f>*ru>4RNDv
z0v~3;I8<xdQ_X!UoZ6=u<fhsCpfqBUS#6r+@qe0yK~|>Cuv`_c$${<nI!@mX6H=d`
zA5!EKVLj*q&T7tWg^|dN|1!(Vi72$2nRY2udlV{bLGg~Mvp9^S_!BNpYuvQq&NRA-
zL`OJZy%%pUasWg}o5)+ggyiT@nug)&4dT*gP|;sa@bFH}3_ZFK9aaVW%r|b|j;6c>
zX!<;a6phnaBV~+yv&>sGZH#?qI=Z4g3ONb*bZ<BCf|&zO-r3|^-_Xb5IxJX7O2V!q
zUuUp75}!ROeB{+}xgm5t(stUh=-cO0(A(=(fdP_`3m5z)69U~JuG=2qy@&ZP!XQj-
z#L}0QHO7bLGL^@R+>C?K?G+YHh51Dr{4z5Ba{~>u1)eFrIdl@yh-6wxk!&#G;-f}V
z9F9Rn=3(N<HuX^Ljb)1H@8O&^nZ?7LjOL6kt$B(WgK6l@got}w{y5q^P&e@n&>Rz+
zav8DL*^{)v$w}`GW7%vwFicGb4!Sv6j*q<~a%C+TyOdv;tm6_@P|DBpk<P>DZQX(i
zuRaFW0$9voL^wRUkgn^c&9a;sHZN;c6Rxm?qCFwTv;BEQ{dK6xqBlaPj_?u7!D{GR
z$8TnyRwfT{flOd@7zt|>@ZdlydGwtfkMFi2L_%J|$g9-*T_}}Ob!&{oP+RV)N@!T^
zWtG-uPTccx7YoS-aS`XEC|jF@b0{3iJKq9DWW9{W@(jU^*pnO0vpKYcr<;Q3gj_?z
zNVf4asO+q}3;i`6eN0Y+gWvQaWE$9~>ut;>C!@&nymJKV8$^M<y)t$3nV8-BvW|U?
zLw8z`B?;Cofl?O2>4;-ClkG7%RXW!~*QtpRha;1O?fUDG_m1xQbZVco*U37;8+#e4
z62wBs_m}lbHx2W0I2R7zN(R2WRfJW>av0tpYUkRYij~F#E3C9LmNiaV`&#-x>h#zc
zH4-H$<<VgPESSdo5_6Z+M~9&_$0kTyCpCZ%6iRcuhbS00EW99?a#U)F%AYA>a~y20
zwl(Z)FsoiNdRd<1A!Etevx(S#|5@GyHqXnA?ORuQ9}XQj1osIg%K)BMedczV?P90*
zHNu1G)O<}5-=pJsR8O1$FTbM%nlh3{h&xIE5w3JKM-F`fR}_#MPO=mCkwsA_!@wuv
ztCxOEj`nin)#0g$M9Gom<w8p-!?DweEBS&*Gt<YL_<U5ipeL7)Iq8YI(mi4QPUg_F
zt#IM<P=;FEZ>}OhVYHWBq{@h^)6>Z)w)eQ)3s$gtme=?|gEY>gg!OK5^Al=pt9qkN
zc||8UKnu~D8^#?I^Zn3HM_Ashqjs@{ZZHDPs59yM&i_H<f~*Nv#aM8c!n*&-v6^NQ
zIWuBD9&W0<IUGK^_<L5Ya^SPBUP;6tqt2&d?6-6aa81z#aiP&ejt;P8rtfsDgwyW2
z|NB%JWi=1z5pH4tWF(=m`Bp`(LTxADdg3d~7gt}`@Fra$<g+SCfvCL^JiUN~@At6(
z)+Qg(Axv)#^=--Wym*B&-F-yYz!$wDC<Xk0szwylEhPGiSEuVag?H`UDJH~qPhu@S
zLZg+%juqd>h$}W)bJ09MlEVSj{}-3+WeWk;n8O$?pc9_%ZiRmPKFp4yE@mU&&|lWy
zGz#1n)I^y^xm!Pu4TnJ2sK7MLyxYI9vkSOfE^vs=V))E@)Z`nrcXJ3GaIs%X^*KOp
z@^EUOrty0lu8a2rtsPS3XWO7dYFnYLvGZlfdwVvffpdo=!nwglTo@o4t|6}y;TgFz
zt9@Qg8TChb^_~=A;{mQz3d$Xrfd5L$BYaxz*bp4NsMnL@@ZTry)Xq<Hc<*-6J7LEG
z{%7Fe&i^-YV59~s%`B(LmV1zl#Or#BbKHTtU{g8mTvc+;mJTu<r8!nQx@c74KZMB@
zcwM)J)43N2<`6jirMutKIz4bQJx_IWTrx4-|4C1tCU7|n=gmJ1Dh2%o^|c*Y_VjW@
zu8AA{qX&u;!$nqJFp^P~1Rk&Y+#xk#px-uo>N!FVMp4s`#M5KLxy8MQ+oGgDY2`G+
zdpTu(0$69dW?Hr{bb%NBT!a8X-S(KrKSA1dsS%hm=Wa+f618ssrWX{7+8&TZ-v?2J
zHDV#kHC{Z=WTdS!o3;*(B_&appKQ0@w9YCJh7{<SifUR{ZyBf4j5D`URU3gssc>Q~
zJBC}sqJ<JG3`UVO>Y24BFQXi&+tnh9XbZJzJ2S)J<np;Jr@-!5LqGCPBPtV@D!*HJ
ztOg|^F)whRrg2){NY!<yJ;^vltX<FJn`0+%E<kgyaf2rb%%-k7uwZM17WKKMPqmG;
zOTqj<rqwoJJMGFMJZuvHuKAZwX=+}P6XnGWkL5r^j>oQ#c?s#a$2Id?WlIEgVl;Ae
z3ek*8K$Bn~^KI_}m)O{pvE4LtBqjbyYp+`aGO9EpkBvSxVRr&6_Lk$|#uD8@j0BX`
zgrEc!969&jF_T7@pJAlz)lotaa43I>b_ytkL=#&p())60B90zDS^JWhw~_(Lc81!F
z##z!@HQ$?mjh&%!#-SO&Ms=z!9YU#k(=*;boNT%Ht?l1RyUfLXg)jHokd*Z=<LQBK
zGa^|epAkJB^s07MK^4U|zjPLo;bPGeL)jES0y4TyJq5Cm8m7#KQa*DhtKg?3Ffe;o
zdBvyupj@1w;%;hl1R5fy`crO9_HpBQ2`*m&1p@!y^vwS|2J=ge#=`xV+yhQFye{(p
z*kk_Ai)$~**s0N<)38Q13#w`s&|##7Hny#j#>PQA`#ZNT=RTZb*4i{3-$d*-va7}x
z;hHTlRwgv&|B?8=1>)V#>tJDg`}gnvJGWDKb2npLNY`R%;TU(%igK#p!q+Ar{|}3F
B(8d4&


From f8094bbbbb865ff1c6d6d3236c3ac582195d8d23 Mon Sep 17 00:00:00 2001
From: demmm <anke62@gmail.com>
Date: Tue, 16 Apr 2024 12:28:30 +0200
Subject: [PATCH 40/47] [localeq] tiny correction map-qt6.qml api.geonames is
 not https ready

---
 src/modules/localeq/Map-qt6.qml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/modules/localeq/Map-qt6.qml b/src/modules/localeq/Map-qt6.qml
index 1e7b489e5..7c8473e08 100644
--- a/src/modules/localeq/Map-qt6.qml
+++ b/src/modules/localeq/Map-qt6.qml
@@ -89,7 +89,7 @@ Column {
 
         console.log("Online lookup", latC, lonC)
         // Needs to move to localeq.conf, each distribution will need their own account
-        xhr.open("GET", "https://api.geonames.org/timezoneJSON?lat=" + latC + "&lng=" + lonC + "&username=SOME_USERNAME")
+        xhr.open("GET", "http://api.geonames.org/timezoneJSON?lat=" + latC + "&lng=" + lonC + "&username=SOME_USERNAME")
         xhr.send()
     }
 

From bf09dfc6af67c41c1cda3d272554ddf7cd290449 Mon Sep 17 00:00:00 2001
From: Adriaan de Groot <groot@kde.org>
Date: Tue, 16 Apr 2024 13:50:38 +0200
Subject: [PATCH 41/47] [libcalamares] Suppress sleep / suspend during
 installation

---
 src/libcalamares/JobQueue.cpp | 165 ++++++++++++++++++++++++++++++++++
 src/libcalamares/JobQueue.h   |   9 ++
 2 files changed, 174 insertions(+)

diff --git a/src/libcalamares/JobQueue.cpp b/src/libcalamares/JobQueue.cpp
index c7548cc5c..80e49dce4 100644
--- a/src/libcalamares/JobQueue.cpp
+++ b/src/libcalamares/JobQueue.cpp
@@ -16,13 +16,174 @@
 #include "compat/Mutex.h"
 #include "utils/Logger.h"
 
+#include <QApplication>
+#include <QDBusConnection>
+#include <QDBusMessage>
+#include <QDBusPendingCall>
+#include <QDBusPendingReply>
 #include <QMutex>
 #include <QThread>
 
 #include <memory>
 
+namespace
+{
+// This power-management code is largely cribbed from KDE Discover,
+// https://invent.kde.org/plasma/discover/-/blob/master/discover/PowerManagementInterface.cpp
+//
+// Upstream license text says:
+//
+//   SPDX-FileCopyrightText: 2019 (c) Matthieu Gallien <matthieu_gallien@yahoo.fr>
+//   SPDX-License-Identifier: LGPL-3.0-or-later
+
+
+/** @brief Class to manage sleep / suspend on inactivity
+ *
+ * Create an object of this class on the heap. Call inhibitSleep()
+ * to (try to) stop system sleep / suspend. Call uninhibitSleep()
+ * when the object is no longer needed. The object self-deletes
+ * after uninhibitSleep() completes.
+ */
+class PowerManagementInterface : public QObject
+{
+    Q_OBJECT
+public:
+    PowerManagementInterface( QObject* parent = nullptr );
+    ~PowerManagementInterface() override;
+
+public Q_SLOTS:
+    void inhibitSleep();
+    void uninhibitSleep();
+
+private Q_SLOTS:
+    void hostSleepInhibitChanged();
+    void inhibitDBusCallFinished( QDBusPendingCallWatcher* aWatcher );
+    void uninhibitDBusCallFinished( QDBusPendingCallWatcher* aWatcher );
+
+private:
+    uint m_inhibitSleepCookie = 0;
+    bool m_inhibitedSleep = false;
+};
+
+PowerManagementInterface::PowerManagementInterface( QObject* parent )
+    : QObject( parent )
+{
+    auto sessionBus = QDBusConnection::sessionBus();
+
+    sessionBus.connect( QStringLiteral( "org.freedesktop.PowerManagement.Inhibit" ),
+                        QStringLiteral( "/org/freedesktop/PowerManagement/Inhibit" ),
+                        QStringLiteral( "org.freedesktop.PowerManagement.Inhibit" ),
+                        QStringLiteral( "HasInhibitChanged" ),
+                        this,
+                        SLOT( hostSleepInhibitChanged() ) );
+}
+
+PowerManagementInterface::~PowerManagementInterface() = default;
+
+void
+PowerManagementInterface::hostSleepInhibitChanged()
+{
+    // We don't actually care
+}
+
+void
+PowerManagementInterface::inhibitDBusCallFinished( QDBusPendingCallWatcher* aWatcher )
+{
+    QDBusPendingReply< uint > reply = *aWatcher;
+    if ( reply.isError() )
+    {
+        cError() << "Could not inhibit sleep:" << reply.error();
+        // m_inhibitedSleep = false; // unchanged
+    }
+    else
+    {
+        m_inhibitSleepCookie = reply.argumentAt< 0 >();
+        m_inhibitedSleep = true;
+        cDebug() << "Sleep inhibited, cookie" << m_inhibitSleepCookie;
+    }
+    aWatcher->deleteLater();
+}
+
+void
+PowerManagementInterface::uninhibitDBusCallFinished( QDBusPendingCallWatcher* aWatcher )
+{
+    QDBusPendingReply<> reply = *aWatcher;
+    if ( reply.isError() )
+    {
+        cError() << "Could not uninhibit sleep:" << reply.error();
+    }
+    else
+    {
+        m_inhibitedSleep = false;
+        m_inhibitSleepCookie = 0;
+        cDebug() << "Sleep uninhibited.";
+    }
+    aWatcher->deleteLater();
+    this->deleteLater();
+}
+
+void
+PowerManagementInterface::inhibitSleep()
+{
+    if ( m_inhibitedSleep )
+    {
+        cDebug() << "Sleep is already inhibited.";
+        return;
+    }
+
+    auto sessionBus = QDBusConnection::sessionBus();
+    auto inhibitCall = QDBusMessage::createMethodCall( QStringLiteral( "org.freedesktop.PowerManagement.Inhibit" ),
+                                                       QStringLiteral( "/org/freedesktop/PowerManagement/Inhibit" ),
+                                                       QStringLiteral( "org.freedesktop.PowerManagement.Inhibit" ),
+                                                       QStringLiteral( "Inhibit" ) );
+    inhibitCall.setArguments(
+        { { tr( "Calamares" ) }, { tr( "Installation in progress", "@status" ) } } );
+
+    auto asyncReply = sessionBus.asyncCall( inhibitCall );
+    auto* replyWatcher = new QDBusPendingCallWatcher( asyncReply, this );
+    QObject::connect(
+        replyWatcher, &QDBusPendingCallWatcher::finished, this, &PowerManagementInterface::inhibitDBusCallFinished );
+}
+
+void
+PowerManagementInterface::uninhibitSleep()
+{
+    if ( !m_inhibitedSleep )
+    {
+        cDebug() << "Sleep was never inhibited.";
+        this->deleteLater();
+        return;
+    }
+
+    auto sessionBus = QDBusConnection::sessionBus();
+    auto uninhibitCall = QDBusMessage::createMethodCall( QStringLiteral( "org.freedesktop.PowerManagement.Inhibit" ),
+                                                         QStringLiteral( "/org/freedesktop/PowerManagement/Inhibit" ),
+                                                         QStringLiteral( "org.freedesktop.PowerManagement.Inhibit" ),
+                                                         QStringLiteral( "UnInhibit" ) );
+    uninhibitCall.setArguments( { { m_inhibitSleepCookie } } );
+
+    auto asyncReply = sessionBus.asyncCall( uninhibitCall );
+    auto replyWatcher = new QDBusPendingCallWatcher( asyncReply, this );
+    QObject::connect(
+        replyWatcher, &QDBusPendingCallWatcher::finished, this, &PowerManagementInterface::uninhibitDBusCallFinished );
+}
+
+}  // namespace
+
 namespace Calamares
 {
+SleepInhibitor::SleepInhibitor()
+{
+    // Create a PowerManagementInterface object with intentionally no parent
+    // so it is not destroyed along with this. Instead, when this
+    // is destroyed, **start** the uninhibit-sleep call which will (later)
+    // destroy the PowerManagementInterface object.
+    auto* p = new PowerManagementInterface( nullptr );
+    p->inhibitSleep();
+    connect( this, &QObject::destroyed, p, &PowerManagementInterface::uninhibitSleep );
+}
+
+SleepInhibitor::~SleepInhibitor() = default;
 
 struct WeightedJob
 {
@@ -274,6 +435,10 @@ JobQueue::start()
     m_thread->finalize();
     m_finished = false;
     m_thread->start();
+
+    auto* inhibitor = new PowerManagementInterface( this );
+    inhibitor->inhibitSleep();
+    connect( this, &JobQueue::finished, inhibitor, &PowerManagementInterface::uninhibitSleep );
 }
 
 
diff --git a/src/libcalamares/JobQueue.h b/src/libcalamares/JobQueue.h
index dd27f0a58..593bb06a1 100644
--- a/src/libcalamares/JobQueue.h
+++ b/src/libcalamares/JobQueue.h
@@ -20,6 +20,15 @@ namespace Calamares
 class GlobalStorage;
 class JobThread;
 
+///@brief RAII class to suppress sleep / suspend during its lifetime
+class DLLEXPORT SleepInhibitor : public QObject
+{
+    Q_OBJECT
+public:
+    SleepInhibitor();
+    ~SleepInhibitor() override;
+};
+
 class DLLEXPORT JobQueue : public QObject
 {
     Q_OBJECT

From 8ff3849820c1d5b1c2384e334c5ad34d53a0e90c Mon Sep 17 00:00:00 2001
From: Adriaan de Groot <groot@kde.org>
Date: Tue, 16 Apr 2024 14:59:56 +0200
Subject: [PATCH 42/47] [calamares] Switch test-application to use JobQueue

For better realism, use JobQueue to run the jobs of a module,
rather than doing it by hand in a similar-kind-of-loop.
---
 src/calamares/testmain.cpp | 57 +++++++++++++-------------------------
 1 file changed, 19 insertions(+), 38 deletions(-)

diff --git a/src/calamares/testmain.cpp b/src/calamares/testmain.cpp
index 203c97936..ad40aadfc 100644
--- a/src/calamares/testmain.cpp
+++ b/src/calamares/testmain.cpp
@@ -52,6 +52,7 @@
 #include <QLabel>
 #include <QMainWindow>
 #include <QThread>
+#include <QTimer>
 
 #include <memory>
 
@@ -455,11 +456,11 @@ libcalamares.utils.debug('pre-script for testing purposes injected')
 int
 main( int argc, char* argv[] )
 {
-    QCoreApplication* aw = createApplication( argc, argv );
+    QCoreApplication* application = createApplication( argc, argv );
 
     Logger::setupLogLevel( Logger::LOGVERBOSE );
 
-    ModuleConfig module = handle_args( *aw );
+    ModuleConfig module = handle_args( *application );
     if ( module.moduleName().isEmpty() )
     {
         return 1;
@@ -469,7 +470,7 @@ main( int argc, char* argv[] )
     std::unique_ptr< Calamares::JobQueue > jobqueue_p( new Calamares::JobQueue( nullptr ) );
     std::unique_ptr< Calamares::System > system_p( new Calamares::System( settings_p->doChroot() ) );
 
-    QMainWindow* mw = nullptr;
+    QMainWindow* mainWindow = nullptr;
 
     auto* gs = jobqueue_p->globalStorage();
     if ( !module.globalConfigFile().isEmpty() )
@@ -513,21 +514,21 @@ main( int argc, char* argv[] )
         // tries to create the widget **which won't be used anyway**.
         //
         // To avoid that crash, re-create the QApplication, now with GUI
-        if ( !qobject_cast< QApplication* >( aw ) )
+        if ( !qobject_cast< QApplication* >( application ) )
         {
             auto* replace_app = new QApplication( argc, argv );
             replace_app->setQuitOnLastWindowClosed( true );
-            aw = replace_app;
+            application = replace_app;
         }
-        mw = module.m_ui ? new QMainWindow() : nullptr;
-        if ( mw )
+        mainWindow = module.m_ui ? new QMainWindow() : nullptr;
+        if ( mainWindow )
         {
-            mw->installEventFilter( Calamares::Retranslator::instance() );
+            mainWindow->installEventFilter( Calamares::Retranslator::instance() );
         }
 
         (void)new Calamares::Branding( module.m_branding );
         auto* modulemanager = new Calamares::ModuleManager( QStringList(), nullptr );
-        (void)Calamares::ViewManager::instance( mw );
+        (void)Calamares::ViewManager::instance( mainWindow );
         modulemanager->addModule( m );
     }
 
@@ -542,16 +543,16 @@ main( int argc, char* argv[] )
         return 1;
     }
 
-    if ( mw )
+    if ( mainWindow )
     {
         auto* vm = Calamares::ViewManager::instance();
         vm->onInitComplete();
         QWidget* w = vm->currentStep()->widget();
-        w->setParent( mw );
-        mw->setCentralWidget( w );
+        w->setParent( mainWindow );
+        mainWindow->setCentralWidget( w );
         w->show();
-        mw->show();
-        return aw->exec();
+        mainWindow->show();
+        return application->exec();
     }
 
     using TR = Logger::DebugRow< const char*, const QString >;
@@ -559,30 +560,10 @@ main( int argc, char* argv[] )
     cDebug() << Logger::SubEntry << "Module metadata" << TR( "name", m->name() ) << TR( "type", m->typeString() )
              << TR( "interface", m->interfaceString() );
 
-    Calamares::JobList jobList = m->jobs();
-    unsigned int failure_count = 0;
-    unsigned int count = 1;
-    for ( const auto& p : jobList )
-    {
-        // This doesn't get a SubEntry because the jobs may log a bunch of
-        // things; print the function-header to make clear that we're back in main.
-        cDebug() << "Job #" << count << "name" << p->prettyName();
-        Calamares::JobResult r = p->exec();
-        if ( !r )
-        {
-            cError() << "Job #" << count << "failed" << TR( "summary", r.message() ) << TR( "details", r.details() );
-            if ( r.errorCode() > 0 )
-            {
-                ++failure_count;
-            }
-        }
-        ++count;
-    }
+    Calamares::JobQueue::instance()->enqueue(100, m->jobs());
 
-    if ( aw )
-    {
-        delete aw;
-    }
+    QObject::connect(Calamares::JobQueue::instance(), &Calamares::JobQueue::finished, [application]() { QTimer::singleShot(std::chrono::seconds(3), application, &QApplication::quit); });
+    QTimer::singleShot(0, []() { Calamares::JobQueue::instance()->start(); });
 
-    return failure_count ? 1 : 0;
+    return application->exec();
 }

From 0095e3084373d42163c32ec2df34506f856951ea Mon Sep 17 00:00:00 2001
From: Adriaan de Groot <groot@kde.org>
Date: Tue, 16 Apr 2024 15:09:32 +0200
Subject: [PATCH 43/47] Changes: document sleep / suspend

---
 CHANGES-3.3 | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/CHANGES-3.3 b/CHANGES-3.3
index e8d20fafe..2146f40a4 100644
--- a/CHANGES-3.3
+++ b/CHANGES-3.3
@@ -19,7 +19,9 @@ This release contains contributions from (alphabetically by first name):
  - Simon Quigley
 
 ## Core ##
-- Various Qt6-related fixes.
+ - Various Qt6-related fixes.
+ - Calamares now prevents sleep and suspend while the installation is
+   running, so that unattended installs do not accidentally fall asleep.
 
 ## Modules ##
   - *bootloader* Adds "splash" to kernel parameters if plymouth is present.

From bcf27aa31171c2161c903c2bf22ad2a5fcbfa78e Mon Sep 17 00:00:00 2001
From: Adriaan de Groot <groot@kde.org>
Date: Tue, 16 Apr 2024 15:31:51 +0200
Subject: [PATCH 44/47] Changes: pre-release housekeeping

---
 CHANGES-3.3    | 17 +++++++++--------
 CMakeLists.txt |  2 +-
 2 files changed, 10 insertions(+), 9 deletions(-)

diff --git a/CHANGES-3.3 b/CHANGES-3.3
index 2146f40a4..9a0d0107e 100644
--- a/CHANGES-3.3
+++ b/CHANGES-3.3
@@ -7,7 +7,8 @@ contributors are listed. Note that Calamares does not have a historical
 changelog -- this log starts with version 3.3.0. See CHANGES-3.2 for
 the history of the 3.2 series (2018-05 - 2022-08).
 
-# 3.3.6 (unreleased)
+# 3.3.6 (2024-04-16)
+
 This release contains contributions from (alphabetically by first name):
  - Adriaan de Groot
  - Anke Boersma
@@ -24,13 +25,13 @@ This release contains contributions from (alphabetically by first name):
    running, so that unattended installs do not accidentally fall asleep.
 
 ## Modules ##
-  - *bootloader* Adds "splash" to kernel parameters if plymouth is present.
-    (thanks Eugene)
-  - *locale* Now picks the correct timezone for Dubai, Muscat, Tehran.
-  - *plymouthcfg* Use plymouth-set-default-theme to avoid issues with
-    configuration. (thanks Peter)
-  - *users* module now supports enrolling in Active Directory, if enabled.
-    (thanks Simon)
+ - *bootloader* Adds "splash" to kernel parameters if plymouth is present.
+   (thanks Eugene)
+ - *locale* Now picks the correct timezone for Dubai, Muscat, Tehran.
+ - *plymouthcfg* Use plymouth-set-default-theme to avoid issues with
+   configuration. (thanks Peter)
+ - *users* module now supports enrolling in Active Directory, if enabled.
+   (thanks Simon)
 
 
 # 3.3.5 (2024-03-03)
diff --git a/CMakeLists.txt b/CMakeLists.txt
index 6ef843413..99b8d4e41 100644
--- a/CMakeLists.txt
+++ b/CMakeLists.txt
@@ -48,7 +48,7 @@
 cmake_minimum_required(VERSION 3.16 FATAL_ERROR)
 
 set(CALAMARES_VERSION 3.3.6)
-set(CALAMARES_RELEASE_MODE OFF) # Set to ON during a release
+set(CALAMARES_RELEASE_MODE ON) # Set to ON during a release
 
 if(CMAKE_SCRIPT_MODE_FILE)
     include(${CMAKE_CURRENT_LIST_DIR}/CMakeModules/ExtendedVersion.cmake)

From 370e75fc711b4b0a489d700437c29b4e9705a4d9 Mon Sep 17 00:00:00 2001
From: Adriaan de Groot <groot@kde.org>
Date: Tue, 16 Apr 2024 15:41:12 +0200
Subject: [PATCH 45/47] [libcalamares] Repair apidox for Job

---
 src/libcalamares/Job.h | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/src/libcalamares/Job.h b/src/libcalamares/Job.h
index fe678fa63..931029a8f 100644
--- a/src/libcalamares/Job.h
+++ b/src/libcalamares/Job.h
@@ -117,7 +117,7 @@ public:
      *
      * The job's name may be similar to the status message, but this is
      * a name, and should not be an active verb phrase. The translation
-     * should use context @c @label .
+     * should use context @c \@label .
      *
      * The name of the job is used as a **fallback** when the status
      * or descriptions are empty. If a job has no implementation of
@@ -134,7 +134,7 @@ public:
      *
      * The default implementation returns an empty string.
      *
-     * The translation should use context @c @title .
+     * The translation should use context @c \@title .
      */
     virtual QString prettyDescription() const;
 
@@ -146,7 +146,7 @@ public:
      *
      * The job's status should say **what** the job is doing. It should be in
      * present active tense. Typically the translation uses tr() context
-     * @c @status . See prettyName() for examples.
+     * @c \@status . See prettyName() for examples.
      */
     virtual QString prettyStatusMessage() const;
 

From 0a0e647be3cfef15b8b3a1e4265c0039542ab600 Mon Sep 17 00:00:00 2001
From: Adriaan de Groot <groot@kde.org>
Date: Tue, 16 Apr 2024 15:42:59 +0200
Subject: [PATCH 46/47] [hostinfo] Do not name unused parameter

---
 src/modules/hostinfo/HostInfoJob.cpp | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/modules/hostinfo/HostInfoJob.cpp b/src/modules/hostinfo/HostInfoJob.cpp
index d09de3ae2..51de1fadc 100644
--- a/src/modules/hostinfo/HostInfoJob.cpp
+++ b/src/modules/hostinfo/HostInfoJob.cpp
@@ -100,7 +100,7 @@ hostCPU_FreeBSD()
 
 #if defined( Q_OS_LINUX )
 static QString
-hostCPUmatchARM( const QString& s )
+hostCPUmatchARM( const QString& )
 {
     /* The "CPU implementer" line is for ARM CPUs in general.
      *

From 2e9618440652a1adfaf8e125e2cc2f4cca3aa5cc Mon Sep 17 00:00:00 2001
From: Adriaan de Groot <groot@kde.org>
Date: Tue, 16 Apr 2024 15:46:09 +0200
Subject: [PATCH 47/47] [partition] Simplify logic, remove dead code

---
 src/modules/partition/core/PartUtils.cpp | 7 +------
 1 file changed, 1 insertion(+), 6 deletions(-)

diff --git a/src/modules/partition/core/PartUtils.cpp b/src/modules/partition/core/PartUtils.cpp
index bc3e6f5a0..e233403b4 100644
--- a/src/modules/partition/core/PartUtils.cpp
+++ b/src/modules/partition/core/PartUtils.cpp
@@ -581,12 +581,7 @@ efiFilesystemMinimumSize()
         uefisys_part_sizeB = v > 0 ? v : 0;
     }
     // There is a lower limit of what can be configured
-    if ( uefisys_part_sizeB < efiSpecificationHardMinimumSize )
-    {
-        uefisys_part_sizeB = efiSpecificationHardMinimumSize;
-    }
-    return uefisys_part_sizeB;
-    return efiSpecificationHardMinimumSize;
+    return std::max( uefisys_part_sizeB, efiSpecificationHardMinimumSize );
 }
 
 QString