From 94900eedb95e068c54e8892a34f5367de2d1337b Mon Sep 17 00:00:00 2001 From: Razvan Stoica Date: Tue, 9 Mar 2021 12:42:48 +0200 Subject: [PATCH 01/48] Change global variable used only locally to local variable for simplification --- .gitignore | 1 + tests/1_host_configuration.sh | 250 ++++++------ tests/2_docker_daemon_configuration.sh | 258 ++++++------- tests/3_docker_daemon_configuration_files.sh | 318 +++++++-------- tests/4_container_images.sh | 132 +++---- tests/5_container_runtime.sh | 382 +++++++++---------- tests/6_docker_security_operations.sh | 32 +- tests/7_docker_swarm_configuration.sh | 140 +++---- tests/8_docker_enterprise_configuration.sh | 106 ++--- tests/99_community_checks.sh | 36 +- 10 files changed, 829 insertions(+), 826 deletions(-) diff --git a/.gitignore b/.gitignore index e5ebf25..621e40c 100644 --- a/.gitignore +++ b/.gitignore @@ -1 +1,2 @@ *.log* +*.swp* diff --git a/tests/1_host_configuration.sh b/tests/1_host_configuration.sh index 3a2e843..55063f5 100644 --- a/tests/1_host_configuration.sh +++ b/tests/1_host_configuration.sh @@ -2,40 +2,40 @@ check_1() { logit "" - id_1="1" - desc_1="Host Configuration" - check_1="$id_1 - $desc_1" - info "$check_1" - startsectionjson "$id_1" "$desc_1" + local id="1" + local desc="Host Configuration" + local check="$id - $desc" + info "$check" + startsectionjson "$id" "$desc" } check_1_1() { logit "" - id_1_1="1.1" - desc_1_1="General Configuration" - check_1_1="$id_1_1 - $desc_1_1" - info "$check_1_1" + local id="1.1" + local desc="General Configuration" + local check="$id - $desc" + info "$check" } # 1.1.1 check_1_1_1() { - id_1_1_1="1.1.1" - desc_1_1_1="Ensure the container host has been Hardened (Not Scored)" - check_1_1_1="$id_1_1_1 - $desc_1_1_1" - starttestjson "$id_1_1_1" "$desc_1_1_1" + local id="1.1.1" + local desc="Ensure the container host has been Hardened (Not Scored)" + local check="$id - $desc" + starttestjson "$id" "$desc" totalChecks=$((totalChecks + 1)) - note "$check_1_1_1" + note "$check" resulttestjson "INFO" currentScore=$((currentScore + 0)) } # 1.1.2 check_1_1_2() { - id_1_1_2="1.1.2" - desc_1_1_2="Ensure that the version of Docker is up to date (Not Scored)" - check_1_1_2="$id_1_1_2 - $desc_1_1_2" - starttestjson "$id_1_1_2" "$desc_1_1_2" + local id="1.1.2" + local desc="Ensure that the version of Docker is up to date (Not Scored)" + local check="$id - $desc" + starttestjson "$id" "$desc" totalChecks=$((totalChecks + 1)) docker_version=$(docker version | grep -i -A2 '^server' | grep ' Version:' \ @@ -43,13 +43,13 @@ check_1_1_2() { docker_current_version="$(date +%y.%m.0 -d @$(( $(date +%s) - 2592000)))" do_version_check "$docker_current_version" "$docker_version" if [ $? -eq 11 ]; then - info "$check_1_1_2" + info "$check" info " * Using $docker_version, verify is it up to date as deemed necessary" info " * Your operating system vendor may provide support and security maintenance for Docker" resulttestjson "INFO" "Using $docker_version" currentScore=$((currentScore + 0)) else - pass "$check_1_1_2" + pass "$check" info " * Using $docker_version which is current" info " * Check with your operating system vendor for support and security maintenance for Docker" resulttestjson "PASS" "Using $docker_version" @@ -59,18 +59,18 @@ check_1_1_2() { check_1_2() { logit "" - id_1_2="1.2" - desc_1_2="Linux Hosts Specific Configuration" - check_1_2="$id_1_2 - $desc_1_2" - info "$check_1_2" + local id="1.2" + local desc="Linux Hosts Specific Configuration" + local check="$id - $desc" + info "$check" } # 1.2.1 check_1_2_1() { - id_1_2_1="1.2.1" - desc_1_2_1="Ensure a separate partition for containers has been created (Scored)" - check_1_2_1="$id_1_2_1 - $desc_1_2_1" - starttestjson "$id_1_2_1" "$desc_1_2_1" + local id="1.2.1" + local desc="Ensure a separate partition for containers has been created (Scored)" + local check="$id - $desc" + starttestjson "$id" "$desc" totalChecks=$((totalChecks + 1)) docker_root_dir=$(docker info -f '{{ .DockerRootDir }}') @@ -79,11 +79,11 @@ check_1_2_1() { fi if mountpoint -q -- "$docker_root_dir" >/dev/null 2>&1; then - pass "$check_1_2_1" + pass "$check" resulttestjson "PASS" currentScore=$((currentScore + 1)) else - warn "$check_1_2_1" + warn "$check" resulttestjson "WARN" currentScore=$((currentScore - 1)) fi @@ -91,10 +91,10 @@ check_1_2_1() { # 1.2.2 check_1_2_2() { - id_1_2_2="1.2.2" - desc_1_2_2="Ensure only trusted users are allowed to control Docker daemon (Scored)" - check_1_2_2="$id_1_2_2 - $desc_1_2_2" - starttestjson "$id_1_2_2" "$desc_1_2_2" + local id="1.2.2" + local desc="Ensure only trusted users are allowed to control Docker daemon (Scored)" + local check="$id - $desc" + starttestjson "$id" "$desc" totalChecks=$((totalChecks + 1)) if command -v getent >/dev/null 2>&1; then @@ -102,7 +102,7 @@ check_1_2_2() { else docker_users=$(grep 'docker' /etc/group) fi - info "$check_1_2_2" + info "$check" for u in $docker_users; do info " * $u" done @@ -112,29 +112,31 @@ check_1_2_2() { # 1.2.3 check_1_2_3() { - id_1_2_3="1.2.3" - desc_1_2_3="Ensure auditing is configured for the Docker daemon (Scored)" - check_1_2_3="$id_1_2_3 - $desc_1_2_3" - starttestjson "$id_1_2_3" "$desc_1_2_3" + local id="1.2.3" + local desc="Ensure auditing is configured for the Docker daemon (Scored)" + local check="$id - $desc" + starttestjson "$id" "$desc" totalChecks=$((totalChecks + 1)) file="/usr/bin/dockerd" if command -v auditctl >/dev/null 2>&1; then if auditctl -l | grep "$file" >/dev/null 2>&1; then - pass "$check_1_2_3" + pass "$check" resulttestjson "PASS" currentScore=$((currentScore + 1)) else - warn "$check_1_2_3" + warn "$check" + warn " * Install auditd" resulttestjson "WARN" currentScore=$((currentScore - 1)) fi elif grep -s "$file" "$auditrules" | grep "^[^#;]" 2>/dev/null 1>&2; then - pass "$check_1_2_3" + pass "$check" resulttestjson "PASS" currentScore=$((currentScore + 1)) else - warn "$check_1_2_3" + warn "$check" + warn " * Install auditd" resulttestjson "WARN" currentScore=$((currentScore - 1)) fi @@ -142,35 +144,35 @@ check_1_2_3() { # 1.2.4 check_1_2_4() { - id_1_2_4="1.2.4" - desc_1_2_4="Ensure auditing is configured for Docker files and directories - /var/lib/docker (Scored)" - check_1_2_4="$id_1_2_4 - $desc_1_2_4" - starttestjson "$id_1_2_4" "$desc_1_2_4" + local id="1.2.4" + local desc="Ensure auditing is configured for Docker files and directories - /var/lib/docker (Scored)" + local check="$id - $desc" + starttestjson "$id" "$desc" totalChecks=$((totalChecks + 1)) directory="/var/lib/docker" if [ -d "$directory" ]; then if command -v auditctl >/dev/null 2>&1; then if auditctl -l | grep $directory >/dev/null 2>&1; then - pass "$check_1_2_4" + pass "$check" resulttestjson "PASS" currentScore=$((currentScore + 1)) else - warn "$check_1_2_4" + warn "$check" resulttestjson "WARN" currentScore=$((currentScore - 1)) fi elif grep -s "$directory" "$auditrules" | grep "^[^#;]" 2>/dev/null 1>&2; then - pass "$check_1_2_4" + pass "$check" resulttestjson "PASS" currentScore=$((currentScore + 1)) else - warn "$check_1_2_4" + warn "$check" resulttestjson "WARN" currentScore=$((currentScore - 1)) fi else - info "$check_1_2_4" + info "$check" info " * Directory not found" resulttestjson "INFO" "Directory not found" currentScore=$((currentScore + 0)) @@ -179,35 +181,35 @@ check_1_2_4() { # 1.2.5 check_1_2_5() { - id_1_2_5="1.2.5" - desc_1_2_5="Ensure auditing is configured for Docker files and directories - /etc/docker (Scored)" - check_1_2_5="$id_1_2_5 - $desc_1_2_5" - starttestjson "$id_1_2_5" "$desc_1_2_5" + local id="1.2.5" + local desc="Ensure auditing is configured for Docker files and directories - /etc/docker (Scored)" + local check="$id - $desc" + starttestjson "$id" "$desc" totalChecks=$((totalChecks + 1)) directory="/etc/docker" if [ -d "$directory" ]; then if command -v auditctl >/dev/null 2>&1; then if auditctl -l | grep $directory >/dev/null 2>&1; then - pass "$check_1_2_5" + pass "$check" resulttestjson "PASS" currentScore=$((currentScore + 1)) else - warn "$check_1_2_5" + warn "$check" resulttestjson "WARN" currentScore=$((currentScore - 1)) fi elif grep -s "$directory" "$auditrules" | grep "^[^#;]" 2>/dev/null 1>&2; then - pass "$check_1_2_5" + pass "$check" resulttestjson "PASS" currentScore=$((currentScore + 1)) else - warn "$check_1_2_5" + warn "$check" resulttestjson "WARN" currentScore=$((currentScore - 1)) fi else - info "$check_1_2_5" + info "$check" info " * Directory not found" resulttestjson "INFO" "Directory not found" currentScore=$((currentScore + 0)) @@ -216,35 +218,35 @@ fi # 1.2.6 check_1_2_6() { - id_1_2_6="1.2.6" - desc_1_2_6="Ensure auditing is configured for Docker files and directories - docker.service (Scored)" - check_1_2_6="$id_1_2_6 - $desc_1_2_6" - starttestjson "$id_1_2_6" "$desc_1_2_6" + local id="1.2.6" + local desc="Ensure auditing is configured for Docker files and directories - docker.service (Scored)" + local check="$id - $desc" + starttestjson "$id" "$desc" totalChecks=$((totalChecks + 1)) file="$(get_service_file docker.service)" if [ -f "$file" ]; then if command -v auditctl >/dev/null 2>&1; then if auditctl -l | grep "$file" >/dev/null 2>&1; then - pass "$check_1_2_6" + pass "$check" resulttestjson "PASS" currentScore=$((currentScore + 1)) else - warn "$check_1_2_6" + warn "$check" resulttestjson "WARN" currentScore=$((currentScore - 1)) fi elif grep -s "$file" "$auditrules" | grep "^[^#;]" 2>/dev/null 1>&2; then - pass "$check_1_2_6" + pass "$check" resulttestjson "PASS" currentScore=$((currentScore + 1)) else - warn "$check_1_2_6" + warn "$check" resulttestjson "WARN" currentScore=$((currentScore - 1)) fi else - info "$check_1_2_6" + info "$check" info " * File not found" resulttestjson "INFO" "File not found" currentScore=$((currentScore + 0)) @@ -253,35 +255,35 @@ check_1_2_6() { # 1.2.7 check_1_2_7() { - id_1_2_7="1.2.7" - desc_1_2_7="Ensure auditing is configured for Docker files and directories - docker.socket (Scored)" - check_1_2_7="$id_1_2_7 - $desc_1_2_7" - starttestjson "$id_1_2_7" "$desc_1_2_7" + local id="1.2.7" + local desc="Ensure auditing is configured for Docker files and directories - docker.socket (Scored)" + local check="$id - $desc" + starttestjson "$id" "$desc" totalChecks=$((totalChecks + 1)) file="$(get_service_file docker.socket)" if [ -e "$file" ]; then if command -v auditctl >/dev/null 2>&1; then if auditctl -l | grep "$file" >/dev/null 2>&1; then - pass "$check_1_2_7" + pass "$check" resulttestjson "PASS" currentScore=$((currentScore + 1)) else - warn "$check_1_2_7" + warn "$check" resulttestjson "WARN" currentScore=$((currentScore - 1)) fi elif grep -s "$file" "$auditrules" | grep "^[^#;]" 2>/dev/null 1>&2; then - pass "$check_1_2_7" + pass "$check" resulttestjson "PASS" currentScore=$((currentScore + 1)) else - warn "$check_1_2_7" + warn "$check" resulttestjson "WARN" currentScore=$((currentScore - 1)) fi else - info "$check_1_2_7" + info "$check" info " * File not found" resulttestjson "INFO" "File not found" currentScore=$((currentScore + 0)) @@ -290,35 +292,35 @@ check_1_2_7() { # 1.2.8 check_1_2_8() { - id_1_2_8="1.2.8" - desc_1_2_8="Ensure auditing is configured for Docker files and directories - /etc/default/docker (Scored)" - check_1_2_8="$id_1_2_8 - $desc_1_2_8" - starttestjson "$id_1_2_8" "$desc_1_2_8" + local id="1.2.8" + local desc="Ensure auditing is configured for Docker files and directories - /etc/default/docker (Scored)" + local check="$id - $desc" + starttestjson "$id" "$desc" totalChecks=$((totalChecks + 1)) file="/etc/default/docker" if [ -f "$file" ]; then if command -v auditctl >/dev/null 2>&1; then if auditctl -l | grep $file >/dev/null 2>&1; then - pass "$check_1_2_8" + pass "$check" resulttestjson "PASS" currentScore=$((currentScore + 1)) else - warn "$check_1_2_8" + warn "$check" resulttestjson "WARN" currentScore=$((currentScore - 1)) fi elif grep -s "$file" "$auditrules" | grep "^[^#;]" 2>/dev/null 1>&2; then - pass "$check_1_2_8" + pass "$check" resulttestjson "PASS" currentScore=$((currentScore + 1)) else - warn "$check_1_2_8" + warn "$check" resulttestjson "WARN" currentScore=$((currentScore - 1)) fi else - info "$check_1_2_8" + info "$check" info " * File not found" resulttestjson "INFO" "File not found" currentScore=$((currentScore + 0)) @@ -327,35 +329,35 @@ check_1_2_8() { # 1.2.9 check_1_2_9() { - id_1_2_9="1.2.9" - desc_1_2_9="Ensure auditing is configured for Docker files and directories - /etc/sysconfig/docker (Scored)" - check_1_2_9="$id_1_2_9 - $desc_1_2_9" - starttestjson "$id_1_2_9" "$desc_1_2_9" + local id="1.2.9" + local desc="Ensure auditing is configured for Docker files and directories - /etc/sysconfig/docker (Scored)" + local check="$id - $desc" + starttestjson "$id" "$desc" totalChecks=$((totalChecks + 1)) file="/etc/sysconfig/docker" if [ -f "$file" ]; then if command -v auditctl >/dev/null 2>&1; then if auditctl -l | grep $file >/dev/null 2>&1; then - pass "$check_1_2_9" + pass "$check" resulttestjson "PASS" currentScore=$((currentScore + 1)) else - warn "$check_1_2_9" + warn "$check" resulttestjson "WARN" currentScore=$((currentScore - 1)) fi elif grep -s "$file" "$auditrules" | grep "^[^#;]" 2>/dev/null 1>&2; then - pass "$check_1_2_9" + pass "$check" resulttestjson "PASS" currentScore=$((currentScore + 1)) else - warn "$check_1_2_9" + warn "$check" resulttestjson "WARN" currentScore=$((currentScore - 1)) fi else - info "$check_1_2_9" + info "$check" info " * File not found" resulttestjson "INFO" "File not found" currentScore=$((currentScore + 0)) @@ -364,35 +366,35 @@ check_1_2_9() { # 1.2.10 check_1_2_10() { - id_1_2_10="1.2.10" - desc_1_2_10="Ensure auditing is configured for Docker files and directories - /etc/docker/daemon.json (Scored)" - check_1_2_10="$id_1_2_10 - $desc_1_2_10" - starttestjson "$id_1_2_10" "$desc_1_2_10" + local id="1.2.10" + local desc="Ensure auditing is configured for Docker files and directories - /etc/docker/daemon.json (Scored)" + local check="$id - $desc" + starttestjson "$id" "$desc" totalChecks=$((totalChecks + 1)) file="/etc/docker/daemon.json" if [ -f "$file" ]; then if command -v auditctl >/dev/null 2>&1; then if auditctl -l | grep $file >/dev/null 2>&1; then - pass "$check_1_2_10" + pass "$check" resulttestjson "PASS" currentScore=$((currentScore + 1)) else - warn "$check_1_2_10" + warn "$check" resulttestjson "WARN" currentScore=$((currentScore - 1)) fi elif grep -s "$file" "$auditrules" | grep "^[^#;]" 2>/dev/null 1>&2; then - pass "$check_1_2_10" + pass "$check" resulttestjson "PASS" currentScore=$((currentScore + 1)) else - warn "$check_1_2_10" + warn "$check" resulttestjson "WARN" currentScore=$((currentScore - 1)) fi else - info "$check_1_2_10" + info "$check" info " * File not found" resulttestjson "INFO" "File not found" currentScore=$((currentScore + 0)) @@ -401,35 +403,35 @@ check_1_2_10() { # 1.2.11 check_1_2_11() { - id_1_2_11="1.2.11" - desc_1_2_11="Ensure auditing is configured for Docker files and directories - /usr/bin/containerd (Scored)" - check_1_2_11="$id_1_2_11 - $desc_1_2_11" - starttestjson "$id_1_2_11" "$desc_1_2_11" + local id="1.2.11" + local desc="Ensure auditing is configured for Docker files and directories - /usr/bin/containerd (Scored)" + local check="$id - $desc" + starttestjson "$id" "$desc" totalChecks=$((totalChecks + 1)) file="/usr/bin/containerd" if [ -f "$file" ]; then if command -v auditctl >/dev/null 2>&1; then if auditctl -l | grep $file >/dev/null 2>&1; then - pass "$check_1_2_11" + pass "$check" resulttestjson "PASS" currentScore=$((currentScore + 1)) else - warn "$check_1_2_11" + warn "$check" resulttestjson "WARN" currentScore=$((currentScore - 1)) fi elif grep -s "$file" "$auditrules" | grep "^[^#;]" 2>/dev/null 1>&2; then - pass "$check_1_2_11" + pass "$check" resulttestjson "PASS" currentScore=$((currentScore + 1)) else - warn "$check_1_2_11" + warn "$check" resulttestjson "WARN" currentScore=$((currentScore - 1)) fi else - info "$check_1_2_11" + info "$check" info " * File not found" resulttestjson "INFO" "File not found" currentScore=$((currentScore + 0)) @@ -438,35 +440,35 @@ check_1_2_11() { # 1.2.12 check_1_2_12() { - id_1_2_12="1.2.12" - desc_1_2_12="Ensure auditing is configured for Docker files and directories - /usr/sbin/runc (Scored)" - check_1_2_12="$id_1_2_12 - $desc_1_2_12" - starttestjson "$id_1_2_12" "$desc_1_2_12" + local id="1.2.12" + local desc="Ensure auditing is configured for Docker files and directories - /usr/sbin/runc (Scored)" + local check="$id - $desc" + starttestjson "$id" "$desc" totalChecks=$((totalChecks + 1)) file="/usr/sbin/runc" if [ -f "$file" ]; then if command -v auditctl >/dev/null 2>&1; then if auditctl -l | grep $file >/dev/null 2>&1; then - pass "$check_1_2_12" + pass "$check" resulttestjson "PASS" currentScore=$((currentScore + 1)) else - warn "$check_1_2_12" + warn "$check" resulttestjson "WARN" currentScore=$((currentScore - 1)) fi elif grep -s "$file" "$auditrules" | grep "^[^#;]" 2>/dev/null 1>&2; then - pass "$check_1_2_12" + pass "$check" resulttestjson "PASS" currentScore=$((currentScore + 1)) else - warn "$check_1_2_12" + warn "$check" resulttestjson "WARN" currentScore=$((currentScore - 1)) fi else - info "$check_1_2_12" + info "$check" info " * File not found" resulttestjson "INFO" "File not found" currentScore=$((currentScore + 0)) diff --git a/tests/2_docker_daemon_configuration.sh b/tests/2_docker_daemon_configuration.sh index 83cc8eb..3f27d5d 100644 --- a/tests/2_docker_daemon_configuration.sh +++ b/tests/2_docker_daemon_configuration.sh @@ -2,31 +2,31 @@ check_2() { logit "\n" - id_2="2" - desc_2="Docker daemon configuration" - check_2="$id_2 - $desc_2" - info "$check_2" - startsectionjson "$id_2" "$desc_2" + local id="2" + local desc="Docker daemon configuration" + local check="$id - $desc" + info "$check" + startsectionjson "$id" "$desc" } # 2.1 check_2_1() { - id_2_1="2.1" - desc_2_1="Ensure network traffic is restricted between containers on the default bridge (Scored)" - check_2_1="$id_2_1 - $desc_2_1" - starttestjson "$id_2_1" "$desc_2_1" + local id="2.1" + local desc="Ensure network traffic is restricted between containers on the default bridge (Scored)" + local check="$id - $desc" + starttestjson "$id" "$desc" totalChecks=$((totalChecks + 1)) if get_docker_effective_command_line_args '--icc' | grep false >/dev/null 2>&1; then - pass "$check_2_1" + pass "$check" resulttestjson "PASS" currentScore=$((currentScore + 1)) elif get_docker_configuration_file_args 'icc' | grep "false" >/dev/null 2>&1; then - pass "$check_2_1" + pass "$check" resulttestjson "PASS" currentScore=$((currentScore + 1)) else - warn "$check_2_1" + warn "$check" resulttestjson "WARN" currentScore=$((currentScore - 1)) fi @@ -34,38 +34,38 @@ check_2_1() { # 2.2 check_2_2() { - id_2_2="2.2" - desc_2_2="Ensure the logging level is set to 'info' (Scored)" - check_2_2="$id_2_2 - $desc_2_2" - starttestjson "$id_2_2" "$desc_2_2" + local id="2.2" + local desc="Ensure the logging level is set to 'info' (Scored)" + local check="$id - $desc" + starttestjson "$id" "$desc" totalChecks=$((totalChecks + 1)) if get_docker_configuration_file_args 'log-level' >/dev/null 2>&1; then if get_docker_configuration_file_args 'log-level' | grep info >/dev/null 2>&1; then - pass "$check_2_2" + pass "$check" resulttestjson "PASS" currentScore=$((currentScore + 1)) elif [ -z "$(get_docker_configuration_file_args 'log-level')" ]; then - pass "$check_2_2" + pass "$check" resulttestjson "PASS" currentScore=$((currentScore + 1)) else - warn "$check_2_2" + warn "$check" resulttestjson "WARN" currentScore=$((currentScore - 1)) fi elif get_docker_effective_command_line_args '-l'; then if get_docker_effective_command_line_args '-l' | grep "info" >/dev/null 2>&1; then - pass "$check_2_2" + pass "$check" resulttestjson "PASS" currentScore=$((currentScore + 1)) else - warn "$check_2_2" + warn "$check" resulttestjson "WARN" currentScore=$((currentScore - 1)) fi else - pass "$check_2_2" + pass "$check" resulttestjson "PASS" currentScore=$((currentScore + 1)) fi @@ -73,22 +73,22 @@ check_2_2() { # 2.3 check_2_3() { - id_2_3="2.3" - desc_2_3="Ensure Docker is allowed to make changes to iptables (Scored)" - check_2_3="$id_2_3 - $desc_2_3" - starttestjson "$id_2_3" "$desc_2_3" + local id="2.3" + local desc="Ensure Docker is allowed to make changes to iptables (Scored)" + local check="$id - $desc" + starttestjson "$id" "$desc" totalChecks=$((totalChecks + 1)) if get_docker_effective_command_line_args '--iptables' | grep "false" >/dev/null 2>&1; then - warn "$check_2_3" + warn "$check" resulttestjson "WARN" currentScore=$((currentScore - 1)) elif get_docker_configuration_file_args 'iptables' | grep "false" >/dev/null 2>&1; then - warn "$check_2_3" + warn "$check" resulttestjson "WARN" currentScore=$((currentScore - 1)) else - pass "$check_2_3" + pass "$check" resulttestjson "PASS" currentScore=$((currentScore + 1)) fi @@ -96,28 +96,28 @@ check_2_3() { # 2.4 check_2_4() { - id_2_4="2.4" - desc_2_4="Ensure insecure registries are not used (Scored)" - check_2_4="$id_2_4 - $desc_2_4" - starttestjson "$id_2_4" "$desc_2_4" + local id="2.4" + local desc="Ensure insecure registries are not used (Scored)" + local check="$id - $desc" + starttestjson "$id" "$desc" totalChecks=$((totalChecks + 1)) if get_docker_effective_command_line_args '--insecure-registry' | grep "insecure-registry" >/dev/null 2>&1; then - warn "$check_2_4" + warn "$check" resulttestjson "WARN" currentScore=$((currentScore - 1)) elif ! [ -z "$(get_docker_configuration_file_args 'insecure-registries')" ]; then if get_docker_configuration_file_args 'insecure-registries' | grep '\[]' >/dev/null 2>&1; then - pass "$check_2_4" + pass "$check" resulttestjson "PASS" currentScore=$((currentScore + 1)) else - warn "$check_2_4" + warn "$check" resulttestjson "WARN" currentScore=$((currentScore - 1)) fi else - pass "$check_2_4" + pass "$check" resulttestjson "PASS" currentScore=$((currentScore + 1)) fi @@ -125,18 +125,18 @@ check_2_4() { # 2.5 check_2_5() { - id_2_5="2.5" - desc_2_5="Ensure aufs storage driver is not used (Scored)" - check_2_5="$id_2_5 - $desc_2_5" - starttestjson "$id_2_5" "$desc_2_5" + local id="2.5" + local desc="Ensure aufs storage driver is not used (Scored)" + local check="$id - $desc" + starttestjson "$id" "$desc" totalChecks=$((totalChecks + 1)) if docker info 2>/dev/null | grep -e "^\sStorage Driver:\s*aufs\s*$" >/dev/null 2>&1; then - warn "$check_2_5" + warn "$check" resulttestjson "WARN" currentScore=$((currentScore - 1)) else - pass "$check_2_5" + pass "$check" resulttestjson "PASS" currentScore=$((currentScore + 1)) fi @@ -144,33 +144,33 @@ check_2_5() { # 2.6 check_2_6() { - id_2_6="2.6" - desc_2_6="Ensure TLS authentication for Docker daemon is configured (Scored)" - check_2_6="$id_2_6 - $desc_2_6" - starttestjson "$id_2_6" "$desc_2_6" + local id="2.6" + local desc="Ensure TLS authentication for Docker daemon is configured (Scored)" + local check="$id - $desc" + starttestjson "$id" "$desc" totalChecks=$((totalChecks + 1)) if [ $(get_docker_configuration_file_args 'tcp://') ] || \ [ $(get_docker_cumulative_command_line_args '-H' | grep -vE '(unix|fd)://') >/dev/null 2>&1 ]; then if [ $(get_docker_configuration_file_args '"tlsverify":' | grep 'true') ] || \ [ $(get_docker_cumulative_command_line_args '--tlsverify' | grep 'tlsverify') >/dev/null 2>&1 ]; then - pass "$check_2_6" + pass "$check" resulttestjson "PASS" currentScore=$((currentScore + 1)) elif [ $(get_docker_configuration_file_args '"tls":' | grep 'true') ] || \ [ $(get_docker_cumulative_command_line_args '--tls' | grep 'tls$') >/dev/null 2>&1 ]; then - warn "$check_2_6" + warn "$check" warn " * Docker daemon currently listening on TCP with TLS, but no verification" resulttestjson "WARN" "Docker daemon currently listening on TCP with TLS, but no verification" currentScore=$((currentScore - 1)) else - warn "$check_2_6" + warn "$check" warn " * Docker daemon currently listening on TCP without TLS" resulttestjson "WARN" "Docker daemon currently listening on TCP without TLS" currentScore=$((currentScore - 1)) fi else - info "$check_2_6" + info "$check" info " * Docker daemon not listening on TCP" resulttestjson "INFO" "Docker daemon not listening on TCP" currentScore=$((currentScore + 0)) @@ -179,22 +179,22 @@ check_2_6() { # 2.7 check_2_7() { - id_2_7="2.7" - desc_2_7="Ensure the default ulimit is configured appropriately (Not Scored)" - check_2_7="$id_2_7 - $desc_2_7" - starttestjson "$id_2_7" "$desc_2_7" + local id="2.7" + local desc="Ensure the default ulimit is configured appropriately (Not Scored)" + local check="$id - $desc" + starttestjson "$id" "$desc" totalChecks=$((totalChecks + 1)) if get_docker_configuration_file_args 'default-ulimit' | grep -v '{}' >/dev/null 2>&1; then - pass "$check_2_7" + pass "$check" resulttestjson "PASS" currentScore=$((currentScore + 1)) elif get_docker_effective_command_line_args '--default-ulimit' | grep "default-ulimit" >/dev/null 2>&1; then - pass "$check_2_7" + pass "$check" resulttestjson "PASS" currentScore=$((currentScore + 1)) else - info "$check_2_7" + info "$check" info " * Default ulimit doesn't appear to be set" resulttestjson "INFO" "Default ulimit doesn't appear to be set" currentScore=$((currentScore + 0)) @@ -203,22 +203,22 @@ check_2_7() { # 2.8 check_2_8() { - id_2_8="2.8" - desc_2_8="Enable user namespace support (Scored)" - check_2_8="$id_2_8 - $desc_2_8" - starttestjson "$id_2_8" "$desc_2_8" + local id="2.8" + local desc="Enable user namespace support (Scored)" + local check="$id - $desc" + starttestjson "$id" "$desc" totalChecks=$((totalChecks + 1)) if get_docker_configuration_file_args 'userns-remap' | grep -v '""'; then - pass "$check_2_8" + pass "$check" resulttestjson "PASS" currentScore=$((currentScore + 1)) elif get_docker_effective_command_line_args '--userns-remap' | grep "userns-remap" >/dev/null 2>&1; then - pass "$check_2_8" + pass "$check" resulttestjson "PASS" currentScore=$((currentScore + 1)) else - warn "$check_2_8" + warn "$check" resulttestjson "WARN" currentScore=$((currentScore - 1)) fi @@ -226,24 +226,24 @@ check_2_8() { # 2.9 check_2_9() { - id_2_9="2.9" - desc_2_9="Ensure the default cgroup usage has been confirmed (Scored)" - check_2_9="$id_2_9 - $desc_2_9" - starttestjson "$id_2_9" "$desc_2_9" + local id="2.9" + local desc="Ensure the default cgroup usage has been confirmed (Scored)" + local check="$id - $desc" + starttestjson "$id" "$desc" totalChecks=$((totalChecks + 1)) if get_docker_configuration_file_args 'cgroup-parent' | grep -v ''; then - warn "$check_2_9" + warn "$check" info " * Confirm cgroup usage" resulttestjson "WARN" "Confirm cgroup usage" currentScore=$((currentScore + 0)) elif get_docker_effective_command_line_args '--cgroup-parent' | grep "cgroup-parent" >/dev/null 2>&1; then - warn "$check_2_9" + warn "$check" info " * Confirm cgroup usage" resulttestjson "WARN" "Confirm cgroup usage" currentScore=$((currentScore + 0)) else - pass "$check_2_9" + pass "$check" resulttestjson "PASS" currentScore=$((currentScore + 1)) fi @@ -251,22 +251,22 @@ check_2_9() { # 2.10 check_2_10() { - id_2_10="2.10" - desc_2_10="Ensure base device size is not changed until needed (Scored)" - check_2_10="$id_2_10 - $desc_2_10" - starttestjson "$id_2_10" "$desc_2_10" + local id="2.10" + local desc="Ensure base device size is not changed until needed (Scored)" + local check="$id - $desc" + starttestjson "$id" "$desc" totalChecks=$((totalChecks + 1)) if get_docker_configuration_file_args 'storage-opts' | grep "dm.basesize" >/dev/null 2>&1; then - warn "$check_2_10" + warn "$check" resulttestjson "WARN" currentScore=$((currentScore - 1)) elif get_docker_effective_command_line_args '--storage-opt' | grep "dm.basesize" >/dev/null 2>&1; then - warn "$check_2_10" + warn "$check" resulttestjson "WARN" currentScore=$((currentScore - 1)) else - pass "$check_2_10" + pass "$check" resulttestjson "PASS" currentScore=$((currentScore + 1)) fi @@ -274,22 +274,22 @@ check_2_10() { # 2.11 check_2_11() { - id_2_11="2.11" - desc_2_11="Ensure that authorization for Docker client commands is enabled (Scored)" - check_2_11="$id_2_11 - $desc_2_11" - starttestjson "$id_2_11" "$desc_2_11" + local id="2.11" + local desc="Ensure that authorization for Docker client commands is enabled (Scored)" + local check="$id - $desc" + starttestjson "$id" "$desc" totalChecks=$((totalChecks + 1)) if get_docker_configuration_file_args 'authorization-plugins' | grep -v '\[]'; then - pass "$check_2_11" + pass "$check" resulttestjson "PASS" currentScore=$((currentScore + 1)) elif get_docker_effective_command_line_args '--authorization-plugin' | grep "authorization-plugin" >/dev/null 2>&1; then - pass "$check_2_11" + pass "$check" resulttestjson "PASS" currentScore=$((currentScore + 1)) else - warn "$check_2_11" + warn "$check" resulttestjson "WARN" currentScore=$((currentScore - 1)) fi @@ -297,18 +297,18 @@ check_2_11() { # 2.12 check_2_12() { - id_2_12="2.12" - desc_2_12="Ensure centralized and remote logging is configured (Scored)" - check_2_12="$id_2_12 - $desc_2_12" - starttestjson "$id_2_12" "$desc_2_12" + local id="2.12" + local desc="Ensure centralized and remote logging is configured (Scored)" + local check="$id - $desc" + starttestjson "$id" "$desc" totalChecks=$((totalChecks + 1)) if docker info --format '{{ .LoggingDriver }}' | grep 'json-file' >/dev/null 2>&1; then - warn "$check_2_12" + warn "$check" resulttestjson "WARN" currentScore=$((currentScore - 1)) else - pass "$check_2_12" + pass "$check" resulttestjson "PASS" currentScore=$((currentScore + 1)) fi @@ -316,27 +316,27 @@ check_2_12() { # 2.13 check_2_13() { - id_2_13="2.13" - desc_2_13="Ensure live restore is enabled (Scored)" - check_2_13="$id_2_13 - $desc_2_13" - starttestjson "$id_2_13" "$desc_2_13" + local id="2.13" + local desc="Ensure live restore is enabled (Scored)" + local check="$id - $desc" + starttestjson "$id" "$desc" totalChecks=$((totalChecks + 1)) if docker info 2>/dev/null | grep -e "Live Restore Enabled:\s*true\s*" >/dev/null 2>&1; then - pass "$check_2_13" + pass "$check" resulttestjson "PASS" currentScore=$((currentScore + 1)) else if docker info 2>/dev/null | grep -e "Swarm:*\sactive\s*" >/dev/null 2>&1; then - pass "$check_2_13 (Incompatible with swarm mode)" + pass "$check (Incompatible with swarm mode)" resulttestjson "PASS" currentScore=$((currentScore + 1)) elif get_docker_effective_command_line_args '--live-restore' | grep "live-restore" >/dev/null 2>&1; then - pass "$check_2_13" + pass "$check" resulttestjson "PASS" currentScore=$((currentScore + 1)) else - warn "$check_2_13" + warn "$check" resulttestjson "WARN" currentScore=$((currentScore - 1)) fi @@ -345,22 +345,22 @@ check_2_13() { # 2.14 check_2_14() { - id_2_14="2.14" - desc_2_14="Ensure Userland Proxy is Disabled (Scored)" - check_2_14="$id_2_14 - $desc_2_14" - starttestjson "$id_2_14" "$desc_2_14" + local id="2.14" + local desc="Ensure Userland Proxy is Disabled (Scored)" + local check="$id - $desc" + starttestjson "$id" "$desc" totalChecks=$((totalChecks + 1)) if get_docker_configuration_file_args 'userland-proxy' | grep false >/dev/null 2>&1; then - pass "$check_2_14" + pass "$check" resulttestjson "PASS" currentScore=$((currentScore + 1)) elif get_docker_effective_command_line_args '--userland-proxy=false' 2>/dev/null | grep "userland-proxy=false" >/dev/null 2>&1; then - pass "$check_2_14" + pass "$check" resulttestjson "PASS" currentScore=$((currentScore + 1)) else - warn "$check_2_14" + warn "$check" resulttestjson "WARN" currentScore=$((currentScore - 1)) fi @@ -368,18 +368,18 @@ check_2_14() { # 2.15 check_2_15() { - id_2_15="2.15" - desc_2_15="Ensure that a daemon-wide custom seccomp profile is applied if appropriate (Not Scored)" - check_2_15="$id_2_15 - $desc_2_15" - starttestjson "$id_2_15" "$desc_2_15" + local id="2.15" + local desc="Ensure that a daemon-wide custom seccomp profile is applied if appropriate (Not Scored)" + local check="$id - $desc" + starttestjson "$id" "$desc" totalChecks=$((totalChecks + 1)) if docker info --format '{{ .SecurityOptions }}' | grep 'name=seccomp,profile=default' 2>/dev/null 1>&2; then - pass "$check_2_15" + pass "$check" resulttestjson "PASS" currentScore=$((currentScore + 1)) else - info "$check_2_15" + info "$check" resulttestjson "INFO" currentScore=$((currentScore + 0)) fi @@ -390,48 +390,48 @@ check_2_16() { docker_version=$(docker version | grep -i -A2 '^server' | grep ' Version:' \ | awk '{print $NF; exit}' | tr -d '[:alpha:]-,.' | cut -c 1-4) - id_2_16="2.16" - desc_2_16="Ensure that experimental features are not implemented in production (Scored)" - check_2_16="$id_2_16 - $desc_2_16" - starttestjson "$id_2_16" "$desc_2_16" + local id="2.16" + local desc="Ensure that experimental features are not implemented in production (Scored)" + local check="$id - $desc" + starttestjson "$id" "$desc" totalChecks=$((totalChecks + 1)) if [ "$docker_version" -le 1903 ]; then if docker version -f '{{.Server.Experimental}}' | grep false 2>/dev/null 1>&2; then - pass "$check_2_16" + pass "$check" resulttestjson "PASS" currentScore=$((currentScore + 1)) else - warn "$check_2_16" + warn "$check" resulttestjson "WARN" currentScore=$((currentScore - 1)) fi else - desc_2_16="$desc_2_16 (Deprecated)" - check_2_16="$id_2_16 - $desc_2_16" - info "$desc_2_16" + local desc="$desc (Deprecated)" + local check="$id - $desc" + info "$desc" resulttestjson "INFO" fi } # 2.17 check_2_17() { - id_2_17="2.17" - desc_2_17="Ensure containers are restricted from acquiring new privileges (Scored)" - check_2_17="$id_2_17 - $desc_2_17" - starttestjson "$id_2_17" "$desc_2_17" + local id="2.17" + local desc="Ensure containers are restricted from acquiring new privileges (Scored)" + local check="$id - $desc" + starttestjson "$id" "$desc" totalChecks=$((totalChecks + 1)) if get_docker_effective_command_line_args '--no-new-privileges' | grep "no-new-privileges" >/dev/null 2>&1; then - pass "$check_2_17" + pass "$check" resulttestjson "PASS" currentScore=$((currentScore + 1)) elif get_docker_configuration_file_args 'no-new-privileges' | grep true >/dev/null 2>&1; then - pass "$check_2_17" + pass "$check" resulttestjson "PASS" currentScore=$((currentScore + 1)) else - warn "$check_2_17" + warn "$check" resulttestjson "WARN" currentScore=$((currentScore - 1)) fi diff --git a/tests/3_docker_daemon_configuration_files.sh b/tests/3_docker_daemon_configuration_files.sh index 7b77829..850948b 100644 --- a/tests/3_docker_daemon_configuration_files.sh +++ b/tests/3_docker_daemon_configuration_files.sh @@ -2,35 +2,35 @@ check_3() { logit "\n" - id_3="3" - desc_3="Docker daemon configuration files" - check_3="$id_3 - $desc_3" - info "$check_3" - startsectionjson "$id_3" "$desc_3" + local id="3" + local desc="Docker daemon configuration files" + local check="$id - $desc" + info "$check" + startsectionjson "$id" "$desc" } # 3.1 check_3_1() { - id_3_1="3.1" - desc_3_1="Ensure that the docker.service file ownership is set to root:root (Scored)" - check_3_1="$id_3_1 - $desc_3_1" - starttestjson "$id_3_1" "$desc_3_1" + local id="3.1" + local desc="Ensure that the docker.service file ownership is set to root:root (Scored)" + local check="$id - $desc" + starttestjson "$id" "$desc" totalChecks=$((totalChecks + 1)) file="$(get_service_file docker.service)" if [ -f "$file" ]; then if [ "$(stat -c %u%g $file)" -eq 00 ]; then - pass "$check_3_1" + pass "$check" resulttestjson "PASS" currentScore=$((currentScore + 1)) else - warn "$check_3_1" + warn "$check" warn " * Wrong ownership for $file" resulttestjson "WARN" "Wrong ownership for $file" currentScore=$((currentScore - 1)) fi else - info "$check_3_1" + info "$check" info " * File not found" resulttestjson "INFO" "File not found" currentScore=$((currentScore + 0)) @@ -39,26 +39,26 @@ check_3_1() { # 3.2 check_3_2() { - id_3_2="3.2" - desc_3_2="Ensure that docker.service file permissions are appropriately set (Scored)" - check_3_2="$id_3_2 - $desc_3_2" - starttestjson "$id_3_2" "$desc_3_2" + local id="3.2" + local desc="Ensure that docker.service file permissions are appropriately set (Scored)" + local check="$id - $desc" + starttestjson "$id" "$desc" totalChecks=$((totalChecks + 1)) file="$(get_service_file docker.service)" if [ -f "$file" ]; then if [ "$(stat -c %a $file)" -le 644 ]; then - pass "$check_3_2" + pass "$check" resulttestjson "PASS" currentScore=$((currentScore + 1)) else - warn "$check_3_2" + warn "$check" warn " * Wrong permissions for $file" resulttestjson "WARN" "Wrong permissions for $file" currentScore=$((currentScore - 1)) fi else - info "$check_3_2" + info "$check" info " * File not found" resulttestjson "INFO" "File not found" currentScore=$((currentScore + 0)) @@ -67,26 +67,26 @@ check_3_2() { # 3.3 check_3_3() { - id_3_3="3.3" - desc_3_3="Ensure that docker.socket file ownership is set to root:root (Scored)" - check_3_3="$id_3_3 - $desc_3_3" - starttestjson "$id_3_3" "$desc_3_3" + local id="3.3" + local desc="Ensure that docker.socket file ownership is set to root:root (Scored)" + local check="$id - $desc" + starttestjson "$id" "$desc" totalChecks=$((totalChecks + 1)) file="$(get_service_file docker.socket)" if [ -f "$file" ]; then if [ "$(stat -c %u%g $file)" -eq 00 ]; then - pass "$check_3_3" + pass "$check" resulttestjson "PASS" currentScore=$((currentScore + 1)) else - warn "$check_3_3" + warn "$check" warn " * Wrong ownership for $file" resulttestjson "WARN" "Wrong ownership for $file" currentScore=$((currentScore - 1)) fi else - info "$check_3_3" + info "$check" info " * File not found" resulttestjson "INFO" "File not found" currentScore=$((currentScore + 0)) @@ -95,26 +95,26 @@ check_3_3() { # 3.4 check_3_4() { - id_3_4="3.4" - desc_3_4="Ensure that docker.socket file permissions are set to 644 or more restrictive (Scored)" - check_3_4="$id_3_4 - $desc_3_4" - starttestjson "$id_3_4" "$desc_3_4" + local id="3.4" + local desc="Ensure that docker.socket file permissions are set to 644 or more restrictive (Scored)" + local check="$id - $desc" + starttestjson "$id" "$desc" totalChecks=$((totalChecks + 1)) file="$(get_service_file docker.socket)" if [ -f "$file" ]; then if [ "$(stat -c %a $file)" -le 644 ]; then - pass "$check_3_4" + pass "$check" resulttestjson "PASS" currentScore=$((currentScore + 1)) else - warn "$check_3_4" + warn "$check" warn " * Wrong permissions for $file" resulttestjson "WARN" "Wrong permissions for $file" currentScore=$((currentScore - 1)) fi else - info "$check_3_4" + info "$check" info " * File not found" resulttestjson "INFO" "File not found" currentScore=$((currentScore + 0)) @@ -123,26 +123,26 @@ check_3_4() { # 3.5 check_3_5() { - id_3_5="3.5" - desc_3_5="Ensure that the /etc/docker directory ownership is set to root:root (Scored)" - check_3_5="$id_3_5 - $desc_3_5" - starttestjson "$id_3_5" "$desc_3_5" + local id="3.5" + local desc="Ensure that the /etc/docker directory ownership is set to root:root (Scored)" + local check="$id - $desc" + starttestjson "$id" "$desc" totalChecks=$((totalChecks + 1)) directory="/etc/docker" if [ -d "$directory" ]; then if [ "$(stat -c %u%g $directory)" -eq 00 ]; then - pass "$check_3_5" + pass "$check" resulttestjson "PASS" currentScore=$((currentScore + 1)) else - warn "$check_3_5" + warn "$check" warn " * Wrong ownership for $directory" resulttestjson "WARN" "Wrong ownership for $directory" currentScore=$((currentScore - 1)) fi else - info "$check_3_5" + info "$check" info " * Directory not found" resulttestjson "INFO" "Directory not found" currentScore=$((currentScore + 0)) @@ -151,26 +151,26 @@ check_3_5() { # 3.6 check_3_6() { - id_3_6="3.6" - desc_3_6="Ensure that /etc/docker directory permissions are set to 755 or more restrictively (Scored)" - check_3_6="$id_3_6 - $desc_3_6" - starttestjson "$id_3_6" "$desc_3_6" + local id="3.6" + local desc="Ensure that /etc/docker directory permissions are set to 755 or more restrictively (Scored)" + local check="$id - $desc" + starttestjson "$id" "$desc" totalChecks=$((totalChecks + 1)) directory="/etc/docker" if [ -d "$directory" ]; then if [ "$(stat -c %a $directory)" -le 755 ]; then - pass "$check_3_6" + pass "$check" resulttestjson "PASS" currentScore=$((currentScore + 1)) else - warn "$check_3_6" + warn "$check" warn " * Wrong permissions for $directory" resulttestjson "WARN" "Wrong permissions for $directory" currentScore=$((currentScore - 1)) fi else - info "$check_3_6" + info "$check" info " * Directory not found" resulttestjson "INFO" "Directory not found" currentScore=$((currentScore + 0)) @@ -179,10 +179,10 @@ check_3_6() { # 3.7 check_3_7() { - id_3_7="3.7" - desc_3_7="Ensure that registry certificate file ownership is set to root:root (Scored)" - check_3_7="$id_3_7 - $desc_3_7" - starttestjson "$id_3_7" "$desc_3_7" + local id="3.7" + local desc="Ensure that registry certificate file ownership is set to root:root (Scored)" + local check="$id - $desc" + starttestjson "$id" "$desc" totalChecks=$((totalChecks + 1)) directory="/etc/docker/certs.d/" @@ -195,17 +195,17 @@ check_3_7() { fi done if [ $fail -eq 1 ]; then - warn "$check_3_7" + warn "$check" warn " * Wrong ownership for $directory" resulttestjson "WARN" "Wrong ownership for $directory" currentScore=$((currentScore - 1)) else - pass "$check_3_7" + pass "$check" resulttestjson "PASS" currentScore=$((currentScore + 1)) fi else - info "$check_3_7" + info "$check" info " * Directory not found" resulttestjson "INFO" "Directory not found" currentScore=$((currentScore + 0)) @@ -214,10 +214,10 @@ check_3_7() { # 3.8 check_3_8() { - id_3_8="3.8" - desc_3_8="Ensure that registry certificate file permissions are set to 444 or more restrictively (Scored)" - check_3_8="$id_3_8 - $desc_3_8" - starttestjson "$id_3_8" "$desc_3_8" + local id="3.8" + local desc="Ensure that registry certificate file permissions are set to 444 or more restrictively (Scored)" + local check="$id - $desc" + starttestjson "$id" "$desc" totalChecks=$((totalChecks + 1)) directory="/etc/docker/certs.d/" @@ -230,17 +230,17 @@ check_3_8() { fi done if [ $fail -eq 1 ]; then - warn "$check_3_8" + warn "$check" warn " * Wrong permissions for $directory" resulttestjson "WARN" "Wrong permissions for $directory" currentScore=$((currentScore - 1)) else - pass "$check_3_8" + pass "$check" resulttestjson "PASS" currentScore=$((currentScore + 1)) fi else - info "$check_3_8" + info "$check" info " * Directory not found" resulttestjson "INFO" "Directory not found" currentScore=$((currentScore + 0)) @@ -249,10 +249,10 @@ check_3_8() { # 3.9 check_3_9() { - id_3_9="3.9" - desc_3_9="Ensure that TLS CA certificate file ownership is set to root:root (Scored)" - check_3_9="$id_3_9 - $desc_3_9" - starttestjson "$id_3_9" "$desc_3_9" + local id="3.9" + local desc="Ensure that TLS CA certificate file ownership is set to root:root (Scored)" + local check="$id - $desc" + starttestjson "$id" "$desc" totalChecks=$((totalChecks + 1)) if [ -n "$(get_docker_configuration_file_args 'tlscacert')" ]; then @@ -262,17 +262,17 @@ check_3_9() { fi if [ -f "$tlscacert" ]; then if [ "$(stat -c %u%g "$tlscacert")" -eq 00 ]; then - pass "$check_3_9" + pass "$check" resulttestjson "PASS" currentScore=$((currentScore + 1)) else - warn "$check_3_9" + warn "$check" warn " * Wrong ownership for $tlscacert" resulttestjson "WARN" "Wrong ownership for $tlscacert" currentScore=$((currentScore - 1)) fi else - info "$check_3_9" + info "$check" info " * No TLS CA certificate found" resulttestjson "INFO" "No TLS CA certificate found" currentScore=$((currentScore + 0)) @@ -281,10 +281,10 @@ check_3_9() { # 3.10 check_3_10() { - id_3_10="3.10" - desc_3_10="Ensure that TLS CA certificate file permissions are set to 444 or more restrictively (Scored)" - check_3_10="$id_3_10 - $desc_3_10" - starttestjson "$id_3_10" "$desc_3_10" + local id="3.10" + local desc="Ensure that TLS CA certificate file permissions are set to 444 or more restrictively (Scored)" + local check="$id - $desc" + starttestjson "$id" "$desc" totalChecks=$((totalChecks + 1)) if [ -n "$(get_docker_configuration_file_args 'tlscacert')" ]; then @@ -294,17 +294,17 @@ check_3_10() { fi if [ -f "$tlscacert" ]; then if [ "$(stat -c %a $tlscacert)" -le 444 ]; then - pass "$check_3_10" + pass "$check" resulttestjson "PASS" currentScore=$((currentScore + 1)) else - warn "$check_3_10" + warn "$check" warn " * Wrong permissions for $tlscacert" resulttestjson "WARN" "Wrong permissions for $tlscacert" currentScore=$((currentScore - 1)) fi else - info "$check_3_10" + info "$check" info " * No TLS CA certificate found" resulttestjson "INFO" "No TLS CA certificate found" currentScore=$((currentScore + 0)) @@ -313,10 +313,10 @@ check_3_10() { # 3.11 check_3_11() { - id_3_11="3.11" - desc_3_11="Ensure that Docker server certificate file ownership is set to root:root (Scored)" - check_3_11="$id_3_11 - $desc_3_11" - starttestjson "$id_3_11" "$desc_3_11" + local id="3.11" + local desc="Ensure that Docker server certificate file ownership is set to root:root (Scored)" + local check="$id - $desc" + starttestjson "$id" "$desc" totalChecks=$((totalChecks + 1)) if [ -n "$(get_docker_configuration_file_args 'tlscert')" ]; then @@ -326,17 +326,17 @@ check_3_11() { fi if [ -f "$tlscert" ]; then if [ "$(stat -c %u%g "$tlscert")" -eq 00 ]; then - pass "$check_3_11" + pass "$check" resulttestjson "PASS" currentScore=$((currentScore + 1)) else - warn "$check_3_11" + warn "$check" warn " * Wrong ownership for $tlscert" resulttestjson "WARN" "Wrong ownership for $tlscert" currentScore=$((currentScore - 1)) fi else - info "$check_3_11" + info "$check" info " * No TLS Server certificate found" resulttestjson "INFO" "No TLS Server certificate found" currentScore=$((currentScore + 0)) @@ -345,10 +345,10 @@ check_3_11() { # 3.12 check_3_12() { - id_3_12="3.12" - desc_3_12="Ensure that the Docker server certificate file permissions are set to 444 or more restrictively (Scored)" - check_3_12="$id_3_12 - $desc_3_12" - starttestjson "$id_3_12" "$desc_3_12" + local id="3.12" + local desc="Ensure that the Docker server certificate file permissions are set to 444 or more restrictively (Scored)" + local check="$id - $desc" + starttestjson "$id" "$desc" totalChecks=$((totalChecks + 1)) if [ -n "$(get_docker_configuration_file_args 'tlscert')" ]; then @@ -358,17 +358,17 @@ check_3_12() { fi if [ -f "$tlscert" ]; then if [ "$(stat -c %a $tlscert)" -le 444 ]; then - pass "$check_3_12" + pass "$check" resulttestjson "PASS" currentScore=$((currentScore + 1)) else - warn "$check_3_12" + warn "$check" warn " * Wrong permissions for $tlscert" resulttestjson "WARN" "Wrong permissions for $tlscert" currentScore=$((currentScore - 1)) fi else - info "$check_3_12" + info "$check" info " * No TLS Server certificate found" resulttestjson "INFO" "No TLS Server certificate found" currentScore=$((currentScore + 0)) @@ -377,10 +377,10 @@ check_3_12() { # 3.13 check_3_13() { - id_3_13="3.13" - desc_3_13="Ensure that the Docker server certificate key file ownership is set to root:root (Scored)" - check_3_13="$id_3_13 - $desc_3_13" - starttestjson "$id_3_13" "$desc_3_13" + local id="3.13" + local desc="Ensure that the Docker server certificate key file ownership is set to root:root (Scored)" + local check="$id - $desc" + starttestjson "$id" "$desc" totalChecks=$((totalChecks + 1)) if [ -n "$(get_docker_configuration_file_args 'tlskey')" ]; then @@ -390,17 +390,17 @@ check_3_13() { fi if [ -f "$tlskey" ]; then if [ "$(stat -c %u%g "$tlskey")" -eq 00 ]; then - pass "$check_3_13" + pass "$check" resulttestjson "PASS" currentScore=$((currentScore + 1)) else - warn "$check_3_13" + warn "$check" warn " * Wrong ownership for $tlskey" resulttestjson "WARN" "Wrong ownership for $tlskey" currentScore=$((currentScore - 1)) fi else - info "$check_3_13" + info "$check" info " * No TLS Key found" resulttestjson "INFO" "No TLS Key found" currentScore=$((currentScore + 0)) @@ -409,10 +409,10 @@ check_3_13() { # 3.14 check_3_14() { - id_3_14="3.14" - desc_3_14="Ensure that the Docker server certificate key file permissions are set to 400 (Scored)" - check_3_14="$id_3_14 - $desc_3_14" - starttestjson "$id_3_14" "$desc_3_14" + local id="3.14" + local desc="Ensure that the Docker server certificate key file permissions are set to 400 (Scored)" + local check="$id - $desc" + starttestjson "$id" "$desc" totalChecks=$((totalChecks + 1)) if [ -n "$(get_docker_configuration_file_args 'tlskey')" ]; then @@ -422,17 +422,17 @@ check_3_14() { fi if [ -f "$tlskey" ]; then if [ "$(stat -c %a $tlskey)" -eq 400 ]; then - pass "$check_3_14" + pass "$check" resulttestjson "PASS" currentScore=$((currentScore + 1)) else - warn "$check_3_14" + warn "$check" warn " * Wrong permissions for $tlskey" resulttestjson "WARN" "Wrong permissions for $tlskey" currentScore=$((currentScore - 1)) fi else - info "$check_3_14" + info "$check" info " * No TLS Key found" resulttestjson "INFO" "No TLS Key found" currentScore=$((currentScore + 0)) @@ -441,26 +441,26 @@ check_3_14() { # 3.15 check_3_15() { - id_3_15="3.15" - desc_3_15="Ensure that the Docker socket file ownership is set to root:docker (Scored)" - check_3_15="$id_3_15 - $desc_3_15" - starttestjson "$id_3_15" "$desc_3_15" + local id="3.15" + local desc="Ensure that the Docker socket file ownership is set to root:docker (Scored)" + local check="$id - $desc" + starttestjson "$id" "$desc" totalChecks=$((totalChecks + 1)) file="/var/run/docker.sock" if [ -S "$file" ]; then if [ "$(stat -c %U:%G $file)" = 'root:docker' ]; then - pass "$check_3_15" + pass "$check" resulttestjson "PASS" currentScore=$((currentScore + 1)) else - warn "$check_3_15" + warn "$check" warn " * Wrong ownership for $file" resulttestjson "WARN" "Wrong ownership for $file" currentScore=$((currentScore - 1)) fi else - info "$check_3_15" + info "$check" info " * File not found" resulttestjson "INFO" "File not found" currentScore=$((currentScore + 0)) @@ -469,26 +469,26 @@ check_3_15() { # 3.16 check_3_16() { - id_3_16="3.16" - desc_3_16="Ensure that the Docker socket file permissions are set to 660 or more restrictively (Scored)" - check_3_16="$id_3_16 - $desc_3_16" - starttestjson "$id_3_16" "$desc_3_16" + local id="3.16" + local desc="Ensure that the Docker socket file permissions are set to 660 or more restrictively (Scored)" + local check="$id - $desc" + starttestjson "$id" "$desc" totalChecks=$((totalChecks + 1)) file="/var/run/docker.sock" if [ -S "$file" ]; then if [ "$(stat -c %a $file)" -le 660 ]; then - pass "$check_3_16" + pass "$check" resulttestjson "PASS" currentScore=$((currentScore + 1)) else - warn "$check_3_16" + warn "$check" warn " * Wrong permissions for $file" resulttestjson "WARN" "Wrong permissions for $file" currentScore=$((currentScore - 1)) fi else - info "$check_3_16" + info "$check" info " * File not found" resulttestjson "INFO" "File not found" currentScore=$((currentScore + 0)) @@ -497,26 +497,26 @@ check_3_16() { # 3.17 check_3_17() { - id_3_17="3.17" - desc_3_17="Ensure that the daemon.json file ownership is set to root:root (Scored)" - check_3_17="$id_3_17 - $desc_3_17" - starttestjson "$id_3_17" "$desc_3_17" + local id="3.17" + local desc="Ensure that the daemon.json file ownership is set to root:root (Scored)" + local check="$id - $desc" + starttestjson "$id" "$desc" totalChecks=$((totalChecks + 1)) file="/etc/docker/daemon.json" if [ -f "$file" ]; then if [ "$(stat -c %U:%G $file)" = 'root:root' ]; then - pass "$check_3_17" + pass "$check" resulttestjson "PASS" currentScore=$((currentScore + 1)) else - warn "$check_3_17" + warn "$check" warn " * Wrong ownership for $file" resulttestjson "WARN" "Wrong ownership for $file" currentScore=$((currentScore - 1)) fi else - info "$check_3_17" + info "$check" info " * File not found" resulttestjson "INFO" "File not found" currentScore=$((currentScore + 0)) @@ -525,26 +525,26 @@ check_3_17() { # 3.18 check_3_18() { - id_3_18="3.18" - desc_3_18="Ensure that daemon.json file permissions are set to 644 or more restrictive (Scored)" - check_3_18="$id_3_18 - $desc_3_18" - starttestjson "$id_3_18" "$desc_3_18" + local id="3.18" + local desc="Ensure that daemon.json file permissions are set to 644 or more restrictive (Scored)" + local check="$id - $desc" + starttestjson "$id" "$desc" totalChecks=$((totalChecks + 1)) file="/etc/docker/daemon.json" if [ -f "$file" ]; then if [ "$(stat -c %a $file)" -le 644 ]; then - pass "$check_3_18" + pass "$check" resulttestjson "PASS" currentScore=$((currentScore + 1)) else - warn "$check_3_18" + warn "$check" warn " * Wrong permissions for $file" resulttestjson "WARN" "Wrong permissions for $file" currentScore=$((currentScore - 1)) fi else - info "$check_3_18" + info "$check" info " * File not found" resulttestjson "INFO" "File not found" currentScore=$((currentScore + 0)) @@ -553,26 +553,26 @@ check_3_18() { # 3.19 check_3_19() { - id_3_19="3.19" - desc_3_19="Ensure that the /etc/default/docker file ownership is set to root:root (Scored)" - check_3_19="$id_3_19 - $desc_3_19" - starttestjson "$id_3_19" "$desc_3_19" + local id="3.19" + local desc="Ensure that the /etc/default/docker file ownership is set to root:root (Scored)" + local check="$id - $desc" + starttestjson "$id" "$desc" totalChecks=$((totalChecks + 1)) file="/etc/default/docker" if [ -f "$file" ]; then if [ "$(stat -c %U:%G $file)" = 'root:root' ]; then - pass "$check_3_19" + pass "$check" resulttestjson "PASS" currentScore=$((currentScore + 1)) else - warn "$check_3_19" + warn "$check" warn " * Wrong ownership for $file" resulttestjson "WARN" "Wrong ownership for $file" currentScore=$((currentScore - 1)) fi else - info "$check_3_19" + info "$check" info " * File not found" resulttestjson "INFO" "File not found" currentScore=$((currentScore + 0)) @@ -581,26 +581,26 @@ check_3_19() { # 3.20 check_3_20() { - id_3_20="3.20" - desc_3_20="Ensure that the /etc/sysconfig/docker file ownership is set to root:root (Scored)" - check_3_20="$id_3_20 - $desc_3_20" - starttestjson "$id_3_20" "$desc_3_20" + local id="3.20" + local desc="Ensure that the /etc/sysconfig/docker file ownership is set to root:root (Scored)" + local check="$id - $desc" + starttestjson "$id" "$desc" totalChecks=$((totalChecks + 1)) file="/etc/sysconfig/docker" if [ -f "$file" ]; then if [ "$(stat -c %U:%G $file)" = 'root:root' ]; then - pass "$check_3_20" + pass "$check" resulttestjson "PASS" currentScore=$((currentScore + 1)) else - warn "$check_3_20" + warn "$check" warn " * Wrong ownership for $file" resulttestjson "WARN" "Wrong ownership for $file" currentScore=$((currentScore - 1)) fi else - info "$check_3_20" + info "$check" info " * File not found" resulttestjson "INFO" "File not found" currentScore=$((currentScore + 0)) @@ -609,26 +609,26 @@ check_3_20() { # 3.21 check_3_21() { - id_3_21="3.21" - desc_3_21="Ensure that the /etc/sysconfig/docker file permissions are set to 644 or more restrictively (Scored)" - check_3_21="$id_3_21 - $desc_3_21" - starttestjson "$id_3_21" "$desc_3_21" + local id="3.21" + local desc="Ensure that the /etc/sysconfig/docker file permissions are set to 644 or more restrictively (Scored)" + local check="$id - $desc" + starttestjson "$id" "$desc" totalChecks=$((totalChecks + 1)) file="/etc/sysconfig/docker" if [ -f "$file" ]; then if [ "$(stat -c %a $file)" -le 644 ]; then - pass "$check_3_21" + pass "$check" resulttestjson "PASS" currentScore=$((currentScore + 1)) else - warn "$check_3_21" + warn "$check" warn " * Wrong permissions for $file" resulttestjson "WARN" "Wrong permissions for $file" currentScore=$((currentScore - 1)) fi else - info "$check_3_21" + info "$check" info " * File not found" resulttestjson "INFO" "File not found" currentScore=$((currentScore + 0)) @@ -637,26 +637,26 @@ check_3_21() { # 3.22 check_3_22() { - id_3_22="3.22" - desc_3_22="Ensure that the /etc/default/docker file permissions are set to 644 or more restrictively (Scored)" - check_3_22="$id_3_22 - $desc_3_22" - starttestjson "$id_3_22" "$desc_3_22" + local id="3.22" + local desc="Ensure that the /etc/default/docker file permissions are set to 644 or more restrictively (Scored)" + local check="$id - $desc" + starttestjson "$id" "$desc" totalChecks=$((totalChecks + 1)) file="/etc/default/docker" if [ -f "$file" ]; then if [ "$(stat -c %a $file)" -le 644 ]; then - pass "$check_3_22" + pass "$check" resulttestjson "PASS" currentScore=$((currentScore + 1)) else - warn "$check_3_22" + warn "$check" warn " * Wrong permissions for $file" resulttestjson "WARN" "Wrong permissions for $file" currentScore=$((currentScore - 1)) fi else - info "$check_3_22" + info "$check" info " * File not found" resulttestjson "INFO" "File not found" currentScore=$((currentScore + 0)) diff --git a/tests/4_container_images.sh b/tests/4_container_images.sh index 4e63507..32deeca 100644 --- a/tests/4_container_images.sh +++ b/tests/4_container_images.sh @@ -2,25 +2,25 @@ check_4() { logit "\n" - id_4="4" - desc_4="Container Images and Build File" - check_4="$id_4 - $desc_4" - info "$check_4" - startsectionjson "$id_4" "$desc_4" + local id="4" + local desc="Container Images and Build File" + local check="$id - $desc" + info "$check" + startsectionjson "$id" "$desc" } # 4.1 check_4_1() { - id_4_1="4.1" - desc_4_1="Ensure that a user for the container has been created (Scored)" - check_4_1="$id_4_1 - $desc_4_1" - starttestjson "$id_4_1" "$desc_4_1" + local id="4.1" + local desc="Ensure that a user for the container has been created (Scored)" + local check="$id - $desc" + starttestjson "$id" "$desc" totalChecks=$((totalChecks + 1)) # If container_users is empty, there are no running containers if [ -z "$containers" ]; then - info "$check_4_1" + info "$check" info " * No containers running" resulttestjson "INFO" "No containers running" currentScore=$((currentScore + 0)) @@ -37,7 +37,7 @@ check_4_1() { if [ "$user" = "User=0" ] || [ "$user" = "User=root" ] || [ "$user" = "User=" ] || [ "$user" = "User=[]" ] || [ "$user" = "User=" ]; then # If it's the first container, fail the test if [ $fail -eq 0 ]; then - warn "$check_4_1" + warn "$check" warn " * Running as root: $c" root_containers="$root_containers $c" fail=1 @@ -49,7 +49,7 @@ check_4_1() { done # We went through all the containers and found none running as root if [ $fail -eq 0 ]; then - pass "$check_4_1" + pass "$check" resulttestjson "PASS" currentScore=$((currentScore + 1)) else @@ -63,57 +63,57 @@ check_4_1() { # 4.2 check_4_2() { - id_4_2="4.2" - desc_4_2="Ensure that containers use only trusted base images (Not Scored)" - check_4_2="$id_4_2 - $desc_4_2" - starttestjson "$id_4_2" "$desc_4_2" + local id="4.2" + local desc="Ensure that containers use only trusted base images (Not Scored)" + local check="$id - $desc" + starttestjson "$id" "$desc" totalChecks=$((totalChecks + 1)) - note "$check_4_2" + note "$check" resulttestjson "NOTE" currentScore=$((currentScore + 0)) } # 4.3 check_4_3() { - id_4_3="4.3" - desc_4_3="Ensure that unnecessary packages are not installed in the container (Not Scored)" - check_4_3="$id_4_3 - $desc_4_3" - starttestjson "$id_4_3" "$desc_4_3" + local id="4.3" + local desc="Ensure that unnecessary packages are not installed in the container (Not Scored)" + local check="$id - $desc" + starttestjson "$id" "$desc" totalChecks=$((totalChecks + 1)) - note "$check_4_3" + note "$check" resulttestjson "NOTE" currentScore=$((currentScore + 0)) } # 4.4 check_4_4() { - id_4_4="4.4" - desc_4_4="Ensure images are scanned and rebuilt to include security patches (Not Scored)" - check_4_4="$id_4_4 - $desc_4_4" - starttestjson "$id_4_4" "$desc_4_4" + local id="4.4" + local desc="Ensure images are scanned and rebuilt to include security patches (Not Scored)" + local check="$id - $desc" + starttestjson "$id" "$desc" totalChecks=$((totalChecks + 1)) - note "$check_4_4" + note "$check" resulttestjson "NOTE" currentScore=$((currentScore + 0)) } # 4.5 check_4_5() { - id_4_5="4.5" - desc_4_5="Ensure Content trust for Docker is Enabled (Scored)" - check_4_5="$id_4_5 - $desc_4_5" - starttestjson "$id_4_5" "$desc_4_5" + local id="4.5" + local desc="Ensure Content trust for Docker is Enabled (Scored)" + local check="$id - $desc" + starttestjson "$id" "$desc" totalChecks=$((totalChecks + 1)) if [ "x$DOCKER_CONTENT_TRUST" = "x1" ]; then - pass "$check_4_5" + pass "$check" resulttestjson "PASS" currentScore=$((currentScore + 1)) else - warn "$check_4_5" + warn "$check" resulttestjson "WARN" currentScore=$((currentScore - 1)) fi @@ -121,10 +121,10 @@ check_4_5() { # 4.6 check_4_6() { - id_4_6="4.6" - desc_4_6="Ensure that HEALTHCHECK instructions have been added to container images (Scored)" - check_4_6="$id_4_6 - $desc_4_6" - starttestjson "$id_4_6" "$desc_4_6" + local id="4.6" + local desc="Ensure that HEALTHCHECK instructions have been added to container images (Scored)" + local check="$id - $desc" + starttestjson "$id" "$desc" totalChecks=$((totalChecks + 1)) fail=0 @@ -133,7 +133,7 @@ check_4_6() { if docker inspect --format='{{.Config.Healthcheck}}' "$img" 2>/dev/null | grep -e "" >/dev/null 2>&1; then if [ $fail -eq 0 ]; then fail=1 - warn "$check_4_6" + warn "$check" fi imgName=$(docker inspect --format='{{.RepoTags}}' "$img" 2>/dev/null) if ! [ "$imgName" = '[]' ]; then @@ -146,7 +146,7 @@ check_4_6() { fi done if [ $fail -eq 0 ]; then - pass "$check_4_6" + pass "$check" resulttestjson "PASS" currentScore=$((currentScore + 1)) else @@ -157,10 +157,10 @@ check_4_6() { # 4.7 check_4_7() { - id_4_7="4.7" - desc_4_7="Ensure update instructions are not used alone in the Dockerfile (Not Scored)" - check_4_7="$id_4_7 - $desc_4_7" - starttestjson "$id_4_7" "$desc_4_7" + local id="4.7" + local desc="Ensure update instructions are not used alone in the Dockerfile (Not Scored)" + local check="$id - $desc" + starttestjson "$id" "$desc" totalChecks=$((totalChecks + 1)) fail=0 @@ -169,7 +169,7 @@ check_4_7() { if docker history "$img" 2>/dev/null | grep -e "update" >/dev/null 2>&1; then if [ $fail -eq 0 ]; then fail=1 - info "$check_4_7" + info "$check" fi imgName=$(docker inspect --format='{{.RepoTags}}' "$img" 2>/dev/null) if ! [ "$imgName" = '[]' ]; then @@ -179,7 +179,7 @@ check_4_7() { fi done if [ $fail -eq 0 ]; then - pass "$check_4_7" + pass "$check" resulttestjson "PASS" currentScore=$((currentScore + 0)) else @@ -190,23 +190,23 @@ check_4_7() { # 4.8 check_4_8() { - id_4_8="4.8" - desc_4_8="Ensure setuid and setgid permissions are removed (Not Scored)" - check_4_8="$id_4_8 - $desc_4_8" - starttestjson "$id_4_8" "$desc_4_8" + local id="4.8" + local desc="Ensure setuid and setgid permissions are removed (Not Scored)" + local check="$id - $desc" + starttestjson "$id" "$desc" totalChecks=$((totalChecks + 1)) - note "$check_4_8" + note "$check" resulttestjson "NOTE" currentScore=$((currentScore + 0)) } # 4.9 check_4_9() { - id_4_9="4.9" - desc_4_9="Ensure that COPY is used instead of ADD in Dockerfiles (Not Scored)" - check_4_9="$id_4_9 - $desc_4_9" - starttestjson "$id_4_9" "$desc_4_9" + local id="4.9" + local desc="Ensure that COPY is used instead of ADD in Dockerfiles (Not Scored)" + local check="$id - $desc" + starttestjson "$id" "$desc" totalChecks=$((totalChecks + 1)) fail=0 @@ -216,7 +216,7 @@ check_4_9() { sed '$d' | grep -q 'ADD'; then if [ $fail -eq 0 ]; then fail=1 - info "$check_4_9" + info "$check" fi imgName=$(docker inspect --format='{{.RepoTags}}' "$img" 2>/dev/null) if ! [ "$imgName" = '[]' ]; then @@ -227,7 +227,7 @@ check_4_9() { fi done if [ $fail -eq 0 ]; then - pass "$check_4_9" + pass "$check" resulttestjson "PASS" currentScore=$((currentScore + 0)) else @@ -237,26 +237,26 @@ check_4_9() { # 4.10 check_4_10() { - id_4_10="4.10" - desc_4_10="Ensure secrets are not stored in Dockerfiles (Not Scored)" - check_4_10="$id_4_10 - $desc_4_10" - starttestjson "$id_4_10" "$desc_4_10" + local id="4.10" + local desc="Ensure secrets are not stored in Dockerfiles (Not Scored)" + local check="$id - $desc" + starttestjson "$id" "$desc" totalChecks=$((totalChecks + 1)) - note "$check_4_10" + note "$check" resulttestjson "NOTE" currentScore=$((currentScore + 0)) } # 4.11 check_4_11() { - id_4_11="4.11" - desc_4_11="Ensure only verified packages are are installed (Not Scored)" - check_4_11="$id_4_11 - $desc_4_11" - starttestjson "$id_4_11" "$desc_4_11" + local id="4.11" + local desc="Ensure only verified packages are are installed (Not Scored)" + local check="$id - $desc" + starttestjson "$id" "$desc" totalChecks=$((totalChecks + 1)) - note "$check_4_11" + note "$check" resulttestjson "NOTE" currentScore=$((currentScore + 0)) } diff --git a/tests/5_container_runtime.sh b/tests/5_container_runtime.sh index a42be93..b8b92e5 100644 --- a/tests/5_container_runtime.sh +++ b/tests/5_container_runtime.sh @@ -2,11 +2,11 @@ check_5() { logit "\n" - id_5="5" - desc_5="Container Runtime" - check_5="$id_5 - $desc_5" - info "$check_5" - startsectionjson "$id_5" "$desc_5" + local id="5" + local desc="Container Runtime" + local check="$id - $desc" + info "$check" + startsectionjson "$id" "$desc" } check_running_containers() { @@ -28,10 +28,10 @@ check_5_1() { return fi - id_5_1="5.1" - desc_5_1="Ensure that, if applicable, an AppArmor Profile is enabled (Scored)" - check_5_1="$id_5_1 - $desc_5_1" - starttestjson "$id_5_1" "$desc_5_1" + local id="5.1" + local desc="Ensure that, if applicable, an AppArmor Profile is enabled (Scored)" + local check="$id - $desc" + starttestjson "$id" "$desc" totalChecks=$((totalChecks + 1)) @@ -43,7 +43,7 @@ check_5_1() { if [ "$policy" = "AppArmorProfile=" ] || [ "$policy" = "AppArmorProfile=[]" ] || [ "$policy" = "AppArmorProfile=" ] || [ "$policy" = "AppArmorProfile=unconfined" ]; then # If it's the first container, fail the test if [ $fail -eq 0 ]; then - warn "$check_5_1" + warn "$check" warn " * No AppArmorProfile Found: $c" no_apparmor_containers="$no_apparmor_containers $c" fail=1 @@ -55,7 +55,7 @@ check_5_1() { done # We went through all the containers and found none without AppArmor if [ $fail -eq 0 ]; then - pass "$check_5_1" + pass "$check" resulttestjson "PASS" currentScore=$((currentScore + 1)) else @@ -70,10 +70,10 @@ check_5_2() { return fi - id_5_2="5.2" - desc_5_2="Ensure that, if applicable, SELinux security options are set (Scored)" - check_5_2="$id_5_2 - $desc_5_2" - starttestjson "$id_5_2" "$desc_5_2" + local id="5.2" + local desc="Ensure that, if applicable, SELinux security options are set (Scored)" + local check="$id - $desc" + starttestjson "$id" "$desc" totalChecks=$((totalChecks + 1)) @@ -85,7 +85,7 @@ check_5_2() { if [ "$policy" = "SecurityOpt=" ] || [ "$policy" = "SecurityOpt=[]" ] || [ "$policy" = "SecurityOpt=" ]; then # If it's the first container, fail the test if [ $fail -eq 0 ]; then - warn "$check_5_2" + warn "$check" warn " * No SecurityOptions Found: $c" no_securityoptions_containers="$no_securityoptions_containers $c" fail=1 @@ -97,7 +97,7 @@ check_5_2() { done # We went through all the containers and found none without SELinux if [ $fail -eq 0 ]; then - pass "$check_5_2" + pass "$check" resulttestjson "PASS" currentScore=$((currentScore + 1)) else @@ -112,10 +112,10 @@ check_5_3() { return fi - id_5_3="5.3" - desc_5_3="Ensure that Linux kernel capabilities are restricted within containers (Scored)" - check_5_3="$id_5_3 - $desc_5_3" - starttestjson "$id_5_3" "$desc_5_3" + local id="5.3" + local desc="Ensure that Linux kernel capabilities are restricted within containers (Scored)" + local check="$id - $desc" + starttestjson "$id" "$desc" totalChecks=$((totalChecks + 1)) @@ -130,7 +130,7 @@ check_5_3() { if [ "$caps" != 'CapAdd=' ] && [ "$caps" != 'CapAdd=[]' ] && [ "$caps" != 'CapAdd=' ] && [ "$caps" != 'CapAdd=' ]; then # If it's the first container, fail the test if [ $fail -eq 0 ]; then - warn "$check_5_3" + warn "$check" warn " * Capabilities added: $caps to $c" caps_containers="$caps_containers $c" fail=1 @@ -142,7 +142,7 @@ check_5_3() { done # We went through all the containers and found none with extra capabilities if [ $fail -eq 0 ]; then - pass "$check_5_3" + pass "$check" resulttestjson "PASS" currentScore=$((currentScore + 1)) else @@ -157,10 +157,10 @@ check_5_4() { return fi - id_5_4="5.4" - desc_5_4="Ensure that privileged containers are not used (Scored)" - check_5_4="$id_5_4 - $desc_5_4" - starttestjson "$id_5_4" "$desc_5_4" + local id="5.4" + local desc="Ensure that privileged containers are not used (Scored)" + local check="$id - $desc" + starttestjson "$id" "$desc" totalChecks=$((totalChecks + 1)) @@ -172,7 +172,7 @@ check_5_4() { if [ "$privileged" = "true" ]; then # If it's the first container, fail the test if [ $fail -eq 0 ]; then - warn "$check_5_4" + warn "$check" warn " * Container running in Privileged mode: $c" privileged_containers="$privileged_containers $c" fail=1 @@ -184,7 +184,7 @@ check_5_4() { done # We went through all the containers and found no privileged containers if [ $fail -eq 0 ]; then - pass "$check_5_4" + pass "$check" resulttestjson "PASS" currentScore=$((currentScore + 1)) else @@ -199,10 +199,10 @@ check_5_5() { return fi - id_5_5="5.5" - desc_5_5="Ensure sensitive host system directories are not mounted on containers (Scored)" - check_5_5="$id_5_5 - $desc_5_5" - starttestjson "$id_5_5" "$desc_5_5" + local id="5.5" + local desc="Ensure sensitive host system directories are not mounted on containers (Scored)" + local check="$id - $desc" + starttestjson "$id" "$desc" totalChecks=$((totalChecks + 1)) @@ -233,7 +233,7 @@ check_5_5() { if [ $sensitive -eq 1 ]; then # If it's the first container, fail the test if [ $fail -eq 0 ]; then - warn "$check_5_5" + warn "$check" warn " * Sensitive directory $v mounted in: $c" sensitive_mount_containers="$sensitive_mount_containers $c:$v" fail=1 @@ -246,7 +246,7 @@ check_5_5() { done # We went through all the containers and found none with sensitive mounts if [ $fail -eq 0 ]; then - pass "$check_5_5" + pass "$check" resulttestjson "PASS" currentScore=$((currentScore + 1)) else @@ -261,10 +261,10 @@ check_5_6() { return fi - id_5_6="5.6" - desc_5_6="Ensure sshd is not run within containers (Scored)" - check_5_6="$id_5_6 - $desc_5_6" - starttestjson "$id_5_6" "$desc_5_6" + local id="5.6" + local desc="Ensure sshd is not run within containers (Scored)" + local check="$id - $desc" + starttestjson "$id" "$desc" totalChecks=$((totalChecks + 1)) @@ -277,7 +277,7 @@ check_5_6() { if [ "$processes" -ge 1 ]; then # If it's the first container, fail the test if [ $fail -eq 0 ]; then - warn "$check_5_6" + warn "$check" warn " * Container running sshd: $c" ssh_exec_containers="$ssh_exec_containers $c" fail=1 @@ -291,7 +291,7 @@ check_5_6() { exec_check=$(docker exec "$c" ps -el 2>/dev/null) if [ $? -eq 255 ]; then if [ $printcheck -eq 0 ]; then - warn "$check_5_6" + warn "$check" printcheck=1 fi warn " * Docker exec fails: $c" @@ -302,7 +302,7 @@ check_5_6() { done # We went through all the containers and found none with sshd if [ $fail -eq 0 ]; then - pass "$check_5_6" + pass "$check" resulttestjson "PASS" currentScore=$((currentScore + 1)) else @@ -317,10 +317,10 @@ check_5_7() { return fi - id_5_7="5.7" - desc_5_7="Ensure privileged ports are not mapped within containers (Scored)" - check_5_7="$id_5_7 - $desc_5_7" - starttestjson "$id_5_7" "$desc_5_7" + local id="5.7" + local desc="Ensure privileged ports are not mapped within containers (Scored)" + local check="$id - $desc" + starttestjson "$id" "$desc" totalChecks=$((totalChecks + 1)) @@ -335,7 +335,7 @@ check_5_7() { if [ -n "$port" ] && [ "$port" -lt 1024 ]; then # If it's the first container, fail the test if [ $fail -eq 0 ]; then - warn "$check_5_7" + warn "$check" warn " * Privileged Port in use: $port in $c" privileged_port_containers="$privileged_port_containers $c:$port" fail=1 @@ -348,7 +348,7 @@ check_5_7() { done # We went through all the containers and found no privileged ports if [ $fail -eq 0 ]; then - pass "$check_5_7" + pass "$check" resulttestjson "PASS" currentScore=$((currentScore + 1)) else @@ -363,13 +363,13 @@ check_5_8() { return fi - id_5_8="5.8" - desc_5_8="Ensure that only needed ports are open on the container (Not Scored)" - check_5_8="$id_5_8 - $desc_5_8" - starttestjson "$id_5_8" "$desc_5_8" + local id="5.8" + local desc="Ensure that only needed ports are open on the container (Not Scored)" + local check="$id - $desc" + starttestjson "$id" "$desc" totalChecks=$((totalChecks + 1)) - note "$check_5_8" + note "$check" resulttestjson "NOTE" currentScore=$((currentScore + 0)) } @@ -380,10 +380,10 @@ check_5_9() { return fi - id_5_9="5.9" - desc_5_9="Ensure that the host's network namespace is not shared (Scored)" - check_5_9="$id_5_9 - $desc_5_9" - starttestjson "$id_5_9" "$desc_5_9" + local id="5.9" + local desc="Ensure that the host's network namespace is not shared (Scored)" + local check="$id - $desc" + starttestjson "$id" "$desc" totalChecks=$((totalChecks + 1)) @@ -395,7 +395,7 @@ check_5_9() { if [ "$mode" = "NetworkMode=host" ]; then # If it's the first container, fail the test if [ $fail -eq 0 ]; then - warn "$check_5_9" + warn "$check" warn " * Container running with networking mode 'host': $c" net_host_containers="$net_host_containers $c" fail=1 @@ -407,7 +407,7 @@ check_5_9() { done # We went through all the containers and found no Network Mode host if [ $fail -eq 0 ]; then - pass "$check_5_9" + pass "$check" resulttestjson "PASS" currentScore=$((currentScore + 0)) else @@ -422,10 +422,10 @@ check_5_10() { return fi - id_5_10="5.10" - desc_5_10="Ensure that the memory usage for containers is limited (Scored)" - check_5_10="$id_5_10 - $desc_5_10" - starttestjson "$id_5_10" "$desc_5_10" + local id="5.10" + local desc="Ensure that the memory usage for containers is limited (Scored)" + local check="$id - $desc" + starttestjson "$id" "$desc" totalChecks=$((totalChecks + 1)) @@ -441,7 +441,7 @@ check_5_10() { if [ "$memory" = "0" ]; then # If it's the first container, fail the test if [ $fail -eq 0 ]; then - warn "$check_5_10" + warn "$check" warn " * Container running without memory restrictions: $c" mem_unlimited_containers="$mem_unlimited_containers $c" fail=1 @@ -453,7 +453,7 @@ check_5_10() { done # We went through all the containers and found no lack of Memory restrictions if [ $fail -eq 0 ]; then - pass "$check_5_10" + pass "$check" resulttestjson "PASS" currentScore=$((currentScore + 1)) else @@ -468,10 +468,10 @@ check_5_11() { return fi - id_5_11="5.11" - desc_5_11="Ensure that CPU priority is set appropriately on containers (Scored)" - check_5_11="$id_5_11 - $desc_5_11" - starttestjson "$id_5_11" "$desc_5_11" + local id="5.11" + local desc="Ensure that CPU priority is set appropriately on containers (Scored)" + local check="$id - $desc" + starttestjson "$id" "$desc" totalChecks=$((totalChecks + 1)) @@ -487,7 +487,7 @@ check_5_11() { if [ "$shares" = "0" ]; then # If it's the first container, fail the test if [ $fail -eq 0 ]; then - warn "$check_5_11" + warn "$check" warn " * Container running without CPU restrictions: $c" cpu_unlimited_containers="$cpu_unlimited_containers $c" fail=1 @@ -499,7 +499,7 @@ check_5_11() { done # We went through all the containers and found no lack of CPUShare restrictions if [ $fail -eq 0 ]; then - pass "$check_5_11" + pass "$check" resulttestjson "PASS" currentScore=$((currentScore + 1)) else @@ -514,10 +514,10 @@ check_5_12() { return fi - id_5_12="5.12" - desc_5_12="Ensure that the container's root filesystem is mounted as read only (Scored)" - check_5_12="$id_5_12 - $desc_5_12" - starttestjson "$id_5_12" "$desc_5_12" + local id="5.12" + local desc="Ensure that the container's root filesystem is mounted as read only (Scored)" + local check="$id - $desc" + starttestjson "$id" "$desc" totalChecks=$((totalChecks + 1)) @@ -529,7 +529,7 @@ check_5_12() { if [ "$read_status" = "false" ]; then # If it's the first container, fail the test if [ $fail -eq 0 ]; then - warn "$check_5_12" + warn "$check" warn " * Container running with root FS mounted R/W: $c" fsroot_mount_containers="$fsroot_mount_containers $c" fail=1 @@ -541,7 +541,7 @@ check_5_12() { done # We went through all the containers and found no R/W FS mounts if [ $fail -eq 0 ]; then - pass "$check_5_12" + pass "$check" resulttestjson "PASS" currentScore=$((currentScore + 1)) else @@ -556,10 +556,10 @@ check_5_13() { return fi - id_5_13="5.13" - desc_5_13="Ensure that incoming container traffic is bound to a specific host interface (Scored)" - check_5_13="$id_5_13 - $desc_5_13" - starttestjson "$id_5_13" "$desc_5_13" + local id="5.13" + local desc="Ensure that incoming container traffic is bound to a specific host interface (Scored)" + local check="$id - $desc" + starttestjson "$id" "$desc" totalChecks=$((totalChecks + 1)) @@ -570,7 +570,7 @@ check_5_13() { if [ "$ip" = "0.0.0.0" ]; then # If it's the first container, fail the test if [ $fail -eq 0 ]; then - warn "$check_5_13" + warn "$check" warn " * Port being bound to wildcard IP: $ip in $c" incoming_unbound_containers="$incoming_unbound_containers $c:$ip" fail=1 @@ -583,7 +583,7 @@ check_5_13() { done # We went through all the containers and found no ports bound to 0.0.0.0 if [ $fail -eq 0 ]; then - pass "$check_5_13" + pass "$check" resulttestjson "PASS" currentScore=$((currentScore + 1)) else @@ -598,10 +598,10 @@ check_5_14() { return fi - id_5_14="5.14" - desc_5_14="Ensure that the 'on-failure' container restart policy is set to '5' (Scored)" - check_5_14="$id_5_14 - $desc_5_14" - starttestjson "$id_5_14" "$desc_5_14" + local id="5.14" + local desc="Ensure that the 'on-failure' container restart policy is set to '5' (Scored)" + local check="$id - $desc" + starttestjson "$id" "$desc" totalChecks=$((totalChecks + 1)) @@ -613,7 +613,7 @@ check_5_14() { if [ "$policy" != "MaximumRetryCount=5" ]; then # If it's the first container, fail the test if [ $fail -eq 0 ]; then - warn "$check_5_14" + warn "$check" warn " * MaximumRetryCount is not set to 5: $c" maxretry_unset_containers="$maxretry_unset_containers $c" fail=1 @@ -625,7 +625,7 @@ check_5_14() { done # We went through all the containers and they all had MaximumRetryCount=5 if [ $fail -eq 0 ]; then - pass "$check_5_14" + pass "$check" resulttestjson "PASS" currentScore=$((currentScore + 1)) else @@ -640,10 +640,10 @@ check_5_15() { return fi - id_5_15="5.15" - desc_5_15="Ensure that the host's process namespace is not shared (Scored)" - check_5_15="$id_5_15 - $desc_5_15" - starttestjson "$id_5_15" "$desc_5_15" + local id="5.15" + local desc="Ensure that the host's process namespace is not shared (Scored)" + local check="$id - $desc" + starttestjson "$id" "$desc" totalChecks=$((totalChecks + 1)) @@ -655,7 +655,7 @@ check_5_15() { if [ "$mode" = "PidMode=host" ]; then # If it's the first container, fail the test if [ $fail -eq 0 ]; then - warn "$check_5_15" + warn "$check" warn " * Host PID namespace being shared with: $c" pidns_shared_containers="$pidns_shared_containers $c" fail=1 @@ -667,7 +667,7 @@ check_5_15() { done # We went through all the containers and found none with PidMode as host if [ $fail -eq 0 ]; then - pass "$check_5_15" + pass "$check" resulttestjson "PASS" currentScore=$((currentScore + 1)) else @@ -682,10 +682,10 @@ check_5_16() { return fi - id_5_16="5.16" - desc_5_16="Ensure that the host's IPC namespace is not shared (Scored)" - check_5_16="$id_5_16 - $desc_5_16" - starttestjson "$id_5_16" "$desc_5_16" + local id="5.16" + local desc="Ensure that the host's IPC namespace is not shared (Scored)" + local check="$id - $desc" + starttestjson "$id" "$desc" totalChecks=$((totalChecks + 1)) @@ -697,7 +697,7 @@ check_5_16() { if [ "$mode" = "IpcMode=host" ]; then # If it's the first container, fail the test if [ $fail -eq 0 ]; then - warn "$check_5_16" + warn "$check" warn " * Host IPC namespace being shared with: $c" ipcns_shared_containers="$ipcns_shared_containers $c" fail=1 @@ -709,7 +709,7 @@ check_5_16() { done # We went through all the containers and found none with IPCMode as host if [ $fail -eq 0 ]; then - pass "$check_5_16" + pass "$check" resulttestjson "PASS" currentScore=$((currentScore + 1)) else @@ -724,10 +724,10 @@ check_5_17() { return fi - id_5_17="5.17" - desc_5_17="Ensure that host devices are not directly exposed to containers (Not Scored)" - check_5_17="$id_5_17 - $desc_5_17" - starttestjson "$id_5_17" "$desc_5_17" + local id="5.17" + local desc="Ensure that host devices are not directly exposed to containers (Not Scored)" + local check="$id - $desc" + starttestjson "$id" "$desc" totalChecks=$((totalChecks + 1)) @@ -739,7 +739,7 @@ check_5_17() { if [ "$devices" != "Devices=" ] && [ "$devices" != "Devices=[]" ] && [ "$devices" != "Devices=" ]; then # If it's the first container, fail the test if [ $fail -eq 0 ]; then - info "$check_5_17" + info "$check" info " * Container has devices exposed directly: $c" hostdev_exposed_containers="$hostdev_exposed_containers $c" fail=1 @@ -751,7 +751,7 @@ check_5_17() { done # We went through all the containers and found none with devices if [ $fail -eq 0 ]; then - pass "$check_5_17" + pass "$check" resulttestjson "PASS" currentScore=$((currentScore + 1)) else @@ -766,10 +766,10 @@ check_5_18() { return fi - id_5_18="5.18" - desc_5_18="Ensure that the default ulimit is overwritten at runtime if needed (Not Scored)" - check_5_18="$id_5_18 - $desc_5_18" - starttestjson "$id_5_18" "$desc_5_18" + local id="5.18" + local desc="Ensure that the default ulimit is overwritten at runtime if needed (Not Scored)" + local check="$id - $desc" + starttestjson "$id" "$desc" totalChecks=$((totalChecks + 1)) @@ -781,7 +781,7 @@ check_5_18() { if [ "$ulimits" = "Ulimits=" ] || [ "$ulimits" = "Ulimits=[]" ] || [ "$ulimits" = "Ulimits=" ]; then # If it's the first container, fail the test if [ $fail -eq 0 ]; then - info "$check_5_18" + info "$check" info " * Container no default ulimit override: $c" no_ulimit_containers="$no_ulimit_containers $c" fail=1 @@ -793,7 +793,7 @@ check_5_18() { done # We went through all the containers and found none without Ulimits if [ $fail -eq 0 ]; then - pass "$check_5_18" + pass "$check" resulttestjson "PASS" currentScore=$((currentScore + 1)) else @@ -808,10 +808,10 @@ check_5_19() { return fi - id_5_19="5.19" - desc_5_19="Ensure mount propagation mode is not set to shared (Scored)" - check_5_19="$id_5_19 - $desc_5_19" - starttestjson "$id_5_19" "$desc_5_19" + local id="5.19" + local desc="Ensure mount propagation mode is not set to shared (Scored)" + local check="$id - $desc" + starttestjson "$id" "$desc" totalChecks=$((totalChecks + 1)) @@ -822,7 +822,7 @@ check_5_19() { grep shared 2>/dev/null 1>&2; then # If it's the first container, fail the test if [ $fail -eq 0 ]; then - warn "$check_5_19" + warn "$check" warn " * Mount propagation mode is shared: $c" mountprop_shared_containers="$mountprop_shared_containers $c" fail=1 @@ -834,7 +834,7 @@ check_5_19() { done # We went through all the containers and found none with shared propagation mode if [ $fail -eq 0 ]; then - pass "$check_5_19" + pass "$check" resulttestjson "PASS" currentScore=$((currentScore + 1)) else @@ -849,10 +849,10 @@ check_5_20() { return fi - id_5_20="5.20" - desc_5_20="Ensure that the host's UTS namespace is not shared (Scored)" - check_5_20="$id_5_20 - $desc_5_20" - starttestjson "$id_5_20" "$desc_5_20" + local id="5.20" + local desc="Ensure that the host's UTS namespace is not shared (Scored)" + local check="$id - $desc" + starttestjson "$id" "$desc" totalChecks=$((totalChecks + 1)) @@ -864,7 +864,7 @@ check_5_20() { if [ "$mode" = "UTSMode=host" ]; then # If it's the first container, fail the test if [ $fail -eq 0 ]; then - warn "$check_5_20" + warn "$check" warn " * Host UTS namespace being shared with: $c" utcns_shared_containers="$utcns_shared_containers $c" fail=1 @@ -876,7 +876,7 @@ check_5_20() { done # We went through all the containers and found none with UTSMode as host if [ $fail -eq 0 ]; then - pass "$check_5_20" + pass "$check" resulttestjson "PASS" currentScore=$((currentScore + 1)) else @@ -891,10 +891,10 @@ check_5_21() { return fi - id_5_21="5.21" - desc_5_21="Ensurethe default seccomp profile is not Disabled (Scored)" - check_5_21="$id_5_21 - $desc_5_21" - starttestjson "$id_5_21" "$desc_5_21" + local id="5.21" + local desc="Ensurethe default seccomp profile is not Disabled (Scored)" + local check="$id - $desc" + starttestjson "$id" "$desc" totalChecks=$((totalChecks + 1)) @@ -905,7 +905,7 @@ check_5_21() { grep -E 'seccomp:unconfined|seccomp=unconfined' 2>/dev/null 1>&2; then # If it's the first container, fail the test if [ $fail -eq 0 ]; then - warn "$check_5_21" + warn "$check" warn " * Default seccomp profile disabled: $c" seccomp_disabled_containers="$seccomp_disabled_containers $c" fail=1 @@ -917,7 +917,7 @@ check_5_21() { done # We went through all the containers and found none with default secomp profile disabled if [ $fail -eq 0 ]; then - pass "$check_5_21" + pass "$check" resulttestjson "PASS" currentScore=$((currentScore + 1)) else @@ -932,13 +932,13 @@ check_5_22() { return fi - id_5_22="5.22" - desc_5_22="Ensure that docker exec commands are not used with the privileged option (Scored)" - check_5_22="$id_5_22 - $desc_5_22" - starttestjson "$id_5_22" "$desc_5_22" + local id="5.22" + local desc="Ensure that docker exec commands are not used with the privileged option (Scored)" + local check="$id - $desc" + starttestjson "$id" "$desc" totalChecks=$((totalChecks + 1)) - note "$check_5_22" + note "$check" resulttestjson "NOTE" currentScore=$((currentScore + 0)) } @@ -949,13 +949,13 @@ check_5_23() { return fi - id_5_23="5.23" - desc_5_23="Ensure that docker exec commands are not used with the user=root option (Not Scored)" - check_5_23="$id_5_23 - $desc_5_23" - starttestjson "$id_5_23" "$desc_5_23" + local id="5.23" + local desc="Ensure that docker exec commands are not used with the user=root option (Not Scored)" + local check="$id - $desc" + starttestjson "$id" "$desc" totalChecks=$((totalChecks + 1)) - note "$check_5_23" + note "$check" resulttestjson "NOTE" currentScore=$((currentScore + 0)) } @@ -966,10 +966,10 @@ check_5_24() { return fi - id_5_24="5.24" - desc_5_24="Ensure that cgroup usage is confirmed (Scored)" - check_5_24="$id_5_24 - $desc_5_24" - starttestjson "$id_5_24" "$desc_5_24" + local id="5.24" + local desc="Ensure that cgroup usage is confirmed (Scored)" + local check="$id - $desc" + starttestjson "$id" "$desc" totalChecks=$((totalChecks + 1)) @@ -981,7 +981,7 @@ check_5_24() { if [ "$mode" != "CgroupParent=x" ]; then # If it's the first container, fail the test if [ $fail -eq 0 ]; then - warn "$check_5_24" + warn "$check" warn " * Confirm cgroup usage: $c" unexpected_cgroup_containers="$unexpected_cgroup_containers $c" fail=1 @@ -993,7 +993,7 @@ check_5_24() { done # We went through all the containers and found none with UTSMode as host if [ $fail -eq 0 ]; then - pass "$check_5_24" + pass "$check" resulttestjson "PASS" currentScore=$((currentScore + 1)) else @@ -1007,10 +1007,10 @@ check_5_25() { if [ "$running_containers" -ne 1 ]; then return fi - id_5_25="5.25" - desc_5_25="Ensure that the container is restricted from acquiring additional privileges (Scored)" - check_5_25="$id_5_25 - $desc_5_25" - starttestjson "$id_5_25" "$desc_5_25" + local id="5.25" + local desc="Ensure that the container is restricted from acquiring additional privileges (Scored)" + local check="$id - $desc" + starttestjson "$id" "$desc" totalChecks=$((totalChecks + 1)) @@ -1020,7 +1020,7 @@ check_5_25() { if ! docker inspect --format 'SecurityOpt={{.HostConfig.SecurityOpt }}' "$c" | grep 'no-new-privileges' 2>/dev/null 1>&2; then # If it's the first container, fail the test if [ $fail -eq 0 ]; then - warn "$check_5_25" + warn "$check" warn " * Privileges not restricted: $c" addprivs_containers="$addprivs_containers $c" fail=1 @@ -1032,7 +1032,7 @@ check_5_25() { done # We went through all the containers and found none with capability to acquire additional privileges if [ $fail -eq 0 ]; then - pass "$check_5_25" + pass "$check" resulttestjson "PASS" currentScore=$((currentScore + 1)) else @@ -1047,30 +1047,30 @@ check_5_26() { return fi - id_5_26="5.26" - desc_5_26="Ensure that container health is checked at runtime (Scored)" - check_5_26="$id_5_26 - $desc_5_26" - starttestjson "$id_5_26" "$desc_5_26" + local id="5.26" + local desc="Ensure that container health is checked at runtime (Scored)" + local check="$id - $desc" + starttestjson "$id" "$desc" totalChecks=$((totalChecks + 1)) fail=0 - nohealthcheck_containers="" + nohealthlocal check="" for c in $containers; do if ! docker inspect --format '{{ .Id }}: Health={{ .State.Health.Status }}' "$c" 2>/dev/null 1>&2; then if [ $fail -eq 0 ]; then - warn "$check_5_26" + warn "$check" warn " * Health check not set: $c" - nohealthcheck_containers="$nohealthcheck_containers $c" + nohealthlocal check="$nohealthcheck_containers $c" fail=1 else warn " * Health check not set: $c" - nohealthcheck_containers="$nohealthcheck_containers $c" + nohealthlocal check="$nohealthcheck_containers $c" fi fi done if [ $fail -eq 0 ]; then - pass "$check_5_26" + pass "$check" resulttestjson "PASS" currentScore=$((currentScore + 1)) else @@ -1085,13 +1085,13 @@ check_5_27() { return fi - id_5_27="5.27" - desc_5_27="Ensure that Docker commands always make use of the latest version of their image (Not Scored)" - check_5_27="$id_5_27 - $desc_5_27" - starttestjson "$id_5_27" "$desc_5_27" + local id="5.27" + local desc="Ensure that Docker commands always make use of the latest version of their image (Not Scored)" + local check="$id - $desc" + starttestjson "$id" "$desc" totalChecks=$((totalChecks + 1)) - info "$check_5_27" + info "$check" resulttestjson "INFO" currentScore=$((currentScore + 0)) } @@ -1102,10 +1102,10 @@ check_5_28() { return fi - id_5_28="5.28" - desc_5_28="Ensure that the PIDs cgroup limit is used (Scored)" - check_5_28="$id_5_28 - $desc_5_28" - starttestjson "$id_5_28" "$desc_5_28" + local id="5.28" + local desc="Ensure that the PIDs cgroup limit is used (Scored)" + local check="$id - $desc" + starttestjson "$id" "$desc" totalChecks=$((totalChecks + 1)) @@ -1117,7 +1117,7 @@ check_5_28() { if [ "$pidslimit" = "0" ] || [ "$pidslimit" = "" ] || [ "$pidslimit" = "-1" ]; then # If it's the first container, fail the test if [ $fail -eq 0 ]; then - warn "$check_5_28" + warn "$check" warn " * PIDs limit not set: $c" nopids_limit_containers="$nopids_limit_containers $c" fail=1 @@ -1129,7 +1129,7 @@ check_5_28() { done # We went through all the containers and found all with PIDs limit if [ $fail -eq 0 ]; then - pass "$check_5_28" + pass "$check" resulttestjson "PASS" currentScore=$((currentScore + 1)) else @@ -1144,10 +1144,10 @@ check_5_29() { return fi - id_5_29="5.29" - desc_5_29="Ensure that Docker's default bridge "docker0" is not used (Not Scored)" - check_5_29="$id_5_29 - $desc_5_29" - starttestjson "$id_5_29" "$desc_5_29" + local id="5.29" + local desc="Ensure that Docker's default bridge "docker0" is not used (Not Scored)" + local check="$id - $desc" + starttestjson "$id" "$desc" totalChecks=$((totalChecks + 1)) @@ -1161,7 +1161,7 @@ check_5_29() { if [ -n "$docker0Containers" ]; then if [ $fail -eq 0 ]; then - info "$check_5_29" + info "$check" fail=1 fi for c in $docker0Containers; do @@ -1182,7 +1182,7 @@ check_5_29() { done # We went through all the containers and found none in docker0 network if [ $fail -eq 0 ]; then - pass "$check_5_29" + pass "$check" resulttestjson "PASS" currentScore=$((currentScore + 1)) else @@ -1197,10 +1197,10 @@ check_5_30() { return fi - id_5_30="5.30" - desc_5_30="Ensure that the host's user namespaces are not shared (Scored)" - check_5_30="$id_5_30 - $desc_5_30" - starttestjson "$id_5_30" "$desc_5_30" + local id="5.30" + local desc="Ensure that the host's user namespaces are not shared (Scored)" + local check="$id - $desc" + starttestjson "$id" "$desc" totalChecks=$((totalChecks + 1)) @@ -1210,7 +1210,7 @@ check_5_30() { if docker inspect --format '{{ .HostConfig.UsernsMode }}' "$c" 2>/dev/null | grep -i 'host' >/dev/null 2>&1; then # If it's the first container, fail the test if [ $fail -eq 0 ]; then - warn "$check_5_30" + warn "$check" warn " * Namespace shared: $c" hostns_shared_containers="$hostns_shared_containers $c" fail=1 @@ -1222,7 +1222,7 @@ check_5_30() { done # We went through all the containers and found none with host's user namespace shared if [ $fail -eq 0 ]; then - pass "$check_5_30" + pass "$check" resulttestjson "PASS" currentScore=$((currentScore + 1)) else @@ -1237,10 +1237,10 @@ check_5_31() { return fi - id_5_31="5.31" - desc_5_31="Ensure that the Docker socket is not mounted inside any containers (Scored)" - check_5_31="$id_5_31 - $desc_5_31" - starttestjson "$id_5_31" "$desc_5_31" + local id="5.31" + local desc="Ensure that the Docker socket is not mounted inside any containers (Scored)" + local check="$id - $desc" + starttestjson "$id" "$desc" totalChecks=$((totalChecks + 1)) @@ -1250,7 +1250,7 @@ check_5_31() { if docker inspect --format '{{ .Mounts }}' "$c" 2>/dev/null | grep 'docker.sock' >/dev/null 2>&1; then # If it's the first container, fail the test if [ $fail -eq 0 ]; then - warn "$check_5_31" + warn "$check" warn " * Docker socket shared: $c" docker_sock_containers="$docker_sock_containers $c" fail=1 @@ -1262,7 +1262,7 @@ check_5_31() { done # We went through all the containers and found none with docker.sock shared if [ $fail -eq 0 ]; then - pass "$check_5_31" + pass "$check" resulttestjson "PASS" currentScore=$((currentScore + 1)) else diff --git a/tests/6_docker_security_operations.sh b/tests/6_docker_security_operations.sh index ce9b257..5dbfd20 100644 --- a/tests/6_docker_security_operations.sh +++ b/tests/6_docker_security_operations.sh @@ -2,19 +2,19 @@ check_6() { logit "\n" - id_6="6" - desc_6="Docker Security Operations" - check_6="$id_6 - $desc_6" - info "$check_6" - startsectionjson "$id_6" "$desc_6" + local id="6" + local desc="Docker Security Operations" + local check="$id - $desc" + info "$check" + startsectionjson "$id" "$desc" } # 6.1 check_6_1() { - id_6_1="6.1" - desc_6_1="Ensure that image sprawl is avoided (Not Scored)" - check_6_1="$id_6_1 - $desc_6_1" - starttestjson "$id_6_1" "$desc_6_1" + local id="6.1" + local desc="Ensure that image sprawl is avoided (Not Scored)" + local check="$id - $desc" + starttestjson "$id" "$desc" totalChecks=$((totalChecks + 1)) images=$(docker images -q | sort -u | wc -l | awk '{print $1}') @@ -26,7 +26,7 @@ check_6_1() { fi done - info "$check_6_1" + info "$check" info " * There are currently: $images images" if [ "$active_images" -lt "$((images / 2))" ]; then @@ -38,21 +38,21 @@ check_6_1() { # 6.2 check_6_2() { - id_6_2="6.2" - desc_6_2="Ensure that container sprawl is avoided (Not Scored)" - check_6_2="$id_6_2 - $desc_6_2" - starttestjson "$id_6_2" "$desc_6_2" + local id="6.2" + local desc="Ensure that container sprawl is avoided (Not Scored)" + local check="$id - $desc" + starttestjson "$id" "$desc" totalChecks=$((totalChecks + 1)) total_containers=$(docker info 2>/dev/null | grep "Containers" | awk '{print $2}') running_containers=$(docker ps -q | wc -l | awk '{print $1}') diff="$((total_containers - running_containers))" if [ "$diff" -gt 25 ]; then - info "$check_6_2" + info "$check" info " * There are currently a total of $total_containers containers, with only $running_containers of them currently running" resulttestjson "INFO" "$total_containers total/$running_containers running" else - info "$check_6_2" + info "$check" info " * There are currently a total of $total_containers containers, with $running_containers of them currently running" resulttestjson "INFO" "$total_containers total/$running_containers running" fi diff --git a/tests/7_docker_swarm_configuration.sh b/tests/7_docker_swarm_configuration.sh index c3b9187..fcc987f 100644 --- a/tests/7_docker_swarm_configuration.sh +++ b/tests/7_docker_swarm_configuration.sh @@ -2,27 +2,27 @@ check_7() { logit "\n" - id_7="7" - desc_7="Docker Swarm Configuration" - check_7="$id_7 - $desc_7" - info "$check_7" - startsectionjson "$id_7" "$desc_7" + local id="7" + local desc="Docker Swarm Configuration" + local check="$id - $desc" + info "$check" + startsectionjson "$id" "$desc" } # 7.1 check_7_1() { - id_7_1="7.1" - desc_7_1="Ensure swarm mode is not Enabled, if not needed (Scored)" - check_7_1="$id_7_1 - $desc_7_1" - starttestjson "$id_7_1" "$desc_7_1" + local id="7.1" + local desc="Ensure swarm mode is not Enabled, if not needed (Scored)" + local check="$id - $desc" + starttestjson "$id" "$desc" totalChecks=$((totalChecks + 1)) if docker info 2>/dev/null | grep -e "Swarm:*\sinactive\s*" >/dev/null 2>&1; then - pass "$check_7_1" + pass "$check" resulttestjson "PASS" currentScore=$((currentScore + 1)) else - warn "$check_7_1" + warn "$check" resulttestjson "WARN" currentScore=$((currentScore - 1)) fi @@ -30,25 +30,25 @@ check_7_1() { # 7.2 check_7_2() { - id_7_2="7.2" - desc_7_2="Ensure that the minimum number of manager nodes have been created in a swarm (Scored)" - check_7_2="$id_7_2 - $desc_7_2" - starttestjson "$id_7_2" "$desc_7_2" + local id="7.2" + local desc="Ensure that the minimum number of manager nodes have been created in a swarm (Scored)" + local check="$id - $desc" + starttestjson "$id" "$desc" totalChecks=$((totalChecks + 1)) if docker info 2>/dev/null | grep -e "Swarm:*\sactive\s*" >/dev/null 2>&1; then managernodes=$(docker node ls | grep -c "Leader") if [ "$managernodes" -eq 1 ]; then - pass "$check_7_2" + pass "$check" resulttestjson "PASS" currentScore=$((currentScore + 1)) else - warn "$check_7_2" + warn "$check" resulttestjson "WARN" currentScore=$((currentScore - 1)) fi else - pass "$check_7_2 (Swarm mode not enabled)" + pass "$check (Swarm mode not enabled)" resulttestjson "PASS" currentScore=$((currentScore + 1)) fi @@ -56,25 +56,25 @@ check_7_2() { # 7.3 check_7_3() { - id_7_3="7.3" - desc_7_3="Ensure that swarm services are bound to a specific host interface (Scored)" - check_7_3="$id_7_3 - $desc_7_3" - starttestjson "$id_7_3" "$desc_7_3" + local id="7.3" + local desc="Ensure that swarm services are bound to a specific host interface (Scored)" + local check="$id - $desc" + starttestjson "$id" "$desc" totalChecks=$((totalChecks + 1)) if docker info 2>/dev/null | grep -e "Swarm:*\sactive\s*" >/dev/null 2>&1; then $netbin -lnt | grep -e '\[::]:2377 ' -e ':::2377' -e '*:2377 ' -e ' 0\.0\.0\.0:2377 ' >/dev/null 2>&1 if [ $? -eq 1 ]; then - pass "$check_7_3" + pass "$check" resulttestjson "PASS" currentScore=$((currentScore + 1)) else - warn "$check_7_3" + warn "$check" resulttestjson "WARN" currentScore=$((currentScore - 1)) fi else - pass "$check_7_3 (Swarm mode not enabled)" + pass "$check (Swarm mode not enabled)" resulttestjson "PASS" currentScore=$((currentScore + 1)) fi @@ -82,10 +82,10 @@ check_7_3() { # 7.4 check_7_4() { - id_7_4="7.4" - desc_7_4="Ensure that all Docker swarm overlay networks are encrypted (Scored)" - check_7_4="$id_7_4 - $desc_7_4" - starttestjson "$id_7_4" "$desc_7_4" + local id="7.4" + local desc="Ensure that all Docker swarm overlay networks are encrypted (Scored)" + local check="$id - $desc" + starttestjson "$id" "$desc" totalChecks=$((totalChecks + 1)) fail=0 @@ -95,7 +95,7 @@ check_7_4() { grep -v 'encrypted:' 2>/dev/null 1>&2; then # If it's the first container, fail the test if [ $fail -eq 0 ]; then - warn "$check_7_4" + warn "$check" fail=1 fi warn " * Unencrypted overlay network: $(docker network inspect --format '{{ .Name }} ({{ .Scope }})' "$encnet")" @@ -104,7 +104,7 @@ check_7_4() { done # We went through all the networks and found none that are unencrypted if [ $fail -eq 0 ]; then - pass "$check_7_4" + pass "$check" resulttestjson "PASS" currentScore=$((currentScore + 1)) else @@ -115,24 +115,24 @@ check_7_4() { # 7.5 check_7_5() { - id_7_5="7.5" - desc_7_5="Ensure that Docker's secret management commands are used for managing secrets in a swarm cluster (Not Scored)" - check_7_5="$id_7_5 - $desc_7_5" - starttestjson "$id_7_5" "$desc_7_5" + local id="7.5" + local desc="Ensure that Docker's secret management commands are used for managing secrets in a swarm cluster (Not Scored)" + local check="$id - $desc" + starttestjson "$id" "$desc" totalChecks=$((totalChecks + 1)) if docker info 2>/dev/null | grep -e "Swarm:\s*active\s*" >/dev/null 2>&1; then if [ "$(docker secret ls -q | wc -l)" -ge 1 ]; then - pass "$check_7_5" + pass "$check" resulttestjson "PASS" currentScore=$((currentScore + 1)) else - info "$check_7_5" + info "$check" resulttestjson "INFO" currentScore=$((currentScore + 0)) fi else - pass "$check_7_5 (Swarm mode not enabled)" + pass "$check (Swarm mode not enabled)" resulttestjson "PASS" currentScore=$((currentScore + 1)) fi @@ -140,24 +140,24 @@ check_7_5() { # 7.6 check_7_6() { - id_7_6="7.6" - desc_7_6="Ensure that swarm manager is run in auto-lock mode (Scored)" - check_7_6="$id_7_6 - $desc_7_6" - starttestjson "$id_7_6" "$desc_7_6" + local id="7.6" + local desc="Ensure that swarm manager is run in auto-lock mode (Scored)" + local check="$id - $desc" + starttestjson "$id" "$desc" totalChecks=$((totalChecks + 1)) if docker info 2>/dev/null | grep -e "Swarm:\s*active\s*" >/dev/null 2>&1; then if ! docker swarm unlock-key 2>/dev/null | grep 'SWMKEY' 2>/dev/null 1>&2; then - warn "$check_7_6" + warn "$check" resulttestjson "WARN" currentScore=$((currentScore - 1)) else - pass "$check_7_6" + pass "$check" resulttestjson "PASS" currentScore=$((currentScore + 1)) fi else - pass "$check_7_6 (Swarm mode not enabled)" + pass "$check (Swarm mode not enabled)" resulttestjson "PASS" currentScore=$((currentScore + 1)) fi @@ -165,18 +165,18 @@ check_7_6() { # 7.7 check_7_7() { - id_7_7="7.7" - desc_7_7="Ensure that the swarm manager auto-lock key is rotated periodically (Not Scored)" - check_7_7="$id_7_7 - $desc_7_7" - starttestjson "$id_7_7" "$desc_7_7" + local id="7.7" + local desc="Ensure that the swarm manager auto-lock key is rotated periodically (Not Scored)" + local check="$id - $desc" + starttestjson "$id" "$desc" totalChecks=$((totalChecks + 1)) if docker info 2>/dev/null | grep -e "Swarm:\s*active\s*" >/dev/null 2>&1; then - note "$check_7_7" + note "$check" resulttestjson "NOTE" currentScore=$((currentScore + 0)) else - pass "$check_7_7 (Swarm mode not enabled)" + pass "$check (Swarm mode not enabled)" resulttestjson "PASS" currentScore=$((currentScore + 1)) fi @@ -184,24 +184,24 @@ check_7_7() { # 7.8 check_7_8() { - id_7_8="7.8" - desc_7_8="Ensure that node certificates are rotated as appropriate (Not Scored)" - check_7_8="$id_7_8 - $desc_7_8" - starttestjson "$id_7_8" "$desc_7_8" + local id="7.8" + local desc="Ensure that node certificates are rotated as appropriate (Not Scored)" + local check="$id - $desc" + starttestjson "$id" "$desc" totalChecks=$((totalChecks + 1)) if docker info 2>/dev/null | grep -e "Swarm:\s*active\s*" >/dev/null 2>&1; then if docker info 2>/dev/null | grep "Expiry Duration: 2 days"; then - pass "$check_7_8" + pass "$check" resulttestjson "PASS" currentScore=$((currentScore + 1)) else - info "$check_7_8" + info "$check" resulttestjson "INFO" currentScore=$((currentScore + 0)) fi else - pass "$check_7_8 (Swarm mode not enabled)" + pass "$check (Swarm mode not enabled)" resulttestjson "PASS" currentScore=$((currentScore + 1)) fi @@ -209,18 +209,18 @@ check_7_8() { # 7.9 check_7_9() { - id_7_9="7.9" - desc_7_9="Ensure that CA certificates are rotated as appropriate (Not Scored)" - check_7_9="$id_7_9 - $desc_7_9" - starttestjson "$id_7_9" "$desc_7_9" + local id="7.9" + local desc="Ensure that CA certificates are rotated as appropriate (Not Scored)" + local check="$id - $desc" + starttestjson "$id" "$desc" totalChecks=$((totalChecks + 1)) if docker info 2>/dev/null | grep -e "Swarm:\s*active\s*" >/dev/null 2>&1; then - info "$check_7_9" + info "$check" resulttestjson "INFO" currentScore=$((currentScore + 0)) else - pass "$check_7_9 (Swarm mode not enabled)" + pass "$check (Swarm mode not enabled)" resulttestjson "PASS" currentScore=$((currentScore + 1)) fi @@ -228,18 +228,18 @@ check_7_9() { # 7.10 check_7_10() { - id_7_10="7.10" - desc_7_10="Ensure that management plane traffic is separated from data plane traffic (Not Scored)" - check_7_10="$id_7_10 - $desc_7_10" - starttestjson "$id_7_10" "$desc_7_10" + local id="7.10" + local desc="Ensure that management plane traffic is separated from data plane traffic (Not Scored)" + local check="$id - $desc" + starttestjson "$id" "$desc" totalChecks=$((totalChecks + 1)) if docker info 2>/dev/null | grep -e "Swarm:\s*active\s*" >/dev/null 2>&1; then - info "$check_7_10" + info "$check" resulttestjson "INFO" currentScore=$((currentScore + 0)) else - pass "$check_7_10 (Swarm mode not enabled)" + pass "$check (Swarm mode not enabled)" resulttestjson "PASS" currentScore=$((currentScore + 1)) fi diff --git a/tests/8_docker_enterprise_configuration.sh b/tests/8_docker_enterprise_configuration.sh index 9fce978..bb95a7d 100644 --- a/tests/8_docker_enterprise_configuration.sh +++ b/tests/8_docker_enterprise_configuration.sh @@ -2,11 +2,11 @@ check_8() { logit "\n" - id_8="8" - desc_8="Docker Enterprise Configuration" - check_8="$id_8 - $desc_8" - info "$check_8" - startsectionjson "$id_8" "$desc_8" + local id="8" + local desc="Docker Enterprise Configuration" + local check="$id - $desc" + info "$check" + startsectionjson "$id" "$desc" } check_product_license() { @@ -23,10 +23,10 @@ check_8_1() { return fi - id_8_1="8.1" - desc_8_1="Universal Control Plane Configuration" - check_8_1="$id_8_1 - $desc_8_1" - info "$check_8_1" + local id="8.1" + local desc="Universal Control Plane Configuration" + local check="$id - $desc" + info "$check" } # 8.1.1 @@ -35,13 +35,13 @@ check_8_1_1() { return fi - id_8_1_1="8.1.1" - desc_8_1_1="Configure the LDAP authentication service (Scored)" - check_8_1_1="$id_8_1_1 - $desc_8_1_1" - starttestjson "$id_8_1_1" "$desc_8_1_1" + local id="8.1.1" + local desc="Configure the LDAP authentication service (Scored)" + local check="$id - $desc" + starttestjson "$id" "$desc" totalChecks=$((totalChecks + 1)) - note "$check_8_1_1" + note "$check" resulttestjson "INFO" currentScore=$((currentScore + 0)) } @@ -52,13 +52,13 @@ check_8_1_2() { return fi - id_8_1_2="8.1.2" - desc_8_1_2="Use external certificates (Scored)" - check_8_1_2="$id_8_1_2 - $desc_8_1_2" - starttestjson "$id_8_1_2" "$desc_8_1_2" + local id="8.1.2" + local desc="Use external certificates (Scored)" + local check="$id - $desc" + starttestjson "$id" "$desc" totalChecks=$((totalChecks + 1)) - note "$check_8_1_2" + note "$check" resulttestjson "INFO" currentScore=$((currentScore + 0)) } @@ -69,13 +69,13 @@ check_8_1_3() { return fi - id_8_1_3="8.1.3" - desc_8_1_3="Enforce the use of client certificate bundles for unprivileged users (Not Scored)" - check_8_1_3="$id_8_1_3 - $desc_8_1_3" - starttestjson "$id_8_1_3" "$desc_8_1_3" + local id="8.1.3" + local desc="Enforce the use of client certificate bundles for unprivileged users (Not Scored)" + local check="$id - $desc" + starttestjson "$id" "$desc" totalChecks=$((totalChecks + 1)) - note "$check_8_1_3" + note "$check" resulttestjson "INFO" currentScore=$((currentScore + 0)) } @@ -86,13 +86,13 @@ check_8_1_4() { return fi - id_8_1_4="8.1.4" - desc_8_1_4="Configure applicable cluster role-based access control policies (Not Scored)" - check_8_1_4="$id_8_1_4 - $desc_8_1_4" - starttestjson "$id_8_1_4" "$desc_8_1_4" + local id="8.1.4" + local desc="Configure applicable cluster role-based access control policies (Not Scored)" + local check="$id - $desc" + starttestjson "$id" "$desc" totalChecks=$((totalChecks + 1)) - note "$check_8_1_4" + note "$check" resulttestjson "INFO" currentScore=$((currentScore + 0)) } @@ -103,13 +103,13 @@ check_8_1_5() { return fi - id_8_1_5="8.1.5" - desc_8_1_5="Enable signed image enforcement (Scored)" - check_8_1_5="$id_8_1_5 - $desc_8_1_5" - starttestjson "$id_8_1_5" "$desc_8_1_5" + local id="8.1.5" + local desc="Enable signed image enforcement (Scored)" + local check="$id - $desc" + starttestjson "$id" "$desc" totalChecks=$((totalChecks + 1)) - note "$check_8_1_5" + note "$check" resulttestjson "INFO" currentScore=$((currentScore + 0)) } @@ -120,13 +120,13 @@ check_8_1_6() { return fi - id_8_1_6="8.1.6" - desc_8_1_6="Set the Per-User Session Limit to a value of '3' or lower (Scored)" - check_8_1_6="$id_8_1_6 - $desc_8_1_6" - starttestjson "$id_8_1_6" "$desc_8_1_6" + local id="8.1.6" + local desc="Set the Per-User Session Limit to a value of '3' or lower (Scored)" + local check="$id - $desc" + starttestjson "$id" "$desc" totalChecks=$((totalChecks + 1)) - note "$check_8_1_6" + note "$check" resulttestjson "INFO" currentScore=$((currentScore + 0)) } @@ -137,13 +137,13 @@ check_8_1_7() { return fi - id_8_1_7="8.1.7" - desc_8_1_7="Set the 'Lifetime Minutes' and 'Renewal Threshold Minutes' values to '15' or lower and '0' respectively (Scored)" - check_8_1_7="$id_8_1_7 - $desc_8_1_7" - starttestjson "$id_8_1_7" "$desc_8_1_7" + local id="8.1.7" + local desc="Set the 'Lifetime Minutes' and 'Renewal Threshold Minutes' values to '15' or lower and '0' respectively (Scored)" + local check="$id - $desc" + starttestjson "$id" "$desc" totalChecks=$((totalChecks + 1)) - note "$check_8_1_7" + note "$check" resulttestjson "INFO" currentScore=$((currentScore + 0)) } @@ -154,10 +154,10 @@ check_8_2() { fi logit "\n" - id_8_2="8.2" - desc_8_2="Docker Trusted Registry Configuration" - check_8_2="$id_8_2 - $desc_8_2" - info "$check_8_2" + local id="8.2" + local desc="Docker Trusted Registry Configuration" + local check="$id - $desc" + info "$check" } check_8_2_1() { @@ -165,13 +165,13 @@ check_8_2_1() { return fi - id_8_2_1="8.2.1" - desc_8_2_1="Enable image vulnerability scanning (Scored)" - check_8_2_1="$id_8_2_1 - $desc_8_2_1" - starttestjson "$id_8_2_1" "$desc_8_2_1" + local id="8.2.1" + local desc="Enable image vulnerability scanning (Scored)" + local check="$id - $desc" + starttestjson "$id" "$desc" totalChecks=$((totalChecks + 1)) - note "$check_8_2_1" + note "$check" resulttestjson "INFO" currentScore=$((currentScore + 0)) } diff --git a/tests/99_community_checks.sh b/tests/99_community_checks.sh index 9ad1774..e0da5e0 100644 --- a/tests/99_community_checks.sh +++ b/tests/99_community_checks.sh @@ -1,22 +1,22 @@ #!/bin/sh check_c() { logit "\n" - id_99="99" - desc_99="Community contributed checks" - check_99="$id_99 - $desc_99" - info "$check_99" - startsectionjson "$id_99" "$desc_99" + local id="99" + local desc="Community contributed checks" + local check="$id - $desc" + info "$check" + startsectionjson "$id" "$desc" } # check_c_1 check_c_1() { - check_c_1="C.1 - This is a example check" + local check="C.1 - This is a example check" totalChecks=$((totalChecks + 1)) if docker info --format='{{ .Architecture }}' | grep 'x86_64' 2>/dev/null 1>&2; then - pass "$check_c_1" + pass "$check" resulttestjson "PASS" else - warn "$check_c_1" + warn "$check" resulttestjson "WARN" fi } @@ -27,29 +27,29 @@ check_c_2() { | awk '{print $NF; exit}' | tr -d '[:alpha:]-,.' | cut -c 1-4) totalChecks=$((totalChecks + 1)) - id_c_2="C.2" - desc_c_2="Ensure operations on legacy registry (v1) are Disabled" - check_c_2="$id_c_2 - $desc_c_2" - starttestjson "$id_c_2" "$desc_c_2" + local id="C.2" + local desc="Ensure operations on legacy registry (v1) are Disabled" + local check="$id - $desc" + starttestjson "$id" "$desc" if [ "$docker_version" -lt 1712 ]; then if get_docker_configuration_file_args 'disable-legacy-registry' | grep 'true' >/dev/null 2>&1; then - pass "$check_c_2" + pass "$check" resulttestjson "PASS" currentScore=$((currentScore + 1)) elif get_docker_effective_command_line_args '--disable-legacy-registry' | grep "disable-legacy-registry" >/dev/null 2>&1; then - pass "$check_c_2" + pass "$check" resulttestjson "PASS" currentScore=$((currentScore + 1)) else - warn "$check_c_2" + warn "$check" resulttestjson "WARN" currentScore=$((currentScore - 1)) fi else - desc_c_2="$desc_c_2 (Deprecated)" - check_c_2="$id_c_2 - $desc_c_2" - info "$check_c_2" + local desc="$desc (Deprecated)" + local check="$id - $desc" + info "$check" resulttestjson "INFO" fi } From 8e0daa11def5458a837b85076cc6530edc32ddd9 Mon Sep 17 00:00:00 2001 From: Razvan Stoica Date: Tue, 9 Mar 2021 13:27:32 +0200 Subject: [PATCH 02/48] Print date and time in ISO 8601 UTC format --- docker-bench-security.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docker-bench-security.sh b/docker-bench-security.sh index 0d5424e..8d3f7d1 100755 --- a/docker-bench-security.sh +++ b/docker-bench-security.sh @@ -103,7 +103,7 @@ fi totalChecks=0 currentScore=0 -logit "Initializing $(date)\n" +logit "Initializing $(date +%Y-%m-%dT%H:%m:%S%:z)\n" beginjson "$version" "$(date +%s)" # Load all the tests from tests/ and run them From c3511209f9ecd05d6f57bd4493c9c00da39af938 Mon Sep 17 00:00:00 2001 From: Razvan Stoica Date: Tue, 9 Mar 2021 13:35:40 +0200 Subject: [PATCH 03/48] Add support for logging remediation measures in JSON format --- output_lib.sh | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/output_lib.sh b/output_lib.sh index 384dfe0..efef321 100644 --- a/output_lib.sh +++ b/output_lib.sh @@ -93,4 +93,12 @@ resulttestjson() { itemsJson=$(printf "["; ISEP=""; ITEMCOUNT=0; for item in $truncItems; do printf "%s\"%s\"" "$ISEP" "$item"; ISEP=","; done; printf "]") printf "\"result\": \"%s\", \"details\": \"%s: %s\", \"items\": %s}" "$1" "$2" "$truncItems" "$itemsJson" | tee -a "$logger.json" 2>/dev/null 1>&2 fi + # Log remediation measure + if [ ! -z "$remediation" ]; then + printf ", \"remediation\": \"%s\"" "$remediation" | tee -a "$logger.json" 2>/dev/null 1>&2 + if [ ! -z "$remediationImpact" ]; then + printf ", \"remediation-impact\": \"%s\"" "$remediationImpact" | tee -a "$logger.json" 2>/dev/null 1>&2 + fi + fi + printf "}" | tee -a "$logger.json" 2>/dev/null 1>&2 } From 519f20befd2b90bac31b1f837d35138e7a753d2e Mon Sep 17 00:00:00 2001 From: Razvan Stoica Date: Tue, 9 Mar 2021 16:06:38 +0200 Subject: [PATCH 04/48] Append JSON logs when run multiple times --- docker-bench-security.sh | 1 + output_lib.sh | 19 ++++++++++++++----- 2 files changed, 15 insertions(+), 5 deletions(-) diff --git a/docker-bench-security.sh b/docker-bench-security.sh index 8d3f7d1..0fd26c2 100755 --- a/docker-bench-security.sh +++ b/docker-bench-security.sh @@ -104,6 +104,7 @@ totalChecks=0 currentScore=0 logit "Initializing $(date +%Y-%m-%dT%H:%m:%S%:z)\n" +appendjson beginjson "$version" "$(date +%s)" # Load all the tests from tests/ and run them diff --git a/output_lib.sh b/output_lib.sh index efef321..6bcd6bc 100644 --- a/output_lib.sh +++ b/output_lib.sh @@ -38,12 +38,21 @@ yell () { printf "%b\n" "${bldylw}$1${txtrst}\n" } +appendjson () { + if [ -s "$logger.json" ]; then + tail -n 1 "$logger.json" | wc -c | xargs -I {} truncate "$logger.json" -s -{} + printf "},\n" | tee -a "$logger.json" 2>/dev/null 1>&2 + else + printf "[" | tee -a "$logger.json" 2>/dev/null 1>&2 + fi +} + beginjson () { - printf "{\n \"dockerbenchsecurity\": \"%s\",\n \"start\": %s,\n \"tests\": [" "$1" "$2" | tee "$logger.json" 2>/dev/null 1>&2 + printf "{\n \"dockerbenchsecurity\": \"%s\",\n \"start\": %s,\n \"tests\": [" "$1" "$2" | tee -a "$logger.json" 2>/dev/null 1>&2 } endjson (){ - printf "\n ], \"checks\": %s, \"score\": %s, \"end\": %s \n}\n" "$1" "$2" "$3" | tee -a "$logger.json" 2>/dev/null 1>&2 + printf "\n ], \"checks\": %s, \"score\": %s, \"end\": %s \n}]" "$1" "$2" "$3" | tee -a "$logger.json" 2>/dev/null 1>&2 } logjson (){ @@ -69,10 +78,10 @@ starttestjson() { resulttestjson() { if [ $# -eq 1 ]; then - printf "\"result\": \"%s\"}" "$1" | tee -a "$logger.json" 2>/dev/null 1>&2 + printf "\"result\": \"%s\"" "$1" | tee -a "$logger.json" 2>/dev/null 1>&2 elif [ $# -eq 2 ]; then # Result also contains details - printf "\"result\": \"%s\", \"details\": \"%s\"}" "$1" "$2" | tee -a "$logger.json" 2>/dev/null 1>&2 + printf "\"result\": \"%s\", \"details\": \"%s\"" "$1" "$2" | tee -a "$logger.json" 2>/dev/null 1>&2 else # Result also includes details and a list of items. Add that directly to details and to an array property "items" # Also limit the number of items to $limit, if $limit is non-zero @@ -91,7 +100,7 @@ resulttestjson() { truncItems=$3 fi itemsJson=$(printf "["; ISEP=""; ITEMCOUNT=0; for item in $truncItems; do printf "%s\"%s\"" "$ISEP" "$item"; ISEP=","; done; printf "]") - printf "\"result\": \"%s\", \"details\": \"%s: %s\", \"items\": %s}" "$1" "$2" "$truncItems" "$itemsJson" | tee -a "$logger.json" 2>/dev/null 1>&2 + printf "\"result\": \"%s\", \"details\": \"%s: %s\", \"items\": %s" "$1" "$2" "$truncItems" "$itemsJson" | tee -a "$logger.json" 2>/dev/null 1>&2 fi # Log remediation measure if [ ! -z "$remediation" ]; then From 58205d4ef506e1ca4fc5bd592252416996c84474 Mon Sep 17 00:00:00 2001 From: Razvan Stoica Date: Tue, 9 Mar 2021 17:50:00 +0200 Subject: [PATCH 05/48] Add new programs to the list of required programs --- docker-bench-security.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docker-bench-security.sh b/docker-bench-security.sh index 0fd26c2..9ad5143 100755 --- a/docker-bench-security.sh +++ b/docker-bench-security.sh @@ -24,7 +24,7 @@ readonly myname export PATH="$PATH:/bin:/sbin:/usr/bin:/usr/local/bin:/usr/sbin/" # Check for required program(s) -req_progs='awk docker grep stat' +req_progs='awk docker grep stat tee tail wc xargs truncate' for p in $req_progs; do command -v "$p" >/dev/null 2>&1 || { printf "%s command not found.\n" "$p"; exit 1; } done From c00ef4330ba49f7fd44d4459e5d7b7303606050b Mon Sep 17 00:00:00 2001 From: Razvan Stoica Date: Tue, 9 Mar 2021 21:43:25 +0200 Subject: [PATCH 06/48] Add details about remediations measure for host configuration tests --- docker-bench-security.sh | 2 +- output_lib.sh | 6 ++-- tests/1_host_configuration.sh | 64 +++++++++++++++++++++++++++++++++-- 3 files changed, 66 insertions(+), 6 deletions(-) diff --git a/docker-bench-security.sh b/docker-bench-security.sh index 9ad5143..8d4e8fb 100755 --- a/docker-bench-security.sh +++ b/docker-bench-security.sh @@ -2,7 +2,7 @@ # ------------------------------------------------------------------------------ # Docker Bench for Security # -# Docker, Inc. (c) 2015- +# Docker, Inc. (c) 2015-2021 # # Checks for dozens of common best-practices around deploying Docker containers in production. # ------------------------------------------------------------------------------ diff --git a/output_lib.sh b/output_lib.sh index 6bcd6bc..0e4c6a0 100644 --- a/output_lib.sh +++ b/output_lib.sh @@ -52,7 +52,7 @@ beginjson () { } endjson (){ - printf "\n ], \"checks\": %s, \"score\": %s, \"end\": %s \n}]" "$1" "$2" "$3" | tee -a "$logger.json" 2>/dev/null 1>&2 + printf "\n ], \"checks\": %s, \"score\": %s, \"end\": %s\n}]" "$1" "$2" "$3" | tee -a "$logger.json" 2>/dev/null 1>&2 } logjson (){ @@ -103,9 +103,9 @@ resulttestjson() { printf "\"result\": \"%s\", \"details\": \"%s: %s\", \"items\": %s" "$1" "$2" "$truncItems" "$itemsJson" | tee -a "$logger.json" 2>/dev/null 1>&2 fi # Log remediation measure - if [ ! -z "$remediation" ]; then + if [ -n "$remediation" ]; then printf ", \"remediation\": \"%s\"" "$remediation" | tee -a "$logger.json" 2>/dev/null 1>&2 - if [ ! -z "$remediationImpact" ]; then + if [ -n "$remediationImpact" ]; then printf ", \"remediation-impact\": \"%s\"" "$remediationImpact" | tee -a "$logger.json" 2>/dev/null 1>&2 fi fi diff --git a/tests/1_host_configuration.sh b/tests/1_host_configuration.sh index 55063f5..b2aa611 100644 --- a/tests/1_host_configuration.sh +++ b/tests/1_host_configuration.sh @@ -69,6 +69,7 @@ check_1_2() { check_1_2_1() { local id="1.2.1" local desc="Ensure a separate partition for containers has been created (Scored)" + local remediation="For new installations, you should create a separate partition for the /var/lib/docker mount point. For systems that have already been installed, you should use the Logical Volume Manager (LVM) within Linux to create a new partition." local check="$id - $desc" starttestjson "$id" "$desc" @@ -84,6 +85,7 @@ check_1_2_1() { currentScore=$((currentScore + 1)) else warn "$check" + info " * Remediation: $remediation" resulttestjson "WARN" currentScore=$((currentScore - 1)) fi @@ -114,6 +116,8 @@ check_1_2_2() { check_1_2_3() { local id="1.2.3" local desc="Ensure auditing is configured for the Docker daemon (Scored)" + local remediation="Install and configure auditd using the following command: sudo apt-get install auditd. Add the following line to the /etc/audit/rules.d/audit.rules file: -w /usr/bin/dockerd -k docker. Then restart the audit daemon using the following command: service auditd restart." + local remediationImpact="Because the audit can generate large log files, you need to make sure that they are rotated and archived periodically. It is a good idea to create a separate partition for audit logs to avoid filling up other critical partitions." local check="$id - $desc" starttestjson "$id" "$desc" @@ -126,7 +130,8 @@ check_1_2_3() { currentScore=$((currentScore + 1)) else warn "$check" - warn " * Install auditd" + info " * Remediation: $remediation" + info " * Remediation impact: $remediationImpact" resulttestjson "WARN" currentScore=$((currentScore - 1)) fi @@ -136,7 +141,8 @@ check_1_2_3() { currentScore=$((currentScore + 1)) else warn "$check" - warn " * Install auditd" + info " * Remediation: $remediation" + info " * Remediation impact: $remediationImpact" resulttestjson "WARN" currentScore=$((currentScore - 1)) fi @@ -146,6 +152,8 @@ check_1_2_3() { check_1_2_4() { local id="1.2.4" local desc="Ensure auditing is configured for Docker files and directories - /var/lib/docker (Scored)" + local remediation="Install and configure auditd using the following command: sudo apt-get install auditd. Add the following line to the /etc/audit/rules.d/audit.rules file: -w /var/lib/docker -k docker. Then restart the audit daemon using the following command: service auditd restart." + local remediationImpact="Because the audit can generate large log files, you need to make sure that they are rotated and archived periodically. It is a good idea to create a separate partition for audit logs to avoid filling up other critical partitions." local check="$id - $desc" starttestjson "$id" "$desc" @@ -159,6 +167,8 @@ check_1_2_4() { currentScore=$((currentScore + 1)) else warn "$check" + info " * Remediation: $remediation" + info " * Remediation impact: $remediationImpact" resulttestjson "WARN" currentScore=$((currentScore - 1)) fi @@ -168,6 +178,8 @@ check_1_2_4() { currentScore=$((currentScore + 1)) else warn "$check" + info " * Remediation: $remediation" + info " * Remediation impact: $remediationImpact" resulttestjson "WARN" currentScore=$((currentScore - 1)) fi @@ -183,6 +195,8 @@ check_1_2_4() { check_1_2_5() { local id="1.2.5" local desc="Ensure auditing is configured for Docker files and directories - /etc/docker (Scored)" + local remediation="Install and configure auditd using the following command: sudo apt-get install auditd. Add the following line to the /etc/audit/rules.d/audit.rules file: -w /etc/docker -k docker. Then restart the audit daemon using the following command: service auditd restart." + local remediationImpact="Because the audit can generate large log files, you need to make sure that they are rotated and archived periodically. It is a good idea to create a separate partition for audit logs to avoid filling up other critical partitions." local check="$id - $desc" starttestjson "$id" "$desc" @@ -196,6 +210,8 @@ check_1_2_5() { currentScore=$((currentScore + 1)) else warn "$check" + info " * Remediation: $remediation" + info " * Remediation impact: $remediationImpact" resulttestjson "WARN" currentScore=$((currentScore - 1)) fi @@ -205,6 +221,8 @@ check_1_2_5() { currentScore=$((currentScore + 1)) else warn "$check" + info " * Remediation: $remediation" + info " * Remediation impact: $remediationImpact" resulttestjson "WARN" currentScore=$((currentScore - 1)) fi @@ -220,6 +238,8 @@ fi check_1_2_6() { local id="1.2.6" local desc="Ensure auditing is configured for Docker files and directories - docker.service (Scored)" + local remediation="Install and configure auditd using the following command: sudo apt-get install auditd. Add the following line to the /etc/audit/rules.d/audit.rules file: -w $(systemctl show -p FragmentPath docker.service | sed 's/.*=//') -k docker. Then restart the audit daemon using the following command: service auditd restart." + local remediationImpact="Because the audit can generate large log files, you need to make sure that they are rotated and archived periodically. It is a good idea to create a separate partition for audit logs to avoid filling up other critical partitions." local check="$id - $desc" starttestjson "$id" "$desc" @@ -233,6 +253,8 @@ check_1_2_6() { currentScore=$((currentScore + 1)) else warn "$check" + info " * Remediation: $remediation" + info " * Remediation impact: $remediationImpact" resulttestjson "WARN" currentScore=$((currentScore - 1)) fi @@ -242,6 +264,8 @@ check_1_2_6() { currentScore=$((currentScore + 1)) else warn "$check" + info " * Remediation: $remediation" + info " * Remediation impact: $remediationImpact" resulttestjson "WARN" currentScore=$((currentScore - 1)) fi @@ -257,6 +281,8 @@ check_1_2_6() { check_1_2_7() { local id="1.2.7" local desc="Ensure auditing is configured for Docker files and directories - docker.socket (Scored)" + local remediation="Install and configure auditd using the following command: sudo apt-get install auditd. Add the following line to the /etc/audit/rules.d/audit.rules file: -w $(systemctl show -p FragmentPath docker.socket | sed 's/.*=//') -k docker. Then restart the audit daemon using the following command: service auditd restart." + local remediationImpact="Because the audit can generate large log files, you need to make sure that they are rotated and archived periodically. It is a good idea to create a separate partition for audit logs to avoid filling up other critical partitions." local check="$id - $desc" starttestjson "$id" "$desc" @@ -270,6 +296,8 @@ check_1_2_7() { currentScore=$((currentScore + 1)) else warn "$check" + info " * Remediation: $remediation" + info " * Remediation impact: $remediationImpact" resulttestjson "WARN" currentScore=$((currentScore - 1)) fi @@ -279,6 +307,8 @@ check_1_2_7() { currentScore=$((currentScore + 1)) else warn "$check" + info " * Remediation: $remediation" + info " * Remediation impact: $remediationImpact" resulttestjson "WARN" currentScore=$((currentScore - 1)) fi @@ -294,6 +324,8 @@ check_1_2_7() { check_1_2_8() { local id="1.2.8" local desc="Ensure auditing is configured for Docker files and directories - /etc/default/docker (Scored)" + local remediation="Install and configure auditd using the following command: sudo apt-get install auditd. Add the following line to the /etc/audit/rules.d/audit.rules file: -w /etc/default/docker -k docker. Then restart the audit daemon using the following command: service auditd restart." + local remediationImpact="Because the audit can generate large log files, you need to make sure that they are rotated and archived periodically. It is a good idea to create a separate partition for audit logs to avoid filling up other critical partitions." local check="$id - $desc" starttestjson "$id" "$desc" @@ -307,6 +339,8 @@ check_1_2_8() { currentScore=$((currentScore + 1)) else warn "$check" + info " * Remediation: $remediation" + info " * Remediation impact: $remediationImpact" resulttestjson "WARN" currentScore=$((currentScore - 1)) fi @@ -316,6 +350,8 @@ check_1_2_8() { currentScore=$((currentScore + 1)) else warn "$check" + info " * Remediation: $remediation" + info " * Remediation impact: $remediationImpact" resulttestjson "WARN" currentScore=$((currentScore - 1)) fi @@ -331,6 +367,8 @@ check_1_2_8() { check_1_2_9() { local id="1.2.9" local desc="Ensure auditing is configured for Docker files and directories - /etc/sysconfig/docker (Scored)" + local remediation="Install and configure auditd using the following command: sudo apt-get install auditd. Add the following line to the /etc/audit/rules.d/audit.rules file: -w /etc/sysconfig/docker -k docker. Then restart the audit daemon using the following command: service auditd restart." + local remediationImpact="Because the audit can generate large log files, you need to make sure that they are rotated and archived periodically. It is a good idea to create a separate partition for audit logs to avoid filling up other critical partitions." local check="$id - $desc" starttestjson "$id" "$desc" @@ -344,6 +382,8 @@ check_1_2_9() { currentScore=$((currentScore + 1)) else warn "$check" + info " * Remediation: $remediation" + info " * Remediation impact: $remediationImpact" resulttestjson "WARN" currentScore=$((currentScore - 1)) fi @@ -353,6 +393,8 @@ check_1_2_9() { currentScore=$((currentScore + 1)) else warn "$check" + info " * Remediation: $remediation" + info " * Remediation impact: $remediationImpact" resulttestjson "WARN" currentScore=$((currentScore - 1)) fi @@ -368,6 +410,8 @@ check_1_2_9() { check_1_2_10() { local id="1.2.10" local desc="Ensure auditing is configured for Docker files and directories - /etc/docker/daemon.json (Scored)" + local remediation="Install and configure auditd using the following command: sudo apt-get install auditd. Add the following line to the /etc/audit/rules.d/audit.rules file: -w /etc/docker/daemon.json -k docker. Then restart the audit daemon using the following command: service auditd restart." + local remediationImpact="Because the audit can generate large log files, you need to make sure that they are rotated and archived periodically. It is a good idea to create a separate partition for audit logs to avoid filling up other critical partitions." local check="$id - $desc" starttestjson "$id" "$desc" @@ -381,6 +425,8 @@ check_1_2_10() { currentScore=$((currentScore + 1)) else warn "$check" + info " * Remediation: $remediation" + info " * Remediation impact: $remediationImpact" resulttestjson "WARN" currentScore=$((currentScore - 1)) fi @@ -390,6 +436,8 @@ check_1_2_10() { currentScore=$((currentScore + 1)) else warn "$check" + info " * Remediation: $remediation" + info " * Remediation impact: $remediationImpact" resulttestjson "WARN" currentScore=$((currentScore - 1)) fi @@ -405,6 +453,8 @@ check_1_2_10() { check_1_2_11() { local id="1.2.11" local desc="Ensure auditing is configured for Docker files and directories - /usr/bin/containerd (Scored)" + local remediation="Install and configure auditd using the following command: sudo apt-get install auditd. Add the following line to the /etc/audit/rules.d/audit.rules file: -w /usr/bin/containerd -k docker. Then restart the audit daemon using the following command: service auditd restart." + local remediationImpact="Because the audit can generate large log files, you need to make sure that they are rotated and archived periodically. It is a good idea to create a separate partition for audit logs to avoid filling up other critical partitions." local check="$id - $desc" starttestjson "$id" "$desc" @@ -418,6 +468,8 @@ check_1_2_11() { currentScore=$((currentScore + 1)) else warn "$check" + info " * Remediation: $remediation" + info " * Remediation impact: $remediationImpact" resulttestjson "WARN" currentScore=$((currentScore - 1)) fi @@ -427,6 +479,8 @@ check_1_2_11() { currentScore=$((currentScore + 1)) else warn "$check" + info " * Remediation: $remediation" + info " * Remediation impact: $remediationImpact" resulttestjson "WARN" currentScore=$((currentScore - 1)) fi @@ -442,6 +496,8 @@ check_1_2_11() { check_1_2_12() { local id="1.2.12" local desc="Ensure auditing is configured for Docker files and directories - /usr/sbin/runc (Scored)" + local remediation="Install and configure auditd using the following command: sudo apt-get install auditd. Add the following line to the /etc/audit/rules.d/audit.rules file: -w /usr/sbin/runc -k docker. Then restart the audit daemon using the following command: service auditd restart." + local remediationImpact="Because the audit can generate large log files, you need to make sure that they are rotated and archived periodically. It is a good idea to create a separate partition for audit logs to avoid filling up other critical partitions." local check="$id - $desc" starttestjson "$id" "$desc" @@ -455,6 +511,8 @@ check_1_2_12() { currentScore=$((currentScore + 1)) else warn "$check" + info " * Remediation: $remediation" + info " * Remediation impact: $remediationImpact" resulttestjson "WARN" currentScore=$((currentScore - 1)) fi @@ -464,6 +522,8 @@ check_1_2_12() { currentScore=$((currentScore + 1)) else warn "$check" + info " * Remediation: $remediation" + info " * Remediation impact: $remediationImpact" resulttestjson "WARN" currentScore=$((currentScore - 1)) fi From 2132b03b92f03940fa1c0a69fc7cf339aa5d49e8 Mon Sep 17 00:00:00 2001 From: Razvan Stoica Date: Wed, 10 Mar 2021 10:01:18 +0200 Subject: [PATCH 07/48] Usage instructions aligned between the README.md and docker-bench-security.sh files --- README.md | 1 + docker-bench-security.sh | 6 +++--- 2 files changed, 4 insertions(+), 3 deletions(-) diff --git a/README.md b/README.md index 57b13ca..cde2329 100644 --- a/README.md +++ b/README.md @@ -88,6 +88,7 @@ version 1.13.0 or later. -e CHECK optional Comma delimited list of specific check(s) to exclude -i INCLUDE optional Comma delimited list of patterns within a container or image name to check -x EXCLUDE optional Comma delimited list of patterns within a container or image name to exclude from check + -n LIMIT optional In JSON output, when reporting lists of items (containers, images, etc.), limit the number of reported items to LIMIT. Default 0 (no limit). ``` By default the Docker Bench for Security script will run all available CIS tests diff --git a/docker-bench-security.sh b/docker-bench-security.sh index 8d4e8fb..1773d88 100755 --- a/docker-bench-security.sh +++ b/docker-bench-security.sh @@ -1,11 +1,11 @@ #!/bin/sh -# ------------------------------------------------------------------------------ +# -------------------------------------------------------------------------------------------- # Docker Bench for Security # # Docker, Inc. (c) 2015-2021 # # Checks for dozens of common best-practices around deploying Docker containers in production. -# ------------------------------------------------------------------------------ +# -------------------------------------------------------------------------------------------- version='1.3.5' @@ -50,7 +50,7 @@ usage () { -b optional Do not print colors -h optional Print this help message - -l FILE optional Log output in FILE + -l FILE optional Log output in FILE, inside container if run using docker -c CHECK optional Comma delimited list of specific check(s) -e CHECK optional Comma delimited list of specific check(s) to exclude -i INCLUDE optional Comma delimited list of patterns within a container or image name to check From 9ae0d92b5db3dc4dafae6a00118433df6406db25 Mon Sep 17 00:00:00 2001 From: Razvan Stoica Date: Wed, 10 Mar 2021 14:58:58 +0200 Subject: [PATCH 08/48] Fix "nohealthlocal: command not found" error --- tests/5_container_runtime.sh | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/tests/5_container_runtime.sh b/tests/5_container_runtime.sh index b8b92e5..acf0ab5 100644 --- a/tests/5_container_runtime.sh +++ b/tests/5_container_runtime.sh @@ -1055,17 +1055,17 @@ check_5_26() { totalChecks=$((totalChecks + 1)) fail=0 - nohealthlocal check="" + nohealthcheck_containers="" for c in $containers; do if ! docker inspect --format '{{ .Id }}: Health={{ .State.Health.Status }}' "$c" 2>/dev/null 1>&2; then if [ $fail -eq 0 ]; then warn "$check" warn " * Health check not set: $c" - nohealthlocal check="$nohealthcheck_containers $c" + nohealthcheck_containers="$nohealthcheck_containers $c" fail=1 else warn " * Health check not set: $c" - nohealthlocal check="$nohealthcheck_containers $c" + nohealthcheck_containers="$nohealthcheck_containers $c" fi fi done From 6c586b4e08f7a81f3510a9fb2cd4b7c1b113997d Mon Sep 17 00:00:00 2001 From: Razvan Stoica Date: Wed, 10 Mar 2021 21:47:52 +0200 Subject: [PATCH 09/48] Print remediation measures at the end of the logs --- docker-bench-security.sh | 10 +- output_lib.sh | 50 ++++++++- tests/1_host_configuration.sh | 110 ++++++++----------- tests/2_docker_daemon_configuration.sh | 9 +- tests/3_docker_daemon_configuration_files.sh | 6 +- tests/4_container_images.sh | 9 +- tests/5_container_runtime.sh | 6 +- tests/6_docker_security_operations.sh | 6 +- tests/7_docker_swarm_configuration.sh | 6 +- tests/8_docker_enterprise_configuration.sh | 7 +- tests/99_community_checks.sh | 6 +- 11 files changed, 128 insertions(+), 97 deletions(-) diff --git a/docker-bench-security.sh b/docker-bench-security.sh index 1773d88..f8849ba 100755 --- a/docker-bench-security.sh +++ b/docker-bench-security.sh @@ -109,6 +109,9 @@ beginjson "$version" "$(date +%s)" # Load all the tests from tests/ and run them main () { + logit "\n${bldylw}Section A - Checks result${txtrsr}" + globalRemediation="" + # Get configuration location get_docker_configuration_file @@ -193,9 +196,12 @@ main () { fi done - printf "\n" + logit "\n\n${bldylw}Section B - Remediation measures${txtrst}" + logit "${globalRemediation}" + + logit "\n\n${bldylw}Section C - Score${txtrst}\n" info "Checks: $totalChecks" - info "Score: $currentScore" + info "Score: $currentScore\n" endjson "$totalChecks" "$currentScore" "$(date +%s)" } diff --git a/output_lib.sh b/output_lib.sh index 0e4c6a0..29083ba 100644 --- a/output_lib.sh +++ b/output_lib.sh @@ -7,10 +7,10 @@ if [ -n "$nocolor" ] && [ "$nocolor" = "nocolor" ]; then bldylw='' txtrst='' else - bldred='\033[1;31m' - bldgrn='\033[1;32m' - bldblu='\033[1;34m' - bldylw='\033[1;33m' # Yellow + bldred='\033[1;31m' # Bold Red + bldgrn='\033[1;32m' # Bold Green + bldblu='\033[1;34m' # Bold Blue + bldylw='\033[1;33m' # Bold Yellow txtrst='\033[0m' fi @@ -111,3 +111,45 @@ resulttestjson() { fi printf "}" | tee -a "$logger.json" 2>/dev/null 1>&2 } + +saveRemediation() { + local id remediation remediationImpact + while [ "${1}" ]; do + case "${1}" in + --id) + id="${2}" + shift + ;; + --rem) + remediation="${2}" + shift + ;; + --imp) + remediationImpact="${2}" + shift + ;; + *) + echo "Unknown parameter: ${1}" >&2 + return 1 + esac + if ! shift; then + echo 'Missing parameter argument.' >&2 + return 1 + fi + done + + if [ -n "${remediation}" ]; then + if [ -n "${checkHeader}" ]; then + if [ -n "${addSpaceHeader}" ]; then + globalRemediation="${globalRemediation}\n" + fi + globalRemediation="${globalRemediation}\n${bldblu}[INFO]${txtrst} ${checkHeader}" + checkHeader="" + addSpaceHeader="1" + fi + globalRemediation="${globalRemediation}\n${bldblu}[INFO]${txtrst} ${id} - ${remediation}" + if [ -n "${remediationImpact}" ]; then + globalRemediation="${globalRemediation} Impact: ${remediationImpact}" + fi + fi +} diff --git a/tests/1_host_configuration.sh b/tests/1_host_configuration.sh index b2aa611..9069d33 100644 --- a/tests/1_host_configuration.sh +++ b/tests/1_host_configuration.sh @@ -4,13 +4,12 @@ check_1() { logit "" local id="1" local desc="Host Configuration" - local check="$id - $desc" - info "$check" + checkHeader="$id - $desc" + info "$checkHeader" startsectionjson "$id" "$desc" } check_1_1() { - logit "" local id="1.1" local desc="General Configuration" local check="$id - $desc" @@ -58,7 +57,6 @@ check_1_1_2() { } check_1_2() { - logit "" local id="1.2" local desc="Linux Hosts Specific Configuration" local check="$id - $desc" @@ -69,7 +67,7 @@ check_1_2() { check_1_2_1() { local id="1.2.1" local desc="Ensure a separate partition for containers has been created (Scored)" - local remediation="For new installations, you should create a separate partition for the /var/lib/docker mount point. For systems that have already been installed, you should use the Logical Volume Manager (LVM) within Linux to create a new partition." + local remediation="For new installations, you should create a separate partition for the \"/var/lib/docker\" mount point. For systems that have already been installed, you should use the Logical Volume Manager (LVM) within Linux to create a new partition." local check="$id - $desc" starttestjson "$id" "$desc" @@ -85,7 +83,7 @@ check_1_2_1() { currentScore=$((currentScore + 1)) else warn "$check" - info " * Remediation: $remediation" + saveRemediation --id "${id}" --rem "${remediation}" --imp "${remediationImpact}" resulttestjson "WARN" currentScore=$((currentScore - 1)) fi @@ -116,8 +114,8 @@ check_1_2_2() { check_1_2_3() { local id="1.2.3" local desc="Ensure auditing is configured for the Docker daemon (Scored)" - local remediation="Install and configure auditd using the following command: sudo apt-get install auditd. Add the following line to the /etc/audit/rules.d/audit.rules file: -w /usr/bin/dockerd -k docker. Then restart the audit daemon using the following command: service auditd restart." - local remediationImpact="Because the audit can generate large log files, you need to make sure that they are rotated and archived periodically. It is a good idea to create a separate partition for audit logs to avoid filling up other critical partitions." + local remediation="Install and configure auditd using command \"sudo apt-get install auditd\". Add \"-w /usr/bin/dockerd -k docker\" to the \"/etc/audit/rules.d/audit.rules\" file. Then restart the audit daemon using command \"service auditd restart\"." + local remediationImpact="Audit can generate large log files. So you need to make sure that they are rotated and archived periodically. Create a separate partition for audit logs to avoid filling up other critical partitions." local check="$id - $desc" starttestjson "$id" "$desc" @@ -130,8 +128,7 @@ check_1_2_3() { currentScore=$((currentScore + 1)) else warn "$check" - info " * Remediation: $remediation" - info " * Remediation impact: $remediationImpact" + saveRemediation --id "${id}" --rem "${remediation}" --imp "${remediationImpact}" resulttestjson "WARN" currentScore=$((currentScore - 1)) fi @@ -141,8 +138,7 @@ check_1_2_3() { currentScore=$((currentScore + 1)) else warn "$check" - info " * Remediation: $remediation" - info " * Remediation impact: $remediationImpact" + saveRemediation --id "${id}" --rem "${remediation}" --imp "${remediationImpact}" resulttestjson "WARN" currentScore=$((currentScore - 1)) fi @@ -152,8 +148,8 @@ check_1_2_3() { check_1_2_4() { local id="1.2.4" local desc="Ensure auditing is configured for Docker files and directories - /var/lib/docker (Scored)" - local remediation="Install and configure auditd using the following command: sudo apt-get install auditd. Add the following line to the /etc/audit/rules.d/audit.rules file: -w /var/lib/docker -k docker. Then restart the audit daemon using the following command: service auditd restart." - local remediationImpact="Because the audit can generate large log files, you need to make sure that they are rotated and archived periodically. It is a good idea to create a separate partition for audit logs to avoid filling up other critical partitions." + local remediation="Install and configure auditd using command \"sudo apt-get install auditd\". Add \"-w /var/lib/docker -k docker\" to the \"/etc/audit/rules.d/audit.rules\" file. Then restart the audit daemon using command \"service auditd restart\"." + local remediationImpact="Audit can generate large log files. So you need to make sure that they are rotated and archived periodically. Create a separate partition for audit logs to avoid filling up other critical partitions." local check="$id - $desc" starttestjson "$id" "$desc" @@ -167,8 +163,7 @@ check_1_2_4() { currentScore=$((currentScore + 1)) else warn "$check" - info " * Remediation: $remediation" - info " * Remediation impact: $remediationImpact" + saveRemediation --id "${id}" --rem "${remediation}" --imp "${remediationImpact}" resulttestjson "WARN" currentScore=$((currentScore - 1)) fi @@ -178,8 +173,7 @@ check_1_2_4() { currentScore=$((currentScore + 1)) else warn "$check" - info " * Remediation: $remediation" - info " * Remediation impact: $remediationImpact" + saveRemediation --id "${id}" --rem "${remediation}" --imp "${remediationImpact}" resulttestjson "WARN" currentScore=$((currentScore - 1)) fi @@ -195,8 +189,8 @@ check_1_2_4() { check_1_2_5() { local id="1.2.5" local desc="Ensure auditing is configured for Docker files and directories - /etc/docker (Scored)" - local remediation="Install and configure auditd using the following command: sudo apt-get install auditd. Add the following line to the /etc/audit/rules.d/audit.rules file: -w /etc/docker -k docker. Then restart the audit daemon using the following command: service auditd restart." - local remediationImpact="Because the audit can generate large log files, you need to make sure that they are rotated and archived periodically. It is a good idea to create a separate partition for audit logs to avoid filling up other critical partitions." + local remediation="Install and configure auditd using command \"sudo apt-get install auditd\". Add \"-w /etc/docker -k docker\" to the \"/etc/audit/rules.d/audit.rules\" file. Then restart the audit daemon using command \"service auditd restart\"." + local remediationImpact="Audit can generate large log files. So you need to make sure that they are rotated and archived periodically. Create a separate partition for audit logs to avoid filling up other critical partitions." local check="$id - $desc" starttestjson "$id" "$desc" @@ -210,8 +204,7 @@ check_1_2_5() { currentScore=$((currentScore + 1)) else warn "$check" - info " * Remediation: $remediation" - info " * Remediation impact: $remediationImpact" + saveRemediation --id "${id}" --rem "${remediation}" --imp "${remediationImpact}" resulttestjson "WARN" currentScore=$((currentScore - 1)) fi @@ -221,8 +214,7 @@ check_1_2_5() { currentScore=$((currentScore + 1)) else warn "$check" - info " * Remediation: $remediation" - info " * Remediation impact: $remediationImpact" + saveRemediation --id "${id}" --rem "${remediation}" --imp "${remediationImpact}" resulttestjson "WARN" currentScore=$((currentScore - 1)) fi @@ -238,8 +230,8 @@ fi check_1_2_6() { local id="1.2.6" local desc="Ensure auditing is configured for Docker files and directories - docker.service (Scored)" - local remediation="Install and configure auditd using the following command: sudo apt-get install auditd. Add the following line to the /etc/audit/rules.d/audit.rules file: -w $(systemctl show -p FragmentPath docker.service | sed 's/.*=//') -k docker. Then restart the audit daemon using the following command: service auditd restart." - local remediationImpact="Because the audit can generate large log files, you need to make sure that they are rotated and archived periodically. It is a good idea to create a separate partition for audit logs to avoid filling up other critical partitions." + local remediation="Install and configure auditd using command \"sudo apt-get install auditd\". Add \"-w $(systemctl show -p FragmentPath docker.service | sed 's/.*=//') -k docker\" to the \"/etc/audit/rules.d/audit.rules\" file. Then restart the audit daemon using command \"service auditd restart\"." + local remediationImpact="Audit can generate large log files. So you need to make sure that they are rotated and archived periodically. Create a separate partition for audit logs to avoid filling up other critical partitions." local check="$id - $desc" starttestjson "$id" "$desc" @@ -253,8 +245,7 @@ check_1_2_6() { currentScore=$((currentScore + 1)) else warn "$check" - info " * Remediation: $remediation" - info " * Remediation impact: $remediationImpact" + saveRemediation --id "${id}" --rem "${remediation}" --imp "${remediationImpact}" resulttestjson "WARN" currentScore=$((currentScore - 1)) fi @@ -264,8 +255,7 @@ check_1_2_6() { currentScore=$((currentScore + 1)) else warn "$check" - info " * Remediation: $remediation" - info " * Remediation impact: $remediationImpact" + saveRemediation --id "${id}" --rem "${remediation}" --imp "${remediationImpact}" resulttestjson "WARN" currentScore=$((currentScore - 1)) fi @@ -281,8 +271,8 @@ check_1_2_6() { check_1_2_7() { local id="1.2.7" local desc="Ensure auditing is configured for Docker files and directories - docker.socket (Scored)" - local remediation="Install and configure auditd using the following command: sudo apt-get install auditd. Add the following line to the /etc/audit/rules.d/audit.rules file: -w $(systemctl show -p FragmentPath docker.socket | sed 's/.*=//') -k docker. Then restart the audit daemon using the following command: service auditd restart." - local remediationImpact="Because the audit can generate large log files, you need to make sure that they are rotated and archived periodically. It is a good idea to create a separate partition for audit logs to avoid filling up other critical partitions." + local remediation="Install and configure auditd using command \"sudo apt-get install auditd\". Add \"-w $(systemctl show -p FragmentPath docker.socket | sed 's/.*=//') -k docker\" to the \"/etc/audit/rules.d/audit.rules\" file. Then restart the audit daemon using command \"service auditd restart\"." + local remediationImpact="Audit can generate large log files. So you need to make sure that they are rotated and archived periodically. Create a separate partition for audit logs to avoid filling up other critical partitions." local check="$id - $desc" starttestjson "$id" "$desc" @@ -296,8 +286,7 @@ check_1_2_7() { currentScore=$((currentScore + 1)) else warn "$check" - info " * Remediation: $remediation" - info " * Remediation impact: $remediationImpact" + saveRemediation --id "${id}" --rem "${remediation}" --imp "${remediationImpact}" resulttestjson "WARN" currentScore=$((currentScore - 1)) fi @@ -307,8 +296,7 @@ check_1_2_7() { currentScore=$((currentScore + 1)) else warn "$check" - info " * Remediation: $remediation" - info " * Remediation impact: $remediationImpact" + saveRemediation --id "${id}" --rem "${remediation}" --imp "${remediationImpact}" resulttestjson "WARN" currentScore=$((currentScore - 1)) fi @@ -324,8 +312,8 @@ check_1_2_7() { check_1_2_8() { local id="1.2.8" local desc="Ensure auditing is configured for Docker files and directories - /etc/default/docker (Scored)" - local remediation="Install and configure auditd using the following command: sudo apt-get install auditd. Add the following line to the /etc/audit/rules.d/audit.rules file: -w /etc/default/docker -k docker. Then restart the audit daemon using the following command: service auditd restart." - local remediationImpact="Because the audit can generate large log files, you need to make sure that they are rotated and archived periodically. It is a good idea to create a separate partition for audit logs to avoid filling up other critical partitions." + local remediation="Install and configure auditd using command \"sudo apt-get install auditd\". Add \"-w /etc/default/docker -k docker\" to the \"/etc/audit/rules.d/audit.rules\" file. Then restart the audit daemon using command \"service auditd restart\"." + local remediationImpact="Audit can generate large log files. So you need to make sure that they are rotated and archived periodically. Create a separate partition for audit logs to avoid filling up other critical partitions." local check="$id - $desc" starttestjson "$id" "$desc" @@ -339,8 +327,7 @@ check_1_2_8() { currentScore=$((currentScore + 1)) else warn "$check" - info " * Remediation: $remediation" - info " * Remediation impact: $remediationImpact" + saveRemediation --id "${id}" --rem "${remediation}" --imp "${remediationImpact}" resulttestjson "WARN" currentScore=$((currentScore - 1)) fi @@ -350,8 +337,7 @@ check_1_2_8() { currentScore=$((currentScore + 1)) else warn "$check" - info " * Remediation: $remediation" - info " * Remediation impact: $remediationImpact" + saveRemediation --id "${id}" --rem "${remediation}" --imp "${remediationImpact}" resulttestjson "WARN" currentScore=$((currentScore - 1)) fi @@ -367,8 +353,8 @@ check_1_2_8() { check_1_2_9() { local id="1.2.9" local desc="Ensure auditing is configured for Docker files and directories - /etc/sysconfig/docker (Scored)" - local remediation="Install and configure auditd using the following command: sudo apt-get install auditd. Add the following line to the /etc/audit/rules.d/audit.rules file: -w /etc/sysconfig/docker -k docker. Then restart the audit daemon using the following command: service auditd restart." - local remediationImpact="Because the audit can generate large log files, you need to make sure that they are rotated and archived periodically. It is a good idea to create a separate partition for audit logs to avoid filling up other critical partitions." + local remediation="Install and configure auditd using command \"sudo apt-get install auditd\". Add \"-w /etc/sysconfig/docker -k docker\" to the \"/etc/audit/rules.d/audit.rules\" file. Then restart the audit daemon using command \"service auditd restart\"." + local remediationImpact="Audit can generate large log files. So you need to make sure that they are rotated and archived periodically. Create a separate partition for audit logs to avoid filling up other critical partitions." local check="$id - $desc" starttestjson "$id" "$desc" @@ -382,8 +368,7 @@ check_1_2_9() { currentScore=$((currentScore + 1)) else warn "$check" - info " * Remediation: $remediation" - info " * Remediation impact: $remediationImpact" + saveRemediation --id "${id}" --rem "${remediation}" --imp "${remediationImpact}" resulttestjson "WARN" currentScore=$((currentScore - 1)) fi @@ -393,8 +378,7 @@ check_1_2_9() { currentScore=$((currentScore + 1)) else warn "$check" - info " * Remediation: $remediation" - info " * Remediation impact: $remediationImpact" + saveRemediation --id "${id}" --rem "${remediation}" --imp "${remediationImpact}" resulttestjson "WARN" currentScore=$((currentScore - 1)) fi @@ -410,8 +394,8 @@ check_1_2_9() { check_1_2_10() { local id="1.2.10" local desc="Ensure auditing is configured for Docker files and directories - /etc/docker/daemon.json (Scored)" - local remediation="Install and configure auditd using the following command: sudo apt-get install auditd. Add the following line to the /etc/audit/rules.d/audit.rules file: -w /etc/docker/daemon.json -k docker. Then restart the audit daemon using the following command: service auditd restart." - local remediationImpact="Because the audit can generate large log files, you need to make sure that they are rotated and archived periodically. It is a good idea to create a separate partition for audit logs to avoid filling up other critical partitions." + local remediation="Install and configure auditd using command \"sudo apt-get install auditd\". Add \"-w /etc/docker/daemon.json -k docker\" to the \"/etc/audit/rules.d/audit.rules\" file. Then restart the audit daemon using command \"service auditd restart\"." + local remediationImpact="Audit can generate large log files. So you need to make sure that they are rotated and archived periodically. Create a separate partition for audit logs to avoid filling up other critical partitions." local check="$id - $desc" starttestjson "$id" "$desc" @@ -425,8 +409,7 @@ check_1_2_10() { currentScore=$((currentScore + 1)) else warn "$check" - info " * Remediation: $remediation" - info " * Remediation impact: $remediationImpact" + saveRemediation --id "${id}" --rem "${remediation}" --imp "${remediationImpact}" resulttestjson "WARN" currentScore=$((currentScore - 1)) fi @@ -436,8 +419,7 @@ check_1_2_10() { currentScore=$((currentScore + 1)) else warn "$check" - info " * Remediation: $remediation" - info " * Remediation impact: $remediationImpact" + saveRemediation --id "${id}" --rem "${remediation}" --imp "${remediationImpact}" resulttestjson "WARN" currentScore=$((currentScore - 1)) fi @@ -453,8 +435,8 @@ check_1_2_10() { check_1_2_11() { local id="1.2.11" local desc="Ensure auditing is configured for Docker files and directories - /usr/bin/containerd (Scored)" - local remediation="Install and configure auditd using the following command: sudo apt-get install auditd. Add the following line to the /etc/audit/rules.d/audit.rules file: -w /usr/bin/containerd -k docker. Then restart the audit daemon using the following command: service auditd restart." - local remediationImpact="Because the audit can generate large log files, you need to make sure that they are rotated and archived periodically. It is a good idea to create a separate partition for audit logs to avoid filling up other critical partitions." + local remediation="Install and configure auditd using command \"sudo apt-get install auditd\". Add \"-w /usr/bin/containerd -k docker\" to the \"/etc/audit/rules.d/audit.rules\" file. Then restart the audit daemon using command \"service auditd restart\"." + local remediationImpact="Audit can generate large log files. So you need to make sure that they are rotated and archived periodically. Create a separate partition for audit logs to avoid filling up other critical partitions." local check="$id - $desc" starttestjson "$id" "$desc" @@ -468,8 +450,7 @@ check_1_2_11() { currentScore=$((currentScore + 1)) else warn "$check" - info " * Remediation: $remediation" - info " * Remediation impact: $remediationImpact" + saveRemediation --id "${id}" --rem "${remediation}" --imp "${remediationImpact}" resulttestjson "WARN" currentScore=$((currentScore - 1)) fi @@ -479,8 +460,7 @@ check_1_2_11() { currentScore=$((currentScore + 1)) else warn "$check" - info " * Remediation: $remediation" - info " * Remediation impact: $remediationImpact" + saveRemediation --id "${id}" --rem "${remediation}" --imp "${remediationImpact}" resulttestjson "WARN" currentScore=$((currentScore - 1)) fi @@ -496,8 +476,8 @@ check_1_2_11() { check_1_2_12() { local id="1.2.12" local desc="Ensure auditing is configured for Docker files and directories - /usr/sbin/runc (Scored)" - local remediation="Install and configure auditd using the following command: sudo apt-get install auditd. Add the following line to the /etc/audit/rules.d/audit.rules file: -w /usr/sbin/runc -k docker. Then restart the audit daemon using the following command: service auditd restart." - local remediationImpact="Because the audit can generate large log files, you need to make sure that they are rotated and archived periodically. It is a good idea to create a separate partition for audit logs to avoid filling up other critical partitions." + local remediation="Install and configure auditd using command \"sudo apt-get install auditd\". Add \"-w /usr/sbin/runc -k docker\" to the \"/etc/audit/rules.d/audit.rules\" file. Then restart the audit daemon using command \"service auditd restart\"." + local remediationImpact="Audit can generate large log files. So you need to make sure that they are rotated and archived periodically. Create a separate partition for audit logs to avoid filling up other critical partitions." local check="$id - $desc" starttestjson "$id" "$desc" @@ -511,8 +491,7 @@ check_1_2_12() { currentScore=$((currentScore + 1)) else warn "$check" - info " * Remediation: $remediation" - info " * Remediation impact: $remediationImpact" + saveRemediation --id "${id}" --rem "${remediation}" --imp "${remediationImpact}" resulttestjson "WARN" currentScore=$((currentScore - 1)) fi @@ -522,8 +501,7 @@ check_1_2_12() { currentScore=$((currentScore + 1)) else warn "$check" - info " * Remediation: $remediation" - info " * Remediation impact: $remediationImpact" + saveRemediation --id "${id}" --rem "${remediation}" --imp "${remediationImpact}" resulttestjson "WARN" currentScore=$((currentScore - 1)) fi diff --git a/tests/2_docker_daemon_configuration.sh b/tests/2_docker_daemon_configuration.sh index 3f27d5d..7836002 100644 --- a/tests/2_docker_daemon_configuration.sh +++ b/tests/2_docker_daemon_configuration.sh @@ -1,11 +1,11 @@ #!/bin/sh check_2() { - logit "\n" + logit "" local id="2" local desc="Docker daemon configuration" - local check="$id - $desc" - info "$check" + checkHeader="$id - $desc" + info "$checkHeader" startsectionjson "$id" "$desc" } @@ -13,6 +13,8 @@ check_2() { check_2_1() { local id="2.1" local desc="Ensure network traffic is restricted between containers on the default bridge (Scored)" + local remediation="Edit the Docker daemon configuration file to ensure that inter-container communication is disabled: \"icc\": false" + local remediationImpact="Inter-container communication is disabled on the default network bridge. If any communication between containers on the same host is desired, it needs to be explicitly defined using container linking or custom networks." local check="$id - $desc" starttestjson "$id" "$desc" @@ -27,6 +29,7 @@ check_2_1() { currentScore=$((currentScore + 1)) else warn "$check" + saveRemediation --id "${id}" --rem "${remediation}" --imp "${remediationImpact}" resulttestjson "WARN" currentScore=$((currentScore - 1)) fi diff --git a/tests/3_docker_daemon_configuration_files.sh b/tests/3_docker_daemon_configuration_files.sh index 850948b..f5ea624 100644 --- a/tests/3_docker_daemon_configuration_files.sh +++ b/tests/3_docker_daemon_configuration_files.sh @@ -1,11 +1,11 @@ #!/bin/sh check_3() { - logit "\n" + logit "" local id="3" local desc="Docker daemon configuration files" - local check="$id - $desc" - info "$check" + checkHeader="$id - $desc" + info "$checkHeader" startsectionjson "$id" "$desc" } diff --git a/tests/4_container_images.sh b/tests/4_container_images.sh index 32deeca..beb4418 100644 --- a/tests/4_container_images.sh +++ b/tests/4_container_images.sh @@ -1,11 +1,11 @@ #!/bin/sh check_4() { - logit "\n" + logit "" local id="4" local desc="Container Images and Build File" - local check="$id - $desc" - info "$check" + checkHeader="$id - $desc" + info "$checkHeader" startsectionjson "$id" "$desc" } @@ -104,6 +104,8 @@ check_4_4() { check_4_5() { local id="4.5" local desc="Ensure Content trust for Docker is Enabled (Scored)" + local remediation="Add \"DOCKER_CONTENT_TRUST\" variable to the \"/etc/environment\" file using command \"echo \"DOCKER_CONTENT_TRUST=1\" | sudo tee -a /etc/environment\"." + local remediationImpact="This prevents users from working with tagged images unless they contain a signature." local check="$id - $desc" starttestjson "$id" "$desc" @@ -114,6 +116,7 @@ check_4_5() { currentScore=$((currentScore + 1)) else warn "$check" + saveRemediation --id "${id}" --rem "${remediation}" --imp "${remediationImpact}" resulttestjson "WARN" currentScore=$((currentScore - 1)) fi diff --git a/tests/5_container_runtime.sh b/tests/5_container_runtime.sh index acf0ab5..6b7955d 100644 --- a/tests/5_container_runtime.sh +++ b/tests/5_container_runtime.sh @@ -1,11 +1,11 @@ #!/bin/sh check_5() { - logit "\n" + logit "" local id="5" local desc="Container Runtime" - local check="$id - $desc" - info "$check" + checkHeader="$id - $desc" + info "$checkHeader" startsectionjson "$id" "$desc" } diff --git a/tests/6_docker_security_operations.sh b/tests/6_docker_security_operations.sh index 5dbfd20..35f4f03 100644 --- a/tests/6_docker_security_operations.sh +++ b/tests/6_docker_security_operations.sh @@ -1,11 +1,11 @@ #!/bin/sh check_6() { - logit "\n" + logit "" local id="6" local desc="Docker Security Operations" - local check="$id - $desc" - info "$check" + checkHeader="$id - $desc" + info "$checkHeader" startsectionjson "$id" "$desc" } diff --git a/tests/7_docker_swarm_configuration.sh b/tests/7_docker_swarm_configuration.sh index fcc987f..63b65ab 100644 --- a/tests/7_docker_swarm_configuration.sh +++ b/tests/7_docker_swarm_configuration.sh @@ -1,11 +1,11 @@ #!/bin/sh check_7() { - logit "\n" + logit "" local id="7" local desc="Docker Swarm Configuration" - local check="$id - $desc" - info "$check" + checkHeader="$id - $desc" + info "$checkHeader" startsectionjson "$id" "$desc" } diff --git a/tests/8_docker_enterprise_configuration.sh b/tests/8_docker_enterprise_configuration.sh index bb95a7d..a1d2e65 100644 --- a/tests/8_docker_enterprise_configuration.sh +++ b/tests/8_docker_enterprise_configuration.sh @@ -1,11 +1,11 @@ #!/bin/sh check_8() { - logit "\n" + logit "" local id="8" local desc="Docker Enterprise Configuration" - local check="$id - $desc" - info "$check" + checkHeader="$id - $desc" + info "$checkHeader" startsectionjson "$id" "$desc" } @@ -153,7 +153,6 @@ check_8_2() { return fi - logit "\n" local id="8.2" local desc="Docker Trusted Registry Configuration" local check="$id - $desc" diff --git a/tests/99_community_checks.sh b/tests/99_community_checks.sh index e0da5e0..3a14619 100644 --- a/tests/99_community_checks.sh +++ b/tests/99_community_checks.sh @@ -1,10 +1,10 @@ #!/bin/sh check_c() { - logit "\n" + logit "" local id="99" local desc="Community contributed checks" - local check="$id - $desc" - info "$check" + checkHeader="$id - $desc" + info "$checkHeader" startsectionjson "$id" "$desc" } From f769a32e9bd18f92e3c52dcff02b597fea14acf1 Mon Sep 17 00:00:00 2001 From: Razvan Stoica Date: Thu, 11 Mar 2021 08:26:35 +0200 Subject: [PATCH 10/48] Update benchmark log photo --- benchmark_log.png | Bin 281605 -> 523232 bytes 1 file changed, 0 insertions(+), 0 deletions(-) diff --git a/benchmark_log.png b/benchmark_log.png index 839992427368611752d5e63dc9ec5936a33a8daa..6e569617fc304d38bb6dce7415b0e6373ea232b1 100644 GIT binary patch literal 523232 zcmeFZcTm(x*9JO(Bt?N$BnM>yB?pI`6oEyek~4xNkt8{TASei^NRTuliiCk7=cGuG zGz!9yb529f;r6ia?(4q02zCFt->urRYKn5Ed%91b^PJ~AeSY&)MM?JTX{yr@2;{8X zZ#VBiAcRH`2)-`?9{8VI{10*<5C(|c&FgBe26O#{G5V%n5{rWh7he*25XF&1v4)JS zf4Gw_ea5<=>rT$;M{0fK@Hc9NPPGN6vo5HpUHDjVStEUj$NpmIkNlJRSN(+NM$;A={J zB4aQ}zIo>h(U232KA}A%Ax(5AwVWIl7W}0hC*uhY1x)D+i4r^6Cn0_>v9Yz7hV^8Q zKkdV{VzGOi@RQg~xTmsjeJXi&tQ-Aq1Z=JK6Mpj4ta;=p;!KO=pS5C@?VGk(Ix+N=pWJeUxfZ4QvOBgzh;Gh zMCeo5-_hlcBYOImoxudiuzdrA5h1kVFfXW8)!y53$1% zuTD;|9-Bbk^nx+{7hNQd{p8_}QbK(po%vVa<6rvGH-5yBA0tTe-`S5c>%W%y|K2hR zatsoMK`Gb#LkN$f)_yamPGzU(T|0lItN$h7bz?x7T-2}&m;cLu9~JeIP9O+7v}2$C z6=RNAlplwJB*f|rTX8+p$%0TApvVk+%gqz5rTQW>gKxoOvcAz@{-BpftmAi6s3d@D z!zs$_@`=`Bbmlxsb^%k!PAmdSohNMK}r7k8uhC`DH*^ly{lbOBZLIdJ${_ z<|4nuKX3Pcy{=sYAbw9&r~i-JKYG_HMIf;HKTWV4bx40Pkx>tT5XIg$ckYt~*33nK zYr0*#Co`jhE;uAhT^-^Ra@c-gN2fD!u#<(MB^!e;)LMS_<6m}kq-9cd0fg8L)3sF9 z(|L#%ArNTWpuj-7UKFZG_h$3lw>y1N$A543`_m67sHjTcgW-)yNl9E>`lYL*x~!ia zy=}l&HTsDRq(8^)Y;Rvw%9C9YJl;%x8fS>kp5=J@q#ZX$N52lA-2h@m)!{Jw>G1&- zDT`vV?DCZpOfr4NZv7>byi#HqaUqj<1f=s?TIpiPwX5&ykI&)@<*PJ^ zI%k8OJ+fT9Lg#k^Yt#~e#fu^B1LnDkAR0SX6drRq^&^#)m5 ze*$x>`Gv|yvA-^PFTU&O3Y;cN(;iGA#o=@61Yb<>;2Sm={bJa1>6}XWMRKlaPGGMS znX2{-fl+}6=B3OVvu@Z)RtpG21wMGumjDYzA(u}8h}c^5132I%3kK0>nl(ScQDBGz z8uNluhGdMd<#`^DMF8WR~D|v6r&fc8`1G1dW)}&&yFDehZy4uI3o1akhc*qdVf2ZeJ3@U&>n<_Km z-nQwY_%^$?7E?ceT=Z8v{(^CRC@uhusyf_kIzC$^nxfHl`^9phoXRQ*JTqjNTb?(4 zwN8Pz30$v;)9mcIIy4eMx*HImFW;Yt%a?Mm9b~&0BlD zM&q$bS|w)OW^2TCktpI?bMI`PtjeUa>p4k5%}L~Oo#Q9shDE6voo>ii=LMmsOa!O16s9f^;%KH10Lm9Ife(>{u;1LQq7+fO1je!j- z1&GytGo^hG=a~^690wEBeBo2S5{I`{RX%F{A3uK7DsflrbKeLqzCS)AI9e!TqTRyr zVZ!!&&XgtJ=r@mzdK=5o_8!yosBG6tmP+G{I|ZsL!P$3!#+{f8?z35c*SXPKh9bKTM|s_s`u)wJm5I;r1U%!6d6CJpN)KLJ zMI)ZAxxk<8pXr`XFbxs!eI;GKoeYVqmBIbxxCiVX$8bpM0k6_{>@RUVW=k7-y<@K;&>n zC|AOH2l5Bxe3RDd_r0h!GDACD259+O&wpaYow|ISwZ58wBc~%b3N9kAj=gMz;6j^1 z*urUd#|Fyk4OU#P&{ocDni9;`nO24P6c48~hA}pq;B&dx!n-_*mWMN1w|N7cYB;P$ z1M)gGU1)|2y>gcF-FVD5{_|eJL`s=S9c2cMY}c&7`<>$$gP$CRp#K8D%SB#&U+X$^ zS-b&Wc59zkv};@I3X9j=kQOqgp45AE-85$^rI)#hduA3Xc-KsH`k*CoHOJqiUo@O? zx6TI<($3kV@?{&(@S1=bU3ts9a9Wz#2{)SIKsJq=2eKNPx#AK31Fe6t6Ox%j- zc$W{tEiwyTO08LINuC*=VM`I)R_?YsG<0UNuG1&q=+?@!^38#RGQMr3A*~n67Vc;e zaeUFU26Uee^WMMq1QB!|y=uf3|b zA?vjf%eb@Wv7k>MtzY8YsGps?(=jK}&uM1OSJbwashcC*c`(^uYNVci|JYkt6$FT_ zib^LWCny;0T2?kL`$F>&T$O8I#Y~X;F2Vcz`?p|rc6Qts2i;|N#}VZ9fk_YbQ_NbQ zY}QTZ8Kd!$A^ZFHi#CUbRQl{z(p}r)Q1yYiiYaC{9|)Q-6b_hNUsW%!Ou~T0bOO&x zek7?WO4CwW@%W1B84$Rji7I(M2G+vwyOF{iny3(nhW+l)r+(u>eV6pwRn4LS(vYaW zJKGeWMm9fAHizwPzzfUNChsD2%Y~K7?DVHi2v#;fx_*;v?lt%3@XqkgV;^B;qm|MM z$&x!R7f7ywVy+|3*+B*iZgU@HhcGym9oFL=racO9)7qxhkRDesD&YZJEsIu5o zI&BN)Zs!xfy`fu6Ct|BUv%SQr%XT zJfySFUHQT8oY=R6(Y4Wv@5tj81@XfJTn74vKvnAzr1QdJteqtnwifbrl~;T&%HJf& zx+v}Okjn=A$wt4cgI@6ix3n$g&6Rz@@l>IlQRh5)eTf0-stOPNa&(B*$Xj$Ik(4+Bweq{nEg86r~XxsMAJkm3XQ;*THte7#vRxzv9n4fwH{=VyD1E>X6xe z3xRZ+Otd`ZBVV|eNqcd8L z-%5+O1Cy2vglCXJbi9ls(l|V}u&wu5^ys(hRoWMqUPOL#*{fSJn3+7bCX>Vg0wtA7 zz*Y9^5UbO!ipBZlSn$_gUQ3xl3zQyUNvj(hnvL9of)pXP6^#4Ks1TDHl@j0fW=hgQ zK`)KDy&<=6gNE}L>1k+!scj6%l-*ahyHxlGuQ3|eP~zmQ(VcmV7+E`e_FQd+Jo?$| z51G%dlvUnhJ3h!IjYL6CSPF>UTe;tUwZ*&BvZNHa^DoQI{Vq>G%oVCW;NwQzL6Na( z)|wXek%rimTHjg$h}Z1eXi^kxU6crY?H3Kc4lhP&K|5ROdT}LT+Kw*9&fA-V60Me{rUtTCaKJi#8;d)BC97^$g!F$>urq` zpGVk~h+X8UC|F(cPpBQ^2|$b9)tIZ&EWpZ{wb3Ix@cg!2oIVELTN~#I@aKxB);;+4 z=+@rCUQ2@XX5*57WNz%Sa@KcNAd|7#&PSXv>QK@{pT$7$hel2<e1WTq)^^`|Lv|3J(BlBy*CW(gvr7MKvDc*({>4r-Uyc%V;6)qO@i1NAwy$(#JZ zu0}EEK~3G&mW~qFeST8%3S*7Aie3#KZkLHy6M7}?Qhjz!J%YpVwVVgFuTo0UBi1{{ zqn0bitqZ-i&2GAimThM?D-eZA-6?jj&%3MDUwpK+RVyqSL zu5qb*1ha;8_2&j2 zqPAW4KBN;HI(0^0f`6QBd8#dPR$*K4lc=-Z9xYq)0rqgltpOG0V=s)wfB-*(<^H(n zLUlSx9=R&?l5Zq3p`J9cu<4O&b9G;rQ<=4~(L($b8ciR04`fq~EQ9k!0~MFEbV`I< zi|1P#!)R$T@Bp8A`=RBTEV|$DR8C={0N?hG?BKq?zmz>X{jBuj%nUW&XtU3tNLB@NH(42)Ay}36-@J289!Lz@YcX^8Ph~T+b!MXk0F>YTVxv_*U+hIAYO4fCqr?5W^GpWd zl(pfSnS&H;sLT*;e}DVhbm-FSK~6;GY=@RJ~f-fL%Z_%2rT%?Y9NQPA=fwFN=M41|531X7=Z5a=(4rh zQ;d{jc#XriV>rGWMIIhgramX+q47XqbOY;cnSjl++S$(f1GoV-b)fssLCG}-na_S_ zc8rm@UOD~cgNW?~b9J<-qksQYn!&S)$#$9Bho+3lz^PsrhAA z-Mz#n>^=U%I{!gU<4(X_V(BYl)FMO<5T)`?AQMWyu>xd7KRIh$1~f@zJKMIUI9Jak z`ilG{OcZSWc5meseaKL-HB>%q=}^Sn65SwcL|lhtlv60W9q62*5 znm!}v;fO}A8(@3_+kbuLFKG7TbpL+iPcAY3wdzke!oQyLujl-WIscG94&CDaR&?xM zXE?Bc-t_+w`Tr-htKWgF$6VV{On$})n)Pdh?sG`zSb2HuPlo*Gt*_TW<&vU)@8K+I zb!@!mr~ydi#V@r;{)x~0^-GQJfSegIa=$MGH=9cH1%J4g@3?v4HBf zv+|a#f#S3^!ya)Fqw%pn`RCPAF+Ml+CxV(mFW&fbY9n@x?20~%$?{y7ix%DG|& z*%BQcmH0-p8?T8 zrS>1;!ar81Dk0!YIpF$nYLE=8?`wU(K{Dtx^G?uDSIPt!H^;R50;8{bxE0Ebta^s3 zfchs4^$*&3A1JZuj|;3KP8&IemL^gY8g-1`*Eo(ygJ+?NFbV>bKGF*)2=?9yQC-mX(oz&1tiW=p~$8e&=caq1Wo*_@zzEmayY z=!>0Mil93HI^%Bh{X0a%(9qCx!2uTH=jW%DZ*g1Cp#_RtO)5)6%97xCXLmWe>Y1vN z(0jTIC$as1I*>wh)eaFSma4kP9Og9=@6h^mZ5CDkO_rW^wlkCMowC^4cfq;rnvs|C zoKM5OSCctVMJKqeuKo@>eo}0@nkY|YyQdj`tcatk7G7>(9Q}M=`I!}>qL4t}sqQhk z0mYe%>`#iy$2sh`#-lYEj8326EXu&thu8C%dWbgLU?mpyIVp%vhem31Dcq-ArFBRh zFFPF>j-2Q5+20l1TWue0 zWJ9ngt}fOPhig`Cci4}H3e+_jtmmFi9Juh;Jn~O&;kSO+hY)yJTQZ6m&F408F6D%K z!KWOZntAF!H%79Z8IMpBz8WSt@?^77v+|e8L=T&$agGyQ+N*#zbq#1(MXWR=Lvxv| zzle}FJ8}8dhtExh`^$Hf9rxBy^9dch?;Th#)XFxx9`7>XX5XQ% zNmjK#B`YDUB)asucs8qS#0lZipMuKLFXLY*9u1Sx(mC}vc>G&NeM62dY_xWxqSWKG zk-B+z#Oqj+YO4LAUfU`!&+T>?r}uO>(%YF`w-CNLIVo|lwe-wfl(BN70$uysJhA&c zo4^U$im%-U!T41D^=2&KBsLuln*1ETYn$~Fl~Z<3z1Br!Ng1uKNRNT@_%wEsAcBPK zyG^5^ZEbIVM9CxAc?CuXdhG7B0d%0&ToyhknE5Sv#g)YM{13G*l`9FZ8)bv~G0ll$ zBH{;I$ol5jd?6+T(n)w zZhK$QZ2$E-e(f_#KIZ%|!@U{J9M7#~{Bq}Xhvql|u5+S`)r6Us3|AvyyT9V$@GOyKY@ zU`76|D#N&C^BL9wEA?g`{Q<;``+-DNS_bkitY%{#%SXcV02%acU4{&nq~3hH)@M>- z6dK^S2xX+{| zJHKItcGGjFk4St@-;{4;orvM|xuhYjm>!cH9IM6?RJt9~%6uSgPKGXEok$(2(5R&u zKw$n=#!$>6-#dBn+^#jZAahV#qSUFS5fAb@w?nfo)HjbDPVv01cleeLIApjR8-ueNo?FWm-R=GIm#PtV^VM@d?q3j0QyBQ`cR$gjxKdpU}3eNhf;;;Qm&&++6lYkuN@ z6caFOji>wo^LFp^Txp4epi5`7w2Ex>^CU9^|Ar%f1MRP-fLC++YkG=c!Go`tiRmM7 zv}#}*VrVyI8oO$&B|lE^>)RAEcpS$wN~bhh`q0Yx&~|E8X*A!`?qG{!gOy z;~$b`7-df#@gjo^(?0d~Di*vu&%7RkQg7Qkp0XrTgphM_-s5vz>zfo8$SPlM1aN%) zZwvjq?d*IGiwOcuYDe&3!DYplUo5q{RPrs9OeP8fY~^<RLDn@D1Ph`brZZ9PfdtJde_YJ2(uZ_@+ zs)M~8=lLGN?Wtswn!vLhsKOJFlD}QhrZ`ro4}ViQmLKEcR73yh1t1{lx_l_en*DBF z+H9Rxixaf``6Ysz$F*mbFR9NMsekG!lXI+|NvIGxt{Va*z;uuz(r@IrIDql3l`lmw z<1KzU0Z~GNb-K$KehJ0RX1zPt|10L=!^Qjr1IYl}Rll-sa}EnW(5?B<91DJnLh(Pf zYM(O0!4tvH0Y?YW8+kBX|54U7KeiV1qqCI`xDJ;qBR)YYrvq;5u2%*HrAN^_t5U$3 z6|+&w6<-bDvWgr>MT{enrpscXmIQ9c!V{a*RGciV<=!%PAahimuN~T!Yua+i&!+EOr)E zLeB|Ly}^L9=qM%f$ysXtSMEEnk2eP)kHXE`%;5r(*R71a? zood@{B%|*HcOOW>%U-VV#*h<0&X#>;2ku~NZI!qH+VOcfh@Ng|zR2(%gSCal6>mW6 z$Y9q2)FVe_CAM$(dGE}t+lE+543-V{Dcr5uWQ2*! z?aMvR1b##Uz}C5{gZ;;&Sokz5yDQ~xE5VaHfRY;QChBi=0WLW5E!^92XzBe6GkrVmcW#MIr=#LXNjDi8$Vc&H(sFo>O?-%;LDcOwcn>Fmo zxY;rT3^>}b-7yyG4yXnDDJ=NTy}Hvzq4`bEo2Umj>xx%eMcDdvL2ggOf}4bk@hb@q z2Rvf+rx`rh-!N&3h1OQt_7&Ur1cmY5TrNdbaMG=%%7&Kd=Td9+V@24Lf6FD0cbj-^ zKjephF~fUC6{fR0!29~eaNn+&ad)oi(ww=32XC}e9Lm6T__4Hk={K1oY_0AB+l_vg zLAa%}m*?Ql0J+5eQn*zfd3Abd=jXqM^BWnzU16)#x-G>&1i`5a5L##}?ntu3mJ}=$ zKh)Q0?1gL{CUv6>Jgo0crSl0JLaN3&Y@Y&VQhw*-Fc!Rtvy9yvR3;bu#pqVw;MX$J zZ#BG~m2pn}vV=a^M=!ky_k7p3qbc?p(&_a!0n(XSG(a^8^Vv_KA0u@Una@|PxotRN3?L z1QKTW1jC{1QTi^{r-_{Td?T$IZ0xqgzd(u3ox51j!pJP5-^!c61q#>PO;Lo2Bd{#x zO5EV?L`+eGO@gKAAE@$oz$v{1aOUjz_QEA!b(poL8E~mtD8fyV#(gSDnk9bMSU}c! zpaG(RXOgR{)FF#?j@Za_Ba`UvS$Yq2h08Zu%gF>6PH&-uEf$F_In5ch31)1qjWj20 zEtH{;7ikui5HDl}L~;c|_qb~f^?=H$#gtKt`w%vqP-5>z|51F2&FkfWX2f8O)qWnf z`B`v2zdaZ>xn${fVblVvdcJ5-JaMbpyv|&F<@LyvLb3-)Z?_$j^-3KrcSp#puB;o< z)yKf%gi1j#$Y4-3yY?N&T59Xv`N4hb@;Os3HgB~_b2%2@NFSvJ2`-AiI@KR24LF=1 zGp121>GU`XgxEk9sV4BIj_G{+?dcEok(vhDTD0Dq!%H)oRl+vqOLdBd*&0s;4Ipgj z0w5IB0bWPFx3?FH{?6#@G`K*)}@%g}9IN zKz9OAE;3Sr^jdI@ezjc!`n~v%mK30X%XJXxt*n9^hl3LHI*+4OHkT{!IcGx8CR~jn z%Q+9n8y^k7i%<$?3=_Ouxg3eOa49vt{wB7T8*phh7Tur8@ zb)wBPM}}4H&sK%ii!Ipa01P0jS2GhRgv&Z}m4e!`PVWHt+sDhFUA{?^OMCmlumY3aQ&W4N9MCc?n8=C=W2uj@mkW?KshnL9j(`d z@Y$QiSK#6Gb((%3eG$1b#v&oK4g{}}HGw`msoO#6;h-{)DM!P#^Xfc4k4%;f!q(vC zp<6vfx{m9r<~|cUY_u4-mv$EK?VBp!Sjl59+Z}6=98iUAe{TpA(T+21imF9;uVq~B zdvWP2YdvOH7d_sj+fAztBDNl2Dy*7wBJ6YroAu;Yy&%mS?`^Nu+TY)zT<<`57YOcK zk2Nevbw9Q!9&bR6O=?fZe3=BblRZd*5=M!;dc{MJ&IB7GQ4{8>m4mtBTLvwAi946e zE{&rJljl2HcdW<8wo2kgSf?XL;W!t?kmJOPIFI`&Oh?e$iX^-~K7 zh_5CQlcB59*Ci(nlzq0_M{&7auP-4mW&UWCt_`IFWsOwod7+7-r=SC=ILuVsO5A}~ z3X*Y7-Qh?gq>6cdGTq1)L0&zRdGHE75CG|1i1 zPGoSawc&Y}>u?6q-LV`mUF(95RQZNCDtNTKr+7N2PGv7o<JR;d)eb`52S5#r?6( z34tm~w8!91UAZjYBPF2cDqgS7F%azGd0m5}RpPTT=yNbqjQmyyJ~FTgsF=EwQ1Djz zX(LlbAlCtLtMZ#n;CY7web1#@6Y=`Ro`e3uJ^gsQPlOmL&Ez`@W&d4=#n%a4v2jtB zDC}Ztyaj2xYt_W$4Z50c!m&_iv?s#sO4j-3^W`aF5RE`7zNr|PWwKYwgnd%Uz>8$i z6{gqpC+P{eoOixm%c;dzcfpT_a<>^`q0T6g!P^i8h||U^ZWn!u>xr_{rlX$9$?@Ch}AHVE$o%9 z`L1E|;S^0Iqln6Q^juB-A+OT$#)>z*XTCV<)aSL)FU>GTUbQLBWA5zpB@EDtD>%Gck5?LaG$3q+YXaX=D>`d_0YsX;AzK;mk_eN7pEiiAGiH#2*b)ILee;Xy}tA{ zNIZXvN@ER!>vruL`+)Zd!0dSVfo4JK3l7k-gZD4H$O$5H{8jWD@d*z_LMjGz!d-uU@7|cdL|2No)dG40y+>j!$Cs934_fb zpUoiSwDZ%x(A-MXFotI2B+=`Q!#Oh&19Xg8!so&F6~z;PnEH>{o2nuqRHPOjw5Mj|{-a|C86z#%FM z^sAlf$c?zy$z|oT)}cwRPoA;xO0(V}CgP}?Eye&4i}|b%m}mT=4O58Mwn=$!zQ77@ zZLr~|oDo8ouZ*N;WU+b+)yPn4G%_L#HcC;}?$+Lf5*ogixk%_Yh{oiT&+!sC*Seot zY&Nt?W2z0(K(~$zgEe21q2=EYt$fcqk{A(4t`d)* zS?4YCn~)s03T+=(V_g_$Yqn4tl%sV zJ4ZoT-RNXKnej9Lv24)&f=MKAjAB-P2h=5?khYl-kC2@Soui3FfX@D9SY8d1MSSV$ z7xC6t27`n~);2Fek#oQ)>}g71JVxPtvrF4NK|SEA3^k=q<6c~XOKymYa|)HXFcus> zd&Xe#(d`_E$s#_3vKY&3lxz9&mdoBi-C<&FNn z7n!4(d7xQeuRQ}?sR-^a)`Yy#p}Q)wyeBOB`PD!&u4=tU;gWaaaF(aUPdmW3%FvFLd|1NPiM9McedpgandPqMOMqUqxPB1u&JCI01xU zAiJ#hQY={VZp)qNA4umsIq`8Eq$TX3p#i5=6w@#PlUy0^!T4EYmthE+C6wl2Of zoO8M1Wm?rmPY1}6R^LbbPbl4ytbfyV* zmKYgI#!L+o3dz7Cr=_~YOCy*MQTV_vn%bd}23gd4cQuVG=;8ziPVU9#O-l!^ZQ4-%8+tKIW z-Tas%>=fz@19vRT4!q%tEo8rebl zl=o|^rookEByYDL@<-wSuNmO?pWd*mSOL!z%0lM>+C^OW6V3{FM=i zjz`1Yi0;0&Q917yZvnA#pv@LeC|&m6LYmOhJ7aG5bO*OPjkVow_Mm{UqbT2JUDQ8< z$%*@3to?6+*>`V9pmIRgG;Spd9ls4=={$|)t4rCU-gdl==t~4+- zK2NnsRGclmi&{Jof7f8A2UXXhX(;xZi3~wYS51{ctyIZbX7Iiqs1q#>CeT^B2*95u zcsZmjyX|fAU%==o(;Im-@GAf`x8SnO@=rCxWKrYa-eT0m5GA)Abk#vht5!D$R}HP( zwduv%wL8#oRWVQ&1#{|d36*>AZOchKq{V`>-mnJ`hM1z#!oB89YHxpVdu2{H-A!2{ zu)-%kTT#M2_AZ3G5!bExekXH%!(d$Cf%i3y=;CjkUuPkm7FLZA6X%MirT1K3ma4Kv ztVAq)vUD!5Jve2HN(q$AybO-~i7N$V4CJDK$_k#F?IR7KeAmD!0a_}YJ=Zb}IUM*gXs=b^N^fUnwyy95nWyNo%XBL z6?x~SlChWa{1p#2k+~}>fkBPWl%9WZu*MTu4%w%n+-w{|X)%`BjYp#x!=C9h7!ao-%i7P zL8*WF$;V0YjgpPBanSxzarKot|1&{=0SSr1!|z@oI|+@vz@1U>2Dm(ra9h2DNO%C5 z1?rG-ymOCbZN*`&AR876U8dxl6Enruu3IS)_ox{W)bD>mc>M*Mz#a5)vP)onlTBP!u8wZ5-!41Vt^WUIW}7aiX+Mv zO23G8GqXDX&Y>OLYH7d(GjP&RdV2ZhAZiZ*b!Y>tIyyfVgv z@j}!)Vk`i^8E@ipb?^ilZYa^Dqs(gnB4v%E1Hz1D{f^jN>bTia9J(5w-(Y@;q7yu_ z&cXti!j?YioL@o*SS@R%hV|df%9w$Il5V_WS$-KK8Avy9;ZP@VEr2`6 zx!|==lEXS^2n(r7oTgqMYy!$CTPP$NTI}(VP`nwM5 zXcUm3(*@lNL0LsKZ}yenDh7s?fb0YWLu`LcdHe1r_q zmG8p)prnPrSE2NbrYgASEc05+P1eWD;9HIFpAqh_pUKKO@~46PI5596)4v8D*Twt> zL|}*QTP!$ZxM=Q_OoYij*Ysx60P_SV4Nr{W^Is0jl7NB%78=4?n);n{*6~iG$!CM@ zw&;tp#AX}GKmtYx>ey^8kJmIXgtB$pVTd^eILlqL!cBlwN$7NOX0BsWP^ZuzPZUB9%L97vaT{XTcw zJO4oDJ4~yrgwWs4rzJhUk`y!PP7f(zLd9^03wv#-V=D6p>PlWXjE#MX7|nUv5i`I|NW;^@+-@DkpE6grITA8T zPcG(L%OCI9CTFkn1xUW)hn1h6f;21Z!tJZmp#KOSUAll$O?dH~o5NmNS)#!lucPC> zbplnj4zTbi&;&&#z^Jd7*E!!f>!d~*2kIuNvXp@qD-pdg?9*4?`2O?D1=(uwm~0(u z#s|FYU@>oNVx!xX0assGh{9QnKCM1D6=$L5ESK^)S%)C<#>@2q4>a@w$rXWn1$f!1 zsn<9CHH7uGg&9=SmhpxI-@UveJXOQH#Gr6}{8?LC-As4?ONfRg$s-0*zsoxBuVO`1 zL$EkfTDH+X2fE0a4{p}Cv9;8q-!@+0ptUomV%tw5)k%IU$C%j-(QtRa^@&<7E3K&I z3KrZ^WeFs5Vg=Rcjwqe`Y2b3P=`|UXZ$Yun?>%8;G(pbSYewVCd}o``c?PNC_XJu5WZ+tKYJaeJSK~*cVhJv2c%g z@jHzTj-tYYqMCJmvp~!@a)O%2_~sM}VfdSJS^dGvWWW=Gy6-D?#RExcOuo`F{=w=B zOp)pxZkg$HlbQS1IGp8r|jy3bs(=_5fPD zal@MdR%yOlkPwsS+=Leu&dQ}S&F)HS1x{~UjHd?{i1^kP|Du)N*;Wrs)0UJV8irzu z(z=XiVCe&z1F%&)J9^uO?|jm;tyt^47Gl)bDuOOw%(V4l+jn!p&2Ag+l1Yyzjp_ln z4K*w<&o;6)c)eMe(8QA+wvRn*S;d#}vNt_FMxL^acz5e_yf%AzOAnvk({AqkWB{np zmGxoz1?%s-A)R16dAK4gN3QqwE7?(pXb1kxsOmY)4T+>h$ShI1Qsu$^j-m^r*f>*U zAAx%B5hrnYMBpc@D5~!l*jYu}LUc4Z?*7pWkWo;{VdxGM_ev@BWP-xqm?IPYrrilH zzw_q`$Vxp2`W?ehu^JWRs-H0;t$a&-hCN$y4(~v*>J~K?2i?>!sY6&BXSm9_Tjbl? z8T&!Miv9icwy0CcO^0+2(v)q`Rq?^2zs~_ltD$xGF}L$v*YtkY9Y~1f3xZOP{I55L z0j7tlI}zl(>&1{hL0k&rdhLz7L9`d8%(bm^YA>Flwk@~sX1ys*U^M*OP=GH1@etv{ zI~=iquRs(n*)$Kp2AV>vLI}7tW6^+=F4a++6vR7P@%z^1zBGAsV0KGv`=xrqGw!qX z>XxZ@WeAOO_T&nf_ICiUBnB#T&9wordOISD+$z3{0a3Z|9@^^5BsZ(FK%Smne|^uN z0Pjvo*o^ck-Uv&Th$`f)s~BiK`GnyQ#a*}Bi|pw+skgetzJ*e0Caz*O1RAJ3;^m34j$2y12NOaR}^orWRgV8-I=x{Bz~Vp z!t1@eS**Ys1P6_3_A^&fG%qWt_pst-yIKp|y;76f0!8Zw?dBdU1noJo)vv`IqQ6y6 zr^LN&0@w5x{Ivt9T)Ue2RbM>K*3+1M1?h~lt?Y(YFzx-?e1pUo^xqPLq-wV7Lv^VX z==s*MikF(DjQr+P0JHGo5nKY85(JPf)Z{8Ww~_Um|5D58s4>!NC?U{@qfUjJYVcsdd&n{G7_WcdYRQKEg4?sd30ofg_AP2c$9EW!w0?pWL z0XBcmh}8F<`}G@Ipxan&H^?jUfaTXOuRg^4ywtF9ZwCNkP~l!XM7Bd1di5^h_BYr) zi9sX(vm;yntP<}(eszrGACNF>j#;e6A^yDaaDR5N%7^GZGg)vco3FIt%h7NL%E@>3 zqjk9HByBN|xY)*GV>ae{1>(K8r$F1tCskcm{uMkdT~(y>-*I6!aSG1 zD)_SDMKEHHr`E^35{JqWB@nAiF8SwxNgGA zx_{ML!Nj#13;(ly>URPNkD?~VqcjR=pQM{Uvn`ns4B@JDh2QvGvwtg85*MpfL#^7l zB7pgv(AaYdi?r{#>G>_cVX+q`Fr30V&DwnrdV@)!_cxMUJu4Roo0y_;!Cvq!!&5Dd z1)^b^H~8l!fv_jgloe$1*jLvQmwiCeiM>@q&InpTg6#(yi)A&XYZi!%NOj&d(hkGg zqSUWvu0jKDcNfBCj3S22-UrrWI?V|j+E^7;b?5aung`E2-hzp+;s&?R%J~?m=}KH@ z?Nm+EfB1z-pNvUJX#-H4MZh+qz2x0vTW&SI7ruD61k|5ZIs&8Otz9fTtk*@eq*)7o z^;MsS2C&G6)6IYPSC_3OKaycxc_Wz!GWs&Ob}*%^p7CDMLv>xnVy6pM{r2=eze2x^ zJZqSW_9J|R=%TG@(`h5pSFzVD@5JLhzeRNlpH*E>ZX=uoNA=R}tAUnh+!*8|Q$avq z!z;d3BQ#zZI<7*CPoF+aLiYxnO#NP}f|LbE#zQ#{EcPhr0_x7|wInG?tO>bc-lR5n zXSh?CNByAf2|S!?Xm`*JIO3@AK(mBr<~!u#-uu(dAYqVZydr&)%3nYcX+qGInNvq~ z_X|_>v&csjx^)r3SJVhh6mlP3byKUpg=TqHA4qLO5v6VRTFdJ($w$zZOPvUUN>EX= zQ>)bii(ND|K-yI322+481>>U&YJwx4H)`MB%IwEt->$QlUc1&xt}rb(&WRmAC;Mez zuHl1TZTadt)T2C?oe0$Y^mTjjCLMh2y>*W@U5K-UW%hNkNW$hvV&vOI#W!uDQD z$bY)kPg(sI0pBr~*wGd>6AWj{jDlReuGQ+V7M;9({(8f&#j5g<5GPE#ea=G)>#pp( zWKzYM+vTJ2A4|k7735-^vaaa+3}CUZJAJB98^65Tcp*NLYUfw<-B|f7;#B9_%GP3% zQe%3P!F%)>YYwq%)_E=b_6nQq40`Hm4>fa%Nk1oF)@s8KQy)MseK9Aj$FC1o{7J&N zFr@@CMt@quK`D{ZxNT3S{2YjzBAa|R)k8Y?<}9|_dy`-l?6`oObj2N1AZLok7p8&l z>&_nw*p4Fbhko~+-3XFlmLBGrgar?yiRuwCg=9Fh8KxZqhh#Fg+KqQq3>_~U6={2? za=l>xTnhZ@!5I2Ud`LfeLSK$^oE8ssHpFb}%?j?ztGlW01>h$|)e;u+SBe_wSbw@M z$Cm({l&C_tcZ?z6_jJPCgTVTz&WR*r7RK#QusYYx#}00T?_x+^`?-bucBLc`Qg`RN za_(*}4)Zl=lu{mDyI>Zaa2f1eRpxDuH(+VanI;2Z=O%%l!VWjnEQt*|ZXO7Zzfw)< zeoHK|%S}WlDyR@IXph%(M?m^#N2T)S{3#+Mr%zX|4dCNwh4wmq7CCF=^qISh5X0O3 zC>0oJt3d;5_$Sb;bWtXpj&=at15!Sa@25G6*B^eHpAreTZwF!WS66x>Bd86E6n)LN zgS5to-tqi|Ti=Fx@Fe;1Agc1`9% z&+V%|x5VeGzPOaP^K-BG^Ih;wXq>}^;$@!}_x|0FkN--{H+g}=IHw*7_E(QQ+5UVF z3%B1Rhq9V=bFCWmjA2g_TtnvwH)8mZ?y#&Kx zR$?6db3~w_Pg}44Ym!tA9`yr~tcvv>JJ7B&UTHv{`ZE^tCw82^pa^#JP3A$*J{6{b zb$Wmc=P2sqC8D}^uNj&MJMipN0I1)xhqh08E*1u0@|D1Oy+=TA zoteyDP|Eamno0@^bn4V*QIgu+89WfTx%!a}TTAtW(pm5*j8qKBrRT6YZ~STNpC0~| z!asb|INY#aqq-ERub;5bu#<#|E;lTKlJ4gCS%E%o8qdX#!=NvVaAz)0`Q!L}6w)iX^NZ|hdw6x9PAH+ ze$CU2vSH0~)wMrN^E1S)z4%9v%q`76Ijt3EU8vnkjtot~ zjXsB(^U9*62c8&>#UJnNX;2OrQ1Cy{LRo!Kc>T+O+hoF{@JAS*&OgEC~)e>7eK*#cjWWar7BR=Y-EEzqQ`)?h{OZlUV=d3 z{ydZYX@6-lVBzmCb_}b|0!-Q!ev7RUYnNHj8BCTn09phnN^kW%A!WQ#<-PX_bY;+D zs=r4WCyi7F31IOp?Lred5UELtqrxJY*qwA9bEJ4g6eO7S+s&kXsN+@l-To8xe(H{rIfrPvi-FW#;VkUV=?^fv?e%%;R^eH=T@y#q&HnKy zT}~wtLCdyxpz%y3AWc=|e&^>$Xsi>4X)q_|=ou{z&wm}#87eS9VFo-g@IufzTB^Em z`oXUrUJ*ZCUJ>V8# zmHRS?Jv8VO-RH4L$4~gBdgeb~Vf;Shxe(z#m{dbder$+`FHOKAmO@00GP631pkQAdKhI9i70hp9iXIXfx@7I(m2}1HoBb zc+!Af1_2vcW$D5R8dqHI7a8d%+`+Q?kl=iJmk(%N+@70@#qY)3SDz$hVA>GxHax#H z45G=}&o@NvWY`tVaR@)=hd#(dmW}Br&jwwXfk5Ep>I2RDw+n0sD~DIxm5EhT6bLb? z56A)19}7+l=2Za9cNNPVp5kSfs+Qr-&b&IU#nE+*{CCp*rvo2#p3N5ySyb~OIiXd> z${2cfVlRsWUtRcZGS?W~b#WKkUec((538`!IGJUZ0RxQ;GTw>03(4?WFM$KKo%0#z z&66cai~s##*CT<~vI;iC=T5t5fTKmrP2ha}gkEq13_I^iyQpzEti=&j0etS2nkO8M ziJbND>wIFs@XrkJ%TW*we4Hz+QwYuD+aYA~O+{H4>I-dR&kM-NDrIekqV$HJOPwPetqTq5 zMOFD6aJw!JEdtRz$p4&hYLYeQ#$jvZFy`^)Yd+wK<^vH7q7H*@iL)316w_n>>787} zLw(!-hrPE9t8#1iM*%@X5Kus+k!}!>6ciUA4KkU8ba$hKgovWFL5K(<-65^CfPjF4 zFp-oJDe10rKlrZq-S6K2z4ki$T-W(>&X;wqb?KV%%rVA&-@h8UR8}Bf{D$NL@YLKRj`8>`L!3a3x14MG zcn`LBF?IC)M!t(hb2+&Wk*5C>FfZfaq;!rKb2U3J<9`=%j5h&?c1z2+b|c^U0rrWL z!O-H0BaPd=wE<=R8j52i8-P}nK?~A&)Pkrp1f&-aEMxW94t?+8Q9WAnhMLd_u@sss z2S77eo)@;!=<|0o8Ubb^r?%kBxlfme90YGvv{2gz*ZS=}#5-poP~^zqx31|0pS%f5 z6=h2#9Zf{8h;+y@l5x?5u)NFDamEitN4=PV54m#B{FPt2L5ID;gC2({vU~Y`?5_vWPq@d2?#JUpHwDOUT(U0dy@hR;7jvq}&oOh`Mfyp*OX8jrL0ip93ugVn_-n4lXO*Yd81?`Hv9%%WEn`|>*q06fW z8t@rtf2yOom9Xp)3Wq((%Pbz~4K5$)wNFChur^LH_-~tj!;pJSh@9dr)%amgP!4uE zo|B%+w~Qtc5-08o8^FN(%N}_D>J|R$zg;zjMNDaxbxG3hxIRL%U|J|qj4{Dk7RU9U zUs7}mjmG26BMC{Rw@nImX8}~hZ#)TvvUOf!3DO9}p!GS?v?+!G2OHx-r}#d49(ePA z!a~=+L7h!-uHC7oQu3tB@JfT9({r5RXj=g@cCeOw6n^dEEk_($Yh0QccyXkYeF%&2 zZMkUqPwnuH;XQmTLF(C)#%su&5T{e~CQs2NJ+6JqLh&;r-h0S2rey!>RJkWh1P$&~k*DV%f;SYJpU@4V_p#9hQr|4_JD8pQP;6duSYi0n zDuyvzs6hBNNJj`w(}&I|^N@p@@{nKcn%ra^?4d7_BPZa;zimTMx&Ur>S5}mY&-Qr8 zt#^$Vyk-$vZ2<6pGn=2FX0|1MQTmp=l!Z*be!7LmnHYv7BjtBZm(Q+Nt+sPddSs?A zf-2t$Nl%!h@KFg+;0QO-w4F>`2f;7n+WrS&AB1(&1utEy&>mm!N=!M+f}Bg(?72Gd z@dP8r#udwrlSKrK(tRndFx4&#pJuYs>ULML>~I6Rl_B|M2_xk@$4SPwK_&L+mw&%-hI*fiq(tuidC z`P9ZwAD=Lri%@gX!@}_QzQbHG4U*T0OYYZT&#$pAe=JRf;Z@xvr&Y}c*O}luOpok> z6!IHsXb~=6*516>TY!%K9@vf&uAXlw@|e846C$(Egr4O-_xz#(;%xd*q1h0n(NV>HGBFK@KQH$*d4zBz|A*Z_eWV(>}nX?M4l z7@VqSGtLLKzw0|wZ}w`IOK2TVJfrpnB1%UB7XeSE-t#xBe!wvOSo*uD42ZHq*w`Zvkg{dobb#BiVS&IW49(pdh}v z9neLGBBqwS?XW#>d_*k`IY0?_X$c(@zb-dOIqqzD7nS7?d6C~w1?OZ{o%NXq-?d( zGu02$!7Z{;x#Bfwo7sHCR^KB1fH}f1*zZA(nG8f+7d=_!Fna7*Eob zP;2GUAvqSfng!$;rbPT1x6&riRq`f}>-BAOfy&kJ1nou3Yo)T~J_H?%Aau4636jMP zBWQ`SSHzl!XH5V{zK$5Up3FJ&ODSz7@~v=mRc1Hgj0pxPk^5nW(k+SQCzeXO_CG(T z81{C?xG$~SUYZr%+d=|uM8_fj!kaj{Z-`)(}l364Y1NHM&z zctP_<7^1b-d~dDD23aaTV2xzX!OftVp^?=U&fwSwVcT(Icb;B(Ngb&W+h7Sio9T_L z6oax{Av>(FHNBhI;V$|&FYsWGzi$c_@?8@8cVX` zMycJTzLVa`qB+gYvj193|1~w#e_}eGIUSIiYK_G$;twjRSY!X40^6RftIhY9J?25g zvo91Rg1Y_YW;-Z2=$dq;9L4}OnhZD_i1bQ%p)q|(KOx}qy?$E<>5CXkq4aluu)MkW zC{!1hFU#W@`R5doH(H zu+O+A!aOvZe2-%&0KP#pmpe~Xy~DP-_eYDqVz~O$CO+kKU13q zfpx8@Czi7Q;$1l}Yrxv`^>;#Ds}M~f%E{qGLqref zFu|!W0kTxM_mC+@Ws@aPj)2))y&vVS(iRu)T{DRpDRgE7xx)*pC?%8GS>|uuJ3`cb z-dRQHK~NvQE0~j9kYSb&|Cm@HKsZ?xb=%FHs|E3pj)T-Uf~nSry4STNs!OO_O3FC_6)Zrpk!RgB-h;w5OnZK+oTD_oKU~nn61?eEnxgsA;;NX|+^F zr!xMxr-$ytJpqGA?aMq$qx1THZycEStN{$10Mk?|o_w+veHnb6l*JaNi51yy+FkeT z&@Y{;ZTEe-`f3h$=a~*JTx%BW3PTwyZw`S#lmo4rTh@1}U^*5UJ+!59=D#*tAkGev z3%8eDZJ3Acf7*~$Q0&?xN_bCQ3hblW+(!>)swYQQ+sm@1fd^m8$)sB1RPPmXsVb1> zy~~N6%3Q8v?W3+&+A0?I_@jt3J54qw4pGa#eW_SRElYvAnnI1PCTC&Fk`se(ziG>n zr9oZ)X6$(H$r%&alJ&o4)k?5*{6uY^M}C~%rlY8lvhJyf6(-Z2AkDi}ybw7pa<<;g z;6?QUnE4Y5a)ZUFAcH{HHAGNFG~>;CSR>}m0zo05(Y79vz2<$s8;-VnoWiz!8HS(q z8Df&2wxeL6%M&B9Vm=u0#2B8KG_W0WvZ&gqWzV)~-Xq93oK+7?^ldCX!#0cl?3wY9L1qqJm zbL;1WVN0j^5IIolL9 z@YC!<$+^&^r57=~j-Ua{AfS3s16_VXoWLuiGjq%?*W>d)M%bRuUigDsXC=31lMebX zSABIZDRQp%ce0e)sRRr?c7)tzW;|J;@>d_N;b?J}1f=C=u+Bqh6L%A$;X}eg3cj<< zL?Sd*EeoNEU_O2C{FkiZKc-MU(IYbgSA>7wn^@G2@ebf<#%IffW`fSK8%c%G~QN)q2<0~hW(pC)!dBy9FainY#j8>>@fee zF+Ix2?RN;`tJWaLOzbkBUvYa;QH8n1!>rUQM~)SnN0xIv6=bNcFM?YL$Sv?#dfo{! z31l$jWeQr-UrPXeV^Pk7syRKKcg901SYhqrihV^ri#J+$4cj=pRVBXPf#i?}Ap9&D zAy&;l8X7yit%H^MNggqYkgpw@5l*^Ns^8&Mn*a6oIvgF%Ge?Q6S{qy#79Pd z1#`vkAfvVKr{CldU!a^P1AU|x<%2nn(zM2pfb5vXyv&>9_a?rckImDFtr+vH=R1BM z3hBS!UB8-Xplb$Q_h}e>_3zS|1_OdqZhy8X;0~|`!Gh*3!lmAd(d^zry|iq-0p!~k zx3vp29cQ`&4&4*qhWF>&5$ymd+WiR z_f&-+(=K3kC!*UdjF$?@qG|5aY_Ns7-!p#~(27Ucop3tx(}F6~v!){UoHIZXu0$Ht z_r!zTNBZK`qL=$*Pw`S@&N44w=O{E_E>-keYa*2)MpeCG)e_FgHDhJcIXr|xhM52T zvTUqFQYBnB;qha!!jbbgdofJa+za#x`j|NYRC2 zI4c%b?0xa_E`kO(=Mu4>tyj(yPJ(W+$#56w2|X7TXE_OwWBE27YHp&xK2{KYwgCk+|&i$g~t8R^WCO!lQ4a_<4OYSoS#3dQOV#6E!&Q)#2p zyo&&ziwZ*gH*^lFp*uS8eo;qWaYrnYF)UIe5Y7&|0UQymsLPmz!mod~2D3 z42g+0&9(mqvwJSr{ zo6T`$6u*g)c2UQ-@S+=f+SfyA;`LF+X}Gc=Zv5KSz*!tZBeFERG*;}qwrA`LLuu)m zpK>S)Bxci|H6jkz6Z*mG@#VQ+V((ztBNOO&QN^fF?iW6hgWB7m@l#j#Mj%flyJ&XN zW(y~4RX#lv3{ly+Pc`!Wlp>qeWe$YZ)DvcQ0;Op^ziOHy;$@Y9UC0tm>vs~_m*{fG zEfA|COSIUtd$lRx_bVlcUb|3E z@b=^RY6LHmDJz8*QcR8WhO!PBw;#WDVXWcpZvr5Vu8gu+yx$paUsX$8pJPek7x9;c z&i%O1c^wzJ|7fTf6Yl-Baa*!tgfQS^(e$uU4yp#wD^KU!RajJ~F0L1Sk*8_4%*cJ0 zrXy=(4|yeF0Uy?_6r1C!CC|uy6bh8XOE{i|*XZGhJ^yqEHaYbyT5HKx0ooUQtxe5_ z1%O!yQ4;OU9v_~2EI9Mm?YmXNq-VaJ`EC%hDah`}sk~5-%kU`=$==NRCC{AICj8L5 z95G11tSBXj>j`ORQ&m4_W1Gbv*lK6L50;5ZLEI+^m@1@4^t(UpV&HO`({VOO?VN$j zwMuBebNOVJu&5dogH%zIlkXL5vb9^6{v=K+Bf?oJd*^J=`$4KxIAvjc!INn1YKS`F zP8t&6KWF85+n{3uNSrIov-W=pb-uU`yisv0Fpdb&3FlKg4@f`eh-g`v;uPq;S%Am1 z%%wsmAqE18&)d$s+Jgi(elwC|k5h0m4gi#5{kxj;99aaBge(mV5n=eW_11?+Sf z+ZkQ%+c^`W-=rkMFE#luWcl5vYVCR9cKwMgd{d+NF{Io=$O~IzG?p0!F$=oX& zcI#-?pe$siaGQ?NY01XTHu~UUb?kOf6`^djn$GyL2f=~l+&Ew2PcB20j}}5p8T>%Z zJZJ;gW?k_|?Wo{vrCaG(RE3r=5kh}JT~;EvIZO7r6EsSS>0%%h!e#_CREFdBmf4`wp#hS^43? z-W}D)mC$QdcvN>dmVaYI3#Ar24+k6_P`=v%Xtb3}Cp}{MEcR!FD55XKjS{nVftzdJ zEjGRhu`2a`u z@0R<_o-ESm9iEupn(fW>bl>g!vi0irAm=h^Ok&od>|}#X3U|af`Zf?_hPk9IsEIoE?J+C^|!Rea@|nR(jF-1-c2@QQTl`wX*IWsk`Q znRG`Omq}F4wu+(ba08#t)+!mtS!0ELKdWu|10wZ)%5ntR3FJEkzd#_m1T=(N#edQ; zpvUHsxQh4o`e|{Nle=7HZrX!AOH7H+PaBX6FcE)y6|vDv8f357oZ{2py$(@CeT8q7 ztK>gMXN%f9s=QMyT87Q~c>DwUG8ZSSX{~<$+SD`kmN{j;2qN7Dn&6@mYVCT0h37B3 zVzw|6BNt;z%VCKW^cBgRsn6*ruyQ@*J|~^Od1x2VEu5}0qHmuXM7z{xr*iG1^_f1L zw}W7;IG^d8C~Vu~5%3CAd4?sAJ@C^`g8#Swvqs?0Dcp+hct zGQtKWC=Rf;c{&Hzx`nE340`|?E9^A|X@Bga6p3pMjhZjJFA>Dt+7Zm`0>8cbV!I<9F$LLyEF!dRsbZ z#5-g-Z(k0FTy@SXC_Ke#o2*>tE{%Lg80>*NT=trN(M6V3Yeq(sK)Uun+4B5P(AB^F zXZ@$&`X%Sz`X$gx3k@DzCJ+$0Xi6HSi4agUKHs_4C`{VL;JTZfP9VlbyX7!7d1)6J zu$!)I4y2}=rc_JL(ERnvfIq!Qj4X~(-eav7{NwJvRsS!3h#eRQjz6@o4ar_Vg zbsx?s2ah*}gh1^QRf}sCHYvYw{d-nwBvEdDx&E=pF-tRbutXCP^A12f)`W+*N@u)C zjrA>wA4-4KZ5&VO|7NB=mJfD1jEupt+yv(+6(R`a1N#9iGSN>CxI*ijo4-aRj|pHz z4M1#K#=Kt&V#tTbXek`Yq|l135-%>c{7*8y`fz513oy6+%?0FspA>!T8PKaLN&*rB z)4a%a7jk?1K-86acEuI{c89${t83;mk^920iN5Nh=J0BV`yQ1fJpaGSrO74 z5*xDq7rjcu#@|(Netr)x{)1$w3K!(~U%O35Ug=}cf4)vi0;sE6;=^S`dog?yVPrGZ zUQyo$Y*GLe(X_Y*!GASv{)>mza5yfzur?8YFc=lUOc#ttrOQYQiBscG6zCtfBZmQk zS2Q8m0{~;mK^=cvD$W3}z9Uv{&k0IC*5qCv$zmMz(r8T+9G9Q~224X*B}q!$X%PzI zb;LUYsdN@1urTs@@=HH6g zzx}}{f@A4b=>HQlP9ZanE@Fy_4>;U;#}Xy^tMb@K0^r3%&`MoA+)?7rr#MMMO@WYe z0uBR31sFBZ1_93~iN}EVcg+jJh{uib)h)dakjsdW9X0Fpf zD>#(2v5kX@kNBLCm+Ai7!n@Plrc)oEnD*;glK{YB0X&ds^@lN7oy)MwlO^U6p;I?YpjnNQIjI z435FU{=2$;id)AR7R)UOhQ(#_3c_$rK|*}2p{oQ4Db)@{4^4=vCIgI2NExh!uMuSb zw-5FJhA+XzkZP|-_5^QGvhgr8L0T*3{(aVy5Yj#u85c6tsPUl zEt^jkxtThQ$>s(2N&8~*{_Pwyf`;QUYp z8Emn)cRK(3Qufccg}-u@9ywSw9L6poA6Pn0gr>gz!IuaB@vr>Fr*H&rs_*iy0UG(h zEt|ZMX1upx`1bETvS=jvL5gCif*AS0-Ifr1;%4f>^fy2E5Ui522w=^zJ)_@p90 zd>PE^DXP|0P}`y`hM z!gxw}1h9x-SgoqFWsi=>X5hle=-|iqxeB-OuF>->$GAx6DvHB3t zqe&7CXsru~^sNeP0reP%+bVuOG%B^CMDENR0C~w|BPrx`2mp!HpZ77n9AyHEBoag( zY|sjFP6h-qjV7JdYiM}*4 z``o@zzI4Cf>!XCFf3}^W$Z#xX9@7U3eCUloXJhj?T{VQ@DN{t^`J=`4KYN{H=L^dR z?M$H$It5Adr;tD`gE6H0+C@@~mI0Dd!+=enmmxMor`{jh4eJLWb5*b4Iibr0E*qb7 zFHNcHuYUxECbzpUu}P;u(=ad1rBsmTA%v1iec&?W`m=|h7kqPz$57D{TY88v61j8h z-WrOT_dtBW5R(|O-n+#SP4)A6NFX%a?~F6H?jsi$NI~%a;-ZFV!2vQZ=-Q+_sP4b< zdit5V^y9Iy)+h!BdQd_wLv!V69z|^&gPqs17`m$VOVK639smxa{pCgDqg|b$>ZHVq zSuBhOZn486rHjhoyz%^?w3|^If${Ogb4<#f5HZRwxY%ZGGz7aa!>_ug_U!vTl1%NTT-G;=;t z^j8`|!8zdz3+9`E#mDG}v6C+$8RMRsH-T<27M0BAxS0AN!cRuZ9Byyd$rT1Rdq;8A zm4e1VN(z*vBULozo`&g=5!^-gVPY*|en8FXWRZlo$LcH%hRfjXXMdnq%HcK^5N3xU zPS#CJ5UNCOjsI_-tYg)5tm)_1*H+?kf`7Z$#SCe+_5_=axd#z-j~XzlMNr~fn}wSD z0X!#1?z#yfsUVduAQ%a-8+*`=r7RRE za)Q|G^vj}NHA%d~7ZRR!+imLpXSfLlC~Q#hd#Ae978>1?!qLrhMOZ#punI)=pTc)E6hBf zu=>LVLOY#L^wwPBec0=E*?IPitU%zj(Pu*(Z@8K(x2{0p-g{h$X{Oh(S>(S?f8~yr zLUmQ&eg%}v1nH@A7-%bXb7)p;l6_CT8UU}rMAp<$rW%pS^gByF)q5`#UTYQ9%#n9< zg9u2%FaMvl`RW#oI}qn1g@I5|_0G#Yxp0~x*MaOmn1kW|0zFLm9M?HQU#1nlUsXc9 z7y56?zTQ-R02Hkd-ySgAk66dy+J>Y4GQJbKo~~un&7&?^pPaCAdEZ&K=6@x--b$jF zB58q@`?*OctIPKn*H@Qs-)QlEe-m2#KDjUED5!0Z<3DwTl|AGimivUz_l|%d{;}ANT<0}GN5iyE6z}$P!1%o)-miuox zKR`72@Vh!?QU5}m$pap}s_!zSkSWD{nm^;&vEK~#w1L(U!tO1DGDd(0L~o{`JPnI^ zcZ~JJk$Q!123#SZ47!~C*IpLE zsf(y{AjRwg5styPPi(m#1LAc*v%xBrv!m+P%)su@k$TgWG z$2g5c(KT9`3>uSHI!4}>`*L2F%6?cG8vM`C35$4SSd z0`|>qet21qwLG760MA5dZ;}9BJL0=R_>opSc&)w&$JcJ!5JOPS^YaAdm{`EXi#{)c zvUaZAufsK0c8ADUNQ&DpPQJ{5;T#P2Q}8CjO*W<=;k2ws|Ke(SCGn;BNwG+=R^)yv*Mo&jFl0a8V{e#2 z|4N3nb*u?%l{s`xq#|(N)NFa?SE|1(9@X6($C?IL(Qlze3$B9M=T^uzd zI(GLh+e51iMu&ADFA&JB493{IbRpMv)OBo9ItN`BF5p)xEUsev1~S47-y`HMau9zP z=bZF5A_e7NqpQq5VhxZX9R)_)>(`I-qPuytZPsnMFHmtpl_1%Zyn9xLC1ShHV($9J7OPrr=?qvg-OpT)83 zoP}#HM&=`*X6%I~2N$Xm-M9GtSHco5hy_^INEdcvrYiXt$;SM0R1Fgj9i|kX8tAx; z**#Oe{1_7?Tw7=efZ_{GWcvJ6Z4bQBg+jebhL1BuGpB#)xOQqSN-DW6uqXH4r6&cT zZ2vpH%%ia~vAPMx?@y&I%WjXoeWTtPuDE;PJv@}WPu5T5e1$f|bba%GYvFZybmeE-AtP^mb-ke#?IBpSpGmO(^o@3X4Y@zx6SIb+%pq zAkRU#v}__-*b+fR@3wL^Ipq9w5K&Bj++k4XeO~(S?$7c{$u-2`*0Od!JHVHTkG2Ai z&N-vv?2&9dscV~G3^{lYiD`x`&}YPm+Jx`cvna9{CYosvDzK7UO;6R$|j z8L{LIZn! z?!9}Ntbfwf;*5lv(a=IAn<%Fq{hny6vTeY&WS24Obk1gA>X$W5i9k7xz*-9tVsWF6 zE8A_8Z;M|{iWJfeL`bkLDH}_!1ilLJs@ESRSa6}!;G24S+Qij~k+G>ZaYMZI`rZC# zPP3n7s~ji97zrBujSGsCg+wSw7ppjp3syddNBdWM>SN`8v*+hQF6ug;)L!jxF;w+y zA_PZj`IBAnPo&qK?b1pwoHlhy4>S_mg;dsHc8ldR^3ff z!)zQcJi}cg8g`ytJ(;f!VS81h-)vGNE`{6%{BLE~4beGbtH^%T%YWhSy*tilS_pzN zacL8NN8E66wQXs1z6fmpA3kDL=-1A7lbPS63p6QxK->}~^I^P_tERjQZc$y>5NNpi z>1|N^5tzp(wuq#k*(?IB{fk9Fk>h^7tF2A;3s==Brm<%`!=I{uDH*jMoW$`;#{~4@ z=mslq=e^b@G8S>qWA$^`lrmV{&fQpgd2kn$VlQhl;MHR=uv<-&*R7c`G{JxDu;;ou z-*a)RlE3=I*9XvT-yh1AGS`d=cVg`oH9{DwhhZ{Zp?0<3;#Q>N@WJG@7Fvp(ASr71!`9t zMm!(RNFXEiu3Ty8^vMZbHhH}GJubn4`KYt$5C4en%T{IUBn!|sZM{mGVeyc$JhFY zZBy}0$_q~Mk$@qi?|8vnVTSj<=b@;m$Bu}21d)1hZPCmDYJ}0Ip<2uz3GkeyFJfus zj%gW4rV%%K!M6c)UZ@kw&}3Mwz&pCp`vE>fID4x_(!DP?Nx4q4)x}RSo!dLzDp^-L zbB(j^eWvF4Ljjel?^Y$lx78+_1)Kfb2V864n2~7X5PWepS{SNuzFYaJ_~QzCFhLyI z;9WzwmW0!*pI_#j7T)xvk99kn9MX|^wpZJ;hg3V8K%tMP>kbbyVcYW6_^U*9X49sZ zNx#0$VHJ@qn0@(N>h;X|X*Ql@_w|>4_myyjgDQiQ^}jsDqOuC-X1XdXzK}|LeSa`% zPF1)|vCX4?wsvaeTm06_;Kvz7`dYAAw_<1D4s9Du47XQBkzHIwL@O9!J#E1r2#nN{ zZCD6PRQ6`TK55kC|HpJ-59rGZ-6I-i2=^rWY<`|-J*9o-*=s(G2x|AEozx?BE=M=| z>9>=JJg8M{kCU=EE2sX1l(ZywnN^n|?U5q0R9CU4I$oYsL5*0ZCSK4(c8rsO)|tqr zr{;LZ(iMawRuAU0D3rBT>GjXZ&J6t6Z?l$6_QVz64xifZ$-$!9JJZ4bT+J)0Tdyno zE*rT6Yp`03P}j=cmbg;^mwiXRE{F>+!3;TL>i@A`gtS$Hi57!}8CXdNFRGX&)?+)rWd-EDC(nz-9I!;3LPEK7Yv zWf4FJSJ7MX>=2KOF-o;=738&$vRBg2RL2G0>KBi;WNnbDWnR4!fp*5rvnmJ?FXsov zMS)T)Dt~-1qE_=&xOtLa9Old5h589ex7A4!F5(!plD(C|Gr_5MAAu#It2_01J4sm} zILA1gb>>=^b0UV2Ar38)M^T?6a<^}xIMzWKYN=F#@9H*kz^v6~IC&5?zLz!@w`RHK z{7Z9Xl1#sbvS{02a#;P*b0V#9${45Yk1CUu>>MvQCW%zCe<{dRCZ)8qV4fS$xTptr z({?>EXj-L9H;}8F@=3I3tHpOC`Cv^}I5RL2B82k!;g3J0Gbk~gq%CCLczN2@IrZD5 zNO$*7tJbn_=F(Be$B(zaj@^$v`?q5;33SiicQ?x!jpB~C7>o9^?0AES^hg80 z;d|Y<>9|`f-@-h9C1TixF}Q)`{Cn?cLkUM_(%PqfXPt2@^?3bKV?tzuO|w|EcXO>( z2&|S}c)MHpd!L0|3a&lh;W633L)!K%+61I!FXM*AQY;rI!&!&ANz__i;u}jz6_mMZ z%|P=TDXQ*WByaQhs-~@Z^#!LNJp-r9GohnUqPKB%VnRhbLA3uYBd%z4hxXN`%k#Pg zed#^(1UZI2v*{~hZzf2r5@mXL4>XczD+q|S?K*?cCwyZI!c%$Nazdgdd6J7etG)b^ zCC|*4p8iiO38zhfB3~wBBE(s}%KO4CI)oDUT<^68Fp%X?N(H95o@Q}TQdS@Tc-U1{ zxh}*M<*GWC_DLeZH8r`Lh5nD#3k}!nd;BtAtf-8>#4Xwm$e>^fk1bGAkP(Y~*3FXf zmD7(gq1D=awAG$DncdqfqvHM=52YLdPdZJEpw|uMj)am>8Fl=kZQ6?tH)2YA1c*sn z1{9RKopE=)vb3vzr7=iZun~U{IWdzlRn0Qez1~DZf9Oun8mv87d3j1GZ}54f_p5he ze3e$Y>`l=(=E|k4-8Mk&D&c!gcYtu6`wu*R^2{@(h zaho@6%qfmttb{nSqZe2&syk_KBTL zB)ih8VmqlHvgB9lCNrv77s4>cGIo8A#H2V;zOL>U==}sOT0u@gwtXBLu&Y^^^MuR zgoC@C=EvJ!__(hajGqq(GA#8uq5D3>p1eS@hgZCA#TwP(3qg??JHEf}EWe8Cw)>U8 zd?nk%&Ksau=}CMY+_z8NO=l0E7(}`AzI>m#PW!=kJ2H0IT!laN?2=xeB%6ae{nq7# zD^_d!;Z9ZtYhpjvDmUA~+Ou^h{e5j+|DGY-PusR9HT-(sqwP;Ez{26Ly+5@@_tYSo zv9B#vtHv2p8)!V&xh0qaV@^&m(TmF13>PW-_jR9;bgFiBzvL|tBg!Lsqe@dLcUs=B zYJ=UlsOm`k6O-TB$Huo;T{v@DnTYbd=Vi!7Jh{t7o+m0odQLUo56;hx@Nw0#Xy+3+p%R=f+JEb$2hf44K|8}IJ$=hI zC!3rreFZBD-#hp*f!PM4xr@aVS1sn`@KX>Uqq%s!|TV z=C$-vO8v>}G36fH!R{w#BGaZFcapS& zP&ejsq<6tt0y&K*jD%eo#&M@jR%T*k(;_xs5j|;p{%m%VNspdMS@shxDe8g4ZR$_& zy9_s^Q6DDS7^JagImR@2>nq?$3?;5yc$4o10ndmkywL9|3Q;UA) z^Lq#rP7KK&ZWVtrKkH^HQt*Xvh&6^#pS)fl(say4H1(@E(|crYd<6W_l}|mOYi*LG zi(9Xi2y-2Ee?sDA_e>tc8w)zo#AhY+pX2BiybVa#{Gz)*q*0^M(?b@LM(`>ny;~W3 z{VG_wUzQ3N?%W;K$j>#fiNO>xteMm6OPnu}t-M?um)SDI{F%u- zBHh{UUc2#JsmQXl!p_7H`;k$l!j8!`kto;By@YDW>f_BQyIY$Pr{z4re(>$1wb)jT z(uqmbJ>_56%XGq3-En!MhHViHMivL(LosfzqERNQM}e#(M^Hv(aw(*{OXk1&qBkN5 zhhkf6BJ?*4l?vO|gsNY-I&Q{y&ku4(VWCIIVpew#^_T9XTeSus@GY&myxn{EFJ-xe z9t_FsQED5t7wU7IzJ4kES&D^r>#beCMoij}{ZNZqxc#i?fgGRVM%t(+i*Zr5$Fsv2 zXCLu43Ktb|g#p$Pud7$(D4k5mC$cHJQhcbipY~`O7xQGyD9Or7g^#lV-2)d{P-v-d zbLkncPA7$&+`n1-gi)8-uW&ud$5~9E?9@0mHPe+0y>`3Vmyf1piDzl@pASGr*4orK93z|H@mo4Ax4#je5eh&a7H~){eKBDT`LC>DBz}pKR1b zPkKYz?n-rnlAy{xqkJ%c+pX`}?^1K-UexQEnTnq}8oB@vav*g*_T_ZQRQ z%n5GuyAOlg-8HfPr>^!}TNo=D<8P7RqFJ(^gH65RUz^d*y7ADjCpiLzr&h}xla##O zfG2a%and3)*>lv=gx@Td>})B~ z29M}0J826+^Tup1d+jU6Q+2d_yyVGc4)nxq*G}ZrFE1yz3qF6bRKSU^yr;cH5|V~P z(=lGxp_=)OFI$yT$SE?ed_AIH$+W2)#fOcz+R!fi8%J(bWtp1Q-&f`50zd_$6ikf|+y_+r=kPLf7e@yu($uG(; z+E()${+#3Qs**w;bhUK7bIK!-8 zYI%N8Qkq_oug%oR64-p7JaWt}<^}=j+UtDbN3Wp0t;GPwUzcy_9elPUEg=80sh6wRq6a_TOsXdct?YHqh zHhb>Yo|>_+~^BLZahC-T@LxgXMS3QYWTC< zEO1qEcd*7QS`~}SlzB_QzH&t{H$B%?`_w!JL?CNE@kH^7t+uF~>3CKBRjefYQ?**G zeJR{@A&|U6T|=)HBFpVpr?}Ly2={GVR*QV%ftLq%pm_`;?lqbxyL13Khx6i|Etrfg z_f0}+<7a4FrKTwnZ(94dk_2&5OwITOXPeD6k;3C@@&XG@pIm4==hGxT+ufp+(qUm& zmp2!IyS#H~pgxKJNUyh>9W&Y2XfWO1_joIBj_zzZZ6Uz8w+OQ3$^5OlvHD%aPfIY{qshZ@IGBUiG3lIu7HavFu6~(`V!G$$ zJ-j`*Z+zCr20dRMGs-i=WPfJCj;$2%#i#zupCe!T2{+2Mp&rNVww-hI7wkS!*(0wz zg}A+f?%?OJlG{R9~5)M7V@^ z<2}1yFLGTyAuU|r1VZ4Y>S8^}B{{+=(|>T9zFwe={o0irUTwSJ#w-s7R{BU!`f!%s za?2Y27w!2;i!Q#^G8G3!uvgsXAWT~{@xX3<7 z`w>vtku%+r<9nQfahJz2&AUjve6tXf+JN{(DVtfa^92OpC2_mUuWZPX2dfMzT`g;s4=7(t(UFz zDQ|7~x%uf%UXu+W(sRvbQ-&;~IUG)+1lZh!jurxc{NY47yJrv+7-P=IKl)bx;QPID zN@e^zPs4mEi`=A1*G58T97{etmjmqg%4O+*(zB`U2O0|XTt``%l}qb2(LIxZzE3)Y zs0N826&tp&7py(Mcjq|{TJWsSO6~JpWAa0wu4FnqgwAC+hE7TyRID2&E}=iM<|~yK z`$gLG(p7Xx4R?rF43_^o5Yego;h*tK2kvPO;9dQty_xOn%#uqw7WHJ?_c6Le$A=y~ zEFJ9rsBazqtt+pz3;h~*e)v>;IrVO}Tzu)v!KQtry)@>n&WQAd4|mf2>*`|ns^gZF z#CL-yXOcqZ!#!oVu?bP+-)p6nh0jC>;<5;^;ZhW}q%rS0$UBe4?nymjprO5|c}kan z7J?j&joCl)E4M{I<^E{a#J~OsQ82Yr9Q-lDKQL>_$&b=QEwV=k_k^t&;7~PU@sEDv zuj613ovxB7TYJEN*A$6CoG>H!rW*Q9@MEwXCtbS{F|&`~_~)q44TVQ~!#oNra`Q-Z z7)PgA-ualoW;5(`u|YX5`=$wj66_0UgL0Z&-^bpy5onavRb%X3lX+g(fH*6BdQEqo zEmcQwx0A28bNi?Dld5M}@ycdDGY%}(ny89GG4{Q9d2V%)9m?&`U!+5R$jqqNqxmw- zo}yio7?JM5b8j_ERq;ZEhl~9~9+!2}0P#r$MaQ|PHz7EP1ia+5#tyc%pii2fA)QO81)_4*gcMt`zMzwD@s%uB)kv3R`mHR%YD{MbX@+Y4LM+dc{ev*V}DLB_>sE zUn6=-cj@AVsGcZ8{g{Hhxwr5mEY_x;lgrm6(#>9A-VZ(FE_3RG_JITec9{1%g57SZ z_*XWPN|CjZ9pzqZm3&Y-rs*G$PU5))fsAFp3`Tz)_Hzok?mBes*%x1_X_xj~ifCTC zHF8)~IC6#SN|bwq#$eId`OG`$noYu)#I+ImI%4u*T?XTS) zq#+Y_)3eS*Yt;@R1;gU@2j3=#8#fCdOgDEKJ#^Sj7oz1b|6}%=Q8^M^SG+(ShWkjU z#;Q=ZKo@R%oajIu#{FOHeRWjSYrpRX0VyeA00HS9K|o4M8UaCiKw^LabOTCANteXX z45fq;1|TicARQwJNP|jCmvr6d=YIEo-*e7;_C0s4`_EnLF4uAyO#FVo=lMS0_{0k= z?V@bdkKIs3InGZF0F=-X`omq&BVAj-evRRwY}&7JZw9_RVHO^i`nnZE zBwuBASgCakQc^Z_KIy}ya+HHoCkp{9az0hD)(oW*^WFR$sM%R5@M$g@dt4Rhz9=0F zfCBzSt#Uu8LT>ZD)eE}bVft0uE5|CWn$NSI7*Vahlv_z1o7K&nXcM*V=EFT#qinm% zrNW97eT&D+#>e@ny3%-(Q_A6}A)~+o%}LmWJL&k1=JMS z9m%5i6^&pS{<)yc8~l#D0+M#lOdPa}%d|i2x9bO$EPqY)i~9U%IN$2{n8t1V)7umV0!-C6)rbRiSL$6T7BVj#c@e=x#1@y(SPBbqVo;_DBLT)L)dm>=-ctveJ)|| z-I^Q@B;Zk4m-_3ngmW6__mYU12Qa&IvIZ(&6lU8Ds$rfk9NAe0t8Yu$uGU%pSZ}z@ za9&*H6j!SLH!IUTDi#~RHU~}v!M#KlR}e2RmIWK&`+5WHS_jp=MxYzOjaRT;3Aq@Z zxXCpx$a=?9!Xm=XIqy;XiiaZ} z_bXqp`Gk;W!klE5ndp|KdFvLu__+y@c+Tqp%E;(z;N;;)`-YZ@gpkp?W=iSwJccI`UjBotG9ds-*Kh*sZmw~gYI>j)F1uK+7OY2eK z`C4qt`pN=xww}uO>*w{Dhd)2QW zZGJ;%yv`uvx@Usr6F?A+y04mqQ_%T(+1mkRD9I-ejS@=RbYM`;`&x9#iJ!>Pz;>PZXgqcEygCQsK(oC&x(MEB-pHcnlDj?ul8yq#&KQ?{wyP zV2KKhs7!y0GqY{ooReU0NWE$1(SyK5e>tGe+X99(QzJun;hbSjN_(a9svx>yc=fD? z1!n*Rkp!jxCQ^SHr#dv0*U!K#MyIh!YmBQZxs&=aaAEn>uL679sU)vYgizCk*L|2! zEyd^-6dJ+@oa?vHx4Q3^1@xV}U-p4j$0=(I%Wsak3+oj44%eI4KHwi=PwVjX>d8iR z(+z&ItDUk1^x6!H3}(#YRdn*cE^{`-W$(K+YeDYshaL<{*u_ zifnM$Em*mUI}GWc()vXhj-7tLEyf+AsGlV86_CEHBdpeW;qb2@V7$K$6q>jXUk}PB z)U`CTjM?2(j|B>7ZPBA5x6H~ zPfZIiz$;{Q^>TJjSybUD$hT|a$kjPYE|gzu7`z4&Kj-OZ_mkQxCpW4y!v_5lueZeN z-uE_nqiix${ceKCw&#afx#iTN<$~P0xO58p1!rxZi`I$WQnP6wxk?g_{!Fl7y8f-L zv%eUgyF;o`(Q|XMNc$cU!sqE>V#EBIR{PzCi%E@&i&ewA$110%q8+EAs=v}vLzG}l zV*38bj2~JKxx}U6L55SnLpOA--c$S0B!-<#s3$xsLN;P)lB3!~ z%@+j2r!96l%QFJnngtvn$LfRT6xznR-vkKI1}FLPX9Xrcvm>SzXxi3aNIR)-hrROd zYpo5SSU5l)&0nz&#J9t%x1zRqAXcRNy9^6}upJX>rL z$o`-*fwr^xayVoCL7QL<*v<<8$CG+NHQ|6R1+dIKuzmv?*UbmAB}Vwximuq9E_<~w ze5If*>)O+aVjSV8ca@N9cQUxU&1GhE{N|LMY+WKqA&T3n9Y75_xqGkdMF?I* zl*X$J4jFgp>Z@Wrwpa7{TEWToNa70A^pc z$WjlTK%;_vCW1i9XV!yiVGt-%xQXevF{^Bb$rB_w5^6wjQS4 z=S0q*6=48Arx@(vpSRb&=+@h!>ZC`uuVx<8{@E5sD}s4Lufif)`ng$9gQ%6btn2Ps9KKaq!RE@tvc1iq z;FP1b&aDA!2o)vRJAA8SIMN{N#G}cRa|xSy*eygA}NU& zhW|w?z7=5^{RFsA6_-m!ll^A#r3A?+swfgiJ&65ohcqeH3fBJ|Z~_F2_7q}=J~Vw9 zoYjKTAiM9yQ7tnL2`iaa1ru*bp%$T{(}FUtAoGET-}@M)a6CPl*-hN%v~obSXs>m2 zCQpW>?k9d@gI!<{ZT#91XVQBs2H2%4vbf)j19Ba31W6;xdvEfeDbzBykrH9P-1qPm zVb-tzZQA6!&F!18G- zWU!y9-w;)tms?nZ3hf~|jY-j+AwU44Grs=1Ul!&`h<6e1ofdtI3MaB(Wr0hW+NnNX zXB_~xBS^BtrLbrezt1egH@froUBj50BP$X_h;*YVKc-fVZol?NR3)A5gw{$VWj5EZ zQYuh{R+$s|c|9v5gT*HO+Vsjn3!K*iu?la6*Ik#)J7r!Dz8@y<%MJ*|`;>lBn*+YU zpf0WRH1_`cPV6_Z`=u}UYfB3{`>b!wFsKkcB%P8N$c9Db{L5G<_O(GZe z?`3jQBzEHcW<9szu7kDh_6@XC6XqPC#oJL4H@%p^#yZff1 zj539I)9_<|Vp~T;WcD47u6Pwnh?&?NzCE7Q_aK}1LC+BOd7!@MQr}!`nrz!4?9=+$ z_W}=I#VYPRB?J7Sx2n?`=EuhYwaZH7H(2z*&IAh{96_B&-tD?AO?tV=3y(;>KhM2_ zs${u$zOBuyh-5)J^BnRYk!Vl#_~CJc_kb+$?Q_xs<%noIy}cAXkv+w%l$`Y)Cog~C z3Gkz}zGNzWZ0RPv`z|DS4o`fp9=X+MGbYrrbA2{zB~$3O+$N*?o^s~A=enKG^+rJe zfi67^rY=dn*NMO~DtSXL^9S{kOwYG&J-C&bQoyF#C;$jWI*|(ctVnq|rwz4li;xWP z=r;pS87U%!lMGNTm_3bulVG-DZXa=H%ByP7b8TTma=qB?Sae@RbT*(mU8wtgps7-2 z?N76KW)6&qB8Vo*)vvt*>^L$<27I5dRoO8(<5oH(CW7@m_VBHnOm#-b~ zdpv3lUDTiPA6l~Pi0#}L6e`*%ln66F%B}J(zW0R>9kaI&v*t3xybLut z{RR<5HCe;eTqlM9%oS*G@C$X~`&KO^70uo z@Zgn#wjX#j^p|W5U!UC)P|T%oWpf)UJ*F%fB}b2i^S`ar@cLHAGH>J(F7eKa(HyxW zoJgBkH^+NX@ChY_ah1Hu@0{&h;&``VuJ`Z-&nSK(LU>iTjIbH)7qbLy@A5wEBe8Gi zHD(>hCs}~&VnklgRhd)Xym{^MHd{vNN2|FPK`BpAIp3Ad3s|i21*;3nqA+qI>Nx1i zy9rTZ*JIyD8rnRBj&&~N(AvnPAn!3#j!#Sm}oX>O-=&$*4}A{WwG6ZLzlp&5JUQxv1sDn&-7M$KBsw)-YZ z_VqP`z}1!=x#m0kI0fsb=BAVLX=k4v`MIWBbbnOfw$UyIG{qvV6nFM&gSCR8Y`>|+ zX_uBbyTh*Qjqc zF?t?X*WFGk#~ap9-#=_5n@M|ih%PKK2rNwDIG_3EI%Uz*p|rVB>pir?;bOCu#+nkK z%n%n?Rm>4sWpKWu*lbw19DZ~5sF#?m{wLAI;P4*Cn`Mp7{tcU=M_;pg|1Of@+a|4d44-4BJhmzPd{kDO)4U@S(HFJ5-(hUzXubFcY`om)*v%MjY> zcfU`1up_sE$S9*}ufc!B;}=xP!Ez{?B*fBc5AtX~7W0h7gdXr6+Q-o-Ay+s3Er_A z`MI6W!a7=XW`@79!Dc$5ko2T1bL&&kT**Lcq8r+Qt_0cpf(icQV}SeP#6$d|99YSK zh8~RThXt${`N>NBwEOV7KgOTloYC&|*M7{~S^8jcaVw!L>rj#i@izCmZ+E>+#EU4M zg-d>i<_78&p4glF?eeC@b!rQy65O!buJ!~gI$RjZPr|#MtCRL={#AnU(UGe`Yen%j zxUj{pY#dH!x|~VcC1x0=E2gDB#9N^o-m*iIc4V?EGy(?)TL?B!+ByzD&_PSu!+FZ% z3Uft-_itkttL3&DFh9nyYT)UZ9!Bi!>QdN~za;|2ZnzxfB+iCV~)U^{u3qf7xca+hCM%SXm=NlBh z#mOYXHL>(4JI)K2aTNtWGPX0e?Y1-w)b$G#sAqtkJ&|gi`oXeg|4xI^E<;6Df_J*c z(bb*?0$yaPe}hq6e}rV*N+#75N`Xs*eTP>L#*$wqyX#%FG^XdLF1xso?TzPB8CbM~N@Z&&++Z}XnySH~~)TA)L}vd6!uyZEecceSk?PmX79 zioS0i9F)hDX^GX`c~SaPD9)Z;Gv3Ah5%Wg=p`}E5Y>Usxj2V945RhkgS*2C{YujrQ zfV%qAx-!&UVn*whU-2Urv-sb+gljFOhA{83g61U^zkX`rgon)czx5PI#T#s&f>7_+FG44mrL49aodO2{_5-! zDBi-czit}#-Uz?YGXCmkXX+9Hyx}SE3ICWY;85OexQ z(uUk~!GC;-rb$)s9oAP|`w+NP2jqcWHB}miEf7z!^ve=(wxi&&oTvZ|3(n>XN069q_=bu*i`o(KC(lwUJTRt6$^N3U!H z_dy;w5bT_W4Avkm;hdd@U}AJ4Zr^K zkL$gaNW_B_t=?Av1DpTBcUp(s?4Tj*Sk2y_(+u`n1|0kGiU-#w&VbNX=;{79xn!0b zziu~jn=(~%|3}w|RA&627YeNcCD6eitA7XX#hG5y@1EylK7Tg%7i7W8bG69wZU;Z- zPpJ8-Z3^__f$YIF=z$PI68aKA9pK8u5ac)I3ETmgARRA=mskSK`oe%Kl{CPS$XK>V z(L?G-mw;;Qee1ryry9^2y5)_VxOCOg;@4lGI|6RPi!M-#KAZHm1=qh33LekF)t~?T zs{i<*KNsLXZrVTpHFW~IecpJf;CfD92MleVl^_09<^H#?f(ER=I#}RU*3hl^|1bU9 zTmFCTHZj=lWNk&+g=C%md~JDlxJW)?>Uw7sG{(Zb4g#6&A^9pGX>TUo`~2(ASAmQh z5LF&wn`YAtJOru9WPW}QWVFUe**HK_9cH4_7nl!jK@{i~fB=A1j@dphlATqdqT|9@ z2qgFYp|}-yvT^Ohq%gL{yHJR8GksB-JKb|8qSOtjLyWY%eVuvp)ioxq^0RN}$Ntj* zMUd3tP$IT_4W!N|E}kuML7L|!fL`lfzLYy^3&x?B03rB^bc*~IGbayz;n|Nq zKx3Z`we6KLNL1#tOG<~a!5(f^CO8l1Y3T~kI z3E+^%`T(tvN=dqpMH9aS@Bqo%v|7@25fVHT0}h;<2`P0PSN(?zji(>^AKydvW?zE1 z^;IBj*T|TTOgMjKKK-F;H*p5}OF}ACGo}8($|4k+$V&qntJ#JthJg<$bLTutq?gci zWgh7;*ckPoo#XTv@=L%>iEUbIgW9uW-`E&&M-0avv;;}`i|bqvK;L!deEU4jh<*h! zO@!HIxR(KamGs z(^;TmK@R!0H7kkHQ_9FpIX;NOaKNi6+6k1Dt_*@j|+)ML2OR8a^~aF4wqTxr8DZ1 zqn2}v^IZ$bJQU4*ww=-_Z3K`R+E^W68nSb*S?TFG;Hfu5^uP%*NxVX3m@x+s5s{s? z5%f0h==JH4`Wo*$U8ml}CyvLu;{EN|oV^U>Ju*|?@9+v;&e_J-0Cjm9wC6V@2%gt` zoTDh&?$6T19cK8t`E)Zr)+d*$w*;?{+;1~jh=hAaui$&yfxX4C$;keMpZD{^_JI^9?OHQ z;dpN3Le6t72^s?QvZqVhVPI+smujPJ*bEKy*S#wsVAEOy9Kf3)Pl2ru&}}FvmWD&Jq8$@80Uw-_c`h{Ez=vHfO^Ki>Rr`LRrjJy`xT@$hDe%++kKUPTLEzSA2~je~OcV5PNe(^& z%{NK%EME&^gf{yfTo}D)0}v?EIteUo9en~FZX!jLfV1s73fR?F3-7z=h!N%c%P7#7 z`}uR4++QN|J0uSPDc!beJ_Tw=qo0M5zU!`8Xjjp+xlTl<>n0RxMhO<~F6aiWpzSP$ zbuRHytabS)e~y7vLy|A~K}~c>;8-Hdm6j>yPe$e7*99_kdC&X-sH08L4NvLkO)vJtKY%5 zopAy>@**o!I%*qz$&6NiK5-gLkPGD1`)TPMX1ct7b$Ag!`Bve!ZglI6QsW5E^dj*t^0 zSgC1SU2WW#4VuP5T(*W~Ln@ke&}YZWoq75*nat{e9)vq&xEcoGB<>DScYRl6KDryt zPPUf=7UIqt2eNb?JdbWfOw<7g>&)kAQ7;2Ty^FQDa0-5}BfHn6@a2xphkIsnY7OC5 zc&-{t( z%T$b8iyb;mCV&DqE4b9fQN9LDKwY?7p(Bm!xdT1&U?G)&>%!{wPY8bKK#nnPLOS{0(ruTvQE$!-_c#&}!3TmhOFq!`v5 z4y$Smy=f##HbyE(iBz{8NOv*yjNav203w+&YdN|41v~;bXg?gzGN04Y&edEhOYJ{{ zbfdTGx|)M4%7#ts+Z-ey^BXHEXt3O>N&L{&j~t`V z-;+<1C?nGOY8S5zi?EqISiQ}iL0yhp8lc8vPRa&ZbmMoMxM+5hIs)6)zywtYB4X-P z4+IFUhtV8Nu!&pld6>ZHy@X3eW+m6VB|5Lco8uBZ>+xI|@(v;cmAVdHeG_Sj2~0Ok z1*6E@;WjFbz|6ueX{~5|^vAqU_rz5IsIu(F@H(H=?__LX6O8kXaQLrvF0OBwS3PD& zmdXiRIIq3-%1CfCCc$ZbG11sU_dHP1d|N0^oN_)oK(10&ZGRDCYa^kQWzNthzD#X>L3At=3r6qVJ z9?t?futlC4kR-X1rBC+J`>!TODMyI}`GRA`pBR$;x8nWcu7kOsh*cbuS+E&z6B=b+ z`+iv9qcsJF7Z>t0@2m*}BoWtOrD<4{*ZNYrU>;%ue_wFjdW!f302tO--df4F`BZZ3fdZvlX#CS*RrKFvy>lQEB*o72?BxcC z5--!oN|NCkI>*f)P@5I~Yi5_)_*3b#m0H zDod3YY}mhif+op^UoBHh?)IbESFTLg_FdMS2Ex&ArIjAypxfpxKn5}WJ(!$K1DJ_2 zb~qT!goO@)kS1OT)KwgfOL#gJoDE8D_09;Vd358bDiOjWAl%kCC&6-3q$(w37x5Rey+wIwt(`G-$EVT)heZBzT8TPO_dto5)RJKnU+>|!gLd)k0DUr4LZ8oqh)#O}aW8r4 zj;h>|P7h3I14?Ig3JYu22QS_;d$fiJFS3{`0HOjPa(qH>M54-pEslOAjTdn#VRfDX z2M$^nX)1^ca}Z@NTe~Da8TY=nma-)BwC~V~9IiUGB1!}S+T7Yzwi-GQ<|P9Yx(os_ zkY%h@r5q;?S}000Bllee`twgCv8uJjnRl zv0kaAX1l8&8+ZhbqW~sFND=w)knjBkR-c?`u}EDpg}dU5-6!&CD_TM^xWgd-`U>d~ zb-dEMLa`-m7Z;f9tVW$z$#K+hJhc&n>n*gx6eN*XbLnsLOuB2}K<(cy_6F$v8a&k# zFZ{wiCV)j|yL>6n7;)XMKOSFyj%F^rg2KXJI22ZT5c)-)_ez-oD`DKb&^9BOfBa>0 zV2-X55f*ytLQSjGC7`_U4iY40Ib)G5{Y}%IWUo&a==&_D8o%O`P$3Qp2cF3`rPoeT zO+YEJyct4wnS(R3ozxt@APe9_I%TP1jwW;Epgqz%ObQD$Zq=H1mk0w$`5U(6@-tRA zKxahxJ|Z#nB|NKcj#Dt=82Mb4+4qKR56c8Ky?dugkkZHIYw6)&oh>2MEKqe%fQ;h> zdR2r3mmZxwj2tG5mcIw7CUu-EEl|@Lwn1vJA{SZR-j6pikZ%bE9OjYK3X-Mx!VVJr|xS)edf&`0fC)o?g z=}W6#QJ@+?B!q z{0=Kkks`W_kP;R)h`_)7OM&@rehH)l^=ZQ9DPQk&MW{DH$E<9RgjI|!L%Z;ft03<1 z^*R3D*u{$rn%QP5JVhVCk>cwt#la<<;2sHDbdZF^0er9V{J2p^cwUmvj>Q8^FJC&R zfLX7cWu1`!R^x-O^Ykg$S9oa?Pd>$@m48~-_?sN)40Hht#@OYdzKH5rp>d8ZK5Rm7 zjBz|@u4RVRroNL$vE;56uMCV9O>c{!Lv4B8)lqHAz5|a;SbNK(;3RM&9)uM{edbYh zo^CXAzW{4Qgb1qY0C1Z@+Eqk4Cz?1A4{t+DzV?AXm>rbSZqwW3Q@ri|*!*~T=cjls z2dsn$hR6HOhzxZ@*gbcvrP*2NfRQ9pjT~;P_v8(o+MRGZUV>{#XU5*dLi4uLKu=Y# zJFo-#5jEVlM)vShI^q^XbVm49Oe4wy2#3upy?vqOJF)R?g&4t@qU@xkz|lsHNkv)i zkM;Sv!$plauPo3poMw6)F$zSf z!QQwNO`LYQqzC|j+YfR2ct%;AdV!)j;rf`m64tq%3kPkz@9qCiN~}ALH6EW=5fNqe zK&(vD-0yJyvcCW^Vlr5-%ecJ*O4_TK(nJ!QoGo=^ z^QQVaJF?}~b2@Pxw0*jesz1=kVP^!YoKxv4+7m46tS(g2iE$a^lF~%&yyaYD0||_u zB((Z4GECTL&VPW%{!LZN!Vlsom`FE(di^DPpLdfpMMB9qpZx)42*-qR;Axo+^8M@{ zWVUJBDSrZ21r}@I)CKT@4p1b|ob~!POwyw4<{A{8$Tj*zPtIo;Gt{fMz73|@W=;S_ zI_|x+?iJ@#;n(|Alb5T-sUYbo3Bb}_Jn#g|C$>JhqJXLdK+DiP@sz>I#REilK(pNT zDtimlzD}7hEQg0;S6ARsIv#w%J+r0LFZ6MklHo36e-GW;@#KV0x1VV3FU}ycfAYKV zrVXSr5DL2p3)27lLimp+zlmJ?rw4yx0YGOiXWnA}2Qk8pDCS@XjM+<(y)!)MXW^H4 z5fU6NBqR}-QU=2>lqH>-No8`F35|AK^~F;F+K*{gl8j_iW5F1HI?sjn%EG|J!)IY zg;%lQ$Aw1BvShMieqL6_A)&{iue^5{Ih%*|Mons@RpgJ$6R7nD@}#6`Owi&Nx^oU6 zN%lRI9gGHpI*MtYMNg2qeyW@>9kHh>IRYRxItEa>FUE67BuVP(CJn@u@F!Qni4j<5 zOfF|aMF>SbFx9%VDv*Q;briaAzras%U|O0eCKj&9g3a|8^sAHz^SDxA&;chwgv&2g z+ak7U*7&|M^cZ&>9N+u8og6?I0sjDEpL+)9!*smD?DTK>a<$c&QjWpDr5?q(ltSA6 zJbNO>#h$XPoiS~xE21L5zZN_2_?x8bM=WUW`A@db>j4bvz-8Y`>q)%Aiq8l*s|Z+= z9aP+%cogPu{-vYYdVROOrkG7?tX#?dD$@3_S_42AiV zSs5z=hWK{qqhE2*&k)H=N_CIZ1cz!JVU%6FO-etf2ib>`T4VSexCtKjls#Vq>j}mC zGOHk)r>O*K4i|rB?eN&uFQbzFH7TO4Qka0}-3O?twQYm7;T3^3cXY_^mEL;Lklqi5 zH3Ao4Gju_e{YAO#))@{ON|GWopfWqT^^_qyCCb|d*0!ZeBtIt>beM7&v}(47OB5wp zm-2$cvE~e&#Si#ZDCO0>O9m65iC{{GITjwve0AqJOk}(N1EEsIhtw_pk=L;0a4Cge}tm2Zg#XXZ(xFJOH=hk%zyH1nvhi0#pzdtNfJS zGF0;d)Q0cbc4@=cDdUX~&E|`wXRqn1FfeN3BT>wF`lJ+#cuew51MR3R<>`_k_wUflHSmQDe+RkBO5>hi)t1(7rS{ew8`4~S(d-piD6YK3$ugyr?p z8c`-qPXJ4YI+Pp5-Kw4GONk|*Z-6DQbM@{k-jG%oafF1J_<)M+i9I6tKeKlxR{d{S4yBs`fu2rCsB*}`H9mf+cldgq0SMVo+_n5}jTn(i&2Ra{G; zZulZE*@VxwO)c$F&7qSJiDI!$@W2^}8&f5K`QCbtmXJ4Y%vVDfo;ZHyBs9L2_ZVqV z2N)Nboym&H1wigT&!skdRiTnUBo3N&=@7pxoCn~BZhtZ{qFC^mr>66L?v6)Hs+JQ;`S$RIt4^$5$lM?qZ>>*zV6c<~nejIRZSqilFZ^yWS!$8C!SL(w*_ZgN=9lAHG`AXljYfleUn z>Yi;Xs=$6ORd@@pDk+B`qpfIlpMgEke$f?$V+tHP@i)^Ox6>b#~?##w;|!=7O1%QPS7k{hbrtrY(* zJCWs9@+D!XT@!)=3mkhew~sZ>fB~KD)M{d)>}Bck=!iv`4KJa@3x$xE7b55#BPs>S z0E>d!l#DqBD#cdAaqdCbAQAyOkw})b5{lS>w%wr3xR7#7Q~owm{xzilmwO;H0*Qx! zEb7e@(2=9{7}2`2JP$Evu|!j*3@D8WAjWE?mrCmr`2@6s!}Y?Sn8p&`F&%9C-Y8N; zZv>fx!AlKAH)v_k(AnDKMy1qOt=}b@nhc4*1CY-tFr>RM!o5{samvRCZ0B58aZ5MB zm)1VnILTN$ihf0iK((;)lj&fdxSAEaf#_}E;Q#`AC|zPVk>Typ2kESBg}}<)aq*Qr z5rPpz<%SW>J+IEJ{t8)S`w0dY$r|}QobW$C&0*}3Zr-`X#?dEOuVjXUF3ZQv*Ma`x z?9RBJw#?AhW|YuE6tCW^R>^06b)ZLm)30cVK<&QtJ(g(Qgfa$7vMxVJN4d7}3Cyx+ zAyb=~y*B=^Xi#J>lD~*!Q5AIC-}c#16R~R59cM*zW=9RSf^-^_0KRG zr^gXSqATC}Owt&cQg#N2t^)p<^3wt!laMn%^Q#j@bQN;cg8T;U6!oY}4ipV;-|X&$ z3i~ZrC`m$E*6KNcv&NY<@kgGIG3eiPSboI7VXe^QyXnx7h#op*J%90`c!5NJ_n21b zb|iG><-AaMD-TmZ>tJ*bHbCs-F$$B=m8L}r;VHo^Hh>Q3CYW?JzI&WH{wYYfnOJ_9 zNuA&lKO!VAWD=JIPN7kulmG7d8*tuTVVJ6TKPZN^K;35tCKz6zOQ$qe%;*q?Q9OrC z*Bm`23Ig7P$xUn9qoWysmnxhTw<1-*&1O~5<-0JtbW(Hb&5c8H80nRc6~H_1oiryy ziRFrAr|NJ!e!vR%w0Z>y7pC*G8GB93b=CSTfYXO0>tv3*1xjW+N;84>amT8rLE6?h zp#AVfNWUwRYVC)*I_l(%&s{=!(T3HmklJ{9Bk-twq(Ad8C;-0$vOey13#UdkP=Zbgi7eETH+P5SO|8p|w;t643JJ%b!fZN6OZaPH>fyxre) zXOLRI&@VK9pkDxb--`|Q_AtrMq~Z=0E{PO;lk_ISX(o#r{&Vo^3{-60ahRq($7sM+ zV*qnVsf12jj6J3&Tc$&?EDdz0A>>ZZCaz!zk1&D;947IOL5_W3xQM`wTP4A8vfaZ` zAWS3V8B=^!s3kvq2}W*w!pVOjkBzcT*S}N^VE`)w6BtC>4C^+*)@!*_-b@l)q7Iv_ z)UBQIkp?jqJ)bSK1u4c1PLO3Yowlt zTT`J63F!a{%opPs?mka7SpBYMIltWI>r270ju#rP$sM=5p9KGQi>nlBqQ|_xApi}P zv8)O66i|wxW!*5*Sl*=fn& zh&I-v6Q9@B$I?gLJNgdg5hr0Q@#oq^{OV`UQ?Fl;B8N_f)(#CFji^g{L5E+$!+9Oc zV4A}y*Tu3X9O}%JXpC@d4GR z|7|geL-b#!eFA{`u5u6t=TIZXDcrhQuqqw& zTRvlo2!XT0e;T$y^`mmG6@Ul1L`T;wX2~{gck^HDe#~~Gf}|+Rg#gZx^DtP*54cJ7 zReF_jSk#`f;KUo`r_8!d6lDhtEsMY_^$e+T3e2v*LKLcUy(KPkQ!mMQJaGG(N6Rh_ ztuU{l+5S@SyRw1DfMj_BP39qvWEFp|xG-6g$WPWVwjPd;b1*J(SYR>m*44$z_j;Zt5tX?KYS!$P||t2@{%zaRw8k=kNGFl zSZo|?+PRbsa{0#a%}>k#_+Z2(CZ9PoR+PwrH)xLXFS5^MHfdu3)5x(9ew0pbzq|Yc z*>=PSdFGuo_m4YD-O`;WN(+2*hgu(Hn2ga>9R~8u+xx)CvUISh8Mt^cY{=YhRvuX2 z^QxWgo%&BD%AZ)!UlS27LI_TJ9sE{%-p+LaHgDJ&b8GnW9Cc8X5bBx&6Xa>j!yl&H<1 zYiT||7|Nz{>2d>->>cK;+Ji*Pn5}vNKRf$Y>tvf-J6#?JY};1y31v25KJRtlil^yy ziYfa$y-SP_kK)8Kpn7kDB5&NB-Aw`r2@o1}W}D^^ssk5dKUE^O_ko%StOz#LlpXcj zvfmH%m$zj5wS0IoFYd68+}NjE&^-zV0RHH*G%SOG%^fi4mC#DaIq*;?H0-j8x*$x; z7C)dJu4cM}H4>k6QcTa`%@|*n6)(btt#P*KUa?Sn0p)WYmR~kZGc}sjFRj}Bs-PsD z&gZX8XKE&MwToG&>DGliLEs0-&pxMB>+W#nq#VdBB;1|-ssOqs=R~ISmey0Ek20bW z32QNF_nNGF6$aR(7=z}4t(%zYUbBlgP;_zDe!-N^?84E`k8TF2svzhrj)LJj>1t@#s;{KxW9Y5HBFz0}^%xQQ=i zj-i%d;za`yqf--(P9b|OQMO)^+Q5GA>5IP!O8?MXf!_TF-~k!3*Sxg>vWq}-g&1Jw z8x21hH9gB^x_9%MI zzu#6Y44@Wq;887O$1jXW_IcdJFZ6+TJkSO$+b;}<r{x_r0fBEE_RCk+}!|xZ0gSO+!`qHF?2-3~=OY1cNULUp3 zm@uU-`31NfGB64SZ7QUt0dc5(Noh#?%Z_ zEE))051A>oTZ7T}Rm)R=bbOueqJ99Nxk;y0>v#WWdkA_OH=;o#8+_uhx5xMEkQKWy z4CQO?0PhKr{#BOv+O|5FnUhUjx;6nW>?Sl9z4ZFg4kt@smukSo4C2YVMDq7`9RDTw z{?|C938|p%A%8JzqTdAooUC`~NZo>HDe1IF!%l`8{T4BfJpjZ1G8c#D1uaVxe-UB+ zb>;l~ZFe^dT#4_~oXKE7(Oj~V*sDrrIe~n}U=}`GAkJS50m%Vd<`TrNlm*2?7-(N! z^Z9;(xzlNHUE%-WjzOPOetZ{-YU0WCCCTPbmNwTO`AgZ>i~|VjFY*H~@I{pQWt0u% zct`<~=W$Ed|H-ug+gn`2t1&s_Xx!m9opv|ZB~VRI2A_YWmi_sXeAi7yeCn|t1cE*~ zDr8Rh4;jZZ<3?zwr|-uUfkPK9vf)5|D$H)*@*p_ z{U@)32d^YEyEHO@KtV zS=93Y2nQDOR`2!GKc|_LmvG5#E<$FFC15BXYFuu6iF6F;%+f;&hedn-Kq4U&{D)(V zMj%aQ59J zU;6`)u1HQSNFH%?$gYmOu5I(n@Ksu*V{j`LHPQEA-YYmI##x+x-63D#{dmg$(~9W% z`vvKf8-t8}(vo|B+?N$mFqP`(mfVBx=IqI-n`!1-S5te*Jt5;Fqhq(dMe*YyuTigq zC86)f(_@Qa`K9qdjK{EW3R2Ami1Ym&wbz5b)DCFp4aBzu{DWat>!S6G**$&Y_QKBg2$iPsyMj%{?v(C zyGKsjkbUZJ3*GMmEOhPUZH^2SSh{A<=8$XuiK;kkLA&Caa{IsSO- zznx{L{NVI5Ez8J%vWa+|v?hJfGdA1Iubf=+=5((w>X)GCL}R}61++ePb8Rwr(TTJv z6L5yjOFsR3_k?PS^bdvWzis`$`|wfdZD-Wmb|z}p&^zt!6kSiJ$htfW0M@s>b~(;F zX#Vd2D6ss!KW)tR9|AU79&q&ibP85!-QJv79Q@w&%f0)fW-#y=zE{Es+UK!YN%|F01^&<785H}4|Z zmMBnE2Oxy4oKMX}Dq4lO)7%We#T-D?;ulu`tH_0-qgU#S_esE$wA%eqdrl@iIgYUjI*BuL06RsR=3I1WX!73IxHcA9RJbonhms*;NV zZvOyummjF70sI2*W7<)tu8boHTRbfXyE&=l{Gk4$wit7W$;s!I&b8>wru#4Zm?< zP^HXYHOqgjV8`90hAb_y?n+(!5r6#U?;o)f91@8kH!a2E$uundHZ6UQ|K=mrgp1miTV1V4l1hvH@sKkBk*~j6A-*ixQc&!W zGJ5at{$yYNH4HpH0Tl+QBv(Ks37SdIIUqwdXH6uSJoX>BsS%R-u zdR8Bt%zLrxrs-Z}6;J{ia}J+yoj_U%wW-3Ji@zE_UA&-yJ$ad~CXh zY#)R8N_T5r>c)tS1Z6#=^ZUojNe&xMD^5oPTU_1_iw+A75OTeov|(EP3rfzcJqauC zhc|&KgzD`?42ti-)Md)4USG}$l1;n@D7eXJCvE^K$6SDzTZ<%7cB8m7zc|~f(g|@* z11CZr81MO^uB|9=RCoK|4;EX{E`jpAb|}h-sRdkOzHjutDoB{m`UXnjQ-+7Od#$cW z?cn}JVg{Kv#Cyy%7(9{*3PdPp9(Y;YaU$xluXcH_X?;if`c1ttqJGBP*U@pmy6F27 z`CY6RfCY!2d87^-7pQMcz|=fo_I-A7AN>h%EwF<>`lcngamc9YO%5Vg3>QT3)nQA0 zz*FV&K4B@?H81XCJequ!H{f^h$Z}m(CD76?SFe9&m$)~W%z!L61}&E{CBRYKSKvA4 z+Unl-($(%n{QhAXkGZ5npyjnYCvo?_>G-!7yMvD$w+GV^KOm*g;d2ee3*jNXntmlv zU%Cbwe*dm_$kYZ&^$Xt?%`^eQ$oNZa zqRPs%wqYp#uKO*GXZ8|ZSXV)zg-eT~s}(<6amLp+Q;fZvDaOILo!a1)0f6lkCBP27 zraV)?IUYbX6=kuOBO6euFCQz)%k>(BrMBZW2YJ}@$E-VpUR)jpLK1(Q+2@ekyT#9} zZ+P(=gYcGT$6W>o+4tKn@4VG~3}zbyJ$+LeR0_lfUx59%n>vI?S!rZ)boW{KDUf?Tn@6+Y`Cfl`TJ(1zfFWniR_E&$ufOPA> zSiFhtz%esB-dviS*uPcZbZaOS6Ujy3) zyEg(|n>IogdPmN^g+on{x$luf>2TPO=@pHR%70rV8G^Uoa7LRe*jEWC^yNF$luuzI4yM>yRa?~SuooEvB2P-`h=JC zJNA;A&#Dr(K%hP~HvgA3kn=FS_LrK`0ZzzZRjGJ`uixsq>zu}(@KK__e|O0%?qLBr~PAimvM%b*Y+nS z|Fkmv>&gEc@_4d%6BgY5J1nSiC-j0l`PQR*`4&#`I$*R1?IuAQVSgsLw32GdrC#Le zG2fFK8rC~8egW9m9J1W#)HVHDa{2Hr6>)0&kv5q_fk&ujRPMt%ezj?J^S&Oi*#jZR zn^+3LZz7w54R3%hjJX59N__B|k-mO{a79 zb!obO@WicClfHzVm|Q5t`=iIUPuiCb6IRw zP#d}TYcQ~ap^HtCUkZL5=9lUe!pwPKUWqvK?E^Xs{>ZbIk>6)%BwT6skj>XqyN65G z9rbgel`^RRpE4UtZN)=d5GCh%!%^eVJC@M@31rRCewgA**S=M1E9>wv*H=B5qA>WXnRV!JuM+!Bzg8|t(w=cYTzlF~lhXXU z@Lc3$IPUrN!IEbH+Cr{cE0?|DNHkl=ag=Me{L*<}>)AtX_EcrDd3ET=adQY}cI1wq zoZrUx5;@V=6Aynb{6upcW(RyPiwOnDwYWVax^h2Cgr6Ro8)YIW#r7@SUnO zPv0Qh6rp@&r^_LOQ?hLO=g5c85fd-}($pD>_oMce<%9FnHd@@%?Uw_{i_#9fA?kzi z9Dzh!wwbUSvZfPc>Cg~NY4hVYrmbgB*;YN5!t-k3Ncsm@(=-k}h>5f5-Nkjm*1fm4 ztZI^)<;%&sZEe^3MqU!m@>ceI!M#&%UFEePU0%Q_@mscB z?acz+ShP&2W3)(&e6;2A-aL4!QQzRJh_~!Vy-ZyTG5ND7tNDhUy4H=7MLw6S&xAE= z<(cMKieJ!7_GQ(nzt4-Nwgq!t2Je;gkK>QsGU1V25dA{iqa=Nb&lNOCL!&hL>#R>g zU1QwM%AuL|A#e25?x;n{Zmlnmz}iYEXv>#)r4+f%rP4;VyEycx2*_i8Qu#eMEKarP zL6^~S>UvvI!!cvjD!gPY1j%?UB!Z{5Q8ap7qNdvWlml5xA2q&YZ4E72tO#WYNr=T{ z)yia0638?pq!@+lO}JV*K*hAw2EzTI=7bp;6zXs-qjeenk^38&UAy40t$wFaP%IQ{*X>d)s$GL&*-*95TlPsU1(o@|sFFQ+Hw+>|gFhS*{5% zBQCidkIcv7b4_+=gQL>=d2i;IhXsy=qb&7Of;()ugK_t>W`P7Eu5kt#qDIZnYvKZNMJuz0tQPmiPyJebcpKr$?%%)^By#; zmB>C)KM(!i4|#S6e|{X6Aww|6H2V*7q*#6T)TSGX(je*3Ts^15xo-i<7S7f^flOQY z#A6y*n#F^)wi<^6R1EJQ4ktfC)26sJYi9lR9;u@6r|IqHT`x}`eSSAU=;3LWvNt{# zZbTp#y=R~4cC5*sleOfE&i{x8bk!?x$ZEenZx(F5ANKf#gz-d&8}WL@ba~%BBC;O# z$Zg%1oQNC+--95ZcT30NWdZXVsc%UhJ-}}{XnwGceul*J{OSEqGv??wJVB5YIMj57 zlW%WIZ4Q|3y=z6i`*E85f@h4p9HbA%&tJ@1-WdOYslc073V!3H`a&($&~a6m-Yjxp zPs|ayqxX*N<+!_5J#{DUmnWx=<5(Ek<(^8$@I6$eW4V)lH1xGfMPk2GA6~E3i`a+F zuI%b_|FCSB7#v&=z7tbp>xNyP5|x%4eH#*zb@C@l&3sR3+~AuccU1LEBiu*zU6w{W zwaNnxX|JV3IYCU|(Z__=*L@1#IVE%Au9e|XP!aR=EZd^(dIIH%U8Q)bW0-Dy-@)wr z!g0WNfq!cryXjXo#V(msQD6u(kElZI(gz>s-?;z}Ty=%MRJO|>$R49`JM%b^L~}*t z2%${X=48JzEq-+c5`ND8MjrN_Ub-3tH{2Hi7&S~@KjSg1V?&Y7MqSfb?hbqs#!FK} zQ+IsdA=5~Dsb;3v{a8eeSYw}hs(CDz_DW;J?D&`W*=4V2$+8(ooD zj2K=3X4a&M%xXWgtGA_hk+j5<8X|ve#zR-0qo;_rBv=(}*wW&`8v2*9b7W$D?j;?I zY9=QlzUZ<{MOR?!=x@6iZnFmm#g?frUG&TdV#~dZ6w4I#{{TFJt^|);?$%Vm(0I|39{A{Kek6+ zAopGt)?NO!uWY*^&l7**72DD%AJto$Niw=NtY#5#p2$4hob+@~dfO?BBR&y68VTX# z-tG4}S8^(c%-vswH%lyr+P7b1C!CI&Ampgtn}izEkZK*NT0bxqcZ=KF&d!&%dgjD? zEq@jB^oA?%b_9C2{Ug0w0U*l4QW>xvjR>_Cf=cwoRqpR~<%tV7)ju4M1~{X1R+>;U>c3Y zeQnjdMcdSXlR14=EW}xlhb4jrY;NDUU8(iK+)5EMEe<_h;u@9eWZC1CdS6Rgf;3Aq z=VHzWSOt5q?Qd|s=;_Zo%dZDn1>Wdas^9&|mGPxena=n4A3XX!BL-(lGMzI`L{&+! z2eeXxg~T-B0x0h5X5XIKF-R`8jyx_h1wtPytzg*INHf<&X)wm~`Bd#}+=S>d{F|my zKVBaKld$aJQRMtMRMd2yh^MWQ8{x>Vr=B?|Mt$-k9$)xLP9S+9^ssye87qkk5CFS4 zbdrFu0gOZ}Aw3{wyD>gv?DMi!`2t!`MOJKQLP?~gSE{TgQWo6hX^YfDAL!_g;I|R$ z^wPnMEIl4lG}aBJrZQhj>OEi06`V;pX=|vZUcUoN$402}F7>jq1w^z_UMp(FRuGL% zDe_eBjDvb_^y>3iLs2$&1-NhIZMx5iM3Is;*t%1yq&$+%0fs%_-k6bOYIJiGe$iVI zpG|;g*DtSETA1Cu!ou`n!AVz`Z7%vor0b!=1$B-u=7nUX7`ZP~_X64`NN8$=!K^gH ziNp8<=*aL#bow+fqijc`LPvFBS9mLDldG*+$JrDe$DNH{tbyp?-JyxCG@{u;Hw{DLhSw570g14oNiy~lE?^3TuP?iON!>+J|iQzBa!BR?BL(_ zbmfli#`D(%0%RzSsRlFVc+={wNjR%36x@^AlGdWWSWSVu_F}+qPxCIfk3botF^3rf zn|Oebb%E-BfS@0@PlTqtRq4afB0n_twpGOY$XE}haZ01S`@v@m50J5^IdHL{B6MiF z8X@bT;O>8v_9nIV=qc3*Ei3hL{h5QttDtA!qSWPt3V5VLoQHN39m$jYUtA5J|T&sGQ@XvywqRBN0HC$wI`@ zdCTr3P8`f5W#WN2jMbc>hlTUKo7s9E<^hrlw%7_as5;*L6? zq*N#CUK;DZT0Ny+-?(xm>*VE?wKwYUkXcU>(%Lz4D`P*N-=e*iqbKEzu}PiLBuk@1 zDYlOL1b!@0uT>+%6yMWXw4gtx+pT6b6!VcV5<35;lJ!({DCISb=mLG@_^=msUvoK& zM&3+<{DCY1H!5RA3&ok8LzR4PNBtu=#6m(BJ~IUOzq|dezde}Yv3}ejC(nzmq(LuUL(dM>xP2eEE8`U->gIYH{7~~@;v4Z$ zaRwov*p~(~T9{~?x<%UxQ{2E7_Yjq|=D=g&TDstoxu&rqnhT<|P@;*c>rOQi&WY*v zMovOG^+%Vk@;;4T<9T7W{G4nOqKgUM_YP15A9ZIC3cnOWni#nVjLCV4-Cz~w@HHjs zM*JiIta=C=UhclWH7^0+CgP1N826)Qk(IrDwFLs*&p3=(wL|k%%3IGvHXfmqVQya7 z^KQN@M<}PCMDy06?E9u4a%RDtwQ8$+k4ze+HpYxKI%01nqgc=jH(ujy-3Wz!tSPI`l@k3#H>`ySABcPxpRyk&Xbh@5VR z5IiG`?I#MjVT=`TD9)@NRTmCzv*wANQW}b#TV_glEf%oeayX$>wC0;wOf`i=}8M z)@)$5L(7dFy{s`oNKnVQOkjMSwD7(_hcRk z+;1oQ{TOp{fZ@UwiA6EuGb{Uj9fe2ahf2nK3q{9HIb0>%PKP{lgkYlRXrf-kX z-66S*)#QlF(j4+BwVf`e=mQ>@uj|yWicHnFv5bX?#o0F=PwSNPppyXSRrW&L`mzo6 zRJoPLEZ3gO6mH9&x>PdbgaT1^I$TZ^hdUh@ZNFe3O}plv?bO1s2+=*sV^l41bRnWj z+*aeYypO;HyG*e96@{@E0nkw>0enqpz7=y2I!WHyq*XZGa4VRu`@MMY9^etG?m(N7JdY`f zG|LyK+IEyQM16?Pz$O`QqYMVb`C$Joz~)29cpA3E{&D6NkC(la@<#>oJiliY1E7~M z=NMt4>4S!l&B6#m#{3J#jx;*u**BErxRD z&!+3HZ_7j0#SSpATG{_J0moM6EMkyXS=$36MRa>_TO`wW!r`vrwbI)UpZDBqF zIj%?*JJ!)zb{6^Lp3Xs=Ds|W~SxT-}470Eb4*OX*AAvJL^6*sgp);XQkFJ7^jL!=f z?yCG8<0uz-d8=aYsLGqha&+Jo$25JmRQVlNr@@|XA2g+>?M zgsPx+3{ti`ZW5zpb4IVL^?flkDVGxm@qS`DnZ-$d|8xLCC)R%S&7VbF!0yxv3i9t{iCpT){>Mo%VKILyyU{wMv)Nt6Q%=n zpRf*s3x8(yl}SsKhOu%Fsbbi1onYw4>6hh5(@3FHG zTy(ve#$L9%5ewv`Wa+HvB8et6beO?p>pB?4qY?x(-UOvkA4!giWJSY_6DiB`>tb!Z z=h>{ql`baY z0Zs*?A*)5!eP!G`M<^LPRSYuTAN3aqHC8PjgdO29L5`u>)9jdFcS%ZfV$e$2U6(5T zoQ#zRQW`tKv_yZmqEoT@wXxIfe!LS0^jIX@3wJTtem02lk$>Ob_YKbR zeulfnS|&|~3MKgdP&pUZ8+3UBs zI3A+W36HPtr_{c!8{SZLSEe_a!%+8mk+g2jm&ED1%{(M2(dh=)-&gf}4xcRYA<-;w zz6&p1kS@u?jXf+jQP|PAI@@ZLIg9)rr?9VR%6gz|8g)hxr~~A_i}P#5=Svryy#^lf z8qOyZr?ZVx`$17_Ui{%kToQ#z?GZHSLtcuJ4p$ep&uTD`oL7~WHKL#l|M1|HDCY1{ z|C5^9DILyw5ihAb-+`2oeg46EJX8_F-6Wbhy?s(Ao+oWq^t~SdZyt5S*QrzFQ5*My zqeGJfNS%6aoqY1xOPb6c7Z(0lo5(Bq0)-luwAWsW_ypgUI?6cKw^93?x^G*#M?d~( z_ChPB2F_`4!qp-yJfKVBEH}?JZ%uu3S-Ouoi8F8rnYRc&M8PGeVI=ge;VnTPFsT}q zu@Z9zBEnpO8I5=mB&D^gR_0MFO5Zt1lNQ{q`v;A{Qn?Wv-aDPH1xJt&A;{~rOXmr= zWd}ry71YsVJ9Al+->p|z*nXb!V~x~)TD0EWFNhhzOD7O~9jKYA7W>?X!G2)^whjyF z0K%h=s&sI_kHRk4tWo5t0E{clnL)|zx@8|TPN|a~ zLc7G+irw55Z{?%DPEZO(RvgmQF^|XxjJInoVMW$1cdb%@sLxJcqYJzjnfDHpqNW&c z$nUAUyTfM?TJ@lr^kQ}X3=Cq^8!tn>ty_b;Lo|4xE$x~hrUoUG4K$hlo~``sYx;>0jI z(OV66S(kU(;87Odlf(TappE58f^T?_%nHwWkw+qu!Q|??+1uQ4ZzCS-b5XY+5L>o7 z{?4#1Wli)^t>c8o%Q8CF&WG0LD+9c`oc54rHFLU)aW_#*(Th=wBcD1s-HYbQv2OrV zYHOO9^H9j(WqsQ*CTo1W|LZBf>SwxGwr223tarYu(cRaQ-{pE#CHgHKGmUDMIZI|7 z#ZGaSQd~GTWNYgrdWtmBS5sJn*_tA+%z$NurAyY|F+-Y6s8VxT{#A;vkW6qzQhvSB zOjy+Qc#B%orB$Q{R4xYmRI{h159$m70oN)9>tKyF)SaF>w zWb7v3OR(}77U{=%M+NL^Dk<(qviG};yw=?Uxb`G zatLVzTO2h`2J`Eb^f&YpuO+6%YG*PU7Msp4xsYagBt&`x-pz4|8*Bww3GY;`*t5T@ zHsCs3xVGlO`I3?xrteXZtHwMEFbF5|vB&n-C{0l4^*7DV)$Xs#)7&Hfj(=D#n(cWs zvJoj_A6H+>jS?6ij+P|PbEvG?k6a@1fi6X)RK#3?w@`Hr$V?V-vyG78;nBXbWEIS7G{(z<5-i zQmrUv`oIs~{KtMa7TwGmcmI|(zUXS5JLFDgrB)1w8nN+o_CiQ-W%+fP|L|*0%EE7v zv{u>xlpwX=`jP=*H8CqE(p+sP>5`%Cu7a3x`!2LLNc z7yr1LAN){8x!u@_m40*!6m)K`Wy(q84z9ejOV4+EspP=W4EnlQ zP^32PfHrVGI95bJyDWMADqwd!@W1}UJQMmq{3FnMOt@pk#G`y67R)SkA^>jz@k}r~P)@ zT*d)F7H|)wKwu+~b3E1*68}Bx`1j_~p2Ki{kBgy~d72vQ@5?dbKgvh{d@EXV?wjk5 z9oQoC{68!p|9qY(m0d(HD3u);vt0h+WBBvqQ8}~u6rh|z3lsC7ZZ+v{Bel>AJ{R0Vj45Qa{>N2)_l&+lFvvmGTHPMzKQ)7(h`(k!MBzoihcIauQUev&7o^oNP$pXX`Wc62g6*gPIVAofp0`6r_M1<(Iu zd;jYX|AhMgf97D2vVQJr4;Ejr?O>!neAbv6GPv-XgST>l0`dHaf(2!P#haOGb+#=d z<$sGtiZi5;Mb{yYSL2IfqM(f*p)ue5gmMX;^;3`siMuwY03KJ=F8&-3Uv zjEw!?{GrL5xgN$pA`LiZG_ZGu~z1^{*$;-`;P9M?NIP&Tggp7<8Ggl)214 z0(VN36#sL+AH5YS7pt=gwesjPC$Gorl3;}&8vNPs{9yn-=>&T~%~FKX5?$ud@d`h5 zr-TLmaw~ptpN;8ZJ*1MlQu1tGW{15sx>Gl({`RZ=OU6~x36uxLM-$iMb z^#d)VJnA)jr7Nipzz?jd2miV`X%?N)tp-K-qk~t~fAe^(;PJ#5-fS>1LT}+;w?V&w z?7vt{+ZE*g_Cv+E$ijK*&u}?kX8OV7`D4*MHi8fLdgV6;aMgfraFr#C4?!@7=U<-4 z-!Bh8^x5f=NmC8L6jMB{Zv=ZdXa3~D|NMl{R>P`VyHC|MO{V<<&*a%EO_FKLXY^m} zft?Ys2UNIa`os6ujK*Cpse)~&KW1|JKYdGdK2gB=M0+r25Y8v8*m6Q3iDti9)qk$9 z_Z;AWJM=_1sEQrknr=H!NfK-c@x@<>0YAF(HNcAIIZx}??=Yt7a+?!7NSamEz&3XW z=)~os-#^}_S-w_v9h&)(faKsr=iZ((hnD>bG)I`tChaN^O3ecWh{up_rV*U)RnEzv2Fnt#DGag4y(%jlYrF_593o=s0qqU-N3&AMV{X4IH7g ztn$gS`GrAb6s5%Ro@iE|CO(fdhk2+Rnb}3U4Tep#VU~lNU?{ZjnuLbq)sWPn``RUv z%m&W&Dc(iNZFyVgnbsHII!FEFp)1lt#Wvcw)?cxSKbc39X}7{a^rjUs$fG|>XA6Ww zZq$Ut`mTDfb$LfnoqqRt73ira5Xr=M*aK$pMbK($Kk?eo$aT|j1)dzcM-H2}J+vz_ z2yxV>tOLPGKN$&O6sxi^Z^TwOo>W0Q%)5E2AKaIRV2tsLtBE^|75#goQZF5DT^eLs z%-wKB4CKzm{_~v1RHI^|f#fGH{IL!H=MRrJx$(>{l1SW~vpCewbvl`ku_ z{(VrsmYFWf$jfyJuGtVxwx5ADQ-x4FJcUul*)`DLal)O(ZU~BO=|9lPvz`ddy2v~G z4NEjV%7BMw@lnZdFpLLu)J=E6T2VL#a7x5GQO0Q`1c@!Y8;JgR>dj^F^gIsaMXgHR zo=b+H-yLe?%;f?RXTMy=W!9`2u${^h1>V&Vng?~YfVw6&^@2mpP0Z(*)&d?Mfs?B2 zM}EA$Tz10V5OBY=`Fzf)k#d@Z`O5LNUz-AGcI?>7xTQpS(XmxPuRFFcNmAs|+ZS}4 zYyf3kDHvzw9!GM>M#Nw#f_~vet^IL+R=ek@p}nR~#VJ03Q9cGeQ(K{rK3f`*J6gQ} z^~)Ym^)`Whm|(9Znf4ZgUF>nc2E`kgAD>q@>!A1)aL4?5jWjiKdZpy&yg)#@Nn@na zTI-sl$lF@}5RqFil6-{*L$*dD*rDgS-Gs*F1mii`+m*|9@e^RK$Ay;nqvrEHJdjM* z3&&oVf+Mg}Pblnf&eof$J3edW2A^JIYuM$@PTc zZVwAdn!Qmsen_x-NwM_%rw2{Q5WnYBwkN}H%-o3^qoJ)dM}j#rm*-%m)JnPaL!< zyhJ5w{_+!|zBdBM+%tBa&EtJX;`-bS;?#R>fNYxwC|Wu~h*yA!Qc6NY524lLVO~3Y zt#N;c-wZgvo&b@&7F9f}3vucIV~sGVqS^5|XzIt9MF&0MynXs!JLM#2+eM`&qh>v#0G3zrHS)q0f>nl@6w`r4P+*R0b zrh)vYe7(bp0cE|Rgg9LUyJld$=|bBg#Q{+%&?Hnf*QF>oNCMR5udk1y07 z!JMgp-u9$6hF!yy`owE{+;SL)2JU-Ujb<$d#(P|+68He57jx(q9db?xw~~zJkjXY~ zLX_#gZ+?QE*m+%2ED{2UOcbiEwM-QE8)jZenNj4pWdq@R$ehPrXKfs&R%AR$P(NXP z2zI0|5rXh=#1yo4hr;Af97p40o8VN}=fs*PQ@6s|^;XL~$7}x?=Deti&#VI1skisQlJ|&21|!mn z`1(C&2`X9(U%|XUjnkNQJ2De>4JuVy&^gHCL%@Ew4!y7s7ePpvOJTx?I_!og~-;bT>~4Zs3 zQs=dJxSMAxA;rn@^Wj76wB@xn7RmeQbe*rq&4l@AuE^F5B!??yFsG1b?K<<(hraHB z7&Y-7h{3Hza;NJadrc?aSGM&SJUEsD1o9MW?VcI)1gmXPA7weD@xcouiam$ft`Nn0 zZVNBD>Q<&07_9g^zvox|dd!A2?Q*i>5IWT8$u5rJ-|N+7=@c}gENgjKY4IejV@!i1 z6AYeWS>thjI6xJD7Ix%RJ~*e!-*-4Hh|MUutR!ymT-Z%D!&f+r-gLs< zc37JxQ+f2I%WxWt!k5OBFy!mnNr;M@L;-brQ?UNK=}0;+}}pRXvQV=$o2tURJDbp|sSAOM7` z+#ca6@Tu^mqQwWR+so+{A`<=4IVfm$E6RDMl4)bqQa)VH=t`y?(0&r88Nx;yTT;Bu z3YM=GPt-@+NehDZnY%U)HoxWjp@)nUQF(0Sb%y&EY`BVn^UhH5x$$bIT>8-rgMc-<7 z1gnRP{nBz3e_Qb+2tvI2Z$jFZ6FvAdjA*AOgoeC?4$sp7dF(s%Z61VBgtAK1{jd0T zhlgup`q0KD!_`mwqYB?!2O`U!t!(Qsbu4%_t8!E^_q-Kv3CwA0z409>Ny4y3h*@={ z%dB33B2PCWto`X#h#?HKr`s2JHN5$xwcc3m9zFWd9+;O-qRN@(-H5&uHnz(xnO-?3 zv?v5=N-rL)S^&PHZoPSOek;T!-jU;-vy~qyc#bK1j;gr}JJ)(nMBH&(R^7eL6a4#m zQ0x(N*h8BKhdPc)Q1gIog`RBma2MDzy=K1cLImxJV4sVrO?DT3BCsbKQMQ|tVO6|{ ziqxV>dE@DNiFNz6VF2P%!VzN@(7?zI5q>+M*0Nm1p*Ku17@ zL<^YJ=mv7yP>J9f7(B%QlF+Pq_S4mh5V$iVHL=DED^Pr%--l7U z`EV*$9|u#K`sl?_k{;xhz3l2ilYb>}fkcyxl%B)_ z6FDy)IE#3j9(B!u<(h5cDw^=<60Y%RJV*9V3)inoY-9B(0*fSKuGxonvb=uYZYNKe zmdp3VlBHEjN->+)-!dD-Y{Is;Vm6uo{*iJjrua`-XZfM@!XgFEriD=Fm%wQ$dKtTVfI9x^$w6krG+zkNI z*0Oy5yR;^C-K$rGhX48-dx}^PA1fyFY1}%C(Mslf1H4Ib2ipnKEL1SB&-!Y5?RgTi zutV^;&pc!TmC5&2unMQs`JYgXd`nUPCWlWmtV23VFpNnv+%>ThZL-~%RiPLxFbJj9 zkbZJ*CK6S_4LMkMk}(KE9Eb7JpT#k=DoAd^}^qT zT3wZNpoqXy)T$fEpUf0c#c*b`dV?pxn`tM~tcx8Yq`$|NzX>@vF$kRWx4BXU5cMf} z-e>nt9ruY4xvD`zZ%}EC5D-*$UpT;cbW|plux|n?GTigPhM*WI`^qQ=6f|puH_P|K zl|kgQ)NkFnf&x$Xq-%0Cp^+NcpohB%3GK|eZI}J6v&)?fVo71Vml2EmW^X*!02`v zU4KT`&!O|x62L8vKxq!mQ{m4c=NeHa+8b3l>6FX4TWs#FZ%fCrD%rt<*Gf#XUlS;O z6+ZjsdQM=mD$Fc4Tc*Ik!CrY5#dtp%Ca5;(V`UFK?KlJe71o4A@*e6__pqA_F?5At z?NOocW*qij1uj!HqS!JjmqTF}NFFYX*Esl6-*12cM;7%_L-$RJu1>ArT2MpI7!90l zVRC9qi;yeop9`g-`}J{5Fh5uKU4AVit{Mq7gYFuKN#nh(X{w~7{wzW1#mK3xs&7R- zuz@^JmpMhf)eVMFsxZOVy{XK%;9g|(@GKAc6TU;Yn=S79u3gd0J-HYx9^*;lKqm=+P`r65~iYL$8YAc*=$q)&Y z&pY_L-onhEqc&h@#IQ9s5ACoazzt?!o8aDpCso=*ihbITH$gE_^^Ut$DRs#j8^eK_ zc_?M3y|`*V`(n0CrulnhEkW-aJ8~u0pZukoATmW2!ZWvJS^Ty zuadm#4io1Qkq#K=s-AVK4e5FmNjNuR9i{P*8;ThS!_m?k{s3^!{G$+K^J3_lhAi)j&ESoJd`;GoFPpjigPwbN7kQp^+!xF8@qBqP#lALIt>WM_2`-=RIeGFy zYK=^d%)!)%1A&{aV3GCC=Dwqcc>1DU|NaGve_iV*@19+6{aUc$ZE@@TU+}t{l5iwY z$vIfGu=oh@Pi`q61<@t-ff7g_HUX6xlo_>bbi5p7(#kAL#%tFh(Uj7e0pISRreS0; zH`dw$NaqZI50`^Rxt6#h+`(2$tMjdF&lP+yzzM}j7RkySp&rx7v+g~gY4nCS5qQ&? zSM#249TMqZYAL~nzC~7A>cJO}F-wNr3qZ~`LnwVWnn0z zmL*|c?&Ju}h2t)rQhz}&mayEJ7Ksv5zmT5#!$f=~hk8P=@1XQlE>S@3(lwx(W-+Hq zN?-wWcgWtX<8QtS7@sN$WGam!r=NoSAZV--s`!X4yG8Aqhs{Fb%=kc5w|jO{E|1S$ zVrtWUV{k72?#wQQ9Sv>RFimfy>kz3DneCH*%pdXUQ-t&6NT{3!PCEi+K!in&l`Fe7 zz6^tKvj_}r@?jt z{$bxVyq3J@30hr6o|ru;p9srixe}_ptk2T{G^t#L%qKRG^Ld8v7HZAL*F0a7zyFDIjR$RnZ0jyJu6s}-?wj@s_$W=MljsUZq zM02LWK!z0*!py`mvdL0foU#uc=X$<;Ln^h4c1P;jJMDnPOAsr2`(z0$UGx!bm&AOR|+!7{decN=iPxTIqr8~XpgUIt{3^$v_X6yuG zCJ0!IT`2w1fteFcNba>9KjeCFu7C(O0G4M=9{XnTwL9>)I;_Z=XNm5XfRv~aQqfE2 zHm8CZlx+sn6s#j)%ph8?`L9 z8g)!w2Vfibgh+IS13(O544x&CBiXF{#pLzW7B+Z^<`tU?%KNuHb}JKlM0kFd3^V|S zt*B{dQ4Mf+!FqVrGVFX+QqCtn*H|QjS%S_y1-}ge#@&jv(Wv$xO5ySRT9VetGfC52 z0&uGc6CyT8`ZB{psp4&Q1T%{$2;=3w53z@z(%zu=w5v6!XK+;La{TN=uIn&`IU2|W z^%3-d3f9g%xrfBwey{52F}!A8NiVJnd8tS~O1PHuLK1WT==LaH&38#_SX_Q*#z?re z^)olFU~(N*4Q`FzI{HT$zff5NxYmC81o!aF@U(QTj+IE4mBJStfYci26BY{7B7FDH zav@?dUchqw13kvr1{@6sTO^)jB2m#$6o5ewui+ZD=JA!1E2yzrS9pdFA~($d@_l-O z1WIG4@&@FW;Ac=zDK_L8wP=^-X%8Migvj*ljLWb$`4Sh-ejQnwZ;y0RnHsouTKs23 z*OO|1mGiSoM2|rdRcBwgTla&mHor~! zAVDlv&c2(bI|-K`DW_}|+Rb#jQH;vXKrMosG*$h>{WTOw*HCs!5RjiwQm>1>ZKgFqUhvBzd`3SIff9)97D2IC;HEdQms6HMHasj?v z_0lF0cFE3)@_ZguC!VQ_tP7LJC$vPw4)OZS^zphH4e8V2@}u5b^|>#36^9bTt=6KP zHTwo#hd+BpE#xifaJuwhK?mUu9S}p+HE#DDG5;QU5-eywt}RYF{%f%O*Uk?=GgNCd zqqoabNr)f0EI%u}fNoJ}ob#ohz3JETug3H&Vs}3{hFIb9cfw^3dhPgcNY3AjAsMw^ znE6et{SP(zAI|zuj`H9B(?4Q@|6^i;lWAwy*_V@ye}t6X^k#ul#e%2kA05WR@;^F^ ze*`lBD3|_HRR7?p{y(6@_z1xUvyojZ^if(9l5#s353T=HC3x zE&R8eI&uVQ2)U1-l#vrD>1vo#q2atG?A+EP-;&wIHo10NgrdM|993Z4Mem-9E|#`( zqp^do?+4eXa^FL3nS*Td2dRhNA&iC<>j2|IBi9!D4}B#e{{nts$nQ#NM1g1~b+ziR zc+kJyy|+oAGz?Zb=N3&u3^}2Y+d;oTLX_ObsE!ns3D+#aCWB`wEy^B*%u#?Ocov-l zr@9X_(5JWjY$?O&q`n0G>37rDp+mNzhn&oWi<_T$X2E>fA;2=dc{^K4&fWO-2Scu96!p6^$Gqv`<~^}4*OWTqW{FMVm(zuoA+ zR2*k>5xYu`YSAaOnrbL zuz{2xqA3Sr5pq{`D`?oXIXz-CEa9#*0-B4eftX#^jGfBzXh(_14h|-`ZDhEChrd#(I;!rz*S`0y-@g>e{T)= zV)tnv_L*=s;))3D3?o|8k!d@ghy!a8J=f2V5dh{fa_$gEtJgxoSSz*mGBiDn5K&~g zqB&L|bF$cDy+PT_A(=znTPvn73Atwz-5bxK&H(Vmgr8uz3Yz&?O>#t?O*Qo6-rn1w zsy^jUqWLbXp?ctpebW!yg*UChSs<2e#)4_0 z;hLp%;iD@@@ zW{(X6L90ueV~M327;iWcHp&Sesp-#9Dcyfdx@$ zOnL$1TuHrHj=1uYv-_TcYEH%ewuz~y(>)qW{Q>$`Dx_RtKm10p^ivW2I>Rh&xPnZ( zV^GvwYj4f+ejE1@W?DrRZ2!)>b5>5E~{;7)cf+^%Z|JnT(Yb>>fE&-ML#YDTY}YL)V>9GaPd2V(MG__+I0mc7*xq?y`jb3P!K4_zEdsxFq)g+@AegWGlr^I41 zhSJ)@u#16m+-(-F*ocgPZ@VDUBeuL5bw@pbh#bpu>fP5CWFS#?7mbge=}Z&H7nN7Q z&fcU(!ct6(K%-^wo(3x};2E!ynLp3p_q|Rqvap9??lpfI>Qr_hYReFKJjH!uMJAPz z;9`>x1Sy{54^EU_Spv9S2eEL&7E*A&f;~^xq^xYdXIYA6B8PJ1Daox9hbTF$q|d-o za;SKde+510kpp{re~WRQv+sjpML8^VTejM-0>b;*ZLMt(FlL_ri@o=ZifUc9h6O=M zDnUR5Bxe+81PKBHl2MXClca$rgGy47oI#KrMMadL#3m|&(Bv#iP6j|w$wA5Ct>roU z+XIVC=E?7U;E}r)t)$S+kIV`<`!Fo1#1H2U#Ijf(XxcEi711ZaLsY zzyB=4EXMH%6(-azINuZ~_MR5#1m4c@I-JSdH8Y_8GF}I^cY7rL)6bk$BoahVAu%kj z!&h=0(S|v5y1hHtj5&C*Bj)uB^2f^^ANTZ@aYbWE?)Rxv8HlVAoMMXK3Cuw>*)Okr zuE{ubbqY2%<$Yf8$l5l}{bmWS(Vm(=)65+UD>@J@pg12!f7)=Nm1 zw)*6#@NDELc!zd)Q$OhdSLM?l4%TmAQB2CN=%=v~*_ch->{ z#GQY&qS&X<;IR68+a!I1m$X5v--7iJCv0OG`=55iIK*`@`C9KA*ya3tP5_Z14m{Ou zuz-HbojqfIoox1jyH=>PBs5PQ9{gsl5hupC*NefUuW%kD>t-^|APz_WZX2G{Bz`&n z7EuLzXl38;btlG^9u+M{dThJUQs4(fW>z?w_%`L1&ZjuU{K%H0dnN6rf*YxwwR7ni z&#Srvj*(|8c@Yfep#Or%s5&H?yD#uosUvE{7UV@qV%^3wOSp>{UUDXHD6gxvXaV*y zp6L3I7x$mQ%RgSO-4lR~Yl8(oEx#QkXmO*1H{B1-foSvPfCII%8p(tkG;`ZN=rQ2c zWBCg!QHbWT|BFiQhch|q+T8VpHxv)$r@!y_`E&-~as70Dw%H)>!W_!@?1FKbF(!Z* zn!b;85#i;4b{Ap_eVX5%g_P78HmUzou_At^t7iAuWALSyfP7N9HCS)oR>NBt9Ky_P zf{=kr;@5{5-}0+dAfd}=%ZrEtb3fLr3Z}nZ&vVtDF8Cil{z7gCaX}H_esBh^iSHBJ z6;O8K?xP{IdX!XQg-8-(I3in0o-Ka)!L#8`9uU zmxG)^i@3lq;0_t)?Idk6FA}^vVS$<+s3^mX&vHE}HPC?-6 zKC;>;{cPI@Ukv|(Hw4cjx!L}}{JskCY$|N~{bFW+@jtKZ#rXWC1pvQghSb3T22v)j zyXWs^>6<7RBYWQA96CCL+x*-_v>4RdYDooyTlXIKeV?-7_pg9hH&p4*@EJ1JZ<%N9 zO*ZG@-dfQqXbfN7g0YZKD@;fkVPp|P>u|~*&{jIf$q{&q?n!wbj}_!dKW5*%mYbaO zTu4ffpa8Upc?LV3s!A_w43%Socc@o?Klmb~6Zc?*uyiTp;K001CTGBMa1Id=yv|K~ zd1#RJ$rfm%a>Y6ycf2F@{$7M^Fza&ADMtTb{)10463RMSQJL>mR_toza&nC zdqaBV%DgaI+Dc$Iloh`lljR0r!~I_O+Aojg_44u9jw zO4lnn0aEiP$abu8M`P<8%j+#vDoi@(YL**(&v3QE^zq+uArt{Hu|+A^z?lPeG--{+ zX5OK}I)hBeTN#U>aS|i>g(N2fi}vqg{vJ>;Cn5T%uIyS!DxHV`eMHufz;RhiS%Cvc zhS?uYq+({EFO*>(>yZaZ7b5kr3VlM|tA^&Wawje@sIDnD7z4>gYt1eKAWlDR9|lcP z2b40hV@z+R&fq3_8Mr0H${c=|NilQBwEd1RjFqFiZrt{)8R>%>u9xyKrjgQ*uKi||4V4D zgb-brrvuJiGKLL;Z;#+$b&60Tm^&2~6U$5l(>S16r^G;v$F%Uyn8&f$#$%gGrlgK@eh> zgmPj&oNX!rTJs4#>3-JmV#5KiNrSYj#;4ZxS5!(vV*Nv*s#XNaf2>Mnp1 zBKj=7$x#qNifyOS<7YkRBx3(I!MwKv_DosGoCI$Gp)*7)0V|LKbN9Hr%6%L#$@>u+r;QK%_jtq?~u~N?~ z!7|;#6I6(q=Eil%kj7#kf!Jvpe3<9oFdmp4Mw?mWO!&)R!=Jt^U0QNOtZ@1XI7Fs^ zdw6-JbElteU9Qn$^^xNh8Q+si%WG468J_%JdM5lUD%V9h@h;>xr+vH z9UL@}b*(C&&OVo~u3#O9>ccUWukfOYv#?5r6-Wy628cvU>w1%2e%gID+yj)pGosPCjaTCRrw3%N0M*@zq3RKKe7f88Bod< z^dI=->r`{dFz*p!`}gZOG6{o>Svxe?x7ZL&<&(%ggQ-YNwq;5z)5k_jYKh?#Wv>IXW6!YRv2k2QB# zT-(@YHm71vf*v9t5F2_Brnp4tIh$UNpC&j&80Kx2;i z35EJARVsXyx{SgK2RCDG`HsqakyMhe=hww_CMR8)?KmPiB&#<0B*j0e(D0`l6(zwR z{=8r&;>2WEvv9$e15S+RUdk1`!>5`mhKqM^4Oq&OZ#47Dt0wTu4A=U2jY$zDfXC{a zQB`SRu?k5Pw2yzVX6+DX;=)*ST&v08VZ%U@@hhAB2wR0Q&2*(t*@8DGQgGNBSx_5` zox5N1Yc{|5p}F6l*v~+|6DnyEfptCU7lf!OHVC+6=Z1=Ja%-kyVw2PvV6?e*;uBZP z14i3W3I^(j?RHQSRg`vTsU_rz#T1w!roRE_BJr9b@9Rk=iHF#D#!IOz9-c1ZFMF>PX@zw+?>OaAA|+@RUJWK5bY(8-N) z8J7<_l6FOWBx{zbnHncPj5%!b?wF4M{Mm4>n>8z;2yGS6{?mxKU7 zjyYFd8jUeM?=&ntHgt}o9}dTL#RkR83K;gbr!AY7)d04Jm^}J*Y~KDFER%cAl zQNWM1W5=T$6wZGTm*^kD+jI)CLEsRHdmL79MTfyBR__t+ zqzC0!iS1+ULME&g6sLsoHZx@8!6n4xbXaN4Pjco!4lle7)J)=gh6-GOKr5bpD$ok8 z{jlif=URh6ib!=@oSoyhcaOV~y_usoI?{D#`cIsS4JdXVs}x(8A6HONYGOArxHh89 zd1<>bX=ClgdCyg>K%2-Ns%A=@#5pdKAALCSWw(|oeM2+r*0c2doC8F^e65)_s^NzpF%l*axT(!(!pld9s?@35%DmjgBY>b6j{e+Y$`>(@4ZzPwaI zx+{+3uS;loV@ui|DTK1A_r$$*>`E1}`S46h^1&riwB&@k`&1T@;Lr#WAnhGB4Y?B7#EL|$FQ4FG6cx({nT57>2h=xx1g87 z$wZLlr2#VRQrBjRiBdUt|173zE%pbQe5jLBIe`mtz&zZhvb2G=V0v2YW5xX-Qdg>t zQA2Yd>+4<%Vxsqceve`|<|0R%3Qg0ue^sIrR#$pMLWA367^mEgO>JXUwvoDAc$CHa zeR2_#m_wow50eL^L=~#Bs7IBFFDwpJB-pm8YW+XG?6#+y0%X*p#Tidpp=?^)19KE~%tB z3_B~~AO2{UKx)u;8ftP#B`QFt^51!$b0vLW-@Z_hmqFszQ|Ccwk~qXZI@wOi8|I&+ z+39hTiZVc*)&Ev-ta7C&wjb#_Q9sNU|MT0141eh{4=aJdM@8huz-6(f_w$8IwC~<_T6+Qy{jYJU*YJD1A<;I7i4QRu{oM)mTZN5?dc$o^L!hccjpm6aeLwaxa~Ko#GS zVj42fLy)f^rO=Ih+yFAxOQa3Zxo$0Y80bKJTx?*z0fi(Xqt~}G(?qO70IP#DGVHvsn8+T*>n?S%ND_iC% z3X_!l>K*srANtr61hV({1u~c`V*YQy*-uJ{K+Epm__D)4X?0(3P3cc5|G#1aIDoAP zOx?&JDoEVOcqsJuzsSG4nDCQjjvzn{Fj{uaLBIF^?#=y`qmU;lg50k?9s+^sz1;uD zr-}UHF@K$Dz9l&^^Z(tc{Ob|H@9af^#Pb9FEdPpTI+N6Z!$${MrEkxpMX_zMi8Mk! zYt^?G93WQeOf~Io{}N5$(K_c7~X+&tmi1*4G)C%k~PN`vWAjvso1?NiQB#^sp2x{;%wZ(sv! zI7N|jJiQFY6zQ-vf?t4UJG^!qMk2eRG`8_Q*xM-Bu?y-VfH*PGLxp86qg$_qwm78rD^nB7ok1;-kSk~ta z#E?x#BA?Aa(_~3cV<-s;eD3ETbFVSrlEK`kug24@@0k*L85pjN9u!p!8dn~JC)gRG zf0dqb_%1B5L$&!79ozK*VM?XRM_}n@p!+8Db@}DTR{#`3OX>hIrbA1nFS?|-cDn-s zkTc+Te!*>~OKqVdJ9`3DL!MZ5qc19A1zs z+mv-0#znoICPyb)C|+iexmR8VWRJrA;xtC|m7%e$- zs;|)G!p==F!}n*9^}bsWhdxd~9(Ony7AihDn-P9_9Y*a&){}Mdv%T4ov=8i#>XH&h zB&e(|3n zqty8pBbnkOSei1xxTy$cbH}V+r0MMkzGUGO0=do>zT_2xXHl?vJ>=cFKj*C^B>-{O zzf_6}G2<^ z^Yb$qEry#ggOCsgwXtUR`7m4LeQ7As$1p)bl_$tiaW0>=&-GgSQru`=%L34<-)iACq@wB&NiQUx;kRGq2?JT(K__I$W4g}?#fP#Xc&D2B4S83#>{9)OKz_pCFt(^;Fu=k{XgSQ5oNgdVFCX@cY?(S z-UM^^1&VO&B+tki@SsA|F3gRD!w}d7qC~qKt&B5L9Z~>&l9(O8zt5b3o@2YzX)erJ zrE8#&q~cIcg$rOL{{vEdaooqVbFAA3jI7LT4_ITCH*l9~-vHrN@RX9`!n?S%BPY%{ zz5W)P92js}Nv-CEpec-}-AA0&3J=lIw#lZLx~kdn$*iwrw_bfLl?JV-Q6^|2XNHj{ zumfJWv6;a4#Ru5xCTdg%7jR~LQ|gZ`hPp2Hy}D^GKorspM4j~))vbOUyw__F{X@Ke zf>Kf7r)=6q&(bXrZyp;QX0)V-@SsnCn>V{7aiqxMHs~1{V>Fel)fN- z-b++~)HJLj97jTlHv|G_f#x-uYOVDrR%}u-L`l3BK{4q*Qux!&yF{ce4}pb`mwt(f z8h5|7l2gTiv>`h+h>*_6`^K9e+|>ln+G{-5^2E>O_fE?S10_M0U89iK|)PSNRei3 z0NbV02_l_b>*uwumTm!_Ip)Wk+3wSP_hxTa1ntwdN0-MTEoU-##_~`ywKXU~PnCQI zO5;*?a!XQ%mw*^B%_+dx4E>xR>0^x`YNW@#jEm|{etj8*R7YD}m;gED6e zMwVJ7{{qs?9w9eOdT+t;7XA3fBcHk~b#Bv0IQ|slz6d#={A)Nm1`&GYd*FIe8Wx>S zaESKK)xWd=of)>!wDs~jU?XB*iIt2Nd2?$*LE1na$f@E=yAKUEcR1W=tzcXAF5b<$ z@5+UWp>JW;$5GO80})f`i^ zKl1;VKK{)x6mjjga6;$)>DX+OE!^ORi`jlRJSl)Gelu1X8<_=+$3(=*lqP))D-amcsl< zrqdTd@|IK6XPtZRPoT`oSRCe%c*W^+?c1}F>alzjSA91L=?=~$2gG|uY(=n=e@W!iTYZyJ zp73W-^i=__>$!6NnuaTfqe=dHM9{UkRRFEA$`^>)r8p#i3eYVjg;UXlc zEuz*h=y19y^E>85F&@xu8gW8l_a#@`IP&*~Q=Fc4xa+VxA^EqJhocXGt&Rspa7-MB z%BZFSxKBLlwxgj%>LBJF660{=`ekcM)L`sNbkrraBOA7mZ7tjRrYUi;jQ|U+gwiOk z|J0Hdap>noHYuV%kVIQBw0cVtf8gTXIVmL`xNr_qrHwdNG*D2ZG3-QfKsoG>Fu-sk z*XUdaWoQyvS8mTo+3~sYH6lWmK(lL!8h8atHx#c?ei1Yp-gC3(u|JHjB8%&w&-5XP zl#JC(s&~11q!uL6eP_}=JFL$L1{bf>{#DoiEuRwL1l%1oWk%#u{Pjon5-L2Xamnn+ zv!@Q!zC_0&*LYO~u1WKdvE$k5r;+}&w5rB!#!c{JtUB}miBOaXI$5R?d)=m5bym_g zt$qNo5l`U0QhE@)*;Gp+ZIM>EySKX*Cuvt7NUSfn&XvCSv3ktark?dMlk4FCq5zT~ z4LuD?d{)F$_#}c_(?*&eO3~c2K^Pkq> z!fq;D>=tXgF^wXQJ|i@t;4g{w=eCe0ezG<9k?Vch%un8HSNie| zg{oCd2^?3yw%g41zl?j1U72haQ-8*H*uefqo+}9&>0NanKgkmtGV|^+qix^tnD%TJ zDYeDwH70`2lugTw;Zr8Q&d_(zua;<^fp%({QE7uEEDaPz>VrM1>{-fdrkf+TCo6+? z7GS}Aeo2*35H=o#dTfi7=-4g}(NkQP`5wOpf0dBMc)l`b=|n}mg1FK{_SJ6x3Zw>l z8Nymd$q?Gm&{HYqGTD?@ntEeQp;dYL(KI#g(WZ*m8}}c&&$F@}d8VzZHsI*$SoVE1 zbXfvrESOeyfqK)4cP`>`tEsYiD6zF1Qm(Z%rocfCc6U4E7sJmunsbFQXjm<_*=hW> zi~i6gIr`4HOIQ_Xf)tAr3JepSqx5c{Pw{ z;^2J&jJ5Hj2dAYJLn%rKkIElmt@{~Q7bDbA0~jb&Y1b)}0-$yhe0pDn!22{&B^HgL z%_Ha6#R2h(W6RhZvJPPhP#RPubkJw1@Y@i@I78~pF|YG2>G>gk5jHhNiGnnt3DPf+skd z3aDJvwGUqW`Owltti*G7Ca$lp$NY{jjJ>*ftg2t`Oj=9q9m;D$&_#2|<#%@?8Z$db zKyGmdT5RnPyWcw-@)I}$aRcINY6RY$H6Jat?nGCcfqKzq`{$3iv1ASWYPQ78D+p~O z<-h&is-T*l?`fM|2WK07=Wpa_Y^PhcbkI>(!a?w^vEnVu``f_rugDT$NfYa@@6^yN zQ%h7Zxq5c{gMQ#GzDZt!$g^!TrNGgQ^g3c+@aOnXmuB9&-jN+g$|tx>!R(^Jq=q+E zFGbLmLgH)A(xk$1;L7rvQh5pTp)V0ip}ciDGyZ`PW@Y1M?G|^2&9IL*!&fk;?BH8F zl~x=pjM;&xKPpMcMy=!49?zxktY9}gSeU+d05XyH+DFdu!+k!+EY**=(HNX^ou+mR z;3vqJI?H3gHpcc*N$DkV0dxpICHHr8#TK_MDkHCP=4I{^REF>NOSXKbsgUJw{UD=n z1FDZPE>|_dKZK-H^m7PNfvIwI^*{iT)KQ?{E`1LWU8s zedH2~u-@|PPrts08sOAJFw3mIopWdD(>i_&i+8mo+p#rnS_A^??3^;|Rc+mKCICj& zUoa6GRPOUN_m~;bp|qG`j3SO*JJEkSCKFa|7v?#c6*&uC!_SUal_6Pj!G5jXc>2{V zN`lVrV@xrcS9Q2l%=q*w^RE%ifj&(X07IBk<7dQA)FVb`c$Fb0&zF3 z7q|@lTULK(g|EFWH7>RgDe>EGuYEq) zA9@5eq!JCzn}IU{AL3pL-e9BT5}-cn1~i%C@%=YcFCs&S2dgSx=2l}@$LARqKj~g= z@|#MorC>}AQ5W}3egUS?&B;BT7XZkNduVrbB{@+zwgQrKG%mNZ@auo6$FsJxRHq`I zg1UKC{h8A=4AmqrWlxu9$Q?zJ4D0YTHL~ARf22!uNAHvC`=|2j?>SVW&#MObB2Ucu zsyhDJHSTQT2u+0~X*r`NUK0&OLpTFf^oeFk%O;XO;9O}80%L7sI%}J5gMqI311s$_ zlzgeYq5jj6`bgvk351qHabwS_0Y8DjknBoGJ5u$77(pO&2-G%VsX$KR#ngw*IRn$0bOYSOf}B#A zx7UDX5xITzIFnsk4e-i{4B!Pn+f2}XYTWP)oOIzt{AG3pVWcc{TMSa*N=Gp5C!RJQ zpifIS)VN>r=^X~B`sn>SeCkxi6Ef!$r++hU{VrNGP8%=@sUrRou+j{OfGXuq*nDnh za6c}MPoz!)-aXHm#RrIy&n>cqLt!sEYA%y1uiu&eu^Y5G&Cz)IF{CbBy&5UHwuUD6 zTDH(b84%&xY%WiTp`rWR&q_&c0T6Z{VxiI229UU-z$m|Pp*R@Pry$5z3_EVH$`u>a zIAi)mjl>Jb4Rjnz)Vd?Ft%SyKwnKc=b%7>hV{>Jy8%i|#dt^kam)k&_+-*blbIFht zJ#tS;j{aXU^KbrvmmWgKG*&WR!-|tshiaoasYIQ5ms(0$2Nw5Onr%Ha*(}1|F%|b|g~F zozvm{5CotsNGOS1Tan2>#l)4?l>tL@XN1sgz6ql-m1$qXVXpPPDf9wDDYPx*jou)t zH06jcPR{h_(NY~uAh297hX{~=+i%;M&14AJ7-yvtoRe+{2^#82QS3fjgF0n=eK@t- zxgFZEl0C5MW|p)`f$m4TbpbR|Gu<@b1<8al@Al?|i-(`L*r0c%ioY)GMZ3Wf$lwCM z!$T3PmTS_|)AOk+d?_2i52NYiJGZzh%%coyI}s>HF!USHH#StF8zaG-cVsW+FF3} z*i@~ITeToG>?cbPx9+m=-E=**c4jSug&OCYs$KpPDPT^99Ac5*)lcM@d-}IfB=+|2 z=3fvWJ?`g(vonOR$jzz15MLA*6(ZK+j%AG`(l}vFgOfOJU4~xv&=DkXMCj_s*)~RO zto%7oFxR56JYqSB;HGqc{4E%TNM-TeWE<4fJx&nWYfK`24n(9zZZK>+dhl4x(Lmqx z?EV2L>VzR~hu6@deiDU53;*DnKLo@{RX{#DDpOlIDiuf=S~F8YpyF+$@(bld*|Ux} z@dj!--cmVk5yi%%{V9H4m#B0A2Gg{UwYKwQI30)O33)D?Z5%PF45ButQ1UL`S;rRn znqr0dI7!=&l#q!ueM~^ua!&v<-SZ=53qC=26<;>MoWX#N2m2bmGpRBg;UEZNt&})W zht6KF8BPv=Zpx76W=D^rew60M)T255-E^$&d^xE5Mh>jI0Q#)y8{MUJIrY4mq)C@Z z=0dCRD?CLdR66;;N0JzcT5!~fx46gXt^8#{H_9_VY+-uq1d3-(bQ0{DONVHqI9o#f zx`2p}R>&KABYz5CbjzD$4Q3Z=yZ)>f3PPo`fNi~9+gZesdr26ij6wz7iCM+ zZznp^`X}esZl~3il}*&nPZyJU<;4-Kk(M;PGg2dz|;DMJQf!s zK{;uP9XbvCAS=4DSOV>BSvDA8}GifkV z>bNVNZZwOUnm7rQ>CtBzIhcZRFl#I zb$~0}3lG&1Mm6!5pWb?ekK7Dg0b@LIdnX$KWM%xFB-Mn zL$ms^y+VVBqiqC4rR?<_+^j*L=9z+dK1x@mg2+!N>&A%c8v?xqu{ zJdyRd3vEw>>_SKa?_OGe20`EYtA;o$>dSkfaC)pWhhiV>KCme}{C0P>Q(V+QI6m3w zwMs0S*SQkra88%53!1)uZ)3!f&M>JjobbR=FO!h2Ri2P-j8=g$@Q4!?8K0*rgH-9R z_H0~~k;~VU(Gi>~RXQCKy%(;A@>lv#zZT}E)NjM6nD9oZ4sw)Q)F-SuVFSs?Q5WOX z!lM+hYV6M`8J?Y@A@OA5fXK?IMuskDV2D_Ss9t3)#>S_Pw`4hml5HbA(z>G z`dZGl%NwL3ej((~Bo-uzuZSo~wx8dY1$eAJde4f>ga+4#b*mGI3i@w9J`Ei)ZF17s zm(Kk!bSh0bMs}g)Za`kFo5K0$RvEiC86+2V`Kr6$pxC-t$tCHUO^%ig2Ib-?O6C4I ziTlFnz|Zd=p0`~6rz+yz0%p|s_p@N-Axw-h!(rsV%ld98|5x?_d#G$l8=v3SY8A1>P(!Uj-(g#%14c!WRL@Xfc zF?-GJM|KL`OJb>l|HWgxWCnLk;Nx3Cgr+r&BQ)rU%iH?r#ne{%0^e5T*X%$fr@~-9 zLhOlX{6n_%SH%3gE4+m?^o6QAhP9yO_*3yy;fp2;w5NI0?UVn&VgY0v?=uyTmO;z) z;Y@dWI->dOFE;0S}7MWE)JR@_jU%~|%TU}q<6Er@vKGykD6#CDtVpbiv z+tkfQt3hgbe#up=)^NFfUtPS6<%CLtzrKXx0SPrOe){F}2!E2qCwOoZumyu>2Bc7J zmD&Pm?DSB~(FW;~y8+wOI;z5$^yE^}o^cf2budeT4w3i_z;CfI=G*9b5re48td&$4 z1@-F!GhK}D_79%EY>kxj*A-gChv2*m8kJ^Yhbj=k1OUSKPnP=iw8S#JSJm3znMLqy zLm_Va@VvbxObB|qK}SR1l4c->j0?Xu4O)$|LPpS~?&+mWeSaP!9>(JPS_uawP!fd_ zXl1$(`GRuH8E3>-BmVKLQ#{5n_&Hx4_-vhe7`WSRm~yfgT845__~zSR1}%}WxvRSi zYAM^#0nu{%ch_KhQ~z~|H>m%n^a{8}1$R4dG4BH!AzSP2_xO82zrY=ssVAN1M&!6{Ff-|Ov+RkG5HNa-qnB=kd-)Y;(q~h7C~C*ofGyoNbdtX}^Z=Q!qIhT3G5`Rd=Lbe~DSh+eq`ybR%^>gp;5fD4!desFO zzRC_A*{_9aevISOU(%>A-&gLKfqW$&{hn?ZA1?7vLUEF%Ao`}~KgVKt#Y4b2r-_1D z>iqipC~lYN^m#iBw1@4aJZ7=<3NUTJlCMLJv$WtJQ{Gy46ghnngFm!m$|`kdv7mW? ziEYS$Am6$(c?R5p#1R2N6?nV2WyK%NP~-B-68w`6&}55S;H}y87d?>AFWoO{d-A`*tmweRri)Ag?+_B-83rOqgO^V3B) zn9&bDo(%PSKNE1e>$V8!*@AO%U;G79#FPPzGWv~RqYFHN^~>Fqm|p|sYVc5zPDOS4 zOvn$I$+z&k=?xn6E+F~N1zZex(you6OjPZ=SdE-U(YwoEh>SB8|GUB_{L%#EciMNj zM=FphuWpk*s_qrVObcM%!kI>}NM>*;Df$89h04#~rf|{}HV&W)o)2^ExwxiTk)eSn zV~K@Mbamtyqsc~Q;#OwwPgUY8Ws1DQnIWf~M0uM}f$XmS2 zObHE6dzILvuPqE&n#wfX&NnEW&!m#_Y!R5Gc~MA6w?tfX;%cgJJ)%=u2{`#0R_x4z z#+O#&Y0XD24AA~BMKQ;iB;Etv0-}ko&7By=oLc|pIwfmX{%rpWcwOlejbUTlpP=UD zqQ`;dz#TVeh>i)xSl>q`7}yj;IWJiBf8dzrz&Mw-bK3wrHPa(^a2~OmnE$Ll%WG*? z`QI||r3erN^HY6ie+=S;IDGOfu0kIl$im_eN?ltqZ5wJ_+vTRCc1ZL2V@#BxVC~9T zJrp*UHvjtDdoxgb;#kP)pvuy3y*XCttgp;)x>R`#MWbt=%0S|Fl$Su@j!oJ+oRi1V0O(s% zhy;PMJ&8j`x6+-rfLB3*^jjF@4IYE_Oeb-O6kF7e_<0ct8e8)$N}TJpr^H zg2T{KJnuE6Ob~gKMfV&A0No5M)yl7z0PY#nY{|ZYh}ur{ZGIUhM$u01Z?Yza7#ntQ z=&9)Tk}yPto2>Vcq7mH^c!4NVGx9(?a&zX~-U`q&Bf6x%YO$b4G<)MN;`Z%b#R7=N zS)vXI9A6R@fGbw_JUo8`g&l|vUGZERQRdVDUT-LVq{rPi3*>y2Y(JMp@>O6K5FmNh z4XwYl0C`96yFK#WsgNlAphM0EAA|Cq*hUgO&WQi~I6+Zm4Q9vm348(`x7?)(I`_`? z(8ujV4jSY&LmLtawobLO_?4%64nw?a2HOg; zfG<+WEzR-D|GSf%4b`$fpG=&&G+fKpLd*5M2ZV#bSX;I!hhQ7SD(hVpfbe`}*Ar$t zUwvz$;k1tjj3y3G(IBjAw`C&V>>Gbttln?27_?z5rr;6m_hk|l?2cqx_rOsCSpTsR zVym^e{zs?BLP&8cxvRjA`9$$79jT%Ai_>VvvLXu;sfDn0QXnm&ks zNqo}%Hm0tnMc;m6f_$JbL+=<_LM^Z!^K6r7l@^B>g^b8fx*dOF0uB?}D~$P~|1P{8 zL0Bf4i@!DAn$9P2+Z#(aVIkqkzNhksO)C9YiG45sBfe#S4~M+}5n=H%-)cz8bj(u0 zGJ)JG7~>L+CL~1A)w- zSb36{z9?zCAFe(^t)8<8#kdXV5-YjXUmsCV(OylQI%{0c`_t6)0K^`)uxd)64+>_J z+q86gxmPPjh^b5?srH{4KbitFf^Rc0ev@BfuZ`!=GB-q95T{o~_r6Tb&7LP8Z?n8` zV_c#$>ze#XKO!HBE!4HP8_zL*ghZ)bTd;@8(B$5cLGo^ovWG;AHGr zz3%=&37G~HMf!SaL<|XuDb`&Nm?Tl|np^|LrZ?vX3%kMa3}amBWZ!yzZw20D8X{Si zt!D9>7g03&tU1x5a*OfFP~ukm$^E^1-~~S#6&iJ7u?#l1;ukw6S3q}Wmxd+pU_q>V z^ce(GFCc>9vD|S-3%5`|%}*w&H^;~2{g}Xq$l#qs(fpGp#V~OrW#093U zp`Xum$oC#iEOK2tz6ZWC#m00|WlnKR7w116D`Wn==Z*I#5Z80)r8kNm*&6Hm zda&=ldIpZi+B@Mh;low-qo(3rI_arjUl^7f^PVV*+&eDyomE=4>N6r-GD%L4uZ!9P zb$L4obKe?Q4s)h~o@41JmSN($)gzZ;U@F4I=g6%%O-|k`cG>lgnb=Mex{FWPi1gkT z8xynH_S7Xb&|Skho>;qJgK{#}RFW*hJS&zREJrtb(buJKSxv&?+_I^J zZv=5yFfS8*r)7d1N5G1Sf|_RI^u`uowVO*uEm}Fl?tNE|^_VF=*b`-zF7|?_O_mJN~H&w0oG(&67vc z-dSi=?Z6?CS-dfN_21M0_YtX!4la5ADOB^JZzOmiMA2~(ZsC)ZPRpL3Y7~`&wzc1f zIk0goi8QgO4@)U3XCr_3NJtOv>QxnpHfLaLCu1!BBo3XGe&ObmiB!RJM-IzRL$Zu? zatb@n+yzo*`|SJ|;oFyLPZ176RCjC}Y@Iwtt&a{)s`)yq1-kO;L#JB;rdZ9vk-+-4 zi|7wk_5KxN!LR<_J4vO5w=R2!-v^>;&=mXy4Ri$zaFh===Sqc?ABR=e0tgZF?NSg_ zI1~9sCqUH&N`R1a%Tn#3s~50kU#h}3Pg2m`uR0NXc~>>h{GZZ6G_Dr-DO86RbY282 zbu1&~EJSX7xg?;eOiaEY*gF6-((W|DYNH(rF4rUoA~%vj-#@I|+NM!|sdl3FsuZZd zR#N7MZ!O3RW+giHGpX01LgQ4PKa2HzO-(F_ZAI{gzGa5r$7Rg%6A8Ff5QIUvnh&qj zS$Z=c`J(-iKcuKi5SNwHlh?S&&}p@gsE(ey`1&T*azjg)v~mu#K5WZraI1UF zA-CyV>q_O!g(s?7Waue;>n0+JYKADQ$k4EoA&QpSv$ny+nq(^Ksx!xbqm{G;A$QzY zsyyEcIr{WFC20+3THGdn1MJpH$74w;1xz7zcw<_Q+7f;C_JMg!g{n2@Ii%{?cY60o z^0tfMe?5ku;22VBY}#CiB*ZeXy3s}ocadL>Mie#kubP7DU*#Hca_doBYZ&1%(xpopy-Q^WOTrJq(}dEVy2k-NL3n z2xArPrO~=*@l6ZM_?3A^G`gOhIMQSUb!_@`^}#Ecw4Z&1Q5;N4;uO%j~hN zrPjtBugueg+KutU+$IDYXBXJYl%UuC1R_GTtUM>8q6h1xPEx)*!Z#c1jjLYQDD3Pyj=Ordb-A1~a>!)GjwI)~s zB$VE%&r>_&pM(Xqx|zm}Qf{l$*1l-mRNnu3UGXlLV=K&_T9+A9wIxSAz`UkbkK#c+ z6i(^8(DiY=7~9~6vdLM+)ToF)`L6fLOOl1WgCz5!Q2QB$7WTzNj?1Jmim_1r^i1!olq}6 z=hpg%Xoe=X>>S$=+jte}L`dhR3u^NDnYC{{udKrEaDSprRh*EIwI^S>kZ`F-dT@E7 zabZ18mWB7{KE+~>bW(zPdy!Jz+Lp4c3p5}Mtkb48PJa3Y*ji?%X1YpYkh_JnL1M#F zIR37(nr6Q@Ew=>GTuFb93|?3?qu3=58BmMIc4y@!D8)USabLc^mVs z&u>)a-(-tbfYbsk4oPJ(LgSzIPmKy%PsB7aZ2>PXW zwW;~^goTLcBla{URMovPi$YE%y!CZdiFntMrQJ1LY_kGYfHqZ9W(YCpcrf69pb(1D zi3xF-sl#kt9&Hd$%yp4Bl75931F5>eBoX}<`uv&mcCoaj=vWphce{P&Q&s?;A9HTg zrjdRis1H+mj;mEv7z3Nx!t+6R#@x%sQJqDVq^=2_tN|3RQ1XW+H)b7t7oxMnF5B1JKFvz9J+!XuP`D}yJ-whq=?f+0c!_Mo)dj;2ei57JbZiV6 zf@fT>jFb*mRVGjcdZxDNLt|o*fXBMpirtJYloA`6j546?0a z5xm|fB-p{xD?HfH5TQVlaf5|!IVd18$UDWIQ$&1x=k&%0#24auB6s98Hi-RM@C$`+ z6Raufl(>ewtQVFw+4YXENlgva(N`T`JlrHrH{2Kq2!)m*^%<&vS@c4kZ3kK8`w(8; z0t$a9hKK4mmD-jwG)Uf?lK1G02H1T$xESGeHo|I?(4cnD`1{+rp6ad`oh5$n4@7(+ ztU;VcfxD^>XV%9WcS9%?lco0;kM6e1MrnTy6xWWACrR+W+bVy~ozN#0DxkfNvOwD- z0R>IJhz^r>Te~lUfb7BNo#7bCfD$D-b@aBpAN%lY-W-3WEj=FBR;tpy+ee56H})Hr z8iie_i$zJ%7Y*Ajo4hU!?~r|4t8%Kn$o5Ep(=Q9Be@$AQdLuvMZA_0M<N|Bx-XT>gb|-)L}45?nqY@tOR2%;?bg(T$PH6#t6E*iOp&y5J=7 z_7>Dj;CVVSvV<_rk{tjKZ`P46h0%DRaWY_*s?dD=)gdN>-bAY{mhX3d^k%nAT2xlj zD&i*}E!C_=Kc)|&*1zV(YpAMBLst-cYy1(z_$L=08Zsm9`wUz6r9##PddZ(L#M!$< z*K+g`>0TbTyqf7GagIEq?PMGAPYtwqw&phrf{13576MlV^g8Qh(O}WQQY^CPtwM1- z{>n8YnOFGE*KCoOxY;;9`#xw)m_LkV3pd$*K}itlCVZ1L>)Nl2b; z>_aN{*9jHb5z}MYTDvh`OF@I1oM*H}4ko>ED$Qd|!U9tiaj79p}}oyq4S11lOju$-Z}w7^_0**ZNtr?)~p2@8EXb% zrcjK{g-w2in533O9!m|<~<+g@<3(`61ZjhQZ zDBUP6h`6~AX)n6=T(2I`QOAk zFD#)31Ht=Zska!&v1_VZ0t>`tIXq%0ph&QHK;7?X1Zd04s+PgOzf^ zVkKWcWYGF+;G|eoy_(fbw-*<2dcdR`o`w#7F(s zGI_x=1xbvtXUyCH%U*>}gSOJ=42M;ARgXXQ@X75ji5qv;oVYJzPPRIk9`#9D zHxc0Hu~ay^1Ks-Uj|H(#VR_rl6|k7s@Yr~HC4 zdjk~XNBmq!v^t~qkXT;gwV)pvZwU}7bl;VhiWGqrBIzL(^5Px^(`wBV@;jhjtNWZ} z?{@rZc7&=5(O!~bSg}O84;g{_reT!)FJa(qXC@~Q#;k~M zDi^&`mK>F#vM7YlNM#B#sg`0e*|QF4%duU zmPJoHPkNl=KJT{Y>%{pV*EweNQ&^vA`@jZ#wgdqUJz^ZA;vdan!Z|6JRdi-U4y=G0 z&g?zwqn}+M_q^Q}ufQ6M$=@zoQP>;|8W-X~aT!$KI3Nj6A-Af&t%k;%EWLsOSNCU5 z3&mW^f}%g)4?T0H3r!`KJ!zK)UgAU}^=KCJ4!T{pmti?T#rNr3%hTr4u+>*7st65JvI3XT;*1CGkl!0?5 zL9LSyfi<^@kEoSEvZu^(E(Y4{vb@24W79gdCa>#E4j;`C+=1lP%?6h#!f2eZN3y* z3{uwmI0}z*^<<92t&+oyV0IfH?86Q$^fUkT3GP4i?XPk;`m_vHMg)w~;^c7x>zJ5G z^`D07eaS+?={V7!TbY&CwNanK!rDxQFp-cx{a34^&ebm9JVyrj0@bNha`~&VaBcQc zcJoGL5hOsrWHormeAOA+_nRYLowVx0!Ga*UF?&=X=d;$#KE%#@DstVJsU|rvuAnCS zCKv3Jdt7Ssl`V@+0&2=OETK1NSiUtsltrg3oP#{kYxWg}|9vk4U3-(&WC<7NvU~kG zdiT^4$B z7FA<_F8MFDj98e|cGb(vUwN2Y=I;_pNu@r)svxtV63xdCU{AM}v9S0^3Jx<)ZZv%R z^dX!zyijt^OVBpQdqmCq5QTd%SYp=LhR9L*i=D9}!Y~seYmBm1o8azyw$%NEGK70H znOmLD{B%?vC7w9^F2S|%Gt@BD_?;q&$3S-q-%a}R(x$Iu2%yq9`2?s0lb3B-lRd08HKrk98 zo{0H1)q-F^?-U1-iO~*tS@Yr+&bA|*Asnv&G8JDbO}Q`y-C$f~7U;IG;*+`o5F8D^ zBkzcEMT4esgmCupe_R7!I|F|Oz)%2E-|m%&mqNQcM-C;w$rHI+j<8E0sDAQRJNIdy z=b9z(fe3wk{s(mp1o6jNz@a5l>ofJpMW!pFxf|*x11N5E>>E&Cdr5yF zn8T(W&nhHXg&V*1-Tj%n%gCA$6ixL7 zhu~^R38U;gSuF~CAo5ECww|RHQh&=dqzcrP{*;-hhfQN$CPAQ)RXb?&MU&M*e-;zz zKR{=bwEFV+$-J-l2Qy<#B$%d66Ifs*W%0^Uw8&oP-brr^OUj3zu$@TuX9(Q+< z)i?w;6T82}`qwr-PKn0b?<;Nw+@NbQg8nRT6G%frd*Es>ve6pta8Jx^ydo5s6tW^O zl;1u`w>VS*6f~TH90+s5Yro%Yof52{tpN)cdP&HE@Lj}LmkY%0)XaCX&T3Bfzq!f>HZZ@@wK)KA2>l@aWl3PhVs?MPIACE*HBLr->#eSM#9OiR90eE>c(PL!(4%sft ztn#6t3S_U2RBiz{z;!@nB-$|@yVOexlOJ2YIjqS794KIpG~o*XNkOFLo@j%nGa#G9 zX@il~u^{WT&&GpB$TAd4K7T4-(1LTorAvSo6Q)V|`P8NU!Tr-?#I7H(@oX-9Y+fQ( z2+s#oq_u?;jH6$Jy|MHXV>*-kQ&5Y|ak3N)C23KFVVL;OVg)E)0s01?(hP+h-mp8l zw4Lnb=B#{_BxTN<7gp;WMOQ7dk#c&;v(;{>+bO*nR+y;%=Gd1YSHxAgK=@;)Kj3 zDeQdu6_{2ogX zM3bvH)1lU7aUt!Djq7W_lnDYL?q0voc_O3%W3_KOMszbD7Z;09QE-@73yg7k+?Xlp zeZ|DYZ4L#T9}N;m9=7l@$46kY-Z66MU+AUcC{%y*E6x4H$5mztu-~Z9VqLk^QgI zQdk6V2#Tlh_|Sna*W8_IV*@H-bF>f@E?LJs*?^`cx&&}A%vER9c3{y>6I=ABsZ1ix zfxmUG)?sSo%H!=Pz6QXE+Qh)8sG3Ar5kjsEgl;gg&dZrlOG1CE*fzl~>@98QsAf4P z)L4Um)vM6nWph~;sH1eEprd4Sm7DxI&&?*}`%k=KU|YGbmJ&5cg>8lX#Rm|_ z?|_t-RLFkhbo$XGWGLR%S|~{q%i?k~{k8QHImzc&MPM^HOBGgvV_X6CjCZvtoOcEi zj^wY*J7CP|J`mD7iHUI=Fy~+~KOHkH;E?;uZw@GBwNF`6RJ>5>p_rr(2h;d=EG2B% zYW_I`W2Tx#y4MhSr(@;Vj-;`^>0T?OM z?2cN70u{dZ!*J#WTwgm*Q0dSgg0Zrp7{_1x4Eb!OT9uY!ySh6gzjC{KCXtBD6xW;v zr828#`}@#94hIrL^xorXVAALhMGPeSuHmr> zkkOBpe`Yvh{JE;lyaw>5Rsx%+*<}7s@c&XgVnVms8!dR#`sfCjo{B75rM&0{fU7eM zX4hr1PgayR&2bgQllWd95MnS*6VZ!T%|>`Y!&5`q?L`L%|C=WhRUvT25HvlbT{l84Y5W8-~^2&M9j^`OaOe`YT!$y8K|c8V;K;j zNzzzt0M>~x@vZ_JWiA%=5Si*Uis>baDC1%ZDTedYvFbfVGBUO&`h{3>5 z-j3J6g>Sb_Cg-P3Pjd$sE#{NAFx<`M8t7fu0Rd7J(j+~R$_6^TBhV1;gR|NLc*B!j zry|?#mw-q;C3t*!-4)WGH~T}*odK#*pQAS^?*?#s3+N_%`(!3s!T`_kFbn5<&k2>Kv5Mzn zxD{$R2(^(euoqp46K9j12ovr-l3t7yL@Rr6mWtH2_F;v!UINf{Ag2=dC_4L7)W~Uv zNA99-rV>dKKv{l$D!1X20)=;PE=Kd2ODGUo5!px%K-J5@~%J{@#rAD_P3W-CL{ZxEQ&gHhcDGD_xY0)l7Uj7wc#2D7@2}rS(I{ z`AxGtX7E>bx9;be#MK2=0u;f!$m4kP1eWMnM+=&9sBPZ*_d>o7kVGzCN<Ku_CyM(%R0D7sZRzP`Qi%*q4!ab~;1 z0#vhiq)#tebl=|HZSa7Jbq}A{u-Ixm7EePGy-^t(*8ei}E zkWXnXx{op!C)R~IV#c$?&{<@BPx?n*+zVib=XOU+<9T%-HdnnT^W5g$>D95_;C<;+x8GCvaEFU_(wQx zL%7mG8DC)n8Tc3H?3&V^MpTJQees{9ZXKg9p91`x?RgRC6donHn-;})bvS_w^183# z-58YZkeRAwO0!C@8bVBz>gC9b8J5weZDo)vlyD&EsW^%he zBv^XhXy;4my*>R!)@5F%JMa@_6<76^@{Eakk1cS+7R;Ll>9j8|CYqgu;0poaW%fJj zJeR7r z_2obnYTMZT?Pa6*qHUDi0psxAqZYj;U$%5Rx;=r&AnT_q8vfd${MH0d%>JX>k4C~3 z3Thz5AE`lRz=N^(GQ?O1Xz*l%Wp`@7zJC^mi?~SmgxRXLjT**4lj7z%S@L;!4~(`x z?U=CRj&0h-0F_pXgLNXiHnZ=qCA+uZU%JT7vlpW3LU(|EGT|q^u2t7g7pol8_aHeCCq*BPUriynAf;K6_iX`C60~13D0Qy)LQDz zI;ZmOW}QO&a#R0^;$jo>mI7tp&7p$G3X8vvm~_AReX>9N)M;WobK)_FhwPz5)&%T+ zW=BV(agObNG%-u62NpEQ3si&djxAdDams6IrVYszXRyZe?!dFy$|Eq*rS>9p6T#x{ z69OB=hoQoH4MpHIQycCI16J$zL&w${Q-PLWApvb{;Cyi-3iS;%izaREsu0Nz{#281$9R|)13GFu zC%HkuksjAA0oY%>3U-4@{b(6_nTK5qBqtImsy!w(td+D=fv1eeqhXFdK=J;F8xH@j zkZB++9~MX4FbWB-oPneHvlaPS?D}i)Il~qzw@3XuWLCSyt}PSiAOw^Yf20WpoLz05 zEkrX8Oxe`pNfcr4?xn^aMUGA`2v{m$mqbSWQ_@z{l41eP5Bs#5PM2fE9|At zkJ1M6kHgQE{#~>Z;VQG5G&L6>&nh}#%leyOy6l?yC(apT~vqS412{ zLfo8TqHcN(TjT@GOzb{(EHg^2oFZLEw3scnLn8e9eMNoAIO6bK)<=nM!AKQ&cxTCU z$1)@+a=d$2-KDy;XPL#4sZjT=W~89iQqBg)WsJFEJ&e+pMh`x6R|VV>Mp7NxP{b(m zOnOKxcaDxV?~r26>T&a!5I<77*@HW-2c7qr$?+0%6jaA1#55ArbHDjwCUUa3)vbM( z8Lh6q&lU=Mf;&Edk^h#zvR+WAU6*CsBA?nrF{;FUDO$IP4Jf*5tm zswZrRx7U{Y#;`Tkg?c`N>Ca9;XTaV-l2AGe>?BifIuFT}lFji3#!4HTSkZ^xm(%4D zMZZrjMJmx6l z7`?Y^xIo-Dk4qdMN3ECw-W`d!jQH`+8nH)d+_R}#?Ur<{zm|i3a%i@@OJ`gI$(^*X z*>}?y$S%f0C@B3b?ZXU}JS>M9E zfHFTipaopuZ#t;;bheuY{ruXTpp*W; zdS*ztc+o;jAf>v1tS*)W+`-U@t~5DDUJ)aKA#v$+53+Rhykg4#oajaU?>`FuPks5| zM7WsI?*y`1o&qYoCrVEJ;F=O5SyzUEl$`k1g!uO#;*vlcSYUALCb`W^Lvu{dszZk> z*h8~r&3j8qB$JimA1lzm+<@H2F*wR#Vsd~g>K!}1RP_I{jI=@Hl5UjM^dVVLA_$#R%pEsZr9FGIK-@{ zZxiLee`eSVa;U4fJR;Kb*Vn4=kE_U33I5?&V6V9NU@!2WKX8HL2sp!UA=?Fz(u#n) z#K0c&tOf>8iabcn`U|!LfiIyTUp%McERKKq_x|mc(xC!GN_C$~4X9}a_{yp7MNeD* z!w>Mkr5L89fQOT`tbGBdv84BmXKxx<;&zUaexCV117-gg!_zltMg4`SZoW?WzYCiF zzw9d`t$MH!^nZ8^An~KB`@qncuG0HoSK&iyK#QQ5WRbWHbfNL>JWhvT2)NnMtiDBF z_ute+|C?vz4tXxI5mAm=+f+ONS2M=FCKU-duGLeS|Nrpi%n$%Q={2I&3Ybcm&Xq?@ zqR=NPA30iJ5z!-7&i)}Q_IXVezxpdl_ms^TtB2Yz-|q{h0r0uY9<8CBEHA~ z^*UXMEe#wG>RwHKhsdf;&foLEDYIV&Ah9`FvUF3<~WgRtD%`j{Sv90ZkkMqp!ScAK!h(U;mimo9{CNICdlc zpr#08L^+;MrO9&BwWs8Wr~3tdqA(PNra?v^EN}RKU_~yXEW0+&y1y+&U{(Z`GPu?)? z%+`r~^gE9KO34LO)Ah-@#=CUD+Ei~~Y-Z|Yfb||-*69oOe9K@Pu^@}(|V|xxIZ?S(|a^*miL*xM} zZ7TN@#Q7wMXxRoZvv8rm&{DEtqYxMT9#eod6bS@jE$2p~w=uLOf3kZ3j;+n&uWOfm zh-3kRX?hkO)1~F#Kq&%!czFv5<)g{~M)lsOkm43hlSKgquIdzkM210Inr=%nY2nF? zO}ZFB-Ih6FFZTkY8pRelWUy1eybFF|tpsp8?|A)U>=H57rAAw?fLdb(*xcd4e;^lK z4)9M+j5I)OZs1&`UI+kDY+4Y?cKzZCK^=B+oEA(mtbOcowep_YZ~fe#@9v{$uOSob zSoT>R+&wKdlL)CEC?o|kMx0A=w)xpc7s;lpqAuwjKzdenzLq1Hp@uJZsWadVLFp?D zlAeN)7}Ch8Zej=mvH~57)OoBQV5w~HjX_P@ci9HKqv=~Rqv>KNxfVdrd(?KO`Nn_< z-}K+W)$;1V5~i+pPeoMkZ|iK@R8R-8WdDUcR%8`dSnvd(wgG%yC65}{G*PSA+<(B& z<=6>h{sn!G2kcBThaFN(<@eNY7x6%i`gy$=AcHUxk`HTlYq{?o`q9tMumLUX9gU%o@Raq@ zA-~I`Y>EO}%_v`lrf)e!&(}A-Jfc=EPxPV8F9Cie=kPkGQP*D(~hH$6OX4!+}qyCn=7n#_wE4pG@gpMM@C z3gJmufT1`n8-mQnge>lJV`lRuotd!C`MO{F0^(*qwwWd!NQ5h$?%Mm>CkKT?ZVQyI z4ZP-e${&>(r5X$;Vt6W)IB^cR$L}@zJj?&RI@b{brJ=s2;pzko7vXDBmXphF&bNbq z{Za-+Uh6bB8R&ZN`6V!wmm8N*0D<>QC3c3^pK87x;219N30}(1wZ35acwVRy7vG)~U3!zVQYG7^n581H?W3I4NKQ3HwDn*8qsU&F^IDGd|fRMq=Y4j4!Q!Tsz$*%lV{R$-dG?Zt!UMn z)x|;Bwyq}HpqcbwN@i579MCCS`;s=@}|Kraq<>Z)*5g**zt>xXs4kxk;7lKc7EeI0T7iIM!ys!Gtm;`9WF#}!bj>=5%XJmEU zzG^<__!ck>TPV#~(`+VxPZy&a6&{4!0_9Bui_3bBhqlzZ+}RH{I)e;1Qrf-1JfR+5 zU*T4$Jd#S+mHYLE5Vuhs$F}o#Q5c!0Q+D_A>z70*o>Y~%%dxw3PS*WfMEGZz2tjRB zXIoEBL`>S9Es3)~VBYUU`S{sV#Z|v_Amr2pY61RK&EX9BpQzF>^7qlL*+(WM!1-6` zuky$OcFA%Pfz)n3`zd5s^%jQi20Y<+pjQoI6grk_jLT-qDHerFqf=f&J-fPsa$lyk zIS{8ThDi6OuJoF_Gx^MBQRvBMW+|WQ`Y((_U7_x`9*ReEgvtsilD~UUvP#RK{?gm# zvDHVdcwRFL8z3U6cYqbeLZv4#vdutAA&~OS+vSsN0d7oPYZK}dt%KKAG`h%&Gk7u$ z4zvRSLw?&~hkevL^)BzF*0(JC&taxBeuC=|JMyoWwZBI)-8FL<5KYrCdg!;0{>1Vf z;cOd@b^cMvvtTkAj}Aw`vw-6c9ILg9wv```vMd;p4kkEOOiiFxo%5WDabI!JflzD}6cx^^BX>jz_zhTWNS13R22(S#D`@{X^gzp^6z{$`R<#BM( zSeP+Fa-C*dl`I8c;+FVB9tbMtl=4EX1>^e6_m5OaSI0lKnby4Rc}hM zqIj$mbzqNmg!zg(N5tNdnW7-Z}f8pmyKQUOmS-fFvCT?Q-WREb-7WRkcvVK*r}$=>n#{8vj4gGf?-ei&{@svDEFot zqk<{uzEGBMqEBM9Cu8T9euNcbzD&3w(PaeSR^Wa!pVT&fDSYsc7CGP$ub~6^&n_S&^2vO9P*%_RjRO@FIWz)`Jj&hC&za!l4lJQY}ayhZhGVX;ywNV zC+s2#1D?XJ^Sk52Cjf1DB6Yk(-TtM0$9F6^6jPT)>yq1`t(>-VP{M~>N;{rsXJFU~ zhvIwW;Y(S?w(n{FdkY`SXKB>=O9>UihxMeMM(9ZDE3r$I$c;EYBxRx0G{U-GYHT}ci8spSDh~U0RrO2bgph>r?u(Q`~&dbsodgQ;N zf}yfiKj<({P#j$0^Z9tKZcH>mmHiQBA7RV=#n%_&y<;gw^k`+9&;D%4Z=&mxOLt_| zhx_+0U?rK;qQyvxTN1=uK9s92#6u*sBg%AW3tCI>3NFGJOF=NFH<4F2{OAsgKF*!T zTSHw!>-72Zf55~q8_Hmgcj%EW!ibcmR;LiJQ6kc6qu1Z4l=R|$9~{<{@8CdQO0Uqq z#_+~e%>hcQa1uZ^L9G6ship3ZX!lut~NBHqpZJA%g?lTUC zRwqccvEg=<1;Afb94&=s{j!m+(?h+n5!%e=U(&gxJczgOx^a(AeoGzMY=6Q*OMm-| z?2W1Fo6R#?2joO~MBA8R=YEsAt-j1e5#&LQq3waBO7_HsGJXo<7`nQ)NOPpmwhMsgP=Ob+ zUO&cCpr-llZzk>xbV9_Hz$v+N40)o#j$1$Hzw6`+GQ&{D3ZzJN^T;n1F!FXz zwN|&_7np})L<`bkq6Xggr2S`xMJomL`R?LyQ7+&kjI>@FcgBM z7T(Z73O`mG4dYM|N^}p+NlZzXH4gQcpQam#1ERfCjBIdfeH)QzRrqW*@|r%DQ!$ET zkjAQIa)+~)lgP9R?~mKqG4A`&Qugr&Y5KWso8!e?X!slDdO4l;gI8S*)H?%LG-Dj` zK{yP^R|!=~SVoDbX+oK`z*yy`8PqG3TjD>Vy;7&$9KKL4{P^;7Kmzr&R9LJVJ_*|^ zYeb#45JeT2lIlAcD-F+U>O;~)y<~&bUmE)h2N%8DCSDKF200HRTIpzb&HFeQ zXK4>gf}%#()<&sTJ7h`2rdMr1FmA4M+*#zv_xkWAL*ZHct#Y0hEO(nJ-%+urf|~KskdFEQDo?RJMCXOE z)|d{4Vt;sG4d|$7t$v6gi1fJg>O?t%5(;d4kS#hfdgtdoiZN7bUV_~b4ZRS9`8 z58Bp8mvKUUO}J>u2fLqC+SSZje>x34xuhN&@iMC)EF!G?ctVMAoVaL&8bUOljCNk( zB8BKba^3CDi`Y6M%m4AxST&LWV?QM@7LS=n8x%)&w)KB+xxlNNN`THp$%@t z3|m=6;68`o!##Gi7*UsCRr7-KW1JBt5TW&6((gZ|?dHij~& zXbmXQ%4+6_Gym+(mgA|mdYr^C0CDj<3y*_=osyR~DegT@3nP-$t^RIKUy@xp{RMn& zb3Z~wSImjg4YE!*F~yzTRM#?b5M;2YoamGV+2X2eZCs)9Fq|;yK8MBronw$r45Jxa z>X%j)&jUd&U5po;!#>YSBq~s|Z@JM83?l2SeVO}Ux8t+te65LsD%h=iptxnkRGGTD z>&Q3Boh$=xdYXjCf~tn%=dQ*ic|wEF@zC%)EmXDoiETn|jv6-YPfQ%-T*Wi1^iilL zRuB8cLIDH-r+kyl1_%|qc_z)rv;0%V8Lb6wM7mJnsVg{k`b+p%PbFTdh-NM5PqVoZ34^FpneOqeH5bu03H zg3J$Idu9EDa>*bHK93)bfFW{J$N%t&JMz;L!*#Vz;zZ(jx12%!Ax`sx7VQ2;uG9D5 zdK^;E>^|yww>j_>KwWn6QZ%P1aKtN0+I)SOz`-MA0L{ zJHG=wmY$C(zWx5t3YjiMZw^aIS|_U-h&4AvP-5J=okF<^AoDvq!zfvn9J}YBZ_6B34;p6C@z@SS|nb)qZa? zH9KajzK*9A-{^x@?nkZ24J*>B6K8kpPV2nZr+SR14bGSEVO5r~bxmvQ0iDx_rWkIs z?C%4v?bDQZqr0@1gDK4JfE&Zl%VDu?4Sy57h=k`IsvJn9?HclN5RcD`89XH|(Yx_Fw_vsy8NjTqi&-^XKTbn_9WQXuL^n7vpT(X5SG*K? zI4(`JIKAko?D;m?<#Q}%?` zezY~P#y;qeD`J_w@U~Q#v7&!jDV|&nxH)_ z3UQw~o8+oEGL^&g4z`U z%PteAW!k171;U?V!Yq8da=a>r|yhD{DU1s_ykCaKu&Um6eMd&rQ1*>w#Os zrOwDD6$pA;9orYDwE7w;BV$NY97O*?bKJaB!d97XZ)G+k zdY>=D<$3E~+u0^>Sz4xOP^&82&yrLp(Bv>>pDkRw|5!9yY`x~--YMxP_1G9{8(bHa zt+yNhzOukQfjKr92a)?t1Udze$j}BI+G<~FGrD1q%v-L#^-9Ko``~B#%;VZGA_XaU|#1ElX#4_#jWdnwS z(QXo0-^^J_(90Df-?T=31G+h^h>9BOoy`ceS1RoxFy&0#>(x#)yRcTrseR*;fJ+~+6t7K>UL(&- zrG%M;BTl*>L{1FRX-N!i#ruLUow@fP1QDR;|>QOQtR_7_J*a&cp>M0nN8E!C$FgMCrSw?Ou=-A?*P&EZ4>I1Mf3`*2Y5=^t=dG zDaB7I#gPkvU<3vvgAJe{pz2u#;p0MF5}`<*g06hJfrV~ol$8O8;JDXrlSF=#O}P@k zGT&%aa9uo@dYd}>sPdRQeOL;&1xyKl%eb(jhH%Qu6D%gyl znvbS~^}xIEuGpSTf(TH6Bp7H8MIa@&rhjFiXdMRnhFUZvd>Orfg6LXotDg}+? zOPx5J`p++6p`{NL2zact!kFP2?d~3I1x>oeHVkkF(6f7-Hy*P$C~fnx#q)Rb|JpVC z>*D`VNgf0F^h4d?BhW$9(0B-s0EKDrpyZEGM-^%&=VSK-yr@EM^tAipeXOoa-H#p0 z>l`tUz_{!XicW2yiVPM*E8Jx_Cpo&|MG+hLiOI+pV>UN|LY~rDwQ7Y%vBhe!JQ%c_JyI?<{CrNYVgBgu&L$gglb*{Sf z1-T=A1Tz?4NU@zFgC8(vK6QaTkM_bG^gx|ToUoj~4`u#6;jLJ3`F`TVssHXc?&O0d6+;+OZh4ePCr}`>BuxLX+Dy?5~9P$`D zwTQ&YzbU~w=%1vOM*8J`(Aii1x+*AE%LF7hka5frVZb*sFxh&fm$;R%SjdW%QeH4m z*@oGdNd~R`$wn^5@R&FLQY}hlR{_^1#TN>p=8N=rnEJKxU?&UNfbgDX9P{MtjC~2A zbJp>Abw(wzQ-#k?MpGFoRSq)12y~~IC~`?9DqCetOSbE*rX3xBTH}_4Tcq6pD>0lg{gvG+bI_XJ0az6vZp^?Ef?Y z7$KkUHK=%Zn{d+o(=Msf{~+?mCfg+O5FkRKc!{{@0~@`IQH&5cG%#)+-7t}7l@`N5 zWd4`sRZ9sb0md;t+w;op(Q!{=zLJ5i(sv{5T*i3aZHd{?fbfMji@DHa-BK&fl@?ZdwXqW)`Uw!s znk@lRA2?6H<>zNHn`e2wZ8bYZrJFie}1vd5)Ys) zX9G!a#qLz!^~_$$_omag^4P{zv-aWd8Nie(|5KAxtXNl~Su_vlgAwSHH6R^exX@%} zF3qSr)xdnE%)0QF{M_d~BMlY9*_=1XbZR1lGmo@W>tNPs zg5Lo+-M@Jimx9fnAWznCxcw#>DuvDlK|Z0~xdc}A0i^0+H#%ZK&TL=1ZZ6Lcqr5rH z6(V2WNUk4^ou~jbh1Y~}YWX+jcvjOz(J4O=19My%Ax`$-GfiX8xGB`-hwW#4S*`dk ze}Dnl_|M|4ArcyvQHeTQIi^lcMb#34b&@Ka8g<$Nv9L>WmV!ZlUj1^H)IR`RT4ro} zoYyv`o_!6%6HfV2z(q2_|JO~PzoO+8DL;l8Tw_KOT7FRgMoy=?mr;3?IW!pO8~F+L z3w4CjJ{8*wQ6$*D5IsrbLAiKh2rbw=Hjj71Dj>7ug!0B7B|SG<$qwD`Yzps0{CLz) zyfsoxyN)WF0A|b8x%W#|R?e$!r$7RmZYCoGD1->5s%ShmVbT!36HB5osyQ{8( zf!tM;eb5RuhJ^QCdw`kT9nM_O2k9P(N{6=;VGme|o=E)Yfe7v%APiV*e7TgJ;azQZl%CWuIE%R5_B33G}Qo2=62BS&P3 zPHI2YKv=Puf5|h7hNobX(u}b8aPY8%%6Yt(?nf;L7xIVxAuwVXr1uywEPjoOnAI(Th>M?iB{_c>9RydEwt?A9lntaf{n&@lfc3T?m4#lqC9%g& zF;x2g;W?0smV?c);Dd9%*?@va;`)@O@awv}T%|X=xk9U@jAF;lmA&5uMc^{mLlyv2 zDzE}$T0)*J*cDOn?QyE)G?n&cqk9L-dt8h2pwcDd_yW35s!Z^6&D8yYoX`;6*&H!Y zM@}cCAl>YX>QQS1GJDCwxN{@^E3waaAfzvd5=C97+-qOXOnA&yZL8N*i#ck&~26qRS{w zFXN_4q!BN&DufRm+kRe|Ff1C!s~%LLB)70EBSdmKfx0jI(v04nAD9f~0xzCv;Hiob zi6xJGgGsRdmeqdZ>eW+ju1I1Ix*65hl6H^~OJ7o>rZ~;`DJf>Q^q=h3fb-d#4`yA# z6{thdBQUVmPxZx{om+{{@PzyAosEel)8w?rLiE?Ar}8NCSmCMf)9eB{{J$wu^u>SJ z<|tMuMzPq31}-HqcAdU5hF!vv$Ogm`9{jj2njuGvX>l_^f^aU=LwxKbC>vRSgvEt^ zb0{^T12sTW_DIKNmNJ62NHh}8H7ZWv))VTyIps73CVF3!)IPXff1)y*-d9(p97jXk zq~5C~+|it=vMx<#$7*@`hN7!_cs{}^)0db{(~B0ZRO z7mK2G3D7B>`ssg6>Wu5-97ZI^Ubx;>=xqN<#By_)ApohS^fA~gSho9l%*$GwFR#R? zDKPS`A-mO9$28L&=Nt}O-Cke<9g*x+Ttzc1k;H(HGkV71~0P5rwc7{DVflok2W0nm48$ z1DxrC5pPV?&58xSM9eT1-tNm$RqZHRBdK~qcSal#dzvBRhI&=s^(=1UUh+>+0`ES; zChY+r8FPK>%xe}^)ctQy-o!bYbubT+$d=(MMPa4NoUuAEIeY<=1M6PerHP+qu_F9! zt0Yw!4%1db#3F4~+FwU$Mz^z>>&e{Hp5J!TpPWK~PVzS_LR#x-!~ci9w~DK(ZQFjO zCq3zoNq2WMY3URY1WA#WP$Z-#-QA6(3J6jPNH>Upga}9pf+z?I3ao4RJoo#4>wR2n z?W~P&_84 z1kWp+`{sJpH%_uIL@U+W)wf^pZP`A;&y5kDTBV5&!kFH+7?eY!A+~42K`=NPe;A^E zv>$JmZ_MI+cn)M13yP4H-pUxVV#f})@xj7!SPgU!Zz*>SN)g)?t61(EOEW38B%EHy z9~!|T$fjcBhZPl!e0A?HnmO>Xh{)YRnq`B$@=dEadCox#Y-j5r{LY782}f^boT{~p zpA}l&2T!pug0cO<;BVaz0f+|sA5@i`|IyTeqemV3c|VY8W3B!s)Ao()p+1YP`ya7_ z8lNw3)3EXmB$x5Tl68#>RXdj&_73ryW)LCgHxO7$d0Fj;^CzelWg=FMp+`QBoU1ZSxHK{66~1npuFs!hHaD&2gh7oxdT zL}VIwj~>Opd76UGY*Dd(O_``F51%HM6|>1LZ+&f>rph5JD9LxmqhY9@dI%n{oTul~$NsO#!oQglIaK{dlh6^6v* z``}U)Y@8r$LuLF!L6scF{oVc4+yzfBBm}HyO)_zoQ;_9>N8^gV%4NmIZ6`or^Jx*} zy}Th^w9kK*mz^oGDcJP}p;$@7=GRsCvq)d`R0lqc@ZunxVGCp&zT+|&5(|%p&p>Nb zEe|Mzil1oQ>E7PK?yODMRYIyQepW`nJ^N9wiALs2EMKwqo z?8+7iU1C8&_?-o(P|DKVQaaidG=;7YCQcGczMoEOY)d8Lj?S;4-&?1~<=%DhD+kA_ zkLo-`=pI3&A#ZL>kJbj#H0d#-#RuJ?@)$%Wy$&nhd9R$vMvjMgG7j?8^kW>CGG_Bw zY~N6|t91cQ_04edjjTRr7^=D&{sDI=lgUiTM0N(DvjDm~_380D-cd@HJ-f+EbZ25( zJ@>X)#tD)<2kG>5_aewXg5hG*b%V$iC7L?ZL3$X1B*;5Riqi;u;Jv7iR77iPlotIT zvW6^_J4tDYTPT-e49cVw<04(l_VeAEVhi5};Os;`Hv_&A$){Uc3Zt;dg79mf>Vd3j zEaJReNGV3^C^{$XA$c6oLr{ znqA~w(<7Em(FfD529IB#O(~RSn)wI&Io63r57slS_Q98!?>9&)t;8t2ei&}V8~4No z2oIJe=NOI~y|6SUiSKMQpK<5jsQ1Cm7Vr_u=3RK_lNx)dGe{XozCFfLA(TxSC~>Ng zk@^aUir~FMDK|Q0!1F2On^+m4N$Sr*#9xDZe^8Fz+O%=F8n%)Gf@keD)U^>yVvD#l zbRC1)F&4{oK_4n=140F8U@|i|?AcqGBAL z1_2pTQxT*!BfLM-5q@rZWTa8=UFrL`HYwd7`CBwJ+&OqxPTnB%lH1bgH#ju4RM?HG z{#!Hm&nPI2G5MMUX;sf+oL7rHqk(CIH)a$8ja}w7gk;$z2N}9N1sc^ovL;Eq`oBq^ zJ~2WwNyhi~TRiAyd~BWEg+&#ibGmSUlNT(uekMLO4ga$!dH_nI$}iI{u#ymz9Z#GO z4ufxsDMuP^SW(oqxYvEr#I1WbWWTi8k5Rw^X^U!;|D&oeAp&ZvIpt@+Rw>Zxel3@n z;X)0c8%bYrB7@R0RYI3vyzkImYPj7uo+E5O%Ko?t_0Oe3L)1U_Yb6pil2|@Qbn|Im`G37`1?ajJ_U$+M07ymNDNIPx z&_VK>(vctCEI!ms;(uPX7~r+c6MO6W>5#S{uU0GqhgiZ`M;Ju|5=75{86VxK)(BqM zJnL8Bp1-Oj(yyLCeOm$8)XY;MrSbmjbN|ueMk-sP^3LRq;w%-tvNmoUv;)-+%qh|GtYU zQQ%_s=>GCA|GvLSW`;jY@cy4A$ca@?Iz=KuK} z@IT-A|6cdw89%N$K7VtHG!P$iD*J<&o^3GNJMikiY4aP3iU#q24rvL|gmg}TaeI4? z&aLs!Gx-0qdj661{#g&qJm9j`P|vqwV?*ce4R1ItfV_;ukB`k2#Yr0W>_1h38q-QH zGY>wjvIYjs;@bQz8D~%lgH6on21W0@yz!^=oGy&M`s>4waVWz3anZxO$Ka{U2YK_| zq_oh32qk1s@YL1Yfea1-QQ)iLUwPcQdNKJDh?g^G+)uRS9f=a>p04Sy+UlkbDBA*g zurL&ORnWi0mAMKsiJZU*rj^~&xzNwjtf?r@dF+~-vii!Lq@_WN$B11ldzKJ1A)g2Y zjRkRikl4_gp_2QTC;MO59QkL^1q@=rpvyH7t6qgjx?c_?$D<5BfFT>Z#g^bB7ci77e)>puuey93Naaa%z7${muJUs;k{JDT^Xl?qLK%m_q=Nc1*MRoR z7WmN>8RKlw6%Yl?P%aeMvAuGCRh(GvYbfNZcLp-j@pt+n6wgNV$DujTDu@^5{`B1| zAJH((5}yMx>qgc9+1>^UHT*0u@F~Qr3jOmgo|y7HgowZ0ch8C^(!a^JOHXuz-%c0P zY}){uy35`Ak}JNH$_F<|^GB5CwrBvk6BGsY>2ga% z6PP*HnW4Uda4=DbD_pVL?z-w@x}2^D;xH$OS_D6r%s&Kin7}Yt9CW>YG>E&FwJ__8M55>2-(CIcz7mCks|p`M z$&EwR^^EBI3_ZudO;QY`jp)4UU;27rmhJ|z3Y}A73BB~Jt~QvKE0Rl8u~O`0XuL#8 z*VX>MJKn(t8)@F_7So!z&^ew8y3wi?iiVE#&=c?-<-hvzK{h6c7iP}&X&=1Atou<8 z$_jvl@BzuS`2gH)_c{cdr;y3R1~zmsxEF(Bq5XPVkdBpwxaKL6RMx(R@oOc@5thiO z+>2I;3L&5?NjF@M;0404HcVxIpr+8~-vLc>x1DaNoBgIk$wUTFrQ`HI<0RwJXH+xV zF$CC)d!Ttc$-fG8r0%gVp-{>%&rO*^F>!8*PDWR;)#!LN{DSE3|sfxXNaan9L8OXzSEFyBI zJOLprKzcvYVVNTq+{{a`Jo2GLwjdC>v@O|vrn|gW60Q@cRQF3=-xGtR;o(F4x{$x_ zGBW=VGlS!)}t4N=MWUJ-=ak$LEQlzQvv(L+p^U!!}k3xRjo z&rtV`kLC3$HoxB%UpfHzc3@C@X%dr9Q}+3|NW7^V6o*ASRJJ102A+}$;4FGK9%V%C zLx0!I93UopY!EXL%s5a7PJg4My11`V58q4k~g00tdv?a&<=o? z&u{A$->t0~hj`(!@JdvI5Ab5z1s}ARluYq#lMI6!!wzdyqB`0(#h$sabd+@2Dd#q} z4{ty|NEBD41%6*2L_(c)qsut zZa?eJyL9q~wCR$cP;AK3qbMOiuuz=KcE}oFC(-G@!NBN6(&q}GZ>2!cMdG23<{(qo zM|d@iZeX3xzm9W6*=Roo$FEJaip>uA&$(wIj^MeMeGYuf^pIR`=#Tw5Y{d;%^{)G* z>q<0Yra@6dS@c`7HAma3n)=YZ7GcGBh}?_l*<1$Dw>yO3X_;65PH`erH)q#uD-Fnc znOg;=s{NAPGlB;PM^uZyv+|+Q)J51QF1kK@Mc_*856*Tu5GwT0^!)^E zXybS1+y`%`mfMVug{U3?A>LK-M;nY|g8?B)A7 z?);QvldhtnNdg>S^C4Aump=#>@=c8zdz^kEhafGy%ffRLfu#P-kYlHtwq!T2?V_6y z8UvSqrU8Z}-MVT$aq%_Vg>4Tca`Ry3-ft+-cm;~C>;8Rzi~&v$=HB1j{J?r^q5U>| z2G#!t#i4$)h8h-InY&fRAE4=LK35RJ6V%|A;DZtn5%OvCM;UlR>~ydP*z%k2iUJL} z86)!i6%76RD@b;uWa4}KDI~jn{%w#hpEX%-Cd#Fcxw-_d$~6J3t|~NVP{pyjJ$ZnL zbHCH6MrA!46#mmNv9}wa2dxPn!A!mnXee(`J)%hOCb(8?w<2vYVOan4v2oE)eJ3(&gCOgH} z4-qg{`2ihGw($|4K%qjE74~8Y3Ip|otak#y9$ua?$BzDOw1$K9;a9MCJy$#cZ;BWE z28{ht#7rI|q2S!oV#+@5`q=@2c;C_J4GjD&2l^KLfe}D1PzNtN81~_zq<`<~Kf2rZ z!49nPMCpwLQ9G(~vxf;9UMvM4AsWxT{5b(V6?oqsg8=x2lsJTnd!n}l$kK)0w7I*F z^CwC3cC{lfpcr-0W3PUU!A+a1^BZ(|X~Lb5Eczp3#hqSH(vY;K^cS9&Z9lFGfA78x zh%#C<(&o?nVgBwgfmg8^vF8dQgFy#qtd;C!kNLC_U7J3y))MYKL{N=CB;1E z{)LI`G#c7OC6=9K1tf*^T6Hbh#V<;y8ob)?6zKkauan3fG)yFSammefHm+2GYTpELob4)Qo8(TH+L7IvJ}EK3e6s^^<%^&Lw}0>eD%F?AEfNEK^(Pa6p0rm{c&i6ekB&w-58kJ@ zJmWM(YIy=D-fgPxpD4m76Ec^;3}QjNFd*Rs?t1;=-9#U-Z^{YNfl%e;qfiPTUPSz2 zgcXSb`6euGo-Xh`NOuFw1zMRJ4zdnO69KUJ@@Uj7mvD%OC=jMZPu>j#M^PaRZ-M6A%-YZNIlz}JhII1QmHKEhocx9{ zy81$Zy8@*wRk&C#(`{43>(@mKnjpq$K;A{_$}8nqr<1gyAdS{>ipA{gSRBs?II0AX ze{qcEhMNe*Xi3>3Hp_^xqHGgL{K@2m&v7m)5*i2F8cFaZZ*n|ocIN&J3}_FgT=2}L zHV}7j>!OhLH>u7sHVI+G)kT%k{lQgcw6VD@@Ng!FF|ml|2f(Z_|J%k84wE+~-*9z> z8ue)L#lCaR6jI{b6C%TC-#wr?v|~GY2_9Xe#u5*y5^n`jbp&Pq3mKnkUhRbTmmaV7 znq2{usLc3frSm?IH>aSOd!YoNEbVj$QVZ4ZmLV? zl=sXMe*(YR>S=IF?QSGa*vj$didy>%dU#*PB`mCeb@iSh`VptL%hz+EiI2T8daQpoH4{>eetWVpDxK1qKMDg6r$9eajqo!7>82(~ zcZjbOKoa3mf@a|Z%+e}cJN&!!An>7Sg0n&$*)9JuhLtZM<`V7F;;v>ph1(~zM-wXE zJi3IFhbk#k=3~Jaf%Lh}7#lDRS~i{~GBx~y1zN$)- zs#O^Ov)lU;Pb zZG)qD@$4Jifk%br2TO$rm_3iJaPgW|RKvsrmD~!DbLyW|2wo9d40=lAmX>!im}31_c7q=6?dn?DeE$^=kucSZ#HZ z9U?7!nX_bbm_E)D|KN4d94JZaJ~mGy@fUx@r{s@K%09hp1P{Q2BY`;Q?`plU^2>o% zMmEZAGA||f^b5pi7*99?C3;zSA%y+7+NlX!$XO)H;^x_)Lvl)0y?Kj*@VR<|L``~B zcXXuLCfSTOSjiS+9u%k~Ww!#WnJ>*i-DS1Ma+D;u-96rKG@!974h@Gp2yQdN z1iFN63W0veY!OyQnO#uOL>9OUnLdAEdT$OM7_2u5iWw+*!AQD6-pz+XL(KBu2-BNo z+&@-fy_u*%G~I9z*pW>>V`$+ZZ_J5qVdhAe`bZzKx)$bv@Nyz`KBrKsu2|s#AsT*i;!WPWfd9mto zH90|b%LJ1hxcvcg2GXLP%mcp6cShEQvM2@OR)a(+a6$zLkY=kSXmzHnu1CW-L)f?F zndz0qyav$(?Xib!jVXcsezZZaMLH#(3sCblZpN`-OGiie)&slX`^Y%|l&1z4ub~2= z5Tz9%6vs+}!?*W9s|CA2Cq=mdXrRs}DYmW74TlS8NxMr;e8+`{$X)V!r%Lj!k>L20 zF8}`8AhqBP59e&Nv)DS>xz!Dqn&ncg2o>83??p{MNNFah^-n{MEMWy2+5w|_OI-7Y^IUfLJ76XCf zMhs3fT^kgI^n!Se`6RJD!Wl-E<;dl}*5gKj7T?qsfHj2JOf#U_Wm*dpC;1{8skJDb zA(odjX7Bq^=3vPfX1)e{9o9ZWtc!Y{=ZBBV<;W0GIkAAHQtHxv$w%WHi#nKXqi;_;Jh)YK{O?-ymLAr% zuF7J<=nq8FmOI8X21u6oc=Jy&`5Kf~Y-?*CH(`pHn5W&fkxKD~cQ%MbnniBH-x~1U zlUzVN4yD4QlDZN)mpguXC^X)IDpKzW{}c$CWRlm-eA}iqK5dMA&HCN~>f%Wr+zOO= zT&#OxGc#qGOw@CFq}@y|W+_29R#e$FSHC5x5f-g!Vj6p?Bjn_b8Q*@4%c89Zf|jc? zstnz7)glcx+;&`dLeq`=kaL_a@D&40702F_D;Ae`0gw0Tuiw%g-}2jA`|#xLQ~B7? z0js191(y&m_6(1-iZW{VwJJkY=vMkK+c>ZU|$BCU%4szCz5N+S27WGF`GsQWXTgAAou@Cp)WM-4+qjV<5OXFp{T zVa(~TfThTMtdbPr-pH!A#5y^uf3vqS%e}67r|@~~Dz3&)ptW5*Tc}}c^RlQGEa?p; zIUkr98S!num?HE~@WaYfAtz^^7k;PmcpzXoqcO@Gzt}ISi7oM)_JTGHQ#VpM!BjA# zuAp4J0<#sA_&1|n^UBB&Q+M=3qI=X9UW=(1MhIz?HYC2>AZutsvQRz=WGG9rDFVg! z2Ol05&zIk#7D3I;!6QI~JQvf`9z<+Tnwf*mQ$$=id#KvA(EorNNTyG)PjsqmW6=3N z-%JOHAXaYNSzbVdL8ObSyGfvVd5%hMyxnA_$1^MmE{d`sIuVVW%~tRy6fwC*AL}g& z>z_OYn9jD`dsUm;T^Pj9DJ#rP71sXV!FXvrZ0iOwpEyQ$XA<5>+BIvfhy|f%J-c=Q z3#)%uPdLeJp}epBIzc{Pv*V+Qe(IgoLj)9gI(UIss?1;5)KpKZP|gEuhKM3c|{ zZW!Bl4RWmQa7PZ%;HSVBHOhK14Xf+t+{vuBICS z6y`|TD_=>&!w5?ALsdm>FwVr8b1(^tp@(Z2STnn!>%j}sxv&QeB1ghSfEjy}F;0w} z)D7H#-r}92z{w9^pMF&02b)@=MW^?ulPFrwi>QrV+-ArTPFI&M>VtG28dOZ%6qH7?m|W zrzkD5{s3o3=tPYZtK_Kn*fFA-Rk#FW)PR@Ib9V7)zGQPF#}Bd6#5Z1xoDpphII6+A zQal!y!wqL<1Ui4J(w`3le%a+mPh__%&t{3u3+iB2_54}gzE%CR^-hK}1{OKYyUr=2 z0Je0CJ&&aE-6kI!{Z0sb7b(&omxjbuX@#5@?jH?mcGc^Coz|y#&3M`iF@*; z9V{yuuCP*ARB3g;T4R%0tFBc@2or(;0Swv#N$=&QM7Y$hhXmLs-sm!%xAM{b^`w`+ zw@ASus8hPE_^PwJt6b@`$;6oLn8N+Fp0HC9H2c0QC%@IeCnkdY#{PeS5aH+(tYE<% zQ%mMXz|3{amcyGV!oARkT`>8oXa`CeTitOT4KhMA)gEiQ-Xg!|m0^ELxVCxRl}91D zE`4WAl-qU-QL#G4yha}!N$0!%&C9Y>y?HZDn^scOLdEZG4nKtlg{X6p zdB-G*WOz!+6+OBP=nIUL;=b!Rf}wyGkMV%$qslhS9QdooD?b^N^r#@S6wsFjPGev_ z?x93;&WMLd*$~cBq+XXoJL`NK?R;|$W$sx)L@c9F`~GSX_4u2Ll#FRT5Me%zH}?V& zJUNgC#3W1VAwpI8TEE3uPMo`d4skFBd$vOk=}|=F7Sbt9Q16Am_)dx{3j1S@kCbqT zg->pTLA_EtiwpcDM|RXaZ!eaWaSgNL*?bFlu^v4|My|<&nrRo4tzaHBkv4j7Cw;bC z`yePA-SNY2YD;*}xXL;Z5A8GXgZpHJr(-wzfL)H1(sJ3ZIjmS6tV!d(K;TQ*X#!W- z3MWA4#)%0;u>KSE%mB`9IV&ogVSM<) zTiBhDb6}UGL$yA5b^n8-H4B^h46}nb3C>5M>*>1Y30)-Rx_ggP)qCz?mREF?v&x+# z6b)VNrWjeK9d92#dL{@08>}l_ksp++@oBDmb9vk8k~J(GO5JmA;sbpj9k8psdaAMa z0vDGbaQM~;{km%M!8>H#laZwrQ=CJ5R0M5&IHm76(>TA?%HG<&nPLmR=L=+?bYk=N zvqJ^627|JzE5xZ>b^PrvQr%Q|A}?ye$x{7-H0Ov?Q1q zI=~9%XfJm`#Pp4r8mRd+$a3ZZ+KZ>^&ci^9T=TTyCSvz&TJ~S#qVkVEpR~Dz=$YQj zaqgFhW@y67HLAslYVr+qzj;=ZZKIKD4+qWY%oEyc!njD*4WNlDqQA=1(StLaowy(9 zA&G$1)vdewyW}9+5-mntD$)Cvj5zLPqE{SsZCK=0yo*$u;X-c@K^0LF0lh32RhdX= zXI@9uLPK`XuQQDA!Tp9?@kn|z-#x<*E)KwSEFjaDd!qno$fw3T z&G*M9OG9LYcaEt2>fSyDL!dihv2X8yK7S3zjaCj}O^J-xD6P%IY8a^jB8Ur{eWGio3DEH9e4#yy$&pG7s>I za8GknJgrR-pG0yotr|`;Z@r~D7ML_)c;@j;E5z!~8ePViOtnEGpl~T8UbS{&uGttJ zeO`Zd7$oYGTTw53-}@}W)9gy5sGCV$I#pWtuRThpKRwF)KRrrL^sILw79eV2yM00d z*pVLRul^p4f~njsx;Y^g8vJ>+yIc8)sje(^YgYb&;@G!!*-OJ3W?${1*wD=Aln}wV zYtgU1o6>(Tjj)DUa>2Z-6YK?FoNZo%ain-5w||`Rm6;t`?`b?B$#4hedosU7uOsQ3 zb}TH8lnBtXn8M){Nn+!&2+Z4zUBACfy;H!g8tzmpvH&xF!rL%mn-Ri$bglb_zORFZ zoK2%U6?asaX+hU2m4)&l_6f^84xc{vIOo;9=d03bc#gBZ(Lqf)Oi5%oh@>_LDVFX# zkvCLZ6267ysit~~yO@3khGI5qXbCVH4V(U095eX1B~4b-K7HQY#oqXqaED(NX#?c_ zSobxx^5sX_vh-12+Z_`+itvUI{d?<$S~YiJy@2tsaF!obBc(Fqvyhn;LonLw0&IS= z&o4#ogyckHTPj1~tpL6hdygDg|CGZwfB{$z;n>8Z#(HmqD#m}+l=-KH65{b5POb=&IcZ&wBH8aTkv z;6{Mj^X_b#XI7VMq_Eq=xXLt3ygnqcC&aF4Kn4w=Y8MfAMFYjp@mBf45x1K?qhop( z6*{f*m!b4@IULeCAheH!W_k`zEtYJ6BpXDbhple9iK10XDfQRH#XFs zc?tvwt7vxL$3wrISZ|&VpB=bgVS-RCbLhz#isRu|-d|f|8e>tBuD6Fb1ZhaEldIg` z9-fjWT9U`SeM>QN6K^py|4U?P-#YwlkcOX`IbYS!uOPoGe?nrpo>XftaAuaUaD5 zndo*P^VrFJl6Wo|J}!d^sTo)Iv`Qncd8CKh#5x4{8JY4LxA9yT69@(?;vNVe{wf~X zSX0Yl^mu>78SD~jN3|l^R9cdUxiSYbKuWO?k|?ZT$a^=lv`0A?bG6pbObWVw@DQ2ePsrCGaDFb*=DPe{){Ul!+c+)~so&PXn8Zr(R zvwBGX?{742Qt0#1gimvt9e{B+WP6VLILr?3GfkF8&pm`k`ucj)9=Q*rK)CgiXk_id zN@pt+JlR2xN}np*#2aCvU^+G3e>O_(!yBln`E;KQq+)GY_OBXz_-CE*p;P{%*YvD5 zmQfoLaUcAE-C|5Y!FsMW9P(>M zFT?i@zk%Z9;C49^y1VhkihOJdeB$MCgC zXkDwvgc(PsYBU_gQO4sNH1xBcU1v^CV*|{#XK}VJ*KMR|3t4N@fr3n+t%NWdnJ@Q! zT1BG5s7RSFyaB@y*w!!we>eQVyA31}B0!td%6_&s`#NBcPI3*QVUSdN9lu%LrJ)Gk z71=JQpBdW{H_aQFSf>ARUtg3yb~amtG<*>CNn7DCJ%Kyghv#u+JSlZ>zV}Zs*t2BU zjG=uZQf!VJMp!AhHz*U+M=|6&{7Dv2+yxgk0*zb}Xk)2zwNYaADn01LJJprNDj&US zaV;VzA1`(8(_2>1@8^$#vE$4{;A7zX$wRA_sdqeT{QZ6mivT(I^+#G|>^^vod0>?6 zmIk)<5PfiFVZ+X#M=(pc=uL3N`=*ZO>thXK?P@ zoJ~DSzU&npA2Ux2-8zh(8OBW@n^zb{TbM3YIXKU9di1l8X}sg}Q`dJ|898z0;{k1& zAudx5#Sw0Wl{%<2UaDISkYeZaq2tks79ydptX59#IOd=CAF$3s_cTS1%jX2c3kF%@ zs8dI{`cA&5!m`f6b!h8*O3e6REzExvmuMXIto!oen=dZK@ozZPM67^#g|If=+|=)V z{WlpPA6q=8;`?kwgxA5fYX>ITErrJEpn0m+0a<;s2aw*SN2kPG`eGo+KcoIo{Vy|o z%V^NSebUzvTL3z^=yQ~h7a@6{WsY@eebCU|xjs>mqqie?E$euhfL$16(7Jyg7Ee|Y z3y;je8RC@8YXli4hVL@6hgQ<_zHqVOi1RQ0RCfiqd*yQqGk8^ zD0MVZd}Ap$bl`m)&vnhYWa$L|V!wHd1FHnGGr&v^@4t9&KJ;b}sYR-u_Tz}akxEnD zd?pM@^8={ao(9mW3B-hUtv3gP(dZK+t(XEa0HISCSW4+OfT+AhiSZ_Av`Fv2aN9cB z0k!H&tSr@w8x8g6oq!Kby2Co};(PyP_pH!#M}g*?Kx{t@@)wpa3H;>Y=1c&ebdHO> z`5Ms)Jl2;k`+h40tEhJ?4`9#eX=d_)C48fi)x8(AKLCnZ5GF;wyF8wrA`NL2B9_eS zo`8q1?AIT<0!dATNL4#VXr8^<7JAGh3s_E+mp~myCwFvCMqPDn_Na zAzC-zm@N?apie;5C+@S1XmQ#q*+|crJMeqV^k>`AY5W~GxNhFq4w=6;Pu5$e(t9#d zW7z&k8;loQ8pV+9-IOUruF6aFBZnbBW#{E$y43jQ<*eAAH9K1^SjQ|z`sqv_!y7DE z?>tI)5uNafu2!jc^XG#4J3-_Q{pAu@0$UB(4WzJ!ZQd~vu*kf}eW)G_OuVpszf4fq5Xo1Fts$8)smkF&^Y z(bpy!2eF8>h}w%E?r{eSO;Pur!IUwyJHrSJad+@H;sek*36C*0F?z$+9R|-Ps5gX| z2HIJG5~a%GBb8$qSML*tDw98Dn3$72*b44};TA&B3%&*q(^372xMVnjC=~j{wL^j} zex$G+giiLG{tKO?_?~#mR?pVYvxI6Ap+eTO?=us@>tSaxJ9jh+zH}+qhgD}eN-cZ8 zZ0}f$>;fHMw@dKef1yjIf`-RpI#WBsGw(rf_%w*(SEv3*K zkb0S^reaiaOj_&^AhEuHx~(NR?3*yaC;CLG_cSsvKI&#kAEgIkr={Ts7&!#>Kfuav^ns(toUs&#y1&bPS9@c0&q^weHo1d^b;B)lM~G;|``x_G>O)NxX`{8Zr$ zwIA!CfNRWWs%opvnr+jXh-b~fG)2`g(Jle*lq{Vhy_6~oESk73h17GWa(S7{gm94R zVUZ~1Nn~ubi~SeQmn`aSx-gG=;f!#oU?NDC9R_TQn246^e)_(E-_noP%y z3Uxg}_!gquNI&6_YF_NrtsZMOb@kKzHKdL9FLmI=d}Qiooo|Xbk`$KY*8QJ@K>#{@ z`k#nKVi8CwUiXRXq3Lk3i3C1n7(30+AH&QmlADNeI=*;GS_smcM}FWTdkPQ;mRBlM zzNF|0H;MYBgY-muvDTY?iOjB~sVv3nCR3g=Hzkhe7`!MrS*3vcrLZT5V;M?a0MVVo*Z}ce*e+e4TVmLh0t-z`$+zv zs^-C04{I#Gnb3sjG7RjIP-*lX-}~md(iunM;-G0A2=r6M<;V;Pe*~7YgL|)+({o}! zpQ>V5dbuXZ`hb*JI#9J9(~8ZJS);^lf`Ci>0L|n7=8V z_t30nD4&L}4ZO@3n`ec+@E}fMv;8J_5ev6Yvdz@N_(&a>G|rhq%WSOVJ0-HWA45E{ z;{n#Hb^@VALO`3qq}E)6!^0HLPoD({ZX0clk;oj4qK#0o*K@=K2poc~-xoBz=fr^S zrh4o;?-Pe^;+d{;1`nQusgT)E7F2>)Q&F5!lz>3-&g_M?%ek{nHG1gbLiBXDLLUM(I&-VF}$ z$q1oB|BtFItOz>06s|mmFqL1W->2qxmZ z1Hu!5UQG(q4eu2bz_Tzl@Pxq83L>isO0Es)dd}jv73#udXE)ODv_n|vD^xfT?`P2Q z`D};i9R$c_4ceJ!u|}B!MpaA0*FUMQmxItXGHF@Jw}Z%|wEQSc1b5F`3gsPs?`AMa z)0Rk?&m;I@0?6XKV0DwMJO0N2RGj%Ha{ z6YCegmBHL6rTm7FlXD|7goqK|^J%BLlpG;==J?(=g3#>~$2{w~Umam4mqvxs3VPK| zLyR#1VXV~FHcB8P9TEpD)R$8j4^$r1rVN+?Tb#9$itcrgB`V{Jg%=Jeq}L zqtGt_pMmS0(&oL%ply|N^Q=)?2ZDLZQ%Wuv@}5t{D^O)Q*2oeM^^m7w_RGwpQPomc zvW-qkGTBd(bS)}Q{|L4}99Bqs#ds3!7NdNsUb+vYyDwbbcx=2;av)!lSYmu;pctgTng!SovujlFFj5BF0S=t>--mgwz?T<=5Y9(IN*q48Gi zRh^Uw8bK}=Ql9K~A=j?zw;c5hTqz{ma0<0Sj$pz}nbUr_0gb1H>Jartrg%g!?Pr-l z1EG>hE05cgp}zZMODgLY_GAsezeVIRu?hWE;q>8;!s$Q|QaITpgGb_ladX8_pvuK` za%90=qD0HclB&?hpL+8G>&ELPQnad|aN1C&?N)yLI^-71T3uXW(9wv~_fK!y4?m$H zQlfgmvDmIpO}R$~phZ|2|AhfgUqgrYg3~fiz6jNAX6&)QAZ@ls>OdMj>G23k0f1Eg zUr%{&1_8TCmd86Nr77iWnRp%tKEHlLjEu6pCI@CMOV7i5U?^n4J_xYfrP}Mm01@aF zf-Hp1QVC5BP1qffB@l;Xs-|~{`)_cKE2#&_i#;fQ8my?iHuzhI4+(vWFBpHehZcFX zvFPk+#>l}Gz$i`&t3(mxZdQWGL41-_<@QIouxcyd$Xh*st z8#jyx20zCV7oT;9MQBQ?TR5{SJz&?&jhsgW5tS~0Pxdb$QvdLuZuGE5sKJr|rsR4E zZZXea{EEQ^fN$x?pFY69Z;uhUJ#i%!&VQm59P2=@`h6NNaM8v(1~+Ml=N5nW?;|JB zL=%F%kph6EcLIc-%!u;TTQ<{&L78rD&nG0X)mnff{a6CEaM_llL6kQ<)E8?V3X{pI zmWRaPplLF>4~kZ(!xEbwYn1B-B70Z{#IgKecQ zE%Jj48KyxmRNHd$O#EZlE5ThF_vVkC<;at&rhi%4DRr`hipWtR3ZTv}0pwW=g_~JA zWNQDV8nA@y3i+|+?)d|N4ZC@6@Wg)nV|I6=nj<=HS;e_nJ;cH+CAjZ19mv9nKw4fbRN3uPtQHy$zT#zQ`kBE$Q;pxc?RaN1q>0%IbgrBnW7lSR#UCnLREa(0s&9 z{{^T=m&b+vmN);O*iARcZW4;?1Y2(Y8OU66hV;{rtz-@ft9lL;K;@+%H>@Gd)SE-z za9z17dKrdRZ1NMB*sWLr_w?M#e1N`;Lq3^agRg*bm=kd15nl~{=l}k#1kzm11w9Nh zpKxn_qrUwQ!dS@{6nz9a?1BikAJ=z3Rh}Z5)mQI4qpcBhfyI!Qbs;c0)Ou1Sf1(bH zsM)9z#ZQ{4VZT?eE{grGH$Cc04FZhGpyrFAO5pmrBk8gdU>>;mGq}Vfzn?30NgO*) zUXn28hU`JJaYML#Zs-ZP2aEL}($V^4+wB`b8$>q-6Gfp=^nlG&jd1|0GHfB0c^@W& z)}fL`z(0H0f0_~a-{{%XL!bXA#K(558Jy2`zd{wP4q#DViv)r0|2A+LmH-iB_trnK zf}G>(@3vZ)Acyr1ICl{L7X!?`D)8f{iLtKZB$!hlmor@qGx|a=rqgbhLEtqqKyfhj z`y!UJh%39ah!ULy9?B;L<`p?mxCQ}}!b_t#DRkVSczJ;S_>YgsFojVEmmeGE$lYZ& z8s2;}S?ef`+4j8&>f&WX#zKG~$-jq-SpGgZw=N0LCB7o^IU$zH_fn~{5Jg$Gg8%ji=gHF^_{#)c|b^Ljy4-pSZ(dt0ACQ5Pg zAqaP=j5z@$TQ0EBe*RfCCf}`smP`7M3dfmRw1B0$gyzB9pJG6AJfMW zucVO@Yj8w?1e}Tdz`HSSeRfhG&^lnNSncpz{_m}V@5O@Mw&$Z?`A_Jb-3nTC1%S;s zh|)3%6cB})yg_g%k0MbnjKqj80ZP4k5e52!FFY72^!|NZP~rzR617-1t=+&z0-zJG z(7&^xn~}z%C@qKS0j_&mjL`9BK z%N_uMbOPJK^Jh?$wzZ_s@k5||34rbXsD=IByU{JO?A}_)uEvgwGJQK9m@MQ0*_-+; zxC5jXTf}|_*3u5#Y?k|oH{Y~pf`p5euu!6gPK=YuVdLO((IswmZZ*8vu(BCA`Wfs_ z{g!G$BxF`NWv zj8*~UzHYV~YYti=57O%d6LgAV0UHgn3s^ur!1z?JFw&M~LG4yx znsq+m86v91l>lly(Fw71=;J=IBVNY>DV*=LEFVIa8c@zlF7Pp(fCO400PdvIwEqX| z<3WeUv8DyQWD?DHZ+(%^2xYbqG4try<*4)BT88ZKh-CMLe(Ae7jCMFq|3a2qbCDqV$-*Hyku-JHb&+4=GZCal}8t4AdSE*v4my2n}&hyXn#t)5t!Gm@W z0oDS6b>K@b^!Z5tuejzK41O7eRqAqqY!Me0ZI-%La2 z&VJ+o^$CD8Y!f^4z32NNnyoojX%s2{rAqOlhTZ5M*XAhgC|2whWS&&(2!_IL5O@D4 zg^!&Eve$q;J5gvu_-n#9t&; z2g!fyC!^FK&eo;gd$fuB6mopZ1z&;Nt;j6MWkHmE)>=N*LJ^#(`BO7PUcXn#e|dTS zIg9T;cy}y)tqp+S!snwrb=2g9hyt*0WJ?g9Qv|5XBX>BasNaK4hTm+q@F6kCxJsIk-p=U@0xsa& zfYoWLxYaNr@&QZR!%w6OiiZ021>|?${l-eqMXj9h5@@*YjhUUG4K73UHYK3%Z{lc< zBzPjRjTz_n9jx!@&zp>1fD&NoW{t%lV`zl&;ELHzcSo>+rfV^B_FuDa2GI*nAR_Wb zaNf@FFOZ8PdjGw*hS!&vIZ3OqoE?C0GaNrJzNmM-dnviG}@Bx4;>XamP*l^Zi#%3HM0MPNCdyD01Vgp$F}= zmU+vl_P*k7YQb@uk*{wBNFEh5R+S~E5FPvi(CUK1DF7#z6pEL=A5gkg&v9vzegS~aVhcig)@E@Z8pn8-1pTG3 z#x}5gmcd>e&%aMUSa1f$28%5erZ?x?#p36lCY(TU%hNYLlhRd%DvLWpm%GJ~V2n*I zM*h~y2ku;w3zV>Nzg>d(5#skcIE{J&!^~U(Imk&N9>?d-hb8lh`hY1RoJMtH?DH>R z#k>AO4~_`ffTk1cpHu=l&p$(sxIZ{Oy3@y}PLwZ$p^UKI^Fga|cIG9NbXZe8aEW`t z2SC$ILPA{1edV`&>a+p}>{;f$^{-Bs%y#DwuFN;Uq0-}~!hAJfT}PFZp4}5}dnh3^ zg6E~h1Mt`?=MD^i^x)^Gn7snufkb5C3Sp<7|W zXE7wK_XK?!f0Q##C|>>cpIpn2f3bF9M%qyO15?&sM?Y*8O39?tbAD&7c~}xpIQ0s=c{)~L3_uXsZ9v97U-cAz z0z-=z4-bAr9P$;T^J+&9aUk01 zFlh-%Dd`fVk?wAgQV>wOBn2rEq@)|9!*kEI*LvP}pXWJyk8%E4V>p(=jNg4<^}Rk{ zEaZ~f0?BXR)`Fh^IU?j}xl3{c(~F|Gru%KO)%l%ZA(^(KrPbZKrFVy3@t@*eyalOa zZh0^L!36+KaT*)Elz>~L^3uH;T#?^uSL(y2ywt2dapzOuqW1ljKuyg{2_~3QHYG8k z-@*-f{tiYWc!3~Vfp!nV`tjtz?Tl9!aKMH z{Lf5x%x*o4KaDI=l~aci#tk?<48g{j0jt#0S|ytH5aM4AZP%-hkU4BaNJO0TMpvMd zeSuLKYe>nHE=<@M$IF0UxQn*klZ_i7(^0c}#sk@RVxcKi(~YtwL*t-F9W6 z(+{VtkrKwz58v6+ny=$5b_8jwu)J}&TL2Z9=Znxt1ys-{p1T!r{H}N+#~tQ5K~y3= zPI?SHEP3Q8okMQQ0Am2@mkVaqjT47km%YFnvQJ@PGn4IFeBqZGuf-4=Wnr+0FOg+i zp+xcG9g)HDPU^lbilJ)$2&cs3vp8pY#UG39XTt(Y&YTjj4|hRxtwBZlRHD@q|Mla* z{&Rc+S{1)bYTIm^?z=gjZ)H`iW4ki%Fh3dw$&XG&GK{RB&p#8tIhiL)jCOEqfwGPp zmq}@y=J=2U`iKo@wE39R=E}1+rQ4?en$lqXzSl2&r1QP@i%x}~#~>%Zb=&@?O#9b(l+>{rJ%Irn?|x}F$!MBG>41;tJLVmC0MnAc4>{NDq^Y*GuNy#RmS5greZim{Z;gK@@EybT zHQ^Qc*Wkr*h#ZXq_1WL4P#QWuAVb-@Jzu7|67KybMr zFwuwa_7R5e_12e=ggF6Ro{cU~0f~lA%!9Xg;k(^y4*m&|NQM`%Ngpw%TDrk=6+Zxe zVf11EW2sO5#vyKxB7KPLe0N9Oqrb}~CjZ?p4s@3Q#e}=f8{1WoWRW|(I8Fuz1L<^N z9~QorsHswmx48K0>o~CIWYaRw{Kh>f@o7Rs$t_-)|6KTFLeups38vQs-wcGn77Lf* z*}>Qj5=CU?_H)T$q}mM9R)Lklu}J*LU%7W%o^96)S@}1gU!Bx7)(h|}3H~sWoU2?v zNI^w)__E~G?G=zfP6XNNUvT!!s|h_)A2+*K!^Dk+3Kw^NEMY-s;vlbKjH{z|YYU3h zJUZ9A=uI&hyK{A6FT0kw8-H@)a+i6G&n@AEP~z64$vI=IGvap32MZ!>FrpT56i~wW z(L34g)W8HLefyxt^fv)g^b_?oXb650T8J7kp`Oo*cy_StY*4U1 zuCYM)`fH&P1$iU*9ol%Lt7m`dy-pO#U~bCwIS00ifSxPL%dzB2Qy}lq=1Nw;TM>^5 zZYm7q*^*{j|H#{+k8wZl#EFxuw;de_8PHG&U7)^pb03`>=G#%$iJ|0E{ImBy0hs8Y z24CW|4J2ORfw)vma{@UXMenYv!~A%kz+zFXq-as>WA`k`C`0b6KWZNwIT`b2 zgShtdXu6Hj`tIxoy~RF8zqudAYyLgW_0{2@#Q58G;jPTQ-*&w?d2#A+X&l^61M;%R z6@L0{7v5z3IW~aOg7@qva^pVB&_}8VqYpM9%CDAMkV;)Dv>TI7G-4W6i@Vl(0j>Pg z_tQ&!TU*P-hcNypG~VjYCT#%RU_&O6044!vmQ3WJfjwu+!wiWb49+7flZ^ePo{7)oL$O+xnv1L`&B6 zD-NDc#A>9gwwqN2s>&oqUUJGFl0Xrhvtb{e+8YBwLloYW98{BuI+XaDa5wlZwP<^M z!1;YlZCZ_J-Jc1!8$tQPB$jt7OCdTDwX%Q2z#5vp$VS4sOXA*ve$I@yeR zZ^%Dt{p%bbmYv=u!7<%2L2H`Vo7(mMFgTmOX6V{zTcT73rz7XSOHJU#TR#Q=7r;}v zXSQOb`O8u#zxel1H&k@>oJFy67oVFz{Rwds!=aoM0e9CGV}H-kR>| zKlP~!cHllO(%?aB!>6&UU;T8EkMwJ~@8L%bQ`sPTR z{)h;zIMw9G{5$5W@BsqIe-+$cnUTXfW_ILM?Qy_O>~H@_E|9&;)xx!drSPHWkOlA zHxApRQtt?y3%ForzX3?Fl|)Qh1_>6}@B(2-u2c(<@4iuE#2rxze4mUJ?a*^! ze3bzf7!|Og!}S`pT(UHedZR>#&>sXEh0Aai*iXc^2S$J6oQ&UIhf-qBh4@B1?g+ve zWlLiJ)1-ZgUWWE;KvaI_JTIaXj(e_eg?2K7?E~7>F0a1J)`zoUOuCi`M#Zhiq7LTZ^@#j)H)_V%s(M{ zEbgFsKP_hw4OZTQi+SLm6EJvm?2)3dhElJ2iP{951|d*wIFr*8PKT9PbsApyqOs*X z-)3#Rv{9h>DZUr5vz}-)&%J$VngSskGKW6O?lO3-B?1?&moK&Cf>odSlB^_ZZkcX5 z$w5|rl3p;&v|OUJ*P8duy1jOU-a8~4isYKC(OTi@4)ek=i6Ejy6p`9}TKVX_Qkl=% zO$>V#b#GyVZ-@-uiTQj zELbY;hrem3 z%HtBGj)`K-?7XKEDp9y_hjUqWC`1!^m;O{{9E^!##x(>z-9F_=S71eaNY{EuVN*%#_FnR@({Ch3`P0Ob{RgJ&dwRqnPB;1ViQ}b+g=MRze#s)9g7@Hk z4D(0APvZW%0GiE3Wm>?A@`dP3?(0r@lsa+Y*5jfc;Xu=pPJ6;$Z+hMAK+nHB83$1g zHQp=Fg!h!0FR&^xpBq<%gyAn=#R@b#I(qNHKBN{ z`ZZrsQXDZ}s35|^Q`>wl@hDLRM$?V`7BvGaQRzTLi&|c}Js%hT1%_@F{l^Ni&1>xW zP+~T9mIR8CVim(%T;&TA?%G9;>E?T#*8&Uz=Vc2={iJhBcc^pL?#Wy?pJxOyO~L1I zRr98M#!hZ3+X2fksa?9#&kd%RS#F8S|71e>alU66U(fX9EQ*d9 zUSO1*sA~rPS{?#w$fMkxa#Vsl{0Jy?MC9z*mGyv>Iztiu*U-!^W+xwec~APHT+K?! z;Ws>~j((RPKLrRgu)-jpN>uOUv*iS!6_>sUy(O8vyM7ECQcre-8mY|=U@bfCB9U*C z$2EVQ&tm(WC+!Qzut??~Z|gv7SK^KqJ*WTe!3}lYNIruv%hR%*6vIZNO;@NEjRq%U?-Z%%7`*L1dKEAYBUQ1) z)MM@?kFZ7rNc5s5q}H~&VL1;U_=|QBX~S^uBz>3w0_R{0qV#IQuDL$SjSSWHa*fww zApDt0JnzN4B_U!8S8&)Rn3}|knbOy6ObE~}q~>h<_NZ1ZKFr^Bfho#u?ZZqS1lL>q zAhJkXiVEF7+Olfb=dB+%rk>lhvD>sVf)h;q&zSDq+wfSBmYE$eN-+DRp|iE0S?9;^ zv(93tKk)pFa<_!$w?fq36?KrH9h0>~HSQ7p0;Xl5Ay@kN8fHn{fcI|854<BY)MTAe%*K^ywvBtPU0_o@ zil~J22QJ|RXR-R;-NwL#C%WMasT`OUw!71!9Yn$U2hF$?)YcqpFXDKZsgf$9O z?QMxs1|7eZj|L!mKB*k=Cbv%e%jyW;Z`{OE52tx)B&qSe6-7Os3#v{(H-tkmZSn(d zL3e@<7GLw0L+$LY$v3$;r^GpmWTW2ecs#x6&P=T%EK{PDui+r)GLxo05ev6e$+`p4 zy+20ahDW$B$-|HnATx`;mXO+XVp6$(Zex;(Wv=&H_4EyXjmEiY_GSXQ20mJ3L%nMI z(T{H?!TDw@Yu4ji`3+Kw1M%O;MJl4GPp@=`+L{id#&K^-6&Lf>eSOUoviDtV`s@3j zyUh{>g=!v0GtYnYI6(E~$~T=qB=0J>j}z$8TWP^P(kwU(gkbUWw~^7K@!0xVXi8V3r~%*kI*s{=j`>@I#i;y22|5`Oemhtw*&lUp*T%fNInD_#@BFlri&^ z@~4WN7_L+0ndg;9-Vuk20%dKk1D8t&MuYDx=Wlki3#d?7wH~?r+KYPxwoSr+3r^FO4W?pUWxU5Co?jlM%qXe%y!3ZJyA*{J_?OO6U81#0`M9xW zcQq0%Xwarrt1mdWm7I?-UsgVz)&{}+awIQ%WL?~|;DrYD`@yb!CeYGaQPVl!O*4D+ z_V>~ryv*OT{Hc&jm1_I4lO)-ZcKOBRWK-6z0WqJ^qkke01u_Cr7%;cQ01cGK)ti9T z4<=CoJ)<0!(SJIgB?80p6JZFMEuQHX8#BV~A~!v#91jyi<1S;N{EHAp2+BPOpPNdC zZs=EC=I4dk-P|;zG~ah`Gm~sbQWP0^M%|{3rYjRjsI_jGE!H84HkW1V# z1+D^YnkwqGD>B|Q6R%aGt9>|(#@3We%wQVtTbrI?Fs2Rte7)!WR9D+<>tFc$5uZGM z@`$3aM$UY>X_Yjvr&231Qb=396z(8T6f<8tlNvw$s8zBz+q}YaI#egI)@&Xv$X{oZ z))3mh>0_F9b@UERmGdDF2Rdee0Gb=)wOeU3IV&qTG#3q@o@7=AQZCWR-c}jDK0YaI zlOARsyw*zB-?H>`dOwoh3>;c7F{Ggyj#4qw9Wh+w^)uHyt?EY;b@Q`XQuh$s8HV>H zn4FkB%}3XADVS%FDP8@kVy(mSX9a2{MQ+^7gRFZj?!kG(Ylx-Wh5M6B>#ltMkZoZ_?#cU|7tA7QX z68!kq9dDwhRwk6lrVIh%yVJ_dr*ysq)1cY<{66Sb(M|5VMjK){!9qpGz;^PC-OM!2 zeS+eR)4TFKZOxB=e1DhJ{!RIxnW!KoQkL~8kX#FBfA;>%pc^cOHsN7G%Ary6>gs@C zK+-+9B^Z<14#Mittmm27%ewKjkkL4ZP72-(ZbfT?;hE-G?P0jf7@&q*U*GX#EjQLV z8DVBp=LfJ~h7V2Yt9Ue~nWZkd;A|*2E z3op?2Y5bIsWIqw_PGE-wcc`-khDaF*FKl2yRn=Yu-ASZL0HK`LS@@kOu&nVgXAa{rkPv-N;QMex`YGL9tewXkodH-|`br zp5T{TA^$9y&+~-J_r*ZH=!55#_uQxx@g88KeyzjGOucY()XIAMHh@#nhhvi=pT~xz zpOjX^yxysjKS#G=z_SJ+=PRsIN^B+Jq0if6FrJ!YbyH#y!yY3*L%AgKcQ5&M(=M+Q zQ2jh-pk)MaWVNW}c)dL}!XnH4q|FuhTJ?)!h+kiR`?L9tl1_q(@x9;*&uh&z8rO*0 zwGu=2Z>`a5p^q&urr%l-@ni*}Vw|!BIjZ*e!0()&4$+a7fd20SG5vg#;!>E=Kvk-N z?)>9S$t9%V2Gvg=ee-7#){5aT&=KErExQ{tWrR%0(7scCcqBJsH_>L+G2Oht6hnw% zI#sk2HQ5!f0nW#AllC++pa|zUK3ij3gJ0_qDRCKlIn3{8*6dkcJMDZ1A?4;VI2+dZ zHFJEsK)Ye9XD#Sz-nsB+v5|0vMe!TOpurAY?V#In;kPQ1T2IqZ-@sYgr&p`i@!7eqsp+@YIEnL9i#Uewd4b#(yUTN8Ff%lc^4>6peRWN}H;H>JFyx**l z?17EDwW$k62cQva|COo;w`gMOS+==uT`tYsSWegZk?m#{0Q|Q`)HHnhv1>s~<6bJ> zwpxRc=5RGLOmB}O$U{;lMT(JfDo|WuRuFsDK#Qj~POGnNGRx%VrmPtd7#0L%rs*u- z0p&kytn}{X8WJ=t@BLkoRk7XWm&Vo_wZrm0c$G`Wg@dBvUS%*nAG`XJu=F3u!ISBU z=0F&KNxF$q)2{ur&MB?Pzvgxo$UH<_o^M@%4#9&lotz|yXb%`QJgo`BI}+2lp?TKv z!<&OuskfgVAz)+j>x>qSrXu>K+m6M@9Q3LI1)H<@(a2xS%1BkQq}r0MAbzq@v0`W$7aYNK8UlzaV1tBGuUMgY-Bq=8dN&&*$0cb(KoRO-T{7Uzwbh#TKdoOqom4 z&089CE-`_(Ts8n97$*BQng@1FD#~f)M%+FL#s7=DUw?2t!KmxXKq)7Lis9*N-4O zyp+l6?(7sl7v2d7f~RZJ6Niggh|k3z7=)LtO%p=drren}B@tFTg5ycC+!z>XEj8dM zU4tKb6nP#?2p-IA&C~QcXrSRH?&UQ*dWP&Xfxy%mr-$p?gA3|mHvZ#SwJbL2fQ^tdbQ+$RY$#Zn|?{` z8H7hUOJTSd;QM+TL7460Wr)8#co9X$-CIufk_9D_gzkj=SD1BA zdWOUkKVTJsw>%8MtjHN}p>Z+1o;VX2VY< zQp3I>dDH99*;v(f_s&#*NHO>>zhPucBdaK9Ssgh27S2N#q`gTI=R+!W-S!-78QusU zOLejSlsHZ@58$Q^#1z@TgU{7cE?Im?lkt zUqKBWqW>nz;8rF}Q`*#SaqgnsXNS!o7K*jGN{)Y~8O1}g!wsa&rSx{{+c0{BHhWjRA!$P8 zXPU$wY%^h&R4CTGci421;Dq=q`PRPL8QLg_vfd^^j$TrdUu2N)gDLRf!MdA8(a5@s z98XLlas@ZPAKnbBNTgy|{hVd(X?|mUwfV?=Aw-5;sK;|vz^&C)<9w+ms(C?RH@!d; z^b@0};os_9>CZ|YBD8I$36JgO_jT7)G+Ir)!nAMP1U6S_UtH+uqC_S}!CSw}#q4Gg z9+EM)x<&|>?C^lrQDTl++n34uZvatzkc(I6*gN;d;M)SLVlByL$;TnXdOlmj#xN3s z3jy)1sVsdAVvXVItgr8)oyPb7^?c(apYPhq)>1IGnxFThLwN0iW%A|6ykeNS$ejtD z=sbW$fW-I+OT6?1(#RcGsTFhFBA80S(`@1I_P|ac6oLU#fQta_6IXmDrFL>oM1aU- z=tTtUlGL+TtPl|>b)4kcFj^4oCjkueMU22&O@>$0rpiNvb5J&p1;iw?-y7)0E0im%&I@n}}1$QG%3P%rj#mOmpb?hCE z6|lWZHY-4P(A^JSF3(a$Xg-W*KmA}nc^A*J+GG1GkWJ2Va!4NIVb%C~14Wy+k>n5V z(He&iAdI=rma%Y?Mtdg_N=En5F(yF!LsXtr*lCXWE zun&2$#Uw*iGT7j_a|uWZefMiR>%!+Mz4YW(NNV&Va+@u%bM)R$J}mX-pZp4v4f3kb zTkkU3Q@ftPJGnHT3XS`x@v4Gk)i`TElhBW!tzf`l>QRA_>q{(%PC2q}b9eZ4`%klD z+pn$ePp2PqvIi3e-6|5BRvj7tZJVHmDWyxPu+n;1#tW$(CQFI`B~&tjde`_FaMauq z3S)5>1b_s0YyVEF-!2EmGm*bnAUoVH{P_d-WkJ8IN`n7+SRSz-P=%as(lW2<>OKcu zLB#a5<-ZfNz!eBiMC&7vRP^@Q;zDQ&%EwpN4^u zdd3yg&+J!!ycNddZq)w~7eB&JD6V0U_ zfZ8s}dirAI%}EdF#UsxaFIxfC-)GCfe63zCIp)I7*04bg3Y$uKm@W}%gLVxb5&#mF$SbbPZT9!%&uTm*?ccngN7pes{VWrWY4^K1wD5P0Zuu4ZK;zqL#?yIIF@(iL_Jr(y^9U zZ-rk28$aageT|Z_5C`Ya8$}nPK(m)e_;fpC37?`+Zv#WuzvE0PkQ*UX50aw!5*^jt zB=2Vr6Yz%9s2{9@C5CQ?%#d=3R`@VBj3Tka4a$OCs8d>_QD&mBv2T#j*tCEU?=O#2 zA6f^Y1C?0P33nj}-R|pSe|-j`Mz5|fLNJZ$&!_3yzr}|m5=x;d9h6crIg8fM=lXi% zy@@06;{0IeOL&;#!OVrcye#$oqTnL9qNS9} zg6s@_-3!Yn_*x+51NNCt7dC`sCR*F$6FyDgJSGX$msj9W!&aC=RW;Wv>*n5+llv;8?f)LPWSm=U2&MWcZYWX*7khot?PutUtye&J)) zA1&JvakCo~!uObO0oJE`S#^O%eE2o11YhOz@;BwaUAmfPnUX9)aeZq{C+1x_A8=OA z0A#LicexT2h^38-cCdqS(choxY;yFDYh{C<2FCwPbfbnU`(TwsZPFKNAa+8aAs_|M zzKiM6A4eXPm1hz^3XTUl z7oX+oG>SCc1ARapdH3M8X_V<&0;xiyL(5}p7YOwq@r!e3t!Jh8d=vK{$~~2$Jpf|4 ze&6Bp6&{_^yX4=9p_6l&gCBsbvhC7myO7jwD7KVq(b|*44rh%xeC3>A&D#h4=Aq+_ zPVu9V>E?aa@b^Q^&|Xgyh;bxGbE#3-<9+kW+EiW1V95JJWuj zGdH>xJlwu03xmRgnUJM4H;!MPYy8+QI#K6)Fg>>caT{VuD7u#y(AT@)^rfd?EDTpy zR?t4TtjYj+Y$?Wo25V(a5YF?u-Zmstg`$aTK(LmjOtfM@t^wiEIx+b46cija1{ejCP+9hE3=>x=`7@`3f?WXM;Ykm+4nR-B>Vm=kF)8 zvi4jn>VrOjRn)yC=6~i9^GMmt9&zaz*mmApnm%p8z$QKL`oW5?)y}9+s4&0cz!=c! zFT>{U(g>u(IQA-jg2=Ar(S_5BR6p8Q=b4!lWl=2WjnvPpNH7xh*hqJf$;ASe01q}4 z;C*FhA^WOof!{`;1$9GW@%tuHUqcX#87KBnJp@rA7ugt7F)uC20?~O9G?^i5ypEo# zK{B<8QFFoj&~KIPWQ7k0To{Myw;-(ra?krYwCE_BT&2}SH}(!w7^L>wyCo6rD|Fw4OG*2ot&%-`)2(0? z;9-D;J&`qRH03T6zIKoq4kW<2?D@FfztC9ZU;Tug$P+1pMdry_$n0D03!3x<9*U_>+2lKYE## z$GxfRnBu)rUPMH6^2E`VBVhXb(5ZWt?zPg>D%Kvo0^GPJ%yBDU$EH^V{mWmKY>(T- z>IZu9-fHk^u^m^3rFJ(n^OC^rgZXy}>5c(_hiQzDrm~k!H4lvQw-P08E~eJ*NG0ce zYJWwq>h|OT(BF(?l5J;9;6pI%IwyKv^;ZP*{q;oco==f|VqGBP3Vly#fjt|-1wrAk zg5T1>o#ZRO{}oRKw;%qQ7hvmq6^!ss9uti-kV0d7S1n}BT(IY%Quz~kP-OqlL1Ftz z+vBM`_K>;Pr`)}YyRG=#&ob-IQny$kh1t+6jJ8e`@+o7cj4RN{lUXRXm#=`I*6o0* zPna(;8hg=h0(r7)C(grzf@%c#Jjyr*y4_amA*)KTUTg=Nld@cj%LjEWTD$AdF z^$Nm?_P>(j*L?h`J0IoSRh(`D#tFluj4c0fs>EBs%2vfZyW0K*uutx)-t~wKIFY$W zNQ?~cyX`-cvi)%xO zwaw_M2vAE})DBH6CFqtz{(y}0XPk7$YgEQ=Okyduz_=indn|I9A77RP31xwXA#~IW z&xej#X6EZsh{%3$1g6Ehtb#sP)3DAl1!%}$7VuQ=q4FG zTquGmy~%oVlOjqJc7Gzw9p&Ea8W6pQX~#=oK6tAAy$s5B5J0mM?pHbnM{wA_N2T~) zs#d#ZI=4KES)Th;-s?P?lO|meCGu5%K*!88yQ&XtV;FTTC84zMzurH`?R^2n2JfiX zZV9Ec@>4;>fB{kE?Rol-7C_w{6o4g%4_7@3+U2z=udjfRp-@?K4=cAQxk;@pTOeS$G#Gx!c)UH&8tU(?_wL^B5-sEJKoN_H% zW2M|+qxr;rxTj6xwhLUwmB$}rKHv@5{}x!&b3%wjZJ8$vfR6OzXW!xN{O8@5cz>Q! zc~W2Vc|OsoQc`HoR~f1=<<8gX$c)YLm;#`bRqm367$V_w(Y&^=cmlx4p;OOI+GR~( zYq`2w^DWmo$ISDB=$-4HtNP*+cD?<$WFN5kWy1mnakCWz&CEMz@6pUdPS95({RVtu z35ahYXm5qzBC-w@jWm4LyL(;q#dcEEt=YF@856r|bcV)2ip|_>m+Z*??ICmDrwY|9 z_bS1*Vj6_He`~z{{=xjvHC8+^^_S~`Gu9B(Uao-xJ$VL2nRXYwy7lh#IIo<2y{)dF z=qyQ0n_PXXyYX5#BR22-N{_s?(b%%JtwAs4LzZ+_T!2i*;fu}LxBJRk7Lo5Lw)bQN zpMpBzp#{~jLFi}JHQK4Sm1yRh7){9F(;9I}?`9btfu&RV34~ctdJgb^75S(16#UCy z`*Y~gHY2isXws%AF|(>X_I3-vgb7kl;Iy1QbZ~;2Vm+GTc9Jj#i7ol4d#TW)mX4W3 zMkCtZFDj5vNLTaAN07|h*WzUKtWUP9q#(qBVrlRV2B^T6!jIxtw^ zZJ0O+{{IFZUK~-6)_`3})m%m;`nb4>-4JB@q!wqe|w6 z&8j05ELi3pnbo^QA029dl(3Gtj*(wIJ`NC7zWU>fOT12)%=|Q}bo`ba6xJH_hYAZJ06uPD~o}x@PtQ6-sO#!^4}j)>0CSqX+G0{M|JC^t&%Y)_mkTz!zRRO(2!#j9%G3{fL{5!3VUxC zv*$9S<@;|mGI2s=tDwak{7O)>9AfE-egeYVZF{8pR@no*f3^GIFASJZv3qc)h|?kW z*@mU?L@eIijU!dlnFBr0Az-rW@I@aiAy#WAY-wcxc*(GC>k&~s*qSnc^bT>4+H1z& z{9+X2%JI9jDbX=J0b<`=2qaEwJ=Gi+X=pwBKKQ&Gi5oz=CO-kYrCOl`74viu9iF+D zy4!GhiEKr6+3lZts>pvh4|_R4IqyLE+vnfk3pa9_LRQ-F?kO-H4Rh1Xo_K?$r|hLp z^!G-qvK;uni>2loFf8J|j6%WQDR*$h1kw$>K@gblSUA8){XPS*ixU!AK-gq74fglH z%D~vbR_Yo+(C%xSCtjb*MNe-PXPs@rT@nJuv3ZTHjXc=#xE@}m^Al6-Mwj0UzuHB z$_3;p{=+N)AdJ85&Iyn^&}QO>&ocj_#+iT~;6goxWAvyTs+ zC4RuuwG97-vlrL^Cv_6}r>_6Y_WVEo%YXYnZ;-3!T)FHVD$q(|)a*-VIz*AI*6Kf4 zrvLMS{^w5z;tfBB%f*47m!*`r8UQA6;srI|Y|$`n>y(s_7!6`7d(sd$bMAn4Q*3@rr25KW5AZ1Wg_AwaPZI|jSL8A!9%r>UGB zU~JKJ;QH~vaN#of0>BE)_id6O#3(07l7sj-8NXBR%^$GZ?XZ0SHZ_ww%O?iWN$@}? zv$A=s+zROPo*id;uRGX97@AoUGsJpkH|bU+K6^jigdswqm~ zZ`_axjEK9VDEQvFr)g@SAQz^G!HVMdxR-SR#hwoK^@k*nBTcS5k)m-boNw6NLkQj( z1Zw@4hZ(6iXA29T08N6*XrXcd>1}J(g~Rvc9DdCyinDM9igmqZ{M!|PwlLIfHJns* z1U<~PFtO{r&si6^CdN}6)FoN&>1p6Yyqq&g3_v?f@Io_x7ZN@h4JZNiY5TtW-d06P zI(42y{3}uJqWQ7&NHhmPf7RdSQ9Rw9)vrn%z$+m=&I*mPrT?Gq4G^evkf(Hh7fd`r zqSMEU_yDRD1eIlM>W83!(DFVM3`#^XhV`zNLCx@gJmW;KZVWKT2exH*BXl)e z+;zBtcn{Qy*0cq)|H}!!WJIcCJb>r=-yKjSKYdBe8X(d=V(Eyn2#_+~QAcW@0|{!& zDm9eINC1zqK1SLDtFn?jK;Wx66fUA2t^*6L-IFL_Upk%nYOBl&*#B~a-b#~pn!K>ZA%}F%U;}o6YZbY2L5Z6q^(oy??{BQ4X_lo zqXqM{Si(2IznzXUMI#|T=%42I7s26nB<`#?e59z{ehG*qw#0_^Tp3n-Aig&2va!a1 z^V?HvyP5>9GtR>KPMY>PAX#%4ZC^k-{56cO41%Na&=oktpQf7|=#RP!N1laE3|vEP zK13W%aP?7|BT<#dKp>DNaynBmZa2iY;In3Da+U6T3zVGNWl`=wLnP<2z4vS?#3NLu zu!l~DR7=eSR%OF&RGcfbPS}s^KiJ_X8h9v!2Q7kYp}BD?;eWZlHIWAPZXQ2C&i!AF zXj4tL*7M~xK-Q`IgKfG6j{C?9cAzUOZ~H6lIvRY$XPxDylXDe8P(!1W3)7lXYc)W+ zProS1bctvJunTXZS^(_H03G}BTf?+O$6Xpk6#y_04+0O>@nY2wY4=HO-S5qf5dm&s zXqql|y@Z!6j!%Fl&xo!tv;^qbKXcf5P%6aCCnG$7JcWoU#T$LoWK>|CGQ;5@%{sf* zHl&uYC=L&4W27`xo)6J}r*pGyyQb4$%@ihp_WAbY^@ZaxxW2vt{Xj8e(W(RnmBp38 zb9k+M^$y_D3(9J~YH>HXDgj zA<*w}}xj7B$+He8>YoX^O5q z_J7Wpa+{D>(=(q8qh^@iuB+LcB-v~CJRs%aa;rJSV;yNv0l4za}Tkh z^rS;X;y0Y>LK;MT^C8HZcaEE7h`!S_io1A$3lDqX5z~^m57M&i#VfvXQc3v$Qj9O0 zR`0MA-#o8RMcQ?UY!3SYWKss-PtSt&IwSY*JxHa(TM{xUedeL-C#Js>DymxrZMcDA zAduG0*zC;%Hictk%8RAUgmVMj2==6ya7@tYmOa|8jOu}Zdn)*X7Ld0)uL$|3hWZ9= z(RTNndslJf$T*Y%LNA!cfO&_(-U*!ECWlBzuLG1Q!d3u6{$XE|;_bk1un<$XIV&HW zG7HG$jNCrwPKIn{3lYU$C)V3)Ub^vMK{#6q&hZ{Zp1F{c_n&%dU zvp)dbhW&n_YEhPav^Gz^7tVMe!SrxBIDM?``5?edjFwA1F7`XE&mro3;Er#}X{?@MftvxoxvEiy$vptY zd=Ai!BSUqX=SwPfy5p+cRw;%K0>OBuQD0+_{u*h3NHPpe1g#EX>!|N6+01}jL~$CY zsU#uafN2c4jWb?p>2%#a1FX6(gP3*6cLfXe#sygimO}zj^~gcY6l>TXT;eH65=P1sEmPD8Ilhj?()=dmCFh@ zuzm`h6lzeMdnvmEztSY_d_McRmY^!Sd2DC|_M@CIn8n+JV|NdXAKkI{~L zTFqE7&-O7Q#vXxa&@|oy){Bt7Hs#EID-;VGnz+7K2VHohzfb1w*kHXKdGhV)y()}u z)Nm~LP910hS}<=VS;p1Ui1v)LPdzYyNuVB9D`_AWE(lNkt9#4Sb~V4R*yvk8L9-&B z-%D9rI3`lNKr1JC5a^U`2`7pLz@UxHwb}PE)O&^QMz&=|J9?caVMvOOft$Jpu6Y#= z0trf5i<83TD$QaCpqjCVL6xfs{+qFdHpQ`^nJ>3CtTxYGMEy=^t?Uod1LR6DWGr>5 zZL=$G%nU5uARy|5%P+Ah`d=f1a|Jg2{Qs6>>Hd{s4FjGP(4xWgjIY2xl*(i*kdPTm zaAvp1)`K}h3?LLL-FB)ae9@346ZWjZX*Fd!${qUFFWnwNFCEc|j72)iDEVk1k+=3> z7!MWqU4}?_-Wuxwol)#HMqr4ujK5rm1;9QvvWSsFVd3z+$p;Aa`-+0d=$D6=n~y>} zNVYF!`y{bYZDY}^l(?ut3(7{=EgMB@T7mI>5hQ30TN6dDXB(LL=dzd7e<4>$l8G>X^=gs;2XLhN-Ecu>xfip>7<2oVa10}ykLFzF<)ER z4jpB%T1Xn>`Un&&&&oG_AyeSyay0ZHELNin-U!K&Yl?2gSh88q@`z#S$mR8DN5Rk= z?*Kf%7fHrQpFgG2z*6)j$jQV0f;bT~TdmR&&OP;uj^{!efASv6{=fwkNtRRbUtcu9 zZ@31N*D65<9W4}AXtiy*U~dsU!oF!W*$QNTA7oP0+k<>ow2n!?#R;j!7iOtZOO|20 zC1jD4S)0LT4%qVY5bG>^v#50zOALq2Eo+_6K!=HY>P{>Be4D21{EWARhIpLldi z&)?m5yLKvh&+4}aEOWNhcck<&LmymXmAhux*S*mOtEH8|ZWe4)ekX{0Zr5L38o#7U z8_rc7w{;1UTFXa}WTkIlr$@xrA8tjq5asGaZEH=csK?a6JBT+;b^M9`m*#+}eXXb` z$ipf}CBER*3HkSi6%fF9^8_Ho3=%$Kg$-anIr5HzSl7XL#?w zdWorT|EfU^P5vdMxr?a>>cmD7wXX(znA+F z)EnAl%zF9uL8$mvz#K8Xj-zP3_a)o&wRR$_X(|-cJ$vVR8a1zViN|9T{4Z=ca4xsTwDzzU;7V-!G?)`%qM9}@> zH5gJh*sShn0i$Z{!11TgOP@%@n9tz=P$%BlL*R_QE*TVveSCYhZ>Z6UtlAaGOXHsi zm2SiCT3(9Fx6|$BYC1?cGsu$D_Rur1Pw1*$eFt>rS0ZoQ#iRvqW48#)l(+RJ+r?N6 z3!iqWod;t7zzud1Zwt8oMFC|xkfO!TRCj-q26j^_8$iA<_pN=*m`QQ$O#aV$0>{P~ z6Q>y{Aq%v5BgwGD9B{>Zuve+9OFs#iQ5O>SGrLt`k6&y4U>`v>5wi7=|<@eNdf6@#0gRgij<@@C?OyvtUhW1Ju7zXN2>_kEuGzET9oJQ5SXwv?1nDt3$SUPpdz0S*l_m%Ljfl181%oXqCO ze?ZSR3?cM&GULxpz~8;;Z}A~ND)|5t1g(aDxW%{tgc;R-LeImZXK_~uBS5cTEnX_Q zEl<)d1}9hOh5tw-UxVGlOiHT#jq%M+IgT(`D?@jMP$vQQKw_XLkCGh5rEDppU#hCw z!6Zzh*jg35<06tyu_=nARh_zbCpXP=xE9Dw`t$)bkbF#2xH_nN$4gOA~=+W?}Icn#J(NAQT3wka0?{5F@g1*>|^va>J0P^l60R zxRJLm0DF5(+S7{0_)f=J|AJ>lf}3UGd^yfP;yk}HozEn<_DF-iP?p(6(@stREk+{*lb++@s za+q<+7rDs_mk^`?valecW*AjSo&L(PTjYa;Dju0eU zW~Y+R#}lUi2aNQsE%e>|o&?xm%bXTEch!|Os4lzxibRoJ#`r;6n6T%PqBqF@wL2kB z(|gz~=$ArTZ7N!Fxp0`pZ{wO!V^3ZBCg(!AV7(Q{NIvSjQkz+*XLphFRgt^Rt==0q@t#f*s^t2d6MQn$DB=H$Co%a)*%UO$Hp*BT zkXEbkiCJ}`2g-1|B7fHooyPzKW{%VUVlBv#PKH+cJ>AY`705V{mY%6G0KfN9LE7t@ z#s^?ud56k!6Pt$fi_@MxRQ$kh`?L&5^2)cf*o2n=VB(h8uU_}7cod4F8iuHft#8R; z>BUEz;|nT1DlG&537~+Ie0}`3{^vyln(N|14*c{-WV$eClJ9PfMF>l|<`)2h8ixFAss$#>vN@Jw z$_e-44BF(jZyAkN#b7ex%5#*3A$zDzUUl366w}GzN@aMRCL}A(lU^T)aM~pWLQGN7;p$a+-Ou*?34(Zu9BVMC-nD^ z#22YndNXhavc47PKQlZpByQcV9SksA2XAcLw@e!_n-?xdRq*@=`sDuK(t#iEK$XUS zjpKGe*U?>S@WwJCRTWyQEHjQ=D9l$x{;36EXY3g=!bim2ztfZwA9j2LJ1_MFr?-9f z5}x(FI>2u5!8M7_v~*(T*9z$rv4=Sb>X%wY)=WU5_Tw^%6UNni&giG~ zQnQ>s;^pccpmU*=8wFQ^43pT1j09y1cU+sqi-QLQxOfe`9CsZr(Xj{FAw@46K}>@( zrrM5zf4nbAwY-lkgK=)j1dw<$8*~{L{NXsi24XzZh_m_Y6H)ayECvEGO!FX`)agbt zbF9vt7lu%qC_=1zspVKtt&fT~9tFxrmUqEK7OT08X zlu;a@F7bEAhtUi>-$1%L4w%g@jG*wlLQm9<4WZ;-Sh#kULn-RbZz?GAnAIlbt!HJ^ zTJ23v=4_S8&T3{$H?eva=vC(5+$}FeuwcB+%^*MMfnfgMA5YD_0fuW7z$$~mh@(;n zZVS79%9{0t$dct^gsbAi(nOt~SJK#&2Y5alHl=#-NgXDv`3fy)8ud58l!~2w0L-Qba2*9yYn@LYEJUL|^`VJYX$~^($%UPf6$R+;z6QU(1buy5=Tsb^ z*@fvciZP6^)BxlRaR!t}t02*;oFVUz5iK@)HzmdmNJiqNy&xpMD+a%=eU+#hVAWje zmE8#K5da>?1oFq3KtOtdQQ2i6WHg$2vx2FEBd;{HR|@TrJEsIK`DC$$F*gqaeiaP^ zgw}fO#VW_=BAmue#$%B@P>i_d;HSDSt~F+v>5PM-_Mi(9ArK@B6Aa@ApS-Ak1HY7UGB&O z#w3NM#EqjamE~JmI;zA zW0g)|zfVE={b8BFdx-zDP|zxAc&Lm=;%qN?Qh#nWB{4=!BTK7+)`(LX>U?Ef%~oIU z|5!pqv=KAZEe6#UP`4SSCR>X3V^-H#E?sPhUEn_NWKz5q#hAH#XgdGkn2Hcvel=GDs2xx+c4XO8F{1_FH zuT4nr4+dGZNf%zZmWm7?cN*uY4NAZ47P_%C+&%$2dC$eC<~1(WMJ@2=zZ_M1i`YD4 zA%s1L+6uY?kO$9>ULvum1f>_>Ee>PzSrV99MU%P4Us9#l3G_}|C+*XpwP%G!JihOI zpIdocbuqR};(dV`RTYFjYA_7GypI?r#F^9phSc4 z6kN#0tQ@4N2i!^v^K2B|z2RDF`Mfn@cMDne&U!`LtUzi$nR>mK&por41wOf8n0m>5 zGDZnEwy0A(FLQh8B=lv7mDiEZ2))^blU9RgqM+?HP)RtXQpZ0gu?jYm?3vgbkR z!-gpwUxLUwjh#y?0;#HythKNQaP|@KCaSYUBGLId8s63PQriPtQKPLfX^gc9XdHM@ z%lNBPg(Suz#&LCs&2rzJ-+*qs?;-VEd1dp!iRk=BAn3oSiy8yXq4Tt$nD@npusHz4 z|0qGFv+V@2;v?jAE`g`_`=|jzG@!5TJ#{{yR)XDJ-(ok*h@s;Epl}h8zh4&Y`Yo+J zWVR1%TA#`+!yh>owkq!I05uTzp=oqg(MLzzJ_UH`i&LF09Q@IJ@DkcwrMZX9H-U+q z$7LPs9lM6`ZtJm_&( zq}Fhf&NS7hFyl1!H<^}i|N23`lYEG(Qyu0;2!@)!k3-nFq1$3f3QhAY1Sr8H%0mkMl`(4OYrjVnP8B9jDKV za9f>0Bb5A#9G@6gm?x_4$PSt8vtDLx{Y+RW@1^hvBb7k;mbm^~Rid-g^o1t`n+9+q z6@F}SD`@~EAN=TQ4p*&pO2 zjy1ufm0mjZciK;}^RY?|bw-;2{5Aw;0;_Al+04qyNIQWS^!KOKtuwwaj#!o9is-7T zp0E`B+W0MsnwpIu{zu`Qa7FYu4N#HtQLf(&aNL+hlu3qwJqk$Uc08cK_OG1*8Z<3f( z2Bxj+-a5De_pso56J5B^lQ3q-Fnl{{aN0_h+Wiu(@$>wp-jv%G|B~tIRe&HtR-N`# z#DX7S&5D1UORb(4B6^vF(b6?~VK|xfSl-fCpHnKY29PnyAyINUk=>u0Z>7RHsD1=s zMAsradZaimJz$zGvt+GMyUUh4rNx=dh4?Zip6amLgF5mK>%;JQdbkOrWgGa~?Samq zAt5x03?$7sV*>SV-p0N8t_@tHhn~@N>SvxoDDC^2M+UtzJIQ4aG7OHpY7PdH{ey@L zIgKnPG0t2rZ+i>1<;c{DFkd;BSpRzFKAWl^!*4@xSvhhLszKAiY5ebQQ6QBIhtT@) zr@HxS;MToWPQteXE>m{JJqx19G}-FU@0rlKVRV4naQN~F(mvnPB_Yz6Prq%Ce4tG? zpz9F-V~hZG5>RS5V@-72uID9!VUm|LIb zM<@iwVm3wTJGX)9MuF2hM@$%gLj?p!^`&Q&Y{rxxr(>U2i4rylk$Q;KeQp>%2M-wv zF5aFNR3mGDY#w}UpuQHLVnd5k{;fsMUJ1KgC7}(9HV+iekMPLhdGe7#vN#fbFq>s(rK2HP!gF>mT(VlBOi$*N%d`t zsfo~KD5O>SWa9g)DARP*P4KBt4;W~&<{C{Byh|R_d3F+~vzy(!?;5o;_>GYG^ zL5?>=P!sF-Z<&V`2@J{UMs`D05Q~wLf`-l?Ii3(e6N_hk8>7NLfFYgd-|1mwLlq%L z-OT{nW3DdJQ4K+)33|JZqKDibAZa#Cp$~8dke57ExD#YB1Uouho3&&+%{IZe>sq#h zsRM^79Kl)|5QOoLl7PwbSg8m=0)3n%l~B`;NKr0x6#(9P=AgR243$OQM?{Y8K$h^R z`c64v)Xe35+^p-uYsluH8BW(tsTO|^`Ka+`=_ zQWWpFrHUfuqVjySQ$N<_j_p`C3FhJ+%VCx*eOtYhM$3P z>UtLO|bTQ0AL!n1K+4j+()|$i)P1zmefhC0&9%daM9PG{yGt>%$y&< znh@sQ^R)hH;ijS-76#Y2i}of;qO$UXFy>NpMxDGPH2*~L@Mdl4&0zm-v1+@Z1M?*O zpG4LKU)IgX8>l&q&W~55K*&PioMB}gM_0XBq6?KEo#Qd)Z>@@s_i28j3c!+txFV^f$%2W%(GP7QiQ~8IsZ3-L& zH%B0<<3Xx+R>GGm8#a>avPQ1W;*w~7&5d~^_)$=Mdxcsm^EU^MkBcrF>g5%+2?h#i zetmK!qH>ne3(?P9feY!h_sbgsrQrS0BlQc$>u16nKqX@RnZN8QCA#!xhJ)RehoOl< zujDeGm(-RhX`k`nlES`t36?z5pa4;ISpeC;M`k_$$>o<^nsKsFHfwJOQeq zy7_%VBIpKwOo_^fg4-E$A1K047^}hHVcLmcQG#ij6waMYXlwn4-5aQyvI(j6vA+w0%a4sazKsuzU_Jb z9{@~%hi$n3dEKp*hl#{lBiIL!r%HLD2VCxlO=5R z-j~oltEUiPYtkyio4fx3`-8qNND}Y!1WmZ)_1_Q%x>7K0Bg-!S zxt=G%j5pEcfeKc(gIe;5$C?6wcFnx|7-OeNqafk?fA|eoe={Ch4E~FjDIc8En)pXc za`*^zNR7BsOqAU)-EsVisGD^ze*u*u4}l@UK8DKv4nyc=jX#)yhrqDqaQl9iYaoybICM^En{;aIgzhr9Q z-@h>ga)#^_|3muzAHLE5`E>q1;*fF+DzAlt8z=sM@iTl_P+azVC`7?&ughQynK8V< z#OEiz^sed}DtQsK?v9ftr2nt?dyA`(?Vpvn{}(*s|NgkBg3peNBZr6YJ}`MGygms> z!^At2d=!7I4xTmXm=J8BHt*3Z`p07`OZ`^@eOSa7+i&L4vs&}$CKC%|}qZ6h)tbjZ>6Y#8hq_T}#y1t62}IRHJ~+78mI zj9sDku@0O?M!hDYjTGS^cTs6acvAO`aa9teY_s3^nzsfu=RI((QTo`~eEAzHqk@V8 zPk2HOv*)uQjq~8V%ET@vdfUZB)$Fk{+YB~ajwMuXNFTV(FX*+>m!XeOJ0iA>clgvj zsOxW49N0&-)L)m!rYXF+Kc5A}S;M;_r*|P4?MrB{fzn%6>EA*gn*ZZNb)*5OO#}V~ z3n4iQ7k1JPSK%18F-U03Y6AF@0E(%{CyZf06K(HOJoE@}g1Uaf#lf%21_R4y^FW}0 z&H`tw(ymRN^RVz#eS1x5Be-AIFwvogtGXHc>|>6^1%UrN9|lT6%lUNxzY75oc6-5> z?>5h*hGJ;k97F$H9)5WjFp=%vHnTnpRaoYD4RD;y`)3aFwp1*(gl;{Uug(5uTuxdI zJAgzJ_VKJ4)!AW}p};=>-scI_Y7CHq@6|s!cqxS(ktRM92E&l!5TJPU3LcrV7>~Tb zLh}+#0-vrw&YUz<1;4|>-Md9Y0s8?Y$5658#5U(+#dFY|l}H5`uf=AlZqrx62&f-q zPnqw4PQWb45AIsqf7>3&X+@zY__SR=vt6!CWX7#!XNWNLOd%2T@a|y{)!&XzV54`= zF!MF(lGK@a=n?;iqiPJbz+k?7Ah>=9QjT?q0EeB zYYfsjh5^cJ11WUToN|Jzp^CXR&>krSm8CTSh+~+>y;bMKeY32mvLN~QQ>OnKAku1Y zZa}#s+mnBNFg8#jRxv_(pfvv<*HCT*0DBVke1Q(7$>6Ky*dS3VweTR|PN5VZ%0Q~q zZjqsBeHxjNR_HzqOmKOe%9j{MHn|R@$c^aiBE|Ax;Jd^u#q%<8{2|{l3zqh6d($CP zr4H)5zTCl5?;k*R>9vxAWP#8>bMw?bxdZJamn-O28S!E1`0rrG=`F9^NKxrxJN()X z=_1>^vP8i&5=v6!{QR$?+X?%hitf_P0t;=5N!2ui39uK4q3u&gZvXjJoNLHawzV4x z$Koew0Y!wvP)Z%xOl|(00>Je?$}q3%B4m;;cd00ntuY7U*WhrVsye<%{mq+vi&N`2 z++s3BcYk!$!X(31?>#1 zEf+Ewm8*zg@S@m*e!1NOH!>h(#>|T#do8p@jylN~vX5H_B?$Pfkun$785o-MTz>?7 zXJ!a0P^CbMOKX9 zef!IMH^#p*@e{h&K?kZWR)Q1ydM_a8uuTn!1#+hUbTM38x&ghJ z^e0P^L&x$7Ba0uCrAeu#GmC`r?jY*vJ&O?PSZ>fkyg`x2ua|H2Q71vEm7S_5^mx6+ zLzjq`ykm#>dB$_MNCU)CP`B@=dG~-0GrRaTU?;Q~0zLw%)z&96A!C|URacZtl>x#; z)oqTvU`H+6^7XM(>bS^1pPpabTZFVUrw_#*8gx%S^wt3Pk4hj17M*G)Ewh{4@7PO) z8ITJUl9KPEL4XQ~r}@h@(P2mltS$xYc*8)G#G3TKP8Sd8blJmn)|UFmN{oTx@I%`Px%tg;g@xUyL`g^fXG zR)|6^-$U_to3YCj&PlWTu3&9DB+-tXC;_^F_8Hsf8bfd7B3<9irtDwuKMTzQ$I?*Q z!bfnzew+JykpEscX$Nym{?s-|kAiZrK*zwk%#LyL3ugKcUT;Ce>>*Sm9(39=FI-sF zO}KytwY+Ub*8YsIe*mtm8jY!2i_iV!R(HV@D-6yx|Fyuv%{@!dZUF~owLxQIF7(gf zm>TDVMX<8vJSci%SZqc|4;Ry^RA_=T@B>fFgKeFfWwYt1#cMssS?#H&>{Kh_!&1{tejy1?$>YH@u z1}>C01fkxI^pN1O>1b5_&v>zB%f;d2ln`a9@2&JLZO+-G{=Nk+7wRoTAC4AP31c&Y@Jj?Ys z#BNJEM;9JbE)A#Ci4!Js;YvE87jexpfu=ivIytPzK>B~*N0*(re59qmt1elYDheYH zpE2CNB2s(bs+H1I>O7C=xc}zG(OB!<-KVv@HzO}2cWWZyB#$gKLC(4q!bwk3I`}p?lPhz9^X~# z0!L+;!MfE>x5NeTNZBx^!h*ek9j@N#A;%xEc-LJ$Z(wlQWO9}?7*sibrAPKz*-5fza^xjPw9rkXa(_(<>R0dn_r9#e{8V)rvNM8$2x8(Ck#; zaURI0w7+t9e!d-hw}2N|KpIWJI~O=fGlW8WZKK)wY=sKvXZ>e+Tpru@Q-pMl=BH3Y z))~@Z(Hn_AqadwT@Pt5(?K}^=LFcUVm9)3a)yGQDuY{6RyJ>^e$-;Ax<>6`%JcrqH z^d*hUgE}6k?dKab!24liKkspTqUyi>D@8ZO%lKx&=vU~Gut)x@+Q|qI0QvHp=tFXp zOT>IV?ZdQx-Ne8Cb-Oe@(krwFPJ6l1$f{q2Am6+D)!fD{FH~Ay);t)m zmQKTKpSkpP;+#Al7}8+|)E~RA<=$d~c?ginUp(1D2B?S*iz>Wc++_enpmgT=4oz~H(x;&8g(^CZ zFQJsSGHa*EsC4Jn$>Y_^N)T)T4}c{_VpGN{cl?=ZzxJ_zUSxbIrmHg1K*6Ha+Yb~` z8FTLu+4e+@TPOa&tHw}SORt}0CCG}xA_Ubop9mSyUvLYx9jf%> z{F1ak`uxgww!bpgI{0}Y!lEW5(seFL;9<+;)ktY%aSH|B2E%rutZu&mtQWFGAY)T^&gu-eQ(e(Xo~Ns#c{ za1{fYXIW31g+e(l(mC#+&oWOFuea&_jvg0@ScI(ONJk4;eaa<_~A zmzr+lAv9WiZ{*MgPiDfK@lR7nSU@jeWb-+>fxQkp!IUiK;#PJCrPmsI(02}J5v&<_ zIC{sLt0Ve|*vvVkkCKJ0shGIpJ!;u$G#qBB2gHnKy{C1?FcIlJgvoif1~`A7U*xc? zL`e^b|274WKR)*?x-Ke;geK=G<~sn}Zjw|_*RRU-o`QX!t$ZmmfzF1$hakyP_Wnfd z*j~wxZ&=zaOVpa4b^PjgUTJ8P;*06bf#juPP(~;7ctg9qxl`439BX=7IVJj*K$Py~ zb9eM7grIqM>wz}AtT<`|nMk~Nu=*{EB{u0O{43=FA%otqxvbSD^bJJC5?ATnN1dhC z?`!a#lAretSCj6j&F3Yf8)0|C>ltO$JDyt74~U?P+(9KoVg-Sf>@46CcX!ZU80A)V z=grvZhC4FE<`8FvC(Sx*4wetEh^g}51i!2P>N8O_U}vc3p0Pha*uZKf zVZlvfeDNS_H%R?QrNNlP#G~h=!S7@m%Aehv5Xr*}O2+LIxQ)QKRwAwL6e)ckft2{r z!5J<&>Fjo8sOXO=->S#1D4gzzPlSnq5s|~rX<0#nSc)xF2M_fEsS=JpJ8Vxd_KkIH zEqP1=ec=$(aoLV6*`rV|@i*z& zWi5xahU$jefuJZ{3Po?6?amt8CF0TGrAh}W8S$DnY63f1wBdVqAnUlm^oDJb#nG@^ ze{I)Z??i+(>1&!ivhZnrd$8*B`6aW595^*#6>1^Dm2Bs->Utp`_4b- zOKJ0o^-rHdyGbcH+_;X&qu5=p+Sq$on8&kp2BcJDRxp=U#GcdV<n#s@i7v2XaveT)+p4E2tn-f?K zr3FJ>v(3BTSq{7&oNhxVXBK_qL!L)Fkd2a)!HV4qvN|^H8EDAGxraqPl_%--L+Pf! z#Jr*)lQ^k1{<1)GzJ?pGD$S8uGw{9tlyA$nEz~6R>&^LzqXS*OVJsS!`R{V#5x@R16AE~YnW!Ce}@0>YS=JAc0GlEt~KTW|um@LBYH6vFtg(njm z+bjQ7komujou}Z69@&?w76Q8bR#JShAwI^_dhlUBbkJk}X_# zZp{okj5mi&O^o=Oj$nMgeyif@%?H{P&Bw!UwS)$kqE|eQjKsGocE+Sy2MzP;Mo%JB zfsoJ;J05>jk~wVH_+;3~jPVJo+I>Qtt zaoFVY3nYo`x3apR+w2rZ3cOmJ>U~P%F!mG9zEmg}?lljyC%$Fdm3vDFrC_}Gwy>Ok zgaH5Y$KE6=8!fgmdztfoEnTBe8JYQJ*xe-XVl5&>T!RdyTm3g>5kwR4CY&;9pDWUB zlIr;}PDhSXDF@yas3F8DBt%6)Z?aZKVs`Rp6qhZlP$EA*w1|84@V4xi!@uuuKbp@R zi;}~Z*3Ra#PJ@R0ea5B*hiXHT>dWR2LL8S5Qb?oDG~Z7q46~&zV~yEt$>xUj9K*A; z3l8u{$($bCx%n!a(DuSWnG9HET|e_J<_1M-CwgIcYdw)glv^wYBC7K45S3|Z6O_JF zQOcTyDYrDmgmH&28Jpf6B_=*&UD$b$&;}rkEWQ(P{hF6P!T#!XhUOJl)s`KtG_n73 zHdC*?*5+wo5C%^iytRelaqQ5ib}L#_ae#9M$fbAu6Y%~IbXJWix1DqHmSjmB#I;~r zEcA(PbA7ew^2HzwLPT+2N?!kbPij{P;uD{E$!xk+@Xb6A+wM9gW~um!;Q#haMTxRb z!iJ|OtN5DTvF0W_C!*^y<rQg0sD0y>9B#)YuIQRb%n2-HK z;M4AH`b|`998(7mmDz>r#s3Kd!%<%)f>rd@oQRS$h%g~alQ??`h-XyuI4svEvK32T zTw@L#L<*)A7j4BkxTo*f3l6-Rv>rp;r&+*K?VLB;lvuQyHUcY!F`NcA&B4DdcOtWb07}t%a1$NjxGi zf)CM1Ou9+peBj%#Cj`LS^UOLv*9${9-&id|S@^z2$CAH)c&l;n6H(nFOa6-QQVKD6 zzr-IUI-?~Jz7vs=;x1&(Rmmvh^_e3}r4AS7PV^Xbhx5X=i6jZNg8wMeMO3!BaNA*o zW9dhVJsrM8l93K{#f9S-4SP1$A;1wkl6V`DZq< zDs%4l+hWl@)@E3`eZ2RFtjr>fOz*X0Z=l}oHmV$xbuk{t1#^AvZeeed}^^#R6 z_kQ9M_Es3Ty0E#;YUcjxcZ=9CrFQF_Zqyz4SH=sei;V&)MRcS2G#7e{@S^S6M1%x7 z-8BRAqENX-?CM)%LW)wZLet3<6Z8uZD9q&J`1t9r&A#wiDPNl0O!LKe^2IoUphLO1 z{VUY&C$NK7Hfd(AA6a@b%u2LdqVu|G-^zR+MR8oe>bjL=v`Lz(O8sLuq)Kp7H~GBv zB0p#-fFAg2% zDNaGAvoCyz}_g`98XkupPU7=0iX!Rm+F zI{l+7X*s$B0>5aV`}?oP652j}2os|?47Br{`tMGLf0AQD6abcandn}p4ty{(Fwv&V zYY+>3gQ;hKT|*#Zf#5?pcC&&HisJ{=@Oe1Lql_p;J^B$xfucCTO2xkG}n@FsICdy#LLH z;NZjcVy;fCmLoMgEj5Z@`yalnNaYIwk)>av{!u7t;@WPD-6FO;4$?YoTni%&L#$^$ zNw=cZ2h&e0Lk2`EBQ1w|rJN!=ACp(o-s|j`;y2etBFY+F$PQ!^L^x(c4=T5+c1(*j zti^ml4++r^s>8y?0jA~VHxelRx}#^|(9(cIPtlF<$#hK1QfXM^&Y|8BafEt~kyuLD zbh;lIZDK3XZjoo0$Z5y*^l?0UxFu4PF*l=uG`Ne+G9~}{W5>Mnt$>JD{%CnWt+M^i zf%474rgj1pTszf>Q+|cxO#O#L@k3ABiXI-G6(Vb0_%>I1DWZJS90!Om2TnduA4}^L zZw82!(}&E<62X}8b}8R-u3dwtmDKnQy`ojfOFHkfMWQ^Ck&ZJ#^r?yuZH4?X-g02_ zV_)M00ruh-JEo*Avka*+=(c@#;A&;2uWB;9hGLITr^bhdH91}>1Os=KU!{DjwxWTLQD<-a2^j8#0?gS_z*en#Sby_cU)$vF*^a=&I_ zow+G}lMuRj&`#tpj=Kfr2D}Z00-N74JfpgbstKchkVH8o6_V?Cq(Lvu45kyVi*keG>7aX_HM+>Z|*5! z+yl3Xlvf zejgs}_xp*nd78wA4YJv{7%~!eJ3bfKd6D7!rlGvtAzcL9YWy8oTa%(p+%_P9Fsj8<-E^o(Ya~gXg(r47zNoFkv&%CvHHD!iFIEDyK8;rEu`r@jE|0v= z3Z%~^)%D#~dT|*nd5AUts-kDxB^yUPYx^$$N!N<%8E0oz-gT6<5M%3D8-;xGX>(xJ zXr$nttWLVzjeJHZ<0m6oPCa@R8l-47r9V=u!k0(ynXRcj&uc)no#bwn6;D#R@PCHj zJJ*SnbG|<=Dn^Vp?|d^2<=c%wDG^Sj(p)rrC2G`XjhEgl{%f=l!KzZrw-61I>JR!5 zhB~dD7{y#+Gb9&PW6Ota@>IlY{w};lyO<5{t$WTDk!k9wLdAV^S|C_>VA+gQ+Pw6OJF{>_Nobrd#eK@|w6}?GkBbs`00KsJ&Y~`j-5Sho zmiCpL&fhhQlNjYS4e3qL!}E7F-$wSu$m3zHD^-*!w5t5{ne_p9bM)52Kx)pHAP0$r zSfsncT5LT`{D=5TZ%wAM_2J=TmX)u8wAjlaZDms@oI8Tq$@)EXv?qyhn9f%`Mk_VD z3NUnf4%hqv8n)DYzsTIQ&Uk*N(`&hB zi~)tdJRn|A#+S73t=&Gs-lj-hJLT$hiyh~(o)msT5k-CPCq#{LMvo+X69w4IpP;yE z)h%=su9JtFber(%)NVTl5>N@#f`$6AZaR?u9u7y#sn=@WjY3-Zhcux!bt;;uBiAK? z$iQ6Y&G8w+!>4ibM}W{VbX1YAhee~8*PU`6E#)Xmqa+ThhhB{3MrfVQUv4k|c+XMR z7sQ+?oNG+QO!$+bz-(}m`31eTKp{zzH(?r0x#>g=xy#VutEiXsjJpZO^otcZz*+R; zK_OnDs=1IC%bWh^Y^PDVgsT|g)MR~cv5k2ZS?!<=9M{a8)6}nR*rbK=i52522XB=} z6P}&LWI^p(xx#wsPdS#@!enY`&JxwbKZ-Mnn*43v65m9>i*xzJY8z+l88!x|{i{JH zd=om#=~_f2LG}iXX`V6_CSZEtWMUz(cinQgM6bneEyC9z82-0q3_OAs?^0I z6KH)VO5DHT3shijdemwwc9-;iPKCdzai$PR0p=U865EJ1?tOO;;)3<(h1!@pkEbl$ z5mHB)K_IH=n5=qJEa&0wLNCuDOmrz0pT>R-FhJ&XY+K|muBhai5^?!T!)(Ix2jSae z7Hgf}`ysvLR_6#IkHER7{GB}#K5_&**kp5Q29J#VVAmkJWY+&(Xr7RkYSNKbJM!F#$2hPi7n;a!)Y%brFRx=G|;%$-wje&7-o*h|dqxNJl7e{>q zqIWgo1jUYl+m>>zz7!j+$WItTu`e!a2u@wkN%-6JbxdVnKe;{+zL9?+0CN zSzs0Av_3e{x|wn%h26f31)6J5TCaS%yVdA2;}ttvAlvOHKn_CQeJgsX4@0K=K}yK? z7>bpA{BF9bOzhBgmB8&LY>iBNA8cb}jkYeQ%PYi88V8B(;}OFv-+i?f|4DY} z7D{;#$Fj^fAVk*QL0A%v++r;QYKNbr=NG)1f=oE~K%jRvD(3CB9 zHdOk-Zn!lfJoOM$Sb7`cPqg|{ZLdSvr@*Vz??>^-Xv!S^SzEhQ{%Zws8E>fw+6$b{ zJFAvMh2qYdQpfr<2i4#PC;6{O!useqe6&)PyR2Rn_Qj3WvIiz83jTBhc{qT5o?@*)@TeiPA*-w^ax=qEz3DQ_^eYDM&1@Ea#Uh57 zSyn$*jTk5LuR$KVa^L$f;}L!N`J1S3ibceOK1|@%SB?&R0|plL>UpGk|*3w7VEhSGJ8tQcl((vd20KZV&*>3QsyI;2@c32s;6%) zDhn(ML!2qiHJs}FIzt0&J9Ie4PEvh@gnmHrWNHvr$p4yZik)O}0sjTFpNLY21YqHJ zzW2Uc1_nKDO7geU?4_><*bIxJjhXx`j(=9aiwAir0b+{x!QtHW1R6egs6I?O!6W#|d0oxN+EbG2u)Td#VS$9PweogWPq-zx-#@;3$kr`PyBK51x@k zq1na>z-tD6B99KEJ-T=dbLzh%gMs*h^XX%v>RF8r>&gY>YtJuoje1WGXy(LMu!+{) z)-T$Z@glyf(rXY^2Vpr*AUV<{s!!o+8oZZgFHI?*WY(BjTiZRW$Dy8-hY zekvUnm;@SdqK(sJr*nZeuu*OlhAzIw&HeQL+&t)-3y@dQp_sHd`EGX_!hfOc3JCB0 z+3ts$DbcAX|I`A^WzxAw>SczJ{o|1qCERb3(L`860xl(buJpIOI-jHA1+H*)1(q71 zNcbEQDIjB6$c$%1H8>ZT-p|DY+TA0vP_Od_MR=3QeZsnziaj|6wr8?#fTplLjn_0u zaZ=Za}Z9zQ*z;}C#8Q zh=prSYHK-?0=XsBIdOt%Y*Dtq+&KLq%O#x{k_FD;hy&jn0 z?&eT3<^2u21!((r{IyIJ=;$8)T7K}T!N6naPoC0PpT7^x7>rymf75^+yUMJ+29U#p zsWtyAU8o+ycV+=TsrDD2G|jO`02{LBy=hVhv3-#2b^iLsFZSv;!-vJh$S*GfUn?L8 z&Oemq*o(asn_fa4VY>JJlf8mfQ{KM{^y1I%TE!BxKi zLE;DTMDMh@7WUY5pN{i$??mz;Ge-#(OIkcbexmA&Ofb1!0uhRMy6ovY_uxS&ZJ^O9 zShsk7vdw!3ggn-7I*)kh?|=ixKAOz1`evLIB{4FHK%NnHhXF_-L)HM@gX^o>+oi_! zZk(jCL9HEMN)WJqU1!~+ea;~ps-tq!YI-ykdX4utXXtXKt<4btB zv`%cZZ0B;vPtml;h&?Nk+xIub$9O(^o&-oJd#2*YkypUIl528z)i5(M&w>0uL! zExaHrcrD8&xu%D^j9PZK`H^n1R+9skTFdR4lG)q+K|#^C*5uc^1$uwF4rTG55S{4v z-x*dqJeYWq>Rgm3NvQz$@kka(MhIU7D!%p{@wlcpC4^?)i<g9HBvn2FaiU)e&etKbW`wQ8Qz=k&{)c#QKdgLO-3zN|tWDqVwKt%lg;r z({%#g<{h97k(($2q0RkeAM+oZ& zFu9pQ)o6`G~m5BhL{^%hGQBJlZyOjvqms$^D$O z`1+KxtZQZcJ$4{kn~BNpnO|GKn2d@k9V)s11n8z{c7LP2HPTuZ^EFABkAvaAWsCo% zB|Cs5@C*ea#o&}5ey8`w6%8b}-aTPlL)`n#kn>^gV+X2S_*~_+9C@-Qff15t{lq2% zvd3=MK+mJU zL*Oay;f+ZSBAlsqoQ}4#Sqo^hg~E`F7^*Rr_Q1hT;QXK0jF)6F&!e+fk63?xX-#;EX)JNy$xo%3@t)@2n?>!M z>NM?DQ-=6U4<@&u#U$+EF`v0YH48OqLG4*#ld7^u#GT`8oMs?8&ezP3@z!}&)k9iDoz$xibxU6l*V=LWsFu?V$7TudF(1@2|k49OHb*%x}5FXZZiHAL(a?g1E zMPgIor?%(SE8AUdhp%?09}gX?md}X-V52N)>h_vftlmtG;Xm)C2+pdxF5={0K$O?; zhwH?ug3P6&CWemBI1WZ?qrvp7`HxlaEk*TS9B-ldZnrku-9AwQ7Us~K3_LVtacl4b zTQ32b#JxQ_SpO>2JLiHG=(Wao{pvhvH|6U~^!~_`E<}uMbpWVs*cKcL9%37!Dv^F0 z{h~7a-Vfh*iA6W9S_5|TF*w3kudX}AEVUA->BVw^bKsNF6u`oITSLi@z-c@!QnX{T z{GxzE#wJsu<}|hh?VNW|`yd+8-Il&9vxag);l`k8-Y+G7DB69$m%P_JRyh6&(}{8a zt5#EMm+4S6#zmGp==jOlX`!?_q^v`Jo?%mvSj&EXO{iK=g3e7L{cQi!*+6sO##Gm< z!0>qxJ@0tqLEd>ovP2ZYJg+`7Do^Y66McWcOl5H>>?50hlep?f&4}j6({9nuf7FN?e=6?I!S{c@?stly+6lkYTYuHF z9*EGdlCRgE*JVY`If-FVP#4LwXLhFf^(NLCwp>+>q@iI`m5Vv4n{L z9s4XzrKBV2v)lv3nDv>J!C;Ctorq9SRX@))R1Y89G^IgDFz*r)a%!N-V=dl=qlEEM z$bs2_W9f>EItTru#ZnBA6_}cD zy1SjgZ^Wa%!5D5O^>~DJS;*IMz_=JjEPO zubuaa{?%>Ngx6;y9%B5=yBW{FdnZ8`z^ZhJxy!T@o6;?MdlOF4QZtHg@-N6**saa& zyI6UEm)&EM)!9s7`$+cgXWQ)3S~X$DLviL39f7BTlGvV5Zs<2V#9CqD>>FDCvSSCN z4V-1pd8hGmt9Ma(%;+hl81A3BOUtb5iCerQ>9mSzIwV%*GSENEUbGCxo+mZ93Jx2Z zG$Q8gD(#5-Eq*z6@C!BwSMm$z4l~|t4!af^dO=uC_}H@2$>2yCmdb8JySJi3sc^Ze zfFu8&l!qE~nMEwoA^A@7MP6a8@7kZueI26DmsXm9|9^)wwh7@b57C zD(^Y3g)@JaeMLa>-Dcxm^vIPb9UPXfThZ^NQf-;?WmT;3h6Pl(!~pt z9TDW%onhn@e;L+(pR`$b$tD+*hH98_Q%UHFKkg2p)i(Gh`r=`&$koH(sT|l@ZL8x> zWu~#Q{CN6!6Rm@0{&!v^L*>jB6Y=`v@n?epepMA`HVmP>?Os?r)ao`S++}Z5oqb%M z^RCJ0p4z+)#igMVsNw~R#c^qX@1b4H7qRgx>i{X+nHUt~I%&yHub*`bAQs}=80c#GTEc#+wB5zR zPgG>rO&LV4GXHmTv7ie{&}^*rrBo-TS&p_6qUj86n#&4kB#F~V(VBw(KLfY_*`cpS zOiq(C$|h`(_4Q`TSvH($ZM*Qh>K0g$QN0fyA`PRK657UuOPrQaG!T>wpY*V-esXz)g|IyrcVt1&J($EA&(hPwv2lyT`z3<8$lE;@`jjF2X+d@;d)# z$28S$*`8C<%KnKB4)c5E@6X?YYmYxeBD$djU9u^%FzG;P&!hY4=v9Z&S6@CEa{nc} zOxB*5iFFk^F7^tkPLPQsdhbQq5s5f>Ec*a=?Zn@(K>Ekx8W^sR@wbgT{LjY_tN!CF zf(PJpM8VYr)m@$Ih+8U57SyXF4`b|axaqyAea@y&_}~9LSd>}t!R~Dl@Ma@G&vc|@ zqp754!p$UzFxLtUbfjJL!X@vYv)YG? z?GOI>^@7o2gQ6rcs$553VN{tJ@cj3;|M%8g3^aJGjc+La7|QQH2LgdY$+tg|UGU%q zSyu3SwVry?r>&Qm{#}|5U-xfrRB9A#0i$1D!Uph%p=kCsfV=7Mjl{n{*nf>(0sZfW zH1f0&Ec*Zd8h`Mx|DX9i2HP=tqfgbmo-yX_LS5O39)(y%zyob_II@9+t$+kmJyEU^ z2o%GUT!Dl4K%^*Wgu<&RZ{ z_}!+#Zyc`k6-+|}fzjho!@iAZ-^|sT;l8-*MhdxB{nPLt->)Ie#0)SykEO&3ABtLk zK)KHbV^eZPXp(ieU6tyjb5BEHY`iri*Ka{dTMX<+fqj4-aspKgzXqW<7*+9_Bf~6C zR*d@8II?YXe>_1STbBMUfwLh&H%>0O$Fju|!)u)aX&p!| z$ob}pys$KA>*{alUV(%ZfI-;n>SUE#h*Q z{WbX2Zvn=E$nzN6Vg+BH=;1^Fm~&zou%?NLJ^QAc+PodUnh$Wy8OJ>&whmftwXFxd87~5 z*y3Y;Cve>v_PW?&n;^*SRKe?YI* zKJrjUMHMjAs}PXq|#FTcTR2g*(!SR__YSG7JejPcUW6E7@)U>%fsW zPkbO={2R(0`WQ=WpEe~>PuMIUe?h`NrhdS17XjaJwm!*d&tLXEQ$%_D(lJ9G3kD4F zwRO!)2`FQvKR)-U3hK$`7b1uRbeF)^A~9lrFXa!@o2E)U-W%`05t8 zz2%P8)XkuNI=vJ|rX~1EQ!G1~yBV_L`T+l6>C%<|?E@ozkx=E*bOfLEiCoJhIMVx& z5ThG!5%1s9Rwttv0$eyb(;_L?dGP+WmlI>YX!}eaGjpV7Rgd8|!Z6=*sN}kjDC+4<6Fn$&`!= zTnW;4zp*w10i{FI3DS8aM=vv_Cq=5$gw@{P;`kd?A7a-V7}6O{JiN}V>P}_=m%t|E z_aL}q3~N+u11v{wGtV&pHaTPvbGVGoqu=mbeY2VnkRV`1HzbvndBPmVRghl=Fh~;g zc-kEY>R3;V7~JX`pK)mO{NJ zDE?=Zae7-LI3`n${m{pdZQ!AYF!LZeAU-aK-#c5Jx`ho_uanOLyGy|_viRHju~O&x zThB^?&X4gfd}sCZ(yzIYF9+6OX~@Vsxc}xJ45fM~QZzN1((uQ2Ul_@k+pN4sS1or9MA)(TQPc&SdE~I5ZozWz?n5kPc5o z@`pb_TG-oDeA>xVAxD_&)yJcnRsgZ_9LK$V+ec^(_Id|5JIU~i#Gz8K(gc6SXR##M zrR;xgk@@-a@$hf0A!T$*HrBT%umax`kgUnZgyU(0IpmHaL-oQi>#`F-6RQkLxUJ)> zl}tM{t}{2QGN|h@1eaj)_D3@}S%UzG!RxO#ut6GRkH+uUe5VA-y$S0&O~9h^_S#1wcYj{6e48gem2u+N?yiGBf)j1@)U_C0kr%f-3YO~m$+4qm)_ z!*F?%@t!YNmG&5B;()f=@)Yl6K!SNuPDM_fT+1PBst)wj&9EjA-k%LMlw?G=?+Od)p-u*cJm&w5+sKs{l`-gG5_>uX(H(Ykw9NT z0_}Ey`8+jPf>^Bchz^zCx$wJWX4=au=epNL)j@Ayq&(lC^FqM}94#6J-}*#H!ON5~ z(+vR!Z1j@~4vjpcT~=7fn=`i#4)^m`4{*ZqboXJDRj!_!d+=kKy5QdFhuSp9R;k)C z)4L|T-_OF#<~n5ZtX}j$%g{-I%RYR}qwWyrwfqdr2W)q8D<7Qp-s2=Yr?Z9MLX(+p zd6cbLTHkL8DrZ00qO5cVjF9Kon;;KxY%c8Gb(};ZQN$nyH7PqLL-;Gs`7)KYsqgmG zcCtSn|DHjz$6mj_Vt&%gh3EeyhJg6Y!Kj?6S9D#TbFnbC2L(8RV*0vXkzKw+EXQLo zqmGuy2x{H_%t9F|WxzocMOxNb+;-@nCk<$%3wAVQt?GG-RUE$$W`Gc>WIfNtnuj&%Q5 zg10a9wpp}>ey3=vaJmWFF=PWz?%r*;!$TyI;OP8OGm-Q@)8(ntX|eX37B=g4HZ^x| z;27V>M4ekp65@xnVjkPwBIKAE!GHhg!O|eWN;)@;qF*_z8GL`X5Nb_y_v&4;)l2H1 z)=uPC{TR?08PJHHW_CnT!w1T=jL0o-nT1RJuyB<+pTe_j|XL(d8(Y8q2^J`XkG0e>%3kvKWgy$PG6gf+c{RC1-jhr&IKH^xDmb=VqLDwpQBXUx$O$ebz z7Pejmyhs)Ba7{UEGf1?8FjfknX8Qnm=`Z!pD_zcNXP(#Dg`Au3zsNk6&!q_ww+4Tp zL!AL0q^cmgFt%X@&XHANRS7~`u1|?WF5AWjfjaEuZ4U(H^h-Q-EhY}Q6zAQVw~Y|B zER??EWGz*cae>E}j1@K3p_5A#o*JjL_d;aMS~7~cKrko0PT~B-SF z#_&k{U@3JHI4huGO$A^f-@bd`W~TM4*ZmF__5!q3W>eQ%wjZt{0SE(L1v6^OaTn|; zOoy9v(-hJ(>$4u;iluM~qHdK;zU8o^Pl<*nPqD+mS|PP<@Z}xVq9+Jn#(?B8v|+*Y zoQ>cc+l+!HHS@x_b6B~p+2Zj-JUQdr0ns(0hF^RkkZeY@_wh{@ptF90BlXx_fzWR8 zRGvhuUn~7>@j>lJ2l4hZiM&M3Lj&nIGT5zzl*a?D0i_nsHbx9P38}DVZbT!E8Lej6W( zS{FiVFVa8?3rSk0??aSvu5~7>W!_#$nM_Bd%mTi>CTV$naC;tQEl69YXw#T)xP4^v zl^>Z~lYP%MpxAR3y>l*$|hg7<>_nlnZ;Flfy+L zJ#&SQ{M+}?*;H1`br|!8L)Z$BF@{Op8Et8^I;L|thzNOIohS_GxjsE|l^*`>+T~In zh{VutKRZ09mMH4_fp@7Vfi(7_<*37F+w>mNa-G5VbK!GA9VGO^UbBQhA~1Z(pJWI_ z>=N9!rf64``T{9E1iGW=QLX1rqG*>2-jlR8dcdWAuUqmwTIq(d##qgrDAtvF0LPhj zlG>abl_XbZ+K^Wcxg92qc|zreYnxth(0_;gVwxAVQSTKb+b&z%IH|lA+Q2+{f=Z0H z)*E4wj%sHLy{q13j_qjY2I;p#mw~Gk93Y#q<{vvl)5i|JL z*B*X%UkJ{}>?eucvy#4*!!9tRgW2jDSwZ#GEM3F3^;?$N?YwY&OxY#6A{V3k$K;yJ z^4i0%y@?c!q8NAC4#|!4bHeh%7WeQ!9EBoMZcg z#OF?i)u$it!#+qmCelITF1acaR`5O)`v#VTi`AMd7xO@cX|mK}YUv#Y;-&F7HpKZ% z_QUXYPXnj9ExFU~bi`(U`6xW0$cfl8YKaOVK6?O$sx8SmObHK0VL5}h%?_pE*eNOWV zcEOzQJ!O5IWI~UG1uB0Bhsj;3)YdSi{jF*6*=S`c=VfDR+?Q95?3Q^s3-VccvRDT* zVtdEOwEi)tZS7bcZ0=|$kPjDV-#c8FHm`8rwc|zV_RBV@@Iz6beEv`t${j*($2^gT zpiv*Ve#){?O6@DKvb2P^_iMK86ziI?&A7aP>lrlHs1u$JHu)&yVnMmd#mwL)RheHeH@ts= zF#EHyozs0?Z_BEb~+{SX(imB1XPON;y>d`;5wj7hu9Qj;eJ1+CNcUrRZ zmo3ve&6^V|{m8Z_-YokgUIgoR+&BHh@y>kl4zI|guiP3f+XMO5FH$Jh1=RnRb{37) zmg|c#cf=I4`rt9b)CizM9PJEVa#2`heFsVOKWyEzpiZ-!{ zj3yHOEFw>mdD}>$eZLu<O>ikUiFC0im zc+dVrXIY1~hMn+ICJWACWCsFOx<~Ja5C`wkxab$W&}hH?+4f2@o26@7j2;%cg(>Hi zEP=4*Fyj%NB3W4S;o+kv7$k;auVBhCOAuNUm#@Uv*k&5K5`Wr6wRdUW$u`IQvz2M`)A{2rd!!94e5UI59VZT>7GBH zUwt(Z%eaS@P@1??+mm^MX0?`m7A)YqF_94dx2+H7$}!u zPq^LZb(+G)M@5g9FlnO4$zVb`xkdQX)KGS=d) z{H+)t7x_`xY%X@MqKwPpoSG?dH*r6984>YH7VZq|+K-V;hW(PFxkFOPVNcdCk6A{2 z*CzX2DxAg~X<9iua?(UD$8O$NeL`*P+9Z-RGc43ms@;P7%YDzWtiiIs2{-?m+pB@Q zRl?1=P}<%@H=Nj%95d(;zKhoJ6+2(lmbZy*crWZ@T;*eDJNvjd_;%J*1Ub6ot?K9YUcmF0$+`T^z}wAEcURV8~XH`{tAP=QdA`> zC_FSKREUtqRk5M`KGZ>c;^LA>IAWaX-nyhkyAI|o-42$0AIHy2zQMKY1j@?%Rz9OF zujABE{)M(r@~n$B_SrKMVS+E0q^x%07VWCwZXbyUwLPa~Sk_zO zG$x{g7ux%gzSD$666;mnpD_WuP12DV`je&Kbl5#8z7dyNP~ds^-2M90cM~@X;#4sv zFpKaV!zJ~Lk9#}CL2c^IcFL#xhP~$o)J1pbR@~|}a-Zh1wuK)M;&%jgq3M&?vHXBb zzPAzOgrI&3HD+0(4WG#?ZbEA(jZXpNaY1eQ+aDfNy5;}W$_)xH!CVj1t1HfH4c4oYNfwNG zGCI>kavC-mtG3hmU}6i`hsqi^Et1^e*lURL35Oyp@AXt_2c0RKw-ugpsy&t53omQ~ z47ObsFgm1c(-XS!Sry07@Ui(9ZuWBAV_zm6;dKxg^OeD8#ngIItdp>?X&mdR-%`c8oCA4Gvo7ACY6taDQws@hOsPrRtG)Frg0J8^@fIdsBac&RZH3KAe7~sIptvGl>ZZ>kj-P{* z^DBKt8AgV4^`tjnN3xnZPZP}u>L%O?j%?T|!e~*wx{OU3-HT%6-S~BH!L$U$1@#kO&CKAd2gCYLrKs8#Vyn&?a^sUIsjw3=w?DB z+Kz-jnTBNYF>(4Vsqjq0=q)VXX6@$^O_hg2b0*)9)_h!!Z@u*A1P4uWA?NaMqE>9l z#0NvJ3x^oY*sdta#fba?v2;RvK3__FVU$&Y;1l=hnUmi~>xrL@k{0(2u(wq`v>b4h z1gTP9snOm1YKg{9UBE-7%r0}{1X|zX~InviL~w7^q@u5aPQUP*yoRzv&pEh zOXjhB>iS`DbOL=F5n5bA>?>*P4<~&NYCUH3?fgAFer503?NuTQ8styOq!V|_U;oSs zf2QrEo~W00H$ByxsJk#>vosBq^>k(te(gt~V7%Et59ph~$=aluX=xKqzSzbovBtq3 zP|_%U?r8KC2z<1{Q%g3SxalrvC+)t}`tlj)68UHAI3q^A!%=8jOc%xE^W%JEyt~~R z6DTLVdPVduzAIrp1iDYUd{Sef9B_Rfw269hJ&DrhZAX?uY5$^7KilyR#Yna8C?SnK z&8yeoQ94*A$x?zdH@AC1&L7Q|$kXNDe0<4?d;a@!0=Wu<74`nk2QuyP z8{d5T8{trEH&XBCb}L=9<#DWnM2bJ4uB(~b1f5pgZDef4y_t15q~XX>ceGyK4) zMM>zfbf0b!>WiuGhgM=GU3PL3$QIV+yE|HipJ?-<8&bGw;G-LUsYv-y5FJXbV%x=> zIO;?kd0eh5j_$(Gntbk9%B7{=B>>L7L!C5%)03UhYoclU8ku?6OW+fosFjy@tvS+o zWeMj@A~(oj%t2eaN#U`Z9#K|!825(?GkwkSYi7g4ZV%5bOPtwFR~n&AGTJ&BSM54W z-Jhnsz&8BbrYdC-NVZBdq!)K5hZwjqRu1c}xT(+Hg1naSn zB-ruY+#YYGrJlEr%XF?EXiEpFK7#J|?RQ!y^f$K)m47Z>EUp(CEPY(1t8|0s1F`f$qW zP2Vi}M-eVd|7c>dFZEjyc?`kPibVt-=bXmorGlS^wbhq=yTQ?8zNf=m%J`Yf>l(UY zhC=SPL=hTuC}5Y!c!dckpoQ=SV(IAK1*oVkLM6Xi>r?elH;6iBA`0@=Rlssu8?R7G z`dy%L6YYzi_U_NNJP(o4abi--# zb$Kgpt+Q2y>$Nr+0I{oaau0tMLK(j;>NnO%sVWOi%Uq1LD|)L}@U>v;H@Y-U8xc`T zFCItCMaRq9Ee{6DnorNaU)j%7Wnz(4)SQHpJFn09i_7&h6Jm1m;jABxnm# z`Ed8Ka6&{4VTkrUn`Sgu3VCai8~(pWMQ~>9KI-LprS!EKwe{$w*)n$J5DTN<(db9% zs^nVA$Z>M?u50StdG?OEWRP&z>X4Y5X3c}%RZ#hjWak<%;eF*RA_PNZAD zia(W7MubU8HCf3$Ayc~9_zpj8fcvPtb|bU<)oW?xjfqNMlkMC2e@am}=hR4Z^*Ax9 z^uHQ+%GW|NqRF=lOQk=y&Q6_8SR>vZO!OJ?(>vk?qe6dTZSnNMa((=k9*xIGh~+h* zP{40BS3fdYecbe1e#MrOH=<)-e4m3UC`U+*#Zz(2mh&_9JOCf_%yBFD9iZ~k2NjvC ztPXoIupN2EI@#<5MGa*1XM9Kt+V3|>VT>2-@Qxc|e>H5dyiL7KDlH+QNfYOmFZ+XE z6>ej4tRCH_SqH*(U4Lo&hRJ3kT|~{7x=p|pPVOu-&<4h^gL?t+Dd*^L!ggi*3ZTUL z#;o5LXSua+FyWxipkb&z?{*H{PG!Q56Y#;|^Nzr0Ld_1ZJ1B{wwZH4}MaT5Yk$~;V znorGuURMS(48mt8+Gb*zCEw!H3@^YzADeP+c2tv5>XZ4d*vC#j_Vl*7$8gQ)W7X^u z2qMB3ucqE1Ze#js$zP_MbMXyf&PRJ2IBl%Dd6V;5z#Ve4RB|lQj&GGI;?nA*z<^a+ zgvJ#dDtFN;L@m8M%8gtzcGJ&AgNTrmH0A{cN04C^zq+$?Ai=XthEM2cAG3P8HgWvqORR8vH9a>R`yCeD|q zgnQgF+~az)i*>w);fift7U%KX`~*Z)?hu0l2pp`h)3pc%O7Gl22Em9HDort)>Kbc#VpeXtdFHcDdMnF3M#Ye&^iQc@y8P=V6W?bY8WjZ`{xY(XjnC z(iP`*5VSQQl00e1D>GHE8N-t?V0)r9Jg3<2c)cZGYWgkP{V+X&yuJa@DQgtWdS0q4 zxMBsrf*UUXW^=CA-quGBhdUY`9j4n8fLqClBo={~gbTA_BJ8)1~Kz zg&Cg~pseB&IGKeXGrE<4fPF3uWfr+eLRKhz%YtWMK-wvT$?erJGC(WQ*LuYUXp2vDu6{#B@I;el(M zpsM?QK7_{CYQ)C)6VsII`PM)MWZZ18Yok-D+iGbx+(EU%CI8DiBRJ>8ZcVbIQ!Z;H z+&O5v8$G)mIi`_wxq})m>jfLgEheASr&{+#Rl&!~&><*d59nSfVO){@_~uJ2Qq zIIzcUw8cNMql{y5=o*geZmWJ`Ka31?xwe0~%aS>ic&;^B)>aE!YsJ*VO_ZC zGKJ9FiH@&XxMI?y@`%BaB7n(=N=T)!O-*&5I*Qn?FZ==`vM6g4vTbrNec_Q$<|w?= zD{>=IJbnyGhwRjyTUonO`yTyTi7BYmn|Yf;bfT`^sF~i7C}$}E?m*e^BW2U5Ov(9C zBmMUh8zZ$VW3ShCHssN*s$5KqCP2jH=%Q-f%a^BjwBtPxVolmJaVJov z672WEs0$aIU2@*5jIH^{4d>S@g_b+{W+$7XQL%PY#n*frt4|-K)GWK5 zL@p=7fuLAHvehjz)}=@*nDqHO6$YOI4w@tLCGvh*`JL-SjS{eshHa8jSIVPzjQciJ z?s1^S#8}=eZ_~NDoXKOWLhqrkZMXH$KJlls{fEHnfh|1-nAUs5C1iALt>aV zLdcGcskj9na#_)(&sS73qYhr#2}Ep}X{*}&jZk=-3<;`vak)Dc#17kOH7htI<ROde`wV&#uO>jfgeMV|CA!>Ko1giS2^@#exxuRrr^h2m;Yq>{FDoV?46$14-%Y!q z9ZV8$yCm9rO*cM)C0;uW#f2p**J7Qez@m2dS=pT{q$NF7>I?~aDZuBy5m_y?`TI3-#YPYYVR@dAZc*NA zS%^Tor zNhL|^9PYHaUc;Mgv7JvgQh z`C(vWHp+1Z-HlX-K+-NMyb=Ut~l10%|?lO{Jn@A$R>imti zu*7iIl4C_PNF#OZE=PRZ(h$mq`QuAi(S@ti~N z>fZ$L>d1W^r`$A6AG3^7R6U&q4tnvd-*^701>iFE!7Rg~G;U$QZ6xv{?9V{SsXlb+ znr~?V>$A9s>$eZ)eJe8~Zpfgnz$PKlX z6Td3fm(6#zTD)mo@m93Os{5tX|9|7WuiA#Z(I|wmFiBRnVT+_9ZPD zyYv&G{1f7jrQe?w0rh6in`m}i?Tg4 z2o`6jKpZ>z>|BW35JVFVEw@y`UMx21D*kl;J>5-DLRUieNy=s1u^%p2P_TKaDbjc8 z`4f50yY%wd14j!XgN=)f`$^J@Ezv?_$4v{7A#;`t!xlMm>T-_Zu4)#uKj|y)cNzPl zZlvnF?X*Qs`|b4AGVXV*doJOk$lxQEQ9H`hyOI`K1ywyRS0$!)YW%^jVXATAtQNA1 z$4@Bk`VFTq3|H-a>kS#~9@jPnx7yJw5Q=bk+&jt(Jvf4U%1)!kiy7CZ2I9|aJWRf< z*%D74OE05T)`%uJ*r8>m^d;`+W9kp$foH4Dc**F8;;gOQcdnb9bA(EcXF#WXm>5`` zD)pLK=zmm^WBn*yYfi&Z@ZD!2Fk~Yle^QKbUhO;dZ&$%FRyMC1uJc|zD50&XRjjDG zrTN*dsK(@;PvL`zuKON?1C{tnEl<51z9oZg6DxV6_84U6Ufe++;{qwh$najVIwg)> zw-{QgNehF#;ELSGtB)8dr5(=<3kGbT2m1|V$ort$yZ3JqrCfTVnKqv|6IO6{{y$DI zkq9Q>@UG}g;LVKNliRRqyEpMc177q7`Dy=Q@}(xm`b!H@86TS#leiU*NVa!YAE~pk zh9?}-M~iT-hwEooqKy5t6+$e{LtXHGh&3=GW!~{!*e8Sq&jczykk)E4t+E=p`^jJU zk%U=hjPx-6<9GveNv3eTQ|>FDH4>%9c3mMzO>t$D5sEJ2s%wVV%MN=_}Hz0XS;Kjs&JF)LEPCg)5D+44iQPLY8_pAdFK?e zX6SSRLGmVwc{4>4eY4|Xn$n6XC7%xL^?vK)8zz9%Fr~~svCaBcty079(1ea2FH2~F!-4q` zC;39w^lsqxz33pNbiYyhC8{VwZKiE~`?P_g_*da6MdfZeRh1~zu45Mt5{K#``KiMg zOr17m2m3+-SGI9iu8F_bJ+^w;q7#a$A-XHbEtp`rPv1`3af)aj9-6F?p-L4p&p=;X z6BblJ4~WHE5dOKB%b}TJOTm~XRxEQ8vK4Q`0FQ~{ndbD@hqY~J&`LfHQ=stsY+_Ge zIu`m|LUjCfMKk)9NNiuxrTd52+zh?XE!ERMjSPXen#oVNPKT(AkJ#)x#+r?CJe>nY zY`LUW+IGilJuN2s=+fTz3F=I_Lz_Bb`7=UV?^hx4uZpb)ndewud%R8qJ^N2{pZT>O z%bto)x>5_NJZ*2;9jjc+;dC`_JxFnahng2EHyW1rL?5kuUlQUo8Ix4z0kpva(QDl{yau#Ic6X>){ThC8}URr5Attw{EZ~QSxRX8OsfGpbInu zIL1mYxLoodm{#h47MR!t-EWVx&w9+PA*pn7NnFgOSJ%R+0z|#}+GGq5UB4fCnZ9E> zFZ<+9tBcmt+rea)Y-9bO@C--A3Qb-`Lf*w90 zeCj+}W?TpSPI{3jlm`y|TWovLRnuZ;Ir)(LD;Hu8I`twG z>)l}}EN8us{XCep-2CXk8w#s(qe+cvvxAZQiM0$uMnds7zne$--8AhI?m`!DW*%cB z5T-m>G)b1C?kQs?)*FuPVNM`+L9xe4(Ej3I_R}mWKS))Sw|aOp0ODh6EjL1+k_&g$ z%(jI;hEpe#-}S&E@(f<13k)OSo046c4iTh8tBNU=rsjcM+gIk;Tn(>yd>IrmiGJfa zEoNY5u`0QqdD{r39BUzVdb}4bh@-|`$d+s(@1xKg^c{`lVvjQ1M3;4`hWXP|{PvaS z+~hKXx$Y9MYD6hGq!j+lQfXmnUTD9tC#_cc<~K|8DZ8ca`6X?@DYAvx^XL4$8WFzt z4hB5%4xtCw_>Tb}TWe<)+_j17@!7$kBG^BV+b8tVURPdmh)eDI{U0mwpBo*&b(7fe zzxL&S??vgWzh|j7??z|qL1o&2kJiH#EpNU^m#}l;@As-d0iZ9Hx|3DFRODU5UxRe- z)kx4&0-wckfa2}3%=Kf$FwbV=>W){$E2if8~ShmG@jH17@YvxU@+eaaz0;|XlMhldu^)Wzr4>LZt6J?%D6D$g8^ z8;1FwIh~3-$xpnu4JUFZaaUY{iDvGc;(FZgOHeN=7I6~)Y5#Vvpir7K^yzjOI!?C| zr_E&tx+iWTxsvW0nHUaT@oyQosR*Ml-G#S*;}SIQ$CAalzDD>FCaU*WB1Vnk30`}n zr19Y<&R0)kWuwGVLH!w!>p<9Q6q1Km6Yh?lPga0)+DDQD;tFG%zD~+zDqEwybDVs0 z$DX#2;EL%ZOT1u$;wE-y7Ih&WknG#HTzgiWR+xdlvFmzB=1(__Md(?y8ybz-UjZwX z$5fb5kWGf?qNg+_Y7(c27}t16q zBQ(5WQn7F8zn36G@ro!XSvNcJ50@zUtb6KMoufGIiicS7w|?4w4PL;^5ud^t5(h(i z>0VfPt9=KPWy5wkHXCn0LjM(VEupXG@@1T4)x6C1x-aH9ewzhX1+mflhirX3>>js< z?6Q0(Tpt0xUc2q9#0TlC-|LEV8iXt$;|Wv*LFar+zO z?_w>f&K&=GuBtlP2$wcP5c*tE5lYQt=rXpCC6*_#8-Qul5`4AoaP_rwbNY9@*o*ci zVV8zy_m>h0{IjH$&#WEuo%M>exD2ji3qB_-L$i8p@h#eS{hjJ}8e%hhVH zb%r-)KN!U)4_@otTQGyt`_P`>(I-Y7hp=jMeJolJM}DL7CLyni+I-SZDcs;v&KGHZ z`_h(Q>=}Cx!=lN!(~6BhX)AD-Kz_#p){8K&@<>^%n5(+OAmxV0=X|Z+#kF>msqfke zQo3ihL|t?(Ug#;FTTEk<#&(+&NkIl)Z)+b1E%Ka`-{yN@mG~?2s^ESl(cVu3s z4v$Y>4*yq27CD~=7a|-!hp@~(3(T@xTaHq{gW;4)SBCa8A-A?nfF%> z#GmNk`vU02A4slK+fDP;j^~$~n*AR0?&gwMS3k;Eju3wFcXbfbvYVU~ZtsRS5y~>n zEP-kvqqw{*@f}4&LNxiSaWo=@0}7DNbUBG#lRGv2I$rR1RC%l)=~W{;PRz-OAiVU4 zE2H4cES;)!yvvlV@>lf{{J6wu!H6}L_ucMrqc_yGYi)x|XjX28@hhH`+}5!^(+~bOlK=JF{dJO|!7uVJp9yLRk6yTuqyP1m__rDLudfp( z%Yn?;q}!c=sVL(uq4nGGz-=IRdiS@H{%`*BU!KVj0%?;hpzqVcEQ@cYKeGd2Y^T1& z|LeSS`KL+9!&IxDZ`Qyp+fVbn1kh+n+&c5WQ$PRZ6a34UhuH=ery5F@c88);y#{X&VpLID{OwH8Ol6d}X zA3rSB@t@F*65;1zQY2cfDvpj?3J0Z)6rDx#rJma5rrAL{@pH|2^OaiiF zW60YIaTezoa%|!ydMEF`c1$t7!zFUGR+WhqKbF8$B8F&Tkf6~%uwLKTzsic_zTeT3 z{K0w@OJ1%nSMZXS4LB~s^RBlhqL5U9wWgzuTZknegd%Pqi!wD}5py3W+|7cRXDxRq zjuje;JPN{^SebSo=nMY=QOPxmUyaOto@-B1`z%n(;`}dz=)X^q^O*3#J-kE!=lo^; z^C5AV9eFu&B5Px`FOCyeDnlG(NQv=kGdxsZ|0gwxn7pLU5E3d^|_%Nk+x zsyUP}l_PzJrh2esBXEL7b;>v?*r_g-YmuY}Kzg&NeU@v)%T=%{JMX}EHu=S~q+7;` z7UOgH9-FcH!v`qMO!@6qRem)$HKK2s><33jpY2+9z$9cLNte^xJ&U z=iG}$byKG?^{HRY@pjMDa=gr`H{cRJ?{?e7@YM<;_Uw~7c(uVSuy2NcWkxq-PJ2>} zjt(aJoQVgkFZ-mA);6baU}POSjLNK-j&1Z0p(pyFl#6aWlD4w?sG% z!5@^mrV=VTkZ8S#8tf|v3rT%IgdE~=h?Od=kI)PMKP_&8;mBU(CHD3|SUo=Lpm^JW z*zZ57!*(wa37;RBW8RrIszE||^S%;o?Furh2n6b3Z~pzmuDJYo!>d_@7!w-pW>sJh zq*b-?0e&rm{NX!p^y0p)qS!lTqh85AT9{?Rx49e{&_O)tyj>l`MCAFoPxeM@s zRb~PzpRwl;AFHJQ=6d;WPGtXP=aIdF>{;3C*Q@nmL@AX#{{h{QW3{R1B_5+uX7>@@ zmJ4D|Sp-F*&~{I|_(-bKXkY&4oy4G;Z_zxHgNDW_A(VMvo4^P^b>DZbBGLz}d2SF0 zQ+6}z$*ew0`|Z@v8FA8f2@5#vk>K_ zo72#3J%XHd^J14UqQ$EV3MbH8Fs1b*#Cne83tKB24;AFmDXTVu)qDoTP>22jxiFa4 zZz`S=EBu~vmZ2pTur2rlSNVU4`^vB?yR}8#q{Pa>`t@+Gn&T)@>++)B% zuA};d+Gqf5uObO%ZyjR?FJJLhGM3XFnb1gF0Ktq@0v6#C^>le}e*R;^0mpGVxT~~W zf-jI>6Y$-|x_q5E4WUPU^t;O(A6y<`^Jv18?u1v%Fze>9+W^!Wu^K;=JkXKxF1bZ%^su6P0Ca6Rb8xG;qTJVbQ`VC&G2GK_v*b4Ln z%nMqJTW>cr3cXFIibfo3$g4Bxo0FyDcb-Lpf-P_XY%y1Kx@3>JEJS9wz3wdOb7ppZ zJAqYtUhF<}Rx;KCd~kYY8h6fRoVflqI;Izn(Y6Ulyr~j_ENY{l^uv3Q5M16^8uYj< ze4J(DIOEFBVs`bcAkIEWg;nFwnU;fyGE^Z5 z6Ap74MPOiIah`}EHsN5|`bYwvf4{H=Z*RdV5}SlKSVwRqFOY?Oy62Fj*>u;Cu$271 zImgZt;{6Jlj6rtjNE{hH&G!dn-iyz?35pQ&hJ|)k_tQxFEJ0zuTBZf?xDpxk_vv_q zoHel~dAslSwT{N&1=^$Py>hBU95MdzUGJ4~o$}IXGPFh4K{+9(^j+_00+QCRs|dT4 z5}WsIxLwCJ_cHKXk11A7`dI1}+z6lHy0Zqp6Q$DUzzf62l`J-cXXjph?~lqUS$KY2d=ih^HmHt?nFn>zxdM#_JvroaQm2 z3wn$`vgv7tT?LOj|JDtf5CI6p7gf1;3vkk;a_y5OxcI4fiOppV;FNaAI2N&i2>)n+ zzr=PDt}%w&k?KnRnVclo5MTMH`;(hLSbvZv($J|M^P=QA(ILYp@r1eXI-f{xvI&od zQ^)_gNF)ts985gbrOIb#bTX1IxAdV_(~Lz2hi1ox zg4pkXx2i<=NOG;hq9`;@CPx_(tEZ6O??#L<(4Dv*(8m?wb4KdhVEs@wd?MmUIs2j4 z%u_>7eV;Bubw(Z%dXn;@hhL-L?PxGBXf9!unqtcw(^Xb$Z}L@zMT+|dik-kCRWv*q zx*c(T%*6PdBbqdiPRo+MRNi-BvmjkA)FFbzENdq}9~3n$!GsR#!&zCkXNcFK486$9 zw~JX$Emqe2T;x*Z{#(c7k>P8s1w~2?g6E1V26a!&>&BGCT)6CQn#~pRVG;K8a9*Bv z8&gx7KjNBVb@jlT_Ppc6*K`NbLE*08BNcuS?B2s16J7V?b@!&qCebkGT>)=%xUgO2 zeBA(otgUjnnW&EDD|V;?&ZIM;nTeSQG#FmQ-br` z_hRMa&n${M{T`2Mv?HO(Z8~U58K;>yZfapqG_xEX@KUl@pRt z>qJKHn4`>Nm^%#5v0RfcSjy+;-LaMDhuNd~c3EEpGzKQ zbVAAf6FbBo*s#n@{-+k;u#9*0Nm%!jml&m?sjJ+P297bm zV4ryn!LN0BcjJBqK`n8m=%5${=6qOBFKLf$K?!fHZ%6~>TL}kTJx>Li;e5#&v3Wl6 zb93x#>=V+xvHl>ZPAiGOg$5n|oZnlNf6$-?oZq4vP1wZai-Ha$nYsFp^7-%ti~UtK zMuCL#`I9ICq_m3ux+Q?hxhVjZWpW<#P$?P2ThI>eAp_uLt-U7`2Ep-&bX7uJG{C zTp|>|9!f4w;si=bGa!+;&B;)n)g7CTIvMR+oyc@NZ2|ld8M0GpYoF~ zeBhVHBh3@lDC2TyJB@Fau2{fne`5Y6a$i$D;yd@`rKBdxROSnDoNQru*%o> zUbGaLvgUfge_>@I^=-16fh1l`wz5OxqhU2T#kSiglb^c(7HvNkKFGKnNM8qI7eW|` z(<+c}*5Op(%KIr;yoD`-8cQ3d^7m+vfACv-@Ul!!264g51(Sxkhj%Zw{~j`MH@$$E zm+xsL!B3}1(DP`=Ht9-gUreYh0o7OQ3fN`TzA^d-(Br|!v4ULqpa; zQxUWj1Bo;}B(OZ-wo!8%hZ6ebuGt+XjocOr zg`V(N-1(5d&S*wM1HnIcy_bzrf(fa~P5ENH2~*Tf?xV-VKB_;}{3h59CjZY4A6c~C?vmM355Y_^gX9@DPuziAzR*1F5y<Td~pU9uG`Ovi9FN)|g8EP;BQwZ}7)^(rOQ` zqJ6SN0u|F{ho6eb1x{}uchUe7UBB<~^2`W!w6RGc$R&r~T z!r2yjLBrx1i33ha14G1}IS#fubUp2q>S;VS)H5qYD%&A}agC2PXv@IfRq ziqa|LHx^M5#)+F0ql;uo!*0HKcxP-8EfBPtRKXS@`eZ{qpZ`QG+ zus>r6hLh=Hw%COIMAOuYolfc!5K@c0pc!37e~R8_EzGvpXIJpJ^noh7)*7}nYC zD_Gv14)c$shH1qwgqeZlyOTsJ|VKfba*@g7u_cU}}ea6+gB(_*Ynv{*V0+}e9(Na?R8YBGq=w#SxV zrIedX;CQ0T=$5=TFp^vA0y0t`gJU|&pkWrHGUPwCy4h)+?D};e*C%cQzN%je5VzRg ze2u@sKB^+bssOQh_kEz#%1-cGW`gm=o%5UNPlxt!C#J+NZoUapraE~kt)wCVWLQuF zZM~G}L=-jBQvo+vMIr|baE$pe4Y5q(&1|5l*~~8FvypS8$m;h}rQJmlQmg=kmO^SO z5e+Vzd2BubA+@S+ctezgapdn~YA%Q#Ttf)OP}&GAM>f+Rzf$Xk$ODc;oiRpgLsGEDcJ&>)tRA%M26818OPYd$WaF`Wc~;hS(MQwym!3K}G320_N?kem9fONsGhh z(=*t9n`EFob_ty4-YQ}=DPZIfP6T%8iEAB(N9y894Z2rafsA-_L4w~V#ZBZtrLccl zY|^PhhYTNGDGSuFuv;dVCN0dfCc}o$_qxVPsrWP4wBriM_h`4FWG>A=o;h4Eb2WQ! zVzJ1Ns7v;LE5NB?;!8k6Ao(dPRT=_5zTNfog0!25@J?14lrnSXhY*ASm`UJ68{1s< z{mDv@0-F9$KX0+RRv2-Xbs-+Bsqm(}Xbq)#4`z1eEX`ny!mPHW>)zgq_wl?<+W^QK=ZpLqL3DhGG2+q9Sam6aT1ozL`Q{ zMeGLb*hNRjl-4xkbeU3cIBTMD+jh4=j<4%qdi}6WN=u8)zvzW6#}p06xQ4SNJKFX; zk%xrx5Fz6{*a4DxWnF%J5wM<2J&_)1-MvCOu#Hs0qPh3&EP6VoE_C9Wv>I%V>rm3z zKOAS%wc_)egh2?Uxef4MTIftu;I$kSd#^66 zc?`dgMo-B0o*WJp2nVo#%J3zy z0Y3zD%<;o@sPk>m%xX_{Sn|2BlHtRzVQU~nwA_5MF=9g~bQN`e0pZ^T_YjBDKUXXn zW;Hzd{!@w5(ENOuVs^3f{$(s&!Sh(|*IPX5vQNE*Wr%2;5~{rOrRmd-o(0bUrm1_cU~loH^IDRpwS_NC9Cw%!DeJd~1LH3bEJm$%RN|5L9x zq!6H)DShcb%;YwVYEQS^3l2+qq~gS9l5_IzBn)a$tl^k35oOcu@}R?&ez7npjL#5f z6G>8#r@H+bnTE`rDQBetAz{k=T z&xDpyw5CG0Y-)=Z`yw|vv<+phCsLb#%2cfYxv?jKt6ZgjXgF(O8%AG$p6Vz|(YNdq z&~HlVTu!*^J@AoRzC(zagJ*XO-o2cDTGKkjE}D9c%CS(WGu$}}06oWjifIG>Q&T95 z738j^)13CFl>ds(J~2as8D`pRI$_6fn|dkE9elixR(#;x`&ymPW0Nk=BzhNz!;Zo? zzA#!?PzP*B%d-$3A844IP0T8N^fQ!UGtph-yy`~Icc{@ZAH0XkjKmJ(;7|VaILW4 z>0;9N>Y&R_!Ptbg9?SX;Gne(?X6I|rCAOx$S!Z}83%v0g?B6pw*p^&dk%WdW(|*g&`H^?(sXp&6Mmw_U`GU{{S<~Na8pR2tmdOnF8JF~(w6d0lA7lk?T0|5M zLTIR@=^&l2gXEK!Zomq-LCavvLA}G!5xXsg0VN_Z05kE^NK02KZuAdM7G7yNd+tq*7DSJCqWw@}V7by>2_-pYxR z=R231tYNLry9AagnDRB7CQOnpi6C7PGExA3HazEJg33)CW$3ihZTF|XnZs@0JZsL1K$dwkK!Sz>C_I|$QwdYURFxORn=Th!$>Kv&5^o15)pnuNG zyb-!`I^WZ6O=aZD?krZ&bl6zqEPvL ze~~oIOM@pUmDgqPH|UuE_VZNh5W@NLhEe5dE*n$LBFArtyoy;vAntFxBLDHRFCwCo zm#?zo!oaYdTjRSvbhGM~&pi1L75QI2*MA4Ls;7|J8E05`2RyawmY>;wgFm7YY5wo4 z^WVPOAN@kk2ZR7wTKZ-#3qm05@DBo5yt*J0dCY%&_<#QZ|6Tj=&%e2eh3BgeJ)EsS zKSDkgc3&J7f5`ujg+kNg*HlmGq@@4jrKuo+v+ANLdkQIV$BrH28}J~$7gDDDSCp8R z1pfGT{M`7*>VM|X{O26;-g8RMJh{T5MQ&uR-+_e~!0`FUhn&ubCkoAPBr=|{Ctdmd+8E!ML`hBdM05Wmr zDfHxJJZCg+L96xS;mWtC8GVpRSv#^0GLN*!6UmFveX0dkV*T2@sF+jzAw`L3;cO_ZA@V8qnx? zQ7L%lqammrbNlxvIMo>WnFo3ow?ueUJk-(gE=m#P+ z+CpRvlTgNnZc%gRw3=?pA>{>v945eqer8K{#oOU8-ueL*WOs0G@_&YLeiFL9v@@TG z%_G=-((2%f@S?tG6GAvad1qVwXb%|{e*|>slYvZdb(}!NTG^W*>%Ixb*G|9X*p?7i z^&|E^i_8#B{Z-LBJKb)`+6suWaTmYYeCQ9-g8eNdg9VA&cz-JhlnSg~4sSq=V)bST z`R68ARW?iGYiSJ>-ydbV*8+DSAEcoFf^+{1k@DqYx{}Z9Sz9$>3>Q15e@7HFO(D+F zqAidqF$)~|Q0W9e&6idX(wR;|nKli>o^C`TctmvGUW<=zy@tx;^HF1l^wIu$onxv+ zI}%>+2GGzOaYBdw_~*sLU-5Tp5b7V9d%6q=@&|a)`^!X&Utc?fgu5AOAW8?PZa~-y zxm>NTNrB#B@#0QtHJOLgu;TJ58-N9`#P6d%%d;+5wT}ImGZxHf4Hv(dk#_aH%Uf<5C!%dkjsLbn- zP5c7{Z{DH}+jid+Q^Yt!1oqgxLcVmvZkO!eZajk80cG_U=f_uM5PpMrTcemBPmns{ z05&|d*B1@xrp16kdd14cf5$DiGr`uW@-unWo5KGa-M(vrs$442gqTIfX78I#2cC*0v~XSod*d&`U1 z=g89Tb-PRUh=nRZad1GGFVUXfg9uvQ$yX)0!k&IILh@*h`CDUgSwEg&-vZz^A%mD% z#ZbM7zv_Q}r9>8-Xv@SM7M%WmV3#v2c#{_D383RiggN<^eo55K~CqRftx`>(& zt~txh*R3tBT^jS2&su4%gPWT<3ZCNf6C~K7I0MzzR&Vjnq}bc=#pc;!V)N(YT9w7u zov%@s9KHx{yU1}$#r3$?iKsfLV`mZuMb=sO>cK0h;Sv3}OaN0CKLAxg4xvV%Z~s0C z*M+YE+a#oTyt!+7%D$JRl!ezkCh+(6uh~iHW1MOXvRC}F;sgZo)-2xAMee}BPsBqK zjm59~G5zd5qi#*qGtTU!d-gYX~(#UR?DAVy;}J&X+2-gamKEE}Y7} z62{Gp)nbN=MS0PK%@zsn@rPgZ%rEBnVC3RIsB~iDj%3BM{*3D?Do1}x+VjR6o31kQ z|I`8~aq|XhH|@5|G)(`=d(k6Ul0Eq_S(Fg(Md#i|5!F{|{DkSV8%b0{2s2r2{e0hr zYrq9Rb-evZK$oEC2&}(b)W4mqfFP;%BvD|G1dr@Rf^ym|!{?031yB2(B`CV~6V5qg zp`IR^cY9&(y^&+Q(lv@W+fc}UIhLJF>IqF&uL^^HP!MPBtAB=Am}}`pDNm1u$nRx( zoZSNzq@byLrP%*C&s4J!TyD^G%I_u0{9f?N1!;H$NPN_7$LB~68gjq!5jv(jqx@U& zXmFWR00ER0**BrtrgTB`8IA=xNoVx~SdsdNxjB0y%e)=GrYtCp(wu zW{5H$Bl$*zM>@k=ZNDC4h>{J!*n4Jt&Xj(_V%)4T@q?FV6qJcy)t}}Boa}}IN2oF` zh}-a;`1|}G1S1;sQ{dwxBfga9aPwi29Jo~`V#gIJJU!RhJ1=1k1MpLGZw{ytkzanb zjo=!$#)C~WA3ZRuGmS=>fB1RL@>-u%!^TVZ9lO$a!51g|0V4T-Sc0C1|AtUspu^;u zoFB>&q~W9@H8#J=UhF*?VFfs@9eV6XRv$^&)z42Z{S%%4DGgqS0M49Lt-R$6$W@`J zZtdx`Y7_PeNu@vxYdnGkj<$fupIdlz%j(EIQomy&!;{LOLuPInqv+`Rs&>H(=~x`Z zBbf2SGjuzZJV{<36tb)@~9D6kdS$`fReG#Z6uG?MvM1CVLR4LUTNQ%$m7Q-NDMo;~f| z*PQ~6POx78@_~@}SJX9DbJY`X=I-mg4tl{R1XZhJHE8PnxrCS?70=Qtj7q5Xz$*W? z)5bN~)+TvSYEQDb6unPeiInFsry7rxZ?nJ&P=3!#vga!LR6=$Kj_(O1L9f)GHp&$U zfz`A=8bglc!?N%pl10-Ik@}y_m@>WhdWh;S0z0)Dw56~G31mYNu3-hbcXH23yt^y4 zZf})Qw*T!yOz9V0?a#1mLm&CC5dzbly!W9vX#Vrw=dE37eaqEwi@lD8H;^<&f8V?O z8`5mrJ*@oMOj-xIXdhmP=X79Ih+crq`=b(ZNT~Wl!$wF5Eaa?1rJucnSs8)E!U^cB zNw)1`_Sh4GETX?Kh4JVsJkuwB;169ax^OqwacKxldq43@$ZU&h#z;BVqR`KA!j_{X zA-CrpVt~e(0Vy)ZoD%$6_x0scS;qz!2zJvyP;2n)_5%6-MThryx}v&gN)=vTMKm(y z&=7c+d-f}+M=p=HnY)zrovff;HZ!sH-P~XA-*R!Ia};my7)~v7HI!}_6uB-`HEO4B zE~fHWwku6Po4?Ft-Gx1~`Hg=1;#Jlv8ImE(JC3p4vJ(zMi(W0D3tu!1v`~?BlRT7c zd|zcQdb7LePAgr>%A=mKf;k&amk>JFP{pOV7En~joT)m+cm61s?c8oXM4$vFOpyo{ zeR-#35|G|#5uvpE^>L7BcjhFy{r4`vho#ZdUA!!xJ8MGonAd51AZU48#lpT(zc&3b za|@GXC#@#W?!IgFsuFNW&y4cG*(oB?*Y>kV^AAXG$tr5X zqlwVc8lSO=^>7v!)NA76;fQl4JLPkmkDjJP7T1zX!Hn_mfJ$b(&#RgE)a_I96gS89 zPd#%OuRfBISz_j5(luur1*!1+$=kgposztGq|Ou$glhyxMV@Iv052Bpsu89Ps)`|6 z#yoZA}^IV9#n zrO+hALmzR~gHQa`bYu_9wG$ODxZ`A-k6<9N$m3PtG7;5RL=owBGbvXQ@GggpQxB7Y zNsnYCudKg)tKGO5#tyyR8q;uM46n?pCuYE?+BKhNEFW#7c5`R&K?5E85!BzSRsp{> z4YZf&@ks5smhnW6tA_Wocz54^B-L>~g3U|&$F_mr0?z_*X1#dmC3S^&?=z*c!cN5L#yq=3 z)^Tx2ZhWEb>0Tz?Mi0k5>6W&;`g?^ddojU;K?!#f*|%Gi^$9#Mh%pSRR+OK;rXm2`IdOVlllpl*iMVRs-c zrSg>e+-0ds3~S{fzf;Le*4^kuvutJt}6`6DfDeShT#agdwKeUicJ@ zJ=zv*+wh+H7@0=HLQ&WnB}@+pE>LyQl)!Z6ynAGxd@xBWyKGc&%Byn2Q?hckV~?Ii zrT%a=UTCfJEX4BU$IcL(Q9DL+oa97V0Ks|i4x#iwQ+g5;F%s?n7N^*$)rrqF$Cas% zATBw@X=g4sfU}BKEbe9kJNnBPMYXH_i`$Kay<6{+UVch1B@w#Z{HSO z!cEA^JR@>I4+oZ|-VLUgufNJE8~ZhhkKp|UqmQcR!acd;gEealZb?Rp6f7s3HgyGE zn54q>$YAcxz{|aUR9qOW+4zO>2LBw_&m8@xZr-S&Gvkg?tfs^s%lH{PPjcYM1m%eLV|2ou1lv#fGLtKUdYZc1*#=t)&xl_P58G;)^e{@eCQ3)w-tCmvHA1kcXBQW_q9jsKbO^kP`qXc4pRlK*NE@28~E;q`y&3sF(r*vMFuU5i9 zTqHtka_EjBX=y{aWSYc~(>BHUslZ^l_*(RG&r|XwqO0af!Gt8IE0|5D3@yul#oxLa z8l1v@v{XedB5$tk+`$ktpP>2t45}(1dc#q~e2zLi2ByA)TqQ)EvRzs3Qr#C?zxJp! zvox#rK~>Xj;?htbjXK;VQcp@di4!9|md{@b;gRCw5(kV3x?jC8u84g)>jC|1p&bFu z>}PS!K5b!C?YEZbKPV*M7BlfPACl<56&f72CTUOC&XOP{=V()8|ETF=hBssCnWmXF z8vB#Z_%Rtp_E*=7KBiM*9wbr{@Nd$HZ`7S!o)%LS)X-@E1#?TDQB+$+E!*sS0o?C@ zfLBydqkF1dT-An0QlNg}VfQ5;;6ip+%nEXsd9_`Nb_bm^sf^R;nn-^R;bvr`3+ z@(kO8B7afZvF{y^DW%@G2NTaC+N+X9wrMZMGTvM1gx(dNHA@Xnv18M(?7tVt$s@(e zSyR${o9izq?U2vNRFwNK{R6NwJhOXv!(?@sWr-gqF+GIpy?w> zBhsJFQQi3IRiGDnoTA)Q*0U)hOrsc~pO7=#_=6cUzS-?j&D&gTgSn2d*%%$aoI@?V>!J)@iENECSsjRhmE?q2 zl@rSnPTu@YCI7yiyWOayQ(gw5{Ycrd41L@ktj}X_sfyf&;Kw|R^~=aC$D0|-KFQ&0 zWh2SKZHi4b-BYp<&t@ObKTa_#-o?RCRRIHPsl6R<-hdbPuiT(zs*(<(9t=%*S1c8C z+6|*u9mam4bE?}|GG}^kCYBp40ynhimQUgd1{8$Jl1 z{p)3}_4;oHPkN3U7ysTVl86e^pScVtk&$ykuu)tzzqTq%3mzNGbWqh)kpB@kiZ9_* z*@=+mVKa32%y07ENWmgKG*10AS*#ST%c=4zNNL0W#3C>4V|18sC9%5U)FbL+OFhNL zrm8KRr+ICpz7-dwtMWKe97`H~ed4b4EX8-C^TZCt$*`d+`<3@@-z5$2>S?`48xfUQ z=z5wxVjX4f^D6@X7KuVyUjKSl$z}1)fz_Rcm5H~Rs#jFC)A`9i2n@d{F|V;0dDY|X zBhD2c+~ybRnHa4v9vXa2;9_Z|*3d=?b&0vZBVVEVv7U=HBe{3f0wPAU$xZvWuw1=Agfrq=CdU_XQ=MUCk#>A1B^mxb!1o`e zSxz<5fw8PNZaha&G#t4p+Xyuoei<}-hZN+`^&a;+cC^rx)FSRyGdrs3dOV_bvUygF zk5wx=Bb;r}er(F}t7;^h&o+aZ1qU7}Asva>T4n<5b}Wko#foGHo6;S!ra+Z(NJ zK|vu75qmcoA~`CE4%^?xjGL$CCoP;aUZ4TM^Yx3FXxxB&wO^f4pY$R#O-WaB(qX!H zL54kkz0sLS_8E1XyO9Zu91g%~c<;aUsA%nA(wtvDfn=umrIg%u{6sTNQkzS8LY8c; z*@@`~U#nQwMoTkQxkcNtuA$^$ATV6W!(R4sq$5;dB-T3S%d6|5!-Wdaf-4TfiP z8(VjY351OwUzNn`Zf4!MC@#L@f-91846FC(dbE48&!rhFAwn}FAZ?~P_qI0PNX4Se zK)b2%lXSD!W^{1aMLGvbAp>TS*7^(3V{Lhj7M-|O73VoKJLhaw3q6JU7WsZdv|6sX z-c42B6W-=*jlQ;d=8{GyjkjF{@dSCaLkZIyVwH}k<(8p-eT-xtyP1ox_hF~f*t%$U zkB*>7{y=Kwl%|8!IOhX%be@^%YyMD83;a~-w;hstr_a8ZJ|EK}j&D}e{!ODn_x&RI zddcP7fOqu?rust0D&9jSqFQRPwJ5K^6+6Pc({x28iZBGQ^|A!(-Z>7p7OPwQ*&FL zdfwi>k@izz8p9!Q4A(f5%GKB%E`$PCs`;?rVUI=q zyAz%52!ycGo*DPcRHaoHtO$x0gc;vaQ81gtp-DXobeU4Dn5LyXF3reJ`yfJOWjc{a z>FCE|@yCXu*T|a{07@BpG>KD5l15;+=_wA&8RUzW60}}xHg$c@7cDd%$4ooa)K2P* zk#O<1ijbWe0GxD8g2|rP&rPELarjTNe&dE%Wh?$%jZCyCIF~^mE00#wCPOoo_>@U`5*2 zh7YzcfBhPokN=#jqNI4(mDM)r0Fu3~Ns4tPWiGEH7^@awq9{|8x6<7`}tF?gbypRUML7{3z2i++>! zQc5AQ__nfUcJ*uGPxMQJe3qMo%^to_lamAQFbPzV;0dxurAJ%zxZ}LZTk4*eQ?lX- zzJTOkByahSTukW)GE>p!5%I>H=GZ3>ACnKA+{-j^4SsXn9~IMJyx2^;$Qh$laOeC5 z3;W{s34%=vz4z9bQ?%_KgZVmE{E|);QX}YpLY9x1FP8Vk;liC z`i3gG@C`rb|KRnSv=NoSTQ@xD5%?UCv*M?+bE#z^uIu}`9DO_{$B`iv&Wnqs?>N>q zgzA39(6(b&&856-!fzyc=#I4*4XWNRWqrYx=XHhkA~QZi#J6N3`h+x4bLG!6H>2}p zn{I)6p?*CqB7V&BUGI(JEOjRAT$JD|rt>n-vy5+Ls|w>s7+BPSa`=Wj_k&*UR1qGV z_toEKO?%mBEr`yh#ZUSyoK&uUR31))(id<$`0E77MF03J1m%R z8s!+57Iuxx!tprvhq>$&*E12B`C9S#%5;G2!Jg{MP?GST^%4DqOqEFt;27U~P;DmWc%+(j)sO+anWBAf(M*6r=RZ5X-TXw3l$ed-DhnrJv&WjYV94JKJyCN|k0p4f z%gpVt06EPcmce_Jr6{ zi2CB=#3Z1ElX*|jSfv@t7Ae?~kU5UuOg~+~inPY9Lc({73d3}LEbOq-qM4xqi-6SU zQ*_iNA#A5AG4Mho%Dl=ArxziAI7yL3ubbXOO7)U(9%5^V{~e9j&S9Lqj103M^m=Rt<*wqsnM6}a45cNv{i57 z%4F47!&Z7Ug$fW8S<3QaN=8Fib7N(HT7r}?PnTjME+W&k-L9`17!={|>#_=NGY>BX zT6JVA!c`~A_L1$Rx{!K0c%e&3NqIl)4_J`2A}6nd5yLl+8yTZ`9d)~7ZAk0h$A4OM z>;hvSHr`Cf7){(eZXw!SUiI#}=?QZD5$KfOGLRN_$!+;o@HlR5*1oX^t7dV;6F}W} z!{lO7b~uTK>`g;Xl9$h0o?FHdYrEMzGS%dZu9SOJ-d9)FZz+#z#oZLrQ+CxYBWCZx zxxejXDi^y9;)Y~S-Z-R7Nte4&&L{#11JovP=s38Q5lo1QR5EBRg6nW2hQG=w zrFV&{qzpNr$b!IDdphUaR!>NQTB%jAc02HP{JZt@tW|;{a=#_&-30I%NZu#R*8Xg5 z6B=PHq9%U8P7`GKX>R6&I;GOwFDcj=khr5Pfh)YXV#K6p%;Md*%Pu7@#7a?j_0CK6 zrY`Q4a2IyENT6tz1`U~@rzSh`GEje;8kr!xkfXlwC>r zpHOIc>8k^d;R~8Qw5e5X1Z2UBK4XrIN0Q07?HgVE&u)La!?SE(?L@3z-Goni({FNM zwf3q`qCy3sO*4E(pAytu}P5pa+-#BdH&$;R~F zxMtG-W{1``ty?1Z%)>@cj~iE#@Xg3HVO9#IelMydb`<&-^N+6P!Wh+bGIusOYS>1n8b6)MZ~!Sv0&M`eUy*K&zMQ)Oi)T6EK4JT2^iN2|%M2tr|yhhgs}UhUO+ zOocnrY~=4edGq3YV!UsE4h|htsl#@M&p40Z_cwz(;|h1KsuYCe1}BU+8_E|5&V@*sU<#RJyew_Yz;??EeboFfDULE(nK{&*nj3J&CPAU6nS~3PR#B8=2;$i50 zYrz7A#-~5_=01wzr}k$2rfe45TwcQhPOumA=N&OmK!5#c>uVf=E|R1$et^LvZLa

TWAqQ7vG`IiVP><>61|oX0%4 zfyjxEL<_Z%c1wlNBB-t~8$4{s7%zFeHGBRTB&Dsq8tak-7QWY1Kv3k(l3t>-u9_nsu-MUO_A9QRE&efTg4d1h zqEF0i_Id(t)a zLazSw`+vzQ3X;FWtb>wN2g~|VBegzU64{zlXlBF|3G|ls_?}BZ|p|2DzRMs(|EXL3!`3J6t zYC;ztG)^m94POWq3|@1cKc0fHSFNi$*)y24xq|G0@yt?W&x^LK8@{?+98Zw8Q4`bFPb0wr(? z%X^MRnM-sf!Q@ZqCGzg85Ru`UpQucue<8=qQ2Q(~r4 zg)m%X2F8ZyVRC`Xxg=(=6P>@ei*$(yzO1+}I-?EAS@O$8%K688Vp$>_}v2-#Lyy#!ymIpEHR6b{? z`EhC4L(=y7X9vTko1q~x!>&cq{0pFmLLHLhu=q0gX9)wz$@m)ltb&`<^-W*9WiO~p zI?GQxqg@QRP9O%F6QKH1HZ>BiXKnln(jPLN4BbQwnXQRgXZhJTVOI^8aT<}-3j^9&j_bMK zXX~>-^|sG~Q|2@-C+>6*FSC!TqE3~g$9r+@O}Ium*jveNc>b_2^$g8^#)51`bT~HI zK6V$>Ubjt0nbHdi9_5(7V^U)!7L~;H54dR`55YqSjZ2>vW9N%b?J%Hjj(G=e_rfS; z3a_B^a_!YS;GMC`y9f#&0t0s#MQG@Nx7+3V<}UaIZ4GEXxn2h% z_>FojdJ~4WDGxpk0>$wRZ3DpR6BuXIw3RkbxT$#G(DQLgur)KcSBEg`e$k`frz)$-IM&SLD)v^-Q_Yu3%{ zsBWdvyN%`4h%7lb%ck|7_%8nljHMS0Z+v|m@0XHiZux{PrVA4g}ptYu4vIYw4ACLs&|~hWyU>VmesiEnGU0T?am#j zR*UL9*3{4M3}qkA-D4Q@?H%`c7BmdqYo=F^Ht=$nyUe2wqvQpn>MQt1=6s{x7Nsy- zo1dBs3lTJ4Fn`E}&*0r_?r8rL{LE(PlSdRV2srs+_y;wgd$gu0UK z;@n^>x|c;0Xp&TxDjRUx9E8|;e7;=VeLU3|33yDoSRKFq|-)8;B88#;x;9xGiFTHe(m>03z;BAEee0 zFe&MI|M6aMTZnk;F*au>Xfab4Muc9MjMM^+@v|e*YmN+%ToJ0t#2{fwG#nqcP%`Cx zo>A@nu}U_#Nvs5#;F5NJqw?oC$ZnIK6!nppT=s@FI zFFB@|hNGmv9NU?P1~%(Y>Zf&WlzWQ$Y5Gy;WG@@VkqU>|-&KyL&F~BRsy?dtISh+( zB}^e~XKH8fU;??)xJeV$k2rNdGG{81lSt;!DLJ*S$BjdWo#mDULZ8_MNWXk(@{C%i zX(Rj`dxK0$q{BvYzQA%lhLW!*XSZoPw%l`n`xl2o2U>QASmk&_!s8OAtKpVECitG+ zdB4gmX(ZQ#iCM$rF>mM8R`J!9&K*iJQ&^p-G*qQ`@-T=4?hVuB*Cjm!%&Y>2Nj()Dw#D@r0OeL9Aq;K|uwyPAgJ^ zHOH>(QE`cNB=8jn6RzXksNT4+K)}}KYkvj6$*{OLHn1es;Zd~TgO{RA@9bR$=?+rl z5=!zDTErKwbVwAvy*^?4Jycip20O+|;bp%(g-<%ch)SBusKGCe5_6BYga`hv9Jc#T z1`p2MJ@=>Fe}rTw0*S&tuGhAy#J{UZ1?3+cA-$lX?NWD*_C{~?WNLhs8fh-7D`CQm zmZPjRBEwfYc+^0ywQ|P7c*yKJduKhRg{a&n8=$4XBrBkH4RiqmPB&1P#-{V^AdH(V2<%V;yO>& zw8pi@Uj7zYI|Ulmj&l4dYUgV+7d~6gQ$_*Mt9U3t;BJ~_x;W7A5e!1kYKdKB=W&@h zW;6f8>mPCNuTDG#vJ>wJ1L=>-M&WWKY-&)=nF`L1eiLAc!w}UR5-r>4VJ4Rt8rHp= zhm}qPqdYIf0W}LgGxZK&)c%U%Ed!^{J+~tB?>2W)B0v`N*Fj2nWx=h){HiSy;T*z40*>h2UKVoaZ$e)EfZtJ zQBVcKugRX_^eRqS9u4?wCFp;FxSAxnW&*vT_mQfM^uec~mL1^z6SjY7H_>v`g8h9m|7_T=Ll_)H2Ne@>?wPR7hLERxUcq~CVZ|Q>Jr=WY+4$`g? zq^N{n3`%!ztQR;xge_`VW~?)_6@yl1$H%IEnAjM3cm%7B@Z*;dA)aREJI%z?We*pX z!p^KW*c%}W7~4QVWWvC3`B;bP@-#(|R3?xaW+v+0E?Rr|=rlugkBTlO`4Ax;n0vR> zU&-^FdcY<|!{ol7oE%o1!H{Mx{-6X4@(HGSJH1d(h?I-^p$r07^fyC7*ZQ%xsRytH zemB1iy2LCl>nk$snFY@s*Aft+0g0nGHpkbb*f#7e8Aj*c!Xs1YtM|CA5m?EF_cT#; z7DO_dt}vybH))%oP8FkKS` z(aV4W-X^>Pj|mvQZP4903ADoVF6x)YARL~%d^jBn5^+y~RKs~%l zXvaXmwBJ*S{R0PsETJBY!i<4OqP9Ku`l1d}VHFXS_s)Sq#hE0n(-JGVh!;|VSEW{{ zp1P($N!6DM@luH{A@9P3DiqP~XF3p9l&OApbSnC4LACLlwx8o@{WAi*|q6`Ik@L~tN7)XA3{qsj-P794}kVzefIC* zTxw;^wQyj_>6zRB9I|E`s&EnT(bpml@xpP}!U8*xoAs5bFTDzp4aSE1Z*LIwoFXqw zC1jKEv}^eWsi|3ueu;r&QZzCJ#qlj_(SVDN@T)M0s(6`0VmJMYoP*a|DN%5nv6fYC zWbN@ysD2A1k(^VS;Oyoi?&yW@t+RhQvpOd2b&ibn7iamLVf znVgF&J~~&;1k(nk)Y9=%A0|!?a8rI5Yo+wVK5zpnb}v*(Q+bV)B~nulEz~3*+*R}- z0r`o~YO0@c0_a!iySOGYJ#ODdkOcL8|7fKwI+U8+msWv*rD4NP?T6Tk+}~jM1c|+^ zrJ&?5aK}-d2WqiJC7O3t{WF2Sb_~xysd`MUM_Cj8F-^u^lB+0Gtwa)nUI2C*lh$Up0m9tx3gV-!(W4kZN?Xi*zvlU>= ze%G1a?=_c&>qI99HmvSv zsf2QUq<{CXF*obNm<06_PFu)uf|$&rjTuxQ|mIc2yP4%u5Y60o>>Zuv!EQhIwMzfCCxDZpW{}f{m%<2w3J%sSOlHc zhxaaGCY^wG4W;Fc7YlrhHF(i>Lwa4*6ve z{w!VqZxT-Ci-ae$WEJu-EJFD{6cC_^by5TL`D!OIq#(4iX#B6gZ43`Z{u=Tuo?k~V z4X_X9kqnd0L*gczp%j5(gMz|fS$uR0z;2&&5;K0yEB}s|_|d=FRN4yu6~%1nP631% zAHS+exZ-^^;Bn9YNr75G>e@&@x6Tg3lw}!PYr#(aT&aC+A48Kv#)dB^BDD-Lrzox>ZKx1 zjPu`ZnHVLbdDlr-5GMv_o0kE`8dR$`q7>s0syPswxZJt|>{zbI65Zb~Hk|K&eH2Q& zKTnNw668~(JQ4WC;o994|LR9FVyzJc@Nh6ZLPDk80o5H#hGC2Xo%iF8pvdsOuWK#T z-%3F{e4M2EKM9HH|NCDDGC6=Jv^3V{J5aveF?j!Iz6TQY9_<0fzx$tenD~Lk=p$h1 zHX@nC@H^?CIRecq1s=$a z7kK-81X0if^Pu){m}_wUxm&;ZA?;Jql$1^~Jdg1*s^CLiz!eM;>{uTcp|DYh*r${7s z>Astk3*ep+IJ+AnDaZ#pKmXf`{O|v<EF<^DkYB>2%qn7`}&w?2# zMOceDy{7;ULmc<>b4GXX@-n+kZK zkPe2FsPAgAx7dDy-rp9IhAsk*WeF@iaFK+R#{)0^*B8M4e0_7pue}&0bqe#_4|lcs zb;WKXB3b>m>Ag!^@;Z(zj)6GEjKx!gbv)Pr6L;E50_DuA@PH=$RTIe^}q177BBq)V_R<74u542lY@upAkM z-~bE@E?{7WxVb=@n{Rm+hyNX-q>8*fI0CMGfZpzUW%2iJpjz8X8>JFaDAy!dh!BQi z5`H8uA5Kb2FK}Qtp{{R4GE&f9_H{QJXcUF_kZr8YTiqe7whSl{i*lTS&y#9_A=UY= z9k_kNbRU#s!N4NqH0$iJXfJ>ujo$`$c6Web`DM)N5J2WVMFWF}&IiR!a9J`qi4Wk6 z!@hNLU!W3%g7GAQJ6Hi90fwz<0?q?+xPFE*MeUCofCkU?msBg-fSo9Fbwh<|=zY)~rPB!T5ndQPJHU;7Kv1q0!o+q@ zt0D%3Nv)kjQJ%i}Y80oQ0C;$l!%?n?7^J3EZL^ zgxLkive*QC_(!cbfrzAe)3Fb`am=EXaEnD)@;gOZ*HiXS^hViOk>V5+KjtLLhsPO$ zk8`iU%8Wh-DHXncay}tc7EZ_rm^9Ezbz}W9(BLhYg(i|cs(m=F+K^+wo*VbTN2gGns@*Tit zk;9Y6;PR3%2DVs08_d!NEQTu)q__C!|IJ-)>CynGa%W8(CGmpxB@TDS?c5eTEcdJ| z;v;}Fm|!@@{{$&Z&(#Vaz6Q)y174SWVpJAL(TWqJggm9w(lE^GNFi(zj|I%vR+fTa zI;H&ak=FsLQ?K(y>TD`V2I^A@$st=D@%({Q8EhA@Mlk?hLuvJ7)QvWh*O2F@u$gD6 zI(UAD#62wDI2D_vnkP}cguE2^&L(sA;9Q=02!N}-`LQb>W)LTR?zpELoVm~VTvF~q zY6OdG0*(D1xP5hwz0z7HSDh9nPdugO^biIY#Ewv8nudEgx@wCiu=N%#2(N^t4jHmjbnzyASY}2eDM34*Dvxk0`y*o*^&E(%D1AKs}5RX0%s_s|8O%H}K zRdo8!)Gap5Mx+N_#IUfLntsf-_eRBmIy*koCotBu>>TUp;Ju^I;4rwGuaz&sV%>94 z|2XfX4SuHH45Q0M=YP!ay3_MBp&I~BBcon^Jz@~u>A|uC_O-a?uD3}8z)yx%Jv7I1 zBJVdKj{AuWWGU~u7iSM#3;D7I zd!eb4;V$HHAH7V}bDYi;ePcX5%cZ{-u?za<*HvOYp8hVsQivAfAi?&n?3(Lo7a0W( zhPboW?yVOu+`*jvVYL|>{V#@`j-eHxHp%0>D&2_!Rs22pkLnGgtKRh8;n8;b)w zDFn#}VEXp8I;j@pqQf=)XgB|80g%Xx`mK`Eb9{DYAr(IWYWw~UjH97y55GyFd+s`c z{+^d>ar*3=Tj<0cv_>8bIkOs?i8)}u#m)%>6r*=G`-QUn``4U^l;>wUFMnBc3|AY{rXU7j2C*aSD+{ei+KCmHD%&a4q}?3N#b z=D18d6a8J6-e5KfO~5+gM$G5(G~XZZmp;Pb2=o~MSg!8RUBB8`2oTj1RpGlu`7aB6 zK}y?4Gy+k2a~+OyDEixDA>Jd1py0YC@zP&q68|Nj2Y`YXED_|Gj3@w-$jS79KK~p% zsm`9I0-%BSZw$N~65=L{t~zB@kx@AT02UT=pfX0vG`F;Xp5_f94Ti=Bc(g@Mcmw?q zVH}0#BqhTp>yu2$1VaFI2<@aJjhn(Ei5deKgqn=K1T8h^xxRMf<$%Nq<@w05)&o0I z{PjC{nj7c{q#;A#fOt6cH4f@TwC^#~UJY{s2PP)6yk&d&5*MQ9sXdDff1tzRqP~4k z|M}rG2zHqRQD{GankR}up3Zg182zCqfQcS!8}=Jx?DeQCuD$>ez~!DTU;$b}a-gi< zg6G4mbBZHo7&5WvV#rc@RT^0O|Dw^MtzyM3ty!*`3*T+YQh3&}j0vRlQADvZ-zJc_%*CpQn^1M^#{-G`* zyC!l_r3|zj&Z}VIekkt5P_&2rz+s`GKu-V{gU2G6HW(JpRe1x^?;N-ux#*rn{5QM1 zj<}Nrw9pUP)^-3eofDBFv4(=IK(hKlFQS!LG*S60`OW-2V!_mFd8{yO64uwj-A-3A zS3i-I*K#G%SAT5obI2k8JebvMP&Ue0I;Gcq`Ev?$IV6Qss-x zX}Fpidaf!OGSv|Kl3Rp0WElJSZYfi!%5fTa(zhe|KP{tcRNV zK-=zSOkw)IUp&o;t4v=b`1>?6;tI|ut3hsxcx=xxd)wT!dByG2B!Wjc2;=DPLj}Z- z<5b2+Lah_+#du&o;{0|jx{`6jCSIB@DXY=Hi4C1`RqTk&l->neznDs4lFb8lC1qer zu63*AsJAQ~f@;8u+OfG3S$V;G_!1(iT4Ci~6EBRVugabdID=Qa*o2Kao?Sga23ToQ zM^v{$?^+-T_4K~Ig;X^Bt^z;!vvX6&?(~rvf4BCA&SzEeCtkkhYK4~wYSCgVOG?+a z^Z2tXpaL7d!qayb=n-_RIF6nQ=DF1qAe4Ttm3YKPy3}SSwX6O3iFztmj z;a^{dyLwuw{t`1bQ0;xWj(_?wMrBI5$|C!w@*2sdkzxgbSmiY%d|JwZaUo+z&(BvS z+fH4ktE#iamV-zxqa}*zE2E6|k|+ezU9@J1O~p(pZJ(}-k3e8v*-ahZV_}=|Hd5(V z69D_%iwyO-?!AnB=0{cf2n4MvW0O^|qg}i_eOK1m79;Hm+T<5*2H%RP58-W&mL^Ib z>e1;Qm91EdqYFzwR(9&8yaO6l2Yx0!A2-VtA7M>m50wKBJXgA5=j9fnQ_?WR-yFv} zukd}Q_hJ8MA^WdFPrf=g*!WQ7*ZXtF7fGglM8BH!$06%~IJ$gR5k`7VPs(%~$ zsh67f37}>~$_H}dxVOD9jal#z{0TqrBL)I6MHc;jad4=@ylOq(G zkxqU(`E@FIEBmH7PyW{hC`ph^zCBVB^T)?84Vsx+m*I}^=dwsEzX^dFcEkXRz6j!Q zorrtK=U7X{)}v~Z0}JLY;~M_hbLd0!;lsTIeekGval8<6eOwdiAG{jesl2WLEz#=? z!?Iu~7JVG3a0J?`r|=s+h3+^vS0rP~ur|Y=Y~-8AmH)W}s2V?hRt-7qItvNR2wam4 zgav$+zRz8N&m=?G&Sr5eluj3OVq&3o(`3)Y(qB;Q61Zo|d;OP<-)ZjC@0AE?RZtO$ z)+4zNepI(MY$l5Id$!A#UrPeT;>%vYFL&7lp2)I?QlaC_h^fVu9dM&lXl2@i`D~>( zU^wwHhb`j;w)^AZ9{_0@CL~e1(0x7InT>wJ#~Sef5JH;vvbFO6Ieso03yL=|Ks!j3ts zlE3g}*lknECQzE^stZ`U+)q^gQU&j*BazVJ&(YNIacYdH3ZgKt{t*e>)Kclcd`T4; zs9t7PA`4-IoRc*F?lYlnW~>f@L49{JA9_XVa~ZD#P-|!J3z8+LPnX`Ew2Ty@xNv8x z1FYDoTz=t7%%Qtjp6Qrm8T}J9a1Tp1RPtm4QIgK^zNZ`$lB&JSUn1)jjIcTg07Gu#p=cSQd73kpH7dU_08=NgV$Ww-V3v3vO>MDI2*G8X~<9|y4zX~62 zh6r3k!N!FP*XL-Z(O^k}PKkk3;7g~#v|l-DefAF|DgyC>nx0H(LMl3>A6zWShNo>p zAKuM+7aHsm=$xzKkl`uPDdyj#27Ev}?%(iLySz!n`<;Iu-jv|Lj&ZN~ljV6)3AfNC z+b~v_qzn2KsG`KT*pb4w->;y@P7TVw<80^*>6JytMo2io?m8?#`flN@Zwh7N)fU#&ZF1AMx6`l@JpLk4=sG_+~7YgHV`Gh{s$>j>h zIl&UNGM>#x38_LPL1q;KCgku}0=0yHOwYy=j>HxptUraoV`Jjfv4gD8TOjuvfDq>i z^)4Aogg}Y_H5<_?9)aIhtfyRmqDQ#1*uAaH>%b29i4c@3Ayv53eN6fX+K|T(hF&7$ z48KRr?eBLgmfWQ5L#Tg=9@<^5(f}Whd2efzeP9GZ!OPJ2=t^i6+6h*Bl4E5H;;uwA zsY%pL(~)g_V->&y{11WTeAjDCZ=$`7Y3#+MK6Dbf^i%lEwySX!*HYw!H#KBYCrB`Kf0{G2DaJq@gy@ zfYYdw!05$&2~*zu7yLc^7IMuYj}@o+&lwiq)(Q`mlTQS@bvMHUX9;heht*^m2R4m7c1G0Nb?!t(&xgK&><>G1GKqO8>Tl(Yd#W;bc*`p=UBQAm_z0yd@<{>y&7*Tcg4t2tX2p3aL zpuAd>8DIFzp&$cQnrZ{LAZX@?n6Kki!d=FZ`fc{|xF=sdRclABpRoZER(MO&Q}-Bp zd+7~LYrAsYf`xyuw71c~5a4!h=HWw*e{OAt!GUZEOm%Lko~%ib{Tp@TG;M+`r-ll4 z5f*q#U@|__VLxC6@T0bskL+k^)B6*dSg;@B zbZU%RLaR=l%n4sVE&GX8PH*(k+)rEM#{p11@tI{~u7@fy1mOsERRm^sa5#sk9=%~m zlvR4@C0?LtSdQX^yfWiRTXR|uLOCY8Y62gFn?RJRQ#2)4)v}XKll+U5mCgN4MHfba zr~uUoj?s2X25fq>M6tY5gVGVY7CGKNT#PpN&+yGh(3u?F_}T(sJVWVuaouD5guSq0 zm!CFw!N~X#0HGOABj#ppQFY1bw(3C?rFR>Y(YR<1EB1|8vcjBXe*ONs5axSff@jky zU)59Z<{-5a479B6BclT$^fmj5HQ3{*CIgz@m}+z?HuHiGgd{U)|3V|sby*Hl#j*dJ ziqHi9p~NAdkj8TN36^Oyfe%{cZq%8c`JxlV&c$vxND}r>^*omrP$-s*k&cjyz1L{ zzxTj0>PGy?_N%}Lbk@EURWQkA}@<3(=tul0zSSh5#8Q zH$dOJ&oCp-VJN_w0h(aaU8KzRnSr8r-kwm0hAI(k_)gfCy%-05Z4bFu7DH{G58779 zrScdjFqiJ=AFcehR5P(#mVYR$_>6k}>FEOdA;05#FrDS|HThfiiLO>|gv0>vsY|Nc zF*aRB1S1g~2??JymZ~#`I?Q@DJn%y<+NM*S?FL@ps1h`FF0+sIYgi9Saa@&i8^T^3 z^$cvx+#CErLFIxiberg7U&&7w&B*WR)0OUuCz)sT#`_5 zEDQ{H3-nRI7T&Vs$)prEC{mmG;0Q(*eOEVAV5txDMw$OihC=|LG*}!#lZb^JEUHn_Bae;&r`nYQ5 zgIFXTxzb>30J>dppV2MjhpOtOIuR^8&!oP^T)TB0NfH@JQ~y}3Xhj%G;9~mQh4L+a zE*Wi#g`Z(N_Vo4Ng zjarLqMo^Y0Moe@?T7nIMEw)Fe*w`@F+54~&UtkKdmKE+iOjwp5@&fxzlKs_su>SCb z0J;vA@(`B*MjpQufiTowj}1o+I&RFsuonEzXjn1z@mbD$^s<=E_>EU)qqi*PuHnCJ zv$d+G-mbQeT+S5pxt;p}b@NF8)18ReC}8EHF4PnGd~+mUNamxJ0c$)@FS20+2h_x6!!(x`eIdZt;RZ3i;iTGZo(*WyOoNt0^TRgUMxnp~=lgxlv=kS>k znNrf#wzDI^ZzT-&#hvZ-U`=-1qQv2b6i0MqOsA_{>wxX@9eblBXOPQdwEhjqlJa^#dV=FAOBE=;E!%o3upC-76A5VfRV4oo}p)b|Aa~ok8nIlnahnU%IfI~F47Thh z5OPjvtmkQ*{Yqw4)aD*+C&WMtRab>GEZAZ7lTq+9TJ#{W3j!p`K1$I>8CN!bBbXNR zuip2Wb_;xqe#EU?$oI_}?&`oW`-dapHdJg_$gPu!eJ~>KFt`@jM7E~M{bW9RF&G{i zqm7s|-ov_hI1fBP^&qxkzsCiU?r46G(HA`AGvwRMw#Bu@mU3=U+&;uhEJxMd1SLaz|HRO2&+v5W-dynV~8eOG`;=E1FXCtnJ}Ulg9HHtc;IMHa8oH*TR(76Rof~=9klZ^B zErHgV|G7RK{=Pm2>fVT>m#H^?wBp6-SM}KL+P`8SP-wO`(E;4wo|n`jdePN&93*PZ z{q6)`sv)ZCjpmmoJLbcS{X2&kw(31@eID7<(<*KmpE(wt@K|^#%%&~Zh(4*9y6U@1 zr9UNSy5&rZ*`H^l|3d_28wAFky4VkONKtPI*U=7jGJYiAR?MqDA{&3A%E6K5PB|h4 zBAWv+jn`RK->zNQ3|X<2328iwc;Ww8fB?Kt)2nC24A~CJ%++ew8Oq03fw3gzm)FQI zge*pnD=$lRk|kZRyy*}Y${^JfyU3{;p=oJlFc~LtkVXgQKgdnA0fCXg9Mm7b0ItnjV#@7*x&?x*9u)#k*sQz1eXe?)o>)- zg57fYHBKacuo$%o1I+-WVronyvw7GT0aWg*Y>|zvn^cSY0O!RcU+;|F8 zx~NIP*77IqEgYvj#(m+EO8H|4hUUIJ`h-e9K&K^~v;y1>>k{iyWnsihqJ|Z2rcVMZ z4RT&&FX))v-+UinpSjwYb#jO6<{fdx6h*G6ZnwO-rPl}iqtZkS9fv;N%i%fnADkBH zG?br5ed&mctW0;XtH{Out8Fvu5S{k=gp<4F#iwGxeK#$v4)+fZh#j83lqgsj^6F4G ze15r#SF(A<5!(INKHx=n&PFwD*|;QB5?fC;2!=AF^IN)_BV76%49;-}jVM$!7AZlbw}<8nnDw zvaE2dpe9Y7Z4nf%C$SlO^v795JK^I8Dz-tA6RyB$@Cxwios`+JbO=*xRXnIp?rZH1 z6IXOdnX@Gt=(oBYOm&p#qi7*ImoIS-5J#-lf&*5?6Ozq$(=h=CiH1v%4JDcS=`(8< zzdBhYr$d4sK}*s9<0h!^-l}&(qof46(0kDHg>sq3i$4JNjni5|*WTc}<9L-#K_3P8 zH17O83qww{K_1521R%s>-K<@jUY2hY{Eq5UAsZLK-OY+>f&oW^zOAZQyN?Qgiv)5o z03e63!QJ6|@ry-i5Iq4VuJ`(P9}3l9C=P(o3-+@o`jJ2T9Y^QMVF!Lbci=ZJYVY(%dYD)A zpeaLZ;%=*u9OqBwf~t1~@Hy*F_4kT?R)(>RTUo^r$IKKA!$oF0?}09W^E;HE=J;fy zJwYW&8`>prpQO+-Qrj>?rxFAR@We#%-gAH>;40Ja+Ji2NX_Wp0HyBzlh4_;(@lp$C zD`be_bmZv0?z3iIp)3&PrKdIprYwyXRpIF__(2~rnzPe8yw0ZFuc|A8yWm~BbzgL{ zLC!|4kn;=>IoRbEK=Y|F8f48$G}aE-_m2T|VZFVX;S6xWzo$-3Ys7eKne+jG;eoKn zMWwd(@l^-|(_kK(YLX;{xO=1dsQpDs@Q;~?ZG!n3FwvI%G$)HADHv_`Ec8ZaW3uW* zJpllRa54EyFjHPUtn}78_Hd}VD`T?r2J1q*x8p2eL!)kqa20O=XIzf9n6#I}wj_n5 zzKDBg(CO6jJ#s(of&COEeZKi+TlnHp8$UfM6n*{f9;5k=#UijGVgER#Nc8 zl8lA+>s!qq?VtM_tG&6`dD+`K_;xqHQN^<4t0Z-Z+C1>Mx?q15J+&_NpeX8iX*S8V zyl1CY)E$peJ$S!H znObvqiME>3O#C3WPW-iGX>9Mv{4GWN8E6?)j#fI_XtDtcMtF;Efy2(@z?$bvC7!9} zLlXZa_RSy>-@8TdrhIV6@V?~naA<&3=)%A}kaTT7vzw{D+IeL;!OYY?!o$J8GIeQ* zzF@8GJ%68`Irq9ZxD)1<`WEa~Z>K!q*$BSu2hrNs9nQl6=?ahpJs{@M($Xr#&c6s# ziq36K3ul4YiKcJJX0_6RmVGf!x17}Xjs_)sYfPr+PelfGG3AIVR*IaBI$?^hB|8L{ zvG94GoE3r^gCK<=Eva@)z+;0hIM5Ngp=6`7Idy|#b`t} zNvq}pr8Dm@RDB@4%wYLBa+T52tbWEc0}`Z5?%@8RYJf8nD_H)v&on~e5y8@7XtHW+ zArCwOd`0ANUy=&(`SV>NlnDNrpiK^>fXUCrrMaZG`yeaF9z4gti)9ZV7`pnt5BK8+ z1wvA=5nD7eA2M3bf&)r|a4Acz)JEs-c{n4=V9kB`NCP&$&xje$%l`3RC9=+*15&CE z<9^?U;u9BNe1&?c%l%H@_gyV`9d|A9DT8i9=P8q`VY5L%U+aupBtMSr0*EzQyU1o) zRS~$cx~Hc=7^9?4e$d{AiPqPc8J#Vm6WB;EPemK5?~AAv911h}L&Ar!=l3L<2~0POK2mxg@u(3o@3vfMV@gSiN={)P!8=)*WUBg<)B+{_ z$3I#CHU2JE430bk6fUfJ6CVNf;~_b!*%&wPOo z^rSNtu$EPQV6wSoSx{uO3zTeHq_x(c3Z^z-Z{ChS0Kkr%@*BzFyglq-?^^iToWR z80xSyfnmHU+Q4CJcV|j6#g)-0mLMN{ykcs|*(&yvUOYgi>cxLodXLE%jRiBe-SYd< zup5j@d_KTnVP&08kYPBqG3$)_}T!lq8<%YN?zEDR*D_v@*RjI>9}x8SmK+As}LZ} z*&n&%C{tXt?0bLH4ikef;k|roT@aR;|4bV4v|)e1TlV9?M?5EhR1pj12XZ;8Y(xZk z`t*A6&mHYaaNs85%c=O)SFh}d@BouZ6t4S}KreI^3lr9({yyjDENMW+2yKcZKIj1I zPN=Dn98plJaZF08_DP#>y|;V2KdUu_sdTYfb}ne0Hc}3FV!G?Bu5mf`_jYZ~x1d>6 zwz+EIH|B?$e?LL2M8L8HfoS51Ak7Sfn_d3u4EFEF7auqOeF4NDCj)$7cuS2FkFt!t zLL#$z>$XV{&2N1&=dl3>jF7E|3-@0|iLLJ+Ho}C{m4Hk{q{Hs+ki^t+h^}H=)vzFD zyC}zFg6Bx`%Dr@PIGt~Uj41sM#+QjtF*87M^ZZI%6-iz3Ary&dFb*QRgSFvhHP=<6 z-~ShL1zt!ljyzA#(Z8?ksl}b>Y!^Q~kAWppR0Utk*LDDxt3Xm^(rg`Tc@__x$iWny z8&{+4E<1C!XN(ZRDfZPsvkOqlTG1L2LFf=juz8#>pS@N;goBx=KAD+Sb96hj#x(ULo^VAj_frQT5Qk!@4uZ`eLuO z)eES0IL)bvIl^a9@&vU~H0nXhmdEeBsnH5;W-44P9w zH@CKl`MiTAR#IIts;+*|a@~9Q_UWYdMS6j4xt)HALK{wEbHuqw7rIvNpgx4eGdlJ?WTO2QYiq?ilWuI^|QxNpRmgZ5BG$&%q%Zv-EP+cWVN zfXHI}gE>honJ9N-ukg3oN9Gtvo|y$ejuLD$LAm=q>iUKbYm&xwGAd)i=N}bTy%=MB z(8OQGuH-+(ZunM!^lg+on!Cu910VDMtUSl-bpJ9NlE1ykTs%Je?62hh9ZrO=ucl@VI<1O}tnLJsyNe%X93?RHK^ql2<}(p7$+ z{6yVDCFle6GGvm);5)5CQF2r271$>Rh0$edH6|4*NM#9UNYI)5Pg!f!UWiCmsY+At z0KC%?sQV9FIZH2vmpY%Ut`H)bF}E=ZOfiFKv|i(&EN#>bQ*y+=%Fc5G$6a$L!LS%) z8U&IcLjtB6qDm|vv^(oWPuoZmc|-3|`cRP}#)eX(&?u^OC+L+{xO3G^6vJb%?!QJ? zY1G3dEC!_|0#98eC^7Oz33JArzrJ&{3O)vwoh}>VBNPhK*|)XGzIA*&hyWUKd1c*_ z*-Yc2G>6EIB3F6Fu5bs&jatkZY0OnoCRpIuhABbu*fb53M1d8xF_ji5LMCiCYk;md z>~6n&QdbXt3)3HbMsPfK4%AjV-M)-tP+Yf+R=vy=@h&nbnX1DxXFdkxO-$$lTy5Pb z^`PF9LmtRxc)GtU&5e1_nwm9eE?9NOL>JeyWxnp1^sy>Fm-J$mmlQA^bsQtB>(vFd8AmnEH$m?~$?9KZ;Vr}?y zUOm4GB%<-LJbQVW5OPmh{n=B^Rx!AfRgj9N?8o{ZF}o{hWy6%M^g`4gB_rF9!$vzG z@^LGdm0DBcOt@qmQSX6}Jd-_2>iYMp!p%rh^-oXHAxn@bL)Y|M`zg)Dp+ZLd0nOnT zikAIg@rov}rwmL|4)>ZJvB(gIyz#P7nJcSIjq@J7m1Z{73;x_nK+L1GYXnlgU1ZKbM|%_VzJ7Vi@RyJ6 z&2j{I=?A{3|BI9gqyw+F(`<}CpCd^(-ypb;$=?FrQV@ZWS7sy{Ty8FA@NRmH=;E|! z)n_5sgeuU0%cg%+unF#=S-ZJDf!;|#U0Rl9dQ8?M$C#I|cJQOv-2t|uvP4ccV658r zbS~<)3oaKX_K>#z76CT0iTZ&DotyLn$R?hCPP_mJs+$egp}}2a`w_b_(0?#CJ;mV) z_}hS!r@iHQ{8?FwNa%iCHlB(%$y@p-RPQ|PuYZN{qrafl<0*5`412Hv$J{mTK^%m; zTR=zN>2~i*aNo~c(&fcekD(NO%_OO}*|78rI5s=R(ltRCVJ!s!(*Pfbkk_rMx$MSgpfR5pioVh1oite{lH+Ts`1eTOCA@EFQ2+Am*S z*Zr3A+oY3}s`!K?`$Q_}({?vSL&iikM0a|v6Eh~u@ZGnRRiQVk7k)ssvYX*dvw_{y zN|jp$uru(ZdulL;>RxR|ByF@@lvqn06vG-8Odbc06MM)YZ_=!eIYg)b3DI5;1I`a_ ziyaiJ4e}D{v;t&-?FjVLMYQeba94Gm>OuLXi1@~#7HmPN%`ie_XYz17Z(3R4S4GHB zNWs>x%W#s|NBR)K>BZ%)krA(iSYgZ&7;)nVkt<-kVixuNscTle3HJsn3C^z}kIGttfk=e1Xm`YTU`bT0y&9c? zRY`7~?c!~X4pN97Q+1*7ZeJ5l!2QhW%k~zu{IVU#zCtlP$iM(GyU z8_@i)mxYOz+wbdXo94RDe*>j;=^W|Sj)pwy1hBn*>TsW0VA$1EHX67NcKHGGdp87W zE22Ji^ z3t6r|(D`n2x3zepYw+h~OQ`2DImeYRMu z`&o3qdZeBuzmCeW>FHmV$&f&BI&`*ss5=s&*sAvt{AeV}M`v(4Q}amh)towqi%HnM zB`xL~}0uN|un7-v4Vt~6ABvAv|xq{^>747#p79&=OGb0fmrqHQQ!I!BoTLByExGgJ|yvBWkFx%bG7 zLP=2~+%GgDC?7dT$q_SdMZ25g(Nk00AIfnX-y6P}Z$FpSW{riHEmAfEi`z0#GX;E2 z8b4i%_)HrXYZ3a6=_QdV;Zdeg{N}TCU&XlSNq#eyIuO1Rl|HMKckQ~tyi%ZWX zK-bqSY&*dXrTt2>K$Q+#AYQ=jXjn}c>W<+C3Xb!Ekh+$cNvFDjgy;rIE7Q)P5 zbI5~`J4ajPIHFM|yRYf1fK1wZTE~oKmmGhLZQfLL zdWxy@UWulMZ8`P`pFz!ARK$f0unM{g_gQcACv8|6^&xf6mm>2dyV8qdosvqEMtjCj zviYVdBJnh}HScw&7pk@dqWPpEYLFH^m$lep@=tV_bQjt~?V9)7avWjFdVW((qArz| z=N**H@u-W#GsBda6g^yB+&%oM;`Hd>ho5GO4ERPyMgYiG<~9kg^Q%gcl-$G{`0Eh+ zgI?%4&*y_3IF>l3UcQ2yOpY1PZ>CL0QR~m6_D|&b3Jk{r*>9+~e!iG8^hraBa(HFD zZ}MF5C*>?c!f8$4G(Qml*PE&c+#k?6NEm9RyUc7ETsIpVRJ2yrS0$NL)05<8kbUkq zJ;j(1Qqd76_`LdAEcGb_N-uw4IfCJRcOy9^&+Sq~Y@_DI;IzvSfh-5hDdU89#Tzp@ zVcJ*EnD1j*f0S`Q@a3XOVN`*1f)Rft7ta$_=b7&+l~Jj7{v&}8|9$td;b zu($H!>T}f3=~b4H^_b?vZ6|ch7{v2>yuink&O;?%e2^%(+J5g% zTX$>cmbsj#8=nj61CdZaC@kNY3A4sRB(7YSRtU(h8iFVq&O6QgL1?blwb4EENN$ck93m3Ndeg?;4^+;GErH_ zhUvJOsxf}AO8nEDK6mN!QKR{H^K*mEgDyjdSE9>P5+(r(Bnqq{^Ce)pD*Vt?sTVN5 z8Xa6|KcQ@Kc6cUSvrkoNXXJ6UO6_`S8yd=jo5xqIBCNPUOhjobvzi|23*GAD$A&?0 zIW%mEK3>=N3M!<=R$A?>THRXZ-;y}-ZucKLZ)-_l(-mhP^6x$w5)mw2hDBi?1*^EH zdkH)c65g2xh!fX~L}8=fgpU|uvwiCwP5!3Xg}Ao|)ivLLx2I7n%Zh@w=9!V%1fw=x)G-Q9p&G=v2^U; z9I5a@WoE=96TiUhNe}``O?P^&^+d{*+bd+TKoFID@_Yj`^h5f#JSGaW{He9e>31Iy zsyS{a)@F-@t2?%ifV$lE9J;X{bF!#I`pRhXbMFp*rBGfG;*c?dd*w85%Iiva$qC*^ z@iP`|Tm~IE2R)=AqmcN5aYQja+#BtvJsEi#Oa{9)JUVxpJ$t*A{#EzaVQ)Cy6a|4O z*2z$ON=$oz)Qn(n$YceZ(`k@wDw}=AQ00a&*s6MiK!#k`D}OsU9n9ObPRn?2eq!RR z6FG0y(52lHR*TPh`R3ZC^KtRA1jB;tms-IfkGv0c=lmNF1cwt7Rm%dyp6n3rl|CD3 z`AOA{1)DOY7dP<>?MH@7Rtmmc-b0tjt{1=*?Yt+JTO~uBpg{kO9daMLZp99Zh&6h@ z&vBCia&d?*6*z755G%n3p6!QaIYbCzj(U^4meepo$)t9}$bQr)}2Lu>aZBOk|Ai7!!KQ`S!D)kx_m047Q ze}89WSpIBCa2w33r06>fKROmE^=sL1$9O=t{`Od=hDE*_kynz(mLXkc=mZ?K5DNtGFe!nvuv$E?u#MZ zEJW!Z60)ysrH+31)YY6sdX3n!$fS?Te2}X0)Z$b7sY93{F3ds*o2Cj;A-j`Qe4~@V zCFNX~KfO$FBMNFhW(D=8aQ0Y4WcVbqHr^zRg?r&I;fR| z_nCD3Gr$JO4*t~EhL47$LZ7LUDL7);y}Z{?hpj70s{rdYu0&4XyX{AawJDQT1}PxK zJ?tWeyA4ZJI-UMSWMaENctJOJw;TGC5uHLoqMNk0uRKe%Inytsyxn8zRi8=BO01#- zw2PETnL-n;FiFlJ=y|W(Y+WSmD(~Q~AxQXh|8evo=0RSz9&N4?SCg7O(bg z-s1&9mj(ZO))Z$su;AUBktw)Ole-vJh^Kq=NA-MIIkm~YX@Uqg9JVFf$^^5N992v{CEO>1uTLGi&p0r+cHc?NluhZH<4v^{v62G$ zP23h;csZ+-nOW;{x}0&Br+N{zR~}CKHRUp;CfAq97mtRRi()9=VO*!2xqMF}j}Uv{ zW-&mkJPU7nL-6id_}@GAg|&nw%?kCvnQcJ{;Cr4_Vamiy(XKUji>?@Sy|$iliaO3A zRa>7v%mh0-Vr?l5KN?^CSO1hQZRqpM2Z_T|AW8hB-l}HYv(w`< zrG(bc7tVN#{W(vybXI9L(-3W6`>yHV^G}Xt3V(34$CNm$Rhk(px_r4fcbt{<(!utj zpvG{GBd%`bGoQzVe8r7)e<5Q6Bma1acY(U_Y~G)OEoWzzb%}yr1DlI^FqyR6ba{&jXSM~kLIaVsb4=^8FV`il)Ju~|6q@BQZh~#Eq ze+V^@mvG-OhYsasAbr#6?5D+n>|#6WHyr z_AYd?TQUIGJ-(K{;Pt$nnNLQm^j{~Q1C;1;(HtZt_?_fJbj9}C8b^TTl-sP)=!`tQjJ2xZ)f5SKWfHoq11?+hFY7&^)$F~lY-s8T7D zW_e8Q8H_c314{kGE?`(x>%%SFau}npz)VrB#MP@bPp|di4DNnC28<}e^28vECdRF7 z3o|+sJ+uM88UQq@SBWJ4>nf!G25zh`d*VP*vv@h>iJnTpvnHiz%~c$JqmU5^M(tMf*Y~NG3D6)(=FXE9me$~}Z54MPr4f0n^E9YkkL z17XX@?<6i?Knd`Cy>DT#ZJnWP)hRZMAT&4oQhvf8gDXkMhM{o&Z;lu*?9Uay1evaF z=js@UoD<`e_2>YtTg--kCs_o`2V6b}(dEwUqh&zRzm4K?%#`*c>w&S*GMO$cs|J9# zBELd6kzK-q@h-bj`iuse33m*q4S6s4yGrhf{116#vCGN_T{yFf23GFFsW=rx{G7 z+|2@@U4BI!5VR|aI{%T!c#MjjsMPOGV*SDjEY^Hy1+eEnf|i5Hwm|VSiZTGB9)=-Q zrph+31P>Ic=jNaYD3_;nHBbNbd;WLM(4VWxat9@|X=(y&A&+bD+>M^A|F_HWfB2*R zkG!j(8v?J#S35u*&1wEd@1bn_%P@WGT@6eG(lzw%|NBDy=Vu1Wqb?kz7Woyx7pxoe z^kh(tV%>VQQ{)X$JfPD~fLb=;9 znUM(!Clwt5n+S;Rh~p>2f8MkI`6q7P2G`uJko9#9Sg)+=-PXB@%0)iic^UEV3()`N zj{V#30h3B}ZN_O4mn5JN{T^k72W|nSeWUXK>$d;fhy3}6AqoaqdL&!r4lX@z9rEiJ zIY)0!#6Ma9^hsi6t^^wAe)<(&5x@zl%8wN(;h+9hNDr7k;Z+~O!e!uc0;~|Wy>Lq3 zQ`{QO|KG3BkNN_B1bBZooeb0(-hLakhNCMs%A!7N>_(u2-(lvAhVuOs6o6<3WZ^#h z9kL;|=Q%U#e|5MW%Hw0|4hHpBz)`OsEOfP(3R_QS^gbA1rJ8R8+3i-TV-6u@Pei0Y}Uw9Q@U~H9Uz&Ex^n@Y*WbGsA$k%K zcpuK@w@}N+wTOBTj+B(XAC4aa;i7Is>+#jZ(3- zWX(zvHDP)$T6};9F`mB+b0M=fN%(XQRC=PRlPAQc(CRY}wW|7K( zS;tYT!X5R-(aBO?PexP^*@V`~!aM!nA z`oMrY7n1MBVp?<_w?=8dC;=$uR%$PyjCZk23(*`1ts@Q(Kjv@6t`$e!x=lw?t_xcg`C+gbeQN_{ZE^=*mP8yg0+8 zvRyj%8hB2m3k=LvDB4uQ9T`wMYP8|E5-2P?D)9+o#;KeMHJ{J#A>F}7z9E|K(v5;W zZG*R9&}!s$iXk`(?;^&rh|oCO($-(wlx_o@Qa_olNuU$C7PHBzOOgxO#zzLQJ`hx~ zEc8A>bXBC{>eKEz#EI3d4WEFl9)478Ll*xj*r>O5-W3XO938KCPyPf0T|s>?@t^ku zNX5G0d%)Hf=qD9*xb^1l??Ihb==s%2+g=1x6}!(+FMNoX7>$$mZCdM5;SAW6GWV|m zxlyd??8k?pCF=7_Jcn1oRg2~hIUWn1^SaWsZNM5#vyY|EUrYPQ8v~g0#vH!uoUKtU z{+4$K7|v>kkQ_RUzt*ZZ)~G$93Lob+n0B?Dmz{tC)Jtd-p_2#L1>=Yk2OHPGi+QMv zc}r2{E7k28GU1T6Rc0Q_^A~`yHsA*kackn@aRGN0egdpp7ttHw(O!2NJpd*|NHMOn z9-A+{$qv{-XFeBe=BMLD2e^S&Gyfz`cn`Q6ON#2jqST+^aj32^T z)0%9B(dEZ`ARD5FDkSg~_{<@00Oi{T>A@ww5<*-}+m$l_(6_fM2JE!ii9d3xKU%pnt8hie(uIZk%LuISirRX&$lLTavkN%7y2n&)4p5nN+~ zXshYl>zEs%%_{O;4sKUeAo;Q{4BbFF+~kZx*HBi+m&D5U zleAKpHW$k@Rwp#lVWa2khMVKj){19gG~lhQ`Ihx5kUQh2YJiEfwoDMw zI62U*qzC%D{JF`e6>+}9mcidHuqZzcQZm{q>r5^~;UL3Rp})5SJRGTZfJkQfxN&h` zs@$H0T8CxY$PYmBQVok1l?mSi!ITq5|0i`6y{;0hb5_GebmgIc@2V;r!;KBOI4ZzAeAb0kxa0=G*WvdJ*=gTvb9xsnHFvv%rGD^AIeRF2>6w<-7tw zhaTY zXEC~^XlXn7(~_ZWr2)V-#X39*mDY^!pEtC)AL~)y%KjsX!@Okhfqc8y&kn3Au!4%8 zq_$n|I25i)moz)%8LyC(`yJ)eric^*X}x`#h5-YH2L0o{lUiB4?VZM zyCp4wVyL#0K-o!jCzz`8v$JK}OQNqF%V>{9vQFH(Cd0#{50(}L6M#S#2@95arY?v< zw;??dI;Q-Bds{6ym2_iDs@e$&+ZaYE?&<^Ppbs6!&zmao(@a4zMooY80-eI>D39E7 z+p-PNC{ty09xrgzzxZnSQNJ3~+y|-X7#CC$PNWy|<%5em((i`&}Ev za_cgxHFgE|B`ZI#GgG2+Uc|-GI|;Y&Z)4bjGI6cXK;Q{=vm3Nni_+!_-0*KEYDX~z zH0a`JTR6tQgBT|tg|zb$z29D4#<%TORl7WrVq1N z4yS)+A7xR&sm*1A6Ss}QQ(1Mok-KPKhNX}}Y{{dud+WqQle2q*j_!IVNtriY3Ey0*|0?GLzUwh39x^x>$j)qSlsoZe8Z z?U@yI|KM~=`S^o`Qbd=f9XT2&$Z+05B>ArM=MJC{BB;ZY8)f=X$eSMkTZ+7eOSE*l z#^Vq31{99I`Q9vVz|q_5)y}RAv)s!?v;j(4;GN6hmNr$#E{h(6#ruCPy_YBys^1An ziM!lw!;7M3vLTx?1K^f>4RO%mjqhq`#F8^6fm=(n4C?ut@N%VKal@qnrX?euh zApW_K49a(AO5%agUDz9JHuJfUekq^c!pQps6zD>e`haETP}_N%b5(?m%)n8Kd^~6y zl@z1^KhRF41TcBxtP_6ReQPB;F32K|hBI;JIsrSHv@e-a0F(kds}Fy? z&##mt)9V&HlA%3&ED%(@1GbKr(Mv9S>fl}?Jz7_?Qj?*D!?(k|BC;G_bx}blCX#A) zf^fJU3(Gs9ZA3(hqA53D1H=IL>o%cF@os>iYN^c85{(tv8RO+aYar?6DPq+-thA3$;WFSCG?&0F8o45ji?yc-&)K(cH)KFDB7A+ z91K*Sz5U#BdvqM6GAp3&NveoVKyjuHL-_{o;Y@DFd72OAj5eFa+|tQY$bIz<8+@f<~H_wp>7DYpz=^k@Oo8i1}`B(YI_`RylX9Cg5Mi5 z{2Ux6>}x@F9sAMPLeT0`+BovN;gyU0Oj-2`NYEM{`%(g#PRyofsU-_u zZp@=jSG%@x$WFitRt~$%o55!;e_yOkiT2mp-9geMQzGwx?2WQu8u9?YR6g_ak&wwH2=W;9^T4F1op3{1%`@z5eS%(pt+T(!!R zJUH+&86R{1rDnL_;F&9E6ls6A`lmxDZ6Zzgry2GHwZ1Qg(3zZ$O9~tO^dZR&2&Kmj7m+VO zar1X2NPxvxt<}MIOCK2-n;%}Gxt?r$;10aGZ&Ll$0m+8xX8&zblAD%npWdmD;)@-P zeeE^ro&$t58Yg;n-m63@p5$aTZx@xvSELHtsP?epQ@-U{ebC{9N$l@XB&Xlxqpqj8 zNn-iL0aV=8G-ubj^4^CKvSaCW_JRl0I(#T#==t|gC(RpT;~rT+rG{j$1LRW}>ny5i zFkN>Q=L>R6U%@~(^{Zcm%mdP_2$S`ss7o8(_cX3!Qpi_ixAnLvb+ny}w=lT;%aECn zF5aJ}!+jn2Px#d7QkSaZQshl={da7PU1S^6d8c?2WhSE|VV9Y)G09AsU*piSCrXk%D>cF-7GiYF(HYP6)$q& zJ?ZTeX~&A;Dlq)1NOb^k-%uvL2wmaV7n0#WGv{{8>;#9w)z6&{$-jf;!)CW3I(kzR z`rBDPDu%$D6^TD|wpE8hL*?IjcROSPdT?h|`iKMF!mJY(>-P42@^>~c16CJ6CtHbj zyOsDPN3v+;>#YU}miz@{%1>E12S+A0{P?)K;;tu@%eUaq z`Owyg+osoLmlY#n;DJrXK)m==1j~H7Fq2dvr%fAVf6%?C4`E^sl!izy7rzWF2&PV0u=n6+x#{n4^rJe@~4nP2Jr-0qAC1nzt{;M~H3hDk%ab1Fb@ z_>NJI8I2mB@!St1ISej{*0gbZ6Wr&El`X}XeEUl;@KP+6wB`3z?$U!NqYy`+m_Z!v zgB|-$?d2?ZA)+qt9FSQX;b@(^TMwaL;0`cD_b7$SX^<@9j5-81<+OV$*K&j?vM3TkVh!PsQagH~woC1-hpKFBm$Jmt zYVBj;6e!9Q*c2Yz&bTq+ChuEqV%3YBE>5VT57lUD)tx7i;s znb?7z79GEH7!B6 zB}v>#AMO|8g6CsC-XM%%tAmfz%m+2dW{zjjF$KpERYeHKSf2BuYiCw0#~lh2RGRy8*9z9cTiyuhwjdGhIKg&4{CYoEH z1)SdXS)dntNRc~?b}V`v#H&nXo^I`km(XV-g^AmXtGDR5Is>#&m_Ymt2ASr;l2}99 z@`C)6&i(jDj2QZ@J?l{9wx~t~>?#wyyT^mz-G!#;osvQy6Ll{uN5Mu9#g8lEVl0(S z)g-m)y)icKM$~4#rC_z#X6mwK^920xRZa-E@zp`vJcS&&DUG}XT|f{*d3zb7iMN&> zW6d(~u4P+quWXbrz&*tTn_9I?6G-xyXH}#@xpmETtLThYx{K@}hw%=0g*fM&EAh4b zrPC+E`BF#=F217v!Sdd_HuXhG*f{enq`3h-;+-e?Li=3n5F3IsI_EE1Ix#7|`?;S| z{?Sx`?GtD!&g)-bOCO<6dQ`E#9nEJfzfQs zWQ%=6*YzA^lJD7#!q_LB7g^e85)N-I;$m*%W1Jv>SezSTQ91i;?7J{Qxw>;0Pa>)B zH;K0It*OqXr#n*qfZpUNsGxvMBHeNrQip4%ciLYF5rgf`Xt93Lj^-KDRA@6)aixz zMzF%?DyGyR9{F$G`{z{JB@fO#ri?kqz92}V$7NGp|J8D6-&81t7iZ47v;>uO3flt+ z7sWiEq^U3iCw9;Ql750(mKx$%Z$etDg3pJ=b6c!Xix-7s8bsfZGzzD2*L6oVs$@!T zqYVj}^}=g`A#pDcFaDvAC_qUIJ$542)8>y5Ks7NN!@bp^=-T65uyzt(vZ1HYc==zy z-(JzbRzU%oLNrtnSgpS)H61G@TaReQg^5muFupNSGE48%L<-+LWQfs=qmv1RM&RmN z(3#<#_we{F_nVrY%FcE^@JpsGBpHe97P&3>R`VX#1b|ZRLi8x)=o|{j7SI~#%1Cc4 z%6;a@z+j73tbP4>7C7CpbUjWb@V%8_r{>|m(zo%nYpWvy*6K$3Te?_GLVu67sRG>u z)-XNsSq2q7w0uM3Oo-=GCatHcAo1B4`LRIdFy#~5cnq%V7Qa=SFT^2M?N%y;52*CZ zPVuwE<3D3ETL`{UAxTt_U#$ap*g05am-`u}al|%)yj8N)yft4al*zFP$>aUS)%N$E zEeMV0v!5s!YtrZ8u(p_YOjN+gwS)=BW&v8 zw@WIP)Qo%^Bqz(|A;Z$^N#z*WA|#DTk92^X^>HRX4OMRSq6fw5_Y(sEWnwwEnS1bt z0}TfqZi#|20SK??#uxVW<~?{w7JLCfnMflz2s`P5LWvnomb+P#n2;@%!#apZs5qhM z`0#=e-?uA6>v*!=4B>}t=MMzAUyGDnS_2}}h-BEKc7|Z)0*0fTjxpbxg|B9kboKiM ziBc7}IijM-UtsS(?yj9U0d@8n)W*rycHhT%0|1$}r0Umy?_#`zAa{JJ2Pph%VTL zv3_|LI}%&PsJAymU{>hhNxo56SqZm0+2UTHb7$luSRbUnmn=;o1nEug&3IOO zE7nP^w>9uSc{abg2PAi@*0>4$R7G2&UfMMw`Y?jD)^t4$Z*37Yd?B`VwjNrQH;SmO zy;A?4e+52a0Qu)^;||w=$ues$Ji)4hflhYAETr#+^^7PT)=%rK=kXj7(6uFH0YFZQ z?v+O)7it27A@;(K}3R=RuXSCtike(B{*bHt4f z!oY}t6ssR52y@Y&{`g1>Dx60mFBXy;s`scXVM`=hgWhypOKkMdzC>UNYr;s$D1$X> zibqHH0Wh*P_>@xQbIkjjfN|UMtNyg#g`QVR_RZHs7~=Bev=<#Z`-OQFFDO9nJPJO> z*UYA)_*BA%m|6F5(DClB8{@4HM^C=kTo6}PxbE8lC9z<6WsRpS-C_eD7_1aNXiXGBiLG{_2Ws3F7Je!=nMoQ z_d>3)2gE@I^nLp091KY5nDF|o6pgHeX%9ia>p20X$l>6}Fkf7$JDo)5N?bP+{l$9i zpaRlk2ScriUlO*<;|UK2_wxA1S%!SZwa`=5j|N;soULx~S8_>T$Zf<%g6(U&%+jS| z`vh!YXSWmth#6@L(+_La@`d=W50y|fC2)Buw;MiutbN9Q8nsc`wW~TdqZ&-lmll70wFRg6@t*Kt6 zdiobFC2X%kQ4f3ZpNE~vYhBnw|?ty*gm3_90+8`|S%0Uk`my+9)nKH8vT|0n4 zmP7-0a;hk1Ob-j}Kz}YP$;_YGMmR8inxSH-*LInV>sF2%xYZ(zn~-Ig+}eO#vAKKeuI7iIJ# zQe!whLPkRLF}P6yxAaK5)bDh>h(n9&UxKbYkk!bGCaS!CoN7t&EsflqhLsABm=kX% zHDE1C=|Cen_|D7$9i0luyj(5TJ*v;0=c}#LsKvOs1_pj&+O0g)LKaCTxpJ?E3t3jm z9~CiuA{j%Qt}<7V8hKff~Zs zh%8;O=99GtEXYO1iUw7~@af`FX6`5Gm3zO-s@k+O;w+~?NqdScC^yy|_B=M7bY76D zRj)LDK(uHo%X@qESIH{pf;A=kpkjG4UxiAqCr0y=V;kHime?OZVfnx@ZXydaUcW0M zIsRHsP_OcPJfI|{@&LK&VQ;lDijrjcnT2rpidtXc5b1iQmjmbWOYH*fTfXK6=ljzxM{q z_DMg)!NzD@uYNOo+I}BLQX4-~_bXP#ohDMhsK**dHsnYc`?1dAJtcYjaISK`f3yIT zh;$S0Zuek78ax%mYnym9$X95MjrLdVw8?-HH&p19)B$Ja4_&u|!AQVuS$UH(SAO&1 zxInz_QxeG#9~cC6TA}CP2~TSt{lkehGZc zf{p~1gag9uDCvfu(y9C!w`_+bLp5JonqBdwPMtq`tWZ|7Rw&$9>yx97FU!;^AW7C5 z&*uMdfxnk&bR0?~T(Ifo7>s`0%1WAt#kXMM+Oh8n5O0mwprJsfP&qurWI0L+y1;6J z+!Bdx9PS3;3Fm;A|K3Hp&_*ws&r5>^#~fSFi%ztM$;#)2aywLm2g7jaip0B4?uRNF zI#~!~Wn53U$9wa!us3Gk9(F`iiz;(B6bvy1x@H8dm3^@wP3JQYWAxE{eQTnNw~}1r z8JzeL;-m14wDhYP*?iZxmYBsC^L0m9> zl;_3XKdic$8iRJ8-M<|JIQiSo)Y$QtM2da!apvFB=(jo0h6Y>X|6&~Zy=ZNQE42a$ z-qo`j+NjbGO6?qj0V!rkk_=>Pc=dqp(jNJyebx)YBj(;aGfh$5kQTS{5f{-out4uP ze0z_d%YPf4OhkaP??*)L%*-w*QC`~VnME=i6l-0LE&$dM3!g&HUcEKki3QR#3Mc*{ z3I@PUMFc{BdINTDWsbN4z`EPfe{6e2ZKYY~fhh01ZB99debI%fb#z7A{SD9@pV~C+ zC0n=kT`9=Jj?+w2s0%Q7Ya2O&Xq@Av{Qao70+P4SH>E5y7BqiFE{3t3Kl{-j@2%U1 zEgtw=x=3em^v;7a_c3YAUy~~SfdB#nSs50eDkgh~C{tGY5v^b*K z%Md-)xCqFp)M+1%3hcPdv;H%X=0Odl({iHfG*Rs{+VE2Arekah*nL%r3~MW7mfo!F zkbwz4nW9E~VShY&#Wz$elDuYwp6sS`x}bFGwWINVTwy_x0X3GJvYUM&?hd6m2x>00 z>>`?_gJT(oMWDIrdrnWa!p714vhaR+ zL1O9%Eep_;8Y%@L>>CENsR5R~2%tmtKny=Y+$YrGtp)FdHoV@p{x?1dJ%U8Dv?f*b zw@1=XGu&%Z0SH=9Hi_xkOUsr?EK|YPUja%Ax&G?{s>h0fbKmrd&=cV7f zR5xr&T-5aEIjL`g!;`pa)^O}*HsAi#mZ*NhwO=Js?HBzm!g7t$wQZWse2WRZTjz9V zoXoEVyad?x`HNFqZf13Ok4fLa^}fAIcr0;cz{Gyu?XRBXd;ga~z8GR_n`hdDekURO zz2d)Ce%oiqBb!xVPWkSf6GN4==Ux}nujz8WCns4+&dA@E+_1W&HQ|&c?)@ox&8S3oCPbdlg?TzA^mWK)r2U6NWS*Tk5C!m z#I$wcIKW89>3e|55@Bg!1;&3$>M?D->bLwrXezAJSSLbFdpA~_pKJ(MW`yv$M;b)e z>4Mj!g3OfS4Hrr5W8(wpHEvKqXdq?f3$1-TR*)WOBB1K^#k!^isU)>ez0S(~(lN)p zywdZBwIWKs@~x8K6xiYw|9#AqlYH}FkT(3%&B-lM|hVlDVQ(|U@8Gbxrgx${*yj`jZc4jVs1a71h&ID3Q7<;u5O|^ zmpJQo_TbkuWL*nTDS3FEf>ZAny2S+@Hq?~p#_5K{b;Hg9X-iu)Xk8J@Oql1cje3T7 zoxhPf!XCA+EGx{hnbx46mV~o&IIVlw-}bG?M&ryXD|Y1pfBtDe8$UOMSpFEy6dAX3!(!~m{x0!GQ)W*vUg*OVOjl-qd8TcvP)tIzJ zMBEm)Jpa*IHUp?4xpQX2 zwIf+PWpr}8Y{z~s4|OB&*QY5!wKADP!OzZU;zX0d(jOLzMlM4h_R{zOqHADYTt6@= zQ~eRRV!VG`mv*%WpkP7c@f04z=|Yqhlhz>Uyg2YjYqK9KH{LLE9{A{n7v!R6$f*hCRS?9OD-0)*2l0+)_e% z#@{cBI7DmmpePo55p7x^69o-|Mko_F6IFRx2+e@XjC+Hv+jLqU4Dl-5g`A#-k5Ym|oh!$r z8j^?orhZsU+qVMN{QH(SXKc(jWZS-O(1Ba`??pmhjab=*-7EE^M5}2yfd5=?G4g zWG1iWAxJN3n4nO66;UGH{tQHV_C{znuVgM>th+2|0w}|KJX`<=+P?9YIOGcpgBlI> z0}y=N#OYrTk}+0Og^Q27k9252=<^KF65UO^JD*oL(Pn8TS^*PfuAAsW3uBn&#bAF5EozuB*-5nOCR1nvh6`dBkX4Mn2;BK%fAG88KaS#?nQ zOS#AwXq$#nhp=aHzhYYDR&Hoyq!j!HVVm2oh|j>bYy@n}^M1eha~`XuB3SwO`h0BX z6&q58z{^A#@AzIfEL9}>RBM! z;-_ZK+HfR(!a@@MQj-!i+GoFZKcNxt<=$4aAjXNYKQitGr z`TK(D`)*KH{2tI9&Hz~-(-v-)GbIZty0JOh4|hw&>)t@sz4ULD*9gI!`ZzJvWS`{%(2EM_b3HFBwkz7!@^jxCL;kDc zO?->AeIrNtgKZ_k4!>AGDE@FBRB1cA^B}L>Aj~)NpT^uk09bo3cP;;Dv`NAOg>m~Q)~r!bA19t(6MSciPxmz^EEr5$zTGM7k1)wshh>G%gd7wxz1ZYy zT^0yRMkCrnX|-1)YRhqnJKh7ZXy!bSC@w{I6GDu^66#7e(TzLe6s<95-iLgyQPab1c3Gy$|f3 zSj*(6!Q!^~_*fAZM+6s-Bx3hrm57BsC!sZTc~nu!EWmsP= zAkOafit9-_$-fEa1$-a&#Xo!>3M#)$!1wua{6Sq{h;yXjXD3b*n-f#5{m;GPKPz~a z3gOz=6Q|m@K+Ga5w-N$(LlD7)p!1>YtrvkQHw~6|z0-n;kseW48tqG9~T9$;q6RQ`mol8Fg zlaYC#x?5#e5!e7mrbrug?tx&X!1+)~w(h!o0;Ll$GcFd1{a~bE^1xaiJ&S(xX$^sS zT#0k*!IUn#PAA>oKa=Axli1LzWu3?wW;n0H^(3=Nf*$!iyd~bPRQ0F)m;J)6f9w;k zXh6K!IEFJa2XquJ+agXIvg}fjbidC+{sj4Vfih&zqRe}KtJjg0c){bw+$D9v@T3&v~*TF$4^eV)CPxG*@du#9MUUp+>&|v965%d?7iJ?rifu&%8 z?dS%qL#v5D7eG;D4QxdK$SfM1N;yD(Bo*?rPXK9}RU-U3UW%yvLd6gq=`tDfdKID7 zfw)x3ej`J;W3FG%Ud$f$zw~Q6%t_}P5~`N52pM}GMB)X)gGUxlksgiyQAF&(frP&i zAKrZf7J6XOx)QX=zGmXB1ghFxODtC6HM<`Xly!8ePZ$s{FoaeToE}{VX^s0SoNL6} z`dF`m+)jS^dzE{+P|K*U&&M^OSMBpnH61{D9Hy_!nhyrQ`i8)4DREB^fpALyT_&fo z4RcKNB$?kIQqM3`*HvT%CH*-=#<)*lIr4Rn(Fsc4oj@sLZW&dv+{O>I2anobKS^td z-svltW}8XS}uAgcT|cD*d&|Yx_ODWFmaXNM5CBkI#-=fCzS+r<>vg!hq+_!VT!qlhPO3(^m-#8t;| z@Z)t;74v3bd)?6YcR=&K3Rdvj1)&1*=BIox7WYa>?T(@~pJ}dDmVWWs&)2Amz6Gor zn=p)ff$EUju;6FS+; zjVje}on7Br`~a~PY_R}18YFBY-r$B_10Y^9gqO)K(zJb zjt-}e-4<=wv%lFlmE2JI!^xPZHl9>{7`|~;L>l-9;Sv}0!AB7bQWC*@=I9$}i)5KL zUvcOYA5b0$dvocQ?Ag!$PM_92Pg}@M~YNJ4_Kn3({V=JKMW& zY;Dw6`YRiMSko1+-1^_yH@@NtIRCJ3KG_UBjb2cfM>}Sx_IjI4RK7{I&a*|}jbY7w ztYSYP zhXLH@u`;gsl}h13ezF74ekzPD()qv1oy!R^vbDZ9cpcX0O%59SR_z&hh7`>dY4C@= zf-6X*Q^mv}Scp(3v;qPk@d6G3J2xKx1zw(M;~9ND8V{|Ov+KaOfE={hLL?9Q2dtUevuL^Z5iBUm8(xWa5yIG~b!dRX&uS4*}X9qZ^3 zl!M=c;$i&5kzNyFp!={x!YqBYH#}TlY}+4SqdaC4JAUq7w*H&BS&X`6dRTfc^}X9o za*dvIemjG(cRN>6^Y>^7FDN`P%*|}1Ak^I~Q7t{l9Kd~;etMtqrUdQ`f7dC`gItT3S?JeW;ctB7Noq_wbay zb`ch^CdZEiK5@j)J6F?ejf7Z2YNL@kciYtbR}HDGq&d8;5KQXeB$RPTDI-FZ>`6H$ z9o}$#U-%U-#X(DQD>W0~yf3sW{pjD7ITG;-sr%!JP<$GQDd5wTLrwO%BSI;%=wV^R zL%2O{Qp8-u@NyGss}n^rV@K`^@p7IuY!^(ZRyt7PWjGM}IdSy?J|`yqe-LUU7p(E% z*fR#YQVa^YbGv~1$hfP-mOzDX zH!~LR49*o6?{FBx=0BOkprNGS=TC*(`F?M@%JFPTwsSy}38k0B)U0HcmX8H`$?M{G zIX@KpP%mEnf`o*m>zV;MCW|D4MXsQ=%7RBy#|XN0rwyvVaa_b;A~n1wTG5V<1NT;a zG8Sm4LR%%&JsF<|9gOCxjF?L@+xta@{sRAX2UIXnVfQ-JS@q^b*glN zR-mWbZ{`NmzKQU;zo&g^651E-t&Yu7@2zvXL!3>w$5UZ~&0%7JRje3;qK~oxM@8U2 z=rqia3%B(QujUCznUYLZ+CEHN3HlO?w~d_E>=>+wJ}PJ2fFik6nR-OB%vx)|v;ZZx z2??ffFC?11SANb#Ey-`VDcmiYA6?KAramRn58zpDKHanAD+{n1Xg{H>h?MV$G~ z@f`|z-{qh77HC<|g-cYo$9fh&6n(EHtrZqNS&`Me zI&GSv)+ z!>U5_s|-&4%?!n1k~-jc1AaVB-yWtA&*1iu$l&Pyj38U&4ZU}Wr!1o#!Z%|JVV4{$RBDtvb@@)Zax%Q^9A5f>wo_PHzaP z6tcGBo4zYUlq~MRQ_$fpbt73PxqXyjt=7ml=WnJG1EZXEEez1-bOonC!(hQY{m`0W z%6t{tpKozDlnsL@&!&z-P&gPT8l=@RlcEYhWSzb#ONdEUA%e$Hu-9{*bJ|FpGo0NOVbbMIrC-b| zGf_5KEVLjB!fWT5N(Lb_g>LmYXO1Oc;P^*)HR^w?Imw4iK#aDE~`x`(4`ck^Skh}H&`{s;si_tE(gOTG(_3^n88NT9bcf$Q zo{fzGXtkot?~8RHefVLgh;+NW(W8!^hMR($FpIZ6_X1kT=K~LKZSjh**%0XAeNg=5 zS7Yt52DWB@OP((L{?`6n*xVZ-Y0TAab174>6N;$Mn*_R;WNzdPzaP z$|$0bs;NAM;k0B2Ug~#H{FkHqPZljE7+-7u2c<$jrX5%XepFT`@`Y`WS!ReS%r8i_ z=GsaVzW874y=7F@UEB66NOy;HcO%^`4N9r>0+f&xq`RcMQ$j*wAt)e?bgOhq3yP%F zf;|`Nb>H{%?03J<-uuh`u)kbm=or^>t$)mU&htEu-_dtzSpTq{cJ7sp2L%Fu$=gj4%bCv_Tj6Zd$LniJgdZB5H zSpdb<9gie_voBpb27gin#gSM86}IW=@#Oc_sN=2ufM@;5Fa8BCq&u`SXAxkmMe9{+ zS{_dDx;Bv#+obH#-;Ts@M2d_h5*k7K59Kpe)z><ID?|nmee#iUk%(| z&+D>(eY5|?|MMRo@cR$owX?i2iQcf6r0<&k--UnR!PgjXEFh@Zy8`jEo3PT2-}mf) z{vE(?1v-p4@T>x875KCd*Pngp{!hN^|MfM2e*-?aDe5=WC@=G0&&Kap>woZtz&DUY z0Ti=1#^=732~b?}x4KK9Jh zxadC70yk7L?1~V`+@nf!nc*MIi_{7*D%NUT^$*+ugWU$SFzo1fN4*yhp?LtZG6PK4 zox5-z6tLXA>ya4&DIYUQT2eDxR{)X3|7zjwCOD>>1B?r-a@>`9K;y4h76OPE{!pNd zV)X{;b1Va;$LHcCfQ(_k8Y4WCYGj?U3+&IHC%~q@}|?Kaq9%lF2g2g?WSAIyyUO|}GFUxQ;7<@})6DP-~k2;pLU z1Q3CB1})$8X6);RH(I{}QT>R}g4?GFo`X?8)61`6K)PS>ionKy zRCvSB0XI=b4?Gm*FCPe3gIkgX({0o-0 ziHbg815T&%n0Nj$abHuENqi-Qu<+fAwyE#&mjy==8)p;}(H80bNG%BXi7W4I%+=ve z<~k51_Q`h?%t7lwhyeY$CMEtxpV!HZjqyo29LKO)WejGX&@LSDA(;4*3rKrO@e|Xm zaP+^J`_W`>)!zA(7tpPugZUJYucSvM4&Mu10>;QFe4U$cFMWTDxuz1`2&(`fLMH|YF*$s4zZnirL9XkSbt5j-tw0e~N98_U;4Wa;CiOEA z7jg|O_|RZnsrM(a`I^gvK^s%>H)_AylyLV}G$z9ZeS@)uoV;5gZ_zjb31lV^m3pi1 zWdRVCmYJe1g}-vTEG44|R%V7#EW&ELR_crdJuWnUmJ?!GeU=t$+ z_)=#rf>V!Ot&}O96&m2j&gR!Z;g^?{T_@s59EoP=n|^m+DAs~1wjMHl?&R;i+sI|p z3Wu%D0Q^jv@3xxh0AO6UF8VzL(-ueRRvYYU0aN9(r}Snq1hA_Qj~Ze&Prd-STI&AN zu<%m$cYrZT5hoz{4mat;J*wWT6iZu(`8CSYpqBYj=?sRXR$y-Y)Ey+p82FWN4=LyW z5c@D9wgbsK8?u3de`*eP4eoIDGVz~PRvS)tVDI=m69rZy`>6+ZhD+#%WYPVso#rc- zhodwMj48e__~5%13nM=Ly)Y4!3-9Jr9LcC@ z(?a1~hY|6;T^wgVpkvwDdKFhPZ@p6U0z{NhvLRS>=Uc%EC=jW^Eqw1KROwS$WoY~w z0KcUw^}fb`Z7E{jdS8{a%nq+^5B_B3fgkTP1Jby%;pWd6DgPO(wBeH_e}9iX;I+@* zAL{4C^QGOQ#}mu*`c~GDrOeWr(?Vt`=1p5;rcz*BHE8#S6HeoumxW9Jlq^+!$KSfbnTJ7%(B?h>k*deoeXWs`xUS0YVRBh<+Tq zO#X-u6;u4bZtC?;MOw?Q7594|IL6}y3}xYt^UBW&rxL9IX#_DdVuo0}aUtRH9)Vo9 z{1A)Y+X2@okfDbPM7eRlHvL-)=fgQ=da`BBQ(#wIXf68;Z6&NZRT-ck0x$T;`{;zm zmw<=rzwxs{E*r)47}D0@{xMy$JpYSvLCU4Ol9t#ydn}P>KC(bMLM?zAqrKW+t_ByZT=h`+Ta1TH>aq!3*1%v zP1|f)8PTf8tq2seOKSIKL|xOAL)T@K1Z}a_@$s2C4e0ox}oY6ko>y z-r_V{O_WmZlpm3x$AJU=3F$c!r;33BAsmHJrJlK5r>~X0Xe^7 zQ6HR~ylVgyGa@WV;VS30^04EvO=%-0Lg^`8t^viRai5BV=iV9t5??Vf zx6(9=nePgwsgr_GBpw+vq6QX=!)#hmz?TgeNJqfBgV5)cdYnY?3CPYy@=eP&g%!-E zW3K@;#D_(46NRDIa7rf;R$&UWg_qaO{$EE8jGyauWrNgXnzCn$eB)?_3kpVWFz~kqeTWg%EDg{eDBltnZz%NK z$mpGEMb~~q504yg07Qf)HFS|)6YM}~qCOZB!J)lszS=C^7=+3Xc*}R7!3?GVtpc~8 zRT?w6z587Qs$;-QI}hO-YEl*+Qst=c4_EFwqL~n(d8aN_N!@j7qDMrJ(L|H|^LNn? zKt&`a9Hj{+l^6X@ZeXWuw!s&bLy823ksXh=i=2usDc22k<;neG9d$b-4CZ&QrW679vj%LHPD; zeyR6Gz%3*KRTf%LroxM#R7nLfUGA4!8?|7*ZSesxS*izVxd@KNn7t=>d#b>zz&TGKufn5>WECcPo{&8Vg~(`ZO2+j9uM<#!vA7jL&nukOtr zI3`xHcZ0HUyPVf>W=F_jyk#9t&^R2uo32KDgMr<@qU!gNEU-V~rj&kub2K0X&a6~+ zs2-gHMB;qw)sImguu&Sr!7GGMUuc{F*^+%Iv3}ok?SFuE+)Ivau*WB5@Cq~~Ht2OQ zA1yPGP|Ww%y{?P(0cba;a4LX6K;C|N-4~)jE|*usfT%y)?*S4nt>BGe@2zmDqk`T2 zUK*|QATaR$q=+et^6J9`9FTT&mb7mUW-d!$nx6eBQMV-7$Ou3?s1gnVD@|T0FX1nV zWq?0%{~r#^Hv{0v+a8c}0*^!dJ4BWH-&JvS4b9)TT$F1oNyIPh&ZXV1q5u=ilYZ>l}z z+$Cz#!AyVWezXx}-TZMfx#nf-ah}$_e0VYCHVf7Nu%*bu-ZH|SF9|uvM1FOrr(RnV zuvz$^YU65BhZ&;~xRlm?`0f-0?_U21f=f>x6m-=KJWbI84yVjh8a#u2$ z2!@x%c8uAP)~MDG*%$6}J&eANZ-?|;RekRuPhh~Wn93&Cv*Z&T%mUWtl5sT$E*$@P%Q(r${R2%CVF4eF zHeq}IZ9CE<`n%g(DAAacRBrwJK%g*?t9fB0?BvEbf_HukmITY;Kk&5hBDLeZKxx9A zd3)wDf|d;%_wCcx5mHia#JN}!R`s2pO|We(5!nvh zSCca}rZomLydD@(m{|;3xV=E>IXAbs(ZiWRO#Uvr1qjuIY}(|seieTg?e*86tIzfg zKIFC$A4%Ba9FiVs0i}O)R|xc>hALElyQ0eYlXdItySHDmc15?od@9j!6(X3_hjzTu zf@+cGY!3oUGp;vk6Y37X&4L7lNtWmy>MgU1(6y1pp6mj9ily#FCqR%8_a#`c(VqCc znCwz@*Ek$@jN9Dkn1{P>K?S`9ITz`E`^KTmpT-W^i_MGCj@{peQl~b+m)ctapN%ba zB+25#G9&@C(*XlO1~~yvj<0f>J%`4L(sd3}VomD(dtFm>8LOb9!}Gc2g(g7P z6q*8SqPf4}UDDk;ybUzkw7(q%R=Jzz2kze$Ze7`HIxziNhZBSe-SPbjioyA4ceb17 zIu$P@p#Tkvh{3J;CZR$5lFftUACilc#f54eFe_-s$>#*0X!#uw{>lS~jHfJ1?^=(! zHWhluyQbM(RVRJLQ8)(+8vvoh3e?SY-bk8yS6zI8f%kQ(0+YekjuKD&f?26UTVxj= z4cr)$CHCAF9v3A3RW8@;k}24Pl`ZGQ8t>I5n^HPxqkT$vZP8f|PqA|K`#MKQ%8P0t z;>5ScF;F;5R<&sPrK+gK6A9BB@sMcZp^5D=7J$fgryM(A|a-QgdN=;kK+I_#Hzm#1~U$`BGc?!Ib2@L|9qT6*mIe&(9H4+YB~i zcFp4*_=r}`!e6Je;Hf#y_GS}Ao9j;3;eHHhL?K6mny3$LFS*$lG0uSL-3sODX|FW3 z@wLn^e^|5SX_lR7=I zBTYcp-e+2z4)x(A=!FBp4W)2=HEnWgLNzUEp#eTEA>oK~C8lDrx-uXsc^2Z=keOC; z#77?>@l$PbXDjo;U&r)~$ML18kFw|*3UEK7QMJ0J*CFpX+vkN54U!Epn8$cgHJnM= z`cCsYg1DO;*UWDw06v2Eu;$)+jwJabJW{l#enNjox`>EqTRddTAZ|4D!L)`=N^kI< zQR?zFadw~42af67a9ya6Ti8ab%Z`}Qd;t7%kc>|PH|qnmUlFOYe651Wb&nQ5$hV_2Ch@A!6C+@nA~qOJ z#!IkaWUCb%7Ljp8D^A+OGBd zxO)t2>vMh@wK$s~JjZVnvfrdz8R0V>_pG*;oIQHv@?t(3a zJp2JtFLw{)pqVAPkkfL~88Z>3F&z1_91uyy7InM-U&xn4fP7IEMO9VNzoKJdG&6t9 z5ERPF2YowT4+s)jK1b-9n$Zfu>~nG(7!h1YH2%y4KP_o4rVS^#TEnp9$u9kY40=tB zX~OsUbzX8}0J7(;V1#ZadOkiG-dBvTW@g($(2Q1MZ2jx)EBDlpFF3 zUepcwg-$gjV~1Dh{o7!9UiMoSC%45BA<{iQ^+(Ov0iWWH0?LoG~vLorX>r;4(ZBBjgroheI-->d=y@&XM z8UZz4fLtxQ4Ag4hxdm>^F>|_QY5Q#QUZ5?-Eq2$XGgL}$1^4M07~jhsqGt~KuM zE{DzEn%%*@)ep0<^i$0>BzEGMm2CqnO?6wM%76WKyA9)K!h0gKFo2& zUIGoIh=nVO&Ct`R9lko39Ru22-i3Y3I_)YiTHW~UFJ~>^_v`( z`_wivM`RBJvdGRy_*H%tL zyhipd3^zVE)*!!{HoC1R(-#&K?yV(TQ=m;_vc$(@&%;bB=sr?DvDc*Zdl15mdox3= z{yjqlD~%NeZ=ZbG(Wk$h9hkYQWxBka9I+p?gp#4f+lLQ_vy8NBDufQ16i`}l?+m&m?X4U zy5Be-_eIuT6@l{+`uCC_Qw7Dd+cW??97roh;gMiB(F!|6) z9XS#rl8hp_MuhlnC`DlHHYQ&U4<4cP2Oa>-f#83^$E5b;_*Xm(8XGX+XXfqfpWw+(t26eYrY$gkX^FHs6@>)}q&P>*V10~S!vp{s z1zfsA^jHGZv5c`Cb&!A8sp25!X74lMwT*F*8_v z?(uE<>Y}Ydj;P({v}wy_(4ta4#(ZpFFowPZ%dtxj^CcSmr)Z^NrX**36fN zIHX6KRAg>h5=#n71fPOpDFutdZ`c)Z!1o-7}0Y3a?M&dlOn*2IF z{q?MM1e!NfPuke^K zS~t1?Db%B;gw!g>PE2ZcHcNN7zTvzE`R-x%2mX+3hi%Ic`ycUz14UI1!R=Btk>iZkHcIwP#5wKiS9UW1b>e6WBUt%`;UPrz!67rFaHcF zboh&%Vck>6uy{>>2PeEy5&g7yxst;-_~~hL3QkC$dH8LAv^8*3*_R_|4`MlKeq(2F zaPI=rlYFbyA${Q}4zTnWXZYYrlHp#`pbE_N$R%pN6wc^KS0^B|5s{JG=qPxJkIKMK z4&}5&9#{5U|DyZWhF+qJ#Z2!kH$9;@LX7e&&;#$hPC!5;R6rWw%IKQ)r?Gl*ic80! z5FM@axm6a#F_|Xdi%n8vJytlbV>Tb_W4LwahXN`zH%1OXXGDJb(35`$5Ci(Uz?3(` z42WkVG5rAM-PMIg9!&wg3^jt-`y>ztpAlrSkV$hTH)8S5`Z9W}FD6)B?T_sQ(2&vjoS_c=JF67efHxnYg?76Obn% z`Ri%EOar;QHCybSR-E8{(&0Q*1cLk4u9x<7eEfJeD7;@=WWCa_DUd01AcG2C-?~o^^trS2yCgv1(+9hGd^n`lbW+}GMuz(;XJL9f$C1X zaRu>_W0Mp;(mOBj{Wfm@wyj_+4AP(i<2F*h;jJO~ya`dxLQWeSiRkFr(ff4YE`Mnu z47U#6N46bKXQEWIku19Nn!=CxlVU|2KnN>YH2pTtH%7%wbp^M$;u_mFKL9Nlo z1*%~yc+K$viYSWqHF|vp5*(mF5WSiSX(L6R$1cB~1Fy)?-HQgHotn0H9|tlIa5$tR zS|}ggPs#rbFlPL%kMubZonETy^_~l+j3n89;O*sP;5YI=gi>#`;7Zg4ha+@OU(i~Z z+qIJ>D64AK3g1DDAHVkW4wYzQQ^SssB2xLljzImCgeIS{K_ATSt zTGJNgx_nOnOMAlEqB4D5>Pt zbcva@sk_q2R^(x)>mLn!`;~&b3oilr%t!ZLr5nW_G6!^BRwf;IaV&9@T}EoK3*fpm*gpbT4rM%?h#t?DWE4(|nHuO13}= zy1^+B<**HXD=Qren5B_KE-8g@2h0Hx$;O&l%aWAig;=OGsZ}3$XG^wrl>yp^ zl~k(n{geRYj3L$bFj%I=NF8on>LE2H{}xoE+v6ueG@@q<``OE1Mqv&71f1)7TuIK< z2yj7pS5-CGwTiMIrQ2=YQnVvMV1<05>q3NZnKsq5ZNxlnTf-007<{ckn+_9gh?Qe+ z2H>C`$w}$KRqdlXN_Q)&ADL3~ZmlI^n{U6gbjpr}0Au41?%61xPDQw_F)#XHnr>Fb z7*QYWB$FCP&Td)EKxezOkm3ytyF^}u#dFbQXhwN5LCjyl5!teKPLIj7IP>uBoOD+5 zHkAhO&r3Rd*C^Y## zgGQ7&N+Gcj-|~Ahd}8S56y$wd;o3E!g=(K13yP*G(60)jSHN_8WpY0~KinCo<5?~# z<=o9107^Ndye!|$oxZWjA_!zg{HXa)_nq>l`)&&4fO}V2yyP|N{q-&s?zfg};yRKh z#EM|y5mrk6*}P7~$IEQb>r*Ok=t ze3f>^z&v#RM9uqwZx#M?){DOE*vMn5b;XDtjLxQ6EU|v@?GNI)rvzA8W%eaLSt7b1X%jRxQDRzJd0_Jo zz=PPTU6pThW^ejeyjaFer{m!-OgG^XL9}y%)t9@*iWVV@V$*Wxkty*v71ff#f8*NF zv0_0nuWcNI+=vP7QI(GBmV6P3Eu#fwS^bz_X>V>1h|S;ieZTFa@qFZIg?FfBJ~~1a z^jU+=;pPVd9Y0YP#OoSa;udM-+V?k%rXO=!(|fho2|BSbD?=t!Hq_8JRWHrLDHX;{ zU!G;kIUd{#f`=5r(~9&1t>!`EK;aOX&AmPYG#F-Wy^8Lz=i*A9hAtj)R>1h=VzO=3 z_({o5jqf{CZl1?om(MF=x!!UkU}k~aX|di^aij&F_JQW|$MR-h!RUT%7jbz`DcuHg z&WuKx#UmDP)zkSyHlKj0&-ZDw@cBs?6l%7YV>i7lAWw_FDfK-O&tF8`~*4p2MNFzp zsSB+Cfwp0eLe4N8=mujs+ODS(_H>VijBIk&O&%$Dk-IftRzW+x-i;%17c`iU(F z^`WE+b-^5^CZLLx!?fLu^$Tly=%4j9C1ReF*< zTkJ@dx-6OV@zw+LjAW?$+V&!-kqomgRNKWszm$E);bg&cvt4JeI-0AmGJQI`A@!_uHCr6LsR7DC~ zyH^faxv;u>)EUjH*Kb=&%39dgAFonmR&|}g;`?d2K5@J056%zlSqrTDsG*p-b+PNF z1z6cU+FjAGH)DIA%f4jb9%Jf&Kvm9p>+P=R)!wvlMlarnc*Bjd2Jcril?JIXG*Dhy zCI}CMoii)E*n{^C(~je27~aP&S2P8_uo|8Elb_35dt-QjvE9I;JMn6w-*zHkBNKha zcqy#e509>@yN!SZRUiM^7w;oPs|SWA&DDE1q0r#wv-|CSjMK)i>K6;!EM zBvASrc|*^PD%;-Kjy3bP{8VXxKiK+`B z82l&>ATqRbkMb@;1*gl4X(Y~pC-;Sl%E2k~O5M%Lc>Cq5^vCHZUsZ-&<+8fUeq22y zy`DY>Ep7dv9Gl00xAhF0ADo0?{QG5~^Oh3rJP>P`u~`Ux?MI7BZrry!@tY&^D<|MN z2xha&4xbxf{bkVRHV5=My91a6>Vfjp*&WH7aB;0aoqLM#6 zRN_K@5K3vHopyb7-Mg3(@Lf#r+TY;v0fC}&m^ur6NM1Zdg6%MwfS!N}d*h6ejhvpo zPBVExJAnWuruv;DJ6mI%29Oz+zm&#P|5#FMqBjFwHrme!<=mK_J2Mb44$*Ih5 zD?cw-n+GMZgA1Rs6p8OHnqf`q6<0Yh5Ca@wZs|9V4P#PkrXG~^OnVGIDhqrsVmf(= zE3~8rJ4-@vA!O9E&TNq?gfUeDu2b(L_lad=@bXXMq$m@O4tZ?@aO;$ zBY@GNoaC(nxoS99HVUIZQEd=1YE{bAh$#K#3b3fcvdRlt6{}g zy20mwsX>&-*ARfuQFNmnZ3Hs}iKo2G8rT+eWzXUha)6FJjX{-y?jkEiY{1XX5JyO< zU2ck}rX8`0wJxLBHV&Y3B8mVyhvuw-F>CC#{+c08DnUqXW4L+ZP%^}w4l(aqz>ju` zpdjO6=Ywkn|BaNpBi@clE)XL)HYdShDIa9gD4|2?WKW~-!GSq$jS0K}Au5Mz_Q{^4 zU{#$7?OGfov#OeH!w)R7gHhyuT(O$^K_T2Mij@H!t(2{#!*agU3 z&t-bX*}=@?8$rnPfj+B?kNjo{J39P=4Z0}W1rgeiUI9Q6>kwF_B{i$&g%2bgdMNO&9a5`YX$`)(N>}+ ziOH}UK^GxRzq$Ha1AxsTU`t1jib~}G$BbNar+p}27k4a*+jsbqbn2@f?L+|({$jL` z=;gu~q0|s$dHiBiBaiY_TEXBUI9?sTwaP2M}A!6lRxNJt-3q0r4-3 z5H2%~2=p0={*wr|dZYqTB&U&;km3i{>Z~wz6t$C(_!7%vaX75(NdAR`9w3vgFE4T; z@O;c>d4a$}O-^RPq*Cr@ssd2=ULzK}zH|l&UxMmcCT+s0yKwi^S7~b4K^GpmrjGX<^0<|myKryUu?0*6ZdxyTys4Do72iL zb>`2*zw3dBhaT1wYtdjo_*J1n?8N=~##7@tCBq(^M_LOqC4S#M%STe2M#tQi3{I+? z_HrdTN)0JuhzuYs@_Cl`zh=jK;5-Ff;+r?%GpSj-QFQw}5Rdd+G&25v2WUYuH2fv# z4M#KVTJV1r7GM?bn2ky1)9-^gv;H-T=R~p_B_~GghMY4KPS~( zI6EgC_utt$#MXb=IRk>`5jA4FmXQI+u^u0~N+n9PoH?!Q(APEYO)y#dbUj64yG^gZ z5bSZ0A#0I|NjzN3XHTgp*72i+Vs5$tIO0A6?3M(@xcn{}+y4SbW8sgbiFw z1We!H+u?k-%zODILSgNrW%u}Jo!CtcMU#YAGd-tQw58*!A3+)1lN=3Sj82_J) zYNS2HA&u%J(b_{9vA0Q~`ueQTkrIO7C>=R^vSJ+Cb!#R;H!u>*&}n{(&hhCQ*ni&a zRhL+xRF%&>2U^TZt+8e@JvOQYVvfC@(F?_P3@W2CdZjKXsgLjs$$iWjF*zOYnQ;EEnZ{Cm(Pv|gyLGfz55;7W2oQAz8WPkw@rrUiAIpxZ%omu<}tQ3Cl`vZ-WO1R-m7O-GR(hJ;8-4m+m z7vDeVty5me-at#0uc;1Q zm%d*aV~zUNN4BIlor{0|c2D0Pe6r}LQ4k(=?h7IkJbG#TKeQovBfDe%!=0js_Z)xh z(}7~;*V1cxvrwHSH%x_8c$jJt;JiYO?$QxRxxoQDQX=^TbZIOibk41=A^}*C8J%*1 znocZaBYs74gh8laJn|r=DR@ajZ^!WKp@nsSZX>t;Gm*)(N+%!{14zRtv9L$W)wESlL{0*e{TA&Vd@Z=SuP@~b})gYJ;vC-ub$ z}$>93^cRddDw<#NVm_N1zBuWdn^L10ab49tQ`6iiQBXhmCc%xk$CKMC2q z2FKajy)N{=)^9*{f3)^%x5?V_y*+iYi^$z^WGf`j9&s-!RIJXnaUCOYis*WNC!EE~ z!orB&Cc}y(&zUh*_Dw{9Vph!B$F`X^Q(zsez95>k&c@jVz@2prx}1+80=HJ@RlnF& zlS2T-Eh`9Yjc8`qT~e>B3~TUCpMljjWke%>rEfC2b>%~9nntE8ksYqL%4DiGN=xh4 z2*xLva?G3Jh;N`f)DDoLKmixvc0PxxvBIf$6__`r+V4yTP^wX~M1eA1#pvt`ncXP8WGw_Zt)zv2VFemLPRl$#|WGCHEtv$h2%gJN7+WD-5yGEVRz6WG1# z9We%9CpKnCMOamYyzijqB6*Mjf_JW`e`#|kxH5R-pOnuGos?~Ws5|}p;uep*@4sxc zJ}il$#@RGUKg+ZqB*}lN`AX1?s?2Uq#<3<2^5MQ%#$Cw@Wl!nz+miiac_~ERxnfI( z?r)I45nBbsN#35jNGo)lt-G3}Tf9@J9R-)B{rEfA;hg0MYJUVj=V zoQ9=eTv8%Z2~AhN&8c>{xEo5%{cXo-5mHB$7K0Bn`91aSVFpugY>&36fV=ZB;c_%X zkU6qR{?w@pySZ4fWRRDc5dBFfa|RlQ&~frUU3tAqpEgnlCVI{_I5N(McifW4Q(!Ob z92z$OS(5Q+e7AZt?ty7kGGT|AStp(QW{$_n^+!XC;;B<6|5u-ho|(&=XqdZ%nImf+hc6%i~w1q^zK z09{2Sz-Bp(5b_zM)}oi%HDE>I3)Gc;?|S$3aY$uS+J1;=lq;?!YAknlz=x<-NG0CA zm$9;YGCiOwB`vvl&5MD{!bh$S%$HBK{(m5GBZu3y6&2^9SckKb3AGTzOQXz#A4zu2SZcWwqaREA6gzG40G4Y5e_4 z2)WTm@c7a%rCnmlkvj+@%7T?*+1l&YF1gn3?V$)Q@(|9(TTp_-z#%)(-#C8ZEZLO9 z`D{7rE!()B70$j?-`!nIydyF@)>X6|+0+nt#&_H=LpBXG0y4WZk{()EM^l%NjXz?? z{A7_lj%ata0eGc_I&A=Ah1*fSy>QRj%{*TT zI0sBkaq6;X7m)?%DDtym$TPyH8Oi}I5mz-;I{N42(ut@u-uiWm8F#@ zAjcu8M6Fy9GBqOPg=}t*J-{htcNO>6*kZKFg-)4$H`gfOF(Qq@(tV&S_%XZGfi58m z#y^ActPSSA*G+$)>%tE@R;yXNH>?UYw5_r{ulx-eL|j7?P9);^RNhJ~#r&|24#r$f zfeBfrt9Rf99c*xn!k3#KIlxjM#f}V3CWJWT`{P}Wd^Hl>m|h|bj7ibg zl)b45Cj0;*;CD@cv59>cbevL8Z2WRKNIlwJAEHHF$CE!rt2ZM8p&89h@(d-UpeMTC zc-$`R>K6%zfF%JffbmGCrTeV`zFLxk!;Y|Jp^^ICr}$N?qfb%+PV!@G(ChIn)|B-h{=u=HLw8!Cr7m{w7JipW79hq zKf71Wc)b16bwW9*rFzA$Z>WWS+Hs}WuC+k>xv2qrw*55tK}gjyr9bd7pH_a^eg1@k zn5c$gznN@>^1xUy~+q|d~Zcx4ycW+qd40*%D{I||H>W_#>rWxAC&(H^aLozRGRKC?5X;C4PtcyqdRO;-T z0qKoX;a0e({$QB`L=TJgK0BPKc#W6c6Kbv+I%`pq4C>>Lo;M{*(X1Nhj$MnO4b6O{ z%en1HTp+=0WFHNQZwYt&O5u#B`VzknFn_u@^b=V?2|IKaO_#&U9U;coFE-R=$E#A1 zcWM&h)xv1TS90%cSmNz|PB;e+8&KjPcMSkYC2+70NYQMH%utT4ka-=b5`~WR{v;pb zn;mY!%RHd0^O4pRnT$H)96LwLAj_x}7T!F?2sxNfv3W z(e`XegoXEv1MJ5Gm^Ze`=XzG;v5^n16rp6;iG4j~ifF-DQ)D!;# z?c(-{GakM?sEXzY#5zv|>lwm?zDjTo?rO|WSy#NgIdeG9HgU-_Z+yR`^f zmC?*E9h5||$c%2W+=;a%j5gRv?@*CBiQ=adKn$k@@;4#Ajn8yuwQMY(Fu&7d{EG=B zsm>&w3Yb9Wt2a!b2;N}*%2D{yQ<97{5+_9P79HY*sosiNKMe0Wg1vJaH!{i@wG6qp zq=*s@!6b_!i-qS7I^HVM5~Y-9Wt>A{!l&IKveH|%^Te^j=S4DC-|&jwz@u@($qFn_ z11O-J8x&Aj?yC3LbBKglb|MKSyDAF^G*Fp;Evrt^SRn1mT>6`CO z@r0+C%q?q=>jHw)0@;n2vLSb1O&_YttBr<@zc)9{k}*vUAM$-E7+L}{er z1h9NZvuk0T0h` z17s9@x=sd@25!>e)xCQXZ`NTL<}>Jr{0MP}n+XHo{#GS1Gx%)di7w-5+|r3II27-f z$;zdTq+*T_}Y}c3(`(4wfqvWmdDDgIXV_H(;3bQW+^Iflu=v zvoIDA(+}W%JJ|ywSNH4WhG!s}_d;u1(YN(hFIs}Sijildl(55=X*mA8?(xZ7qvX-@ z_U+$;i2PEt_}Yjqw<31(rc&&QEnObCmcyu=wLqB}SqZPdtmyzm0aP zFV-~B(o}MRM(NT=m&>R;7Be%{v}9Ya{re1p5(BJ%!9N1s_dxhNmEY~QM@W@{96RnJO1-y9G z0B4&8xDWhnGw&C9wf@7WOz%FDJbF)Vo!$Y*jkYQ@{Jl>9aiwJp@C-qBeBr(Gs*m=Z zvB$!f6zei7Z2T94j~2fQ%|HnKe}U%sj)~WHahTSG!=IT02|QQry|*!Z8~>YhDlI1w0eZOABgR~a`kPG(*#7`*+40i>e|Z6P1LrNGxHi?{5n zlgDkWsA?L}$d#A@M;yDZeLmab|N2z^$5#V?h!(x+pK$~1(fbQ6@|v*!r)-?N^Ki@$ zxSU{D|NlQD0`xWhzjZy@Gzn?|??%T1KwLD#cj4kx5M=hAPWi+2@HIf4tiuygwoQO% zAGMk7e#udrtkHL-%uG&u^*)P+vTNLZ)I4v@$UQJ-a9tm;H__OdGGy@~)kMggt5wtQHiv zML($vGy-8|{WuH&JksHyA2@FT5dTLhByHZ#13U+6Bhb%G!d7XnowA-am3adRmC|4- z_OS=&+cCLkb;ClgYMiwpSW67o}4>Vqr*2{IC3(}vz;JajV8um)kxM!AQYa={;e!h9}m|M6D zOW?HnbZ+TtqhZ=2YJvx2)DMnU2PgG8j6HKx7l7+hsy2^nH<6vtKtd@FuX}=JEB%}D zBiypB;b$r}Xn{>)M{wfCBVZU`81*|5_yw+t;qqS|*%k*_ z%8!YEtnm;caEKPce9flN4ecMmoym{2Ngg}N{tBkKY`?x@kv@xD0tS)A`p)wLJXZPq*nQ+z zi(vQJqwxeo?Pg>5nd063PcUj&{eBNcGnmqRq;l@Yuix7Yvr0AU@x7Q^I{8KN#y^Hy zDn!_bX5t8-rTVIm6FcZ@`skzH!?*q<;yNHzDE9mAOM}z7pJ!ozM4fTu2uDeMa|f>K zDamx#?!!^(J!-$x|AW1^imS3~!+oVei3vz|NGl~RAl)D!^&*`T0s%dL1B%bT)uRnz@q$n)uF7o(?S3>o9{>L|airwF~Tp@Myg6Zdh1#m+{=w z6(pcyZ3~W@qIK0=0-ylhq=t&i0LA1>y7JJm)RLfIpNfgxF(Z0xpL>j*RjRyr4q7R0 z&}_E)2tuv+W|_#*H~X&1&^@&;Dhq`e0INZ-_HO+GR`{b;bcbH(-SYx#;Qc-Iu|)a@ zdSQ2fuwvFJ!~~lP0q_Ux@INTCLp;bkiRrFk%#5n5VY)ph6PDp0(vs2*!>0xqkREJ? zLfjSt07qb=xJl3J;-uSMb^qJ$6d*;%nGkx)q3dP>t3>&jB=`a{uepO>uKMviF3m7B zj-~Pw_m1&ieO22w!I6HQpSukzoI$nn54+u!_I|Ae|*+ z(itoYx=*us!~S}n8=>1JsBUyubuK390P*F?^k+mc;;)EOtwM$N+m$+H-~@R@)#EWgt#Dbax72P_+7e8H2K zzOb0fn-;m}uZ}Nqcu{q${?L8S{+;e459mI~xyzl)m$XF-_onPVeDub=Z3(zZ9$@0H z{rFfW6T1U@vDaVc`pkW9@?hE+ALpjyHZ%N}N!gq)(vwOfHCC>&SEP1J#Nzx| z&F!643!`cNWBO(NE~B}>VRm02?Ha`sqZ$=Zv>eK|J;N14i2}UVR%+M&`RG3K)DPXz z*fM?2GmnDnEO-@+tXw4`m%yeJjf8kf$jDg#5N%|f0`1SScnmur8v1!f^nogrYTyf3 z14JK{Zvo`8q(y$0$hi`)-BMU7z;_W;gJ2+J6>&fi(@`7UMd_s<=qm#j*D&@9JOM-q zjxB1qohnG|6V3_A`Dj_GCK<^v$2SzLO_qSeLShpH4^7Y0mniKMV&mw)eR{`LSuIWQ z3jlWb1U|%OmdP&ui6MR;A@26(BY`_*0!V@LeM19#^%%{OqK^+GsnvRbKn{t6@1TAZ zNPe@{UR_~w25@le$7(Pob=^4nTXf`K1L)y|*&DxjpQlqhE+3mafSeA>#II~%P& zJ0Os{rNZ6tX>7flCy|Q~h11Ve(>zHck1IFnagi7<`-JQdoCyMKuE+5c!vpF-k0IC8 zGWs^5)?n0o?8V*G`vnoCEmr?YY+OQ zH7*x~UI0>@)?K;5KPUBrNO1SbgSnrf5|)b2h%ZM|;elM>hl`4#v6^zNYYT(kEBrga zLZ7iy1l!)=T;jnZg|S1|*TKAA6!65n8;&4c&Q}oz;qVbX=l~0= zR%fZ?u=qG2VD^|N+!uDie2N{6UR2_5fNzl2zvN1R8$La`60eo7{H$*)l_Oq(u|Z;C3H`<-u^cz~Co;F9pN5$xqu2!~xK zaPHA9Lev&42Z-}U*P}auq)olR1A8m#(b?`+HSK`C8F)5FaT_Z%MlQcRh-oU{14>Yz z_co5iTh!bBcb;#@yBC?*`nm7L!uBm*lbcL>0|Bz*(AS1G|7+;+N(n5d`724`w4uA?HypRB z7yYz5}8$vDsNP_-3ad2*}@lrhGU!`mx0)GAvxZFs+y&S@fdbw)&9} zup^}#ng(F}s?7Se#EMk+eGLdtGeCki-$#Hiy3s&nO7ocw17#Cru^p?cD5q*!hj3ZK zM8L6oTnowICG4m2UKwwwm|6AtTQmF+p>ikO2q@N%QV&7#Fuxuf zbgjFNu-EZtaY{*_j&I0!nw`n zLI(?&hwjvEX^BR$bs$!RnraS3>--V1>)f2=D?CG1%b-O<%TRZ-VM)d0EZ)$m;b

F-FGT>cc2kwz!=%iGzz>}i1#HVx8P<(*}u zWp~;ce}c~88vUqkC--p$Ef1E3wDqT>F_XDhdc5ay))t3k$fWT`PVWJFWYRMj#-Q=X zNdMdTX(=gp1}>n&yV26h=rN$wb5)G~Wq*3H=+N+A$yIpsL{Nv?+^Opw$Ye} zV2~(M&@;>V$uQ{)itnJP)3f67qeMgN-AMeZ1IkrOgzs8YIp1Pc73{EMmKp+Kou}NY zU|dYD7=vUp+j?7HWgdGC;ADN*eO2+qd3M>MOC(Bq&Q$X^^j-@e;V z_Uj?@tB@>S_{a?$VwUGrIJHTtJX@>=1yKWsR~dSNsXj)=SYd~{J*<% zrVao|3G_^$1OjqESYrO5hS(3M>oj+C1oMO`orUS2(XY&r#}qM}2}YNQtnY{4d3G(Z z$lo;r8-vNw<$3nBfhv$Tu|$tfXZBVt)}=h91Ge^2iI^!5Vh-yv3GKSMK9t-3j%UGx!FukQJ;l ziHH?KuC0)MZAE+GV)OVw|BmCY1waaEeMm$0$T`5H7wQHatKU_*q&1!%WKfe9=oBZ{GeTv343h2qP}}yl|Zk*WXou^YHeWD5o&(@toh~qw~R|BBdf?PkCSL zn{Ze7y1~3LwN0{TRUbN+n+Wnlj-YgVtBaoOLx;M?Dou1CxM29r?Wq`fHgIr{=ax37 z&D-&lQV(hTPen~;Vv#`gPf2eg#de#?MCy*EiJZTxs&LmEvPk7r{Bo1W2ewS6yp2Qu z;P!N%^HLn1U2%J=391BT94sVnGPwn}dkm1SEsl%gu_yDUD6~?3q6OTZwewQ5S-_tV zUA;TwmFM1Z`09AY# z=_$hU%e+GtD}dTYS09i}Ok(+9s=tvrXw1460+EtqD)6gh1DpQ=d4BVMW zrKKT}cjdR`ueA}@0_o*4MCCc!lVraIASBm1-NIF5&CT0QW6ZjFx@ak)!e^o8Zt))C$ z4XNhq(XMcUbbQ&I1hb%{V7R`p&=8d;I#=nNIW=c|n2x>xnl9;7eqMyWlQgRczR87& z5E|)0pkz^AY*cfQ1PXz(lyg-V-~Lc2)WcA?&IHS55Zu3aMjQwm&@Vrv2ik(4+bjB3 zF%|h!q9(WaGKD%tdx1h9N1bL3Bppx#2f{R^4rc`)Na1ojkcEL3y zQ@Z_+8=8!1HTYp9fSW4XJR7KL@F`WCIM}k3*PPUq?{74Zyzt*>o_sG`0(;&+Y@Q<6 z+Vf6Zuq&>ax(TMT4e<*!=CwjVI4n5E^ZcuIC+=L!i6wsNN*Spo z9s+Kb*&<+BjBOsEFA|J;Ub( z@y}9GqI|9)`8p}=*%wi1f(8PgJ>>L=K~D%7TnBpKf7SjVKR;gQL}09WRIrw1 z*}QB%(-6E5;5=#W0M2v%Qt8CkO~C6noM$B{TSKI)yn2wR^u!0m0$n$vokSNFd)oLT zt;N3qtwkJM1m6>&QfyNw{8kKiV#wYQJ1&!`D6qQh5LIi+-d*<#bi#hx{XfuoPMt4% zYVdOyZSWDJ<67AF7APA-DqOh1-C|qK^n-8oZhP9sydY3g8+Q`DrFMvsOU<;{tq_Qt zGaF=~@+2nGjXbqO+58lu`U73E^riWwOf!BJfABd;RqeeppS|pXW_CB*;qm5YK|bV0 z;lA;I`qOIyP`i_IepbQ+y=Zn}>Y(5y=5NrBg@3EFEHjGq1SvMj3ca~&9}8J-snyeP zk>?`a+J9jL;f49)^C~JHih_cB1_I0*T|Q(m4WT+q85UIejoXRgxx(#yMf;80X+!y( zB^}By7A!r$WFG)@21Db@EX;~na?*t?hf-{2oj23DV!35{?^@=l*j7Khiv1Pc*5il!aoJYVnkr=%iGP< z#NKdT=?vaIYa#Ic!H=^fhXc&1W%$`1r&M9$dFicXK@y>NA6uzJVe8Kek=Inup%-z* z{FAL?2C;RD{*|qRDRRbhbM$U`KZRz|EA*nh23P{mTP7V9*k7m0o#@A%S8Sa{-u7eV zaK69UIv$q#mQ8VvHi|j^-7$^W7*A;qGJLd?(VvWkSe3kviQdalQxY_QryX)y5ake` z_ofr5=pFnjtv3WO@*xGLXL@KXX$9(ITqX}TsGH9Elu5XWXT=7?hGUUDfIO0z{pL=a zSwsT7pB08DV>Z}6+XJNcTsdWq1T<7xpCsJ|mbZ6niocvq>S6(ux|DwzTpMQ6eUDHX z_^#rm=~*jw1A>!C!Z~2A=2k8ifMOtN8Q&gYkbHVQniDo3H~9(G+Km6H0S7T0M{91cI&f|L{6-uzOF58e2QRU zBG|MxK6N={L_vY;lL5O`}bKgJKyw|2$X zna`v$Z%n$^yOF+kz9po;dD^(;OPHb3V-P+rr*)j3p!|wTGpy*i2#XgLb$8*Hu5NPK z_6zZDBot?kWC?WTN+7V<3ulT6-_TyUb>5MAi<1|Xbd$>B)Adu1@96}CEd6*0D)a?Q zfYo`H{WYq5K!Ao0ymT95-f248;?tkFD~>~|e$?Nus`m)7d{i6&3(pGV?XD?!|0$yc z9Rnie2C$1zX6g^PnY|Idu&?jYFO$TzoBjlUUGZ|- zAch|0&IJ|8E$nqv_#QRR zZTRH#FaVRAf7nbYwM1heK_6|F-Wic0PHu&xPkoOojf~KToEk=0I-)8OP7BAn=xkA~ zD&taO{gSqyCEZgE$kO8`u;k&bBd@UYQwEd|z12LD75MH<8>WC)TDP4OdL3I8M#xre ziNCq$lQ=(5AT3`VLC?&^8->Qr z96y{11TTD4u_Ty1OsF9P(PjUjK!P`=r0m3__M*JN@m#ji>@B(c@ z6aqG!uJ=S>stfjzfx4`?osT|b%n<#F;N)vIukyA9#a_;)zRUmuhCMq1h#?r}#&g=%G zz?WWcJ^M?L?o@o@hOH!OnSXiYn_vVwUrU*Ub%<(kz7zT78c9O&+I;bL*c33Btft@e zDsiU1>+*}(-yDSpN}DIZj=+%u$<*T>6)&SEgj$aiwuu^Ee@OB=@ghN0 zIjPfYk#grDU#bLxw@4r2vkV^+FCs+WILYf++;Z?p*vx}IN;l@v0S;Uyai-ddpJuaB z$yw9K2Bq`YP8D`JVcH1()ODPFsn_F@-NrBR#0&)~3~6M!w$M)q_pz7RS3bn8icrC} z2>WWWrRZ`b;`Jhe=O!dl{Em@VYdspToG&37zeg-BQC#Mq3mpp#JT|hwH`oJxi*eRB zyJ6dI{|+p}FK&Hoa!Z86Na5=)T=V2raH_XftX2Ynyc|@Oj-le|ZHaR@1RSK>%HN2a za;G1#fpz+hiQZ>^ElT7zsFb5D^KZxEDK3i%V(Y(4x%@`?)&0&&snQBoIkgn&k00bw zjUNvBYsVJ2I))=CS=($;Zz1V(SmAl79cm58f_of zk|PgGOr{t8*#8_aE^*B~7y{g^hXpTp3@uu}i%bf2P-(udbgOK{(VJU8?lu8xt3IQt z*|iwCmthk$7WSN0D&dU{>-lN&y~kEvcoWR}HgPPjg+0O!@$5YaoGldn3Jdjf7RN$Y zjc|`q7sF+dSY?J+jB=@DG6kXoH<>)f#ae4d+#G_pX>OwQ^{ReNCKs8Tw3Yn@isA7q zz>O{WKLIz;M5_V<+~E8N;Kmu-bZdY~F)aZfm3_FI7xn4dNl8VcZt6>`G3XRvsURwy z0Kvqo24Ta?^;iY?>fJ0vqNq6X0rkd7-W^CT8AA%3jg}QyC%^=e)_G#jQ zRdE>>+lYbX*{w8u14?@Pkdcrh0Vmb4<#YyzzvLZJTejwS#jh7`K|v!sW%CBK1(qqx zrGNWzuZ-rv@%Ywo=Xhbf3~!(sH~MZ&qT*S`^NkSx6^ zRJ^cq3Fb%^BBIivvhnTr@g;!vF-eoD){FQD;pS??CKi8`H~8MT%>cI{`3};N!H#nKuk- zLVPMZ5VlzmlHQZ_5BWzMnj7N$zgk0FOn|b9b}_Tj>=UfiA=hD9uwS^-j4p^Z&z(&Z zg|H8PA#BET64v_0KS*LZu{%9vk^N>m+KNMXk{ht(o`I(0;#7hSc_hfWMmv6hISePa z2=f2_b$*xWc+AjA{E|qSKx$;O+8d0uX&IQ(ftYINRnsr4rnCo0AK_W&ecdD~r+QwY zh4&l$=3^n~Tq}aE^~L0xt02dFQ877qi=QheYM)Wo%?e|m8q>b}mT)GBn!&sbyZIxQ z>wr&b!u16RdP|7rgfEo@F?2HG-Yf*(Zi8Nlv$kD$%7v+%ab8KNe~y!v&x5*m<@xeYHCkf=nfI;#%+{R#6AHZ!i z*C(8AjNL#yNq-DOsK7Z2 z#RZ50jo&!@Dg>o!BXO$Gn9e44Wq$K*bX!&BC&V@M4xPskZEC9!6>zFS?-?%GxV1;W zj5=Io=vi}c;mG}<6MUC*TtH7c27qQG%joEY4+2VOEiRdIsW(-cl<~Dt$qkK2TJR^L zvYW2_0_@BE^TfNu&SgQ|>FGZx2pP+s&8!PuK>(?LW!sg5Ie$ECY{I;BIeT@!_vHnlX z9muwWuw0-HLf={B1{ZoPBl?*!7=~C?|1qA^qyGgE2fCamn7$R*`e?g>&+y1^gACJ0 zrud|aTCsWEv8ZJWP!CpKJKR8a&HUS4Y29$swO`^O)P5Qy!u%5Tzp|Iz8Pm!zWS6O9 z17zR()kWm6+KXeq%duCw3&!c6EMq;7zUviiHs3={_F+<&q?U^%;<8KOBDFMUPZ)v) z1mG69G=(_uu4ef)`Z*G==Z$S&ugF|VqS|n$dfsSd)EqIu@X18JRd7ysEW4wAQ_i3( z5uj^`yLtFfb^GU^jK#VW1YzdM%LF7s*l{E;oqSc;*kPbQ#_SJcoo>`H^>>_}>Up(; zI3;1-o%PMm59Q25XF&DBk8ieD$)`|Ob^j5AopTYa)V$rQ?UviS3VA90yEqwexws+W zJM>gcMl7bojd+6N&GRR{L}={Xs@CKPnliSp92T{`0+vFpHS)=XuA(|MgT*-f6NH++ z0Ls5K8&eUm+kQX%4bM#`QvtB-UqQbo)*gZ1iOeP24P_;f z)w$!wpMS6*m|e$q{%sO8(6(oAI*h(kAZm zQzU1tU_uV01fPix>fQvQkHL<|AAu&D-Ce{U3#rMsZjFJYN9rl>X~logBeK@I?S&;A z@(95Ru2T7J{AvsM0+xcfR>hco|bc z%U(SgbCucrHMolS@YC_$$>GRp<=EC30V_V>33|>EbnrB z_UNy!zy@=K*9KmMvAv#m4^I(Ve2PiwXui)%v|%! zsSsgXO!NkRwRDO;HpgI151=#*{}((BXd)BFPjpxDG&uivIL*0$S>hmwAl#ujKkwF$ zcf>L9Q5?f%kLJ?U)%rN0ceHzluyjG+0wznQN&B)~Rajc4Cn^Q7EN-CjTYh~{M9JQV z`&uV!;!u?7)>D9|ArknFr@7l73*&zn;jaUiP{PfGCH)AAfv!s^4{dx_q``MVIK~4zT5AqJzym2NoFcOgXe70C&_S0 zvoczGbiFbisWM4}l|}{{IMCe-=XaI_&OfJ#rtaX53$1^MgkM2eFcmkiO9zln_|ipV zjt8tVAmw?v_#ooG>4GWT#VU;E*`DOo)4tp1bmFkA(?&fA5T#tNi-)bC;m!b96*?K%(7H0(VT zQd|P=ZoJig^-v*Og`(8_W2nDe1P`C4W))!sO*y#t0CNxZWje^qacD<*?c=1~C9C+J z%F=T6k?WV`@DX{Cq?{L1K1Y!p1n9d%M>n`i{W*IbFz4fJo5@p0sku0$PA=n|Ky8fY zDi?EP#x6ykwo5M5qpD<0#<+JXxfq7+oO4fGMISQ^d!)X+({tBRD~3yDO_5iyeA`~S zJi^Dq$lPdc$kH)%k0RmbE$k0#`}v)#Lnz~S)8uT!0omg+CNO`~KC;Fn$)7}i*oJ0@ zeZ^ZpkVjs$@a&@*CYPf58mSx0!HoiTOZ#%ecr_jtn7MVPr?sAts05-2f@+Ajfu$-= zQk&p#ogK~atf4Uzq^L^d-nK$Bu(w!kFP*jljW(moZ0o~A8Ip0$MRB23RS*W_N-Y@ly<|F=x^K5 zoDq!(Zlb>B+ImrT#PU5IYYx2N<%>D*q1%>Z?(4OAmIMA>T4fCBJF+k2_HOi1+VGEu zwe+a1*q127MnSP4j8-u8#>xVXj>J(el27fGxWYg0R3zX|^`7zjmra1+w{Cj)A@f4G8+!$ zTt~47n;I>HdWYRxz=Yaz4u!}tR;pS!t#&fB1^9X1*6A+tCKs_cyFG8IzZWl?(E+l+ z9Hzw^1J^qpjIdtRRTEs!04Y92tL!|{m(T~4*sES_i3%YO!P!A9 z;!jacC5>lxB_@~*3}qZ8mN&p*PSS}hCrmk1`PO;$n3uQJ5e~wD{2d~&W$_^uv1NzhM zuh*m*<%Wg*A6ipb`|c-Xorvphlo3jB|7KrMXt1%Wj3%U{SV-gxX>IK1155xK(el09 zGAbD@D4H{eEcPh&(yEO>e|YBbQc+I@_PT<4m0De2*{U;`tJbpAQUm+(>mpTy#~UXl zK|ZsUpi!H&J=&Ru^yK;iwjb{s#XLwbnn$03K3iW5ByM5s)tf z;5{3C#(B))2{eRaY?E4(OUZwx;6hx1NBbd3TKurLUB$ zLa5N>K*0!Hzua;4YGRbhtS>*xE&E;)E0~olCmJ%X=7nxgL;c60T zKIP_dW+CM$1_ieIQB(jKv5?~I{KG#Og1%r~2~vtHajy%5j9lyrQxd|`&tr;Wim4@JFCZ`ptS#p$bkl4p*#nu&$)# z>*S^-MI}AM#KNydYmKpbe!cEx7QdjyTh-zlDp*HgYAe=n8?#8!wxX>e{{5JcG~aZP zso0;@pq3|;vEQoPG}t^8kNR_LWw~@AQ@Yim5?qmxsD;h_8oLnZ8`mPhr-f&!spzL( zGy#`_kDmYuf4ojKm#S2AxrEg20#AXPtZq>~l_Y3=ak^RNg&9~-LznG0Om~H8DG2zYtKB9)ifswtU{cK zzj+e^5;C|Q6CJef0B0$|=>S)Kcvrn!KP<)+9^8UEFAk?F4)Bk31N-mJ_5qmWDm7xD z8a*?i^L5qk^7}4g;ATXEN@|hPzZ{y&giZpFs^RC9KKAEucPd{qN3Q^)P_vNzh+PFhVX8lOS^d2|?}*gd-q3RiM= z1^s23L$4%P+Ghf&GcX4Wv-N?S2j3lp)A71T$Sasak=5ibGmRd9FZwz9QyBy+y*H4K zSiRc(8~6q8T|nKSYmbd}c8#zU^SU4M)k_vsUGgJ5KB!Ld0%J{u`=U@nEl2^C-1lRg zm%%EX8AQRffDu0R3?wF66~n^qzMo8!$AQAx{~-33Ho(nssh}B@_Wu+BW>DcFdTs`C zA`qe@Mu%d;d?-ekEKCH3X|DRjOtB3?Xv8Uo1|o{4$(4B@KH^cB~M!`BM#*TPnHkT4dElnpI?yR~<-B}o^iMbBBR@3WOGrhc% zbI6rK1t0W=kCb?(qP&i&i%m(nqO}~yhTKXkX#-ukfg~m zV~C{WeEjIG;R#Krtm5*7Dqm5SB~l6~TbZ+z?%u@ST;m$81$kbbR1OuX)>?2dvH`Y6 zwX^TaulU9$qQrl;6PL8LA$&bw1Z5SBEUQHienJUkG7umPhaH;1A1MGffR#CO0hb1w zVAVKrg$d5_*GFWO`=@?-IQm;iXVirvul*iYAKiCM%L5eyD@T;{WH8_0K6R(Gb(#Q78m0V-Y zx6KH8CW(5%&5t?`-BGH0$y*^?=h;kdG+e}4{!YW8R+Ar29t2`@m%6$I0`M~+SI>Bb zELslBkp<+eY(k{MKo5Q)Z>)NXK;C|Jb5_SXR;8|hcX&9d^cqxIv) zVg1o-Oo}<^{bdT2ALBs|!lY1$)x(}?Rl4?a9cequm!vn|_k-*lzb!Ae4_!5J4cK1a z9juWLT_tXzd?=(TgBsYBgVsIzcJITqHweASz(u-v&b~}CGD#w)fuN53AkyJ%;ym#; zodqf68j>9W6wxlV3Y8fpmV_*8xC{?s-TA(C^}9Gc>o@dO&u8B%kVF1>9}qatKbaYz zy*8BNB6W)tpz&+aQJenJ2rPjbfn(Umh*QuAB%RBY^tlVxS;4&ley#Sfw2RoiK;Bfv z`^18ivS!Xa*>Hm36vlbyb_Se(1+|26{sFb@;r<(_C6LhJKS3>xe?To^R1l~|c(0xD zew)WaI2WV)ZGeCLYLzvg{RlDbTp#C&ULc4sMQxrdK;p}tq%XYMQo&_GtUl&ILCR!p ztvwaC-C2Wez{H(Xe@E8BzKBKC2D7;#11* zmIi&wff$H>#djf>u80Sir@_B5PsNjmbO!s**a5_6{=RbDeDVi}@*GC9;5Ih5xYpVo zJq=!I{1GO3k24B51#ywRx1mF^3wJQ8+dgoAu2$p)V7%}ELf&VwH&icw#(;sAEtLfw zDh?_|e7}Tg%Zuho$AcsRltA4~e81ZUTu_PRnBdI=z^S*T$si+vhcgm*~LI%jaN!V#y78fnOfR!+;f zCDP52L4r_7Ec*Y8(ZWRiKVh`^Ls-EQxi#-n1{tE&zYw3W$9~$}Rkq1LE>16|;WMx~c!r8d zmuW#?f>ai?z0^A`;;NalO6Ql>SBfl;k5v5eA^+1U*`%ox2wRMlb2a6<#U}t{67s(S z9{8gSqRa4TGU(v($1-xoi*lW7hxyB$;xpFA@jR^pqW2@S3ABqjE7VcYpwSnpyrXW? z%_3)>SMfQY>qV%2xOZ2Cwt`~T%b#~N*8Hf^SGHOi0#M$)4_?;c;gYI~`=&sjhEuqO zQx<;@oOo6PHn{7ufl}Whlt#^Hje~-)&fAaU%Nqgsq4RF%wUsx~yZ0WsC`!#L-X^!f zmpJ)B7^s6d74GV>3&HQgiPy_vbCU=iyzeyhWG4jJ_)?aUF0EzH+R?*UJhGBDAzVt90l2qFdP3txExW@jvs~0= zCGp+gW&zm(TH;>NQc9A(HJdM{QmG=ntG|o!UAy<5L9RIG&9#ZF{S@5~Cvf#24SF+G zP{u5$@R)Sd2fK2!6n2J+i-B|GNz(`>Zu?quO6(VmhHHg*(kM#-MQ=xz9pQtYaBS`@ znJHSyNnhqTSr|kP`M~1o&8#rA$dD#&?;Y?|d1upN@Xl~8gqEi6F??mHEeKB>8T~nj z88oDnc}$&txW(F+Q#du?IZKdlsSymPrlK3|1eOaM<`FRm4*(;vZ#zK4zct`KVTz#` zT=X?|I1)Xq1Y^LmgbD(#rAPW>@RAYTQr{`Mi9s`7dB|%oqZ)QINz)h-(7(Rv_K$&|z(H3wNsz zUzmEG^m*Jl&GK9Q+}o}Wh~pxhba93UD}Zi9y8HO)z~kJ$Xn&omPHD`LbmLnO^0o|& zE_}c%V>j1cLsEC^Z8Kv}-=qP^DBf~4ZkK4i@b{sXZGWKEe+oMB`On&i}>S8WD`(`75|C#YOQpBUJlIPDdAsvNhsna9NIJu{DEf>UTDuRYa&)c#G zAb7;7O$T7fwncrHiyR zI`xV0T^9%Q{z92%a|?}pvPrp{RNDPi)NkS1htzXH#Y~GR69J01 z@#8A>TE&E>9Qd=O;12w<%Wo`tWaR|$(l2#UZ*-AOsFlYUxN#9WSaSI9wLMyvaKk+K zUamx9)%gP%-rvC%rcL;?-hS%9*KTv0X;BSel?K~~@4JZ(GK;-d0;_A2=ZRD- zW5zxFfxQb+bS|C{2ULceZG8WNM@ew+9DT4CBz&LFoLZJXq&?@2m%s}BEuPEnPOFLU z&-Fl8##q*oU$VOjvkdoF_qV`YI`iv`xhCqgvucvk`ai^+>n+AD9U1-wk8&=JNt}sQ zmQsU19PgRH3JpqDM9=N!6cMzCXcWXLCTnvlcWT;gPR(A1t9NtGH}h+)?N@c${0&O6 z=lLfnC1=f$=e`CP@VZ>o{U;`c@nuV(NGqipLX_uz!K%SWhF`k`aMvNCItaKoVG8AOg??Ad)@DMaO0>E4>wrA~1eU zpHmfdqn{gtIU*UNt?H2QpYFe3aVC43+K@3_5_@6>o^r^Wv{weG{46*&%W}1I*QUM;w3o> zTS2K(RE$Ws_+V{lCu-6XaBS`+b2&t+Xf&=+ddsw}U0#dDNCfI&&R3fsFHDU`ty+D)Y3sc?Xu3e8UhtxQ>KkqYQd1sa5DW_EgdC*^3oWI#20)+Gy zgv0BKI(%+l^wyp-3|&XzEP*&DA1Mpd{)}+`2pWNn&y)@3UnBwaYjj1Op8Uxf&)Fno zqv4FEx3n2r3B5I7jsGa(|HD)UP}_~o)2XjOqdv9xfz0odm_F#*M0+=fd@@eCcU+|^ zBYJJ%wTavT;YHjmg8zsugw^LJL}iIwU&YH&r!fy4 z6o^gG`~w1n?D-7kV=$UlN|m4;gG`?Q^)(k_@F;nkU(~~{jFb*L^-u=0;rZ%wadwd(?B>d4H;H4{VqJSe%j?F={_}d zC<{q53#FI_R-E0&pV3ZleJe9r{~J=~W&q@yegZkS0h;7p9dH|VvR%*JtQa%#^HGTC zfyzJelOI93n~R46zfm7Uo&fN%;Y~&&2tt1T7qpXgFp}c-I2=}}10xdE6P$nmdgocs z)f(Vf<2|0SY+z)hFi-xorv44V@^3%fAA>B6_TpM4;=tzG_Q6#Txc_SIXa@bM_u$It zko8Q+tQ8#uDMp=Y1p#|xT9BJuPc^uY)PhUEnD~A-Q||uMk!D*!Go^jeJaFkz2>Jec zE(9!IwW-#xdm2s_qOR})n%xPk8qYvqWzyLj{uldy`O5x{cVdAL-pJ6pJ~>E{sEt{~ zuq!EG^7ktKx4+_l{R23XkIAo~^&n^S|Nb99Tm669_fe97UL;3m^o<69bG|ZowP28a zUW^fY(oMMQcOVHYuQgXBB{DidJ9z>w?x|V)d6!==4N^N75Wu+JIRxRHcYuG+(d`oA0@(^}ivY~Q%%I=Jf&3uFZ6O+f zJb41(MDCX$cYHcO?a78QK%NZmKbASCxpDhb?36>rmuVsuu6gSWcirPop~hjq!Cl{D zF^_JButeXqv&x$}qht<%ZM^d}>*AB&faqq?*E3HYx}j$d4}D%1Z_=Q`UvYzY;R}pk z=b+zxxML-AV(B&ua;+idj>vJbM?>Eio;KVIPGIA1ssYBtoWrQriaFqPSqB>1s#dS@ zSLpzMGHgH2RH_&2MjRluKF>uNG)dr5p|?@Jq2}}=VeS>d0qxyokphXpS_^WRt*h_$ z{xP010l}j0^C`z_cgQ=NJ5zIUwpj<+xTEV{H{h&2!0LGou)4+ zERmS!J3fesu8;Nmy|c+4pyxcY>S)2x z@`Xsw+6ZD+-N&I#EC}2>id-aQO~%^;46ZQbant2?ruV)Qfc%bm%ADTdu77YU{-~Sb z9GFgzj@$W7zrT2t7v(|;2f-BchhguU=O8&l(=pJxS==t-Xy938O#jUJ@l(7ZNXwZ4 zFxzdOYc9>+Yj48tWkM3#OFv1=RI6kc&|^vtau5a&zXmev?yMJNA@JkDuN#^HU)Q;9 z=TOt)4U?0=DbOS4^n=*KtLpcDw)c*0N;5nNy-$-%IgkYU?sJm+ps)E1wA@rC77LK# zXZFBW@~otOKT-_Dc-hSj;;m&l`5~t+X2HjtQhR;3aM)G8Pi-{Jn_$y%47WNLV^wsn z43JQS5vJrLzd0x$gPvE|Z&He;H7p-_)K5^B~Z zKULKIeI2mU+GpK3JEuWN5SH%8WkCjN-Y)7z2r#SRp{awaD=Z|E@N|}g2+R=#h$ovo zAR@{JAfik$jYYHa%z@kh$LbbLDq-p$z~KE{h;lTW1fVnUj6WDs()-igEWfeZ1K>Cn zJ3!9mu$Q<|{Z_b1*Uzwl6M}%$LWq#ewdq9Xd)VUlijec)(790E=<&_yYJmH98kj+} zoUYw`6utet=^SyOw|5Nu%8!r}?xUTP1RBpl0_LgdotmZi9f0LJI*b3=H}TVC9`dV}i+@GH|jUl8-f_~mc~7i+eKWIOXa z23NF9+2-qK+$zoHGOFL4RnMfF8JV!+NS%B(4RalzBPMKSAS&5T)8$2Pt}_h12y7!W zAImx^hXoP8VJSSLH(Ua*VX(h>g+X81tu+Ba&eSO8%|&M$|9G{lb{KGu5z5RMW-q~(_v z$T|r6bV%Dx{D$1DzEGz2Fr=0q2Q_G@tt|A|OEMk39{(Qmw{3`16!zLbX(9bm%06cS2+Ir zR|KaTpXnEo)pVv7OAzDariD5RG-%@BU&Ely+Q!_dx)QH}7ym6m zx&)|Rrh#s)O}UhRz~CzbW-`vRnz_r1W2;x|$G5QW4!0#^MA7Hxw|v|nzp6ob=z$5C z=TOU+>Z)F$(m^i*)UKhQU6#c)E0jIq?rnHNpMew0ZplN|(~937SR)?Q1JB-P=rh$C z7lQz5TjS)G8w-OFKx(YP0!na#e&LMa>^^B0%{l~a;Wh|yNmr!4pdY+<0H1nXkinr~ zh8yT#2?8EJLu~HqV?YD=;PKWMXmk;mkQ>34E!ejUM=F&4LhUz^1#1@JwfC#fcPB)6{b}0KExGhXY;99-x zm~*6-*%+JkupySQNz=`vqym9a@4RGK#l8MQ3~rG{1P3NZ@lpUhng!meY3nSG@(Ue%Um@IkTzc$wjG@g5V~6>YH#OWJiogg*2Y0< z#Ar&GF2_Tl^^hXhq5hi@RbS@Vhq)+!5{2Xgk|ddN4JT0cCY_@{QW0?uZa#%bD6=K9 z2rk50QPPPleS7atmi0rS;Wk|g|BDcwV-PLz_Axy3N@cZ14o)ohA{jeD1@xlV{_flR zrz>f@l1BE#!x*v@^zOn0{|{DFFHb&Pu9#?bFfHZTUZ&NfXqg~PsL_0&cH;Gr|7{{T9C#lP5=s8Jh{LO;fQXK zr`^1`WmRjl3{~Sv2eepHa5un-hWnps{S|AcXJjpzuTBmfqnwC}#IS&R5KnojClZBjKmFMHtqac_U zXe$?t1W9@Z2Yokn6nbV)p+YC)#YUk-3jBvjCIm=PJ4QYH`Ir626B&_seFHG_?fzO(ZgmeIQ znS)Y}F;OW`_ygaVFZ2^}jez)~D%3mPpYYQL?5IZq?GcticXe3+zr||mE;exUr{%2e zRs)!Y?;>8YWoNl<65qYeU%n82x@hmLDqid|P%cYToAVqZm`&(th{p>mU z%3{h=uYix4B7%f#R_qaF5w^RHwGnSB)a*xM@M20cqNI94Ae>C}7C*ynqQfC~A|Tg2 z<$uGuSr3ewpL8yFwgDXnSq{!wWSFzl9H4wT{rvvb z@`tOG9=P1|?ttW@;=8zjb0U76$L-T&a-(>{jx~ukC(4d#=pljjk#%mg;Jz=ta!w-< zl2p!pq`JCf8YzGSv-tRd3-Zc&21q|^O+09%k3-qzgn$rHLAwwm1qBPH8fDkTcMA?>(5QnZ|J`cXs?FwPp6nghv7CWP1 zXW@3WfHUZ$)B|zHYF`Ebc1s*169L6HdRt>apJ6gUtst0kA2Xs6ZO4t^9}vzRBc=n) zmT9QyYYHeYfN~WmCg`1k@3Tu$g@PJ4A(8#s4dwTIz6=Ejt>&k|v*o68yE3s28&e); z#$I!=D$vUHfpd>Dd^I6%B5=F-kRD2P3=iQ zQB-F5RGEL+digh^CGjut1^E;pJ-_2dlE?9|%y=Js0l^1|g9(u#jefFDW-HtlN=EzH zl=4^nB|~LDl!JftaW`!t6S+bN#1CV|z|rUZ_%@#z->4UZphWp#=ZRLq!>?G9CsLA4 zqz0CRbRr7q0%g-A8Gp0@%T}qYrgCnclFIj_9rC|%FGr--k>jRvzZ6HLD`+4#<%Krh0}^>y~K zW0>_RM}UUCotozdCcX9|Z^K&^X(J%;beE_7!o8h9CT=0{d?(;zM#X|k+2F8|jRX3@ z&>5r;_aH*>6qPmgOu$FZ2cs8DM1Thv;z*^XI$@H=w$>&f&EqSp)GzFJAl&*4uRtNx zV-F_$)hiC_c+rh*Z!)?&7u=g9D8NYzy5N$qDjoJfRMPKQhma2(z9d;l!9W4&cJo z2m_oj!oLwMn&km^Qv+A%5N~H*>%po%h(d`!f0$VW{jsskiV99AK=1vcb?w$*sbS~R z@m^-HDw8W!wz9HfqmI6{lQO|A;?u2dX`@9TSKOQ*tqLF)%kX;II*PhP{uZ?h1FXL< zdjYPy>G5N-AY&5aRwI4GV-(_fL{#J0w4yXE;5A3Zf#TF%=j>KavFQ!)Ti`FqE9pnJ zN`G!vlN5|C>*{rUs&{Tr@%HH*xd_E=w8sUU4&I-oRJ{W0kA<=wY!(}OsT`hAbLf7^ z$dMzw{eb%JPNZFqJ&Sa^k=ZHT2=TUb)m9aK8z^WmsPblS!a1Z{%(vG>h)QBpT4p&CtmY$)6=$-eypAWBft+&U&nXSm=!grjXe ze@d{AWk54Rqc4&aHm;7Y|4?Sl++&dYokHI&O{T#F#qxW2zikkpo|IFj^-A+D`mx@* zZn&Dp)h%}Jm#5nf4&w{>do`>I1grX2@5ITiyF^tClrs9?vJZ9iS+okaL3O&fA{PxK zw8HOQl<53@{-rX|tI4cX&^FuZ`|+I1NrE9HAnBE5S3T;Ax)u20ot2mq(|umGivzjQzoc;-rrZlKNbq?G1`yju|%;G2dAP+z$l zVjGH>M%}QE?pd($)FGdGIDe5i#wqjWqut&|V_A}L0S@j0!-{mV% zIJ#BI-y0&1Vx}Ol>apzo`L6AVTdO1%+XKIt+PXDsy5Pmew93l8=T6|)izu@T!9E97 zd#l<75H zt=oz4ayV*qlZmNEQV;7R_S;3=(wIA{A2tEPf1GFy5o5OwyB9loYd+>NpYi$tS!!Aw zek;WS!3lCEY2M^DGo)oCS2B>-RCbk75UZ@MhZpI-e7bEgD=`Z(jN?7TVJemgxzpE( z>mGCmWJU466eVBYdHQA;IyX)DA@2+PSAOlyGm!?(AJaB?tI1VZZz7%A2z{j;v)=uY zXltC9f@!?S40it@c=!$doARGD3c?(4Wfh>L3^=_^WE5GTGp(N~&tc1p>(-{yTjP-~ zl+Hkf8E{X3zg**436r@{zJrY)4}XLle@{X6oO3g&X@MN!J0t45`RNRwpxQc2nDa;} zh}1_lwcK>cW(Q2JD5Z6=LynTWSNW{$j*1fE;XILC&EP%|hiS1~FIuVK14F~TQ#Fhv zkL@=on>1iN7nH=v9KI}XzXolfodCHZY)1?|W+wCMXTyx;dOoIeff`;|&U38ny-GNe zG~G0oT!B<0&!)Yxhcf>(>y@bgbYK$ybYM#H3}vsuO~$cKG>g%(2yT~km=bJ59k8I- z!5!mtN?FW!dUX5<{ybR2{kZCbcH(C-hiOPOtK!UPgvkz*Lm-&; zEThHYKr^EV7{A9usQLXtgjSp))UJmAe7m+8rC$ACV3t>w3$XaX!nbCaTs49gu8|5c zR@rO;5DX~V$1B;0IMBBD5JR5?LdbOiRR)FMsc2|lZ_Qx+piefJ!1#en;8av}7dL|7 z@Y_>Dsr6dBPXvhfK6@y80V9z;Zb~MB1Q0oUrtnGebrmLlgob&9{y#R$tV(-3q3fI{+ru~|gwjc#@RGn)mgMxDqeBFPKOl5wnJez6bl@x$BfuAnxLJmOzHo*l|s5~p}Jgf=NL z8S0pU=;a&zM#VoBe3O!oLcltpJK63m(Hof9((^??ip$Iy*L})!9#2v0TW7FP?nO%v zO1sB&>^(Hs8dFokG0%Y^tdEL7I1KNewIUu64zBrtw|qyXfn*ianw0-nN;ZBG_lzM0 zt2Hu?vgQC{=+$okH37{MdTAwKNsOGi4V96dWS(@baYr_|iLBU!P@z(p6k@#SEZ@gJ z4YcjBr0-~pbL%yVbPGw4wUce>^^u!PlIXJqT7+J>lbuQR?$YzfypM*KcaqDVfPTcm zqAUy7v9J*~wqXUMzw|jv!3P@IlPY=z=ayee(n_`Cq<;s$fF=Y8emVB|Ocb__`)O}o z`jF?`=NM9PZH*C@HQa7gdTKj)ofWpHY*1Tj)t0j14us2BWQXi)hR4T4a}|KsRPt%1 zP$RgOaSgYP5^q}E+^Ta@8LE$&fAmQM~7L(m?gz6aU(n0Q92lh4N>4HxQ z12cJ&?gb^Ey4fdts{%Amy4UeWhyk}Ne~Nti2_&a0ACOJh_k&W@m0%f{eiJ*EUkMAL8%B z>=ld~`Qzfs8p+Tq;Wm+1b0^kK&n3pzWu3Op-xo=011K{;IWi_X5WW=dEyL5#`Fg-x zHi0=+##F)hKDae-3~c#%)2Ip_XAZ48ObIp(dH4b7mGRIZS9O$`UY{!k@_8L42n#Q|sVoWVQy2KkC969PLM%-yOx}i9TSn=6yR-WJ}u0+7tOaMoLjs zD+V8$odMqby*oB4F5{JC_*(7!Yqd-pf3sS8&Hlk^iPPmTbOda7=htr<_N6U(LzYB1 zMecGpI}Dxn1c-1U=TlFas9UKsI#*{vbYn6$-UDZX7ZtljJB2z~H7o!Et?KF9U}QEo zasncz^87R0aK7V?{VW99vqBh+JO4SIilI@+D|9%QKG|&`yy3mWqDrG+lU?}Iu79P}Hu{mK8Bo}ECf z(qCc)gIuDjAth4k`x4Ug9`Zx)_Qj0yiQArCVmU}IW`5-@@?e*|32Ro_Eb!3Xa98=B zN9)qOBiv5cqqexubBu0dLpk?$>OqS%&AHFY=9{l&XG}eX8%-JRZ^L)0>th0>LK>=n zSx%MyS&k%j%!lZ9SSq=|0M6e#vc&GBe|*(MSyi*6>E*oKSm9lo|2SvyzB?Hkhga4k z)FQ+VtHsk;KW9u3K{R>G67o%o(pxhtb%gqV_}#avum70u%b8m99Wy~7Rv2$jtNu_B zwS1F&wKcZ7Q_YCw#tyY36= zJBOKy`z$cL2_Gyp2#H7wO!$CedJsSeH(*_cw>IM2MQH+l#hMKIXgp{(-YNyZyu5)P~Y&yW%ZU3II<_=5p*E)>O5OSiAzm32$%*OA> zdAbY>kz4BpZkd%Oi!i+2;a+MNi3enq)MgZdSpvv$q8CUmYK=@_Z|W+{q$D2nG=4}C zmSy#VdTUWXEqa6I}rb@=3PP{=i<1U6Dq{X%R>mPFhc0 z^9<9*v$Zw~``vuL+pJuwlY3M@(h~RJKF|uce~VJGEGZ`OSU40sXITw0-KZ;a86m2A zg5|I~z*%Xc*7m*eIg%;j|!~~CvKZG!}ehj)?JzpJOZt*zF^BWB~*siaEG$r4*5>=2fZsLmE&Y9{LsXpo>-H2>Ne}-^;DfIW=BEx1$&!=nqmejh(Lzy>TWxg~ zLEQXim*PUbn&TX2--)ZDF#E2uNEWAuf3MB&mT+&m&W&_?tvbZ{X~xxNN)wbrtN0?s zZ)KrEV#LD2FiWZMp5--*_J!x2U7Qf_q-&% zl{&GBqOwnxvf8WMJ%7FJP`#Gp5Zi8GBU-5~)hkBh;BwffThXlh(4T09;JecL1^r#S zm4&Y?=o$ADMHY*Q3Gyi)G+S-QBPZQQbmuKZu03umMjC`mq%fK5(63b^mO1&NtJ_(o zaIe~jXhl|i)f;Y*XV=AO#(0Qi@n!mV8ih5p5KPT~{@kC0JQG@_oqn^VcUH1H9aT-R z7LT8YS3SyLfAXP4?64W7CV4)LGS03pe00eL-8PE)rZ9*haTBXTN0%R!)y-Z?=@^+* zOfEcQ8ve%LvK?x~i-WY`Zy0d_5DZquq7)g6pG+U6@)QvhYuC@nw#vkEM5v~XfG~wi zMJ_*GN+lspam2I)bRcV$lgC9FV=g6@GQfsv=JQ}Bl*`U zT}i zZx!*2+A`Vg%cC!{SQJjF#5`Zck7J?DL~GHgs7tCEK{R;s4etYXX&Hm4Ynxm(6(Vq- zTT>J-gk*FIiq^P!Wo#|An$E7)@xAT4ZU@V`P;Z_cy)E~eq{2DVnI7q{cytBkr!A&w zfD)6(>Pd%9rhIFX`?jh4*!!lLO89m;MS1Fx=hI+CDvR+`{wWa*>o-Qg$50Uek~oHM zEaFng>CX8EV8zHyDn|9LUeOsVBP|oCgv!n86|OvC!VEg+Is|hy1n+hvOuX89o7N^I z{g`jblA>qOH;Qk)T}#a!ABny?SN*Y>cV1qxB>~7xqz>HPTP$JNBf@$Rh+cc+&Zz8j zh5_y^atB_!E3W7-tXJaYf4$v_j5*&_BE}>gDtZhft#;xy=F?w&UYz`8 zJ7LtgXOD{(D;esC^p-fZt9WBXWaSc9oxuwT$pK6z+Yo3*d6ZU1Xw>}(e^Q4aubszR ziZkM_>3f=f5$8xhZ1*0R@^oFk&CT2q+gvBxyZWrrh7&h8DD#=e^izq7&8!weULUIh zNuU+&$d>r-mB=B(&`n4Fzebrda-cK2u&V)_;my}+p`W(ep=hzs9+YD)e$q}0Rt!7> zeFg@vv~Ry$MTI(`T80YdRELXp+2jfu zv7tqyxG_wH>h2Ff1&5*QCyQ_&3zFNDy1qETXD4O_20<`}>680TJ)!eZUfbyyvVmA)OOK~hZ&v1!$0ST1M%zIV+zHLv~B}nhb7B*LrQE)(YdPj zCYNu{5g}>UHMeD(aIkx>yj@ALirxa3cVVl(1nxR4W?az#)-Z)*l6M(}Qyp|EcMf)>>A{llYC0;~rhPvi zSt@Zati$9mASvn7uVU#n!i^cXL+`E!=}{hSJ?m3h-rvdth^!pJN<27=IeaQ|gb*>a zoB6rFIlhNd7KI3d!H_<+--{=?3LP8?dYtMU=#yd2s*L81@{Cw|EwUik+C1d_^y6*M{>M#xpL zQ9`02(7F>(wre(HdC5OW$zpiBqxBW^Ccz6IBUJ&8^f!IHgvs#_nJA#KDk?Mgz=1$Q z21FrhW;w;$_Zi+k*Ur8NfXa9brC~j{U&-4BSFQKl=C}2+E86Z>r?wXWEIWK^;h~qm zRERK)n&FP}RRL!krLlNRYBqf37AA}XQ37J=W&P3zP;7oxtdlKZHTEuwlVe|rWi;2L zrT!>9h2;3{l^!3g$V5*b!peE}igSt`os90?lLazTX&dV?yOd?oMFts#++RQXZoS?g ztWOVKLF|N$|2m})N9OLyjzhlcolF&7Ch5IpLmNy?i2Vg&Oi88iC|G~9od`K09hcIB z1+{BBQz zHr$8siCBJ@CB}L3wgFn@+WWw@^Cq`ZP5_IR<)1?5kbgv$M0t_JzVlSSbkB1!p2rR3 zebip#`j8X3A* zd)jsRr>ZejacgYM^AbmlOkrsVgt^U$gdY~pv!dnCO-$5_{aGt+c{XueVi|)Ooaz(5 zwpi;ffZoh9T3eytoJSm0FaH2H!J-SbH5uNR$=%YYNC2 zd^J0mHC#R^!sP1z=G=k;3_r$qC$bu;9dWZ&vV>I`a@rpN9>Q$qswgKnM*<$SDoLVP z8|K(NQ(1VdhrGwSwZVdhtIV9)TMW6fw`po@KT9T5Q64nHw!?vpLT|z#_$bcyrMS*L zk-6VssPK3%6TbOdNbm3cTJ;{NwGi&`v)2_TKc*FM+QoEVnpst@)KR0~Tyrlv|Hklx zSR*RT3pk{+0J*Gjg!QG=oDv`eMZ-6$NB2(zjtLWmX5 zcA!F?b7zdv5lO#7ELdB;Hm*^EfrH*XWXoFg@nJZ39#9mPqo&fQ+ zmY@WyifdJ{lnM8jxh|Y{8#pw%;Xv}UHHM+L#K&B2UKEInwsYlhE~zvqToW7E(e)uF z5W^A(BN3@Rb@He1x3Bnd(bZH$t!0UO8gox; zi1{iuj#8jk3I2=(vyX3*AEBOVOS7*5voF&6t1=d-`tcA=RfOBCG*Ktc>wR=<^}qvc ze$o=6_P>*Xx_8RYslTAfWEPH-Y zc($?|Nh~6!78R4{{pmq5ABx8HP>^v(8;VhyE2OVzlCB&7lG}v5;CY}5oO`@rhc-9z9T$G-M!$>CMH*$*pt0G zLSOC)S8Rj)t?ZodOoW3q?H=&QbP6;-KezBkKVR0BAjKv%YoNs_^Pj^uByb=RtDuI! z4z<-zyNtiLr0ArjG;y)BY0+laVxyCJgg*YYSj4W8OQ9}R&B1MhyN9C645RA)T&S+F z#lw!z#G{&lgweP{0AbQda#P|~^3zwhRAsBR#0Xo$V_!0O4*bCiyu882sSqT)L51i_ zD;s=~Hi(cvJ^I3Iu0#GK)9vDCH({6`{kz@)_GlxBDP_k1Kb#{if$Swx`$wOr#}Or?njc# zufd&Z|HM~?7y1fr04oeRVxF)=DRG2eSwZA<5@hSkJ!{S6o!(l$(wzKJN@sOPMv0e` zNB3pyRo+R9i^7XV73P^R!PfQ>p!tqS3suQ@no1v??ji2?l-G;VyxxY^dCuqkrhmNG zXqn%!+DJ68W-apN3bn)6njd=Fuk}o0R@9v2WjXlF`eKBn`iZPD>W+q}!$K8_w+vXf zJlBld()&et+kRUXPTd}3)!VH^u2FeEKGu(7vVmZNosi|Y7wp8lm`}0r`A-)7D!pXz zKY~BS>PU87`28(6`hDhA$-Xc5CoNcJP_baGy!EzY>+b_;uO#2$jj{ADP*`!FjQSP& z`4+0~y*&D?H7;<#OI(Bm~W@0Pz7h^lCSI58X z$Zc-EH^#@sXgwAL&K{s9=AYF60L5Crw7>bEYQYFp3lSqk5N z57D|(-rtMU=nanzUcKI})Y5=fJ;}VAWA&u>d=J2<*(L~)xTi~PpQAXxsiyIyC91G7 zH8m?(b%a->ljzbGu0Pk3Q^0u!QDO_!g|mDxz#?Hb7gbc5AxYl-I>ITW?qggc&C~Kz zPTu!fk=i;16ZI5pMRSE4NLn&&f7x{CeDMjj3tYr4U24r;x^DU39wW2Dwby5WAxcC& znMRBDEVkvj)@YJfer-`V%UkzRSarMn+1hglk6%{?YpD-MFLk}(!hSG2)NwqmykgQ5LJr8jtv-xGb5_ z^NTdPR6hF6E5=$oKngcUMj)kLe5JP>_JP!uJn4Fc+rSGx!-m!!MsuC9B)I%pTwux4 zW4iS#b^lPCuXP_$jY3x>#87JHZJg|w3!yi45q(L%daBb&ydqLp{w03-%M*ixqTU*qzG>!6;z6Db3?kC45izNXJO6|QZ7*iXmO;(J(VtG@G zBBtMhLsHuYZBtL;0{@`a4~f93air^Vt-n zW51Xg#*l#e>Jt!U#m=TQF#RqwV`zY0vZ%^*JOwF#NBkoUo#qsoVX%jws{}FN1?UtG zY!{$F69kk$!>qV}KkZ#*^@_ylklws84yezG6Gyz);C)xTT#t$E$OJ+|y zs~h@#B=1(5{N*CBbQfAUW>Du5y~@86R!?m+hl=?**McK%(mkhGh9miIWmmQ>g)SQ9 z8r@F{B`|ide;y7WqzgD4vjrBAL6iHxVa&+n zzLaF^Y3bAuT|1mJLWk&P9s>HWJcx zC`d0M|IHr3@nLgAwOxn6%{{?x^hHBJ2YI4fN&+}B$OWS*_$1;YUxo@5naW7@h@18+(zprQPrz=_**E1mmDboS&! z6IOt^td_}Wb0zN*XjL`t)j9uT%~JeXvy+Rc@JVJa#%)p&J(WKaRSZ-_u5Yt4;KlD; zQEP*1p5ldDS7C;VDrCUU%qQ^|b9MqeF<4QuWT~@%sRXn*mL4|76<#PNhoQy4(x7;$ zb5=B=_+G>V389pdldq-5z(FtrBV`%>i8J$ud&^r<9y( zw?ufH>_k%u9_aOObVEr@O{Rfo#7S zNQffOmcB;oWF6fa*D`KLdAA~v5zi&yc%lLF;@VL^xjg7T1nGcY45{H$zMry1U9|-J z1p*W@zx(;!Yevjvl%w#v&Q#Cy<)U1;zq_qb+iEKvIPt{Lm;68~w*6xKlU=`G}-Jsknyq5!I`boC>2dXm$pgI)gBJ#heLsOEX z>{X+Y!WUw%DM-ipIOi&pX0(68^D3iKB2%dH3<=i_uJVyN4bDBrgIjE38-8hfyDeuE zceN;05*0X#o^@s+LqfA$aEFBo!l55?;tWLmxD2ayiBy9M;GYj(Btb_kxT zHGP%2wE5oSgLFwi)S0C+23w4+Y2?6}lKU#V9sV)hG09mK;#<)B1 zEzvdb$JOxZ{Eli~><0OW?3_z`Kzpqp^|66UX`ESD|5RRhXRO=D_djm;(u(ZADV!Jp z6@`;g?}rF zD`fL#KHaV+5T(Uk+L^fx7`~%X;;mGb%ZE!vE6D5RwrhkxaX6! zAC4Jm;NED{=m2%fy|R1|@;jG_>BF>{k3qh;>w-Vefq0LpvMGbDcUl>hrBEm-HzF8HTR1SZ$DYi})>`@G6kXCjB=altzc z6C(X`3>4S1ok2V>P+50bm>|#GPe+L|#bWtQN*YC2KcZh9BsuVXPlKfqv+a#z>f&Lc z+iiajHM8EfVCsAQEcS7R`3=_cM8+Fw_U9${gekGv_vYl;C9Qy6EN+x-9Jvjk%Bth$ zyP2}~VO>dk%ttn0g4!!cuC-c7y=ed5GAXnLcK^LOJ+K-CV7|7#WLu7U6b{4s;Ak9! zSp2;{)!8K5>_Zmrnq!f%*9VCVkz%3{)Hy4j20f1=I^9enIw_{4)A6Dw+H|2Ty&B~B z+(yd!zMrj)_^bmo)z}XGxl-`qJ@BH4*-??mCvmd08%$`p;mm4^DhaCCiV@!z8L(}! zV}$uMeJT11cquXs>8CTt!$dK%IRMgRf9STvXCzl-*r^;QJkAduEhKF6RWA<5e(^zr zS=lXwXaA4f#i-S;reGKb3glCQ+6*|vkVUQ$p0M$8zM>!_7kQl+!*d2E*)BDl5}pwb zg4ZpQe7)~0#e~-diYVmTG>GGLDkP0c(wZW!#VCGTXVv*?Z_6)?9L&EFU-Oa9B9esh zyFc`QFMRbYF=+dM<9IG#xud8eC@6Sct*5XA4W9^p?m7G5V=FNu3Deso)CG4Z8cb+M z(4vXD@9Wm&5ttaAWwpZVBCKEhA^B_?`jC@{dRrHMZl2t8%_|s9JL+b~4rE5f28v zHoG=F%wEZRCxc)>v$Y!^=vQ74nL6f>Dk8%Yk@sU93M{_~mk8PqO>4jRB5w5hbi;Hn z7Gp|uR!w3Fm^>3pd5UnCrq^)^utjFSRRH7lRK_IvU4sf#w`hdsDHA5zZS`@)@+x@e z1vV~nm}+}x&9)Xo21oWP_LGXns=r-y8FC>iI=|6SjecBnYwFGB;cf!p(s-|1Z|7K% zy-IOjA`?L)s%?(t9}!lvHh<~{Cs{B+Z8%h@e;gI8hyQL;f*FjA-m=Mc$aN;Vb+e!4 zGMSI@cU=_qgvN!x!!(uT+t#^xYVWp!}H$3!PvxJ_|iJ0TU(mH3?W?3e{&*b*7o zS&TV;BMc%@5(~*Bgiuqsk^@7A!{JLa_yo-U;c|a+cFZ_pFYDew9SRAgFa!7${@p|+ zS?}097)Xemo~A*Py!Lf%bP4TY`bIXS>f419Y93L96p`?f{Q?$jL+5Qi7rrF^MFx&v zl1aCtp2&DU2Q|t&&$AZ(A1U6>4KudFp%i1b+UC#sB3;!4@#C&FqobB^KNyem4VrWd zB&*zn24=mM=*#K!_gZ*wl#F~R;D^x*BPnI0H3OmYbI*qK)cydRw>M-PoC)NR-7};kGWCBxgV}6(Ml3{S(n!GgodfO6W9?&75 ze){3e4^RT;*reIs84=4V1fKZE)wjGY`dlCG6?%Zx%i3EO`!F0H;|1+D$tY!|sM7QY z*7tX7JiRcbJIBnMEZmIaw&)q%p_iD-I928eRm$?;ZedIwwvae@;a}TK7F*9i(Qto= zo!mGh3MJCH8SA?@m3`6>yvfuLfpE+xmUt1(*!^GT@8urXfj# zZR#;{O!lu56g!G`QLSDP!an23e;n7Rqk#iry^<+MGs)%PDkCvU755o$O=nkqNMKi} z0C9es}H4*z2v^W9Bn{^wR_nUA^dPf~gtm%f|+w8+oh5f`({1_rY?&h||2s z^qdH%D}n4Mx0Gl&J91a_qnK#!k52)eq{`wAS>Kw*J(52uT6FD5~-of@+u!9UCN zACP{@#2c_!?IcDUxz>}5$Sn+CEVLr*=XadMTCGQKfM_%{)DQay0>zUSEsua`PLqhH>o%LG4sU&5k%yx`|T zU9X409EUP|I3&C8Xi*#h3o+y8g9hJIrqV^QPQ@pQ@Il86PzIhP)H8nP2eR!KcH1YF zJNB2DB_U;{Oe;_ZuO84IpV}+bEcND?dX)YTj8RC$jl!R*4;0>Cm;AQaQPuJU$OeMC z(W#Te8|Wnvirda6RWAa|=}4;V?P+|!34Brbr>74IK?}X1iN1cRVs;8ToD{mlngcZx zy6Q6%d5{f}l?eg%#E9tj{Bs(68r2^fzCO{=emQ_Tvi~$@1=DlURkaiUq#Uj;ulDE= z#TwCXS_nx2ZV1~Eo>2l;(Rr25D#ummbP+cyc^3xc8{?#I)LPsY(n&iX14D+Wgy zpdvzNK*qyx+Feb1x+mYzJOC{KSN5Mj-2c31=D~;?*~GeQz%=Nn6i+22)9yZgRspVu zqe+(gz&?fqdZ77|qhDtrvImnz^v{@%2bKGKUYU+rK^J*%`0vm`226Aa@a{ht8KH0Ms<3&f7Y{`K71$o%;#760d}ynFC(cwzteB!92#KcD)a{{cQ%;-99( z^`F<_|EHf3c|$ORmqk?sHHUTn^92LM65W5oG|AY(vOLqX@;?~45TpO~-u}@x+jPq8#|CPq_4%HIFu`}?2w@c(*9n6oip-*Vc?w%j2?drhJF zhMO6X%$t?)|I@Gk&)=I29QB7`-gUr@4*oLxmVJ^BEWf1^-GBcv{`1fIH&erV)Yyix z+znZxr^~757LS4CKU-i_qPE_!q22<;$d~~diZh|TEUN@$v2vobL+uxyf4?mM^W%8V z0D8`(nB^}%0Q`}CABhtHuPY{Resu?(Xy?VUm3-xIfM?GC^cJD;GynZ)lu>us?pZ*_ zOjKEE!K?`Y>2&g=s5On>LUF~eVHiK-@7_U%XFJw>bU!cN(7N6n$-UK+Uu}5QuyWZVM7$3L_rM_gqALJ!sUa+CNAnD`Kpz2+Tag2p8||wA z?sgl*$G0;Fv;Y}*_@caQKL*M*9sq;`YOXRa0QL4 zvSu@97$Lb{@Gb2r&WsU&ws(necz{59qZ+)f(;D|1L8`;oe zU$ObXT6#f4^XhD>UGp#jaEbcz03X5@NTme8og};wPS6p|@isR&{iZmwI10|6QyvBzAyKytSV)eBQXlu@`FrO9z3EsKR>jeIdraO5ZmuD^k{03h?3yUxC+Jqaxpu>- zzyeSt!^lmKf8OLV|NTEg3gp2vEZC}vrs6`KZ;Qcz=-6yo{eet?^_hRor5)ZHz%m8e zx}0Ki>0WAprMLi9mP7nONLgys$;B zod6>3ay$uK8qdHR>Bs}7=mIm=sWXS6U=n24UciDg2+|lHf-{`u089#U00^y1hH8)) zw4tEmdwMVm&t&AwNM|8$06*2e981NV!AN{90j5k zM=bxvi!1{PL%qrG`ojOr{9=Mvj-Jt@ZG{nQR&7i$JfR7?_(lAJcR3kcz@?TLI77+G z7EolVY2Im<_RAr_LMRZYQtTKASGkG9&@p`uzCdRNj+7DN8K5;A2G}xd;BtN6CK!Z* zGoDVqYqPm)Z|eS$`Q{@Y112&wR2UCGpo9grXS!5%VhNL47?lyD#j2-CC1bA_C0iSF7V#g(@ zc6qer@u%C=&hHDEYnt|+fFHQ+joK$x!LC8jFsP`@IlB%9X2VLRvD{K2?^M2)G+1w! zeykbfafl$GeMDyF@1~x233d!8-?{dS6<*<-NwCXO`5&U_dX60GVRexu(sx z8Df_FbSyn~rV{*pRfUNtkktW-G;#r+N5jD-_@T8rl)x10aXt&yXfwo-gYiEsp?|3% zpfK=aAwp-u%fX91}@pQ;8zDAqQsEsBPg!z^Z}YzedH8O z92{|mQN%+fcRxUZ!T%xFfG3DPi5gO&f}gVNUuLsFNOg8Q+R6^S6JB)>de7L9djJq% z7GMWen%!q0+yNZ7GA6Fc?BYbJS)x$6eZWMc=zme7r7<7_CXQF|16x=MgJtz(BK7UJ z^mIsUL$7l$AVA^=0V9zbqq!syukG|CJ{YXZvhr~`xMTdw6ZzM|3{}yb0%=EjqE4>* zALk4ECt+Y^2~J}&Zw15JRiGKHx(Uu$)&pQJIwW;Y2|hwGrc&CWh-T;#GZU(|fPP2< z!pf06umd+r^89&H+BeW3a)5*SGCoBRFs(|YWbX+V38Thh;kwpjPmUB6fqs%9O(sn? z>U%9f9?i6S^8=fBDe7Qr_yHJhb;$|f#v!WiejmWc9Vg(37+KS^54?dEsBNjnbtU5j z+YtH)#W1Db*^6c^;6v3`I|l$G);lR+J47*;Q1XctDi^)1c;5y1eLX<-!+qTaL@bx( zFRvc1NwL7e6jLqP_uz=g0avS$!0#Z7>JbV|qHe;7L-qtEWjuZdYNbi2(JokG&majv z+*5vulfA#3s@3o#weFq5{MnlHwSBPyQFQWNaF+6fAh6TTZ@fhRua5dC)KNbM-+34g z>=h)tzj=v)hWw=}urnl^U7rC%^(YvD+XtS{EgqvD`psmVuAAr^=*5p!{P{^iUJafP z(2LT^oweejCm~hRZ)bOeBvi^pTLtkn2B!NwK?tL%hYswu!YJVTue+2Ab3 z4>K*wW&Sk_Fgi{Hs>|RKiUjNUKta2Q1tbU>jB}3fNwfo{)BUb2-as{zs|T1B)3tYx z{;%8CpE{fYb!zM*A9-Md=Ec1D%~=-oNz5cU%!)n0rkk9;7!lvgLhUV7&ys=DqJ@Xy zXaf8v37u*b{?iuZ5Y}Bc0NQ3r3h`>bx2XrXI?lQ)bfZeh15-N?B@Z@b4zMZT_gP6l zFK7W3@(_3&#)U846Mth?AhZbRrRH0}-8fsZS+-*q6ar3ZlGXs*RhOJ1hu-U4kc#*T z{(p}BneajI|KE3M{h}nHHUL1n7J%|0eLf1(pxb?b7mJ0%9YjaXJv8#iSR_FhRA)GY z1OK=Y1;`VQx5+u=N5dr|Vn0tx)fD?U4}dwBQXW98|BmSmpu|l=ks}scIKALuZWxRw z@R!0(5@Wdy-(CMfCJpCIIH^nQ2S*S z9;_-#45RP{qbN)U?3g^~C<|QNG(`)XM+R8nRE(4Ap(@ZM_&#|5CBhEG+oA%}|LS1~frn8Z zasPe+co^K0I@PoYbB!B33LW1KqL`qCK$)WB@k#d9%&i!rDy2j^C(vC9nOHal&Xpn1 zCJ`9hiwV|qJ z68kFW?EvuQG6cxAM2>Xqr(g%;IG+P0v%RLsQrN`kx(#}Ux`lfA2d8&mg^#E&>*7B` z9s&u7-dQ?H@!LyjFkTu4Z4-(MGHHAOo6WRR#Ebj02J>Y!|zEMT7o z@slh!(v>>gb&45Ml5}GyjDcRW9oX>kmt*+d!96ACCYfP})P6Vp)hB;Yj&=53KGX+I ztaosJ)dIG^H?;&;*(O=tG^6@^ZKOKx-Guk6i5~9og7l99;RScH0+LGX!c{g`*5R|X( zs6bR7u<*H(Z)*rIJh3_`roZgJ8baM7O3z~cT2`}4)X8reW(UAUOX@d!AgK2DZFB#U zeEnaCtBgNtIVIY&I&j$`cdZ8x-^zibRtW8-AUYXy)GF}$#b%+NyYP+~SW!{;P`50n zX_TG~g%CD3BcPL*CVKGaY?YZG_(vtH2r~qnT_>C-AZ(piYC`NhCq`K20|0vjNrA$U z52*EH_3xL@1FfY7SpFHo;q#uKH3G^`)zDyNRS?4snGpbQwFSpP!wq%{&>~wknRpGY z`cs~u?!lG7-R5qg|9^bxe>Xxxu2EN(1v;ER*EmY>&3l@Ix)dPALgMf2|Gfh%)#rc; z;_29ZFk!aw0FBq#nAZwrGvGxW0=IjIXV<5rLC&9>!mZao721LxW1Vy|(KaZWMrgtH za7C^J{U$66hQES_W^pw-b4BG%$Q(SLGW|9|x zs0UsBXR51myiT~PSBN;L=y=O)UcIlML$y*|9jpf>mjW}sxONW9#*#4j{Z zaAFYDSR4ANVYH|6JahWD&gi#LN#?zd4+r?}tfia4-hRk%1qWN%CNV0F74y zoF}_?3{rHRxgf`*B`buCliI8W=9IZd3Vj4QM^5eNjH#dpl4mbY*1HTe_I~w$-(PKb$E?7ED%KNxPKMmXt zKI)H?b^uK(ckU@9fmDG}>4XJZV`v}P%(xz$egd0Z{j>fT)?^zCakP)`!#(JO#EP&$ zF%}?wb157v|1THHM?dgd9Y^#zMm}p4Km6}wqX9K!?XWp5yuDZ|NUR_0QzBU91`%ZiO&Y1LgqCB7V(!szR2jfdE4L_ey!(o~IKrw@(97 zg_H^yL$exB!PQ)#^d-=CqUp^lc1x?r6wCl{f*0HkS_Z*_i?}HRcr+kpGI%qtO)+Vf z>H?Nsz!|ul8Ht^*(^i3Y>>0kag;>zIKQs&G@3aN3@9NK{-)qNyqo$0Th?P^7zLt`k z1P3scY!6(^5M-vE9wi0^h5*TnC3xKen8y9nz=f4HE*ee07hHjC(6znKB_@LnJA%`w zKt}b%hsGX8V>erC2LRZsTx74S;}B@&^nT6|B1G(?lBRx3kCZ?E1^&yBos?XukeP>J z-qdQu;Cr|%rN(g!?)ZN^KgFRJ?T!Svd_!s&XeRUgW80Af_eb!AN|N4NfUSA(Dj2q^ z_Ugc|rqSSRB}D*)*9~$cM9y@VdtwBD`#BZdO3lMPE7@ofH4NXYm!slYg!|Tj_jCpX zV2{_1#}D63WW5^(ri|!HSU@~tm<4!(u<|aTDs5R}d%EOmcItDy&Vea>&^C}kz4iMl zHc}FiE238gym+*7pK6+CIjOarf&rvT^-FqkF)%kFdUS(Y+N2rjF+Ry=sB@lz^=?}@ zVX)ZQ4Q(E6D==B&|ex%7U}$uwu8+-)f!&`Q3%L(g3y?x z_uw@t5s1$mNx+;+$egr=jFb*H*x!lO{XFxErK%HOaf(S?IUKK?3DeDLTuFcrlnkY3 z^+0XLAK@VJw-=i{q3fcnI1g`!?SaE8W~b2y)B}Hol-q8=6pTz%|1u0N`4*^g<@|uM zSk;cfLXrnNxROSoO`n2*3e?+)u!%>uekRg$(s!l72Ecwn5Cqc6n8Opp3mE9&Q(#qR zvfF&|#sTb3Rti6ul=4u%0NxfJFt+`$lXm2jv&O5H3&NaGk^%p#1Ys5ASsi zWtSIOryW~^gLO9P+=G9?eg69!_J3Zh_z8mH>>g^*oA2N|`Xx5zXx=Z;pA(<%ZvB0r z;X0mfF8^E8!9NO%0Y20iKfmjGyAecDhZbnS1fUN*0Ij8eEBF5WpSR8g&QTx}tOJ>V zMYtgAWBCrO+>=*s+!1`aor&He{N^8f3tqg=SIxivwNRqGqyPTtzx9~?=QoPe5_&t@ zoPwrdkYM;2By)}CKXz%BaL@n0`+g(P;N1iN?!5Nt{eJNE6#QkUFK99HmSbr` zvjs?~o5t&t;9=4ceVzgR+*TUfe^!W)z|Mn8Zu^LV6SSeHoq;Yb>%wgJS3Dp_2Tffs zQ0&t!3%RI#F74i}5d$S%s=;y?Fb534csr(WjFlJ?ExgGDb$1+snJpE1>v@8_-QAUO z_j8fv^Y3NpU-^FwvVxm{Sz($PHz-x9yUGS^j{$Pfr(L&D=>0Y5y|dpx1LEgwNK<$A zl3{r-!XMuJcqLuRcfS%8jZP8&UH}5<=em?*gRiA-5FYDxrvQRWW`&@-^5P!YVSI+n zB@QjUEf+g2H`lA6T4=yC*r5;X+wQS;kor~m7i6J1T2UzHjeb0|74dlISyGs4gyF%y zx58sF=%MU}bS%w5t+IAKgSk+|?~IEuF#;V^r9g8xgS;G|*Z;M?F=!hlJ_KDNru?6_ z>ppnsYhQmgZ~#`%8B{1sc~SHctVB{$AxO?DXyo7lpa+we8PiG5b{gWK@_G=Im>X6g z(8^!nF*#70Wu4FMd7Jl$)*Cu@-uB@vovtidX}ZkI_wwB?2zt z-AIA+Wkr1u7ubVLJUu_aH{Aqk#VO3-qTYO*RtY41;_GCfbvOy8Edw{7vEjp3XshE5Cd(P~GQb<*G3pGx{TAv_9X#Crf>%K| zCu0yNL&TNYrozkcjtN2WYQ~ewx#KsLu{CeZlS={5J&y$*Fo6t9-}8YM#^N_;F^kHF zU|W(7-Kvh7sJ#^PUA!2z2VNy$J<`^KVE;~ zgJPTc`V`C8GwOF+K(&7=$WNRmud}w>J!2Bk-vg^uhmtL9c^IO`w8OJQecnZEr!^4e z%i8|9I=`~5`&4v4a2i}gF8%Mc6grG5U^~`c;B+V2TepFh00m$PFyHQq z9Z~>p4{&>Oz?U)uUl82ShM*^YwY&odY&s5~EZU7?BTfK4*c|tQW`hu63w*u|b7l<6 zKpv?oKnjH^p_`O|F2eTsk+Hy2V^<*u*yh=Sn?Txp3I$`FoOY2az+-#0th_`X4CI zHmKqa1Br3vKDB$90ZTERZbJwxPKgTQv);^JVzK>Ru0fk3a}otG-oxDn9>9un(iMM{czxZy$TswS3+K{)C50t>JdVVQ3$V6(kHm17Ni(ww-Ke?jhK|za}psIh`!L zUw3u#BSVRQx^w=9I{#jsG4FSx?=P_tGCijQ@W`!3Z9x8C#48EhI&b=;*fm#X)j!s( zWQTL<%K*QU8=2zG@Xck6Q+no``i)ZTb&$4U{q|%VH##PHePS-T)`Sy)VxG%)1nK~Wa zBcaK5-(}h*5C`7{$cH~aPppn)S2EUG zmpAoWMt6}T7b%u@c60%YkN&)c>4Pl2kn!eE;FU3yH#_?SeD;`$oAVCoQrdhXNYrbR z{C*=1!1_Sa%dDgrd0|EHT6!{kkt`nZT;r%LeqO3o24!hb>iqmcbSc-6k`gtsaWil% zNe?@IR(^~}r?3h{X_MhoxArEy5MDSQe3k`T1@IKxaZf5?wW0kDCySyD0q9(t+*Y&srsic6JCb2*!^St@UluH4D2&I zKQ!! zE=a9`tL6j*FR;Sqy7fwi84bYstCy_F2t&-0e%p`SpnNe?-1_NI$z22O589((+HhQZ z@I0n&m9^;IsUh?OzgNbUibb*wdHUU6t~VAxeGek^FWbTNMSha==K?gvX$#v!Ua2N4 z>fuEa;PAM7$DwU1AgqQ|`sS_Pbr$qn)SlWnv~??(IqL+w@EQWsntmEz0vs3lUIxI> zD&iY*k(_b&nS<(7;?_8w^Iu>H%{wDfHRV$x0==k6X+@h?$)V|s)9!}mA)q)79cvNT zYxrJ{`hdC+F0^*x-xRS2j<5{K zaH1CUbb$?+y``Yx0k52*SOcjP2Vw4;m2_*mZ>i6tCZG;lXItaEbtR*_jXEsd0mL}s zmrtF?Fzs`nU=+~c%u6e~gSGVQ^e}i`9#|qOd~Sjgq-9$33xP*nKQTYKJ`uuKA9Pz| z=?!}$lUSnCGKMoFMd_@zBR2+KDT?{|KhO&F%Y`Vr)&#yh_nX`C9=SlpLBx|otB46i zTfe)e=y9Vc{Q6H$Vvj5(Lc}O9`0~6QgDc}YtD=BAI=9yGb`of>j@`L&$p8B0%2p<50#ullgKw?NBN{&=SP1z<+5Bv4tWz@{z- zM+eD-TBX$61}Y|eE9m+7L5tWx7|n-vzL%$ZWcP>RM-SLmSntTNXSvzrk6ur_c!;}f z5Y!ZnC5)68dwb6^f@;{F@QUaIg*dB6bQ7Y`+$nn6+D;a!?sz*E0F8lBLBE$k3Dn}q z=x89Z!LKiWqKcPOl`nW-Ort$>;W78vrKC&1 zMtwSY0jz3wWSHne$n8UwM*n~}y5>{D_725%v`%URK#|p&uy6w}XOgi}R^XjOvFR=I z+OgtCW>Wp}rf!8O1A`^zm)ygSU~C?Ml`g>E*hcemeRd65X101Eyx*QN_3ZweU*G_$ z*~0*1sgBV@4KRaDG&A}2*()Qg5QaTd;!DzHgnFqn>ejMj zIdAwK`Y3?O0ExKLD|{^Ay=Y`aBj)FYFQ5?t=^V^<=^{0AdI>Lo-(ZYT!msF&S1=V) z3kaj$)`B4{4G4r^I37M26{0TY)+b2_WI?q;E3h=~Z_04%x{vt@@*nALtv_qrg(l9! z9`WnZ!U;G&gK-nO-7>A#DezgUJa|415JO5LEupr8K%seACfR6{wiau>&%P(kC_p>s_5TAALN;Qj2D+G04TKS zbwF3%$&@D;B8bGcHPeBXjLx3^v|AS3_~w<_z$G?y3Aj(y%ouW`lHq3AO+WlfWTcl|LBH^iF+x3$Inu()=Dw$^&R`)W2AoiXZ`Qaf+ANQvTkmtFW z#$5MMqpr+;Dza1UjBOHQ%weRD=Js+8)Pn^~<&(CE4tuwfW1+{5LI9-<$&QcuK$!fp zMZA_YQa4b>I8paOq2*u@(!&Hx?!}d^&MN^r>uFW=&w&o$b0m(A+j{4w<>SId{=!?+RV~R7nz$ zZK%V!SeX2JSZ?*W^tPvCWxLB;!96XnT`cE$w&Osiu2#UDSJWZ8x%fm&BhULEFGoCV z`5$Y5MUjYESZQzV%I@Ey2&c8oUBx+%X#E#+HJM%k7wj$~yK$LXsXm!LLOuTI8!5#F zCTuhMuh~N!7-2-CsJ4&WXgHr1pU9V9lvwE})g_<4wkoX%{+iQ7<3lRKINHTqEiO>|_@l>N4+KU0B5qZyFSi0OGji^vj~GIPB1H-=){u@Q7vi5W zP}T?TCAmN0RQQo{?7~Eg3aUTX!oZ}B7DtIkD;!Lj$l@m3Ct8}&V$2yl*ltQ9W0`K7 zW*ZDSskL%PczmPfTP2whwETosUFm`p7XfZ?>)XWJPRM@CW=Er>a((@aQGDan;YofI z&y!2A5c(241;(bq=!RI86KI%QXKbdhM{uAHyc&(f2MCzRI117ya#+RkZJ}spmPpSC zX~FI`@3{^ma+zrNcj!jq^GXC^K)+;sRU+=F$7v0(TL5bt@7_3)Q6Jzlk*ce32ctXT zv@y~R@QRHcThXUh%|I#fIuLYsm98G{|U->{f^14<_dH zw+4?v|4GhNVD7!Uo@$#zZku<QPLqTR{m~B+`^V zjx&NE^L$NPPaKbnFy0VmL@4V$v}oxaPv%A9&=ZM`R6?KB!+N<8!AYKlr1 zg>aPz$LO!>!wN?3@E{YHO&CH6fOUG50C$fsw|pyn29wwUNfPlF79*H61Rd@ENLI3M zxL(hbO_o&VkB8*LVTrnuNRG?d&r5Y2s15ZL%@!G!99pNp)#J+hV{_n z3BLIRt(% zf|94WlpFk3{ZX8>*AXKU&4f(e5jFU%{y3X!nno|1MiNH(20f zllL`tk(w?biih8pA6@3c7O7O&xC8aQa(Z3;)h0_bHGM8pumw^xo@^*a+x=mZ9k6)h zOXVY@g>7MB$ehP{FOv6)CDA#JpAJ$r>dom$eUQ%}AyW(ioHiiRYB}SZU*dWSivIT1-K^{r)E~6zTK#`v*qZuM3@V2%`v!7D=8+tc?u=J|39OyOAJ?WfUqX}-X8|g#S%)Bd@!Zk!q z&&953tXV~^C&iHW8tpLFMo9sL_ESEE*mX6B_)*$37>9Ay0O<9}-1pGHu4xA5=D0Mk zz`eCuY288C1m#dbFSuQuj}81et_B5m<8HOPo>6vCf!)DH?JEq)A>`7%QlHX>%rzm} z@|%1c-_)-Q(|~w$aufS!&-~-+lO9j{F?v-xyoqPK6`4C}U*tc48n24v3t@!a=vj_G zW}H8_?~qdHQYlj>JV1!xp*Tf2k>CBTg`fZQ^1Ni%ifb)>fl@!Fe=d{9K3TAm=v04q zq;z_gUSP~~vA=O54z!9!GQZp*N` z-Kk@UTXz;K|LUXdD zh#F~U;X|qWA?4S(111z}(V^bR6!gaTle$>hUa6AUnL|i2F>){ z^Qm?32`}TCu3xmAC$U8h^~e;l9n@wJCw5IBv{hlCv&gob7s$gomq_^3D zrzl6YH2cSQN))7B+ALT(KMxv%fCyd;tFyLbjkPO>I&^` zp<#NiQc2e(Kxc&Y_9ZdnPL1{0a?SJYIy2sLrRyXPwnDuMX&ck)rOdhnwg;Fz2M=eaZF`lBT1>);HLTMy}yt&l6`73Ca4(P%?aM zSP(Ex8LWh?oGm=ZoENBl`k9MTf$k%LP6?T0pu~~X2_(Z4)eG9QOdW5pa6@g$VuDMh2 zS|@Sx0^I zq~xh9_QsFt6fN3Op<*gCB~^?LSV6ReVcm1VVdX? z!hRh+%Bw`vYKjpc5Km;pcLpHO=cj1WxN%V=R_1kC;^R?jqxZ>kG~ma!|d1{NrPGg)z}iF6HoK#mT@JeL-9yyOT3^m zO#Nhh;ct|U?EB3~cPHLe{~pG15f$Gr-U|LXtt5hnt4na107n!&qK;tj%m{ zBATY9tDq#xvKbJJw~Kt8mm}Vj45o~T((naG$c~!@}qEB`&Nir&n0aGqa?BGIhY zev6XHb~06I#}A_&xYIU`YRVvaL)Rw;{;r!-zkkfKArjGH_nOIRn+Q@JDg#r<)8sbB z=>>0$gzBnb50t0cLqYOE5A{xnb!`2Pe<~}ww5FlcCPsLUYJjn&T!BYek}0@ACQ&A| zgz1g+HI)#IJh4SEu$PH9I<#COx>9-TfA$4zN5WaU23BY+VBD%5-%H5o`t*r z2O&oQhL(xSYmSnaQu9GyisU);m;rrsr7TxVS{BfJRMF&UY_9pY%Vbtde2Th5m9%B_ zJ!yI3eoj#(NYY7undiLLdXWj8qo4?ONSJ&%n_zi+B_;qA!RFwBP3RZRkl5It>H#!4 z4gzbnvECg%;&IxVFA_%8A_h@k6taRWsP>Q+vKRWz>wcm4SSYVqw;(|Xu>gZyiB_`65VjP*}I+eIkz1qLPGKE)$*)$y$C$m&2@*u zW(`M<1IO0Pyk17~IL$S2eQO4NPPI3-$!%w>Un`=yXNzjBXk}=jpqN;|zuBGTI_`d*~!>Z5fs+j-miQYcwJlu__U816k_@2MC zVeVVi3yKnVWpJ5whD;_67mQ_2z}-vp?O-9v-&PV8Bl1E*Bxs!=sDGejyMCbb3Q0jxbFiRC_J0UrD_pbDI9rw^ri||!Eu~fTGo`+_ElSEjZ7Wf-OtOu|s& z6*{4hTfddhN4j%dOD$mNMkEtO&AXUfD3@cZ;6Vljo z6+27f9uHGR`w$hf(t#^Jo6^i7^u`m}DXC7~lw2b$@fTr}E8`xxvr6Q9Cw)$I>+TV; ztYuTfEl?w#=3%R+I{t&fLUN^(P+Nsw zOT-s?t~c%$4A1klJE2w}Lo#7(wxeS^rZc7Ct#dSbO>ZFa#`jliTKds_OC(G4ZQn-< z4+8NJrUfojru8ERdm6cc34iv54#pIqDyAN8ca*L)qINy(-+Qn`=D|rRp~nFjRbK4e zDwOESN5!Qt-!um2**SqOsj0s`_9zILl42X4X;zsCl@qLaefUbKPd$6JA&!(1*|>K- z94#Z(36@t;*AgOWEVZF!S<(^N0%~-UvdWa# zWTdr;nVG|2qw%_*Bf;Vll)k2y0ing=Ui~@XOf?I2Q%o5Wd)TmwOzOD7h4VaQDl79% zz7K09I0&hZ3t`eDQwX@Y=S?xv%eF`swm0ts!^zZ@5Z(6EK^iz`q0qw%E4%qCj7JZep^ z!Y5!4)&T9RdAaC>NxSTswuwxfL%6VHaK4~C##LDReS7raA`lK8xuzN9QKcAz%h$OB zTVPUH_XRU9%*u7}C&KS(^5@c&BUISanwzOWkg?tK8_(@7u!4;WM}#tTyY(q@X@87=y@ z&K-ijwt7Z7uqGBo^4u?2pDlx-0qyR2Yk*8}r``=WFtSQMkfSG#0sq{g%8@k@`n6|&v_=jWm45%Au^B4@L|E{v<8pIQ2h za6p-jtM0cq*Cd@wl}M$URzf%ug6h=Ur+AchDkeS~>irU#w4=v_u->0aLRa()dt>k7 zXQCZc^a@VFDE1}4znRG6(_(dRqEB40#IFhCspYEM{{OeR%2d9eX4~dDH zjlC5aG)>dBEnvVlmgmzNEw|fs{=joPe%-ff7DgmuULT>7XqMC*r`a}@j}$2{5kHyN zbg#TxxGR|X37DBR7NmsRg%OjbZOz%FQii7|WV($gjHCQ}*A(ZxkB{Zt;_BuE0pDKW z^+_5yQt~PT_y0aM*Dm#5{yrrNwIw{VN2S18b(a`&pEcOrnhXgL2DVyw5tE-y8LH5; zihOVf;jGF=!?9o-%QcNoJGC8`G&xf!2?#BZ^F#?77ro482E<>RJu>m`w>v;nv z{hr^?5IYOdP{XYwh9|zMP4N1Iwz(F)^RtwYR6qiR^)4=>Y0?BVut>SOvpo2Q^5@Pi*-ivIG;~Ll^>Oj_;k;_2WthRxgm!clWlZ5&O9A5$_4yHT) zYSda@3&9-P^8Ij6bH@kgtSgs1xbyGixoh=_71)~zBF;*K6Zrq&W-^iGN}bb#yu z6Bjql`2Q8M2TP`vi5pcXjT@;n74(IouBpN|7?352)?S37Npws*(;_Zw|$ z&hny1Bfgql3srPxIe+#(RF-vRTUGbGGr9mSX6%B8V{eG!z~Xz(jLcS5e~xE8#O`y4 z1oD+_@_1HG{|Mvu$m7|lX_o`X9;YLv*@Z0HMF5r2X7+OY*F&NYpc-~BI#tQ~!lkh- zyJZUd!Q7QqCRPV!9C!=9VWDe1)cMu$&-oJVyV4vWk}{qq6=?G5-R-0DV<7_o4`n9O zR7g`!vK9o%)`U)y-EiHlCJ@o|&c4J77SdGH7T@Ieoup;*gwBV1 zYV&!WC{KQD96h-t3v92%Nj5##Hw9HhsnxfN!^KO;l`IY`Z@g9n1$~{Q)ACyqfyJPq zAX;nKLmpjpWnZ@3^Fs z!R~g*tFCq1d@T2fOX7$|AEa$}=})i{w`KZ@oaFhTM_^fSfMohxZArZUNDZ>&&R^b- zD~vlO>n*j^bb@SS>BU2*dq!NnB%V@p6>*)pKS1~tcU+mE9EzwacC$ZdK1gd>meJOj zG5Qn31-yF0l|WY4R}RbT{P$F8IFf{zaw$vh90m!n*pguUFrn&Yg4;Je{h-A0oudron*Y z-47M@!;=ZBisEpJ8U+2f8Qg+N0O?b!@ek6c&utX+NXKE0>YFxE^)SGHe~aV3y6?eO zGzS%+JWSyLw!aC9ZkKp!d?M9usC!m8C-vMKbO}k*1sC*)4J?eK9q;C+uM=#3y8Yrp zB05c!U>ufKLsrMr(Y8Ah;Z7!yi)YlB#7Yd7$rKV<#v34HN+X#^b&zE~=N%9ofM&Xm zTvbrq9A?)_0x1j%*&jgnCXIEyQfvD(4O?E;({F#jv~zR@^cQ>+p2r|;??0l5PeE~Y z$HZ99CiayS{xZ(?=JDw&iHGs16NA=J48PL-rYSn33Hl+o?G&`Qo4z|g3*NM7&=|ZE z5-wKEJX2hA08u>?*63Q`3Pp3 zbGWu?+=GLp3u*0Mg~gO(g%(OeWp-2986Hp;{&;GUv%ifJmz#Yr*8;CVpSqJdeyxk} zRYVREhcv70FcyVyHAlz^)Z_4*sTU+DBeg*35jKi?FX|Ch3P#bB;f^wbmSy@KxIFJY zp<;rC(J+^4AhE4`sFugUBfaTf)8fOw-viV2op;$F!(B6cC*9NLc}HLif8sGy`1B-{ ze0r`7*V^KbdzIQFXOZO?hg1d6sEeJ?mE%{QehWB2KN_H~^a1_9I6%gf$V405S}psn zYd56gOfUC;MX-6xxi%uHeoKsdu+bYI7!3-`Z(rM&q4?5L{=Z4%|H6NUG@mE?u8`d+ zao;|dz5k9nlM|zOx6E|aRC^kTW$+UNO{sX4(^~=%2|SDNN<$oxNWpG`XyVB#F^V!) zob(sEbOSl+&Oy!&tU~L+S{2>f>iK_2nkz%EaVdwP=x#(760J@ zm1`(rAgYGcMD~sqkoM$Ohw=jU$w|$W1GW)@yAC-UHG0vzT~>dXDYc_Sw?E-x=C19x zmB<{1ju2ddOTU6H2SEe;8h}wCsvI&|=j~Te^-9?DO@C)R^mXz{O_ns^HOY=hrpp1tSBsdL{_>W_{x?jFfj;+)3H0!4%K-FFcJnnzN}{Hrld$; z@J=5zaSo{8vV8`yKmdC_@c8 zfi5%+VY+Y-KDss(k7y103j@-B)L8)hE}|~H%9{`msNi5RUSS5aefBeRDa%gYuz9wd z*&&F*O%t-lJ0d~B7q*^=Ag87*)zngeKZCjRX#qMSkuh!%%?(@nSan#% z20_V~+UMVTqSC5F)HL+);9y{85PX*A2CP<^d*AT@YLe-#H=GW3OwG(hD7WVK#def1 zaChk%Tttpw76U&8jXKe`5J(^ZP|v>u06J$Tt-OW)Jmky>H(4)wGN9lUJMkt*E{+d} zI;jqg2a23ZaNYN?{&U;~t_eFY#Fx-FOv2pp@y%0lKaz1x9)LWQI3oW16}zNj+CHZ0 z9H}35XE|fwuYv^SO~szE3Bo{SyU09B+R_OA^h-)|u~37)G`ulKrY@=H9X_PnLI&5{4`gkI6QA*lc4;viE<1R=~eG@*V?Mn!1HZze1Ab96>XDG2>YK= zKZnmKlG=J@`W;7e4zrztP5Vb}NQTp63r{DZS~E~L)MsydKwDw|#@y!jyH9a-e*wtP z|5bhb!d_XO#^6jky!0#zHY<~_D8ksy&z;h=2EOd$6J(JmvmHWIaqc)eM)=YhnrlYi zHXdvEr(P{Za1a%L4io!e?-M07SzA^0MKY6ZYbqA?z6Xj2GLDlQl6bG0U^*8=-Afo> zn0Z`1toQIp>AH^EF=yaH**nIr5LgU?XGlSEZQ6mLKq%#aL(zOV%N}%leV*2Wl@|}a zSaa-68+a%D#OPPf3rS`)fVV0=+eFipXY7aat-i2$qEW7YZmrxclBSnc2Hy`o=Nqm> zwA4@mC|15gLH!5o6{8irUUJvR@^nBLG{@XN0}a;*chN=!brwJm)++F74{Ztm#bYr= z0xv>P?kiIXSh@BzTNl|os3Zc)^!Cdz+!t{!RpR?bh=6&3onnMz0IXr9UN&lS9*>Ie zCZYjP+$ZdNFFXHm0_4fhj#GQVo^m;bP`IR~ZlVoI)Njs!(C7R{p*NJh6t2?-B<+Vn z90eY6{6Iz zwhy?AY#crR+>>uZ&z9a;!jI-m3G-i!;3@ov|6|CS|1bW}l*29mCluoUAiwxdsKI0@ zKkfny<1^RA50qhQ>gW_eBs>pvA`TET{FSgY*08?^Oq6HArJC76-o+WhaiUe{#0S)L zl5_)Gd>?VT#S}D$V1dTwLm^md%@rcj&XE8lz~6oQgydKxC#O4%yp`}`R+QXAS%6uw zm4QuSZzm~!C2cqVP%I6%>ckY>h{6iV*aQ?m^Ycllkq9LE`Gx}~Ne!58PDts-01P|9 z6LZZy)P*TW3gTipWu4@(NVXbbNr@>ph_mLl!WzGzY}Ojq55gveUAJ=h_FI@>$}pCeA0#0VBM-Y&infm{Fpof zli`9Y_Lju z;gh|p^6LHI_xU@GLD%in?QCoeg82f#u9SSGFE_BB|Ch6=2?Yx=`*y#92ie6o=0pSZ zBs@xc+-k4KKJ+MzCO?cYuo{h)vD+)qb}H(ROZrna%2O?HHR+#aCglj%6U-)MzAi;sskc3p&(P9JbO*idw{53KQyq)Zp zLS)+n+O|CYlR^ZDW`IJ}Xc{n`L*@Nv@tap?%-FBJ0+>xO9_bfQ8Osl`hXP<}J@IKK zQ{pt&aFEHWpy5g9NJKLIYE;(oK1!8c{v;Ya;V#e6=j7HSz#4hbpCcn4mo zA6HD#HF-(=X`{)J;7DF1@X0t>pnV$2R@lsGR}>r87m_+grF7o8z2=H!s!fGf$-RIl zeyZ8_Jc9G_7wP)vBClgs$w~yTONMSh$MVf$)2kw1C+V*t*)H}~Fr=0u-Wf<)54q4Z zz3GI`aotr^?N&6}QXI^)9SBTn{qCa990wn2s|h%~{z=|7FJ+795y7!DuWzSm_c=JW z?+l0A;6La?D@{g%XBMMkr!zP4!?jM$0dxa6E!;y-Zj#1FPS zB%+Wun6-|VsWk40)yrq{%WznZHtNE)R;WkQ)W=l3aV7aBmdS=Je#iW;l+W}T{D*MD zPRtF&CLz-G`%*=aX}~T#4xuD+{#Ona+7Uf)iGRoXS&p`yN5L|j9yjVwUUG99)ROs1{nd;ikSAiRKslTCmMdu8BdnTa#xzFpXHAP=?n`L%#JpGzbj<^dKxB3LQu&Kz(fyK8AvAL zEk9kMEb9c8Cal`_sKz+N2=!|R_(i+K(F9gVs*|GfpObN;Xl=zWky+T{C$yRLCo(7h zk}hD6w(k}nwkAS|;6H=emvRX9FeqnQ&<42)$Wl%yM5ac~sDAFyqGHOZnKFu)uEDLG z`Ln;w=3KfV_&V+J&j>#f^f)t4a--hP)b7TRC&wTUrA^ED?xh_@)%Bxu`K?Kik{jdf z##1vRh>}?t!NE$M9mwqYos;4#V}?9IP3{@{o^#5`z*ZIwjVdZL(>qx-vavL$I;VzU z@#Ud({aG|=gf^U*k>qMBnCeeG`O&aj_7Ytaw9*BAWDG9SasK5 zBGH3s(j)3lhEvU6g+bJb4XChZsq1*#g+#TDnAv!pgWJWGO7{5)EYK2>Lc=FH{zKGFedV{GdKR6JK@q-y2mjocnw$tIf<9)TAT-T8XmE9`sp=Y5 z6M2a6-+@G+(P!Nw^MSHHJ)CNcHu(8DDM;jRTY0{;_+-ZsC^zv7RMGsnzuo5Vl=1{| zJ@?Jk-K~23atktJDnxWd(s(qZ|0EIxm;)kF*S@}qUdX3o3WULDj{k*7bU%qOifhd> z=jks=eFj=KcQ!5ZUiFCir$oXh%%M^8eQ<+Ofzp9e@oiY9(`Bf2b`J?%ar&Owj#*>? z=JGuwB4gJmzKQa4ry0)`p`Cy6i1u|Bxa5Q+PEgKK7hB{-6JGE4ke{=~O>Kvu3HLxd z#*(x3$C*iOR1!YRmr>rkCv-qNRkpM;tdXS+J*ZM zK9YCz>7+Q-Dxcea2Oj9mXU|U$7;z5$uacUQY6vrs(@5sDU|FIj`UbiI>MPwe?xMns zhZyFJ(oEMwb-p&Mm+>`UI(rdcu4X=SVlyAMbH3AmQchg48i38u$KCRF98Pl}@%^eU z`qTlXdpAWuj`Iu~V7Jd2Z(m(shc&TBsYz{PzxxcyV)ey2P^DH9<7Y|+d#&DIrff6o z6t$+CVjvA!w^cqsGVLlCs9-36Q){4Mt+B3*q*Y$_3?6rftvPLLsv|+|`R!Zm2VsEk zb6Fe7$1>)ISKTJ}4P;4bfKs!KcsFzp}NDu?7z}r9q8Cq!-GMCmKHsIy#=)O2oA4bx~PM zU*7m*vRioJWm07oBng7yhy8tkOD<0gsF|NpFK2$XIx@|AKTfp-T%R*l({ph}E_Kax zkBBG2n^hhNS>1f!0}1?2s3^)+^YgMis5ZWP9J;q%h^5)gosFy-I+qjTyHZrPN&#ME z`__3d!On{ihnoi5WP(K;F6y%C0N*Y{PMcqRAsD?3QJqOcOX;#O{9RJ-2a}D0abi@< zy6KO?7t41tbx90Ke6-pTLOLF&+p2V@Wk+WByT8%DdYFdJj2WULKdgyV%DToA>_~or z=Oh{Ln0hh!^Jkku@2T2(Wg3Je+89U+dE;5M7%qizAZxvN#~bunoZ^+n5BCTSrTbT4 z2RzcQ{;=nHl+y-~M0Lagw&}(INrWB}AVw$1%XMySFaYXtgc8~5cYNeH6AJ)4;$gR5 zW(GT%_5o?GwSnc;GTGLpRd2lX8M?kvoOLKZ!#V3W?{1+^WAaTo7IaOLyf7W7(cJ4V zA>2~?HnB)#=q5Ov$`OK*d^Wc16=LNa@6a7k0(80W5>4_fP+u)+;-DV}VMz*}O5$5t z*P8dx8Qj}>G2;u1<>RC?aWK^N{f3fzXIWDXOdrp|TM6C#j&Q+1Y%)Lpy8grum1OvY z7@B-+c|76=Ox-TSq#D$2l0DNN6fapKsopP^l7&(e*|G(R#nCqpNd83oR)(w80Tz|1Q)dvOD@6q;jpkil7JFNezZeykmnWn{2)uUM9|hW%bw9a50I4wyXUYOT_yizY&5dJY+u7YoUl;r9PlP?G@fGi!HVlyYSPM z$C@S{1z4hxe#$O;?ny(6PYGf=PR-rIYwF*dF88I+-d7)^n=>EM(U~Y3#5kuJCrp+z z+MWbHN@MtH%bg;$rmi(Wfxu!F6ND9REcW!R!bH{PB?u~o&M_A(tXTRaiOGw#^qMV=O7YYrTW@?3p+t4aE5Fg-A?>XnRsBI5GrRD@e5|HOPcqc)|vbre^% zDz3m(?PKw?o*A;M&plxF8_huTr=}(`(p5tnfybubc@k*Av#s3RnOe5ailhJ|PbKW- zM{4CdL2s9%g$giF=Zg>dK$(hnPi8kmf0}RA%lIRbWvtoAri%5M-Y-nTw_>`q0dXXYEV=F>Sm+o}Y zP^={0^=3*?&Zn8iMq2$^psRl`mJfwvqAUA`sYpT;Gu%cvc8%$#xj_<5A|1(`;4sse>Bmz`7&E-X8X3l z&7+nwU#Jr`vxCIN^(hbF6kT%K*aA+G;L+j3$miUYu@s?4qbA+2l7A1i1)%=GGLpu| zuLx@+Z)cw7wY?TurjO>R%%G#FB99GIGa8ckWBAFQ$_nN1yUa3we`MRKp=*~=yB~#p z7szHATsUk`Rq)I3liGk3k1K=hYq*&k1L|u=AS8b>p7W*dYW58nZ)rh8z)sp&aydb?LDOZGnj-cMsF zo|$*-YiuLZKN5Leqqtl_`=bvSarX+TXjp$!ki>H7E!NVGWi-8m{R>h=BOJRX!D{wN zs@i0}Kt2m>{OaUd>TT#eaJTNpbqsP$EN~fjPqB&%vS|{GjU63El32MtM@+sTnm|W0 z7R(_jV$Z)9%`_oF?qHe5<%$9@MWwY%;U^6wj|I7=Q(XB?N#leG%E^hg8Ija{ksSgb z-d{r_DK9in(k$8hQ&#B=Y&U|FLZ~Atc!|9aQUz$=Bnj>LprW{)XA1@F-VIB_Qa1^w zUdEpahPxhu4=tu6vn7F)L7F{4RH0BcR1!~Bt0fG_TqnQiEua)la8>=K6zyAA@~8+W zJD?sez_!5uSDSNf(xL}kmex1I4|8D%5f`;M_GljXYZR+w=9))*m2vSOA}e5Uq~_o{SWruGOWw3YxkB=K#)|BkWLBd?hXYJk&=*<5|9!JDJcPIq$O2AI;0!v zlvY7WNu`@TF4n!C=YIBkJbSNwykGW*{cWvdx!~{hpVypYp5q+n54)XvPH+1fX4Ps< z46`irjedh4^f}R094q!Wwtr}^*oQi*YJTfZJ6nC1Z<0)>lXl}nF7lIg{IC+GsOD>1 zMQ0zjBz}ILa1DKcjma^=Q8l)l;_JYp!5^Kc%f6Qf%sRFGRVizNrAtkfl^6)ADL zXvgQ84!$2^Qu4@6Htg=>bJFTy!kiP?&dO-68FUy|(0Mh1HxNjpUrc2mAQvc0(#`61 z*WAFuoy|SknogJq-FP8%7;oUu0i~i$=cZq$9c!M(=da}YNwD*EE#FB_DaQ6=ImGoD zGM)9i-KwjIk4e}if5W=oI8)j}$}m%G9A!zS&pLUrIPH;ZR~M>wh2hB`b(i|hPzbV| z+Iy%Y*UnZE6d|rNkMk7>XB%XZwd;uHxd`CNnwm660v(G%f&q6ylDCH5BraAR*5iU? z6R2NHbGKRhXX?hy1{o}|>j`Wu#uJL{EH0)4`%zOYQ;^MgrKJFe<>)es*Zt=IGK{Hr z#s(7KYd6RZ(72TUzR~Gd%cNA}@;&Aqoxd`5@JUg)i62obP*)pq#$fsg)6Cpk5~!&) zO{v$h{ZFb3_#@v7prYTvzaEqfhC%)dnYXZYk}==-1O;i-X!>yJypf4<(1|pTIqi9# z=4D5Pihfnv-(q!e1D`GVaeYOhq3~L7#8JoNPC;YQs;HTi-5XYR*HO5~rK0@kS8dXp zm5~%6d?IiG7-vizT0jix^PbFlb@crA_M@kdXpKhdUwx58M109KId2n39ZjP+FF8+|dv@w{!lT8Fa{ripUPV9Mb%^OJpp}c2~{cci_5$ zrZ(C0ItByb8C!2vmA$%cYsyTUS()WdAb7ZxY3t%%^5P!%C`s?w`r4kk#{?LCdm4Sv zdST4cLOz^gB2;TB!B(=-%*sEx3S!hJR%8DfO0hwPQojv`bk{e!JUR04 zRKuW_tXeE9+wc-XrC`*V7ZRRv{GZ51xC-9XD63vEZqFfa#pXk9Jsa!CvZ!8W-@D?s zpf`}p>+$Zm37)k^w39e0M~(2&7Z`^fI-trz(%;_3fheZg{iO37GX##xX!c{vHRf70 zwA#eN#e48e>0jT%TQ=YyA+VG?g(naRoS4fl^V?^qC+tEi5i+<0RoQGE z)rEwprWJ{tk9(Dv8pBu7EcroZzY8`!rc@h?vWqG zsb|VthCSx~{=61{sT&z3pQyWq`oLn3>ceY^jo)f_|1&Mi2Un6h41YCIb=fw<2g$y` z-6!KKCMWm=I=5}s)5M4!D-hk{{vD_E_e##9kz~N&raV~u2E>8yqMIFbs2^JhyuJA# zuINi4waOqeRi}cl{P&-S*J%J3R-zTg@}KX}4HadZ+N6h&ZPXfroBxW+dfQJ^1lcEv zK;s?AFKWJA@nz;;sHKj9^I%%9I+&jI#3k{x_rxDJ^1IT5bnxSJ%t=cJq_HQM7mz^D z+o_@xq2vO6p}?&2fG=#vvPkzl7X{YG-|1|U>;y3P17@T~^Jn!i7hzjLue3*@0!fldR($g?fhw;+cM4vW1sZX@Ss zXCDs!7wJxg>q2vh%oD#t<{_0)o=r>FpNQuXR={Aq!KcCH!6e38^v24Lh1x`WFd-Y7; zF$9OU0Jg4`Cylz>&OE)m(Fu9;MACT#Cm?>Mzf1D9@zUccdYQ zgsASWSf3ojMl`Ytp+FU3uuWQioXTzgXTiMWNGMIIJCcL3-Y{v=C=5KO9tfL?!Jem) z3Albb7YVGH@2ikeHLQOK@di@}WJv6c9~#IAO96vw4+#P20m49qZP{Qv_yC6~fZ*$v z_^1#|tmRv6BP#YABsM!A(j?81rpOt3ug7n8wYbJdSq&NQC203>*W zXt)$0+%G_^0LxDDbpcTNo(6dOh^vKQYPUn{#U$nz=|6hanP0=JJzt#H0?oaVbdsB8 z>FcCLlS+-x!K&5+0a07j)gP&iB3~{B(S>uu-&UdMipD!tJ|qnS1}`736M(V($$O_q zQs_wHcRA%{w*4aG!)2Pu%%PYlf(yZkw} zd^bE6MHV0;v|?-x(jmato#Hg4WFD*efD3W`R>7XzgFqZ0tcho;0zg*N=L~}B;a(Eh z;Ck!w{#yjwzi(v1C{Qd3r^gRXLF$&po}rdmqb@}3TzQeq2BG9)q{Wn8`;T~@eEpO< z{T;Hb3=+ztNQ*u_1CJv&60}@s&<8UktjZ5A6|!jLylDW^&~RO*VT0EK#9r_L!KCKk zc&on`@+i$2Z@)33ex479@GjmaG-ThT9nUc>K;DpDK_vWcjyF!~Sm+3qNQC&s;c!|a zSR-;;i9)7*FnH6K|WgvV3y1X5JPdVpjMX6;|bTQBS>Zr zF*?~O#6FL%UZ$xIP%Pe2C^=xiijsG5edWqOdMh9MBL}XSIJj?CPZ5K!M4C4r>_d90 zSA0JM1%qGzK>CR#BXqGTc)Q-peW={<+;HE;#ueMXyY>3TF`XkXMBQLTa&-7yFxh~p z0$%)UEQ`Ub@Or`CQo#kGyH;um4G5F~lA47pViq91Fm|@HjRP>+kf!Km7WeRJr@^gh ztGtgkEX^7B7|@6l;?DD109@0{R{OiTV(#0Q4;r=)xVSgPAY?}_Df;O7;WF@ncw?-- z!dQ@PgKf=PMFk#=H%V=QUo!y-+=@F+7{NU>2eeX!?1Q}<5XGN!5)M(6Nf5foKh6=a z#BP^q2(-^6H};Bs(yLpdNkeg=C%ifk=+%P++aOj;U@XC2VdHjANi!cl1U8LtrPnVN z!;)+^f-cH?r=0XXw>oMd_fbJ@LBUnO$4ei=6t8%K0h=`eP;1@D1;(Y`5NvGxtg{Gt zz_12R%mtr2W9O+n|5g$HH-(X`ES!ZwMioEQ;VeYiepC3@S$I%;y?^t@v}Vb#`z%s| z5Zmn6f|$80{ZYDd4~A}|j=~pXa%6zc-Rh4;b^MH z=|#byFoLAxQR@4qRcJ@%u?>#0Hw@|_7AEODN4$RjXWb;K+Y&rGRfb2!eaX*$2FKxF zjY4Rpk{sC{R`;sIyxaBzd!~XS&I+v65gd15+=C5DXt;dC z)Qrx07+%@5JX!N_Ej3pqXdC+z261ERc({CbvpCv&VBY9^?9@u2Fz!+dR|x*$!7Qa{ zwoY3lv`iHjYgPQR# zkb=-Rr~j<-|C=RxzLGPLp))5%y+cWmG%mXy#|L}!T^XiF!5->3594lIL;}|vPIn63 zIi4`0VAEdn$3`EzsJa%hZ+cS^CxWyD=r(LXw;@2MHo1Ef@7|T{k>m)1S3+n~nF)li zyyq(;39S%c#mPIcckG8l0N`Z4F(fsH3PE|s_NbFY(GKBj93V{1U>#G<5O#4C?4M&a zffUA5v*;OQMXslYkL;70?9|Z}i-F*R3?9yBBBu*@=%{kzFMo!uC)*D@8 zQmVf1V;NI!H)cqj2Xl6_m1;}hn&^#swgz=u#T@-ph=zyZ|MuG$ayH;0^UAKJJ?T4v zg!H!zp$9+XTj!_c8bicHc0_6ZSC8)Rb#00~LVkJYdSEOG@2Q4YAdfH$A7usdPz#*- z8{oS&he-6|J`4I=D6Dzd%wq7Zy5Dh~Kmz4Te>Y=Ky_kaV*n6E=h=x!FMbVnGX$wdd zCMD;Y*Om0V8E z9I(vFCQ9}%)w9SJ7_)x^Nnp(rVZyPSBp}bz*I%|%d=AiOoKW+nxqB`^Y5Pb?7fHdQ zF-dM2)xVzPt(jxUBGQ!{U@ru*y(+g=FYEL&O9&6&=0T#{yTsO<(*NW3`M-L&83^Wq zmw9TF8o6M**T%zC%9U=IUe4#izib~BjWP!qv|<4epq?9f)9n1F-PqrSWHb)J<&P$3%O#b9%C)6v{mj0izIB;h&f1;>t%lGBSEsha_vLS~m{OH! zRYoJJ9N(gLT~!tY+;D3@0jYbZj~4{kn_S@_{Y7*5)B%=Rg4fPxxy%wkE+GZG9h~%C zx4+c=qm!OF5UIcI^Sbq+{?2Anu7H6e%SMo>k1t1}(|!T<;z_vRPfT|i1JqGy{`VsH zl}V9}hO>Hvd%*o|qsv?KDd$Q>9D-b8voUQDLc};mKrY1~$R(CK`T6-={&6OwJD@!D zb<3mrY$8AN*&PvXBYi;bR2&--_QQz;u-dJJH*YHRIv4E@k1&k5DUaW?a)6gu zb_l*|>#MSa%2w*SthZ2Bka!uNhw8EjK&2GvujwJ=$v2>+P(Q0l>s>~Yl1&*q3E|!$ zt=K>!)kwg>ET9<7?ayt77_Sj{={*K_dGcE&qBpwq*npAmH>uMdg?F(-6x0QJZ0;h5Wy-NP>|2+aE65 zd7@Wtp?VYCb*vLHG0WOG0eNkLUPL zg2NSnOK_9!1mM!YYFak}Z9u@;VpYF5o~7a+zGjAz5<#$n1XQN`Gm$!e2dHxGYj!7n z0l;wpd=$nY0qk6nI^^-vJIJXRAue&04M>}VlXDkUnKPV}hmmLprj*cd1sg>{GZpJ6 zMqwo~*Z*H_5`XW&@C1IJonPDoeb4K6d3Zl=j0bt|)NOe7n=`rrNvM~jX4SY<7b3uI znpW9CtIR=m*j2x7(+>xKUca#62acxunYzLavu+?RK>#@y1W7lX1V^@m2UV zwE7W5K1fa;=L6(k%VX9RW8f+^FbRKEc7j*;l6oVaP#gJlBWm`395OA6fKGe8Z;tUm z7qTmcx)$P&djK+&I$5vU=RMLz=pW&?_{IcRk1%Q|qW=Dxmezw9i(K?a1s}3r{oCK| zzkdV+#E2Y;{Wo%HY72JDoFCtVyf02H!(Psd+&Oy>5gZ#|7=m0PBly%2gW7Zvq50V| zX0X9@5;o1rcO^_-2t)nmGL-&VFPAzuy?1L7Qzi4%1!vtxT;(!)%p z_F$s5WIgP_T{ELE;}wS$0vDRff^h7n2$Y-jh9}Ef?%baGK%GJ$ILarXus@za^c4?8 zp4O*(u+!(9Z;~l7Mu^1I3urgv?mmc4ekV3oycgj>aDc>+7eEbe(EkR$rRU1u_~Ekw zLR*iUQ#wFi`Fp_m0fcr5r%2)h`lFtN4;KGO*`cO_B|qQtp+GCxTXQV6bAkgN70O7E zcbg`xjx^_+YHv83wl}65Ad(0{CQB;6f%{z#R6e(kzGwA_ZuKB?6i>`^cTi}0ARO(@ zt1ktv*AWu2PfQep_%CZ%;DuCIi^3e9fLlPrt4R|D`qu)e{lA=h!6jwa*&K8(U zz>*^4Mwm;BWXe{wa2+v;Sx)%}`-Y_9x!;Zw<^0zF0UgrybkOq=l4vsgWHEo#!NJu&P%$T86ajO_INfsSF?j_$i2BWDCoPLXLlr`+69_8sli@QXxx~JN9uILRsJN+N=36k)6A(uZc>$ z@g3~XHpEPGFiF4Tg7g(w;`b0S1y=G$8n>$@d8{8?|5fVUKWH7=i=#1; zYW8Cmfr9W2lwiFP<-Z|HF{R*&SEr7B71Rmt<&lJ8tOcJkdf#6B5O&*A^*Yat^e$Hx zDR>>-p+rhV?pfxG85A3EDaf&A(xDNUe4Ls30_4r@yTf7s;GufsGb1;h?DV|0FgVOJ z$h!nGlDLheIDWn+qB!B`?t+V$70|oKw#Zd~Bg`J*8N@*10bM9EOfppn57LEV?xRLZ zKC@{=6(CxB5GQ!)E6E;TW*8gQ)I!e;8FLz!9umNfb1jbiL%IJBM3jxg6Fm91Qg=p?X zBx(4EtH%#)!y=t>>JL()8Tm8`86C%gcMJYNMG+J(x9MYssV$0@!A37S2T}^Zse(J` zqrFhn+Xg$C?n^VOrP=^$=>Skmh_VU2B5?$@6iMR%x6m9=+0Io9BlJ$}he>jc#>Y~Z za>^J@qQsH<*7C>>cuIBufP@=5 z#y%X;BHyyzz$cIhdgEE@5qvj4FCsJ`A;<}IrPKJ=5>lpwEnu?4jlP0{U|F3K5)XrC&B+JJqrs{b;VD1H(~1VkRIN zsM^xblhI5g#NsAvYHjuA0j9HRZ1}XEj)2^ne3}4gMVnzjMBz1Gr{_}CRzjdqY=cig z$*z=uhVd%Fhehmv!hU%x0K2R6?)!5yjT$luwh0Lb@)4e`1oVkYjTx566z2peMQo(j z@U2!(7<70`?{X-+SFv%r1p-&oEpo^?#aprzQ`x)1BKR^$*9VXg7k8I6dp!e6{tVl-S@diNncxkERO?0)ooRfwuX$JAM;^M^Tic&GX%9nT#6KLap$O| zj&syf7lK;4M*6M#!9OU|@KGI*K~LQ9wdbJFuSts!x!1rEN3U3Y$OTW=`M*Ui`H1^n zFrVl@>KR*>`K$f?UluntImp^2T)A5S!WyY^eOh)0J)eTwd5{5qsJg|n#y=`G{<8=< zegQ?t@@hI<&_E+!Q^7y{eJ|%1SRt3}TlJC&-RYT^f`JYL89qXLR{|A?~t z?@D|IqQ~AB)H~$_SpwJXE6J!BTHIMVSjkr0!87tBr{@3gLpxnY7O1k?%PDBw!pCOk zF>)5nva0__m(l<7yL3Zf|7L$Fa@Y;sEL=-#D(%lW+8^a4|51m*-+OE(XZvq2z`y@; zNee_qfFA7mP6I}?A1Ch?{?WVlU%qR&0`*a%!Cw^tp8da{A^m^h^B9Tp9%*>-!f{l` zVn=%SZ^bf@?)%{a=%>5pKzpq-fIci!(x2JSmH&SLOq+qQ2A+1z*4qa&#O;f&6Xi+3 ztG|5xPz|;jj@0Lg$N~h|4bomkx^13cp;c&k#v4Uy{-y~TN;d~*0v8eEZBB$8^eg9g z=xd47PhU<>>o)<;^i}jvD^Ygp@D+i!)#xXUnX1#jV+%dnaDdK>Lm@bT(4NhqKUvmW zvzY4M1LEjpN!0_U+smVIFq_|kZ0|^3GQuL%?oO;6)wNDQ&UH?Cpg60xh{_{mokZwl zWt*)Hyy~K}hqUq}xLJ+WLVaNlH%ZpBw;XlRe0Csc@gk?Lj*-vB9w?7(8n)qX&JD5S z8Vg!@|LQX@V;nOnoEU$u$bMEO6*pq&eHKUKttfxNURbuSy z+aZDXy$V#GSI?T*Ju;k@iG9DN7v?_o`nbgeR@*+m*G`3^%y(*XG!DzhwRU>*fcq$s z2tC=4^A@8|WZfa)zRcoDAF=ytabSY5vz36Cxx$NKq|!x1>!U0AM+jAw%&Q;aH+%hg zWjOA50D6`sQU|+i@8$iG2LIA|BO3U4|Ev-1F1*-}*r}kPz2T9pQEy3ZyKM$IdS1wI zzMX15ZY|w!FJQunbZheec>I4l&(?EZ|LQzD@TM=(e(dso+4Lg8ERKsczsT3Q))iX-}I2>r4P?hVMlFP(b*rJqQx3=WXQITdOT3FfER9 zt*Hr2S>ebK+d6dX)7Gkz9WA!-Bi29`0&MW$G zzZRX1Ti_V3|E2UL5nn-1=0BX->bH)cDbN{+^D00tLc?JM$k*I_;f|2O9MVDo0)=Aw z1Gc}#p;W}h#EW8$NazWC5lEwoO!zSO{#tZ>h+b(!(g{TifqWID?sW9U!&r4sJ@F70 zy}x{hm#qul$@G@qn!U7LHRJ%>jOKx0IrtD7`iLXq*I@j0lF-*rVqhygNbwNa&oblA zCF1bx1k8{t<`8~1K{9!Ss>JbcnWM9OKk$t=@K9m-#LiqZg*ZcA@X07Gh%NEff5J)Y zf=-jZ-mS+w!W4(&4^~=iFN$t<7gH70H$eaB(n)Q!T(y?PHl>TQ?@$E7Mic$rh<3;J z*w&k!v>_ET|pX+7-Sr0d@y#M1(jbk zOi5s_&g4f4Xbiz5sYS4zDUCJ#xH1i&W<1)Vt$8K=$@I`vLQCgWgjS9 zc9sH5KEjvI_LQ%xFbPu|ad-ZBO?3Sa2i+*lO4^)XJ*N<{mbLT&OjM9$^44w-snk6O z?G)S3^}(fEK@y!#so*Xv4Z#leQshOr6YK&n9ikK|PN}a?BEa;y2f9;IjlRrfaP64d z1=w=ZDAr{kOv`I1-Ew&Y8~7K2i%Z%vO(WYhfMMtV0<9mY6?H5;F+F;MNBBc)##uB+ zvE7X^f!=b}20=u!i5lh?K3|RuG`*I|_J%G|AF^K-fF0|pQJC(-kH%(7jc%O_UlEueKhKzP!LwkE8}0WTXLZ?-{Gs_y!YWNN&O;9%)f zfDM1w2#LH`8UOI9QncRvwLjEGjO6+YASWKrhPu`)1$Fvi z7IizuW#@Jv^bx&Z{-uF=hlKCiJhxcjo=xox7rn`lTl5zNVM{nb5{oH`rJqF zu0D>!)V|o5JDdGYwo&=#R0CXYuTUu@)759~_^CDe7T-ZPNJOK(h4RWN7vD7GazbG} z5VIzxq;-@5z$}0O7>|ySlRA2keno7J+KAx8g}4ZR#Vaf1+InCeKm@){#q$ml!A1K4 zX+p`KT?i8;V|Gw8p#alQo7!f^YNQqGL6DumhC08&VNMJJFQf@;vb5Ozei2A zxeD#lL>SkrdCYV4WhWe_6}@dMCUVp~Ys4!~Fk>79H7%V}u8eEetL$Ayp+ZqaGyNmg zCvoN>)0&%=idi=KV{YXz#_FcB@kgeR1KoL|BI#^mEMuuc(=^OqZw|f>Rp%Xs5EbEM zL@Z)*Ad<$F@J$!+SFK6ckGt#D;RfoC!LEN@dZ)g63f?Mty^oHh9FnLtL_Qh4al&ba zAI6Igm-D7B^uc*t$29ds{q}MZ?xLlm;b7gNZo|SacYQkaTw2KsOe0G89tKcWJu6Tk zyscn_iL!P7LxQN=)50Ta3owdV@pqi6y*Sh;SX|C*$S|b}dpP;}BJFO8P_5`t*7AWA7N2;Vlk7b_H+_?GSYqS{&T*PThJCG7@;ska;-4X55lXm1r)uVxjqSz>^@C&vZ9sDpTfS*AO_ew$$>|DsmRb8e+_Wtb1? zc}-S3(6Khy?tbvl|U(E3k!Fl9k2@2fTzB;icwcngFhg+k$h@X-qOiL zgSfUlZ}NG;7^}KWoTlO{bk+Nvsb4|}#8NpB4#7Y&Av`IGGzE3SX z3x27F4YdtFcW(r)t~D>JKRQ3zX#1dCWXM`VJ*HWRG&b22E=*CN``nyQfmSTp%T?1a7ll=S2y{)YahRJ1>A*KcO|tH2XU105gWc=!ahB>wy)( zdKe}l3iUzQ2svE$IuQHD?I0^p$RRIZPhD+Cdb)IJ-g1YJl?Nl$gYGeS9Z0V~26K&T z1ej}fhSN^JAUwxXDtqu!PvU6k3~6C$>wNkx;@lh$r@#9zcr`4*|6C_psac4jPt z*TdQ2iMZS2*ttV~8RzO6$9SII6X{CxYd`@R~{SRwvXCAS-d7XEVy z*VAP-U*7U)g2YE+Vr=evM(+`QA8OHuCZ#_Hap`;C&g^|W^C(%m0Sw10G!Mag?$!PW>B$s(uXcGn3gs$jBI9Oj{V6XU*KosSyeYqW zIroxBj%te4hMC8#lQ=ZyR@Wqsf8g~ZPNMvrYo~R}Y4nB40!IJI9vQmG~&Leh4Q znjqj3D*7yw7 zQG}(2EWOR*GhNq^Ecyj7dX*hD0$s)OoK0TNT=nEG@c~FrWp}_*d%}jr$RcQu}u-S^d6JVcQ9XEYV=g4ltWBRuLDQXnf zYaWVzrndoZ*Amsrf~}E{!gt4b`OezIz;Aoy8dSSn z;e3Wdi^VSL%_ARuk`E}KFVWOIDOxvGBK_8FX5RU{;z*3O#&x9pD?#H|w_vXYwj($% z#!?#ukDeAZa`>dCe)(gvY@m7MU!LXy%60XwjoO*LLH5Z~@v0q!8{aCYTv#g3H_u%*O)Y1{cNfj}`oXL_# zsR)-RG`RtRUiwFZ?~rM?fP3z%n&YY+KVN?LO9>FWNzdh62;+&Px~a!~4|c6_l47l2 zfN4yTcxeNfi4mIdMq3pk5PNxuCk`)~_-Apj{V4et^xCHCasgNKca_X?OGHV zk7cI~OgEB0`etF*!3s^f60xyNf#Mt_kM6MqNNME_c)4Y;N8Vf-nE`fcjXdPysf8zW95rf@bSz!t8H5FMT$)XhdiAuPC z^wj;m=cCsjE?mN7ylyNsaQc&^q3Csv4MPBHs3c+oEeViII~4=_Q51^2XcyU|+e#tR z3N!-_Q6?RB^p^AYlcXA(m!x;maqkKeNBIs$RYhG59f9k6nX_URRv=e$ZLhMDDEMSr z(&U?usd;1*n`kbftN>{-gZ->!GU+M>VFVLr5Vhw^Z@Dge%zLY)*XN^r2`;xV$yY>3 z=8FJg?_;z$OT@#*$dVGpZ$ST9@aTC-{&XI3DJd;l4h8-Gye|%F2zw+4{c7IzP8y8B z*52|G>&M?PwP8w+25SvXaGm<%(>suYuoTt9=cI$vprq9OUdNez@hG92+_p@;Xqu~@ z+XYEZ2phP5YN7(Zv}tK0`Ajh~6JhN@%>4D51?o{=WW-I`R}4pQIB8O(THbrG7oyY{QXD6u@DnWCmi;b*%ENu$4@De)w*I0HmTC+cWLj!m zD#2eQ$J&=ES$S0gmosf{6ckeY@Dfz>u7deuEbS#!bR3}}srMU2){?4y~_O}f66 zPVkaWHoQ~HcNT2-c=@GSC}HPaBxgJoTxxTc47e6pujEz71=cr=oRGDcx4FioSciMJ z>7+Q`ei|<6G6}lFyQvjw3S$$czH5D9OQ*@*!*c+^el^lBQ{f_kiRFHCw{;+SKD5ao zO73B9wLJ7(YsFG8rLLZq<6QSI48v#ov} zFQ+h&+s+UxPl_1fxoMXNOc*PTkTQ=c-(^pIeS-RdAoz8$J zT_m?Dj}LCj)FRW!X3_wuj1dMcq!jCs-^K}Hi#!y3`8EBj4xpE5K?2d<$aj%ho6aMT#=y2W7wCS*=GV)pz2@Vd$jL-m$>BXi2)IskJZ_W-^ z`~8bdU1kePV)|v730i{R9ZrXy90r_HPdbC_Sk!L9ZEJMw(?P~P1MRB=Rl*>HP;5?g z5r`2H%NJ41jG2^O6K)cc{9=`gqpkEcH^%;Le{wVh+T{efhz!!AC5+P|uj2TU&yj;6 zmUZhpE~ zOK#{^?#c2yYYZ7$Os;|wc|SVq8938zKRbjoOGGKQw=nXkymcg z_vzd>fALXxaf`5sx~h671?PUB_WJkN28|8H=0zNm`B`VC<#X` zNTm9bz4N8{4O5k5IU-ACEu%eeU1dm-Z~SR6nHK2Lw$G%&Htkywx-Q2nXiXD&6#B^N z;wXP|q~!$V)I?!eyUrk?e?CF@-R8-#;VYJAm-4TB-U~b#iTz^ou$W1@)hD?V;50w( z(#oJqGqUwPQ*wY^{<((!=nvsvEt-q0D`boI{`r*oi{ru6!n4oJ>+$Km>+u`}oNxUVL&_jgm(E!Z&9H9jv9QJiuV1@VykXq2U$ z;CN!)Bi+5`>v~9wf=xINjee1-v;1-!K@ z#(qo1c64zlQPe}X{LG8dK z1K8I$)^?9U0k=@1!b53%5^FhdP z=cZ{RZ4&+jYEuLct_!=3>(_2wf5U*=uX;MmaHL>!srS4t+LX3Be4lHk&NP_eJynxe z!1UYO6;rjIGcWLt*o9>%o1V;|It*kE()}KZjm)*^zrMn`_SZ&JOXYcun|xQqreyUO z$1HEf&5}tT;^dTSW)$q2{8DzQ&C6>HW`}Bf;EB3R34OmV6RkiIm?4$9b^oy+ruJ~7 z3SrUR+nvnle|)Ojm)k_=As}j)%NH7HH`Ed$;+# z@q2G5jxLQCsGj_d!iE6TkGU5!(6lQ>sTorcl~|sbJCKi%v)wJ_YJ(}ZW28)g+Rf%* zpeo_ZQ%BIZk(R#M2o1gqBrseYTAF+2Fzr)@^7DFtdC+~OCL=$Gws>S%g7P~7jz`R) z^5ynR@tXMD>X^g1v)3@VEw_hp7klVNbwg<_6FPH&am(cLevY*75x11kQv*8GxYvOy zzrI?b#!X+ssSL%=Vn%u8zC;pwNAOyTq-i6*w~qun*?^pZBVNFdxlgUX5a;cVXlVju zfP3C^?$b)4`}&&53_NIYvZ%j&h9YQunYT=lfczD$dmb{Q;PrZZy8TY#jw{xju=1Sr z7h~0*S&C5{Ci&^7DtUrdxx1{bo{D+-^ARF6EBim=U9GPH1u^*qJIXG~=JEvUJ7aDQ z^^tN4zZ;R!$0Rt7&0`j%8m5%a*=Z|a`}^HlIj}G=DR*|*NAH9c6iVaJmjSu^BSH|q zG*4blqg)f}yMD56<6j!yTGWK^j)=%(jXv*GV7^^9TyZ4Db^y3&;3`un~-o{$<;Z$q9 zkX=5GCygSVufBxprn36rTjh#V!!Y(Qt&W{A<=W4>-QV`K23I;e&;~F3_*y=uEbWUiQyAD7&hI*Mg{JM<1;6d3lR$Y-4Gs^IWR9 zyNl8HF;s8+{&d`z)twSdlB*|i!?-O=N@K=?n}wFC2(?`STHZtU@F{J?Wyn7v_+ ze!J%8m18|XlP|jND$=vcm=0e`rep)ch12C|#@QIt+c*j$#2PIR#Vp5bBd5$F|Xq6?11@K`znAOQl|5W&sBWF_y zL>OC_wOp&X18`>7JvMw_ zL~nJ5VHdQV5_Wm1?A{c>VA%-lZ6^UKY*%kPHEX{Wzb|1`=wlQupq^%=b81CfRnJ6> zlf^ubIEArYma|dfpdU zw@etEfkR7HeD+~$@lOj!Waur@=59D-tOrx2_cgT$Rg+y&f?KKrh73CCvyQv|o8iW! zA=_39ytkwqt6{K$?ZEpn%_48}hh?iO5me&r-iH(TCAJY6I)w7nj3}(K@15+Nvjq^v z#`?WVh=_k=@T-_I)#Y}Ko5n2GUasQZ(G`#Lh7qFusPQE!Ny zQ4dMSJ8)z>{Uh)R6itnwPL&I;;~IUMCK&Nx=wcuxsX2}6D0uHjuWmo>V#*>NOwqs! z6pgH-`CR*N??Rtw0lLl8*SkFJ(zgTNQV>oHCObtG;gx!AQPMUKnsf(kpvy9GNCOoq zc_k>LKancN!swgy5au(8vch*sQU2GNGTdHf*hkvTXsVCiTyRuVGiIpJy>!P}CvYVP zFFvJEFh-kvqNYSqxL!ZFRNTxl8A7Xu`XVfSq|=Mx^>yvvxe*+;`?7Y$gWwzMgR}vD z0S-YwM^*M*qQ#SX)!IHLG|Bh$8V+>9Kt*zm8Cf}TG-E5dWD;JA_uM0s`s0AG!2_yr zE<+aV4aKeTB&-rvI!&j-H(MiVrCd(SF5A|0$6J&6xqW=o#PeFyZz))1jaR)x^_U8V zP@C>^OtCje{q*TUBMsQ$pwk+&-kISj0+a_vAZ_L zKJhABXO91*HzOYL`-Iu;n<#A7DP3@FO`Eiii<-Y^STu!F*c)$6sEr3nG!Ntyl3&HvZns^ zJBfy3zr$EDOL*{J1c}3TAbpH&5pYk@*xPI6)g?^J97)>`FC%>FD9<0{`z)G^3TlV$ zPIMUkz$CvykgS-3FqJ(*g=TkS?j{tA_P@&t?8XgLPYV^KX)@xs`oerfG%xn>fYQ}A zl<&(6I~|2PC2MlY-d|UOvXAT3%UB7Lw_m`LH`?INS@<<}-MZ>XUNNSiOls*H2Wn{_ zI-AxL@AvkV75?>Yw>~GtsdoxJd$nHZcF4YxSc{%7Pg+FHQ6rYr@GkaXMdvsSovzWJ}HcvV^2m@Ey!@ctUsYIfZdw!=mKv*fhc zi_<9|r2QYIdB>WQ?3F@Wl0TMoODP3siWmA=KiJwPk{mC&Jmlv6gP|v(^J2KfqS~Te z(EV`thkVnkf@2QStY>zm=&0@^Gvs6ZCFJ+Sj2pdC_}@_0rudhDG3OCvGoQUNyV6A5;IcuEG?J;Cv()Q){)d?q36(N>DWz zE_y+hBC)xoL!81>S%_amM*7hM^+A;AJdV$W3FeT5dMDD)u;c#}$?Z81ofTdo3la*| z#7v6_3kfL{h`htC#Jrcb`28YFN~m}J{RHcD{&?pv^l6$g-t*k|%*{B#Ck(UP@?=UY z8?f?uD2}R?mOSzIg1QQMP_U07LwYQa!f?}_nz8C>MT|z9Wzy9}wwu)r#3@PXE1*0a zH}?*OM$gTL%`&8Fna#D=g|5|Y_VLsUZ15Ky{vpsv~7Ci_xpj)pTZCACk{fQ z3quQHoanVi>Y`>p;2_Y)^~oRK`^iGra&xc#wdBq7xfe0ND_!alV@u zgb({aO{hJGJmw6W#$kec9!Q6athOvQae;^VH%^pAa>w(Hd&&WdHOw9*%R*xFGhT0x zr_J0fkly~)g@U`k^VAwMXfHI~RQh!lieScW4$|VzxJB$;B=90_mqPljxgyj#CX<1s zqgA2}8ZJ@%ku($!jj^`8?-ee6t0zi%jR6{G+kdlII$sLK_%&bIcMmQ%pNu z>%F?B=T_w zV2dyxi*?zg6BD%OOeLWBK#{z{NNe=c9ld!#*ZQMb*h|@NM@47ptS>N}L@E0Iv#61X z$td{uOjNe#u1#A`_c;Wj#Rc&c(eqqd;iuQ^D5dh;R_|Yo==8Ty!o=lXh`yz%NaO4z z_{Y}l%6KPN5!h`ei-YF4+8y;Z6*ANst*$z(8fv+s5`T(G*>YPn%UsD7Mv-ewq|{f) zryZiCHA*Z?^u9RwW(duVp2RC>MXG0q@6y=hD9A0N}m@=c>@ zWS1@^f?fJ3>)TPDVE~Z@QIojfS87y2&uF#}rh(G-x7C|J$3rvZ28dnDEoO^(YLqj# zRptA+?`iHS*Ox*n%-s2s-M|QnZEE|b5$CO$t#-T%BTz%TY^UXgp1p*vCji`f^vELJ z)P*N29Gz{~dUp+caeL^Wcp)V+f8MOW5QOjglWR%ryD!;-i*Y{>)KT|l($T<2mxIf! z_4}6ERo&FpQkNZT%_Pmxs!@n$3M!hih0sV+&ss1Q=y79DBt~U#4VB#g40~r8p2bH; zH!mh?3nZp1ft~?ZOW=?LxQ~!F=&E`HnleCRVW6rEO%m zdFXs-P9gALp5yr)Lr_%cR_`ib{Cw3?f`taZYpw{YW8FaBdyHsthQzO{mt$zKvC0ee zJ$Det6~1j0ILAm=-ZUL3ZC^MEe8i|!+tJLmuptMwoNay>oI5&%jFY_2`wIT}fjBrO zL3B9nA+liyb3vD-DBk|?shRyT^C)dUyM`~P($b8lW=DAXZru6K*^1RsSN|y7MlnYFic%(_zgLb= z+0rx&H{~$p8R#Bdr1HxEX0mmay4wdY{}p4B z^G?T$Gzk9}{YGUq8;)!g(a!D0%hdyjc%-5(dC6#6srvycjX6vrmC=8soe-BF|5JrCAc^bpw}Hz+ZL4VTK=3FFL(#RJsfj%by}n_r#FF&G={{?%5uIH%%B&5Tmcb97-sa~?n7qS?cbU! z88R6WIKPa(cn@7!h$X_|YncXgNRDNmCl1G=VbGIjj=!+}pKCFSFtpG_kbBe`O7RS5)3Y(&G5vX_6M@ZYz;J(Qy>V-Vkj#GP_`3 zLE?OSznu-oK#*SMCpX{b)HSV#k2tpv?rEVu81&lVN#(@t1g6j;!W5G2tR@Vz?5E~w z0h6vR)i)f}2chK@(l{$Oo5yKaRPGIEG2c;eGEGsz7sj9r=ij~B^*+GgEAwoCl`EfV z@9KK+JX;q}L-g1jaD|+Gj-pMi4DoEsc4wF9Tdqg3k*Zukm)GgLkNB2t7IL|NCVO|5 zRK(al?fWA?ce9IQ=I&>LA}|r{-IRHlbq9$x7BMkx-0Z%_M;pW696W=6IAs>m*UW34 z#`|2WbWcn9$=&B@mRITLMZ^cECdfTLlUSUhV4Od{E(ZIkoKvB;XVgnl6vFWfz;Vdwp^Ojoh~D{HeWuD! zP!e)Gfx9hE8}}Dqx?NCRT)bGrVRkxsY+?T}-lJ-t+$66aG+$oe(+ z`Z)dW6FXarhV~*I%@k{(K+OCKY71M{$j=<7rLpkeK6}#R9m`)x{j}sA^?hxr%KyRM zTSsNJw)?+;pmaCVDIp~--604{cS}iw3MeJrD4~Ruf^;h&0#XWsbci6Jbcl4HYr5XG z_q)&ejlK5%>x?tT8H3?)E#cvL=A8F^U-7*@-(Re-#kvOGh2-NdPp`PvqG`0;*jrcC zNmpx#4xsjeR5Q+?*K8GEj^ZcjbDVJS@O3ULW@V1GlhWieMWH~7S2^L5@SlPP9T`F+ z)}jIzLMMfmIe}chZUsThHuUFVjW9BX$b7^(#9rLo&)8?f@W8Xhj>ri3dmOdL{R>cu zf6e-dy~*KY%TpYD$#Ug~*pKhOWEsOFbcZL_q-hG0BHS)ZEAVJ#iq{T1-V6;?EaE)M ztlS!Ve^%Rty81rtXpu54fpg$(fz-6^*B^yX|M`ll2sR&`3vUkO3}p!=!T?5LA{`iGF5 zzBfzNrsZu*|H_SdH#KYp{39C#b|nn~FPy!Doe#6b%)O^&5?U$4WZ0TOYl$J{WYf zAFUeCtS|=3`xH!h>YO;6L-kNwGiet`^_bjCCxajZk6~Ii3r7{#UOPv1#WVwk(+)mZ zJoCA@)wMZZX^lrT$(WZBkCL}_ z?q>5-VWBF$y1Os`It_|@^_B7G{N*oZB;3sw(n2!HMG60EG_8|kfSX?z6hr?MDo3kX3{pE2guj=2!mj(LUKFqq+L?&>s$g5*jG87v5&Uq5pB^$D{LO zbNPFx8j<5#6?q3byK8U``K%Y^is)u;*Pu%9`CXsL!%D-R=rR3;K1KnyV&)4ZyN66;ymig|CEE=AGZaXDQnVhO?v!i^k$6jL@H$ zK_hJUNqv4VD_UgC(nEGal0Mktjg9H@zQZtVh#~v$n&NVkTNG&I+ou2<(WFhKJp5P| z{A(Wp7U@%ng|p|&lx_8Fe81dTgzbLO;Ua4EVv?d2$c(Et-@qVm$-JP~3ud&WswmN` z96t$f0pV~;J`Fo@#4UlOcB9IC>n?5)VX6NX-g>V@)q@!X~-Y-#mU49;@IR<8Lb(-2EIWPygyEYax3|8tIe-7` zOeIAHw=sv?L18(`J=9rH)!_%a%{$AhNkSI_(%yE9?mVvicohDyz0vR-(;o|Ko-~t{ zr^g%~;o)gYstSLBJ9#C^v7LEb_1MiBzEyo@P|^8z%(W`G=(%&FFM?1Y`IyedruVH( zU_y1_>;Gtw9j@4yTC9J_Nu45?%6OsS`TpT)N%BZ4Wkc%ubpb(-1!cE<*0F{fF=}g` z#R=WZkvVl_P|@GTq9U5umRr=@vFP)%A!1s>r!D&0ktkom^`i0B(-HhxLMNz%mU%ps z1ZmM{peZ=gkElq?`!crhKlw@8B~>TgDLb&HUHPZBW6o7^f$yb!{>2EVrKTL2F*q_~ z4p%xApVnsB*EE`2k3+e$7KUM^L$(2b<(lSuX7uSElMLy%q(|&1+^TD?7r_8%lflKM zKQH;MAJwA2xlw{}I)<2iL8&@qu-?oTviTj;A0K4tRWgQ3vWWMQOog2D)F|ia=iDLy zK8VyDK-PpoftS7E{#RKO@~9E9{^Qek3^lw*!WYVT)ml8ru)f4&wSQvj_imIb*d#&o zmH`c!_>SD6Fi?-_8jYqVZlH5#=$yC*55;RhYH5{$qInZNi8UF9;HPljK9&zj29qqe z-n=QxH;S#H-7=$WRelx~Kiz`A_p+?;|ER&ls{rjXxq$`h2h?_~u;>c}*T0PV(-jI!B1+ zk_1O=@ZehL*$Q@M}MPfnF2jvvE1WoEZtAtAoSKT-s-&9^!nU;T^CQaj95fsZIPyKXt>m$2pBtHNT zQ0Ao*8xpe813n#;^Px03##7(%#;3D)@r6nUzuX1VX^Lm z9t?v)pLSGZ#LR88-uO*CVqgtnOasbGCv`m~2_Z>0-N$>2A_8@+kMC=c(gu8Z14uMu zZhrj13-gyHV`dTn<~ahR|B~;rh^+B;=~t9x^sdwzzBG6LZQ-T#WnesdLa@aFCUI(< z#LoLDZy1aCCy^WKf86^>jh3qedgW?%nJ;QRX9gpNw{825J8v&sv1hKZCx4RyCk zP-0cQ1jt#e4wKbA122+2mdkvi{f83PAk2{>h}4?4`DT}q*Z*51W<7(pyUh#c#*GDZ zb*RNq-=??*7phC7ha_}}+8?ytk17l(vz$>dN2L%jsW{6Kd{Mvs*sC zNG__bx7CHTnE-_(`D`jQk$BRcf66h ze?kaF5&1`+vUd{t2K?B7W4dqS%u#Zq#M~s6h3}UszZd9gM`n$^d0c(pcUBqdraM7V zWG9mO+qSRQGeAIo73B3}^l`MO|A8AE%aeaDn=6Z%fr+75L1*nNQ?(Xh>whU0YH{M} zjoEviQVRP&Oz#oc<4G^2P8Lz_gj_P3e@rh$!9+tM>-K9k%vA!2>= zET_R-`;+5HqpqNv3Mv8dvphE#Twhd(E0gtwHd*%*J^Wo0t|IYdHb3x+A-`zN<4_LA zjK2FSr1vKWK97+u6S%c>Z{VNer&9hv?If|?qQ;6dT_6sNNnoK}I1>`R#%TB*_m#gL zyqP8v4_v3zXyF^jY@O@_syV&nx?Pv!crw1RY!o-ENj-pOK25J@zG*ZK!dzUVTFkKAzl&vGqz~XR`%a^Bw3^g~B-8^N za7Vc;MM;nx?0y_dqM5dlz5Qn+xlWje*KUk^Ni`@!N!qGgt{YQkrbaGm4|Wmy)kY4C zFvf0MZ(PZG?U%}(r1>_Ndl)U7Eh2&fNs=g?3eTtDbjvcVF@JlBS7hIW)F?Q1NABK)uAvPvXSqg`ds!(-Ce zY-odelUcHl#`L|(LEQQA&ghqFhIZNMFla9bLlWB9MNFBrcR3`xO81qDzQeATuyZU+IrK^$(EIksfIQ?G1BDEI1bcSy9;;SINe`L;| zHqsxvpWrKg*M*~NJi}JIzPuec)dT;ot|+c^QX>L}QELiJ)tK6**UbFGWw{OdBT`$m zO|g4YXyWc{FB40O*9N>BQnyL`1ZN_%p4s_zJ9>iX{?Wsy+g$h$))`#pn>vU9y1UwuJYso39H7y zAp^!MEMcY{wQgEf2c?T8xy>O;o{$PGY;@6un-(X^G|ZK>Q;D)5i;=}b+voZ2rLTm- zUDy3^=CR+abYD$s$MYi-R-sr+JbAY=k-XSp5Dq;e+r_32=*QRU?kSsWR|Zch9h!Nm z=feUt=Gk-2S1J0)9U%7}pb0neposK(c5I_jvBlAs;I{vJP`;t`%D1$M##^^hEk6e& ziS3iV78DFB93OFfKcBj}bIc>u zg2vJAhb%2z*9rZV4020J$~FEIk2_fiXGtPrk0Cdrra#Fa6Bb+6ILNm{QFCul&e)jc zYDMa>=wQF1r?Lgf|8s|5wq`fUQS+oaZ7!RL$}mcOzZ~`^xV1DLojd&cDmhCCG!MUm z!b(jKE5fFiB0?VwY<};W%@?~}mWwk2u9k}z>7~0WSvGH&pI;pRKKxilAuN`NS!w41 z!~XZC4pF5Yy6u=Hk5Ss@phXhZ5e~tN?V|iR(&ya#KlCT3T0F~Gwc`(r;rB7^mVmK?-M>L`VpC3bc)I6hMhbPpAX|%jy zg)=&uS?!ggKo_NXjy>sevVo`6XuXC11b{3{nu9`uYeTpC{B6ss&aQo;`*<3oJW6o{ zddztWs#^vk=^_p~_Q2hItF%WqdP#syCdKZw14}K19yfj|BgX}IDkkk5eSx47K)rR$6PAI3mb@ixe11=keb`QFBMS103#VeU8>$qPx z3|U8Ci$=fh+XY~xSnP$s`|r>=4a64`^!+iAe+c=1sO#OJY2}!g<5*qF4xB^$WCCs@_-aRrBW3 zypRvZu%`OWvxkoP7O-hKJlYW~JzYQD_kJ>#ZLfjm-g_Y2y7a@+;P-xN6`6~E0zdEs z8gq`_==wQH%yjoXwzCDvohVN=l;~B+HQ8OE{^;ZeLY^?@%Ga9f8|8!S=o~p8sz!ry za5!aBZD(Zcv7Y`cZ4en-f4G)G7&m_D&<+jlwF>;i;WX!>KHLIhG^&ZQFSDY_$ym{+ znHo14(cbmQg~WZJHtp~sf{Ji~U(Tk?nQc>};Psh!DNVjxD*Cz7RxpIKz~xd@l`>X@ zWEbG$!w)f4Pz&ywU5xip>N`w7HXoF=_zc@2sH^^2{!XTJnZ4iQX&;~dST#Ryznsmnm|bbke2EW9#_7{-iGrJz=UcwcC^pU?uExf;U}%vuTD-+=8CR~@=C~q5 zhNrfV9dr*`$7BROKG#)2NAZGgD--5hqcGLSq+SC!wG87HJ=% zC9}SA9J3HA>}LdJ4yo$3}^OXc5%RnPA6wNaz;oncXXy z)Tb?p}POQR7c);?L(2a^5>&!Af(Tf0$kYGaakoSj+%GCdHJX;IBb}n|L0Za4<==F_WEfn$m7YiiGvVt8!H5Nl9X3-n0c#)YPeO)c zvSVD9OzSwYPCJt%uS;l8wpc?X(r40{u|wD69**e4|3V-$(otZ|a;p4by?=EN>&fnm zd^H`F0ktAFRep4iW0@ziI)(e!fdOPiFf{V_o0^P3`FZb^Mmn)GYJnk;rTvW;oI!xQ z(6CzOWUaot(i|m|2db$ciKQ1II_myAx@$Y%{{GoN*Pv86P{0sIW)cJV3%-Fn@bHn+ z@KWs3+LM}s+k&j^tlxqHk7^~3DxaF88ZN;^b-gV*P?zrtTD3>$H8-zLD;`RzHR!C6 z`bFe#6TR@~pD1S-&va|US_ryCw{#LeNP!u2RSx0CY-s#(nuSq~UuQi-{zMhOU*!LN z8%PK#|L>kR>YdLJYKR(Fsm;eufO==2)`LmFA6`l3FI7kDR7M%QVk{CigCvQ8-%mIh z=0~8$;o>vtz%B@BC0Dgf>h9bBBamO50#!wikT;XiK=ETMbN~ji(OR z4;v$5U_)bCi_Ek>JUyb)X?q0NmxU31^IF5lO0m?o%;hX{FHA9=VP5Bt`2&#rVq#yg z$|J-ACxj3O`~rJ8Wu2r>cZPg~v^L4m{>!uT_kUbRPlDe2+ITwHd*FM1z!O=*Eg$%o z#||wrqC-1oJ0t|gm>|f7H`{bRd?L==^84U^CQV`8|A;sFHf>r$L_1S z=s?)%{^wul20!m!Ahvkgcm}U@|Fq};;9LKjFI2s^UjyMq%A~O>)XW}nHvi9mHS(P* z@Xm!9;6+xo&`OfVvZHwaSHB$%dFOb@i~PU+@!!i~S2TDnTZQ4%PDZVPjZH5sQ#H+| zt&YvH@@y(T3z=e?><24Fc3`&{%bT#l@xS?;giqiS%eo7nSP@$YUA{j~@_+*g@C1NO-N{$*GwX#C9--gc=dR5Ye{6M}pA6I^7MTcJ*CEO> zKC&@P;y%Cwt|3?wkd$5*sTl~6>WY9;y$SEjt2%D zo0s^TSYph>W^o1kOz)KC$=c#m^J()?gQps3B}c+#252b&d2a{m4JhV9z!I2zO$FVpshFJTr;4w0P~sr5}Qq)XE>wx zFqqs-5nGFu5rpQ85GTRP#&jF}A};2hAoesh4nvMj559`tKr5-!j(>pt4>y-EXn`;R zrC4lA{+ljZ$xW8$UYT{Is7_#)AaLSd*Uc1NqtN~UU}m2YZusx72yB3}O79x54WQ99 zy#UYBU0n$W3%%9D)h(n`Mh70m zfA{qw2c4zGkz?b#NHPkS=wPQ=1rJt5?vH=%29D=ct)v4=oawwROe6F}4#3+c_XLVY ztvF99$|?eCW>$*nHYvi?9yRqf^_vD(h7+JrvX;v#ff)S^nnQhOUlCKCGVn0Hy`O-> zMaD)u%!06K*YJ)(P~-0YoEF4{;VM>9(C=)RB_6>AH&dJP8}_c@I`r$Vm9$CvC3 zs3}IF|GY5|Ys#RNOiqx^YQU1ci6i!j0d@4eb(^9qQlko#K$G1%`6W>=35#E$I040n zAI7Ol8F{FdF$e(9r6+{2IiDls<3I2>SaEhR5ziOV`8pllU<7j+aySNYLhWDxbHjZX z&gX!w4BhjVs}5X#2f`~jbpVQ++zF{##!?9^AZPsN?Xi{wZjg_UqUbHO5~g9fH~|&V z!Ts__9ff_v+3`I-t@!v8?T1HleTA=3dd&07NfQ@=l+2GfCk6xtUAXj&!t7p-qdL3@ zCll=#6xcW_0vV&eA|ND$QM3&~@nmC?k0$~`lh}BZhxj+GzvltDmoW7dXg#bT)Szkd z%0V}vF!f3_1iLe%r>=-|O%Z0b!8E2pzVsiP8}Tk=H(?k*0a}mC>sz@;H_`=I)!hYX z8_&;;T=ix@aFb*wkEfr8Yb71CDkotqk@rXY_l< z03Eq5Qd9zI3W2p>R>PD6CCi}2o%y$ya48dxs=)sw=q*SwNaDk1;iu7&(*KKZ9kJpWZr}&w;YFMSPq+h z3F0JR)sce0xDLUC33pk#{QcPjnhAHn1K00Q!xGb}9t!%Ogbkg@S*`cy!0$)y7uga{ z1!CuhaRC#{U`=|ZFz;pY@&oLODLD}ln*o2|2UM2EJibRk8~u12q4+sEJ^A~7Ih9m~ zku5Udf-0`Ogy9kqmcs<%#j=ga3K#}u?$yHnGfo^!E%XVOMwt8F^5ioVC-A1{12%g_ zIt1(1hD28gDk+0AAEd3m2Vy-Q;xj{YGzi;q-bg875H0Z97T_vG^IQxVx$-K*O3~PT z54K85^w;?ou|~!u7DRYNvTm%h#B$ut6tH)>bI~zk7~Eg=MrH_^_;gN`@MLLcjG4Y$ z5?hSS)O0-69 ztr&Q71%EhZ5MsBci^I+-e#UT+`#zsuUSq7@)tu%tcH_zKp3ku&)8nsk6`JL4tFiEY zdH|fh2_G4wPkosZ#?6{(ijO|JJ}p_hf_bW9l+SaS-zqfLN{O@t`5}-Ne~^+&ERBfi z_M10WLDkE8UoBe1}}g`$BXPAp?U#p&hY>E_412 z&5b~n8~NW9Y=T8GkD=Y~tROPjo0wISMXnb3Gc}Ra5e&nkPhTm)^{q64qMdNT*B>8~ zKO>!V4E5&LBVeP{IM5N<5$Rs3IV3tEtR#-b8Hf{9kVg>QWZ#IkB4+Yn2B9$>Aqt;u z1Bcl8F2F&T@nyRe8`QGW_hg?*hZ?Es*`bo}sy1{Q+NF22Z~aK$|LQ8uW!J7!prWQY z1L5eKyQRB`JrK>H6B8!Ok>NG6+-$wnW0gR%qxIq4|NcpYf1MQnbFn`B=f%NopB8yR+(6-PVE*37$>2sfNj zMAb+zKlBYabvV=H7+?qkhCQX^tpy6bhDh$Xu78+xHgO?08yU7nnuf z^BvLEpIFk*Q;x5jTPP$NS%VEm7{R2Ts-l%>lxN|S|5M~ghzh~(TbiJMWs$EixN|eu5Lb(^v4OGKaa4N}#-RBgz42u5sjKPdSqz~d0cp$I9 z94d>c6%nSZ<-~=?O<@{QD5qIL(iL0tFv7cnMOKS$8czO4=VuFWZa8_1F&!tGk;yAO zZW*B(C^e~()zLBo$WmnoV-$sU1z%RUm(QOk$Le*Kq~GKws`gwnp!&wU5cahpi0w;M z?tyWQ0}+m=+Z|Lrp52wy9Gyv(Nt>}U({(|$z^98hhTs0^7_i7M32bcznrF}dHL z{MN$^#SHgFG*lu8h-P{EUE?8a@Gi`A!$bb?_BNeNCY}+YBK``(rxxV$Q=#2g^2K0V zdOQ8jugh#QekF8#13A*g?!sNI-Hp$LLu>(9T(R#iUOBw`ZddR4E1ZB9VYpOD2b8wt z7H_Y;$v2t;f*ncrfYw*a*g$ffKwYPIcY)Bu^K%B!S`z_8$J`I8AwZXFPH#XQoB!J{ z89xT(v~w~Ip%4gc|HlRM7GT<_VY-+hv+dAzxak z8PcqlBSyc5$*^kaA{!_KW>to$G7bI zAo&bJ0pm%9aKxy1Wb+?a1k)E`OfdI+yQ=-?L12P4p|2WP3n$KGAydBUS4gr;Eo{I5 zJ36*0N&m|%Ixgut;xz~1VZ4hiB*1TD@k32LKC&*r$xu8=&HC47n$SXjexUq(dK;ok z5$V&NTg4K|b-1%5kTAew_w+%Kb~rw5FXHZlyn59L|*&8T7&*0Ggrt}lBf?Hv0`JI=4Ta8HRNit~Dd!Iow)?mA+zcLMFfW_B~!}Ebna+!)0rZucav*3bj6@fx#52Zs5_55-Oj5(u{eXkuE|}_Gdfu=Hb|ubY zF^_z&P!mX>xNUktYT7pye@ z?5~!{mplT5MQ~L3k0_%U(sFqL1r>wy>IbXhGdvq)G^e~Zf~oo@wv(f-QeAWT>-w1GcZ;{eD-QMr4swgnvWchZ^)TE?*1fVUZN!a z4Pc1%BSH}`RcQx)P-r)MDRPd%AQU;_@rh{Y*CPt zZ#_v8^Z>KMzg4|}!$&oP=moN`*g=UbcHMfe?>QVApAq@}5Fr3)Q^7kbF7k#@*IUdc z;R&1M_9dPBE7IjC(SDnNUlfia@mVfNeFha4?*=9wfHMo5P9t7fj;zfNRiX?oC8%)(5PtR%0FI1 zJLDR^-9yUB>r_K8(G9qnw!5gJcdp8P8q$(>0fXw+lo^AThv3=$s`$MlJd6l%5qA#T ze!er-Np=0l8Bgd7YhdZtC%Q)53I4tc^OA@nus%_i(5@6Z5qmxn1Q8p--u2?!w&x+yc`+p6;WTV3?^ z4Lql9Nc7N=Gqn#ZjSnEn{#%d9>;`;G!8XbcN@Ld$his(Y`s+15W6LvG;=Pc)Smjv^ zoPUD_vjFkB@XW*GQpEVo`F)@3IE=mBow!|vq$WW`h-oUxKaYJ7r2npz z9F^Qw&N+IC{Ez<=i~!Pu{THbqtQcd)Z%FUzkspZdN@RMpq?fWjQtT3UY(X)zzMnv= z{VuQ|>rN%~cu~pM;~%7fL$b?rmca=?FWV3j5C=r>snf8J@WP}1&N#p9AB*2#M*mdI zsX?miF=qap_>ZgmFZS5Vd+*>g-SE9bjY=Nfp6}>^{Jt@Bq#z0e&5C<7v zDHRzbbD*1`gAmp6ws=J*VPPtY69S?}pvSQ$q_uAfH3zI!6r&7mp|a}iEfvfhs_b5e z_^&Lr&SvC3=>xn!KEox#}4BrpsfRM{&;gfGQ%bav2nt~1>$ ztsmiRk-ORDYY#cGIyaN{yL+ABp31S87Dp>FS@S3&Ggm1}qnQdbRTHq#9 zGL;lE#>wBQKi+8knhj}#Z}jl)KPPw8fAW>Q|IAlnQE;?BAb>EYyHEp)&gDU{;z)(Y zsswR1ei_SzM>fzH5hduoGOWRK6N39UUTzW$H{seX5fZIKXzl5SkOucn!wy+rS^;82pHX~9V?5@}jy<=>W^^&h)K8jOKW=n@abr3P;s!UA!t#_XT zmHa0Iv0k=RKreE9MBGt{x}FBi0}+H@cWIVBK%2sbcU@t|wvH)cTa{1&#*_4i}9 z0z0Y+9g1CNn(ZEw=~X07a9kqdBpTW(Wj3OKhir1Rbp9U`KZWo5$Y#*U`lqkr1m(3P zeMR{wUQ|7KJ{TSSpZABp+=SN=BK7_CTs4sFvV%46c+ss_=G1;&E56JPmxx3wkUjvR ztr~e4WDAy}E1ds}*S^UDuT54YT$QSbRxrr2l`@@c*+t)A9tgl7FR1bxab#$q;lNuSgdkCQI}?nVEQuKwFMpd&%(%?!NvY3K%c%5-~Snd06@tZQW3 z=FlBF!9C@ILQ=}BGB#ux9!Oi@^wvkaG|P*gAkt1l%2P=12EjTDQ9O3? zhk~Y1=H?@P#I{xth@sEQhRDGxnB65vIWcP%vio-v;1=2&#Z`7^Av*Fc3!5TWkD-00ZG+FcBUq=1Aq_*}l6z1EszZFna9#4{!|}uRDI32Bnqb?I8TO!blFxx;fYy1V$h zzkH#_Ziqw?6lZOCO}U-Jc%h}nLNP7yBU;r^o6djsD4*x{sH@lH>dG5`^k?4)iU~^1 z9wD{E39y4$4>ESHRNN&&qy5t)M40+VzX6(6C8IxLD@WWdPKQ8ektV?1GqBP@Ixpfj z+Fm@!W`K$86fZ<+9`a*VP{&sm8!b2}_M88{v zoN-)$=m4DioOfQs`Cd3uiL?!nlw$q;Ha9ScZ;ja7=R|g}mT1ES#{o$62kju_sE>9& z@kP#6+j|Hk94@VS?Gz)v1!^7i_>cpP4+hN(Ej@a3@w|V7gKiq64P$4I-nl@1#K{ts zVEm0@B4ST&2c13L=!$Wx=-P@O)F;x(>ktIC?reN(Tsai~evS!)8D{xH8K#KY%H#*{ z49wds3Er(ArO!Y#C4hJkv9)2|G^p4ZdKFJbg-jl#_xWBrj^jFVJNmuncz-qjok#J$ zr!SNnaH#~^qsa17lmZJLl=|YGJ~%Cj>mw|XyH^V`qfWEeJUA7IM)-s1kjMfPG$#wv z!58H|QuBgbXwAO>7Y<<$9!5^2>iM}1hj(h_MGYGF{#}nCP~0@UwlGF35oi+HvUOIH zzRaVV*Y)9NY3V5IqU0j&`e^BM$e07vPVZ3rJ$-f5txl%q)pt_nBk;YWW~Oa$%q09tKf^YcH%e zyG1hxT>5hemmMDLtvLYJT&yuCMkp6CRq6YNjB2JMGv$y4TynVj%K9}SJbw!`-49q+ z17hAIc?&;M6b+Iih66KUB&p#hWK~MKy%&0}wzN(3;G}FCBDoD;k`=Ju85G-3NM{501$)%ZKvY5QK3bVqk zo6j<$8Y=5on-8o8UG$vE|1^z3wQ!eEXt*aW4X*jm$W$%nmPzpOMNH1A{qV3Vs>U+V z4JOi;W8BcIu8MA%GSTvO?$7`FK+u0XZRT{tmnV2W-_`sX4&nhMTy+sy_=wFP+h+%t z-)T+WgKRmZ-*XPKswpG$wv*JaR&GM1e`=#1wuBDEyj$;tUlLb~i*Ki3Z%JA^qI0^w z+fAVYh1h+_mrDg{@=RG=61x31?Xv0FTcT1T?ZdTnSn}+oLmoZCsz`DQ$voxevxFva zg|7McN`A&!fxg%jk)qMSA+uKCH+W*AGFx9YiaR-8&wT!|0h1{8H~1Ck^gHNcy_;QQdVT{xrJ0xfdKK zDHn1rDkGPn;1te*oFp=g(5lt#c2qS5RfJ9+=R%Mzg@x?XCl`@Usws*cqiC!PAk=wq z##EP+r>KKgVS z>I$W~#)?qb3yBEcg_4ez?+iQvXM6SU5&NN*l*~+O?%<>&3}^}V6eI_Ut=s(m@i9d@ zxDfW;uF)F>;;KV02QSP2;2}Te^HKetpX2fdQ^Nt>0OH*q2lUuVm-%m(3t9Gf>EuzIomK|;8DHDM zFo=n!3h9UDs}Fuh=M!ltlkgN#_9W0jkoiMDmb7@-VbIF$S?ZIe28H#X$60LRu2Vwa zPSnv#uC+h+)yO-ZeZ%gubMMXlnh!H?IdIN%vNWvAZ?dfVWF z{HPa~w7RE*__OGtG#^{h{>DG&F}XmmgQ{TM`#k6|jEZpdD8ESA;-fhmKTtlcqC0?E z`cJOVzCX)f9Eq3lZ_?aTg>wh9k*?km2aS8t#*R_kW!(Fb{V#AfwL!#rdiVCntqHcl zFT4XgA4&_dL-npRuO)B-pm3iDC-1|CRpLsV)>IOP*)*RksNaH`QEVwKwwdZX8 z^~hrYWY!6LhU;P^7iU^0IZ#Itv*zci$6#OJ%9VpcLcS8^zh;o4;%GRds^AYDjdZdc zMk9vI0%=qY<`$;M^8!8G*7uQ0iC)?w8#WM>YL#LF&IwzHs2HvW+}Yz=!6j1BdXa+h zYDeESzy|6lSprKYM1>-#3Ky<=a9GZ6zL}4EFrzb8o+!f;*GKJYtHoR@y4=CPfNQ8& za)0C7nr8s2p2=&)!G>(mmxgVkch3CLe^E$moe^8G>VLLPHMJ8-y$*h{VI5!WKqT>* zDSN#cS>0-5OIvQjavf3)DmdpIYz2dl83O4)xv2bn?|jpxe<3&fyCCRxz8UAPA8A1K zhm&c0Z%TNWfCAu4sYL^5C3#?zRVJj7Av#coQNaJGS&d%Z$ep5eLOT0K;#ZgYOw(1B z=c9a|Prt76*T#es_00NO$)7;4(T=&i2gx~J+yOxgr%|j8S3K;R_sBMu>KIx;;}PO) zQ^buHb#0N)?T-;LL-;UW;bi6C#qdgR!yADest>8feXdj(w~Cm9hm*X=!+08zKEAj6 zrQB#G9EGsi5H{;ZefbU5)lvLsMAk%9#bDoy=ciwdT``9Zr{nqvEBvwMW%m#**32yl zh3iq~GIj_13m>x+aSzs#j)C;WWq%@KYo9@aI*MYpmf#P>>fDxuJXP*YT08kld{3cV zFQA<^K?|-X`_BdYuU8X|5cv^cRXhum8j7X)M$ko82AiiwAojxw@-rMWS(lP~8(-BM zxN>*u7dg5QqM*5HMI-s-PNVAb^RLk;#gg@SyB~foFHv7 zPAZT_vOl!)EnO4bKr%=jEVjkQ_?K|Sw1$P2(?JhYUgH{%4=PxAuL=MD3hFGUOpk%v zxdXwaV6zf-Ejd%dx32Nd_;P57Cs;1qL3|-x5@2%AK_PUCruYX+{-)KdVR$C(;V7Z* z>EM}qyXtoRl+@~GC?14})j3b;{nq%AiBz^K)yCz&8Zqrnc z=ouT5E9AFmpMod=@$i{e`jB^d9C67zSNL3Rd@ho^1YR+gWabR#5{Y{^^0cDVtKWj~ z=DFFs2el2o5OKQRGSn6Hm0CZ5Zc8mUVdL-SFP(SBDi&x~o99)>e$d=t>Cx3Q>}Uz+ zNXbw?wi}?jMDeFLPat*h!e~I?JnNOF+`H{`9MhlZoh%TtKgP4wGQv5_-hZqTjdbtU z1qmD24WSETbc7YUAWB_yYp`yxGdXnCgx8f`jXrreyW?r9RK!vd<4o;Rt;**%-u_>4-L;ydYsJNf>K+}XPMLfX{ul81c00_p4}!wgYZdCCtCH+xxI__)Ls$k1Bj6 zJbiJ%H*sTVH>me;TvYjeA{(_Lk2NoaJNpfqA8C#Q@3!}TYTo<4pgt_W^@Ct2d~&ZX_ZVa&seIWBv|FcWh;x&R`BUzG zk;(F8P@fsmqbD9-xwMT9(Z}`Sq zMSA>_ZSGGC`FC$Y?_)HO)vx;aV&90!Ws@08aGvn#>1L@+V24>ZzlvHsi@h!AV5LXFj53tI_^I zUO%xp82sE*m+GyON>`hLXdIsH5 zMmpk4O#x#4{f$k~g6tYS2JyJ_%s4a*w;>g+&A*5{Q3q13dnt$)Xl@=IBY6oI5Bbm2 z<^{`Sy}%AD^Z*hiPKi)-?GHiyCLCpw?%Xr_p*`Gh*r_xQH3j?IDzk04FPcGGRQj+C zdap~t-Ncr%LR)0fj}%1gl5b>emA;IB{p3?k`mS2~*JmhP3YpiAkJX+pJSX3${q>dV zly^QyR5qN%;wO~|Sq}Ze{pXT&d+Cb-=9W`#~B6q&LXcuGX(tLK!L7e4&#|0B^g-pJScHGf!%}KS39V5t$%w0|^`HR7M z`FMgkC&W1`ESnPaV|0}EZl;~G&SgJ0RTt0=4zh@785ts~^S9z8grA_`%;4vmoV6Pc zF2t#ADo)nTmbD(l+%VBRA@gP`$84`IoHmE8gv%e4 z{NBqsJG?)s6!9>vq4&6%iQ5L3Ql!4+QsnoD8#)H>Fbr(8WkcgdX=Y@MJkhvEBMDC; z6GTs9Vn@DIQs8PHP@royaE^~IQ#xhDbdwl7OsSGjsVaprfI2fn-0z|#W@sgZ-bwqJ z&rsiXvy-Ty=_f}@;&oJe-aZ%6!AlRJtyvcy#aJfYFbC11%ILNVBGm( zcyRY-JZA6syUpeq%;boRWcGcBCO!K?n-bZ2fseaKb~hDXSTRSq#^4-?h{VepsGe?} zzLJ)G(lS$Ie1toBKVv{z@KW17cEaMOUu`&b<(Brs+k8xdgtI(-iJ2gVG5M6OjRO`3(()i^%49k1KcW%VzA6)W%~$SKDbtFM9NkHGW5r z4BU9hAEoa@KF`=W%(xPY2ZPys3(n3NxhMYpl)ROdcOX8kf9^YJ?S-T8#F?o;is-aK zrNn*a1*F_J|J>heVXgWh@pU@GTI?+z)@JAo3Qf7L7A3M#{7jXacQktq=i{^b#rs-gNZZ+BppAVYl6IHj(2cMEGaBu|5KlVqMuxbRo=Y_Vmp+M_5H z>8sCPe7*enP+?4og+MEJgRyM(kgqePS1^x!?wC549)Gs_)7S7YM;gW>%PiLZI>&`LrcqN-y8fNkqG6_u2xDOe!!uStJ7b%yk-I^Owg+mxF z%HuYhl7_wcCdrLX^ejb|?t;(7#x&j?ailWKWIGIv&66PWj1NMbEpu--F?XJRvvUvgjN8OGb=0w`YC_|F1ca&Ow*5$zo0=IQm-;Ck zLV_t`1R~p3g6d4&zz*+13Z}S&0eT{VU*9?-qpj0s@)mr?es79K=B^JCZ1?el%<^Yx za?_^&v~TFPp~72$)0RY_4_qi>oJY@XVn=Ac*37d9OxW$exH%5O-o%+^#JtOu^YAr^ zkQ#n(Plu{E{ooxexzamNn=iY+%07GMbiDix)K|H@i^q?|h>xSQ3+_io*-T8z~F0!Ov!GfCbUM5(SfQS@nh2Nevjw0lCbVuWE*N>5mD7?w@ zn=F9%lzz8I@G|(Kl@69P@Dt{Gkn<4Uf)(I?Yx+Uy?W__Q05RfzAVAjv?-pB^UGboK zu%7s1^xKCzNA9W3QDPSoiE^(bpAPre#ypQ2B%pA)p0OCf>K#wgGwW$}LTpNE8`t{g zlB{0FP1g4Do=5slWEPK?dai^wO1IrTv5&d1^-AHZ7Tggfp^9_`zi4#naWjY;l}=UGMV-+UMe%Xu*~e*VTx6lLs|d@X5q z#wMHzv@=-q?(YLW11K=;@WNCY4PX6hwz}@4*f=FsIT_{iA2d>zSE#l{g!P>~4JR*- zF?o;$^WvIgKKGrAdCNZYrO-SkHZVf2LUe{^ljDr*O@bS>k_&Wem~{K7I{L?s}7Wy&|J!kqKX4} zcN!sL_JoLeN79W3O=CifApA?>ICn9N4yl0g_6PaQLlPPUhH1WBX`WImQ7ybu(#^JbzzSXnf)~83l+oy3;j$Iio-66EtF)v z%SrCZR*UznyYfir562jcF5ssbF;_hH@H)~YIO~fmMjA?ZbgN$WiO;Iq6+i#toqJ>d z4KL+2!xaKKQHA0B{DklKF${J#LuIs#4D!;NU;JOxy=7F@UEB5x2)YoFE&=K8Zjf$} zknWIf>6TigAkrm>bax3zH_}K7NSAcOp3CdLpXYwxJ@$U~`*DxqaQMZ=Vy*w2^PJ~- z9KWML2(+_R33>DJm8yk(uNCklLl0?VJP>tcS2<$Hil`$0XvG14#PZdr;g(fn2}ehP zQ^#9PxypohWOGa{7(Zh_(%64*ci*BIfbl7UrLsqID{f>&3_5pX0iJ}?D+xRc2)5(Knop0_OJdClwAT-(c#QA6C9_M;hg5)S zBhOHgqIGr7$8@Wjb;CiWGPhY|4H1tl#*#?FlTP(pkCXF$i7o7GQVl+|sXZS&%r!C> zjH;yNemj)Bt#pD1wE-3LR}$tq4_;*v1uvnTBsO;=6%poIoP;g%3v^_x3R#2E1(9p0Vp=ii@@*oJ>h zIgKK_#U$IM92FqBh&s^i#t&`uS!ie%8O1XiBdHprwQg;PTk%$hUbyQ=CRP?m-!G(i!>T1((i-&h<*o zsQ$18&NroL;Yoi(8#~z9cR^I!S`HzwYC9#CC1l+0{A1SyodMe{##vmnrWTWx5COxF zHVHLijxr;q(VNce*B|?`hMQY@1vw5OrimpvpV1F>mb{oE4d2T^C5GHg+pU*FY7X0C zuwe5ebWl1!6|MA~0exi8y`Y80Qb>iKy&axPgg)AypHbWgBtKkNZ7s9FxY)zJt?$WO zQto=q{a76|<1Cktbn4X-WDstpCW)4TH2mvRvD0pH{e}19>2QORgxQQBFSZ!9oDp8* zUNb-z8N&nmTA~S`8hV;`ns#Q@T@l zZ5mrLqKvVAwnK@B`#aOl)?T46Z6~OK^kP$#6fd3{AB1m&JgQLH2s^Og!GEq!gfXTb z@rkA!Zcw>6G@fPT_MQ2@Y=C5Q#JtdfG&IUD>n=o&$R!spl0)Rq5j?&2B`UiDB&!+5 zj9tl4Hq@Bg5+%MI-O7RhD#?pA9>Zkp%^&WEa+$)Dn`4adi6ntcO1};Vwz_Vkfy^4` zJalXDE+jhll#Fo>-3gn<1H53FvT^p4UTeKzxt(by;R@2xk(q`N&-#Mcvzr&IzRC>k zVhS6o?NV)HeqCDJ!M`p)a2U!2p?{F{wD1YrZfitCfj}SGuo(t~#L`DzM%*;&A5Sfz zjTbjr_Q@i&fLfBMx$0?!*pw_rYq_l5obqOr(S+ps+eaxk%>pxr(*O17H%wn7NWQw3 zYSo{T;J0m}h`{X8%Q}r8Iga_3V^^FQ@&K-j3}L|iajGvfKWc%27F>iiurY_^;iARUXxQC3Z>)ANQd5_kNf=?JitaX6Z8IJFB+ z2KzySA1MXvL2A$m43y@F5h0js<08@@M(4P18~xt-B%d$7G7Hk$gP{cut-%G@yhL`g zsR1?Cv#p%$dPQzDtsC~xCklUZxx1)Mtiz}xIloygaiQ|35ZV>D?fSscbFAO&Rx2{4 z77$WCQ9H_rv3|>5y%D4w1$AXy+!CLko z`w#{|=TSgkpH;;)A8p$Mzkr3du%W-^$gqch<90VZVO%&HJKGptTy`Y7`Q!k47QX z4$G-_FT%Qt?US{y*FE(MZur1H!T`RDCov!8ngxCqZjwjU;=$v-rKqAViTyq{koMaDzr7ybxPf*oVNFlow80 zSmqG!jVnTIp(^oJr>)#-w`|-Alwk?vMj(WI+4es3)8kHM?eC#j8^R+64m-qynC2W- zdfh$|&JAo-rqrrP>}ADfj6-q4w2^UQFDk7jQ?<*T)>(?-7}Wn>p?1Cky&m@>>cjec zSBG2rioc_n$VGEn{xrWmy_|?%&5>j2VR0JK4=Tt#39Mu$oGr54K-b zD(k$}?s}BH6I^vAOwf99iH?D`CT^=fAbRV~9O1xa;Imt0KU?HB+^~G~;dp;-UdXs3 zI8gyUp$un$1*1sG+IMp;v(jQTlSxHsLZWE(#T0qA%QLzUi=wkTkO2^Q~vbD)CGLy3XT)7Wm!RhO|Gbh;H!?nhkGSLGF=416AVhWymxVxe~7D( zB0n9pUWwVTxBT$8sC<2x+H6sJri0stsO>Hz4z0ZMT4-?6cHGs1%|;3sz-(kEqW%Cc z39k46y6YWON8awN@?>EZ(p-okk8zBn(gnn&4#b&|YRIF}Ukk`pJ{`a3sFC1slRji3 z`H0~+$Ig!Fi?+f=!sod}kZ$R~w9rkcBa-Uh%ld#cqwEb54RXZ-N0m`8Ia+h>2%z_R z3&(rqK-4+>ox8f8#Yulbh41Q%qu94&K-SpNXI{37`$S)`Wd7@V|4qQU^wYwg6k?&h zx{@%^T6r^vw2i3cgmQ4u2xBG$iKq9MIpi`>$syipEgVqCpssKI*0FcK1&Wm#2^59S zC1sAp4Ud?@nu1T~FPwVEW-2G1Imy1*ohsHW{^m9Bx0;!X5lt4?HD_#3CM~|o;mwg123P;^ zB*%*mf)KTVdci}T1=KVua7$M1O0Surbm;{?iUi6Rvh;>vg)n&mnS%h6)za!gnBxcH zCa~_lmxGmFI({UX^~4x++40$?@JUp`)V1&MwS5mUtVi)Ga|=aFJ$*a!S@`3gOUefKhEjz(DpIbPQGHIr;?7BkJ;j zrvOxYn$O++uZ?`{JeeXrNYyi5zn!B$BuaD73H=av#Nfg;E;2RvNB?6TeKba4UwFy{ zk>M_zU(;3tYJt-X>Ut974NYz9iPLCL-Z0>v4YW?w+;M`=q7$Ld-ARU4?VMA3ymUZ! z-m`i(Y8^kC_9pPm*v{3+X~@r$%JGxmv9#Te3yW)bs`5i=?JKQI#Vh))=AI&1z@W;20Vy_y(yU z4K%U@%8|MlIydeWbSEkPFJPEDA*CLnW6&G!FT}$~?aQ!jG@dHLw{f_~Z5vt%7io%- zDA7Zz4~ZE98V`5=vEt?BHPV%v72TIAG8lO29(Aufu#<3;Z1P-Lf4jcB1{;z<%-vc9 zbNj%_NSH_cF*AZ(0GBTluQ5(@lT!zk_7`wXj+Uj1n-)7=m(;ra;B8ky_JuP- zOcKU@FVjSe!fVGX9NvEGNhps(DEZ+!zIRwma`g+SQ);%64869gnz#0P(j;WfzZ07V z;T0PA3<~`B16thH2TPORl`ras)i4*fz#lf3)a=}FL!n^u#nfPs{3UqS{8BJxSn(b@ zN$!o1R_}Xg$&D++KYsdoRzd!>;?m$`k-8~j{+H_hPw{K22F)e@!n2GI!uceN)v6KI zTb|lTT2|aW*rEY%_d?iKrKa&TxnA}Q*}x8OIe$Z+?Z`6>F+d01vbt3 zlv+?q1RUx;rK}dUIN+8!p-uW7owaf{*whSI%j+Jd+x-1+o=A(tRYI0u;MsNUTgvH* zjs@Cs0gD0H^TsMbGrtT)CBQ)zficF3EG@jIQ%M^Js0xmYu!z1m%Q0GwKNNlKuFoL^0@UBP)uJ^UkqN(4@EFI27~6TUVo-RqPzHI1{cB z`mdy??(rNiDRFEkf%$DavA~Pb??;yOutn^f0Gu2acN9iBQC{ESNw6;-8&DIcX#}hv z&c-k|%zUhiXdHll4=;Wd( zvS=ZMs3o}_7Rmjx?9BI!BHSXHal1YNR1%iW#o*Kc?{M8R4_1&+ej9|A{~@f39rmvT z0^kArP+K&qB8INeS(t2A<|?sA?3ya)qWCMUYWQ*?B@xJq_OK7ET?t-~ET*x8qf*kd zc*5Ob;#7WFLipn8x|Mv=1prprd)vr}OV6ZZ&?W)(0}*c`+7s*Sff5twk%K9L z&{!rlx-Ah=E861aX^fp@KzEt88`iNQb@X2A$;mW@huCFT+lnCBx5olaP6`5@vJutT z6!fYegN%VZsj5)2!je9M6QKl1YU<3zh?DADKf(>7t~#w&1#G5^$cZK&)Ec=z7g)uR zjJ=Pom}FewoB+fYYG2dtR9@6ovG{x@ZOfxq3%++5B2EI5~BfC)a?PSU$|7uZrIDkT=7;6Dfl~VF7mk1)O&tC!a zFvd*ype%-kf~#PurpPMtery4a(+2Lw+BGWP*i`L$gAIDh3Xm&RCzXYP`JQ3STAClu z7dwnIDr;Uh*{tE&Z+&!-MH7rT)vLVN=Zquhx2pb846>crcX^IVr6Zf1hc30Iusyb| z{Vd1CdO5|g@X$gfnhyh4kznvKB$#{e_Je$i%0A!1p;7>j;;7U$HIGOUWf?zEZUgLO zAa0B^`OK8{aLG&qdl<-X%4aU5q%G}=I{i4wv+AETT{V70wwpWdyL0E80X+ZvQgnMj zWXT4JT^%BM#BT5I2XVJua#B;dUdf3Lv+*@NBKeVc<&cVPENjPlILqLrzY#*{&{7#K zxR=ACzB>pGi-VWhNLt!G2H88gFIc!`NL!74P8Z#m30j?oBQgz2OUV35{$+O`f*Cp0 z7<;2_RuAyTS>jFwwRgZ3bE&OfB&nZ1&k;zKt!J|lbh zLjG99f&)c&RPaQB(UjWdSuO@g1#8c%8Es$~>uuV4!h54KaH9gwi3(mk=>ywaG%?&GGiVhFWF^sOVzs2Y9SH>#d#9+CJjeQ_hM+0`XZH0qv z!eyTm#ocEzy9KD)gAg-qtyk*3F)S?oPvkWhZS?cgo{GFsiT0Yq8-7l zGRme4nNBa5>EOe}HBg~hx}xULV%i}BCWW&}fR3u~%X09Tylj0<1KI;wcZI-`E$I5Oi+@6=L@VmHkiKe);b4KOsU|dTlF)Yw0c{Y(RbKP;7G< zR|m9tPsft5>=G@%;G1Z2b4v`nf5OuaSRY0Em>I%Gr(}&w{Ke(bL!*tWu!R>J)^jC_ z_MAJik@ZFD>r|JWX8G&=ndL3aZ&Yb|GH)XBQQ-|vZw3TW$jFwZTT#{W6#8$W;KXJA zjfi}^n1y!DbA-ool8d#L3f38~BT#p>z6yd411++~2EU14SBJrP1E<&bSXb4;inIGx zcHwv1h!~kxuSiM=Ju4=*+5Jyx^u zidZ&NVe6~cfNUpMC*!DDBoUlG(NY;3FU3Jl(O~W9hOxq^$)jPK|UhuG` zS)`EW=qvh9oVHiEA~{$_PNliDD}L8Sa%sGJo>hKdP9kh?z4|7&WoY`-vAhBKvDBZt zxKaHe!H4nQz4ax+CiPKS7V$ADGRCh7e~hqUHj^_ zeKfsIjnl1x)osDOPnaKa+gFaV?^>TMdN$je)Drz7cY{4<^gRDrUb7zGA4lm-H&mSm z@*BWLYgItN&cIM5V4@TdQzy z-E}`!2K04c#0ygo+FSVRz$ccket1e&1Sk)|NI6E0;o{zyMpr5}T0ef8eh|W(h-|pl z1*Yp~%|$7CRgWSvj>$(azAh(*k4T%@rRx( z%DyLwDW1AYztG>j1+ug*O$p9q;OX4ozZ6&lv&*g6p`^#piDrvN|45QJEen@z`jhB^9yR}BGhmm>F zw}ugR(A8mx1*}JkGDv2WOmZ)VQe3hx7jj>KIo$Al>$nJLjvP_DNZ?LqPgzV|L566)>CH?oBreIKng;-@0g@BC|>raNC=uN6>**CM_%7*2rJx$hm(OBj_AKp*|<88>LY}DH9kfxvJP-(3f{|^g6@E|1hw+Da#dSs4unnAuq-M z9l&i~K}#YJKe)Y?rz9{8-~vfwgxd2C77%ItYStyQrFL&UrVbrY0z%@Vi+5Y>f`+io z3fk$TQwWr+==fiFPJh6?1)9m93V6aSJ-ZTo?=c=m-hL^73WDLm+=0z@nD`Z}eKZ#q zYWdIHz;j7+rY`x*52d>^(y~L8#LEXSl#29MsYfjL9~<6HI{DHPlHl{K)_3}2S`?So zrRvWZDMF(eZTCthnUC&{h$AB}BUwLQP&YLSbv5JW7(^ZL5p3iM|U@PNO{*h%s_A6X+D}AHjc|fkmTKgJO`d z2XbAjaXgF_4)mHjfJ$vd0C1&BvBE@on=uy1^}$UCixRgMos}2Xf|-m_=u2N|;02Df z{fDZp)$zQehl)QFVp6;9qv8jC@)3`J`}JN8lO`ikNw_|X`XX@jMq-{PmIg zlSP-Jix>aa0?fA0k9|-Iko@$R=+)G-O~rR6FT?}`90M0+a|dB&qtbXN`_cXB-p`3& z0Uh*TcaOSh7%|sKDb3+V{M~lOE&e=r%JM?4Xn2CI40#d8-JD_vhbN@qM4%9l$_%?%Y83 z`SzS|t5YT#fPQkKAobHaHcYyD$-E)JKMr=L83%UB8*+4uC+RFI^3VOCq( z+i6+gI#w<+UE-nBIOrtA!V3_9hJnXv+F5w0h|ia66 zPPQugv}!r?I@kJlV>t=#Rsu(pC^^HCwh5{DYgEJBZZXs`;q9PbvJaA+n)fkNK(Gi_ zqbEU{X)ba$%f@^#?FaXS*7zfQUn4M(`IO~^i-7qIp3@g?nXB~)#ASge)d2yaG*^Gn z6Bp;W^$;{KFR+go_pCO3MrFb_x=0gL&10Vvi?a1LIWU@HwaW7DXkV@z)@WZp+Yub` zIikMf-oL%t%&MQEoMUo%LM|u>Odf8=?67@`Xpn>K)93V-AZT|E3dwFsb4A0OgFW1TR3ACJn+yB(t2MN7U-(wSyMu6(8UZ;4Pb$+yHqK34&& zaY}&$C zxxtENYKneB-YR)|)$+wQnM|jW(EV#h`TE^ko)aIBKbZ}aCRVC_QiEwTEErWv$E_#K z84QQmCND&f(HuShA#bj+&`z9{3Ti46b ztInJ657mu`fjlSN7P3|=DIc8t>yJJ~QxCbK=dnG{M`eF$Jk;UjM4)=yYD2bDyXA*G zhnqIc%1%N#?3;F_Kl2S(*XRE6Za@6>ZqETFWG_^gsB5ghOm$g{)Tx6c-HbOfeMQd# z9#eiz-S}u}|NXf*jRl5LoL48G&Ygbw6qpN*DQmYsfHE}XlGH9$lqd-zNuM$(KEfs| zka~OKWc@3>&m`Ec=P1!^Qe?!p{&lwrLQFhpm5Nx!L>FtOpE4Tda^b=`_6)2dn-!v! z1;i6q20D;+J*uG@Uwy-l>*ksC(M?p6Chxvh>qqVfQ?~Telru~tCuJfc#;B%@XxY)O z8+rQ4hCW=+c?J|+#`n$coL)k~R!~v&A0{BqGBbJ>hs)6H_k+|=t0%nZ7!s6BL&vSo zB*Bk?zP01P=pc}nVz|CnKj<_c;=UH;Aft+n7Sqet?b6(*J7z=59-z$CsT~$H$QO0D z=9Ie%IcECw1=;6qP+ zE9(S8xs}Yw>+xaOjf=tgq?7b0QGEYif(}JoXLMy;eL!XSr6n1aY$ic0I)sIjb=|wE zt=@OjdSjBDYg0)Z=#dukU9Jwuf9D-aBD)BM5_c<5h{qH^e*YvB4?WVNm1Q5V?`FE! z0A;g~zl+j153VTh{$zM|{J?jUka-_0p}dr{7n)12fu!0Ny|OzRZ zO+)TWdc9J_A7As^UK3mul=!Gaa#Me99oD){-#<)U4TZE|0^QT;xvZId9NlXX$2sbF zhR@^hu5F#z`^v8SD{_R54P^HVVa8#DW-GPPzCOMRTRdh)KKxm3)K`CP$xJ!JY@J+hvvdtWU;k=QD3Xl|hcF`g7 zc9ZwcKr}kvPt%O1#VSRYB?UT#xu0)=1fY9W0ELRzS@!Uk^p6N{;$5)w3M*Luj0>qi zI(nSb#+fMj2as7_tIIu@jjIT`v0kwL2ps$ z+w^N*X6;`l@YpMlB0C|P$vyxAvThwrD-V4JLl9^6?n{Wv^xVAvQ{RL!0d{g6N; zb0&^6bVMM3>lD|hH&De0o`Ze_su>uQ%uY_!0&Fcr(rr)~L}_@}HEDGPhW1tdy;BPs z*5*GAF}lzq0ARW4h`Udc)Za;bN4lrg2J$Nz@#-HjS&Cy5$#%cjD?p^|4^h?#1S{=!GGnFA=!8Qk)yl@Na*ELgD5c3Zj7FR4=Bd$ZASqzOEUd0asJB=M;T@*vJ+dh8= zEoU@b*i)!yL3Onl2uKHuShf{F~Spk@sIdf`#2^!_k|A_9Zj?W#{{1 z!gx(gqsAkt%+?lQ8Q1AG@C5o?xhUi9U85~-9M;73=I_Z=%uEichk7Y7qES&<@rR_N zL!kjWOy!2;>KVU1H}w(Kdw5UBYA=~VU;csJkA@$=)nY?FiVOcRwj%?QuFbU1!ynv7 zZ8ralj{xlts#z!Vs3^fvJolYoR6IYat(tA-*G5HV3(?*yWj) zJ4Z;?n+2D=Gx=ak!uz|E(@s5_(VLxt@3(}8cz&<0$>uN+bZ#9k`Jvp=T;S4m8zM1c zDwv_sKIjwt3OC}KI9dz3fGa!6u)?IyEM*(4_DSC&Ki$^7>aK3+onwGHVQi%j=n zeF}+h&ZRBF8$Z^Jd;A3nP0MmE54CSxiT_fWvSAwnPO8*Z84bL~)sAfwX8l*}V5;(n zQ0y%I24+N#IEz)WA?{q#rtp6;HYNkxK{AJhq%m*3)@4*)dQm5nt1L#JM0?0_`6pHG z2_)Bw|Aof!o3ec&JUSaHiBVXg{rTIA9Btfb4B<;{v^fT}+URqg6R!h7MD&KZ7x?g| ziP&E}4+>ofr2`abZ$%-!^=hrXJ(V*Vpo1|Eu-FVj#pEyP;59I8sKiq!+Xvu^QHg;3 zkgz~P=>6ZH`HCD~^#&9EAVJfha*WBG9ME(m3Q6aP<8Wq?L;zxu97ow4<3F%5mSKoc zXR&vdWoVm=`Yo%nC3ebozGF6Wc9zm zA>I}Qq?wTDSz%t*EePC>Y8w``OMpNbLufibR?+k!{q?3^g z(fY}|WBC_q6S#q;WfX`6YtjNTlG1$jU zR!n7?4fJCXYIrb74?Kn?c_6@IrSWa1Pb>f%>ISSxHz@(5m#M#uep?v*Vcs7==5c!mJLr)kk0iDnYtOfDEY82^3<|1S`k|JyJJ z(+H`%FcLOy{QGAzt{nz;0c1VmiAEQT2>=#_&BIOr6FwC*PDiD1n$D(m?TR2N5YEU~ zqnSdAuownlrngf|LeJg@qEvQ=mZQ+cBYv+_OBkb_yV#?t{C`63NUE? zi@cf8ag8F1`@3WJMi%SMYvLxi~OIWn_yTyLfDI(f!(8jSGoIt437X$ z(SQ5_9Nopouot-l?5X2xwWI$djFklJo!5hb|6dsI|F3_29MyoSukv^tAfiOWOd5m& z0cx&>^J+AUABbHZg6$uRmy>GBTtLlY=M(r&`aeI!|LNa>pJD3Li0TzQz=~bz>s+b; z49&LSZzlJ}V86=B_D2HNh~vpAm@I=7J22&KYCjCeZ*TyxpSAwc5l<2q;y-tUV8PVgWzpc@0p0MTuXC4aEn&}6y{;Tr?H3;Jnjp{aRB-ZZe6?D zgzRWoX3L+KrvK*u6KXtPEO0}RCU*U#4H~?#ZN{!{(QST?Wm0N1cXZx3jCcr^@{6nI zC<@zN=4tL=`5yqOsC8EO1OWM)+z;)0k$rE@xkT z<+(GVem(boX4(Xc8n``hZ{vWGojn0qa-JpXy|CxB(*%sm&D?hD34QxXPQVb<|PL;GcroFV8(eWo-xOvbf%(uw(?= z%5L2AdH|K_mMRAds}DNFfWS1E3ciAwdx25s2}PbazHYdwT6!HXaNtqG9$*_4EOVi` zug4z-vd|3$IOI7P0R7D%@hTjy5sb2{p=FFzy_FOBBK;HN+-n+Glyf84`}QAZ<^hhU z6&LqUK(sFQ70Ai620^*%m5{c(eTQNG-4atg^#Wz;*T5iAeFdUQhQPGX;Q+*&!SJ)w zH*9l5XPzX#lBcy|y#UmH{AJmi#Aourk{GOqOF)+ICjv(J6bQvD)Z>K+Q4sAOHp(-`Ps>lsN zJYUuE_Lke)R?z&`0R&udijOF`&jM5f+%~1PiN>XGf#bLaKuSgKXJJZ!@VY@L+4 zTvWqr%6;;dnCB=N2D1fp(l$@f+u8TmmX7`BB&+fLi%5*2g6+u(1_2?}NtUF0zl_O# zB7ZD;GYH{2y+XQFB7Q2%f9DWl(B^CNvR%4*Z%$GJi;gFgQk7 ziM{zo4S<9rGSZVDUTO3qFH?;lnP?N6q<1n)(eNr=pMUk7gVE2VrrTju;#~!s^2BFX%j8@f4zIzYJ{#aEJfSE(U zWIYVNaT^{%qngNERLp2H)wbp?kaFX`_H!j3yT8Ei>!6=Guz#eG#Y)jeN8__~NDW;A z2I~I91eza!M!gB7Ffu=RI{oj|BB3z0Xb0wweB9T?IW{}+FzU%m7}F>Z0nNwde`Fd} z!!qIkXKwh{U};zgt`W|aKG;APZOznrh=I)CW{OW&$fJJKrfLPxe+)cD_K#6tn87A# z>b$d)5r(u%w}*ysN6O<;$?81gqKU7jov=15{Lah$?*^qF=P#492K=p8B|h)NGG-QB zfoY&|xBL`=@lX6XC`WNCP}-kePRxc9+Rs+SQ_%U2!*c&dc-NkJH^QP3o~wp4zXKp1 zs-+G*qe`2wZsMp#0b&6+P8h~p@ll{JfGKQ%^dd`~MS6fo#h1V?DM-!(d=%I^e+x27 zDn@Ss>g%WEYt=R*(9v#u$IhCcp^z!~^Vq^!hLdh5Pc=-xF7hh$}ar_6j z9%3FCYt>_gpBQ?s;}CLR0)|JmKr}S>EMMfVkg6LKV@&T;J*T-%c`wLbc%I3LF!BJn zac)nN6cEMG3%Z@&2jOAB-xc2Ue`Q8Nw19K*G64Lcd*7p&5z=4?q&x?r#9N zI=HR>VblYi9m!Z_nM*O#GM88 zHNnWiI8Rp`q#I-(Lt)kQIboF#qBQ}Jle9#%nVTn=CJqC@T3nIeNrJk?KS6t(Y2ZFE zTo&ka0T>1(ZFyOXFve-U4_@ED^Pl9^nUKhOd1*LM#;iKaZUlnB`=>d9ITpy3^naMY1)MfJDr}>`#3mhpHD_94jGL@#<%V7YcpnFYn0U=A zetD4uO)mIpupd}zp*Mo_(5@-D;OOAj7{3^1vIbJ`Z4AFtlg zj*$MW(JNc3j0s@uyLYac5YG2-Iq-OV*cN|)NMZ~+zw?p{-SV_U#Hw4CC5FwSkKUwo z1tdsBu(U_W*UA*d!Xjg&%Iy(|W>ao62{Gmt{xV)7$sY#oO*y}al3Nwz&U zNsrNzp5{gHiTo)O^ZDt+74Ugv>})(CeiyrF8^e~@e)!TNmx)T!c#Ow0*K3QKM18lx z3P!FT`(6nHI0%A+UeOP8@vk62;`0)y3W0;}+Q1NG!yT92OwGRs;=!=jTt~ z>E08m^2Cljra&SZ3tKHog^P5#<$Nc>N>&u-&w(`g+d-nDY>{&Dv1CYX~61709+~Pz!b4xbb2;BVH z&2dL@bu7tT{%0lhpp5mYjD9Isv*?xQV2_5t=u-(J zHb)Odkfh7hR`p;S?FXXbYb8e0OYnE+-@~vKw(qQL`{$PzkE7Dk(FE-?3h&}3v0zK) z)jWtJ1KTOs17HYi8Bv)}^f_;ggH-`uwCL_e&t=$LjnWvBaVwb!?$Gn-4YH9a!R~I` z^GZTz>V*Fr0%_wP1QLb@fjFZ$C8fn*PMAM5I3%c3*%!d1W|JIdD~v;l`DTH0#s)_F zs^F1n(7}b*NJTgUlocWvF7bz8Vbb_QF%uD%Sb*!8B;HR+`SI*kpDh4fjLz$RuF_F} zb+r#LXSHV-ic~Mm8vyPzRgq_L5*9xJ3!QPhAbGAto*7LdvJ_gIFB19UIod(=8)vw2 z_c&otogLVObK-wX)NOE?S@F20BVvaTg8K5UnxXLdtmy^_R#mWlEOAY7M;rGOdVdas zox_+&_S)l)(}Rw|AFU&Z3mHl(-jm(Y6efCg`Kz*>)ohyHBI`gN9SOSH=21fQnhRk59Fdg&o z28c;?01WG?9d^)TX;CzPGrVwBV|q=iMe4Thn;kt?W<1O@?b{n)*3XkFlUQ6*72$f0 z(f!fIYMGHg3siOIli*fS%B%u+cfn)>!{8Jjja&@YE_wJD%i)%Wqm*LhP+3WN99D)@_;|e34i$q&9U#w z{4uDc=OD%{BC?6~EHoXoc9H7+HUHuuof%x_e~{ftTg&8OX8+_*bcZ9*0-ooq#KRZO zC*ho39C0HJA49HN^Q<<<%sFCuOsnzO}s{0T|Z9@@o9}>kC+Oel#ye;Ed1Sg4}OZ(GK_+>>%0dX z6jnDPGyX^V*$=DQt2rar>sD{SsXph{Wrcx|sB-Mn8(Vp=3D5Kf$-QAlbp90rYhtzh zmE?^~Pm_XwYXR`DwXc=0QOAc*6!2YH0lr=!Z}TSAjI392crR@6gv&)x@54oc=SyF_ zZDDH5i-nCmxo;S`ka4siQJ1LEOFdNsV;gD~NW^7D^ zlh?Z_5@&^sdL{fXuMa?LW^`n~kYuA6OtTr6>nlxrrzc7BO3TSfdS@|7=*aChFQ5z# zGC&>7UpT{a4eJl?hoGkCo^{Nq^joT3BFgCY`Apf}n-PUOhLoVluAv$RbkBzJ@g1fd z>NbD~P&-1!s+Pl4|9g-CQc4oEb^j@-5xJ)YN(< z_8D_~Y>U&wq3jCYEU~34o72qNm@x5k0{iFfw~nyX5?8C+3_zfb7fR$4(K~*zO73HE zS+_lNM8)1qzE5X&3!FC*XPS*S8%Oevs5}P+v3d z*C#QoxMnY7L_Ru@x)9xFN8!o|{yeMvd za)~tFCUEiJ9K+&^G){q<#V$W{6}{~@Q2sE!jH|*N#N_5@96r{A!IHurDZyV8Bfe50 z1aTUC;4+4_a(U=CE(+|d)c{NCQJf{t&!52&c`km6C{e)3D1k}?Ih31p)F5$RaB>qR z?{_p=`(=z#^is;~yXCv@TfUATF$u`~Me)S~LeP^>MHpKoqYqJ5kvA=EVYnpqzqq8} zh!-&yM02gIKSdrJ6Z;ZHo~nrdMvxvKFpFE(q~kmzv2;}SlS5y!kBHd=|9Y$uukrDzA%5*H!^3qyK7=320gPOV`a$mLw;YG|?<3mjSm6>j}Fwiv~TW8iD6? z0|4U*vVMlASN?k$$hWR)-ySq4sNNCwp_qTC^~vi2X5} zldis?ZTyuPvxL|RotfMx8~Si{)&7SwgNru5hqJw9;mtjlbJ$;*7Z+#89fy10&gTxf z_PBheFXT-WKOvhM^;AJNn+a~c?NVp1H0rMm5D6eq-q^rj1rvcOdDB#>^zlu0ttATh z7O~80q=@*p?mXgpUC9j-4dLF}B*ucOZ^1P4nrjssk=T6NYN)H$bza9$WLF&GeU(4N zPmI3Z13@c+>TdC*B%N3Bug~Se+5EV&@oH;YTQNv4y3gEUw_*G?&2+-)0$V~>7dR7?E$JpV!*HFKqSWJTb zq*VjTZg^n5MODror7ho5XRa#G(6?Kc9jQN!bbzxeYqooG#H>)}^0 zYu!+_PMJs{`zb(PPtg0mXu^yZXEQt(h@OojW@&Qv4DU)_5uJbZYBxB5H*r7E~ z1gYAwohS)OAn_PxtOh^9h0Q`J(FWo^D1~U3f>n5`7S-I4bkBlZt+mB)avnFQlOfDG zs+HkoP+z)^lFHgO|A>&@R;N8q_z$=%#JIi#pHC~nX?Ts{wP{ZsglHwWmuZf4zhS#o z@Zz=n&nn*GYRk@f$!s*DH+>PJ;^-S<%)yy0D9fk=7=Z*dH4_(v#;QNX_}lV_ zb3|LqUFUt?z=OcE$+oq?h#=BNHs)UrRxg7pJ|3^#DEq&s4SdM6-R3CRG?#ivZ+ZTM zdbYh|9^MxH!<+j#j38`_%D%R9a&j#|26=t|zkkJ65W zI~Lg;nq9#R*PMV8(OAvb(@Xe7V?*C#Lo`<5TmC~B(x{kYPfIy%yS0hJqC|>g06j6I z$w(+%;O&W!X-n7l9L<(hoTEP@x3ukI&)UgU2e8IiOdph{LDE?vd*S>>bF{Hmv2k== z+RP{jj^gxsZn`w;5yr=S;?YG>AyyDL!_`Xo4M><5qQaB}4aVA74UAD)k%cZZ|LD_I z^Pi-*=%viF#`LB!?MCND&d9cOnGE%6$CvB~#n)0zGqX+eCzqf8vt1M)+}0j=G~neI zwM{7d@0pTBCS4pu^b|M}kah*2j>R6*EQ5HvA%ba5p<^@7q@OzFPrFOj*s@l12jOFK z^82Z$sXXk3Eli$^`L1YtjP(fMOErI49M6nIVBBaT;-wU+f#2XQ@%{KXlk6y>+v~-& zZ2Qm2hQcTg8!Ng|A}D>D#hX$d0~&Z_Ft^;N`3zTlXFkak_Oyb!`8E%ng}NHJL)xrw zfAzs(QuyFT9$I}I=y;Y!_3V8-UT9T3pDiNBiwJmOLW^MW4(IF{03*cXp^Maz3`k%J zPGoApMbc`)^EB$n%xX{zn9^G_4WjYnGIgSCd~JV#oS|l|8X%eRb%|re)LDA&4W5wH zQJI~O6sA$7hg9>yTgcM^+@RxFCPr?GUqh0Tw&chEFqm?_Mgs=ZKy+ zO&%`4EDzJ?*eAiJjGRds5n`6FcpDd-;YpWhv~p=*py0HyXt)NJE;n^PX3u#e7Wjz( zg~W$tOH&}@PccLL08izhSmu$hi7|EfNfQX0cb7p}Q9-FV7DVre@(MfyDvy@~AxIkw zHxy!zuUT*}1v222Xv$^3?9~`x%H_8_R||Mkudq{h!oB;IcY{)jb4 zP?_roMX>e`GL0dp)U(mIuk4|_F<{)ldrtqff5KJqH2aEU7gDj4Xv6r`F6p2dQ3cs9Ym6AstY5_boi#!qc)lN+T%D_3dl zPgQHA^DvLUz%a&+pW$xZRS^PXPi+4hb{bOu7b7p>OhJqg3e^sAc!c1EzW! zBMpW2jc$X=H1}^ZQ##@u_X`lU6cb=;e9}(PlWpb@+fOj0++-wRMuHpPWl&rMjosc_ zUSy%}$T8zwZmWVa(R4WcNdAZv+2vV}5Tt4#m|ijJ+p!mW0bFr-Yr0SFCdJ-cruR;y zyL8=Nqb*@J_$Y4GK>H3(^(*7W504&sjBI+pc6$XCjyRH^LT`R^Jtx~p9gRXa13Ze= zHqeWIPIrEAy8CSDVtirq+rn9mzi}DOiE`)neDXD#)PS-2H+mcOw=){KgT!H}rY z=J2F3FZFHFAUeT$Z3R zcy6|r2ivR*V_L^EL89FW3iv*NkY7o@1H{ z-w84Am#9EsT?3O1dbb?PemJ^Jl(~bq% zXG}*lr`GhQynef4#)1;yhcLp^iaAZ{yWcYK8X`419{XT4b0;xhl@Ru^aA!3Q=^gh1 zy2jBmqsP&*?KvyK>O1~O1>2hHpYhoDwnW(aoi4|T=;T^Q7ufu|6}R@Wm&?g~TB7^x9J)Rt6v0BTew)qUQRyJ zRYS@6O~>^1X!$O<(rhe4(fU|*gNwp{x$B!kvieuX)P~0^=mzn$EZnUT8kzx;4_S;iV#nxVJkMKNY6|rRc~N)Z8I)~^5K8g}a#5FO49=34 zkGwiO@H=-Avn`zmk+g#TIWFx4_3}x2s-G+kCJXEVIJ8rX&f9($v`kj*oBq=9O3lnA zQt%qr&c|_?qyHCsZygo&_O=fLA`Bs&(jnbQNJ+|TbxuC+ck z5Dv8zFc%m2y3sYVOj4M@P_d?O?v6?2&l8pyk;IgBTP8NVE`4u&c-#FQ@uSHiu7svw z-3Xz^D#>WhFAHqh@}A_AH*f8Oz_0)K8sg=aYe|jXo>!fH#}`@Xq?9*;Un4d+cktG} zbVS?XF=#nQTW6F7LsyRdV!BZ}%9>{;OTp6DY*eHLSA_7{fE9N9iO3&UMW z@nScg{wm6x)ZfV)% z-yOG08+-Ev=pr43X16m3Bx&LYXJ4*WgtxS$Y!V!;)IPmWse^SII+6h{6obm#JG-qM zW`Pdsl@i9<{ABF(cF5PV z*26)A)!m$1v2J(>cVb5ytc!$p_C=;dj3RSO7jl1Z0eUV1QcMEz-A%~|*Rme0;=z2O zJXQ+J{OIxuyzbCb&Ixz?j}za+<(FZH`JPXC5^Y)X8h6SCx?FE(1X+p)X7+Z z_7WZL9yr0xt&lYY-yc}6j+|{1V zKCMkNNwzE0#BtiOu~EsiUT;Q?ow_Yu!@g>G&Zt2Rg(L`30~{8F9HoFR;AUusS5`?VvW87~@SO}1>+-l(jbgrC zcXEHb^9gVk;t&bQr_!h_qH9ri1BW)6+`w7zxkGg8?LBrI&$+kp+W2sXC*>HtA@)rg zPgWmxPTe5(?dy2c|9X0a=U3^7nEq9xNf{u(qzwd^zUZY)1G7etHa#I+?UWPtH%M-; zVkW`#)&q?>o<+TRwrFlzQPSaHH!}$(Y}Lcp0a4LpEqN+*kE@dwp5MRvXM$B=y7@DD zH01e?la*dgx6yMo#rj>}w0t6|KNGCY*T2N%A>Va?3eyZYmD$zr)<=sDe=5jWi1j7s z`^{q&E7YFMZw$tAy)6(y9UY|+PWui6C8qLF$--B`#Tz#S>uOhNrfUL-9rx~*|MXIR z<9BlStQXiLaNNILS@EwEvQY)Roxj0ueVDb0xJhHkGGo!*m_`(K1F-ATU1D(ErM>&R zvZuS!rAElaZ$<0Ycynv5><9DyV>3kV z6vST+I(78GCBd03y2s0>4c+%$khrMjTBIMY;(pE%*1FgYMAL4*pZS>WwF`Po;DVrG z0>@>}db%Z^(n3tZEy`Xq61RBXli4YTIZlzUmHh=?pJDy+P}NLFLmWAt<97}PgBT|2 zVu&$9#9H1AgpYx4d;=x+y?W5Jv?XHSjD?B zj-#a=&3K%qV^*3bTdd!^wpDmICcK)LvE)H#00a*3DtLm&5p?}(k-$DUV> zG@T2|fe$*&l>U)Oy)|3NaF~sC-lJL%l zrVt5|?poWdFIImp2+{7p8)*#aOhZwX4Lm=0gsk;HE~PoA-_;-B`VvzYL%vuM%hSfH zxBlyu?A>_a@B!T zV>F`aoZnz;5b3%w=x1LTT`pQlDJr8ww!19>7+Zi-nx5Ex5FjFPH1Isnz(MmhKmvl zo#73+!mp7YEw{+p-Emy1O&2rAH&S-018(dU5!!=;#F~)yhfO{Dr6R&slhv_X|Sen*gG>p zp9+a=QT?sssAdnhkH-FKLB(Q6E7+`5UY4= zyX0i|+<<>guIGe~QwT^Bfz(pkd6`rsvXL#4)UiR>^)Xp8&JLX9kw|05I}t&`44}%S z-`Xku4P;9{UUDfqm(GNE;*SidgJG;l@_53p#u<%8;FEc7h@GTO{E{nOb_<^9YW{Aa zv+8fifH@2dMTy%y4j5 z;N!O?txI$j(&wM9SgOYh5hk*}lBAc1Xc5I(KQM+P0sn20w07}KmhO?Cyn9jkd-3j& z_yB5+9j_;MQ{tLt3it23}q3vEVz)f8eC zQ?zAP01vlW$#pgHuX(Z_BH|J8!k;ZCqQ!peH4*f_bfmHlN07!P8wb$5O*SgRKXFTP zFh1wd4IFx!8g+7#7KTEC5Nicf5dZPRNOMjL`L@hB#;t*1gQ_^p}#waIkT`X|3|G`nc&^kcGX+vqD z&tGuyoPkc%F~Ge)Ej~(fH=-%>T#w;2M&YUv?3*Pjtd)*Ki*NJ{=twZguWC&aDuY+|FoQxFChH@^FU^7t}C^(%1vh9(-!Er+wWxc3aiK0=5geH32#iV#a6g zK{uLA$GlTfTHM|R+~gKpwYMimd&-SXxCF`PfvbHg%3jAejRkVSbP6`+0M!dbvG)D| zsAEOB3BUCQ?3bsyUO#&)9bR;i`#N}O$gDwN(c2WO*fisX1UtOXW|$w_a@{^~%Odr? z53rxi-YRTwqdD`IzyWV7ZMkcJwT1<<#Gk5AUvgH_r9EOmX|W}%natudFBKE5de^okHhXU)011Xh;Kp;n%hXHGqvf|AXbuJzn4_@mYqhIn|@iy zFRuU4DRDrdncZOe#$2PRw{T(NQR*PA-oZ(h%}9AcR6aTKttngctH~-ROph1>5y)Wr zT}F^>2@1BR@@ZfFOZiYQ@A9|8Ru5_B7vXe3T z)%x3|2-LKZjAdC@2R2n+e5qQe6?drNTWtbDxX;{EhykIBu1esiCVbv*%}{TgNZM*o za*KB=Bvfvx$hWQ8D})N8$fiWSxQy^S6hZ0cv(>TVL+i|-VWX+HuPM?YztMPNcSddp zveoD56Kv`~n&>%k&H3CPlVV zFn$P`d@233xVuLxGHG{Y#LUaA;f8POjXq~k4C7VRWYR#bqs6SuWAv{nq=*kX0}Vjh z*a-cXTW7OhLMSC#i}D&htGoP;nUtT@7JtOxrOtece?^56vLW>NTSiKzu6IMB9!F-? z-jkhLnBh@o*_`x?*YQ330TO4|lVALU3oyD9GN%od?Z8#+ry%+Xc<|A46%(rh7Sz+9 zz?e$?LYm;99`TmXeOr6$y5eayMl(G#0gWrYgn$}#Pt%9ya)VLahs)fr+&sR2Q@jrX zw4u%bbt4vfBh)Dv)^L{&i|_T0mSuTfH_(U*i0T^Ex=0r5TNpv#L&-Pk>2Irvg@gOsZO0LivolkfJjo6Hci%8YdnjU?0BY$; zu~5s|ynV)kNm4I|j76z^iv-0Q2iLE*mz!}360;W+!)4=pT1o1aON1vU$K8+RL>UvB z^I%^~=V>NSmpFyHRhfY+CE$K4~1%3@D+|4E^ykMLX|_AFi79r)cjI*G4&J|#;PzYc&Bz|CU7X-5Hn+i;eo zqEL1Rce7mb_<&9j{!t<2-* z`|kr3${T3`j+vVvLA4;Pkzh7dBAw7E5l?(%As_qJ7TjS~_aUPdYpf?!j0qi{ujG4h z>0vY4aJF>zH-*R$&^aD5zrP(mv|;O!CD25u4KLqnF0i3e!YK{7YBVS>egzm+%~f@@ zH{o##e`3CxL?W$^NPcBfAlC4yW-RDfe!>#QxUeF7eLTo`{= zZ|>gN!L&SY^wZ-wrb2u~9F4`RdrZ}pABs&>-$cEVY2(93!Bk3`hnX9G`6K*0r`nVGQ};`1GI4q( zzL1J;U;Fj}yq$n9vFSq#-5tQ^&uaBpd6%4pSE@VgGH;LOrlDRC2&5#cuG>3Y9!_^; z&#V)L($CJu(A))rGbf;zyc4Xw(Ud|_!r>@IwS;rzJMx2Xwa6{W)Kn!<!b5byveb0eVFdny;j(3y~7UYje)@$<;uqo_~WIV-)lngAqqpNNu&RQ95R#y78$@B2#z1*NbM5e%#a-D&AsHkpi!Mji zIJN<8xJ|2THFV(c#O%e=5UIriE+y_Y4>q;=+;WAg==A&$`$SLIoZN*xp276uPk^nPp4xK7y3Y+7XFk(Os}L6-+s-ReLIHx+Buy9f22qCLb}PRKM?Iv z=zRN99C(0Bn}u1#t4P#ES9QqG1YT(ZUYb&C?%K;`B*q*#cR9nWSIV=`9CuaI=yJVQ zZ%u0;MZXV|WG@W^z6bL{ns%{>9LiVAsA8i3uvD*JVf+zkLWrZHQkg>bj-pzuP~>!} zB?QR)JDY#=MTEy%khwADmYTwwH;}kI3gTzN)>a*< zhMYD)V;cx-K5N7wYkg=gb(s8jwH!^tsgcmKrSU18vJs(hJq= zHQ2uZGFC9K=q)d^RBYqqXi1@w~1CAY~wcueveeZMLvU zI>*>n+%3CI;Nxw-29D>AhS@Leun5lrsjPcz2@V1+i@upM@cgoFV)M;POF#vuAwDR4 zes-Eg zXdE)1Nn!D=hvD{V*aiDZOQ{%Ing<2Hh6ovRs-wFgcbQ63SA^zXV|@)+O&qxkK(1E} zFg&h?>w*_GI);Jz$ulV%*&M`1)sYrBXH|$E&P;n!%y~X+4_0Yff&|znD~|;*_YqD9 zopkKtuZ+SHj3Rkqf7=Y05&5I@@Hti@MINNZJFOa^+`v)i_=LqmZP*r*Du==Nsaji8 zEAUq(zev_frVx+52vcFCDl@`K&~fvqOisQ@Ri8Rjo&$d$6aUpFzUkB$qFD2?W*88n zm%Vu^MTn(rJRv1Ejza9#m{}^+QLdCnw!c6@Cmw5vA>*uTC?xY5B~X=KdV91Zemvz% z*078m9%8e<;f0}~^;Yq+=LftkjHau|ugvdHI&=cas8_y{|9TAO*P5iP=zK zQnf>hU{ZN2SAClDS!?|{>qb%%C6ipobTFTQOVDiuxHwsq%k40EW$TQ)d3A3$82r^L zwX~5JXwNq{(N|u%Oh@3zNqES2`|yv(O`8(7vR?Q1GRat)R#A938Lgb9KKag(TcR_5 zAayq+fz+Qn{od}R`fVW|5FKp#mD5WGwEJuQo|D{YCdoq&=~aQ*FYCIDMbgMmJf}5P$f>iciud&^N#7{P+BQ-)%-3pH5?=n4kiX=q$KXT8D9a*wa z#ya|m&M4Cm9J`-uGyEEKnP=q}H{RS=XTsJw7DQHWPmdx11z>jpDQN8x^{QaE)i0f7 zq0eANnl`o%_p@=J%6Y0NGbq$=4;*Zo&G`ljar(bG;y}EbT%mwvZa7TtXSr~E*Cy?4 z%JTVk5anv8PT0@?mWvJ_5>YMgZ%v!Nsl|%TM(1-X;h7}&W?7%P_D-F;V!f7ZJ(y{< zPJ?~1Sr4Sn0|S?DpT_5 zH2Xpu7YcHO?PtxB{J+(qTFKp{fI8F%N9gwl=2I0I4zEfLCq+={%`#EJ3f+;1RDDYW zs<(u8#zyL%*-q$t))^e6%YHjSDM+icFc!gI@h?`cU$$o}d-7dBR&cl2)zV-h;p{`lsKUVV<3dZaiVU{q%{SqL|J%!%Dx2CbcS2vyR`KzMg~;DN-QK z=v-E!hT1vI5)RvV#wGh)U`_xTqAO2Y)*p6X!gwtgT9%cHd@1}bzgOTR#@DF1H+pC2IjZx$wZ2PiDWw4S!CXaO2S$R8EAzAAF& z-}SKWPlwC%#g!T*Lvyis({Hi-E3io*a=gq zZI0?!m_AClP@O8k(r?aRo5m@>O*q6mv7r&(4obnROTMuzEuW`Mv(@V z(T40j`Iy50&ywI%hE!=!M7qFcJ_QBLGYZ*UsXXayNAI(c;w1*6|sl zu}xKT95fRMphyz7XClZL=0)!Dduj)RKllpAr*?Ya+V-VxFJS3fwa#rF_I0Hl04jY} z>=OJJ2Zmc}FTy`KBJVA3AyTM2Q(TmOzz`2<7HVwzLpONm`$l4Z#gZ>(&j%i@m=0$^c=a7#s{+htXooH z+$mmJfDM|08=?}xYzv(&RYjLM3c?g%Lz?#`z=reGBVDzd^+;$-_6m1zgLHO(=SCrL(b zuO_Ju?sfy3B~6=aILx0)>?Lx{fo-KiY-DQgW%lAGXs4=K|FB7p-q8JQkW^2NWv>it z4R~fW$8jujjHjG^7Mk``zwTV%H*b&~@CGv%?u!`$KsfHniYHJW@2n+Dyv9!Zl@ox41!1*^gABNj>%t@yxJWqoZkZY$gb^~ zVdZJr*hY?Z<+@F9Y_Gm*+z(|UbfLf-1Yy)zKnLd!mmrbWFAcz!Z*}jfwR+&4gjGD1 zaLi47pDqc5pb;ZKr(hZeZHku3&yi&4$YWCM1yj|Cr5A#~unwm9R?A&GaH#2CLzqVC zRjZl`>MZdQWS&Sq77>e}=mX1O$`UfZ&$<$%P|xkCzAy7W=8bJEv+t9U^Eb9A82klT zb+nCVx9P>hX^bcun{f#4sLU}UahaEA*`5MZa01 z*3M&U8^6B;_TRrf#M3O4W4NxeC=h}-)M=~dPk=%q8p zPmr~HW6*1i*D3KlKm9;$JzuWB{+`^fd3ZdnPM=G^vy?Gt-UWXaLmqsWcXdzOSHI}u z;DQFwJf3B^LVVW-+6v>aRuZ2Bck{i7_hB0tRur8fa^dyFfI#!W{M(oNmCHrT4x8OU zhY?bVNc;-3z(gaVk(mcF(_+Vrb=={zc5Fz!5)ubbiOAK81CRwdrD@5J-I|j4;aIr( zBSMbgq0|)S~uOa zAc*^Cc1rRSNn5UZXF}HY#{$Q5^ZuYy%kChxdu6@%NNYg%=ts$tNbN8}w!Mju$yy9x!}+x$ zz1-w+ZWlsrTH)vMh8C-yiNVQQBf5=OUSFDdv{kGj~?G{&SjuJLkxO^VyYLR!V zX5xgAZnmlZK;*?K-ieiBl5>&7-uxEpO25U%s-|`Msd?F;JJ}&%4LCGr0U7H)xlSbw z1@79r)-Z=^kVKCswZ80$#VUTuFD3dr{82(k#;A#1Gk99QyyFNGCvDKUI<>x8+<>AfqF!WXFMa~cy4*tyEL+-{;!4Zp2mhm->Kq@`o0cEsM`Im!G)z+obYl~ zA#NWSgN6(q^7~9RLiEjUP?*(n`W(E*h9r6eg^o6%Q~Jj zdt}r3uH1SjH0ZQHx*%Ad`gV%k35TP^BE3%n)1_$iKG}nh=sAgB31JY6JD?5kmnUOBRw^ zsC|b71}-Va&(i@Xhn1q=B%3`&*22(3I7i`^yT$Qxw|v+Q6ho=?)LlLn_$VdTKn#Z- zv5}uC#{g%iAi6dGisr?=_y$Qx2I%wk5j+H>$fSo&Ibn>~LyXh@@vr`ExBT2V-+IHoxzO$)B=JcrRt50Dt%zH56ufI6i$Y z{_*FL>E&ntdDPH<=HGryvAW!Lu9w?x1=FFatM})>9nAmu?SK1+zkft87%mz~JmPLh z+uRmC`S;KMfBp7<{T=}HA3<~6%mTp1N1k^7bHV@T&j4}ghv#M2ARDU~Pf)&G@b~)t z4}bCU$3buA6)0TXDUqayq3g)9FS z2LFd`9YjiIryVHPqA<>wkv6fBU~QydW%Cx0;`zfd3X7y$g5+ZC%s(e?Ke*)qvF> zx*<7rLTM45{QOrwFEA|q{#TLtzXruu4Mu33mG^v%7~rgQC>S|-kI-{DFfRRXU-K`2 z90aRaB+$4uRf6GwJav!<6mKUuQ1|=W%h+}oEWFXyNI(@<@ff5%9jxir_QA^E{sL;R z1;8qL;>8?*2Ibs>`N;};F>n6;FTgHjfL{2B`u%1~iy>9XDX^x|$@MzPfB#K-f>kWk za77;QqCx91G-yqibGZUl_R1gr!3Frsb^PZ^4Jt)vp9ZI&m_A|@i8pPb&o}bazvl11 z)%T#!Y+&|cuGSpAqelX2&3@GUmqB1Ka8Y%tQ^Yh#*T`3#LVwWwjsL~|Yz5Eq zsmhh-5hy3FsyWpuqd%w}`M(I$=q5rTYKv-2{*$hq5*F z2MEZc|8T(H|HGJI3#a{*LVrM)4(2dCIs3=|BEX;@m<4KG*6xz`V%+g(ESKt*A zrf*<;!}R&to+Z#VN>0XZyF0_J<9&A&h$c0o!Sf_j_YTC&3xaR+OCMbP9jZWWQ?n>| z@ez4YyKzkdbUlowADb}NHDD3I+ZlZwUym4jFC<<$>yFRbeY^Qi(4RZw*_i#6cXL{Q z{ZN|dJ0bqzvw2fA>HV|`^iWKdrPkC}YiGbyhf0DWnxaQ+P`xD8nxpDof9DByb0ApQWEIIz zbq-3kFi?dGntBfDqoPE=L1JaL)fSdqQ3U3PO`9)u{8*<%d5DcP_&+@uwR;oYB!96Z zA7+ze%)y7;Y;p@e0#)EOG&@alDZ^t{TI%ga$GK}4EjA26cT47K|53T)-fd6+N1^tAzO!h= zFds?u9QNo2imjG8?0bV^Z{gPVAgF{LGJsTq&&-cE-Ks1NCZHy5M$g_OzAF+WE}|N7 znFxV~svTNYhIb?#3@uNc?^lKaVIo$a`Q=B?!3$|Z7rL%M@YpaQRvn4pYT)t3h1+pv zxGGZQeVPPO&`=RP@!Y~tGg~01_$pgy%7KIVi3!CEj+4ET=aYJnVUf6!S2i+S`07yd^dkb=1Pe!(0KB@EY>#@&;o@aphJ(-q>B2)?k#Wx-Y^}> ztuwH{N*<5{D)%v9k6bqZM6jyVUTHwXipE5Z0@lUPWzscpH0--2Hq>aOTQCNmRAa0G zr)$FclgW)H)<{0G_xXapKe}?gLnbN z+%n8J^vqa!Dd=B&8+k~99 zKR>+#1MDR7lX){hnt&0DEOcT6o|S$;3iW@$E&p*Kgg$|*S?gKfCBH~7Ffq|wprHmG z6KmE!(#dL&K3M@0mTNLMWHmtxU8U}HLGX?s6`cA}InqwYe^sv;J)xF$)crUVNO7@; zzEHe5+@%U=L(A`|>*5dj(hK=wSAM7gte__fSO>toCK>#6MQNKmeY15DGD#JFoXXde!nGSM^IGMry(KB9cG((d#qZ2F|jNEf;+Ab7d_* zT8nGzeiI36K)PxXz{FeFoAS`a8{N}N5GLDS!EHXbU3X9x6bDXK?i91KK-^E*bP*`M zQ`PNcZgi7fduCMwpv$mZ9*b}^e>yZ&`S1WO?-CltzPkVj76v{Jz}00%H;X`^%0hDv zXbeHnik2D!Cg9?^yk<5{lBX7u>rZW%;hf&fErBiPE7|AVXsH9?N%onC&wki6gIz@f z-HuCc@oF0AEeY5w`f8K1M<8g6#`cW@jux)4sy790b%Q^_yh~<*2JS3@wsQ=M%h1R& z+dzk$|6KKvCvLhX$QLC*wLvS)L3D zS@a2d+-h?t`vPe#3ZmG>0RjM+A>is1poh%_1-&XR@ts`5@?;F+S-BSj%!Qv&ypC!5 zdSyd)4r%asIlR^c;YV zO?xBeOy|89NAf5znGv<2$j}^oV^3IObylQ{k9<1u{9X6?TKze%BcP|DfQzyxAU(<6 zEm5B~K4#y3(RU8)%F<~%QvlH!h+_{gx5oJ`7*y8g2`lT{?J^CP=Q;sJs!|tz6ZtIR zYOk>|2mOzK%7FYgi9m|@Ws0YKnI&>Jban~?;aAI^&|9n+*jF5v7sWL(4eC02+ExML zs^LI8n?BD#pra1cT(xncu&71AWiBRg6%AtM^0@SWg^vl!Q2#iQ-jakg|6F?tb z;>*Fu;%*5FSCFE8!La%bEls_39UEuEyVp1Oc3wJz`&SlJyZrf9u?7(7D2ymU%Wb=U zSHKNPuG@XbP#$+pmjeid>5TgA^k~EbZc_Ob zCznKhgO`f&fCl?~*b^da2yTFn#%P8%t6-DoGZDDsARRWVO=!N1G9RSb9a!vT1qBjp zcy>Tuz6^If`Bj;{lvP&u2LWt^*ne3`mrvgol1P%wO2%D2h|B783k4^~Iul+nxe0&d z`W&Q>X#)MJyIkWyM36sX0HQJ8L2}I>q%tXc9+UfN1PGuQw#j937iAww%uCMarj-uH zWm#jTR^M~2^NwX-oGxvG`%0ePt%Y_B=xh$(|q1=`IJhXWLf*wGo<4VqoOZ9s&frpEJ_K zug;ud?80y&=JHLNwxR`6%9+y>acMO7p<*9l7m4mRazdgMmDC2KhkaI7Kc8 z@;=HeWV`xwyX*10KJ>g8KIv7g66dTE5;Yct8j5pkA|#m;Im`#tbo=Of^3t8J%eqg3 zOB)3aqDw(o4hXeCJ646|sv>QFlLPrI{YR9Uod#&ioq==W;8;YH%hCydj5@;8#bqqr zyoVF74N|L#8SkaSqK^?H-=|+4T#EhRD6zlbiU`0XR%u1Nmr3_hZh?p*4>H`^XiFWr z^^hEW@U~?S%bFH44dpyUD~T*i z!1biF@%ppzsIa$TOaYQU8%^WP&~y@VpgQaF0QQ7uEqLwoh-qL5%^x*znstETTfSzP z6TT)a5Go<0h`+xbCvFE(T-7JbVc}4Q!}a$9ThCz0nrB2#=in-eve9H{Z@zv;=}#-p zgGsfZnmIQfJR*y%v#g+%vDdA)8>klRgYN9&fKiTQyp=vx?l*;uh`bNAL`6(OW`9-R zHM}JOa0~Yh{Vbh7A^NgyUVOyp47xAF2tA#p4s-FFqeFq{dwRLuN@=^>1Vb&bP^zg5 zRy@jt;j})+$=xMEv=rH05NIhPvE4s9k8>HfXiNF=Nl}F z^`{Bh?92*eOVJsvl}sofmWWq%D2+uW6Ke@i2Whz+m5P9hl4eLa4(5ZtPH@0@Aq2x3 zekvw_`>a6`X%XH?B1ds;OKDp!?9L5keH9=~04G;k4o-e=l_I-Jll3`mAJO*ZKF2AY z0zGtPTU^7K0Z`XPooeDS2vGDa2PFFmv{pA2qpfV3DBu)utG6-Ce$8D}eD2M>R8wIj zwcz@XHz@-o4n~qV{@N=Wp(zoF=kS)dawOOPkRv5E6Lz!{Fgiw$mem1$?A~}>><4fG z_IgMq2|1P0!2%S6G=p;O7FH&Dz(Du`XD)jHQ)u5ob6QO>g2;`IwK$jMNwcr9u(B!n zFEMJ1tqBpAunM*@^3X$4QgaEq2Z4$C>JRe;ECKy`&`t5K70f~dYbik>N8)Iah{}=C7P68(brn zV1_Ef1NE=5N=HP}(kYiJKK%@_2ypU|?f{aEH zFNn{z--|1YqBED>!FXk9?rY*pN12uLdf9A+BLE%mOF| zShDs$x{M61Pec|Cr$cK2ttaMm0y`;6aWrFY*;G>H^8OT zsq_m~9rj9nz!B^^ut?5?#9^cXB!UJVBzh>kmo*A@^uB3`I_-Yz+8 zn#Y83pL9dVCaVC4yZ0%vq6+rS-7}Rf#r#&c|uk zDtnwVkTO}xVHchT*Z#B-Oy9cOvH_f56zrdoywx=@5;i+e!Zrexp!pTgcirwA_hGl1 z#&zRWjdg8}gemNXmTvYzJ%9uVLuYmOeP6zv7z1PgJ(xK-9Qly>5xLzd%+3SuJpXG< z-O{{+*7-}6vKV5CCFrq|E1J58K^8cc-+=l&X-H5eVa|Pgwy@Dv@T=+7PrI*ZV&`?^96M`T<_PSH*wBSVC1lpat74z zrjEXO?K7Nz*7oJ+O$Wb~S5Uh@E?x`$D_mOW!zFgm@vj6I5T}yaw^~4Xv`4e=0_yI0 z-LNGx_vr5qHlIPo)wbzml!(wXm2k$SV(Hq9Q8p?8C8cPDnp8-iLz%r+9EJlBryxfA zZTR^&5tD@q{a}6(lUo(|Jp@MBltyNOo(7Me`eV~Hn0b}>`Joa;II5ti8z^F3oB;~O zvzgg%Adz^?ra8{_0S|K+pSPIgga&EWNT@sDIbuf52#QVbraMj4#0u!D9}D#>j&zI! zlj<43t$N@GYhl4y#oqQGD*Eq=D(2~e%lMb)^{Yna$NkAx41(pR@5MmoHgyP0CO>xe zymR*D_kD#`+<91g@2}Q~IY{7gk@nEr7!Vl%MBxmi3O+{*SwmDIS3UtKImyQbZK%`) z&_#MZ#+EAv+viPZxQs9h3abR#oK8UH@dr2w9=vGHW{$#ww0{kl1`z?wqP)rfV3PVO zJ8*EZDB;uT+0X~ts*7}v2nD~5T$(p8U)g#?nwTf{gS3k8=^SYgwFUO<>54Mv~LUNW1$=L=?w6cp1aWgY$~6^DU)h-493cZ@l%?3)Q@@EBjbLL`T) zcNH5#n&w#muvC(P=Vh$9^be64LXFgxyjBPFt$8~;3Wz^G$*rZ@5hcPLzWHe+VC>!R zahm_G*_W4kiPD+OG#J2$t#KS9G5e-0$;LKJA~etjMn;P6HlNG@(FY=k!y z`J-H|rvY4y+o6bjJb_hQS^LY$60ITQ{R41;tg9)b@A*yxh!88Quv3wwDe$`k+K}Wi za*T2SZCHrKc&Ii9UI{*^ho@zLVgwQ91e)cv)-w&bR&^=jV2E5rV^UdM(5Elb7Wp)B zs8Jk(fUJeTkCtN+X33#B`NT2i@bIdUxBPYxu^;ny;$0DVS0rDVS``?&wO;-qG7c*C zxdTexoxl*o+cNi9H03sL_owi0o}y`MXs|d3Oi|gDw0fcC>8;HTIMjZ&ie1Qt?Ef4- z@8263gq~Q=fBJ9GjLYyIWRLCzmuVQHdm4ZbRD24Mg{q$n8?Za0pb>$-|E{14LKiUC ze)I-ByPXh7odZG|^;Wft(t9NuPNcdl=x{OFuLAc60VXDDg(QUpdTnb6Jz<+>)ewuCg7!pdP(v93}C$&CB4*+}0P`})ZPj(|fpz+*0I_8s|*s-=S zx@J(>paFws^o(-=0Pt{;2cRy|P);62S5v7M+9T@#ib74F|C*k?=${e*cv*l@D42ZN zHHPS~B(H-SHISyH`-%zUi?VKlhjiFR4NB~2N3nL0mZCG+6RR<0U#B84yT9?^+F2?* zXICN|8&BWl<`|h1J}=NBxOtd_+=_O|@Vr2Ga_SCS1=}{3z#r+?lz35gx~XTSdc)P&8;ygXNy|2kJU8cYH{d}I;&2N&RI;SGWv z4}TPicDcGj*Hk@pO+n4Xo2CY!V&bN*jaPSM*k0Z^WP_?~Cg`^UNcb*evjH$oqcH$) z3*4g*ZxrcyX#o_JWf`&%b{pTa33QQUc_|pI2;p9k6v$jSb3T{VS0$tS<^UI&Fy`CJ zN>ubfxm^`DOl@aJe%&kv8`8$$I=DDZ!^7B`N>E@LjgpnG#i*L4VH8CBxoiOAA-%^8 z0wxEt_A534k6R>SpM;CjX#&6ydMrM-HA9!f5wFqX+nVA>nc_$=d)rbEQf@hL?83x` zjo5r{Hoq|t#zx)O;HT^g-)`qRkpRHj&g+>YSfBdT0FmTOAlD3^=r-1X452CD>1Lt* z-&9K+MjwOgCGbwx1WB5%Ahn5I&S6%#U4&-|KalODXWXL^G_qm*mbDf27#mr01^~*G zB{PuBIss{rv$=64|1aRCv~5~{wpNAiC*H1YL8HppGWrW`5=oyG>w~~obl+mk3GjX< zvR!d;ei9ZfKE`!!Zv?a!#vK08!?%e*MAd=$qS0ul<6poo;TmxH(>@hwSOuNcHJ@=1 zS9$!9s(*E93H`dfv+#KT96F|&Wj$AKQCp_nP|Z~^`>_ZNGvy*Q z;($(f$N{q=KdLo6+6bEm4hH(JyGS`cvWC#0n`FrmSe=E7??DZ-V+=YJ)&`L5(8@Q? z&p2x#4gc0NpZealqAIh^8Zlw)?rb$ZTF}%4gyj`NK1Ej zcXvuRh)4;Dh)8!!cbBxZga|_;ph$;7N{V#XzQ*T!-+g??@7T}p*#GOz%-q*?##-xK zrw3dPaRb)m;EaM|Yneg9IcOU!|2r_^oKg?y>jMU+CReDmnAA&X?y`oVWlT+_-=2M7 zUkmgs_(EGHGZ~Z)4OGn_4o0R!8XSu&=D0pkvq>k1Qq`#i z$QvqmPgzB@FzF8AC;;%}^(>%jiV)F$(f%va5nOTd3HPp{6d~|JS1hs3OA5cUC8p#+ z{vEd|J%b#24SSUUd84JzsGNqYyV>qv&_Q%FIs;e@Ihu)L-iQma71REtZsU8j+Cc*j zE$VjKCFHKs{yk8)F)vofA9zhwnm-VKGxjbTfX(m0#Hjb0^(feJCmJ>yjM3kTi~mdE zqu5qiQ8!Cv72a(Os^k{xab_pASYc;(Fuwlu+9uY+`ReG2?BZnjSDU2RL<0~ip%2c{h`-xM< z@(#31QID+Y4hFUI!MrYg+$+!JT>D1TfT_*vy@QZJoH{c`*;i5z<($5Lg6~uHGT)~< z*v9o=N^k;P$DgPyk&`0I>!;KFVC*9T1y`%8w)?(zgsdMN229%`L~b~54>-*Z5!V3l zdsWULR2AamB3rdddX z_z%X*7nEjb-^;dVRDt=RP3oiWBAmi>o+2^(?FiYSDs}KkLQNU8&0LU1J=rK>Zvm%H z^yJzcye=@K`E$=O)Ux3zTDIg~AkN6erF-sSHZe^SJWO7;F?3HT^yoKT+eoN|7wIHx zuRoGsEFyZ39A13r}-=-i#CSZo+f)SCtBgUzY=p- zh63J(K+zO%U;h%jEBBGJ0n|1+9UHRm!P>rBz?LiQ>b>$QV&edU1Y%=XP*we5LeO9h zL98C`5J=y<7Yi1FI0%BFvFM5KpFk+Dp_&sfY8JVSKNGzQ@2$2Ti+qR zN2AGXi}W`~FzQp=l|^DjXK_-W_W6kN>LVDATsV6}^R&kV-iGY~VgF6+6H0$ECD7u2;^-{L19~Ct7`jWqKgX_?_(c4@ zuxcof?n1mwf*x7QAn|{v#la)~_?1FIM z8Y;@RXshBF218yc-3WGu zhX8wq4@;mC#5n!#u6gt_)UzK+H!VW&-KLR5J#tg_6Ut`}|917jZ)rL7S5yW4E6JEq z0elfH|9_>+$?y$2G>tR~!1^qKDiQ;<@CjG{`mT|G?E*O*sAT!?-wupZsdkp zb?z=6|L3DL<{=VQIY^LGSo-E(zla_7kTNK#7yqa_K#=;Y075!1Tw3&!|0@6u<}nC? z)^n;`W|LMGs9FN1`c)rTHq|{EN&2@;@V|weWg0-U<)QD~t^>BotCqxxF(bC_rl$R0 z{_x+kjjtB4v%|`F?F!*z~{ibpQEX{?@|? zC7>rDMPDlrmxD}y{rZLhRKP_`zjgnwKl^|G0iqW91j4zoVsLo)vcpe+o4c&6WB331 zGyh-h?BAzY(jk=(u*0tuU>xV^Q^llOXw{hO3G@GtCm4b!U`79aI<6PMPx?jHI|^D= zP{42XZ;0pr{zzPSfP7X6@_LE`6jFSRManHepMjiw1)@FfhCA6{fNBW{bjY#NnO_fW z1546cAa)yhU4-0-YYManx<_w2{<--7+GhOoeQ*A%5{J$HD%}7~vV>wteR;o@Md|<# zgqtZ??m=>C2&4F>@{)`HrAg(XaLmZ{jQ_R4Uo9HaAftBWjVSgC?%fh$b=!k(q7JU# zKp0>J>MN{KpfKqHgzM_y>gB?%-`Sv|gihorupgs*4}2n|jKP$uYgNrGqr`rsD_}-n zs0TZCB9%P;XW{;6AlG1_lDkTk*uCE`^cmR)Ixu8Gj^#YE=95+`&^QCu&<0xpIUD9* z;TN{(Z?5SZAF#_64Y@ASW_W^GqJRshv-uu2TAt-iSt{I!wv`?0OFe((gZ=CTE z;9tm~Mb`4}$V3s<@9XUcH(=L+g$!mZw;#b5$3ouwA9Q4`{)Q`79o$Is$rjL#_JEas z3rgmU^tcy1Yu~FL?107u7Eu6>pbK@LN2d6M9F&8)armG z9+=}QDSWkAbz{?3w8}X=;m0cll%SKWLumxv&3zv;}Odi6PJr{i{X$8h=e>H=#iBF8KZYlG4w% zzcC;(-}6|x?E<5SnB~$!z`JQnE}Xn?PML0E0jLDGU5twM$ZtaLD4IU5(sQDN^~GkdfTFc$K;ooMTe4&O@Zv{0 zG2J1MhX85MX!LR5sa^1+B&j6W{P^18$q(n9f=`};)#t&8eBUx?)zUOhzXcK$$@hs8 z=tQsWpTcPd;iPJR?}`nvjF<#xbG+s4@cc8qzkX-)qTRA5XokE`-XJcHz{W{(Bpwp( zSo85^Rk%V$hw8T)vd6hS1&v6`3h575Cpq<>n7M(R0KLg*+QbGG1xqaCfM*jdxKi6E z?Xn+7sv8vICoxcx8dj&ExcH}pSUAMl8fK3Z3@Qf!mU*b6APk(9Qc zD>RICf7$}Gr_9s3uu0-mPdwAo7bGt5CnPK9NUUx#_Q{B62XcW|>2)1a(#c`$xI+8& z?Mc*ETu%2{fPCWL0L|wca?F*F|4ZI^e)vJ$H9j`d&mun-?56^K;F`h_WhN|>?rW+* zCsJTW`$mYS!?=^ISN(vidXtvxDP_eS#}<#k9yD?lCFfk(he(^cm0RA?79>oN6$sI_ z`@!J_Wr##V!0$|~gI^;^4J5wuoH9>5~AdO6#eWe6Bd>5hXXqU1W$xWBqR20VLLl6@#EaXLZXjM$QATUU`Md`EO^ap!%b3-@&Ba#|6`yfi30(>^Xy8v zwVQ!5%U93oOSUjCS$2-hYVGXaSezdp!|7fR&Oogk(E6HZ-+56FBt2a<=)6BZ$?fH`MsFy|+el`nbc&sCS?a&A8 zdTwp{A6I~4xW+rYP-X;gb+mxH<1m8EkaE$aMmZlHB;nV(CvkRcH`oK>!=0~ zERWv-@fh*+t5<#xEZy>Ys!gmyAkcb*j*yo_K2aKR&z)}BT>8m zNkd+ruJ$=h3!?8o3HJC+?WJ9dcU98wb;9Q9D2NR*8rfk>d@1PG@vByeuKf$(kX~>+ z=_bH`M{I+c7&7C_xQc~G3=On*s8L_Ek0vhqZFcWR`bKy(xad#4cKF~=-LvxUb#(Nc zfuyu$b`RuELic^3iRYj|w1ZaiN&CX_7yHY1ps?-W*-S1v*AD0_$kPNGLEKMBE%+X& zCyI3f-8Sx1lZO`?<#ir@5w-gfE(GNC(@|D(Mx)bPxWtW=KOHKoyODWeK=#Kgq3vHe z?dBXGP5x;?xP1TOYZ-ruvmVv1+x|iOgulEKBN==TnH0_3PbqKrDaRTJI6eZh{!+z7 z=NE+x?#D$G&Im?(R}zhM8ce}HaH>XC^CnaS`qb4HJN803doP8r+W?mJIZ2-bLG%4@ zvL`{%G%Ld`sljKshQ?X95ca?FgqaipIYF>4Xgq{OcYntPEC<4o+H|{%){8tKHSPYy zm`CoiN${q{;Pv#FdB~M-HmoY|aNMPV*ybyUNLy+D_G5Ch`+|x6pU0K#1|xA$w(fCf zfVl1F^DUE$ah=v92M6Fm4=w=}MSeRLrfK=r?+p1}ZAip_F>9hz+&uIXK8O9SRnsN@ zY9Q7AY9Q4^?_hB1y{ha6#AvBh3-51|(N_wX!NJrox_fl$k+m44xhKaoh_kL2&&@UN zApqLOE+>&mnV162g~Z}~$UsH414tmrlpTThZlwJp3K9{`QU=0G>b7M{F)Q3Kc-r76 z2I&C360i0hXBP|;myaIpjT&cfSw@FyfJr!K-L1bb0D3jJ-7+_k-Cs+?ddLQ{{@uuk zf$KLK!6F))C*O+xN>@Hd#&ylIB?g}^6e3IjGCxJe;2tmxPVf#WZn-@Fd>=<4A+#_I zSu&dJdZTeSWPZWlnpP0QF)|hj{q3|*X z-oan8-_!DuT8W}Bor7r<)+^+1+P?Vud+SmdS=e1{A*x&s+J#k;QU5DnB*%3#?7r>&1*eNcam=aOJ~h{ zV`7`42gOJ=G*U9wP^_<2oPE^&1KFAewn-VP4;32_XEbsrZp|X0b}4h@Z{2^Pa;vfM zB~rbEz3<|uDp);7{hierZPzc^DoJKq#8!u`$8;|l)(l2LoSb+=u&Kn@OG*8KB1GQh z5!Y~RQd!7Vk+Yll6&k+OhaxpJc^|-*_r2GD(u(+?a$Wdt*_K!EqFm!z$|y604e`x( zY@->82^;w{IxT=OWkT=GJ5x)gZ1T-A7^^Tpb7iu_io4U;XTW@qbvkF!Hft{U~0@7^q`d8rBdie2TJZ^&MP$C(1;YfPapANaNX?9J>{U_NC4x|@UuOByv#6AG!WXE7&9du!x$MLzCX^LXa z_C0$?ugu^#SqHnz9~Q3v2!)lt;eN8LMeq{HA3~6001f@9o9F6HUh^y-Sze!z(?LQK z0~_wo!1b0wJE6Q*ldvIH4)&t8n#$J&<9$AGnVHswwxv_Qn3y3fzSIxhZ`G z)Xv}YGKM(TxOvoEeB1VHk3RH8DofWlKQPT8or4@(1;h=2mty_G_ECY?>po#FkDQ*E zBij+kW+z9>Vi0lRhnds-NQoD4!gFzTUklWo;Zd=}5d?Wnl=gZ?C1Ld+vGAiz<8Mk{ zWOBeoN76LZw%JkO$BPL>GfXuB56I`!YLNw0D3Q6)n{p#YYv-_Y1;$EI|IfoEXEA;Q zJ)EGWTQLlFBXdU)EOPD%CR1jojqcLONH=?M{w%<9&h5zF z=d}q(Lhsq2)kvwpwAn+NJ(~}=e3)r&S1DW}6)b6Qvb~uHpXTwGT+BnsH3WIY%zujD z{{se52f7t8Iiw1EzuFx~MU7%Y?((lob@a+W_qDtN0$_E_375vB?C06VAUEx&wvnnU3=Y_h! z@D*BuhR{;TY{zUnD=EeSkZg~N(ez!B3S6hh)6Q=_acZHy!(yx(o!pv+3xj1NRFB)v zMl`57=N>(l4h*g3DUzh=3=UDQ)R{k5!1Z01Mt#WFu#~cZqe$o_f=&&;@5+hsJ}0IR z|6->QV_#%B@H>ilv;!JJh2e!hRaN20bLrpN!tU1oqfonyF6ffEpy#Q*bWD6>JFnMv zZ0{%U-bOklLlhcEzOoV3J?+p%&z@kUp4Oz+y zt?$H}Pi)PtK{xdYs2bP==u24(qi{oUw1D=- zUUilUW@vG}Wgr^%O!2Dkv?56fTl#({ZSwEOPHRZjs&-?x$-{lA`?5h#gLggVTHdiq z9wo$>;U4`4iT%)2r`fbT&q<#rb+L0e=72t1Y?RY@OLF^7c-F?Z?Z&2~E0Gl-v6nZo zD$4L5`VF?!M_P9k@{g@;+QHpDSw@f4`k6;8M4FP`!VEpO6>?58e>O#WX>|0Dm3Qd) zA;*;Pr&{^2E-d4sM z!l$hg{x~mR8aH#g$OPzl=H88aJ1v0s4H)QiQ%JX%F$}FQVlS;8-u>Y9vFh)oF0d_9%N6OB1hZ5~PgNxtYgdjJHaWU$|^DO>7?(8a>T+&vWx1JzdM>gX%xL5L;NIEEEOUFnc6h+&PR*2UkXn z)iEbmu=V+j)ir514&zi0$Q6%qzVY4;XtH2g%@I~!h6KRjP?>yA8Y-xMgQFR&>dB0S z0h8sqw5LF`c4fEFj+_(@tvEH=@t-3KX;NrsnPxU{j{E2^mQzaw|6+a5y_k*R8o8t3 z_vVNgj7=l|IbLSpJaRE{isTjkr8bn1Y|e=gDB)Q3J$lT(vBRoB^VXd!Lo3x|&9WKt zYU3RPRNqTZ7O$3y@_^DeN!^nmRx7`#Gw~fhZN5rgY{OWQqDd(8AG?)95V_xDJlFUm zqh=Y5Qi2lkW{1Yo?cz-UsWS=6!(>vfLF=-NJ@)LzqgX6ow1_hl0mvNMaqy9E4&t8ai_aURbyr$(VJ0870C zw~0Tf`YPjP6R1e%Tw-{esr%9OB8*}2+9XSj^ryABBOj>ngB8u8gdRZ$daR!e+!l0; zH40BJ$!1}*R4jNK#j$%o;ul)N-bZjo;MKO|c3{3af&?X=;Sl7dV@UZG=Y4fi;?FKg zo!le{VfrEz>?(W9QWzkgCu0?z&mT5E6oQWbdrjCGU#*N28XIq5%-=DtNX{Mh*>#>i z)c}G)PxVMKgHk<5Wa>i6HGr$X8CMJ88DvnY`B8tThT2D1TI&iUtOCDF(+9;vC5xU| z;MJa`D&L68#E(xmD(Ch@9D_am!iRQ(rC%xonm`wD%A`6jL8Tyewb%0!JC<@)jxUNO zp1WS7Gff@+QIolmJA5^eZ+neZqb}MFm)~^H@=s7xW&jFv(rfAKz$SP{qTiq~DvAi^ z1J>~n#n@JoUayFtd#nQ)5mIGY?wR`e6^n| zPQCv1Bj%PV&6<2%dLMo)y+yu&@iyjgu>s&lr#eqxz^W<^m&Ak~o9Q;y=;a84Yq9ot zQm}#oKt@@|w`Gi24@D;Z?m0LjhlbuJnrBFie#p*baOYp^I(o2HIl^sdlAjw=F#BRs zTd_}OJ1*7~A%c=;_y|&|@(pdu;<~PQLY{_(G|=PCQ*)YHNqRF6<@-y?-Ew|pJPuCoxM8wyl3V^dpJl3P3^q>MS@d*X2Kvjh~Pt z4#b8|Jfj|ZdmnNSde6zn+O5>is1dK1@oQgUGX7?|=8*`fr?Hs13sb`besSim2sjtP z*gB$l;OR$G*qPFZZh4>7S<>=6T}|<+>4(yC9W`dim{ELeq;3)PFdNP^}9LWiVr95pFYsul$LcG)uK z4Qk|b9bA!>h5i^4n@CyME*gsr>2WNUYtRlni|R?8H1YgZJ`_gyh=wVSR{(o%kLql< z^6teisp-4`;{HuHw5Qs^O46<*!7rfa44ck0zXRP(u9f5*8>Z&|lF`W;nOx4Sq_%G{|$Z?mSr zN7!BS(L-$)Td@e*@&k@}Fa3(Q8YeSP#asDYue^Wa-=0~nZJoiO8jUzXvf9A}f&NOW zl!M~7&_e31DTAg6Rn;w2bY{Csbi;Na9XS%cB@kW_v%#Qan}4{SxpDRRVYcNL1^>wH zq!H~s(U`n!V@=0W`N6x%I6(}7y8UCoQH^Qhq10=4M`6h+wTRa!jEWsr*PpU^<}FCl zsOoXEg9298s^2YAuk~b5t+r6fSyYO+M7>=@VdXlE6=rZ(ACY{OaujKMA$D^w6sP}l z@uVYD0=%WPLmNNvEZep*fd|HxYx1(1prTXXXk93;|0>UyM2W%e5VzLKobXuKsAcWi z_g9L+`zTvtInFgRKYv>_+na6*jN3P)BCB)@GF2%Dse-#6@;+s^Y8C}N*f@iqEkoR1 z#UCfSQ2RXn>7w?5qxX!oJ56!eu>Ul~a6M%Ho9lwE0)!PtNIf4W*<7f}+Z=`0oKugz zYlCTXP25zmJ+pBb^(A~R?+HcEt@h?}e1d;1d?B=(DEy=r+)&Y$!H;6J6=!`*BG@5T zZs1xSd4)4N%%43z(WLtN_Tg6abf9Lxtz-~CA8M;n_@%>!{Z1`5xTPJ)TY9#{S7o%G zAP*aMZ=nsj{mT1KikCurfdQqlmT+~{C6_9Bf6wx}!janodshtca)@O*_UL;WMhW-O#)$(llo-dPo+k(N z-7C>OTy7MD7*vtKs#dYP*95X&Gx^oFepV2W%X*oCX80@N1l`ap7f;df=&pvcy`0i@ zSOp41Y?8VV#^Ns^H{ zII0jsj{Iso0+-f0SdN3MU$8MaKt4k&Br20KLV=z*l+7+4k;9@tZbk6Umf}tVTt=RJ zX~f@7`{0iIy)}RBPSlPO)^zU#nX!z#3JMf~2s^`w*YqV^4oZ`(k7HYsZQF;-=jGQK zt_ZCqvZwwWUYR%5gra`uLO>HBmcZWs^GEq1E_vRlg{9c zv2D&>g%K0#G%gE|kZm!c@b>=Cr6ihK?2)?fY%QSUq=co(<{s4q2j1TsqAs*N^Gxmr zqps+DU%D6Zj{I?VXsPj$Ga^wAmxP+hK%6Q zTzr;NA9^{XL%~dq{CW=)NBwRPeJsjNSFI2rSq)lj=dN33N9R<&e$To z#iTJ}4I3$9-2A~n2$3qDxlXG2)5u!-_zY{#XTb-mZ(JgCK@)&Wq!dMK*&4uLyOd0* zbFR*4c@8l^d!dn1WtJlit2$5$XRsV2T%N@BX=-Wd*m4P@#|^9R;F)A7p-h)bz&U=` zz7`Z|B#my-2YIfWICJB_{ku-4rG;uU#D|bC+5Z17xoXS%vxWVm;Ej_Ns1A#a^xo9(tT0qvC#&WcsE%xc3NqTL}u&R{D@}KT% zRMV)`|N4q)|E*|Sur!?jivc_=NV?3eKrBH%b@dLm!%O00wIMP)2}tE{pB9Hsw6PhP zk*uo@85TuF*C;>AUg@AUc&2g6OFnE}$r7qvPsf?|?O7IB6^}FRWB=;_VQ z9zEc;R2cF+DOOS?<{va15k$~cgc+rIC9%3Q&eTv}x$2wki|&vW(!qEYl}6n2-r+)J zq>xAZ>kKY9*K_Pre_Oa2Cd*d&&17cX5rAJgu0WHD>1D@4EKwnz&@GNBEV3ge_Ot$e z7Djtz|FGwTy&MZjuYlY;TBZ&;Vz4Tp=A2JuWX>m4L=<9vmnD@Oui7^QaW9azi+=Bm z4#HlK$dLsSeT42*waPvI{k+`v;Cs?KXi>$}l<+|ho;>~s6_FdWLC+r>OP zs3@j#&!%<^mK)aqa^RVGo)9J#Wb%b- zzvcP2x`7ewmS={r8vpj;&Ape} zg@xYOWG=P-$AxeN?>JHgq{^##?v879HK%p;GE3yc<0)=%Lpj!YI5>@G$Nx*mV8h_7ZdymlPB@@yr| zKVaAjZhgJg99MW~26*fjy7k#g*OOcMZHd;eSEIB!AY^Kp^UpB z|K?{&L}YH;F}k5sTgyZayiMQOo<2(<)O*fpmF@)){D5NZQh~6CsfmhqMmcMjxP}-^pcTavdIoOH#B}!1XB${qya|poHM*gjoRWcgUcj$P z{PP9g-S)$Id@ZNcvwj7MK<`KULanI;2%IM6O;iRY_DsPXhSGJQ<$k_R6lG{^SuyB- z<#?SB^<(0wHY0@$m#YzY`5S9Rt|wFDET&PfogG|c$M-H2(%dWWDH(Ge-!G=`? zWTv)H;1T!&h9#A=eiEu4^gNS|3Bb3}(su8{@uVEJa;FI1`!z28!1vkQ_V8q+cUotl zS(w})aad3ZM!lVHj{=!;*u z=YxLgKaX|aMeTDO=!G;8Yzrv`FRTS11=13qD=XfmM5T(39?Scdc|S?vcSWPjT>n=8 z4xPIr?BLf}ed^!VU2lsYd-oZ&CHJ%hXb-id2a?1z-lxzEU>8+vRW`nCSJdh;8vidvRrVW>-d4e}?R&iiz6tBM2E z{<#|OkhQ;<$AD>c%YFB!9R>{l^ylCntjdC{;3G73Tw#s7(&i^m$zjl3O!cC);78;$ zjoVr+hFRJ8E)*7J>cO>zcxu_#;}0&TcE^oZ?eW}7gM6TbrL)?r2UuPZ%d8*#Qou5XZVc!iLgO;qu;lXvB5p-_h|Qm10{SG?x1hU@Eg>^0?uA zuRx!-!56|nxapMH%iJ3>Uwm{Izf9_vdUfD)oL*=Z{$tY42am8=&R}deBcJvw^uxsN zK%QM6&+IB2^+hUdWdvYsX=guMU1bbm^GxJW$z{P;di*``HxYj`^*tjf)K&Ws-OzGq zL3=0YYqYdd8_>o@NxVNgw%zLeII@6XXo53`9gr6DLhIvewC=7f40*&f2HeRbDk#0Q(^e)0TMk%;;V`*YP>VUpsf{?4JCc5Ehqrv41( zpk1aSuJZX+3}YONu~iy0j%QkU9?)ABhy;(*Ofy6EBVIcjSkh>UDxwq1=T*Sit~eZX z;owUxKBCBG;p)iEXWn!>Q$Sm-;@+dS%k_H8{x;7~Nbci>wD+VT^;KG(2)tGX8Nc7Q z!E3LM#$hk1k7QwC@f&LdN57TaW{XOg@*) zzNx=dr{3ZZq5Pst`8z}BXI1b+uiO&H|MZ$#IUSBiH~ZP}oEWvF|3E=7uQ?^k2n3B{>XL1}#vDRBb z=lW3g&=JzJ5t+KGDyj*0m)x4B^c$Gr)E&J>DTokV{$RPg8E9MKB#Tn zWtXLJJ&pefFMMF1N{lfpW%9Hj^!F$2N4!dqkSJ)FB#lQ&15f#jy@451clDZ4<`2|s z6su^4a5UjamwLr;GCYd{eaikg%@AckleD|(|*HU4@r3S_)ua$;3G)`XfLWVV^ zBV=TCj91_u=Bp%nXoh2_i=E2DVb95XosrHsje&dmMkzP*Di+x1QLU^|K39|<0JO%&wQ{F1gbE-5IX?t&s3JxwZQa&PrrqZsv2L#s% zyczs_HT;?S@S^l3eyz;O49j*lUFQgdl;ESbn8JQSr#k|3YUS%@lSx8QZH%$&G_l^= zDUU?*=_C3rPzBg_@W0lK*ayu+Tx#`(5ACD~)Xhaa{Gsj5mF0yHx1Jc9O3ZTO=oip)>j-o!~le4o#7>8~ekf39|vByA(peWk|W z9qG#+pm$=CeUF!cWHLZ495_vLXXjVLbVs4OCK04kU8;G5pT@EYZT6-3dlQ0MA@o2V z=&cvQ(9*qvLT- zST8X%Dd~LQlZKCZ2jhyJ#qTVi4^OT1!jZfmZjD}LW8X#T$;m7=>!kPq>c68ipkKbt zZPP#NH+q%lAw^MXTod1|Tpe1F-a|}ahn#@Z6dBVmrFyYqlO06r{2Od(t=)XL3q&Tl z6Sv=2up9T*8(&Cxxq8eJKqNd{PM4CI;GajJJ>17NI!)d$ z5Nlw8R94`8zIZ3r8UD8weCidAS1VKPF0}ky(Hm{Lha#O4-Y3c+S|b4|Kkgw4|0UHdbBj3Vl1~q3_Eh-;RjBfs`Lh{XyQ8@ zj{zZf*lLS!jmVK#=Lj~@R`ka}{m1&Q%yC8Dp&l86!eSz=egN-ixM-)8MQ<8SKi0VB z_@CULZ-PWS=J-KEYS^xEB&aRBm-Z$I>r5WFnq|rhNW+5AVWjcQ49-$7+((^f4}pEG zVkS_EFus2|2dbVFpS>}kLoYN#vB?}Z87OH`Kuu7J0%F-*AQ-v7K^2YaPTW*RK;ILQ zVs0J(kAUS9xN`t<>@>#g;ihzTjK<_JkJV^9{>DN%nQfIdHE|Fb++wG8b18_OY8?@x5aGBo#IR6cI z;!TvBnQ2aoOEo@ZnA!N3cwe+J8!~~h0---V2;*UvtBi6s*8)RG7_(`LQE82A1W(laS zaU{S0?!3JbKp|I=!-gOGToSOjAOIFMDr$ z`2$#0p>M8Nrz&H*!kMl32QUC{a(0MUK@Qmf6ZZ9+JPlP2-_YhPOw?c;K zCm&R+LvKS76f+jr&wFvVL8)7jEV=m;gm^nWddtwg0_r_9Q0MOb8gpS*LELZpg5K1; z)M1ARfV{7^RCX9OIyRidu@mRq-IaiBgW2T9-rr@PfoMg575ezL_^y}UbPa&^Z%lK8 z703zS%;!r7zdjKGU0)eiu4^~?i2$~sR8(}P@$>V6+;`Fmj=5cHe- zWS$@Ufsw~dQ0_g;90m~JbCj*43s8$_RANZ#Pp~Au%za<<-%^C{Z!c)*n3rbs57UiX zt7S}e+rleQlncUhZs!MehEtsEM5~5{j1PJ0F9_3^Fz84y#0XoR7Nze!FO5IItMw^K z2R1`rVo3Qb*7b})r}`TG0h@-9l?UKf5~Q_WMbf9%GJcz@VmN!$=i`A7-KJHDVM=+e z3V^^SEh4~&2OR}6=K1iP*noLw4l>KfHakFc+$e`AI}dakAE)O06JvP`q+E_*pn?5T zvzo?I+Rz#wQ-``EM9O+xaQ}1hCe;u1rx>`8q`EM4@D*GMb+kN7H*OzcA$n%X9yNVL>y>k@6tU*h(#bo?6db}|S@qVoNb5-R?{haO4A#4(9*I>QL9DoEnUK$yp)Ty9LsyX8?g%l%&c zF9%PE-6eAF&16`AQsi*0cNTH9#72T-1@aCx$@HsVfG+IwStrz~_1*{ab4 z4NHGZYBC22l=hG+MzRwu((%f4E^ribT|py`cg>JJx4DC=ti@ngwY(sV==$E<40kM% z3H{>cMnXAcQwh?|*;n$sG%saPV1;nT5jHYGSpTQMqBt=ocCpK}XGoH>9;zrV^b^|l z^721LH$1XeN*`-YsgY2*jmw&NWYig!juR{nGru5rr%O(}zN>JBEga!X!vqNPltJW$(#YliP5A zUj8-*z)lCGC@}2w&-8-@MoYIS(KrHe7?TASvz(UI-eOlOmHgLe0w3 zqb+~!IOE-U04knyT;vMh3d zYGaR>`Er>TNho;Je${l%iWQ#6NKLh-HqNDiNm71eVg7lwzF4XCZSj&ST#AZnZ(SfX zgI4ZtTCqmhNLTwES(2nl2UAsX?k{d4=>mz#^@R_1de1#`#h-l_GGW-lT)EZOAwQ&0 zO2{_t-<6gsp_ntYTglR`8JS4`fSc}d-TA<_X5OOm;&~ACOiYOr%u-io@YqHjpC7rb zaRGFuE=Sbbbif}O7&0F*5bc$)<7dC{P2VQzTp84h57<~BUb(YXx+r4;<%E`&IdYFu zwIn|g3tzV~)f6$_^N_&zrzrhy*kn%azSz03-i|>pxW-NllT9AkvxWI&FSyV{Fs{%m z#)*_`y2Vh(MSdYHER{F$wDA<=16$Gi$w~2eoTtwpUa-3pUXj={P9ztk*9hxD)-d7Y zMw~*=@3-_O2xMn++2;RnrRqOd?SFg`#T&6CF*b7T4fH9(Hy@}nrGaem*CPKVT{O56_&+YI1|R#aIe zbrfy*r29TQ`M`amMj|=ujTn&iv#N=5c}$TZhcLD;NnzV3=m7`7dN)9vBsY$7ZGpOm zaYt~fVDvJ*kl|B%)8OpVw6R$D`(X*L%g7P>jPTl@)@JuPh`obHFqR{XftXF0P2{5= z*01oD3yf<*Tb+6OEtfx*8fcUScK`5u0q_kBvmSAD0j>iAID3@8>lf06VYG=?`i4o#wuR<;GIe@(h@t-v4SsgE2|VC#K~nRrLV zNm(DXdqXXtIyaJenN44^_&6#39OE#NE?5gHT=4L|VRE1wr3^|}ahWupY;3=v|Ief& ztoU~uj<5&D_Ij6&dKQ0BQN}y)yD`YVdX2Zgtmy1dq2#$AqK$T}O)Etys6Vlw{elXy zIv&<5F3R!Q^hgA4{tP8($1SzkPpiqiHE)sFCKqGlY?pCERz*AQxnLxpdDD)lHF}`J z_;#D6`B7_(J-KTD6|Pw(?gW4GJa5xOyB_V*1=#%!MEn#= zs>=Ohp>8Z+ZbOY(_0Gduyob-e!eLc#8yhq>nV1?qU#}z4D4^Gq1Ub0(XV|Uyhc-&piNqp4L ziD-u3QOEe~H9{_kb_3Jz5yCfCs4%)4{s^pYJdo0| z`7uPDAhdnd{wbw=V%uN{w;N}`>bD&ZbD{&!W6_C*|A29PBuF;I)Vm*fMJ~2k0JvK{ zr`3b@u7P`tOj@OR^YijJ%G1`c01gL1VhkaTRXY;Ku-OpHo@4}rbS({xjnENHl|_kL z-BpI^p$5S~Z&-Y9f5PmT9!iM8B>*LvlN^p>PY&+{4&RggpUW_GLA~=-FTonV-e@WiARwG-pQ( zmbs|RBRmKO-Zvn0f4ZO?Ptqs7uy=bG6?^0XUyq`w9$e#RfsT|(J_XX6Y9zL!g3KCx zk$4g%!okZOdEX&TPL*b@kJ}&Di zc?Ldi-&=t#2bh|+@AFh3k@57QuD?2aGD(IAMNnVgHPtFmRqdONdKom1vZ`>!d%b{* z51N}ZXEc1)s@kBPmEuV{DVdLnVQ8JCf=w>Gs*HbB_QJkoE_YjH&*8L4!0=Jtp zXM9}D);U`>Znnj-i6RNRhryJ}09V4i`Ucj9SPuBkqxr>ghw5&ZRdK&vRc0O}hBA|@ z?cw`Ls?u795*LxkD)IJyIOpwUeY8OJMP@^O?2aQpB>F^Fgl`B!2vg^JWUpo4ZTHwJ zav{(ucp!&Vqc-DzzVvK5xHlRq1E^Dh~--0KB@mJ^oUb$#8R*O}i!E znH)Gzmj5VG@%O-CIL6sY^0>b(JA`PKyuCVnX{J2X&@x$Hpd=uFB|Y7wcWFH5rOS$D z=;N3n5ock^_C)Q8b3kW-W^D&@jfztyOTSsNKwUc+FA;p9adK+j=yYY-+~tQwBK2$ke=yj%vZ;f zs*dzi07&u?Kv;Wc(@#Yw-eK@}qyj}{eG0YZehhp&8}3auwhOU9Yn;G*H9h#7)F(_e`0sob@-B~*GMG4Z%C-WM1-Yy_7_$MYNWsH z#pCxP)Itfp$-kc)Y;f(A`R z%TAVj_v$3oe^us3_BD~(&iJ@LL^CQv_A+MAUx$8F#fAm`$`TYNLAAICbT`vV>zyDJD`42MCn$MNL_);Bn zB@CBX1bF1-X*LnGuDApudgnjz>{Qyc_G}L7c!0&M<_4e#=ZkmwT!>KExI{uOWmOTr zpug@NtFjGG`sc0JrGR~36Llr|vvNy`hDwT{DkHwh^=6fw|0MGMk9G0S2X>Os0x2K% z_Fzu0EUB9){WCXAKv?TP=Zgsa#Q)EbhcN~@RzzXe{u*WE|F;kPUw(`*hKN?Atqhcb z_Ao*eg*c6zG^b~2Jz!yHn;p3CBfil-$Q2O(Io4tN`faOlhVY*c@c;ON;EuldLzf6b z9^tX!|G^{t@86AFfjH9B|I$I1MU3XeoJ0R_H}7vB8SG_KxX7b98h#L5H>9tXruRg3 zOYzoZgXi4$WF2?OndNiGAbrIa_1|5!JSPjvgI<6gCahTA=>6Z`I7|#|R0`i*4_e^| zUifZfHP#$-(*I7jYJU)3mHT-oX!6Q;GsT7YAx#l2NOaK#SV~HaIv~y_V)SmcNxtBa z(F;};X}_|iE!!llz!$1Y1s3o|kEuhJ(feyJ$}b%^RQJmsJcbOdBDa;_o3Y?Pbltm? zHL{I*_C@ni`Ae7vU9f1YZ#qc`I(%a4^?}px&BnJ#W^p8Cz`T2=IZitN`Km>01hFV{ z(4pu1t^vVw@OCWpo&oXmeOsx)OQLBAtIFJ3@QBf8y%n--MtdM{>N;3Mn{I$B?D!># zshiuc+#46Tydfqi^|*uUi==hSDR1y;9S;<_)`r;t<+{Y0Xk%l~ZZ!z#Cj)1}K0@Na zDqRp{#SvBaUoL~k$~7>LDSzIf#{3WT=D%*_unx{M|5-bcf8GV>ir_7fQ}!W=&o6b6 zK$PA|@BXP@6Ceui1P}EKb6~1l-%lqO_}Uk^U0xTxAs9p~43D&al%kEjAyMMz29gZs z3W*-#G@mN0@%315sI4xfI9QB8gsz;ItJG4Z_UA{@D;GiEC@`%p+DCY zMCm;XYCb!*Vc!L+z8Li0|4WO0*X0u7$?f)J9a$&XloKXLf4%EtmtRc@JOCr$>FrM-q2;=g z2iyT1gV}Qvp6?lZN6bCknz5~feAmBs1Q~oGCBt$tD_GQQkp|C!o|X`7Hya7?R-EJ* zc)gr^&f@)Rx1S&L?15_{47+xYFX)votnY#UM{{{MKu4dJpxa~QRqA}y*wjk%Yi>>@ z+vYY9PD(OtQtijoHq3}OSCQPc*+DRJ)9 znDSS<+r^oJqi&BtP0zJ2K_>yPRPVxK=mB3zH^h?l{%IEPAl>+L0-7x|2HVp?K{a5p z{utuEyAWlk*s(N~_P=|#pqqF&Opq%%eECUH;YT*>>%&&PK^3o1#u$`wErF%qvY3|a zKA1tInOz_w)0IvGA0@x%$PM&xZ$8={I?%=YdQ+e+TmZ2y?g1B-$zRoE{ZW3mU*Veo zGWUv@YxSZAZq+iF5g53Ks!>1lY|a5k+eBgm4>+u^^x8x+rfS6SZydY7QbU)ymwx&( zEed+PG-U3`d|&Q(ck-wPn3?_(Sklv(W}%doapUk;kd%47AJD zLJ9Bj#HLCpDi>!W(=I5*gbCbSEH0eb8V02QT4^NqIZ$)jo0pW3pas-EUU$P*I9s7V zFyT_+hJYs-X%5*^RHdG?9ci%4UJBm1wV~BTRw+s8^A4Z;F}MH?Q5;JDz~#f|zQ zhS41sG0DMU^l9$xyH}$e+8$O-fmnx>L8EmI;_)8y8ay+(G?(dpxiqRB-xCD2vZ9Hf zb@QFW^Uen6-NV)U3g`HXAXV*2hDX5NCU~-Pnr5TIJVJ{6Q9%wP5W>Mf>M3 z=c?UKZ_$|g!u{Y&u$agKjNNCowdlYS=Jv)v9@V}n%(`Xf($cjy1Oyx4lsT5x#yazS z-;%*~iWMVMHa;8%@mvr1xSwl%n+W^&FcJeaXFk23YP2F)nwnb35U`LAijq|+*bRD- z=x)g6kQQ|wDr!QfH5vW=3*v}W%wlEl*xIT7U{VixF&b_X*V>{i#jwcjANN@l=d1pijr40EJA&em{&Bvnh#c*>BE5?P-R16JtEAa_O_OJndyjWdHmq(4}brr)?|7Mw6 zDgUXF8j+f>SyrVbzr-I!K|kr5&qeEWUbina(Ho4A#y4-$@UpR7X;1t7_{R%~tn4q5 zrK%(ASHJ53`w3ZZb&8%YC3`t`J$Sd7yfb#}=ELi9L?^P?lArP6P>(^bCy7 zd5W}+z~gy@;GCX_%`}T+10Op)V>2v7((Ra3ZJffjzjbIw_sQS@|Ov zxlC+_m4j7L{Z*g_76Ha$>ZZ{HybEcm zwdsgm)a^!wE2mI#1)XcX!=|UG9){sHH#iwJS-N@H~!#d})5lQd>B6@l z<+r*xe1Y8`+jax$9GA;7Ys%(KsP)|tV>5Vf0QQhBG}u>`dQhKex63-jQ&lT0ZfNz3 z1FL&)gNM3jtGe^+@kOwpi&^H@5~#YToko;|dV1QQ)RwyV_MpB=q@%~~G2+>OYsn_= z+LxH-)_E^XaBUM%>$?u0i)<~vsF0a{Ahy!C5!c}2_@Z|Db?Q@VP=C)0YGwa|V?}y7 zk~TKBz|ywt7O&Z?kiuT{v4+`t;L-lLXS8SBcJG*BL5|OZU@>rw7+;HAbA*~ZLQI8; zz3wX*9N3-vk=qZ8<-vUYkjp9+gf4_+sfC^ka=6@ar+-5uX9wKzIAotVXANDKl>r*g z#1^Nw`doe-R?l0gPyAnrH$d!~Ag)TZ#}eU3%e7X9t_T0F0nNRSybSNnK3H)9Ti4d8 zoBx0fD>mL3;Mzl(bIyrEEVQ250A1GMeo>f?7oDI|Fqpu4JKk{0uc#$xShg8_f78N9 zWydH4pWu>53uo6>n*iQ%{XmAJ2B~(ohfGh^?g%q|duE7vN_9=MCrkMa>vc@4WXRx7FBmp!DPVBR^+)f#koo+Dk0E3h|J16Ia&o>%fww(PIsoK1$^ z)ngPVaQIXTJ|@#na6 z7XLrE0H2@T~yZ>A6g5% z6@HXX`H;u3hviIOqCx-(;3(I`u6I$wDRJ;!bISmS^tT|;@~5PR&vz;eT_{jAtYm2? zqC4M7P1vl&LMKNfW@vtu;Oc}pAAMp!O+QOa@cW@+gJscVV6dWCPuouVeNs7-2HnyJ zz79RreTJ21(;VcLE%XmbC1{x#t&utC6GS!qO&|tL2ioT_^KA#Pp@ZIx~va$ z_W{|mC|WkRp8Rv4ELmpdF~Kxn&H4AuxbaPDb=34Z z#X-YmmkFb{%VcN=sP6J<=0tGa6Gh&pykw8L5tq;&AlJIatoy!yBu4JkLb9Bkhpv6S|Rrp4*lAXn`Q&wm>Y7JO4l| z{|6Ma7y+<@PifM%ALIZ|TGqX4tl+iIbN(?vLNOG1cv?){PA~aJh?ah?4O-)})DOyo zd4w|O?)rYJTeXq!m;xfSu}DhUqDLYHk*5X zj7lY=K1CDS=&7;Uc&>BQU6rTrlWa9C(9wd&NBeG}fyvx$l4T@ZJ~bs0XhZuho2ER9B7LH_Bdl?5O)`u5cYv{xhHc0ozXMmAet|{-tCPKN?8f!kEy(w(DXyD|3&w<8 z4wY@HDn14)N^`L=uzY{(p2%$qt=+{}m(c?1S27t?j|i^OInA-))qci!c`0U`C_QFx zVJ=J=`t3Em7a)tpuOl@Z#VMO60G zv6dX>CDkygT%CLAz8Pp?pD$$@zAKP@A5ZV_i^_;YO{8yK=l72BkPG}jkYZXceGagI zijG!};iyBz8z)C52*4vc{owcGdTNY+z&9-#d*UneFJERPB$7P#EQ}Ji%=3z#DE45W z+XZ8`>(Moran3EgJfYBBlZ*E3e#2t-UjjgX znLU}ro2od-g8$!Osv*V*or+)AZCVsgM&=PgUjqq>%Jow!AJ^e%kA0Jp66VU}?fi&R zyvdo0BM&Jfx9^EGC#7=rVdB;g0FjuAjcVU=RX;7Hc9G`;R8RX$!0=O-=nSGMKy~6Q zi>CP`4vO^C?XpP@Xb~_w<6DZ>!&z^93R5Ww?J2s6FAYQG25fFd==ajHgq*rtJ1|aKK~bsm4EGq zbKQ}`7zS^~Oym$gY4ob}0NBhdyX*-v*9;zVKE0&mc`BS(UlK}1!ENPg55(jTK!ZTr z6JDJOPE;<^R9t-98&sfjgO~IU?gEqKaHc&#r~oXYs3jF|p;m4ckG9z?C98C0(yS;) zf?NJWV!m^}ap!L%C|0%>p~WotxIS~eId=Ld*H21^Ca?C@Z>{Bx2_Ch~7z~` zNVTS75$<CF-zE3^6BLPy(z%e z2W#INZ`Fa0@i13r7H<~6K{!=$Q{aJdSxWNWw042qJ>`&Za$J`)9kGuJoMPGe4_2I2 z-iW6KQ@ta-QrvC)#XKCD600>A_FToX`q8meG`*g)av+q#Qqi=(X#CD}VH_OV<%nWZ zfu9xBFI}~StygFFM)Jm2c|Un{xTS-}tSE1TR6{E(1!Z=uS*P^ckqY-*Ymq_Kt;+_5 zDE>$FuZgg_lfHCQ{Eit(c>eFEQu2BT&=q6y<~b-`EVuL;&QGbguu1+H5XQnN;0~++ z&suc*#HoIBKq~_hszxlm07Oa$OxHQRTO;6}SE?4d(qbcOdTMrLKttnS@xk~C7k|feW8NkICP4%|^XWbC?n5{}11jW+U4Ww(AF8YC zN*RX?z|+kAcjQ-3voCXT5IT?rvX%{GBS!UY4h_G6VgaSjS9_cYR&FI(cVuw@caibF zlQWMjZ}EL}8T9IRRj3j`c{i7aOA#zuIHtj8Ncmn@cdgtgp!@>>eBKde+)FCmK zu$hMhsk{j4U+2|m-f;KljVaX&gYAaIiRHfaRLosB5iI_D%xBFL%9|<(uu99A?*|&B zy$sb6P-PTxa;t}=(TOlV6VvLT(qAnXbLv=&lQql}%&zmazIgKNQkRU{P-Ilk{s#%n z&@Qq1lY-mloLPUh?VMT8CJna6bA<2$^b;rO2Qw?{|BWdFSYR5 zZC8saTy$enun{LCRS9j8!}qEN`PIxE-oe^m8iZJ)+XuElAW2(Oc8Y z(aCh71``@FXI0jCyx!zE&m!ZYC#vzz8PzIDUL6+vC}R&pmUDR&@^lg@b4Z+^6Gj`Y zjxlL}N(B2oAx`1z;!<7Fu;B2#-@#oyGRk%CGWK%8X#l-)SV z3v*5H!4Fnzm_r2EpB(Mz_(!lii-iQYk0qs?9pQF{?wzW!pBaMb?e~5>deL?f<4?1a zE6W-`=&mEZP++maM8}!&??j#U2&=tPSqn> zJR@e5L)l@2-BC9W9bEdg+I-6cI;>KRQ^Bws%ko}8bg&QjU7LsmSP+Mfp$G-6=L1!Y zWH$UyZhv?wSfT)%}2~)fQSZ ze(TYhQfZuq^v>KXbuUUPe6X>)@nW0SkO^LHXA~P%P>!@u3Dz&j&&qW>rn`pa^g)+s z=7eUUmNv)V`aryPu0wf- zh4)WcIB+C>mF81dUzWbe+ywsBuF^k@pRy>2KNe=tG8pGG!)vtsch7?rtTOmH(wBo$ zF(%9JWq#7DwCpqV!A|i05H7gxB$#giXy#QP(P@<`I>ncKPscZH|*o1>qX}S0P?I_yqn1NVCYz#3gFaIGb<#j z=Th?7(@&L$NQ4LIlD_ct(Wue1&P)`slPOZOPB}1qqs-4gcqT(&66nlx$b;?>D4h`3 z)xEiJZ=l2Sh8dWryLwLK1^-B9X`!=9zRr3ea~w~pS>)Mp-l9iO_pUN0evTr2oLT8U zT}gIa9Sn4f#-Vwy$#ooGsr6Z8)?zH zU2}Q#^~}BEafh5K+*bT;=?oy{Jj2iC79$PvrZeKnS)!Vu)mT|ZW5s@5g%&`?T(si# zdJJ*?Yd}4p`t?E3om2g|J$);_T_>$Cc5cB6tD{u6K#fT?v2s~HR?I;7?`rxC#TL{p zeHDeo)j{vQ;cuPiYPIzfRm-iK15-IPnmwqny15BHUU7#sy!$U`QWi1WHi=`pl%2Ll z8sbG4;3r6pG$X@ydkACc{9&+>Qobk#`2yLT8{aC{KAX-Z@RI4WZmSZ@MR>IXc0cJN z^UW;f_Ej@Y$}?brH~5Qo*ElrTH>hr1&x;faS#SrbMv4qq3ifmr4I$c>UN^;px$v@1PW`fr^Q_rXzvbLzg#J zR3a!Wlc@M7B&4pOdtQFQAE&Ek#!budQDq7nioZ_25|9ZwsAk>}hoZf4r_(C2MTmqL zf;y>uEvLP;JEe;iTL^^3rRA__Nv>Bkh;b8)AUcGjV`#;u3vb3mnHPEaRQ)Y^h4mx% zA1j{WvwuXF-LRPGQ&M5hHM#IDLGF00lN>9#+hz)z;jBuzh$jgLy z@Sf6Qc~Poi)RSZIA5tV$bd4%nU`&Si@5L5a3vm#svn86dh$*;(wOHr<2L>z_%P>~2 zx3WdVWjrA!*tB?7s1VkLj9vQy>ns5De((#u&+~^L{ z@8)3=TwkK*Ng&HJ9)k0>PNqc3w=3sXyw-*qWe5x7hu{F+x2tuENe`U+Q=@oqFizBYdqpgWO#j2$^vcfN&x&FOd@O&ONL-nXJK zX3cbOpWG?4xV0$!`RLPBvo28hbv1FF`yeDK)L}9(3@y&`6Ft?tK+q7iI^9L;&{Twd z=4Kb^L5>-i%1n@JDwe%mHGsEn>^x?_pcy9Q6H@+J!~@dGOp66k)xwdQkIiq8&Z=F_ zdCx6$?w(z&0xIjg)4=%~H;89tma`1ouQIo%(62I+6|i`!^zyzlE>8yUDl%Jk7iE7A z>d{-eiS|wHlSKTQEna*XJ@YKMprl%ybT<gBBd#f?rDgSm%R0X^U)@o{=GY@ z`s1IqTfB-Zcu29FDcuH$yjsAD^Wh!*EpG_IxV+()N`Uj7zLPJJjAb~%%k zA#=hWxK86kUWO%OoxMeE0UH_9wQo6ZyxbZw7i>B!ubz00PJl?Sf~*viz1B;ECRx2R zm*%i^fZ5eQM>dOa8nlRl&ks3ogvAt@=c@nctVwjr2|C`hRAG^vHw=y6h5-*NPJ>A5XumZQZm`%f7wxY_e9kBN^uN(=sqN z*}jX}P>LX0Sg45OjN>gA!qAeTT1av(z&PP^h0`n5U`D)Po=hbnz(!rSw7K2aoY5YQ8 zYpS+gJOX~1ZwKQ)9yp`U*t@an6Gy(uJXd#!`%I6}h#QrZ@;8fL#EoSC&1lB(-0`q_?Er*HELrR@p@uLBCLa+`v&5)OPk&$PHv)Jz1wHJ7OY(74m zm)l|cy*GM*b?Ic<$*N$QeYXkfxLUx3{8%Z;O}rKI3Oqs!eqwTc*Uot}qIodSE_1T% z6Gf@$UDJrV`{N>dpH)&`R#S8lBNhcA(NBB0sT(6(=!?J1bfJ0Q7T?+<{gIt>wB#WE zGtDm1fMr?*U+Z`aIE6LEH)rBfqF&=|si@N@-p|LS#eFK!(O4A1TB1Q#wOa1Pn|J7k zPoflYqs#QzBQan1Vcai=U93ZeOgG@>8UG;EV$&i28gYm4rMPn(PSLZx%lGn9v3;Ko ztCBGatWxQP#i>}!_9<@rKDs>ohWq|k#w!uVn_@Yu6afxJH-mi_DLE$LC6p_=xis6Ctl_3e^blqBPHHZsiut z)yL#l5r_|avIvjkKk#{ajEQTYlD>_17NtpnhL$LKWwn{t+Vn5Q7DYxI=#?c97Qw~g z`{|_1r~xYF6l4UJ+oRMX(~IfL=colX=eR>|M{pyq+b&Kx2V_0>V8NHA`|h6 z&IkT1cPUbouuxlg{&-Hsx{fZ7LWz#>)=9fC1vi!P+fDiLO@1@-+)xm>cJ=E~LB9f3 zob*$77Rx#VT5L8vJ}tBv6rNw0s@*8Cx&!dqCi0XbCstaTMVaKO^ABr3mEDX0rQc=q zf^yMk@{^%Agl;XF&~Jt(Ml~8|R^#jp_R-Ee&cjW6afE)VI)v|Z11b;#@*DK;l#k;KyTqRy9^RK$DV*AF+Vo`sc zsZ?jTUdz@EU<&8b_mxt57%T5*2~%;H1~4jVs{2Rj1Uqws!X#3i;N^|4Eg^%63Ji=gcaW~XP`Y&l4yH-dod`m>4wRiUUeL%i2>`{$|>x4LR*a(I~A zaMUt+MOXR^wi{e%uz9eLNnBad8=62KM6eLqo%-tGj!zfqhBoY3lL_wz5%S3agDj;N zk+BdOKRwWoOW=^@IA) z3@hX=d+;I~hg;`m9)S;ycvw-c1=T-Jf?$*`n56wLs)GM=Ng<6$M1h41m(@!k+eR9= zRZw7+)*B5z2#pRNrZCykMfP*~_hj=}Ii%2qh|FDO8%zy8poiIH!!rQ65og#2PXs{eG34JeJvce*#z~ z?p)gGLjlZX=O~bSa+4NSP>pa|ZJWDvc9K(W-M^_?(50byp?1{Lk2YJWL~Nk$heq@m zZ`5F=3D{5xB*hIW*>=PUBQ`9BF~vIse=0wDX64|Nm{&{HvD&xaKNfJ2Mb-3(#2SHM zWe0lXFV9R<|1I054;d=VPkcBF&v=|>c%Oj0(%Iso0s+V($Y{36{&9E57m=N!U>wOk zeGSEx@tQM0Quc7tii!3Jg}nq`cllkTOhF*+&q36u*lF&|=WkDXMrtQ)!Y`c;Qks5O zXkG0QJAfB?+3l|uT_YL1q7X)KFT%V8%TfVhw`XbgB9Q--$w?0uSd-h+Ai$D9@*hU_ z3=IFOcYlhYX%Zrd>FvQc?XEXM?3Va)=Sg={r)9F$YxGT3*ccf1TU>_Y>l;TK%UM-1*_9i9d4X ze-WXC{8qE>Ok}lhr@C@JR!Ofzcex2C&Sj9SiuOF*eU z>%SW?|BGBo-U`7o?MEB_pX}zZ%?Y6){Xf~wf0NzVv9;)L)by0z4Eg&l^RIgcFUXmS_rUu#ZR{~2iAm+J8UMrb7j zcx9>-2yXZ;R%l2d(X;1)w&diR^cG8|+7-42aoA$im##M-EqnBWQAWmAl&^4hFEt=A$w1;J0tbPUmOAFqxcKC>>>LtHoRG8h%VaZr z|2J;)w~8ZRa4~PdHs@2eI1%pv23B`F)*%t~!&MlWhBpU5`6CXM`1Pd#1UuRT1dBkf z=Ck`QGK>YoWo>V0u^&Tb*qhI?75q(+FONYT(hKZ9$8DH}^myz~tpqw4Tlg4xgFGW0 zVdQMwwfN6F_Yc1VGSrqTypwlFb&MC_XjCkkYu;IzZoc)tD*#78JQU&dUFE6PI}d%{ zPUALsvx>m2y6?NcP`LaDEQ9&No2&hHHO}C5vORGEk(KtP<@H^RJqHla>W&=`Np)p5 zqIV)_?S(v=kLrDaOtqxC%XoXzh6!}PLtgjpM4W_H1T4Em^g8|z0S+z^jWrMu#bdt# zAH;*c$lmr4!g9Kdn6ID9w?K4%w@!Nj&#Z3wJHORlOr9Hpl-{ykFDZRq?WUX>-vaU| zH}4iKJUgr1W`34tNs&vxGj7_LlRt)0bkAd9+h@MqvMY#E@@OLjk4XqQZs5qcYTj+M zeVxsklRfgB%u;3R5)N`sR@^-o>wEe)kh?|ehTKsjVEpR=8W7P7zY)K=ti7KR%|__5 zetuohtx3#fwp$_EAlM=UHXsKY8J~*JTWr1V*?HMB%B_<dc0nXfH8x^lG!W>#;RPrO?}WY z6qN`ETlDUxBcgKr{L-Lw$DsuLZT{{_JN-E;wpsrmi`xVyQ09H&y9*;VfxVwOCx;Hs z%aF8qbGr@6GW+5^1+}oBH+1QRU*6BnAZWV8TFnyJDhf$V`+HY(L(}?u3Yu0V;57AK z#|{TAM}pkZf(~G=&p(8gZmuK-RU1l-ostD1w>NKY%31YClRPNnM}`GEv=B@2^9n$P zg>!K4YKpBFUigTUS3YoYK>Ciji(}xHWPJ>|j6*N^!XCN7=W^!K9$5vxJo2-|5$F(| z!|TH+ixjpL1XEdAAeR6%%{h>ZJ-2Ck0Yw+uLn+`}2%B|)Wj9C>!l^x$OeA5|rUTjP zF|6RmPt5VtpJ81sNyITo4FHAbqT5OK<-KoU$M93K8F+ZxUwLr^Y*pjwu1gB-fU2%F z6Yl%V3F-sho}|ZN_Oy4J;hZ*ow6H^jJb*iy25%dIazn49Y=r$k<bD}hUmA}YljS9_E-hzD8w(N!_xAVXH<1S2nSV1g*3eN)_z}Xvg zJOv~BfFKeVGgpF3=@jBCIkz{T^P*5m&tj$x!BhVzYy9p~8l@G5-%-8F3Ygo>K}%9{ zN~Uubc;U3$K~Q^bj0uw4?JCSFr{JzcRYrx26}uk<=loI-M4|@uK!a!f>n0$S5+EC1 z#4l39^~TyWPI*e7y>Pk`Mh2?hz&tJtq&`{()yiUo&dP+xDp*1d!dPl7Q9MFcF){q~ zuS3SL*P4q-(#e&|Et>8nMe@QV{^XpM@giq7sEy6X z;#Ji30RZVXG6IC;W-5b{ z1;2$r*z531BG|ve<7ixX#-td1AP{8&8}JKLI5L*ysHC>O;5&ls1ijen57M&o3JK8L zBzXRmhzj14%4f3n3J9-y||eOgQ)oM&3qc{ zJ~>7Ke9o-dNt=BjQesKJp4F(TM}(q`(5Jdret8VGZAYWPN8X;DuO?KY9?c z3Kp>a-sY<=w;->(2EuG7<`o5eVQ&m=eqzo<6B>-OM_&C6N*I^HTY^x@i~DdFlS*R6 zU!!#kIaVcTJ4>43cE1sCF(t?8Y)0>q=Q}Hl+xeA76=GR zr_fE9U==|ve382W51WjiO@8u|Ow&oH+oyI;{i+u5k?Us;kLEyA%36(0Z>~Z(r%V$dTANp|k@DV_oOkQsa5D+lo!Es+!G)$&J@1kbC6Uw45GTiW!**XohshgwJwCUh zH!UV8MrC)uhSgsNHTYT^8*pdbpzXZa_0*|^%P7E++Fd0OF9BpM?~$(1_#1YPqB%}C z$0ZnD8Y<{kwI_s~?s$Ap#BPEib>~yRqgBs)+LbD(2nI)Rc(Z6n9|(MZ9W90LO_k!R z`y~KmV6Ly^eIxeprxodKT?;ODm`2@wnpKUPE6Z|QRQ&Yjdpvz6$|!TO71m*qjrP~L zX(6@io=E2GxNrch+-&=7`8W5OuCmX95#42;^Y1a55lCUSFOQeAg8XII^gDBfJsI%c2!1~McyRDaGRdxxtjOhS z2u0XUDNe2+BL_Tdm%Vp!JGcgf=BrA0F;b5Arn#;Q|2Tl6+jalqT!OV`+CbT$_qi+L z+uAJi)^RGk&t>LF%&#*Bc5evW)~2=k{TuwW8Euloc%gYHUcTTyrIgWLnBNr$*oJ9P zx}DLyBk@d9!*E48lwosNKoWR+9k`N;LFYOzv*~tNdY06i1gwA z0{UEF=gx{A?5tS5l5s(wjIEw)TxgBHByOCnPbO`0f+z-a2{UrY7-xFigeYhn22-tD zSR)y(4SH0i9miT7vTe)e$QT*-^0tXSNY`b=H<3I1M(TD~Ev^<I4>;(jop6O&&f;8mgwYzyV|A9P zx?hej$7&<*QHgbu@+^H~nk5SQj|lvXWlo8FjO0e|@DT(e=#F;TX^f8bsXgvq z77s{*Z5By<`GAOG2%@IPf6bpqjUW~!_&n&@>dq_vgo}635y?a|BS1KEc%K56#$_ND z9&=#4`B6a}^XR6aLf=Q~&|o77soLd|!=!J@>`R3_d2ROvJnmTno(@sx69%b0e%-uk=tl6JgwBi}0M5?sCSnp{}xa(I^i4b@*g{JGxT6PL1`cz5- zUlm?7>CVPJ@=8pPQeVi|nK)k_EThOL2Ro9AjK@DZ*%K}WFg8Jr*;nJt<(aC|vi_mL z>3b=JSP{OEX;zZlN2p9sZl>QPT|NXPDtpc$Cm3h#u@8a5ili2sz$Xco$bpUlqI{x_ zJV~!;_A$dOi7MQ8YKmpibjtJ{TS)5ZamwaJ)93MA+oGO1Z1ej^*N>>lul@TME2JQWiRPYbM^3eI z`=gCM-J@Z+t>uc3?FBVI$I`VqEXp~<0@^vP4_<=P{rJfNMpj3X}(1b^-8#FM)v1Xj0swAjK_A6FW#}0YXWg& z&^e%xdC$NbtKGW%V)_f;rgCrb*VPsHRFME*4Kq+@dJFG^U0<_QJArQq@$WK&mb^yX zj2N`!_+w>X{D*9qvuJgIO(_?}EcP-J;ghp_q)Ye_3c1Q5B!qS;&E_xqHUOx0W!3wMhmj)g$e4E+MOMT`g;f2POG zd9fHebW{T=ik6RRml@UOJ46(7zUehuAhh%ArIQd!lue67r+$IQQx84kf#lquA)7fUruiP2$s+pWR>8nS-N(PvonjgN47V?c=-6ImjKDp8b&mugoqx7Gfm_om$QRqm$$%fsj`1#n21GIzVe1su-;TCkNhi+ z#Hf{f90~_{%Y(8{LIy!~J0Kh8qU)igg5yPVgd5J%ggqUr(*b6BG4gMb-C; z9va4zU2w{Xvq|Zu4R|!I>*=L1m33?4Ly4r6k`4Yz7Y&L$DGa;EbWJR-f@e#zT3w&6 z7*dNZ*Nu3X&8VynWxX#LUKF~4Wxh{;6uCx9MbTk1SMW(HSEuFOeC`CAmShIEU$q#I z>O!3Csc1RP+!^V@zQ~nG*S9p9LGK*&`ir=2cx)JbhV)wujjf7M=h~@avLZsP>-q*O^^BSWl<{a_0_ip$eMMGUoFcnUND}mx|`N;Xa z#h85}mrI9dW$CWd#qCEbPxEcO_nqS+ORLN$FzG3kBzyZp*WMq`g<~Ru{c#&PmC~M# zq2C>5j-V*^bFWuJFWytg$cq>08+2#ET894kjUihAirSVmFyT0cg8GOel+Rm_kOoGB)A)?@@14^Du8{V#Yn4BYYnFg%EqIs!M(CnBa>2{%dxj z!|pgffMzJZJF&84-|Gu=Nwaj2LY7EmVef!tT84g3nU7>cWQ@6?=f$?kSf6i@E-26w zr`5x1sx+Ge|J<=6W%J7#sEu>80<0)T1RBO3-C@vXezUtS=-l5ApH|q8?l;psAmz*cAL`8X8EjLNq zX8JIBA1#ZiBtLaim6@%)mBG8mX86hs>PBGjW8xzYPEu4K8Nm!?45CdtMLvLz!5ofD zKCJFqky7%rXnxhg4Be}RxA{x-T@ox?B9Ww((OX}9 z=d&r}cDt)=-(NPkv>2Ma>Mwdsj?z4jQ4%7Mal}TWH1sr1;^?p>2O>J2D#Wo{lQ&?Q zhc20RU3uM|q~!Dnoxq~4();u*XA~(u+x^GCP&#Nb+AA&hTD)({v@ml9#2-yhdV zezLq5OqCCZ8?~Wu3pcNcW(z%v!wp;iEi>o@dPZ-B2CG;(xPJ@n)H_kjJ8CJHn_o3j zWVL_#G|8J;?#}90rY&r_i|YVa4L;db7kZfMJj9~VkP^=GS>fY)`~k*s5Kq^(WoJ*7 zmi3xcDL>>BXW5BYXP%KnQ8$Hb-nf7Ml6lBbOwhMer;cM&uA*Dlct36SZeoWbyv!R* z880JqWsjsaK5#@snna@L z^4%WpLd@~KJbP^4Hi@~HMOQ@}G|dP<2C=-?!|l?dyFLx^d@RZ$&#sl}IN~)aP`7wU zzjJ3mZ1{dAd~#ZR5f^*%{!5m;w*K&K<_d)Xg?65^=x|ygzBqy|iia$0B8oS#l4#D) zgoe_DdPaBPC~y!&@psOsvV6TigF;nnF_>OAAj@a#3XWmZY{4P!@oO5L{P6TyNn=TA zCmijPHuw-vfA0qk=VAMXl^#3g;WLRhyobd< zcQ0X^2()e`_is4GvKk%JhZsM{H*(87MLn8KQ}8`4wx51)-s1VN%<0peGwJW@INbt# zx3A@3vO7-M43pZ%FyQl$m&F>j?B-!jKUq!lGu#!lu=?!c`)Ja z7E(?L-)X7%GJEE?Z(!4=eGG3??q&KA0^HUj)f)gor36;>xHOumeX{vfc#7KUortc& z7Jt*E?bqns-U4&IQ?Vt|_kQn&-_(0pps_OeaU=(~a&gH|&svyKT_9tIi)2!?Ql~xM zKbSAeK6<07?>yVyQI_(lSOS_$Qu;5_&CRs!0PE+;)DJ(pJheA0NAo`UFrW3u_;8Ir`Ci9l-+Fu4oG1TT$43_Z%=^R$Y_jMZXktcj@9&Mx40RA4 zZmgUiY2BBK7?(ZJ8@a}L&wrS(zMWEMvcDVUfeyjErwA_C68rx+d+(?wyRCaP6d@o8 zNH0<>AWb>~(h*UlN&-krAR=8sdhe)o3q`sh5JE>lii9ShAVne_X`x65>HY4!@9(?k zyx%#$G48nkFfx?nAEv)Tv`86G$q2_o7xHARrL;^hL7i#CQ8mD`38b>nG&w?XJ|umTc2Sc zy~WvY<3`Lws@6Z)=1QNbi>?kQdjHz*ZrZ8~A~rMWPp^&njsu%5kE3xVm;3iRv&SGh zr(voX4jR%v+4es%y|SC+N?J$Xq+I)pogh)Dn0Pog7k-%RA?{*Sn%+0#$~hYl;!*RK+X~y_E zhU2YHY10%G_w$1=H8tpDKeSZNvP%U~yhu_o0squSDNglBEDJs;^91D@!-oAIE`U0= zqVLWxr}-p@i%r0kUnciLsEbz4?VLKsgmhb2?%@|cMg5vvi;yQjl%)pLl0)K`g$8_5 zE+l^ZA*rR}&O_$498v0}5Q;4Cr|PhPC&%vHgG&T->lzDA_CpM@54vkk26o;5j%BC4 z+NB+{UVIj3Goxw@$ISyfMC71Y6okoA0OKWU+Y2#zxX*oIYCfO+YMRQhfYLq(Iq4ST zwSuOWAU~gUtwPsm%CZOM!Tf{hM=bfDo5iV%jI{YXcLa2XMus4UV~UG2`?1pzeghpW z0v}o~^pv+bh$&s*zO9JKU7#2mmPyvhjq*!q_Jc&(Sd#VH<+K=?Bh)k+N->QR=E4ce zwxmR?*Po8|gN^b$@k{j>ySEft&-`;QBGMCe*gG8XADw@=y0A5|?bY&=8G*J%g(Cp3 zgvZq}&YRxP6KPD`+@EUYn{x4e*YBua6bC!tzWlwZ1(0W*hucQ7`A6SMP-@&tUoS#m zA9g!S5t`%;Qhy<&6PG&4yO(Y(9EnOpH59qCHg)ReXeCHzTr2q5wj<_b2Pt%v(@oS3 zJl1og)*2d-3{w9ZVJB5^8wMK@F!wZhFYcfB_#Gj#sc7Rivjqa(V|4|ZH?_Jei&^H_ z4XU?3>urY?-6)we&nVsWX^sn(QCvFxoflO^RhKW$&d>zkxPQO@h6-IQN2lnuv^==b{P_; z2I^D1u_BNWThOwr-N!rjeMpavlSiBR&47mWYJZicQ?1i#l&Yt zRGmFkQ8GjbW{6_zz%Y@}XjgZO?BS1e5lLiahYuEWz~hN>Eq-Y|P@x6V)u1UMT%oA8 z-H6mHegO?Qd#XAl%2&w}nP>3fQ19XW{B5m5{N_4UY%We&EaArw4X#UuZB=o!G99ik>Z>S+-%u#des(v^AMjLS~cQ5*g%$_pHftIVj7bP<GaRHd_2Ecp$h=Yd z-pTRZ>1%u(p@e$`a71B*Y|HwoNdU)Ecsgxgs^#9gfdG~BXfJjb1=~M z_7 zHjRm;6;Qc6isq6cd{XA8)NLsuKE=i_gZVb4l4TLHyLjmg{Ju^Y{_VO(4QKo5+(9_y z>;a{tQ|X*}CJ1q{r49-2oEsSpP%DWl9wn_vgGr{HbG>2m?6LGsR)@{|9R0ILH7;=! zi2Q#>d0zv_N7l6SYwwU4<9=o|RnJ>NqBP~g1gx%1H8VW)d!MP30RQstf*b?2=w_Ql z!pHsBW#2@`@zpH0(@Bw3Nb&2PNM4dB$4`F^KEC7+MT(`jfX?CCMwbzmc9wbHI^oMw zid(taF&* z70hd#S>OPYyRG}4;mrs#wLb|yUMk1zmU4Ogm-2HvE|e}XFCDi^v;MSH#xB*-3zA8V zc<5gvv*04a!_PcoGVn3t3i6;=B`7%H=`t$-M&NiTwyX?Klu8 zYGm7xD>Z5=4Ig74qa|fJSob+1cJvI>xaHTpMG{lsge#C;F1ZPI2DV6|nd4;?q!4|X zFOwb0FHUWgZYY@xr$WXYjlbQsgG-gEM=@D*fhJk&lX;M1?Fwd+LrvsYENSY=DTY{8 zU&ynI36E5Q8(_$0%g%V`a+>ztbl2w_D}+ckgb!Sg#mfk9qdPy&5eZ=x1n4<$=zz=vl58q|>5_3GYF1CX>;A3ubE*~&TsJ^gUZvDu7^hSrq zLek$W6_w%u8M4Wf{lEy1bnq2kKlF zJr0v}u1ka7>o;=#8Nj0EV4KG6tob;QmDMq&|2YH!EU2WeL;pZPR`17qox+rC%b&}L z9gIM@F)fDCqqP(j6pRn$2G?wx$qQ2fIg%u6OQ@h9;U1KAT^x+Wi>5KX5GLF3Tl^yL1@ zgNwl4$~isB9jo;V!qj|^ER!O3PEdARDoA}l){c|)ZIpp+j9dqvTY@N5=3Gb3Zx`Cv z_HLvKM}6%S$nr_2o~r8g)G6|5@)jd4k-Km{0eHWLCn$|02lDq^$fzhL;8pKQ%leTv za`7yohEy+}fcEKoO7`hgmZ=xGmvk9CLX3hTxuHSFM=}QMJ$n$tH)T%g_{KsIYIU!j zG61>H(gzme8Fqp?Gf=pqV`D6toI!(h!RnX4RlcxCL@cf~X6z9F(%oW|Q8kr;U;E*WKzOY5aw5W@l3irr+=xw5*Nn}0HDN(iIbFW@fF ze?S16xwRh&+WBrzT#K}>1W6Thdo+?5&o$hxdZ2nm-a(J&_0|+{s-rP5&sX~J0=MyC zGjUmO6x@ZF6rFOgS!ykrUwPtMp`g^NPjm@C3cJAPvh2QoxO zm@O#_krcx}YcnGbY(zrGs4A?!fm^j~wSVzHO0TS@SyC#bc8>>}gLIG-^&G{MR>+`& z3($0arJX>JwO{&vFVOwglWVCigJN9}rfVDTW`gZB2&SOVMO?Zt)<1XFpULK>KWa)b z+*w|~@k#cl`%VF|;VYhmB`Au{<7KEfkO^x+9cS4?Z@^ygrz*zIy^9P-SQ~}k$UOLN z6QQY5$x9@Z827#|uQ7Y=&wc@WlV)h-!4e#=rIK9wyTv!sfR>56Xu!YM?wn8v#PNCa zC1Uch9Vn09&RnNpsgRlViYxK?#kf}FATny(@AeY z(|^d;v}9FRFSD;P$E!+71*2D9@WM|5x=Z`UI!s{34@sMvrR{iYwbFoKO%`!>>q-3e zOSJBkE!7%cOaj>tu1P7KvwTBo4D3i-CGvoz<3vp7{=3O~H_cUjA|Yb4=a)Q;jn(C@ zn@a9jj_V{1^+{JOx}(N1!sf81$b>5tVO#jn>?yY14%m-u?aM(4WV9I7uW$oeojQc~ zW8Zd(3_5|MO%(NLCD~ajShE@ZMcpnLfljHAL7{x^*^fLbTp0~si8s!Zbrh6ooGVKP z?=bMraieV6Pct4Q2RZfP!fHuAl?_+^!3v}He(-rq@loJm_Nr~eC#l0puGj_3W(+F# zp@rodq9Sl4PVAI;S_9v;k=x+o590lE;c%JNiZk=1e@2J$Ct~o|?4<3Ef*>*dj9+DK zI#kl@oRm;j&9Q2dT}U%Pcf%lB=Wes#lutOVOZ&?%_UZUXu$dSV2?-=_I9RVh%k|1b z&sGiYJ3W5*60OT?ebf&Y;P_KjcdC9-FB9pkFInP^HNDU2`}a6Q-@Tzk>N7sciIMI^ z$A3v02a@}}pERL$L`80zmB(2ZdAekV5mGfrfYt!~n@Y2r%iS=XEl}7kdqTEO^p>!f zTQZt0Q2Y{$;TvE?Uw;4#7rEq!Vinkp89QWYip0ssVn_}56ozDnmP!g8YmHCB3&JQ) z-&Ps3hBmI(;6X+f*FMx?k0h0(u$OjPRK7V)S|XLhMnt7bMtbBWVx7QEk)nSog1;7e z^#h|adP!q|z$q3Xb*f2h!x%mF9UE(r45xbhpdiHchEgsoE>NE}7G&231HLZ}cq*u- z?+CnRlxi7rNg1}&Qn`yn5v=42G!X;7i`lw&c8<`Eo^)Udz!$4T8dobHjH4lja;uzh z_QhUm>0$1$7f>x)mab1AdCM8coc07<^!fk~7sCwxkOnbz?9FRgSC^e=cn$BWa;$YR z$;lM3Skl0hLRJHq1+aUwq}<4EuWgmR-DLz8Y@_1lOI@m=8zv8fu-z{D+oJ>q8U7*q zI*UbhF$+s0Fu851^j44AxVa|p$)H_4xO0T`Uv%k}U{n%k8JJ;6f%n$g$vlM(pj}E@ z$D@*ow}2+{EA$;h6+kbfj=mut!+r^#0(p`&_M=@7b3j6|2uZJsu>m9&P*PCsY zX&3h3jzZGJg5n;<(buzQi0A<_jU5$Sqb`0#aE<At_ZQE%+QUaDd}u5|mUm5XAxD_KoVzAmBU)~V&C_b_9BF1j(8hD6W1g^A zk+H=99N-JPAwNXc5J7ai0h_N6KV^?Xa*$=pIsqZWRWzSrsI%kg}?wO~n1K>ig1F$VH9 zXaObtrXPX&|Gb;|97i1#*=EB@1@&`{onGW^PO_4V2KbL zYp1kj(GxAkMvQuQu)yBTkReMUw!luL6cQkRh1QDSgcr-( zptJ(0jPFNh(M*L5E{Hkrnr@p(jFa}^h~O`2rHZLxdz1IoYo6?4l^xOtTJ1I;hwEw* zI~+`z|7YLs&vGA;c*GV@sM2jSgC+r2H3jr419C2So|XJF3G7n?Nua{YTeA8`kU}Cu zE@r8qoxp~Rg(Vy6{J}4P6VAuVE-3Xz8xvxRjx4fKocYOAkFv(-=)DYI zBJz880+y^#TQz{AMq+hu1-VZiP24;V@drM%Gzr&P%rINI?gO>24R220cf~?=)wmCa z6qoelC_{h1{4BG|&`z~;iL3*+S-9uVdkuO6GR^kp+toJ3oohkr8^MZE12KPO!bn(z zxSRBtD(|%_`!#=O?k*SG=x}M4y_X7uL_tUsn4xCQ!j|@*EB3zlP5@)XmMQNfC-7g* z4tdQpNn@22_9|(&!YphLRD4g_hX|u*<+X&rNCgum`n8FauzQLA?v|AFVu14+1G0vA zOA#;@ZP#Rg6A3Z#KB@;iyRad;2k$jiv2+orPR5cgAQZ)17FTZeeOy*!TbHItRtC)G z&qTHPLf6ws;Cr{s>STsSIZGFRN~#;sKFct$4xzkMK1aS0xf?vB=N;i1cjSU|CL7}J zA;&zM&7TwU?d2E?Q)PL9(zGCZv!(Kar5brDO#b^{C5CPf%+^)#kNP7?3H&3 z_tks9U!Ljg2*z3-{~6;BYK9d{hD12#Umw21NK`FfAQ_0M$zX=3JfeKo^UbfU5#X&;5XShLJLOMQUmdJ&y$kU* zr;2-qh+6RUJ2NLO^O~@}CE3y)mWFGWkQj>z{s!-w6T7yTYqJ3d^5&5mc*=q8w- zjdIefm&OINs&bK(X`F5S=-DrnpbfTdPo;7iyC%fs&vL)ry2~(_`1xTg(_gK~3<@q+pO(hfT zU!C8hEb)dd3#A&q=I4=}ui1Tj2|)l6GD`7eWgB)!D{Wi6yamxu}ieU)NDkQ*rvxz0$2w8dCLIV9&xJnzQ};-32^Z2`j3Jl z^X@Odt?t$}QDyCf7|b18VI{BB8@gw-A2dyWDEl4mwM8*MM{MBGm!AQt)^l!Z6+vP- zDh`Qon4{nOZ>5S(bHw0AQOddJjbDZ&7#b~Faf@XLQaS21ga&K3M2Go8`9vF_3zuRx zXbl=?*-1)ZAgif{>Vk;C@R{yg9rS9^UXqJ z>oQ4DQut~|O@|X((+r1YeApH>c@NKF+VUg$xZ$DfEJ}m7dg>ufOeCK989w&AKxQBT z)0jTgKqfT)fM!2CW{@I7)CNp7*J_4?NxIu2oZBKNt&@>tL?Gq$LU0{?)o8(ra<}iu zpX4eW-OidL6qUoAPK*7yJZN=jxH2XD1T-K&_KBF`3akua(^+vuMcYGLY0TqifMPhf zp~!l*i-y+Ir6k7Jv3*F4`!<@!A;fz{V$UI#sE3A(gth5|66@RSx%@Kz(dU(yuNk}w z0P+oEy2!`QU{=9Xj@o6ruP=NVI@~#^P~5fG`%-o6+<=K|352nL8~xK_9G>p=8w;kIMUfI8d#7hx7Us zrr(!?)Rpww-Uz_Ad8V(In3Gb~=1uGFb1UdZ=HWOQn`TC};9RO?mDx7sB_;2j%w>(B zqwUVTy$c)*@=u?|x;jl~w7SR6ZD^W~L70{!8ISk(1WRfzlM2@?IAdL7H`IuTu8BrOcwIX2`16hLc|1izNOHBT z1;Sp^PEu`Tm<6`SR==MOwCDv`oc4ZuNMx=LdB3 zxaNLnqBCNa^J_z-LpLy8;aC&iJZy7MvpJExo=8?!v$tUZWx?eO^(w^J=%3zNPw+)e zT%OcOyLp@yipq4~Soh0|?jSiaXDFFDa068wv=GHAPf%i)na8@9+%xl(F$B)iMU0t7 z_}!z8l>`$}bDy;SSL>QyWQ91H$=baQKR}E&iU{0SVLA&WfOSNYYxm0&v{OfRO?nRN z+M zpekQEMM1p1Cnr?dl35u`?(He)6ntU!**w2pw;n^}hSkbrJb579$VujnI>**>4(6RL zX4@oEjcUT!A05vmMiLz$;ylV@D^_)G1u^D(V8&=*q|;Jx;a!QYjqoEh;!Qp-7gn6) zUhXvbw2NHNPu&|ro)b(vxvFkr4O2Cw>n5IFO#LQB&R-t zM6F(YhK!dcW9*!u4{aBNm<$E}d`9R~Jd|hQ&L&ocCvcOo7hG*_dZv$3NL!|2f=LO$ z=qxVl84W^xXal}|0=09ZZXAj%6ixZM)Jr8O+?Rx88%|BLc1x`Q*b2O#VJACi_wGDM zsV?cM((jl?H_|`gj%FzQGMmKr`*xX#&b7NivB5)__Bt603j93#03#|Kjd2&1y20~7 zMkf7+sdV?1G3%fxZp()#NJ<%MWXiedcI)yMyaIjv1u0dGX(10CA%#Uv1lA$a*h!y2 zedgFzC=bIobg^_nGqU`K{O|67-R^F_e%Cr!e|b^gKY@hxrEqfq{u8s)~F_FUhuVt3$+u94bi1|ktK^*6OLy+1z34) z$7OJWLg92~Q?j3nTo6}fIwW6@-$&~tSKr7;H3odtsZo{RS0 zjf55Mukt%G@jWhdF1F2|lN1z?eJBvb*1WKll=%g&c9?|pUY@-O&( z5Prfl`?{K?DI1I*ed@<4Y_A^NUE$BQAeUB}l8m^?b5r%T3tNj{LaSs@Tlx1bE&a?t z<9As20^=6?UAp`OfQj3$xwvi=Q-PqIx;(mb*S0)#>`3HSck26NlSX zO=IwBiafTxbzLT@e~|O}t3rb>3&b+Q zEp1&_7|xZkKrJC}oeZwMR5`3$fRen1T|<_oB2YLZSm}%zDxP9eE@ns1CBER^Mpob= z*Wp`k=up4gXiQCy99SSR0|ong6?W3Yd%!(U+H9yc;+g-v(GgX=L>v3St>Gj|WHR=X zqG6NOnHK`KU|jL&9@>q8oH2^n*gW0A{m}2HI4pW9?ZY!3|K@|PlZ34hj4r8ivRt^z zLPdeb*4R{la$68ksL8=lFPPj(jEmwT#Yk;yIQ2&^U#LzzS2m+4`c=D%sAb_Z*Tne+ z)((cDQcT$ulKO3)m`*9P9IN~J##Xc`efn@bN6sPis98bWuyV!>FZcBn23MIn?Zozp zq~(XTqggciUb{=UOE{Sj3GHS&@RJO~3Q>L1yZ0V~&Y2>s`?29kLm`A|Z0g{x9iJ># zMp`zn78qrPZiP8GQ^`3CqsHtYRXSkL`M@}fzU>V(cSYMwV-{*-$@7S=hJ+ycfee`* zSzZ}KZwv0CcbNh4Lm>6FQt)G%!rmQDv7s)xmAv)2<>wqJqK4C;HZGAS(T%am>KAE4 z?YzF7NI+t9&jJcPC)T8FH3(d;}r32rGkf=s6C$`>rv!}_sQOnefuVi|mCG@K4>UfJUu+QU3 zGn+jDAnhJTtg(*U;J1kOu4SkcjB6nqp0Mx9eV6TAc$QIX1Yudz4;O&5P6jbXRyKpJ^xvIHX7U1_cNKyXu%?{_5>AoD?;r-zqEh-;xVB)wN*Z`4kW^agmKpF9KVNE?F0vQ_yO{MkDn`^}j)p0ph>t4%DYCB`WL3MegH zC*uS4el7GF@lKUL?u>vHk_-ed-sS)x{H})tIn>u=t3N<~(_7MbddRx=GS%>3*CM?7 zt=a@JWRCo3`kbg}WW=*#4pi83-l&q>|9UEfSIBVX5gLgZV&KAPOnib(kqlIA;n@mCdKbdCRI#YCUUbm|seS5u99_R0vY`>vG z@S?%v2Z<0I*9<)LIkrQjv z(u5nvp^|tIR{JaYKmMqHqq+TSdGytSr`mHbzfP6J*kEog00k<=o9;3Hd6|Dj3P9qi zz6q~;B$R0XpW8J57JP`MXFm9`muWzI;q%$J|39AoKkxd#QIxj|8H*;1-U4S@aCgl$Y9e^@2~#_uKwF4{_znYl|5o1y!lijNNVHMb&v7?_M89W zP!V2%2dPK~-dukMe*FLWdW{xjWlSO#Y5p6bTxR!n9S}z*9zeuNZRU4a-w0&mkLrOE zSCd^4%!{qay`Q8L_Xvely!J?qmn5PnNsZSB&Y!_(Ol}yW!Djvt19X6SuFF)U9y5}#TXBxDH??RkD+dVs-JnJd} za&yN_|J{O<(R)H)1CGJ4#I!FMhhho;c`x7>mu3z|HB?zFs8VVfAP3+^-2~;l-IHe) zPEj_`I~3MjMm!sjeys>U_3naA+#15h`LCcx5T|p9$7j1w&l1gnp`gJ?3A-I{-|Vol zQ`JBP7<9wy+ZW2ouvR>da{6!4mjj|aMtW)MBH*};-;&xbUMDK@#BQaJ0Ov(BeEOpi zJ^;_G@X&aF)$BT5)D7%h109r=4y98U;~|390f_b*3#)XR@B)R0XdFmAMVj=RNTNHmgc3r{F`oZZsbMS@~(8+f8Ux4lMzD zaw~))a1FKrGi>e{?<8Tjb60?7Zp}x+^@)Gr*3G~-1PrxmatI8i%UO{s_10dUGcV&J zPIauf=P?yb9+7^~!iI8q7&CzHG7AsiSx>Tc$CNo7{-FspY?J_|Q7R zIny6plWVO2sQnIq?(sa?uom%sxSP$~aQzsuMh~Q0i{E$Ks0HJhy?~z(SI-+TtaWdM zTycXanD=Vm)knC28-$6PtY?JI@(4RnQ;!y2yIl{u3^oAS(5`MKV}C^BH%0Pst}Dp~ zi~%hD2%JaxMhFjO1xx`n^Z+A@hb;2XC!Uv7kR~ud9-nRNp1u7AZu4{?n1u4g`@b!| zJ78aD+vTx>I1HZ*9q~i!p~yK<)Pu33P_E5${&1A?n@EvDAQg{nTRP585&5$RMvaO# zNnkGdZ8VSE1T+5Vce#14^fOr3l2$q$(gezD^)mv}8U7ThB(@IvBFCvqFHetV;wJL2&R5QjAkh8J1gEWFacPu0!|H4$iScJ8j|$Jp)?IzLpyeN@N+9N?!A z)cO?!ujd4jS--+tEQU{M%3W|LQ4f8dB>r89tMzEH zE&yd*nS@Ok)|O$UsdH{GaBJkBh62Hkja$sg<4LXdWem+Eq!AyD8kXSGhZ2}g$1QOC zZ{`TF#n>0$Pr5-3_pW_H_Y*Ji{Y}R92feoBB@=iiyM|M5Pv zlBz?ar~i4fAr%45md#`RujHot8-&SVY;(>LOZO!^+weHs|L0qiBK-R4+Ij^7*gWuD z-3ej-%$?)Ig!q$G^;}`aa)fYapNlMkhCbJ0Lff_i3>5w(D6CUv36d|G<|04$7dHm= zs{?Ttkkj2k?f3Z7Vf%$Hm@qLtRa9SCrzOsos!s1(7(XX#^p%Y}5L0OHfT- zM&BLY0PLLJ2@ona4y6qq$#t$k8c$*1F5Z2xD}y=jrT3RBoUaIt z+!5e&a2=BH?d%J_V z3_y^1eD+7=?4rQL$;srI|Na)R@R%(_#QDu$X_ZWZ^&Nq{f~({jsdCh4DA(~+bP)Ht zHIU3x4s0h^zY$#kgO%r2zzKa17#G(_hQ6ZGoF79+2D=%T4R--&z08?4RyelYEA6j#K5pp=m>e*j+<3HB{}GrBU8@I^bX!jfR?>J@ zI**WtLw_Cm=AOS8^R}CV@ech13jJAnRO9_3X%evf*~92%U~wOx4wS;Vd!aWD6OQEf z7J+w+q?Yb??+B3qEd_NchEYL_%}8hAd#0nG76TW&yjs~O^cLbx%D*E(;_w_x5a_oa zEy%P4xu!2)!F`_3Z?K~L)`kw0liccPv(!{TFbJ% z44{c^`CFspJurvUK+6!Uj&8yv(`Vh^+MF*r*%mwr6Il>kU^;3#dEwBDcJ`s7Y;zzV zf@X+Nq?Yv%%nDc;5hB0=VFes5Rs~{1SQ~jf>&Q%7R4Z(BoZb8ExD3Dzk-zU%c?Bw* z?&Djl;*X99@U`mRIDPFdXi&0FkA9UZ!W08rf$4YY4$hxFTy!7%pi0cG4O;1n7JSS< z(OsBMnQ*_qUTm!-eYfz~S!60h@8_ue)`w*WUq|^>JKghpZ!{E^^rz)fhwzfI?Zq0f z6vrtLE*8#{Q?=M9QA!ZjozS$p<(!Mm3!?^^hd-U8U9n)(4(uePV9se79;0^QLsK;Y zig90Dpn)n;Ud+VK$fT&YFKj*FTLMt zfH!nqvbtpb+?tETm@wV?9I=WJ^od?@7#bwCeq${cndgad<2HdlH)XB!%QFyfu2?@11|q> zOZY5w`_BR1Bf)a7)ps=T>_qJa22D3u2h!B_O}+{8JtpGdV_*F%+|K}T71lTN!9-43 zt1r$qBj`#fP{lbvhv;J6f0VL2RqA_{sy9>Rwa&>-6T-MPkB_x!Mm89t1{cJ9mnnb@ z*7*0U1IR4k7w{KqIm!O*71<6Gos+v&;PI8``6CVlJZ9<#I5pYxEN(c61*s?W0QaGr z;|oyEId&qNo@GD$b27)A6}jd=#?A^n8#iAvt(S&rK;P@7qkkW|0`sTGT!($nH9alA zy}mYGTVI5z{Y0O2!zUok0Z?>%<+(p8NdH#r`3SJc>at$!F3`gtt>ZcOYG{3;amU&- zEcoOp??{IOH2!+y2}{$A1g8PjyxLFg-J~GyJwa7B>loLaHjw}qFe}YVtjc2KqtH>i zRIsSu!{yc!_tza{L_NkahhX4G4;IXXl3u)=1ph}Z`B#NFpYT`d`-xEcPJTX*6yxqe zG9hRUV&(}6q9u)ZUt8%4>zBu(sZ44Q{U}afCw=~~F|=Dwd7(?f>pOFsc7EmW{|P6* zm#0A2B1Xy$mD8#qzJL5D1Mzkp$O(Dk0de?1y{HS&eGtcLH7|l62>9r|i`clx2(cxd z>lE~B^b!P~{g?Y0fNBjt8F>}}&)=dV z5ZPUakoAD>>g$JSN{~XJB0uJy}h^E87Wb6jCi0ZNo!o0Nihg2#S zYxFRY><1Jl8P)fI{!Uc&YtWJl40ka23Ck$(QEdNsxIYD{w)EyL)1Njs&^~v7|ZH@4?UNk<$3>%f5246sJ5q{ z3wCYRZ1&*!vdD=v$o3KfYxwkK6E-LSBrSE+QQN-Rrg*XCa{TQ;<|+_&W^?0@(~II9 zlot3^r~??9B($(8g6|mwuD30wQwTW6x)e_h&t!ZpS8sGNpH2C}>-WIJu^qw`Y_`_n z7=-^rKrtvJ)tH>HtHSIlRgK z=sT{hym{*@s7g4K7fsjRo0ZDOd3)qsW;$th9sU4_;9Ok$P2`|`t$u0Y{x2rM`xWw; z)CDziJ>E^SZPm3sedz1=Y+rZ2^b#?tybddyJr=>les`tBO&Aa*tQzn~Eh}bn6-0ma zz8Lz@uVnVAdhu%2=cwh4t8vt8Bby`d;t{9s3ZFFAr~M~s16y52iJ;;2UJt zQ5X*GY+@#oQ&Iu+*XG9jm|*F=k0^nb;r*w;>BkWoMjQLye*ETMe&kG9c6e?4GSEAd+ z?p{&8t6aDYcJ-p9KIpAd16Yd1rh`2;c9F4VN76 z5DyDFaP07ZzK~QGW22DAkxO^Xs|^3?H8J&0Hn3PXbi%J^_B2B}!?IRstLSTkKgb6K zsUo`%Pvv63RXRx9_RX4in*Nu>>@Sp5PY4O}dyR;{H+U$L?z3fIhzdEGy%oxbCm<&C z>0;^6gJ(C>V;2G51VnYf-zr4Z+C(3<@oMos)Zjx*@MD2|GXQv5W?>zjV~5;8FVKJ4 z01`#yK{kPAQ+*M%s0AI>!swev1wyf+cj?KAKEzWQ4T!g{WVHj_IRK) z>?cbRxKq{#>_q&k)nR6l0yd)PUWHJHa~%$fS0y_GE)oeOIe#xQI@Y_f?NV7 zp|%&}rw>~{@($#5vJEL@oTspD^R-J_mzqG-8tRJ`T>q&W|2F6w0as!SE~}xjoB9px zIH1iL*>{@WX7LYP@E#Pwc(5XF&H}lmO~#Gbn7>+xS~&^7@HoA35G#u`4p810Oi-dy z0GjIF^_xmkyn8Ak#$lWXHiZPj(>=R6g zGtBJ$WmdQd)S>Op^{9AK#`i2?*RKDp1kY8yikd8JS(0r0U1SXAYL0-Z0!Yhgns2Z% zz5`aCiE^p7m0CVMv2qhzf@|3boG-UZ^f4^UC3Tz+4ZEER0}XbE4GtAZp>|dU(750f z`InCK2uG^X?v-?GEv5pNLsFd+zGYDVVBqBx>wx|i&aqv)JxdR__zoB8nG^C2CgL;r zF@sT{sEvP4&Zo;#YV%aHO)NxQJ*G2X>*ZHi1F2>I9Y`v-bn#MMQbaNZIo$(c2ek{x zD*yS#nc=&wTk5#Q>7J8$;O<9-^Vg9JYEy{vWsb3F$84C7h&3-jG8oZTZ3+^TGSc4j z0*9~e9;V4H4GWGcPOGWDsH_lhJ{G3N{NcD8FEjc0uNa^!W&Z3b5II1d?dfgqYW|;K zbrUV&n0uepx%cBQJkA1SAFmS^uc5E%Nn5jpKJqK*-nP+7dIsR!iJa$|yOsIHEH6qW zsxBaAOF^G%I_coJRT8dsjows_(PHHN&o;T4x}%FtEw2imZe+mb!hgP5bSH2wTNdpi zn3_f%KX$id8K&Q<5(&5liZBvmDh{!}!OFH^wia^OFMj*Qw-3}4sAU4se$7EjG0o+m zy%3@4I%Mu?UL0HlaMA;)nsecc;!e4T zZ-?s=XJ}nYEG=t&MjCD<_5L{E3kVE7jy(g+h?E`dk$>}fi@w=wRf#csLzt|GX^{jU zx(f>?qZR-YC>a(xZE!S^$%wLon_##CK<`@QS0fL3*{I@{n~S4!_spm|x1!-AftLBx zZ~kumpq=m;e`y4K0%w3wt6P{8o5Al**%$|w%n{JI`8@M^j!hf>DDR36`@q}G&1jpj zReDmPBTJo;0J_7-UQU=-PQR)Cm7nc9@7m)$XDVA3D?VZyb@0PkG=K?zabmY7xL&&B zMd^R3AtEk=Bj&mS{4+3si1-!g3bdEk(q%4@{%TE{Ce-{aLHNKzHXNI11JNoNJ>9DV z#6iA7J(cRP9xK`~Br!Z8rEpy#rrnjf?~esByRuab|pIo5SlNPW9l z<$L-drmT5hNDY}uP$8ApT;l3G1XzL=(rmJp2tLn?Q%6^cjR~&C4!Zf@+^2wz+zpPj z(xtbUC50F{*Do!Ay83veR4b54&D&l04^c2dK5~WoK3*B{%2%IEIlx zMdyzyZBw;EwS#idZCQQl%;s+imU~s6vgw$jwI~enNB1H9O0%&ehoZi=I!^%e_uK4m z`zQ!7D9%EdE;wa)*U3oNh|Kr{@?~+dTrGN?f_{_a?LG3c8CdhC&!~0Z>*cQ&zN?JH z7M0m{;uNQJkPrR5nd>Rlk__K%atHvb8zX61P05B?@0LII|70ZgAC6xDy{!rd8SbztKMmbM>4~(Xj}lW^?n4KW6h@{ok{AK1VSypAC)m5 zV;_>2aqgfstO*w1$%9ddR}vd{^-!;4Hoo{Q7c=Lr$j!YqFdStV;Ge0y2~&tlpbr4e zN|=th^f&(!6L6gbcj)bllHQ#L85c23@_$~%eb&f&$xVU#$w2+H@)CEf?;D*!^_^FB zxR?6f(Rz>=RNT@ffBTP=$Z+y#u_Gxmxqw4l=3~&g>M%}&VP6=S?D7YxtKZ6VEF1%h zDMkrQUPEzxk91cq$rnO%&10z`f6&4lB(i`!35eogCwuk=C?A~i*e8IsU<vQ_|Cd!LM#f>cV8b)W0vH`QW z>}Ea~!P#W*`gCPxIQh=kyl?M27!tJL_wWQPw&lN;$04dGq&EQIApA~Y?EN(&ExJ2% zGCdNb>=PRidUS=$?XKN`H%*U8x%fr+yb|a%aCI@=Fq3%&VR|11=37X7uHqeFsjo)* zJCPUzVWt;>jRE?bK8s`T;E?44U4Q#_*K4bUzG?f<*9Yx!3~22AE0FIBKxyntcy2F( zbFe_{#vO@dExxzk5bI#ZoBmoFaY;Nq#2I+dUue$abxPxh5@u=8e((PDa1xR4;z%om zuYC+VSIz4`Rq)^cM+wN9q*EHZOdSCH z@jR~A{YSsOR1UG)xT&{Nr9RQyV{Fypo9w-JI^-JYgrzs|;;4XPy!HSCCcm$fxYm8p zpz1pqtgN3=_z{eJkV^dyiyzgvGS2~5rsi>Do*e*A!*<{G`aRAasH#o$bh(tVU9Q6YZb3YxQfuJr z+ZgHpT;0mSR(}yl#QzV0L6bztyN#{vIu*2Hq_${dP9Q%8so&$0KpHJ($6C0OPYT_uZ z;TenDugvmqVE1SG+X{qO$!96j1As!m_!r#i@Pq9YyR57pNl-RAq~E+hiEpV&+j{Nn zF(gce?ILb;d`f7CCKT8bEIy5neFG36Riz8y$!Zo0Xr;axW`BQi`?-1J0%oTQD0jy1 zzKHe!7;?n_)84g*L%ntX8MovTPGMB2oG7K?6bZTIa%hBOMkC5d?)Neoxy@+kM5u5G zxfK~?6pBbgp>#pzt`L)3t{wO2x4-I~Qp1_|_dLJf^FHrefAoCK_q+FA`?l8FYkk(* zl#Y-?B{e&r%BCbk2#2&{!K?^OP`9L26o-9m`WQG%VjXt&MTG);&8Ov&2sCn=h49(Z z_xHK{b1%9%Y;k-J{LF@g11a*?P0c3X3r(Jd5U|dtd$baTt*2}BJVxKm%Hykd0I_AB#TQ&Z!DaGFc1nBmxztKe0$M8hO#|>`MFXc2@-d|I zQnC4=_^81t;GJjVL!84xjwrMWnF{=BNd-zyh!Lw9?X{g>xq^Do}uJn$9CB zAl-fFCP?BERVwv*r%7ZzMW?>R?x24Kz&ePhpC|#BS(fio!!&9id9~m-NTWix(7T7d zjWaf_J0G$UWuPM~p>`On^mH30|Mg76Z6Q;1)#U6G6*7yB9!cC%f@eee zVM>6*^w!L3UqWyp$jGgKE&Hfnc1-2Ho%G+#x(;a*WBc_Dw$0`bMt)GefkflGrrw^a z#^ccgsg`@5#mJbODiz2z%H`PYO7{ku_zRsu)2@3aR<4luRS>o(c&u^FGnpJ+wigbl zs`Xht-MbZBVWHzjdKb159LPrA_q0=1Nq2duZH&^h&mL${AXdyjkd9V~-&rBin46!L z5&^|O5cR{c)tjWvpt_MYWIC5*pR(yR7bh(E9FK_u?8hjK0Ml#WObs|icEkM=*Rwvr@>(RcBYar0SV zd7L|f)9v=&?N@AsSzh@94*cs0WdhK7y9$cifkFZD*W9TD=}lyk`Z=7OodJ&1s)MAE z*}w139V{h?$Y*K0+rifXh1upW>JOQrNEb3E5_(jmT0ye^`p`XzL6|asveSe6HP_^ns=oX?@kc z0w`n&TLX?L@ZyX`D9>mz@Qi#eU15#OgdEuoJ^{uj2`D(BMKSE+aqfd108Nvp;*$COt#rk;F*_G28wg}r`R(Mj!ZlE z9RkvsEfH_;n$3lHy025qiM$Oi&mjn~64}I_H^lhc&@T3!%Dp0U_|7hC_rzp)3afM$ zluW-YYQV$np`<8cvx;{8U4U^?f|8%a7>7mFu6S|G!&e;SY~5y+ZY5SOL_XmL2;e_{ zv}OB5(7@Vyq$B{4UqkGAZFNSpd|r;YzvEqt6ZPplPzlK{s};I@H}RMjh`U5kZ?QfA zHo4ObR6^pg}vt{2@NLjoZ!0KTMY6kaWz4`BW|J5f$mH?(q3cS!Z<@Z24-DEGds zFhTO`Y{5hEMf7Iz@@5DDR#~K*rOf^ozGD4(0ilkPZl%gK1{Qo>s_svOg4|ms^y=g; z1h*}?<%|%m*GBI-u#3!_13yigRJj&ew(#T_k4`PW^)q~C!dSNM!)WzZDAnCOjzmKFjf%O`?-QKZdsM1KXDdD)N4Y0S_s1vzd!=q|=qyJV*ZDRR&hxo4GYLNH zI*+nk?J_lA%iaVfxDrc|er6ahI;4@XI>8A|eGn1QGyfDHKH!Xz=>17e0$3z`@9&Kk z*Q&+VT$K*45O>SH43H3;+6OZgrvK4um4%AvLNLBdjJvSEyKO$t708Kd#`Q^&R6s5 zE60jzJh=M0q0^UMYT@~6J>Fn!n1LGVD*&mXi3?#`c`OYdC&W*Wkb~?|>}6`0u(J19 zlH}#%ff}mP+aC}y^-8h+WaPW9WJ8NvKs>m3frw5H@h+m)WfS^TR|FsH9~c>qL2NLx zo$|{CKGMr(Q;SNN>FVohNRShxzceoMcpr7Xn5Q2-$l4?PLX&>lr_bqmuKG;-o>Igb zYxl6SIz4c#*m1fO75OmP1|xA5!J3SpYu&EPzHUaPz1MK2;Ni_)H;+9WDk4)?1%u3= z^E)>CH}*AxSb3yHW8)#G>(#dnIRoL-say!28I$Qy4LZiuEX{K-8){`ox4D0=@|?02 z%R~gpIcFa@6OO886U0N0@t)(57%QvS#<%*U_Hc;GcD)t1K zlqBT)awhJ><(gHfE5Ej{IqWs{fqz&61JdZYG!#L6zVOUQwr0nT41qg8C!;`622e}t z6fK*O<)_Hk2lDe-9P7taB;4;xA}|f$;Di|J`O^cSA9Z7;E#aZ`B7c+1VIu*?T`KgQ zKUv+r*-%kXGKeSqR>d*d46(T>HHIjJgKvi&Yt2oHEL7 zo{0-{tP=II;ItjlRZhf`>s|(yVFIn! zyP+#LbZg>&$)p

&PHz%zZU<(kZ`rcFHhCWp@^!&oV7NKO{xM>ZEh%*&Bjp^(Wk zeAKM)={R5?rn7byky+JgIm zA|fj2jd<|3R2-y*<>pSWxPl~@;;PZ%2QwuEz%{#1^E4w*T%M;}q&e~rNWc)S0O{r& z86ty%O-STKI`Ds)IzJ^;mb`V{D4q^qPf-LfhI4Pljc##Z3D3 z#0&tDcdCeE^#;0cijruf$IzoTK8mEd)K$b}M94n!nHw8_j!n!08?jgvs@Tn3c12VU+|9a_&v`g z#T`Wf?xJ1u4`wosKD>Jgx2q-%bKP*VF(-mIhl0|me!sVDE>(84uyO0R$@LaOgS4Te z*$`$SQe%%GZ7ty-%4QPi6miw@$0a^-S=ZthICh=y!(>igk= z`Dl%d{{|TnM5V%0?8(K$mlzuz5(9(MY97r<6EBH9$ zqR_RFcsGtxO9;pKD+>gs*f)L;2{7x;01%>l^{|)aHa0P!qS+1mw9jht$2s^@w%Gnt zlhjFgc2tam41@$Bg&GD-LiS8&V4E>_xW7Ww)999G-}AoV^XBLUoC_|P1;uNj5L5?( zjw3|@!o*5nhGSIZ$tPgdpXNl0F1SdkR(7x#Kn+x*`*dbye%U=S1TOS^qR@OSQntPq zf>jrdruzyrkXB?UY6U?k&)Q9tx9ZTN`q!muKbE>1mOfxvLhyh{THEJOx^9}v z0VPR$By)i(ZR?a%WP7qNEyfmH7CX4!$Lsy@U>ne>pF-KqM=I})MNpyh^-npX{E*Km{;%HAw!m4iAd{6@-%)_ycDo7r6Rfy2zX_=R zOGEy|VP)4qhTJ~No4H+(`DlQ?hRiC3|0^sdxrzk>|J|bhVQxD>z2|=m3N-*1B+cE= z$EeLV*W3iRktw2E3c-=g=fkQtc?PzJzq^66SujFKe>Ot=ucBB!2k8X#vRG)w@XZ+% ze*CNNi+lAYz6d<+gs|ydtL%%sS+O#3ySXuN6u2}Wic($0Q zX8d7UV!cjHqx7OymLw!k7&JetYM-})Be$h@yrTfb;nl7j3jE%v&ZxdxC_;?8M6Bc` z%#=?l<>?NPPx(rZ6Qjt5h4s1UKTMTjvQ}KKwG{?N{<`-COZIfp3)(xd!Jd}#wY($2vlUM5C0vIFFR++V zCmH;f&kqKfg}MR>QgNR?V4uewDs;VA47peffUz)3>Rs6^Qll)U3tdFl-k3#1=r@or0%Com*h0D}K+j2!dyu z^%uJ=w?Dp2MKY9hbs{*=0>n<4^?T(4Q?uxXJ6y~a23!-kyMAvkO9z?3h>DLfQ0DFb zgH9vP!z>+kh}X{F$yzk;U?ZM`He5?a&3*)}|HSairroSq`STXv#58{C?&7E38=&)I zUI)SsgE#_KN=@iOC53L^Ho`zb1fS6C0h75BHd8`|XRA&g2=jv~d8EDMJS}=b5(C?% z-=pVclRQN6ObG~;Rh1k=8B><}lD?D{O7oPnZua_r!DBr&B<1w?7R9otC2j-ZyIw_H}4G(+= zZN*ZvZ(Pp-f$PMRuX^_wh?-L~%f*$Yst!iZrY@u0e9ab(3~|%IIKSQemh-Dq`-{=y zKmw27IJoxRi}E0DLkm#dGu|U_Qok<3fQ|jlSoaEGOMRzf{*W=B@Y>rf>SfIXI&7Uh z-nW@sct@K{Ss;7WghNuBFtc4f#qu}?8BlT4=JEWM*Uxv<>w@b1-bDw`cJCtdmRVRV zw{pIS-Ch#$1>Z#SYNaOj1*v{Y(6lTL&&RYbS46C*#>J113W7M^rft>>W5Z_&#>T0V zKtX<$3t+KW`a;0MQ|wLJ82xbs7R1M^8G7fry0QSND@jz!!mKTii!NzpfU;R6YCiY1 zpBqt{=_XI!3=qjFF>BvRyb!Q8J4p*<=N6JDTnc4U!{kC?7bgCg*{zSz=vtS@A0Ib? zP7B)a99;VYPGgminN2iu3vI_LKfdW>aAMYVKXZd^w4vAuT2eM<6NB3yA5b93?~dSP z#h%Es^gGDxGUD1I%MNDRME&IIf1${3NPB$hKYo}|6wTjDbWw%0HBkO$c(VcH*Niq1 ztqmHb-Lv&xX^dVo{>=oart<8^cBe3Yy@;mIpPYca5pC}dwl5spnJb6V0A<#ke??x3 z8GT>P69X{NKPKnLq%RH|?=5{FCtMv?=UtO)S0@cYNO+oYnkJcR@fGuyszR3@U{8F4jb zNXU0hK!t;mpvaV8ukzxWmg^u%1Yq>y1WMw+T}w+-O6mklX05;Y%&O%oUQ9Jk2eKcq z4cjtjVuA|era+P4_A}q4Tw0ngP$(A4<|I;9%m9qIRJk8h^J8lM%XbZ8KXK~i*o`A1 zmLQS2U=or^QzqE`q-iLQOm(t!m_gXkQcUO&;5d#IJ)!>sD}XYQ#MRs#_F*z17DSpU zU>}D@r;jq^lngmnYz-*#_Qde)YvxHyjs_gZ)VK6|#|pzHpfP!y2Z~I$&6avGPn!K^ zU^M^#o|>tTgRe9k?;G*6m(3=%ly&&!ig6Bj4erI7T+!aZE2&O|!CBZi`8O=_U;~Gn zPS2c_TH^KMlDMDvaR$D@E0?V8>(94vbLLhz-d0|=`M(Q95@AkncB1})+E1UWo2e5q zrKPW!qa&7$4ZAwYYPmu9n+mpS7MAR>@xcR3(Lwup11)ZfXZ2EJ`=wei{zgLlxM-@I z7jtw-!r=`M>|&RnyU+ELZW3WxzJA5b(ILB%Ggnge{vz6zoct(uHY|Oh^)hpG=&2Ls zM@9Z|$t^UU4DLFRwrn3_jt&%Dx$1+8ySWVj2M;{tB R&x3(~dfErHax`&){{s%|i=_Yn literal 281605 zcmbq*by(F+(?24JfI%aY(tQM^yYq19Lw9#~2#N?ucXxL;sB|lJr~}g7-M`}<&wXF7 zJifo{di?{J{qFAU?9R^Y%x9KBIa%?iC@)dq;NYH0N{A@H!6Ej*!68&UegvyQuyXH$ zgL?up6Bd?}6c#3tv$ruevowN(lL(B7L()_P<9^=5ParQAKrnpYf`AAA!0>%J>Ej+O z5ejnO_vpexa(0SR*u@$mf+eQP9r{Js;au`t^nNp3e9@T-1)aXAF?+@WH{0yq^A|U} z9(TzeyA5l}vuATHaO>j-MwReN#BYVnDtMS^Ke4j%z7ySizy*h7_yd*T9Nzy^R5%)H z`ls1DWo<2_kDK0|z?H4Nn>*zv?@9gP;K(1?*UG)3et%5{=b9iu33&9j=Y#vqR3|gG zi4a?4JKU>&rR1Uodu$VndNHf0C;kY&U^cj?sVhlmX<17!%$^a$m2>5jI z4+QjRNB-eiufpi)lXLV+n*|Jp1_xL^z6cS?uMPO5(Al?+6~b%IC}*oT2nVAU zPE7Q0ioia*nuJlMXm}_>nO6uAT9_CT~a;G=};~3fGnA8&A!?o>D>OL znf6Mt?;0y~;tp8xk$v&bsDOj>DKj?QCv{TEkaxwXQxXwrSXmWcETuYU>(TKWnB}qC z2n}l`USj7Sgc+^&kYU!GRtj}Ww5s~6ehnVA2Uc)!sw)y(hP^Edoky^*lIWAfJ0Me# z2_ftirA7(+wjAp8F`H)Ev%;ftv0P+l@`0M5-vkj=FiNJ9JARLGP$c<|s;54aX86lH z*WzN1S8AA4sWIJY(dmImfCm+CQNKPwrPk|zR3$(Z?s!~x+^&c(Cv?BgxhxH(TabjXp|{{g}95kmG9flO59fDAM!xcj+$ccqWU+ zpP#0|tu6d`Wot~Fzhb_mvNCkZ?iOmiFF9D_jP)Ev3Qrh0hr^3c0U`=984E7VOq&qL zv^X_YZph+I8y>#N9ujg5yO_n$2qOGEq)S!qFsWCJSYB?RO6QEuow@j(^*G7>X~;lq zekc|3WyG}=U#qjMG6gnK2$2`jUX53}>KpMBZ-iO3$_9JM()##LUmI`qU@GkTFatL? z*UN|Lm!YQGih%gdy@y|U?&3<-{y^=#p^H31ObTO0O)!fjw;54=x^XzE2hydZpFFu*^3Sz#~4F z@j^;CL=JWA0by9B{Ii$uD6>YtYgRvI5bghtZTeI_Y*#etJLWp#@yqEDK0zd=w;Q@L z11}xgCtu(OcQcn0$b>R<&{mii6Ipzn{=x5sxYc!8QOAL9@`HZ%Y3YI~4r|B9%0IAg4HcJH1+-QQn?x@Vb#%3AA?M&heM|E?UPk?3mdYOU&} zYK>}KM=q!@k<@TH?kM;h{yNph*}9D*UgK^fk59uponTzcO4U)Ed(9NVlvfBE_e&(p=HC{JVYx0yIh_9w#)*L7d$QNN*Q zpS5-!DG%^vvc%K;@b&=F0BPw>7UZMpvS|lPA4?(gF3FBu6}lf2Lwy%OJrS8 znNJ&^mzhxG=@PCIAPIY2s-G4LDXUVVoXizAQ2 z92|l}#c;`x5StO}7Q00srhcl%RP0wmuCi4es&+HPY;32BSp0H=X5wv4gHv_QhYZbb~HRC+J^J#rK0yOejr9K~KTlMj^}hgq`HQ=Bb8JM5hBg^ro>!O?y!-FD;7F zB(0_{^sbArsL&!}m-dj=E;~9q3&*CtA;&N$fP;;l57(TvXV>}o((tFd^@Sz*9~JFO zwRst9SaZ9j(ZY&qH`s4!<6;1XuwJ4h1}=uCY8frz8yYd&l}H` zR$!}_x3jmJx05&fq}VpXsr{*%kDpKc9qC>Bt<6Kvhd~cdk*@L9apH;VsrC;13C?Q66vn!w8*L$o7gjv3z5NKE+XK^&_HcMuXiS2F!x`& zK8(7iWQcd9{eTmNRYkKZSS(%4Q)|V{ob#$2gZQyHyqyq!Bg2>vTPa zs0heT%8?$?V3EKpz~g3llqV{q!C%5YN>xRAbm`c=;gFk_q{o(}+ZB=E&T_%>+z`ET zr1I3TWv%;Y>*C#1^LFF*g9qSp!F`bzw3<}gn23QBABk2FR*HMwlJTRP*y=z8q@_4# z()E$RNE5g3ZW>40Yu#&meZ-6sbdz8S#sOL$a@OcoY0zM0GOLM7+<>ymt1U(pYIU7A zBw-PIN+dxWK@<99^?Ggjjtbrd%{myG3L1yT&YRm09iFU8tZ621F}qC7iswY+%n!A% zA+Od9*QK@@-rgW4BhKKEqE_M70xGqXTJv4(#ulN{`O=4R*9xohwYl3XxMn)lF&fbT z#=Q&X&HgSFD2iKWNEv+FbR(7yt=e?OfX7sq5iy;A%vupoVPVl60GFQsu4WCws`I?8 zN9}vXh|5Z>a)rzbS`RSx2+6fD|hdldlYxVM`h6+=Noh4nI_GD+h3cr+P=!IRR#)Oz=RaV&8tj-PXeQmR_ zvbUJ74QnXd^w@7Xyqfpvxm>usjlbDJnnX(UuD+|-C0WunVj1D7b4wSU9f2m!O*@&6 zWSrK1u6@Vfa96!mezGu4)+Me<aY8&*fQsJo&?J>fjc$fy#Z_q;{T<^JIBkQBl?@ zIh51ubgd^1l)8}2>CCpiz2NX*?OBRRnoYwGkBp1V;m&t$=hyb-?R8lfk@GndvUfwZ zrGZ-FfB;QCJBsVRVXzw*pc&jW;l#UgIf$RY-e`kj!`G^8yERot(e@0g?HOR3cUXE0 z-Sk*J+q_%24)cPxLdACj=G)FmHooi-2@XfiW3{#HG5ARMsNVE!%C{Sobq8FLUUB)P zoqFtHPDN$h2Jt_+&G*>k#FuKzH`lAKxU-m&8 z+{)xtb;WSCli*^uNAz^i8|1EY^yNZ$raL~&Q#NCx zgxbEjI2N+ z5dLTb2ge8d9}W&a9schc#Gdqrf0q#|et!I#%;ErRQg5cD>Zl5o;WDtXV$?IV(Kljr zwX*%$0FK9%3s$r;a?~SnwX(E!;Bw_9{i6jJto*YYKuYpQ6GsbPQdOWFiLi~m5eX~f z8^+h9d?+L&Bs}(p##{;_Vt;jq{l-gb>gZ_81pv6XxG=h~FxuFg0GK#AIRUSk0nE${ zuoessZq|-^t_;==WPc9w_c$U(4hHsSwvJ{t)+9g2)zi0ea^xi?{YmIQ|Nfk(qnYtP zl&l^8VhhF~;O7?r6XR>Zecg;)&HhWbpI`p$_6J{olH>U~7?*;PgN>!r&siy3n>q3^ z^ZY^Me^&o9$v=C6?9Gf|Z2s)V$Mjd1f7kub_QEz+w)RF24*zcd@4EllUe46U(FV3f z_GSi>){aK@u+D!``+I`_y~V%A`pGw!oSCbUrJ9JDm67$I^qF77rhM8EKt5>O)H$xkRo9c7!g@sLP zJDYU`pyV%taPVkv;SfmR9y}KKr5MTtzsoeCorrqh$G^MmBd3#?ko?;D@9%FvGfBcB zUNBAVym|Q>T5{nmkN(r;*9rZICx7dA9l!1T^676TL*0Y-@V~P|Vk?6oAm}aQ%pLOK zR|@~(9&7p2Z%CkVP{J7Ir))|Q6aG(^U)K)BzUwz69uq_%1huR0xZ&r1uO9*_*n*gI z4ySU*8>bw(>Mrb7M#w&CaCobtC%^mMAlp*#!r03tt51!+PMCG}g$|Ue>aK~ZDsG)e zt-bh62S)m3YHYuhTD}na?Jj>ne_^hlGv4@pl_7>mpQr3q-$9aroryX>(XVX%BPgHg z(O(D)dQarqH*eGpJAv5zzxGy*sTlhIZpNzcyp$@QNlTRqvn+(8X7lEl&P^^sHwS>J zawewfS)0W3BBR&<(jwy7CzY%JZ*K`ONlqy0QP0;q$Z@zh!k5G;84j_rsUCM`N*8HUkE#K%FTi(c| zUaSX}92qY)MjSQmLS+iB(R6%4t&j0FNpb9mH5cEI^8X)7cd~YYSKzuOuFs*MjV>wv(opiF; za)5LP>F)ofG(*E^hqwR7q4_+7QI2xxyoFO$c{tPhCKX(zP&31x^bRT2xOrC)KTm4s zofgS!C8t1s`)q?EVuoPF$0HGdUQ|X& zBE83quL76R{|_a*yn6B+5`;e&QsVP8iA_zbp~^FU8+!TJvs)WQT3*v)o{f%_p|er> zhwbK@oldwnN6W#lzfkC-pM9Z_B|B{YKa}>!<0Mc#|IlvbQ3%C;JXo3E>*tC~5b$kr zg7Xr1ujZ^m30lXh*>@rVj4dNdg=+!5oI<}*Q3%G7Z^m?muCy%ZJygvrp$n_n8FRUsEEp-*7-$0%)*gtJe;GV+Y_6jAI0Z1b5xEMt9~K zreggjarxUF8(k)AWBUGgZG*X9A;{MsBIx{ErIe3=LDwTbD8lvIR>hbCf_z)NAFqF7 zE5ZZeP!44#d;Z++`x{ot!VFvS8Oh;qEP((eJarF?9vS9u6xsmS1FYq$xpzI!f1{KV z9;cHGzYmeQe=2{}zTQHR3m@tvBP>AXLt>#OOmWM6)t3!IF8spnYduCJ3p7Y^Xf!VqfKMD0oN>;x$=}* zbEV9P>bZY@QMLizsF%)Fa^HVbm={V&A~$pHuyHhVok)1*inYxB4M_?4KBi$tsgUHX z`RS;s=Gq#do(fNywpK)vfY!4wNBl*d?REKK9S?ZMHEpB14KK$5C9{6k0%kj83eHJr z?%uD@KD&Gw;`0XI0<4N08>?f}7t=kpU+giFV+GxfP+}q22(F~T0mam&8fdCL;4Uha zzk5HW>QjX6V>V2jXn(Q5)(lNm-zfuH-Dq_kO<*c>4pmP1TvK7#RbiR3w&`x3Jnv^+ z(8!&+XtkRa&4L689r)%dxMdD3DVh{;HVLT=TLcn7foeg_NT^LhrOiUF+Tx`rI#C`y zxJJ#MKy3`CYf?g&GBwrfljcsULl>@j*1@imLxpYWTr#?IUN^zqq45f}`nZCjn`oaf zNy9$$Z*kiA7C!V8uJ5Gnq(+8tFCb%I0y!T3x^kbZk)J4s*Cn#YpN#i=CZJ@JLp8j^ zsPX0*r2>YL>=|1Ilu&V(Bh`Rtj$Ar>3|TlLF?4Ie3Jd<3ld8Kw;en3FV-`MCMpi2aqJVp!y*By7mnak#wx30gI zWs=NCVj%x|T^yx&?HDzrvL!|bEI3A!w|*08EGA_#eKfOT##YKC{_MtY465VSq;;ZT zohSf~PEBKhSv$!zl4eBTSn6erK0BsCm=>35?QyN94kK<8-G#a}%HIVLt+@I~hLy&_ z-^_4u)T&;}U%)TDxhqrRGO!i$5OYK9vkN(tX-`eC3WI<-TcfNBA-6&*2|n&rqUqN6 zC?e+vz6*3cm?(!;Y%xo|JBAQmH9lp2w?&{Wv}p>s^YyD!6gR6p6aO8m9#*#%dAjlA zF$BRn57p?!yI02OxBU|n=C{Grjp~&sm4-|EPpH1_%qB>bm+!+bTzwLmEk=A9Vu4AD z8^ljaX+gA>^w6xXZ8NFvHRbD!2np9uh&XZHdoL^wcFnCbY<=9&onk#t?3+Ccj;-+G z(jvDYujmY`F4Wv4PhQ}sM(0rjqDP0AC=!Tc9N*~O$4b0FnBQz2CnH@aue`O>be;M^ zBa~ZI?UDk2LOC?#l2yO^#8Eyv4I_AX*D0BzYOntJRc$#0tYeWl2%7%7iNDA0;K0v- z@?p6vzVJ97!bhDp=rag@Tfb{pseTmDd3z8g%5?ZTsVz;M-KrSE&$x5_Aq^aZTS|S? zzapL}bpkJ6NB{w7fM&ZcJw#S#tUNPpK`iWdM{LEZ0z=O)>8=2@F|v3Jx6(W%cC$Vk>LPslD-*!`p$s(zz=OR*Dyz`mY4;0cfK%XmzsG(Em{>x?Dy+`Do%X*ZU- zk>;?N=;A3pB<89+J4JiuZ2M+O5?9*o9s_2H>HFSK6Pwk7u5G5S@T8_6^T52{$?8No z^SE9lnh}?3Xys}BE>VS(SHfhmS0lCCv#U1W;dy!L=+T76xhNR5Ca`hdr3dc}2 ziISHkkTM+q@WbGwzzbh$!M0a@yFM5*HIR=btB{Y2j19=S*4GpHJ_E6Y#ojX3*;7_? zucRjY18IA#{4=O3)HQWTld)0{!qleoq=xGKcy=K|Nx&&X5SHoHsZV)8aO&`k&z6N` z(~!n^o>S=3^p4@xqT9@&(TCfDQ6SeS%3<-6d*f0LnoT72wM_)mIW>MBU=Sxx+q~Tl z6nlWNN?bRuF?c8Osj8tNEh^<@Ty}kI$DNgG@xT?C7uNFBs!q$Te1kQ`T7k-P5AA9z z%HeKe&!Ie>^z4#b5%LA9|CJh|8<;IqW&pn|NiMwTBK-V9fo49pTKh~clV{k15^K4z zI1G{pKp4pNo3%S$={Q;h&ZxAtZp+Yh*9f(Qb)=Nir!^lL@(_kMZrbl~$*;Pa9V*L_ z-gD8wBzryf=%T~CS1x=B%LwrYXJ9g+S|?GX?3G3)flm#>lGNJ1rEM{!^pM>^y6dI< zq9$G6!I_j}HUTIPk3w^%o;HWTMU>_oMZQ`TKW?+I|3q22>sf3S1KlSGWUkgI<|f)& z!?-V8Ku2WEg7^dsS4MCPRAaie(g-RobxG#LPc^)<%*YUDJ1&Co5q#LTQ@AlfeZu>2 z6BPtniZ{{BTbUU;Sj5>)&9^@32_EQ+n2*KfGxswoH;ds}GMc&M{T}(ncW0Tie&UM> z?RZ{K?>eDLmRn1?&E%8ILx$bsqIjNCYPz-)f7x}vGT!Bq#as*4JBH)SZm6z~PR#k1 zg-x8rK6YhXXXhdOIra==7VW}wLf1r2&waJZg-uTTW{F+SyZHRLU;SD*_@)4XY^?($ z+WyUsU@r>kmQ!y!qXzp_8x=BU)CwJ$aGr5~9ojXG7*o29CCMb~4QC-1;;!PdHZ6OR zpn9Q&2f3PFnH$yC5#!yEnGwfMvz$Y6`E7(+9cAC@id*s1X7{n(i`i=j!@#xVV!pOc z@G~lmW8`(($=G;=z+~EP9U9G{kj##{SH?VxL9Wo`3Qb-eS8wp<1->3(@tg5MiJ6_? zj_jTr%nOf)r8ZpYs?BK!hAU<*c1|{t$xP5)7mWBO8%_)7ZfHV? znplTBbLLOL*%k@-TQ(7#txVOf;xeP_!8MKa}R`wfDZ7cR9qI4JkTL`b+{ z8jt7v$t{NbE_Hp*evZD(cTIjse|8au0o>UGU_O=!HLRYO;bcWvnqrUv!Kcu>Db zDcUG;cYi}Er|0@q=G$B2@Co*YLnn(w(VdVYg*T3&Rgmqev$^=p!-7`eUg!SA+efM6bRltbMxUtNL| zx@=|_y=;;=gvLJY9d9IO$iu76L{PV;BXk2iVrsY27p8&OuxeVvw?@}9vy&ux>ZI{8 zcLq9yNi+(5t$0RG-H-age&u@;{?n0PV@0r#Co-bjEfr5O z6sZD{i8#Y2iwo+?SV914Zj{fU{UV%)LS9ou)YXYCl_<7Cuo{#TKpwr6IDx*BrOHbj z%h28sH2jU_Xl~ zlg_O6v^-Wb#pGORoS4P$9ot$llf-Z`~GtDdX!~DKxhDo$4)3!7Z4<(lq-z zp^1c!V%&|Fk}z^rZY0Qwc?PCkqYC;Cut_ezQ9!WZm`8T(A&^KgkgSfSYp?9o87zZRc&!l^mOvTU!cc;jwg*5YwcMz}9iI@GYu;xp(M2_s4CX2NwE9 zbSsuR@7%lxa?imxk5)lSudt|hW=hIFj$|-MC8TpQsExmH(c=rD>oM=E zw_qz}ad3zj+}cmJ=E|$}MQZTxj60{4->hldkIJVBKdGTJWVNckSVmr_Mmgm)Dd#=WkD=NrvrXH7L{d%+}q?o0+s&1GgaHYlWB7i}Rt zNP!D(z6BYAYpktu9Fms{=&h1rbB_9kh7Q6ja}HDbQbsiyC6KPq*`bNwBlaFz>dhEw z=Rhw(OoR?8CE|m|%Cup13*UKrw;HWYH?bmh_)OKJ@5-2Q?~%`Uh|LOJ7uRw$>j@@ym|JN3!VRv? zu=T+j%*nDAZt<=eh{BDJX$M3zWjdFQcO3=A&tI4dahBR+2Yt~TWYMlX^>8N>Q!aPz zAXmsbty2_=y*@N9l6nWU%^D<|DFFm7UOj5y6Q%ol6(e83m!(r}^PIcc`V<)cYQ!n- z+P=NG7Z|pNxt96HLabZn9CzMEa1iK!;QlEM^=PYN{L%$a2Rz;OA)9dd8R4}VUK-%g z>TTUkNJ5yzZBi%YZIV&)98teYtc9y%NNCE7qSlidm!EMQis86yPu8sQSdZQkW2coI zjL_1p!ZG60MOJNo?|Z!RT;b29B+rX1f|)5DJ4X@@h1+PPmXq44r?wAew&tIKT4I&D z9y!%#e!5)|aVkt!(OAzYvTBx&Ufx4_cdA;zrxm?HHCdkMCugLPb*qODjtd!uormc1 zQhLj)gPcQyoeM!CRy?LQ+X8AaZL6r_vKC1!5fgO>3Olxu(Nlu6W*}Q;tbG0Vw6g z%VMQeQmGzTh|GrnUKsA2t9oZISw1;uxszg-pb*U0^4`YMH!xSN>(wa)QvRfZ|1fP zF5$h{K4ovCX|TPRBC2uu3Jo>#=)mub?A$S|!LGTpM~#P^=P5}iSRxO+K5RJdm7m1+Md|R)SzLL_M(>}o7s|vZ z`J_%Y-95})-q0E>S(S`E)m*S?G?wY?d*Q0tdnBS}=9Xjgh}=nG@l>J#+$UwPMFDM^ zmX9fm>EjHvl%1Zt%(XIzG0;1x!!X-A2~!n~^_FdGJ|oPG_VF!N(v-?ZeHe;gY#x?m z@ZG`J?V|+pIGM2OXN1s}8#Js!W?Ymr9Q^LE)4@G@`c@8kjfvBo8I0%MMuFV{*r3e2 z#T9F19aWnNgJw?#GHsW}0iGrI#3duW1NLjqX`5Tqq%r!@!_>N7*5xmOl*WVrb%|JS zumef3G$3yF;0D8RX=)QBsab7buajoDkg#hJ;}Py4Q?p0o6_|b`1JvB8d39b%Au$aa zDo10TM|WB2i!v-eDI-f|4Ax;!qsIY(j2QakT@7g&ALjz0$G~blPPtVjjSm(1N@>l# zr8>aSS>hp9kJDSV;b4f!Ce!9wj+j7Y>nE`cuATbO3y4>Lq`_b8!VljADf#pV76uls3N&fcKoxggbw+^ z!gDrfcK$7J(?F?5omG(y26LEV7wkOm+~Nm_&Q-(i{&S7ugJt-(&fG4KoMS~Z@>f|M zd75?)B}5Gg0ZXS%)*X|(o?4~PvF9n>XSe$${DuTbp-ma%*VQqOZhPDw+H#Xo-5>MF z3`Vzz!Y!JtvFNV&KAIKz#Y6G(-w%HgwaJ0Gn=2roN#F@H6DT*SztD|@;FsGa%%hI` zET2I#-{Kna1P0W8K1DYjqA_|so~ zng7Jc1$5x8=T%AX(NX`Teu#6z<}B`pG|F?2LHT>6br2k)n-62hZ(zmG@;^Z_`MED| zp8p0Izl0%hb7`m*_bta?_>*lkCiOFmv^A@Eu_Z2k$uGRUFuXBIWy^SUV|KMWMmp@Z z^}@NHsO_`gkRd6j`!^i&1+`OgaPH7!pzCr5*mQD{&LjO07t=Y#N0VWChB zD`-Su|8B;*$j9-j2Uel|Qg*|RGI?G_z{#CCn$zw!!}hLfV3v0XO{^@g=mkxMYxBP- z{ZjOWf<7N~`0KlCLkXIHx z71@8+`FWBsQfeh0ef&+gj)gfsxOcwkre5kqsH*;W?|(6uAP50T!gn|HF?UhYuB|! z6kQG-9yOgkJY30DdzzXxyoXXtor_=!hu5Dj#SbKh3`vtS6vu*ObOs>E-nZB3;M zEas4P@>EM{I5-M__&docM}4e{NtZz%(sg2NMKSrdN|k327VWWiSl-XcZ83}UwA+Zu zRp8~98AAWvFt4K!wowk{E}f4)e4{(<9L8dy1FXA^tTc z@Gk^fHx~JLk|b@Vi-h|(n<${G1RsdKoMlW(_}f+!u+*)z6C#oOF3o?7NRJ3i$5C1u z`u(%D|MPJBs!_f5^PKQNyZDVtCBcL#)P(W~_06(aOOHZT-MfVbOk~pDT?or&$}}6}t2H_b&Ou7rob}hp zy zek;7$1a*ZzRInDDc7Wvv?AjC_@tdG55-&GG+jAKm3Za*kX2H$wUN8;J9=DhAZ&QiZ`Ukf^-1P5q zit`vnt6D;sE-CAgj&7S*2raF1m!a$7Ez_HTFxDkYt%%ENa+dmo3)lJyyaIGUEvLRf z|0A#Kee%1KvKAGr<+L4|%9)!~AFq7KoyzJ?@YQJpEd(6aEU@ZztY6F!wC#LFm#ckO zucqyt)%=N@MZR{eW-#O78lIO~oO5W^YdOKWjoDXAN1KkZsr!GR^LrUW_uh;+E|H(q z2+o;9O_B2(9w{GE419`?l%h{^^-DEgdg-wI4IlwcdU=E#3zSET$MJRFY1hA8cGl3U zxg4F~mjvZpI?^y|B16%Q8cI{=kRcJc@HSXEXC=HbWhKo#83Z75G{kclo`a!c5ooIQ zU=GBYDkXw;?~2308=${v_2bDP;kQuaEIp0t^sDqZl*2?ZkVKc>Zgjz1nLN{H>Us__ z_pw@C^Ld31(p^KwLOH`2eewJNal_d=Tn?Ulh)9uo4#E$nPpv)rx*Lv=3ON}Jd_Uf_ z%WLR=ob~mGNLXn+et}Y|A^4;&F%84$*u|)H&MWiey??<*vi%COKIzJ`E~4uWS!NGk zvsc&{PTX5Zk#CE8=g0a(ABEXjY7~!EpIj=ntWV=)fQLKS6m8 zEi(@hnWpB6H%V#LD--NR4*MAxzvUHb}LfI@u~Nwaz%?dv409k<;j4Ayps`&A8 znwUt#p{aa0-*lN2@UWP`t+k|<>x>?Dl?i;>&D*+jcsW0nFSP={vFC$RMVNNfh9k#4 z=78Ep>g7h9M7fiobeGeg0(&74;n*}^)2XuNU1{SpgOHS3yi?T26F4yE%FNG4PbooZ z5$q|uoisdrS2=J;T%jLF7k08{V!9{_dVl(@T_nVPWHvA~tl?rUe!5GiU)9GUUZ#`* zoQJiHD0vpl%nynf1QOFi0wDba=PpU!SYbmAydEy*qBqnSk&o_`K;3Bs3>5p}qNJLb z`5ijpS?@~9b!Q*l2^Ad*sUm3+WOuuH9yKy8moPQWRvF7@{LoUdlV(uVT^r;9w!p4oKYo<G;^dk$V!BrQaB3AleXm^^@otfIq zPGV(((X4XeTIV~j8@FjNJ+B;A?^!f1)BI__H7h?^cQ0*^^h(ubpBD8jH~L<@Icf5o zO}Zwhc$cH}YR^37NX<%)@+@a4ox_FOLH-kO(CXQPf-**fO_2oloF_)%i1#k+4^z^g z0JJRIm|ajM^F{Le$M?g}K_%HCLmOS`H6dqGBH09CL!rAxR+=#ip-ski8`!zDMZ>~* zbX^eeoq*rF70bF-lGDU_9Ai9J7$S~D$)hg&k=I=7CfPY^v(2$#2HU#Mx?FUt|I=|W znuq-;OW{6RkG!<)`WoMN+>*tA#<^nU8_+w>)$6J^w!O+PMDT02mGzO$$ zJdK_gL|(nl>z_vl7Tygr!}6NNLvedi^L+@i5F+olsRUL(vmKor+F%Z&DAPDv=kk@6 zMt{tah_6#qJW@k%m_zc7KF;!AiOTF|plL_xI?O3b9UY%0B}j!b4$AY_E1Q_WJg4Ad zzSg;}Eh){KUV`Zt6SY>wcM-g0L^U3z#zdc3sEUSdB5Hl!*tO~ifc@(_$R(DQIB%sE z?5(jVT0?5;`tBsq%P5um#*h5hTyj#|&?mkG*+M^6Lt7MfA59hbX z29l9*YJCNm(q_z6w+?T(;&wwNzdtwf^AijS>Yj%zkK%gFN84f2Ef_5hz@eB>R{5F8 zX1vH2a#f+2^u;c36@AQ2A2nzEy6&8YDZt)8K88bk$Z2pvc(|5Mfp>nn4^m==ql{JP z7XOWNNW02p-a}NfwHfb3X+GBleE8Hsa;2W^lQu=)XDW(HS8c^;n}|v<_&FeO3a1-+ zP}cS9$*^Ur^VTW@)^cdPzFP`)53$8jeu)D}MSZxDu3!37=L-1a*W;NHAAW&n2n5Sxc4}UsSmB(a*>v)5Q$!uQ+-k9wwhZ zJbIa0ml*EDeF>2N^8R7tck|hX-QEM;Fdv1T(Lv*-p`%Fqj^UM)BD{=ovOC3~z}0MP zEcFx*G0^veI8MTptfV7H?*qt6zb}AtbOu+lcim2?lzI-9NYmf!maK_86pO4F9cPh- zJxUAdaU!4Qs8P9ks~qk!eaFyu3l7l)R-9)UgDybgvLK;*FYdlj;m@=`aZf{|l{&B9 z#abU2Ry`1(~lUAcH`kcrm(I-+i-fed}(?X)1#@>lG`cSE?fa;4Au z*ijGk_&GwC%F4sSzSLjOeD^sxq}l;%TuR1yZbb3K5fr&IE=S7NDXW47skGEXm#2zf zc@5?^_#?C?YyKDc&mVvn& zFr{pqR9?U4jbw%3t%HiSRzui5s3pwN<2Zdh3FK<3{5pn-NqK3aK*@bwKPhF}xtte5 z(^>matLh>_1O}oTr4O;}hwcWCb#(sdeWEhhC2Waw zlIx+LTIP=1)3d}q?r z?fa2}L2zPnkL3Uk4d?xDlFIuZPa5TD(3o8HF(j#5$653k`=p$LF*^f_%pM+56~09s zh^yAnL0?hPz%mzf7$dTu^}l$-XqBX9^>lbpl&!4Y6XsnUKB8;I!O%RLs zoJnU2fs~@*FU0wa9*-&0-o+>TMDeB_I|fXwMHW{~nQwc))~J$%oq+L2$97bnVpstX*hMJrvILfw9rcuc z{^wf;rR|4E&b_#C+BB!N!}GBdkEB-X0`2!S^r_BA1G)NQs6Kw>lq=m>^)9s(nyfkP zz^|NIiGc;Aa645l*A!|$5h~KpLSmKoZwfzeUE09_c#(=56(;0^evDEH==|%(mzwNP zHPyXi2IEfGgJy#)>8DIJF^e1H5PI9h_!XO10@&vM_aU!a+Lb10pl$UX@W@oohuHuI29<#?$rfIPWN*!Pk zWI&ir5x$BCe z)L^MUl5tnbch1s#M67crulBm#E*JS&9jDb)RmUTsS-dF0{-hV9GKA$hE4U)=!n$NdpA4q9YYSZ++?ACaS=78cP22-eEnU?2znO7GT57N>-239GQ{E)K(xiEg=`HJnXfHOd0W8om5sO=9Z z5Y*h&unSc@FfXMro8gH`w<%X}3$jFcS@LPuxeb7_YW2h(#3%a$3$Ym`b9oCk8KNt7;V`pl+>2;|N;X;EX0cxj5Uw^LnROZVQ3!_xRiiK(_o2!>K z&!-XyVYx9dBQX^a~OSj>{o90QTyOh*SzlLv^ zPur61NzSNoBWDN2EQ z4jip-mg9D(vT2;GH8r5H^P)&$h9Q|8W%3UkZa0lZqc~CdV26s^s0~i}2khZsZBDB& z5@WS@`$w@J=N8O9i8a}1G3`{z8%Y!m*-nB?USze=+or) zCS6f{d~dMz^EL(tE$ls0u+J6wUUi$*GvZ4;jV~jITSm$^OO`K&kCBT@n+N85lr1L8 zuugaH(y2dC6`^TsTzECf=WeCaJ84olA?R?+v~`X>{#X3@UqxRiP`7fr0ScWkkZP1& zYqRoz0Xy=c8ZWumujc=V3;SmM zB$ie0VD|FfP5zVM6G}M(&%PJKGp|FsoV+9bJR)Jx09(n#VD4zcU>IE-k>2drgZ7{w z_W`s2VN@540ekCZ!)o(-t0?Zm4>u?;v1R2fKI8=U+IH(m&>&XZxX>Tf*{B^2j zeCwG(MJCpOZs7qN>i=+f|2`DSVwe5ZN^1Tf-zVYX(lG7;Wr8SQ~6Q`83h-`7y! zCuX3p^@jDy5C{@G|I=IOeao$Rre3LGuf^bdb$IUwQHCb41uB)oIk*2|JNpul@b3F? z=3bQ<0qq4GK0tYw_>WWmM>*nu-GG_htEFMoy+zTyB?2M=OfLUdxvR$|fR)IakpKT* zrfd9yNg3(5bjPO~cAD}|G5;wb(Wi74{_{WZ_x?Lg0?Y#+s#V}X)IH5dgL4_$UU#U; z47=~YB@3b4_5L3&GV9kjUwuuc-I_fe>+;Q%^9583eM21#i~I`yr+q5_M<)8!>V^B} z|G8oKSByp~KdcP$n^67spQplqz3Tt5F!s+NNlIb<|6{fX=p+A+mBZbtjsKef*@N%D z)VfI{&L?TM7@KB&19{*AqVJf&P&rB_*H>BE&*8ni8T6Spk3WUpHEX$<*C}>AQpwDc zdKCa30b7Xfx;h={c~SMr&z=#5^HNV-mh8KMoJ}Q$a_|!I{g-a{$A{m#-H5Hfb-Ru< zzV@?oWrp9PJQ-_u>FN6-%|-QkP?2uEbzf#3kpQf}f7L?50#I=H8E)l_$g;m$&Ie_rYxASHGnhc@b9kGp z$LE<*Fz1m|6@d)VkB&^LGu*3pPC?`7c)f4LF<-v>F$X}*|1LILK(WzebyG=b{Y5eC zvU#_Mn}HdUI9`aEv||?7#e&oT>I4Tj1szDwpE_K|8~`r9xU9z3eO4q;TD~Wg3Afas zC_MAg-+(T-y3#}82@1Wf)`%9RUn=|GmA{Y0|CjQYN#D@7HL~9D+>#+`Hw{DFWWT5s zl*ZRy=!cb*wT=H?oeV7op1U`r6~0ryk<6TqyI36hp4(^mC96k&{|;b`@Z)R;v_PH(I-N{`ZJWnvOM#ZF%^HhtdgFC zV<{o$2^mDPbKI5Y^7xbX({wh6tp}lh0&Bk?&6y9ua{+ZOXAITA73_H$RKs`qAo52$ z;1R>1ef2p0OdYk|>HsCt1Rxd5w}&BBU#%NOZt?YUUD`|QwVxh8pkr%q$@n!acbpg9 z{(;1MTXFuU*5;!serT*9t(N$BCSqmN4dxWhfMb1{n^|}tt^P%}#6LcPN;^8@^?l>A zcU@f{x0yt83^=Y`p1uBDy4sm#TJZXYyTF@hJBLgg)x5F1hG;*@hLZ<9<3Dtt3gDU3{uvRf6IrTvXr^}9Pdl6@+ACwzUi z*~!vjrBe8!%H@F&v!oKMd(Ahvh!Y*J5?nN!vH4^B{eP)tbM4jNb}~0R|+DJ^x|EQ zj@s@3q`vm(JEC(aWKB+o>s*&rvvd#K{)BmKpXag^nG15gp_J-GwYUBXQ~3Pf6e6l? zYcs!>fA7fmkB!o>8`r*KaJ}!=9%%MRD@oIz3(S*YBV~A<&iod;>vqs^OL!~G25t#8vh;JLs4fd~mLUx89xRyXc>5HOOo(W^uICXa& z@gc0F4d9(r=E7$#OU~BEniQElM?c$+!kqMV?(Np?y!@33Ks6`_eJM2?jXa{J_v-`3 z*S_td1<%&@slof~7%883*ulv_ z(kTjkeq?@BbZfSzjC(~tP=^Yz&=~j|mn7&Z`rC-o4A^6w@{ILPA zX)+*FV%?SCGtRgbBOZfBFX-dn$L?mAi5xfV-Eb)*tUVV!5G_tWyj;LHyo`z3MvMo7 zdsH}(4bw@MD_Iti{^y{hFM@3CxvT{I?tQWuClz?h%Cwu;x zUBiDRx>|BNj4yQ}-Yq@ANf4T}ebzR^KQZiG^u(0QQQSY10w?_iP{6|*yd1p@1}{a+ zAdeP$-MFUAH8n~wV5D>d(UBu5aAD&bc67af6?q)Cl2DrNErp}EKsqxgT1~UO!=Y>W zHKc7KN}XCv_kv}(5vU_!b*YtOxyN}|tBgp;Ev&r~kYX#*cHANe_t!^O?%;;Vc?xik zRVLmt6W>{b%EHdq^uk3E!QfuqWG8m7&+aikgRZ9i0#3adN^_Z9C-bFZ zNOjFOI)32|Kev^JMcQ4$*2FFCX+2Zkr?{iiVX66xoV0+=Y!6fnfNYfwIAi-Lez6EM z_yCxya^TgvgU$x$7+l`FwS#ha@MKw0Daj2_``_@n{dq*>HnMK*Hd=I;$TW}ped*4g z4>=bwR7EC9uDIU8YcBU@?1Se(<%BYhKbAzpMFUa+XBt%7AA_m9r5xHas||afG10C@ zQs}r(kK3JT)*e(Qa=b+C0Q~7Maag5$hv4;Cn&*3d8ydMv-HFY42qOF(@Z6;B^O>)Mbbj};1~;k44L;O?2GxXR=o5> z-nKm!LW-a8uJ`bOm+`=nky!{sXM7=yYlREp{xS_>@e$Wre?b?!6@;?ER(wBgNLvDen}JFS5GDkpNp zVl(u)Q{uK+vPb~Kn&{ zM;JA5WhH*Kx|z94+La1Z$kDapC^uNq1qv*A4XNT-YtGmY=O;Mr$R)O&so@`ki@XD6 znx!iWL9QiI?EnMj`d6_c6ixrdsF$uk0f%j7E#Q4zIB*CeL%8Mvg0XW%Bun$o9O)5x z5*a?|xU-CiI{v-(@ElF#5mQ0By~%4MGI)5xT|r{o=YqwzyjaH{cjBOhs1 z-*k($6nDSRyG$p^?l3EdEQkioCnf75zpGXeG_hIu;g_WiW1}9Xf$wN7ah&Y=oM?4F z`%l1_Cy?I?Xz%1}9_Y(BOfzfz!iaB64)8NGcxGJ$2|OT%VrZ5s8| zKRyO1h-x7ac%v=!q}Il!j7tLSc<_ z&FCPgX7gZd^j zZ+tWCW}?|?N?EyzcP9Dg>BS5COk9--!iTlrH)DgFk10MMY1|mFMQELE;o(q*?%EC% zJvP0)g*qHsx3Z_kL6mf&gpu$M9s1RKM2zDNjR@(|$So6%`1k%hB7fxz&V zyWwbGshJos(otnXN*VOZYyv43Pd}Y=wX!6TT{9E!phpIVQl70l)E&l!SOu~fnkL~;EHsy!vwoX~ ziP|0=-t!)j;0o`2^TOmS=?E>J;?Eq$EtfUE8}z@tQ;R%mSJa2>&7F&Nj17pU=wQP9 z`aw=srGnf0tQB7q?VW3i126q&OzydIL{oBnUORjrQ# zQy=1E0tX0iIk!rbOe?r{!xA>Ud#rNJZfwAF0b0n-42l<-n^D!0lGTw2!FcBm@Vaj% zHl&IgP&X-{6mn1=5mmfYS z|BE{FGqJRX+_>^PXZN~4iQ0X@kWuh>UAjO7a;REk>yzH0k}q(++SH%H=ZdC1H=9Nb z$`xX%bZ;<;8;g~CoOb}y+;_&cbWPFrtN$d@JU;!4NCPeXW3!xL8qzJ3&^N#7*I8QD zqPqMnw^UkA&nAmg=Hal$w-gUqC)u2P8rvQUjfDfw?zk$2-q-K7UqGD)T$6*09NKyz zD*BYTSGgS#qxH#mt#%=?<+dtMD|JP)<>I){<~AR^uDx9AEa5_RKOk{MQRux z6j&vkWxp;I8)oYkSe)9uZk4hhZ*6+IVrsgyLE(Z7lOe7t$dH_gp0Pc$>hqg$rYS)9 za`o&^37GEJ<>S11FAGZ^06to3JipG4 zofEd9ZLuR;^a^h=h&ca-u*#pA%|#E9pYfIk#Mhsy2T#CsRs-yI7nt|WlU^ySn0!-0 zURRWhG1+RQGCij8;Q(JIubsbl57?mNuj;?~Au|Bfyo|g2MnnTtI9=}OsjGUV*4r}h zY9*g?!L-ApM9T=WvgNjOKabp@iV!f$-{ZcCRBrmIWSkk$=fb$4y!WEbl}!w)`?(CN zV%RUX<442ejeEom=U5TQuu4C8vQM!xL0`a_?=Qh;Qg9}Dzbd)QnJP2>J3AK(Q2a}N z7k`qomp6j#+)gEIXZDF4y{9m)>99k){v;MoL_n>&Z#pLaqv&;e+Dmw!8g4ee+e}`m z7xi^MK^tiFo{?cG_LS^H{!k zmRvWo5VDf`+$c7OIJ_R*jGGL>kmT53G*^w4o8a}4gH2i$M&2*8TyJTT5t^Nf->)6y z6Dg3=VFi@b&kls`IB5b!HJ!xMEt6kyeGIZ6X<}3t$qtiXFG%2_QcpbOXO>|+W1oP{ z^2qo6&08^N9lA^~MPgna=IMBMtBc&&oDYuf#E;sah2w3t@g99hQP)#>tUg_~p3?shOvB^mR^+m4g#{}mA2 z^;c*KB!82C>CVTtknK$ZCj|C#~l-|N!r=}?+ecn2n?6ey+lv%xqK7DRxq z+J6T?$;15tMXStYiBXw&+$UsAL|Kd8+w+>r$yqRo&iD=IY1?xZNm0#<28s%2h2}I| zdS%v2sfY^OX-WS_6mYOXKveS2Q#o)3I{W!EXPtOX%v|U_=kc3f1sUIY2rewdpcj+{ zbZq=84~;IxMbpKRRmNyp52_!5$nJe_z4309+d*CLg=YOEwEV&|JJSF!gGkXX z^Q_*BiNM!4?QJRQ+7>_Ao1kgj3#+U+<_9aJ5N)5~lsVy&;nM=#fiz-P7U^r7Z2{-? z4|wBSU|wm6j3(y(Z^l!opi&p}GTwdB2)M+adk3FIzhfZV7a4Ddu%wK7=xags*GjqRNJN!f?uJgC1R7 z6HnA*RJI_vVRbX~g^Rt?`L}(F`A2z)joK>~wus<)5=XMNXkXK?h?>ckA@P{1C8w3D z5Ta(5T$K@fhj@Ye;DDK(9@%)(`PriRb*0}>WSLYN#hzc zR|?5iEmySPt>Ec^0qgw>z3eVyz<~mG>xY-o>i)nL(6_IzP`dM#fO$pP(eo^JDL;Vs(zt@IjG9_T&cnZN~CYIfl}+{O)Doi^yzD!@jKyD zqXHo?|KKtesUz|>;jU73>|x6HCvs*FR=9W(H-`q&S>b+J5bRKRIze3HBxIzrm`6HB zXs3yN>&4);wJfFhREkX6xpl09%K7-@f$xb^Yo%*)(aA>{Nfs^xku$uObz}gB+VfG8 zmr+Msx4X!jtKFuGeYDS;ra#TlfsQok?VL2I*kvpnL>Fnn`)O}Kc6xobsbZ+^OBogz zK9c8H`PKv0H)(sHN!$iyF8stRhQ>BRd5g*~nrzphUZ&%=NGckc%J;vcWVTz7ipXf%Mu`*}hwVr%5%RNNBCTp~$$S&Zz+nTI&(y}oSK`&H2 z=D6)@ei1^WNzaDT9v8^)K$9;WoQZ45eCsus+Qx9SxsJJ8GzPGJadb9T{>CWqHPM|4 zC;)F&59?H=cVJ?N_|C*JbCs`q!8XxJHVcK-nzM|JJ+Shw?xlB2mKjRm{d$-+U6$O~ zd$)vbc?N|!8T+Mz@#qJ`1FjS3dgVg#Bt`puR-tBkWVu7hd3tDj&Gni5N4U-9--J40 zY=rQw3Eg)OXzTG!e;IeIsN@ql(|YfkQ2**)-mK)xw6{FnCJt;UuK0lc@t}18jOZ(H z-w)64U)S|T9O^#&?Yhwc2AP%c8>v-`5-S)m`>evE~s2I0te;vaHfyC z;B*mIb2w5^kSRjfXsFSYLC-U(=m`y_I)PfkW`62z#pewG3}u#Mn4Y{Y3h#7{uv9&F zOFWb2+)bkv!@Cy;cp&c@R_tOOT!vbtW4jgwM-!}=)-ouf^Ei1p^>`Kst0r4sK!rw? zU-@cDhIE9nT!dg9SI*?xV4{;!OvgfuO!FF6%d2tWVC>@*E;&s*MDK}{Q%0Es#v+FsVW-v7wB}`! ze|H>H&gGOpj;fyZUnxvmn9k>I;uBE*)hJ0|O4KaEnqCD2le?zuoo>M~c|#{Z&PcOH zy%UT^#$&BoXvt$@`iQcfS$NVUaa@WS-_ZQ3XV1mLLJY@1$@+baNiL7Z@7klNB@g?% zmsJvSis2yKmqO?5v)0g?0bPY$@O-ZPpsEm9NVE6BvKAAozF9DH|wo z?^*ngcm#}Rhdw8#Z2&}nE*U=(ihjO>ZX)w-}hfn{|fGLaeZ zgGn4dhJ0zV<#l@?Vk1(2U{vk1s!*pdWK{vM`{?yzR(3Q#RbN||7i+B~(xmzO@4A?t z?KSuUfL>CU5+|``29?ot_D#A)WQ)1Zd%KpR@5zPAjcw(lpX1|NXO-CVhcN-q3bG2z z%VBeDqu9hx4ySZrP=f4Gj|?sl$5!*EAxoA6Q~KbwbjAE~!MdhJpkH3&Tu-z7>m@vY zo|eB)%+ODp8%3({G2Wqdb_a+Z3_W*^)TgSh{MS5#29(2g;v(kQYJsM)#U(b%;AGFY zyi8{Mw1y;dGX*OOA8;MCTvN|Kf2yFpiwbm+=FhEh=Up<`ndXRK+ zI(xj)K|3*;Lom~64J|Uaa8f8N`BVcWye#Q=VC54|-jKdXDWfi*^C3&#rBwzn`%*!_ z!(R%60M8&x`&fF!VKOBuiD7j=Col05GdbaL{YeTuLalq5&JqEWIqU?l0dZzYUlqa* z#F^%C`#89q*KuIgq}n-ZL7<#YUn7$ezyPWy(h6avD_q>DhUpu|g1Nr^@}~K2tFz}( zMAJ7O{W~&5=F*ps?Ak(I5`o#a3X5rRE79S-9{(g7jPlL>%6C~8{Ii0G9vZ4{dS?q+ zV>CCR`=*>T!ZASX(aWiTJ|9L^9T?rnA#8F#{dLrK07iqKhZAsad46M7snuz{QAX95 zsOAd{9Nr(&Vd=sMXLI^Qj|KcdMHMas&L4wbaH^ILHE&h#nwQ*anUn;~h-Z0!~TjJ3jaR z%vXJ)oq0$Hi5n7$aux<>&d!P1Lb?9c=|s0DN#?@1;?g7}V-~Adgt+lym4Yt~a z7d$`jmHok(;HclS%>ySqE6Uz-bEIB7MXJmr)HZV^85PL< zy52Us4CaOaVBUA59OMWu-Vv24;~jdQ@JJMOinT_q^Cp@Z=z#)eBsKLmji2uLwEb~i z`h7UgM_=kty!sR%4wIKps~9fJz%0n0#qtt6zSZx}&WYF>j%`i^_$MCD8miaG$hN3$ zx&iow_}*lIGvMBe^=*-QkmRVH%(Kro?}r$HCAT(LID`rJpLvO@Qktk-zNXvOcmaw15yKg8W+HF07xa!<{BGCo+jv*yDoITGOR;7 zM+zTR5P5HZohH93gyW3v4Djvo{RNpDz?`9!ZG~I7d~v9)Zr^P zv;KCv;`uG5>pNF3DeYMKN@yNdh-1o<=Z^K*6Mrb&@Y87AI0ji#a9Sm}HU)tk>K`CI zN=+89c#0;U7fkDJ0>jXmo|}4?r{#O%pCF&QP%>pY>8B8ei+1PKQ64Mq6k(C*_wpUk znFl%+=ij!sKo_FUL~@$S{Y8lGSTsinSykiIlYl3YES-8bwMaKt*4o{5nmrzd6MIN^ zCNd0b!I-7DaaT%$Z`dOU^+nVt&LU;MdJG1R71*Id*!3~M)GR+3CXAfK+o@`e(iKE7 z0~<~WKIUb#=7|@D&j*4JtQuin?^c=?&zdBabXLWdGx-x&cYz?`V7rvxr{u9C(*O8v27#X3CEFgqETkMH=9>~5651u}xWP4anqaJ$Fd83-AA*OqJTUu;jy4B0kjj=UC* zWQ+$3AQXHq{t?`$F1VHTJY(-fwfT$$nQk`oa`D)HpIFlI6DrDd`s2NPbaYFDcXrD| z$!^p3F&kvu*D{@eZ-Bw{x;(>QWIUxSz?+ma+$y!Xa`j<_z*QgN%>_EX@Begx5ly^a zT5kNP1OoC&l@z&%kaBKjeF<5%>GtB7UpQyYNn-hL8gBbdz{x>cE+gdo|Kia87E<}# z_~M+gC9t-?kYby=XDA40DU!{+M^yWxD*m_ET>==(kyrnwD+6!D0m^(R+^%u`3HAi> z#c4!L?$!$(zz1Uf`rv^3J4fQ<@kxJ=uFW1Vz?7=nuRma?CvFvr7g}*L`RhR0s?HdJXYTG! zDE<_iQPC^cyGUFb&pcWeDAl&MmU^H`OV;Th`?*KBXTw26@TOiQP<4dc40exF(h9)TW5+~u}Kp(U0 zix@{6WPNUb_4+yDTj2HVecv{J+R#wuiX%d{6jjQ;_zridJqic4noBDsmWM@Kl_KYJ ze#{#OUUYl#dM_{~NTT=|1v2*dW{1^`G!U84YP%I{)Aw}xb;p6b`b?aT9m8NYf$6%o zlb%Mfe4D!Hy_qFLd`R@Nl`|*#_l;_s}%HqduS8z7rNoJ4-@> zUctNDS#{-wM$#v_W%0H6fi0*&b57b6o+qjHmt~TXo&z)2a~@W+$DyQ5QZyd1{^ut2XR4ZiHlCE zuWT(Oo*#s2*2ltm*<_`Q?~&IiKg?qG;BBo4bqJW*&u#Yg6tNqAS~j=X;N6Lhny zu>?&|VUU=+d$m_Lsf9lI^qEl6 zHL?b-^ot*HKfU6Gvt|ZmFLYUd9ClqEePvz5tY+Qc{<9t8v9n+AYk2n4LB(T05q^Dj z=U3m5WB+nIeDM9f%e7>y@N2zx#?5E&sF}{Jac(by*|>14`Dh?}&`Q{?`QVQVCk>(3X;705b5Fl!EeN=GVeX6phY}=2 zaaEiPGF-FiRC`pB{WbO7sp)9u=W7?1mxdoTGd1Pf+%Ydk+pW_@bGb1NZF5Cp7xT;e{vjL}=CiOxk-m-k_j;1|NLM$rH=yXiD(a%~rJdP8Zs?Osys^ zgVQi;`tgFcA=NO0IFaWJ3STn~*FbkNGIGuz`Zt*SB!7i-qn|pwT(Tp%r+bYQ zT1!}ZE61XTbT8%EuMywhK!pSnR(c*+Cu?Z}qzGO-hq@-WbVC|Pv`}CcS=;*DU7EIW$(9>ahljqV_&K;Vru1YpA++CT*nLB7NM=?y~!a*W{m;6 zzTbXDM^o?mR>rQqM#9JL+nd(fD$C_1kcNcb)R?LB^>ci;<^qD6Ig}(;)$FtDp_YR? z?XlDzWv#rGwk*?d{XO2WjA^mB$yPC}amvMV8i7zyk#e`$RLTO0cc(NgJ2~ya;a^BF z!_P|A@KB=UH5~6@Z_&2@Ou)rchtFC=8=n1DFy=XT&-%4tlTmTkfa*mQMWibFEPZnS zcJt?pt>8TGZ7O}6KK@}SpK%^`1l%T5J*%7R-XU9!@a3Min(^e$!a*^-c-Rr++|43==-!F&#(RevX zg@)18BOk_U^`rphf-wB^;0bdTQqqf+Yr7OH)a!(~ z%h!(X=^E4>qp-cJvtc&g^xAi9y-t~s;qE5SWTnly+m|zxZyOZ)oSo-d(_f*PdGlug zHoe;KgGlPzD+HP^2-G;^MA3K!MDfPgHtS0X?+&!eM#kp*Z%I1@Mj~Ea?V}#tH!MA( z)}RMYtSM9Fd%O&}hl!0?riOY0hjoMXkJ!4wV9iPQ7P9u5Dg~#R+1wDNxk_qNa?p~s z)O8LonjnhC*o$PP!<;XeFNxQ`Qrtcl;%h6h3#~Z&EPaGcZDPtz;PfU}?B0$Wa{PK7 zmp{E}7&izq+5H`{`6r<5(+ZN!o%ws*P!TyFD?hFW)9p2zr1-3^uFpzUVM3GW%4Xj} z>r|$?p>%g6!KLtz(a~aw+qja%lG8t$*J)0TH|ECW9=I>jg^QaQy}ML*dSd z)X;DPT~Ym;2dyT@AHK!nRZ97X=u~THrsY2AQqDW9p7x-B2k7?i05xfdes@y6rc@>^ zc8}mPvv080q<2Tyt^ND9$7sjuiB1V^Kn$TbAZF15g{^lSCX=aqc*dFN)OavDcw_>{ zq|A8VV)5Q)5Djn|LXlEla*=uxg_sVute2F{?01{-M1OgJ9ZOeeYO3dM&awB%=yH?# z(@F95Nn!S|1Ewd$C8HN!(RwEL;-5|JcjIi^+vqtFf!9eje(3}_kGhUymjRlmHqm<$ zzVVc4`Nv@eH;Eb^2V+!BBc|MrPMZH{fW&a?Jr`zT(BLUbJn&bE!{|h`dVOeV=-Hs@ zwxDMYC++RjGiNy2Nx`zE>G~B2JokzsA-&eIEPcuxHS?#zruvrFI?n$1T*xP#g$40M zZ#Sh*WA;y{cR75KZsyakN?W~t6>^VwMrKIlPuGfvA6EmIOcmMR7ag@q}Cz^aEi}sx94CXbkTV8fw9Nf-N z#H&bQ$^pr^q516o;6~tX&O%{n_bKIQuB~yo$g7t&>xUr@idh!0z|`r|Bidc|n>sV5 z$x?Huk)LXL+;PcSh(;8L?(o^P%Q@d6O-vkHCh>bl;1h0~?sYA{e-0pda1u|%x(Y~3r1>mRKCxdIDlDDkx~b0a9GqBW*Wssr-qE2lg<5`QmS;vKVYU$6TgM-egF{fbb zxj}HRA$;^DIXd6p>dZYi#ht=U-^_`(&A;};9`h@hOY6j#SJxF+<)Sf%7aFy&JyR_G zyk`#6R{94o{ikn*Yiv4&%MXeJzpEFzw-a)cQnO%3l$8a;n&toklr~P8?%q`_3YSr`l!toE+X-q*!kH zCwAe4M_?0=bz~SBOHTDprN(bp9ZgRT*q%BRYRj#?qaerOhAS=RgDOImYfOe?M4Yi{#)lo1>|z_a&~6N7cC^e$2@c?iKVnv z;3s3V!0)t|R~Mz4*<7e-MMRwC$P@?D2?}^Q+>LrOVxR(bfA^RN6&oA<5NCGwAM*8t z7tpB)+-p=?v@i|*8>W2|xHB|Ya$T$NEf59I}opw!1}toMi_dXsS|= zIgE$*?t;qj%u<3+YYcd2dakU7EbNm`w5UlOXT+gwz)#8hn*9Gn!rAg(cuO8mxLMM{5E-LFHL!)<; zu~PlBgtf2VyDgUrjVejs!L_RajRZ_1$DH4ld#L-&gDXd22bP$+mQgoI{x-HMtN*80 z&)yIA+1k_3T~$MECdEk8dlF7RzU+ZgR6T3fESXHp+L%+_iMD4jB~sff%Kdzc=xE+u zZO7dXLq4A?mVHcYA%8S7^?c3^4dE>HYHUMss%hpRzr1XEn15$rts{-%ig3#aw9OW| zjr*&e`EJLOwJ22{ae39iw2gx5A&9Kz^ok+3NJ_X1k{6urcbZ3fFiF@J3$m}NU>e{C zyQD^yXwT1LWqs$n_Ip~G24ZpoldY9*{&R@oz4B51Pf3RTH>DwVR)q!y7@W*Rr=NR( z(5y0OIuWKEGE6uQ4|pV-UBiADHw0y7t~JB3Bzh9ah0A)0?F(ZDVX)E5(7bx=R+T!? z)$YtaqkC8{Ysv|f=Lpi?+L%a^yWE_W$P97Onm179DH*aS90-?W8VW9Jm;rln*A<@! z`#TGOgao*{UKw_+dd%UUDKDXu3(?^v3Q!lZl8qnoJXUAz@42yp{#E&)qP5?pXVZ(G zdsF@CQDr^ngGI|)OhUP@&;FxCZ7)(^{iF9;R?+{*oH7mKd#+-It|5b;%QD00}dg{nz6L+(Bs?X}zkf78I zcgwDj^`^x{Wyx4s7u;OAJXa)xhWETwx7=$#*^==>-R_;z^r4+BV^h=GNzPJ=(wzTM zv}n{~>8jGdHw6mWEL?*2MORFGoC7ba%@0AH=E!#{;}G#DRPMvzWUOqm;IFKZ_J+&) zboiq4(6^xaph4e+qWwQfEH2)b&`zF9#=cv zUjkX^8)vPC%o~0@bo*dL{+Xuwu%#e1GtAvKbqMO1*_ygAcF*989XsPJgc2X_`%JcI zYQ39(Rl+`^{#3X4^PTKxJR+5HwMJP{nQfH}DNMp$aBJ?g6?n9TKFW}>8~S|zo-gG} zp2sL_IiEXI5lvSa*WtD@K1@6`a;MkIiCND}seN%5}~585UwbCVZo z3oZu4=UdWV`K5vnF#mCAXCL5fVEfBjXS1*vQki+8JZ)9$A1$oW)`<}YagY(WJYCME zv-(TTkVD)Zk126Qq2>`Zeq&queh3sgwhqlTSc?oiJb9rBUhq!Lfjnh#|)nFjIG+ApP4uKet7j|{q( zC&l&MDhraRYmoK*o4DOg%*`Y6OXzouN!X|RxHriTPJiss-_pqcsE9!7NAsnrUF!=i ztsXq&vP~%yeBlZ@1wVTwy?nG@U&V8nj+xW&IO`1Zd%cxpE}qckiJaR0l5ZPEVVAbX zq-x{Ss^C4O!fY;t^)Ij42Tl!SiXQH^mZsiTDZqdJ9l0v+$86wE?0J`90%BC-)CIM0 z&^Bs$4<=(s?EJF=Bp#hLOTaQer#Uadjk7ih6B3!KS^PUlVLB$5$Xw)7!Pu4YFdm@c z1b;Z^z(Z+|f<5OAtpzNZtT3F!Oj|{%6^e55`E3^gtAHhnXOo7N<_<^*@&N}=@11`D zbASGMHJ6HW^P#z#@(Y;(gt(wvMD0u1gh3%eN<95n&dXlw(N7cY2P2D` zw0-AiJ4Wp_b%p(=#_o>^HV^gRg*^H^(nHVGYcBR>8mU zApUW-!DR1Ju;km1BU!wr0hMc37X|)VZ4bCJmq2C66YDFRA2s)QH@nk>prO@=_i$0x zxWjHwt+%4BzpHJ?kcfrLFA1$3*{Mbz-=B73Xl_IU8pUhuqHZgbch!bobRRg~MamOW zbCazRWqC-=koUTC`KSB2dikJHf>S%JK8M3!O9QdpX}zpX;X%tQIY4ASR24L43`C@3 zkXYbpV_v2R;#eDbA(*smi-N_9(W6(wZ_3aC5_E*w;T7k&_77zLqcH84%d5(-E0+gE z=9oWE>#OgroWCv6olB=4b|vRt`+~k)GMMh3OY-pKuyg3ts%tFhI}1NG;TH|>mRD)p zg^SG7G~?+p%LJ!GMpLVrx3yIUbDmJf&VagBM*lZCy;@L?!qaowlL$QxQiohRI4RYe z{gk@;TIhcD&tF1evy8ghIaEQ8VbrODxuD`nTdpkAje1c4PbMMqR{6lh$a-#3T+9bK z(i&uxSLrpk9c-#rNoSYKtdoB{NM9q-QwrN^aGOQ{VH{tq?<{bIkaXsn%TQA5h1EBE zNR(xoAlDMUxTKJCB)ew8yP7mvD<#KbLB(#N3r$3AKN1D8!$MYV|&(tm2pw74CKN$5U z?5av1jMh|AwH}Vuug=$H_3kbZgesrrpIx7hLQ8Y1#lT2I_|2}#)F$qQ;ucQ(joRp@ zQ;d1%^rk3i+f7W85XUls$0>+CG+NSZamr&K7uQ}!@zdwH4t99VNY z5Ea15;AbVaLd_mSliZ}}>88E!(^dYNn?G_$ajEpmhS!avM{LWdK7c%1f5`*Thxw$uq-sxGJ+;x0Q#%9BR6ENxvp}5mpaU5 zc4w}x4ZUe*yO$kUc8$7 zhqq|OTXI~;m`&iuQ;G_Mlh3&}LtJE^X|&7}9CZWxHkI;A@U>98;b|4xVprv1lTapx z)9MRN_@=$bl?Z}6q=s$Cpx19wd00H!=s?Q`KB8)wIazxeiU;my(ydk7`LhM`y>66e zxX1WxW4_c^QIQ8u=4L+oq=QGL){_9rG;?~wU4Cjre)?3mtIFCWz}w(nKL3U=(#z~^ ze=cS2TF?83N%$CVCY`F1AQYB$oVo>cd(Q3ocSwe7G32PPFAu)W|L#YuhCF6##}AUx z%q+hWbz9Jd_+SyF?}Uq_(C6&a2-OtWt^K6`Hr#+>^&c z0hxP&!BChmDxrNMdT|f9v2pP6fa!6XtS-xrlGFQgIYRe&%r;jo(vK#ES_16rJ|c{V zD!`2l-M8l9qTnu~hPCh>gD)poYc?CZ{Q2s^w}%FT>gG%=ou>oI1TmEjL;Y_Fn;!BT zO{AS9ufxojR_lJX%xjq|goa)A5^_UyN&RBqnm&lN5WmM_OBQ3ndFI>Hum)k>ndau! zwz_cv;F~3w!aI^3#&?aXi6Y?5K&3sY z!z$EUez$U<>uI^)Ai3F8DUHgCkM1N55xVX%Yv{XlFaP5-fZZ3%w#2=ywE2{{0h$j! z<}yTYw=Ec+`;k5SbkXy3@w9mO70B|W7B4-SRFq=JJS`2P9D;aVc*IoI_reXE*CJifyBz-YfH|NeHcyGv~u19G}r=Du=oIJfal6+c{dCj7sFuuhyQ|R&>A9a&wM2 z7MiG_k5W7&F!YsJ4t;j-7!YEz{2A7gHF5R-VywRlYd`h1L%^7iV0@pgMT*rv8(Ce6 zYA&648s_!A2dm8-Q5TSAq*5tPiTdH4ITcLfI)Lmfwm>9U(K8{~19ORN7BAO&ne-`d zvzf}QoDbRQ@HD(A+#0HPG31L@HuMcSd3SS^p6BkHb*7Fq5-a5ht9e;*E9e5WoBtnXFYp*f-=io@89hlHis&`L1qfTM7`F|3-N$XHDtXg*1pXL=J6WUke5ML432K#*lt zgzIk6LWrL|c~WL4V;;48*Ra8rM2rw$F`}Zqrq*dOr+D?NmPn+e>GycEc{5P8T8Z7h zhnii>fLB*GX~78*&ep0XD@a z?(E7&%l!N&31Ylas?*Q@n3e2yf1YkFD~(-=S?g?2LEorm+|2XZ12Q|`=^@V`e4);2 zzQL?c2qRna6n+eZ9@#rz!1#KkZ=ARjC7aLFf*&7k6{cRcR3hT6Feb%3&4K zinSQ7C`Cst8K7rYs%llm2}D_Ip-a8XAE_&B7&tE1Jh$}Cat!1A$@BeNMezgA zua-2ji!b>6Nfqi}%Q;>WR}rGPAdVq+Mp-}ol^P=-kWHX-8f$nsB0m|_kPmk-=gJ!9 zUHds?{}=N0^ybM^(;{hM%V|>l&4kw1**?-MLlU$3P8<9>S@oM^9*}lzEVH9LYoR-F z(Y#VuH_yqQLGDk!*PPfBIh_(Z(p4Ayu!*C6#T1S_{rXo^^?pr z`PUi$VwWFy;0OD7*D`UPpGM~&4)A~Mcf#x8=U-l;9{a@a#4ZpbxD@=vF#Yj>ce0ju zv@AFf#tUc97H+!~u_CL0+;^n2Q_2BA?PO5ZwhFj+hI!wUo<8`)mH*vwzkg@qObN(G zXsE^}fhD(({eGE?nOHfA3y^q-J9y5OHK@1!L$Tn@ezo*h7NwO<50&k^#3v_L{s`&n zX1}z)dlFa)>5|Ko?|lDbga33VnorWhPwbXqUrxO|+yQuPkHN(S&3U~%zP}#@#~t-f z_DL{3!es;;JUjY^`3hVJEEMnEzaBAuCG4Kq;@Lg4YpNkcFCEr4;ClALuf`s2!v3km znpm|qSnW7wvtik^B&TB@6I4BRC8)22pYrDv{f})H(m#`*qnF4Z`=0HOU;i|x&fS4< z#6HU&R$h_%?$I<@w`kc_3+OG}E8pdgtgep2!8e6Fww?~-Xgu6jXhF^YlX>Jh-aX^g zl8A@=n5o;z!Ds1z3-&G({9O+`DqRQZ~u1{E2xP{mg~a=IL!DGxjMzj$YrX)x(# z^1FP?eKFjE!q+gGwfO4{c0YM_Ih@6$j2V}yy!JvPjLRVQup=HiHkR) z5EVD18ZHamzqb4K|MDw3d{hCM+3y2~j+++G!Om3G0|LKzXsDeiMGPuL+HO?!KM|C? zy>0;2`0A7mou5kpHV!d*cm98CxZjQLdCf4m)a2Z;Axy3T*7N%CrM_Oop(XPHc}i+( za-}$5$}EGxP6D%0T0Cr~fX=X^#HV5MPmI?eN4*dynM8Lf8(R%$Qtx1CSho6=k{>%# zZ>_t|{mhB~G{T>%`$wJF?d(K#Ww^RI+J0WEwug190&6VRycqd#b%-pN)8|5FDS$v&Z8&w~l|vi|Z{{$R3;pl`N@Z}ER| z=Kmfn2@9vre9PUt^8WCTX839HQvs`*cq+QJowo>nP2%hSvlY;%+Jg? zf4Oqx3CQ}v@)7qJB7QRMAJ(zXNZ=}g1A6Cwb-yP0l(Za(1MPRdqF8&*eYSN&j)h zmu38)jwwPteD`_~il?gP&5ejvxXMIf%N#B-^L;aRQUa;X5k5sNv;V@Ql_&R(d2*j< z_rihCb}_Ii{ryiGk1C4}enHi&w{mLZO1JknI;zLUjLMhFhU30F&Ysr=o-_cda<%>{ zH)2=ZHUcG}be#_MEH;V6YTv^Rgi85fDb8pZRopI-<*=L`Z{#dC^5SLnM*F?dDncQ_ zeb78Ush`=c(VU@Ts~<8dbGSxBoXd*Xlc-&fMY~onS0Q^2@(d~oh1DZd5i&*&I?sk| zkf{D{!eSi6!Kp)XBXoS0V0;7>GiwU{a@hD7)6Ce9ByRYVv%R2^+Kfa8Ekp}Q#H&iK zy@EJ>r6095+F+8YP9$dMra@bcEuFhCvbe!C?`8cp$s7WpjM9^Ab~eP3q?p*)+;t7z zVxvD5MuW;nx|cpSQaki0i=npE^r?TEUa~-nk$%Ff>S?m5^8Jl`ne8BFXlYJZ9l>yA zopiXI&VE>S`f{#;9RPN@$s(9go_L)EctN{f<2XdL_a>D@>Hh zzBFnVRcHwfn!?m=9wv*x=Q4tHFmXM&Dl({wuUsivc2Ik;?!&f7hYD{cGox@FpCJ| z5AfZQoJlatJP0#4DM$-5!iB*i7ER^h)k|f3wwW6-SbWoi&sBd|@{U(fdu}z+ufbq& z-q*O+MjDw#BiNceuBT_JY{-UBM)~M_k_aD@!?qt7>`=Qq}7=Fbw(r43{tCZ?WE{{$;&*gC8s>3REjen zszjru)&|o7pmwGWEnJAj@yq%jP42(uY*jr3t~NJzxLtm)6t1nbj3JH<>#yPreGj${ zm6@`i7X|s@bqie<>JGOAJytNps;4)B{Sqvg%fB)}?v}1%)?4`wd^WwuNomEhmG?-C z#dHuI%qA(rKpkt|rz?-@glO}78gGT2SSs(Dveiz-+ItibIkT4~e)ydpq1QE-5UT?w zR5h-4yR@*lxTpLk&TV5lS~YIiZM3Ipa&XRV^c(T&BrnmA^|`tIhEHm^739OV%0v497hCrUUxyp)EuCcA^rGrS<; z`YHGdevI3EiV=guN*JcAS8A(`+u0nZK^4o$oc=;`R@X>`wDzA`=G2_IEcn;sTmiRB=(+WKX`MMW4}F?n4>;zC)PeY(hjOS1e^niQ_?1b8i;( z3dy|q!qMPtX6yS#4&GZM@o>OPDV)WFgCRB|R@a zxt#oHq9HRw6#;)7p04m#?s>-_-qea9`KhsXnHMI&Sv(z!UGPn;zIG@YFu^Q zN2yZD+Lxi;GFL)N)PmHC9xalMXe za4N4t38rCXT%&VWqureKW#QGq_GB^i!lx4FoN(2xo?K`0To+b8-{Qj4hQqc6pB@e7 zOCD_YEH^PbZlY}ap6P<5KvvT;-xD?6cOP-tc*jN6r}`f5)@D0lKv|A;2kwXnuwxi^ zkgL_Z{J1Y`*C@9%O+G^qme5#jowps^jaSJ(KAN`pJQ-y^Ty3Fp?vd3V-^29;#_=la(H1HoduSVvvA4Y4zx;qojN4=UIJA2URd0^>q@5xp5 zuuOG}D?Z^1bAMJr-yA>i`Ao!IbuL3cZ&f@3zBkV)q9L&9yxXb7P+>7ih(IUU6(bnFRf^X-3&JtuvlzJbLHhHDMBlFC$nQ@TW zR1c%EQ<7a3JTtL415_t3J!SrlIGjYEb0lQXKMG%}vNxNP?7&-%g%Wea7R$%soWnGv z;(CX%fNpalJwnfsa{bZ56>v&mRV=Ayvs-DZFF5eHN878j@3vq;hIQA&?_P7fuPcKY z5~0(s^7jWrY?>lE0s=X`i%!&{XT@hzG;gcYwM!949@b93DCmD{G!`&pj?43SW_2I_ z?P}08N?5{}o$|&_QB4$CrL!`5gj(II^~tg#Tq#)GHWBdY0-q2<&#c+^Vcr~_Mg3n) zjkA0LS*EA@0wfLDDf_)bY(U@KQqQ<}r(d+6#2Ozu-!a^X#a3yEPrRbLh#flpMKMGt zwU8j$o87;HAj51(;J_=4bvyEXOJd*-V%^aJoWzyts&R<+J+Rekb_RVzYNx-OLY7Ij zF|RO815<1~bLwb<#`i9G3oKEWWGP%oP}>F9DmX%Wl50ZtZaiW1wu;9=SgRh%>`&0- zS_+5%JOfv6Gg!f+ElGq8V6ol+)q(1ldan%ze5w`s2tH!<{NZm75viSGU3uf2V!PXE z(=Do7_JKaz&2wh<059n4#31AZL>YyE#~q8;tJP3yI_@ZN)k#Z#ID)7RO73&s9zQxP zFFx^lybjzBAvcxwaLl}Db{Uw7M_a~6_=3~5Q5aqtB$>{>D_&SYmub*=Km{{ftG~N73v8yo6Yvzhf zLAiY|)ENJnoP87Z%B`b|nWB8uJ(&`_O9tMI7~4B<4vcN;m)bH*pAo*;2cXU+)2Dsr z%!#|cM?~MlwsRQu_bV}E=FEek#<}mNY&|VOVD<41HCOh;ZyIgF2Iwg_Ljs$gQrED> zr9UUq0kTS`ru!xO$$KAwUn2{vTJ_;CEWNCKD9AAv(*!6Y12Z={vdF%nIL-A&$SnZ9 zonIfA@lg+ws<&FkUMY{}IQoq}!%A;e%wSt9r^!kw zu@0pLyn|Y0%X)F|9nSA;`h6Sge#53?U8^x=09*SC@7f{WDY&PO$TWh2ipbdwuA=MlGgv+5)uu$iijy zR2t;mMChr#HvVmfpyG1H{hMye5$2>Y7GvRvZ2jTxEm}p;EI0q~Vn>%`GpUL?l`fui z^b$U+7w)49UrAPBE3mCiIkA0+y%dNKRz64 z?6#WHIxP!sjXR<;`_5WW4#P$p|2k=ZR%S)a3t0L{5?aHx+vpST*Jt_k*aeTnkxa1* zF(e5iS5|$?aClU9@0*Tw$CKQ~Wn&s@em^e@K1%?aPQQcp zu@QlD(;a~5E)-r>Rka{}!zTy`i+RLcW}fEiOq2qT z2AINi6|wKslRq-d9)srh)vZrLg87a(oO@Zd^pD+BQRVsM?4UN@DkEMD)g882=C@ia{mGZqXdXhE>4&5qEw)6wSjU}4A`YMS4*7ts)@s{ zUsk;XbaaiS4)BMH?zv(N)TQLY6b}hk{kv)A^|`Iq1nh&>D6CrL|QQBKxjNsS@97s!H{ZdW`!VPK*ReZ(j9f zURvg`&?>SIC7Z-$Y-pgai&Y(X`v`m}VOw$^&uzCv? zxLfGfuzTKrbH_bK&gi}q*$&{?!7@sy8Ns@JXBo-FZsZpN%G8JbQZEgDd)SfYCEfa! zl&ur$vnseCjg41+E}p9laklQ9ZjNe7ZuHqvMbx)!hh8uHOn}Zwy|A+AI?YLT7v&;< z6v_3z!|FLZKo6rx6f{9LhVTL`Piky1+jmjYp}Nwj&DL)?f~O%4ISdbgLndkiD|Pn#EQR)cRLJc$ddT{c(l`NEP5@FH!R<#S4H2p9sW|2^mhz-tXpG0 zu^3k_#U?Ybod_y_*o}QP-=-LJ@znH?s^>t$m?g4_um&hFpa393bbLB*^d7di@Jf%S zWUEZcGXe0Y+PdV!@;?p3oE%vtje@7j!3(9-yHER^QoCv1hk(x^U&%g(!Y|W+s2bT9 zOrgaxv4`^F@9BSNrE8!b0ORn4TDAf9dFf-FPW#)J$ZB2NFO>)q-TfBwqoh|_yHF~R z>C@BRWJ=B|nrBeoi#=_4Kg*f(%#bT4hR+nLCx8hBza`v_%`zAdi8PWIU%`^~^$=92 zE86v~5~VELQ{EN?YYH5Cc0qV0f-*(`90)FiF-SnGW?P&WM~D=ruUXNc3TyXlj%XFe z#V{Ar#Z+uS>y)fVyfPK*OE?XtJj+Vb!vWod@)r{gLOgpc*fn|PJX2Xm%!dyzhnzW| z($KWGf;2nslm=4EABfL+OS5Ggb!=`8eFIWWr}@tawv;)pOQ|nc-Ie&*6ax=d-~JrF z32mJLcL%^~t~_|5w3`Ca?wwCpl(eGXcEiW&?)}iZjNYyUa-qFJMP=G58~4V8x%T_XD?M_#NLaZwO(A|97a z!c=iD?n;x1Ha13Y-bS(Ml0$7;P%#2mg<{4mA44+Cmn){izu1-X(##7tIKL&cyK$z0 zepBnkKH$CAL!QoT@=jb906>O0s=!Dt>F>-ds$>arwui_0{XEyDQWzBtcoS2o6{Dg+ z^Pr)_iYQmwu5&`&zYzf4#%IlFXjXZbu1gz&${I@zm1a{+N5Owsf_2sd zb!u3fu4U)i?f$6{N86H#&TIPj_nc{De6MKw=6mHnjjl4rSqtF z^gl>Tj=qFT91iY-R#{>DH|c-#1(2uAHl%RV^$5w^Ozifu{$Z;Uhw*j$=D8{?$%Zkf zW`Kld{d1R&d#iXHlrKG}zE~rM+c4l1BQHh67fq#5bM`i{*qNZZgC$3jNpTsnM50gP zq1FkDgDo5pv=iGQejxO4_8>-6#VI${9bBBRUz7@DdJ=A(U=+73lf=2cwJ$Hd6_wLD zkZgspokn(n>O@c8SO5zeVRw|=QXGtJa>|tOl$?JbZE#L4(2#GHJ^Tp>A(x*Z(S%dHD$C>^K)1{E$gDBcL(hHKy=ou5&=op`ob~Me zj68+5d5fktX%xqaZpz9MMPh**tjAY$3Lyxapo9xUE3ygK4yzxYbZOHyOj2jsV!{3n zzBK2TV|sZkxuKmNz~vv+<hC*4xjqewe^KH~ z88Z!{UGgm;d)6Wmwzx9pz0yX`NO^h2W6W!|CL7W+%(rpaeCjp)D2`D5+;{$b+^kqW zl1zJDLgheD==LY8>s!5NE!vXsc7rJkI+HT{(lzULu&F%9M0UqZen}k{OkIc58MfLz2PG%nlV- zhu}g_eZj3sQ9fYW+jRicMsm|eqsqr5_5_CIN^44E1c1{4X|2lRMI2BJV#yV_lyU#r zpzA?HMYe@v0plZn&$M!e6*x2Ea5J}YI!T(4XPHd}KB7=RSo&<$^2|)CHj1iWXkuq7 zB4Xja_e;0Al=2|*t~->Ov!FSMn-Ty!m0b1y#xN@9R#&c)aIgY46qE>x6U|*Xv`H0b z=y-%CJgQTexQAY;JY=UW)bz3|?bGq{*3%)F7PI_}MATy+rrS|FQ??I`NA-n(W1B*n zw#*!)EnQ$~fsLY#matmqZ^uyN8=&4kL&Pj0#j}52KXEMeLvvBdIQLow5!Vxdsq~E+F zry;yZ?H3gmC4wNd4mP9jMd?9=s342nPN*PSWqsO?CTD-z8T&y_)lDytnklwX;{6l# zR+`dly5#7-VDL3$_8fo_9z2WY!32X9Af1EduW&wBYx2^AhvdXoGCM5dHZh+@%CMlU za-|sOIlvQEJD&6*EtQkB`)=j7Bf1B*_~u=b*&@&odm|8b-stjJZypyWxGZ(d11ed2 zq}aITHrZ&p>)g{&vtx>q~Ds35)&Uj$EmPgrpLjQEZg# zXX$#P4mw=PLVR;<*LV4aU>6#9WgW$rRzP=znP z4<$R##0K9nMFhy=JRXzxwjPv0hb0Qh*$W zFP!7f4yu(?BxKnt69vhvAcipl3N(Zm28C2Jhl+_n^V8o@g$kuh5jZy#3B?x0_qee4 zVO4xA<(Mv#Z{tsRvyn7F#T!e{Lc3Y>)+6F=y?g+7wOfP5U@*1XMb0FRKmGn+AN?&T zW0XI2FQ$H!I@5YS#i{9vbX%yzC#@t(41@2e8*aB9UsBT@Ps<|6)qLmA=)^xxVigE5 z_!itnVS!{0m@S=Lgsb>m`pc17X=3H(^QK=YoBVUmM?TB8jxU9Qum7q4{`FCo6VTbkK2P`)#PuJELudafR(l^;mOpueKZaEF zXU;|H`kCJT*puto^W72%h<`C1f(k)@ z`PV;>QM(Vw>&PzO{H461q#Q8twsai}>n|Hh1{j0hB;il>w|_9k7%)7BN&C*OzijA# zjqwNT{?{1)HOAl1*Z+=;|Bj6Rj*S0rR+IGN23MI~%W*a*UE?G{{pn4FC9r#-@Y{JM zhM7@0Vw^y--nU0O-ttYTG99N;^5yT<=02~ts&d842a(aYNYxJQmG3Uh-Y#op7`8M} zDEqi9>pM2;F+2yTQy9@5JrT2`jYRw?UBvWgE7E-AY_j>t5VJ(QVQs`tk?Br1Vs?ac zcDBK4bN98Q%ITsA)MIZd)R~D@G9RPvaNRO*Uxi4Zn@&I-omAeA~Z{H-y$ZD?>Di+cP5qrWFfDL zUs!>$-o^EL+<#P5|9%%B+XrZuBV7QB8DEv&(};`_J>&_oPcEqLWd zR9GTHAB|qA`&JPPZ2Z@n$ff58s}OQ;Unv4AVj5OARI8J=bF-%i){^nqYRdMON+g__ z<|AXE*jRU^YFdh$umuAl-R(i%^QdADIA3d~e8>nOu`u+QNwlo8MELZtJhJRLmlL$L7Jgcg6Y%zo`~p`)e4S?(Uy|a(&05Y>;!xeGEx^Ck^uers5KW zuDiW52D94z;aa@CIVJ48TqX16<?Z5T{_*Zi9PogFXq~_uWYuid0K6Go@mcJXU@Q&yRyzG(S^KD#*9ZhUy#vQq0zRGklBxa>s6N6UN{*ui)g7P zpt;XBTYh(T*svE~?()Ttx?q`kWwt)Jh#4n)RP+0Cs2L1b_Tk!h*p*3xgnMbd>f;idLzV5j0u~Wy)U*-?b%D73KflF95An4(uZ#Wi15nMX&llRfH;1q2* zjq|ei-%EVs(YPX+`|WLJ(qCd=A)Yff)R7T75d66Gp)W-;^F$az=XS} z5B>)fHY}*e@Xp(@jg;;N+p}t1Id~p4>`Le&I<;ksW2X!UlAf(14#EBQ6<$p|L3`(e z!YarF8D7@ZR_(==OP*9k0m3-2;coip1ak6 zcCWItTOt{hv&ti2$kGk9d3^w2B-Mq50*EH_ctdxmVY^~wrwqIt#lxUp(bkZ{^%0j2 z`IC$IkV-?3(LO|$(AZqA2J%(P=)I*9&A~gofS7=g3g?Z58pQM*0$0iEut)1Gw7U5& zmEx+B9cu@x7Xf7USh@!q)P_m5X-RvK20n^vvS$;d%}gb z9=}5NZ1=8P3#2%K)@(SyI97y*Q*(t(Oqk}z$Q~;p4>Ip9etbC$V9-izb5ekmPKD-n zn&;&CIv;$f?r2GkM#p=s9=iCEly<~gg;6)~1l>P`BLD1DA?q{zFSI`G?}Se5lZ<4h zec=a<6T#SQOMVy+BPw^xu?l(v^Z3r;An{Te`*v2x3aqjMO;eL`*LSVKpk$0L;s()a z#XgpJ0rmVe7wlsN=IF3f4W@HAYsna)yQNoDQBn6L0ILuVwRM8fjB5G}IumgBmSWMc z><1(-?0ut^{Ah>WW6|QF9>0}-nFBzj&mO>lf7~8FmElEr)7cTPu-|;D*$b<0RHTw% z!g~K^Tm;${RoeKhE0;{3Pk`N+2!O`H{a3K{AzX9-s;R@}&yE zc#KPHQqsM~8=*Q_LJX!M2H}eZH{w@)aoIprnM|Cad zZZNBP9CG}JpUdfkU?t8F5n6ZF!Dm%*yMmWyk$BG6RR~P9rZb*(#WQFa5Z>hIl<$L;;&Xkd})|&6JAFh%gL)bZt z_ANWZW80#{@4_8-z0Xa#U!Rb*Z!j1SR0-p!;$d;=J0=b)X zr3_@;au1C0z@Aa2wY7+;{Xo%b8b)))9rtBlyz{Z^__m=L+0QC6Ml$q57SvBqEAC$GPJ$hg z#yu!z{;5u}Vk#R9Ry9P%8^bGA^DdU5Id%bro9WR(E*neDvK!h3h^C%B+XF~}neB03 zU&O`7WzYoLR=}iCsb&)Nd~*xe-#C)NGZHs7UyF`BWi?^2aUG?{pB^*IbCkSWxb##t z=em23cl77g*Mec@j+(ZHcy}G@Sui{%s8U}(^%E~g@}W8<-dP?L2#5tyi4ih~J72EZ zOjHkAB=1_s*<8P+dfha+)i71yScn(ba8t@_q&b$+(0qBMvaq_kdgdVFE9c@g9b)H| z42`J)Xh7~`%}C?Rk0YM2!x^!ER2KfV=H9c$p|q`_1n%o!;qnKY?d!LOzDO(yW&Wtpc)jI_<$NG=Uq0)e)TwA8V<<2|KlJ5Ski>k_*5_ubKYurIB&X3!w)kC~} zRC_<=b{D)-k%-lJZ2mcbOvDjMPgzFV>ZTAb`x9XbxTGZ>p*)R(H=gmB+sn9d!82$y zI*WdHwqx!^a;*gY$?~PV*UsF+vwG6bA$39ZJGZeeY=Q?$(NiwE{DsWM;S+D^&VdTB zWX;-0+D@vI^`6S(fc%kki4j8YXn%+ej{sn}rzr>iJ1^Q+#ZfVqHkI}p;bWo05 zcX;1q$9Co3MY2YKi`(ciRsJ^nolnJUZFllxpb<Q-+P}$F{sGpu^o=Sb8BgEU_h2G?JsJ@z@m7mGxYgP)uMY~nhhm{Q>AZCP%xhbK z&oXG(o}!6vC}~;GYuD0tP0dkiPxBOEsz+O5A{}mGj&^o9;|(s7HOEH%E}gr-_BDj@ z-hmyUom>0LWmhqZjz9m>y!kKAObCDGrlFrf0D2fr%drCKg>}R}J7AN30qkD1bMVPY z$$n9X+g@#WpF%kb)E@=rU+x- zjd?vPvBn1rx>V#~>{9MK>#IRk{ZwA%wu35n$6oBuyESZnG=LsHXEz3*XCHbj=E^FN z8dNKKt+}D{$;uTgb%w#Z@~j_4vtG3uACu%BfHbR`N^C^v-Nl)A3T$iD*8PV}D3=QA z2Df)(DhX_HN*$IgKMS3X^$%8z{yD%dT9q{fW1SuSIGbtlft5_J#>Oo2%(8*2gWc7M z1NWBnC8rtFoR;%LDBpf#uasGF*i-uCFkCA-Rpm|Lzh|+Gun$u!OPT1Y61=zvS5W(8Z=m&!nYZdK72T&eL?8Cpwl0s!~fekDy zq@tHAIak65JiZ*kmZe(81bknB1(G~kR4Go*+YGl`2s_{~5W1AH-LNY-I&AG)u_Jy& zf#$M1myhcgs^&fUk*W0l#kwJ<+*uyChc&0MkpZ4_E@32odedJS8+YKQ*Bq$^#~qK5h%0SDc3c#^#c#Aq@hhns?cV){$-q!i1Ex{ zCiIC@PRHZJ@Y9+bjKtYkYH@pDNx2OPuDRIbExatH;C>g+Ph)O%B?a`ZtO zdjL1=u~!L*^pkSXF@nb`OjRo9sW34Kx5riUImuO^vVn%S)O)zRw0YO7W=_`NueKwR z?LE}@7HJP&wQIyq-jqJ5*=P?b`@k}ti-1>&RUYmUMtPA1lZNg9`tjlPcdLnBSuhLG~!{&4RD zQNs3%3$LMIR=}sfLFt6f`sc{|Po12#*?J;qd0_E~Q`)gq_xZ>p$iw1&KatvX?}cOS$PrU+kP=pH9!M=wm_l?-`Tm;G2*#*1`LrPMcD$hI%>#M2wY_woN_rfxZGfKtTD?dJ4o3Jw$bwXJrO4L+8@#E6TFT zX?TZ>Dldj}U5Y$rZw4IyUwyi-LM z#NXjU!lVCG{&7r3Jw59mioabruub9`X8{m7a02G*_LcHchu7z}+PzCv;mc%#GozXj zGo!)C=Og*HVQf~uiy1Yfay*~z?pF`zI0)tiQ=O+uzx_vj{s7~I?{%O{o!Lm8EgG5q zkB-VUEjN=Zx+G}(Bo?^Wj$yP`{X$oejq=Fw@Nh#?xP6b}br(QgS#^xR1p~o4OCTm$cV(a~5gi zcnxb)bGWIL#G?hCIWM^;iN`(Re$jNr@-ChSh{eZO%EsZ|Vm^DWz;cG$-MpK>e5;v7 z?gi{(nppnd>?ZQm!apDMjmzb09`mVlH8p2y54X_O07AK8PP3Q(lG<73Xt%@XaJh(5 z=)zyuG}#mWw*fpDn=S;@aNk7ut$P^*g@ns9$&UXZbYEyzemN#|%Yn5>wU$Ej`d?Ru z6aG&GfkN?a#5LYOJ-p#~)cm7bypsZWu#R1f{m=Va|It{$Vud`@JornO{7ZWX zz6P+doCS85{_Zx8zcVR1t~Ot^e6#mA&iNk~D|ra;wMu$}-2ZCXf7T+8d88JZ8}7xP_(V`NY)YKf~I|D^<>($STY2-g(U%vZwy`RjJ~4YTW>F zbvxqBW4~X&IIf@J=IA)5qoerur}^i(BMHYp+q&}X=zlty-A#9c;aRVpk&<{zcvHU?^c#w=AwGIdmAdk0E3jo1Y&pCh+UiM(n6x4g zRfnPSHkx9;C&|0=TS!v68-}n3vmUJSG|+kQIIS&N3@bJcyPi-u)0T_{5Je`9wz0nF z)lw@)&u^Bcr^{Njr{sA}4yE5eZH+5TO?lC9UL)faF;pWP4&>3T0Bp1HZLG@87AV*c zzb-)MKkj>E*f9I$r!Rx-GeowcdsoU+%Tzt9j_O$5>ur9I*bq6B%& z0)#S&C<6N9+gF54WV>sg@+Y3~iu?XX{BH)YiNcLYEhfG67`Zj4YP}km9z%OrOJptE z`N9UN_K~DXfJcmv!5;#IW9I+7T1+jp|?{8yYq#ogV7+HsN6`tqh&RXqDSKKwz~*UX^>k zyN<6qe-1Yi(DHGp-QC-C>s}ueD5>NJO7HVw0O{i-4=%B~imu(uX8|xtC+pBRTpx!W zs#`LG*z)NP_cv65N^1YH`nMfdjGo?M0yN8eEdVYwtv?SGu|?Sa7S1@pJ4)sGmp2#Ifzo=VAZpg>TGH}H*egk&>t=s9*aohi zyFnj0e4gcn)k6t(%^PAkUcz+QsLM=G7Rx(3Y{YuO^#WJyHq` zDmC)8@~(B>9Rm_=Jka;is?xg;89?CorBOT_<(f*1b$bg)GWH4pbb10507ZRClzZ&| zBtA{byS2h;%GDmo`4KDty$SviTF#gAH1V2J{E++b11sTC-Za?y6GO5wHBVr)y|*7O zE;#JWt0Jpri=2Qg>8qH(DjqDbylNE6Q-~ueR`aR^>21=@lJ!jhuDj zj_#085;1UAuJNb=gMUxSkusXquiHFutsYh$Csu_Ua zt8ctHNqtr08*n>U}p&HqnWYdEVf~=x&tV*hcw(Z-j zk@Wj7SsI+aXd`u$*?jlc-rsy+@@N_>SQm3e*kX=~#Y%|XYx&8jMaEmG4tsZy!iO=#@JrHaQ9Nc`a`KfJ;CL} z+fVPEvcE7*_XTK-Bz8mmrcjUb7Q8*Z{1|OP!;K9HLBaq2&CA+`y zS@)kT6OgXDdw?iaM~+01wToK#AS$Skk?Wh)?<;Dn1;;H^gQ4yfCDFQGbxuI_Ciz3st?ctl=V5gjr|HR!ziqRwb>;pC@BwwsBjOoh__7N{oEX00&r~ANN0u|>TWd`gz(gU{Yw~DO666q zaIGONufm`a|vC$vjWIy7#L*>l*{_(JgBWIDG{*4`X#iybL5uB3TJ;)3c z!8SO3+Nj=+*tM50eu8yz=b}B8%d4g2*%JSEKa{$MP;Nqcw0zXrZ@%iL&~1oYB$D-+=(`=gPd1TX7G94f7h<4u~zI(Sge{h zgMb0IA}y%1ra9r3w4k!Bg8Y@=5_aY2ek?VQ0$kjX~rY+-(s!pE8Jb`%GZd_y#%pjmyF}&$YEU-Sa{XvjhtmTFahxnRrH_ za6omcH@cRw8^J`8b_V=N&D#Mu*+}(-zCs5lVh;*3CW6mCx)>p;)6N9jo2!{@DV(hz znL+FlzWgHHni>#u6^1(_OiXAD!Xaixb!rrQ@wc)#u_OM-X*tDs33NG?Dr~F`dqG{onA!>Z!)HPU9G?KcyK^d3KtY5* zEUIR0sgzX7IK$#3WH3)pD8}o*NW|^PsD64@IVu~18BPWx>|szdL!a*abWq_z5|S;a zUX?<&Bvs8vH=j=4%G0u7eV1Vm>)Gm}a0LqST?t5Y+NHzOeqp__uW#zHOyy}n_|BlzoM{J+=o6NszPkGLQMyCZyZKRvjqL&n@JLpE@dc#xh< zP@D`_T)s);z8G4HCLCX)raYl_T*7>BOGv?|;4};yz!jPf$$6=F1?zhZiWaVXJbsVb zsenv0+P3e$b`IFk zG^aE$>Q|cJgX-ZVwB|bv#7N2cd({@YB?Yc50lVd}(PW{z;#;DG{`Y<_m!z8&tojho zWB5FWY7o-N1uQ0LnJyc*&se;5)>!aNem;7Shf#w>Ncb%QMKyIIK^%8kR{4Wh&M>y4@r@o_rcTUNfpaG?ftOzN@p0AcPfaea!edG3VS~u zufc@1jMgIL_lT=sF`iW`?C=`clc>v@hq=$}&t>pS9No2`zcLgL2lKrC8we1KwI$49 zCP@#HCp0!X6xF}XWV1~f05?CUb2eL_=;bTv- zx&$g3c!bjx(pq&79(`=?2xGD{5tWj4=eOg33O= z`w9_pDsRffccp7~cam3-=DtFy!qyjCd!YL1|SL=TFhLal*!mw?bL@-vlL5DO<(MMXbV6l+7h_GsqnXQ;16|D zX{av$lufvMYtozGB(F0ml~Y@$^Iwm1AKb_64zuvL>orVuHh}&d^9*3T0X2BlRam=lSzctm--B7x zD*^Bze5*WFv|0i9#E3d+BQ$x9&`MA*{8WmeY3$9s#LE;zqU3i#p~lHNXNODUU&NSU z-+`sd*&7qn(t)E}2tUsl?0aU#&YB~aMt^^I(HsS7NAx51zOjQ*& zGsrYJ-TZ-9R;2TDQflg?_v$|&h;&{wL>WQ)j^0U$y6+18lWYEm^~MMC2j$p z#&vcClLWdy&JHo3j~EMRJ~FYN5FX8uiK=(n(I6)K?rS^wod9KokvnGZylt~0jr*DB z>6@*&x(e)2U0`4=2fg4HBitfdV*7ZB?!p^#OGSap)um9;0}`{GX;$qd9oMC zfy+{_Fis?QE!L`I&gPcvbp&L_&H!TkBOg%#$WP1BoUlrp1)U+I`@7o?D|$EsC?D-K zK3pD%glGDtJ$eA3AdWX+A1~P`&pKyG3BPmPo%(SVO28q@aS82G?ZgpuSM>Zm7F&E~ zw0fhd6tlqcmnfAhn^NefBBOILZb=~+57Fn^N0~!LR4r8dk-}GGi@UQ6Do30`7E8+% zkY#msIP1JOgT&8bG8np}iaqR@C^~%ZQ#Ni%D(g>DLr;skD>YE-63t-dEGY6)`fs$x|S&yE*PNnkZDa zo973<`qk@$<~Vxo`fh-qt%2qw5;S>&;77cqEA$h*ggU{aA4;{4hBO4TsJbta>?IuM z@Q+pp%Q*(TzXbMNjCgS$H;hn}(Cx82GHC7Ys~$ZN^yUtO&@$d26UNsWagG$XtE)Iq zR~U<&VgdL^6Zx*fn1n}(D1?S}La^zw+%NX+ob+@SysoY2soAcq?bn;=)`r^j1(zDLpj>~_!irKo3&8~AufwHgaF-JhQ z=`Np|U8gf_!~Gwt4~fq%#s|s_HQ|)~I0T&D)w0(;d#E3~eY8Km7)yzux<0Q%S!XMF zdwl&Re#{E(lXhY(t?B*VWIV0XdGC@aFP?Jsc!+tuiRrgWbBm}&oYyD!gcJ|LJmRr@ zRH*&yJ70;H(~D4YxSv~EEkBy6r_-#i^pEW6g_r45aR(^mC*Z(0uOJ`(9AxZK%tMHH z1%e{CWspq^MR<4o2_rpXZ`gZ62aEpXsgw4I zhg@Yp-e0#6V(biJs?^dJRS@Yn`LmT22K@(E-^=V14ZnIW1o0x%-QF)ZcKls=Jy6G$({Nrv9pOp*Nd&+i#vBY2NL%z0h!r5efdUm8Md zSl4Ni3)&X(|GLI77*nl?@`B&|WH^JQU|-08Lo8G)6YdNncnL&vaYlWyTMs$(rEWlw zS=2MWchM!S_8EzJ|jgb-#%KYu(pKEMyU1qbmNh-m{z%9cCU7p!Wx-ltd(Z- zo4rt}*d|Ik1)==OT6HTpCFj-o+9R&%`ZWVFLfCPO^C)WNci%gLu*%#{jG?PPTwxN2 z4LxY*EYy_UClr6qo)9{QzX}JN!em+iP{Rps8{JM;L235Md_2Dg$i495QfbiXG%6#(ec03e zi7Xoc$8{q`!&h&9cH!Vts=WHkjhK!EVDsET%6$L9OrmKTCCit}`KdW8Z_CE1Jqu%W z>b4~yFmA2YT;07a|v8@m( z=vux<#XYDx1Q1}}k&k}CG36Z?de`s%U?O5DZKrM~{q^{@zP4*)kZ z0# z7K>)@K(f!P)VwMrru3FF`1K@B(Ph6m=J~;bE^-@bdQTwD!Jd(ye!LZ{1we~@_LNN; zoc9{P;KjkfR+tRM0*FDk+Il|GXGYy9A5PNZ*6M7y$=R9yGqAiZ*v#+ zUr*M1Iaq$U)q!mLwJ}{RI@rD_GLCHvhcfWfke zdTNTf)4K;qKpJqb1=OdVzZUhjiWgP%U zX=c!3Z>DPH_)*yVCT)We#B;+Xl|nVrQdAq4AR_1ZZybAe&iB1BG@e5u?42eDWH%=p zLva9KR)Nx&Y-=vFRvcU)sG4tMFuLPiD{rP{dmzdguioC;#zqqD1l#77w97MWS~Ze1 zkKbF6;W}`W<^g8sLzjmGA6D}P0$=qkX zZiObQ($3x6=rZW7KLbxMRY|76Q+PxJLGTPGpgUX-5$Ojr%w=^l}cwSlO-Z?oqXxYt>^2Zy$>ULBga&{L9m<$4mU_ zn8@|2+H&RrhQLw0%QD1^sfdu)v8Eg}(HZ@okKTJ2k-Rd(qW!ebOBohH4AYrjXq{AZ zg(XGQ+otJkA|500dzdOxq`_vyY~DazJa;WKy+Ezw-V9rg<$it0cVBxXZq&{97>DlX z=(kF3q(feb;l!S&KkT4Al|~ey3ko;C;+tVN)OW-Q&WcSrEZ<0WI!^lz9H>&x-p-sl z$OK7o?~F3w2pE)aC_7&iUAOFTmG#j#eE)W}P2-LpB(Pb3u1TNbX6wk=(E|KAnRQ9eSv+0qwV-cny4lJI$^U$2wY(s_xDMIzm_S2 z{?_L3u=;$bcHG8stf$A;%&bJuD2?qHWBtE`p6qTVlppe7m{*=^Kd zj2v3dA191RM@;q>s~tVaMw+G!OH_}B8zFljL!H^QTa1L?P-Q-DFSc_Cg6s3yv||M2 zEZ`!DcvLK+7aT`r>_;SCc9;zclO2K{Z_)^)Q&Ry_G8V9Ih?c*WNtnq!4lQ36cC!p} zip0`sQb^Y3Tk(lF;3UrMJ0m~{DWOb-HFjbzE;0ny9fX{*=7Q84(e=TUB&8j$asG?{ z!Tc3|L!g_@1_{t30OuFOD#c9ezDxnxeLRsKX8Bv>jtV;SqlpT6i*;>Rq?9nLXC4=htXIuHxM5tHVxx29To(% z#@9*ibRNGH0o(=8^7iC1{vu@psIe*hK>N@K87q$D%woKI5m}*dm#beBERszS`@JG}>2k;Yj>Ra<(m~1SYJd-r=Aolu| z@eF5T3J|M=9IX92@k|DUN1G<&`N~dp{GL~wBhiBM`Ep3}L}o&DQ#3~`sFVmr;)P^2 ziU`FTw@L&|`>VBwK)GCSlAAA-Isml)(K+_S9Vql2AJR{79GlWLg;J%?mwst8oR{Za z`PmEI3Qd~SYbg*B98a@#XIM2lZYdP}0@;)piaAxMO-C&cQPqwP;XG5}>EZ@?Ik{8c zwwOk~yz*i{(!pO9+91+Cac>rBSU7!c^+GdKkwW5aFK>9v`UJ_)IWL?Q!{#qqw9~)Q zPw&G7Q?HH)>kG6lO_fcsv=6F_M#o?hkML*2L%(`EeP9a6d+h(bUCkjaP%*ub2Gd3LVdG@2-4?h=eE4I|0fmEX=j zXEY8ZairHnn2>%dRbVYzk??4-!2gW~L7C0Mw{TWd)@rL+l`blu5VC=1hwU9YgC+NX zV!?!-e^}8x#oX}lz;%nM!J%Jm$rnodnT(y=CLUXbaU)*zmqu$r$lH*5eyI@TpQ&ae zS-}BD;M&KH$_Z!(iA6lK>S)Jw)JC8)v6(yIodPBMihK9Y^>qIyRZpRfd2Lndiw1z^ z-}s*l2`m6&{N&ww(v#`bp!7X>qBOjhC4cJ*^gRus(J_g^(8C{Ga9MJ>SZF^i6$RQ8>SI`u4x1+Vytc;(J-;l2n z@Vb^RzE^23_Pjo~dmUY*rrz|figMt%mNlD{M$%7{I1)*S&HoE$vIE!=j#&lJRfQ7K zp&97GY>T#>oP^P45ENwsPi}~6_UqzX&hIK_nOhGc6Qaf_NvfS;Vr}Ey}X!3us9vq^lA>zXCQnb4 zTj2ca54uxdypaz-xA*Fd8+=E#xAEDtKkwJAEz=pidRlfz$Bw+1hg{3|m;?|dp1#9v z$~8(~EVSOL^D~0jxYo9|a<;WF@*PbVkyU_Se}l4X!^@cK`F>=`Nas?r^9EZQ1>fum zT4huE3d_oB%-{OlT{!0FBw`O^3eM-~NpPmiFFoCpVg(pVQrCiBV$)z~#EZL3r7WyU zZD>@SduP4v@LSFoSJr!~8j1cwz87wL+~KF{CS*6FjS7<<#BCk`!Bhg)5kxu07BnSYY&>5zH~onL&b5q%?kve zA(0d(L=g_HC4Go-)Ncq(l8HB0{&sSSryGBg+UvRM&iD-eCX@kee8C%^yKIF+j@!vo z&eS!u8u#5!uu<95`n4XK{sL|LOr|vqD4Dy!j9UcC$ zv+W=KL$X2=$pphiU80bUK#!!YqvJ##Uu>2wmgz02-};;=yrVjw_&`_F>~M9B!`>fH zT=s$Q!0)V61#FKLyxf4Zd#iimJBgd6*zK258WVXJoUXEnD8%l&OqWYR#D<-rcwZoU zV=+wtgs@B8z%6hynw3JvF_v9yykne1;=i|;udkvnvz%s5BkvPEAHhwV7B96ph<-hpy$8L-vk_Or)2E)cg{#80HG}8_}{1gH^9Xj*` zccqiL#PmX4K{cUs5EIpwgaP)bXTLp@GXrN9Qztqjt^XyE}X9!ePVVcRN()x zeo>PINko5)ft1zYY?LURDT!(6w`xtN`>$x$NZWpIIN`z=MYNpe6|D(k-%C5YpDTe| zT_Rpw&n@_2szjXs!4K<*sieJaH7JuhIwXP54&SZpf@4#2m z7%<4pl}qDSsjcM8W;&QAbl~10-*o5+9U6MaWK`}XW8#?uYFk_=Vc;2AK_y_^k9!H| z7bi65sy%w>Jv;c*nf@BuudLLAu!2e|I^Nte>rl;d!{F0{g$1~k;{R>dx^wUGg#LEx zeiZD4Y_U2PC~Z;AR?D)r)>;HSF3OS|M>agknOq)`eiiVMD9b(uQ^q!^P8Lj;;&$05 zYdjnv@;LNcKDA(Z|5$6|X!Z1pq<0kddk762BlC&uJtdSu9 zLX)_X-Dz8?wbjD*mk2(>yE>xXDDbPby-8>f#`2=7&z>Yrpfx6<5V_Qm=!aeabJ0^m z`JitgLqn$=FdP}aX# z9Q35B#NQw9$s;~(eVQW<)Q#k>bPG*)!$W}m(M4_%xCQKFJ=}~pXS4&*@g=r{XOBUY zjM0j*`teP_NQq8Ur7f`qx^SKdgzMF;_#JRzIfj8g?DMOnkg2CoL~p#DN$8=Xh}uD? z5M})SJDM;zj@zM5wv;mr5QN{kX3`YTJYAnt!9Ti&;TY;F0%d(>R#Di8ZH?jC6+rQ& z3r(me9Dk%eDb&Y>KeQysee%pu?bpwG5HMZ2#TuWO2y~Hm^w%JlohT`3zy5!F8vljs zKNxg0LSj;(Ed!QA*l8u@{x?Rap)QBs(S6{K`7?mD%a8uFu1Q5C3zF|bexQCWywUlaL0G96t(fgna6+1V&$v7mwn5cD)im4#)kJ{;JL zvZevToDk9rpkc@ALUDjtjl4VC?m1rTGivik(%=jixgxP8X17$+N^q==@4e}NI6=(L zkjQHGWpB}-NII2Q9dLS?lP+E1L{3#YJD6==i1+aa9UCn0`{>XH%r!~uuM!@ zPNC8_>rTY*;EMOcry#JfH>)}26L!Jr4BY`LKM?Hb)@Hmi~SH#u}`Ye*gqc; z>B`HK0J-d!R5|yibMA6b*vyD{`-Knjt6WL^L99Sg#|LoFB{3;u5j$qsR3%!g@n)k6 zD3??}5iOdtSu32kXuhD1Rq@bYI*^>I5=A1U&J(D2R#ZjIcj&U3`4u?w;a=fwc}J%x z(xt^Y&5``b93H&8Fsv-B>ywu1i;-+8_(b0@e6|q^nSAAf_5MwCUq&o%SCOPX!s@k8 zbYql=c>tX+l0gwVX##LPY|-NJGN`Xh`%rSwQWpoFGRmx%8XunbLP@)Hc#YdSXL-8* zrT!Ei)zVA9J2tBs*6Bz|z9QCjK21MJxz30iy^)31RwX7V0V#0iLNmAPGW*l64tg(hRcEqnWc%qS8^0V z^eo0D@U_fv{m(PkZTj`Ww#c%H16)90INp;*F>v{It`vaVDe>^Ez z0LR%x$3(IKlT!|GGD#q@6|p2w&IduokAOnkBnvd^%;sZXZK(&AG>Yri@%aV;oGJb2 z32tONpV1`q>vRCmm4lKQkIO#mba$FXaiH|y$|4^ke?bMnhOwi2%+artHfVBkP>5W; zdr|xNf|KF7iB76b$2Z1O`B97dP&Mgc8yb%Mt+Q|3aPV7AO7s zojSWRrAUmjtl|LAKd_ic8A25rE8RmwaX@RR^$fHMK$dT>_0BE)y5Zv<2vDUf47q1!gkBt;r;^{@6JO{p#nBSTx)tQZ%JbJ1W!VMj?8N7Gj`V zFZ|SecO@lI;Ou{7Y#vG`8X5^W9&K*NO%mu$lB?Z- zgZI;|gtw)pn(~jfw88M5N#AZZcHJvPZU2ZpK@+%R#scySao<-~KbAdaX zDe0_p=ZtrLokzkO%gN6byTsO_k;!_qB#%ALnGZS4NMoJr$YhiiTXQxqC(Gld@low1Ym-CgMb4c|VQ0@%+?%DraE7d5!|(?irRy!-S>LqfSBLyag zsu7nLL*M{ZAV%#hoOLysfMz1+$5_zBc8kx$wfnn+duU9;@0xL3hvLz-Mv>wDuAuP$ zUM$;4elz8C>UlRDcz?{-tl_5cl%=WWvcDpC8!5ARyHww_AJhA>yYS$xhN)EqL(jra zAg@`4ZjY4*Gkd?!$nhe2mIKecRzCgHEH{PXSM59qgnCg*_XLKE&@%eqE37?7lA-=o&OI19 zSV`m(uj^A6CMR&K1Y~o?Rm0Hg3eaCN<b>OcIpyJAjh# z6$2;@$BdJH>}ADs)_}b`21-0}9i7y48+ds5V}OPCehbK5PT;ExI8BT zCJtAYFE4_aYY~2<{5<}o{M0E5pd!srK=Y(*(#oq}F|g-*C~a~#x0j3Y2(Wt90?9QX zP7_8;(%x&rNy3R-67`*c-n<-8QK`;WS*WUmL{2Dq*PLg&=z}0xV?Cb*+)TlVXG9Sj zc}(L0HLiWX&YlQ_w zu-vI8u`6Ur8rjl$sZJq7_+}`Tu@g%@?Q$tY2pxTC*KXtd{wsYfi)qh_$D_O zs4VVwrLCZ~Fdt`A@v?Nslly4#~v56HL8~PJ3H;>LFv@Vg2n|-r}yN*=0l!* zqRA?MXIW#yod@UlE*WpJ2(EpfPyf0@^j3Fe-gLEjRM15d9l#Xq3lRqvZR2afKwJGL0(pEmosR{=oWq zddi{nlMQQu@zQq%FT%S(GpPC2u6d{a`(sQ)#CHOe`c-Vjz_3Y|!|qYYI1w@f_kqgC z(O2bGtYCmr>~>wpK{rN_yZG2~!b!`B>ebhQ#dwUduCt3TA@m=CTvNBp-BVzZ-!`Jl z|4rKDZ5#yW3HhdHH0&c|(toV{Fc{siKCa5tXK{vRb?Zg1u!nFi|6&&M)~xwpIUU*@ zk^bR`3+NV6t>0U4Q^C{mfG9`JPskPHM@pIIBkL zzMU|cI+DQr5AH($YK;mNB($nW$5UknRic+N9P=-r@oveF$XQj=yzkt!t3jm=yFUCm zkWPnCDbL?KbBF`CHM0`MBR*Sl z@(*KC0Zba8G$f&VNua3-&$qktna!>!o_ET|=uFP^9{vT*L~;@U^_I392yBVM?ox*_ z7m>G36S8Oo0#*$c;vvqlplkFYr0XQYEnB1=eo1ahihmoD3}XeENj<9By6-vahevqR zICI3wc$HD?8y?lq-?x5vI{@q;$r>A(y411{5lk~?`|fVSSmp;l;;&ji-wIMK(IHX{ zIxs^KBqx+^Zev#Q)ArMvzeHjq4FVhBT3R_Xkg!4K0T z0)m~%k_al&G+D*A*9FqtsfPHgUsaI;oZPn~WyM%FbD2B7j9#5?t%xhaS`$UMDGS?* z;lmPpeU*buxPj>zOSO)`d*RpF(ZJT-iXr_Yy!?b%(U^C+H>+>7SSYpkro)LO>;p(C zQjI8jfpSa&TCN)3pQz3#_KmN7+?cEfles2%??C)7(~k^oaB-~%(32(Yw+eSYZ=Xxv zLqU>-(!lXY@iDIxw1TNBSX2_@9&s%n-q`Xuk>n}MTD8{aJvs9UuSi#zdTs)M@H z$mMg(el>FyCJwPN9P4}x5}H^H@O#BTh`814!2T2kHa9T~KVgGW>mu7^E>CMkk z_fnmI<-Fhgk+}v)mhqi45GssjTVc_g2&;cAZFDEyFx?n?UVqLr0Yyw^^EuY^I0$TD zT0q0y`zo%NEyal_t9||MeahwU^qa%BlZ_f)G=hod;^mUFIay2jMsYuPUDU&X_QnWU zr}qJW?ZSS4Ele7zNTKpvl7Ak^sv9pIm9XX;1jFI~>(DJJ)acBr7 zm}K-l^8pW0&*4(LlOJ?$y;nBBdr?;n+!Ck%SROYa{bLq<{km2^1Z0Tm+0IOj4Y8^r z(8Qu=r!YuX@Y2het!_VjX(vblH;&e}Y&!^z`BJRK|9|N@N-K>N1cb-J@=tQB9~Tvj zJfHL;d|Obdeb$=A{aoa}74DH%wqy(;9d0WDJC@#~u07lC#X|Lp%AO}K`2GAXLM z4{SH2o_1#VbAH7lU;{2Kz?re1+W&S!8?Pd_YDaV?y}E+j2lw>$H$j5fsTRY2W5Sc% ziekUhzRDm!qj?Klgb%T+ww(0rYWg#X1jXxK0X?LgPT_(Q%30CR);*&Y{QCbYGW@+O zjzov$A}8rWMCGG+PL@W8p(A&c@!IP;9h7*@Qn1C_708L^zqza$yAeA%sCYJY6lzcNcdz9af2k-2<<%|9mtRPxKrmXFNhO;vp=G+HHLrP4znRAX^ z@AfLoX$5Ffs8!ljbOa5dFx(7P&+Ty^g93a z(OaT(4B)vVz_Jy6@b%%gKz|=Fpg0X{=k_R$j3eGhqS`#BWTCUu*v$!NbjxA(&Y8E= zk#g6*CMr-TIJbA&9{VBWRGM}5^J6Dc$etU^7HWO5-+51^NvBN-!UowQ3ck@@&oiq_ z{gRt$lktcTdk|RXlg=>aA72cPV#RRj`>!cO?@A&6k{kQz!8MK}`;B8s=FK=gFJB;i z?YlMf@_QEJ>jErvHVnk}d1Ck6>LDADc|2PA0U;$HUof{scjX zU)X#}=b*!Z+6wt?wHdi!Nu~3N4W5(P`jKK)+C0uyAomxGe`u=x6Xa%1=zl<)T5cHv zZ8}$sIiXu4+)?i10dZ$mzw;4fXMo1`c&dl=5Vc*2cPq{LanI2)hGfdZs1R zR^IU!Z)Q^T;s1%V0H*}fYVvzRGOp$C&tWbDoqW1tO7-}X#{KG8lJQp@EcMAFB2!kd z>@X*iLXglb^B>+6MrgOQV&0;R{9Nscf)|#H50FP7Gp|5P*wh^6CVe1r79~NqlMY5O zL)tPyteZ604-gWV3YLOzqgc5OZTHLK0-lbhnYJQ{P+J_(+ z&=|B_8f)M=$%G+e#6HEJl;8t&S;NXh-3gx8c>pzRIN@1n;~xAMWCywq8L zVIOQFu_DPaKU5EyQNg|N12-DKpaWqs@U>)9lW^>e7es8P0d@{8F5Kd0V;#M9D%pAc z7)&w}{Ob0hW{NV=AuZ!*Hsps>d@!?3T6EXO=M?nYf1j>9U@Ret5H%=wQ~Y5PwKK3$ zBuP4wh4qv(U_@u$YT-xT)?Um@(>YQxEL6Ab&s8$GiiRINT9f0Yla%IaAVFe4MO|+7 zcI~eu+BLa93uKXVRMx+26|H64PUzvtTtJ3t-Ps7q& zp{Q}f=jO-LqXW2h#BfZQ2JEKkDL^t@VsU-Bi2&JgaV1 z)Nr)Y)dx`AxgT~w;NU!VO$os#`{$049txmj>|CzMgoV!4-u-|phgo=8o~|K2!m5#< zZgt`$DTQ@6Hy;R{wT%5oQzF8|jb`gYN^Uu*RWE2GuS@8oeZM$dI8N55Bqy9lh0Ufs zN~+*g`r*-UvBr3*zZ@#qqRlSOnY1^M%%v#Hxdcat=wD3(c?zJ6B0-+vJ0x@K=iR>? zib8Qv+dFqk2hwkw!C?5xTf2r>&IwrmLff;Q$p{v5Usp0#cPNGD%fcDYWQ!c;B%FAE zwm+}w478&~T#v6$J4MU#uz%z5OdDn?=tF7Z^`z0RBA)SS*a|L!0M49(Z-8t$)sH`S zE?pY^`i6`M9^x#-!6|}^q==^@yaTvB$&Qa$PS0xAIaqc6$Lp1G#0@tCy;~nZ51g)m zGM%mhGe^+uh;`3o1s`ysdz$qZ?O<*hxoc)8XJZ``puC70fdNUz(R31M;x_9Ks}U#I zA>^{FBkGgE+tS$H&_ISLky>xYh)z0y+kliE8(+IgFuzf;OXzokaBFIjB`2t`8}1pn zWd7HbFchLu|1dEK);*Uet^DznM)zfrLXVq*y|!$36sjmE{2mn+Eve%F%x;aGl+U9yrm1d(^4jY4ZxxH|=|)!ofcCF6G8Y8GDxnW+JEs7M_>^flmJq%1@L6;%GUX?juYm)7yBy)^}a4 zUxz6I(;)`_w_9MHLF$)zp@Dk-F7&>Brx+9QaYld#NYpf6@&bMYCwp-5JWm`ta#}v1 zlNCPighPSrR&(!Mx`DmELC~Je;cuRFJV2P^0P_0A>Zq_Vyh1+9P{++-p%VAzTPiAn z8FS#(YYFWG=co9%9W*qrzoCiP$5xmSOB=VBzEx!mrT z<~^J=G!r_W?u&NvraoC*4`R+q=0V|=POh85YjtMxUm0#oWi|VZJt)knQ(-JaS6GEi zw6{k8?blnT#G+x&pgIU*XGWO0rGrTA&YHAHuvyvC9)g;6Te;Zy&gKMuKz^sC{YTghiZy!V>wo& zsajfGrXI|OGOAenlBE@oKwnK4?bQk$dSilr7_LVn`vQ1)z0{uz>@%IHz_Yisz&M{l ztr$%?pSlV~ek~o&`Pept$fI`-Ftiyly1BAMw^}<>WtoFxW$!$k_=nZH?0vCOb7~By%r$7h#4e5pSI$%to6bUkr>FCXd{@R8r{sHPDRgv@fnVawL!M`dV^(Uz9{I3&JF|F z4aK+N2s4YEoVdbPjc-2n^1(SUfu&|V$*cAtkzHALU)^@?jK3F_oBi+F1hBfehTZtKMW)`sE1ve{y|0Rb*1Dvpzb}K)uUe!8brkS&{<$jtwn+L*K?%HV zw%6wFl%;Dg>9DL39E#ZE^^e{vlqnRSMc@7#>-lRIoVX}S-XphiUum*GAR$EA_xP)= z(`7IIb^RV7`M=gfn1Dw`Cf)htsP}NTB&$x7+PTQS5RLT{) z*v(ZH)1{M&hmIHpmgyAjbCe|PxRh%HX?810YSp}t;Vo zzZQUrtpPeH21G_lfrV&A5=0k8l!FMWJk6S7LXX2%yDj}!&|$TJexs}dF)4;E?_uSRryIdy-?sz-W=;kmDE_2j*5eVUeRUeo5(82M^YM+JfpQ3mjrqnT7bT}aBEA{?E-H? z!Dae`3AzaeZAMt3gJx(g2j)prf_#!sRTh)mo%d%Y-V(qG?&tJEB-=NfL1bP+%}RaC zqz#6V)C$)1Zn;jtepP%6JnA!NWxl%@i#Kj36gW2Yq2zyFZ=WpKV_&Q1ziPE&2U2!M) zy8A;~PB4?1RvM}WdW=Oa4seRXTCF2EJYBQXc^d(-P+U@A;H!t02O!A(+sLN9Y_)o9 zo#jlWM78Dg^Vw>*8#LJ{XZ7{Z>%$c)yiq4{RYHd8r1m`zlvE`CkY>r#{}u!&=Gu~h zzU3kPX}ES`@I2b~R zwlyDEt<V?l{dhtw>Gpfo# zju|B&UFs%!?|`9W6?iqrlW^VK+xx@MH^f90^yR58ZL>C`~IeQXzLIRX*j~M9jU!bkDUI3rDOhSxUF8&~yGoe9vJ?q2S&i-z2o+n&Dt4`zdcF z)4n$VeIYSHM&m=awsnb|k^>escGpc6Ernty7IIg?fzFkm(&01Ary>9 zM7cDCB&IW}!(ITpZ7;ZQ^KYS&;nS^AG3ekWH{j5#$}v@&nTFMNH6brhE@eGu3wqKw(wQ%4;n<796>w;#B={c_eLS)qUMl=jRVRg6|twjVE z73LP$>O=}$#EL1qZ#lg0Ji>MXfi-Bh#L10k=#gFatXEP%$`57s#h;J-?=O6gMWLCC z5)XrJ_rBdz*byA%BhEJow`dm-NL^zm-fRyFgyeJz0;tf_W=igjZ( zzuU2)6-AEyTCc`6o~OU3?HK&*G=Q^?EN5*Dfxfp&?*_orvA|$!&Vope)J>Wm=toh5 z9-ib3l$cs{B=;cc$`C|}*n`R6@mVdCKuZA>h#p`1M5I9eAtz$J{x&?s`0Y=i!Q2`z zh=Z&&1HRol z>ZlGlKn(ezpmQo#4A%0};N<(B-q03ukn`d_tFd=-_4>?n=QLz}b>y;*(K>`6DhjsG#ihyPHE?`_$aL-SFKP%Or)gf5yY_E+v#|a(?V}<8>W8pkPqmGnWgEFzkn!>6#^SJVORV_UKr8q8|6%Mc!>a7swp~FQY3Wo-KuTcJ zB_bjqAR(R7-5@0`jdVyTDc#)&NOw&dq?<|S8q?>#pY?vkuddIJ?vjJ^D!PPS#sode!ZBoLUa&9$z2>`d_6D8~+ zZ;yo40jlYWZW!E4Z0vjs=#fqiXbMw-HO=mMH6(dUv+a0|KXVeYL&m_UDN%|9X3p#by&$p);Uek1r z>{!fSPWS8OykCpxMscJI>hCQo7Etucr)X^s8U)xhW#oB{VHeAbD9lZEN)hMYS3u0; zG|O9Ox(W{nYV--;r+Fnjo^m-~o86TzTb6$uNqnnzFK_1_5jOj9DqTlws)Q?MaqX}b07tt|R)u2Hw~(5pCGXoZ&%fo3iX`Jc3{Z9Tcv2!XkD;Q!EB@#tx!$kk@; z4X{GAYQO0X%#OSNE7|lZCVbrhmuxcW7n`_cn^7pWqe^+j)`78@;oHQYs|0bUg~KLU z_@8zl(F5PhHws~3b<-9*(_4lx`Q*QY=Yg+``n?hYrgilqwhG?0>MHOgELEXVj{Bbi zPPVx!s<+FD=4G)kc(!3Z*p6F7;rwm^s}T{yn!t-VMf5-?Z@46Sh#?kNJ(s1;Mb?V0 zbFIxIkN06Ar;o76w!%~*zH9dyFW&m)=SF~~Xv(6Wt!yih(=aqR$!*+mdBW=J58SGx zbFMQXPKDKbRP?4_e9*Vw+ptc@j2>T8rkg$Ag!RXsyPwX=SE1wcw&=hzkV?E7R+1L) z=2Q^B*9w^%DxRBc4u6l}rvFuQ>mM-)a{t%@~DEOfMAn^WpoVyJV4- zeE;h*kP}6lTHG0@l9HXaCg|J#8L1P3MH`)4*&s{-s*}3Myqk}o z`i2cDrwm*}HgCR{h`U{}=0eI(G-d#dQONVK1^P5WWx}cCU;YjRg8Ing^(pfI)-% z*?4m2Fh^j~81I6s#5gqpx@K2f)b)Nt$vbL6=fdo&Z>67Emq%sTC&&cfW)$}qitJm zjzg={iy`EdIi!`Xaw4fu+Pt?zB`uWn<=WfWoTec^!Gkd*g;*x0xfHsa+N?!)EN8)O zpHAz6=aiV%l&xs1IBgZ^32|ITq?S9vuQ>&CTnTM8gQUV+_N@I|=pa(ryoN zLt=*q;qIm`?(;!j2cnHnKJ#L6OxbdfBN6=V;fT3U@P!TS>&Z~tyk8nXrGG_8v2Ny) zs5BnzgeG@h`fc&(`@CbCi8$zcrMsp)L}f?;b@L=B)r-*05B%K2XU59+y6ez~OO?sB zGzth&C04QgGb04vj_17lrur%BF1uq5bUuc6NcUD2I>-VU=&yonEDz@cdBfZ76CL`= zn{&q*iqb?AD?h;p*ARpvJE4>j>c%5~UX_fb$OFCcAg@(^{V7-ZAQ`ox>@2@>dK6OX z5R>a>ECFwEHxyP>$c1p=^*(@e#*G&bQ{m}5+pa<}`cSO(*+bP-J0N}P?W`m}**-tl z8$SB(O|lA~-#6q#cu&c7F06m0kPVM_r?~yI6iw?g&ePo+f8PAv6Zf0{s{`T}r%8$x znI-#kPp)lhmL^Z3l!cd;k5Z@oaDM+@?^T)cWwq72BG?E!VXn`^%HchL19c_s8%tu@ z^L{-hR23~{9e8Y{@dSlcD>DgU&yZd$avntEXedd}_iKJTa> zC+D>eVY>;I*g5sctXC++~8rmE807{G?Z&^zZ(h=aq;gcli!Pp4)!+zZi| zeFGbvu6U8VB`xWvHA6b(sl3j#qS2AqPXd=IBv8?{o60haSF31Q4Q@Kee*R!Fl_^JW zS~WUPW$MVXT$FwKA(VDA{|(J_j2l( zrZTmaz6)YVniqH1O==%DGxvLv(_g99vwh=}i0`${U3zA}e)-_cHFO1B$80}#%o4n< z-T2~w`o8Xd&M3C$@jN^IGZ#kwc2{H4feUccnEV=8mVCtYB%7ACUo3wWbH|OS^5Ey$ z*tj=blFKjF!nIcFJW#=yhr+*LUfPoF>yB(ecnTl9qc`n%)n@4SevH}2OlxxvIxysN zrhi<)hqqnWx{bc0~ zMY-D|N@`2S&}GJ27z+O+3dO>1TRpsgQ^>?&!!o`22S}Y1*i=nCKJ5JA%PITauM(_Ro`!vD=gJNtK% zzipCf4`%s9ZZB`VZv{+@R0g_wIJYG(cwdVMC*BDT^g{tZaJ5nvs?o*`Kb6GJMmW{O{^01GJ{6t5_%< zTaWtcyueXQa`WdSvzDx2ParV()RZ7Z0uh<^mZf`=rUbO|tsO@-Y4WS-;Ezt4V z10GjkG(#L~_IMa2ASdZo4sqIDm7G*Sbo*J)ayUi}ku$i^7kR}gix6xLlZfsVRya4Vf_M?e6%)w{vGz(+!Ge9^g-^vjL&w1zK8k17TEl0)_MCe;4yQ18j?If< zQHo}46EE7W&wHZZ>KuBRa;FVmwVV>2Tnqn|#ckehkd$I%9SdeXzh$$HjMV?|2h8I1%E|o4(Rrj32+2)+#ZA5YR^)eUzId9w=vTC^u-HuoE(C;DXQ*e zc>35?D&*5ZZ+sZg!QemoTISOsQ-9;19~~NA>PeBU%ilQ=5D=Is{0VLOGKSe|N4{ns z>Y51;z17cCx58gUx6WPg{|YXLN-1h~xkg-;NWE&_UE{G$o`nP8;0u_PAERn^w=FH6 z&$fTVh>aIe_bBo6CDGxj`f(A5Kftx{Ws2Oi+LHeQ}kn`OwH(+A>e!PBN9U*(DEAY2a?$bvT-xoa} zR=TBpuj)ly+ui+d^Uq(72H@Z%bKkpPef(1)*}lUhQu*74I+oGu%tg9Y#q*5%9gjJS z`=4za8d{RYtle+3^XuV*hwq$LcPch=y}O@0c!KZ0w!I`_Fwr=OLx-S4p&x{|`2FmHH9fROZxJ)DF zB6u@`w&ybK&Sr(WENrQ^5=m|u*s4=uH*DaqZ8q&0xUNq!c-R_<$i1a6PX?L85!j^B zZo;cf^w6<-=`aH77jfH%?ircDfl$bQDfBA(x)K{{QJ zDuY)3oe~RWn5u&T|C_eqxFd%1Vz}RMUmvM>AY2bEPO;yh<%k<-fF&`E#%gbgB%WbX z8Dz&M##TG}DQ&HNnrjBN#N@I@evxzIkS zOu$;<-Ag)}-TB;P>cPkq^Zv}V566A2SN1DmmrD(v2QvYy02TC5zm_9i=I0sXe|K{s zzj&_xqe=X4mjkBlXM7$lWbkrROSWN4>-L7~k$}iev44{{U#467+jPI`pnAW5Hg9X} zpWsTw(tgOtSD7QjG^QT$lko7jW$~%3_UCm~n#HX6HrAhc# z(%J6O;VSD>T8eICIwYG-F38d$Cqw<*nr~o-2V3@NkYm^X*uqoX^3T=aTejUf*Bicx zvhVvDs~rx#Hz-{`hd=8x_P*c!d#~Wd6m5~{Z9hOfzxeOXqVz9I@=)kMEXfKlmIS#= zQ(&jcK;M9+P7Q-LO-1R&%q!kok02pi+~=s$9;zXsknM5UeOiiLo;(rEqcbOaBokRv^zAgAm} zW6kEQ*YZj;NAq)|VBC@#%Zv}=!@;*>2)&N*# z)T+b{wqB3XF`z>Yp(hYd>92e2%7SdOsrPW+`bB@EXS5~Nu2tNhp)&`jup^_@e~b4I zqc;q1ap1L8@YUC!7a6M(-qqKyEdKQZ=(k~SP<55Ql?9Crmtm(p5NdLszEzTLp?;;k zWTMp%d>a3PXkPy(>=Hg+WbU{45A2fqzhD<1+5ZK*jKV{+4pkpdQHv(zl3@PGm`49n zrboQ{HtfrES+4rq`Zr9uy=p6 z&UwAQKkvS{57(D8+^oagY+Q1OT#QZ5)A-$uzZ;7;*{I7-m7y;oQ)mERQ!FlDvFRVq z0jL~G9L~FHZ8_n?52{7qmRCZ}=_G1Rt77MGc5@OSY2-vM*cBYkhKkcF)ew@^71a)$ zQy;$`OqSi!we~D&DcjP;M}o`4dQeb4^s18TQiM_Pzql!&qv;MzP<6LITx#`K7(u7jr(Xns?Nb560tQQ=0>o?d)60yo8$El5s}1XmF9CG^vz`8?ZEATwZba9p zthd$ns<_xhxDkc~N_;GQk?|JYj6`&WQ7mM+RK-W6LL#?;ff#svS);US=;E?JY!i174f;~0^sOyCWDooCT4J*NXNXD&l$jV!D zzNYzhqi>8iweRUbosC)` z@|&)dC;Jx*%-er3pVkDi(8_7vAh#_Y_a{+)E~ebx9cN4nd-mgQa{AN4Q@og2EQC|T z3Q?>mHQ~0ODy%Teqbf=k2OsJsG98%dMYp6ycYah&cJIq5LRF2d95(bX< zA(d{KRsNG}VAK^x8Uxze7M3qj+E}=MJ}I>4nPvm(^x_TL5lnw-b?nxZ69!%{D#M|O5s$Q-ejOi$L!d(G61X| zbjuGBit+(i!!>t^iFhGI(LY#NHK{@GeTK^4`#GLyMa@CLEp{g*$l@(B#mIT_R-9?G z+MyZ<9g%AUb(U@+>j!e2P}zu2>X!E;hU2cgo@- z+mQ{0y^lXrfi<7*0c}|GR&Th^z}V(Mp&dfs_%=|G>L3f-RUfiG35L+vG!3$I+6TQ*kJu@POqhCJ+VcwI875m zg?J~}%o%1e_KVV{C7&;S_1tWb+Ade#3Zw7ha6Tvcra5^Y|88Nnb2&!W^3hne^YJgw z@U}b6nppCpjXW5TK(MvYo}2aRGScuc_DAQX(>{Rg3BVV8)uO1-FWWURK6r1_7 zOD{7Vf&mP(@veU23M+iKk-juPpZO)ORnfm821kLIs2@`WY$Wf!;FD z%lxG?p>*G=+f~N+WJ}V|gD&#}9X4&`m8Xr{Po+XmF(Q9U4Im}jQm9-nd@Fds*RLdJ z;D1z+25*1rH|vp|=VGGLcjmc0CiuW>i+N(kQ}(y_r@dFpTy;Qd|d< zus z1j`pACPC!Me7w1C-la=iVgM_JJ%q-MU(R`tG%E7O{v_{y?boYgh&|HzIcflqOTAqK z_)D`Qi7v7A899Y>E~-}R4-L( zmG{dSu_!Xo$Xw@pE?%8bC-3!*F{XN%>2>*ep&NgJyVE94hF7ONde?!bYhU`tInnzKrOrhbiU->{`DBm4!!)bcehgHP2SCNHJG zalSa==6W*Z)9y%a+DO=(BpOc%J{DX3q}*QnnLZ~Ydf$&n?{zY6_g{_xX`kkRIFIL!cyG?BkkySPnaVjSQP)z zB+iXTq#{=(Jg7>X9H_qGYpwWOrORmzc3Kv0$}AMd8m*79)5QvMG^;}1X=7h`gFJwo zdzD0XU}lHiZMxlW&Vc|S^}jWmuBPTPmK~TV%^Wb9K>89+uQE)VUuE4-rov2~<5Mb+ zLNVI<2*0ZeV=$am_x5eh`(tNxiNy~8M`=DBMgeui4w{<$mY>7Ji#SbytoJIoceIli zR*0xO&c3xkqdu!p*q4rbo@1R(XqD_2Ur& z$ba_Hmif_R86RA)+WF2}6xVf4&jxbbgVqsmwSM15dsM`m2Z;O@HI(E*?OyDV`>X;H zA2@cykYZ_o;RW=i9~<_n3%uyn3{=p5q5m#;&w=@$V|0@P=|X2%zdnTUKSM@ST13JL zJEFa(qdc$6^1d77L-NhSKQ??}KJ4ODFLel4j+&tHA!E#_jzA{w&?k6RWyNOR^=jPs zM;Dwkda z2l9NN^sVQ<&^_|W|F~sjTp=+-X-d4D)Smu-(0Ts_-@q@FgC1A~Cm_dMCb$$NvYT@_+wGA2M3-$HJY^3MBr8ef~e~HWVnq zzxv_-&xgZQ&L5KVwuvn}N1<0_tF05SXVrdoeE-RrW{e@Bi!~&RxUX0_%IJfowBTur zkH@*3L;avA-d2NGS^r%ey4>jWv-iVv7B*^8@302Uye~wenAodzbhuMB({UED{uD9! zG@d)t$gpchiFjg;IuL#hbTg{8+q-PyQo^d%6e!vXUbro$QKM(WP6`s6?gPl-$BM8EUN2f}*5B`$3#<2kC@G7H)Ld?tdqaL3gz~0)AAhG~ z#wnY3thF}B_!Hlk{O4<8INr zk&kf8i*AgTCs{M*1x0`0o+ChkEeLrRFTi2dO>YZN^o1wU-d>%?0E=H*CyC~Z6->Bb z9iGuCn;MT^PVgJ*J!8>I(TjHhfV96p0Q?RHI$wI}e~6-2KJgJ+w}{w*>}HVleDd-r zw$-XxT#^xFABbG#k~_#+OJcC$WxH<69^o8%A~6l@useEz8_`O6D@+BcxBzs}nZ4B!`aRP^fj3G$xNxb#8w zV7``+JayB?i)iaN%^Ry!k3QCXKWYam@OtZ4F+y%FEEG09Zrk3HgCai^2PtM~FrC?o zx*0TyKXxt*XzWjE4QD|QSk2sCgD(sYY1#wZUN8`Dd@UlkN9=im^#jAGrH@%l)lQn;*3MbazH+Qp-UOcDx*uW>$^||F+(mn1hWa;?-xE zlhk(6SpiEr%U-va*K_{8#$QM3Zn0Tw>ijjw-*Dz)j9D9&|x*2 z{*<^{{}huCQ#QT-(Z{)mte5Oi$&Z;u7#bz<6rzbwUMvU4^RYg8+IRZgpMvOp42L6( z*azT=8t{-_p!|Bhk7Z+O8U=Kx(|9sg|*nf6R(}#%PN@gE0R{)aiH~6yNGkDMk_f#OE3-{u}(|=`ugY2R0*L)Eu zMc|hGdLI#izd215l)>Tae6i?os^taurX1o78r>v~O%ciTqR3_R`fl@$P!z4RO&NcA zw@<1vTBm{8;6^$;duf zr%GN^&vg6EvE6sm<;pKJCSjqIep9D%OJG_an|^<@ftaELuh<=IcEKQr6+Dgxb;8aK ziI$r+c4X*^Ep7;JzW81G-AV2X%jwc`qn49VnPcFyh)ER>%ytS3K~+``d=m1lZi&WT zLpX^tyCNtph_WFwA7k)mb$+8V@J^~3VySz%nGl-kpp@F3fg~~#xpN?u?SoUsAlW4j zTp`DQO`B$he*{MO!@@|T^F!5McHP{25}s6UfAC_kWXIsSxo`uV3dH#qZ*PPH5NX{> zNO0B0CIt1D#H@TMlb%mt_N&)++r3QO9?+{DXQwYt-a}A zmkCPT45-bg8kO53D0}Dh{IK3e>lNzt7Xl6q5!(*?R7x9uZ`_)1aFLGX zUNhPgeVk_OvC{0Hglih#ng)UTT%vfQSUozy?1CrRBwUV3h7l%)n46owF!lyr0mb&- zCQ;7&=XD>qHq6YR2~Hj>JD4X2pt(Qr4Wifjfa|pkGu7%>W1aFI&kghxku6S(mfX~Y zPTP3XhiaZFlnDkIdP`5iRJw2^ytOfF?jq`lz=*l5$#-rKRS-dciK?dNWc=S|d> z!ebF!DQtUr?%ORbD-^^9qy~@@Yn(i$#llT^8cPuxuY@RZ~g(pqQZtdzyoXQ?*mWy85`y>dS9uoG*pke?LIxw2+ z3878*sxg~i1&@IVj5D}&+-?TT+^z?wAi|MFxWnXy|91~Zhg9D6#4{-$6?PQU(qfsM`ZICQNKjbN*X3AOsq`G((mt$5o&LUkqa z>BUt+{Bg+B!3IA2$oR&bCRKiGtxs1@LWudo5o>W`jO&ns#%3fWW+CpiZ@>sQhvF8` zv{Oo2oY>5Q z1|N(+9XFOU=0pq-D-HSdv!922g^_H`NX$#vC5obiz9?4@STzaf9ck4*ew7RvrAcLb zkHpN)o-!B|dbh;H)crzP+}`s3r&zruSqhO9;YH`93a=llbcyq!;cELBCHobRL`Eo* z0h$(eeiL0#S$@FV}pf z^3u||KFYA&PInveHTVmAeJ?~N?!0y{K)27d6znu9pSr^3)7^R?<0fgPW@8i;Ck;c5 zv8N($#~{B31ct6p{N!6qny5zyr}S0@i@!qlZiBehwV;<{O^aiVEf*2Qi;j9LTsqJD zDp$F796IAu);GE2Yi|?IJfHT}z8hoXwT2#;oUJMrk^(ja8$zcuS? z9a&3S_bPSEqBMbML*05@JXEji-tTSXu*=shj?GCm-|FooIcr@{62RB5c#_$HXqJym zUpBwW)jga1bpyjb$+>23@=)dptHryc0^Qr*es^YNww{+(Fx0cVoB0E;5BO=>o+7ti zzn=sp)*F1Qe-~GQScPoUuB<*B#>7jp0bV?p=7{*A9aqF`=HO2*RS7#YQh&5>U;YWO z^YMT=DL7~L*IwOT`2EING<-xPIDK$1KK!HU>N1ygd6>e5vY47|EV|oLrBKU}lNV)Z zgAq|J)i029*JtOIcJ+}SfdR^5?B9@`s=;Q~gO4QI%Jq#?<#AcuBGmxwP z5x7m#YY0guZA!jpD=o@FG!_>Xk0B$g8Fqyqws4Wdi`(GiId%jPouoSh+A4Bihr^^A zb(%hrV(HaTu@qHCyOV<8>;R`J6+z`~xH*pkrf`_T@+;l9kK`?%V`4qcno7Xu2jPp4 z3i7%H_n(a8IG=Lnl##=+0UPJLVudglT-VQ(6p1f89%!JJR(%QAUFljAN2R0#2SDDX zuLN-bQp#MdH9$vSyHjawUc6{`0@v`ZmglPk6t>h_-~jQJ%izcXzPXwmsF2&znH`W) zVP1JN56Ka}AF%PFy+8N9H*qx-2^DBSz}YX^BpDbLiH&jgSkY;{_*L8KgVFVpD#^eYfmBBe(UVb4=ga1BIBi_?TlA*QWHG7P27b)fSx$Es;D~Hcm z%%h}&$ET{AKL;k0o4==3c%qlbiG^iPn1O13-)m~WS!7hn0ehNJJ@}Bv%s`d0Xfg@o z^+O&Qo~FOoAmL`N6vG`zyHZBWTemr+-F8_iEk!!{4n~=-x{7Fsft^gRSK0rf&tIhsIvUqph(=pu@9W-w z){tz&6cS$7ZLTWj*Y4E3=de-1y-MIzaXQ}VTgrUJ@17BwrLX4b@gq$HR?OP^KX>Id zuq(5XPr0PkY>l1y*|c0QfD?Y7v&SRVNXx|SuI^O!(>|AX{kePcIq~ArO3I*1qnfi> zcdlHJVe&=@s1WMF>O9lsS>LI&vR}OplV98*=~Y?tIjqYJd10;6&)?OMEXi{0;+9iK zZONeCl{7%x)A(_9CDHibjk&Kgjd6MF%su(~cf5~bvezMaCAQTEE|G;i_C%VVkunxN;udWjDuUwG}j z)}B0y?)IQ8A}G;B8;||Er*cK)NFaNgl)vADnw%_ee{+AD(3!-lRmj1N$^O1jQRKQ} z<)SgU1x-&98`Axq5L+;zR2XaagDq%EYBo(PE9t%o3;bx29B8&Fo3`d64Lh z_@ug&OMSTA@UMvkoXlHSFsCB!6cgOFp1g`yd>p@l%pIJmQ3a|*-m{>J_!y~cY`&!j zhB5P#$hScg+O?d9U1~NC{yB%Bm^7-aEo;99qgyPn%e# z0`5%dJt$Cu;*O?=g4ZC3hwYM?!QxusUGkCHhU9eW{hp0CxhjEY2>X}bI-zy?6qixA z_O5gOEBHb0&(7{~K%4GdXExdovlehq%cAzUo9t ztA$NzEEAus8TP+n;DKYEu>2=UtdZ7i*w|!6G7NKj)8T%tt@GHd&#*}-a<}>QMSZK& z-`&f4hOhfWEogS8T>c=lClA9s@3SEn9Xfg+3ahd*krJMa4UY5e%|+cEmbPvvmp0z? zayV!X==>fw_|?tDe(-C-KBej($NP?_HJ_7BzNfUHi_wJl5Ro$)#K=-C>#0ieu&y0= z-#1)REH(?Jw0^r2SAf;D+zwdQ1`|spGC$iWTzc%wX4y~bG;L{p{HLcY_6_&*5(^KJ z1y#1lGkwFZJinQ6U<6m>A8LM;lsA2dFZyc9QJYgJpQw)igJ7aD7g6HevyD;Pwwyc; zcZ4xMYL7!7PGmoiqhKN}s+Te`irDw1Uya6pGL-B2kxV>i$0+wTO7shEex^4TU2U81 zW(cuudo80@+ZHJuhG1DtTI8oGBC^_PKnyVskS0f~0`aR4gWP)vpOMSoZfK^-rLQMC zdF018GO>N~XC%T|qG=rL(5F(ef{Zi~`~mJ~+zif9C4`BF2%~I;)5qo2IG0(Z>CRql zYX0anQ~I0r(e9ztAbP#r5UG1_OVEdegx;_ z^^@W>=^OafV@GJeh3?d0RoUUrvG0_U-E4HmYx5b*zmIVM>^J(bk}eOczGMEYu%YMY zcniWyG$f9M+#cKeF$_IIn=v+%+S)4-^CfbajM_4odUM5bt6G~|lRtSL--qnhTk$+#q zy54saC|o)Ks-z$5ufkY8raOWpyuX1U`L1^jMJ1YSL~@6n$V9Ojl3t)xOh(2iK*qV= zvKy>vtZmeQ^$CdVVP?lUrVwHDKs>p_|3 zbH$MLU$4Vc3@uw;Z(PU)8CJbsOwLC0u!0a6c2#`_^}`8A$gg!3+# zZlfq6tD&`Zad48~0KGZ@7<=^WQZmRGYDm;C3Em;WD++y(xy z>3^n^=d!L3(G3wU9z`=~#~-b{Xm^V~B9$APoKoLF2eY?t{LM1d7yWtK$ zK8(gyH^BbT{$bKq5uwiJ8XRMLjA2|JmnH6Pq&Aj6LQ1}_YJsgGeq*P$+6Ad4nIP&R zbjZb$D9Sr#hb)=VHn&!drhLU#6ughf0&IteU34=F)x$yhWBthNt`@I6kDElp8IV8m zV7_ow(=@4?o^7DE^cLAo_W!0JNMeK7FDea@K z0wT`BE5pEJ$$>vn%csL+@+`Z{_16uIiJc)OL}!93oscDlX4pK~@H>Jpy@d{PdSo{% zRHeZasIs_=N@1z9bn|>Qg`ejJdF>o9k4x_$X(={Rd_w~4Ms<-Mmulz@Piu~TxaBrc|JaJrxsKQ|U-Y(iAMH{R2!F%7#kI&{EpDxZYS<{3 zg?5C#R);sQ3Rv;m9gV?Hgs&=%wpEW-w^y&$>_lrXC$`SbNi!Tovekc4E-A1g% z8VlFbTx&Rc-I=^l#P9}Bf6Rwf?oQcAH*#*?^2^QM)I-vHHJSM7Kl_V_1n#Z!hy;6&=!;ypV!9r7ws(_mPuYgvdNr@szfTj zYqlI{5l)vXnqZaYdz^B2oX|qjDQp_Lim4B;3idjb_hET}%G7**hy`8U&rj=*B^axb@4d9Ty|t3$15Yo-0l|=O%4< z_Vq#!%nnc&KVALZ7EIF*Zjw%KJK<-3f>YzgndoS?Tk%DFOt;Y29Lq(!)SNI=t-qHD z-+7Jcn!t7m<%f6&wD8b-Eyoeb5%a*%>Z%)&16AnX9^uMlT@?(hk)jDkY1d@0-!F<| z#_7p&gnQxtYSX)JASb}N8dWwbTaJ)I^rF+7muS=rUyPG%A z&MLWfb?*b=hQp1>z$NYe$xk_bQtIYe<>-aGO3 znWq#^I(C$OYc7ANSlwjZi?XfPR>oRZ3E+3oqa<-#AgEN$=Dfl;?bQUPFPg0KjJgEG zr%L2oZJ=w1=vjt#JN{hOk_y-$KU&SJi_-)D6)a^5T7`xYpXQ7d4xVegl*wbUB&$6S zXl{zDzm){#M6qE;$_)~Tgt7Zv-45_NFCUC|GWjL#+hPM|iF|xd=K=RXlE9!C zA)V-1k=ZJm;r#b1-gJUmQR|-aS!+WKB-~6da2ib+MNQ&A-i96;~73a zRc^QgO&4FJBG|$RkHV82*Gi| zt0I748~5j_s$}Fuyu7bH+TvoL2?T=`%lb;GMXw=4owx4P*;eE$CP^D#7jmh~PXv2q z-9<0@r=E2K{%X$q+0fMGVER838p_0vr0gQAV`majU`Cg)z9}eQ+3k^6gVE*P3SVeQOTnH>F7xsrCnFkS7PhsG)0j%e-`6 z5}VDc??U3o;N6sSVCME~9Os2^o*(sg#Nu%Y$SPK}1*I03E-~R?Xb2MX+p1Bt-@0xh zNuPz7O-1z=iJrj1ctZn}O(;k3QJ$Pl=~nx61l2^3>TU2}@5DuYYmT2yg5=@BGOoxp~fyOtF8tmo!c=I)$ zPjP#f@plF_#EA^Hw|>NjAP9hOSpIX^Js9}mrKs|h%JKQvPuQBxZro+43@jf81*|=6 zTLSPzpQ<)btse+LLo!X5^P}}Q#--afnJhE&tj%Kz(hDF|ea4JBWsWKOm%6)8GD#!V zOgn|!>LF??;wTFWJbsTXyOVHh9(1`oaq~W+WN+SjP5|0^f+ALRX6Y;t?PSn`8PS0`B|Fc68k%6M zVou7HakPZ4ABH+acOB%y+DQI7b?8@+C1aIr>hmGE-aogOn(6)lAASN4%*$?GN? zndP+I?@5cf$clScDR?)-gaYX zUhs{c!9xab4z{DMZ$`n@vqMa5yEYa@@N9dLG zO*s?X>U|bfpI_kR^N934UR+<8uuQ-E!bM(h5HkmQ*Ph-%SwDC__pOb!lJTF<6JlXl55~P^uYB<4mEJnDfY-Q3Cg)OuL;+H~(s5E6_WUB4upaM_Z*g)7*ZdV}MXMJB@iiLNlL`BpT4>Qh;^p z{yG7wnEQE-@`(_m50nP?+^-s94!NH|bpAu*7*-Fk#n*cB_%C;WbJ*OpZ$y__6sVx5HFjBr9wO!i5ute5&+&O$9=P!s6y+L$(mjO0H0jb~XfCU72T_7hj(e(P(+Zp_W;dUX)jyWGGGICv=c<;o!tu8#c7&>B)@c&Ll(hVC2Ss5Eq& zTAApy_=-oiY!^(x^y@f=GM#tB_!Ea?7{SjaL_ZYC{}SZ$A6AbE{je??pCt1?ws@|1 z07W|Q{Td916*FF=Z8Esq1L!aX>bOG$2Ck^SIIDk` zRsQ?yank#!-P=XtGZg<@8c7XKL0Txl>c1ZNU*G%{d=C-e6f;e+{-?fE00*1`U1~e$ z|LNF&|GpiJY*@D~%l_rR+x`6UYbj8`DMWnuNb^|9t5Fe|p>qa>mo*Zx^2G?xDX=Q@6D7u~n=4@bm6uM<7d* zDM$@Zj5$gpm!hv|I^6!32mHlu{JL$T$CFWqn~$+K^tf>ur7{^QVz7WGktlBLcHfOc zPSdoZ-jKVRkGzq%TTKqmX%8w8rC9}rFbFa>oa|>j9JyGShr5Vy%=GO${#qo? zI5TF1qQYBq!z@cb0Vo>|f){YwlXJfuOJ0w(v0{&)l?(?e5KUm{r_*~mGvrRIW?Jf3 zPz5pWz~)(+0B*I6VD!gNry6ATPSvm}nF!Fx>;{c5m&bgrH4c2FT+2YX%dppU*J!)9 zpaIhrhG&7HEaF2LKJZB(!;_}-4(9i*TQW)acKPSFf$S?H`T8ea+30)vo~(HD=dh8r zi#Mb!?Pq+>fDXR~(bph46K^R{rpe>K3h4`#4g-0nc;*bN9y z+Ut2<@JN$CuhoWbLT#$6jO>_nVm1u>FeKy}_=faXR!s#q?nPNSZJ5 z%^GD@JjRryq}QCaN(8TUG`+S3pOzVESo)xO=vzXQT=-FCrC_lL)PvbpnDv5n2fk7_ z5NuPEyB&u;gKJG`x;-hbCEx(=)m)%C`w27#X)f4VS-W8p78p|nCPJrKChdUt_Jyg< ztN~oG8x#h&HO!D__%D9q3NH2+@6Oo_efPLtB^Tj@u`i>v?=1qUk93rpIoHMF-K`SN z0vQ?5edf=BBI0PV7C+3m7m|*O-{$8=caoJdmGH z0oAmMjvu~pV^M)N+FzpTS4nEFCab2qbG0xROVmbd&o;s*SO~)KcL3%39cDYR;C40- z$uX6x+^-FR83fC5?=}IeG7Ugxjjv(nTca7|6>b-~d1Jhh=nw^1gUvr-LzX?@ei$L# zori1B)mW{Y1U-EFGpT~?iqhd7%By~E=80c5Qq!&?e=(Z>SiZdCC_TbNip zEG`5+Osi3ygF~x2cYXOP)C#i#xr-3`1jv!S`yHu5LpGk(xw8oCwc>i2@>vL`&{TF? zzeZcfbmzEfFhl$~OyY0p+Cvi^Nfp8?OA+b0Zmm`W9$FA~#sKr}%(wo)|K4+Nzx*V8Lg}>(ve#5t>;Bx>Nngpm_tE?U59@kc0TluQi zC)1df?HrOC#&+u2M)0fuG{+Kf!F>me9}Ck;n%oX)24>tYoG3(h7CzeOg~0Rlh^T!h zEc)T(k*D~ERvPu&FyzDn>bjWD-9xlpsoA-D#-3{iU7yoVzLwr#?S5`TfWSU3eW8)= z`XZler__Tz*R%fQS~XuOY9Hw57mz!3>{CIy-^u$%4W%14+6Q8L#?p42&PjHJpO#qT z{ULCNpq?)YjJ!EG*9GDH!2{{Epm1=%YK7c+lTx>f6p~UxdH1JQc_s{|xF#|wkV$w~ z9BRHZUAm4uyP#ZSNxCD~R)IG9(N!6VaSSNofh9Nkc#e;xli~ALofh2|#6*R3!=KMJ zV7l+lh1b4jFx9v6fQoDGhaO5&2wISF1-!mG`=YDO(V8$TX=gs0q;E0x5K;&A-(YHXYHyn@$?TXLVa>LLy7%!;S& zbMtit7$K1J)#qSd9dA*=%Frk_cVHL}h~+Avfms$%qAZ01sO@xY$g6a3_YN(t=ykr{ zm&`L44^MIw`I|9#)`eqiy_}fmvTLSNRYJJ%18aBBPZRkW)ut;vV4kx8!R*aNbVj%v z1e2}5nfXJu{#2#e1K{xx(H`$LoF&C3ml`1b`h3oEAI}bC(+sP1M5{CqP0fF@#{~v( zhsh&9&D&9}Ke#eu>$;w|I+-gwNV{LoZ-P2Td2?PGH1c%$o+!e*h_MW0c>3qM%$ zY~sH?2>En$0mfun&ta=uN^9pnk&)d|hjNrTw`B-7eqD^Ke0O(5!Ly#?xT%M@C! zudVVaWI6XneA7vdM^m59ZLBCYU4HM8_B$`_IT1&|Eo$8kx5PI^G{#);Rf{^!@op9{ zi;B)DC98X3Y|5RX1XUwupxeJ-jThz}5-8%ia}``zhW z!P49uPo8>_AGX+ZAH0-ju0?`L9_KucPGfzSO{)oq|1e6@-^v*{q98qg#~_vu*K+To zvlg^=X0=9+Y8pi^jQYy$PR)`flaF&~?S$N6D*RDB+N2@3pP)^DBpcb_l4!v13V_63 zsO`dhRS6(A-~_H^{s$p^A#(^Ib>hraRn^>4aEgCU;%_AQx zHIaK@T`ap?OEKDih=h(0f1F%9l2&U?<=W*|=V#5L37N@bso(r){_Wz3M0IG=tZGL8 z)V7fu)^Umi*!8K33ow<4pC6Qf(7NY-229@a;q20l0*{B?d4c{FW=|F{!6Fe}OuPXI zQ~3D1-5$3`k3f+TXfEVz_M7s zX#G*r@G&W;Wy;Llt4lVxith?J=3fQKQGXfd?cR-9oU%6ny8q`_V2%z2IgiK;<`joITIj|6eGq=B|-H+HvC zs?G+xrNqvQ1<|T+tVgmg$MEYf=8A{cClRTS{F;GGn7Qu!WBhQI=njf!kd58Q;0~7; z^A~M8KJFm_6Lmt~AW|p8p#1#>*B-B0)RV61cDJAIk0U;53Z=Vs+Oc(s$J;-A^)DCY zDvA$cU$p*1=-S8jH=%3Q&R;^;2N=Ub4r7hnrJTII#_q!uN^%dp%tee?e~#}6;R*WJ z4W2ByblSarf%6NrlSp$-*j~QhGcW&I+b6l%upbYg>KyOx{dr+`>+9U zj`3LbDlK5Q}P2^OvM!Wq_54ZyUp@`(5apPh2|E1y0jgo(;fl)U7` zrhikMro9bl+CBgz#+eLJJ~8#l!|+I*Re`?on_g`Y9ASLMASF@+Gi>h>xMI-7i!8W(vE z1dQ!m?~^pv-M2vT4>k?z)w+f*@ruFvf4We3sZtG#dH7C#Q_Ey#Z#FF&jKE}F(=0A- zVi>eu{&+N4w*RDqXsw)|KA4|h6Q;F11g^i2BIjR56`#gx@fslgrRk2p-qo zNt*BCXWG-@>7Ci?;sd!`6>bFksq`AAItf(CgBKudAUn z#^|0_UId5m4SM_@T}XY}x*9`uYq}rDyg%l}bdP01emGd~~if6qES?Y#(=7x8PJucBsQ=|{nA*TRg{#58L^Qxo_jS|P1%7A?($@N!#TErXNladu9*NLs$|1BvXrMeb>*1* zT!KL4KZ}1Kq7jVW3t&7R@Fb1PXB9phb2(#ts{P59(VBegX9AVdJb7U^Th$J|@ipO> z=mY%B+>JnNDv?KC^bkkz?7c76Y_K+B@?AZrCKVc>_F%yt4I^dO{Kk!3zARtPOBA_9 z6#p_$B&}yPQcmgxu|sS71BsFfKc5Sn3d+kfAW?c&#Yz9vn`IV%9nuZ|;2}#kd(ugl z3>(b=4ST=O5^CVR=>jRUydNXhJjM1-EFJgcI9X&4XBTf3olkd+AaFL%upWIpl87OE zwo&4wGp-WxP9`Z&!#wR{+bBBwbhGKx8sN4?B!{D%aelRUXWmMgqXZpGGu2^&!-&7E z1CQZ5((|-9XnEl4%~jUH)9fKPy}sP_dc8gg=L%Y9mZq94u~4#jLZ!Bwb&e)6^@r@z zoi?b%F0K7v=QD6=bC$qdYGAul<=b{=a%QuZZ%+S+XZy7fjC&t&4O{%5G>G_143i4b zu>9+J)XpY3o{gfb+u4;ii@h)^6y$cLzi(f0>n zmc)(lRS98FxB8JTs#+@QvP*FWU(Wc!t2tB;!X&dhFr{D?+BZh+Y533E^FOLp?s;lh z^-V}_xM)HTKS&!E3P+H6SSsIZ7Wy8i`oi0ot%nkpzM=%)mhY(Ff%(5!akk~OBTYF@ zj0GThVu>?B;yE72WzcNN?ZLNc=l?bZjOyY|*ha7~r~1SyXAK?;g`y6Y2 zq-fJxvEY(zbV80SJ2{n>RyYFH*-;%$u@&2~59P`Rs~?Nrk}lh}Y1n*&Fmfa*Tr2IZ zW`2FDg7=>#N`XY29Q52+_-d1C?}BQha_!44Q8*(BLyhzlMlTlL%MHE4)>Lm>vnayH zdn(B_sZYxJm>TU@3H-;;@FiZ8I4*hV>+)Wo^Mef9+Kk1Q*!UIqK{A_Ds0mG8Oze+$ z5tY-_a3?VAxoNLqpLgzeRVzi^Nz~x9ld`yq^Hz#q6t=C?zE$foqNModaj0I5>?91? zm1F~STXvOwf%$|Lbvh8kAht=C7FcAW&bn$aQ;R*G6tVkJfZj?`03%rOX@aj&)K&NTUNF+O620h;51t!u#&uHZdUzj6`fsyt6+AAe zaV=N`@F-l=E}d{hH0hXG?M7seo2#>Gnb{L%aJe*=%Pjx1KI~OT@xcbp`oqmd@BrMQ z#S`|nBZ@}(zyQtIOY8Fe?)9rWn?h>}l`{E*DG?}^DDp#0uAia%L+-m8xre%4!T87n z+GlDUAMxfN7R%c1l~89Xm?rR6dN_OIbrR&nl(#oP%GLv`FR@6%0lW3;OdQXSHPQ_w=;6vQ zZLi0;bW>T$x!3NkG!%}(Oq-)H@BzTUf(+pdT?ouXK7>J`YMzWGA3V zK?kD;hy^p>FPJxq*K#2NIhO8MzaSmtY7L|T@gL7Jf;K*PB^H+ta>GTuv@FTi$PLo? zkrzZ`SCS9i9*vC7dN^&#Om{5Ir#RdIu>8>j1dtOM{}=a=S`xR1F=}9rGX+>f=*70? zV;|iu2a4t2kA=17&F~?2m&Q_&G~zww5EVr%IKA!O=F6+REp^)m>8)?8yPD|qCi6yF zfAZR4!Oy$3=z;w6>1p=AtI@baoN}qhzKAx2M8C6f`d0}l7p3A|pd1~e)IJ2wi=IIq~wb{w#qWWtVf?e-hx_Myp^1IKt|R zLwr6O2M+!UT09Em%G*;U=d}b?OuxcaX!YU(a(#&tF>4oaEjMFFZ140uEhg)K?wM>R zJvU-)o~Sz8Uefx|G!ps#BNDzTf0eNJy8w7Vh&&Rl{1L?~7C$D?)9E`p$J{XT0tIi# z*!$v0g9ROBPZhv!kf<^Yq1S$W(2g6lPZT%kao$G${;LS*PRI{^9LtcDLQ8Sxh6?#n z&kEICtbW)QUI<|sRMixNf9^O3NK<9M^74tyJkH2`v`HX`$o{h+v+Z5C21zYiUgz9O)?+q=6h{s^WBhrY%}p|rn7L((}19KBX$|17POsi4^=N(<#}FPG^DSUcah1?zMk)Ss3s*%-ZeDN0H) zR3S2gQRw0}Z^*g{J+MwqK|Q;(iV-1uy8VTeC%^NtVR;x;Z%Z_M)g2bOofe=b1nra9 zTc_qiG%>0=hIo%8sP6gOKV^+iWki)j1&FfGxsw(iS8A(-g;f2I1+-_=MKM)O3M&y* zBEnJD(fIM3@Daa`E~~gS}=!#SvA8g z4gS@u?2Z>OhqE>fk8OXuy44t)YSRX5ndBES9(K~}lt6}q`2CAbw5n+ouV*|-xqCha z2F{&3ObpwzudD052s1m|r2c^}IURGpV{;@qn)TkQfYC%Pb+huMt5h~dnwLYeFyX2S zyHyRDIDODKSDN7Iw}Iu_ZaK84nyb^kUV5592M`9l5^<+;q}OL&)-veF`{Ba--x}Lm;TkcXZm{ra%WeQ= z6H2oqrGgZdidOMG8MmSC?qS zpLQAsT3|GwTlhGd@p$xK=cl!1qOLFKLoxLcMjJ#0qf|=m1h06;;9`qTdzZ}{>c!0R zIW}w|pU_9Mi>X>HPS-tf_Gvu_Hd6#q3k`ncra9=d#bC){`d(p`2$>M5_7BGu{tSJ< zUcTsY=jJtF%|OyD-wpa&vd>~2lq>sus#p-Tv8rysE|9fHNfCsLkS3$dpbU~ki7OUG z7O5wHSV zE-&#tle;pRKwo(!hM{|LvvSd?fbzHF5%8yA`PhzJu7toI)*;dcs*okT0Ql3X$U}6` zMh-97;Y*Po&A(!*brg9#yFI%PJ^)%YP@S5GPf~9{*FsME=P3%zV*iW&7585x5%tLO zc%d$9-EV%c=_yd&n}s2TYM#;OHXP*1fAb3!5P=i+$6z}>p#v6(uM7t9OqCxJU%}d- zHN;O07(Vy>^Von&K>#4T=*a)eMfrOZI!6hv0$;ZHb)WtJRxrp@0|mod-iQD6H~X`J z{rhKvPXiJclc6$=f0il#Y_$FUeS8!ko503||1U@VH+jXc@6B-Ei3nWp61&e9qu)GZ zDAfyCyk5b+-uD6Bj3{=8gCg0@_LI-DEXV&#dE*74{-7e@e!GRk>+B&mz!TIcirS#` z;ub3n33DFQD-hcg?H9_a8&8mv$mmKZfKFmfht4bJx&cUd&IPEM}HX!yX%7;n53#B_&a z$(_~ACQkq7zPCzwQB0#MG+#L&0iN7(=|1Uu?x^QAnNh0m*#RgL^~Iy#q%xJF|Llc3 z#w(RT)+(KRo*?p`FZoylAERziMq?^B7-CQTlj;=~Q(r&_cfwaRTUPA;!S6dwlyYl* zelR(|=A?$hd=*2{FDDR9OqIdV8mG(i^%jeb3dQhf)LyWnEKqa7e0o9wp($4254{JV zkAdfVTTR7vRpV|(>mADqvrfHsJZVPB{*&cOmr>jKwI>!5MyK4L90NS-jm8(>XeMCM zqR4a38;vE4gSyc0P!j9BYh`yI^K{?-qe;hk_tC9r;mnc_=2n&jgy?w|eabqA8z+2rpVpy)uE?0OiWjUl~~r=c0nJ@G!_uU0nq zU#)De^?AB)?GfrIdZfvX-^EFH2x&F`)fzs zvW^~pmYR~XK9`GeaA!gveZ<%6pGa;8ZfkGD+{uWlp7UDB1|3U9&yPR3$2{0jJ9o90 z_lQhVcG?K@SwUsefjReTjlS8DVManxD%S(h<`$@|bO93OZR;3Pom2%H0<<9KHNn!Vh7 zZutqPe20wwTi~(dCi6Oti{>VKHu8BYtZ3O7#4Y2YY-u;h7zPP$DU*mCuj7VUSZ>~ZvjNo{5wWo#s?6ntL!tR4 ze$024?I<)^@(IuJ5(%77uv^GUDst^UH58Jtc2SaOS@+Pa0W=EU^_S0`n*Z6I)&t}& z)IfoYS<~{M`u$ck>zPl{Juo^7ebFXEsPBuhWN?kPOro{E!t5w9ULOx%ztoe0t(?Py z2!p^_u|=y=y|OP~@yCZj;9~jdEAdM`WWUu31TFYa6Gt^g_v;Jb{@j9odoHMHVdws$ z3wYb~qjnpxp;`J&X%fU9>DrXBX}4yi5W91?{>%(S{Mm9e)J}lSdsooi($)UiFX?&x zo~?B``uLK^p4eEiDxX5s;{kr&wwe*#N>MW2gD-eh^ISxuyHlY0QIGvixCW9bPN=Jy zQi$*q#sC9+KkY?qc6~|;e;?BJdW4@7rdkymmCixZ#=o_fZE)6=_AmBvrFkiFX(d=x zH(|D%Y?I3AA5XM^(KyV5u^trbjiWpSBg}z$1&7vyH@Io_rMh+&_gnJ8Y-?5Cr>iImBiaVK3Nxm~qo~K@Wq~O3VG? z6WfJW=*gs-wEG{>uXLGLTEIhc%ib zT=NU7!a-%Q47q% zQ5zph4ArVSQIgeG#JOFhdw1^yFFjYXyQsU-=-LZD`pVSGl8Pg7px^%- z2xj`MqUAtg`sa-khl{srtpvxqUbSu43O|Va$>wmU(YD`dBZWS+fuT%q zc)4;kdhWkBg|o4wMd&v)Z}Coix*7dzTZQRt*1lu=2i&f47fl!J$>XN8z)=zAb@N&N z{(Pg>v5}>@V!Jkp7-d-3de=#*_k+iDoVCm;*rimS8E2K88f#^}j}|L9Wf9iTyU?Ol z%&mr8qK#>QK_xHLz&4ZpyB=wG*-}i~7wJ#=MyH!VFR&;>pqlsCW;_>bCS$4?DNS%) z6`JjTu^mz+fCw6(jAzGV(#&E!)<3(o!`>1+3&@WjdhlGEIUu=181V(o+H_s6HrqMK z(xPdurYnrDTJ*!C0#QTSs?dqq8HW8n?-QBHFMmqm|7mvmwu?dC^>RL&SHt$1aR{_} zQ^sQ$zj8n`1F&>5U)#f;Be^Ep=Uc#933S@66n^l^zahkjpFc0jNP6_D?hBqv(~qN+ zp?Wm}f!KT1^_$A}#jES4$)_{M=X2HUg+tg-80HQhzbf+BpGo3D4S)Jzwj0wB>rM10 z*UNr`szReZs>RcpL)Q&KpuE1iEk5Glb7UguBR*67rejHVhRunVn&wiviJplywD(Gv2H&hIaKel*0@|cKVYA zN+(~&x_IM6mkmV=+K`yeHnesBJzY!n;uqI_bMeT`2@z+mDLWMG>9-zRPG0M^44GLU zH{T-*xXjcIu#W|aZ^>eN()v%h2hsZKQ?cs>+B99w?|sWkL{0g&J`Y4dCak?+{f{JE*LCF~JrEzHo0q!)*H6V(nPI@LVbFQHFZ&rhCJuY!KwdbK)-7u?P zmPN%J%;H5p#^k+E6*&YrI0GEygEk{z%>5Gh=zfLx8RelCT4^X_v3N~7hLFAfmc^$0 z`ea(eRb6}KpZMvrMCiHvXZ++}O(8so5mjfQTks}hYM)nA2pgUfbb1kZ&m^5-7t~q7RueTg+OCD+{<3?s5_Jp`tyF?xzOuCh&t8;XXfwRl>1J!{g*DQMjFw@OIe=5G z=M%&u{vxwenKd{PcV2{?^ND_ohH)TipGj0Mqfu6n5{1KXv!E}SPCZ)y6(93Z>C7H- z)hCWWi-hxT{pU8V+$h&21hvefRZ@uwHG&4TWfp zrDKzO(fv%)pigQRlRa^0#K1iuD#BL%%KG53feOHPID6A96z{)X0}WEsP6+?qg>)_G zNT+u@O8(IdJdsQZkK`+TaN*|QA2%Lkkc`L5JtZRUGOZ&x*1ploX(Ro*E@!&a|8@e0 zJ;!61)j*2nY;)1iJ!m6Q5s#eEMg#rubu|hRc@3Rm{b6hK#2e9>AVN&$_h?YNe69t@ zjxSM1G9D(AuGtTqu$gau@(fE(e>?TOtzks%yGqk!>$ZFFY^1lu9cGS-Euw^r1R1ZB zF@AIlQgZ)`9F+*btv3ZdEn0QI=acljAgZbMLM?AKaaoCqRsj8OD2zxw03lJ>#LZ!O zemq8Q>lN3^0_F@a1?A-A9-V^m8>CD4Vc*#J6G z6#a!X`ek1cz1K=Uq1xooZ&wm7v?}K;O%WAv@iW`GY4_1z@%Na(=+-g%u7H{+Quhap`>LBk~7S;%$GCtl+tFG;WNmP7q zIS-%?i?H=3XXP1_>pEe)8^j9QhX{N)Ua3v79)(-HKEU_BkxcvgylPWGvIxPrlkTCg z+UB2$$pVV)sQ*WOCFPby0SUEH>* z)^;NNvH31PcrRzavpiyBjN3$y>tb>dTW)S^H5`d({hWvXx|pfO=Wcx9HF3Jk`qefF zH`Mvgm*CR_T!Hq}UYTt8!{^s~)E*^t3E4iUFDqPDZpZuI&7?IiOrUyag*H^No6NTl z_xq?J$9IV&pa#7mquRccQkM&| zuqD)Q4sf%2oZ)6Kb416tFz1K)I9N*#t@&<3k)mN1Fw?44P|rj=(@P`{K#1NZB|BOP z&sdZ()LipJ&#??g8bX~>dYE_Oo}+w$LH5N-*pE#FZ5LpVnT*j{5wA|6CfCRQ?lLhh zVfG7lV^t?k00Cns0ekU{LZ*F*F|9{Yy>ge3qwz`OhHty4v@>W$LCMZaHUmYdU{ zk62gW(9w`t@}3hB)6=%jGAoy61cpe-dL^7?lo@BwE_kh zm^QB+y2gq22)9b~3*6%j%r`M{2fWWA;T<|yo1C5Df$nSbT@0#y-#;oVzd{B0XceQ3 zutNjmlu?K_P#!6~W8}PBc@>r$p|;P6`=a#aK`cu_$)xi-i70~_G1C2Wm%Vp7naQfj ziXkA&50~mn)a24krSOCLzhiOE*u7?#YsVi~lH$_x4Sw`O$h`4Fe{2#YGvlt-Q`p29 z%bdRBVu_Gw*5p;XpheYsP(1ojGGeTnt?EZ3Hol%Q(=Ex?C*CTLD=F_YYZ{6o$mWYV zonQktlA!_DcVel*T^8;~#2e3V@!};~bkg4>vdwbo{Zf<=J9b^sljaW!zJ&=VD6ZiT2P+vr<)#OQQv5x5o?+) zJ9;{_uCNt@H1z&L33VI!=0ol+DOW#}tQ`(L6!^*HtJq5wa;i{%m&cY|+do>tJmkc(<#+&iY|x|E(rq14%VQqU z2|m*|q;`&z&8&$H7N#|T-Ii6pwz4^fX?~fp!FMFCz980Vr^v*&%1~5PcyTc~7Mv`} zKGSYGxD|!Vu{&p(^oOufpaHvERA52a%waotYIK|$D>R;;Mq&D93TMtLU59}8Os{)z zf&x?9g@nC(qjsq?KjWZC?M)+dRWwNsRzrcOYuMYj@<-~lK^*LTVG8@x@HnPFBJkL+ zY6rMam8adS_3zhyW}nw8@WYPR<~x8*0SFJ=pMLMBpn~0uGY3w3hLFIB zPRvuh;<{gXECJ?^=oD?V_$k?Lhq(v(E{=uC)Jq(3?0_oum1Z4wuGEm^TYmS$-(JFi z`rg2*7rWe;NmduM2l*%N??yid6K#NrS~i6c++eEa(;$50_R3e#dg5qNwTrb8KDFwM zv%;X{^)DM^$6I5PIBY5roJM5Oe8oEj8$O%+Sw>n(N7|#XwbW*I!zJl6TJJuz>C`wm z@rOF!=|xc%7GmIyeKIy|Tiuv^X2xG*6p?f_$ZT~%_jpRB<~+E(rmkvzLrt1z4|4D` z%E#^7eq(_?k%q-zH)QT?OIZKgWs^&bj_O8!F@6dN#9;M;2D`aX~x3+roJKici( z*`8Kzou&?KktEE=2mA%&4PAIy2i~ti;qU6gMHt}DFhFWZw#gL=eK4!_Q z!vv&=V8Y~$WMC+C#HwC)tmRV4Y%Wzkwv7M~Su>a4+EbujXuToc3b+E^qZ0w6asfvap1G#WiQ+dL==pdJPy4g$(;hEyg`Nc$;YZ@R)u+UXk3;!xAS@Y!y&~G&w7-B}q8d!!-~;oIflSESTFa~6ms@s> zXTqcGw&RY9YFtH_!?b{cV^?7hah|n*v;7-%$dRoW3YVQfF|B%0wNOPma{e1cM`^nb z+yILo5F0Xyqw6EHWQ#gpa8ID+L)O&;lNMkChU1E9n&tQSvTz;5mIsB&%+b7^DskLb zlb|-5l=bMUaW5*Dcur1W7Y;a^{8nq5$L*FB(6oex!mA}GiwUxQK{Y8-dx%Z@q>dv# z7+D+Xe2uVmzje1MOe#d;;T@_6AM-<8!|&Vr$%VD8jYt8F&pwZMZxZNRjj1cU;@fZ z=GaNOpk%geMBiecEP(_piLZp>*d;y++FJrW{za%TSS^&_|lg z!JpDoFYDGZQ8)HfnvQt#Yp**Us>gYdZiaES9#+(_x;0r$v+WbZxL%WeBoQ@L>pxch zNWDd$g9~oaFLP|-Su|8! zDcbb2ipIYef71@LRZiN#IVtdP->X_Gahi51rpdO2VOQK$-3!GNrp~Q+{5GzLx^fTH z%Tuk_dd1eKk);=rAJf~5gpf(5iv(HkGxVM!K2DB}86rU+8htC%??c<7Kc}1>I_##F0~E|C zHGwB|7ln;3YH;!+yW9F#0<|P;9v)99*(lr3GcNlO4`h;vHObi>&r@m7hmtdOdX7C1!iWou48c z=y-ndy1-B;^_!gKd!$+ZI?KjHrpp1GS*gP?G~dH`4vQoj z5uILs%6$n{k<9nsNsOvZXTn)`K|N~gOMHQPsgA)YuXm)sL~9kZ(c7;P1E6+@q zxsB=j6Q;KanAA6s+ujBeFzVG{F;V-nnL*?~PZX$(0rqvoM7|QUxS{{-ML^JV+|g#? zf|n($U-024Uv!b^1_VVhlyZg8AdtM2h@m@>;Bh%MYIYh0dzI zc0Mj?_ka9@SLf9{)hEm1Pkm7;+TRWs5Om8Jbj;sIg_O}N6*08=+NoK$evE0@LES-JWW*iEVSd?bh04!8aJPm z1ls0@GUO}a>KqyAJ{*r5xzQa)Raj*<3-M6MSN!hgRV#ExNFQ+gapy?=yT6mvJnlzb zo_z4;L}AHKySrVsCsWCOBp@0L@3&XUMZ9C4Z};j>WvJaOv)00v8I(InsH z1KHoC7+s=XK**!fJ23Mp)eXsTi`{IZSbf#+s&7s1XQUP5G^|%2b9+nk5P_U5OTG12 zi)oe)PkZMI=?FflYv0u#yk}~y@(B-3Ci1@1NIan(ehGDmu+6#&{jlXpMtg+zmF4ji zt$ORXSAI{r>wQ^iPu|plaj98dD4=(K-@}S2pWtje$0awy`c8_g4F_9hyksTsRry8K zQNSH;ZXB8Fyg=w5!SCB~MH}2U_s3tb)1C7eZZf;`Msu0Hy%byi@?+JCo7DX6of8(r zqjCOSewG8j>iuAo)#aQaI`SSX8;wsb8{BX-8v-`Emg9iL1 zIfU+KGKPfI(W!|! zc8NKZhgU38H$o@j9LC9~+`+tOm_Hq(_|}TV=g^iK!%`;vQqV#XE9udcv3e$VR$a8U z0-5Gd%9^R|XY8fr`(9HfWDj5M{o<7zqWmeO(e>@|Dt%xIR4z7duKIc57B(Dl>HD4$ zLPL7@J{BaG+7xJ?{2f@NvW{YV-0-U0vW`-E98r$0HrNPcFZ`BqvhF03%4I95RAQ8S z3>Ge^08T>5f>eL>gn!+wG=^HoWiPW z-u>e5bY-QV${-iIs)-@4ipS7abOsR{OcZIT1@n{|3n~PJ{IxqV-hVcM!|$8K@%Qf$D1KG~)pA0rgu*Rdw-&FA5&w z{TFg#vkSx==G4=3ezo^wSY>{UXXoLvZ(?Ik`l2U~>+|QX7(98n?j6Of#U%M4AX>_J zJO>-4a92VP+6}+XsaT*a$g=#TLN^DPP6zKxX!&j-jdw5;R)`w*^!`fU8@5<_hEN4O z%_@y2WZ4;~)U7p=jO(?Mp1Tk0if#L+Kk#(z!Zi`6gnT{UJ{G#8u+iLj>xb7K9jqC=^E&{c?3`gFQjds}^`v zmlv=IA?Ds6@9`ghc}j_J`c7piPw2|B=~sZvbNP42^z?iRdCsq9Y>LZ-JZF3U^{EM~_MdbsaK~MPn`{rgX zBw(8MMoHbukD;&l^=JZcW592{`OwLo5a0J-etYKEdnTdLdAmP5e~Wqkc}9Q!7I3bf zT5wM8RMx!z<-Gs)Q?M(N8E_A+TU^e|Geb?{6SBYbJ`OBy%>@|_WClBl#-HA`@IEdH$O9TNN+Ur-u@~Y>>LEF z=(M?$W3%XYd28GyD54S0`Fd&0m;(QZ5$@qWWkh%qW!XdY>UKmZj*abwIEhq3Sl}PhusWd5#~LtflkDl0%~~_!dyJ%7eLLh1xyvQ?Y1X-$}qS$ zDY$oQRyRQwXC=}pZUE?ApAt!u=sKr@*dW^;3faZ(@f2XAL6hf8#XA@xqLBojEpoKJo!*b@yhG9DmEY`hw?r6G$kytlZQnMxQa zN^I>!&Zt=*!)`wJl$Z>gSp&2)Qo(Rz44A=AUb!!v-vO|GhG0f`yxc%K4tO9E$X-f2 zxj(yc>u1#aef!&oJ@16bpG2-}6W1tzsQqY7lc{z@sKGhoeBwhAPl@M^NE>TArjcYJYc*ueOUi8zzCmZ)?CJeO=zwZ(soKZ4>>}G&(Wg5A14+ob> zX+a6IXXheeiy(1wNR2ZwH#~_LJ9B35SL=b}ApLEK;q-Su+l^`0=SqB~WTFmVKir7C zU_3MUEb4da!fTc_1ZHJv5tnDH%=&C6Q7#JAYh_Wp4nDZFV~c+1i(=f0)^bk;U2$Bp zr(i3kV%)6)SiT$RuomUE&C!K>$;|;|R^fZ;86k^pg49Ho>%O1_7h$ z^hMhBU?R_0s~?&XDEb4DJ%X}cr#i2|Xqu4;+4*SOFgq>>&a zJ*=O~fu|2WAm(EfYBgyx`TLQI#auUkg{u~JD%T$fUn6xp9zm(1)d7tKuMf1HrL$&> zjfvpt6P@+bGzCmFMZ#P$)5$;$adiCKl>f^ZazXX!hBts1KrTg>^JFxQ9=HeW4zq}3{vjy z2J%oXT8$#7Uv?bJIJWhhYlvG8uM>N?`YFN5h{~Ga9Fd)3c$Od^O_RA$d-S7@@!=-X znh6t)oyJBH(k3Qf5XDpGFA`nb@6={b-=p(uv)BT6oyG$VBra=Tj7BkQ>lRQReJZ41JnLNr4o+{upe~PK zK8Zf%qSFTHMgLTzo6C@~pHXs;<3V0K_($=4#lmnw$09%L@Y&e8J)O&WjmBh?u?w1h zUUFZwbt!87Ni=&Oc#bHpgpk*7t1=-iap1ZOQ$?qY?Q$K`u zOi|ghxi4_}7G3j)7As?jVym@aoB^j2Pz?;qQRiiLwzsd^50%!I&d)Ut%5LYm$ZoGr za}v$lhzuV05zsKVNl{CgL&=Bss_y?dp)hIHJvdDx^SCBs9>P9I4$L3?vQcSl^s7d5 z%jYrx#x$sIZ_^*nNL>je#8+YJbq69x;k7k7tD-)z@Thk@V_>LI3B-qQ48(_U+t(Q+ zId$T+e!L>Op+&g&>`KZN!Kz)9=mbnDPtlAEGh^PY*$Z(}j|D0q?NT@~R(#vJ?yy!D zM^1v8DD09t%!P$2nilCn!Q+i$)sa;hg%wBFj=4%n1}OxzAlgX3OS_%vkxTFp;*?F* z#vJ?f?t^{x``Xu_qR8kC8Q1#IgZ5vTL;oLPUmaIvy0xu{0wRqf2y8;SQ#wVE?(XjH z6xe`(gh)3^_eMY(>F$)2mhP_a#+f91ho2A<)27U)pYiJQbxcZ&23L z^4wlc@Qe{LF8GxTc7#$hm^KzTl8X{oN&Mn=f~4!zuOcahn_Wt}<=gw?x0K7oEV=M0 z?2j>t)es%BErwhx8a4)_DdckuknZ5>@vF5zg$Ux?NnQ}goqEKd(;~_sM5E*A(y_;t zw~97HJ;Xgt%f3%{>Gogr1f)LS;FLYg7Zw zgP(q3zFG`rkVZrs;rq1znQr%V)%H0l) zF@;S0td5H`zKMq!x>Tzc-`N#(>Sr{CRq8%y0WQRX_8Y@l$VI9!lB`&@NUoM-^j^HC z4BBWUl%$+gcX9JjzcIi;{m9yrejUmB1^fOa4-So_?mQNG0+ffU@ovb;(B zOo{8b5P%~O3{sXk+xtMeW}aS4AiNZ0w#nO@YYk-9t$d=LG1Lq)OIttVSxa_!DQb!b z$a+~(;K>sNrYW9f*-wKTkz^D{qeE*ydUu4H@y@QC*9R79nGzZBy&HE0HNb3ps={8n z?b_Gv!C}-y2v+@*#_b+#nffiowFGmWd}d~hXNC>!#!I4vZZExn7R-L^k+(-wHNd;x zT8UaRzkhnaJK;o_e)p8|Pz^mbb#6vMw%xm7x`&!?>76u1%P=>!xl2Wn_>lCs_!HoG9)#O;8lo*`$!f zx!s+EtCL#plzC9Y+8k5SS|0A=0{R92t)dj_;0Vil0gS5)6P_Nkv@R2NG$qrH{*V(RSuGa-$5&; zUcwrHiPt;D>vAQ0j)GhhT%hZkekcB^A9cbQV2%^xxjx{Oj%i<#wu#g!ax^pB*#Q~s zTh!%0o8`=Vu#6o$8dy@8diCdVZY*v?czP474%>;+gwTM)+bX=FcVDR74xsC08x> zVM-?hW;rR@A%{GR-<~er7A9^Tu#;(PgoGhkKa7OP7yew0spYpZsI1B4X3s zCg;uhiB9r@(f$TttEU5!skZkJ4%!bj(a6n%VKzj(ZvD4uCH#{^{h9vCB$h<(*GMd+ zZ$sgPXPrq{3&xHCZiF>VC55XcAuQrY@K$e1RLgh;QOf0;^C93CiCRsS!+QM5kHF8R zuVBf5eV!)o2rOyF4*5W%ow&uSCmk8#nj1TH@@>XGl$6HwUXwFPvTL3#bR9?VQcz~| z6d!L1=xi%L+yIj|&Zs8q;^E1S`Nl@lLJrNd^;5><-jynLf;981@7`AraWr*b;W*)B zKib+{wAF7Oi4IlqxDLnpB5Bo8EW1u!Ed zD;VCM;O?_0l)z-*@V9Pg?mX$L{T{1_bm!SVh1_Ic%gXP#V5Nq{tz#q&w}79~?Xctj z>;PEAY;^Kr9rw2FmVX(()jX@7XBpxvDRbBkQev|mlpoiMKS}t2Q*W6pETQH}^l9KU zPSZZPuB2Z10yH5z2e#We^Yz2$`^dkKRj>Lz8hM$TY5-zRqs4nPm0_9qUmr!UkXf`9 z$wizR3l9Ez;oH&#V9YQ~jDvO5*~4FBOmgZJCq5dDc#s%jE~(X&oD|ZDT!}|I&*xPX zpVb604#>yOzQ-Un1v+ZX`?1w|LGhMMT~2Q6Q}^#ECEh8eaTI+vXJKjda{w04I{)Cf zKeI4dI<#F1iy!Q#$WYrs{d{MsXPpiWb0ErXm!M={Yt0VVWJ{@s>{D5cGJRRhfLOrjoB@@|4urZ*@8f;JE6L`-SuE9&gU3IK{v^p^ zLmH=Z{YJ#e`u7pP`16QyTG5iu79TK6GA{TtvlIEZM0s&slj*p-f=>rd`6yRNzC^N| z!E6;5QT9|W@*Jj$p+SIlw)n%B~`(+g|f1FtVp~j4butiQ^*#=FMoHkj6;<2WG1gm#S#d;YR7OJEw7M(qdypdl+!3=Sg>}*B4nQ50dAv$4 zmH6`Tdr;EiuPcC}yRX@6CWQmBY;-nkPJ42#HS`OkL#7ALk7^_t1$ynUBW`WUjdi6| z9sbEMoYk-ELSy zwx-qkV<`B1FAW&5w^r_Z9N1nU(2RJ?9@Fle*5;d_r(#Ae@bkn`_KQ1=g6yhXlVb0j z+3kIYMw8E8JNBWA?f_XRQ+1h7tQ-Kdkd+FAVIe3crnwNUS_L`(KaY_4t_bT@=c19D zkHyuzNs38pU{#uGt+eY{wpHn?(#y`4WF8T-s?`0eZDS@^sETfNYLUW1Yg(yCQ zU>&KSb4G8YsWwuM_!)`=$@&E;*3@wK%m+-{YMM;e&+ym=ir(Acs|j!VZg-~L!?v`ICvP8hG$aa!#=>$cUNS=8yKf~atRp0 zddM9xM?$yl5c@I^=E_c`D@7YdJh49NC8znC`*?;V4S`(+9vdRYTd} z;%Hr7EF8J8d*~qzsIoIVr-pS>Zsa`-Dg4U$R141~r_P-S96O)?uCDdHpSe2n z@i@M{n<@9oUJ|k4zqtM=N=OXr_;3_Rg039l$~kg5OT)l_y%W3=_bsXE_K3e{K^=&kZenbyj?BQ z&MKtC(UaYDP~chK4o+hA{lq;Dk!~@$WpG2 z9(7|>*hc0`%i}vulJ09U*H&I1lRGbP?bgAGG?;_>KQjZ=u@#>D-hy0Lu;8rfKfW&B zcyW}=L1n#j)UDIz5R{}@fHqyDY+mE3c%ILK z{PBUkoi$fueE(tf>gRS}JRIxn-+#ehQx)TVet2ebqKG$iQ`Mv=-&!h2u52>UKLbys z1+&eu1InCimnr!BB=`>UbzS_(YSSO6n1q)t8eqS^qAfXDICw(4Ro)|QJTTNL{LBZ2 zB39=u)k_BOC`g3dX^~$Q`gVnZX{YI#--Vg#-BeByZt&(#6AQh*2c&}cIA;^ z(lAs`;)~K`6qy8%4zpra7sj!#e_#YASHkkrD=8qWG*q;-4~}?P;~z-Lj_jwff3zo= zJW-$`WBkDPo4Rr$wT|hl=5ly^WzX*o40{B*2~eHqzpgOz_78_y)Ds9!nQ-xq zN$_3t@bVYLDc4Ku4LE?ePGZuzW&~l~#bruyqMMJJ{joE*DUr==&Db`<2G;}+%UDDD zVS?ZCtCYkb|NaT_y?WaPp=vY)c)qhv-+GQcp3GIZr!r$bx%{=!vOUpdrFpm9r`q+2KjDU{u~!J zFT_y@*E;urL;vQxaf)?LclX#~POazNlpMOwlV(A$*B+`9h#&D6D?(EpKdNmwpc!BE zROsAA7?P8+l(Q2trDwwf!4k`%rswAu>Tv1{x2?JE!pKkGuI0G-NU1ef@NTEBF7mPd zrFmDr6BilxN{;zAZd&ROSuM}9FBE#VVNX=g^AKLROr=l!i}8YGsqcqkQE4+TJ*Yo= z>qqM&r4*zY7ne`p#?~9!xPg4+lRfh%;brwH<1v0m*AmxXwL~RCz z1WE{d+ZZywHser(qjZ9rZyvsBVWsI1Nn~)4<9Th%3wBG&`n~&l!15R>W%YGIvLj)= zO4$l=m~UkN2XHCQJCE28xS;-~*YXID-7>zW_ZL$fk5o0(%y!ZnP5uOolC)ohpEsC~ zQFBxAQRZh|R+>DLw(nz6*k(x>c-LdYHFA!3@-Ble+=O~-;a(F5e)t)RVq%H){c1CQ z?6zzA7cXxfCJX?;rA#t>a3*M0@2awf&28U<9r$_N$v#LoKj-G;3!tY`OAQ)iPpzHu zJyz#;@#GO+#6=g!bS3}p#R58HTq}@~ZqFjgEA?ladyPLJ-V%fsrwug5<$cC^9Cy7> zTEUm!MR+YyB7Q%rfbXaMAK-C1Haa?5>f2cd(#M4j1TH;|!7?~60YB#UvT!iGVAz#F z$748Q;MhwaBtuO-m8<)dIXf=n zOlsaLDHsC=W5ceqQEg}&{5Equx#c-mSQ1@P#u@++7FCDINe@@K%(>-|T9?@eq%>r@ zE!Wg#KBa29zxc34g&)xhN0cTY0gF3jFwg}bsGix`Wc%Xk5$~D&mF22Nk z@m-v6<261WVz1_Q$I$dJ!tgp+G(MdKEUc>qW2fp(=a>*U@+p{IXS0BKopv>o6r*_) z7USN?w#US20h~D3A=UFe06Hn&bx}G6m5544DYff2OXd>JLAN8Epa=*~yD%XIS+`(r zNRBLe%geIQO%P2%ZEfF}RL*ceYH!a2;+7?~M$yYOb)B7>Fp4n{2rkbGGCmKPUORmN-9@Zh@z!t^rpOIr3^|Xp& zyU{7rPtB3=l2n!>Ja^_jJq?HakMn{fVY*Yc4BMi}#uNr-MQ9DLyHzolQdBQFW9 zI?Zzh^qy+sqWPm=M$9iRyqMs6xZKki5=3Sd`K;7dI)m-Z(&Q%Yc*aV~yT37=cN)$f zmMp_Zl#3u$@?}teNPUH;4LLBCJV6&FZ>QnXT2zxa#T!-7ojGpvAZqN(%S&MaRKd{x znN3a0_9fHo!L4s2bn4}u7=g$zZ246xc1$TmEWF`o(4`&wy(R;&k$bkWyaLU`umGFG za7WjVUI1=Thz+W14K!sYn8IsC>XR%0OF(B0r4(Yx)&~`nmaJmVW=lehNEzkS2%<2> z$>tyu272&pY2jwj*~|iGQF+RUI7y`-MMw?wr0_!!8n)2pOo~x^i3(u7AoVdy0B+Y2 z*JC>8filU9S;ypraEto8CySYHUr*Sy zTR~E(b_wzeUPN8J#~qmDPqr?xu7fr~NT)go*p9vF0(6S0pqhk(C&TnlUrAmn5^^N= znh1_OOey(z3sfz%mxz$FR_f=jZ*wkoKCtx5Y9on$^6muvhzi#)Pvd3)Ml0^J5+!ilA3Ulg4#WDrH{#{8}@qpFwZ+JY6%IImZ3X(*h-wte>u#1`}Omy z9?SxiTNAh@#P?>>Qzvs(cBD=1m99-6$)%t~d{%EJb!B+~jdR0%B(*$P=*{=2vz4AW z2?b%HDj8L3hH^IH)r}N4rJo1?wwCk&JoX$a=n|HI($W`XDPWX670A`^Dkzn{EM*Y3?IH1swqj46=d` zDAhH0Hs1LIPJi$T{-n|TjT0j95lbvjPG2=@76Ey<=10`)##XI?_QS1@dwEI? zep3v_$khK8ra)0Y@|Caw?1YKe1 zqS*T+b3FTBl$B^^IJc}q-kCoaUw`}jf8XW){)-wAOW)1lkcYSa`=0l|KSWm89SKJx z!rtS*f9;Q|`q!uZj&n!CX>R@azkXwS`EL@=rkpj}|N0l5k(7$&t1dz4GSw7{pp-2X z%L)~E7(us?X*%@^TBc&ssH)t0AE^06M2^0_msOhm{~u%uvE7h+E{sJrD`A-Hicn6Oe=(f`m*~r=Lv5yR~i?w zxXp*qe2Ghri>g{kU7Vzv(L;t0{UI0e9>j z&;ka6$Eo*o#E4{NWd*=>nNB7V+v&}>Roe0k#7%z&NCtW97_a0AaRiX+4}t4WWOJe< z2ee~@#6kEZ9m?kiE5{^f$^W7b{l^JrMG1)CcWbgH0W_BwN=SAE4K1EisOUQyyMaSe z$MJWb)29gw0p&(tyxx*(hs!z<7b;ti76}Pxqu1hH8}lg@;&b1cVVzT>!HylP!r#!j zn>j`sOO8L>f*lH@lH#$_rk&(HFL^Lb8Ta9>BI5oJCSOaeNtgiw*s_E=@19gKebuU> zxoy0?(HJ)Zx|Cw{23F!y`xWsT5RUN+;89{?-awl;402c7f|^_1x>#pHYKZ_4GSl}Z zuux>w0qe^lplK5TRsxzr&prN$DF#SdVpK#EFWg&U80Pb2 zqf>s$;(0|P{&jvVU}=9wJ8F&)$c>B~5)h&4R0Y`8N&hzuqwLazvBENqdk} zsVkRY$W3D%ET_f&tkRD`6uiXq3DX+C2RL7cqN;s0!9phWlhq?%4AthEEqGHe>$F>3 zaq|feCPPdk?Dr@6ttw6X%Uy3S6-l`A4PKAZ5UyQ1y+-B>?+6Y;A2UOTaVnyd>rKYc z!TDV62VtuhYkVuVWJ}gaQi8h^(_n{xi3Cqt%pF4>xaOnO1D%>9aINbs1LPWEz}$-a zLYTb{$eGs29SqgWn2G#8e7`$}=K%K|=wSxzCLzFfs{F#!@E?!kzg~Xn%gx{na`0|5Y1|({U75)5%H%%o?g+< z#M_k--#$|K7aQNSHN~bY+nf13S;RY>-=?M25_)RYAknIqznA7%fcNVPMSyrRT7(6h zV@?L%k*zXUZG%t=Jdn5riIF zOc#KNWd;Vv(Ht2F_Y5n+g-SI`KZkHix54gQeV$Oj<6+Nm!U2r8n($_6+;loD|G!HI zoK<=i`d%#RQ@d^5n@qQ)Ek*tPt14p-_GPFoJ}Tbcw)BTVk5Bpw1<d2U5oY)5_%3D1)=$!Q_5d97Vd2vcQh8GC;83eY0Lg@J(obgxh z?%@N*cmrwtqo(Yvnp$9lVG3Z-nm8UG!22_sEY+*zXU+VSfY#K3wEPuhi*!Yx^d-Ie zHX}AU)6So6>wU8+r5CQlSFh`3o_8D!Y|>zG*`XFvG(4i^TO? z|D9>%@WwJ0aRdjDvJ{3rt!viFH8@b|bS*br0cEYn^UgX7Fqc(^%PFz;iSdI5ar_J? zYum}g8QtK+%=mWz5i!0drb4 zj>MKk3H?pRub@llH~v@~kGCBx4e`c73L{h+7+xme9E=^pD`chc>ovpYEkG)HO8Q>a zAKWc!3Fflb_lV)9PHX{@iS_#2#FFLVB&!d|;zsN^Sn0uP$Kd{_uP)jcu1(y(PB?-G z?^Z0@d6ztqf8_Hg>0=vXqh%@SB9$?-HO)lP*@3VX1zFu8NMj!QXK^75O_!Mb4Hfik z4aL)YCio^#8mRl=K`fUbqY4}r&Y){x0`jb&FrIq*UQoN0|09%Kjc?ZO(cjk?^9}%$ zrQ30Eupamwt(*gDXy#9~fNGY&bXPzT9liunteIfl-x?05Kr$JLk*$y|osvjI8Kip) zl2D`e!Jg8)W+Cv!RyoI=t%DgLz@hS&gn~$$I3nyIcCPYd;z5@rCqZ6diDjK|1sric z2NAk=vIjA{?&+EjeGb5Gp9eWp%=Idq-DnVUU^7dg@df_|e7a-0UX^oK0=?#k%{Hd8 z3~FUi*;ji6U}8EFWjLG+Sj4FT&!)bk4K*~Gn%a9;2F_;X~^=mVAz{Syd1vBg&W${CdS@Z0~P zwe|h{Qnrw_6J}-{wBvTP5l>l!6%xIv!rk}fx$m&yoZA%VfqjDdGvkNJWLqEAy;nc< zs$@ld*9#(egFfE;x-0C}9A$(lWqBMiktet=vZ^B;o0S`FbyZ%VvR7qf6>`U`y_eBSdg zj3*!+$Ipc$-d0Z32<=6-VQH`lbJF_zJJZ}ANAFufWQdO-e)+CV?KXQ2xGdIznQ6>h zJ@<#?s>9VpD+>mlcdpp4ZlIua)&c-h?9M8VRpCpweNq9FRL~Vj@R9)B@6TH_g^H#> z%CcCk4nb5-CsWwiqqB6mB6T*Ux~1otUg1zrpjG()H8hOA`mfVfkvf}JCh0K}&kQA9 zc`4pKI}am0$ThQwgV$WnvB*^}6cT!ljq_m_J;`>%dQGQ)GyjroHK$|kuuS;g)FOIp z%S?bh`kWB*D}`pe8; zHYafyHR74Q0wi%MhpLK6r3R4RR>YOXW-&gwc7ep+4pnHj=auBQ8O{CZolxOWi1&Tt zUK=WV?I*8$j79L}+Z58tlzrzvmyp>-lu)N`3Aml3A%uJPgH@vP1{!}w#-~FasOj)6yPr@usom#Fs zL7`=VdkAOCk)>2*^0;x9ad3BmS}~W%3xp}#M97wnRI^1A>$Vwxuw{(UU$h-)TIIA% zYiYXb1dr85LJX#Nn%Bt>`9ZW1!mgWil(g<`aKGmHu{?W(MFC>QB#Bx311;w2IK9B* zbOf|(-BJ>;b!y4;@6L4>s_E@%+6`~HjG7;jyXhL}xco%@%3}+5IQ{?9vHs^1K`8~6 zYmYd8rVf${>3Hi8r8OE6IyvciEl#8voENKZjXuA9Q~S(bczg!NMutV_Tv6ux)x$S; zq@>xd<%$E9{Ub5-_xddITD2NzGA`bLE+nzQ0l&rg4GzULp5OQSBws0odtL|&q6t$o zDJEdwYkd^m4H&+ou;$n2o1*d1>aDV#OclVH&-#9G7XV}+@C~CRM{bRLWkFaJ^j9ls z-3Xd6Tq@17h)04Wf+G;r0utSCv)j68gw`#AC_6-#K=J3S&!_hf^S%HRaU>JUf$8Yy z6mESV?i>5c9h;2!{N~4xlZDJodMA~7z9c8kY1>I&hjUWREvE&1ux^i@G*18b<&`cL zO?I+`Fc%_e#z!x}(L;yNDn%(u+VWjTwwyykF+l8(vE`PWj=6{JXFThObl_++mm4>d z`4-Eq+Ip4?tRrEBFQ?O4eU*54;h>qez+=a+D6cRmhdbyQGk*C<6P)PigCwV#6l!F= z)h@}xsu9Bt_t9KAcq@xz1n#vweAelqwO>JZLWIY8K+LP2une*ZVhl)>F49-XdXOQ; zL>~gP`L_Zuo$`kBV2}IGv}&C>%RYqk;qDC~peE&!I{*S++0~DaKFGWL;yn3cpaXt5FQjK6V$e?OD`~Q|k3E!n3zxy`id3$qPUZfr zn;Y>{({UQEl&F-0C9*>`JBoW&7N*+3viLfa)x3V=3D#4_*SMXxI#t>B@53kAQwK$`03m6G)I_>Xon>!QrUj6? z(mwJ#1?iyD)}{H~1i<5crVwjlGBf%wf!Tlc_ zWbmo1Vpzt~oK8SCXq|Z)G@yxu#Ui$k4wZ08-i0w;b4-r+x3-4?xkDCU2zQe}z{uf; z8wn8mVD(DN1R}}t&4)$Xz+Fkf{myW3*qBQ)?R#c0rgh89_rpKOM@Ue&0$Zd~xMINK zO6-oy-fpqAco)t{G~Ue~KQjTmgA+a_`&!Pd3PNo!Gf<)tSoZa>U-or8SQ99lje(nv$RdyN}C$z~_vLR(>T}>j_x@@-3%; zXq=YTeJ;X{YPHi#l#_eXAtHRtUdd%=AML1;aTA2Ep)e$(S+Sopec1g)i|=vNwyE6#e!Hy z0S&7}EZXHiPM(xVuc1f}Y1AI3Le#{*X1DukRE7D}9<;-sw}S?>6NB$1&&8oyf=CK(rxB z=5mZWsre^WbKu2`CCu&IukSP=#Gd{C&@=t{=2G4OQKwRy7d3`bUhH#Hexv->v#c%z zW7WF&Xd0bF^)9P_x>5dYJEFbesMtCsd=9Gv{;4DRYp#`5Ml!Vg)L-^Ea{51nJpXx# z>%x(Jx&wHP8|{kzCgS-E)BV%J;*UQ?^b!EPLGYbj|LZrV8)5>LW!KiL;y*d^|Ah3t zLxR5i4tEfFkCXGCUemumaI_>GEfGV)b$f;JKU}<@1hZE3JTX>TnGLqru=WxioX;=_%`UzjXR+8cm6r zAvU3nomZMe5RSFEF52ntlnk<0+(^?%xDMjsZzbKfup!hSR0~;%;03Fx00REc*@n`U zyBOvp;PE(8pR^d@-y0Wkgb}?ZZ-8XQZyH!)}ugy z1BP1>p{ue*CZL95f^T~+xd3XFG=P33F#P?+v3!9lZWsuj%m5>P6l}+%rCxB@5=kYp z2Hyayzd@irNn*AphjY-+sf^h-l)Ce z(E+>pAXL6H-6^mg3eoaHK*4(rZqlq&UXSki5`C2>T4hR{Q>$kM18RS(P3fcP08qw} zxt&89yZ&ZFYSF6Y%v0dt60%kC&8sNwb(%-A>B>R;MA0cZV&@kbUZHYR-;`F&=Jh%Q z>2$I4gUU3nU}@Jx(|sW)GsrgHH*;aPwWBYcb`(>395BM#v|n*Wm1$#p0wJsxxV3Zj zNrel-+ofXDC$F70eoP#^wy7nI>eY!butg<402al9fP(UwPNT9DpGeXbWPqdCOQgax zxPhdq9AJ+@_PTpuAP2bK0>vor>!(2bjreN+oo%Mu;cBX%Ze3>z7zU5-K(#p!j|j3) z%o0L)i0!p5yQ!7=9S|QL0A_Pr@r28AAp$hSpD6kV-D<9*HBedt6Ip(YRaE|+|4@=1 ze`>{`Fm(%WCHwig{2N1@7NgIN=LWDJ)-qh_jxhr<9q9*zjr-1-KGIc?nb(*l{=Hbi zc_Ww5^~R%W9IFpRheX&<)64IvsH&=#Kb4WY03)dAon-;(qtueSrXcM!@Ch!-k$5*} zbLhq*z+Yk;?LsW%#=cN?_nmlYU|TIR|E-?LVj^Wei`=BcoEmbg9|$=gErOusX@8>B zF;q}RKb*c`k@Lzit|CxF9Ek}X&Hp03BA4iJejyPA*~Vlb(qSMmH%OZ?x}(wp9M+m{utK?Ljb>k{={(lPYLRQ!XFIde-*^2*I?nwGn|eg!j+mlSot13QNB<8 zby7n_!1bbxfHa#0_n{wq6?$S#%5fV{NG4XKO5sbkwxZo}^dfY;!ET;_!L8s1j@X0S zIL%xOFUGJ!8XHN*ti|G>ns8Q2At*nGsRD9eza^(>xG+Zp_+-OMDq140oB_tB?D(-W zC+j0Y)^+=Dg50p8=K=DqUS&%hM#!6Z2Zd7gqG}+}QeA@w`WG9~aUx{F~c?Cedb6?h^ z6^FThzf#j*qVLfW$^3|)5>k*u>ipIYUo}45_PX{qoXp}e7C8oNA%|SDcmX?7BW>W2 zw)x^p;j=`^$&;_V0egJAvGGM(n?WepyssLdN#kwWo!eDASb7mN7p{*)q<2G=GGOU&$_EOuf?J3Z- zmICEcjN1L`B&mE0+H-F}XwQ^VjMr&mUICWPs#C5(vqQyNwemnYu3#hxqBEa@y<5YS(}!u^ z7gT-8oC`jp6-#{7Ll8b`+SkR5v$kg^UmJi z@7iNl&k13b@Efwa_T)a&A@ff-EHuVLsJot}zRsf$PDgLSl`u2L+JHL6SD#LF`Z1Nh zmlHlN{)?Q=2jU|SFm~|l@+zTj1YcsCfuV|Sm$a8am1@~J`#L8_IJKMb0Ni^U&n+fB z;3_}P_LoEa!sAL$t%`vqfm?Imt68VX8{r$l_Jn+y=c&|a{2ir->C{VWX+Ee|9!Wj( zOiD8Nr&AUTHNe~*X+W28;pMguky@N ziIzmtbR^R>jw=uT-WLgBp`%g0)mj+bEc9DS>S=72Yl-TpJ&kp(3uaIs(yA@=3lI9? zJ#_9+_$wl5d(%&W>*cbN?NFYx>%wi|8~4R(^K8#UzFRm6SV z6iSO@)CeH-ywAojB`s&n;wa!>;&y$_G$h$dn6kp5dE}|0VH)sb9VicRB@jcmEsmyv zIzORow^bBf)H74gXF|(GONjUAfRS%T8j;q>9k%hE;AKewds0fH>WLN7{S>dF?z^mH z%;6BJI$FIrKH}oZ@^MU|L+F_v5A+>V2ENiO;`9m-W*Y?EYO%$DG}0~?bjx;tos}AZ zl_PJucKBi4q{Op#ArR0DDztq$65hkLYC9FdaP~FMOhiyR%@;2P=7T z`fzcCD#R(i7^lHYu`Cu|zfHgru?dc#Lb|5n`>9%`13oG*Eo{L^$n(ep(A-ACH;Jxu zPHR`#WFPvn?cLhuD&4PzDtGjqK9_pn_f~XBd9O7R6e=Ov$FDW0E5H@^(+x#8G~ zEjb@YjX2^vXw@G1@^^Z{Wc3w(e^4hw;%&rk98vBqJ4oAhDLU=;S>y*s1{!`czHtfdxLj zFLJLTmBw&Y5My{o#uKGC_oh|>(n=oTQT zOMVNezpg`@soUpIBqi67>QlY@f$iO-UG~OWTuumN`MERUYc;_ggw}!M-RIp$_NsOP z*T$vhv?GVmuDWHV4q)i`PB;8+i=GJ<&iLyAyezL40h)_8Pj2a^$fj_89Nsg%+klY6%?*usHY2wnOp+) ze=OrM@g@~ty6TYWDC#9};GiX*iP3v5kzhYK{)Tr(+S1hQ5ZljFw3G@5=J=yuq3*+! zTL{??~t5eqH`ROnE5iAig)hsV{{a! zGIkjN(5?^lu%%5Jf3H>MGBOJoh?P=@|5_yVodpni<2>M$&cx}f)wMuQKQh9IMzq{k zV!|1TWdV^{$VD{X?3R-m14sYRMD0!F7!$bSu64Pzk4~Phozs3ggf8MO|N3?dnCkhV z#XmOJP6e}&9iA|wZ7h*>dd6?Qa~+R=f32-1|Wt# z>3}h=)oQ7xR^yrI?Pz>jLsy^|_s1XLuvNu{y8#z>*-*ilWpi}Mwh5QE+jqg4Dr6+M!q$g=25K+3tdd9nhqJB_( zBeneTdc6Ky6x%{V6}fvu=a*A8>~;RZ@KwIx@~7;jw|Sv#*HW-*lMHV0gvLPLJurP} zn}-V|y?lY17$@|6XYw7kI`!atT5|*xBbejp1Z2z9WLVGxx01d72Ac3OQzT=+@kPpD zq4GrcqtaAWGsE>M0c!jc@c=W3Q$h?W>ulSwndlr~k3cHSM%qt+2^#)2I0pI97m0E; zR`!$pIOL>;nx@Z8x|>eOHx`@+Gv!Z;1Kggwlnzz6BE_!jzPj>5rY}7dn17$OapGjg z0gjsjNa~WFNIC17w_Ed-pS1PVdTHTH+j~LuuuM1#@%QjZ2T|{G9SBTqeGoICnpw6z zbl*6d(*^UCw{rJ?z26%UiM%-!Pm^j~WYjL>Ow048+Btkp-kyL*;q97VC1Ur)9#n~4 zRcdn8rw z|B1BEBWwsXGmUYGG~x`$xGq=HZ$^|F1@gBkF47Dxfe9v0Lr+AZr{6|>B`Qk^9fclR zHKG@(J}dE{iwllnSbX95MjfAiX#sKU;X2X1`8@)WlL+2;s$Ip7P9!bL-5PFr5sb^g zHfswSV&bqwC^1e zU{M@`Y{foDyM{x5TYMq&M$}b^ZZ?sE^>XJ&D2lp2SH?i7QBYLM#f_ zqX8(1M7e>oC@+Wz-G61IGGzUi_*D$kkDp^7Hpr)c^<583Bcm@G7N!LYCgyw61pkl^ zTkio42km*_hz@2}&;mc1X~!c&MzYV`mSSp&nvwf?u{SOFA2bBul-s&iF8KW1ARLIY zM`&;I;&bgD`6BePRuixXXjNL`=DF_JY9g%jmmK{#qCs6EOFB&0h+E{7$#oCJH8D>< zTgY2{*2dI%EvwjQ&{dT?{}rqaxj#ei-p02K_(}Q(Eq0XnKZVhInX7%Ul&&NXdRI9V zc%*ix)9+4^^5K(HjF}A9`$1AYF+d{b(1=hSp;+ztH|DEAHj?2R0d0lJoj_R%JTk=2 zm9$*5<)g#S#Iw(ZU)g*rLF48>RnsU2Th?ADt+{J*g?Ks6-2}S44d*`|9^&Yy) z>2;2qY0ONq*#Pn#kE7h+1^V)9_D_L_O?G}b{k07ZE zr|G@`5t0WKy&L%}z5Kn*=JWVefjdbn303XVABxtB--=eXqVnH1>VFAZYe)YsXl>)! zkMJ*@>dC`-MMirXg4K%V{2lDV-*O{q504>#Ve}%o&In6Fy3@HPgbhnh971_zqiK3) zf6bAd@N}LjCWf7TUvk#VJuBU~;PZWo&6ifrpAcZ*6Lw(LylQj!aUVih$4n4-b6AgZ|yngyxth6;9AU$Kc#?F`}Zuf zv7c`OA^zxKTg&-ihOk5TeWL=h6tJZjF#F-Ihu$Daxqd1`M>l>*8RF15m6>mi&iZ*E zBa0P;DSLbsMf|y!v6yI4EGOp$sfXVOW}Al$UCj$6(0PE{IZxfl8c-;CuQ!8;K@<&+ z@CbI-1*j~(vG$$|h>FebX=dTU#UXQ5QQvphKckZ3pKZ)cMZirvoL{8!$<4n^it-b@$5L7Cuga1VrAaWoSR&7X@JX%qi5AqS$;KG z@&gN-^3|TAUFhQTWgs!wRplZCMR4s|WYS66dR^uO7SCNQ7pBKcF&j!#&x^bc4?o1d zmjjmJEF+iWN1QJeG_S&~M)ntXT&@!b{#Nf~vEi9Xh~l1>6agU^LT>@StC-~1=~?E! zM{equi`3hnA2vHmnCppUN^yrI+lPw_9?jyF@kui1h8=N`re3k-S3*m;kCHzYnpR)yo6{VM=b*5+6J=w8N^mu3)yLU*T z{vp|4B2-vO!-csY5hf6!rq-9|{uZJBqyZvS?qzhQIK*#mUl{|UA5gGUMQ7PtJ8jaPCFuXCjHgY?=JO>Q=)w`4 zt53!)Wya}iwF@)onDSYNU%ms)=juIr!anNSF9qOemjBg#`D{YP=NJ8(M#=$6_;L^q(-N7RSRAFl3(=QDG?! zq#vru^^Wr@_T#>iTvrUMd-c3EHQp~?R(WdzXSaIqp42y%#6 z?8O|^BE-JN>-H2YhNlB{dq zPC+L65Ouc}RRH?k04|<}1wlZhmF^Ug4(Uc3LTzQ6p>CG;BdGUt1aUMzx4 z9T5|b`(Kq#{H#lI1}^iVAQVteE#IIrk5^#B1)qa17!jClLt&xvMWb z3^yhpy>ZaHf*R-y_X6|A3S+T9dd>^VynQr8XxdWl#1QnqRvS?EQb0)k{swXI(NOAS zMErkic}{Lms(8tO6fN7E^ENk}rf@Qp(PS3z3L`i#)N9+w4elJz8TzUxSJCQA)sENt znM)sy;Tj5<-GZoYCKL5cZqbJB>0RY|U zkEsvav^1M%cE zJ)8ej)74|FQ3$Gd-D(S*_NsGSS^m^d@vKFml)wpV;H{m4V_rp87v=GXm}{!&X8kLh zsJitr9Ggv0$}vatL02~TGyibc?yb&x%-dFbQEUax>!kKAqGGml0<+SUCX8d!k8M%~ zF%bzqi~>FHT_wXNK1${GlS033pdY4ooV9-kj@dR8d=J!P;j0*I8Gav6 zcLRODhKD@(%JoR)`P^or+3m*1Y|7G<`Az#6v-T)OXI0#Ra%M_`-j}OhInJqv{0|GW zy`34cP!&$N#06d<(~>%$$xtE^6b6f59Rq~KTez)IX}W(!aub84zas9}do^gJXOcb@2N z72oL;Zg{8vCdkw|_hKYSt^9(vE1)?UQnlz~2YlPqK%@7Q6OeVv=5SsqTglj+1_v9q3^DHvwOIZ>yPy=dLgc8gIKaa69!eOXao*oEvVyQGT6a?s6Tce1qeWiyhPJv57sI z^pj&94AgunRa$cbuNooZN9wSuM!>Mjlt?||e8gr#?Hy)P-eLHCNh;7ApCh+Fb(sDk z5rU!bAFp%_v_)Z1$o}T7=FqK$7ZDJ`Rq?Uo;a4<*)Um{p$3pBqf zSk@~+)W`Vv!+Ue}WRX31&;!s~cepr2{tF@ksE{Bux(~9f!ReVsANo4&vydfQPcELl0snH1T?-BQLC4oUg)=$UjKxLb8k^504X< zBszfIrO7}7AFz||nIWiJ05D^CXE2#Oc)D`V0psP9yLs>bgsIJNTL1?9m^VROOPD(# zJF@p}GZ~kF&AQnGf1m4%DWfT}FPYzsOpN6LdTauuJ{dqsmSsKw^c1;<{c*OS^p_D7 z{~fiKg%!^ZGhEu_i!L^P>^A|oD_j0WZ@e6!sIXSh*P3_UE;K1$gUAGY``U-MX>%N` zH|_qr_DSLXQb)k<{Pdmt1vo@YcAVDggFx9M2pEPye zOo8Xpg-n_qD<5@+zdvAv?mG@0uOIi}EkL>j-$X70T#(Lv{oq=SSUd0RlWEd9r!Y9O zU|qU=HJS!&%cn&!E3hpK`bUY%VOZlL>MLhof0=(d{;ht; zSZ#gp@zm!pfSmd+e9k-cYn8oNb3aq2@qsg&RI;4xN0@)d}5TGO<)Y2&)F+i7jSN&%x0|0DA z7rD#D@bn6#q?AqwjYFBXpH@mV1}-0F9)=7o%-v3a42t(xh$Qt}5QuUq$Ys!t4V-Qh zXc}@@080PmlH}f}@56f_Vy5|65`;W$PU?q5K7C<6E%|x80H;{+j6~8zI$`AOlZ%e^ z3wjwR;J#WPxC9|Pt7VzkWh#V)ehvoKhOD-`(~);=`?h^;kcTm+B6ng}_m5#eyiSEA zr`9H+MHji{{zB!z%KF8Cr}t^|k`AwdHzbWAR713AV!vDeY4N!_dve|BGS%2;+|>ZH zhv*+6n(p*@`;T2`!hG1YYh?=gx89Ox@pdTe4L4UN^y$S;d-J8g4bgNwfvwn%D){-#!E(i-qRQena zXR(@8J~4lcf%j@;a)ep|!}-jGd-=xz;t>UXgN*vUx_~?4HiAJp3lu=u?q^!!L(sg5 z!1DVJK4-!K3g`_(d$6b>+g*opSP0F_nHiP5J2u)yGnyLLR1>6gt9lk*mJL9odgi(w z{3g73q>}Z`v8zfD)OMGt$F0lG2(cs9;|qdQh8T^%tsq}2GY%D3W?bbr9ybc~>yBiP z1k-W*HDvRHukPME8sGjG66ifXfkptU;}AjDYxr$Ax?LewR+!yt(8=wNHcG>jj13-G>*y@bY2O>r6xtjK5z1^3!*6+DJm z4rXPIO>pQ2R#l?N41#F}x>U+#MH)Yo9BfWV# z3fbe^U8j9ZR{-@OE~@Rz2Thaiw3D>|J^?G5xT)hB`*c*~HJ*@?;&6+3>eHCNkH~WIkQ= zC)l&rWcBgls0;BeYSau*Q8NT5*^k>1S=8v=(OjsOr}@W`8i&ok1~YBmvcZ@)Cuk8f zD99^UtD9l8U>-lSTWjfNgGP9t7y1UWg*XpMKXW%*#A#yl^eQA<^F!bZDVk z4D}cJQnTp$k`0r}1T5MhB5!N7ZU8}B`shwpn$M^uLasJn-nr*LRn`=3GU&nOwpkQUOAHE*Ij(CbeHCGK_LLPw4Fdj1~GHP}xsa@i^MYeNi}Zv+94oj*~GzlOA10IN__K#4x|`Sgk+#HItep4)>-fgFJ(h7{nYjco=GlK>5+>H}GE*vOvLAzU2{nKHn$ z4`~tWMLOGuVOFr8d27FRF1i84Q46x>zTO(zD&m&`5N&wCkE8`u85T7$<51b{b%q}q z6qh5lvl1!ZQVKsv1ikI|K}p&pzQmpJe@aB}|kCE!iqo>tIFDthhwpt%ol9 zsc~d`0@=WAOMRY;14k{vqS;p0)Z~e#(spwbFsa@GcOD)cM+%8t>K(J+@#>XcOvzKh zczS{1f-?)>Z^~UoCi`@?*22_-ed~KH3Rr)T8BG2vmtTfOHIm7bUF+;8pvV#vwC(&5WTCV?*&SrTs-QM4y)1fZ-U%T9^6 zuBGQ%6UEYEI(7_XTRs!I+@tly+e3=$%~~3Sw*~MZs{uh4Y@LZ_UHwUj0CM{`o{66N zB)78f`oCcMZa7i8Csvf^7pZ$5+6@gyoVute+3<$dD9tv}w5*V-(PNfKDm0x(+Jj9% zVJ9zD`A`7VK@{N8+V-(oUNS-&wD&5174tEqJ<%_QSLjpPtIBNm%S)r=n@%gO3#HF( z42FiAO9xPTUdXgJgTncfAMMImH#qjRC0v^(6JosGf)Q0o(IV!bCumcSlVbNWqjfYw zqcB6qJ{Q#*ip}=(%qT<*Hc&PNpr8?=Z&*&rh~^V8YrG9@L}#hE$P8m0S=jDjNG>pW z{plv)RAhQpC3LU48D=haIq8K@_i%|*=r$7RG=bJqQ4Sg+{~De_Mi*9-0F2(_=uhda z&>r)*N(^6Fjmuu+WS2K0P5{BE^2kRyF_&S);Fs=b0vduNwhOPsTq|6lzyV`rn|62o zi-U-+&whF*;g6XtGP8>g-2qbys8;89Hde0Foi4grL-=~mS@|L-OUUlE=SWv0Fe@m{ zq8RLQ7sH(v$~IY?@J_a$HbGuwIW6C;&Ok8!_4Pb_ekiSqzF!pY<$AR73YmS?et*Gq zs}JTKQqCwof|i z97$74A7?QC%vXO*a-s)=L^_6A*JH(yC$f=`@f0pVS)Pzc=^-b5!s9S5MkVB>$w1Zw zPv&Mz=O!Lik>IY0jAhr?a9X-&UIc3|RgSIsV{{_Iu?VtzJ||pF1=q8{gf?ru{l|}P zGJAY~p!VZ>ia(Lrn)*)0)jcKVMXE8=bpPSWc5#lDzxQtzJ4eEHHg^ttUBM|)_ibt3MW9uzYNMUVR1-t~?S{=5Buy+%ZV#y=DnuuPr|ed5X?#8=DBgD8sf7;@jZ7{&v!*74y?KYo6U#XpqC`#@S^eHZk`~ zB8HpQK%4zxNReyjYCr%(m-6<*_`<=fwxYa>>oCRUpge*#Wwv(}KvQG~i14SReFVa9 zxeCt>`DVb>^$6(a#qlvB710zdhltb+=!OR#&prV6*`kx-h3FbsYm{zHuqg3+hv&f#0%r5fCowuKmd^+eKWku>zYE;e1{j3ISjHihMmtE6 zfKHan8i|O|yC8Yv>Jc9MfoZK&WI1tuXb3%ioPt}7b+`~jaR#xm-c}9^ZaeYTanpr|DM6?jWy>M|F9_Le>Icg~RNW7whSjPv#%@l546R*H8 zK$=DAcP!x&E31u5E7`W>!4F1S#(Hf`v#&%g7WX{If^!CNIbX?-;g#CZ_5z4-YLJYNBiphD81(kWnUExF?R4i8Qjd6c8aXs z>8A;bCggCUIIgRls|&4@yNBE2dg_QMx}#VRe;wAc8LlI55=z5*<@n-8&d>HinSCxm zc#scE9^n6uZF#Uv6Pr0gh}S-F+8C=U;N43W4Q<;zAT>%r%?`*{-}q`YzK=3-DIb1r zJHGrn?j-y`ei**c##*(EbZj5)l-TR|z**L6k>je^YPuB}T5z4*Y!O+*a2&WcXE~}O z{e(`LUQ~g!L1Hlb2GfT6cPvs6tfZVsmp6p#f=&q*L$13Vd`vp;9@L%;!LZ)BqKo*d zgKzNi=SC)To0u$*NHXPhfk<;g%U zaqe28n&IH9tU{SmNXbN0me(1FT5LMRz%b(}V@0gH9Wm4RO&^a3?7RB%Bm1p3%(M4B z70QzWV@AexBjX36N!x|hNu>c@Nt2%r0RKzEY*Em6Z647M=Zg(wQ`ubYmrW=x=?Ss+ zCR3~sa+w%Jl4&0@7%{kCzu0`U%G&sRh^M1Mq(P>ChaS!SH#m)F*$?V?(mxO|-i=U4 zffV?E9*3d&@wV%&i#`q!y}rALVtnv|i%|%_ymkcckDhGCN4A^89T)5(52$Z0LNj1# z!_gzf#21+f%S6@kl_7X02SmrRq=I}F)9Ie59G5C5-8G=f9?jmGHI|<7a1;8~kjMnge;_Wy!a-={H)P<(3dDOSJ6o z*Wjg5u;TFfpcY&st}yKBmWPUqA2E%dwZeh2lH!ug5pkWRux=~Q-+Kp6X|vDYWa-Ou zgIf(zNXLD*(@D1~9>T?37O$;y&~jb>BS2GR#%eILIh&oO=O***w*31_%1}_q4-P`K zmZDd)g@t?-$9>H->wf9;8eR8uflXKF_ek}T#uBY+vOb}r_tRXMhzB9UuWA)}^poj} zYu(P?6+Y0`;MZZvwr;#;6pE_aa&LOi*qqX2`wJh3A2dw4EoOP&OaS(`)r>$ce`)f{ zXQYzq2Mj3H64a`4*Susgy+^Ic`b1h3#5DH65kZwVg*%sKH~%ZG!F3;Lpmf|SvR(y; z1txVnLM--Mi5%bi*ws^p@uPiykFigkKE&(3!SqXPS)`N|=K3*C9Yj%-A!V`GLmto9 zfPxa3wP^W`3g7p`S44Cv;B3J*^-*4cbSjto-Gm5!#WE#n4DO)-sf@Zj3z~bG$^95F zG;|LSRqon?Yn;C8mPLt<<_~Wl;;nH$cWza9Gr9O`5>%o3%@8pB4sF8Embuim^F4Kc z@g-SZt6uZAuG%hguEp{?TF+J#3;vdnS#bEX_kv9GauK62eiS1|r(@H63^B62`7;er zij*^pSsV>vkb7z@$I-OQg6Dn(otXujQis|JcQ=e8FcV?}F4>dDgmvl{VpVVRPaJ5b zW9%QtW%*7C!F8UEpS|i%)wbFC?Xs_Wv9{uXhTdnAot6FJ$w2!j*TsgV6Pn=O3EETe zId#*UW)8G5B2s4O{UaGIV7$p0%PiUDoBKt}Kn~|$S$FY{1aT9!TOf4T0@ZGV%K){z zKg2Xn;D$GoVfNEjfe}}M;Zkd{SdpF!DNnb%?NyPcD(wFG(^I#>y;6EAXBC9YxX+AI zaqFf7@|}i!Wy8wKYF8d!szukr33e;o6W1jV5cqu77$SAX0{T*33f&2%l$mgN40>#( zOu2nTkAc}J8-=4S?>A~rrrcF#qA*67{qDmL9*r8jlj7(C#%W?+$qIgi^+qLb52`QM z;`2dSj<|j_K{$aY$Y{{y*W!=Q_SkCDe8%Y*r?Q z9+c)oUGeEirRf7Xl~d9=l!hTHo4uRwFm7HC90tx5Pj{iQWTPjuC;x1XSk7{T0S`2V zs6}Bzu*x9Y#RRMaZCCZ@}-Q`N=q#TEFSTW)F>Y3ly`!jwlnL-1rEwRj#L9&J~M$4hX zp9e}?EwninKc!tbR9F*hX?GC}Fe!;F)zr`zCX1LyoeM^vjjSAoDNMxKNR(Xj?Szkp zTr;n4L-R)+XtL#}=SK*m4d6>(=xU1%k-p~nN73~cHawJF<>$)iOpU$>>)n+$#M3CA zTe$r_gYoX>8gp~B+;vTrx6^v~0S2(TVBFnPN*t3*@5)h|2wo)Z<8~i;D%I(KAF}8- z>r28^IbwnFn^h1G(;^JYyRr}1d2W>aMLJ%y$&$BL9-;wQ@SmnzpjNRBEBOV*MCqn_ z zWby8dPm+D+fkUZn#IC2R)w^?$fa=_4WrpzcC#krV0_ow*r)cd0naAxu$omCP_MxPZ zf}V}@FGc6F7kCkZH8~v!WfBy%3vU>;ehr2Ak0DQ=6pTH@dj;NEWeGXSl7FrIwSZB0 zg)Z-{wMcY;uK(#w&eaba!OtwqlEki^lbwGCzoUq%1~_?EL8@Tmx~wP7+r`Z~Lqv$3 zBo7}=hLf!h{~7+YEj2U|0zps`$Y6Ju-V>OZk`0=6Ww`U&5j*|3Yu96o>6 z%v&Rw8L(^=z;HB>cZ<+lGavXZ`pjV&q{j4D3pA;K4SqAdUWbJy|9bb&WeGkC=MAd# z8wsB7Cz$3~^<13<1DuS_w1pHSJy*osU2FRSPc^NQ(W9AUVP;)oS!Aj&e`HTOh!Wqe z|2Ae8=$OCgGeqk*wWn@|Y6}R*&qU_x#L5M z6U1||e$y!)F$O`U_N?84pW+TTG*V4wc;Pf8yRR0#?*~?2d6eEi&$J7k>t9=F8A)Kp z`A_n6iHzSvQpD7(GE<+W&LGFaE30X?HdW8oDgE|{J+*GHZhN%B>G&~OXr84t-|WTV zGCERN4%3&8fZ;S>9z;@Q)IP6v3bWN#W*vpBP!7uiPcf8{XE6j{VY~{Mlco4BHIS+r zv%1YJ`p=+{z95I<@HuE-TqFIJDn@eQ+3+@cBF+%R>V5B3tbFSn3r{=FGhh5 zZ#$eyUiN9vhfPK4nq3z%lUFUP+Ym9txW^>7@s^5oq5HjS=e!zA;ImOsDS5T;pk-0y zC-Ufg2YPt3$O9WsCO7&Z${UPj64Tm3_|1GvWv$8VvQN2~ZuVF!D|gPwWFfZWy44>3 zab{dSL|%QQyraWMSF7tg?WZ*>|E@wyjk9&f#e;$*?SmB#!=c+H2q(2p+!@yL*TsjE;~^tmWb1rQy>>t~j@&c#1z=Z! zX6G5F=KRXE!JO-aW?o zeQ_(2x3AFrWqISl>|$5GnsVO}q&A@VtnG2dugwx@me$@+&c{K5I$UmDii)4Z&Qny! zlPk`KM}PIluN)2-Q-XZv843dJ_5g^iTcLJDJ7 zn@POuQda9Cm!*p40;tZXMLk!?jg4ex5#01}tFjbX?J=fpeGK{$Ci>REddSpfc5m{k zCxVA%8PMq$Ri?#?r!>)DIe7@P<8gP`$asv9HRs+V9SayoEF6&Y2Crj%!8{L?eGMty zt*(l($SAC0`su00~Mf3$#Y_1r^z=Al6T%|Iq(_DuGwFqsGaEnCP}Hl%k8 zf$jY5!6tO8<(9&g@IJp>F^|?6X!=$HPf~aBs323`BdZ&;bylmRVE>5InjhSaIs9FR zHj4yGp9Pd?V<&0@jjSwXm@xIj#~sy*;L&Ps5o`BJmar|;-9>B2CQ2zu=eeLm~+h_v;_goIU-Dy?OB`aL$x-UE|u6fVOamF?G#+3c}LwAdSoOT{_c8^5< zNs9A$oO}DF^y1fNyXaLhUii%hw@1;)ea-ab~0}UhM`AGv{>cJNFdzZwO!7Zg5!@KCtft2WXj0xXGuFGa+W1?Ry8$@(a>R zN^r(0eLn1i%-*-@(jk}zA;_O@k0B4#yM76_+nP^K{p0KiwuQ~VIouD^sm@jX?zzbj*qydN*sN=; zkJE*1EJ`g?rN9@_bhI*BIkn*VtoPw|MyD^}7x~Srb)xU#y_q_M^P`EDGWrSg2`#^g zFD<9G1_TF=yA!&V5f|TRmfKFIB$4%a-IG!Ra=SMU zEi5{5H+=+YX}p(;$->%r?LTgY@MF@rG^#DgWaLqlo&>o7^(FEWe!Bb_OTb!~w@#@7 zuykIF^g^=lNE<5idou%?s2wH25AcKH-gTFb2Bigin}mIZx-1-cq)UA zg&S@;h{Aa*^#tQ0=_qa!@0O^y2GR2QlP4rxN2; zu&0Kl)aiFpGx7%uk-&??v`ip(bGh?kgsK~Pb1>P-3?ZsQLV5%xWZj_+Eofg|X=fOc zfKs%PpQ4Cf0@?3&nXxZfC76K(v>EXwfhI;6CBuorFoegovjafzBlNZ5M0_FpwaN!i z^!ow&z|BZ2X}I}XBpxEacBG(wIDjs2kvi-6BCJe;a&q;qK!Ws80ZaA*bXQPEXj6T< z&~2N%VtW_Jb3pz05>k@bToZTM$k=F+D3UNFBF3S|Z=^W3W*i1>e%5KS>mpn68PgT68M;k)BY0bfckK*^$6u+uteuGOs;d8H!gIosrsU;M3{1|st6 zM}R8cSheH11^Y3X=s#Gx8oAtO|3+XVyYZyAz4@u=nySB4zPdYVH&y7VKDnK;pA8aQ zi}$yY{zQQn*uE&!_@9n4?(02llZkjM!AqXyg&YFTMB$saz8#sC;v79GP~PQ0QGSJi zJLn<&BovF)JEc#S)WmX|T*%qcZk0pg+oMHc^Uw0(+C4P}(~=`m4Wh6E1r3Bc5Vz7P zk|#2`B(8BCr?xJnC$jaDUgre3k8>yTSZsvhi;Kk$K>{UmKfhJyD+e6Sn~1E8tU1Ia zHe#ot)*fFQ6VvpnS@ zoigv2xa-21Z;u-N0xh{V5D!vUA@N4n^{~URG?c)=)8WU*?-)ty%@k&9tSrl}$_mkB5IC?kw*NcG6gQ={-hAV{- zAO;2Dmv`+Bz1I-gbclk$9`Bd-wc0drYuEQ*=r5A>+-c6^%B$?3lPe!mKvvm)*X}(rPfj%Idg9i6%*GiLcP< z4v`!*{*!4=*YBONim@C`Rf~ze-{rHYi2Y~?#J>W~_wTGITJhP@9tO(d3DecT)wX<3 zt@!>4Ci$X-tz3sP%_Bo!9e0>r`EIcHwJG?v-%ZlTRC(2g`JfZTF;8TSX#=V4Vg<{^&F?dH+2>kUVV`UDAP?LS{mvFG z$xgn%#{A^7y9CmIq=yg#5#7t(T3&C)y@|nSo;=ee00AuJYaB|W{K>WBtR~Ib>cx+Wqs)GYUW-rduTtDJg&#U9+BN=-}LjzuUXAfdf#nk=4tI z6T&q+e2nyw8e3O%ueW533{TY}fZ0u$d7a0-T_$tCu{@=Xnv&H+QVm~u(2T~PUbA!_(*?VjE$s0jrhvfqwM}pfv(+{ zDmRMfXz^Oy+h??>Z-o$$%qVO={ZhZ|ikKN0Avc?n5)~CO zmWu7JfCj>!eA?A}vg)V>>ix|KpK;vk|6&8;E}USaapEy$nTyP;85y~!;1|An{Q12- z)KEpsm|j%_dZCOH-o0edMY3B>lNJ^4*AF|MR>4$5;LzKRh2&Qz9Nc{K}f~KX~;sKk!#E z`8B@!uL1mzcl+A~b0`t1DT^sD#5MlAkANVSVvSm$K_yJ^0ktDMQvVp9L|6zQewe_YXXOEjgaN#`yE{8fw^m*3qyx(_+}_pfBo8v7~Z z&=?J?>SdD)0Z9M+;({vnEy;c3x9>d7xf5LF#g$L4jux!P4_W1e>A1miB{$hEjS|yk zg9wVU6vv?umvd5)E9ZWKAk9>>mYgse6TEbtIIgjpi%DPX$M6&;vAE@%`SP|Z@w&_YH1Jl-1%?uNfKPo_^-3xy8Q4i=HIq86gh_oIjjCo& z?jU1eYu45e;zn%Vt(qyS5-kXyHehGD%#ZWd(SjVVvz~9#Q0|5bXC*9yB1NAI=6Zmga>x-oDX0S9wWihO!5SL}v&vnl-htpZk(>8Tba%YJ@J44~|H}ki7 zqw&Qr9JRT`S9zvKDGH9NwTnk*W0R6~%A(k#M5a+ECOF28@X6rb}}8F3FNDF zB@|e@z!JRrROc-#U+X?Uys^zr&eMuc<`#_L`QBt0Ll8AnS^t{EY(*%Z#C;A%)o}x} zdcFr*V@!4&+5D^Q&Zccx~IY1xQMHByHtf#Fbn-%Gv|sFJ1@!WZs04-^ct;jrx|+#oXbzxkLYX$K|BikTC9um)@ z8+X{O&w0VEl4Kl{7=ljJUi_YWdM`vKn?dLmhhPG&!vW5-33HU?L<$}mMqJ~lUJMH1 zS=2UmtEbg2;GrF4NlM`d>;fXLrl63lI~PJ^X7Wd~U}IMPHRZ;a#6qU=>BTD(V6!aN zbRlEjV*z#`DkNsuI}Cx+;6E?bioS~8^90$9Z#_kp&XU11RU3pH+;YGKLsk0xGEP1k zYH|;mHbT@9VH3^6)O>sg>tNjT>ufi1;~Od@%yNF=4`srBspUN8fcGdvJ|dw^CY}S$ zf9~DxLmP6rY6^S`w>(kEUx|Q;_a=o}{ijsRpOI<4?EeBN!aGx-{;x8#N3spmVw5b+ zT-C&X#^K99#zD^vz?49x`rDBpc=<@nM3~6|rd1MF0Uip2t~lSADWT?dwZBdUQ&O_{ zaO3hY$s(^#B793&m(aRZ{Z74{#7G+Uq^aszC82Re){1D|?!(i@{@Yl;RZXc(M9T-` z%pR@n*GU!Hs#>KMK}^erjj+`ChSfrrtrPi~d?-jOa!u^2v@qkAv4e|&YHiD*`8u&p z`aYLL@8Y<|XJ)%LG=`j3FO+ao%p^C~QH5X`&pOobhjO3nPSqYWbGyy)yR{?k>OrXnMS)h;9;|2Bt%Vb##<(qXREDAr}Jj2xB1Hnu?hi60tWFnN`+ z*^78Yhk>XC+j7lRyD6rcs$$a%PronX*0ypchENM}a;8Ot9RpNz?gr2+d0V(C9{;_%~*nhwqGhvpoGkHo!w{s2dP?!M*t_$ zS|qSHpQ%y>tFaCzl;#o7uMuEoYVym*8mWZ)0(hfwYI^HIkY`GO@1#1n&6+~GPcXAR zC~cVc1nPBR@a)~W50w{^PH#_s4J1R>Lvb#l3fTrnz0{JHB?kcbm$4rr#4RkBfI4$* zoUj{ENWOonNyZ%92>hG2K%bgR#bL($g}&(n0pd2ynN%EtGku&U0MzFs-`=dhl%OV^ zI3=1XN(OFO>8hv^bedlpE7e8CFFz1d?`T=IT43B+skLNDhme~Brubn5qa);W?A;g$ zrbUDUrZExc|4&RK?Efg!n6T=@$BFMOUrXzl)oS!qUaN^kZLbEDsu@HlvP3MMv_S!r z>-=0`LIT{B%EdkCv!t|PC1Q0J`$cQ-M4TND9cg^II^!*)2f*g3XuCFXJv#ZYVZgm< z(xqs7BAv3hE&}tkZM&FwYi{CnBkNd~g*nh&?Y5KGh@1emczeE>-K;tBtDa>1_KG%C zcdRt$=W3pr zM*ol|HL&Nr>3UE8M^O~bh<}YA_b%Z#ZPj7ti4k2Q;H_eN}m8n)?`Wl=hSV8zOP0`pcL95t4WVw9X{odx14q?k3xCcn#9S#04r781Hrl z?Ayqcj^{RbGH08xXQl|5AV{Y-dy_FIneb!hQwmQv8bOm3kL<$Fj;rgFi`&js^dJ2) zAHn3gSz0PxNkgm#9C@#pP42~&Ei|q;ROA%Oat?YAUD6Rd{o{ykxyU&>W(auP698HEFGvU2 zLiW?n|5S@C6Psy?))C%DEr&A+Y2KaBt8T(=6D`L3Za+7y!R)#6ew%+ybpMTtCfPWR`rg@cvD61>lxlrVzTp#HH#E=k zZYu(dB)x)xWV1snzDll@<*Fh22^UmVfa3{G(LDrXs&b|*sg6aS38tc&w#jSnHEOeA z@y}7hGBn&o=0{(OOiI$A(~XP#qRZuz_Iw{uFkb%+GQ=e1eFba@t3{75fl@_HzcY}X z7L#uUJDm|_mv1tv9l`LV3@bwU^s<{Kgv+lo+;U)&-j|+>E4JOXboVYw>P1EBrhlF2 zn-f6LbMfv1b5v8HwWg~yjCf31Wo)7+h5$&z2)1!!{d@T)BUy|;5Khv#EFuOMYwi@* zJp^%^v^T1W{C2Oggib>1fFB^Q+z`{S1*opklkREtfyz-wN5pcr zoln2oPSU?v!wHZ=nfal}7^MGoDv)6+pi?}H8+R#B*j;EdYUwac_}0c5oD3#dGlkYV zt8Ax}g;zl*-8*NK1Nm9_hhA2#F4}#EXeVvD&d>4oC3j^C0;A`QMx?G1uw=a?eN$?pH3#04KJ z{)G#wXta;2KPm+23;CU1*(M5upb!*=yNBwu!NOXxT#IVr!Bu42Z7M8L?rXb_Q(Dsf#p0QsN9U?Oz= zFJdsla>6^&c33v4c^jjmQYE+~{XVmhph-ABYE_4if}f*Pc*}fmMAd^W;LR|B&Xgs# zN0$;0Cf~qM)=aUz5ck6lg7}Mt`y>Q@NfgnvH)t64Yo9e@4*aF*ooqpfNMi|ajpKK` z-#>FH$|^Rc(E@P4DFqCO02pI; zfcFPq-ObPe(eXd{4<-3HTe|?>Hi#6%?WQY11 zNP_vda?(~n?^q$?fM~ephtzBLrW=1og-dHc*=hrhzAe&->hCTSSXCzP-^2{)KHsD|?TP~zVX49(rg=t!` zq|=Fz+^Q1Uf)x7vialL?xJZn@73Q>>1v~PF6?A3L4N->u+ad*UtA5z4H z(;mxb84emSyy4VgPOVfnBx_hVt?8+wSj0Bs-68$9gk#)%=R$^HJSZYVXjT#8_lO7= z)$1jx{XxtBgbLgt{_4e3G+#Rk&6>Y5S%%*og#5_tV`8HR&zyYD_5UBi0zn#@=aaa> zjs*0ijw7>QA{b4LFaCl2Wz_2ZC-T=FviJ27 zsSpT~yr8!Mov#-Pq@=Vxe!j!M(hu7sE4urIrs6sM&KEp}xJdC$OW2U`9>0Hj7o^;S zuQ|QgtyEZB2QN(_Ln&ze@oj!l^p}RU>_vnkNeijM`+G=T~|L1h;QUSxJM}X?F=Cn-U;nEv&1g&>HPLw}b`jx_<$n!ipVq5NsVIj3+hqf;wZOWl_bLLtSeG}yr+4)e6AFNR0?G;Er4dPS^x^2Ie!Z2nm zEP;)9Eiu1sPN{tVCOU5R0s_AxU&2y9X4}?N6mth&{3z)T*(E=+N7cWb^P`c(QO9Sy zayKjoI~CjAfYUI2yxoL$HKo9$7m7BA!yD{zQlanzhR+rsJsEa9(Cmd4yfTPMx%kVs zq&K>NJ$F(rkGW5Xw%c0y(?wnmy@bpARL_?GeL!LVF`yH7B{Kt}J^iZF^4)5<^WoC- zn-ZEwZC?*8u!ED=T*||DTTXLN#*m@U=doIP{>Ww4;h|%9h{w~WfDsC_OS&K{>b$;= z8$zflMX~vzWMlcBdq)XNwa8=ANw^*3uGNorWaW70jMfR+tuEI@TdgHq*=q^n(}?qW z3?o@$F-kWinY`USYo=mx6fGVzDQ-WVr3HEGT3EN4_;w`;YQwpG`;*%y3I5aP$xcs# zOA{)@B)$r218=!EMwP=G?0I9A`n)JM{qtOMVWmqRx))T{i=A@26`Ee>=umGj%@t0} zO95bE+23j!V}M1%^ZX6zhw+c?7$o*|2c~9O$QNOR-e0igI$?+7d2&C-lsSud7_&W7 zaLh5y(?J2XOJD~Fk=OX-E?sjyr?fcc=}$W|c;;JIdhPCj*Lr_2pm7NATkMJpgxsz*ET_OAoeO-5N-TF|z6l|T6t%HsFKPAX`K?!I6 zLU1R!kqGcZXU3sb^H&r#rrab--kOfOdpA)5oGV(cxV!q|5SQrm$l)S5G#VFhOnaDPNk5%<-A; zhX_o_0R$e|^N~BA-!AVfHtvkW<~^ozx9az^CCwO(mgJ7UqM?fKKy{uTC_o@FqCa7g zZ+iIy9_owR&Dl*56~aJ0oQc0;Bostjxq4FK+O3+;sc4Mac7K;8p*yI|?H&KWn0xD} zth;@0S4vRi29b~kX{1}~1`!bfkr1R)0SW2uln@l8y9K0MK)SoTySusJ%o|;6uV?SI z-o4J=?-}F#=`$D(e10|OcV3_CqdM^Rsp*~$yZ1MDU5tBtk&1OySS0;;tb27Tn{(%5 z^Mz~aG0`e)rdJI8B1v4-FJnHR6(_@d}!3A<_;Oe(LX!)RaGg}C6**65hqQMBfv zC@?Z#6eR|uxNi0+0oZMGMlHAWQfK0$iFpA@Pjm-w-DSfiPO~5Ei3V>KVSHcSa%YsT ze<7H|-}Y}@T6RE2Tywvn*uXb*VBy|9v=$0FH-dYC?yM)ZmNc$vszL`Vec0Rf%mahl zMVz~x^Dr%b*8-D`o9j6?KYv40hp->;HZ3UfGF@0!nb|4!Fxy!W6s@|N*AU!i>Dqa| znOOM`v|aKD=PqNk{nuOgzh0?;i|KI|dnTlY3x4-2vxsvFGW(i~zHg53vz=5L@}9G; zFDXKCWeQIUCn7g~I_KN49_4Fz-a*4~`~}ANa}^E2N;&b7OE3$3%`IoosrSG*fUuUWnHQ9aiTnK2Z_T6%&@vNms;`Z9bu7J^4IooMlu_N zkS0%OqFQQ!4=W<|61bs(&>*kCxG-fm>eb&-T5K5wjG==EYswGXf_8zet}P z%{jh=a#id-neXo17@~cYTBrfMd7`*yEfX^o0`H;mXqDlIK)&?`B$~KA@C>NuX5n2k z^agq7t`emO5ex$fSBJFLfNmlnioUYL>fQC#@P&{Jf=%@Xrm5_S?5U;dGm=t6bjaqQ zwru^!=eMd_qS3%qfMrw%q9WjT+M#)+Bh)*GdO)eIjd-c94))+fc&f(QG_Lu+WLKZO zv0NKJ-JhQ0%sng}|L`~z#cS?k&6EM@U38SHlIn*TL~3TNOj7TKd)LZ{&_4UkHTdFF zhWSH{rk-l~4-8~CrSmY@w$o=sdOzHyfhf;=-(g%<2aOn+gU}o);*rNdC~J=B6U9FEMSxd7N!X2NwQN0rC=U*K~dcNhb; zgzhh??RM_NX4zf+vTWsDZm3(MtgEJa_0uNn*ca?@vdDj^n)nJNFvhOiWlz%g8+qnH z%>8{b5Wv_Me47CI?|rH{j?{uBqnJN8NU2L;#x=u^EtJrL1x+vT{|{gsKOBrp_(w2K zvVL87Qpc)o`dyzuNH6683#nk?lUxb9yft!+o?ydSRgQrPr6(;uFo584L7$mH7n{=6Kv}lZfLMpxL4! zHvM|2Z$oFhy}sIqv=##`PHY4>`%^F4JK0<&5}a#hThrB*+XETFb0q2F+yj(yG$+ZP zTKAf3qmg}l@S;@N4#8hkGQzz?zLn?EX=45a91;pjm5#k98o*19OKQuFTLA;06MVqP z-ThaLT;bUcVC25m*8W#U?n~;w%g9NfnO=fw&Uz24)gFP;TOAPu#0ah+ zqc3ctF$ti3@Sx{`i5LZ2YnO*h=eB1jg__i0qupH9snHbI)N@@7?yEtKTQ|n;y zjhgSAE%;|fgE%6u*3-tduqi7*NF&{uBcdm;NR5P40f zk(L;sRR&hR)mg=$d3BT3id|Z?fh67Nzu|A)F+4r0-)pI$O#1TB-qJ1c+@LyA`fz+A#~Fu#M?~#tste z%@0awde8$N7ZShExbiV zUm%sPHDXh~LGH!N--3Yz_v6t=G$QV7hV>b45s!S1Q|^R6V$vIMNt;i{z0DyCx+8wF zaUshKz_*=`a<+>LPxjsa!n#cdJT%u0KzB}!_LMV!bRNXNy=nprBJZ28(t7WY_vRiA zt6!~25cj;vQW$bm8d*g+(XxIot(gHC1oLSE-O_8tQD&EwI9nX1TDo1H2`FP&?i25^ zU9bkSu4{UKlNQQ3h%$nO98df>>-5&h$pDNZJhtAcX*|JvlL9R*Cs&tq*&As85Nk%# zbNP<>#92-NY#Enwp(}9tDA7Q8YU=w=nfny`$9DKJglBp z;w|+!i^LgKE_rV()+ZM7lcB8tcVHX*V7C5IH<0^&#yBw}wm1E+EEv;$1UgaSF$A08 zJPG{-tmrWT2As<|bKJ|g5|K=t`p?zlSWiWk1qKM}+-gspr1t`T_#QH}{`lSD0#>y#$ z^&z!txsN#Px1-)@LrOGi7`)W{snCk;kY9fIQf6m`eCszD=I;OK?{pjc;r|V~&B`nf zE^tT|wGGUc7E?>7W&7J$y&O z_@AJ+zansd{-l6~aQ}-EmJ4v+iE1s$r5>Hk&>z80P-HDkM(B5q=t<9g$-bR$Pt>pHPCZ{zX>$;zV4bJ@ zPrs%DD&o=6(Ffq)a<4B=esYp4iTUj2}(xsJzU0AYf3ApfvG zszYtsSb1p&41(+7s;08|8g@xPXFbpdf$}F8XgXG-P1+8vt*!4`!5fs}f+lOgJ!OMs ztBf;vUa1F$KFlt*g${vIHkJL8e#xb!GL@#%is5Yej8`83HJ}tMu>T_T%|li#H@GvF zkX`RZsQJLBFI?4}?XgtBfYZQc?El37t{tZY45PjWk?<47-`3Q$>JyWG&$QJ`^^5`F z9#*D(Y{nBTd}ZzD-3ibc$DUWDM8T*8>9&^Z_^xtqfh}**9sXj1Vi6Lwk6`wL)2IDxki$X!C~kv zAKH}8O-hQrzEPUMAGXKX55@Uvt_xYhNUbaIrBC=?EDgUMa6Fz_yuMOOn|7+M+ep68 zP}Y}zr4?4Q<&d`AeRz5JAv;^qaXZE0J|W4Ox$d`U=tMvVkA`2_jB*LzvR>H4#tN}s z?zvBP*tw41N(MhnVd>}PkGZH~i9@c2s(kP@2piX;+!>oZ-Pp#YU)~AUHNOV?sZ6*> z9CR6~I0Gn<22gHunCmjG=b>VzO`*cG4(pj2S%56dA@6_rI48B6ci|p<7?KGBL^ zO}YSaTL;&zv+!ta?SH!z-zE2B_$`i06P(34Fu1!}6O|6~aIT zqT~^PM#Qx@KP_DC1-pI+XB^^NRR`T4M)S4JLy+gG((qqQ-Xn$MQ`~id1RM(BL`pCO z482QLKt@B?(Bvh*T|REL1p6zTuGD94k{4mEr8*+6mtX+`*twotFg4~3?r{T34l?+l zR0Zs;5a+@iPG_#K^rsPChkv(Tsn<7e@nb3-eF~eoh9$V~gL2U~p!kv5dEZVGs{~@6 ze)RaH94A)_+rj*dS}J8cL4Czqc_dG9g2IS6WtDmjQ+93O&`4sZfYUsCxGHr<(Wv7^ zh1z{OCi0V&UmfvTZ)Q>mowz5<*;3U}(-f19*Ea|+!!MOGKYMz7WMRKEFt)^JT3fdK zp|gT9^1-fr@2m!^Qf8bj=6Q?#qdEI{&VJP?JKL070*~V24~5%y%|a&Y#J>ZZK%lM5 zD0$k8L}g|kr&BXZw3b^6rYE4)i*Sxt2x2>KNPAS20F#0*PwuJ+*dB7KzPh9olg`fQ3-H_QN;1flsWY?slC^y&c?&_z@g_A!CgK z)hF&L($jd}ZE#?ubbUTjBLxk9041iSuQogX;F^1M{?6}O^ZI4L;$m$AU{v$g!ROC- zzaLVN#Gv{Nu!pKia;>Md&@(@fF(K*N7U&cQUFy0;p(g(;y6vu@2)QJ3>dbq;(%yD# z_ff?C$@G|PwH~Cq?ctPl>Fd3+nKDpAw2MdaZfe$Vp^^B-b(F}-4#QSqU^a9WI{aK- z&2=|d4qXB%+Iv_}m(_KI=|ft!Kf3jid}x@EV}ASBQU~IQjX`Dl%h^O}>FBs6i(X=1 zGp9J~VcD9CsT~|4!bAcUNEsm6G9SF+6~Q1CcneosQX-s#W;Z!t!UZ&AE z6l|9F`!PVtN$(WsaSU>mh|%7?sm;iF)ciL@TX>-7pdbNauYV)U;|Q+mAL~t4;Ko<$ zVax@Iv>=LsJk6SC_2yI|Hm%9tF9*yFYxaSc| zk~j2*YP$;1ynJd>xm8Mi5Y6*3zQFu?&X+9OWT{u91y6624voJzhA(UrHed}n8rA^f zD_%I;Hg@M0oNW`mkVz1lD&}bSnL-48x5*A5^e8{!JN3?JGpZqL5eS5c^&ky}J9i>p0oa)<{*;xZ2+%_ z@q(;9Dy?V>lP*QN(sF8kpSFd?#$OE z_1oWf<|SDpmd<^t<0)CLvCoJ`_0)||QdS9S{3UmyGW%>Om{dbx`V+M4!-=)v&$Y`4N%Vz;p&GXCs1}s^jq?+u zdlMfsv>x^?^VyFS$#9!XRk;3OsoxI}f}~*Uaw)4XxW5ZK1_2T!xt~uaq|KZ)|J`{xED2-dqnEj)@3@C=O9E z9>@2YT48Clm8OV&5q3(Qn*j^>yX|uss8?wG*l(i`i#N!L_2MN|dpZ&zaYO$r1KNlwWafMmkIe+ZJBgDi9jBOpbtCgI-}I)v{(Jt7v+tksZ!Bsg2Z$5J zZ|>UktyKR=w9g&4KJ-{jzyEgt&ODDb2N88kGt&GFh=7b08O_lsibb@yy}h_-UP;0l z{OOHOeAwKYX(8nS7KdyfIbTQ!f8cxxuY^i@#}8K7;7DW!v19`a5U>#|6RD( zhyfSwso+EnUIu}+wReL`-}ETgt-tB^F3wgGKCV6;z_kV?q+rx*Xf_T8jPRU_5EaPqha_#rgH2DOXoQu)WPl6_K97a|4D z+aPl+XEVN5w{mH^t8Tk(7_SK%ia?%UNb1fLanWN@hn|V3yB?H`=lMavcjq%2s4nF* z3L2T=%-Xvu-5}ze5%Uyq!#D9Bu^LTKmZsvsb7zh4g`agVR)8&-0XwSJwx4qKV@2i^ z&QIzF+`h%Y!v-b&ZPUy03{wt5GWo!#HH4nArJ(W91o!0fY}pM7!a8@zuE(--4)%>7 zuuC0!oE9=xvdr&n*^D=LE5|%87M6Iia@MEgP9sm29;+9uIdII%vI!ZN+O%<2 zAuBr$NG2xVC^uJyB{5}w6ko(KG3)U)c7!5dX@nQQlY`4%HQuseSg;^W5rd#6jSD@7 zh3h4#^&4$OB^xd0J-jTZnv*fe=g=H@6r?0Dj`$r&(YL&t>Y5~DcWGY1zNAS*U%ve& zY^6fAyY341rXVlx<|5&H@AhS1aI2S>ge}-vq1L}h++GqV6Le>tI7Zid3N#HxNniDB z@2%X=AOVh0&6*FSJ^jSA4@am*%D418^wscco-4$jAZ188Fr|qERjuj{>^>&xCukjq zALigSHbmRn=_3*a2B*GGWTWwk+xQ*P%29MTkb4xQ62C_?A<#InXi9$sJT$=i5{1{7g$XOO+VSdiEpFfAMq!!Ik>4lD%hGifYYNQ`Ak=WOq z-*?+pUz@dO1fQz#iE8+kI);3MzNQ{mDREj zoT=MWc4QfB*Ke_?oYIs%9{YA#!06B}YE`bEGVI7}D(Nh=@uO%En3Z)l%?rDBIrD|% z&GJJrn8c$y35b5ab@n#V)=`1a5s0K)IakM)5is73d*E%LR;nBF8L%{j8w>__2I5eA zb018Qd%x#`7GY?)>J0OGnyln|3M#U1Jve@KL=e4Q%q8$;1=J1bZ>AKifcW+hi1wHi zmlq^&mPrSRYP9Kj`MqS(el_ppE$ssCD+9#Eu}Yc));XbQ@T zfn86DS*RBj++;%X?+nV+YDSRJe=uZS^lWsCZ+P}84HhBWiu zf3r;ojo4$1)g)G{H=Gv&faSaEj`PaCQfPUxBjKfTzz!RckmcNl*^J-7wORNuV4{sf zbVj0P+-c3GhruW+3viWmu3rYKF=|r%0_5kY%>$m1lRS7#LWHvDFZE;foD9XADpj%k zdLKOv@7FMz*?&^y&9nc{Re6zGFS6&akRUQomT)NVtyG!6z%tBxC{L71p93UG%#ij& z|9|bxBjLBDXvgbwg`O8~Fpf z(q8O;)hDXG!WYsN^7Eu^k-lhO5ER0L0lg0VkeA5!xo(gbiaq1ET4UMMxVpdU(~d3> z-d1$p*k1oppN3vj9(2R(wAd+L*ll^}E5h=yXFgB5fMrldk)f^9)sLZ*NQ{JvUF&k0 z7J`T`xBcH1tIAC|?o{6`yd5u^UmI()>fmp!O~~B?zB)9_-0#9UnTXu2kQYf>ZFs!+ ztQeT#G+p^J1o~?24o1DS;KCD3!-IQD*dLNW-XPPWg`pD4LIXHeDM` zew{6USnW+}X6DLZc@gV@y2`m^_VWopT6PL?@zmVgx1_kVeq@_&@CFhMY$@`$mSh=C z4I)H57~-f&k;cP-`1aV;!X&k7o0JxLYkByhKH*1&A4+^a63yt5+dq2o8gz8jT5hy> zq=6i+ykbi+f4#7pz>E2h7xsKiKOu^-!MXE~8%-nDo6H6r7*pf^uf2G?E60-K*SzZe zHZq=2qod#Nd6MM}-UaOb*&n2v_0$|R?`fe?y<9M!*NuO30aO;ZS;e&V*MvTiqFgHi z(mg-Pes)PG5%TX@27cnEOK(=)Iv^OC=Bv~$ixwAO$GnE2q*SLsfj4)0Leih9Up>0o zW7{D?#7WgUkXBsDZ>{+FGii#7I=_!4>&T^a3J$?z$f-A(1(E5G!B>@Bb~U?Fyyap- z3twtLzF^2;StmpgDDVc&chOtT%hg6jIPL~{3(xH`##1dq-Ty+DfyCCGlIc&$ZM^;yJ?`h!1=%r-lDdVNk`D#jxF{XiN`A=|1^gamE z?I6?`#PVX_eR{$TF5**jqLNGKtU zD9_?BMdzIlx1do;J+gvY%lmJ3?zFK%XFmqJqW~w_T{GFUG#^3bq}aXp1L!m0;?tME z#i!gT|AMreYr>~o?!$?`K_zGNT&Z_}t!N+irTLP&jW+>s?tqhw{|hGxBud{e=V!6Q znBh5#R{rcORK^9k4vlc;b1AH@bZTI>N5wgKY&QyB)AvGp^2%3z*y>l9M7OVn5NLsU zz7}BoC0i8ogetb==;p!(SkF;w2Z+JhJCTph2~oIqwN>phWv0EGkcN#Sk?B-t^H-qo zD9V(c>0aAbRb~4TzmGiKQC(%KgizXEMXP#l&wa6{(PccyF;?V0CkJ_>c-dovnew<^ zUq*ig;668=`MeR*dk|CmsUOV;3!8aci>xeAVnN$2=;CokxOKn9M5Ax-2`IXf2knRQ z2P-{Fymf@8m!KiZL>AoRZ_Fnx` z>gI>JJZ1(nHXj2sOzE75Jg&HFiM_zIcCj%$C`j__L-I32PNeMOtt*~4@w{^q=d!Vv z{!Me<*S4;2qg)z1XlOvQj#o$M&NVG$hMcDx~Bq zd-`iR0!}=)fVd;42rjGA4+yw<9ZR%#F5m>K&J_b$Uj3Z1VC8JvyUyh6CfNIDRh++w zOfHbhXvR&8cOKB}nha^gtcx?F=o_=X;-MbZ=8NOE zPOz*@(w4lQ9O&2 zgq3fF9;!l3@V?I?9fK-LHnPH60$*z%l7W})`g2YnVD>4Wx!K>S6&rljDMFI9enlj+ zsPrKo_l*y)3qaO*?ZungZkAsPaSNvvyXYAuB(x!&;CC(JWz@C?1y~lx>Q-pr5 zF1E`Yr}DzQoQ#AjKODDIBI1-{C5ZkXfO$h&@)dm?cKWMF>kkfpc+f^-)h790E^O_L zhBvtg+_z!c&d&RlMPBTah~j%7Yzd#}-W|`r(hS+UOlwER*auGM-e(mcd=$te9fWzY z0*E0G`^|xj^KtJEM%mvd^IZoC?7iN#g+ zRM^*Z+4XIt79#QW`N>XRDUjP0wPQG*&IP|k+Y=9bsJ&Uh7sB3F2KYQnZ`RALGNLX~ z?IgFdQv4KM&khh^HkNvyc%39TT9>}RJJ)blz^F6~YHe{c+LZ#NKPup%p6XECuJUX6 z$okc@L1!9QNlkk@d#R_CY%HA2##c%C9j>?c=lt9B$d2&YemzBti!aLS>1xlv!+Dx1 zUM5#gSx3`ghjpIA1OYZoYGA9hHZgVb*+bc3X57}f*I3sId=F)r`)&wGo!XIC=as(` zE*CqM)*I>YeENbnis*F|!EW&q2lR8e*-V-wzD(!?bjnDXXHRYvr~rIOUZ47=2|Ve; zhtXNC1!njz=6}0&bgWr?Yrt0SxW;0zS|J|1{L`k?&jvITR2+W4{x8g>9CmopEI@5n z%#KmbT3G5?nE%HHmazIX1wpDGC=|kE{eMjl_t~L+ceV4t$2Z))7jeDb;pRG}4Eqed zTK`zVj1_)uk%`~TV@*rk|8RweHoxq-kXq?aj^Kk!^U&*EXZ4X3Ro&A)XRBYoK$L7_ zq~V~aCw?xiqh`;4rRQuJ-+9wpeClSVN&`Lc{!aJG1+>wOH2PD!79VBOeFldIsQvx! z@?r}bHe>JH%bQk1symYHsgiu9G#u8brBxt4%>COSJLdorvit3QpqzAEFF%>CTIF6M zrgh#`)A+5cR6)G&LQzll`uo}j-B|^CksG~2dw-AzmIlYL7NY01(L~Wq=tg^mXt*5q zseidmTFhS;AgcQ92t3i5Yg)9@Hf~)1XO*3iif~_X;zA!~%-VhWP)7hb7~R&@l13C2 z4d~2yc%CTz09_u^f5p%`i5CHP4m9Y24F#Kt`;`bklYr~^T_xe*SL7o=vy^=TKOFH3 zF5SHdrFkZzV)x~X0=(*o6r-5z&b`iHX}Rg>)<_R9|tW?YudLo*2ao52*eFTjQ)E_@9<4;I?CG`+r?@V{!#eXPHe7- zxW~A~@5Pq~4m5`FdF}k@Y@1=IT3cXj%gH3|sei%y*;@B#9PCF$R&YNfwWWRf54#m_ zlFQeoRWUEdD6ls7r#rJq5K+>7shog;%*(Lfo}ZMZ_YCr$+0&MeiSTyv_)TMq&DH#k z(|4>N=sjcLAp$MF7;}#(uC=P}cW`j3l*D)s_!`ZL^z2LEuR_y?gsv^YaD`m$4*gOm z4AP=C*UlI#4eyib24Y0Zc)9MDNzmhATuN2KE}L@z41zD5}m{PbW`3{_U?8E6M2RSwYz%&bn;TEADfO2-!XqT zYQdNGoETH7zu7nhZ{MA~I#Tj!@WCl4(a51dTVdbF1?qLC_CA$PTto{rJpx}HB|bDN zw>yT%j(^AY-uxBYt8df-`xU+O8f|m>*e_D-s~p|DlwTko6)j}0RaAnD946zOp%827 z`4^t5C#!u8*^eU#p6a2UtmXGnjfDkDrb~00R6_}Ady!?hB&iHCu z;u|&x1^uA%l z04e4QbfOjO@+M;O0F|AO+oNk{7@jiC5`Jny6N+Ke9mG}i2pM=9hIooT7Me+ zkhgi7wzM+Dj9d9O_5|?N3IB($u2i`$^-e;N27@JW_zMG+Cj~25zGg5!+$moOnjYSfD^_{= zuv4lI8Eq54o(i$-$@r(TFePmC2$w|_)5rvogxVx$UWGf($=^hkwF%)3pt8lcQfg<6 z@e37xF5|p!0RK0KQSf7K_B|!t`ngAv0Nh*Vz;`H#=LYJ!b2w*SU{d)fZQ@}CPAO#` zXPehs3mimLOrA*W0ah}s@=Eq>;uv+rrpF&DyOO#^>Mj2SrgrvYd?Vtv4fka~wwVNy zY8xd9@;rL0^P$QVo9t5QX#dK9h3NrLpu+hyKRN>=;y&VwM$sFLOdt70${2s|NWvH# zMbhHI4B&mMm144YrB(4U3GQy|^@;fKPjqUtZnf>y1EuOpnMdQe&%x2^)0*)4fpim2 zn(VwjIjk=Zcj30RF9e7w&p*p8v;-^h#)cVZJuWQDZe5OlbO24i=Xo0gd(Q5Cjx5Z} zOEatHbE?-r!Ne4Z5UIIZvvcz0NdM4y;oh}CUOqHi=Slf^Do+y%FNP2+9j9z)Dq5l- zzwF;1SNrhKu(!v6p0gEu-T&v`@(lxl&+V0Tynr%jyOU?qsCwI{{j7Nyrs24i1`#@) zE$j;mjG;xWXXz@MN*(-XzZo{1n!|QZ`gf=~He{7IfrVKAh7k@6nc)-MABXnq%fIo{ z--+Q&Ao1~2<$r?-^g#RMR^>5^Zul264&k5u$-SK---5pX{9@@xI53FEZQ^Dn%h zaEC}@>NBO_DutzsZS~!Oo$4(LWD19?Bu65b;K`LU@u^k(bO-YzS~9$6eR-V+^7$1kQ_RX zQ0#6|a;;FiDrU~O%An(do@RLf9aNpqdd?qNQVZyJ6I+AA-S6luRj<{}>QL6vXb9z_j}0p=()lo7Lo_(_x87lkB^^Cdic8U zfgsZS%39Pe&H}|4rVvQx&- z5tnr_GbAWDG&J-$cM+P+bEbMt-^g!CSk+zqY?04K&QlB&Q+Y+Qb)6i9Yl;+)8uEM% z=v{4{;Zpph>|HNk)2M2V&jb-vT(mi>P9QU_GGci!zajQ3p=|p0qY>)>AN_usz1)Xu zzDuPW6piB~Fn#-!VRa0@1EqzBlfds?Hh&KKG(a%!KDf%?o?L>{bX+A3`!o^LJqdC% z5>A6Jk%EpkBB`J&*dNHa0>Cy-g%RL+D04KVN^0ib;6uP4E%g(CUFc|mMomix_66WD zk5hRH?zs@SzC4g_w!9A>fCQIwiOZ*zO7(;vWlJsqj@B5V=|azHLuC%P*OddVQ|x4W zstLTvLV>}q?>F6-bwl@cu+%VuNx?>_@zl?fx9_9gVH=wKwAs}TsO}@6)#0GW)*5gT zD`Zmb1@NBj94%BJGj=pd)+r6u#nD$?Bty|XU5K3G$>Xy>$l6sTlhwxLxjCwe zD^&ltSk%S6plWLk z*uK@l%+On|!mXi=UBE$kxdOfZ3KNjHG$U4bm^%!+QrkM}z`l093dL({bBBT?xCYo= zjWjN*^Hcd`>D@OO&(rgMNwM%oQCZAtV_15-`{HyVxCxxjJ!1a3`iRZ2pNh?V{#ilY zZK71+rgvX)5Qu~%`Ci2WV+kU(9Js;WFn^+AN(fLAM59`YSXR`XuvZ^G${Dt4B@`F$ zp?KYf##v^b8B$>N?lBXhAIf6It2nXTk$9A}wy(VkKgKjZ^*~L~F8HF{)P7Vbva%R> zj=*U2l%7_Nr2DJMBksRZk&rguNx}4rlqBqBET$pyJmWXTVPg4=zwRI-jW?ayAQn_S z6k0y%pzc+R2^k+u9aCmN?J`Ge0WN|!d*B35Y&HcUIw{QzjGzj6_gg8Oz{sEp+}Ycq zw_w0sjuy#R0nU_C$HD*-i1*?$(t!tL7~*SL+NC2|MTjk0DG-mzgTaXTI~~^?DhJOc zg3<$An=mO91Ou`8h_H@m4aFlJz99{0u0Gxfz!Wq?2zbpB!_A2O)cE!Ko;Ded7HjUs zb`beL!Q5%}C?&BeR|n2z#PnHkH24S~t3$PZJlV8C-!%3+lSV;K&H}zF@_@t++*+s3 z3_yh#pgmZt1f$iWVe=w(Z>B7@XJICoj^fZoX(b~l(5VD zMb+phO4;BfgFRiwyMleT>U><#dYxpBUUr&4=Q$Zn^y_TS(QrecY~|P7mqMuRYOl!M zW(q2kp{y`Y&({nHX9%doWQf+etMC^9d0W59c zP_{9;r4%Vpk0=WYMjvb?+kslO#$>So#3m7F6ZbxyuS+LQOui%XHrQ6svFdw~5I=OR ze-#nWly@mu!%V;Q_(?-T zYrJBe_>Mh3YF=j?LYF}ghEC9LV23mgc1WQ%D?h21WP-?S;ap#dM!J*Y=dCZz<*7Ow z+a!ol7eC`;9M3-D;WtB7L@;mM z8g6;Kc{2g&A8OBTl|@@TK%bQ4(;FQb%bHliqLtag4q7DbpqnewuvdOmwuJi}Ce_r}! zDIGWl#teJ)WL1zDH&Ztcs*@lp|MAj|LkJf)6Gb37ChQ;UyJHU0TXXt?{&?w7E0@Ts zHhfoZ6F;ibC#5~0hW67|(pIgp1gPy)!*+Ferh}nqdux}?bX&v5RhTm+hL4dqlY5-r z2p_2Z5J}gGeJp%SrFC<@_&e|9@k=rWxyJ<28(_(mU}Dq7C-}Se_P&AByjvw5=)INm z{Dzz=mvRVD<#3f!QC|oy5H-{FI)SQ@j3z*tyi){=q`bjzp2x(--gCD&qLIbEN_6cc zdP1<#@ffkFVna*)lJ0!=RKBs&b#nB4v-)GD18evQ-YvjT>TFL|h?TszzKfA#uJRVE z7MZY}Di9Z(pM}1aj$#)}yutCZMSU0GUM9q|ryOx!H9Eiw^#BvNsLO#gg7@Vnt|5GU zP7rh)1jq5drvzd1Z{~YC-QalM(u7T0v%P68R^~%Xp#HWEUVlpyFE?-sw6(a0UsK=5 ztXE6GKo{8SZeLP|7sGKv+)JCmDW<;~)J^ z;>8XaLce+A{alO;y40cxL>@)-Wy#imod__zRFd{OmJef+g7F9sz-x|4Kg2QSxCqRG zH01=IxTq*?zNp`(#}>|*4wgDMQK*i0Sf@v@6a%tTPu|^HBos*P-QPC4Z(CXoz(%JB zx6%0}fVUOsELdUTTM)Rx@R;Bjo}nu%!0=MKFQ(pWCoF?+Nq?Z!Gyo10~G`7A{E;sl^i`p9vM*KBEkEl3qWT)ptBZ(=?{OEI8MkcXVSmf~wjq5tr9wc`o}%8ZZnc z`z#thgAq+<338_55oOD&tMk6kCp?-1iD%oKtw?r#igv+}i_mc{z2-+);m1f(W4nf5 zm7|J_KH{Ba5-tv&QE$tRu<14;RG!u1_38vR zphWrfs+6a9_&LypL5dIes6<@IM{)4kN#<815M7}%r7 z{aJ2CFk}>BlMk29Wen#Go}|O-(x;@)ipFPjX`B=vZ@IZ7axjPeoGAzQP7{`aNT`uf zglZ*V=LT=Px|*`~Jo$+Bu}x=&1z#xfflc$+*Xn&@!`I8DtIa}>x`ispwC7gpD;L$~ zrmQ7XXdEQlb!+P$@vQ1W;p`jw;{eA>$qS)PzTr9FzsAz3;OyJ}7D? zFy{9q*(?Y#Ovty*>gl!etu`Nmi|3O85czAQ+lN@w$jVm^>xpC4%r?L)R~^%7bl)uaWAEKKzId!xYgYiASgndJDy9--T*J9y+y=1|I=oR0TxMy zbl=6X*RbaMVcKCfvJ3r^UGtXQ+D+G>QwXw5P|PuIrO#~Q=WM>1^Qc4BFz#*ISFv=* zfY*P*at2K6bh|Er<89vnbrHLTmFrp&Z?fBY{^yf)b2g9P^iks66L4+tvPu5-p7#Ri zD-p;MX3?oV;FcJ>F1#}31jQ#?@wZ(S7aTjidOj48gdE%BgY676az9%^|1Vi#=GI1k zrR$i)FJ6O)Co@h=jgw=at&Pdp3--qqpp0c_!~3L4-uu1 zQGYFNcx7m((pvPTL(mB zz~y~ruN#6yVJ(MxfT`x2YUtloxt^7c3^5q8PIZ3sCDr-jcwbAPpOFQPvJ1l=ivZH< zl}PxMi`cEajV9)qixs|})|xr+hVeu-08*Q2;f8$srg)VKuZ(5hX@evP{IxPRfJZWd zIqXkmY?#snyfW5}D-v6l1d{rLCZi$2_!085Ry`uQ)*A`t4Hx7CAu}wm@958)Sha;3 zlJPq^y-6V6ae|JevvzZ40vpAe3g>d?ZxCy~SqLoHWFDG(bQm`1chXAiE|wc=+E;0s zRxBYZPYm{?&SW)e-@fx-I%AiNL1%15-pxaMOA*BM1wOr^%lN9Docl2CXD{{38j*|Lf?9as7wn!(t%uhYNBrbN`{E8*0 zDEzCx{ppwG3Og9CVG*&iy^IXrbUaKfx5f0P^wswIru3C8?jb=2o*)>-Lp1+XzDj5( zB4MH^%FZcB_l02R^mmTD)&1-dU6;#64CmTBX;gr;1|KGeAY~ZgKb2BSd{R96N^91=AK5qD-Vtu?kS$hI+|}%KGha~ z7^Q?gH$_ei?ShxoyKl&EXMs#c#TE8)uFkaFWue+JCz#=3|_i^|Y3 zFU1-XD&C#y=E*QozUmR20|w#+)SIr>DxLAE4eR?%ErGa9xr7~0T8+TB*dq`Z^|Btb z0C+xZ`721gQ&d$Hn_Zogtx?Q0V>4g{D)uBg_i2m zaA0(~%)ROQIf{{PFV{x{u~~M#2G|mCC!VAXxXfKj!qgaC{5C*>0lYDX)tdb{PXi02 zZ!T0j%}hO_#lU&gv1*CNs_TfF<>y2WrPsypRhHw1xY{d}xCXcq) zhngyJ^>)FsQ$2UaosFVvg2+Rf53Aui^Kq#;m*aAjKC;&rEX4r?MGH`_3cPQ31Q!ty zW|_(+9~EtkDTdthmxdyddbuE2pXGw<*tNs+AqJ=2kib^ZQV`Mou=a{r27_m7&=y@+HIuWVimDc=B|<)@=2P}* zhVF8G*Pslak(d16t!+*q?u=M3q=n<D`JAc!@$$Fwxn_n7Cn~d-P?VF`7g`(k7MrL>nII8w1`dHO> z4U~Eb+$Pa*DS*J~9U2~B*tXF`i$;E+?hv~I^4&}(0t*##kd?*4p>_B%2+m4^>#rX| zn=VCL&}O7izF{0~c}(JCFynjf^24&c4R^`iGo2VcLwa8#dKrBC!eq^F8H@@ZkLv1x z&RFe_XU6{MG8S49ER!;4x;!CTcjHaQi@#RXx;UmiF+Bkh>+S?93j$iH$l5YoN0ThF zF`U?fI^L;oTE1%_qA50AugHT}r+}Jc!EM>JH@LfO))Tq9A7EI+1=Meu{PAIyvAvmp z1JBA=lLHp#1&b^5i(XoDA1#!Qtd%hU@=PnDWy*GjsYe2#oA(FDW@I=BfE;8VufWIS z4E2L#A8muPEXVC0)#x1j_|8tX#{oR>ZTt+cem|n?v5h@Gn!Gt{yh$8+MFc$|vtJa6 zo2hd4ekj0La?WYGT8g2g#r$R7^l-c|GE+^|q%!^VNBFpizM34H6}X~5?t?4JJZu`N zWr1Qr^pWPHr8*I^>L$y0$wz_Ln_UD5sta;RPG`8!f?OwVV`@t#n?Np>E2?jwE;e4; z*E?p_rCX%v@4o8a7+_gdMv(ct^R0j>0A}~dSalK}Jw4o-P`ayP#)}DY0kK*?x8tny zfwAs{VkxKmrD&sE`b3d!H6+BpDc<}il=b7Nw}P|(Mv;NG7C@1?WL|?c9@hUu+grzF zwYH1af*>F%D5x|dh@^BsA}S#vk^)j9-Cfe5bhmUj(jg$-Dc#-OeeQ{|*IN7C`@H)* z`}@=1Vj(^}G3RxUYYd1YI}XTW;JYDrK?q!%YT#fzEb_-M$=hY%E4qLKIa;BXIeh)X zfXZigFD7h#7UJ_>*C>q6E`?9QSDZ3L!0}OzxDe_+_PfvGN&L#>L$(64h;fEp^3dMP z5BVzYSB|&pX~^+*zHaD1jY5 z*`oVim=uvQ`2Dxvio;y~`y@|~8{r3x`MaMNvz2?B!>MRZ^+s@FGK7m&aspgTBcB-H zVgehZcNdc$43F|dxEK!R?zwSL>}9;{py_VoR^6#J=$zh5HBb?sgu%`~z}{V~vwd{v zWV;-uw72>p3JvqLclwmPJ=NyfKqAZUZo-mZ@mPJYR)2;x2`wS}9sEO((?YBFfjXz} zce~@8BK&IxAE46;MHMsVTXrZd^Ych>`5(w#d%$QqlN!bQ(FSaGGQ$N-lQUBzC$7&j zdgDH-gt|)5P)6XH5bQq`ZcXvDtrKEg>vKKd#fXOC4g`%T>zcWR)JMR($%HumJ<{4B z*M1^>pXxi4?J$FQK4+I*wfIU7y{S7dB7gpb7 zWNY})>`%%|5vBL_vmUCv{$cY(EI96hEN;*hdnFjqbY2$ekIFO(D5PB^p-A}S5|NYd zgBnD}s#FGg@w1<;Q&%Di&^k>yf20bvPQhscFKC@AeY3HK zHZBF887(`2O*OnEeusr^Lb(kvP$EK+va5dJr)Sq?q84>9%Wd>R8Bt%}QTp41P0`Ws z!O9}1v^QfxTar`kxpUTXdY?T7$elg`xziPh5$pQJhyhlK2+EymOTvPn+^PCMa;FQw zbElkk;5%J0V!ZU-YDLk%bEhfL^OfOC_0U!BG-Xfks38d!4&_eOLGHBw%iyrLCPis@ zvCGv28dACaywyG`DEroAHh&+?o>A8wFXFi9J`8&h(0Vv}UMu!*CzcMrUBq^M=yDU$UgovGoaGvveRx(~ZC8K7?XfWVr(&bcXDD0_g>Jcp_hnzx9XQrJ z_aTm1GUZkj!e_#g6-}Ms_a|C3TQVlX3O2ehtlYj~JGk}}0}CppCPcul`NVvBZpNh1 zj_f+^RBYA4z5F!XnW2|_p9I+300st>l>dQ&S-Bu#VkEhMHA~8vN5YuLB4Fm1!vD@3 z#7k{?Y!CKUTR*sC-K+h`sV7BQkzm|X_*p<9_xgU_E;uDw-e2w$I1$)Kl2jDboqUju zraa_V9`G5@5Qxc%zA(}+i$*f1$F*z08smppGP0tF!JE%)KuVH81)`lQ^G1lKvk zyTTqyf;Y+#DZ!sn;u!_uwk4^O_MIlwX5W)|Wkt9npqj;Mg zqjqUAi+`P_AR9~!^A6)WdK92Lu2RCvsCviNrcW7nqJ2;u{hKk{5sUtl6N-S*9FNO2 z1A?m@sYR0hCcyNb*Wf;BXQ;WtyRzumX#yy+oD2OCi4!Dg?C+~GFfjwNLt6(q#hTM{ zgGMlu%O~r)b@*l z>Hul<3h>e#xA3b?4+i1ng^~DR+SwfoWO4zLGDpRhf(HGd=LYBKcVb7%I+Sh8wl=noTs&wu1t`Raj0s;I0vj5A18a2KlsHZsNiX-Ol#SWsHp{!$d#$%@Iq*F)92P0$s zL!?t!KmUhc=cLddhsg3odeBC4DC$>qZ@+wNfBdXkep|bb^?uMDnXEeqiadny;H#f% zAbSH>k~c9-Y060EYdT$XXAVhJm~;DOGb0*4YdcC4ldexI<=j#7&S-N;_rLm!r0&DN zU}>h#&dcHc_1C{vKvo2~H?^a!>3|R-a0m>|au9}f{Ln08iaZ==!$x#XW#3<&=>Fpe zSMhSh@gF5y>g59edg#Y%!HT=SR1d^iP-U_n06hqVFUj@CHvuA%;Ba~IFmaX9AO@M; zUOQ%eL3sT?KML#!t)IcS48!>-F#4~4c<537%Yz2K-2JK7R|yN(t49YqbNVun zeu)t6Sm`~*)%&;a@{e!&=Z~*>p)a=^;%fc(zWjgu-9xEfj+`D-lGln%%DWr%&ejL}s zSJN|&YzL9>+>QZYsKk=_W78qU&67$p?px%@r2Fl=Q}cTeB5VSb)vYJ;6fA^$cR$d7o$xhy`x^bW-TX6Xnf%YlnqJ%Ixz7ExN0Ro~{cxAwuI|ET&v4ip|;^2QNe#3igNJWnvC&fUy2-Atrq`d0CC4^fnRfWY2ann#GK)ID%NJZ_7>+McEIY85IXL0 zRPHUcM&`*b1$)FEwbb$FP=wTBP>xhX^l)~^M|mc@+zZ!(h}xv$EXHN7zv6(Av`T62 z)OuB)#N=IxmKB9Q_NHfmy_`V>(X*`a9*0mio$-Eub_W*U@8@8tfjX!9!iMUpQmIjV z`*g0ud1fh)lB1h=iNias#__q-1K|oPS&`oG8#JJwQvA5zuLhRi>5I=!>(OTU|8-3TqF8p`7T^lndrkP}8Mzn#CukY~}Q( zWTOveOAqJ67<_~sioXngcvr2X?~!GU*2k|r1Y~jbc*=I9TUD!Ii-g^?-?Z$wJ;k1L z))hsN72L+yaBAyKI%pT!J}imFh$&)*^?gs~XriSfk<~3;7fWbxbiudd%<8-QwK4Kp zVbYbq4fo^2dQQIYCBzY~%WEdS-6Lr3g!qw3lp*c6-3J~heDED_%776}h>x8DBiRD-eBJh)oizfB zA-ACL>Jh;95M^LJ+hG0U1{~ip5KBeLO8`z+}=sVD;?QUA_2w@;6JstIz9!ANLzHVqQf(@cQ6I>D~m6 z?r_k`Ed2)yc31H&`$ZG%LL$<9njnwS8oY_2YPItlA$1(cn=zQy5gQfBIml`YY^8KKllM5BBla}Oa=uhq)rOz4btY*a$q#>cd*(9Ho-VDF<0`yEbv)?|WIq&e@OZnL| zy`ySU5$8B&Tf`T{F4APX|BzIS;Qj#yZ_rj%14o!3Y_q`c#RaC1LTQ5sI`Q0hgw{UH z$yW-CWju${+|;uW@$iNLgH$_HCOhe#>l>72O!ld3PRc{j4Q;ehEy|mxz6?W;#QC3I z3@8{LCt+}JJ-sAi1B^smk;nYJg&KcDP*r8Ym|1=B0g>r2q@@7lXa&8ySobF`K~b+YA#cxT<-&59q;Jk(K!qkVXq8;fS)aETAHzzG2h zToACp^{-a+O~ZVDy8t$;r~x>}v+Q>GB=~V{=NxnsKeQ9E%zmp;aB&zxd@gqW^t<|n z8k1kUj^d03W3px|J?l9b8oVA%nsr^T#3&T`N%X+YGdD1`U3i#;_W6M8Y85utg?70m z+6A*M5tpvlp-FaxvKvYJ;75Kci-b3N7~W!~ze`Bup&RWWzutMQ*<(*JdoQdj6vh#| zzzdtT`7sv4X_l2q%+a1XYR+_=NzC+^cjDn9R6q3yyPU_%%^3`>QofkSt31O)JzFey z;z8ZX;L?D>Dld9(U3`4k)$#3&%?k+OOw8U#<6xq?4ifU@J<&VV|Cv8k7Uz*^44A*j z2KiHm10fRqqj-ZZ{qssNjY308y{Mda$FKbdTPBL6h3gf`z6KJ$-W{f3gNF!3Tb+HF zR6JUf<$2N_X=1#QC;p|vN&5?_i7wJSBVvoN#PKDP$^?A@FA}FC!MbYII`=!l{K-GH zaIIHbIPzGah3kqfF0ut$xY&pdL_EdU{-GHD`!XO%?pz8vD!H*E@#;&qN#NeY5z^tK zXz_fFSN8vgPFHv|PpX{qeek^>&j1(;e%bR|btr60BpHV?zRo-ONVLMY>osjwLJ;<& z$&LDx0jALwtNd|anw*X@#wtO;BLKJI;cG1)r12BufpSnmjQ|x?P(YvVQ4{8~?S=RC zxWKk3jGO9ll0)3?*#JIFoxoi45pjLXklz*5UJQz}gwTTCCZ;H3vUXHap3G9$QIU_p z3Wo!%aN&>@u9y0Y6WJ*oN(gFT_XdX_uKkB2@R6g8WpFh`y6^av#)>}O7q^I~7cE%T z%>J`SWnJgq)st}R-ii*RSlV5v#vORnL-u8b(ALlsoK7K)9(#4NW5#_Y2-91R0F!oz z_8B*>)lkx8`Ux?DNz?G98j>H{^`&lAj+`F4^#m#N?ZRoM+t0&tXK%(P*|W|D($Rs- zhtcg3^@-L}ijSAW#aw-}x>Tcp24I@*(us*Rw(TD&dW{%ZWm8DV+&s+ZLLfg1RZ-a% zMFSKP31NXkp>gj%U|O`ntOhZ=(Al3`b#aR=ys}Rcw-C1i(}1!G+tcX=gGyotteL)J zABm9wpFQ@$lx(a#FWy~gxDM0&8xfwyKeMP_eF-yLNwU~lH?^k8Ho-}VFs+&v>H9Wx zk+!LF0>aLl`aAOGa%CFp6AU-HkGx0e{uPN9V&%>f3kZJg;Tv)Jz=10)%AwWu9Ss8# z!o3K$%jn8u5%(f%>vg3Gaznu8%Wvk z1wMZxTL+Bn!@8acW4pS01m-^^;4LnvyD!o(m!Mfa!3!l-Bv|WmujFp`yg0#}7X+a3 z8YQJ{gPVo>3~fmZv5kKP&}1Th18AatVE-Rk{u7Pk_0+)v{pWk6TThr}4XTbc$`s(= zUt`{#jTSqNrzz}yXcwXAVJOt!6^G99GuiYPM_F~LW;T5eV6LmSFoVc{G$A>bt zd=ot#-nkb>PZdJ|%cj;VRy(|HA)P$_pBS_nG4AlxUp>_SCjw3Q9@6A%_BzyEjW-FO z9)566MURcxGMAbT8o=b%V5EzfQrjgeAk0l<5FYI+9`D}?ES)JWe+_e3{{Ryk|3nJ+b>9#6<8EA9rLmi$lrbe5vs?Dp$MP z&hq{oT%{IurGUqIi?kNw`&-BbA4y1k2f@8V1Y4oAkk(9*;iM8Tzl&Xa_>*Gt$agl< zF3~s0KEL?E;_Xvzf_{ao<(`5l?(`zRLc>Rgs$sA;{ec}NeWcD4c6nNi0WX zDQ4cM>^4Z%UyClPe1;nAYF0%|i)*F6!XFy6wrzWCH-UM2ak|Naz0sQY-j}2Cu;iOl zF>C8B3w6B7rXZyqClyIWkkyM#E!TA}zF`B}LI-s-%+3AJ2rPzF8SQ};j^zT}eNfK2 zV2UVW1JaiBs*~yfI;mculUfPg@u&(JZR6-pkb_Pt^RhtX3zX-nFW{>$!rocD1!oFN zVP?%Lzyte9M6lT`HO5AV#2aD7-kzBQ%{8J}nFPlst}gZ=`j_!1(E@=M;O(f$K7>0a znL~^rhjTD#U9%O4;KqRkuJ0ReABlhxIYQ8xu!q@=uf-5#i@2TVjy(}!WvK>5Qn|f9 zt7@J?`_{GdV!%IPW+lcb=GynLKd#_v%@t4-i$5c&JcRZ=08=_s;}l~sT)jeTyZaj4 z+R~JQ3S9tmaR@6im@lQ=_1+mb0$VdpfhFIAnEHP{9?zRT>w~`TJc^4!jE* z+bNolz7zF2eNz(KVu{iEp*0rVQe77-nv(CH8yT4&FerRNQ}lf@7QfxJ6TepB>(F7F z8|ISh7h?gvPjCA@Jv9e06V#_J z7ksrU=^yPnITjIW<8BQC#ldpZ+1*cDqb_2nFOun#l^<@sqH1C?2oolz?44p-2qL#K z87s^MAwQ&by8huSFsjfP1})=UUYxdBqhN3}oj%c_lmsn5lVbkTi+P*k-_H=u-$J>WO1qtD>fe9P$g966TBt>;>PDd-4W40iT`6aMQ>#~3YOPLQ z>sI5pH$rYJtsH=3<=!cAHdrRP0TcZzP70Y3wwuj}5pvrr4meOrb?PE2*Dai@B0qSY zpF&1SmphILP;iVyIdT`lkO>ZkU1sjk1a(v^)=A~jD&nlTvD+6;Fm6wj;xD_FBR)%W zKAEA?B{KsC=9!#|jX-lqzyN6b6nVpNQ)q#04wpf1JicFs&*BT>FmEsgh00@i`V3~w z$-eY!6dYJ@D9srzuQ4HNmu2RZ3r{)9yh9=YE9ATL->s6~5@BE`m62kS)xkwzN%5z- zU&mq_Ru8&Ls?zXa0LU05Rl#iK!>^?3&6GVTsX7mmszDwZS4mZjC-t>hBCl2AwZH;5 zqk^8c#{;gS9i7uAXA6QnciMoAI;Y_NIkUecRUiLOs^aLHe^0wh(XJ`C=NyreR~MfL z#NxP6QdRTIftRqdaJBGM*c)HXF}e_5F(VHBBkyB!lo$fGb!xvuhQpNKm?MTyBcG?7 zf73IRV3gWTw5tSXG)Qn#9rj<9Yie3GE)tkJO&ywbe#!u^e)noz0CME$^xMwb+a3X5 zccNTYjo;H)nE0BNrF~=j@Qu{y=+wOsW$bF^BTnt}@LcnzWRofQHND1F@*!E_=r<+A zB^51J8f~!#_A*q88p^&v2d5jjZh&mQV+{vab|x`wf4)_v=WZHM@9vcaqz+i(c64l~Deu@gwiZ}kE>9A>KM>^%sg zLyY|IAi7_v)hmb&r|2#MAn3f_;r35~-!KbXehrRA4MGLc7T+5bx;A@Pdv3!C?zj5U zi~c{J#J)gj3P74|$7xTqGlyi4ROgSKl!ZBBj8COc*uT$%%h2DiZD^VEt@~-X_PNMu zwmkh$G2HZfrb>L*+0^3+8ci;vkF6hzzB9EQUN`y*KxOaUu|L8;fUr{iL|A|Sc5jRS z-~!Ec5A*c%_^FzMATMpdL;_Z;$R7{Ts|M1EcZ)WFa*VE~*P@bD+s`DaCE>hu+`OrP z`KYg>tM$8da{N6hY38H=1&z0yQ(sl7Gr0G#k(2}5*2Oe%2{rW}Jlju1{AGY69Jr+xwT@q@Y{yEV7}V80 zMg&$>x#iGZ4!{bjWD}f%$`pxJLu=Ja-ipWig%O~fx>ks4*^nOwU0CUg$;^8t21!K) z_wjdsVr^R42b1Fk;sazj0t_9T2jg&XTO2`X)ZLF;fA`R171TaNSu zO`#GZ;Uu>`BJj?N$1M~dU>pCm!1Z4RS2G+;zYR`{(_qxRpvCYfw6P91OrCn}X@6Um zO{=d!hFaw5Lvy{CpYg0}m&3a}*Q0y1tBo#_?dk4R*YA&}odAdx2*jS>w`&}t_#QNy z^06U@v^39gtk6E?TqYauWRhi2@xc-r+%h`i4ZXL%CO-i?33FcHyrw9UUm7r zW{Sw68|vP>lnJc_i<+FEw+d+FG&7+ykzc*lh`pb^)ylJ-w)qmSDhUg)@s*G_GWC{u zHoS)UNIn(%FdryQdZHx2m&0V}BdmP0nr5WSjQf=fZ2Tu7mmVcN1kP6R6u z!MzFdVN1z(9dky!GQr)yYsQf6XidtQM5{96QZ!Vz&(x3%7TCYact^><;Cxh=fiR~t z9$BtgAoiF1>fZ>wcmG2I&l3atzXkBvd6`vjTz^l}&htFtlyROZM2U86S1~1hTvK~0 zqT%$r*@fE3z}4@TsiDCgvh;rWM|+jk>Z-je^sBvUM?d+IZM}vPN`d5h?MI+GEpyiQZg*V=lbtLdGVoZ0=otkRob*WF@>$=!qhO)qA_nmE}1c~N_mk> z1$PXcMFQK^+;?$?GUy=U^jSA~_)_;Q9v*_SDh^6F+Q%(EPUa8-;=mBsDz6|Sc)3z` zuv-4XJ@2%GbvPVesXdFTHid|N4X8`J&*T=3f~Z@sBZ+e0ibc%@F?T=*C5b!Fd?GPC zTAxsuC_gcatg~i%efXCR zP7kudk=v&L9r#~ta6w1Izy`;Hyt)~LB2BA>3)w=G4mvz$qlDT8Ie&D(~fAk->!6>2RRycQcB4imQ$7d5c+Ee+Z` z+4DlC%Ed!yV3!JTs5~be{W|1_Br_UVwLhScU^rRzrW-z+oZzfby#*U?U3x#Y;7he! zgwYZa0fJARJ36YC^8~oL+Q}1h1#STRut>At1m8{UwIAOnD#{5_uOh7@MbuEF^$hz2 z4Aeusj3D~F<4!VbB zmSJ%{e}-4*M;iN^^rM0ST7(q#k6e{1AvbT;iGX??dl}aC30Eo#rSKZHiOGutwmQXE zLG6Xa5urCMJfQnJrz;Jd1uL{yuLka6o!0WNwIU5A#AY~~2NPSXdZ`5G(fUic@dAcc zsG7y?yBRn2B4B9;7aBG1DsOGn&d@bJCGhsPMjiuJIvUJ6sZ~R0td-d-vk4qXrXUO} zD@adsH$zjSrZ2cl>VA>YB)IIqti%0jfdeig(6;=C1x~RPy?V$OhjW(`T&?G9ByW{~ zkN*o<&vLd9$|@8PT-3OSzUYxJW0Y?O-bJc7?cAAD?DXHj`i#lY74OE9%SLT;`dI7s z9>&V!jazhmg{B9R7gG7twrsHXj@&{p=;rr+yUv)#wW24~}G4A%mCQ@=zYN z%mmm78TPA0=}Z}?LbE9;y)mFNVZdVZr5mpB?%?+z`si;19WsmK>@NYJTfoEg#GX8S zUyE9V=9>=MH9F&=%!?$JpFX%g(O6y{EO(^)X<)R_akEzIv=r@u{zpGt@=CCUH27fM z=x@|tOL$427?-tKUXXx=BMVz6YKBq08H+ebly&%dF=BSF ztvX%@I3T?^MP2I2s01^y(c@~cP2YN?h1wr$VRbvn4GBf)8wMfg5p%aavuYp=`|h2j zClGe^i0uef--()#oN9CMttMf0yF}^j+uZRULg)TP+Q3hr)vN^$L-YOMtdeDOm57GF z>%odcK0+EuwV^jaI>n(Go#$~P_N0(>^#is|*)M2mEVWv8$*k^e#+5wLq4bBdt+WB`qj^Tz`>*Jc|170q757R4AE>IES% zw+qJKqD#`~thbOY*hRN|>NmSuY&)e85Hj=OtLmy)s!}a;q6?LO=ZI}D!;&f+mxz$s-KGTo7 zyt-JExZ+ASV`J~!CLbWQbtI-(&D%09dW3kGjO*WbK;%%{NvuCjojr3W*o%jRLE?`c z4y|6gFa7ZD+)OkE&m14M=g#%p#19^$k6{w9ciRHB#EhVH_Ep){eH$6pH~jz(je&IL z4;zU7cQ&xbxe2IIn*Wqtw{Bn(5eRy;41=MXL@?1#1mg!!5f8>y_TH%jn}fCG!H_mI zQbyNPv!OIGix;zj+Bkm2F^DT3i@@gr*z8olJ--#qlv4kJDuK+wsyt%z2RQT-VB?RQ z(?_8vD(jg=6GzH(Mmt->Afl zryFiP#CyyTA^JBkkc{f@V4y!03g-Va8R+Ww;?X1Kd688QJM&Z8M$J808Wj&hZSK=e zi!9KyLQ5@yR6O|5N;<_^ zZDl$aRCYCAF#lx883SgoeHav08snFanliraj3>JsBQG*V2N1+VKGDUJW@9LW^)$2S zr}y-Yd#wE;yayj8c2wS39$v1zWEbtVpqD)b+c9ae7!G9i;Q9D^Qr_qd=Zl~X!LaHr z@0Yve_y%MqJT@&>WiEc$WdrCIx({$<@>AK)KTLPni4Jt*Te>Ls;U*elm#y0zb!|{^ zz$X=vO@K3GZJ7@s02PEp7Kp32gQh5=i=dSkRQ%1@>hU+DS24Oe6tR!c2__XXQR_m%)T|fN15@ZOK&xG6q3c^+w{lCluSYk zw-MFh#qX{b7etKtIN#YzXn$Z48}ilEiFoxf*GqHYJom@`;#n?GsA`V{2LDJp7K*_$ zwd&2JixJwT#id74PL+Ux^CoIVFrqMNSMVyzyf4#vP(aufxRoj|8+Dp>)Slv96wC@} zL%!tyecG_-)3w{KackGOR>PERwEOv9ukUA;-$0daE>cFuIvk?Gl1tH|8vO@>$RF7u z5uTN&mQ6CXvU~;XG4iW`NtYT>VZ(bA1d5vTSy&(rSKd~?5D10yI17wOX>XlHmS%qMMdEx6dU9sk+U-0Y3mksU*FxZuJjR^LrYOPbJWI(3ZHc z|Il`yUQ7Y72d~Zp(+@4R;ATCrK0R!fu~jeK&Ei2IsQ#f8RdN3pd-!+wPXT~?W4L@_ z6Tg5!VfSl`fPY~x{znm38KG^5$gSCGJIsWA_`Sm@V7|Es(<~|@y23TC7 zr2m({!)b>UeEEFcgv7u1<^SXFo+olF_^+u)5-x<5)zt=2S-g&*0Oqftu3F|8Yx|GK zB8?CMkZhC3em2HuG3JQXxz&3&u}t=;Emn*tGqY4G=@IKfTwiAc3MmaU?J18D3~L3tTnftdEw2aidr90{K`}`$!Rg5EjZ8SjJR$;8==tQB#u&E1`;gNJz<0 z{SI7@U#|wVl7N-$T_x2G9?c?dhIl+kDDSsWau> z{9KXS=5;A1A2virF&cey1AX7$65Ya~Ql&N!rNA-43=HV0gQI zmn*OoioA}2OKZp%pf=YWAOu3MOTDP%1~)MKm8xl?rT}e-3)a#1g^CTvhz$p zL&)Z}N3WzR3Z@H^X6pe=M{hAO*es`o~qha zTk51>y^?PAL|T_i-RFHc(Mc`f>mF7e&7e9RzAG^pua(G(Y3tBT&WXLl4w?a8hh`&K zBU@gbwhz}$Ja#jak5x)H-tyqx@y~P{(pZdM$`^3S`?{Z@BUpY&&%N;Z+>bW<_1-{_ z_4Zj}56*PiC63yU^!=Gyd*$ zk$P_Zg%1>#$oqCD@-*TTpqm3XzrxaK66wzbArgV&L)C$MP-F?rS98tTopA z_28qk_Q$Y75B^l~d;-hOH%W81wMGS8H=8g$}>L_2V z_t>C*SLqSRc^0AD%To!l09?F*$ z%^6vhUDod(o9F}A5?>M@XW9V|pXi;6-9`@M&Px{c!*wnN<1kSx4-CR2C>$%3Eic4`oD9OTMm2EoKf|%?)2=v4P&ifsgk#Tu z^eQBYbrE!s{=b&XVR**y z*m^>6wn)mQQ2t5!tTgD^*ymCpjoyCcYy= zT)qG_IbN_IkCsFN32&cdE_vD_xl<+`&mFvX7iZuAhs>B`yB>#!)4T8yozpX2?xg|0 zf`N5`=+3>Hid~>9?}saSb0i4Yh#P9k3VjnmQoB8hKP0zOY3 zl?ZVG`bNG}n7B)?@iPNG^M2M0wgJ;VN5;9xk$2ns6Z@$>p z9wd1s4;#0jOlJ6uPqp|Wkb*Bop!F>yMuaQvr^Htv67;b*_>HR1r~;PuWQ*g>W3xzS*P;}!@o(FfCO%BAsg}h9-eU5 zZ`{`6g+8*>)`s!}>j4i#%`zXygEVTwUgLdZli^q@R@KWMu&xj_XudQX@7j3F(@Ry zj-Y4m6FQ;>j5rUR?b&}t4XSw%TKM~EIs8D{^W{C!@+Hg7b0MBLTTZuL+Mz_rS3i!E z5XTWu*FIZH^t&1PBXc;##_&zG$=-wDUBD&=ny0p;jtM#OBgRiNsn#NF17{!ZlnJ<% z5i)&;{FE4;n7?leSRz6z9@cD1AW@pWkWE^i2gyZr`F=roYP>p_f?{f5N zVZY_32{}{>>|sNl%4Ut$1}<5R4;5^*w_f#LsI<~63Vb=N=%~ygm@NV?6(}S7iZL{p z5u+*|(Ce2iU(%AE-+I-GAdb(=G`*TuOPL)jR52^Uyf)T!{D6TL|6+iM%^*6uPc4jv zRv5`s^BH(@M&Jz{fTv~^!RB(|!miLUqQ1%wQGqs6kcDQ9L~cJLc(;@qI90JEpb6`!dM+*fyr8Z&U2o3($U zf+24JD(GHw6tU*r#+}G)p~Y2zmgqYj@N^>lrKw1oj(_5XaWy2h%Sg>xdlnUmA-7)_ zYc+!cBUZt;0QVNDXq2SV?9HbD6XwA##y!g1(_^8F9~T=Py3U-ZBl3)M(hnDvn{l7C zP3Yk0n_ZQ0QzP*1ZUz|1x)YkVKY{QqE!{){RRJXV6RX}=Y*;|=5rMJ2OYT%1OR2xV zV*|3U9u3<5rzlJABDY(P8UQGG1UY}bF?kt`g_hDwm$oRGhsrR!Yh9JO*BGbYJwg_D z_KKC;r2td-WFc5DjW7u(E%won;=i!jsiMgcqWm}q&qzh|!27T<49<1DW>+Guwv43s z0xtJm!CnlY!rak(=%=aei{qWy$)bH40RYq&{emJp_ETo%gKGEZn!Q|A0+pBjJD(1) z?lUcykPr>rt>wZQic@~phyGsecMqd12%JX}#sqoeOq&U@H2+<5_V4NJ2oBX_B&zVi zM$(kr4meLrfzFeP?K;eYeqb7d4^fdD$6O(X<;xTlRJlh7bDN^ro;PZ@RGwijix@pw zFIlmZ)r=P4kd|FJEL^rzqJ1z)IgQtM=&8*Wr$@2wYgWWe{QP6vbgQmH;JFT#9ykVK zq}M9{>W-l4d!2hYM8SpNerusQMGvM$VV_yIk~?irnsUC&tDZlSJ2c6*miwA{>jV~g zO*gr=lg+x#Fmr2je;Mw0-)0TfQScO&#&5@MJazn~w`*(sul05l{|7HG z73G5xzrG8< z*_8H0MaiD!C^1x8@$3MEzOMDI!k z5c*{{4^Y+-mhHF&&Gzf--8t19hdbsy`Cj937FoQe}RaO=5V|d(EQ$?nD zl=r&OZ23(DEl9rxe37>v{18tEB!=KKFU_Pg`(Ppm0~ zZePdB0ax$1+H;uxn1*rTY zdYQgI^s&!m>TL7WJPI4I zEXcXa-Q8rwyyb2~g$jc3V#n#uF480ZJit1duX0BD)ikF()&Y&Thm21UrMoPm1OGbc0tD-JH zkNdH&FNnYP9dN=>T(Pps{3LUx<9wprqhJnI?Hb^Cg}NEzV2UrSef+j7ivT9!g?fi5 z&6X=6!}lB{JAWzXwy(tT#9dKr;xbXif)szTZKepdv>==m^fE-`}sGJFfx`48zH`lQAu49e!$+U z>XItN(>ta6k5&MGJm#j-fR6h!#bBm*pf0<5>H1|DQl0mPcdc%r z&ZeId&6<_ZrfOGYhF2WNdA=+^YF-5q+3dm z@SfiEYZz_wjV$^(np8)EUx;6(h)_*$v(&rW!hvYcFAF&eeSnaM`7%!cdCJJKX*o4E zhCJ#i0ovIg#&76gK+5)c_6lAb*JHGbyK+|^J;7&J9=-g}acPAOXTL>y)-|B@`gf6@ zg5zIAdU7i2K&1Cp@P8!I^L)o|qzYH|i`U$%28;49yYIpG;@?E;Hu3s@r2K||uzB8( zIk23C{BG6b+df}`wFu7*z`Y6gnh?OI7w10z6TOiyZd0%C))Qb+u*W&NU9VIPWN3}( zW@`BPauw(=3AWd6Uo<~z*!u=_?kVdzY8wkKkMA!}$VNL7^p9pMyEvYC_=D_vMwR>5 zOuLP&xW=Q=R;Cu>`V2SEQtjKM1>7V<A5VWJeNdsyt=)#f0hkHQq%w#gtg65;+!0 zmPI|}4%5~-e0$$YV;eFWg%_LuI?v39B&5$$+quQIOYexaT>!{CroR9^MzN9RM7h`S zW&Nw&id*+f?A!-IhN7%Be~@|0yMvpe#yuCr1aQA6jr)P>ditjwkc<{8&|oNo_xQ4@ zRiOr21SoW4#AOcdZFSK1R9fyz*|p9IqXYMovUimmqn39=&N+xqXLWivbZpp&rFsMp z0S(AOxJGS%kv@GW*^FJ2n>5v^YHrRKZzg44Jj9!}On9g1hhgeCe&*SomXQmt^zT^5 zNQSmEA*uLn10M&Y-%muyN>cNI%g(V+IUy z#!_#F9;xLV2>Y}D8}@e!Zu44Sfc)qk`FVD|8@{tG9vXX1zm$A#?*CBoX?eW^o9}OM zFujh3-X;Uo-gtBsatfnL<+WX}#Zq))!dOM)N&&8-X}gT`G9Wtm>WSsLWwD&bnd(Ei zL(SUd`IsLY)_43WurhH*orms&D1An!(3#$mTVLdFj0*)ryFpc?_kNdf|7CARt^qH5 z$<2yuJuo9yQAs*HpbJNv@?(+`i<7~Z+W8+Q3`HqT2~K~sO-2aZ=%606 zdpm(?J5_wc$?S;!(Q-;0hufXHJ2OciSL@v<`@PEDcMsKjY%poi z&(-!ZJifbL!;qdMHgsq@pgEZRY{Z_uu?uQ14}sj98j-eJ*m>ay>|7%h%J#>0T3n>G zUi(grF|UpUhmLSkX?|B;!kG07yC{ot;?`pECr-V-+o<8iPUpt`-q)=BSZ)C$foxs_ zLE%yImY>5JzkOUC=7K5O|ei1iV7@vEF zW`!ely!Rv+FROMtxjuw|-E(#8yD9PxKLyprHr2-qQC`$J zrO#|szx#JM8xsJ9`CgHUTlU+F?)qBf1sn-*84eO1th-@pHf-}@S8ec=6=FOC5Z{}1 z?X2w7;P%S2r8)!mcwa9=5;jEVKO5FUEtZ#Dv))YDR3*bxE%QBKx9iEgZqSKSjDAHy z#GP=GhRXY!idr5`9FjH^rOaXW_#V=d7p%M1IQCCI<_;CQ2vsyqFD$qiH{U&x^zbt; z@y*%w-6)c}pzzN2^6_xI{Pt$EX`WeP(AMzgf@xy_`tgH}$};QN#>L%T#N&@8Nl(te zh;+I@^T(-nRJrv=fX!z3gpXO>eC6?1m3y;0r)^F?)|H1c?}uk*R!_vgaNc>m{=%W~ z!voe)a4LWZ6=Cy@K}5Lr=@@&t`X(bQCZSEUYkRd|q#22`0P!OtZJpx}Lpqt++?wv9-T_FR5{gN-2P!QJJulV)3wuit~5cbDvcf5=E^>vSn zPsAwRH+#do3#P?`@z30fYeFyrgAdJkos<_IDc-yp(_IH7`XhzJ4{2o7nK>)IH(jfI z=7DdkZrS^Qv~&+TlR)i_hwTo*)3juT2*BT&+-!c}M2G?kl3%-r0jnQW zJ|;0!Kz9bZH*E=yL9Y(qLz1+I>x=NlY0oN$7*}9p>$6~h)B#QU{_`Q#(@zc`yeO_u z65UpZFSm0yqp;JLhmBfLet6;+TySPtx73qZwh|zV51!BE)sr`R=d&__- zx2+9S5TsNP5JVd3mhKdh?rx+@8Wyo=P)P~t?r!OjE@=em?(X)^wfBkd`_A6?++X+S zcCYpFt~cf!;~7tkT{Y6c_CkQIma~~(XeOYu$ZF`7li}e!u-a?v>AZ^mEnsToJ9u z96w%=`b1poQnIi{ve>r+c*59fo4|ukJE|G>9?oy%F7lUS2D? zAcLu*;4sG?AcDP}lenq#MjGDuUa0UC4He@)@75PllHU96naj-i3XA>{78`7&eg3&A z0i?jP0Z{1A6j;D)?=#4~U7%|fts#sEOtxv59QBBJ z-FHpb-$0Nn%RC*KG;%{y*XNaYohT|a?Io2fHAO2C#(0xDDv|x?nE<7 z^^<&q6Ka|#e52nu&G)3VI>@ObC}l2{Hw>#`G{EneFdE=+EQ|*DaA5$X!W}rwHW5nxv`2@?zUy8jDA`QGb|Q zPYjxVI~&`p(Kv~J(qti52*`i{?;ZdK)r|izs3u8fY{{#tcu8f|&00N>-8|U|oEg=& zuO04TKILrI5|S39x8y^?+eIx6ARML>uu;^CcvuF$ z60u1525UyFkAIl3-odC6Ew@IRbDsRpL{LL;$FChI36-TMQKPe)XwmvS zF*BLN?27qI-b-IQozRJjM2)*+?hiJck0S<2sEJRfZ&}0IS1p9yhlbBgkCr<}1Kqj8 z+)MtGIhTg>%$o%vno$4u^{5n6F%NQ|Mhi%36x#*rRm`#8D5_vEP-xgbEM7&8AK2*c zWr_*Orb{G(@5c^qwx=VVE>eAwX*{AFa8%f9nyr%YTEn@{q9D64_zyq6yvGPV>!~jU zp^dFeMMg?G5gL@j988GuzrP?7a9G7*g{i$&Qh7r|(4zc?wN~VRQs@j3%Fyr=3XLdB zJEHrdJb#|~nd|}kBeHqdl_$R!l?YZFCw1Lpki1{!Sg@oHCFohyLJI1)#l+^2&~0d* z5@}DIO_t2+0&2h|_r^bHc)v&v0T~DFw#^3E8!dwrqsQ(I8!yEH@h_CsyRi9R27(q3 z;HX2DEBouA%E9xx`4{x^&A zuXvEKV~>-A)6k9ju}}M#9*+M(Zv^M;`uEn1KEF*5q!+U&D+KS|9vv+zMvGz~C_Ix# z&`=P5CM=|U*zsP)Na5#%%F!DfCP&i2+$~{e+jHIWS44Ilb zcfj%ftneF4jAK1jz7Y#QYpDQ0Vw@&xXk!KnW7VX+QJCQyZEM+GHUcO^`5QNM>KwCC4xl=cq_AycFnp z)f#iTD@d8A)_=tU_eC zvt^qst;yzW6q(bUk2a;WA)|$PMjR=pQh+l7XCB?(K~Cd;xf>^hjS%>hP?D+n(y&~^ zdcHB<;%8C(>v<3+YqruAdJ1@dMj?LQ?N50_rfWVhtpF4qy~=(~vaiDCD|_kji%UQ= z90Sp3`7((dY_5lk>Is(sx>E#Vu)T@`wNlv_S{2$F%{yL~{j9kLmt4P?VAQxrm6CDVxxy^ui@O@Rc#Q+q_>t0igMBt-t zHRqm~m-cO)ag{6iJ~dAowI@D%r)buKo4v+Li9zAxdHyR%^BXoD2i`0o0>+S%ug#Si zh+2$fAWncFZp%hsG5Gb+&wVKXHxH=YG*;BAS^-OF73ScskXhh#1&FN}WshyguA=;ICiNXj1rQ#MRDfl=B*-JKmT% zCP6L7_A4jL8)~ORnI^@bnO6KhNf-!_#o!wq z*6_v21=YO6u*zG2sE}I!NgbqzRMrz4`_^aK=xws8c=z~8c4jDIY85$6E`fwoy&u}ZSs z0nU5VVnAJ-1+3Y}fE5w_UOA`bPkKuTu#n3I=9oz&9wk~ejOi&o{rzFQIKmuO7*Str z`@b?of#kH?FECE~&_pWuOYsFNScO)k$@2n6XCRZImjG~LO~vDZb9Oq|HAgF}NcKb_ zz{@*=Pmb^CO@U(e=T~yJzUD;C#cHJ~ggKLAS;T1p;r8W+exdrjj+;XIJz@V?FaN#v z{bNk>Ij&+V<0txKm(QzcnX{mF#Jmu zxTbPdIqJkiUy6Y_6Iy;K-50@u5x|%Z92ES0TeTd4a}@InlV1c-aI-z_kbgPB@^5G& zChthR1;8<#m}oYwK?B=9v?}r;HRT@k8RWOoU@$wg3EX5AVvo&61+ung>nf!Mfqyj* zfLjP4Z39m^f(g0p$qg#i)=u3X?FE6=VFYM$#DV%-@mKHrQ~}Sa^(H@Ly+8Mo|F|}G zm_0Obkao&9mI1~-+{8evIo7gAIo(wF?y{JqP1->hDvA8GC6zNjf^4bw*r!YzrDv%| zg?d>vzd+p9zy(Xr)gk` z6_FDGu8)Yxz$;${{Sr;W6S6e5G%Jt7E-<0n2F{wP?RV#N5P3FF~oe{&(FThZZi$$RBKV}^_^ z74f-km1k8M+;6c3^Q3B#PcfEE89aI0~gm{oyHO{a>!IaOL{_>|Nn1_T)RGbmA;Xu>0l}O~rh|;(Dmh+kdpuEd@I9Ym0{}yz;!Sty8}S z9GOQzy(OO0v$gUAk-9w`{00!P#0Ed0eGJ|GyOITi$|s4X!qe5k$~)fTJ}9aQao%8Y zv(0X`vUF^hajzj&=|%HdE_1fsbcO69C_c%j2!e+3oudpYuR&7dmme_a^?cxSsmNS3 z@aYW$a$x8>fI{8xXE`!gOu+MDb`7$BjOWrMN*V9xIfOh?JqXpo>H!%>1uMaD$ zwb>gtXg&XY?6N;gQ~i~+Xp-={26D1Kx&xl7-F7r9XiKPLKVHDw$n zi8xaOwQ`gyt6z~M{{A#TUtKFoB#dC9Vlh!52J`Y{!-W&p8-HpnDwG<$4+^HQ6K!2F zeNc7|TmN>unQzv|9-x@;m*Jb^Xf{q;N(DY%lnlne$`%=4^Zqo-LB;Y%0z1n-pjwb} zt~*k7P<{cP@08Dn2vc?@3+A&&1frncGH&#@n_-+=EDZSPo13G!-7OkRom=KxhSDXgpTr>EXFR4 z!_|F=m2|cs0z^jYAv*HUrRX#b-RN||>|fxl^FZX(%eexT!ckB*#(o>I)O>UPmjyAb zqDH~6EjW%5f)lPRQeYJ>mX$=w`Te0lECBJ|{@ur~LNE63xAIT?Q6W!c1S%n!M3Plk z;v3aOlXz`v&jTLphAcQu>NoJJ%Wju-;D%>YYT>abS7+?l-8Kx>@-q`K1ax_X8d=Jr%x& zgSX{6i}6VzzEu|7y!ROVy9bL4c@@kWLj}%?fNgKXw{#O_=BK0B60wZ779n26I>G!W zo8FFM6L|&SucG1LL1K6&rA)$b1gR);LMezod>M+z`t~PKIWXmdO4X-{xF%{@gkiJm6DS+DT(bgeyT`8{8m(5KgV5)$2>QZQdYxL-i)^;|AM zbVc`!-KwgAaA3I=f>JeScc;y1H6{O6>1x}Y!+N>{-kuOSmGzHy=0CQea?Fp?LMhUk zRhFjPH4Z_QPg?fKc#G0nX`-FGq;&|#e&%oOff?FC)}WZoJh_p(Qg`m-FQvEB8ACa^ z6U9GhPzoA36V+d@X%meKpWr2QgPn(DYIc93Ft*(Yox`F;Tk!5rZqO09u^oNtz9Tj{7)P|WzCpFQYD4iV$!3yW*xm9c zwyqn!#N;`3+D!>VmTz=5qDH3dMzr)5(GTNN0*VL4T4sv^pkGkVmW&ChZUkg|^Q+@E zN3dxchbXDSlbouZH-cLSZKF)mEdiLl-l2;Y6oc;qmx6tO=R%b8!F=*-n^`!6>0JMvDKi{+ z=UP3lyO>rQi^*I$;sWiuidFReK2Km@a*X!G>4*5=^&uTHpfuxtPNQdP?Z?cy)9%9UZznp8)m&t@5Gnw?we3OO2*}PRRI62^^q@>z{;L3>N#{d_D#}K zdyo=X`Sun-l!NhWz(6b53pxaypfP(ZSqe!8elv~kp|Nr z31Z@ePT0U+F$Jc+tBa?xs$KxKQ`U#|{LwDR8~%fa0|AXyfb3;6T$SiFU`ls*QL^`Gx6Ogfs}9rMv3x<17IgBG?i2Vit6JUvk|gz>?25kd8+2{_pVBeuQisFvW#wv zJlmnB-w!~DRg^w}poPIIoH>}xD>e4!SF`fRaPruWzkbb?mEpfg_&E7EaK!Dq8ZJoB zY#BJ=lW+FC-z9;NVe?z(rna;81lkb}4rJmV^k*hi@9nPkLPc=g_G2K9XAca#lL)a6 zNggOY`wi%!!*?g9kMnPB%*2zp9r2C9WqKp7naAxKg%UoAUcAcf*&o*0WuS-DresKv!y z%MEkm2I`4S&Usf+)Nf!J5CT3z*~a}}pK;VSg5}Q~2y)#{s~kM|AB>S;92%BCz>hTa zQ@w56b;&i>Ure7)5BpWYY`u_re@Z2y$#u#wuqMR(lmUWVwsc&M=eOQ=+FoYRZZ@1I zT=6)LJ^|Q?6X=1T!8cKyI8D$d=U%;iNb}d*Rx5%C*1L}~Q!Lw#ApSDKL|Ph=*ulg1 zewdUZ-DWcTc4}k3;#bCjnwF#f9>N57maFhh!WvF7=6TMe5}us7C2$B?G;y%3@FG z-cJiyC87ARS2a$o7Y3>v#yk$D0gY2^+XXP)k1Z59MD%|3`ma|>Zn4%HZ|%~vGPUEa zR-WfdFZgt)`{ z{lL!PUfq~}CAvC>zd(=v{dH!aV>yz-N06%z0yPnT*J=Ip2(+|5Jsev_c@OI5{`pUT zSM14ippMCH=P#_EEy&M8y7pu4w+vmh-QZ5_$(uPlApT z5%pg`_=~(1{u~YL zZ1~DWMbpzuHn^)P)LX69k8L5|mi^4oIH1^Cqe3&Ez9cW!v`|P_4J1-amLrIgUV(f2 zPAk#|yv1ywYX=JCa5JzHQK*gsFXAom4Cl0f3_dp7MWL7M7T63r^;I2xN_dG?2Y@P^ z0p>tKFox($UT3RM_6lbMYb#*E-2%<~k83a<9kQ=O(XRQ3!Uiw{kc>v0z-4Dx&aDT4 zJ>>>xYp?>#m)m82#BhNqjB~#uT5IwYR)6!%r7xPsaXUX(5mczFab2~r!G7?Mgqw8r zH`qog)B>CbFLLfSlC`$38P&^Lp@XssY@gPDB#O@fgltaIn7RoleU71Zhiz!A9n^aB zIV%GPd_EV;Fh`mr%U>17SH5wtia)*A9Zh_h#n-YTHk3M)N!5CX!LJmva(i{M=J0f= z=6F+j1{eG>bDOoLD_x@N^sF21$zzygZOz?S``CBX%uDsjF?>3?PwI@umc11X3DN(= z2|Z?9fPqWZ67NmqA2{JQrB(Qn3uS&8i4(WIh=59Q3eUpj!!N1F7+P{cJ4T}!<*%aH z&SZ4*l6gMR&O6+o_vX^71aEt@^%)yR(ks8t;J*ho*(s<>Mge)r99TcGz$hUx_h+SE zVwxBTxj^%q4eaW3*Ai1xeYix=mP@4T#Y{6!>g@l8Od$ z-O{#+vBYNqnpx#kP73gVJ%y<>@WWq4qr?9bF*I+4RNDZgrpj*RZ5#hqH%tL*Z&2_j z+^8=oL15?mb>p4(BgQ`Wo8?_!pj?iwcR8@Z)o5~aDp1akWGa@~N5a?YiXu6A(ZZ!vv!UHue&kWs?tOK@E3txl?=I0JmkeQ z4HfAbun`_8fQ~#bEzLWOYZ>_pBj_z|)lRxhn4Atk+va<=HGZ;K45z^ndK`XFnXmyw z@?1f87N5W;_?TTt{(R6`SQrB?K@NIP+S*mV5@RRL!Cr9G8L+G&4Q{{m0GBrpY}(Di z8_>hhf)294trpBeWduC6Voep)r-v#FKu{zF`1OQyAT*H;dh6;2AgwKcIftiV54JJ+ zFvDIYJ8%?Cs4d`*_-bPuX$gj@L6I*BnT(4&4HkBmZ9YKuf@-H{hhL(_S%j=P&T$67-ivPfDPdxtL zFk2F23%}ay(4L=+E?HQ=lt-~493?fInZ06dN3;_kHLE0sw~cY`Y8hjWZzkSUnre>U zUm(KqxA@^xA`8~W5;1AOakF)k5(qAOKimWiJMzX`(e_GmZ2*^V!g?RjVEe&TPYuY? zUSJm=OX7Ag18V!x-9FMF0>hvn?$_1}Ad7%LUBP-(Gv;6zSjqER?6Z1RyIhXt{S_H%S6AB~T&Po!bUZIGF~}7LgM~Yj90s|4 z{8!#}++m2L8#BF<{%t%|=O}tqlGWVfOF0h8FOlDu-GXLIZ2?$e$(gYgzm5!P6+_t1o&tScq!gzpgxWiXuTu!X(hLy#1WA z5fnZkwZy;_l-gO`evz0FAcpA5KXqmgm~=UUNg)7-+VnH|XyNK4Zd6NkWx%QV6j4@n zl-EBAl8H(~L`TAU2FrDXSx6iw{5GQW4nQ z3Q#4T_M1>eR+1Nt3$$%0(@yJrQosy^MV)blJn=GGp0OpY1&aY!V{cU zH_8Ha_a01JP~>X@rCHm@EG48~-j7lBzJ=j)%HDrKfxKLOahZVe+e_rpaD&T1NX~_C z2<}}|x3W!U&BPG55d-KsWP%g6yqI0yj9pbK*C7w%&7p~+70nY~^eohFpt5v1AX(kf znCFUK51C-sXHHGl=%w`O#rUmYUEs!?<&FindCetMjd?bVYIH3_;`__6K1K1~;H6Y7&Gj^VsL;S@2wz!=mC8PIpSJ<}Ns}NIf2?v$%Njio^TmcZykeR+Fl1I7VWZkuZc+I7ho>V2onmWVD9jX2Y8&iBie&Qi#m zyOt^?>Rb|1!FI2jsow>=Z>9%nikPL~2!;e$=qi|Md?teG-Mv3WULWgbNp z3pn{*n2BFZ)|T@ey@S*Clr)fbxs=Xc zdkW;8Lc?RV?LRf5`^$4Pe7f8o#6)Xhxh*Ixkwilu6NtJ|HG9xkzgU;WTb^f)@V6gmdrXz^2o`MAk)<+F`hZzl{%Usu2gh`1wG$^lLyZ?8nM5D zN7v9zFfJ@M?c`0|MLqLLJPqJdF|Xlm+{M}*e|#-u#Y4YQEeK3KG^C#Nv4Vq&`G)OC z$6SmFj6rAy?(|2SD{eiQdZEmau>2!TNA1E3{&acT1N_F7Wo_h+J=goQg@YsL>KDorQ$||}HDl~zMuy2Ulo8D%inF9}`swB$eYFZXYIo2X znJRbO>!GbOIYnLQm%6X1oX-P9fn28+dT^G(_YJkPk5=XE#q$$_>5e|*(Llu|3Qz48 zXcIlWX5X-`e>*MBZakVniFSE=*bHq-i2V0^{WT@?i~7W;Ch-EXSic9Po+y%%#JtSL zqLPiKO9%K4>)GxvR+$qB7@VAf(5PNA;8j5S56SXWtF-j;{_?A)W>9q-3!*J0RV6=> zF*9Rn=9#UiT-&z4^dc1!%lRi!>{RX`dF`g@`fx1Xf_cf=p1{Rj08kpI_8j2qS*W3ql zwOFONCSJ?nD+<|p>U`LwJ$!u1=Nl$R+7Wr?_qNGZNJ?f!B8u{h>(xkQ=;>^hXSN-2 zddi2EyKhzvm!?Wk2_G3CR(|*d*&~0&`61HNXp`o}aChVjOg6R@&vT8dYJ@IcwiDJm zlDnY#MKsc*W6DZD$ZOKp9M(ZDQD{JVpAcbVl7wJ%m+Q!m?&t|#T-+d*8~+HJ?UPEE1+?2YJ*&-U7Lx#h5%jIg0B%cTe*i|zKbrE*l!tyq?glZh z0K>U;6s8pDtu&h4 z28$0E9QpUu^tjsRifDZw)m>)IVJ4pU#=J5JYYQbAwG@20D(R=-(PtPt2d0P`g5|=w zhNt-WM&Af6JKp#ZNbsF=|Oer{2WA6~?kQWBUJ!oxi3b9@v_1ltW zDe9iv0Ra1J9N(U$Q${SV>I&xc-ZHCmOf{bfnlkd1m7s?)38k}!oI&@3BxP{(>C`vt zL<;`~7HPimT{Z)`wBk^=+Bv{Pcz=S;gcPQ)#JD`hz$cZhwJD=&$V@~bi-f(lZ+4|fldf;pxc6*Y;vQ9W>ZT((JBaiRhb_lM8F^}Cl z7?Ck{yZ4{B;1QvKA zf=t<6IF&W_#VPJQezt~sw%8!hlyXWRihVPv9)~r@xa+`L0=1o-IpA{0ZLdy+v?ULg zK7zbRu@fY2Yi>b+$aeEHiD~FY9ATb9ky&-6H&EEW`87@k#1F~q$}<*(U605K`Y+*K z+~w93vkeA7-d*k$3Ma|eTU_&U1)z-HRPCr>>wETt+YsBL8^jyc#?AH z^_X2TThEc806}v|$BhcC-)FziE3FIY#h4j#Y~1|qf&iJHMijRtJHL&xrkC}bHM$>o z&X{d!q!mIkM>tP_ub<-~kd!p;N5;Ky9?Y8PnYg)$kx&-a(p?Rp2pW^7ETyn(4~k zwCqGb^D(KeSLN_NbE6Gq^<-BLXeTOEKa`K9u=mg5-3{H@Z+(cK1!fsjx|!nPIRNce zv9Nn@tX?DY^k&2GyI9wACMxHIGO9BEK)2dtSNW;)k^smHm$H#+SCoh?eNOGT=M^VH z3r1u2Wv{-bN0F?YfFWcogCAuBGyD4*kZH2K*4aE55LJ8d$|~$}?z%MRL$ekz&a8X- zVU~C~TN;|p4A=tVFW8p#-O*)3#l`&>n0!xD)vhB?`vZ;?BTwSDW3^MMGG3TkBwa4$ zFTeHdP!qKsHXPOY<5_U~#TA5u#lhO$@afVc<LJ~?bv10({@nGm9qW*fFQLyLXN{g zu4-m$VsGGT(pSm#o4Tud;XHm2%V0l%evXih zf^3*?^ssM5eh&^!BrJ(!9#Z@=H=HhN4lJcHzXNW@ySdZs-ZyhrQy6fR>}7a3_ut!1 z@0nlw=zLjfSi1r!ZNE@I*Kfuyyqr#|^1?t+4W#$)m3-hKM+^jZwETPMMEiIvHt8Fov?^J!430 zWYUmw%jz{>`Zk_PQvU0epxn>+X9_90i3#2JX&b< z(2vnwq=}SKfk5!`p1>8gHMStcZ%o|5_7@k3?#kfM9fnDxe==3$c2ck05h%uZ9uL*- zw~XGmJoBV)rjFKmQt7_^o1(NCy?u;MP!OsRV%f5%w8FF5m^B(di*7KZ_Vtf@ZNZ1= z85Te|DG4{?`NlJi4f&#peuMl`WEH5QN?_jFJU0Hu8krWVRf_WTnCeFKR){K zI`e_%s>|aafY_viY5OIW@j;%Z=+rA*7IKOg3pBe)J2sO~H_q;nayD|inT9riTa=ge z6XhvFU!81iTa2kTVSO|i`Kj!H(A|}ALEUS*@0p*e_^-m5;QyE%^HmS0;Sil755M6B zIHiP#D!H{+d(I1OFeu-GMc_E+tGMy&C~r{bav|NE_6e)+t&RIhq4YN`BOLh=9)b*p zsHuaeBFJa09VMH#!(E|m#X1eDCQ5)}Q?;v){$vf+fz#Z;c;r>jrE)@|?#Y9=#X_W8 z(MUAL!5id@Bhc*_RmQyaBYtF&1OcHXx^}8e9J-K4TY{yh6kD-qE7{~5tP@^!0&;n7 zfq4IVeUwp#WdHj5hTf_J={q3RHi+c$tuO}JH;#afuKcMn^G<)yC+ATobO0#<- z6#>zmL$~`OWf!}_zJEK5p7ZC+I~ae9J*1slDg()wvs>_rSC6d{#3qQIySAEM$rFE( zLb>WmOuy|gZNpyIJT4{7@ zUPF`=q02|bsTtb}4!32{H$s&k(Dhq3?h!8wM?|FuAu!tpV}`Cc1|=?Zo%`%5NwcB@augmd^&3 za@p{lepk2=8F?7mJs7mK6Pik|X<_R{#G$YwHnza6+M1BUAD{=v4vExUw98dmp`VFm z6}}!y_L9(x9e3?@TyU$-CEuv5V3B+CdJtPnkWXbcFZ|L1d60pG(>is_v#>oFFC8WY?zc;VtTqn4r zQnx(TV^WD3b+>LW*X4Hewm~V(1n!P_Hx5<^X!jTD#9P{ ziRqEO`I(9|!O&;11)tk>IXPV&@oE@u3$z3&V7a;Idg(dn0&fGVCQ@^11FKSr%D%IFX|hh;VDyUfu=^{xYa!RQQ*|D z>b~leL?hQL1zGd*h8feoY>@lOV%aGZq7-=p2oX<4%^uNtKG%CY;3Fu! zpUFI-f+k%5?Ty_Pjc_XFZQTl;*PrBhmke9z?i)-v8 z4|!u-C#SY_C}R#UhyeTp=Yl+`CP+`fhXotGHD1npA z4GJ5cfLO3&390U;zWu6HGV`Rx=Ppb zZL@Mq%*oP0(wFui8FM`GtIG5is8hJz0D8KoX9s@_n4wBTDg0}XWSNtFo-j`cK7dYR zR`Cf!>Q|DSerk;J!QTP_45b(CAi!GRp@;xKHTbn3-7o$iJpl?0kp|f=lrB-X0M#{L zDS@nS+z<5zphkSZHPn_U#mAAJqESh5Sx1I1u=O>^HJfFQ%Eq&ZP5)4vydH@TcFXs@ zULkSXV)mp;L(tq*R@;zeQbD>!Y}~MzmB-A3f-fx?S#Js z*6rmBe6&arYB6#!=#u*8ap&JjTH3FSZaa8>ub7~H%7ZHr?4;*+BIZC}zdj&xg>PFo zCf!zvPPJE7qbrS)Rr&l&YHC_kLrjQmz0M@UUh!V)<>-5f`fuWJb1v4T&$G@)qEvPq zWqYGji|6*4qRw9Pr;^@3A@dn(`W&TcN` z!L_nE**L&x_pltIiz!XHd@P{(ukzUA(8_)7tjY*z1MWFDsmAN71<7Nd`a{$@-u zu%weIettD8x6Bx?>#x86>{SBxr*5Rr^{>k8}R|q!du7X zYbdJ?=ElH(1)Doo^iJxyBzxeF%n<)s(tU$M0gZDE%mv7r%JlON;^E}R>~dlio((2) zey~BKEMxY)Kw-iS1c8J>%m+-mdyIoje{3J0ExmFMK^ecx_iVL^alqqi{vO2=G5Fkt zoWqWx});&C$zkhstLtEQ1kUj@pU;YU1RM#>49_J;E!ArBmO7!mo+= zGcP);?&p49wKh<*CoPfPlMZg`zR=V^+piVB@8VaBcufS~d|NaeRygWPsOR1lKeQK{ zdn`VyA{FI~Cs-ttvv#rbGvn}s8c#d!5M9+6jtk4loXAd}tk_!p&ed-FAdgAkK^NNR zWA)~|Je&Asq_f{(u9rTVaz-Wax+l&W%ohmEJG&I{R^|a&Evz=a@3}J_>-w`SJ|n|v z0n&jQ|3j6ZYG$=s#hTR>%D)VsPq=|W7R%4_#z!B$#y!tchhI97V3^46I*L48cov9u zloqojV)hk>Qh+$tpxScs8}Rov0{W45Otcry&}C5nvmIjSu}|3zdr>7jMpAGjl=&0t zOCj$YO@Y3HZw$E41vzUDArqyDs9S%M1FkQd#A=XFcAh;2|Sh^4!Ow>*RUy17$9Rgn_$ z&<#|wQFb{6@7t8JpV(usZ|vHY?xQ$$XuslkTGNryWct-$+SGmlmDRnX#C5%n@K*i< zU*e%|b^|jEpcO7<8uSZc9fP##Sr|`nD0eY6qHg?jeDFO+geXbjMa*Q~6!Uil&qj=V$CLFR4*p9b9;mNQ zu<_fn0#IZW(c0`>xZ_*_6^#+i>Da!F+z%$t5$9=4Y64L@8vUZWps$JClHVYaHM7+M z6RxtEf^86YLZoe2IYRQwIFwF0QGI#LQvAl2A7~?XPRHb8?{zP}(BP(5e?ZxLs5KS- zZOI2lvqrl>DCrI-PE|EMO`g9r^+@fgamyl1PS}NE#W{Tjpe)8=! zVfb3+N%>2ES2T~#YHbGXxhvl1zW6G1 z{R0A&N^khBe&_QL0FTuQ>GBQ#<33lmJtQMD7G3EBt!Ug04-+s}N-@xhxEF=(#RaJ} zaxwD<3LcQ9TBO64Ac8gVa%{i`;LZ8D)$VDLoPnomtHi5`7tKIW;C+*7F43#!r?%94h@&M~Iq=4U z*&n`As3d+q!A(7HA3znD^rd;?e1wVN@Ud#|4lshASv^A&_Sr?MMsxi(tzY@(h=eRX zK-$6~#Of#$*^ed#2*2K8iHX$8h2nEkrcV%x{S4#Nw=n{lug6iA=@ZH4`Ax4XcG{wY zUCsJJ70YSN0Hb41u0`jUT8~s*E@m)oBnVB(6A&lPA3Bo6l8(EfwrVnfKDt2Q*lW+B zs->#n9)JEVSglB1*bpv|xjE*p-D;~(F|OD3b<>A-+t=|!eSLfi^W7R#=ZH-oR)|au z`sfbK{pM?6Kxku2+_}!|iQ?>9yuEOJ+KLzxT?rUxdgM&jWexcqgF8sKbzXQ&?7sWj zd|DB?A0(%o=@zx!5&0dTCVu$l3hi>j{$shBM~6PMx}jg`7yINFan&=FG^;|O?fvk)kjIJL`~c#-`$NYgGjX9hFeWp*UWXb z9aYSAe)*ZwEtSQ^&H69S9EmszvQjp4rBs`=ZrD#|?P@?KY8&~)#C{>_Q6!Z?Zg7(1 zAFmo;%}gk6D91xX(A_u!HsnZZ7OLX`+U@-brc}4H{!eb}(iHVNapITd@Bbh@`pi-? zyXYjEK9`G@!x z5VbfUe7;i!(^4W-BY~e^gz;*7EDWd`-Rn9 zD#+L%cgB?q9wK_4_#iy?^W5)Qw}1WEe<*kr5%fQw!jvhvQ~ia)evigMP!LSM)yGZ- zXo@@gYh8cC`TXZij1!`Sx1uA*!aM&j98YE+dl_%U)wO!}I=g>;`9BEvfBv6{PY=*~ zSicx}{om95zf4W)Nd$Ev-I9h_{J+z<{EM*~kF4B>-FgrE13p#=sAy>Bpb-qChCm?7 zb@s+V#DB|)hkZetBBIQ{U%3u&cCzrW#{7u!qU6{uDF}MMSy!7~EuYqgy<5((@k5y4 z&!XNNWn!4FBofjYyCIu9xe-*2 zQ><<{QbWg3pu#CElR%ZXwDjhxB{scVWdp05e5-gw!pWTYz>P2UB`1SLEMY5^Gzld< zz#^U(YgAHNnxoi>Is(;6$PuuK28baK%*<>H^rSgRM6M+78-Yt#GK`+b-ImBg z)$QR-%M{GUeb{aw65d$QYOY=d2MUOJqdS2FHcVOh6Uejx2AN63@75tthWq`m z8Q{^J@EYtrX#V!pP#e?i{vh)S#o$2nV`N(jftzrY?TONNT%6lqM5YgQ6tdEps5VJR zi&SkclSPDdBkEsrlcpA^$|Zle_3?-ansVdOri#J|C5+F?|F8{zJ`NfC`sOZZRVk)G z%t`3w8p~@5R8j$6O8JC;3zb!-8X>F`MH;N{8-dUPV4wI~pe*ctfdmIkqhA2(yl&SO zpc0y`^~FRRH!)c1uDw14#(FvB@4FSj#V|Wu{9ev>1On%?VG}W9l~UbgT9pE2o9b(z ztൌVK>?~lOs{>QuW9}i!kkSbhV%6aWMip3-a1zQQ!n+S97N?eJar!>6AmZu<6 z_eDY$I@MO&QAScMRDx|aP^A7~%VWCG-i=>&H#$x9Wp351IDaJe^nsZ9RS3!|{J(_C z{QrLlmHWv4mr(hG?ZitI-*a|?0nAeENS^M6`X?VPZW)zJb(nNEwXvhjenyigyBmwd zDfbe|$@!i9NqqDFWJPO!+#0&WaBXJ)#kNtBJp;!Yv&t=AOt3^M`xeSRvKx<6{o7Mm zXy{-u5Ty-$Kf7B)sHAe~WB>sumEQvRiUK*+04IZdPC=YdEY zqqbzD$^7BSUoyx7@IETrM0{U3))ye0ClfA9hi<3@R2e(aT3!2RVMO4j>e-zw+fqJ& z2Ni3kk{o}GKH9W(4KFS-u)O=I?a`EOLD~HdSZlOaLk;23dAO$ zRd%|J*WTP48xy=*jq*>mhZ)TCgH)<*MIxE$Ahu*)m#B%1OM2-vN zKUa@8TJHGt?YvTr$l#6ySOhGk$;?)o%GHf5!zeBqHnEI4W}tL^`ee1tnCwnPO^1Sg zne-BgxC-m#8pe3$)2RVP7eF(q3RpoF*C~It1t1qGP>#U?h`|q*m&A_(V>~*xp-{bR z*&550N@tYbKHZ<2c~&a?(7=Tj9?AU}(1lAGr~{da;nx5O#m^CrZ+qXFa?fGIz@D&* zn3;o=K>WA1!w+_Z6f8>VG+a-scb1BRvh9Dpr6|+G%YKrlscCB0fSdw2&%FJ1%pAu_ zpypkfj`l?06KS`%b(aZzJSUOL0*Ht>);HPIn(XQ9B@GrgJ8Bp?TFM9VrUa&sn+@T& z5OQRbC5K-&1Jnv7Vbq4fDlW}i9_t9D|}_jn-k zW-bt6jRGleHcCvCEKjeAx0?V6RXDy5#J5T7CUPHm+P*9fDAmX>$1y5I67QElBR5B@H2X?>?>zj6sJ8`d^|l1i|A)G_fQqtx z+kOp15D+D$K_x{70qKxXlnwzwLZrK!0VPDFbLfx;>F$z_p*y6dJBMNRH9qh2|K9ii zzR&mVwb$Bf?Y$ODS;l=2bKP^rc^<#xK=Aji4K*P6d>7t(DlwmTVq6kd0m)QGpAA;M zE)N-Z-Y%$h$2NmJBYB{)kMhzrkb7(@%5KgD=#1&ZwF$VR(0xtwxb-TIw@#=dwSm^M1! ziu$c#zjP^7^g?vM4TgWQc#~^w-xpKhf1c$(Vf)bkH((jL{THxY)g0F=ATJ;({04^G zP-Lv5s4hdVo8(JH$WAvm%Ddnj?1zq!wjA|^bi|>w16!BiG z-x1(PF(@yx$tckY!lPWUo&iD}!TBniN4kXal|fcy#%F6Wdckj`)wATNTE0Y!AeS}q z-j^B%1-kvbFWDKyH;Y~TW_htK;7yyI-`Yiau9Ha_Je}r41T~IG&5|s?1NlGkvN33* z13vP>25GN$p$GzPPoftAm%*tnBR|TeZ?GKL3ZFEI|-Kn4=7MlkeT;(@d9ou5IM;NO*k={a9kV^1?Nm|>1Wv#^t##4n#6IzF(> z8qc$lDiQB#uf1uLNax;$Q9}4Baldw_Cg3i}1w=#2SPTz;(Z2IteO9Ie7dq9{DA9j& z64zH{8uLi5AGMV%9?XI@)gTg$lW=Z;Hy|Aa;%%15k~Wj*M}<$t zyh;7Q$L2b3!bSHBIKD?NjlJhTqG&Jf-QZ)Sm0Xb*dO}Y-Utp009X zfmc(s-5VRPxCQDY?8ECO(;<rhn=p0~h-v$LNMKyMbWv?NQ3Q;=4@QU0r^-Nh7ymypb%9tC47BnLPp8T` zkEg3!)nW6FVN|LLzlfv+^fC*AO*Ti4PQK}FI4P}tXRspRsL5GU{?e)DVKHbl9I!FA z8i}DY7ccuG#?v?ZwXjE-!r!a@jX4d8@DM0KOXjj{j*e%Ejdi!I*QM?$%W+}pI-IT9gufb;gdnL_kl;Jx|5_Lhp*~mTaL?3UV zV@_>A|f(=1?RjtgRhr~~30_T|cy7@V<;+YMb1#9AV)#^Viyq~aR z?lFav#HWu9vHlaYtUiq=qHtW@%++M^6N<{ zhWTY!{U5+e*+%gHEo%A6-v5i#a-_rG)H2imKrM6sMJ=~m{X4as>GGeb<*%XFWL{nZ z8AvABZi}>NCaN=w*7EaO>gD(T!URi`|z|iBa`_z zR*p8uL(qnO%oB4(x;JGL`J;e6*Q<$N2Y}Yf0Kt%(gTwv%$Jb=MUo-`@-7tUs4NqhL zuw*_l`txT$Q$K#go|ZBwx>ty0vM^A|4!haRTeeKs^rfeR;cgtxFg}3!(m(;Ii{nFy zG0;}qx}!}|-d0+gDr1XmkLI>!{nNpq2>bC*LsK$`8XZd2*PINQULnAb&GUC?xI*Qo zlE;?af2rIm)ullDYy(uW-Bzq2B4I=oqspwiWU=zHab^UUkvu4a8#1&w*Rg_Ntm@ssm92dLO5GEUNef9IpRHVE>Ep#@F~yR@bYwi**Z^hd(>802j!*qSUJ~ z&`bV&SZ~=#Hj27Y@Vp5(fHb0>1(v01`~Kgn z2LI*$A8xE9zW@a1!MwXA-9Lfhe_sL3+gl8&D_*y){kv-T_sjUVi^`;!qj}`XEuMns z|EH_^pyA=rYkdD;r}Doj>quF^BSYem?d695dzzd5b110FQ4`QI{vS(%C2v4U(4cg_ zYV4n$uD^e>d*LrK%-8d^1pFO=r(gI4>JwMvw?*CUIoUEhNmskP@e~Q_LY{PQU7G*8 zOHru!7uX!sNw|B3RwIH0g8%%kyqJ6xs`A|od8jRQB1pe&l&@h~NhEf(>@%*^=wCQ} zrOh~o>H{Lt`9j%%kI?7ycO{d?dUH%{BK?lnC4;L=d2U96&Mhu8lwCdXed-J> z+m1lPY8dTJPR?sh3!ues(QI1e+|wV2<164?TE)aH-uKZ(UNBKuj?Eh-M{V&w^`7W< zh@yCIDgoq!__7JS#S@O&|9{|`Im)d7cWLX~*v>ri2I3<|LjcOgAZ{n?e3L+euZN>Ju# z*l-$dYR^j_M-x#)qCq$I$a}l!=l=HBy9HJ{J%sh!uCEz9g@T*UK|e$cn7Tj4qY+Nv zHlLuit2!QgzYgjdFj33ch!@tt7f}c9C+guL3^3vlYUq*T6xf<_8hyM6&Tqr^m@2G< zZ^FACC%UZ0wv8P}D$AvUsOq8#XUbIfdlS`mjN2qS^;OU3>NG0B4rmG-Iu_;*mb5+2 z4FJ;4T5dA@1rwioi_!m)+`s`Pkhr~cvC>J<+WXsO@nPOyE{g{lDDRs4f z!L`7JMG@2+=(}k=&OWOaXfj`^l%NiocE9Rb=)8eT@3dnu!*`u+U}2l%e{fr!zj538 zf&BM87r=%C8(s@eBDHCe>zn4=t?mU$u(OX$flu=HWAmZ9Q_319(q`H$`BzWy`bCpG zGZY)EdV1Mt$ITA?BA5z|3M1v~#lMN&&6SOWlrXctKDU^Yu>Y#OXCX<_V!uM*a91_! zfT^#VHDPn_k+C&|=n2e1&iVpTP0(_fKJXe&ajq10ZRSzp^Yy+T3pK)idH}HF5(DkcBJbpdj)_DSgg^fL+L`-j48v3eJ2?Ns zo{J8zlvL2%GylpXLhE|~wWZT_f6=+r@l?IU2k^I4d?IK5yTOEIf=(BjjcjQ88AT}n zwasCHU0BC$`?={{UG?r_HH~{3OYv9Ti^88Q#G>sgd8$!fH{C~1!I5hSh({y=Od=9Q zBa$@dekjWiny`^hix#%;>(yl%~iGTV_1BQ9s*#8$PETFcoYAT}}aOTR}flF0jhoIgIs>Xz`d4nZp z@NJG1PB>bQbWRead5CtUHUe0U=g|@MM<9E``%k59);>b>1?w!i>W`t;K+Ysama%u( z(;CzeUF=s8NeDXfU{|(*I8~h-)C$Ct&b?SINi$*lNzgu-5u$szYR^>K1mF%r6A%xy zVWxVXs+ut+%k}fs$ZO*oWuJ`URyq28A6g#MabJ%3bd@LEu-!Zi5eg_0M)~}Xix+A& zm#3?PQyhJ&D;tAKcS(N}Zp$3a@%*t}wG**Dot}RvF;2Y`s?=Bj+$D(u#V6GBHJ+RF zr=(*n1F%+jVa*YgX+*TZ=}GBDF#7~kh|~*9^pvwxvH!eF-h19{SIEWZoY-BJ+iq1R z4ipJS#5x!qfwe}@w>ysgA1FM5!`?xut#RQJp}xESFUK=`i+0>%`A@t_&Wrv&zGSoL zg7nbO+uaf(wX@(Oy$*Ej4Cdc_Yly$TEC*Af4=C+2q=8btYFu11?4G3`JoP^5iQfIc zVdeBMJ_42#X6}wi;K}(qUo3{zWU4Gj(^(ApfxKnA#TF`!uTn96tGM41Kznq;^Ti9Y)2Rh!5-&oHPWv2?Mo` zeT7GV>j_Oa7DxZvL?BFaiJ{hop$-1%jH6m{sZVY;m*#2-=;p#(W6R_X^layI%P#go zR!8be4@?>&7?K*e;K=X?0o~#SmzxRn(v07exB_x{nK_*n!K|e?*jtgWlpJ)BaJv9v2*yDaFMpG7Rt7!zTbCl&l?ga42fOc@x$+;-2E*2a=#rpF10gf zL2Pesf}j^cc1m4U%{8#`W{GQP-%?95^CJ~@hC#Il7L1=%udE%Nji0i8v+K(U-t(GU zBl2|+?k8jDR<$Sz;W-Mk(XaQkg0zHhHrS;*=n&Z>y%W`JPf*p~j~ay+zdri#dw>At z{xZp_0@wH2%jkfTdFQ1db479ASoEZj-M#wmWAR7x)3CFlCZ}zmvG_ze^G;KL`1+RF zQRPJXW3%LdHbP1Fbj8ML%i5>;)UGZM)GQe>qB-i%G@7X%7y4EtB{rV@m?gNukI;w$ z3-@Ve1~CO(1K20%Xv~1##0Y`dVcD6kpwFjg`IIU=bSdTFlK_i`K4AMe*elkMi|YVd z1R?a=i|L-32vv8g@aP?24{fG_jP!dK`8uGmdpJZ)p)i~`ShQ!j8iOhs^dAqFZTp^& zzx&8J^h1*}>aO+uGAPSt%4wLCkt@bHD0<8i1TdQ*nMtf!XCRi0ByiSZU0DtHBR2pO z22hQQUdZn{K{c!4^{Wp?rU7!<9-s|a3V2H|;ZCu_OnHCXtkFfe8Y(uBQ-x-D&0A{s z)VYfu)`@t56*V0GwQz^Ec<)JTVa-M^ux8ojthVySO!#ydMS$Z{ zo4Ag~@~}Aj2ULNo&FBcYbV+-B43j(UceVtwwl(pIQyA@`;EOgsi0@Ot%Ef>uW{Li{ z;Qdv!q|>mw4QTSvkE%g};78nh@ppS%wt-_?sZq{Fo!P;hUiYwlT@{6*Cc;N4!dzrd zrEV^w?bUv?LXC})na*vhWPTuQ&eF+VDQu|;QI&x_Yh|_IfAg6?cx%S9k*s5%1+$M z7Idx5KdL7kFQeuB-33MwK~9<5Z29MQqfGe9Pmx0<@3&a5GhVI#^e4=S-Uc41GQdMo zX4t*`+Xb*m}wt`qQ2c5Fx?a^@z`5eaIJ_1>#i9xL>#F29VSydt-A&`m(E<>U{zo@KP*? z7k`t=Xb*36wzBUY3>YOz{As!T53q7Gv6`kRV}i9;odhaPhzT8+!}3kA+UkA!$kbWCO>v)8}_`gEF28*>FlH1YNxIR#oQ z01oL{He|fkDO`uX*Ji{YbPNnQ1G}Y_ae@cC1HJHNuOpg`ha@%2FosV2)i$4N@%|g@Z-$p_+#{Xro#^91vp(p98uC7utqHl9}OEe*^Wo_=|C{mT1y8=Y2P{RCBbQ z7JkaU>yYtGC;rGA{KH)l5xX~U+M7`dIv(d4mjo(Uevcq5EJ+@_kDP9LRp2jSqL#3H zAJL7mM4}ECJ%^$bMP&iGW-T7R zZ%^HKx4##$c@~AcoxHonqh){~7IqJLB+Pcl9`680zVZ%ZqXDt-^WLH7gNlv|Y52TD zVs2U{!KA``Wxp>cJCx#fe~9k0eXbIdX6^G5s+)^#8OOG90W2w5B0E>X-bk>f*Ye`7`BT*BUXK}P4bJD%Su#*=L8|hWu~@dRO%a+ripWB=^RfN8TV84c5pF99QzOKxDsU8;f&WM3P}q%$)pb57vQ0V0WuL`l+agRtqM- zw6OHJ1eBq8QWFFhYXT==tDj& zI=9)o(eAUPAy$iS3Idzhsb>oMhL&v59oj--Bx@amN|P6qnS^_hal2uN?8 zk1J+9&3E^!YQCtBO~L(e$|?H0Y$e33<;`lW4y)Drbn5RtE06>`c>KCXntZy2f^=MT zgdJt7!jWCV)l|Bz`1(TDjOu!?h)uq)1qiyHe3zKt+%n#Y__^Q0y}avCoGEiJ-i@Rt z?d{nn*ncE7psw6Z)RZqd6&761Ze7DO*k=weq}ei-Tu-SFRIw;bX6FnqW;!ZwAP*+C zb;virw&@?$PG&ApOSM(}%@?QADSdpvo;3N3z=0qLUqELJRLq0fbR9s|Q5rMvaz-s8 zTCb|v$>^58!EOo2P7qEUND9r!)jgOxDM)p>=Sv8=&OtGO*SJ;Ev&A~dL!XM&B~`e? zDB8XTULBhmmaL<(2h(kEDjgHmTK)NK2Z0q&*}Bkkz3|zM?Qt-7k2hnU`Z;$+O?7x< z;@SF$+NA>Xsv-IRC!Dh<+Q_Qzus>p#e(}(y<#2FQI+H0mK4TJp=L9z9@GsgucI_`3 z%dGAkFf)NLrd8}hSGRKjyU(1TFD%L}odO7!ceioqvJvR`B_rPaMq1<}XB_Z|+n@CD`597R{GXWbrZM{Vrt4roX)?^dyq_ zq5bcHRCJqca_s)2SDo-c7Kv7IZUPA3Jtc$#JL($eEyZfU%H8L7#M|&WQPCjKHIuar zWaR1@Zu!}rJM$HnLSIY)FO{78g&>GE5JauZ^?-sp4KSqoXxFsLVmmf1dZlc#$iLd+ z%-nS@bF5PUC(KRKZI31A^l;9tQluGm*8%E6$+16}!G^Eiu(5gi*IO>Ekxk}dh}hJB z!(~Ninpk@OJ1z_Gs0qNj|BcJG?gegMJ=sQ440bFAh)s^N*JfSmbdQ{7UMcP$+0j&Q z0yF+XRN9^=n~Z(#{w^D^JqtY_){+CLWiMfFz3$E_`?g(WWz{A-ym;}TpNKjgs=G?> zbndZpd(_iL$ZFPs)ogqatJ4f;diGxb;|PrF)tA@={)Z5Hvl&l%!p-54+{bM8c(ynd z9lG9^PDaR6G8T6`)`boIse|I;lweugN9C~- zAW<*=HP|fv;HnXSrWr8S@yEy8(`uHXU)~r3i3@SKw@DhEySKv7t~_)DurqJhFHIwI z4`_{lzH4T&KwTlX`>5$YwZ5VRVHE-2HV|KLSL$T-HtGiy`plDR*((+!KdbB)?c`U^ zmG~~5Eo0-qz-rT7z11jkxq$!brT*e~j9sZG+Hgt_sR+eWNZuN-K%qXd)(*JYa1kHmTBnT=q^+?j2yWUB9KUKG}(}VJ>szoRVZp8w=_Tk>NL2yX=-r&!ACIhwV=cBZcV|F3q+qB&{;5o* zK4}vDRKg2?J2qA3uVX)m;+B=a6>uid_t(&hzn(n#@=3{jKp$m~_g&^G5Eo*K#(afa zx4n9Mz&RshGke9bQhmq-8IL);ypmGt;lG>Yoazet941$n=VkxIQmb~BZQOcnj*RCf zwhOi19LFJ)dd8danU1@RK8D__p1&@TDXVN^cAIl$2n6@UmM>;@H!GSGnKl;vz9L@G zG;d&uU(XoCRaKluhIpBTBA8@cOzB>aYcsKl(EnEU5^-{0DO{{>wL?y!�A|f--+V z`0V|(_K5h11GW8`g=*^{gehpkl(2x>nBChqqwmXG?=!LeVVL7*DqUT-K3`wpy$WkL zYKpnJuU-JFhM+-5wfp^}wK6t3$uFBZgV(&*5dkJT9YT;ctt4jHUvy)7ziE=vVYER0 zpWE1I`7PvZJm^5K{bAz|P_NuYc^rS7+3HlG0~Mb0Ej{~on#Ajzi-}>8EakTZ4AG9H zT?#G%P)BMal1{ul+?oyrJG+{YQRsF-(tljD14+qgp+2>{y(wO5k*l6b6;d_rKFOctNP8LtJUcB7o;SGY`uB$8TGc}SY=Z(9(U&)v*gTwgF)(0qo?kH)T)8PG?y(xC)KuQHXO zu5(S^DZhHSb)AMq2EmWHMy9A6`k)@K$@+CoPWNqv-F(o~&uQvXg;+C=; zokIG{ByEpdFt5$g%I&MxCBo?oNR$sS{zhdb4C`zwp|rhcMzt`5XcP zoj)#cNIF%AyVZ~V^sXRo_;FCfw9N^nS#3Cu4l2ImS13q}+k8KvSUqb#wxlJP(^L34 za>{%T^RxfCJ70F+`KteANxjjnQ94qQ=~I~I!QF4lzg=<$R&JH^kv1|dwWXH>im-0{ zWh~rwA+(V9%bSMP((W46!RTDk`G9SBv&(n`jLuDqhBoS4wABT+iLjsc^r%-*N?1Fg$@FM*U@K!RyS-Xb4;WV zA1wraZ@xqLeCozCFVnNtD+*c5oFE@3|MlLS`Pm^tZ^O{E+Bm+o!DTC3Z+21td~LCg zo8E=WIk z9w_YUHkAjv$Ra62lSpps-R0V?k^ql$Zz?ECr1;+AJa8}FS>;mfF&oYd>IbpX^wQym z8AS>oge~B2zu>_@lguQ7?4G^rHl|qGhqJwf*l*ndje|A5O+>ZTYNYXV#xtOhoI(1L zox7MhR6VBY;V*Ew427MnJt3S%bXK@eP=UTp-z^*pk3Z}+fDXx?o4%DgdB^*lVq#JF z_|BN3=d!Onj<=5mGnvY802ss7hVr%#0?8^Xg7-7?+qnDL8-GpuwrTZ#o*38!Ewyo3 zYA)l@Io#ptE2izzYO8t!H#kU3$0q}d>XR0)R3|vD^HeaW6;{Fd72uORJkBoqezd;=%6%xIGPkR{ znjt3AVczi~(xof2_oK_zWLdt_P`2k+&YFWwHknWZqXZPU^ySC-hxIUsEabQ*e@H)|w0 zE(<$&_YZ8TvbL%U3OwEW1uSdM7-?#+80OD-bgCCb84V<_24xA8k)EQ856|mCw>Eg= z=!eKLvvfO0#iU_;WSQwwcA$+P9z`?(k8*Xlr9r!3OQfHS`Lt0yn_ipQi%%DlLRnYJ z8hXt6Du!}1_Mjv62D{bwLQ=!;NvgU=%!RwA-*d~EiS@bq+F_6^A!*`Qd!FN2Gd$EJ z4jui~uBgMr3p{>8)3__FK_aLm_KtlFhde>d38)R)4`aT<+I!n#DhUnG9$o+qU?a4) z)Mi91^nFrEEOjVH9c+rJ?YiEKh}4Jd9;H=P`*WsR@JRB@n0RIwSoW-dY$5yDEf8>B z0~s-`O_Qmuy4s+JDR2wo{vtf2MJ`fnwpE&1aD zdovX@<{bgsfXXJd6)sI=yg}!8ggflXz0~`*<4e{Xiq-61c=giU4B_h6>ecT7Y_^dP z#Xm$VP8r$Fvv9iA04)3bFDyGUTtdn^a?LRHf-a+F<6$o^xY(ru3!T3J$;j2+3oT5z zLb-7a!DzG*T{3>fE<|zlTnsK<0VJ&u?o;n==jN2sSjOHDcnED$1L4wzkJI=Sf;cXy zSYf8+!OPtcCy|V6FuTEuT_Hv1sX)^B6XrH?C%KNp`zY8VYUC!q-~h7G6f_1LBV$Xr zw7Hi!yDv?Kg_TX>U0PN>LWYEu$H6vh+YZ-&xCUjuMn5vT>QMx}O0An({exh?dO_{E z`&8{6?sYr&!5cjDCCYBqx+~-OZ!YkKdyXLj$amxOZc4%jU-T1p5WM^IjOiuK$cQWN zA=EQSzrU<=|F|4`A60hPO%j?1XH#M@ImC}S z%~l;9+At8LJ=<$PZY+v-=4Hw6j;xxqpR|kBZ&N3bFdu zn0F~-!tX+ifPuQy*g+^9)S>P9NB9Dj$!Fw%PJFf^jvt*;-Ea}eCgZ5S#4^kfd~w8| z0j*Ni!0HDnPpL@nok#E4q|D|Or>+$g(O4)mXeR)1DL-(t9$aD0_bcO1L*e?Fccj$B z^^!oex0qz#NJ5|fx|0?Lo2nX>unFM?gPY9s&SGql>AhbZUONb??pAH6Rrm~xaOaCZ zNj0BFFqzg5I%eF8;1swV`X}AwnPQ#j`Z>N9Zo?AnWAF(eg zX^$6QxR=^a8eY2iCcw?tutzv^afUsao`6o>ap{W5(3u+kJW?=C-dE=)SbISj-G7)ZGC9!@R{Nn~x zQ>lVntbzUf8o>O=6xya5P9+w|9P1`3%KSqM`PO=`i(~@+{P{zW-k_E?L*XaUF5fdlO0&0d+~!GK6J9bGW@h1mZ!ga8tsvVfcJBy5 zh-(Djv%MyDtaI*R84@`CU_C;rO>Xm?qeFS7$}*HJhgTW<+={W`E5?U& z%1lY;#>u*$P{aeO6G3R{_I|;Tp71oOV-nLBL_JHAo+75igbTBjdfU-uz)(Mvi5+RE zn-sH){r8`alYL9dZgNXb^9=o*AsNqOZX9quKBB!&K>L~HQ3_Ywt$(fNyPo>qJZwkpy*s%%MX!EOzA4W2iU^F?pDk9|}`LD0s;7=u^xSX}$ zdzV$T=vj*OD+&n~ILrvL7cfdpL&x_jN?rbXtmtRkm0d`A<@T8}}tnFSopMQme zCtzHqcjxNOWCSKdFYo-kvhzu)6uH$#6z%keq9 zlaKu-0eUq4`HM;H22m)fZdP&kzi#k9elv)z@Pay#&hCG6DezbS_pfG7B80R0XXyX) z?ViJ4xVTgUYJfT8Gd(@M5)c6piD-vj!~WM75zXfxd_~NeK*GZ46||G zgN5n+JDyJ(q-1MVfExYWy@Y%1M)xg+e z<=c~jP#^-*Y!4)R6hQJcx9mWs9r!k?9CID#2X}x_W)=6lo6l}3{E(=o&V7VWhWdFuRQKKTqn(i)Mb)w%50oq*<3IPj_K250Zw3MDcr z8bRlx1|2!z%a8laG`ez|x5pu=$!%Zty+zc)G&t{>lKeCsiWBRVp3D5g3>n{F>`Pud zXKeE56j6>?0$Cy1$#%{SqY|*)6SO;{2&4*^M*PXexnrrdWkMGII+)$A~Cm6*l zg*U->6YTjaNbZG@li&L#J%cEG#%J&$XH&pXqWZ^WcYS1-e7n9M!?SU{ktiExh_q&~ zN9x;+QTYTCe~*Bb=-K z!{(PjUIZ%|-3ugtE(H{RIh>7WivcTWLQ@;Z>sJ{_ulXF|YGRUu3!>K0>a59+0Z$J! zEGJG>RD=$veoJ+-Qin(bq>ZKb939mQCYjO}=RgHctRFg!+T4~iF`4@$BQ+qg^9{NI z)GQPm;C9f(xZ=;46e^d<-vx3CVbbA|yt+NoZ!|GT!BF{bd4U`sNszs`PNI%>Br`AV zvmKh!7pa=yNb-qge0GOUDrk7AHvh7y8CPAb93`HU} zm8BYvDv5=rvd0Q47$tW)>!YSBrDga}UtX1;MwA^28)8GyE zJUE$k(wPJesTDvA5E(E1qWJ-`DCKFH8o_Ues>JapDldf&$9~-~7^!oyn*<@rH>5X# z3vG&s(3=!s$m6wtolc(35(IY~fMkb_b2`}B6?pp(vkG^{(Qp5+nfug(% zldt-+6m2*91HyYcV|PoW3J9nqAYYd?MB4NCFl?zHZDWhsyAHmVRO%xo+~h;)ddz2^(R}(Lw1V9x zxKTDPfa^>vd(L^yKGlvRv-3xe4c}F7%nJpI_U9JN1&%IK{84>|)Gw2E)p$AVq?CBI zohZWYCVnh2FMc!+jd*>2%n>%pNx6Q2@cP8ln5gj+L!_!>H&^qoRF-)VXt3;s!*=ga zDhr1u0J1Xxk;I|jd2bT9WX=GgBG|;zfn#A9pfAiypP%ZQBMKavzMhHDxdaiC1K}5_YP;&{pKsC=coahG8WL zm-0tz$uXC8%jsA2C7zWaYQ<_!gz3pc9AWFSfvHWM!Si)*>GWA)V%UCrdesFbM;OTT zM%7inb=I|c@#qt&vwnfyAGen7Ia-$XaZe?P8en&# zbF!P^yA`vJ@6r1flF&!E6^)1Vw3Q}0DkH=2bOx=Zh$8S%se3-e1&Jzx=3ph@0EsI3 z=tLDj)xyfViqtTt&w5~x@#H9RH>zaXC25RCaTjp#9$!J*#CYApFGTCM%KY)skt$9g zKrpOw&Q%&6siLZ?%7Av*2XzZsNpz-Ac}{G~EpGR_K~+UG0ehgiB#E}=%com_Fm8ZU z6_2GLo-$QBndmYgYJ>=;da&ayI4M^DdV+85i~X=@eX2Z<5;)deeHGlNh3+rlQYVNHI^@^uzKZpmBmkrdL z_pG0rPYmeDZf=5l90}2?@IhvP?SE1#KI@<)bl#2qOQ|@W{)Q0xmr~KgXxekmzLPMn z+8QnVCNs-_Ul|Sjzkjpu(oB0`321+xtMpAmpI#u-n*C{Lr6Om)Oyc)FE|&?kQZde~ z;Qs$oDgpo)qu9;g`MC>zK61dB@J8 zmGGSO;QYhk6~T&7iNay{I^*<#d53f)qS>)7CBM3#P;q`!A-d1qu&1qpMnV34l5ZVK z0iJ6Qgw@aLOfiG0!b8E@lsNFfKWuV7v?eR5Hl~<>oog8a{mhnec zm*NIwOXoMoE+04z(;;hzdytAVo6-n|1D=&%&hX=|l79Y&WLG_LRq;DLaHXDi>^yd4 zmJc0l4N&?XYWOqDc((1ciRO@v;uDy@3-f)?#;RZG`r6W~Mj;fD!avY+0_I>t+SU1; zcrGP(`WJ&M-?!G1+}M<~CkZ4ibW%5B^YK)OGgUoig_U&30U(@lyqc*@QNq7r$A3zW z%;%=)np!j6e@rht6f;i`(+pR|w{rOnX;i);ov01X|Ajv^F7+PXrvn|^VY;5^X3-54 z`ewsJxj{yWpxMR$bcg0@@3tg%-|(X3zQT?6GFzG1$WLSEVA&fg32AxxG>)%xJW@9p zM6cP6^u(ON?dNj~#fOHFOEjq0dCB_<0R$%dvMzIJz#R24b4SsNOSKPGGEmBh)51XR zQ->ltH6>hW{T`|Av{A`jH=0=c3Q21;07+Gjj!iMW-qDO)bTZxVRiwE6CpHC`U$p>3 zFjO6Khf3}0Foh5ExMKZw{QhFTkwY^4doSTtvBF?EET9oyH!g}a0*@ioJQ<$>TF}vW zxdOQmRuEe$d%Te+Ao=uiV-J`Q2s{;(LYVKo&$ynw>9rOLm^coCQ=Y=bglWDvH2TD@UC#|YR2l(KWxzJ_gMfAm zcqZpIzxNtdXqqFML49bqF)%{%`puEdR#$Dr^!ydcyIiNaa+lrW6%zsN%b@IRD1*m@ zD~kbBAKosn=|rB~43zt%>iG5Y1|z?b}vDt%0Og{P8DrPz8|` zPYz@<;ZI+W@`x8TENSF?Dk~agBXk`6ueJsKxQlIK%Ti^WRj30plA`*s$O&H6j_Z(c z33Ec(vaVvs$@t8D#t(O#c2UomMJ}T~@9!@|9tAO2j zckXkF%thenr`6kxLEbI(Ag}yclPU1U@ZwLYqYav7Ux}$g+dDfn49KXp=$K5FWYhsK zfdgQe5XVFo@){j0y=i^qlxd^K!3#VQRsaDo0Q>D(c6%ie#MCl;6K=Wd5sLFZi6^9J zNg2D?9+?8d=j_Wf_oX5Ak2jJZTUEFSp%)6Y><~o9>&!YHD-|@RH)VPaJf;xwsAGL! z!5Y*9oP7%V-07~J-fMrxg$FDwM3H}IrLcpnlx$x%WCr#D$V#DaiUx+R8hgZFY_i2e zOV|B!A3)}6)K1(n8LD(FRWiQ>SbW4e+K7zEA`O~mID8)#@ zxVD?@hXP};A+Q~K!-&njdT7NGSGZIs9Akyk0MFIUl z9z4^wtw)zbP4r^c+#*kFa$^cDF2EC+y4$F^8r~h~jY>r?-Rls=DC=jtFINJL3Qofs zuUA(<2@F)r-mHSF3?=|U~EQU=JE3uTy`Kq`u?jIqyJuISF_i_;`|4~`u51{3Anv2!2E z@IR?2R#PGK@_47Exp?Hu8xf9@7E@VjFQfSGh6dbb$lbOwO{a1hDUbf zkABc2i@VI;B^MSJ`Qbg=z$

4~#3zqz%H4lFoET2YQXd2NU`6I0izS{6| z!2{1$kaK_Q=VkUuq76Iah1LkV%-yWBtJx7NLRDZF%XqnNJ4zeUQaS+l%ie|PCJp;0 z!4A}cIVHgfm=3kUO3zu*`ltJ+p#6?5Gk8vq4SCNOJXa!C)47Y9u|^~CFUoR!^m_Y> zb8g@FdOMuEGN8s)vO@Lb%V(}?v6%K`EOv%FFay&^R^uYWZ`hWmrtx)GXHz)rR=mn| z5zX)6?7Lla_PW!g4%E0GB^sw*rkDnq=keGVPL~S-gORg3KKdQJ?w<3hWaZLHmeI>% z^KysWSLbmw%1h(zc_2GgzTxV^%tB2W$*Ev*|81qKn7BIBHD(y!vFs2n1RPyYN#;Nc z0ojiVO!YFRH7O{X=6=3f!mUU|-aUCY>g6{tPzZ#8YRO-+maCB`)6$@lq1g!P#od6- z`(9pE{C&4v76hJj>-z-fQD<7lWiu8^GZL@?hVTc^z{)y zl|jGB^16yOfuTEajVP`8GNA8=>1Q)ArDjOgYf#Qhav|KZ+G%}eOKTkX0&xtCm*jQ5 z5#sefOt+U(#r-mUM7`5Nn{5gn*b#}5Tb#f7cVIek#?Qhrw zWoO)J_DAml2~s`VpViH3k~bL~nG&p9urKN*pu!MmVN7UOBz(2Pk{OiihOu@4mWr%aa9CEH-SCG|V&&NVCFwi21r4d%4|?N8awa+%^orcWNA1p1 z=tPrz>rHf`3B!LRngDZ7p*?h>$wSvmU|E;Xe%n0!hF{R*zRXlpytjyj?6S^dKJG>p z4F*>|rS1Fs_}tHadJ)JdeE4iKoGHsM={|HfYindfZ$#wPKrr6e2dST%MRW$Twz}<<0vcbiro(EXJq2U zsPbB!b9&Evk8~W88D)gh0y#MiZ5K=yR}sdm2w=mUu1}Q#nL#rOUD{RRz>H;kI3l$Py^)nbOnVZeSDo$Z_@AXV29T>*)dABk6Q4 z$z%-8l{MmPBW5XEVNb}y?*|sDIri6Ewif1$Pg^D@CG&X53Znpcuw+WwLh^${RPky2 zd)DJ0(R=PuQ@Vas?!t>xRDO8R8@(AcKyCG9?A^hNM%`B20zfd@f+~zj?MRW+d-c03 zZh)i7f{B`}gKXQlGhdmC_edK@Q%WWwFHHkht4P~bq3FMj z8fYT^BKm9f{x743K6~^MiaPW!8#$|Ri^nz9r> z1|$_wMZ|0!q1)z%RXzg()m_x*!kELAmfqSqj#k_K%r=(^kG(ATF~1Drju8Ip6lVJq zwi`JtexoTnc;xN+$=(EB>nOL;umj3``JZp4X>m_cb+RmqEX#O;w&^PKZsIRhp)l9& zpm=hn(!wHj9iW>##x!wOZ`i5X%r)@NGZR8<>^R1g&xx{g>D)*oY;$lhf_~pLrof{X zoS5CZe}mUNdmoH5C(K-F@mF(n9_Ok~NgGegt_X5np7=ykSf)h~xIh$GQzj=Zv{8!L z#JDu?0%lULV#5%(=Vu$%T##xV&&@M3*;j?0#Yui-$?qsX;b>4QIQ~A)LNfljvnMtu zoYYmD#ok3!?e~ zrGjavGoFmBrro*KbMuB&xo8C9(Da@`?$4w3;ae>d?qBk_zYirZ7=GJ4tz?ELOBReP zZp50ADK0Mfg4x@^R9(_Uyuf5%%mEnJb%N3|6EGztEH}xLy8zw+Swd$6s)y=Mp(M|H z6PjX4v7z@DyumSe_5}ov?>91~zTNpoKm&T~IbACr*R5pR!E?pV={t_p#e8CV% z>MV#f(lD0iDpc&}fN2&L{p&Qc9|snvjo&Yp38+_vyXhNcYIft(VsCI4I?RqME|l&imC zF%?FT%@)|`zlK){ge>dDw=sQ|&io!EKheAUb8S#`wZXh2wz6)@+H%f-<>G>sMi6J; zy$I@AyuAsU`o3)NXz9p(0*53lWg|}cSeKsUG4L9$_QbR#7fd$ZeMLaVQDpZa$ta#h zoEpX?XE7cJfP80mk%gQ)?=oY^4}U5GCRf&F`D>tTz0~(AnW8b#X^yWD2~$-FrdF(4 ze&-V$9kNf5Dfsj0vfzUX%Rn7Ui~|PRkPfQJBH{h_yNK^7o{Vh6mhNsP-yzYMlNk|} zVF9M#{CQD7#`sI`@Ys6(XS!c6OXVqDPLK6x`KbsZ_}@RqIIb{Iaj5a5c746mi1Ij9 z3;X1LvNdVDRot6Gr0P7&#r?(Py05NYY|?(XhJx1>_yh@j z5Q%OsmA6}xdQB$Qfr#6`j|pcd!3NN!iLB!BKtZ}9ugs^++nx-E^~)U=X3?MVX)DhQ zsL^GIijS4#K(*S8QKxiC5Q71~8UTi!Jg}dCyeRG6PAwlgagDy7P+{(*z-v7ELw=~LKz@wbQoMq;8uU$7}l{)&E zYGj`I=8!fPp4Ih)ks8x7AYZm2xF*ojV2*Pvu4JShp_uJC&Vtd0{#lkDx`>!RQKj`A zp77wNT%mi^sU%a_!BT-G%g&`RI@G2~M?_@j>QWkoFzftfceKg!G|%B7$BLC%5Vz?nl9K_Xf0Gh#eA zMW|oxKRP>B4C+e zM}Tbup*lbGe7&KL4ePcyIZBpCK)Ajs{UcAQqIq6}Cr=5u=M?zeXaj$hi$pZkPMru* z4zX`jHK2Hv_zl?gw?bo0npH3R+<1P8j@xzBQK8yF0!_^8PFih6d|zpCg@RvDgLYK0 zo)-vN9J}RVXKk)qnE7dUimzKpL-<-N!vk_R1;Y8}s{4S-n!)*I7c=GR6%o`p@oB{3HrgEoA)n94XW}9k%EjGhDXQ<0o5e)4KAo-XBR4iMD+f~OUU1f1lBXW)@Ae!NwdV5*} z69${nBP3yv&>p@dAjD`|b=2#O)**kLS1^BjU+Fz>#ds63Ym8ix^($)pJ^f?V2Yn#lnpG_M#}#lVuuw~e-yQ2g`b6@)Rf_DFYD@vpj6Hje6+ye| zqQ@Z(&5yK+lX-8_8Iu!)C>_S!FB6kw-PKS-+K*~IAc(EDN+#&jO!ezXFQ<2AqjuPT z%yE&j;J{42<`up~1`z|j74se!jJ5KJbu>Zh3yzK-24@*9Ks9fGr)}F}S|#PP9RZu{W(r{=s~!$)KJJ z466b3$gjB6c1b=-^D)%YK^+Az^hxsWVV5Jbagpn&pBd(cTy`FZX`y^9x@E(;8{f!* zI`SqUX`^TEMyJ!)tFc~AdVhTHye~QUS=b7@T%q!lsw+|?{dBB*bG>lI%)X)A7CAJ* zLiHWCow-SdTnyS|+@N!iC{q}M?2DsfLk;e&n4G(g9pr~>(4`BF@azh>!Rd_Xv;rja zb2ZkotrjWVvLlYUh*~49;UqbamaCiasKQkN-;1<`u^KM=M1QH-gM9PA>I~Ed>rf** z0wPX4>uo|CYevhi&F;*&XW}|>|QA-?A7s+F|8nWoNdzzcqV*=RNppkH!u}P>x z&=Zmqs3M7RZXl~34theyGqr&kWY+kNrXqz7R zaPIh79v>0{Jj$Izmp?u6vgR`5Pq*M1_e`XVEGS(_Z%`-Y%J)iwkdy(3k_K}b^_LqA zvyM=w0b8vn1dwN@#I1>A>`Bdw@hEKa^9P96Y_n%C7mLrS*Y)Q(6r0aD zG7fjRi7Xbc6Lzi3-rX)0nMYe<=_VdT<~8ov6gFNNH7FWj>9lZ&yzKCSzzxj*BATo` z_Zo0`qs_3xsWr0vY`p>L&~$?VmqzBQ1^mzZJO@OE>9*PYZ;b zveKtaG1uw`W3tk0K+A7mbSUvoW0S*ZD42JUd1c0KA+Ysv1oAAhh&F>dkj@ys$@&I9$(Ha)*BZ@FSEziEN2R7ROLtwaMrjn4>#qV0);nMuIVR(OD!nyWvM zO1WIb-KwCxc9gq9T72oScr8_(2%8(5LaX;AcBPdl+WL1EOb(osE{2HXRsx;BDBSB~vw7 zFZ&onYIMcwKhs!zZkp1i6nm{zdnQdAG28FvsRds!*&ko4SqEW5*q+1~Kn*dH=wvaJ|eXz3X~FG}R6SX<9TQ zlw49DXk;i1zzz_uKZ0fSf^qFo@dnxoE5td@=~_0U^fstM_8F(l^gDMqlUjURpll%e zyaACGy{mu@7b?>%Y2Jqjc0jHAus?uu3;_e#~Qiy{r?bVi6k?leWHg3 z3TX3dKvNZ3!WubUn{WiEn)JL;Gkp~@HNpMXf7^^`giy03kI^{yY0Nmve!=!*hUt1K zL_@+jK8RS0=~HueDA5`S2EsBK%r(jNFD;|&1!B5mo?6=|RVz5}6{h5*<8f$kHV@U| zhWw7d{u+<@G-Lfh&rUF=CvR}Pyii5bJc;_5RS9vIO@$vMcW(yT)0Fs^k}I1H8gP5e zIP^LqnqEO1d#pI1ijPcX*JJr4-xZow-AE&;tmE%5{O1>%u2frP|~1El6e$IsZ9!zhTFPG8p#{Od2SMFJ52K1 zhNtGL*4&1ws)+=+EKz%hxpiV0aIj@5?#E=Ig1>p&AHa<v2L}ArvKSo1&<zF9r6oluQ^Z%2Y>Il9ojE(jx zsr%r#Pj~7zqtr3s#0hVTi)28VxO}cF;0xvMxsGyTD6cJH@mi!xuex(iMB-C3V8tIo z`E~$FaRaV&zF20{Sf&Lq_fuZ9K#BrJn%wX64~+{)&fy)PC zLx{%G;{ZqRCB^725V0MBsaqM_vX8n7*3G6vSQAtO)Q$is3D0|_W70MM&F?OS7km&9 z)zG}AyYtT`^y%CBnb2cti5Wb$9CyE+Md~t(`M7grNMatR03@K1L9agq)V=nB29EUI zk}6QRVeAOP3{&a>9SyZ?9Y!Jv4eB-ce${JOWyH3JtJFJ`aJ!w)+tY(?99OeDh{UIK zfZ52FCiS=ySqYL(&E5rxxCx)GwKaw?4w{Cb>+UF1I;qg{1&|=U2XV9EoGoyfj?Fe3 z3HEkv^{3^VFb2zMs#G_cL{p$30RGuX=syW>|8djvet>dB4-qc-!ot;`Wb#k6coVWpC`>a>LR06h{D= zeG5pKJ&Yz7HAqy36{wf)0j2P<-_{_q5r|$Ax^>cpbt;RQxuy#|y6zT&@8rZ$o#es5`OOEBXu6wWarbZwbK#Lh1>H*o{pjQ z)>&@zE19lKmEx=;{Dpg=7!9o?Wrh4hZdd9M|xC zqdIw$^8%7W=0c>C3CpBavY?YcF^aLzhH0(5lO6_{rvtGi&{B6)dR0WBAo~Dh!sMd(DzGTcKm60 zo=#&AI&r5^JZ zO#nR_M8xXH>%Ds)Uf}KYfXK*-!sKVIF0kRj+*byN@JllGO=X5jJjij|#kZeI;Fejh zHsY-ZQ4d_eYFPb_$DCe~LooV}_4QASZVXTiXektC&Xd|=s{p;4@wwy}#bdjcNblim0$0kNecU3DWkliUNum;KnXjFKYfXuWBFeD;4Ab9Ts^R} zKou-Q$o6FN-N{xTICxm5Wes`x%-wIe)Eg&rt=BH#>Po>o22CR13ULf!F>5wInA``? z#vI0nmtQd{S3yO_u&$Qn5}3Ly&T&6sacni1Ow)Ui*fl;*9+vXub*|e*!+n*U6a*5q zl|Vl(bBYy!CTgC(8@k?a($D}|eV10?eyi0|ykT7nmxcbLV#90>2w?T3D*mY0z+pCt z-cA}qk9LGSmFB1btdsqC73F6f;)i+OAwSb=P9?=8pG}zP4=wzU<^T_nk4rK>2Tr6S6ErchzRKAN30`EX1Qx9aI{oi>_b>wVCIAIIbxjpU7!FVB(1l z=lsUI2MzS&I;Pfm{N_`VJ_B3Eg*8I@2jIji0s#67&8cYgo+`p;%(1vEW_TCJvjKw* za+iK=b~}n-Thp+aPZr&q55Tr%&|^~vVAT!A&z?1qBV+Boa^RC$iyDbLJ5R#i3vQx@ z31y$+h3(;{-Px*1b%y;fq+ZvSCP9 zxJ#{Z5t`#wV>OlR^(?hUtQkGAjTaaFKH3o5k>9n>!CH^2pzWJD@?$ES*P3rN0YZib z`%>$xHbB|0zPM=0XMoNlE6@~dXpM?;vNoGyVgj#>KTn$ElA7loNEvu*WU>V7y8_f5 zrBQ9&mJKsla%iMBi@c9Oie-MjF>a7mg74-+$Maxsh89-B^>H|D)?U0m;eWiP0#Rv zf!?+d8qTNv`cqo2awwDFIarZGRiI0z6j)QUOiyC5LSOvb^7`|SA>O>XV(O7!yy1<8 z=}4~e!cipd7xRL`qt@iDBr2d=E$)ZnY6WsaSPr_CF_li$wklZ6j9`mI2ss{3 z;WTaK=IMYBBLYG^Xug6%@{}`p@%ERZAqwkVc5ct2l0Pr5rHrJlM0%`FTsQs(2O zH`J)|$QG$9r}%|0K_o3yn%PXb=(TyxTBOJF_<^So0>THr3>r8N$6iUB zFhx8=f1dmPdBBI5XP$Z(LHae2xkz3TYHUouV~|KI?U-*#L#Z`T&+WV*O*F1JPcVrp zw1}lP_6hw&LI)aL4d-hsz}T#se0kN+Fw|XbxniRTgz37#rZEC?h8@9f2fa=Lpp30l zQvH6759z0ffljO@Xi5qAJ8f;QpbF1pobirCT{GQi#}JTC%SE||EQb=TjC+zAZ9;X6 zEmTOVA-uB$EK%EF6aQ&IqG28jNj!$KqDA@rQc^_ij{C&%c zS2u@$b1d2~kLz4|`~>N%_O|`-au3OUvW`uWl*F@F_dDpq3$9#BRZ_m~>4R8|B_I20 zn6tdr85o0U>vrfp26iFhoQ^SMW{39m1fZ7wJVD07-~3T;0$3Z=ZUM?J6mS`oeAYbo zbPkfd7bB4mok3YnfW^85N&qsk8S6pA#sEnwNg~T!Jc~iH2|GEA^Vax4jFYb^0raY# z_9$?BaAqhGxZjlA0HToGO@_8#0lIh%ba&K-@7zJE3{;OjfA4-Wfqk9P!JNZoxISdL z8n3=~Wv{e2HcvxP&$Q>mb)RjnFCqP6y&P0L!w|@^wQddycj_Pn%YE+J59q6L?bVs8 zS$iK@9Gjf?{kFQ7e6c*VD^~o0a@BA%#FL!?em)Ma6PQeTzY&YC?vxD;KFd;sB0OO^ zs|S;dQwvEv-(CR2V2GOCw4m`_B8bm6Y_&t{Q~=2{w~27J_{f z_@eL!2<8H>kNRj&v7fKU3jcnCEG7_FeY%I$96ZSDc2EU&S*ROgsVwF zvuv(fV=}g^{V*i)jbT+VDZde2kw`K>)D$lrHcZ@Hr;Z@aAtliuC^ypqrP=oGAn@XQ z2Pcq47810Aku0p_0suJEm?uQw=|2G3MXz9FpLMqAopYVf5gD8VkF5?EQGs!wRs={d zPW3X2$KBQ<6u#OsNQYI12#;9W1@*(g7~W9C%_4 zeyBL$ZdVW5kS8j_&0^Xg5MC zrZsB2VC~>DeNg}&Fg2QrevBqNdRfwy^7I2MLsX#;qsSkv+Pn@ChN8nf+;_iMkpibl z&h^;X2-Na8Z6kyAJdkh64;nAH&h;S;8@s10b~y}d&<{y=a;gkRg?f8?p*Ih`K22>0 zv2T&ZaM%|D09X!k9sp{-NQp#FCGM-AMEF(C=X*|%WX+$?TK6O9nZf?}c+>w~Ww6=f z(Hb}bj(YBbnto)6r2hnqdU6WwYppuMz%^cC4(U7=x z5dORO^Aofx)SHSJWub&UVRPE3%`mixA6wzC>{<+bj~KD_BhO9?v@`I6*Y zf8rpQ!kvgVE=OtAX?f}5dOe$*aq%rn>hS<9OV=u(l=DiOR zA@gNiLrjQ=ev9tFO9BH=P1VOL9yyBHeMJuM7W4?j(~Yi7qjpck$Eypdt=7N4&;A%k zvhSdo`{X-nXTLBSM88M_@ZiY>QxA-uqGz;;dKO8=H`AAY0dRT5N<&O_1LoW+e?WBq zilzPIY5PtEZq+nwa0WhP_pbpnGARg5r{7dE@sDr*-HW0^tevQYVZWV5{yvsqkOBv* zf7zm<@n5|MgdSg@$q0jCLwbJyVEx;3_G{RK$EzLF=J`y&JH-EeEaDXammmz?z53Tz z&>;$-!5=#;6S2QvlYf5Ngs;FQ5JBl!{q+_6c+LCJ(eez}Sn~IS^q;>AN+`Gl)Q9wJ ze|-g(5OkCEI=0?Nt8j4@&@Y2?C!ar2g^>-o=B@ zigwUVyWp=stXJR?IA8ISkp9K;1>WEPF1LUE?Ebsl{&n^J|5|R;O0CL&%L4e<{qDaz z-5*b?KmY0R-<|H?=79h1bpLw8{P)57_xb0KFaFmLRxk`#Ue7Upiu#n zMmzi3Gii}+^GNH`C6p-5=Lz%$+WDQagcOeA)>ROW3=Ji^)%#tRqn_xU=sfwk}9 zy8F-+(lp2-oKDd<7Tqb?B7CP7Y^sC0@Et$esH!I{VHT4P&h8P@J2>Qw6-4Df8hIAw zC#ni}c)SUsI@C57o0_N;iwUV`M@HU5Y60dzvP)?PmP)!ewpSN*)!ZvkvGhSq?j@Ny zD1LsoFo1JnBefg;v8pO5~x&Vz02MCNzasiyjF32*;Vw@LW1BBe5 ze#zsZJOBlblxPcIf^3FW5QZ|Qyaoc!8zkacWgzGU=*Ts0*=~mdW2F_51$d>OUqE+c z$e%Q1k_ta&9wg$yMiC3M!g4nqF9wC&{b{w_wgM)FMa;eRDz^U9WpXUcS`{<~p;;dqCYn6vWEE-XBAhCLA0I z$$|mPeccCp7H;MYs7AJo-l{mZe?heZa=u>B*Zmq>-5~|*8Kz2{q6S(vH8kkP$c=LX z>&qK0hzPauRZB1p4|F#J4_*wyf7}kdyF?*npXy&R7B_L7Ec)%Zsqc1Ql9HGP#g8=! zob5*{RqqX4`$qg~IwU=Q|Id_WN(m}OnOALj^l$Fq|xR}^#c3RN4 z(o*__F2Eex!~!}`!|8Mj)9EF-tj7g~7TAHHM!Ct#KwS3BglpzS=RJhu2RVRmjqlq& zJTY0({{HCHD<{x|<|%eLuAX{w%2Vf`boO4?X`svW%J@YItg$3(B|V8GCO6(y$)P z8ILZ2V55mZf;E9@54-ROG}QMXev%E8QjXm5tvuzFP`eRcjVd5$wR*F{M~zaW`$HA3 zecpJCkNQPMN-+-YPw~;rH`<-7MsM00eC{Jv%r>Flh*EN<`wm=C>0H;VK21tq0r>}L zQ&y*^;_$-hw_QAUsLv(=uhWL?v2qN^OiPgHlz)7D?p>7_O?xW^H)hLziW$TsqA@$? z4gwvO4MbN^+hwU$A5V<>=)dd|*UZ=y{nyjcufc0PfY%OF`ZUSurJDc5tG;pUYim9B zQnP|E%e4Mv_S;Gsos}ou&)?&pIZ}~>7Fwm-xAb_iE9$=6QAv{PB|_xv69pTAGF*cx z9Y(4oyGH2hpnY7vZLb!Mx35&UZzT3X8GYv&gbU8A=uD}(T=GITGF|6(y)qaWDgWHN z0^C()H^9<8&PONrNYc#Y3B06~0SQb5cK8r@e@W;lOF(-z+h%$gH15tN3#NBXG`PVf zNPV&Bx8NnG0Bf0ti*bseJD?VZm*iT-Ejv`#f>i%YdJVdW6KvJ9!VNsL9>-TVL9j^@SkS za6$Zh4)Rg^tH>n&+Ykx)Bd;wT zIl0`nODjAag2Fu@MBk(%-jNhXKrVVhSso#iImwqN z9}{)pq?AAzhDn1?Y+`r(jzl3I2=wc;+z{0SJ`-#$+Z(0vu_U0aW}F$KW~-(Q2Mk!*LC>%C+}t&^EzoyPk`@?e*AtORP6q zxUbn=PF7;>sNN`{?>gfZ4o}6wk4O*aLj9pcvuJl0r)%2WCys^ZNdvb_%pwV@K>AY4 zWz^EOop9_(!ngjRM8hqzWVPS6gceQS#m9EY z+qzDwWEq7QUA|$eXIBL@hvO0WfQP`34VFc-z-^ELlzQs4dDd-k zcFEElyNoQz2JkR%tcbGFrydA%-5@=m?|e~Cj~s@E7vZl=_x+Nu56i4--fmR*M#j^` z6=}d~B{cv$3}%n5$kfr`F3wonYqmYmsvIY&V~iV@86p;xdV*-Ad(<@mr9qr6h<08} zFKyLuZ?fmxn{WSafyuQVx+2EycTXQw4g? zb^17?)VJk$)1E_o*fpj1)M9zE<~P|~P zZfOnNWQk7nIEK%&#EXCs?O`vJZxcvAJ*=6RoIINeRz$8xKC&Pee52B6RW!drZ0ESN*_rk<}YddK=5Ki#c+5&QeZG^XHaBe>7Ycc7_^ zSj-#z*Yu&>{jd#Il|PjQB3eboF>1hXT=9hdGaZl?sHsyvc!~Zwx#li_{7b!jYZOj- z=<-dgN!ev8YV*~%n&q&$TEddZt(d3c&O#8@_9ufQNtylDX_O<%KS8vv_WE z_zTq;Uh>7@Sij)YlDQ4woi(U(2D*apu;*7R5YxB4_X-`~!xok+Xg%G7YmjR6Q#!Ti zxTB-)08?>zKM^=kGv9NKrQ z@67W#$C~@c#L3||WTAeq|2QEfpZ#+3+O(u}y@p=h{uYULG{L~(kZ(m58RXtQ@Ei ziE~h+aUVK~CD+p3LFjte)CT4Lg@dnyS}M4$hoGKPQq%5{E7UQ98^f#aEYP3EUI(8_9&Xh8tVQa>4?LR|9JPop$Nj~arhC+D%vpL#G^o0b}eRr^`#R`?Zq zkGp^;HZj>VX(m8g)_fGnJtGkKZIMCRUuQu0y+6truJ*)r#iuIj=(Kj6aFb_#C zI`s)@a6XR&Q%^tU)l_9uZI+kb26#pkJysaD!{c#zU|^l?#*&|P2qV;x3gtjp*g?4Ceezq6*oT*bc%6_T~gK6l))jxW!^>S}4s8}mQ0 zW#Dg0c6!dSIAt-m|EEv($a#C4-}=o;vtB(kb21tiVjSH{S@ev)*C1UCIJneZ=pNyK zz#%qCjvwkwv5TGM-~3J>23#7W7>l^H-PO z*(1H2^&`i|KlBtI>gtgfp4+!2x{p;c=<(KMWV~U!$nHgzvgf8JQE@m+bGaF;j-Snv z@JUdi(e-nEX&YEepun~U!^kph42o4o%JikFyS*#vnLn$R=>_uUO%U`hD zWLL@}J`C45#*Iyf9La$a!O_3Zp%HvG-Ct0NY*?Xf)m7#WI9CD~bbyBP`}3({Y;%+Q z*rz3q8ATUmO}VUR+mq69i4TPj7?3KHe31#vXhws;%=g_5#fMg@v>maFB)$_m zaC?)DoG}XYAIR={#?J%{eKbl!Y%d#R7e}alBOMRKA$zR|SjgtUdYZ5FT28S+e)p8IaH0*e1)tkG`ODg&M^d zs&)l%px<}S(+ONlO%^;PyZM(Po_-+^@B;|YDZqEDlkG~j^Q=c}+qgkM4gjF>CaoZE z`3WLM7sN0bM?y0HN5I*)CF()83UEEH0tw+*W!=1hoJA=}*+Ia1wWLY$n8Xx`=f+~5 zz%8Y*$_WJe)tV7WsPeLYskGf+P=n-%7Hs-+BU*W{qv_T|k2lfZnsn;FsX#v804o3e zyG)6gR7>u^i&9oT`XE|S3ACv8g6!T5%au+~L~p$Q!;#E!0p`EuY*kLf|nTVa~kFb z-u6JvTntAJ-3!U0!J>f~HwLCb&&SZPA&_=^;0?>A0#Kdix5rQiAX4ZF@u(Y$*xPL! zCBh~`7 zt<4y?fxOcvkWJ5+VdslBU;jqJzFT5m9L!#;jT zY$D{?s^rYGs*kQb`kkC&+>ciRu8MxkhR4adMj|O3cEP$S`liH~pMSnaczkwa5W77| zp6%$AUbxa6FAP6Uj>_QvqaRTcrSqDF^a8p<@Ef@j$tlj4~{;LhhlX2(&d9MCp&kZ?`k` zhBT7yQHjC#R~|jj4t(`oo+*gX$aINE+pQ6qO&uzk?3QT(2#ln`!s8mx)5;oI>*;d_ z(mR)u7*Z^^Q>9mtiPGo0i-zRzjc-+rhAQVoJHr5 zTAFfqGiAfEg%RQ`4EswHNyr1O>CP!KikqqUK=J{PB=7dg=igKzyF!piL!$W2IDQ zATG9n7bo3AuK#?BLE!Rc;ZIOj1Ssm?e#uKd5I_~1^8oim3}~6pS1jQ-uZC0k0Vbc~ z6L5^Z`Vh|aTeS|E7(`T~TU9dhoA>pf$TJz>eH-|+`TO7G7p4vQm6D%9^c(>Vo$UXE zo`VGFIdnev|NR?(`^EqM)ryrW@!}D;1({7m{LyCZ>KL15ek_~Jk(J&}o~%!p6PBPA zvZQ;ZApZv*{R_Due5bBX14_Zga>V?;>4Lm+(vIL?R)}|TusRVx*{jqj54Dj+ui27l zEphn1yl`KRX*VA!D|8?BJ9ZzPuO6K28%<>;aR2E;B(2|>XJ{GVdpy`5UR{esD~X{$ zVPn~N(<&g&(V5i{E|K-aIbnqrO~G{7@z%bc6?YUHCf;{XV&$RGQA^!I{*m2X3k*Rw zz=UZPR4u(#-7eSYLEnHK;a_*HYO>*|<_!`Ic)fS2jVtIOLn$YO)C9b<~?hunPb4?Y=n>s`u)nh92i44b8grdwD<8 z57lCT1o}$?rC1G_hh_5dRnetreCTA|_jn>FQIouadE8-C1gr2;pY8U!*u% zp_m*ptjTMi*^jA~&&wYCvOQNk<(435XSAihjcz{M@G|D6!ID4z?b1w>yF1*~MqYXO z2Vj^Wv!Ao{H7V)9dTCX_y7lj&?dYm5haE?tYCi8rI}@D{=Zh#nBgsvbzD2scKWls> z_4U>D{lJru__Qxjsh))ER6Iz6f^c6GJs+YH>2U?Pe;E9Pdceur;Si14|1bcSf=r}V z76p?J`nB*wkNI79SK}h1I%g-n+B|0`yC{Y0nBCsfEtR4?J@7+p@g!sDiM6>0-yNbj z0FS~Z0H0HV`RX&|GdyGu@%#a#fhcZEnhaD@3ZVx#SKCE7Ky~>%5s3a}`S|#RcAt-0 z85p$rAeK9w8npr=rkY?%8K*YvjMXW3JCj?@R+8&nmFXIPdNElJse^^ ztD0jo!{D8jN(Stz(cDTbsY84p3>4o5Rn)O&xPf2;ceNqHvFos!!r1aefyyX^E6KYB zt9cXTOQWU|P>c3VsiL^`C@Ot@y5=#I8Vyr6pijQEVj%Phm5!IN;nSS@a*D8wdQnqk zC!@JcTE`{-RG%TQY}@3RG&9{iDMaM)i1->Rqr_ZP=$w=?)FVm-v(K9 zUc=x%M z*tYZ5F6iYj*jL`R=Vz!kAX^4%6kh2wKVNIYSW&v`BE!X4|Mk9>df-gr;CZMXDp`n8 zO8L<(!j#ST0UimJ+X4b>edtFRSubp*WvbS#@SN#F}EI@(A-fFN=KjE|S1r+W zPyxJa!kWPHUm6AuooCc|!VgES$eaPC)Q5btHVxjOJ_etf^uR9KsGrue0lXc&pEmry zzLAp9y%Z$uKW{mj%~SKIPlT~AI9y+#hiZJhYM5d~!3gr0T}*R$$FJ0d1gXN|@Z8 zKJqOG5&9)r9K>16fK5Q*HdClFQ>z86ZpJ4(!(y2izz+u?@%MB{FD(j`E7FzVutMsD zn>C&Zw{n9xXU7kS>k1Zl&PS^~jILKUIo@s{sa6IExJTrf^#}0`AG!5>BmSVMNY=MZ zh9`wljXx8|C_1%>Jp}SvzZJK9w1?OyNpOcrI;VF*mxBlZNr_blp=Q3e>y3kX>1UWU zcc>CFIARzYJt2KQhtzcxg3SyY>IR}lMl|k@uybXzf;jRlS>ZXohW*aPVxF}cB2|NU zK-8V@v-5x~pnE=l#CPOY1$p4R!Vd}tPi$D zA=xU9wB4JFp%d1hy#?&m$+Uh_&$V(fxBc!+#B(O2@XBezTZFIr;oCAO?7R3#?+3Zv zW8E}LtMJG6ql$JmgG5=YH0G>xDY=pGz}D0N}qMS{YPMx)Ndr>#jro_Lzj z&mNjXx3|ZRU?St2VB%Lb-CzXQv)DFjRYk1fp4ZEjy4J~!tv$e3I6B3a@5#kvR~@Uf zey=8o9iKVszmJ=GE11BcNQ^r{y3v&Du9Vn!#Wv!9bxtGBai^&tYoKx}%2V`$@K~hw zeo`Ynf=XkHY#Rw9!6CaaPv=TuZ#CcBn-Ka*>na5H8B*o|_*aA}Ebgk3aaz3s)sDYW zzPC_=xs`Xp8#O7_d?Prm5+v=N&kx4MSnNKcw})y3vLpg|jZ|ve!i$Tx-S$?BZS*Xp zIZ=A5oviJ%_Kf^Ul>V(^qie8zNKjDHgjD1z6eWh+135+c=V4CrCd1DS?j#ORGGtBA zUZ09CYr4bp1?+sAdQj4i{ai`NrA2gB@wkR|S&NnH85O?UO~VQX-59hM)*a5c^D zyTM5I<+y#7$NR%fe5!kp7ur9d8^u_dtFR7>oNNzlt!SeVz zn0(vUas5D9vWu21$$K}chxN;V3&MWIwHiKXS0Mg8PR~6bo7XuqBs+(kJbUPL-=3L8 z?6#Vj4{AU?f8caDLI3a?$zjJUk9WOeR9cj)<4fYZe1002Kbm=qz`l2O7nkpz>oV-v zTJE0PkbINc8#8#!w_!Y<*ux;@_9g{cSK^XNVa04@h;IAsySwt0AL_w7TIc5?Cw;38 z6;=92*V4G(m_pmXKzYFrkvSRR4kpK4W);*Auq#N>glXrQ@bFfw!Q)K|2dyAHlBA{Ze$C z*H2wPlxg#=R-;ZH3XHPOz)dWgn)JlxCg;QiwLo8FxUS)Alk_Yr+by&fnyYvm=mBe^ zpJS^Ma#WLt!~F7lKhrt{Q+Gb{J>V!8i<_D!WOTLkNQ$cand+Y|l!f9TiZ}#BI|_SG zz)}5l42Tn6OUfIha)CXfG#7M~qIFj54a7pLn1lMeuf<#19Dd8=n%&h5L!4pq`HFn} zWR#{a-683g zt54`~c;skcle{;RdRz(&+MNT#Uj7iyh%W+tJf>HGAP-#4XB+mf;Di0qF}d)Ot!b$a zYJ#U^I^O20Gu@reF{2ZT%_zH3>#O4HHk!$WBn;xc9DC}pgR0VVW-j&ED5CV zxJB+mc&M6^kyx7+5hT{PN3iVbIla;Ocw^QpY3sGrm|7*VMX9}8tdsB3oafUbomLI)wf4Tz8F+S5{Wqg~IV z-yZn8v-zSqV(s3fzauJAU@J@Gtdfde(|SYijoQgn_~jsB}m#wt#r3+KsJ-O4bo8LMi}84 zwft0BsT|hvq+lSAuxn`=Ra+bvR)>?}~V7&v$VT=Yg z(Q+imWWM#Tz>2p1z?1Xg1L{|6A8LDp9hP1#V;2x$Y(a`Q#?s}Ahf!m$d? zLl-rD4Tqh$uc5Dx8frm330(CwQ{McgHO|>A&)o8ZMq7@@qVamzx?7;UD%_*#?A)Fo#(8zH^da<} z@-P!5Ht*;J@fBUsOafRSwil;)r-B76WE=Ke^ckb&@eR^^6ZXzE$!_S4K_3%>^4x2b z?>$dw;oW3b_RgL8;*V_we_(s3Z89jV?D?vXp1u^jJ9$fbw7S)BDh`H*$4cf62B#d- z4iN(w`n~!qUBOXuD+2UVspP(knypWR;YqlxTarWtETDV(+(8#`zlb2{w6)|~~%&Tm}-R{SDC&%G`1_>G#7 zy23RRUs14pY=>=qoXM9k{6d7n(;vt3Flm@dS`3|I{B^nGT1GI+hqv9{{_H?@*rfP5 z5~NW`p-Jw+s)7J_f6DQUl#jELoy+9q-5CT?^~^7q)9P@lSX&#-mQBz;&5NvG(!sW6>g(vwTvXbXY|IMNkOS(f^Ktj5^k&rHl1%lGuNP~2j)SYYZ6Z`DvJLkF2z5as;EEjXm-<6)%E`L?EPB=G>I-MwC_TE4( zuS{B&y_8K74bW7mdxPuB8P|*Nlb;>DLg?EQAk2<<)CF_qLZYLhLPBV`hQ#7}{r<$U z=N6K1dip3lMc04MZ`W>${4S#^-N!Fp}o6sm|@A=R1=*%-4#u8iBAAcYMu!23)eAhq?CxYtrEd81MS1g zI8#!A{{6~z{?zXxNd+Vm{i1-q`yCP7-klw!pP8d*$GIegQ+{-2<+1yyW9oY_+$%Cm zB9Gep^(e9PK|7l~uU(TXxNGK;6N%bRHK+5tRqjx7irTse1BfG!#7bWF2D)8jMFB+~Y(*cjc*u^V_tC-0nDO)3bD4p|9O0_=@k~C;G9`Ualm}!lqU| z|5qC|_quv&u^-!R##fuxTbAulv}yTkJ6>p&EwjB34pWY5maAB{9f@!5KmMPOFbAfE zUTuO@ouJr{j5E&BONY~+`8h@WdGIIs*V(_Gri)Rz`@vv# zLxrDP_=O-E;$|DJD1Wrwq!NTtMG%-gwHRj#*FSOC#JjUjaMW6u=_@HD)($u;lCd?* z8{PX^g0U9q8G7`ZKhGj+FuFS^h9zR>g98d~zcx0Br>psidPY-BulSRMS_}}^s7D<9 z%>l@!*8IxqL)s{P$r`+cwjkDXj*YYE#q%K#aNc4v`hogVP5&o~?-M3i!%`5@oSe}^ z57cESzVf=ha^5pN)K=jA`}yMvPK{I|xoekP0j~Qi;Rtl!wh}lk8DPKM8KNv1(FWK^ znKQCSJ*g46b3KT)KGMh2gQ#fW;VjXzAQJ*UV$ZEIdd;lbTZd(^W-XglBrmz1K$joRoc@0f6VC(`oHG%sZ9AxiL21Tkr#EN*CgWPu7!4?9N|RZT`ll^7);`roC?+wcz9ZtIwFU zyn$=neOtU>!3|bomCp?o?4ZU-ouqE5U+9H?!n|BrSE&9GfitCw{XtBasolbYt;!FQ zs6Oqnpxkf6mCQ-BO1K+VQdw1iKFauGrk0Lyu#-YUG5dVlSgG|^bix#`7e?zD0v(k6 z6n*szK-@S1Q7k_1wId8~+sggPRdqTGfc>RXt5a;9rv~=5cV&?=2?`VTGTfhx9l$ur zd@f8OGJM8W@N#R!FQlb7XH8G*3yT9{L5t*f;SWC82e48N3R%3kw**{i&b~-}@ogeR zO#n9<`53}lo_$37EA}x<-+Nac{PH8WwU^=kayF1|cyTr#vQ)&& zlyCib=%yajlIf}xkY>A+$$r6t%3JeK*GR&~5_T&^)~l>Wm&=4g-Lm=52j>^am$)zc z9EkyTPur9`!Q*k)DgIT<);uz@2P;O)reK+6f3`IkvilR_q~ZM#^roGj7xg zDXp_DS=QVZpH9g|hN@rAZQ2FW_xw(f@eX<0qUM=-0TZ~T(_3>WP@k}!Td`>r?363m z^dK7F7djeQcf9KbJv6@L37B@ z6!ow_$O@-d%u-0~g8=7%AzPW9g&))EiScHN7WObdfvE;IC->|@p4july5BMNHwbC3 zhv*0ryiDvvj+rSA!^BLhZf`V97>@?J@y0*r^~Mrl$+DhojmzkzqQnqYm=`@}5n>OW zjWX{`eEAznh_vecTbJ;d*tQM95$@ez*1lI)DUkm=lv&ckR3}MK(HyQ#UxmpJ-A9po zOJ$|98&_cZ$Z?_wD&dTJHpa$76@|_9Lx%6@0`dM5gVm1}FSUgDV$b3h;Ib&mY&C4i z*14DYGOMS^^X#O;o2t!sg2*a=1(nxU)09&On;%$t)&1a__ACqXhudm}RZi(HZw*8K2Vv~GDPiaDk z16gF@ywDBFG55;bdPa}w@>}dWxu?m@>$#OOu%mCknsZEUsZ+YSg(k?oTKwD>X!LZ2 z`{JAYD{x}!F=6^>2>MIO*O=%3A_2afN7Mo<>x0h`x&3eoJ0W7!

    8dR7y2pAW~~awt5uM--Y_uXvZvU6f!G5zj!mJ*rGJVEjow z!)iYOn)ZnY(+hyVV<2{r_Ts%74SP2i06vF;Dt)r~^&)flE8;#2Zq>htxGChWdB5=_ zJ(Ybwu=OeWB3@h*a23qGvAg=h{ShM|!4_!bkE;1Tw|u-i&bW(3lwS?xK}|FdnOUN? zn;J!qY$I*C>U|V&Q6GzY_Ss=GI}^IQ_saIBi|C!}j33l1z>Cl9VbK~y-nA8^bKOJ>Zf$<6^7_z8%6`$684IBo4(!f%)% za=>nFnc;QzNu1*0-Q@=BvEG!1a=wx5HWTxjEo)Xqh2l|=_6k|@A&~au1NL}5RcG{) zK_1r8hi7<2(0zrC+*<)(2Kg&2z^%*N9&$|G^@?Ze3~rvM%0fQ~I+Jwu3QOsH0Mon) zAci=R#LgJWPa^pa5iMg0<& z5EG6X8oy$3BS^i4Mw4>+vyf_A0|o=n*)e)n|+Ozx7<`SU1X!k4E^-QOeoWK!O9Y?X5|#!)?60DO)9iBdihOK zL7|H&i9YMGrEb}3@V;Ynah=hna@rpF;X_5;e1Kc(X?|R}1<7sNehaML0bdtmt;dR0 zdzHM`dg5r0DGj&AiXyJ{cEfVsn{O9dg}iC+`G9JRt5p|KhR#OQm^$>+K9_h(1p^?OVj54Ty|qae3CeWvr9X((sjS@c=l?)Fa$`oKX zYKZ|W;%z!kjXZom)ZZ4whF9fKj8R##YNS1}syHu?v8e(1r`Y(rc`JE|P$$xjj^};4XkLC(& zz@H{NDRSPOsq_)GWU$t6>n(g`rI_EpA^%X>1~ha{fHkv)^o z9(xTE>kq<3W4gCS^1_^efJXaGm3Y?z=vR?4mVE{einKx5O|gc|Yd_ZfW3j2*Z-;`J zV66sM8eRZViEQ^0X!0A~hXHjr&7^!Y9;`Y#fF;#ZesJrZvvyaj?X^S$6|@MNe5w1 zEo0mScRWjH&aV3KTQBkk)0iO{YZi0!>{qBMWmtw6(BZZ7D}%&y&c1yiahmiuQ1x=_ zi+;cTtP2Pgi3jH{7L2)3QCK1I^s!u0A0G8F`3&nCn`dkHzO!dW8(u5I(mP;DN{Uqu z+_(>DewlPbSPlTk>^DA~)GJ&G8`#fV z*-Z!P`-HVk_e|BJRx)DoNlb>YR!U7<70-=@o)M8j^^9JNu-}g3hg1$}e!bZUUXIB- z9X$)Xxz8`FXvqnhg4~rmpC@hI7jdTxCJR2ZFM7bLxLTK>>itFgbLGDNV3O0l zdwhXXVj?QI3Xty<2GARY(?U(^VwqkPkUZmGX9<%#@Rd$ZN@oUFrfc zA}L-4L7>-pDFS)mt;GC-yp z>n*U18nUy&YPq-6TL{BZup5pE46jgGiQtv(!nzT;nR;)>m&Nmj!+J&~-(Nk)S>!-$ zmih)SAD_X_Xv~)i1{b{Nby3b=hd5KLBEF6ky5;t3(T%cqUD#bo>&XaJ^AveJ^GeFe zU~Xu#FcsV*jy0b&%3VCz1rw@t!W?nl?sz@M9k5iDdBaACVkg>-tJUuA@Ob|d%NL_? z5sUCz>%lqVz2RFW}$wS>SByRWJ^-{GH}9W^k-^;>n<%CN_V^XNi1AWJUsK zue!H*a41S-aQ(Jz2o&wo2Ph~ zRf35CgQ5o*)aXCgvEMT;bf&hZ(EG zbU9j0W-gq(wL>`n9u=(}N|M^IcCEEFfN80x5qCp&wjh$`iLRFdx<3})F|a9&I15P= z&x^0iT%USMk1^HsZfjQHN@%gQQd2MLLUbVN)T0yN7I8yhdCdiSg2 zrm`P~MdAW*Wp|QsZfvwG3f5rBE5dRLk!ZYD%5Bg64k+$CT2hKR8sgo@T8&C7B<3Xe zzVaUhtWueD>Z1apk^?w%1<#()K4}s*e&g@=m_dU)G89oFD_qIkBm8ZWD~eqf7Sj!k zPeV^9@sfeS3&N|QQhgiP&Mq&A&Wrgg0ej|qSg9TDz6c7*quIF-H)KoZ9lwck{RM(f z>YHO#yUrwdX-e?&vZWZkXA<8qt;}p&U*|eH?6Q&aAgr8#3O#B0sY?{8iPwj)0RSj7 zdEXiPQn9L;SN=5l%no~Kc=0e_#!wlrcFmAl^(OvxMjRn2v+~NaLU}Du1Wut9&xlVnKHk7=Q02N zwO_Yk`!00^kAhZqX#yQvgpj6S$+r(8R@9-S_kXYnB^zS*{v6e>v?brQd z4ES+0YAo=9qS+Vd?&ay#K9k!`(=1_r0kQ1yAhmW$Gw2y1!fSF5NX2`8k16~9|MiCc z@wK%lzRmWsL@{0e?T!ESHHtREDu=zn-w>gwE)=IKxq&SlU|M|#cIXb8&-jt(Z($GumT^!FJ6na@%$E!!C^z@!F}=G&9u^Y!_nFL=EjH8#c}FkPd7NSoK5DuVn@KHYOPEDbA?*CQG9RCq`F zDlGId&xm}Pv$QnD`Gt^P&TtB8UfS~D?$3oYrtrB7mT(*HAYPTtUy_`R8->q%5g^Av zIVK4l1Z6B}g@iJg8dh=LLA_IGF>Y2pv0}qq1YKiC^gD!`PCkPt$^BEyg-z-UR8mR6 zVwQ?`HR_caz>v)8JM%|?$1d%$@cml;rhiJRq^|!Vsrux1b0q8VWCnQb2?LT8C^t9* zi}L4UOLtZhwr^EAy-|DXMb_IZtg}4lb_25-3JWFQS(whuIoILQWWXId;TJABQP2}v zl$l9xSr7zU%nmWa`rEStujET#A~^rEXAn~2O?q-cmW`yC}=TOC^-|+^i}dh zL_;(bc*b=5{eEaBCyCJ=EHpqW7Cax2U-xtym7bTPwYjTIbA_xs1J8i8hI2=p;X zfM`56C!pBpda#?1C(rF`GLR|-?u*pK9`FKHp6j%8KAkqLfx%_Fw9W#-glTiJ7T}xj z+rYw5xTtuGbWPrNy^KONfcMy!`_c*st)l0Ce)Xub<=<(ubNkzaK>i#qpc0vF$RBX3 z4#qBi73DcUQxZUZQP&u%@67a&oc!)}0tiIiz0gBJFNz{96NcSN zblx%SLA2(4_j4}&`AvlvxJ9VI@}e>^B)$~LrM!k$kFrA72OW7ugsEn>e2Mo(Kx@PX z?g$qDf$;BM{aaC|E!Pxf`-F2mWdI`%BDYquc5Pw$qea0wdz=WR#n;m!W5}>r|~L;&DKDk~AQ5W}oQ= zydo>nLA;mCXJgRXlLdS$x~n|!5fl_)JkftU9$)N3J}~dl&M$IIYIig6>3HvHaIj4YImRRf(BGjL0qawav?`AH0K3mSrQ}W2f5#-{?}j(_1Su1{~%p zp9viQ>f?+w=h4O=q2JNkIulvREzM}GGGb&1SW(nZ$N&(9faPvs=!%U(jW%gI%%-MG zi#Yg9Zlu{X;r-LHZ5dPynw#rsf$z^$Iw6J~x86Ad=5C!1k%3vp@t4t{Np&wBO(izhOTyBly zu^W3_nMpYqgE_x#Cgh%#H6KYocWY!>AqbLJc!Ma0Oemy66gwDjPj2~ze2uFz6=#G| z<5WduC$hG3dgg8eJ!D46#jSM-=ytX+czufP^A$$V0D`y4Z#GlTvI}M{zj~%u7qrZ| zr%Q3%O&_DIv5mU@&>Lv6X}Hm|^nB!s{Owx=&eh*45Z|5%;R!&&6L{~&6EIJDyB^`W zMI6A=ghm^qop|>?KlL)7I7@>0xo+mUkKSDeX-&*Q3pz%d4P1Wb6`r_Sgj7HTZJm6! zl)e(AseQ%TRh{bjG)cXZIjqH?gFWD78F+Bok#~T&Ty$BY zR={KR_Ft-;dOB;dS1Sa`Gk;O#Tn(wb*3bNM^;cES!I%b?^a)TLDo7C91u!6c{#B9_ zQEWgX7zgeSc4y4^{oc!lCQ{Rt-<}vS*tTx~VWbo|EqQ!{GjaBuK|FXI_wv|1`8?sb zhd}2`PEqY(>J%W?n-vXCg%q%FJm2o{h}!b9XTN9_9y&ySRiJ(~9m=*;TchiAL^;GEBJL{IttOYy`5nYrTva}Vkj>~H)}jDEqYO?jCgWHGD$v=}em zgsN=H4;3C!d*=5bCneb8%387a#^}9>bR#NAhMUmCXc^ZIem3gOX5uUuhs~ zA$ia8bQN0XWe&EtmealXy3)N~1zR(1pK9amoaqFv*1}OfX1<;ot>*DY*YSHKE~Ck< zJV(zC)@qp@8%ONb2SrMlzvNq|B&$%%^0*i`jF1yZ*fH7_rHw`4nlQ{6iIakJ^gAEu znQcODNQ6|YCC>`kuS!bDILo~>gNC82IW@9GW^Ut{$T>D2rMfPMuiWCy-+~+rR?_C*K-9!Nl4)Mv#dD%>aO0Zn<}n6w^%?!#(T7|W9@l=O;?Kk!$%^kq|)NE#;$zIEn{N1kj*DppjL z;77chewlz=-W0K??SqA{ou~DSF2Rzt5USW??T;)tDx)Aqa{mB(@T5B4KZvskPpYh+uyx zcMht}Z%U@Xw+wO?5l6)5%wYYqS#w4xh&p$klV>LbJ%)^xo;|uZ44oAdKhLL49b&mk z8vx`V{RkZLh;a2s7ph3zGwbV%L)M48%Lw<8f3cfshpyc4?wlpYJ50XC#botv$YqmU zkiE15T*~OQH z&dThjw)o6m9X5(WoErGIgX=pQ;+I4XrPvLq;JlU#WW2w;B-<>w#(#Y$v9!a3pgOOV zO51!N_SI=l%`&W6=lFfGv8coIbhR8T5|uTBr&rxoC!4jAHByg({MdSbWbXlEp-(9S zowT4_FAv=h5rd0^r4!)$)e|of{*+2i)+pv<{cP_T0i>HE_iWpM6VZe^+y2?>kC{My z|Da6XEQBh~d?Xij=?znsW_m0&`;?@aZ7(`2MWNts_2}xi5CHG!&!7{;(6N4ee;Fhz zZ&uO6Q2zp|`;^WZ!I(H*G)(8WdbysQ=#`uvOLEbGRRIcNaOjATA+sJVNDeRY(yj>@ zfR6%wx#Svj6I{09^%6_%Qpnr#B8pPY8&pmogn)GqAL62Rzxe zHd@~XZq!V!+hGrQqnZlq4y3%&oFG%j>$7Bfhz?>Gm;es?qHhDGZOC?Vl1%n?tl; zovyNFZp`_)u(>reIUGDoJv7xnIAmg3#dNzBpAe0-YS^ATJcA8|#Qm$-2&aPAi%F|d-~f^FyBNXdvQ ze>yjY?GK9P964&eq z2vlA720#H}XB&ci0T7UP@IIfe}kD|lu;Z+tKO(7HdR9DWqsFa$7V88MbpTuDfOrKwX{@*{&- z{a(A@f&ypF=V!m9yXY_lP88vn@?2qJM0-2)0*3p()!OevTIlf5E2MUvhgbulCW>>L zA{`aJ59{813(XX#7rWItR|q$z-u1Av%j?8D$Nhu2FXCUuRo!&5jDLpP9NpvH3LmDA zclL4x3y0{vrqVLRoa820bojGl}z)2K@}wBLT!1moOdA}*X; zipSx}K6BQEu5p8D1BNt+Xf%N-Y;mh!**`!54-W?u|5hmUK~`0SF?aXKT$qMboXef* zyk@K_Zx?ap*FpmW4>e~^i^;#X7!#*8ZCO2SI5gC1cEE|#pgLmnxB_+W260;Xd$d9+ z?<8xzQTs;N6M@kJg#yr7_5+>P(0&E(!!N2RWW*2ZI(E>1c=O{qIo51CSu%GdAtDN~ z?Y()pn4E+&UL~|1N-ET5(PS~=D8vL4M3{}|M7ZIwMmQr%AklexO2oHkn zi9cayOi)pZfA+_)LIGDTA&uPvZdkO$cYuCtJfnGY?h_#OPXDE#( z6n%ZsMG@gP6d@CJ_Q(ELS=W8biu7cVm0=1_?ELkyHA44IMf+}Qa~IEWSTNVFij`Fy zGJmpBQ5;x1 zJROC4BaElH^+;&RDGN1{hCdhU)(IiFwcu}Nnq{Zj2l&^gv+iB3 zWfqUa5gFzmbVM8$t3|Z=-ePe2`Z6H!()f})%!z+4nMEIjxZQ+fUsgy z6DT*fTb9*DXgb$l&sEu&^>|9Ux{u=VGWRe{Us}#wOE$l|5r|;zbzzdBbC}r|a7=HZ z9~jysD1Vx{f*-!OamUCv^V_Z)Q5TtX)ILI5Oc=sIva2xjyNFMw@L=KY)@6s-==uXX zAG8))qQ)q33DP9;`-sFnXz9z_P(|PWYGWBsgb)oz=%E4ncMg~;0KyEOL6{HZcD%Hu zz(kR?6m&(zSG=@B)rQ3nVNRY303ElKF*b!f`Y(PMk{@s!kkDL4d?_>awl+Y(If>I^ z?8RUuJWRw`fX!7*K9zeIciqN_haX76&9*@jZ%t=VgpIFG42=g_i?Wl`xM__Zb6vuhU>7tbh@Ht)%8$jETVi%SRRop0mds6f>%2^E1)vw zm+;2NrjcbhKqNIJIxt5wK!Zb%^AL>(|CTya-$l|$ z(G2F*37@y&wF0UQ3%5nrA{p@h7TJx#%#)(){M|s3VDjV4 zY>qxQGf*KbKY1$GlYF3===MYY*@Sd+l_&y?ba%7-g{wR6;HSS&@&nWdp`LYu$3+`@}AMI1=f((jj$ijlp$QbbO`XU?&vnl04Q<9MoaCGBpy zJ(0WOb7xRzlegk?mdOzoCIEmU zDZehBK2G73N68zYaVa03$QPTDv9GE!dLNLfG4i}2CWGmWH8HIh%jn6#4wxy_+17Uv zn6~7vWFL(cD!tOvLA%;vK|$Qz0J5$hTY-zPVcA5x@2YnyD4izAA#%8GsDE?~D@2fE zytQr_N|XQ< z3(q=4`aC~SO}vvfnE0|oH%$;H2iHJex`AcIRJy=|Z)bG>B5;i@mEF%R?{r&+IbYsb zPyCbyY=@-q?a*HkP@~p~0~sQl&`Y^lbUsXxbrEsPMAISgtmd(>C&zLuRk0jLr@gMZ zEh!M_-vzVUxVg^qcMMnwTT=K#M(7mLXD3XAHLGG z>PpwZ>qn3*&+z7_W9+Sj<9#Jb@$94a8CF*xOs;u!lY=e|W<46iJ+|g0bc>zF|KuXu zEKz5Ff?#H5?+h zr;wqH@&t?j{wOax0aGr3=SIA*P>+>ioL|XMMv1Y11J8#wiyc5o3X2j67~|)!DXS&s z1%!&4&Urp|@z8wwGuNV{FGDKs@&ja64~YAO2~6~k5N?QbZ^Y(|02S-Vr z-AOGko;!V3c9+T!@K!%qXkF5Cf49virE84fhWnhj9h@s`PY|Za&Uuv%fE5|uj^1<-0}09|tSWvRPy);L zehW7j&tkLDsTcTLq5m&}%NEXpc+1S+ZS?h1G*+LHUmCvnqt+<=1%Y!u2X;*WIUWVR zLaTs02E~G3B0qlMK;q(}$=^zne-$Wgpqipq<3DnE^yexPrV_rF&?f(H$}lRy2WD~u zT2W=r!dT~ZIT$y}Xl9qd%+%T~{{9;x@~>AV7eHhnSBS(aVEwGV%W-pR84$;tWj+lu3EVU)y>nBiTk!_*OFY%9GMuiwD zG%U;ydDVE@aPAgJ?y}17Qnx zIj?PrQP~hU-OFJbZ>0Vf9G=Kw`M5vvr9Ws{lZ`i40tW7zQ*R^lKn22OH7>QrWj!MX zFH7%$xa$NoOF==uJ`h|E0nLgW@ZXl~X)O_x1&c~rT6)B}?k{}fI;1a+F9G;c)6w74 z=d_&o2)2K+Vx^oQw>(Wcc%IZq;>)*%z>tUC`}%^RM%lag>vAZ)kr0TtdIO>XH7+Uo zqN25J8UjhZFAOEj`|9A((z5{)7O+kWD1**{s8#FBn+M^b+YaOsYT`608k&{$9rvE? z&K7}8wWFp1K;OJd11AQ{3M?QV3yE&j{RB8=DuVuw)vNalh=5i)$2cl$CcQ)sVf*Xi zSQI5MeLok+Wo_Ga_RegFY%sqMO0N_qU;HzT>9fW zu9Dt$Te7>4=2Szk8|JTOf98E6BFi7f=vEA-BO&<#-*b$3-jfC2N5RYmrxaBUIN}uG zClOr8tWsmauCL_0HQJNN0!x+Y><5-{h$PwjI&Hz`%$Todj&UKCv?FON&X?2M8d-XfFemuf5DHq4ri z3UP*$%UtK#e^Zg2Wh{v5sZO<6`TX?e*Y{!xr4Y08h|{{FU*9v}`CX49UO`+zZz8li zf&|1RI4**1OE%0(|l#YxCJA$ayVPI4#4Q|&dV|1SZkZ|?|o8n7|!;-(;Q-rLj9CeO!`U{HxOpj zqfp)Kn$)$~D^!5p_oZI0x^GHQcjJo(_C6JPM#b*^U|Zr-675s&9y}9W@43tS?K)uz zCJp91;?Ql_L;w~$U*)C&?=nbD%>kW*(}q8hW?llrSj7HRo|xB>q;lM^Q4O6nf}b7f zd!6EwxUGId@@VQ2c~$|CGG&%K7&`M1+^9oY@^g>M#0IEfiyxTA)kLm+)n_@)VL#2P z`3$vK5rGw!;giEf*)Oogd-RHa-l7T0-H=k6VmFGt^HJ?el z+ZSuF9Q$0Tw3*bTEPC=Tl;JS&Q zK6hTCWX%^(tnVo-R@g3yT7ZlQ&@1L2^CXG5XEE&xknVZZ^byP%z#lMOBfn%DpmEuN zdC@d!=LRX=%(P9Y>D+6Eyxvks7a#6n0xNr`)lPmS9o7bN&$Oa4*-e(nBd|U6jv_Dm zOyPD@qhB-t`9ZHfbtV7k%>fN3!#H1vixqJCJ^m~s{$>DVewU=OC9|7nXRnP04BEP* z9zT?QZ}_YR#Fig*e#%*fAZkq7`k`VL6fLTiYKhll!S-xtiojpbUhJOx7YtbaYS%E3 zH6VI&Hu-Y!?R*!17?crome;H{+}>PyB)<<$7OLWCeFDn~OB%?4dpuOzAcJ01UJR&~ zD;diGiwlZ(=hGX|dMmBhrUPyD_6ql(e|vPBUCE^$|y0C5#)nhW3KbuE+qrfsT2q3 zx+}76gK+GB2)C4Dz7{1f>&V3O+;`5uP71sHCfBrJJ9LS6InIru%O!X4a5NqJr$-AG zJo|jS-tO&mq{_bkk1LeEm1H6Mo~wcjmS67AITzS7<{d}n;-{u24G%J=c4|6b2NdfG zbu7MtWdKd{=-R1(n3cQM8;94U2|aj50-_{qX+qG`n3cb7ZICcw20F*yu!OMvRAVL~ zB@@{FFX%3}vfI)Vn-75oN2aQF@X_N=8D{h3+YPR<%Jp=*Bw#lQX8M zn0TH$5WbtbRXPn%)tEr!n;nXsRV87!h~>;7x^MOzeW`#?D=2VC&0+!#A$v^N z8vuWK&eOnMgt>pRo;sl^0KPm-0&SIYq4@C#{%jl@kdXIV3;;F8J8Ippl3(eFF z`?6>s_RG06vAm=7*6A_H3c-N#4;2FDf8)74ICXO#pg%^MsKlJXGAn+Sf;MvoSQB|V zOg6DM4zIfWUk{rkpWebA)Z_TdV8sOybPqz({B&5;TLo?rs(9EJm-j0A!m#|v z%+3=yByEAVJpUWy*HV$a7rIF$uQ-2Z;e&k}5KqTWY>0`jHRmb;4>n4xZbb@S5(+fvkZ8_q}<-@`;-(v^Z1t)#qTyQGlE?ayxBcl=78A;?W4LA>>n>L z{m_}nDLzmpigXYIVwR?7l(C)&A>re43-(psjM9;5>ah&=M_6Bm$Yg(oE3&nM)r@pY zrxY4RJ@uE6*Py!$0WeouA7mF=xiye%_F z&2GUVY!NqJsGTeE{>7*6fD%zKz@LR?9U~aP6stHZ^aum)mg|@7LqXoX@4-v`fR(F^258N-tBM z2_fp+T!|LYGrF7-SO3PfoT)96GKR%EsK?V|908M8?PXT}B2~%&C!0!2)G#u%_=}O! z8pH>$G>1a*B$S^OwNk3SnIuQSEE0Ss5#i|ATb6`uZDH45EKfj?vE?41`H-ZXU$la9 zG>}|fe6xTh!2s1T7n45n>(>fkNnk^;F0C?tglf%0AvR&R9GpZYOC-tr4LLOMT%-Y1 zdL6hzt42>y4CoZ6BLFie8?7n%;(+m`!3={+=qrg(eO)tN`>84_;8=U{hx6w|ZB;0|pCn7raQC zM*+we6T6*(k?uO*x+3|eaWISB3ec_?O<@^Bu1L&jAYZANXOL$7`D#^0Bg-0_8ErO` zXTX7a9gS?6#&Tk-yiDH967(moHo(|hQ|N*whOM0qnzlI-hs@)OhFRe89*3PT4mxvc z6Ru)l49jRp)K}5>oqI!FEdWi7$t@Plav|vGCJQ9{Qo9r5u3YjrjNj_M9be01uUy zy}XV}*~(Xbk%?!c`%Vo&d3|e7{MQwe58+mA_{McxI2XQclNmOlBYgg@K7ms+#j!>e zPj$1RI4{|d&c5r6m2bs^pf=CKZ9E|SNO@OmHRj(N(0*iT< zaV`cU8rWUuog5c_dlXL5jf<)$!BvM1-Z0V&xWj_U)9UfcrOYCvtB=c)U&~0fY=<)Y zYy5*MxkdN4@AJhd@tWm`%5-l(>-(5%h4$8Da?iIb673cA$8N027u{LKHDJ#NgiOT- zYUx9c1k}RBPFw)g!vuLjBwWrr8Z*sqRbxGYU7rB6&R!NEg_lI|)X9$945dRvrgv|s z1=~-ubP`Ujr;80$tI<$)Myg9ZMFjqGi68y*tGR!s#$uM9j>_{f(*7j%J%0^hrD_G5 z&^)BMX7>1;&e6e(Y4eZ0WL)|kkJ;f%1F)0pwV5+>a}3Zi_OUVeET4Q-j2M1yFwkz!&fRxkslI0*L&>1i z>ECFK@Y-wg$9VK;FwdR>?QP5~fElPh+O2RNN+qdsas_JB>KY^ZU0sde{&=X`rHn`R z{r8LGQTuUxw88})732KP!997TU{-K~S~Cjy{I=G`{M_&HSnI?+Lbba;Cf*&BOfVHL zcAw^tuq+{4Q5yBnNfAZYAYJGjw$|Z9Ug8c&hl9U4HUlnR*b%QJcPE#o*dlsguf6{G z1knB%Xga#!h8NSb2;;YV`aZzK4RqGLk0y{`M&yPRQv`hbrVm*Ei~?JZBEKjcxcx%c zQ(MhP#7qOwgrHDeUcz9S3lz*022noxZGxs{Gj^RgI@ML^4HQuk^4S2nd)M{{+&FU; z$Jpg*-@CS@;8L&qZE4J^PZC}&XRBF_30FYan7JeN*RtW$?=~E@Td#A#!DRgHHKpv9 z!CR$6RN48qhQRpgt~T9PRG&9Y_k_@9FYRAJM0pbr+Qb_crvW%3B?tvvz4}1x;G?v9 zjfwsaXM|=88g&Knf*)6;K_)dKTi)67Ru-_OXpK7bj*Nz6{W&j5d`vzcWL+*1i6{L2 z)djMa?GK|oI`H--=}dp$X0_<_WfcAXL?@`euTSTG-8s7<5l5C14)=53I7f`@UL_0? z`ns+;gy|rU=7N{JV@${AGjrAB{Z}Ni8T)(j`{pRLA`$Ob7KxKlKu9fVI=&+lew@Pn z>;JFZKr2jDC;r7Ql}Q+qnFbw-wF)HBAOla-ZOS01Eh^0i31B^mv6|B)!HiOM{#|x( zzXjsig#Ywg2v+~M-$JwcAASq8?NPY#9%~_V^2AB;sM@G{aR`p8}Xj5aV*OmmI6OWRz@vNIj zcHZ4rH@y9k_Q*qHnDE34OQvup5vtWf_t9N7^-2t?aoaZzRKO)K)(11UO*G(BC{I^( z+7W^J^Fit@EU0BRsl}&|X76%Tt|`N|?5B`WbzaX3N03E&2X!tBSwb~!VsV+{q2VPP zNt$A9o2NltLV85Jig_Ho)=c@2T2m3?TEbR5hCP@-6qzH{-7#<9>dwM-*l`aP`P>{RPl0sh_ey&nx7hf zz;-pvSq>tyvE};oa);`Jf~sVak5pWQE7i5&_U9_rh~VWk$J0PLe`l6d?Znc)u@}CD zO(c0rJAz5~N`Q@T#?g#OSc!qTMFdeEJzZ0$_?)V7-8`GK>}|me@^!Jz7E*~pLGlGLw{A3lEco7!MG3hr__3Wy4{v@U<2 zY$nvvaUwO`L6A$g;%+k0Wt(ORNCLvO+GQQFkC>Qq6_GpLsF#-QxYhT~r! zuS#n2bM#%ul$%3GpJe z;W?8_4v?Ni*H=S1!*W{p$QFN2-`1GP|T!p)o=T~t4$%Mj2-J=@h%Jv)*0PVIbedkq=_o)a&0^F2JK(K8X~!Anp2 zjn63n(NC$RV$zKhw_AQdqi;|?Zi6P0=KlReu+W9>7cHc9?a>0QpyRpvw-Qgfc_#8; zLNe}Dc{2c$uy5x8cMs3vRN9Oht7&DmtaTh!vh?NbANJ44)wyZsb{t{l%c_Dd?m9~^ zE~=UbnGH7v$=~8UNEexbuJ6v#L@J{E#5p%dP_5hiqxZi1+WZ~!2mP<=TLKOVs^Ib`;HqWYMWA@++PpjB=HGZ*8^o0&3W~r}-Q+W; zX|X}j>Gc0u%drcmXMmPt2yth;B%yf`i<-;8QqgPp^cAvINF*WKYaiJMs{oA2+i$s& z=QMA9{v8V=mF6iDCdd9zEE0X4z^rL8W7;iVIVpTV(6@W29xEYld zdl8Klq1B@~r%7Gq11t@36c#w(vPT#o5;;N-(nV*JFb~#rvIZH{o@GMaQE- zl~ZGSL9|o1DpRo=>1p1TUQ{%2Wsf_& zsd6DJIGx)AjS~q>O;i7d@W?q~P7m|_>*Ga{L#Djk!?B1gy-jS6i WhGB<)g>2pff273a#mYnt{Qe)!+iC~^ From 85117ea1a240a216534d415a14817f2474dfb39e Mon Sep 17 00:00:00 2001 From: Razvan Stoica Date: Thu, 11 Mar 2021 08:30:01 +0200 Subject: [PATCH 11/48] Improve wording --- tests/2_docker_daemon_configuration.sh | 2 +- tests/4_container_images.sh | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/tests/2_docker_daemon_configuration.sh b/tests/2_docker_daemon_configuration.sh index 7836002..89fe6fe 100644 --- a/tests/2_docker_daemon_configuration.sh +++ b/tests/2_docker_daemon_configuration.sh @@ -13,7 +13,7 @@ check_2() { check_2_1() { local id="2.1" local desc="Ensure network traffic is restricted between containers on the default bridge (Scored)" - local remediation="Edit the Docker daemon configuration file to ensure that inter-container communication is disabled: \"icc\": false" + local remediation="Edit the Docker daemon configuration file to ensure that inter-container communication is disabled: \"icc\": false." local remediationImpact="Inter-container communication is disabled on the default network bridge. If any communication between containers on the same host is desired, it needs to be explicitly defined using container linking or custom networks." local check="$id - $desc" starttestjson "$id" "$desc" diff --git a/tests/4_container_images.sh b/tests/4_container_images.sh index beb4418..ce6696c 100644 --- a/tests/4_container_images.sh +++ b/tests/4_container_images.sh @@ -104,7 +104,7 @@ check_4_4() { check_4_5() { local id="4.5" local desc="Ensure Content trust for Docker is Enabled (Scored)" - local remediation="Add \"DOCKER_CONTENT_TRUST\" variable to the \"/etc/environment\" file using command \"echo \"DOCKER_CONTENT_TRUST=1\" | sudo tee -a /etc/environment\"." + local remediation="Add DOCKER_CONTENT_TRUST variable to the /etc/environment file using command echo \"DOCKER_CONTENT_TRUST=1\" | sudo tee -a /etc/environment." local remediationImpact="This prevents users from working with tagged images unless they contain a signature." local check="$id - $desc" starttestjson "$id" "$desc" From 1623c4585e7865ff633358ff25f238c531e97560 Mon Sep 17 00:00:00 2001 From: Razvan Stoica Date: Thu, 11 Mar 2021 08:34:55 +0200 Subject: [PATCH 12/48] Set a relative image link --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index cde2329..0fcec64 100644 --- a/README.md +++ b/README.md @@ -1,6 +1,6 @@ # Docker Bench for Security -![Docker Bench for Security running](https://raw.githubusercontent.com/docker/docker-bench-security/master/benchmark_log.png) +![Docker Bench for Security running](benchmark_log.png) The Docker Bench for Security is a script that checks for dozens of common best-practices around deploying Docker containers in production. The tests are From 82bbe1d562406174358bf999891b7c9919654ede Mon Sep 17 00:00:00 2001 From: Razvan Stoica Date: Thu, 11 Mar 2021 09:12:46 +0200 Subject: [PATCH 13/48] Update benchmark log photo --- benchmark_log.png | Bin 523232 -> 524818 bytes 1 file changed, 0 insertions(+), 0 deletions(-) diff --git a/benchmark_log.png b/benchmark_log.png index 6e569617fc304d38bb6dce7415b0e6373ea232b1..7101c17e8241c4e5ba159711775cfcca31e646d8 100644 GIT binary patch literal 524818 zcmeFZcT`hp*Eej(f-;B=P*4~|DIzd5DZx=-1O*#}9t08TO==P%pc496DAJ-JqEaHg zhJZwnmH+~whaP%_Ktf3S4l}p+{dkYc`_H%5yWaJz1#4v`*Ewfjd+%$P-`@L#Up3U* zyIW}YrcImnUi#zW^-Y_2@S8U6!0p@te3R;~CA?|V@lBU5p1;u}5`3)@2SFaf_(?WS$ z#7DoRpX#1{vZrJ353c_AjnBFS7szDk;a+04PepDc&*oJwgzH>`-R*Ip>TYyx8)l27 zAxeu~mpeGipR%X5(rW2jX{m64C+r%{x3aSWO5LNM(o@e^9n z1@pPJjCtB`ln(ySvKvq~^+tOkAgJM(Uk-{VcRSf6*{_pW`*U_`+wkuE%_Nl=LS5;$ zpy=`EHy@cQJ+uF35&-B8Hr$n>0$*D${mmpr`t#6flZF#N*u}r387zOI?G$my)U*1y zSbcPO+U&1ClJD31Ohwg%On=TYy1R{R?+`P6Y6G>`8Ks5!B_%d>vE#-@jCy~6 zxT@~OKD{67*DMK3lSF8`;jeYB_!*^^-ZSN;&(cj{p15`$~3A&whY`xr-eZ|I5H{ zRpZ?MGYkyQ4Ojk=0qL;O&c>S8OV~6)3ppP>d5@tX}7ta7?6Eu|BR-a!o-xy$mh%F?Wx+ZY3h4 zWo-H9YCF|8%+k4W@}rw{?k~w#o*$q}$0eTg{QdItv(?JBg=9IT8FjMZfs;}Y2Ey`%Pu&J#x@m?Tj*9m!Epr#CB#}|8nZh&b717Zi0oACU(DP3L(leqYBaH zM~I|z1)C9!D9>xvcWiH>tinC_H0anbJveoeC@J#H`;e{=o@J`)cIzg`EP6B|;M#!L zdC_*^PmMpdl~Y2&d3*3+5zv`^mUdnK?VXMJlS`igGA>}eQgutB+uZ(l8FhQuO{tZdDvWWqy@oRM{D2RaRmSOd zI=V8peQ`L$z<(}5I(@C=(lsr(@pZHmj4?Lc&A>ep?6{&tF|eP^@gT z3EpuGerObW`=qoi$ny_2)MK*B{C?0E`XQP8F5m`L6@*ub@B2DU?>yACqSg9P7sDJr zvY2;tCZftsP<$~h**|5Vss6T#ld6O^R+&#XvI}f};`QaU-(-e*y(jB2d|F4DqyVFa zIx24~wt%o|Y8Ph@ur{!9^<{~f_aU4n9V8;Eo|(1Uh{ZT>*1QqQD8b45PZ4MOpYR@Z-KtahZ zNBlZn?E4$W#dAOZRP}j{*Poq1G!wVRt~FgaLl`1{ywgi-UVtCpS4K^H8MwT*mO&E| zMU!ri{@Gke_gRwZ59&otehhXvGxZ1e9n&yoG5LzHR{*WrFwMUIFpJavCgog~INSS| zpBwCZg*9(@$Y$y6DIa2#LvC@PUaDL5?2zhkOy%Lq+tB#CASd*$#gx6T?-e0b29?$K zX?SyNDSp=dM3&}LyWT8xUpq&WMiIQG<{HDstG}DE`RP9IWvoB0ybso2Y!c~sLtXeX z=$x~!r56z%iJ8#=C%acpE94Ip2%I|?6sw^OI>V?N`}+qY7-LEPR^NCG&3!1t+m_?* zVD2+?&6r30Xa4eq@OE7#RZ++RPlh5fc77c;N(&K`kd-kQsfb#w7CL{VkXp_^d=Q=a^LVv>ZK^D3PV99w{x<<{Hz z4Tz5Mr5w!nNMuu$f6nEo&B539;+^gLh!)am#gk434`wDSDUn-Wla%JX=8F~Pp+-^U z98z!BKy)N#nx^JC>^Hf$(h?f)7z@v;f0mV7b&++4OAbcfa5zn@zIgB0v+ru~zgQpa z#($)17}jv`^~cS#xyPK*RUh^*u2Q!0HMD=`3Ln;BO}&r7*4>F)9mhB0DzfDibLf1_ zuhkde8Zm0z#j-E-Itwpr_{RrF=(Gvjj-=+j_uk!N!xjc(aUVoA_Q#Q0M7x=o@Sjnz zd5hh7o139j4A}Yvjbt-#>RIk+fSY-#ClWp8#&m~~gTumnSQu-oaJFB{fpwc=N)es9 z!iP^e++cN91z+WrSj(6_iCeV-N7e8ZmxuJ28^WC*25cjet=+74odE`RIc|LZxy`*ub-d2rHCKOLP~ z>5g#7EjQ;mW8Z#Z07i#<)+|?!5(>%tW>@9<-Xk+;X-5dwh^6;KptfXAK!1wra7%zE zJ9k1`ZhnP4p;)gor>^u`!*${o2Ju3rl|$IdpM{SYjeocm(@EICbl>@&YV&9RPt~6I z5;DCwCU!>s-tR7Dv}bQ_M(m@bqb#`U>eh%=mg(66%Roz9NXF~>g4sMFoiHZYq}hKi zMo^wpW5!=M57GO0bc5u@KzCipRj=0VR*98!aiX%1z8?BZyIJAblgfq2tqWBS`7zK= z>oL3jD+%Ef@u}}k8ypc-@z~Z_1I`!!qyCd2AJ4h@kQ(JjCYl>?j;U4$L6mkid2Xp< zhSyBW#~GB0z)$1S7ya9HHC54Z&Je#=|8DbazfRy>Ekti!D1-Lc_X(#qdd)-noPXDF z2*vMUuA46{pGnp#^=xyI%38uiUpD3W(Pk}pSIpX16Q(eK%-HAbPY-j&HJi>*>cvK5 zG8zJ(Sl8@h@_|#2^~MUIqNa0QlhOF`cT}Rgg1m`&kgeVteO=^$rIw{RQFR@>x)`gi zuRkhCU!MPiD}wMhky&MD0O{Dp&*%S3&AxS2Q@+7@JO2tX@O>VsJvI{u?V83fMcOMv zfxu!uIBfJ->5w2FFO>Qv&B`>u9QR!G`7gqG#g{LqY6Ru4sW{_9%2x6k?9c*}4O?T+ zbiYh;x6VU8>QI zLb(OEnIGsz5slgVKpKQL7(VK`{K9y-eo^d~(5ZVr^(9eh+Qe<-=r3QRm$^TiOB@1d zm7)PMT5J+jT_j26kz^fJZcbhc2(Lc;>(>R8Xc!DleHoB}C}!j7&kqQgB%d2Em^Vv< zbKr&PUXR*f%OZLXCx7NwY<}BTA*E_`AMnA$LfQ3^uMK0A5>SV3NE$`xXLe*?DK?Kb z17ep!MbT&wAxS`QP%*=9qL(QY1zb>LIA%AtSGsr;y!Z52#`V){QxL(}R_m*KTF}^H zAw91Dd2&-By{mR2;!U;d_1j1-&n|nr51p5;Ew^I}%LLeAl(hdCa(fMAZ6)eA{NoKb5OY@fIuL6cyYz zxrn9aYHGR1tpP3fAeJkBEdPa!o{vX;Y@|OYP$viL#NTZ6*3W)&4%zSU%(HG;;gHPH zt_7W_$Wtmu4^KG7A>SG;+nZeUgeXN=9M+BUi{H@sPcDd`I<6{u-X&`Tjt4IY{F35FN}S^VsmgEL8TI1+Fl<|XYQ#o@F#-ew zw@cUiCrRIY^S=!IfdDK1mx13`#sAg7|MElsI#2&s9pMUt7f575WyLF%Z%+GPb}{2P zV3M}q%lh>nR`Q#T1uyUeCW&A=wd)%_h`P49Yft@D&9w42U;pC&ySB%I$v1cScES2j z!C6K3hgqjJS!dEVuwUEA3;(?Q+i(2!0n8ZHQAZj5>QoHE?qeP%#CYC2_|IK$(_M$Q z&6n^7KREDTExy$W06C7h)wXK`mvUqs+P>SUF83`}|KPyAhXC|0{ph^p*9Uxuw)LNE ziU60AAwjA7!S7$mZaWCLyu2ejQvdO!Zz22O_H}4GzKZ(O6jA%WHhAYwe5LJ?dm$T$ zMAzWOY$#R9Br;JU6Ho2QK{D@Lyqt0*A8&r8K%EkisN!CuL|a!aWvvT=cl zX|9p;Ql6x!d@bHJqm9|6RLk)CEM{U>-uS)+holk!awJRSxE;H6ECa6aL#r~&cf;%1 z{LrBHoDe6a(UR$mk5d~Ec)U&OPoKJEgY?S&*Ull-LEkfDUySymTxluD=u()NJ;lu% z^FP6?nx|XrrV-jg|3H>%I;4)PLd^BLeKv~GUH}Ir)OJa1g9B=6z8yec-3P~DqYsdx zh|+Q_;~GSEG$K3Fzdy!)t`LezVTSVQ%yFvkIQl|UFz~t9f#8DrvZCMFCRa ziK836)nXV~P%Oiz{d8etJqjg(#+s_wxd<_>do~L@-fXaoO~E63?%8{Asxi&0t3fOG zVf9=2lihDX%s7?J@A5}?uS9Atm5Je1p^e+fTxtq30rM(|Q(MHKisLo193Uk_1yL)+ zV=a}l=*IBP*s=m@gMUMwy^Nyg7xwC)kIsOH9f2sf03_@3wpsH#D9;_RU!I69Al~=J z8Xm1H6Cxh?Qbnuc>q9XNHJnpbACbGLGXYl1mHpJd-xi@a2+TUl6*fsYl3D2@0{4t< z52w@v*U_^nU=q3-!eq|gU;hLj6vYeziw38d#bnZ^$_e$pGG$bVVbmqbnD%h2yf6_T zGds-fScqFUYG)5^uMkru*fDrAwG^ThWa2c^aG2GP3xW#EUkLWT!O(1_UUiR=W{F29R=yGfodweI9bgKNgY1rTV zMvoBL1wxm1gPbn_}mNphs#gn z4ag|f>zk)zR;aZS+X6}zFu-y*={@!{qPa=`Y8)`1Kg9}=etvTHt?TOWi`m{ zWHoFK`WTjIRaxG^AoEF$*~`7fF1>S(Tpf_t$tg4;uv_WsFObRH!IXSjO(=hCtB|L< zL_v04ZhFhmT3P)XX$*KTAP?D zr44+u_6tOC-fldKQG|>{T!j}js8fu?h20`lXWA5e`|?CmAj}3a+M11barx$-A~Eag z5h>ngT+3LfeCF8`ymDW|0PS93EOE$0Jg@A%kTcp0+ah2j>%?{3kR*XERtHl==?@i3 zpm0r9ZkLkITqT0vIhWsa!YC=bjlQPMPqda)rQn9ucWfYwi}#E@g1U6NOyR|A?~gKz z#SGO7k;h78#}eyiZmqExE9_RXmfO?@khjpBZ(juX@dxHo5a-<5#cfXieU)sRA z8N3A6oj!UqVWWgR^e}+34>d`DjTwKyKAY1Aeo2vg7&`N0gU#4{0m89bivWoYb|Ui- zSeNN>)oT9+3wZ%ZMay6MuQU0RrNNn30f^?nzIO&UzZ=F-(ge$m_9EODl;y%pm zS5Ms<%OC6+hg=~#`_dlkt-B}YIgo2F@*o&_1XSHy3SEd!)XZY8z0(_%yZZKGPO0xj zdrRC_zKboeA|^8@><7ZTU-N0_J-A18y%Yb9*PZer$p?WD2^lUR-ffn>>mJ#PpE~KY zLngGs7(5-2vwe@)9ekAkcs{aVt|dTs=2U~|wfYjYvu_~PRZ4y=`0+WYU#dghig<)= zyOweG%5hq4n3z`%YPW3N6v?VP<^1BHcjPK7A2S@azy3^r!eX9glmF!BL-RE}AT!(q zb|$U*%%ybRK(M8jZLj?-eTvN&g(19aooURMC5=zT z09z3y$}XDf@grPiw#lLigwA4O4noeMnb0=v7vn;ykB&68&s^J<%p)3;sQ9~pb2mgq zjG&p=o%{6Zj?aGR?{+8E+|XH%;F}5P`oP)Fu(4O4BUL%$V(X#A)0nqmqJp>GOMEiz zq;ZU{owTqx82JGLOoPmIox4lc5(5&lyn3)m~$$gT1fi+xVx`m@#MI~=*I4!G?J z2R!lHKVCnUUdlrzoy$gMRQDabwX8P;t`DLtKp!>TIH8JQytbb!cg7h&EOiYh9gE6i ziIjHdATUlR;h^X2{2*7b^NOYhv(u?+^fxvksDxnqg+E-leKToki1;9eN1ls3!~b~xZUprXsQ#>ZtRaLc&6_8EA4 zq-BFa^tTE_6?Mb<7FBSPK5JU84$GJ3M6nzgX1%%4+^0{~g-Y!pHw5KHsbKRdOz&Sq zs3`7xA+z(hU(lxP_(i#w`N7tOx3&7Wk+(+QM}4>2WaF~yo{vX$tBHMz$89#>a=9Gc zz}h05H;2G9R8kIfJ67>IyKD!5SU+NnyB{vzgt1uPiNb|lc&e4kz=6ehKNB&7ayi#r zO;ylHvJQ-Gk%17!+7T7BnBjL$B?#QWYoU=0S&3yzC1PA(K6bfG)bq>m1?pUXn&_!f zKVmeeEV}5k2f=SNp~=6_Ik`)};3m|KE8lZcHTH->Z9t5($^PB|iav`PUmLSD43Sh7 zt%?JGH=DJQ*$Hfg^W5lm`Doy$MS3!Dg0lDDIH_kzZ=QL|j0jpD7CXbxA%|oDJO>hh z)y0qe%~vA*7YfC!xk(CM5-?}yoClQp&4*J|^fHxH5in~UhlfZ>mRYQv>qH*b0*&Un zpRxP!U=j)h_t&Hul|{wCoe~8iRaYuA5UIHYSdx4GU|UFQzJ{UM+FFYHN=oKqiC#Ib zF%F}cPV1$oICO(Th5Ere@nOoNW_MVKv{dHx1Wy87XCSDdZAea)BA7ycm5yLbj`kAn zo{JfepmGNeEjG+Xmd(c?!yI%kCmmQ^-kV+$%kDhgs>NPF^ltfHjW9kuPGlW`Ezv+uYt>aZVNcCC5oN2k$$nrUM&k)^SMhzc5g+M4{@64}vsaO2=J@bU?gKpA z!ke;E-DeX*{oBTp`9)xFL@q9O3BeQ9RYqSvU#aHpRG1S6Rde1Ah*tZ=uJYz3K+cGP z1<1Q=CECqHslDDaOo7r;zPTIq9MQW&5RfVsNeFt&t&s?&#et(fVSGek{==LspCku^ zu_AoDeFfM;!gi=?&2!2Bf@?HXrXdrHf%k_}VI@m~&B~6?k#XP%|M7ODj8E0C{X*F~ zmmPPNX>n>5tm!k856QQmt9e6d!)Z{v8hEBKoje8@qrx0h`K!$s9M~$8@s4*wDEE4} zDZJ~=N+y)>M7jYAl^SGwLKGHUG)LDbs7ut^FZIlz@N zTc+Ph^G-XbWINfy0o5rKS;C7a`4=#9PF=s7TWG1w<_)qEx*c9Fq8S10iNF5I^`&dB z$loo3E!0QHmT`ltL80cTQkruGHE)gD4R*$YK=}|s3-?|w`#E9AiryJp))C=TsN38% zAKN;^gfT295z+A$I`>8eU6k(5Z5|?F67AcBp^vhR&MEb2RmRD?ns=7$EaN;%R~Av> zlrZi`U-YQ1Q?|FHC#36P&C!yftUY)qH^!f&)54enYS#ro91yD;xN4@KRthAAaDeiC z2Os=$*S#wqY0?#7N3+J%%_|HCW$qVtroasI*`4>DrVrCzen=C|2}21E3@O9!9wzl? z^X$e`HG4}TDUfJhW1(C$<`LNJ^k^tW%K1FeDO(wWf)nCeBvY^PI*HEn&JPvq38LZl zg0tv;4a2+?P8}*jmHq*V;ue_x>T>LqD#2Ne(QNO+>9}*`nKYROLr94Di?z9?$kxqc zNY;P{mmYg=CGQV(azIGcqx$5{RPnOb!7ggk;euE=V&O1F)aS!koWTf$83hlL@2IHqm zky`XF%qmZpB-@Z{&7Z)5@KgFLqlhlov;tBpDbb%U36r!ck9b`FKt%}ypp?B!wVBzT z86nrn41TbsG0qGmGm1t~-gb$kkjL-yHj#>pgLRJ&JMJbKTuPd?Fn4NBQPSjLicg~(mf;zdZAV@B|7lCh<%3svw7xi}#MEB&F zg&&XgoA=Ri^_fO-l{+inQ;4M$Ec;2WRI&VY_LZ~)`7H`?9!4ayYBE6h1UpY%*JUle zK>2NYyTWnI^3vLaNa(_BZ?lSuxQykSiG@1=rf6 zW+p3{t7IN@2r;J!=lQ_sRq3c@*rZi7C;}c)$Mgs5+2R(f#zeLi9o01qsp19%&6NU1@^1Rm>k%K{$Z~ zP?E!oz$VWw^XK$x^E@pWg%h_rwgSiAVX8b^{786KTvLsWuf4hBW^OKa7_`6Dn&tpF*?entQCLP?ddv?i>Hp35ICVwa(NU+x#g`@Gu=Gz*6BQhWTO zJ;>9ZpLwi}8rU&BE(eBgYr(864(y3gT{ieAmYr%5S|xKZHQP-QNtrzo2Fv#&z>J2% zCA;4nY@csfOeiGsHtEU3$^ZVM+XNo&LA-zZqG zjdCdHA=;nT*J}eFEvuPHGfMjI_r@9TIKYzLQaJfMO^U7!aLZb1-ji(< zk4yY0P{|wPBcB>?3wH2jIeof{rxbrb4`?$3ioVHY zn^39@5!xZ&>M=6o9O+LCOFm(qr%R|g*$m?AEO@Z!>yFki8!BB{5llibs9Sk57-=NV zOC*LaZ0V8qlA#hKYZn>cRSnPmjZjbu(#YtuD|Unsp9PaDLDw%Xv#p(9xvD%`ihH_5QB^DNl^VaSS1M`@;vb==wgOJsG zf|U!ZWl(YEpK!+_+A!>eb7R*mdZ@bKkMjB8A(b|QI)948uEhc2DxXXkg4`PZi`t2F zOfiVLbp`Xemf=@zUEi$Y8siYttAaNzioj{JXK>Uc>1Ki^#=QRq{A?~;#Oiu2LmTeM zhxdLa=k)eV8;2u-8Py>8O-VNQjODg^wt5Yjz0APaE5(L_x?xtcv|U@R=-MDc!77$* z=DnY|tS(+MR8GIjA%ou4Kbq}|O%$lKrajWf#({LzRSCuuagtI&x9_qC9O8r^h?X{77YX*myUTT6;qhQw^g<;th#s7q^sv+#FR}-qqu{mbNPN0iG;(8?M8Io8(!E6 zND6p9ze1sTH-bJO=Eg9(*56O>HIf^fS5GLu@BF?tARZy&ayKnI39*E6itQkprL8eR z?-DLsJAMQZ5-Xf9+TGfDfl)o*FCCdvGApY}=z4dUn~ubC#BE1Hcs0d_SoH-Zl$9sE zcxn}dq5E0A+1$N6K#+hiq(1tDfkP^9NO(a;b)89J=jaM~JmNYsiuqAjRNf|Balgs) ziA{!7+GXmUo*fFIQcz$Vmo4Q4<-szK*#mWkNi~H3Eq)%+cIr^ijIq5duZ6{RUCMj{orO;Ss(>#l{x=YRHX zoo#|o6((Io$V&2!{~Ds(OhmAY#5iBbmh9)!OBp6kn07DhJecx+>K&;%gbKu-V$Eks z>KWDC)IA^>=?7Iq2=c8en#jq|5 zR=SY5#pG9!s32@FanG4EqxUzzlZx{72pW`QqF%()FXjy(rbY}eDaQi#g6^|y>BA}h z9B5cG12a1M`1_@sb0^xAfTT@?EFgK2wOZNwq*xDLjFiqhGwQ0YT$jRoz!w2gJTBO% zi5JkKOJmnY@6`O6T@P8F2}F2xS;UiDje~j>KK0)r>dSUI77Y}#$e^6=Eu$`&?Gh*! zNr5(4D0q*xrlM2D75FGNV)n>hG|))%)F2tbgm|XC>>%%(DM#OfNVgV3-2GhzC4=7f zhEapeapzHxd&T2fbc&e*Yo78JhvM{654rN;6>CV;t&t1zDcLLDMngvMJX71uKAu2- zg;N@?MQSX>Mi|8!rAPILoI43JQc$;`sKKDHj@sA=_A z=Q~64w!KDKc$VS)XZXg8y1KVt~&Py zA24oe1@l!hf#lLF6`QYcITd1O%8EqB=_U)60tDxvAofgF*C)-+!ij((#!Imvzrl3k zTGU?g>Y#f{TJVd6cRLNdJ_f{}B|)(|^lW^tyjC?tiFTJ^eK&zMT-mfb#ne+)C1{QR znw{bjCksA_W$o3>R&jZ6jk5;rSgR;Z~GC|#vSJWT9z9s_j7SLU z!MM-vApexGFD!D&d*2#Y(yMT!`F_r4*Z0zR#qqTy2`7JY8cd-i6jmCj+itW_3lU6)Fc_buYDG56$LI;38It(Pb;NNuz#) zVp0GYZVz)725F7DgN?;Q^M~^6j@ON_U~g&znBIxff0Dk$>lj>hFZ2C1>Rg1>T1 zdK!YqzHv;-9`;_kk+D*oS~EJ}%s9%O>~P9;`n{xo0qM^^qlt=3Y3b^DBv$J1=|19x z6wlz%6tWLzUi4b><;SRuR5!sCqtxqYniqR7KYb8_zW=B3jwQjnm$e$HliQxLtWK5+ zw0$2uexbg-LP6DC)=Xn87};9-mg~v&OHkrYA;vv*Qaou>!0d|DDqn)i(fSd)1&;UEKgBqRPA}OWS*h5P| zU6S_-(+SMEJ^Ty0l%5t~$X~AK?(Do5|JkvSC|lul?+sDq8Ieyyl`wYamsJ{E`msH& z@EH8ApnAzOe$lydZ$v*YQz+NxV}Oa_C(Q@_{oq&`=URh|2~3yitpSlOr9&#A^EaR# zLDSrWi;qJOVe~9e<+Ggq`Tf-wusl5dS+K#YK;+fV#<(k^o_fp4jQ&|tKnoZ!2FH|5 zc5qNxwT4N8O)I?Q;u|N4&1~#Mt9=gU4oUBmK9BogR)<}|Wyv%mZI>n#{vPSfOg!EJ zro`X$NE6sTRMqf>Qro^8?_K#IN31>Z!IQM_eY&uZ75SA)U0N~3t9~jeF z6QSIrHNLy98=e4!YC|UQNzeWU*9_StX%syOD#(M#2|&PEiaM-i@`Xy3zEEoQ0-D6i zG4B`G?1#7^{bws5iJI@LcYXtmH9&6E6JwmrVJpwlOHdx}^YtX<&}Pd_>=g?Jljgwv z3^^rcP#k-wS!%x=+*43)NOg1~xtpHt?mGWe@Z4fm+P%wW*-7np%Za|u6Ax?sW!?_6 zLJT5Qhu@FHuAf~;S}Xe5Vv_7ko|@xn=_>=?5ZropMPHtDU_aR%K&_I4UJ`Uj>pa>& zP<^5_;1lgJJuaVAnG9-n1?4dYYq~RzrOZw`-K$j4J*4UBOdumk-aBY8afa4S3Olpp#LwrRPpr7V#kqdYpb7SclZ)XY zpCTdsOd2oSit+?Fr_NymqqoXje*+Zrl1Q{BnvZ>35L#8t(4bWLNw}4HmVtY?%q5YE znJ1IC6W3wSdaGF!C?V}ebe6j*0ugj);vHQ#E|L?|2PB6yI?&)#+_X2kyOAWYL;V~h zg|k9zZFI;LnA-v6MgKs0kAeQ$QZqhfAgD=TH)luqa~o!Z@h3#(?9io3TpKKrC!&m2 zalqx3+}B z?sIQP9s!{9kn?Kx1R$V~vgH~#!(eOx5rqvN=6jpa=vEYa?D~4GV=)&Uzt{v=drfc- zxoPEP$wxpKN#`GBMaN5fcuOo??d#Z|f?epchq0$#>*OgDjLGw|&8l2+a0?&V6h{U!Q4FFX}p?V3LiA5*(~EHYT?aZy?(U^8gBS9P;52f9r^v8cS=tiP2I z(E9~@fk(s&{rEzCCVd?Z6%|BRAG$zXdh@D^XKuPIe*pJa1M%}>; zXHX)<8LG4cTpN4Z8?~m}jOlZRmLMu}a#vl82DmIEgy7m(X&I0Tw&T6}qJ8V>k*Z6p zFCT^*7}P(^P5spk_snDBfJ08@B?!+e>K*dL$IgzC05qg@^QZYu zLb8(ECU7ra7SW)~Ps0v*j$~@aE*2b4@SIdhA`6BOS7FRA#JA#?dP7|=4C=pNm(4$Y z7sJ$T&j`GTI4H2AzaiL~{v=ww8lg{p-bl%1r8%-&`l(xWSa}JJ)|g|J>l~&KKUZ7e z+QqA|s|o_*d0Zdw5BL^6G37yX53M%MA50w_kzJpx`Kw_fU`IzepL59oWX-$b0MM?d zNmn6J?u)r`{1hJq4A&xMg8Rai6Nh0F2gQRtgOt1=bGpsO(DDeS{%jSwv1emR!B_Kk zv>LyhpKnIV*)dg?k6mTY4LE7IhQ@o(S%=Gb4uShwnG<5rjuIX+(8Cli$aitQ)cesv z1^i(`o{#f8Kggy3GvgECS$;FERf~4$eldN$qWYS2jRY80k28Wgp5@o|WG z2z5Yt*a-ZaWa2BGyg%KrbgvH=3}JVRhE56t$ze5sn6g$VI=2}djyZJKOzhE{xJ)h> z%cs6r<;JW~Sn|$jKU0~Gl(8UzEgW*!$n<6PWb|FWkI+32`Y+5q-ii1AUE7csKsV{q zqos%=tXKDGjf%;by#0KHIYgB?qOba+Ui|NbVYU80=Ic^VFwh9|=q_+JN(Ee=rJZpZ z8U(8Hs?>M&S+?mL-9ctBo-woC7Yh^?FlgkM;Tb1^k84f@n0cqv@s^}P1f_b3p)l0B z#7?qE9gmlU7Z-OUSI5KF%gW7VBlTiSY48^bQZmtWvcuE`J~}Ck*7O_EN;JP8x}6+a zj;?z2AGh^CItVgOv>mJs82dowTO)F+%$k(J?RRS8YF&5y-s{!ny-;3hQ~P8@2msdq zoLUusw-~~8Oye3MqWzgrpcX_pOGz@wF2>{)+N&;g!=)Z);)UnS2@$GX^)AT^Ps?NV zZogqq*|idj5)R_y9z!YMaLeNEK7~ZhaXb4QtQ)7w;cOe&BaPxNXRi+R#U+!jP4nN! z*cK{y5yo_zy%s3`h|EJJMWuVYBmGH3_H$)cg2Gs*_Tzps+sJC+;`BUJi3@dRXf02l zHSq{J@w#hkR=rlQy?tMoS zcxj3_cfLv!D~VBOJ>xMj@qlN?bgPz(Y;Az~_)M>*PXArACUt{A6>~$6a-c#s-lN=C z$tgui&gsq*(>a-gu(%rA|-I_YL`)Rxr9~sfjg*VJGA4 zZ$BS$p)md+hf;YX2xazKs_u}k=Oc5m z0JI~@IZ#YiM%CqnwB0Qo_1g`2f(s=-Q)Jd;NNK2I zpsj#Wp2iV;fG@-PE7-KoNMf$YIHjBbF%`?)+(otCAW@pv)NCG$`mTy92L<8Ev*^{Y zU@v4(rRCr1JgKK-9)p;@9a6=iporAUxpBn^>+BD=Kc!~22&3Yn?MmE0Z9&t5DF~oJ zkl}s355nd5q{`~F0G*wEQv5(oBxs!rUp=D*r6BGo zrEyc%u#@zQCXrUdSP~cy}*PAQ{8ZfoqHdq!?~9z zV}a;fw9g%&YrCof(Gu0HK+~X9#T@!6iRdv@nqBM>^gg#glv-=4_eg;xqlb$q^bdsB~nWgDi+Xk>wO+X_TMSZnyFCVmZx?}#==3|ES=(t)2gB^@VHC{ z-5-*9=zVDkU|9rLQv+dwXjpH}>wpCSI_ACM{g7tU|Hn3RZvrj%NFS3PN{w8dO9+G< zOnI7`SMkQoC%x2J_|&V`OFUqRW$yNzXk}_U5?qzPU+tyCEAv^p(^v|9;Bfu~4UR6r z6N@PjP$H*#=1SZryVBC%R%g*r^KoY_KNo(7)PClXq8;Q=HNPEQX7ewwjlApm8;M)nh1T;)7bS7`4z4X4XFWj{x=E_qAz zSOfhaeY5ccq9`8W6jG2LjvPB*{-g|^Sa@&Eu>tHX(aCfwzdo-in!8+yUW`Jn3$Jpq=071Yw@$PlXoFJ|DUAm;5Xc)=Xqsd$&5tZ1~c;qp9 zPN&J%k`gzmF0D54=h93*wRHLmaj;&{!i$0ua)9&c;h~u4%kh#`=;?n3WS-y9bi1eUxT9ibgfi0ZXr{K+Qc~)auYaODk4m9pFbPC{ZBMBs)>J zf-H62R?Y$~1p`#`f-QRPxxk^#YtmYNYVYdfkDvz_vU=HYpg@M}j(-X_@i7@IrHoT9U=AoGO7xen-vNCoK*(pmzg!IaL$rf$rWirK?W= zkWLFwd@_HZD?6qsYfq*Qlq>1GJ??0{7s(?HMi4`2}BFb4$hYs+C6zq$71g zMuyg&jkNdsNsalS@dYz0OLOI07S{6)SuJvd&h4uJ=f>uWtk!z~aMU#8?hmh>1Q$t_ z>4(zn9cOsc`z#Pp0O?YugWaBm;}L`>OXZR-l|BpntoqynUVlMp^nv32mF46>Yoi^y z<>`5)Y-?&FfZ#biC-JJft%3QmoGa`3m?kZm;tKQP>$fVA8_P_7mR~=^e_Wh$9|YtlJY==BG=L zHth?c)^}kRy3}5t7~M{gcAmgdIT&gl62g9sq@>-rXn1=nJKEPHjoq|slOP9c`x(g% zaKnr*7u*n=ltcP|d5J^}UB}6xBUYygGnsFBoFb`J$}y>%y%#WPU2+9gfjgKCK^i?d zqHL}Sxkv7_6Ws!WLNMp7>uK(%oCT1R_}m0}Lhk7^Wv`IUL7fB8pjRQ(IS1=HDE-V> zG+NefUMWLQCpH*JO}Xn`3B>+_qkiz@sP5}yp}X)PX1KyozO$k#X*LvY6msNlR2Y*g zqnMWc+M?fv=0X7qLMWXuQPcWEa?;|G4`9>TTfB->d1YPz1h^aEsDiTRY7x7 zfC&UPbLB~MWS_5Cs3RjFXf?R&ldK)b*N)%p45wroj#ZSjsajC7ceVY)S#$|jo_by@ z8@qM|?i^REksUgnLHu@}>1!mrK7{dZ7}jY0F5|DZw&3=IpDtZhyOfjPp=FSWU2Bc| zTw9=MNP!18kH zI$;&&!ykq9QsDX&pB|tV0GD%({%?A}_9`5K1Jh>O71B~VL>GiB^Fwmln-4f!hvhzob|JOz|G64n{O^^63e!ph_b-%!jq95P)72w}2 zs<~mV?ZJ5_5_EW@(Wek^`oFLG!H552!hivK#(G29^XsB-8t&)}sEFH+;*dVwPWy&Z z{d8KA9nSuMlmC8jP22VgEmbUw<&;xu$o^n>4g>W1oUxq+V4ms30-8IJ)bw`8B{HVk zlCH_z_E7F}USNHWC+uYvvuf|0U zx|t7Bk#Kr+59Ew(WJ0{>T6inuc}Y*+etPQ>K^cedc0T``TbqJ2ja~p_Y7?(@atgcz z{GW&O1EtJpPa_uyCsQDzY$-{M=5OGAa4m`{PGi}yw|6-Kux3K_W-px$IQSlDtvsnp zawRM5<92?Dq^!rYi}6OU<_x-9+JCGOcIGwlJM98j@1<=DmH?CL{`4R7t3 zqXCch3%l^$_S%0(bi=2QuUE>mR}7S6Ryn7;B)N{WsnYUnJktHBMZF379WdHybqyD` zujQEP4}$Rjpn_*%!FjxRQmLPyC z21FO9>~{R)eN$~_!K~&BR5X98W=Y037EhbL^PY}JP+eD7qN?ZWDIU>lI6k?eHP~v% z2E+wt<{A5=zBX(yP6kswZ4zf{8eKN} z!3iiIrcMEfav$Q~>wm=XsR!$C2yB4AjGDKG@Zk|YSNNF=5S+R5MN7uhNvUOw)>T|F zaTi`)el=#JIT(Imyb9uTZN0HUO9lvokvH%%wqdT#s*~>n69HTSjsSX~gwJgt)Z=Y} z>)ENg_obNMztxI=vSx=IFnRN%Uikl9Tyq_m=!5L$>5}+Hk^jk)nqj~xhn6nsZ$P8z zZeX3k$cu_!H(2=p`_z`fMd1AgUg1Z3&wt;v+MHdV$~qOW_q*=pKO6<#$pcJf`QEiU zvcW=LUBKoZk@z}TQ=zZzNX--4m-=0IQF>#@(8m?o&u*iV^#&G6kH-?vN!YG*C6SxG9YlX(UV}5i|C!X+ z+7#OwQRc3T!-ezD=5!r>_SdLBS~2w5EvrYqxvsS#$mfdUA^|e#GV0!GkIywN>OIS! zpG`^~f+g#>_}jd~S1+eJP(%C&2k-z1(D z6MK=KxM}-&oddi!HJf%^K91a_6SY(7lvw)xZRd4#JP(N1x63o@WhVV+aPWm9v(LLX| zUGiZ#YfQ9eZMI&L#yDJK1Zu!m4@j$F(Pdk{Fhy%rNNX#n8sg1_OzrKtA|URQxqXf$ z&dc|A8PqDDE;Vd)dYP@Gz3t*p{%qRCudaMxL@k=Ryiel`>N&Q9xKE|WT`uxgC|o}A zci+!!g+%U!|Btfwj%sTA)`kTHlokupi;9X$?}=1JK}7^ar3a*Uf}yv7G?k{(A%K8X z>Ai;{O(3Btp@&G9l0fJ!-}an)fA_ra_+CACjQo+o-az(TbItNR&s@0`F|?)>7Qi~M z(|O~5gE+`z9}+kKV)HpLx`ip|tG^G{h+ms*E4LoIax9MBy#A@X9&$Wx0q zEEBZTIekb7m=Coi`aYbIb#%~JvmH1vM=_v|n7CkfY0{33Cye6}lXN{)4*I$)C{T%m zS@LcUfX0aVK-gqu`I^qXYZiv!-sC`?Eyg2vHs3wJ@#du z>#b@1O9kGYl9n%d+2&W6ras%zhP93B+c(_S{jj5Wat$%!@reG-uua9XX&6PsF||D^ zVrwjj98c?+(IK4|=9g5#?b3Mawg2y4f($3~^})uz&rG&sG<_h)l7Tt%Y)EWRhMlVM zH?IYw>E_5_YUHN~%}3yk|f3Hg{2J_LKS|$`CF-; z=9N#3wFA@h?_Cu;;-GX1QeyQ=uvF2}j~e7LA=S@Ef;5IEx1HvnbOg%AGe~!_^k-L3 zaMf&$34%je%1X~O>>IsDJ=QTYbtX~-x7i6YwC;6qQt~{0$tGQz*@UkVg4@Vq6oP?uplUtTf>pKUNPAm~+Blth+e0~7dsJ6I*%;_0w zWENAb^8K=^^fG&)G8qo$S5TD{kX7$A^Yeszh2tw+1= z^D&k+ZhAJ94AjS)F@kZ2vQgU!>oly41&VHV1x#`fv9Mkoh0q$iRX;*=70@l0h==d4 zEHFU5zGE^QxAlok%y*UHBvGy9OmWg(-|YX^0+{3yb5r0+?dzREmkF%KlvoCt-4#Uh zZJ~fR5EFTO*{Qk7L1Oo3@`U%@U^oxQE(Q_MM`njcf1B|cGoz8Pys$=vLCwaCsE5%l zJX%^Gv};DPhO>SJ7*}8uZ7Qd#77{Ev=<9hZ8{MmG=91pAx0OmP$d6l&cMzF$M031N z_)~0%BieZRL0cUiu$6p5c?u!BdDc1A5;WNOyTGJ$l7k~4p9Q@n^`JCK`lmu*PY9dj z_~?(w^z_#Q1?n`+A%o&NU|!GSmN}i!%ct%&_8iQGi1`tGKYrKBYHQbKGkifkeL&FC zdh9mO3$?h4qu=f+))FliPW*Bf9j{BN>y%>nig~#y**L*gGsGA{-IPLz&x#S#ktdxT zO5jyU;`6Ju2)Lkg;<_YxT{Tbk83tF+Yv*i>728uLd1F&Xn%+zHfS(jjzH zH~WOz!Jd@~mP*`Wk{=y?qvQ#39@*wIIQ0EriDpzA_8<94v17hVkZMyJvFDDmA|W_4Ax=*YS^EU@t}k-xa~M@u_w1 zV>->|yJ9u7`Unn7F`K%Ul5xhVgNr*$9Vc|4*3S2n-%%fM9vFS|h%$0xD6XBo8Cc)R zQBYQ<=oWSB+mAs~D@uawlM@XOCOsUFog0Pggvq;YjhnB1?(il=)JlbMS23yy;2VU! z6H>2IUcUJMewE~&&E>!&q43Z5HrAhf`jOw&gwOXPlEOBfUnPxU4_G?#1<8gy!|MJdL#*V!E)Q0s2S_m^E_?sc}UypsDOsMz*m z2%cP9c;m88c`P4Nqe-UTAIH7J_9)S&`Cw(JSGa5S2$5zM;IIEv^UjQl5;l^hUZyfN zftBsvU}u_m&4FK_j&ZT&Tffn35optLRAUl(hq?rNJMl{>Z9;NG+Y1&T1=?3qvv`C> z;|<6Z*W^rLxRZg#es4P4wl-ELF(w_{-I)l8XUvxhmcT*c>ALoe?(RQotLCai0!UTuX8*@zaZ7;%7p7L;%`?_Vg3kUo(e zMXv|zUHK+wemiOnp~#^EP9)2h7<>+wVNDxtdzHQhiR$yaQg51haxs`1YiSob`d2tFiPrRmMh|XBwL-tWJ-zVY zE@_p6s;%hje9#T|p4%;puPA6{keZz>u3C5`eye(F(DcZa9_#&rm|E}@OeUInFua0I z3rGB&|BPX?P9vatm+SJ5Y#YdQ%;)cm!Q_!3&1N51SqtPSI@Uc5v3};hG(Xa_X@BrM zV(0n#JRQ%b35szApGRY5lu%%3BfdZpfA;-rPPvl7LU-L%g&cik|BV$8tFaAn(5|D$ z^YP53h#`!Ghu2HDmfJi$&uz*yXcUhOYd*!&EieS2iF2DtRx!c*UkwPu@6L)&d0ewM z_8NAow;GX2z#{khsJzWXTG)>mQj=4+E}Ii!1CF%j&HdZR94gt;YDB+4QLHWY&dz%n zPkc$yd5W`Ve)9?#Jb48v8~%fC;b7H5%pP_;Y_Yi_f9x_dXXPez z6B%CzB2S$OB7wPXAro3AiGL1u2nVp_un3adY@cAcEXkK35AF2~3U#MkJUN3LXkzWnS z^7vk4Mo(67GUy?ogm>pbs(oG^(|GSzT*WQ%z{X@f(P|%)@OQ0s?Uhef^%oV+p=Ztw zyZ$bQ0pU$E$v+4ls%41xDOV48V0LFcD7}(h|CZ?6NiEQqD8=CTu-(8YMrnQAtG#gc zhhR}J@$FlRI@Wr=QpVr(ESHFNGB}Dg4m;u+f|135Ys5!8Y*}NC5apU_tivC;JQtNU>IW0&Y%#ZZl zkL{=#jD}1tx2^G{-W$4xkJeD=F`18kftyA$bAR@(=$`&mG_2-)cI5Ga1?)M-a4ILw zNz_8+MSArUe8U+5uhgNyw5i3d7s${(V-r3VPKFw3!Jc3%Jtqe0jYr1<9FtG+)n$Dbw!UJ{%!;*@$jo`amG&oa^wT62CZvZjVEAK?qh zfus$*G!9FrQog+y@P=l=NMC#Q7RueRi@42iPW`wi3PU}^p+ z*F38l8+LHV#=WQ4UDF5rvFx3j7Wg+|<| z%&u=8(0|gMma4ppq=g&j@a$#YeEPLuguotx*hqje&CAX0 zLl?JQrz2YS{=nnys<98 zs1C}IY`;Wzen9jK14&H-RUuT=38C(0wG6Q^Pn}k&w^UkhXPoiF1$Oitt&X)X=(@-W zG8;UW$C`|p;aw#5qSa$5@B=Y~fwYza4h^_U{<*_SfB(_?^Sn2b53 zbQ}$yLGLKkSSB3j(%x({bShW9jwG41L`T1DQ>$K@-f8sd2)w}X;OIEi=39;1+Syf3 z#L-+-R*jpdF?~oKQ-Ql;VD}I`hHf8COMFt`IwBU3fYtpN5< zAj>y2Ov}npc#O2%<=Ht_J;rC;@dcm$491E-YhN@dhrH*Wpb~5Vfo|Rfaf@E)KuJ^V zrzCR5`A#L%aFqv$?JHvxvTz!JJ87m|L3Y|W81enTOT53Tzx7j3vtT?I_%b2EnHl~5 zb_^=vH-sL2X*&bGpaaf1v3VG-c|CnvxipIMRwGJ7R!pXW(57t{7yC*wc&XX3VRE`I z`DppM5xa+*z6Y5VN^>if&G-?++7jJ@7EfvyPB>6QLEzESo6vGytHMvr_%|@-nGBW- zs@-`uVd4DQLcP!PVCYj+^%Vu9MMWl^P4{jm4%;e*Ef;m+oLHX6VKBX>?WlYBJCEqT zJAC!kv#%>9>!_HS%!cCpG@|Z?y0IK#7(I=hBU(}_MR%BQiY+7^IQE!EN3;s8@z}w- zpGhsmK!(b6E#`=~=oaF4%BLGx*yPa$)g@DM7j#RN1sksAbwV0zJ^f#YhIkO$Dkt5m zYCK=JpHmA$K+@wWGHp+G^dHo(BqT?E)crh2YD(DUJ&b!LzhESODtvF!^ZKHD4o>un z_vhEu3P4Y0n9lEIvI(~GdaET9OlDay(fQye^wbFe1R~&*4}QCUluqW~0pqNx{Gp`* zV#Ob_@9(eyN|AaPx9^{}(b@WzKYpH5c2rb9Z<#*aNVQ#Gv+N>AJBw@Va^xp{gOZ~xH9NyZo`Hs%UOn{0kAR32lYYY6Sz2nKAZyt9t6>%N z!O5g{o36Jr1GUVSl)hu#sItKJr{Rmi&V(A)ob#T`RrJe`{cIz`KWm@V(Wx5E&sOk z?q0kh;iZbg-j>dE)pBdu;{^Nu9K?&%2Y>H~cw2`fqd%;}kMp^7c%P}EQ7%l|Zu?I0 zig#_x5h#n#y!`?iz-AI)I@j$bSY=3|LlgZ2%oc2yCo4M)PRytV?|A&GM-gE{MY)eb zI$m|xDxUy#lB(F^n^7r(x|3#=x(UO1MT?M@vYr!aB8-BK%q6{p&Eh?}g5}?EJ8t2Y-2a%%d^*1Afm@uqm^+k}U`wgQ} z=B4|#$3}}n=s-&6)jq58R8`5RtHb4Xlgq9iIQnJ^=kt{QdO zDubQIPD1c~Rth$-4ZRoazz^KVKhUOjMW@e_5(UcOets(ts8sHs3cobZ>0~3e`{NzI zwq}2rVp{A_QSjJ3AdN)bnKb^b`9EGd`wq5N;bw@RV2nQ+(Wc=~S)#w%ix}U_)x5jp zQ`Um4mAV&`QboH~3t=|Nz{krR@Qd2G?84{3ZoAfTFihOZz@|LimY=aIZxS8OT2Um5hHcP;HYF+ihOgBZ5;P%xvCc3nq zI&RlH9i%Q1bH~?+x2dXu4ngt{o8nX>T^pus`>}7`1I+5-gN%_g5}~%u5IM zk5R`P0wrc7h6J@5E;R!%Aohwb6pGX904-rO`&=EiE+Hk{U8ZmM?$=!^T28vnfq@^~ zXv0dZcyXCMq{^25Xi&(Hf}+i99=J$!0*|WspB3tP6%6(-jjD$7){Mwv3Q?BbcN_?Xw=0KPfa;&|^ti|K`?V}DZ>GIci zYC=r5>`>LHt=xAKuJ$a+_RO9tr;9b|w93vAW^UEBONr@arg zgrWF|pqh)=<*k)42A-rRhW29~%F~%q0jN8np2g>E=oXd>slqwpsL3L$BoY6}Nj3T~ zo6Yx&@;{Zq#ts*z6Z0+^4yQnigM&2YwWnUv1CZ2P?5{FTyI!xLB7>T`HCbgAlbIr| zJQcN9m8o^+!>j`VQFJfV4G+FKyUH0Oiv!EZoF5^aUm6?dN-%Y{ zj4Dy!D(*zaP_*sGi_5%ihr=0fr66U2fm$XuxY`I}(Yfz{wfsseq}>J`K|)-Ij)h@L z7d>=!F)!TN3}xkxx=u5rJT+g_I#}DwqC3MIw7xE8VW=KGQoB8aM;d{;rsKOVaYq(g zMkewUfcy%n?SjJ#JIedoneM0J3fx1}igU?NHT%un}__K;-~VLb>w zmEL#Ef;D8BA}^!`1V(jx;6tg#3-j7jWP-4wNZET;?zrLyh)l*4blss9r6Z1*q&tpD zt$RQR#sxRm6^^q!yb=f(xgiviHR=Scr`4Y7ly&Ly;}=KlUr~g)4pL1d2Pp&xvtTK= z`?dxM+^ zRDK3p=>XJqjCvwBsUt!?(Ti3<8`{v+j;ooPm5GvMdug_NFjQ}_Dc9t&8Tk;%=Dt^v zovWwo9{)C-D4l$GKKCa6&^Y--G=Z^QVty!l#Aogv3xnO`&kp#n7tjk$lyU&0*2*El zYra!_1%W&ORwQno?Q-Z4VTWBWpje3_7UB6l)>+LoCqI^QN=hqRz#TQ&` z!IE!3^%^`HumQk@Kv2m?rTrDswf8WzcOB1?NF$BQN?i9kixrQXR~e1Udqk^wpbm6L znWwm%rNlrxP5qss$FgOm08-*9q)kM1b)4XzvJ=JsI*x~9uh_)H4@ji;^&Kqg$wB1g zBhq)7R`L;EH5cEGQ9w66HbYo@-t7~wU;VN1$$b~#^B}E!@TVHcdHPspx@3E*3da|> zqjbGCSk9w=5qPp6G7~M#gjXjGu)-LB<^yq1-${I1boMnE+)X0o1Roz!vxk79S}tO& z7{hp(CH%0-H2U$~t{4bV5qG0%HoOAI36Uao*OsgfB+JXG5l{Ns z=RO~|5cHVE_c3E94Tv*>$BKwZqoS3pHo=`G+<;$orOTzZ_g zMsErUyi=YU5W(*BlF3*-)p3L8;+q~#?3+KZVak^^pS42Twx7VVwfsl(YDK11WVxG`l#d%gWXoRq|5e5 zC_utOz0LZBK64f|#*7e-Q$rPt>MsLaijcxR)HV%FH-3VQK|<1=y?C>Wu%CD6p6o;xZSQF$TOXj zlH5Wo2D*R6b5A^$O8eH8N}txfA7NC1B1|}qy|o7-oACW)4x76GJqJMQ22Zem;&a6* zpIt>NO5F&PA~VT)e`lnr4i`5OHl$;b3^BI!gNM)+3-$0Lhsu49ef(bx8vFH4FF~3& z`NQMu8)C%B9tX-o`YU}UKm9zm35XNNB!D$dJF({7@84>9W5$=Q$PXv)FCoP;6R4BvW9bJJ7nRh{3=Cw(-+sFEZYYTENZH}|~hJJVYL zY8%7&4End4E2wFML2HD$Xv7!Hi{3MHo2QD@KTG40t`^r3UbZshqoy;A6e?#;Jl4p5 zC*;J&r;kG!6v$TV+4RpP^OR&mu7Wdwl=+7sSn&Wp%OmD>vsoG<~!sHsi~PTe(i(= zLb0@!6(b&0{;#%KjrU3IMrMrH^;ydv0y#T+iD4Vp=@rT*Jvn09_Z^?bu)C#$5`y|p znvBgfXKJvSM?hrLk50R23%&x6Y-e8RlQc!i zBr9F}8g)iG;H}^vHX{I@Gk)+7BGHVl&?B;z8ol&znvzzFOM$m6iBq)nh)E7F#*V4? z?QRjibm1AzhgfI1FGI7#rcPm;w82yJooSZDZ^$}U;!r{K+VAPaznMnO1OScSiVTiC z(bjJKt<$s+)wW+w*}ID7B9sNEHA@>%?BLGMcPT922@K5{HX0Yl9DEr_uZFZurj69E zrJ{({A8mibS^oDWdR{<-L2sNawR=vL)GvWK1V~jr6}1t=m|HZYu;TJK<4p1a7uybO zvXW3|N3~)WAP*j$j>fQDt;-MlL%H~udPGgBwRZo@9aWPzSN-{U&_60=7(ynjiD++n zqYF<>eoOECr&|lSdHEu~;Vp;qy*C;r0DaAiNYmU^{%G!&pe_oZeraXt{bRm7-_yc?L-v$M4JBR*G`+NTIpI144sbCoE_MUnEJ7fHMz|#vq zss8=vVFZXB63ygce#5_6u)psCeDC*`{O8pG8ugDqgGrUcCxEurDU%mL*|d93*Yq^d z+qJqK%t`3kIEc=s9f z4`uTIEZ#?elKGDc=ptEwex=3<2(1iqqT*qNoO`iN3x0vef$DoFH`V_2+WxZT|HyHW zsK4Ym41g9c;Xs!qOlZE^pty-9O714U;r5Q{zyGW^FKT{o-BWhA8nBi?xn-_N)Y!ki zU7jMe#`ZI8slw7heD_BW-KoW#|BY8EeLuAzAP53Z78qes6Q&5~jcqqY8BAeo<8R$fZL-b(2wDNpKk$xI6ZI`OkaD>|r)S_==fAf?jQU60Ad)qs+XNGvubNwn;wn}+ zFiL^KvF2J*Y6enZ}-7#C08K8K~q*Up8Wgt`RyzaMqN+pNBtLw9uRV;`9uk0R#|?| zZ~t%e<=aZFdzS~o^MihS-#;?-Yo%JCN{d%}{3lTPA8Vm|1+aqgl_ag$-z>@hb?JIM zVCrAtB-I0(DHOa9Fd}qxtg`42_KYh?Meja$BAQN`YcC%YKjR zmam1SxDyw=>3r+CHGR#jFh)X-^+nB{T>ffB;x*p(ljUlep!dzaj?pa7 z@epTs_A!c7xIS7xgDxh;^)sYzrFf4f_lA~WDps^Yq6!KcLuheY^G(w8*+^`WC4ARV zr!}&7zHf(^`nXu#8NlvCayW{)r?GWfa<hJ0j#&%K?6E8c&u z4<6IY`nzbk|M*w?z&=wx-6`Vm&smM5d#4qHlGoz%z7LhCS5c4g+LmH?SOiq$=5{F* ztcqHEL6lL7DF+ms7tqGu=fNu@KgR{%jvKK&!~2vni2k4nGjbDbcrn}`OwvjFYMOWT zDD^U4Ztb<+W|3@T{XNVKeN=Qv1$+HsrQ_sq*9Ei;4x&vwp+6Z{P?qCRN!_0ncrTfS z#i^0LV!46XL=xcBl1I&7)6C%$8mlH@9miK=A8@gomA3oKq%l&5@%o)~8_{tvkS{Fw zFw0lc_q@60?3M@;=T_LBTK@oCTnrsMFb|8a53#EjC=vr;t+q3Uyol>zu2{6jF~ax+ z94eY1$>^~$`g7qDa8jg-=A?W)?co@=wX;2KSi~@GUD^xV6`}9XY&s^A+L^{fG-h7h z=HZC>&KnRS7mwxLn$=hv?*6f&%_@wSiy-Lu3S1=!?EfwPZ*ElvnhLnr2~6ra$3w1v zwmzuqdFoD%Au7v=$gRhoab?M>91OK$hr5w<3vgqKTP_A3GWx8~@C^=lYv8786GRS1Zq$cvp5hMEyuAcg&D07zII8+Dq<67rcXvP0JMC7 zK{LAkoPgO=e`y1Dgs^eyB zJxT;WcFjk{&!b_`LZN7A?e!#3gQ#IKFqjjyngPoJo?GP6Dt7OBn4gufVXG$xuJ|09 zH5-~=_BU8`tAd3*C3XPVd#HzkOFqh2~&sRxYvpvUA2Fzbm4;;4Jn zV1{SYOJHCC_+p<4z9aE#4l6H1E8etsakfceTDkHkjZj-_R-&H!tq1Z+<}qI`pglF-&I1f$i)z{x&pVSwfP8&T z7mJO~e*lhJixMs4Q?5j;Tll^ofIs+n2{T8p4Fdnv3{%6{d9>Cx#j^ZgmfNGY(i7>u zwz^gAuPkfzOMo%aS@y9+-3)C(=VfECBMkHpT^IV6Ruxu(knH6D{W-OpBc+B%mQ|g= zv}!QvmzXeJXW!ycJvw-;I+t!CTE(h#RPjh3K@=+?zZhe1KWOfyE!RaDk&OY_^>^UQ zVi)c%yof8%<8=7=REJ*3FzXH7g0Ua<%9PhYg8NmZj&iI_ye)H zZEd8~NkI5tE-X1ce+*=W`jt~F!{5BfvZ5-XvUT3sH$iG@VB<}1d#Te4K%%m*gp`b! zvXBp2r`w`feUHCG+W_Cw@gBe1gRQD;pAO?pg%vqv1?R=*7yO;~ADn(#2|NBvE7Ds$ zn0vq=%xT(hZxtpR5<>rB?2L2GgNH4mU8}tdtY7J?f$^ti`f`uu6hq8TF6?;mJdOOp zuJHo%Ay${s3s0mU4 zrx&dGHtn(OI{F=Zi!{|3M`guPCP>6!hpPst_$v2y&Tmk76PLl zdLwBCQDh!q9IioM5QRjs^Nt`CPmvLE&cNt_v7b<{$dvX6qsoc0=C=a7w907(wW zp*Ab!w-E&{4K%(p#VDU5)Dcg0+>((h(8erARe}X;@@jg;@gz_G>!&KeBIYQrZTICK z5#U$Q+=h;fqmK(f2ONoY7B^gRS7u_9V*>`xzY$ElGyAz1KK@}Qk?ebXwYiEZ972zU z_K=Mc$EPvLHlr5)7ve$}8e8t)3@EIkGZ8;=;LfEsR^;O-id#S4L^4YE>$%03cC<~04cnU+E(%aMFkYMNa%^MVP~mzclRu!-9Z}OsQKlt!hr*|rc8<3>f$}R@=i9Jc!^T5m zlO9-Mk4fLcLh;ER6IMn^Hi;%T5K*``NRjp40x@h~m&?~fJc@J$4k>12axW`N^J8gB z9_`$9N3##?yv!?2j)SF|%lF2B4U1`1((`o_v3fnmL)0CW_e4cr3bhdGeYUr-StxB= zGx?Q9(DQ99*ig|~*u8Uz>x!pPMDu(0 zyPXB&*}Q%+^{mafyQt+|)JzlSjGsW(){#CZ?%{*+PlG@lM+|TMz1JC|e<5LOmjgIO z0co43EA3x{KQj)^C!veXY`3QPUo;r!G6$;RvA!; zG;t_EZXzWFr(TQE@Vl0d0eahbhMg)M|ok(`I@GP|YmAzZ-G!cC^I zPI=-;Oj$?7^jrw8F>g!yJLOF0{)`6ugfFV)b1}9-4d6l@q(xM+{sBQ==LZBV43-L~A0;_{-LJX%jO?jl1y9xc>2=(w83`Bm0Y;Ka z$qH@(x~IZu-~q_f(Hu4P33FdAw#SFLFwl%SMsR(3@xnBc;%YG_vG; z=`KpIZU-hRZ}Hl&df-S*WWTd)3a!( zd_#h62a|Ixn3nBFOzNerPK~b!6rf(Kb0HphJU#R!aZd-lIqq;)7~sDJCDe49e0>B! zX>l^pTIcrC$1T@xKBa+wTS0I>LfR5H8o-r8WR5D%p3+X?TEXi-2&rq#haHMpOcHjLaUh+yR5nyuP8+M z9vnhhyjRyq86zHB>NGp@i#r;TbFxlEvda4G9F{?U)v9qrTeNP?a>l_H3ae^INw2>l zQ5`g>Nl~Y&*0@!Xk)cF{SYV$VhZ*|Md zR+KLyig2AHA_mo%>6jTI{mPQ*`a~7{VoNuT%oNlkoLHCJ-)!ep-}7-ui-j9ho*K^+ z!Kus~2@Gl0cz)_0ePqFFsc2^4SPNm1OGC|MFKJ^qCj6oRa##)fZuRBFfL|RK-TMG% zwAb;yz)}#!5KoVK;maN=7H_gVi<)8!>J>DEyKasrDf86c#Aa7sTvuPsdVO0{cgB^N z`fWO%9>!J26rt_$p?R*F8IBKxVFQ)K522uC_-ecJn2UE&yuXoq*@(5Wu_S#sEvsek z#({Qept4P2^4ApQNk3z8pSxL={iAxQT)TYgg**qUJgE{bcxFuG*7%P_ zzKvo$9XDlE*?qYDBj*zA0~Ub$q(5ovM^HyvHoMF5A%Hk#@8^_b@oUJhlM!*)i(;%p zen2tIReUyJ^@Fe1uXic?r&Lu#Xg6zBW_{4kGxG*fd`LLA*G#PRf~<^jMbOJmea-la zd3?oK?ck1G?W+Egq2Hkx%K|cP#UQMgW0fP)^_WmGRXpHKs8Sy{6Q6c>xdg{W^kUFX zSw-ByaP!T>@0?ClSf-sF(pz?rEzkH=hHDsc{52MSBxP6CLX>5k@+>BD-!$r>aWBHS zp6}6AhkMq}NcFk9=&$OpC4ksq>gXK~>}(74e2Q>~yghNdzIpmMSROqoJ=ypyJA_Jm zvpy0dxa}yoU~r?5fR#kWeszd`xPX6oQ0d427wpzwatc7j*M!e~kfxGy!1T$azK-(qm=&NUv_zEV z(wf1z74y;ZlfoknH=jrOB-^zIk!ms^%jjV9cgrQZ>_rVz)7$mY>ybm!Hm4Wl8elzA zwNSb>QmvSaDS-j%0YP+6M9})3e3Bax!We%1A)^y=G-S~#UF&C3BvWdj?+AWU@oDZn z`i3x5-3X3Zz%r^=6ilLw#s*#k#3gezvxdvul-Dig*no++>=3M#OT*w$D9@vT#gopR z%We??1SB>33?IgcNVKUeA`|-DDkU%Iuk;FcZ zOt&U^c5m!2W-~7w6joP2rjTp$J2uIB7w<~_1s0%2xQ@6%^$d;QS=Z^=ar`=lXXwbm zMKkGl=T{gD#)3!>vCsn6@oHQm{zaXS;B}nV#T~AJH~wg@CFx4{ubsMZ{$SXjr%5n&Vf}cXi=wU5}=O7J+$#fWnV&KcjOEo;D(+4=B_xH04VXXf%ZvHi|1~)7p+5@ zW>j4U&-An_C~deFGx1xBV$bT;E^STc+TV6=Ys8euhP!{jR`#G5mbM3z;|{qIn1j28 z?_iGy4zoY|5XzeAJd-3Io`7HNEVTvZ%UwIG80F;Oeh*DXzZBG3saQ0q2(<;_2I zcx0UbI~cO`3h95f)duH;UgJ~xQi{bLtxtKt&rf!b-r@y;AU&?8ywPOS9QR} z<_#TZ(ez^3{40429p};XlWkkf`4vW!>P=6MW=0nnBUcmGUT`Z&0F#zCsmPBBzK-wi z2?4I0^_MGy8QvO2Z}wl}iwE?h(K0Ue%jr7#_F8y34x{vMgkAS4n=^@*yyRtGab1A> z{kIk%#E`@3_~n6h<>`gkqQ)A>8TlV(bweMq9znPSzJz>ynSe%!~6(n0XIuGP@<#YTD`d|ExT;I;KPjNhIL z-g>S&yh(g}Tm)#_2De}?+z;1Xs;R_1+uT8%$mCbAW)yBg2bm2XuFv8~z9{jE^|qa$ zywo2PISN7WIDsUVNb*7M44m)y=~z(%KbF&s(DjP;_Dn)gMFOm8!4crNW49%XT?(k@ zid=XiwaH-Y(|y0f3L^m{?VPK~oGm|fZ9uK-Cns6HbDJHOcEvWCe7**8*D?Rgot+<- z;%78u5{?Y}2r&bLksLZ zf4F=g1?=2G={y%6;qQno_y6K#F8*>+#c5R`#ce8YGT+BJe7F24$=5&Jui0c?&}46p z!cWv;^19FN5r}=WQOx67K7WO7XcxgqeAApz`GGPKbPdP85Bk;K((G)xAZ*K#TZnwn!w^ z*@7qmB*|>?y>~feDuW^Tv4|3f@)O!xp*_^zdvDFoBxu2=wa9Ft%VNOr0gNGhfRjx; z@=_@!ob*5|hR3ydz2OM4_uV86p(kSQDVfud+$kEdKK9qlWLsGiNw}fEoPby)={gyO zHM#||dPO!2y?u9f6)SgD5q_u0U0Oa(HQbWTIgq=$8p^g{&2|u0EIB>#w5zD0i#Iu- zbix@v_l;NiMz;02w{1%;3)hIucM2H58bWm#k< zukS@{bRhmV;h!_dij60*wpmQ>PsQD-XZ(Fs7%E3BR1v+MjNhS4V_{3@v%?u>-a&YH zQ*DWh=O3LmE19~*VsvZ1h;Q#WONpb>R@a-F^T5ZcKYF{iwmFoS^KhTDWSAqInaXK` zmW501WvA-Z3?yMaY41{O(rmH*&^4o`C#Dw#Rtljv^(niM_+532<$I- zEjT#02V`(!Bi2-k@$h%Yd>$&krxy&X;qqrj_Tqz63v4O`2+MD&9_2Of?RQ)G6Pjdn z9WI2)yKiY*i7_J#@p47hYkd^HFHzlJN42MYZzhHg>5_;%u}#K9*4PT{H({L+S;XPe zV5rWJ7s^ZPEZL6>MGbbMiIaRPi|9PXd)PF6Oouz4;|?0KA`+~OW0qafo?!=0Ezq;Y z_}d!U_WQfqfzO^>)(Ox0AR2d?(o$b9XXZXDi<|S!e=+&x<I$J_1<-*K9CtvD@xPe~WfZ z2CisIwR%c+?wuo_;As%(b$Wa$mKUVTea@>|T+zOB4R3i{AA(LqIL}7lGhSz$Z(F-2 zrSlrz=)hjKn%9lbzJ4!YST%SHpRxERw6*W7*LfE?v6(r_C=Sx~p@WN}^H>YVpUoW+ zU5unu4Yq~KSxf{tq)d3u8Qr&`hVJPLH0&Be?#$DmIWa+(9mKK^*|N1v@*ULbG!1R; znQZgDNQRwHNEKj)Q<)W|12fpHr=sP0`wP^wRgMRII6=%9wz4!|i0#DvbdUQ15<+n0 z`t^%coq8slEQz8wlcRSgfZ?{|v=_IiGHaZdp4D2&0khX{{qH~*_I|cUS*6N>?zBf= z?etIPL_*HV9ONKqBcp)hMLt?{OH~_r+)1ewrTXmBu%Q4PI5pLwWWw;~@K8<4t^){C zZY9vBzKVz+ZGAeS7Skc^z_A2MZUMD$ngtdw!3$*%zvMjp*~!>4UeqTq*}h0{ zLStxMs!b~4iH!t~z(M^bb@F{7^EKhp6ZV_2kb9Y-a#fCTEllIV5VYR>5L#lYh0T41 zYYaj~M`S>KjZ)$`fQ(1Rsnpl;#!r0vLF+3SKd+agiyVQNqf5HAEwjfpi~u<|_b53- z%c$ms``6PiAlLIj96#gv3f;}dW~7!5K7A-XdsHZZr1eDK=%AjDyy|{TUj&!Qy58k_ ztJcy{jgIG0M@V()_x?tvs2dpmEkL~zz7LJ$;@Q$av>~|!`qvMf%Ir5$-HwO?_(@v zC!$iNXM4kg^r=3?qE-*o)EU@z7nxjz%bBW&HjHoA|!N14?y z^oc*cpaXv5LVRLR%6q|#rHllH&`?840F{=U-|$J^urlguYr%Vmg}%yBd`JENG4|!* zP`>Zmm7)+OTh^4N$d-K>ijXZ?N_LWU?1QmOLb6rJGM11n%#eK-*^Q{r-N(`ySul`@VlT4vu-ub3gZU-}iN0=XGA^MOYjhqkuXaNq>I%&-w5r9uwB0 zDxULE_hHP0ZiKO^pLu6R!nMXW@8)Ea*0>LPK$8rI;t0-KVf5tG?(E|E;ww-a2u<&3 zlG}P?(pw33qi+Ln)2O~w=Adqo9&ti}*g+!rbc(sg{TU<9B7-$dC=*4BHri}F&6$(8 zcnVRt6H~^RQ2E(cdZYDgba3&`ajI&49x_kJP+A9n%;Fr*fie<~fLJbE#{H$*3arlg zuRFR=dSO8uf7PA#p+pfp*^R4x^%aZE?nH+D8Q-musiy|NjH`@Cwbx4v5VZ}_*c3v% zIA#E-Ny@bjTFwoz%MYjUzbP1UZ^Y-Bf(Xa=ro|sq`fPx^mVaE5FiHduy5?$3zMC3K zjgT4o8JB6WT=0A2ANQJ3@~>P%i)b)4A^TF5MLl)R6)jra!3 zK4f<7y~JU_HAd3Hmus1(kFs&SlK$^lxu=|F^Ykr`YJB#>juwFO;QRYlPv=y{AU}p` zYLDl?eY~TyShf7IkgJEh|BvlXIG&9DLH1&}V}1=sZ>_nOI4*E1?jx-NInByP`J=!= z$-7>GgJIbM(u-7FJ$B{+v4HSSYn64Ut=}`1-s6XP%wtEtTea?T3`Ow@&Z)8}wqBSd zG@G7}Ib9Er^a3(c)U>TM+Z99(icxxrWzgZy9qb}A=-M*KxQkiuBUc@%h2dr6RmJe_ zMRIq`ou2$8sDfNm(xpq>ESJdhEH6JTG?X>>)iHb@5qwDhuajF;9=cZq>o^5OHWuLpANP#q*W?>8F zLCoWiv?=EElk188U&GNgFg^Lp?PR*7=o$5t_H#2uA4`5bC~fuF{3-rnb4ofU+zNUp zxQCh3uXJ1Lkj<2Uq!0Wew>a(bO#;d@O|1cFt@~>*2fhVYXW-_8U8@{E!4!`+;WszV zahDjQ%~$1$;FQ9bP_9j+z)*sf!E2jjN6Hf2qSw<29c;#|t-gc4$+vF~sb8Aqhdis6 zF1E$E<&=CAOw%{Ws-a63ctOBO8Dp4=$^LF)52${|#(-@Jn4|9NnAU(ysS*V%iRkf; zP%+vjpTP9k;?F?>_|4LzZ~iWQukzQ9ji0@-F}sP(`IyU9#eE!PQ+J!PJ!C=dTyxWw zTqfo)WCYl`eOINXY#Ycdfmy9|7QnNMQxzNhB;$B(;i0a|cxAliIE}(wYW!N+W5^88 z*?!IY>|5ie6LXp*K7(+m08fBdJi;JJrnMXBr9gg$J{ddF3$KQKZk<-)@qlHgaag;|MCvM)o1k|*1hU39w(pXr|(;4Z_?~eWi`>=P*SKLfZuez^GD!+LKVwu0q!!I%c6YE%kfrWEMwP33Hbc4>HGTZ>>1?E#OJGiuzm;ur zP9*lAMs$${#JMCv_tM}aHiFbJo-5@_GNGKLuWq%0LqzFIHaPLeT@99IgJ=R^X5aC1_4m{P}4HRuzjZ9LdPcMz=K5fXF7fi6w5DW-4@dxZ1iqw7)lFsd)H6-yosbp$!07e zGa@|fJ=&N{;BN?@^*QuzeyZ)!)`qLs6z`Y0<1Q~J$Y!Wj*>d?#;!9(Q;b8Aq067Af zNb-^`S3oyzJnmPZ#&N`sI~w`BD}atHqm+$}#AoPu4&_0<3j24f2NR27gUQNZWoaE* z+WO^hyjqe=Lrsfpz2Y*|y=*ThT5Dl;u-od58*c!Kia+OBQU%iTMU(1b+wSNOVe$~8 zK0y5-6>mj6$I&#tfAx`xo#3gP{dw)2uRD!32A1ZDxAny^AYOe)+7$(qYxU4*knXmcGB~M zAnhWvA#;7h+iCe*K`}}Q18KW&{Hnzsf^~6HM24@*)owAwpKY}c9kY9hy2P8NlH5e2 zM7T|n%{0BuGfs%_l;mA+v($|xk4cFb(TzM#EAfkc^>8z(=C}7Qk^$A>h#1#gk0y)h zIzAvO&(YpL0#ae(2Mz07e<9VLlR8=s90-seO}sL-QLAEmy1b&Go1SGn`nukw_L zq^x0w_1hagRMfmrHHF^N-{>Qy1^7x#Kd7gmn`$aQ-p}$Hxys8I?De^h4=K5_x?R?$NQ}0WU!lmbaxuBUxx7$$!Dx8+Y=27&fYkTWPeP9aL zgDBt58l`JF+Rxm2q&iX}Vo1|nW%fZc8YqFxei^5!bYMZ;4tBWv7`Y|cz=n3Y_|~H< zb3rV+$FY7_Jc4oV#j=kVO8wea^Yq2b+t=!>E>BkU zTkei{gb{8{Wlf?&8@2|XE%#ihBb)>s<_^HuQGnuRh)K1HDhc9|3Ye{)OPssKlo<<@ zX4-pO`ibART#941Qg;IBh9T?LM)#Xc16s8TTZUOeY6E{UJPpP7Em^tiCAq;@0d)m7 zJ_Dx;8m&jI1y|f-=E5S9lY?d8qPyqyZ~ZoXI17-1Wc|zOL+&N!-HfKPry+6;0`;Vnq8V=QfXv6oes1 zL*mCPw2v1xWel8L?(?LHEwr_u_6JDYMl9BXHLg4aw<%K7nAcfc=y(PkekQO;T zfbIrW2__>Y^-{N{wI6LBhBErz@ls;OaEHzV^NFwj73mpVh4>CubwUIGy$Sk}yzA)~ zJH&Oh{1+yCk*yWkMR)*~O1Ofh^qC39bcYsn)0Azbr-+{dWBo5z@yqJH$ ztcppe!sQiLPlHbmA8dL!43VWRez10FEUekR$CE}-aEWaXATG`>&I0LAqIx4Z*|i#f zFD30`w|jTWPTe;u6~oQQ@W(Ltk&Ki8ptJvb5g`#|AJ*T*VAa!4jRVQ!*u+C$k7=WnNm z-|VYz4hdF6M2f9vM<{HYZ7e8M1u5X0v&}Q%F9UGQWE?LFe-5VBe|91-YXDH#y|MOL zKq;%Szf&H8v})MpY=cFBAK^<5v++ul-?WVADi2Kk2juo3$&q8u*QYcGTP>Zx4MFHFBydw0Na@VZ7vdp8a=f zbHlUDA5kEuVDnsnWf%>4J+=)GoHBVK)+wQFY7Uh}0>%{A!#_7nY5;mb=x)Lr8ot*J zo#yad(b2d5FCNhH6+*JW0szQA0(U?Zc3fwDtzr7vHdTvf zUxyfNm?-Rb;7(5g0h>Niz_%1+1(0F1Ht8TJuxG&`8V$rh3sqni>zQ7ZS*LHubdtt@ zn}w54^CtIVB(a2{jEJEnLS4jPPIYs(8c=07ls8r5@9=_AQ*ik-gw=0qOlM`lyzm-I zTi+!B(B0(bU4EM$Tk(fn%Q8?%GI{gKc8onBT|4IB*W-~RFXHmvJtw|3P&CJG+Pq#A zEneDI#fV3k5FDif3_r{A)dC0qr;O`6A1~j}L~)#U9EJ8MGmlLJg`U?Q1M!Ox@tN}H z19J4BSZem`YwMq2f@-Qy11ZoYHS(KBJr_7|eV7j_wr(Ibs)eDv2svcDu?WkFLVodHEE#00BZ~Ib}Iu+>nK<#bAc929yTUo zd_>`<-;l~}sI_x6`rAhQS84|;Tz=BUf1|>^C#{_-QH}L zIwgBZuKVxrjicu9H{Cm$)RR3>&ePLdpilVR8*0)zKU_4dX<`J@P7eouTaWF2F9KG! z%CwSIsmZFd``p(Fs*$JHQ(t*n#=vZv6IkFXwepIEq}q;>ejHpgnc9FUS#8yOmr5g`$Np(* zLl-{TebnPC@kU}bqK=7I@F~J}0fpY4hcf70r{KK3$RIHlxP*aghRvG zQLlmXsP6sO%I?-jx5{L)du68(8Gpke4ZC)YW%}#Jqe#QR64>_0S)8Cp&`UeZHvkeb zL(GJA?A)A=n2+PrUTA4O@mZ|fI)_3O2Y=DOoSi+L?UDpl*d_@G72FRh;Qy2u*!uug z05}JNX!UEP{z1s@3izSxB=?KLYtV5LqZ$WYkbU*WmzF35_q|8G&-8&5p@@#F9uRpo z1Cx3=O|<(BYl^zlbmjTQ!o@4w1$@RbS*xD`qAai3-HhRp+2|)PHp}WCUod19?Gmc09+8Tbpvl;CO1267#s=|>rZ|*PlB64QdD37nRa?^cfm!Y z)`2oPK4}Alp8DOO`zQ={_cY@=$CBT%pha`R+4-E!5vs-1Tyeg==PDt^bFH#trFkg6 z4Jxc+%Tb{*wBoq7pnCgm0w(FUaQjU2AR}*^SBc58weaVU{_?rX zZQVslC&T3-!V7Jx`@lI4LacwITe+0JYP@6l@gHYJp4mB6SIQKEghg$+A%~(ClyMM% zIK~EYYrd;Nt0Q54P|{4P(%^w#^UJ?v)fv^xlL(J66Gi+!f(E%p39+vjO5;oqhrewi z+guaY_Vz#|U`aOGjipstoBJ*1>%4MNv@^Kw*C91depV; zPtfl1vGMYuM2WYyzqVPdTgKv{#Ds+@;zU`NA@-;P(+)Ctao^x@hXSCX1UAtFa?Pt_ z4W5r1+8jA7v z=SV((=lRSnH7`jAtUk3mLqBq8t7{5$YAk)%wEw(^lR#3W9)>Rzsgh-1 z-Pm5{veNe4kX@QBr6x%(O&tu%#ospjDE!6u+x{oIF`UJ|)l{hb%KFB#P16En0oU(( z*4K|ZO$tC5Cn?KvI$F=U0b%C}aOeT#Oy=x0;gcdcdg#bIELBBAlFD@O&aaF43 zLs+$NwM98{%q3)Dl5NqnyRm66_2fAljGEoZo<>_UK*Koy1ZTXdEK#b7cmOmN!1k(g zFuz}91>7WnES{lS|Dqd}3m`~xFMsyl+Z$-UTdZ%HpZnLnXPMsd$AJ_tXqqM0r^LIO zW0Ny?-59}eY|?uNwkk}~;`uxesoW{ad-N@>F}IsT1L&V$fXPZyx%{})@obCwrbXwJ z=!QA&!=(a3pH zIV=|mG*X|4^4;*2eoz|V-2DEMj&`4)l@S?LgF=p1$zP1A>%9R&QU8d2-NhweFs)v< zELp&}Kh!ZO)2*ZnYH0}=tm*ofY2!Kj$E;EpI^w8t?g0F1Ed-TXXgWPVw)-aaZIr*; z`+IMaFK}hnE(p=nC>~6TquUw~{+l6?hi*0dO`Q9_`g6%JTCcx#7Q#XkFX}kVZEP(2 zDoUp@K}^zjbtY*2MuzGYN)IlNtcQ=-h)Xm!T>!jAKnN0`8Chy|x9^ySMH3V-;{yQ; zE{bvCt={cJM8yj%br`>7pYDk=dYRt~X1-K2V*zu**LJW=`+ayXHjo+Uj`zT2e{sZ+%%$c5enEAiLt~f{a4N$&oTfff zuHybGTg?Y-p4F)bJYlS!vDsXj<8?ieKu;!<@^e~koh!WcuxYTm^8DAxhHW4%zV+~u z@`p>K_F};~B4dBDAGU;&yA+%r%=oy0PI;e-NfX|dPLC7$Vt>7rd4B;gX#`A7!K!b- z*j}81RkO07Zhg>0ARxd(SxiCqi7ep{ngFPKsZiyR#PnxVD246(*O!NJ|ES?3EbWgp zBa&GnB=#Q-<%I=*NaA{jsN+J03I)g#EZob%^GIGqbIVjhkM7N}Zw};kkCXEUP`*p= zv$n``ez#8jnbM-^xq7~%*V^Sa(~kqXzUfj=Hf3tz-T)k2RFO@3WnwJak**KO zIZo`?+|Ta^Fy}kw&tB&lnpwjC{QBKTt*)hspHANMVVAm%&$anlhFBl`5#XA_Z3-ld zz+roQ^Bag^Jg>Fuxzu|ns0*qwo{pbT1{P`Y;TTAz`E{y9F z6wETp$&M_ynV5*GILt0l#U$O2~Of|p}4uX1ibv5pD}iJYFEt|SCEiuK8r6I^=M`x;jp zgZc=Y?^k=K{S~Eb_kuQL_(XcIN0RA+)v=}!uQ;^Inm$B02O_eua+|x2bnH zeFlFIY|I-#I5g>_hSYze%K}UX0~%GkT`{8)zJ26*ZIWBatfgIt%eXCxNBD{$f(k7e zIi_})&Q@cjN}mrs>NGjU^=%MplxRV_0R&rhX_fLdiZPY)zXI-iYp3=vIUZC_$RI!= zs194_ncCygmE%Xt#o2RW>u%Zj*;Z04yBRCJd-PzrY5z`h0>A2^^dni7WB;S^=GXIi6!}Red0;z zn)Tfs^f8Lb)EFi%9rA%3GOkHt8WzJGCIj@V@4fauT5z0}=uLRKCs|btr@=R=`|mS z4%ZW&Y!!5S`KgbOSqzu&t@nuSLdPkm$(CKEy3=?G6W_KevU4Ln zXg}Z_T0$Ei)fB%LjHSZy&xOYIxHJxxZ3K%?2HYr*Wp9;u5wTD;#bdo)OnpDb&U%8d z8-2rUG7wcd!;+uFn|!=)EnQ6?E6nj3K^H#YKigWXFa%i+pFG-Cn~CqLWoNMT+x1>8 z%TMhmX-MVnL?@x#O5yfGGcv7Z_k<73KRZi3n5+t1XDRXPAnfov_SIM!#j6=vVghiS z`~G-#43!SWNAIx?3HCh!-V4h?X3&{8Pjlw8k_H3ZoyT*J1!iwMgBtuD0yzR+ zj8XVON92a&HV(07(23FB>tk=LI0pL5+-c`y2OMW$gD;hzSMP_XcD&6%JSZ{IEfcZG z{8mPTx#`W7ycl6;_H4^{Vr7;EGlKrcFUYoO8H zDETACKK9%my(H&$)VP0&0@Zuf?4&TYKCx6hb&}~16`zTKPK{PR$`3n6h`LYr#xf}d zr1116Xz(4FsC&UH-QW#-ejN8EKL5P3YcxDNvv_d7Bq%1IMsHkp{$z8`78C3`;~HA! z+#~5cr^q)KQ4Z)q^J`|;{)9v>h1|0Vp=qOdv1UruRcOmDB=I6X$b5|;5fh|sEf`k? zeUy9k{WtpoKVR%ZERvWN59!2(6=KaC6fAPQ2K-TT)@@td`ImG5kd}rvztbvuYk?c@ zU&Wd({LG>IMY8EuJBlu#P#&Uc4?`?1R?2<7iaSXVMBxK@0wzoQ}; zsAM^;oWf}A*3jT@O;dd`NO+`kw=#RiRrK;h;Aq-+r2|eT)3@K=(WFRm^BY%+`MYkfv~AM4P9z_UW2ta4WOSH8e4}96Q&%J?M}cY#&YX*T+{*<#TfwG)o~FFx`K0rRvxGB@mhQ? zOWsHYXq{z0wii~P&W$r)#;H$ydfnIoGA1PYw_igEHQb&iCY@a&857)G23RSCvIIoMRGa1g_$@l$q6oexj zF-Xs^n_UD5Er`CzP88cfuNi0_1#H5Iogik#_lDmUQu$Jab&K|pg%c76UY|sSTqnN0 zpo)V8690t2q0BsmBTCYS$!l`(Uf$HA?{)ykZ=zBjlNTV$D=RYP5EsofUXa`l$wnap zj|DN4_Z>$XX;DpgIDRQ-GIe3iiv``U%LSFtobam!S^^gG;Hn_vk7IBXFFS?=k5cH@ zNX$__K>FD=kWIU5=2-CLnL<8+Kj1XMqt=gGS<_$ie7h-W(DjGwtw;@v*)@zv%{ z;J}r~#!*nmg`%W$hCMG_ZsdJXCy-c9`}8(e20YILJp2ih+QaZ-sK|rD5j|-gy$It5 zDTad?hq5nxR?k*b#WM#+j#PEoi_!@nII=;_w_^0@BuRtJD^jtywE#Uo|9XeBG%^v) z)0FsqExrP6RZ=Jnnh2nEZuX5`{>?>x{%ozDYG3f;0lH%Rz62xNV(S3Wcsp$;eDQT# zjyQdESmWKararVcngR8)+%8P1Wk0PWl{%95|lx*-+$ zjnahW-OYYzll+AQeGOK;uE2sj99-GrzxHR7=Qox0jKG|4^AbhkQ=uffZ9vVn2o_aT znVOn-8TUO(-Vctvi$AXZsBS-w(CHvN?zh|hvE??*1()g|jMFNnFnzhZS@(-C4X+Sp zJV>s3l;HdF_$@E`MQh`qZWN}@woyu(DIKWsQS(RU~tFnn(_*+^yg z^z0Bp5dD=I&550F}ztQ;g*VTE4duc^|vLD6vi>KUGPEO(D*>XwRIBW?g6J8DX7v~Bs8V6-UF95Du-J-=e7 zMDQJ?QsrJIyh$8fRFbyp{Agf)Ct9QX^JSc@n@m8$X@>5qhziRwzw4%cte3Wf=7-}9 zw7+gOnV30uMze-*8eaC8Jbv^0U5}73nzZ(rE@UYbdn3I82# z@wgRBPUOAb=jA*Vssj`4LKL5T#^vu<8tJh9hC_|@U;W~2f(0HGjt}+AL&VN+`gmK}V>++WkjS2*JE4FTBQp(4bi-$oH5u98rOktPJ9NmMXPf1DR zc9}5bQK|>i!7|OP3~neDL3st^VvX*uZJc@lPa1p#Gr}BO?j4xK#x!A^eoCV%zKl%F zmrPsJqUDCONqJ0L7SMMDtl=fH29JcD^3e8Qv1 zy%!pvimRkuFL~WKn&Y+}vqgDW$*3q4ADy``p^H6Q#`VO?NmzGL<)?jcgwd?tUELLg z8a;&%C}E!WmX|RSo~J>_`XgKsO)qDNcxm}8(tBv3WQ< zr_)0vh)B2*NK2a|JggyYXtsk)bxq~duo4;4IytP^mIKt|tmA+_P#X__7z3W1$#J2C zDJzny$8K*(_yj_#GhuUG-&5=ej=0aAMqw&o)IA5=j$p(4Y|K$Y`LAo>5y^L{i62ea zg;S06^gEv><~(81h`0t~19E(ZHh;$L8R2F9%mrz`_#9z*=Sb@fQop zYQah%=Ahj&6qoVU_>K_A?bbi1Fsy{Lqvhxca>P#hqmqvm{n==s42>rie=ez23p~x{ z-xTj7CSMXXQm$*QVID-uif9WxINtBV$7%IVx+ap1D|`518rPW8)&IBjA$NU0oZw=+86YjS7PVe(4}caGJ#QlI?jr!vsxr z?nbL#_@3y-F|6ElrOILBbP)#SI7O~Sa2^LTBCD6H8)&p}<&GE|`~tEtV{}^s2R@6L z4yEQF_Ef$>p&{#U0>Op2lq}W*l!TZVrnQm~89S*;xAh?68axfaQoNLHl z?~pux$SJ$mSx_4N%0Ww&T5vI3-@XJ>n)r9 zQTXec+MAx)dnqARN1DI(|Js{#7mdF>lsBk<$FMNncI({v%N5=iwzNrip1L_r9si=a zG%Cl+zRIE?J|)j7(NdOkSRGpxd3+C5YyOxf<>Ic_q+KezV+m0qJLv4IZaqtW2o6#m z+W7ki@MT9*mv5z=N*$!U_{4;)cfCtzmlV>yckMzy z;12xG(62xCISM9N{tc|*TQ*}Hba$+o{;3(bUcQ{Q9bP|1ixJihm{pF|4%D_fVmEQJ zLeot4OH@jgp2x{}6G}T|=zrf0d59dWY1$_8$*7MX>( znLCOs`&NScqmPfFg#sit00udCktOmW*iTi84!T15udjdTcM)I_TC1!7djJo=wx7*9 zXs>$=B3wC!Ca9c!l6Ny?Kkw+0p|tnH#}2w=GM}(_1OSs*eJ93(&<6H}p}CaYpU&vO z-Cl84r2x^t6FdC=>}Kf8*W3U7LZ9J)o8cQm3poBg^Vd4nZV9DH8FQHWF`NN4xo6Ln zWU(=(Vknu>S-b~mn^**k`5&5#s?#rgkwh5y$(>}sCFHUu4pr#|}s8xGaA zhtjU+I|DBLzXtx#u!eb^OPT|9?J%;6q?Imu^*8A%G~>mP+{bVx4VffGyC$ zt|UJU(r=Te7!tS>Ic^c0JJ|>rAD9(+Q;*`w=FJmB=TV~`M$=nP$4nNf$J_YeMDjJb z+673D3jm!(5BROZ9E|dpAJ}RNT_62};_Pia@irc{p9reXaPX_Tv}b`6b@mT+jriXu z^S@sWKhHB_D@lnex%WX7rXe#}^l)3C{HC3_iPNXjU!1|Ia35AC9nF@+H%BuRxo}5N zrec8WD5FuQYd_dEb*;uQZ$unUJb^FkSWd2HltD2%)xJd9{t3D$l1<~zhjBQ_gjTWA zA(5eXF|)r?jRUIjb}|nMW}>C`OFmiYRCEu`N;a?;7R>BM$#SL!4y$#{Hc$Yf}rrtuC;;&7P{C`l7P#AO-> zLY%wS>dL|S?3@?mwz*LqT25xx;`eI9n8abei;IR}`Q>ZBp%~clp8wz=%b{%Vaz3vu zjKzIO1oc#Lqe({S;v+D6--;`4GD6OKd%Pq9bwo(%RWOmZRXiG7-Dom#q1KT~A8#Ne z_loBLK~d`Q%Xt|+yz%nKpBD(Eh$#(Fu%j7M*Z(lt4<|0Jm`lffi2i3M%8q8GgOg~t z!>FCd5Ew3fgJ^yxV^euSuTw>%@F#a#4c)dXz#eb-rH&8 z%Z~>&PLf%5fy;f}dD~)m068Sbbv|!4CBw<2tWa%k8zO35rSXG|bdT0sm!{ zXP2fGVY9hZcW;JL*gBVt zXb@L|)TH;8;;sCLuJuW%QLt@HxXAHB1Tfa8(IDchhBB`?+#j7#BTv`_>Krr|-* z4Unn+&yTP601fv1jJdJt97nmm9j$R|T&tGnt<^UQH(>{U5;^bv&y3%HIDAFct_)YY zH9GsF$xm53jLfI;E}yoPlxG61M_-tXM?kyNW78$?PG41iM`$I}H&>14dkx!uBk=fm zv_9A0&C2*`6cFvmAuWIjAu7&}aiQ|$g7PmlRlFkroo`pinetSq21$LF7NzQUzl+cZ z7wXY&;KueT1{wNz_PH5)pEs>j$n6a$>~vTH{7%c9jTz$m1BU+VeQmm?v2O5s;AMIf zqXSQD3R8ajWTL_dErulX>eJ@{mAV?|+V}vBN2C{Pu`9{$Gov{CiY4cSIU@6)m5BEP z#=C_eZ&dBh@E?!thv{^{TW>fOrIc8WN=7uejMl1k*rtp-b%h$m8|D`GN5;k=g{OO4 z8Ir_I97xaPpDV1`&wv+pzo|bH zGz{!OH66Frf|D3U??Jl0#0@iF4C@Hss8ni8QKRBK{>+G}wpL_Xm}WtxCdX1+%>bV@ zY$0YMXxePZk3RWlZJgrO)6+^Rc7H_6RG%2 zoUwT!q4&njkTE0}n9xT_(%!w=yE5S>uRzYdt+k^fB^Hn#j?cxFC|?6MH~jtyG@HWN3!@g(rk!GC zdQM2FRhVlpeO~#;UXf7Y;Y&bJhutOgt>LCZ%HPx5(k?)0j#z z;htUTIE$N1v(OniYkdm=(^h%?a0P1e+}#G1)sI-o>v{&FM^#fhERB6GyM!{yiI zR#R9LUm>Q=zNezKvT2 zN2qFx802A@4};F1i)t1p1Z83sXSE`e0?lrIwctoP=0!q6sHK2ZtJ6F+xk(%f3Q zdCUC;-p|tsf9q|$=+Hs>PXno#c#B{`*9-$f^i%#cO{a9P(NYG#b;oD}@T+Re$IUTK z)<3(^5QF}q=EnWOxR1BMlO2`XlgUY~uevm2(VW$0@s(bqml3X4u%>gSx3f<~8XGSh1$Cb~;hAcoC@p`%!L}uK97^7US$^f5PC}^Xn1&Oiw(0 zPTMBF7Cn~cg!qqsvFJd=H4LFZf5t-m>#In-F7ee3j}ut|0~$V=mYp3bnMyl>lDGmH zh{1mCjZ<73E7*!fibzx+Z^f);AlWA^oy(`aJ+xbEwP0zKOhT?YzV{c(YaU)hs1`ce@o#ATi_W;mU!7*H-5Pu##7M^wRa#~jH% zvGtg;q6k?PK&CG&FeXz>_-?@aJ3C{O@Y+ptCBP>8p;Kb10LFl%M+LQ#uuyiK$?? zOpK)glEQ9=e>;tuxmz80(wV)A%g^Ud$*z1Vi@MGF)SWqYp__ibqZt7mW#)kAJYEZT zt~Gi|>yCInwqG%!@)u!XiFuP@ZaU7@U3Fv7wYhNebi z>``c3K>xhC5HIwwbi zmDl+vpd7;JYz1<}Femc-ZV2<2I zLq;a%OfSIX7bwRU&~h0|bjgo@qENOVSK*Y2I(3xROu>0NecqU>w3$zubx#Jwi(j|ylvp@X z-vsof-zgc-6IqgdQ#O&8^5eGjx0c(5ZgAzthGy4X&aeFGUq^bN@;f%KCWSk987fxl zNAP=|EBxr(R0+1*g=$m$_%NOv8O!dg=OP10bNO0#35b;{W!H{wclUQMz7vf@t3*6L zp!IA}mM7ikPtysUUOn7kpXC0`aw{k<`wBIu8S?JU1Q?Lu@Y_3T%X&j<)3L=@_OGEG zabSSvxk&o%{ajXZw!i%qIEluZ4f@^s4k|40I#3o9qaHc4Wj77PJL>aSZ&xk3VTbuz zEAz+pza-ytwNh#LWv2_MCfRx3!!~@$_WjMsUUk%zcyy}IDm5h=FLgVrV`)BeJa6|Q zMUkg{QF3Jkpvx$zuwsd(S-A-Z;ml__pJ;V+e{9-x8>P>BoJWiSLY;YmSPM@F%FJfTwCOY!pC1>mbY*cgW zW5nc4grqCpm&~-EAQ=ggXfF$-@#3c;q;JScnxZPR4Buf8wZ$@KB|r@nDomTb?jsYl z_8!;wLZ}|rG~#NWJTqnShoG`OTdP>}D{s5d9J@1uFA&Ockk!TrSlrbsIk?OWC#QK< z3qU`tjn-|g^jITmahtpe@??|>Yu4p?%@T8mP2c69MkS1(x3ENT;7S8K53(?f4fUt2 zc|BVXGipmEi-P%SPyn}LsR z6KS+gojh>o8n^{Q15hQg`30z@22S`$9O7IF9uu19o?qTw%4_&p_XO!$7UJ&npX7Tc#8aUxLz!rN2=#*4P4v1lBd+7Is2+`@J1(9 zO+veJCEjo0ATb}g-NkRQ-2!UcAzy*UMA^IGeD?j=Z{PH*p9}kOvIa%HFrL}fV}IOs zK$IB}^)<+|*;1y2PR;pbw2c_ow$=_lVhgl~KRMb42d#wKWk9v803JI5Ue#Eq2pmJ; z%tm2wmjv6(!@iq`OE*qWXDMuk5lLqFYHPTR*<^lE%1@LM;qfV4p=o1%>hg_kA*4gH zwQCc8%yS4azrcpWcpaD)pZ9m!(rK*56{bW+%eUIghQiK4@qmPU#_p_B;Or?YW=qehV zjvtp-tqx+-p6#3maSE{}?0SrKXU{?nqz%7++M?aZoUTD*(R@XSm5CPQ6mOP3(G@Kb zFU9jv0V}^OR`=0uMi0=_u2gfdr;({5$+FQ3a+pCWOG0)5rr)1|J2^k{c4!}{6xo++ z^Nv)oZb5%r-8rsMi06Cvs%}&-#zdv{iWVMSW%gZB8pu_=fAAkx_Zdq1Oem!8dS8xA zpIutZY6h(JcMc`#F6|c~AX8Zm6BfElVP8$w7E|lj=MF#UfanSg?|l=^x_1A%A(wDY z-e%K;53Lr-Dbu&nmkDegv;l`#XWcyOB`C@#m+^-!S&2)hL2fGGn8c(=Z&%iks*4zP z1Z+nQR8e|vAv1PDiE7`sgXiF)FIq>TqY~*&YqSIEE%Wb~uQI&QT8jUX;d3YccOF|m z9VLUu&abVkH+gPdlu*{)CrNHz*qgQ4)|!`bju8_#k{{=1CDm88$c7=i)G&;c?oFpy zV#);ln4V^`c7woFrx5q8gnCQ*It4+jX={8k#jCW&jpQ~{xvy%Sv+sjqWBhN;GhEey zZ`GqtdI>cG5nJ!%%C%+Ic*OTs&5)(+o9}Toqao3nh?2%5Kmnj6$J(WP;w{zu#y$2l zU%wC5cRENHU_ZZ9l&}HVNx$BwfVp)4*Q<%>V-}S*A^hpw1*d>UJWJ$j7JLZ% zeS|e`fR9aXi8+59dp>eM9G$m*QmQV=HVs zXO-f=npB1}?^;U-m;qgSDZ25N6GS((r~U25r!R&uTkpwpyXqE%P~_BIF+LwV0%E9e ziSiaj?5qHLXMg`JCIM4K1oCs_r{jsw0f??4bFTN-T-+vPl!CD*GK!*3o8o)6!&Pxw zm%7_vCesYXkq=#w{x6v*m)V*6x_wn~H~Kb$e>RlPXo%9iG?wY5ia}bT?X)AHEaAwvC{cWz3akzv={{{ciZzPO?)9Vhw3x8Q%V_nuKruG`wMO9TW26hV+G zD$=9~gkA)sC?Fs`G!>v(Glthn|Z;NcqHr!(U!giZH42N=S z-TtUk`w!%1wfyc+%u)hCxYR{KD0tL|@h8JDX#>({Xrlm?fp^YR!StSmuQP#cn~Wrk z2O?=t^+~*7pMjR|d`nBvgxjXMc!~Y7+VDfeszL9Q0-oxfAF-Rza)U0&fCRti!%x(> z^_a&;3zLl0eDP&_@%EtmL;*aY-abHv=8t)ev`rQM!7+ zqy17R8-mHnra8Utimx{m2jNZB+w{qE1HLvcOa?OgG-K?J_|cX*pL#p=Vxa=D$j)+v zsVLe%31cGkE|_7`!%znPU~4@#RiIU+D!h%sAQ-oGBy;o(;lP8P{ra;<|D|6T8D>s0 zZ3fHWl@7vmC*%GDP$4vaVf_t7$~iX|zZONc^XS0c-^3IYdvK+Z0}&3)Vg0EDW^b=w z4EgpbTk5`aScb8N5Mj_u7FU>P^vi-3dr6vkIX&ph?U5Ua>`#6`{%OYjJBGQfl*}81 zv#fYxO9z|L-|7FBYgG&tUYBcmHKyxTEJ!{(K#JK6ope~9Pk60KDKOwXC;UXz?#Qn? z#5suCbAVe07ts~preeL66KWMu6#iYLi0sX6Qd1=Vynocl*h6{I7?1kn=&J|QExl5o zyPGIOl@U!4=+kR-E%H_vTyH--fVe7MqY=zjv@0gTWHOJxv8Ox3kZ1fhlMkYZ_kq-*zPb+& z00?t9G4s$BMEM%KQiHKP@Yk%S@K+PlLsv1FXa?HO8Rkw<*!Lq0JX@#kI=v;iufwA% z9E9ui_^6qkLN%TfT=a@#saPH@6QSj*`V-!Zcu`8pj+v)(;)c7#Jk+vxIZd8DFiYuY z&@{BO!VO-l72&W}xx*cakpwkFaPJ4*=iWJ7&XZ43CX0IC^c2rg)tZ(je+gd~%w&Io zD4oDcJoZ*c%zm22@b>jY?$prh7c4_4Z@<F~z2!b0UV384>8Db% zc(BAUKNpj@{uoDou&d}M&8o;|U*r!%D-CgdE0I&9EfNaEb=C31%Hc&JI&+nENAc}} zxNDyeJ`h)%AXmOpryD+X8Qb3`>HBS=7)pi-lC;_$&sXmhMv-mf9*#SE8oT<#66}AL z-w)=Rb>-yi+Vu$Wo=%7GrOtf@EzoNTwwX2@eYQ1PI;;D!65Cn(WmHr~aql0YrQznKbcQMf#`bYn{p~RC7V1|Xg9e8vha-4&oH1W; z>52Qvq`KH>SKHMt215?h!=B)(^w-3v0*9|zmZ66#?b%+lhLKTZ>}^dk#DNf(-GFr{ zI1kHrf5g72G|LAuCM@5aXH@2F$eTEn`S$U$mtT^?%+JY<)Ozj~IM8@wf_zB}1|$dI zbS~hz2piXcad{GJ^g-?R#7V(Ndg1yE#_7Y#;3DDC+$UEXp1fizceU-d`rZ^x>|VR> z5L<0>lqK+NgFr-NY<|dqHu@xy1AKcmXFT}RY;b8guD>0+uC@OL#>eI3p&XpO#m<$zoNSDpdH1^p!qwW(GB~%RCS2>^#|WoH zU%`*)t=UU4xM*k+Um?)CN6f^b`m_%Ulv{=bvSZ}uyH}-Z%VJuYM@%D?CZYRZUt-^- z4~cFwwooIb;z^Uo3L^q#(EqM;{!0@je*x(;?AN4tf^f-RIml-S_l;M}RVKdUU(L9n zM{o+~l{XnpYEuVx7b9a{U(`-fwE~aT^TtfU~-xC}jo5A@bYt z*RxMJ$?fh3;XEpAf#=_6%yr(x{84E$nJf3v9~Au*JCwN+u|qw8 zoABz$y+tZ?n`OZx_~T6kvF@Tzo-QDD+VsD3kY3r(rG0+0z`Nz(X+bLA;bzWBzIf)w zVbiqHDHe088@^472(d?c$xqM4=-PmuFmuHF)cT2O`=l+>2^QRE$H8qeJL}ED@;J}=hUPH&0j2CM~k<2i^zT8j>uyv5IU~_UK z!CoI*SPUZwrTl)u(+a@R>&-g=q)XXibIYss6!7P#Cn`%++XE3$ZyVJL&YY&-#BXYZ ze*ezrNz^XSZ>N`tfgY6cU>uJzN#?K;+cke$T9(rLydOC298*jy>(f#?h>d>^K}4cj zvKf&LrF{=XCw*b)P8q2czEV@MZo`pT&ch$@C$ksc)VIs#3Q-N{=K-`dxaOW(9*dPe zh)q}L8C6fcFTf(=f9m4{j>L0oy^t5v7=O02F_-VU6E=n-6P(?OGq9ADNi~~Qahu99 zu#Hmr>ApG7tF-PM%$E0DLA_Wv5m)1HJ*p z$53v(MB_$dH@bHVnf01kw&W#?uYh5_eDlrOB+pcsx|Bt_HvhOgJ}vfKxVWe!e zsq8}KK%qY^%@s-^X|@X5%i(|%F}HZo%N#W1vZ|iEea8FSl!5Q z5(BQr#Ok!CJq^erUI0>D)AFwCi`9MK+Z5VQYM8xn>~FBlGBz z8KcCSP)l!oKCt4Snu5R<@w8-Tad(yX?r%t@GE-5a)0l~@5-sI`N$0fi#(S3jcdw9P z^A_k*EZnlJ&*Uoh+Wov-6$|v1^wrqSs%6j1v2yPxz1%k;`Os-2F*MD#Ie@RKPcEIj zKu`M7+Si_g)!N&ZIqG9M`C_-lubb5$>0T9c9JVD!A0M~S)+)6;O8ce~!hE;eLfqzJ zSnj2;dnp7ORCuzu=GDUB%Cf^Eq#7J`hiUy_zPf#+$@srC#lL5nDJPtsJlV9HA5{?- zUm>CwZf@L94fsYJCk&ZX0t z*jO2R&a;3(dSr#!Ri%t`cD;OZ4^i}ew^^Ya0Nbhwm0xn{r;SYdiSZXi!q`@@-X6EG z{v@6f%vDK^!_{Sme3NOaPZ!P1iqqG-1xnSQpa`BApQMKu!700>vbw1nD+8-Qs75XL z=Ik8g@Kr9YwRpj}_jA>~CpZJ4Ny{zVuI$@KM_MS%=1=d99*5h~`=7Cw^xCsQwz{uT zcQ~EH{vK;rGKDx@kClq)UHX&c8B~yvZEdL!D}+C&a8=@K;RiG4dL=VW=1Ecmo-kDs z@t|BI0M^|AZq4>}MUD)-Qj!p#!OYS;cabnUaoU0>ZpJ8e_l?rt_JtMn6p7c0S%&S{*XGG<^_m;`=Q0E67i>!OACK2+@fWiyY`^ zBcmkt%YgMGrvW=g2{`L_fkawW&mRP*ku&NqH~8}ksgi&QSsw<-6sE22cV=yZ)x74& zd0_KCvj?~f>|SHAQj!F~8G*e7Kt`$a7?5qZvqCT(pBBknz5T<3wS+*+!#=1dG_=R^ z*{cOoO_X32;HH+k?}iveV7&Vd>qhUqL6-__hfy>V61SyJrV)rH*d%bOTc!Fl@d%SzK{eLhj_2iCO6bmz&l=rFZ{f!sdzu2h`56lKC$kqcdlt zPRVhS2z5=dmr<96xvo%;tmjeRtvk5sVpHO~+jbTgXVrA4fKo1VL_yo z&5Fu7Ejm}*Thf5Ay4OL#H#`@8XSpb1G_nKg`X*RE%>LOjy=~^CSnr)67h}uciV@yb zYEO%#>o@&e{9&*mydue*ad@&q8+8EhWi= zmk@b9%W;oInqrKpTTS>zahDy!VZbhJ%#k+?Z@hD#xu~MQ;*B>jsDmk-Rps!#DzRDh z)Jr1Pn)bM<$@0~yk*Q)iW@z;q{oIgXS6n%T%jkEAr#W%Dt7XEtlY+cL7@f#%Si2`< z?0oI!r~2(smc@I&(`rliFoNEjS2J!;8$EB9>Sa5&FIQ@=dp-Mb(4Ukk_xuV-?wbud z`pJFF%Ix`gDX#c5V|-4}^wz zUF`hsJjOJfZh<&HDQtVo`~;!2xs(&%)+Bmfoq6lc;B=@l-~?MEP9sL}{6Xe77SwQpTi4BUY{2|NXmcngBLVG*H3KA>l9q~9 zn0U(w*}Dkhe>dl$@r_nX>W{RT^d|V-34}sIjxx{dX7g^|9!J9L7Wz(UmQK=pKXUt+ zuSVc4?nG2b?CjWtTGG@@o3^f63(x8JjtbX3W|V-ofyT7ohqfWNf;GD%~c<@nLQ}b*R<0{i&u%h*SuEQ?nv^B&+94kTnYd? z|0U3Q;C>G^wbc!Nrn9}?9qyAc*^bYXl+tJvR75vaTO{u4xBf&N-mk0GCw=9EjhsAr zTy`8C6yz+`$EF%%h7WaLiH#sDU!LbKE;}BnWV_Pt&Qi1lGG%=k9EK!kd4oCSl2pfH zJZm0q-qk~nU`#H^Wa*0P1(JGlaWQ&vYE7(zq5zWiyFxr!4#zXVH9EU!npuk;Ul|gkWv3iqj=bRy`(bMkLF@c@qkGdU z+E|i*IOVO#gz#vVH_oAD`$~50P{jxK+I@U442M^N;2fa%S8POn`QbjBM zI5mK+ox5(VzDM6BjN+D}){TWpYo0{z#(+osz#S2F60)b1;vI)@a2R9R)kC|sooL?) zk3LgvbY%rqW6^>eNQNS@OSTWB(m)(ir19ZLNL8c*f=@go&~03=-OJ5&wW4XfCI#!7 ze-E_7X&bUIrRKYjCAp0KG4k>f7Op_P1kwyW@Q++)oPUuV@cBNt-MIT{O{kJN^@ikVCq>}5sQC!Y_QU>U7D8U#Olig~TA0~bsg&X*U5IRik&^I35 zL>8yqnIL6d4u_!cF~OkKczoN8a^>v1pfjiz*9`>}j(@@fj-F5GvZ;EF(+0P5K)!LI zbF}U9fX$aV)c|eKS2}F5J(^O3L683&@@Bco(8JC$Gh$L5+;~4szL)l1ME^Z_pRFDm z#6BqF@^|hvO`;!(>K##E_X_Jo+Sd33$IcEBzK1b2PlDU+Y{EjNjw6Q&!scHMsr4cs zAT>iRg78r-xR|pW+LMs80zXYJU2zLV{N58!Vtsfgnr|#r__k0;9fmCkD%Q! zLrH4yx>7Z~%Sbzf>6lcN*i_uz9??+)H$<0N*_Z7sAyE=xo}OV4iU}|DouF;>uJ-Ps zk8T&Zg0XDh>Trl8(tE^Oq=XYs$TEUAayfYCUN5rqJUUMy)t@-~VAQyjb z>4B(v@sr5sAiNeP+OVB81%#SiwfK)FX4@_%{O+FIKPo`{Xa3POF)-QLT>7oR4dd2`4DkXrLcis=}2wdoAgV7 zZ)FWHkc1iw_7_f`WDcVr@&5v-_{07{dBE6oM@xk+{K9Ker@Ngz z09aS{rN%11GYx+Mdj7$cy+#5?b2GAn=I~wQ=vZNA( zh6{b+M$5w}+RjOzQJZSJI3l@+I=|p|{PAI@TZ}l(xc{B*LAgb^=~rY9_#TC(zL4sJ z=G?rpqOgr<2_^~K@Uxen{OKtD;S~PcTmQ{d0?EV)9l8p;Muz!!Dn){wczq%Kp^ME5 z{5)pPUCRA`K2)cR`Qi_>fJsexti#HC9220_qmlLBX#1WgxU>(&nD)f|-4V8*?+9AEqT~+v`YZJ2 z54ZdD?fN8}hDf6)8n9qice^8M#(4L(MT#M#M>$0?-h%()xBevo;-9{Nsw)sl|N@L zg?VmV)ZWP9Fv^EKZhazBLfXTgOIkP^9;3535dERK_)ds`N8P5+++I7bbZG5NmmVTN zs9CA5P;<5T0|vIn{J2&!Z4vEo<#P|aRpf_eX2GL)yZT#`R+tCBTcDQr&bqQD@|6Y} z+xa92cp>Fxd5ZScWRHkcO6?OL7w4HsWV!l6ru}_vN2A=_6EV8_Ef(K@4R~_eb^~0 zs`UFyz0SX-L5L!qhMs4m@B^U#gZ*Ja*5jY-LwxWL~@ z5wln-#GGtZlM7}g#|U0VYd4i%%Y&E7PF15KD?<=ZrDkliggX86^@(qwatl^%uI`_w!DdsR9{!fS#UrCp2jfXSv)*SQh0Fwra4g*?UdYzqHCnwT%ZI%oZk>r}& z!kSXPC&aEy_}4<}&wou$Iep@UEiL-t>N43ZX>Fa!!TX~Kh_~gl!7Ii?7@sysD4zK5 z%9hWvr;Z+3mqT8kZk@w%>rCjX-)FOTx1a5-*QU^Vg#|DrND@vI@#lathrJ8AJQXh{c`(LHLj&?mqlIa(fQQ@Px9X2KaS12K#Ky$`C4>Jwy?+Vu z*&EkrwM~tI@#X*dck3N$h5XyoQaCd$$@4Li;BR~nP!{C(fep@D9rED6$}jxK|GNu4 ztypmV{;v|T|FlTm;o##8MWdO2Q-gf|-@*Uta{WKC@^_o49De+;9U9Sc{QXX30%OIq z^jsy&-?RJaJNRGf zhyPz!KAG!mXk4XE)K}D>?m{;3?oF6v)?WSTocy)K@+V?{;V?19q`dt%kB>NT&<8eV z?Ec>Av2*|*C!g@w{+nn2e+U29+XVia{J$&zC%ySEN z05x4h%_{vj#kj5-__&TcU&!CHVf-Hfqe11;&tD<*e?ks`w+kx%xZ-<7|HFv?u)hCy z@Peao{J3ord}jmD+$&~mmin_u)~tQoR0UDb{6H&i1^iNapSsNWpn(O`0j^8N7H#Za zT7Pm}{j=!fL?*TmKVN)VU9tz^cf9vm0b*Rf+0H%ciTPv^Iy2OrBEPybYR^~wUdT>4 z$Fwh#?D?O@{Duq1?U1JhVPJUh0C-~0r8>^MV7UrFqFqvC*b-iTXTMJM2c@0jE zk8Il`IiJ&%cFU0sKa^N~2FojrX7ZTwe?HDotN#?om6QAPD55>$g^Bf&(A9tD0>A)= zk(a^(;hC2J$L?(y0^J|{Yw1kzTO}u$}M6%V(Cw;vQp9Im^>*`TZ(ttxy&Ch1!LHy*(C3@Pd<4+RqWg)^Ntyhd3WI^Q~zm*7e=|UxD&u@xh z%*N|q-%)(bEgP|(NScc=ow#D+@g%`}t#Z}x8g18lu%5$JiBU|Y5U z(u*97(RIiBFs#F9>>ab3V=I!J5_RozA@sD+2z1RS#4n>cV&48>XVvx%TQoltop!zS zcE6Ue&#nV@_{FcQUS;Z?raXG3d*jyzOJRE0_K1h#Z3wWw=iGy0loJ=bQv%qPvvVJ; zjyZRgo*dMl;Ot^VwP72olWA(}s<-;IpTF_4_~aUmKZ){6%r9)F7j~Gsn}2~Mo=P|) zNM|&^FBOC^FkpqA1he>7phRchE4+)ObKjebp`{_D36Y&R*i+TKgsk{Us(!x1BAD4L z({*L2hruF9mH3`^b0EoOQWNKy5Rs8XTvrkv7fs#Cmi)=F`6_}VuIr|Q^~9{i`i)CC zu)v(d-;;dzvp#t(W$kRVu*B4q^^%2(&C~VKwON2B&Qb3}Kov|TXcgE`vZtpB%hy1D z1xgH)sGwQ5zm#KAkA_nBKY4E!CN+5Z25$HWKWR^E;*r9BttHR6+HJ7he)6OI&o~Rj z#>nBQeSK6-*+()8i4}hPPFlf%lTeAZ_3IyJ1@ma(`&)%Pk~cYt>Mla?8qron@gcmj|X*7=(BHaqEQdfvxv+5UnJo zy{AaW4fkS{Fif1^5kKxe>WVgw!6&d8F?r5@n6NPQ-TT7s)>aLD&ha3irfcqvcOwbA z2lIlX1SZj0k`hL;vTuY~+w_fkeH*JEA`&-0@!~fE$^7p=ZhdMZo`@U)czw-7f{k>L z8W6Iq!dKfbr2ZUyOOn+7LfWmc=bqo&VFtGbe_krTD~kRtffisQ2@F(ET^$q<%bV>n z7a0qrcc%hix9lDyj{D$Hwb}ee)r2A&P&M4@iET5nIoz`>=m;K4M zY`CUq%SOXk^ibn-P>9Gx zh1F`0f1GBTB7|ED_U`(tRw1RxHTmF2=>SvbtNLnJy*fzkC^-c7zr@h0Z2!?h2Z zPiK7(Rxv@NA@S!VgN9?K4uC54eERy{+K#ml!z2%Pet2-#?yHqtP{|N zdaPOaNk2cVFbO){>G9YwX}#J~xkqm<>F$tvB^XSk|YiaKf>`b!I@rUE^dx<8(4yZcoYw6eV;{B!l= zP+kCuKv0d|&A>;u?&t&={Wp$YWg}|zG{cwf^MSrc#?zg! zC+tZ+MYa{wuS|OOy@ftkox{H4s~aN2<_l+cIzD-X(>CJ}S4!K~Zgm)t5#3EGxgM`& zm7srLl4rID={f@>6drLPelM-{n&ui56aboS09+wDPl72Ip?{HKc*T20%dADY6V%n#zjwZJw#ZO=+~ax1HeSklgs;VkYi^_(*|ZS?MMXIGy&7nK$P9Ow)tg-^+^krBc=KGmVOnjHegt6r-ztAi|WqT8bxGkPK~}LWO$bj&q16*j*(!@JgjlfK>>Q7}%kZhtjTFCWqRv!w{yN#s z`?lA^;9o++Ije#szq~V`hktx_#9c~}(IW#=&K98g95*){R_Lp}LKhyt8dO#w*ASxm z4<}pdlBFxiPlm$sj49IRG#=#wn-_`-f zm(+A>Y}-5G^Bswwi=(OySUqrY=gyK4I!3s|IH$Gn9JI)#RE;dsfSm9ys({(39L6?v z$&J7e78z+x1Frl>VYp<|pR2FE=daArkhd7Wg|VvlTJP&jUfl}5cRPqU`ffF_pu8KA z&G9wP><<$yZz#U!;3RF8(EjNUSpK706HyWD>N_=@5M2U)AzsEPYj0>0_p_qLjgEc< zFdW4*7A!^WJuA3oivqJx^|cp%ZIwiwwA>e1v7UGuQdZ;ay3I$C<*BMKqv@iGqOWwO zu{O}88hfTc7uR2(@Ww)zxWZ{yvU8A2dGf|pF83v|FL&CT3})nYZN@piXN+}q&~(D? z2&V@*AOa(LFL5{p+|F_@uBnu8S(wVB-Q48ex&5e;)D}60ExOxH@rYpIaa(_uR&A-t za+YKf&5|i|{oDwUTO%$>%}c;i(k?k)YHVi2JhA_9JVMdVg=FZHxa($}Au~pkZ*M`g zd-@C$RjY;gk7RjrfuN!oeZwEr&u@snPIWctYJEER2>!^LDHL7!QTo1F9Z{Es!mS=b zm2{(>w;z)OF3Os^t&Wsh+4fg_|25Fsf7xG`JCUsD8_64wb_E6z+cgy*(7k^%%QODiUF|qe#!&0o=eZ*< z3p?*}SH6q#fLf>M}fV-Qz`*hI)&-ts9>nv$B}EJ?vrra7-P4MV?-B0y>_)rtP(6j zHQ4qhqC60k2SGoz>CbWCZ4h5yi@r#A?+HggpC+ZNaaw>8{9uP?B!mjZ)=%WD3JavT zXCkxplGY{eZQSGf(LK8Y-e^y30}T9 z|M3DHf9~5$-(PSfUz>knAVUyKP(`E)Yc7Z_el1p*nR|`v<2=q+KK3B#{CGI_#McAZh2sJ&*1o0T$43XFE5pUy zSOa)EmQl*fCEae?`P{|3XMX$dKazC`>0Ln6f$n&c?E1t3`f}(@sr_VK*)=rOdhU=6#$mbUVzOJ$LnkBCXM4yA8SKnc3$`pk;!ckOW5*1nu%Ag{GV1 ze2)v#8mD9|}PjQh&iHwoVaIO0T6uogG7TbjN#VLN4E=z>sYmH?pE}(AeFW zmY#F#4YZ@Y+jrX{5%?l#deiC(!TPm#h1!{OrJEeUG^)y{hbU^!igVTDsxs z7JTFMbBhyR@~hd^sIfT(Mw!>mB<5#=%i&@2v>ky zEm}KN+_s2}4Bv_i(c^}JI zYav9ZOancH^cPoBF!AX>GWHw1;5v@36dpIV9Vv0Fhe0Ha>Wf`MyplK=DMh5rq`Y@r zXc$~pr)5nWCbgil z+?;J&b5A#|{4C6E{%pxxTIsJ22l$(hKM_+Rw>G_yWjOqJ4-+MYe4+CtZJV}s|D7ix zH10t~c1aNnQNNo5bB&HG5}KsPGdgAT+$2La?kU-o+plYufp=tk>Q*1zPJr0r$UB=% zrQKGB5(989VYUvp@*AV|Og!0Uv=Hj`L@F5W^WC+d`8(_zdS|oR&l9VJaZ@9NtR6)< zlM};SFC}uTYJN@ms>}Ayb&@cK=zJ%C|K75Af5~8_`CB53n4H;~!TG@#sw+(%OZmozb*5sk1B9=i{KM>rb zA!;u!gYq_bs*N*zp-&|4FiLV8u>wwf(wEgMQe^ROmMLF9^2?T!ubS^VPtl1O{K`mv z&alEEC1*4FN}_Gzno%Q`?xY&>;sF6_%eOP#Dm-k$!nco#F#fkBTe9GqV_ztXA>Jc< zi3&O*SG-E&wtV#2`FOK~&saHU-58zm+Y{)ZY&~U>!Qf5wRLu~a>Us2{6l1CSKQ^&K zao@Il-27BD8rt21XU^9z$BWpnafN4E6~wkL_Wkt@2f1=omfa1Yd7+GHrMcBbDY`2; zxpwKU!Z;HBfJwd9_qZv?O_I*y%3&b}_2MMKC|Y#kgFB*ni)MuUq^U0jKM5LpOCK!} zV@Nw_2DvRsMS{*j>y3&-A%X%!)GL;Xh`|&c(a-DLV>OR)S} z^B7ZKPu*Ou`n=6!FTczs#dOz(w85}JsV}57*2j0b$Q^pHB#`<|*?tlQLQM8Ta@_pB z((}?{t13Ix3p6edKfb#$Q|w#kdYCz76hPn-rXI`Bn)mMIhOyi5ca#R&X8Up9R~jaH z!Kq^SD)VvueP~;3J8U2liq)qLR_rv`jXUt#Rm#@$(<9?;ZLCQ?Hp4gqNtQ6f9otmEawFmO7KQ zD8&Mal_k)dP19YGCP`8k#!f%olD&gKPu+Gu@pI1uU|Cehm2;D>@gc}#HHZWFwr_WS zb+LSY*PUPY0p^xve)*7W+@?JO19q>z1R3BQ)B!a#5Cr`TR~80UcRJ1ycL`SLx@I$E zN4|89Djcve&x0YU21${=`-^~<8051*K-t+xF0hWC9H`{jq7crL$#s1_z+1cZNbiAY zwpHF1Q0vuU)`FsXRxVK?y2=?1zg4-XMGGiHR5YJdy^Kv(mlo^ zvcxFBnLK^NV%K6H!Q#8y5cQO@Eb}Ucw3j9`XAhfdW09!zDL_swj)PwthbE`69|bU$ zUXgf0dc&>w>4dERyKxU1D);5^pC_ca;_{Cvc}YID38K5w%tewse!j6Q!~gvLZhU{% zdbm?GY~S|?(S28drz?3An;jj#`U7W_&py6G+C{SuQ{2-th0mD_kmVGFG{q9v z%F{emPm&%V$H$8y-81$Tg_qa~Cw%*GX$^Pxg#4}&tr|waKdyR(v9^3D`}Bt>pJJHfh5v5ToL;!h`=^R4$!D`|jc=kUFYzT#8opm~*MRk2y0Gh# zcAr=6B9xO5H_}%R z#TRdu!)ysL&}H3}%E5GSG?8T9TIBbXOL>tpIB`)jDKwitJ7NMgu!PXzk|;Bgg^!z1oZ|E4Hkxxj))~FWI>@A3sKRR%^Q43DT4X| zXr4lZuc2YmS{?t8b=ohT4J>WvdCG75m#w&k&=UOMn@1s?T5!FB z>y4+z;z+-1&r3l}6F&3hgv44!Q_w7Za+-yR(IxqMthSC~S2EEthcezGoR%91Qt7ri zDWmswoXt4;(&oxewT8;GE`C?UVTrV9Euutc&tH3S=D+>u|9qxlZyTL3D5s9z1X`pe zC+8|AUcnoHaa9JM@nV_v-w*=N-=g9KGaiUJ2YulhH~_$6^&`w8H0vBD{zLAg@7Blr zS(VZpds{g&Gc|M#l|-DD1#;SCL@T90&0E$2V0_GGgOKb>#nlqcfQN_9I+;hiGhx;1 zT>4p$K}f>!%jbY7#**lAb7#MkBfQ&>J1w7A(*ZCw8g!dfUpw1C(bsC$XurHHz?pD{ z^q}9xwC?2iV6C!GRo`=;fJ1vvmcXEYHV+c(Y>WBijsR-ajrVr{e&>^A7$SK_0vUAZhF{90 zr{^ywicC$7nX(%;e0uOB9m=g+j29xSuLBG3m}&3>6%TPv$$R;L@P1_((9|l0+SP;I zy2Ds<;i0crc%ZZ94%YA~RaBB=*6<>jXP!=u?wW~Ka)wja(v3X(oUfY2PJL0zy7k$) z)q~1t2Dl}`U zlD%b3x~Y?DRGfnc2y)Fs+o6IdWdM4vw&*hDlgcNcDTtW3LHc-LYlY+UPJ(HVyx-vC zC~Xz;1$a9CO*|2SWi8Hy=XZnZBi6g(%zV2s8QdhGcn|;x3q&$mRt3T4yOZA7+O;l2 zyUH)*%#uS#<#k#E5|)2?`mepX%Sm!E(c)5Ke))u#TN7wg?yFMH>zW-Zb+px&2fQcV ziXDsgIp@oa4qtzZf|+ysXk7zY|G&K+bgu=t+jWrv(?RYbZGK_f5h0NT0b{aPC{lf( z!&iNHzc;_XI@8_~Y;oCKJa(sN#Gq5 zFO5%hL=L}NQi}SdE9Npj$>o=*h9frrEYZSiTs2gGa%Ar=ijv!EDp=nLn0ur1(?oD$ z8|!0eON;>_E2rlM%TpJo*7so1l?Y(%^q*U>zNRTes|rFB~Pa#Jd)7%aIx!^$%74VuZnZ6wq)1|Bmq-n%HR zSa9>8^}~(v17YJ1h$x?V67?oCg{hYGsUM?5aCxK@hM5?hW_xhx+<)+ZhM>QfN9R#% zZByN^_KNlFIg9}~{3OfyRzAyl{m>=LIso?Y5)QWNve#JC*| zXp*i!qR}?UR`V27a1=Bh5IPt*!DsAvs6(nFUC(qk=}B})_}-{TLU3L$R+i+@8VO5 z*ycurUML1w^xslPtZ-?5hBaK>9YJ>gMtJN_$Sr7jW(b%*2A=f$}tKoxk;U!t>UM%scJ}f2g2yDrB037SD8X2bOQ(?9V_ zYP)Kyfx`IYCDec3J$c`Ssq^prgrt$M{p`TdYhE5+RG$4oaeQ# z=`)>D8j(d%Ni#nn0HHB~M zK%Db1d2#C2S?v?A+(}=3BF&|~xcjAd8~gY%-Gp9B@*qM-i$A@dA92S_aqhjgv3wa@ z!qJrOD7PeNFdxr0(*^$e~LmbMzfGkiUP>0~sO{8)#8NBh+T zWr6i|QOZ~D`)j8O1*_Hf=hh*8kTGq${r7^M4l=s+IV`UEoY(qX7w8Anp)vY+>k7gE zk)V%WyuGEsuINoyPcpH+95s%1UKK%^;L%im+XH&z*C^{3CCRe1!;O7T9x+{r-U1JRmYd1-Je-kW$4Vw2Sjfn2XUzvjj)R2 z%g68xYZ^_=-nYx@74G#2_3@Kq?6q+%(vat=-a2YY+?HM1sB4m~N-FV^_%UZrJ~q0C z+(rX?IVI&20rW45_vRC-zg#$swtf-GrEPg+138*tfLKR*^JOLpJyv2SMGf3ijn&vY z5c%XN-Qbx5f0T=NSg&$gz3ewBH#sN%aNUm~)6cbQ(eJXQElvtQ);Esxa<>ZC@p!D1 zevs64=`Ru0GyWqNIkKjV1Ua2KNAn&fP1pP6fnSS@XnbLcrWKqXTOFh6OaF(x?~ZCJ zTl*dhhzM8^lx{-=1VnmAQ5lt@(xeLr2%!Y&EeMF9h}Zz>pwbD&kU*%?r6fU+gb=zw zq?gb`;M z$(oq~uXMJCl*PM*5MvBC;o~zXC6uCNnMc(aeBto?Lgv@^R5Qdq1Ux^T3(NhGy_*>= zSJ&JoCr?=9?v+c-91}ZSx8WSEvI6Be@xht<)Z4)GG7OKod)|u(Bm^eTln+fFF|fVi z!{2@Q(3JO8{UP`u>&+VQgwI-DV1ey2Pwsg7{n_CiUh&mxakzaGudJ)XY3^90ZV18T8zq-|y@pWkF>&Z> zcChNkCaAS(3wz`IUvrrDlwpzP-+TV_*Up3LY3g*Fa}7ytN)Ya=2@2B7xs7>7v1hSk zPl7aM?&N?A<{CRDu#)FeuR{ymKR+$6XH#kq(?+;e1e^ZfLp^s>_zb{|)Lm+9&kk`k@pjty|9T1o`yQ7plt(WlowRVn8*5t&xRF zE=$F;4BC=1DA;LoX{u(N_-4<1P)7Y5Fz8U*zIP(dhwoS4q;iVNON&sFrPm26xdTLTW!RPM2CSDE?i+e%ks zL>zOkUEz#tI{hQh@JjGYW~@|-7|*dAr+4n*^LWnlKK;4D@%%a??*9sT>DI|p>?2D@ z`RtBrfq%Ftj@KRxRc78*5Z}qbl+EI{I@{l`b*ttnY)80_(VwR!{-rT~J*f`G&IGIT zF_i#_vhntK_H~R1HP5p)&e)C%R8~;?xIan%)kCrsfP5w(#y&BPk>MUYbwEn0FiHFk*Y5_owt3vWqa?PB!TT=r+!ZY z@)@6!NhGJ3({NqbO8tJd9#hvUTbrh*#p@Ju9M3*NFiDk0~W1N$|dtw(R*puSi$nF#Wy7t3wcDu=a3_rZeYVm;U zIcs$!TK)G4WIl9EULqno`M;FSf2W2gD}Jf<4V=4x{X@onkb9)hW7;t=${}k#Tz@sG z;MVGWVB}W$M>qdQ8~(Ss|93|h?8f-Ew^xSv{H>Ww-zWWTs50G~pAh~xq`nM@&+sGO z9e+b4_~|0?75nwepNa$%bCJjK)m`5$o^_D)Ad{Ocekk_;y1;q~Xpvx#Q*pt6-Q?$~ zpvf?o>9D`PwL^V36PD*!&HG&cdeslV{a7z?W47}dn6Pc-RJ6}u*%V+3 zLfmKn`iZ{;f8YdaZEBW0@}~myPm}VS24lja_xwba{hj@?6x#OF%#^=d&EMbf{WEG6R{we-K2SFX$|KHm)qUYd&-w0E zz*g@18@Jhl{#fAqag8UxZ_jtn`R*A9lHB)y?-~4{$*+-MDH(gK9f|(I4c|Qj45rFo zzxe-$!Tho-_)Wa;@{qE^<=vC-zz76R%V7VGlW-5n$>n#W>fa6YcLVfqgR^`SEL7DM zZt~N=9@!hxUUU(2~|jJn?Ux`P2R$HU>TXl*Y^U*QziL223NNaBIZrZ)n0N zXF=cY-eCJX*1QJTyD6g}H`JfD@cXX)vhy-s8=pTDuJI>h^dBRbZ3!lNIj=_E^skLU z@CmTek8r)N{~MMIaCwJNHo7g7#Qw%yyZ{C%lBIR{Cwlgeo=nDpDW*+IU^)NBTzsMn zG2lak=MR9V|YP>c(BiAH|ahuXgMfjbDHhUkb7gPcGIxx)Rmiis)bC%K9tu=}ba&=oFJv}-exgImyIDEFsIS~5q0f4*Uc{-_ zUN9)S`_tZ)i3#Ei;WXpHHRmCsr2p*L;y$fJ87ZaBUvOT;&j?n6R3uG%$k)yiC+$BT z_J&n}3qe#9g4flqtJK?gbz_#ho()xA;V)KHyH^bMdaA;wcptI<$CCg4pTXP*&!C3@ z?i(VV@IJ-isQwM~0G2c=H&t{+T90=rH&R9Jz(?2JV4H}ZC!9dcR_OO^4ziQNLMf!VNFr+~L02h+5-^w2IZ)VB>svff zp8;_YKsS zr;}H0zGia0ug#PxFYQOx5npTQ-GdRLQcRnUC8CyfIApyotlOYaSQnpU#SDK4#fg`g z>9w1CqMN@=P=J@aR7~!AfVXN!?_MkIJ|{a@#XTN%>+|x zFM+HBT0sdLIo*9m1c803wXZQg52c~w(Q<&jcZ6R6^w5Dp~Hgxgy}me zWtv}6*umqL$}V1`!jk^9pzeBQOi_2j@UG~U{I(S$M&78SdUFvFDcfawc2XR)6W+i( zM2g2Za5Zme=yMxqL=yWeeHRf@d;Cx~g`?ZkgXD-Oj#P28dn>f)?<5xb3n?3I~S zyGYJ4FF_8D$B^4z#t2J5ejINF_rz?N*({HGZ_ex87g*LH$=cOmN?Q*Np_8>?rm6Sy z?KgyS9q=V~x^hciTU;s2YVr=}Xgmmw=)!ZD^8K>Qt5$n_yzs&)%Y7%8pHkWiBZ;BW zr~8;^2-eDw@;Q^z^N`PV(*(;dH3Tu%(Xu#j#0RElyAz$^xaE28DwE2bh_@vVJWvS{ z+a_2oylK%7F*f;ANf`Yb`ACMHA1#R=~f*5I!(wiOhg2%F=? zU<_H#3e0z%MW}J=_iN65?p8b1m|tr_3+~uW zj+P|~=dHAm?fm%?R1aJFUY24&=OkPt+eFVhHK(KqKV3{*;o1&ppA9${EBOmu5gw=d zqWmp!vSx!?7v3j?2qnL>Yfw`>Z7BGln!<=f4a$}-6wg(XWEN z%!w<;UUDf|+QS_w%iqQg_AaY!w@yEHlk^{Yar^GMqv8{Rn_QBm+b_a>P%V#I=C%NC z8&7!S^jM3GfJt7`c2hF@AgzD@;~;M{g$37S&6;`ykJgK1vkB*nd5^_4AKPw*IZ< zYIf?ONm8fVmh3BD& zfd~8_3hj@uEcQ*$>(7wUcFie?%nE_wN{t54c*C*3wBxi+#mJvo>p z;FV^7Bx%^-(bi2PN}~s2YnQ0gN>Xm>qg{rW4s-XYd;2j%D%6*6R3xj%>)bJ@Ku@## z55lg!5{0T1S)PACRqP)|`|^MQ8?;iw&6cV9R*7gA9$H41Kx;(atn3kZ82u{8GIAk* zV!dWr1XtqXUykxACRWo#r@JIxn%XjB5v-UBr@LM_%t9-1AP1`*2)b|LL zukG-+aX|%%!*A0}p4w|?3~LVX$g%3TWICuvG2++6%%KB_3VV%0ta6tbd4Af)O^+i| z3oZ+`!N_lM^`ImmV|%r_Ocb4(<8YexIjhNOG0|X7KrGB{IG$J~$Apy2v`Xt^6hVM+K}5zFi`Tt=T)FT zko~g0;Ga_Nq>A*xmN5<7Uqzy7$k>#;LkC!}$kz?8wjYzqAwsK3i|NFOW@}kW#T%sY zg*KfxGu3*FCN)VeC{itl!2sMwK!;z0kjFJ<@~Hg0)u}&f0jvgG?ci~8q-=yebvoq? zpJi^XujF7oTG`a;XPXtvdTH-NC>U8;9yj|wZkZ=dU#91;7B)_Q7P2<5OJXdo{-%Y~ zPv~!@yhJFo)QRgq@`ou3G#Wkhc)l3FCufHAv3I z=aI^!54w|`n6TaCS_t52!09L*rw%Ebb(&sS4b~Ja)N97Ci$*M)`Z%v=KUjW`uwL10 zc<+F7R<59Cj!JG(Znra9CYwG_#C(0%u>>cN;46)-Aq*jV_>!T7r?xR!hNf$AL_;OR zvLLyJmHA}1sa`=}Ta#VXAiet)oz_bb$rL0W-hNt@qtveLG}dygeoqoFLT)ezww;g2 z1iHO>rc(4gPCf|s7ELu-eLDCSFTJY9<5NOre6S`KlfxLXq}G6#3g_J3TB%XmtnR>V zdm6W2Q88FnN|cpU0<6q|@)(gpx8WVX^lDNck$kiKWrv=RF7pRyg;h~6Sc@7!*Vd4u z{y#*l@k0DLp@{4?aUL0#qPI+^jbbzFHa>OOGaIj>2 zRkQ1#V_xOG+-K4Y(|a5k)2rJZ>k8baoLtRQrA%>-grR68z9?VAollrIDb?F|sdo@9 zOfL0Y3zQtrc#|BUm|mMf#W`aHRIMJ6FD}KlWjwm2p2^h=yZ3&v zQR3O&vmMEy3m*{%Se1jk454>17YCiFeHY)&6YvJmt)UyZa_1K;&3@AsR%(~q6Ka;s zaBKr|=w!RN4Mo8ZS8m7b2200xq{na$Dvhc&8C@of`k! zW-{{m)w?n-HNRY112sq+dM8=2Sw8BnGP!m4G8>=9E)MD2R}J`86FA*>h24Ffdoamf z6zBCbA3|iOAXgGqUL>b_;*p)H%Q%tKyd5<;X%OqNQi`Tkzv+kipP1hpo`pWP=X!Y! z?P8xa!ay4#=G|LZbfBytgi?HR1T{M-^@`&@d{AsdvBYa*Lg;jTn;tHbxJG8r9Dd+A z`sR)K{M=;iIt14MH&1*>qzVXLBOR%zTDsK7ntMZ!YlXI9RA!8HG#L!|va1C-6O?3& zcaI)P)$j>i&?00T&n3_-+E-GQMo?pREhqWitlI}7&N!#cD(wSqxC+DyH{%s;ap-tI z@-8#>$k}tGsUqgCV~_N;A)#tsL4C3&YJU6R6xu?TUHxn{5h1}@s#ZUE6lS?Z%&N14 z#r5;OKQxv5%L@pPitIT4+N!C~-thSa=}7a?dj(Z8hQ`S!%2;cC3sgR?{A?HrI|ccY z!re@yb@L~9lK9~9&q=efOuzbjPyi3~s~tslny@vu_OO}WQe!Fi?f%Mmd(5)^>fqy4 z%K+Q^VoMH%LT%4|HSK@58W@A|{TRv^VGNUG~{KGm=V zGSRD4UgA?e)p|GyGPtUGUTO5rsCs1f*Ot5U3Ms-%+Jsq}ZhJvx&UhVVo@(93Ckm*0 z&adX<-M7DWk4n9*J<0ux-g3V^z7lPZiK9^id)oVgqWx9vM05q5?w5@^;d=9*Z&WPv zX{MOnbk1Q8p|sN)Ie#`}COel!n1rVb&Y-+pgH1oYQ91TxT@f z_E&X*$LjK`Icm?DRTKen8#3uhkRSREy5e;QFu^yUZp) zg)RmLl0zSJP3QE^Te*=ODGgZ^m<%b`)rDXP>c6~HY7Kuja)Y}k&7tB$^G`|1D}_ac z_HR7zxvorhwH&)r8@sc>%oNJ%5C%98r3dl>D!+(Ooo<_70(gG1Z!G^gf3(di0- z&UbWo;z-vk5{oJUp|PUPs2FF?g9yKp$<}gMM;9iwOpZ$>6N70lo4d5GGN_?t8J;q8 z)9^ue+AX#%C+7@|{o^;Z$G!>hn|u0)Juy)V7~^0!b+9XMwcXy*9Kq2g*23n?iefk+ z^(teUrH&jROZ+xf4SjA8DU6qY!l>d@0STjRu2$WA>Mk5+b5CW}sHq7aSTRbx%bY}Y znM3<$yrG8*&ZX5U{XUl$`IF~wwd<$~EvvxoO;??uRf|w4znRWZ`zsZt*@)4FEZn&% z@7rPfVnVfJ&U(ycIl@g6s@BaG`2&7;1|}HD8sbZ4MKh(@9~A?lAO%*kHkriEnr2?x z4;@?NYG)Tgh>lr~Hkgy;H&?b!*!xVg$wDnKo-`se)cnm z^sQwpdg5)KZHV`eoY41KqksHg+8RCcrbZnsL%P_?PH(-5@)O}SPVvDdt5nQ>xO+zm zf-;U)5fRZS?9$b0f3%c{S5VtXZ8;|YYc|w=NK&M6nz%z#(0^=rrnk(Z8vhQacFBi2&={*eN_`1UA$e&D`{hGV}ZXARz3Cfe~N_WODEZLJqF z`;+IMF!c(VL#x}*+r1NrAo)$5idM7MZx=`BPO7-g=A`T!74SL5snBuS%rIaYA*uAW zE&*N09Pd`JJc4wo9Q3gK*3ZFvbTkO>;EDK3^~bw<1)rdA<`dK~cv991?x{1x!kj={r-XxCp6hC>Fnch>;3BvL< zYfd<}ezo=FJ^Tj4_yQb?V@f4yX0@2_C+q8rMDWXfSQ+X~?c-R}xhAJcq45xlFa=YO z1*fm9xjP4GH`)uT1-b4ZjcY*~{P8aXuFM3@sHpgBCUP!LD6gyr?xwBw(d?H4!{^B& z-ubuc=U{hG_g=(bs5CL}8g+BiJDQEU6O5Kgw1=hkIX0CRw=T{kDCEjK+%7g;bjOqh`slY~ItYHX z)VUZY7Md4cP}1MptP^o`2P8fEQknF&TUIm3NqtVY#m%Pl2imMiz1gQyTHagZz>dfg zcx+@`@85FB-4?sto-I7x4^zScv%iU^=b2NG?9Y~_pR(uatir}Tmy3y&zIGcaDWo^c zJxx;mUE#cOfzW~}!+QnueL*fu2pipKV#7xjj|ueST80GA0(-MI<$LRUke>MSO4+Go zY`yEvZk{Ke5{C~ZP4RBIYxbe~&icyk+dj`j@n|1Nb8?!Gc zRjYQrAW*qfD||3B$VR+xHSf$f@*M1dRMp%&6R?6CC+(kw{$z_aL-59jT3=Z$sTwH~ zIU-jo8<~1B*^1yRehQZfPC7GB3RI{W*MYRCY~*sj!%&mCoFD$3X@bc_@V<5# zc|t*gvC6$W$EImSr)Z6rQuDMSWgg8c?-JLtK7U!N9YQ<3cKsS(`;~r6=VY2WWHyD#6M4)imfRrO6*1Z}{am(*pQ4Y~@Q_*R^6ZN&(^;eaZ6 zE=Za*llG)_OU$l@^Q&=}(|jcE8VmD+{RK@l#EY`cXK6Lqt_4dd(66Y8sq^hWlIZ%f zZw?)2BRfCc;4UD(keUl1vs$MgUf{@_ugo+_uSH|8BU)Yg50z@mwg<$f!mRLf^UQK* zE^Dto5;48Y?euQOwOk4~<&kW;93F%I?tKQR2*=!~X_TcsFyP92vMdj($TjO#w{o-Ja|8vtq7gZIJMAA4a;yG5J+^%9w5oq`*tw5xdHiF|I)$=9$`iUuwuS0W?1*J8(-8%>3jQA)P66iHh& z)rZcSkrMdaipX|f3(KG2J#}AO!GavyQ;w!WBODu9ZcD9S3gl;#=IAsJ^4~ya)K3Me zt=(%EuPLy@zr&Ifo>WC&9Om<%fSn`Vt#452ExS3Qy1mxbKv`^$lr+i&3EWwF2qcnM zFt$tj&c&&_Qx=31=#%oaXgZIr?#MsW$`Ele^r0u+U*sje=B`NpXMb7#`20fm|^ zyOnh#$u1>wn2~j6uo@t=C;NM@Iwgu>WX;qTus0f?)^H{SQUk5IqQW(swRY|8l&MO5 zwyB0&=_4X!46j!`j($;LjNIq zUrIo&iS|DCfS(wXKbrEAUUD-rJ3RXP^kvuVd@Yh&6WAR8qYAeFT?GGIE&6l0`rp#q z|4iBcyE^!PQ+oS9P(249It=RIj6%qb!pA!fFkF+BU*(oTWnfG-6PjbsqOJsO^&X(U zYbp>Pcpu-Gh>B2#HCpb=xBeW$O?6@W>!Q!sAJkhI$&tPJj_!W^JPrhp6(hXY;;xKo zll$ZqYPrgEDXZ60<-*u5i;~z>owI27@rVB!}7GE<_CB|(cRJjeCg2s{Sd3^3I_nk4;A}_6G0l|{^a z!f8xD%R()lbGC%FlJ$RdTM6qlOk za@W07KCN{No~3MssqroCl?>{k1W>qT+|*n*nB55kO$p9-E2{5lS8YlbE2y<}RC3TNLKnK6?=s{@Yv5pc4 zJ?d29^d51Bnp=Sj07@h=>f#dTt z07e%{M?3~#%rlBgrDip^gVzBFzyY+WZ0)*TqO+ZmnOhiX8$e?e_57va&byEO3(>m{?z#m8?T{orC3r_7~9h%VXq#BP3G0If5 z!5TzSo}fihAPKl$H#t>T;{pF1;)~xJQ!?ATss$Ghp-ADBy8!ekpReO?a<}oMDYSaz ziKyYD4|4q;dda)Va1-PQa6pw5mN3x^FtO>_^0=ipU)IS9-O2!#T&~S**V)->sta|C zI)|Ysd%Mt&=rQc;RGUk5DbHc$I^W=|c7OEO3V?YtwOKw%*}JyOQu@GGfGmTXx+VST z?sQMF%b-J7CNb?o=%OOqPwO4s7`V-#{I2Cmv~H^zk!uuL5~=dZm0A1ZwL=hFHH+tr# zR`NFys;=wAJiO1=S<}uBp|q`NXYJwg!B}d*2Qf9zi%m-J!8if%vo^0Dt3BQ>?qsZI z@QZ6V@(v~$&7BXSJS}yLVFl+~9q5p~o|9i%Xl55E`y?vw3Z#N*sw$YU2$+7~quM8o zBJ4o`Pa71-8l>(DYgX}Ff*xONc+Boj4N>ed85_qbka<@z6RjJB+MJjfBl?M6Q+09P zf48&WS>fPAz|Gz7sRO!^h=h4Rl}VM%xF4Osf|Y@6k!LmaVMebktC3!XeFigzx1iP8 zGu$z1uG9@EWTT7h;EDzyL-j(JpaVsC`NFnaGgJA9XLQu@Sx)LS0;e@>r_3)gOmOka zLVbOvR1UeRH2%iMEZ)ncpBa?Y!_@|#{ZKWlYlBn8~&*wEi zRJ#HY=*MXsc?IRU%K*azoJ+R`n0bhd>v6sL#)zbPFtsVDFX(F@+W;1+Knb1E0gkK& z$AS|=Xm*$c^tFBLr?rYCZJI7IQupxtq_G}7cWlbN24L$t_m#PIqXxl=+i3vGlea?I z-de4Rnd-2o2qwhW0QBUFApJ=T&aNz7Z#EI0pwE|&7?-;APlG;}0uF}i*5kSW=!^t_ zrKf=&F51N=e{69IfRxB7t&hIyw+9V*4^WPDyHWetK6Rh~3`dM;X`zh^fc{3+F^iTV z2khJ549~7Y75vRZuMJH3cCO^*e|RF}I?$IKx3LWR?-?UeV&|)0LB}bmCdwKpMfi!w z0`x|2-G`*CRG1_93WB`+f0MJDrde1ZT9+ywMxH=B7>h9#hQ6@;67L7UKI!ZZJ zrB?2rK`c@@ZM%7-d;G|v`M)J~)c1m;A>oQbyh){-OB~d|8Mr8c+jXJa6h9f7)o+2` zO=d2U!t8ccR#V{dURh}-jo|b2Q_L%_uHJr?YOh}r!-+KR9$!*MEt1}LwQ12 z-q3BSKsn-F_AW&dGe>CDK)$n*6U;O$GkR5&Hhl^3n`pY z?fS^tA34m)g6+=gbzS=QIg@-vYIS*_Lm{UMSdW6Yzx)^mAoxBwBDH_nOJ3fnr|P{g z#I(aAUAV&haR zU!KFGfN*kWT*qm7T&A3(UE&=m3}EfPKTE5^n?TU#v@jC1nba3{DQp6&eF@SIBX#XT zTa;9B78cpC3P7NeMSXEiGw-2CS=3R8eg>m0*GS@xB@@o6pKD5IH zIvmnaAixzsyZZwLY`&JP+r3@WNT3Y; Lq3*-{`vJ0Q|JNLm9lKXW zPs#7+*IW&r4R-=SgyYOuy?#^0p#E3fY3by(vaiqF4fcnK9Zk~gCv!hfqr9|H=J(zu zR5uqBkRrD7&(lf&<$I=80~myGKM@gmSH-D)iB+_{F{Y@080IUXlvFSNyVn!NEZ39y zQfi3Y+ZKU*7BMeUyH~%o&Txw*&4tiBqQD~K$K8RZ%osle=*Ybt%uhIuh9_P#5jC^) zBHGRX>*Fqg$nO? zZ!JSu7kOMOB^S910Z<|dfMA0yIr#aR7_-?NgB&YzU~?C; zoEZxcl?0SldM4baJevuCTg3r8Q^-y{N1%qQ8Ts4?022~ znFS&4{h}Ze@JKJiheqf6q!CBxaNgv?a*hM{3YC&}FAB~I0&&E_htUPA!9*qjY2E)Q z7~tT%=?7SY3YK*s1eXZ3uRzJFoYJ^?$J?IFg8C)e#SPPM(p0&pfI;}mzHl+ zm#5-Ziaa@zM0dLq3X%f>Eaj|mlw&!+7%}b1FE@8dh2UBN$C53(kWRkWQOs?lFlL#s z`B$g4MIOcn{`oPkG{)W5c7|0jC)R+2;g`}_z!5%;VrD(_ zeWMb})WWa7moW1Uq}onth?EjGMnP~aHzSs5JPk|iCLab)zxi0IUYz6H9mEDpexDAa zQ$|U}T$BI+YN;g!ZnD}|CHQP{FVQA$GR)X5CT(`GCa6{KOS?Wps$(;+`%?$8r91ly zY~VJ+zjm?c#R!9fT9wTV&|e5`p*D0+MOTY=6FQ^|@DUC2X>2Fw=6e^J(b>AD@e=!G z!9cUj%$tz5ytdkh0sT=6hF6C`*C%_|=@=#DX(q>K09llo!fG!wb~(^{z}Frd{T^>M z=#Z7%ckHE3vZ8TYte9BYfY1B`fY#za`jTNw7C@Beu~Zb8i*?=Ky;X4mk_td~hYj*W zYS9H6kcM#6qK!I$h%>hl`{>6`E&8{$t!Mz9m2q)Yo4udu8^wOXH?nY`gaP6d>j@nQ zX!6Hz^fx1_3&)of@tp7?$FUV>%PL#~cD=lJE3&u1#odqBe4S!D9_Tt_sblF?0Z@Q3 zr?q9+DFb! zzXpNeXj*N1JsOiJCvj2(2qBMC(S@<{@%W34`bW~aDgjSU9`&}=njU;AU#5dYD>r9! z10c}m@^#AZf>_rF=JL6cfZ$w)?AA*~ z44_|qgpU!>lk&JpS*w#j3eSQWMd-d>kA5v$Hj!W}VcLWoZ9VDucqX3&%IQ+XpxMmrga$lP>V}SMQeS>v(V`b zWbWN*kSC6i0(7S5+(3WHl|{f70Ac<@%Zw)jCZ}gPn?B`+MgURQf}zT>D^nYBA(YW} zwy%S8eK#589!jJ5RmxjmaGOB40I>)WaO1^wcJ1$hK$_O!r2~#%o1)svgJilutu99b zkgIF!x+%&;1B*4_ri(r@oMHBrN2Rclz|m^eNMCQ_ahP6+t)ZbD`lmeLKu;%k0bg{q z?k47g!7t@L3nNM8imA6|O!jQhk!%-LSOw)*MY->q=qj1#tk9jXunv>OkCx)c`h;s` zz8at`#-{4Ud@RQR6hEN=XvW;M1Ks+_3xd7f0HMC{@vWJ5dE5j?ZPUNGrQfeD+uywW zZvYZYHW}DSRM~QCw@bA39`f*^=_oP|#U{~bGUIPQ2YoBdv}y`GQu<>VG!1-;~I~8PA58z*pYLm z5!Dg~Q-JxcKWLja`!)N9!juHoMkDM2@Ldy0dKtL}A}Vp5EVsL6BzD0$3cUceK*jP< zC;;YiXXsaHzlBlNz*w{f%g(evswr%U`8~?_7Kt%%H_|=E~ul-r8kN zGKC77_y;>UPM+3^ure|y1+>5X|q(3k?BVJW!jI^u*1Lf z88mGI5hW-pn;J4f?) z(n-b>%+?Vw09|__p8cY-h7+B?@w|=|tn;c6ohQ1dMId06OgqB07le(O&YFY{a)zC2yA;S!ny6loBUmXJE>{ z;mx;^;^&i2yeXA`_D}%^4cNF4bPl!eSzgUo3lG2ZlB!&HaqG4%F9p2-Kinx&Uw6XX z=Xc>sdwd>UCetBEL0DdjMp*?@X7HKOcH9$XZ^{*f=jsy!6HIQuGxb z$J<8JMWx3t*)Uw@$=}*m6^qjI~&iz(Lcv}^brSTm!pD`tSUTz-vUeR}{)&uRLP z$J?77mJB(y+;(trbNn)CkqCfQr$NTVHD@koTT5gGHtZv{sLo2tG0+%)66+Kh%b>GYW@D?Rm?gGt9Xm#gZVB1%^4AF(15 zWFX}c_a>Y4PWB-{PMOQ0>#<^U-9z`9i0g+-;-Wr6>Ln^E#^Mj%J6H5-c=uiJex}y~ zv^005ti2K{RV@hCmven|BPT0mvRa7x%W|ibWKe=1{vq%Hj$29HeKy2fL=XL3&||T; z2x5@hq1sUAa6T_+YAOh8=;W8Nj(T;zr%z@C{>AjM)2FY{0pG+q>uzFV)8jP#%FusU zt5o;=aFTPZhiaW6a!W7AX7r-GM8VB2&S{FADZyvzJy{RZ;&f8mzxL7SaKUs9&y=d*nV390F@BNjz~TH^M* zD^b&Fp=|d*=kS|8T)wk0(GSI7y9m$~w-25YZeF%apvy^ErN_zn0078%%4T#D=?05)byk zQ5%lKx7T@ha1C?OljHrH2_QR1-$uYbww{8^6ua`FNvZ&uVU7kewm=03qQSmC!Lqh>yf8)`OZF*+FZT{_u6`#|d7d0StUC?s%)oHYXR;y3b z=(l&#UgY1HV6nx=?;XM-jIBxvnIazi_@nN5?AUN$dnX5$AUn{@xulr)W%E-Q6uU## zsk4J~4ps?w{ves*_NLoHxs5w$Ln3dXdGYnQ(`6B`MI9r;?w$FQsJN65tztmTmObvYsV9s5XS5g)M$zRXai2 z%`^F6ExYmU-Kr$L3T~lLZW+givpUSKCjy0ZQ+PK5tC`6jv5;uUxqG5U1stTwO(~^D2}V zOUv!1PbnvCE}WorW`;XUSvN49^uHkDHTpuc*VsO$I@*Vt3%2(sm7f`yOKFPi&!H*7Q0&9_nn84dVVOPp5Z0W^5C#-k z0jj)P993YoPqe_Cz>F_InY6*Yb4XLP4TH||@vW=k!<8fA>)8+8=U716cI2%$pv|y< z4{e@!@ClHkH&>h)y!5&7{b`|%QjKsn@e_&J&QH%Q0REECd*8mluiFgr88dG!4;CK$ z@c7)ySwbD!oA*T9LFa=y z1lPF`p_DNMROhbL*AHNWhXgXovnP^^ed^GrUd+r%HjE=ulu)e$5oiDf{2}qk-Qyp3 zg!*1_+&o857rhwhyM7$ocggHZ(zulFU2F_gC$+cKb?$9jjxJ87&etvZT;@`u;@3+- z?CDzo_nDaNJrECVeO3EFpYodV!M>a+6)RP~;iS+TiVvI^?_Nx654N|eQy3iX_~-+5 zDv)`m-Jtw=?$TB?$fURo3MOSCUOJc_Jh0=(pWw+~(>j^RUuFyB+-=_5*KT+k+AMcY z%3E-yy5F2BH`LFnCItnC+M(`6Zxy4sVcY34o5da&^3(nA`G6adtGwf(HSgX};`4xJ zmk5FtoJbH>@xqVa_j^-M=5S9+}q-#;acE3ws*scYJ3|uzH2p z%yg`&OY!G-n!jbwL0Z3527)i!_(mrU&Wm}bve3Z3(kfc0|48qaz|Y;T-`;XOxRL`a z<8tEIPVnK-_+@w#YJAFly3Y|MUIhT~Bmh`9Ew}}bQ1o)3X${qaj1f}9+9KP$K zZprYffJwc8rcof1qQ>8CHPi7MV-G1K+(;*lsw)nxUQq_u;dkm4OLg5ail}s#`dd`O zZFCRw6WP}e?t!71b_@)&?$!26xF--iiq%t2J5Qiiw$3Xv=rVE&&9o4*47ufES?AlD zU6TIyhFV?bB)tJLnBJbcK%MK5qlr<0osJSo6D!93A6|*g`f26R7y(lh;2nVUbh!>77}cV5{jlf*ScpW5E#``v;dsy3@uWi6o<7dmz+1w#$~`ZD^cZ*P zrXUmA#s$af8K=0NtthKXawuot_l||eh)m}i+6sL)f*#gVD?rsi!G5q@!{|GX8P)a` zH-TSAC;Bc{ou31aGujSh(;WOKGU7g{T*~MR0(t)uKynBU{mtA3jzsa>wllr3;U}Ho3 zrA{A+lWtR@AC(`TZOK3JkkTem(?_rB=tV9b#)j_~Z~=L<{WF@Lhp{~1pbfoHVdg`d zxLcOCn_DqGe@@rSrxHyzRQK(?)aUmZCyfC80_LWF+$29D!hPdDh?*2{zN&6S&}qjX ze~zhjsaiIi0(Cxci>ls7Y;ZB&dacRxsS5I50=bymOsNR6KuJ zRrHLBYoa#n-IrC*aoXK5h+#Rd?iP~bOS3#}@~&_|9BHXo=Q|T7mA|zlaR__CG1m1w zIlM=x>)w0GqxEp?7ZhtFOn4u@D~HSKxASHUw8F^Qm>nhPNJe}JLRQ(a_T`0RI~Vh82bvSDA%oj zMK}^74BaV>faK7kgoGfWgoNZEA>hym7<5Y40MdeVjHE~_F-Ug{Lx)31|DQQGzVF_3 zzjOa05>%nrC=bGHJVCEWt5*t>T3@!2aBR5op4z1i;%1Yf#5hw8|IgR! z&o@t-^yAA`FPeDC^FIt+%pV>-ZV9SEE~o7&Wq7tqinUAldz4c;aEA(Ls6fjkFzQnd zgP(Y!Y42T5-!H3NOm(w36=js@UFT0`I=!6CpBjJ5LV_GE{zf|S7b{qehReAsh`=ai8eI8U!b^r#_}21nxN%ktjMr?W52z`vG+uEj0G705M@9WF#38A^Ru55N&S z{+A60TT^3iYQeG!$JPJ>!x9JlJ38`6XdVef8l%=Y<6!TLv626Ya_;W0<(|01nElImTwB2Sh}jK)8>s}_Pl6(8MLK7F zk7k4+2N!?HLY$Vn6O?UmB5du}4V*x^ee(H*2^S0bn{!YkCid4jCYZ+)S6{8iR%vxb zF**WaKqVFt*#gz9ALtQ(R`Tca-qVkFp3PAqX~1r3I~H+|mNy+W=UTgacKL@@3X6Ao z1UYumkqnKB&X;Hg$-z9YXxIdbc;zeDq7i4OKf|!6vvl3V8%%Y^-`{><^!gbiVC_?+ zY#4%V;04}YLvdHZ`jI4ZzrW^1!7>(dzZy#(4C|_kg_5@c%6wjqy+dXym^S9pSR!{M z+GE>l)OH|SshAOoWe6R>mE+3uyYN5`hGIAcdsjAr3PS*%3`WidVS3{nP+-&5pGIpl zXSn38_%^zn_n2K+V6o4lT4VV|N9K{__bcfx)1VAn*i&2X0;Ia`xSx)~=Hd>k&-G=M zo030CrGL-Avs@Mg5EFHm(A0sL^|Q%Gf7y<*@L^x_-)~#J`Vzt&e9t3WuZ*6x1(%Fg z&doH#c@ToL=LS!k9(Rqq(EA_8j-($rrnFpGemX?j9xYjBf)eUu|7%V84M&D5RFGBI zBoMRE7W@>5{?f}|0U=mJ{YVOp#T^UgZ05_GB8nIw0{l*(u7GLRR$Rq`(*TxDucZ@h zchU*&3io#U@!^dL*s-ix8x2z&ylDk+P^E*G8_|BE-0N_qnTe$i2^UIU5 zW;%Z|+Qvf4%&_-Qv|H=s1LZICixoIKljq~#yk_i|1E3GrlQJ_iWTPSy&OR3aS6pg7 z-*U)wue+JnxIzr~1{W13P zMpWEGz)puf zj4jH>4!bX!5zu@uJhC6od7&9W>yk*`3=s(ZIStTe*#Y%PLiwW7aN$L@$m9i zf{n)=N~u^VP_uT{BK)@Tsg~@4o-HnaHgzk7_Rjctg(a~9)m1Wu_xQWBO+L~UJ7A$# z4N&Y1hK2Whi8>%cgQ2N>K;q=#tzV#hDwEC5_c`2LJ5d;}n1=nQ8gIC$5 zpXdC1ju`Lpcik|efVa)rh!;*mB4jJDdW9-1M3Cj*lP<**Kv6q0Q>=ctkOhrj=ucG>$Ohbt~V?Mq_m{ai^%$IVl9Af#s zN}^|q8Q{646QDi852|7$NBIJI+zaE-%FCnX%PnYmhU>;?pCs|FQ#*WAva`dgT^OXCOI!+mh)rg!i2S4B3bgYAGlp_vK_bTRQp>-cMB%@_4x>u$B4 z^hNw$u6r|BfRsMINqdj2u#jHdVKqSc3yBe6CDOSAAx#lK7)9H+Kb3u%^nKNH`!m#B z*47Uay}vGhc~%uJzC7pm$*lQ{I*(Sjdvi>_@5R}%fRb-=3y#7U_pM2RhsWSTPkZm9 zM1Te|*C6s6l1aLnk{mg8Z+63+qgczyVm31Ag;;(uxg_@YOKtF@ofkfHuLLzWIRwD{ zrLAngs^WmI+8^lX5O*W-!-sHrCeM{Qadq-6mpKq3WvbNu(0K8W_P^fAq5&-v+2KlS-jS@hEs?gLI+7+S zS*=uX$Fv(3wXypm?GDNX6eEGTtrQ!EOmHvC6W(A zU+4SP!|)r2!-;M<@o>(2niN=N!o;j zg@W+_j_X+FCl0|xXmJL`;h+dZ3JTKQjZ$n)CUa+xK(o4?THtpC%MUpGyF}RPx43JDt zqP=)D<6&k?9h%&w5K>HpKM$4jT%ktQWfXQWxiYXV1xl0|7Bp%w$KdE&g5KtF)a$`` z{W{hWg3$kjbLg>QZ?1QgoCt|zsZjznsFH(@CO!jYqYk~~l2jJ`^5mCjK*R(C+I!MB;91`n{1Wq+pBLw6 zUFA1KQmnrdG;OTyeSNaQ#%>xjI4R;kEDb^Bsz$*SPhzD~M0Z1g$~)XMq)V}0 z#rz_EFl5>E1oMn;bH0N29`q>ujp8u5EFzSZijD39bXIW4sJZgK@Y;6he5SCq8bAA8 zJvh5(Zx|Vh7RI11#FnP&#AMSJOyaSI>QRSwT@ADsAViaP#(G6*r(V5&^#<3~ojG%~ zv39Fu6cqaNnN>ovkompUWapB_yYI9Y7l6n#)DhkMQkw)`6Vno7_km4tk6W8{5BC5?k#a@1JKQ*`!VTLj$?bY^n}Lkl3U zjCj3Md_!!tx<0}*w)Q_9D>W)w7-d_Ilsp~FE94~0^j^(PE|_&m29&sYR?TRWBN(H& z+>St@TCacqyuD7|PS%j>ilB+OSXGnjsdir^3kE!G*9yY;jlT#lVy{^ddxE#x zvS5)Kg~b=pxMa~+-IjED`rmIuZGHZ_+}mRNfZYf#1oc?4C7h&gI?VnBMfb+#Sz(FY zjHLBK<7}^>W0fjBUZI|YLYau8<5FV9!?Y-R8#gKq!K#hFO<5cRRW*sd$Q9;T?5E0jhmraS?g>99VcOY9+8_Lwx+RmWJ#8!7_P=ncLvtoPhA_OzzKGio; zqB(}$=Y0y6L0U9;wMrf&LMYpM1rc$FQ)VI)X7`~ZU)ssnKoO}KE-cK5TF|)5xRn1e zEx-Ed+!x=a(a`)i;73ZnK#HN#M4yw9tH)Whe^tl=lj+gLR#J#D$Gna`I&jsXJ9?fh4&55g77dfi%+8N*~ ztgE}N`Jzq&;TI2ozRX{t-V3qN;u_3+0B;u=*C9y}Jp?wI&l6R!DKHXRm`E+h>uzE- zn3pQA_Q&i=uq79hbw8L+>;uHRsruKNP@f{Sz+IH*_&jk7ROGtsKnwt{+6>t;5>OGtUbUUx2iTI1%n=W4`sDk&HK!vj(uu@`f z)fInL8uSRUrM4~p0o3gC#1nDh;?}8ID%UPEZ3-CZ%cXQ0$PTn-L-@Fjf2V7i#)qG=)TbWc z0cutzPHzj00nI?m%O>thh8i-W`u}|lup!WwTY?*>vUgtjHsZQ&`IxcXoYAY@XDLgl zxgF#C_(#PP;|0Zst+WJOnSXX-;N!1mhZ{#)Yyxt->U$hlFe=5f)e9J^jP=C)$qge{ zlR~Ze5T`knKvO&bcENJ`e&<}AmL}1W^C{eFJ8=e82D@2zMjwEPRX_{VwPgo};4J_) zy_}1iy#%~t|Ig~d*#iACQ}>a_`gP|YJ)$fX>y?$SW$zTiqMaFRa?kSxT*2>l?2hMg z2QX*SB>z+$M8-z1RgwdboAxyaS!>hMX-+j(!OgBC-7BLl#s64Zti8z=hQ!L4dqf8S z*KCl!rTDx>gc1cdR$Aqnc70R3O9#gPvcmnii_WT#Y^Whd^5z_(WgM`=l5|q3`#J(( zd)v~&@b_75A_VBQQo>2ozZyw@WdefZD-8!ZO8>=FU*fir_{@vp);dax$?5w7RoPO+ z7P2?;?ai9pxSmdz zdoH8cRB7A2063B!ELwJ38|(;e&UHE*W72ZtucTB7ec`uVhrTi34EEl+UmT;kD00XT z_~;j=;ff!gNbq#E86bf|h9C;RlV&O=TPCCC#mpqu(0Jq~G%5D@ONzsF-GH4SV*2`v zJ4hfDQTxQ>Z{n2g)3(wH=1UMB=bmOSq4BKG{ROTxLxS@*wTbR`jdHM?aU4rU*Wb6p z0JJB;ybfT4G*Qe3$<8SB@L2w>uYfYMeRrKiU?^yAft9+|3m}b~DXPaF=*2%jE^!Y{r>1v2*?M3vhpr@i-Z%gq8dBToTS{36|f2O?rwkt4N29a}Z3>PlxH2c)745iGa zyqE$q6oXu-CJ$CMw0aQ89RUwaN}ZCE7G&3$og%=b-j!6Jbr6uLn9#uJ5*%yVbmxR2e=2m^1VRy&8AEb7L^!OiPz z2tMSb9p9KTkoDLl!ApCsS8xX~!;VMvXlH=+b|UTrU8XGf#!nX)_oR2NmKb8cCp$L+ zHT;0&BvxSbf*6x#Hq0#RUH$a(jB`O|qIm4+FX6&td_Bp9R}ZVikF$%?0q#k88uIP_;B8AF zE9HBf<_*LhhX5DjTsAb6_&{~Xg5j;Way8d9l7PjysQV&WV*!ni99{zqaGi3= z3+&cLO`3v>J27L`(T_B4@xL`qPNoiohOtDk<1Nx+*V+33)ZG#6u-A-N65`170lF*` ziUWZ8EuD~6I|N{EBgb38)PLu`ac+VsaD4KqQk9I_T~L0`_9nH@{vZ zalP~f-+-}+o!~m<)da~@B6eP;t}v|iSF9O;^<6iRpzU$fXmH!Gfo8O;kL-+W+FSyS z%>-!5*H-Z1Z|qU@Wk9vv#q_G&fi?_`x0w$?0d|ZfcpY)2{I1MVXX*}>py{UP@s^hV zNgSMMx0HM^iCs>FIU2f%e?K>ncx`Km0G)f-)p8|G+M~3m`s;6zvIjgUx381m+>(eE z5KAZOGUehgo0iTL=sZ>kW9E7pORu)S>SPQ~^;FITN?b3Ghx7P%4X@}-2%3GF-g+yP z$<6n!dB(LX7n~-|8%HNSV(QT{E&89qoLuaE{haLNgt~re7X5F4W_k22)YdxK!}gSNEntOJVliW_rY>8|MxPq7Tgr7i|@e?fQtPl z9thQ&jz~&+D`P4h;*iUG^i*$=yOkdO=5ETjWWL<%Dx1Vc;^5J;(wTZL1iDDFyu3*# z%AIJFwm+lzjZ0XKjI<(rN%aTmz;i+UAPnwX)&X>ACrH+ns|5b# zGHdmrMI0P*ko7%WGz&X|UQ_PaihV}baw&AYjtbS}C&Wcc z^PNV)>;a>eqSyd>_g17>%$Ru)OX&Tp@Nh|;GE-Sq6O{$Nd1dfg8W&8zG8SFWcB&O?0;9RQmW(6rY{uk7dyjp4Z(94KVjw3G}Oz0V7J zEw2{oIE+$}-x?LFT}uPtCyLFXot*EkO zjyZx+Xy)WyTOgNJ0RWk#IIUP(_JV7|k0WzPwJ(jUpf^}Af>Q!8@h|EoAN=JZqI{#q zj?isrnC*?!HpAN(GmIQj=c8N=+jjW7>}aF&Dl2}DSsH1r~!X0knL#ctz)#&|3$v>K^VXZrnD-z-^r;%`>&+BLjVT;CInv;Fz6rQ z%r+OoR{*RC3t|8SW2Rr#)3i3sSr)#NhwK1~D> z?_IBQcdS}@*!QGlmL}bVK}GCEO^soRQHoaB!A76W1=8iR1tn|erer&H-LBeZ3yqMCt~ol@lq|uaYz_*HB+q1p_!e~zNBj>g6j2$%dkCIDR5GIG=f=p&JRp)FQwh(m{tLCSPimD20`~{`R)(m?k<5M zEibj#r#;w?%=_pJ)88OJGJ(Bsq%VFiF}?-Hpz7&I#_&F|QNSbnfI)c+;3tBgmsS?< z*4U4^_Y+nYseb_4X?H+%*OND5g*;%QCeQ+{0@5AW|Lb8NL{QMS#M?xn79Z%wkis@YBsEtuEpR-xEsdKHpu5@HsUESAN z@3LI8V_w8*e>T{SHkQffBJ}OnW1o8c`+ccme-@U*t*NKMHyNkrfQZqp4@e@Y#h-nB z?V8qWds^?dVT7H3edp&6F60lsf*cx0u!~(sc`Ls`7nmw7_~)$Mla=R+dXC97RL3c+0S!4L1%S*u_7g92s86tNfL@XQ8|nQ1$3147APd4{&ct;<3AF#!h=)aBBH5Uz zDrjJK?u!7353DO}%o)tlh^lLveo!)($W~Wi-QMvbw;texG&9~ z17|i?WlE+XI2`b=HR`Ss*~ee4lFm*|1z&@j9~rp&qJH8bF^oGLn~u<1S>P1``7{P~s|R4ZEF zdV2CQJM+O!0(624MbDumc*Y$QSXOehP?u{=Gzz*=Ti2t*`RH*VJcG!n+SVM{AS!|R zks8cdJ9^>^_xjhH_;%cimbR9Zj-ug((dvT}-pu68Gm*qU;BQM8;pQiVMGa@AsHi ze(*Zb{`lI29)cbyH7WqJx{?$CCqOUrApYTxG6Y&XY`BKF|HWBuoFq3Q8n91F#n(&f z@zILOx-UX>lw@+|za4AfJEG9$c z(7lE=1xr^oh7A*Ckv$T8MH z3+c-UGS;&_7|~`a>z;kNzQ=-$r>|bTGt;ID@UxiP2ZC~@|A+vcQuT@7 z$A-5Ypldr2l&dl3w73Yia|@v&y$!Tg81Nfr&SIT`SEDfi&Jg$=SLw-ZJ2~A`NlHw> zBB%}>BYVm>ICaOs-&@D-Xq^QCGH@n66FV}%+&pr!xo;&IHzlb|U zt>gd86~lrf$@<7K03$z|yal&4=O6KsS$I|UqC@;Fi%j7xT(IvX^RZN)H2XkF)dc2# zxW&6)%MvzS7bTnSvwwik*pK}(yg=Xg$~PR4m$;+Y#1Sw;<0Xa8gP&KWT^5z(Zl&r8 zj?^Xy1cBFVkkJa(0WT$bokN#Ci8@Fz^b9Cy4*}6f&%*`M0<`l9Op(qG5lKM|e7zUP z{r;06?<`S>n8lFDQ&J8%WRhkpo|G851G;(&gwOock$ibG*YgZ0%OVaF15_!MRK=j7{F zSNAfnpGE+QSZ6ddvxk{hFMDi|)Vwi0&>&UsNy5`NX?tBvFq7pDpc7D)!44Gd2#vbju_J};?(z^+iVUs@~E7!*i zKRqd#E^XW|$mbg~7iNEW25>^Aa2m@QgKFCtdfn0*p^OXhCZp-u$rd`7VQrNO0DL_k zwlS%(OK?dCRyeLwE$yd|pmW|EC0oEE=4Q|1o25v^fQ83uHzLQl23JJ>$o+jV%Gh}T zawp*YwtOkp^*7mjZ+&9jkUs>LzpXYBd5zKZ>Shu`baBI)vHk2-LuP|2n(N&yLj6M7 z^R+ATC#yLDV~t}sG3oXhAlj;ybCf#ZsQvy8xn?DLZj|0Q@}I2u`N=(9I>Y^ z*hE3+*dubY-y}ZZSAQrrGOtf-`?`Vf!X2|tu_;&?7Uis+dzt9~~v2HFl53iuZ$zLm8MXiz>W|?xn#)OXTuSNwX>80I^ zvAHt>*|N4mxrts<%JN>wsKEyS8Sw*Vfv1AsPXyiu}m(1zQv z=}+V(%M-IXIVX{^YX|Gi^1l!`SVpuSMqW9;*AQ~b&{%;L$;gK1*~N3dzHQy|QC;xg z>oWqksM=W$BT?mOlz8KYSZk*5b4xu>nT4~mE{Z8){rJY;r)Yn|%}(iV<=D8=^lz^H zi2@QE$mRfyp5QfbL{(LxT5c=xGXiQ0h@?-Tml2-)ndkh2lnNU`Rhzyw)9~2@w1S%a z(Xc(!TwuJs1gCNfi%9vb1^s5UG0(dS#p*hSnrd$@-Ib1)s$I)Zn^s@@c$@dlh#-P} z-AbwyU(;EUAqobp%5OmL=8LLh(GPm<46aw`9nqM9F%W;%*vr{?w<{(a2%cO#RIUK- z@x8hTt!Q)d^&T)l%W;yOeqPQK#qe?;DvOo+pKq8&%7;eCO@o`4KxqSDmMfFfgM4yzs% zx&I@Xyf_AG7(jcIHGVqebC7UpuQ|eR(NKKDS&k4rX5x{K4d{7pVqe~(8suZtC^o$m z{OGG^2b`*LU)Fwb{ zm$Y46u=rtQBH|t-2PWv*jhAQ5fEELF=ay}8dT}#U!aOtp^NMDSJEO^YUh47;GjqT! znjsIl;&P*dR15wbKRRR-dU3YpwwkXmJZ)QXD_qoqSLorR)-Y7=Y36&-u~sP^y2}B^h{1*WaPA zbVRJ_Co}eJjSyXcco_zN)N*`fR&6Y!dvjR)UoMCD{(ru9?)Tn|lv*QIk|OW@9==RD z*lONWx(6QhdUzQ4h!0DsjwP1Diru$j70!qJ0+ANhzgbiuE*HJwc*vKJ7ghJ?$?>Qb zp=NdkVIN(XHfsVfgNnBhurE+$9)zyM`v-)kE2MSmxlqA=&#Q}}Mp&dLyc?fxfUt3z zOW12|Fi)T;ZYw1F9tAq@1pwn`dYa4e1AwC+aCD!@lS5ET%Pa%!iZ94a?)@aj;Xfer z2c4%*0UVHX^{e_3AKS4Ax+Dcl0Bb#&k|KSh@nW7;<+s^h6_2Hil>Gg}0PPdaVMop- zwXjDz5x{OSN1%?cUENkk9@DD6ev?tE){l(1EBxG;2J?qP8oqsmtxYE$D_Kk$=DxRG7J*ScLC zstklvGLUG%-`b}=c!>K45?0FQEqquELzoS(5TNlF6$97}?ns2ZoO{`GJDs$%CVa&aZ1=bsvZ^S>{u|@eZaB(4TKU1c;pX)zOzmRCYj$O?luIK^zoqK9 z?V1%?*qt(i(>l%2AS;181tFE}7+mF_$G~_=>+KD&-}h-+5o_R#ZGJ*idlNPkcdv)OC#>nyei)C$BE=fS08&RR{t zDjUXW0#U2SIM7=()U}C__Y=yLeZ9tB$rxOs7!@sJNlY)^>!@|>Bm}~)Bb#1~T>7#m zd9A_^(;LNpkJBCe+>T1AUFkqr6JXy^GfrMX>}siAZ*!Q(EPiCysto0GAz&x;98((! zbHcrM*hZU9Q>m@{jqV|tGR7J=Zkd2atm&{4#Lhrpg<#D4mr^1!53$JT|M~~OvX4!n z{s*_Kd|vQCTBGH2esDev6-1CU=8s277g_oE$9p^5az=1haz?7lZMhg^oy*C;x{^bR z(oLajIN+^*tcv4z3z76*FA}3?^VrX6i5jH}dAL5V7*tOAs%|G*M(NqSQn36(R>8R6 zH`pKVf>bSVTpM5i#A6O3r4nQ#%eo4YwguiSNCjysDGlktyXPxwL{slOheQVbeQ>(} zw5Jb0>sH1c0wEh;3D)p=fTOr??bdg_XOR}hkSxeMh>h0-wYWQ!gaI%cnwz%x&I=uCR(07BB(+UnO<&bGblV)ou9UD%wIkOFE5iCh|TZV)6rgsn3Jc@dk@=fUagyroOqeU$Jp4w~*RL|*m4meCmJF|z6rDbBF|fsk zI1r^?2C~O!_cnWi`yjtH&XzgbPv;>dEz%iv$3Wuk7){}zY)}L8L*4(MchBJW*o@v003vlKBocsti#a>jkX+VWbmC4jk(F;K`ghAkyd(<|0Tm|# z-BW9Gx*3SUKcZ)_S(J>}yYU7?)Z9{TOo+A;{Z)y&#ivikfd1f&l4SkDZn{((c8w3b zZ%5MFG2d@#;CCL!`H0ZQhcq6B=e5W^&UMxlg+AZ;-Z(F@oplM)4}pAG4sOYGXpDA@ z9->9TjQOU^-sQQ*n%Ha4*Gs6tL83gh`w%TN^FRfuo<%CVaa1 zbyZfM%d&Xq-w^p<;dc|LQCiLAUrXz1$2FzRb7(HQ=&F2g-mY$upq~0NqmKJ4! zdmCLp|xT$BFl>7k8K3nEY0^_$<4X%dlRgA z%e`B@@|VKyUs-GL8VKQzTeX%Ggog&P`*N}Q!~-|!RPy_8>P`Uzu94L1_;rm|9KK%3 zdoNR0Y1q7585Ga5NwocPRH6ljBANxb1&P|SGn&$c8OJ=)+geSU`^8BwL=uL7P5>~8 z&uh`L+{v`hp;7`@H`9CIjUt}+1aB)U(lxtrx@(c(N`^Bk+_im4FR;KBt=+f<0Ix2R zp89!e$=ZywfftGj-UB6}qx_fZ7@@8RQ2XYOm+!ZGQH-TtHrAq=PLTM@x$Rxw{N~T6 zre+1HI>>i(QtyXO?ge0!!l^pccyT`;NlW3e8|T!HX4|r_i;0pSf)-)OB>4P1OAjym zdC|(uQs{?+b;$Lj16U#b36}!_1{)}BHR-|dqi5+s38ytS4;5hr!%M3CyR7> z1cg1_VTxR$=|4AMTVQ}NsK{l^J(ytXPZ@z5e9a1v72887@##R(#$Eyi#stPqm0W&7 z)2CjuEQ6BC<^lGxFlh$7Z$b*yUiDNXprV}wVqE=l%AJs7pDsUBP1G_03Em@$i@9a+ zUWq}2qWM}C_BVUaKj<9A55FKEsalVbC4I_g4cy{V5+nlU89s&|o&APJIz})1 zIa-fzdr;HVbhK>_9jUQR9Dg~@3KW-*a;FFcsZ6I6nj(32f~+6)wo>{zO}~;JClzT^ zi<#Ds>rLTL33St;hp!#358_2HD{aPhCx*;?fP8Q3ksG}KD?19G^x~2H^r!pjt1@r^ z7L%WEN6TrzG(084Skm}<^qw7<7Qv)SO{}TVJ+F zzsd+A@IHlnYN>B9WeyRBIpT+3v0@$#ckN|%M9=k;d&Y(Ct}*bXJIXE~^y(X@Nksf{ zS=?af11?ahM^RUn=Jp16Pt|X}Cw}YQ>DS}Vc=J%2IRN8ORs+l-b^E<%k-y&=Fxm7z z?pJ6#Wr|7XzQm#_(INZ!rhEe_#m99;&zUyODkB6Pw4`1Ll8GhPu!Py)4inEdy+2f^ z+~k;3^NDayya_Iml2=Fxu{VPvh38wX)N6Zj8DT5&Ggw+#i{)>(IN8 z)WS|PVCFY974^xjBdt?oIE#EleRlx~ccyGU=TN4(*8o5t z4R|}tL?3e6fBp~M-pD=Z^)&#*6+cBsIu~46iJu<5eY9})3lqLo9H$PJ=cSHpbg{xil&h}8343CkHQC+TRgl>7spjE+!W<|=kinLdLWieJ zt&+gI?a=r@tK;NwD{c5W7d^lw&N3|TmCI*1GrdZAh)c6^wbe?BN-OsW*K|FjHNUZs z92L55`6VdD3<{Gw-FUwA>i#W8W!DeQa`nx(*Q?n=o`n=Dy5ZeUbAygQk;6x)nA-Q= z#;pcul}z3msn(<&WPApB#NX0B!9gTDBi8CL9CP_D2<+eyzAg2Icf zY;5s)C#TXBWYa4CH~48T)ARZ7Hq_7#sd698E+sf+E{lyDd%-F1Z7x%be~-WK9wdZu zN&=2ww_r47gy;f@NznAF2cc=38tWc9Uwv-A4h?_{68!*qHWuh~57TMOrE)y-8wGDc z7D3>PG%e78z3W{7dhoH5gA8`2i4VYhwlQvVacaX>0UfxaxwB^l zC-}uoeMd%~Fa%YXDGq$HlF2W>2>;7?K>DUz1q)mUGaEa2knls=(SoA(+dk-RB{;K( zUIlSuzEy*Nv+1+3nJX1rL;uhM7#()F4|UpPMsSB(6f|x75-y>xfLmeyi6? zI82TJjlhd3$9kuI*53Xg)hMJ9q(S8Yv&I)`LpLj=^@qOMUtKWo}( zF$+HcVPDQ-v28aX8K>81nZAiuZ6T);U!L4$xLe$!%1@nG>a3}E2K=!r^<*72R7&*w z9N6n-R2v_yT?*ivT^SYLZ9RU%1sQ-OhQZ2Sk)u@OwnuJgJwb9nXR#8@-k-Bt$_$k# z1X!=};^@O_dZ=^8Hy3uZKzKBxy~uNP#k1!$m67kS;`3=O$jr)4lB0&sBgr}rj7)(Q zCuU!Q8dY6b9R2SZPb@w-Bg)V+lPQPkDJ7&~jYxGS5unte~(Ya^r!a@6o;~?j7 z5%)%O9OYzi@hP+8?>Ry@@Kgh6c_u4fQJ~hS?{Oad%n2bY+XP+z z^Jjo+`qPN6My*q{;apzP&5!UYw1Cv8O46^$+zT_SWP1i+FcxYxc9vlT0AlZ;%b%I- z#s9(C5jps91l9P=&y(uUuja85H2NhYN)HNi`2Il$;NQhMHR!fK&z?tlPq5w=bbS7G zs4Va^AA&gIT+f;`c$ED_WnPb6TU8JYx?9c}Hxlaj`!=xWmvt9Tw%u(F(xH^u!Rs*c zFFJG`^}2M)ZdAce;$i4~y>$Fa)e#h&af2|Cn_jt_IzXJ_f6d!q_WnqU{f2_K#i*&L zo^!>A%=j$=Jn*ZWi&f0Xr-r>LVkMhb)Ws%#TO1uhG}{yB_lY*MxWLUT6^^aIAXjB1 zMc2LI6*a1fX$R>0m4}I`IE5a0jD}|@?s{US^9cUuG)+d`V5auE8Y$F2_g!bvM$Tew zCnfZ2w{|5Z>TiZ-AvQapm(B1)vyZoB+QiYdXZ%Re92)lIP)nM@!u=GhfE4hHBH z#DC<|*`T6KfNtf9ARV4g1Oj1l(nr*t-Fgvdm)IDi+0QrF- z)-Uk$_o5e#!m}eCy2Jp4s)$gjy9r}QkjqZxKcx3?%Gdh7;%N~1cgPfM5Zczswu~2< zrxob^gM^8Jui zh%oGaBU3`&U@%@vKzy*mJ2K>FEGW_Imkir#L=z7#`oQ0~tGYzJSI-YAhc)O$F)qtW z(J#nMZH&kZ@@(w^nMqK_mrDB z{kf30#EAO9iEP6i8(VTq&6NCVxKq3&;x?jJ^V2gz)1xfm4Fugi%AtKCqn}?eqh|>gUS4v|% zV^HQQ-=08^h(@(@hfwi2@L-B=#b6W&OF#j0ZBo7r<2z;suTYJj@0-6=k44FwI3$Nq z)vU&SuZ@jLpspQ$hUV}vpt`~~LW*fTS#VHUKUQ4v=Rv5|&vOGwyFsSo^MGyvgi}?Y zcm?%%2&*ZGAWdd9^#B2+p$xfWTH>WG=emZ$=chu^K;>->A{#@W()aXKHjM%fk4n8E zgBwhW*VdOT*211L5jkmmB-yQ(*T7B`lLn+*4vQW~;zp%RTwc-8knN zeV{YbvJ@iHdE1&w)zvJgk-$);T2@otkw`8pK;BeN*>8Lj#?t28S$lzKKxYdET zAbQdJV0#0;((4lCY2F``p?mW^NJ%`03-Y%a7|qxGo89VeAmrndR>^qPHchF+566KR z&8=b$1wn;c<%+{(&;4H%r^$te+c2j|TjfGT<+yqeH;wZ$$=QJ8v&a@P=_8O3o z+PXv;)H<8%6)@R%WdYtDuvL#Hm<*wh5B8O-zSy2Yzdjd~+ytm;uImK*9&G)+4 zbuj~bak~MoIG4PCm^B)&a808A8E)EoXHVr*{-PpfptI&51Z=5w$U%$e$*A$dq-YC55lCd&KjJ`ozLKn>5| z4`#1?xmK2{~?ZRjq)PWwbr-0)+m7j z9rPi!E_pvr$|!|JS^mIGLqypsJtnM^enjADPv=OQinoI4{?nzGl*9D7J=ys~eJI)w zyRxg{IOv_3a6vHls9Vjy8RAKS&W8)ZJWw#cU0>)>@80ZubLDCh^^|H?P=VVKNn7Qz zjY{Sd+aVYy6M`EMm_h!V0XWjzi7U<}H5a#(lz;1wlTDdEl!M@JEzV zJRv*~AJ?>YFPl*N)$y-o>!8>1gZPOwf+r7p`eYOloJx1rWKu4xQ}`ATmZ$91q;DYa z3ggt{1-n-87zTDieuthwMi`bFX`hzTA_z!HLT~<}`K80l|4TH?Wd<-YCMRa?51rEI z@nkU(eicDNUyO%B9%F6x0FWS{o>b=E$2DIW192K#rV&*(I&CRp0WRhZ^Xj@$-+S~C zf#v^jkSO|f#<-F0(d1C^h^YddJ+@lE%xKgLzP>gb8gU8GO=Dc)a~Sc8_rfG*bo|-= zbD4|TR|_2S_o~MPrm!CNVf7VIz9$2DCa!q$^t;gNjz)vH!+Oas$vdB&XIZAMEIKAX z##=zZt+rcR>7NdE3y(tm7~F=nx999fi(Tv~?5%!e8w8&_3THOb)#JCxd=k2uaYfN= zG4HVNr_|9Qc=s{cZ=c7(Xh&Tbt~me7@~!0eEKad6CV;9P_w~GdOWp>c=557SGrKl70rNERwC7w+)=2{!*_|FRf zbqs>uz8-?TGUMm81&X8o8AmD9G9q_i*y|w74O-;VcQ_G#iWk#)*15>kdi=8QrQjxz zE;ej8*@s|IHO`tmWc@8X>4S9N!EMI=L89wjt7Im-(PDB07+iX+|5!SruxIJtfLfZL z-BdErLMG0+4m}(Nt1h?#$O^O*z_=(_bJ!xr*@S*Fh5~ZC2d(xhIG%rKXG|^waHr-Uo{h;I$o!DcC*^9HW|~-m4iI|MS0kl6 zSxDy?k4k=v*8*|raMH#vu1?wHxOGnuqJR~QuHv)a`W4$jE_6=6XAyoXUeH3I;tO` z;@2_XMSHjpC0a@jSfvA?3Eh+ZgN*dW3TlPg+(Boh#o6YcvNy*iM~I-Mt+#-5Kn7~q z_rBk^n+xM6)FBMZ#z?wSLa-(PbUHM%w9{b7Qjcp;q_nd~gKjwI1O>cj;1Exg$&KBF zINA!%@g0HNL@q@>iOS*kYE!oj0UZBE_W@=1oueUBDh884JSs1>eN*Zwi0@dpoy4-p(MC5pvDAZ=*&i%*i zDnd4m7@YNAfmklF{yi@cyTF>#*x9hK_8g#@)W@-3Pa+RR17&RopN>nkR=YPHyCfk@ zzOvs?Tko00F)u%I2=KaS0^}sQs08kTV=C1wu$@ntly43DNLjVOoEIhZAox^1KlAmY zKD-QdD>yPp;O2eX>H8$gHU0y~AH9lM+z%e@!X)L*g_A{UCxE1M(lYbuX(gp^=+q05 z`%mHTtUujwXPsqD^#W>nc{+xJ?Nr|PZ?BV_sY;!pINByjd+o6=3$G)OWYd)%(b)qt z@fD2)NaQ_PRg*I2XpNH-<#z9v7>185`!zu;^x=IxzG8y7ia8KMn%+Vzk4tBa%Zs2z z6*As^4g<=Sm$j%-w`d=P-sh4XKM2OL!H!Q>UYaGRq&xGf>_6(pP=ZGA9RQ7aR!leJ zn&9i7YtLlQaT{<sZpa}|kCM3(qp}1kr{mR~*Omu#c_)PtH;tc{?m2@xN ze|~FI&>S4lFgagN43eZ!8Qs~%8N?OE?IbY`l`4RHFK*(38hY$MzwK5&#hENBuAl!5n zFZOU2flz=8^&xMP*HJV95P0yFO^N%ulqNk6zo4IB8%D9}4?@`_38s2N)!vX^i^P-U zYhU%@#d#{2z~mIESI~a*_6EV-K6Kemu{CoqlSP9dEk4oe%7CTAHy?QfDj3f*VO;Au zHlV0(J{uw%^jTo9hqw;yLeLtxwv@*2oA&NDs_D4aX~et`=@P`RlsOw@n`HBp z@Xg{MPV`Mn3-Iw)_x>T~d4RCWNcG$r`PC2#uW`1u{PPNMgV<4V9o0(Rw6YeQJFv*h_ z6KElAz;d`?)a;&ts>65(m}J%=^c{c=`T|%-$>~1g&yM-+wK`7`Cc%0$c;BP`UzISg zP*d2zHLgWJMfro8_jfkNAK&*10>(1jQT7M*e~riQJMw>C7v#!Fv(#kdvT61k5$g|i z*6;s3lLJz(mbl1s`rqf>@4xli`)QN`c~?5y3(7xWs(<5E|NRZk0z%&P8Ba6tx103e zzxcQR=}!gnF4wNokpH{W%70W<;HHuXLC|1#t)D=gY(8E8{U`q)-%GxdgaUv_@t@w$ z)hZ8<0&||ny=$WUeD*KXX3CcCk3~-^%(G|S0|SB?jnC%ASN0`F4j?$Bzowx@O1t`w z5%Qq_utyHjM2RD?;mUj>5$qVct#T7>H&NYQ`>Dk2Dl=uq^q;cFjBRptzwf`G*PLq} z|F162Kp@F~M^{bAbhIRnV-{9Z(_K6@$y|Eep7A1gj6-BaP)o z?QNDI9F-8BizQvX7nU=ZmCr<;*2v$~oZ~rk%rtx$XA0kI{;~!I9@J6Vl0g4iy7Rw` zoN4ZOE98OrktZ4&W*{b7z1Z_lVU^NF%7h$9si@?)*YXVL*KM_%D02h~b=Bgt-}O`~ z8y8keSkK=oNi6~faV;o@$BvGG4R8&@p;hZpWI?0>INLpK4Y+au6=XGFdpFi%A`Hg1 z0UxaIWJmA$4K|PiivZ%IF*P8r<_4C1yIvh_b8lWBeV($T{ODxjQY@xQj2w6(BX&uI z4`1W2kDvNWH_r}cQ?}8l|0#i3_cQejCIJ^&jIZo|Nl;O4|laB81VJ z0Vs1y4XUm0GFl+u(u?iE1EuLS0dA3h>8(h+Ku75XAXBM&`#S3HBjaYA zA8xG3zDID0t%q~6wcZ~9`?AT(x0IkDtMfUsYXogA?MDe81Rns~`W!LeF99@@2t%79 z83iGAH0`2=pTK9d4iLQNvr$g0cfMC`p;mYx2(kHbfDkP4PXlHS_a@y>Po}D#4LAUm z-0_&6=@hWtH5*9h8s6#TofJvdQp1O?gp40$wlNGYac0b$x=j}KW~s@`#w;(M?adN) zd4H1wVKv(b2~8lV0FDG~wG4XvZYqI4t8TyW5@_Mq0IO)08WEr@kES(Lg9v?p(X`+F z;S0qy6a+V#BjS7AcV?%qu-TkC_7P60HQ-P^gD~d??wqdJs4@4sJWlFawcph*jI`cd z`+9qpDp7IG*;6q;4R|;R5gxrN^(51EHT+rlpUIHd55hEFSohIEGwu$_i&@mBK{@zo zT{$2Gwk>80)sFsGOp44F!1KN2OkTzq{RCk}0Ky1OcLHX^4ZP7|z=7>EVDU#BzZC_? zTvJ3<5wOTyg&_U`lT6~LRaS~sOC`q(%0lJm+F!ZuWCN$0R6`+~Yy>Rnme>H2Mjlx0 z2>^W~P%OL=IR+M@TuV*Ta7}IBTE4q0?7H6_#J<4C{;s zBVg|whTCRtYDU%ENPQ8$$bdobGGYyiTT-)LWCCj-L0Wm!nzdkbq!p z(*ZE0RedIbV~SL3QL>g&i`171(J28hSo=jhP{mKk#ZzQl(o9SLCLKPAl}sgo#{A-| z;OD603iDQk(U;U$gkJ!Im}W3BygYF)mW;vk&e?cL?F+kYt?S-=#m~*HRmAqV zD?FOU*=O=3hf3vS(&m85@QA$3>8T&q#2R9H9y6ZVnJ+CXk+bJAOBmNUr*+HqG z`8D~M1GN%yb7fe9vl<9rwoyzixx_~WKbChgWK$Q*q+U|e%{t>ud9B1@u{#WfMl)0~Z|z!+N_|tma`|Nzc8rMvNlej?H3I_s~%~@aW|jqzM?H z-ew?O>;R~ACVcA{abaGWEAHxqcS36@L0;Hv0QAkz>T;{B4I)C(Rrx*xm!iR+lsX5r ziO+^^jz71inqD8ITRX&ypFbb7StY;YZ-}RXOnCdT$9AK zHPV<9Sl60!NuKTkiBI*9p?;%Qd{{>QC<-}APzlT)N$}ysW>w;IZ<9$d_~b1ssZ&e>)pO|c%alrOWg4ilD6sW3XaLW)44Og9ds>84(FERHo`e&`Zci0)D~l|S z#Rs8uYLWXn8vTkc50&N4zrIK!(dTt~-`ZnYhFBPPOE7J}Z!-2ONa++dfj_JhFW4)q zd)S&rRsQ1yRm!HU=wDobU?J04|61vWo$@(GU5QSD2r!T+Fn3ElSepkQpNm=moKZQA z+%&ZG1n8!@+x%xU3)kacXQW4cvhiW6_DxkaPom)LA0A62gL&N9u;B7- z+VI{TgOhU6pA2}gAF99JAhMQldAzo>feoRziNT0Xst^}zlVO8Aa#c<_RhGuVN5lY; zje!A*eKW3aiABn9r$dXbh|kHXsZxV~;3I=fKqYo6HiaJv2b-3B-JHkMw$oQByuct` zC0HZye~YNE8(wI5@8*&ceN%mzN5@pEsHGU5pK6(xOzcJUWLY0SjOaEkZB4J4xRy8qH4 z5DxxHy6TNd@Tpg2CS6N5Lm%XGsdBE9*xEHM>TfeOIsjq^KA z^NH=rdzC`qbg8QIrbe1-7oi$wIpH84#HcXK?kwutYruK$=wu|kegu4+Xn``{#5|xX z0cdIsbAZTJfnI1F`Sr6Ar8n|k(>8DWi)f+V#OiL{=)xO?$*Vxpi&e@yT>pir%EtK} z?t>Pa;T$F_9^rXKG|5Se6t%EBcRO)H!B&91wX zAX{{BzH6%6s{$waAUs9M3svn6cfJ*^M~KZ!63$q*3o@9avvC7eTn}|%lW+*lD8k=s z1F)zrflmDZ=(4gJiB3YbBFo`pbwd+|12Yo@lP0yLTqLG%@$TTA+iOjGtI2K znZq%R!!mEGC+GtKX?93BNzP~)a?y{*451ms8wuPKTT&uhZZd5RK%{VGiA~OL8a$oF zt1p)gws*p&L>% zP=3CfH=gvjnLqkPHf`3_ZCnk2Z0S(Z7U9VrA$rA!-RCh%N78EhKpZv)2@)OlL_cwc zKG_-d`^>1A!%wYyk{?0!z)yYe3W#$~Dx!Z|yk60L)4|nP7UkBGT5fWkS238*f10l| zj5nd2H6`)phKtcf+&)IeN-B5y(pX_akSft*L8U~nocP#4-TH;g^QB!jzmxozzRhWV zG5FwVrPq${^w!l))ij|&2%-_TgR0LYY*ReW8KATt8fhBL(XDw+z})%(5#L>vE3#da z3<2Uvxjqs`T=~G$4(eZ5M(E3aAk-k7gf{s0s^=TYX+Q*(cLza$hAss^Nq42M#MY)tU5kk*VeXrc{JypY4t3U`1! z^u92&ces1Ihz7}d8gRXSjL1)u!OicDp-VOnv(|ZlLs(W~bG*&nrf}C4HOwYOe_3?X z=dp`2$)NkV0W?_m5f&wy zZ~J~2Wa%0$tava^TGbpk-xKGHY)_+N43#N)&4QIBDn^8MXBM=Zj{@T9p|s*OdbHw6 z3UF8ba&H*(@P&SPA{!#7V%4X1dsS48KKf*WI$5H+t=Wa7w!U*uu#@s%8MwNk8t%M^FgG`7scpA^3$!iz=a z#_qhutVHu2?NdUfgN9#;-bqehcCZNl3YmbMX7ToOl#^$%wQrGSsy>x{>BpUv+OJ%H zJHPqMAex6nQ6$_@?T;;ih4GFO1mznRJ}jH5na*uuwkpxSsl#T)s>{=!Xc2%SxYLR` zi>YpDz9*{WekJT1T3Il%4W4rWTM0hm^A>Wo1PT@#gW)axSl;^ReeTN?HQ?_C?ie#SG*!3w@~jO zy?(?AvjAgJILecYDob&`YYo?x&z{9Vd0bL@F%_9Lwt!f@1(aO_K!k186pPo(H7=>4 zac>zb+6E_hg2*IpP`N30?|J*JyN{_>x-JLbl3-`#$);A9_pN*H$oWsXl3`TWk!5}$zk#U{;>FYOgixembnfJCW+axhVlnQ;>-Hyyvd_X8|vdq zSbgUS*fH2}ME719Oq6){GN2kF4|6L-azCz_i7&a(%V{Y*0v!EtN_){3T598cp0Xb& zjSE*$uWz)F1QK~a(8Ayiy!Knsj5wj!)Ql{21qRgg3tHhMWAt+rOPe5$96Em{<6)+nwO!Tb+y?8(Rh345{=zQ6}#H=UG1*n8RYK zooL=GAxdV-lY11Q*e3dAboYwH17-GlJ05belvz;o zatvCA*k~xoSfCUUQo&e^G;Sd>2g85hglD|xNO2J}HR`}hp)e!RQOb{{HKLRCksQx3W=>Ye>aJ*0Y0?ow zP>nV~MTn_V!c5d}O&BSDw`vEj$d^#dwDhFipr42&YuW& z<}rmHcZu0>9%Tu$G$+c;hGp}5Hgha5VI|Ma zrMRl>iwHLH?o|HJO3Y9!Sqd2as<#F=uX*b;)$Z(a0SL$Dn=|bE#8q1pHN<=m7t4Cq z{Dl@un_DjuhPFw3hoeu3!9Lf|2QnI7(Mv;e3)daR+|(lQL6H?B)V~DG?O;rso0SC; zEOX4C^XXIf_YJ$aF{9|9155L(ZbPuHRG8xZuh~dQM3@^RN{K=+^6q(6s(@2-x6hyP zxnWjPGb=&3TODqK|D@HILMOOc5AofgXk#niAA%`NUUas%9G{3p89vTT&r}#x^0-l zt3tM%ox-vt^Z8P3NcV>|*RdMPjN9+hW2YP_hVr{FqsgY+i*!fzShzzgd2J_JP6OXp zdl{CPKK>Aei-vHd?3-Xyb7F;9SK2cZeH_|xOp`S!7qJh~#^n$qlKMR-Q#p2nNFhwT zJql~5yWmQxLeMJYG`=PKPM(NEJag*rX?VfHUe}Xg@+3rk37R+r9==o;)Bjj_8KF^k zUM=0lx1L?HG$OSpm&^V@q^K#}eolEP^d7rFGclPzitl}kt3kPUH{Y)*_RZABcXN7Z zH<+XoB+JP{5tzY*=#ABrkXbMDQEVL<=Jb1oJQXiD(dnTGt6h{p*HYCH# z4TA=h_iYO*Bi*J|WlMmsRGG;G))sl1v?w8|!|V_4Ez@?NNZ*=;R{43}XZvgA{1z_M zv1vxm)89#h7xi#?1v(_0z%1fvUl3_v8_6FCoDtrz*kJ89>u(9!dH<^!^3R?K4fbtD zDALbRJQyW&fgoO-~-cIC0iq1cKA?!W}N= zWeDzPzguu8(E}Qf;QXb7qdIT#?PQ@IE$S*E6^DRU&=w^LQ`Imkpi^2R5xi4G2VIfY zM43UVjB>>(FJQoj>aOD%ay3W&L;W ze8FID=#3M4uTYZMCCZJ?*bI`E#s~9Xt1+oQl-S9zm|$~nu)?~hF>6330}iY%S2ViF zg^${=;(U#Y88BRSEKARRCaCsE8=Ef`pNX8vh-OEfYOuS^C!R3n+KY45$$HX};oy79 zg*P+Df)fK)C&$G{@&@K;p`JH*Z{-+v;+M$C&EAC4nx^nExu|6+yzQbSDBrK}TP$(e zF_M))kM>np{bi$n<6oxd*{bkG{oYJ4-Z!TJIJukY?HHl#+pkA}F2=qIPCHea;sfyX zi>txFm9reint*x!55sK#ZtDDF9Wp?aMz0JBUDQ4tQwx?2oy8oIxn!%%ERhu3&W&FN za?75#&u{h*a@dP~!aYd-eB|}-_4L2I-K9q^t`b|CZ{m|+x=42cF@-9@W zrB&S{4id3EFYCFM!x80R`B*lA5?h_;ioKHKK0Lw8_(k3tM$1iaj_fwuobM(f1ugzX zQTK8SFGL%na!{|7rHHmq*+QO6t)mw z_*QPFo=@HA2a3i>aw2l;WHlDqxpdXwW(#1lg(B6NG`F49n~W&RJ?&biX3q^1I;k8# zsLO(JwVYZc-=_)@B&TF3F&XEx7l{{g+VV{v=Fh$V^q`#pn}U|(j<2~P8a>o|Jbb|e zE2#i- za|KQW=#hiM2X1`$pD3QtsF2@8ERsY$rEidOz$V?mc z6p|zM+}1m7_^V;tyc0n!!TDFm_C!Y{D?41QPuy-&3e}* z-u2GxXmr+q*!IH|nV|3>$zle!{S-Y`^}shUF9y%uc`@A+z{%d#M|!<330VolXd`Fh zY`fbKnIAckU<5jxQcaHM< z*T#(jZ&td>^e#+LZO?;UZ)jqUnoNh@Pht}vx6i!p zO06_8a1q|{rowN3_v}@D+{2dxUjo-Qlns|fIeQusTo_x0yHR_=8tOEHZiVM*y5y}T zxrgJ1rWMK)Nhi_o*lfKKIQtO%&8PP_Shz{^qZl77e_E4D5vtfyFGL*6YyJE=hEm1(xNe%3al#2|p8uxo?Yz zu!~EOU8ZXMjL_vpYny&~p**ds68N6}bWe+}I1xugW%eqQg;$n1GRc(|8nV4|?E%c4 z27u|88(dr8ha(n=8~>}!3>oD+DqOt%29vofy8e3JkB+PPpS#sQ;efr*K!mte0uVLSUkI!B|q5*60^4J44;f8}$Pr zt~8cRR1sRok{54Gt^yQ{WKUYqdctNsgxNBlb zr?yFvsAbd%N}=#l`Mx#66-rYBpR^r4r#LkDac}d_^&{-%_nqF348#hDqz|q6ejU2X z^vEn5hA@(s5r*;2&$fA3Y$3bEFTQ@}reeJvt1EfG(IjN|DToq&1{#sX3Umrs3Xj>m za&mz|fb?`Q1DHMVB3WpoN%DE>`U!idaDGQed)xHMv$@uh8o`e$hRd@7S2i85F6f}Nu2J7c0c~A+I;DQEXYGp#JhuG8p>lJ~KTU)MCjMP#5@$-rD1-)c zc~Vg6@yk_XxDsT7U%X%ByF>1e#&y7um z?oQwYKJs0}%@8rWkZw?;j!RLa?n*WW$7kxpZYJnH{;NVM5T?NdtU=9W%5JRp%UlnH zaF7U>{lF#gTKx7?eY;%apir+m~-%8ZLTSi zvyyD<6IMpwLaNY0bs}8kr;FP42_jPGG^w{+3(EXduwOT2ibM|49lSfNA1RL7TF+gx zHAea9C3nO3D1}7%s$pVD72xEf;9yrNYm`<|B$bpVw`N=(MX9Wr zR}^Mv)7mbAgNDy2-aUpj7697sM7?hbWi;PMZn|I_e7!Wk!Z##azE7VH0F9niO`K#` z)AFw6r8F*&=I-VgK8D1ftI%4xKo{C?@R}?eo_91?ibgfm$Lvk=9R*kQo!-+L+lrbz z2gj^2U_}8(;W<$!v@X&7>4CL>R9nP2Ua{7FU00wLPtuWF11hYiC8S)jcxdYCzsk*I z)7kT<`$AO3w^&$hmLUR`gLb2($Zstg@~1%yMN;M`F}?T%=nxPpLuQ&^r^v|$^(TqU z_GGHJ#|P~DXAt($6;oXq|Itu;{v3g^&``-kv|mmyu2?Ci&mVR73A#{WwwVaqWFGny z2kb1_icoRkE7_}GuQgezf?S!QjtR3G`R3>* zDaPZCA>8qyZkXu8shY90pe&lHv9)aacqW)LmWaPb6ZaT0qcI;^8~Q31|G=^w#2T){ zfZA42poZffFH3)WWJh>=CT_D=3%z2$=4aIx&*9+Ojd#Z@aDQTr1)hlEp5dOy@>pq3 zlo?}~Pw%65h_I_5@Kzax6~^nVg-a#@(Lk+M(B_@-l;&LCMmm;NlvIQi8o77WCOtyd zVpB76<%7aKOKZm;c)=C`3gQZQ3qOkMC?efHX`s-Li<)0{Aj^=^#Vkg}XzCaVZGx(3 zq$%n`th7gX1q1CBa-0D;)`sFC6PtW6r*#`W{>}(h7u}aV13nmoZ$sC@{JJ8;YLK@y z%`L}u#_bJ7XI;C>Cir&sUAl*^85A*~~Lbd5r4R^ra(qp#QJQbMbYY zEXohiSfqa*A|?)e?(1jz3pSXjT!T3%od$6|-?>RtHUjHOffK zY^T`6$gN{wTu7Yx^PQn0I0(1;l}(6to&kCsOPu6Ew{Reg*P^Ss+p%k{G{ zXmHxkJ7?-i%z9rxfRnYV**&iLQI;uOL%!LwC?m4ZeC8W%@0*z{Q-o0$VniD@6-=4X!}B{mw@XV@y7;7y*Kdg63_vGIkOD8B$35g61p0rjh1sy*%(~ zZA7op!i6<`^P!eR#=~nH(wqYs>$6^~y)s5448>yJQ9=jn1Qmo&F(~CZcV75Jl)ZxLhl{rM!19fj^vd}25(pFGgdh4-9|FG z64@?gcepnqPedkCe(i3L^Q{CQ1}DQ10AJP&4{;<|K+Y(b%d~{zPzc?q*Tmq_iTR87 z>z>SdNG3_8H6(d9za!l(*1Tgdiv8-D-yOLEJfb+=KkLc`1Wq$)sgby} z0E!rTcXTAVG4mu><2ny&hcn#{r#(FfBWc?CS7>R7Q!(F(obnc&{o;;qED@%QL;dCV zxANp~Lo7OBK0`8)MmcSR(R*k5aF@wafVnYc;ugFN#- zZ^;qj-oTVsCCW_)s05D9W+9G`T@*|e0&$tVBi%3^_xu7uAt~+BxsndYzsnYGyqL={ zh(q`E+h?$hD?>qiRiXSKDJJQwSwKHwVlQQD_B|1>9P*BeAlqb6FhOj$aVna(aGtiG zSg!5^W)(Tt*5b9zgw(7Fs68m6+!WlP^dp2cmx69AETH#!1fmc3B1JY!s-?vY&pQdWkE=@bju}M5-yW9$$U5WO6~sle8}+du z-|Fp&H{t%_SKa7Wbgk#dGZXLLD$zk%35ZK0dT}8Oy`W0LV2DpRju?A=zvC#8 z+j3GR_ha++VmGFA(1afyRzE$n)F;=T8?e$a%hc zDGsb`!!DZHUR+E{Ov$f=MzYVE<2C)r;KHKygS&VxVhD>85&Kg0eip3*;MEQF?ID`^pEf3-P_1)Ck;pyhxG{hdRIt_he5zUMTOF45%zOuTu ztEGPW1ZrMCq*lvg3tVA_^}3lZtj`D{@{CW%$;ig4h52rDYp6BLJE{!gw-Q z9Uqx}y#+TP=n-vbX>WIF++C3o8eHLUNqnjSdaOO0Jbf}`_zWaIlPKmP6DX@Bq2&Fh zgd)f_+4}twJm5Q^I@_0!hi`4O<@BDB^X}WKW~MeRQP>Evs4lld&np>$Nf zX`Sy{rKD$2T%h_@D8bahg7iz@G+!Kur$i>&Br@XKu9Dltr)oJ|tFPnA;zh&w?vc&B zXe^BimGo}v`H2EL^KTQOhp%UwSok{>sAt}bb_##j+iK|{L9i^FVgy{qE8~Sv5-qfX z>sR+cR+%l-Y8|<~)p(cVx?3Nw`PEgB3u4c|tIm0hIiHZu+)BIZ$vAAUaZsjb>ei|H zwq012k93_m+UD2`^M} zI>8*{fj@bRwO>*|E+pWvhO*dtt)1>I8J?+L$=g;Y;C_gGL{ z2QERZbEtJHOkdJkV{+8BXfL+a(AWYZ4AyfI6w%pdipj5}xHjjN zbe{Vh;^VH94AA=BcOA~>+$sKv;xX$YUyTx0#IaXv0>_7yD0k(sW-#o?zM~;qsi;mjQWsN3f0PV}EcI-)U)A)0)elCS} zA*lvyv7%Gd5QokgK}Dk^{$htW%WeMm+A+0;9^`6vPZ?Qix;L7eCC?Av+pW7MZzSd^_?T600Rg8Tsis`IJFGg_R5auXD?`81?xm` zv(?sbU7G(7p?!Gr6y~u4M*C6_ZECrDi9F*o%pXm+wh?rN4=5j<*hvW3NO&sJBi1~zTJ8tu z;+C*lL@9e0VXBwfD{ z?v8J~i+ul{4VZMVW$KwV#90!(6Q^9dE5t8S*ZkJ5#K#Ti11g>fk8 zlDI%0B4%zSn7MYjFwVY)_LGnNY6>4kuv}VtsC<9)WlpSL$c1<4Erv11DG(LOev(j{Kd%cIHTCLe0Rk97>DVl??w5%;-LKw zbOrS5EN{nKpkUZb_kW?i5=v5MXo3X+paH z@ZFCm50)VfkrUm3DdrIAC`zqCW`-I(L1*r)DI~Y1QYThK)y|qsK)lAVrfDH1AT>S- z$tz-jIzC11K{Idjks(zL)S&VQpno?!Q*_R&Krm&IHjWnUba~r6H4yyb207I+%g%&p zp#MsCa8i^DW2n&l>)7u=ob)2)iEaDzh{u7`2z8EBu~kuiq}zPYDZUGmI)gOaqTakH zrL(~w<*MgxgvMnPwKSHKqbTN-GTIbm^=Q?82QO`s>|r66`iliD&B3Nl+*^0q!*ApA z*JK~HP1}^oz8*(x*QGxZrvxDTFfA3T$6^(94{5!rER;knyX%?6@8PwwPxGA(H|xhLD=RM zb9A>-g)fV*o7TH$jM6C*9ZD!VC``{YYd*Ac7WaUZE&o|Dnt^?}P~2zn5A~Edw%EKxrRzqpcSg4eW;caV98%I4 zmLWeGw%lfO72=Sn207Zewk-qZj3dLt{tu`;iU&>l+Iyi_1Jq#ip_wjbvd2Lhi%#01MA}MDD70U&&tw@3}K_ zP)z|ThXHNdtqci_l+Ua?fw~dZd@|ag8xSYY&ljDe$THSyuORj zBa`p$vsWWKGdN0TcBM~$d*wesPbcspcCeI6KitNvU`+?AVcO(%`Nw$AU!WQR9#0j> zmU**xQ>dz``8V!3;+2_nU`G?|(j53^4VIHv?-KsA+WZTrpP~hQf+?&h0hYUWKwL&u z-=}7f_7WsoURaD^u5I<;zl^fCT%pOO&G3`Mgsr9V2P|9pKA zaRPXEjsSF)TmN+f|4#J&=QaQBON|5Qxj9X(lsD`Bb~%41;s4_n{PDT+x)7Z4nA|() ze|xw88r}c(GY)dFv_CyQwcq{U7xV8i`Sb5S-$zWv<@c}d{NJzXzdnWJfLxwK6g+c0 zRco$A`R7j^c4NBI`Jx$I}u(sbQX{XdQsoQ>G+U((tCSpNGcrrf_nM5m=~ zqB=7EU+?_;^+^&)A^uL++8YSk=g&C_{Bsq6kZA& zN{W6qcJ#|=y0TH>Zi}i#z0xxD3tiI(*Re@(z_-9^-6$k-n*!+PGo~yhw zIt@)tS|AYnP~$lB1cbuTz#wjF@1S)r<_r-rEmMGIU!Xz43Z(o$1?1a-m(>;E%0@XzmwmFr9!sgxTq6>RZrM0bMz%nrFi)I_B zp-kXP8PnJe)YaoV-2@y4UwhdD2Qh*k)Wwp5h zI59i}wAyvCM1799tq&z7DS#EO4NRBBLXd8D=9?SaR!Tq5CxK(G#2CpXU_2#@9Zz4_N_f!&ShNN(MbUBZPwRV@^}pqnAHvP$-;VIe>(dsu3kNMR)gF&}9+iwfn*H z@O=R$JlEMSVcP+od_Ym@&;uj-@imv^v@2x(b&$h+w)H-)?=K-Ix+6+I*{TL_zDrI_~4D%&SHuFHZdm$+G(8Xus6drBN)^ z^-`c7SkLM3owC&FzYo@=t9VtJa{kuRiRu5jN*4esg^_HMDD-wYte3oSNPS_Vt?~!p zL9CCWP_rqEyi|s?mBMaV#7tZILY>tCnLHVHWTBdl+o~5=7%Uo?TyjffRzCr z)%jozf<{%D&L6u?$-v{;!XJ&ZY=JjHh)iadVb1H7p-bVZhx2*KnND`Tosn zzW9C414Q)k;2RzpY>CUgsx~QdEo#L0LZib?>;s;b*RuYv#YUF)+g2p}nJ(os&2s+D z!;>D>!uuoC4UnxJZTwg% zTfEpjn3Agf!gj?Uq-2OWM-Ea}_%Gd@HIJ_HXbIbVWZwq9MP0}LQ=^1QO-eI}W;cq&OQ1;)X3{qbFsy>6fFq z*H+Sx>2YUqgS_nNZ6n>9ZYKz@lW0@nz$2&w^l3hz>BfFOM3}oJZa%burrcb#-mqoB zgm*6haPHVt{Tdj(OPP4D5dn+WID`q@I}Qb%=Z=80z|sUN|L(k1aQ6v&`A~U875B$w zX!v=EzhaDhez`TN2_&OwcWlLd4xh`A1yLj8+uz>}SRLSMO(9Sh{q8mPiI4pb=uXC? zc@AdwS@^x2G><^L`SIgNFIV81a)yZKiw=*kD>Ip+RGBtLsX`}0#n*wlN|1{#9UxTm zN~;n8cd6i0XM?F|t-$}-nfmV{cAtpb7jrEzWz|ngaP7xO78_zs0=uSfWbt6DxTYIZ z14RWs-Yjz#k?><}CWZ9PX@ zi@KMUC6|LmTAGx($_7#JA02sjV`LZax1NSk0O`0F?XH zi>q-dIyus<_m{{{y$mW_{C&Z065Qc32O#S{NN>IDN`!fhNr$FLqe_Up{HdYs&P{o1 z7s!UHpUpUa=5JjYx&o!%58HdlBHr(4-*zC!a`S@0q8uDXg#Cyf=@`>h=#7fOC!uZSTiVmjB)$XkmDH!dhR7qqkwTB{vKj0IieotYIW0IG#iaORDhO%e8CW@9^d6aB{nG0m z82^mmY=@tAyPXKOo~bq)9f|oK^A(CQJj$=6g~t%NwwVG@YrPU^c{CB?DvM7F?7QpD z-Jir_dr_3RA1m3$CQj;eB$D1{tl*W=tHXKVvJ?0`Md&1^ct<2)pZ%F57=Xv1mT2{| zbNnAih!hM2B}k4gUI-^?0+hwDlF!M52Jgp_@HY5tQ(m4s%QkyI{HKo2x%WRhIxa@& zz_T;{Z4cadf1s>60A)xyF7_#SnwlvwHyucey`(1SvJ@c#7soCvxH0? zYsXYjon4a&TE0|OjU2``jRIX{PAnP!gAunk@pHg&M4D2n%|0V>+a=hOpMgg@z*#zr z0NwBNoJX?m6N9eHE3hG^M^O3nn&mKr&RMfNM4GwkwE`&Y02mx(KsH0AnE6gYP-%uv zYWhM9E!1`alnD0o7_TpYi&}VHQ01eY`jtT^M4FOHCSRZOQ%6SJbzB%K?exu2d0@tk zI7t2;)L#sWHv%ANyO9xyYC}uN<{NL5^8iPi3IU+95~fY4bP@)lwP&A7>v+eO{i%qt z0{~o{WM9_Mo#G9+H3%5@U@q3^sFG?*236z+1ao2tSF9jY0NVgZ1P-k7^NgGJ%k9lr zzB`~JlMaGj2Oz?3gGN5bQ#J%xuh`8yGcPwyZ|tN`tF8ayx;j?^*f2xf{|nlv`b_Z* zk>^}vAna;zgMpU!Yo1g{QZ!M3jd26*qAi=RaIj0)j1!k2Hs%wh=^(K3kIE*IfK7U8 z*H1Y|?1!WBe6y%i>p?7=TivACE#6q~^`{CUmB0pKpvfD)x)_3kT^axoZ}yV%g{vLU z1K`U2gSDs0Cc)An>RsD)%K&HNo1;qSCF$h;)$j7u{Pu-92f*#L7oCk=-7)1b2dsTY za9;g8^*_=Lksq0Yl6K9jqZ99~l^BAkdV?&4S!tBQL+ime zojwQ05#r7Wy=VA4tir}6wEzHpXNmL!VVj*v+jJa0wPjKfwz907gcyAA;TlfhX-I=9 z-s3gEKqFemUm)D_jvY;5)gCln10Yqx7KUvyxO3D~2vM~iMRyb*e+kBM&WA|Jy7ne} zj@|!5*?UJtnQiOdq6kIKP~;4SWI-|rMFu5_0)k{jKtfR}8OgE8S)xP(B1o1bIR_ER zlA$Dr5)cshR`uR}@7aCMy?1YC( zw~y+Av0-V4JJ41Sd-|mEqi=X?!`NO|GiK6)o^wZNE4zw!DE-!M`UuZBzehTV7J}Gx zoISa=Oz>cqs+C6zwDIS9e}*#{m1(SBqJ4H~^2+0>kt8;1Y9q*DiaVuc?I04B#?5Q>-` zZ->O^aF(S>R63;ufnCDh84)4yv(kUD>CwC=py|Xa=AH;`Rpt!L=0Cs*D&6}LKDvGQ z@IX*2S!%+WUHB@@K|jc}h>ehtx(gd}NuJN>em(T}iy3G82vdbU;1Efa6g^$?n`_7e zbYY~y7%2uWsHNwd-w~ZCR~V;VW#-%k0d2*{f4Cc%(0lQb$ zQ6FQbII|2vv}G0;tL{zuuVvW#>If$lWQ%M-LT*N3Kr|TC^{EK1O~^0Yg-DUx>Aang zj^sy-$9NaVdPsHZ{c0&Z8{9jC`o=4?3%tx*n5;peNX!J>#DqA z^w3@vf-WATN6+uuHhXAi*{G;I3fY{0QV;`wUm(Esn%@iZV53(%%QToLf;0ICd6>TY z7aV+OFeC0K`6$DFu`aJ8y)$!GAFmvRy{9<{=duoIH48wuIdUyBRO?`3uMY!3nDjk% zwk3#q#5hnAm2ia-(-NVw>UiDoi3n|labL;bYXi(bjF@Q|my*y%VF#(SubFi=8IBoB z03nNG@dF5WUk0dIbVcCAR6BTB%awXem*!i}n^q7!obbSVdUctKv^Iv3DuXs)jaQRu zXNg@JYmd8)9fh7i_R({$qHdi}@UP|Oxy3D;chS@FkVlTc;oUmMuH)GiFYPQ0bLXQp zBr9i2o+1>(986)KZp%znE98cbjonwBWU92A+69`GqmdUY%v3k*V!OB7lda}!yFRvt ztvvcT9ssbAem}adJ1C=94L8tu%Y8Y_M}iD@kgIBO3$iP~r=F-Y^RpCHT^cz_th|Qm ze``J^QeYL-`tee`;_EaS4Qr{PX3NY9jJ*8KrkO8mpi4|}*V z{cytOm-Fb0u4He{&wo*Vejhj(9WdWKMv*Hq6`UVCybjt%D0?A!Awgf-e29mGVeH+v zSeRF|)s$B6`BI>vS7*Uu4dU&>n%Fdc-hZV?5T1`?N5!JzdAFMa4KpaEy#A3T*+-)S z07;Sr^XCAKW1RIA&Y|(FWA{vD_W!;3ItnWJl#AuMXRbc$xnggK5shDmc9~fuQj%3N zs*r$+Cq##FkF7+EvV^T)1`WNP$vd4$2Ak0T#0ev1=bL@8;HTie($is-U)7Fr=!s|V zqKXoIoW*9euZI!zY)P2NIu7x=6m`A4IBsDaO*?5*xWWCm79fz)<>Jptb7n$=LgRaV zIESaFx~hd6nq2K#JWE-CJmHfroKPN?vG{ou@7$|+G7!`*9@i22p%&N;%z6%3;|6|W z73LhLGdK1uqQuM9xUK{`)AUsQ%M^WK-Hh24Y4yaV#2Myg zTxUNHz`M~?8E%mBv1wMl#W%*uCd~189Wms8l`r5m^CpSz7ht#WW1yZz-W%Gp%z^q1 zr7~3?*W32=nuZCIzu6**zn@hy8xHD6Mhsyio~Y2(kd@rzNAKeu=f+}CK0d`8Y8U24cehv)9h%9~WPG5Q3-qe0mm|dZjEI(OPv5pF!huOx_ zAE>9G<-R)n3q&BzEGThZ=MWM_*V`<9@0Z7kd!*rg#1f%tI9=u(|)K7m=>_ly?`l2gZmYHMlWsoGxbJ$jbx$HqK0nO5C z3`O)0CwikD%Tnzj%5fYIh8-*Y4zIaG$ATxKA3e#;=T%ZIv3Y;ELG03$bnLzI^A7yB zQkV=F-7MWyIP97Ws`i#kk-6lJaX@_w{-NTjx?Z3Y;-e6@^G}p2fFmA-MFLU(HzY7A z99}qVQ_Xs-XDs`YORkQa+L?aMXAk2ji{jryK9u__vGwj^Z!V5EFmf zZ^?xd7&S>gfxQ>A*HUag-(16sa}vgb#!o0IQD~j9BlG1#4J2iX*_=ysVF&uN%6rPG z3y8ZA_2ifVM);pt*4uO4{7n;qpMYR7j19pu8uGp5_SS9KcyQ1Gc@V=E{c!nnXJylT z+e?tU$;fcVoh-;p&)EqKB__5ttXkau^e((0+|{k%am&6S*WmSc}q+ zq!<28findtG z$Oo?}!wL<*D$hm;WbuNn>RGmgBGii5h8ran?#A9B7GjiMo+ipu>eFM*_=ww45X<>( zw|h;%LT=(Q>vvfT73)*He5!R79!5pLD{$u)t^|fx$oE-JGr8)Opd7JiB-u4mqq<5( zM=aFfhtkZEFq zZ(5S$y&lTgjRNvkd%5k(R4MeONnC3aemgVDLFV~}EwM;Du`dP{=^XBq-fBL0ObK|# z$#0@JNs1fxM0pyc60B5|L3-n&qnh^i|R@;J+AU_DHOd&y?b=^vt)C`B7= zAKelcDA_=Fqo=C1+Ur?@&@yY%(Y-k#KEy@4ONr+5hM`c8Bkz5Nw^_0UbH41TKVy#^ zF-f3@JtW%Up9PxYll^60&GUn=?~v_+5M%hzj=|w19b)H3_g*37UK{mHxV0v$WR-A~ zsGNUrl#v|Y7aFBN)&ct6wKqJM5?bwf3tmr=RB8MOQd&={1RH8Qa;MlaBG`<+GNKQ`1(xc5z-&R0_{|DG+gOqAV23N| zPAj?{NZuRNAB4>?A!9YFL1(E)aE;xG`1(_*l4^FU z$WqHPB&o`8NV)v;b}JE~a;A6?JhkcStVnu!j@eG71Q(3Z8U=aNGG?&FqUEDik#_de z9uze?9nwD1A=-Mg@s$$8@5yEhHhSPdut%?t$K(0NU1GVOgm0U2viY<L?;Z+~C*>vcA(eXeeieww2Z-dx{NPYIj7Cow4B zMoDL8&u--HLJ}+ILKYNvo$1sQsM69b*oZ&0H|f@6h8SWgI|CtCj{KjJz(mJGnQE4b zX#@38pC{`09L?Z!bF2*3AGl*Gw6oOdU5pDLD4w4UjN2T$>61qZ7R;PflcI1 z4@7y!9PaU3LfgFbOU1{$pYQ&G9$B+7QXl)GYo(UA%l+X4rptN;=6I!dY ztFLFb$-pci^XJ2NRST)nIW*CfJ`b_ zU_dOxW5(~$f{|smL|r#hdAeg?AHB(8gosFQjs|wPkDBP7xR8i#mPtZKLj*U zyo`7hFphmFp&Gr0qm5{b^2Wkp&;+eB0pVuauPfxYiy(9scTAW2miSy~R;&`}dgi0@ zneK>sLMRnN!XC?=FfV2AZRrQ$GcH=Tx6NQs0NDzS)txz(!+k%K1G*+Tm4&!x5?nmU zA2f{v1cwX*6&W=aCVeyw;Rmq>TdOA1EWSL$brN(-ayyOe4`X7WZS`Fz543v0d^{O% zi!tPB+|BZK?NqTS`Q)Y^wE4yyRfG#-IcD)~hM95*_~@j)Ml>XjlnSNrlp&D~poe!3 z#uou4X3+f}S`o&SHIYT~AQto;m8q#j17tI4HvMu{$`TI(WXYBoI+DFV(1?-Eo{4l> zSy2$p{t};cGSl5_w1JzN5JBVI;yO0zgKCX?WqFSLUbM76pOiRP*%PRKh{aEild8uo%+vt;Vap{T02s}mdo%gj&UN) zLd83#PN#U=4K-F(HdsqboY4HQsn2wLALOKW<|RGrDXs7e{(IqBT-vhV*L+p-m8*{v z-zukur?&Gm@BWg~kHf4rmonD8BzGhC_x!Z*HUc#4aSj&)=_eR1I;5RT$jHlKodhJk zw^!2I3pk>e8jMG~?~lG7QBtDek!Z9`S5E*iN4?arSMoa;FX+6h6W~tSVoJlTly>e@ z2YEiEc##z!s=z(4%;d`WK1HKX@{mhsF}uWd0I?TR%4^1{C3jGs zh)?r}ZBM_3G9UB{=5K{)D)V1_J0k1kih`d~)8@~IIdo(2t|jK-7T6Se2^%Y+@H@eo zr}Dl>xqP%n0GD=HDT>OP<*6tw+tvpf4O+-`T-}fQ1!_fs0v;LG$9m?*QB86l>M8@% z{R}}Z_2g*an)x^|g2Y-Y!Ybc|jbyPRGgPYfj4({fvrR2B^P1Gqw_E*$+<+Ky&TH{3#{Ao4jp>w??`!*jbxnzH&=e;doKN7%$fw>7Hxs05V`JIUq^_}(< zp{mdO*J|5gYAp|nxaaFbSsgjDW#vGrRc(Hv#(s`-`Iu}`hn2^-!Q>jrvB$A5?-JE~ zekbAaEC>;Sa_WtToees+9E%9CG+#B9#r?ukL$3I_ zuo&&BNKrs?(cga0;FW#6PTK*>W~?=;>FwnoBfztzHom9?R-8|}*0Qsi*?cZcAX zQxY>~6-pm@`Jo2Jj9=Tz5s}BiO78CDnpFyO7~poGR3> zM6BSpUj@!$hyA4PvM%*0%2;_q?W7hIWD!dpLHa>w9yzOK9M9bK*haf!810FhBeo0( zD{yZRunQQnXGxOQB4ar$;mR@AJoe!)oyy_I8j`Jk0=s9NL_L|^F z5?xCHrg=Mt6q4imU3fbuEaDIE$a>Ua76#+$65=9?zdXvR>7utS@rz5n_YZl*Lx#V$ zJGm&SlF2y6U4G0N*-hQ5hoAHu9~x<4M2JNqz@{!MFuJRn)&E6$* zf6PWa{4%Of*n#!W*{S^c>6&r{#yAp_S~H+MVWBWikb!C=)Fo^C^RN{Y=e8VDs8+8R zl~q@!u3@O-I=!5jji5abX>7;P6^WUrdRl!pKuIcA6vpW;Wg#X3t-*=k3=k9-d^Q#R zqk?BORyR%k<2hR-%;h2Gj<6pT)XAPLbo}I0o|oLA zI6^h%NQL_k7@q1;t9kY7$2KQ$(r{is2wW00DO(EbZUJ-~318qO)2oFDe9OsZo0J}4 z-blc?R+P=}CDN~4elRD1o9g_LaTN1=IZpDcM7pe}X2or*E1~R$%9<5EZ)SvY!9C+* zjot|CjVQ$*G7M2t-M??dHuBZjH}}Xf>f{_#RRolF!cwfy{TA_rmUCbv(UiNiS=(K6Z^AVDOWs(3TF?&O#d@>Cf$Yf`x1cjJVJg) zXf{PVp{<7(k%N9ZAX}yofpo7^&f>%-L6{-$`f}BjpDa6lSk1^hGMUhe?~$-d43h%X zxu>D2%@45X<3tILG8=957%23>?p{%lLD>%`4_MX zX>T_>;Q_Oe%HRPL*An=qjQ`CCGA)bh~|Ueg;KqI#~D%$h5mLWE?G{p?kFj{YMjosRlU{%<=aF5=fY+(T4vz`mE$HH3Fna}JyD6ui8f zBGnxb^RS%ICHu z-~Uxx1xw*y+c{OicmW|N(O0^t)`{+i{A+#)JD{xw2U!ik8w)fR3NO}}lj=_EsSfT& z;Na-9{(gDTh~yD8s}p(auy$-c&ac)0-Aycutb$s3*b(LHyRQ8-!*5-z*5Tq{kRG)ov{r&qZ{gh>-!|ZaK2~|0R@x-vF@lupC zv7uy3v)m#}8ba^)_>KVtiWysT?x+lL`vHscjnWqB2qmjwc@Rx2NO^#IOkn3slUa2M zeLg=P8S6lfxbKK+tz$4|8!C$DK7OV+t$1Tt~)MVhVKSM%}k{%@Jsn*(c9a1=_Tpp za!`c@5Gu*}7b1oY+7U@%fn&s0ZKr5C<-`bNCLtG8O}0!I)J@`(swp___l+Li$C{TW zS;Ou`WQB-Qm{&r{5G^;<*!Js`t?%^7F9ONLfL%Gw(GC!!6f4GBT?t1!q?`Gltn%bj zQWF1rfkjK9bAl_bezlBXG2A-u0ITb9Y)8tVb{06Wrq$j&k8ma4!dh7(C1DQ^Vl}6a z5#ei@S2Ufrw#Kuo%#F+to$wo+#EvX4|Ll(x*CR7D?n}T^O((;9?25=B8x**NU& z)QQsoFq6o^`y>^L<~veAbKk)7TR-Oz7V+Uz6CV|N#k8X#UDOLuTz8tsxdO?*N;;`;5HM!g$>T^3#=X9cQ`H-}S)7$kH=FlFd(9DK=m3 zMp|j+dod@d(Tw_hM?E+CQ<(oS5MhWLw-ah`btRwEgbGK^hb3DdkBB?>e@ZKPEBW?L z4&r&!_)_vOP3N8iS=`*aQ;N1RSf@yxTU&fpZ-HOt+Ag9)x<#G-U7d<>!aWftz9Qq@ zMX68Xzx_F4M*Ks{e}qVp5weu6B-;rO!pn=-E1hM#v`}{^&2?a_7w2c08$liQKCDq3 zDaO26e(^GplTqpU{FM+Yop^wL_CrM%PqNf}!6b5y?ta)AlbSmsXF)}W;}tRdr{CFp zXX6An#@NWA$?{us`=I@nniV3~Uf9at-9rt0Y@BGXX}Ivx?5)N=EvB_cP7d8dZ_Uh? z?2));?ch}f)Fk7MEaKtXAL$FGat9+L1r zUY*r%Z0oJkK2R_Sdku*Wv2#;(NQddFjD9H>k5+PJD6K~QL$ExOMS-<*{)>;ieEhuY z>CQt_A{B9iiqeNNzNZhf=Vg5_!m4sE3r<0olbm+ZSAD`kCSc`ss7 zZW*|6H_ZJ9jYyjq0ifKO;9YA}BujUG`gLXh34`tFUFhb>Nxv9hVh;+M4V&eqV;|-w z$VrAOuqk!YIde(YcT$mg5=)r{PW}dkP|Pu%d8Sg}Gd23iPefh^y}X0au3j*oa)mM5nQJbWK}ZB=w{G_@TvF$0wx(Bbp0_;vey)iQwo<|?iHZc;GC#EG z5RA^B?)^yz{oVz`sHR5fpMpM6iFJjqtb^aucX4P=`8}4zFll5$`ItJm9fYZ7g+n#=1(k54ELE;e_hc>q zQL8I3fByacVfle3@HNPlk3cM5Ohb>|EimSr|D0+wF#Z?Zk E!!M{`W>vOmC$%nM zJu%BXXT87$=fgceAOHo*@^rNVaCm)qfBPr35ZjOOGAy=Z9 zlAn2wZ#;~WQf`8 z+z4^OT1-!VqlG9mUMaQTD>bRyfMtOpqtM%^t598iYFXGPwm^276WKx}9}v5dYY6be zVu8}o7SjToWeX~eXC#OB&~zp3oslo0h@4e5L(}#j02K?YEMB}&bQRid34H+3CnjFP zO~iE%st-|Q0lFdnwR4}Xitx8|^tb&R*}nu^6ELii+U*tEy6Eo${h$z*JY+|acU^bw zhv_<)O0Fblx&jWJsqabh#)C-pu}~umzweDnhoV3``I_6Cz9^vojuRNpQ?yMkOV5L3V5-k)72MsDHq2^}gDlr2CS4x6 zbWh$wmXmPNjS5@hFcCzKGQj3fLp&0-w>nfYutQ_I%J9)tgY8wXvkVWjN7qE<)Jz(( z*k710+)oYrBUr;apxk3U1jlV>X{<8g4B@mVvyH1!lLmV|OHHZ%5t3M+jeP1_hEocs7XjucnKEfL_$prBuNrUA-8B)=g)s zlCSr-E4braH-IRMLi&M!8#PDONKUz5|Aayo{yj-nxscm7eZNJ!>)Qi(rHti%;umH$ z%xO@;t7wPF#(Cy)26%@!cSwOIPS+|%FZQJtJCsprNVIFkV@-bc^2u$dlrud0qHIPm z=L9FmJ#ca``K}A&`J=8aAB};rnykX4+fgu`y`0)JD_|aseZ$V!hQLH+hAgu=xCLRv zZHJ4=7K?cP$pWG_WZCP;RWzM;1~=o9?`W0 z%>LS)<)JPUMb?uTFMOea>Nl>qx!{I!t1s4s_Szi_%!B{-uDy~0m+}7u7r|@wAK;=h zbU?&Gc9U`a^t5Tz+e+r9ZX~9-`DyjJ5-!9vhVojGQZo4in$Z0FsD@QG(>Ce|7y2Ie z2z8BD8IgD?>y96Ybtf^ zx-~#_V^V0EL|@&dM@nfi_ER0Z+>itQI&RNA3lBm%l5aOy%05TgcdD9_CiOFWSADvC z@=>y*@bT9Px#d2&?oCO@ZTMPZS~K-k0-O^^bnqD|#AxV2<_*qRDfCvLVR@HYYYk6A zrNWuo3I(w}NRXj==$ssW3u0bJ8pe9*j`qe=?j=$b% zR?9veY<`#;q3wv@WwKRLB=V+ww<{p{1w02ow1H3!dE^g$zI!OjW3suYnf2`w5Oj0C ztj0EhZ$#TQ$8Am%f`ni+!&*i3;|<1PLt8MX=7E+yfo2t8dw|hk?rjkZ(h-l^|Fg8 zQWLB5OcaXs(MDt}6Xf2WM2jR?4{nGTY9A6oNzLXtOp%%@H%YD@zeoPrGlhbZT(^Ns zccJ`LUvF7o(rw|3jMfI$!sFUUvc`=)+zwL~JB2={M&+J{@Cqfq_N6uMq4jI^IK3qi zl8h&^`>;SJYk_rb!^y!nh_Jdg8*(yojifqhiqc@|pfvhLI{jx#BR3`4sM8tsqug?U zar@vMs1bE}eAS=9FoO=$EVoqH*z!Sg!**by8pTs&mhzLrLBSyz_MoeM4&wwECONj9 z474X}F?;rpqdZh+>LWqv^hm1!l$Vqt8 zA9v!MZB|VA57pBmg6#I#vUT);ZBCeuflHV2Io_d6t-vkebemIZ?D^g zPm-I-gB%Lze|uGqk1|ozp>urh7(a@@VEH`h7y4&~e}5TqnXBZ0iBOJ}KQgu%Da!x* zzyB{{X^Q;G&5rt+rgsjxn#UEFgX7Dzr(?4?Gre1Zvf)SOkr-MTzN#5PN}R^FJ&pF6 z;Knk~&3CY?CKPOc_`KfiOSQ>T49lbx$6R?`@0^Yf>y!RbMe%LC8w^(Khsgd`$mjin z%z~>D&(d`d#Lmk9(BESQ{k=+?iNYMirAAGXG>HckJ)w#qRe}TaBN6>-Z#053yWY}e zpNwiFeYPv4n7iW)Jdl|sQHPBy&U<5)rvB> zv(zTD%Nk;@|A(I+t6r0Rad$(Ldnj`ZLpBOivF>3#ObkISj6(epdM{l`=Pe}a^X1b}*K#LaU|0S_>qERc}mZLd+N!vBc4{vST95Np&p zrstsa_v`ZiVjTbe{()-|pbt8TFs#=7d#(Q`Z~1@ux3?59)1}7Z=S7CKyOh%jQAOH? zhe5dp9tK2F0{;d+L-YRyeENoJ{{MTRfwYl|QDoM&oMfRMFE8l81-w8n9jBw8`2{%g75_gXvEJdmn*)AzR< z<~NwrJ6`}U{GrVM%#N~utxjcxe_#u^;vu~DM#~QuxU{*`OS$DWf_K&(D7$Z{+$G1c zI4hsCJ11%WD7ycZgV~4`CNV5iGw1E}S141=t?_su`G%YluFPLv)MA;#!OCxgrAGGI z&r_cQY4S~1FrNIq@HtCEZ1ddJ=}lS9!$rs>z|x%>J+GE6az7eV@r9M!cBa^Y?mu0hZqRopJR$r}JIvt6FR8vwFB2oR*rB{!=e6 z&zs_tK9Bzys!H9^pM7_qzu?Z=1s={Gz-~^i*JO+pgUyDur}3|6HXPV!vs9oeQ>LKz zwE4MWIxBDve9ioHsN)2nhyo=!-j3P+!vOXKRH>ka|49*+e>)h}7VZUn%BzkAe#9JC zm?q;}usxGtMW7ssD~O@=Urb)XRVV9bGVS*q!QCFS4usc5%%8b+q5%(`42*(p;dQ*A zb)pGb-!-9tf@GL1Kvuego?0JhETmMwG90dU_=XM3dTioQlw!LxTkk%mub%Nzy?4q! zR}cVV*(Vv7YaH+MA>!g!pzH4K*aRAzy6i*a<@x%7-Dp~!1zcxYMxXX&eiY!lEIFOx|mCcns40r#NZMDA*bs)LBKYPp~5m9#j`w}2t(rCpjmk#&2F+%q?ONpO$2Gzk8KImm0TG!bRKRz&B?PniWm2`8fK{=A+A_RUREpZo0@n9WqD82j&Zhs073zs*pb*`CohcUXq z(#*Zzt~1F$F(&Aos9WM_1)N_YzLMML8c3#S@DI$|FK19-;X zo>d6!GuFU9V>#mP-6MGmtmAO*jdyg~yNh({Z6K2+N!ho^UN|jkV|9)U;HldscYxh1 z>s|Q)^7Hv!ui`Po2Q)eB3Xjtb?_TEbT}C&2yz#A8Hp=|_k@LE>$w`KGQND} zVB8AI*qFe88!Qah4vY77vKjB%WcgMZ^vbcq9GRmOZ(jX8o+vsBCigSOK*!|&w!ynaD3$)|^l_yxM7yO?Yf9~@9D>>!S7xIgk_B<(!< zxl8gnxtCL3qSsvBSQK@jG48Vu>$v-YU;|m#GhC8m))}l%p0mqD|JpvWH}i;OrrZC%iVElKzEfX(*_JC zSrTX-80Q#pzO95YtE1kuOnB_fnqVbc-f_CG#5IAtb8?~MAcGvZ%@9BMmF>^^Y(!~o zcg4&Cz?O~2my@z&BK+?#mo3_^(a#(>qVm}s$t&`#Tj%m4o76ig`)})8qkiOx>L(fJ z>%Y_w;^wJ=`b0-r?lRLbMzA#<+g%Q$pAM~VZ4J!IilKL!8X9*odsi9&_kEIc;Xi+{ z819bU!k;eV-hn3l0a}%~3|)(Nc0#&Vn6W_{GS;)c}~MlpvgerH#DGsx&iKb@d=#juS699 zVPbWc)9fZP&7J;Og|dDzjFF?;=T&p@ym3ERi1y_iX*OBq#Yz60IwvFfszg&jXcSuA z{-`BgxRhQ$?9q-K<1NQzdd_6!%QA3K6+c8hHwa!KQtg=@{B66v@%?>TWK^3B2H?{D z$^D-Lv4HNHZn~{WxU<)TDKBu~X8iF6KH2fW#A0$lzlY6z_b#|PnFFx$n~=p4WvXXh zdF@h4n|CXNI;qNdT<+x`bn)#BvC`HM8Dg!}=jr z@Gy$%v>D2h#v>aa@%6D`e?E9j{M-GAgNDL~X_Mnj0~&l$3K9gdAGj*WKgX9w(Mc?2b-#nUyY5ENB zSFnEFfyqBGKC#M~JgN`#9Y#!8Trf}Qyk}gj2W5bEGq5iiDeK9PenzxXDq`IMDd4o) zLdLxUl5y$bu57vk3iJSD+kx1{SN=THB?T59lVc;+V_6+9vM%{|7v- zdJhY_a-BVmi@MILP3{UZc?diQj~QpllTKlO3Tcb&NhxsnZ5n>N(f#}STW&Uz_K@l; z*CCV2Rg{{XFldCx+;WJhWu)w}w1rLZAx#@&Q1Hueg0vZcW6zS;lo<=8N1KKH@QR|i z8s(O}S?0FBX1#q+JPKmN6nqAjpG#4OrF5ZOS}taiSr^wpB!9^BzGT;9gg~ zZPSxh2LuSv_?0rOBrJ?cW$~w$@w>Fr&2ny}9>eRc_B!r6dIy%!AZ%>q0U*y$gW8jq zom>k`OV9fzxfpcGU(Q&HEHOgsu6Lq+2jP=?!eC=?XKS7mepq9c#L@38i5XAqHOCLV z2Mr_sMSxzDij3M=367`)s#oy=6BJ%Mm*e@W39DUsnpGWbZ3{dP$r8!=UJ#M<>&_#< zsd!u&nnASrhLWQ%Xn0=aAjpD7R+*qL%)f{nVbd|5(8~?iM>omb0pYWvm1q(ssgd{- ziD#~&Yuc%mbcem}F77kedRv)!x8$62ZCpFAP#6r*uwqgU{{6acEen{E`c!?yl*j%3 zx_YsmJ9hh|o`0uAC#M`;5K0q~>U(gR>K@!HP$m?cuEfyzjbjtxa@zBxV6(XMECd5w8vVg!m zpu{q?xxAj0p-%2%!?UY~CR4BN%U(R{nimp$tXn4LX!LADure%e;JoqVkHhF;sHwGj zEih9%@nZ{cr&uM3dQnPR0CGbWM8lOK+rH++CL7POfg`|0-X&_`X3(KXj*YzcFOfNN zGtVHd$a9t)0kdi8pNoFs`OqS=4*JwDRS7QvPVzOj1fl0kg&w0%WZ7j;4mM`RJZemP zD~xX~w;ipNg`{T!7fA;WH44wfh3`Q|SGX9=c_3+e)6CSz?pJaaqDolP4PI*K3gJTz zOIm_d@H~};lx*3cj}^y*aSF-$%=%tGrOvmcPz$RgECN{~Q>bgCXP)ns*VsG@;R|^% zQc6Jf*0GJ!nZ2nOQHCw)2N}@cWZAVNhLp1np%YTM$Cy=;X_7aMsdx_o!G|LGsh!M0 z{??d7ERBzh{g{^Sod`nHzAw-?=vk4Rn{~73a9tfuv{bhnz5!992S9R*=fB_-adq$# zUO%O31XTA#1NYDjc;#zvh4DkUU^XK(a&#h!isdz3_oBU`6O%;=PgirKF<_!y`e_ah zKcyUJblMB~s*@~vto!oxp3PQ37O>NQyj35R1|t+q)`vA47Z|fXkv)$+meTSIsV7}4 z1F!IMW;N+D&XI5z6^o1KZ4S?5CUAznCX|Q})Ry{6TYC2Pnk_Nmvo0YdZX`pn$%NI6 zkZjpc(<4$2=W^Q09DUx1dwV4=C>l^Vpi492MWJI#p5;1hC{&qGsVbILWY!%n z-4vm?CW2D_O}b4+MXa~?Wv#SLa$n+zPvJ<7^}O%Tf^P^V%8x2eW1R0ayoWxkNZ_^q zYKqbLe%rw<3kM=X=l26^4Jt>9gojecq7!-pmur$OqKB4uKBX=nb~X>41UwJ-V=0|v z%#iIQ*T8A$`sAW$?Y_1s7xI-ngc$ENbR$%Ca8IejWHhsq(FbC$IIiEgZY*ouQo49I zdFi`4eVKJm`Nz_UtdCMY2=mqkI;&kf7xnC2u$vs-dDI8EW$~M2^hqe9Bd^n7zwGK{ z$o27&l=HX~CTbt`MdIkuOuq!b$m)#h+>DEKZSSem__MB;me(i|t=OtyjUa9a&9ymu^MqmT0J#QBS8hWI= zM(s_KPj{U=N($|-c8*C{OGewgEXp$YVG%8=UUdh1JDtSdPJgzrAxNj1-rdDF8TD|& z*e0d)+x{piONn}y5*dMkhiMLnJ5m4YLH!s`y}vDkzS#Bt++g?N-PR2;wbI_Cpm5(> z`(@>R;7q6C`co{F<4bF<_7yEUQojdm8EoGncTHJ?^6_qx*zE$5oNa_Y<71kGXl>2p zypiygB|QgCk7E<+XCbR_y{Nn@;wYd`(YB)&_FVm1miHA0-zaBa)BG!s5&O_8<*rIv zeAwRWbJ+Cn6TXrxYYiDAGxq@da^KE?HX3ccy-JZzIrEZug9ygcdBJP$W8TehF6C1E z&ZYsS(tO*{bRutmHPoC`H+vINzPU$Razn+8nv*^ish zpU47HS7q+Jw(PHRx`m;Ri_Ob}e7O>$5G+El`I6B;*DC-gATx*)I)zgToWIAp$9Zvu zFM#E4)A;VARmhp%$h~+3LA{k`lnCH9Wthy6&|Kf73Rdx}izdlU@wUw!+(V)+N(m7_ zAeun2bRz?552!@ps+QX4y`M>E3`MJMqtel`S#}VIC@Y<;eLY%V->n#h(-iU_63NG) zHn$$4FU!MyJZO2B3^RIs%OcqL({4ErJ2>qX))<^^E!r^zaLV>5OHV^tSCJKEie3f- z;))P4d*cm?$HW?b(yk#zqz6hJQ!*n8#JFtTKfD!hmJbIT8FIZXwbPUEA>Urv3dJ$o zlUus+nBeVDBPo@3mc9JFv_vU;GPDboochesC*E(op7OzTYIY!eGpc>)D2rG68V6K% znF3Ad1oLZ~&&o6|_+hC1i$+Zk`ic!ye3dy(pK>wn6GP!n*=cj z-I2C5(TGLnv@f*I1&f#|ORhzcJ>u$Od~vC6aRS`fM4vTQ;@=#4tF8wQEe+((r!3Kf zQ2XQR76ajiw6Wv!YA8~rA3IhK!+NX+UJ!8(nGU6MiFrs19@~a{u%t>P%?sWDD786S z>;5JK(c{7yq@+fr>T~2zN;Us3mRsiH8sF@QNdC%PmE6)aEvx1=%w}w!S{r*eeEOMo zlib@(u1Cqa3EsZZ#y&!+=}DXan}Di^k2E-$$boWT5ExCBkRtlNSuZ-04KTgYFAMjY zP`-meC__jzEgF^*ufcw@bp>CI40pc;HP1!Ql20MH7>41E3sy{Odiy@d@ZfM*h@Wv8 zTEKISmPxcn+!_`GTAev=CLm&0;lMiUU_3!U1WcC_D2?zZag(5Pc4xn5o-eN z>@Sj~yqqi~@ktM6N0Q4v{V4N*a$71|hHBqVd%1UoE;opS#el|+(&_1l9!@avCVMRY z?Hrb}I;)!H21HgAeVc&ZUS_ zx>EL5y{vI<)NZJ1I;@HXF>LpPv3)#R{Jbw+nF0@|>lKUI$Y(qbm`AW0jS1Qbs-p=4 zHc9Bcf0XRwmA~n7tBN!wV9!b8)@mU4R*hK zVY0e=eM?MG>Y@137IF&mzN0Nl-yt9)mFv&=oZR8Xey&@1^~j4$fCJT3ATlvE(S}kI z9qoL=Bfv~FmtH!dVfc!2qNgss!)v_KXdFoejc=b;n{E65D0}O;sJnLUTLtMDLQ-OA z$)Q2IJ4FHM5|9!QX_W3pKp1H-Na;qp2LS~H1jzwuMsh@-HQsyQ@80je_x-%@zv}0@ zX6CnkYn|&nkK=nl#+PCVwt3JA;1+G#c_67VyJDR?z2vRgp*D;3msk!Ww#_Nit3`mi z{D<9hpIB7=*{tFwdn@)nc1++SV#I8-Xv!AnR#9{Ot695Fog-NNoMBw62CVD{AY-))IZ+059pd*0x~ z`{hcMN%b-ioO~u|Od9AXq)nfH+r%LKYLG*8&ZjiKP3=^Efvd`)z6(jiF9EO3_gZCq zi$%=pIWpR=BFT|1%O!k+R0~?f1Rnf1ZnxHK_49C!tku!%$*&9*zI>7vQ>kQr?waMA zj4FC6@Z6@vRxrkU+46OyH3<}3kaF|HaT(W9QN&h*vCP{0WuB-13+QJkPndG7OQj}_ zKo6T*?ER&+Nf#xFwu#m($)0Lk;(evX!&*pE0x3V&g(Ab7`&>77;E@u@8zPua7_3=R zrZ^XNCNa2737k`A=@X;Y zIdri5sN$X<8{rnaSwpNl)}TvkMD~YetUbz~&~xkvd=JN$PTkMu7n5!528olMi}SFT zeKqF)al9Bw!>phQ!Sp05i6BtK7d?Gn*Vf+d%yEWlhK4d}<}LH`xn?a%+ZvB+a2<+v z;=zCcUF5ya%SYenza8%dq}E$O2bhOaU=xODVq*pRN6cwHol!O~Gj1OW&K?#)r!-}; zxLBUNz#>=K+}!yS)YTL`V%hVRW1HqDrlO?p=h<=1hFB2TUbi{0XL!o)LYpaXSIKD~ znBfV(|Ecy-ja&q6QcItIrm&ABIdcC}ZCxPOmUDN^7D?bMMES$UcA7C|0B?=o*xX~Z zre;lg)HLF)NW~TA#DI4M!E>F;=^JHtb+bLHP=VkE>J_x?omSNg1cNf8^JiKeYSd_H zxP2#%pw2X>DY88|@A*%(+Y`h*7J zZTFe4@Qytkm&uXUX&pp2BPjusGMM8Z$HdBT1%^3~|{ zL}FH@oAXA>o0L=&w$-nR#%bd^+5K&-ZVVRH1wl(AL0D7ipHxqm4WKRGQVb(t?BWGH z{mh8zfa$V+l2Yn*p)^t{dc(LN8!<55uhJq>PEC^D39x8&^Wi%pbR)EU-^ldMcX8DG zVd)(<9>x*BQ}U=Zn5%oI=UHIH147hN-9!m^Cp-b=qWCFWQ;@!SJQAijpO)x}jire< z0I}(aSAo~f)NDc!w<>Ql z3N|ALj@CO#^td)BT6e|FZ`7uo&O0*O!xBIh38Oh)j(SJBdAVkY*pTKI4@zroo)CJ* zmG!${>MObMDQ(*(gyBUep(gBy2K0p4igzdM7Knb3gFy%=w1^^09hrAUN5UlpM0!Ha zCJvZ0J7-qD=cFgo@M2f9O*8{*0^wH+NBxmGBPK2i18x?Z9j6)4&sFKe#)I|jEO;Er zz|@BO#8-(p((2`Qzg7emo0VAzq@D5?Z6;dt7HM#7z7I&wZ`LD>J4sm(Rc@Z!1QJ-Lz3*Vfl@$(i4U9yG zc}e8r8}df=*Rmugyvq1RJrP0S@+>N3s(i``)=5$LaUKZ|Ek5{CvfTVSgx~F3*#n34 zTkpilP$*!3HDb3}=Aa`gd>^j?ca#jgkPx4A@7X24q{VV0attT)Iv&3ta$whKn3Not zWVT$g^Q5LyW1{x-%J5)PcA^&?WRPi*;4~iuddryUKW|cvuE1(OzzXj&oraF~M#zlO zjeK2RxEL{4(<9^9rzP#Jv;HiLxPt%bRrH~*eRK|9mgCnY6Kw1V`cWCq=HGypbygVv zbodO6>f`}Pu%qOgQ(hDDTEg8=v8UV9gTHQf;E)(}8>#NA1?^Qgj)B+4hYiKrCnju|_-UAPje{;$vQdY?2O}ZCICqC0onDfh5mDy>I$8T-&a)f@jFcM!6p>JC>VxJ8_O~U$zx1}{o zcs_F@6wa(!#umtZ&+3{#@i0nsYBWo4X&gChfsGYjU;=uwn7TLBqQ8BUWkww)&? zZRvRq--I+<)X;ZH(b?6qmux$5(iy08*X6vG#j5n))k_&dyI@3Sq`JvNR&XcDdk3rE zWXv}TTJ%l}sY^kolOq#1@+i!ouf?F6ZzDm0M1%7%TwFZI7Ii=g<5qn_ z*W=HniCOr+z``$an?e4KBN&PXcZll|MKRutxo5>#4jRkQ%|s5KEDfLOM~2@@UR^ww zO-7aUT`X3Trj~YyPkgCbTOifgxpOePJyF^rmfoU7I(pT9;>)Bt*z~yPqcTvTT$Dxr z?$pO-&I1c8M4{)JoxjJ;Y6X%M2)6lyL+vWkcciP*yj@k*gzxVkmyV-yZmx+?zk)f~ zKk)jRJipKEs@X0K)-+UC43#ipwXXI1l#s4&hwoX zk^ihf33bocN7jgTb7y4dLu#E%3dxb4B`FNX0wDYpq0dGvrm+mXfoSvSSAZ6^DH|wO za>rIl7Ref!W(x_D-C5eo%xbg>CP$iXy3k~5;L!scx|AyF4tCvXaN3!Mcwe64mMu$A zbChXB^hP^FCeCoQtsKv`j#OP{YLrB>P{L22GBA60pXID!rz5!Bnsq7Ux`J>U-sLlDwO_-umwQiGxp@@f4LGkx@q#6L{grEErD81p76q^7dc1c+xk6&*|Q)pi2V>70w3*4k_A`;9V$p8HW9UK;JpjS*EW z^{}bzSnu*Njxq79cG$aQ{XGM_+>@A3uaqA%XVH*nalcqjf0HEV_dZ=J$^5-ovUr>$ z5`+A6Mxjiz6Q&~m*)3A!Jpz!`_< z5(uZxwXpi?Qq!(S$DJSGz>c^R?!-{S&DEs8M+`va9VF@19sr*xu6b_;_Y$50=h6YC zdM=^Do{M(dhCL{nYp1v~rXn7ba$mU0)Q-)m43Y(cboG!Hecwh3q&@>qJ`2&4+!Us}vY84l7 zoh3J{U0?<#E>FbQ1W_jZv?Z{w?OWX0B}!?6{t5gT z057KQK8l6xEvCnu4%}YhjocUKJx;B@YPfybpx^#e5_9{L`g{AE0FJd}#Nvhsn6jw7 zo?OY5AdRy2Xna!k6n$XzBgl8N>J0`fz`u5oLRHt5$k3q)uVzRObaQhsTwRoL8rb-# zDrnn5GXa7G(tW3H4gCb;qd7l+wdJ9r&LHIT~=8?s)aM7uP3|dkK;Pq4=+y!&LXG-S1Ms%qQso zr6?vwalzqbw&&G)=7!RdwZJaqBiBYRC8;}Ct!>ofo{dPF5S2y;wQdSr7d=x948KOWl6$1&mSOjq*c87r}hvvX%if?eQAVK zM!!TkI}$fQ!@?a*S@A*;i&vYut=n$L!OOUw?ul>DWl!)ZW~E@fR_)0?b0JMe1ngFf z$j(_CUp?k^7$Z52oQ+ec@lEK5cy`k>)h0`4^vhqpVv)q#H(;&!6zW{`X=J@O%JoTP zbDwoa1y2);YS8Ql;bh5f=CC{K-yr9hON1L$c&3z@Cs5AKN-&WfMF~59lGrLq*AD#B70p%b*ALjifl$y?$PJZ9XPzLB?P$3T*q`jeMFsLLp@J{eV0eL>g9w!Jij z265~nm`=ucz;kvVn!;JKeP5cz$k;%B&T%UHHXd1N#5WP&iee37cW^!vnC7O*re{dJ z`8Dul0>7%ulM&f?;Lo{533~b4Wf=)lb;unvEjTVQ45NxsAdOI_%>k#r8v|&d95)y| z|LZ}KH^dARnKP3mtlGQvUv+K#_IYxu1J_cac-48rA-0>9hQGpOpSZu=3tbWTps)20U*^p zR+K5bRc^xnIi9fV_?qg-DY_tvC$ zT`;|gR`KJI8OeiUtKi*g(}U_Qs~G#pKH7VB*Xl6Pd1Oxl0jL9Lm~0{<`e<*cRnp7u zOJ1D9MY{C<*@$C72rBn~PZFL3vSNpy539~Usd$lC!@VCUOvD(t&@re|dg=yCh68yn zW7!X7WFS!3>=03d8y=s?o(w<${If|>FiD2I?DJB=JE@+BZ%NtW#H4#+pCj(kxLqZ4*Ear%%ViOxZa`lI#I zldRj{Y3CV#ei{s9DkTd;N@BP1K2P3}*dGGUe=J z;tdj?rlrlGT;!TG)m~(nKG4^U4DQB8m`x-CAx&uH3_~ez%`UDj6gd&39zj z5OtSMZqf-*c_yhz+PMRHR-w)kfMn|+Y}tO;B0HT1@q$CCZ!O{LNgqWxYrzZHLO`{^ zDo_S7{7KQ%HJpE&(|I6j$6}(@2Sn%4>g~ax%HDt`^Vr|)T%U44jC(_1&*1_@VGDwi zs*j_O+COVsD+4_t_b14Sc*`!q99HuLRSI4n3y-mytFTiTzuVI4-$tJ+y(M>lIM7GX z?9|-t8 zGLXr!q@XzhI%i7ijD~Beqw0eCEkBC1jr}Qm#1|D8^bo6}wxQuS)CCR`hbc zFlB}QIYJQZyJYr#Z}UXA3#`Jur3-QI*Qo)wSQc6CoK!nJzIAa5@s;UVAlo<%Ef(_>)KDHpxVNso5+cFI(U+)8!b*@Sj9d-w&B;6hA@hSR_Fa2{dcgzQ zgd?Ca-tft@8dHUToDY{TW<_NAZu8Xn{xU6M+!gx$%vmt7)}NCJWTm2T{+MJ|Sa}=N z8WMr`&sq3Y!&+=@tzC8dp0n&hAXGb0<;zI>1h;1%HA`^8byhG=jdoISMnuNO6Ip(a zU`E#VcQYQxKc`@%(CaRsCVk?GxA9S%RysP&8RS?+MX*jtF;+(G@6A?QnF1nUf0RCQ znJbVn_@_a!G-n^r3VsVVv%z|i7Ri$u)$KTzTgSII=3~fMy{O6|o#wXTakhA#B)?A0 ztb&dr@h20CG98a9uHQ=_$tIQV*77DM*&tdj4{4W-IgyTQSSt0^^% zHP}Q$&vo35r68#fIwtXS>o*yTxHh1YTUdBCfYpe%er=729J?oAr6=+OPtMLaTPEH< zn$Qp3;`pYgztIQuzi8S_W*F&OIu7U2PNj&_OP^d#)jne**DZ zs!2D-2?)fl$PPGXXgfzu!#g5_5EbmZXBD&wxe~pDYnMe zSxw*Bt7yYN|auZMy7qpnWxgB*emZj}(f?R+-WmyZzGI$j_iZLVNPi z#DQXgW`ba%=2*>($hztzKYR0Rz ztQEZs#o3(!rn}ek)_BP>KrQ0vOyL~vMA0WjqSpO6SoYMo^Zt9Z%Zy;*0nd#%`86;& z@FoLS=<2OGtw(!7nw69KM5}O8qlWhxEep4yJa@lDd?8Gy@_wT^ID7E2Y;<+_I=Tup zpFCJx;%At_9)NUHBrOb5`pU$?6@JJsA4|htg`0pT8sX3Q%w?+2l~D(%U8?Vr2Cro` zaVaSDb-#+Y&^PzGRvV91e^T`{Uu8vg$a8jW`bx%L1lMn8lI%Y9;nlZ;5aU6Y*T_2V zjAm_N{@qeelW5brNBDg=7-jKF7#NQY!W#G|IPl^v>mG$}S<0+-JewlY|vVsSqg9AH=0msRk0QCd=!i8o}j z<$Rpbc2LSdpP=(Y3p@I)=i{#M+M&%SNJm-9$crbMsKD8^*t3=lCD*8p`^1^cO&(Uo z8MUdTMV+JyQDpHR$=;pO$MHVbS)g1g{3XAwyR0h{SrBzqy{B!ZhSKL?=|&&;Wc!DG zAR|yOF>$$Ha}d0jn33CH^~!D+#g)_>adNxbYUo2ynnNefsOrk#SC-u|$R@*qU6lcD z!l8bZS$O7KvEmnO%IzK>`usb+1hISG!s581^fwnN8>tJ}*mqkJhrj`__F-)9<0mfd zRhAo|SE)t&nW_2_UIbV7G=6w=GnbrftoMMVV|~pB=d*i=h|b6ZuYm@fobF>1s(;2>E%KuPj{wUT98uPch%5ivp;`w|7e$4;`1JSGUPr!Xm zjA22Wmhx;0#-M+cAqhZsb(X@$Mc9UEZO+;DEy(kw{4f^?+0AgvA%kVttuwgwLh*bo zNh)Oo1nG$pMP;+>T^mUAB;UBmOO|+}Ek2?%$1pSdJLe?tUc!ee2N3l6aXuC_IRPLg zYGlkpj~dU3r=JC(b8$<@emKBvWa^|b<>kw7C9Nth?@T@z>G~{RnhFn!bo%+lH1mJ)XsX*@^n#JA)fLz9&M8i!~>tju5<@inBJ?v&$t_s*#&Pg zwylI&j=bpZl;53{k)7!5V`j0+P<*Oi5Ufaos~0zJRC`c5jG4`N&pcrX)o0vM)lc0U zU4sX#dJZhIIkI5$sj71IFtcovZsMTC;v^UBw&QbVd?ux-+A9q)K#bcu#i>w@(aI@*W!i4wWxruvvZSfL!Of21Gb$^ z46IX!k_JIt@p_kU7p*b#Q}Jj`@>KXT>{(sY!(yDvh=%YhHr_tRL;8}9k63eMpP_UF zmTojBU(IvdDL{RN=sirWBQ*${JD9WU4n@HX9u)Oq&a4^-rNy;76Bo%RukLN%jDTRlZ}j2(s*Z^BaL|R=9Y!Rl>c~KAE-*(iDrUwDR=x+KO5xlF4g$BB=m2|wKC&WnhwysVPmY_qbVmlNIR`(aFrUQ_!qw0C&F|B6=0ABG z;ExON&gBcbK?B{+4Dn0zZkP0o8hSQIi0WingNkTTrXJH!6z!F#e~n$8y-U_N)RYJpMU(_U2_m;cTy`Hsn)4rYB=wgD8IWemk%46*5; z;D0XCqkCnQj`vm1sqO8drx-8y$_Rc#u0X7=K3?aLyRF!{0Kx~~ zx`x(V1fkCkJYs~s49RORfF)6+1!3y>4}0u-FOlot9nP~@-+CR=a_lUsaxGDCn_BVO3%rP409Tt3fzuyX*M(P6^T!>Ij4+KsbgYrmg=ir3$1`$f~a^=XLRKJ|f{ z+21|ut62Ra$7q&%`Yo;Y=l2MKl=FY#V*J-1@}K{t0LrZ2*mn`9+u<;Cm|95F2)}sw zG{oOk>0^`YkLI_3bZf1@?-!oD`@0vqnt%O#pXYyaa{ld?kq>71v=xK;Q8r%se*A7M z%(d0N)5xe&ai>fDL1PZWL&*fo=I)qNshd!R7(2)YYlvS81>(}6z>1*QaCyvCYJ&q1I^^h$D$+xKsMp*9Us6B9^8{dES@@sEWrAjs~&(zcH z8{5BrSWLNgC$yg*ejM>>9R)@3gp3(e;XG6kgA;)8VKV8S0~7Jr&ntj0mkEL!nhRPT zgPkzJ^I(=cgxT3JHf><)99iv;-vDl&R3J3B$n)Q%Mg3_|_zePxhcI{n9^p)S~sN;QD?~Bq7H19VKmh zbq-wXboL8V59SBq9t(|?7&z4wNMOJFg)2j1&^kK!rX+}VL}q z88>L>~hK^c{_Fl za94kWll6lu{_^)2Zx$}=ifc#tdNhB4t9Ihdr1+vES&|eVm)3DM5zrnqGWp753k>hy zX9v;bN|x4Fs)qkJ`1QYUUTILw*71dJVffhn>Tw~=<1o3jRpTD2 zF78WtNpD;7=gZ(x+Vqm)V>*Gg8vVUr?R&ExLw674EO$EC`uyX+E^97$tjc%~nJzt^ z?^_h7BDxKYza*Ww%3n4PkyXgygG0-?+lGr0eIY|WJbRsfrt{B#X)lrK6Rh5zm;*n| zm(Om1ZgLD#;zw$1ddL3k07uxuEmPopH#iMB>ZjgZ_B-7JPMoQ7z-0^iv&wF}4~8ZT461Wx#^W)O~%I zRu2_RF}qv%j)13I3)2RJ`^=bbjz+v1^!wg%wj_+Eu-pkD4y8|L!XC zW_r~y9b5mt%&q)^`WfdR=3DoVE-bVZ;0Lv%{EBZs0fMe_nO;6Wu(7|yfU-ZgfzBhy z%N+sV$t9+`pf;;!GzE=;ioK&)DLG1V8(Ynl@E9}sqP8$2whF&r-YWZI{E+zA4d7$; zIC#+*G7l!Q+ld<&Zyo$M79c-#R;jdfTsFiEAexlh6Jn9CWVF&WQv*R zlEL0WQx>2SEI?@dE=>jQEvHwRkK9{rHxDQ(V|1bSw6xrco_z#hi&+?3KSGc$`tDRQg;crPzN(1|8925c1;E|o@ROhfVj)t+MYH<;YKonAyAbjfAS z-X$Sa*BBZG1P9~8`aTq8cqGWt$c4>C1V*d(6xe{yc%jNyAu0h&*GpdQQ?Tur(`@Bm z?K(CbbEF$*w-150F%#^FDp3K?dhZD9Vhq96-vFW?SLuhe^~Y%PtbRtqe1+)-aki3oIWK4n0oI*8Vrowc9^%Q*Q41mh|EU5Yw90e3=F3f|X8&UW; zd_N~X6)KfFPUKAiiqkZemsR@l3dVMBQ;E;8YX*=v|QkjYb8we>U$TFs)bNuq#;+h{*|fXZ$4DE|{4Z+vNgO z2u@REbN&iloxtCpdiBGbp)t_4CY9PM=tC@x(c2Wm(2HT|ovG4zqx<)VLCr9h(>s4F zYpEaMyGeM3#UXbwtT%Sq@5i1t2`D{wmxSh+8{xk!lK=i;Xg$XHD9^7B7dMkud(cp6 z@PNf4zsnTU;``MG-i1XslJrs;@zLO>wcIm}op(&L+eil)+#$GI($H1=mwLU@=^atc zWiEqNX}a8xBArskx&@cgeyJz zbU^P~6AI-Yt|JoMAz;JxQ+V5PG(hk5)gjBDi3;#by~grA2WX@463FqM5-}DH{b+Ps z7`bI^ZgcEAh%fOXnnxC&9`7S2BR;AiE^?UIiFdT#>$E;p$&F-gpG2ByrqJlLG_S~?S`h3iCqGD#(*+h z*ck6QNjJgKZFWp65R^L%8f~%%sFb&V4*p!pq2TP;s7}h`YpQ&ZIuI)EyuL$|o#HF) zs^^WSR00J-E7#MY8h%BbXj;b%3eV1q&D`9Uz5s>{@W?HJqJc3z=O)m3{sKslOfCKv z2lR=_cs$?nJXOj@01hcoM)KQ~PFR$N2jt{wm`kPx;QW4NEp z>iu|ma|P?0>^#7izm6E$|;)oc}lUeY45CSxmQF#3yudQ8gFBQBD zEg?i<_m8IgCmZuAE|ak^90XrB>gCH0C{f)I8|jq=Lej7-u@Z6A6uDzGQ%Lh|?=iu$ zEjEz&UM8k_)0@t49~Ap!m-rr5(st0MBW{k72oFzujiDbPgM;%6C$nxe5v}bKd%*Q5 ziUcyEki!u$8qU99*b9F_6sHA}KM{cyy~$oG$-$I)`Xx`WE~lfCC-CLtTJCJ81; z_X|@oAC$m@lUKCfp|DuavM0G^)ANrt4jHQPrzYvQ<&i&3i_C$j%Z#{I7g zR-O(c>?)vQLqOY%8@8FXF5TVoTx-2vRiHmN7#cJPkpZ(c@@LTb)S{j6GdZ&d4Lfi& zCgVA?;eBoS7)ZqY-mlcTP&Ydmq8p2P;%9!)1r!k$jG&ZIY_05;T?>~W70Wx^a0bm_ z=x6Swdaj;Id3OkZQ*Et~P{s#Rp#5*Ts5ojIP@;fVh*|b{MwBEgSjTbYxIPG&>{X~`Iw z4}0waXj0hTJbTc8Mv^H=j<5SiCf2ZC^YapYfVCrtn2Q<jxpn;k&`}BY(!HL z3Bus=y3$9=!j9<#5t4n9H@Y<=aKtO5y)!(ow+u}Pj(xP71y-Ix$Qs}^iLQ+ixZK^a zh4p6RdicI3DffPNc~U>EE4(g&!L!g}-7=FmB-O^-?sTwwp&YpQyl57DHO<+Fqvj z+>waa#4S;0Rv%s-Wjbk2wSfr3@r|TtE1IurTtP!V?F>g%?A1UaB}OBEC~mnVCg+iJ!P*`^{l@KBH@wL3F2QlxhiG`Rcptpk64eefi7uQm$ zQT(hhr*KzjmT;K(085~WNQ>)OSo%@8WEJ7X(giYKpf{RSeD4J|32LU_Z1Gh5q7a|( z0BkpE8@o%OKj7tZb7_+1OP|J_%a=ZM#Y{w%hY|xQ2`*_R^ihc#M%OImsj43N(|b;M zUB;0~?f3bh+z6(Vd`6qk{LkeiY zg%Nspw@dU{DH6zGC6@rv6XE|asMi1Wo>%hMsr2~2cv=}Zx2e3#)U&dFKd@i@b^G08 z3kprj?bF4?Dc8vy{ryuUkj2xUHY|7Nl91X-XC6LOS@{ug^yrVGf2O`Wn5{(hwrAlh zBo^IPC}jLe0H|3MJ#<)c;Hvs6Wza8ol~~=xTb)MHg<2~J+;6@^%u@&>1d@+w8gXvW zutG*8v(M&cZmymHdgc3cIdOa(XMFmz4lW@94VhZ$`0F?OI0{q4vF~mu`YG;yXP~3Z zl8AG`-B5bZO0%z>*Ulk|i-S!=zODuBZtmy0flsH~jCu=Mtdn-{pT-N?{T&@wo+iMIYgDawNKKf8H8#Yzo8L#e3s4Wdl(6B zWBjSNslIm4Ojf1;>H-y4k&Lx{`u)Y4Z5lbU)7wy%$SdDDam>T21p+~LwtNX9^R6?otTvCmC|MEIINuB^{2IQjr8W0L&N2ofir13Gshw@z-VVjr zA|nfXGJ1tR6VFTi1&wGLFV|w|&JQ}o;A(7^nf$(oegduu9+H4LrGO~1Q%}@u{eESQ z8pWqK6y?^2Ni;S_@k*fN$o0eD3(LPB6~t;`rP#~ppmqTn(Q$wxZD0)!+g)!}iwSt~ zK{;ctAr$_#B<~3*X(zx{;$chUp7*{)QXI)@rYXTHT!gAbP<~bY;jDTo=qV_X%G4Kp z#_j&S08qa=eYbu;;)~=ZrI6mMoYbB>nEsEa8Id9fI|!xyyN! zSjw;dK1gYlHpN$FF5*y$Wsk0_^#tL^MEGk(+`9lE_$XKj?4N@}(J`bN*uBv9GExca z#O_Cn=nEqGT7cZ~1$!sW>peitEW;}*;C)!nRZqJQXIsAnv_z8~Nl+0sOqgJBAa>@_ zsjvUPzM0Zu2Wq$@X`M=A^g0jt)4_D3q*X&0^(TlCsS%56F=JxU3iQY;w-{_>%}DZy3>2A<&XA~9=plw`y6X>dJ(0zJB-(*g&3Z|DFa|g~bC>VK@AURUmBu2Akm3;R^0d8mg z6f_vva~j>ZjsXzrbA%12hg6h6Nrpnqiz6_?$bKHZQROR_?ZeRM@CDaXR|Jo!$Q)dJ zCl4p1|2hT#<%CTiTj=jg(k_9aE93#5<~^kqU{4TOw0AU>ux?sxn%4;cJ=&kzuRR3* z!_S5G-{_+*@v{9U-L@YOa*QBUui6{^yjNui-`T&Mq}{w19?$%Tk6gVf3gR7XnCOWh{WaiPqP7~G_E6_6# zQe0a*m9hmf_}1ntE|)|YYRQ!D1+t@#0bpe^hkTe2;3Uo z$g;|Nui^gonRJqd0;oNUz{-9v!?d!6Rs2@Se2vfR<-II6!vx^b`nuLGtJIM06?z4A z_h8<|$X(n|(|}PDOj&QT@)Lz;x7i@m0VaLDsBoQr5SYMA`uubB_b_}OO#R$Y76zOd z4{(ApDuw@T69VxMpeOk$o)zK$bd&$h@Cb>_59|H^n}dnMManbjjC=ha*Z?AfUPWB- zmNq@k#D{Nu1B0UVg~%~zlaNg>Dwfpa2r$xzBf8nm&q8q-X)cGstXnioNhV1`4)6rM zFP;w<&$sz{tXN?H+J@xHR4u zJ@fTs%gyzrwSy>5n%V5yR9w66J0>`oExn=9PdvdyJ#g2#MFSaB6U5X~qk*#arkmCk zHwrNcgk|^86ax7DF(y$6nx_SQE#*sv=ec3FX&xz?Z0HP~=f zdV8c`0!Smml#Pfzsn!ff9P*JHV_#YiM|J20Q8+^lgln1`k+*tr@E zJGXM$Kj~x&WbW%(@E9`ay%)h*Z3hV48^icy@^1|lv#D4ja-)8R!~DUhh&XhA6jhsY zkTorg@$ki>FnoCc97ng0gN>k#z_)z?wCXK)+EP?gNK?M6Q-UVN(zdy11mK zdG(M4IhQko-|rlkDl%#2;Yr=9XUmFQ>x##3*6zpo-thuC)+1nml3xz0Y>Fk2c9KlW zmwpC-%uiMn!z;Ct+OS#dG8XqWA|Yob%<==tOdc}|OleOMxLw=f628NdL>6V*uhKxO zvMML>bycPcrK&>3r7RiQkBlNuxAgC^{NZ>nPY(4O(Usb>pYOh;Zj`m*RVBF2mSD|i zyb7MTkky}~kkhep)InsHyv%1@$H5DAc$v}xhr#%&tNV^sf<05 zvasbhXXy|W-)C?a9uSKlwERN@`QEK*)od$>bo6tS1-G?^5K@~6UlbS|)Bey%YT`$c zPV|C-BMs@6MEChMQUqqQOeoN9J+!YFaX~N)fa_L~vLr_;{N_a0nA4yc!J~&Oy$+yP z{Sq@+@%tI2fw8Nm;@P~!e}kFT;$ydfn>*6c#)E(0s|Y@mm8+pp}qN2$4(@ zX#O6iZvN2?h+~Kn&tH%Yfk;P(IFg+}v`&o4v74F-?~|QOu+jv7D!@JJCskV(4?Ob* zz>WOyaybZ z=`|+Ik>;|QjM;>c`FVFtem)3e@F5}`c`2bcUA=!9<%y@tQU!U5O;i!Fhnv~w@GJSY zWbMq?FiG`wB0PIg_3+dDpJQbP|Bf182C)k%P$+cmy4pzYo-CMxM#xm$M z?;~MSK;Q8qMn?J3Fz5FM&|jtxFT_li!A!|==hh58kvycR^@%QF9I)l<&n*AD-RN8q zW6BzB`}y*#)Nfug+5g~?iXE(jU3lwZxhu? z-BWLDR5^xr1tMGZQt(y?8H*1!S^Zk2-u#n7B__iCCpsw1I-Xp-x;z+XD%O0%AnZoY zrEgH1TPi&<d#pn`PQh%`e;pL<;I{++e< zIp^Jbe|~?i&%&8`p67n<`?{`gwf7uxMtq85vud;2UYuF{BoHshG_*O&4BsE>3tj|c z46-8rMN>6F^s{&m{GuHYI#RCGIwLISB+vbgfc!!m^C(*;s2x~EQJ}P-6oOBaHmZm< zMGNmxS9B%SlN-Yu@fXt1r$<-hRKN#YpESMHe1}Hi?D_f97fbq&H9~;3dO9DhJ7?@dy6Q zdp$VOq_e1cX>=Vc6x3ky@35cV2!M_>B^ox zW_SM}Ca?G6Esg*U3yL`NvTA|jK_(aH(-#?`qA2|N_QCz4n@Q+wZ&tb^vDUNMc*IWv zTF*kwV5grt>&S^pYd|M?+mUXSLw(yn6pQkbhD23PUh^+SN54ec`uI8gvKKg}-|u&m zv`(hiS&p1~$r$Q*<WGhzytSwRNyAX8U2DJ>sz~TW!ee;<;yl!M` zlJ+{p%ezfpI08peraO&;+n(kz86J&O$E7E9#FNjaKMDF|*1$?~hsxVuUi~4fKFIQr zo(FwayqB*weFA+W{TINX$CghhyWx5Oh$4d&b}+&->?7zjCX+?l*EivDJl!iW{*WfmuJi?+K++=qeJnfq@1zy6O6Ot*$;G=ezK2h( zwTYM^FBj3Xsngt8;G>5ek(lJ8mb_#n@gMSif3dHqy|l1E`}PaBTht*}NYo_=i*M)x z%6!9Y46yE@UC><6jd%4+_gKV}Ftuzq=JKUkaQ3O?c!*X=;yLd*?asIP<(aDx&Y*nc zV}j*Ll6gOq$2`R;`HBOasCd?Y72E#1U91T}e)*xISf8?6^0^^j^J&nrK2%}&6_N3Rlf_kY6O}@s5ImLC4PgSUR6SJfclOa+uNZepey9ZW-QH7{ z_~%K#>-+h}_rxO(!(Ae?@FL|#YTJPN!;ywQ0J?$-^H{Nrm&471xKZ+aZW6o&k@rSR zai`+3X{9EV^!glQ(h%;Z#V{n-duu)_+%O7OOQZ}FaN7G_YQDeqy6PwT8J6>JkUsIX z9-Uy%3U|^HJ5+_or*mJh&w*MJI?JL7d%8y-AC%S9eF}g>)-bB2Z8iJgzI(JQ-f_zm zaR@KzLLOBa*?y0HXGsU>-2V3x?li6Xc+oJ-YTLl?-0PT*;o58Gt#KlLSvpFO=D<3! zpa283fl@Au!KPbe96H_2mr?=spq$Rx9|vf%Li;F>qQs}%3^C&P=%lKG?-%(s5v+V- zBT#00bj9t}FR2d{@5T!h6}^&GJ>bS<9TH*?sFn@@e4NNx{76o(O?@~}_6IUYpv|8S z5%-EHV<~>5#}db6BPWCEB;Pe~AlK-M#24sQT)a~r_dzgH1%j+d2Ft0OY7=jMax4?< zNMA&4F1v2$Q*RAf7nRVHn`wU#Rr`2HCB0`FWsaSDlzlWy`M$>|TwsJZcJ(5%Pe%D^ zMPY@Q;%4wgA`vruw1VyI<-a4{QDRX3$$u11b&%A#r}sYXwFcsi{jSkD{1@qaTaUrU z*O%|6J(9&{XtTSD4n`5BfL`IiB|Po&XOoJJkWB(2$%iOv^>?TX0N$y-ldTX%Z?IXH zfB&J~@lO))-(jM^x`$GE6vdodmdh@XInSKd_}&oZsu$URP|SDKVIuw9Kh(jCA&V{x znhMOXYDPT`xHsKGR@9{JzcUd_n<)L8KJzaKJr2e3KWe(_%jRlk6Ws6{Gfp;O zr~~u1CS$ob`?*03Qkg%xo&q29ru_U!ju1zE`zl7q#_QbsZ=*rJV*lmI!h*$g>D@mW zg8v4WUuFb@wS7MBI3Dmdq;s#*K?@wxfCsSKiP}38>lxG`fH;|ZvA6o>8Z-&`F`Dgr zfYM>2DY}G_YMxt=2POlx-uufb6Z#zg=dJo@&Ak?e%C1{OPaaqNj~k$hvOL;w8T~*4 z2m-P&0t$YngCi7Y6HMc*R_*nU=Xku2Wx&AvHqJA3^kZ!<3mxP zo6rxD|GcXI#($N9=F*+;sEK=q`M6+6VaycjMz*B{u27+=`5;2l^S5Etp4_p6_zi&)+^N^e~%z zk z&3`O(Y;(?|IQS|qFo8>5pZwo=M1TJi48o@%5|6k%X@_IN`%P7u0asnl-Sy;o+sE$q zI&(}>gNN%JHVuy^I?IQDz5f1rf4uT-Sq5Fs`)KM1+xjA@o{t|W1a;J_rE@;hW#-^` z7R2~_PyF$4$@VWH+ltDvj1A}lp6@!3y)H8{r}8b*ks0oB@IPD>ke9N>^zdBuh*>e8 z;60H8Q{)=|+rE;}vx{H$mn9VUa_Tc;vq&vo>#s!i8jiRm{Pvl#l zmcyc9YT5bt?r>}Bp;5zIv1=W!e%9x0>zJq6PZ5wLv!k*4?Am&Q{orw2X~O_6Fa<(r z0jHQ0@RxO*zbgNn4bQRb9cT1Vot_vfJPc%_W$t!VIUJ^M-#+uy#Q*{z27u;fqSBNg z_^7yp?+imoum{7aUAqa_7q)h{kZL8sktTAHM$)?)`eHQpG46r%TB#6*>iMOc-!90q z6|{TBtFzoX>&p=o;6FTZVLosj4sW<1zk7}YjwSkvZl4;J+ze+zwl|7p38!*B0CV!T0MP`nh;#eJH!BzcU-wUHF1SBy;O8X);L;G}C^kx0 zEE4<-Yk;VV3-bykefoEuate;qr%$MUOu&K{K0sFRmz?ocONxkof z7stE8!ybF1>Fzf7`|KOUVM&{iB{{=sn+DjdgB2Iij5IM5oc*L&FK(#nOQy89ed+TL zC3^DH)&Ic-2zbvB1|9E;b~g*Ih^qhaT{{|S4g!x@1ldA=@RIhUYToNA;0zSGVT@w1 zF9(5&xw8XW3$_K74G=O`P9P((5-(r_WL-+x7v3MQx1ECoY>9Ko`N^G;_#zcJ%^i(I ze?sD00ZptXi^rs?dhxcmj=0us)Dh?mnx!3lb>~~Bx;Kai2o;1RBX|`xer;^WiSEv| ze1I%P>{f9ln-pP&9o;C_x+8Pp;y$ipKZ*T2r%GD;Yx6pK&vRQ85+wuTz7v=OT3j#& z>}l@2^U!sx-^+-SvBzhPVGwd#Rdv5J#Oj@6?XRRLi!s*^8eB0ZsY=ZqWsm>u%1SM@qZL=sA}sw^y|}Tq!gKF3Nhli zAL`?jsK(#m<8L-Z`_8DppkqPw1im1lnfd0P-Ndg1jVFicA%oMA$6tRsE%f)j{}p)z zl4m}6oSEf2>z})HT!(VI4Yhi>uVKdgW?R1K(u-Rga9UWMcVO#2dl> z4lUpbpcHzNzZb)Lf=&K7_wy@)BK=@9%}wXVIUuJKEPem+6A&o)%L(_scN%MyE-`9z zBO8_&r$mijb)V)0f*f_%_>IV~v2Ny3qe;c~t|}c!ATgLLSy4cs7`%5Mjlm^$VS^o4 zV-K~y0Eaqq^?s`~9D9wa+oTn)Ozb}y&$MY!cNVOIk<}`d%BE#pfPCqb82-J$qvS$M zh!kD00>Ne$y=ToYKl;yAt&L`A3|)Jf&C2EI5oej&*eW%|Uzy34pH3!&T?k9=-Yr*6?{d*95&5_|u&?x{P-s;E?sUaG3y_X6sKX{^Tt*4l z(QHwfmbTyU8}8|F<61DoFB9>5#$;ZXa@UxwJCwVA-JJk%W4!c8{$9oFN^H*87!aYVF}BDzb@q zyh^(e#4x^nq#0{qX$*oaLd8^Szbu3`Rw zW&0$s22Q4-oJh;15Q)d$^jnnKYo^iBeKUMc%V2O)E1FgicqUEm8Zc78AHm*3&T?Ck zC|>!O2z6_nMF;<503b$|Ftcp62(L_|Z49 z(Y_yk^_&jqhenZi276F^53a*B^R=|YFF>XvanB(JyxbHYfP7EzQkDkyGj!9WZWm>6 z^#mTgsTFuYJoU6V0Z&-5%oikt51I8$v1-=l`}o7!MD1MlR$y4|t6Qa2hCJDft7ps? zF6{y0pS3HGo+gQExzj%3h7e_+s!iI!^I%?CEih9xj~*(x$$+w!1W-KA|QwcuE z2aQakCDL8~RQcZEpl|=oGP_DSgTf?XV|AQ}I-77A+b%+cHW3qnEpNdi?O-L+U z{t$XCiX0Mn@Y82t>7wi7z;EmJVB$*>57I+d5C$`8!L`QyNxVN#@8Pu#P0d;R|1SK} zI8a+mU%>^O9liAQT5`~N_wafO#J0A*eYRUQrp8l}lmt=k2ND&aI z&AT5@op+p{Rq>nBZt!U}noT|C&Y4P*m>y^jn@>Fv=gADnJWT(F6z02bZ8UA8ZrjMM z)f-1xo?Xor9z>M34ewrTswuF3(I>l;#KYr6ADl#YCs0K?HavVp9kw9qA+hnXGQir< zjv!F~^^0fK)d_&Ea+pzVK53cY@0|MKeqOpLfkXp}qfWtR72dp6Ja)gOEb{ClnAya* zbI*i(hH=V%A-hWg0S-wYb?%?r0QH?vN3lyZF-ZZcJ3B#q?LGx?rc=c+!1&OL%aCd& z20>}J#)xZwu(G`>=gB-$$Hv7XdBU-n0HVc;_BUaz&j#d-vfwFCJ_8l zFuOd`=B>f}sM~0+08XYertYk&^g#Ub8oNv0?2d7+oh!s z(22Qr^*heeQF|sfA5(5RVXUZKCE-hAMydiAGb__(;QV1dv!tB)Ni;!#AiPG4?e;+{ z5gLVt5iQBNTBq+ds$cOd*_s5J|6A5&pL`t?*g+^q$>%Ft<`IQqeK-k7##Up%Jmj$P z)GeFS?gmbA*!aBrc~tcG0xvhs`^H7Ov-?tflt#?RGkLXueR-~;2_I3cKs|@Vy6G~E z&tz5d{*J|!22n42KoYt;d)IfE&#lCWOrxT;?)z4stUs<8K9YdNXMWAPSoV zxJtwjBJm~nbRxGWYENMN-qT*6gZFQ`_Ga^H^5UHXrO@hS^Ogz7jdyR~G87&Yzc0aC zX-OB|g4oCN(pnc#ba?cWV5bt;_!W?Cp6|4b%vu6LmOWk(Xb@qLu2068Cw9k9@oeA6 zx1Qe25RD3ECh^N?{ppHNA^xJwqIzS-cw1uDRn>6CJ?WJeZ*X5URFhZl2|>arF_6sI zDIF4#kDR~2b7j9hIPZQ>Oqkb=O2V@uBaS*|Sb)%_;jvV!Hy` zu;-|rJJmAQ>WWq7G)8A{i7@;P>3o98PK{?&YqtbODMoCTpw?Fg_fM~_7SG41Y#A_! z7glFb^O2fml|9MpHJ%{DRe|!|@SpmGVxP z?>ak;lS$HO^S^46I}OG{vrgO>2D6uyblSVBUXlWUA!k^85o#0s{7nLz7kx1s`T_Mp zNNs>s3=$m7pW+z@N+f%4I)+krY259hr~OzNzB5r&I6Zi*_UqG^Jz1`!cQdp6P!&V> z3WhwfkQ%I%o)t-4pX}=8vCl-*Y!)cpWbSgEFO0aRTN&dsc7zXpNK7BmfW2fE1daoo zu8jn&DKbS>mJ+bY&CDSJLr_q6e0d3JK(o$Krz9|Z9%nJ|QH5JW^4y@qu*F~$r#Lnl z`rAmJhWQzcEJI=_I`2Ig<2W@KXq4ZE4|z3!N*%QyWMz=@Mn2Gwt(%ahYunLE$i(KiO?thr zp~#Y_c6}1YR#-sa+rM&q$;5scR(JE#a8+_BAlwyxn(BTtKq0953LiM%!-Pcp`0N7r z!sxsi8N)^WY$qd$=|HkfbYQRWCT~8X;=^GSjrj%5t^r(22dWGCmJ30-Wo{{rw(vz{tdSbDz#GMq5pabMJB z*dqLY);<5`k=1Z>MNG1YaOW1Jwt_0&yhz$2xYH-HAz8vaP1_S+H~ZaI-fWN}&}cJ8cVSyv&zTy<;*vB6;mL(c`uejJZZryFK7^Ai#QkYTCBme|?nAZu)CxknWAs zOjhni0=LE*0zEe}EgtlVNBPXxJB|HmGY+O$6g9QE<-}rR?-ywjGh5TyT&16^oUE?; zDA=SX;-i~w)++Ym!zySIH|t1WY`|KV|6rF=c zA*)TGnoht%$CZ}6UF5T@EnnQEq!ad?TFLyW+?OyB>;OtKv%3U1X-GEZml8Xo#bel9 z(6hT}w;00sBCPr*t}VR3%3)C`9iUtV!hd_>=uIP#ue+0i`_Zs31Liy?gu>8j@7%gG zpjPn8gppG)Wwqy7jJv9@1gU>M8id1tB>n595x^m4SfRa!;60C1(YfV9@~~fRoT8*O z#{C1gFpTLsBSO?}ThY=XLA&T2XRV0|+j0ko3MJz}?m|XD_2`vqM?Z+;9J5#+EqA}P z6dO>Qm?|_Xv?^t5m)U#gyUfBrhiFZ0!#zOC+nv3ivA%vfcc8&IQ?y3(gp&>sk`1=s z0q4X^GXTbn;DGi~)G4OrE0me6`wU$8{Ta*3NmZ}55t?;YUSB|20# z_j+%+R@OE#AF0hZD;rk!i7S)U&(X*vxm-}mi*8XlH5IDemCyItx?poVF48T5-y8*k z<*d3)XIgFZanb@;ljwcgWy$+CRO_{gimzYB)2I?n1IuJea1N7#bNCJCxW`%l-3f=3 zGP#Vyx{+#9gD%Z}Xs<)P`R6bp2t%Gn{?U9o#5VlrM6LIM^fwYwb2rlPlC^dWAKJTk z9ONqD&rj5{n@O$UQPP8?rcq+(E~K)&zdDmR?~$i2mB&NAp)LQwwGmy(xwc-7g5G9o zzPrwrT>TvPqdGBy+;@g|(=}4lbp`UB2Hn!(5W9J3D)!ua)@YR@&iz(zjB3g^GB4qs zvTp*|kzEi(w6hl4LwF;(XAP;vRy_2M43+;5R)!cUzIq+)o>?9EdPcta?e(M7E||%BrR0QT^2OWhsDrR(g*7BylvU6x zgh_MruCIoBYYTw~wpYKaDtI@ujr%=0sO05{r!Tt;Q*8{-kCuFj0oMEpI(D9wu#j1* zNg=)LpPN1xUQ2lKU2A65aigX(EIzkJn&fgtYJKpCswZk=ZEjfKBU$5#pur#m0he-GC_;haVvizfn-2gG|l9_H*5b#YatE#Pr6Kh7}PdzYu=rEU`HX&?WMdF9c z6WEFdNlRzrQqY(R>}k3Y!M050*VqoRWwU`w6`7H8e~zuCwwfcG9$BaFJ`dRou|G8l zFtEHNXig6w~Q;3^LJ1Afu1?mXPHrzm%3Xv>;jn~Tf0Euv+gQIi_CAMm!a1? z?MRfw7kW85fa6N5d5+oP9=J+PVfRSqcq_g1j{QiJ1E&N2W*QGsB6C?2QqJb%CK_e} zx$t+*@%X0dA>rv8h4o?`%|u1<8NVh3?;9@gE!(u~zG1`3I&Qyg8#1{qhDiODi{Lc2 zq3IQkk%~D-N8rJ!TszxB&txlF*oC8KduT(t=YlqP&hX0xUE$O<$!~d!tgD6@6+LCI zi5|p!Y7I5$?azEl>v~cQ=+G74&|!AjGd>YgnAW#?MI*!7g)Qzo4z5?I+>0)2vJPEH zi9aabjch{HcTX!?RJMUZ`(gJfS>~Y-6rPM@nlaFWE|X;bU}3=9 zer9%!rX=tFcD*i~^5P{-!a?A)JC=6+RK`)zly--&s-}RupgkS$aEh9Q&7RZ32|ly?p?%n3GU+yY zJK~<+taqbqnVWsAFJ=0<{MihcGFjWK=k&FVJZ3AbK>8dsEe&YLD@ie#lm>o-)uq$J zYhWsBNsqP5ESmE(o&{I8usu%_bz|EUK}sSb-6CJqin;EmXbmLhBB*xiY|roBVzbQG zdBy9L5=|?)w3pVc5bFA@huL5ynkb*yhHVuibh$s0NAp=r9P3CjI%$MP3SSB{+;B6C z2ipIx=+Y=$l;9hyQeW!1+52M$!duk@BaJ|JAF5!&kHFF28VpkNcn@R8hw#7FQ_ z4*a#@rw#;Hf75YAB3`fE!50GY46|Q1fiIN1b=hyu`7m2x!P6}J@pm|EF`V;>mW}fZ z=GE*zX5>MBTUqLyG0xFTgq>MeeCx`$6aQ$Wi;2{1jT{CV_Wfz{2OFK|wj*ZHYL^&f zNt!G-;pR*C=m+1G7cFz1;K^YJ=1Sz8Q6w7N8GNRzVg0g43(A^Ha#?Cu9kfi9YNA?VRp}tF<@a^wShp(+46s?t43?GQ&SP?>MNsjK2hD=0wGcv?Yv}EIM#e;O8=p z*Zq>YFU1Skt|Rs_HI^q&ekEcBC4W6rnt%jo{e3K-ArJOx?3(F zJ$oZ_trBxXZI!sSfh(D=me%(ChwtOHa^lE4Y;*6y48d|+yZfyB2sh?oQ3!NEpp}Mx zLuXo1N`Q^ZS!^?c=rZH+4&w1@(^~ki35IT;Xz4Gb1+F9GRvq8R8E`G=lpWJS)@is) zz4wHX0;&1=EM)!LPg-sei!*F7SXY>r%Agod{;n~;wOcIKp(R63Je6*em2Dl`l`I-M zkhiI%`lVL1soWbbbz*{=@4JyvSUm?*hs)0tjQ4h?Q=ateKWVS^(xz+O85w{hxEIDL{gVeZ3)A}9< zdH-#3(|KqjFT3CIy|0H)s%#Q|g@j;l@Ixk&#*Rec59#`aRYjN-Dbk4Fnj`BO&p4qQ zUw*`=CFnhRQW*h57Q$= z2z?2^+<&Qecd$xkdio*{hUm{EbGEq(>Sb{r%*xKay-UBau*#J^>e_IMyowV^*&U*T zQC#)C<*O8GEz(yV`_%YMF~eab9ArC9Epz`|MJI(ROG!}q+yv{mSma~>%Z)ubNH zd_$C>=Uax)4KmoKyQnR&jaIGJDA=c}6k!BwghGxlfr-TdDI)R;nas?_s@>m9Naa+h zI3ydg3PxV352xI<5$D zpOt`lE9eX*S6p2Pv*{NdbEa;W=$a)W#KQH}$%7YJW%U?95l*i|T)X3J7>_>yLFj}D zkfEk={A67!9EBs2o`I`Uep6?>S5Q$XtQajBK1+Wj#|+e3C!C*+)+O<#2B%(`cO0Ee zmNetYt>4ZwS>L*A#RYa>l(h@Ww8Xh4oU*ZbSggM1^I!8)sywGwcPv}8t=0lxXU$~`klfVom!@$A%6&c-ly6*3j={U#bN;{mMRq9xH-hc-z zZ?$Ucg|@See(8UBuSD`mxAickp}!cyHgzEFF#CL-JSyQ{(BRX z36JE%1y}?Fm`k>Nvg(L>rIXfytWqBSdw(V3(sOMfJ>fA6CDw*51dnOEnS1(mkzEyJ zk^~Ajm7ip83jz|Px45wc}nTStVrQs_q=2M{fAv2$-rh-#=>Z1t2@^ij36L` z%gxCx#{DWD;bvx!<0hz;_qF_$u^hGt?X+sN1jO-)sZvq-gi)AiqCmY{AI65S>P+fm z`B^DrtLI7TkpbM?wkqStzuf=MIeR34CZq&IKje8skZJjjs`KW;oWo1%;~J4;``lK? z==}x%t&l+dswubMMVKSHxk#9dSGhBf$o;uSzC`bFc*~m!>eB*gf#DVVZm|)6+oc<) zy`3QmJ&C*R+LfN2ZLEX{ES_IH3ue_dAD*eh>^Av28LZjkj>OIAO&XU;WTwn5Holb!w{2{p_czpINo&3ec;lQVhuRyYj@|0-cJ-x zLpi=tj0ALkT|V8)H4Z=MULgY2Ijy7dcwocjt?b}FE5fcE254LHe4g+J?xWxru@9?F zLBvew$vq`l)XrZ=FAm?hL%F%BWGq{7fOq5LWl2TR9U~|_F8mqje)?{eIzO6io~P_? zc3{hnz&K9WfLIq(f)IMIOB%1)Z{&eu(@!M7Jf~gZ%xVw>u}2E|J_E3}OWMl$fW!tK9#DLd5&|B^LFFcv!b1_tJX?R?)=OlH@wYPm@kdPBt202xIoDetHvRuCOSG&KTb!EaB&t8gN zFTozzX418vAG6HrIYedZF1LzH!dH|N zsgxzSwT>R^n=*T2uHeL{OtAuU<%GqAN9@ZNK+q^OU|4a1n(q2_*}Wb~a??88nVVUa zQKWan@j?(!PqUzkK!vdkt%o0u1aY3)N~S&>W2=5U{w^@Y<#G*yiG0Y@`_g(GA<~o z6BkW2-k_@KfR_fiT{6~8%Y(ooQPU~fsq>w+e+rY{erz(H4H+~s0Igi{1rhuXxn6TJ z-LnW$ub32+t1Nw@zkJ|xswH50<76)w?N;FExI9af=<0Ew>LIjO`RQ_NzrP30ev`|- z#ggw`fEpm-LhU-jx?24LS`_>|j$4cDFggT(2P8Mmv$iA`*aRj9;HT;^+qjCZidz6ziV5LjPnRXCEa|qof|7F+ z{@}Qm^jXn;#YuZZds~!w^4vMu-8_SD^|jebepf(WY_2>4Skz^J@sz5Op@rK`+E(vX!faTduD7^O}`afcsvK9q{1X1D4;Jdbf6W)qz&i z7498&W4$OEEwuVTr$!OCu>QSJ>p7mfWWVJ=8Hwx8y~?=A3{Jt|yi5~YTUheV#Nx3@ zP`M4~s+HWII%8@p7_Z`<(iOaD)2JqTonEt)^1Lw+@CKXJ2&%pJt%w7^4pR(xcWLl` zdFTjSBt^_PuusFb3yQaSz?T=9*Aa<2QOO^wMe{x8xTNgqOu$IC`JED3sPS?AsIl<* z=C>^6#gZRgN3VvKZz{E$sp4X|MGJE4$Qj1EHE3jVn=z(?J#gw>|CgaG`bPp{j{}RB=!RsS#}jb>#86<7%_3L(9OuzUtOq(au9!E zQ9FPO4cya!MM)ylpvdpz&_FK)4)B|CRnRaD{Sj&O+KC+Fbp0GSGA8ISZK8L&hjYLg z?d_^0ZF{6P^9|`qJ}=lYIdYAGgAy!J&p)_jV$%XKwO_3oDyQ`5q>*KYWd?e80U#j_A`4h4@bEa>`UX z3mgg)qk{Sr6IHX=*mnrMU8S0R)8uX}#~L0YegIfh6aiXhH9jpAD<~SN7rcd?d>OA} z5KPhjEK!gzoITZ%Oy%7AE$Qb!e454>(1cWAyLBa1FhS>3mVl$6fF}cB?4K1R@j@r) zbXPUYJvWT{?v4CeVY}br<(b5hnkly16Tav9Zfqk11?QTXQNHlO`>+$E37tR*M~96I z*Gl(xul2rW_~`%FT|4Vl;YWzF>X&Zf%NcN}mNG3RC68(9!eJvLUuN)5V@lz-pIsQ zryvm<8@^{o7x>#UwM(KNfP#1s&q+(HVm3v-qe<&TpLbt;gV89^Z;PaT)TlmS=p|+| zGWqO&x9fJeGvBwY{`HT+mvdgI)sQ9gW@rw8M)c`M-=Kq9YfNUK**3i(B@vrHKP=Z|T?DgVS&p+CSMFzAFnqlMA(E>d@Y3}=w|IFFPE zjmg+&nuqa@LSm4Dg!t=t(nhzjmd_filTNzgk?m!85SOl3%}(X+$&ckJIQN_ zn5%xDKY*U+gf6D2URvDC;B6_Cj@AFJeiy#} z#Ah-5BFg)sj7!jM%9=e1FOD5QRe+_mTRv1~Rx(E>;2cvQTf+-nH_ANcee8-`KKs!Y z;}^Lr-5NoR_^%7B7p&}TUSQVzIe_EttIC z0LU&S9F1-3VW#vDKinv@p8D?~`@I<1VPKYIemynBm1E)g?GwT35jXyl@CW0m2i(yY zSI7{$ekw5e)O+`Fphuwbx&KKXd~oeTF7SIyl&8rz1$gcc7Yez5VPLRqQAD0Kf*^y3 zXTGc^KFHIYe&RSc;}?($UvDNhX2>~+i`Y9f06QWHWgpI3FT4H%<8ks_q8B* z1ABa~a56f9eBPk+3IV@p%qO1Fj&X+=epJX>v1&KR4bCz;5Z9Af{bdYi?H2BruS7-W z&`4~B`%=lMTruqP7_{5Aq|h-6MvGYa9q=+bE*CBmRd~Ddz5GesE0O&z|DT0x^cqHFB@U7S*+{%9E?fI&F4=CPIJG0^1d_rh8*p?-ug`k zjzX8I%&ovqky`S+J(Kxny$n$RNU$rc9|7*=mM!eI0grjmrH6a_GOWu?j@D)U_A;Z3 z!j@W^&avbW^(WcL=1$6ldvP%uF!z^>wAf-_XhPe9 z1;jSVuHn9zu85gbdc;o|4EaRlR(A~XutY^b1#1O`qG60i-^0fE+Dju+jgx?htXTJ% zKNzjVN`%j+>@)#sQFFiThIy^bYzOE%3Rh3|$np|Jx7O~Ol^5NtW_6vnaE$b~g;~8A zHoJIdemM}&r_bwR1xU?gc5ti1KBJd4EnaV|d=1@R-Aa&>5gpYUZ zwd=3O1n2_Jb>Q;Xn1hB0^tDB$OG@(^+U<7!v#Jdy{eXH8>wvOd0udij-H(~KH_*eYI*(c%mVbSHfA@@03*r$ zaR<^{t;12UWBgw&YZ;pff+_iZ?`W!C8Kp_CbT$_71~|=6L2#ME7JO!FIm({Nfg-BQ!qM%lllv9rBEzG?c-N|#4P7m*VrP-`+mqg z>Tm*%y1j!pOWjgl#VeJQBV6yCx&Sae+ZA#*O#?ztPWihVU+d>N&Dx#SDEx1Dk*86XU8ujKk$0T65|<^6(l|_X9mZm04=si{8F&i z zUdKZ&jW9J%OnK=$NlQ4DMP20sz2nCMbe~jC9SjWptC6X{)ukhO@;>tgb^cae#gqIOvxdAdZzsl=vafPDq81VRynbVACSg-Kk1EU@p=Kcw|0{ra>6= z*fbzCfRynTT$0?S7st*3p5A^)(E2b#^i4bGS5dA=*Y$PI>-zqavlW&e;@Qw(hKU zr;{P6Yci%ekw4=-X_vm^cS7y9VZ;$s=P%6^s@cfDzLkvnF#+-GNBdY zXF{ zE+8OIg>xPfA{z4)Q$!bo(ZkcwhP>j>u)lnfw3CTOdRGZ8Q%h!LRv@-gz2$3YtvI7a z?%5EYo1{Ft?dr7I-`?*#;9b2!#E2bzOZC&!tmCIMv438XvG@J{Yt#>(I!((9vgBHm zRw+p;Z9H_S?vd_m9a(;yVOJT!09Szd45avMnGX^4l5D0630mg!=Fs#|s1Q*E%S!3cR1k)pYCQwJ&p~`>6?BFwqDkhnfXkd$AtM zPXo$&0KZcko5aL(A;9#y=bFJ)duOK6Wa1cy*I#6S= zD#F4jcihc8OWg!u{tZxr@`8lWlrx0Wnxi!Z0i=Qoh?ry4m@@IW=u$%Dy} zCTll4Yb`69u+??5&*G7GLAqm%?SrPYCgrygS`3cWJj+K~t9eW~a}+JN#due%V?e&U|AR z=}{&aX>4)n#~>G7976t#Xvs0sEZz@?yt*{Xy?py#_a7E`}a|39}$!@&oYA@>cG2Rk-Uk3>1^&a4R z95a8CzU^Y#C6QR9SVM$4_^Arr?S z*Ba%OFeZ(rUOoPV&Y@%cNyoEy|1WF3f4LJ_bSZ=1iQjVFaP+Uq_+3R=oN?UHnOG%< zjz)&xXZHX2ng3ZCj{2B;;Xspg7fmnjf2b;#C45SS$|n;(Q*$W)M+n@1M=cKp68$Pj zwNb_YmJR%Usr|n{LUsn_5YhNe%ShwDytMyx_d;-?K;0h^{KM++Mcn^k0`PykNz<5U zk2PQuUO(9!T8{RMCY^?#ZB+YP&d4^YKWnaZ*EiIkm^02j=Ezh#e?0iMT=wI? zA0+pe)|wnO*#Vcp1TFy{p&VsG#Gn6+=Q&XEF5- zc2{`|K5+GbJ~;UQRVGK#8B2cIXYV&>hrOde7}xQ;gL1?!Ql0L9lmHikj~9}|2-iPe zFj)^=nlzc4ye^kfM>Ibik{FEIp-0M`AF=G7_?$Xz2%nZdvDK7Wl`P-=3XaFVQl!ly zqrQ-Ioz-3=zw-p6`wvE=$N(SHH{59ZZT>%B);4bX7T@Un;gxqrx3NF|@O$7sIb8M%9Qflk#vvTM^5mCLpKU~ib z0+Q&#;Hb)H3#BYO)k2MO51`efni5}tTj^@RMk^AY3I>~E4WA&kC4nWqv`rwd#CEkm z`2aN1Dk$DRsl)%G?5(4s?ArZt6;!&rQ@SM`x&^q$H#r z1f@F%B!=$z?eTq|_j!KnoORCm{)5X!thw)d-}}1u^(hnKvK5}u6V6Lbqs;`%7|EwC zSBC`>H?fgGw$EfgCL;Q&T>GTBzz{VIu?DiV#C)}sE(;^!q|$(J8sCE|4HrY`UcHprE zXCFH8Z}q!Wr#1E2RRsEH^@1-czP2H>Zm}Q)W4{uJL;CNfJ20`k);IZs+@L*hVDAI? zki(U!D$vy@Y=T6ly@o;G$4ZeDjKIQ~e8-^vWp)$zwLNep{Q#V_p84`RsYK~}qVKRO zTQ7*9OKy+^1Nk~*fRLqTjolSBMt_kc<~-NZtYv&P=6{(20jm2wAUO5y*s>x-nUm4@ zoh$?l2Oj370af^m-?*h}Mv4sR>$EwMwc%z%UUh&eH<9VWX>b_h!yX&3scbzTD#WDw*GPQPZ|Emt1Ia6`N(;C zQ%Z;!65?L@>U#cLC!+#bHznsx7J7CDH5 zlbogFYc};4d;Pxlj>}ap{iO=ZEkdX6bRW?V3;;O5BWpbMRs&vVPnpz`xdldBJlywf zniyMlg7|=&nmm<18*CIf-|18goPTAL+QpQIF{3Q&9J2(i!%GaRlu({sl)^6(57ve{ zF7P~K+EqI|S#vju5GX(kr%d(MY~Vv+?-b7PY>bc<9`Qjh1F2hOVHURkn?}g6xHjsI zH(CEfn6eQKctxTtytaUmLifkftdFag!hA<_XQOo)!orGwaRCCaV@Da_;{LAAo1>-a zyRKHaXTJ)iSYsV}z^26k4AkUjpVzGIKZGIPftW5Ik0(<<2cAS4etEUdv>5^zBl-oL zeuxKian3$V)T0Z^ zfLuCL(8T0x`bB7e?af-2%e=VuTt(S#hM&e9`)jC_?Zx>gzYZ%nUH8zZ;M!6H)^~JG zx|5|Q2`3rgl0ms}UfO!cb_mj+I$6;S!^KecQp>2-`+bEu?PrSSdh9vM8Lln*$2Sj) zV6sFS6LfCWN2%T(Gi4Zlj9qU`g;Au1;J<76mT)aTpv8a|W^^qAlFiKyp zYXqstVfgzk1d;EFlzz(uhO+d(!2Rzip3Ia2lHwKbx%12t;|A?eeOaow`;`38-dq5) z+52`E{0G;)8h(q9m@y0*!61@aPEzCKxEksFv6Y+=-WGl(>wf~=1bV^ldWlOa^NwGy(_gT}clvn9{u1nNOEb!g5tj6=9sJY(|=T8UMHc&3t(ETTuBKAII zb3%10GXqwOpM^vB*Kl6oF2b;t68YUXMvC?LEJ+6xZ)?1=U#E6GN|^IG{C(I(4yb@L zuk{+{1F#1)1|j>A#;=AH8H+Wc)*v++YGOEo3&8kKjfI*kpA0I>J3X^`M^Z@MDxk~7 z&NB9WJahuz9rYG#_8nBtYiF@b&;?viPq?4^>}P}@|>e^KqzqL3$Q_WL^x7*gX1S$6B*0^_djl&qx|+0n2d1;&adt% z%zi4ZoqYJkZRC^!6!MitBAl&(t=>iqv)&SASgftjX zQaJ56E~BcXLz$dh0AcEzm(K!k?}t6ny*i(}PDX|O1+;agv|d=B4yUwOsiH1E-$RXS)D;OO1^Uj4ZBxg`AyP_E@rbXn1>vWd?X=L8>TimQv(>*MP*64^#gEFK_OFR3Uac#v<}87XdGqv7epE`m!}_225v}Z z;GkK~QovAQdOtARO8OoNlRe408VDX_th!?_l&;aR3 zn>}y&5~M@kwFXcfE)dNra*0KTG8K5#8tYo1Eyr%L7ymN`(CHOOB*h76?iyU9 zn+qKw>6fRVM@s~8iF2@2z-yfYiEGcJdO7X1U|-kYpy9=W%PDh-gt{^Nb2~m1^7(EU zQ;pz%Z&BuZwVx%5&|IaS%LEQ`5P)~1aNDl!!Ni#~L_zGi{l_YYkA9_3fdgnr{Q@lV zV*ajlEQ((7U?3QemJ^l7g}LiAcvzAh$pz;!IKB_(9PsXIlTY^SneCK%WF@*y-=b>? zC|u_>=*%n7?s_4K=QA1WO; z{08!4;52mvteJbFhe84YgDwN;T-f`*RN-syZsxg5ih$+ z$|JR>h!<1djkbsvbcD;)*|Arn7I$~88_=#Np}Z{EW0uf!$iK~MhS<;45suDU{ z;)T?L-~*S%&U?~BZoJzAH|g;p1BzEDskfDWK6-u!=p!9)Zu_)D6n9^P(T}%(U8m=S z-)rnadDwm?E1qUxTtQo*%CdOkpXW1Bh%s~wY8VeiNfHxWD_j!ztqVF$i{-wF!V356 zise%6Z1Cm9b}cImn%{Xb{ZT_H}BA5d?1{ zgX+PP2ni75HD(q2{5*R(G6B`Dj~5Fp?}o9$PjTO&lhm?n__m+jM5)X$d>+0yZg|Mq z!|>FgZgJGi2%p4HAzwATz_Rx((|!{2Lyt6A%$COlndWA>bDGI|a>nhPWjcI{<-1pgpH!+wVzCRB;Fl&9xRolA4K6|g*=5Y*N2O+5Sft92qAXt5s}dEz^Iaf`HPsjGwUWF5MJAD zL3MgAN8)*`;gyW%HEChc<7tIVsCUe(?(UCTxsl3N)3iati8YwHlVav&U;<2ct_zc4 z0S$rwiz6tJ3mzf-OE--Q^Y?xr_|Ttd7U+br{Srao(kE{gQ$WmnqE6r}*+*SDHX!W@ zT4x>=S!NXbYwqf(E*)ka`a49+;ngK)BVMD@hv_Bpx|30@E^&Lc{9foP20~-`y=An( z9YO;@_FjrKs7mY*vPRfXNL3u-R3xX2sJ$Fqjc%V{<17(X$f#D@0A-->%VIcJWE*WT zBPuqs$}L8!@b9^j;|<`i$(%vL3ip0|R>)1+VsBZtyN#4&Yc{jje1l+wGgkkEv_0T8 zMb3zNBNMD%X9YvXRIUrJ*fS81?L_jP{%f>ivDE5rC}wg8;%Bn>LuYXsA3r&VJ-I^D z>5+yrBnj0Fr#+lSIfI${IX;uLOX3U$9ScOk{9QaAz69@aY_$G`k;P`D5S*WmRIAOE zvOU428u+A8g4V zI^?Dio_1mTf|pdKP*WgGdqR?g(RmX+K%*oFy^=%`o31~Js7VTy2%&QUc!$;yxxLUQ zA_2FTF!)R-Z-;fi|6m5_0Bl0;6kKJ24DfzP?Z1O0qX&+J9NhEH3VlNhwooY zfEc;A5$&W4+%m0|$#PH48BmEF7{Syf;z@hl6^v(;dOmm2STP=S5m{n!?><%9fz;XD zp{KK6~S5Z(Uy%hGq zVVvKR;U@2ZWE0O%l0`*T=Q>lx{;xmY9uhLT-c%Ak5VE8RKp%7r+#RHQ9`uoJlejt# zQAy$UMN329-k~~};Ii+`4duf7dx(C3nJJ1tMnE^4b^yBSpAQ;Uu?kDtcf678l~|V8 z9U{wMZZ7C(jw8^*kMnhZs_gD2!bRzUK`Z$&4HOGs5gv(gsb~~BE}JDVYA`1jata|V z-ksKc<)43fG?Qa90VKoUJH==FL_nO~9EIbTc7rH?%hG$C1a}Gt)VfFsE%;rR2L}wc zZww|kL4*)XJYBBC~Fg1R66dKSUm zcJ(l8{xp1yD_Cp5lHY2k!k&E)$dCxUEmNyfsAtp8nQWN0DF|9%W`sF7vLBWXBP&Ri zZndn@TO*1=TG6YoS0OH>2(~VA`%_@LpsK?LFBEBV3vB@oWedkPQu~xpyj4inlW8Gt z1nqYHv~PsU#HnGehC@bw*^2cc(HdW9eDLG8SuF=$93ZwUuXi6me`>loJ)#&C4%U0? zA?@EYQ;ZlelqOWq?G(2CA2r3w~zyvd4mIKvfgTLhYO^vC*Hx>!3GI%@VH zhKgKm%ou39Q${S4s6D0qCOaKI#FV*#tyh8$HU3~ ziy_z;07WSo_CsD|TAM=K{8C?`H?0|!2(`W?f4ehGC`ZdotY@q!n#Y^@w2WVxF}`%@ zu`n^hiQOINhkk@_dy^s~k~wpyNx2A<@nP1mZ z=#+!6wXAfkUp#J;CBw0`|65_V9}>V`68QPvOT0HEF>3hjr*B@)l?(zZq4DOd4XXSd zg2<)B+-Qlu`*FLyVo_LkFhtPB!Yx7%f3zE$XRtj9)fi7;u+#iis2IF(nUhy{zQtrM z^BxQ(TB`0G+DLwT8SF<3a)$*B2j?}OmwawQFCy;P%Gvx%`C_~JFecM7h0 z1m~ozE=KyDUrx$pP?}MQRNiS=hmC-*Jpg6#^XRw!l<@l)! zsuOoPQajONw9IW3=2!ZBk!J6wmxpC%r^zsBj;cy=nq%d<{86=ldhq% zj04)n>=O?k`|?7KpJ}D#`Y2(R#z($UgW0tG26}J)a8o_*w(uM(e9kOax<$%iHeQX7 z-W(m&9m=&VBjo_0pJSeu#)>R4eZwxb^Bi=DM=qw0WXDa(2L@-MHVl|r1w(os6Q{rN zv(aw8`LGiaU(I+XY&ZwBfk-GNLL2`68BC#rvoX97;<;04LFvm&;_|pbm8GcMk1=$= z63Sy(&J^yuaj9z1BK*y737T~d!)%PG?~}j6lYK}2nrOGzG*GlOgLouuX_}Rg@s5CI zAG6b^02Yhz*F^FpBp;+!$md>#L7VFJrT3OYJ2!BxU)d{V_6B66ODFKh1%5sbW4*fv z*NZFzOx|fk+nQfQ%Lgebv{-IO%v~G+`*zI+G0Mi10FlNDDMv@V(txMR<19V4F6K=% zjBxkJPXuT0Na!*oUK8a!s9&ewx%X`c%eDQmwk}ScVeYhwr_iC5XzObMVZcCl<9$wE zLcQ-msS!$=f=0_M%g;QFH(OH{AlW&dABj?B3$)(|wspf<=4hoFe581!H}(9S*MHDE zxm2O`sgMi&GO3v`jOuqoup=E;X-=E2R<} zFTs$yUxSHchsJG}b2XsboYMX>nXFxTLAL*z5xG0xo4bjxHRr~pO`r3DjGLLoB|3!J zszSp-Wu^Y&39kWhp~~Zcd~J|#t#07jqAg0YZ+x)Z^l+cWU2+{LJiAh`T`C4T0phPRwi zUY4SfCV-AeLcM=jHGn3T*m4}?$fzG4HmD))tjfu%Hg(=THRFL5zMmH+|Elns> z!xlfgeYYf%>h}aBO-r$9%Tmr8`m`e8SOUw#{c-S`USsrrM*ZhJ7&F5eqwl9wvAST# z63M{)C?T)vzH>pC}Yi~PL0|_*3A1Nnjj%Ih0l1(x1eu3&qls`m# zK5ikf4@%Dd`wUWw$`~NLSOV0f8om=odLx$bK14tYV(UZqrue;uwTF}tpsLx*@Y#Y3t7fx@B=oKEv*&k7 zBCs-V8pk(G=e%JxroE1nrYVoC_Q?Y$=6#RWM!HDPvm3W=Ffk+&d?Hz)3$VeV6O@t_ zz!wNU*}E{bs8nxNYBdTJ3&CLAq+4DDv{^17`C2$@&W747)jYD5>g$454TEE-26L3} z7RJ9@5mK$qT$v+|%J?(9cJkY4q$FbOLGex4TCj=Fh!J&|P}lC$cX{$Xe5U|@p&q0d z4X(!E9cAVm9Pei6DI?zY=5@(Tamc38BUEp;yZg{o?u)#NRn%-;A&<)-Q6}~9yK5n5 zajp{3ZoS27+S^6<4Y@|(z{{1;W-)mcfz4K3lu_5<4A%_tf3AFqk2`;+2RIt zW913hcE3@*djh$))QS5plf*i2ZM@DdO^i+cnMHkq@~6XTT`T{ZEw|oeh>gK4;3$Iq zHgnk}S}V>ZwLYhkiuf|fF;)17L9FW=+q1rL#9l@zt6Gp1v;*wi-o=L5JDVvoq*ylV=zEa5!zm zkR)TL&uh^7;BC)ox#aSZ2)GVT9;2e4&w1M^GsSgu>)Afg%OTqR6%;BtV4H>^0vTM4 ztM;K%9F55#Khy}~?&it|uEpnN?_;jVIfO?vbvC4PE&;zI0=U$FZ5_JB7MofuGX}=5 zxr>nFGKuc~NCSh~i9#Xbf1@IX<@_4dQqUs_t*3{ylPCJEh0cjz#Od#QJ3eVO7qp34 zqP}ka84zRjm3WMeti1Eo%i}Zmw|0^?R9lH;vD4_D*3xj|Br4*(5~2kN4+bnG-6E?GeDyL()+xavB1 zhBx?)gMBY?L2ARRs&Hi>NGv2a)N4{J6YTy+#YS~ZppD2CYp+6+dnauaV<;;9(w1gv z2VW7U9Cf4ez#V8ck%_6GwO)O)DX$`sQd(%A?6!~d&@izjR4pg2dz5oL$2yy)%E}wG z)W5ue>wVW+znAhvt;{nENT3Tg7Hbw^++pPRaMr)!IEh`(|)y&2C!r26IT*Le*2cy3pK zg|kupuDRo~t(2t_v1S1^k!O-kG^$t_Ox4-kx^U_!BBH#h{nabn!uU-*#oMn8K0<&g zUn)0)dlR`qjx(ouq9^3y#H_E-VWd2Twri_%!|J<0mUYRbP3Z3%E|iBq1`L&IGSm0A z%bmQp8a)Rq6Se+y#}JP0hA50%yb4c3`#01dTdj)7{bFNM(s%J!W6B!tDsEPrK&%;s znxW^=wM#vggEdcAMr=pfIS%YK+7EoqxDhbHwhfg6wQW}aXp>YKHs#Cl;=&p?Hiv^x zZa@#fScaPSZ6GJLKsr`1JKy91w6E5bWT}~L6nK}U-avu#PVtq2)A$j=zOX{p_#IM{ ze)%<4oSd-{)?sM)>(^3$g9hpk>|Nir?FesSMWL8i{mn# zYi3_F+nyp4HV{R_uoPUzEXtnT&9knmM5`GsUmXv{R^2Nrtp)L+Q2&?@HzvV|Z{Rl0 zEllfVE|=_gU|Ax*OK+QM?$R9w`P+xN=$B$Wn>0-nv!VGAY6X{HlW$@Yxv;0YNl0|8 z+36YQ)0G_x-C>s)%h3m`&vMi1obS;P^%yY1hfPUFy+$v82C=Liw}`lR=Z?pX3@BXu zdlN_L-VtiDU|M4h1}V9oEBlGqs*PY`Pc4WY<2-816?^?F)%Io*fvD9sz>Dp0&iPvc zbeWeW0?3K9un9!T-KwRMX?h-*nFJ(B=iYF}HP0me9(46J9hdJn@c6~H48o9nx-;7m zf!{X&b#b{EYQzZ74a`<+F$#datc%p?aXTWmS9t4wwO*Lzlq31!Ssh}E;POj0F+vg7 zHGVaQ2=RTW!W%kU#m!2}=sWzU+`B*W21AqYS60BbEV`Q|*y-swnj?G-^h4fQ=%ige z6t@{ERLqxG5(sSg>ZWtNEkk|z(Ou{)P@Cb4M~e^%v*Iu@HdgE+gIEANn1$L>7&?r5 z_tAT9hj<) zrFy5hfB@>-)Fx|0ojrq2933(;#gsTLgv<24Ya%ygh0PLFl1++Nl1*gr_3~50FsK0e ztGz1oqKHCHtYQ{c`}~3&@AaW~ZUTwLy-U+$w=i_t{TFDJJiI|ZG@PF$l*<4Zz@hc2 z_AwhD1pKCwSLk?1zL8dkjL|k7P?X>eOZK({B&6cyJ&TV@_?6b6#pH$E5)MX zZN}a?Or7s1>exK#)|*OM=8`~k9DFA*`XEDN`bQJ+jlpb`02Y@zHTUI;RH&<3mZ-$z zTOaT;;hT;GhA4iD6T>I`lu>I?86rs~4>`-^?=G>t@C2V}b#TDC%l>|f!}NRmrN6iU zp?)!U(AeA zYq$|8%lBk}?Y6%&ji1vRBJc8^W0PSFG$(=JNl;Bh75{A7rX7XqvuC~6zC??g*8Pr; z7HJ0kshdk|KOTX3)l-^sUxgdWW7;|(etm&25LfNSa`8=*RY#@&oH~!Z107#niwYBnFg}`{O9ICa(T%nrou2p6y}Q3v zSV^T4O%>6QK&(6-{1|509Ip5v@OHN8?r?9q8hPWRIvB>N38^Ja$(;n)*e;j=Je-FGdi4J6Q>3XY55 zRIc)AjjY@Sq$yD)7LQFLyeYPA7+_`FfQgc`MdxP_6-WsRW7bO|vQdm%E4=0+s#S4% zJCjVX%JgzE!{Fk?l3!A?fjAhdff(!_V#>E;MnU}T+y#_waXR@YNLFqD*iTfzMG(2E ztuFt>oQd46eDU`rNkBs3WMUj+l0~RH54cKtm-wN*OC;B!X@tB z6Gtn)b4o=FP5f5!u-FbFMZxyTMK#Q4b2A{qkXlku%T4g!{=+!Ip4Z`s3&4Nj@_2iO zo{Mwji32tD-V$DlTgM`#4(;0m@djx^X!iAog53-x@)QuHxbtUarH+%3HN8-}Mn7nB zO_B1nmj%1bN1G-EBTn51cRo@CpW>`9o{bTWZgxcSMSk&Vr|LEA^=;cW_v}_5-gjd6 zpnk-laXRAV#97%o>6XF>2fY04=I`GTu)?f8sf}$LlyaXsmrk+2Vx9Kn_+xeg5QWmL zNB9J^1xK9_(Y}LuGnVeU9+j#YOaUFy$K5x$N&dnB!6;H zw76X{qP>t^kN8}9a@3a>W61H)y-dsT>NZR3W(_qnKiv3wOPW{Npjyg9(dDyJylcYK zZb7Y?8e6VT@uvs^2KH}S_lRpBa9%vH+y~hz#EGn0F7og70>lvBqX{^}H(f=G>zsSE zZYjkEdSnqqr+A$}G)--XW;u$;U-AHCza^Hcb5V4T8Ffa7r&SAae zjiNM#fo~(Zk(EPF1{QA%TXsd>%gRO;{RGD%)O+Y$8&}#FM#Z00 z<4D2Uwsz66k`Sr6BCtDBedx@`c9CyJG5uR{G0%W20=9U7iOaqK8Lq!`fAM{n?ciwj zy*IoPF*5{NQp{XNyq#Tu`Qmt$X7x<>Rg0XDMQmW(Xd;JBPr)3GAnq(>Q9v;DDbtM;shCLkH;t5tN4vI7*LCBaAfX5fI<5zcY-3G)XB4@ zg|uH}+f)>ipF=G5(QC7Vs>wuPd>jlV+18^--HnE#o~svA#(#uXU##Wg=Xp%*dgWkM zAyojS>)9AE+zL|;bqwrgXRj|XWw9{5b+7kxsXRRF7T?+ zo&agHza-dPOyF=sX86h(X9$ru^XyUf;Nn?emBipPpFl8A{O4{gvN(N&PxwwO!D>Xb z!r4aLzQG<%0&P3LEHMMDZI({d+BP4&Q!+tu_Y@vC`s1wxf)x%(vBu^X70)Y`NCgV; zD#~mr|6bh$bSPrim>ZHyP4wD78+tC6oM+15_};arg!+cH10+BUglU0f#F@hq&%ZCA5=j6ROe zxqQ%>MAZ1jTQPUZ2(i4Juc6o*&s}7C!vqP3vF$w*!wmQYq_}rKyt}AgsB=77skRHx zq2@B>?e{odJv4m85UnQnWG8`B?nTKyv6r`Rg$m#e z1?htIMl-J(T#2`bD>s^<7Wgnw6XD*e4Ew2+*yuv>f#seLcjr%H4TyOpZcck^92-Fp znYWKFrfrrDQV}zZF`f_UX0S-pjs!OJF&R@%;iOj($I0sIh4>Bkm(QKvkRq^DzN}3u z(NaQ_*#SE@mjG zaD+o4StM=mD*8?%Dm2#Isa+T~l)+3kYWqfmH&A1Uwk0$~-=bl{fid=o>(vL`{J6CN z2tdl?*o+OD@TKo~L+!0of?xT*gaBv#mrD;y-j$?KjMlSIx9TX5-p27z2Jikx5rs}5VKP< z<(Jbg!+VBH^TfU`v#Kfiupv=<+dYlO@T%Bn-*8kw6c%WpjW)uF<)bpS_e4k5D zozEW%{~s$Q?vn%aN{6aD--1!C062;D!T4y{iqG*>9Um6nrpGj&oGLZRICB7l8=6h= z6GO(pU#L^XRo}`~@W)l8@ePbB3O1)qm2>s9G4k*yD%d30sALbT*YTo6D>)aBn3mj8 zs&+aaJJZMP5Jq&(`Wy$1e!IxwK}2r?pzZxY<8{HSNL*!%lDkh;z>nS*9&mT@2GU&n zh77|lPmfj?Rv<&4Rib(#O~49=H4MkS)ahXZO~Q`(ZXduNIfhb5N$R*^FxB4+B)vt2kZ#=B zvN7hL3)6f9-swUICJ~t~rt+q}@UUgM^P;=wR7;abVKHKLL;PzGNR$a$BH2h5=GA7s zAVqOvK_uZa+I(*^zMj1 z88-yIozqA-I;hOFL@wPx)*uxc!I4h;Yon5heT?rkq%Yqb)ZGyts^%;kBe6^o($(24 zVbkJLRt3#G$LjPVbN*Ugv2>mxd?#Nj@OHaF(m8>ts~c{hraAmnZdq@sp=j;u;W;o} zX`=sPW&jnqVHsJ4*tcOK7~lO0i59xgBS`1bJu|3JEN01HIIcl?mmp>I4JXGQ27(}R zf3u~{#~R;Ka$)lu-S@0i=INU`LvI`|O_p%BdtjudK*3)nLW~>TD0NP}A5+85sR~TY zhVSL@XaWUt?1kIaWF?r?uon-^>Q_t89P4ig@XN8aH^d3iIX0{(p6CWnRDkzw*kQZZPAn_;5A&lJcfna)k%iBt#3^={YSXL*#%M#P}Q6AWP8q67+&v_0Qj` zhT{2#oEMr2lxdQlh{(x(NZg6y>9LFqa(ERCMydeysT~W}JTiYQX4O>VbITl~*Di_2 z#W$EO?$O|a6xw>&!d(^}UH$7Yxwm!9fhw$F&?6xdsbr5=8@EoC{KwbWRXaV0-zyq` z%5vW;@ElKk&H$l_!G@W48>{W12dt`mO82JAYnia#)UM-8g8gKdo4s%A{9&Juv^08r ze#`#G0@(%Sk(jH+&flS}-Chu24LNRHYW?zU=-bbcQ!)C*@0CTqVcwze=wZWT!Oy#G zWv$CF#KHF{Jh9FAIsRMCNMa0~9%hmTsS3J)3$nvZrWe7I@@$Gs>{I0jx9#aWD>eAT zZ_(qpg08e%Go+<1&NJt5FQ{sTax!4-;_4hpKgH(JQmMhBD5yfsXW+*+i~+EESD4H% z3&>i3w`mljAm`lPpfaE65(}iQ*W@KlDXWV2R2?)UQ$MohAt^D0F(fdmStdZf=77Wt zd4J`se41_cp=#xA=(9f4cP==A&ah5JUC`ul@Vy}T4p?R2AeE@+=FB}=xb0n%br6QH zhBLxXu__gO0&o7qXDg2d^utp_$4+ryrMb%TPRfeYE`mEbum)dy^#ji%5BLqOC8BfV ze=%4ji<-05kgz^f)P#`;o(RSPGym< z`A%QV5+mR)aW=6QOJP3A2O3`UWkQAZfqnK0h7hf3B9pgB-FUIOk3!Cxzxd}E$Zhe% z4VyG}PdaocG!7nOksCwIZG}t;*@^hI7tUjk*pnCYz$-cz;GkruGI{%Kf>X2->}B{I z-@m*)ajnuL(x`JdBga>U#9`z|Er4QAgz$OCfBnq112b1Q;6w0c<*9@xTp1RUX3tB; z&Lg1R9)ULa9D_n_n3WKb_}2U`QjS~BO-3bKrp+?qv~8L#Koyq4R4>#;sS)YYBiIyO zVpDp^P|D)+_yL21W~k6y>IQ)VyQ9{ds_u%xJ*3nkO#DW+OzR>pnv0@z_CSXv&0^#s ze!KW1cI?~IciaiOJo;=d7_kWLX_u1O(cIuR ztZ5LGYqLY^aPT`k2^9uY z{r=F=He;J;f)|-85}+`>yJ>UBHFB7@>(+kHLmC$+|B%mLe|L?VnWB zC5goKW&G)Dk8utO7T$C&G1)9Fp^xMWJuc~bme_Im#y1Pfe@<-rQz3)#;Vozvc?~&D_?;L^+g^{E=%q(Z%NW%FY%Og~lY$|N zPI6LA?4R3$Bjb`^G9qxulTiq>}&r8hxQ=>NXNUktZIzNb;Ck3B{Z zDZa7273k4D1+hPmiAd5op84 zckfiH_gc(tbNth%;-^ag(Aob-YR!Oi>)jpPc&%Ke-cL`8)vE;_4Uyg%8|4N-i(4ER zFikF(UIS^$Oxlwn=f8u$Wp4kG&j&b;=KMz#NhbRYu**|G^kqqJ9T~SigY-!o{x6AU zMK2lY|9s^CJi-6wnyusk7={+}e)sJr@+2G}L&;TiE5{CBte z-}V9j?LQxIQRRzzjiof_?}hL`eagSTC$oZ5s=1E8=>6;7{U0xs{g&eml>U9=!K=iY znKKVYhq~uAuk>3!<9;=gd}2J-P+U^Hv0bWpp46Xr`N?`j$DlOq|MA1|gvyK%A&Nz) zIH5<7A#BB&&EveelXOFZg4*jMR_3EvMdsEuN0mWQ`h?7cOo#KRUu1t@*#GG=G;g4W zQQ#8dYi7I<0XZF&K|oXZV*jykw}in|jZMPw1MUnyFq?9Gx|&9JsW4e1bPY#BZ1P(y zZNT^S%Dfc%cbe5N!3Oml(m7RXklNtG3Kx>k$Ny)R^Z&Z&zTOE&nbUEdJM%(YUpkaI zZC?MP&)=WsSj||GcaH^7s8_=Ad6Q4wtMm))D#1c}*UVq;YYtbNp??=gM3}4T`z5CR0<4-ttruQ}n@Z|(Y)#h~x-I}D)aE@E71SeghEsS%gaCdb~ zn=Id2_4oXYHPtBAe>jhdu=hM?c|I9NVHOP-LlLrmpw44vb`zVD~4pu8`#UPJpoth)sQTcJ+Ra!h=+827Hi+9sk-PsHiZyz7Kk=c6s) zoHTYo!vJ-c{)A~xSE>@S5|KA280&0i}AyCg)8A3J@bYpB-7xt5bxI(L+g;(SIb@N9E(~8EarrAn1Gc3S}*_0%p!h z4Nycuvd$y?dMI?@y+8r2opw~GX9ylG&Q(vIY61$4RIv|ccge(x`=<={zrQ&$5lkR% zI5f`__LCWn?mFX@p;)deLN`sU`=<|lmaR8!n>rsa9Iv0O=M7t#DC6``Fx0&tcyOG9 zA@e%}@Mv98B77jz(yx9$kK}NnqZ!66kikG=^EGJ#{IPLdL_SgO3>8;jT@O5qOKZbeVD^>eYPp@;5u^-$|K#KQP?7OZzGo=Gw>M3Z`0=8j~-8{<=7yZPHYd7bJo%u|~^; zEN+C{@H-gXGI#meHTX{Yy17@d3xW2xT3p^GXDRo z7YPFdsSG^V!)mG@(A(Ofb+pB!7RU(zpB1ae-H)BUXL zX>`HRr#+r3E|4yiE?xdp&}7dHFgD9`D6WnnqEu2glyPd#-lhdlfA=0(LE#??d!35f`X`RH^p z{AYX7bFTe7!$3n#Dec!3Njvq6e`BwoF9jqUP-(o7it^ zQ65iR;W1z&>_3>@5Mik|!pj6l9KXiX!Z2dCK79X^4yH#=#K`K`ix503R`^us&d-Pc zeU*CN)NVSLS0Bml;yOByX?d3LExef=c93VQQujZt+8#nEiSiJklt-ma$(cSF`KINbi6yuRuqNP@leyx)_CuD=_du)YNpW(a?Ut0?*EcusG0C~ORP6R- z@|(;3@>-IeE!3cg;vAc5YR-E?UgyL4v&)B^OBSpj`{!+i;7~4lOP+DS{4REt8-Q#{ zjn*C2H2_e^`AVtf5G*dQWHh#}31C^F-WO;~=A1tM2pwdsrlPWSz`g|`e&M%0-4GBP zrSHGj%a-nER&FZ!bI>+@r9UO5s0;Y=u%O+=Neak>Wn;1nc+6VX%HhWi0+JqKVZQP_veh8Fdi=d!jABl#P ztpX%actAt!j}qU>4gEP^ht3HqOQ5|x%O%TWnt9lJ6?WxZhHoBEM$A!W?f~Su1{h1E- zoTcB1THKpmbojUfXy?CHx$T&!xIbfGo*$5WuLsn2x; zc)*0nkY6^+G^aYT5TU~d-zID9mHR>-$kotV9^LJt^__Gy$3g%#a`A-j4a+)TfOYKs zkjM9Q{X8U)BWp2G)%z}r*R-JB^A~S{H0R$Bli}XYRuT~bjbCX0_2F_beQ0mME-?}t z%oH&lb(`Rdw{N-{K;{o2jXDcF0-@+z`kC{>W6O#!sy5&3TSJ$od#**Ve~TA2`#7aK zeJ-*y>fLZRT}IYC<%=h?%nF|b>q%qC_S5rkOnso!Yg4-a4Q+Dpo<^nv1h%Vww11_3 zhqnC!R2SR8Dq;Ikit?lNpM}`j#VB_1`cz%{u2UB=={^zM`)HFR@K*s&Q!u9IWjDP) zMI332<96J20gc@ArMTbL%Z0U>i^Y27B6P*m($*q&!<`-4-J^+l8FTjx z?1;P`XUfD$9O)bLMNYVkbh3hJL#;ddPGe;myU{i}Xt!#GA>9q++h|U|c+y_~e~f)+ zSX14)tpx>C1Voy2kRrVXLKUPbQUs+4f=H8If{;iP3`MF)hX7Ipu~7vg0W|a$K%_Tm ziPA$T((lZ-?|JV2?%8MW^T+4WKup$}YtHu_W4vRmPFRq07>y(8cx*xU+)z9-slN}4 z15;z~k_FMEtC-)Tl40n9%Y8d&=6o5eCxiDIhBbcZylkzNa01cFi{z~-)32#1OaF|U zxz|`pagGb*)WaK*7gK;EzUBhGXO=?KPzWdrH5x};OY3=eC($hE!QD80AwQWjh~XDU zKV|odCe1Z2pW1^kmA37MojHGd^YjSVdfFW4C=TgML+YF>Dr4ANavG*cqXTEO-sl{L)!RJl+GO!{vOfn)tj&N-ju0VwjV30 zOlCVUI@Y{=Luq|!mw|HwnyY$g%SRaeD2mDmHn|(Mv_t(2o{~F#~RgjJ$ec{ zvII{0mv)HEN{ffhQS<_rPV9K~$PFhG-)b9aRtbD~QuT7mR6)@9vq~i737c)j3kA9! zIvx;GAJ)zTe4!LldHl$V2FHO@`Jyv}Qh&Z78+4*bV1R(f^iJ!I%(692y|3%2R)#57 z)5!-^Io+lwT9+o@OPEl0^0TYr8)^h|;8-`s>&aRpMG5G*mw(o){eb0B)*du&Tcf>L zje8dR+-MiB!eGET!x_rOgp5pZAXdL%#El+c@pK}~mfyGx5zPUM&-!{tiYM2TcSs{e z@yMGsSwgdnIA|_rL-U4Lk?OkW}f_ z(HCdmz;{bb4#4p!2diOmwD*-lcw--05-njeLWvEPqb_kpjB?eso!lQ(f1mw8Klt_iao;rk265fL`0`iROnnOQ zKsvp4jIPl~<&DvAe;oA=B|x&YJ|spz>!EOCk4nA7%{qfpJ!vCB%<8%D(Xs||*dt;U zNT=&(P!LE^+0TBDMbN!_8v7p}tsv^RUaKx_5;K@@o29W{4QOvynC}WBsc`qtagn(~ zqek>1B>IOqp|Y(IKjxk{u|g}1Dqj2f&OnY&`46x>vj-iuw$P2Y8Ys-4*%-ZrfQwl# z>ctnPfU8OC{*Nv?WqNn18n1YHMeE<@vTNqWLcr^``1;KeXG|clBXZJEQ##WOUmd-M z;(OM{mkHxo3Q_|dS`ulpmx?;RSn@2J#G1bditknu?G?|RXh{ldjfZoi2EPzU7+Y{I z-B`cIM?p)QPx>JO%_`dPjhd;aUC2ejLV4&&hg0LDmT280e~9f*8V{P#+{T&Dy+!AF zPsMVnO%*a;AJKY=4{jgufVB_!Rpkx5J)f_}Mkh4jo~(bYBUz+so5hGb-dmDT|5fAI z;_#`5r3w_U2{+TkAH-5Bhc)E#^P!UTa!?!Atr3(ERl2b$))j6h=GKayw0Lt|Z9>Z2 zRB8zpA^K&n?mygs`oC@fm)Z=7XEYiYw%>ib>C}=(Q@1pCeE`fumo!vNp+N>Qk}Fd&EZ55_2S1h%B}r zsGU|IBB-`YGjnLu{5Iarxek4EAJ_TMf@Xp5;vf%ioH`uuqOvdud7W!#ZM{G)%0W$3 z5t~*kmS8mrpP92rKo^|hp0BX5Bgfg;y^#F1sYVgl$`!=W>x!*q2uA6PCbJe<%uH}Z zp!9hGIGr1~yO0*PgO=l!_gxy&Cj&i4#7cW4472P$PvO7oCn{!9p-FZI?(G`>XlZs4 zI!~AMKD&p0baXVa{qicq(c1Bm1YQ|bGwCV@UB>^tB>jJf&~@r$wUdmv2i=EA(yPoT z_C#B=TQ_^eG!Taw3=Tn&4^E#aY~hcD<3hwm40h!ZQ%8i3A^~?kHTf(_jm7yMaoC?C z#}$6hMi_5M>1UU`sy{w@oDbDZW-teo_wP02Grj>bz2s#V|8L-e?jok&20{R{+(GUuQjaa)5Q^?@`h}zo{q@&XiUp(c?O@4U(xODz_fN zPG-R;hR`slfl_zezWL!JFcTyYtu1RZqs*jr_~74l2q*bpPLXSY&k4C+I9u?z+#2$q zm_#L(BMOr3hmv2#X5x?S5U4g0RO!T=!f2mgo9;^H!Di}@>>bODsj9r5?TU&W>cqz3 z?Bht;U1G?cfNXG_s0fLetdJc&(4cL%-hS0`WBK|Z4{vwy$33saw+BZxQjBS}4RFo)5T zgn(+@5$tZ}>V6lnSL7XbSsxz$zTPY4@F{zG>AJ=EN1OSzQIob?+dm`)xHK1N01`LIwut0zzvozop=Avum5zdQHm=Oz*PeOan}Ys}CJKW7vfYnQW25F& zIPU^qV1TF`sPQZ~+hO*JN1UJy8BM1Dv3^02S-~nNc+WWlKn;B+K?zO!?56X~xl(r8 znlIyuA7UfM_qorUC^>;@b-VyEBHI~)IM>V5`Dl4$Kn1pG)j|FLwn?dx4)jI)$Pqu>FEV7rpcF?n6%wZzni@DJX&i! zhGZ$u$~lcZZQV~$J7V#qe+tZc{{0%gs(w8j#*8t??tU?-ci6(6?&7AkR7ktRTJfhW z&)BM1eg6Kc*9zO%GPg*8C&RGxxuKiy6V{loy~v5Y7f!mW9h;MBN|6b17nW%FlTUw7 z?QnBIH^wXhN|(Lo`U<@1v{*>J(9pOP5p##e+i#nDs8kTyNEJ8Vzc$Y zp?c!u|HK#*jMy%T`Zs>D5t3yMz`?T;dMRCuQ9V`b%tCM)7-NNJyo3cmrc; zIqS24rinXZvtoJ)|6!{T3jITU7dnG^8_Zxa?44kIb;zS8fm_o~E;^?0XnHzzum0!* z*Hze|Fsa5Ii@4dNSn+3FC=lh{B(XFx`7_}=nH^<>Juzw3}4CZh&w_M-^h!OyN{ zCTG#_Cb0|PA_|f{Vy^j5)Ov?G)r_y-Zn?pjr4mrxVVIMfYlBy4e%P!pvG(UN76Bf- z+ee!y6g%G^dQKFo+rYK&b!aS$6c*`97;B24A@!V&*VQpt0gT#ErFYY195JWGb!u#+ z+^$C(X|64MGXET1e0KHcEc*3zLST9+u!W^6SxFK8YSA$8e*EYV*fokZ^*s>WNaV{A zfAFR1_7k8g4H>W*Ne-1)SU@1Y`~UvlV%2uYM&S8EdquWAS-;&&)3+u&XnWLW!n-X) zZNRe~u^KPX2N1wHhj^Y3mD#KWbd})TV{<{ECX^5?jYP!n~N%=~H;d zciGCDnq_5Ecy?y@rm&A9SvN*rK6~KZ!YKV@@rU^X%#XEA%8if1B_?e(63zEsbAI^u z`<>A#Z~C`BScEz$z9MkCayG2*;60&mdjpL}nPZ`CAI7#GTTI*57!T`)ds)A-Fxl8v zv4qGwGmwH^KHe8XI+xz5g5t}CQEi%qly`Ygjl0)mlPxsE(!V_2a+&J@qIFqyO@NLy zIRGG7E{xyyhm^!jAaJ*qe5An3i5>xrj2wdx$C|xzD1GyvHE{0Db<}~}LqiRm(I`Bd z{IE#_eAz@G4+AvlPIJGb1r>N}$MeC18S^v#@hug!j^=oNe!g*wS7X!x`}3a%Gm%_Z z)GtAzlGZhv@j3L*>CNj!Z_l74hv(gDwgJY)x_0zfdwkSuIBFjtntmlsmNg#k*sSsO zKNB)jN5Q6be(rPhQy(m3U{vl=?Z5E^)ex}a6Tc&03BoK(xYVcI^I^2{34aa5{JG^ z7}%M3g{S}8T%jqTFWFtARsC~)#Qai~os3JYwtv=VimVn7Ky3E#{F|CXpZ{v}9z{Vq8EVstUsT~O9u^*sLe=4+9L0^yXF#b||3FN1^0 zKy?F+MZm%-XK5m1$3(4wk-yoDGM#|R+e`Fc!3Y-M8)wnu?MjEh-J9CFE?i=}$uhy>vDP4;ld-)($J0DXfD z=a^sRGn;TCuFZ113ws$i6Xtb09tOD@2r%$FTC0Fd=pe^#D0_Cih$mpugjTx^kAZ<= zIt^`qtWU?igg$*XZu?egO=nEP;RWxMzTHhJwaWa;=`|9eSAIB(X^Kmo+0#w==V7e= zi7LyNUPNN`P2q4@a|oo7`*B^5NCKh)3mtyFCONg@czWjv{afmwUIB_&U@6+h)wU=u z@bv4?Z*Qh)mv3sm;9j^cYxkT+6f?$3pRHJO?Vme}e}RQxccFUgmGjKYz(jN@B#-;L zrCy4cM`vjw&(ipcDBIY|)vQWbVWHoHl5*$gKRRt5Y19m7?O1kW@VM0iEW+h%QtJJ3 ziZA|a9$1T{NcLVAWmW3;@#$k=$dG4Q9)OmlEJjn}a;pq$C}Zg|C@T8l$`UpW%6q719vdVT-1ONP}J(o`o|dt|5Uch5D*JY1HEXf+)q%CkXl zL6j^uK#sMMnB$SAZ6r2N;^PSJz!BTXjHByynZXef+|z}_`++SB}NOY}Yf2C=1-|Kavr z5-@T`!hHOPv+7y~Dz#@EJ0{8$XR1U{v}cL-#+R;D2K25pgde*_}g3k z4}Xz3ssFwx`^G;m6zK3I6@lNPu7a4Eq-k@!x;!pR3yIpUD^X zvqx|};(vc5$lq?pYX5(J*MIfOUDs32BB){E5+1R0t^p7Ob?tJ|-U+LZY~oW{o<^u^ zG%+qubE*X@jfU(mw^$Z(mj0(|;GeGK+e;MRO%>Me8<}}nejjDn$hBCS-$sqz%Rkw< zBoL4D6c_yH@*9C3W)n-PxgsV~`tH}0|4s`1)BF8@Wxuo5>swR=R^uD@-KX%`4JF#; z^Me=giBp)e)F0v%0_p=JkZ{3nJuAjZ_yu3an{_YO1o{PtZdwWES+#B^fMT9jr z>1ca*?L@avclNHVK4)VbOx|l5?-crUhc`y$)9>wWo7_8B-%FqGva$>(RbBDF&-%Z= z9p9s_r_kYK-bBQr#!ddnLmEv(tw#4sucxm)_@OoCiIZ;QP0yY3h`#(qb7jD+`W4@h zY)o?Gyh`oL-RX6F@h2Dl)1(@XwNJW<$?cf2GaLH#gBuplQ^H18s$pjHo$9Vx$zSj< zCs-YtNw}=V&g_^P1U|vN%s9v6OWAD%*rygRZkZOsN@-BD;gUaz3kfsnX#7_^@BjZ*)=e5 z5r~FZF6)td_uYG5M>f3PzO~KGG)pm|2t_Xr)Kzc_EFnoV7R^ut5pDCMomgY)(1Pz=0(ZTKpICI+pWhwgJ6tPo! zcj%*ZY7kl0)vv?FQM(9q2cIko@0gsjrH^t_??8_zfohu-U{Di-504b_>2}>HBIwMU zgH#2V0T=883@O1xHvnB&r5VZ31W0fz6!eGq@N$bp6F%zJ8=G5F^cy<#-Z~vtD^7YpYJMu!@&Gm zD!|Cn*PJ0kDapz0ohc#?I23dP3~F`_+W;AUYO=LFb>K;rvdiQ}ppY16q3ndmWxF0d zu(JA~`S5V$fHdgeoi(5t2UhYy4?m^81PTniy)yaBUDi{*P! z>~4ygwX>>6{Ra$^RGjm)lWMSER6?RR>L%6wk_rIEYmZgCvwem)?}PXNT@dY=b@yID zXEI=FQk*+)1@I9?g?M}cpG}Fko_iov_3VSWBuF75t4J=*Rs-c`7YOZkzy%#{4Tnp= zujJ{gC_iV%hr{=L`(A(7$+4utKc~fQ{o!+}tZWtuEiFsl%?~z>s(pBA_u;!WuXMGj z2)3JXKay@9GOmBG%K9rp&_x0jK(BM107d)${{BN=_m!E^jIzRYM%?qtTf=;85Vyzp zQnE$|h_&q@@sv`KEHatQG-YQu3Jl`de?8zag$^F>fGhv7C87VD2$x!D!P$Y0yl5>~k)VGB+8*u;@`rlf-bMM@fa|H4)-CjH8 z*Lb{TR(AK|z3{{-9T)26y4Ohm3;p8h=LtQesb`EITWzTbqAqu6F@A4PKPkbrItt() zYH%24D}Gii(2WTYywwA2t@sc2L68f5PS%U`YFFMLvr5GnfJN?U2l{8^=)Cu8XqiL# zBbr(F&gNgC{{%uTN_Fi;ay-ep8d38yZWT5k*N;G1Go=g;1*eoxIynHu{!2xQ4L`pC zICdG%x$;yTu2k{p$`DJc=#1C`EPk)-10fq(A+cK*x;@3gdB}Qg zSgd)Unh;|DF-ghCQ3pqUl1@^xKlDj5$Wa~*ybfhn?$lFoB9H)I#A^e>ureeufmVF0 zYd}m8AvPmUoVpnfFpdtScx4W3)pcau@!$}|X+*=ri}J`I1okYokpzdo7s3zIQuiOeJiD987 zaqFT_?gM-~_OTz9S}e7vanqU zW@|o`Kbw~@G5IL|;J$y1lR|{fo(!o@M+0s6snXynqZ>oNjuX%<>NBM|Z*pUyTddGV zr$Xz?vzPY|k+AJYHmOQC+S}sqG0jZSl<*>9%A%ujt4_#RyF5;Mjy1-*5!0!H%*jop z!6%!>25K>YOF5P+jEa!B&$8lSehH?b0TtbELo|p3R9Uz1iW{7BI*fB z*w$*!WTBXMsdE#03N^`}fTpayXas1Rd*)RP%>YjU?*bhT>YgI!&EO4k7S`Rkwc6MH zY2eIr%x`AAe3`{_3+T3r=2q^Z75VqFNuYGl0})vZ;50}BZe8e3?|!zwv3PICDBi_- z<(QaTaz244sQn1c0b^&L8U?ieNV{TaubaFUWJoA=imk%oSA{#YRH8SVC#L4yclMgz zJ#8Q7scNeq339m-ZKa)wrs1FUOMjZ6Mw1R-i*zaqu+occXij}TeBExr4Sh^%0f!uRG%05%{J zL@OKMyE9CRs30C*?y+UfR$X1o*hR4O2>{IKH9?BZ&$0XVsc%gBPj`UXA7QvP$J1YV zKJ7e_x*i^%(3Hj$2f&?01K~RKfhZceuQnUSXJ4G{_X-FsvxKP29-f>BT2%uyGo|SM z=5MCC@ZgYYyTbFnvZCSu(r4i11_2s2EAlJ@u zmAB^VT=;tP{Kdmx1qt1?J2LrLNgX<#2m<#(1{;greDML$A_w(;)?nY!TfJkPTecgE zzT7LJ@kaXMC<-q(O&(70S0#P<1=3^|fUs-(gQ59KC#DJZwaD}*;sEF|v(OnwhL0^u zd)#et3w}wlK>}YlfQXb{lTy>9wI^RICYGf=9kAAf4RXRMh%cmNIF)8JQdp5k^Orr- zp#SU(!Aw0Fod|bZkT7hcKguYtF2-ySlC1_Jftw!1k&s5My4T1oOdeW!6Z%y zn5U@hPjm7Uj`cU2Dn`@p31#J?1xOd^DS*sA2sR34(K13Nv~RI5_Q+(GH=%B3z`14c zjk|cZCf>0k7fVN8*xSjw%}U*5d|l?bzgK=d5ydNZA@NeWJYwn|t5USGI)GGWCBq3g69U(6;2uB(XnlIm2v4SF8J{k7*Nt&h}y%#Lmx22+!F-0=}5+ z(1FZx;&hmxkI(VHg_l<#20pq-s*uFb*f+oq#zOs1x1O9%aP$2trLOMHaeknwHsQgVJ)rK>ms8jPgX@_IeX78}ana^E3I6&+E-tBP^Yx!m0ki zb1M6M0D%5x(fD5egk(63DTgjYh~dcNhB9wLQ7#RO#2(IbWasLDL#PAG^Y9&mf)!{*)W!b zaUM#8Q8Ve53L$9XCFp1(!{pN+@4YyujO^5(w>T?b8zJ^+cq3Sc9i>o{JE8{Vl3`|? zr%q4VyBtvf(4RiYTvy$z^?Z0ZE7Lm*)Hm3frW-7V!ZnG-fEmvLMkr+E?oqE&XS^;jDE80YkXahGm!z37Q03l=&% z0^(}zqKiVxM%vPw$0N(5<=Hf(ND)A=g08BQV^SkJ(kyzfHk4}K_*|)gzuX8yavqS5 ziBC}`Tuf8+4fNro%AqVc{HfLR`+!a0vsK96D!vHFu2N#*H*-z9ndEZq0N!QZvY$MW zZ;TZPQ!A}>t$)ax-cPJQ=GYTdnI@!iSmC@fcsi+!UgBLx8Jaoq6u?&SvI~$dL_`Ym zip+|~l!BQrd3vFrF*^xn4Ti`{P$5jB5{4CW^kZGe(!+!Hpso2zbDi#{3dJ0|l(x?s zzM0!%q)l05M!@Jx4usk3Nw`73=Va=#l>wLI1!)7gVCWgnT)65bhtOYV{f_3wO6YKtJIRlyxle`Z z2R+wqwZds%97{yU1eDwDf)HC02A~&7nO_WyiS zHL$Eb!z7td;uWVD;KLD=fKXuwiiE;IO1b0Iyh^HS@4jO14agazi&)6?CF_2HR~a|5 zokd5kW0e~~kZ{VaGpzwEjT|6^II+jj3FRH}V$n8EO8csGv;SDk&VwnDk;mMj- zUdQYHX5?sXpcN!#GYtJ%upkR5(r4lRp?XG@B#AaskHO_E&1RBht82xY{;EI66vJ;B zOp~O?=#SeW4mpAq3?wGDtJzGg%Irh_@n&ol=&v|hH(5tjfC>E#cufhvo^lCCUqxSC zZdhT~9wiVnUwBV!;n%_UDX6Esl|ZSSwQzB%8^6v6XUF*CH>+3B#UM20#0MR974&H0 z@j-S3V#8&Q|JA)$JiR?@^d0)DP}l5(Wjz3(F2FYGDJoLoyE%np`Q;lYf~a_Q^SLcp(>Xxys+7;zTK4tL^1_^J+;Y>tHo{ms2v zl5j=-Q35EXC2gC0!;~7YRs4;80b!JkAq|IO)!ny&owHMPLcd(2s#eQlqfC$+t#nS# zH;T)J4DM2jtQQ+A_*)N0B+YxOhr`(Lxx2^~0|`Tq)#qBhcRikAO;AQv>C*z2g7?W$ z+YFGY2Zl&9re{*6y9vPt$P;4`=!fe+ziB`7%4D4V!#0=LqmHZAL0z3tuto;okw-1? z3sZgBhx4x7%GGqsd%#NaFw|swl!90m;;T7AhID3Mv@H{xBJ7O#BUf@xN zLh~ScyJv#UjyZ4KJ!*2OAVWWp%GU#Sj?k?V8?g8@*l+z%gX#%n0O<^WF((#}c(d?x zGQ}x-vTqTPnGN4Cx`iht>=;6~?(aMu*7dvi84F#zp{ZCl&DpIL^)r?dvP`t%M=DQe zW5%&#tgrSzRN|tM-60^oxLc`yU<71C+S~=`D7@q>_6Szct}EQlrFfxSsOB1 zE~rfFY8Mz+tzBPL?c}NDi|2b~ColH=ClBsYK6J_6K{d$IZL{1aHj2i*0yJ8buH zub#w91H=(@|HuldgYObu**rASG7GqtaqLLkU(CTGhX-z`V6I3M`1mocNnNl#{-{0f zSKao`lcjMk$Qd@U8_s!tPEoz<`fEF8*<;84&_GuYZ@I@7M0NtWTi08}pE6Zm8r9zrU8&m$|f^>u<%@j%RC24&R?x3>*G^~r?l zlK~bARkEFh5Hw_$e}x!S9-gPwYK<9IP&coc%Ka^h8ka0v;K*z4NczD!bedg#FrqfW z$!e75L^r)?AK%$Jn$Yf4{ijGUACRipe64x+a|WYDhDrOt6)|5}e%R}}DI!qSx$s_p z7@Ww0>h975e$p7`KX2ZwyR6w0d@$0^PE5;(*xwsC&1^T#IA2CwHrqJeg9e~+mu?@S zig>McmjU8tq23epdSFg!ir}g|C*5BDB0kB!?L7>oId1lCcn(B< zniN@zUM%oLO3|9g11)cxYF1`g6rSqSrcL@l<8MN+wk6$}4!vYNd$E^6A+_-iTuYex zyY>tArdB3iruEy8ObUl1%o_&QS=tVeB<|r>w$vU5YnW99?5)h*Iv7ka%Y=S`UVZej zYtOk@x2Z>Vd2*`>Z&d^9`k1WONN(v5=O|j0k^}heu}nkN;b)-{p6A(k&LmDRW%J#K zYBuK|PL>q@;S9aDrs1aS<;hg-5FusV1ozBW#X(WW3Dv~0o~yA4g?rOb+?Puap3%@U z?$)yu+Wh|`eP8v-i=6VK`y&mM9l&gp#$k?K&ts}(tj8e!h@u}acR!z-?*xcp*&7b~ z;y9XaVpEp*D=8XN%|8>3kCmM32J5mU7YS9_!r_)pZ@H4DHIC47%}RpYeSAMGV{{ab zB?Hj(AG7nJ3vg;ejH~-AL1y2CdGEIKIr=ArQG)Vi7JYU+G_*!c8@nt5NLvJpEtQ3r z`b``c1VZ=bj^$hYiGlq9TbP&Fm^i=?)j-zscu5h?Sb5qV8N zmGYPY=^^e3ix}A)drMcS8dZQ4I|Tn>T;%7p^6UEJGyV9_h<2#y2;Izr#o`B%^9M+! zol4C!>i!5~wMfkFHtRE|%bdp6+d$!>8^a{l*#l5xhT5}?rC>*=rit+v$1@+LO~Vb# zdC&v*6m%$@OlZRxY|)31YKy$s9dYB!@cIyFI0>Fps^0nt({@$S;1x$Hva>p;B6i{N z;VUW?IR6}DbUSC!8AcpE+vo?o{r9jrO_m_OSVa04D5#cJ*WE8^$`Y)K{be61^`{)f zB91_}DxYZNCVYiZj@z*?en}@*sNBP9I`LGXu5|5o34Mass)5A~BpZb;XjCNeMk1)X zf)8{ab%wdB0@#?I;&Wdg485 z9Dh;qSu{5PE6A^Uc*GOS&9n2!{h4lx7iYqb5~nVlx5ZTy%ljqVUDS(ritc{0mb$VB z-MjkOZS_9beV}PNpDBvtUAHjgEOkvvd)c=!cvC?~Ip4D`u5TCO+i1BdAbain7xStX zxYJRWFB2~N{Ep~>LAvBOID)>KNj+bgiSoaAm<&t$2#imaHd|V(;Ml2{g*Q=Ouj5>O za>u>CR=e%9FYIZCtxFd>If+V;m-5b&IY!*a*P76NynzyE)7lW2^NY6K3-dkvuP9p` zrLx9HdPZ13)hi=Os8q3qU3$LTa`^})r6uQmar*FO6~xvZCtdr}U$UsV%eXmmWfEA3 z(QLa}F*kTFggC*#`PxmEY5)+IZf+Gp11sK~+S9szoYl8Kco_&^$Vr1l%4hv>`{kn+ zjH6OkXJx=1)Xv3=z-mntN~3yski0q<;+V9;qgWuPbYy2xQdohL`9)=+&wFe<3>|=v zELNLk_P8ni#z(NIyPlg#vAwyO{m6vRTi^KjW#t4yjjG9SVtpSFyUJO^yQ2PSUDVq_ z3K?st*N4JG-jGS^H8G^SAxNV|ZVSFSIbAsasb-}sfR*iM`_gI^C^^hQg%4Gp(igVv zZYtTsd2jd?b?W*SXi5iZ_TD?i<*HfwUs`~_t>zb(-Wp>O1Nrwi=EKCo5xgokPK25Fegtez0AYC!CuE1oKxrW0e@|vq@b_wR(Um5zH zqi%|#%IUEpYGQ3bUg*?MwW{8e(WUYW%1#i>Z#9Y7H-~WlJZyVpP6s21Eug^GTlX5r z3*mGPc4Sr}Z@qLgIR6W|kFjWyJQIdmWyJw>y38B!N1$XdQPXI-6gF6&_Z-uRywKv> z-8FYjH}|5?g`DvDvF5oXf&~UY(M>1PiR_`ibkI)&-~S+Ko#%K?9T!0L}D%;%V%}i)}3L(5%feid1Vk_?R{$tPoU$ z7n?LoTgt9OqQHmK%5JP+`sqk5s5_cK^?@os7=K}qqw4&wyRXkV0#e^_L8kkG zS+USA08CjW+$8uKp`0V>xn2g=0gxNJ?zO(DdWBLH_grne^MbMH!yFbRzYmhBA4dHR zoD?rR`3g3oHn#(jW~*D^@L|RTW~VOid-bU@&MP=6a!%zvau>a5T%;1QR!VlH*#?sc zB*9WDXh-~T*;LlsT-Ze?@roeDc9lpe+Tul}Hj9w`hUV#!pA2hfd$~n7S^k;Q0%JVq z$Qx}b4{vYp(zPeIq;Egoj=bNUB$D=7ej?{__4QkYn&K7>EhYyIOt6IwjGw^rF8&I? z&(pdNO9#(uj93++%`8jYtCA-}SxuAJT^W7mPG%ZY?P!+==9a70KU#h;6nrwnAMwYy zfT7?yK+v4XIw^G8?)i1QNUBmSqK}CIy4iOlJp9fwNMevbrH_D9oh{)}T6c$Iqt~~o zjCB}s_1DVVZ&C$gqZk@e=?)A?Bq4w!aeAsk2^zK^w8prDu4dS|wOc8vQj?;8g+?ZG z6dNQ=KZbHJOwuL3JM)GNK^8`M1@N3%aA-NTlkeI`TJh!zTo0uV;_@AMDdP(R+pVp* z1^afz4%@eV8Q%RzP0Hxjj*fK- z*0KOf6?}40&Z_RI7gU7Rzt+?)IKnB^7WIQ4j%Dy1WGj0PL;W2>PqYO(qr{2rP)}pp zyMG5K7S85cUIXBk~!IizU| ze%6g;ASY0sRUgOK18Bl$jvv2HmaDVZeF;aEDGC}N3~!lr*~NRU0oXQlw`bwUJu#K{ zU;wa;X$d$3l&!}-ZpH4E-3k-_>N?nrh#^mj`=AJgo zOs%_`?&j{5-r5UK-FQWXltzgzxmmHaytnWEC>j6^Fif&vAKs>cd1R%u#P*M4am76x zrlDs8Y$zO61uw|md0R`{?At(tfrDWM-LtfuZqc`f^f0_Yd~3Lw1hl^VjPEA3Szjk? zWdE#5eD*`yZ3uRr0CpL`7`#Bb?2O&bFyJKMlI=^z(r0eV&BjNkEW>G*>R&YE#CmbI zDx==5u@husX->u#oA=j+sqSnl{C&4DvZi>4@(R|nRvLvJGI>gDMEZ-o72IVFm#$rr zCDk}F`KCo^$;J7@6T-xJhZ3F)w;zh(Gmls68}csnxH8Wi1BqQ2%Sv@7KdaAH#dcVl z68`e^b1K4<7@7GO;gf~d-bGNZJ0Xt&DP#Nb6zLc&4S-|s_J*w*S2kM*S+3kwNKo-z z=jEQi79)*}Z!S=p#701wzY33$97A1#AK z7fGI+N$o!yK&v!)0A<8N?ZTcC*Ge0Y?$bpIV^LwXxlS@$yk=rCc0dttaAb*zUzeWs zmk0oyU!h5{!7M+DkBMIU(v4?)?A7Du*8>11#xEly;}s99Gt#n#Bfr4if$4x_xtK)) zjBQ9JGiv37CD>RT`a^!VfyTSiD&%l0rzRMXHd#IV=7?|?odflW)_m$BVpYn(=|0!W z+sY2R97`9(^n*<|s#;xbeuml*f{dBs(WAZFd~pZ)G}J43pKK@cX( zV_T1plO$|thLZrv0$~|LBsrbzrI4sQKHAs!WfXk?vX$~Ez9rI}EWErfjb&qyityKf z)FHy@3;nEVZ=Gm~Ttt6m@@4b^l2gQ>ROSGZB&yDZ4qt^IoXmcBl|QY`yZyB#Pg{&iKmC;;;Xm_ z-VJG!pKD`$$EsTDIO=5mBSb%(QSFg|5sv{OH|ooJ=ds;o#DT@gd#q#|#oD zyRZFZz$GPL^ni(C9HQ&io@w?!wGOH8n{bkwmSw1aVSr z2E|l%i4u0>nNP&ig@zX%m#WKuKkwnfbIiUk<;{Z4qT^*s zy{^HQnn0|6ZxXn!XZwuhxzKY&58Hvt2ek5?8Rb|sii*CQzB?fo3_NNE`c~hYYmMuX zqB1o90=Cdi`Cu4yEotIB8`lJHCMjp&rb1*RV>?`YJ)XW9w7~{advghD@l<~5pE&SR zfc{%bac-mN)h`b3mj|a4NXW+5O2;mUORQdu| zrpEW<>Epv(;)k68fyA~w5cw^u|C=AMjQX4TU=P3E#F%g0dX>@pEBcNEV@V8_y~gc_-KQ4R?!q8trBtFQdC^bT z5+r^Jf3CqR5}w`weK*eS1HPmbHm>iv z=a4OGkeJDIn?FHWrSWkrqVZ7DQTf{h9o8v9^LI#CvD3lk?}0e8GBcYu7m+XBKy~r6 zW$*Rj2T2AU*SQu{zdnXu5vC1P_gP?Tjm z1cJmB`u<_-N?_F)QNlP2bZh?SilU?-6*pu#-7>+eT!FcK1`_H=S&}IwlFD#DFc|k1 zc3!RGdUSE)_&5`-B{Jy3ofjLZpmXXG#4~(H@sY2T2<~8&XX$}yO5PQhdJfj5C_@1B z2;WoDq#m2{ocg(D+q3Z3O<$w-&av2_NM)Gr#s5@x>%M{h^GSV)Y|+ip>#zEBQjT?@HY4MlzS;!CezEn zk}uuDaHYhg_)5Z~9g_41a^cv02q^4>R;$*c`#Et@_*fnPDp5#5qRf>!rRTxRTfxud z<)-=EUTK*7S!$gp;QYUmJp?@Ei_1fw1r)@AVZVu@fuD#rnXbtlxc{5!??)`8Q`0sE zdVUuHwO_0nI42!ZM%K(mG0n?DsJ=d5yR(`UY-43*wU`cyvEoO5ryo~E8Cl!q_=l{< zA$mPke*+J<-Bza$e}Z%b!L%&gbN1*JJr1fi`WJ3ly@H}Ie5KDbGsv~+`L{;-7IzA{ zzA*T+m6hfz+_GGa8kN50s%PGs1LSl9!)rD8?$i#8CHp%4Ckxvx*?fefdjZd_rd^68 zjydEZFGD0IdD9;@I(tW6*lvdXE*0 zIZLKh1Pia7ryHV+>X?o!KQVtnN%xaC(}~0G49jj#hOR7HT3(FF=t8`L=3BSo6Zj`$ zOi3v0oBeb^)7Ibqqs9cuPjQ7sRE)GdI{8Rx_#rXLY6J)&3^iH8PvKdlw%fndLBV-B>@-se~5d_xG4Lz-JhXRx=XrS5SXF6L68zjr3C~;VrVcx8l)LQ zN)Sc5OQd56>FxnU5QY#?`Tw}ry4Ulp_3Z!NpZ#jTygxTy3^Q|Gzwa zCf4v{ejmyZ8}5{`Vmqd4$-JM(vLMMemnm+~ZbnLtz>$klm1&6p$gvpcu)_^%>7A?O zjB8t!v@HC7`lHWTs*X?Zc)3xF9|o&;#hb*dNYkLPn6d$#PdvKq8iffEw4W<%!$>_} ziDds!o#<)l(reM```G*Q(E@w;x^b71T#nic3Hv{aA5PGWvKQM0y1_az`cr=M;}R3k z4~H6K;A}Y9RLH|;j>Mf_xQAJzW%!9cVGM7D=8BoN=&0{if*r2$q1=gF7}mPgbH5F! ztnQ3XSLdBG{)Y}-50X; zon2s)9I#>>Az6nCg;-n8ex5QT()nB+H0T>{IomToq~gC-Iz7R`*pke7d(6H?C{uWO zcHn-|Y&`(s7uAdM2-GG}mK5BdeN=idWmZF>kGKBxbUkn3m}@Cqe*KI9lYG95*Y zY~+@Z21GUP@p?a!!tBGUmskg#Exr%I`#U0&e`(_yXxAcE_ps}X=V0QP>XND7D_56# zzcOj)(gSp2ZZAiNE^$xRVLC79miku}u_c1P;7{MBWUYUBm`!o;GsdUoJ22&)#MgR$ zP3^9y9--TkUTXds;d|>(?gW+V_U2_rrZvyce+<4SZkvGv9uB2ihNa4*_pf(`ms0$2 zIhw{KhuYrR|HlLlnAZ>?7t~3@kcQ9G#OOJl zG^&iO%@>ofr+d59iC)WY>D-@OiB|V4 zqgg-VK-}HHw@X@L1t$36aIVr;UF@LZP%M*Gt7?{i4?Y?f?=-z7%Op3ZatU_v!C+Tl zm67B@&g&MeBVuK1d)w5nq|d=vVormSTwVe(B0U9~JIk$vXQas4gfRS}EtPuKq$)^! z@K80FE20>ERS11yuH?2~B8bL<_Zw04iHpwtpgAT$O+P;vzq2gNt#DZ6~RUi_J*tZ=yO7D9SA2_*+{-_3OFxdB);0Lo((WLBa5e3ZcugQ`U zvAqmQ@*38ow*OJ&y}w2^Fxs$hoh3JQn^XVXnponQuDNKY?3JeRO+{wa?cEbDF%WR9 z%VOi)8@F0em6Cdzx|}Gc{-=*GD`e7)c6FQ}>&f@9Ep*{!v47Z0FJ!Y5oM8vmS0-2f zhwsgE*;Eg`k~1)d6N4{&G`=p=2)YEQP4G*<9p68rzXMi#0GN#?hc8kV-|Tt|VB&VP zB%wFAwE!kgCs{O$fChW&dS&E0X;$jPa^q-S7EmuG6yG2pv_olEQ=qEY@9Ap z`~fA_e(F>Fdd*`9wpmkGL-Hkz~N+Y%vv0@q`;?>owj z8QNO_^zg5DhcmriLt7GE=q!(cNC}^Z$vALo-o+(C0sK{6#d6yo2HO;Lx)|-Jset*r z(E77i5wb8zvpgkA_6VNun)}xI*eeg|HXO&YUHvOF0fZ9o!TIM$Oso9K>u&rn2VZ>Q; ztV2g_>kBWx#PF~~#b;O&*d6hWh=eKpsN;B+rK^Vv%+tlUW=nd4R>I=?VkN0ZsANbA z2*M*pV<;}9Y;%d|7jCYpTK=A|<#oh;{s5ujksvyRlf}1AIGnFJGn;e*jh-#@an7> ze3G)y7CK=Drs>rU65+4|p30@cY;TP^_xnt*k=Gl>1HP|#9T`Q>{44D(sv0AL^>Ql= z*k^`tDCS;l!>m$?fg>TG86EecmoKMQW+c+@bITX$65X;@ZiFH3nDvZ+@^VdSZDh`8 z3*;rP>$W=WvS(lj+>Gtu3*fCxygrlj`|%M%(!-Qh_wX}#=u8HuJ^@#(855mJj&StT zw|&k+#_4yKZ~3DR_4}n~#~F2&rjvF1pYJVts%?@6@ggtK6UQ#f7)=( z@TiddHO|Lt|MpFqa0R_JA1`^1x!MT%&L@`nVsAXQ@g|L7*!fs4=Hr4sua@Uw-l9N+oJ-+`Zk z@zy|7Q2}ZV7BkO4V6E7y6TzW&u!lIO{t|Ykr29UD$pl?bx)Iq6Vw3+`PFrJFcw7cx z_%nq=(CfyrxH{_7Guftm{FxFNP~g_dfO?n8n5eb{dB6|sJ|AHFz~6Pd5jFYu`}z;JxPm=LLLGRwUX*&9{7drAr%-^(gBaQ% z61JLk_IMe#T!3rNH^QV+S^;%`3eZ{4tr&#SSx=h!@pu3A0{;EN|8#;I-2$)<)9ktl zX@h@WKH(Jmsh8I#*dk2MkqyX9*aJQq2{^=F-N8U>jV3ruLJzez{Ov)dQ$gq zHo*V+gMYu5Ed&#!iR3QhWMZ@vH5ANt26`tkgVI>&WNJIcYMq2bA<)wR}h z-0qC=ijrcKvy13WdtEhy7S-Lu|9qwYo8K13r^w>=5?zkty;;YZEz5fK&qo0#eO}9x zwe4S9PsiV<=A;FHg-m$aSk=+{C@b}Uw>tc9E)K?ZCfM&^c;v8(7fx=uE$w7Irqs3? zwqe>CzUcyzBV#lQ1j=hQqlyZR*eCgs$vwpG-}C7?s|vTcmS4Hvw=krqwDhhRbR@-s~a!QmsBkae{TtR351{Td@t5`t34qXWX}(K zq+6{4*H{A1?-L^T;NABoq9P&lhx<{Kny-h-ELoN(%ms7B@AF13K9TlSEoZE$(=2r% z?$0(*lR0Q9EnjH#%X0iPgUi3UQ+#tU`CTVGZ$IxJ=#Vuo58(LI{$$m<0ib3H!1>3u zdoKQXA_3fF=8vb#1+T%{gbWe_``>0Mb|*^Nad2=5vX`qJ@4j7{aNOuiJOZ2OTt<4v zupM9ndjsx!OThNw0RC(QC3WgzsEP4@t>~iqwdd`+u-U8lLOfn#z~0|CQ#I!K>*su- z@YdhE0EbV3i@vvo%56G5GD&U)+_Y)H-#C`+)kUVxVQDprne?4O@l!!>Q5?qa%_ME1 z+cYc7Vvb0i#csZb{TUe%14~S4aP*dHYZ-+eR1qnI*6|tw zG#|lh{L#cZTo?|3XEO1tx59jJYL7Ye4bT-?YO1Xy?;OjztoeIn4mMNHZ`~O>K>Q@w zrPE>&$7b^1X59fge@5r^6cHS__DVFm8w{IZd;iVUM{~SC#9AefSP@+ory%(-E9o!1 zr=~hEl4r{Ra$E7^5gByMfwaEVRIAKxR{(3^HIg3?V9T!Y0h^v?t!j+eYqwkiwF#N! zEa)YlxK6Q}#T$Vq7K_yNdD%YU_d0M?WaR7#(|^JMPXC|50L)$}`8}wAl0B3oYt99h z3a%}HSJq@x1?nVlkOee^C*}htK!X7FU`=LRYBX(k_yhRXh%HcHX+ZKQobe}ztUiGX zE9r>RTlA*ST#d6RFy1xHiiX?*9J;E9UvR}7IUZf3`~lbD*4BjNlAp3#3~i#uZR0J* z`Bw|1N;sHJ54y?!7jFMAQKYV&*KU7`KUDV{o{mfo8K0k@U;ByA0i3}eK-X^LO#X05 zz5kjIp^o~CxfodOXGXfZ0FyXJt_ARC0uthVdA*2gzDG=_O$SH8%zAjI4=3IR|Gsz% zWYIwb^;?`^NB*OL#r-J)wwQ0p>U3ZsH(6cwgq{r;%il7>Hxjo3jzA<&LaocRiMar< zaHjw=l-2#}<2jzx8>=#j?#W<$@b{>dqvy0S?vxe1+9<8OHGCtw)nA$Rx9p~ghzK=hI`2M_@2B!;6|mdrPun_;@_T=k zT5GaDkYTvnu`ukt@mX~~1$N#Hc78p)4zm9o;-e^AxC%7NT~2&Ue;iqL!h;>&TBJ)` z;#0YQting_buo(AggV|87GC`YEFMXx-{;kDxycNXy&Nb8&6Z;-ffFk8H(~+w*$*)NXI4^4ciI`OFrqCR8t6yRjCor;-BH zMvlsP_O?_#YKY;i=S2af$f0{d2QtyKE1$!eniuK*g%Yqb`FOO{vi%{g&gH$iW+5AP z7Lbm1`(K3M04+C&idr7HvBVyZi7iTElzQwhtIyaCHRJU3Smk^LPMkPI1wag>Ta^NX zX(j?-xVI31NU|hg)FVp0f^d-SnOK*hZjAcf%C`0JleEym*=ke~)6yh~)HX}wS`@!d z7>M0|QbdjX@)JoA{~>ilodp=GRLDNRexbqcH*ex7{p~~bHA+NsImDICBgA&}(?_qH zh@Y>vnr|CC%n&6%SK}pFMc}*oeX)J*Psh!+Wvp^#xVn(*4|spW4vYVU9B=>>yK)}a zBiSrpq{+tzsH1R|5A!p&i{!upcGOnXMfS`rmR+pn0I*0OE%B6PL1R}8~Gq84ed{B z`}WFpHX!KBJ=G@V4*>)yMCko^r@y`drk36*1mck&EgHuKLJz=Z$kr7Q6|MsX8kw4% z&15of+rBz?XWG5oZ~g>qwp>S-U~ne@$SC~v{a6QM02(oZkKKZ>0pE}>2b9Qb^SoJA z;WHy#U*49&-+vJdK0nS=H}=Im6rk*k(svgy5~1n2QM=nMLAZ*baoGLLhT)wjG&u{% z75sh-EO&JOCK&XtuLDo9Xby9~z_xR9aT{#Vyn>+2y)Z}Tr>Vyc6wt6lZC^MN++chhqSwzny)oY6C=4<9@5T==+L?1>)Elt{OxmZRp!?r zqr>Y>S(3}i)|TanFLw76?TtBs)OUc0a*f`7>Ly`a*%(Ds3Oa+h3c9i;dKdRd4ZrT| zM1r0S&eTPacvS@m2V6jlJ&L`@)CtSNoUv)Q`HV>?<5vNXh@2)TL$9@}(e{E@a(C=W z8wci%Zxf0a5HkB*5HY6stT!^}0`$lk=P%_x`%5#3%`k#+_rS016G`j|+xKmslP=S! z2&~hQ76!d3E6w?c%_scdnFxiPuj>A2Q%^+YT-JI&bb~uRobH2xiJ1ViqpqyeGuPGmrw)UKAF3X<{%eIvE1Db&oi$im_CRgG`{rSA=Q%TAE5#vZ6VZIp9>EpIAd#yZfz;V|;${jT4DATUz#SL>gs&cvIRID8YgIq;Ai z$n5bt!Ipq@Yx6U^^BiPfIY_9K@P-|6kRB*Ktn$98482=N?B7PN!3mML-2$AVTjYVE zA>g@O+JZ>U#tu88c75-)3_e$@og1X1uYYvqQ=S3?=g3B-HZbllwA=qV`4o~dI_%e) z9eC7FHT442)U+23LKaKt3hT{*%OI$bhI8PxOY|#kt%+_|p~9MZ(y%euF)2C>EJyn6 zRrY3Tkl?F-;Ah?Lt^$4d{plYUvXh*xuU|t?FMBbprb&po06Aljv^{X}EVrft)?? zHQOg-WtKKEd*LNn2xvLy8j)LWpOH}NU9z#mJ?QESiUIqz3K${W)5Z%T-6jH_;Hv;wSWYsclIK2?fBOq{x z$sS3%yfYCE-WhkIP6_s6LF=}Knun?&E`dr_uI*dunarMPGdOhP;_qEBee8r^)ae?3 z$Ux6VkE$Y9cOQSato&R7io0u8K*s2X;)nM)P}iq1NSGUOos$M_DMgeKR=Y}f3(MXY z8MT*Q?wKkTP1h*m_z$(Xu?ZT_*rq0~{z;zdbmbEqj8G7@{SF+AlBJJc6NaAtwI?BY zeVd>tr&85#Ev=J?=W2ITCS&mIoVyj7KImB&j7g34)bgYY2uKA~BQal%$Z z(3E77HhNC2Pj)J>jj^3i{Q=dKM9BL80mfk7X#mWm`=eak9MUTyM~nafFOjd1Zn|*I z2Dm9DZ7vK_58s%Z0?sTxn6_V`^`8+rY9zBBR=kw!g zUDJ<0$Gx)8l?&2o5Rr2Q^o85hNe}ylww=guU7OV|N$Z#+UnHzyjg3UAL81X_HeF&9 z3sd<1h3bcwN{;hVgWS({6IhiWb+RzJo0ymkt?xmCr2{oJZv%3G=w=J}__!jB1*%c( zJtC&JB_b0(FYkN<9Z9j}Ov>J5Z}z5_ke7gkd5zP6!5As#nyL_-+L#`A&zjqbB|#nR_-;o`!%_mmQ|H_1O@1514BD88BWww zXmK*VYae*+PRLJp3Hzg#(<(r}P`{vXj`pj&Z4v@lL9F%OqcsvSzH`CXA%kex2>+Hs zj;CLi$Z4w*Mh`i%lw`!|p0uZ&7q;!_V5Eu%@El*$cyw=YAuTH(y#&cW@>61^Z1X9X zthptzl%$33KLzdP8fPqfh$I(m?%8&`fN8($8Wi+@I+w6q-s77~%YJDw_Ef(EH#78p zXGq?+D9n9$?4A=Vvs@s{@FmdweII;gR*&jj&h;DFl%MYDtVR$y{A>;Wxc$sF77~nt zF@N_{l0)wgFuJx+`^m2^#-9sMNtaOVo1LvJGR}hob+}pYonH3PrQEU=z)z=LmyRv( zqy=XW7#+>}k()!mTL#(w9Ny}ezPT*ea&@Hhy#ECO#hU*J$+%j|ChfgvhgKc_p+Szm z)7b|Z*TUW}SnBlc1G2#8^CAa!00$H$v)GX*Oyy6J5?h9+786z~m!6p0Ja9$ON4LQ4$^aPWLpM8*B<_ zv=jLg=EIgV4>wp*u*0n^_e|~4)8i96!7-oOX zD&tC=^F84FEFruG&cw-|_rY5Wr%XnUP?!>X#+D` zA5~$LMbYa!2H3pgLK;GB-8?L8mSmJ!8QGSJU*9ifDSmmQXkzgwZAh|k9DIG&mwRIM%x0)oJxt9_lhyTG9*JsB*zweLe;cV&)n4>)ufU>V_Hl$Wj$T z1_XBbL09oVOe5uW_Z z8|TI9eU8YR38GORPb#@BQTd_bP(x213`|JNd{?H8Jel3Yq`Mw9C5BO+p48W%e!cUE zFWyTn@Qcg`5EPX2x+C=lNhL1t8gz#QkLI|Ts~A_Jz2m$FxsYO^ng}iZj4&@h&jH?d zU2$aGLZ4MVAzZ2>(`?}^f*wz#FaebSN6^r1Z6W^-^JiM2wZLuzT^nP{&xZb<>wcae zNg9RU+XXUu#8nfHA{6pCMj77;`llTG*7s^xusmfg-&B@Gr5x5tt{_fc{?XL8q$I-* zTYUKisd^%3ZT58r$H2cLCL7fEoca+j@QP!;~*BygQ!c~k*f2mKviK+f+6c!R%dJ|fKy#v3b^ zIaye5K!qO%3hb4XwP6u#T`PMkmP*Sgy|`;^Ra~t?aSs zl9)}~#bPMQvy9U>G;xm)H>cetw9{PV?Pm48eCcXsO;Ue3H``yE{Fh zdiBTZY;yP4>cRV4@_X-)x2q-&XrZREGwt@)$9Fo;dri)aQ4B?!4ASDI>*{x>Y@l{n zC|_d4ySO|4`Pynh7|7plE}^c;p2WYw{?%i3PjP~m$vT2;xe$rB7zjsH!`&6eQ9Mqf z4!X_s66ySc3~tZ9Bvzfe7~NwGHmx*o6*D73>T;~Y&bOiCD#y}ldLKi*s`5RPNn;6F z6if&eNTNh$eN>XbQeNZ7Q1qL-a%PTC6zwJwJXI7R3bYtBW<)YrKNwlU1+bSnqOK8; z@2V$h@#rX8e8J+eRF;B*T&Pr)v)d5_krj}162_{yg@?pOXxZhhCo4VaN-27@^wMKD zVK`G_ec?}eOVOMsW#&o`kc>WE$-DHx)*&KTKXEC0W-(~>JRr+BWcVDMZ9|7*xc)nC zAXV}r*I@Maz>LcfcZZPPGf~C2k1;TnqbGd7%v1B)Sm@OD4ICy6`CHJ z1>MIlez<%GSnEQ`@#nFkWrTu!@j$u)*MaJdy{0(8~>!4vqtf(sF z+YAFPr`ZWX38pZ2Iu315f_2}x(VL?y2aNqs6N(==f3@;I^iL`pfOR+3mX-)O5>?~PazjT~aApOd@A^GHL->#4eNC~T z_3gX|b9tEIMpU0+(E{8F&*3UQhk{jU5Z3$-8Hnpq&L>smKurfM0OK6ls7#8%5~(?~ z41ys(R69b7VDgEEP;CMxRi+zxamt*01*gEGR%XXt#hpN6=VCw*CKk4*K1E=xT(WIv zNa>M-a|bV72KY`-=v5t9BgPo;f3OZ_h#>_0+TMuq@_lQ{LGM1GfNR%gp=2OI(6hG> z91!f^#s=>@hW3BBdHmRp+VKX9i0$*4i0wNPDXW1gM`<7UPcfQ^FJISoWzK;H^4Uvj zp7(bv2oR{rtO2%&!9o(6#ZRguYFi5t`<&n8+)I6qG2iP{9watzqqp(5gN>G1^5WXP z^w7iG0z#t8@gLOQ*|y&^dljRM50APP{l@_d^~-7kdB{4bn~PD$eu}e9NCK5782EGi zPX6O_->*h3JWs9CPOP3u?Lm;5u0MH{td-oAXxJ2l-VZP;;%|2wv8^#RHxYiLSWID& zo8tO|9qxFTB|;qfAdov0HDqlx$y^zP-u+U3pc2yaC#>r9=kQGgO|1dPy2Ug1aMOMf z6yi~Qk~km4Wo90s>x>UPHSNEOPOJ0e^Vxe6hoq+~rhjBrs#U00Y-Sh+vg=cNSWTQB zvqr3kqHFRRNwOo{4_PC=4tbA@BlxdXn>NC$a3dzIrub$1+%>$8_Uw1#iSh6gdlY3h z1+&YSUaRO#>2T8x8E(2h`?8{pGY{Prg#eU7GbR#J1F3tfekpjbo+z^*?!Ktbt(Fh= zKFEX1ki30*sP(OCzlMunN5jV_S9`Sy|lqL7_<*%!yHZPka1l5aA!y8ju*dRJ`J9$q?LS6wMR9g4OX zdQ+t2{#Tz2cu%J|ZL?Bxdhckse%?x~8}|Co!eTAg zl@C}7<MQH;Ijk)Yl4TikNm=zW~WlFbA{` z5zwJI5WAlK`hC;GBW_{nV>EQ6MeCFRJ&;o`W>Xk=>)<_=2NFTn(k;`F{~2;g;3v`_ zA@Hsf<1*v7UJ(YSijI<_k}o+Qzek)chM5r3EFefUm_p;4<2(VP40ac)FlRPk*3ko@ z-~n;)8FHfmk4(lf=Zb4Zca!}Y_8WYk)tKHx%1uJa&obcyqX8DJ6LeUde|Tq~ytxU* z3w$fg#-eqv7`9$8jE^2P>k10J;_7dE%i+bSuRj9!{utfT(ReO^Igvo8FBs-kWrCl- zPPig%AtfA2Ed=6Xo%vq<=CJ8qG3``S zT-HWgV(eR=511aCshPB(V{_7tay05fOd3mKC0}$RTAS;3A=1&WluO{ zC4VtNM{}T~<)K~_6~S$1_q>M_GMXY_twXy0m1m+S1*~Ed_0(}D&F%u-fArg5?w%@o z@uwv&1|>imu;Q?ilxc?Nm2{n4g%q`%&pyQlYk%BrDIG!(A-Dx;wOa2op5{DomidB% zaQ`}Ee&`xR%3Gwz3{yRE+szlsZ7x+oz6qi!%feGngRL!9y7<4>^vbI4WeNQqfai*d zOzQcz?)!QTWu}t9I$FvN86|tzoeL%4HMVx)1~mNp+Y? z*fy%4zud?8S*b}##TMYXJ*#p@;!2SxR)|#aN#G;~5^jw^cZf6PEBEJz;n5Nre82JH zz|M}`%z}jNO}M85)M^+5Cr_wrsz%NdDU)@If7~Y4 zkBuzY(orz6yJ7IlfUZ@h-l_w(LLbUXY5e;01{@SUJ<6(xk~+%CgiYvjx?@K{$-SU$ zofu8g;ei{7EDX2g>U0H>4(}>A{Fx;3HxlkR75!dq4zp?HF4Y()yPKNdaI1QT6sQsD zb}xEi(Vls08ZQ(2eQaL!Id9-z%9lnod<$@0K{$Fm8C8Z6+(E$|Boegi-}vqWzBZLK z`+G@0S=3~ARvq|VqIZNaaI$FvD5lS^MAEya(U#ayYode3T4Sz z*tK6&cm-}-ZAtZGA+kb8fNo{7qv`g^Jp3(0XRJAKN9gL+dGPx|3^oS{Y|qyL2N~4& z^cfXq_<8jM#YJa3rHoIBwehVwd3O;^NMF()H}L5<%L;TulO?%X5<6yORC?GU9-j7Z zaiAjwB+Wf`ImVufy#~vMxGOSID9muNQ!gY;-8AquJErD}u+(qEyRycR?t=Z*R-?Gr zH)z-8crTI5mK}{G^IszveITgf5MF{iXGQ1^?&YV@5vvWRUm^FpWBAAoQnV~a)Zf_- z8_a&;awUGCoX6ex-gn?cZfi0k+whrQ;0Ge+072(ldCm9i^K#@C3va(##=_ej4)ei5 zg!pu`SgtYpe?)0{JAb)zQUEjG5pdhFTvGMEC)O||^*=;WlHIH!Q= zTXTshvng^`D|RV;QJ3z7LhY`}H;Gh(tIn#oyMqkcEnZj{vI?#G)GNQ@e^Wmmox>i6 z$K8bH&b!4nJ)DwAk=wWXOo2@riheX7iIsDtV;A~JA+L{WQxcqe zux}JlZhp0V?eB>i8H`#}4+&@N_?qDzZI2-+71w)8{6vY}x?NCQqol8pm+4Nyk*@O% zITg-J*{Af?U3B*NMT`ynY;`;yPr}0tILlY5CV4U9z`YRn1!H}Vt18JeRk_?sbB*z{ zN0KP&RIG1_E&Ap_b=r72C%Q?-;A*X*=mX0~S)N4;7ts+y(>$fjLyWk4Pmh6oJ4rVs z)JfJ)-#KFR_b$LfqUG8RCegDS5VCR|Ca(`rZ;RQ|qkVq}%Hb6RsgVE4l4G`|78ChK z%YM%G7*t>#+~pRM3N^`=Li`@Y_;LF$-;j{P_$qV}1K7T!`5jbH2TTbw@Wl z0gJP7uC&P+vwK5+F-Ke142}yO_d*T~`j6c;*xT;J`_gVa(|HvmqxlCkA46af* zDJM{=oM4?dFSrbh$@m+ZZFtNcueMxH_RjV#T#U93ouuGFCHXhIvsJlxZWVE79=uz` z33Vm|_xEMeCT4kle8C900BK1E7RC#sbj4uS0NB+V4b1IP#l-JEBQA%r`o_^+&ui@J zi3^@$N~v3j#tyle1VJC`U@ol1V=)djnd}lFgdfzDj6WLsqh=VQ{gr8OsyhjjrK?@3 zmbG7}uGgln^(h1;=X#g<=?pHizkx>Hn%oH~c{vXEO9e-WkNn*9>N3R&0~1PZGU-OSh=G(@La<<_@WqR>Xoub8M#WDU&4lf&}4KLnvv{p_N*D?I`WQd2k zsXVL6=k(`*Mf;?!akRjGrAxs3uhcQ+zy9dt7VS0-OQcvKF%j*Hwkb_Dt3kEJhKA9# zo0!OV$3OMked~>fTdmWcnY}Bg7qzq$6}Cgr%%&HMg^sHwlay0Kq-;Krj_nL|Icaym zhz;3hzLLwv7iiro4tn)XDpwY{PAGA^g2$4RGja&T{y^y?)74hiX{}xQ)(Z3$HPHIkv8*_z_gXgip7+WnaPoEx%lJM)93*k2}qUz zsw^IT`=$p|il?4Ao&t5G3A-I%Q(rQX&y@pG8Y#=;!ikNxEY``JkP0&;y&(S>M%C5#V?+ttcOWzQa=@c);QscPn;QMOdx{-TX~-SEd6-_XX_grUz4o_!?`kOICA;Qh8%MUt2n0XA$7{ z*w;>_;80@`=z`x36;AmCwSH`znVnMyHcd1+F$vbn9I9Ty@SXV;Pw0;G?%1SfoWEvL zRclBvEB+05-Q(XM=HoZMexiHA7hcpr!?4V?rN!4e+fLw-W6TV)KMqM1G)P%6gi>m% z?zM)YOKwC4;&G01im;W_<4kL@;P@{N3b%g{0^#Q>CZkIcEQJkPjz-#vd}b0J`-9h& zmu@=_1nXzki*X~iA4TXNdT7QUtPvF4qHCDWny=i$s=lj6dMh+~KESKIDz#yK5t3ZJ zkgBSR0w)Q(t$--E+?3i_YpTP(24$W#j2G;i*Q0A7ltfq%1Vk<-? zfrk}m6O+|h*&@d>5pwl`6@Sn}iG~wha9gS~g?B*O6x?nyxe8j|d_GwjtzMWjy_r2- zb}f~P?_lm~r5VcGn0XyMgP*y`nmS?R3Y-R+5Sn03`F{MRH+B9gM)dF(DGnm*GsHrD z>YP`Bee&0&ErB~>40b7(`v&0a%q7z}ybnCs9o$3#|3F~9dFy~IXZBBe77 zAV^Dv*A~jc_mfF>`1!7g(^WL{@tFKNW^+@&y@wzQB0JA&>`tHF4Ir6Tg<)08d}&L? zz^=N|ulY*)iU~JYQ#H&BV(u`USu{wkMz-<=kg269J>mqaFK>Oxg|008BC@6L=vIXy z`l3Py2oYj!&xxfpqy@f*5;GdwJzCSzidwi^-BwWExRIn?W0)N2=1J`U&!HPiFtS&= zh#gZ-=Xv@D8`?{NpT5mT!GV<*^DWm@cm*+J*6+u;D;2fT1Vm5amLK6w0G4KW_alkf z6RFL97S85w)h%y(93*G8czLh*GA{n-Glgv@=)44{F@rD(|25&g5CZ6|sg&)~BHv}LT+0(sU@ zxe|z1$osXWsb}6K%*&tW-Q@g6b3wStx1hGFI(&MmA01eRg6^iIuR+W5uUjYO3%GTt zl|jp5r4JAF5*rHVI%z2^2&27Bcl!bn6q=0)`6Vm(T2L4Bg%Nz+s#<&+1e%c3ZR4_hc@TReP_kE% z6q1(_jSU@nPtu&jY2U@bz~DV8BmG8>$Q>Ll@?fVqDzun~yhCtDs(O=A0l2~$GxE+r z)XRr}jOIS<1GklhwC_90#93_w=fuaCR;~WLdzMHytr+#hyV<=mc!7PZcfQSd$Ign9 z$O`bDa}Ne+#3|ILt+1Jjhvx(B1DWW~C(5ll{VE>ZBu~2DeXiw@x6|#^K*wFH59WWV z53kLCb;l6A?|p@A0(GgfV@b8VQ{2y%;A*qS&*$>=EN2)upLLJ!?8e|^eXBybNW1Cx zy8h`=n=!BDSse23u+`nTs`~Ydh)IweiCWLk8x*mh!mT)yEL5rmHf_IX9{BK z9-PElmfzMqE*8U;MX0%Aek=gmq>nm9N*{dSVb?or*CVIaG~2AnxVb-|eM`$D&68a1>R7FQk?SkJHW(}RZE*`6}ON1U)I>sXI^njB`&EbFxrUB!DOs zlg))}v8OQqukyz%4E^Eh3@CqoQBSt+1sU+KAhcKkE7-lv&ABZ%^f>=xL=^_A%^t>F z-%V}q)QTWf$IQ|lO&#*mBKw;2k={sc1;KY0+tdSjbXKCEK_g#iEpc|_>+H?$Bjxf^ ze4XumAE`y$L39U>9Y;!|(}6>{=eRA+GVMoi3yu!BNzhEN2~gpm`N*UwCoGbeWP1zN zP^};yJMH!ID5WXCi{@{Bvh)pW2yGv5k?=*rLvK)NiZ*aH5H;keJCNayHs~;5mWl_3 zk+<&Pi38{Df!IspJ4&Alw7BIAtB`l)&Nrx)1*Ja8?J?5nC&GA}Bm(zp@3@3cMIlmZ z$`Y1No%e4}V-r8)Ag%#_`0LA6gy-X-xh?X?XJ^)V#7pV1K^J|z^t4y~J%q=X7a@7X zW)eo$+_EF*0V71&lOqmK%y-yxd~W}GdxhzZ>VRJyajYO*h%Kdzf}EX|HxEZn&EA)b z5483|PqZ7rU@~L2&jJMbaku!oTA{CB+*0dB%v1v7o|#HM9ud_6sOO#<%>Yv{n=v0|nQrZJz78oyxWnsvT?(K{hVG6R7Wf zo}*oAb4nhf~HpdiWo-t3d?A?i>N=(t7S=+W~**!LQjSbb{By3NPXf7KX5 z|Ee*FEWk3`jYXc)PKQj#moAuibNqO7w>yGy z|NU%A;{DY{xs-I^e2)X^H}}@mGX4m?>5ye-;}Gwu@L_)RZ;OMX8zOVXw zl#VB8dj~-Vh5_izQ?K^>%CiIBUM#fRV>Vw>&hX$2_eKZ& z$fTQ2z2A^hZh#C@GMUeziGh5B;u@i{$3t#rMQ*U?lQf-7nN#Jx)>M(xrpCY(;>>aD z+)g1c0P@W&MNG8(8?AuNjIx@u^iV$|XYCx-c!>*nC7~5Y)ClSL zpfVen-@ZP@9*X0Ir?L5TDwzs8BK67P6|0+MpXjqh3_hX8Rl`)&Ujj&VAUiQJ5}Rh# zwV>&S(bT=~YcC*OU*JM?hNoxxafqnf+b^)28wV)1a9peQwWm*U!#c{n8c-7_r3&dV_A9K?@I zYw`)@7fPaT`rMI{Y^skw+WoRsT`>zMhTK&Zo36%GqJuCL**a!S7@bzba#e34ZqH;2ECnqBFDey{;J3o8qv$}*$(@2bK;YvLv)Dk zDo-tHAdE`SlliQ9`_ikoRB-B!W4-dbSVaDoujL!Qb;LIk>v8>lf7I30xZ`UfUXpGI z>R0eZ_}JrVW2^^6Wd#^0kZ(60imfL;AkaujH;phTzga-w$ZSK8;Xg$vi*5{kntbQ; zTlHea)N#}D!`dPyls#FA8xHi{0!5r8C1t1yAzju_-zhG#cAjq%8ATDGG)K#M`sDSE zPfM4Rc-BsZIwz<@;(kylV6Z?Q3BU1nND5_vE2XYHvKwFIoXN9otNzMte?p5 zKs%Mjlae}R(R-kb;eyp`p~T+P8iB^C5%9)3G*v{U_PbLS*Q7cphFQT z?@*&O#*EuFv56me(6@@eHaZ1lT&q3qa-m*d;rKreLF%@BHk;eLJ{hl;a4oY__=%j> zwmMP69IA|NZ|{ariYG(`Sf+C>LM+30R8NYl`c|uUzNntMj8!K#p1uvp0QF}_1w6hq zS|xkTLU{8L0X{o^x{tI36$H;B;7(cgx?yTB0Ss+{1^uMPSu&(l7bTgO#oCUqR$Vq? z2mff)mhkjDVmS9=;vM;5z|B5}wAFSHw`X$E(t8ppoKG@XzYms2Q$kPjWeZDRJrBft zrZzI5Z01I}#459SV6bfCK&TEHR$AM^JPNg1kH`xy|G5KT6nt*N&IGT;$pkU3_@imoB&YS64D$U$r+QZvp<#93Q{pF-nk!@(`!><0NUHd7|0xkiHC{zz$MO49U|>COX^){yk+5^fK~9OUr_c-)&#Ei+IIcKd*rulmk87knYY%2nFUNc z^*rJpOYNm)O;4t#-e2}up;`_;#I_>egrdKjo*7V};@!l{<1i80!W^`r5I>N8#&K%B zYQvIGhet{$ntYcRGxJSs$6MjeddLB%w&=5hg3;zc4rA(mS1X zZTliHd5g-<1}S~kpcRuroCGp5cW+QA@k|~!%mYRISiTWMB!A^LW8ZPF4V(1BGw7jo z>wJQs{sVB$$KB`ZbfW?sdh(cF*{IBa-p2NCb9vT1 zjRhjHkaW?Z=wG*f|Gv%$`K*L=V3gffZ(&eB1#Z=B*DVAP>XH$)!tYTnO}KklKtFw% zca?`{&&m6aAOwOpKBJ3$TOTtOjTs>L{ujRw<3g+E2WTpkus=o^&x~&<$tjaf z%m>&{!o~rX%h9ZX|27NUY6hCrzN$ZA!GV&&=7eQ{DW8j{+8eUhiw;QyeeCjy1wwq7 z#0@!VU<}AQNFei$Qrf?9P$>W2jU#*!b|G`gvKRsMi35v&;s8E|#XV2#TXb2kc8Ru) zFuNjp5C0~vba>dxGyFdsBYxKH?5v=k*i&fp;n-r@1-oX zvJi3IZ-W*<=4$0R$&?!|OQ3IHny%b4rkovfVn?fl9-^c|GSk|zlR!U37WrT;(*)|v zgf4>8K6PXEsWM&Fk!x8u{-4cDgSU+dT!3E3$gcHe0EoXuhWX$j41<3+qwAbLpJ~$< zmre(iPh3g7t*meAyZ9YI^mT$k*7W_yspETT$i=Fs2hxl3Ml{5}(l!lF5tBiazFU%5 zT%-K5rX_<6OLvJ7UL&5->LnwB%ogyTuR*CL3=&x>>7H?~gHQH8PX6#7zVRA7-@Vu@ zZyUW7u|h)E34gak7YbFxukOMawMf+yXWtl?YYuDyz92?~{{KhYdq73CZR@&KMHCPa zBu7EAWPw6*63H1PqY@-Z7RiMuK_n-UlB|+Z5F}HGk|~f3k|Y&5=lBM$z4ke0pL_4y z_qFrdY+4kJ2D9cIbBxh@|NpO_n}<~&X=XptnC@fjiI!L&DOkNuoSBPhx$+X|j;K=E z5w9MmC*FuEN2U+6Pk=T6w5P9EUh=ZN%oZYo-goWDwwlTO?$cT8YF%#F_N;jeByd7J zj<$!AZgCpCcyQ%`q%LF9JzF9*mRUhv;|s}h6HwR|&3Pf{?&bhnC$s6S)tPAvY(0Dp zhANl_u#RM}-;Qgb_M_&$^!+U`5Cvm_TQMEoq?j2gDw@ zg0XTNQCYn7PHNBM9^;_9EYh?N&-DxtBzlSY_Tg;(uIsX06n-5a%3v6ug(PNdE(2VW zJXNSG3=%GBWpU&^^f+;RldUuI4nbsx`@%a}O6%>u_i7b8gci)+?c;Ln;in9RFd{s9N%E4Ak!Hsu2)p;pqr{!M92{P)|HjpFRaGyN1h{-XUBd&qjeOtRfv6 zC!%#XX64oc-r4I4fo|)cO5Hr&TCljMduPNR1L-A$HicD%M;``hRSqBL^ zKg8$VU$a3m{#5R%pIz_9`ZT55lR3t2%sKrwz0xL+_oyD0S038_8mld8tW>fT$d6`< zNx%l-E%XMQQ=IO*96Cc(X6^HvXtQ0@G95U{4bSLQVY^CN>EmlQ=f7oMoQHZaoSC6- z?mk?=kqQ^(s$91S-7!GmG(ZtBbLzm)e8%2I&O;3TbEf9JkNp=lY~q@2`obdDhqLWi z9lrrdQkt@_l1C+r8uT#s_d}lSgxXWWHW8GoaoFP4B65`n!3A+Tk2Xh%DermgUmcnI z?D49@9ZkQ5rR|gvoc9lz@uj4a`q=5&n0WsnZakRp-u&IUcQ>OT9c1?z zl|~r#nGjXP^@I$Od(nXimk<&DeMvjG;}Fg+?L#^q? zM*(EtU(nk+moeT?IaEGmkWY5ytKRJe(gl8rkBk2(I}Mn`7N{VT7H51C++Gz`xVnI} z;IwQl7P_6X(cZ9JmniN>!0AH5;Id|Sz=p5WV$qX#pNp4umo!TT#FXocDZPvf8@_yz zW2o_bJU@AI!mr&pdjH#mNUHU#3;%`6r1*`*po_7^_T^9SuP!5Ox;2CD35}WeP?v!M zmF@me(w4xaON_rV!zZWkKl9VM_9e;2;f55`K{mPSGCE`Iz zLZJmjm(`%ROz55UvHg z>WYB0K|a;sV}-UkLi4*EwfO{h4=qfv^~vFO8hWA;0h}umuS(%$Zm1LXXNW8oRMnaP zYaMF>v~c1|o^Hv9{ti91VlcS<+uDdsEC5*urRv7pRQz7YDJ{ZO*4Hxk_F;($l8Pr zvg)|#ax~AB&Aw6jk=*`GcW4+hT8Ky^&A)v+J6ay7jYsifiJmAdJCA0@|Qr^Io3wTU|2&%?M@W-;}CyTJ#E6i${R!Cz!aR}iI< zRR^Nuf+SMK1rsKBOZ^2uGFSB3hcj6O8BIgwqp%J^WdBTV6fHjmIb_OQzsDzvj>Ha6 z60L@<4}BKSI^nNr_9@S-mA+gvw;;kN$gDQ?^P|>f;r2a?9hxE?n82!V84-rZ3Z6Na zZ2E+t;43Cr>Nz>J-6zKq|0NBZ*uNfUBPQ@TXMs&c35P0^aytj?#wZ6L%cIxACfp*U z!w@SgKe9tIC8Z|lu*c4bxRP}>1fxf)0 zyx_6cp|~$`1TWIQjz5TC1n+hN(YQ2z0ywXRN zOvzZ}QC*OSZuTp<5msJeU!Cq^+v8?f!!4~OWh7LTFxmOG`Qv5_or|J{ z2~a5K{fDmTZDjjRN)`_MDzr(wjD2A9MljY|)MeOg_xwqkxZIwD!_&?Bsep<*E{C6(*sKprn}Xi z9UlnIMXW=|Y&A9pP~ryx9w5>V`)PERFRkWDvJWz(x*K9$w52CigkIM{(MKFRyCK>6c@xs9TB1rV{;G*8jmFgbPn6&ZwTXOCf9cav=QwWu2xs6-)>P4 zmD1!*w3Pk4)c?t?Wnht%}pgBJW85IutzRkSYIBE)yWXL z5^F)PEO8KWHeV=!?4XY{1n;hdae9~VMo5spu@$k~TLo;bY3+Q92iBi2+5*KwM9om* zr`b4ICn3wY*w`o;mUZZ3$aQ0;3U~C@lZ9)U5gQNz=v>QhRa>0YH*N@KO{4uQj_>MY zLJ%$w8kt=V(>b|?UD0pKy9)hTM{(Nl$~ZJAuEbD4U+kJMENhN7(A06c^ zeq&;i*gp^_>74t@@C@;kSh>VkFF-MmkRPtqmfRZL!T9_22NUe~-{Y24-seTaM3t;l z3E_5i*z<8J_ZF_nSwF3a&GUATcE!!Ajim@Cx`Cg#!|>5*tS<-t^^M;?Q4L9xvbDdS z=o=!tXDb~K?_nW@pZ*pP;wX$<1^f#qbBb#CHe}2IgQ{C@oqNtgnKgXmRy># zmHh7Pn0{`|&wUyFJ+SI{xzM8=7KD#st$}W|E?8$gpvzQNUEzVEx9-n+h~e{c*MDjoR@s;IH%vtoU6^;XJ_VG3`clPh8FFY}+X(hY2Y8AzEMZ zN`j}tr_H6YAEaa_eUh|z959D>=psv^iu`!H-^Lm;>c_AkLb*TwNfwOLKNdzEF&*=3 z2d$SY1}QzluvdKQ9259R1MmHsAGzGvKtoDXQBr$nB}6c(c7svCazY~0W~rGdhByV6 z82cZ`vsuJwPyRhEX%{R45(4^9aOQcOLi11=0cls}e?55dx+X{UGj6z6vi2)cndf4? zyD|o2E-;Ywpz$H@)##K(s6S7K3Sr?8SHYQ!J4g7jEmhOfQN{aBQ0}{=PRh*Jph|yE zJzKoj7U8i&Zn09WYd$8x+vSK$Okd{|e&-?3Z8JdOJ*YNU`)S#~4g+!Kvn;{o_5v;P zII}_M%P>4*YWmEZBBSKiLUC(uoxESM&;R~3|M5ET4h!&0(o0@_aT*mekK)ab*POsJ z`vHyB@$c6VTT;JY_9f_`cFJJOc|P#==)|t@M_*JVe?wj&H7)^t_$(sPq7fhpJd+}1 z*Fvy#Uxqk&m?-O}-qgN4r`vci*GV};We8fLO);#8h#nstoZ@(#?aC2Gsw!iOskN6) zv{T;YzUDb=0+(apE!OVU*WAXo$<8?j*fv+dxBlZy|N3em0Snu^&jc$ramY5&c)jgQ zGqJ>Ck!pA)4ud##njy~@tzh8k5T7u-1x|q;?{U!9EYrpPuN8NI?U>9|6Zc8wRpNW| zlGZG|pJ122{ksP<1jAtc5_`HXMBVeS>(c*%3Xb=Hgb~*}b6wr*2|Cw1h-R-vPI@ad zcqOh&5#?$2^g>jV{e^xlZMNME0uHA^;U3AH6P)-8h0r6=47(&+a{Jyyt(djrm;QE= z3<{9v{qIL_lep|B9673+x7E`nt3y0;)`9{7KW88-jIlswuHj@|kH@IQ>4b@*f!Q^) zgPxPu)na~wIELiUHN3oz`1E;Lco1}q)c#1Dn4akJTgMU|Ey*oKhPzZ2H1N!UORovQ zJ5aV0!0s%j;%72){_8OPU%byea|M@U&5o}*8H=sGBzSujn~|1U1| z-;4 z-beb^pW1H@?t@`W#rAbmx_kUE@z2^%KT= zAASJkLmjLrr?tIzqIo{%!-{Cziw`9Q8^?U;DVfzei{eG_Z*5?kVgCovG8qKC6_v`# z@5dDx-qMs14l=;(IjE#~6;CoCcD9`x1hW72BmX<^-CZ-yAsBOg4zH8lE3ag-QYUB! zM_DITe*9)a(|l|xTFWoR5s zy?xoC!mAE<5AN=PlIe0pLnMXOR}Bt6+I;EShuV?e>EiCHJe&TVBJ~6F9%42NGNay~ zYkW3W4SNVtJ_Ylnd<1_cj<&8~08iC*{yOn=8IY_Dzye^gdIpFq!4f{tGO%G@h9a9imy3ND2hc&Gzyq@&+X^5uCK_*Vb8YE;t79+A+r(+5 z_jrBhbhCNSL;B*Vhbquw3=h~7?Wf2~3K{Y4^M6eDEeM1LX#xt1FTZ1m)_ULj$UAef z3Ilf1J2aP^_rY?z@_K>*FdrES+jfPY74QcvsV$E@iWwY60*l{r#jr(WJ!Adl#Oh%Y z5{)P!%|p`XrO;P`{sIA2$ny9A{Z*gc?aHE%<1Zd%9s=V(DdF1R19^82l9Y%!wiZDX z+Qvafztt?m60`jCmBw?PrETJa6F}%H)fAt&HrI z?t|tyRG}I9cInBm#(rIQOwo-!syj zhv>~V4;nAbHIQ(@L4S&Rd<@vhZIo0_1^TVMkattIM~XVX_5J;lY5)`-K3p`u-F>&= zuN-qDB0XS#^p$+9r?c`o1LijXLL%Sd07h414Zua}Su*hv(chbqrBuG5`5EZ=WM#Gi zI7b(t?QQ#JP0ylFkH1khWJ&|@kk_DrkxfGeoqEVDSh{t)L<+M#1tnr9o2hyspx zbuI<4cNQ~4ZsQC1Jzcqp&$N;ML)d>ryn@>9S(q+IhJV?mo~}abXs|TUp!ojh>;k8) z2aSe~h!8vy!^XoO{MV&B>w+JGG@ObgP$k?B1B`@^PpaoBe`H)bvX5J3&f~tLJ2p(6 zE0TzrTc#wf+eqt^lld)6E|rT=Q~&P6Ko|u^7UX=+l6`C}0yjgL9-DIg*-lN%nh<}X zn?9{0k z$+_c(&2p>4c-*-$!h^A{ZpYW_eAC-BF~u8->8vTzky=}%x}5QAk*|I)fk`fxhLR{->e z`EUmisf0*~nj5mRD;$zc%DywyJ&xw-a;&gZ$@hg51QbOr zd$e58nW3uBl0ST4-vb1TJh~@US-VhKC_Ki36`Llx9!mM zUVSPY2L1%Wqrq60hsvc7`^boj#OQ=(exQ+3Pu2X5JjvFj!SP$pKb(^N&+QV;@bJGb zHKR3_zw0EJB1YV!t|E8FhkZqrUHkaYW|{W&GE4>=f3U8Rt?*4F=^!i6wU=WAu7RLs z!=i3T@63)YhTCN8}Xi;X0JB6!vsbQ(r0;-Ek8-Lc~j znkuQBa13w2E=>XVCVW?l<9bkB$@+$Z!;rC24R+V_Ld!GN?zG`D?vS%;0L>VFp8~ep zhkvGmjd9yF=Px-h<2U*agCcjCqVZT45 z?*jk51w*mr_bjS~isOD`N9C;23Y`G-VNeJtYMmdi_{O*<_qJGpb|MCs_+JPXIOXG5)@2GAuvB}#T#c`0kPNRbFSiP|$B}IOWe>I{Bg&#C#1W11#a)&#t zRt$v&Y=27canSm6$J0H2>P%{AQ#2W1=jwi=Zq%!24?8o765L-NR67HAP(R>g-ylYE zJN&p^D=>aVQVa}c z_BL;Rojzc{&t@(0@uB^U642l-9Dqe+AZaylH-~A7c~O8*&gaTh>6OUPpWZ4Fh7Mii(LZLQl7A{tbzVPMZffMrt6**_3X}= zbpFn38Z==-f6pbe9G^t&kd@yd(%`yE|3D44e0J0mG~^uTAZJry$wr>UEPSeZxVWti zp3J_HOZ99oXqk}NaMbNm(9&|Z*js1oRzxTz=jRjRs$5 z8?KA=-Sg;UKgMZ#3qhH~6TpKh(3IL6i0)|EoVdJ8G~$={D5hk+5SX&!Ixv=!t5SQm zF$TvMGWG76%VojeR#l7FzQ~=~JaXA~ru8d~#5n6z+x7Jx40hIw?(N@TJ^Lv9H9yfk zD5q7m!hDvU^eiioaBwYTq4J>*$R%x!OMA%Mm`Q%eJ^>cZS6?!u-Ct!hNembwJknJ5 zAZVTYGiAKT2OFgfdz{kNPw&lHwMZpB^MRnrjT4uigR132qpB(b`n-yqPesvT+@C}x z%R<~y*!Wi-vcBQf78locRDPgrL8pQe=fO5li7))Jb05Gs(VW6+{wekpAf4$e%K3}v zO{ME^d8x3yYzT5Va%XhX)KQ#Xq{d{Wd9+G@vJlJFVzSykhE=%7;`x`!fP;y*{9z50y+eldPvnop1hq1Y2*09*EQ0BMPVv(k1VEd^Mm2d{s?e3DV$ zIAsY}TW}ppJgNE|6LhZJD0S0}0{Oz#Z(0^_Mz$7;rW^7yk`XLxEoBr^sPFYl<%9wm$|OoF zmxMQEyAYv#bcieKrtn+?0WQ2C#($2rW|(T8Q>P_ddeWh=`1*WpUi>E5fiA^2?UF>X zrhD|t;VlKW!%NsmL-6~JECUR9W`SrXuuz$_s;Tw{a++3Jl~PI(2JrM*9~fZjzc)mc)rJPUiSECdmfG1Jfj|FI$Kn(kW&#Cd$t8K zXa$$6Yz?-7$Q6rA8)gmD0l@i`Okb;Sb-mfF){+0ifI8MEO8CW(XSs?D?<=#z7xkYB zg8iV>M_`d8O!kVKan&dYC!iVI; zXVpvsq0-ZQ+mB=UBGrQo~ zp2h`q1g45OCi^bEPZ_xM1{?%j*P+0rk$XvvmOG4bvWk&9Kb&12wabXAOTiC7;`#I2 z(HCpsODiO^lpY4|-)OSu^HE4$;`CYY&FA@LSh6Eh+Qxu}+7}D>?K|xST^t0Nh?bu> z?pKs9^(9x1Z*q11Xy>$p)#ZjUhRQH=pM+XC_sCq-O$zJi>nFR^?+qqzcbi5)W6m>-ip6x+6l8 z(Fegurigqyei67|p0TturUdq%`9&OKlx~%ujoeOu{<`CAO1CfJ0cPFv4U=>aiyK(t zvw7R!Czbie60woOjOfRzX6`aV&!rYwxUbPan+|pWM4>+3H&rR|ss4mh8J_He9u`OG zYJAnXx?IfNW3mTc6~5Puon#)(e2=IRF*M``@}^LV9lLZcz`hXkY`aMY2CK8&M- z4;b5#uB4U6?MSUV?dFRO>Jg{y=xYVsZ~5)mNGU}}qs2H8xs$j(Vjtllz3w~Kms!ga z^20(wM(#l2oNXx+Ha>eGD;D;2(#NiN#p&}8N|UM9{p^hm;L|ML^GtX(CcaP(3eDCs zHLI6Fm9w8G%N_Sw4P~IG^P0>&LNhfoffV4r1+LiW5?n4YDKQg zFR(xLe9sszlOIi^3^Zmx&$wqh3;jSDzDo=x*wZ>3vVkC)a9FfxSViXgXdb`YVVI`x z=nJDaH}y?>M0m6rHUG}&sHF^4%6g1;`Teh4YPH6k%DcZ@K%^+A*tS>7I{ErDkZe}L zJ5WEGv+GBmV4Awg8?^~$AaEcY03PRP?rYD8rq{1G#^*at9s{!hRQbhpe)(z(&Z7?t z_^G80Krogy=JqZ}kHb~7di2UNdl0gY?bY8$7EX?VYWprMc*_|kSp)L$tTK?<6+jX0CH}?v z?Xk?-mwuD8RdT0mVPsO;5e0Ps@_YMmjisalqWb3ezYUKes6Hay zRadE@y>6r}IB%{?S?+AguB#9tS@E7U9N7l^0-c{TZ3;AyrYRP_`NU3c*DyT98nD7_ z{PeysI=d{#fVKb~wpmb*p`U{{<72DBy01{nm&Tv3??1ajsmS-e!aomFCo~BRH02Gw zGFJ*B0psdZEq;fmPJNHj(Cw#kiHx@%wZwIvRu{ZY{eOW`4W)YMRC3%AKW1p^)3LU# zBR|zxxE1`FZ|0Ik)lTJVp`T1n1j;?ANAv+8Z?8d7r8if{w^EPHKg?!ct;#L?2{e@) zuIb*TY~5IEnfSy_8E!+yc0VlE6^KtpN|n4y;Q*{eZ%Pu#5xk%@6e?hX*r|J}*?0Qk zj6sUB8ZTh4&~gy^&AtsA{nI!bM${)+xLB9`1HI+e0IPYlGn4Tt!b^o&x&e=q&=tLR zNrWLzPnQm;Ic^bah_iLLv?T^(F(9$laN)!9u4qGtfiXs3)eRZ}%d;mayc+eBc0%Qf zHw!CbY41BLn97{;?)a;e%gKCPq4oL@CpBs8r7PAmes|AtIXft*^u*yZjvb5!Ar6Mx zc-fl>S;)9LRmSg2JAL}7@T6cTs&6~$-P?h!91ceTdH{lvz(eaP(@Onh%K^5l^QQuF zcAUJ&cJhZh^PGnXYHO`?_}& z8@3G{h|_RPAOQmCC!eKVDdUdh?$T+p?elAL&E36}*S_(-fxKf~{s9NQw$Wj_Osvp? zEw&Ce7H1d6!e|;21Pw||^V%Gx6}$<@pKAAO<5{sTK_|V;qs){^K!+^7NWG;6)BQif zrpkI<@5mu(tXax25J9Mz+xRv0=7vIBMd1w=RYq|vw?GJhP0ie65Vn2IcSIPJll@zx zH_?OSG43dlPrZ}Nd31!o6=8q%&IIcHp(6vaqi>5%X;hL zuHlWiwIc6B!d_)cN}+TS6P{^$n%7+|)nQ0zp4>Uix3A}|$15*KJso2-tu0BJR`_lh zl{NA=@V-E2`rwS(1NGXIrX8Z=eEHZeTdx6A?0go&5HipCf6^iY-a$FcJFX894BppA1 zk2fd-nh{W^uE=|VN|oJbU3ozuuJ2jKMF8)Cy~R@RD~}a<)g@1yBSt!{kSuHmH{SH; zkbR;*!(lVuI%O0hvvvQXdsZZTkNTXSR+kZHax4=&c zidl4CB(j(Fuyj-yQnZlZ2q9qbsO}uayVP_KvSoQE#|c00&lq_cxO;BGOVzNe@fl*qQ|0hkR();4!5^5s(#Qr>Kt>h z2e$DNuIbCwS>?w^UCuo9?Nf`@x&ftGHr3p8@J2tB|K9LqH(S&Rs1wZ6`K<{4R4@-; zeO5O2(rMa%=2QOioKns}TU0Q#bk{74&*hnnHPUa~5q{vBEDy@)BbwbP*{bA1T7$+9r*ftCwOx{re$xsUB$Mqx(nv=KHe2{Uznb0QkU5IL z?bESkEAPe#O*6pPb5uWUnJY#l7%Lw=D^qahCP3!IlKQ+)u`JpJiUXjS_YqI(YUFvu!2d#38vArgI8`gwB`1ol^oSVg1!)^(5sKinBUHkP+x&Hz0)Kb157%goQ#=2Rb`ug3 zYkQucc}E4W?~Qdbo~;ZSy){~D`sQ6%;F-LQzXpID87Wls6+TFy6F+(3W7AW9paJt| zUBv$s!p7#+@a5?S~r5JtD(q zIgA0jI+$b%6noE+i9Rk6y886+2OX(hU6;e|NyRiSA#0aDqt%GXs1hr=};@3p05gsTi?yu8{8XdRo{J+pV2o#U3>UnyMwlNhxO|DPg8y%zX)iBW5gn(ESXzz?=A;vwm7 zn1x9YUp3)(uO|^-ebfk0AwaB?DLxf$$;Q<`jv0#;iEBk~Rk!9@h4b@qZ^|s2Bcrfi zsG(%;2%lf|uUisDEQ)1Y-1N0;2MHWm*9T%D**&BYlJb{~ChAq95quYcwD|@B}Wk$mg~R z`Ex&+_#Ar`L;z}u8YAht6|BNhB8#j8p5yJ_Ehah(3t7lP9yXDAz2QFoGN34yDo`Dt`Gw*w+zpWqguFj zY!JkuKiQXf(D%geTQKX}xqB^}V%)=D2pc^Q*_c809rAhAlI)bct>)avQO1aLb^ z{qGSDYC2bqH7O_-Xf`^A4ki>}dE5z7&yl8N-_!?zGiS=UU4*){hzK z;20Vt-LAGKtlKAjv~%M9uXYI#91p*GcWsca?otD-VTyy+prNHgJVz6@z3iTKf1Ui> zU!&ZzyCE;}BG=)~{{aZaD-I$?L58*!7QllN?)}d^D9WY5Gz$2^jn1D2`1lJw4me&P zo!=J#cgCYSj47k zQi>uZpGKF~ho18%^~R40)l5c^q}1D_P;kVO`#pEEf3BQQ0MwR$KN#ErH+!cezw@tb zzf_BrIPD@p>KP*lut<9%9B1boqh4bEtYglX>)2^I5AG5frq>Z9Ue)M66o*2rbvvt;6n$@I~l!HLw{FPVS z#$2DpLtjCgeygc8Ib2ia8l~c6gWwU>bL#ZoNF2GWvYIH^Q}yg!K??IDe(+^8(ar~F zAOC)%8766ES%L7#{-QI|Pij0)O{_S>A;?CKZ+Dv)vzu8XTvi`|-I?Tuu2sxGCcRz29D-{=< z0%v(pKWr@tV@!a^8oaBjnE4amHF)v^e%C#A!pG~T2k|0tz<^X;nvdcX;@9Ml_Ty+U z9izWyy|CP=Axjp>#XT}I_sF8t3Udgz)Cl4n{1j`<_pPMK8w*%0G){1T-Cf1XaO9Tc z0Yak80JltYDCSq`dJa39snG5*0B0|sUeg;~6J}p5Ti)ditGwT@hc#_EajM}pI?hWm zI^1gmd_IMA!X05HD<4YUNi_)dyX@T`WQp`!9ZO&Sf|JA3DARA3U-P6~<9!N%(YYMl zf6wRq%(8fCVBn!mHDZTLN_t>p!r8!MW0(z~xeG(pjZ(S@X)sEa@0W-;6$VmAEk(F% ztJ@BaYpBAwuC3Zf5S@IPf7K_Qu;RZDk0}gfzKd%^-QMvf;<0(+lSCW(Q2zSe_;VLf zeY!)=!|h?3uE#qqskUF6DxP3N?5YW=Ibwh9_u9aBIcqNd2A=jBOG=;FbvWLwhcd8D zm4$aJ6J#{M;t(FlptZXlKs3eotybhw zy8o%cm9-fna}bBd;b-5?WEGpSxRv4(sdJ}zM)TO)#XC;&v3~>NOtT8bpksm`nATZ4 zLD(iEbqXKlD$6oN`H%@b-T_0r6{^Ta63#8zhZzV=F)pbuLRA-;mle&WnK=&Jdcc^} zYn$e z+&4#&Wb=3P;2Xh5x)HL^4+~O@9uUiqscHw{N^$0wWrMNa8vAFgQu3ZE;R&rT1w#*{mP^gra-#FFmg8?Uh+y%`o75tl|A_2Vgu+%E{P!k@w`g93Xo zYYtZ_$plcuQTVZMAj3{B^;lyvm!vZ3X8~ef%|*5-I_;yG2OIf?c486_7JY~Vo*Y@7 zVNzK?=0)tZaIXhzG8|Q!^j3`iuG`pdS|0hqs@rqEjb0fXR&IR%))VUWzB8ZcQ<3v!vijYCXo;gorg4a1uj=H3bA^_RBLWbkK0>gE5r4t>rq@0iCg*ycb zZaG$R99NrkJkRNcg$}?F?RU0|I<8%7R=I03BMuJm=Jawr2V{;Q-JG zjnDLDqpGQI?0T@XNW6kD3B+G=Eki3NHmJ{m?0Lb(EtCtlPLVo=29EK&Y-+Xk=?m5! zSM|6EpJ8+FrS!?cY>=K-lu&A4PH0=XwILKj6JMZyFGh}@+j{oxO_aE%EJ~3om6-Evm`lm8SpjotSHq4t`+2bIvmCu^Rw*xC`(}1|FOf@A|9j+;;J=Gp zI;6^rr#J{K2)aIK3g$U!8*w|lW6q>PC)hpAtsH|Z#w~*^D}i2X~4 zjyv@V%vzj; z#_moJgwCki_A%m2)2q7ge)t^#@<<{LmBdKUq{URHB8ziy$6rLvtiKY=Jc9ZDU$~?w z_iR$*$VE|hioY1;0Eh60_qFg9IEXeP!M;eJ;6^jw`WbdEm9tbL4*Y<(^Qe-yazuV* zp6O(y)zhk+W?Xeaytw6YkKt8rR#(j=j^{jZyCXk+=G@I3T90q#oe<=~%CHtz4&<%d z`^@f&-wMPSD0=O3#uW^ z{V5z!jG4z`U)Hjk8Xb2`P-Ty?bNQJJ5sO|(Yx5nb9##mg|X+hPo;Bp*Ec+KK2Gu_>(ovq9&>t)Sterb|5SrX-w-q$m1<`Kn0D!zUO@Z~g-TEJ!N=oSOm|p~ZG&mbHCKN60I`ybe;YK}9t9i0mgg&!+9S;j;KTOAk zZww9?o6GpsEl&(6$5cmcFs99Pad163qUaKX_R*K#FbAb zYV0}45GF$npW0oxp5oM(U2-+l?x}b_{LE1~Roh97B*aAcg4#cL8d4hWAlTWj9o;g9 zP*)|sD!YeE3e7jKDl`tY3k_eQhX@NO??CwjvyiQfcR#@hU)!iY?J(@{4=`Vj< z9Xx@a_=d+9K=wNDzb75NeuRs6b&eppeY+^nvAeGi)b~o(=iel8rfC^kj{9PNvRa4a zTlmaVynAP*3+fl;=)%+o_kLY1BQn22Ky;O@^u zguGVcPMVJOZV&k~1=?&Z7;Dwi!KPxx5{H!JMKQNy=gkP*L}0Tr|5&-$~8*+A=~qW1N3+4EZ6(M;G1~?+gphm zote51S6!=iw|Z$e-g?G&d=4y^ks{rrYrXbh|9fOUoZA7%95<)j)-Rhpx@g=r&Q|MC za03O2j0USOV_t&@!{%j9)KR8f$Zh6ey(opGJ|FvVcXMhD_z9#R(pzr3n7RQ?%(+SR zier>o<$Y=2>z`eu5z8kj3*rp(Z!2L)@*l5euQoGeCP{mUZfz8GUluh81irDCe|G@; z+DQ&HF$Aka^~c_gk|EklF~I;(jTAF6;lRIXL7)h1kf&3ZC8gg$tcvQqC7gZv7qch` z$ds3oiA7UeJWZy}UZ)ks)onjPR#97BszTCB>uw_KO)zrcDVR+Zms^K<_7aY>bA@y_ zg4~-J1FbYN^!3Co;}-9Pqop+b-i;8&>n7tZ>Dz~n1KC!ASK zB0~-trM63kMxP2_6EeH^NF5AZtPm)26^H=^eToJXUzufOdQ?{h$wa5wFMF)eZa;PN zo6D~kdc`P`xP>i3?^sEN2dg1n0{agz>QZ@8!qs)`{6QO{9fyObr;Ai#a+D z20SYDnDib35F!=S(SG3xh!I;WX^oUY9?D;L8+WFc)!|kFGFBj>FG=y<41`4?l#JIt ziDekZOb6Z6>u|xER7D!HFM|771zAhSSo%?L6G^Mtzq3Ne@c#ns>#eerG@D zcsgoBr8M<~vxD>+1~-@*UfwMdrI$hEK%b=z(tEDRF@7L~to+Og!_{ru#j|4mi$uh>@h>Ez zyH}vlL|t^6;EjN}|4Je%k$woQV*Qd7%q51X>ML)?*aotn$@hL&+qz= zxI5UbVX04z-yq}gJI6yCLYbL2Z2eQ{@o}Ix@sh>*?$f-}C889HdqT*#wPBq;ddA;L zfW)L43AT)`ST{YaO2ZE441j>qZCO?qt^kxEDHSjE@IS^gB)QxfnbraE&93w@Rar7u zXGHUW^sx2S)^|To4Y5CQ)f@niG|H9!p7ns7j`6p}E;#NDZhD=7?>EQZXMW6_f{l|s zvy}i~(YHkpCsztO8{WhCo(i4sAdMKLVN7G>))mMRc(Wr^ zFEzr+iz-V`>+Nk7yibs>95r5x@v>~^pFX^i?`CKHMNC<%{68%C;53%QFuEdWCZUdzIffHXR{C|QG#H}rq`nML~KkI91d&N zc^fLgy!r};mrvT#Nn?l1x}XY6OUzri(Bb5iqgS%kGOT9jO6%!DLFrkJhbY{f8xqcq z+^kM7X+hk-$nmttJtE$+extEFxwKIUdoE&y_mkwLlBvKQnU94YSFDPtOT4*pHN(CY*_S(a2Fq{Xs029xJ-Dut28W|*K)EZ z{)ZeML#`YbK1N#g5U4?K!@Fy;u*p_3>vHH3`58wZ3Sic8Miiy{Y={7SC&&eJSQc&@4U2 zbqLsi8pcv%PN79nZ-*~C$A4~NCSv)66$*aXQ@`p%FA8E;q10HpRWH62xZc>rFL8Kd}#Oy_JB|YPRiy z4HI};#+C&_(>k>|NS&RO&c4~$Gpp&bOi~2-3A8!#KS70x>ENnqm`BfTuY2!tIzZ1_;TRM17m z2|*5#orCTWxZKatac@q!#SeNXa(AYB!;E9wvCrIEz7fvxrAm-}jyVkh89!msA!#&s zI5VY?{m&*i3B1;((VZPqq}<-ig3$OG-~z*xHlEicpDkkhW8Ikpt7O3*QFxJ0fl3vc zY)FWPp^YESurETv1D}ObjYlUD(^Cj)($7|M^d)*ku;e*w(W9tS*;D(Se#Xe9 zOvT3cWMOdspW?P?v$RwhlF9bSm*1PN;FSXx%gwT!_DwbKflD+MUk~U&Q zj}bln|3@m#(WB~}Gw44bsZ?6EvmGu2j{ z%?C#1%S-tM#_t~E5NEBG632b!uDJ7<4R^64$ZwhiJ!!{yZxp0*HVQ8Oz0}X)s1Wtg zVA7ZYD#j=gY>C!n5)?rD(49!Ix1t@mj9TG{lA}6k#iTI+`pL&8^S+YV5BVM-$sf9E zv%i_Jv6n<`Xs>S|m6iOjARxFP*%~+uGG#x70QE=z#ZZ0g-n_H`MBV0#q={5lq7SX0 z)B*m5ef+{%#F7u-0O2z4_bI_5vs~5XB&9L5Re@*|pX$LqO`(P=z6)W0u@#I}a+oREZM;XVM%*{|HCeT6iV@mnnTs8zMdmigeLz&@1Qhk|nPw^w} z&7f|Y#{=TvWDcN|GhW?`Lm6>MA~M>Hs_e#UvB!eB~lJuWsid*V3?mfGRY*p-xp7JJ@_=x zJ;b{$_cbjAFU(Gu-)%?7hoxcBPBK6+yn05G5p2i%e^FKLi^~&up-Fr&5t%l)82<+@ z_>a>dp!QG60cyX&8xXPk<$E*WYk5}9+Qn84z{j+{^xsh5L!XQPp3HU#M!+(~-P8$m zpMoVpu8NOW>y~zJHQze%!kxc8U|HwQk7R*WZa&u2qfbEfc}8){gc3YsIo`-Re3m|a zewRktX)bVJLXhdZUBqv)!=nG$aH3$tF)CIPU<4-Thvg%yM?NpJet$oIqFq2gx`6wP z=cJTD)K&Mcl*bXqevb0z#f%&Ss!-H##a){W2Rwl+Dg$eiUdN8hVeETh4=@ILXxy*K?1aqJ z%Dvffz<>6@Q=lL7p=!LRYr)h-5DPo*U|bBj3lI-p7r^$b}-TlR!gL&~9Bs?nREpwQuQiWB8< zN_mfe33XE;n7}Tf3ZXj~QI!5;qxe1YZZOWBQp>_OzUARt#sYt+PTW6SpT+;q z^^t4qwan!u$qjz3m_CA~>W8iT2jv~9s-=Q7lzm`r zb?~Xr`V{>K4hF^tKMRHXqxaaVByHE>s|!Pn(nL!rCinXyI}?W<@$s(SlYy7*5KW1C z(V~+sb@<9G9!O~3DOh-|Q{P-DR9VL2SzuMP#k56BUVcV=Em&jrW-w3f^CSfVuhxIE zTXAXiQP#wLGwNU78wSrFYPQk(KKMZ2alY21JW4u4)zAYt zzmfl89~09=3>{ySp3LURK9O5e7FLx)2JHrxBF3@TI|Rpq@08xR>#@9j z=ov3-K8k=z;InG}-U1zU{pg45(Zclwj5@ij}W11nIx=t=BFurmz)qC}F5ivLJr;)#Go4(YygLHI{W&%8Ki zTDe3kT9=I#sa(?R@*TEA0(-GtY=*b~w$>i~AyiKrjV*UPT+0Q%i&#_Baqr*TWZs5L ztm&T}S|ZmnUK~mK_hJeJVtk8y(&E^LweV0P#5VLC_24X5%*2>3WK1SjLYqKY)&uz} z(~tzv^DYK-gK1-6v2Ca+dBTKUGSVq%r&gd4dl>qZ^py>Pb@6AohpBOJ0-1nYr+}kR_>(S11JNt04wTQx{N=x$o zRlVSUa!Q2Jhk$#t*WtRaO+BwO9V&YMH=mlp18Xv^dV&A^uYZ2a4uE|y(Igb53{NpG?(OY}ot zyQOf<*3EDxm-4xaZSz9dcY4@^#qB5I9~iPR*zW)9hjak}1k7STf6c@o(BJc#GhV%5 zPJiHxs09l}r7#hQ#ug@3Uu&Y};?uzhE&Ka)M8X=V?kBJ_W8)8yeCBtvqrv&px{xIQ zcW&v11YjFy!xp6u6`{MyRO)Dnr(ACwLOPop!nQgpPTz%zRLgjVn>?^$RN(yJC(gOEH6>lM1&qCZbW_u zkOu~k{1k{13GO>iPI26SEK66{<wgfi#zhjUL208I$33O+gG)chw{9E|7lIm~`D@Cy(svt;A}#EhTNUTVvk3R6Cl z@ArOBeu?MQuYF$lJe7fn}-wcj_(W|4(1{fBn4w@oxYA$N%G-vN7LJTWn6) z+^YU(wf+y6k}bjjFukxHL5J%9`9u95-dh-a+_Q%Tl1c>s!wXCQAN~m5G)8}=xwBDd zyu8+&tx(Wm+rqa=aF}2}yrx0lQ0#YQt1=s?q(ea@wm~($sE=#9XzH}2k(}q!EbcheaPA?ewYv_NYgHLRt>MN9 zmqWTMU(xlJ(qFI1nq)`2xuBcYs$D(ZDYw!Rn~8Jk_D^1A4%~*@LgIO4!=kCwhX@mk zoA6pYOU=`@gtMX;rzqYuwF`jJSGNf56JuA{!Y&b8K32(`Y-z zLta%lV1Q-n+r_f4;_zWo((IS?1!6psA`^YxXMXvNVIuwZ?U*!qjYa24dvHmjD_^O3 zWb>$HrT7nr9BDW7^_d4h4u>sUC|i!cZS|}59Sy&6Pa3px3LWw*oO{+#Gcv?7@^VFd z%6atDKbt`*;`^Os_9yTKSqJ=+xN3xG@$xm;im`W06j8SwHX>H_1YYwVCf}@xF zS}$M5Z{7Ur48hthlmMmCcrff+{v~rl%kj=x%o2ojaX*UR3<72{TTP7`^{C!Jolw#K zjQ7#-Iv5Drg`TKsaoOEL|Yn z`J}k_P^+RM>-WdDRYLBquIImazk@01hLayk)-@7Z-f} zdea>K7kHB=+DsHa{`>XLL@i2miw!oM3dTs|S=64qm+;bNIkibrRx_R5?KcIHlA&IAvyc7yJw$4&i{cgMM;Sr^7n$EMu~f=4ShU|gHe za)8(a5aTR?)@);cJuXK!WWdO4m)ZF53Mmc^IR0bgKauo@(E74*x1Q(z-8R0BbKQPq z&C2#h|LBq?A_Pb(oOU)Ojz?t`!n8Hfyy;`)es!~*0yIL(8{ofih#F(nrI18Ad+&(IamLkK9I`flJ3+f2am=a~r#n9n!9@8$ASO{b;ny4e zq`fc|IBCx=$Ylydssoj&R^~I(;nfhQ$Arv?iO5y)`B!1Cke#N%QamJz7p=qQY)$b_ z%h_Vph~!ltSfO0})b=-uRQ%rGf$x(lNC;v<$L+%qPnb1od5(49|;*p%|ef=CFiu=41NxOe=z)hGo}s| zb2^%Z*MHKvTnY%H%OfTb|$<4t@Eo-fm5nl@;0Y|TSw0JkwIAo5$L#}^5R3C!15XUTUW z(z4deE$yr}Fn8a#o^0&62fk3RAnRJIkJ;UokJ<^WhtuA#8|m>|72LR;nnlpVmF@hAF(>oXO6A;}(vQ*Q2CqK?ob6Aqs2yST*VXjmAzh@upB zw8@K>`qA;@^30%Q3*ZX`Q*IzK^aY+I!g}aKsLb|6fPQWr;I%kJ-_o}jR7UwyK#hnS z!;LiV?s)*X=WmGLMRVV72)D7{@sWmz?udm}YVa!v@_pcI+E@3$2~ZO!{RC>He4IYg z^rN;iryLN+OsO2i-1j&E%B8g#j4xM;R_WI{`cJUvki>&XNnlF1c?PC;1tx<{;Rd&0 zWQr^#c)P4gJ=6QJe+oCpw~ax=1x*hd>butQv8pa!{hIZG))#&4FZ8}w#|{+IzPVTT z8>-Jr6td%8s2RlBIOeAMD=FKiL%V9H(ZXPvVqa`iFH${!i-V!hzx3K zXGYv9DM(IyyTqbHeILtzC%v!y*r?gP->qFwhx3Q64y6x1l5OD|YPs30w7y<7HjTK> ztH^8>$>0~eJsLMu|?ap=ihIdYO%3UICmJ-MWTpORNPtxNTdhEww3lkp>Z@1Xa z&5RmPLF0Cqr7rqkm|604vjldEq~Z_^u-<7fS@IrVGRjb9UCkpc0FX`y2|J#ga+Esc zl^rkXOj6BuiW1pK(YfBvE4{>)&#qy(+q6zxyNrt5RFk98MR=DQR`1vhu3R-76dN2j zl5o!Ee|Xi3FZ%fARUQ;K$Xd?5GL-G@?Y=JRn|q};;fWr0G!{^=s(bK9ATE5VvvZ~hfbiEVlUOy&9>kQ(5tjIXkX<~*M$C*FIQ z43PpGEE3f}oIyh!ZJe!HcNQ4{89DTAc|*V^cpt($4;Ivhpzy-GctFy;WjoYl>kU?gha_@*kY??iP#4>^@H}$zyGs8Ol>A0>MZD2k9n2QTH>M6z$en1b{PVr{ zFY52PLcY4LPld$iBrFx{Q$RC~^J^@h-XFGXeF808eN7M=eb3F!UOoY(`&7+Dlj>r2 zx|PK`!!@bl_)jmb@aa}XTn@x?WwgJV{c%AY&PRdm1D16AaShL70RD>wP&0ac#$(63 zj4V|86Fowz?Q42OYLiW8uMuRK$fIuJ(a~8s*FN*^RBVc&g<87nVb)1ae_h#c22#Y& zl3$q|muiV&8N%<6iDG@{j!P-E8rmjo8tnC}Kg#))TzQjEd$|#PSj9(vvz|Zxg|oXt z|MVxVJUl-CdUC7(nS@(DIA3LAp2)yggLK$t@8?p;N-&8Ao`4RScHDaB6erX8-}==k zqVdk+d_|Bh9nbvE@WofkJFxPoCPeCvPI#rG-hV0+N<@jUe{vz0Js+rMM?={i3RA#n zd`eCciv6Xu^l`5GJn@nTg}e$}@$8{ZI{n1PNS4!Og;s8tM?uVs(?yr^PR&w|I!QQo z!C#}&E)UnC0NvEU8dq0bO!Q6amuNiA(`hxRN3NH(motj!?zh`)< zUcoU&zF`Q+(iG_F_7mS2@qT>&PdFobcYZCl)#m-}38QH%+ZXU?7$l6RxW;9r7So`q z>2Ip~s+O_ST-5}>`5BxxEmfY$Sv^fOZcuj>p6N2s+>W!kH0s{?*F@8gTxV|VFXgn$ z3yl?gs3rrcMBjb(*u?WaK-Fz+ zwo&-V>6DMaUi2UnQm(uJ@r~r*>ha>qBYMHG*lz^Lw(DIdOMnVags%2r{$~49e09C= zXIwjDhV_y%loNBcH(HoI;FIOOWf5@lMSn?-_%$nP_B>0{aM5#{D;4l$p983)^3pHB zz#)iOZ02~r^DCC3aN5YrVN-Bw`4V*f`vF7wE;Ww1gUhy_lsYN9y4GAgq!L(TUNb5*X#i(ms;KJw*Zu@GMZ8P_%!?I4 zeAqL-HIP7`wY%`c_t9wTc$$}&XS0~%nwy$B_+pEBt=Xt&bz|#$pS(hX~+d0RO^a6pqYQp%bs_|u9 zs_`8kkiF)kyO5^8$-(7z`QROyvnrpjlRh$z4S)f7>`2FohLXwotx{&KZvP^sutaTR z9|sHiWAp9=ERW27r^@psVV2Kb1GLE)5cj0+cZ)=fvqG{elU7pIp9pWzBWz5!acm0n zrm8F4gXQODx4lm|wsEgMsEMdFHr;`JtsJcW#$P_QUpQz;(q|=aV*RiVqDm(%7uj4s zCqOG?z6()P`8DHQxt0LtbNvG& z417Q^5;Qvn1=Q}P-&fq;zp$(%tlP|RETYZ1&Gtg%ONki~Hh5kF1sU~Og8m|8EEWvs zi)XFYT1vA{x)mlLFGyP3W-_(=eb>F7ww|v9KSzP~C?xPsmUXx1u{*2%OABBP1TG$h z0e91g* zT9@_Y3*MaDd0M&dnZj(m!kL*AbBnEkX%_c82}_$%L*0N~51ebXh3J!V9Z^Hod2@ir zQM?o5v;lZB2Dd?N=hw^<+3cYp1v#OR)8Og?@({jlnlaM z^X%X2ZZsDMWV{Pk9r0p<1Ghv5xtuFx%{^Nh0-TU1tn$qa;psetAD; zE|E zT(EV9$R^{(H`x~JH!+Zq{JOyF6}K9fXD8@|!*_?@*E^F>dMTb!sLopU`b)@r1Av>_ zhz03J;}@AQ6Ktdu#sl2KCw~YI2%wH(B-q_C&&A_A4K(PYLC3$bujdZYbw`n-T!ke# zzm-}~c$xNhC*Hmio!mA%S3Jw_<|6nnE>RiI)Vqy2-bQ}(4(DZ&e5*z<#X{NR{FmmF zJM(VKN;tWAXAi!A{$Ct^7E`M4bSTQ?%=swh>cP98l1hG6sM!iD(S@F6^RT46faun*#8aKf zz|AK`z!k_&OJSG6HimfRTpB`QR4SQ3N7ArUH5j2O&URetN(b{hs!Wpg=0)(DpaorH z2e9HkRH|&icRF$MPAsoPAz{sYZ`LmKEZf|fD*=;j`zGxns@DsHm3g&aXNQB_>4Ji6 zJNo%&vS-*tr*Ei)olC+Ac?x>yd(tcZnC^d4AvX?%^e#WNiDJ~?9j6MRKYpUWBr#(I zf1peHDAD_~Mcepdk^(SyAC-cB{X__-gSeX>W5uiNmq*wj9%y=2IPl|Q9vhPpASq6& zH`Nl2LN2DnH#RGjxjCDO!NQ2%bmV;B?{;o2 z?pc?I!T5YH+})MuojgKhlid_no>0J6J(KP|ESMSZMyriibou3(CN5RfpX=LWsn#fXIi4H1{}|&$f(7 zN);RWBhORHb+3N(ic$qN404zVccK``gA$@jz+G_m5t*i|-`8U&N}j*BE%N4O@rXaZ z@cR6MQux_^VWd^cyWK0U->m4|U!_JzY}@qIVY$6?DwGYbms8^{Wf>RO@lnNV@Q<|p z>KsjjesIEF!;`B-;wy zZEXKF&lbP#a&!yhVV zg@AqzneTEAfd+WI8Q5WH{`AhUgdd|vTIqG4A?~PbFg7o{UpuKkM+r@;>MXt>ZhKdA zVKluwIWTb~I(ovE1Sz7uz{?GM?y|Pz{wL?qzJvC#OmnIUz&%P<3#}w=27Nb(I4=Xc%nc z-nQ5kuKK+gy0THfx<$|8uuOSc%Ug?#4k#v4b4phA^Xd-yW6e)Dws}OUL?w7Y-xI~_ zT*Zoi-3Osp35igb31dLS$83}Q#$8hg zp^X>Xx}O36kh11Om7{YP1$gyTUNSF&E}oop^GAv94tvb^Z#bqjxf5v2cvr<-96j}B zxY^r0S!AjaUjRmAkVO{j*_ueBnubB1uU-o~_qKE9@vo92!R*%0}eccfe z$tjm>}xC68Hp9;nxy&iCF#sDHZYmQ-u2Se&?x zk%AOGWDbXf2=wyC@V~EAg3-bjf3!oUbM$kZe(5~NzpvhI&{^kvW4d(0rMs*4t+&@; zRYZ5n6hQ)4#rkQGT6ZkL^d!m+4Bw~`L8@nk-qYDJBLu`h@hW@p@V#_?C>Jfmtzc{! zX-V~HCNEP~A>PnlZ<$j^ZHa9J zEquaU!xXdb{_WnP01lmS#?jnR7=}Zr!&=xL)*525dM!pC)nbV`G7mJSVx7UD~78&iZdWfvZe{gLa}2S*PQ=UgYsxS~?K+#UOUwQZ`w zl;2kcI4SLFW%>8|kV@i@_pU)MLvyuQPpVfyjk?NJH*cmi_*v;;gcsFAZ^f2g2Rm2; zLV}6N16x;HNy+9DO8aBsX9TNcnm%Q@p?{M7WR*M=wpSko~q!;eBV?EcDPqNZn$NBklx*A9IbaYVN4gSG$NIhsK7`FUBo zV`IPE%!>W9cW*VS2$57>A_51ja)Y3DF#mREnMvkb0@uDqD8zlPN5|}WVmbtGMfSFk z8KIkeFy!`f{fM&_r<2$mCr&6u=#fjf_9Dg_r_bgiG&)^s&URy!m3g0XHTUkeZf1l- zn%@*r1gmN6yf-?!Fg9BOAw!sw^(Q$Ifbnr}yD~JN$Ezh;Nkn}@SbGDW-+bf3B@cS3 z-Qm!DXtx^Pkaw3z->z4m@_3~C{^CN+s3}5r?`S+OPbOmGn8TdVKh4(?f&LO>miT>h zu|b!JPw)}RHU5Ss?$7AX01mL!BQl1pH^fr!^Efy7BLepC zoChQ^=PdAtRuNAAIUWZsp#t38f)$1pykHi)@h$o@^JQ{N=#{^Xz-}}BHPb^c`1Rpb zdC+WpL63;s1G|S>>MK--sH~!=_cl~h5UNrYtd+G?9&52`TFOXMzjbc~G|nq4?NpX2 zc`6a|;?10P{!mqT(U0`Q3S6WbEusn_^C(ka>bi2fFBUN)#*%eEb@q^qxVt)1J=yid zH-OEb#zWk5u!vQSvs~NC)~+Qt zin&`bdv(1Otg)YM1(g;Jsa|5S7H0<%Aa|T1#vu6(hl$fst+Ml-N1 zJ(R>Gt7h+liPWz|N55h2&X~fSYNrk>lj8wztakD}gebUiu@JGB+kqn&D!Gfq6 z%q7RMco{`A?%mhaK1+qV(T`5UJd?IVy9FTu&Ln13Ft>0Hkjv1zVa}$xwpsx#__j0e z5T?S1<=#r7CitB=AmQOh5_x!2;K?ULlEInQ2{jy;ZEDk@N;0#H!;+25;oo*XGoL4? zy^SNu&=z5P3_17xRs6k})tEJ_)y(Qt?D8)!WK?X=vao%PUw>POv3jZmC*2m+YRM8_ zCeqy#XN-U>H5Pt4un(+1ep$?_TG#02@^c60%VyT^S`EitB16_-uaL5`I1a06;6{Ld zb#^u{4S#G`9=%jbDmC)N@=0F3Lr`|7>L)2)LM=QNrLrEM*E!oI{>p14DuOCxOq{{a z2~N0e`F%a#LzZ_*6N6_Jz4SWx4OYYvXMya-a0==6p6byqgb#-WB`} z!T0(+t-*x^y8USUa?%km8|tM#mZPK4`zg+EaRAm zDbv#^lbCI?G3S}8Z5?2aNkFcAHqCUzw=>JsC4%cv`wmspyo_-$>*ko1h#=}EhNv}J zgEOGqrhiMpuyYyZ?JS#^ANOyUjinz} z{j<;bjH~w|j{$LEkebyd6jsO73;ZA=8J$v=v2mcGi^FL&R!h!H(UJZ>^qgXvaFKRF zg+`fT4Z zt{|W1Xb7LxUg6=ztA(Kx_v2LN)h4dDn-j((v(FxuNAIyjUh)Pk#m}DDOr9B!zwoV> z>=qN29+jQcSAGV+&AalJ)oaQZ8Np;k+_mV1M`jvxqQo>0ASi6mOou1AlkuXd7#i3Y z_EV;dWj`0S{OVLOOo`=w1&6vmc%i{?#AEyHNvtG92X9JIUvGdP#O89{I{VXflKIXI z^4#p(8f*b86x8D}J_QVjKbLatk&JTCcz?W*C^H3gt%aYSi*j=$Uok0>3(#`t1W&x) zU?D2r(N~alH(8iyhuc*!h&|}iv|~W<+P+BP$x*H&NQ|hY!Yr#X}mhrZ8ptBkLZ^)RpqSr z62SccxzC_U{_cEOkizu5$JrssC*|axH7d5vW|d8s;81+f{i4qLe3AX?*!pgGvXb(M zFr8);QR2=t&rTW#Gzyvy!-7S+wvMI+t@4Z&%L(YVw423-TnpMhZ~9^i{np<9h~9Si zrmbb#P;p{Y%|kcjs1UCxqZ}-*%c+pP^{8@zu7-5>@=>ETLQ750+$-M!Lz9p`2C!hk zBZtc}NHR(?Jve{(aKWQty4U+8M>uw6R`lJng|f5~1qjNgbavdJ$}nSCrdyM!4sQ$N zuzODfYjI0IVCU`W|<=6*q zS21jwSAC_OCe33nvgsuEcLGnQoh1CJTHAx}-o?$%r?IZBmz#G_lS;|DQ=2kI#%F1h zm)(mwZFgF!?gU!I*$=c0{Y@^vcZSuD1zl`z*$<~KLl1pxsMms1^#z-^ zuhlsy@WDp zgDC|0UEB4v)-0h8Wky6io{9TQ)m596waBS}D6i1PO7>3yz=|*IFgQ^DlF7sROIf!` zIJ%cX&IUBW-E7`E&=6VOFTRZF;#gu zYnZP)qjlUdW)G&4@RC22FppmFglA>-`F%}lmg5(rn9N`~>dHN`z>uW$AU$>5g2(E$ z3KAfxlE~*|po}K|`E{yB#C$^yCk=aXy}#B0{+Z{Cg|0qt z)Uy>orfI9X*)m7dR4vN$i4)V}OtF~i%Ue(5unyfj^ zLXXH}KrBoqlYI-*#wK!iz?gEfYBOJwt+G&XnMTtpH7}8M)-f@N)oY2-Q7mDac{UYX zFk52L7F^TTK#0r_WbKd&Tb{R>sGPkztZ199)d+bU7ble(5VLN2zrmbZU}yj7p9}@3 zfk9EYun%O{`=nBMyiV7(eED2i79M|-CNP6>OPi=Nt>&ewka0IV+kfD?wBJe3$qwDK z<8t3+-8qAt$B_qL7Z`l`shlnbn)5oUbn4y(7*hwlV4hU14Au+CLlyv-Ug?Z!WDy1% zkb@=#3Mg(GQ^h?BD;F6NGoT&{2~eis`S$=U(~Y`zX}9n(UYY4$V`3LcS^}guCt%Zk zgMQmn>rcTElaJHnNiCer4dq~%VThk^JGKQQom(^}Qm%LJV}M9Onn8b~@MV>%1=!Y? zpp0Wsa=RG-I_8}Q!4uCY6vNE+N0)%6EgLLPpDDMPbn8i?#h3w7+;h3IbX}*woDGqx z>2b-8k%_OYgC4NpM`v`bul(qaW~V9PZ7tuTscM`xcK%d;+ts`Hy?j=HVA3FsSNEBW zyPW-fx)A?0iTr*R+o?qINo=N_@Ovi$*BeDvHSse!0%RHN-ZX)0YgW9LQP|PUg4NS^ zdDwa5RV-d+zlt5W#LL1}RJ)wygjQvOP2kNyiQ*&FIanP>Bd1c6dc}n3jBqF61g%Q~ z=2MC--JI_;jk%{w^zomQkAZY0aH?p%Q42J)Uo6wSnb+Hc?*D3JGdGE|Ml0_|`M4>S zZ~`H8qZ?6y>*t}MyN;76V6LGWos@<_SUW^@_Q|{-5g_-Rf*A04Ae!!^{rph%E5J9P zHLt)1Eu+^_N<+Z^i*=Gw43QEA!};=v_bL7l>x|NsdFyg$26?z;YK7q7!2m18^kY@H zIa=UzY_I_WvazT9UH88bL)F(xBHwqz#8h@%*BKDTz89ACPZ-M1bp{Rd#0m1TNbLIt z)@nOjo|bntMA~y{uckS<*g>Doo7v-qgGa=I@#?8z&UPF=Qd1DIV9zV(&;m-mvE^Mn zL$jv?9OVL=`3BE*=}#2{`4q{XOoTSEI7_8IK96=ci^#*vg?|k7R4jT_7|%Hs#kSA{ ziWyTI8!GUZvLa=RR&8PfHZ`ClVUATqua(>r%fm{T40(|!ylzR2NSB1WwO-Cpl4IR% zh4(75@TMr=b{DF>qlJ?+dq#`?C&#{3eu46YJ*lXtX-r)WBQ@|ARG);QS27=!thw{F zF>M@FnH@KB&Gs=qedBU_0blYNdPD0;ghZjVmloX-U^YBAQiabsDc)ACiD(W&&gAd5 z!jU00=Kvfo;?$Cm*CoRVM_lA}j}p&Z{yYbF zRDu-gK2@5(@)D_hxmU5huv56H0Ue*~_2E8M+xP>D>b8!UgVM>aPREwXeWL%?N2u3X z((yu@Ca8}Q_>enubm9)0&z}{u<>lc-qJGogevR80>c^*DH~LOk99y5zWC=S6$WHZ( zirD!2*(`Z5t<>gbs;4=?0VUtcONLk2enKpuYN9sfX|C zf^ecKwC6O-QUr&-5#^NT6-y=P?!FN=Ad-i}P!RXTQQKv*lVv+Npfq*8U2=FP39_G+ z(Pdt4VaN!lu|F|n+J(NyK_eb2Fc|f*-xXWYQQ+V%J z)r`!y$}}U& zT_ypPO&k1UHlq#({a^1E=F>zJ2xj}%O4>iG(?;?20tbW}2r3jsR-5*F=_Txb=P+Gw zd2yl74GYZ;ZLW*$R0LFhsYjH`WyT{?4($tKrk=ymPgtl#`*?!R84&c_6`C4zq!}2B z>vz%`=LifU5W846iOvAM4I9uI>97ZDlvo#53SVT}f%xSNm3_NMyj%0ftfdVrf^eb9 zU6?Gu)j-*H?m!-X1;Q6!>q%Ef5}xtMD>uT99DJV-u8%R3j0PKp3&DeoDz$p(jVj#w z_q5h;HPfRILe$z?pDEt_GZ42(zeLjmNf**k&@KgA_hr_z-5i=Di=~sXnWEP(gu2e1 zrWCWKW>)!sIw?!RGD>(N7vogYuVk` zlr*>A)7>rs@p~=!P)S>5}Y1XT0g&1}}QvJ7Kg9FmGeY zYc(qLS4{fp&W?`n4ZrO2Agjek=4-JWrXQaw=}7F=cZn?4izB}jW!mx>pf9DL(yfZh zYLCaymbR`o}K*)v`!DNfjTjbV!vG=`&3t`;FZqW=T|p^ue>DmbaB4# znSREnA2-md2^n_BO-Oi57Z(>wdV@G`w+UBrSXwERV|*lT;~-?rKBo5wx~Jew;1iLj zo^r1AgT|Vx?nE@65P4VoT>kQ9Rye}{+f{LN18p*7>D`3dgI-=HGOkRPS69GP*PQA@ zN&T1E&c2TNr7h6V^j_>t>;Ky^6Uoo<)1q&YfCWF*u*oekpPalS^Hsku*JNhJI2rU0 z^Woenr44J?j{1`%ve3Da*F|Q#OtYg!vMvp0Z_;Z%RtfCXm?GsEHXudxAd5fxC&^S7 zGxphuJa)ZXlz0>PNE@x1J4%zY+|%P57b4`hZloT~U!h}zaUA~SbD|t?D!W&zk3mZ5 z{`HjUcWuD686%=!PL_$!n);H^TI}>e-@6?Y)2qmGkr(Mz_|O6xJLtc9tlj>HI`9_! z^vEH#37Xg8<@iY;Ku`aAo#DP1JC>)&x>u;RB_2juo!JN65j%%VC8rK6gzA|s{B>DD z8r-@=sEaI)_C2Y@C8b1#Bv$l19*ol65xHyv6&YfM>~0{*NU00ksmhg{{dDFzb1#Csc~}$FCywzH8qK_lO=@e`t-G=;BDJcIE~9?vl@klSI(f>#|T`N zD_4j0p^@NFc6?g8C7{2_05w=O{<^rQuDe6mF_-`7t=vBI`fq6txtzZS#~ZzP)6U?29N~Er3f<37^Hnu0!#3EX6pq>$_PZM7 z$(;0>ZDUPDpWH;Ig$XfB^@#G}pamVTPZmB?k%9BG(!tJ;E|6KmJ=-dws-cPnwfTmV zU*$a%J8;*?LO-XfEZF$s#s5=7WdU`v82S8$XQ4_g18i(;=lK#{Vxo>;-HMf7k}lGa z#4mdTX<1sQSIm&oA$D1f(NvI<{aLCmQ2bfi6}Ke0KoS4a0-Vm;x$HF{gM~Z*$wUCb ztkj@Y)ASn+i=a@MXJa{>RfuqdGk#51bGq?M0kBDW{&JA_i%y|jh;(P?ee?u zKZ&756(@9iXAPjLG98agxR87j%*HpBTp^iP%iaTHuw`SFE)4yq)$faAR~;P+6PAa~ zHg->8L^_7<={;BaGT?`CO;X~gyK__Dmh9=b`?I=8q=^2mEu%5O^n89u(UiQSYU{rx zoF&}oRPVFdCj#<+w9NlW2!^<4{J|P_fn#hF$%)TFly>jEn>WCT3>sx#6 z)hTl<@y!;|$EiqQ?pJ-qlqYrOd3*VBr1j6g@8 z)Uf-eHyi+s0!UAsLOqfDx4#?v@)Hz6So+s@tGT^uE<95$?T23I(PE1i<+J;F6zqpe z8KjCz9Gy9s=Cl?RXr5XR`hD>7scbZPHVJI-U!hJec0N?3kkY~<`D!OWz^-pxqaCP9 z)tuHT2o#B|8H~ZgJ@@1|Kmq(j4yTRZ@xC@d4E)N3^Sef)@C8 z+aFv;Qrs?M(tps3;7JY>g>}c#kuB2y40xuZgTZsj1kiDq-dY`+d;j#8Zt0Y?G5*Qh+Z-+Ve62TfCmy=0){6;@=jIKX?nr zX0<*j!h=iUkGJb1;Y|C`ZBKIyU>dbo7Z{5QN{#WS#i}GOWZlZlY#_Uj1>;iPe_=C? z?QK_j|Gp*o9^gaTbnXysyNp5CAI}L;0l#+GJCqK)BdUTUQVbjVCrLkGnIKjJY zEdn!c$!vdOpGn!4C3yPDOMSDM?t~jUG|@5KO=hIG1&icbfR4bwDwRHPnD?g9-b~as z&(7lN7K5gj!1P=~H6&05J9bKltu^cjbO5sKJaVpoEKJiORAVup?B47hN&Z`PQa8hu z*ay|;0*Dq>E!{scAfQI9bV2;QtCSsrL%M^#@FG9(G%>wSpNt~2jv%fUzJS|-=H8jU z{jJFe^A;ub;}%rPatWvI3%4>5*U(9KB%!Z}Uq}1>W!x(sa$N^Oj?kk8&||Al_1~!` z7lYd7nx`}Np|rPdBq<+M3SU-w!wc3?Ya<7I!VfU`q?pX z%Ghf-7BuMiZ)*Yd&E+lKa6_pKZlpR>T`9Q{>-O4A`~D!9;*lLgiinR47`9mVuP%^w zu^{e-fGDl)*{P?eMUg&5<>jtMpv>?1>Wzrg-YCniEmxOF@Qd*a2C93}K<}F?XfR`N zP$fse_$-*1Q&$O=OF$>(aOsdBLCLK9wy}}M-gIn@?Uw331bZk=aPWN?>z{9&!&qO*Q7{srrwM4}0wEo)RedFns0>WB?UQ!x!s# zlIP#$9)!fEfBTqFPU+MPwO~@8)m$yyigMv|zREaTe*3|6`th_h;q#Y|JftI=%7LVF zBZ=pJ2^iYhIFQMgLPH(gB ztk-fT#Bn7LO)_^S13JGj`|Nu451sNW_XrDP5{0T|>BXJX-k=mv{{QP#-jF>`Y`7`zgZ)DcPTWGBW=Y?jsd=(eF3< zD<2!wi8-$-IATJNeJ1~Ht5xIQ1zuvcJozRue*p)Q!t@u#i*tI=iSwlG(eF9j`B@z# z3UBurj{5b?OQ7w7kGN15D;zkNz*$O}30#%56L>`V2~PSzP2Z|2y8c-M@iFnSeyBdS zdHY*O_pBa`VXw}rDvi9j(?Cm3HaVbyP(>WwZtjDr!nc#^r&ba2fQ6L)ZI9OPFO==u z&P2k<_b+tM@Alnnd=SK)KPbi&3viuhs)(0A5h=i7MC#ag_69$>A>|KT`R5)YG$Ul; zDi`W+p0u=?Nh{!eCkQ&CjuL1Wk)|YvEk{JqN-b`3mz|IPt3${4Pf!Paeb+f~46FV8 zZp#!lZ8c>U9qha^zY%U%Z+&e+jYG5q5;0g*bPZK6j4viTIV9s#UqXi`8hwW@HR#7b z`KK+{&m}BVC~!%~DTWr5D9BSxbwPkcV;&c#Ds*eMR#Ivw&( z?=<&U;WoiWh6NN08Q;AN6pSR^QfB(%5a5a`5%)(ujQsR?S#;n^S4xNVCo*6~7O8v~ z*8Gm~v312;6MVSkzZsC|zHOgxi9L#J z8|*6^s}1lqe(a#1U+0n5h zvM|O1m%ynk+PI@yoNtY@W6B=iQ)jzkRPIe*7GW z`DA_%W9CIOWq`=oe$08$Y^>XSmE^Li`1=DB^S|Hw@1QmOGp3`xGwPnt57zI62F7Mk zb%a%QeD442kEZx#t>SXm$#0JANY{@JIFY-8Nf1H7TzoBEA_vu_|3%wf$3?xZ{liy5 zLOP^tXz36bkOt`%MY=&GhmZyd3F(j=N=bZbw ze^30Yz7U3QtaYu=^}dGiS2>OakfL7Tlq)^eKTE{2-ZUTG_8P~D!>uF8Tb*qcBBA4EVarpN(FJei5`7`-m!)f%;_|E)LUT9Z% zaeGvPAOtt!51$8opQp^%-VFOtBaQ>xvE+U`4+(ypM9ypC@LIYh*dz6GXel;G0r`VB zy&bhB{SrZIsNJEp9cj-XgtfvqH5M~;+MNX_U5oqzfo!}N=v3H@4Y z7gqjeIkLNWD*PZKX<__^dyB}*(v`{3i_S8B*UEX(5Y{7$Y1#1FSuhOD9?_FqQ5ew6 zegIa$?c<8?o@H-}g~mV2Y7DxR`6U=(Th7gs7Z#u@k8=hIM(~3{oU8+iQfO-9S$8{Yg_27wVL7oNa?xI^C|3A?$5m66}Tix zI5_2iB7cE=P@1htd2{8b%9N#rb}FaAmuoBLM>ofXdR*?|4=)dkrt8HM5Kf*;A#XIL z@2jT$VnvL?-73qzZ;6iMOHUgdF^>C{L)e4dxX-BDJkBQ)JAWVC@Ly8o3oqO}!#cYg zo3;fRTV<`iR)1rn!W6xb5QeC6(z@kCgxtvemA0=R3H_vQw;dt5rLK?60DF|=VS_`sH|_< z{b!Q7qxpm6IML<1HV%2IRr6*O3sMf)=Z%3^m#k(OXPK{xbbm-5b(Mn9K-yo&JY$pP zlyQ^Dq5LGo?Ho&uoI_umhw>R;S~8?P)v*?00qyfq)y6o2rY0HwP+%W2_}vOKZ6 z9&GAB2At{l2_a<1sk^*oY=Q~lJ|GcPs<}ufOc+7h?0+hZcV}Mt>N2Tyw>K#2>`M{L zp+aDXLUp)AzOy4HQN10%6_pJRFJk$5 zoeI!0#hJ|^6?R^=tQD*CXqC*j6wgTgCfR^V`d|rxz@+wf7T?>j2GQ%UmW%IHyOzdk63qe+YS*^zdhXii%WJ@wcRH43( zoKdVV7jbMU{^Bt<3GOh3eS|nT7vHB*5s$CrQM>ik1L=dGOi}1~6tp1N_Ifw}6cblJ zCq!0PV135ur}?#2?*h8cD3Q{OXg9_u46^aA#7GJcmq)=7w^SbMvR;L`DMErm(U#c< z9ZmN!@)FOm6KlVZz)@Gt#d>QC4kkCaIl_pXE(IliB;@Xd|;xkDwJD8CwXQ(ulR;68Tx z{l~ty5+a*$U)YtqG)rs*90?zwReF=UwphejBjj#`VGlx7=owj6T9O@Dpb0Nx2z*U- zSA4R(_>1O5f^%G17C|wyY|)SYGX=Oej*q4gs=t zuBveIZ-%g?#Zubt*4oLcz4Q9GlMPkprI}m3A%cn!h(TKPb(uRLmwY73Ye6p~B^}ou z)Nz~MO_Gxc`H}5C?Qmk|3l}aM=cPF=w}Ga6n_^o5A>7|>uDDANlxI#-IzF1`D6d1B zx^0N@eD(6SUh8{g*Upn6#T*Rb^pyMNQyH(b7j2$$9nc*JyWfR7DH<7xQV5C>d(;M){|0v~6uG|xmoyTa_)7ij%`+nwTfFn4VLek} zU$-egk49MG8}%$2RHu=Kd|8@=T9}y77v62DhjZ_q8U%jzr&u3R&U6CDqN7%uUyUtD zkTafb=P}<)G>i|ijmgugwm=`1PUF0|CFg_gSrvN-A`;%N6s8@b>*LhnGs(;gcB{Tn z(xn)jDYS(9^0G!Ukc9w7o*zpgr9pmdeMADpA=N4{^gUU)Aektkj%Pv$wf{?<5GJf) zM;dg9K8`j2g1tBX`m)vn{|y(3F8t^Tio@;J*U6xwl;s^_o_P{Rj5wD5Ok~~xWqB`{ zuvSPschXLOIV8WeY-M53OLU@sK;_o)=2n-P@?G6E-UcrcnXcAMEl2-JWg+_HP~UOgeqw#!F9IkxB!ohT2Gc1RMy zX|MJTBwnIXgJ2i4eYqae%v8vX@Rmf!w8F_=JP_PPld9wz3a9BIgtN81CQuPtWk^a3 zlyCm#fYHDi4aMYb7)z(O5@~^4JCBGC%?;AB@=N{#?XF)}j9_g-YeP?@4&kKKjrhSX zk7eOyk5Xt z{Xg#2_utK0#45lPgLH|Pu+X3B{*giv2Zu@^brf~;410J_{)wRCWPUH13JTg$AId;_htplYT!YS8V^7Eh#GuGlx)7x9`@0 z*4wtRxgYZ6f^S+^<2933CGVQA8uS^6z0f6w77z z)-gLc_X;5W31K^v%9e@;*3PeK^;a`WGH;LGT-E+-fSLQ^&34>U)h0rXaBKV z#bG&qzGAS@GbZ@L@WaPax2(wqUhj9Dlrc{jc`d$Jy|=XCeKh4K^3m>yc=gsP(;1-~ zwl6CZ7ty9Yr8*;QGfQ1H$?_!p!^uXzsefrZ&&Ov?@il0e0Rne_Z{*hrp9puHw1di4 zb3KoM(pdHTq?7IOWc*iTzgC<)whOwaePpecr(<1DZRMz%_E0I?%j}$*mJj2aI)55F zPFS@yZV-0Zh?X|`Ug&dmh~CECbMI3d$Ebg2sYnM9m0NeakafaFQYL$yqiU>`33H># z5O~Sr%pos-2MNi7Y``HUpV~VEp45XJ9Rn+a$Ht!`54C4PzELnH{OIut2}*bNnA|yP_^Qwe_6mEaM6E*O{4{7o>zLIHj^`+ z^Zu@=7UQHx_JUCm>7!32ADRpzgx_v4QQG~k4OU~Z!%PhP-1gmB5N@NlrwM;EECxb1 z3Xn|isf(FIWT|v@wiBKu-Ypxu^FSNDFGhO4$)9O7yY7y9RRJ;AvB>(_zol^YLax2g zyFhfL4^# zkiu^SWoUya_Yp^pqcZOyXba5r$(2uifOZJ`W@HA|v_e`7J_eeAe>bJlo~`(7;G;Gj5ve^UclJ z3SJ-z;wNd4^YA*l7--9%2U7+HGU@$($UN{h`Q2XlN*EOG;ErPXd!Q zh%+an&LRNOUjXVhl@3z^>41e)OXHIPbbvBw_jRnhww8M5A8gZKAI9G=?DwSCL2IvF z_onSXd8dE(@BYo_I>waSQ5TE;f5`ff20e-aKl=O6XNSxG2{ihTP!O;r`2Pdu^ZSbW zw|_VE4zOPh4?UX$8vg#1|C^uaU%m$FLcrggR%)J(&6Cg_{iw0}$uPe$^;*y$50|4n zPcBD2PStN^>Obx_>i+X;`RjLzQoR0?c?2$jzXM12ef|WFQbuvCe&(B7_M2?$$v&rhWYZj{%`F|!Hi3cWW8vdX8S0}#}rhgHRxI#Z< z2&sjY77I+srqNgQ*6UC+)Wki8YBg24=Z7I>yy-=LHTE2=0_;FbfqTluzZ_z3ou#(< zn2Fb2pG(ujkUf4@M)a9Xjh~zTuEMVPdmmSlJ-_|0S>G$Cs2TVF$XyFo_3kG_r^W!xMKbi>eE(^svA1=LEb!;P=53qhDFj*bs7t5f#g53Ju4 zp7(P*StJN#M?Jz1wx%9Te|+!hjv8h1{Uv7^`{|wO5BDK`eyv1`G?3qY#|Y1+{jC1M zsI%v#mP|Xo2cJhEEncGQ1xfulzxF{Hjc4{t#$wX98hf_0?N2#=%hdDn8yioH-@TLi zz=#?cVLe@Kce8mTHv~U1KUS>I$Za*6S^H$=*T;L6}KM?DMkRL``hp&* zqGU<Qn(0e$oYE^i5%R%)_SDbQg-lv#XjHZBmbNrOW zFDoO?ZQ5jn;^cUn&nrXGUbUcizUwj;HB88< z@o;={V)MmIX?`Hz4A6AZd9M)d_Z-g$ngZ*h+9J+*@816pvJn~v?vu(#Rgbv!E9Gql zvmM<#u}N4-S#&Qxam|vvg7QXxLk*L5v%yY+cGTSy5w(TQaWI1lJ9W2rZ3*$F%cN(j zAw2@^NOF3p#$Im<3KBL(Vj~ABjTi#A3F_)_Sxf$gZ?{iu3(G}mEj;b zsjSGW2k^0Ut^3V>_Na7OluZ}&cqhsxes#VtV5?!N0YOw9X1qaN zC*k>J9-HjFm(U}E?FFR%{N(~!D2VE!O5G3PO1JklH(=nd|&70|t`;U^`6 zLOET5mX!%U(_@qU{&6nCYUm>fbg5LIRHWLBeM>6TUYlayM(~yJRxY)oY&FQW7Cv4Or8N^TAk-Loh5OfXla{V zLk8$kr6#XQL+xT%og0#j+L&bQuPi`}3M$IL^gnMAN$Zgu>c$2cnic&F9 z-do1^d5b#4XpUL|v%-1nb9ZXse&&2K3iVoz?56W|sA5HcV?lA*k~og%(upSq$_)Do z-~xzBIr#Ge05fPF0S18j8gls~!(U)`84tdQNd_({kTV<>pJe7&=O|3OaD`f@URA(D-Uq7M=s^qGbKb z5Zq0T@nhC=e)hc4sN=*kPQqsH6IeW1if4d|&&gE~8YY+ry?1-cYdMBGKnh4W->U{C z!KvoY^QzrD2R|NYh<3_PHG*@D;L#wJyEk}X8hx1-bjc`+%kP(YgAV@7dPYLbpaK=a z&1+LUk8z?34e)%MLHqmRi)RbzYGACGeM)NxrfQC)Kko3sobPUp4ZG{lZL8us5H@`w zrA+Gwo;-z5Q;+O9CW&Wto!Yu4CY25nMC(9mZa(155$tJIBiLJ86q2z66^E*n_tTJD zlt6SLCzEtV*LRnSidZg2a(Ca1MThTMST`?G2Aui5Ayogv}%twbHP4swx64Nr>^AK!Mow? zTmkFq>5kUavxgH}W4t?3_vgxo1+`Ai}kVXXZ6VaC%^tl8(}>B_q5Tz?BohL#8Lka z;S-*HA!l^^JEyOOBn6!>GEzMz$Axq5+9krl)1@M;Yoh5$NEFbx{WX)Z&b5meat)X_ z!&Tt?6_MTQS9B%U-ygibYtOEMKMD0Y-r+Wot$u}1bFpO;{&(L<4%6uW8{eqj&iEx1 z6jvxk{JrGrpML;?$GAn3Jp8B+zJnL$1ngcMA0KBo=@u3&m_>WKI!g{# za%Q>RfMq@f41pyx!6Jt?%rZ8_Wc(>}>7Hgj%6pq*a1>OSIoU^MN|q*rjqsh7q{dG( zn=ZPWeeVg_jguk3WC4#SYqs{I_+xX!_Sdq11GQz3#)KKyd4p$1N_+j3x~W9l=&{|R&gc)DtnxULQ5t>#JnY9;8?F!0=-es~FxOUia+ zAkaL*s5%0gE3G94FkzSA0sTmL*8Ksch!Z?MHnHdm5D#aSon(eeNJN%;O6bq!?#$%Y zF#>L8aa*tq;6F^{H!@U=ULSq?#n8Et1)PJ&7e9C_?2R5v-9X*CHc;QzK_^gTu5yvj zSAj8+YT~2J^LdRCY>Y#;0IIk5-q~LjxSIna{h1<~|ATiFrDx)OpU!I`DAD&_@OL0i z+B_9^fKbK;7JjzF$Zu!bJH=>- z87P=KGawUFfiRB=SZpB|?wTcc;kD-i&!~yPvC>r&@!Yp+=@yJE_3rByT~NzLQj2cI zA5%0|i3QacBdJYRs}qk59jzO}fBs-qA;dKayzn?VZoV>3aeo3W&?dI-h#<1rUivZM zm(Fh)h7ti+e+)Fl5m&aAD=gG@N@87>;`LXs<@o7jgIYq5uO@U6ol@v&@`=etiFP77 zQgB?S;hQpMw|Ivrw?iXjz}aI?iJ@=ShXCtYbNcc-ina*&oiQd$z#d(#ut{MX zi};m&A6M?$!8Sv^V=|Lx;*0vJbs8E0!)k+&S01nN`@;Px84VxWQgD(VMrVh%9s(8z z-SRxYfz_|22~C~I$y~>1Wk&CC0(z&_p1xO{FD@vvqJ*+UA1L{4f3S0TDF@#->cUzk zIhoxJusz!3lR;K5M^@h7a_s*K7Re8a9BDt5;_YWOu{APpik{uJXYi%*C32JE+AE}h zY4}d&-`VcCC?)D|<%5v49yc9JB!!Ixd;vp&`ak`+=sYS=IpUmm``Jk@Vs$G*Ph7!u z^EFLTPtD_O$4DN&Q7LP8l6t5^|8e_=5UMG&nk{ChGr*^xznhf$60f;xkoObRZ}d%z4l_1~hukh}uYh*}0ZmMi}dy*A+0s3>kKkvM-`cQZnZnHujBAJ{X zl>7r0xqt61K`H`NBC8R))bMoO~)51*(FF zx0|J3EHVD}SUJH<&B{)yiwSpqoDR1fG=v5%Yb>HHUK$$8gNVK9R;$H zKoo?g%CAn99XU*jVvM%#69&_?wMQ#cknxMbilP$%N!Z%oTkb!cC`2>)Gd>(W*o)wn zW$;O8(hE+>UTu1S4kUwZiJ1FE`+}G)f<}%xTyzEmbKehN3r_^HYS&mpJ3AfeY09A( zJIG2!@OFtR#OIdhnE&W#y>>^Kd_?VrsU;fM(1%+!L^o(d>>-#*r9d#l-I74HPzHgg z{MVVIe^5rLMy`=C2W)^Db|i%?jdXLJ^@~^h19c241Rou{AVHTn zOiM=Lom@T-3Mb5)ga}T{JHbboIxkNU~@y z@NL)GVNBexOV*IB-V41 z7<&$s*hz!VQRJr^LzB%oS>?|R4UFwGAH=KXET{gYk<>@z5)`52CI`4@hPe#yDX+&aM?f=5Pi5mJreq^}0^tV~4o{ zn`i;nSM|o;0XdpWG$WWySfPS+5$rkgUb)W=Lb!<9=f?;qg2L6T6%GS8N0>!f zNI_ffb0VT$PtpRgd6s7~XNM4z%04fmh@ca%jQqHKP1Wu>=t4UG*`3+LjXvne80*5m z@Ej{LNQ7&!rKqDdiXDBvEib6O9lY`^#6Q|$5|K1`4&}B008ib;JsdrN_~!3$*;Rj6ma%R+mu>ZGL?*~}ILeJeq8m!S#r z0+#(8x4Z87t}LIQ3!s$#0*hpm+3@f53!Rc!q%Xjt37=*S@yX#eD0NiwEdy)Yycz{Fp=-Rj|jp&-< zI8Re2!dfYU{o)I;u-)+lYgY0CJ&1GmUmy28qJ>{$kTJ@;Vi=FyYOhrgzBPV_Ce?+` zTB15s?94@1ej8M9mc!QMSJ5}y!4y490Z92DYLUHCnl}4OsHSX&oSF_nB7a{-r&#pd z^ALgrv#mw>*8Qw4Wo_*V&X^hmpfXLl-?wL2|TLgOURx`BkBjX943+-NjZp ziM-_p8B5>7Ek)-sBHaQ8L8iYVrC#_tA{Ng3%ZAVFDpWd;j1N)IEzvgkM=puS<#P>E z^2pZR;DGnY?)1fB_GPyn6>=;W^pM7{LNQ!1c**Q`ED`l$6i6|5&I4|msEWb`(taU7 z93=gb@qFUfIeFh|({^8$ZLzJAI7-#{;z=4D>qndgf_v0Q4gw8@kU@VCYY@J9=0867 zY8B*u2TxwH`=JBpD*57hV`i1OFx8R9!Go|O z{5-sh81Z5MpqVM(6q?E>&$sFeVD1Ps3CSd1pMh6QWcbOuT(dn!S3bx>SL^1}kn5G| z>g07T#etV*z)GDkaVvNVf=a0TQBCiBu>lWA{=>^Sz%KinTUo=Hb)>gb+~;SN57o&> zS)UdeLd3G!y*Ytc)Nq~t%TFBPl#RpK>wo4ezec#lx#29+b?KnrAnh!K%l5ITD#bsF zImqDXByu6>m8X*N&4! z$X!R83jJhvsjpcp!j+i0+Y%9cy--({nP}Z1LH2N{=SeV3YEmOY55G=n^0XV;-J>*L zP8KhVuSlggbI{VS2oITQ3Wqb#dL8e~;$hRSimyoWa*I-RK-HTCSRqC0daL4Y^S66M zsD&QzEWst)<7K5>ei7WVlENoI_3QFK6Ua&5wYt?J({bCK)t!wKBo!mY%(!j2!ecb2 zcc~tB$I^0YivN^fOCG3fwlPKnw@w2RRsMh+6T*=*7xOF)&UN3(@|kJ{T!t9x7Dbx* zJJ?RI<73K5w6N^EaLDaqmlSGHEB&N@B*`2N?S7)TN`^bw$v9v~Z>_Lq8ofG0Ub^`N ziPt5Fdn8=)pqv+kp3RpTxq*iAMg6A!KOmweCN*Rs{bbT(!&vdX9@gT5{qklDEtVT8 z{(|q+NH!T`;n5FYw+Gu2f_C4M-=QVY?rV)|_f5A&K}2P5SR97_4iPy%om|LRZld=O zY0Tcm*@!BwOI~dWDvM{9K>jlL!rdxnH^N*+A4;UyfMcBd`1G{&%!6h37<9j{t3wgf zJ^Eb>LK8+LpR)yc*Ljsn|92EowdrOR{|n`552&Ll#;%)VD-7O0duGhWaY?I)kKm7% zK}f(@fH-UZpxm*h!#hKe&tnc-R&FTIMIP%`tl3%ymJB!H<|AHuA8h>l?ryt$^ zM%MjU5`Ph26kjFVZqix872jsTdsifFP&kjQOCTQ>9-XLBEK&4N=jByT4#ngkzQ6EUp?F*#P9j6`D2Zx! z7Bm)8_qW9UM82dorNK|*HQz_Km{kZ|O^322637!H zDrE08(9p%Xh`!GEP7Pa(#If>Uq#-MzR`V}qmNE|9=1Dez>H@s&W$Lo<?K63OJuQq_kJ28@FD=jd#EKG2YMeUEsTkhxmv11a~UAWh2L3 z2}ZZK?sMVI2h682 zh%F12 zVlZSD-ZJy1bnqZto5b$vAo`BA258apJCD`4Vc7?`YA$%2_&%&i35374MSfEV(WT`0 zkcB1MTPuXE(%4kNq~HOnDW09+2KP(o)oSG&Yp19{F;MMC0$&>4v&SJRbhJC(QG`OLm zOUO6AV(vJR`aCF7P@|f$59eF*1Lxwd`(VP#MlH$BI1-Rom}13IxnW`>|Joga&lru}Qu@9r56WX5;3gaB2)(X)@`suEcs%@!!o|yE){g-$OSKtp;1O9 zF!ogpQ0c*TTF#{UVf`!)iCZ6Fs}>dZ0Ew{5DQ6*@k)Xnqrn#OVI~8MegA|Q4%$^f0 zUofH6X3_0la0MeY9({Hfv1ss_OHxM~_IpPrANZjWe}`(LqU~isO@Zp@9EH|(iJ3kb zV5}kojL`kRF+%G<{$Pa8f-VAmKh(#*`ODb)v;Fx!>gqSO!=e^>V3OC^!%~=kAb)(3 zT+bkG`D8%C2ST&ll&e4u;-v$?d4;$*@|Fg49E9BrU?W11N5XltS zXjo?T#u&Szu%WRv)(<8TZ#|x@#yUd(7%=nUWkZeR>jqOt%sTVcM|cuP0dH@|ysix| zD^7f{is$s}qOL6JdsmEbfr*AJJaEYF1-PN!l{!6`coGUakN=em>g#m7yCnYQz*R&+ zr#exxc4ldOFW-i^#(bZLLQPw3>6TDjzBtXYB-55yjt~OJTB@8bxxk#6Ly#RRVfN%X zX@}V_a1@$xrS!^b)9dyrLWc;c{Ca-2C!N_pcm#WW)sRoa;x6+mVg*0O6^3{1%xa7M z;6fuyxIq~_s4(}UF;i6a=?QoVSXNs(V0Okl$4;E%@z(C)Q~b=&_$eM_x}CTk7`=+V zDC)A_;SzmbSj?T`j-Q1(@O#B&&)KD|bk5x7_nJ4}!emOAh5gXP@l^1Pr#@~kKtLum zQZ;eWn)ac6k}v0d_&2n>j_m)ZPLS#(^OR{)|Cb{BBmkrkAt^=~^a*jNxI!b zMXKg2b|K1wklNipte_vit)N9E1Eo@?N5l>gdl&_l3d@;L>BYb+C>x77(WNpvQsW-$ zwm)i9WQaOXeUKRZztn;z<1aI+Kclpu*a`Klf2Rd?E8{9Y4!xkmG!-zdXinx7I%^3+ zvj)?ADpI83zf_1y7r`TXDANcT3#NJXfXs{KB5^|xF)}%Fi3{5y8{_C{DDpHD*(r( zf^uXpIFB4`aZ>23^?Luf;xE(9*s!4j$RaT^rkAvI3lI>0Xw2y~ufV5Kbrb}vB&7miYM8rZCeF`0q zDs}Ay8;s7Tp=!GdU=`XHAM&zqzbtys`SglbAkt?%PJB=4iN8S^=S>*?+`r?2yo1{4 zQ4#>?;rFdw$<>%{V-NCcQT+s1EbZ^i{}T;Fmi{LVRPqN6ls!gqKXRk0s||WQWp88~ zW}(mOAffs6bde=Ud^Gv5EWq|l76ktdS=KOc{mW=!*tdQ@)&(yC*Kvggoj{R4n4m~8 zhEs&pc>R<`u+T;DZWr)@!uT=sV{bp* zsFY$%7G;!hqJmAJ@36fKz4BtikT_-Nql_r>bbn{2(r2;VLWrrH^cM8?yScF-it}jn zoU7((zgHW8N@2x|QNnf2Wu-Kd$iIP#8uci+^dCIXWbNO1AaI^FpNVS=);U*LQ3}z5 zm|H?12a;ni>Wg{Go?a4sBLQKeP)w{to~km_f4_6?I$~kl5EKgk^nqMJ&FU@3`VHX} z=qG4ip#C0Q2mQYQL4%&AVG_Jijml?2Ge7C!qowVVXVk_a-oc@-l=}8~9FoK{-G3-O zKC1oWq7MMDYEpL4tj+@%KaSYt*<-n=M&Gd_ZJTCU7qR=~V1g-WkRKxo8XoyFBji}? zZZI)kVAEVSf0yz?zp)#s4(7XgRBC8sn9|<~@MzZjj@%dKw;PVDbA_#>8M7z46CQpG~drJ7w{hYVB|CI_nd>J7V zo4iv%#OBYPjVzP*W={=zy!gjTK!uUggSyr*_6VYiUV6Bs4mK5B&|mqG|9z1#&;-xG>rClIRX?{40! zq;ejmac#$HPf>s`cXR~_tMsYEF+pyHS_*g~4TQq2&g#p$30+zg_vs$Dv94bllnySP z)1^Y$B$z&9Z2I!ag@V$(2YwdiPe6e`N-RsQB>G6Bk*B-2)=!AUB1)Fmu}M%lvVUBk zc@HKD<^hC}ChMOTCZ3g0U)-O)*YL+htA)O;(1yh)2f?C6?Cx zOo$!yJXlFPo&#${o|KT3P)3VTyMlosn6!28j#7*c6UDpdI5ZkD0wc!Ox@|b1vpzETF5zXlK8t8cB%U&z%dE!=!veXxbqfN-um% zASsVzvB+Y=}tI zDHu^~>zgg~Q(LiyqE)6=u`;$++TA}xJp14o@>GncF7>>e!0-MoU05_fJKdUFSsUDmAtXxgU&7P=j0X=vp_!3Dm-%_TEfZ;MVnFXtZl zYI2}pq0j$>h0$U;=Fr!rw<*d+AD)1#%|wG~1NU@Ml~o_OpT z@BHzWypJaeBvto)4VL^s0iKwqJKn6?D_eIPyj3D#*D9CZJSAYl8TG@Ns3k&*=Ny;Y z2sHCOTV_@irmXY~#g?}LBXrehd$>@%(ASg;stFV?WcQmFGMsxtrixpzZCmo7;u&${ z$|$6+=I^%9$SN^jq;3e5_lua3us?M7w@f&3A8>3m2)W4><*xyqxAm}MdtkfHj!W>5 z;P@$IJ}g_c&tjGMN^$x@uI%*TTq6RMRI^6vmC)bEK-owJP$TCMVh1dUXInV&>yv10 zN7SZnbbept;h5d`4SbW1><^;*s_>ENIoijyHFYK5(-u<#v2CK=L;Ci>IgaqnD9t&+ z^38^1k&u^hLU-*P;9wk#tYJcJzmxLd@NZS{6l;tI7GTqkQ8}8p`h<5Q+_|aYE!Wx% zI~!hL`}sEy!H@BhB^zq)zly#OFpmfNa3z1iR2K@IgDKOCmY9d!+S5FO^TrR$6x(lb z*$z%?{qT}C+LOS8%~^Wb)}3Aq6e2fxRs)nSs>XA;c0G-qF6k8E6CZXMC;BI4H!`-q zO;l?{?yo3^@Z+NyPLvs|tB_*VlzNya%_m;oG7KkX8ck57OHco$boFMsp>hj!deMIH zY*0)9T7x!&x>26Z>-Uav6|tm)G7$edb$$c9CAg?e{jV#agPBK9I6`K|T;Ho;gS%jOpz8xh_f!+YllWy9YIf*6`0i2tD+_ zzsYnG2tQ^>PdF46#&f2L+?K3j2Q%UwXxl-Tg$6?E>U@Z`UMRTHsovoYF=KYycu4j92AE`OqN$=xGym8*g3;0+ zds7gu&Yw+k5jPyEM&w<{4c62Hk^t@`9q`^H`__MVEo`k!*>y}?5&H^qU|1ezGjd@U z_~Gbs`jfLM*(Zk=qE4MsmyBAd_@!Ry!`^z`24Y{smbC>)jm_% z$L5Ep-Y$N&8;ULjCylEOwr1mA@TY_-S5u|Z`sI5SVXTdV*`nk;Mvp6OS!eT6{;c#j z1}(Ra6Qcd`68UtIXHNxI_5yvm?*3MRcFU{h3T)Zb?+G+%hMcbl4lkKzN~m@5?C7oI z?JQsNo%{@EvR=MDFudJkCpVv%?!l=8f<_mM`xtt!=T6Qn8&}hl_mpVB#@HdBkyjhtkcWOuBW_G4-Qca*cA(`_D~S_M>`z{M-Q ztwmNxsIi zkXGJth7*}sZ^}h?15_zQwH_^r+c$r<^zB)LTY9Q7vnQVch|RyzzvnzxhA8q^#c9nOtrH8`F0|bk5efgEGwjJk2sz zza*RULODk7G}e6@z&|TNs%l}PZx(;aa~SPdUp9lunCVjdz-p2KgOy7Tt{5l-WU_OJ*(Lc zj-Uba+fVG%^6LL_wI`fxEW?-Oj$ON-8HAf3)9H~%PUqKUmy%fJv_Np#%=)&`J4ImG zhwx=L?znFeGvNKyK$V^=;2ip}w)OYn8SIfQ?frRaQ`RAF1)W0V2qr||ywPQZp`Gv;G zuUJ~rKA3U)<|5%@Q%m7z6x*KZk%C56fw6qjLKpyRxo zi(Nb%`H<}RlD_BS&`pN~>Hlb=_o1M0lG9a*2jUEIYWjYkdC70nx^X2qoynlOIG+&d zU>1+S!fXNY(E#ptv&Vr6pNZpaaHZvY;x+i<_MCDC6fjThMxEv6@}sSYNd0inl;)na za_yFM+J6BxLz z?b|&NXtH}9+}@);E!{T(+Q9BBEUnNwm&qw7Ck1`mZNOAS!>uo?#Yi;E(CI;YIuk=F z*fm3}@Z1B8yCA&7K1YZvA6}2a7I5|TLjX%Dx01oqOw3cfH@zw$=|b0BCi9*d%|&1v zDrR5a`C9{7XXN`^W%dV3D7Kl(Nv@#2*k1vfaq52jUN(bn}ba z&RVkQ)n~_cxL+GYxHxf$?pCvLS;_!*#+OTUFsEIGvO**&=;lR)XVN$dHpG6B?w_$o z3B4VvYGUSPAxzXT<%S=uP07uvEix!Me~TPG5&Sv*!sHLrGIg-X_@jwXaPmJ{5j<~sz0f4TNJITDXI5%Yh;q3`ec)|!Yu>_I-XWrJ8GfkWTa)#Y6E-vWiL&#yG&A* zsK^@qX)KiO;`BbfW5c5yV{xyS4V4;h23_2#$H_Qo%~vizNWDF>IxE+K>ew5esk@Uk z<5&!rVxGCye*YWSCii^ilv)}?(zrfzDt-X35DX#FJz#7qS?@C2CrGy~q!}P+rT}`{ z6%S0Cn$vOZwmy!3N&zLdZN`_`xAA$$*k!d`9bZ1Zj17KnLCfNFLF%inb2o=N2u-v@ z;r4IgXJC|tCuDmn;B4Da-uLwav&6(~eB@~>UnGQF&c@_MX$pC9fwLR7?hmz>f1`bb z%E*Kj%$3HAu;j4FNO=V)&2l@uzSQ$s2|oJq<34u#FRVxfgY4XRG8&y*=4uPvQ$s^$ zJ$B;D+B+!P$Dl)WS0Q08@ajVSo>mk8Q=Mg^LBF|}R`{By(s}JO=0oGLUCsE8SBd&s&@x0S7A)o9N7$r?YO~7-;~F- zElSM-iBDarpcmyM!wUv@8iAEqE(Wg`OyZ1IpQMHSPGTQ)fM&^`28%z8q119KFPdo_ z_jMweKusVxm#>2V*fsPFGSMAJ?~KxYk_-OQeSjzIjnaK^m!4fPao!9Q$C4gLJH72d z@rUly5P@2EYBbBCSFjG|NX^T0gxuT&iTxdW8uP8w?lbVf85Qo5?4S=O!AYp5h@B*u ztl##t)_ndr&Oj~-?BQ44W`xRyk5F@LfBQbqTb)ylpYi)($c~98(3|^WTc-E3l$vhc z>$ewpRNgJe5kDL`PdGxG_=@=t;0IT$I%-7DDol2_TQu4KR(NtQGr;=DHw7Hc<63gp z6uN(icQMTO&b577ihqIM<@G|#7B_I?L5_gD)0p3PQAcp9K6$G272#$aPB>ClB{C$1 zbw#j5=@6w_lsBIk8FE1=gG`h3_la7~r%za=KPNg6QMz~FR?n74KFYf$15)WmIJ1qo zXC<36=WRH=6vh+{6sghox`dbUX->w=iSJ4tys0d0w;l1gx zaUI}Ih!u7X?u+X2i}(bs+qy)?X=A1 z@JZ5kBa++Kk#huhUjF2civK&|Ly_oU+y@SOQ!Z>%)m9&{a>W>SmC7}U7f z5-=#F8LSu{w=);5)J>SBwW}uYvef7aq0}A~n*E{JU3MdWW{c;?-0Yu0PT%gupK8y| zWy-FSBHgmG;YojtO^oeTlZZ9;5V85VpQIKnYJBpRrI0;#ZWzLi{ik%_XTHdiO~fJe zn_2Qlz+ntxMK#53(DPaOwHy8iec-XPO*SIxf2{@juue0TQG>itX7< z#rP-Nqm+{if*(;7cu$hRJck+rM#?>Lb_zxYqbc6_0*Rq+FHgKwea8Kk8%#Gf9%#$j z5RGR;1uEFhAE2Whf6LEqp9>3+#tw&KaveQh6=ya}`$6;i0P=rP_SRuhcWe8%3KG&F zNOwwuz>rFJBS<$$DZ>azOGtMkBOoCn-Cfc(ga}B7GDssO>2Hnqy`R1J@$7dW@AIz+ z$HaH7b*<|<&(CR@}HA4Fm}^Q+=iUcQYDkTv$Q==jiySEybH^z8RY#h@9(Ek1<# z5+tEY?UTC^zvahDEr=M@1c+ zzhE0zm+>a3UA6&s(tW_9;!A>TVH*`K>^A~N^?XS(Hd?Hd2l&0pqxTQ@{($}>V4TeK z2x_Pd>jMD{be0H+{Wi?3TPn!^6>S(=1gF$`i{`3CIn6k6J{0oT^>cg(G}KLST;W!} za-zjytwSSKt8*xf^^UMyy`MImi;;NZ zj<$sGTh_1@3$dA+(H|SrDX$^+TyFIFyNsA3E#d<&Uj2i}vsOhumL?H)Br}QMgVk|N zF3x9WJy|c5TdWM9Dv(bzGbMC{faXNF(0 zdgD#>{u9YF5!J{3??|2or3Y;UnlJHn$%7esK4i!R=orLv-IPnWV?cPZVld`PzkDA< z{B0>I99FiXb*oZ+mK*o;?iH{(@V#d4PQVPl5uo@{8GyvG@cYSfC4Sg1V){b}$HS;M z3GoFi$1%T9!s3;OALcH(2%{~MD!_y9X%i01$_hg~#Y8sbjY~Z`J7^RQQl+c9`hoX_dSM zpQXB{io9uZ1xJ+!$p5Ih$HXyyhddI>h+~Hn;mvk|5b%!#qYrSPaBjaDFJm>#P z4H6AV=QgRnFZjddTwAUbN0#Qme*x3bUKo1&d%Lj28qQ>x%}oJ%g0P29dww;Y@asw+qH|{C!wHVC0te(GxZERdRz0s&I8;NhSo)|YplF?iBVOC#ZQJTC<`+V~ z`bg6-zfz(pVfpv+&cqHoSQ~9NKP~Aj;CUC7VSEG?@@@*t)S1FfqIIEwlHW2qM*FOQflooL?58&$&m5`{JQMIZZFIqPp{Pe047vo zZ#Yyb9jM$N$ceX#)APxH%N)ab-1+!!;FN;Ja!26A*cjotkw^hYZ}f-B#L@*jzwEz0 zt$(3}brjAL0S z_=)7HS!f+F(%j_w2c;y(5lf3RWw!3+S1I7Xe^1MfiRqY=*cM5t7r$x$);%>b@$uGe zKUeBoa*4X9+kgcn;{K*cP%-2T_%^?TpqmG^KG~?W?2X*0yGnoF+W%snbl}{YyuW0Z z>0)z!^g{r;D#trI8CJu6>te6HJwEa`hy+aruK9Wws=Vh0pbDGB0)rRLtJ~i1{`rn; zsL<&VApByc|3qi&2Vi5w1D-)m=JScrDY9FrUw*MOEA%rjT!8J?4H;7uyyt(tihlvH zIAQ|Ujnls|cP5zlUTkQg43N%^-&0vxeA@l5(5v8+GrVoTa_2#xKmaslCIZ5QD?Es1 zV55?@K$n+-@)UV*m9l}*jWqcvvVmj{-RSAxvILUMF)=ZuX8-X}Oa?=)gK3x+1nW_>6KpDdJy zmFzBZ9>pSt(v*;-ssa+~ypR9um;b*$l^hR3P|CJhEv!uNt#@nXH;;NNVn{$?J4Z5{ zz5}@JIMrrZXMolbs=}-He|fKg_@R$Rh>$~=vGHHCrFe8j@O`&2ehB+~Y_$KeA2%>h(^fNe zb(Pg_?A>;15@qjS@%uEtNLA!;&pis+zZ_Qf!KB*xN?X7l$s|zA^b6PLaI4ttrPr~lEISox$4BlNMHWppl#(I;85rqZ1ntjCh`@Q!MG=_v~E_#%=-rmK*PYS z_O<{yXCA-;CQ6M(yjEV{`v#6g)vK)K*Qgcsedx2eR^urUsHdW!Iv~rK5hPceyVd8B zJ!=7eRa?-FN+ade?`H_3W<)KxeZ!q=D&em-B%%Pa@y(jG*&H$jjoZEf?)nf|4 zl5!nf)R>bn-1qI|@1te{(}e~v1XAj>@zbd4#j9LvrX7IP*#tc%DhpAHqm^w9>=#g;qp-VrPTKsxN zzh3~BpTz6u;F8(AGk0~mWUgQ8NKunow>NGJ8BJ53b#%7rSq9zA6qGJ&wI_<{f^AFC z>Bsri$(*K!OUkMW1vyjTu;|6-j!cV=< zq<=`BMRc2$U_cjLc5x{n2Tf#qzyj4$=^sD5c)U@Ib!Z{m#AQm4mUSLH$(^1NPH?Ye zTU^d=2deUYc1r1s8K94VP=>qxlvu3S4=p-wd=3RDwRX48+xPMvea55s+Tv&>jp`P? zovcG-po;wI08S=xb@Ukp9D37UAL`t^Q&%-Ab^ztsFR1+2Lvek zl2IPT&NU4=0fEGR$K(?9bis27*vK=_y<4@2lw|0m-Vx@_fb7%}rlpr_cxO}fZ7D~; z$l9y@{Z??y;|o;NP`=N@;Zqpe)@Ypn5ff|=fZkaFRz|lBIXS3aM{q_P9$7`x;B*_w zwN!bwo;jo$aIU*%L!4aG-FV_e)_rK2dHm|l9=FrdcWdWgPZgaWS_6EIQzeS8^Q7Vt zu%^gn01$&39KxTV<+9_U*s2+E_$%wz;%S>bg3B@y65*NSRQ-OQ_ zVi;S$VZ(pdt>OZto$m_BWCCGxZ-duK+`gRvJQ)XG~8%Ia7!n z%{B+3+u@7|?IJ}wzZwwY0XwO#QIJyNH7Ln5H)DKPi&RqdGdC{jvV2lsCuPEU)jDnF zGmv4QQFz)0Pni_Sv)cxWnQ-;jc(T#F|)_N{F3AfV4H}yM#6O)Z!3CA4V^NxJ3vugeKq+nGq%oeF_sZ&3` z4cI&06`VNj2`F(lCtGcq+dj>oPJXEw;Fwx|*twPB$u;8$=bH6Z`@VN+_IrIzr{4Ab zgDHYk`OFxyes|8+C2yJYmY)`@N-j97m*PujvC2Z>!*9i>$vaRu^h4C#_CQK*|9y{a zbojGt3E;;(1H=n%K!PZ~)VPysSZ&8*m4Upa^QJ0?iTyiy-XehLbUu-1mU4*lKG}Bg zHz+T(2{HYP5aW9^u2?Ce{#NWu{x-Ua~k5<39sITP*3vM-)TFNN}x=_p(P6y08 zk}f&iG=`xBbUboYgso@iTTUk{vC+!L{^D6Pp7YSKgMJ>XvCsac{=Dm=Ib;qg<(1m` zcrNbcPUOD83pq?}$@?z)=GQ2x<08$BcBYN5OIN#|s_I!FfKM_pR&0}fIQ{Ub3=qh25=TUT1Gk$I4n0jT8oPt~)f7Hsaw zD)y0KvIQ|E&0gtBzj>*h<(_`c@|5Ue13Wl5Yp=?3u^LbfR@$jnI%?Oz2kvEp58aJw zWv1ws;90_IK!E5NUhet(JE)A_u-9;PdyN+HDzzhb)qpbe{Nd%i=!D+1^9@-H3IC)Q z&(n3zE+TJIsdPOv|6cs2y%hQyw{eec!r`&6%Tygb0vO+%TJD(p9Y0Rem{4E)0_G@p z4t`%P{m#JSd@3Px5Hi064guWM{L@b3@%nvQGTXbb+5OsbzmesYJKC&r2{KPf51fw{ zPO79vf&5e`k7IXeR=0MptR(bPu2S-seXXPBBY*i0##bb0n0hF-m+*I0y}^h_S!j+4 zyg&M_yI2rigQSmgl2#l*nIb~?8|-ySK+;o*HUGHP04%qc?Pnv;-%O4`W{4xc=!1j7 zm?3+owX_vqu@;DlSDe{XPB)F15JOQlb-3vCm=IN&`A6tRRu!`w$;X$Dd3aEPt}^t> z6h$K+nlcu@hLY|x`Fp0!04bM*{o#Dmp#6>+QpGySQzTtAkQ7MHXGM#ZN$=o;w1n~QDs zNBn-qfGCqTZ#qi??q zPm&4M6R@4$J{z{TL4k*;C@Cqw_1rUmKtV{xV?usT-Im>T47Ly` zEQk3m)f0)sVL`jgM7s}fZlyMFS49=|jjY^`{va93K*6P4NS0>VapE*DJwr>Vq^&4c zz}|^Q#H9e#2It8~>vEj}Jc+okpDi_wvbk^8w;h+tVJY{iI)11jPLYXBybIp3SybP= z$DE5BcyBCHi;Dyl!LkIfH5BcxfQNkR<;nzavKkiE+AdB*nh=@EL4Sdr&}ky6&0sPI zt4?B#@)xx<8-ViZA`siiQR8s&oUz0dY)8>LQRHCdDAi~{v%vBSyD-ro^ySxq8WUFyE}+6*)N43hc<$fk}HO1eQ9mN7@% zQhgXM)@sB9st(laSlVdYqmwDt>h_54i1I5T0u2YigdZZe^koDgWYd-t#RlbrFLRxV ze5hcgYxuRLpHpis+diLWgDP;u8{ywW*-xvO%C;`GWu*m{;%pbKI;HHceT)TuD0YHD z{wa!fppMPD%fijL^y!psM;Qz@eMi9~Vlr?y-p)DaA~eOj(h0gx0U*wS95E@6fuce< zGV~gDdbjuXIaQNQV$JdOV3x*(p$MdlA3@kF;=^>|Grzc@``mHJeP*YyZZgb8+;?O; z*N16mAkU{VJCRnrv|_Z+RMU|1g~61CkD2U4=~L?~)d^{CXxswY0yV=Rv8g?vDhr=W z+4DL!FM@WCf~IG|hG?Ik{x}#U(V2Px%Imsw-2cFPu*~{(n;2aJQqIJb9v$7G*t6>cHK8 zMAp@oQr!n+XH!#6z%=t0w`W38I#A;LJ8uBRnFDp3R@K*+c_FeFfT26JYM&iO=%kg4 zaX$+Nv3lemhCPkpBzCyN?lT<7NBt6iaEZWwA5B-WmQu!t7wjrCih`O@;a4BPpVBR)R%})xd94XYkEG$&ldLS}012>o1sW3+jE%M7FlrSP z8aAl_Bk!fwhVj%^4$uxN(*bBeB_sQ`J-MYT-=je_cyJHU;ZV*g;D(Y1uHrh$pH4Gg z*ct&-!!o%12$g%E|0o=JLwWb4RF$W(8&Vg7eZh%AOkE5HnfxABgmsA3#A8 zt{d)4$SszHb@J@-VrRco3m+(%jcGXN*;wk8ijPwa#NPK^z^dLo7KpU#?k5gGwOK&W zQiJh?PXxPULX~oUe^SDjwyX?aoSfR?TQb7%o3TO(e`cs0RLvHK*r52LGB5Q070j~; zy$-eb#4oHibB}%$HJrX@It0bAHt$;D*HCJQ_d*N%{Y|HQzUo3<BC;z0=G%cDAiRkMC-)wFo|Xw z@!Kg+%^&f>(0Fs<5P*#C$_ih86o@8+GJhU@WycJDFnWKsybaMIf6?7Hv(G=B%LneG z0nezn3N_w3s%(B_zeNVxn`qVyO7Q9SgAZJkjj)2Lm*t*W32jMloLs;#kD(@sv2%;8 zECM}K=)}hG>vOy!zWqw7{JHHSZiU@Q_b}D2^z{$K`CFF+He*cfF*GZ{U(*%rNkk<` zr7PrQ{Nyz{8jg*u7K1x>S4CG5kGT`mauOu$NSY$VwU>&7Kv!Zm{6jT{A!7)GM6dwp z!|3*fLgkF~aC=NJm3wZYF)=Rgkp~+`LD(p`-Mg1 z4>j|&1Wf(HWF@;r6o{hn;#VN|_D!+E_%nC=T^_pRq%KYwi-?C3eUFg61B~Z#KH4L|I2Ss?P)5%5(Ac&OEjh}VzfHdsSahI6dJu?<% zeC8RP!xSOO;n4AM6J6#ji*f&2CxV@hr}Fyvz2d)Qj))36DM!g&fV@d4U5ILpb_-Vy zZ;Lmd?YQJ?A$h$tM^ma`Xh!fbiNNhww~6e@3kRxR-JB{5XlbVG_S(<<8H*=CKeK&f z!?ff(#BD6D#MC$H?NB_SwoMj`^UvLKZZVFohxsgs478HHZE?uWC&6)kq*s`gu|&9l zG@9gor;i1$Xh^{Q4k1NNs_g?#*T=ae86-dt=9GXPC>gk+*o#f!*1vH#nH>-_9q{>; zO~rcIoyfNMywUKbQo6aAq=<1hsf>W z?&SA2zLXelbC9<_r6RVC=jpn39E#*GOGn!f8)oYzwvHUOuz4z-yNTZ1?PbdXFGcxLw^l@Gc!Y80c< z=gV?ViYD;Mdr*|@iW_jdea2DYh4Z!8t{&ffJ4J$TUa$$LqF}v{JrBKA>bJ3nH!hg% ze?bn$*>(>Pv&{VvLiLgxqwoMi#5x2^F(S@A9g1}=XUqr>^kTD4eh&UfW5U^RRzwUd zmvNknwV7YKQ1BsoY)Z+!nU}6ldsBO6I=nD^$i9if?x#l-;dVEcS4-;!7+V&>{d8mxaoW(~L5gDR2a&5m|>Dz1NrJ#du zwIp=Ix;y6Qw&F@iH-6-(Y`73R6l*o!15`Ze{4{EUn#K*i$8hEXl5SR+2SPLG1TN%K zD6lgXBh6Y%jI-*Ty+hd=4f$@K&iez?mk}g}eVwrzV>x$O5DZ<)+#|mkj6R?tV`5eX|65#|_nQ0K@jZpix%=_8)2QK9A$(`8YodP5v>g*er-^Lwu zdP5qnPIL9udB5^4bvUqUhNXDnx~wfJsg_lUpvlr#0ity zn8!G?lRN|aY2m2rVlEwD&F$M&bYYkVz9ru`=!fms#WQXNE&kk4+tAPl5<`-eE~967 zft?4+7YkhyKj`QH*mR7;*d~Cx2?H#0uh9{aCFg!gbfl=~Z%^#!n!#ehO9faHaN*C zg?WAgV@x$)R+SxnsWRL;z9%A9^3@*JXDDEjpFh9f%k5< zCAnc3qx3w`EQ9CwyHH-QhJKXSOQ0}v(`?sdL=~RLTTK=g!=1IaISusQ3~`$xXHvTI6?bX)tV$OBZ*)Zx}>7e5O-q_E;QgR+hPVm0yBEqe^O z%cpL2b2<&&P+;oO+7H7xX}nHcNaUv@y-R$|(@WHOOPD<5@NONi z(hCHW^7n^3u&9&bQ9;)PsRMr0a&4%Tp2E!ZVpdlm%U)Boyre z9_k-M{YMvABnzd?AFp2Kjb^bFdp}T&V+dxuG}x8G!okK6IN(`38d-f7oP6Q4M5xF{XWtQ$(;35O=5p83UWF?$wzMX&-8lieSh8u0hSH5ngNA3DJc+7>{)he{#c9ntv{HZsTN!-ux>_Bke!jgAv-xvO|e`7 z=by9HL&4PIk-1LM9np{*CJ+d*s7r=nVC4h?By$N(h6TN=`dx&bQu2{7BydQCE=5JnO2{6{T<G0n;s%CqJiiN~wC z{}^!by*8{Jlwf>6E8C4qcDy^6sH~ygoP%T^j zHe{IeNOUTgosA6ON)B;N@--u4@#tXO4kq!2H^Nv#9z`|~n=6k_EIHx)IkYGg;HUnF z{Ic-!?fSOHra8ES!2bAFu^K#^1FV3;kMbCr4LX}-rOMx*{Wgs_TqQ}wi@2SLrG-z( zj%!K#vS+Dg9XsD@b)Ql{7>5PVjV#!`c2n`RdW^of&A_WAA{$loc>_7QT8f%FXqD2~j`Xt(k6cNLQA9`Z+MHV2oD< z-fUx`*F;;vD1N(JTaghVDhEPOE9L8nQk*5L8H|F*D^KV()Fm_5C4Lc3?347o{+6NY z(3j|Asvnf%vm?P2LseV6ia+Hwo4igd;_jH9C-cU>Vmh8Newa<}Nf>sh(s?XaG9Qw` zv&`ZWE9x6`Zt(gZ*;~h@ogwn%TJr&6i_;qtv3VyJR3mesE8T?M@LtH~;>nQdCpI2a zk=}=y9*rg4qRbEt$qj?}e(hM76RkKHCd-{q)P0~NbXd2V5CY0S+|Ii0pk~Fj8{tg! z#3|BYOD1^&y$~ghKUf{|pkVryf=>S&}~^iMKu84zEY#u5fnL$0E0g*1Gl z@qqosHnrsNF8&DNh*viY0-7@@^X6jK+@*QPJK-1?j%?1`We_i1AXr1FLH9!T3((2% z!=-P%y>Qj+1%y>-N8Pc6hBt3UtV+F5( zhzh4`A8;?@tbM)OHiTs87Gk%J@b_f0uR6MkDWN2?^od$pnbCzJ5|_x0@QbC)??)Sr zI>`_)UA!%To*mPI<0EohtjxWX5Dx1lw-#qFn|=|07sUT3!j$(U5Mt|iiqWR z`sCUf`4!zW#Sbz$(aY;_bZzq zERr{vDxxBC*4@K z%-@2T3`1Sa!~N@&=RY^pZ4JYQ-V-3-mP?%|oVR`0C8d4{o?FIH<(0^NWQDWC<$CHG zLmmQ5(w3}#HSLYAy3z=Zf^EKS$_?Hb`GgA^Do@zqOibI(#H7lJcJn&SuyT5Fl)V9xJd_88|qJT_?Db9zW3B>j*5rv`e zhDr4H#$CaGvs=rHa&W>QM>u-+D7K$VpdoiiP<54wDkatSQvS3ed!f^4lk(}0z1lc1 zr3sXZWkh6dHVuVc_!__2e50IcwkN@@Dm*JJ1YLw};!Nx{z8ux4=fDGNhVz`D{POdw zzUPU%c)CW>{iJBZ$)O8VFBv`Fp0=S>0+mc)PA0V9pm6-5rbH_3W^@d>Aj1HILqsZG zA}2X##0<00 zVr%34P2S6JASH zKDiV_>|+Z2l$sB(YA%;CA1W=>f^Tv|qFwqa_VR$pE>qBjp%Rcd< zObt3YQ8deag~B_6N4>ST^9Vv7Wt z@0nZY*P!rG$U!B3^Y`ZyC!TOYfzf^+{oGjIEk!-PpgE~i%}ra?UgR8Q40EP`$;scDn^+Q&5tm0=fb$!79so(UhC4dvX-=Y(s#Y$ zJp)D#OFMmlm5{t|T(opBjkt2-%8{rML$5Xpc-`*p)2+`R%%3gppi5^lvOf37DS0 zg@Mayr`I^Bsm68Xw0m0V!j5ta!m7ZQI_=hmw~EsWe`-XXX&MyY5Bm#-qoc42=hB22 zRE+*avMVY@DGHs3*rx?T%FD||zTL|wb*gutjHSYnnz96ahtUl?d6qaSH9I=$Ybb74 zMu=aOvqSPcY=|V`EC$zg(vtN{H7BYnX|$zBENoLlSw5O@`9{Zp&&!qD-e0hu2=I2S z?=rqc#?ng8N>H&q3*Y8DfS$a_cAAbVv0u(T9Bj=NjQFzk!86AC^>YRYrXPvr9&_+J z(m!Q4yj~Mk-hf{C-h3jZ<@dD2-RUK#d#H-rk4h2L+9G;(F_NM$9{gejGvvxRKBJ#-gJ8%onHT9h1d$=WJOtRE-7!w^FGO~U?D2sUY#`+lnz zUPqar+?#XzFO;0m@TM9bh{}b|&VB>|%NSQgObXpo9~if~3Z;%Yl7wezA={pYUFq)~ zpDO@6`3#H08dkzd;zvp6OY88Qk{b!haxMFwy#!{<&>tf|5iBCF8MK!Tw?xl1zAP>> zAxzh9(=L}y*Uu?R>C_e)4js~Jfu#0bOHdyQ~*Ai#jZC4m!JBBlBmDhH_HB)S_*J%?#WOyU^#T^h3)0aF+j+tY~KeTE9uTXPOxqqDK2yz2SW zm~6gjX(?QpfA%b(zRt0V#`T0rUR+p(T5Zg;!gP&`&aMk}*4KTLL@T_SdNAEdx*Q&z zWK)afJH1Of9Qi%Zyg1>bBqy0vZ)jX&>LhX|r1aT-QubwcvJcQcJpzSq2PB*c(fDF& zrhH(~f2*Ec5*W@c?wmBeuD02K2z1MfhCXmc!WDfCDUZAtnOA1p8@n4Il>*Z8y~$(8 zaiSo}U)afXrez2-GWvK%9O%awTi-@JsdL~LQdg3gwPi!NY-x9E_Y*l5x~99{9<`^s z-ElMR#UtsJF(=(<{a}c_#u(4_?`{%J@-=tkaMf_dg1UUu$)|aXc*Gt`9gjlng|a3u zX<3C?49KC+bQ_^`L<4dZw{HjIIuINnG&4UgP|_FSJQq~8>7*b~!XJ_rU>Xu^n0mhw z!&JFoPbPHZkjq$buMwG*bU6C(Va))@aH)s#NdKYU+~NE~y`eHCT<1#qZm2!oR8&wT zt;pR}A~Wlod%oJs6mr`SQ&|Wwr`G~^RScQ_3;d?cYI>xh9|wNvdLldc2D~aW{vhan zZzq%5So2u>7&g=cmiK)77?40p4h6Q)fdaLe2mS4`$%Oc`oxYp>?`+T7^{Chnqw}H{;xHk$*Z=0c?UNnSOvx5V_vs z9_3<3`9jwClo#K6`j>ipf?GSK&dycs^QAVKO?UKLfqyY??x?OA>OH^zFPtX6My?49*qZiEK@QsAz#A$Q@Fw{&le|bnK11)vO8?q*!BVrKdg2H% z_svPY@^XdjZ=&tza3}cJ@nVJ>)r5fBX4y+)=uW7llv%|5*j~;gIShha$Y=5gI5M?m zt#mEV3`x2<3;=JJE&C;boI#QeT=oiL5YU=%NE3dizZ+Itd}!wW<*^%(ro7*z{L}H< z-Sm-uEBPhta*t6Jj!Cm(D#Jf$_+|RqaW3-|7yjMnvxyTL^ylnO;^K;(5$^0Ozavy% z56tiX^!4)FmbU{g4@PX`frdgaX-7|<=mu(+U89eHn716n3j8MF{_J_qiYU;vKXc8l zwsAjQOd-SgT+2&y!k^K+_QojpZ5nSX!>KvX#NFqRkGEH;%X#lQ=s>m8C~tAZ#Fs_M zlJrXTKfpRFA@bh!q5r;5FW*SN$;xq@qWaUy*&itDWHZ$th$%eESE3w#kY01@G>Zd8 zr1yYlgeEsd3?{v@M3EVdlL_r;?NzTt(V#pHtuaGxF4jTa!;6JHP zkOz#GMR{DiiB%F0CDF_^l4- zy~OVwVld_LI%)<^u(x=esB1fdtv*{E?v={Jo5S?!6l4Jur(pFD6lXh7*oFMZaw!Ov zKW%VtJ@6*TJlw4hNkIDx0ObUUxNo^U)qclVq+@Z~DC_jqrZqR4EV>i=)*5ih=oLBa z#BxW+nFK@e01roF)~}bHxHeUG;wLvbdKd2NljcKWVZ(Ks$yy*onH^mW7sS1Q9RHl} zCp=H0EI%?e(Tn*f3Mcx&BC{~d>Mj&7(uu=B?kqj0A(mf$Xs8BEw~p%x{$Oyd zusr6vzJ@-{V{d&h<1yWjWP0sCY4YLZdhVk~n7!b6A%>i>Z}JxFCQU#Xc8^>WBe%(p)doc@?3q-lh4X4oEdOeGn?@(E zE_ZxQzEN7Uv}^_DQZPJW(IBdL5Rb023x>C3uIDr6JF-#m!0PC?`A*=X@j`bsr9_sn z*a2FgIWY|N{Ehb$P3rs$lA=K=`z{TY)Vh(5dD3^>RvO6&$%=4UkBR1^)05XIFG;cY zaas?P$CKiFWG+p`kK~wui6znO`NP_&z1BrP{U)vq`)lq9$n%d|JaoGkE)JU$E~WM_ z*%0zJ#A zBdy{?TDlvGh+`ia6C(R)d`ceNej_UE-Ud{1$5$X;20~)8p)YIPuDksQBe7VTVz=h}Ea5gu;N% zNUUfGhvSX)ue*Yu9OYxEMJFsABN|W$s!tEnSvl{Jz*)1vc)s7SyVS5J+kQAbp&(P& z+-HC#tsf}d?lsr#Gld#5UIiy)J_{v*^S{gzf6sTq*WM8x!1j~t$?qyq9fO%w*7sp| zTx03Am`qXDNC==)-4o3@e=@W)v$`C&Lcig)L#a(}4VLZr1s^+qs`5~TG+#scSAObx z#Y1DFPprrJu?>6?kUoph@u+@Q=KCt-dCa|ZK#E=__*K!Q^FyRIu4M9qEOMgYUNp~a z){p6@p|-Z~venGaYR=kVwgh0`eH(YFn0|kjwF}{W^>V^J+wE=t;fVH(pp~hC!LXLU`m-?wsl`{>a zB;VW}hR>NmvAuL+t71bVp07%5iS~hU(V8fQ(%4WJcs^AuB|kNWRX5>j^*6EB6>ga- z9+emt`5q|~7PlY`=wLDKZ?5RXRkGAXQKuMnCqGuK?S`SHb;^d?5vlWQ=*bAE-xfZL z;<#nu?6%Ihr?YL0V2KH8e33qIM^uiwyQ^#$&jeIqU8$}soO~>yIO|C8tWx+EF?I6i z!ussK6JHKpSNKD?HiY2a96C!Z1gX|RL18SUp$Jb17Irkh;M}?IhJg_9NGx+d9dB@c z(TTLM&NpGRj(mE|x6&fddIz3Kzdl|KG8~(y3ILq*&vO0+8bj+wCINHNK~gHOSYm+X zz>fjNhx-}GWOGs&H#CWZM%OIeH1bTtI9U!38)=S7DvgWXPZK@fXEi^`fHD>q=;NN=}tt>*Z6CZ4IFgANw2W%fM-%nYY_ zEb4xSmgij(Wv2UDdU=lVu!WPk=Sz$|L>M{wNTXolQ44E1{%&$S?U00QC2!SU`y%<2 znFAs3K-C;#`INg1F_mzx+hr!O5uwn_Z%fLa_gM84q8U}RXhpxp58Oaw=`~(_&5&6c zR8Kc3(W|Ib^BU(~-OG`inA8^d{8*TzcS}P_>x4A!f9f+3Y zWXQa{^7;bxv;D#E`xMi$EwZu4fqGV5VFV(WDiTI?f8aWISbIGttb=$leVC)Szgav= zCJp0Qmt=-yeI|E0c;A~odX8pD^`#t>_GM1d&Cr}9Vi(n=G5ouRyS51H3T0I|$v`({ zh$Y$23m~);k;|8qke%$IC|r0TBez<4J??KDkOUyME1R_Fe4y%|ItUKdkEcGiyz!nF z;ygErkUL1ik7@h1-uFCLoJMhvlcFdrs;wIEc*0ABHC2^C!c>ZbtEHNvEP-a>q>+3 zIIGYcDzj{1H~kP_oBSUA4MTzrg9^)Ng;J`vsh^CPdZ5{U70ZOcU1`zTr1~xP zc+l=j_76@+1dmyROKyUgWyHT@(FMurbF15XlF}%oVnCq0tIRznzr5vVq~XOl_AiWZ zz|#5Jvq6ESeQ1+}HK$5GB=@btzjBYSeBenZEkV&EJS~4&zK!^Qz;q__YNBQ{t}aeR zydP>)ZtIfI1trSC4^2ykYFVGKa@_4z$%s5%az-CIKlVU z5}|!FcJqNuOO*OSyXO;NIDnJ`N{s4+b&A2sTDshd2AlY@4IxTqzs_+&c!aq) zkZp)o%7bX+ydU2s6}%lRzT1$;5LJ0rfuB=8Q&(*eCVGEHhq)vP5*aEQ*jq}9x;+BT zY}VBcahf3R#DmvwDg0ajOkRebKv<$oRs=@{02XSaHLK>v%}Y2T&W0CBeyMR+DfXn2 zXctCHqH9)3wZDHKX8(q7jz4>^bskiW4U1`oOD0~0J8g(CfAmd_^FMaS;F)EU?*sQ# zvM*jUbEPmL6Os&Hy}LJ~{ut0wAm-x%=?}L3CyeqwP*Ff z9F9MJAN^KNv*nIxsK}fRg7l@Q2~XVYqERu1HxwN-@NnE_$Y<}Z=L*spc*pq++EZc8 zgr_z9VJD3_o=R>!hrS0}K`r;vsQB7jr+Mhy2LN}9-m>$=&zJpTL?kJp;nEWd5SCaH zOK3Gt=WN5q)_gdKwA5GO{4t*V{|4Mq_y=$&JNT~ConArwN$nyN)4a+HTzrk1OdrvH zMT*HY|L8(OPRk$$N^3mKpEcd0qwl)W9BMu>mz9Z6uRRIYp0%UHl42^umD@K$0e4g? z>PXu!_--6h>u|3;x;y3HD{3}P$e@%s-hpgb%NejFWW3LAshx32g`k0cx``bfOnW6Y zH&V@ar%Ed4ND&)`A;VRo&xb+DDE$xQP90lH24r-$+_&9Wmp>eHJgEeSJexj<-Y;m? ziJRB^(J>H3ok%mwW?|mWqic$cQBa;m^NYTa2$fmHA+y2jbhxj=$5?gJoe&|9oykbv zuta-IeIk5>rUC+@Eh_s2kPJ7wLXd<71Vkh(7Akeb@cvJ|VXeIPe@X(Fj{oW9t6*ZH zHt8-l1-lc6tq!6uX3=5sdzKSmgfpGR2&fxrf|v+iacdla-vZ~o)d9_zFAxKFtgsA+Kn<|`brxJ4T z$m~6oPs3Y3Bft|)!Zj9e=sfZLmHavLuS-VcbS^CBkQqM|KIHr(>j7xruUXTCCWpdt z=X4i5-ytn9Bev>W&RzM8^$0QH9rTY~noa;y3Em0%sA1g`e6mTY~{`x^aXN*=K&$e0NouF)Ma zhO=4osI0(h#9qTz1`eDKJF()Xkn*TK9tN`FfVw5kLNtgzNCWGnDfen~3)iIP?`9*} zLC@Jgv;ZZ0&I*LoPnTbmBtdl^Ztc;afon005Q!V}r|~nU|4|;EiS*p$QWgFc!nLrx zR#oL+@xXnH;jKPbN*RunK+&9!h7W&bS)(}IDG(C2EyK}~9=L*8p3{J)1@Jt4-?hRq z@8NLDkr81#gs7wC;&qA3-40c4`G1_fby$?^+V^h@qNH?5i*yf-q)3C(ozg=$7$6`e z(lB%?CEXw(AT>xgBRMp}(D`1o_uBhe&+mPnwb%PQ4*u|1x|n0Kg)ud;gBA%HwxYC+F5&dJyEU#xu$FZs%(?J$?YaHHFi9eG>RiUi6)P z!-+CH#myFcJNT%NPN)~sRgd&-!zo@?=+0}-H%pzrp5GyCgfC(|4KL{<=oE5Emm)*7`ICas^bE-Y`%?EnYVMCiFD*MRS-_;BJy%C|}6_ z!83sR3A=rUIk-onnnbrbNFvFpT%O02o5lWo!dxfn?f82%uP0xG7BiIhdnjun8~u9f zCf(-KRd(rbZ>6pl}h7F#eghlf<(sM#2_)%xKSv2R9}sT8?=SL0%BKTq^Qj zQzL!)G>WkTr}Gs>h;|E?|7$GodqN}|#-u!$fhLbEC%c_%G3>VSfa`?4VNp-yjW#KnEeG&_Ycu5iDI)n~4IoaK-E#m47K=FbC_ z-j=o3$JP`PBMfp>-qsQdwydPuu9lb!OF@$#P3stfsSuv=vYT09j{n#m)FGU|dm#FAJM~raz{*B9Fh~wAk4-@wh&I`Y;n~xT`2gb7yh$eQ{9peT89o z6DX(bKYC_3b#G8%#A^ceVH>S$_d?eDP#=23RPkV6v(-!QB7)|^uod$Z?PR2rv$dQL z&7-Q_1Ik%)q8l%4(hc_SZx;Tc1PT$*VgHHBE@#PGqi)J`M`L#cs~UWi?GIzOMrzgT zSyPP~n$&|h^!~}}fN__W9Z4irpzz{qMp_QPjt^0F|bX+Zj9ArEEc@6DaGq3vex-ts=u5c z3$~JeU4T0@g!e{j<(^3F%RgTvK(xH6mi+~Dfph6Z7mO;#+N(3BRy#QIAyi(l(i10X zI@HeJsROexg(pIO?!uC!ZsgSO?2Ab&d<`bPn52t$L!YJuOfeT`5{m(dH?zWQuMvgkxSZjqn zR3lma3GI_v1KS!ML_Wr!sWd;G@V?c>43XuWFr{)b2nvW<$%TKEe{;EbH~_T|bBNt30tE#uk%L(Y}pl zAKfUh@Xf(TT5J;9$NYnHLy2?!zR*Z@Zs!cBwL1>c;29{V^68D=S5HmOeE!_MaaZj< z2jeFg*}Ew5%i2(hZ-p=n6d14T1)O|qn4y)s8vrGJ2q-l*OZ3JqDIE|_i2{O+}NSo|MYME~~} z_#kl)JUx}`pA579+iUVa{LBB&qyp9+4WJ!v*x*-al=uJozka*{!U~PoISGG#cmH)y z|MbZt>;Q>0?toZN_=D;7_kTlPIxt%BXA`YE9x|`YPWw{UGwb=fVp1q=}cf z_uxuH_uJybdreK3Rl&KJ5uskx#Yg{--{5Bn9vB>K{H&k_zJOz%@>;ohv#V~^(9H0Q zaRbeR0;7#f_Auo0{Lw;Pk&3dTYthQ7eJv>AaUJU~8;phC``sgvzj)dl^85-L4tVhv zQppnX{hRTTpEHNB2>-O-{zuwW#=HMsNs9PqB`M8jTSw^JjN2oaqu4E=1-TQSwj(;e zkVL(CB?=0{{pUWj3xeFonJiDnS^puRI|)(T!VqhpYpmZ8y0P2jddy$`rHd^8+R*4x z;^n7(ATM2Obk^Byh=mM{5PCb^mHV|2#t{#qc0`!k^vp5*a>R?IiibLCH_fiY~fALlZh@dM!&PeIC!dXN*J}@ zzFOU8dGD8tQ+4qGH0=v*2%Z-KOfgCnlX*XnY>jsQt;a<4-zYn2h5vsjJGx4vY4`Y> z3UV;^*GCl`z%Dl5 zY)$B@z3Q}J>bqd{$^$c%_)fzO#>fbEg_Z7%00Ud~TBcB7?1r(nA%)FhQ2(N&=}^}T7+;!?epykcQix}b_Cl>N1gJhR0(;#9j}rgnf1ERa z^_}=4|Ixi@IEr6>Cs#6RkE#|`O%@V}(M{D9cn)4sosFYy9wr6ka#(*$P_7LU;nQ>$ zzVEk7Z9AI~1li#~6J6t5ZYgUIO#%QRBzElS77c}L_S&U)Yp55sZbZC0O zt4wuvZK#BRl!6IV9}@sYYFs+G4&0N3xbUF07a#wM0vY*5qthB zXQgGkK0fK$hXDIC|F`(at%j>gwAIpIZ`rQqXod^UMjsA#twgfWcv8Ahu`bO!#jsIau*NeGPd$=p<@#>ClxK;=XC=b7!pS{k%d^{`uA!`5SLSwed z*}C7Anj9s=xyPUkaW~I^h(;5!po-=~<4a?Q;e^;Ah>>H{!4ld#M_V7Db@l*9y^@*T z!WVdz{#T&$m$zPm3_UWE@lXzSw|m0|ABj~nqe0|Q=9BAo;HVf2U~>+G`B-uhaY5OK z1?N6H0@N{LrOF{&K(#%r_@Idq^ZHO(%U%!5-cG=k9$-S5v*%y#6So}8pf{~2Yd`Nk zAfr#e+|SRIi=x^C&;Y@;vZR0`8JH2MotF>F+QL-rq_BlnAH|f576NQBQ@IzATqOXO zzuNozq^9cc29kK>7?qOgJ?6af8^If=lM-|4eYy?+Z3OC58i-VX;iZpKiqzOtBHHmB zM(i9-`=8F|aRQ#%$$@^uGEe$RcsQl7rffI~ji}FIEU3dL^IqbJ?tc{7{Z5d%Ri1=3 z#D5CR9XOM)eR~1-YYBbn>s{(MUYAibeC$DsztJGZAz;R%!Q=ZI%)MFj%D1O z*C~B4UxhkmkD5kQ#CoAU@MN^qNE~g`73O}nIevL@)|(kj^+b55vEn`n=eK?4Nh;5) zpP5oYLcf0ig@u7W{iMQGT@d-H@N}WkVV43;uv-4|6z58|p8fd8c~kQD zlbKZPxLm24lE#{=ikjz9q@|T48olowm|fh38uxa(-+ZXLN5fFq~ zl;~3BuyV}y?0Bp-^r>ExcU5b%u5}w*Ymcys*onCyAW>Mnd%*u{(D7rlRhpM2y%&7q z7(9%}9|zR-mSR-MvXZ!#o&(Wd_!WA`0ld2b8Pn@;BHJaUq@==ZeesbpXKsL$5eGOQ zBYhVctlD3{<&@W;^g~^CdQ-(z|AdPCU)Ej52ebh4n!x`w`@Avrr`cy3MW9pD(L5yA zwVwUf#5hVX_P(05 z)3%(CY8mmV4WR)S5~rs`KvXw4hzt7xfXj?%wpD++9?t^B&?y*ZD6#I^oUBkX-$jor zhgi^7)5M1UamOn1s-V=X~kMfZNtvTr+1w zfgK`rcL2=;LCkp}DQRNbzq~9Qd)p2W`87t}Bog0+N%0bU(a_RvNUP@zz#1%J86Cgv zhD*fXkPdZ0RA{9C_r&af+`d(n{;_?K|K*G*6ZYSo5mj61+*U=;^)8Hmw_P>*VPD6St6cZ*wK2)Tlm8Tk%x z=?lpMf{sl+{RN7)%c2T6_g2~4ch~W{(CD=XUiUQlU$!*eX`@)6prI5VmnzX+8!JvZ ziR|Z}?mIt|XG*2#vFr;uk39sk>U3!nR6n)_z3|u%^XeO^yNRhL!!&{__%--~;?sk=G9Y8rnOwjbk|z^+?!< zo%+5EMMa7E!~^(d{vN!Qz@N=6%(8|ADTo}q-M`{7bAt0E#a`qg$wCoa1+J(uaqww zIu&9otrlSWn}}oC3YX#K1S57F@pEX{0R1O&XTMapF+6VG+9e+1Ge$V-aN}Uy$dUWb zuWJ%YUgM-~{v%)!v7up9CqN1OIX~5~;6JBnsyEQ@o2w+aS%B|(->JDAak{eZ;F8z< zO|G<*+sQu<+^d?Q`c{IH*m@bjN_^sE_*N%J30I*So+6;~2>z%qM3#{@d8&UjR+k3; z`9SHRz*;@qAlZ9z>v9^M=*P6x7;_*V0HQ-_MrGK(%ohv5rPu@;B0BB#}Wyp2k8rxCssn|00e4W4i-TW*~vQwg94`&r?Xh za=|!u?&JAFi?MB{=NbtPD?6hSyo+$g{Z7k9c_%O0H-})je)5#S4RA#*hQ1*&&{gf z6=K%NOZ1*`+FQ+zN*3yK8Y03&e*BSh0H@C^$z(D zz{a$_ya4BE5N@koQ0&r(rCdnK`yq0RnBzo1Y{ytndbFDHPa>pO z0@f6axLfY>U;{A|YM;e|#QzeNo^p7xBG3}u0uWf4i1IEfpC2C0C`uFv$i=MkfOXG* z&I_l|r-KCK!yh^zl)d#ATgD!rCR8Qs)>zoJckfGPP8FujM#rgx}H22eG;Z zPRg^tcNe>`YAvGC;4Ma*>HJ!dv+PKJy9+cG9&`)9U2FSZE7e#h_2uv2a^TCFsJkt# zBPZ{}2zPQI0lFVkrBf+vLFwkx(NZ#uL=6W6FLa02KR11qgZ_zWD#CrnN$#W-$KSX_ z0}L|vjadDSyzm7%T2+VvhRO8#cVh1T_=Go|A}my@&!}Xup7Yry^~6X0yO-vI?>2Vu z55U)bp*w!n;_)oXnxmQoMwKDz=(}b9|dpcu(Gfcqe_~7E3oUeiS+dQTa4+ZWqX6l3qbse=W6cHq{1%Q|AOfW|0`$QLgVR5M{#+=--9QWBXnrQJ>MU$j*^1^9 zg@EyU5Iyl6G^Yc|?ep&rFRv+hzEWGz2P*IfP}@A4D|BfRM4r5#QSzBP&jfEPRhmBHp+B4KjBiR8aI<4ZhlNc7fWgBb6V!m zH1xSfuRQ=c@+w}v_?{was2XdW%M1W>)aKt_U*7||m|g%C?f*Fz9iPUF+DGKb$0+LV zJhmRdLynx~ZF^{F#87yzW|n*IF8my51o(CH{8aZ(aV%QNt7n~^ojqh=K+WCTZ+A3&aaL*+rwGu9);X1p#ShT5sP-^?PD9= z4;Bu&ake(q=K<>+3F%3epBXgsRy33HERytUZAoaE*?*Chgk)uHo_&3QY7qX-evU`v6{slGHzr}8f0d!Z@dCA;2Mm&7*h?x@GT`Rl=swKnkTo%8CZ(9>)9 zTs*Odia>P8khkmxx&C*+W0!quk-(9vl9b2t`&`ArnBFvi5Za-GC^7k-wJF{}7kA}~ zcVs>wEZVXXKhq(Ij)QJP2)>c-9)$D2f2_iA-(wEE{0d()Lp2uQ&Ql;mL6k6iyaGh6 zBajx~$#M&&x$v)%-y#iswyF-%egz7X04`~PmavgCTT&`g3F9-YUu$|?N)sU~ngZ9l&zKftK%caW>J zwBj@A^V$KLYIAfV&Suy+fw_*+@3UQ(|A3so4-kllADiYS8CYW=bGn4FeGKm*YOTVtPxEabpgiBI-$VvDf||YXY#_ZaKoKQjI9oba%<{XmH(v$P?)vY z7%Q%*udnCj`Yu+8I}f{yS5JY&+ysu7{8@P52)R3!Er)}=)*9(;2R>X`8>hYUED#g~ z#so=>F@AdhC~kj>z`*Izj-wovS57O2Q?nI7WDvk7@d8l&0(t-us!wW3d=3m1^pgSg zac$@+rHPdY<9y?ij5^0(JPYtw&!S%ky72UB0V;7}OaJtauu^#@So9nPh=MVqZ6{dq zoVkQ)wHC+ugtyX3;mZvS z0$_67AhgI+=AQ{XK8tYlr8~S-%a*O<+%@!7^zH^$7LLFzLvvjxE*=U`n()2))%uQL z_!x-s1v}?xXokCdK@D2@+)y$&9hfA3t_TtPsyYuV|E9A8%GJ+I$;3~V2#~y79@{e$ zwz!>`2iug`ZDF9AZGuigg*A;q$(JPw3Ks@toh8Z5m=?A6q$MCAbi7~4@po?u>PDc; z@xbhrqSWg{%_s9SqAgi5#S_j}h0}Ye>b&Ywz84;4A4c8Ayt=K}U46!NO3g*bMOb<8 z;TlCxyF>dQy+QO>msHo?y;aIK)Ih!-A)Jhyk>@c{P7 zLCgVw-3hA|wjRo9{3LAp9i!{E6Ulr$(rlR>b{0h;=37e%&OF&wFUi_c{kox`f^@*S z7X=kXo%R!rG3F?+$P*6MM|*!CH;4P9x>domxbW8)L3rc-w-{ij>UBi z?_woyEM+70Hs0)d4%s2GkT7DtLHp=${NSocw0YfSCdG#fKa<_y`J30U$M|So#L?Uy zbq5n^&x44y`O91K@9pr-5W!=;`NsY95`n)sgZ}(imABs9% zVf(-J#s2Z-x8A)DL>)#)o!4z zF|)j4)MG1}xT1$JtT@X*q9H%?OXqsS2!CCR^ND1kwiaSD$+qE$zwlS(b(a>G)SCBS zYzlYEoebAP#OSsyhiXdd3#Vxe%iLeW2NIxZJWmWB|BY1vUY?(=7~u1LU#7p|4@i&M z>**AWxilU{iMt++JRq^e@({1@z7Wk9H8v1WoZ3vPz_}8)EhusiDAjHLb}Htiw8+O& zGto*Ee(sIFl6FL62}<_;Zvz2iCUAAF%&(yb24dd*^(~^^Ld7~sy9W4hRL?yFR`j(A z5}=!44=9C341KovKxG=mJ*TCnW&*q{(qC$6O@oS$9oQXB;5(s)+8P>Wg__IT5`=T& zfM8EIn}Y<&Kn;je3xBy*29u+YB66@378^EAq4Dr~4es_n$3^^C4?xfvK?#Wc{B{$Z z8-v-wVCt^hZ+KWm+#Ya9Eyi{7yBq@KZ!C6y78mc z`XRiGM&BJDgbT;7D==xIR-aJS%A}>KIi=OSM~K$R7XyEe>Oom@KL3uj{B(y3%l@9@ zmt7Pt;i({K+D=CINDsleWYw7F)D55*)IJZ)Zgt)(-=qJjy9JGvwT%ew<{ZVwDDSpt z52T51ff{}Vy0x*K+@~o|Y<7_1P~VLfcXZv6E#IU2IN+IhG7HL$a#|}o@N)wcC?9d1nN39-@V1ptO|9x znOLaVwTI1IQW~z3BF3ww3l6`0c|y+n>LbnABhKBcCZ8jBYtOaZgiSQlTG^W8kd_Dm z8YPa?Am^H;eR%U|xi?|DFNwzb`6Vd___#Z$mwy5ioK zwfv&5Odv?@+q$~kxtf77z@72n?e*OvVJDi5F;GKoLH6JV-E7Lpv+Z~)oP?WayhA@h z|6O?hrk&_5=ZR#TR#nxN}64|-=PkCU?iyf)*dMi zDi#!c`kFy8Z3?&ntzHJq*1NUo$%4&4MW>n)xip@qGHaYl956+{@th4-G3-0HI&5!W zqf}0m1a>dG;Q+*vWUW=j7%m(j5cS8Ob?GQzB0-j)ZC^F2NxItyqTEn<4BcFA={XaD*UH-Oo%xOsmaHVQ8#j0b_}W)3j?7G{jb^Vs>7Sx1@ynA)5WRK)P2B zN;qFK6eocb(H1%^J-P%WdXKQ%l#{rxoQm3je@TVq#V%X<7@dR>@Grsgh6t+}HA+o> zAY`!{%#zU|$oK94P_T-nEA>@A+wS4TeDUwska>~h`;1edd6WaZCR$j0?mogqb_ZcF znROD8L^kaYhY@o)G@8I+f;t|#{-_j0Wodw)-+o0Hd;O0*WqT@7w&WW`no_8S7<&3j z$)JJ7xZ*+VE{4+Fu6D0SPc{^QQ;&o&$dL`mK%-`apADAJHNd>lXTua)SX}I;COsi7 znG>Dj=+G?xcuPge>@wLs`5dJzv_>y{x|%(Ej>Gg;e}yFXd03hr$(u1U0mAsH^X=!^ z;Gqvhc?lXe0k((m-E~mLno#lIBk%#nQO?g9Pj4zS6kSRlgwbIcTU=Go^Xb2G^{9il_a#9f$&foBd0~Q>A0JsRIn#)k=Sw4AWWN4Z*E+ zCI8YSR0(jW@K12kFL1w{+qys&cd_8`)p1aR-Q)7^n7yT?N&uV{@#-)oVn>_XHJpuH zN3+T`vbcE5wzqnE8h5EZRW{WcC8t> zz0?KN#6m9tYQEu!Mz+FpALL!NS989oetYnumVsubz@`6~j@9H$ol8YI>(ULOI?#ct z*PH*A^)StV_Y+#}vQ^eawOs=QWOdle@ktVoVQ4Zje4QbfcpNmpSc+&rlD+Z0E9>c1 zuKH9jk!{3ApLST=(-a5di~@bP@vZa6 zmQPhqbWio|tXmn2%hkNO*IH;E!qHw!T5_ujB;wnktl_|P{pxVB7qme#iaK1tyJYcw z=dpK>(DZ0M8@pdwCWzVO1(IhQ&n8-zJ@4dfZ!g)UfTYa7xMQNV`_O8HjEb?L}lyf=7tf`K#;_nq`sZsI^vNUdJ&D~#B%o;vC^Oz{US5o@ZYpV*Cooda~}x8RImRbOq8z5TlAz&sDT zz6JNu?X#Mh7a5lIQtXzl?$@;+7IY8ci;*l65=?EwzvtTxuAhK2ZXT}4q7?&8gYls2 z=mx8n?oDN9*;R^dUbfK#J56k}*i5-4U{&ClAmi1Q?R^r81 z6X5h8F!*5h6SOtRS$+&rKbqRJi@X*?D3|eZ_jkOW!=z`9S`!6*c5w|9{Luea+m9WtM&=38RB7J2Hv1iwu4l3_rypjVDVGd*_ji-nQ6k^ zFzb4-Z&2_|rsBRoX3tlrpBE7nz?cqC~VTV?+HOQX!baSfK_{%H>w&s8l(%Mvxqrkt-Ztohw{~ z^Cr?Qz~__wIf98NzB2L&45@wrA#etW@ojaupl-9TAI4Q>IOUSjaU1c>BD$eckIf2) zgnd*!ge`tRCWw#o6}wjEBSF0t0d0R!4eEgn70noO-F5Yz)Q+GA0_^Fs=tVA%7un4@ zk-?VSX*}+m+8&17SmSeeH+Po7cG?e`hp(u8e?P5|`}MfBfs3fgOAB@ZA|5BI1(?Zc zq0z;YLo#uv-vr-)%x@a4IuQot19VusO}^5fVuhYd+-(G|ah+npJ62yW!A?4-^q4vL zYX)5lDE~g+j=)e@$3pIcz>E$~Wky39@2O<@f%6xNZ&>;mxChjrt3tSL(mv0)v(&zs z0*@Vb71E+|ta#^Wd*g>I_Q$@G`IiG%=PG0C&meOV{8La?xoYxfIMIArof%23E+c3t zx`&}UKkA6C6N(LSTP(WLiGgH{2{EJocdIa?qO++HWflK~!c%Z;9s3>Y_I*%SSP_%x-7xGwZP zz*}u=irqb3-AL^6*v#Y37+sXe!n)rlJi_<*wKkHZ7_WJyi;=G% z=#r*Dn(1o_s>op*rHe&+H4YKWp=M#L(*>aPe)>gN_VKuxeZkJs1$)Eh!j#J?%ap_^ zOfDa0*~}Ixmi-e$vjYPOaf03=JRv@0j>YP93}>j&u{|o?U&~2%e;35sLn?cc z=a>^PFd~pA=wQ?D4(ZDuqrf?H&3S1QwnZ+lLSx2ps?i2rvDrr@l_0grI!h{B{hK?F z1IwtljH_2mH2O92y5^Hh@~N8r__AfKlm|pGf&sd=$l+Q)1B@hUVDG zthXKqWSLoV_Xr)lExU7{bcZu?X+kE_*gW_b$Wmv_`);~)qQawUS3t+2`xrYi{2b(E zn`5?U9PtF|J(hvvhvvjOcp{hCOg-TRrL{%)zy$NO5Z1sGSH)CWgto(C9$WQ9TYoTG z@l<2kK@z*mVQXI$^L3aQjRh*FVp~HoBTjpgsW(0r-R0!ZPtBgSY+i}NSe`^{(awxM z5hj<;qdt5t^>5;_eh{_yAqMLps*GeqPk!SteEwIf@6f!pO*9u9v0fwB4 za3=|+a^D8Clv8{sMQ-9QR9)=n`(O8a>xCn+gD6H{+EHy>uAmQ_MCl;Zmt`zF`8mI}Cnn9G&H^LgKSsxEDVmII`!ag*V3gWJh*gr#6@IRaPjYuD**1-tCYVfz^7 zjgA_6aIp5h=Ufk=X8pERiW1P%pCa*j02ObruF&3z(<(Khx41!J&Q58s7mL?9PZfgyn~P8{#R!rxJj$2c^)rqM#b@`?$(@%%c{ip zkF@4R?jP_2rQLX*Y=nOpClq4#o%DhQs|ljXK&mK+6(#SlfAaf?At-!+9#+Bm?o}k6 zD*qttHdp7%OW&hc-a5W{20vVvq-*Lv|A=vkjAN6n9e<$snmtSPOVqX_HV6WtSf}zX_Y5%T6 z;>B$ZOnEkxE>j`xP(=nwea39+05Fu2VxYd6C=}6L2J2LU5b=yfPOrXR)Z4=S#4fhdMeZ9PwB`9$aeS_y*75&Pb>IQcyPSR zimh9vy7eYZ6ElPP)5&S%(m{We`s_4KH66LXtwiXy6yDls^sKf&9f=@S03n>Gh$m$k zq+bGmfPu(vi2u$D&w?QnE-ocq*3-c#|0VYe6G|`V1gtCGAQx%sJGU_4o{zY{83*5e zcfaLPFSdz$uXF^;5-3Q-YdJp$%2;G3Zs2~_R?T?Vd6wGoD;^&{N!TxmDf|@g)&$|Z zpY0i8v+j!Vk8RcF&jF&-Rk((;5uyX>$b9_<^9HdpwaCp~3YxbD7}hD&yp2Gp0oVBG z`qk|1(ZXP_!wrr-nvt>;ejCuun_nPWe)p6m#=yO@tl&GgD`QtBxjZ<*Xc0|i1@D4A zN`&Frh?lPlgztD|*6sq4a%}*zVG*{^IVf>#sTSCA=Q|XJb<7?vUyZ{=n3v8Aji;i@ zBzgCg@!AOA9)U@MJ6@D=QEZzaVw?E;=S9y0v$}0a*SjQ4QrYxYW%G3kTE+!NEDu%( z)t%?efJD(IGzd3lt$b8YyUiUsVN+PF|HJ5*7TS@jN60Sr_2%t2q25YVbRX2=T++AJ zUyd|FmBseN8CPQ;tlv9`tCvh|#RyHb_TU|VND$dD;roDzRWT>2QDbgC>}MA{>y&5D zD^OgiY^|JR-5!K<;?YyZ{HJVO4_i(y>^p?!Irv26BO^0(`9MY4N>c z&~&XVBGly%dHpNNcjW-O?lnH~yN@rJwjM?*K%$1IPJ>JscjSd_bk0!?1fK~iaW=I5_~xt%*TLJa5LPk zKqZ!;XXHmT9XZlQ9(gNxK_YW8&)GV-*IGp1&X29yF{d$)>u_(m`KRhuI93R^OjG`> zg~$NOn=Z1!;_?4}PyZr74kx0Ui(4rIW z;5}P%kaC}lXpMz42as%0+a^^m_TlLmnM8al|G*H}YKr13ZswAQ$njcblg;j$@U` zY&<$OqFL}F+k%2i_LYJV=P6l4_BJM*TPUUUlj=*6w+lT)rT-jC%+BGXitH7i!V~W_ zeWy8dE|}mu&bNmD5lS^rN(jem7YX1TMyU9wqenQMQz3MniwiUGX~h3bQbfQv_% zDK5Wo?Cg)`BCfDK>VpS#fx@DnwBqS6i(p>_Q%U!+5GHchQ+vj&?4i`PCQ#sX?yhbu z!DMpXtT($ZWaIj)5fOHO6Kc7@6vl+hZGq%6Rb!;fv3KPr*j6=ny6?CEm1tey2xup{ z&jX3nt-aPq>+s1+oPb4ovmnm2OYr91JCRrCNO6Ot5ATzh*z~2Iu{+*>hR4q(WIG{! zS4;8ox1sbitA!soe5X2vwQE&+E-AJDr3JW`)ak+X#=?qnesPkLtjaXV<<9bb_LG1> zBKRAuUTgwfcZHKhN^VS~$<$+o*w67q@NC~72+1H9#<9R;EU9G_YjZ>pa}ODB@m*JtN!TJtl(C;5t;ucD^A`#m^4Ri<=4$~KuW;mzBX z(E~ddx=re^vq9JQSaMEV)XOj#*}eDGuOB~#37DUY|9QrwdP?*XzxkonRaLz z*4dTn?`BZ2oF$>*g&C|a;)#(`|AOLD-VHRRQnm>9S%3qg(&qP2VKI7Th@3BtGZq%r zqKlZo|hzC!z9e*ZUJP}InzWD+{P)=cNn zw;?q+RP77WB?qGC^%SRCD`uP3IS56eyij*MIpv-wi$7N>=pWv_M=1~|C9LnTIB&X+ zjy&AHOq6M9Yhe+>NjZjzy5iWxlIXfiPv9`g`cj#;`Jp>fZ+)hvUnh0osQ#kq3Kg$}B39*g^M@)?-ziqRpkI zFqNDpMN@T>?z_9p%u|$$Oe=Ss;0Yt*rxtS_fc4l(gx9Gac$IrapQW;YoMAei;>ir} z^PdfLzy6fHBr3b{+bt8WO5V;9>-`9|*TsAew08Up5F+H}xB43{R*rS|(3?T$D2WVapd3w5b7ou20%OL=AsA+`)}YmACu9ekD$KCcrK zUeXO>6XsD*NZ(!lq>S6k_?Qgi=fiFtc<5D63=~&=UgIl~bI?fXfzL;J<2dj<4U;&(~0a}`y83nbv z`Y-hY1m^5LZ{(e zY0Fs!46Nk>#TN>Mne+)l9i$%qcOh@T;5eoCHeHf&sQ$dOIQ}4>#2EMeybiS@m)bR9T!2P}F%#n1EOWMbfGf&V?s; z7dVO%+y-rg2PYllR2J7L)F@d(D3LbnsE_NX` zcDJ{-dxY@eSG}Z#Uk%%?5_&!hkMD4dZ}?7HHHSl!ttrxE)1(C-(!%l$#(k69nxDiB zm$itANJbjO*nR&o4lQq+yw`pr;ypw8_P&`Pg)l&n*Og8jFrMmn)`ugK+P{twc=SEX zb5t->G_XTxvoA8Ph=*H1@2gDVw(|AmlX#f@bNNt=g|5Ubeed#-dLyn3QK2&${!*$o z4|^;#(x5Mm`d#}j=fK^_pQME=GR%elS90Z9r| zQ%Yi!BtH7AhxCG>dC{fTMFP8iAgT|rn)*t#91T+G7mM?p#eGar&sY6!hmyTEK20hh zpto8KL~T2&IJcc7r|H!e783WBi>X{Se{VaP)I?bL73dc2#Ek2XmOsdxxj-<$h>iG2 zB^E3?u~ivydDqnjdKM7nmzb`ao0cfy7djtlVQi_?!h6`F`>HhxF0F5GM<5f+kGpTF z5~(}_>9YY>rrfJzS?bG>k8bxxvWT#Y?%|z1XMinI{*ZV~Y?dL9A;xGoNkoa^h8#dy z*4XFqn7DX(l#BdhRd> zRtss$H@@+pP2Q3#2CBKTB(rjisUHguQtMDPC-En^5MpzN6saH02p6Iv9*SCp@*zT1L@$$);(JJly7MNcTZFrqMvBZnqkCyNsw0YAB+Pl$ zD5l4iWQ{*eujBvrZMOQC6+dfP!dor~dCD8gG|Co9e^#Bx})eLwvN4~MR-$}9KiedTD{ zyr$gx^Si0W(H)pb>m^&=1HOlF zQmr!0^srZOfnec-3cc^z-=yD|7Pxhp6wk4ZpNXwz@9UDoVfBv1$lO-TnNiL%(51XBa zaUp7|s{F{VQYpSPm4X;@-j~)rw?bGn#=6T(L&#(?xF90fiW#J;N#VyRy6l}SI`gg+ zVg{bAiN_W~6{0D(HSRFhks&1*yvmkO!)rH&L>6Hc9NEZ>V~)8Xcyo-Zh2;HcIlkH%PKwdLnn`MC2KF-2Z$m0n>3dh$ zW_8=@(j{Up747pK$#p^7*uykYRu3*XF1_~+N`ykfWKsP0#|=x`>d+>^dx(cxvhBDl z^1_Kyt&HiHe0m0b%SWKfkwb}OO?*^t%$ioN!3A%trt$W7@zk_xj>c{C2(rJCIi@qx z3f0cg$I}&!@scajpE$AobnD$%-+1kQ&C7Wh7q9R+iVG&}m$ZKrCv~+x+~)NyB=%g~ z4R??ZuDyDIO?G*tO7Yly<^}r}v@RkTtGE=zH%sY|M#cG7-9m2Olo6%?Wm=xGM>}hUXHJ6W6aD^T_+1I5CA2fKK3j(7xH-IV?_{ zKf`6#3CZV%^-11ULckY}=jqmEhF@-aYpgKO?-V{-9o>1`IKKpOSPHsEJc5}_-joCsR zr{DQ6JXTQe8DNf&D7U#4@Ac|_kPUo;Wx_eBvv~JLV{oc4>$=R8EG_*alA@)S+S_)q@EX9 z3r9htIo1@#({B;cznTU;#gk66_s0=DZWkm~iHm`4{BMx>I&ZFam5J z*7j|nf*>K?AV_x(jf9AlSaf%%gS03qB@HrwG$@_YN=gkSF?0`IL+A6I>$>*+?7i>% zz3zRye?73Uss&&o(=!eB zArU(#MxNoCPhty{x0z2BCL_vq*WNWTfw$IM1#A4U%M$f1Bk+@|L7-tP*TQqHeenh5 zZ9o2cCA+YL)ieAN{MM6g<#_W{|81}v)#{3(XlTnkhQGcFEWg!3xM&PmA#XZ5k6Dy1 zX_j$pqknXMdJ?VJG3n$@wkJU}|BGR{eP1jI%5`QzR6E^D)$4E#4YR-&HD?azeN*af z0t&Q=?5S@?PE~A^9yA45ytGKZ3AT@{`W`5eJ6R-kkRy}No)9`UyHlKee(inGTyurH ztn1TDb%$h4J32r?W$Afw4O8c?)JF2q3Z;vR+J5a0nQVJ|(s-iR%+FduyPsgXXVpGD zlta_DF{g4`?z9;=8Vwe=10WJG45QbW9mRcVZvbS&g%Dx`D1`kUa#2^D4`P z(kkOwM>mCBLH5G*vMvhIS2eyC6Hckcj*X5-nFaPgRKxSv4+a}X%tqLIohyp2BB~r) zdBc6T_Xcc6*4undd)%>*>%0Cm2{6SV>7n~#7%e^Y_59&dG9u|k-pBnru-U9dG)>PvV;ZGj+s3=1JnMW#P=Z;z9K^d0HOIzD2Z_)<}k-3_w@cEn@{G0#$iY2Nyu zdQfaV`6%|`RkQoD?gM42P=*@Od&FX$_X1GLG?z)ON6+KxWMnGODrPZ3*MO(Ub;@GB zwK8EQA)LY8Yuo{q?O?)`$JU|QT_|!32of=HeI>RRRuxN2560x0O7U|)%8-1BCVBGb zVt#zl_X=X+1S`G0=?Ngc6wM-=R3_#eoO7_M`wHq2;X563rgtCq9h1*dncR6O#u{3R zz5raS-^`uIs7dl>2oc#7BANo}i$p@>OYf_eK)#-o`{mng>^F~9{u*Pd02&v130tT0 z(E153YX2D!QMW}jWE^CG62}8m`VBJ=DcsdI8i`o7#+<2mlwBH_dYb(11zP2y5xway z>|%W(YaP3`*(J_I@Q^)!ms=McS1F5_tM0K6)ZRixFp)6%a1;6{SW$I8q`WgTCGC&o-q|Y564y@4iG0B^8JU1E~|gjw9pgg)?fUO*z3ZM3~jSYQl`Wn7&#eLWw>VDHLrz@Ish z+(n)XqrS*+{;^20RTRjk!W|c^#C!+1c;T5%tr-ey#L2~AzbfLcfgFKk|7sJgCKC_PbI$Hx>PSUsc}$ zU2T&XLdd7V9n$ttwqva9XC_7QH*XZ{H*bE#%~0%zu;fh;UvDWtCL!LH%;Db&rOVE@ zK9Pvi!}3AC&WBnf6EgN1YGF`Vhq|$`9E;gr)Xt$Mj9(6@J{F%)FlD3-aqSl(QQ5`y zp9$tzSbc_OenA1L5C-E9Qh>`1v3TT*ZgmJdvLt(UB~E+FVvo$DWn_DK=AqrD>fG|k zh3QdNp}%z`dyKL;Tgq?BqXALNGkoyk!}t zdvd?D14%iDg+QbfpWMpVMIj>dEyWOs_#9bhrK4g=>zgu|-gcAXQ6)7TJH}v6sXLpR zt9sWl{Xj6hF{+*m9KD4>;G+!iw^kFq2 z>k~~4oH^RB@JDMR!}&Mv(|}f7vAs~ia4*i$gB-_&XOrWKT-z!PS#G5^cfm4!D)!Pd z{U9#S$+nd(_t|DZfzq+pL9@s}E~ZZ3>FrHn+^Vo!1VdUk!zfJx;Yw{=_tokgda`}m z^cE&Kec0mwaFZE7oJreO3^w9HIAajznEF@hI^%?CSpS)G%_@CK@n{KMjPloFnu94J zBP3f!_9rvQS1STgmY9cMvt0_en~H1>r)$pAR{b3vyqPWrz9M};l`^`z&cWIsGO2vu z4GFLw6~dYgK5;RTz>vy`&%}F7J2ATSAV;hnHaOe79QHB+$nu$6KQI#T`_xSam4XEe zz&MjxWC+a_t;eHk*AwhpyIKA5Sy+*_x7{@-7b9;yfGhV3U^Re=@RaJeFvl&~nq4m_ zV|h1=H4X-rXRw=3QTq7ByHNfC{Ixwn_<>PB88QE!cLZKbvSKT4T2edXXj+o+o3)p9 zV5rnM#tSf|M3DCjvSliR(%1R0a!z<~B~q1$MHq27Q&{D6b6g22KIwTUbuq-e+{2Ax zdm-D^hE#`BM zl9IPunP+lM$Y>=lCjt{P!ubsn(!0gaKtx`}usW_AfGW`o7X2BJ;g(ZHdxx$mG}$G& z0rF%Vumwqu=f^+jHi6Wvr7^X{57Ia=U6Sd4_>ij)g8UR90M&PdUBjLW(6(8&(fvF$ z2F$E1x%O=z(!HQD}w*Q{BIu>IyF+4aLAeMwMItM)^%d!5?7ZvGIqXO#`F3|R2i1^a_r_c8& zyl;EoqNFbqF{g7bUx)E^LPGVrCPRrScey7#UO>2lBR0#tGp{5-3_)RYcVNG&{X3S$ z9a;*B7r_@hJ@d+9aF9m$lw+E3wd*6=*`3nIhklKME-+GfX0ic9l;E-EbBwqh2*!h_ z$9d8<@!MIAH80=4;aa`h@jf5|S>C`5i;*9d9{e>5M9u}{BQ~n zcSg6ChM5eT{#Ar6!$NjT2{)5$duf)#lyo4~A5{-m>5*f#pSQxdKL*+quS@liM2tDc zTmIKXuBkr68n0O-gD+KswhI7mqCXzG!A^d*SR61$n9d+DdA(H(ut52N! zuehvCOAljTjHKzLxsqsc^{ujuRuIp@93wdD2gn~(L|3aXY{&Lu5i*e(%l(!q9zm;| zecVtwG9JjqMtPrhJ+`@&X=p{uAtPr-Z#5+;fh6lgyVYtxXpI*oZ_Ro+5RZU z>wJYF>SXt0x6P3j-GTDgf+9iBoVN29wv@HbGi+i;$ZCQ;G>3SvXeY9u*m$es4i%H8 zKybOttz>~UA24;dn(NR?9_RxG?OHzh?7ML!M!ETa%}k3V#FH`NgY(|&V3wJ4<~~S6 zNuVkj=U~V%a{e4%JV^Jaw#B@F2;Md>p=wZsWV2}7fZ(Mt?%lIk8ET!pO;2Z~OQGWV zoh9ut=0z6YtF_Cx-E_RVRI4L8nZ=cXOg+8@D)o<`fbj1^Cjvff1gU4H3S~SP(A}1e zna2+#o!}!7PBBYMi&~GVdVtxo^WnRbDP`oO?VJC4OR2rHpK;| zvtG>GN7=kNTvZMn2~LFK1n!8*W{(QDbG#u13DbsR zHLBLp-n_eNY9by->}`uD#RzcJ09}q9BO~_K>{aJp3vNyW?GEBbQ#0;NHu>n?gq;T3 z+1+1jApMtZExh|N=Onss;ES1J4y*V4AnJSGsz&Q0W>rGei_gTZpBH)=$m6k9gRGUe zgwHn1irc?W7K{<=zqRxLwlLS7h64RRbhZKgS?>ab!fvBY8$x%O@!F#$TZ(Zov^lOC>FnYyCPxT$#U|P z`%1c#?%f5V_G-*(jxTae${*IJ>MFlGN?Gy zlW}8#VOmA=2t6ZjoRhYE3=DJT3qX4O!s8>D!FfV2H)c!~TYO@|inhz)LNUR}AZKxx z?@zQ{ZI_3Bh<|hreqptb(*?3;Elb9(yAdos+m2ZwBi9F?B%zQK?E#NeO(tLB{-HsE ztpYTt*g4}4eIva|fYs9Vf5^cK^U$3-h^k!4)RHosCei->L+MOWjKbottIo39Nu2ox z*23O*cY>(rmXVqei=qgWy=Qelfy7MSORGi2Sci0Q&#h5x3S3C7vjoU>8R7h#6tD{O zW9h=xJPl*CX!;aX>=OIxRO3`O;_=T;&Y0}dX(F2IGW()y^17`wt$gjh1NWXsCuhj6>u)X|PPoy(8SjyN)1tMwIhs zn$W^gzy^kfg**mkAmk>GigJDzyftpsFb)Q$S}pYt&_!tP{|NnwgB`0}@Rk%C5ldVTS+(qRkgEXA z&_dmXj)uMSlGD+s^tjtNWV5$xAmrje2Z^A@KIN!-5jor4N)t*bmbAlr-R!lAuYAr)Myc;eAYpzyuipGQWkd?LP{o?2PFCZWpzRx;RwP`-iNr97d> zy>gWFgLo?hYkZulLF%lDupyslAKy!+na`mXR^Pw0Ke#coOf6;kA!FW>B1U)bhPu;A ze|iLK-LV!69rp=k#I-EyKJ5aKZ%;2xTpxRpI(BQ8*%-nnFHeubymoU_z+$I4bbWO@ z@w}Oo-PDgMt+wSX5q~h!u)<_NJ(gh{2l{XmkOGS8nW;r)+X%LD9Vn!H>XUWVJFxoN z7>Sj%f3s@L)qnD8!}=N2_WpVuhNghbwJZrbgA*|`f&8f_-#ED+qjNjv87I?p75)0R zr8<^=w>G)N+$;&b&N|MzUO|}cV!i#PaF|KN54EViNPXEpJcyI@3$cDqsU2n*qt*~n zC#1_^c>ZLfFY%p&^xKnW(#F|#aa{j69Ej2bGuq{|>|GTQj~ zfK3q=a6^2-?16L?7gU9S{G*eUI_*lXbhPTtSy{ZJJ%&hk&V4SISe* zk`OEAlR5b_${}3rJyW>Ti<*j-B>@_)s>U4NK1Gv_C3d`n_m^>vaaBZqkwTMw#N;s@ zg*yF3^nqv2zaXi+%m*Lktubsblijb+z+6*Z#^4R~vF*=IU zq3Fwdp@iWdH`BUzeSB4|i;~4MK-+MtT$;wpxnOuL$>U&Ix{rjNd`sz(r$H`vQId&+ zr1OSP3uHVv*5=%EqnKPCaRTk zHIH+-WMm!WfHJM|Db`hQ&v0U{*~HHLjC}G>uTUq9^;hSSf)6gI0JI_ZQAyDnCo7Q` z#fkQY2cZ?mYls>sN`2fdL2ff>@%p3}vbcVD$!n%^B*aWNH`xQq4;n{n4yeO3Rl?6e z1#o|K@wl?eF>=B7fa&J_Zij>B$imUsCheuJWf|Q`6>ypjg&=E({NUH3cw$cQTXbV8 zZgSO2;kZZH$Vw;jGU+J>CU(+wZVMRhC=_G`! zj7ui%A0O|Ssv=-`9plk$KS6lLhx#1~lI6se-3BUxXHVx~d@6~|Yw6rGin>})_L0tJ zCTV@!IIi4H=X;Nh#67q(Zrk0BVZ80EI6XC&;dG2Mes8e1L3uHT1la75s1dxL4-2p) zu}LIbVuPWmBHq%8Ys1V$M^o05vdURDGx6lo2&&H{L%boKcZ-cQ_>4|vlx(6yH6*7~ zomO)}hs14q3>(Ec*ewk4wgzG7@upK9-wCkUNx~t(ZC9jeJoz1>JX*%`I?j8RP8T^>fdD+A9r0lTV zf%u_AdPas+h428(cD8*|%_>Qr@I4yUL=+SVhT@IOSN+(c@mIB5_Y%s>+}Qk%&_-Ivo{S!7pTrP;z%)ZQFO zUqxykJspm5x>#_@1|-Ws6H=?A+y^jD#8is=Oo8mqEC*?VhE;fSS2{IU?yh6$AG(o@ z`oBZPJgm`vhV^C1p@{td$2G8UFu|W^QjcNz)!?DSQ z>6^=|wzS-9M!any-9Hnd`oa{_lPuq3Jr@q^0mYeFm6aN_69JfEo zbHgIXji1J10~AN1fg%c8p`(gGGhM3s2D)FuXgm_#I*2dO8FP>#eX4t~1g6%;lV9dIFA>@A+(<)tUFk5%aS}y*?>c<9 zH3I5DCc}k3NI%V@I`1I4_<~zLM8feD@S)YbtJ0>u@zvr%J2Eipt_Rmf%g27s3x=Lv zhOK~!vBvXf4w_>*jl7x*o-E%sc#MU)j8YIG`fLj+u#+~^8{B%nkMYEs5DkHr3(P4T znq|p6wO`;rZWl|hQOR(=i9568&nuojlNeGJXpF?-57ox0z;A=_hnz3!K5BL-Z4scI zgISc3`2~sg?bl(Pc!HbD#!?u+3ahZS+4ZfjWV47e0hWkbydTR|JGxKV3j?>61nM5$ zSC8i-r$vWH{@p~`bY6T)>D4lROrGzC&(Q$RTMd{aF1PqzKCPVa5Bh695Gne8I+o{> z+SX1HZZVOVDqeR8edX*)bP-yQW}+4GP47RINH2JCwEFFsWDR>$g~_4_3?6hgdF>4+ za6-EWC1>;1E;25>!3gJMkv2*4Y%CEx%pz;xk9|EH-|`M>+(GT;IwLP)yqn|`A{4xH zpecflOuco1Rkx%iogLAyP@dQJ9?Q<7>e=tMyFzUhdQKo!FpG-iWej}`iIUF@U~Gu- z@s|uP#ilu~pojPkHZ2e-O!c*CKB3>v=MVFClr-)T7Aqf{!Fp%c%tq@X z$7HUztpzWGuilP89XQOsG{5}+>O6Ioi>{@N6Jt3;o^@-~+6&>~xOR^{~KP+KBa2lrYSEiF$w(i7h^(`Y<%=EX{)Xm8^{ZhmEl zN?4{AX&~zYb;dEl#SMbQDtx3K2iK{N_CcH=TRTVC=o7s4Ym4+K!S=&TNSUp=@ZH|g z5-%cc1NX;5bCXA&lIP-P@s+{fcNs6(;9EUsEDMq!Dc;0YO1GzT5{EyWfiinsWGCpa zEl<@%%v@abga+@mlKDB|p>DL3?ii=a1s;HL*-?og`tw(}-bS4@iImu2A z+G9sm(+n#e1SNz^!oA|7|Kttz!!iAlu1lUw24b@5eXK8TNdDH$Z`ny$MY3!CGp@$$ z$u$dgAy-4Ww4Y8@43u>_POj~K7`z$TRG-Uv6=wJAJ|QrpzYUpGA=i%f7=8dZF)~)q z#X2ed$k?xq@diF|HXqNOoMRcfVx&a#b%(yWE-AbVCV&XfP6osz6nJ4)kk5(Bz2W!jI6cNIQwyp!1(OK$f`}VB}t$l-Q~>`XLvEPSq39O`;EH92vZmZx_P32JagE zM*G5-o#+nAoBGT2ec?{VQ-SO)jL@lH3S62`q7wvV1M(4;iyDRRl&HefGMDEimlhEs9JtP-w{&F80 z8i3pU-C6RxGKThNX)xD&zr`egUPXlMfeu+qylUMv^FOg}`gbvBCp!ly{9BeR`DIR_ zrW1fBJ&7wBW`f<-MxM-|d`@-r*`~}K|05M0nGX9F5YR*V{m=&*5ie@U7h>1 zHY@T;G#abBl~?*gRpjA1@0Y?j)dpdy8n#2siHDbAxW94S*7KofWOOe}DKlP}Vr@bvVrY5)CXN%}8-6!J_pA{tPVfN!%;Or_VXW7ZB?BuJ$1Lihpc@0 zPykHs?PEFt(i%ab*e~{iu|HdhRBZ1T!xSN)y!liTu$HN;s{`~=?t!02#6K8L(kJ-R z5R3asrv5C=XP2GKX&h;C><_6wf>|2zS?Fy>a$IUyQt%h9e_m2(K%F1s4S*c^Qra>` ziJC&AKLGel{*lcB20lCpk2dv~SZ=)Tcs^7w51RDHOG!^Wpqs0=TS|D&{?`X=_gT8h z=fbupkyi*{fJmbo03xq_{(9;ddPEsj0TZ-&oqYNDVWS-(WcJ-n+fhBY%10k=BLG=+ z8G4UHr>X})qpg5pPz8WqG>;VNO;kxe&;K`+A&ba$ZrJGXa80l^dbn~Tg~R3y1LEQV z&=XDr7-&8p;GwvrSBT^$Vwx4$ap=`nZ2IOk{(&?TMYFr8d4>);|M?X7`>!cM{Z_;3 z?*V@Q{N0s)(39Y{vN75b`X4f;-l1QC{GWfu-+%r8=M`cL|4?rZ^gP>_pZ$5FYStv& z@q06@2T-KdV`6_{w|*^H)xP}C0C3V6<9L2$AhY^oI8Br@-nDm=%rFTHn>iehk$19D5$kqB$C?FRoU-fM{~SvR$* zcScp9vm|+P#%28G$iavF-c*sZovZS|F6*NsFkD-(O*kr`U+x@AZTs_AF)}V`UYXu;V;Ou^9SIP#f?bK=DX{cY5+Kh6taq*6WnO=AMs zdYIXa7WF>Ks;wR00;;%U7B-3yJDrQ?WZ=tv_D+r4ZB8B1<>vJ77iBL!^_iUgKBLW_u`5n*Ck>A?U3B} z5ovTs5RFG(IN))Hl%@fL;YWRn3pqbO+?n9^JyBxl%Ve6H1XvG>Y~{Yc-#nK0Zrq3W za!f?H@R<+g+LypXrR<^=vPs|wD@lj_)vBrqCavzrOCRN{R+}80=_kvR{86_4`=03- z?Er0$gtsK34+!E0}FVul&ucs>UdwAW{RW9nV}?{U6+qGkMCk3 zHz6(uR)2Rg^~2F*IxjsHH=SX(XEC-q0NOgzZ`F|Zs?@&l0Cw2N)Px@A0Q-9Dl7#eY z3L2UV=1sd~RkpenAjPRyes7Xbp104pCM{9+`jqc}{zv=CRquACgOtfDCFI!ncw?1q zUBf-6DZn9PngI2i)XHCfVqb}#%mRn1GJx&ZI&7i6><7LPDL2xhXYA4)FG0y+0$_n- zcCY*ESy(tSQSunRvn%Ulvd=vM1f{%~ldKI;O@<~YLHdHU&nrO zN2ZO|7uAJ&cF9tE*x&N{yl4Qn7*_s>bXjrM#^CI83IL*VdQ>^Fz?$|4l@1qZuONLd z6PBF;C&-DDbdJj6quAE>7Vj~%i29f0BF zgva_lRTfEl13>=Q{dMS72&A12TS;K>VF#)mRiIQ=*FTF*!cn4O;5`gZ70I*N4|sbj zs_@Ym4Yaue!C)$CsQ`@4>llbhH40KfvhK-cISTA#-WsAH=Ne1ygSVKgtU2hEwjE zn^fH3aZqLwA<_=m!B%KcpZn8_JJU13C1`=_?FOKx6x|KWRnsrjC*o{?Av;^$%3b6!;ahf-Y#Wt*Y7SLS=*m99fFtMe~}$- z#RIa#G|5+U_gsQfob(#cqb*g#6d}9MgjZ<(1#|R+uSEc4dpPB0Faf}Tg&7&m=&)@D zVA)<=l^im`&;a7Y547h$tgVHphVW$o%p}Fc;49CZzTr|zZkkW6p6h^o)l$5UP`9w$ z3_z)fsf*{@o&#{6U@MXl4Mke;H}868xv2ulJx@a)FxlMRtWmdah~i>{T8<4=<#V%p z=}9dhc8>!Wk*zhK-|+ymFM~Mq;F=RZSXRX&`dd~i3q6Pe3BIe()gKn-+9AF~gUt5@m7^}Q82|!A!;~kMlB)umPXHKg z9g2^}C<%F=x|-zjx;FySRNZJJ2+FyrozP}32!OttQiHsv+efL0N9JLCxP8yLDV$bn zTI7alSryIKlqm!VtuxMA!Ln<;ygX_W3%UtSX>r+ZID$6yCi1ofFFrFcn88pOZ+1^V zdD?mnT2DyeS9^{g!w)8m?T|PeYx#qLw1OkY`hyV+c!?c||83CV_Z&S^oKE?-BgIUI zbyv*c3B4jacdDv9x7&S##HLy-3Ja%xFNdAzFQkpp&m4u=@HMJ7yK~i~+c-ab_e<%C zQ>(emGf$H{r)UB_sOv+EBH31IEBsMAOF))_d9UltIQv?I3EA!0b6e=%{jPI><#ee# zlx@+P`}(bj4|?$+uRK)54m-dF;|!n}JF+_{ac^%xF2PvwcIykxlV=x~6c{f4E@6%v zx{=@43PJ4U-2t`$^70ZiadZIu&_b)4Rd=(Q}mJR3MS1y zi)@ci4p<22BmRPfJtT%poz07YQL}}1w?pr}>erRFKILW7=;_RhlHKh%_5@KQDG)(% zo5iht@4MWM^tDBEtSGKef{h!F@#>?9E>K5)Bbe*ou{r!Bn3z~wt(x@ zJKa}w@CQgG1y#q&tvC`N;L=>~yY0E2lH49nX+g-OY%r{A{uEb!EW`qWV6(`wIyx)^gj3d?*Qd zGx>Y+x+nxeFQPZQ;_v~?Wkk5{JJ#rCzzD?Nzw@zaTeSa}@!O#06K}2%RTu12( zSjqs|yzsy+8Ci_&q1;Fi!+0KoO)n)RBF9E&DsplJBI{bd7*jhfhyq5(z_qBPPn+Ed z+>sYOY3GZ~Le7g%NaNF<9nRHkqaVSdO=6%gh{~Z0;kyd&@$;{D5Q3nVS5W=v?|<_O z0rZJB4=@_(1E>=ViXU&mq^6M-bWcY)Tg34>wI_wO)me( z*(-Wo{<=X#N@{1tLVfl(tur6mW@aSK(FS6Ot9IpqTWY1$P*Tb-f2zodq|YRA&md_c zE;(Y6VlfgRyV#;yRvw`cgA+tyt*1mzId^kzogWKu62bdG@aqX6`N!kvEtUS3Q3W zT?Qtn16xOyt$v_kRc0^FgsiCX)HnQ8l{O2k9F;=7qu$L33lf{B zeLL&-*iV8hTmjxLMSccZ+t8mpMkb$X;Dul&32C0+%ra(0n%VpXD~YEDe#s zu{$;PLe86`p#`XkU;>7XK_%`tqlyr6i_ z3AC&L!F!}Xzw1J5A_C>a5Rv@2aykU#2q{96f~zYSic zF-8c%UBrq7QaVA2GXwzbbi}8Cb(B4^Z2=I0{l`UH+p1OJ2EO%(x&$0*lkVG**5{s^ z$!c1g$yadA#)q(Pr@8WmU?o>?`yAD&uA~S%=$CgqD4=!zMXxGtP--l%U2L}pJEVi5 z9--ft*tRDiDTj+em2Pl!%Z3ueiN7|m&c@>mUqP)n~I znab+Ny}!l&o`3(>D*fmFZLP*EPMCshi3VqijrY|Xz49YC+BE_5XvAWWwh+Ky$-BeB zBhp}(XnKehD+56mSixcKnCW`KD}Chs{)P%YpkMtekr->P*lpa3S*OA>3LT)RK({R# zMB1=F5^E}UfjHS>eX6ed|DJJg{Ii*R#Q!|wN~Xa{?*?<37DoCA3kZzyc2Jr8dC)0w z)wBXP89beG^Y97pCg|pP`?}D$B|{xJE2o+OB2ftJ?aPr3a-fbn;7k|*)^$}?)oueC z@39FY=CF$h2XL7K%c_o=8KSQeZ6EU${vO{R3j=X5=Dcn5$zET0Nt+n$2!{!nxhTwt z@%H#70xlUze&*G8cL%g#5cB*dKvCt6#kTo`mt)-8mTl zgop)&7&zYSMhdjteFuPYV&*@V%476CoKl!;{UTlS3M9gV0CC(C#ZV?$@&kJiAC6|} zOn?=TqS;e31(Zpx^54MYlnZ*Ylu*~ifWd&tOx`!2q&avpdCSLMzZ%q=&7r_hx7M?$ zW|;!u&^yYeeaDP~YVvT#fbpFjFqUfiJS9usj=1LM1)N2pz`#(TZW#($NV|*?U zg8HZv-hmk;WR38YYm8Il1?URg{QW}h%?YI-G!u^s(tiPRz>)cM?0-4`{+rW7SFm&) zA$+~=pls=;o5TCJh$>HV8G+ZOMbotnN47CDbq!bVUlnOCUdF5ZHLNHx3I=?W#Tnj! zMvHj6x@t~x=uY5~Kmk9TXS?1MP=%*{zqUO&Y2TjD2%mY|T-$_F9+?L^7yARf{y$?6<6iuF@=p->!#u04s#Kjt|>Z?N$; z!ehN~6CC+fI`%aW(-@ar?ZBXuST5pGxCH2dJ}ghWC^cAEp6 zno^q;L%OCn9Ae48@2`*cUF5$6ueYoQ>|tA71Ea2gf70xpdP_Os?`7W#Hndz(yvERg20p#>h7L0fyE2tUdJu+BQA2lgs7=zRdj*p@e4$_iJ9rPgy@_4h*vavCyx zR7Pwb!Yt&ou*dQJfCA@rc~5xK5c49Q6(Gn`ZRdwyLopY#A7m>?GmV-@tg|zYN0Yp}>2T<}S-URz$o*JwcR|9TV6ckXlp zxjLA=RrY3mL`zRk?=zWk+N)qk_y`gT7-{qa5f`pLEvNCf) zkkPoe47x3n3Wo>d7%iWm(WVz?N7d+lUPFJ#Ou0p0G!}9rxCx~Cg=%S%ML6ZyKHzxe zQejYta9#ZpQNm9HsP20Y@=5@O8i=fN|!IWLgnL)(ZoAiR9m!9hnezP^u@gJ%-- zph=rmIxm}EOL(A z^39=__GAa9RjCF8ov&?c%7^Vv+;v_|fT83%&9*hs^?KmaS=+E)pi!1;LlaMqg=8I} zllVG}1!|he7JODU$Q%ZxsB7ND<^~YMU^WC(SPl|ER#~5@E`IguRgD4&icV5M6uI@- z)k1-HTffpeZo=w(IoV+xo4ekSyYbj~1HNd?&jc$btvVZSitZW$t_ zR(~?Wkgw|Bl>S}j5iHG4_+KUK&n>S?q2aGaIPJ|`?bZ+0zt(}#5__%z;15!Ii=k=y z`1)T3k%^Hztd;*Bb$#-a4oDIV{`5b;+~Sijy#S$i^t&g;sDXJVet~(75Az?UI~+Jz zNH&Il|AGHKqx|DvsFT1Qi5q?P|ES~6A3He7-zDxp_JG0n!$n8$L2w`M`v3Xi{ZFR? zc!j^!ivCrc{eSWm{>f9v7WY+wo=M!B&^S+bd`*q1wvl1i(1y&Ruf!u(2Oq^#bCmu* zvi!fH!Iuks;F077+9PeJ^M;HSNB>-KBRvJ z4Q(rD@ojsYfqO8HokU0eg2GKr_Eq?>TfUvM@6uiX2sj!M{J^2g?zQ^dC45^KS(yHH ze67wFrXiZq7hIRLU-)fn4H~RbpcjWiJp|)IPyZKn;J-e7SDycCeuvDeFDw0r_npL> zn}LYtsYrWg-##lm%~8A@Azxp(Uk<21WvVu>&Ak%*QT1gqr0AePI+OsIhgAR*ySk$(P%hc> zO)3E5DO#)kR#a4#VBmw`0uv$chr0M*7whZwU&sdHlsYZ6ldsl*_-+$;5wfj_Y|iBf zpt2-(SaKc4K;3);pxi2rS^~8qX(S4OMIM(suo0}#0~lV;*P~q_iZ$5*P*c!1{)f^H zUUSsAbHb*$!4~+NJSImQS=)4%tQXb6X@H{%iBgdMONbw6aF}@Ue!I0AmZyUzNMj7;3*9y^_MlR?-oDLQEvz`Vo^ty|kK4>3zeIJ>&h02~T0( zcuN5`Xy&rT#;rPOTTH0>Gb^?RHz?u?Rg-+iCnmAey%yd8AM>_b}NFTx(qk(;0ky&13&ewjEo06)UF=^Q4o$Icg1kM z6*n*U<=J`(VYtj%OB;fHz~ep>iIS zwIcT$y~pyOpiL_HoELv-F8vNlh(1*G{_%xu;@zGPNRcU-39J3-;gtrcp>F{^ERPb= zwzsMG3i?`4XgoLQSCUj8xh)!sfuY?KP~BJp1*vEd?l0z|2z}(kt1qw3<2Zw$@@WE> zp0xx~Jfzws<_50l%9nx&=u;RoRsSuo2K@Dsx|)-bAZ$#xwKVfoeuaTvHL=Z#-`#x{ zeqTM82sce&vhOYH+b;SVgbrG85EcjGDr6iI{wM(@i!Pw@a^isqW2HG21nyYX?P;6m-z{Qf@R2NoXvxT8 zcuyX71(Nko;8T#oPpxr5Qbbbx%G1TVGjWI3tH1iV1Xx8sN2`eUPPQL9G@j(_9_D}j z+V$$ino7-6*l2Q5LCn1nYnE2W9iRjyRRJZq+8J0KDOewYgerl)21x0LW34Bzb?hDr zPda`$fxZk7ejc#?qeby73s<02^>x$*RX|$HZ*;wOS;@@oU|8%^z$b-A85f_^?E9+I z@f%iwxeLGgGFZY1z-7|F2V}irjji7ey?!g~K7dbcW^K+ckc#Lke-~g}uzNX)c7YcG z3IV^T09=M$G}XLUX1Gu^NMU3_ z3llr&_xf5|`uk13TkFYq+3T{eE@>1OWsX1mo)71p;v1Az$&9PMO>f`sHdl*({OxOI zSi|#56e?cIo5N1hx2D}wJs6dP%6Zz&nsz&abc@5`aJ}})LfeH~LbkUXyuM|-yNQ+| zTghBW-rYj0b{F4Iw|dZeP}Az-Ag{or48K(bV;gN^yH;iR^M*-%;ITYdK04baU_goj z5BM`PVO<6OYG=p+MZO%#^NoUXc(jPivS}M1{H9#3NtXN*rT5M%6*b{+ab;mKBN)x0 zziJ{#$VDECInW>_zYGgNTQ4Ud;D4LiF-jsw8Y5r71Aw1c~-k zaF;(x73AVesWWo6++4>ynB9@4&Qp?&XY?NYRp+dhN;?r2Iw%;j04gH2Q5 zBUS|ei4c)}X&Z?%C<`Y&MYfD3`JLYE(S3q(ckmZmzk| z_I?15Np*1!t%$cL_~A~$yq4yBi6HB6p)QCTIT0k42>w7GVUFqB1kRFD$rm{5j)@CvSSI09iik>iJHBaVqL^4q6P*hHy>GZ(mU-IS|<<1);wbG{B_ zXh}WIFo}}gZ;Y~ZxK41=E8s(rh|`VXg7#Kcc^&fLZQV2hQa|z1TKq!@lmB7rOsQ7d9u4PziSik;VF)1 zZ?oM{#h~*H{w$9!Lt@j+v$cgtH{J`74Z`i6%vOCmkq1|33o-t#EfV5V9J^0xTjDps zj$p2L?Qt~doOyAt?JeaUbr_A~T^b1wS0*uKm~(U^aFl+@Rlzg2?!E$ z;P>Q@tSv7na<&i1<>^>&m|h2cEY1V+q)9f-&6tnyA^Z1N-u}Ernz#;~x{)tw*-uAE zb<&J2c++0et0d#c^VSH?UW7fT=x$&LdX={yMY97`x9^tF1t*qmw zp~4m7lCg~3e3qh*XC>+z=<3x3{e7qPWDU20ukX$AEH7)aAgkjf@q37yMjqJD15t08 zP85Nead;H<{gk%EUz=WvMDwt`Jzz`R`d0fygnBmbhxvO$2!r*LHrneC;cr}t?)!OB z-VH_UJp1L-?=Z@Z;R+i~x$LPl{f{GQ+W12fJ1C7bsZ^phs!R4Dt|8i1|-ARA);>C=$#gTs4 z9EKGJVrYN2WuLS40G@P-YEqzNx*Yj*iy&AD)>1g2uyO$G+1{PcTwNG!u_w21vp8+t5Dtd8 z#f;W4!V_$3lQ|HkmO0R+nFi*inMOSu7LL{GP>xlNlpEAm2N#xB7rn`TvN`GZkw(h| zM~3@bQxoDIzvzR0m6;8*p1W{@BNkj{I+w>CQlHtP4&U#SLT*W4&hMT9?KKIMuf$Pd zPB(shz*gfT_Qe>agCl++`kk!ls2?Wd46MI36?T}OG}R^(w2l=~cA8Q6WDD+T8L6Yq z361ee8;e*h+#C>?#{t?y;=X~tRVm`jvCw^2N6+~X<}AC3D!=>}1wX+w1q$5WC7rH6 ze#VJC19eZ06CiCa&RktqJGfY0fz4_0{73ZNcu&Ef^JvRzTxz53@(_L>ksr~~qOgbRKN0#<`^xRBXvE@rm~49Up8 zQ?7!3G(H6L2K5)8k6+3iQkG&WjgNQc{B~^XciYon&>`My#?%)v%xZ@Mjp_Tyk){J^ zPD!dv-VtxT8Rg{F`7nWu!|}OsBTqZos9`wa5D4IIbTfRrog@lEQ_AaUCn#jH8~Mzq zTj)kz_bY!wRm?XDHX~hiG*1SZw;bA1Q0nWjP4`%x_7&h@-7_v9NK{lpcW(ihElmqx8;|x`M|F7Gff*v~O;MYk?AgIODJwD2(M5FE7^l@CJ1Ym`j;*%v z)?08LRQE{!@cx+#bN;9mI=LR`lIo=PU@=>VXT{M$%=pc9ZpR_*?i&4|((CXr?5%JM zwHpc#!gpA3@AI9OkbZg`?(`^DSnJvtsf!(pY51;Aa>LpNamc1u#DO&kh6P!Faggwv z_wYnDRIpA+^jjS$R-J4dobj}ZY>V(yrhq;ICgRkD*^|iK4@BG0NDJk1{gRHLhUO0q z?{*)FfKE(4x6$;Yl8z|WkCjv1CDFZam6ovv_g+Yz-abnh^~$glKdYO$;3CZb0WmW$ zy2#)RJECJXZF*h|X7ly?1)DL)Xxta0QX{n+Ixdt>MQ}x;{UK`O%oXYVXY3y0>&)x7 zN1X?l{3U0{d0bCRO*&4YI-fmW(2p8T`~dlp>ZhU4#a1vE?MiF25vhzU%@-$97I7dl z?+m*KKQ)zi`55kx19;g?IzkOuHZ>2oHr+#fmO1JGk}L^DYGD8;9(&k7G$rcuxmIIP z(&+zC_SSJxw(Z)efr3hdbT`sHbPX*aAxKDvNDe8ff~0iE015~q-O}AKlyncm&>aGT z-^KGh@7im9d#(Mh{TDxVm>IA8I{P?}V<&F`2*Xwg&yG>ALw-<;CtleD?04Bjd+F8l zfgw}$7Tide^zrG6aUq0$#@hM#1lNXecR~7`%fK7j{WYMF#CHKJK3UE=8lQ-A=>vr@ zXAXmPNt?UO4>2#CI&ts#q?~+j#`F@KqSamZwF=|0QoZSm?iAZZ3fZ^KfIDH3a&!tY ztkpBscilQoc!_)TcBay14Kr+hTIB_KG69;4sX_O3SL)CkuayX)J8o3o_pJt33&Sbh zrb!>tFiuyA{A4=DEow~UXJaN{d=Y#e9=T{j=}|}q{I=Cm8-x( z^v@)Iw^m0jhyW=*a}S0~j!V93G_;p@y*V#EiUZ5uV@ow=&B>}gJiS3bXzzh)@ezfr z=`8NqwoSi!9X9iLTI_%)vwY#zlyXZljq2Ky+o{I{7vyi~3oo~^Ojm&htq{uVm}w%u zj$IjE?=_?fPvT7DddyLP^Ib8oW-pQHqjkz#R4l}p``0tQ5&Mb(k6GWtO8!6RTl(hq zmNlxD*Grp(i;5M-%?YQ}&k3ykvN~!d1#jf2F!e%Vkr5(kw2-1+>Oe>^zjd~(T@GOf z4f-p>m>aFh-;wn)0QA;yqrRtD@a?1=&L8U1L#xO%+MI<}-#M*dWFix5BK81(cc&3( zd)SJ{K0;Dhro3Vlln6&Uyr(fK{vKE@`|v=Ni{cFx{poYvmzIRz4SN7?neq1n{5ABL z7k*)8WF4NKp0!GGVXZ$nNMdOkpIO8N$-v|EADCT&jSrq+)*2^VWJ}+2kBU=>$+lGS z_j}Ix6t#YLS>2Ihy>NAxg-^eY0mvyuHePpnz@vwVE04G946x5SQRqa6eT3Y^$b+#(~J@2@0XJVC@c z_DPrJGymbptoko3K;GLw*IjSkwKCZ&eT3w3Sf{(`EKx<^p*c_VAM{lBlbs_^mGFJq zKrTvKs2XCtMi*YRorxFdNrh& zja5{RwfbgSmk3cmj*`a{{wdQilkEV$M8UUF4jA z$Xti#xyK$@X`Hp(C38Gq=^kDCxarLcl4#tSX}VUGq=CU7RtV0#-qh-O-amVgi`zCL zj`~Hd4RyXaDfLIJDVaig#|5rlc^6F>k{ZZ4a?-479@q5#!=Rz42X@p*j6Oi`#}mMK3i-KCMv58jWh@z+4-I^f1bIsA^zsgoUXjU^}9Jb(Km z#O30>WT7#{Kf3W9hO<~$sJ1+fQbRfE@LODA!8;!mrLrWy&N})Xk&l&-z}{f@K8C4H zD_t^dz@tQk=Jv{(O0o5$UWdPj3`p%d51ThhedqC@{XUmM$IXxQjJzG%7~11H!5aP= zl3jMKCo?~!GKHvOu>D%`QmM;x)Xy!q3K{*bn={yKKQOvu+8#&)TZONEghW*&j-63t z32W0rwavFbA;L*#S~EK4%!gLONIbN;5x1GsU1L2nn>tH-e5^D07DJ`Ff3=b&vmxii z7glm#d*JUw)`y8su`cksZ}AFDU6ISAV6qvRMfkujz&FQHfv>=!If61BH3H64d)dVM zd>0v*{M)yWsm+7FD#6!&3Hg4MXh}Z6pRgt`YlXkFxOx0fQ{J?!QNm=9q|b9`h930chJaVl39|N5$3QW3ZsqS_tBn+wD{=)33DFy@GBichaUxooYECcHJB+>1A^6_%cmJ=C@ zVnUhQw5euFklmHRD#8)S{RY%q;`xCpUO(9r=)mD>w>MKw9j53g2fC_@cNA=a8{=V*boT5n-V z_mRy13Uh%*%{{-=cgYUtl0!t6q}9QM^6N4?x zHp31G=oFsK6lrSKGU3Cha$V}hb<@4>q%?NdYL0x9UHgMj^sv@@yqa!tx;u_Xi-C8T zzW7~y-$fbj-M;elea4z zF&ENzx^U4QV7b*DiY;qP47l9ahkR&RILIN6iCf{HQ+SpikB7#F(LFj?N;HJRwa_u% zVxmPeIY^Jlv${Wwq@4Jrz)w5%y_c|yTlZ0^X|V8{Zqj;^YbBwzJZ%kh%mbDRzm!|C z_$al*RyF~Cd0)DcA}zToQE$7=G#>)guHUD(E4Zk5*=8rj781LAcOKruZV%5qD~fPk zqQpMlg@wX0>*ET4#zH)hczNovh;ztM+ZLr*yD)?{Tp`4f>qbu9HvDq8s@L<@az^tF zX1{9-BFDYRgT}|q!&y7|fq&u|N+FJ9D)yA^Om@YtLqAdro1s7pZc_@n7~OjPQ4l1C z%R71Q^0J`Xz`K$wB(0yjYbBkB+q6=eTW_($S=sfxdymaadRVQH6bh6xGU<&IoHKj; zcd}HZ{NIEM9CmKR<+w<&11I@xiO`hq&D37pJchMIcp+4!Zp;%2ZE>Rrp@#KeLae07 zmbGttMws?;;D&F1aaf@k^29@tOpug7zgm3cw^l`_;$0*OF1c>1h1$8%P$+V9uWaku zU6E;Le(k8OV5j&ptPlfo5>P(yY?p-F)3r`?EpP^F@a{$LtxyE*)T%Jg* z(#%w)$Cz%bhJ@SELY!z3QtZsVHg{|11XVFyLR>ofsru?dRb!U$CUmw1&?X?AN^tLV zo>I{=$)%2t?{eyHGqKK%M)I_X^l6~<_{(z1%(!D@fWrnZK0j^f8+`%BF zlmzG%c&nn0;01~Jtp&P)tF>xgwLDD3>#2gTY;|$QiOL?bqY&@hvcD2-glE&(6$*6IyyZXbTE1wP;-ffe8bglCr{gR^+_%oK6TKF;;jx!d3q8{F z&g4oMoSgqMay}@U<7%_x{YHsi(tBw0vN)!TEs4ZTQZXJ<5`i7#g!}6Epft7_)9e+L zbx>OCDItk@>NQQ=FQ>KNWhEs#EOBh9}QFO3m#eOA;q4)JV>sD`X70!T$G-> zL?6@H^3X`pz=T2=$>5f_lz~VJp%rP)5SL8_ru$tlUq~-Ah26(|7IIZAR%&!5?O`8u zWi^M|p8H&Uin}ph0^5TGldMtEN(QhjI^(xug+k6$&@D@{P3D$mLHo+lf%&N@?qd*<)#O#G8;|w5Lc;ZAyi6G?I2-pFRThlV-Je1*06$dEd5?$ zoG1;d5xGxVV>Bot^{2wfBqS`(VZ^@S%R*s+siMo~09AWx;M7)B!wm8`_3UFbi$$~7 z`1C|x@xRQ+bd4QPq40Bv?u;@sj7s6J_&9aE%y1+S;exGKYey)IaF?Ex`ar4x3poNY zanrhas5w9p#cjWw^0iKv%-28r5q9hEbhfbN`g3)j*0s_>?tZ7YhOekp}VI-M!wvH)3t(~I0jo!o@3joS}KbQWsymE zhww&1k$IeWz4=Gl>`d{+*-sob^DU8>N_^3HD*HV79h2SR#Vtd5}<-a@Egg-#eAo zVTj{;TXFVkjf{^naM4hua$C=Pa`${iBP#O7B*GgBM5|`iWaY7EaSCxxe-qzJDjm{K zdmq=2amiWD#7nFn?0reKast)s@!Cf2QJzZo+1?Nj?3y{>&M4iA zXyf-s8 z!5W%!rl>%L@t<<(*r1ShH^J12FAaGJQ0}U&Q&OqIk}JUi_mRH>m>ZK; zk_8UscH;Qgyk8(Gm~VMM52`m#Cru4Owv`R2z=OTcX4)hME(Se9TBM>P=+#y@L|}xY z@IAZ~wI9lY!E&QhWe&7{kpzL;x?J0vPhc53nS|}vn?kwilM73)0^%Oapp{?M_)gYF zcKt`_*!5A}g3D?X=g)+un!OE|H4^UDr2vIt)!am@%`NO1;`NwxL0H!-o8kCK3cn0DaT`6n9Vk+v&0@o84a`Tv=Z!m zuwa#h^oTBrE{#qu%rx@94!BnDDAeVSiGwKQbt`pqKnrKtKO0S>uY_-u?mM%k6h4L9yeTbc-&7@B#MPKt_TT2p@F zn9`d|;r}}_EG zC&tfC=+YOj>jy}^!n6g7n~vJk>3l6G{dnKjZ@Lm=oW%i&VF@Qp+)f9}(_NIJoM-pI zpDV2@kHqQv5*1QKZIO`;=`1{yzzB?taCHAyB;N=qH;wR6g5oS63L2BxHt2}+C^Z&M zD^_;rxcy^9bg{8)7GQ|^q*G2DkNR!e_Mvt}eq~mvGY-Z>R-02ELu(bwxJO8_G@j{s zdFC?GT;m-+mPwXrn@8j)M&3J?bV~* zZ)L$D+9uQwr3aB}dWkkBq$7x=gM@c2JI%>JLL{~US2u5p_D|6+r{JWiTTf$=3G=wP z(@G+X_ASY2czM^PV~bPQR$IM1NTiv3vSqE)D!^faaP%j`SOJ9FP1JsI*6Bj$rSjFsaBnobgxR6|NQ_CK0b2c3WQ#s9+fI|EAv zjxGmZak9Ehd3*UX82NNskthiC967W&ij_Yv#(dSYhuc?pJ^p$Bq*R1agn)H?-ez+C zyGaB6V>80#Z)YPC~?ltDmElcXNly_lnd0qrj7Zv`Qg|Ev?djZ9VVnw zYW7$S_5~4pztmQ^w6pZOqALH`7}c0oAE{K6raG$MzvF@2JW(1FHrjEOZ_xA;B!5l@ zinOC~rHkR1;Hq_V;Mam}Qf4wwLLE}T!LoAuyQma>ER6p1i0Zgrsbo7#aC!2vZne`Aq z==J;+7QAPAodcIx-nV~9GNG@Wtdfg>7!eDml^B-S!uK^IddC<-6oK*)sV<7?tak6F$mebe3wVg@;8XwW$*Cy7MV~ zERw-RV&FUCG`x|kZ$~v_NBq(|k1yad($<3%7d7xPO7i+ePs?&VgUet+F$~LYw>*o) z(R0%3-SWGEHzx#_hD{+yUu|pos{E$PmYCeP-!JB;y-5gczo)?s-rbygccIaHiE^@X z(9?rqQtkWR^%|+|&yO?ArkAwqwWS@N!;~mB6mHhu)h^LbD&ekMG8RNeC>?n7Bau>T z+X{h&8I+Sq$FC5nAG5Xu4SlqSOP$2V{5GE1A(_kh(N~+#|I{hM^X8cY7mP^_ERvCM zBKZcmVjEQG-iB&tDK>Go1cgUat{bB40#|Kxom7bt8G3SWzI_K$dtYhBR(LV& zpXe}_TM~H7eA_zi=2oq-VK<(BQ@G=ZG>nloh+8+ZLFjJcdvI_i`hB5NveU5{5RgR9 zZ4x>7&x$+{E&1YXW!0DHh9B%ru?KTt6iw0sxf3Y_#_O)~k`|FKq*v4do^HpvzkP6T7?pv=>&e|Q>o4cWL$)V>!gkYo{iTDg{1$w= zl13fon(uap;-kj*A>y0>p}^ttR=GN4p_2I%2iHTG!(Mn!G06u-1v9NB5%Gd478-tB z%q14FP9{+CpJ71vutm3NpteAw&)M|ePzP9V=+tUe*5WA-#yv}~n(m4|;_i6CSYCvbP-c1(!SpkmqY4HKBObDcHd==50lJdN^pHcM zi367W+fzz#bkAR+nQZPz3d0q|IsclDW&kMd1-x7FkmSyI1rkhj;bX<$EV}d?& zNAT=&wkuJg&)e?!a77-paV6NyT?t^ZgBCc6m*U;v?|VIw=KL+CQSTQY) zswm2LMrXcEz)_o0a?1Nc{&Lh>x}h#-`VNy+wzqM_8cE;b=21HKns>g-gh%E?ETKHtciZVOPFK&m_CiJn=MdvR5pa~ zD$!VE%;&gdj3=l^XRS6V+OJPO&$swSb#4w*STi=bE(jKf=WC18Y& z{(uoLZ*!c6k%pleysV)-S4DG?n!c;W)$l3AIK4&|i!*ucBBld@$pBbI}S$`f) zml(YnmqWtcbEcV)MW_& zD-ke2$$;y55=wm?y_ORY==#&qV(vSv?YxAx2ef-RAq+G%3tk1$LBioVjfvgkTQ`@> zepStq;)zoibGvzR3#g)j3oICuXq*3G_<%$q7WluR$?vwFWyiK;f(1D)9AG>Hvhpoi z5cYoigX&0dT2Ij+5}+;TAUYz9JK8(ZN2fDl9*uV2PH8Tk;8kso8DCZ{P+w4Sy>SQY zOtybtvA=U#({zm3oYyEHRq>cl+XXh^1%^qV!8Kc^LBbVK+s<``HnUYa%{i*@dacqV z&J_Ce#kztC57f3-kkki*4akKwn0LHh`fjt{A#4;0{Ul{omK^(pX*0dpMtuOpWv$vn zzQhU*sYv`zDKAGjn)Yuz7AxeOo~cG@VpFi0upJg`i+QN_a8i4@$89l5qgbO??Es-K_t#0o#C zjyvEi%{{`=AeIyH*tHu?rFGz?R~8ntrMG(a3>M$Rq!jAHtViOiPLQAJzUb?rmF^=4 zXWk%?oGTwZw|f(O-pE(w`s~8Hxf~uG{Rw8mm;DUe2u$17SHGP>N&F}+o7QPNc+=K0gLxMj1^qcv5C#JV9%t-)SBhf+Hm^M&op{Eo6 zZJx}CC%Qb(Y5qgfu;Vec7vp`rlFO}8UQpBFWPriJEPq(TiaXqC^Rrm6c}mh!h%8hR zX=GrRi=V{}SQ;J?uu>@$9!&UNq1!lcp8I0}pLdeesXW4EIWMm>A?}odILR!;Z2fh?~^0`|15WhX0z^ zt~`C-e@!xOGa{Y{AqFc(8BFaI=Az*_Wr?$U;1Vc|G>&e@*(EPeJ+uk)gP!u9e&^1y zsdoN&bq3wT>lE_XHFQZgtoHV__Z~I+$92N5R>b;EB)tHIl#HA4-+67yx2Y|5qHjEr z+B+~%LZWQ{%4~0%{G+vr_hHx>6SV9-5}hJp9Qc}pDt}6%@KAn7578-33DK@d#HU$7 zo3H)8&gw@iaRAUhFG(HfY)U zNtU;nJ5n(5=xj zIG59qmEvwXxZlk-$AJi$2ad*Ph)fjnVkJ}@@J2P9J@M$zn!-)M@m#i?0vaX3JXSN8 zs-BUUSZZYq7-usv6Z0IDqVD|iYJK~3Ep|}R#qO!4zcuDeb{?2WMOs7erSkSLi%KT+YX@v;h$opiis1SOD z-bQI~dW*Q)uuEbk5%!qScbS2;A&Vj`0TMM+qL!Vy`1n3>vwmyufOSCnX}kx%YE{5C4O=?6)X@0u5u$$i0!Rk$S#o`IXBBUneRT?q?j4Eq zUJ1l+=~mk{Mm21A=9nIl|B*5F*IBy9f=$ExJdzO0J8_xP!{TP3&_f02XF+V=Qw8>!9r_v>*JcX%4^w%FP~%8mH9 z*XY!F>$vYoBh&@;>*V3ZBT@CR;YWFbmU(Z#_ljakk=*nHQY0KXnHBR{Ey)JSJ_KfSS_>$ES z$G%r-KUlen zr_{1$HCFH|2BIelg@RULya%AJ>Ae{vYgJxe%ZJZ-%)x?dMFZO@&Pc$@L}0$ItY_|v z5EqOOH?%b#hB7h)gCYBS0H#~3L#!t&fS>>>nCf8~)aDSpEX87QHO_v5wM;-9!Ts~i z1DlL`kG);;Py!E3XUAH`x<)uAjbKPn&B&ThFp9P(9myZfz1O2@dXF(FU;-hkYn-$! z_fA7%>+#`&_g;!X4=W2B$??v-Cony0Z8l|M8>#k(Cro_OdU|?A^|tMarkNEQ7{^>M zg!iJ(p0Ev=2G~Ae*I1GBn&oAojwLRiWK}a~kQ^e0QRS(FTu|e3VCx)g;ON{yBqyJ zcZ%{{t@(G#7nL#&y=UJ01rhSWB6mZ|Vye8>22z+F&Nh|^Pv(B|j0fhr+b|>#mrboG zUdajFcRa?gnX+StXoZvT$V_d4)57=O@fF*eqwei%dq1aQ+{u=KAz9)L4G6C(6dI7r z`Y{}w@-bXCk6TayFj-N+&QC#&Y6rj9@B!8bIqNUh?D0GK=12x61)6!{qO~`rD!4I_ z?Ij8Nu3NlkU|F);Z2x%hoV4 zd?RFr@x>j={HBkLC&QN`^H;^xhi$YsGqCiZH`XjmNn=rZ#eaEZ-SVJxDmGQ`EYs}eA%N+o+Bs^SlzCOCDB zlHHyIJJBhiZHMi#R8t*1(z{(B?lOZSHbgZ<&2G&lcTHCSv=ZFC)T2D((o*rHjS7X1 zAZTcR3^(%T_j+9S;|BDBXILX-^;Ff5{qML4Cej;VB8_NlvHdM808ySWH(MUh3R79H9La#jhXrS#jdf%bZ_QLnL7f znP!;}>e`d7x%Exf+i)?;0#MDOhn-jA;mv*?bcgJZco$;T4#HlXyhdkb(AzFFftap9 z6}M3Q(7c|CMBalaOP6jZLv#)5#5 z=8TpOYZSfhfu(DN?%3x6X?6(QVh^G#jzpb zA|lyeY5VqbKg@N$8LZLJ5Ah4`80vf}0*QRb9HfGM{-)9o?1S7_k9S*pl3W@yTf3fs zpCU`Ya(6Yd>Ms7P!=JtWD+4!}_we&V(;VD0x|WuV&seI-kT8(n@#PP&nMjBC{YQnK=gFU0ovf7tx;718q6fuCestDo)kG zcl+F_gW4zr%kfa*)E9|<*^;4F^v}6{JM_cwduHrIGjE`37Yq@?nf8qjkGv;HCM2+R zG2WEp@I}7hn{wI5wQBJGG8Z(}W}DDtIu~7s8+?CFbOnyd^BcPsQ0oO^-g8hg$8t*~ zJ>!IWG$N1L)G$aM;Z8`Nnw?@giGW?2L4Cv!X|~^1P@Lf(AU5~ZopOR^-{LBj$2{m< zC>9)FQ}GxkzfJb98ddcAd z@4_LweOqgo7cV;P`TW^a^Bj8RAnPe1(v>9{DCq~073#)x!OKD2rsu%LvHEYLuLkZ;R@&)+Q~>y*iw+T$Lr2$CKp-~)2XuL+ zdDYg+2%4#>h6&6bb%qF0#EKKTw5=ma`aqNVl`wVIrE{@KvFY6oraMVeP|j1I3H&=5 zfLBj*YYgNVo$~N8DLZNSP?q7i<(c(DcXdSZhYH%M5&6?srCn6-O-kg@&&sUv|@#a&X#*1Y@Z#=PUB8)QQa}cc_%96QR%+P(jn|ca2tK9t_Sk!ZtugQ$&RZg zunmWw05P5~t{zKQf3;kR+4U&?L=q=Np67G|)LqpIF9H*B3drCj!`4y?V2sYXS&;rC<9^Ct(G6xMl zBE=jbc}2tX-HIluL-@%5$Ik&vQH9?#tAW;JD_8*xKLZ!fH0qws*(rPT3gAB9AhIU> zeB?2}(RDi*7Q!wWAkxLvbXWQ(QIBOg+CCOxBTEoTaVSk^YSJ%C{_P41{Z};+t{zFZ zh0!ETJ8UrAB=(xl!WRRD?JVdKtmu~H!K{Q5HBu8}Q4~_Rq*cbA-JW?_^^G~~RxjH~ zZ{OuWP&$032H?wTGBx*8(k@6$%S1>Du>HN|Pi@k@Rt)>(Fzco0u@Jg4uH)yXWw=8fNqE@I*f{8F0Y@e|AfSE zbxF#4L@1oDd;#oVcwy^UpLt2pe&2bK^?PIZqZL(t1V{CaRnS0{;GZgi#v zx*(7HMGT)_IQ<2W4c>afodG1Sj8+)zbVSpbCJQhXJ-sJ$F3)TVS3&2>$Sv}lH{%XL zo~gvEMuv|M<(IxrPIkNucyvOAVm`H+3C-BF_U-`<6WiK~-wdcp1{4Ki9n$K&`vD{T zwQdfUP0&a&9A1HMZNjDGb;>S}oHJtkxN|GbJh?Ftc8?2* zDRJEXIDG?9$RQvbUg;{aaB)^H;1IAHS$E+z$tIaye&&?e@E6PREzf1v6BPmc#DL?} zkwIDc+U^4S*{`I-6B7wXq*iQ^-nnhhsM}G?+ME*uQuc(x_1Z6mtb6RwRnt^@Hy@8$ z9I(gLHFh2kRV>)J+ls|Z7e01gyvQpOOYyW~C04ZfkTRwA{yRv%`I29q^drdUH=N_V+YtkgrD zpA`8i$U<6VH5f)?1MVoNM|`NsPX`734+6_jXRz$}vOScE9EPX|s$Wz_ap3}+uNWV~ z5F}sV^B#-y&`&eRBVe;ApBYkqZ5E#A80yL_^FegD^`8HugRtmGk;p7D>M!b}sYe={ z#K-Ku3X;g=K-fb=(gJ7(pLK{L1|6D49cdJa**bM!dwzH=qOP~$AkK^lv4RlDvecsv zdDhk&aYDQzpixCq7_vrVHq8}_Nl%R~I-x$HR%%WC4r)PZhJ{3duVDW+=JTDbX5(f* ztHyUf8R&?uIVYqsT$;a{^?fR8zS?md)bG@nWuV9r_D+pBWpPK&nMudDG+pl6mYPJC z<}D4}x?jm^@MM!gzA49L{v#xqrQ1o?ICkg$(0*x*cDTmzvo02+RY*V?ak-IHLoiR! zFjJqjt_dPqpE5S_K#u=*2iKIBuzwKGf+i8Ez_0sMC(v~7FI1fy!Rt7ugcQ2m2wc6c z@AB%jzFa#`x}M%KTA?cnap|*?lq%U?Y<`QC{hR~|KijyALE=htF}e9b8tln1Zp4{Q z8|z(86OUjG)3*ATg^v+pKY?hL?Zuv8!1AWC&2z9;oL;bRIhC!q-&h*lWjK9`dfHmg z8`53YUBOgwTBdH*AFuGIoU0}h|TeKDQk=(AcgW=(%5&!@P#ty_0KP=I{QUh1^gD!N&|Hk(FDYiw>x00F1foNHPURv`36 z2_PydUYDiuOl%mR(ru?q-7b}^E17mdq<{vHMs2_+VG4QXioJ@YicF^xQSV0=Tqt)$ zgaxNL*YX@m{Hox_bOlMM%dyn4u`6}?9cz~#)g=2=lRnPa-8^?MIm{m!Joe@n!!Uo; z$of=&A1tC6WC8@RK4_6$B^-(B%6|$tbhNu=q1eJ1v1=1x1j=f`6{1tTZ810TB3 z42|%%oD|+yVvMQFHW~=`i+Zi2iI4KH={NcB2qwIY=eKmLYt{DzFZt({;K%zcg_Z@L zs50^_4CbMrClFC-M6401W{{#@LS59mQ``BycA3f+eE;Z=5TmahvMpBptQbQ^!p#G9n3U+k|L8hmSH zZJRH;!0=M>Lxu8{)H_?s-ekpGxiv*!3=>UcgJ1YyVbL?B7#sBB=4*iulcJRVWZoUw zMbe`vdsaC$8i}ojOgF9&qS^{lbE5svC98O5uPE3x0<_1U$yFXixhgzi9N zUCz#udCZ@>K4hH_;l81!pa3gsYmvqgKYKk&*3bUBME}nXxw%p|e{w{l>4qhj`OAvs zPYcc3@f~H~>`l#S6ysChwxewi!XhY#Hyrk{tz|eT)I~^@7&Te|Uf)8GNGmxN_~g!V zR+aAG_w(k~8PeW@NjNP@Eh33I4Ozg-ey!4YaTW&Qo%djGZoxu)pP->Y*j4sx!GBzW z|9U0Dq)hRq0AuMYARIg{L{mGMG=A%A%J$V5e8&3*+D{#x3!f%%{<(5D&z1}WQ2wrU zrIi7RmeEFU4;RVNz67>a@M{7Z4Pd1Re&DLDf%Y)41teKackg3HOZZ-pM7iTnsS@9Ato8rLdtXU^dKG#!zT@39m#%&Q zt+PW!jhb$^pX3oA4#xsohS<)lv;E(i=QWNhVC!i0GttF^|M^h=+oK4>d4JQZ6>y+S z;Fy8R)Eykkf$f2=2Ce7%ObLViwhfDKrth%o8R!)Zgy~R1m6ZpE&c%oH@}Jm0Nf3 zstnM5%W_1&3PWz;5-P+hp8~UZG?<=VfFczf0I2aN1Zh;bo7!2}DU>z{# z{ay6F&G7D*1D}dWWH|HR%b96aC;fw3R zcHyu6mQ=x)7KmbNi;QvYozEs?!J9mHn$HIvf8Nme%(vY@iHd=LYe6|Sp6F~WHaB~& z0q%HSG_PnD@T{(1;J9y$b{@Ci5D!(3seODdug~=liB2agj5DjlQ=eY7U*q4~euzJ? z_8YDl3MtV>mneQc{)+q6wM>Xm{>=J*8_kh&-w6r(2A|KaUS~#eZQ^Mxuna8PD_>eX z5(%I0m}LBlkz$8E4bSO`JI;XzVh3VWwKnbV(WzK$C$x>xmzkjyLN}~KTQ|X>xcS=a z=xqc;T z)zBl65!L_26WXNw>xvpoDC@ZGYGr2=VMCsMBNGsmWYaUCwP$X4wsK}!!K{+~ynkS* z;eRAn!KV3(Sfyit@8jhjr^@9n{9Lk`>yKY}JZB0ASj@59=#oWqo>wkVGXHWinO%;p z$%v?s$-yDSegBcOt_K&@44D3pbRIFoZnRGx;jK#Zf)VQZ4Np|&1{m;FIxa3iQ`O<$ z9gKqQeunH}_$@Vl1Ju3ZrE~(4jA&iZ8L))6a4j2bGsQrGK9(Ija;Dap#Ysznf z|MnSwillkA7vjP-_f~v~H~+QvYrp53wfc2UZ_*vle&M0!Xqy&nYm}8%>%NY#ba;LQ z65q22e;$al(_C2ZdVJPSNVHto;I_(%A54!u|MTC|hG^;_#axBf1MW#J0YcPR`}jjcE0L=Is8v=4 zA!`!v^S^hu&oIC%JwERODAtSFgCV7lHUzwmV0DQ3wci4Ew^h@)>ow-auWL!$2)vM^ zaY`>szlG(1?i{;`oR+ej4o}+LR6joUJJ1#U1eK0+5SQDV64!+p5d^Ke%to9N>+?5gk{~(?S|C@NC#&!)=)I`lu)a=RU#Lfyc z3dzr1bfq6IGglDa{k~!Wn7DZTe!t28`V|rH1d^H_d2)M;T?nelItLJ&mIL~g-k-g3 zmSC4YKOlt&<_Gc##S)_}3OzeH9FcXJxN`9@h6o6=>Tf_pEgE;)q>{v`sjvS8jH!iK z*Zv%3{^|LVua&LMJX!%*h_VfR4mxwyYZn_mkJfnYrnr|;fX*ZFd4WzZ$dg#3BraY} zcsUXO0w@FaS;uDITuPv#!oBn6pp$qoc|Vq|q(SpO4i!b+!VS6Xjc~x{Oq|OlK>qWj zoBFNKRQKvXZnpF6{Px}ZJ)rhv0}Su^l{RDYe-UB%YHFpD-AtrNC-~mjklFb=oKY)wINs_P>q`FN_cjs!W_7&qGdHW1kb%1W4Sl17{T;X{8`^AiphN_?(ErPbPLe4*lQ%}KtV0x8b zZ>-uN*PT*9l13G!S}-2`Pel=X?inZ7teod@jR%=YfJ}CNdVvc_2m?aHnEb078s;kW z6A}`5-M3#5FkXR%%WBRhXj9_8$Ax2PQ~=eS%5x71dIYT^7mys#iUPN`7pS%~0|B$R z(Cb~mKpuLy1JrtIC9i?%dJ^C}iNpo}^+F#&WHeg*Qgj;pl4U_rHSZ#& zkOMqF*dTz^p0}*lJz`z;7@wYE~5NNpJ?y){1D=I2*x?W5iO4#xay~l>wM?XcRjCm z{emby{E$-=z5*nBX|8iQFvOP}Ik@PS;y0V!*Ybc2OjaV2LU=T%DTCi8*6_`8VAXCY z`qmBRG^aiI8FQGhJuJ2o_Y_o7P5DueDKKv$JT0a8$exMZ#O*vdAc+Uu_rb~3S2vV& zf9-7U^~y-;znvNQMMEiqR-gI95(&Td0hH!BHehcmd4DUAG zQ(8q181@4%!0gmBX*}7KMYD4u8hT`B8Hard=+p;KlW7BvRN*efzgY9Mtv^9P5DDzD z;DS{r#m@r5yP=s3795C@{%$W*+Z4wQVIP>AxBX7`y9Sr;wb&sL8%E|gI0BGqkvKO3a>^SDLyOWXoLn$j z+R){F3X(EjfZwf9s_a{M9oHfj1*N<0zTm4|1dX5V9pPDV-q8 z{zOl~qcFDOXu!LPfV#LSK;9ZCr9q;`N)RGwUnZ@ep6)F!YQGFUV&KzQ{9lyCf2GEp zmA^w=G^@Dg>O`cn>=hoyNv~7Bx@L_9KJ5_W5k8U*7q`DlOKU-gQz~@I8B33;5A} z(=?JoUFa%m$>H(GH)=?Zo6( zwif-bf9d~Me2Aom8G%xi?~Ii8`Im91XFs)M>}uov4@?MyrB5~B!1}VM53LPft zwd%3W<&~%BSgS6a-GWanch#6dwq~)+HM%kXnzv6KWQ1~`lW|!%I1=i2>r`kox$3uh zNhO7l<9)D))M7TJ**&s2;taUEHp-f@?jW|T`MLiD zYHnDr+V3F2Qr*+beQYJi_VO>85HN>zuyrvZx)F>;&UB-G)q3l2+Ox!GRO0hMj^#6< z%@7KpDZ>low}!5rCGt8vQ~9*|HUE8Gg&}j3Qi%9<2uE?uUEI=J@c!hPJ(8NBIsRSy z8(Bi?A8P%R7k-lKB^K-{EE&of+o+AL`yRstWF1`=z8)P#Od&MOt9d zDBTT$gh)xpBBVp5Q%Ydb-3Wqo2+}ONI~R?T0s?2QXV?3G&p2c6{qcNq3`No9ob#^h zzJ8-gSCTL&>+>$5WAG2P(EL&us5Zg-`F@!qY+72B(Af{@Jo`b~$ajzVfD~8JAQHmx+c{_`r}^-Q(811eFjS@WW2v##FMfdfiE2YyO1uPnaO;hcW8w)iBq{uEfKRCSHsi&@BhC-!;lenB`6e1mtHfl zQ(a&`ZQumv^#9+AXf8;8?R^A~RYa?q05$U^q36eBKzq!s?pBrxrjtDLdL&3(Ui?1(eebP!$U5tlzpZR-b}yo*Id_Y9~><0SsB5`hLuoM&|Ay!JnF8kqpq_5%wX+700F$}a(2h!2^Lkdz%t z5%)4H5r=>8H(aI{*bwoToih9n!UP%e+TVLCu;w$1`N4ct_j)==+e zQO>*UQfO;3>I>E9-i{qSqAoXJF*0t_$$R?cnbw--oC! zzaZ}e1kS?umec_#5^JH4l{vx+kVF>8sA1u~XYsRdKvEv;!<07v2(gn&!2N+Qy1 zv-h=Qi%#j4ITg~i6lwV!Ocp}p5kB6x;^=>!7D=Te@}W-%0ecLrJ}W&rfFctZDXY-# zEQ4}HDm2dn&lk>TC>FrxY+Mvq^4|xTtW^e3m!I?}9hmDM+1s9Oj77N)89tmnSuLU7kADDT50hAGP@%400nU!k{Gjjibc+&6mb|ty;CZ^_|Uq zYqOdfOA1LB3%ui;bT&6<)WGTWOIhx#u#+<49drWxK+v61&H3Ck-_R)*E=h9>tT&UY zt9dU$(!n?S= zv2WH|DF6xPLG#oFYn&dD1p#aNOkrt1$Cb&5mYX06aTZyr3hH;mPEH$EJaW5#C0n6 zj1tL@dyWsT&xS%X^dT#fU{x`V>L(%yQfXuO6zU+3w{Mjlmk29kB+iBi4FhrK7jj<7#(R2Im&-t-rBc8!f0I*U5o=D}?=Y0?gWuU&+EjO_6 zlWhyos{s3Zs_BIPZlA1j=68E(bvfO3%Z&7!L@u^rg{HgD_5F1Kl$79C9tGCl?HQkD zy6*G>ASDY|^RFOliT7)H+-BYQCyq>dT|(Dm9Ig6Ack-q_n zCCv-81@}mbH~$Bn|5qTIkjH^Vxn1`~i^CBu+sGVnFnzMB^&6g1_|%s z8W`bEsB`FD=#LjTAp9$joPl9ys>zf8)yEJ6PSFy~XqXuL9Xt5*R4$pL%sq$8&1Hr; zEL1$Lif!f$6?H3PkOKCg!{*4GI%A^*q*BT2imUVIo#KLg(9rgGoK3;$o4i7Cm7w$X!gQ(x78 z>BeQfU{JRLtG;8^C-u^51!L8n$;7H|6}kx3~X+Tj7NcU@&BM8{f{q^U zSUjgM>2|@7bdpnQ|GQaJy0j$dg#+_5c5p{r2Tut=unvt0SfV7S7xC5lmyhZH=;Hiq z&VC$&9EV+oylnd)G$Q^PUH|7WY=oFZeXW_{ys=LIfA+op>pMR}b~J=3{_7|HKmUIJ z`X&EAnld8)ftX~0G>_C78Fhr%^dhwX`!w{w2H}CHBy0w2%?dhUt|jkwXV-M1ruv(^ zZO7zt>5^w`?9Hr=^mk`}Fh{YQE9CZjEqK|d{x6U7EjAg4bL;PtEtjD(0x{cLof-=l zd&HBuN)lp-le3)A+f}a&N6|&gI?;Jc)sJJR8vlJF_%B1lT_UuzAc!Lq^O(g@7`R=v!BpdCyYH{&U(E^U)Uqp;nCtG?ENhH-*%yB+vD?4A zeh~H4!a7$`U+X@sw@JmK_?ux){5=x@*n1$_Dmf|ErH6 zFG8~A5u92nOqADNYt_+QHeQD}XKzDYe(|p@y}rK+-^sI&mtV!&5^>3kefNVntCv3$ zrW|KAs~zx+3btI1;x+Z&MofzxRmkUS_nj7$ZnSYc>`N#jlhmV4tUvYh%?1GF}r0pe$$}s(ss;|7EvRc&rU{X+X}r z`2&w@@bx749ausu0q7rj#;PrpYLXZ{7TuDON(;}@5I;6?w7a9b8;M!qU2g#x?a1z4 z7gte6YhS8I7l~Xic){~PdI81_zV_2UKH+WlK8_ij+qJD|ki{gVd3X8|z-Sa?Wb6@k zRt(!@NFjt(!#4IdF4EpTd&-oR>eEC>M2%j~bV*s6GRR~e-27zpl5*Q++{G_fw80hy z0`)P_7FS2aRMAH@%7t*~Whw1?MN!45|gW(}N@HMLUbOO!)f!mjgYKDL%jvSa! zzFtCN0}~V{-;PN?DiQYqdy4%l9UqWrf&|c0em+$4PG2SnInAZF6;U#_5t}BjYrCob z>Uz1Hz8yiW(_1Xoig)j~gx?Yqsfu`$Yb|WvUbFlHW-)KFw76>J*|zy|*byjl)481W zu1$nhlIhbbiZqgdHY1tqTL!z@w{)F#VByeklD|}%))&QhZSI#4qkTYO19**(i8(0b zE}Nu6Y!E@nw2-rDzgqn!@st4{0eZ}FAnjFdblYQL5{UGNd6pQQSM zmpJjcGYF&D;Iqgcx%>;J5UiacL@^(^yBMT9!KlZsHydbG#Kx}ASCLa2w`n7*+iRdr z>g|ntY?i1+Z>%`SdWQPpt(_D|KR1yEr>ZOtI8rd%wyi?FTsrmfq6Z(5TJ%GGZC@7n z1>k$W72DV2wS{Rwvm&Gr{qv>`m(gW|{jYG1gsWqpByTy8P<1m}$u4K>&t+M`PK%_9$jEWeH5*eFPI`22uf zw-<*M_6BZjia~t`PzGGcZmnH)9}5d{R!NB>GS!DWnE3qu6iF+hYdKWX_u$i$*O|pp zlG?ss#C`!=+a_mD*}GIw?fftpCN2`}y8Hz7>I-;Ku6#jE;R}^Qw6ag_= zsDBCHK5vPAx}*sFFEsM>w_BJ@x-KPde-k0oH1xt>3k^^L5)8^j_7~Y+U`g0Ff=CK> z1PqZ~mOK%jN!eYVrx~F37Ph>S^+IwuUi!41jwuzOE&E-U!~AbA_Bc#3i>mR=1{1Ih_%R{KQe^m zq@0Sd>kG`d=M3;h%&pSsP5EHK=*NBX63`nLGAM%rE2Msc!i3QO0&)_rck&gzl* z>O)uEaD5oG|E6SC^ThU0iM}ewu+C(uQ8w<7Y|pq$h)Z%xYVLJ0d)FnBZZZpQsY>nd z$RF=j!j-{UXi#ZtaNW_Ql<;c?)uF;4LFw~okwZ3QIdisZ1w5;h22=Q0S;y1mJtDth z8!NC)OQ+3;BDlLQ!N3&^_15WCD2dUei`I80z`P7-07rqLbI&8}xGyTdc02oC%89e?XZ~bP;!G0-n@-}P2fO6Dy)cPuO z%rENR>%8PO8uiD%?PpbIe-J$cLo<6!@X?6T4nP-X0Q=1e9N!l->%a+A?!Rh`l~oUe z-leqbkewE1l1L2FFs41wua=*rW1&vcOF93W-{ncsg?FKhM0+G{y{6}+ncMMic!izz z&7h!B&p>{wf(BN|07X{7LT3|NeDIKl>$ks?B0o?v3H(?FjSPqK{;eR0npq6|UI~Gl z9oe{WneDq@y>LNi_~kCrdVOyLuu18|ZQHxMyS=NqwH33}8+#RFi z_YwuR{kHmCnii)PZrp zZr{zP2nH7y;mq)`u1mnLr*A>=l_HT3kOT(yLBk3LU7nwXx0}KxD@X$N8EhUh_)ZOQ zwZZn(Y%Y07LZOmTmrqXSMzW>&Jc{ErIZ946K0A_M8L>JaCVuw&Kp+qczIb7u6#I@2 z^hvWz53YTg;WtgeO{C8ML2qFY)(ks&nMHS#c4-{aV)Mn(7b2|q^IDdNMBrz{=c#8L z7*$e>&ONjRkXyfl+Uc>UjjBmzxdi`-ZGlCB?N{T-H~br4v-g~MqUDc-H`5^BJ<|Na zqMr+x<$Xl!_cXSM+Pq>;qaD(hoUgOr1VREnL%EsLqwJ?6lJw!ZMC%&?i(!)8{|H8f zwTmUNCx8dyKw|mE+H4E27ViB)*}Ef$V-?-n*iuXT zSWiT^s@7)B)@0l&Hp$M#&7ZdP@O zcnGW0A!uCii=uB_lvcJ<;T9o5wdUQ-BZr}nqk9d%lkHmgvI(F$pPBMj(zuSi2v%aW z7oYv4vx|jx77RHu9MwK_l8#xPa&GjQc>7f$>Ne{!t;nLg&#~iESo~ej2Dn$YWZ;Uu7B>1f$_$@lGOp_50Ey{ zq<@r%(_zBe7pD?WkB^*x5r-I@^B%(ZYb1nwUkk+Kh-KvNTzZ zc@6X3`%A0O9!x|}2gwjvdcWRF`TQRkjHIVrn8yGZ>clq)iWTu%Wq20sx82=Z(m+i} zU#;YI`ItuXRDiio0f6~o)Ro#!SNx!@n76Bm3K;%-c{0=#>DY@#$b!tgh<7=sf3eG+ z#VcHO-IUiu#ck4S#9~HMd4$b-iEG@QM>;7Zo<}0F$3olpjI=t^N8Qs`sK^LI|1T6w z1K*&d*vSq#N(?G)oh<0{N*As*Xv=OMn^ zR9cFAO@_CEfvwQ=9=AYyigO1)&%VM+D7jBvCj+JL3?4|^&ARVtESaOeF^Tk+91_Sl zIMO%!J7rnP+sybiefX>K0SI+3&*>w60vx%rIhTFEJCUn_@BO+PI076uQMEjwYcUt( z@RCU4@5-gn*vGd_kM3nJu2YVek?;RDt^Dy3}PD(GwGfk}kyk!j3hEi&6Cy#yJ7 zHP|32QV=+6J0dvK*1Sa;wLZIibLhdcnQhcIqxY)q9p1W_Jnn4eL?`Yv1qy4HeJQ=bpl6vAJ1Rkmz#@VDp-4 z62TwbWwxB4OqUj&-{xIpz+AC0UfzGEM-t2UmRKe%ptlx_g#Yh*gDN5%2STe*5w> zlY46m9d+@AmcDbfrhX7gX82OjqPdmbeEd@59KW2nEQ)?23S}I1Wu}=mj@@^ zrK%!~1CBdw@?ula{5fB!AirB*MU zD~lV_sS+5eAy|3j?S3jD<-3EXmAgDxD+@=me>;f$vN{wap%k_8_#LfFbOBHk*x+=G z+6s*mc5K*bB{rh~L%Uj<0EbIf0F%NGYBz5%)!Sn6{iCfeQ^c@IG^#kU(ZS}Rr5%jk zN~<2~yRn9T^QP+-?$Mf?SZ71*=J$syTHS%fDJMaSzTFcnfVie=;}-~+%A=jW^!zl3 z>lBTKQY8jz&GMBw49P$SG@{q!*(hJ#QS|K4U>{==mIL|;VdS$X;ui$6<9+e0dibn> zDtyG|!&%5XbpdQC%4i=McD3|31jT=fFt6MclN!K;n_^G4#N1Z1s~Ou3M(D6yU!-O zNmxrR>IkaUI*oGpQl-rM_=gZV!d1H<`AY&PJJR4}0E?0nd08KN{UC%d;4@oL;lemY zC3mkhiR=Ps`_%RgJGTp=0HPwyULi|Jl>yW(b-QEv5m4-fNtlK+Gkq%5n9|i29qv1* z09~#uvp)RBCiLndwZ%Yeh@m751tGIhzzgg2v4swFZf$Wkn)vPrLDt)| zcZFv6zA&c7FyMre&+?t;8!#q{bNNvE%t&J-mYjdGr}0>iKM7CAc|{r$LvW# z&w})i&L$iEn1+!po>ZI#z+SZVz5v~Y@3-D$I8M>=%x`$wVXre_8o{ft2t`R*A^@3H444eqbd6w(CvC8ImfwPJ7l5MWUq)fkpZ z+1lnTZkaXJ5vYp})_5&_t$Xa%-(BIG`JCw26P~iC@4Y8g7a{&clclX6Zf~OCX%m9M z%?0OPrO8(&j}>pMe923(yal6mmC<2s9$IQ=1dnU~Zn>ZB4m`HB;ijn$JTW;n%8BN; z$x)K_MSZyYD74Kdl=DD1T!?t^nD8LW z1{EQ`mA9QS+$6Y?v(AP39f%4TvQ)M0-5nPzXAJ-=&(L~ z!3@$lPy1sg1T~ze#_|v0A=5dX2Oa;sT|ONmAYN5iL1K8}?JM)Pn&H_a=`8dr7ff9| z$oFaQCG7(il$Z~M%RgE=MAs-J3osknP!sy9));xHHd5kqyu~@3qM`RmG>A!-&F^vJ zGz9pY9rj6f(zgHoY8jf^WgXqd_q`XrjFQ}0Jbo4Dtr`k%E9kv6sxdNzO0wP$4^>J= zWyFOb^t&@LpR;zN*J52hG$%3VVyuWI2sM67@R+@-j)#pwEy3P+y*nOwo_RE)w7?dD z;JW#+HHifI`Qcxb=FwRhIUlXEg=-PmhVj>eDtDJnD75zkNVco{w8Kr?LKn1?p!Lef zPNUG7kc>`!9JLuon4t8h$HR<*kMtNM82Fs%j$0x9X^b<|`kY5{jxtA#sSo9Nr^FBv z!t_T!-o=!0gFwZSsil2>%)<(4h5EnPwu3bD`5p3YD8jIdMIy%CUPrQYUT%W+%J@l& zcF!ca)1j?u_~9jl67w}dO4M5QKDHAlFIPJ)$<_igQuq;#zRdJ35vN za=cZp*m)~CIyf2X(VA60&%gcD_{*#qGEx!%MX?XC-}Y$HE!nwwSj<&MR~BtJ4^cdx zZb>d~y5iJfEu+d2Z*Y+8l$p0rZ+ttl(7zG6xM1WvU*zv+a5`*7v32$PMsK}UF8=$G6s`IbA3H?@ACs%dDVBjum?6dKK{XxxhlXC?A8O8@Fo zPgU2+vm#+MU8=OVginH?`%aq77OaZhk%U*FOBQfq;5>Ij*RZ1Q1=cuIXF5W|g_{S!ywr2>CAFeV?u3dzE=L_9GrUe3=Kw}uD6TC!sth9MH@-YD}ONh=Mjh|A8cZS%FTb@5 zMHAd#jnevP{www(UI?p`43j*E`C!72BA=}XRR;BYfhk@gZo6$eG!2EKK?(Jjy$dQL zV5>}TESg0o70RNLDQ+b4_BR30N1Mhc^fIEaN(Oz!v1+RxvR!yzjfSu^fhaP>ysSlo z`wl5k9_mHbNyDLzvWeE8pSLZ9Ni(iiS$?KCzx*!hqNNXCt?uiTft%8M5w<_JB68ts zhamC+4@LxQb|CSr(~#8@m73m4XdV1TpWvGfXYH3~+gxOyH{ms4I-2!)1z)|QZiSn+=J)!^ zV72$*(B7jQ;2ixpL_goA&L0Tv_YEDF)mE3Ez~rNyfA^u2(ux3Xt#PiRX96iv$`cXp z03xG<1celdb6l@X1@ZILQ$2Iz*Fi=>C_=EEhR4oJ)}_ownnqL{MH;1OaFzC};zQdB zesshh)z$>B;7-b+?c@a(T+74=x=_8(s-@S{7%V(N5$? zEGqz^a7O7w)D3xetII@E#qRM>f+Y{)_S?#Dls~DM1A`_8Am~p1Nsj ztkA3^Yinp=Y6RP(b=czo$to&qKmJ~@*R16Piw71aS-=@vA?lnul;{`6Q$8nS*I|U= zc@!Pr17R4klWebI+3P<95XCUe~bXr-8NK6V5yM|O~z$Ky?g+{rA;m|9D z0LJG4pM0JrbmQFPWcdQ5nJ%QP6@jJ?5`GAQNQPydMBsda|gzbX?g%dCk(L@@!%g37sX)|w&~ zWG}$}WzVegLHcyk+vG=(kN9rt39Vn;heO;qS0%yik!WnqRCOk7nQ{BjSnm*hb(^#3 znou{vd6YF*e3>p#iWdymjZZo(TdFB8bnv&mli3~3U}xt$X_09vCK1VLQpoii3r(@v zi+;YFX)Ge|>mV2IL5GrsRYcy829ubu{e)SrG6M56Y`L zpI0|zkyapS!IA9z8OxOS(A#Xh5Z&o8EqC_n1P2zML>Sm5^Et-}>_Zu#gx{|V^C@Ie z`;2BOaU}Jk_7l}PhFkLf#GnR^Y!O3?0Iv4u(LimF_a{>Of%U0XvzE_WYg5+nkCezv zFysMJCa1k2#gA%pP{z^#QHKGmsW2R+vQ*T-$F{`Cv3?_)&8Slyfl?;VK#)iYA-^Yb zlyUKuOW6(GiC!*%*_PApLgGrpYJ&d&&Q5#85R_qOpb+4*m5&gC(-DZXD{`)h`pW`@5s zYNl>afE!Sp`qO%V4$ESqK5cAjXQ)vid^aPK+=(pq4vaR(y(eWBYI{@7!<_C_khPfj z!aAMzSR#h{4_OB&`)k1IuMzOc=-kqW>F6;o{sFDd=OQ`%ong-;z`o^TMQXdy)z`A& zXOuL9mrS;30zB2|KdjQKIC9hKVa{xqjD&Cq9x-uZqR&3Rr_~a)J|EzYZ=Ab=M>K>y z&}w}Mzdc>?8CDUS*vQX4EgL-err>L~y|;Vrx$bJdN8hOWy`Icz zt+@8yRuQ?obOO=boPtr4ld^@o$xiiG4YG@(?@c8&$uUKLZ>3}ScjeHx^ll~aoNjHB zqjuLC1t*i-&!TkW@gSL#n;bVwH-Z8a_C|}QrHx)IhWu^{p%AX>2P%PmAw3=$U%%dDohM4zwetn+8=N@Jum1O3PxZ;(z(2U3Gbkl6)G{Jqkem|R~ z?~9%P2OPVC6g}$?l3{D>Y4W+}Ut@fg<=W#3zsOtE+{RyuYcj~@$3$y|TNoRmP!!{m zIIS~!{*Fuxy{$uop_3^QyzqvrY*JUMjDJ{gtqbKF)JQ&4GP(ME*f`kkIVyH!)1r!i8O@#`7*z@^S(DmPzXum+?(Fl0Rgm&%-_h z|K;?uG5(iJ@nIq6@6ppwahsx_>pTOX^i~Zww@kCF2j4AFeSL;-%=qki7cQiA*VPrD z#2DmTVll;)=_~wQs~FgQmpM_m=Yb-BD1LZ|T(Cn^{&}`Jz`1IxdVJ_PEw~2b(El_h z9Xu|lx%FaBol15iqCQfbw}7$T6NcWH*Ao*y!|(ao%ARaeOeLN7342oSQAJst%#ohA z{f1CTeoT%4yZ1AFxOxWvg>6Rd>IsddsOLqgH9Dg@j{2;OW#hRGxVWla`onLhuxAyD zbqHf4m7m0I&qO=V6rLt36nvl|ya!v>@0~V|_t^TkV4xzhGsh6LmEpOS@@${bUa3D& z_a5wGc}l^kEerJ*ruHp-MR4NVr>4ET!Y!fG-)=W&nFxZkd=@Us{P&o`wlk$Ro;{dm zzfJe9N=fwyRKzUy<{Y&Oqu$F*?qTdI7HVbI*JZmmHedg&*y9gSBfHMtyDk-nLw9oz?1WOr1+cgdcHlHO3C(twz z;1o`6NWi}1MMwDf$BAWH8nM{nxeGm3ENJUk?*Qgpqx)iAQZnFso*Jh z9{Qf*w!z&$Q`;7?P-%@|s4y~E5v}NM*r9oODs~(eQDh3I3gD(d_Pr7Zzg&56a#76%OuaHe$upzPbRX9ou4#j`S`tA9_NgdC?ZY(bq>on7`Me;9xR?my( zJrSHbU;%CP?I5T&GZ+I>NGC|BqQRspt8nnX72C-V2;p>SQV+gjJ0W)(j0=;ab46`) ziw>fWW*K1-@>VOfs#Fn%3w^yAx$f)@6O zvcO+<_Q<;b#GR(oJ6f%gy`EM1yHK(=n-N2|!{a#N zgUk7Yx>8cv)^F(Nx>1_-h3UbLM1E33`_&qP-vdw5uDG=Q_Zv#aCP&KCCpRNx_ncow zo&}lKOoFcCQ~R6%DAfwSBt0=9nlAydI10krO4)kYKQfj0Y=am#p3!UkBBR^_1s;Dn zsT%-=ppG;l(d^uKYA-SL8OBd=hR$0J9PsP`Q`bMp_(~*pD((-)$Gv zCr4-Sf0j#>1> zP!zN3smf3x9!EdQRsv2xd$e7RK@FZdIb?4BP(zJGNr(|UpLs54X_xlwWY<=85EV5% zCqnBnWsmrHc6u*VF-pUrh)P>_1q1-^w0GS_V`c(eK6A|5P1`V#x}1BY%(|{=zL+1j zxCbAHOeUa0hHH@NiD$cLvX+`g(?_u$5CKg7o$t8aQ;@vvU_A%U6>8nz^e>X0PXY?R_(IzxY2Nj{*lNcden!e;9 z@9*vpx<y~;GEsdkpu15Uzhu}aqUh};P|P!Kzo_#dcbZBgh& zLr9kF+MgMz`5DyetSk^+gkNYDghH=viGzzgKCvhb=PDXI$`Qk_T!;$Hlnqm9a*~;!PTYf;jj;aoHe^BNajFOSn4m+j$SFVBYSthA zw5S~5V{DnNW>5M=7#cpMa1yEgEjyz*$+P($2$9wAQuuk6*h(W^O+}}y9=B~amfXa~ zsnbN+;yk5q^<=DU{<+ubw&Fv)NL?6$v)?-@jnZ^%qT03PHNF{xj+f!4#d@bL<+q9Yr~fe*M4CaciFL4RWm%A|7*oFKFnE)C6xkkun>lXq(i9O5AbvOClvg%~`P zj?59TlTtczH;0x|Yf+r5WV8Q#W1Q2pjcfRygV%)G=2X;9nQ5nJjqX@oU?XSw(mgzP z3ln})5tY+eSa~`sb8!EB0fc>DPzQcBpEMaioG!A%XdOl-?ik?%u_cQOkDUnztl<+y z0+wE0A`yiRt;f>M*K@YK=glW`n)~+)GrUUPmZ=+de_%YJ%_tYcGN5(3t=)V)DNaqD z!&gi%ZVC0Mt-H~6+YQB3i%EO9pY7$iSCre?<8Zk2=#TsB!dAhe?DL;X)ZV2h$uVVv zUGa<4Z0+yTgdH3!TU+f|WfDZpgO02NP8`k-Cf)FQiVn|cPfr4_5Jc(a58Z7-KSrX% zy(c}?C5)>=cI%CnZsFT#P8rQ%zk(m5-Q$jUu9bJxXE4rx$uVnyu_8*{=JTDC&&k2B zbjKQT{3h2jN7~i2>~VRM%EWP=ACor03e5K&_i(1QX5?jt(vBJ#gJv(Iq}(WS8Lc~t zy3n5`pOxf>CA&(~Hrn6>JB{0Od1;ZCNc2VcO5m>cVeXoM>~skx;*2A!q#4oWvH!rq%IFlj5+Td zOgs2&~#yif{1_luVhF=lfD$BRWb ze(+qZQ4nh~GLDx$0rbHj=z|~iatZk=Y#VvMSjN5$7SH|c4GByTVJ>kOi#8afcVXVK zIS~1DG;I64_s4Znopm5o!Cpb4ZvCV6$86eY3(g-TA)$V~;;)&saN-0iCW5TnbON9v zRLS2yq1ki=t|6D6Fkhlf@i@gkVdUZmRblr&Iz&)Qv|9-6=Wk`+@ki7^r&k`fe9Az`&BH2LIzlf5Q~+qr!;)N+!toLg)-h8 z+2oq9$8~xHZRr0%2J#)3+dUu74ot(CXjLI~XsL|!aV?P|oE+~`Cp=R8GkGn-=fFg9 z5{QZ2goKg}*Qwgnnxx76s|OX9#2j1aCoHOi-k`zag{eF{Wi0R9!>IMH%RF2)oF?d` zmTEP$FU)Dye8{ZuOnu*6{CF|OZ2Rz^I!oV2~oY z-V-xzS87>u4g^vBmMco2zpC$Y35PrLkZuX zPHw+~TNCxyg)%%wEh6Mfjq09Df0wc%O3P1jU-vgNSKLr zq?mUou-iTFhm>4K9J`y|BNj$QH#7;U>|HkR`tpW_09cJ_%)9}{reYl zOvU~w4(#Jet~1{nNrN?RY-5Zh+D4K#*Fv~s_|P40o}2cDFj*ig0PC{pZ$ zbzxz~hc4;Vmh=;MeqebwO*xEm)|g<0Mw0qoT8jX%+mhMvHZUv3Pck?%zX){F%y|~A zQV^Is*xsOD^KAEZtb!0J&%<@@z~4V)Jfkr6&n>j)pSKI`5fwf?7nmjd;vGMDc0FSj zqqF-3Ad<=kGrSLr)3H&4_pcxH5Yb51(>G98Pc5$dYP1Wr;ly?=SGJrRoc-z~5;Tpl zcI7lME)YWSJES-8`s5iYu~fOwSr--qb)b z^J%GeQOjYpxxffG?bmp`Oo(Lc`1_o3nghDTF%0b6BsFXUI6& z6K?u%$;_}iy=^B#2I^MTbjNw`K|hF{W${ z)M}Y|w{>aYtc~`odzSE&B9xQAH&8WnBPn(D%%(}$vy0uv?AjhaTR?wRN`nT5ZgO7b z$^@{BilZXGZ*M#%J>|-wOCGn;1_*`r%ZxOyqCO=#eoDR9;P|s?;5)OXyK0(K$(oMA zMUKis-%7HzugA(KlqCoEIT1=@ywNn4(s-nrn#&0C?0W4M0Si<(D)H^_7=P&sCCPU= zlnl46Z(e-JjZ%19)SdDH#8A!1D~e8%1>`t8kBjuz0f;P<8gUdZhSI5s)y@z(*|m*y zH$IEFfj*Qs=v>-i0tm6XtiHCCe#j4^m$AfXLb#`3^&#)B?_R*D1meLdQ1k8a^)e-> z;$LZsaB(;}$kxt1N%{P~yS`6(Bws0+rPek+qt>5X4Z1~coN~5qAy?SPb3=0Nbsv_^JMyu~IHm6PPnuCe^HoA9h zF2=K{xFpH0P)Obo7*_F!#I<|1Zj^K-P z=uO)W4S00k(nFySU26}EC$q{?kl8G#hILxRheYh_fjOHh945BFk>F}dJA+``3)rWD z&2wT2L({+PSofWpX1Zy3PxR=kF1LdBsyew+hyfkPBSUG*lyhV!bR{B!>fBi`IiCpi ztcv|nlUyQwIF+MD6UKEHP|(bt_|P+FRo#3gJeGDyZNEGjmZ;>LP1(b5CrbImhuRY8 z3riS%v`2e@PLtTc`A;X*(!ByCYKo(oeOw!ELGmjkchR|@5B}<%`qfVRWhx+N1 zruZg$=6->6&jXCZtLsKIUKKhv|CW7x{zZ~cLYo>w9)i1Jvd?U-)U{R>z7V=dcpVmT zzU1u~WxIkAfX<65tA{qdQ}C$P+Ol?`v&DM(Ps9-9k-ll87+?ZmnqiqAfpjvK=>*oKdYxYcC^#U^ z+!$#4E0>OPtusfRf2egxyE~KGB(G-uJJ^zr+CqNuU^*#D$-P7f} z+wTt#DM_!bfGUUTThQ8AYHAikw=bE9W+|%bIweti2i=<3BpRGDmr^DwOD4SPJx;G4-$NuBf+(m8B!x-JAW#Q`X{z!`*>eAz})xE#Kt}f zMyi;1-8qx!epTl;o=m<-vNcYW$ls{-M?m%ORiq~R`(w1%dJBaySOI~E(Nkb%fw6TQ zfDZf68|S~Tt~Qo7-M|myQ;oMre?gs{;^=kU$2wV}Q~Gqcvxdnc{dejL_TGJQr7eQ1 zir}FBD^rIQ!L9gr0-E>u! z3knpkxMzNQOg%eBfgUoB?*v2B+{A%Z!XoQz{s?Vo(G{>+EFv|;60OKS%CYa@#E zoGtCs`iInz;m6(&(n$|#P63!^G@?ENa*{$%lio+j;-Y8ZTfUvX2pjGsIuFZxqpD@o zNe3RQkD%&pMC9+^^TuTj%4-_l`h1G;f6-FEL6&>&2fPCKMP=59BEmz#y_d)vC3YV%^7h1A|+C62(TBOqg(l(O!M-O++ zR;E;UQ$IE7b$7mR6R@jGt#{A5+P?Bjlw$!Jo}t~b|A)1=0E_Zl+rEd84hf|@1eC6! zQ9$Vw5v4-}1O_Q-knR)&hVE8EX;6@qp+mX{X+gT)HSYc2&$IWF@AtjOeHmP@v79h-i;n}!$uk}=06HN~G{wrrMdz;5vTqOP=m~tpW7TivBQTN(%H=YmDiaqde z~;Wq=4J)}1!732;Z%l*+Q6Cd8@-^1)$U%c)J;Ivgm6!}J? z5fvs^fyz8S9>45Ea*|bS9NU7P>gn73Shr?(*+Z$uC^}i;JACV%B!|xR=4@lxvq?TM zMzniT%x{!Gk-|CnUl=i=iJCqA*y<;#hcW5bjYl8gY-e ze@A2!A~BMi7JB*2VuHlh>|yClj;k-i5hzv9icDmz1#TGgj)H|Rt%c!Xv3K{MbeWZy z;!nEVs|yiV!IGE|S4taG*QRJZgCu^Y+ssdosh$yqAttMOjTDgbvQv4UN%y#*w+fW9 z(?<1Dd>{EP*{?~&>Eym5cAVE7h?+xr{RV*9>&r&;UoG;6+BJeD7_?PwpJTcm2P zaGVNIO4WvM%#5AFUl79!(@H+r?3 zNx|za{o5O3VJyZ^ro-MolYAB>V3TC5eO%y?T`JN1!CA4vdAI=IPzshYWv+5O+9o!T zUT;<>-d$9B^(JPl0n3vVre1QqNf9~ZGJ}$e6TN)vkADL$^yWoJgRO)v1{5iU!y?a! zrik7^q81xm1*t`YYP1iT*;ReVb||?GBN`0&%&?iJXr=AC$fW2j(D@8g(&mtrb7Ko% z`-e&7{lyNHdrcc~uNmF0V2AMtew~w}Tup<#*Mgz}7X)UTu+eAoIeHPA>}a*c)!`5P z_+tL%ToWMbr}5?)=}>T+IoW`T^P}P~0V$W!ZTSe6%Y{6?wanre*~X}d|kY2du#W_5y4!K zqaUO4txb~r$kS{Yc<xRu-EXToP~ zS%JgfPkVmg?$%>NNW?;*0Vl_xskqN=Q3P3M0I)G>-i`J{=DVTdpR2L>AHsc#ECb5F&tZH7f6m19Sc}d9;g;D609ys(qh9S znzUB#Rbs(1^p3a$?m&}R+Fy@}~ncr=cAno=2uJ^ls9{=<-hk#72AGby_klBW(&_Of5 zgZbY^6<0InwQCD&M~5~FAqDj2tL6^w4@aw80ydhKf@D~^dw zAYNcr&#-$3b49<2_5nSR&7+=M=P8Yy`%(L61K<7R$N2_(F(vspY9X*zauH6>Ru1`?XyriUg-(Hjd*x@s;b@7w%Q zm&gE`O<=sEzsK*qpLpa@O?IN2QL?VM%qgMbC|+luP!nI$-yZpIUq!mna`1pn4dyJ0 zp(r?3Ybmff4(d|%;sQ%m@~gRQls9+R*2@ zFB-NE5E8s1+|Pcr+>N{gWBjKp%jLD-YwFSF5DtHZ`npf5-CK!QS$Tx{NmBwrwL?i( zGG3lqM34{Kn{e`ztp1$YOAab5w}s>xCZ%ktX0KmR0#5<;kmyeSfVn)Suxn$buKB{Dp6s9d3+mJfA;HQXiw| zfMtn6VZdr=vkY5HK2@ZtA8i!l1`+1}cqIm4ph0=NBm=en{bTc1+8XB$c~E&o3BP$~ z5vV1V(o1<10UBztLd5N#9CLt9s8KkIPYxY4pnVUphaU6ibA^B&SFR%&Phtw{!!`)G z*i`!kprzqpu^4oW^*=rvOd=?1$$Yr??_cr%&EKblut77ppisukYeDw^+XX?i zQ~&E;{oj87a)cICywftS_I~|WANv3Fa}WYN#n?{No^BV%{g)HtfBh_KX*sxIbJm^` z!Y^&D?ktObuGG6L-ZX1-C!d;O{BI{(ZuO=M-KP?l?a#W)wb=ux9gj|n6D@J$Jq11C z|JDE7-R2M0X`{nVK>^Q?u~W{!pG66af^s7)6GV@VpGr;kgf^bv({0_TzQ@P;PdoXa z_w|4MU6$JGEL{k4TUSDOW!o)hDpfaKm0`Qrp?x8~UF2ugCybGJ9 zV(n}iQzzW3J*v*B56?47$xS}1-KnH4kZx!(&UMQWef5NF&ufBv7NzeF`+lu6pu5p| zg`f7D!tda5ACnN?pAWJ~3|riJJ&XR$0@~#qV0a+UTA?-*73pV(mA>WTZaZZezE|$T z*28%-<^?g_&vWR$EQte30{m?5xTTPC0L1_Yz#PQP^2?vZXF%VIh^UJ41?RSI=J^bA z6m?FFfmYmDi+4cvit*Jxh0Ez`^2DpkcTv2S)Wpc{lV8hY_`FS7JYbSGmCz2HQF@PP z9RtmxfCGhGrsZIa&u^B)>G`WqFP3q5dk6flkFT#X#n-a}MuQ1yMt!f3eUZCG@1%QD zj)Qo;?r#HjtIc56{Sx!8;3`7^#(V-!+gD3^8tLM?fXZO>OdY!R-h6btTrIu2Up&7dyWf!XWnKCQP2Pr?F_DacI&aq?df^ecU*&>wA4ZKg}bke735;S^&VLB`8GJ z;r6uN^v#cKSg5x>6e$~lhVUJC3-kDJyx(1U`sM5FSS+3J(8Qd5|MB_a&86Rs4PL1y67zAG@HAqr(#wte2cuw`)@C%B5Pq=i;K8fc zy55+l)mQ`OS_X@_4S{Cok=|AD?c%93T@Tn_S^)mhNP4MfXf-CZs{?2l)NuSOKs7G` z^QVQWl{ry-a0XZ#nhmI3J_a6VIvmNA)4+i}H^b-5`VjEjH?Av14tM8Uzv7>uIdr@~ ztgZA`>xYX8y5cl@9zVgRf0HE=Xu7w$R9Xqnl_zDIf-k;n#z^jmdVmkU^pdK)z&CPb zkDuFA(F>Sm42uwNqhp(i#p*5yPqzZX*9KTieI2HLa(=-YzGoxUv}fSvn*7t<`l98y zS;G*xE1mi7)+6bK0dLvhvL-kLWUjUg_o-S<0SsjWAhk!;*+ufv5baIlFP@}fd_dy^ zt_&mT43nw;2VgDb;)#vqMbU_s0D@NufHUb_0=d=`-;;KRQNXvd5j?#yPwIE@5^IUz zHCQhtOme|O)`_>F$<0dGkLX+;=j0kf5coXnFT9$>5T@r&w%o*`ERD^rson^B1reF; znvtes<36H*EnO9R3eO2(9A5b_iaOuO<0qR7V0@5omIcW~Mg2;fzbLrEySe}*)YZ!f zFASvRob99vc)6K2G}f@DgO)^Xmp3zxU7T0#6<$}T$U=|chkn(d%~mw!(0Vxv;9NNX zY*D=0wc3|l3edP}AUtxKN_vLh=(%zK^I)+4D!a7PQb*VZz-2uKaF{XQw=9@{*4>(H zDH?*;;8V57{BxnUW?$v)Ui>T$a%{BXSu)kc^16vz|3`|X(gBTH~d=i1={-_pw6uBGlmCk zT@0ofRhQT%_oRoVU|^y>)Q!-5^=m&ohjoEgIs=Fb)EV2h$YcpD*$o1F1gZQEEa-!7 zk1fkS@uyfg2L!NDjNX#&Jp!Y4^w-8f7*p?ma10i~25_euS*`;iM(ykAC&laV8r>G% z^TzrCe&$x-N-$-faam>eTrP>B?Lk{E6z|~KHkHkK>$o4GdV$<&KxhM@R%Q#DH0 zGRTE^wy5-vhEj`f0!R3rfpoXz^SnAwP_U|byu~PP@UFl%yuiHpP;6`IVfpIf>jA}2 zL#8qdUR_~V5yls0pF&i|#k-Bz(qcmwW1|91&^hFDxr71bz80KRMF4nanC>#JubUzd zTBs?RP#CT_ zPYFptYNB47s2}DGDmpQi&U6Su>*rjj?Zn9#kmCRdaJ!BQ6~?xsri^{9$8H|tvZSAJ z@)wT=F^t}9wY-|d^Yodp%}oj58q@`WR4|xY-25Ezs5a07&y_TFL?&nY5wFjU`P&YY=Nh*HjC59qd7Yrn? z-}oGD{Sa^N%~6P`v0{kZ1h5ep+bz^tUwZQc#y2NfKPOBlzYf+j@Nwlzv4hC=WI>kR zpW++sUdRFY!X5lmbOcEQ6}I&pC5E|m-(w5)DS`Qt!|j>U*0Zt7-|C;u&R5 zdo%?4Ez4=J7bH`c6LU<|BPf480`i2=GiGfLPMRm9it^WZZSLi6k3Jobozc2RRgCY$ zM2Oxsy4a#47M)|8dz402Mi}&dV*>pe!zJ+YxkD0l~apY?sB3J?di_?KCA3gFW!XH+jmgnb=o~TK|1tn|k zqf>`!t)Ds2KwFEi9~^dNM4<)!UBy@N+ZN-OR@*7Qp=goH#@gcyTh6w6zxq7KC71~D z$ul%0j&bY7D(@J>^+^|dF&2Lr#*Xj09K&!En~NhgM0jAlt9la*3Ia0%Q-G;?tQ7`0fhqye^G&!#wGSfuno zD_Y}TKMOl-M_EZj`J03H=5ujD+>ZH7aE1*>&eJPG5V?g|h1ijazL%TEcYm0snlod- z=4cHDt`N^M+bc-MpV1=_`TNpCQ+@~guf-z?h_=8u@-03xO)^+D_sHkgOS@V?z*=uh z_VhQcRpKA0GfY&+|CdYdzCF z4Aby>@L8dtZD)tMS0c8zc?(frEZvYov-&O#z|@PYf87Velpj&;w6s%|ubaTOun)EU zTdj07gsp!fZmIiP?a^$k@(^0zmTAha-1v~*v8CKRYu|Xb89lY)`D&-4rP?C7S1_5_ zLq}@9oJoL|nfbEd)bp`+ee0+tpv0fj-MswV{G@35oZDWY(b~_c)9L)e@txyP81B&{ zG$d=Bq}Aj-1u55}dj(otT$#R4&McdSoKHgkqBFF zqDCw|TX!f~fbtv^f@I6gdLklO@5yQB1ZdiwQ_G;-U| z>D9-?T2``Q&|7s&r{dDI6War*5lsoi1AW@ao_m36mq8RpMNp0j*A=^6JB1bYkNyc% z5M-t-DkHEbs-a$JvbVK5lwaWrpiI zYTy#H0dRyzpA`7n+S^*M4tdkB`rh59x&O{h&M|zN*XI}h*k=dhLzFb$8wAI0>e-YA z`3zIbk^YQ?j0%L0l`$m&6K~`CYWJEs8EyW$N5e2fpT;+bcoJgTGW$QkmSye8dZdKu?y_@{FQ~Ee{mV)zMJvQqq z2V|S!Y7g6+Sd*9Xj_5?a>5kwAE4tB?g-7_oEYKV8yCmrth18;D>QjtHA=Tf;$Wv>1 zut#^Vw;ReTQH}q>MlBeXiI}ugk-3O8c5a1th)g>gk!bPT&(z`Zh6XcLB|9jWU~Jo} z#~)R19-~UmrhLmSA)$=!ATowmvS18rJ)+CkY3idJNL_1Mh}L-iHK5V&@V-m{7UA$} zNUUewa_G~=SIN}B*JR`UoCGvtlQOU3MC)1&&cmdw&r!uJ)GfRrl58{4Gw2|~!O_xP zplcX@&x{7j-c9Mh+K=V1yAii`32cgujTF zuPgYmTcgxlp!fS8#e&gqwlyllBXfrH_v5XD-a~g4rz7C@eJ9eE8#zv2e+<;2JPpgI z1sS@bkqlx<=O`pvw+nqidZobUb|Q#hgj0I=R>iNg8kLjx2{yAs0K-;c#EUr>dqsH) zjee>#iK)07-NJQWqB{-}jT*VlYXT#Q-6HFwTY@8>_CPwo{)ygYsQHDoFUS&JN?`pE zqQY*#?f4Po9eTicSM5FD{UP3tOpAL_xy%P#Ko!LO$(X`XM5W&&S?x<9VeB#TT}bu5 zSVi+XM1LdJd^b;(BM?Ds9Iov&#YWkp2#AY{T0Z8Q9<)oVJo7<(_;YHhi4EHLIW6@#WQrQO zOp)mOsDQEAj~REzcG4P)i&b3hey=73H&qzzUL>V{0E#)6RldtySpuqj8n`bF&7Nds08#o5&051Z_Fq+p6#+WQJRR^H;BUs*{E^2+Ve zEbiJ!Y5|%Fz^fz4*$2eiwX2i~x8A0#0ci&q?d$-~l2_9%pukGJ8K2_eLi&`Xujjz68 zoj3mN!(FvIf{rZ6j(r>s=@Ov>9k~s-6JqEgSWc~^oS2%V3VVs3)XRhqPdL6pR50V! z{(k_TqH)b8d6`9jU9CxnoQ|(0h4l9uI-|y2V4C9B7YDbZL$p?2#~&C%CdW@JUeXOP9n@Erjg!e-uFri&qWSS(52n8(xGP{T!;RE+A zIjDtFy^7~O$LMA)FXm;EEY>3?L?CNWWmDCiA1&n_S*jFrk%RaamLw zFpAU@r8S8Vx7R{a4K0JRrpxk$)Z@xCqO)UBaR+UXdZ$ipmK$yOMsXZw9vYU>Z_PrV z@e{(X=G3IdL?cJ{)27Etd1Kxee}MrU3(ymWiH{eB@sJ#%L61L||H5ql@IBvnb2PEV z-$}Bw1<-74)=WZ~xS*Os*k0&J%1<|c^U*Hc4@J_Gw4$nbTz_$%_A&mM^F$vMu^s>- zcX>P#-4Jw)B7a9>455Wd;FOc!8pXkyhJY>;(AD1{(UOyal0)LrVZR8_#k|qvI~2T; zhK*ZyA!Lz9k!kg&(xFK+)`jUc!x|PeL;~`o^*KFW5M+TPzQS9VFK+D;vWf_L1RV#! z5s8vpFhz>XR~LjqKcDKc1_>*tuCFi;Dd_-|Gu{VY`uf#z^b}Cs~h#A`>`< zy7*7lOG&2)E&oddC`FR_6SehHJ>_1QG1_(4sZE1O5{Y}^A7dSannO~kSFW%$U8!VG z3?seVQG6;5Fjo(k7b27I5Yg9U*x}p5nCB@DLQD0?LEGKXlZ0EutXYi<*mR3W$!Nj}a7TLN{UQLpx{0g;La~ zL_+1?J9RNunqZLoMV|+Hep665N)@YI7wP_G5%YCUvDLyoPJCj0d6ISHMd_DMf!n0Y z&)w>~o6ay15gU~XtBW~j{*nV?-T>;md9BvlX4$H9S5^`3n8GL%R`Z0;mJ%|Nm%iQT+2 zZZ_YFtzY*<3YNtULrva6rXbUUyB_6_N6xvmK_BHQUHvD=#Fa`+NeFi7{XU9HAogt48jVgAw8s%MP=Zt0rd|%~@oT`Ade0N+}y~p$~ zyi+q1o#XBqk8!+;b+M za*faV0ZwhaP3Q7m=Ei+ocDPy3QZb-y;pf@o zj{M=``s=b_h+ZH4W`}~p&cxr~ZUmepbCm9^0U=G9-^HK@Xh%0m0t4VmFM6^#7Lt&T z-yuR@7jWK0@&90lJlxTSc%>Nt6`$DVyTojzxHY&Eu!5b4e(Kc@64glnitd($#zKmg zxAZ=tgknz?X0}v@q5BU106vY2#2w6}X<4SS_Vcnm>!3z$t>5$*p?AjVEi0S5cl z#UL?osqSXTaw6|*FD{8{s76H}=e(PR<3LvID>2z~vD+ajy=MOtfi0jDoD;Jt)ES++#Z zyd~$rQ>;eJd6Ny*^&w0VevxUSuj#Vk-rAqiSU0JjQ@G{X8t3Z3x^gw*zO*;#m9UAX zn9EPdAyv{AnZA+YsiA|hMeJv{VD{+a8ZO4U6;x2;3BJOldZhtpO~v0Z*HxeZ@m6(hM^%&&t!R?^nymo|9)T34p= z1I5}fJ)`&*rp?_Y{{g2rIdSx##KIJz5TPsiIE?p7B^oPEP162Of>O2kZF^!nN##wct}bQ*s>AU2fwC%Ub|k1rBW{jjQub8>IS?!S=S%g+*E*LrZ`IqrP@<~^wb z1~G&$SD8K(+ufkNU&u*2kI;%(t2gpiK)#xSzmuP7lTt20PSXJ9+i6l5{ks-IYwHlh zl%aMZfG}1hwzCHGSraf)zZ?Pn_mY*jU>S$^y7mY)zc(+1Lq*)V-HNtpG!f}$-&XaozTB*sl9n`g?f$@Ajw%TyPKscjHAcelf9V+n6#D5@k z)Zt)@w-LZa`Lm{83nL*11DBz3JjKCvn{*;DM4g!4h~FA8w+(Q-Ee_1i(xCO-5^-em zdiPzKN~%;3HkP8ws*|w(j`FZRx~mlo&%UW;l(!|+gNZo!=bdG-8qe|CucA)iruDcM z{ld(IKH_BM@!rU!5B^gS7^Aq;12z(&la@bXIFQ@g&Oce|7doqdloneY<^ zSKLe|ZHs}%7OfpF3rc7AWCIgvtEqJer6C%r(t$lX5?%~VnYIvbUiuw+U`}f}YrEED zCi7*-5@SZ5AU8s;`x~=HXH@%W<`TTlyVnQ=%FH6N4EwO*DW!9XPZB-sVY!}5VwQY0%R~)BdX36&Q&{Ps%+pn{>;E z^WwqNeinZ7oVdCzSnl*39igvR@sdz5pQE>x%Ks(x`&=8PFUF9&+KO`E?hvu#&T#&9 zMU?Rl*1$b^A+cau4z4t;))c(FzEEb*{BA0n=*D_5s=JI9SN8_i7|L;r*&5)20RW+Y zy*w|TS3W)=DNdCmJ}KQn1dTy2+;jj>jFldxGJgM1g>->pF08R7!)gnE+6yq+_M)-QEqy^zTX-3ea7!Mu>cTKXcwp!s z5Wzn%j}Q)3?b?K%$n%dcUF#%4*j{ZgUW^Oxn#H#sIK5|*Q7LBns)}duOPpOeLS<^# z4tHA>`zy!b_yv)%E3UCqyxTzITCi})P5^D@r;KV&-__#Fekdl?xc;?eeq^|mw9b4u zm*)%V1k1`_aIwlnTGB3FPufJYWgnF^^k*w#5J|{%jc4VbyTidoWy^}Gu@%lIF|?MC zBrCY=xocA5H{*WuQ9y7Vj=-Wr-1WOH#E#g}02#kSkdt1yHXR1q2d=g6ixrNV?8P~Y0Vhc1q@ zX*Md2XAd_KH{b(2PdO6)(gJMkC;9AN(a>yss@VCU3*^cbsST|107_j`aR196eA5X8 zp|ly;MH%-V$DZTE3%nJ{<&q=8yr67Xd+M)>hTI`onZk%=0gliIvd;vS%q@HxakH57 z;^#t(REMuj>eNXsyf}*@l@eoF&8wu`*gvGaFv=(F3 z^Y*e$OV=gR+Y#uWV`Y;B5Fu{5wU& z?TOFtE%9@h-=ioYYs@8ffNR6EL>nTQVs%BYOZ2TwSLt@}BYO8dfqQFd?jcn#YWZ8$ zR=5btBIPWUE!c+{(3QWDEJ#^DslJKDqc^nz#%(4}o^zpqw7sy_-X@fhlhyE|#twTM zCIyKLD-rd6<9f0CU&DT2BHY-6=(Ws#Ybp7|qyxpNH8g}beD&x&!6LI}KIz8y1K~T7 z{WU$Xc{2SdInI1Zn|Gqw_pz!`9`k_Svr4%Zr17Qed>e=DPe3 zqEpDuV3APqwWpwVf!*Gv2wpDD%x2YfvF;Bq+@RvKK8F#x1(#i%0Wh6}n&{z$Qg!L+7?;oPO!#36Oto$$-S!%JPD z0K3~t=He3)$DY9eP&XrDey;NA43>F`#KluO8fo?~$9E!>i&M+Hyvo6P#bNVXb8&Hb zRxF1TRx0++A@M4+%9f<7nW<#%V~o}*CStiM`diy3y7Gzy3igyPKpWe`3TF)MZP=`6 zgj?6Y`~!Q^dQhaK@L2vY*i)H4`J>E0rl612GQ&4}{S6~3aX{c0G#bgi{XRnV#%EA< zgnor^H2{2`-5?DTtC*LDg3fLn2{@RDV*r-79(U2E$q7TN+Y4M%|E^ph7+|1mb9Noqoq=iFgB z=JXbjl}x#QnbJ_Ps6#7a)}Ccuu^QH6NmzKrpnwk7QK2a;;vj9~E~Xo>`e9phEL^!Z zng41Q7!TJT;8}kh(T;QH_GlI8%sDINb%%1d#!o3ty_sT?%XeH?+|cp4!v<}LgVr}} z8CiZ*;d`NDrJP{dzS0hi=JV;Ws$ze7X{pus&?Zc>oQT5Ls~In4gH;tr@WLR&$&11@`u^+poM4% z$Zxbo#=!~5A_gqOwKMVP0=X1iRQsUeeO~C??`A7okkRfA<%TSov8N`z|$5JfR6%2rh)hSM%)G`knC zD5QQE%~uWWzMqr8M3DAE%I>N>RN%3izi4T^EyAByHclE%g3r0oMUtx|3(Qi& zLt1}SY_*AbeQ!j1ZtbY*mj7KR5>Vc@{?YmXKEl z0V0G<{~$a)Olmr|UBiV*#)2TGPNnzNKe3&#>S^|Gz^fmk4fi~L8^`d~ov4t6BF-C& zMK}?&s&LU8HLvZ(O#(fZy3_C7n!1X|G3{T534NQJ+MQ;>hQ8t#T9wf7L7)({P=K+4 zWg-gVVeFxfrwZ0EML?Q|ykIZv>uPL>O*@3}D zMQ>L%!~FBs!>73w!o$s7Xh<@k5C(eJE!t-g#7I9SmT=@aMEVVp)BR~b{f3N-nqGW3 zS#fw<^kBbbNX{WpuXYV&O=^*B47-W6{Dm47Zs}bV6IrFFt)@S z`yk@)R4BCQcahYZ^4ak)snBjwT}mb7cr;-pYk zcOz8xK-Bu~-fhQP(u0iE0`uojcs);z_{`S$(ZhUkXqZu1@Se--@X;VaIBuVNX$rvJz7RZWw30E8uE+T zY*Onp78IngdN6+Of2@gdOIcz-8krZWnx6E?aT|gWdXJSWu5moyHr0}(1Pz`H%Cc#H zKUV(<0~H26c1-GfpGJl%plV%Uw=vH0Q9U^!^8l-_b~c}T5T)%65|sSiyz8xT2{06@ zhd-nN;|c%Z4+W?7xgR^^qmH^*K5T)oO^mI&d(_VxOMJKKpeEs+n!Zl$v~YqU*~Cnn zSUwy!_-&EWkH6$XV>AcA?7Qo`8y!>jRI#DSf<9W8W66?m8=ZoetOxf;%1j)?cU;JZ z{0-S&_L?P|z!m(QJ`$T@GxnKfK$=m}f@Bz-B&USIR6QXOmOf+o?-)^EmJ4op7R^nI zZ>;ZqOrya}uxc#VnWqubyY}9VY6kN>kDjcZ_3YS^o7AY$0d$$M@u!6N6(9DK3@qsG zlX)Y<&#=f1qxt)8ghjqrpo3{z7_8V0U1-wt#y(sIzd3q3t>896oBO`Vx4S7gUH8*&=6so3lFerOfI}0rPk>8(As!%0}4f2wdq4h138zZ3tJApIi2;aT~5XA zLzZkC2y*MLpZk?+0)5%DQZ>jk?QXO6P-bP?SP{I}`MF;wHOj?o`V$&@72+#UtkOMt zWVXZjqH0=+Awl+N5Oz`DgG6W9p1@apEGjZJ??S0;iWfQJ|SJP>5FmOlK%=0 zb?fTi;83-@s;K4Ng~W#rh*uW)2e~LFW=CLZI;PXe=O}WW7fFW(Hmv7FI8Ok)SbwOw ztYTQGYIQ+gRG!hwHQGXGRSoX)9nPjOA#SHAC;k5MZ!Cp%chQP zGo`)Bizl*C;%!riOB^Q#^Jgc~_m3ajbM=WCh`2*{eGc=H-Bb}|LdWLxh2&1@Srqgh z>)GNG1hx`{r_jDtDL~Y?hazeyEm1|6`xSIQvfy2g?!yRXZ7zJ(s*xg~fa-?WobInS zkgH9N_JjSQCD|i@B1)dx>m+~iVU0GGUW+W!7^mnk>`AvyfFSScRg4NmM11F;vV3i@ zUA-lop|N?B2_#rsYU_~i_(T@&%$-ykaqdz-^AfnK#9bLF(C8DsQkP)Cc2ww(K4SfB zcb-E$n~>P1ly^nm`*>;uN-y);m{6IWx@Gd~``wO{=+)Y_E9_L*$UBG<=$0g?OohjL z`lIG(QeUG6&Os}oj?}WHcGi`U=el}YJUx|;+2tI2ZX^rmLYQbo>L!ujZfzKwMkcQG@<`ucRtRWxfMz( z8`>|Y@9)GT7Fh?xpC3dJ%zI0xv>XiB&+uUO1vwGnIaq!s-php1dUa|qI_v@cW$q3h zO5G7XpZ}N@5=g5{VR- z0p7g3FyRv|HiDvU_F^1EWbhB{!&YFdJj6a?`tXw;2DIyaPymLf9Uz5=cOTbuYE#{- zo$J}bSj>~xr%hAEPyo52)^Z8gv2F6oA9gIMNqd_@hOQ|dBT8jS%kSGqbM>VaubQIWk-w@72 zn(asz;Jz`vSe6e7y2SRB=kF-TB`XiT$SYF zO0jg8PMMd$caK`0m>kHc2NVCm)w<7oHfr9rQ+xkR_f9T4_u!qlcI}w*-*|erzkZYv z`{AAV=QhC;rP~`TB$Y)`+n>cIh%N^+2Q@(3F6Q^M6l&~ zX(>pCM7&P+x)tF~n+Xl8=+2FB0*J_@1gRau^ChvYeSC4GMuud)))Q<@U-I<;B5_5T zCG@uS%mX|RK(IZevLMC6{WnIGSs63o%V%aY7VKH0awGxby9peae+NV@bJ{=(G=2uO zV(g$ttg=L6(|m1**5su#g%SD;{EOKNwQ{=6pJo+<@L zm0H}nXeaqR{w2o|HRq`+*IgJuwtSPLJq%%KT_^z|L=J)Li9J%ECXW5**w^#j7? zcxb$dA*=&}LPKR;v61*xi01%74U*6^?%rKLnk|L#Y^5@_NQLf4O`gMfN{C?`$#!we z^hcI@)}TmQj?X}XEFjY`NJ_4A;p7xs$=;L2>D5rlR z!{k*r_>B)*-z*KB4?{4xT&Z3~eyYB=o#N!I0+(PEApK}$#}#1smj4zS!kyknbK|X4 z_biF-8oGf$gr3&wLjn$%!im4?(Pp{N;ZCPlRaW}IQu46A$~<%M6VnPD8W!p88sjTqh`f#Sf)X9g zb??H>aBWS3|Ekmf*MEkCdi#MOZhSzfY9Lj(REs=X-z~ABFHbj&CD6$)T6T!`<^sHk zgZv%qgP$L(X-_~u9UeN>L9&FRKs~9T{5J|zB0iZ=M_r8BBOBp1>n0mC=%idz;j=a| zbD`WK5(o(9+G?3{0Z&ZOTU(~!*0oqNL@ zOrZ_s|0f2NiHsJcj6y3~Ol~Q1#A139z`<)tk{y<4^=oZ(SKZ$v<-HU%BBM1m{A$II zGbm~nDwS-Bn}-)jnd=|c1`!yD#ar`%0k@Vdh|%|_T?&XL z_hi$l{6%Kc${bG~$W!@=Z!*-UJ48=aHkAT@fm$9QzWVn7s4uHqCed96PL!sO|AK%T z4EqlVsC8TIw{mZm>ws6DJ!jY~DL2gd^jc!x6Y{L>`pte(MS|3h>kK#Ehi1u?joNrIoju ztJ4nLPrgXUJwCBkwwqk$wn^R-11g`U#AXwXMfq6g;~!0J?!@|Wo;RriBBduW24gRvQxc4(k0Ht=r)1iFxWg=- zc^HO4YQ?RuVkJdcZ~%Q-^%xMm?Q5;Bxy6kM<=e?Ms(7v7sf=doTG|AILlUy056#78}Z0 z=p+Mkw(^6{5~6n-E6V9&7rM1o?b938wi}~Ewph9ue^dX{an2Z$Dd(M_T->x<60R;2 zNd(9E!DBjV3FD|^puazk_3}HiUx?MZQI4)cG?V<4Li&OE#ADj)PEQ^*4E_upAie2@`h z6C5HPsKO86`zLAU>=)W*YHxF29|_`+<3mHr8)6J~(>XYdH*ZYo&Zh_mfmy}>!`@p* zRlRQSql%~?N=r9NNr=>(nMI+LE-?h)# z=X<{A?z8W{f88IAEz(Q8MpU*qrIiLB==kX332gLhp3fjMiii4Z5A(K&;W%3H? zl#51Zm>uUrxc4u1KL1|Fp4LjUAqv5X?>mJy8Oq;+)j^avTKI$kVI{}T7`?UUww9g1 z&po)C>McWtqwW9kPAki;N+3Gpj-#}9ja*4GmX@xt8~;Jy9}$5ipX;s;WJWJMf|22V zjR9-a0>f#G&o|EQckqB5!$&P47&((Hq4`m%n6ROA_4Fs}k!>e_4r~e*N=wd55dy?{ zMB2l!Jqm%ej3gtd{kM~^54mcdgpV8OMb=VknY_@dP0B!9PTfDjyG>N?FG+C35NLR} ztN3(S?8ontlhHw8zjvXQ*{-EN^h-5Q&FX#MF~f+f%7B};3-SN3m6oJn4O?KeduxusyfQ{5w%Iqz`b(qKg)X>ga59x!x%&$$5(l`7A>t zBO`Rp&l+79AE>vfOFW?ZBT zpt|@)Fc`M+_^9OPbnbPCywMYxf8MHFzSbBc9rVGUNjdw7Q(m&}BNJA}i!(WyB9U%MVCh<~tw!aniet8`Fi-BE4#oDJ)_mnebog@+Fj;n;L*vlnmc$+I z%Jc?bzk$^67d8r(;>gYw1l3ueek7kduZERF2+=Xa#fWZgz6)*$znS^xZE9j;YfkGh$YP1lO$^`E=;olJqt+^(QUzwZB$Qm z+vT`mdjfOUB=?tkz6+4<-CucSxbh&QQBCgjA~^txth?)TgG_;?M_8_k_h5bJ`>0Qk zQsTx>Ph*9?#1KX?@jV5ZWn!d<`pZz-ACkVqYt1*vP~nf;3a@ zF~RseNH`}Q2ECIc?>)O6@|2OW|DFF{hp>Ew>SUkoF{yyA-cUh2e|bL3&XT>Fl2K~B z>Q2CfwfZAryLF0M%FBX1Vz(N*UJs9MO$u#oOv$I{uP&LdJ2p{YTYMcLeAXx1g^$9X zKEd#uo8vt@eOMn8NqC(A|6gA|hM4C~V^}(n9Xe;e-&!ZIZQ|``Ati*YkK|;$v8;Th z@No&Y?%WK>s!u_326)dohS%wtV>GuZu#OE1#>seFBtk@&Dt-4tUtvnpr9Jf{K>9`f zG)p;gbSdG^A7j9xg5(5IbDLLn@;rc%URMqZ^~MVJ#(FDq{SfQn5{6Dg7GZqI(}x6f zY~h=Pl1~V@ZNb#*TjkxiB>(;%nO=BrsdlzYf2nbrb?Gq5H}8@Tq)%_#1nLS^Ve9d6 z3f{r%npU-KMy*&TqwE*?LKRe)?&}8tNbC>9rPhelTunZB`qjjpuJi{Og0@Y%X~aN> zv5WZtCh&2TexV`cZ6(bc^ui@yyME{pCdVqJQ3~X#zh_r1GDby-CSeWp`M6v1CZ3{| zpMqaeYL6|CT>N9H|M71!|8?cy7!@)D9Cmn^c~?6uwMhI0U$2T>xjiQTtg`{>T4-6e zVsz}x+IDV*+{3T&7(jI(eZ~>PLN3vo(nopc^WJ)zcb}`wRsF@`)JD^_x=bwI#~6f2 zO0|GE4J~X`cJz=7c+21`PI?}+vF+T9%Z|2wF0`fwBgHb@!|}+UeA}w(?i&{tvTDwK z>Bbb7V?#g}4Qp)H^}28%O+};)NG4iW&p0{)HG{efB=Ps5nsqHjM)WiO`&Wd|H3eSC zP$}LKm?s_}qsfyMmzaWEZUK7nXw_19ooR1QeP!RkzTU%yeP+w3{oi(JxQu z>+NsHhx2du-@i7?pMK-RB>xoQ5>xCc+JL^b|K69sUDcmH*`Gf6e_r8Fm*qbm{6DMo z9}DuQKmPqy;?=_F?XfUw@BymxEbep0-~9`3 ztYLIma_G}?BL35*{j&#i=|B{Jl>6i@@!yXpbrG%c z{i>Lg5%xDTf~RYk=w}`*YL=hc{np8BE_(22!W{0NCv0LAHVSXB?4Upa2~x9O74{N` zUL)!{pxw0MiQExHPIZwKS-4CoNX0R_N94w^&V{OMY56->7=;n(>LOh9-wM6{d!ge~ z2!Sbh2a7c36Z>0UDsTA?$sBX4lEp?-D@w1V`R&4J#~{t!x1-eSt!Ke|2oV>VQ&Fk1 z6}RU03OsPVJe}qaJH1;;u1Tx(RuD1vlexrnq8-19^l)xGzFK>k_-WlK82iia4J2lHWs|<;50@b+~pyW3$cJhNr7|5!n zaAJwNNa5$^=a+*f-*c*1bmjBF$=eTUd;6`^|J!hrxbx-DT2$3mN|rM{*T0?ny&-_Sfu2_4X-ms>ew{ ztoiI34xA6*8b`%A3-0P2Y5X2j2Jf*}7JT1wzzk;Q&Qq!qd9vwfan&YktL0~wW2eg; zKIS)q6d1k~DLe@T(?m6ac3P3g*`WeiA`mh00A5aq!*3KPfb%qATr)lGK9HYicbxP1 zt?L{(T~7jWGz%cN#c%uL1?a#WS&WzJ!7V1rZ|x=$BEt%puu*Nhg9FPCp&(tJ0=i

    TWAqQ7vG`IiVP><>61|oX0%4 zfyjxEL<_Z%c1wlNBB-t~8$4{s7%zFeHGBRTB&Dsq8tak-7QWY1Kv3k(l3t>-u9_nsu-MUO_A9QRE&efTg4d1h zqEF0i_Id(t)a zLazSw`+vzQ3X;FWtb>wN2g~|VBegzU64{zlXlBF|3G|ls_?}BZ|p|2DzRMs(|EXL3!`3J6t zYC;ztG)^m94POWq3|@1cKc0fHSFNi$*)y24xq|G0@yt?W&x^LK8@{?+98Zw8Q4`bFPb0wr(? z%X^MRnM-sf!Q@ZqCGzg85Ru`UpQucue<8=qQ2Q(~r4 zg)m%X2F8ZyVRC`Xxg=(=6P>@ei*$(yzO1+}I-?EAS@O$8%K688Vp$>_}v2-#Lyy#!ymIpEHR6b{? z`EhC4L(=y7X9vTko1q~x!>&cq{0pFmLLHLhu=q0gX9)wz$@m)ltb&`<^-W*9WiO~p zI?GQxqg@QRP9O%F6QKH1HZ>BiXKnln(jPLN4BbQwnXQRgXZhJTVOI^8aT<}-3j^9&j_bMK zXX~>-^|sG~Q|2@-C+>6*FSC!TqE3~g$9r+@O}Ium*jveNc>b_2^$g8^#)51`bT~HI zK6V$>Ubjt0nbHdi9_5(7V^U)!7L~;H54dR`55YqSjZ2>vW9N%b?J%Hjj(G=e_rfS; z3a_B^a_!YS;GMC`y9f#&0t0s#MQG@Nx7+3V<}UaIZ4GEXxn2h% z_>FojdJ~4WDGxpk0>$wRZ3DpR6BuXIw3RkbxT$#G(DQLgur)KcSBEg`e$k`frz)$-IM&SLD)v^-Q_Yu3%{ zsBWdvyN%`4h%7lb%ck|7_%8nljHMS0Z+v|m@0XHiZux{PrVA4g}ptYu4vIYw4ACLs&|~hWyU>VmesiEnGU0T?am#j zR*UL9*3{4M3}qkA-D4Q@?H%`c7BmdqYo=F^Ht=$nyUe2wqvQpn>MQt1=6s{x7Nsy- zo1dBs3lTJ4Fn`E}&*0r_?r8rL{LE(PlSdRV2srs+_y;wgd$gu0UK z;@n^>x|c;0Xp&TxDjRUx9E8|;e7;=VeLU3|33yDoSRKFq|-)8;B88#;x;9xGiFTHe(m>03z;BAEee0 zFe&MI|M6aMTZnk;F*au>Xfab4Muc9MjMM^+@v|e*YmN+%ToJ0t#2{fwG#nqcP%`Cx zo>A@nu}U_#Nvs5#;F5NJqw?oC$ZnIK6!nppT=s@FI zFFB@|hNGmv9NU?P1~%(Y>Zf&WlzWQ$Y5Gy;WG@@VkqU>|-&KyL&F~BRsy?dtISh+( zB}^e~XKH8fU;??)xJeV$k2rNdGG{81lSt;!DLJ*S$BjdWo#mDULZ8_MNWXk(@{C%i zX(Rj`dxK0$q{BvYzQA%lhLW!*XSZoPw%l`n`xl2o2U>QASmk&_!s8OAtKpVECitG+ zdB4gmX(ZQ#iCM$rF>mM8R`J!9&K*iJQ&^p-G*qQ`@-T=4?hVuB*Cjm!%&Y>2Nj()Dw#D@r0OeL9Aq;K|uwyPAgJ^ zHOH>(QE`cNB=8jn6RzXksNT4+K)}}KYkvj6$*{OLHn1es;Zd~TgO{RA@9bR$=?+rl z5=!zDTErKwbVwAvy*^?4Jycip20O+|;bp%(g-<%ch)SBusKGCe5_6BYga`hv9Jc#T z1`p2MJ@=>Fe}rTw0*S&tuGhAy#J{UZ1?3+cA-$lX?NWD*_C{~?WNLhs8fh-7D`CQm zmZPjRBEwfYc+^0ywQ|P7c*yKJduKhRg{a&n8=$4XBrBkH4RiqmPB&1P#-{V^AdH(V2<%V;yO>& zw8pi@Uj7zYI|Ulmj&l4dYUgV+7d~6gQ$_*Mt9U3t;BJ~_x;W7A5e!1kYKdKB=W&@h zW;6f8>mPCNuTDG#vJ>wJ1L=>-M&WWKY-&)=nF`L1eiLAc!w}UR5-r>4VJ4Rt8rHp= zhm}qPqdYIf0W}LgGxZK&)c%U%Ed!^{J+~tB?>2W)B0v`N*Fj2nWx=h){HiSy;T*z40*>h2UKVoaZ$e)EfZtJ zQBVcKugRX_^eRqS9u4?wCFp;FxSAxnW&*vT_mQfM^uec~mL1^z6SjY7H_>v`g8h9m|7_T=Ll_)H2Ne@>?wPR7hLERxUcq~CVZ|Q>Jr=WY+4$`g? zq^N{n3`%!ztQR;xge_`VW~?)_6@yl1$H%IEnAjM3cm%7B@Z*;dA)aREJI%z?We*pX z!p^KW*c%}W7~4QVWWvC3`B;bP@-#(|R3?xaW+v+0E?Rr|=rlugkBTlO`4Ax;n0vR> zU&-^FdcY<|!{ol7oE%o1!H{Mx{-6X4@(HGSJH1d(h?I-^p$r07^fyC7*ZQ%xsRytH zemB1iy2LCl>nk$snFY@s*Aft+0g0nGHpkbb*f#7e8Aj*c!Xs1YtM|CA5m?EF_cT#; z7DO_dt}vybH))%oP8FkKS` z(aV4W-X^>Pj|mvQZP4903ADoVF6x)YARL~%d^jBn5^+y~RKs~%l zXvaXmwBJ*S{R0PsETJBY!i<4OqP9Ku`l1d}VHFXS_s)Sq#hE0n(-JGVh!;|VSEW{{ zp1P($N!6DM@luH{A@9P3DiqP~XF3p9l&OApbSnC4LACLlwx8o@{WAi*|q6`Ik@L~tN7)XA3{qsj-P794}kVzefIC* zTxw;^wQyj_>6zRB9I|E`s&EnT(bpml@xpP}!U8*xoAs5bFTDzp4aSE1Z*LIwoFXqw zC1jKEv}^eWsi|3ueu;r&QZzCJ#qlj_(SVDN@T)M0s(6`0VmJMYoP*a|DN%5nv6fYC zWbN@ysD2A1k(^VS;Oyoi?&yW@t+RhQvpOd2b&ibn7iamLVf znVgF&J~~&;1k(nk)Y9=%A0|!?a8rI5Yo+wVK5zpnb}v*(Q+bV)B~nulEz~3*+*R}- z0r`o~YO0@c0_a!iySOGYJ#ODdkOcL8|7fKwI+U8+msWv*rD4NP?T6Tk+}~jM1c|+^ zrJ&?5aK}-d2WqiJC7O3t{WF2Sb_~xysd`MUM_Cj8F-^u^lB+0Gtwa)nUI2C*lh$Up0m9tx3gV-!(W4kZN?Xi*zvlU>= ze%G1a?=_c&>qI99HmvSv zsf2QUq<{CXF*obNm<06_PFu)uf|$&rjTuxQ|mIc2yP4%u5Y60o>>Zuv!EQhIwMzfCCxDZpW{}f{m%<2w3J%sSOlHc zhxaaGCY^wG4W;Fc7YlrhHF(i>Lwa4*6ve z{w!VqZxT-Ci-ae$WEJu-EJFD{6cC_^by5TL`D!OIq#(4iX#B6gZ43`Z{u=Tuo?k~V z4X_X9kqnd0L*gczp%j5(gMz|fS$uR0z;2&&5;K0yEB}s|_|d=FRN4yu6~%1nP631% zAHS+exZ-^^;Bn9YNr75G>e@&@x6Tg3lw}!PYr#(aT&aC+A48Kv#)dB^BDD-Lrzox>ZKx1 zjPu`ZnHVLbdDlr-5GMv_o0kE`8dR$`q7>s0syPswxZJt|>{zbI65Zb~Hk|K&eH2Q& zKTnNw668~(JQ4WC;o994|LR9FVyzJc@Nh6ZLPDk80o5H#hGC2Xo%iF8pvdsOuWK#T z-%3F{e4M2EKM9HH|NCDDGC6=Jv^3V{J5aveF?j!Iz6TQY9_<0fzx$tenD~Lk=p$h1 zHX@nC@H^?CIRecq1s=$a z7kK-81X0if^Pu){m}_wUxm&;ZA?;Jql$1^~Jdg1*s^CLiz!eM;>{uTcp|DYh*r${7s z>Astk3*ep+IJ+AnDaZ#pKmXf`{O|v<EF<^DkYB>2%qn7`}&w?2# zMOceDy{7;ULmc<>b4GXX@-n+kZK zkPe2FsPAgAx7dDy-rp9IhAsk*WeF@iaFK+R#{)0^*B8M4e0_7pue}&0bqe#_4|lcs zb;WKXB3b>m>Ag!^@;Z(zj)6GEjKx!gbv)Pr6L;E50_DuA@PH=$RTIe^}q177BBq)V_R<74u542lY@upAkM z-~bE@E?{7WxVb=@n{Rm+hyNX-q>8*fI0CMGfZpzUW%2iJpjz8X8>JFaDAy!dh!BQi z5`H8uA5Kb2FK}Qtp{{R4GE&f9_H{QJXcUF_kZr8YTiqe7whSl{i*lTS&y#9_A=UY= z9k_kNbRU#s!N4NqH0$iJXfJ>ujo$`$c6Web`DM)N5J2WVMFWF}&IiR!a9J`qi4Wk6 z!@hNLU!W3%g7GAQJ6Hi90fwz<0?q?+xPFE*MeUCofCkU?msBg-fSo9Fbwh<|=zY)~rPB!T5ndQPJHU;7Kv1q0!o+q@ zt0D%3Nv)kjQJ%i}Y80oQ0C;$l!%?n?7^J3EZL^ zgxLkive*QC_(!cbfrzAe)3Fb`am=EXaEnD)@;gOZ*HiXS^hViOk>V5+KjtLLhsPO$ zk8`iU%8Wh-DHXncay}tc7EZ_rm^9Ezbz}W9(BLhYg(i|cs(m=F+K^+wo*VbTN2gGns@*Tit zk;9Y6;PR3%2DVs08_d!NEQTu)q__C!|IJ-)>CynGa%W8(CGmpxB@TDS?c5eTEcdJ| z;v;}Fm|!@@{{$&Z&(#Vaz6Q)y174SWVpJAL(TWqJggm9w(lE^GNFi(zj|I%vR+fTa zI;H&ak=FsLQ?K(y>TD`V2I^A@$st=D@%({Q8EhA@Mlk?hLuvJ7)QvWh*O2F@u$gD6 zI(UAD#62wDI2D_vnkP}cguE2^&L(sA;9Q=02!N}-`LQb>W)LTR?zpELoVm~VTvF~q zY6OdG0*(D1xP5hwz0z7HSDh9nPdugO^biIY#Ewv8nudEgx@wCiu=N%#2(N^t4jHmjbnzyASY}2eDM34*Dvxk0`y*o*^&E(%D1AKs}5RX0%s_s|8O%H}K zRdo8!)Gap5Mx+N_#IUfLntsf-_eRBmIy*koCotBu>>TUp;Ju^I;4rwGuaz&sV%>94 z|2XfX4SuHH45Q0M=YP!ay3_MBp&I~BBcon^Jz@~u>A|uC_O-a?uD3}8z)yx%Jv7I1 zBJVdKj{AuWWGU~u7iSM#3;D7I zd!eb4;V$HHAH7V}bDYi;ePcX5%cZ{-u?za<*HvOYp8hVsQivAfAi?&n?3(Lo7a0W( zhPboW?yVOu+`*jvVYL|>{V#@`j-eHxHp%0>D&2_!Rs22pkLnGgtKRh8;n8;b)w zDFn#}VEXp8I;j@pqQf=)XgB|80g%Xx`mK`Eb9{DYAr(IWYWw~UjH97y55GyFd+s`c z{+^d>ar*3=Tj<0cv_>8bIkOs?i8)}u#m)%>6r*=G`-QUn``4U^l;>wUFMnBc3|AY{rXU7j2C*aSD+{ei+KCmHD%&a4q}?3N#b z=D18d6a8J6-e5KfO~5+gM$G5(G~XZZmp;Pb2=o~MSg!8RUBB8`2oTj1RpGlu`7aB6 zK}y?4Gy+k2a~+OyDEixDA>Jd1py0YC@zP&q68|Nj2Y`YXED_|Gj3@w-$jS79KK~p% zsm`9I0-%BSZw$N~65=L{t~zB@kx@AT02UT=pfX0vG`F;Xp5_f94Ti=Bc(g@Mcmw?q zVH}0#BqhTp>yu2$1VaFI2<@aJjhn(Ei5deKgqn=K1T8h^xxRMf<$%Nq<@w05)&o0I z{PjC{nj7c{q#;A#fOt6cH4f@TwC^#~UJY{s2PP)6yk&d&5*MQ9sXdDff1tzRqP~4k z|M}rG2zHqRQD{GankR}up3Zg182zCqfQcS!8}=Jx?DeQCuD$>ez~!DTU;$b}a-gi< zg6G4mbBZHo7&5WvV#rc@RT^0O|Dw^MtzyM3ty!*`3*T+YQh3&}j0vRlQADvZ-zJc_%*CpQn^1M^#{-G`* zyC!l_r3|zj&Z}VIekkt5P_&2rz+s`GKu-V{gU2G6HW(JpRe1x^?;N-ux#*rn{5QM1 zj<}Nrw9pUP)^-3eofDBFv4(=IK(hKlFQS!LG*S60`OW-2V!_mFd8{yO64uwj-A-3A zS3i-I*K#G%SAT5obI2k8JebvMP&Ue0I;Gcq`Ev?$IV6Qss-x zX}Fpidaf!OGSv|Kl3Rp0WElJSZYfi!%5fTa(zhe|KP{tcRNV zK-=zSOkw)IUp&o;t4v=b`1>?6;tI|ut3hsxcx=xxd)wT!dByG2B!Wjc2;=DPLj}Z- z<5b2+Lah_+#du&o;{0|jx{`6jCSIB@DXY=Hi4C1`RqTk&l->neznDs4lFb8lC1qer zu63*AsJAQ~f@;8u+OfG3S$V;G_!1(iT4Ci~6EBRVugabdID=Qa*o2Kao?Sga23ToQ zM^v{$?^+-T_4K~Ig;X^Bt^z;!vvX6&?(~rvf4BCA&SzEeCtkkhYK4~wYSCgVOG?+a z^Z2tXpaL7d!qayb=n-_RIF6nQ=DF1qAe4Ttm3YKPy3}SSwX6O3iFztmj z;a^{dyLwuw{t`1bQ0;xWj(_?wMrBI5$|C!w@*2sdkzxgbSmiY%d|JwZaUo+z&(BvS z+fH4ktE#iamV-zxqa}*zE2E6|k|+ezU9@J1O~p(pZJ(}-k3e8v*-ahZV_}=|Hd5(V z69D_%iwyO-?!AnB=0{cf2n4MvW0O^|qg}i_eOK1m79;Hm+T<5*2H%RP58-W&mL^Ib z>e1;Qm91EdqYFzwR(9&8yaO6l2Yx0!A2-VtA7M>m50wKBJXgA5=j9fnQ_?WR-yFv} zukd}Q_hJ8MA^WdFPrf=g*!WQ7*ZXtF7fGglM8BH!$06%~IJ$gR5k`7VPs(%~$ zsh67f37}>~$_H}dxVOD9jal#z{0TqrBL)I6MHc;jad4=@ylOq(G zkxqU(`E@FIEBmH7PyW{hC`ph^zCBVB^T)?84Vsx+m*I}^=dwsEzX^dFcEkXRz6j!Q zorrtK=U7X{)}v~Z0}JLY;~M_hbLd0!;lsTIeekGval8<6eOwdiAG{jesl2WLEz#=? z!?Iu~7JVG3a0J?`r|=s+h3+^vS0rP~ur|Y=Y~-8AmH)W}s2V?hRt-7qItvNR2wam4 zgav$+zRz8N&m=?G&Sr5eluj3OVq&3o(`3)Y(qB;Q61Zo|d;OP<-)ZjC@0AE?RZtO$ z)+4zNepI(MY$l5Id$!A#UrPeT;>%vYFL&7lp2)I?QlaC_h^fVu9dM&lXl2@i`D~>( zU^wwHhb`j;w)^AZ9{_0@CL~e1(0x7InT>wJ#~Sef5JH;vvbFO6Ieso03yL=|Ks!j3ts zlE3g}*lknECQzE^stZ`U+)q^gQU&j*BazVJ&(YNIacYdH3ZgKt{t*e>)Kclcd`T4; zs9t7PA`4-IoRc*F?lYlnW~>f@L49{JA9_XVa~ZD#P-|!J3z8+LPnX`Ew2Ty@xNv8x z1FYDoTz=t7%%Qtjp6Qrm8T}J9a1Tp1RPtm4QIgK^zNZ`$lB&JSUn1)jjIcTg07Gu#p=cSQd73kpH7dU_08=NgV$Ww-V3v3vO>MDI2*G8X~<9|y4zX~62 zh6r3k!N!FP*XL-Z(O^k}PKkk3;7g~#v|l-DefAF|DgyC>nx0H(LMl3>A6zWShNo>p zAKuM+7aHsm=$xzKkl`uPDdyj#27Ev}?%(iLySz!n`<;Iu-jv|Lj&ZN~ljV6)3AfNC z+b~v_qzn2KsG`KT*pb4w->;y@P7TVw<80^*>6JytMo2io?m8?#`flN@Zwh7N)fU#&ZF1AMx6`l@JpLk4=sG_+~7YgHV`Gh{s$>j>h zIl&UNGM>#x38_LPL1q;KCgku}0=0yHOwYy=j>HxptUraoV`Jjfv4gD8TOjuvfDq>i z^)4Aogg}Y_H5<_?9)aIhtfyRmqDQ#1*uAaH>%b29i4c@3Ayv53eN6fX+K|T(hF&7$ z48KRr?eBLgmfWQ5L#Tg=9@<^5(f}Whd2efzeP9GZ!OPJ2=t^i6+6h*Bl4E5H;;uwA zsY%pL(~)g_V->&y{11WTeAjDCZ=$`7Y3#+MK6Dbf^i%lEwySX!*HYw!H#KBYCrB`Kf0{G2DaJq@gy@ zfYYdw!05$&2~*zu7yLc^7IMuYj}@o+&lwiq)(Q`mlTQS@bvMHUX9;heht*^m2R4m7c1G0Nb?!t(&xgK&><>G1GKqO8>Tl(Yd#W;bc*`p=UBQAm_z0yd@<{>y&7*Tcg4t2tX2p3aL zpuAd>8DIFzp&$cQnrZ{LAZX@?n6Kki!d=FZ`fc{|xF=sdRclABpRoZER(MO&Q}-Bp zd+7~LYrAsYf`xyuw71c~5a4!h=HWw*e{OAt!GUZEOm%Lko~%ib{Tp@TG;M+`r-ll4 z5f*q#U@|__VLxC6@T0bskL+k^)B6*dSg;@B zbZU%RLaR=l%n4sVE&GX8PH*(k+)rEM#{p11@tI{~u7@fy1mOsERRm^sa5#sk9=%~m zlvR4@C0?LtSdQX^yfWiRTXR|uLOCY8Y62gFn?RJRQ#2)4)v}XKll+U5mCgN4MHfba zr~uUoj?s2X25fq>M6tY5gVGVY7CGKNT#PpN&+yGh(3u?F_}T(sJVWVuaouD5guSq0 zm!CFw!N~X#0HGOABj#ppQFY1bw(3C?rFR>Y(YR<1EB1|8vcjBXe*ONs5axSff@jky zU)59Z<{-5a479B6BclT$^fmj5HQ3{*CIgz@m}+z?HuHiGgd{U)|3V|sby*Hl#j*dJ ziqHi9p~NAdkj8TN36^Oyfe%{cZq%8c`JxlV&c$vxND}r>^*omrP$-s*k&cjyz1L{ zzxTj0>PGy?_N%}Lbk@EURWQkA}@<3(=tul0zSSh5#8Q zH$dOJ&oCp-VJN_w0h(aaU8KzRnSr8r-kwm0hAI(k_)gfCy%-05Z4bFu7DH{G58779 zrScdjFqiJ=AFcehR5P(#mVYR$_>6k}>FEOdA;05#FrDS|HThfiiLO>|gv0>vsY|Nc zF*aRB1S1g~2??JymZ~#`I?Q@DJn%y<+NM*S?FL@ps1h`FF0+sIYgi9Saa@&i8^T^3 z^$cvx+#CErLFIxiberg7U&&7w&B*WR)0OUuCz)sT#`_5 zEDQ{H3-nRI7T&Vs$)prEC{mmG;0Q(*eOEVAV5txDMw$OihC=|LG*}!#lZb^JEUHn_Bae;&r`nYQ5 zgIFXTxzb>30J>dppV2MjhpOtOIuR^8&!oP^T)TB0NfH@JQ~y}3Xhj%G;9~mQh4L+a zE*Wi#g`Z(N_Vo4Ng zjarLqMo^Y0Moe@?T7nIMEw)Fe*w`@F+54~&UtkKdmKE+iOjwp5@&fxzlKs_su>SCb z0J;vA@(`B*MjpQufiTowj}1o+I&RFsuonEzXjn1z@mbD$^s<=E_>EU)qqi*PuHnCJ zv$d+G-mbQeT+S5pxt;p}b@NF8)18ReC}8EHF4PnGd~+mUNamxJ0c$)@FS20+2h_x6!!(x`eIdZt;RZ3i;iTGZo(*WyOoNt0^TRgUMxnp~=lgxlv=kS>k znNrf#wzDI^ZzT-&#hvZ-U`=-1qQv2b6i0MqOsA_{>wxX@9eblBXOPQdwEhjqlJa^#dV=FAOBE=;E!%o3upC-76A5VfRV4oo}p)b|Aa~ok8nIlnahnU%IfI~F47Thh z5OPjvtmkQ*{Yqw4)aD*+C&WMtRab>GEZAZ7lTq+9TJ#{W3j!p`K1$I>8CN!bBbXNR zuip2Wb_;xqe#EU?$oI_}?&`oW`-dapHdJg_$gPu!eJ~>KFt`@jM7E~M{bW9RF&G{i zqm7s|-ov_hI1fBP^&qxkzsCiU?r46G(HA`AGvwRMw#Bu@mU3=U+&;uhEJxMd1SLaz|HRO2&+v5W-dynV~8eOG`;=E1FXCtnJ}Ulg9HHtc;IMHa8oH*TR(76Rof~=9klZ^B zErHgV|G7RK{=Pm2>fVT>m#H^?wBp6-SM}KL+P`8SP-wO`(E;4wo|n`jdePN&93*PZ z{q6)`sv)ZCjpmmoJLbcS{X2&kw(31@eID7<(<*KmpE(wt@K|^#%%&~Zh(4*9y6U@1 zr9UNSy5&rZ*`H^l|3d_28wAFky4VkONKtPI*U=7jGJYiAR?MqDA{&3A%E6K5PB|h4 zBAWv+jn`RK->zNQ3|X<2328iwc;Ww8fB?Kt)2nC24A~CJ%++ew8Oq03fw3gzm)FQI zge*pnD=$lRk|kZRyy*}Y${^JfyU3{;p=oJlFc~LtkVXgQKgdnA0fCXg9Mm7b0ItnjV#@7*x&?x*9u)#k*sQz1eXe?)o>)- zg57fYHBKacuo$%o1I+-WVronyvw7GT0aWg*Y>|zvn^cSY0O!RcU+;|F8 zx~NIP*77IqEgYvj#(m+EO8H|4hUUIJ`h-e9K&K^~v;y1>>k{iyWnsihqJ|Z2rcVMZ z4RT&&FX))v-+UinpSjwYb#jO6<{fdx6h*G6ZnwO-rPl}iqtZkS9fv;N%i%fnADkBH zG?br5ed&mctW0;XtH{Out8Fvu5S{k=gp<4F#iwGxeK#$v4)+fZh#j83lqgsj^6F4G ze15r#SF(A<5!(INKHx=n&PFwD*|;QB5?fC;2!=AF^IN)_BV76%49;-}jVM$!7AZlbw}<8nnDw zvaE2dpe9Y7Z4nf%C$SlO^v795JK^I8Dz-tA6RyB$@Cxwios`+JbO=*xRXnIp?rZH1 z6IXOdnX@Gt=(oBYOm&p#qi7*ImoIS-5J#-lf&*5?6Ozq$(=h=CiH1v%4JDcS=`(8< zzdBhYr$d4sK}*s9<0h!^-l}&(qof46(0kDHg>sq3i$4JNjni5|*WTc}<9L-#K_3P8 zH17O83qww{K_1521R%s>-K<@jUY2hY{Eq5UAsZLK-OY+>f&oW^zOAZQyN?Qgiv)5o z03e63!QJ6|@ry-i5Iq4VuJ`(P9}3l9C=P(o3-+@o`jJ2T9Y^QMVF!Lbci=ZJYVY(%dYD)A zpeaLZ;%=*u9OqBwf~t1~@Hy*F_4kT?R)(>RTUo^r$IKKA!$oF0?}09W^E;HE=J;fy zJwYW&8`>prpQO+-Qrj>?rxFAR@We#%-gAH>;40Ja+Ji2NX_Wp0HyBzlh4_;(@lp$C zD`be_bmZv0?z3iIp)3&PrKdIprYwyXRpIF__(2~rnzPe8yw0ZFuc|A8yWm~BbzgL{ zLC!|4kn;=>IoRbEK=Y|F8f48$G}aE-_m2T|VZFVX;S6xWzo$-3Ys7eKne+jG;eoKn zMWwd(@l^-|(_kK(YLX;{xO=1dsQpDs@Q;~?ZG!n3FwvI%G$)HADHv_`Ec8ZaW3uW* zJpllRa54EyFjHPUtn}78_Hd}VD`T?r2J1q*x8p2eL!)kqa20O=XIzf9n6#I}wj_n5 zzKDBg(CO6jJ#s(of&COEeZKi+TlnHp8$UfM6n*{f9;5k=#UijGVgER#Nc8 zl8lA+>s!qq?VtM_tG&6`dD+`K_;xqHQN^<4t0Z-Z+C1>Mx?q15J+&_NpeX8iX*S8V zyl1CY)E$peJ$S!H znObvqiME>3O#C3WPW-iGX>9Mv{4GWN8E6?)j#fI_XtDtcMtF;Efy2(@z?$bvC7!9} zLlXZa_RSy>-@8TdrhIV6@V?~naA<&3=)%A}kaTT7vzw{D+IeL;!OYY?!o$J8GIeQ* zzF@8GJ%68`Irq9ZxD)1<`WEa~Z>K!q*$BSu2hrNs9nQl6=?ahpJs{@M($Xr#&c6s# ziq36K3ul4YiKcJJX0_6RmVGf!x17}Xjs_)sYfPr+PelfGG3AIVR*IaBI$?^hB|8L{ zvG94GoE3r^gCK<=Eva@)z+;0hIM5Ngp=6`7Idy|#b`t} zNvq}pr8Dm@RDB@4%wYLBa+T52tbWEc0}`Z5?%@8RYJf8nD_H)v&on~e5y8@7XtHW+ zArCwOd`0ANUy=&(`SV>NlnDNrpiK^>fXUCrrMaZG`yeaF9z4gti)9ZV7`pnt5BK8+ z1wvA=5nD7eA2M3bf&)r|a4Acz)JEs-c{n4=V9kB`NCP&$&xje$%l`3RC9=+*15&CE z<9^?U;u9BNe1&?c%l%H@_gyV`9d|A9DT8i9=P8q`VY5L%U+aupBtMSr0*EzQyU1o) zRS~$cx~Hc=7^9?4e$d{AiPqPc8J#Vm6WB;EPemK5?~AAv911h}L&Ar!=l3L<2~0POK2mxg@u(3o@3vfMV@gSiN={)P!8=)*WUBg<)B+{_ z$3I#CHU2JE430bk6fUfJ6CVNf;~_b!*%&wPOo z^rSNtu$EPQV6wSoSx{uO3zTeHq_x(c3Z^z-Z{ChS0Kkr%@*BzFyglq-?^^iToWR z80xSyfnmHU+Q4CJcV|j6#g)-0mLMN{ykcs|*(&yvUOYgi>cxLodXLE%jRiBe-SYd< zup5j@d_KTnVP&08kYPBqG3$)_}T!lq8<%YN?zEDR*D_v@*RjI>9}x8SmK+As}LZ} z*&n&%C{tXt?0bLH4ikef;k|roT@aR;|4bV4v|)e1TlV9?M?5EhR1pj12XZ;8Y(xZk z`t*A6&mHYaaNs85%c=O)SFh}d@BouZ6t4S}KreI^3lr9({yyjDENMW+2yKcZKIj1I zPN=Dn98plJaZF08_DP#>y|;V2KdUu_sdTYfb}ne0Hc}3FV!G?Bu5mf`_jYZ~x1d>6 zwz+EIH|B?$e?LL2M8L8HfoS51Ak7Sfn_d3u4EFEF7auqOeF4NDCj)$7cuS2FkFt!t zLL#$z>$XV{&2N1&=dl3>jF7E|3-@0|iLLJ+Ho}C{m4Hk{q{Hs+ki^t+h^}H=)vzFD zyC}zFg6Bx`%Dr@PIGt~Uj41sM#+QjtF*87M^ZZI%6-iz3Ary&dFb*QRgSFvhHP=<6 z-~ShL1zt!ljyzA#(Z8?ksl}b>Y!^Q~kAWppR0Utk*LDDxt3Xm^(rg`Tc@__x$iWny z8&{+4E<1C!XN(ZRDfZPsvkOqlTG1L2LFf=juz8#>pS@N;goBx=KAD+Sb96hj#x(ULo^VAj_frQT5Qk!@4uZ`eLuO z)eES0IL)bvIl^a9@&vU~H0nXhmdEeBsnH5;W-44P9w zH@CKl`MiTAR#IIts;+*|a@~9Q_UWYdMS6j4xt)HALK{wEbHuqw7rIvNpgx4eGdlJ?WTO2QYiq?ilWuI^|QxNpRmgZ5BG$&%q%Zv-EP+cWVN zfXHI}gE>honJ9N-ukg3oN9Gtvo|y$ejuLD$LAm=q>iUKbYm&xwGAd)i=N}bTy%=MB z(8OQGuH-+(ZunM!^lg+on!Cu910VDMtUSl-bpJ9NlE1ykTs%Je?62hh9ZrO=ucl@VI<1O}tnLJsyNe%X93?RHK^ql2<}(p7$+ z{6yVDCFle6GGvm);5)5CQF2r271$>Rh0$edH6|4*NM#9UNYI)5Pg!f!UWiCmsY+At z0KC%?sQV9FIZH2vmpY%Ut`H)bF}E=ZOfiFKv|i(&EN#>bQ*y+=%Fc5G$6a$L!LS%) z8U&IcLjtB6qDm|vv^(oWPuoZmc|-3|`cRP}#)eX(&?u^OC+L+{xO3G^6vJb%?!QJ? zY1G3dEC!_|0#98eC^7Oz33JArzrJ&{3O)vwoh}>VBNPhK*|)XGzIA*&hyWUKd1c*_ z*-Yc2G>6EIB3F6Fu5bs&jatkZY0OnoCRpIuhABbu*fb53M1d8xF_ji5LMCiCYk;md z>~6n&QdbXt3)3HbMsPfK4%AjV-M)-tP+Yf+R=vy=@h&nbnX1DxXFdkxO-$$lTy5Pb z^`PF9LmtRxc)GtU&5e1_nwm9eE?9NOL>JeyWxnp1^sy>Fm-J$mmlQA^bsQtB>(vFd8AmnEH$m?~$?9KZ;Vr}?y zUOm4GB%<-LJbQVW5OPmh{n=B^Rx!AfRgj9N?8o{ZF}o{hWy6%M^g`4gB_rF9!$vzG z@^LGdm0DBcOt@qmQSX6}Jd-_2>iYMp!p%rh^-oXHAxn@bL)Y|M`zg)Dp+ZLd0nOnT zikAIg@rov}rwmL|4)>ZJvB(gIyz#P7nJcSIjq@J7m1Z{73;x_nK+L1GYXnlgU1ZKbM|%_VzJ7Vi@RyJ6 z&2j{I=?A{3|BI9gqyw+F(`<}CpCd^(-ypb;$=?FrQV@ZWS7sy{Ty8FA@NRmH=;E|! z)n_5sgeuU0%cg%+unF#=S-ZJDf!;|#U0Rl9dQ8?M$C#I|cJQOv-2t|uvP4ccV658r zbS~<)3oaKX_K>#z76CT0iTZ&DotyLn$R?hCPP_mJs+$egp}}2a`w_b_(0?#CJ;mV) z_}hS!r@iHQ{8?FwNa%iCHlB(%$y@p-RPQ|PuYZN{qrafl<0*5`412Hv$J{mTK^%m; zTR=zN>2~i*aNo~c(&fcekD(NO%_OO}*|78rI5s=R(ltRCVJ!s!(*Pfbkk_rMx$MSgpfR5pioVh1oite{lH+Ts`1eTOCA@EFQ2+Am*S z*Zr3A+oY3}s`!K?`$Q_}({?vSL&iikM0a|v6Eh~u@ZGnRRiQVk7k)ssvYX*dvw_{y zN|jp$uru(ZdulL;>RxR|ByF@@lvqn06vG-8Odbc06MM)YZ_=!eIYg)b3DI5;1I`a_ ziyaiJ4e}D{v;t&-?FjVLMYQeba94Gm>OuLXi1@~#7HmPN%`ie_XYz17Z(3R4S4GHB zNWs>x%W#s|NBR)K>BZ%)krA(iSYgZ&7;)nVkt<-kVixuNscTle3HJsn3C^z}kIGttfk=e1Xm`YTU`bT0y&9c? zRY`7~?c!~X4pN97Q+1*7ZeJ5l!2QhW%k~zu{IVU#zCtlP$iM(GyU z8_@i)mxYOz+wbdXo94RDe*>j;=^W|Sj)pwy1hBn*>TsW0VA$1EHX67NcKHGGdp87W zE22Ji^ z3t6r|(D`n2x3zepYw+h~OQ`2DImeYRMu z`&o3qdZeBuzmCeW>FHmV$&f&BI&`*ss5=s&*sAvt{AeV}M`v(4Q}amh)towqi%HnM zB`xL~}0uN|un7-v4Vt~6ABvAv|xq{^>747#p79&=OGb0fmrqHQQ!I!BoTLByExGgJ|yvBWkFx%bG7 zLP=2~+%GgDC?7dT$q_SdMZ25g(Nk00AIfnX-y6P}Z$FpSW{riHEmAfEi`z0#GX;E2 z8b4i%_)HrXYZ3a6=_QdV;Zdeg{N}TCU&XlSNq#eyIuO1Rl|HMKckQ~tyi%ZWX zK-bqSY&*dXrTt2>K$Q+#AYQ=jXjn}c>W<+C3Xb!Ekh+$cNvFDjgy;rIE7Q)P5 zbI5~`J4ajPIHFM|yRYf1fK1wZTE~oKmmGhLZQfLL zdWxy@UWulMZ8`P`pFz!ARK$f0unM{g_gQcACv8|6^&xf6mm>2dyV8qdosvqEMtjCj zviYVdBJnh}HScw&7pk@dqWPpEYLFH^m$lep@=tV_bQjt~?V9)7avWjFdVW((qArz| z=N**H@u-W#GsBda6g^yB+&%oM;`Hd>ho5GO4ERPyMgYiG<~9kg^Q%gcl-$G{`0Eh+ zgI?%4&*y_3IF>l3UcQ2yOpY1PZ>CL0QR~m6_D|&b3Jk{r*>9+~e!iG8^hraBa(HFD zZ}MF5C*>?c!f8$4G(Qml*PE&c+#k?6NEm9RyUc7ETsIpVRJ2yrS0$NL)05<8kbUkq zJ;j(1Qqd76_`LdAEcGb_N-uw4IfCJRcOy9^&+Sq~Y@_DI;IzvSfh-5hDdU89#Tzp@ zVcJ*EnD1j*f0S`Q@a3XOVN`*1f)Rft7ta$_=b7&+l~Jj7{v&}8|9$td;b zu($H!>T}f3=~b4H^_b?vZ6|ch7{v2>yuink&O;?%e2^%(+J5g% zTX$>cmbsj#8=nj61CdZaC@kNY3A4sRB(7YSRtU(h8iFVq&O6QgL1?blwb4EENN$ck93m3Ndeg?;4^+;GErH_ zhUvJOsxf}AO8nEDK6mN!QKR{H^K*mEgDyjdSE9>P5+(r(Bnqq{^Ce)pD*Vt?sTVN5 z8Xa6|KcQ@Kc6cUSvrkoNXXJ6UO6_`S8yd=jo5xqIBCNPUOhjobvzi|23*GAD$A&?0 zIW%mEK3>=N3M!<=R$A?>THRXZ-;y}-ZucKLZ)-_l(-mhP^6x$w5)mw2hDBi?1*^EH zdkH)c65g2xh!fX~L}8=fgpU|uvwiCwP5!3Xg}Ao|)ivLLx2I7n%Zh@w=9!V%1fw=x)G-Q9p&G=v2^U; z9I5a@WoE=96TiUhNe}``O?P^&^+d{*+bd+TKoFID@_Yj`^h5f#JSGaW{He9e>31Iy zsyS{a)@F-@t2?%ifV$lE9J;X{bF!#I`pRhXbMFp*rBGfG;*c?dd*w85%Iiva$qC*^ z@iP`|Tm~IE2R)=AqmcN5aYQja+#BtvJsEi#Oa{9)JUVxpJ$t*A{#EzaVQ)Cy6a|4O z*2z$ON=$oz)Qn(n$YceZ(`k@wDw}=AQ00a&*s6MiK!#k`D}OsU9n9ObPRn?2eq!RR z6FG0y(52lHR*TPh`R3ZC^KtRA1jB;tms-IfkGv0c=lmNF1cwt7Rm%dyp6n3rl|CD3 z`AOA{1)DOY7dP<>?MH@7Rtmmc-b0tjt{1=*?Yt+JTO~uBpg{kO9daMLZp99Zh&6h@ z&vBCia&d?*6*z755G%n3p6!QaIYbCzj(U^4meepo$)t9}$bQr)}2Lu>aZBOk|Ai7!!KQ`S!D)kx_m047Q ze}89WSpIBCa2w33r06>fKROmE^=sL1$9O=t{`Od=hDE*_kynz(mLXkc=mZ?K5DNtGFe!nvuv$E?u#MZ zEJW!Z60)ysrH+31)YY6sdX3n!$fS?Te2}X0)Z$b7sY93{F3ds*o2Cj;A-j`Qe4~@V zCFNX~KfO$FBMNFhW(D=8aQ0Y4WcVbqHr^zRg?r&I;fR| z_nCD3Gr$JO4*t~EhL47$LZ7LUDL7);y}Z{?hpj70s{rdYu0&4XyX{AawJDQT1}PxK zJ?tWeyA4ZJI-UMSWMaENctJOJw;TGC5uHLoqMNk0uRKe%Inytsyxn8zRi8=BO01#- zw2PETnL-n;FiFlJ=y|W(Y+WSmD(~Q~AxQXh|8evo=0RSz9&N4?SCg7O(bg z-s1&9mj(ZO))Z$su;AUBktw)Ole-vJh^Kq=NA-MIIkm~YX@Uqg9JVFf$^^5N992v{CEO>1uTLGi&p0r+cHc?NluhZH<4v^{v62G$ zP23h;csZ+-nOW;{x}0&Br+N{zR~}CKHRUp;CfAq97mtRRi()9=VO*!2xqMF}j}Uv{ zW-&mkJPU7nL-6id_}@GAg|&nw%?kCvnQcJ{;Cr4_Vamiy(XKUji>?@Sy|$iliaO3A zRa>7v%mh0-Vr?l5KN?^CSO1hQZRqpM2Z_T|AW8hB-l}HYv(w`< zrG(bc7tVN#{W(vybXI9L(-3W6`>yHV^G}Xt3V(34$CNm$Rhk(px_r4fcbt{<(!utj zpvG{GBd%`bGoQzVe8r7)e<5Q6Bma1acY(U_Y~G)OEoWzzb%}yr1DlI^FqyR6ba{&jXSM~kLIaVsb4=^8FV`il)Ju~|6q@BQZh~#Eq ze+V^@mvG-OhYsasAbr#6?5D+n>|#6WHyr z_AYd?TQUIGJ-(K{;Pt$nnNLQm^j{~Q1C;1;(HtZt_?_fJbj9}C8b^TTl-sP)=!`tQjJ2xZ)f5SKWfHoq11?+hFY7&^)$F~lY-s8T7D zW_e8Q8H_c314{kGE?`(x>%%SFau}npz)VrB#MP@bPp|di4DNnC28<}e^28vECdRF7 z3o|+sJ+uM88UQq@SBWJ4>nf!G25zh`d*VP*vv@h>iJnTpvnHiz%~c$JqmU5^M(tMf*Y~NG3D6)(=FXE9me$~}Z54MPr4f0n^E9YkkL z17XX@?<6i?Knd`Cy>DT#ZJnWP)hRZMAT&4oQhvf8gDXkMhM{o&Z;lu*?9Uay1evaF z=js@UoD<`e_2>YtTg--kCs_o`2V6b}(dEwUqh&zRzm4K?%#`*c>w&S*GMO$cs|J9# zBELd6kzK-q@h-bj`iuse33m*q4S6s4yGrhf{116#vCGN_T{yFf23GFFsW=rx{G7 z+|2@@U4BI!5VR|aI{%T!c#MjjsMPOGV*SDjEY^Hy1+eEnf|i5Hwm|VSiZTGB9)=-Q zrph+31P>Ic=jNaYD3_;nHBbNbd;WLM(4VWxat9@|X=(y&A&+bD+>M^A|F_HWfB2*R zkG!j(8v?J#S35u*&1wEd@1bn_%P@WGT@6eG(lzw%|NBDy=Vu1Wqb?kz7Woyx7pxoe z^kh(tV%>VQQ{)X$JfPD~fLb=;9 znUM(!Clwt5n+S;Rh~p>2f8MkI`6q7P2G`uJko9#9Sg)+=-PXB@%0)iic^UEV3()`N zj{V#30h3B}ZN_O4mn5JN{T^k72W|nSeWUXK>$d;fhy3}6AqoaqdL&!r4lX@z9rEiJ zIY)0!#6Ma9^hsi6t^^wAe)<(&5x@zl%8wN(;h+9hNDr7k;Z+~O!e!uc0;~|Wy>Lq3 zQ`{QO|KG3BkNN_B1bBZooeb0(-hLakhNCMs%A!7N>_(u2-(lvAhVuOs6o6<3WZ^#h z9kL;|=Q%U#e|5MW%Hw0|4hHpBz)`OsEOfP(3R_QS^gbA1rJ8R8+3i-TV-6u@Pei0Y}Uw9Q@U~H9Uz&Ex^n@Y*WbGsA$k%K zcpuK@w@}N+wTOBTj+B(XAC4aa;i7Is>+#jZ(3- zWX(zvHDP)$T6};9F`mB+b0M=fN%(XQRC=PRlPAQc(CRY}wW|7K( zS;tYT!X5R-(aBO?PexP^*@V`~!aM!nA z`oMrY7n1MBVp?<_w?=8dC;=$uR%$PyjCZk23(*`1ts@Q(Kjv@6t`$e!x=lw?t_xcg`C+gbeQN_{ZE^=*mP8yg0+8 zvRyj%8hB2m3k=LvDB4uQ9T`wMYP8|E5-2P?D)9+o#;KeMHJ{J#A>F}7z9E|K(v5;W zZG*R9&}!s$iXk`(?;^&rh|oCO($-(wlx_o@Qa_olNuU$C7PHBzOOgxO#zzLQJ`hx~ zEc8A>bXBC{>eKEz#EI3d4WEFl9)478Ll*xj*r>O5-W3XO938KCPyPf0T|s>?@t^ku zNX5G0d%)Hf=qD9*xb^1l??Ihb==s%2+g=1x6}!(+FMNoX7>$$mZCdM5;SAW6GWV|m zxlyd??8k?pCF=7_Jcn1oRg2~hIUWn1^SaWsZNM5#vyY|EUrYPQ8v~g0#vH!uoUKtU z{+4$K7|v>kkQ_RUzt*ZZ)~G$93Lob+n0B?Dmz{tC)Jtd-p_2#L1>=Yk2OHPGi+QMv zc}r2{E7k28GU1T6Rc0Q_^A~`yHsA*kackn@aRGN0egdpp7ttHw(O!2NJpd*|NHMOn z9-A+{$qv{-XFeBe=BMLD2e^S&Gyfz`cn`Q6ON#2jqST+^aj32^T z)0%9B(dEZ`ARD5FDkSg~_{<@00Oi{T>A@ww5<*-}+m$l_(6_fM2JE!ii9d3xKU%pnt8hie(uIZk%LuISirRX&$lLTavkN%7y2n&)4p5nN+~ zXshYl>zEs%%_{O;4sKUeAo;Q{4BbFF+~kZx*HBi+m&D5U zleAKpHW$k@Rwp#lVWa2khMVKj){19gG~lhQ`Ihx5kUQh2YJiEfwoDMw zI62U*qzC%D{JF`e6>+}9mcidHuqZzcQZm{q>r5^~;UL3Rp})5SJRGTZfJkQfxN&h` zs@$H0T8CxY$PYmBQVok1l?mSi!ITq5|0i`6y{;0hb5_GebmgIc@2V;r!;KBOI4ZzAeAb0kxa0=G*WvdJ*=gTvb9xsnHFvv%rGD^AIeRF2>6w<-7tw zhaTY zXEC~^XlXn7(~_ZWr2)V-#X39*mDY^!pEtC)AL~)y%KjsX!@Okhfqc8y&kn3Au!4%8 zq_$n|I25i)moz)%8LyC(`yJ)eric^*X}x`#h5-YH2L0o{lUiB4?VZM zyCp4wVyL#0K-o!jCzz`8v$JK}OQNqF%V>{9vQFH(Cd0#{50(}L6M#S#2@95arY?v< zw;??dI;Q-Bds{6ym2_iDs@e$&+ZaYE?&<^Ppbs6!&zmao(@a4zMooY80-eI>D39E7 z+p-PNC{ty09xrgzzxZnSQNJ3~+y|-X7#CC$PNWy|<%5em((i`&}Ev za_cgxHFgE|B`ZI#GgG2+Uc|-GI|;Y&Z)4bjGI6cXK;Q{=vm3Nni_+!_-0*KEYDX~z zH0a`JTR6tQgBT|tg|zb$z29D4#<%TORl7WrVq1N z4yS)+A7xR&sm*1A6Ss}QQ(1Mok-KPKhNX}}Y{{dud+WqQle2q*j_!IVNtriY3Ey0*|0?GLzUwh39x^x>$j)qSlsoZe8Z z?U@yI|KM~=`S^o`Qbd=f9XT2&$Z+05B>ArM=MJC{BB;ZY8)f=X$eSMkTZ+7eOSE*l z#^Vq31{99I`Q9vVz|q_5)y}RAv)s!?v;j(4;GN6hmNr$#E{h(6#ruCPy_YBys^1An ziM!lw!;7M3vLTx?1K^f>4RO%mjqhq`#F8^6fm=(n4C?ut@N%VKal@qnrX?euh zApW_K49a(AO5%agUDz9JHuJfUekq^c!pQps6zD>e`haETP}_N%b5(?m%)n8Kd^~6y zl@z1^KhRF41TcBxtP_6ReQPB;F32K|hBI;JIsrSHv@e-a0F(kds}Fy? z&##mt)9V&HlA%3&ED%(@1GbKr(Mv9S>fl}?Jz7_?Qj?*D!?(k|BC;G_bx}blCX#A) zf^fJU3(Gs9ZA3(hqA53D1H=IL>o%cF@os>iYN^c85{(tv8RO+aYar?6DPq+-thA3$;WFSCG?&0F8o45ji?yc-&)K(cH)KFDB7A+ z91K*Sz5U#BdvqM6GAp3&NveoVKyjuHL-_{o;Y@DFd72OAj5eFa+|tQY$bIz<8+@f<~H_wp>7DYpz=^k@Oo8i1}`B(YI_`RylX9Cg5Mi5 z{2Ux6>}x@F9sAMPLeT0`+BovN;gyU0Oj-2`NYEM{`%(g#PRyofsU-_u zZp@=jSG%@x$WFitRt~$%o55!;e_yOkiT2mp-9geMQzGwx?2WQu8u9?YR6g_ak&wwH2=W;9^T4F1op3{1%`@z5eS%(pt+T(!!R zJUH+&86R{1rDnL_;F&9E6ls6A`lmxDZ6Zzgry2GHwZ1Qg(3zZ$O9~tO^dZR&2&Kmj7m+VO zar1X2NPxvxt<}MIOCK2-n;%}Gxt?r$;10aGZ&Ll$0m+8xX8&zblAD%npWdmD;)@-P zeeE^ro&$t58Yg;n-m63@p5$aTZx@xvSELHtsP?epQ@-U{ebC{9N$l@XB&Xlxqpqj8 zNn-iL0aV=8G-ubj^4^CKvSaCW_JRl0I(#T#==t|gC(RpT;~rT+rG{j$1LRW}>ny5i zFkN>Q=L>R6U%@~(^{Zcm%mdP_2$S`ss7o8(_cX3!Qpi_ixAnLvb+ny}w=lT;%aECn zF5aJ}!+jn2Px#d7QkSaZQshl={da7PU1S^6d8c?2WhSE|VV9Y)G09AsU*piSCrXk%D>cF-7GiYF(HYP6)$q& zJ?ZTeX~&A;Dlq)1NOb^k-%uvL2wmaV7n0#WGv{{8>;#9w)z6&{$-jf;!)CW3I(kzR z`rBDPDu%$D6^TD|wpE8hL*?IjcROSPdT?h|`iKMF!mJY(>-P42@^>~c16CJ6CtHbj zyOsDPN3v+;>#YU}miz@{%1>E12S+A0{P?)K;;tu@%eUaq z`Owyg+osoLmlY#n;DJrXK)m==1j~H7Fq2dvr%fAVf6%?C4`E^sl!izy7rzWF2&PV0u=n6+x#{n4^rJe@~4nP2Jr-0qAC1nzt{;M~H3hDk%ab1Fb@ z_>NJI8I2mB@!St1ISej{*0gbZ6Wr&El`X}XeEUl;@KP+6wB`3z?$U!NqYy`+m_Z!v zgB|-$?d2?ZA)+qt9FSQX;b@(^TMwaL;0`cD_b7$SX^<@9j5-81<+OV$*K&j?vM3TkVh!PsQagH~woC1-hpKFBm$Jmt zYVBj;6e!9Q*c2Yz&bTq+ChuEqV%3YBE>5VT57lUD)tx7i;s znb?7z79GEH7!B6 zB}v>#AMO|8g6CsC-XM%%tAmfz%m+2dW{zjjF$KpERYeHKSf2BuYiCw0#~lh2RGRy8*9z9cTiyuhwjdGhIKg&4{CYoEH z1)SdXS)dntNRc~?b}V`v#H&nXo^I`km(XV-g^AmXtGDR5Is>#&m_Ymt2ASr;l2}99 z@`C)6&i(jDj2QZ@J?l{9wx~t~>?#wyyT^mz-G!#;osvQy6Ll{uN5Mu9#g8lEVl0(S z)g-m)y)icKM$~4#rC_z#X6mwK^920xRZa-E@zp`vJcS&&DUG}XT|f{*d3zb7iMN&> zW6d(~u4P+quWXbrz&*tTn_9I?6G-xyXH}#@xpmETtLThYx{K@}hw%=0g*fM&EAh4b zrPC+E`BF#=F217v!Sdd_HuXhG*f{enq`3h-;+-e?Li=3n5F3IsI_EE1Ix#7|`?;S| z{?Sx`?GtD!&g)-bOCO<6dQ`E#9nEJfzfQs zWQ%=6*YzA^lJD7#!q_LB7g^e85)N-I;$m*%W1Jv>SezSTQ91i;?7J{Qxw>;0Pa>)B zH;K0It*OqXr#n*qfZpUNsGxvMBHeNrQip4%ciLYF5rgf`Xt93Lj^-KDRA@6)aixz zMzF%?DyGyR9{F$G`{z{JB@fO#ri?kqz92}V$7NGp|J8D6-&81t7iZ47v;>uO3flt+ z7sWiEq^U3iCw9;Ql750(mKx$%Z$etDg3pJ=b6c!Xix-7s8bsfZGzzD2*L6oVs$@!T zqYVj}^}=g`A#pDcFaDvAC_qUIJ$542)8>y5Ks7NN!@bp^=-T65uyzt(vZ1HYc==zy z-(JzbRzU%oLNrtnSgpS)H61G@TaReQg^5muFupNSGE48%L<-+LWQfs=qmv1RM&RmN z(3#<#_we{F_nVrY%FcE^@JpsGBpHe97P&3>R`VX#1b|ZRLi8x)=o|{j7SI~#%1Cc4 z%6;a@z+j73tbP4>7C7CpbUjWb@V%8_r{>|m(zo%nYpWvy*6K$3Te?_GLVu67sRG>u z)-XNsSq2q7w0uM3Oo-=GCatHcAo1B4`LRIdFy#~5cnq%V7Qa=SFT^2M?N%y;52*CZ zPVuwE<3D3ETL`{UAxTt_U#$ap*g05am-`u}al|%)yj8N)yft4al*zFP$>aUS)%N$E zEeMV0v!5s!YtrZ8u(p_YOjN+gwS)=BW&v8 zw@WIP)Qo%^Bqz(|A;Z$^N#z*WA|#DTk92^X^>HRX4OMRSq6fw5_Y(sEWnwwEnS1bt z0}TfqZi#|20SK??#uxVW<~?{w7JLCfnMflz2s`P5LWvnomb+P#n2;@%!#apZs5qhM z`0#=e-?uA6>v*!=4B>}t=MMzAUyGDnS_2}}h-BEKc7|Z)0*0fTjxpbxg|B9kboKiM ziBc7}IijM-UtsS(?yj9U0d@8n)W*rycHhT%0|1$}r0Umy?_#`zAa{JJ2Pph%VTL zv3_|LI}%&PsJAymU{>hhNxo56SqZm0+2UTHb7$luSRbUnmn=;o1nEug&3IOO zE7nP^w>9uSc{abg2PAi@*0>4$R7G2&UfMMw`Y?jD)^t4$Z*37Yd?B`VwjNrQH;SmO zy;A?4e+52a0Qu)^;||w=$ues$Ji)4hflhYAETr#+^^7PT)=%rK=kXj7(6uFH0YFZQ z?v+O)7it27A@;(K}3R=RuXSCtike(B{*bHt4f z!oY}t6ssR52y@Y&{`g1>Dx60mFBXy;s`scXVM`=hgWhypOKkMdzC>UNYr;s$D1$X> zibqHH0Wh*P_>@xQbIkjjfN|UMtNyg#g`QVR_RZHs7~=Bev=<#Z`-OQFFDO9nJPJO> z*UYA)_*BA%m|6F5(DClB8{@4HM^C=kTo6}PxbE8lC9z<6WsRpS-C_eD7_1aNXiXGBiLG{_2Ws3F7Je!=nMoQ z_d>3)2gE@I^nLp091KY5nDF|o6pgHeX%9ia>p20X$l>6}Fkf7$JDo)5N?bP+{l$9i zpaRlk2ScriUlO*<;|UK2_wxA1S%!SZwa`=5j|N;soULx~S8_>T$Zf<%g6(U&%+jS| z`vh!YXSWmth#6@L(+_La@`d=W50y|fC2)Buw;MiutbN9Q8nsc`wW~TdqZ&-lmll70wFRg6@t*Kt6 zdiobFC2X%kQ4f3ZpNE~vYhBnw|?ty*gm3_90+8`|S%0Uk`my+9)nKH8vT|0n4 zmP7-0a;hk1Ob-j}Kz}YP$;_YGMmR8inxSH-*LInV>sF2%xYZ(zn~-Ig+}eO#vAKKeuI7iIJ# zQe!whLPkRLF}P6yxAaK5)bDh>h(n9&UxKbYkk!bGCaS!CoN7t&EsflqhLsABm=kX% zHDE1C=|Cen_|D7$9i0luyj(5TJ*v;0=c}#LsKvOs1_pj&+O0g)LKaCTxpJ?E3t3jm z9~CiuA{j%Qt}<7V8hKff~Zs zh%8;O=99GtEXYO1iUw7~@af`FX6`5Gm3zO-s@k+O;w+~?NqdScC^yy|_B=M7bY76D zRj)LDK(uHo%X@qESIH{pf;A=kpkjG4UxiAqCr0y=V;kHime?OZVfnx@ZXydaUcW0M zIsRHsP_OcPJfI|{@&LK&VQ;lDijrjcnT2rpidtXc5b1iQmjmbWOYH*fTfXK6=ljzxM{q z_DMg)!NzD@uYNOo+I}BLQX4-~_bXP#ohDMhsK**dHsnYc`?1dAJtcYjaISK`f3yIT zh;$S0Zuek78ax%mYnym9$X95MjrLdVw8?-HH&p19)B$Ja4_&u|!AQVuS$UH(SAO&1 zxInz_QxeG#9~cC6TA}CP2~TSt{lkehGZc zf{p~1gag9uDCvfu(y9C!w`_+bLp5JonqBdwPMtq`tWZ|7Rw&$9>yx97FU!;^AW7C5 z&*uMdfxnk&bR0?~T(Ifo7>s`0%1WAt#kXMM+Oh8n5O0mwprJsfP&qurWI0L+y1;6J z+!Bdx9PS3;3Fm;A|K3Hp&_*ws&r5>^#~fSFi%ztM$;#)2aywLm2g7jaip0B4?uRNF zI#~!~Wn53U$9wa!us3Gk9(F`iiz;(B6bvy1x@H8dm3^@wP3JQYWAxE{eQTnNw~}1r z8JzeL;-m14wDhYP*?iZxmYBsC^L0m9> zl;_3XKdic$8iRJ8-M<|JIQiSo)Y$QtM2da!apvFB=(jo0h6Y>X|6&~Zy=ZNQE42a$ z-qo`j+NjbGO6?qj0V!rkk_=>Pc=dqp(jNJyebx)YBj(;aGfh$5kQTS{5f{-out4uP ze0z_d%YPf4OhkaP??*)L%*-w*QC`~VnME=i6l-0LE&$dM3!g&HUcEKki3QR#3Mc*{ z3I@PUMFc{BdINTDWsbN4z`EPfe{6e2ZKYY~fhh01ZB99debI%fb#z7A{SD9@pV~C+ zC0n=kT`9=Jj?+w2s0%Q7Ya2O&Xq@Av{Qao70+P4SH>E5y7BqiFE{3t3Kl{-j@2%U1 zEgtw=x=3em^v;7a_c3YAUy~~SfdB#nSs50eDkgh~C{tGY5v^b*K z%Md-)xCqFp)M+1%3hcPdv;H%X=0Odl({iHfG*Rs{+VE2Arekah*nL%r3~MW7mfo!F zkbwz4nW9E~VShY&#Wz$elDuYwp6sS`x}bFGwWINVTwy_x0X3GJvYUM&?hd6m2x>00 z>>`?_gJT(oMWDIrdrnWa!p714vhaR+ zL1O9%Eep_;8Y%@L>>CENsR5R~2%tmtKny=Y+$YrGtp)FdHoV@p{x?1dJ%U8Dv?f*b zw@1=XGu&%Z0SH=9Hi_xkOUsr?EK|YPUja%Ax&G?{s>h0fbKmrd&=cV7f zR5xr&T-5aEIjL`g!;`pa)^O}*HsAi#mZ*NhwO=Js?HBzm!g7t$wQZWse2WRZTjz9V zoXoEVyad?x`HNFqZf13Ok4fLa^}fAIcr0;cz{Gyu?XRBXd;ga~z8GR_n`hdDekURO zz2d)Ce%oiqBb!xVPWkSf6GN4==Ux}nujz8WCns4+&dA@E+_1W&HQ|&c?)@ox&8S3oCPbdlg?TzA^mWK)r2U6NWS*Tk5C!m z#I$wcIKW89>3e|55@Bg!1;&3$>M?D->bLwrXezAJSSLbFdpA~_pKJ(MW`yv$M;b)e z>4Mj!g3OfS4Hrr5W8(wpHEvKqXdq?f3$1-TR*)WOBB1K^#k!^isU)>ez0S(~(lN)p zywdZBwIWKs@~x8K6xiYw|9#AqlYH}FkT(3%&B-lM|hVlDVQ(|U@8Gbxrgx${*yj`jZc4jVs1a71h&ID3Q7<;u5O|^ zmpJQo_TbkuWL*nTDS3FEf>ZAny2S+@Hq?~p#_5K{b;Hg9X-iu)Xk8J@Oql1cje3T7 zoxhPf!XCA+EGx{hnbx46mV~o&IIVlw-}bG?M&ryXD|Y1pfBtDe8$UOMSpFEy6dAX3!(!~m{x0!GQ)W*vUg*OVOjl-qd8TcvP)tIzJ zMBEm)Jpa*IHUp?4xpQX2 zwIf+PWpr}8Y{z~s4|OB&*QY5!wKADP!OzZU;zX0d(jOLzMlM4h_R{zOqHADYTt6@= zQ~eRRV!VG`mv*%WpkP7c@f04z=|Yqhlhz>Uyg2YjYqK9KH{LLE9{A{n7v!R6$f*hCRS?9OD-0)*2l0+)_e% z#@{cBI7DmmpePo55p7x^69o-|Mko_F6IFRx2+e@XjC+Hv+jLqU4Dl-5g`A#-k5Ym|oh!$r z8j^?orhZsU+qVMN{QH(SXKc(jWZS-O(1Ba`??pmhjab=*-7EE^M5}2yfd5=?G4g zWG1iWAxJN3n4nO66;UGH{tQHV_C{znuVgM>th+2|0w}|KJX`<=+P?9YIOGcpgBlI> z0}y=N#OYrTk}+0Og^Q27k9252=<^KF65UO^JD*oL(Pn8TS^*PfuAAsW3uBn&#bAF5EozuB*-5nOCR1nvh6`dBkX4Mn2;BK%fAG88KaS#?nQ zOS#AwXq$#nhp=aHzhYYDR&Hoyq!j!HVVm2oh|j>bYy@n}^M1eha~`XuB3SwO`h0BX z6&q58z{^A#@AzIfEL9}>RBM! z;-_ZK+HfR(!a@@MQj-!i+GoFZKcNxt<=$4aAjXNYKQitGr z`TK(D`)*KH{2tI9&Hz~-(-v-)GbIZty0JOh4|hw&>)t@sz4ULD*9gI!`ZzJvWS`{%(2EM_b3HFBwkz7!@^jxCL;kDc zO?->AeIrNtgKZ_k4!>AGDE@FBRB1cA^B}L>Aj~)NpT^uk09bo3cP;;Dv`NAOg>m~Q)~r!bA19t(6MSciPxmz^EEr5$zTGM7k1)wshh>G%gd7wxz1ZYy zT^0yRMkCrnX|-1)YRhqnJKh7ZXy!bSC@w{I6GDu^66#7e(TzLe6s<95-iLgyQPab1c3Gy$|f3 zSj*(6!Q!^~_*fAZM+6s-Bx3hrm57BsC!sZTc~nu!EWmsP= zAkOafit9-_$-fEa1$-a&#Xo!>3M#)$!1wua{6Sq{h;yXjXD3b*n-f#5{m;GPKPz~a z3gOz=6Q|m@K+Ga5w-N$(LlD7)p!1>YtrvkQHw~6|z0-n;kseW48tqG9~T9$;q6RQ`mol8Fg zlaYC#x?5#e5!e7mrbrug?tx&X!1+)~w(h!o0;Ll$GcFd1{a~bE^1xaiJ&S(xX$^sS zT#0k*!IUn#PAA>oKa=Axli1LzWu3?wW;n0H^(3=Nf*$!iyd~bPRQ0F)m;J)6f9w;k zXh6K!IEFJa2XquJ+agXIvg}fjbidC+{sj4Vfih&zqRe}KtJjg0c){bw+$D9v@T3&v~*TF$4^eV)CPxG*@du#9MUUp+>&|v965%d?7iJ?rifu&%8 z?dS%qL#v5D7eG;D4QxdK$SfM1N;yD(Bo*?rPXK9}RU-U3UW%yvLd6gq=`tDfdKID7 zfw)x3ej`J;W3FG%Ud$f$zw~Q6%t_}P5~`N52pM}GMB)X)gGUxlksgiyQAF&(frP&i zAKrZf7J6XOx)QX=zGmXB1ghFxODtC6HM<`Xly!8ePZ$s{FoaeToE}{VX^s0SoNL6} z`dF`m+)jS^dzE{+P|K*U&&M^OSMBpnH61{D9Hy_!nhyrQ`i8)4DREB^fpALyT_&fo z4RcKNB$?kIQqM3`*HvT%CH*-=#<)*lIr4Rn(Fsc4oj@sLZW&dv+{O>I2anobKS^td z-svltW}8XS}uAgcT|cD*d&|Yx_ODWFmaXNM5CBkI#-=fCzS+r<>vg!hq+_!VT!qlhPO3(^m-#8t;| z@Z)t;74v3bd)?6YcR=&K3Rdvj1)&1*=BIox7WYa>?T(@~pJ}dDmVWWs&)2Amz6Gor zn=p)ff$EUju;6FS+; zjVje}on7Br`~a~PY_R}18YFBY-r$B_10Y^9gqO)K(zJb zjt-}e-4<=wv%lFlmE2JI!^xPZHl9>{7`|~;L>l-9;Sv}0!AB7bQWC*@=I9$}i)5KL zUvcOYA5b0$dvocQ?Ag!$PM_92Pg}@M~YNJ4_Kn3({V=JKMW& zY;Dw6`YRiMSko1+-1^_yH@@NtIRCJ3KG_UBjb2cfM>}Sx_IjI4RK7{I&a*|}jbY7w ztYSYP zhXLH@u`;gsl}h13ezF74ekzPD()qv1oy!R^vbDZ9cpcX0O%59SR_z&hh7`>dY4C@= zf-6X*Q^mv}Scp(3v;qPk@d6G3J2xKx1zw(M;~9ND8V{|Ov+KaOfE={hLL?9Q2dtUevuL^Z5iBUm8(xWa5yIG~b!dRX&uS4*}X9qZ^3 zl!M=c;$i&5kzNyFp!={x!YqBYH#}TlY}+4SqdaC4JAUq7w*H&BS&X`6dRTfc^}X9o za*dvIemjG(cRN>6^Y>^7FDN`P%*|}1Ak^I~Q7t{l9Kd~;etMtqrUdQ`f7dC`gItT3S?JeW;ctB7Noq_wbay zb`ch^CdZEiK5@j)J6F?ejf7Z2YNL@kciYtbR}HDGq&d8;5KQXeB$RPTDI-FZ>`6H$ z9o}$#U-%U-#X(DQD>W0~yf3sW{pjD7ITG;-sr%!JP<$GQDd5wTLrwO%BSI;%=wV^R zL%2O{Qp8-u@NyGss}n^rV@K`^@p7IuY!^(ZRyt7PWjGM}IdSy?J|`yqe-LUU7p(E% z*fR#YQVa^YbGv~1$hfP-mOzDX zH!~LR49*o6?{FBx=0BOkprNGS=TC*(`F?M@%JFPTwsSy}38k0B)U0HcmX8H`$?M{G zIX@KpP%mEnf`o*m>zV;MCW|D4MXsQ=%7RBy#|XN0rwyvVaa_b;A~n1wTG5V<1NT;a zG8Sm4LR%%&JsF<|9gOCxjF?L@+xta@{sRAX2UIXnVfQ-JS@q^b*glN zR-mWbZ{`NmzKQU;zo&g^651E-t&Yu7@2zvXL!3>w$5UZ~&0%7JRje3;qK~oxM@8U2 z=rqia3%B(QujUCznUYLZ+CEHN3HlO?w~d_E>=>+wJ}PJ2fFik6nR-OB%vx)|v;ZZx z2??ffFC?11SANb#Ey-`VDcmiYA6?KAramRn58zpDKHanAD+{n1Xg{H>h?MV$G~ z@f`|z-{qh77HC<|g-cYo$9fh&6n(EHtrZqNS&`Me zI&GSv)+ z!>U5_s|-&4%?!n1k~-jc1AaVB-yWtA&*1iu$l&Pyj38U&4ZU}Wr!1o#!Z%|JVV4{$RBDtvb@@)Zax%Q^9A5f>wo_PHzaP z6tcGBo4zYUlq~MRQ_$fpbt73PxqXyjt=7ml=WnJG1EZXEEez1-bOonC!(hQY{m`0W z%6t{tpKozDlnsL@&!&z-P&gPT8l=@RlcEYhWSzb#ONdEUA%e$Hu-9{*bJ|FpGo0NOVbbMIrC-b| zGf_5KEVLjB!fWT5N(Lb_g>LmYXO1Oc;P^*)HR^w?Imw4iK#aDE~`x`(4`ck^Skh}H&`{s;si_tE(gOTG(_3^n88NT9bcf$Q zo{fzGXtkot?~8RHefVLgh;+NW(W8!^hMR($FpIZ6_X1kT=K~LKZSjh**%0XAeNg=5 zS7Yt52DWB@OP((L{?`6n*xVZ-Y0TAab174>6N;$Mn*_R;WNzdPzaP z$|$0bs;NAM;k0B2Ug~#H{FkHqPZljE7+-7u2c<$jrX5%XepFT`@`Y`WS!ReS%r8i_ z=GsaVzW874y=7F@UEB66NOy;HcO%^`4N9r>0+f&xq`RcMQ$j*wAt)e?bgOhq3yP%F zf;|`Nb>H{%?03J<-uuh`u)kbm=or^>t$)mU&htEu-_dtzSpTq{cJ7sp2L%Fu$=gj4%bCv_Tj6Zd$LniJgdZB5H zSpdb<9gie_voBpb27gin#gSM86}IW=@#Oc_sN=2ufM@;5Fa8BCq&u`SXAxkmMe9{+ zS{_dDx;Bv#+obH#-;Ts@M2d_h5*k7K59Kpe)z><ID?|nmee#iUk%(| z&+D>(eY5|?|MMRo@cR$owX?i2iQcf6r0<&k--UnR!PgjXEFh@Zy8`jEo3PT2-}mf) z{vE(?1v-p4@T>x875KCd*Pngp{!hN^|MfM2e*-?aDe5=WC@=G0&&Kap>woZtz&DUY z0Ti=1#^=732~b?}x4KK9Jh zxadC70yk7L?1~V`+@nf!nc*MIi_{7*D%NUT^$*+ugWU$SFzo1fN4*yhp?LtZG6PK4 zox5-z6tLXA>ya4&DIYUQT2eDxR{)X3|7zjwCOD>>1B?r-a@>`9K;y4h76OPE{!pNd zV)X{;b1Va;$LHcCfQ(_k8Y4WCYGj?U3+&IHC%~q@}|?Kaq9%lF2g2g?WSAIyyUO|}GFUxQ;7<@})6DP-~k2;pLU z1Q3CB1})$8X6);RH(I{}QT>R}g4?GFo`X?8)61`6K)PS>ionKy zRCvSB0XI=b4?Gm*FCPe3gIkgX({0o-0 ziHbg815T&%n0Nj$abHuENqi-Qu<+fAwyE#&mjy==8)p;}(H80bNG%BXi7W4I%+=ve z<~k51_Q`h?%t7lwhyeY$CMEtxpV!HZjqyo29LKO)WejGX&@LSDA(;4*3rKrO@e|Xm zaP+^J`_W`>)!zA(7tpPugZUJYucSvM4&Mu10>;QFe4U$cFMWTDxuz1`2&(`fLMH|YF*$s4zZnirL9XkSbt5j-tw0e~N98_U;4Wa;CiOEA z7jg|O_|RZnsrM(a`I^gvK^s%>H)_AylyLV}G$z9ZeS@)uoV;5gZ_zjb31lV^m3pi1 zWdRVCmYJe1g}-vTEG44|R%V7#EW&ELR_crdJuWnUmJ?!GeU=t$+ z_)=#rf>V!Ot&}O96&m2j&gR!Z;g^?{T_@s59EoP=n|^m+DAs~1wjMHl?&R;i+sI|p z3Wu%D0Q^jv@3xxh0AO6UF8VzL(-ueRRvYYU0aN9(r}Snq1hA_Qj~Ze&Prd-STI&AN zu<%m$cYrZT5hoz{4mat;J*wWT6iZu(`8CSYpqBYj=?sRXR$y-Y)Ey+p82FWN4=LyW z5c@D9wgbsK8?u3de`*eP4eoIDGVz~PRvS)tVDI=m69rZy`>6+ZhD+#%WYPVso#rc- zhodwMj48e__~5%13nM=Ly)Y4!3-9Jr9LcC@ z(?a1~hY|6;T^wgVpkvwDdKFhPZ@p6U0z{NhvLRS>=Uc%EC=jW^Eqw1KROwS$WoY~w z0KcUw^}fb`Z7E{jdS8{a%nq+^5B_B3fgkTP1Jby%;pWd6DgPO(wBeH_e}9iX;I+@* zAL{4C^QGOQ#}mu*`c~GDrOeWr(?Vt`=1p5;rcz*BHE8#S6HeoumxW9Jlq^+!$KSfbnTJ7%(B?h>k*deoeXWs`xUS0YVRBh<+Tq zO#X-u6;u4bZtC?;MOw?Q7594|IL6}y3}xYt^UBW&rxL9IX#_DdVuo0}aUtRH9)Vo9 z{1A)Y+X2@okfDbPM7eRlHvL-)=fgQ=da`BBQ(#wIXf68;Z6&NZRT-ck0x$T;`{;zm zmw<=rzwxs{E*r)47}D0@{xMy$JpYSvLCU4Ol9t#ydn}P>KC(bMLM?zAqrKW+t_ByZT=h`+Ta1TH>aq!3*1%v zP1|f)8PTf8tq2seOKSIKL|xOAL)T@K1Z}a_@$s2C4e0ox}oY6ko>y z-r_V{O_WmZlpm3x$AJU=3F$c!r;33BAsmHJrJlK5r>~X0Xe^7 zQ6HR~ylVgyGa@WV;VS30^04EvO=%-0Lg^`8t^viRai5BV=iV9t5??Vf zx6(9=nePgwsgr_GBpw+vq6QX=!)#hmz?TgeNJqfBgV5)cdYnY?3CPYy@=eP&g%!-E zW3K@;#D_(46NRDIa7rf;R$&UWg_qaO{$EE8jGyauWrNgXnzCn$eB)?_3kpVWFz~kqeTWg%EDg{eDBltnZz%NK z$mpGEMb~~q504yg07Qf)HFS|)6YM}~qCOZB!J)lszS=C^7=+3Xc*}R7!3?GVtpc~8 zRT?w6z587Qs$;-QI}hO-YEl*+Qst=c4_EFwqL~n(d8aN_N!@j7qDMrJ(L|H|^LNn? zKt&`a9Hj{+l^6X@ZeXWuw!s&bLy823ksXh=i=2usDc22k<;neG9d$b-4CZ&QrW679vj%LHPD; zeyR6Gz%3*KRTf%LroxM#R7nLfUGA4!8?|7*ZSesxS*izVxd@KNn7t=>d#b>zz&TGKufn5>WECcPo{&8Vg~(`ZO2+j9uM<#!vA7jL&nukOtr zI3`xHcZ0HUyPVf>W=F_jyk#9t&^R2uo32KDgMr<@qU!gNEU-V~rj&kub2K0X&a6~+ zs2-gHMB;qw)sImguu&Sr!7GGMUuc{F*^+%Iv3}ok?SFuE+)Ivau*WB5@Cq~~Ht2OQ zA1yPGP|Ww%y{?P(0cba;a4LX6K;C|N-4~)jE|*usfT%y)?*S4nt>BGe@2zmDqk`T2 zUK*|QATaR$q=+et^6J9`9FTT&mb7mUW-d!$nx6eBQMV-7$Ou3?s1gnVD@|T0FX1nV zWq?0%{~r#^Hv{0v+a8c}0*^!dJ4BWH-&JvS4b9)TT$F1oNyIPh&ZXV1q5u=ilYZ>l}z z+$Cz#!AyVWezXx}-TZMfx#nf-ah}$_e0VYCHVf7Nu%*bu-ZH|SF9|uvM1FOrr(RnV zuvz$^YU65BhZ&;~xRlm?`0f-0?_U21f=f>x6m-=KJWbI84yVjh8a#u2$ z2!@x%c8uAP)~MDG*%$6}J&eANZ-?|;RekRuPhh~Wn93&Cv*Z&T%mUWtl5sT$E*$@P%Q(r${R2%CVF4eF zHeq}IZ9CE<`n%g(DAAacRBrwJK%g*?t9fB0?BvEbf_HukmITY;Kk&5hBDLeZKxx9A zd3)wDf|d;%_wCcx5mHia#JN}!R`s2pO|We(5!nvh zSCca}rZomLydD@(m{|;3xV=E>IXAbs(ZiWRO#Uvr1qjuIY}(|seieTg?e*86tIzfg zKIFC$A4%Ba9FiVs0i}O)R|xc>hALElyQ0eYlXdItySHDmc15?od@9j!6(X3_hjzTu zf@+cGY!3oUGp;vk6Y37X&4L7lNtWmy>MgU1(6y1pp6mj9ily#FCqR%8_a#`c(VqCc znCwz@*Ek$@jN9Dkn1{P>K?S`9ITz`E`^KTmpT-W^i_MGCj@{peQl~b+m)ctapN%ba zB+25#G9&@C(*XlO1~~yvj<0f>J%`4L(sd3}VomD(dtFm>8LOb9!}Gc2g(g7P z6q*8SqPf4}UDDk;ybUzkw7(q%R=Jzz2kze$Ze7`HIxziNhZBSe-SPbjioyA4ceb17 zIu$P@p#Tkvh{3J;CZR$5lFftUACilc#f54eFe_-s$>#*0X!#uw{>lS~jHfJ1?^=(! zHWhluyQbM(RVRJLQ8)(+8vvoh3e?SY-bk8yS6zI8f%kQ(0+YekjuKD&f?26UTVxj= z4cr)$CHCAF9v3A3RW8@;k}24Pl`ZGQ8t>I5n^HPxqkT$vZP8f|PqA|K`#MKQ%8P0t z;>5ScF;F;5R<&sPrK+gK6A9BB@sMcZp^5D=7J$fgryM(A|a-QgdN=;kK+I_#Hzm#1~U$`BGc?!Ib2@L|9qT6*mIe&(9H4+YB~i zcFp4*_=r}`!e6Je;Hf#y_GS}Ao9j;3;eHHhL?K6mny3$LFS*$lG0uSL-3sODX|FW3 z@wLn^e^|5SX_lR7=I zBTYcp-e+2z4)x(A=!FBp4W)2=HEnWgLNzUEp#eTEA>oK~C8lDrx-uXsc^2Z=keOC; z#77?>@l$PbXDjo;U&r)~$ML18kFw|*3UEK7QMJ0J*CFpX+vkN54U!Epn8$cgHJnM= z`cCsYg1DO;*UWDw06v2Eu;$)+jwJabJW{l#enNjox`>EqTRddTAZ|4D!L)`=N^kI< zQR?zFadw~42af67a9ya6Ti8ab%Z`}Qd;t7%kc>|PH|qnmUlFOYe651Wb&nQ5$hV_2Ch@A!6C+@nA~qOJ z#!IkaWUCb%7Ljp8D^A+OGBd zxO)t2>vMh@wK$s~JjZVnvfrdz8R0V>_pG*;oIQHv@?t(3a zJp2JtFLw{)pqVAPkkfL~88Z>3F&z1_91uyy7InM-U&xn4fP7IEMO9VNzoKJdG&6t9 z5ERPF2YowT4+s)jK1b-9n$Zfu>~nG(7!h1YH2%y4KP_o4rVS^#TEnp9$u9kY40=tB zX~OsUbzX8}0J7(;V1#ZadOkiG-dBvTW@g($(2Q1MZ2jx)EBDlpFF3 zUepcwg-$gjV~1Dh{o7!9UiMoSC%45BA<{iQ^+(Ov0iWWH0?LoG~vLorX>r;4(ZBBjgroheI-->d=y@&XM z8UZz4fLtxQ4Ag4hxdm>^F>|_QY5Q#QUZ5?-Eq2$XGgL}$1^4M07~jhsqGt~KuM zE{DzEn%%*@)ep0<^i$0>BzEGMm2CqnO?6wM%76WKyA9)K!h0gKFo2& zUIGoIh=nVO&Ct`R9lko39Ru22-i3Y3I_)YiTHW~UFJ~>^_v`( z`_wivM`RBJvdGRy_*H%tL zyhipd3^zVE)*!!{HoC1R(-#&K?yV(TQ=m;_vc$(@&%;bB=sr?DvDc*Zdl15mdox3= z{yjqlD~%NeZ=ZbG(Wk$h9hkYQWxBka9I+p?gp#4f+lLQ_vy8NBDufQ16i`}l?+m&m?X4U zy5Be-_eIuT6@l{+`uCC_Qw7Dd+cW??97roh;gMiB(F!|6) z9XS#rl8hp_MuhlnC`DlHHYQ&U4<4cP2Oa>-f#83^$E5b;_*Xm(8XGX+XXfqfpWw+(t26eYrY$gkX^FHs6@>)}q&P>*V10~S!vp{s z1zfsA^jHGZv5c`Cb&!A8sp25!X74lMwT*F*8_v z?(uE<>Y}Ydj;P({v}wy_(4ta4#(ZpFFowPZ%dtxj^CcSmr)Z^NrX**36fN zIHX6KRAg>h5=#n71fPOpDFutdZ`c)Z!1o-7}0Y3a?M&dlOn*2IF z{q?MM1e!NfPuke^K zS~t1?Db%B;gw!g>PE2ZcHcNN7zTvzE`R-x%2mX+3hi%Ic`ycUz14UI1!R=Btk>iZkHcIwP#5wKiS9UW1b>e6WBUt%`;UPrz!67rFaHcF zboh&%Vck>6uy{>>2PeEy5&g7yxst;-_~~hL3QkC$dH8LAv^8*3*_R_|4`MlKeq(2F zaPI=rlYFbyA${Q}4zTnWXZYYrlHp#`pbE_N$R%pN6wc^KS0^B|5s{JG=qPxJkIKMK z4&}5&9#{5U|DyZWhF+qJ#Z2!kH$9;@LX7e&&;#$hPC!5;R6rWw%IKQ)r?Gl*ic80! z5FM@axm6a#F_|Xdi%n8vJytlbV>Tb_W4LwahXN`zH%1OXXGDJb(35`$5Ci(Uz?3(` z42WkVG5rAM-PMIg9!&wg3^jt-`y>ztpAlrSkV$hTH)8S5`Z9W}FD6)B?T_sQ(2&vjoS_c=JF67efHxnYg?76Obn% z`Ri%EOar;QHCybSR-E8{(&0Q*1cLk4u9x<7eEfJeD7;@=WWCa_DUd01AcG2C-?~o^^trS2yCgv1(+9hGd^n`lbW+}GMuz(;XJL9f$C1X zaRu>_W0Mp;(mOBj{Wfm@wyj_+4AP(i<2F*h;jJO~ya`dxLQWeSiRkFr(ff4YE`Mnu z47U#6N46bKXQEWIku19Nn!=CxlVU|2KnN>YH2pTtH%7%wbp^M$;u_mFKL9Nlo z1*%~yc+K$viYSWqHF|vp5*(mF5WSiSX(L6R$1cB~1Fy)?-HQgHotn0H9|tlIa5$tR zS|}ggPs#rbFlPL%kMubZonETy^_~l+j3n89;O*sP;5YI=gi>#`;7Zg4ha+@OU(i~Z z+qIJ>D64AK3g1DDAHVkW4wYzQQ^SssB2xLljzImCgeIS{K_ATSt zTGJNgx_nOnOMAlEqB4D5>Pt zbcva@sk_q2R^(x)>mLn!`;~&b3oilr%t!ZLr5nW_G6!^BRwf;IaV&9@T}EoK3*fpm*gpbT4rM%?h#t?DWE4(|nHuO13}= zy1^+B<**HXD=Qren5B_KE-8g@2h0Hx$;O&l%aWAig;=OGsZ}3$XG^wrl>yp^ zl~k(n{geRYj3L$bFj%I=NF8on>LE2H{}xoE+v6ueG@@q<``OE1Mqv&71f1)7TuIK< z2yj7pS5-CGwTiMIrQ2=YQnVvMV1<05>q3NZnKsq5ZNxlnTf-007<{ckn+_9gh?Qe+ z2H>C`$w}$KRqdlXN_Q)&ADL3~ZmlI^n{U6gbjpr}0Au41?%61xPDQw_F)#XHnr>Fb z7*QYWB$FCP&Td)EKxezOkm3ytyF^}u#dFbQXhwN5LCjyl5!teKPLIj7IP>uBoOD+5 zHkAhO&r3Rd*C^Y## zgGQ7&N+Gcj-|~Ahd}8S56y$wd;o3E!g=(K13yP*G(60)jSHN_8WpY0~KinCo<5?~# z<=o9107^Ndye!|$oxZWjA_!zg{HXa)_nq>l`)&&4fO}V2yyP|N{q-&s?zfg};yRKh z#EM|y5mrk6*}P7~$IEQb>r*Ok=t ze3f>^z&v#RM9uqwZx#M?){DOE*vMn5b;XDtjLxQ6EU|v@?GNI)rvzA8W%eaLSt7b1X%jRxQDRzJd0_Jo zz=PPTU6pThW^ejeyjaFer{m!-OgG^XL9}y%)t9@*iWVV@V$*Wxkty*v71ff#f8*NF zv0_0nuWcNI+=vP7QI(GBmV6P3Eu#fwS^bz_X>V>1h|S;ieZTFa@qFZIg?FfBJ~~1a z^jU+=;pPVd9Y0YP#OoSa;udM-+V?k%rXO=!(|fho2|BSbD?=t!Hq_8JRWHrLDHX;{ zU!G;kIUd{#f`=5r(~9&1t>!`EK;aOX&AmPYG#F-Wy^8Lz=i*A9hAtj)R>1h=VzO=3 z_({o5jqf{CZl1?om(MF=x!!UkU}k~aX|di^aij&F_JQW|$MR-h!RUT%7jbz`DcuHg z&WuKx#UmDP)zkSyHlKj0&-ZDw@cBs?6l%7YV>i7lAWw_FDfK-O&tF8`~*4p2MNFzp zsSB+Cfwp0eLe4N8=mujs+ODS(_H>VijBIk&O&%$Dk-IftRzW+x-i;%17c`iU(F z^`WE+b-^5^CZLLx!?fLu^$Tly=%4j9C1ReF*< zTkJ@dx-6OV@zw+LjAW?$+V&!-kqomgRNKWszm$E);bg&cvt4JeI-0AmGJQI`A@!_uHCr6LsR7DC~ zyH^faxv;u>)EUjH*Kb=&%39dgAFonmR&|}g;`?d2K5@J056%zlSqrTDsG*p-b+PNF z1z6cU+FjAGH)DIA%f4jb9%Jf&Kvm9p>+P=R)!wvlMlarnc*Bjd2Jcril?JIXG*Dhy zCI}CMoii)E*n{^C(~je27~aP&S2P8_uo|8Elb_35dt-QjvE9I;JMn6w-*zHkBNKha zcqy#e509>@yN!SZRUiM^7w;oPs|SWA&DDE1q0r#wv-|CSjMK)i>K6;!EM zBvASrc|*^PD%;-Kjy3bP{8VXxKiK+`B z82l&>ATqRbkMb@;1*gl4X(Y~pC-;Sl%E2k~O5M%Lc>Cq5^vCHZUsZ-&<+8fUeq22y zy`DY>Ep7dv9Gl00xAhF0ADo0?{QG5~^Oh3rJP>P`u~`Ux?MI7BZrry!@tY&^D<|MN z2xha&4xbxf{bkVRHV5=My91a6>Vfjp*&WH7aB;0aoqLM#6 zRN_K@5K3vHopyb7-Mg3(@Lf#r+TY;v0fC}&m^ur6NM1Zdg6%MwfS!N}d*h6ejhvpo zPBVExJAnWuruv;DJ6mI%29Oz+zm&#P|5#FMqBjFwHrme!<=mK_J2Mb44$*Ih5 zD?cw-n+GMZgA1Rs6p8OHnqf`q6<0Yh5Ca@wZs|9V4P#PkrXG~^OnVGIDhqrsVmf(= zE3~8rJ4-@vA!O9E&TNq?gfUeDu2b(L_lad=@bXXMq$m@O4tZ?@aO;$ zBY@GNoaC(nxoS99HVUIZQEd=1YE{bAh$#K#3b3fcvdRlt6{}g zy20mwsX>&-*ARfuQFNmnZ3Hs}iKo2G8rT+eWzXUha)6FJjX{-y?jkEiY{1XX5JyO< zU2ck}rX8`0wJxLBHV&Y3B8mVyhvuw-F>CC#{+c08DnUqXW4L+ZP%^}w4l(aqz>ju` zpdjO6=Ywkn|BaNpBi@clE)XL)HYdShDIa9gD4|2?WKW~-!GSq$jS0K}Au5Mz_Q{^4 zU{#$7?OGfov#OeH!w)R7gHhyuT(O$^K_T2Mij@H!t(2{#!*agU3 z&t-bX*}=@?8$rnPfj+B?kNjo{J39P=4Z0}W1rgeiUI9Q6>kwF_B{i$&g%2bgdMNO&9a5`YX$`)(N>}+ ziOH}UK^GxRzq$Ha1AxsTU`t1jib~}G$BbNar+p}27k4a*+jsbqbn2@f?L+|({$jL` z=;gu~q0|s$dHiBiBaiY_TEXBUI9?sTwaP2M}A!6lRxNJt-3q0r4-3 z5H2%~2=p0={*wr|dZYqTB&U&;km3i{>Z~wz6t$C(_!7%vaX75(NdAR`9w3vgFE4T; z@O;c>d4a$}O-^RPq*Cr@ssd2=ULzK}zH|l&UxMmcCT+s0yKwi^S7~b4K^GpmrjGX<^0<|myKryUu?0*6ZdxyTys4Do72iL zb>`2*zw3dBhaT1wYtdjo_*J1n?8N=~##7@tCBq(^M_LOqC4S#M%STe2M#tQi3{I+? z_HrdTN)0JuhzuYs@_Cl`zh=jK;5-Ff;+r?%GpSj-QFQw}5Rdd+G&25v2WUYuH2fv# z4M#KVTJV1r7GM?bn2ky1)9-^gv;H-T=R~p_B_~GghMY4KPS~( zI6EgC_utt$#MXb=IRk>`5jA4FmXQI+u^u0~N+n9PoH?!Q(APEYO)y#dbUj64yG^gZ z5bSZ0A#0I|NjzN3XHTgp*72i+Vs5$tIO0A6?3M(@xcn{}+y4SbW8sgbiFw z1We!H+u?k-%zODILSgNrW%u}Jo!CtcMU#YAGd-tQw58*!A3+)1lN=3Sj82_J) zYNS2HA&u%J(b_{9vA0Q~`ueQTkrIO7C>=R^vSJ+Cb!#R;H!u>*&}n{(&hhCQ*ni&a zRhL+xRF%&>2U^TZt+8e@JvOQYVvfC@(F?_P3@W2CdZjKXsgLjs$$iWjF*zOYnQ;EEnZ{Cm(Pv|gyLGfz55;7W2oQAz8WPkw@rrUiAIpxZ%omu<}tQ3Cl`vZ-WO1R-m7O-GR(hJ;8-4m+m z7vDeVty5me-at#0uc;1Q zm%d*aV~zUNN4BIlor{0|c2D0Pe6r}LQ4k(=?h7IkJbG#TKeQovBfDe%!=0js_Z)xh z(}7~;*V1cxvrwHSH%x_8c$jJt;JiYO?$QxRxxoQDQX=^TbZIOibk41=A^}*C8J%*1 znocZaBYs74gh8laJn|r=DR@ajZ^!WKp@nsSZX>t;Gm*)(N+%!{14zRtv9L$W)wESlL{0*e{TA&Vd@Z=SuP@~b})gYJ;vC-ub$ z}$>93^cRddDw<#NVm_N1zBuWdn^L10ab49tQ`6iiQBXhmCc%xk$CKMC2q z2FKajy)N{=)^9*{f3)^%x5?V_y*+iYi^$z^WGf`j9&s-!RIJXnaUCOYis*WNC!EE~ z!orB&Cc}y(&zUh*_Dw{9Vph!B$F`X^Q(zsez95>k&c@jVz@2prx}1+80=HJ@RlnF& zlS2T-Eh`9Yjc8`qT~e>B3~TUCpMljjWke%>rEfC2b>%~9nntE8ksYqL%4DiGN=xh4 z2*xLva?G3Jh;N`f)DDoLKmixvc0PxxvBIf$6__`r+V4yTP^wX~M1eA1#pvt`ncXP8WGw_Zt)zv2VFemLPRl$#|WGCHEtv$h2%gJN7+WD-5yGEVRz6WG1# z9We%9CpKnCMOamYyzijqB6*Mjf_JW`e`#|kxH5R-pOnuGos?~Ws5|}p;uep*@4sxc zJ}il$#@RGUKg+ZqB*}lN`AX1?s?2Uq#<3<2^5MQ%#$Cw@Wl!nz+miiac_~ERxnfI( z?r)I45nBbsN#35jNGo)lt-G3}Tf9@J9R-)B{rEfA;hg0MYJUVj=V zoQ9=eTv8%Z2~AhN&8c>{xEo5%{cXo-5mHB$7K0Bn`91aSVFpugY>&36fV=ZB;c_%X zkU6qR{?w@pySZ4fWRRDc5dBFfa|RlQ&~frUU3tAqpEgnlCVI{_I5N(McifW4Q(!Ob z92z$OS(5Q+e7AZt?ty7kGGT|AStp(QW{$_n^+!XC;;B<6|5u-ho|(&=XqdZ%nImf+hc6%i~w1q^zK z09{2Sz-Bp(5b_zM)}oi%HDE>I3)Gc;?|S$3aY$uS+J1;=lq;?!YAknlz=x<-NG0CA zm$9;YGCiOwB`vvl&5MD{!bh$S%$HBK{(m5GBZu3y6&2^9SckKb3AGTzOQXz#A4zu2SZcWwqaREA6gzG40G4Y5e_4 z2)WTm@c7a%rCnmlkvj+@%7T?*+1l&YF1gn3?V$)Q@(|9(TTp_-z#%)(-#C8ZEZLO9 z`D{7rE!()B70$j?-`!nIydyF@)>X6|+0+nt#&_H=LpBXG0y4WZk{()EM^l%NjXz?? z{A7_lj%ata0eGc_I&A=Ah1*fSy>QRj%{*TT zI0sBkaq6;X7m)?%DDtym$TPyH8Oi}I5mz-;I{N42(ut@u-uiWm8F#@ zAjcu8M6Fy9GBqOPg=}t*J-{htcNO>6*kZKFg-)4$H`gfOF(Qq@(tV&S_%XZGfi58m z#y^ActPSSA*G+$)>%tE@R;yXNH>?UYw5_r{ulx-eL|j7?P9);^RNhJ~#r&|24#r$f zfeBfrt9Rf99c*xn!k3#KIlxjM#f}V3CWJWT`{P}Wd^Hl>m|h|bj7ibg zl)b45Cj0;*;CD@cv59>cbevL8Z2WRKNIlwJAEHHF$CE!rt2ZM8p&89h@(d-UpeMTC zc-$`R>K6%zfF%JffbmGCrTeV`zFLxk!;Y|Jp^^ICr}$N?qfb%+PV!@G(ChIn)|B-h{=u=HLw8!Cr7m{w7JipW79hq zKf71Wc)b16bwW9*rFzA$Z>WWS+Hs}WuC+k>xv2qrw*55tK}gjyr9bd7pH_a^eg1@k zn5c$gznN@>^1xUy~+q|d~Zcx4ycW+qd40*%D{I||H>W_#>rWxAC&(H^aLozRGRKC?5X;C4PtcyqdRO;-T z0qKoX;a0e({$QB`L=TJgK0BPKc#W6c6Kbv+I%`pq4C>>Lo;M{*(X1Nhj$MnO4b6O{ z%en1HTp+=0WFHNQZwYt&O5u#B`VzknFn_u@^b=V?2|IKaO_#&U9U;coFE-R=$E#A1 zcWM&h)xv1TS90%cSmNz|PB;e+8&KjPcMSkYC2+70NYQMH%utT4ka-=b5`~WR{v;pb zn;mY!%RHd0^O4pRnT$H)96LwLAj_x}7T!F?2sxNfv3W z(e`XegoXEv1MJ5Gm^Ze`=XzG;v5^n16rp6;iG4j~ifF-DQ)D!;# z?c(-{GakM?sEXzY#5zv|>lwm?zDjTo?rO|WSy#NgIdeG9HgU-_Z+yR`^f zmC?*E9h5||$c%2W+=;a%j5gRv?@*CBiQ=adKn$k@@;4#Ajn8yuwQMY(Fu&7d{EG=B zsm>&w3Yb9Wt2a!b2;N}*%2D{yQ<97{5+_9P79HY*sosiNKMe0Wg1vJaH!{i@wG6qp zq=*s@!6b_!i-qS7I^HVM5~Y-9Wt>A{!l&IKveH|%^Te^j=S4DC-|&jwz@u@($qFn_ z11O-J8x&Aj?yC3LbBKglb|MKSyDAF^G*Fp;Evrt^SRn1mT>6`CO z@r0+C%q?q=>jHw)0@;n2vLSb1O&_YttBr<@zc)9{k}*vUAM$-E7+L}{er z1h9NZvuk0T0h` z17s9@x=sd@25!>e)xCQXZ`NTL<}>Jr{0MP}n+XHo{#GS1Gx%)di7w-5+|r3II27-f z$;zdTq+*T_}Y}c3(`(4wfqvWmdDDgIXV_H(;3bQW+^Iflu=v zvoIDA(+}W%JJ|ywSNH4WhG!s}_d;u1(YN(hFIs}Sijildl(55=X*mA8?(xZ7qvX-@ z_U+$;i2PEt_}Yjqw<31(rc&&QEnObCmcyu=wLqB}SqZPdtmyzm0aP zFV-~B(o}MRM(NT=m&>R;7Be%{v}9Ya{re1p5(BJ%!9N1s_dxhNmEY~QM@W@{96RnJO1-y9G z0B4&8xDWhnGw&C9wf@7WOz%FDJbF)Vo!$Y*jkYQ@{Jl>9aiwJp@C-qBeBr(Gs*m=Z zvB$!f6zei7Z2T94j~2fQ%|HnKe}U%sj)~WHahTSG!=IT02|QQry|*!Z8~>YhDlI1w0eZOABgR~a`kPG(*#7`*+40i>e|Z6P1LrNGxHi?{5n zlgDkWsA?L}$d#A@M;yDZeLmab|N2z^$5#V?h!(x+pK$~1(fbQ6@|v*!r)-?N^Ki@$ zxSU{D|NlQD0`xWhzjZy@Gzn?|??%T1KwLD#cj4kx5M=hAPWi+2@HIf4tiuygwoQO% zAGMk7e#udrtkHL-%uG&u^*)P+vTNLZ)I4v@$UQJ-a9tm;H__OdGGy@~)kMggt5wtQHiv zML($vGy-8|{WuH&JksHyA2@FT5dTLhByHZ#13U+6Bhb%G!d7XnowA-am3adRmC|4- z_OS=&+cCLkb;ClgYMiwpSW67o}4>Vqr*2{IC3(}vz;JajV8um)kxM!AQYa={;e!h9}m|M6D zOW?HnbZ+TtqhZ=2YJvx2)DMnU2PgG8j6HKx7l7+hsy2^nH<6vtKtd@FuX}=JEB%}D zBiypB;b$r}Xn{>)M{wfCBVZU`81*|5_yw+t;qqS|*%k*_ z%8!YEtnm;caEKPce9flN4ecMmoym{2Ngg}N{tBkKY`?x@kv@xD0tS)A`p)wLJXZPq*nQ+z zi(vQJqwxeo?Pg>5nd063PcUj&{eBNcGnmqRq;l@Yuix7Yvr0AU@x7Q^I{8KN#y^Hy zDn!_bX5t8-rTVIm6FcZ@`skzH!?*q<;yNHzDE9mAOM}z7pJ!ozM4fTu2uDeMa|f>K zDamx#?!!^(J!-$x|AW1^imS3~!+oVei3vz|NGl~RAl)D!^&*`T0s%dL1B%bT)uRnz@q$n)uF7o(?S3>o9{>L|airwF~Tp@Myg6Zdh1#m+{=w z6(pcyZ3~W@qIK0=0-ylhq=t&i0LA1>y7JJm)RLfIpNfgxF(Z0xpL>j*RjRyr4q7R0 z&}_E)2tuv+W|_#*H~X&1&^@&;Dhq`e0INZ-_HO+GR`{b;bcbH(-SYx#;Qc-Iu|)a@ zdSQ2fuwvFJ!~~lP0q_Ux@INTCLp;bkiRrFk%#5n5VY)ph6PDp0(vs2*!>0xqkREJ? zLfjSt07qb=xJl3J;-uSMb^qJ$6d*;%nGkx)q3dP>t3>&jB=`a{uepO>uKMviF3m7B zj-~Pw_m1&ieO22w!I6HQpSukzoI$nn54+u!_I|Ae|*+ z(itoYx=*us!~S}n8=>1JsBUyubuK390P*F?^k+mc;;)EOtwM$N+m$+H-~@R@)#EWgt#Dbax72P_+7e8H2K zzOb0fn-;m}uZ}Nqcu{q${?L8S{+;e459mI~xyzl)m$XF-_onPVeDub=Z3(zZ9$@0H z{rFfW6T1U@vDaVc`pkW9@?hE+ALpjyHZ%N}N!gq)(vwOfHCC>&SEP1J#Nzx| z&F!643!`cNWBO(NE~B}>VRm02?Ha`sqZ$=Zv>eK|J;N14i2}UVR%+M&`RG3K)DPXz z*fM?2GmnDnEO-@+tXw4`m%yeJjf8kf$jDg#5N%|f0`1SScnmur8v1!f^nogrYTyf3 z14JK{Zvo`8q(y$0$hi`)-BMU7z;_W;gJ2+J6>&fi(@`7UMd_s<=qm#j*D&@9JOM-q zjxB1qohnG|6V3_A`Dj_GCK<^v$2SzLO_qSeLShpH4^7Y0mniKMV&mw)eR{`LSuIWQ z3jlWb1U|%OmdP&ui6MR;A@26(BY`_*0!V@LeM19#^%%{OqK^+GsnvRbKn{t6@1TAZ zNPe@{UR_~w25@le$7(Pob=^4nTXf`K1L)y|*&DxjpQlqhE+3mafSeA>#II~%P& zJ0Os{rNZ6tX>7flCy|Q~h11Ve(>zHck1IFnagi7<`-JQdoCyMKuE+5c!vpF-k0IC8 zGWs^5)?n0o?8V*G`vnoCEmr?YY+OQ zH7*x~UI0>@)?K;5KPUBrNO1SbgSnrf5|)b2h%ZM|;elM>hl`4#v6^zNYYT(kEBrga zLZ7iy1l!)=T;jnZg|S1|*TKAA6!65n8;&4c&Q}oz;qVbX=l~0= zR%fZ?u=qG2VD^|N+!uDie2N{6UR2_5fNzl2zvN1R8$La`60eo7{H$*)l_Oq(u|Z;C3H`<-u^cz~Co;F9pN5$xqu2!~xK zaPHA9Lev&42Z-}U*P}auq)olR1A8m#(b?`+HSK`C8F)5FaT_Z%MlQcRh-oU{14>Yz z_co5iTh!bBcb;#@yBC?*`nm7L!uBm*lbcL>0|Bz*(AS1G|7+;+N(n5d`724`w4uA?HypRB z7yYz5}8$vDsNP_-3ad2*}@lrhGU!`mx0)GAvxZFs+y&S@fdbw)&9} zup^}#ng(F}s?7Se#EMk+eGLdtGeCki-$#Hiy3s&nO7ocw17#Cru^p?cD5q*!hj3ZK zM8L6oTnowICG4m2UKwwwm|6AtTQmF+p>ikO2q@N%QV&7#Fuxuf zbgjFNu-EZtaY{*_j&I0!nw`n zLI(?&hwjvEX^BR$bs$!RnraS3>--V1>)f2=D?CG1%b-O<%TRZ-VM)d0EZ)$m;b

    F-FGT>cc2kwz!=%iGzz>}i1#HVx8P<(*}u zWp~;ce}c~88vUqkC--p$Ef1E3wDqT>F_XDhdc5ay))t3k$fWT`PVWJFWYRMj#-Q=X zNdMdTX(=gp1}>n&yV26h=rN$wb5)G~Wq*3H=+N+A$yIpsL{Nv?+^Opw$Ye} zV2~(M&@;>V$uQ{)itnJP)3f67qeMgN-AMeZ1IkrOgzs8YIp1Pc73{EMmKp+Kou}NY zU|dYD7=vUp+j?7HWgdGC;ADN*eO2+qd3M>MOC(Bq&Q$X^^j-@e;V z_Uj?@tB@>S_{a?$VwUGrIJHTtJX@>=1yKWsR~dSNsXj)=SYd~{J*<% zrVao|3G_^$1OjqESYrO5hS(3M>oj+C1oMO`orUS2(XY&r#}qM}2}YNQtnY{4d3G(Z z$lo;r8-vNw<$3nBfhv$Tu|$tfXZBVt)}=h91Ge^2iI^!5Vh-yv3GKSMK9t-3j%UGx!FukQJ;l ziHH?KuC0)MZAE+GV)OVw|BmCY1waaEeMm$0$T`5H7wQHatKU_*q&1!%WKfe9=oBZ{GeTv343h2qP}}yl|Zk*WXou^YHeWD5o&(@toh~qw~R|BBdf?PkCSL zn{Ze7y1~3LwN0{TRUbN+n+Wnlj-YgVtBaoOLx;M?Dou1CxM29r?Wq`fHgIr{=ax37 z&D-&lQV(hTPen~;Vv#`gPf2eg#de#?MCy*EiJZTxs&LmEvPk7r{Bo1W2ewS6yp2Qu z;P!N%^HLn1U2%J=391BT94sVnGPwn}dkm1SEsl%gu_yDUD6~?3q6OTZwewQ5S-_tV zUA;TwmFM1Z`09AY# z=_$hU%e+GtD}dTYS09i}Ok(+9s=tvrXw1460+EtqD)6gh1DpQ=d4BVMW zrKKT}cjdR`ueA}@0_o*4MCCc!lVraIASBm1-NIF5&CT0QW6ZjFx@ak)!e^o8Zt))C$ z4XNhq(XMcUbbQ&I1hb%{V7R`p&=8d;I#=nNIW=c|n2x>xnl9;7eqMyWlQgRczR87& z5E|)0pkz^AY*cfQ1PXz(lyg-V-~Lc2)WcA?&IHS55Zu3aMjQwm&@Vrv2ik(4+bjB3 zF%|h!q9(WaGKD%tdx1h9N1bL3Bppx#2f{R^4rc`)Na1ojkcEL3y zQ@Z_+8=8!1HTYp9fSW4XJR7KL@F`WCIM}k3*PPUq?{74Zyzt*>o_sG`0(;&+Y@Q<6 z+Vf6Zuq&>ax(TMT4e<*!=CwjVI4n5E^ZcuIC+=L!i6wsNN*Spo z9s+Kb*&<+BjBOsEFA|J;Ub( z@y}9GqI|9)`8p}=*%wi1f(8PgJ>>L=K~D%7TnBpKf7SjVKR;gQL}09WRIrw1 z*}QB%(-6E5;5=#W0M2v%Qt8CkO~C6noM$B{TSKI)yn2wR^u!0m0$n$vokSNFd)oLT zt;N3qtwkJM1m6>&QfyNw{8kKiV#wYQJ1&!`D6qQh5LIi+-d*<#bi#hx{XfuoPMt4% zYVdOyZSWDJ<67AF7APA-DqOh1-C|qK^n-8oZhP9sydY3g8+Q`DrFMvsOU<;{tq_Qt zGaF=~@+2nGjXbqO+58lu`U73E^riWwOf!BJfABd;RqeeppS|pXW_CB*;qm5YK|bV0 z;lA;I`qOIyP`i_IepbQ+y=Zn}>Y(5y=5NrBg@3EFEHjGq1SvMj3ca~&9}8J-snyeP zk>?`a+J9jL;f49)^C~JHih_cB1_I0*T|Q(m4WT+q85UIejoXRgxx(#yMf;80X+!y( zB^}By7A!r$WFG)@21Db@EX;~na?*t?hf-{2oj23DV!35{?^@=l*j7Khiv1Pc*5il!aoJYVnkr=%iGP< z#NKdT=?vaIYa#Ic!H=^fhXc&1W%$`1r&M9$dFicXK@y>NA6uzJVe8Kek=Inup%-z* z{FAL?2C;RD{*|qRDRRbhbM$U`KZRz|EA*nh23P{mTP7V9*k7m0o#@A%S8Sa{-u7eV zaK69UIv$q#mQ8VvHi|j^-7$^W7*A;qGJLd?(VvWkSe3kviQdalQxY_QryX)y5ake` z_ofr5=pFnjtv3WO@*xGLXL@KXX$9(ITqX}TsGH9Elu5XWXT=7?hGUUDfIO0z{pL=a zSwsT7pB08DV>Z}6+XJNcTsdWq1T<7xpCsJ|mbZ6niocvq>S6(ux|DwzTpMQ6eUDHX z_^#rm=~*jw1A>!C!Z~2A=2k8ifMOtN8Q&gYkbHVQniDo3H~9(G+Km6H0S7T0M{91cI&f|L{6-uzOF58e2QRU zBG|MxK6N={L_vY;lL5O`}bKgJKyw|2$X zna`v$Z%n$^yOF+kz9po;dD^(;OPHb3V-P+rr*)j3p!|wTGpy*i2#XgLb$8*Hu5NPK z_6zZDBot?kWC?WTN+7V<3ulT6-_TyUb>5MAi<1|Xbd$>B)Adu1@96}CEd6*0D)a?Q zfYo`H{WYq5K!Ao0ymT95-f248;?tkFD~>~|e$?Nus`m)7d{i6&3(pGV?XD?!|0$yc z9Rnie2C$1zX6g^PnY|Idu&?jYFO$TzoBjlUUGZ|- zAch|0&IJ|8E$nqv_#QRR zZTRH#FaVRAf7nbYwM1heK_6|F-Wic0PHu&xPkoOojf~KToEk=0I-)8OP7BAn=xkA~ zD&taO{gSqyCEZgE$kO8`u;k&bBd@UYQwEd|z12LD75MH<8>WC)TDP4OdL3I8M#xre ziNCq$lQ=(5AT3`VLC?&^8->Qr z96y{11TTD4u_Ty1OsF9P(PjUjK!P`=r0m3__M*JN@m#ji>@B(c@ z6aqG!uJ=S>stfjzfx4`?osT|b%n<#F;N)vIukyA9#a_;)zRUmuhCMq1h#?r}#&g=%G zz?WWcJ^M?L?o@o@hOH!OnSXiYn_vVwUrU*Ub%<(kz7zT78c9O&+I;bL*c33Btft@e zDsiU1>+*}(-yDSpN}DIZj=+%u$<*T>6)&SEgj$aiwuu^Ee@OB=@ghN0 zIjPfYk#grDU#bLxw@4r2vkV^+FCs+WILYf++;Z?p*vx}IN;l@v0S;Uyai-ddpJuaB z$yw9K2Bq`YP8D`JVcH1()ODPFsn_F@-NrBR#0&)~3~6M!w$M)q_pz7RS3bn8icrC} z2>WWWrRZ`b;`Jhe=O!dl{Em@VYdspToG&37zeg-BQC#Mq3mpp#JT|hwH`oJxi*eRB zyJ6dI{|+p}FK&Hoa!Z86Na5=)T=V2raH_XftX2Ynyc|@Oj-le|ZHaR@1RSK>%HN2a za;G1#fpz+hiQZ>^ElT7zsFb5D^KZxEDK3i%V(Y(4x%@`?)&0&&snQBoIkgn&k00bw zjUNvBYsVJ2I))=CS=($;Zz1V(SmAl79cm58f_of zk|PgGOr{t8*#8_aE^*B~7y{g^hXpTp3@uu}i%bf2P-(udbgOK{(VJU8?lu8xt3IQt z*|iwCmthk$7WSN0D&dU{>-lN&y~kEvcoWR}HgPPjg+0O!@$5YaoGldn3Jdjf7RN$Y zjc|`q7sF+dSY?J+jB=@DG6kXoH<>)f#ae4d+#G_pX>OwQ^{ReNCKs8Tw3Yn@isA7q zz>O{WKLIz;M5_V<+~E8N;Kmu-bZdY~F)aZfm3_FI7xn4dNl8VcZt6>`G3XRvsURwy z0Kvqo24Ta?^;iY?>fJ0vqNq6X0rkd7-W^CT8AA%3jg}QyC%^=e)_G#jQ zRdE>>+lYbX*{w8u14?@Pkdcrh0Vmb4<#YyzzvLZJTejwS#jh7`K|v!sW%CBK1(qqx zrGNWzuZ-rv@%Ywo=Xhbf3~!(sH~MZ&qT*S`^NkSx6^ zRJ^cq3Fb%^BBIivvhnTr@g;!vF-eoD){FQD;pS??CKi8`H~8MT%>cI{`3};N!H#nKuk- zLVPMZ5VlzmlHQZ_5BWzMnj7N$zgk0FOn|b9b}_Tj>=UfiA=hD9uwS^-j4p^Z&z(&Z zg|H8PA#BET64v_0KS*LZu{%9vk^N>m+KNMXk{ht(o`I(0;#7hSc_hfWMmv6hISePa z2=f2_b$*xWc+AjA{E|qSKx$;O+8d0uX&IQ(ftYINRnsr4rnCo0AK_W&ecdD~r+QwY zh4&l$=3^n~Tq}aE^~L0xt02dFQ877qi=QheYM)Wo%?e|m8q>b}mT)GBn!&sbyZIxQ z>wr&b!u16RdP|7rgfEo@F?2HG-Yf*(Zi8Nlv$kD$%7v+%ab8KNe~y!v&x5*m<@xeYHCkf=nfI;#%+{R#6AHZ!i z*C(8AjNL#yNq-DOsK7Z2 z#RZ50jo&!@Dg>o!BXO$Gn9e44Wq$K*bX!&BC&V@M4xPskZEC9!6>zFS?-?%GxV1;W zj5=Io=vi}c;mG}<6MUC*TtH7c27qQG%joEY4+2VOEiRdIsW(-cl<~Dt$qkK2TJR^L zvYW2_0_@BE^TfNu&SgQ|>FGZx2pP+s&8!PuK>(?LW!sg5Ie$ECY{I;BIeT@!_vHnlX z9muwWuw0-HLf={B1{ZoPBl?*!7=~C?|1qA^qyGgE2fCamn7$R*`e?g>&+y1^gACJ0 zrud|aTCsWEv8ZJWP!CpKJKR8a&HUS4Y29$swO`^O)P5Qy!u%5Tzp|Iz8Pm!zWS6O9 z17zR()kWm6+KXeq%duCw3&!c6EMq;7zUviiHs3={_F+<&q?U^%;<8KOBDFMUPZ)v) z1mG69G=(_uu4ef)`Z*G==Z$S&ugF|VqS|n$dfsSd)EqIu@X18JRd7ysEW4wAQ_i3( z5uj^`yLtFfb^GU^jK#VW1YzdM%LF7s*l{E;oqSc;*kPbQ#_SJcoo>`H^>>_}>Up(; zI3;1-o%PMm59Q25XF&DBk8ieD$)`|Ob^j5AopTYa)V$rQ?UviS3VA90yEqwexws+W zJM>gcMl7bojd+6N&GRR{L}={Xs@CKPnliSp92T{`0+vFpHS)=XuA(|MgT*-f6NH++ z0Ls5K8&eUm+kQX%4bM#`QvtB-UqQbo)*gZ1iOeP24P_;f z)w$!wpMS6*m|e$q{%sO8(6(oAI*h(kAZm zQzU1tU_uV01fPix>fQvQkHL<|AAu&D-Ce{U3#rMsZjFJYN9rl>X~logBeK@I?S&;A z@(95Ru2T7J{AvsM0+xcfR>hco|bc z%U(SgbCucrHMolS@YC_$$>GRp<=EC30V_V>33|>EbnrB z_UNy!zy@=K*9KmMvAv#m4^I(Ve2PiwXui)%v|%! zsSsgXO!NkRwRDO;HpgI151=#*{}((BXd)BFPjpxDG&uivIL*0$S>hmwAl#ujKkwF$ zcf>L9Q5?f%kLJ?U)%rN0ceHzluyjG+0wznQN&B)~Rajc4Cn^Q7EN-CjTYh~{M9JQV z`&uV!;!u?7)>D9|ArknFr@7l73*&zn;jaUiP{PfGCH)AAfv!s^4{dx_q``MVIK~4zT5AqJzym2NoFcOgXe70C&_S0 zvoczGbiFbisWM4}l|}{{IMCe-=XaI_&OfJ#rtaX53$1^MgkM2eFcmkiO9zln_|ipV zjt8tVAmw?v_#ooG>4GWT#VU;E*`DOo)4tp1bmFkA(?&fA5T#tNi-)bC;m!b96*?K%(7H0(VT zQd|P=ZoJig^-v*Og`(8_W2nDe1P`C4W))!sO*y#t0CNxZWje^qacD<*?c=1~C9C+J z%F=T6k?WV`@DX{Cq?{L1K1Y!p1n9d%M>n`i{W*IbFz4fJo5@p0sku0$PA=n|Ky8fY zDi?EP#x6ykwo5M5qpD<0#<+JXxfq7+oO4fGMISQ^d!)X+({tBRD~3yDO_5iyeA`~S zJi^Dq$lPdc$kH)%k0RmbE$k0#`}v)#Lnz~S)8uT!0omg+CNO`~KC;Fn$)7}i*oJ0@ zeZ^ZpkVjs$@a&@*CYPf58mSx0!HoiTOZ#%ecr_jtn7MVPr?sAts05-2f@+Ajfu$-= zQk&p#ogK~atf4Uzq^L^d-nK$Bu(w!kFP*jljW(moZ0o~A8Ip0$MRB23RS*W_N-Y@ly<|F=x^K5 zoDq!(Zlb>B+ImrT#PU5IYYx2N<%>D*q1%>Z?(4OAmIMA>T4fCBJF+k2_HOi1+VGEu zwe+a1*q127MnSP4j8-u8#>xVXj>J(el27fGxWYg0R3zX|^`7zjmra1+w{Cj)A@f4G8+!$ zTt~47n;I>HdWYRxz=Yaz4u!}tR;pS!t#&fB1^9X1*6A+tCKs_cyFG8IzZWl?(E+l+ z9Hzw^1J^qpjIdtRRTEs!04Y92tL!|{m(T~4*sES_i3%YO!P!A9 z;!jacC5>lxB_@~*3}qZ8mN&p*PSS}hCrmk1`PO;$n3uQJ5e~wD{2d~&W$_^uv1NzhM zuh*m*<%Wg*A6ipb`|c-Xorvphlo3jB|7KrMXt1%Wj3%U{SV-gxX>IK1155xK(el09 zGAbD@D4H{eEcPh&(yEO>e|YBbQc+I@_PT<4m0De2*{U;`tJbpAQUm+(>mpTy#~UXl zK|ZsUpi!H&J=&Ru^yK;iwjb{s#XLwbnn$03K3iW5ByM5s)tf z;5{3C#(B))2{eRaY?E4(OUZwx;6hx1NBbd3TKurLUB$ zLa5N>K*0!Hzua;4YGRbhtS>*xE&E;)E0~olCmJ%X=7nxgL;c60T zKIP_dW+CM$1_ieIQB(jKv5?~I{KG#Og1%r~2~vtHajy%5j9lyrQxd|`&tr;Wim4@JFCZ`ptS#p$bkl4p*#nu&$)# z>*S^-MI}AM#KNydYmKpbe!cEx7QdjyTh-zlDp*HgYAe=n8?#8!wxX>e{{5JcG~aZP zso0;@pq3|;vEQoPG}t^8kNR_LWw~@AQ@Yim5?qmxsD;h_8oLnZ8`mPhr-f&!spzL( zGy#`_kDmYuf4ojKm#S2AxrEg20#AXPtZq>~l_Y3=ak^RNg&9~-LznG0Om~H8DG2zYtKB9)ifswtU{cK zzj+e^5;C|Q6CJef0B0$|=>S)Kcvrn!KP<)+9^8UEFAk?F4)Bk31N-mJ_5qmWDm7xD z8a*?i^L5qk^7}4g;ATXEN@|hPzZ{y&giZpFs^RC9KKAEucPd{qN3Q^)P_vNzh+PFhVX8lOS^d2|?}*gd-q3RiM= z1^s23L$4%P+Ghf&GcX4Wv-N?S2j3lp)A71T$Sasak=5ibGmRd9FZwz9QyBy+y*H4K zSiRc(8~6q8T|nKSYmbd}c8#zU^SU4M)k_vsUGgJ5KB!Ld0%J{u`=U@nEl2^C-1lRg zm%%EX8AQRffDu0R3?wF66~n^qzMo8!$AQAx{~-33Ho(nssh}B@_Wu+BW>DcFdTs`C zA`qe@Mu%d;d?-ekEKCH3X|DRjOtB3?Xv8Uo1|o{4$(4B@KH^cB~M!`BM#*TPnHkT4dElnpI?yR~<-B}o^iMbBBR@3WOGrhc% zbI6rK1t0W=kCb?(qP&i&i%m(nqO}~yhTKXkX#-ukfg~m zV~C{WeEjIG;R#Krtm5*7Dqm5SB~l6~TbZ+z?%u@ST;m$81$kbbR1OuX)>?2dvH`Y6 zwX^TaulU9$qQrl;6PL8LA$&bw1Z5SBEUQHienJUkG7umPhaH;1A1MGffR#CO0hb1w zVAVKrg$d5_*GFWO`=@?-IQm;iXVirvul*iYAKiCM%L5eyD@T;{WH8_0K6R(Gb(#Q78m0V-Y zx6KH8CW(5%&5t?`-BGH0$y*^?=h;kdG+e}4{!YW8R+Ar29t2`@m%6$I0`M~+SI>Bb zELslBkp<+eY(k{MKo5Q)Z>)NXK;C|Jb5_SXR;8|hcX&9d^cqxIv) zVg1o-Oo}<^{bdT2ALBs|!lY1$)x(}?Rl4?a9cequm!vn|_k-*lzb!Ae4_!5J4cK1a z9juWLT_tXzd?=(TgBsYBgVsIzcJITqHweASz(u-v&b~}CGD#w)fuN53AkyJ%;ym#; zodqf68j>9W6wxlV3Y8fpmV_*8xC{?s-TA(C^}9Gc>o@dO&u8B%kVF1>9}qatKbaYz zy*8BNB6W)tpz&+aQJenJ2rPjbfn(Umh*QuAB%RBY^tlVxS;4&ley#Sfw2RoiK;Bfv z`^18ivS!Xa*>Hm36vlbyb_Se(1+|26{sFb@;r<(_C6LhJKS3>xe?To^R1l~|c(0xD zew)WaI2WV)ZGeCLYLzvg{RlDbTp#C&ULc4sMQxrdK;p}tq%XYMQo&_GtUl&ILCR!p ztvwaC-C2Wez{H(Xe@E8BzKBKC2D7;#11* zmIi&wff$H>#djf>u80Sir@_B5PsNjmbO!s**a5_6{=RbDeDVi}@*GC9;5Ih5xYpVo zJq=!I{1GO3k24B51#ywRx1mF^3wJQ8+dgoAu2$p)V7%}ELf&VwH&icw#(;sAEtLfw zDh?_|e7}Tg%Zuho$AcsRltA4~e81ZUTu_PRnBdI=z^S*T$si+vhcgm*~LI%jaN!V#y78fnOfR!+;f zCDP52L4r_7Ec*Y8(ZWRiKVh`^Ls-EQxi#-n1{tE&zYw3W$9~$}Rkq1LE>16|;WMx~c!r8d zmuW#?f>ai?z0^A`;;NalO6Ql>SBfl;k5v5eA^+1U*`%ox2wRMlb2a6<#U}t{67s(S z9{8gSqRa4TGU(v($1-xoi*lW7hxyB$;xpFA@jR^pqW2@S3ABqjE7VcYpwSnpyrXW? z%_3)>SMfQY>qV%2xOZ2Cwt`~T%b#~N*8Hf^SGHOi0#M$)4_?;c;gYI~`=&sjhEuqO zQx<;@oOo6PHn{7ufl}Whlt#^Hje~-)&fAaU%Nqgsq4RF%wUsx~yZ0WsC`!#L-X^!f zmpJ)B7^s6d74GV>3&HQgiPy_vbCU=iyzeyhWG4jJ_)?aUF0EzH+R?*UJhGBDAzVt90l2qFdP3txExW@jvs~0= zCGp+gW&zm(TH;>NQc9A(HJdM{QmG=ntG|o!UAy<5L9RIG&9#ZF{S@5~Cvf#24SF+G zP{u5$@R)Sd2fK2!6n2J+i-B|GNz(`>Zu?quO6(VmhHHg*(kM#-MQ=xz9pQtYaBS`@ znJHSyNnhqTSr|kP`M~1o&8#rA$dD#&?;Y?|d1upN@Xl~8gqEi6F??mHEeKB>8T~nj z88oDnc}$&txW(F+Q#du?IZKdlsSymPrlK3|1eOaM<`FRm4*(;vZ#zK4zct`KVTz#` zT=X?|I1)Xq1Y^LmgbD(#rAPW>@RAYTQr{`Mi9s`7dB|%oqZ)QINz)h-(7(Rv_K$&|z(H3wNsz zUzmEG^m*Jl&GK9Q+}o}Wh~pxhba93UD}Zi9y8HO)z~kJ$Xn&omPHD`LbmLnO^0o|& zE_}c%V>j1cLsEC^Z8Kv}-=qP^DBf~4ZkK4i@b{sXZGWKEe+oMB`On&i}>S8WD`(`75|C#YOQpBUJlIPDdAsvNhsna9NIJu{DEf>UTDuRYa&)c#G zAb7;7O$T7fwncrHiyR zI`xV0T^9%Q{z92%a|?}pvPrp{RNDPi)NkS1htzXH#Y~GR69J01 z@#8A>TE&E>9Qd=O;12w<%Wo`tWaR|$(l2#UZ*-AOsFlYUxN#9WSaSI9wLMyvaKk+K zUamx9)%gP%-rvC%rcL;?-hS%9*KTv0X;BSel?K~~@4JZ(GK;-d0;_A2=ZRD- zW5zxFfxQb+bS|C{2ULceZG8WNM@ew+9DT4CBz&LFoLZJXq&?@2m%s}BEuPEnPOFLU z&-Fl8##q*oU$VOjvkdoF_qV`YI`iv`xhCqgvucvk`ai^+>n+AD9U1-wk8&=JNt}sQ zmQsU19PgRH3JpqDM9=N!6cMzCXcWXLCTnvlcWT;gPR(A1t9NtGH}h+)?N@c${0&O6 z=lLfnC1=f$=e`CP@VZ>o{U;`c@nuV(NGqipLX_uz!K%SWhF`k`aMvNCItaKoVG8AOg??Ad)@DMaO0>E4>wrA~1eU zpHmfdqn{gtIU*UNt?H2QpYFe3aVC43+K@3_5_@6>o^r^Wv{weG{46*&%W}1I*QUM;w3o> zTS2K(RE$Ws_+V{lCu-6XaBS`+b2&t+Xf&=+ddsw}U0#dDNCfI&&R3fsFHDU`ty+D)Y3sc?Xu3e8UhtxQ>KkqYQd1sa5DW_EgdC*^3oWI#20)+Gy zgv0BKI(%+l^wyp-3|&XzEP*&DA1Mpd{)}+`2pWNn&y)@3UnBwaYjj1Op8Uxf&)Fno zqv4FEx3n2r3B5I7jsGa(|HD)UP}_~o)2XjOqdv9xfz0odm_F#*M0+=fd@@eCcU+|^ zBYJJ%wTavT;YHjmg8zsugw^LJL}iIwU&YH&r!fy4 z6o^gG`~w1n?D-7kV=$UlN|m4;gG`?Q^)(k_@F;nkU(~~{jFb*L^-u=0;rZ%wadwd(?B>d4H;H4{VqJSe%j?F={_}d zC<{q53#FI_R-E0&pV3ZleJe9r{~J=~W&q@yegZkS0h;7p9dH|VvR%*JtQa%#^HGTC zfyzJelOI93n~R46zfm7Uo&fN%;Y~&&2tt1T7qpXgFp}c-I2=}}10xdE6P$nmdgocs z)f(Vf<2|0SY+z)hFi-xorv44V@^3%fAA>B6_TpM4;=tzG_Q6#Txc_SIXa@bM_u$It zko8Q+tQ8#uDMp=Y1p#|xT9BJuPc^uY)PhUEnD~A-Q||uMk!D*!Go^jeJaFkz2>Jec zE(9!IwW-#xdm2s_qOR})n%xPk8qYvqWzyLj{uldy`O5x{cVdAL-pJ6pJ~>E{sEt{~ zuq!EG^7ktKx4+_l{R23XkIAo~^&n^S|Nb99Tm669_fe97UL;3m^o<69bG|ZowP28a zUW^fY(oMMQcOVHYuQgXBB{DidJ9z>w?x|V)d6!==4N^N75Wu+JIRxRHcYuG+(d`oA0@(^}ivY~Q%%I=Jf&3uFZ6O+f zJb41(MDCX$cYHcO?a78QK%NZmKbASCxpDhb?36>rmuVsuu6gSWcirPop~hjq!Cl{D zF^_JButeXqv&x$}qht<%ZM^d}>*AB&faqq?*E3HYx}j$d4}D%1Z_=Q`UvYzY;R}pk z=b+zxxML-AV(B&ua;+idj>vJbM?>Eio;KVIPGIA1ssYBtoWrQriaFqPSqB>1s#dS@ zSLpzMGHgH2RH_&2MjRluKF>uNG)dr5p|?@Jq2}}=VeS>d0qxyokphXpS_^WRt*h_$ z{xP010l}j0^C`z_cgQ=NJ5zIUwpj<+xTEV{H{h&2!0LGou)4+ zERmS!J3fesu8;Nmy|c+4pyxcY>S)2x z@`Xsw+6ZD+-N&I#EC}2>id-aQO~%^;46ZQbant2?ruV)Qfc%bm%ADTdu77YU{-~Sb z9GFgzj@$W7zrT2t7v(|;2f-BchhguU=O8&l(=pJxS==t-Xy938O#jUJ@l(7ZNXwZ4 zFxzdOYc9>+Yj48tWkM3#OFv1=RI6kc&|^vtau5a&zXmev?yMJNA@JkDuN#^HU)Q;9 z=TOt)4U?0=DbOS4^n=*KtLpcDw)c*0N;5nNy-$-%IgkYU?sJm+ps)E1wA@rC77LK# zXZFBW@~otOKT-_Dc-hSj;;m&l`5~t+X2HjtQhR;3aM)G8Pi-{Jn_$y%47WNLV^wsn z43JQS5vJrLzd0x$gPvE|Z&He;H7p-_)K5^B~Z zKULKIeI2mU+GpK3JEuWN5SH%8WkCjN-Y)7z2r#SRp{awaD=Z|E@N|}g2+R=#h$ovo zAR@{JAfik$jYYHa%z@kh$LbbLDq-p$z~KE{h;lTW1fVnUj6WDs()-igEWfeZ1K>Cn zJ3!9mu$Q<|{Z_b1*Uzwl6M}%$LWq#ewdq9Xd)VUlijec)(790E=<&_yYJmH98kj+} zoUYw`6utet=^SyOw|5Nu%8!r}?xUTP1RBpl0_LgdotmZi9f0LJI*b3=H}TVC9`dV}i+@GH|jUl8-f_~mc~7i+eKWIOXa z23NF9+2-qK+$zoHGOFL4RnMfF8JV!+NS%B(4RalzBPMKSAS&5T)8$2Pt}_h12y7!W zAImx^hXoP8VJSSLH(Ua*VX(h>g+X81tu+Ba&eSO8%|&M$|9G{lb{KGu5z5RMW-q~(_v z$T|r6bV%Dx{D$1DzEGz2Fr=0q2Q_G@tt|A|OEMk39{(Qmw{3`16!zLbX(9bm%06cS2+Ir zR|KaTpXnEo)pVv7OAzDariD5RG-%@BU&Ely+Q!_dx)QH}7ym6m zx&)|Rrh#s)O}UhRz~CzbW-`vRnz_r1W2;x|$G5QW4!0#^MA7Hxw|v|nzp6ob=z$5C z=TOU+>Z)F$(m^i*)UKhQU6#c)E0jIq?rnHNpMew0ZplN|(~937SR)?Q1JB-P=rh$C z7lQz5TjS)G8w-OFKx(YP0!na#e&LMa>^^B0%{l~a;Wh|yNmr!4pdY+<0H1nXkinr~ zh8yT#2?8EJLu~HqV?YD=;PKWMXmk;mkQ>34E!ejUM=F&4LhUz^1#1@JwfC#fcPB)6{b}0KExGhXY;99-x zm~*6-*%+JkupySQNz=`vqym9a@4RGK#l8MQ3~rG{1P3NZ@lpUhng!meY3nSG@(Ue%Um@IkTzc$wjG@g5V~6>YH#OWJiogg*2Y0< z#Ar&GF2_Tl^^hXhq5hi@RbS@Vhq)+!5{2Xgk|ddN4JT0cCY_@{QW0?uZa#%bD6=K9 z2rk50QPPPleS7atmi0rS;Wk|g|BDcwV-PLz_Axy3N@cZ14o)ohA{jeD1@xlV{_flR zrz>f@l1BE#!x*v@^zOn0{|{DFFHb&Pu9#?bFfHZTUZ&NfXqg~PsL_0&cH;Gr|7{{T9C#lP5=s8Jh{LO;fQXK zr`^1`WmRjl3{~Sv2eepHa5un-hWnps{S|AcXJjpzuTBmfqnwC}#IS&R5KnojClZBjKmFMHtqac_U zXe$?t1W9@Z2Yokn6nbV)p+YC)#YUk-3jBvjCIm=PJ4QYH`Ir626B&_seFHG_?fzO(ZgmeIQ znS)Y}F;OW`_ygaVFZ2^}jez)~D%3mPpYYQL?5IZq?GcticXe3+zr||mE;exUr{%2e zRs)!Y?;>8YWoNl<65qYeU%n82x@hmLDqid|P%cYToAVqZm`&(th{p>mU z%3{h=uYix4B7%f#R_qaF5w^RHwGnSB)a*xM@M20cqNI94Ae>C}7C*ynqQfC~A|Tg2 z<$uGuSr3ewpL8yFwgDXnSq{!wWSFzl9H4wT{rvvb z@`tOG9=P1|?ttW@;=8zjb0U76$L-T&a-(>{jx~ukC(4d#=pljjk#%mg;Jz=ta!w-< zl2p!pq`JCf8YzGSv-tRd3-Zc&21q|^O+09%k3-qzgn$rHLAwwm1qBPH8fDkTcMA?>(5QnZ|J`cXs?FwPp6nghv7CWP1 zXW@3WfHUZ$)B|zHYF`Ebc1s*169L6HdRt>apJ6gUtst0kA2Xs6ZO4t^9}vzRBc=n) zmT9QyYYHeYfN~WmCg`1k@3Tu$g@PJ4A(8#s4dwTIz6=Ejt>&k|v*o68yE3s28&e); z#$I!=D$vUHfpd>Dd^I6%B5=F-kRD2P3=iQ zQB-F5RGEL+digh^CGjut1^E;pJ-_2dlE?9|%y=Js0l^1|g9(u#jefFDW-HtlN=EzH zl=4^nB|~LDl!JftaW`!t6S+bN#1CV|z|rUZ_%@#z->4UZphWp#=ZRLq!>?G9CsLA4 zqz0CRbRr7q0%g-A8Gp0@%T}qYrgCnclFIj_9rC|%FGr--k>jRvzZ6HLD`+4#<%Krh0}^>y~K zW0>_RM}UUCotozdCcX9|Z^K&^X(J%;beE_7!o8h9CT=0{d?(;zM#X|k+2F8|jRX3@ z&>5r;_aH*>6qPmgOu$FZ2cs8DM1Thv;z*^XI$@H=w$>&f&EqSp)GzFJAl&*4uRtNx zV-F_$)hiC_c+rh*Z!)?&7u=g9D8NYzy5N$qDjoJfRMPKQhma2(z9d;l!9W4&cJo z2m_oj!oLwMn&km^Qv+A%5N~H*>%po%h(d`!f0$VW{jsskiV99AK=1vcb?w$*sbS~R z@m^-HDw8W!wz9HfqmI6{lQO|A;?u2dX`@9TSKOQ*tqLF)%kX;II*PhP{uZ?h1FXL< zdjYPy>G5N-AY&5aRwI4GV-(_fL{#J0w4yXE;5A3Zf#TF%=j>KavFQ!)Ti`FqE9pnJ zN`G!vlN5|C>*{rUs&{Tr@%HH*xd_E=w8sUU4&I-oRJ{W0kA<=wY!(}OsT`hAbLf7^ z$dMzw{eb%JPNZFqJ&Sa^k=ZHT2=TUb)m9aK8z^WmsPblS!a1Z{%(vG>h)QBpT4p&CtmY$)6=$-eypAWBft+&U&nXSm=!grjXe ze@d{AWk54Rqc4&aHm;7Y|4?Sl++&dYokHI&O{T#F#qxW2zikkpo|IFj^-A+D`mx@* zZn&Dp)h%}Jm#5nf4&w{>do`>I1grX2@5ITiyF^tClrs9?vJZ9iS+okaL3O&fA{PxK zw8HOQl<53@{-rX|tI4cX&^FuZ`|+I1NrE9HAnBE5S3T;Ax)u20ot2mq(|umGivzjQzoc;-rrZlKNbq?G1`yju|%;G2dAP+z$l zVjGH>M%}QE?pd($)FGdGIDe5i#wqjWqut&|V_A}L0S@j0!-{mV% zIJ#BI-y0&1Vx}Ol>apzo`L6AVTdO1%+XKIt+PXDsy5Pmew93l8=T6|)izu@T!9E97 zd#l<75H zt=oz4ayV*qlZmNEQV;7R_S;3=(wIA{A2tEPf1GFy5o5OwyB9loYd+>NpYi$tS!!Aw zek;WS!3lCEY2M^DGo)oCS2B>-RCbk75UZ@MhZpI-e7bEgD=`Z(jN?7TVJemgxzpE( z>mGCmWJU466eVBYdHQA;IyX)DA@2+PSAOlyGm!?(AJaB?tI1VZZz7%A2z{j;v)=uY zXltC9f@!?S40it@c=!$doARGD3c?(4Wfh>L3^=_^WE5GTGp(N~&tc1p>(-{yTjP-~ zl+Hkf8E{X3zg**436r@{zJrY)4}XLle@{X6oO3g&X@MN!J0t45`RNRwpxQc2nDa;} zh}1_lwcK>cW(Q2JD5Z6=LynTWSNW{$j*1fE;XILC&EP%|hiS1~FIuVK14F~TQ#Fhv zkL@=on>1iN7nH=v9KI}XzXolfodCHZY)1?|W+wCMXTyx;dOoIeff`;|&U38ny-GNe zG~G0oT!B<0&!)Yxhcf>(>y@bgbYK$ybYM#H3}vsuO~$cKG>g%(2yT~km=bJ59k8I- z!5!mtN?FW!dUX5<{ybR2{kZCbcH(C-hiOPOtK!UPgvkz*Lm-&; zEThHYKr^EV7{A9usQLXtgjSp))UJmAe7m+8rC$ACV3t>w3$XaX!nbCaTs49gu8|5c zR@rO;5DX~V$1B;0IMBBD5JR5?LdbOiRR)FMsc2|lZ_Qx+piefJ!1#en;8av}7dL|7 z@Y_>Dsr6dBPXvhfK6@y80V9z;Zb~MB1Q0oUrtnGebrmLlgob&9{y#R$tV(-3q3fI{+ru~|gwjc#@RGn)mgMxDqeBFPKOl5wnJez6bl@x$BfuAnxLJmOzHo*l|s5~p}Jgf=NL z8S0pU=;a&zM#VoBe3O!oLcltpJK63m(Hof9((^??ip$Iy*L})!9#2v0TW7FP?nO%v zO1sB&>^(Hs8dFokG0%Y^tdEL7I1KNewIUu64zBrtw|qyXfn*ianw0-nN;ZBG_lzM0 zt2Hu?vgQC{=+$okH37{MdTAwKNsOGi4V96dWS(@baYr_|iLBU!P@z(p6k@#SEZ@gJ z4YcjBr0-~pbL%yVbPGw4wUce>^^u!PlIXJqT7+J>lbuQR?$YzfypM*KcaqDVfPTcm zqAUy7v9J*~wqXUMzw|jv!3P@IlPY=z=ayee(n_`Cq<;s$fF=Y8emVB|Ocb__`)O}o z`jF?`=NM9PZH*C@HQa7gdTKj)ofWpHY*1Tj)t0j14us2BWQXi)hR4T4a}|KsRPt%1 zP$RgOaSgYP5^q}E+^Ta@8LE$&fAmQM~7L(m?gz6aU(n0Q92lh4N>4HxQ z12cJ&?gb^Ey4fdts{%Amy4UeWhyk}Ne~Nti2_&a0ACOJh_k&W@m0%f{eiJ*EUkMAL8%B z>=ld~`Qzfs8p+Tq;Wm+1b0^kK&n3pzWu3Op-xo=011K{;IWi_X5WW=dEyL5#`Fg-x zHi0=+##F)hKDae-3~c#%)2Ip_XAZ48ObIp(dH4b7mGRIZS9O$`UY{!k@_8L42n#Q|sVoWVQy2KkC969PLM%-yOx}i9TSn=6yR-WJ}u0+7tOaMoLjs zD+V8$odMqby*oB4F5{JC_*(7!Yqd-pf3sS8&Hlk^iPPmTbOda7=htr<_N6U(LzYB1 zMecGpI}Dxn1c-1U=TlFas9UKsI#*{vbYn6$-UDZX7ZtljJB2z~H7o!Et?KF9U}QEo zasncz^87R0aK7V?{VW99vqBh+JO4SIilI@+D|9%QKG|&`yy3mWqDrG+lU?}Iu79P}Hu{mK8Bo}ECf z(qCc)gIuDjAth4k`x4Ug9`Zx)_Qj0yiQArCVmU}IW`5-@@?e*|32Ro_Eb!3Xa98=B zN9)qOBiv5cqqexubBu0dLpk?$>OqS%&AHFY=9{l&XG}eX8%-JRZ^L)0>th0>LK>=n zSx%MyS&k%j%!lZ9SSq=|0M6e#vc&GBe|*(MSyi*6>E*oKSm9lo|2SvyzB?Hkhga4k z)FQ+VtHsk;KW9u3K{R>G67o%o(pxhtb%gqV_}#avum70u%b8m99Wy~7Rv2$jtNu_B zwS1F&wKcZ7Q_YCw#tyY36= zJBOKy`z$cL2_Gyp2#H7wO!$CedJsSeH(*_cw>IM2MQH+l#hMKIXgp{(-YNyZyu5)P~Y&yW%ZU3II<_=5p*E)>O5OSiAzm32$%*OA> zdAbY>kz4BpZkd%Oi!i+2;a+MNi3enq)MgZdSpvv$q8CUmYK=@_Z|W+{q$D2nG=4}C zmSy#VdTUWXEqa6I}rb@=3PP{=i<1U6Dq{X%R>mPFhc0 z^9<9*v$Zw~``vuL+pJuwlY3M@(h~RJKF|uce~VJGEGZ`OSU40sXITw0-KZ;a86m2A zg5|I~z*%Xc*7m*eIg%;j|!~~CvKZG!}ehj)?JzpJOZt*zF^BWB~*siaEG$r4*5>=2fZsLmE&Y9{LsXpo>-H2>Ne}-^;DfIW=BEx1$&!=nqmejh(Lzy>TWxg~ zLEQXim*PUbn&TX2--)ZDF#E2uNEWAuf3MB&mT+&m&W&_?tvbZ{X~xxNN)wbrtN0?s zZ)KrEV#LD2FiWZMp5--*_J!x2U7Qf_q-&% zl{&GBqOwnxvf8WMJ%7FJP`#Gp5Zi8GBU-5~)hkBh;BwffThXlh(4T09;JecL1^r#S zm4&Y?=o$ADMHY*Q3Gyi)G+S-QBPZQQbmuKZu03umMjC`mq%fK5(63b^mO1&NtJ_(o zaIe~jXhl|i)f;Y*XV=AO#(0Qi@n!mV8ih5p5KPT~{@kC0JQG@_oqn^VcUH1H9aT-R z7LT8YS3SyLfAXP4?64W7CV4)LGS03pe00eL-8PE)rZ9*haTBXTN0%R!)y-Z?=@^+* zOfEcQ8ve%LvK?x~i-WY`Zy0d_5DZquq7)g6pG+U6@)QvhYuC@nw#vkEM5v~XfG~wi zMJ_*GN+lspam2I)bRcV$lgC9FV=g6@GQfsv=JQ}Bl*`U zT}i zZx!*2+A`Vg%cC!{SQJjF#5`Zck7J?DL~GHgs7tCEK{R;s4etYXX&Hm4Ynxm(6(Vq- zTT>J-gk*FIiq^P!Wo#|An$E7)@xAT4ZU@V`P;Z_cy)E~eq{2DVnI7q{cytBkr!A&w zfD)6(>Pd%9rhIFX`?jh4*!!lLO89m;MS1Fx=hI+CDvR+`{wWa*>o-Qg$50Uek~oHM zEaFng>CX8EV8zHyDn|9LUeOsVBP|oCgv!n86|OvC!VEg+Is|hy1n+hvOuX89o7N^I z{g`jblA>qOH;Qk)T}#a!ABny?SN*Y>cV1qxB>~7xqz>HPTP$JNBf@$Rh+cc+&Zz8j zh5_y^atB_!E3W7-tXJaYf4$v_j5*&_BE}>gDtZhft#;xy=F?w&UYz`8 zJ7LtgXOD{(D;esC^p-fZt9WBXWaSc9oxuwT$pK6z+Yo3*d6ZU1Xw>}(e^Q4aubszR ziZkM_>3f=f5$8xhZ1*0R@^oFk&CT2q+gvBxyZWrrh7&h8DD#=e^izq7&8!weULUIh zNuU+&$d>r-mB=B(&`n4Fzebrda-cK2u&V)_;my}+p`W(ep=hzs9+YD)e$q}0Rt!7> zeFg@vv~Ry$MTI(`T80YdRELXp+2jfu zv7tqyxG_wH>h2Ff1&5*QCyQ_&3zFNDy1qETXD4O_20<`}>680TJ)!eZUfbyyvVmA)OOK~hZ&v1!$0ST1M%zIV+zHLv~B}nhb7B*LrQE)(YdPj zCYNu{5g}>UHMeD(aIkx>yj@ALirxa3cVVl(1nxR4W?az#)-Z)*l6M(}Qyp|EcMf)>>A{llYC0;~rhPvi zSt@Zati$9mASvn7uVU#n!i^cXL+`E!=}{hSJ?m3h-rvdth^!pJN<27=IeaQ|gb*>a zoB6rFIlhNd7KI3d!H_<+--{=?3LP8?dYtMU=#yd2s*L81@{Cw|EwUik+C1d_^y6*M{>M#xpL zQ9`02(7F>(wre(HdC5OW$zpiBqxBW^Ccz6IBUJ&8^f!IHgvs#_nJA#KDk?Mgz=1$Q z21FrhW;w;$_Zi+k*Ur8NfXa9brC~j{U&-4BSFQKl=C}2+E86Z>r?wXWEIWK^;h~qm zRERK)n&FP}RRL!krLlNRYBqf37AA}XQ37J=W&P3zP;7oxtdlKZHTEuwlVe|rWi;2L zrT!>9h2;3{l^!3g$V5*b!peE}igSt`os90?lLazTX&dV?yOd?oMFts#++RQXZoS?g ztWOVKLF|N$|2m})N9OLyjzhlcolF&7Ch5IpLmNy?i2Vg&Oi88iC|G~9od`K09hcIB z1+{BBQz zHr$8siCBJ@CB}L3wgFn@+WWw@^Cq`ZP5_IR<)1?5kbgv$M0t_JzVlSSbkB1!p2rR3 zebip#`j8X3A* zd)jsRr>ZejacgYM^AbmlOkrsVgt^U$gdY~pv!dnCO-$5_{aGt+c{XueVi|)Ooaz(5 zwpi;ffZoh9T3eytoJSm0FaH2H!J-SbH5uNR$=%YYNC2 zd^J0mHC#R^!sP1z=G=k;3_r$qC$bu;9dWZ&vV>I`a@rpN9>Q$qswgKnM*<$SDoLVP z8|K(NQ(1VdhrGwSwZVdhtIV9)TMW6fw`po@KT9T5Q64nHw!?vpLT|z#_$bcyrMS*L zk-6VssPK3%6TbOdNbm3cTJ;{NwGi&`v)2_TKc*FM+QoEVnpst@)KR0~Tyrlv|Hklx zSR*RT3pk{+0J*Gjg!QG=oDv`eMZ-6$NB2(zjtLWmX5 zcA!F?b7zdv5lO#7ELdB;Hm*^EfrH*XWXoFg@nJZ39#9mPqo&fQ+ zmY@WyifdJ{lnM8jxh|Y{8#pw%;Xv}UHHM+L#K&B2UKEInwsYlhE~zvqToW7E(e)uF z5W^A(BN3@Rb@He1x3Bnd(bZH$t!0UO8gox; zi1{iuj#8jk3I2=(vyX3*AEBOVOS7*5voF&6t1=d-`tcA=RfOBCG*Ktc>wR=<^}qvc ze$o=6_P>*Xx_8RYslTAfWEPH-Y zc($?|Nh~6!78R4{{pmq5ABx8HP>^v(8;VhyE2OVzlCB&7lG}v5;CY}5oO`@rhc-9z9T$G-M!$>CMH*$*pt0G zLSOC)S8Rj)t?ZodOoW3q?H=&QbP6;-KezBkKVR0BAjKv%YoNs_^Pj^uByb=RtDuI! z4z<-zyNtiLr0ArjG;y)BY0+laVxyCJgg*YYSj4W8OQ9}R&B1MhyN9C645RA)T&S+F z#lw!z#G{&lgweP{0AbQda#P|~^3zwhRAsBR#0Xo$V_!0O4*bCiyu882sSqT)L51i_ zD;s=~Hi(cvJ^I3Iu0#GK)9vDCH({6`{kz@)_GlxBDP_k1Kb#{if$Swx`$wOr#}Or?njc# zufd&Z|HM~?7y1fr04oeRVxF)=DRG2eSwZA<5@hSkJ!{S6o!(l$(wzKJN@sOPMv0e` zNB3pyRo+R9i^7XV73P^R!PfQ>p!tqS3suQ@no1v??ji2?l-G;VyxxY^dCuqkrhmNG zXqn%!+DJ68W-apN3bn)6njd=Fuk}o0R@9v2WjXlF`eKBn`iZPD>W+q}!$K8_w+vXf zJlBld()&et+kRUXPTd}3)!VH^u2FeEKGu(7vVmZNosi|Y7wp8lm`}0r`A-)7D!pXz zKY~BS>PU87`28(6`hDhA$-Xc5CoNcJP_baGy!EzY>+b_;uO#2$jj{ADP*`!FjQSP& z`4+0~y*&D?H7;<#OI(Bm~W@0Pz7h^lCSI58X z$Zc-EH^#@sXgwAL&K{s9=AYF60L5Crw7>bEYQYFp3lSqk5N z57D|(-rtMU=nanzUcKI})Y5=fJ;}VAWA&u>d=J2<*(L~)xTi~PpQAXxsiyIyC91G7 zH8m?(b%a->ljzbGu0Pk3Q^0u!QDO_!g|mDxz#?Hb7gbc5AxYl-I>ITW?qggc&C~Kz zPTu!fk=i;16ZI5pMRSE4NLn&&f7x{CeDMjj3tYr4U24r;x^DU39wW2Dwby5WAxcC& znMRBDEVkvj)@YJfer-`V%UkzRSarMn+1hglk6%{?YpD-MFLk}(!hSG2)NwqmykgQ5LJr8jtv-xGb5_ z^NTdPR6hF6E5=$oKngcUMj)kLe5JP>_JP!uJn4Fc+rSGx!-m!!MsuC9B)I%pTwux4 zW4iS#b^lPCuXP_$jY3x>#87JHZJg|w3!yi45q(L%daBb&ydqLp{w03-%M*ixqTU*qzG>!6;z6Db3?kC45izNXJO6|QZ7*iXmO;(J(VtG@G zBBtMhLsHuYZBtL;0{@`a4~f93air^Vt-n zW51Xg#*l#e>Jt!U#m=TQF#RqwV`zY0vZ%^*JOwF#NBkoUo#qsoVX%jws{}FN1?UtG zY!{$F69kk$!>qV}KkZ#*^@_ylklws84yezG6Gyz);C)xTT#t$E$OJ+|y zs~h@#B=1(5{N*CBbQfAUW>Du5y~@86R!?m+hl=?**McK%(mkhGh9miIWmmQ>g)SQ9 z8r@F{B`|ide;y7WqzgD4vjrBAL6iHxVa&+n zzLaF^Y3bAuT|1mJLWk&P9s>HWJcx zC`d0M|IHr3@nLgAwOxn6%{{?x^hHBJ2YI4fN&+}B$OWS*_$1;YUxo@5naW7@h@18+(zprQPrz=_**E1mmDboS&! z6IOt^td_}Wb0zN*XjL`t)j9uT%~JeXvy+Rc@JVJa#%)p&J(WKaRSZ-_u5Yt4;KlD; zQEP*1p5ldDS7C;VDrCUU%qQ^|b9MqeF<4QuWT~@%sRXn*mL4|76<#PNhoQy4(x7;$ zb5=B=_+G>V389pdldq-5z(FtrBV`%>i8J$ud&^r<9y( zw?ufH>_k%u9_aOObVEr@O{Rfo#7S zNQffOmcB;oWF6fa*D`KLdAA~v5zi&yc%lLF;@VL^xjg7T1nGcY45{H$zMry1U9|-J z1p*W@zx(;!Yevjvl%w#v&Q#Cy<)U1;zq_qb+iEKvIPt{Lm;68~w*6xKlU=`G}-Jsknyq5!I`boC>2dXm$pgI)gBJ#heLsOEX z>{X+Y!WUw%DM-ipIOi&pX0(68^D3iKB2%dH3<=i_uJVyN4bDBrgIjE38-8hfyDeuE zceN;05*0X#o^@s+LqfA$aEFBo!l55?;tWLmxD2ayiBy9M;GYj(Btb_kxT zHGP%2wE5oSgLFwi)S0C+23w4+Y2?6}lKU#V9sV)hG09mK;#<)B1 zEzvdb$JOxZ{Eli~><0OW?3_z`Kzpqp^|66UX`ESD|5RRhXRO=D_djm;(u(ZADV!Jp z6@`;g?}rF zD`fL#KHaV+5T(Uk+L^fx7`~%X;;mGb%ZE!vE6D5RwrhkxaX6! zAC4Jm;NED{=m2%fy|R1|@;jG_>BF>{k3qh;>w-Vefq0LpvMGbDcUl>hrBEm-HzF8HTR1SZ$DYi})>`@G6kXCjB=altzc z6C(X`3>4S1ok2V>P+50bm>|#GPe+L|#bWtQN*YC2KcZh9BsuVXPlKfqv+a#z>f&Lc z+iiajHM8EfVCsAQEcS7R`3=_cM8+Fw_U9${gekGv_vYl;C9Qy6EN+x-9Jvjk%Bth$ zyP2}~VO>dk%ttn0g4!!cuC-c7y=ed5GAXnLcK^LOJ+K-CV7|7#WLu7U6b{4s;Ak9! zSp2;{)!8K5>_Zmrnq!f%*9VCVkz%3{)Hy4j20f1=I^9enIw_{4)A6Dw+H|2Ty&B~B z+(yd!zMrj)_^bmo)z}XGxl-`qJ@BH4*-??mCvmd08%$`p;mm4^DhaCCiV@!z8L(}! zV}$uMeJT11cquXs>8CTt!$dK%IRMgRf9STvXCzl-*r^;QJkAduEhKF6RWA<5e(^zr zS=lXwXaA4f#i-S;reGKb3glCQ+6*|vkVUQ$p0M$8zM>!_7kQl+!*d2E*)BDl5}pwb zg4ZpQe7)~0#e~-diYVmTG>GGLDkP0c(wZW!#VCGTXVv*?Z_6)?9L&EFU-Oa9B9esh zyFc`QFMRbYF=+dM<9IG#xud8eC@6Sct*5XA4W9^p?m7G5V=FNu3Deso)CG4Z8cb+M z(4vXD@9Wm&5ttaAWwpZVBCKEhA^B_?`jC@{dRrHMZl2t8%_|s9JL+b~4rE5f28v zHoG=F%wEZRCxc)>v$Y!^=vQ74nL6f>Dk8%Yk@sU93M{_~mk8PqO>4jRB5w5hbi;Hn z7Gp|uR!w3Fm^>3pd5UnCrq^)^utjFSRRH7lRK_IvU4sf#w`hdsDHA5zZS`@)@+x@e z1vV~nm}+}x&9)Xo21oWP_LGXns=r-y8FC>iI=|6SjecBnYwFGB;cf!p(s-|1Z|7K% zy-IOjA`?L)s%?(t9}!lvHh<~{Cs{B+Z8%h@e;gI8hyQL;f*FjA-m=Mc$aN;Vb+e!4 zGMSI@cU=_qgvN!x!!(uT+t#^xYVWp!}H$3!PvxJ_|iJ0TU(mH3?W?3e{&*b*7o zS&TV;BMc%@5(~*Bgiuqsk^@7A!{JLa_yo-U;c|a+cFZ_pFYDew9SRAgFa!7${@p|+ zS?}097)Xemo~A*Py!Lf%bP4TY`bIXS>f419Y93L96p`?f{Q?$jL+5Qi7rrF^MFx&v zl1aCtp2&DU2Q|t&&$AZ(A1U6>4KudFp%i1b+UC#sB3;!4@#C&FqobB^KNyem4VrWd zB&*zn24=mM=*#K!_gZ*wl#F~R;D^x*BPnI0H3OmYbI*qK)cydRw>M-PoC)NR-7};kGWCBxgV}6(Ml3{S(n!GgodfO6W9?&75 ze){3e4^RT;*reIs84=4V1fKZE)wjGY`dlCG6?%Zx%i3EO`!F0H;|1+D$tY!|sM7QY z*7tX7JiRcbJIBnMEZmIaw&)q%p_iD-I928eRm$?;ZedIwwvae@;a}TK7F*9i(Qto= zo!mGh3MJCH8SA?@m3`6>yvfuLfpE+xmUt1(*!^GT@8urXfj# zZR#;{O!lu56g!G`QLSDP!an23e;n7Rqk#iry^<+MGs)%PDkCvU755o$O=nkqNMKi} z0C9es}H4*z2v^W9Bn{^wR_nUA^dPf~gtm%f|+w8+oh5f`({1_rY?&h||2s z^qdH%D}n4Mx0Gl&J91a_qnK#!k52)eq{`wAS>Kw*J(52uT6FD5~-of@+u!9UCN zACP{@#2c_!?IcDUxz>}5$Sn+CEVLr*=XadMTCGQKfM_%{)DQay0>zUSEsua`PLqhH>o%LG4sU&5k%yx`|T zU9X409EUP|I3&C8Xi*#h3o+y8g9hJIrqV^QPQ@pQ@Il86PzIhP)H8nP2eR!KcH1YF zJNB2DB_U;{Oe;_ZuO84IpV}+bEcND?dX)YTj8RC$jl!R*4;0>Cm;AQaQPuJU$OeMC z(W#Te8|Wnvirda6RWAa|=}4;V?P+|!34Brbr>74IK?}X1iN1cRVs;8ToD{mlngcZx zy6Q6%d5{f}l?eg%#E9tj{Bs(68r2^fzCO{=emQ_Tvi~$@1=DlURkaiUq#Uj;ulDE= z#TwCXS_nx2ZV1~Eo>2l;(Rr25D#ummbP+cyc^3xc8{?#I)LPsY(n&iX14D+Wgy zpdvzNK*qyx+Feb1x+mYzJOC{KSN5Mj-2c31=D~;?*~GeQz%=Nn6i+22)9yZgRspVu zqe+(gz&?fqdZ77|qhDtrvImnz^v{@%2bKGKUYU+rK^J*%`0vm`226Aa@a{ht8KH0Ms<3&f7Y{`K71$o%;#760d}ynFC(cwzteB!92#KcD)a{{cQ%;-99( z^`F<_|EHf3c|$ORmqk?sHHUTn^92LM65W5oG|AY(vOLqX@;?~45TpO~-u}@x+jPq8#|CPq_4%HIFu`}?2w@c(*9n6oip-*Vc?w%j2?drhJF zhMO6X%$t?)|I@Gk&)=I29QB7`-gUr@4*oLxmVJ^BEWf1^-GBcv{`1fIH&erV)Yyix z+znZxr^~757LS4CKU-i_qPE_!q22<;$d~~diZh|TEUN@$v2vobL+uxyf4?mM^W%8V z0D8`(nB^}%0Q`}CABhtHuPY{Resu?(Xy?VUm3-xIfM?GC^cJD;GynZ)lu>us?pZ*_ zOjKEE!K?`Y>2&g=s5On>LUF~eVHiK-@7_U%XFJw>bU!cN(7N6n$-UK+Uu}5QuyWZVM7$3L_rM_gqALJ!sUa+CNAnD`Kpz2+Tag2p8||wA z?sgl*$G0;Fv;Y}*_@caQKL*M*9sq;`YOXRa0QL4 zvSu@97$Lb{@Gb2r&WsU&ws(necz{59qZ+)f(;D|1L8`;oe zU$ObXT6#f4^XhD>UGp#jaEbcz03X5@NTme8og};wPS6p|@isR&{iZmwI10|6QyvBzAyKytSV)eBQXlu@`FrO9z3EsKR>jeIdraO5ZmuD^k{03h?3yUxC+Jqaxpu>- zzyeSt!^lmKf8OLV|NTEg3gp2vEZC}vrs6`KZ;Qcz=-6yo{eet?^_hRor5)ZHz%m8e zx}0Ki>0WAprMLi9mP7nONLgys$;B zod6>3ay$uK8qdHR>Bs}7=mIm=sWXS6U=n24UciDg2+|lHf-{`u089#U00^y1hH8)) zw4tEmdwMVm&t&AwNM|8$06*2e981NV!AN{90j5k zM=bxvi!1{PL%qrG`ojOr{9=Mvj-Jt@ZG{nQR&7i$JfR7?_(lAJcR3kcz@?TLI77+G z7EolVY2Im<_RAr_LMRZYQtTKASGkG9&@p`uzCdRNj+7DN8K5;A2G}xd;BtN6CK!Z* zGoDVqYqPm)Z|eS$`Q{@Y112&wR2UCGpo9grXS!5%VhNL47?lyD#j2-CC1bA_C0iSF7V#g(@ zc6qer@u%C=&hHDEYnt|+fFHQ+joK$x!LC8jFsP`@IlB%9X2VLRvD{K2?^M2)G+1w! zeykbfafl$GeMDyF@1~x233d!8-?{dS6<*<-NwCXO`5&U_dX60GVRexu(sx z8Df_FbSyn~rV{*pRfUNtkktW-G;#r+N5jD-_@T8rl)x10aXt&yXfwo-gYiEsp?|3% zpfK=aAwp-u%fX91}@pQ;8zDAqQsEsBPg!z^Z}YzedH8O z92{|mQN%+fcRxUZ!T%xFfG3DPi5gO&f}gVNUuLsFNOg8Q+R6^S6JB)>de7L9djJq% z7GMWen%!q0+yNZ7GA6Fc?BYbJS)x$6eZWMc=zme7r7<7_CXQF|16x=MgJtz(BK7UJ z^mIsUL$7l$AVA^=0V9zbqq!syukG|CJ{YXZvhr~`xMTdw6ZzM|3{}yb0%=EjqE4>* zALk4ECt+Y^2~J}&Zw15JRiGKHx(Uu$)&pQJIwW;Y2|hwGrc&CWh-T;#GZU(|fPP2< z!pf06umd+r^89&H+BeW3a)5*SGCoBRFs(|YWbX+V38Thh;kwpjPmUB6fqs%9O(sn? z>U%9f9?i6S^8=fBDe7Qr_yHJhb;$|f#v!WiejmWc9Vg(37+KS^54?dEsBNjnbtU5j z+YtH)#W1Db*^6c^;6v3`I|l$G);lR+J47*;Q1XctDi^)1c;5y1eLX<-!+qTaL@bx( zFRvc1NwL7e6jLqP_uz=g0avS$!0#Z7>JbV|qHe;7L-qtEWjuZdYNbi2(JokG&majv z+*5vulfA#3s@3o#weFq5{MnlHwSBPyQFQWNaF+6fAh6TTZ@fhRua5dC)KNbM-+34g z>=h)tzj=v)hWw=}urnl^U7rC%^(YvD+XtS{EgqvD`psmVuAAr^=*5p!{P{^iUJafP z(2LT^oweejCm~hRZ)bOeBvi^pTLtkn2B!NwK?tL%hYswu!YJVTue+2Ab3 z4>K*wW&Sk_Fgi{Hs>|RKiUjNUKta2Q1tbU>jB}3fNwfo{)BUb2-as{zs|T1B)3tYx z{;%8CpE{fYb!zM*A9-Md=Ec1D%~=-oNz5cU%!)n0rkk9;7!lvgLhUV7&ys=DqJ@Xy zXaf8v37u*b{?iuZ5Y}Bc0NQ3r3h`>bx2XrXI?lQ)bfZeh15-N?B@Z@b4zMZT_gP6l zFK7W3@(_3&#)U846Mth?AhZbRrRH0}-8fsZS+-*q6ar3ZlGXs*RhOJ1hu-U4kc#*T z{(p}BneajI|KE3M{h}nHHUL1n7J%|0eLf1(pxb?b7mJ0%9YjaXJv8#iSR_FhRA)GY z1OK=Y1;`VQx5+u=N5dr|Vn0tx)fD?U4}dwBQXW98|BmSmpu|l=ks}scIKALuZWxRw z@R!0(5@Wdy-(CMfCJpCIIH^nQ2S*S z9;_-#45RP{qbN)U?3g^~C<|QNG(`)XM+R8nRE(4Ap(@ZM_&#|5CBhEG+oA%}|LS1~frn8Z zasPe+co^K0I@PoYbB!B33LW1KqL`qCK$)WB@k#d9%&i!rDy2j^C(vC9nOHal&Xpn1 zCJ`9hiwV|qJ z68kFW?EvuQG6cxAM2>Xqr(g%;IG+P0v%RLsQrN`kx(#}Ux`lfA2d8&mg^#E&>*7B` z9s&u7-dQ?H@!LyjFkTu4Z4-(MGHHAOo6WRR#Ebj02J>Y!|zEMT7o z@slh!(v>>gb&45Ml5}GyjDcRW9oX>kmt*+d!96ACCYfP})P6Vp)hB;Yj&=53KGX+I ztaosJ)dIG^H?;&;*(O=tG^6@^ZKOKx-Guk6i5~9og7l99;RScH0+LGX!c{g`*5R|X( zs6bR7u<*H(Z)*rIJh3_`roZgJ8baM7O3z~cT2`}4)X8reW(UAUOX@d!AgK2DZFB#U zeEnaCtBgNtIVIY&I&j$`cdZ8x-^zibRtW8-AUYXy)GF}$#b%+NyYP+~SW!{;P`50n zX_TG~g%CD3BcPL*CVKGaY?YZG_(vtH2r~qnT_>C-AZ(piYC`NhCq`K20|0vjNrA$U z52*EH_3xL@1FfY7SpFHo;q#uKH3G^`)zDyNRS?4snGpbQwFSpP!wq%{&>~wknRpGY z`cs~u?!lG7-R5qg|9^bxe>Xxxu2EN(1v;ER*EmY>&3l@Ix)dPALgMf2|Gfh%)#rc; z;_29ZFk!aw0FBq#nAZwrGvGxW0=IjIXV<5rLC&9>!mZao721LxW1Vy|(KaZWMrgtH za7C^J{U$66hQES_W^pw-b4BG%$Q(SLGW|9|x zs0UsBXR51myiT~PSBN;L=y=O)UcIlML$y*|9jpf>mjW}sxONW9#*#4j{Z zaAFYDSR4ANVYH|6JahWD&gi#LN#?zd4+r?}tfia4-hRk%1qWN%CNV0F74y zoF}_?3{rHRxgf`*B`buCliI8W=9IZd3Vj4QM^5eNjH#dpl4mbY*1HTe_I~w$-(PKb$E?7ED%KNxPKMmXt zKI)H?b^uK(ckU@9fmDG}>4XJZV`v}P%(xz$egd0Z{j>fT)?^zCakP)`!#(JO#EP&$ zF%}?wb157v|1THHM?dgd9Y^#zMm}p4Km6}wqX9K!?XWp5yuDZ|NUR_0QzBU91`%ZiO&Y1LgqCB7V(!szR2jfdE4L_ey!(o~IKrw@(97 zg_H^yL$exB!PQ)#^d-=CqUp^lc1x?r6wCl{f*0HkS_Z*_i?}HRcr+kpGI%qtO)+Vf z>H?Nsz!|ul8Ht^*(^i3Y>>0kag;>zIKQs&G@3aN3@9NK{-)qNyqo$0Th?P^7zLt`k z1P3scY!6(^5M-vE9wi0^h5*TnC3xKen8y9nz=f4HE*ee07hHjC(6znKB_@LnJA%`w zKt}b%hsGX8V>erC2LRZsTx74S;}B@&^nT6|B1G(?lBRx3kCZ?E1^&yBos?XukeP>J z-qdQu;Cr|%rN(g!?)ZN^KgFRJ?T!Svd_!s&XeRUgW80Af_eb!AN|N4NfUSA(Dj2q^ z_Ugc|rqSSRB}D*)*9~$cM9y@VdtwBD`#BZdO3lMPE7@ofH4NXYm!slYg!|Tj_jCpX zV2{_1#}D63WW5^(ri|!HSU@~tm<4!(u<|aTDs5R}d%EOmcItDy&Vea>&^C}kz4iMl zHc}FiE238gym+*7pK6+CIjOarf&rvT^-FqkF)%kFdUS(Y+N2rjF+Ry=sB@lz^=?}@ zVX)ZQ4Q(E6D==B&|ex%7U}$uwu8+-)f!&`Q3%L(g3y?x z_uw@t5s1$mNx+;+$egr=jFb*H*x!lO{XFxErK%HOaf(S?IUKK?3DeDLTuFcrlnkY3 z^+0XLAK@VJw-=i{q3fcnI1g`!?SaE8W~b2y)B}Hol-q8=6pTz%|1u0N`4*^g<@|uM zSk;cfLXrnNxROSoO`n2*3e?+)u!%>uekRg$(s!l72Ecwn5Cqc6n8Opp3mE9&Q(#qR zvfF&|#sTb3Rti6ul=4u%0NxfJFt+`$lXm2jv&O5H3&NaGk^%p#1Ys5ASsi zWtSIOryW~^gLO9P+=G9?eg69!_J3Zh_z8mH>>g^*oA2N|`Xx5zXx=Z;pA(<%ZvB0r z;X0mfF8^E8!9NO%0Y20iKfmjGyAecDhZbnS1fUN*0Ij8eEBF5WpSR8g&QTx}tOJ>V zMYtgAWBCrO+>=*s+!1`aor&He{N^8f3tqg=SIxivwNRqGqyPTtzx9~?=QoPe5_&t@ zoPwrdkYM;2By)}CKXz%BaL@n0`+g(P;N1iN?!5Nt{eJNE6#QkUFK99HmSbr` zvjs?~o5t&t;9=4ceVzgR+*TUfe^!W)z|Mn8Zu^LV6SSeHoq;Yb>%wgJS3Dp_2Tffs zQ0&t!3%RI#F74i}5d$S%s=;y?Fb534csr(WjFlJ?ExgGDb$1+snJpE1>v@8_-QAUO z_j8fv^Y3NpU-^FwvVxm{Sz($PHz-x9yUGS^j{$Pfr(L&D=>0Y5y|dpx1LEgwNK<$A zl3{r-!XMuJcqLuRcfS%8jZP8&UH}5<=em?*gRiA-5FYDxrvQRWW`&@-^5P!YVSI+n zB@QjUEf+g2H`lA6T4=yC*r5;X+wQS;kor~m7i6J1T2UzHjeb0|74dlISyGs4gyF%y zx58sF=%MU}bS%w5t+IAKgSk+|?~IEuF#;V^r9g8xgS;G|*Z;M?F=!hlJ_KDNru?6_ z>ppnsYhQmgZ~#`%8B{1sc~SHctVB{$AxO?DXyo7lpa+we8PiG5b{gWK@_G=Im>X6g z(8^!nF*#70Wu4FMd7Jl$)*Cu@-uB@vovtidX}ZkI_wwB?2zt z-AIA+Wkr1u7ubVLJUu_aH{Aqk#VO3-qTYO*RtY41;_GCfbvOy8Edw{7vEjp3XshE5Cd(P~GQb<*G3pGx{TAv_9X#Crf>%K| zCu0yNL&TNYrozkcjtN2WYQ~ewx#KsLu{CeZlS={5J&y$*Fo6t9-}8YM#^N_;F^kHF zU|W(7-Kvh7sJ#^PUA!2z2VNy$J<`^KVE;~ zgJPTc`V`C8GwOF+K(&7=$WNRmud}w>J!2Bk-vg^uhmtL9c^IO`w8OJQecnZEr!^4e z%i8|9I=`~5`&4v4a2i}gF8%Mc6grG5U^~`c;B+V2TepFh00m$PFyHQq z9Z~>p4{&>Oz?U)uUl82ShM*^YwY&odY&s5~EZU7?BTfK4*c|tQW`hu63w*u|b7l<6 zKpv?oKnjH^p_`O|F2eTsk+Hy2V^<*u*yh=Sn?Txp3I$`FoOY2az+-#0th_`X4CI zHmKqa1Br3vKDB$90ZTERZbJwxPKgTQv);^JVzK>Ru0fk3a}otG-oxDn9>9un(iMM{czxZy$TswS3+K{)C50t>JdVVQ3$V6(kHm17Ni(ww-Ke?jhK|za}psIh`!L zUw3u#BSVRQx^w=9I{#jsG4FSx?=P_tGCijQ@W`!3Z9x8C#48EhI&b=;*fm#X)j!s( zWQTL<%K*QU8=2zG@Xck6Q+no``i)ZTb&$4U{q|%VH##PHePS-T)`Sy)VxG%)1nK~Wa zBcaK5-(}h*5C`7{$cH~aPppn)S2EUG zmpAoWMt6}T7b%u@c60%YkN&)c>4Pl2kn!eE;FU3yH#_?SeD;`$oAVCoQrdhXNYrbR z{C*=1!1_Sa%dDgrd0|EHT6!{kkt`nZT;r%LeqO3o24!hb>iqmcbSc-6k`gtsaWil% zNe?@IR(^~}r?3h{X_MhoxArEy5MDSQe3k`T1@IKxaZf5?wW0kDCySyD0q9(t+*Y&srsic6JCb2*!^St@UluH4D2&I zKQ!! zE=a9`tL6j*FR;Sqy7fwi84bYstCy_F2t&-0e%p`SpnNe?-1_NI$z22O589((+HhQZ z@I0n&m9^;IsUh?OzgNbUibb*wdHUU6t~VAxeGek^FWbTNMSha==K?gvX$#v!Ua2N4 z>fuEa;PAM7$DwU1AgqQ|`sS_Pbr$qn)SlWnv~??(IqL+w@EQWsntmEz0vs3lUIxI> zD&iY*k(_b&nS<(7;?_8w^Iu>H%{wDfHRV$x0==k6X+@h?$)V|s)9!}mA)q)79cvNT zYxrJ{`hdC+F0^*x-xRS2j<5{K zaH1CUbb$?+y``Yx0k52*SOcjP2Vw4;m2_*mZ>i6tCZG;lXItaEbtR*_jXEsd0mL}s zmrtF?Fzs`nU=+~c%u6e~gSGVQ^e}i`9#|qOd~Sjgq-9$33xP*nKQTYKJ`uuKA9Pz| z=?!}$lUSnCGKMoFMd_@zBR2+KDT?{|KhO&F%Y`Vr)&#yh_nX`C9=SlpLBx|otB46i zTfe)e=y9Vc{Q6H$Vvj5(Lc}O9`0~6QgDc}YtD=BAI=9yGb`of>j@`L&$p8B0%2p<50#ullgKw?NBN{&=SP1z<+5Bv4tWz@{z- zM+eD-TBX$61}Y|eE9m+7L5tWx7|n-vzL%$ZWcP>RM-SLmSntTNXSvzrk6ur_c!;}f z5Y!ZnC5)68dwb6^f@;{F@QUaIg*dB6bQ7Y`+$nn6+D;a!?sz*E0F8lBLBE$k3Dn}q z=x89Z!LKiWqKcPOl`nW-Ort$>;W78vrKC&1 zMtwSY0jz3wWSHne$n8UwM*n~}y5>{D_725%v`%URK#|p&uy6w}XOgi}R^XjOvFR=I z+OgtCW>Wp}rf!8O1A`^zm)ygSU~C?Ml`g>E*hcemeRd65X101Eyx*QN_3ZweU*G_$ z*~0*1sgBV@4KRaDG&A}2*()Qg5QaTd;!DzHgnFqn>ejMj zIdAwK`Y3?O0ExKLD|{^Ay=Y`aBj)FYFQ5?t=^V^<=^{0AdI>Lo-(ZYT!msF&S1=V) z3kaj$)`B4{4G4r^I37M26{0TY)+b2_WI?q;E3h=~Z_04%x{vt@@*nALtv_qrg(l9! z9`WnZ!U;G&gK-nO-7>A#DezgUJa|415JO5LEupr8K%seACfR6{wiau>&%P(kC_p>s_5TAALN;Qj2D+G04TKS zbwF3%$&@D;B8bGcHPeBXjLx3^v|AS3_~w<_z$G?y3Aj(y%ouW`lHq3AO+WlfWTcl|LBH^iF+x3$Inu()=Dw$^&R`)W2AoiXZ`Qaf+ANQvTkmtFW z#$5MMqpr+;Dza1UjBOHQ%weRD=Js+8)Pn^~<&(CE4tuwfW1+{5LI9-<$&QcuK$!fp zMZA_YQa4b>I8paOq2*u@(!&Hx?!}d^&MN^r>uFW=&w&o$b0m(A+j{4w<>SId{=!?+RV~R7nz$ zZK%V!SeX2JSZ?*W^tPvCWxLB;!96XnT`cE$w&Osiu2#UDSJWZ8x%fm&BhULEFGoCV z`5$Y5MUjYESZQzV%I@Ey2&c8oUBx+%X#E#+HJM%k7wj$~yK$LXsXm!LLOuTI8!5#F zCTuhMuh~N!7-2-CsJ4&WXgHr1pU9V9lvwE})g_<4wkoX%{+iQ7<3lRKINHTqEiO>|_@l>N4+KU0B5qZyFSi0OGji^vj~GIPB1H-=){u@Q7vi5W zP}T?TCAmN0RQQo{?7~Eg3aUTX!oZ}B7DtIkD;!Lj$l@m3Ct8}&V$2yl*ltQ9W0`K7 zW*ZDSskL%PczmPfTP2whwETosUFm`p7XfZ?>)XWJPRM@CW=Er>a((@aQGDan;YofI z&y!2A5c(241;(bq=!RI86KI%QXKbdhM{uAHyc&(f2MCzRI117ya#+RkZJ}spmPpSC zX~FI`@3{^ma+zrNcj!jq^GXC^K)+;sRU+=F$7v0(TL5bt@7_3)Q6Jzlk*ce32ctXT zv@y~R@QRHcThXUh%|I#fIuLYsm98G{|U->{f^14<_dH zw+4?v|4GhNVD7!Uo@$#zZku<QPLqTR{m~B+`^V zjx&NE^L$NPPaKbnFy0VmL@4V$v}oxaPv%A9&=ZM`R6?KB!+N<8!AYKlr1 zg>aPz$LO!>!wN?3@E{YHO&CH6fOUG50C$fsw|pyn29wwUNfPlF79*H61Rd@ENLI3M zxL(hbO_o&VkB8*LVTrnuNRG?d&r5Y2s15ZL%@!G!99pNp)#J+hV{_n z3BLIRt(% zf|94WlpFk3{ZX8>*AXKU&4f(e5jFU%{y3X!nno|1MiNH(20f zllL`tk(w?biih8pA6@3c7O7O&xC8aQa(Z3;)h0_bHGM8pumw^xo@^*a+x=mZ9k6)h zOXVY@g>7MB$ehP{FOv6)CDA#JpAJ$r>dom$eUQ%}AyW(ioHiiRYB}SZU*dWSivIT1-K^{r)E~6zTK#`v*qZuM3@V2%`v!7D=8+tc?u=J|39OyOAJ?WfUqX}-X8|g#S%)Bd@!Zk!q z&&953tXV~^C&iHW8tpLFMo9sL_ESEE*mX6B_)*$37>9Ay0O<9}-1pGHu4xA5=D0Mk zz`eCuY288C1m#dbFSuQuj}81et_B5m<8HOPo>6vCf!)DH?JEq)A>`7%QlHX>%rzm} z@|%1c-_)-Q(|~w$aufS!&-~-+lO9j{F?v-xyoqPK6`4C}U*tc48n24v3t@!a=vj_G zW}H8_?~qdHQYlj>JV1!xp*Tf2k>CBTg`fZQ^1Ni%ifb)>fl@!Fe=d{9K3TAm=v04q zq;z_gUSP~~vA=O54z!9!GQZp*N` z-Kk@UTXz;K|LUXdD zh#F~U;X|qWA?4S(111z}(V^bR6!gaTle$>hUa6AUnL|i2F>){ z^Qm?32`}TCu3xmAC$U8h^~e;l9n@wJCw5IBv{hlCv&gob7s$gomq_^3D zrzl6YH2cSQN))7B+ALT(KMxv%fCyd;tFyLbjkPO>I&^` zp<#NiQc2e(Kxc&Y_9ZdnPL1{0a?SJYIy2sLrRyXPwnDuMX&ck)rOdhnwg;Fz2M=eaZF`lBT1>);HLTMy}yt&l6`73Ca4(P%?aM zSP(Ex8LWh?oGm=ZoENBl`k9MTf$k%LP6?T0pu~~X2_(Z4)eG9QOdW5pa6@g$VuDMh2 zS|@Sx0^I zq~xh9_QsFt6fN3Op<*gCB~^?LSV6ReVcm1VVdX? z!hRh+%Bw`vYKjpc5Km;pcLpHO=cj1WxN%V=R_1kC;^R?jqxZ>kG~ma!|d1{NrPGg)z}iF6HoK#mT@JeL-9yyOT3^m zO#Nhh;ct|U?EB3~cPHLe{~pG15f$Gr-U|LXtt5hnt4na107n!&qK;tj%m{ zBATY9tDq#xvKbJJw~Kt8mm}Vj45o~T((naG$c~!@}qEB`&Nir&n0aGqa?BGIhY zev6XHb~06I#}A_&xYIU`YRVvaL)Rw;{;r!-zkkfKArjGH_nOIRn+Q@JDg#r<)8sbB z=>>0$gzBnb50t0cLqYOE5A{xnb!`2Pe<~}ww5FlcCPsLUYJjn&T!BYek}0@ACQ&A| zgz1g+HI)#IJh4SEu$PH9I<#COx>9-TfA$4zN5WaU23BY+VBD%5-%H5o`t*r z2O&oQhL(xSYmSnaQu9GyisU);m;rrsr7TxVS{BfJRMF&UY_9pY%Vbtde2Th5m9%B_ zJ!yI3eoj#(NYY7undiLLdXWj8qo4?ONSJ&%n_zi+B_;qA!RFwBP3RZRkl5It>H#!4 z4gzbnvECg%;&IxVFA_%8A_h@k6taRWsP>Q+vKRWz>wcm4SSYVqw;(|Xu>gZyiB_`65VjP*}I+eIkz1qLPGKE)$*)$y$C$m&2@*u zW(`M<1IO0Pyk17~IL$S2eQO4NPPI3-$!%w>Un`=yXNzjBXk}=jpqN;|zuBGTI_`d*~!>Z5fs+j-miQYcwJlu__U816k_@2MC zVeVVi3yKnVWpJ5whD;_67mQ_2z}-vp?O-9v-&PV8Bl1E*Bxs!=sDGejyMCbb3Q0jxbFiRC_J0UrD_pbDI9rw^ri||!Eu~fTGo`+_ElSEjZ7Wf-OtOu|s& z6*{4hTfddhN4j%dOD$mNMkEtO&AXUfD3@cZ;6Vljo z6+27f9uHGR`w$hf(t#^Jo6^i7^u`m}DXC7~lw2b$@fTr}E8`xxvr6Q9Cw)$I>+TV; ztYuTfEl?w#=3%R+I{t&fLUN^(P+Nsw zOT-s?t~c%$4A1klJE2w}Lo#7(wxeS^rZc7Ct#dSbO>ZFa#`jliTKds_OC(G4ZQn-< z4+8NJrUfojru8ERdm6cc34iv54#pIqDyAN8ca*L)qINy(-+Qn`=D|rRp~nFjRbK4e zDwOESN5!Qt-!um2**SqOsj0s`_9zILl42X4X;zsCl@qLaefUbKPd$6JA&!(1*|>K- z94#Z(36@t;*AgOWEVZF!S<(^N0%~-UvdWa# zWTdr;nVG|2qw%_*Bf;Vll)k2y0ing=Ui~@XOf?I2Q%o5Wd)TmwOzOD7h4VaQDl79% zz7K09I0&hZ3t`eDQwX@Y=S?xv%eF`swm0ts!^zZ@5Z(6EK^iz`q0qw%E4%qCj7JZep^ z!Y5!4)&T9RdAaC>NxSTswuwxfL%6VHaK4~C##LDReS7raA`lK8xuzN9QKcAz%h$OB zTVPUH_XRU9%*u7}C&KS(^5@c&BUISanwzOWkg?tK8_(@7u!4;WM}#tTyY(q@X@87=y@ z&K-ijwt7Z7uqGBo^4u?2pDlx-0qyR2Yk*8}r``=WFtSQMkfSG#0sq{g%8@k@`n6|&v_=jWm45%Au^B4@L|E{v<8pIQ2h za6p-jtM0cq*Cd@wl}M$URzf%ug6h=Ur+AchDkeS~>irU#w4=v_u->0aLRa()dt>k7 zXQCZc^a@VFDE1}4znRG6(_(dRqEB40#IFhCspYEM{{OeR%2d9eX4~dDH zjlC5aG)>dBEnvVlmgmzNEw|fs{=joPe%-ff7DgmuULT>7XqMC*r`a}@j}$2{5kHyN zbg#TxxGR|X37DBR7NmsRg%OjbZOz%FQii7|WV($gjHCQ}*A(ZxkB{Zt;_BuE0pDKW z^+_5yQt~PT_y0aM*Dm#5{yrrNwIw{VN2S18b(a`&pEcOrnhXgL2DVyw5tE-y8LH5; zihOVf;jGF=!?9o-%QcNoJGC8`G&xf!2?#BZ^F#?77ro482E<>RJu>m`w>v;nv z{hr^?5IYOdP{XYwh9|zMP4N1Iwz(F)^RtwYR6qiR^)4=>Y0?BVut>SOvpo2Q^5@Pi*-ivIG;~Ll^>Oj_;k;_2WthRxgm!clWlZ5&O9A5$_4yHT) zYSda@3&9-P^8Ij6bH@kgtSgs1xbyGixoh=_71)~zBF;*K6Zrq&W-^iGN}bb#yu z6Bjql`2Q8M2TP`vi5pcXjT@;n74(IouBpN|7?352)?S37Npws*(;_Zw|$ z&hny1Bfgql3srPxIe+#(RF-vRTUGbGGr9mSX6%B8V{eG!z~Xz(jLcS5e~xE8#O`y4 z1oD+_@_1HG{|Mvu$m7|lX_o`X9;YLv*@Z0HMF5r2X7+OY*F&NYpc-~BI#tQ~!lkh- zyJZUd!Q7QqCRPV!9C!=9VWDe1)cMu$&-oJVyV4vWk}{qq6=?G5-R-0DV<7_o4`n9O zR7g`!vK9o%)`U)y-EiHlCJ@o|&c4J77SdGH7T@Ieoup;*gwBV1 zYV&!WC{KQD96h-t3v92%Nj5##Hw9HhsnxfN!^KO;l`IY`Z@g9n1$~{Q)ACyqfyJPq zAX;nKLmpjpWnZ@3^Fs z!R~g*tFCq1d@T2fOX7$|AEa$}=})i{w`KZ@oaFhTM_^fSfMohxZArZUNDZ>&&R^b- zD~vlO>n*j^bb@SS>BU2*dq!NnB%V@p6>*)pKS1~tcU+mE9EzwacC$ZdK1gd>meJOj zG5Qn31-yF0l|WY4R}RbT{P$F8IFf{zaw$vh90m!n*pguUFrn&Yg4;Je{h-A0oudron*Y z-47M@!;=ZBisEpJ8U+2f8Qg+N0O?b!@ek6c&utX+NXKE0>YFxE^)SGHe~aV3y6?eO zGzS%+JWSyLw!aC9ZkKp!d?M9usC!m8C-vMKbO}k*1sC*)4J?eK9q;C+uM=#3y8Yrp zB05c!U>ufKLsrMr(Y8Ah;Z7!yi)YlB#7Yd7$rKV<#v34HN+X#^b&zE~=N%9ofM&Xm zTvbrq9A?)_0x1j%*&jgnCXIEyQfvD(4O?E;({F#jv~zR@^cQ>+p2r|;??0l5PeE~Y z$HZ99CiayS{xZ(?=JDw&iHGs16NA=J48PL-rYSn33Hl+o?G&`Qo4z|g3*NM7&=|ZE z5-wKEJX2hA08u>?*63Q`3Pp3 zbGWu?+=GLp3u*0Mg~gO(g%(OeWp-2986Hp;{&;GUv%ifJmz#Yr*8;CVpSqJdeyxk} zRYVREhcv70FcyVyHAlz^)Z_4*sTU+DBeg*35jKi?FX|Ch3P#bB;f^wbmSy@KxIFJY zp<;rC(J+^4AhE4`sFugUBfaTf)8fOw-viV2op;$F!(B6cC*9NLc}HLif8sGy`1B-{ ze0r`7*V^KbdzIQFXOZO?hg1d6sEeJ?mE%{QehWB2KN_H~^a1_9I6%gf$V405S}psn zYd56gOfUC;MX-6xxi%uHeoKsdu+bYI7!3-`Z(rM&q4?5L{=Z4%|H6NUG@mE?u8`d+ zao;|dz5k9nlM|zOx6E|aRC^kTW$+UNO{sX4(^~=%2|SDNN<$oxNWpG`XyVB#F^V!) zob(sEbOSl+&Oy!&tU~L+S{2>f>iK_2nkz%EaVdwP=x#(760J@ zm1`(rAgYGcMD~sqkoM$Ohw=jU$w|$W1GW)@yAC-UHG0vzT~>dXDYc_Sw?E-x=C19x zmB<{1ju2ddOTU6H2SEe;8h}wCsvI&|=j~Te^-9?DO@C)R^mXz{O_ns^HOY=hrpp1tSBsdL{_>W_{x?jFfj;+)3H0!4%K-FFcJnnzN}{Hrld$; z@J=5zaSo{8vV8`yKmdC_@c8 zfi5%+VY+Y-KDss(k7y103j@-B)L8)hE}|~H%9{`msNi5RUSS5aefBeRDa%gYuz9wd z*&&F*O%t-lJ0d~B7q*^=Ag87*)zngeKZCjRX#qMSkuh!%%?(@nSan#% z20_V~+UMVTqSC5F)HL+);9y{85PX*A2CP<^d*AT@YLe-#H=GW3OwG(hD7WVK#def1 zaChk%Tttpw76U&8jXKe`5J(^ZP|v>u06J$Tt-OW)Jmky>H(4)wGN9lUJMkt*E{+d} zI;jqg2a23ZaNYN?{&U;~t_eFY#Fx-FOv2pp@y%0lKaz1x9)LWQI3oW16}zNj+CHZ0 z9H}35XE|fwuYv^SO~szE3Bo{SyU09B+R_OA^h-)|u~37)G`ulKrY@=H9X_PnLI&5{4`gkI6QA*lc4;viE<1R=~eG@*V?Mn!1HZze1Ab96>XDG2>YK= zKZnmKlG=J@`W;7e4zrztP5Vb}NQTp63r{DZS~E~L)MsydKwDw|#@y!jyH9a-e*wtP z|5bhb!d_XO#^6jky!0#zHY<~_D8ksy&z;h=2EOd$6J(JmvmHWIaqc)eM)=YhnrlYi zHXdvEr(P{Za1a%L4io!e?-M07SzA^0MKY6ZYbqA?z6Xj2GLDlQl6bG0U^*8=-Afo> zn0Z`1toQIp>AH^EF=yaH**nIr5LgU?XGlSEZQ6mLKq%#aL(zOV%N}%leV*2Wl@|}a zSaa-68+a%D#OPPf3rS`)fVV0=+eFipXY7aat-i2$qEW7YZmrxclBSnc2Hy`o=Nqm> zwA4@mC|15gLH!5o6{8irUUJvR@^nBLG{@XN0}a;*chN=!brwJm)++F74{Ztm#bYr= z0xv>P?kiIXSh@BzTNl|os3Zc)^!Cdz+!t{!RpR?bh=6&3onnMz0IXr9UN&lS9*>Ie zCZYjP+$ZdNFFXHm0_4fhj#GQVo^m;bP`IR~ZlVoI)Njs!(C7R{p*NJh6t2?-B<+Vn z90eY6{6Iz zwhy?AY#crR+>>uZ&z9a;!jI-m3G-i!;3@ov|6|CS|1bW}l*29mCluoUAiwxdsKI0@ zKkfny<1^RA50qhQ>gW_eBs>pvA`TET{FSgY*08?^Oq6HArJC76-o+WhaiUe{#0S)L zl5_)Gd>?VT#S}D$V1dTwLm^md%@rcj&XE8lz~6oQgydKxC#O4%yp`}`R+QXAS%6uw zm4QuSZzm~!C2cqVP%I6%>ckY>h{6iV*aQ?m^Ycllkq9LE`Gx}~Ne!58PDts-01P|9 z6LZZy)P*TW3gTipWu4@(NVXbbNr@>ph_mLl!WzGzY}Ojq55gveUAJ=h_FI@>$}pCeA0#0VBM-Y&infm{Fpof zli`9Y_Lju z;gh|p^6LHI_xU@GLD%in?QCoeg82f#u9SSGFE_BB|Ch6=2?Yx=`*y#92ie6o=0pSZ zBs@xc+-k4KKJ+MzCO?cYuo{h)vD+)qb}H(ROZrna%2O?HHR+#aCglj%6U-)MzAi;sskc3p&(P9JbO*idw{53KQyq)Zp zLS)+n+O|CYlR^ZDW`IJ}Xc{n`L*@Nv@tap?%-FBJ0+>xO9_bfQ8Osl`hXP<}J@IKK zQ{pt&aFEHWpy5g9NJKLIYE;(oK1!8c{v;Ya;V#e6=j7HSz#4hbpCcn4mo zA6HD#HF-(=X`{)J;7DF1@X0t>pnV$2R@lsGR}>r87m_+grF7o8z2=H!s!fGf$-RIl zeyZ8_Jc9G_7wP)vBClgs$w~yTONMSh$MVf$)2kw1C+V*t*)H}~Fr=0u-Wf<)54q4Z zz3GI`aotr^?N&6}QXI^)9SBTn{qCa990wn2s|h%~{z=|7FJ+795y7!DuWzSm_c=JW z?+l0A;6La?D@{g%XBMMkr!zP4!?jM$0dxa6E!;y-Zj#1FPS zB%+Wun6-|VsWk40)yrq{%WznZHtNE)R;WkQ)W=l3aV7aBmdS=Je#iW;l+W}T{D*MD zPRtF&CLz-G`%*=aX}~T#4xuD+{#Ona+7Uf)iGRoXS&p`yN5L|j9yjVwUUG99)ROs1{nd;ikSAiRKslTCmMdu8BdnTa#xzFpXHAP=?n`L%#JpGzbj<^dKxB3LQu&Kz(fyK8AvAL zEk9kMEb9c8Cal`_sKz+N2=!|R_(i+K(F9gVs*|GfpObN;Xl=zWky+T{C$yRLCo(7h zk}hD6w(k}nwkAS|;6H=emvRX9FeqnQ&<42)$Wl%yM5ac~sDAFyqGHOZnKFu)uEDLG z`Ln;w=3KfV_&V+J&j>#f^f)t4a--hP)b7TRC&wTUrA^ED?xh_@)%Bxu`K?Kik{jdf z##1vRh>}?t!NE$M9mwqYos;4#V}?9IP3{@{o^#5`z*ZIwjVdZL(>qx-vavL$I;VzU z@#Ud({aG|=gf^U*k>qMBnCeeG`O&aj_7Ytaw9*BAWDG9SasK5 zBGH3s(j)3lhEvU6g+bJb4XChZsq1*#g+#TDnAv!pgWJWGO7{5)EYK2>Lc=FH{zKGFedV{GdKR6JK@q-y2mjocnw$tIf<9)TAT-T8XmE9`sp=Y5 z6M2a6-+@G+(P!Nw^MSHHJ)CNcHu(8DDM;jRTY0{;_+-ZsC^zv7RMGsnzuo5Vl=1{| zJ@?Jk-K~23atktJDnxWd(s(qZ|0EIxm;)kF*S@}qUdX3o3WULDj{k*7bU%qOifhd> z=jks=eFj=KcQ!5ZUiFCir$oXh%%M^8eQ<+Ofzp9e@oiY9(`Bf2b`J?%ar&Owj#*>? z=JGuwB4gJmzKQa4ry0)`p`Cy6i1u|Bxa5Q+PEgKK7hB{-6JGE4ke{=~O>Kvu3HLxd z#*(x3$C*iOR1!YRmr>rkCv-qNRkpM;tdXS+J*ZM zK9YCz>7+Q-Dxcea2Oj9mXU|U$7;z5$uacUQY6vrs(@5sDU|FIj`UbiI>MPwe?xMns zhZyFJ(oEMwb-p&Mm+>`UI(rdcu4X=SVlyAMbH3AmQchg48i38u$KCRF98Pl}@%^eU z`qTlXdpAWuj`Iu~V7Jd2Z(m(shc&TBsYz{PzxxcyV)ey2P^DH9<7Y|+d#&DIrff6o z6t$+CVjvA!w^cqsGVLlCs9-36Q){4Mt+B3*q*Y$_3?6rftvPLLsv|+|`R!Zm2VsEk zb6Fe7$1>)ISKTJ}4P;4bfKs!KcsFzp}NDu?7z}r9q8Cq!-GMCmKHsIy#=)O2oA4bx~PM zU*7m*vRioJWm07oBng7yhy8tkOD<0gsF|NpFK2$XIx@|AKTfp-T%R*l({ph}E_Kax zkBBG2n^hhNS>1f!0}1?2s3^)+^YgMis5ZWP9J;q%h^5)gosFy-I+qjTyHZrPN&#ME z`__3d!On{ihnoi5WP(K;F6y%C0N*Y{PMcqRAsD?3QJqOcOX;#O{9RJ-2a}D0abi@< zy6KO?7t41tbx90Ke6-pTLOLF&+p2V@Wk+WByT8%DdYFdJj2WULKdgyV%DToA>_~or z=Oh{Ln0hh!^Jkku@2T2(Wg3Je+89U+dE;5M7%qizAZxvN#~bunoZ^+n5BCTSrTbT4 z2RzcQ{;=nHl+y-~M0Lagw&}(INrWB}AVw$1%XMySFaYXtgc8~5cYNeH6AJ)4;$gR5 zW(GT%_5o?GwSnc;GTGLpRd2lX8M?kvoOLKZ!#V3W?{1+^WAaTo7IaOLyf7W7(cJ4V zA>2~?HnB)#=q5Ov$`OK*d^Wc16=LNa@6a7k0(80W5>4_fP+u)+;-DV}VMz*}O5$5t z*P8dx8Qj}>G2;u1<>RC?aWK^N{f3fzXIWDXOdrp|TM6C#j&Q+1Y%)Lpy8grum1OvY z7@B-+c|76=Ox-TSq#D$2l0DNN6fapKsopP^l7&(e*|G(R#nCqpNd83oR)(w80Tz|1Q)dvOD@6q;jpkil7JFNezZeykmnWn{2)uUM9|hW%bw9a50I4wyXUYOT_yizY&5dJY+u7YoUl;r9PlP?G@fGi!HVlyYSPM z$C@S{1z4hxe#$O;?ny(6PYGf=PR-rIYwF*dF88I+-d7)^n=>EM(U~Y3#5kuJCrp+z z+MWbHN@MtH%bg;$rmi(Wfxu!F6ND9REcW!R!bH{PB?u~o&M_A(tXTRaiOGw#^qMV=O7YYrTW@?3p+t4aE5Fg-A?>XnRsBI5GrRD@e5|HOPcqc)|vbre^% zDz3m(?PKw?o*A;M&plxF8_huTr=}(`(p5tnfybubc@k*Av#s3RnOe5ailhJ|PbKW- zM{4CdL2s9%g$giF=Zg>dK$(hnPi8kmf0}RA%lIRbWvtoAri%5M-Y-nTw_>`q0dXXYEV=F>Sm+o}Y zP^={0^=3*?&Zn8iMq2$^psRl`mJfwvqAUA`sYpT;Gu%cvc8%$#xj_<5A|1(`;4sse>Bmz`7&E-X8X3l z&7+nwU#Jr`vxCIN^(hbF6kT%K*aA+G;L+j3$miUYu@s?4qbA+2l7A1i1)%=GGLpu| zuLx@+Z)cw7wY?TurjO>R%%G#FB99GIGa8ckWBAFQ$_nN1yUa3we`MRKp=*~=yB~#p z7szHATsUk`Rq)I3liGk3k1K=hYq*&k1L|u=AS8b>p7W*dYW58nZ)rh8z)sp&aydb?LDOZGnj-cMsF zo|$*-YiuLZKN5Leqqtl_`=bvSarX+TXjp$!ki>H7E!NVGWi-8m{R>h=BOJRX!D{wN zs@i0}Kt2m>{OaUd>TT#eaJTNpbqsP$EN~fjPqB&%vS|{GjU63El32MtM@+sTnm|W0 z7R(_jV$Z)9%`_oF?qHe5<%$9@MWwY%;U^6wj|I7=Q(XB?N#leG%E^hg8Ija{ksSgb z-d{r_DK9in(k$8hQ&#B=Y&U|FLZ~Atc!|9aQUz$=Bnj>LprW{)XA1@F-VIB_Qa1^w zUdEpahPxhu4=tu6vn7F)L7F{4RH0BcR1!~Bt0fG_TqnQiEua)la8>=K6zyAA@~8+W zJD?sez_!5uSDSNf(xL}kmex1I4|8D%5f`;M_GljXYZR+w=9))*m2vSOA}e5Uq~_o{SWruGOWw3YxkB=K#)|BkWLBd?hXYJk&=*<5|9!JDJcPIq$O2AI;0!v zlvY7WNu`@TF4n!C=YIBkJbSNwykGW*{cWvdx!~{hpVypYp5q+n54)XvPH+1fX4Ps< z46`irjedh4^f}R094q!Wwtr}^*oQi*YJTfZJ6nC1Z<0)>lXl}nF7lIg{IC+GsOD>1 zMQ0zjBz}ILa1DKcjma^=Q8l)l;_JYp!5^Kc%f6Qf%sRFGRVizNrAtkfl^6)ADL zXvgQ84!$2^Qu4@6Htg=>bJFTy!kiP?&dO-68FUy|(0Mh1HxNjpUrc2mAQvc0(#`61 z*WAFuoy|SknogJq-FP8%7;oUu0i~i$=cZq$9c!M(=da}YNwD*EE#FB_DaQ6=ImGoD zGM)9i-KwjIk4e}if5W=oI8)j}$}m%G9A!zS&pLUrIPH;ZR~M>wh2hB`b(i|hPzbV| z+Iy%Y*UnZE6d|rNkMk7>XB%XZwd;uHxd`CNnwm660v(G%f&q6ylDCH5BraAR*5iU? z6R2NHbGKRhXX?hy1{o}|>j`Wu#uJL{EH0)4`%zOYQ;^MgrKJFe<>)es*Zt=IGK{Hr z#s(7KYd6RZ(72TUzR~Gd%cNA}@;&Aqoxd`5@JUg)i62obP*)pq#$fsg)6Cpk5~!&) zO{v$h{ZFb3_#@v7prYTvzaEqfhC%)dnYXZYk}==-1O;i-X!>yJypf4<(1|pTIqi9# z=4D5Pihfnv-(q!e1D`GVaeYOhq3~L7#8JoNPC;YQs;HTi-5XYR*HO5~rK0@kS8dXp zm5~%6d?IiG7-vizT0jix^PbFlb@crA_M@kdXpKhdUwx58M109KId2n39ZjP+FF8+|dv@w{!lT8Fa{ripUPV9Mb%^OJpp}c2~{cci_5$ zrZ(C0ItByb8C!2vmA$%cYsyTUS()WdAb7ZxY3t%%^5P!%C`s?w`r4kk#{?LCdm4Sv zdST4cLOz^gB2;TB!B(=-%*sEx3S!hJR%8DfO0hwPQojv`bk{e!JUR04 zRKuW_tXeE9+wc-XrC`*V7ZRRv{GZ51xC-9XD63vEZqFfa#pXk9Jsa!CvZ!8W-@D?s zpf`}p>+$Zm37)k^w39e0M~(2&7Z`^fI-trz(%;_3fheZg{iO37GX##xX!c{vHRf70 zwA#eN#e48e>0jT%TQ=YyA+VG?g(naRoS4fl^V?^qC+tEi5i+<0RoQGE z)rEwprWJ{tk9(Dv8pBu7EcroZzY8`!rc@h?vWqG zsb|VthCSx~{=61{sT&z3pQyWq`oLn3>ceY^jo)f_|1&Mi2Un6h41YCIb=fw<2g$y` z-6!KKCMWm=I=5}s)5M4!D-hk{{vD_E_e##9kz~N&raV~u2E>8yqMIFbs2^JhyuJA# zuINi4waOqeRi}cl{P&-S*J%J3R-zTg@}KX}4HadZ+N6h&ZPXfroBxW+dfQJ^1lcEv zK;s?AFKWJA@nz;;sHKj9^I%%9I+&jI#3k{x_rxDJ^1IT5bnxSJ%t=cJq_HQM7mz^D z+o_@xq2vO6p}?&2fG=#vvPkzl7X{YG-|1|U>;y3P17@T~^Jn!i7hzjLue3*@0!fldR($g?fhw;+cM4vW1sZX@Ss zXCDs!7wJxg>q2vh%oD#t<{_0)o=r>FpNQuXR={Aq!KcCH!6e38^v24Lh1x`WFd-Y7; zF$9OU0Jg4`Cylz>&OE)m(Fu9;MACT#Cm?>Mzf1D9@zUccdYQ zgsASWSf3ojMl`Ytp+FU3uuWQioXTzgXTiMWNGMIIJCcL3-Y{v=C=5KO9tfL?!Jem) z3Albb7YVGH@2ikeHLQOK@di@}WJv6c9~#IAO96vw4+#P20m49qZP{Qv_yC6~fZ*$v z_^1#|tmRv6BP#YABsM!A(j?81rpOt3ug7n8wYbJdSq&NQC203>*W zXt)$0+%G_^0LxDDbpcTNo(6dOh^vKQYPUn{#U$nz=|6hanP0=JJzt#H0?oaVbdsB8 z>FcCLlS+-x!K&5+0a07j)gP&iB3~{B(S>uu-&UdMipD!tJ|qnS1}`736M(V($$O_q zQs_wHcRA%{w*4aG!)2Pu%%PYlf(yZkw} zd^bE6MHV0;v|?-x(jmato#Hg4WFD*efD3W`R>7XzgFqZ0tcho;0zg*N=L~}B;a(Eh z;Ck!w{#yjwzi(v1C{Qd3r^gRXLF$&po}rdmqb@}3TzQeq2BG9)q{Wn8`;T~@eEpO< z{T;Hb3=+ztNQ*u_1CJv&60}@s&<8UktjZ5A6|!jLylDW^&~RO*VT0EK#9r_L!KCKk zc&on`@+i$2Z@)33ex479@GjmaG-ThT9nUc>K;DpDK_vWcjyF!~Sm+3qNQC&s;c!|a zSR-;;i9)7*FnH6K|WgvV3y1X5JPdVpjMX6;|bTQBS>Zr zF*?~O#6FL%UZ$xIP%Pe2C^=xiijsG5edWqOdMh9MBL}XSIJj?CPZ5K!M4C4r>_d90 zSA0JM1%qGzK>CR#BXqGTc)Q-peW={<+;HE;#ueMXyY>3TF`XkXMBQLTa&-7yFxh~p z0$%)UEQ`Ub@Or`CQo#kGyH;um4G5F~lA47pViq91Fm|@HjRP>+kf!Km7WeRJr@^gh ztGtgkEX^7B7|@6l;?DD109@0{R{OiTV(#0Q4;r=)xVSgPAY?}_Df;O7;WF@ncw?-- z!dQ@PgKf=PMFk#=H%V=QUo!y-+=@F+7{NU>2eeX!?1Q}<5XGN!5)M(6Nf5foKh6=a z#BP^q2(-^6H};Bs(yLpdNkeg=C%ifk=+%P++aOj;U@XC2VdHjANi!cl1U8LtrPnVN z!;)+^f-cH?r=0XXw>oMd_fbJ@LBUnO$4ei=6t8%K0h=`eP;1@D1;(Y`5NvGxtg{Gt zz_12R%mtr2W9O+n|5g$HH-(X`ES!ZwMioEQ;VeYiepC3@S$I%;y?^t@v}Vb#`z%s| z5Zmn6f|$80{ZYDd4~A}|j=~pXa%6zc-Rh4;b^MH z=|#byFoLAxQR@4qRcJ@%u?>#0Hw@|_7AEODN4$RjXWb;K+Y&rGRfb2!eaX*$2FKxF zjY4Rpk{sC{R`;sIyxaBzd!~XS&I+v65gd15+=C5DXt;dC z)Qrx07+%@5JX!N_Ej3pqXdC+z261ERc({CbvpCv&VBY9^?9@u2Fz!+dR|x*$!7Qa{ zwoY3lv`iHjYgPQR# zkb=-Rr~j<-|C=RxzLGPLp))5%y+cWmG%mXy#|L}!T^XiF!5->3594lIL;}|vPIn63 zIi4`0VAEdn$3`EzsJa%hZ+cS^CxWyD=r(LXw;@2MHo1Ef@7|T{k>m)1S3+n~nF)li zyyq(;39S%c#mPIcckG8l0N`Z4F(fsH3PE|s_NbFY(GKBj93V{1U>#G<5O#4C?4M&a zffUA5v*;OQMXslYkL;70?9|Z}i-F*R3?9yBBBu*@=%{kzFMo!uC)*D@8 zQmVf1V;NI!H)cqj2Xl6_m1;}hn&^#swgz=u#T@-ph=zyZ|MuG$ayH;0^UAKJJ?T4v zg!H!zp$9+XTj!_c8bicHc0_6ZSC8)Rb#00~LVkJYdSEOG@2Q4YAdfH$A7usdPz#*- z8{oS&he-6|J`4I=D6Dzd%wq7Zy5Dh~Kmz4Te>Y=Ky_kaV*n6E=h=x!FMbVnGX$wdd zCMD;Y*Om0V8E z9I(vFCQ9}%)w9SJ7_)x^Nnp(rVZyPSBp}bz*I%|%d=AiOoKW+nxqB`^Y5Pb?7fHdQ zF-dM2)xVzPt(jxUBGQ!{U@ru*y(+g=FYEL&O9&6&=0T#{yTsO<(*NW3`M-L&83^Wq zmw9TF8o6M**T%zC%9U=IUe4#izib~BjWP!qv|<4epq?9f)9n1F-PqrSWHb)J<&P$3%O#b9%C)6v{mj0izIB;h&f1;>t%lGBSEsha_vLS~m{OH! zRYoJJ9N(gLT~!tY+;D3@0jYbZj~4{kn_S@_{Y7*5)B%=Rg4fPxxy%wkE+GZG9h~%C zx4+c=qm!OF5UIcI^Sbq+{?2Anu7H6e%SMo>k1t1}(|!T<;z_vRPfT|i1JqGy{`VsH zl}V9}hO>Hvd%*o|qsv?KDd$Q>9D-b8voUQDLc};mKrY1~$R(CK`T6-={&6OwJD@!D zb<3mrY$8AN*&PvXBYi;bR2&--_QQz;u-dJJH*YHRIv4E@k1&k5DUaW?a)6gu zb_l*|>#MSa%2w*SthZ2Bka!uNhw8EjK&2GvujwJ=$v2>+P(Q0l>s>~Yl1&*q3E|!$ zt=K>!)kwg>ET9<7?ayt77_Sj{={*K_dGcE&qBpwq*npAmH>uMdg?F(-6x0QJZ0;h5Wy-NP>|2+aE65 zd7@Wtp?VYCb*vLHG0WOG0eNkLUPL zg2NSnOK_9!1mM!YYFak}Z9u@;VpYF5o~7a+zGjAz5<#$n1XQN`Gm$!e2dHxGYj!7n z0l;wpd=$nY0qk6nI^^-vJIJXRAue&04M>}VlXDkUnKPV}hmmLprj*cd1sg>{GZpJ6 zMqwo~*Z*H_5`XW&@C1IJonPDoeb4K6d3Zl=j0bt|)NOe7n=`rrNvM~jX4SY<7b3uI znpW9CtIR=m*j2x7(+>xKUca#62acxunYzLavu+?RK>#@y1W7lX1V^@m2UV zwE7W5K1fa;=L6(k%VX9RW8f+^FbRKEc7j*;l6oVaP#gJlBWm`395OA6fKGe8Z;tUm z7qTmcx)$P&djK+&I$5vU=RMLz=pW&?_{IcRk1%Q|qW=Dxmezw9i(K?a1s}3r{oCK| zzkdV+#E2Y;{Wo%HY72JDoFCtVyf02H!(Psd+&Oy>5gZ#|7=m0PBly%2gW7Zvq50V| zX0X9@5;o1rcO^_-2t)nmGL-&VFPAzuy?1L7Qzi4%1!vtxT;(!)%p z_F$s5WIgP_T{ELE;}wS$0vDRff^h7n2$Y-jh9}Ef?%baGK%GJ$ILarXus@za^c4?8 zp4O*(u+!(9Z;~l7Mu^1I3urgv?mmc4ekV3oycgj>aDc>+7eEbe(EkR$rRU1u_~Ekw zLR*iUQ#wFi`Fp_m0fcr5r%2)h`lFtN4;KGO*`cO_B|qQtp+GCxTXQV6bAkgN70O7E zcbg`xjx^_+YHv83wl}65Ad(0{CQB;6f%{z#R6e(kzGwA_ZuKB?6i>`^cTi}0ARO(@ zt1ktv*AWu2PfQep_%CZ%;DuCIi^3e9fLlPrt4R|D`qu)e{lA=h!6jwa*&K8(U zz>*^4Mwm;BWXe{wa2+v;Sx)%}`-Y_9x!;Zw<^0zF0UgrybkOq=l4vsgWHEo#!NJu&P%$T86ajO_INfsSF?j_$i2BWDCoPLXLlr`+69_8sli@QXxx~JN9uILRsJN+N=36k)6A(uZc>$ z@g3~XHpEPGFiF4Tg7g(w;`b0S1y=G$8n>$@d8{8?|5fVUKWH7=i=#1; zYW8Cmfr9W2lwiFP<-Z|HF{R*&SEr7B71Rmt<&lJ8tOcJkdf#6B5O&*A^*Yat^e$Hx zDR>>-p+rhV?pfxG85A3EDaf&A(xDNUe4Ls30_4r@yTf7s;GufsGb1;h?DV|0FgVOJ z$h!nGlDLheIDWn+qB!B`?t+V$70|oKw#Zd~Bg`J*8N@*10bM9EOfppn57LEV?xRLZ zKC@{=6(CxB5GQ!)E6E;TW*8gQ)I!e;8FLz!9umNfb1jbiL%IJBM3jxg6Fm91Qg=p?X zBx(4EtH%#)!y=t>>JL()8Tm8`86C%gcMJYNMG+J(x9MYssV$0@!A37S2T}^Zse(J` zqrFhn+Xg$C?n^VOrP=^$=>Skmh_VU2B5?$@6iMR%x6m9=+0Io9BlJ$}he>jc#>Y~Z za>^J@qQsH<*7C>>cuIBufP@=5 z#y%X;BHyyzz$cIhdgEE@5qvj4FCsJ`A;<}IrPKJ=5>lpwEnu?4jlP0{U|F3K5)XrC&B+JJqrs{b;VD1H(~1VkRIN zsM^xblhI5g#NsAvYHjuA0j9HRZ1}XEj)2^ne3}4gMVnzjMBz1Gr{_}CRzjdqY=cig z$*z=uhVd%Fhehmv!hU%x0K2R6?)!5yjT$luwh0Lb@)4e`1oVkYjTx566z2peMQo(j z@U2!(7<70`?{X-+SFv%r1p-&oEpo^?#aprzQ`x)1BKR^$*9VXg7k8I6dp!e6{tVl-S@diNncxkERO?0)ooRfwuX$JAM;^M^Tic&GX%9nT#6KLap$O| zj&syf7lK;4M*6M#!9OU|@KGI*K~LQ9wdbJFuSts!x!1rEN3U3Y$OTW=`M*Ui`H1^n zFrVl@>KR*>`K$f?UluntImp^2T)A5S!WyY^eOh)0J)eTwd5{5qsJg|n#y=`G{<8=< zegQ?t@@hI<&_E+!Q^7y{eJ|%1SRt3}TlJC&-RYT^f`JYL89qXLR{|A?~t z?@D|IqQ~AB)H~$_SpwJXE6J!BTHIMVSjkr0!87tBr{@3gLpxnY7O1k?%PDBw!pCOk zF>)5nva0__m(l<7yL3Zf|7L$Fa@Y;sEL=-#D(%lW+8^a4|51m*-+OE(XZvq2z`y@; zNee_qfFA7mP6I}?A1Ch?{?WVlU%qR&0`*a%!Cw^tp8da{A^m^h^B9Tp9%*>-!f{l` zVn=%SZ^bf@?)%{a=%>5pKzpq-fIci!(x2JSmH&SLOq+qQ2A+1z*4qa&#O;f&6Xi+3 ztG|5xPz|;jj@0Lg$N~h|4bomkx^13cp;c&k#v4Uy{-y~TN;d~*0v8eEZBB$8^eg9g z=xd47PhU<>>o)<;^i}jvD^Ygp@D+i!)#xXUnX1#jV+%dnaDdK>Lm@bT(4NhqKUvmW zvzY4M1LEjpN!0_U+smVIFq_|kZ0|^3GQuL%?oO;6)wNDQ&UH?Cpg60xh{_{mokZwl zWt*)Hyy~K}hqUq}xLJ+WLVaNlH%ZpBw;XlRe0Csc@gk?Lj*-vB9w?7(8n)qX&JD5S z8Vg!@|LQX@V;nOnoEU$u$bMEO6*pq&eHKUKttfxNURbuSy z+aZDXy$V#GSI?T*Ju;k@iG9DN7v?_o`nbgeR@*+m*G`3^%y(*XG!DzhwRU>*fcq$s z2tC=4^A@8|WZfa)zRcoDAF=ytabSY5vz36Cxx$NKq|!x1>!U0AM+jAw%&Q;aH+%hg zWjOA50D6`sQU|+i@8$iG2LIA|BO3U4|Ev-1F1*-}*r}kPz2T9pQEy3ZyKM$IdS1wI zzMX15ZY|w!FJQunbZheec>I4l&(?EZ|LQzD@TM=(e(dso+4Lg8ERKsczsT3Q))iX-}I2>r4P?hVMlFP(b*rJqQx3=WXQITdOT3FfER9 zt*Hr2S>ebK+d6dX)7Gkz9WA!-Bi29`0&MW$G zzZRX1Ti_V3|E2UL5nn-1=0BX->bH)cDbN{+^D00tLc?JM$k*I_;f|2O9MVDo0)=Aw z1Gc}#p;W}h#EW8$NazWC5lEwoO!zSO{#tZ>h+b(!(g{TifqWID?sW9U!&r4sJ@F70 zy}x{hm#qul$@G@qn!U7LHRJ%>jOKx0IrtD7`iLXq*I@j0lF-*rVqhygNbwNa&oblA zCF1bx1k8{t<`8~1K{9!Ss>JbcnWM9OKk$t=@K9m-#LiqZg*ZcA@X07Gh%NEff5J)Y zf=-jZ-mS+w!W4(&4^~=iFN$t<7gH70H$eaB(n)Q!T(y?PHl>TQ?@$E7Mic$rh<3;J z*w&k!v>_ET|pX+7-Sr0d@y#M1(jbk zOi5s_&g4f4Xbiz5sYS4zDUCJ#xH1i&W<1)Vt$8K=$@I`vLQCgWgjS9 zc9sH5KEjvI_LQ%xFbPu|ad-ZBO?3Sa2i+*lO4^)XJ*N<{mbLT&OjM9$^44w-snk6O z?G)S3^}(fEK@y!#so*Xv4Z#leQshOr6YK&n9ikK|PN}a?BEa;y2f9;IjlRrfaP64d z1=w=ZDAr{kOv`I1-Ew&Y8~7K2i%Z%vO(WYhfMMtV0<9mY6?H5;F+F;MNBBc)##uB+ zvE7X^f!=b}20=u!i5lh?K3|RuG`*I|_J%G|AF^K-fF0|pQJC(-kH%(7jc%O_UlEueKhKzP!LwkE8}0WTXLZ?-{Gs_y!YWNN&O;9%)f zfDM1w2#LH`8UOI9QncRvwLjEGjO6+YASWKrhPu`)1$Fvi z7IizuW#@Jv^bx&Z{-uF=hlKCiJhxcjo=xox7rn`lTl5zNVM{nb5{oH`rJqF zu0D>!)V|o5JDdGYwo&=#R0CXYuTUu@)759~_^CDe7T-ZPNJOK(h4RWN7vD7GazbG} z5VIzxq;-@5z$}0O7>|ySlRA2keno7J+KAx8g}4ZR#Vaf1+InCeKm@){#q$ml!A1K4 zX+p`KT?i8;V|Gw8p#alQo7!f^YNQqGL6DumhC08&VNMJJFQf@;vb5Ozei2A zxeD#lL>SkrdCYV4WhWe_6}@dMCUVp~Ys4!~Fk>79H7%V}u8eEetL$Ayp+ZqaGyNmg zCvoN>)0&%=idi=KV{YXz#_FcB@kgeR1KoL|BI#^mEMuuc(=^OqZw|f>Rp%Xs5EbEM zL@Z)*Ad<$F@J$!+SFK6ckGt#D;RfoC!LEN@dZ)g63f?Mty^oHh9FnLtL_Qh4al&ba zAI6Igm-D7B^uc*t$29ds{q}MZ?xLlm;b7gNZo|SacYQkaTw2KsOe0G89tKcWJu6Tk zyscn_iL!P7LxQN=)50Ta3owdV@pqi6y*Sh;SX|C*$S|b}dpP;}BJFO8P_5`t*7AWA7N2;Vlk7b_H+_?GSYqS{&T*PThJCG7@;ska;-4X55lXm1r)uVxjqSz>^@C&vZ9sDpTfS*AO_ew$$>|DsmRb8e+_Wtb1? zc}-S3(6Khy?tbvl|U(E3k!Fl9k2@2fTzB;icwcngFhg+k$h@X-qOiL zgSfUlZ}NG;7^}KWoTlO{bk+Nvsb4|}#8NpB4#7Y&Av`IGGzE3SX z3x27F4YdtFcW(r)t~D>JKRQ3zX#1dCWXM`VJ*HWRG&b22E=*CN``nyQfmSTp%T?1a7ll=S2y{)YahRJ1>A*KcO|tH2XU105gWc=!ahB>wy)( zdKe}l3iUzQ2svE$IuQHD?I0^p$RRIZPhD+Cdb)IJ-g1YJl?Nl$gYGeS9Z0V~26K&T z1ej}fhSN^JAUwxXDtqu!PvU6k3~6C$>wNkx;@lh$r@#9zcr`4*|6C_psac4jPt z*TdQ2iMZS2*ttV~8RzO6$9SII6X{CxYd`@R~{SRwvXCAS-d7XEVy z*VAP-U*7U)g2YE+Vr=evM(+`QA8OHuCZ#_Hap`;C&g^|W^C(%m0Sw10G!Mag?$!PW>B$s(uXcGn3gs$jBI9Oj{V6XU*KosSyeYqW zIroxBj%te4hMC8#lQ=ZyR@Wqsf8g~ZPNMvrYo~R}Y4nB40!IJI9vQmG~&Leh4Q znjqj3D*7yw7 zQG}(2EWOR*GhNq^Ecyj7dX*hD0$s)OoK0TNT=nEG@c~FrWp}_*d%}jr$RcQu}u-S^d6JVcQ9XEYV=g4ltWBRuLDQXnf zYaWVzrndoZ*Amsrf~}E{!gt4b`OezIz;Aoy8dSSn z;e3Wdi^VSL%_ARuk`E}KFVWOIDOxvGBK_8FX5RU{;z*3O#&x9pD?#H|w_vXYwj($% z#!?#ukDeAZa`>dCe)(gvY@m7MU!LXy%60XwjoO*LLH5Z~@v0q!8{aCYTv#g3H_u%*O)Y1{cNfj}`oXL_# zsR)-RG`RtRUiwFZ?~rM?fP3z%n&YY+KVN?LO9>FWNzdh62;+&Px~a!~4|c6_l47l2 zfN4yTcxeNfi4mIdMq3pk5PNxuCk`)~_-Apj{V4et^xCHCasgNKca_X?OGHV zk7cI~OgEB0`etF*!3s^f60xyNf#Mt_kM6MqNNME_c)4Y;N8Vf-nE`fcjXdPysf8zW95rf@bSz!t8H5FMT$)XhdiAuPC z^wj;m=cCsjE?mN7ylyNsaQc&^q3Csv4MPBHs3c+oEeViII~4=_Q51^2XcyU|+e#tR z3N!-_Q6?RB^p^AYlcXA(m!x;maqkKeNBIs$RYhG59f9k6nX_URRv=e$ZLhMDDEMSr z(&U?usd;1*n`kbftN>{-gZ->!GU+M>VFVLr5Vhw^Z@Dge%zLY)*XN^r2`;xV$yY>3 z=8FJg?_;z$OT@#*$dVGpZ$ST9@aTC-{&XI3DJd;l4h8-Gye|%F2zw+4{c7IzP8y8B z*52|G>&M?PwP8w+25SvXaGm<%(>suYuoTt9=cI$vprq9OUdNez@hG92+_p@;Xqu~@ z+XYEZ2phP5YN7(Zv}tK0`Ajh~6JhN@%>4D51?o{=WW-I`R}4pQIB8O(THbrG7oyY{QXD6u@DnWCmi;b*%ENu$4@De)w*I0HmTC+cWLj!m zD#2eQ$J&=ES$S0gmosf{6ckeY@Dfz>u7deuEbS#!bR3}}srMU2){?4y~_O}f66 zPVkaWHoQ~HcNT2-c=@GSC}HPaBxgJoTxxTc47e6pujEz71=cr=oRGDcx4FioSciMJ z>7+Q`ei|<6G6}lFyQvjw3S$$czH5D9OQ*@*!*c+^el^lBQ{f_kiRFHCw{;+SKD5ao zO73B9wLJ7(YsFG8rLLZq<6QSI48v#ov} zFQ+h&+s+UxPl_1fxoMXNOc*PTkTQ=c-(^pIeS-RdAoz8$J zT_m?Dj}LCj)FRW!X3_wuj1dMcq!jCs-^K}Hi#!y3`8EBj4xpE5K?2d<$aj%ho6aMT#=y2W7wCS*=GV)pz2@Vd$jL-m$>BXi2)IskJZ_W-^ z`~8bdU1kePV)|v730i{R9ZrXy90r_HPdbC_Sk!L9ZEJMw(?P~P1MRB=Rl*>HP;5?g z5r`2H%NJ41jG2^O6K)cc{9=`gqpkEcH^%;Le{wVh+T{efhz!!AC5+P|uj2TU&yj;6 zmUZhpE~ zOK#{^?#c2yYYZ7$Os;|wc|SVq8938zKRbjoOGGKQw=nXkymcg z_vzd>fALXxaf`5sx~h671?PUB_WJkN28|8H=0zNm`B`VC<#X` zNTm9bz4N8{4O5k5IU-ACEu%eeU1dm-Z~SR6nHK2Lw$G%&Htkywx-Q2nXiXD&6#B^N z;wXP|q~!$V)I?!eyUrk?e?CF@-R8-#;VYJAm-4TB-U~b#iTz^ou$W1@)hD?V;50w( z(#oJqGqUwPQ*wY^{<((!=nvsvEt-q0D`boI{`r*oi{ru6!n4oJ>+$Km>+u`}oNxUVL&_jgm(E!Z&9H9jv9QJiuV1@VykXq2U$ z;CN!)Bi+5`>v~9wf=xINjee1-v;1-!K@ z#(qo1c64zlQPe}X{LG8dK z1K8I$)^?9U0k=@1!b53%5^FhdP z=cZ{RZ4&+jYEuLct_!=3>(_2wf5U*=uX;MmaHL>!srS4t+LX3Be4lHk&NP_eJynxe z!1UYO6;rjIGcWLt*o9>%o1V;|It*kE()}KZjm)*^zrMn`_SZ&JOXYcun|xQqreyUO z$1HEf&5}tT;^dTSW)$q2{8DzQ&C6>HW`}Bf;EB3R34OmV6RkiIm?4$9b^oy+ruJ~7 z3SrUR+nvnle|)Ojm)k_=As}j)%NH7HH`Ed$;+# z@q2G5jxLQCsGj_d!iE6TkGU5!(6lQ>sTorcl~|sbJCKi%v)wJ_YJ(}ZW28)g+Rf%* zpeo_ZQ%BIZk(R#M2o1gqBrseYTAF+2Fzr)@^7DFtdC+~OCL=$Gws>S%g7P~7jz`R) z^5ynR@tXMD>X^g1v)3@VEw_hp7klVNbwg<_6FPH&am(cLevY*75x11kQv*8GxYvOy zzrI?b#!X+ssSL%=Vn%u8zC;pwNAOyTq-i6*w~qun*?^pZBVNFdxlgUX5a;cVXlVju zfP3C^?$b)4`}&&53_NIYvZ%j&h9YQunYT=lfczD$dmb{Q;PrZZy8TY#jw{xju=1Sr z7h~0*S&C5{Ci&^7DtUrdxx1{bo{D+-^ARF6EBim=U9GPH1u^*qJIXG~=JEvUJ7aDQ z^^tN4zZ;R!$0Rt7&0`j%8m5%a*=Z|a`}^HlIj}G=DR*|*NAH9c6iVaJmjSu^BSH|q zG*4blqg)f}yMD56<6j!yTGWK^j)=%(jXv*GV7^^9TyZ4Db^y3&;3`un~-o{$<;Z$q9 zkX=5GCygSVufBxprn36rTjh#V!!Y(Qt&W{A<=W4>-QV`K23I;e&;~F3_*y=uEbWUiQyAD7&hI*Mg{JM<1;6d3lR$Y-4Gs^IWR9 zyNl8HF;s8+{&d`z)twSdlB*|i!?-O=N@K=?n}wFC2(?`STHZtU@F{J?Wyn7v_+ ze!J%8m18|XlP|jND$=vcm=0e`rep)ch12C|#@QIt+c*j$#2PIR#Vp5bBd5$F|Xq6?11@K`znAOQl|5W&sBWF_y zL>OC_wOp&X18`>7JvMw_ zL~nJ5VHdQV5_Wm1?A{c>VA%-lZ6^UKY*%kPHEX{Wzb|1`=wlQupq^%=b81CfRnJ6> zlf^ubIEArYma|dfpdU zw@etEfkR7HeD+~$@lOj!Waur@=59D-tOrx2_cgT$Rg+y&f?KKrh73CCvyQv|o8iW! zA=_39ytkwqt6{K$?ZEpn%_48}hh?iO5me&r-iH(TCAJY6I)w7nj3}(K@15+Nvjq^v z#`?WVh=_k=@T-_I)#Y}Ko5n2GUasQZ(G`#Lh7qFusPQE!Ny zQ4dMSJ8)z>{Uh)R6itnwPL&I;;~IUMCK&Nx=wcuxsX2}6D0uHjuWmo>V#*>NOwqs! z6pgH-`CR*N??Rtw0lLl8*SkFJ(zgTNQV>oHCObtG;gx!AQPMUKnsf(kpvy9GNCOoq zc_k>LKancN!swgy5au(8vch*sQU2GNGTdHf*hkvTXsVCiTyRuVGiIpJy>!P}CvYVP zFFvJEFh-kvqNYSqxL!ZFRNTxl8A7Xu`XVfSq|=Mx^>yvvxe*+;`?7Y$gWwzMgR}vD z0S-YwM^*M*qQ#SX)!IHLG|Bh$8V+>9Kt*zm8Cf}TG-E5dWD;JA_uM0s`s0AG!2_yr zE<+aV4aKeTB&-rvI!&j-H(MiVrCd(SF5A|0$6J&6xqW=o#PeFyZz))1jaR)x^_U8V zP@C>^OtCje{q*TUBMsQ$pwk+&-kISj0+a_vAZ_L zKJhABXO91*HzOYL`-Iu;n<#A7DP3@FO`Eiii<-Y^STu!F*c)$6sEr3nG!Ntyl3&HvZns^ zJBfy3zr$EDOL*{J1c}3TAbpH&5pYk@*xPI6)g?^J97)>`FC%>FD9<0{`z)G^3TlV$ zPIMUkz$CvykgS-3FqJ(*g=TkS?j{tA_P@&t?8XgLPYV^KX)@xs`oerfG%xn>fYQ}A zl<&(6I~|2PC2MlY-d|UOvXAT3%UB7Lw_m`LH`?INS@<<}-MZ>XUNNSiOls*H2Wn{_ zI-AxL@AvkV75?>Yw>~GtsdoxJd$nHZcF4YxSc{%7Pg+FHQ6rYr@GkaXMdvsSovzWJ}HcvV^2m@Ey!@ctUsYIfZdw!=mKv*fhc zi_<9|r2QYIdB>WQ?3F@Wl0TMoODP3siWmA=KiJwPk{mC&Jmlv6gP|v(^J2KfqS~Te z(EV`thkVnkf@2QStY>zm=&0@^Gvs6ZCFJ+Sj2pdC_}@_0rudhDG3OCvGoQUNyV6A5;IcuEG?J;Cv()Q){)d?q36(N>DWz zE_y+hBC)xoL!81>S%_amM*7hM^+A;AJdV$W3FeT5dMDD)u;c#}$?Z81ofTdo3la*| z#7v6_3kfL{h`htC#Jrcb`28YFN~m}J{RHcD{&?pv^l6$g-t*k|%*{B#Ck(UP@?=UY z8?f?uD2}R?mOSzIg1QQMP_U07LwYQa!f?}_nz8C>MT|z9Wzy9}wwu)r#3@PXE1*0a zH}?*OM$gTL%`&8Fna#D=g|5|Y_VLsUZ15Ky{vpsv~7Ci_xpj)pTZCACk{fQ z3quQHoanVi>Y`>p;2_Y)^~oRK`^iGra&xc#wdBq7xfe0ND_!alV@u zgb({aO{hJGJmw6W#$kec9!Q6athOvQae;^VH%^pAa>w(Hd&&WdHOw9*%R*xFGhT0x zr_J0fkly~)g@U`k^VAwMXfHI~RQh!lieScW4$|VzxJB$;B=90_mqPljxgyj#CX<1s zqgA2}8ZJ@%ku($!jj^`8?-ee6t0zi%jR6{G+kdlII$sLK_%&bIcMmQ%pNu z>%F?B=T_w zV2dyxi*?zg6BD%OOeLWBK#{z{NNe=c9ld!#*ZQMb*h|@NM@47ptS>N}L@E0Iv#61X z$td{uOjNe#u1#A`_c;Wj#Rc&c(eqqd;iuQ^D5dh;R_|Yo==8Ty!o=lXh`yz%NaO4z z_{Y}l%6KPN5!h`ei-YF4+8y;Z6*ANst*$z(8fv+s5`T(G*>YPn%UsD7Mv-ewq|{f) zryZiCHA*Z?^u9RwW(duVp2RC>MXG0q@6y=hD9A0N}m@=c>@ zWS1@^f?fJ3>)TPDVE~Z@QIojfS87y2&uF#}rh(G-x7C|J$3rvZ28dnDEoO^(YLqj# zRptA+?`iHS*Ox*n%-s2s-M|QnZEE|b5$CO$t#-T%BTz%TY^UXgp1p*vCji`f^vELJ z)P*N29Gz{~dUp+caeL^Wcp)V+f8MOW5QOjglWR%ryD!;-i*Y{>)KT|l($T<2mxIf! z_4}6ERo&FpQkNZT%_Pmxs!@n$3M!hih0sV+&ss1Q=y79DBt~U#4VB#g40~r8p2bH; zH!mh?3nZp1ft~?ZOW=?LxQ~!F=&E`HnleCRVW6rEO%m zdFXs-P9gALp5yr)Lr_%cR_`ib{Cw3?f`taZYpw{YW8FaBdyHsthQzO{mt$zKvC0ee zJ$Det6~1j0ILAm=-ZUL3ZC^MEe8i|!+tJLmuptMwoNay>oI5&%jFY_2`wIT}fjBrO zL3B9nA+liyb3vD-DBk|?shRyT^C)dUyM`~P($b8lW=DAXZru6K*^1RsSN|y7MlnYFic%(_zgLb= z+0rx&H{~$p8R#Bdr1HxEX0mmay4wdY{}p4B z^G?T$Gzk9}{YGUq8;)!g(a!D0%hdyjc%-5(dC6#6srvycjX6vrmC=8soe-BF|5JrCAc^bpw}Hz+ZL4VTK=3FFL(#RJsfj%by}n_r#FF&G={{?%5uIH%%B&5Tmcb97-sa~?n7qS?cbU! z88R6WIKPa(cn@7!h$X_|YncXgNRDNmCl1G=VbGIjj=!+}pKCFSFtpG_kbBe`O7RS5)3Y(&G5vX_6M@ZYz;J(Qy>V-Vkj#GP_`3 zLE?OSznu-oK#*SMCpX{b)HSV#k2tpv?rEVu81&lVN#(@t1g6j;!W5G2tR@Vz?5E~w z0h6vR)i)f}2chK@(l{$Oo5yKaRPGIEG2c;eGEGsz7sj9r=ij~B^*+GgEAwoCl`EfV z@9KK+JX;q}L-g1jaD|+Gj-pMi4DoEsc4wF9Tdqg3k*Zukm)GgLkNB2t7IL|NCVO|5 zRK(al?fWA?ce9IQ=I&>LA}|r{-IRHlbq9$x7BMkx-0Z%_M;pW696W=6IAs>m*UW34 z#`|2WbWcn9$=&B@mRITLMZ^cECdfTLlUSUhV4Od{E(ZIkoKvB;XVgnl6vFWfz;Vdwp^Ojoh~D{HeWuD! zP!e)Gfx9hE8}}Dqx?NCRT)bGrVRkxsY+?T}-lJ-t+$66aG+$oe(+ z`Z)dW6FXarhV~*I%@k{(K+OCKY71M{$j=<7rLpkeK6}#R9m`)x{j}sA^?hxr%KyRM zTSsNJw)?+;pmaCVDIp~--604{cS}iw3MeJrD4~Ruf^;h&0#XWsbci6Jbcl4HYr5XG z_q)&ejlK5%>x?tT8H3?)E#cvL=A8F^U-7*@-(Re-#kvOGh2-NdPp`PvqG`0;*jrcC zNmpx#4xsjeR5Q+?*K8GEj^ZcjbDVJS@O3ULW@V1GlhWieMWH~7S2^L5@SlPP9T`F+ z)}jIzLMMfmIe}chZUsThHuUFVjW9BX$b7^(#9rLo&)8?f@W8Xhj>ri3dmOdL{R>cu zf6e-dy~*KY%TpYD$#Ug~*pKhOWEsOFbcZL_q-hG0BHS)ZEAVJ#iq{T1-V6;?EaE)M ztlS!Ve^%Rty81rtXpu54fpg$(fz-6^*B^yX|M`ll2sR&`3vUkO3}p!=!T?5LA{`iGF5 zzBfzNrsZu*|H_SdH#KYp{39C#b|nn~FPy!Doe#6b%)O^&5?U$4WZ0TOYl$J{WYf zAFUeCtS|=3`xH!h>YO;6L-kNwGiet`^_bjCCxajZk6~Ii3r7{#UOPv1#WVwk(+)mZ zJoCA@)wMZZX^lrT$(WZBkCL}_ z?q>5-VWBF$y1Os`It_|@^_B7G{N*oZB;3sw(n2!HMG60EG_8|kfSX?z6hr?MDo3kX3{pE2guj=2!mj(LUKFqq+L?&>s$g5*jG87v5&Uq5pB^$D{LO zbNPFx8j<5#6?q3byK8U``K%Y^is)u;*Pu%9`CXsL!%D-R=rR3;K1KnyV&)4ZyN66;ymig|CEE=AGZaXDQnVhO?v!i^k$6jL@H$ zK_hJUNqv4VD_UgC(nEGal0Mktjg9H@zQZtVh#~v$n&NVkTNG&I+ou2<(WFhKJp5P| z{A(Wp7U@%ng|p|&lx_8Fe81dTgzbLO;Ua4EVv?d2$c(Et-@qVm$-JP~3ud&WswmN` z96t$f0pV~;J`Fo@#4UlOcB9IC>n?5)VX6NX-g>V@)q@!X~-Y-#mU49;@IR<8Lb(-2EIWPygyEYax3|8tIe-7` zOeIAHw=sv?L18(`J=9rH)!_%a%{$AhNkSI_(%yE9?mVvicohDyz0vR-(;o|Ko-~t{ zr^g%~;o)gYstSLBJ9#C^v7LEb_1MiBzEyo@P|^8z%(W`G=(%&FFM?1Y`IyedruVH( zU_y1_>;Gtw9j@4yTC9J_Nu45?%6OsS`TpT)N%BZ4Wkc%ubpb(-1!cE<*0F{fF=}g` z#R=WZkvVl_P|@GTq9U5umRr=@vFP)%A!1s>r!D&0ktkom^`i0B(-HhxLMNz%mU%ps z1ZmM{peZ=gkElq?`!crhKlw@8B~>TgDLb&HUHPZBW6o7^f$yb!{>2EVrKTL2F*q_~ z4p%xApVnsB*EE`2k3+e$7KUM^L$(2b<(lSuX7uSElMLy%q(|&1+^TD?7r_8%lflKM zKQH;MAJwA2xlw{}I)<2iL8&@qu-?oTviTj;A0K4tRWgQ3vWWMQOog2D)F|ia=iDLy zK8VyDK-PpoftS7E{#RKO@~9E9{^Qek3^lw*!WYVT)ml8ru)f4&wSQvj_imIb*d#&o zmH`c!_>SD6Fi?-_8jYqVZlH5#=$yC*55;RhYH5{$qInZNi8UF9;HPljK9&zj29qqe z-n=QxH;S#H-7=$WRelx~Kiz`A_p+?;|ER&ls{rjXxq$`h2h?_~u;>c}*T0PV(-jI!B1+ zk_1O=@ZehL*$Q@M}MPfnF2jvvE1WoEZtAtAoSKT-s-&9^!nU;T^CQaj95fsZIPyKXt>m$2pBtHNT zQ0Ao*8xpe813n#;^Px03##7(%#;3D)@r6nUzuX1VX^Lm z9t?v)pLSGZ#LR88-uO*CVqgtnOasbGCv`m~2_Z>0-N$>2A_8@+kMC=c(gu8Z14uMu zZhrj13-gyHV`dTn<~ahR|B~;rh^+B;=~t9x^sdwzzBG6LZQ-T#WnesdLa@aFCUI(< z#LoLDZy1aCCy^WKf86^>jh3qedgW?%nJ;QRX9gpNw{825J8v&sv1hKZCx4RyCk zP-0cQ1jt#e4wKbA122+2mdkvi{f83PAk2{>h}4?4`DT}q*Z*51W<7(pyUh#c#*GDZ zb*RNq-=??*7phC7ha_}}+8?ytk17l(vz$>dN2L%jsW{6Kd{Mvs*sC zNG__bx7CHTnE-_(`D`jQk$BRcf66h ze?kaF5&1`+vUd{t2K?B7W4dqS%u#Zq#M~s6h3}UszZd9gM`n$^d0c(pcUBqdraM7V zWG9mO+qSRQGeAIo73B3}^l`MO|A8AE%aeaDn=6Z%fr+75L1*nNQ?(Xh>whU0YH{M} zjoEviQVRP&Oz#oc<4G^2P8Lz_gj_P3e@rh$!9+tM>-K9k%vA!2>= zET_R-`;+5HqpqNv3Mv8dvphE#Twhd(E0gtwHd*%*J^Wo0t|IYdHb3x+A-`zN<4_LA zjK2FSr1vKWK97+u6S%c>Z{VNer&9hv?If|?qQ;6dT_6sNNnoK}I1>`R#%TB*_m#gL zyqP8v4_v3zXyF^jY@O@_syV&nx?Pv!crw1RY!o-ENj-pOK25J@zG*ZK!dzUVTFkKAzl&vGqz~XR`%a^Bw3^g~B-8^N za7Vc;MM;nx?0y_dqM5dlz5Qn+xlWje*KUk^Ni`@!N!qGgt{YQkrbaGm4|Wmy)kY4C zFvf0MZ(PZG?U%}(r1>_Ndl)U7Eh2&fNs=g?3eTtDbjvcVF@JlBS7hIW)F?Q1NABK)uAvPvXSqg`ds!(-Ce zY-odelUcHl#`L|(LEQQA&ghqFhIZNMFla9bLlWB9MNFBrcR3`xO81qDzQeATuyZU+IrK^$(EIksfIQ?G1BDEI1bcSy9;;SINe`L;| zHqsxvpWrKg*M*~NJi}JIzPuec)dT;ot|+c^QX>L}QELiJ)tK6**UbFGWw{OdBT`$m zO|g4YXyWc{FB40O*9N>BQnyL`1ZN_%p4s_zJ9>iX{?Wsy+g$h$))`#pn>vU9y1UwuJYso39H7y zAp^!MEMcY{wQgEf2c?T8xy>O;o{$PGY;@6un-(X^G|ZK>Q;D)5i;=}b+voZ2rLTm- zUDy3^=CR+abYD$s$MYi-R-sr+JbAY=k-XSp5Dq;e+r_32=*QRU?kSsWR|Zch9h!Nm z=feUt=Gk-2S1J0)9U%7}pb0neposK(c5I_jvBlAs;I{vJP`;t`%D1$M##^^hEk6e& ziS3iV78DFB93OFfKcBj}bIc>u zg2vJAhb%2z*9rZV4020J$~FEIk2_fiXGtPrk0Cdrra#Fa6Bb+6ILNm{QFCul&e)jc zYDMa>=wQF1r?Lgf|8s|5wq`fUQS+oaZ7!RL$}mcOzZ~`^xV1DLojd&cDmhCCG!MUm z!b(jKE5fFiB0?VwY<};W%@?~}mWwk2u9k}z>7~0WSvGH&pI;pRKKxilAuN`NS!w41 z!~XZC4pF5Yy6u=Hk5Ss@phXhZ5e~tN?V|iR(&ya#KlCT3T0F~Gwc`(r;rB7^mVmK?-M>L`VpC3bc)I6hMhbPpAX|%jy zg)=&uS?!ggKo_NXjy>sevVo`6XuXC11b{3{nu9`uYeTpC{B6ss&aQo;`*<3oJW6o{ zddztWs#^vk=^_p~_Q2hItF%WqdP#syCdKZw14}K19yfj|BgX}IDkkk5eSx47K)rR$6PAI3mb@ixe11=keb`QFBMS103#VeU8>$qPx z3|U8Ci$=fh+XY~xSnP$s`|r>=4a64`^!+iAe+c=1sO#OJY2}!g<5*qF4xB^$WCCs@_-aRrBW3 zypRvZu%`OWvxkoP7O-hKJlYW~JzYQD_kJ>#ZLfjm-g_Y2y7a@+;P-xN6`6~E0zdEs z8gq`_==wQH%yjoXwzCDvohVN=l;~B+HQ8OE{^;ZeLY^?@%Ga9f8|8!S=o~p8sz!ry za5!aBZD(Zcv7Y`cZ4en-f4G)G7&m_D&<+jlwF>;i;WX!>KHLIhG^&ZQFSDY_$ym{+ znHo14(cbmQg~WZJHtp~sf{Ji~U(Tk?nQc>};Psh!DNVjxD*Cz7RxpIKz~xd@l`>X@ zWEbG$!w)f4Pz&ywU5xip>N`w7HXoF=_zc@2sH^^2{!XTJnZ4iQX&;~dST#Ryznsmnm|bbke2EW9#_7{-iGrJz=UcwcC^pU?uExf;U}%vuTD-+=8CR~@=C~q5 zhNrfV9dr*`$7BROKG#)2NAZGgD--5hqcGLSq+SC!wG87HJ=% zC9}SA9J3HA>}LdJ4yo$3}^OXc5%RnPA6wNaz;oncXXy z)Tb?p}POQR7c);?L(2a^5>&!Af(Tf0$kYGaakoSj+%GCdHJX;IBb}n|L0Za4<==F_WEfn$m7YiiGvVt8!H5Nl9X3-n0c#)YPeO)c zvSVD9OzSwYPCJt%uS;l8wpc?X(r40{u|wD69**e4|3V-$(otZ|a;p4by?=EN>&fnm zd^H`F0ktAFRep4iW0@ziI)(e!fdOPiFf{V_o0^P3`FZb^Mmn)GYJnk;rTvW;oI!xQ z(6CzOWUaot(i|m|2db$ciKQ1II_myAx@$Y%{{GoN*Pv86P{0sIW)cJV3%-Fn@bHn+ z@KWs3+LM}s+k&j^tlxqHk7^~3DxaF88ZN;^b-gV*P?zrtTD3>$H8-zLD;`RzHR!C6 z`bFe#6TR@~pD1S-&va|US_ryCw{#LeNP!u2RSx0CY-s#(nuSq~UuQi-{zMhOU*!LN z8%PK#|L>kR>YdLJYKR(Fsm;eufO==2)`LmFA6`l3FI7kDR7M%QVk{CigCvQ8-%mIh z=0~8$;o>vtz%B@BC0Dgf>h9bBBamO50#!wikT;XiK=ETMbN~ji(OR z4;v$5U_)bCi_Ek>JUyb)X?q0NmxU31^IF5lO0m?o%;hX{FHA9=VP5Bt`2&#rVq#yg z$|J-ACxj3O`~rJ8Wu2r>cZPg~v^L4m{>!uT_kUbRPlDe2+ITwHd*FM1z!O=*Eg$%o z#||wrqC-1oJ0t|gm>|f7H`{bRd?L==^84U^CQV`8|A;sFHf>r$L_1S z=s?)%{^wul20!m!Ahvkgcm}U@|Fq};;9LKjFI2s^UjyMq%A~O>)XW}nHvi9mHS(P* z@Xm!9;6+xo&`OfVvZHwaSHB$%dFOb@i~PU+@!!i~S2TDnTZQ4%PDZVPjZH5sQ#H+| zt&YvH@@y(T3z=e?><24Fc3`&{%bT#l@xS?;giqiS%eo7nSP@$YUA{j~@_+*g@C1NO-N{$*GwX#C9--gc=dR5Ye{6M}pA6I^7MTcJ*CEO> zKC&@P;y%Cwt|3?wkd$5*sTl~6>WY9;y$SEjt2%D zo0s^TSYph>W^o1kOz)KC$=c#m^J()?gQps3B}c+#252b&d2a{m4JhV9z!I2zO$FVpshFJTr;4w0P~sr5}Qq)XE>wx zFqqs-5nGFu5rpQ85GTRP#&jF}A};2hAoesh4nvMj559`tKr5-!j(>pt4>y-EXn`;R zrC4lA{+ljZ$xW8$UYT{Is7_#)AaLSd*Uc1NqtN~UU}m2YZusx72yB3}O79x54WQ99 zy#UYBU0n$W3%%9D)h(n`Mh70m zfA{qw2c4zGkz?b#NHPkS=wPQ=1rJt5?vH=%29D=ct)v4=oawwROe6F}4#3+c_XLVY ztvF99$|?eCW>$*nHYvi?9yRqf^_vD(h7+JrvX;v#ff)S^nnQhOUlCKCGVn0Hy`O-> zMaD)u%!06K*YJ)(P~-0YoEF4{;VM>9(C=)RB_6>AH&dJP8}_c@I`r$Vm9$CvC3 zs3}IF|GY5|Ys#RNOiqx^YQU1ci6i!j0d@4eb(^9qQlko#K$G1%`6W>=35#E$I040n zAI7Ol8F{FdF$e(9r6+{2IiDls<3I2>SaEhR5ziOV`8pllU<7j+aySNYLhWDxbHjZX z&gX!w4BhjVs}5X#2f`~jbpVQ++zF{##!?9^AZPsN?Xi{wZjg_UqUbHO5~g9fH~|&V z!Ts__9ff_v+3`I-t@!v8?T1HleTA=3dd&07NfQ@=l+2GfCk6xtUAXj&!t7p-qdL3@ zCll=#6xcW_0vV&eA|ND$QM3&~@nmC?k0$~`lh}BZhxj+GzvltDmoW7dXg#bT)Szkd z%0V}vF!f3_1iLe%r>=-|O%Z0b!8E2pzVsiP8}Tk=H(?k*0a}mC>sz@;H_`=I)!hYX z8_&;;T=ix@aFb*wkEfr8Yb71CDkotqk@rXY_l< z03Eq5Qd9zI3W2p>R>PD6CCi}2o%y$ya48dxs=)sw=q*SwNaDk1;iu7&(*KKZ9kJpWZr}&w;YFMSPq+h z3F0JR)sce0xDLUC33pk#{QcPjnhAHn1K00Q!xGb}9t!%Ogbkg@S*`cy!0$)y7uga{ z1!CuhaRC#{U`=|ZFz;pY@&oLODLD}ln*o2|2UM2EJibRk8~u12q4+sEJ^A~7Ih9m~ zku5Udf-0`Ogy9kqmcs<%#j=ga3K#}u?$yHnGfo^!E%XVOMwt8F^5ioVC-A1{12%g_ zIt1(1hD28gDk+0AAEd3m2Vy-Q;xj{YGzi;q-bg875H0Z97T_vG^IQxVx$-K*O3~PT z54K85^w;?ou|~!u7DRYNvTm%h#B$ut6tH)>bI~zk7~Eg=MrH_^_;gN`@MLLcjG4Y$ z5?hSS)O0-69 ztr&Q71%EhZ5MsBci^I+-e#UT+`#zsuUSq7@)tu%tcH_zKp3ku&)8nsk6`JL4tFiEY zdH|fh2_G4wPkosZ#?6{(ijO|JJ}p_hf_bW9l+SaS-zqfLN{O@t`5}-Ne~^+&ERBfi z_M10WLDkE8UoBe1}}g`$BXPAp?U#p&hY>E_412 z&5b~n8~NW9Y=T8GkD=Y~tROPjo0wISMXnb3Gc}Ra5e&nkPhTm)^{q64qMdNT*B>8~ zKO>!V4E5&LBVeP{IM5N<5$Rs3IV3tEtR#-b8Hf{9kVg>QWZ#IkB4+Yn2B9$>Aqt;u z1Bcl8F2F&T@nyRe8`QGW_hg?*hZ?Es*`bo}sy1{Q+NF22Z~aK$|LQ8uW!J7!prWQY z1L5eKyQRB`JrK>H6B8!Ok>NG6+-$wnW0gR%qxIq4|NcpYf1MQnbFn`B=f%NopB8yR+(6-PVE*37$>2sfNj zMAb+zKlBYabvV=H7+?qkhCQX^tpy6bhDh$Xu78+xHgO?08yU7nnuf z^BvLEpIFk*Q;x5jTPP$NS%VEm7{R2Ts-l%>lxN|S|5M~ghzh~(TbiJMWs$EixN|eu5Lb(^v4OGKaa4N}#-RBgz42u5sjKPdSqz~d0cp$I9 z94d>c6%nSZ<-~=?O<@{QD5qIL(iL0tFv7cnMOKS$8czO4=VuFWZa8_1F&!tGk;yAO zZW*B(C^e~()zLBo$WmnoV-$sU1z%RUm(QOk$Le*Kq~GKws`gwnp!&wU5cahpi0w;M z?tyWQ0}+m=+Z|Lrp52wy9Gyv(Nt>}U({(|$z^98hhTs0^7_i7M32bcznrF}dHL z{MN$^#SHgFG*lu8h-P{EUE?8a@Gi`A!$bb?_BNeNCY}+YBK``(rxxV$Q=#2g^2K0V zdOQ8jugh#QekF8#13A*g?!sNI-Hp$LLu>(9T(R#iUOBw`ZddR4E1ZB9VYpOD2b8wt z7H_Y;$v2t;f*ncrfYw*a*g$ffKwYPIcY)Bu^K%B!S`z_8$J`I8AwZXFPH#XQoB!J{ z89xT(v~w~Ip%4gc|HlRM7GT<_VY-+hv+dAzxak z8PcqlBSyc5$*^kaA{!_KW>to$G7bI zAo&bJ0pm%9aKxy1Wb+?a1k)E`OfdI+yQ=-?L12P4p|2WP3n$KGAydBUS4gr;Eo{I5 zJ36*0N&m|%Ixgut;xz~1VZ4hiB*1TD@k32LKC&*r$xu8=&HC47n$SXjexUq(dK;ok z5$V&NTg4K|b-1%5kTAew_w+%Kb~rw5FXHZlyn59L|*&8T7&*0Ggrt}lBf?Hv0`JI=4Ta8HRNit~Dd!Iow)?mA+zcLMFfW_B~!}Ebna+!)0rZucav*3bj6@fx#52Zs5_55-Oj5(u{eXkuE|}_Gdfu=Hb|ubY zF^_z&P!mX>xNUktYT7pye@ z?5~!{mplT5MQ~L3k0_%U(sFqL1r>wy>IbXhGdvq)G^e~Zf~oo@wv(f-QeAWT>-w1GcZ;{eD-QMr4swgnvWchZ^)TE?*1fVUZN!a z4Pc1%BSH}`RcQx)P-r)MDRPd%AQU;_@rh{Y*CPt zZ#_v8^Z>KMzg4|}!$&oP=moN`*g=UbcHMfe?>QVApAq@}5Fr3)Q^7kbF7k#@*IUdc z;R&1M_9dPBE7IjC(SDnNUlfia@mVfNeFha4?*=9wfHMo5P9t7fj;zfNRiX?oC8%)(5PtR%0FI1 zJLDR^-9yUB>r_K8(G9qnw!5gJcdp8P8q$(>0fXw+lo^AThv3=$s`$MlJd6l%5qA#T ze!er-Np=0l8Bgd7YhdZtC%Q)53I4tc^OA@nus%_i(5@6Z5qmxn1Q8p--u2?!w&x+yc`+p6;WTV3?^ z4Lql9Nc7N=Gqn#ZjSnEn{#%d9>;`;G!8XbcN@Ld$his(Y`s+15W6LvG;=Pc)Smjv^ zoPUD_vjFkB@XW*GQpEVo`F)@3IE=mBow!|vq$WW`h-oUxKaYJ7r2npz z9F^Qw&N+IC{Ez<=i~!Pu{THbqtQcd)Z%FUzkspZdN@RMpq?fWjQtT3UY(X)zzMnv= z{VuQ|>rN%~cu~pM;~%7fL$b?rmca=?FWV3j5C=r>snf8J@WP}1&N#p9AB*2#M*mdI zsX?miF=qap_>ZgmFZS5Vd+*>g-SE9bjY=Nfp6}>^{Jt@Bq#z0e&5C<7v zDHRzbbD*1`gAmp6ws=J*VPPtY69S?}pvSQ$q_uAfH3zI!6r&7mp|a}iEfvfhs_b5e z_^&Lr&SvC3=>xn!KEox#}4BrpsfRM{&;gfGQ%bav2nt~1>$ ztsmiRk-ORDYY#cGIyaN{yL+ABp31S87Dp>FS@S3&Ggm1}qnQdbRTHq#9 zGL;lE#>wBQKi+8knhj}#Z}jl)KPPw8fAW>Q|IAlnQE;?BAb>EYyHEp)&gDU{;z)(Y zsswR1ei_SzM>fzH5hduoGOWRK6N39UUTzW$H{seX5fZIKXzl5SkOucn!wy+rS^;82pHX~9V?5@}jy<=>W^^&h)K8jOKW=n@abr3P;s!UA!t#_XT zmHa0Iv0k=RKreE9MBGt{x}FBi0}+H@cWIVBK%2sbcU@t|wvH)cTa{1&#*_4i}9 z0z0Y+9g1CNn(ZEw=~X07a9kqdBpTW(Wj3OKhir1Rbp9U`KZWo5$Y#*U`lqkr1m(3P zeMR{wUQ|7KJ{TSSpZABp+=SN=BK7_CTs4sFvV%46c+ss_=G1;&E56JPmxx3wkUjvR ztr~e4WDAy}E1ds}*S^UDuT54YT$QSbRxrr2l`@@c*+t)A9tgl7FR1bxab#$q;lNuSgdkCQI}?nVEQuKwFMpd&%(%?!NvY3K%c%5-~Snd06@tZQW3 z=FlBF!9C@ILQ=}BGB#ux9!Oi@^wvkaG|P*gAkt1l%2P=12EjTDQ9O3? zhk~Y1=H?@P#I{xth@sEQhRDGxnB65vIWcP%vio-v;1=2&#Z`7^Av*Fc3!5TWkD-00ZG+FcBUq=1Aq_*}l6z1EszZFna9#4{!|}uRDI32Bnqb?I8TO!blFxx;fYy1V$h zzkH#_Ziqw?6lZOCO}U-Jc%h}nLNP7yBU;r^o6djsD4*x{sH@lH>dG5`^k?4)iU~^1 z9wD{E39y4$4>ESHRNN&&qy5t)M40+VzX6(6C8IxLD@WWdPKQ8ektV?1GqBP@Ixpfj z+Fm@!W`K$86fZ<+9`a*VP{&sm8!b2}_M88{v zoN-)$=m4DioOfQs`Cd3uiL?!nlw$q;Ha9ScZ;ja7=R|g}mT1ES#{o$62kju_sE>9& z@kP#6+j|Hk94@VS?Gz)v1!^7i_>cpP4+hN(Ej@a3@w|V7gKiq64P$4I-nl@1#K{ts zVEm0@B4ST&2c13L=!$Wx=-P@O)F;x(>ktIC?reN(Tsai~evS!)8D{xH8K#KY%H#*{ z49wds3Er(ArO!Y#C4hJkv9)2|G^p4ZdKFJbg-jl#_xWBrj^jFVJNmuncz-qjok#J$ zr!SNnaH#~^qsa17lmZJLl=|YGJ~%Cj>mw|XyH^V`qfWEeJUA7IM)-s1kjMfPG$#wv z!58H|QuBgbXwAO>7Y<<$9!5^2>iM}1hj(h_MGYGF{#}nCP~0@UwlGF35oi+HvUOIH zzRaVV*Y)9NY3V5IqU0j&`e^BM$e07vPVZ3rJ$-f5txl%q)pt_nBk;YWW~Oa$%q09tKf^YcH%e zyG1hxT>5hemmMDLtvLYJT&yuCMkp6CRq6YNjB2JMGv$y4TynVj%K9}SJbw!`-49q+ z17hAIc?&;M6b+Iih66KUB&p#hWK~MKy%&0}wzN(3;G}FCBDoD;k`=Ju85G-3NM{501$)%ZKvY5QK3bVqk zo6j<$8Y=5on-8o8UG$vE|1^z3wQ!eEXt*aW4X*jm$W$%nmPzpOMNH1A{qV3Vs>U+V z4JOi;W8BcIu8MA%GSTvO?$7`FK+u0XZRT{tmnV2W-_`sX4&nhMTy+sy_=wFP+h+%t z-)T+WgKRmZ-*XPKswpG$wv*JaR&GM1e`=#1wuBDEyj$;tUlLb~i*Ki3Z%JA^qI0^w z+fAVYh1h+_mrDg{@=RG=61x31?Xv0FTcT1T?ZdTnSn}+oLmoZCsz`DQ$voxevxFva zg|7McN`A&!fxg%jk)qMSA+uKCH+W*AGFx9YiaR-8&wT!|0h1{8H~1Ck^gHNcy_;QQdVT{xrJ0xfdKK zDHn1rDkGPn;1te*oFp=g(5lt#c2qS5RfJ9+=R%Mzg@x?XCl`@Usws*cqiC!PAk=wq z##EP+r>KKgVS z>I$W~#)?qb3yBEcg_4ez?+iQvXM6SU5&NN*l*~+O?%<>&3}^}V6eI_Ut=s(m@i9d@ zxDfW;uF)F>;;KV02QSP2;2}Te^HKetpX2fdQ^Nt>0OH*q2lUuVm-%m(3t9Gf>EuzIomK|;8DHDM zFo=n!3h9UDs}Fuh=M!ltlkgN#_9W0jkoiMDmb7@-VbIF$S?ZIe28H#X$60LRu2Vwa zPSnv#uC+h+)yO-ZeZ%gubMMXlnh!H?IdIN%vNWvAZ?dfVWF z{HPa~w7RE*__OGtG#^{h{>DG&F}XmmgQ{TM`#k6|jEZpdD8ESA;-fhmKTtlcqC0?E z`cJOVzCX)f9Eq3lZ_?aTg>wh9k*?km2aS8t#*R_kW!(Fb{V#AfwL!#rdiVCntqHcl zFT4XgA4&_dL-npRuO)B-pm3iDC-1|CRpLsV)>IOP*)*RksNaH`QEVwKwwdZX8 z^~hrYWY!6LhU;P^7iU^0IZ#Itv*zci$6#OJ%9VpcLcS8^zh;o4;%GRds^AYDjdZdc zMk9vI0%=qY<`$;M^8!8G*7uQ0iC)?w8#WM>YL#LF&IwzHs2HvW+}Yz=!6j1BdXa+h zYDeESzy|6lSprKYM1>-#3Ky<=a9GZ6zL}4EFrzb8o+!f;*GKJYtHoR@y4=CPfNQ8& za)0C7nr8s2p2=&)!G>(mmxgVkch3CLe^E$moe^8G>VLLPHMJ8-y$*h{VI5!WKqT>* zDSN#cS>0-5OIvQjavf3)DmdpIYz2dl83O4)xv2bn?|jpxe<3&fyCCRxz8UAPA8A1K zhm&c0Z%TNWfCAu4sYL^5C3#?zRVJj7Av#coQNaJGS&d%Z$ep5eLOT0K;#ZgYOw(1B z=c9a|Prt76*T#es_00NO$)7;4(T=&i2gx~J+yOxgr%|j8S3K;R_sBMu>KIx;;}PO) zQ^buHb#0N)?T-;LL-;UW;bi6C#qdgR!yADest>8feXdj(w~Cm9hm*X=!+08zKEAj6 zrQB#G9EGsi5H{;ZefbU5)lvLsMAk%9#bDoy=ciwdT``9Zr{nqvEBvwMW%m#**32yl zh3iq~GIj_13m>x+aSzs#j)C;WWq%@KYo9@aI*MYpmf#P>>fDxuJXP*YT08kld{3cV zFQA<^K?|-X`_BdYuU8X|5cv^cRXhum8j7X)M$ko82AiiwAojxw@-rMWS(lP~8(-BM zxN>*u7dg5QqM*5HMI-s-PNVAb^RLk;#gg@SyB~foFHv7 zPAZT_vOl!)EnO4bKr%=jEVjkQ_?K|Sw1$P2(?JhYUgH{%4=PxAuL=MD3hFGUOpk%v zxdXwaV6zf-Ejd%dx32Nd_;P57Cs;1qL3|-x5@2%AK_PUCruYX+{-)KdVR$C(;V7Z* z>EM}qyXtoRl+@~GC?14})j3b;{nq%AiBz^K)yCz&8Zqrnc z=ouT5E9AFmpMod=@$i{e`jB^d9C67zSNL3Rd@ho^1YR+gWabR#5{Y{^^0cDVtKWj~ z=DFFs2el2o5OKQRGSn6Hm0CZ5Zc8mUVdL-SFP(SBDi&x~o99)>e$d=t>Cx3Q>}Uz+ zNXbw?wi}?jMDeFLPat*h!e~I?JnNOF+`H{`9MhlZoh%TtKgP4wGQv5_-hZqTjdbtU z1qmD24WSETbc7YUAWB_yYp`yxGdXnCgx8f`jXrreyW?r9RK!vd<4o;Rt;**%-u_>4-L;ydYsJNf>K+}XPMLfX{ul81c00_p4}!wgYZdCCtCH+xxI__)Ls$k1Bj6 zJbiJ%H*sTVH>me;TvYjeA{(_Lk2NoaJNpfqA8C#Q@3!}TYTo<4pgt_W^@Ct2d~&ZX_ZVa&seIWBv|FcWh;x&R`BUzG zk;(F8P@fsmqbD9-xwMT9(Z}`Sq zMSA>_ZSGGC`FC$Y?_)HO)vx;aV&90!Ws@08aGvn#>1L@+V24>ZzlvHsi@h!AV5LXFj53tI_^I zUO%xp82sE*m+GyON>`hLXdIsH5 zMmpk4O#x#4{f$k~g6tYS2JyJ_%s4a*w;>g+&A*5{Q3q13dnt$)Xl@=IBY6oI5Bbm2 z<^{`Sy}%AD^Z*hiPKi)-?GHiyCLCpw?%Xr_p*`Gh*r_xQH3j?IDzk04FPcGGRQj+C zdap~t-Ncr%LR)0fj}%1gl5b>emA;IB{p3?k`mS2~*JmhP3YpiAkJX+pJSX3${q>dV zly^QyR5qN%;wO~|Sq}Ze{pXT&d+Cb-=9W`#~B6q&LXcuGX(tLK!L7e4&#|0B^g-pJScHGf!%}KS39V5t$%w0|^`HR7M z`FMgkC&W1`ESnPaV|0}EZl;~G&SgJ0RTt0=4zh@785ts~^S9z8grA_`%;4vmoV6Pc zF2t#ADo)nTmbD(l+%VBRA@gP`$84`IoHmE8gv%e4 z{NBqsJG?)s6!9>vq4&6%iQ5L3Ql!4+QsnoD8#)H>Fbr(8WkcgdX=Y@MJkhvEBMDC; z6GTs9Vn@DIQs8PHP@royaE^~IQ#xhDbdwl7OsSGjsVaprfI2fn-0z|#W@sgZ-bwqJ z&rsiXvy-Ty=_f}@;&oJe-aZ%6!AlRJtyvcy#aJfYFbC11%ILNVBGm( zcyRY-JZA6syUpeq%;boRWcGcBCO!K?n-bZ2fseaKb~hDXSTRSq#^4-?h{VepsGe?} zzLJ)G(lS$Ie1toBKVv{z@KW17cEaMOUu`&b<(Brs+k8xdgtI(-iJ2gVG5M6OjRO`3(()i^%49k1KcW%VzA6)W%~$SKDbtFM9NkHGW5r z4BU9hAEoa@KF`=W%(xPY2ZPys3(n3NxhMYpl)ROdcOX8kf9^YJ?S-T8#F?o;is-aK zrNn*a1*F_J|J>heVXgWh@pU@GTI?+z)@JAo3Qf7L7A3M#{7jXacQktq=i{^b#rs-gNZZ+BppAVYl6IHj(2cMEGaBu|5KlVqMuxbRo=Y_Vmp+M_5H z>8sCPe7*enP+?4og+MEJgRyM(kgqePS1^x!?wC549)Gs_)7S7YM;gW>%PiLZI>&`LrcqN-y8fNkqG6_u2xDOe!!uStJ7b%yk-I^Owg+mxF z%HuYhl7_wcCdrLX^ejb|?t;(7#x&j?ailWKWIGIv&66PWj1NMbEpu--F?XJRvvUvgjN8OGb=0w`YC_|F1ca&Ow*5$zo0=IQm-;Ck zLV_t`1R~p3g6d4&zz*+13Z}S&0eT{VU*9?-qpj0s@)mr?es79K=B^JCZ1?el%<^Yx za?_^&v~TFPp~72$)0RY_4_qi>oJY@XVn=Ac*37d9OxW$exH%5O-o%+^#JtOu^YAr^ zkQ#n(Plu{E{ooxexzamNn=iY+%07GMbiDix)K|H@i^q?|h>xSQ3+_io*-T8z~F0!Ov!GfCbUM5(SfQS@nh2Nevjw0lCbVuWE*N>5mD7?w@ zn=F9%lzz8I@G|(Kl@69P@Dt{Gkn<4Uf)(I?Yx+Uy?W__Q05RfzAVAjv?-pB^UGboK zu%7s1^xKCzNA9W3QDPSoiE^(bpAPre#ypQ2B%pA)p0OCf>K#wgGwW$}LTpNE8`t{g zlB{0FP1g4Do=5slWEPK?dai^wO1IrTv5&d1^-AHZ7Tggfp^9_`zi4#naWjY;l}=UGMV-+UMe%Xu*~e*VTx6lLs|d@X5q z#wMHzv@=-q?(YLW11K=;@WNCY4PX6hwz}@4*f=FsIT_{iA2d>zSE#l{g!P>~4JR*- zF?o;$^WvIgKKGrAdCNZYrO-SkHZVf2LUe{^ljDr*O@bS>k_&Wem~{K7I{L?s}7Wy&|J!kqKX4} zcN!sL_JoLeN79W3O=CifApA?>ICn9N4yl0g_6PaQLlPPUhH1WBX`WImQ7ybu(#^JbzzSXnf)~83l+oy3;j$Iio-66EtF)v z%SrCZR*UznyYfir562jcF5ssbF;_hH@H)~YIO~fmMjA?ZbgN$WiO;Iq6+i#toqJ>d z4KL+2!xaKKQHA0B{DklKF${J#LuIs#4D!;NU;JOxy=7F@UEB5x2)YoFE&=K8Zjf$} zknWIf>6TigAkrm>bax3zH_}K7NSAcOp3CdLpXYwxJ@$U~`*DxqaQMZ=Vy*w2^PJ~- z9KWML2(+_R33>DJm8yk(uNCklLl0?VJP>tcS2<$Hil`$0XvG14#PZdr;g(fn2}ehP zQ^#9PxypohWOGa{7(Zh_(%64*ci*BIfbl7UrLsqID{f>&3_5pX0iJ}?D+xRc2)5(Knop0_OJdClwAT-(c#QA6C9_M;hg5)S zBhOHgqIGr7$8@Wjb;CiWGPhY|4H1tl#*#?FlTP(pkCXF$i7o7GQVl+|sXZS&%r!C> zjH;yNemj)Bt#pD1wE-3LR}$tq4_;*v1uvnTBsO;=6%poIoP;g%3v^_x3R#2E1(9p0Vp=ii@@*oJ>h zIgKK_#U$IM92FqBh&s^i#t&`uS!ie%8O1XiBdHprwQg;PTk%$hUbyQ=CRP?m-!G(i!>T1((i-&h<*o zsQ$18&NroL;Yoi(8#~z9cR^I!S`HzwYC9#CC1l+0{A1SyodMe{##vmnrWTWx5COxF zHVHLijxr;q(VNce*B|?`hMQY@1vw5OrimpvpV1F>mb{oE4d2T^C5GHg+pU*FY7X0C zuwe5ebWl1!6|MA~0exi8y`Y80Qb>iKy&axPgg)AypHbWgBtKkNZ7s9FxY)zJt?$WO zQto=q{a76|<1Cktbn4X-WDstpCW)4TH2mvRvD0pH{e}19>2QORgxQQBFSZ!9oDp8* zUNb-z8N&nmTA~S`8hV;`ns#Q@T@l zZ5mrLqKvVAwnK@B`#aOl)?T46Z6~OK^kP$#6fd3{AB1m&JgQLH2s^Og!GEq!gfXTb z@rkA!Zcw>6G@fPT_MQ2@Y=C5Q#JtdfG&IUD>n=o&$R!spl0)Rq5j?&2B`UiDB&!+5 zj9tl4Hq@Bg5+%MI-O7RhD#?pA9>Zkp%^&WEa+$)Dn`4adi6ntcO1};Vwz_Vkfy^4` zJalXDE+jhll#Fo>-3gn<1H53FvT^p4UTeKzxt(by;R@2xk(q`N&-#Mcvzr&IzRC>k zVhS6o?NV)HeqCDJ!M`p)a2U!2p?{F{wD1YrZfitCfj}SGuo(t~#L`DzM%*;&A5Sfz zjTbjr_Q@i&fLfBMx$0?!*pw_rYq_l5obqOr(S+ps+eaxk%>pxr(*O17H%wn7NWQw3 zYSo{T;J0m}h`{X8%Q}r8Iga_3V^^FQ@&K-j3}L|iajGvfKWc%27F>iiurY_^;iARUXxQC3Z>)ANQd5_kNf=?JitaX6Z8IJFB+ z2KzySA1MXvL2A$m43y@F5h0js<08@@M(4P18~xt-B%d$7G7Hk$gP{cut-%G@yhL`g zsR1?Cv#p%$dPQzDtsC~xCklUZxx1)Mtiz}xIloygaiQ|35ZV>D?fSscbFAO&Rx2{4 z77$WCQ9H_rv3|>5y%D4w1$AXy+!CLko z`w#{|=TSgkpH;;)A8p$Mzkr3du%W-^$gqch<90VZVO%&HJKGptTy`Y7`Q!k47QX z4$G-_FT%Qt?US{y*FE(MZur1H!T`RDCov!8ngxCqZjwjU;=$v-rKqAViTyq{koMaDzr7ybxPf*oVNFlow80 zSmqG!jVnTIp(^oJr>)#-w`|-Alwk?vMj(WI+4es3)8kHM?eC#j8^R+64m-qynC2W- zdfh$|&JAo-rqrrP>}ADfj6-q4w2^UQFDk7jQ?<*T)>(?-7}Wn>p?1Cky&m@>>cjec zSBG2rioc_n$VGEn{xrWmy_|?%&5>j2VR0JK4=Tt#39Mu$oGr54K-b zD(k$}?s}BH6I^vAOwf99iH?D`CT^=fAbRV~9O1xa;Imt0KU?HB+^~G~;dp;-UdXs3 zI8gyUp$un$1*1sG+IMp;v(jQTlSxHsLZWE(#T0qA%QLzUi=wkTkO2^Q~vbD)CGLy3XT)7Wm!RhO|Gbh;H!?nhkGSLGF=416AVhWymxVxe~7D( zB0n9pUWwVTxBT$8sC<2x+H6sJri0stsO>Hz4z0ZMT4-?6cHGs1%|;3sz-(kEqW%Cc z39k46y6YWON8awN@?>EZ(p-okk8zBn(gnn&4#b&|YRIF}Ukk`pJ{`a3sFC1slRji3 z`H0~+$Ig!Fi?+f=!sod}kZ$R~w9rkcBa-Uh%ld#cqwEb54RXZ-N0m`8Ia+h>2%z_R z3&(rqK-4+>ox8f8#Yulbh41Q%qu94&K-SpNXI{37`$S)`Wd7@V|4qQU^wYwg6k?&h zx{@%^T6r^vw2i3cgmQ4u2xBG$iKq9MIpi`>$syipEgVqCpssKI*0FcK1&Wm#2^59S zC1sAp4Ud?@nu1T~FPwVEW-2G1Imy1*ohsHW{^m9Bx0;!X5lt4?HD_#3CM~|o;mwg123P;^ zB*%*mf)KTVdci}T1=KVua7$M1O0Surbm;{?iUi6Rvh;>vg)n&mnS%h6)za!gnBxcH zCa~_lmxGmFI({UX^~4x++40$?@JUp`)V1&MwS5mUtVi)Ga|=aFJ$*a!S@`3gOUefKhEjz(DpIbPQGHIr;?7BkJ;j zrvOxYn$O++uZ?`{JeeXrNYyi5zn!B$BuaD73H=av#Nfg;E;2RvNB?6TeKba4UwFy{ zk>M_zU(;3tYJt-X>Ut974NYz9iPLCL-Z0>v4YW?w+;M`=q7$Ld-ARU4?VMA3ymUZ! z-m`i(Y8^kC_9pPm*v{3+X~@r$%JGxmv9#Te3yW)bs`5i=?JKQI#Vh))=AI&1z@W;20Vy_y(yU z4K%U@%8|MlIydeWbSEkPFJPEDA*CLnW6&G!FT}$~?aQ!jG@dHLw{f_~Z5vt%7io%- zDA7Zz4~ZE98V`5=vEt?BHPV%v72TIAG8lO29(Aufu#<3;Z1P-Lf4jcB1{;z<%-vc9 zbNj%_NSH_cF*AZ(0GBTluQ5(@lT!zk_7`wXj+Uj1n-)7=m(;ra;B8ky_JuP- zOcKU@FVjSe!fVGX9NvEGNhps(DEZ+!zIRwma`g+SQ);%64869gnz#0P(j;WfzZ07V z;T0PA3<~`B16thH2TPORl`ras)i4*fz#lf3)a=}FL!n^u#nfPs{3UqS{8BJxSn(b@ zN$!o1R_}Xg$&D++KYsdoRzd!>;?m$`k-8~j{+H_hPw{K22F)e@!n2GI!uceN)v6KI zTb|lTT2|aW*rEY%_d?iKrKa&TxnA}Q*}x8OIe$Z+?Z`6>F+d01vbt3 zlv+?q1RUx;rK}dUIN+8!p-uW7owaf{*whSI%j+Jd+x-1+o=A(tRYI0u;MsNUTgvH* zjs@Cs0gD0H^TsMbGrtT)CBQ)zficF3EG@jIQ%M^Js0xmYu!z1m%Q0GwKNNlKuFoL^0@UBP)uJ^UkqN(4@EFI27~6TUVo-RqPzHI1{cB z`mdy??(rNiDRFEkf%$DavA~Pb??;yOutn^f0Gu2acN9iBQC{ESNw6;-8&DIcX#}hv z&c-k|%zUhiXdHll4=;Wd( zvS=ZMs3o}_7Rmjx?9BI!BHSXHal1YNR1%iW#o*Kc?{M8R4_1&+ej9|A{~@f39rmvT z0^kArP+K&qB8INeS(t2A<|?sA?3ya)qWCMUYWQ*?B@xJq_OK7ET?t-~ET*x8qf*kd zc*5Ob;#7WFLipn8x|Mv=1prprd)vr}OV6ZZ&?W)(0}*c`+7s*Sff5twk%K9L z&{!rlx-Ah=E861aX^fp@KzEt88`iNQb@X2A$;mW@huCFT+lnCBx5olaP6`5@vJutT z6!fYegN%VZsj5)2!je9M6QKl1YU<3zh?DADKf(>7t~#w&1#G5^$cZK&)Ec=z7g)uR zjJ=Pom}FewoB+fYYG2dtR9@6ovG{x@ZOfxq3%++5B2EI5~BfC)a?PSU$|7uZrIDkT=7;6Dfl~VF7mk1)O&tC!a zFvd*ype%-kf~#PurpPMtery4a(+2Lw+BGWP*i`L$gAIDh3Xm&RCzXYP`JQ3STAClu z7dwnIDr;Uh*{tE&Z+&!-MH7rT)vLVN=Zquhx2pb846>crcX^IVr6Zf1hc30Iusyb| z{Vd1CdO5|g@X$gfnhyh4kznvKB$#{e_Je$i%0A!1p;7>j;;7U$HIGOUWf?zEZUgLO zAa0B^`OK8{aLG&qdl<-X%4aU5q%G}=I{i4wv+AETT{V70wwpWdyL0E80X+ZvQgnMj zWXT4JT^%BM#BT5I2XVJua#B;dUdf3Lv+*@NBKeVc<&cVPENjPlILqLrzY#*{&{7#K zxR=ACzB>pGi-VWhNLt!G2H88gFIc!`NL!74P8Z#m30j?oBQgz2OUV35{$+O`f*Cp0 z7<;2_RuAyTS>jFwwRgZ3bE&OfB&nZ1&k;zKt!J|lbh zLjG99f&)c&RPaQB(UjWdSuO@g1#8c%8Es$~>uuV4!h54KaH9gwi3(mk=>ywaG%?&GGiVhFWF^sOVzs2Y9SH>#d#9+CJjeQ_hM+0`XZH0qv z!eyTm#ocEzy9KD)gAg-qtyk*3F)S?oPvkWhZS?cgo{GFsiT0Yq8-7l zGRme4nNBa5>EOe}HBg~hx}xULV%i}BCWW&}fR3u~%X09Tylj0<1KI;wcZI-`E$I5Oi+@6=L@VmHkiKe);b4KOsU|dTlF)Yw0c{Y(RbKP;7G< zR|m9tPsft5>=G@%;G1Z2b4v`nf5OuaSRY0Em>I%Gr(}&w{Ke(bL!*tWu!R>J)^jC_ z_MAJik@ZFD>r|JWX8G&=ndL3aZ&Yb|GH)XBQQ-|vZw3TW$jFwZTT#{W6#8$W;KXJA zjfi}^n1y!DbA-ool8d#L3f38~BT#p>z6yd411++~2EU14SBJrP1E<&bSXb4;inIGx zcHwv1h!~kxuSiM=Ju4=*+5Jyx^u zidZ&NVe6~cfNUpMC*!DDBoUlG(NY;3FU3Jl(O~W9hOxq^$)jPK|UhuG` zS)`EW=qvh9oVHiEA~{$_PNliDD}L8Sa%sGJo>hKdP9kh?z4|7&WoY`-vAhBKvDBZt zxKaHe!H4nQz4ax+CiPKS7V$ADGRCh7e~hqUHj^_ zeKfsIjnl1x)osDOPnaKa+gFaV?^>TMdN$je)Drz7cY{4<^gRDrUb7zGA4lm-H&mSm z@*BWLYgItN&cIM5V4@TdQzy z-E}`!2K04c#0ygo+FSVRz$ccket1e&1Sk)|NI6E0;o{zyMpr5}T0ef8eh|W(h-|pl z1*Yp~%|$7CRgWSvj>$(azAh(*k4T%@rRx( z%DyLwDW1AYztG>j1+ug*O$p9q;OX4ozZ6&lv&*g6p`^#piDrvN|45QJEen@z`jhB^9yR}BGhmm>F zw}ugR(A8mx1*}JkGDv2WOmZ)VQe3hx7jj>KIo$Al>$nJLjvP_DNZ?LqPgzV|L566)>CH?oBreIKng;-@0g@BC|>raNC=uN6>**CM_%7*2rJx$hm(OBj_AKp*|<88>LY}DH9kfxvJP-(3f{|^g6@E|1hw+Da#dSs4unnAuq-M z9l&i~K}#YJKe)Y?rz9{8-~vfwgxd2C77%ItYStyQrFL&UrVbrY0z%@Vi+5Y>f`+io z3fk$TQwWr+==fiFPJh6?1)9m93V6aSJ-ZTo?=c=m-hL^73WDLm+=0z@nD`Z}eKZ#q zYWdIHz;j7+rY`x*52d>^(y~L8#LEXSl#29MsYfjL9~<6HI{DHPlHl{K)_3}2S`?So zrRvWZDMF(eZTCthnUC&{h$AB}BUwLQP&YLSbv5JW7(^ZL5p3iM|U@PNO{*h%s_A6X+D}AHjc|fkmTKgJO`d z2XbAjaXgF_4)mHjfJ$vd0C1&BvBE@on=uy1^}$UCixRgMos}2Xf|-m_=u2N|;02Df z{fDZp)$zQehl)QFVp6;9qv8jC@)3`J`}JN8lO`ikNw_|X`XX@jMq-{PmIg zlSP-Jix>aa0?fA0k9|-Iko@$R=+)G-O~rR6FT?}`90M0+a|dB&qtbXN`_cXB-p`3& z0Uh*TcaOSh7%|sKDb3+V{M~lOE&e=r%JM?4Xn2CI40#d8-JD_vhbN@qM4%9l$_%?%Y83 z`SzS|t5YT#fPQkKAobHaHcYyD$-E)JKMr=L83%UB8*+4uC+RFI^3VOCq( z+i6+gI#w<+UE-nBIOrtA!V3_9hJnXv+F5w0h|ia66 zPPQugv}!r?I@kJlV>t=#Rsu(pC^^HCwh5{DYgEJBZZXs`;q9PbvJaA+n)fkNK(Gi_ zqbEU{X)ba$%f@^#?FaXS*7zfQUn4M(`IO~^i-7qIp3@g?nXB~)#ASge)d2yaG*^Gn z6Bp;W^$;{KFR+go_pCO3MrFb_x=0gL&10Vvi?a1LIWU@HwaW7DXkV@z)@WZp+Yub` zIikMf-oL%t%&MQEoMUo%LM|u>Odf8=?67@`Xpn>K)93V-AZT|E3dwFsb4A0OgFW1TR3ACJn+yB(t2MN7U-(wSyMu6(8UZ;4Pb$+yHqK34&& zaY}&$C zxxtENYKneB-YR)|)$+wQnM|jW(EV#h`TE^ko)aIBKbZ}aCRVC_QiEwTEErWv$E_#K z84QQmCND&f(HuShA#bj+&`z9{3Ti46b ztInJ657mu`fjlSN7P3|=DIc8t>yJJ~QxCbK=dnG{M`eF$Jk;UjM4)=yYD2bDyXA*G zhnqIc%1%N#?3;F_Kl2S(*XRE6Za@6>ZqETFWG_^gsB5ghOm$g{)Tx6c-HbOfeMQd# z9#eiz-S}u}|NXf*jRl5LoL48G&Ygbw6qpN*DQmYsfHE}XlGH9$lqd-zNuM$(KEfs| zka~OKWc@3>&m`Ec=P1!^Qe?!p{&lwrLQFhpm5Nx!L>FtOpE4Tda^b=`_6)2dn-!v! z1;i6q20D;+J*uG@Uwy-l>*ksC(M?p6Chxvh>qqVfQ?~Telru~tCuJfc#;B%@XxY)O z8+rQ4hCW=+c?J|+#`n$coL)k~R!~v&A0{BqGBbJ>hs)6H_k+|=t0%nZ7!s6BL&vSo zB*Bk?zP01P=pc}nVz|CnKj<_c;=UH;Aft+n7Sqet?b6(*J7z=59-z$CsT~$H$QO0D z=9Ie%IcECw1=;6qP+ zE9(S8xs}Yw>+xaOjf=tgq?7b0QGEYif(}JoXLMy;eL!XSr6n1aY$ic0I)sIjb=|wE zt=@OjdSjBDYg0)Z=#dukU9Jwuf9D-aBD)BM5_c<5h{qH^e*YvB4?WVNm1Q5V?`FE! z0A;g~zl+j153VTh{$zM|{J?jUka-_0p}dr{7n)12fu!0Ny|OzRZ zO+)TWdc9J_A7As^UK3mul=!Gaa#Me99oD){-#<)U4TZE|0^QT;xvZId9NlXX$2sbF zhR@^hu5F#z`^v8SD{_R54P^HVVa8#DW-GPPzCOMRTRdh)KKxm3)K`CP$xJ!JY@J+hvvdtWU;k=QD3Xl|hcF`g7 zc9ZwcKr}kvPt%O1#VSRYB?UT#xu0)=1fY9W0ELRzS@!Uk^p6N{;$5)w3M*Luj0>qi zI(nSb#+fMj2as7_tIIu@jjIT`v0kwL2ps$ z+w^N*X6;`l@YpMlB0C|P$vyxAvThwrD-V4JLl9^6?n{Wv^xVAvQ{RL!0d{g6N; zb0&^6bVMM3>lD|hH&De0o`Ze_su>uQ%uY_!0&Fcr(rr)~L}_@}HEDGPhW1tdy;BPs z*5*GAF}lzq0ARW4h`Udc)Za;bN4lrg2J$Nz@#-HjS&Cy5$#%cjD?p^|4^h?#1S{=!GGnFA=!8Qk)yl@Na*ELgD5c3Zj7FR4=Bd$ZASqzOEUd0asJB=M;T@*vJ+dh8= zEoU@b*i)!yL3Onl2uKHuShf{F~Spk@sIdf`#2^!_k|A_9Zj?W#{{1 z!gx(gqsAkt%+?lQ8Q1AG@C5o?xhUi9U85~-9M;73=I_Z=%uEichk7Y7qES&<@rR_N zL!kjWOy!2;>KVU1H}w(Kdw5UBYA=~VU;csJkA@$=)nY?FiVOcRwj%?QuFbU1!ynv7 zZ8ralj{xlts#z!Vs3^fvJolYoR6IYat(tA-*G5HV3(?*yWj) zJ4Z;?n+2D=Gx=ak!uz|E(@s5_(VLxt@3(}8cz&<0$>uN+bZ#9k`Jvp=T;S4m8zM1c zDwv_sKIjwt3OC}KI9dz3fGa!6u)?IyEM*(4_DSC&Ki$^7>aK3+onwGHVQi%j=n zeF}+h&ZRBF8$Z^Jd;A3nP0MmE54CSxiT_fWvSAwnPO8*Z84bL~)sAfwX8l*}V5;(n zQ0y%I24+N#IEz)WA?{q#rtp6;HYNkxK{AJhq%m*3)@4*)dQm5nt1L#JM0?0_`6pHG z2_)Bw|Aof!o3ec&JUSaHiBVXg{rTIA9Btfb4B<;{v^fT}+URqg6R!h7MD&KZ7x?g| ziP&E}4+>ofr2`abZ$%-!^=hrXJ(V*Vpo1|Eu-FVj#pEyP;59I8sKiq!+Xvu^QHg;3 zkgz~P=>6ZH`HCD~^#&9EAVJfha*WBG9ME(m3Q6aP<8Wq?L;zxu97ow4<3F%5mSKoc zXR&vdWoVm=`Yo%nC3ebozGF6Wc9zm zA>I}Qq?wTDSz%t*EePC>Y8w``OMpNbLufibR?+k!{q?3^g z(fY}|WBC_q6S#q;WfX`6YtjNTlG1$jU zR!n7?4fJCXYIrb74?Kn?c_6@IrSWa1Pb>f%>ISSxHz@(5m#M#uep?v*Vcs7==5c!mJLr)kk0iDnYtOfDEY82^3<|1S`k|JyJJ z(+H`%FcLOy{QGAzt{nz;0c1VmiAEQT2>=#_&BIOr6FwC*PDiD1n$D(m?TR2N5YEU~ zqnSdAuownlrngf|LeJg@qEvQ=mZQ+cBYv+_OBkb_yV#?t{C`63NUE? zi@cf8ag8F1`@3WJMi%SMYvLxi~OIWn_yTyLfDI(f!(8jSGoIt437X$ z(SQ5_9Nopouot-l?5X2xwWI$djFklJo!5hb|6dsI|F3_29MyoSukv^tAfiOWOd5m& z0cx&>^J+AUABbHZg6$uRmy>GBTtLlY=M(r&`aeI!|LNa>pJD3Li0TzQz=~bz>s+b; z49&LSZzlJ}V86=B_D2HNh~vpAm@I=7J22&KYCjCeZ*TyxpSAwc5l<2q;y-tUV8PVgWzpc@0p0MTuXC4aEn&}6y{;Tr?H3;Jnjp{aRB-ZZe6?D zgzRWoX3L+KrvK*u6KXtPEO0}RCU*U#4H~?#ZN{!{(QST?Wm0N1cXZx3jCcr^@{6nI zC<@zN=4tL=`5yqOsC8EO1OWM)+z;)0k$rE@xkT z<+(GVem(boX4(Xc8n``hZ{vWGojn0qa-JpXy|CxB(*%sm&D?hD34QxXPQVb<|PL;GcroFV8(eWo-xOvbf%(uw(?= z%5L2AdH|K_mMRAds}DNFfWS1E3ciAwdx25s2}PbazHYdwT6!HXaNtqG9$*_4EOVi` zug4z-vd|3$IOI7P0R7D%@hTjy5sb2{p=FFzy_FOBBK;HN+-n+Glyf84`}QAZ<^hhU z6&LqUK(sFQ70Ai620^*%m5{c(eTQNG-4atg^#Wz;*T5iAeFdUQhQPGX;Q+*&!SJ)w zH*9l5XPzX#lBcy|y#UmH{AJmi#Aourk{GOqOF)+ICjv(J6bQvD)Z>K+Q4sAOHp(-`Ps>lsN zJYUuE_Lke)R?z&`0R&udijOF`&jM5f+%~1PiN>XGf#bLaKuSgKXJJZ!@VY@L+4 zTvWqr%6;;dnCB=N2D1fp(l$@f+u8TmmX7`BB&+fLi%5*2g6+u(1_2?}NtUF0zl_O# zB7ZD;GYH{2y+XQFB7Q2%f9DWl(B^CNvR%4*Z%$GJi;gFgQk7 ziM{zo4S<9rGSZVDUTO3qFH?;lnP?N6q<1n)(eNr=pMUk7gVE2VrrTju;#~!s^2BFX%j8@f4zIzYJ{#aEJfSE(U zWIYVNaT^{%qngNERLp2H)wbp?kaFX`_H!j3yT8Ei>!6=Guz#eG#Y)jeN8__~NDW;A z2I~I91eza!M!gB7Ffu=RI{oj|BB3z0Xb0wweB9T?IW{}+FzU%m7}F>Z0nNwde`Fd} z!!qIkXKwh{U};zgt`W|aKG;APZOznrh=I)CW{OW&$fJJKrfLPxe+)cD_K#6tn87A# z>b$d)5r(u%w}*ysN6O<;$?81gqKU7jov=15{Lah$?*^qF=P#492K=p8B|h)NGG-QB zfoY&|xBL`=@lX6XC`WNCP}-kePRxc9+Rs+SQ_%U2!*c&dc-NkJH^QP3o~wp4zXKp1 zs-+G*qe`2wZsMp#0b&6+P8h~p@ll{JfGKQ%^dd`~MS6fo#h1V?DM-!(d=%I^e+x27 zDn@Ss>g%WEYt=R*(9v#u$IhCcp^z!~^Vq^!hLdh5Pc=-xF7hh$}ar_6j z9%3FCYt>_gpBQ?s;}CLR0)|JmKr}S>EMMfVkg6LKV@&T;J*T-%c`wLbc%I3LF!BJn zac)nN6cEMG3%Z@&2jOAB-xc2Ue`Q8Nw19K*G64Lcd*7p&5z=4?q&x?r#9N zI=HR>VblYi9m!Z_nM*O#GM88 zHNnWiI8Rp`q#I-(Lt)kQIboF#qBQ}Jle9#%nVTn=CJqC@T3nIeNrJk?KS6t(Y2ZFE zTo&ka0T>1(ZFyOXFve-U4_@ED^Pl9^nUKhOd1*LM#;iKaZUlnB`=>d9ITpy3^naMY1)MfJDr}>`#3mhpHD_94jGL@#<%V7YcpnFYn0U=A zetD4uO)mIpupd}zp*Mo_(5@-D;OOAj7{3^1vIbJ`Z4AFtlg zj*$MW(JNc3j0s@uyLYac5YG2-Iq-OV*cN|)NMZ~+zw?p{-SV_U#Hw4CC5FwSkKUwo z1tdsBu(U_W*UA*d!Xjg&%Iy(|W>ao62{Gmt{xV)7$sY#oO*y}al3Nwz&U zNsrNzp5{gHiTo)O^ZDt+74Ugv>})(CeiyrF8^e~@e)!TNmx)T!c#Ow0*K3QKM18lx z3P!FT`(6nHI0%A+UeOP8@vk62;`0)y3W0;}+Q1NG!yT92OwGRs;=!=jTt~ z>E08m^2Cljra&SZ3tKHog^P5#<$Nc>N>&u-&w(`g+d-nDY>{&Dv1CYX~61709+~Pz!b4xbb2;BVH z&2dL@bu7tT{%0lhpp5mYjD9Isv*?xQV2_5t=u-(J zHb)Odkfh7hR`p;S?FXXbYb8e0OYnE+-@~vKw(qQL`{$PzkE7Dk(FE-?3h&}3v0zK) z)jWtJ1KTOs17HYi8Bv)}^f_;ggH-`uwCL_e&t=$LjnWvBaVwb!?$Gn-4YH9a!R~I` z^GZTz>V*Fr0%_wP1QLb@fjFZ$C8fn*PMAM5I3%c3*%!d1W|JIdD~v;l`DTH0#s)_F zs^F1n(7}b*NJTgUlocWvF7bz8Vbb_QF%uD%Sb*!8B;HR+`SI*kpDh4fjLz$RuF_F} zb+r#LXSHV-ic~Mm8vyPzRgq_L5*9xJ3!QPhAbGAto*7LdvJ_gIFB19UIod(=8)vw2 z_c&otogLVObK-wX)NOE?S@F20BVvaTg8K5UnxXLdtmy^_R#mWlEOAY7M;rGOdVdas zox_+&_S)l)(}Rw|AFU&Z3mHl(-jm(Y6efCg`Kz*>)ohyHBI`gN9SOSH=21fQnhRk59Fdg&o z28c;?01WG?9d^)TX;CzPGrVwBV|q=iMe4Thn;kt?W<1O@?b{n)*3XkFlUQ6*72$f0 z(f!fIYMGHg3siOIli*fS%B%u+cfn)>!{8Jjja&@YE_wJD%i)%Wqm*LhP+3WN99D)@_;|e34i$q&9U#w z{4uDc=OD%{BC?6~EHoXoc9H7+HUHuuof%x_e~{ftTg&8OX8+_*bcZ9*0-ooq#KRZO zC*ho39C0HJA49HN^Q<<<%sFCuOsnzO}s{0T|Z9@@o9}>kC+Oel#ye;Ed1Sg4}OZ(GK_+>>%0dX z6jnDPGyX^V*$=DQt2rar>sD{SsXph{Wrcx|sB-Mn8(Vp=3D5Kf$-QAlbp90rYhtzh zmE?^~Pm_XwYXR`DwXc=0QOAc*6!2YH0lr=!Z}TSAjI392crR@6gv&)x@54oc=SyF_ zZDDH5i-nCmxo;S`ka4siQJ1LEOFdNsV;gD~NW^7D^ zlh?Z_5@&^sdL{fXuMa?LW^`n~kYuA6OtTr6>nlxrrzc7BO3TSfdS@|7=*aChFQ5z# zGC&>7UpT{a4eJl?hoGkCo^{Nq^joT3BFgCY`Apf}n-PUOhLoVluAv$RbkBzJ@g1fd z>NbD~P&-1!s+Pl4|9g-CQc4oEb^j@-5xJ)YN(< z_8D_~Y>U&wq3jCYEU~34o72qNm@x5k0{iFfw~nyX5?8C+3_zfb7fR$4(K~*zO73HE zS+_lNM8)1qzE5X&3!FC*XPS*S8%Oevs5}P+v3d z*C#QoxMnY7L_Ru@x)9xFN8!o|{yeMvd za)~tFCUEiJ9K+&^G){q<#V$W{6}{~@Q2sE!jH|*N#N_5@96r{A!IHurDZyV8Bfe50 z1aTUC;4+4_a(U=CE(+|d)c{NCQJf{t&!52&c`km6C{e)3D1k}?Ih31p)F5$RaB>qR z?{_p=`(=z#^is;~yXCv@TfUATF$u`~Me)S~LeP^>MHpKoqYqJ5kvA=EVYnpqzqq8} zh!-&yM02gIKSdrJ6Z;ZHo~nrdMvxvKFpFE(q~kmzv2;}SlS5y!kBHd=|9Y$uukrDzA%5*H!^3qyK7=320gPOV`a$mLw;YG|?<3mjSm6>j}Fwiv~TW8iD6? z0|4U*vVMlASN?k$$hWR)-ySq4sNNCwp_qTC^~vi2X5} zldis?ZTyuPvxL|RotfMx8~Si{)&7SwgNru5hqJw9;mtjlbJ$;*7Z+#89fy10&gTxf z_PBheFXT-WKOvhM^;AJNn+a~c?NVp1H0rMm5D6eq-q^rj1rvcOdDB#>^zlu0ttATh z7O~80q=@*p?mXgpUC9j-4dLF}B*ucOZ^1P4nrjssk=T6NYN)H$bza9$WLF&GeU(4N zPmI3Z13@c+>TdC*B%N3Bug~Se+5EV&@oH;YTQNv4y3gEUw_*G?&2+-)0$V~>7dR7?E$JpV!*HFKqSWJTb zq*VjTZg^n5MODror7ho5XRa#G(6?Kc9jQN!bbzxeYqooG#H>)}^0 zYu!+_PMJs{`zb(PPtg0mXu^yZXEQt(h@OojW@&Qv4DU)_5uJbZYBxB5H*r7E~ z1gYAwohS)OAn_PxtOh^9h0Q`J(FWo^D1~U3f>n5`7S-I4bkBlZt+mB)avnFQlOfDG zs+HkoP+z)^lFHgO|A>&@R;N8q_z$=%#JIi#pHC~nX?Ts{wP{ZsglHwWmuZf4zhS#o z@Zz=n&nn*GYRk@f$!s*DH+>PJ;^-S<%)yy0D9fk=7=Z*dH4_(v#;QNX_}lV_ zb3|LqUFUt?z=OcE$+oq?h#=BNHs)UrRxg7pJ|3^#DEq&s4SdM6-R3CRG?#ivZ+ZTM zdbYh|9^MxH!<+j#j38`_%D%R9a&j#|26=t|zkkJ65W zI~Lg;nq9#R*PMV8(OAvb(@Xe7V?*C#Lo`<5TmC~B(x{kYPfIy%yS0hJqC|>g06j6I z$w(+%;O&W!X-n7l9L<(hoTEP@x3ukI&)UgU2e8IiOdph{LDE?vd*S>>bF{Hmv2k== z+RP{jj^gxsZn`w;5yr=S;?YG>AyyDL!_`Xo4M><5qQaB}4aVA74UAD)k%cZZ|LD_I z^Pi-*=%viF#`LB!?MCND&d9cOnGE%6$CvB~#n)0zGqX+eCzqf8vt1M)+}0j=G~neI zwM{7d@0pTBCS4pu^b|M}kah*2j>R6*EQ5HvA%ba5p<^@7q@OzFPrFOj*s@l12jOFK z^82Z$sXXk3Eli$^`L1YtjP(fMOErI49M6nIVBBaT;-wU+f#2XQ@%{KXlk6y>+v~-& zZ2Qm2hQcTg8!Ng|A}D>D#hX$d0~&Z_Ft^;N`3zTlXFkak_Oyb!`8E%ng}NHJL)xrw zfAzs(QuyFT9$I}I=y;Y!_3V8-UT9T3pDiNBiwJmOLW^MW4(IF{03*cXp^Maz3`k%J zPGoApMbc`)^EB$n%xX{zn9^G_4WjYnGIgSCd~JV#oS|l|8X%eRb%|re)LDA&4W5wH zQJI~O6sA$7hg9>yTgcM^+@RxFCPr?GUqh0Tw&chEFqm?_Mgs=ZKy+ zO&%`4EDzJ?*eAiJjGRds5n`6FcpDd-;YpWhv~p=*py0HyXt)NJE;n^PX3u#e7Wjz( zg~W$tOH&}@PccLL08izhSmu$hi7|EfNfQX0cb7p}Q9-FV7DVre@(MfyDvy@~AxIkw zHxy!zuUT*}1v222Xv$^3?9~`x%H_8_R||Mkudq{h!oB;IcY{)jb4 zP?_roMX>e`GL0dp)U(mIuk4|_F<{)ldrtqff5KJqH2aEU7gDj4Xv6r`F6p2dQ3cs9Ym6AstY5_boi#!qc)lN+T%D_3dl zPgQHA^DvLUz%a&+pW$xZRS^PXPi+4hb{bOu7b7p>OhJqg3e^sAc!c1EzW! zBMpW2jc$X=H1}^ZQ##@u_X`lU6cb=;e9}(PlWpb@+fOj0++-wRMuHpPWl&rMjosc_ zUSy%}$T8zwZmWVa(R4WcNdAZv+2vV}5Tt4#m|ijJ+p!mW0bFr-Yr0SFCdJ-cruR;y zyL8=Nqb*@J_$Y4GK>H3(^(*7W504&sjBI+pc6$XCjyRH^LT`R^Jtx~p9gRXa13Ze= zHqeWIPIrEAy8CSDVtirq+rn9mzi}DOiE`)neDXD#)PS-2H+mcOw=){KgT!H}rY z=J2F3FZFHFAUeT$Z3R zcy6|r2ivR*V_L^EL89FW3iv*NkY7o@1H{ z-w84Am#9EsT?3O1dbb?PemJ^Jl(~bq% zXG}*lr`GhQynef4#)1;yhcLp^iaAZ{yWcYK8X`419{XT4b0;xhl@Ru^aA!3Q=^gh1 zy2jBmqsP&*?KvyK>O1~O1>2hHpYhoDwnW(aoi4|T=;T^Q7ufu|6}R@Wm&?g~TB7^x9J)Rt6v0BTew)qUQRyJ zRYS@6O~>^1X!$O<(rhe4(fU|*gNwp{x$B!kvieuX)P~0^=mzn$EZnUT8kzx;4_S;iV#nxVJkMKNY6|rRc~N)Z8I)~^5K8g}a#5FO49=34 zkGwiO@H=-Avn`zmk+g#TIWFx4_3}x2s-G+kCJXEVIJ8rX&f9($v`kj*oBq=9O3lnA zQt%qr&c|_?qyHCsZygo&_O=fLA`Bs&(jnbQNJ+|TbxuC+ck z5Dv8zFc%m2y3sYVOj4M@P_d?O?v6?2&l8pyk;IgBTP8NVE`4u&c-#FQ@uSHiu7svw z-3Xz^D#>WhFAHqh@}A_AH*f8Oz_0)K8sg=aYe|jXo>!fH#}`@Xq?9*;Un4d+cktG} zbVS?XF=#nQTW6F7LsyRdV!BZ}%9>{;OTp6DY*eHLSA_7{fE9N9iO3&UMW z@nScg{wm6x)ZfV)% z-yOG08+-Ev=pr43X16m3Bx&LYXJ4*WgtxS$Y!V!;)IPmWse^SII+6h{6obm#JG-qM zW`Pdsl@i9<{ABF(cF5PV z*26)A)!m$1v2J(>cVb5ytc!$p_C=;dj3RSO7jl1Z0eUV1QcMEz-A%~|*Rme0;=z2O zJXQ+J{OIxuyzbCb&Ixz?j}za+<(FZH`JPXC5^Y)X8h6SCx?FE(1X+p)X7+Z z_7WZL9yr0xt&lYY-yc}6j+|{1V zKCMkNNwzE0#BtiOu~EsiUT;Q?ow_Yu!@g>G&Zt2Rg(L`30~{8F9HoFR;AUusS5`?VvW87~@SO}1>+-l(jbgrC zcXEHb^9gVk;t&bQr_!h_qH9ri1BW)6+`w7zxkGg8?LBrI&$+kp+W2sXC*>HtA@)rg zPgWmxPTe5(?dy2c|9X0a=U3^7nEq9xNf{u(qzwd^zUZY)1G7etHa#I+?UWPtH%M-; zVkW`#)&q?>o<+TRwrFlzQPSaHH!}$(Y}Lcp0a4LpEqN+*kE@dwp5MRvXM$B=y7@DD zH01e?la*dgx6yMo#rj>}w0t6|KNGCY*T2N%A>Va?3eyZYmD$zr)<=sDe=5jWi1j7s z`^{q&E7YFMZw$tAy)6(y9UY|+PWui6C8qLF$--B`#Tz#S>uOhNrfUL-9rx~*|MXIR z<9BlStQXiLaNNILS@EwEvQY)Roxj0ueVDb0xJhHkGGo!*m_`(K1F-ATU1D(ErM>&R zvZuS!rAElaZ$<0Ycynv5><9DyV>3kV z6vST+I(78GCBd03y2s0>4c+%$khrMjTBIMY;(pE%*1FgYMAL4*pZS>WwF`Po;DVrG z0>@>}db%Z^(n3tZEy`Xq61RBXli4YTIZlzUmHh=?pJDy+P}NLFLmWAt<97}PgBT|2 zVu&$9#9H1AgpYx4d;=x+y?W5Jv?XHSjD?B zj-#a=&3K%qV^*3bTdd!^wpDmICcK)LvE)H#00a*3DtLm&5p?}(k-$DUV> zG@T2|fe$*&l>U)Oy)|3NaF~sC-lJL%l zrVt5|?poWdFIImp2+{7p8)*#aOhZwX4Lm=0gsk;HE~PoA-_;-B`VvzYL%vuM%hSfH zxBlyu?A>_a@B!T zV>F`aoZnz;5b3%w=x1LTT`pQlDJr8ww!19>7+Zi-nx5Ex5FjFPH1Isnz(MmhKmvl zo#73+!mp7YEw{+p-Emy1O&2rAH&S-018(dU5!!=;#F~)yhfO{Dr6R&slhv_X|Sen*gG>p zp9+a=QT?sssAdnhkH-FKLB(Q6E7+`5UY4= zyX0i|+<<>guIGe~QwT^Bfz(pkd6`rsvXL#4)UiR>^)Xp8&JLX9kw|05I}t&`44}%S z-`Xku4P;9{UUDfqm(GNE;*SidgJG;l@_53p#u<%8;FEc7h@GTO{E{nOb_<^9YW{Aa zv+8fifH@2dMTy%y4j5 z;N!O?txI$j(&wM9SgOYh5hk*}lBAc1Xc5I(KQM+P0sn20w07}KmhO?Cyn9jkd-3j& z_yB5+9j_;MQ{tLt3it23}q3vEVz)f8eC zQ?zAP01vlW$#pgHuX(Z_BH|J8!k;ZCqQ!peH4*f_bfmHlN07!P8wb$5O*SgRKXFTP zFh1wd4IFx!8g+7#7KTEC5Nicf5dZPRNOMjL`L@hB#;t*1gQ_^p}#waIkT`X|3|G`nc&^kcGX+vqD z&tGuyoPkc%F~Ge)Ej~(fH=-%>T#w;2M&YUv?3*Pjtd)*Ki*NJ{=twZguWC&aDuY+|FoQxFChH@^FU^7t}C^(%1vh9(-!Er+wWxc3aiK0=5geH32#iV#a6g zK{uLA$GlTfTHM|R+~gKpwYMimd&-SXxCF`PfvbHg%3jAejRkVSbP6`+0M!dbvG)D| zsAEOB3BUCQ?3bsyUO#&)9bR;i`#N}O$gDwN(c2WO*fisX1UtOXW|$w_a@{^~%Odr? z53rxi-YRTwqdD`IzyWV7ZMkcJwT1<<#Gk5AUvgH_r9EOmX|W}%natudFBKE5de^okHhXU)011Xh;Kp;n%hXHGqvf|AXbuJzn4_@mYqhIn|@iy zFRuU4DRDrdncZOe#$2PRw{T(NQR*PA-oZ(h%}9AcR6aTKttngctH~-ROph1>5y)Wr zT}F^>2@1BR@@ZfFOZiYQ@A9|8Ru5_B7vXe3T z)%x3|2-LKZjAdC@2R2n+e5qQe6?drNTWtbDxX;{EhykIBu1esiCVbv*%}{TgNZM*o za*KB=Bvfvx$hWQ8D})N8$fiWSxQy^S6hZ0cv(>TVL+i|-VWX+HuPM?YztMPNcSddp zveoD56Kv`~n&>%k&H3CPlVV zFn$P`d@233xVuLxGHG{Y#LUaA;f8POjXq~k4C7VRWYR#bqs6SuWAv{nq=*kX0}Vjh z*a-cXTW7OhLMSC#i}D&htGoP;nUtT@7JtOxrOtece?^56vLW>NTSiKzu6IMB9!F-? z-jkhLnBh@o*_`x?*YQ330TO4|lVALU3oyD9GN%od?Z8#+ry%+Xc<|A46%(rh7Sz+9 zz?e$?LYm;99`TmXeOr6$y5eayMl(G#0gWrYgn$}#Pt%9ya)VLahs)fr+&sR2Q@jrX zw4u%bbt4vfBh)Dv)^L{&i|_T0mSuTfH_(U*i0T^Ex=0r5TNpv#L&-Pk>2Irvg@gOsZO0LivolkfJjo6Hci%8YdnjU?0BY$; zu~5s|ynV)kNm4I|j76z^iv-0Q2iLE*mz!}360;W+!)4=pT1o1aON1vU$K8+RL>UvB z^I%^~=V>NSmpFyHRhfY+CE$K4~1%3@D+|4E^ykMLX|_AFi79r)cjI*G4&J|#;PzYc&Bz|CU7X-5Hn+i;eo zqEL1Rce7mb_<&9j{!t<2-* z`|kr3${T3`j+vVvLA4;Pkzh7dBAw7E5l?(%As_qJ7TjS~_aUPdYpf?!j0qi{ujG4h z>0vY4aJF>zH-*R$&^aD5zrP(mv|;O!CD25u4KLqnF0i3e!YK{7YBVS>egzm+%~f@@ zH{o##e`3CxL?W$^NPcBfAlC4yW-RDfe!>#QxUeF7eLTo`{= zZ|>gN!L&SY^wZ-wrb2u~9F4`RdrZ}pABs&>-$cEVY2(93!Bk3`hnX9G`6K*0r`nVGQ};`1GI4q( zzL1J;U;Fj}yq$n9vFSq#-5tQ^&uaBpd6%4pSE@VgGH;LOrlDRC2&5#cuG>3Y9!_^; z&#V)L($CJu(A))rGbf;zyc4Xw(Ud|_!r>@IwS;rzJMx2Xwa6{W)Kn!<!b5byveb0eVFdny;j(3y~7UYje)@$<;uqo_~WIV-)lngAqqpNNu&RQ95R#y78$@B2#z1*NbM5e%#a-D&AsHkpi!Mji zIJN<8xJ|2THFV(c#O%e=5UIriE+y_Y4>q;=+;WAg==A&$`$SLIoZN*xp276uPk^nPp4xK7y3Y+7XFk(Os}L6-+s-ReLIHx+Buy9f22qCLb}PRKM?Iv z=zRN99C(0Bn}u1#t4P#ES9QqG1YT(ZUYb&C?%K;`B*q*#cR9nWSIV=`9CuaI=yJVQ zZ%u0;MZXV|WG@W^z6bL{ns%{>9LiVAsA8i3uvD*JVf+zkLWrZHQkg>bj-pzuP~>!} zB?QR)JDY#=MTEy%khwADmYTwwH;}kI3gTzN)>a*< zhMYD)V;cx-K5N7wYkg=gb(s8jwH!^tsgcmKrSU18vJs(hJq= zHQ2uZGFC9K=q)d^RBYqqXi1@w~1CAY~wcueveeZMLvU zI>*>n+%3CI;Nxw-29D>AhS@Leun5lrsjPcz2@V1+i@upM@cgoFV)M;POF#vuAwDR4 zes-Eg zXdE)1Nn!D=hvD{V*aiDZOQ{%Ing<2Hh6ovRs-wFgcbQ63SA^zXV|@)+O&qxkK(1E} zFg&h?>w*_GI);Jz$ulV%*&M`1)sYrBXH|$E&P;n!%y~X+4_0Yff&|znD~|;*_YqD9 zopkKtuZ+SHj3Rkqf7=Y05&5I@@Hti@MINNZJFOa^+`v)i_=LqmZP*r*Du==Nsaji8 zEAUq(zev_frVx+52vcFCDl@`K&~fvqOisQ@Ri8Rjo&$d$6aUpFzUkB$qFD2?W*88n zm%Vu^MTn(rJRv1Ejza9#m{}^+QLdCnw!c6@Cmw5vA>*uTC?xY5B~X=KdV91Zemvz% z*078m9%8e<;f0}~^;Yq+=LftkjHau|ugvdHI&=cas8_y{|9TAO*P5iP=zK zQnf>hU{ZN2SAClDS!?|{>qb%%C6ipobTFTQOVDiuxHwsq%k40EW$TQ)d3A3$82r^L zwX~5JXwNq{(N|u%Oh@3zNqES2`|yv(O`8(7vR?Q1GRat)R#A938Lgb9KKag(TcR_5 zAayq+fz+Qn{od}R`fVW|5FKp#mD5WGwEJuQo|D{YCdoq&=~aQ*FYCIDMbgMmJf}5P$f>iciud&^N#7{P+BQ-)%-3pH5?=n4kiX=q$KXT8D9a*wa z#ya|m&M4Cm9J`-uGyEEKnP=q}H{RS=XTsJw7DQHWPmdx11z>jpDQN8x^{QaE)i0f7 zq0eANnl`o%_p@=J%6Y0NGbq$=4;*Zo&G`ljar(bG;y}EbT%mwvZa7TtXSr~E*Cy?4 z%JTVk5anv8PT0@?mWvJ_5>YMgZ%v!Nsl|%TM(1-X;h7}&W?7%P_D-F;V!f7ZJ(y{< zPJ?~1Sr4Sn0|S?DpT_5 zH2Xpu7YcHO?PtxB{J+(qTFKp{fI8F%N9gwl=2I0I4zEfLCq+={%`#EJ3f+;1RDDYW zs<(u8#zyL%*-q$t))^e6%YHjSDM+icFc!gI@h?`cU$$o}d-7dBR&cl2)zV-h;p{`lsKUVV<3dZaiVU{q%{SqL|J%!%Dx2CbcS2vyR`KzMg~;DN-QK z=v-E!hT1vI5)RvV#wGh)U`_xTqAO2Y)*p6X!gwtgT9%cHd@1}bzgOTR#@DF1H+pC2IjZx$wZ2PiDWw4S!CXaO2S$R8EAzAAF& z-}SKWPlwC%#g!T*Lvyis({Hi-E3io*a=gq zZI0?!m_AClP@O8k(r?aRo5m@>O*q6mv7r&(4obnROTMuzEuW`Mv(@V z(T40j`Iy50&ywI%hE!=!M7qFcJ_QBLGYZ*UsXXayNAI(c;w1*6|sl zu}xKT95fRMphyz7XClZL=0)!Dduj)RKllpAr*?Ya+V-VxFJS3fwa#rF_I0Hl04jY} z>=OJJ2Zmc}FTy`KBJVA3AyTM2Q(TmOzz`2<7HVwzLpONm`$l4Z#gZ>(&j%i@m=0$^c=a7#s{+htXooH z+$mmJfDM|08=?}xYzv(&RYjLM3c?g%Lz?#`z=reGBVDzd^+;$-_6m1zgLHO(=SCrL(b zuO_Ju?sfy3B~6=aILx0)>?Lx{fo-KiY-DQgW%lAGXs4=K|FB7p-q8JQkW^2NWv>it z4R~fW$8jujjHjG^7Mk``zwTV%H*b&~@CGv%?u!`$KsfHniYHJW@2n+Dyv9!Zl@ox41!1*^gABNj>%t@yxJWqoZkZY$gb^~ zVdZJr*hY?Z<+@F9Y_Gm*+z(|UbfLf-1Yy)zKnLd!mmrbWFAcz!Z*}jfwR+&4gjGD1 zaLi47pDqc5pb;ZKr(hZeZHku3&yi&4$YWCM1yj|Cr5A#~unwm9R?A&GaH#2CLzqVC zRjZl`>MZdQWS&Sq77>e}=mX1O$`UfZ&$<$%P|xkCzAy7W=8bJEv+t9U^Eb9A82klT zb+nCVx9P>hX^bcun{f#4sLU}UahaEA*`5MZa01 z*3M&U8^6B;_TRrf#M3O4W4NxeC=h}-)M=~dPk=%q8p zPmr~HW6*1i*D3KlKm9;$JzuWB{+`^fd3ZdnPM=G^vy?Gt-UWXaLmqsWcXdzOSHI}u z;DQFwJf3B^LVVW-+6v>aRuZ2Bck{i7_hB0tRur8fa^dyFfI#!W{M(oNmCHrT4x8OU zhY?bVNc;-3z(gaVk(mcF(_+Vrb=={zc5Fz!5)ubbiOAK81CRwdrD@5J-I|j4;aIr( zBSMbgq0|)S~uOa zAc*^Cc1rRSNn5UZXF}HY#{$Q5^ZuYy%kChxdu6@%NNYg%=ts$tNbN8}w!Mju$yy9x!}+x$ zz1-w+ZWlsrTH)vMh8C-yiNVQQBf5=OUSFDdv{kGj~?G{&SjuJLkxO^VyYLR!V zX5xgAZnmlZK;*?K-ieiBl5>&7-uxEpO25U%s-|`Msd?F;JJ}&%4LCGr0U7H)xlSbw z1@79r)-Z=^kVKCswZ80$#VUTuFD3dr{82(k#;A#1Gk99QyyFNGCvDKUI<>x8+<>AfqF!WXFMa~cy4*tyEL+-{;!4Zp2mhm->Kq@`o0cEsM`Im!G)z+obYl~ zA#NWSgN6(q^7~9RLiEjUP?*(n`W(E*h9r6eg^o6%Q~Jj zdt}r3uH1SjH0ZQHx*%Ad`gV%k35TP^BE3%n)1_$iKG}nh=sAgB31JY6JD?5kmnUOBRw^ zsC|b71}-Va&(i@Xhn1q=B%3`&*22(3I7i`^yT$Qxw|v+Q6ho=?)LlLn_$VdTKn#Z- zv5}uC#{g%iAi6dGisr?=_y$Qx2I%wk5j+H>$fSo&Ibn>~LyXh@@vr`ExBT2V-+IHoxzO$)B=JcrRt50Dt%zH56ufI6i$Y z{_*FL>E&ntdDPH<=HGryvAW!Lu9w?x1=FFatM})>9nAmu?SK1+zkft87%mz~JmPLh z+uRmC`S;KMfBp7<{T=}HA3<~6%mTp1N1k^7bHV@T&j4}ghv#M2ARDU~Pf)&G@b~)t z4}bCU$3buA6)0TXDUqayq3g)9FS z2LFd`9YjiIryVHPqA<>wkv6fBU~QydW%Cx0;`zfd3X7y$g5+ZC%s(e?Ke*)qvF> zx*<7rLTM45{QOrwFEA|q{#TLtzXruu4Mu33mG^v%7~rgQC>S|-kI-{DFfRRXU-K`2 z90aRaB+$4uRf6GwJav!<6mKUuQ1|=W%h+}oEWFXyNI(@<@ff5%9jxir_QA^E{sL;R z1;8qL;>8?*2Ibs>`N;};F>n6;FTgHjfL{2B`u%1~iy>9XDX^x|$@MzPfB#K-f>kWk za77;QqCx91G-yqibGZUl_R1gr!3Frsb^PZ^4Jt)vp9ZI&m_A|@i8pPb&o}bazvl11 z)%T#!Y+&|cuGSpAqelX2&3@GUmqB1Ka8Y%tQ^Yh#*T`3#LVwWwjsL~|Yz5Eq zsmhh-5hy3FsyWpuqd%w}`M(I$=q5rTYKv-2{*$hq5*F z2MEZc|8T(H|HGJI3#a{*LVrM)4(2dCIs3=|BEX;@m<4KG*6xz`V%+g(ESKt*A zrf*<;!}R&to+Z#VN>0XZyF0_J<9&A&h$c0o!Sf_j_YTC&3xaR+OCMbP9jZWWQ?n>| z@ez4YyKzkdbUlowADb}NHDD3I+ZlZwUym4jFC<<$>yFRbeY^Qi(4RZw*_i#6cXL{Q z{ZN|dJ0bqzvw2fA>HV|`^iWKdrPkC}YiGbyhf0DWnxaQ+P`xD8nxpDof9DByb0ApQWEIIz zbq-3kFi?dGntBfDqoPE=L1JaL)fSdqQ3U3PO`9)u{8*<%d5DcP_&+@uwR;oYB!96Z zA7+ze%)y7;Y;p@e0#)EOG&@alDZ^t{TI%ga$GK}4EjA26cT47K|53T)-fd6+N1^tAzO!h= zFds?u9QNo2imjG8?0bV^Z{gPVAgF{LGJsTq&&-cE-Ks1NCZHy5M$g_OzAF+WE}|N7 znFxV~svTNYhIb?#3@uNc?^lKaVIo$a`Q=B?!3$|Z7rL%M@YpaQRvn4pYT)t3h1+pv zxGGZQeVPPO&`=RP@!Y~tGg~01_$pgy%7KIVi3!CEj+4ET=aYJnVUf6!S2i+S`07yd^dkb=1Pe!(0KB@EY>#@&;o@aphJ(-q>B2)?k#Wx-Y^}> ztuwH{N*<5{D)%v9k6bqZM6jyVUTHwXipE5Z0@lUPWzscpH0--2Hq>aOTQCNmRAa0G zr)$FclgW)H)<{0G_xXapKe}?gLnbN z+%n8J^vqa!Dd=B&8+k~99 zKR>+#1MDR7lX){hnt&0DEOcT6o|S$;3iW@$E&p*Kgg$|*S?gKfCBH~7Ffq|wprHmG z6KmE!(#dL&K3M@0mTNLMWHmtxU8U}HLGX?s6`cA}InqwYe^sv;J)xF$)crUVNO7@; zzEHe5+@%U=L(A`|>*5dj(hK=wSAM7gte__fSO>toCK>#6MQNKmeY15DGD#JFoXXde!nGSM^IGMry(KB9cG((d#qZ2F|jNEf;+Ab7d_* zT8nGzeiI36K)PxXz{FeFoAS`a8{N}N5GLDS!EHXbU3X9x6bDXK?i91KK-^E*bP*`M zQ`PNcZgi7fduCMwpv$mZ9*b}^e>yZ&`S1WO?-CltzPkVj76v{Jz}00%H;X`^%0hDv zXbeHnik2D!Cg9?^yk<5{lBX7u>rZW%;hf&fErBiPE7|AVXsH9?N%onC&wki6gIz@f z-HuCc@oF0AEeY5w`f8K1M<8g6#`cW@jux)4sy790b%Q^_yh~<*2JS3@wsQ=M%h1R& z+dzk$|6KKvCvLhX$QLC*wLvS)L3D zS@a2d+-h?t`vPe#3ZmG>0RjM+A>is1poh%_1-&XR@ts`5@?;F+S-BSj%!Qv&ypC!5 zdSyd)4r%asIlR^c;YV zO?xBeOy|89NAf5znGv<2$j}^oV^3IObylQ{k9<1u{9X6?TKze%BcP|DfQzyxAU(<6 zEm5B~K4#y3(RU8)%F<~%QvlH!h+_{gx5oJ`7*y8g2`lT{?J^CP=Q;sJs!|tz6ZtIR zYOk>|2mOzK%7FYgi9m|@Ws0YKnI&>Jban~?;aAI^&|9n+*jF5v7sWL(4eC02+ExML zs^LI8n?BD#pra1cT(xncu&71AWiBRg6%AtM^0@SWg^vl!Q2#iQ-jakg|6F?tb z;>*Fu;%*5FSCFE8!La%bEls_39UEuEyVp1Oc3wJz`&SlJyZrf9u?7(7D2ymU%Wb=U zSHKNPuG@XbP#$+pmjeid>5TgA^k~EbZc_Ob zCznKhgO`f&fCl?~*b^da2yTFn#%P8%t6-DoGZDDsARRWVO=!N1G9RSb9a!vT1qBjp zcy>Tuz6^If`Bj;{lvP&u2LWt^*ne3`mrvgol1P%wO2%D2h|B783k4^~Iul+nxe0&d z`W&Q>X#)MJyIkWyM36sX0HQJ8L2}I>q%tXc9+UfN1PGuQw#j937iAww%uCMarj-uH zWm#jTR^M~2^NwX-oGxvG`%0ePt%Y_B=xh$(|q1=`IJhXWLf*wGo<4VqoOZ9s&frpEJ_K zug;ud?80y&=JHLNwxR`6%9+y>acMO7p<*9l7m4mRazdgMmDC2KhkaI7Kc8 z@;=HeWV`xwyX*10KJ>g8KIv7g66dTE5;Yct8j5pkA|#m;Im`#tbo=Of^3t8J%eqg3 zOB)3aqDw(o4hXeCJ646|sv>QFlLPrI{YR9Uod#&ioq==W;8;YH%hCydj5@;8#bqqr zyoVF74N|L#8SkaSqK^?H-=|+4T#EhRD6zlbiU`0XR%u1Nmr3_hZh?p*4>H`^XiFWr z^^hEW@U~?S%bFH44dpyUD~T*i z!1biF@%ppzsIa$TOaYQU8%^WP&~y@VpgQaF0QQ7uEqLwoh-qL5%^x*znstETTfSzP z6TT)a5Go<0h`+xbCvFE(T-7JbVc}4Q!}a$9ThCz0nrB2#=in-eve9H{Z@zv;=}#-p zgGsfZnmIQfJR*y%v#g+%vDdA)8>klRgYN9&fKiTQyp=vx?l*;uh`bNAL`6(OW`9-R zHM}JOa0~Yh{Vbh7A^NgyUVOyp47xAF2tA#p4s-FFqeFq{dwRLuN@=^>1Vb&bP^zg5 zRy@jt;j})+$=xMEv=rH05NIhPvE4s9k8>HfXiNF=Nl}F z^`{Bh?92*eOVJsvl}sofmWWq%D2+uW6Ke@i2Whz+m5P9hl4eLa4(5ZtPH@0@Aq2x3 zekvw_`>a6`X%XH?B1ds;OKDp!?9L5keH9=~04G;k4o-e=l_I-Jll3`mAJO*ZKF2AY z0zGtPTU^7K0Z`XPooeDS2vGDa2PFFmv{pA2qpfV3DBu)utG6-Ce$8D}eD2M>R8wIj zwcz@XHz@-o4n~qV{@N=Wp(zoF=kS)dawOOPkRv5E6Lz!{Fgiw$mem1$?A~}>><4fG z_IgMq2|1P0!2%S6G=p;O7FH&Dz(Du`XD)jHQ)u5ob6QO>g2;`IwK$jMNwcr9u(B!n zFEMJ1tqBpAunM*@^3X$4QgaEq2Z4$C>JRe;ECKy`&`t5K70f~dYbik>N8)Iah{}=C7P68(brn zV1_Ef1NE=5N=HP}(kYiJKK%@_2ypU|?f{aEH zFNn{z--|1YqBED>!FXk9?rY*pN12uLdf9A+BLE%mOF| zShDs$x{M61Pec|Cr$cK2ttaMm0y`;6aWrFY*;G>H^8OT zsq_m~9rj9nz!B^^ut?5?#9^cXB!UJVBzh>kmo*A@^uB3`I_-Yz+8 zn#Y83pL9dVCaVC4yZ0%vq6+rS-7}Rf#r#&c|uk zDtnwVkTO}xVHchT*Z#B-Oy9cOvH_f56zrdoywx=@5;i+e!Zrexp!pTgcirwA_hGl1 z#&zRWjdg8}gemNXmTvYzJ%9uVLuYmOeP6zv7z1PgJ(xK-9Qly>5xLzd%+3SuJpXG< z-O{{+*7-}6vKV5CCFrq|E1J58K^8cc-+=l&X-H5eVa|Pgwy@Dv@T=+7PrI*ZV&`?^96M`T<_PSH*wBSVC1lpat74z zrjEXO?K7Nz*7oJ+O$Wb~S5Uh@E?x`$D_mOW!zFgm@vj6I5T}yaw^~4Xv`4e=0_yI0 z-LNGx_vr5qHlIPo)wbzml!(wXm2k$SV(Hq9Q8p?8C8cPDnp8-iLz%r+9EJlBryxfA zZTR^&5tD@q{a}6(lUo(|Jp@MBltyNOo(7Me`eV~Hn0b}>`Joa;II5ti8z^F3oB;~O zvzgg%Adz^?ra8{_0S|K+pSPIgga&EWNT@sDIbuf52#QVbraMj4#0u!D9}D#>j&zI! zlj<43t$N@GYhl4y#oqQGD*Eq=D(2~e%lMb)^{Yna$NkAx41(pR@5MmoHgyP0CO>xe zymR*D_kD#`+<91g@2}Q~IY{7gk@nEr7!Vl%MBxmi3O+{*SwmDIS3UtKImyQbZK%`) z&_#MZ#+EAv+viPZxQs9h3abR#oK8UH@dr2w9=vGHW{$#ww0{kl1`z?wqP)rfV3PVO zJ8*EZDB;uT+0X~ts*7}v2nD~5T$(p8U)g#?nwTf{gS3k8=^SYgwFUO<>54Mv~LUNW1$=L=?w6cp1aWgY$~6^DU)h-493cZ@l%?3)Q@@EBjbLL`T) zcNH5#n&w#muvC(P=Vh$9^be64LXFgxyjBPFt$8~;3Wz^G$*rZ@5hcPLzWHe+VC>!R zahm_G*_W4kiPD+OG#J2$t#KS9G5e-0$;LKJA~etjMn;P6HlNG@(FY=k!y z`J-H|rvY4y+o6bjJb_hQS^LY$60ITQ{R41;tg9)b@A*yxh!88Quv3wwDe$`k+K}Wi za*T2SZCHrKc&Ii9UI{*^ho@zLVgwQ91e)cv)-w&bR&^=jV2E5rV^UdM(5Elb7Wp)B zs8Jk(fUJeTkCtN+X33#B`NT2i@bIdUxBPYxu^;ny;$0DVS0rDVS``?&wO;-qG7c*C zxdTexoxl*o+cNi9H03sL_owi0o}y`MXs|d3Oi|gDw0fcC>8;HTIMjZ&ie1Qt?Ef4- z@8263gq~Q=fBJ9GjLYyIWRLCzmuVQHdm4ZbRD24Mg{q$n8?Za0pb>$-|E{14LKiUC ze)I-ByPXh7odZG|^;Wft(t9NuPNcdl=x{OFuLAc60VXDDg(QUpdTnb6Jz<+>)ewuCg7!pdP(v93}C$&CB4*+}0P`})ZPj(|fpz+*0I_8s|*s-=S zx@J(>paFws^o(-=0Pt{;2cRy|P);62S5v7M+9T@#ib74F|C*k?=${e*cv*l@D42ZN zHHPS~B(H-SHISyH`-%zUi?VKlhjiFR4NB~2N3nL0mZCG+6RR<0U#B84yT9?^+F2?* zXICN|8&BWl<`|h1J}=NBxOtd_+=_O|@Vr2Ga_SCS1=}{3z#r+?lz35gx~XTSdc)P&8;ygXNy|2kJU8cYH{d}I;&2N&RI;SGWv z4}TPicDcGj*Hk@pO+n4Xo2CY!V&bN*jaPSM*k0Z^WP_?~Cg`^UNcb*evjH$oqcH$) z3*4g*ZxrcyX#o_JWf`&%b{pTa33QQUc_|pI2;p9k6v$jSb3T{VS0$tS<^UI&Fy`CJ zN>ubfxm^`DOl@aJe%&kv8`8$$I=DDZ!^7B`N>E@LjgpnG#i*L4VH8CBxoiOAA-%^8 z0wxEt_A534k6R>SpM;CjX#&6ydMrM-HA9!f5wFqX+nVA>nc_$=d)rbEQf@hL?83x` zjo5r{Hoq|t#zx)O;HT^g-)`qRkpRHj&g+>YSfBdT0FmTOAlD3^=r-1X452CD>1Lt* z-&9K+MjwOgCGbwx1WB5%Ahn5I&S6%#U4&-|KalODXWXL^G_qm*mbDf27#mr01^~*G zB{PuBIss{rv$=64|1aRCv~5~{wpNAiC*H1YL8HppGWrW`5=oyG>w~~obl+mk3GjX< zvR!d;ei9ZfKE`!!Zv?a!#vK08!?%e*MAd=$qS0ul<6poo;TmxH(>@hwSOuNcHJ@=1 zS9$!9s(*E93H`dfv+#KT96F|&Wj$AKQCp_nP|Z~^`>_ZNGvy*Q z;($(f$N{q=KdLo6+6bEm4hH(JyGS`cvWC#0n`FrmSe=E7??DZ-V+=YJ)&`L5(8@Q? z&p2x#4gc0NpZealqAIh^8Zlw)?rb$ZTF}%4gyj`NK1Ej zcXvuRh)4;Dh)8!!cbBxZga|_;ph$;7N{V#XzQ*T!-+g??@7T}p*#GOz%-q*?##-xK zrw3dPaRb)m;EaM|Yneg9IcOU!|2r_^oKg?y>jMU+CReDmnAA&X?y`oVWlT+_-=2M7 zUkmgs_(EGHGZ~Z)4OGn_4o0R!8XSu&=D0pkvq>k1Qq`#i z$QvqmPgzB@FzF8AC;;%}^(>%jiV)F$(f%va5nOTd3HPp{6d~|JS1hs3OA5cUC8p#+ z{vEd|J%b#24SSUUd84JzsGNqYyV>qv&_Q%FIs;e@Ihu)L-iQma71REtZsU8j+Cc*j zE$VjKCFHKs{yk8)F)vofA9zhwnm-VKGxjbTfX(m0#Hjb0^(feJCmJ>yjM3kTi~mdE zqu5qiQ8!Cv72a(Os^k{xab_pASYc;(Fuwlu+9uY+`ReG2?BZnjSDU2RL<0~ip%2c{h`-xM< z@(#31QID+Y4hFUI!MrYg+$+!JT>D1TfT_*vy@QZJoH{c`*;i5z<($5Lg6~uHGT)~< z*v9o=N^k;P$DgPyk&`0I>!;KFVC*9T1y`%8w)?(zgsdMN229%`L~b~54>-*Z5!V3l zdsWULR2AamB3rdddX z_z%X*7nEjb-^;dVRDt=RP3oiWBAmi>o+2^(?FiYSDs}KkLQNU8&0LU1J=rK>Zvm%H z^yJzcye=@K`E$=O)Ux3zTDIg~AkN6erF-sSHZe^SJWO7;F?3HT^yoKT+eoN|7wIHx zuRoGsEFyZ39A13r}-=-i#CSZo+f)SCtBgUzY=p- zh63J(K+zO%U;h%jEBBGJ0n|1+9UHRm!P>rBz?LiQ>b>$QV&edU1Y%=XP*we5LeO9h zL98C`5J=y<7Yi1FI0%BFvFM5KpFk+Dp_&sfY8JVSKNGzQ@2$2Ti+qR zN2AGXi}W`~FzQp=l|^DjXK_-W_W6kN>LVDATsV6}^R&kV-iGY~VgF6+6H0$ECD7u2;^-{L19~Ct7`jWqKgX_?_(c4@ zuxcof?n1mwf*x7QAn|{v#la)~_?1FIM z8Y;@RXshBF218yc-3WGu zhX8wq4@;mC#5n!#u6gt_)UzK+H!VW&-KLR5J#tg_6Ut`}|917jZ)rL7S5yW4E6JEq z0elfH|9_>+$?y$2G>tR~!1^qKDiQ;<@CjG{`mT|G?E*O*sAT!?-wupZsdkp zb?z=6|L3DL<{=VQIY^LGSo-E(zla_7kTNK#7yqa_K#=;Y075!1Tw3&!|0@6u<}nC? z)^n;`W|LMGs9FN1`c)rTHq|{EN&2@;@V|weWg0-U<)QD~t^>BotCqxxF(bC_rl$R0 z{_x+kjjtB4v%|`F?F!*z~{ibpQEX{?@|? zC7>rDMPDlrmxD}y{rZLhRKP_`zjgnwKl^|G0iqW91j4zoVsLo)vcpe+o4c&6WB331 zGyh-h?BAzY(jk=(u*0tuU>xV^Q^llOXw{hO3G@GtCm4b!U`79aI<6PMPx?jHI|^D= zP{42XZ;0pr{zzPSfP7X6@_LE`6jFSRManHepMjiw1)@FfhCA6{fNBW{bjY#NnO_fW z1546cAa)yhU4-0-YYManx<_w2{<--7+GhOoeQ*A%5{J$HD%}7~vV>wteR;o@Md|<# zgqtZ??m=>C2&4F>@{)`HrAg(XaLmZ{jQ_R4Uo9HaAftBWjVSgC?%fh$b=!k(q7JU# zKp0>J>MN{KpfKqHgzM_y>gB?%-`Sv|gihorupgs*4}2n|jKP$uYgNrGqr`rsD_}-n zs0TZCB9%P;XW{;6AlG1_lDkTk*uCE`^cmR)Ixu8Gj^#YE=95+`&^QCu&<0xpIUD9* z;TN{(Z?5SZAF#_64Y@ASW_W^GqJRshv-uu2TAt-iSt{I!wv`?0OFe((gZ=CTE z;9tm~Mb`4}$V3s<@9XUcH(=L+g$!mZw;#b5$3ouwA9Q4`{)Q`79o$Is$rjL#_JEas z3rgmU^tcy1Yu~FL?107u7Eu6>pbK@LN2d6M9F&8)armG z9+=}QDSWkAbz{?3w8}X=;m0cll%SKWLumxv&3zv;}Odi6PJr{i{X$8h=e>H=#iBF8KZYlG4w% zzcC;(-}6|x?E<5SnB~$!z`JQnE}Xn?PML0E0jLDGU5twM$ZtaLD4IU5(sQDN^~GkdfTFc$K;ooMTe4&O@Zv{0 zG2J1MhX85MX!LR5sa^1+B&j6W{P^18$q(n9f=`};)#t&8eBUx?)zUOhzXcK$$@hs8 z=tQsWpTcPd;iPJR?}`nvjF<#xbG+s4@cc8qzkX-)qTRA5XokE`-XJcHz{W{(Bpwp( zSo85^Rk%V$hw8T)vd6hS1&v6`3h575Cpq<>n7M(R0KLg*+QbGG1xqaCfM*jdxKi6E z?Xn+7sv8vICoxcx8dj&ExcH}pSUAMl8fK3Z3@Qf!mU*b6APk(9Qc zD>RICf7$}Gr_9s3uu0-mPdwAo7bGt5CnPK9NUUx#_Q{B62XcW|>2)1a(#c`$xI+8& z?Mc*ETu%2{fPCWL0L|wca?F*F|4ZI^e)vJ$H9j`d&mun-?56^K;F`h_WhN|>?rW+* zCsJTW`$mYS!?=^ISN(vidXtvxDP_eS#}<#k9yD?lCFfk(he(^cm0RA?79>oN6$sI_ z`@!J_Wr##V!0$|~gI^;^4J5wuoH9>5~AdO6#eWe6Bd>5hXXqU1W$xWBqR20VLLl6@#EaXLZXjM$QATUU`Md`EO^ap!%b3-@&Ba#|6`yfi30(>^Xy8v zwVQ!5%U93oOSUjCS$2-hYVGXaSezdp!|7fR&Oogk(E6HZ-+56FBt2a<=)6BZ$?fH`MsFy|+el`nbc&sCS?a&A8 zdTwp{A6I~4xW+rYP-X;gb+mxH<1m8EkaE$aMmZlHB;nV(CvkRcH`oK>!=0~ zERWv-@fh*+t5<#xEZy>Ys!gmyAkcb*j*yo_K2aKR&z)}BT>8m zNkd+ruJ$=h3!?8o3HJC+?WJ9dcU98wb;9Q9D2NR*8rfk>d@1PG@vByeuKf$(kX~>+ z=_bH`M{I+c7&7C_xQc~G3=On*s8L_Ek0vhqZFcWR`bKy(xad#4cKF~=-LvxUb#(Nc zfuyu$b`RuELic^3iRYj|w1ZaiN&CX_7yHY1ps?-W*-S1v*AD0_$kPNGLEKMBE%+X& zCyI3f-8Sx1lZO`?<#ir@5w-gfE(GNC(@|D(Mx)bPxWtW=KOHKoyODWeK=#Kgq3vHe z?dBXGP5x;?xP1TOYZ-ruvmVv1+x|iOgulEKBN==TnH0_3PbqKrDaRTJI6eZh{!+z7 z=NE+x?#D$G&Im?(R}zhM8ce}HaH>XC^CnaS`qb4HJN803doP8r+W?mJIZ2-bLG%4@ zvL`{%G%Ld`sljKshQ?X95ca?FgqaipIYF>4Xgq{OcYntPEC<4o+H|{%){8tKHSPYy zm`CoiN${q{;Pv#FdB~M-HmoY|aNMPV*ybyUNLy+D_G5Ch`+|x6pU0K#1|xA$w(fCf zfVl1F^DUE$ah=v92M6Fm4=w=}MSeRLrfK=r?+p1}ZAip_F>9hz+&uIXK8O9SRnsN@ zY9Q7AY9Q4^?_hB1y{ha6#AvBh3-51|(N_wX!NJrox_fl$k+m44xhKaoh_kL2&&@UN zApqLOE+>&mnV162g~Z}~$UsH414tmrlpTThZlwJp3K9{`QU=0G>b7M{F)Q3Kc-r76 z2I&C360i0hXBP|;myaIpjT&cfSw@FyfJr!K-L1bb0D3jJ-7+_k-Cs+?ddLQ{{@uuk zf$KLK!6F))C*O+xN>@Hd#&ylIB?g}^6e3IjGCxJe;2tmxPVf#WZn-@Fd>=<4A+#_I zSu&dJdZTeSWPZWlnpP0QF)|hj{q3|*X z-oan8-_!DuT8W}Bor7r<)+^+1+P?Vud+SmdS=e1{A*x&s+J#k;QU5DnB*%3#?7r>&1*eNcam=aOJ~h{ zV`7`42gOJ=G*U9wP^_<2oPE^&1KFAewn-VP4;32_XEbsrZp|X0b}4h@Z{2^Pa;vfM zB~rbEz3<|uDp);7{hierZPzc^DoJKq#8!u`$8;|l)(l2LoSb+=u&Kn@OG*8KB1GQh z5!Y~RQd!7Vk+Yll6&k+OhaxpJc^|-*_r2GD(u(+?a$Wdt*_K!EqFm!z$|y604e`x( zY@->82^;w{IxT=OWkT=GJ5x)gZ1T-A7^^Tpb7iu_io4U;XTW@qbvkF!Hft{U~0@7^q`d8rBdie2TJZ^&MP$C(1;YfPapANaNX?9J>{U_NC4x|@UuOByv#6AG!WXE7&9du!x$MLzCX^LXa z_C0$?ugu^#SqHnz9~Q3v2!)lt;eN8LMeq{HA3~6001f@9o9F6HUh^y-Sze!z(?LQK z0~_wo!1b0wJE6Q*ldvIH4)&t8n#$J&<9$AGnVHswwxv_Qn3y3fzSIxhZ`G z)Xv}YGKM(TxOvoEeB1VHk3RH8DofWlKQPT8or4@(1;h=2mty_G_ECY?>po#FkDQ*E zBij+kW+z9>Vi0lRhnds-NQoD4!gFzTUklWo;Zd=}5d?Wnl=gZ?C1Ld+vGAiz<8Mk{ zWOBeoN76LZw%JkO$BPL>GfXuB56I`!YLNw0D3Q6)n{p#YYv-_Y1;$EI|IfoEXEA;Q zJ)EGWTQLlFBXdU)EOPD%CR1jojqcLONH=?M{w%<9&h5zF z=d}q(Lhsq2)kvwpwAn+NJ(~}=e3)r&S1DW}6)b6Qvb~uHpXTwGT+BnsH3WIY%zujD z{{se52f7t8Iiw1EzuFx~MU7%Y?((lob@a+W_qDtN0$_E_375vB?C06VAUEx&wvnnU3=Y_h! z@D*BuhR{;TY{zUnD=EeSkZg~N(ez!B3S6hh)6Q=_acZHy!(yx(o!pv+3xj1NRFB)v zMl`57=N>(l4h*g3DUzh=3=UDQ)R{k5!1Z01Mt#WFu#~cZqe$o_f=&&;@5+hsJ}0IR z|6->QV_#%B@H>ilv;!JJh2e!hRaN20bLrpN!tU1oqfonyF6ffEpy#Q*bWD6>JFnMv zZ0{%U-bOklLlhcEzOoV3J?+p%&z@kUp4Oz+y zt?$H}Pi)PtK{xdYs2bP==u24(qi{oUw1D=- zUUilUW@vG}Wgr^%O!2Dkv?56fTl#({ZSwEOPHRZjs&-?x$-{lA`?5h#gLggVTHdiq z9wo$>;U4`4iT%)2r`fbT&q<#rb+L0e=72t1Y?RY@OLF^7c-F?Z?Z&2~E0Gl-v6nZo zD$4L5`VF?!M_P9k@{g@;+QHpDSw@f4`k6;8M4FP`!VEpO6>?58e>O#WX>|0Dm3Qd) zA;*;Pr&{^2E-d4sM z!l$hg{x~mR8aH#g$OPzl=H88aJ1v0s4H)QiQ%JX%F$}FQVlS;8-u>Y9vFh)oF0d_9%N6OB1hZ5~PgNxtYgdjJHaWU$|^DO>7?(8a>T+&vWx1JzdM>gX%xL5L;NIEEEOUFnc6h+&PR*2UkXn z)iEbmu=V+j)ir514&zi0$Q6%qzVY4;XtH2g%@I~!h6KRjP?>yA8Y-xMgQFR&>dB0S z0h8sqw5LF`c4fEFj+_(@tvEH=@t-3KX;NrsnPxU{j{E2^mQzaw|6+a5y_k*R8o8t3 z_vVNgj7=l|IbLSpJaRE{isTjkr8bn1Y|e=gDB)Q3J$lT(vBRoB^VXd!Lo3x|&9WKt zYU3RPRNqTZ7O$3y@_^DeN!^nmRx7`#Gw~fhZN5rgY{OWQqDd(8AG?)95V_xDJlFUm zqh=Y5Qi2lkW{1Yo?cz-UsWS=6!(>vfLF=-NJ@)LzqgX6ow1_hl0mvNMaqy9E4&t8ai_aURbyr$(VJ0870C zw~0Tf`YPjP6R1e%Tw-{esr%9OB8*}2+9XSj^ryABBOj>ngB8u8gdRZ$daR!e+!l0; zH40BJ$!1}*R4jNK#j$%o;ul)N-bZjo;MKO|c3{3af&?X=;Sl7dV@UZG=Y4fi;?FKg zo!le{VfrEz>?(W9QWzkgCu0?z&mT5E6oQWbdrjCGU#*N28XIq5%-=DtNX{Mh*>#>i z)c}G)PxVMKgHk<5Wa>i6HGr$X8CMJ88DvnY`B8tThT2D1TI&iUtOCDF(+9;vC5xU| z;MJa`D&L68#E(xmD(Ch@9D_am!iRQ(rC%xonm`wD%A`6jL8Tyewb%0!JC<@)jxUNO zp1WS7Gff@+QIolmJA5^eZ+neZqb}MFm)~^H@=s7xW&jFv(rfAKz$SP{qTiq~DvAi^ z1J>~n#n@JoUayFtd#nQ)5mIGY?wR`e6^n| zPQCv1Bj%PV&6<2%dLMo)y+yu&@iyjgu>s&lr#eqxz^W<^m&Ak~o9Q;y=;a84Yq9ot zQm}#oKt@@|w`Gi24@D;Z?m0LjhlbuJnrBFie#p*baOYp^I(o2HIl^sdlAjw=F#BRs zTd_}OJ1*7~A%c=;_y|&|@(pdu;<~PQLY{_(G|=PCQ*)YHNqRF6<@-y?-Ew|pJPuCoxM8wyl3V^dpJl3P3^q>MS@d*X2Kvjh~Pt z4#b8|Jfj|ZdmnNSde6zn+O5>is1dK1@oQgUGX7?|=8*`fr?Hs13sb`besSim2sjtP z*gB$l;OR$G*qPFZZh4>7S<>=6T}|<+>4(yC9W`dim{ELeq;3)PFdNP^}9LWiVr95pFYsul$LcG)uK z4Qk|b9bA!>h5i^4n@CyME*gsr>2WNUYtRlni|R?8H1YgZJ`_gyh=wVSR{(o%kLql< z^6teisp-4`;{HuHw5Qs^O46<*!7rfa44ck0zXRP(u9f5*8>Z&|lF`W;nOx4Sq_%G{|$Z?mSr zN7!BS(L-$)Td@e*@&k@}Fa3(Q8YeSP#asDYue^Wa-=0~nZJoiO8jUzXvf9A}f&NOW zl!M~7&_e31DTAg6Rn;w2bY{Csbi;Na9XS%cB@kW_v%#Qan}4{SxpDRRVYcNL1^>wH zq!H~s(U`n!V@=0W`N6x%I6(}7y8UCoQH^Qhq10=4M`6h+wTRa!jEWsr*PpU^<}FCl zsOoXEg9298s^2YAuk~b5t+r6fSyYO+M7>=@VdXlE6=rZ(ACY{OaujKMA$D^w6sP}l z@uVYD0=%WPLmNNvEZep*fd|HxYx1(1prTXXXk93;|0>UyM2W%e5VzLKobXuKsAcWi z_g9L+`zTvtInFgRKYv>_+na6*jN3P)BCB)@GF2%Dse-#6@;+s^Y8C}N*f@iqEkoR1 z#UCfSQ2RXn>7w?5qxX!oJ56!eu>Ul~a6M%Ho9lwE0)!PtNIf4W*<7f}+Z=`0oKugz zYlCTXP25zmJ+pBb^(A~R?+HcEt@h?}e1d;1d?B=(DEy=r+)&Y$!H;6J6=!`*BG@5T zZs1xSd4)4N%%43z(WLtN_Tg6abf9Lxtz-~CA8M;n_@%>!{Z1`5xTPJ)TY9#{S7o%G zAP*aMZ=nsj{mT1KikCurfdQqlmT+~{C6_9Bf6wx}!janodshtca)@O*_UL;WMhW-O#)$(llo-dPo+k(N z-7C>OTy7MD7*vtKs#dYP*95X&Gx^oFepV2W%X*oCX80@N1l`ap7f;df=&pvcy`0i@ zSOp41Y?8VV#^Ns^H{ zII0jsj{Iso0+-f0SdN3MU$8MaKt4k&Br20KLV=z*l+7+4k;9@tZbk6Umf}tVTt=RJ zX~f@7`{0iIy)}RBPSlPO)^zU#nX!z#3JMf~2s^`w*YqV^4oZ`(k7HYsZQF;-=jGQK zt_ZCqvZwwWUYR%5gra`uLO>HBmcZWs^GEq1E_vRlg{9c zv2D&>g%K0#G%gE|kZm!c@b>=Cr6ihK?2)?fY%QSUq=co(<{s4q2j1TsqAs*N^Gxmr zqps+DU%D6Zj{I?VXsPj$Ga^wAmxP+hK%6Q zTzr;NA9^{XL%~dq{CW=)NBwRPeJsjNSFI2rSq)lj=dN33N9R<&e$To z#iTJ}4I3$9-2A~n2$3qDxlXG2)5u!-_zY{#XTb-mZ(JgCK@)&Wq!dMK*&4uLyOd0* zbFR*4c@8l^d!dn1WtJlit2$5$XRsV2T%N@BX=-Wd*m4P@#|^9R;F)A7p-h)bz&U=` zz7`Z|B#my-2YIfWICJB_{ku-4rG;uU#D|bC+5Z17xoXS%vxWVm;Ej_Ns1A#a^xo9(tT0qvC#&WcsE%xc3NqTL}u&R{D@}KT% zRMV)`|N4q)|E*|Sur!?jivc_=NV?3eKrBH%b@dLm!%O00wIMP)2}tE{pB9Hsw6PhP zk*uo@85TuF*C;>AUg@AUc&2g6OFnE}$r7qvPsf?|?O7IB6^}FRWB=;_VQ z9zEc;R2cF+DOOS?<{va15k$~cgc+rIC9%3Q&eTv}x$2wki|&vW(!qEYl}6n2-r+)J zq>xAZ>kKY9*K_Pre_Oa2Cd*d&&17cX5rAJgu0WHD>1D@4EKwnz&@GNBEV3ge_Ot$e z7Djtz|FGwTy&MZjuYlY;TBZ&;Vz4Tp=A2JuWX>m4L=<9vmnD@Oui7^QaW9azi+=Bm z4#HlK$dLsSeT42*waPvI{k+`v;Cs?KXi>$}l<+|ho;>~s6_FdWLC+r>OP zs3@j#&!%<^mK)aqa^RVGo)9J#Wb%b- zzvcP2x`7ewmS={r8vpj;&Ape} zg@xYOWG=P-$AxeN?>JHgq{^##?v879HK%p;GE3yc<0)=%Lpj!YI5>@G$Nx*mV8h_7ZdymlPB@@yr| zKVaAjZhgJg99MW~26*fjy7k#g*OOcMZHd;eSEIB!AY^Kp^UpB z|K?{&L}YH;F}k5sTgyZayiMQOo<2(<)O*fpmF@)){D5NZQh~6CsfmhqMmcMjxP}-^pcTavdIoOH#B}!1XB${qya|poHM*gjoRWcgUcj$P z{PP9g-S)$Id@ZNcvwj7MK<`KULanI;2%IM6O;iRY_DsPXhSGJQ<$k_R6lG{^SuyB- z<#?SB^<(0wHY0@$m#YzY`5S9Rt|wFDET&PfogG|c$M-H2(%dWWDH(Ge-!G=`? zWTv)H;1T!&h9#A=eiEu4^gNS|3Bb3}(su8{@uVEJa;FI1`!z28!1vkQ_V8q+cUotl zS(w})aad3ZM!lVHj{=!;*u z=YxLgKaX|aMeTDO=!G;8Yzrv`FRTS11=13qD=XfmM5T(39?Scdc|S?vcSWPjT>n=8 z4xPIr?BLf}ed^!VU2lsYd-oZ&CHJ%hXb-id2a?1z-lxzEU>8+vRW`nCSJdh;8vidvRrVW>-d4e}?R&iiz6tBM2E z{<#|OkhQ;<$AD>c%YFB!9R>{l^ylCntjdC{;3G73Tw#s7(&i^m$zjl3O!cC);78;$ zjoVr+hFRJ8E)*7J>cO>zcxu_#;}0&TcE^oZ?eW}7gM6TbrL)?r2UuPZ%d8*#Qou5XZVc!iLgO;qu;lXvB5p-_h|Qm10{SG?x1hU@Eg>^0?uA zuRx!-!56|nxapMH%iJ3>Uwm{Izf9_vdUfD)oL*=Z{$tY42am8=&R}deBcJvw^uxsN zK%QM6&+IB2^+hUdWdvYsX=guMU1bbm^GxJW$z{P;di*``HxYj`^*tjf)K&Ws-OzGq zL3=0YYqYdd8_>o@NxVNgw%zLeII@6XXo53`9gr6DLhIvewC=7f40*&f2HeRbDk#0Q(^e)0TMk%;;V`*YP>VUpsf{?4JCc5Ehqrv41( zpk1aSuJZX+3}YONu~iy0j%QkU9?)ABhy;(*Ofy6EBVIcjSkh>UDxwq1=T*Sit~eZX z;owUxKBCBG;p)iEXWn!>Q$Sm-;@+dS%k_H8{x;7~Nbci>wD+VT^;KG(2)tGX8Nc7Q z!E3LM#$hk1k7QwC@f&LdN57TaW{XOg@*) zzNx=dr{3ZZq5Pst`8z}BXI1b+uiO&H|MZ$#IUSBiH~ZP}oEWvF|3E=7uQ?^k2n3B{>XL1}#vDRBb z=lW3g&=JzJ5t+KGDyj*0m)x4B^c$Gr)E&J>DTokV{$RPg8E9MKB#Tn zWtXLJJ&pefFMMF1N{lfpW%9Hj^!F$2N4!dqkSJ)FB#lQ&15f#jy@451clDZ4<`2|s z6su^4a5UjamwLr;GCYd{eaikg%@AckleD|(|*HU4@r3S_)ua$;3G)`XfLWVV^ zBV=TCj91_u=Bp%nXoh2_i=E2DVb95XosrHsje&dmMkzP*Di+x1QLU^|K39|<0JO%&wQ{F1gbE-5IX?t&s3JxwZQa&PrrqZsv2L#s% zyczs_HT;?S@S^l3eyz;O49j*lUFQgdl;ESbn8JQSr#k|3YUS%@lSx8QZH%$&G_l^= zDUU?*=_C3rPzBg_@W0lK*ayu+Tx#`(5ACD~)Xhaa{Gsj5mF0yHx1Jc9O3ZTO=oip)>j-o!~le4o#7>8~ekf39|vByA(peWk|W z9qG#+pm$=CeUF!cWHLZ495_vLXXjVLbVs4OCK04kU8;G5pT@EYZT6-3dlQ0MA@o2V z=&cvQ(9*qvLT- zST8X%Dd~LQlZKCZ2jhyJ#qTVi4^OT1!jZfmZjD}LW8X#T$;m7=>!kPq>c68ipkKbt zZPP#NH+q%lAw^MXTod1|Tpe1F-a|}ahn#@Z6dBVmrFyYqlO06r{2Od(t=)XL3q&Tl z6Sv=2up9T*8(&Cxxq8eJKqNd{PM4CI;GajJJ>17NI!)d$ z5Nlw8R94`8zIZ3r8UD8weCidAS1VKPF0}ky(Hm{Lha#O4-Y3c+S|b4|Kkgw4|0UHdbBj3Vl1~q3_Eh-;RjBfs`Lh{XyQ8@ zj{zZf*lLS!jmVK#=Lj~@R`ka}{m1&Q%yC8Dp&l86!eSz=egN-ixM-)8MQ<8SKi0VB z_@CULZ-PWS=J-KEYS^xEB&aRBm-Z$I>r5WFnq|rhNW+5AVWjcQ49-$7+((^f4}pEG zVkS_EFus2|2dbVFpS>}kLoYN#vB?}Z87OH`Kuu7J0%F-*AQ-v7K^2YaPTW*RK;ILQ zVs0J(kAUS9xN`t<>@>#g;ihzTjK<_JkJV^9{>DN%nQfIdHE|Fb++wG8b18_OY8?@x5aGBo#IR6cI z;!TvBnQ2aoOEo@ZnA!N3cwe+J8!~~h0---V2;*UvtBi6s*8)RG7_(`LQE82A1W(laS zaU{S0?!3JbKp|I=!-gOGToSOjAOIFMDr$ z`2$#0p>M8Nrz&H*!kMl32QUC{a(0MUK@Qmf6ZZ9+JPlP2-_YhPOw?c;K zCm&R+LvKS76f+jr&wFvVL8)7jEV=m;gm^nWddtwg0_r_9Q0MOb8gpS*LELZpg5K1; z)M1ARfV{7^RCX9OIyRidu@mRq-IaiBgW2T9-rr@PfoMg575ezL_^y}UbPa&^Z%lK8 z703zS%;!r7zdjKGU0)eiu4^~?i2$~sR8(}P@$>V6+;`Fmj=5cHe- zWS$@Ufsw~dQ0_g;90m~JbCj*43s8$_RANZ#Pp~Au%za<<-%^C{Z!c)*n3rbs57UiX zt7S}e+rleQlncUhZs!MehEtsEM5~5{j1PJ0F9_3^Fz84y#0XoR7Nze!FO5IItMw^K z2R1`rVo3Qb*7b})r}`TG0h@-9l?UKf5~Q_WMbf9%GJcz@VmN!$=i`A7-KJHDVM=+e z3V^^SEh4~&2OR}6=K1iP*noLw4l>KfHakFc+$e`AI}dakAE)O06JvP`q+E_*pn?5T zvzo?I+Rz#wQ-``EM9O+xaQ}1hCe;u1rx>`8q`EM4@D*GMb+kN7H*OzcA$n%X9yNVL>y>k@6tU*h(#bo?6db}|S@qVoNb5-R?{haO4A#4(9*I>QL9DoEnUK$yp)Ty9LsyX8?g%l%&c zF9%PE-6eAF&16`AQsi*0cNTH9#72T-1@aCx$@HsVfG+IwStrz~_1*{ab4 z4NHGZYBC22l=hG+MzRwu((%f4E^ribT|py`cg>JJx4DC=ti@ngwY(sV==$E<40kM% z3H{>cMnXAcQwh?|*;n$sG%saPV1;nT5jHYGSpTQMqBt=ocCpK}XGoH>9;zrV^b^|l z^721LH$1XeN*`-YsgY2*jmw&NWYig!juR{nGru5rr%O(}zN>JBEga!X!vqNPltJW$(#YliP5A zUj8-*z)lCGC@}2w&-8-@MoYIS(KrHe7?TASvz(UI-eOlOmHgLe0w3 zqb+~!IOE-U04knyT;vMh3d zYGaR>`Er>TNho;Je${l%iWQ#6NKLh-HqNDiNm71eVg7lwzF4XCZSj&ST#AZnZ(SfX zgI4ZtTCqmhNLTwES(2nl2UAsX?k{d4=>mz#^@R_1de1#`#h-l_GGW-lT)EZOAwQ&0 zO2{_t-<6gsp_ntYTglR`8JS4`fSc}d-TA<_X5OOm;&~ACOiYOr%u-io@YqHjpC7rb zaRGFuE=Sbbbif}O7&0F*5bc$)<7dC{P2VQzTp84h57<~BUb(YXx+r4;<%E`&IdYFu zwIn|g3tzV~)f6$_^N_&zrzrhy*kn%azSz03-i|>pxW-NllT9AkvxWI&FSyV{Fs{%m z#)*_`y2Vh(MSdYHER{F$wDA<=16$Gi$w~2eoTtwpUa-3pUXj={P9ztk*9hxD)-d7Y zMw~*=@3-_O2xMn++2;RnrRqOd?SFg`#T&6CF*b7T4fH9(Hy@}nrGaem*CPKVT{O56_&+YI1|R#aIe zbrfy*r29TQ`M`amMj|=ujTn&iv#N=5c}$TZhcLD;NnzV3=m7`7dN)9vBsY$7ZGpOm zaYt~fVDvJ*kl|B%)8OpVw6R$D`(X*L%g7P>jPTl@)@JuPh`obHFqR{XftXF0P2{5= z*01oD3yf<*Tb+6OEtfx*8fcUScK`5u0q_kBvmSAD0j>iAID3@8>lf06VYG=?`i4o#wuR<;GIe@(h@t-v4SsgE2|VC#K~nRrLV zNm(DXdqXXtIyaJenN44^_&6#39OE#NE?5gHT=4L|VRE1wr3^|}ahWupY;3=v|Ief& ztoU~uj<5&D_Ij6&dKQ0BQN}y)yD`YVdX2Zgtmy1dq2#$AqK$T}O)Etys6Vlw{elXy zIv&<5F3R!Q^hgA4{tP8($1SzkPpiqiHE)sFCKqGlY?pCERz*AQxnLxpdDD)lHF}`J z_;#D6`B7_(J-KTD6|Pw(?gW4GJa5xOyB_V*1=#%!MEn#= zs>=Ohp>8Z+ZbOY(_0Gduyob-e!eLc#8yhq>nV1?qU#}z4D4^Gq1Ub0(XV|Uyhc-&piNqp4L ziD-u3QOEe~H9{_kb_3Jz5yCfCs4%)4{s^pYJdo0| z`7uPDAhdnd{wbw=V%uN{w;N}`>bD&ZbD{&!W6_C*|A29PBuF;I)Vm*fMJ~2k0JvK{ zr`3b@u7P`tOj@OR^YijJ%G1`c01gL1VhkaTRXY;Ku-OpHo@4}rbS({xjnENHl|_kL z-BpI^p$5S~Z&-Y9f5PmT9!iM8B>*LvlN^p>PY&+{4&RggpUW_GLA~=-FTonV-e@WiARwG-pQ( zmbs|RBRmKO-Zvn0f4ZO?Ptqs7uy=bG6?^0XUyq`w9$e#RfsT|(J_XX6Y9zL!g3KCx zk$4g%!okZOdEX&TPL*b@kJ}&Di zc?Ldi-&=t#2bh|+@AFh3k@57QuD?2aGD(IAMNnVgHPtFmRqdONdKom1vZ`>!d%b{* z51N}ZXEc1)s@kBPmEuV{DVdLnVQ8JCf=w>Gs*HbB_QJkoE_YjH&*8L4!0=Jtp zXM9}D);U`>Znnj-i6RNRhryJ}09V4i`Ucj9SPuBkqxr>ghw5&ZRdK&vRc0O}hBA|@ z?cw`Ls?u795*LxkD)IJyIOpwUeY8OJMP@^O?2aQpB>F^Fgl`B!2vg^JWUpo4ZTHwJ zav{(ucp!&Vqc-DzzVvK5xHlRq1E^Dh~--0KB@mJ^oUb$#8R*O}i!E znH)Gzmj5VG@%O-CIL6sY^0>b(JA`PKyuCVnX{J2X&@x$Hpd=uFB|Y7wcWFH5rOS$D z=;N3n5ock^_C)Q8b3kW-W^D&@jfztyOTSsNKwUc+FA;p9adK+j=yYY-+~tQwBK2$ke=yj%vZ;f zs*dzi07&u?Kv;Wc(@#Yw-eK@}qyj}{eG0YZehhp&8}3auwhOU9Yn;G*H9h#7)F(_e`0sob@-B~*GMG4Z%C-WM1-Yy_7_$MYNWsH z#pCxP)Itfp$-kc)Y;f(A`R z%TAVj_v$3oe^us3_BD~(&iJ@LL^CQv_A+MAUx$8F#fAm`$`TYNLAAICbT`vV>zyDJD`42MCn$MNL_);Bn zB@CBX1bF1-X*LnGuDApudgnjz>{Qyc_G}L7c!0&M<_4e#=ZkmwT!>KExI{uOWmOTr zpug@NtFjGG`sc0JrGR~36Llr|vvNy`hDwT{DkHwh^=6fw|0MGMk9G0S2X>Os0x2K% z_Fzu0EUB9){WCXAKv?TP=Zgsa#Q)EbhcN~@RzzXe{u*WE|F;kPUw(`*hKN?Atqhcb z_Ao*eg*c6zG^b~2Jz!yHn;p3CBfil-$Q2O(Io4tN`faOlhVY*c@c;ON;EuldLzf6b z9^tX!|G^{t@86AFfjH9B|I$I1MU3XeoJ0R_H}7vB8SG_KxX7b98h#L5H>9tXruRg3 zOYzoZgXi4$WF2?OndNiGAbrIa_1|5!JSPjvgI<6gCahTA=>6Z`I7|#|R0`i*4_e^| zUifZfHP#$-(*I7jYJU)3mHT-oX!6Q;GsT7YAx#l2NOaK#SV~HaIv~y_V)SmcNxtBa z(F;};X}_|iE!!llz!$1Y1s3o|kEuhJ(feyJ$}b%^RQJmsJcbOdBDa;_o3Y?Pbltm? zHL{I*_C@ni`Ae7vU9f1YZ#qc`I(%a4^?}px&BnJ#W^p8Cz`T2=IZitN`Km>01hFV{ z(4pu1t^vVw@OCWpo&oXmeOsx)OQLBAtIFJ3@QBf8y%n--MtdM{>N;3Mn{I$B?D!># zshiuc+#46Tydfqi^|*uUi==hSDR1y;9S;<_)`r;t<+{Y0Xk%l~ZZ!z#Cj)1}K0@Na zDqRp{#SvBaUoL~k$~7>LDSzIf#{3WT=D%*_unx{M|5-bcf8GV>ir_7fQ}!W=&o6b6 zK$PA|@BXP@6Ceui1P}EKb6~1l-%lqO_}Uk^U0xTxAs9p~43D&al%kEjAyMMz29gZs z3W*-#G@mN0@%315sI4xfI9QB8gsz;ItJG4Z_UA{@D;GiEC@`%p+DCY zMCm;XYCb!*Vc!L+z8Li0|4WO0*X0u7$?f)J9a$&XloKXLf4%EtmtRc@JOCr$>FrM-q2;=g z2iyT1gV}Qvp6?lZN6bCknz5~feAmBs1Q~oGCBt$tD_GQQkp|C!o|X`7Hya7?R-EJ* zc)gr^&f@)Rx1S&L?15_{47+xYFX)votnY#UM{{{MKu4dJpxa~QRqA}y*wjk%Yi>>@ z+vYY9PD(OtQtijoHq3}OSCQPc*+DRJ)9 znDSS<+r^oJqi&BtP0zJ2K_>yPRPVxK=mB3zH^h?l{%IEPAl>+L0-7x|2HVp?K{a5p z{utuEyAWlk*s(N~_P=|#pqqF&Opq%%eECUH;YT*>>%&&PK^3o1#u$`wErF%qvY3|a zKA1tInOz_w)0IvGA0@x%$PM&xZ$8={I?%=YdQ+e+TmZ2y?g1B-$zRoE{ZW3mU*Veo zGWUv@YxSZAZq+iF5g53Ks!>1lY|a5k+eBgm4>+u^^x8x+rfS6SZydY7QbU)ymwx&( zEed+PG-U3`d|&Q(ck-wPn3?_(Sklv(W}%doapUk;kd%47AJD zLJ9Bj#HLCpDi>!W(=I5*gbCbSEH0eb8V02QT4^NqIZ$)jo0pW3pas-EUU$P*I9s7V zFyT_+hJYs-X%5*^RHdG?9ci%4UJBm1wV~BTRw+s8^A4Z;F}MH?Q5;JDz~#f|zQ zhS41sG0DMU^l9$xyH}$e+8$O-fmnx>L8EmI;_)8y8ay+(G?(dpxiqRB-xCD2vZ9Hf zb@QFW^Uen6-NV)U3g`HXAXV*2hDX5NCU~-Pnr5TIJVJ{6Q9%wP5W>Mf>M3 z=c?UKZ_$|g!u{Y&u$agKjNNCowdlYS=Jv)v9@V}n%(`Xf($cjy1Oyx4lsT5x#yazS z-;%*~iWMVMHa;8%@mvr1xSwl%n+W^&FcJeaXFk23YP2F)nwnb35U`LAijq|+*bRD- z=x)g6kQQ|wDr!QfH5vW=3*v}W%wlEl*xIT7U{VixF&b_X*V>{i#jwcjANN@l=d1pijr40EJA&em{&Bvnh#c*>BE5?P-R16JtEAa_O_OJndyjWdHmq(4}brr)?|7Mw6 zDgUXF8j+f>SyrVbzr-I!K|kr5&qeEWUbina(Ho4A#y4-$@UpR7X;1t7_{R%~tn4q5 zrK%(ASHJ53`w3ZZb&8%YC3`t`J$Sd7yfb#}=ELi9L?^P?lArP6P>(^bCy7 zd5W}+z~gy@;GCX_%`}T+10Op)V>2v7((Ra3ZJffjzjbIw_sQS@|Ov zxlC+_m4j7L{Z*g_76Ha$>ZZ{HybEcm zwdsgm)a^!wE2mI#1)XcX!=|UG9){sHH#iwJS-N@H~!#d})5lQd>B6@l z<+r*xe1Y8`+jax$9GA;7Ys%(KsP)|tV>5Vf0QQhBG}u>`dQhKex63-jQ&lT0ZfNz3 z1FL&)gNM3jtGe^+@kOwpi&^H@5~#YToko;|dV1QQ)RwyV_MpB=q@%~~G2+>OYsn_= z+LxH-)_E^XaBUM%>$?u0i)<~vsF0a{Ahy!C5!c}2_@Z|Db?Q@VP=C)0YGwa|V?}y7 zk~TKBz|ywt7O&Z?kiuT{v4+`t;L-lLXS8SBcJG*BL5|OZU@>rw7+;HAbA*~ZLQI8; zz3wX*9N3-vk=qZ8<-vUYkjp9+gf4_+sfC^ka=6@ar+-5uX9wKzIAotVXANDKl>r*g z#1^Nw`doe-R?l0gPyAnrH$d!~Ag)TZ#}eU3%e7X9t_T0F0nNRSybSNnK3H)9Ti4d8 zoBx0fD>mL3;Mzl(bIyrEEVQ250A1GMeo>f?7oDI|Fqpu4JKk{0uc#$xShg8_f78N9 zWydH4pWu>53uo6>n*iQ%{XmAJ2B~(ohfGh^?g%q|duE7vN_9=MCrkMa>vc@4WXRx7FBmp!DPVBR^+)f#koo+Dk0E3h|J16Ia&o>%fww(PIsoK1$^ z)ngPVaQIXTJ|@#na6 z7XLrE0H2@T~yZ>A6g5% z6@HXX`H;u3hviIOqCx-(;3(I`u6I$wDRJ;!bISmS^tT|;@~5PR&vz;eT_{jAtYm2? zqC4M7P1vl&LMKNfW@vtu;Oc}pAAMp!O+QOa@cW@+gJscVV6dWCPuouVeNs7-2HnyJ zz79RreTJ21(;VcLE%XmbC1{x#t&utC6GS!qO&|tL2ioT_^KA#Pp@ZIx~va$ z_W{|mC|WkRp8Rv4ELmpdF~Kxn&H4AuxbaPDb=34Z z#X-YmmkFb{%VcN=sP6J<=0tGa6Gh&pykw8L5tq;&AlJIatoy!yBu4JkLb9Bkhpv6S|Rrp4*lAXn`Q&wm>Y7JO4l| z{|6Ma7y+<@PifM%ALIZ|TGqX4tl+iIbN(?vLNOG1cv?){PA~aJh?ah?4O-)})DOyo zd4w|O?)rYJTeXq!m;xfSu}DhUqDLYHk*5X zj7lY=K1CDS=&7;Uc&>BQU6rTrlWa9C(9wd&NBeG}fyvx$l4T@ZJ~bs0XhZuho2ER9B7LH_Bdl?5O)`u5cYv{xhHc0ozXMmAet|{-tCPKN?8f!kEy(w(DXyD|3&w<8 z4wY@HDn14)N^`L=uzY{(p2%$qt=+{}m(c?1S27t?j|i^OInA-))qci!c`0U`C_QFx zVJ=J=`t3Em7a)tpuOl@Z#VMO60G zv6dX>CDkygT%CLAz8Pp?pD$$@zAKP@A5ZV_i^_;YO{8yK=l72BkPG}jkYZXceGagI zijG!};iyBz8z)C52*4vc{owcGdTNY+z&9-#d*UneFJERPB$7P#EQ}Ji%=3z#DE45W z+XZ8`>(Moran3EgJfYBBlZ*E3e#2t-UjjgX znLU}ro2od-g8$!Osv*V*or+)AZCVsgM&=PgUjqq>%Jow!AJ^e%kA0Jp66VU}?fi&R zyvdo0BM&Jfx9^EGC#7=rVdB;g0FjuAjcVU=RX;7Hc9G`;R8RX$!0=O-=nSGMKy~6Q zi>CP`4vO^C?XpP@Xb~_w<6DZ>!&z^93R5Ww?J2s6FAYQG25fFd==ajHgq*rtJ1|aKK~bsm4EGq zbKQ}`7zS^~Oym$gY4ob}0NBhdyX*-v*9;zVKE0&mc`BS(UlK}1!ENPg55(jTK!ZTr z6JDJOPE;<^R9t-98&sfjgO~IU?gEqKaHc&#r~oXYs3jF|p;m4ckG9z?C98C0(yS;) zf?NJWV!m^}ap!L%C|0%>p~WotxIS~eId=Ld*H21^Ca?C@Z>{Bx2_Ch~7z~` zNVTS75$<CF-zE3^6BLPy(z%e z2W#INZ`Fa0@i13r7H<~6K{!=$Q{aJdSxWNWw042qJ>`&Za$J`)9kGuJoMPGe4_2I2 z-iW6KQ@ta-QrvC)#XKCD600>A_FToX`q8meG`*g)av+q#Qqi=(X#CD}VH_OV<%nWZ zfu9xBFI}~StygFFM)Jm2c|Un{xTS-}tSE1TR6{E(1!Z=uS*P^ckqY-*Ymq_Kt;+_5 zDE>$FuZgg_lfHCQ{Eit(c>eFEQu2BT&=q6y<~b-`EVuL;&QGbguu1+H5XQnN;0~++ z&suc*#HoIBKq~_hszxlm07Oa$OxHQRTO;6}SE?4d(qbcOdTMrLKttnS@xk~C7k|feW8NkICP4%|^XWbC?n5{}11jW+U4Ww(AF8YC zN*RX?z|+kAcjQ-3voCXT5IT?rvX%{GBS!UY4h_G6VgaSjS9_cYR&FI(cVuw@caibF zlQWMjZ}EL}8T9IRRj3j`c{i7aOA#zuIHtj8Ncmn@cdgtgp!@>>eBKde+)FCmK zu$hMhsk{j4U+2|m-f;KljVaX&gYAaIiRHfaRLosB5iI_D%xBFL%9|<(uu99A?*|&B zy$sb6P-PTxa;t}=(TOlV6VvLT(qAnXbLv=&lQql}%&zmazIgKNQkRU{P-Ilk{s#%n z&@Qq1lY-mloLPUh?VMT8CJna6bA<2$^b;rO2Qw?{|BWdFSYR5 zZC8saTy$enun{LCRS9j8!}qEN`PIxE-oe^m8iZJ)+XuElAW2(Oc8Y z(aCh71``@FXI0jCyx!zE&m!ZYC#vzz8PzIDUL6+vC}R&pmUDR&@^lg@b4Z+^6Gj`Y zjxlL}N(B2oAx`1z;!<7Fu;B2#-@#oyGRk%CGWK%8X#l-)SV z3v*5H!4Fnzm_r2EpB(Mz_(!lii-iQYk0qs?9pQF{?wzW!pBaMb?e~5>deL?f<4?1a zE6W-`=&mEZP++maM8}!&??j#U2&=tPSqn> zJR@e5L)l@2-BC9W9bEdg+I-6cI;>KRQ^Bws%ko}8bg&QjU7LsmSP+Mfp$G-6=L1!Y zWH$UyZhv?wSfT)%}2~)fQSZ ze(TYhQfZuq^v>KXbuUUPe6X>)@nW0SkO^LHXA~P%P>!@u3Dz&j&&qW>rn`pa^g)+s z=7eUUmNv)V`aryPu0wf- zh4)WcIB+C>mF81dUzWbe+ywsBuF^k@pRy>2KNe=tG8pGG!)vtsch7?rtTOmH(wBo$ zF(%9JWq#7DwCpqV!A|i05H7gxB$#giXy#QP(P@<`I>ncKPscZH|*o1>qX}S0P?I_yqn1NVCYz#3gFaIGb<#j z=Th?7(@&L$NQ4LIlD_ct(Wue1&P)`slPOZOPB}1qqs-4gcqT(&66nlx$b;?>D4h`3 z)xEiJZ=l2Sh8dWryLwLK1^-B9X`!=9zRr3ea~w~pS>)Mp-l9iO_pUN0evTr2oLT8U zT}gIa9Sn4f#-Vwy$#ooGsr6Z8)?zH zU2}Q#^~}BEafh5K+*bT;=?oy{Jj2iC79$PvrZeKnS)!Vu)mT|ZW5s@5g%&`?T(si# zdJJ*?Yd}4p`t?E3om2g|J$);_T_>$Cc5cB6tD{u6K#fT?v2s~HR?I;7?`rxC#TL{p zeHDeo)j{vQ;cuPiYPIzfRm-iK15-IPnmwqny15BHUU7#sy!$U`QWi1WHi=`pl%2Ll z8sbG4;3r6pG$X@ydkACc{9&+>Qobk#`2yLT8{aC{KAX-Z@RI4WZmSZ@MR>IXc0cJN z^UW;f_Ej@Y$}?brH~5Qo*ElrTH>hr1&x;faS#SrbMv4qq3ifmr4I$c>UN^;px$v@1PW`fr^Q_rXzvbLzg#J zR3a!Wlc@M7B&4pOdtQFQAE&Ek#!budQDq7nioZ_25|9ZwsAk>}hoZf4r_(C2MTmqL zf;y>uEvLP;JEe;iTL^^3rRA__Nv>Bkh;b8)AUcGjV`#;u3vb3mnHPEaRQ)Y^h4mx% zA1j{WvwuXF-LRPGQ&M5hHM#IDLGF00lN>9#+hz)z;jBuzh$jgLy z@Sf6Qc~Poi)RSZIA5tV$bd4%nU`&Si@5L5a3vm#svn86dh$*;(wOHr<2L>z_%P>~2 zx3WdVWjrA!*tB?7s1VkLj9vQy>ns5De((#u&+~^L{ z@8)3=TwkK*Ng&HJ9)k0>PNqc3w=3sXyw-*qWe5x7hu{F+x2tuENe`U+Q=@oqFizBYdqpgWO#j2$^vcfN&x&FOd@O&ONL-nXJK zX3cbOpWG?4xV0$!`RLPBvo28hbv1FF`yeDK)L}9(3@y&`6Ft?tK+q7iI^9L;&{Twd z=4Kb^L5>-i%1n@JDwe%mHGsEn>^x?_pcy9Q6H@+J!~@dGOp66k)xwdQkIiq8&Z=F_ zdCx6$?w(z&0xIjg)4=%~H;89tma`1ouQIo%(62I+6|i`!^zyzlE>8yUDl%Jk7iE7A z>d{-eiS|wHlSKTQEna*XJ@YKMprl%ybT<gBBd#f?rDgSm%R0X^U)@o{=GY@ z`s1IqTfB-Zcu29FDcuH$yjsAD^Wh!*EpG_IxV+()N`Uj7zLPJJjAb~%%k zA#=hWxK86kUWO%OoxMeE0UH_9wQo6ZyxbZw7i>B!ubz00PJl?Sf~*viz1B;ECRx2R zm*%i^fZ5eQM>dOa8nlRl&ks3ogvAt@=c@nctVwjr2|C`hRAG^vHw=y6h5-*NPJ>A5XumZQZm`%f7wxY_e9kBN^uN(=sqN z*}jX}P>LX0Sg45OjN>gA!qAeTT1av(z&PP^h0`n5U`D)Po=hbnz(!rSw7K2aoY5YQ8 zYpS+gJOX~1ZwKQ)9yp`U*t@an6Gy(uJXd#!`%I6}h#QrZ@;8fL#EoSC&1lB(-0`q_?Er*HELrR@p@uLBCLa+`v&5)OPk&$PHv)Jz1wHJ7OY(74m zm)l|cy*GM*b?Ic<$*N$QeYXkfxLUx3{8%Z;O}rKI3Oqs!eqwTc*Uot}qIodSE_1T% z6Gf@$UDJrV`{N>dpH)&`R#S8lBNhcA(NBB0sT(6(=!?J1bfJ0Q7T?+<{gIt>wB#WE zGtDm1fMr?*U+Z`aIE6LEH)rBfqF&=|si@N@-p|LS#eFK!(O4A1TB1Q#wOa1Pn|J7k zPoflYqs#QzBQan1Vcai=U93ZeOgG@>8UG;EV$&i28gYm4rMPn(PSLZx%lGn9v3;Ko ztCBGatWxQP#i>}!_9<@rKDs>ohWq|k#w!uVn_@Yu6afxJH-mi_DLE$LC6p_=xis6Ctl_3e^blqBPHHZsiut z)yL#l5r_|avIvjkKk#{ajEQTYlD>_17NtpnhL$LKWwn{t+Vn5Q7DYxI=#?c97Qw~g z`{|_1r~xYF6l4UJ+oRMX(~IfL=colX=eR>|M{pyq+b&Kx2V_0>V8NHA`|h6 z&IkT1cPUbouuxlg{&-Hsx{fZ7LWz#>)=9fC1vi!P+fDiLO@1@-+)xm>cJ=E~LB9f3 zob*$77Rx#VT5L8vJ}tBv6rNw0s@*8Cx&!dqCi0XbCstaTMVaKO^ABr3mEDX0rQc=q zf^yMk@{^%Agl;XF&~Jt(Ml~8|R^#jp_R-Ee&cjW6afE)VI)v|Z11b;#@*DK;l#k;KyTqRy9^RK$DV*AF+Vo`sc zsZ?jTUdz@EU<&8b_mxt57%T5*2~%;H1~4jVs{2Rj1Uqws!X#3i;N^|4Eg^%63Ji=gcaW~XP`Y&l4yH-dod`m>4wRiUUeL%i2>`{$|>x4LR*a(I~A zaMUt+MOXR^wi{e%uz9eLNnBad8=62KM6eLqo%-tGj!zfqhBoY3lL_wz5%S3agDj;N zk+BdOKRwWoOW=^@IA) z3@hX=d+;I~hg;`m9)S;ycvw-c1=T-Jf?$*`n56wLs)GM=Ng<6$M1h41m(@!k+eR9= zRZw7+)*B5z2#pRNrZCykMfP*~_hj=}Ii%2qh|FDO8%zy8poiIH!!rQ65og#2PXs{eG34JeJvce*#z~ z?p)gGLjlZX=O~bSa+4NSP>pa|ZJWDvc9K(W-M^_?(50byp?1{Lk2YJWL~Nk$heq@m zZ`5F=3D{5xB*hIW*>=PUBQ`9BF~vIse=0wDX64|Nm{&{HvD&xaKNfJ2Mb-3(#2SHM zWe0lXFV9R<|1I054;d=VPkcBF&v=|>c%Oj0(%Iso0s+V($Y{36{&9E57m=N!U>wOk zeGSEx@tQM0Quc7tii!3Jg}nq`cllkTOhF*+&q36u*lF&|=WkDXMrtQ)!Y`c;Qks5O zXkG0QJAfB?+3l|uT_YL1q7X)KFT%V8%TfVhw`XbgB9Q--$w?0uSd-h+Ai$D9@*hU_ z3=IFOcYlhYX%Zrd>FvQc?XEXM?3Va)=Sg={r)9F$YxGT3*ccf1TU>_Y>l;TK%UM-1*_9i9d4X ze-WXC{8qE>Ok}lhr@C@JR!Ofzcex2C&Sj9SiuOF*eU z>%SW?|BGBo-U`7o?MEB_pX}zZ%?Y6){Xf~wf0NzVv9;)L)by0z4Eg&l^RIgcFUXmS_rUu#ZR{~2iAm+J8UMrb7j zcx9>-2yXZ;R%l2d(X;1)w&diR^cG8|+7-42aoA$im##M-EqnBWQAWmAl&^4hFEt=A$w1;J0tbPUmOAFqxcKC>>>LtHoRG8h%VaZr z|2J;)w~8ZRa4~PdHs@2eI1%pv23B`F)*%t~!&MlWhBpU5`6CXM`1Pd#1UuRT1dBkf z=Ck`QGK>YoWo>V0u^&Tb*qhI?75q(+FONYT(hKZ9$8DH}^myz~tpqw4Tlg4xgFGW0 zVdQMwwfN6F_Yc1VGSrqTypwlFb&MC_XjCkkYu;IzZoc)tD*#78JQU&dUFE6PI}d%{ zPUALsvx>m2y6?NcP`LaDEQ9&No2&hHHO}C5vORGEk(KtP<@H^RJqHla>W&=`Np)p5 zqIV)_?S(v=kLrDaOtqxC%XoXzh6!}PLtgjpM4W_H1T4Em^g8|z0S+z^jWrMu#bdt# zAH;*c$lmr4!g9Kdn6ID9w?K4%w@!Nj&#Z3wJHORlOr9Hpl-{ykFDZRq?WUX>-vaU| zH}4iKJUgr1W`34tNs&vxGj7_LlRt)0bkAd9+h@MqvMY#E@@OLjk4XqQZs5qcYTj+M zeVxsklRfgB%u;3R5)N`sR@^-o>wEe)kh?|ehTKsjVEpR=8W7P7zY)K=ti7KR%|__5 zetuohtx3#fwp$_EAlM=UHXsKY8J~*JTWr1V*?HMB%B_<dc0nXfH8x^lG!W>#;RPrO?}WY z6qN`ETlDUxBcgKr{L-Lw$DsuLZT{{_JN-E;wpsrmi`xVyQ09H&y9*;VfxVwOCx;Hs z%aF8qbGr@6GW+5^1+}oBH+1QRU*6BnAZWV8TFnyJDhf$V`+HY(L(}?u3Yu0V;57AK z#|{TAM}pkZf(~G=&p(8gZmuK-RU1l-ostD1w>NKY%31YClRPNnM}`GEv=B@2^9n$P zg>!K4YKpBFUigTUS3YoYK>Ciji(}xHWPJ>|j6*N^!XCN7=W^!K9$5vxJo2-|5$F(| z!|TH+ixjpL1XEdAAeR6%%{h>ZJ-2Ck0Yw+uLn+`}2%B|)Wj9C>!l^x$OeA5|rUTjP zF|6RmPt5VtpJ81sNyITo4FHAbqT5OK<-KoU$M93K8F+ZxUwLr^Y*pjwu1gB-fU2%F z6Yl%V3F-sho}|ZN_Oy4J;hZ*ow6H^jJb*iy25%dIazn49Y=r$k<bD}hUmA}YljS9_E-hzD8w(N!_xAVXH<1S2nSV1g*3eN)_z}Xvg zJOv~BfFKeVGgpF3=@jBCIkz{T^P*5m&tj$x!BhVzYy9p~8l@G5-%-8F3Ygo>K}%9{ zN~Uubc;U3$K~Q^bj0uw4?JCSFr{JzcRYrx26}uk<=loI-M4|@uK!a!f>n0$S5+EC1 z#4l39^~TyWPI*e7y>Pk`Mh2?hz&tJtq&`{()yiUo&dP+xDp*1d!dPl7Q9MFcF){q~ zuS3SL*P4q-(#e&|Et>8nMe@QV{^XpM@giq7sEy6X z;#Ji30RZVXG6IC;W-5b{ z1;2$r*z531BG|ve<7ixX#-td1AP{8&8}JKLI5L*ysHC>O;5&ls1ijen57M&o3JK8L zBzXRmhzj14%4f3n3J9-y||eOgQ)oM&3qc{ zJ~>7Ke9o-dNt=BjQesKJp4F(TM}(q`(5Jdret8VGZAYWPN8X;DuO?KY9?c z3Kp>a-sY<=w;->(2EuG7<`o5eVQ&m=eqzo<6B>-OM_&C6N*I^HTY^x@i~DdFlS*R6 zU!!#kIaVcTJ4>43cE1sCF(t?8Y)0>q=Q}Hl+xeA76=GR zr_fE9U==|ve382W51WjiO@8u|Ow&oH+oyI;{i+u5k?Us;kLEyA%36(0Z>~Z(r%V$dTANp|k@DV_oOkQsa5D+lo!Es+!G)$&J@1kbC6Uw45GTiW!**XohshgwJwCUh zH!UV8MrC)uhSgsNHTYT^8*pdbpzXZa_0*|^%P7E++Fd0OF9BpM?~$(1_#1YPqB%}C z$0ZnD8Y<{kwI_s~?s$Ap#BPEib>~yRqgBs)+LbD(2nI)Rc(Z6n9|(MZ9W90LO_k!R z`y~KmV6Ly^eIxeprxodKT?;ODm`2@wnpKUPE6Z|QRQ&Yjdpvz6$|!TO71m*qjrP~L zX(6@io=E2GxNrch+-&=7`8W5OuCmX95#42;^Y1a55lCUSFOQeAg8XII^gDBfJsI%c2!1~McyRDaGRdxxtjOhS z2u0XUDNe2+BL_Tdm%Vp!JGcgf=BrA0F;b5Arn#;Q|2Tl6+jalqT!OV`+CbT$_qi+L z+uAJi)^RGk&t>LF%&#*Bc5evW)~2=k{TuwW8Euloc%gYHUcTTyrIgWLnBNr$*oJ9P zx}DLyBk@d9!*E48lwosNKoWR+9k`N;LFYOzv*~tNdY06i1gwA z0{UEF=gx{A?5tS5l5s(wjIEw)TxgBHByOCnPbO`0f+z-a2{UrY7-xFigeYhn22-tD zSR)y(4SH0i9miT7vTe)e$QT*-^0tXSNY`b=H<3I1M(TD~Ev^<I4>;(jop6O&&f;8mgwYzyV|A9P zx?hej$7&<*QHgbu@+^H~nk5SQj|lvXWlo8FjO0e|@DT(e=#F;TX^f8bsXgvq z77s{*Z5By<`GAOG2%@IPf6bpqjUW~!_&n&@>dq_vgo}635y?a|BS1KEc%K56#$_ND z9&=#4`B6a}^XR6aLf=Q~&|o77soLd|!=!J@>`R3_d2ROvJnmTno(@sx69%b0e%-uk=tl6JgwBi}0M5?sCSnp{}xa(I^i4b@*g{JGxT6PL1`cz5- zUlm?7>CVPJ@=8pPQeVi|nK)k_EThOL2Ro9AjK@DZ*%K}WFg8Jr*;nJt<(aC|vi_mL z>3b=JSP{OEX;zZlN2p9sZl>QPT|NXPDtpc$Cm3h#u@8a5ili2sz$Xco$bpUlqI{x_ zJV~!;_A$dOi7MQ8YKmpibjtJ{TS)5ZamwaJ)93MA+oGO1Z1ej^*N>>lul@TME2JQWiRPYbM^3eI z`=gCM-J@Z+t>uc3?FBVI$I`VqEXp~<0@^vP4_<=P{rJfNMpj3X}(1b^-8#FM)v1Xj0swAjK_A6FW#}0YXWg& z&^e%xdC$NbtKGW%V)_f;rgCrb*VPsHRFME*4Kq+@dJFG^U0<_QJArQq@$WK&mb^yX zj2N`!_+w>X{D*9qvuJgIO(_?}EcP-J;ghp_q)Ye_3c1Q5B!qS;&E_xqHUOx0W!3wMhmj)g$e4E+MOMT`g;f2POG zd9fHebW{T=ik6RRml@UOJ46(7zUehuAhh%ArIQd!lue67r+$IQQx84kf#lquA)7fUruiP2$s+pWR>8nS-N(PvonjgN47V?c=-6ImjKDp8b&mugoqx7Gfm_om$QRqm$$%fsj`1#n21GIzVe1su-;TCkNhi+ z#Hf{f90~_{%Y(8{LIy!~J0Kh8qU)igg5yPVgd5J%ggqUr(*b6BG4gMb-C; z9va4zU2w{Xvq|Zu4R|!I>*=L1m33?4Ly4r6k`4Yz7Y&L$DGa;EbWJR-f@e#zT3w&6 z7*dNZ*Nu3X&8VynWxX#LUKF~4Wxh{;6uCx9MbTk1SMW(HSEuFOeC`CAmShIEU$q#I z>O!3Csc1RP+!^V@zQ~nG*S9p9LGK*&`ir=2cx)JbhV)wujjf7M=h~@avLZsP>-q*O^^BSWl<{a_0_ip$eMMGUoFcnUND}mx|`N;Xa z#h85}mrI9dW$CWd#qCEbPxEcO_nqS+ORLN$FzG3kBzyZp*WMq`g<~Ru{c#&PmC~M# zq2C>5j-V*^bFWuJFWytg$cq>08+2#ET894kjUihAirSVmFyT0cg8GOel+Rm_kOoGB)A)?@@14^Du8{V#Yn4BYYnFg%EqIs!M(CnBa>2{%dxj z!|pgffMzJZJF&84-|Gu=Nwaj2LY7EmVef!tT84g3nU7>cWQ@6?=f$?kSf6i@E-26w zr`5x1sx+Ge|J<=6W%J7#sEu>80<0)T1RBO3-C@vXezUtS=-l5ApH|q8?l;psAmz*cAL`8X8EjLNq zX8JIBA1#ZiBtLaim6@%)mBG8mX86hs>PBGjW8xzYPEu4K8Nm!?45CdtMLvLz!5ofD zKCJFqky7%rXnxhg4Be}RxA{x-T@ox?B9Ww((OX}9 z=d&r}cDt)=-(NPkv>2Ma>Mwdsj?z4jQ4%7Mal}TWH1sr1;^?p>2O>J2D#Wo{lQ&?Q zhc20RU3uM|q~!Dnoxq~4();u*XA~(u+x^GCP&#Nb+AA&hTD)({v@ml9#2-yhdV zezLq5OqCCZ8?~Wu3pcNcW(z%v!wp;iEi>o@dPZ-B2CG;(xPJ@n)H_kjJ8CJHn_o3j zWVL_#G|8J;?#}90rY&r_i|YVa4L;db7kZfMJj9~VkP^=GS>fY)`~k*s5Kq^(WoJ*7 zmi3xcDL>>BXW5BYXP%KnQ8$Hb-nf7Ml6lBbOwhMer;cM&uA*Dlct36SZeoWbyv!R* z880JqWsjsaK5#@snna@L z^4%WpLd@~KJbP^4Hi@~HMOQ@}G|dP<2C=-?!|l?dyFLx^d@RZ$&#sl}IN~)aP`7wU zzjJ3mZ1{dAd~#ZR5f^*%{!5m;w*K&K<_d)Xg?65^=x|ygzBqy|iia$0B8oS#l4#D) zgoe_DdPaBPC~y!&@psOsvV6TigF;nnF_>OAAj@a#3XWmZY{4P!@oO5L{P6TyNn=TA zCmijPHuw-vfA0qk=VAMXl^#3g;WLRhyobd< zcQ0X^2()e`_is4GvKk%JhZsM{H*(87MLn8KQ}8`4wx51)-s1VN%<0peGwJW@INbt# zx3A@3vO7-M43pZ%FyQl$m&F>j?B-!jKUq!lGu#!lu=?!c`)Ja z7E(?L-)X7%GJEE?Z(!4=eGG3??q&KA0^HUj)f)gor36;>xHOumeX{vfc#7KUortc& z7Jt*E?bqns-U4&IQ?Vt|_kQn&-_(0pps_OeaU=(~a&gH|&svyKT_9tIi)2!?Ql~xM zKbSAeK6<07?>yVyQI_(lSOS_$Qu;5_&CRs!0PE+;)DJ(pJheA0NAo`UFrW3u_;8Ir`Ci9l-+Fu4oG1TT$43_Z%=^R$Y_jMZXktcj@9&Mx40RA4 zZmgUiY2BBK7?(ZJ8@a}L&wrS(zMWEMvcDVUfeyjErwA_C68rx+d+(?wyRCaP6d@o8 zNH0<>AWb>~(h*UlN&-krAR=8sdhe)o3q`sh5JE>lii9ShAVne_X`x65>HY4!@9(?k zyx%#$G48nkFfx?nAEv)Tv`86G$q2_o7xHARrL;^hL7i#CQ8mD`38b>nG&w?XJ|umTc2Sc zy~WvY<3`Lws@6Z)=1QNbi>?kQdjHz*ZrZ8~A~rMWPp^&njsu%5kE3xVm;3iRv&SGh zr(voX4jR%v+4es%y|SC+N?J$Xq+I)pogh)Dn0Pog7k-%RA?{*Sn%+0#$~hYl;!*RK+X~y_E zhU2YHY10%G_w$1=H8tpDKeSZNvP%U~yhu_o0squSDNglBEDJs;^91D@!-oAIE`U0= zqVLWxr}-p@i%r0kUnciLsEbz4?VLKsgmhb2?%@|cMg5vvi;yQjl%)pLl0)K`g$8_5 zE+l^ZA*rR}&O_$498v0}5Q;4Cr|PhPC&%vHgG&T->lzDA_CpM@54vkk26o;5j%BC4 z+NB+{UVIj3Goxw@$ISyfMC71Y6okoA0OKWU+Y2#zxX*oIYCfO+YMRQhfYLq(Iq4ST zwSuOWAU~gUtwPsm%CZOM!Tf{hM=bfDo5iV%jI{YXcLa2XMus4UV~UG2`?1pzeghpW z0v}o~^pv+bh$&s*zO9JKU7#2mmPyvhjq*!q_Jc&(Sd#VH<+K=?Bh)k+N->QR=E4ce zwxmR?*Po8|gN^b$@k{j>ySEft&-`;QBGMCe*gG8XADw@=y0A5|?bY&=8G*J%g(Cp3 zgvZq}&YRxP6KPD`+@EUYn{x4e*YBua6bC!tzWlwZ1(0W*hucQ7`A6SMP-@&tUoS#m zA9g!S5t`%;Qhy<&6PG&4yO(Y(9EnOpH59qCHg)ReXeCHzTr2q5wj<_b2Pt%v(@oS3 zJl1og)*2d-3{w9ZVJB5^8wMK@F!wZhFYcfB_#Gj#sc7Rivjqa(V|4|ZH?_Jei&^H_ z4XU?3>urY?-6)we&nVsWX^sn(QCvFxoflO^RhKW$&d>zkxPQO@h6-IQN2lnuv^==b{P_; z2I^D1u_BNWThOwr-N!rjeMpavlSiBR&47mWYJZicQ?1i#l&Yt zRGmFkQ8GjbW{6_zz%Y@}XjgZO?BS1e5lLiahYuEWz~hN>Eq-Y|P@x6V)u1UMT%oA8 z-H6mHegO?Qd#XAl%2&w}nP>3fQ19XW{B5m5{N_4UY%We&EaArw4X#UuZB=o!G99ik>Z>S+-%u#des(v^AMjLS~cQ5*g%$_pHftIVj7bP<GaRHd_2Ecp$h=Yd z-pTRZ>1%u(p@e$`a71B*Y|HwoNdU)Ecsgxgs^#9gfdG~BXfJjb1=~M z_7 zHjRm;6;Qc6isq6cd{XA8)NLsuKE=i_gZVb4l4TLHyLjmg{Ju^Y{_VO(4QKo5+(9_y z>;a{tQ|X*}CJ1q{r49-2oEsSpP%DWl9wn_vgGr{HbG>2m?6LGsR)@{|9R0ILH7;=! zi2Q#>d0zv_N7l6SYwwU4<9=o|RnJ>NqBP~g1gx%1H8VW)d!MP30RQstf*b?2=w_Ql z!pHsBW#2@`@zpH0(@Bw3Nb&2PNM4dB$4`F^KEC7+MT(`jfX?CCMwbzmc9wbHI^oMw zid(taF&* z70hd#S>OPYyRG}4;mrs#wLb|yUMk1zmU4Ogm-2HvE|e}XFCDi^v;MSH#xB*-3zA8V zc<5gvv*04a!_PcoGVn3t3i6;=B`7%H=`t$-M&NiTwyX?Klu8 zYGm7xD>Z5=4Ig74qa|fJSob+1cJvI>xaHTpMG{lsge#C;F1ZPI2DV6|nd4;?q!4|X zFOwb0FHUWgZYY@xr$WXYjlbQsgG-gEM=@D*fhJk&lX;M1?Fwd+LrvsYENSY=DTY{8 zU&ynI36E5Q8(_$0%g%V`a+>ztbl2w_D}+ckgb!Sg#mfk9qdPy&5eZ=x1n4<$=zz=vl58q|>5_3GYF1CX>;A3ubE*~&TsJ^gUZvDu7^hSrq zLek$W6_w%u8M4Wf{lEy1bnq2kKlF zJr0v}u1ka7>o;=#8Nj0EV4KG6tob;QmDMq&|2YH!EU2WeL;pZPR`17qox+rC%b&}L z9gIM@F)fDCqqP(j6pRn$2G?wx$qQ2fIg%u6OQ@h9;U1KAT^x+Wi>5KX5GLF3Tl^yL1@ zgNwl4$~isB9jo;V!qj|^ER!O3PEdARDoA}l){c|)ZIpp+j9dqvTY@N5=3Gb3Zx`Cv z_HLvKM}6%S$nr_2o~r8g)G6|5@)jd4k-Km{0eHWLCn$|02lDq^$fzhL;8pKQ%leTv za`7yohEy+}fcEKoO7`hgmZ=xGmvk9CLX3hTxuHSFM=}QMJ$n$tH)T%g_{KsIYIU!j zG61>H(gzme8Fqp?Gf=pqV`D6toI!(h!RnX4RlcxCL@cf~X6z9F(%oW|Q8kr;U;E*WKzOY5aw5W@l3irr+=xw5*Nn}0HDN(iIbFW@fF ze?S16xwRh&+WBrzT#K}>1W6Thdo+?5&o$hxdZ2nm-a(J&_0|+{s-rP5&sX~J0=MyC zGjUmO6x@ZF6rFOgS!ykrUwPtMp`g^NPjm@C3cJAPvh2QoxO zm@O#_krcx}YcnGbY(zrGs4A?!fm^j~wSVzHO0TS@SyC#bc8>>}gLIG-^&G{MR>+`& z3($0arJX>JwO{&vFVOwglWVCigJN9}rfVDTW`gZB2&SOVMO?Zt)<1XFpULK>KWa)b z+*w|~@k#cl`%VF|;VYhmB`Au{<7KEfkO^x+9cS4?Z@^ygrz*zIy^9P-SQ~}k$UOLN z6QQY5$x9@Z827#|uQ7Y=&wc@WlV)h-!4e#=rIK9wyTv!sfR>56Xu!YM?wn8v#PNCa zC1Uch9Vn09&RnNpsgRlViYxK?#kf}FATny(@AeY z(|^d;v}9FRFSD;P$E!+71*2D9@WM|5x=Z`UI!s{34@sMvrR{iYwbFoKO%`!>>q-3e zOSJBkE!7%cOaj>tu1P7KvwTBo4D3i-CGvoz<3vp7{=3O~H_cUjA|Yb4=a)Q;jn(C@ zn@a9jj_V{1^+{JOx}(N1!sf81$b>5tVO#jn>?yY14%m-u?aM(4WV9I7uW$oeojQc~ zW8Zd(3_5|MO%(NLCD~ajShE@ZMcpnLfljHAL7{x^*^fLbTp0~si8s!Zbrh6ooGVKP z?=bMraieV6Pct4Q2RZfP!fHuAl?_+^!3v}He(-rq@loJm_Nr~eC#l0puGj_3W(+F# zp@rodq9Sl4PVAI;S_9v;k=x+o590lE;c%JNiZk=1e@2J$Ct~o|?4<3Ef*>*dj9+DK zI#kl@oRm;j&9Q2dT}U%Pcf%lB=Wes#lutOVOZ&?%_UZUXu$dSV2?-=_I9RVh%k|1b z&sGiYJ3W5*60OT?ebf&Y;P_KjcdC9-FB9pkFInP^HNDU2`}a6Q-@Tzk>N7sciIMI^ z$A3v02a@}}pERL$L`80zmB(2ZdAekV5mGfrfYt!~n@Y2r%iS=XEl}7kdqTEO^p>!f zTQZt0Q2Y{$;TvE?Uw;4#7rEq!Vinkp89QWYip0ssVn_}56ozDnmP!g8YmHCB3&JQ) z-&Ps3hBmI(;6X+f*FMx?k0h0(u$OjPRK7V)S|XLhMnt7bMtbBWVx7QEk)nSog1;7e z^#h|adP!q|z$q3Xb*f2h!x%mF9UE(r45xbhpdiHchEgsoE>NE}7G&231HLZ}cq*u- z?+CnRlxi7rNg1}&Qn`yn5v=42G!X;7i`lw&c8<`Eo^)Udz!$4T8dobHjH4lja;uzh z_QhUm>0$1$7f>x)mab1AdCM8coc07<^!fk~7sCwxkOnbz?9FRgSC^e=cn$BWa;$YR z$;lM3Skl0hLRJHq1+aUwq}<4EuWgmR-DLz8Y@_1lOI@m=8zv8fu-z{D+oJ>q8U7*q zI*UbhF$+s0Fu851^j44AxVa|p$)H_4xO0T`Uv%k}U{n%k8JJ;6f%n$g$vlM(pj}E@ z$D@*ow}2+{EA$;h6+kbfj=mut!+r^#0(p`&_M=@7b3j6|2uZJsu>m9&P*PCsY zX&3h3jzZGJg5n;<(buzQi0A<_jU5$Sqb`0#aE<At_ZQE%+QUaDd}u5|mUm5XAxD_KoVzAmBU)~V&C_b_9BF1j(8hD6W1g^A zk+H=99N-JPAwNXc5J7ai0h_N6KV^?Xa*$=pIsqZWRWzSrsI%kg}?wO~n1K>ig1F$VH9 zXaObtrXPX&|Gb;|97i1#*=EB@1@&`{onGW^PO_4V2KbL zYp1kj(GxAkMvQuQu)yBTkReMUw!luL6cQkRh1QDSgcr-( zptJ(0jPFNh(M*L5E{Hkrnr@p(jFa}^h~O`2rHZLxdz1IoYo6?4l^xOtTJ1I;hwEw* zI~+`z|7YLs&vGA;c*GV@sM2jSgC+r2H3jr419C2So|XJF3G7n?Nua{YTeA8`kU}Cu zE@r8qoxp~Rg(Vy6{J}4P6VAuVE-3Xz8xvxRjx4fKocYOAkFv(-=)DYI zBJz880+y^#TQz{AMq+hu1-VZiP24;V@drM%Gzr&P%rINI?gO>24R220cf~?=)wmCa z6qoelC_{h1{4BG|&`z~;iL3*+S-9uVdkuO6GR^kp+toJ3oohkr8^MZE12KPO!bn(z zxSRBtD(|%_`!#=O?k*SG=x}M4y_X7uL_tUsn4xCQ!j|@*EB3zlP5@)XmMQNfC-7g* z4tdQpNn@22_9|(&!YphLRD4g_hX|u*<+X&rNCgum`n8FauzQLA?v|AFVu14+1G0vA zOA#;@ZP#Rg6A3Z#KB@;iyRad;2k$jiv2+orPR5cgAQZ)17FTZeeOy*!TbHItRtC)G z&qTHPLf6ws;Cr{s>STsSIZGFRN~#;sKFct$4xzkMK1aS0xf?vB=N;i1cjSU|CL7}J zA;&zM&7TwU?d2E?Q)PL9(zGCZv!(Kar5brDO#b^{C5CPf%+^)#kNP7?3H&3 z_tks9U!Ljg2*z3-{~6;BYK9d{hD12#Umw21NK`FfAQ_0M$zX=3JfeKo^UbfU5#X&;5XShLJLOMQUmdJ&y$kU* zr;2-qh+6RUJ2NLO^O~@}CE3y)mWFGWkQj>z{s!-w6T7yTYqJ3d^5&5mc*=q8w- zjdIefm&OINs&bK(X`F5S=-DrnpbfTdPo;7iyC%fs&vL)ry2~(_`1xTg(_gK~3<@q+pO(hfT zU!C8hEb)dd3#A&q=I4=}ui1Tj2|)l6GD`7eWgB)!D{Wi6yamxu}ieU)NDkQ*rvxz0$2w8dCLIV9&xJnzQ};-32^Z2`j3Jl z^X@Odt?t$}QDyCf7|b18VI{BB8@gw-A2dyWDEl4mwM8*MM{MBGm!AQt)^l!Z6+vP- zDh`Qon4{nOZ>5S(bHw0AQOddJjbDZ&7#b~Faf@XLQaS21ga&K3M2Go8`9vF_3zuRx zXbl=?*-1)ZAgif{>Vk;C@R{yg9rS9^UXqJ z>oQ4DQut~|O@|X((+r1YeApH>c@NKF+VUg$xZ$DfEJ}m7dg>ufOeCK989w&AKxQBT z)0jTgKqfT)fM!2CW{@I7)CNp7*J_4?NxIu2oZBKNt&@>tL?Gq$LU0{?)o8(ra<}iu zpX4eW-OidL6qUoAPK*7yJZN=jxH2XD1T-K&_KBF`3akua(^+vuMcYGLY0TqifMPhf zp~!l*i-y+Ir6k7Jv3*F4`!<@!A;fz{V$UI#sE3A(gth5|66@RSx%@Kz(dU(yuNk}w z0P+oEy2!`QU{=9Xj@o6ruP=NVI@~#^P~5fG`%-o6+<=K|352nL8~xK_9G>p=8w;kIMUfI8d#7hx7Us zrr(!?)Rpww-Uz_Ad8V(In3Gb~=1uGFb1UdZ=HWOQn`TC};9RO?mDx7sB_;2j%w>(B zqwUVTy$c)*@=u?|x;jl~w7SR6ZD^W~L70{!8ISk(1WRfzlM2@?IAdL7H`IuTu8BrOcwIX2`16hLc|1izNOHBT z1;Sp^PEu`Tm<6`SR==MOwCDv`oc4ZuNMx=LdB3 zxaNLnqBCNa^J_z-LpLy8;aC&iJZy7MvpJExo=8?!v$tUZWx?eO^(w^J=%3zNPw+)e zT%OcOyLp@yipq4~Soh0|?jSiaXDFFDa068wv=GHAPf%i)na8@9+%xl(F$B)iMU0t7 z_}!z8l>`$}bDy;SSL>QyWQ91H$=baQKR}E&iU{0SVLA&WfOSNYYxm0&v{OfRO?nRN z+M zpekQEMM1p1Cnr?dl35u`?(He)6ntU!**w2pw;n^}hSkbrJb579$VujnI>**>4(6RL zX4@oEjcUT!A05vmMiLz$;ylV@D^_)G1u^D(V8&=*q|;Jx;a!QYjqoEh;!Qp-7gn6) zUhXvbw2NHNPu&|ro)b(vxvFkr4O2Cw>n5IFO#LQB&R-t zM6F(YhK!dcW9*!u4{aBNm<$E}d`9R~Jd|hQ&L&ocCvcOo7hG*_dZv$3NL!|2f=LO$ z=qxVl84W^xXal}|0=09ZZXAj%6ixZM)Jr8O+?Rx88%|BLc1x`Q*b2O#VJACi_wGDM zsV?cM((jl?H_|`gj%FzQGMmKr`*xX#&b7NivB5)__Bt603j93#03#|Kjd2&1y20~7 zMkf7+sdV?1G3%fxZp()#NJ<%MWXiedcI)yMyaIjv1u0dGX(10CA%#Uv1lA$a*h!y2 zedgFzC=bIobg^_nGqU`K{O|67-R^F_e%Cr!e|b^gKY@hxrEqfq{u8s)~F_FUhuVt3$+u94bi1|ktK^*6OLy+1z34) z$7OJWLg92~Q?j3nTo6}fIwW6@-$&~tSKr7;H3odtsZo{RS0 zjf55Mukt%G@jWhdF1F2|lN1z?eJBvb*1WKll=%g&c9?|pUY@-O&( z5Prfl`?{K?DI1I*ed@<4Y_A^NUE$BQAeUB}l8m^?b5r%T3tNj{LaSs@Tlx1bE&a?t z<9As20^=6?UAp`OfQj3$xwvi=Q-PqIx;(mb*S0)#>`3HSck26NlSX zO=IwBiafTxbzLT@e~|O}t3rb>3&b+Q zEp1&_7|xZkKrJC}oeZwMR5`3$fRen1T|<_oB2YLZSm}%zDxP9eE@ns1CBER^Mpob= z*Wp`k=up4gXiQCy99SSR0|ong6?W3Yd%!(U+H9yc;+g-v(GgX=L>v3St>Gj|WHR=X zqG6NOnHK`KU|jL&9@>q8oH2^n*gW0A{m}2HI4pW9?ZY!3|K@|PlZ34hj4r8ivRt^z zLPdeb*4R{la$68ksL8=lFPPj(jEmwT#Yk;yIQ2&^U#LzzS2m+4`c=D%sAb_Z*Tne+ z)((cDQcT$ulKO3)m`*9P9IN~J##Xc`efn@bN6sPis98bWuyV!>FZcBn23MIn?Zozp zq~(XTqggciUb{=UOE{Sj3GHS&@RJO~3Q>L1yZ0V~&Y2>s`?29kLm`A|Z0g{x9iJ># zMp`zn78qrPZiP8GQ^`3CqsHtYRXSkL`M@}fzU>V(cSYMwV-{*-$@7S=hJ+ycfee`* zSzZ}KZwv0CcbNh4Lm>6FQt)G%!rmQDv7s)xmAv)2<>wqJqK4C;HZGAS(T%am>KAE4 z?YzF7NI+t9&jJcPC)T8FH3(d;}r32rGkf=s6C$`>rv!}_sQOnefuVi|mCG@K4>UfJUu+QU3 zGn+jDAnhJTtg(*U;J1kOu4SkcjB6nqp0Mx9eV6TAc$QIX1Yudz4;O&5P6jbXRyKpJ^xvIHX7U1_cNKyXu%?{_5>AoD?;r-zqEh-;xVB)wN*Z`4kW^agmKpF9KVNE?F0vQ_yO{MkDn`^}j)p0ph>t4%DYCB`WL3MegH zC*uS4el7GF@lKUL?u>vHk_-ed-sS)x{H})tIn>u=t3N<~(_7MbddRx=GS%>3*CM?7 zt=a@JWRCo3`kbg}WW=*#4pi83-l&q>|9UEfSIBVX5gLgZV&KAPOnib(kqlIA;n@mCdKbdCRI#YCUUbm|seS5u99_R0vY`>vG z@S?%v2Z<0I*9<)LIkrQjv z(u5nvp^|tIR{JaYKmMqHqq+TSdGytSr`mHbzfP6J*kEog00k<=o9;3Hd6|Dj3P9qi zz6q~;B$R0XpW8J57JP`MXFm9`muWzI;q%$J|39AoKkxd#QIxj|8H*;1-U4S@aCgl$Y9e^@2~#_uKwF4{_znYl|5o1y!lijNNVHMb&v7?_M89W zP!V2%2dPK~-dukMe*FLWdW{xjWlSO#Y5p6bTxR!n9S}z*9zeuNZRU4a-w0&mkLrOE zSCd^4%!{qay`Q8L_Xvely!J?qmn5PnNsZSB&Y!_(Ol}yW!Djvt19X6SuFF)U9y5}#TXBxDH??RkD+dVs-JnJd} za&yN_|J{O<(R)H)1CGJ4#I!FMhhho;c`x7>mu3z|HB?zFs8VVfAP3+^-2~;l-IHe) zPEj_`I~3MjMm!sjeys>U_3naA+#15h`LCcx5T|p9$7j1w&l1gnp`gJ?3A-I{-|Vol zQ`JBP7<9wy+ZW2ouvR>da{6!4mjj|aMtW)MBH*};-;&xbUMDK@#BQaJ0Ov(BeEOpi zJ^;_G@X&aF)$BT5)D7%h109r=4y98U;~|390f_b*3#)XR@B)R0XdFmAMVj=RNTNHmgc3r{F`oZZsbMS@~(8+f8Ux4lMzD zaw~))a1FKrGi>e{?<8Tjb60?7Zp}x+^@)Gr*3G~-1PrxmatI8i%UO{s_10dUGcV&J zPIauf=P?yb9+7^~!iI8q7&CzHG7AsiSx>Tc$CNo7{-FspY?J_|Q7R zIny6plWVO2sQnIq?(sa?uom%sxSP$~aQzsuMh~Q0i{E$Ks0HJhy?~z(SI-+TtaWdM zTycXanD=Vm)knC28-$6PtY?JI@(4RnQ;!y2yIl{u3^oAS(5`MKV}C^BH%0Pst}Dp~ zi~%hD2%JaxMhFjO1xx`n^Z+A@hb;2XC!Uv7kR~ud9-nRNp1u7AZu4{?n1u4g`@b!| zJ78aD+vTx>I1HZ*9q~i!p~yK<)Pu33P_E5${&1A?n@EvDAQg{nTRP585&5$RMvaO# zNnkGdZ8VSE1T+5Vce#14^fOr3l2$q$(gezD^)mv}8U7ThB(@IvBFCvqFHetV;wJL2&R5QjAkh8J1gEWFacPu0!|H4$iScJ8j|$Jp)?IzLpyeN@N+9N?!A z)cO?!ujd4jS--+tEQU{M%3W|LQ4f8dB>r89tMzEH zE&yd*nS@Ok)|O$UsdH{GaBJkBh62Hkja$sg<4LXdWem+Eq!AyD8kXSGhZ2}g$1QOC zZ{`TF#n>0$Pr5-3_pW_H_Y*Ji{Y}R92feoBB@=iiyM|M5Pv zlBz?ar~i4fAr%45md#`RujHot8-&SVY;(>LOZO!^+weHs|L0qiBK-R4+Ij^7*gWuD z-3ej-%$?)Ig!q$G^;}`aa)fYapNlMkhCbJ0Lff_i3>5w(D6CUv36d|G<|04$7dHm= zs{?Ttkkj2k?f3Z7Vf%$Hm@qLtRa9SCrzOsos!s1(7(XX#^p%Y}5L0OHfT- zM&BLY0PLLJ2@ona4y6qq$#t$k8c$*1F5Z2xD}y=jrT3RBoUaIt z+!5e&a2=BH?d%J_V z3_y^1eD+7=?4rQL$;srI|Na)R@R%(_#QDu$X_ZWZ^&Nq{f~({jsdCh4DA(~+bP)Ht zHIU3x4s0h^zY$#kgO%r2zzKa17#G(_hQ6ZGoF79+2D=%T4R--&z08?4RyelYEA6j#K5pp=m>e*j+<3HB{}GrBU8@I^bX!jfR?>J@ zI**WtLw_Cm=AOS8^R}CV@ech13jJAnRO9_3X%evf*~92%U~wOx4wS;Vd!aWD6OQEf z7J+w+q?Yb??+B3qEd_NchEYL_%}8hAd#0nG76TW&yjs~O^cLbx%D*E(;_w_x5a_oa zEy%P4xu!2)!F`_3Z?K~L)`kw0liccPv(!{TFbJ% z44{c^`CFspJurvUK+6!Uj&8yv(`Vh^+MF*r*%mwr6Il>kU^;3#dEwBDcJ`s7Y;zzV zf@X+Nq?Yv%%nDc;5hB0=VFes5Rs~{1SQ~jf>&Q%7R4Z(BoZb8ExD3Dzk-zU%c?Bw* z?&Djl;*X99@U`mRIDPFdXi&0FkA9UZ!W08rf$4YY4$hxFTy!7%pi0cG4O;1n7JSS< z(OsBMnQ*_qUTm!-eYfz~S!60h@8_ue)`w*WUq|^>JKghpZ!{E^^rz)fhwzfI?Zq0f z6vrtLE*8#{Q?=M9QA!ZjozS$p<(!Mm3!?^^hd-U8U9n)(4(uePV9se79;0^QLsK;Y zig90Dpn)n;Ud+VK$fT&YFKj*FTLMt zfH!nqvbtpb+?tETm@wV?9I=WJ^od?@7#bwCeq${cndgad<2HdlH)XB!%QFyfu2?@11|q> zOZY5w`_BR1Bf)a7)ps=T>_qJa22D3u2h!B_O}+{8JtpGdV_*F%+|K}T71lTN!9-43 zt1r$qBj`#fP{lbvhv;J6f0VL2RqA_{sy9>Rwa&>-6T-MPkB_x!Mm89t1{cJ9mnnb@ z*7*0U1IR4k7w{KqIm!O*71<6Gos+v&;PI8``6CVlJZ9<#I5pYxEN(c61*s?W0QaGr z;|oyEId&qNo@GD$b27)A6}jd=#?A^n8#iAvt(S&rK;P@7qkkW|0`sTGT!($nH9alA zy}mYGTVI5z{Y0O2!zUok0Z?>%<+(p8NdH#r`3SJc>at$!F3`gtt>ZcOYG{3;amU&- zEcoOp??{IOH2!+y2}{$A1g8PjyxLFg-J~GyJwa7B>loLaHjw}qFe}YVtjc2KqtH>i zRIsSu!{yc!_tza{L_NkahhX4G4;IXXl3u)=1ph}Z`B#NFpYT`d`-xEcPJTX*6yxqe zG9hRUV&(}6q9u)ZUt8%4>zBu(sZ44Q{U}afCw=~~F|=Dwd7(?f>pOFsc7EmW{|P6* zm#0A2B1Xy$mD8#qzJL5D1Mzkp$O(Dk0de?1y{HS&eGtcLH7|l62>9r|i`clx2(cxd z>lE~B^b!P~{g?Y0fNBjt8F>}}&)=dV z5ZPUakoAD>>g$JSN{~XJB0uJy}h^E87Wb6jCi0ZNo!o0Nihg2#S zYxFRY><1Jl8P)fI{!Uc&YtWJl40ka23Ck$(QEdNsxIYD{w)EyL)1Njs&^~v7|ZH@4?UNk<$3>%f5246sJ5q{ z3wCYRZ1&*!vdD=v$o3KfYxwkK6E-LSBrSE+QQN-Rrg*XCa{TQ;<|+_&W^?0@(~II9 zlot3^r~??9B($(8g6|mwuD30wQwTW6x)e_h&t!ZpS8sGNpH2C}>-WIJu^qw`Y_`_n z7=-^rKrtvJ)tH>HtHSIlRgK z=sT{hym{*@s7g4K7fsjRo0ZDOd3)qsW;$th9sU4_;9Ok$P2`|`t$u0Y{x2rM`xWw; z)CDziJ>E^SZPm3sedz1=Y+rZ2^b#?tybddyJr=>les`tBO&Aa*tQzn~Eh}bn6-0ma zz8Lz@uVnVAdhu%2=cwh4t8vt8Bby`d;t{9s3ZFFAr~M~s16y52iJ;;2UJt zQ5X*GY+@#oQ&Iu+*XG9jm|*F=k0^nb;r*w;>BkWoMjQLye*ETMe&kG9c6e?4GSEAd+ z?p{&8t6aDYcJ-p9KIpAd16Yd1rh`2;c9F4VN76 z5DyDFaP07ZzK~QGW22DAkxO^Xs|^3?H8J&0Hn3PXbi%J^_B2B}!?IRstLSTkKgb6K zsUo`%Pvv63RXRx9_RX4in*Nu>>@Sp5PY4O}dyR;{H+U$L?z3fIhzdEGy%oxbCm<&C z>0;^6gJ(C>V;2G51VnYf-zr4Z+C(3<@oMos)Zjx*@MD2|GXQv5W?>zjV~5;8FVKJ4 z01`#yK{kPAQ+*M%s0AI>!swev1wyf+cj?KAKEzWQ4T!g{WVHj_IRK) z>?cbRxKq{#>_q&k)nR6l0yd)PUWHJHa~%$fS0y_GE)oeOIe#xQI@Y_f?NV7 zp|%&}rw>~{@($#5vJEL@oTspD^R-J_mzqG-8tRJ`T>q&W|2F6w0as!SE~}xjoB9px zIH1iL*>{@WX7LYP@E#Pwc(5XF&H}lmO~#Gbn7>+xS~&^7@HoA35G#u`4p810Oi-dy z0GjIF^_xmkyn8Ak#$lWXHiZPj(>=R6g zGtBJ$WmdQd)S>Op^{9AK#`i2?*RKDp1kY8yikd8JS(0r0U1SXAYL0-Z0!Yhgns2Z% zz5`aCiE^p7m0CVMv2qhzf@|3boG-UZ^f4^UC3Tz+4ZEER0}XbE4GtAZp>|dU(750f z`InCK2uG^X?v-?GEv5pNLsFd+zGYDVVBqBx>wx|i&aqv)JxdR__zoB8nG^C2CgL;r zF@sT{sEvP4&Zo;#YV%aHO)NxQJ*G2X>*ZHi1F2>I9Y`v-bn#MMQbaNZIo$(c2ek{x zD*yS#nc=&wTk5#Q>7J8$;O<9-^Vg9JYEy{vWsb3F$84C7h&3-jG8oZTZ3+^TGSc4j z0*9~e9;V4H4GWGcPOGWDsH_lhJ{G3N{NcD8FEjc0uNa^!W&Z3b5II1d?dfgqYW|;K zbrUV&n0uepx%cBQJkA1SAFmS^uc5E%Nn5jpKJqK*-nP+7dIsR!iJa$|yOsIHEH6qW zsxBaAOF^G%I_coJRT8dsjows_(PHHN&o;T4x}%FtEw2imZe+mb!hgP5bSH2wTNdpi zn3_f%KX$id8K&Q<5(&5liZBvmDh{!}!OFH^wia^OFMj*Qw-3}4sAU4se$7EjG0o+m zy%3@4I%Mu?UL0HlaMA;)nsecc;!e4T zZ-?s=XJ}nYEG=t&MjCD<_5L{E3kVE7jy(g+h?E`dk$>}fi@w=wRf#csLzt|GX^{jU zx(f>?qZR-YC>a(xZE!S^$%wLon_##CK<`@QS0fL3*{I@{n~S4!_spm|x1!-AftLBx zZ~kumpq=m;e`y4K0%w3wt6P{8o5Al**%$|w%n{JI`8@M^j!hf>DDR36`@q}G&1jpj zReDmPBTJo;0J_7-UQU=-PQR)Cm7nc9@7m)$XDVA3D?VZyb@0PkG=K?zabmY7xL&&B zMd^R3AtEk=Bj&mS{4+3si1-!g3bdEk(q%4@{%TE{Ce-{aLHNKzHXNI11JNoNJ>9DV z#6iA7J(cRP9xK`~Br!Z8rEpy#rrnjf?~esByRuab|pIo5SlNPW9l z<$L-drmT5hNDY}uP$8ApT;l3G1XzL=(rmJp2tLn?Q%6^cjR~&C4!Zf@+^2wz+zpPj z(xtbUC50F{*Do!Ay83veR4b54&D&l04^c2dK5~WoK3*B{%2%IEIlx zMdyzyZBw;EwS#idZCQQl%;s+imU~s6vgw$jwI~enNB1H9O0%&ehoZi=I!^%e_uK4m z`zQ!7D9%EdE;wa)*U3oNh|Kr{@?~+dTrGN?f_{_a?LG3c8CdhC&!~0Z>*cQ&zN?JH z7M0m{;uNQJkPrR5nd>Rlk__K%atHvb8zX61P05B?@0LII|70ZgAC6xDy{!rd8SbztKMmbM>4~(Xj}lW^?n4KW6h@{ok{AK1VSypAC)m5 zV;_>2aqgfstO*w1$%9ddR}vd{^-!;4Hoo{Q7c=Lr$j!YqFdStV;Ge0y2~&tlpbr4e zN|=th^f&(!6L6gbcj)bllHQ#L85c23@_$~%eb&f&$xVU#$w2+H@)CEf?;D*!^_^FB zxR?6f(Rz>=RNT@ffBTP=$Z+y#u_Gxmxqw4l=3~&g>M%}&VP6=S?D7YxtKZ6VEF1%h zDMkrQUPEzxk91cq$rnO%&10z`f6&4lB(i`!35eogCwuk=C?A~i*e8IsU<vQ_|Cd!LM#f>cV8b)W0vH`QW z>}Ea~!P#W*`gCPxIQh=kyl?M27!tJL_wWQPw&lN;$04dGq&EQIApA~Y?EN(&ExJ2% zGCdNb>=PRidUS=$?XKN`H%*U8x%fr+yb|a%aCI@=Fq3%&VR|11=37X7uHqeFsjo)* zJCPUzVWt;>jRE?bK8s`T;E?44U4Q#_*K4bUzG?f<*9Yx!3~22AE0FIBKxyntcy2F( zbFe_{#vO@dExxzk5bI#ZoBmoFaY;Nq#2I+dUue$abxPxh5@u=8e((PDa1xR4;z%om zuYC+VSIz4`Rq)^cM+wN9q*EHZOdSCH z@jR~A{YSsOR1UG)xT&{Nr9RQyV{Fypo9w-JI^-JYgrzs|;;4XPy!HSCCcm$fxYm8p zpz1pqtgN3=_z{eJkV^dyiyzgvGS2~5rsi>Do*e*A!*<{G`aRAasH#o$bh(tVU9Q6YZb3YxQfuJr z+ZgHpT;0mSR(}yl#QzV0L6bztyN#{vIu*2Hq_${dP9Q%8so&$0KpHJ($6C0OPYT_uZ z;TenDugvmqVE1SG+X{qO$!96j1As!m_!r#i@Pq9YyR57pNl-RAq~E+hiEpV&+j{Nn zF(gce?ILb;d`f7CCKT8bEIy5neFG36Riz8y$!Zo0Xr;axW`BQi`?-1J0%oTQD0jy1 zzKHe!7;?n_)84g*L%ntX8MovTPGMB2oG7K?6bZTIa%hBOMkC5d?)Neoxy@+kM5u5G zxfK~?6pBbgp>#pzt`L)3t{wO2x4-I~Qp1_|_dLJf^FHrefAoCK_q+FA`?l8FYkk(* zl#Y-?B{e&r%BCbk2#2&{!K?^OP`9L26o-9m`WQG%VjXt&MTG);&8Ov&2sCn=h49(Z z_xHK{b1%9%Y;k-J{LF@g11a*?P0c3X3r(Jd5U|dtd$baTt*2}BJVxKm%Hykd0I_AB#TQ&Z!DaGFc1nBmxztKe0$M8hO#|>`MFXc2@-d|I zQnC4=_^81t;GJjVL!84xjwrMWnF{=BNd-zyh!Lw9?X{g>xq^Do}uJn$9CB zAl-fFCP?BERVwv*r%7ZzMW?>R?x24Kz&ePhpC|#BS(fio!!&9id9~m-NTWix(7T7d zjWaf_J0G$UWuPM~p>`On^mH30|Mg76Z6Q;1)#U6G6*7yB9!cC%f@eee zVM>6*^w!L3UqWyp$jGgKE&Hfnc1-2Ho%G+#x(;a*WBc_Dw$0`bMt)GefkflGrrw^a z#^ccgsg`@5#mJbODiz2z%H`PYO7{ku_zRsu)2@3aR<4luRS>o(c&u^FGnpJ+wigbl zs`Xht-MbZBVWHzjdKb159LPrA_q0=1Nq2duZH&^h&mL${AXdyjkd9V~-&rBin46!L z5&^|O5cR{c)tjWvpt_MYWIC5*pR(yR7bh(E9FK_u?8hjK0Ml#WObs|icEkM=*Rwvr@>(RcBYar0SV zd7L|f)9v=&?N@AsSzh@94*cs0WdhK7y9$cifkFZD*W9TD=}lyk`Z=7OodJ&1s)MAE z*}w139V{h?$Y*K0+rifXh1upW>JOQrNEb3E5_(jmT0ye^`p`XzL6|asveSe6HP_^ns=oX?@kc z0w`n&TLX?L@ZyX`D9>mz@Qi#eU15#OgdEuoJ^{uj2`D(BMKSE+aqfd108Nvp;*$COt#rk;F*_G28wg}r`R(Mj!ZlE z9RkvsEfH_;n$3lHy025qiM$Oi&mjn~64}I_H^lhc&@T3!%Dp0U_|7hC_rzp)3afM$ zluW-YYQV$np`<8cvx;{8U4U^?f|8%a7>7mFu6S|G!&e;SY~5y+ZY5SOL_XmL2;e_{ zv}OB5(7@Vyq$B{4UqkGAZFNSpd|r;YzvEqt6ZPplPzlK{s};I@H}RMjh`U5kZ?QfA zHo4ObR6^pg}vt{2@NLjoZ!0KTMY6kaWz4`BW|J5f$mH?(q3cS!Z<@Z24-DEGds zFhTO`Y{5hEMf7Iz@@5DDR#~K*rOf^ozGD4(0ilkPZl%gK1{Qo>s_svOg4|ms^y=g; z1h*}?<%|%m*GBI-u#3!_13yigRJj&ew(#T_k4`PW^)q~C!dSNM!)WzZDAnCOjzmKFjf%O`?-QKZdsM1KXDdD)N4Y0S_s1vzd!=q|=qyJV*ZDRR&hxo4GYLNH zI*+nk?J_lA%iaVfxDrc|er6ahI;4@XI>8A|eGn1QGyfDHKH!Xz=>17e0$3z`@9&Kk z*Q&+VT$K*45O>SH43H3;+6OZgrvK4um4%AvLNLBdjJvSEyKO$t708Kd#`Q^&R6s5 zE60jzJh=M0q0^UMYT@~6J>Fn!n1LGVD*&mXi3?#`c`OYdC&W*Wkb~?|>}6`0u(J19 zlH}#%ff}mP+aC}y^-8h+WaPW9WJ8NvKs>m3frw5H@h+m)WfS^TR|FsH9~c>qL2NLx zo$|{CKGMr(Q;SNN>FVohNRShxzceoMcpr7Xn5Q2-$l4?PLX&>lr_bqmuKG;-o>Igb zYxl6SIz4c#*m1fO75OmP1|xA5!J3SpYu&EPzHUaPz1MK2;Ni_)H;+9WDk4)?1%u3= z^E)>CH}*AxSb3yHW8)#G>(#dnIRoL-say!28I$Qy4LZiuEX{K-8){`ox4D0=@|?02 z%R~gpIcFa@6OO886U0N0@t)(57%QvS#<%*U_Hc;GcD)t1K zlqBT)awhJ><(gHfE5Ej{IqWs{fqz&61JdZYG!#L6zVOUQwr0nT41qg8C!;`622e}t z6fK*O<)_Hk2lDe-9P7taB;4;xA}|f$;Di|J`O^cSA9Z7;E#aZ`B7c+1VIu*?T`KgQ zKUv+r*-%kXGKeSqR>d*d46(T>HHIjJgKvi&Yt2oHEL7 zo{0-{tP=II;ItjlRZhf`>s|(yVFIn! zyP+#LbZg>&$)p

    &PHz%zZU<(kZ`rcFHhCWp@^!&oV7NKO{xM>ZEh%*&Bjp^(Wk zeAKM)={R5?rn7byky+JgIm zA|fj2jd<|3R2-y*<>pSWxPl~@;;PZ%2QwuEz%{#1^E4w*T%M;}q&e~rNWc)S0O{r& z86ty%O-STKI`Ds)IzJ^;mb`V{D4q^qPf-LfhI4Pljc##Z3D3 z#0&tDcdCeE^#;0cijruf$IzoTK8mEd)K$b}M94n!nHw8_j!n!08?jgvs@Tn3c12VU+|9a_&v`g z#T`Wf?xJ1u4`wosKD>Jgx2q-%bKP*VF(-mIhl0|me!sVDE>(84uyO0R$@LaOgS4Te z*$`$SQe%%GZ7ty-%4QPi6miw@$0a^-S=ZthICh=y!(>igk= z`Dl%d{{|TnM5V%0?8(K$mlzuz5(9(MY97r<6EBH9$ zqR_RFcsGtxO9;pKD+>gs*f)L;2{7x;01%>l^{|)aHa0P!qS+1mw9jht$2s^@w%Gnt zlhjFgc2tam41@$Bg&GD-LiS8&V4E>_xW7Ww)999G-}AoV^XBLUoC_|P1;uNj5L5?( zjw3|@!o*5nhGSIZ$tPgdpXNl0F1SdkR(7x#Kn+x*`*dbye%U=S1TOS^qR@OSQntPq zf>jrdruzyrkXB?UY6U?k&)Q9tx9ZTN`q!muKbE>1mOfxvLhyh{THEJOx^9}v z0VPR$By)i(ZR?a%WP7qNEyfmH7CX4!$Lsy@U>ne>pF-KqM=I})MNpyh^-npX{E*Km{;%HAw!m4iAd{6@-%)_ycDo7r6Rfy2zX_=R zOGEy|VP)4qhTJ~No4H+(`DlQ?hRiC3|0^sdxrzk>|J|bhVQxD>z2|=m3N-*1B+cE= z$EeLV*W3iRktw2E3c-=g=fkQtc?PzJzq^66SujFKe>Ot=ucBB!2k8X#vRG)w@XZ+% ze*CNNi+lAYz6d<+gs|ydtL%%sS+O#3ySXuN6u2}Wic($0Q zX8d7UV!cjHqx7OymLw!k7&JetYM-})Be$h@yrTfb;nl7j3jE%v&ZxdxC_;?8M6Bc` z%#=?l<>?NPPx(rZ6Qjt5h4s1UKTMTjvQ}KKwG{?N{<`-COZIfp3)(xd!Jd}#wY($2vlUM5C0vIFFR++V zCmH;f&kqKfg}MR>QgNR?V4uewDs;VA47peffUz)3>Rs6^Qll)U3tdFl-k3#1=r@or0%Com*h0D}K+j2!dyu z^%uJ=w?Dp2MKY9hbs{*=0>n<4^?T(4Q?uxXJ6y~a23!-kyMAvkO9z?3h>DLfQ0DFb zgH9vP!z>+kh}X{F$yzk;U?ZM`He5?a&3*)}|HSairroSq`STXv#58{C?&7E38=&)I zUI)SsgE#_KN=@iOC53L^Ho`zb1fS6C0h75BHd8`|XRA&g2=jv~d8EDMJS}=b5(C?% z-=pVclRQN6ObG~;Rh1k=8B><}lD?D{O7oPnZua_r!DBr&B<1w?7R9otC2j-ZyIw_H}4G(+= zZN*ZvZ(Pp-f$PMRuX^_wh?-L~%f*$Yst!iZrY@u0e9ab(3~|%IIKSQemh-Dq`-{=y zKmw27IJoxRi}E0DLkm#dGu|U_Qok<3fQ|jlSoaEGOMRzf{*W=B@Y>rf>SfIXI&7Uh z-nW@sct@K{Ss;7WghNuBFtc4f#qu}?8BlT4=JEWM*Uxv<>w@b1-bDw`cJCtdmRVRV zw{pIS-Ch#$1>Z#SYNaOj1*v{Y(6lTL&&RYbS46C*#>J113W7M^rft>>W5Z_&#>T0V zKtX<$3t+KW`a;0MQ|wLJ82xbs7R1M^8G7fry0QSND@jz!!mKTii!NzpfU;R6YCiY1 zpBqt{=_XI!3=qjFF>BvRyb!Q8J4p*<=N6JDTnc4U!{kC?7bgCg*{zSz=vtS@A0Ib? zP7B)a99;VYPGgminN2iu3vI_LKfdW>aAMYVKXZd^w4vAuT2eM<6NB3yA5b93?~dSP z#h%Es^gGDxGUD1I%MNDRME&IIf1${3NPB$hKYo}|6wTjDbWw%0HBkO$c(VcH*Niq1 ztqmHb-Lv&xX^dVo{>=oart<8^cBe3Yy@;mIpPYca5pC}dwl5spnJb6V0A<#ke??x3 z8GT>P69X{NKPKnLq%RH|?=5{FCtMv?=UtO)S0@cYNO+oYnkJcR@fGuyszR3@U{8F4jb zNXU0hK!t;mpvaV8ukzxWmg^u%1Yq>y1WMw+T}w+-O6mklX05;Y%&O%oUQ9Jk2eKcq z4cjtjVuA|era+P4_A}q4Tw0ngP$(A4<|I;9%m9qIRJk8h^J8lM%XbZ8KXK~i*o`A1 zmLQS2U=or^QzqE`q-iLQOm(t!m_gXkQcUO&;5d#IJ)!>sD}XYQ#MRs#_F*z17DSpU zU>}D@r;jq^lngmnYz-*#_Qde)YvxHyjs_gZ)VK6|#|pzHpfP!y2Z~I$&6avGPn!K^ zU^M^#o|>tTgRe9k?;G*6m(3=%ly&&!ig6Bj4erI7T+!aZE2&O|!CBZi`8O=_U;~Gn zPS2c_TH^KMlDMDvaR$D@E0?V8>(94vbLLhz-d0|=`M(Q95@AkncB1})+E1UWo2e5q zrKPW!qa&7$4ZAwYYPmu9n+mpS7MAR>@xcR3(Lwup11)ZfXZ2EJ`=wei{zgLlxM-@I z7jtw-!r=`M>|&RnyU+ELZW3WxzJA5b(ILB%Ggnge{vz6zoct(uHY|Oh^)hpG=&2Ls zM@9Z|$t^UU4DLFRwrn3_jt&%Dx$1+8ySWVj2M;{tB R&x3(~dfErHax`&){{s%|i=_Yn From b3a36e8d94cecce0f462ed4096984e66c4db6ed9 Mon Sep 17 00:00:00 2001 From: Razvan Stoica Date: Thu, 11 Mar 2021 09:26:31 +0200 Subject: [PATCH 14/48] Print Section B only if it contains remediation measures --- docker-bench-security.sh | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/docker-bench-security.sh b/docker-bench-security.sh index f8849ba..d7b519b 100755 --- a/docker-bench-security.sh +++ b/docker-bench-security.sh @@ -196,8 +196,10 @@ main () { fi done - logit "\n\n${bldylw}Section B - Remediation measures${txtrst}" - logit "${globalRemediation}" + if [ -n "${globalRemediation}" ]; then + logit "\n\n${bldylw}Section B - Remediation measures${txtrst}" + logit "${globalRemediation}" + fi logit "\n\n${bldylw}Section C - Score${txtrst}\n" info "Checks: $totalChecks" From c623d3afdd0e20631f29d9101b15ce7a8392ef68 Mon Sep 17 00:00:00 2001 From: Razvan Stoica Date: Thu, 11 Mar 2021 09:32:29 +0200 Subject: [PATCH 15/48] Print the remediation measure only if the check is not passed --- output_lib.sh | 2 +- tests/1_host_configuration.sh | 9 +++++++++ 2 files changed, 10 insertions(+), 1 deletion(-) diff --git a/output_lib.sh b/output_lib.sh index 29083ba..b6580a1 100644 --- a/output_lib.sh +++ b/output_lib.sh @@ -103,7 +103,7 @@ resulttestjson() { printf "\"result\": \"%s\", \"details\": \"%s: %s\", \"items\": %s" "$1" "$2" "$truncItems" "$itemsJson" | tee -a "$logger.json" 2>/dev/null 1>&2 fi # Log remediation measure - if [ -n "$remediation" ]; then + if [ -n "$remediation" ] && [ "$1" != "PASS" ]; then printf ", \"remediation\": \"%s\"" "$remediation" | tee -a "$logger.json" 2>/dev/null 1>&2 if [ -n "$remediationImpact" ]; then printf ", \"remediation-impact\": \"%s\"" "$remediationImpact" | tee -a "$logger.json" 2>/dev/null 1>&2 diff --git a/tests/1_host_configuration.sh b/tests/1_host_configuration.sh index 9069d33..00a2261 100644 --- a/tests/1_host_configuration.sh +++ b/tests/1_host_configuration.sh @@ -180,6 +180,7 @@ check_1_2_4() { else info "$check" info " * Directory not found" + saveRemediation --id "${id}" --rem "${remediation}" --imp "${remediationImpact}" resulttestjson "INFO" "Directory not found" currentScore=$((currentScore + 0)) fi @@ -221,6 +222,7 @@ check_1_2_5() { else info "$check" info " * Directory not found" + saveRemediation --id "${id}" --rem "${remediation}" --imp "${remediationImpact}" resulttestjson "INFO" "Directory not found" currentScore=$((currentScore + 0)) fi @@ -262,6 +264,7 @@ check_1_2_6() { else info "$check" info " * File not found" + saveRemediation --id "${id}" --rem "${remediation}" --imp "${remediationImpact}" resulttestjson "INFO" "File not found" currentScore=$((currentScore + 0)) fi @@ -303,6 +306,7 @@ check_1_2_7() { else info "$check" info " * File not found" + saveRemediation --id "${id}" --rem "${remediation}" --imp "${remediationImpact}" resulttestjson "INFO" "File not found" currentScore=$((currentScore + 0)) fi @@ -344,6 +348,7 @@ check_1_2_8() { else info "$check" info " * File not found" + saveRemediation --id "${id}" --rem "${remediation}" --imp "${remediationImpact}" resulttestjson "INFO" "File not found" currentScore=$((currentScore + 0)) fi @@ -385,6 +390,7 @@ check_1_2_9() { else info "$check" info " * File not found" + saveRemediation --id "${id}" --rem "${remediation}" --imp "${remediationImpact}" resulttestjson "INFO" "File not found" currentScore=$((currentScore + 0)) fi @@ -426,6 +432,7 @@ check_1_2_10() { else info "$check" info " * File not found" + saveRemediation --id "${id}" --rem "${remediation}" --imp "${remediationImpact}" resulttestjson "INFO" "File not found" currentScore=$((currentScore + 0)) fi @@ -467,6 +474,7 @@ check_1_2_11() { else info "$check" info " * File not found" + saveRemediation --id "${id}" --rem "${remediation}" --imp "${remediationImpact}" resulttestjson "INFO" "File not found" currentScore=$((currentScore + 0)) fi @@ -508,6 +516,7 @@ check_1_2_12() { else info "$check" info " * File not found" + saveRemediation --id "${id}" --rem "${remediation}" --imp "${remediationImpact}" resulttestjson "INFO" "File not found" currentScore=$((currentScore + 0)) fi From 59a63dd49a831fe648ea6eac6c59b9c54a5fc31a Mon Sep 17 00:00:00 2001 From: Razvan Stoica Date: Thu, 11 Mar 2021 10:21:13 +0200 Subject: [PATCH 16/48] Print more details in help message --- docker-bench-security.sh | 19 ++++++++++++++++++- 1 file changed, 18 insertions(+), 1 deletion(-) diff --git a/docker-bench-security.sh b/docker-bench-security.sh index d7b519b..b3cd4ef 100755 --- a/docker-bench-security.sh +++ b/docker-bench-security.sh @@ -46,8 +46,21 @@ fi usage () { cat < +Full documentation: +Released under the Apache-2.0 License. EOF } From ad62371ace83e697b458f0cc410ea875d2bf8be9 Mon Sep 17 00:00:00 2001 From: Razvan Stoica Date: Thu, 11 Mar 2021 13:12:05 +0200 Subject: [PATCH 17/48] Move all pictures to a dedicated folder --- README.md | 2 +- benchmark_log.png => img/benchmark_log.png | Bin 2 files changed, 1 insertion(+), 1 deletion(-) rename benchmark_log.png => img/benchmark_log.png (100%) diff --git a/README.md b/README.md index 0fcec64..b9cdeb5 100644 --- a/README.md +++ b/README.md @@ -1,6 +1,6 @@ # Docker Bench for Security -![Docker Bench for Security running](benchmark_log.png) +![Docker Bench for Security running](img/benchmark_log.png) The Docker Bench for Security is a script that checks for dozens of common best-practices around deploying Docker containers in production. The tests are diff --git a/benchmark_log.png b/img/benchmark_log.png similarity index 100% rename from benchmark_log.png rename to img/benchmark_log.png From ed23f2d285106053c0752a40d7919a2a397fc95d Mon Sep 17 00:00:00 2001 From: Razvan Stoica Date: Thu, 11 Mar 2021 13:24:58 +0200 Subject: [PATCH 18/48] Change default log locations --- .gitignore | 2 +- docker-bench-security.sh | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.gitignore b/.gitignore index 621e40c..b783cca 100644 --- a/.gitignore +++ b/.gitignore @@ -1,2 +1,2 @@ -*.log* +log/* *.swp* diff --git a/docker-bench-security.sh b/docker-bench-security.sh index b3cd4ef..c1e467f 100755 --- a/docker-bench-security.sh +++ b/docker-bench-security.sh @@ -95,7 +95,7 @@ do done if [ -z "$logger" ]; then - logger="${myname}.log" + logger="log/${myname}.log" fi if [ -z "$limit" ]; then From 82ecb7e0896f825669404703f1976927e1634d7f Mon Sep 17 00:00:00 2001 From: Razvan Stoica Date: Thu, 11 Mar 2021 13:29:15 +0200 Subject: [PATCH 19/48] README file updated with new default logs location --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index b9cdeb5..dae2f41 100644 --- a/README.md +++ b/README.md @@ -92,7 +92,7 @@ version 1.13.0 or later. ``` By default the Docker Bench for Security script will run all available CIS tests -and produce logs in the current directory, named `docker-bench-security.sh.log.json` +and produce logs in the log folder from current directory, named `docker-bench-security.sh.log.json` and `docker-bench-security.sh.log`. If the docker container is used then the log files will be created inside the container. If you wish to access them from the host after the container has been run you will need to mount a volume for storing them in. From 11886d47d88be6f813e2d64add7fc450a64b7de6 Mon Sep 17 00:00:00 2001 From: Razvan Stoica Date: Thu, 11 Mar 2021 15:00:12 +0200 Subject: [PATCH 20/48] Fixed invalid JSON log --- tests/1_host_configuration.sh | 22 +++++++++++----------- tests/2_docker_daemon_configuration.sh | 2 +- tests/4_container_images.sh | 2 +- 3 files changed, 13 insertions(+), 13 deletions(-) diff --git a/tests/1_host_configuration.sh b/tests/1_host_configuration.sh index 00a2261..709a01e 100644 --- a/tests/1_host_configuration.sh +++ b/tests/1_host_configuration.sh @@ -67,7 +67,7 @@ check_1_2() { check_1_2_1() { local id="1.2.1" local desc="Ensure a separate partition for containers has been created (Scored)" - local remediation="For new installations, you should create a separate partition for the \"/var/lib/docker\" mount point. For systems that have already been installed, you should use the Logical Volume Manager (LVM) within Linux to create a new partition." + local remediation="For new installations, you should create a separate partition for the \'/var/lib/docker\' mount point. For systems that have already been installed, you should use the Logical Volume Manager (LVM) within Linux to create a new partition." local check="$id - $desc" starttestjson "$id" "$desc" @@ -114,7 +114,7 @@ check_1_2_2() { check_1_2_3() { local id="1.2.3" local desc="Ensure auditing is configured for the Docker daemon (Scored)" - local remediation="Install and configure auditd using command \"sudo apt-get install auditd\". Add \"-w /usr/bin/dockerd -k docker\" to the \"/etc/audit/rules.d/audit.rules\" file. Then restart the audit daemon using command \"service auditd restart\"." + local remediation="Install and configure auditd using command \'sudo apt-get install auditd\'. Add \'-w /usr/bin/dockerd -k docker\' to the \'/etc/audit/rules.d/audit.rules\' file. Then restart the audit daemon using command \'service auditd restart\'." local remediationImpact="Audit can generate large log files. So you need to make sure that they are rotated and archived periodically. Create a separate partition for audit logs to avoid filling up other critical partitions." local check="$id - $desc" starttestjson "$id" "$desc" @@ -148,7 +148,7 @@ check_1_2_3() { check_1_2_4() { local id="1.2.4" local desc="Ensure auditing is configured for Docker files and directories - /var/lib/docker (Scored)" - local remediation="Install and configure auditd using command \"sudo apt-get install auditd\". Add \"-w /var/lib/docker -k docker\" to the \"/etc/audit/rules.d/audit.rules\" file. Then restart the audit daemon using command \"service auditd restart\"." + local remediation="Install and configure auditd using command \'sudo apt-get install auditd\'. Add \'-w /var/lib/docker -k docker\' to the \'/etc/audit/rules.d/audit.rules\' file. Then restart the audit daemon using command \'service auditd restart\'." local remediationImpact="Audit can generate large log files. So you need to make sure that they are rotated and archived periodically. Create a separate partition for audit logs to avoid filling up other critical partitions." local check="$id - $desc" starttestjson "$id" "$desc" @@ -190,7 +190,7 @@ check_1_2_4() { check_1_2_5() { local id="1.2.5" local desc="Ensure auditing is configured for Docker files and directories - /etc/docker (Scored)" - local remediation="Install and configure auditd using command \"sudo apt-get install auditd\". Add \"-w /etc/docker -k docker\" to the \"/etc/audit/rules.d/audit.rules\" file. Then restart the audit daemon using command \"service auditd restart\"." + local remediation="Install and configure auditd using command \'sudo apt-get install auditd\'. Add \'-w /etc/docker -k docker\' to the \'/etc/audit/rules.d/audit.rules\' file. Then restart the audit daemon using command \'service auditd restart\'." local remediationImpact="Audit can generate large log files. So you need to make sure that they are rotated and archived periodically. Create a separate partition for audit logs to avoid filling up other critical partitions." local check="$id - $desc" starttestjson "$id" "$desc" @@ -232,7 +232,7 @@ fi check_1_2_6() { local id="1.2.6" local desc="Ensure auditing is configured for Docker files and directories - docker.service (Scored)" - local remediation="Install and configure auditd using command \"sudo apt-get install auditd\". Add \"-w $(systemctl show -p FragmentPath docker.service | sed 's/.*=//') -k docker\" to the \"/etc/audit/rules.d/audit.rules\" file. Then restart the audit daemon using command \"service auditd restart\"." + local remediation="Install and configure auditd using command \'sudo apt-get install auditd\'. Add \'-w $(systemctl show -p FragmentPath docker.service | sed 's/.*=//') -k docker\' to the \'/etc/audit/rules.d/audit.rules\' file. Then restart the audit daemon using command \'service auditd restart\'." local remediationImpact="Audit can generate large log files. So you need to make sure that they are rotated and archived periodically. Create a separate partition for audit logs to avoid filling up other critical partitions." local check="$id - $desc" starttestjson "$id" "$desc" @@ -274,7 +274,7 @@ check_1_2_6() { check_1_2_7() { local id="1.2.7" local desc="Ensure auditing is configured for Docker files and directories - docker.socket (Scored)" - local remediation="Install and configure auditd using command \"sudo apt-get install auditd\". Add \"-w $(systemctl show -p FragmentPath docker.socket | sed 's/.*=//') -k docker\" to the \"/etc/audit/rules.d/audit.rules\" file. Then restart the audit daemon using command \"service auditd restart\"." + local remediation="Install and configure auditd using command \'sudo apt-get install auditd\'. Add \'-w $(systemctl show -p FragmentPath docker.socket | sed 's/.*=//') -k docker\' to the \'/etc/audit/rules.d/audit.rules\' file. Then restart the audit daemon using command \'service auditd restart\'." local remediationImpact="Audit can generate large log files. So you need to make sure that they are rotated and archived periodically. Create a separate partition for audit logs to avoid filling up other critical partitions." local check="$id - $desc" starttestjson "$id" "$desc" @@ -316,7 +316,7 @@ check_1_2_7() { check_1_2_8() { local id="1.2.8" local desc="Ensure auditing is configured for Docker files and directories - /etc/default/docker (Scored)" - local remediation="Install and configure auditd using command \"sudo apt-get install auditd\". Add \"-w /etc/default/docker -k docker\" to the \"/etc/audit/rules.d/audit.rules\" file. Then restart the audit daemon using command \"service auditd restart\"." + local remediation="Install and configure auditd using command \'sudo apt-get install auditd\'. Add \'-w /etc/default/docker -k docker\' to the \'/etc/audit/rules.d/audit.rules\' file. Then restart the audit daemon using command \'service auditd restart\'." local remediationImpact="Audit can generate large log files. So you need to make sure that they are rotated and archived periodically. Create a separate partition for audit logs to avoid filling up other critical partitions." local check="$id - $desc" starttestjson "$id" "$desc" @@ -358,7 +358,7 @@ check_1_2_8() { check_1_2_9() { local id="1.2.9" local desc="Ensure auditing is configured for Docker files and directories - /etc/sysconfig/docker (Scored)" - local remediation="Install and configure auditd using command \"sudo apt-get install auditd\". Add \"-w /etc/sysconfig/docker -k docker\" to the \"/etc/audit/rules.d/audit.rules\" file. Then restart the audit daemon using command \"service auditd restart\"." + local remediation="Install and configure auditd using command \'sudo apt-get install auditd\'. Add \'-w /etc/sysconfig/docker -k docker\' to the \'/etc/audit/rules.d/audit.rules\' file. Then restart the audit daemon using command \'service auditd restart\'." local remediationImpact="Audit can generate large log files. So you need to make sure that they are rotated and archived periodically. Create a separate partition for audit logs to avoid filling up other critical partitions." local check="$id - $desc" starttestjson "$id" "$desc" @@ -400,7 +400,7 @@ check_1_2_9() { check_1_2_10() { local id="1.2.10" local desc="Ensure auditing is configured for Docker files and directories - /etc/docker/daemon.json (Scored)" - local remediation="Install and configure auditd using command \"sudo apt-get install auditd\". Add \"-w /etc/docker/daemon.json -k docker\" to the \"/etc/audit/rules.d/audit.rules\" file. Then restart the audit daemon using command \"service auditd restart\"." + local remediation="Install and configure auditd using command \'sudo apt-get install auditd\'. Add \'-w /etc/docker/daemon.json -k docker\' to the \'/etc/audit/rules.d/audit.rules\' file. Then restart the audit daemon using command \'service auditd restart\'." local remediationImpact="Audit can generate large log files. So you need to make sure that they are rotated and archived periodically. Create a separate partition for audit logs to avoid filling up other critical partitions." local check="$id - $desc" starttestjson "$id" "$desc" @@ -442,7 +442,7 @@ check_1_2_10() { check_1_2_11() { local id="1.2.11" local desc="Ensure auditing is configured for Docker files and directories - /usr/bin/containerd (Scored)" - local remediation="Install and configure auditd using command \"sudo apt-get install auditd\". Add \"-w /usr/bin/containerd -k docker\" to the \"/etc/audit/rules.d/audit.rules\" file. Then restart the audit daemon using command \"service auditd restart\"." + local remediation="Install and configure auditd using command \'sudo apt-get install auditd\'. Add \'-w /usr/bin/containerd -k docker\' to the \'/etc/audit/rules.d/audit.rules\' file. Then restart the audit daemon using command \'service auditd restart\'." local remediationImpact="Audit can generate large log files. So you need to make sure that they are rotated and archived periodically. Create a separate partition for audit logs to avoid filling up other critical partitions." local check="$id - $desc" starttestjson "$id" "$desc" @@ -484,7 +484,7 @@ check_1_2_11() { check_1_2_12() { local id="1.2.12" local desc="Ensure auditing is configured for Docker files and directories - /usr/sbin/runc (Scored)" - local remediation="Install and configure auditd using command \"sudo apt-get install auditd\". Add \"-w /usr/sbin/runc -k docker\" to the \"/etc/audit/rules.d/audit.rules\" file. Then restart the audit daemon using command \"service auditd restart\"." + local remediation="Install and configure auditd using command \'sudo apt-get install auditd\'. Add \'-w /usr/sbin/runc -k docker\' to the \'/etc/audit/rules.d/audit.rules\' file. Then restart the audit daemon using command \'service auditd restart\'." local remediationImpact="Audit can generate large log files. So you need to make sure that they are rotated and archived periodically. Create a separate partition for audit logs to avoid filling up other critical partitions." local check="$id - $desc" starttestjson "$id" "$desc" diff --git a/tests/2_docker_daemon_configuration.sh b/tests/2_docker_daemon_configuration.sh index 89fe6fe..00f87c1 100644 --- a/tests/2_docker_daemon_configuration.sh +++ b/tests/2_docker_daemon_configuration.sh @@ -13,7 +13,7 @@ check_2() { check_2_1() { local id="2.1" local desc="Ensure network traffic is restricted between containers on the default bridge (Scored)" - local remediation="Edit the Docker daemon configuration file to ensure that inter-container communication is disabled: \"icc\": false." + local remediation="Edit the Docker daemon configuration file to ensure that inter-container communication is disabled: \'icc\': false." local remediationImpact="Inter-container communication is disabled on the default network bridge. If any communication between containers on the same host is desired, it needs to be explicitly defined using container linking or custom networks." local check="$id - $desc" starttestjson "$id" "$desc" diff --git a/tests/4_container_images.sh b/tests/4_container_images.sh index ce6696c..fcd4e42 100644 --- a/tests/4_container_images.sh +++ b/tests/4_container_images.sh @@ -104,7 +104,7 @@ check_4_4() { check_4_5() { local id="4.5" local desc="Ensure Content trust for Docker is Enabled (Scored)" - local remediation="Add DOCKER_CONTENT_TRUST variable to the /etc/environment file using command echo \"DOCKER_CONTENT_TRUST=1\" | sudo tee -a /etc/environment." + local remediation="Add DOCKER_CONTENT_TRUST variable to the /etc/environment file using command echo \'DOCKER_CONTENT_TRUST=1\' | sudo tee -a /etc/environment." local remediationImpact="This prevents users from working with tagged images unless they contain a signature." local check="$id - $desc" starttestjson "$id" "$desc" From bf11d685222332edb41eabf7ff3a04c7c3d51680 Mon Sep 17 00:00:00 2001 From: Razvan Stoica Date: Thu, 11 Mar 2021 16:17:11 +0200 Subject: [PATCH 21/48] Add new check groups --- functions_lib.sh | 46 ++++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 46 insertions(+) diff --git a/functions_lib.sh b/functions_lib.sh index 1156986..cb44bbe 100644 --- a/functions_lib.sh +++ b/functions_lib.sh @@ -41,6 +41,32 @@ host_configuration_level1() { check_1_end } +host_general_configuration() { + check_1 + check_1_1 + check_1_1_1 + check_1_1_2 + check_1_end +} + +linux_hosts_specific_configuration() { + check_1 + check_1_2 + check_1_2_1 + check_1_2_2 + check_1_2_3 + check_1_2_4 + check_1_2_5 + check_1_2_6 + check_1_2_7 + check_1_2_8 + check_1_2_9 + check_1_2_10 + check_1_2_11 + check_1_2_12 + check_1_end +} + docker_daemon_configuration() { check_2 check_2_1 @@ -303,6 +329,26 @@ docker_enterprise_configuration_level1() { check_8_end } +universal_control_plane_configuration() { + check_8 + check_8_1 + check_8_1_1 + check_8_1_2 + check_8_1_3 + check_8_1_4 + check_8_1_5 + check_8_1_6 + check_8_1_7 + check_8_end +} + +docker_trusted_registry_configuration() { + check_8 + check_8_2 + check_8_2_1 + check_8_end +} + community_checks() { check_c check_c_1 From ee5972cb692ed2423ace0cc39f1716aa319bcdf9 Mon Sep 17 00:00:00 2001 From: Razvan Stoica Date: Tue, 16 Mar 2021 09:50:12 +0200 Subject: [PATCH 22/48] Add new folders to improve code segmentation --- functions/functions_lib.sh | 392 +++++++++++++++++++++++++++++++++++++ functions/helper_lib.sh | 129 ++++++++++++ functions/output_lib.sh | 189 ++++++++++++++++++ 3 files changed, 710 insertions(+) create mode 100644 functions/functions_lib.sh create mode 100644 functions/helper_lib.sh create mode 100644 functions/output_lib.sh diff --git a/functions/functions_lib.sh b/functions/functions_lib.sh new file mode 100644 index 0000000..1dec4c5 --- /dev/null +++ b/functions/functions_lib.sh @@ -0,0 +1,392 @@ +#!/bin/sh + +host_configuration() { + check_1 + check_1_1 + check_1_1_1 + check_1_1_2 + check_1_2 + check_1_2_1 + check_1_2_2 + check_1_2_3 + check_1_2_4 + check_1_2_5 + check_1_2_6 + check_1_2_7 + check_1_2_8 + check_1_2_9 + check_1_2_10 + check_1_2_11 + check_1_2_12 + check_1_end +} + +host_configuration_level1() { + check_1 + check_1_1 + check_1_1_1 + check_1_1_2 + check_1_2 + check_1_2_1 + check_1_2_2 + check_1_2_3 + check_1_2_5 + check_1_2_6 + check_1_2_7 + check_1_2_8 + check_1_2_9 + check_1_2_10 + check_1_2_11 + check_1_2_12 + check_1_end +} + +host_general_configuration() { + check_1 + check_1_1 + check_1_1_1 + check_1_1_2 + check_1_end +} + +linux_hosts_specific_configuration() { + check_1 + check_1_2 + check_1_2_1 + check_1_2_2 + check_1_2_3 + check_1_2_4 + check_1_2_5 + check_1_2_6 + check_1_2_7 + check_1_2_8 + check_1_2_9 + check_1_2_10 + check_1_2_11 + check_1_2_12 + check_1_end +} + +docker_daemon_configuration() { + check_2 + check_2_1 + check_2_2 + check_2_3 + check_2_4 + check_2_5 + check_2_6 + check_2_7 + check_2_8 + check_2_9 + check_2_10 + check_2_11 + check_2_12 + check_2_13 + check_2_14 + check_2_15 + check_2_16 + check_2_17 + check_2_end +} + +docker_daemon_configuration_level1() { + check_2 + check_2_1 + check_2_2 + check_2_3 + check_2_4 + check_2_5 + check_2_6 + check_2_7 + check_2_13 + check_2_14 + check_2_16 + check_2_17 + check_2_end +} + +docker_daemon_files() { + check_3 + check_3_1 + check_3_2 + check_3_3 + check_3_4 + check_3_5 + check_3_6 + check_3_7 + check_3_8 + check_3_9 + check_3_10 + check_3_11 + check_3_12 + check_3_13 + check_3_14 + check_3_15 + check_3_16 + check_3_17 + check_3_18 + check_3_19 + check_3_20 + check_3_21 + check_3_22 + check_3_end +} + +docker_daemon_files_level1() { + check_3 + check_3_1 + check_3_2 + check_3_3 + check_3_4 + check_3_5 + check_3_6 + check_3_7 + check_3_8 + check_3_9 + check_3_10 + check_3_11 + check_3_12 + check_3_13 + check_3_14 + check_3_15 + check_3_16 + check_3_17 + check_3_18 + check_3_19 + check_3_20 + check_3_21 + check_3_22 + check_3_end +} + +container_images() { + check_4 + check_4_1 + check_4_2 + check_4_3 + check_4_4 + check_4_5 + check_4_6 + check_4_7 + check_4_8 + check_4_9 + check_4_10 + check_4_11 + check_4_end +} + +container_images_level1() { + check_4 + check_4_1 + check_4_2 + check_4_3 + check_4_4 + check_4_6 + check_4_7 + check_4_9 + check_4_10 + check_4_end +} + +container_runtime() { + check_5 + check_running_containers + check_5_1 + check_5_2 + check_5_3 + check_5_4 + check_5_5 + check_5_6 + check_5_7 + check_5_8 + check_5_9 + check_5_10 + check_5_11 + check_5_12 + check_5_13 + check_5_14 + check_5_15 + check_5_16 + check_5_17 + check_5_18 + check_5_19 + check_5_20 + check_5_21 + check_5_22 + check_5_23 + check_5_24 + check_5_25 + check_5_26 + check_5_27 + check_5_28 + check_5_29 + check_5_30 + check_5_31 + check_5_end +} + +container_runtime_level1() { + check_5 + check_running_containers + check_5_1 + check_5_3 + check_5_4 + check_5_5 + check_5_6 + check_5_7 + check_5_8 + check_5_9 + check_5_10 + check_5_11 + check_5_12 + check_5_13 + check_5_14 + check_5_15 + check_5_16 + check_5_17 + check_5_18 + check_5_19 + check_5_20 + check_5_21 + check_5_24 + check_5_25 + check_5_26 + check_5_27 + check_5_28 + check_5_30 + check_5_31 + check_5_end +} + +docker_security_operations() { + check_6 + check_6_1 + check_6_2 + check_6_end +} + +docker_security_operations_level1() { + check_6 + check_6_1 + check_6_2 + check_6_end +} + +docker_swarm_configuration() { + check_7 + check_7_1 + check_7_2 + check_7_3 + check_7_4 + check_7_5 + check_7_6 + check_7_7 + check_7_8 + check_7_9 + check_7_10 + check_7_end +} + +docker_swarm_configuration_level1() { + check_7 + check_7_1 + check_7_2 + check_7_3 + check_7_4 + check_7_7 + check_7_end +} + +docker_enterprise_configuration() { + check_8 + check_product_license + check_8_1 + check_8_1_1 + check_8_1_2 + check_8_1_3 + check_8_1_4 + check_8_1_5 + check_8_1_6 + check_8_1_7 + check_8_2 + check_8_2_1 + check_8_end +} + +docker_enterprise_configuration_level1() { + check_8 + check_product_license + check_8_1 + check_8_1_1 + check_8_1_2 + check_8_1_3 + check_8_1_4 + check_8_1_5 + check_8_1_6 + check_8_1_7 + check_8_2 + check_8_2_1 + check_8_end +} + +universal_control_plane_configuration() { + check_8 + check_8_1 + check_8_1_1 + check_8_1_2 + check_8_1_3 + check_8_1_4 + check_8_1_5 + check_8_1_6 + check_8_1_7 + check_8_end +} + +docker_trusted_registry_configuration() { + check_8 + check_8_2 + check_8_2_1 + check_8_end +} + +community_checks() { + check_c + check_c_1 + check_c_1_1 + check_c_2 + check_c_end +} + +# CIS +cis() { + host_configuration + docker_daemon_configuration + docker_daemon_files + container_images + container_runtime + docker_security_operations + docker_swarm_configuration + docker_enterprise_configuration +} + +cis_level1() { + host_configuration_level1 + docker_daemon_configuration_level1 + docker_daemon_files_level1 + container_images_level1 + container_runtime_level1 + docker_security_operations_level1 + docker_swarm_configuration_level1 + docker_enterprise_configuration_level1 +} + +# Community contributed +community() { + community_checks +} + +# All +all() { + cis + community +} diff --git a/functions/helper_lib.sh b/functions/helper_lib.sh new file mode 100644 index 0000000..e24a14c --- /dev/null +++ b/functions/helper_lib.sh @@ -0,0 +1,129 @@ +#!/bin/sh + +# Returns the absolute path of a given string +abspath () { case "$1" in /*)printf "%s\n" "$1";; *)printf "%s\n" "$PWD/$1";; esac; } + +# Audit rules default path +auditrules="/etc/audit/audit.rules" + +# Compares versions of software of the format X.Y.Z +do_version_check() { + [ "$1" = "$2" ] && return 10 + + ver1front=$(printf "%s" "$1" | cut -d "." -f -1) + ver1back=$(printf "%s" "$1" | cut -d "." -f 2-) + ver2front=$(printf "%s" "$2" | cut -d "." -f -1) + ver2back=$(printf "%s" "$2" | cut -d "." -f 2-) + + if [ "$ver1front" != "$1" ] || [ "$ver2front" != "$2" ]; then + [ "$ver1front" -gt "$ver2front" ] && return 11 + [ "$ver1front" -lt "$ver2front" ] && return 9 + + [ "$ver1front" = "$1" ] || [ -z "$ver1back" ] && ver1back=0 + [ "$ver2front" = "$2" ] || [ -z "$ver2back" ] && ver2back=0 + do_version_check "$ver1back" "$ver2back" + return $? + else + [ "$1" -gt "$2" ] && return 11 || return 9 + fi +} + +# Extracts commandline args from the newest running processes named like the first parameter +get_command_line_args() { + PROC="$1" + + for PID in $(pgrep -f -n "$PROC"); do + tr "\0" " " < /proc/"$PID"/cmdline + done +} + +# Extract the cumulative command line arguments for the docker daemon +# +# If specified multiple times, all matches are returned. +# Accounts for long and short variants, call with short option. +# Does not account for option defaults or implicit options. +get_docker_cumulative_command_line_args() { + OPTION="$1" + + if ! get_command_line_args "docker daemon" >/dev/null 2>&1 ; then + line_arg="docker daemon" + else + line_arg="dockerd" + fi + + get_command_line_args "$line_arg" | + # normalize known long options to their short versions + sed \ + -e 's/\-\-debug/-D/g' \ + -e 's/\-\-host/-H/g' \ + -e 's/\-\-log-level/-l/g' \ + -e 's/\-\-version/-v/g' \ + | + # normalize parameters separated by space(s) to -O=VALUE + sed \ + -e 's/\-\([DHlv]\)[= ]\([^- ][^ ]\)/-\1=\2/g' \ + | + # get the last interesting option + tr ' ' "\n" | + grep "^${OPTION}" | + # normalize quoting of values + sed \ + -e 's/"//g' \ + -e "s/'//g" +} + +# Extract the effective command line arguments for the docker daemon +# +# Accounts for multiple specifications, takes the last option. +# Accounts for long and short variants, call with short option +# Does not account for option default or implicit options. +get_docker_effective_command_line_args() { + OPTION="$1" + get_docker_cumulative_command_line_args "$OPTION" | tail -n1 +} + +get_docker_configuration_file() { + FILE="$(get_docker_effective_command_line_args '--config-file' | \ + sed 's/.*=//g')" + + if [ -f "$FILE" ]; then + CONFIG_FILE="$FILE" + elif [ -f '/etc/docker/daemon.json' ]; then + CONFIG_FILE='/etc/docker/daemon.json' + else + CONFIG_FILE='/dev/null' + fi +} + +get_docker_configuration_file_args() { + OPTION="$1" + + get_docker_configuration_file + + grep "$OPTION" "$CONFIG_FILE" | sed 's/.*://g' | tr -d '" ', +} + +get_service_file() { + SERVICE="$1" + + if [ -f "/etc/systemd/system/$SERVICE" ]; then + echo "/etc/systemd/system/$SERVICE" + elif [ -f "/lib/systemd/system/$SERVICE" ]; then + echo "/lib/systemd/system/$SERVICE" + elif systemctl show -p FragmentPath "$SERVICE" 2> /dev/null 1>&2; then + systemctl show -p FragmentPath "$SERVICE" | sed 's/.*=//' + else + echo "/usr/lib/systemd/system/$SERVICE" + fi +} + +yell_info() { +yell "# -------------------------------------------------------------------------------------------- +# Docker Bench for Security v$version +# +# Docker, Inc. (c) 2015-$(date +"%Y") +# +# Checks for dozens of common best-practices around deploying Docker containers in production. +# Inspired by the CIS Docker Benchmark v1.2.0. +# --------------------------------------------------------------------------------------------" +} diff --git a/functions/output_lib.sh b/functions/output_lib.sh new file mode 100644 index 0000000..f893cb5 --- /dev/null +++ b/functions/output_lib.sh @@ -0,0 +1,189 @@ +#!/bin/sh + +if [ -n "$nocolor" ] && [ "$nocolor" = "nocolor" ]; then + bldred='' + bldgrn='' + bldblu='' + bldylw='' + txtrst='' +else + bldred='\033[1;31m' # Bold Red + bldgrn='\033[1;32m' # Bold Green + bldblu='\033[1;34m' # Bold Blue + bldylw='\033[1;33m' # Bold Yellow + txtrst='\033[0m' +fi + +logit () { + printf "%b\n" "$1" | tee -a "$logger" +} + +info () { + local infoCountCheck + while getopts c args + do + case $args in + c) infoCountCheck="true" ;; + *) exit 1 ;; + esac + done + if [ "$infoCountCheck" = "true" ]; then + printf "%b\n" "${bldblu}[INFO]${txtrst} $2" | tee -a "$logger" + totalChecks=$((totalChecks + 1)) + else + printf "%b\n" "${bldblu}[INFO]${txtrst} $1" | tee -a "$logger" + fi +} + +pass () { + local passScored + while getopts sc args + do + case $args in + s) passScored="true" ;; + c) passCountCheck="true" ;; + *) exit 1 ;; + esac + done + if [ "$passScored" = "true" ]; then + printf "%b\n" "${bldgrn}[PASS]${txtrst} $2" | tee -a "$logger" + totalChecks=$((totalChecks + 1)) + currentScore=$((currentScore + 1)) + elif [ "$passCountCheck" = "true" ]; then + printf "%b\n" "${bldgrn}[PASS]${txtrst} $2" | tee -a "$logger" + totalChecks=$((totalChecks + 1)) + else + printf "%b\n" "${bldgrn}[PASS]${txtrst} $1" | tee -a "$logger" + fi +} + +warn () { + local warnScored + while getopts s args + do + case $args in + s) warnScored="true" ;; + *) exit 1 ;; + esac + done + if [ "$warnScored" = "true" ]; then + printf "%b\n" "${bldred}[WARN]${txtrst} $2" | tee -a "$logger" + totalChecks=$((totalChecks + 1)) + currentScore=$((currentScore - 1)) + else + printf "%b\n" "${bldred}[WARN]${txtrst} $1" | tee -a "$logger" + fi +} + +note () { + local noteCountCheck + while getopts c args + do + case $args in + c) noteCountCheck="true" ;; + *) exit 1 ;; + esac + done + if [ "$noteCountCheck" = "true" ]; then + printf "%b\n" "${bldylw}[NOTE]${txtrst} $2" | tee -a "$logger" + totalChecks=$((totalChecks + 1)) + else + printf "%b\n" "${bldylw}[NOTE]${txtrst} $1" | tee -a "$logger" + fi +} + +yell () { + printf "%b\n" "${bldylw}$1${txtrst}\n" +} + +appendjson () { + if [ -s "$logger.json" ]; then + tail -n 1 "$logger.json" | wc -c | xargs -I {} truncate "$logger.json" -s -{} + printf "},\n" | tee -a "$logger.json" 2>/dev/null 1>&2 + else + printf "[" | tee -a "$logger.json" 2>/dev/null 1>&2 + fi +} + +beginjson () { + printf "{\n \"dockerbenchsecurity\": \"%s\",\n \"start\": %s,\n \"tests\": [" "$1" "$2" | tee -a "$logger.json" 2>/dev/null 1>&2 +} + +endjson (){ + printf "\n ], \"checks\": %s, \"score\": %s, \"end\": %s\n}]" "$1" "$2" "$3" | tee -a "$logger.json" 2>/dev/null 1>&2 +} + +logjson (){ + printf "\n \"%s\": \"%s\"," "$1" "$2" | tee -a "$logger.json" 2>/dev/null 1>&2 +} + +SSEP= +SEP= +startsectionjson() { + printf "%s\n {\"id\": \"%s\", \"desc\": \"%s\", \"results\": [" "$SSEP" "$1" "$2" | tee -a "$logger.json" 2>/dev/null 1>&2 + SEP= + SSEP="," +} + +endsectionjson() { + printf "\n ]}" | tee -a "$logger.json" 2>/dev/null 1>&2 +} + +starttestjson() { + printf "%s\n {\"id\": \"%s\", \"desc\": \"%s\", " "$SEP" "$1" "$2" | tee -a "$logger.json" 2>/dev/null 1>&2 + SEP="," +} + +logcheckresult() { + # Log to JSON + if [ $# -eq 1 ]; then + printf "\"result\": \"%s\"" "$1" | tee -a "$logger.json" 2>/dev/null 1>&2 + elif [ $# -eq 2 ]; then + # Result also contains details + printf "\"result\": \"%s\", \"details\": \"%s\"" "$1" "$2" | tee -a "$logger.json" 2>/dev/null 1>&2 + else + # Result also includes details and a list of items. Add that directly to details and to an array property "items" + # Also limit the number of items to $limit, if $limit is non-zero + if [ $limit != 0 ]; then + truncItems="" + ITEM_COUNT=0 + for item in $3; do + truncItems="$truncItems $item" + ITEM_COUNT=$((ITEM_COUNT + 1)); + if [ "$ITEM_COUNT" == "$limit" ]; then + truncItems="$truncItems (truncated)" + break; + fi + done + else + truncItems=$3 + fi + itemsJson=$(printf "["; ISEP=""; ITEMCOUNT=0; for item in $truncItems; do printf "%s\"%s\"" "$ISEP" "$item"; ISEP=","; done; printf "]") + printf "\"result\": \"%s\", \"details\": \"%s: %s\", \"items\": %s" "$1" "$2" "$truncItems" "$itemsJson" | tee -a "$logger.json" 2>/dev/null 1>&2 + fi + + # Log remediation measure to JSON + if [ -n "$remediation" ] && [ "$1" != "PASS" ]; then + printf ", \"remediation\": \"%s\"" "$remediation" | tee -a "$logger.json" 2>/dev/null 1>&2 + if [ -n "$remediationImpact" ]; then + printf ", \"remediation-impact\": \"%s\"" "$remediationImpact" | tee -a "$logger.json" 2>/dev/null 1>&2 + fi + fi + printf "}" | tee -a "$logger.json" 2>/dev/null 1>&2 + + # Save remediation measure for print log to stdout + if [ -n "$remediation" ] && [ "$1" != "PASS" ]; then + if [ -n "${checkHeader}" ]; then + if [ -n "${addSpaceHeader}" ]; then + globalRemediation="${globalRemediation}\n" + fi + globalRemediation="${globalRemediation}\n${bldblu}[INFO]${txtrst} ${checkHeader}" + checkHeader="" + addSpaceHeader="1" + fi + globalRemediation="${globalRemediation}\n${bldblu}[INFO]${txtrst} ${id} - ${remediation}" + if [ -n "${remediationImpact}" ]; then + globalRemediation="${globalRemediation} Impact: ${remediationImpact}" + fi + fi +} From 2986d618f4b8dbdf2f171411aa2dee2aa03cfda3 Mon Sep 17 00:00:00 2001 From: Razvan Stoica Date: Tue, 16 Mar 2021 09:53:32 +0200 Subject: [PATCH 23/48] Ignore all. Whitelist only essential things. --- .dockerignore | 11 ++++++----- 1 file changed, 6 insertions(+), 5 deletions(-) diff --git a/.dockerignore b/.dockerignore index db3e3b9..8abc26a 100644 --- a/.dockerignore +++ b/.dockerignore @@ -1,5 +1,6 @@ -.git -*.md -*.png -distros - +* +!docker-bench-security.sh +!functions/ +!tests/ +!log/ +log/* From b757aa7334cbbf7c112c06b568b50fa3f7e4adf1 Mon Sep 17 00:00:00 2001 From: Razvan Stoica Date: Tue, 16 Mar 2021 09:58:57 +0200 Subject: [PATCH 24/48] Connection to the apk repositories is HTTPS by default --- Dockerfile | 14 ++++---------- 1 file changed, 4 insertions(+), 10 deletions(-) diff --git a/Dockerfile b/Dockerfile index 33cd79a..ed4596a 100644 --- a/Dockerfile +++ b/Dockerfile @@ -5,17 +5,11 @@ LABEL \ org.label-schema.url="https://dockerbench.com" \ org.label-schema.vcs-url="https://github.com/docker/docker-bench-security.git" -# Switch to the HTTPS endpoint for the apk repositories -# https://github.com/gliderlabs/docker-alpine/issues/184 -RUN set -eux; \ - sed -i 's!http://dl-cdn.alpinelinux.org/!https://alpine.global.ssl.fastly.net/!g' /etc/apk/repositories && \ - apk add --no-cache \ - iproute2 \ - docker-cli \ - dumb-init +RUN apk add --no-cache iproute2 \ + docker-cli \ + dumb-init -COPY ./*.sh /usr/local/bin/ -COPY ./tests/*.sh /usr/local/bin/tests/ +COPY . /usr/local/bin/ HEALTHCHECK CMD exit 0 From ca03a37db6b6c7ce75c286453848d09d88c18926 Mon Sep 17 00:00:00 2001 From: Razvan Stoica Date: Tue, 16 Mar 2021 10:00:45 +0200 Subject: [PATCH 25/48] Remove duplicate Dockerfile --- distros/Dockerfile.alpine | 25 ------------------------- 1 file changed, 25 deletions(-) delete mode 100644 distros/Dockerfile.alpine diff --git a/distros/Dockerfile.alpine b/distros/Dockerfile.alpine deleted file mode 100644 index 0ad1564..0000000 --- a/distros/Dockerfile.alpine +++ /dev/null @@ -1,25 +0,0 @@ -FROM alpine:3.12 - -LABEL \ - org.label-schema.name="docker-bench-security" \ - org.label-schema.url="https://dockerbench.com" \ - org.label-schema.vcs-url="https://github.com/docker/docker-bench-security.git" - -# Switch to the HTTPS endpoint for the apk repositories -# https://github.com/gliderlabs/docker-alpine/issues/184 -RUN set -eux; \ - sed -i 's!http://dl-cdn.alpinelinux.org/!https://alpine.global.ssl.fastly.net/!g' /etc/apk/repositories && \ - apk add --no-cache \ - iproute2 \ - docker-cli \ - dumb-init - -COPY ./*.sh /usr/local/bin/ -COPY ./tests/*.sh /usr/local/bin/tests/ - -HEALTHCHECK CMD exit 0 - -WORKDIR /usr/local/bin - -ENTRYPOINT [ "/usr/bin/dumb-init", "docker-bench-security.sh" ] -CMD [""] From 7144b947de7e94fa84db9c7c61ba04d7f6a9aea0 Mon Sep 17 00:00:00 2001 From: Razvan Stoica Date: Tue, 16 Mar 2021 10:05:49 +0200 Subject: [PATCH 26/48] Tests update --- tests/1_host_configuration.sh | 427 ++++++--------- tests/2_docker_daemon_configuration.sh | 306 ++++------- tests/3_docker_daemon_configuration_files.sh | 374 +++++-------- tests/4_container_images.sh | 111 ++-- tests/5_container_runtime.sh | 520 +++++++------------ tests/6_docker_security_operations.sh | 18 +- tests/7_docker_swarm_configuration.sh | 145 ++---- tests/8_docker_enterprise_configuration.sh | 55 +- tests/99_community_checks.sh | 58 ++- tests/TESTS.md | 266 ++++++++++ 10 files changed, 1007 insertions(+), 1273 deletions(-) create mode 100644 tests/TESTS.md diff --git a/tests/1_host_configuration.sh b/tests/1_host_configuration.sh index 709a01e..65954c4 100644 --- a/tests/1_host_configuration.sh +++ b/tests/1_host_configuration.sh @@ -16,43 +16,36 @@ check_1_1() { info "$check" } -# 1.1.1 check_1_1_1() { local id="1.1.1" local desc="Ensure the container host has been Hardened (Not Scored)" local check="$id - $desc" starttestjson "$id" "$desc" - totalChecks=$((totalChecks + 1)) - note "$check" - resulttestjson "INFO" - currentScore=$((currentScore + 0)) + note -c "$check" + logcheckresult "INFO" } -# 1.1.2 check_1_1_2() { local id="1.1.2" local desc="Ensure that the version of Docker is up to date (Not Scored)" local check="$id - $desc" starttestjson "$id" "$desc" - totalChecks=$((totalChecks + 1)) docker_version=$(docker version | grep -i -A2 '^server' | grep ' Version:' \ | awk '{print $NF; exit}' | tr -d '[:alpha:]-,') docker_current_version="$(date +%y.%m.0 -d @$(( $(date +%s) - 2592000)))" do_version_check "$docker_current_version" "$docker_version" if [ $? -eq 11 ]; then - info "$check" + info -c "$check" info " * Using $docker_version, verify is it up to date as deemed necessary" info " * Your operating system vendor may provide support and security maintenance for Docker" - resulttestjson "INFO" "Using $docker_version" - currentScore=$((currentScore + 0)) + logcheckresult "INFO" "Using $docker_version" else - pass "$check" + pass -c "$check" info " * Using $docker_version which is current" info " * Check with your operating system vendor for support and security maintenance for Docker" - resulttestjson "PASS" "Using $docker_version" - currentScore=$((currentScore + 0)) + logcheckresult "PASS" "Using $docker_version" fi } @@ -63,462 +56,384 @@ check_1_2() { info "$check" } -# 1.2.1 check_1_2_1() { local id="1.2.1" local desc="Ensure a separate partition for containers has been created (Scored)" - local remediation="For new installations, you should create a separate partition for the \'/var/lib/docker\' mount point. For systems that have already been installed, you should use the Logical Volume Manager (LVM) within Linux to create a new partition." + local remediation="For new installations, you should create a separate partition for the /var/lib/docker mount point. For systems that have already been installed, you should use the Logical Volume Manager (LVM) within Linux to create a new partition." local check="$id - $desc" starttestjson "$id" "$desc" - totalChecks=$((totalChecks + 1)) docker_root_dir=$(docker info -f '{{ .DockerRootDir }}') if docker info | grep -q userns ; then docker_root_dir=$(readlink -f "$docker_root_dir/..") fi if mountpoint -q -- "$docker_root_dir" >/dev/null 2>&1; then - pass "$check" - resulttestjson "PASS" - currentScore=$((currentScore + 1)) + pass -s "$check" + logcheckresult "PASS" else - warn "$check" - saveRemediation --id "${id}" --rem "${remediation}" --imp "${remediationImpact}" - resulttestjson "WARN" - currentScore=$((currentScore - 1)) + warn -s "$check" + logcheckresult "WARN" fi } -# 1.2.2 -check_1_2_2() { +check_1_2_2() { local id="1.2.2" local desc="Ensure only trusted users are allowed to control Docker daemon (Scored)" - local check="$id - $desc" + local remediation="You should remove any untrusted users from the docker group using command sudo gpasswd -d docker or add trusted users to the docker group using command sudo usermod -aG docker . You should not create a mapping of sensitive directories from the host to container volumes." + local remediationImpact="Only trust user are allow to build and execute containers as normal user." + local check="$id - $desc" starttestjson "$id" "$desc" - totalChecks=$((totalChecks + 1)) if command -v getent >/dev/null 2>&1; then docker_users=$(getent group docker) else docker_users=$(grep 'docker' /etc/group) fi - info "$check" - for u in $docker_users; do - info " * $u" - done - resulttestjson "INFO" "users" "$docker_users" - currentScore=$((currentScore + 0)) -} + docker_users=$(printf "%s" "$docker_users" | awk -F: '{print $4}') -# 1.2.3 -check_1_2_3() { - local id="1.2.3" - local desc="Ensure auditing is configured for the Docker daemon (Scored)" - local remediation="Install and configure auditd using command \'sudo apt-get install auditd\'. Add \'-w /usr/bin/dockerd -k docker\' to the \'/etc/audit/rules.d/audit.rules\' file. Then restart the audit daemon using command \'service auditd restart\'." - local remediationImpact="Audit can generate large log files. So you need to make sure that they are rotated and archived periodically. Create a separate partition for audit logs to avoid filling up other critical partitions." - local check="$id - $desc" - starttestjson "$id" "$desc" - - totalChecks=$((totalChecks + 1)) - file="/usr/bin/dockerd" - if command -v auditctl >/dev/null 2>&1; then - if auditctl -l | grep "$file" >/dev/null 2>&1; then - pass "$check" - resulttestjson "PASS" - currentScore=$((currentScore + 1)) - else - warn "$check" - saveRemediation --id "${id}" --rem "${remediation}" --imp "${remediationImpact}" - resulttestjson "WARN" - currentScore=$((currentScore - 1)) - fi - elif grep -s "$file" "$auditrules" | grep "^[^#;]" 2>/dev/null 1>&2; then - pass "$check" - resulttestjson "PASS" - currentScore=$((currentScore + 1)) + local doubtfulusers="" + if [ -n "$dockertrustusers" ]; then + for u in $(printf "%s" "$docker_users" | sed "s/,/ /g"); do + if ! printf "%s" "$dockertrustusers" | grep -q "$u" ; then + if [ -n "${doubtfulusers}" ]; then + doubtfulusers="${doubtfulusers},$u" + else + doubtfulusers="$u" + fi + fi + done else - warn "$check" - saveRemediation --id "${id}" --rem "${remediation}" --imp "${remediationImpact}" - resulttestjson "WARN" - currentScore=$((currentScore - 1)) + info -c "$check" + info " * Users: $docker_users" + logcheckresult "INFO" "doubtfulusers" "$docker_users" + fi + + if [ -n "${doubtfulusers}" ]; then + warn -s "$check" + warn " * Doubtful users: $doubtfulusers" + logcheckresult "WARN" "doubtfulusers" "$doubtfulusers" + fi + + if [ -z "${doubtfulusers}" ] && [ -n "${dockertrustusers}" ]; then + pass -s "$check" + logcheckresult "PASS" fi } -# 1.2.4 -check_1_2_4() { - local id="1.2.4" - local desc="Ensure auditing is configured for Docker files and directories - /var/lib/docker (Scored)" - local remediation="Install and configure auditd using command \'sudo apt-get install auditd\'. Add \'-w /var/lib/docker -k docker\' to the \'/etc/audit/rules.d/audit.rules\' file. Then restart the audit daemon using command \'service auditd restart\'." +check_1_2_3() { + local id="1.2.3" + local desc="Ensure auditing is configured for the Docker daemon (Scored)" + local remediation="Install and configure auditd using command sudo apt-get install auditd. Add -w /usr/bin/dockerd -k docker to the /etc/audit/rules.d/audit.rules file. Then restart the audit daemon using command service auditd restart." + local remediationImpact="Audit can generate large log files. So you need to make sure that they are rotated and archived periodically. Create a separate partition for audit logs to avoid filling up other critical partitions." + local check="$id - $desc" + starttestjson "$id" "$desc" + + file="/usr/bin/dockerd" + if command -v auditctl >/dev/null 2>&1; then + if auditctl -l | grep "$file" >/dev/null 2>&1; then + pass -s "$check" + logcheckresult "PASS" + else + warn -s "$check" + logcheckresult "WARN" + fi + elif grep -s "$file" "$auditrules" | grep "^[^#;]" 2>/dev/null 1>&2; then + pass -s "$check" + logcheckresult "PASS" + else + warn -s "$check" + logcheckresult "WARN" + fi +} + +check_1_2_4() { + local id="1.2.4" + local desc="Ensure auditing is configured for Docker files and directories - /var/lib/docker (Scored)" + local remediation="Install and configure auditd using command sudo apt-get install auditd. Add -w /var/lib/docker -k docker to the /etc/audit/rules.d/audit.rules file. Then restart the audit daemon using command service auditd restart." local remediationImpact="Audit can generate large log files. So you need to make sure that they are rotated and archived periodically. Create a separate partition for audit logs to avoid filling up other critical partitions." local check="$id - $desc" starttestjson "$id" "$desc" - totalChecks=$((totalChecks + 1)) directory="/var/lib/docker" if [ -d "$directory" ]; then if command -v auditctl >/dev/null 2>&1; then if auditctl -l | grep $directory >/dev/null 2>&1; then - pass "$check" - resulttestjson "PASS" - currentScore=$((currentScore + 1)) + pass -s "$check" + logcheckresult "PASS" else - warn "$check" - saveRemediation --id "${id}" --rem "${remediation}" --imp "${remediationImpact}" - resulttestjson "WARN" - currentScore=$((currentScore - 1)) + warn -s "$check" + logcheckresult "WARN" fi elif grep -s "$directory" "$auditrules" | grep "^[^#;]" 2>/dev/null 1>&2; then - pass "$check" - resulttestjson "PASS" - currentScore=$((currentScore + 1)) + pass -s "$check" + logcheckresult "PASS" else - warn "$check" - saveRemediation --id "${id}" --rem "${remediation}" --imp "${remediationImpact}" - resulttestjson "WARN" - currentScore=$((currentScore - 1)) + warn -s "$check" + logcheckresult "WARN" fi else - info "$check" + info -c "$check" info " * Directory not found" - saveRemediation --id "${id}" --rem "${remediation}" --imp "${remediationImpact}" - resulttestjson "INFO" "Directory not found" - currentScore=$((currentScore + 0)) + logcheckresult "INFO" "Directory not found" fi } -# 1.2.5 check_1_2_5() { local id="1.2.5" local desc="Ensure auditing is configured for Docker files and directories - /etc/docker (Scored)" - local remediation="Install and configure auditd using command \'sudo apt-get install auditd\'. Add \'-w /etc/docker -k docker\' to the \'/etc/audit/rules.d/audit.rules\' file. Then restart the audit daemon using command \'service auditd restart\'." + local remediation="Install and configure auditd using command sudo apt-get install auditd. Add -w /etc/docker -k docker to the /etc/audit/rules.d/audit.rules file. Then restart the audit daemon using command service auditd restart." local remediationImpact="Audit can generate large log files. So you need to make sure that they are rotated and archived periodically. Create a separate partition for audit logs to avoid filling up other critical partitions." local check="$id - $desc" starttestjson "$id" "$desc" - totalChecks=$((totalChecks + 1)) directory="/etc/docker" if [ -d "$directory" ]; then if command -v auditctl >/dev/null 2>&1; then if auditctl -l | grep $directory >/dev/null 2>&1; then - pass "$check" - resulttestjson "PASS" - currentScore=$((currentScore + 1)) + pass -s "$check" + logcheckresult "PASS" else - warn "$check" - saveRemediation --id "${id}" --rem "${remediation}" --imp "${remediationImpact}" - resulttestjson "WARN" - currentScore=$((currentScore - 1)) + warn -s "$check" + logcheckresult "WARN" fi elif grep -s "$directory" "$auditrules" | grep "^[^#;]" 2>/dev/null 1>&2; then - pass "$check" - resulttestjson "PASS" - currentScore=$((currentScore + 1)) + pass -s "$check" + logcheckresult "PASS" else - warn "$check" - saveRemediation --id "${id}" --rem "${remediation}" --imp "${remediationImpact}" - resulttestjson "WARN" - currentScore=$((currentScore - 1)) + warn -s "$check" + logcheckresult "WARN" fi else - info "$check" + info -c "$check" info " * Directory not found" - saveRemediation --id "${id}" --rem "${remediation}" --imp "${remediationImpact}" - resulttestjson "INFO" "Directory not found" - currentScore=$((currentScore + 0)) + logcheckresult "INFO" "Directory not found" fi } -# 1.2.6 check_1_2_6() { local id="1.2.6" local desc="Ensure auditing is configured for Docker files and directories - docker.service (Scored)" - local remediation="Install and configure auditd using command \'sudo apt-get install auditd\'. Add \'-w $(systemctl show -p FragmentPath docker.service | sed 's/.*=//') -k docker\' to the \'/etc/audit/rules.d/audit.rules\' file. Then restart the audit daemon using command \'service auditd restart\'." + local remediation + remediation="Install and configure auditd using command sudo apt-get install auditd. Add -w $(systemctl show -p FragmentPath docker.service | sed 's/.*=//') -k docker to the /etc/audit/rules.d/audit.rules file. Then restart the audit daemon using command service auditd restart." local remediationImpact="Audit can generate large log files. So you need to make sure that they are rotated and archived periodically. Create a separate partition for audit logs to avoid filling up other critical partitions." local check="$id - $desc" starttestjson "$id" "$desc" - totalChecks=$((totalChecks + 1)) file="$(get_service_file docker.service)" if [ -f "$file" ]; then if command -v auditctl >/dev/null 2>&1; then if auditctl -l | grep "$file" >/dev/null 2>&1; then - pass "$check" - resulttestjson "PASS" - currentScore=$((currentScore + 1)) + pass -s "$check" + logcheckresult "PASS" else - warn "$check" - saveRemediation --id "${id}" --rem "${remediation}" --imp "${remediationImpact}" - resulttestjson "WARN" - currentScore=$((currentScore - 1)) + warn -s "$check" + logcheckresult "WARN" fi elif grep -s "$file" "$auditrules" | grep "^[^#;]" 2>/dev/null 1>&2; then - pass "$check" - resulttestjson "PASS" - currentScore=$((currentScore + 1)) + pass -s "$check" + logcheckresult "PASS" else - warn "$check" - saveRemediation --id "${id}" --rem "${remediation}" --imp "${remediationImpact}" - resulttestjson "WARN" - currentScore=$((currentScore - 1)) + warn -s "$check" + logcheckresult "WARN" fi else - info "$check" + info -c "$check" info " * File not found" - saveRemediation --id "${id}" --rem "${remediation}" --imp "${remediationImpact}" - resulttestjson "INFO" "File not found" - currentScore=$((currentScore + 0)) + logcheckresult "INFO" "File not found" fi } -# 1.2.7 check_1_2_7() { local id="1.2.7" local desc="Ensure auditing is configured for Docker files and directories - docker.socket (Scored)" - local remediation="Install and configure auditd using command \'sudo apt-get install auditd\'. Add \'-w $(systemctl show -p FragmentPath docker.socket | sed 's/.*=//') -k docker\' to the \'/etc/audit/rules.d/audit.rules\' file. Then restart the audit daemon using command \'service auditd restart\'." + local remediation + remediation="Install and configure auditd using command sudo apt-get install auditd. Add -w $(systemctl show -p FragmentPath docker.socket | sed 's/.*=//') -k docker to the /etc/audit/rules.d/audit.rules file. Then restart the audit daemon using command service auditd restart." local remediationImpact="Audit can generate large log files. So you need to make sure that they are rotated and archived periodically. Create a separate partition for audit logs to avoid filling up other critical partitions." local check="$id - $desc" starttestjson "$id" "$desc" - totalChecks=$((totalChecks + 1)) file="$(get_service_file docker.socket)" if [ -e "$file" ]; then if command -v auditctl >/dev/null 2>&1; then if auditctl -l | grep "$file" >/dev/null 2>&1; then - pass "$check" - resulttestjson "PASS" - currentScore=$((currentScore + 1)) + pass -s "$check" + logcheckresult "PASS" else - warn "$check" - saveRemediation --id "${id}" --rem "${remediation}" --imp "${remediationImpact}" - resulttestjson "WARN" - currentScore=$((currentScore - 1)) + warn -s "$check" + logcheckresult "WARN" fi elif grep -s "$file" "$auditrules" | grep "^[^#;]" 2>/dev/null 1>&2; then - pass "$check" - resulttestjson "PASS" - currentScore=$((currentScore + 1)) + pass -s "$check" + logcheckresult "PASS" else - warn "$check" - saveRemediation --id "${id}" --rem "${remediation}" --imp "${remediationImpact}" - resulttestjson "WARN" - currentScore=$((currentScore - 1)) + warn -s "$check" + logcheckresult "WARN" fi else - info "$check" + info -c "$check" info " * File not found" - saveRemediation --id "${id}" --rem "${remediation}" --imp "${remediationImpact}" - resulttestjson "INFO" "File not found" - currentScore=$((currentScore + 0)) + logcheckresult "INFO" "File not found" fi } -# 1.2.8 check_1_2_8() { local id="1.2.8" local desc="Ensure auditing is configured for Docker files and directories - /etc/default/docker (Scored)" - local remediation="Install and configure auditd using command \'sudo apt-get install auditd\'. Add \'-w /etc/default/docker -k docker\' to the \'/etc/audit/rules.d/audit.rules\' file. Then restart the audit daemon using command \'service auditd restart\'." + local remediation="Install and configure auditd using command sudo apt-get install auditd. Add -w /etc/default/docker -k docker to the /etc/audit/rules.d/audit.rules file. Then restart the audit daemon using command service auditd restart." local remediationImpact="Audit can generate large log files. So you need to make sure that they are rotated and archived periodically. Create a separate partition for audit logs to avoid filling up other critical partitions." local check="$id - $desc" starttestjson "$id" "$desc" - totalChecks=$((totalChecks + 1)) file="/etc/default/docker" if [ -f "$file" ]; then if command -v auditctl >/dev/null 2>&1; then if auditctl -l | grep $file >/dev/null 2>&1; then - pass "$check" - resulttestjson "PASS" - currentScore=$((currentScore + 1)) + pass -s "$check" + logcheckresult "PASS" else - warn "$check" - saveRemediation --id "${id}" --rem "${remediation}" --imp "${remediationImpact}" - resulttestjson "WARN" - currentScore=$((currentScore - 1)) + warn -s "$check" + logcheckresult "WARN" fi elif grep -s "$file" "$auditrules" | grep "^[^#;]" 2>/dev/null 1>&2; then - pass "$check" - resulttestjson "PASS" - currentScore=$((currentScore + 1)) + pass -s "$check" + logcheckresult "PASS" else - warn "$check" - saveRemediation --id "${id}" --rem "${remediation}" --imp "${remediationImpact}" - resulttestjson "WARN" - currentScore=$((currentScore - 1)) + warn -s "$check" + logcheckresult "WARN" fi else - info "$check" + info -c "$check" info " * File not found" - saveRemediation --id "${id}" --rem "${remediation}" --imp "${remediationImpact}" - resulttestjson "INFO" "File not found" - currentScore=$((currentScore + 0)) + logcheckresult "INFO" "File not found" fi } -# 1.2.9 check_1_2_9() { local id="1.2.9" local desc="Ensure auditing is configured for Docker files and directories - /etc/sysconfig/docker (Scored)" - local remediation="Install and configure auditd using command \'sudo apt-get install auditd\'. Add \'-w /etc/sysconfig/docker -k docker\' to the \'/etc/audit/rules.d/audit.rules\' file. Then restart the audit daemon using command \'service auditd restart\'." + local remediation="Install and configure auditd using command sudo apt-get install auditd. Add -w /etc/sysconfig/docker -k docker to the /etc/audit/rules.d/audit.rules file. Then restart the audit daemon using command service auditd restart." local remediationImpact="Audit can generate large log files. So you need to make sure that they are rotated and archived periodically. Create a separate partition for audit logs to avoid filling up other critical partitions." local check="$id - $desc" starttestjson "$id" "$desc" - totalChecks=$((totalChecks + 1)) file="/etc/sysconfig/docker" if [ -f "$file" ]; then if command -v auditctl >/dev/null 2>&1; then if auditctl -l | grep $file >/dev/null 2>&1; then - pass "$check" - resulttestjson "PASS" - currentScore=$((currentScore + 1)) + pass -s "$check" + logcheckresult "PASS" else - warn "$check" - saveRemediation --id "${id}" --rem "${remediation}" --imp "${remediationImpact}" - resulttestjson "WARN" - currentScore=$((currentScore - 1)) + warn -s "$check" + logcheckresult "WARN" fi elif grep -s "$file" "$auditrules" | grep "^[^#;]" 2>/dev/null 1>&2; then - pass "$check" - resulttestjson "PASS" - currentScore=$((currentScore + 1)) + pass -s "$check" + logcheckresult "PASS" else - warn "$check" - saveRemediation --id "${id}" --rem "${remediation}" --imp "${remediationImpact}" - resulttestjson "WARN" - currentScore=$((currentScore - 1)) + warn -s "$check" + logcheckresult "WARN" fi else - info "$check" + info -c "$check" info " * File not found" - saveRemediation --id "${id}" --rem "${remediation}" --imp "${remediationImpact}" - resulttestjson "INFO" "File not found" - currentScore=$((currentScore + 0)) + logcheckresult "INFO" "File not found" fi } -# 1.2.10 check_1_2_10() { local id="1.2.10" local desc="Ensure auditing is configured for Docker files and directories - /etc/docker/daemon.json (Scored)" - local remediation="Install and configure auditd using command \'sudo apt-get install auditd\'. Add \'-w /etc/docker/daemon.json -k docker\' to the \'/etc/audit/rules.d/audit.rules\' file. Then restart the audit daemon using command \'service auditd restart\'." + local remediation="Install and configure auditd using command sudo apt-get install auditd. Add -w /etc/docker/daemon.json -k docker to the /etc/audit/rules.d/audit.rules file. Then restart the audit daemon using command service auditd restart." local remediationImpact="Audit can generate large log files. So you need to make sure that they are rotated and archived periodically. Create a separate partition for audit logs to avoid filling up other critical partitions." local check="$id - $desc" starttestjson "$id" "$desc" - totalChecks=$((totalChecks + 1)) file="/etc/docker/daemon.json" if [ -f "$file" ]; then if command -v auditctl >/dev/null 2>&1; then if auditctl -l | grep $file >/dev/null 2>&1; then - pass "$check" - resulttestjson "PASS" - currentScore=$((currentScore + 1)) + pass -s "$check" + logcheckresult "PASS" else - warn "$check" - saveRemediation --id "${id}" --rem "${remediation}" --imp "${remediationImpact}" - resulttestjson "WARN" - currentScore=$((currentScore - 1)) + warn -s "$check" + logcheckresult "WARN" fi elif grep -s "$file" "$auditrules" | grep "^[^#;]" 2>/dev/null 1>&2; then - pass "$check" - resulttestjson "PASS" - currentScore=$((currentScore + 1)) + pass -s "$check" + logcheckresult "PASS" else - warn "$check" - saveRemediation --id "${id}" --rem "${remediation}" --imp "${remediationImpact}" - resulttestjson "WARN" - currentScore=$((currentScore - 1)) + warn -s "$check" + logcheckresult "WARN" fi else - info "$check" + info -c "$check" info " * File not found" - saveRemediation --id "${id}" --rem "${remediation}" --imp "${remediationImpact}" - resulttestjson "INFO" "File not found" - currentScore=$((currentScore + 0)) + logcheckresult "INFO" "File not found" fi } -# 1.2.11 check_1_2_11() { local id="1.2.11" local desc="Ensure auditing is configured for Docker files and directories - /usr/bin/containerd (Scored)" - local remediation="Install and configure auditd using command \'sudo apt-get install auditd\'. Add \'-w /usr/bin/containerd -k docker\' to the \'/etc/audit/rules.d/audit.rules\' file. Then restart the audit daemon using command \'service auditd restart\'." + local remediation="Install and configure auditd using command sudo apt-get install auditd. Add -w /usr/bin/containerd -k docker to the /etc/audit/rules.d/audit.rules file. Then restart the audit daemon using command service auditd restart." local remediationImpact="Audit can generate large log files. So you need to make sure that they are rotated and archived periodically. Create a separate partition for audit logs to avoid filling up other critical partitions." local check="$id - $desc" starttestjson "$id" "$desc" - totalChecks=$((totalChecks + 1)) file="/usr/bin/containerd" if [ -f "$file" ]; then if command -v auditctl >/dev/null 2>&1; then if auditctl -l | grep $file >/dev/null 2>&1; then - pass "$check" - resulttestjson "PASS" - currentScore=$((currentScore + 1)) + pass -s "$check" + logcheckresult "PASS" else - warn "$check" - saveRemediation --id "${id}" --rem "${remediation}" --imp "${remediationImpact}" - resulttestjson "WARN" - currentScore=$((currentScore - 1)) + warn -s "$check" + logcheckresult "WARN" fi elif grep -s "$file" "$auditrules" | grep "^[^#;]" 2>/dev/null 1>&2; then - pass "$check" - resulttestjson "PASS" - currentScore=$((currentScore + 1)) + pass -s "$check" + logcheckresult "PASS" else - warn "$check" - saveRemediation --id "${id}" --rem "${remediation}" --imp "${remediationImpact}" - resulttestjson "WARN" - currentScore=$((currentScore - 1)) + warn -s "$check" + logcheckresult "WARN" fi else - info "$check" + info -c "$check" info " * File not found" - saveRemediation --id "${id}" --rem "${remediation}" --imp "${remediationImpact}" - resulttestjson "INFO" "File not found" - currentScore=$((currentScore + 0)) + logcheckresult "INFO" "File not found" fi } -# 1.2.12 check_1_2_12() { local id="1.2.12" local desc="Ensure auditing is configured for Docker files and directories - /usr/sbin/runc (Scored)" - local remediation="Install and configure auditd using command \'sudo apt-get install auditd\'. Add \'-w /usr/sbin/runc -k docker\' to the \'/etc/audit/rules.d/audit.rules\' file. Then restart the audit daemon using command \'service auditd restart\'." + local remediation="Install and configure auditd using command sudo apt-get install auditd. Add -w /usr/sbin/runc -k docker to the /etc/audit/rules.d/audit.rules file. Then restart the audit daemon using command service auditd restart." local remediationImpact="Audit can generate large log files. So you need to make sure that they are rotated and archived periodically. Create a separate partition for audit logs to avoid filling up other critical partitions." local check="$id - $desc" starttestjson "$id" "$desc" - totalChecks=$((totalChecks + 1)) file="/usr/sbin/runc" if [ -f "$file" ]; then if command -v auditctl >/dev/null 2>&1; then if auditctl -l | grep $file >/dev/null 2>&1; then - pass "$check" - resulttestjson "PASS" - currentScore=$((currentScore + 1)) + pass -s "$check" + logcheckresult "PASS" else - warn "$check" - saveRemediation --id "${id}" --rem "${remediation}" --imp "${remediationImpact}" - resulttestjson "WARN" - currentScore=$((currentScore - 1)) + warn -s "$check" + logcheckresult "WARN" fi elif grep -s "$file" "$auditrules" | grep "^[^#;]" 2>/dev/null 1>&2; then - pass "$check" - resulttestjson "PASS" - currentScore=$((currentScore + 1)) + pass -s "$check" + logcheckresult "PASS" else - warn "$check" - saveRemediation --id "${id}" --rem "${remediation}" --imp "${remediationImpact}" - resulttestjson "WARN" - currentScore=$((currentScore - 1)) + warn -s "$check" + logcheckresult "WARN" fi else - info "$check" + info -c "$check" info " * File not found" - saveRemediation --id "${id}" --rem "${remediation}" --imp "${remediationImpact}" - resulttestjson "INFO" "File not found" - currentScore=$((currentScore + 0)) + logcheckresult "INFO" "File not found" fi } diff --git a/tests/2_docker_daemon_configuration.sh b/tests/2_docker_daemon_configuration.sh index 00f87c1..5d56d4f 100644 --- a/tests/2_docker_daemon_configuration.sh +++ b/tests/2_docker_daemon_configuration.sh @@ -9,386 +9,306 @@ check_2() { startsectionjson "$id" "$desc" } -# 2.1 check_2_1() { local id="2.1" local desc="Ensure network traffic is restricted between containers on the default bridge (Scored)" - local remediation="Edit the Docker daemon configuration file to ensure that inter-container communication is disabled: \'icc\': false." + local remediation="Edit the Docker daemon configuration file to ensure that inter-container communication is disabled: icc: false." local remediationImpact="Inter-container communication is disabled on the default network bridge. If any communication between containers on the same host is desired, it needs to be explicitly defined using container linking or custom networks." local check="$id - $desc" starttestjson "$id" "$desc" - totalChecks=$((totalChecks + 1)) if get_docker_effective_command_line_args '--icc' | grep false >/dev/null 2>&1; then - pass "$check" - resulttestjson "PASS" - currentScore=$((currentScore + 1)) + pass -s "$check" + logcheckresult "PASS" elif get_docker_configuration_file_args 'icc' | grep "false" >/dev/null 2>&1; then - pass "$check" - resulttestjson "PASS" - currentScore=$((currentScore + 1)) + pass -s "$check" + logcheckresult "PASS" else - warn "$check" - saveRemediation --id "${id}" --rem "${remediation}" --imp "${remediationImpact}" - resulttestjson "WARN" - currentScore=$((currentScore - 1)) + warn -s "$check" + logcheckresult "WARN" fi } -# 2.2 check_2_2() { local id="2.2" local desc="Ensure the logging level is set to 'info' (Scored)" local check="$id - $desc" starttestjson "$id" "$desc" - totalChecks=$((totalChecks + 1)) if get_docker_configuration_file_args 'log-level' >/dev/null 2>&1; then if get_docker_configuration_file_args 'log-level' | grep info >/dev/null 2>&1; then - pass "$check" - resulttestjson "PASS" - currentScore=$((currentScore + 1)) + pass -s "$check" + logcheckresult "PASS" elif [ -z "$(get_docker_configuration_file_args 'log-level')" ]; then - pass "$check" - resulttestjson "PASS" - currentScore=$((currentScore + 1)) + pass -s "$check" + logcheckresult "PASS" else - warn "$check" - resulttestjson "WARN" - currentScore=$((currentScore - 1)) + warn -s "$check" + logcheckresult "WARN" fi elif get_docker_effective_command_line_args '-l'; then if get_docker_effective_command_line_args '-l' | grep "info" >/dev/null 2>&1; then - pass "$check" - resulttestjson "PASS" - currentScore=$((currentScore + 1)) + pass -s "$check" + logcheckresult "PASS" else - warn "$check" - resulttestjson "WARN" - currentScore=$((currentScore - 1)) + warn -s "$check" + logcheckresult "WARN" fi else - pass "$check" - resulttestjson "PASS" - currentScore=$((currentScore + 1)) + pass -s "$check" + logcheckresult "PASS" fi } -# 2.3 check_2_3() { local id="2.3" local desc="Ensure Docker is allowed to make changes to iptables (Scored)" local check="$id - $desc" starttestjson "$id" "$desc" - totalChecks=$((totalChecks + 1)) if get_docker_effective_command_line_args '--iptables' | grep "false" >/dev/null 2>&1; then - warn "$check" - resulttestjson "WARN" - currentScore=$((currentScore - 1)) + warn -s "$check" + logcheckresult "WARN" elif get_docker_configuration_file_args 'iptables' | grep "false" >/dev/null 2>&1; then - warn "$check" - resulttestjson "WARN" - currentScore=$((currentScore - 1)) + warn -s "$check" + logcheckresult "WARN" else - pass "$check" - resulttestjson "PASS" - currentScore=$((currentScore + 1)) + pass -s "$check" + logcheckresult "PASS" fi } -# 2.4 check_2_4() { local id="2.4" local desc="Ensure insecure registries are not used (Scored)" local check="$id - $desc" starttestjson "$id" "$desc" - totalChecks=$((totalChecks + 1)) if get_docker_effective_command_line_args '--insecure-registry' | grep "insecure-registry" >/dev/null 2>&1; then - warn "$check" - resulttestjson "WARN" - currentScore=$((currentScore - 1)) + warn -s "$check" + logcheckresult "WARN" elif ! [ -z "$(get_docker_configuration_file_args 'insecure-registries')" ]; then if get_docker_configuration_file_args 'insecure-registries' | grep '\[]' >/dev/null 2>&1; then - pass "$check" - resulttestjson "PASS" - currentScore=$((currentScore + 1)) + pass -s "$check" + logcheckresult "PASS" else - warn "$check" - resulttestjson "WARN" - currentScore=$((currentScore - 1)) + warn -s "$check" + logcheckresult "WARN" fi else - pass "$check" - resulttestjson "PASS" - currentScore=$((currentScore + 1)) + pass -s "$check" + logcheckresult "PASS" fi } -# 2.5 check_2_5() { local id="2.5" local desc="Ensure aufs storage driver is not used (Scored)" local check="$id - $desc" starttestjson "$id" "$desc" - totalChecks=$((totalChecks + 1)) if docker info 2>/dev/null | grep -e "^\sStorage Driver:\s*aufs\s*$" >/dev/null 2>&1; then - warn "$check" - resulttestjson "WARN" - currentScore=$((currentScore - 1)) + warn -s "$check" + logcheckresult "WARN" else - pass "$check" - resulttestjson "PASS" - currentScore=$((currentScore + 1)) + pass -s "$check" + logcheckresult "PASS" fi } -# 2.6 check_2_6() { local id="2.6" local desc="Ensure TLS authentication for Docker daemon is configured (Scored)" local check="$id - $desc" starttestjson "$id" "$desc" - totalChecks=$((totalChecks + 1)) if [ $(get_docker_configuration_file_args 'tcp://') ] || \ [ $(get_docker_cumulative_command_line_args '-H' | grep -vE '(unix|fd)://') >/dev/null 2>&1 ]; then if [ $(get_docker_configuration_file_args '"tlsverify":' | grep 'true') ] || \ [ $(get_docker_cumulative_command_line_args '--tlsverify' | grep 'tlsverify') >/dev/null 2>&1 ]; then - pass "$check" - resulttestjson "PASS" - currentScore=$((currentScore + 1)) + pass -s "$check" + logcheckresult "PASS" elif [ $(get_docker_configuration_file_args '"tls":' | grep 'true') ] || \ [ $(get_docker_cumulative_command_line_args '--tls' | grep 'tls$') >/dev/null 2>&1 ]; then - warn "$check" + warn -s "$check" warn " * Docker daemon currently listening on TCP with TLS, but no verification" - resulttestjson "WARN" "Docker daemon currently listening on TCP with TLS, but no verification" - currentScore=$((currentScore - 1)) + logcheckresult "WARN" "Docker daemon currently listening on TCP with TLS, but no verification" else - warn "$check" + warn -s "$check" warn " * Docker daemon currently listening on TCP without TLS" - resulttestjson "WARN" "Docker daemon currently listening on TCP without TLS" - currentScore=$((currentScore - 1)) + logcheckresult "WARN" "Docker daemon currently listening on TCP without TLS" fi else - info "$check" + info -c "$check" info " * Docker daemon not listening on TCP" - resulttestjson "INFO" "Docker daemon not listening on TCP" - currentScore=$((currentScore + 0)) + logcheckresult "INFO" "Docker daemon not listening on TCP" fi } -# 2.7 check_2_7() { local id="2.7" local desc="Ensure the default ulimit is configured appropriately (Not Scored)" local check="$id - $desc" starttestjson "$id" "$desc" - totalChecks=$((totalChecks + 1)) if get_docker_configuration_file_args 'default-ulimit' | grep -v '{}' >/dev/null 2>&1; then - pass "$check" - resulttestjson "PASS" - currentScore=$((currentScore + 1)) + pass -c "$check" + logcheckresult "PASS" elif get_docker_effective_command_line_args '--default-ulimit' | grep "default-ulimit" >/dev/null 2>&1; then - pass "$check" - resulttestjson "PASS" - currentScore=$((currentScore + 1)) + pass -c "$check" + logcheckresult "PASS" else - info "$check" + info -c "$check" info " * Default ulimit doesn't appear to be set" - resulttestjson "INFO" "Default ulimit doesn't appear to be set" - currentScore=$((currentScore + 0)) + logcheckresult "INFO" "Default ulimit doesn't appear to be set" fi } -# 2.8 check_2_8() { local id="2.8" local desc="Enable user namespace support (Scored)" local check="$id - $desc" starttestjson "$id" "$desc" - totalChecks=$((totalChecks + 1)) if get_docker_configuration_file_args 'userns-remap' | grep -v '""'; then - pass "$check" - resulttestjson "PASS" - currentScore=$((currentScore + 1)) + pass -s "$check" + logcheckresult "PASS" elif get_docker_effective_command_line_args '--userns-remap' | grep "userns-remap" >/dev/null 2>&1; then - pass "$check" - resulttestjson "PASS" - currentScore=$((currentScore + 1)) + pass -s "$check" + logcheckresult "PASS" else - warn "$check" - resulttestjson "WARN" - currentScore=$((currentScore - 1)) + warn -s "$check" + logcheckresult "WARN" fi } -# 2.9 check_2_9() { local id="2.9" local desc="Ensure the default cgroup usage has been confirmed (Scored)" local check="$id - $desc" starttestjson "$id" "$desc" - totalChecks=$((totalChecks + 1)) if get_docker_configuration_file_args 'cgroup-parent' | grep -v ''; then - warn "$check" + warn -s "$check" info " * Confirm cgroup usage" - resulttestjson "WARN" "Confirm cgroup usage" - currentScore=$((currentScore + 0)) + logcheckresult "WARN" "Confirm cgroup usage" elif get_docker_effective_command_line_args '--cgroup-parent' | grep "cgroup-parent" >/dev/null 2>&1; then - warn "$check" + warn -s "$check" info " * Confirm cgroup usage" - resulttestjson "WARN" "Confirm cgroup usage" - currentScore=$((currentScore + 0)) + logcheckresult "WARN" "Confirm cgroup usage" else - pass "$check" - resulttestjson "PASS" - currentScore=$((currentScore + 1)) + pass -s "$check" + logcheckresult "PASS" fi } -# 2.10 check_2_10() { local id="2.10" local desc="Ensure base device size is not changed until needed (Scored)" local check="$id - $desc" starttestjson "$id" "$desc" - totalChecks=$((totalChecks + 1)) if get_docker_configuration_file_args 'storage-opts' | grep "dm.basesize" >/dev/null 2>&1; then - warn "$check" - resulttestjson "WARN" - currentScore=$((currentScore - 1)) + warn -s "$check" + logcheckresult "WARN" elif get_docker_effective_command_line_args '--storage-opt' | grep "dm.basesize" >/dev/null 2>&1; then - warn "$check" - resulttestjson "WARN" - currentScore=$((currentScore - 1)) + warn -s "$check" + logcheckresult "WARN" else - pass "$check" - resulttestjson "PASS" - currentScore=$((currentScore + 1)) + pass -s "$check" + logcheckresult "PASS" fi } -# 2.11 check_2_11() { local id="2.11" local desc="Ensure that authorization for Docker client commands is enabled (Scored)" local check="$id - $desc" starttestjson "$id" "$desc" - totalChecks=$((totalChecks + 1)) if get_docker_configuration_file_args 'authorization-plugins' | grep -v '\[]'; then - pass "$check" - resulttestjson "PASS" - currentScore=$((currentScore + 1)) + pass -s "$check" + logcheckresult "PASS" elif get_docker_effective_command_line_args '--authorization-plugin' | grep "authorization-plugin" >/dev/null 2>&1; then - pass "$check" - resulttestjson "PASS" - currentScore=$((currentScore + 1)) + pass -s "$check" + logcheckresult "PASS" else - warn "$check" - resulttestjson "WARN" - currentScore=$((currentScore - 1)) + warn -s "$check" + logcheckresult "WARN" fi } -# 2.12 check_2_12() { local id="2.12" local desc="Ensure centralized and remote logging is configured (Scored)" local check="$id - $desc" starttestjson "$id" "$desc" - totalChecks=$((totalChecks + 1)) if docker info --format '{{ .LoggingDriver }}' | grep 'json-file' >/dev/null 2>&1; then - warn "$check" - resulttestjson "WARN" - currentScore=$((currentScore - 1)) + warn -s "$check" + logcheckresult "WARN" else - pass "$check" - resulttestjson "PASS" - currentScore=$((currentScore + 1)) + pass -s "$check" + logcheckresult "PASS" fi } -# 2.13 check_2_13() { local id="2.13" local desc="Ensure live restore is enabled (Scored)" local check="$id - $desc" starttestjson "$id" "$desc" - totalChecks=$((totalChecks + 1)) if docker info 2>/dev/null | grep -e "Live Restore Enabled:\s*true\s*" >/dev/null 2>&1; then - pass "$check" - resulttestjson "PASS" - currentScore=$((currentScore + 1)) + pass -s "$check" + logcheckresult "PASS" else if docker info 2>/dev/null | grep -e "Swarm:*\sactive\s*" >/dev/null 2>&1; then - pass "$check (Incompatible with swarm mode)" - resulttestjson "PASS" - currentScore=$((currentScore + 1)) + pass -s "$check (Incompatible with swarm mode)" + logcheckresult "PASS" elif get_docker_effective_command_line_args '--live-restore' | grep "live-restore" >/dev/null 2>&1; then - pass "$check" - resulttestjson "PASS" - currentScore=$((currentScore + 1)) + pass -s "$check" + logcheckresult "PASS" else - warn "$check" - resulttestjson "WARN" - currentScore=$((currentScore - 1)) + warn -s "$check" + logcheckresult "WARN" fi fi } -# 2.14 check_2_14() { local id="2.14" local desc="Ensure Userland Proxy is Disabled (Scored)" local check="$id - $desc" starttestjson "$id" "$desc" - totalChecks=$((totalChecks + 1)) if get_docker_configuration_file_args 'userland-proxy' | grep false >/dev/null 2>&1; then - pass "$check" - resulttestjson "PASS" - currentScore=$((currentScore + 1)) + pass -s "$check" + logcheckresult "PASS" elif get_docker_effective_command_line_args '--userland-proxy=false' 2>/dev/null | grep "userland-proxy=false" >/dev/null 2>&1; then - pass "$check" - resulttestjson "PASS" - currentScore=$((currentScore + 1)) + pass -s "$check" + logcheckresult "PASS" else - warn "$check" - resulttestjson "WARN" - currentScore=$((currentScore - 1)) + warn -s "$check" + logcheckresult "WARN" fi } -# 2.15 check_2_15() { local id="2.15" local desc="Ensure that a daemon-wide custom seccomp profile is applied if appropriate (Not Scored)" local check="$id - $desc" starttestjson "$id" "$desc" - totalChecks=$((totalChecks + 1)) if docker info --format '{{ .SecurityOptions }}' | grep 'name=seccomp,profile=default' 2>/dev/null 1>&2; then - pass "$check" - resulttestjson "PASS" - currentScore=$((currentScore + 1)) + pass -c "$check" + logcheckresult "PASS" else - info "$check" - resulttestjson "INFO" - currentScore=$((currentScore + 0)) + info -c "$check" + logcheckresult "INFO" fi } -# 2.16 check_2_16() { docker_version=$(docker version | grep -i -A2 '^server' | grep ' Version:' \ | awk '{print $NF; exit}' | tr -d '[:alpha:]-,.' | cut -c 1-4) @@ -398,45 +318,37 @@ check_2_16() { local check="$id - $desc" starttestjson "$id" "$desc" - totalChecks=$((totalChecks + 1)) if [ "$docker_version" -le 1903 ]; then if docker version -f '{{.Server.Experimental}}' | grep false 2>/dev/null 1>&2; then - pass "$check" - resulttestjson "PASS" - currentScore=$((currentScore + 1)) + pass -s "$check" + logcheckresult "PASS" else - warn "$check" - resulttestjson "WARN" - currentScore=$((currentScore - 1)) + warn -s "$check" + logcheckresult "WARN" fi else local desc="$desc (Deprecated)" local check="$id - $desc" - info "$desc" - resulttestjson "INFO" + info -c "$desc" + logcheckresult "INFO" fi } -# 2.17 check_2_17() { local id="2.17" local desc="Ensure containers are restricted from acquiring new privileges (Scored)" local check="$id - $desc" starttestjson "$id" "$desc" - totalChecks=$((totalChecks + 1)) if get_docker_effective_command_line_args '--no-new-privileges' | grep "no-new-privileges" >/dev/null 2>&1; then - pass "$check" - resulttestjson "PASS" - currentScore=$((currentScore + 1)) + pass -s "$check" + logcheckresult "PASS" elif get_docker_configuration_file_args 'no-new-privileges' | grep true >/dev/null 2>&1; then - pass "$check" - resulttestjson "PASS" - currentScore=$((currentScore + 1)) + pass -s "$check" + logcheckresult "PASS" else - warn "$check" - resulttestjson "WARN" - currentScore=$((currentScore - 1)) + warn -s "$check" + logcheckresult "WARN" fi } diff --git a/tests/3_docker_daemon_configuration_files.sh b/tests/3_docker_daemon_configuration_files.sh index f5ea624..f443b99 100644 --- a/tests/3_docker_daemon_configuration_files.sh +++ b/tests/3_docker_daemon_configuration_files.sh @@ -9,182 +9,150 @@ check_3() { startsectionjson "$id" "$desc" } -# 3.1 check_3_1() { local id="3.1" local desc="Ensure that the docker.service file ownership is set to root:root (Scored)" local check="$id - $desc" starttestjson "$id" "$desc" - totalChecks=$((totalChecks + 1)) file="$(get_service_file docker.service)" if [ -f "$file" ]; then if [ "$(stat -c %u%g $file)" -eq 00 ]; then - pass "$check" - resulttestjson "PASS" - currentScore=$((currentScore + 1)) + pass -s "$check" + logcheckresult "PASS" else - warn "$check" + warn -s "$check" warn " * Wrong ownership for $file" - resulttestjson "WARN" "Wrong ownership for $file" - currentScore=$((currentScore - 1)) + logcheckresult "WARN" "Wrong ownership for $file" fi else - info "$check" + info -c "$check" info " * File not found" - resulttestjson "INFO" "File not found" - currentScore=$((currentScore + 0)) + logcheckresult "INFO" "File not found" fi } -# 3.2 check_3_2() { local id="3.2" local desc="Ensure that docker.service file permissions are appropriately set (Scored)" local check="$id - $desc" starttestjson "$id" "$desc" - totalChecks=$((totalChecks + 1)) file="$(get_service_file docker.service)" if [ -f "$file" ]; then if [ "$(stat -c %a $file)" -le 644 ]; then - pass "$check" - resulttestjson "PASS" - currentScore=$((currentScore + 1)) + pass -s "$check" + logcheckresult "PASS" else - warn "$check" + warn -s "$check" warn " * Wrong permissions for $file" - resulttestjson "WARN" "Wrong permissions for $file" - currentScore=$((currentScore - 1)) + logcheckresult "WARN" "Wrong permissions for $file" fi else - info "$check" + info -c "$check" info " * File not found" - resulttestjson "INFO" "File not found" - currentScore=$((currentScore + 0)) + logcheckresult "INFO" "File not found" fi } -# 3.3 check_3_3() { local id="3.3" local desc="Ensure that docker.socket file ownership is set to root:root (Scored)" local check="$id - $desc" starttestjson "$id" "$desc" - totalChecks=$((totalChecks + 1)) file="$(get_service_file docker.socket)" if [ -f "$file" ]; then if [ "$(stat -c %u%g $file)" -eq 00 ]; then - pass "$check" - resulttestjson "PASS" - currentScore=$((currentScore + 1)) + pass -s "$check" + logcheckresult "PASS" else - warn "$check" + warn -s "$check" warn " * Wrong ownership for $file" - resulttestjson "WARN" "Wrong ownership for $file" - currentScore=$((currentScore - 1)) + logcheckresult "WARN" "Wrong ownership for $file" fi else - info "$check" + info -c "$check" info " * File not found" - resulttestjson "INFO" "File not found" - currentScore=$((currentScore + 0)) + logcheckresult "INFO" "File not found" fi } -# 3.4 check_3_4() { local id="3.4" local desc="Ensure that docker.socket file permissions are set to 644 or more restrictive (Scored)" local check="$id - $desc" starttestjson "$id" "$desc" - totalChecks=$((totalChecks + 1)) file="$(get_service_file docker.socket)" if [ -f "$file" ]; then if [ "$(stat -c %a $file)" -le 644 ]; then - pass "$check" - resulttestjson "PASS" - currentScore=$((currentScore + 1)) + pass -s "$check" + logcheckresult "PASS" else - warn "$check" + warn -s "$check" warn " * Wrong permissions for $file" - resulttestjson "WARN" "Wrong permissions for $file" - currentScore=$((currentScore - 1)) + logcheckresult "WARN" "Wrong permissions for $file" fi else - info "$check" + info -c "$check" info " * File not found" - resulttestjson "INFO" "File not found" - currentScore=$((currentScore + 0)) + logcheckresult "INFO" "File not found" fi } -# 3.5 check_3_5() { local id="3.5" local desc="Ensure that the /etc/docker directory ownership is set to root:root (Scored)" local check="$id - $desc" starttestjson "$id" "$desc" - totalChecks=$((totalChecks + 1)) directory="/etc/docker" if [ -d "$directory" ]; then if [ "$(stat -c %u%g $directory)" -eq 00 ]; then - pass "$check" - resulttestjson "PASS" - currentScore=$((currentScore + 1)) + pass -s "$check" + logcheckresult "PASS" else - warn "$check" + warn -s "$check" warn " * Wrong ownership for $directory" - resulttestjson "WARN" "Wrong ownership for $directory" - currentScore=$((currentScore - 1)) + logcheckresult "WARN" "Wrong ownership for $directory" fi else - info "$check" + info -c "$check" info " * Directory not found" - resulttestjson "INFO" "Directory not found" - currentScore=$((currentScore + 0)) + logcheckresult "INFO" "Directory not found" fi } -# 3.6 check_3_6() { local id="3.6" local desc="Ensure that /etc/docker directory permissions are set to 755 or more restrictively (Scored)" local check="$id - $desc" starttestjson "$id" "$desc" - totalChecks=$((totalChecks + 1)) directory="/etc/docker" if [ -d "$directory" ]; then if [ "$(stat -c %a $directory)" -le 755 ]; then - pass "$check" - resulttestjson "PASS" - currentScore=$((currentScore + 1)) + pass -s "$check" + logcheckresult "PASS" else - warn "$check" + warn -s "$check" warn " * Wrong permissions for $directory" - resulttestjson "WARN" "Wrong permissions for $directory" - currentScore=$((currentScore - 1)) + logcheckresult "WARN" "Wrong permissions for $directory" fi else - info "$check" + info -c "$check" info " * Directory not found" - resulttestjson "INFO" "Directory not found" - currentScore=$((currentScore + 0)) + logcheckresult "INFO" "Directory not found" fi } -# 3.7 check_3_7() { local id="3.7" local desc="Ensure that registry certificate file ownership is set to root:root (Scored)" local check="$id - $desc" starttestjson "$id" "$desc" - totalChecks=$((totalChecks + 1)) directory="/etc/docker/certs.d/" if [ -d "$directory" ]; then fail=0 @@ -195,31 +163,26 @@ check_3_7() { fi done if [ $fail -eq 1 ]; then - warn "$check" + warn -s "$check" warn " * Wrong ownership for $directory" - resulttestjson "WARN" "Wrong ownership for $directory" - currentScore=$((currentScore - 1)) + logcheckresult "WARN" "Wrong ownership for $directory" else - pass "$check" - resulttestjson "PASS" - currentScore=$((currentScore + 1)) + pass -s "$check" + logcheckresult "PASS" fi else - info "$check" + info -c "$check" info " * Directory not found" - resulttestjson "INFO" "Directory not found" - currentScore=$((currentScore + 0)) + logcheckresult "INFO" "Directory not found" fi } -# 3.8 check_3_8() { local id="3.8" local desc="Ensure that registry certificate file permissions are set to 444 or more restrictively (Scored)" local check="$id - $desc" starttestjson "$id" "$desc" - totalChecks=$((totalChecks + 1)) directory="/etc/docker/certs.d/" if [ -d "$directory" ]; then fail=0 @@ -230,31 +193,26 @@ check_3_8() { fi done if [ $fail -eq 1 ]; then - warn "$check" + warn -s "$check" warn " * Wrong permissions for $directory" - resulttestjson "WARN" "Wrong permissions for $directory" - currentScore=$((currentScore - 1)) + logcheckresult "WARN" "Wrong permissions for $directory" else - pass "$check" - resulttestjson "PASS" - currentScore=$((currentScore + 1)) + pass -s "$check" + logcheckresult "PASS" fi else - info "$check" + info -c "$check" info " * Directory not found" - resulttestjson "INFO" "Directory not found" - currentScore=$((currentScore + 0)) + logcheckresult "INFO" "Directory not found" fi } -# 3.9 check_3_9() { local id="3.9" local desc="Ensure that TLS CA certificate file ownership is set to root:root (Scored)" local check="$id - $desc" starttestjson "$id" "$desc" - totalChecks=$((totalChecks + 1)) if [ -n "$(get_docker_configuration_file_args 'tlscacert')" ]; then tlscacert=$(get_docker_configuration_file_args 'tlscacert') else @@ -262,31 +220,26 @@ check_3_9() { fi if [ -f "$tlscacert" ]; then if [ "$(stat -c %u%g "$tlscacert")" -eq 00 ]; then - pass "$check" - resulttestjson "PASS" - currentScore=$((currentScore + 1)) + pass -s "$check" + logcheckresult "PASS" else - warn "$check" + warn -s "$check" warn " * Wrong ownership for $tlscacert" - resulttestjson "WARN" "Wrong ownership for $tlscacert" - currentScore=$((currentScore - 1)) + logcheckresult "WARN" "Wrong ownership for $tlscacert" fi else - info "$check" + info -c "$check" info " * No TLS CA certificate found" - resulttestjson "INFO" "No TLS CA certificate found" - currentScore=$((currentScore + 0)) + logcheckresult "INFO" "No TLS CA certificate found" fi } -# 3.10 check_3_10() { local id="3.10" local desc="Ensure that TLS CA certificate file permissions are set to 444 or more restrictively (Scored)" local check="$id - $desc" starttestjson "$id" "$desc" - totalChecks=$((totalChecks + 1)) if [ -n "$(get_docker_configuration_file_args 'tlscacert')" ]; then tlscacert=$(get_docker_configuration_file_args 'tlscacert') else @@ -294,31 +247,26 @@ check_3_10() { fi if [ -f "$tlscacert" ]; then if [ "$(stat -c %a $tlscacert)" -le 444 ]; then - pass "$check" - resulttestjson "PASS" - currentScore=$((currentScore + 1)) + pass -s "$check" + logcheckresult "PASS" else - warn "$check" + warn -s "$check" warn " * Wrong permissions for $tlscacert" - resulttestjson "WARN" "Wrong permissions for $tlscacert" - currentScore=$((currentScore - 1)) + logcheckresult "WARN" "Wrong permissions for $tlscacert" fi else - info "$check" + info -c "$check" info " * No TLS CA certificate found" - resulttestjson "INFO" "No TLS CA certificate found" - currentScore=$((currentScore + 0)) + logcheckresult "INFO" "No TLS CA certificate found" fi } -# 3.11 check_3_11() { local id="3.11" local desc="Ensure that Docker server certificate file ownership is set to root:root (Scored)" local check="$id - $desc" starttestjson "$id" "$desc" - totalChecks=$((totalChecks + 1)) if [ -n "$(get_docker_configuration_file_args 'tlscert')" ]; then tlscert=$(get_docker_configuration_file_args 'tlscert') else @@ -326,31 +274,26 @@ check_3_11() { fi if [ -f "$tlscert" ]; then if [ "$(stat -c %u%g "$tlscert")" -eq 00 ]; then - pass "$check" - resulttestjson "PASS" - currentScore=$((currentScore + 1)) + pass -s "$check" + logcheckresult "PASS" else - warn "$check" + warn -s "$check" warn " * Wrong ownership for $tlscert" - resulttestjson "WARN" "Wrong ownership for $tlscert" - currentScore=$((currentScore - 1)) + logcheckresult "WARN" "Wrong ownership for $tlscert" fi else - info "$check" + info -c "$check" info " * No TLS Server certificate found" - resulttestjson "INFO" "No TLS Server certificate found" - currentScore=$((currentScore + 0)) + logcheckresult "INFO" "No TLS Server certificate found" fi } -# 3.12 check_3_12() { local id="3.12" local desc="Ensure that the Docker server certificate file permissions are set to 444 or more restrictively (Scored)" local check="$id - $desc" starttestjson "$id" "$desc" - totalChecks=$((totalChecks + 1)) if [ -n "$(get_docker_configuration_file_args 'tlscert')" ]; then tlscert=$(get_docker_configuration_file_args 'tlscert') else @@ -358,31 +301,26 @@ check_3_12() { fi if [ -f "$tlscert" ]; then if [ "$(stat -c %a $tlscert)" -le 444 ]; then - pass "$check" - resulttestjson "PASS" - currentScore=$((currentScore + 1)) + pass -s "$check" + logcheckresult "PASS" else - warn "$check" + warn -s "$check" warn " * Wrong permissions for $tlscert" - resulttestjson "WARN" "Wrong permissions for $tlscert" - currentScore=$((currentScore - 1)) + logcheckresult "WARN" "Wrong permissions for $tlscert" fi else - info "$check" + info -c "$check" info " * No TLS Server certificate found" - resulttestjson "INFO" "No TLS Server certificate found" - currentScore=$((currentScore + 0)) + logcheckresult "INFO" "No TLS Server certificate found" fi } -# 3.13 check_3_13() { local id="3.13" local desc="Ensure that the Docker server certificate key file ownership is set to root:root (Scored)" local check="$id - $desc" starttestjson "$id" "$desc" - totalChecks=$((totalChecks + 1)) if [ -n "$(get_docker_configuration_file_args 'tlskey')" ]; then tlskey=$(get_docker_configuration_file_args 'tlskey') else @@ -390,31 +328,26 @@ check_3_13() { fi if [ -f "$tlskey" ]; then if [ "$(stat -c %u%g "$tlskey")" -eq 00 ]; then - pass "$check" - resulttestjson "PASS" - currentScore=$((currentScore + 1)) + pass -s "$check" + logcheckresult "PASS" else - warn "$check" + warn -s "$check" warn " * Wrong ownership for $tlskey" - resulttestjson "WARN" "Wrong ownership for $tlskey" - currentScore=$((currentScore - 1)) + logcheckresult "WARN" "Wrong ownership for $tlskey" fi else - info "$check" + info -c "$check" info " * No TLS Key found" - resulttestjson "INFO" "No TLS Key found" - currentScore=$((currentScore + 0)) + logcheckresult "INFO" "No TLS Key found" fi } -# 3.14 check_3_14() { local id="3.14" local desc="Ensure that the Docker server certificate key file permissions are set to 400 (Scored)" local check="$id - $desc" starttestjson "$id" "$desc" - totalChecks=$((totalChecks + 1)) if [ -n "$(get_docker_configuration_file_args 'tlskey')" ]; then tlskey=$(get_docker_configuration_file_args 'tlskey') else @@ -422,244 +355,201 @@ check_3_14() { fi if [ -f "$tlskey" ]; then if [ "$(stat -c %a $tlskey)" -eq 400 ]; then - pass "$check" - resulttestjson "PASS" - currentScore=$((currentScore + 1)) + pass -s "$check" + logcheckresult "PASS" else - warn "$check" + warn -s "$check" warn " * Wrong permissions for $tlskey" - resulttestjson "WARN" "Wrong permissions for $tlskey" - currentScore=$((currentScore - 1)) + logcheckresult "WARN" "Wrong permissions for $tlskey" fi else - info "$check" + info -c "$check" info " * No TLS Key found" - resulttestjson "INFO" "No TLS Key found" - currentScore=$((currentScore + 0)) + logcheckresult "INFO" "No TLS Key found" fi } -# 3.15 check_3_15() { local id="3.15" local desc="Ensure that the Docker socket file ownership is set to root:docker (Scored)" local check="$id - $desc" starttestjson "$id" "$desc" - totalChecks=$((totalChecks + 1)) file="/var/run/docker.sock" if [ -S "$file" ]; then if [ "$(stat -c %U:%G $file)" = 'root:docker' ]; then - pass "$check" - resulttestjson "PASS" - currentScore=$((currentScore + 1)) + pass -s "$check" + logcheckresult "PASS" else - warn "$check" + warn -s "$check" warn " * Wrong ownership for $file" - resulttestjson "WARN" "Wrong ownership for $file" - currentScore=$((currentScore - 1)) + logcheckresult "WARN" "Wrong ownership for $file" fi else - info "$check" + info -c "$check" info " * File not found" - resulttestjson "INFO" "File not found" - currentScore=$((currentScore + 0)) + logcheckresult "INFO" "File not found" fi } -# 3.16 check_3_16() { local id="3.16" local desc="Ensure that the Docker socket file permissions are set to 660 or more restrictively (Scored)" local check="$id - $desc" starttestjson "$id" "$desc" - totalChecks=$((totalChecks + 1)) file="/var/run/docker.sock" if [ -S "$file" ]; then if [ "$(stat -c %a $file)" -le 660 ]; then - pass "$check" - resulttestjson "PASS" - currentScore=$((currentScore + 1)) + pass -s "$check" + logcheckresult "PASS" else - warn "$check" + warn -s "$check" warn " * Wrong permissions for $file" - resulttestjson "WARN" "Wrong permissions for $file" - currentScore=$((currentScore - 1)) + logcheckresult "WARN" "Wrong permissions for $file" fi else - info "$check" + info -c "$check" info " * File not found" - resulttestjson "INFO" "File not found" - currentScore=$((currentScore + 0)) + logcheckresult "INFO" "File not found" fi } -# 3.17 check_3_17() { local id="3.17" local desc="Ensure that the daemon.json file ownership is set to root:root (Scored)" local check="$id - $desc" starttestjson "$id" "$desc" - totalChecks=$((totalChecks + 1)) file="/etc/docker/daemon.json" if [ -f "$file" ]; then if [ "$(stat -c %U:%G $file)" = 'root:root' ]; then - pass "$check" - resulttestjson "PASS" - currentScore=$((currentScore + 1)) + pass -s "$check" + logcheckresult "PASS" else - warn "$check" + warn -s "$check" warn " * Wrong ownership for $file" - resulttestjson "WARN" "Wrong ownership for $file" - currentScore=$((currentScore - 1)) + logcheckresult "WARN" "Wrong ownership for $file" fi else - info "$check" + info -c "$check" info " * File not found" - resulttestjson "INFO" "File not found" - currentScore=$((currentScore + 0)) + logcheckresult "INFO" "File not found" fi } -# 3.18 check_3_18() { local id="3.18" local desc="Ensure that daemon.json file permissions are set to 644 or more restrictive (Scored)" local check="$id - $desc" starttestjson "$id" "$desc" - totalChecks=$((totalChecks + 1)) file="/etc/docker/daemon.json" if [ -f "$file" ]; then if [ "$(stat -c %a $file)" -le 644 ]; then - pass "$check" - resulttestjson "PASS" - currentScore=$((currentScore + 1)) + pass -s "$check" + logcheckresult "PASS" else - warn "$check" + warn -s "$check" warn " * Wrong permissions for $file" - resulttestjson "WARN" "Wrong permissions for $file" - currentScore=$((currentScore - 1)) + logcheckresult "WARN" "Wrong permissions for $file" fi else - info "$check" + info -c "$check" info " * File not found" - resulttestjson "INFO" "File not found" - currentScore=$((currentScore + 0)) + logcheckresult "INFO" "File not found" fi } -# 3.19 check_3_19() { local id="3.19" local desc="Ensure that the /etc/default/docker file ownership is set to root:root (Scored)" local check="$id - $desc" starttestjson "$id" "$desc" - totalChecks=$((totalChecks + 1)) file="/etc/default/docker" if [ -f "$file" ]; then if [ "$(stat -c %U:%G $file)" = 'root:root' ]; then - pass "$check" - resulttestjson "PASS" - currentScore=$((currentScore + 1)) + pass -s "$check" + logcheckresult "PASS" else - warn "$check" + warn -s "$check" warn " * Wrong ownership for $file" - resulttestjson "WARN" "Wrong ownership for $file" - currentScore=$((currentScore - 1)) + logcheckresult "WARN" "Wrong ownership for $file" fi else - info "$check" + info -c "$check" info " * File not found" - resulttestjson "INFO" "File not found" - currentScore=$((currentScore + 0)) + logcheckresult "INFO" "File not found" fi } -# 3.20 check_3_20() { local id="3.20" local desc="Ensure that the /etc/sysconfig/docker file ownership is set to root:root (Scored)" local check="$id - $desc" starttestjson "$id" "$desc" - totalChecks=$((totalChecks + 1)) file="/etc/sysconfig/docker" if [ -f "$file" ]; then if [ "$(stat -c %U:%G $file)" = 'root:root' ]; then - pass "$check" - resulttestjson "PASS" - currentScore=$((currentScore + 1)) + pass -s "$check" + logcheckresult "PASS" else - warn "$check" + warn -s "$check" warn " * Wrong ownership for $file" - resulttestjson "WARN" "Wrong ownership for $file" - currentScore=$((currentScore - 1)) + logcheckresult "WARN" "Wrong ownership for $file" fi else - info "$check" + info -c "$check" info " * File not found" - resulttestjson "INFO" "File not found" - currentScore=$((currentScore + 0)) + logcheckresult "INFO" "File not found" fi } -# 3.21 check_3_21() { local id="3.21" local desc="Ensure that the /etc/sysconfig/docker file permissions are set to 644 or more restrictively (Scored)" local check="$id - $desc" starttestjson "$id" "$desc" - totalChecks=$((totalChecks + 1)) file="/etc/sysconfig/docker" if [ -f "$file" ]; then if [ "$(stat -c %a $file)" -le 644 ]; then - pass "$check" - resulttestjson "PASS" - currentScore=$((currentScore + 1)) + pass -s "$check" + logcheckresult "PASS" else - warn "$check" + warn -s "$check" warn " * Wrong permissions for $file" - resulttestjson "WARN" "Wrong permissions for $file" - currentScore=$((currentScore - 1)) + logcheckresult "WARN" "Wrong permissions for $file" fi else - info "$check" + info -c "$check" info " * File not found" - resulttestjson "INFO" "File not found" - currentScore=$((currentScore + 0)) + logcheckresult "INFO" "File not found" fi } -# 3.22 check_3_22() { local id="3.22" local desc="Ensure that the /etc/default/docker file permissions are set to 644 or more restrictively (Scored)" local check="$id - $desc" starttestjson "$id" "$desc" - totalChecks=$((totalChecks + 1)) file="/etc/default/docker" if [ -f "$file" ]; then if [ "$(stat -c %a $file)" -le 644 ]; then - pass "$check" - resulttestjson "PASS" - currentScore=$((currentScore + 1)) + pass -s "$check" + logcheckresult "PASS" else - warn "$check" + warn -s "$check" warn " * Wrong permissions for $file" - resulttestjson "WARN" "Wrong permissions for $file" - currentScore=$((currentScore - 1)) + logcheckresult "WARN" "Wrong permissions for $file" fi else - info "$check" + info -c "$check" info " * File not found" - resulttestjson "INFO" "File not found" - currentScore=$((currentScore + 0)) + logcheckresult "INFO" "File not found" fi } diff --git a/tests/4_container_images.sh b/tests/4_container_images.sh index fcd4e42..72a3215 100644 --- a/tests/4_container_images.sh +++ b/tests/4_container_images.sh @@ -9,21 +9,17 @@ check_4() { startsectionjson "$id" "$desc" } -# 4.1 check_4_1() { local id="4.1" local desc="Ensure that a user for the container has been created (Scored)" local check="$id - $desc" starttestjson "$id" "$desc" - totalChecks=$((totalChecks + 1)) - # If container_users is empty, there are no running containers if [ -z "$containers" ]; then - info "$check" + info -c "$check" info " * No containers running" - resulttestjson "INFO" "No containers running" - currentScore=$((currentScore + 0)) + logcheckresult "INFO" "No containers running" else # We have some containers running, set failure flag to 0. Check for Users. fail=0 @@ -37,7 +33,7 @@ check_4_1() { if [ "$user" = "User=0" ] || [ "$user" = "User=root" ] || [ "$user" = "User=" ] || [ "$user" = "User=[]" ] || [ "$user" = "User=" ]; then # If it's the first container, fail the test if [ $fail -eq 0 ]; then - warn "$check" + warn -s "$check" warn " * Running as root: $c" root_containers="$root_containers $c" fail=1 @@ -49,94 +45,76 @@ check_4_1() { done # We went through all the containers and found none running as root if [ $fail -eq 0 ]; then - pass "$check" - resulttestjson "PASS" - currentScore=$((currentScore + 1)) + pass -s "$check" + logcheckresult "PASS" else - resulttestjson "WARN" "running as root" "$root_containers" - currentScore=$((currentScore - 1)) + logcheckresult "WARN" "running as root" "$root_containers" fi fi # Make the loop separator go back to space set +f; unset IFS } -# 4.2 check_4_2() { local id="4.2" local desc="Ensure that containers use only trusted base images (Not Scored)" local check="$id - $desc" starttestjson "$id" "$desc" - totalChecks=$((totalChecks + 1)) - note "$check" - resulttestjson "NOTE" - currentScore=$((currentScore + 0)) + note -c "$check" + logcheckresult "NOTE" } -# 4.3 check_4_3() { local id="4.3" local desc="Ensure that unnecessary packages are not installed in the container (Not Scored)" local check="$id - $desc" starttestjson "$id" "$desc" - totalChecks=$((totalChecks + 1)) - note "$check" - resulttestjson "NOTE" - currentScore=$((currentScore + 0)) + note -c "$check" + logcheckresult "NOTE" } -# 4.4 check_4_4() { local id="4.4" local desc="Ensure images are scanned and rebuilt to include security patches (Not Scored)" local check="$id - $desc" starttestjson "$id" "$desc" - totalChecks=$((totalChecks + 1)) - note "$check" - resulttestjson "NOTE" - currentScore=$((currentScore + 0)) + note -c "$check" + logcheckresult "NOTE" } -# 4.5 check_4_5() { local id="4.5" local desc="Ensure Content trust for Docker is Enabled (Scored)" - local remediation="Add DOCKER_CONTENT_TRUST variable to the /etc/environment file using command echo \'DOCKER_CONTENT_TRUST=1\' | sudo tee -a /etc/environment." + local remediation="Add DOCKER_CONTENT_TRUST variable to the /etc/environment file using command echo DOCKER_CONTENT_TRUST=1 | sudo tee -a /etc/environment." local remediationImpact="This prevents users from working with tagged images unless they contain a signature." local check="$id - $desc" starttestjson "$id" "$desc" - totalChecks=$((totalChecks + 1)) if [ "x$DOCKER_CONTENT_TRUST" = "x1" ]; then - pass "$check" - resulttestjson "PASS" - currentScore=$((currentScore + 1)) + pass -s "$check" + logcheckresult "PASS" else - warn "$check" - saveRemediation --id "${id}" --rem "${remediation}" --imp "${remediationImpact}" - resulttestjson "WARN" - currentScore=$((currentScore - 1)) + warn -s "$check" + logcheckresult "WARN" fi } -# 4.6 check_4_6() { local id="4.6" local desc="Ensure that HEALTHCHECK instructions have been added to container images (Scored)" local check="$id - $desc" starttestjson "$id" "$desc" - totalChecks=$((totalChecks + 1)) fail=0 no_health_images="" for img in $images; do if docker inspect --format='{{.Config.Healthcheck}}' "$img" 2>/dev/null | grep -e "" >/dev/null 2>&1; then if [ $fail -eq 0 ]; then fail=1 - warn "$check" + warn -s "$check" fi imgName=$(docker inspect --format='{{.RepoTags}}' "$img" 2>/dev/null) if ! [ "$imgName" = '[]' ]; then @@ -149,30 +127,26 @@ check_4_6() { fi done if [ $fail -eq 0 ]; then - pass "$check" - resulttestjson "PASS" - currentScore=$((currentScore + 1)) + pass -s "$check" + logcheckresult "PASS" else - resulttestjson "WARN" "Images w/o HEALTHCHECK" "$no_health_images" - currentScore=$((currentScore - 1)) + logcheckresult "WARN" "Images w/o HEALTHCHECK" "$no_health_images" fi } -# 4.7 check_4_7() { local id="4.7" local desc="Ensure update instructions are not used alone in the Dockerfile (Not Scored)" local check="$id - $desc" starttestjson "$id" "$desc" - totalChecks=$((totalChecks + 1)) fail=0 update_images="" for img in $images; do if docker history "$img" 2>/dev/null | grep -e "update" >/dev/null 2>&1; then if [ $fail -eq 0 ]; then fail=1 - info "$check" + info -c "$check" fi imgName=$(docker inspect --format='{{.RepoTags}}' "$img" 2>/dev/null) if ! [ "$imgName" = '[]' ]; then @@ -182,36 +156,29 @@ check_4_7() { fi done if [ $fail -eq 0 ]; then - pass "$check" - resulttestjson "PASS" - currentScore=$((currentScore + 0)) + pass -c "$check" + logcheckresult "PASS" else - resulttestjson "INFO" "Update instructions found" "$update_images" - currentScore=$((currentScore + 0)) + logcheckresult "INFO" "Update instructions found" "$update_images" fi } -# 4.8 check_4_8() { local id="4.8" local desc="Ensure setuid and setgid permissions are removed (Not Scored)" local check="$id - $desc" starttestjson "$id" "$desc" - totalChecks=$((totalChecks + 1)) - note "$check" - resulttestjson "NOTE" - currentScore=$((currentScore + 0)) + note -c "$check" + logcheckresult "NOTE" } -# 4.9 check_4_9() { local id="4.9" local desc="Ensure that COPY is used instead of ADD in Dockerfiles (Not Scored)" local check="$id - $desc" starttestjson "$id" "$desc" - totalChecks=$((totalChecks + 1)) fail=0 add_images="" for img in $images; do @@ -219,49 +186,41 @@ check_4_9() { sed '$d' | grep -q 'ADD'; then if [ $fail -eq 0 ]; then fail=1 - info "$check" + info -c "$check" fi imgName=$(docker inspect --format='{{.RepoTags}}' "$img" 2>/dev/null) if ! [ "$imgName" = '[]' ]; then info " * ADD in image history: $imgName" add_images="$add_images $imgName" fi - currentScore=$((currentScore + 0)) fi done if [ $fail -eq 0 ]; then - pass "$check" - resulttestjson "PASS" - currentScore=$((currentScore + 0)) + pass -c "$check" + logcheckresult "PASS" else - resulttestjson "INFO" "Images using ADD" "$add_images" + logcheckresult "INFO" "Images using ADD" "$add_images" fi } -# 4.10 check_4_10() { local id="4.10" local desc="Ensure secrets are not stored in Dockerfiles (Not Scored)" local check="$id - $desc" starttestjson "$id" "$desc" - totalChecks=$((totalChecks + 1)) - note "$check" - resulttestjson "NOTE" - currentScore=$((currentScore + 0)) + note -c "$check" + logcheckresult "NOTE" } -# 4.11 check_4_11() { local id="4.11" local desc="Ensure only verified packages are are installed (Not Scored)" local check="$id - $desc" starttestjson "$id" "$desc" - totalChecks=$((totalChecks + 1)) - note "$check" - resulttestjson "NOTE" - currentScore=$((currentScore + 0)) + note -c "$check" + logcheckresult "NOTE" } check_4_end() { diff --git a/tests/5_container_runtime.sh b/tests/5_container_runtime.sh index 6b7955d..76c4d6f 100644 --- a/tests/5_container_runtime.sh +++ b/tests/5_container_runtime.sh @@ -13,18 +13,15 @@ check_running_containers() { # If containers is empty, there are no running containers if [ -z "$containers" ]; then info " * No containers running, skipping Section 5" - running_containers=0 else - running_containers=1 # Make the loop separator be a new-line in POSIX compliant fashion set -f; IFS=$' ' fi } -# 5.1 check_5_1() { - if [ "$running_containers" -ne 1 ]; then + if [ -z "$containers" ]; then return fi @@ -33,8 +30,6 @@ check_5_1() { local check="$id - $desc" starttestjson "$id" "$desc" - totalChecks=$((totalChecks + 1)) - fail=0 no_apparmor_containers="" for c in $containers; do @@ -43,7 +38,7 @@ check_5_1() { if [ "$policy" = "AppArmorProfile=" ] || [ "$policy" = "AppArmorProfile=[]" ] || [ "$policy" = "AppArmorProfile=" ] || [ "$policy" = "AppArmorProfile=unconfined" ]; then # If it's the first container, fail the test if [ $fail -eq 0 ]; then - warn "$check" + warn -s "$check" warn " * No AppArmorProfile Found: $c" no_apparmor_containers="$no_apparmor_containers $c" fail=1 @@ -55,18 +50,15 @@ check_5_1() { done # We went through all the containers and found none without AppArmor if [ $fail -eq 0 ]; then - pass "$check" - resulttestjson "PASS" - currentScore=$((currentScore + 1)) + pass -s "$check" + logcheckresult "PASS" else - resulttestjson "WARN" "Containers with no AppArmorProfile" "$no_apparmor_containers" - currentScore=$((currentScore - 1)) + logcheckresult "WARN" "Containers with no AppArmorProfile" "$no_apparmor_containers" fi } -# 5.2 check_5_2() { - if [ "$running_containers" -ne 1 ]; then + if [ -z "$containers" ]; then return fi @@ -75,8 +67,6 @@ check_5_2() { local check="$id - $desc" starttestjson "$id" "$desc" - totalChecks=$((totalChecks + 1)) - fail=0 no_securityoptions_containers="" for c in $containers; do @@ -85,7 +75,7 @@ check_5_2() { if [ "$policy" = "SecurityOpt=" ] || [ "$policy" = "SecurityOpt=[]" ] || [ "$policy" = "SecurityOpt=" ]; then # If it's the first container, fail the test if [ $fail -eq 0 ]; then - warn "$check" + warn -s "$check" warn " * No SecurityOptions Found: $c" no_securityoptions_containers="$no_securityoptions_containers $c" fail=1 @@ -97,18 +87,15 @@ check_5_2() { done # We went through all the containers and found none without SELinux if [ $fail -eq 0 ]; then - pass "$check" - resulttestjson "PASS" - currentScore=$((currentScore + 1)) + pass -s "$check" + logcheckresult "PASS" else - resulttestjson "WARN" "Containers with no SecurityOptions" "$no_securityoptions_containers" - currentScore=$((currentScore - 1)) + logcheckresult "WARN" "Containers with no SecurityOptions" "$no_securityoptions_containers" fi } -# 5.3 check_5_3() { - if [ "$running_containers" -ne 1 ]; then + if [ -z "$containers" ]; then return fi @@ -117,8 +104,6 @@ check_5_3() { local check="$id - $desc" starttestjson "$id" "$desc" - totalChecks=$((totalChecks + 1)) - fail=0 caps_containers="" for c in $containers; do @@ -130,7 +115,7 @@ check_5_3() { if [ "$caps" != 'CapAdd=' ] && [ "$caps" != 'CapAdd=[]' ] && [ "$caps" != 'CapAdd=' ] && [ "$caps" != 'CapAdd=' ]; then # If it's the first container, fail the test if [ $fail -eq 0 ]; then - warn "$check" + warn -s "$check" warn " * Capabilities added: $caps to $c" caps_containers="$caps_containers $c" fail=1 @@ -142,18 +127,15 @@ check_5_3() { done # We went through all the containers and found none with extra capabilities if [ $fail -eq 0 ]; then - pass "$check" - resulttestjson "PASS" - currentScore=$((currentScore + 1)) + pass -s "$check" + logcheckresult "PASS" else - resulttestjson "WARN" "Capabilities added for containers" "$caps_containers" - currentScore=$((currentScore - 1)) + logcheckresult "WARN" "Capabilities added for containers" "$caps_containers" fi } -# 5.4 check_5_4() { - if [ "$running_containers" -ne 1 ]; then + if [ -z "$containers" ]; then return fi @@ -162,8 +144,6 @@ check_5_4() { local check="$id - $desc" starttestjson "$id" "$desc" - totalChecks=$((totalChecks + 1)) - fail=0 privileged_containers="" for c in $containers; do @@ -172,7 +152,7 @@ check_5_4() { if [ "$privileged" = "true" ]; then # If it's the first container, fail the test if [ $fail -eq 0 ]; then - warn "$check" + warn -s "$check" warn " * Container running in Privileged mode: $c" privileged_containers="$privileged_containers $c" fail=1 @@ -184,18 +164,15 @@ check_5_4() { done # We went through all the containers and found no privileged containers if [ $fail -eq 0 ]; then - pass "$check" - resulttestjson "PASS" - currentScore=$((currentScore + 1)) + pass -s "$check" + logcheckresult "PASS" else - resulttestjson "WARN" "Containers running in privileged mode" "$privileged_containers" - currentScore=$((currentScore - 1)) + logcheckresult "WARN" "Containers running in privileged mode" "$privileged_containers" fi } -# 5.5 check_5_5() { - if [ "$running_containers" -ne 1 ]; then + if [ -z "$containers" ]; then return fi @@ -204,8 +181,6 @@ check_5_5() { local check="$id - $desc" starttestjson "$id" "$desc" - totalChecks=$((totalChecks + 1)) - # List of sensitive directories to test for. Script uses new-lines as a separator. # Note the lack of identation. It needs it for the substring comparison. sensitive_dirs='/ @@ -233,7 +208,7 @@ check_5_5() { if [ $sensitive -eq 1 ]; then # If it's the first container, fail the test if [ $fail -eq 0 ]; then - warn "$check" + warn -s "$check" warn " * Sensitive directory $v mounted in: $c" sensitive_mount_containers="$sensitive_mount_containers $c:$v" fail=1 @@ -246,18 +221,15 @@ check_5_5() { done # We went through all the containers and found none with sensitive mounts if [ $fail -eq 0 ]; then - pass "$check" - resulttestjson "PASS" - currentScore=$((currentScore + 1)) + pass -s "$check" + logcheckresult "PASS" else - resulttestjson "WARN" "Containers with sensitive directories mounted" "$sensitive_mount_containers" - currentScore=$((currentScore - 1)) + logcheckresult "WARN" "Containers with sensitive directories mounted" "$sensitive_mount_containers" fi } -# 5.6 check_5_6() { - if [ "$running_containers" -ne 1 ]; then + if [ -z "$containers" ]; then return fi @@ -266,8 +238,6 @@ check_5_6() { local check="$id - $desc" starttestjson "$id" "$desc" - totalChecks=$((totalChecks + 1)) - fail=0 ssh_exec_containers="" printcheck=0 @@ -277,7 +247,7 @@ check_5_6() { if [ "$processes" -ge 1 ]; then # If it's the first container, fail the test if [ $fail -eq 0 ]; then - warn "$check" + warn -s "$check" warn " * Container running sshd: $c" ssh_exec_containers="$ssh_exec_containers $c" fail=1 @@ -291,7 +261,7 @@ check_5_6() { exec_check=$(docker exec "$c" ps -el 2>/dev/null) if [ $? -eq 255 ]; then if [ $printcheck -eq 0 ]; then - warn "$check" + warn -s "$check" printcheck=1 fi warn " * Docker exec fails: $c" @@ -302,18 +272,15 @@ check_5_6() { done # We went through all the containers and found none with sshd if [ $fail -eq 0 ]; then - pass "$check" - resulttestjson "PASS" - currentScore=$((currentScore + 1)) + pass -s "$check" + logcheckresult "PASS" else - resulttestjson "WARN" "Containers with sshd/docker exec failures" "$ssh_exec_containers" - currentScore=$((currentScore - 1)) + logcheckresult "WARN" "Containers with sshd/docker exec failures" "$ssh_exec_containers" fi } -# 5.7 check_5_7() { - if [ "$running_containers" -ne 1 ]; then + if [ -z "$containers" ]; then return fi @@ -322,8 +289,6 @@ check_5_7() { local check="$id - $desc" starttestjson "$id" "$desc" - totalChecks=$((totalChecks + 1)) - fail=0 privileged_port_containers="" for c in $containers; do @@ -335,7 +300,7 @@ check_5_7() { if [ -n "$port" ] && [ "$port" -lt 1024 ]; then # If it's the first container, fail the test if [ $fail -eq 0 ]; then - warn "$check" + warn -s "$check" warn " * Privileged Port in use: $port in $c" privileged_port_containers="$privileged_port_containers $c:$port" fail=1 @@ -348,18 +313,15 @@ check_5_7() { done # We went through all the containers and found no privileged ports if [ $fail -eq 0 ]; then - pass "$check" - resulttestjson "PASS" - currentScore=$((currentScore + 1)) + pass -s "$check" + logcheckresult "PASS" else - resulttestjson "WARN" "Containers using privileged ports" "$privileged_port_containers" - currentScore=$((currentScore - 1)) + logcheckresult "WARN" "Containers using privileged ports" "$privileged_port_containers" fi } -# 5.8 check_5_8() { - if [ "$running_containers" -ne 1 ]; then + if [ -z "$containers" ]; then return fi @@ -368,15 +330,12 @@ check_5_8() { local check="$id - $desc" starttestjson "$id" "$desc" - totalChecks=$((totalChecks + 1)) - note "$check" - resulttestjson "NOTE" - currentScore=$((currentScore + 0)) + note -c "$check" + logcheckresult "NOTE" } -# 5.9 check_5_9() { - if [ "$running_containers" -ne 1 ]; then + if [ -z "$containers" ]; then return fi @@ -385,8 +344,6 @@ check_5_9() { local check="$id - $desc" starttestjson "$id" "$desc" - totalChecks=$((totalChecks + 1)) - fail=0 net_host_containers="" for c in $containers; do @@ -395,7 +352,7 @@ check_5_9() { if [ "$mode" = "NetworkMode=host" ]; then # If it's the first container, fail the test if [ $fail -eq 0 ]; then - warn "$check" + warn -s "$check" warn " * Container running with networking mode 'host': $c" net_host_containers="$net_host_containers $c" fail=1 @@ -407,18 +364,15 @@ check_5_9() { done # We went through all the containers and found no Network Mode host if [ $fail -eq 0 ]; then - pass "$check" - resulttestjson "PASS" - currentScore=$((currentScore + 0)) + pass -s "$check" + logcheckresult "PASS" else - resulttestjson "WARN" "Containers running with networking mode 'host'" "$net_host_containers" - currentScore=$((currentScore - 1)) + logcheckresult "WARN" "Containers running with networking mode 'host'" "$net_host_containers" fi } -# 5.10 check_5_10() { - if [ "$running_containers" -ne 1 ]; then + if [ -z "$containers" ]; then return fi @@ -427,8 +381,6 @@ check_5_10() { local check="$id - $desc" starttestjson "$id" "$desc" - totalChecks=$((totalChecks + 1)) - fail=0 mem_unlimited_containers="" for c in $containers; do @@ -441,30 +393,27 @@ check_5_10() { if [ "$memory" = "0" ]; then # If it's the first container, fail the test if [ $fail -eq 0 ]; then - warn "$check" - warn " * Container running without memory restrictions: $c" + warn -s "$check" + warn " * Container running without memory restrictions: $c" mem_unlimited_containers="$mem_unlimited_containers $c" fail=1 else - warn " * Container running without memory restrictions: $c" + warn " * Container running without memory restrictions: $c" mem_unlimited_containers="$mem_unlimited_containers $c" fi fi done # We went through all the containers and found no lack of Memory restrictions if [ $fail -eq 0 ]; then - pass "$check" - resulttestjson "PASS" - currentScore=$((currentScore + 1)) + pass -s "$check" + logcheckresult "PASS" else - resulttestjson "WARN" "Container running without memory restrictions" "$mem_unlimited_containers" - currentScore=$((currentScore - 1)) + logcheckresult "WARN" "Container running without memory restrictions" "$mem_unlimited_containers" fi } -# 5.11 check_5_11() { - if [ "$running_containers" -ne 1 ]; then + if [ -z "$containers" ]; then return fi @@ -473,8 +422,6 @@ check_5_11() { local check="$id - $desc" starttestjson "$id" "$desc" - totalChecks=$((totalChecks + 1)) - fail=0 cpu_unlimited_containers="" for c in $containers; do @@ -487,30 +434,27 @@ check_5_11() { if [ "$shares" = "0" ]; then # If it's the first container, fail the test if [ $fail -eq 0 ]; then - warn "$check" - warn " * Container running without CPU restrictions: $c" + warn -s "$check" + warn " * Container running without CPU restrictions: $c" cpu_unlimited_containers="$cpu_unlimited_containers $c" fail=1 else - warn " * Container running without CPU restrictions: $c" + warn " * Container running without CPU restrictions: $c" cpu_unlimited_containers="$cpu_unlimited_containers $c" fi fi done # We went through all the containers and found no lack of CPUShare restrictions if [ $fail -eq 0 ]; then - pass "$check" - resulttestjson "PASS" - currentScore=$((currentScore + 1)) + pass -s "$check" + logcheckresult "PASS" else - resulttestjson "WARN" "Containers running without CPU restrictions" "$cpu_unlimited_containers" - currentScore=$((currentScore - 1)) + logcheckresult "WARN" "Containers running without CPU restrictions" "$cpu_unlimited_containers" fi } -# 5.12 check_5_12() { - if [ "$running_containers" -ne 1 ]; then + if [ -z "$containers" ]; then return fi @@ -519,8 +463,6 @@ check_5_12() { local check="$id - $desc" starttestjson "$id" "$desc" - totalChecks=$((totalChecks + 1)) - fail=0 fsroot_mount_containers="" for c in $containers; do @@ -529,30 +471,27 @@ check_5_12() { if [ "$read_status" = "false" ]; then # If it's the first container, fail the test if [ $fail -eq 0 ]; then - warn "$check" - warn " * Container running with root FS mounted R/W: $c" + warn -s "$check" + warn " * Container running with root FS mounted R/W: $c" fsroot_mount_containers="$fsroot_mount_containers $c" fail=1 else - warn " * Container running with root FS mounted R/W: $c" + warn " * Container running with root FS mounted R/W: $c" fsroot_mount_containers="$fsroot_mount_containers $c" fi fi done # We went through all the containers and found no R/W FS mounts if [ $fail -eq 0 ]; then - pass "$check" - resulttestjson "PASS" - currentScore=$((currentScore + 1)) + pass -s "$check" + logcheckresult "PASS" else - resulttestjson "WARN" "Containers running with root FS mounted R/W" "$fsroot_mount_containers" - currentScore=$((currentScore - 1)) + logcheckresult "WARN" "Containers running with root FS mounted R/W" "$fsroot_mount_containers" fi } -# 5.13 check_5_13() { - if [ "$running_containers" -ne 1 ]; then + if [ -z "$containers" ]; then return fi @@ -561,8 +500,6 @@ check_5_13() { local check="$id - $desc" starttestjson "$id" "$desc" - totalChecks=$((totalChecks + 1)) - fail=0 incoming_unbound_containers="" for c in $containers; do @@ -570,12 +507,12 @@ check_5_13() { if [ "$ip" = "0.0.0.0" ]; then # If it's the first container, fail the test if [ $fail -eq 0 ]; then - warn "$check" - warn " * Port being bound to wildcard IP: $ip in $c" + warn -s "$check" + warn " * Port being bound to wildcard IP: $ip in $c" incoming_unbound_containers="$incoming_unbound_containers $c:$ip" fail=1 else - warn " * Port being bound to wildcard IP: $ip in $c" + warn " * Port being bound to wildcard IP: $ip in $c" incoming_unbound_containers="$incoming_unbound_containers $c:$ip" fi fi @@ -583,18 +520,15 @@ check_5_13() { done # We went through all the containers and found no ports bound to 0.0.0.0 if [ $fail -eq 0 ]; then - pass "$check" - resulttestjson "PASS" - currentScore=$((currentScore + 1)) + pass -s "$check" + logcheckresult "PASS" else - resulttestjson "WARN" "Containers with port bound to wildcard IP" "$incoming_unbound_containers" - currentScore=$((currentScore - 1)) + logcheckresult "WARN" "Containers with port bound to wildcard IP" "$incoming_unbound_containers" fi } -# 5.14 check_5_14() { - if [ "$running_containers" -ne 1 ]; then + if [ -z "$containers" ]; then return fi @@ -603,8 +537,6 @@ check_5_14() { local check="$id - $desc" starttestjson "$id" "$desc" - totalChecks=$((totalChecks + 1)) - fail=0 maxretry_unset_containers="" for c in $containers; do @@ -613,30 +545,27 @@ check_5_14() { if [ "$policy" != "MaximumRetryCount=5" ]; then # If it's the first container, fail the test if [ $fail -eq 0 ]; then - warn "$check" - warn " * MaximumRetryCount is not set to 5: $c" + warn -s "$check" + warn " * MaximumRetryCount is not set to 5: $c" maxretry_unset_containers="$maxretry_unset_containers $c" fail=1 else - warn " * MaximumRetryCount is not set to 5: $c" + warn " * MaximumRetryCount is not set to 5: $c" maxretry_unset_containers="$maxretry_unset_containers $c" fi fi done # We went through all the containers and they all had MaximumRetryCount=5 if [ $fail -eq 0 ]; then - pass "$check" - resulttestjson "PASS" - currentScore=$((currentScore + 1)) + pass -s "$check" + logcheckresult "PASS" else - resulttestjson "WARN" "Containers with MaximumRetryCount not set to 5" "$maxretry_unset_containers" - currentScore=$((currentScore - 1)) + logcheckresult "WARN" "Containers with MaximumRetryCount not set to 5" "$maxretry_unset_containers" fi } -# 5.15 check_5_15() { - if [ "$running_containers" -ne 1 ]; then + if [ -z "$containers" ]; then return fi @@ -645,8 +574,6 @@ check_5_15() { local check="$id - $desc" starttestjson "$id" "$desc" - totalChecks=$((totalChecks + 1)) - fail=0 pidns_shared_containers="" for c in $containers; do @@ -655,30 +582,27 @@ check_5_15() { if [ "$mode" = "PidMode=host" ]; then # If it's the first container, fail the test if [ $fail -eq 0 ]; then - warn "$check" - warn " * Host PID namespace being shared with: $c" + warn -s "$check" + warn " * Host PID namespace being shared with: $c" pidns_shared_containers="$pidns_shared_containers $c" fail=1 else - warn " * Host PID namespace being shared with: $c" + warn " * Host PID namespace being shared with: $c" pidns_shared_containers="$pidns_shared_containers $c" fi fi done # We went through all the containers and found none with PidMode as host if [ $fail -eq 0 ]; then - pass "$check" - resulttestjson "PASS" - currentScore=$((currentScore + 1)) + pass -s "$check" + logcheckresult "PASS" else - resulttestjson "WARN" "Containers sharing host PID namespace" "$pidns_shared_containers" - currentScore=$((currentScore - 1)) + logcheckresult "WARN" "Containers sharing host PID namespace" "$pidns_shared_containers" fi } -# 5.16 check_5_16() { - if [ "$running_containers" -ne 1 ]; then + if [ -z "$containers" ]; then return fi @@ -687,8 +611,6 @@ check_5_16() { local check="$id - $desc" starttestjson "$id" "$desc" - totalChecks=$((totalChecks + 1)) - fail=0 ipcns_shared_containers="" for c in $containers; do @@ -697,30 +619,27 @@ check_5_16() { if [ "$mode" = "IpcMode=host" ]; then # If it's the first container, fail the test if [ $fail -eq 0 ]; then - warn "$check" - warn " * Host IPC namespace being shared with: $c" + warn -s "$check" + warn " * Host IPC namespace being shared with: $c" ipcns_shared_containers="$ipcns_shared_containers $c" fail=1 else - warn " * Host IPC namespace being shared with: $c" + warn " * Host IPC namespace being shared with: $c" ipcns_shared_containers="$ipcns_shared_containers $c" fi fi done # We went through all the containers and found none with IPCMode as host if [ $fail -eq 0 ]; then - pass "$check" - resulttestjson "PASS" - currentScore=$((currentScore + 1)) + pass -s "$check" + logcheckresult "PASS" else - resulttestjson "WARN" "Containers sharing host IPC namespace" "$ipcns_shared_containers" - currentScore=$((currentScore - 1)) + logcheckresult "WARN" "Containers sharing host IPC namespace" "$ipcns_shared_containers" fi } -# 5.17 check_5_17() { - if [ "$running_containers" -ne 1 ]; then + if [ -z "$containers" ]; then return fi @@ -729,8 +648,6 @@ check_5_17() { local check="$id - $desc" starttestjson "$id" "$desc" - totalChecks=$((totalChecks + 1)) - fail=0 hostdev_exposed_containers="" for c in $containers; do @@ -739,30 +656,27 @@ check_5_17() { if [ "$devices" != "Devices=" ] && [ "$devices" != "Devices=[]" ] && [ "$devices" != "Devices=" ]; then # If it's the first container, fail the test if [ $fail -eq 0 ]; then - info "$check" - info " * Container has devices exposed directly: $c" + info -c "$check" + info " * Container has devices exposed directly: $c" hostdev_exposed_containers="$hostdev_exposed_containers $c" fail=1 else - info " * Container has devices exposed directly: $c" + info " * Container has devices exposed directly: $c" hostdev_exposed_containers="$hostdev_exposed_containers $c" fi fi done # We went through all the containers and found none with devices if [ $fail -eq 0 ]; then - pass "$check" - resulttestjson "PASS" - currentScore=$((currentScore + 1)) + pass -c "$check" + logcheckresult "PASS" else - resulttestjson "INFO" "Containers with host devices exposed directly" "$hostdev_exposed_containers" - currentScore=$((currentScore + 0)) + logcheckresult "INFO" "Containers with host devices exposed directly" "$hostdev_exposed_containers" fi } -# 5.18 check_5_18() { - if [ "$running_containers" -ne 1 ]; then + if [ -z "$containers" ]; then return fi @@ -771,8 +685,6 @@ check_5_18() { local check="$id - $desc" starttestjson "$id" "$desc" - totalChecks=$((totalChecks + 1)) - fail=0 no_ulimit_containers="" for c in $containers; do @@ -781,30 +693,27 @@ check_5_18() { if [ "$ulimits" = "Ulimits=" ] || [ "$ulimits" = "Ulimits=[]" ] || [ "$ulimits" = "Ulimits=" ]; then # If it's the first container, fail the test if [ $fail -eq 0 ]; then - info "$check" - info " * Container no default ulimit override: $c" + info -c "$check" + info " * Container no default ulimit override: $c" no_ulimit_containers="$no_ulimit_containers $c" fail=1 else - info " * Container no default ulimit override: $c" + info " * Container no default ulimit override: $c" no_ulimit_containers="$no_ulimit_containers $c" fi fi done # We went through all the containers and found none without Ulimits if [ $fail -eq 0 ]; then - pass "$check" - resulttestjson "PASS" - currentScore=$((currentScore + 1)) + pass -c "$check" + logcheckresult "PASS" else - resulttestjson "INFO" "Containers with no default ulimit override" "$no_ulimit_containers" - currentScore=$((currentScore + 0)) + logcheckresult "INFO" "Containers with no default ulimit override" "$no_ulimit_containers" fi } -# 5.19 check_5_19() { - if [ "$running_containers" -ne 1 ]; then + if [ -z "$containers" ]; then return fi @@ -813,8 +722,6 @@ check_5_19() { local check="$id - $desc" starttestjson "$id" "$desc" - totalChecks=$((totalChecks + 1)) - fail=0 mountprop_shared_containers="" for c in $containers; do @@ -822,30 +729,27 @@ check_5_19() { grep shared 2>/dev/null 1>&2; then # If it's the first container, fail the test if [ $fail -eq 0 ]; then - warn "$check" - warn " * Mount propagation mode is shared: $c" + warn -s "$check" + warn " * Mount propagation mode is shared: $c" mountprop_shared_containers="$mountprop_shared_containers $c" fail=1 else - warn " * Mount propagation mode is shared: $c" + warn " * Mount propagation mode is shared: $c" mountprop_shared_containers="$mountprop_shared_containers $c" fi fi done # We went through all the containers and found none with shared propagation mode if [ $fail -eq 0 ]; then - pass "$check" - resulttestjson "PASS" - currentScore=$((currentScore + 1)) + pass -s "$check" + logcheckresult "PASS" else - resulttestjson "WARN" "Containers with shared mount propagation" "$mountprop_shared_containers" - currentScore=$((currentScore - 1)) + logcheckresult "WARN" "Containers with shared mount propagation" "$mountprop_shared_containers" fi } -# 5.20 check_5_20() { - if [ "$running_containers" -ne 1 ]; then + if [ -z "$containers" ]; then return fi @@ -854,8 +758,6 @@ check_5_20() { local check="$id - $desc" starttestjson "$id" "$desc" - totalChecks=$((totalChecks + 1)) - fail=0 utcns_shared_containers="" for c in $containers; do @@ -864,30 +766,27 @@ check_5_20() { if [ "$mode" = "UTSMode=host" ]; then # If it's the first container, fail the test if [ $fail -eq 0 ]; then - warn "$check" - warn " * Host UTS namespace being shared with: $c" + warn -s "$check" + warn " * Host UTS namespace being shared with: $c" utcns_shared_containers="$utcns_shared_containers $c" fail=1 else - warn " * Host UTS namespace being shared with: $c" + warn " * Host UTS namespace being shared with: $c" utcns_shared_containers="$utcns_shared_containers $c" fi fi done # We went through all the containers and found none with UTSMode as host if [ $fail -eq 0 ]; then - pass "$check" - resulttestjson "PASS" - currentScore=$((currentScore + 1)) + pass -s "$check" + logcheckresult "PASS" else - resulttestjson "WARN" "Containers sharing host UTS namespace" "$utcns_shared_containers" - currentScore=$((currentScore - 1)) + logcheckresult "WARN" "Containers sharing host UTS namespace" "$utcns_shared_containers" fi } -# 5.21 check_5_21() { - if [ "$running_containers" -ne 1 ]; then + if [ -z "$containers" ]; then return fi @@ -896,8 +795,6 @@ check_5_21() { local check="$id - $desc" starttestjson "$id" "$desc" - totalChecks=$((totalChecks + 1)) - fail=0 seccomp_disabled_containers="" for c in $containers; do @@ -905,30 +802,27 @@ check_5_21() { grep -E 'seccomp:unconfined|seccomp=unconfined' 2>/dev/null 1>&2; then # If it's the first container, fail the test if [ $fail -eq 0 ]; then - warn "$check" - warn " * Default seccomp profile disabled: $c" + warn -s "$check" + warn " * Default seccomp profile disabled: $c" seccomp_disabled_containers="$seccomp_disabled_containers $c" fail=1 else - warn " * Default seccomp profile disabled: $c" + warn " * Default seccomp profile disabled: $c" seccomp_disabled_containers="$seccomp_disabled_containers $c" fi fi done # We went through all the containers and found none with default secomp profile disabled if [ $fail -eq 0 ]; then - pass "$check" - resulttestjson "PASS" - currentScore=$((currentScore + 1)) + pass -s "$check" + logcheckresult "PASS" else - resulttestjson "WARN" "Containers with default seccomp profile disabled" "$seccomp_disabled_containers" - currentScore=$((currentScore - 1)) + logcheckresult "WARN" "Containers with default seccomp profile disabled" "$seccomp_disabled_containers" fi } -# 5.22 check_5_22() { - if [ "$running_containers" -ne 1 ]; then + if [ -z "$containers" ]; then return fi @@ -937,15 +831,12 @@ check_5_22() { local check="$id - $desc" starttestjson "$id" "$desc" - totalChecks=$((totalChecks + 1)) - note "$check" - resulttestjson "NOTE" - currentScore=$((currentScore + 0)) + note -c "$check" + logcheckresult "NOTE" } -# 5.23 check_5_23() { - if [ "$running_containers" -ne 1 ]; then + if [ -z "$containers" ]; then return fi @@ -954,15 +845,12 @@ check_5_23() { local check="$id - $desc" starttestjson "$id" "$desc" - totalChecks=$((totalChecks + 1)) - note "$check" - resulttestjson "NOTE" - currentScore=$((currentScore + 0)) + note -c "$check" + logcheckresult "NOTE" } -# 5.24 check_5_24() { - if [ "$running_containers" -ne 1 ]; then + if [ -z "$containers" ]; then return fi @@ -971,8 +859,6 @@ check_5_24() { local check="$id - $desc" starttestjson "$id" "$desc" - totalChecks=$((totalChecks + 1)) - fail=0 unexpected_cgroup_containers="" for c in $containers; do @@ -981,30 +867,27 @@ check_5_24() { if [ "$mode" != "CgroupParent=x" ]; then # If it's the first container, fail the test if [ $fail -eq 0 ]; then - warn "$check" - warn " * Confirm cgroup usage: $c" + warn -s "$check" + warn " * Confirm cgroup usage: $c" unexpected_cgroup_containers="$unexpected_cgroup_containers $c" fail=1 else - warn " * Confirm cgroup usage: $c" + warn " * Confirm cgroup usage: $c" unexpected_cgroup_containers="$unexpected_cgroup_containers $c" fi fi done # We went through all the containers and found none with UTSMode as host if [ $fail -eq 0 ]; then - pass "$check" - resulttestjson "PASS" - currentScore=$((currentScore + 1)) + pass -s "$check" + logcheckresult "PASS" else - resulttestjson "WARN" "Containers using unexpected cgroup" "$unexpected_cgroup_containers" - currentScore=$((currentScore - 1)) + logcheckresult "WARN" "Containers using unexpected cgroup" "$unexpected_cgroup_containers" fi } -# 5.25 check_5_25() { - if [ "$running_containers" -ne 1 ]; then + if [ -z "$containers" ]; then return fi local id="5.25" @@ -1012,38 +895,33 @@ check_5_25() { local check="$id - $desc" starttestjson "$id" "$desc" - totalChecks=$((totalChecks + 1)) - fail=0 addprivs_containers="" for c in $containers; do if ! docker inspect --format 'SecurityOpt={{.HostConfig.SecurityOpt }}' "$c" | grep 'no-new-privileges' 2>/dev/null 1>&2; then # If it's the first container, fail the test if [ $fail -eq 0 ]; then - warn "$check" - warn " * Privileges not restricted: $c" + warn -s "$check" + warn " * Privileges not restricted: $c" addprivs_containers="$addprivs_containers $c" fail=1 else - warn " * Privileges not restricted: $c" + warn " * Privileges not restricted: $c" addprivs_containers="$addprivs_containers $c" fi fi done # We went through all the containers and found none with capability to acquire additional privileges if [ $fail -eq 0 ]; then - pass "$check" - resulttestjson "PASS" - currentScore=$((currentScore + 1)) + pass -s "$check" + logcheckresult "PASS" else - resulttestjson "WARN" "Containers without restricted privileges" "$addprivs_containers" - currentScore=$((currentScore - 1)) + logcheckresult "WARN" "Containers without restricted privileges" "$addprivs_containers" fi } -# 5.26 check_5_26() { - if [ "$running_containers" -ne 1 ]; then + if [ -z "$containers" ]; then return fi @@ -1052,36 +930,31 @@ check_5_26() { local check="$id - $desc" starttestjson "$id" "$desc" - totalChecks=$((totalChecks + 1)) - fail=0 nohealthcheck_containers="" for c in $containers; do if ! docker inspect --format '{{ .Id }}: Health={{ .State.Health.Status }}' "$c" 2>/dev/null 1>&2; then if [ $fail -eq 0 ]; then - warn "$check" - warn " * Health check not set: $c" + warn -s "$check" + warn " * Health check not set: $c" nohealthcheck_containers="$nohealthcheck_containers $c" fail=1 else - warn " * Health check not set: $c" + warn " * Health check not set: $c" nohealthcheck_containers="$nohealthcheck_containers $c" fi fi done if [ $fail -eq 0 ]; then - pass "$check" - resulttestjson "PASS" - currentScore=$((currentScore + 1)) + pass -s "$check" + logcheckresult "PASS" else - resulttestjson "WARN" "Containers without health check" "$nohealthcheck_containers" - currentScore=$((currentScore - 1)) + logcheckresult "WARN" "Containers without health check" "$nohealthcheck_containers" fi } -# 5.27 check_5_27() { - if [ "$running_containers" -ne 1 ]; then + if [ -z "$containers" ]; then return fi @@ -1090,15 +963,12 @@ check_5_27() { local check="$id - $desc" starttestjson "$id" "$desc" - totalChecks=$((totalChecks + 1)) - info "$check" - resulttestjson "INFO" - currentScore=$((currentScore + 0)) + info -c "$check" + logcheckresult "INFO" } -# 5.28 check_5_28() { - if [ "$running_containers" -ne 1 ]; then + if [ -z "$containers" ]; then return fi @@ -1107,8 +977,6 @@ check_5_28() { local check="$id - $desc" starttestjson "$id" "$desc" - totalChecks=$((totalChecks + 1)) - fail=0 nopids_limit_containers="" for c in $containers; do @@ -1117,30 +985,27 @@ check_5_28() { if [ "$pidslimit" = "0" ] || [ "$pidslimit" = "" ] || [ "$pidslimit" = "-1" ]; then # If it's the first container, fail the test if [ $fail -eq 0 ]; then - warn "$check" - warn " * PIDs limit not set: $c" + warn -s "$check" + warn " * PIDs limit not set: $c" nopids_limit_containers="$nopids_limit_containers $c" fail=1 else - warn " * PIDs limit not set: $c" + warn " * PIDs limit not set: $c" nopids_limit_containers="$nopids_limit_containers $c" fi fi done # We went through all the containers and found all with PIDs limit if [ $fail -eq 0 ]; then - pass "$check" - resulttestjson "PASS" - currentScore=$((currentScore + 1)) + pass -s "$check" + logcheckresult "PASS" else - resulttestjson "WARN" "Containers without PIDs cgroup limit" "$nopids_limit_containers" - currentScore=$((currentScore - 1)) + logcheckresult "WARN" "Containers without PIDs cgroup limit" "$nopids_limit_containers" fi } -# 5.29 check_5_29() { - if [ "$running_containers" -ne 1 ]; then + if [ -z "$containers" ]; then return fi @@ -1149,8 +1014,6 @@ check_5_29() { local check="$id - $desc" starttestjson "$id" "$desc" - totalChecks=$((totalChecks + 1)) - fail=0 docker_network_containers="" networks=$(docker network ls -q 2>/dev/null) @@ -1161,7 +1024,7 @@ check_5_29() { if [ -n "$docker0Containers" ]; then if [ $fail -eq 0 ]; then - info "$check" + info -c "$check" fail=1 fi for c in $docker0Containers; do @@ -1172,28 +1035,24 @@ check_5_29() { cName=$(docker inspect --format '{{.Name}}' "$c" 2>/dev/null | sed 's/\///g' | grep -Ev "$pattern" ) fi if [ -n "$cName" ]; then - info " * Container in docker0 network: $cName" + info " * Container in docker0 network: $cName" docker_network_containers="$docker_network_containers $c:$cName" fi done fi - currentScore=$((currentScore + 0)) fi done # We went through all the containers and found none in docker0 network if [ $fail -eq 0 ]; then - pass "$check" - resulttestjson "PASS" - currentScore=$((currentScore + 1)) + pass -c "$check" + logcheckresult "PASS" else - resulttestjson "INFO" "Containers using docker0 network" "$docker_network_containers" - currentScore=$((currentScore + 0)) + logcheckresult "INFO" "Containers using docker0 network" "$docker_network_containers" fi } -# 5.30 check_5_30() { - if [ "$running_containers" -ne 1 ]; then + if [ -z "$containers" ]; then return fi @@ -1202,38 +1061,33 @@ check_5_30() { local check="$id - $desc" starttestjson "$id" "$desc" - totalChecks=$((totalChecks + 1)) - fail=0 hostns_shared_containers="" for c in $containers; do if docker inspect --format '{{ .HostConfig.UsernsMode }}' "$c" 2>/dev/null | grep -i 'host' >/dev/null 2>&1; then # If it's the first container, fail the test if [ $fail -eq 0 ]; then - warn "$check" - warn " * Namespace shared: $c" + warn -s "$check" + warn " * Namespace shared: $c" hostns_shared_containers="$hostns_shared_containers $c" fail=1 else - warn " * Namespace shared: $c" + warn " * Namespace shared: $c" hostns_shared_containers="$hostns_shared_containers $c" fi fi done # We went through all the containers and found none with host's user namespace shared if [ $fail -eq 0 ]; then - pass "$check" - resulttestjson "PASS" - currentScore=$((currentScore + 1)) + pass -s "$check" + logcheckresult "PASS" else - resulttestjson "WARN" "Containers sharing host user namespace" "$hostns_shared_containers" - currentScore=$((currentScore - 1)) + logcheckresult "WARN" "Containers sharing host user namespace" "$hostns_shared_containers" fi } -# 5.31 check_5_31() { - if [ "$running_containers" -ne 1 ]; then + if [ -z "$containers" ]; then return fi @@ -1242,32 +1096,28 @@ check_5_31() { local check="$id - $desc" starttestjson "$id" "$desc" - totalChecks=$((totalChecks + 1)) - fail=0 docker_sock_containers="" for c in $containers; do if docker inspect --format '{{ .Mounts }}' "$c" 2>/dev/null | grep 'docker.sock' >/dev/null 2>&1; then # If it's the first container, fail the test if [ $fail -eq 0 ]; then - warn "$check" - warn " * Docker socket shared: $c" + warn -s "$check" + warn " * Docker socket shared: $c" docker_sock_containers="$docker_sock_containers $c" fail=1 else - warn " * Docker socket shared: $c" + warn " * Docker socket shared: $c" docker_sock_containers="$docker_sock_containers $c" fi fi done # We went through all the containers and found none with docker.sock shared if [ $fail -eq 0 ]; then - pass "$check" - resulttestjson "PASS" - currentScore=$((currentScore + 1)) + pass -s "$check" + logcheckresult "PASS" else - resulttestjson "WARN" "Containers sharing docker socket" "$docker_sock_containers" - currentScore=$((currentScore - 1)) + logcheckresult "WARN" "Containers sharing docker socket" "$docker_sock_containers" fi } diff --git a/tests/6_docker_security_operations.sh b/tests/6_docker_security_operations.sh index 35f4f03..1a97be6 100644 --- a/tests/6_docker_security_operations.sh +++ b/tests/6_docker_security_operations.sh @@ -9,14 +9,12 @@ check_6() { startsectionjson "$id" "$desc" } -# 6.1 check_6_1() { local id="6.1" local desc="Ensure that image sprawl is avoided (Not Scored)" local check="$id - $desc" starttestjson "$id" "$desc" - totalChecks=$((totalChecks + 1)) images=$(docker images -q | sort -u | wc -l | awk '{print $1}') active_images=0 @@ -26,37 +24,31 @@ check_6_1() { fi done - info "$check" - info " * There are currently: $images images" + info -c "$check" + info " * There are currently: $images images" if [ "$active_images" -lt "$((images / 2))" ]; then info " * Only $active_images out of $images are in use" fi - resulttestjson "INFO" "$active_images active/$images in use" - currentScore=$((currentScore + 0)) + logcheckresult "INFO" "$active_images active/$images in use" } -# 6.2 check_6_2() { local id="6.2" local desc="Ensure that container sprawl is avoided (Not Scored)" local check="$id - $desc" starttestjson "$id" "$desc" - totalChecks=$((totalChecks + 1)) total_containers=$(docker info 2>/dev/null | grep "Containers" | awk '{print $2}') running_containers=$(docker ps -q | wc -l | awk '{print $1}') diff="$((total_containers - running_containers))" + info -c "$check" if [ "$diff" -gt 25 ]; then - info "$check" info " * There are currently a total of $total_containers containers, with only $running_containers of them currently running" - resulttestjson "INFO" "$total_containers total/$running_containers running" else - info "$check" info " * There are currently a total of $total_containers containers, with $running_containers of them currently running" - resulttestjson "INFO" "$total_containers total/$running_containers running" fi - currentScore=$((currentScore + 0)) + logcheckresult "INFO" "$total_containers total/$running_containers running" } check_6_end() { diff --git a/tests/7_docker_swarm_configuration.sh b/tests/7_docker_swarm_configuration.sh index 63b65ab..057d693 100644 --- a/tests/7_docker_swarm_configuration.sh +++ b/tests/7_docker_swarm_configuration.sh @@ -9,85 +9,69 @@ check_7() { startsectionjson "$id" "$desc" } -# 7.1 check_7_1() { local id="7.1" local desc="Ensure swarm mode is not Enabled, if not needed (Scored)" local check="$id - $desc" starttestjson "$id" "$desc" - totalChecks=$((totalChecks + 1)) if docker info 2>/dev/null | grep -e "Swarm:*\sinactive\s*" >/dev/null 2>&1; then - pass "$check" - resulttestjson "PASS" - currentScore=$((currentScore + 1)) + pass -s "$check" + logcheckresult "PASS" else - warn "$check" - resulttestjson "WARN" - currentScore=$((currentScore - 1)) + warn -s "$check" + logcheckresult "WARN" fi } -# 7.2 check_7_2() { local id="7.2" local desc="Ensure that the minimum number of manager nodes have been created in a swarm (Scored)" local check="$id - $desc" starttestjson "$id" "$desc" - totalChecks=$((totalChecks + 1)) if docker info 2>/dev/null | grep -e "Swarm:*\sactive\s*" >/dev/null 2>&1; then managernodes=$(docker node ls | grep -c "Leader") if [ "$managernodes" -eq 1 ]; then - pass "$check" - resulttestjson "PASS" - currentScore=$((currentScore + 1)) + pass -s "$check" + logcheckresult "PASS" else - warn "$check" - resulttestjson "WARN" - currentScore=$((currentScore - 1)) + warn -s "$check" + logcheckresult "WARN" fi else - pass "$check (Swarm mode not enabled)" - resulttestjson "PASS" - currentScore=$((currentScore + 1)) + pass -s "$check (Swarm mode not enabled)" + logcheckresult "PASS" fi } -# 7.3 check_7_3() { local id="7.3" local desc="Ensure that swarm services are bound to a specific host interface (Scored)" local check="$id - $desc" starttestjson "$id" "$desc" - totalChecks=$((totalChecks + 1)) if docker info 2>/dev/null | grep -e "Swarm:*\sactive\s*" >/dev/null 2>&1; then $netbin -lnt | grep -e '\[::]:2377 ' -e ':::2377' -e '*:2377 ' -e ' 0\.0\.0\.0:2377 ' >/dev/null 2>&1 if [ $? -eq 1 ]; then - pass "$check" - resulttestjson "PASS" - currentScore=$((currentScore + 1)) + pass -s "$check" + logcheckresult "PASS" else - warn "$check" - resulttestjson "WARN" - currentScore=$((currentScore - 1)) + warn -s "$check" + logcheckresult "WARN" fi else - pass "$check (Swarm mode not enabled)" - resulttestjson "PASS" - currentScore=$((currentScore + 1)) + pass -s "$check (Swarm mode not enabled)" + logcheckresult "PASS" fi } -# 7.4 check_7_4() { local id="7.4" local desc="Ensure that all Docker swarm overlay networks are encrypted (Scored)" local check="$id - $desc" starttestjson "$id" "$desc" - totalChecks=$((totalChecks + 1)) fail=0 unencrypted_networks="" for encnet in $(docker network ls --filter driver=overlay --quiet); do @@ -95,7 +79,7 @@ check_7_4() { grep -v 'encrypted:' 2>/dev/null 1>&2; then # If it's the first container, fail the test if [ $fail -eq 0 ]; then - warn "$check" + warn -s "$check" fail=1 fi warn " * Unencrypted overlay network: $(docker network inspect --format '{{ .Name }} ({{ .Scope }})' "$encnet")" @@ -104,144 +88,115 @@ check_7_4() { done # We went through all the networks and found none that are unencrypted if [ $fail -eq 0 ]; then - pass "$check" - resulttestjson "PASS" - currentScore=$((currentScore + 1)) + pass -s "$check" + logcheckresult "PASS" else - resulttestjson "WARN" "Unencrypted overlay networks:" "$unencrypted_networks" - currentScore=$((currentScore - 1)) + logcheckresult "WARN" "Unencrypted overlay networks:" "$unencrypted_networks" fi } -# 7.5 check_7_5() { local id="7.5" local desc="Ensure that Docker's secret management commands are used for managing secrets in a swarm cluster (Not Scored)" local check="$id - $desc" starttestjson "$id" "$desc" - totalChecks=$((totalChecks + 1)) if docker info 2>/dev/null | grep -e "Swarm:\s*active\s*" >/dev/null 2>&1; then if [ "$(docker secret ls -q | wc -l)" -ge 1 ]; then - pass "$check" - resulttestjson "PASS" - currentScore=$((currentScore + 1)) + pass -c "$check" + logcheckresult "PASS" else - info "$check" - resulttestjson "INFO" - currentScore=$((currentScore + 0)) + info -c "$check" + logcheckresult "INFO" fi else - pass "$check (Swarm mode not enabled)" - resulttestjson "PASS" - currentScore=$((currentScore + 1)) + pass -c "$check (Swarm mode not enabled)" + logcheckresult "PASS" fi } -# 7.6 check_7_6() { local id="7.6" local desc="Ensure that swarm manager is run in auto-lock mode (Scored)" local check="$id - $desc" starttestjson "$id" "$desc" - totalChecks=$((totalChecks + 1)) if docker info 2>/dev/null | grep -e "Swarm:\s*active\s*" >/dev/null 2>&1; then if ! docker swarm unlock-key 2>/dev/null | grep 'SWMKEY' 2>/dev/null 1>&2; then - warn "$check" - resulttestjson "WARN" - currentScore=$((currentScore - 1)) + warn -s "$check" + logcheckresult "WARN" else - pass "$check" - resulttestjson "PASS" - currentScore=$((currentScore + 1)) + pass -s "$check" + logcheckresult "PASS" fi else - pass "$check (Swarm mode not enabled)" - resulttestjson "PASS" - currentScore=$((currentScore + 1)) + pass -s "$check (Swarm mode not enabled)" + logcheckresult "PASS" fi } -# 7.7 check_7_7() { local id="7.7" local desc="Ensure that the swarm manager auto-lock key is rotated periodically (Not Scored)" local check="$id - $desc" starttestjson "$id" "$desc" - totalChecks=$((totalChecks + 1)) if docker info 2>/dev/null | grep -e "Swarm:\s*active\s*" >/dev/null 2>&1; then - note "$check" - resulttestjson "NOTE" - currentScore=$((currentScore + 0)) + note -c "$check" + logcheckresult "NOTE" else - pass "$check (Swarm mode not enabled)" - resulttestjson "PASS" - currentScore=$((currentScore + 1)) + pass -c "$check (Swarm mode not enabled)" + logcheckresult "PASS" fi } -# 7.8 check_7_8() { local id="7.8" local desc="Ensure that node certificates are rotated as appropriate (Not Scored)" local check="$id - $desc" starttestjson "$id" "$desc" - totalChecks=$((totalChecks + 1)) if docker info 2>/dev/null | grep -e "Swarm:\s*active\s*" >/dev/null 2>&1; then if docker info 2>/dev/null | grep "Expiry Duration: 2 days"; then - pass "$check" - resulttestjson "PASS" - currentScore=$((currentScore + 1)) + pass -c "$check" + logcheckresult "PASS" else - info "$check" - resulttestjson "INFO" - currentScore=$((currentScore + 0)) + info -c "$check" + logcheckresult "INFO" fi else - pass "$check (Swarm mode not enabled)" - resulttestjson "PASS" - currentScore=$((currentScore + 1)) + pass -c "$check (Swarm mode not enabled)" + logcheckresult "PASS" fi } -# 7.9 check_7_9() { local id="7.9" local desc="Ensure that CA certificates are rotated as appropriate (Not Scored)" local check="$id - $desc" starttestjson "$id" "$desc" - totalChecks=$((totalChecks + 1)) if docker info 2>/dev/null | grep -e "Swarm:\s*active\s*" >/dev/null 2>&1; then - info "$check" - resulttestjson "INFO" - currentScore=$((currentScore + 0)) + info -c "$check" + logcheckresult "INFO" else - pass "$check (Swarm mode not enabled)" - resulttestjson "PASS" - currentScore=$((currentScore + 1)) + pass -c "$check (Swarm mode not enabled)" + logcheckresult "PASS" fi } -# 7.10 check_7_10() { local id="7.10" local desc="Ensure that management plane traffic is separated from data plane traffic (Not Scored)" local check="$id - $desc" starttestjson "$id" "$desc" - totalChecks=$((totalChecks + 1)) if docker info 2>/dev/null | grep -e "Swarm:\s*active\s*" >/dev/null 2>&1; then - info "$check" - resulttestjson "INFO" - currentScore=$((currentScore + 0)) + info -c "$check" + logcheckresult "INFO" else - pass "$check (Swarm mode not enabled)" - resulttestjson "PASS" - currentScore=$((currentScore + 1)) + pass -c "$check (Swarm mode not enabled)" + logcheckresult "PASS" fi } diff --git a/tests/8_docker_enterprise_configuration.sh b/tests/8_docker_enterprise_configuration.sh index a1d2e65..7111c21 100644 --- a/tests/8_docker_enterprise_configuration.sh +++ b/tests/8_docker_enterprise_configuration.sh @@ -29,7 +29,6 @@ check_8_1() { info "$check" } -# 8.1.1 check_8_1_1() { if [ "$enterprise_license" -ne 1 ]; then return @@ -40,13 +39,10 @@ check_8_1_1() { local check="$id - $desc" starttestjson "$id" "$desc" - totalChecks=$((totalChecks + 1)) - note "$check" - resulttestjson "INFO" - currentScore=$((currentScore + 0)) + note -c "$check" + logcheckresult "INFO" } -# 8.1.2 check_8_1_2() { if [ "$enterprise_license" -ne 1 ]; then return @@ -57,13 +53,10 @@ check_8_1_2() { local check="$id - $desc" starttestjson "$id" "$desc" - totalChecks=$((totalChecks + 1)) - note "$check" - resulttestjson "INFO" - currentScore=$((currentScore + 0)) + note -c "$check" + logcheckresult "INFO" } -# 8.1.3 check_8_1_3() { if [ "$enterprise_license" -ne 1 ]; then return @@ -74,13 +67,10 @@ check_8_1_3() { local check="$id - $desc" starttestjson "$id" "$desc" - totalChecks=$((totalChecks + 1)) - note "$check" - resulttestjson "INFO" - currentScore=$((currentScore + 0)) + note -c "$check" + logcheckresult "INFO" } -# 8.1.4 check_8_1_4() { if [ "$enterprise_license" -ne 1 ]; then return @@ -91,13 +81,10 @@ check_8_1_4() { local check="$id - $desc" starttestjson "$id" "$desc" - totalChecks=$((totalChecks + 1)) - note "$check" - resulttestjson "INFO" - currentScore=$((currentScore + 0)) + note -c "$check" + logcheckresult "INFO" } -# 8.1.5 check_8_1_5() { if [ "$enterprise_license" -ne 1 ]; then return @@ -108,13 +95,10 @@ check_8_1_5() { local check="$id - $desc" starttestjson "$id" "$desc" - totalChecks=$((totalChecks + 1)) - note "$check" - resulttestjson "INFO" - currentScore=$((currentScore + 0)) + note -c "$check" + logcheckresult "INFO" } -# 8.1.6 check_8_1_6() { if [ "$enterprise_license" -ne 1 ]; then return @@ -125,13 +109,10 @@ check_8_1_6() { local check="$id - $desc" starttestjson "$id" "$desc" - totalChecks=$((totalChecks + 1)) - note "$check" - resulttestjson "INFO" - currentScore=$((currentScore + 0)) + note -c "$check" + logcheckresult "INFO" } -# 8.1.7 check_8_1_7() { if [ "$enterprise_license" -ne 1 ]; then return @@ -142,10 +123,8 @@ check_8_1_7() { local check="$id - $desc" starttestjson "$id" "$desc" - totalChecks=$((totalChecks + 1)) - note "$check" - resulttestjson "INFO" - currentScore=$((currentScore + 0)) + note -c "$check" + logcheckresult "INFO" } check_8_2() { @@ -169,10 +148,8 @@ check_8_2_1() { local check="$id - $desc" starttestjson "$id" "$desc" - totalChecks=$((totalChecks + 1)) - note "$check" - resulttestjson "INFO" - currentScore=$((currentScore + 0)) + note -c "$check" + logcheckresult "INFO" } check_8_end() { diff --git a/tests/99_community_checks.sh b/tests/99_community_checks.sh index 3a14619..035a541 100644 --- a/tests/99_community_checks.sh +++ b/tests/99_community_checks.sh @@ -8,24 +8,45 @@ check_c() { startsectionjson "$id" "$desc" } -# check_c_1 check_c_1() { - local check="C.1 - This is a example check" - totalChecks=$((totalChecks + 1)) + local id="C.1" + local desc="This is a example check for a Scored check" + local check="$id - $desc" + starttestjson "$id" "$desc" + if docker info --format='{{ .Architecture }}' | grep 'x86_64' 2>/dev/null 1>&2; then - pass "$check" - resulttestjson "PASS" + pass -s "$check" + logcheckresult "PASS" + elif docker info --format='{{ .Architecture }}' | grep 'aarch64' 2>/dev/null 1>&2; then + info -c "$check" + logcheckresult "INFO" else - warn "$check" - resulttestjson "WARN" + warn -s "$check" + logcheckresult "WARN" + fi +} + +check_c_1_1() { + local id="C.1.1" + local desc="This is a example check for a Not Scored check" + local check="$id - $desc" + starttestjson "$id" "$desc" + + if docker info --format='{{ .Architecture }}' | grep 'x86_64' 2>/dev/null 1>&2; then + pass -c "$check" + logcheckresult "PASS" + elif docker info --format='{{ .Architecture }}' | grep 'aarch64' 2>/dev/null 1>&2; then + info -c "$check" + logcheckresult "INFO" + else + warn -c "$check" + logcheckresult "WARN" fi } -# check_c_2 check_c_2() { docker_version=$(docker version | grep -i -A2 '^server' | grep ' Version:' \ | awk '{print $NF; exit}' | tr -d '[:alpha:]-,.' | cut -c 1-4) - totalChecks=$((totalChecks + 1)) local id="C.2" local desc="Ensure operations on legacy registry (v1) are Disabled" @@ -34,23 +55,20 @@ check_c_2() { if [ "$docker_version" -lt 1712 ]; then if get_docker_configuration_file_args 'disable-legacy-registry' | grep 'true' >/dev/null 2>&1; then - pass "$check" - resulttestjson "PASS" - currentScore=$((currentScore + 1)) + pass -s "$check" + logcheckresult "PASS" elif get_docker_effective_command_line_args '--disable-legacy-registry' | grep "disable-legacy-registry" >/dev/null 2>&1; then - pass "$check" - resulttestjson "PASS" - currentScore=$((currentScore + 1)) + pass -s "$check" + logcheckresult "PASS" else - warn "$check" - resulttestjson "WARN" - currentScore=$((currentScore - 1)) + warn -s "$check" + logcheckresult "WARN" fi else local desc="$desc (Deprecated)" local check="$id - $desc" - info "$check" - resulttestjson "INFO" + info -c "$check" + logcheckresult "INFO" fi } diff --git a/tests/TESTS.md b/tests/TESTS.md new file mode 100644 index 0000000..fe2d799 --- /dev/null +++ b/tests/TESTS.md @@ -0,0 +1,266 @@ +# Available Checks +Check ID | Category | Subcategory | Check Name +------------ | ------------ | ------------ | ------------ +`host_configuration` | Host Configuration +`host_general_configuration` | | General Configuration +`check_1_1_1` | | | Ensure the container host has been Hardened (Not Scored) +`check_1_1_2` | | | Ensure that the version of Docker is up to date (Not Scored) +`linux_hosts_specific_configuration` | | Linux Hosts Specific Configuration +`check_1_2_1` | | | Ensure a separate partition for containers has been created (Scored) +`check_1_2_2` | | | Ensure only trusted users are allowed to control Docker daemon (Scored) +`check_1_2_3` | | | Ensure auditing is configured for the Docker daemon (Scored) +`check_1_2_4` | | | Ensure auditing is configured for Docker files and directories - /var/lib/docker (Scored) +`check_1_2_5` | | | Ensure auditing is configured for Docker files and directories - /etc/docker (Scored) +`check_1_2_6` | | | Ensure auditing is configured for Docker files and directories - docker.service (Scored) +`check_1_2_7` | | | Ensure auditing is configured for Docker files and directories - docker.socket (Scored) +`check_1_2_8` | | | Ensure auditing is configured for Docker files and directories - /etc/default/docker (Scored) +`check_1_2_9` | | | Ensure auditing is configured for Docker files and directories - /etc/sysconfig/docker (Scored) +`check_1_2_10` | | | Ensure auditing is configured for Docker files and directories - /etc/docker/daemon.json (Scored) +`check_1_2_11` | | | Ensure auditing is configured for Docker files and directories - /usr/bin/containerd (Scored) +`check_1_2_12` | | | Ensure auditing is configured for Docker files and directories - /usr/sbin/runc (Scored) +`docker_daemon_configuration` | Docker daemon configuration +`check_2_1` | | Ensure network traffic is restricted between containers on the default bridge (Scored) +`check_2_2` | | Ensure the logging level is set to 'info' (Scored) +`check_2_3` | | Ensure Docker is allowed to make changes to iptables (Scored) +`check_2_4` | | Ensure insecure registries are not used (Scored) +`check_2_5` | | Ensure aufs storage driver is not used (Scored) +`check_2_6` | | Ensure TLS authentication for Docker daemon is configured (Scored) +`check_2_7` | | Ensure the default ulimit is configured appropriately (Not Scored) +`check_2_8` | | Enable user namespace support (Scored) +`check_2_9` | | Ensure the default cgroup usage has been confirmed (Scored) +`check_2_10` | | Ensure base device size is not changed until needed (Scored) +`check_2_11` | | Ensure that authorization for Docker client commands is enabled (Scored) +`check_2_12` | | Ensure centralized and remote logging is configured (Scored) +`check_2_13` | | Ensure live restore is enabled (Scored) +`check_2_14` | | Ensure Userland Proxy is Disabled (Scored) +`check_2_15` | | Ensure that a daemon-wide custom seccomp profile is applied if appropriate (Not Scored) +`check_2_16` | | Ensure that experimental features are not implemented in production (Scored) +`check_2_17` | | Ensure containers are restricted from acquiring new privileges (Scored) +`docker_daemon_files` | Docker daemon configuration files +`check_3_1` | | Ensure that the docker.service file ownership is set to root:root (Scored) +`check_3_2` | | Ensure that docker.service file permissions are appropriately set (Scored) +`check_3_3` | | Ensure that docker.socket file ownership is set to root:root (Scored) +`check_3_4` | | Ensure that docker.socket file permissions are set to 644 or more restrictive (Scored) +`check_3_5` | | Ensure that the /etc/docker directory ownership is set to root:root (Scored) +`check_3_6` | | Ensure that /etc/docker directory permissions are set to 755 or more restrictively (Scored) +`check_3_7` | | Ensure that registry certificate file ownership is set to root:root (Scored) +`check_3_8` | | Ensure that registry certificate file permissions are set to 444 or more restrictively (Scored) +`check_3_9` | | Ensure that TLS CA certificate file ownership is set to root:root (Scored) +`check_3_10` | | Ensure that TLS CA certificate file permissions are set to 444 or more restrictively (Scored) +`check_3_11` | | Ensure that Docker server certificate file ownership is set to root:root (Scored) +`check_3_12` | | Ensure that the Docker server certificate file permissions are set to 444 or more restrictively (Scored) +`check_3_13` | | Ensure that the Docker server certificate key file ownership is set to root:root (Scored) +`check_3_14` | | Ensure that the Docker server certificate key file permissions are set to 400 (Scored) +`check_3_15` | | Ensure that the Docker socket file ownership is set to root:docker (Scored) +`check_3_16` | | Ensure that the Docker socket file permissions are set to 660 or more restrictively (Scored) +`check_3_17` | | Ensure that the daemon.json file ownership is set to root:root (Scored) +`check_3_18` | | Ensure that daemon.json file permissions are set to 644 or more restrictive (Scored) +`check_3_19` | | Ensure that the /etc/default/docker file ownership is set to root:root (Scored) +`check_3_20` | | Ensure that the /etc/sysconfig/docker file ownership is set to root:root (Scored) +`check_3_21` | | Ensure that the /etc/sysconfig/docker file permissions are set to 644 or more restrictively (Scored) +`check_3_22` | | Ensure that the /etc/default/docker file permissions are set to 644 or more restrictively (Scored) +`container_images` | Container Images and Build File +`check_4.1` | | Ensure that a user for the container has been created (Scored) +`check_4.2` | | Ensure that containers use only trusted base images (Not Scored) +`check_4.3` | | Ensure that unnecessary packages are not installed in the container (Not Scored) +`check_4.4` | | Ensure images are scanned and rebuilt to include security patches (Not Scored) +`check_4.5` | | Ensure Content trust for Docker is Enabled (Scored) +`check_4.6` | | Ensure that HEALTHCHECK instructions have been added to container images (Scored) +`check_4.7` | | Ensure update instructions are not used alone in the Dockerfile (Not Scored) +`check_4.8` | | Ensure setuid and setgid permissions are removed (Not Scored) +`check_4.9` | | Ensure that COPY is used instead of ADD in Dockerfiles (Not Scored) +`check_4.10` | | Ensure secrets are not stored in Dockerfiles (Not Scored) +`check_4.11` | | Ensure only verified packages are are installed (Not Scored) +`container_runtime` | Container Runtime +`check_running_containers` | | Check if exists running containers +`check_5_1` | | Ensure that, if applicable, an AppArmor Profile is enabled (Scored) +`check_5_2` | | Ensure that, if applicable, SELinux security options are set (Scored) +`check_5_3` | | Ensure that Linux kernel capabilities are restricted within containers (Scored) +`check_5_4` | | Ensure that privileged containers are not used (Scored) +`check_5_5` | | Ensure sensitive host system directories are not mounted on containers (Scored) +`check_5_6` | | Ensure sshd is not run within containers (Scored) +`check_5_7` | | Ensure privileged ports are not mapped within containers (Scored) +`check_5_8` | | Ensure that only needed ports are open on the container (Not Scored) +`check_5_9` | | Ensure that the host's network namespace is not shared (Scored) +`check_5_10` | | Ensure that the memory usage for containers is limited (Scored) +`check_5_11` | | Ensure that CPU priority is set appropriately on containers (Scored) +`check_5_12` | | Ensure that the container's root filesystem is mounted as read only (Scored) +`check_5_13` | | Ensure that incoming container traffic is bound to a specific host interface (Scored) +`check_5_14` | | Ensure that the 'on-failure' container restart policy is set to '5' (Scored) +`check_5_15` | | Ensure that the host's process namespace is not shared (Scored) +`check_5_16` | | Ensure that the host's IPC namespace is not shared (Scored) +`check_5_17` | | Ensure that host devices are not directly exposed to containers (Not Scored) +`check_5_18` | | Ensure that the default ulimit is overwritten at runtime if needed (Not Scored) +`check_5_19` | | Ensure mount propagation mode is not set to shared (Scored) +`check_5_20` | | Ensure that the host's UTS namespace is not shared (Scored) +`check_5_21` | | Ensurethe default seccomp profile is not Disabled (Scored) +`check_5_22` | | Ensure that docker exec commands are not used with the privileged option (Scored) +`check_5_23` | | Ensure that docker exec commands are not used with the user=root option (Not Scored) +`check_5_24` | | Ensure that cgroup usage is confirmed (Scored) +`check_5_25` | | Ensure that the container is restricted from acquiring additional privileges (Scored) +`check_5_26` | | Ensure that container health is checked at runtime (Scored) +`check_5_27` | | Ensure that Docker commands always make use of the latest version of their image (Not Scored) +`check_5_28` | | Ensure that the PIDs cgroup limit is used (Scored) +`check_5_29` | | Ensure that Docker's default bridge docker0 is not used (Not Scored) +`check_5_30` | | Ensure that the host's user namespaces are not shared (Scored) +`check_5_31` | | Ensure that the Docker socket is not mounted inside any containers (Scored) +`docker_security_operations` | Docker Security Operations +`check_6.1` | | Ensure that image sprawl is avoided (Not Scored) +`check_6.2` | | Ensure that container sprawl is avoided (Not Scored) +`docker_swarm_configuration` | Docker Swarm Configuration +`check_7.1` | | Ensure swarm mode is not Enabled, if not needed (Scored) +`check_7.2` | | Ensure that the minimum number of manager nodes have been created in a swarm (Scored) (Swarm mode not enabled) +`check_7.3` | | Ensure that swarm services are bound to a specific host interface (Scored) (Swarm mode not enabled) +`check_7.4` | | Ensure that all Docker swarm overlay networks are encrypted (Scored) +`check_7.5` | | Ensure that Docker's secret management commands are used for managing secrets in a swarm cluster (Not Scored) (Swarm mode not enabled) +`check_7.6` | | Ensure that swarm manager is run in auto-lock mode (Scored) (Swarm mode not enabled) +`check_7.7` | | Ensure that the swarm manager auto-lock key is rotated periodically (Not Scored) (Swarm mode not enabled) +`check_7.8` | | Ensure that node certificates are rotated as appropriate (Not Scored) (Swarm mode not enabled) +`check_7.9` | | Ensure that CA certificates are rotated as appropriate (Not Scored) (Swarm mode not enabled) +`check_7.10` | | Ensure that management plane traffic is separated from data plane traffic (Not Scored) (Swarm mode not enabled) +`docker_enterprise_configuration` | Docker Enterprise Configuration +`check_product_license` | | Check Docker license +`universal_control_plane_configuration` | | Universal Control Plane Configuration +`check_8.1.1` | | | Configure the LDAP authentication service (Scored) +`check_8.1.2` | | | Use external certificates (Scored) +`check_8.1.3` | | | Enforce the use of client certificate bundles for unprivileged users (Not Scored) +`check_8.1.4` | | | Configure applicable cluster role-based access control policies (Not Scored) +`check_8.1.5` | | | Enable signed image enforcement (Scored) +`check_8.1.6` | | | Set the Per-User Session Limit to a value of '3' or lower (Scored) +`check_8.1.7` | | | Set the 'Lifetime Minutes' and 'Renewal Threshold Minutes' values to '15' or lower and '0' respectively (Scored) +`docker_trusted_registry_configuration` | | Docker Trusted Registry Configuration +`check_8.2.1` | | | Enable image vulnerability scanning (Scored) +`community_checks` | Community contributed checks +`check_c_1` | | This is a example check +`check_c_2` | | Ensure operations on legacy registry (v1) are Disabled (Deprecated) + +## Another Check ID are: +- `community_checks` -> Run all community checks +- `community` -> Is an alias for `community_checks` +- `cis` -> Run all bellow checks category: + - `host_configuration` + - `docker_daemon_configuration` + - `docker_daemon_files` + - `container_images` + - `container_runtime` + - `docker_security_operations` + - `docker_swarm_configuration` + - `docker_enterprise_configuration` +- `all` -> Run all bellow checks category: + - `cis` + - `community` +- `cis_level1` -> Run all bellow checks: + - `host_configuration_level1` + - `docker_daemon_configuration_level1` + - `docker_daemon_files_level1` + - `container_images_level1` + - `container_runtime_level1` + - `docker_security_operations_level1` + - `docker_swarm_configuration_level1` + - `docker_enterprise_configuration_level1` +- `host_configuration_level1` -> Run all bellow checks: + - `check_1_1_1` + - `check_1_1_2` + - `check_1_2_1` + - `check_1_2_2` + - `check_1_2_3` + - `check_1_2_5` + - `check_1_2_6` + - `check_1_2_7` + - `check_1_2_8` + - `check_1_2_9` + - `check_1_2_10` + - `check_1_2_11` + - `check_1_2_12` +- `docker_daemon_configuration_level1` -> Run all bellow checks: + - `check_2_1` + - `check_2_2` + - `check_2_3` + - `check_2_4` + - `check_2_5` + - `check_2_6` + - `check_2_7` + - `check_2_13` + - `check_2_14` + - `check_2_16` + - `check_2_17` +- `docker_daemon_files_level1` -> Run all bellow checks: + - `check_3_1` + - `check_3_2` + - `check_3_3` + - `check_3_4` + - `check_3_5` + - `check_3_6` + - `check_3_7` + - `check_3_8` + - `check_3_9` + - `check_3_10` + - `check_3_11` + - `check_3_12` + - `check_3_13` + - `check_3_14` + - `check_3_15` + - `check_3_16` + - `check_3_17` + - `check_3_18` + - `check_3_19` + - `check_3_20` + - `check_3_21` + - `check_3_22` +- `container_images_level1` -> Run all bellow checks: + - `check_4_1` + - `check_4_2` + - `check_4_3` + - `check_4_4` + - `check_4_6` + - `check_4_7` + - `check_4_9` + - `check_4_10` +- `container_runtime_level1` -> Run all bellow checks: + - `check_running_containers` + - `check_5_1` + - `check_5_3` + - `check_5_4` + - `check_5_5` + - `check_5_6` + - `check_5_7` + - `check_5_8` + - `check_5_9` + - `check_5_10` + - `check_5_11` + - `check_5_12` + - `check_5_13` + - `check_5_14` + - `check_5_15` + - `check_5_16` + - `check_5_17` + - `check_5_18` + - `check_5_19` + - `check_5_20` + - `check_5_21` + - `check_5_24` + - `check_5_25` + - `check_5_26` + - `check_5_27` + - `check_5_28` + - `check_5_30` + - `check_5_31` +- `docker_security_operations_level1` -> Run all bellow checks: + - `check_6_1` + - `check_6_2` +- `docker_swarm_configuration_level1` -> Run all bellow checks: + - `check_7_1` + - `check_7_2` + - `check_7_3` + - `check_7_4` + - `check_7_7` +- `docker_enterprise_configuration_level1` -> Run all bellow checks: + - `check_product_license` + - `check_8_1_1` + - `check_8_1_2` + - `check_8_1_3` + - `check_8_1_4` + - `check_8_1_5` + - `check_8_1_6` + - `check_8_1_7` + - `check_8_2_1` From 9722e5d89aff656b91cb57284614b6bc718a7e50 Mon Sep 17 00:00:00 2001 From: Razvan Stoica Date: Tue, 16 Mar 2021 10:07:48 +0200 Subject: [PATCH 27/48] Move the help scripts to a dedicated folder --- functions_lib.sh | 391 ----------------------------------------------- helper_lib.sh | 129 ---------------- output_lib.sh | 155 ------------------- 3 files changed, 675 deletions(-) delete mode 100644 functions_lib.sh delete mode 100644 helper_lib.sh delete mode 100644 output_lib.sh diff --git a/functions_lib.sh b/functions_lib.sh deleted file mode 100644 index cb44bbe..0000000 --- a/functions_lib.sh +++ /dev/null @@ -1,391 +0,0 @@ -#!/bin/sh - -host_configuration() { - check_1 - check_1_1 - check_1_1_1 - check_1_1_2 - check_1_2 - check_1_2_1 - check_1_2_2 - check_1_2_3 - check_1_2_4 - check_1_2_5 - check_1_2_6 - check_1_2_7 - check_1_2_8 - check_1_2_9 - check_1_2_10 - check_1_2_11 - check_1_2_12 - check_1_end -} - -host_configuration_level1() { - check_1 - check_1_1 - check_1_1_1 - check_1_1_2 - check_1_2 - check_1_2_1 - check_1_2_2 - check_1_2_3 - check_1_2_5 - check_1_2_6 - check_1_2_7 - check_1_2_8 - check_1_2_9 - check_1_2_10 - check_1_2_11 - check_1_2_12 - check_1_end -} - -host_general_configuration() { - check_1 - check_1_1 - check_1_1_1 - check_1_1_2 - check_1_end -} - -linux_hosts_specific_configuration() { - check_1 - check_1_2 - check_1_2_1 - check_1_2_2 - check_1_2_3 - check_1_2_4 - check_1_2_5 - check_1_2_6 - check_1_2_7 - check_1_2_8 - check_1_2_9 - check_1_2_10 - check_1_2_11 - check_1_2_12 - check_1_end -} - -docker_daemon_configuration() { - check_2 - check_2_1 - check_2_2 - check_2_3 - check_2_4 - check_2_5 - check_2_6 - check_2_7 - check_2_8 - check_2_9 - check_2_10 - check_2_11 - check_2_12 - check_2_13 - check_2_14 - check_2_15 - check_2_16 - check_2_17 - check_2_end -} - -docker_daemon_configuration_level1() { - check_2 - check_2_1 - check_2_2 - check_2_3 - check_2_4 - check_2_5 - check_2_6 - check_2_7 - check_2_13 - check_2_14 - check_2_16 - check_2_17 - check_2_end -} - -docker_daemon_files() { - check_3 - check_3_1 - check_3_2 - check_3_3 - check_3_4 - check_3_5 - check_3_6 - check_3_7 - check_3_8 - check_3_9 - check_3_10 - check_3_11 - check_3_12 - check_3_13 - check_3_14 - check_3_15 - check_3_16 - check_3_17 - check_3_18 - check_3_19 - check_3_20 - check_3_21 - check_3_22 - check_3_end -} - -docker_daemon_files_level1() { - check_3 - check_3_1 - check_3_2 - check_3_3 - check_3_4 - check_3_5 - check_3_6 - check_3_7 - check_3_8 - check_3_9 - check_3_10 - check_3_11 - check_3_12 - check_3_13 - check_3_14 - check_3_15 - check_3_16 - check_3_17 - check_3_18 - check_3_19 - check_3_20 - check_3_21 - check_3_22 - check_3_end -} - -container_images() { - check_4 - check_4_1 - check_4_2 - check_4_3 - check_4_4 - check_4_5 - check_4_6 - check_4_7 - check_4_8 - check_4_9 - check_4_10 - check_4_11 - check_4_end -} - -container_images_level1() { - check_4 - check_4_1 - check_4_2 - check_4_3 - check_4_4 - check_4_6 - check_4_7 - check_4_9 - check_4_10 - check_4_end -} - -container_runtime() { - check_5 - check_running_containers - check_5_1 - check_5_2 - check_5_3 - check_5_4 - check_5_5 - check_5_6 - check_5_7 - check_5_8 - check_5_9 - check_5_10 - check_5_11 - check_5_12 - check_5_13 - check_5_14 - check_5_15 - check_5_16 - check_5_17 - check_5_18 - check_5_19 - check_5_20 - check_5_21 - check_5_22 - check_5_23 - check_5_24 - check_5_25 - check_5_26 - check_5_27 - check_5_28 - check_5_29 - check_5_30 - check_5_31 - check_5_end -} - -container_runtime_level1() { - check_5 - check_running_containers - check_5_1 - check_5_3 - check_5_4 - check_5_5 - check_5_6 - check_5_7 - check_5_8 - check_5_9 - check_5_10 - check_5_11 - check_5_12 - check_5_13 - check_5_14 - check_5_15 - check_5_16 - check_5_17 - check_5_18 - check_5_19 - check_5_20 - check_5_21 - check_5_24 - check_5_25 - check_5_26 - check_5_27 - check_5_28 - check_5_30 - check_5_31 - check_5_end -} - -docker_security_operations() { - check_6 - check_6_1 - check_6_2 - check_6_end -} - -docker_security_operations_level1() { - check_6 - check_6_1 - check_6_2 - check_6_end -} - -docker_swarm_configuration() { - check_7 - check_7_1 - check_7_2 - check_7_3 - check_7_4 - check_7_5 - check_7_6 - check_7_7 - check_7_8 - check_7_9 - check_7_10 - check_7_end -} - -docker_swarm_configuration_level1() { - check_7 - check_7_1 - check_7_2 - check_7_3 - check_7_4 - check_7_7 - check_7_end -} - -docker_enterprise_configuration() { - check_8 - check_product_license - check_8_1 - check_8_1_1 - check_8_1_2 - check_8_1_3 - check_8_1_4 - check_8_1_5 - check_8_1_6 - check_8_1_7 - check_8_2 - check_8_2_1 - check_8_end -} - -docker_enterprise_configuration_level1() { - check_8 - check_product_license - check_8_1 - check_8_1_1 - check_8_1_2 - check_8_1_3 - check_8_1_4 - check_8_1_5 - check_8_1_6 - check_8_1_7 - check_8_2 - check_8_2_1 - check_8_end -} - -universal_control_plane_configuration() { - check_8 - check_8_1 - check_8_1_1 - check_8_1_2 - check_8_1_3 - check_8_1_4 - check_8_1_5 - check_8_1_6 - check_8_1_7 - check_8_end -} - -docker_trusted_registry_configuration() { - check_8 - check_8_2 - check_8_2_1 - check_8_end -} - -community_checks() { - check_c - check_c_1 - check_c_2 - check_c_end -} - -# CIS -cis() { - host_configuration - docker_daemon_configuration - docker_daemon_files - container_images - container_runtime - docker_security_operations - docker_swarm_configuration - docker_enterprise_configuration -} - -cis_level1() { - host_configuration_level1 - docker_daemon_configuration_level1 - docker_daemon_files_level1 - container_images_level1 - container_runtime_level1 - docker_security_operations_level1 - docker_swarm_configuration_level1 - docker_enterprise_configuration_level1 -} - -# Community contributed -community() { - community_checks -} - -# All -all() { - cis - community -} diff --git a/helper_lib.sh b/helper_lib.sh deleted file mode 100644 index e24a14c..0000000 --- a/helper_lib.sh +++ /dev/null @@ -1,129 +0,0 @@ -#!/bin/sh - -# Returns the absolute path of a given string -abspath () { case "$1" in /*)printf "%s\n" "$1";; *)printf "%s\n" "$PWD/$1";; esac; } - -# Audit rules default path -auditrules="/etc/audit/audit.rules" - -# Compares versions of software of the format X.Y.Z -do_version_check() { - [ "$1" = "$2" ] && return 10 - - ver1front=$(printf "%s" "$1" | cut -d "." -f -1) - ver1back=$(printf "%s" "$1" | cut -d "." -f 2-) - ver2front=$(printf "%s" "$2" | cut -d "." -f -1) - ver2back=$(printf "%s" "$2" | cut -d "." -f 2-) - - if [ "$ver1front" != "$1" ] || [ "$ver2front" != "$2" ]; then - [ "$ver1front" -gt "$ver2front" ] && return 11 - [ "$ver1front" -lt "$ver2front" ] && return 9 - - [ "$ver1front" = "$1" ] || [ -z "$ver1back" ] && ver1back=0 - [ "$ver2front" = "$2" ] || [ -z "$ver2back" ] && ver2back=0 - do_version_check "$ver1back" "$ver2back" - return $? - else - [ "$1" -gt "$2" ] && return 11 || return 9 - fi -} - -# Extracts commandline args from the newest running processes named like the first parameter -get_command_line_args() { - PROC="$1" - - for PID in $(pgrep -f -n "$PROC"); do - tr "\0" " " < /proc/"$PID"/cmdline - done -} - -# Extract the cumulative command line arguments for the docker daemon -# -# If specified multiple times, all matches are returned. -# Accounts for long and short variants, call with short option. -# Does not account for option defaults or implicit options. -get_docker_cumulative_command_line_args() { - OPTION="$1" - - if ! get_command_line_args "docker daemon" >/dev/null 2>&1 ; then - line_arg="docker daemon" - else - line_arg="dockerd" - fi - - get_command_line_args "$line_arg" | - # normalize known long options to their short versions - sed \ - -e 's/\-\-debug/-D/g' \ - -e 's/\-\-host/-H/g' \ - -e 's/\-\-log-level/-l/g' \ - -e 's/\-\-version/-v/g' \ - | - # normalize parameters separated by space(s) to -O=VALUE - sed \ - -e 's/\-\([DHlv]\)[= ]\([^- ][^ ]\)/-\1=\2/g' \ - | - # get the last interesting option - tr ' ' "\n" | - grep "^${OPTION}" | - # normalize quoting of values - sed \ - -e 's/"//g' \ - -e "s/'//g" -} - -# Extract the effective command line arguments for the docker daemon -# -# Accounts for multiple specifications, takes the last option. -# Accounts for long and short variants, call with short option -# Does not account for option default or implicit options. -get_docker_effective_command_line_args() { - OPTION="$1" - get_docker_cumulative_command_line_args "$OPTION" | tail -n1 -} - -get_docker_configuration_file() { - FILE="$(get_docker_effective_command_line_args '--config-file' | \ - sed 's/.*=//g')" - - if [ -f "$FILE" ]; then - CONFIG_FILE="$FILE" - elif [ -f '/etc/docker/daemon.json' ]; then - CONFIG_FILE='/etc/docker/daemon.json' - else - CONFIG_FILE='/dev/null' - fi -} - -get_docker_configuration_file_args() { - OPTION="$1" - - get_docker_configuration_file - - grep "$OPTION" "$CONFIG_FILE" | sed 's/.*://g' | tr -d '" ', -} - -get_service_file() { - SERVICE="$1" - - if [ -f "/etc/systemd/system/$SERVICE" ]; then - echo "/etc/systemd/system/$SERVICE" - elif [ -f "/lib/systemd/system/$SERVICE" ]; then - echo "/lib/systemd/system/$SERVICE" - elif systemctl show -p FragmentPath "$SERVICE" 2> /dev/null 1>&2; then - systemctl show -p FragmentPath "$SERVICE" | sed 's/.*=//' - else - echo "/usr/lib/systemd/system/$SERVICE" - fi -} - -yell_info() { -yell "# -------------------------------------------------------------------------------------------- -# Docker Bench for Security v$version -# -# Docker, Inc. (c) 2015-$(date +"%Y") -# -# Checks for dozens of common best-practices around deploying Docker containers in production. -# Inspired by the CIS Docker Benchmark v1.2.0. -# --------------------------------------------------------------------------------------------" -} diff --git a/output_lib.sh b/output_lib.sh deleted file mode 100644 index b6580a1..0000000 --- a/output_lib.sh +++ /dev/null @@ -1,155 +0,0 @@ -#!/bin/sh - -if [ -n "$nocolor" ] && [ "$nocolor" = "nocolor" ]; then - bldred='' - bldgrn='' - bldblu='' - bldylw='' - txtrst='' -else - bldred='\033[1;31m' # Bold Red - bldgrn='\033[1;32m' # Bold Green - bldblu='\033[1;34m' # Bold Blue - bldylw='\033[1;33m' # Bold Yellow - txtrst='\033[0m' -fi - -logit () { - printf "%b\n" "$1" | tee -a "$logger" -} - -info () { - printf "%b\n" "${bldblu}[INFO]${txtrst} $1" | tee -a "$logger" -} - -pass () { - printf "%b\n" "${bldgrn}[PASS]${txtrst} $1" | tee -a "$logger" -} - -warn () { - printf "%b\n" "${bldred}[WARN]${txtrst} $1" | tee -a "$logger" -} - -note () { - printf "%b\n" "${bldylw}[NOTE]${txtrst} $1" | tee -a "$logger" -} - -yell () { - printf "%b\n" "${bldylw}$1${txtrst}\n" -} - -appendjson () { - if [ -s "$logger.json" ]; then - tail -n 1 "$logger.json" | wc -c | xargs -I {} truncate "$logger.json" -s -{} - printf "},\n" | tee -a "$logger.json" 2>/dev/null 1>&2 - else - printf "[" | tee -a "$logger.json" 2>/dev/null 1>&2 - fi -} - -beginjson () { - printf "{\n \"dockerbenchsecurity\": \"%s\",\n \"start\": %s,\n \"tests\": [" "$1" "$2" | tee -a "$logger.json" 2>/dev/null 1>&2 -} - -endjson (){ - printf "\n ], \"checks\": %s, \"score\": %s, \"end\": %s\n}]" "$1" "$2" "$3" | tee -a "$logger.json" 2>/dev/null 1>&2 -} - -logjson (){ - printf "\n \"%s\": \"%s\"," "$1" "$2" | tee -a "$logger.json" 2>/dev/null 1>&2 -} - -SSEP= -SEP= -startsectionjson() { - printf "%s\n {\"id\": \"%s\", \"desc\": \"%s\", \"results\": [" "$SSEP" "$1" "$2" | tee -a "$logger.json" 2>/dev/null 1>&2 - SEP= - SSEP="," -} - -endsectionjson() { - printf "\n ]}" | tee -a "$logger.json" 2>/dev/null 1>&2 -} - -starttestjson() { - printf "%s\n {\"id\": \"%s\", \"desc\": \"%s\", " "$SEP" "$1" "$2" | tee -a "$logger.json" 2>/dev/null 1>&2 - SEP="," -} - -resulttestjson() { - if [ $# -eq 1 ]; then - printf "\"result\": \"%s\"" "$1" | tee -a "$logger.json" 2>/dev/null 1>&2 - elif [ $# -eq 2 ]; then - # Result also contains details - printf "\"result\": \"%s\", \"details\": \"%s\"" "$1" "$2" | tee -a "$logger.json" 2>/dev/null 1>&2 - else - # Result also includes details and a list of items. Add that directly to details and to an array property "items" - # Also limit the number of items to $limit, if $limit is non-zero - if [ $limit != 0 ]; then - truncItems="" - ITEM_COUNT=0 - for item in $3; do - truncItems="$truncItems $item" - ITEM_COUNT=$((ITEM_COUNT + 1)); - if [ "$ITEM_COUNT" == "$limit" ]; then - truncItems="$truncItems (truncated)" - break; - fi - done - else - truncItems=$3 - fi - itemsJson=$(printf "["; ISEP=""; ITEMCOUNT=0; for item in $truncItems; do printf "%s\"%s\"" "$ISEP" "$item"; ISEP=","; done; printf "]") - printf "\"result\": \"%s\", \"details\": \"%s: %s\", \"items\": %s" "$1" "$2" "$truncItems" "$itemsJson" | tee -a "$logger.json" 2>/dev/null 1>&2 - fi - # Log remediation measure - if [ -n "$remediation" ] && [ "$1" != "PASS" ]; then - printf ", \"remediation\": \"%s\"" "$remediation" | tee -a "$logger.json" 2>/dev/null 1>&2 - if [ -n "$remediationImpact" ]; then - printf ", \"remediation-impact\": \"%s\"" "$remediationImpact" | tee -a "$logger.json" 2>/dev/null 1>&2 - fi - fi - printf "}" | tee -a "$logger.json" 2>/dev/null 1>&2 -} - -saveRemediation() { - local id remediation remediationImpact - while [ "${1}" ]; do - case "${1}" in - --id) - id="${2}" - shift - ;; - --rem) - remediation="${2}" - shift - ;; - --imp) - remediationImpact="${2}" - shift - ;; - *) - echo "Unknown parameter: ${1}" >&2 - return 1 - esac - if ! shift; then - echo 'Missing parameter argument.' >&2 - return 1 - fi - done - - if [ -n "${remediation}" ]; then - if [ -n "${checkHeader}" ]; then - if [ -n "${addSpaceHeader}" ]; then - globalRemediation="${globalRemediation}\n" - fi - globalRemediation="${globalRemediation}\n${bldblu}[INFO]${txtrst} ${checkHeader}" - checkHeader="" - addSpaceHeader="1" - fi - globalRemediation="${globalRemediation}\n${bldblu}[INFO]${txtrst} ${id} - ${remediation}" - if [ -n "${remediationImpact}" ]; then - globalRemediation="${globalRemediation} Impact: ${remediationImpact}" - fi - fi -} From 091b4b954a8b8b4faf6b7c142193dd1dd5e0e695 Mon Sep 17 00:00:00 2001 From: Razvan Stoica Date: Tue, 16 Mar 2021 10:11:29 +0200 Subject: [PATCH 28/48] Add option to specify trusted users. Add option to disable the printing of remediation measures. --- docker-bench-security.sh | 42 +++++++++++++++++++++++----------------- 1 file changed, 24 insertions(+), 18 deletions(-) diff --git a/docker-bench-security.sh b/docker-bench-security.sh index c1e467f..5cccc12 100755 --- a/docker-bench-security.sh +++ b/docker-bench-security.sh @@ -10,8 +10,8 @@ version='1.3.5' # Load dependencies -. ./functions_lib.sh -. ./helper_lib.sh +. ./functions/functions_lib.sh +. ./functions/helper_lib.sh # Setup the paths this_path=$(abspath "$0") ## Path of this file including filename @@ -24,7 +24,7 @@ readonly myname export PATH="$PATH:/bin:/sbin:/usr/bin:/usr/local/bin:/usr/sbin/" # Check for required program(s) -req_progs='awk docker grep stat tee tail wc xargs truncate' +req_progs='awk docker grep stat tee tail wc xargs truncate sed' for p in $req_progs; do command -v "$p" >/dev/null 2>&1 || { printf "%s command not found.\n" "$p"; exit 1; } done @@ -64,13 +64,15 @@ Options: -b optional Do not print colors -h optional Print this help message -l FILE optional Log output in FILE, inside container if run using docker - -c CHECK optional Comma delimited list of specific check(s) - -e CHECK optional Comma delimited list of specific check(s) to exclude + -u USERS optional Comma delimited list of trusted docker user(s) + -c CHECK optional Comma delimited list of specific check(s) id + -e CHECK optional Comma delimited list of specific check(s) id to exclude -i INCLUDE optional Comma delimited list of patterns within a container or image name to check -x EXCLUDE optional Comma delimited list of patterns within a container or image name to exclude from check -n LIMIT optional In JSON output, when reporting lists of items (containers, images, etc.), limit the number of reported items to LIMIT. Default 0 (no limit). + -p PRINT optional Disable the printing of remediation measures. Default: print remediation measures. -Complete list of checks: +Complete list of checks: Full documentation: Released under the Apache-2.0 License. EOF @@ -79,22 +81,28 @@ EOF # Get the flags # If you add an option here, please # remember to update usage() above. -while getopts bhl:c:e:i:x:t:n: args +while getopts bhl:u:c:e:i:x:t:n:p args do case $args in b) nocolor="nocolor";; h) usage; exit 0 ;; l) logger="$OPTARG" ;; + u) dockertrustusers="$OPTARG" ;; c) check="$OPTARG" ;; e) checkexclude="$OPTARG" ;; i) include="$OPTARG" ;; x) exclude="$OPTARG" ;; n) limit="$OPTARG" ;; + p) printremediation="0" ;; *) usage; exit 1 ;; esac done +# Default values if [ -z "$logger" ]; then + if [ ! -d log ]; then + mkdir log + fi logger="log/${myname}.log" fi @@ -102,15 +110,19 @@ if [ -z "$limit" ]; then limit=0 fi +if [ -z "$printremediation" ]; then + printremediation="1" +fi + # Load output formating -. ./output_lib.sh +. ./functions/output_lib.sh yell_info # Warn if not root ID=$(id -u) if [ "x$ID" != "x0" ]; then - warn "Some tests might require root to run" + warn "$(yell 'Some tests might require root to run')\n" sleep 3 fi @@ -163,12 +175,6 @@ main () { images=$(docker images -q | grep -v "$benchcont") fi - if [ -z "$containers" ]; then - running_containers=0 - else - running_containers=1 - fi - for test in tests/*.sh; do . ./"$test" done @@ -178,7 +184,7 @@ main () { cis elif [ -z "$check" ]; then # No check defined but excludes defined set to calls in cis() function - check=$(sed -ne "/cis() {/,/}/{/{/d; /}/d; p}" functions_lib.sh) + check=$(sed -ne "/cis() {/,/}/{/{/d; /}/d; p}" functions/functions_lib.sh) fi for c in $(echo "$check" | sed "s/,/ /g"); do @@ -198,7 +204,7 @@ main () { continue elif echo "$c" | grep -vE 'check_[0-9]|check_[a-z]' 2>/dev/null 1>&2; then # Function not a check, fill loop_checks with all check from function - loop_checks="$(sed -ne "/$c() {/,/}/{/{/d; /}/d; p}" functions_lib.sh)" + loop_checks="$(sed -ne "/$c() {/,/}/{/{/d; /}/d; p}" functions/functions_lib.sh)" else # Just one check loop_checks="$c" @@ -213,7 +219,7 @@ main () { fi done - if [ -n "${globalRemediation}" ]; then + if [ -n "${globalRemediation}" ] && [ "$printremediation" = "1" ]; then logit "\n\n${bldylw}Section B - Remediation measures${txtrst}" logit "${globalRemediation}" fi From e5efe2bf40c5f9449f874cc4d075e0feb5801384 Mon Sep 17 00:00:00 2001 From: Razvan Stoica Date: Tue, 16 Mar 2021 10:13:31 +0200 Subject: [PATCH 29/48] Add explanations for newly added features --- README.md | 132 ++++++++++++++++++++++++------------------------------ 1 file changed, 58 insertions(+), 74 deletions(-) diff --git a/README.md b/README.md index dae2f41..cc1f270 100644 --- a/README.md +++ b/README.md @@ -2,23 +2,29 @@ ![Docker Bench for Security running](img/benchmark_log.png) -The Docker Bench for Security is a script that checks for dozens of common -best-practices around deploying Docker containers in production. The tests are -all automated, and are inspired by the [CIS Docker Benchmark v1.2.0](https://www.cisecurity.org/benchmark/docker/). +The Docker Bench for Security is a script that checks for dozens of common best-practices around deploying Docker containers in production. The tests are all automated, and are inspired by the [CIS Docker Benchmark v1.2.0](https://www.cisecurity.org/benchmark/docker/). -We are making this available as an open-source utility so the Docker community -can have an easy way to self-assess their hosts and docker containers against -this benchmark. +The list with all tests is available [here](tests/TESTS.md). + +We are making this available as an open-source utility so the Docker community can have an easy way to self-assess their hosts and docker containers against this benchmark. ## Running Docker Bench for Security -We packaged docker bench as a small container for your convenience. Note that -this container is being run with a *lot* of privilege -- sharing the host's -filesystem, pid and network namespaces, due to portions of the benchmark -applying to the running host. +### Run from your base host -The easiest way to run your hosts against the Docker Bench for Security is by -running our pre-built container: +You can simply run this script from your base host by running: + +```sh +git clone https://github.com/docker/docker-bench-security.git +cd docker-bench-security +sudo sh docker-bench-security.sh +``` + +### Run with Docker + +We packaged docker bench as a small container for your convenience. Note that this container is being run with a *lot* of privilege -- sharing the host's filesystem, pid and network namespaces, due to portions of the benchmark applying to the running host. + +The easiest way to run your hosts against the Docker Bench for Security is by running our pre-built container: ```sh docker run --rm --net host --pid host --userns host --cap-add audit_control \ @@ -36,20 +42,7 @@ docker run --rm --net host --pid host --userns host --cap-add audit_control \ Don't forget to adjust the shared volumes according to your operating system. Some examples are: -1. `Docker Desktop` on macOS doesn't have `/usr/lib/systemd` or the above Docker - binaries. - -```sh -docker run --rm --net host --pid host --userns host --cap-add audit_control \ - -e DOCKER_CONTENT_TRUST=$DOCKER_CONTENT_TRUST \ - -v /etc:/etc \ - -v /var/lib:/var/lib:ro \ - -v /var/run/docker.sock:/var/run/docker.sock:ro \ - --label docker_bench_security \ - docker/docker-bench-security -``` - -2. On Ubuntu the `docker.service` and `docker.secret` files are located in +1. On Ubuntu the `docker.service` and `docker.secret` files are located in `/lib/systemd/system` folder by default. ```sh @@ -66,17 +59,24 @@ docker run --rm --net host --pid host --userns host --cap-add audit_control \ docker/docker-bench-security ``` +2. `Docker Desktop` on macOS doesn't have `/usr/lib/systemd` or the above Docker + binaries. + +```sh +docker run --rm --net host --pid host --userns host --cap-add audit_control \ + -e DOCKER_CONTENT_TRUST=$DOCKER_CONTENT_TRUST \ + -v /etc:/etc \ + -v /var/lib:/var/lib:ro \ + -v /var/run/docker.sock:/var/run/docker.sock:ro \ + --label docker_bench_security \ + docker/docker-bench-security +``` + +### Note + Docker bench requires Docker 1.13.0 or later in order to run. -Note that when distributions don't contain `auditctl`, the audit tests will -check `/etc/audit/audit.rules` to see if a rule is present instead. - -Distribution specific Dockerfiles that fix these issues are available in the -[distros directory](https://github.com/docker/docker-bench-security/tree/master/distros). - -The [distribution specific Dockerfiles](https://github.com/docker/docker-bench-security/tree/master/distros) -may also help if the distribution you're using hasn't yet shipped Docker -version 1.13.0 or later. +Note that when distributions don't contain `auditctl`, the audit tests will check `/etc/audit/audit.rules` to see if a rule is present instead. ### Docker Bench for Security options @@ -84,48 +84,40 @@ version 1.13.0 or later. -b optional Do not print colors -h optional Print this help message -l FILE optional Log output in FILE, inside container if run using docker - -c CHECK optional Comma delimited list of specific check(s) - -e CHECK optional Comma delimited list of specific check(s) to exclude + -u USERS optional Comma delimited list of trusted docker user(s) + -c CHECK optional Comma delimited list of specific check(s) id + -e CHECK optional Comma delimited list of specific check(s) id to exclude -i INCLUDE optional Comma delimited list of patterns within a container or image name to check -x EXCLUDE optional Comma delimited list of patterns within a container or image name to exclude from check -n LIMIT optional In JSON output, when reporting lists of items (containers, images, etc.), limit the number of reported items to LIMIT. Default 0 (no limit). + -p PRINT optional Disable the printing of remediation measures. Default: print remediation measures. ``` -By default the Docker Bench for Security script will run all available CIS tests -and produce logs in the log folder from current directory, named `docker-bench-security.sh.log.json` -and `docker-bench-security.sh.log`. +By default the Docker Bench for Security script will run all available CIS tests and produce +logs in the log folder from current directory, named `docker-bench-security.sh.log.json` and +`docker-bench-security.sh.log`. -If the docker container is used then the log files will be created inside the container. If you wish to access them from the host after the container has been run you will need to mount a volume for storing them in. +If the docker container is used then the log files will be created inside the container in location `/usr/local/bin/log/`. If you wish to access them from the host after the container has been run you will need to mount a volume for storing them in. -The CIS based checks are named `check_
    _`, e.g. `check_2_6` -and community contributed checks are named `check_c_`. -A complete list of checks is present in [functions_lib.sh](functions_lib.sh). +The CIS based checks are named `check_
    _`, e.g. `check_2_6` and community contributed checks are named `check_c_`. A complete list of checks is present in [TESTS.md](tests/TESTS.md). -`sh docker-bench-security.sh -l /tmp/docker-bench-security.sh.log -c check_2_2` -will only run check `2.2 Ensure the logging level is set to 'info'`. +`sh docker-bench-security.sh -c check_2_2` will only run check `2.2 Ensure the logging level is set to 'info'`. -`sh docker-bench-security.sh -l /tmp/docker-bench-security.sh.log -e check_2_2` -will run all available checks except `2.2 Ensure the logging level is set to 'info'`. +`sh docker-bench-security.sh -e check_2_2` will run all available checks except `2.2 Ensure the logging level is set to 'info'`. -`sh docker-bench-security.sh -l /tmp/docker-bench-security.sh.log -e docker_enterprise_configuration` -will run all available checks except the docker_enterprise_configuration group +`sh docker-bench-security.sh -e docker_enterprise_configuration` will run all available checks except the docker_enterprise_configuration group -`sh docker-bench-security.sh -l /tmp/docker-bench-security.sh.log -e docker_enterprise_configuration,check_2_2` -will run all available checks except the docker_enterprise_configuration group -and `2.2 Ensure the logging level is set to 'info'` +`sh docker-bench-security.sh -e docker_enterprise_configuration,check_2_2` will run allavailable checks except the docker_enterprise_configuration group and `2.2 Ensure the logging level is set to 'info'` -`sh docker-bench-security.sh -l /tmp/docker-bench-security.sh.log -c container_images -e check_4_5` -will run just the container_images checks except -`4.5 Ensure Content trust for Docker is Enabled` +`sh docker-bench-security.sh -c container_images -e check_4_5` will run just the container_images checks except `4.5 Ensure Content trust for Docker is Enabled` -Note that when submitting checks, provide information why it is a -reasonable test to add and please include some kind of official documentation -verifying that information. +Note that when submitting checks, provide information why it is a reasonable test to add and please include some kind of official documentation verifying that information. -## Building Docker Bench for Security +## Building Docker image -If you wish to build and run this container yourself, you can follow the -following steps: +You have two options if you wish to build and run this container yourself: + +1. Use Docker Build: ```sh git clone https://github.com/docker/docker-bench-security.git @@ -133,8 +125,9 @@ cd docker-bench-security docker build --no-cache -t docker-bench-security . ``` -followed by an appropriate `docker run` command as stated above -or use [Docker Compose](https://docs.docker.com/compose/): +Followed by an appropriate `docker run` command as stated above. + +2. Use Docker Compose: ```sh git clone https://github.com/docker/docker-bench-security.git @@ -142,13 +135,4 @@ cd docker-bench-security docker-compose run --rm docker-bench-security ``` -Also, this script can also be simply run from your base host by running: - -```sh -git clone https://github.com/docker/docker-bench-security.git -cd docker-bench-security -sudo sh docker-bench-security.sh -``` - -This script was built to be POSIX 2004 compliant, so it should be portable -across any Unix platform. +This script was built to be POSIX 2004 compliant, so it should be portable across any Unix platform. From 68bcd14fb3f6c9941cf8d73587773e65a4b245a9 Mon Sep 17 00:00:00 2001 From: Razvan Stoica Date: Wed, 17 Mar 2021 14:05:48 +0200 Subject: [PATCH 30/48] Increase version --- docker-bench-security.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docker-bench-security.sh b/docker-bench-security.sh index 5cccc12..510ff05 100755 --- a/docker-bench-security.sh +++ b/docker-bench-security.sh @@ -7,7 +7,7 @@ # Checks for dozens of common best-practices around deploying Docker containers in production. # -------------------------------------------------------------------------------------------- -version='1.3.5' +version='1.3.6' # Load dependencies . ./functions/functions_lib.sh From 7e89fdd3641b398d5dc32d391b9f8ce7ebdcf21d Mon Sep 17 00:00:00 2001 From: Razvan Stoica Date: Thu, 18 Mar 2021 10:28:45 +0200 Subject: [PATCH 31/48] Add remediation stuff on host configuration --- tests/1_host_configuration.sh | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/tests/1_host_configuration.sh b/tests/1_host_configuration.sh index 65954c4..a8deced 100644 --- a/tests/1_host_configuration.sh +++ b/tests/1_host_configuration.sh @@ -19,6 +19,8 @@ check_1_1() { check_1_1_1() { local id="1.1.1" local desc="Ensure the container host has been Hardened (Not Scored)" + local remediation="You may consider various Security Benchmarks for your container host." + local remediationImpact="None." local check="$id - $desc" starttestjson "$id" "$desc" @@ -29,6 +31,8 @@ check_1_1_1() { check_1_1_2() { local id="1.1.2" local desc="Ensure that the version of Docker is up to date (Not Scored)" + local remediation="You should monitor versions of Docker releases and make sure your software is updated as required." + local remediationImpact="You should perform a risk assessment regarding Docker version updates and review how they may impact your operations." local check="$id - $desc" starttestjson "$id" "$desc" @@ -60,6 +64,7 @@ check_1_2_1() { local id="1.2.1" local desc="Ensure a separate partition for containers has been created (Scored)" local remediation="For new installations, you should create a separate partition for the /var/lib/docker mount point. For systems that have already been installed, you should use the Logical Volume Manager (LVM) within Linux to create a new partition." + local remediationImpact="None." local check="$id - $desc" starttestjson "$id" "$desc" From c05c58674aeb96161398df4c4403930bf46b1525 Mon Sep 17 00:00:00 2001 From: Razvan Stoica Date: Thu, 18 Mar 2021 10:29:28 +0200 Subject: [PATCH 32/48] Add remediation stuff on daemon configuration --- tests/2_docker_daemon_configuration.sh | 32 ++++++++++++++++++++++++++ 1 file changed, 32 insertions(+) diff --git a/tests/2_docker_daemon_configuration.sh b/tests/2_docker_daemon_configuration.sh index 5d56d4f..5b81ceb 100644 --- a/tests/2_docker_daemon_configuration.sh +++ b/tests/2_docker_daemon_configuration.sh @@ -32,6 +32,8 @@ check_2_1() { check_2_2() { local id="2.2" local desc="Ensure the logging level is set to 'info' (Scored)" + local remediation="Ensure that the Docker daemon configuration file has the following configuration included log-level: info. Alternatively, run the Docker daemon as following: dockerd --log-level=info" + local remediationImpact="None." local check="$id - $desc" starttestjson "$id" "$desc" @@ -63,6 +65,8 @@ check_2_2() { check_2_3() { local id="2.3" local desc="Ensure Docker is allowed to make changes to iptables (Scored)" + local remediation="Do not run the Docker daemon with --iptables=false option." + local remediationImpact="The Docker daemon service requires iptables rules to be enabled before it starts." local check="$id - $desc" starttestjson "$id" "$desc" @@ -81,6 +85,8 @@ check_2_3() { check_2_4() { local id="2.4" local desc="Ensure insecure registries are not used (Scored)" + local remediation="You should ensure that no insecure registries are in use." + local remediationImpact="None." local check="$id - $desc" starttestjson "$id" "$desc" @@ -104,6 +110,8 @@ check_2_4() { check_2_5() { local id="2.5" local desc="Ensure aufs storage driver is not used (Scored)" + local remediation="Do not start Docker daemon as using dockerd --storage-driver aufs option." + local remediationImpact="aufs is the only storage driver that allows containers to share executable and shared library memory. Its use should be reviewed in line with your organization's security policy." local check="$id - $desc" starttestjson "$id" "$desc" @@ -119,6 +127,8 @@ check_2_5() { check_2_6() { local id="2.6" local desc="Ensure TLS authentication for Docker daemon is configured (Scored)" + local remediation="Follow the steps mentioned in the Docker documentation or other references. By default, TLS authentication is not configured." + local remediationImpact="You would need to manage and guard certificates and keys for the Docker daemon and Docker clients." local check="$id - $desc" starttestjson "$id" "$desc" @@ -148,6 +158,8 @@ check_2_6() { check_2_7() { local id="2.7" local desc="Ensure the default ulimit is configured appropriately (Not Scored)" + local remediation="Run Docker in daemon mode and pass --default-ulimit as option with respective ulimits as appropriate in your environment and in line with your security policy. Example: dockerd --default-ulimit nproc=1024:2048 --default-ulimit nofile=100:200" + local remediationImpact="If ulimits are set incorrectly this could cause issues with system resources, possibly causing a denial of service condition." local check="$id - $desc" starttestjson "$id" "$desc" @@ -167,6 +179,8 @@ check_2_7() { check_2_8() { local id="2.8" local desc="Enable user namespace support (Scored)" + local remediation="Please consult the Docker documentation for various ways in which this can be configured depending upon your requirements. The high-level steps are: Ensure that the files /etc/subuid and /etc/subgid exist. Start the docker daemon with --userns-remap flag." + local remediationImpact="User namespace remapping is incompatible with a number of Docker features and also currently breaks some of its functionalities." local check="$id - $desc" starttestjson "$id" "$desc" @@ -185,6 +199,8 @@ check_2_8() { check_2_9() { local id="2.9" local desc="Ensure the default cgroup usage has been confirmed (Scored)" + local remediation="The default setting is in line with good security practice and can be left in situ." + local remediationImpact="None." local check="$id - $desc" starttestjson "$id" "$desc" @@ -205,6 +221,8 @@ check_2_9() { check_2_10() { local id="2.10" local desc="Ensure base device size is not changed until needed (Scored)" + local remediation="Do not set --storage-opt dm.basesize until needed." + local remediationImpact="None." local check="$id - $desc" starttestjson "$id" "$desc" @@ -223,6 +241,8 @@ check_2_10() { check_2_11() { local id="2.11" local desc="Ensure that authorization for Docker client commands is enabled (Scored)" + local remediation="Install/Create an authorization plugin. Configure the authorization policy as desired. Start the docker daemon using command dockerd --authorization-plugin=" + local remediationImpact="Each Docker command needs to pass through the authorization plugin mechanism. This may have a performance impact" local check="$id - $desc" starttestjson "$id" "$desc" @@ -241,6 +261,8 @@ check_2_11() { check_2_12() { local id="2.12" local desc="Ensure centralized and remote logging is configured (Scored)" + local remediation="Set up the desired log driver following its documentation. Start the docker daemon using that logging driver. Example: dockerd --log-driver=syslog --log-opt syslog-address=tcp://192.xxx.xxx.xxx" + local remediationImpact="None." local check="$id - $desc" starttestjson "$id" "$desc" @@ -256,6 +278,8 @@ check_2_12() { check_2_13() { local id="2.13" local desc="Ensure live restore is enabled (Scored)" + local remediation="Run Docker in daemon mode and pass --live-restore option." + local remediationImpact="None." local check="$id - $desc" starttestjson "$id" "$desc" @@ -279,6 +303,8 @@ check_2_13() { check_2_14() { local id="2.14" local desc="Ensure Userland Proxy is Disabled (Scored)" + local remediation="You should run the Docker daemon using command: dockerd --userland-proxy=false" + local remediationImpact="Some systems with older Linux kernels may not be able to support hairpin NAT and therefore require the userland proxy service. Also, some networking setups can be impacted by the removal of the userland proxy." local check="$id - $desc" starttestjson "$id" "$desc" @@ -297,6 +323,8 @@ check_2_14() { check_2_15() { local id="2.15" local desc="Ensure that a daemon-wide custom seccomp profile is applied if appropriate (Not Scored)" + local remediation="By default, Docker's default seccomp profile is applied. If this is adequate for your environment, no action is necessary." + local remediationImpact="A misconfigured seccomp profile could possibly interrupt your container environment. You should therefore exercise extreme care if you choose to override the default settings." local check="$id - $desc" starttestjson "$id" "$desc" @@ -315,6 +343,8 @@ check_2_16() { local id="2.16" local desc="Ensure that experimental features are not implemented in production (Scored)" + local remediation="You should not pass --experimental as a runtime parameter to the Docker daemon on production systems." + local remediationImpact="None." local check="$id - $desc" starttestjson "$id" "$desc" @@ -337,6 +367,8 @@ check_2_16() { check_2_17() { local id="2.17" local desc="Ensure containers are restricted from acquiring new privileges (Scored)" + local remediation="You should run the Docker daemon using command: dockerd --no-new-privileges" + local remediationImpact="no_new_priv prevents LSMs such as SELinux from escalating the privileges of individual containers." local check="$id - $desc" starttestjson "$id" "$desc" From 25de0bd826d1e370ca7c3a28c7a672fc9c7501ed Mon Sep 17 00:00:00 2001 From: Razvan Stoica Date: Thu, 18 Mar 2021 10:30:30 +0200 Subject: [PATCH 33/48] Add remediation stuff on security operations --- tests/6_docker_security_operations.sh | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/tests/6_docker_security_operations.sh b/tests/6_docker_security_operations.sh index 1a97be6..00514f8 100644 --- a/tests/6_docker_security_operations.sh +++ b/tests/6_docker_security_operations.sh @@ -12,6 +12,8 @@ check_6() { check_6_1() { local id="6.1" local desc="Ensure that image sprawl is avoided (Not Scored)" + local remediation="You should keep only the images that you actually need and establish a workflow to remove old or stale images from the host. Additionally, you should use features such as pull-by-digest to get specific images from the registry." + local remediationImpact="docker system prune -a removes all exited containers as well as all images and volumes that are not referenced by running containers, including for UCP and DTR." local check="$id - $desc" starttestjson "$id" "$desc" @@ -36,6 +38,8 @@ check_6_1() { check_6_2() { local id="6.2" local desc="Ensure that container sprawl is avoided (Not Scored)" + local remediation="You should periodically check your container inventory on each host and clean up containers which are not in active use with the command: docker container prune" + local remediationImpact="You should retain containers that are actively in use, and delete ones which are no longer needed." local check="$id - $desc" starttestjson "$id" "$desc" From 3a7fe3bb2438352a406344f55fc423deb7b85d01 Mon Sep 17 00:00:00 2001 From: Razvan Stoica Date: Thu, 18 Mar 2021 10:31:22 +0200 Subject: [PATCH 34/48] Add remediation stuff on swarm configuration --- tests/7_docker_swarm_configuration.sh | 20 ++++++++++++++++++++ 1 file changed, 20 insertions(+) diff --git a/tests/7_docker_swarm_configuration.sh b/tests/7_docker_swarm_configuration.sh index 057d693..2188160 100644 --- a/tests/7_docker_swarm_configuration.sh +++ b/tests/7_docker_swarm_configuration.sh @@ -12,6 +12,8 @@ check_7() { check_7_1() { local id="7.1" local desc="Ensure swarm mode is not Enabled, if not needed (Scored)" + local remediation="If swarm mode has been enabled on a system in error, you should run the command: docker swarm leave" + local remediationImpact="Disabling swarm mode will impact the operation of Docker Enterprise components if these are in use." local check="$id - $desc" starttestjson "$id" "$desc" @@ -27,6 +29,8 @@ check_7_1() { check_7_2() { local id="7.2" local desc="Ensure that the minimum number of manager nodes have been created in a swarm (Scored)" + local remediation="If an excessive number of managers is configured, the excess nodes can be demoted to workers using command: docker node demote " + local remediationImpact="None." local check="$id - $desc" starttestjson "$id" "$desc" @@ -48,6 +52,8 @@ check_7_2() { check_7_3() { local id="7.3" local desc="Ensure that swarm services are bound to a specific host interface (Scored)" + local remediation="Resolving this issues requires re-initialization of the swarm, specifying a specific interface for the --listen-addr parameter." + local remediationImpact="None." local check="$id - $desc" starttestjson "$id" "$desc" @@ -69,6 +75,8 @@ check_7_3() { check_7_4() { local id="7.4" local desc="Ensure that all Docker swarm overlay networks are encrypted (Scored)" + local remediation="You should create overlay networks the with --opt encrypted flag." + local remediationImpact="None." local check="$id - $desc" starttestjson "$id" "$desc" @@ -98,6 +106,8 @@ check_7_4() { check_7_5() { local id="7.5" local desc="Ensure that Docker's secret management commands are used for managing secrets in a swarm cluster (Not Scored)" + local remediation="You should follow the docker secret documentation and use it to manage secrets effectively." + local remediationImpact="None." local check="$id - $desc" starttestjson "$id" "$desc" @@ -118,6 +128,8 @@ check_7_5() { check_7_6() { local id="7.6" local desc="Ensure that swarm manager is run in auto-lock mode (Scored)" + local remediation="If you are initializing a swarm, use the command: docker swarm init --autolock. If you want to set --autolock on an existing swarm manager node, use the command: docker swarm update --autolock." + local remediationImpact="A swarm in auto-lock mode will not recover from a restart without manual intervention from an administrator to enter the unlock key. This may not always be desirable, and should be reviewed at a policy level." local check="$id - $desc" starttestjson "$id" "$desc" @@ -138,6 +150,8 @@ check_7_6() { check_7_7() { local id="7.7" local desc="Ensure that the swarm manager auto-lock key is rotated periodically (Not Scored)" + local remediation="You should run the command docker swarm unlock-key --rotate to rotate the keys. To facilitate auditing of this recommendation, you should maintain key rotation records and ensure that you establish a pre-defined frequency for key rotation." + local remediationImpact="None." local check="$id - $desc" starttestjson "$id" "$desc" @@ -153,6 +167,8 @@ check_7_7() { check_7_8() { local id="7.8" local desc="Ensure that node certificates are rotated as appropriate (Not Scored)" + local remediation="You should run the command docker swarm update --cert-expiry 48h to set the desired expiry time on the node certificate." + local remediationImpact="None." local check="$id - $desc" starttestjson "$id" "$desc" @@ -173,6 +189,8 @@ check_7_8() { check_7_9() { local id="7.9" local desc="Ensure that CA certificates are rotated as appropriate (Not Scored)" + local remediation="You should run the command docker swarm ca --rotate to rotate a certificate." + local remediationImpact="None." local check="$id - $desc" starttestjson "$id" "$desc" @@ -188,6 +206,8 @@ check_7_9() { check_7_10() { local id="7.10" local desc="Ensure that management plane traffic is separated from data plane traffic (Not Scored)" + local remediation="You should initialize the swarm with dedicated interfaces for management and data planes respectively. Example: docker swarm init --advertise-addr=192.168.0.1 --data-path-addr=17.1.0.3" + local remediationImpact="This requires two network interfaces per node." local check="$id - $desc" starttestjson "$id" "$desc" From cc8171fbfe982288a26e19da8f90fdc0436ec271 Mon Sep 17 00:00:00 2001 From: Razvan Stoica Date: Thu, 18 Mar 2021 10:32:02 +0200 Subject: [PATCH 35/48] Add remediation stuff on enterprise configuration --- tests/8_docker_enterprise_configuration.sh | 14 ++++++++++++++ 1 file changed, 14 insertions(+) diff --git a/tests/8_docker_enterprise_configuration.sh b/tests/8_docker_enterprise_configuration.sh index 7111c21..e151a1f 100644 --- a/tests/8_docker_enterprise_configuration.sh +++ b/tests/8_docker_enterprise_configuration.sh @@ -36,6 +36,8 @@ check_8_1_1() { local id="8.1.1" local desc="Configure the LDAP authentication service (Scored)" + local remediation="You can configure LDAP integration via the UCP Admin Settings UI. LDAP integration can also be enabled via a configuration file" + local remediationImpact="None." local check="$id - $desc" starttestjson "$id" "$desc" @@ -50,6 +52,8 @@ check_8_1_2() { local id="8.1.2" local desc="Use external certificates (Scored)" + local remediation="You can configure your own certificates for UCP either during installation or after installation via the UCP Admin Settings user interface." + local remediationImpact="None." local check="$id - $desc" starttestjson "$id" "$desc" @@ -64,6 +68,8 @@ check_8_1_3() { local id="8.1.3" local desc="Enforce the use of client certificate bundles for unprivileged users (Not Scored)" + local remediation="Client certificate bundles can be created in one of two ways. User Management UI: UCP Administrators can provision client certificate bundles on behalf of users. Self-Provision: Users with access to the UCP console can create client certificate bundles themselves." + local remediationImpact="None." local check="$id - $desc" starttestjson "$id" "$desc" @@ -78,6 +84,8 @@ check_8_1_4() { local id="8.1.4" local desc="Configure applicable cluster role-based access control policies (Not Scored)" + local remediation="UCP RBAC components can be configured as required via the UCP User Management UI." + local remediationImpact="None." local check="$id - $desc" starttestjson "$id" "$desc" @@ -106,6 +114,8 @@ check_8_1_6() { local id="8.1.6" local desc="Set the Per-User Session Limit to a value of '3' or lower (Scored)" + local remediation="Retrieve a UCP API token. Retrieve and save UCP config. Open the ucp-config.toml file, set the per_user_limit entry under the [auth.sessions] section to a value of 3 or lower, but greater than 0. Update UCP with the new configuration." + local remediationImpact="None." local check="$id - $desc" starttestjson "$id" "$desc" @@ -120,6 +130,8 @@ check_8_1_7() { local id="8.1.7" local desc="Set the 'Lifetime Minutes' and 'Renewal Threshold Minutes' values to '15' or lower and '0' respectively (Scored)" + local remediation="Retrieve a UCP API token. Retrieve and save UCP config. Open the ucp-config.toml file, set the lifetime_minutes and renewal_threshold_minutes entries under the [auth.sessions] section to values of 15 or lower and 0 respectively. Update UCP with the new configuration." + local remediationImpact="Setting the Lifetime Minutes setting to a value that is too lower would result in users having to constantly re-authenticate to their Docker Enterprise cluster." local check="$id - $desc" starttestjson "$id" "$desc" @@ -145,6 +157,8 @@ check_8_2_1() { local id="8.2.1" local desc="Enable image vulnerability scanning (Scored)" + local remediation="You can navigate to DTR Settings UI and select the Security tab to access the image scanning configuration. Select the Enable Scanning slider to enable this functionality." + local remediationImpact="None." local check="$id - $desc" starttestjson "$id" "$desc" From 68cb4931173f013caef94ad34042a75c440c2195 Mon Sep 17 00:00:00 2001 From: Razvan Stoica Date: Fri, 19 Mar 2021 09:29:55 +0200 Subject: [PATCH 36/48] Log the remediation measure in JSON file only if the -p flag is not set --- functions/output_lib.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/functions/output_lib.sh b/functions/output_lib.sh index f893cb5..6fd1ce7 100644 --- a/functions/output_lib.sh +++ b/functions/output_lib.sh @@ -163,7 +163,7 @@ logcheckresult() { fi # Log remediation measure to JSON - if [ -n "$remediation" ] && [ "$1" != "PASS" ]; then + if [ -n "$remediation" ] && [ "$1" != "PASS" ] && [ "$printremediation" = "1" ]; then printf ", \"remediation\": \"%s\"" "$remediation" | tee -a "$logger.json" 2>/dev/null 1>&2 if [ -n "$remediationImpact" ]; then printf ", \"remediation-impact\": \"%s\"" "$remediationImpact" | tee -a "$logger.json" 2>/dev/null 1>&2 From c8721c90fa6eb5bf4c06c27e204679c3134b32d3 Mon Sep 17 00:00:00 2001 From: Razvan Stoica Date: Fri, 19 Mar 2021 13:51:31 +0200 Subject: [PATCH 37/48] Displays the correct current time --- docker-bench-security.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docker-bench-security.sh b/docker-bench-security.sh index 510ff05..feef5a8 100755 --- a/docker-bench-security.sh +++ b/docker-bench-security.sh @@ -132,7 +132,7 @@ fi totalChecks=0 currentScore=0 -logit "Initializing $(date +%Y-%m-%dT%H:%m:%S%:z)\n" +logit "Initializing $(date +%Y-%m-%dT%H:%M:%S%:z)\n" appendjson beginjson "$version" "$(date +%s)" From f31e60c379d6b30c0f6390a83ea827971cdd9017 Mon Sep 17 00:00:00 2001 From: Razvan Stoica Date: Mon, 22 Mar 2021 09:43:56 +0200 Subject: [PATCH 38/48] Add more remediation stuff --- distros/Dockerfile.alpine | 19 + tests/3_docker_daemon_configuration_files.sh | 44 ++ ..._docker_daemon_configuration_files.sh.save | 607 ++++++++++++++++++ tests/4_container_images.sh | 20 + tests/5_container_runtime.sh | 62 ++ tests/99_community_checks.sh | 6 + 6 files changed, 758 insertions(+) create mode 100644 distros/Dockerfile.alpine create mode 100644 tests/3_docker_daemon_configuration_files.sh.save diff --git a/distros/Dockerfile.alpine b/distros/Dockerfile.alpine new file mode 100644 index 0000000..ed4596a --- /dev/null +++ b/distros/Dockerfile.alpine @@ -0,0 +1,19 @@ +FROM alpine:3.13 + +LABEL \ + org.label-schema.name="docker-bench-security" \ + org.label-schema.url="https://dockerbench.com" \ + org.label-schema.vcs-url="https://github.com/docker/docker-bench-security.git" + +RUN apk add --no-cache iproute2 \ + docker-cli \ + dumb-init + +COPY . /usr/local/bin/ + +HEALTHCHECK CMD exit 0 + +WORKDIR /usr/local/bin + +ENTRYPOINT [ "/usr/bin/dumb-init", "docker-bench-security.sh" ] +CMD [""] diff --git a/tests/3_docker_daemon_configuration_files.sh b/tests/3_docker_daemon_configuration_files.sh index f443b99..8c5e5a5 100644 --- a/tests/3_docker_daemon_configuration_files.sh +++ b/tests/3_docker_daemon_configuration_files.sh @@ -12,6 +12,8 @@ check_3() { check_3_1() { local id="3.1" local desc="Ensure that the docker.service file ownership is set to root:root (Scored)" + local remediation="Find out the file location: systemctl show -p FragmentPath docker.service. If the file does not exist, this recommendation is not applicable. If the file does exist, you should run the command chown root:root , in order to set the ownership and group ownership for the file to root." + local remediationImpact="None." local check="$id - $desc" starttestjson "$id" "$desc" @@ -35,6 +37,8 @@ check_3_1() { check_3_2() { local id="3.2" local desc="Ensure that docker.service file permissions are appropriately set (Scored)" + local remediation="Find out the file location: systemctl show -p FragmentPath docker.service. If the file does not exist, this recommendation is not applicable. If the file exists, run the command chmod 644 to set the file permissions to 644." + local remediationImpact="None." local check="$id - $desc" starttestjson "$id" "$desc" @@ -58,6 +62,8 @@ check_3_2() { check_3_3() { local id="3.3" local desc="Ensure that docker.socket file ownership is set to root:root (Scored)" + local remediation="Find out the file location: systemctl show -p FragmentPath docker.socket. If the file does not exist, this recommendation is not applicable. If the file exists, run the command chown root:root to set the ownership and group ownership for the file to root." + local remediationImpact="None." local check="$id - $desc" starttestjson "$id" "$desc" @@ -81,6 +87,8 @@ check_3_3() { check_3_4() { local id="3.4" local desc="Ensure that docker.socket file permissions are set to 644 or more restrictive (Scored)" + local remediation="Find out the file location: systemctl show -p FragmentPath docker.socket. If the file does not exist, this recommendation is not applicable. If the file does exist, you should run the command chmod 644 to set the file permissions to 644." + local remediationImpact="None." local check="$id - $desc" starttestjson "$id" "$desc" @@ -104,6 +112,8 @@ check_3_4() { check_3_5() { local id="3.5" local desc="Ensure that the /etc/docker directory ownership is set to root:root (Scored)" + local remediation="You should run the following command: chown root:root /etc/docker. This sets the ownership and group ownership for the directory to root." + local remediationImpact="None." local check="$id - $desc" starttestjson "$id" "$desc" @@ -127,6 +137,8 @@ check_3_5() { check_3_6() { local id="3.6" local desc="Ensure that /etc/docker directory permissions are set to 755 or more restrictively (Scored)" + local remediation="You should run the following command: chmod 755 /etc/docker. This sets the permissions for the directory to 755." + local remediationImpact="None." local check="$id - $desc" starttestjson "$id" "$desc" @@ -150,6 +162,8 @@ check_3_6() { check_3_7() { local id="3.7" local desc="Ensure that registry certificate file ownership is set to root:root (Scored)" + local remediation="You should run the following command: chown root:root /etc/docker/certs.d//*. This would set the individual ownership and group ownership for the registry certificate files to root." + local remediationImpact="None." local check="$id - $desc" starttestjson "$id" "$desc" @@ -180,6 +194,8 @@ check_3_7() { check_3_8() { local id="3.8" local desc="Ensure that registry certificate file permissions are set to 444 or more restrictively (Scored)" + local remediation="You should run the following command: chmod 444 /etc/docker/certs.d//*. This would set the permissions for the registry certificate files to 444." + local remediationImpact="None." local check="$id - $desc" starttestjson "$id" "$desc" @@ -210,6 +226,8 @@ check_3_8() { check_3_9() { local id="3.9" local desc="Ensure that TLS CA certificate file ownership is set to root:root (Scored)" + local remediation="You should run the following command: chown root:root . This sets the individual ownership and group ownership for the TLS CA certificate file to root." + local remediationImpact="None." local check="$id - $desc" starttestjson "$id" "$desc" @@ -237,6 +255,8 @@ check_3_9() { check_3_10() { local id="3.10" local desc="Ensure that TLS CA certificate file permissions are set to 444 or more restrictively (Scored)" + local remediation="You should run the following command: chmod 444 . This sets the file permissions on the TLS CA file to 444." + local remediationImpact="None." local check="$id - $desc" starttestjson "$id" "$desc" @@ -264,6 +284,8 @@ check_3_10() { check_3_11() { local id="3.11" local desc="Ensure that Docker server certificate file ownership is set to root:root (Scored)" + local remediation="You should run the following command: chown root:root . This sets the individual ownership and the group ownership for the Docker server certificate file to root." + local remediationImpact="None." local check="$id - $desc" starttestjson "$id" "$desc" @@ -291,6 +313,8 @@ check_3_11() { check_3_12() { local id="3.12" local desc="Ensure that the Docker server certificate file permissions are set to 444 or more restrictively (Scored)" + local remediation="You should run the following command: chmod 444 . This sets the file permissions of the Docker server certificate file to 444." + local remediationImpact="None." local check="$id - $desc" starttestjson "$id" "$desc" @@ -318,6 +342,8 @@ check_3_12() { check_3_13() { local id="3.13" local desc="Ensure that the Docker server certificate key file ownership is set to root:root (Scored)" + local remediation="You should run the following command: chown root:root . This sets the individual ownership and group ownership for the Docker server certificate key file to root." + local remediationImpact="None." local check="$id - $desc" starttestjson "$id" "$desc" @@ -345,6 +371,8 @@ check_3_13() { check_3_14() { local id="3.14" local desc="Ensure that the Docker server certificate key file permissions are set to 400 (Scored)" + local remediation="You should run the following command: chmod 400 . This sets the Docker server certificate key file permissions to 400." + local remediationImpact="None." local check="$id - $desc" starttestjson "$id" "$desc" @@ -372,6 +400,8 @@ check_3_14() { check_3_15() { local id="3.15" local desc="Ensure that the Docker socket file ownership is set to root:docker (Scored)" + local remediation="You should run the following command: chown root:docker /var/run/docker.sock. This sets the ownership to root and group ownership to docker for the default Docker socket file." + local remediationImpact="None." local check="$id - $desc" starttestjson "$id" "$desc" @@ -395,6 +425,8 @@ check_3_15() { check_3_16() { local id="3.16" local desc="Ensure that the Docker socket file permissions are set to 660 or more restrictively (Scored)" + local remediation="You should run the following command: chmod 660 /var/run/docker.sock. This sets the file permissions of the Docker socket file to 660." + local remediationImpact="None." local check="$id - $desc" starttestjson "$id" "$desc" @@ -418,6 +450,8 @@ check_3_16() { check_3_17() { local id="3.17" local desc="Ensure that the daemon.json file ownership is set to root:root (Scored)" + local remediation="You should run the following command: chown root:root /etc/docker/daemon.json. This sets the ownership and group ownership for the file to root." + local remediationImpact="None." local check="$id - $desc" starttestjson "$id" "$desc" @@ -441,6 +475,8 @@ check_3_17() { check_3_18() { local id="3.18" local desc="Ensure that daemon.json file permissions are set to 644 or more restrictive (Scored)" + local remediation="You should run the following command: chmod 644 /etc/docker/daemon.json. This sets the file permissions for this file to 644." + local remediationImpact="None." local check="$id - $desc" starttestjson "$id" "$desc" @@ -464,6 +500,8 @@ check_3_18() { check_3_19() { local id="3.19" local desc="Ensure that the /etc/default/docker file ownership is set to root:root (Scored)" + local remediation="You should run the following command: chown root:root /etc/default/docker. This sets the ownership and group ownership of the file to root." + local remediationImpact="None." local check="$id - $desc" starttestjson "$id" "$desc" @@ -487,6 +525,8 @@ check_3_19() { check_3_20() { local id="3.20" local desc="Ensure that the /etc/sysconfig/docker file ownership is set to root:root (Scored)" + local remediation="You should run the following command: chown root:root /etc/sysconfig/docker. This sets the ownership and group ownership for the file to root." + local remediationImpact="None." local check="$id - $desc" starttestjson "$id" "$desc" @@ -510,6 +550,8 @@ check_3_20() { check_3_21() { local id="3.21" local desc="Ensure that the /etc/sysconfig/docker file permissions are set to 644 or more restrictively (Scored)" + local remediation="You should run the following command: chmod 644 /etc/sysconfig/docker. This sets the file permissions for this file to 644." + local remediationImpact="None." local check="$id - $desc" starttestjson "$id" "$desc" @@ -533,6 +575,8 @@ check_3_21() { check_3_22() { local id="3.22" local desc="Ensure that the /etc/default/docker file permissions are set to 644 or more restrictively (Scored)" + local remediation="You should run the following command: chmod 644 /etc/default/docker. This sets the file permissions for this file to 644." + local remediationImpact="None." local check="$id - $desc" starttestjson "$id" "$desc" diff --git a/tests/3_docker_daemon_configuration_files.sh.save b/tests/3_docker_daemon_configuration_files.sh.save new file mode 100644 index 0000000..0d9019f --- /dev/null +++ b/tests/3_docker_daemon_configuration_files.sh.save @@ -0,0 +1,607 @@ +#!/bin/sh + +check_3() { + logit "" + local id="3" + local desc="Docker daemon configuration files" + checkHeader="$id - $desc" + info "$checkHeader" + startsectionjson "$id" "$desc" +} + +check_3_1() { + local id="3.1" + local desc="Ensure that the docker.service file ownership is set to root:root (Scored)" + local remediation="Find out the file location: systemctl show -p FragmentPath docker.service. + +IFind out the file location: +systemctl show -p FragmentPath docker.service + +" + local remediationImpact="None." + local check="$id - $desc" + starttestjson "$id" "$desc" + + file="$(get_service_file docker.service)" + if [ -f "$file" ]; then + if [ "$(stat -c %u%g $file)" -eq 00 ]; then + pass -s "$check" + logcheckresult "PASS" + else + warn -s "$check" + warn " * Wrong ownership for $file" + logcheckresult "WARN" "Wrong ownership for $file" + fi + else + info -c "$check" + info " * File not found" + logcheckresult "INFO" "File not found" + fi +} + +check_3_2() { + local id="3.2" + local desc="Ensure that docker.service file permissions are appropriately set (Scored)" + local remediation="" + local remediationImpact="None." + local check="$id - $desc" + starttestjson "$id" "$desc" + + file="$(get_service_file docker.service)" + if [ -f "$file" ]; then + if [ "$(stat -c %a $file)" -le 644 ]; then + pass -s "$check" + logcheckresult "PASS" + else + warn -s "$check" + warn " * Wrong permissions for $file" + logcheckresult "WARN" "Wrong permissions for $file" + fi + else + info -c "$check" + info " * File not found" + logcheckresult "INFO" "File not found" + fi +} + +check_3_3() { + local id="3.3" + local desc="Ensure that docker.socket file ownership is set to root:root (Scored)" + local remediation="" + local remediationImpact="None." + local check="$id - $desc" + starttestjson "$id" "$desc" + + file="$(get_service_file docker.socket)" + if [ -f "$file" ]; then + if [ "$(stat -c %u%g $file)" -eq 00 ]; then + pass -s "$check" + logcheckresult "PASS" + else + warn -s "$check" + warn " * Wrong ownership for $file" + logcheckresult "WARN" "Wrong ownership for $file" + fi + else + info -c "$check" + info " * File not found" + logcheckresult "INFO" "File not found" + fi +} + +check_3_4() { + local id="3.4" + local desc="Ensure that docker.socket file permissions are set to 644 or more restrictive (Scored)" + local remediation="" + local remediationImpact="None." + local check="$id - $desc" + starttestjson "$id" "$desc" + + file="$(get_service_file docker.socket)" + if [ -f "$file" ]; then + if [ "$(stat -c %a $file)" -le 644 ]; then + pass -s "$check" + logcheckresult "PASS" + else + warn -s "$check" + warn " * Wrong permissions for $file" + logcheckresult "WARN" "Wrong permissions for $file" + fi + else + info -c "$check" + info " * File not found" + logcheckresult "INFO" "File not found" + fi +} + +check_3_5() { + local id="3.5" + local desc="Ensure that the /etc/docker directory ownership is set to root:root (Scored)" + local remediation="You should run the following command: chown root:root /etc/docker. This sets the ownership and group ownership for the directory to root." + local remediationImpact="None." + local check="$id - $desc" + starttestjson "$id" "$desc" + + directory="/etc/docker" + if [ -d "$directory" ]; then + if [ "$(stat -c %u%g $directory)" -eq 00 ]; then + pass -s "$check" + logcheckresult "PASS" + else + warn -s "$check" + warn " * Wrong ownership for $directory" + logcheckresult "WARN" "Wrong ownership for $directory" + fi + else + info -c "$check" + info " * Directory not found" + logcheckresult "INFO" "Directory not found" + fi +} + +check_3_6() { + local id="3.6" + local desc="Ensure that /etc/docker directory permissions are set to 755 or more restrictively (Scored)" + local remediation="You should run the following command: chmod 755 /etc/docker. This sets the permissions for the directory to 755." + local remediationImpact="None." + local check="$id - $desc" + starttestjson "$id" "$desc" + + directory="/etc/docker" + if [ -d "$directory" ]; then + if [ "$(stat -c %a $directory)" -le 755 ]; then + pass -s "$check" + logcheckresult "PASS" + else + warn -s "$check" + warn " * Wrong permissions for $directory" + logcheckresult "WARN" "Wrong permissions for $directory" + fi + else + info -c "$check" + info " * Directory not found" + logcheckresult "INFO" "Directory not found" + fi +} + +check_3_7() { + local id="3.7" + local desc="Ensure that registry certificate file ownership is set to root:root (Scored)" + local remediation="You should run the following command: chown root:root /etc/docker/certs.d//*. This would set the individual ownership and group ownership for the registry certificate files to root." + local remediationImpact="None." + local check="$id - $desc" + starttestjson "$id" "$desc" + + directory="/etc/docker/certs.d/" + if [ -d "$directory" ]; then + fail=0 + owners=$(find "$directory" -type f -name '*.crt') + for p in $owners; do + if [ "$(stat -c %u $p)" -ne 0 ]; then + fail=1 + fi + done + if [ $fail -eq 1 ]; then + warn -s "$check" + warn " * Wrong ownership for $directory" + logcheckresult "WARN" "Wrong ownership for $directory" + else + pass -s "$check" + logcheckresult "PASS" + fi + else + info -c "$check" + info " * Directory not found" + logcheckresult "INFO" "Directory not found" + fi +} + +check_3_8() { + local id="3.8" + local desc="Ensure that registry certificate file permissions are set to 444 or more restrictively (Scored)" + local remediation="You should run the following command: chmod 444 /etc/docker/certs.d//*. This would set the permissions for the registry certificate files to 444." + local remediationImpact="None." + local check="$id - $desc" + starttestjson "$id" "$desc" + + directory="/etc/docker/certs.d/" + if [ -d "$directory" ]; then + fail=0 + perms=$(find "$directory" -type f -name '*.crt') + for p in $perms; do + if [ "$(stat -c %a $p)" -gt 444 ]; then + fail=1 + fi + done + if [ $fail -eq 1 ]; then + warn -s "$check" + warn " * Wrong permissions for $directory" + logcheckresult "WARN" "Wrong permissions for $directory" + else + pass -s "$check" + logcheckresult "PASS" + fi + else + info -c "$check" + info " * Directory not found" + logcheckresult "INFO" "Directory not found" + fi +} + +check_3_9() { + local id="3.9" + local desc="Ensure that TLS CA certificate file ownership is set to root:root (Scored)" + local remediation="You should run the following command: chown root:root . This sets the individual ownership and group ownership for the TLS CA certificate file to root." + local remediationImpact="None." + local check="$id - $desc" + starttestjson "$id" "$desc" + + if [ -n "$(get_docker_configuration_file_args 'tlscacert')" ]; then + tlscacert=$(get_docker_configuration_file_args 'tlscacert') + else + tlscacert=$(get_docker_effective_command_line_args '--tlscacert' | sed -n 's/.*tlscacert=\([^s]\)/\1/p' | sed 's/--/ --/g' | cut -d " " -f 1) + fi + if [ -f "$tlscacert" ]; then + if [ "$(stat -c %u%g "$tlscacert")" -eq 00 ]; then + pass -s "$check" + logcheckresult "PASS" + else + warn -s "$check" + warn " * Wrong ownership for $tlscacert" + logcheckresult "WARN" "Wrong ownership for $tlscacert" + fi + else + info -c "$check" + info " * No TLS CA certificate found" + logcheckresult "INFO" "No TLS CA certificate found" + fi +} + +check_3_10() { + local id="3.10" + local desc="Ensure that TLS CA certificate file permissions are set to 444 or more restrictively (Scored)" + local remediation="You should run the following command: chmod 444 . This sets the file permissions on the TLS CA file to 444." + local remediationImpact="None." + local check="$id - $desc" + starttestjson "$id" "$desc" + + if [ -n "$(get_docker_configuration_file_args 'tlscacert')" ]; then + tlscacert=$(get_docker_configuration_file_args 'tlscacert') + else + tlscacert=$(get_docker_effective_command_line_args '--tlscacert' | sed -n 's/.*tlscacert=\([^s]\)/\1/p' | sed 's/--/ --/g' | cut -d " " -f 1) + fi + if [ -f "$tlscacert" ]; then + if [ "$(stat -c %a $tlscacert)" -le 444 ]; then + pass -s "$check" + logcheckresult "PASS" + else + warn -s "$check" + warn " * Wrong permissions for $tlscacert" + logcheckresult "WARN" "Wrong permissions for $tlscacert" + fi + else + info -c "$check" + info " * No TLS CA certificate found" + logcheckresult "INFO" "No TLS CA certificate found" + fi +} + +check_3_11() { + local id="3.11" + local desc="Ensure that Docker server certificate file ownership is set to root:root (Scored)" + local remediation="You should run the following command: chown root:root . This sets the individual ownership and the group ownership for the Docker server certificate file to root." + local remediationImpact="None." + local check="$id - $desc" + starttestjson "$id" "$desc" + + if [ -n "$(get_docker_configuration_file_args 'tlscert')" ]; then + tlscert=$(get_docker_configuration_file_args 'tlscert') + else + tlscert=$(get_docker_effective_command_line_args '--tlscert' | sed -n 's/.*tlscert=\([^s]\)/\1/p' | sed 's/--/ --/g' | cut -d " " -f 1) + fi + if [ -f "$tlscert" ]; then + if [ "$(stat -c %u%g "$tlscert")" -eq 00 ]; then + pass -s "$check" + logcheckresult "PASS" + else + warn -s "$check" + warn " * Wrong ownership for $tlscert" + logcheckresult "WARN" "Wrong ownership for $tlscert" + fi + else + info -c "$check" + info " * No TLS Server certificate found" + logcheckresult "INFO" "No TLS Server certificate found" + fi +} + +check_3_12() { + local id="3.12" + local desc="Ensure that the Docker server certificate file permissions are set to 444 or more restrictively (Scored)" + local remediation="You should run the following command: chmod 444 . This sets the file permissions of the Docker server certificate file to 444." + local remediationImpact="None." + local check="$id - $desc" + starttestjson "$id" "$desc" + + if [ -n "$(get_docker_configuration_file_args 'tlscert')" ]; then + tlscert=$(get_docker_configuration_file_args 'tlscert') + else + tlscert=$(get_docker_effective_command_line_args '--tlscert' | sed -n 's/.*tlscert=\([^s]\)/\1/p' | sed 's/--/ --/g' | cut -d " " -f 1) + fi + if [ -f "$tlscert" ]; then + if [ "$(stat -c %a $tlscert)" -le 444 ]; then + pass -s "$check" + logcheckresult "PASS" + else + warn -s "$check" + warn " * Wrong permissions for $tlscert" + logcheckresult "WARN" "Wrong permissions for $tlscert" + fi + else + info -c "$check" + info " * No TLS Server certificate found" + logcheckresult "INFO" "No TLS Server certificate found" + fi +} + +check_3_13() { + local id="3.13" + local desc="Ensure that the Docker server certificate key file ownership is set to root:root (Scored)" + local remediation="You should run the following command: chown root:root . This sets the individual ownership and group ownership for the Docker server certificate key file to root." + local remediationImpact="None." + local check="$id - $desc" + starttestjson "$id" "$desc" + + if [ -n "$(get_docker_configuration_file_args 'tlskey')" ]; then + tlskey=$(get_docker_configuration_file_args 'tlskey') + else + tlskey=$(get_docker_effective_command_line_args '--tlskey' | sed -n 's/.*tlskey=\([^s]\)/\1/p' | sed 's/--/ --/g' | cut -d " " -f 1) + fi + if [ -f "$tlskey" ]; then + if [ "$(stat -c %u%g "$tlskey")" -eq 00 ]; then + pass -s "$check" + logcheckresult "PASS" + else + warn -s "$check" + warn " * Wrong ownership for $tlskey" + logcheckresult "WARN" "Wrong ownership for $tlskey" + fi + else + info -c "$check" + info " * No TLS Key found" + logcheckresult "INFO" "No TLS Key found" + fi +} + +check_3_14() { + local id="3.14" + local desc="Ensure that the Docker server certificate key file permissions are set to 400 (Scored)" + local remediation="You should run the following command: chmod 400 . This sets the Docker server certificate key file permissions to 400." + local remediationImpact="None." + local check="$id - $desc" + starttestjson "$id" "$desc" + + if [ -n "$(get_docker_configuration_file_args 'tlskey')" ]; then + tlskey=$(get_docker_configuration_file_args 'tlskey') + else + tlskey=$(get_docker_effective_command_line_args '--tlskey' | sed -n 's/.*tlskey=\([^s]\)/\1/p' | sed 's/--/ --/g' | cut -d " " -f 1) + fi + if [ -f "$tlskey" ]; then + if [ "$(stat -c %a $tlskey)" -eq 400 ]; then + pass -s "$check" + logcheckresult "PASS" + else + warn -s "$check" + warn " * Wrong permissions for $tlskey" + logcheckresult "WARN" "Wrong permissions for $tlskey" + fi + else + info -c "$check" + info " * No TLS Key found" + logcheckresult "INFO" "No TLS Key found" + fi +} + +check_3_15() { + local id="3.15" + local desc="Ensure that the Docker socket file ownership is set to root:docker (Scored)" + local remediation="You should run the following command: chown root:docker /var/run/docker.sock. This sets the ownership to root and group ownership to docker for the default Docker socket file." + local remediationImpact="None." + local check="$id - $desc" + starttestjson "$id" "$desc" + + file="/var/run/docker.sock" + if [ -S "$file" ]; then + if [ "$(stat -c %U:%G $file)" = 'root:docker' ]; then + pass -s "$check" + logcheckresult "PASS" + else + warn -s "$check" + warn " * Wrong ownership for $file" + logcheckresult "WARN" "Wrong ownership for $file" + fi + else + info -c "$check" + info " * File not found" + logcheckresult "INFO" "File not found" + fi +} + +check_3_16() { + local id="3.16" + local desc="Ensure that the Docker socket file permissions are set to 660 or more restrictively (Scored)" + local remediation="You should run the following command: chmod 660 /var/run/docker.sock. This sets the file permissions of the Docker socket file to 660." + local remediationImpact="None." + local check="$id - $desc" + starttestjson "$id" "$desc" + + file="/var/run/docker.sock" + if [ -S "$file" ]; then + if [ "$(stat -c %a $file)" -le 660 ]; then + pass -s "$check" + logcheckresult "PASS" + else + warn -s "$check" + warn " * Wrong permissions for $file" + logcheckresult "WARN" "Wrong permissions for $file" + fi + else + info -c "$check" + info " * File not found" + logcheckresult "INFO" "File not found" + fi +} + +check_3_17() { + local id="3.17" + local desc="Ensure that the daemon.json file ownership is set to root:root (Scored)" + local remediation="You should run the following command: chown root:root /etc/docker/daemon.json. This sets the ownership and group ownership for the file to root." + local remediationImpact="None." + local check="$id - $desc" + starttestjson "$id" "$desc" + + file="/etc/docker/daemon.json" + if [ -f "$file" ]; then + if [ "$(stat -c %U:%G $file)" = 'root:root' ]; then + pass -s "$check" + logcheckresult "PASS" + else + warn -s "$check" + warn " * Wrong ownership for $file" + logcheckresult "WARN" "Wrong ownership for $file" + fi + else + info -c "$check" + info " * File not found" + logcheckresult "INFO" "File not found" + fi +} + +check_3_18() { + local id="3.18" + local desc="Ensure that daemon.json file permissions are set to 644 or more restrictive (Scored)" + local remediation="You should run the following command: chmod 644 /etc/docker/daemon.json. This sets the file permissions for this file to 644." + local remediationImpact="None." + local check="$id - $desc" + starttestjson "$id" "$desc" + + file="/etc/docker/daemon.json" + if [ -f "$file" ]; then + if [ "$(stat -c %a $file)" -le 644 ]; then + pass -s "$check" + logcheckresult "PASS" + else + warn -s "$check" + warn " * Wrong permissions for $file" + logcheckresult "WARN" "Wrong permissions for $file" + fi + else + info -c "$check" + info " * File not found" + logcheckresult "INFO" "File not found" + fi +} + +check_3_19() { + local id="3.19" + local desc="Ensure that the /etc/default/docker file ownership is set to root:root (Scored)" + local remediation="You should run the following command: chown root:root /etc/default/docker. This sets the ownership and group ownership of the file to root." + local remediationImpact="None." + local check="$id - $desc" + starttestjson "$id" "$desc" + + file="/etc/default/docker" + if [ -f "$file" ]; then + if [ "$(stat -c %U:%G $file)" = 'root:root' ]; then + pass -s "$check" + logcheckresult "PASS" + else + warn -s "$check" + warn " * Wrong ownership for $file" + logcheckresult "WARN" "Wrong ownership for $file" + fi + else + info -c "$check" + info " * File not found" + logcheckresult "INFO" "File not found" + fi +} + +check_3_20() { + local id="3.20" + local desc="Ensure that the /etc/sysconfig/docker file ownership is set to root:root (Scored)" + local remediation="You should run the following command: chown root:root /etc/sysconfig/docker. This sets the ownership and group ownership for the file to root." + local remediationImpact="None." + local check="$id - $desc" + starttestjson "$id" "$desc" + + file="/etc/sysconfig/docker" + if [ -f "$file" ]; then + if [ "$(stat -c %U:%G $file)" = 'root:root' ]; then + pass -s "$check" + logcheckresult "PASS" + else + warn -s "$check" + warn " * Wrong ownership for $file" + logcheckresult "WARN" "Wrong ownership for $file" + fi + else + info -c "$check" + info " * File not found" + logcheckresult "INFO" "File not found" + fi +} + +check_3_21() { + local id="3.21" + local desc="Ensure that the /etc/sysconfig/docker file permissions are set to 644 or more restrictively (Scored)" + local remediation="You should run the following command: chmod 644 /etc/sysconfig/docker. This sets the file permissions for this file to 644." + local remediationImpact="None." + local check="$id - $desc" + starttestjson "$id" "$desc" + + file="/etc/sysconfig/docker" + if [ -f "$file" ]; then + if [ "$(stat -c %a $file)" -le 644 ]; then + pass -s "$check" + logcheckresult "PASS" + else + warn -s "$check" + warn " * Wrong permissions for $file" + logcheckresult "WARN" "Wrong permissions for $file" + fi + else + info -c "$check" + info " * File not found" + logcheckresult "INFO" "File not found" + fi +} + +check_3_22() { + local id="3.22" + local desc="Ensure that the /etc/default/docker file permissions are set to 644 or more restrictively (Scored)" + local remediation="You should run the following command: chmod 644 /etc/default/docker. This sets the file permissions for this file to 644." + local remediationImpact="None." + local check="$id - $desc" + starttestjson "$id" "$desc" + + file="/etc/default/docker" + if [ -f "$file" ]; then + if [ "$(stat -c %a $file)" -le 644 ]; then + pass -s "$check" + logcheckresult "PASS" + else + warn -s "$check" + warn " * Wrong permissions for $file" + logcheckresult "WARN" "Wrong permissions for $file" + fi + else + info -c "$check" + info " * File not found" + logcheckresult "INFO" "File not found" + fi +} + +check_3_end() { + endsectionjson +} diff --git a/tests/4_container_images.sh b/tests/4_container_images.sh index 72a3215..0c76141 100644 --- a/tests/4_container_images.sh +++ b/tests/4_container_images.sh @@ -12,6 +12,8 @@ check_4() { check_4_1() { local id="4.1" local desc="Ensure that a user for the container has been created (Scored)" + local remediation="You should ensure that the Dockerfile for each container image contains the information: USER . If there is no specific user created in the container base image, then make use of the useradd command to add a specific user before the USER instruction in the Dockerfile." + local remediationImpact="Running as a non-root user can present challenges where you wish to bind mount volumes from the underlying host. In this case, care should be taken to ensure that the user running the contained process can read and write to the bound directory, according to their requirements." local check="$id - $desc" starttestjson "$id" "$desc" @@ -58,6 +60,8 @@ check_4_1() { check_4_2() { local id="4.2" local desc="Ensure that containers use only trusted base images (Not Scored)" + local remediation="Configure and use Docker Content trust. View the history of each Docker image to evaluate its risk, dependent on the sensitivity of the application you wish to deploy using it. Scan Docker images for vulnerabilities at regular intervals." + local remediationImpact="None." local check="$id - $desc" starttestjson "$id" "$desc" @@ -68,6 +72,8 @@ check_4_2() { check_4_3() { local id="4.3" local desc="Ensure that unnecessary packages are not installed in the container (Not Scored)" + local remediation="You should not install anything within the container that is not required. You should consider using a minimal base image if you can. Some of the options available include BusyBox and Alpine. Not only can this trim your image size considerably, but there would also be fewer pieces of software which could contain vectors for attack." + local remediationImpact="None." local check="$id - $desc" starttestjson "$id" "$desc" @@ -78,6 +84,8 @@ check_4_3() { check_4_4() { local id="4.4" local desc="Ensure images are scanned and rebuilt to include security patches (Not Scored)" + local remediation="Images should be re-built ensuring that the latest version of the base images are used, to keep the operating system patch level at an appropriate level. Once the images have been re-built, containers should be re-started making use of the updated images." + local remediationImpact="None." local check="$id - $desc" starttestjson "$id" "$desc" @@ -105,6 +113,8 @@ check_4_5() { check_4_6() { local id="4.6" local desc="Ensure that HEALTHCHECK instructions have been added to container images (Scored)" + local remediation="You should follow the Docker documentation and rebuild your container images to include the HEALTHCHECK instruction." + local remediationImpact="None." local check="$id - $desc" starttestjson "$id" "$desc" @@ -137,6 +147,8 @@ check_4_6() { check_4_7() { local id="4.7" local desc="Ensure update instructions are not used alone in the Dockerfile (Not Scored)" + local remediation="You should use update instructions together with install instructions and version pinning for packages while installing them. This prevent caching and force the extraction of the required versions. Alternatively, you could use the --no-cache flag during the docker build process to avoid using cached layers." + local remediationImpact="None." local check="$id - $desc" starttestjson "$id" "$desc" @@ -166,6 +178,8 @@ check_4_7() { check_4_8() { local id="4.8" local desc="Ensure setuid and setgid permissions are removed (Not Scored)" + local remediation="You should allow setuid and setgid permissions only on executables which require them. You could remove these permissions at build time by adding the following command in your Dockerfile, preferably towards the end of the Dockerfile: RUN find / -perm /6000 -type f -exec chmod a-s {} ; || true" + local remediationImpact="The above command would break all executables that depend on setuid or setgid permissions including legitimate ones. You should therefore be careful to modify the command to suit your requirements so that it does not reduce the permissions of legitimate programs excessively. Because of this, you should exercise a degree of caution and examine all processes carefully before making this type of modification in order to avoid outages." local check="$id - $desc" starttestjson "$id" "$desc" @@ -176,6 +190,8 @@ check_4_8() { check_4_9() { local id="4.9" local desc="Ensure that COPY is used instead of ADD in Dockerfiles (Not Scored)" + local remediation="You should use COPY rather than ADD instructions in Dockerfiles." + local remediationImpact="Care needs to be taken in implementing this control if the application requires functionality that is part of the ADD instruction, for example, if you need to retrieve files from remote URLS." local check="$id - $desc" starttestjson "$id" "$desc" @@ -206,6 +222,8 @@ check_4_9() { check_4_10() { local id="4.10" local desc="Ensure secrets are not stored in Dockerfiles (Not Scored)" + local remediation="Do not store any kind of secrets within Dockerfiles. Where secrets are required during the build process, make use of a secrets management tool, such as the buildkit builder included with Docker." + local remediationImpact="A proper secrets management process will be required for Docker image building." local check="$id - $desc" starttestjson "$id" "$desc" @@ -216,6 +234,8 @@ check_4_10() { check_4_11() { local id="4.11" local desc="Ensure only verified packages are are installed (Not Scored)" + local remediation="You should use a secure package distribution mechanism of your choice to ensure the authenticity of software packages." + local remediationImpact="None." local check="$id - $desc" starttestjson "$id" "$desc" diff --git a/tests/5_container_runtime.sh b/tests/5_container_runtime.sh index 76c4d6f..443a7e4 100644 --- a/tests/5_container_runtime.sh +++ b/tests/5_container_runtime.sh @@ -27,6 +27,8 @@ check_5_1() { local id="5.1" local desc="Ensure that, if applicable, an AppArmor Profile is enabled (Scored)" + local remediation="If AppArmor is applicable for your Linux OS, you should enable it. Alternatively, Docker's default AppArmor policy can be used." + local remediationImpact="The container will have the security controls defined in the AppArmor profile. It should be noted that if the AppArmor profile is misconfigured, this may cause issues with the operation of the container." local check="$id - $desc" starttestjson "$id" "$desc" @@ -64,6 +66,8 @@ check_5_2() { local id="5.2" local desc="Ensure that, if applicable, SELinux security options are set (Scored)" + local remediation="Set the SELinux State. Set the SELinux Policy. Create or import a SELinux policy template for Docker containers. Start Docker in daemon mode with SELinux enabled. Start your Docker container using the security options." + local remediationImpact="Any restrictions defined in the SELinux policy will be applied to your containers. It should be noted that if your SELinux policy is misconfigured, this may have an impact on the correct operation of the affected containers." local check="$id - $desc" starttestjson "$id" "$desc" @@ -101,6 +105,8 @@ check_5_3() { local id="5.3" local desc="Ensure that Linux kernel capabilities are restricted within containers (Scored)" + local remediation="You could remove all the currently configured capabilities and then restore only the ones you specifically use: docker run --cap-drop=all --cap-add={,} " + local remediationImpact="Restrictions on processes within a container are based on which Linux capabilities are in force. Removal of the NET_RAW capability prevents the container from creating raw sockets which is good security practice under most circumstances, but may affect some networking utilities." local check="$id - $desc" starttestjson "$id" "$desc" @@ -141,6 +147,8 @@ check_5_4() { local id="5.4" local desc="Ensure that privileged containers are not used (Scored)" + local remediation="You should not run containers with the --privileged flag." + local remediationImpact="If you start a container without the --privileged flag, it will not have excessive default capabilities." local check="$id - $desc" starttestjson "$id" "$desc" @@ -178,6 +186,8 @@ check_5_5() { local id="5.5" local desc="Ensure sensitive host system directories are not mounted on containers (Scored)" + local remediation="You should not mount directories which are security sensitive on the host within containers, especially in read-write mode." + local remediationImpact="None." local check="$id - $desc" starttestjson "$id" "$desc" @@ -235,6 +245,8 @@ check_5_6() { local id="5.6" local desc="Ensure sshd is not run within containers (Scored)" + local remediation="Uninstall the SSH daemon from the container and use docker exec to enter a container on the remote host." + local remediationImpact="None." local check="$id - $desc" starttestjson "$id" "$desc" @@ -286,6 +298,8 @@ check_5_7() { local id="5.7" local desc="Ensure privileged ports are not mapped within containers (Scored)" + local remediation="You should not map container ports to privileged host ports when starting a container. You should also, ensure that there is no such container to host privileged port mapping declarations in the Dockerfile." + local remediationImpact="None." local check="$id - $desc" starttestjson "$id" "$desc" @@ -327,6 +341,8 @@ check_5_8() { local id="5.8" local desc="Ensure that only needed ports are open on the container (Not Scored)" + local remediation="You should ensure that the Dockerfile for each container image only exposes needed ports." + local remediationImpact="None." local check="$id - $desc" starttestjson "$id" "$desc" @@ -341,6 +357,8 @@ check_5_9() { local id="5.9" local desc="Ensure that the host's network namespace is not shared (Scored)" + local remediation="You should not pass the --net=host option when starting any container." + local remediationImpact="None." local check="$id - $desc" starttestjson "$id" "$desc" @@ -378,6 +396,8 @@ check_5_10() { local id="5.10" local desc="Ensure that the memory usage for containers is limited (Scored)" + local remediation="You should run the container with only as much memory as it requires by using the --memory argument." + local remediationImpact="If correct memory limits are not set on each container, one process can expand its usage and cause other containers to run out of resources." local check="$id - $desc" starttestjson "$id" "$desc" @@ -419,6 +439,8 @@ check_5_11() { local id="5.11" local desc="Ensure that CPU priority is set appropriately on containers (Scored)" + local remediation="You should manage the CPU runtime between your containers dependent on their priority within your organization. To do so start the container using the --cpu-shares argument." + local remediationImpact="If you do not correctly assign CPU thresholds, the container process may run out of resources and become unresponsive. If CPU resources on the host are not constrainted, CPU shares do not place any restrictions on individual resources." local check="$id - $desc" starttestjson "$id" "$desc" @@ -460,6 +482,8 @@ check_5_12() { local id="5.12" local desc="Ensure that the container's root filesystem is mounted as read only (Scored)" + local remediation="You should add a --read-only flag at a container's runtime to enforce the container's root filesystem being mounted as read only." + local remediationImpact="Enabling --read-only at container runtime may break some container OS packages if a data writing strategy is not defined. You should define what the container's data should and should not persist at runtime in order to decide which strategy to use." local check="$id - $desc" starttestjson "$id" "$desc" @@ -497,6 +521,8 @@ check_5_13() { local id="5.13" local desc="Ensure that incoming container traffic is bound to a specific host interface (Scored)" + local remediation="You should bind the container port to a specific host interface on the desired host port. Example: docker run --detach --publish 10.2.3.4:49153:80 nginx In this example, the container port 80 is bound to the host port on 49153 and would accept incoming connection only from the 10.2.3.4 external interface." + local remediationImpact="None." local check="$id - $desc" starttestjson "$id" "$desc" @@ -534,6 +560,8 @@ check_5_14() { local id="5.14" local desc="Ensure that the 'on-failure' container restart policy is set to '5' (Scored)" + local remediation="If you wish a container to be automatically restarted, a sample command is docker run --detach --restart=on-failure:5 nginx" + local remediationImpact="If this option is set, a container will only attempt to restart itself 5 times." local check="$id - $desc" starttestjson "$id" "$desc" @@ -571,6 +599,8 @@ check_5_15() { local id="5.15" local desc="Ensure that the host's process namespace is not shared (Scored)" + local remediation="You should not start a container with the --pid=host argument." + local remediationImpact="Container processes cannot see processes on the host system." local check="$id - $desc" starttestjson "$id" "$desc" @@ -608,6 +638,8 @@ check_5_16() { local id="5.16" local desc="Ensure that the host's IPC namespace is not shared (Scored)" + local remediation="You should not start a container with the --ipc=host argument." + local remediationImpact="Shared memory segments are used in order to accelerate interprocess communications, commonly in high-performance applications. If this type of application is containerized into multiple containers, you might need to share the IPC namespace of the containers in order to achieve high performance. Under these circumstances, you should still only share container specific IPC namespaces and not the host IPC namespace." local check="$id - $desc" starttestjson "$id" "$desc" @@ -645,6 +677,8 @@ check_5_17() { local id="5.17" local desc="Ensure that host devices are not directly exposed to containers (Not Scored)" + local remediation="You should not directly expose host devices to containers. If you do need to expose host devices to containers, you should use granular permissions as appropriate to your organization." + local remediationImpact="You would not be able to use host devices directly within containers." local check="$id - $desc" starttestjson "$id" "$desc" @@ -682,6 +716,8 @@ check_5_18() { local id="5.18" local desc="Ensure that the default ulimit is overwritten at runtime if needed (Not Scored)" + local remediation="You should only override the default ulimit settings if needed in a specific case." + local remediationImpact="If ulimits are not set correctly, overutilization by individual containers could make the host system unusable." local check="$id - $desc" starttestjson "$id" "$desc" @@ -719,6 +755,8 @@ check_5_19() { local id="5.19" local desc="Ensure mount propagation mode is not set to shared (Scored)" + local remediation="Do not mount volumes in shared mode propagation." + local remediationImpact="None." local check="$id - $desc" starttestjson "$id" "$desc" @@ -755,6 +793,8 @@ check_5_20() { local id="5.20" local desc="Ensure that the host's UTS namespace is not shared (Scored)" + local remediation="You should not start a container with the --uts=host argument." + local remediationImpact="None." local check="$id - $desc" starttestjson "$id" "$desc" @@ -792,6 +832,8 @@ check_5_21() { local id="5.21" local desc="Ensurethe default seccomp profile is not Disabled (Scored)" + local remediation="By default, seccomp profiles are enabled. You do not need to do anything unless you want to modify and use a modified seccomp profile." + local remediationImpact="With Docker 1.10 and greater, the default seccomp profile blocks syscalls, regardless of -- cap-add passed to the container." local check="$id - $desc" starttestjson "$id" "$desc" @@ -828,6 +870,8 @@ check_5_22() { local id="5.22" local desc="Ensure that docker exec commands are not used with the privileged option (Scored)" + local remediation="You should not use the --privileged option in docker exec commands." + local remediationImpact="If you need enhanced capabilities within a container, then run it with all the permissions it requires. These should be specified individually." local check="$id - $desc" starttestjson "$id" "$desc" @@ -842,6 +886,8 @@ check_5_23() { local id="5.23" local desc="Ensure that docker exec commands are not used with the user=root option (Not Scored)" + local remediation="You should not use the --user=root option in docker exec commands." + local remediationImpact="None." local check="$id - $desc" starttestjson "$id" "$desc" @@ -856,6 +902,8 @@ check_5_24() { local id="5.24" local desc="Ensure that cgroup usage is confirmed (Scored)" + local remediation="You should not use the --cgroup-parent option within the docker run command unless strictly required." + local remediationImpact="None." local check="$id - $desc" starttestjson "$id" "$desc" @@ -892,6 +940,8 @@ check_5_25() { fi local id="5.25" local desc="Ensure that the container is restricted from acquiring additional privileges (Scored)" + local remediation="You should start your container with the options: docker run --rm -it --security-opt=no-new-privileges ubuntu bash" + local remediationImpact="The no_new_priv option prevents LSMs like SELinux from allowing processes to acquire new privileges." local check="$id - $desc" starttestjson "$id" "$desc" @@ -927,6 +977,8 @@ check_5_26() { local id="5.26" local desc="Ensure that container health is checked at runtime (Scored)" + local remediation="You should run the container using the --health-cmd parameter." + local remediationImpact="None." local check="$id - $desc" starttestjson "$id" "$desc" @@ -960,6 +1012,8 @@ check_5_27() { local id="5.27" local desc="Ensure that Docker commands always make use of the latest version of their image (Not Scored)" + local remediation="You should use proper version pinning mechanisms (the tag which is assigned by default is still vulnerable to caching attacks) to avoid extracting cached older versions. Version pinning mechanisms should be used for base images, packages, and entire images. You can customize version pinning rules according to your requirements." + local remediationImpact="None." local check="$id - $desc" starttestjson "$id" "$desc" @@ -974,6 +1028,8 @@ check_5_28() { local id="5.28" local desc="Ensure that the PIDs cgroup limit is used (Scored)" + local remediation="Use --pids-limit flag with an appropriate value when launching the container." + local remediationImpact="Set the PIDs limit value as appropriate. Incorrect values might leave containers unusable." local check="$id - $desc" starttestjson "$id" "$desc" @@ -1011,6 +1067,8 @@ check_5_29() { local id="5.29" local desc="Ensure that Docker's default bridge "docker0" is not used (Not Scored)" + local remediation="You should follow the Docker documentation and set up a user-defined network. All the containers should be run in this network." + local remediationImpact="User-defined networks need to be configured and managed in line with organizational security policy." local check="$id - $desc" starttestjson "$id" "$desc" @@ -1058,6 +1116,8 @@ check_5_30() { local id="5.30" local desc="Ensure that the host's user namespaces are not shared (Scored)" + local remediation="You should not share user namespaces between host and containers." + local remediationImpact="None." local check="$id - $desc" starttestjson "$id" "$desc" @@ -1093,6 +1153,8 @@ check_5_31() { local id="5.31" local desc="Ensure that the Docker socket is not mounted inside any containers (Scored)" + local remediation="You should ensure that no containers mount docker.sock as a volume." + local remediationImpact="None." local check="$id - $desc" starttestjson "$id" "$desc" diff --git a/tests/99_community_checks.sh b/tests/99_community_checks.sh index 035a541..5f26ceb 100644 --- a/tests/99_community_checks.sh +++ b/tests/99_community_checks.sh @@ -11,6 +11,8 @@ check_c() { check_c_1() { local id="C.1" local desc="This is a example check for a Scored check" + local remediation="This is an example remediation measure for a Scored check" + local remediationImpact="This is an example remediation impact for a Scored check" local check="$id - $desc" starttestjson "$id" "$desc" @@ -29,6 +31,8 @@ check_c_1() { check_c_1_1() { local id="C.1.1" local desc="This is a example check for a Not Scored check" + local remediation="This is an example remediation measure for a Not Scored check" + local remediationImpact="This is an example remediation impact for a Not Scored check" local check="$id - $desc" starttestjson "$id" "$desc" @@ -50,6 +54,8 @@ check_c_2() { local id="C.2" local desc="Ensure operations on legacy registry (v1) are Disabled" + local remediation="Start docker daemon with --disable-legacy-registry=false flag. Starting with Docker 17.12, support for V1 registries has been removed, and the --disable-legacy-registry flag can no longer be used." + local remediationImpact="Prevents the docker daemon from pull, push, and login operations against v1 registries." local check="$id - $desc" starttestjson "$id" "$desc" From 4b68c2e040c80d4ca754e414024e05475ce2c8ee Mon Sep 17 00:00:00 2001 From: Razvan Stoica Date: Sat, 27 Mar 2021 09:36:10 +0200 Subject: [PATCH 39/48] Rename logs without the .sh extension --- docker-bench-security.sh | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/docker-bench-security.sh b/docker-bench-security.sh index feef5a8..a4a1a78 100755 --- a/docker-bench-security.sh +++ b/docker-bench-security.sh @@ -15,7 +15,7 @@ version='1.3.6' # Setup the paths this_path=$(abspath "$0") ## Path of this file including filename -myname=$(basename "${this_path}") ## file name of this script. +myname=$(basename "${this_path%.*}") ## file name of this script. readonly version readonly this_path @@ -50,7 +50,7 @@ Docker Bench for Security - Docker, Inc. (c) 2015-$(date +"%Y") Checks for dozens of common best-practices around deploying Docker containers in production. Inspired by the CIS Docker Benchmark v1.2.0. -Usage: ${myname} [OPTIONS] +Usage: ${myname}.sh [OPTIONS] Example: - Only run check "2.2 - Ensure the logging level is set to 'info'": @@ -138,7 +138,7 @@ beginjson "$version" "$(date +%s)" # Load all the tests from tests/ and run them main () { - logit "\n${bldylw}Section A - Checks result${txtrsr}" + logit "\n${bldylw}Section A - Check results${txtrsr}" globalRemediation="" # Get configuration location From 8a934aebf1f6af568070047b9e0d33005c6f5285 Mon Sep 17 00:00:00 2001 From: Razvan Stoica Date: Sun, 28 Mar 2021 09:47:49 +0300 Subject: [PATCH 40/48] Remove the Debian family-specific installation command --- tests/1_host_configuration.sh | 20 ++++++++++---------- 1 file changed, 10 insertions(+), 10 deletions(-) diff --git a/tests/1_host_configuration.sh b/tests/1_host_configuration.sh index a8deced..c3e3d86 100644 --- a/tests/1_host_configuration.sh +++ b/tests/1_host_configuration.sh @@ -129,7 +129,7 @@ check_1_2_2() { check_1_2_3() { local id="1.2.3" local desc="Ensure auditing is configured for the Docker daemon (Scored)" - local remediation="Install and configure auditd using command sudo apt-get install auditd. Add -w /usr/bin/dockerd -k docker to the /etc/audit/rules.d/audit.rules file. Then restart the audit daemon using command service auditd restart." + local remediation="Install auditd. Add -w /usr/bin/dockerd -k docker to the /etc/audit/rules.d/audit.rules file. Then restart the audit daemon using command service auditd restart." local remediationImpact="Audit can generate large log files. So you need to make sure that they are rotated and archived periodically. Create a separate partition for audit logs to avoid filling up other critical partitions." local check="$id - $desc" starttestjson "$id" "$desc" @@ -155,7 +155,7 @@ check_1_2_3() { check_1_2_4() { local id="1.2.4" local desc="Ensure auditing is configured for Docker files and directories - /var/lib/docker (Scored)" - local remediation="Install and configure auditd using command sudo apt-get install auditd. Add -w /var/lib/docker -k docker to the /etc/audit/rules.d/audit.rules file. Then restart the audit daemon using command service auditd restart." + local remediation="Install auditd. Add -w /var/lib/docker -k docker to the /etc/audit/rules.d/audit.rules file. Then restart the audit daemon using command service auditd restart." local remediationImpact="Audit can generate large log files. So you need to make sure that they are rotated and archived periodically. Create a separate partition for audit logs to avoid filling up other critical partitions." local check="$id - $desc" starttestjson "$id" "$desc" @@ -187,7 +187,7 @@ check_1_2_4() { check_1_2_5() { local id="1.2.5" local desc="Ensure auditing is configured for Docker files and directories - /etc/docker (Scored)" - local remediation="Install and configure auditd using command sudo apt-get install auditd. Add -w /etc/docker -k docker to the /etc/audit/rules.d/audit.rules file. Then restart the audit daemon using command service auditd restart." + local remediation="Install auditd. Add -w /etc/docker -k docker to the /etc/audit/rules.d/audit.rules file. Then restart the audit daemon using command service auditd restart." local remediationImpact="Audit can generate large log files. So you need to make sure that they are rotated and archived periodically. Create a separate partition for audit logs to avoid filling up other critical partitions." local check="$id - $desc" starttestjson "$id" "$desc" @@ -220,7 +220,7 @@ check_1_2_6() { local id="1.2.6" local desc="Ensure auditing is configured for Docker files and directories - docker.service (Scored)" local remediation - remediation="Install and configure auditd using command sudo apt-get install auditd. Add -w $(systemctl show -p FragmentPath docker.service | sed 's/.*=//') -k docker to the /etc/audit/rules.d/audit.rules file. Then restart the audit daemon using command service auditd restart." + remediation="Install auditd. Add -w $(systemctl show -p FragmentPath docker.service | sed 's/.*=//') -k docker to the /etc/audit/rules.d/audit.rules file. Then restart the audit daemon using command service auditd restart." local remediationImpact="Audit can generate large log files. So you need to make sure that they are rotated and archived periodically. Create a separate partition for audit logs to avoid filling up other critical partitions." local check="$id - $desc" starttestjson "$id" "$desc" @@ -253,7 +253,7 @@ check_1_2_7() { local id="1.2.7" local desc="Ensure auditing is configured for Docker files and directories - docker.socket (Scored)" local remediation - remediation="Install and configure auditd using command sudo apt-get install auditd. Add -w $(systemctl show -p FragmentPath docker.socket | sed 's/.*=//') -k docker to the /etc/audit/rules.d/audit.rules file. Then restart the audit daemon using command service auditd restart." + remediation="Install auditd. Add -w $(systemctl show -p FragmentPath docker.socket | sed 's/.*=//') -k docker to the /etc/audit/rules.d/audit.rules file. Then restart the audit daemon using command service auditd restart." local remediationImpact="Audit can generate large log files. So you need to make sure that they are rotated and archived periodically. Create a separate partition for audit logs to avoid filling up other critical partitions." local check="$id - $desc" starttestjson "$id" "$desc" @@ -285,7 +285,7 @@ check_1_2_7() { check_1_2_8() { local id="1.2.8" local desc="Ensure auditing is configured for Docker files and directories - /etc/default/docker (Scored)" - local remediation="Install and configure auditd using command sudo apt-get install auditd. Add -w /etc/default/docker -k docker to the /etc/audit/rules.d/audit.rules file. Then restart the audit daemon using command service auditd restart." + local remediation="Install auditd. Add -w /etc/default/docker -k docker to the /etc/audit/rules.d/audit.rules file. Then restart the audit daemon using command service auditd restart." local remediationImpact="Audit can generate large log files. So you need to make sure that they are rotated and archived periodically. Create a separate partition for audit logs to avoid filling up other critical partitions." local check="$id - $desc" starttestjson "$id" "$desc" @@ -317,7 +317,7 @@ check_1_2_8() { check_1_2_9() { local id="1.2.9" local desc="Ensure auditing is configured for Docker files and directories - /etc/sysconfig/docker (Scored)" - local remediation="Install and configure auditd using command sudo apt-get install auditd. Add -w /etc/sysconfig/docker -k docker to the /etc/audit/rules.d/audit.rules file. Then restart the audit daemon using command service auditd restart." + local remediation="Install auditd. Add -w /etc/sysconfig/docker -k docker to the /etc/audit/rules.d/audit.rules file. Then restart the audit daemon using command service auditd restart." local remediationImpact="Audit can generate large log files. So you need to make sure that they are rotated and archived periodically. Create a separate partition for audit logs to avoid filling up other critical partitions." local check="$id - $desc" starttestjson "$id" "$desc" @@ -349,7 +349,7 @@ check_1_2_9() { check_1_2_10() { local id="1.2.10" local desc="Ensure auditing is configured for Docker files and directories - /etc/docker/daemon.json (Scored)" - local remediation="Install and configure auditd using command sudo apt-get install auditd. Add -w /etc/docker/daemon.json -k docker to the /etc/audit/rules.d/audit.rules file. Then restart the audit daemon using command service auditd restart." + local remediation="Install auditd. Add -w /etc/docker/daemon.json -k docker to the /etc/audit/rules.d/audit.rules file. Then restart the audit daemon using command service auditd restart." local remediationImpact="Audit can generate large log files. So you need to make sure that they are rotated and archived periodically. Create a separate partition for audit logs to avoid filling up other critical partitions." local check="$id - $desc" starttestjson "$id" "$desc" @@ -381,7 +381,7 @@ check_1_2_10() { check_1_2_11() { local id="1.2.11" local desc="Ensure auditing is configured for Docker files and directories - /usr/bin/containerd (Scored)" - local remediation="Install and configure auditd using command sudo apt-get install auditd. Add -w /usr/bin/containerd -k docker to the /etc/audit/rules.d/audit.rules file. Then restart the audit daemon using command service auditd restart." + local remediation="Install auditd. Add -w /usr/bin/containerd -k docker to the /etc/audit/rules.d/audit.rules file. Then restart the audit daemon using command service auditd restart." local remediationImpact="Audit can generate large log files. So you need to make sure that they are rotated and archived periodically. Create a separate partition for audit logs to avoid filling up other critical partitions." local check="$id - $desc" starttestjson "$id" "$desc" @@ -413,7 +413,7 @@ check_1_2_11() { check_1_2_12() { local id="1.2.12" local desc="Ensure auditing is configured for Docker files and directories - /usr/sbin/runc (Scored)" - local remediation="Install and configure auditd using command sudo apt-get install auditd. Add -w /usr/sbin/runc -k docker to the /etc/audit/rules.d/audit.rules file. Then restart the audit daemon using command service auditd restart." + local remediation="Install auditd. Add -w /usr/sbin/runc -k docker to the /etc/audit/rules.d/audit.rules file. Then restart the audit daemon using command service auditd restart." local remediationImpact="Audit can generate large log files. So you need to make sure that they are rotated and archived periodically. Create a separate partition for audit logs to avoid filling up other critical partitions." local check="$id - $desc" starttestjson "$id" "$desc" From 86985f854f05d97e4c80749b33e54aa23fd579fb Mon Sep 17 00:00:00 2001 From: Razvan Stoica Date: Sun, 28 Mar 2021 11:08:15 +0300 Subject: [PATCH 41/48] Overwrite the json log at each run. Beautify the json log. --- docker-bench-security.sh | 25 +++++-------- functions/output_lib.sh | 77 +++++++++++++++++++--------------------- 2 files changed, 44 insertions(+), 58 deletions(-) diff --git a/docker-bench-security.sh b/docker-bench-security.sh index a4a1a78..3461db3 100755 --- a/docker-bench-security.sh +++ b/docker-bench-security.sh @@ -78,6 +78,14 @@ Released under the Apache-2.0 License. EOF } +# Default values +if [ ! -d log ]; then + mkdir log +fi +logger="log/${myname}.log" +limit=0 +printremediation="1" + # Get the flags # If you add an option here, please # remember to update usage() above. @@ -98,22 +106,6 @@ do esac done -# Default values -if [ -z "$logger" ]; then - if [ ! -d log ]; then - mkdir log - fi - logger="log/${myname}.log" -fi - -if [ -z "$limit" ]; then - limit=0 -fi - -if [ -z "$printremediation" ]; then - printremediation="1" -fi - # Load output formating . ./functions/output_lib.sh @@ -133,7 +125,6 @@ totalChecks=0 currentScore=0 logit "Initializing $(date +%Y-%m-%dT%H:%M:%S%:z)\n" -appendjson beginjson "$version" "$(date +%s)" # Load all the tests from tests/ and run them diff --git a/functions/output_lib.sh b/functions/output_lib.sh index 6fd1ce7..5635db4 100644 --- a/functions/output_lib.sh +++ b/functions/output_lib.sh @@ -1,17 +1,17 @@ #!/bin/sh +bldred='\033[1;31m' # Bold Red +bldgrn='\033[1;32m' # Bold Green +bldblu='\033[1;34m' # Bold Blue +bldylw='\033[1;33m' # Bold Yellow +txtrst='\033[0m' + if [ -n "$nocolor" ] && [ "$nocolor" = "nocolor" ]; then bldred='' bldgrn='' bldblu='' bldylw='' txtrst='' -else - bldred='\033[1;31m' # Bold Red - bldgrn='\033[1;32m' # Bold Green - bldblu='\033[1;34m' # Bold Blue - bldylw='\033[1;33m' # Bold Yellow - txtrst='\033[0m' fi logit () { @@ -30,9 +30,9 @@ info () { if [ "$infoCountCheck" = "true" ]; then printf "%b\n" "${bldblu}[INFO]${txtrst} $2" | tee -a "$logger" totalChecks=$((totalChecks + 1)) - else - printf "%b\n" "${bldblu}[INFO]${txtrst} $1" | tee -a "$logger" + return fi + printf "%b\n" "${bldblu}[INFO]${txtrst} $1" | tee -a "$logger" } pass () { @@ -45,14 +45,14 @@ pass () { *) exit 1 ;; esac done + if [ "$passScored" = "true" ] || [ "$passCountCheck" = "true" ]; then + printf "%b\n" "${bldgrn}[PASS]${txtrst} $2" | tee -a "$logger" + totalChecks=$((totalChecks + 1)) + fi if [ "$passScored" = "true" ]; then - printf "%b\n" "${bldgrn}[PASS]${txtrst} $2" | tee -a "$logger" - totalChecks=$((totalChecks + 1)) currentScore=$((currentScore + 1)) - elif [ "$passCountCheck" = "true" ]; then - printf "%b\n" "${bldgrn}[PASS]${txtrst} $2" | tee -a "$logger" - totalChecks=$((totalChecks + 1)) - else + fi + if [ "$passScored" != "true" ] && [ "$passCountCheck" != "true" ]; then printf "%b\n" "${bldgrn}[PASS]${txtrst} $1" | tee -a "$logger" fi } @@ -70,9 +70,9 @@ warn () { printf "%b\n" "${bldred}[WARN]${txtrst} $2" | tee -a "$logger" totalChecks=$((totalChecks + 1)) currentScore=$((currentScore - 1)) - else - printf "%b\n" "${bldred}[WARN]${txtrst} $1" | tee -a "$logger" + return fi + printf "%b\n" "${bldred}[WARN]${txtrst} $1" | tee -a "$logger" } note () { @@ -87,30 +87,21 @@ note () { if [ "$noteCountCheck" = "true" ]; then printf "%b\n" "${bldylw}[NOTE]${txtrst} $2" | tee -a "$logger" totalChecks=$((totalChecks + 1)) - else - printf "%b\n" "${bldylw}[NOTE]${txtrst} $1" | tee -a "$logger" - fi + return + fi + printf "%b\n" "${bldylw}[NOTE]${txtrst} $1" | tee -a "$logger" } yell () { printf "%b\n" "${bldylw}$1${txtrst}\n" } -appendjson () { - if [ -s "$logger.json" ]; then - tail -n 1 "$logger.json" | wc -c | xargs -I {} truncate "$logger.json" -s -{} - printf "},\n" | tee -a "$logger.json" 2>/dev/null 1>&2 - else - printf "[" | tee -a "$logger.json" 2>/dev/null 1>&2 - fi -} - beginjson () { - printf "{\n \"dockerbenchsecurity\": \"%s\",\n \"start\": %s,\n \"tests\": [" "$1" "$2" | tee -a "$logger.json" 2>/dev/null 1>&2 + printf "{\n \"dockerbenchsecurity\": \"%s\",\n \"start\": %s,\n \"tests\": [" "$1" "$2" | tee "$logger.json" 2>/dev/null 1>&2 } endjson (){ - printf "\n ], \"checks\": %s, \"score\": %s, \"end\": %s\n}]" "$1" "$2" "$3" | tee -a "$logger.json" 2>/dev/null 1>&2 + printf "\n ],\n \"checks\": %s,\n \"score\": %s,\n \"end\": %s\n}" "$1" "$2" "$3" | tee -a "$logger.json" 2>/dev/null 1>&2 } logjson (){ @@ -120,17 +111,17 @@ logjson (){ SSEP= SEP= startsectionjson() { - printf "%s\n {\"id\": \"%s\", \"desc\": \"%s\", \"results\": [" "$SSEP" "$1" "$2" | tee -a "$logger.json" 2>/dev/null 1>&2 + printf "%s\n {\n \"id\": \"%s\",\n \"desc\": \"%s\",\n \"results\": [" "$SSEP" "$1" "$2" | tee -a "$logger.json" 2>/dev/null 1>&2 SEP= SSEP="," } endsectionjson() { - printf "\n ]}" | tee -a "$logger.json" 2>/dev/null 1>&2 + printf "\n ]\n }" | tee -a "$logger.json" 2>/dev/null 1>&2 } starttestjson() { - printf "%s\n {\"id\": \"%s\", \"desc\": \"%s\", " "$SEP" "$1" "$2" | tee -a "$logger.json" 2>/dev/null 1>&2 + printf "%s\n {\n \"id\": \"%s\",\n \"desc\": \"%s\",\n " "$SEP" "$1" "$2" | tee -a "$logger.json" 2>/dev/null 1>&2 SEP="," } @@ -138,10 +129,14 @@ logcheckresult() { # Log to JSON if [ $# -eq 1 ]; then printf "\"result\": \"%s\"" "$1" | tee -a "$logger.json" 2>/dev/null 1>&2 - elif [ $# -eq 2 ]; then + fi + + if [ $# -eq 2 ] && [ $# -ne 1 ]; then # Result also contains details - printf "\"result\": \"%s\", \"details\": \"%s\"" "$1" "$2" | tee -a "$logger.json" 2>/dev/null 1>&2 - else + printf "\"result\": \"%s\",\n \"details\": \"%s\"" "$1" "$2" | tee -a "$logger.json" 2>/dev/null 1>&2 + fi + + if [ $# -ne 2 ] && [ $# -ne 1 ]; then # Result also includes details and a list of items. Add that directly to details and to an array property "items" # Also limit the number of items to $limit, if $limit is non-zero if [ $limit != 0 ]; then @@ -158,18 +153,18 @@ logcheckresult() { else truncItems=$3 fi - itemsJson=$(printf "["; ISEP=""; ITEMCOUNT=0; for item in $truncItems; do printf "%s\"%s\"" "$ISEP" "$item"; ISEP=","; done; printf "]") - printf "\"result\": \"%s\", \"details\": \"%s: %s\", \"items\": %s" "$1" "$2" "$truncItems" "$itemsJson" | tee -a "$logger.json" 2>/dev/null 1>&2 + itemsJson=$(printf "[\n "; ISEP=""; ITEMCOUNT=0; for item in $truncItems; do printf "%s\"%s\"" "$ISEP" "$item"; ISEP=","; done; printf "\n ]") + printf "\"result\": \"%s\",\n \"details\": \"%s: %s\",\n \"items\": %s" "$1" "$2" "$truncItems" "$itemsJson" | tee -a "$logger.json" 2>/dev/null 1>&2 fi # Log remediation measure to JSON if [ -n "$remediation" ] && [ "$1" != "PASS" ] && [ "$printremediation" = "1" ]; then - printf ", \"remediation\": \"%s\"" "$remediation" | tee -a "$logger.json" 2>/dev/null 1>&2 + printf ",\n \"remediation\": \"%s\"" "$remediation" | tee -a "$logger.json" 2>/dev/null 1>&2 if [ -n "$remediationImpact" ]; then - printf ", \"remediation-impact\": \"%s\"" "$remediationImpact" | tee -a "$logger.json" 2>/dev/null 1>&2 + printf ",\n \"remediation-impact\": \"%s\"" "$remediationImpact" | tee -a "$logger.json" 2>/dev/null 1>&2 fi fi - printf "}" | tee -a "$logger.json" 2>/dev/null 1>&2 + printf "\n }" | tee -a "$logger.json" 2>/dev/null 1>&2 # Save remediation measure for print log to stdout if [ -n "$remediation" ] && [ "$1" != "PASS" ]; then From d0443cc817cf17452f41510954e450a320b59c6a Mon Sep 17 00:00:00 2001 From: Razvan Stoica Date: Mon, 29 Mar 2021 15:22:14 +0300 Subject: [PATCH 42/48] Bug fixing and improving source code readability --- docker-bench-security.sh | 16 +- functions/helper_lib.sh | 49 ++- functions/output_lib.sh | 63 +-- functions/output_lib.sh.save | 194 ++++++++ tests/1_host_configuration.sh | 261 +++++------ tests/2_docker_daemon_configuration.sh | 212 +++++---- tests/3_docker_daemon_configuration_files.sh | 366 ++++++++-------- tests/4_container_images.sh | 78 ++-- tests/5_container_runtime.sh | 437 +++++++++---------- tests/7_docker_swarm_configuration.sh | 92 ++-- tests/8_docker_enterprise_configuration.sh | 3 +- tests/99_community_checks.sh | 40 +- 12 files changed, 1028 insertions(+), 783 deletions(-) create mode 100644 functions/output_lib.sh.save diff --git a/docker-bench-security.sh b/docker-bench-security.sh index 3461db3..c9de3fb 100755 --- a/docker-bench-security.sh +++ b/docker-bench-security.sh @@ -24,19 +24,7 @@ readonly myname export PATH="$PATH:/bin:/sbin:/usr/bin:/usr/local/bin:/usr/sbin/" # Check for required program(s) -req_progs='awk docker grep stat tee tail wc xargs truncate sed' -for p in $req_progs; do - command -v "$p" >/dev/null 2>&1 || { printf "%s command not found.\n" "$p"; exit 1; } -done - -if command -v ss >/dev/null 2>&1; then - netbin=ss -elif command -v netstat >/dev/null 2>&1; then - netbin=netstat -else - echo "ss or netstat command not found." - exit 1 -fi +req_programs 'awk docker grep stat tee tail wc xargs truncate sed' # Ensure we can connect to docker daemon if ! docker ps -q >/dev/null 2>&1; then @@ -85,6 +73,7 @@ fi logger="log/${myname}.log" limit=0 printremediation="1" +globalRemediation="" # Get the flags # If you add an option here, please @@ -130,7 +119,6 @@ beginjson "$version" "$(date +%s)" # Load all the tests from tests/ and run them main () { logit "\n${bldylw}Section A - Check results${txtrsr}" - globalRemediation="" # Get configuration location get_docker_configuration_file diff --git a/functions/helper_lib.sh b/functions/helper_lib.sh index e24a14c..96ac49c 100644 --- a/functions/helper_lib.sh +++ b/functions/helper_lib.sh @@ -6,6 +6,23 @@ abspath () { case "$1" in /*)printf "%s\n" "$1";; *)printf "%s\n" "$PWD/$1";; es # Audit rules default path auditrules="/etc/audit/audit.rules" +# Check for required program(s) +req_programs() { + for p in $1; do + command -v "$p" >/dev/null 2>&1 || { printf "Required program not found: %s\n" "$p"; exit 1; } + done + if command -v ss >/dev/null 2>&1; then + netbin=ss + return + fi + if command -v netstat >/dev/null 2>&1; then + netbin=netstat + return + fi + echo "ss or netstat command not found." + exit 1 +} + # Compares versions of software of the format X.Y.Z do_version_check() { [ "$1" = "$2" ] && return 10 @@ -23,9 +40,8 @@ do_version_check() { [ "$ver2front" = "$2" ] || [ -z "$ver2back" ] && ver2back=0 do_version_check "$ver1back" "$ver2back" return $? - else - [ "$1" -gt "$2" ] && return 11 || return 9 fi + [ "$1" -gt "$2" ] && return 11 || return 9 } # Extracts commandline args from the newest running processes named like the first parameter @@ -45,10 +61,9 @@ get_command_line_args() { get_docker_cumulative_command_line_args() { OPTION="$1" + line_arg="dockerd" if ! get_command_line_args "docker daemon" >/dev/null 2>&1 ; then line_arg="docker daemon" - else - line_arg="dockerd" fi get_command_line_args "$line_arg" | @@ -88,11 +103,13 @@ get_docker_configuration_file() { if [ -f "$FILE" ]; then CONFIG_FILE="$FILE" - elif [ -f '/etc/docker/daemon.json' ]; then - CONFIG_FILE='/etc/docker/daemon.json' - else - CONFIG_FILE='/dev/null' + return fi + if [ -f '/etc/docker/daemon.json' ]; then + CONFIG_FILE='/etc/docker/daemon.json' + return + fi + CONFIG_FILE='/dev/null' } get_docker_configuration_file_args() { @@ -108,13 +125,17 @@ get_service_file() { if [ -f "/etc/systemd/system/$SERVICE" ]; then echo "/etc/systemd/system/$SERVICE" - elif [ -f "/lib/systemd/system/$SERVICE" ]; then - echo "/lib/systemd/system/$SERVICE" - elif systemctl show -p FragmentPath "$SERVICE" 2> /dev/null 1>&2; then - systemctl show -p FragmentPath "$SERVICE" | sed 's/.*=//' - else - echo "/usr/lib/systemd/system/$SERVICE" + return fi + if [ -f "/lib/systemd/system/$SERVICE" ]; then + echo "/lib/systemd/system/$SERVICE" + return + fi + if systemctl show -p FragmentPath "$SERVICE" 2> /dev/null 1>&2; then + systemctl show -p FragmentPath "$SERVICE" | sed 's/.*=//' + return + fi + echo "/usr/lib/systemd/system/$SERVICE" } yell_info() { diff --git a/functions/output_lib.sh b/functions/output_lib.sh index 5635db4..e40fb30 100644 --- a/functions/output_lib.sh +++ b/functions/output_lib.sh @@ -87,8 +87,8 @@ note () { if [ "$noteCountCheck" = "true" ]; then printf "%b\n" "${bldylw}[NOTE]${txtrst} $2" | tee -a "$logger" totalChecks=$((totalChecks + 1)) - return - fi + return + fi printf "%b\n" "${bldylw}[NOTE]${txtrst} $1" | tee -a "$logger" } @@ -125,37 +125,38 @@ starttestjson() { SEP="," } +log_to_json() { + if [ $# -eq 1 ]; then + printf "\"result\": \"%s\"" "$1" | tee -a "$logger.json" 2>/dev/null 1>&2 + return + fi + if [ $# -eq 2 ] && [ $# -ne 1 ]; then + # Result also contains details + printf "\"result\": \"%s\",\n \"details\": \"%s\"" "$1" "$2" | tee -a "$logger.json" 2>/dev/null 1>&2 + return + fi + # Result also includes details and a list of items. Add that directly to details and to an array property "items" + # Also limit the number of items to $limit, if $limit is non-zero + truncItems=$3 + if [ $limit != 0 ]; then + truncItems="" + ITEM_COUNT=0 + for item in $3; do + truncItems="$truncItems $item" + ITEM_COUNT=$((ITEM_COUNT + 1)); + if [ "$ITEM_COUNT" == "$limit" ]; then + truncItems="$truncItems (truncated)" + break; + fi + done + fi + itemsJson=$(printf "[\n "; ISEP=""; ITEMCOUNT=0; for item in $truncItems; do printf "%s\"%s\"" "$ISEP" "$item"; ISEP=","; done; printf "\n ]") + printf "\"result\": \"%s\",\n \"details\": \"%s: %s\",\n \"items\": %s" "$1" "$2" "$truncItems" "$itemsJson" | tee -a "$logger.json" 2>/dev/null 1>&2 +} + logcheckresult() { # Log to JSON - if [ $# -eq 1 ]; then - printf "\"result\": \"%s\"" "$1" | tee -a "$logger.json" 2>/dev/null 1>&2 - fi - - if [ $# -eq 2 ] && [ $# -ne 1 ]; then - # Result also contains details - printf "\"result\": \"%s\",\n \"details\": \"%s\"" "$1" "$2" | tee -a "$logger.json" 2>/dev/null 1>&2 - fi - - if [ $# -ne 2 ] && [ $# -ne 1 ]; then - # Result also includes details and a list of items. Add that directly to details and to an array property "items" - # Also limit the number of items to $limit, if $limit is non-zero - if [ $limit != 0 ]; then - truncItems="" - ITEM_COUNT=0 - for item in $3; do - truncItems="$truncItems $item" - ITEM_COUNT=$((ITEM_COUNT + 1)); - if [ "$ITEM_COUNT" == "$limit" ]; then - truncItems="$truncItems (truncated)" - break; - fi - done - else - truncItems=$3 - fi - itemsJson=$(printf "[\n "; ISEP=""; ITEMCOUNT=0; for item in $truncItems; do printf "%s\"%s\"" "$ISEP" "$item"; ISEP=","; done; printf "\n ]") - printf "\"result\": \"%s\",\n \"details\": \"%s: %s\",\n \"items\": %s" "$1" "$2" "$truncItems" "$itemsJson" | tee -a "$logger.json" 2>/dev/null 1>&2 - fi + log_to_json "$@" # Log remediation measure to JSON if [ -n "$remediation" ] && [ "$1" != "PASS" ] && [ "$printremediation" = "1" ]; then diff --git a/functions/output_lib.sh.save b/functions/output_lib.sh.save new file mode 100644 index 0000000..6ead504 --- /dev/null +++ b/functions/output_lib.sh.save @@ -0,0 +1,194 @@ +#!/bin/sh + +bldred='\033[1;31m' # Bold Red +bldgrn='\033[1;32m' # Bold Green +bldblu='\033[1;34m' # Bold Blue +bldylw='\033[1;33m' # Bold Yellow +txtrst='\033[0m' + +if [ -n "$nocolor" +] && [ "$nocolor" = "nocolor" ]; then + bldred='' + bldgrn='' + bldblu='' + bldylw='' + txtrst='' +fi + +logit () { + printf "%b\n" "$1" | tee -a "$logger" +} + +info () { + local infoCountCheck + while getopts c args + do + case $args in + c) infoCountCheck="true" ;; + *) exit 1 ;; + esac + done + if [ "$infoCountCheck" = "true" ]; then + printf "%b\n" "${bldblu}[INFO]${txtrst} $2" | tee -a "$logger" + totalChecks=$((totalChecks + 1)) + return + fi + printf "%b\n" "${bldblu}[INFO]${txtrst} $1" | tee -a "$logger" +} + +pass () { + local passScored + while getopts sc args + do + case $args in + s) passScored="true" ;; + c) passCountCheck="true" ;; + *) exit 1 ;; + esac + done + if [ "$passScored" = "true" ] || [ "$passCountCheck" = "true" ]; then + printf "%b\n" "${bldgrn}[PASS]${txtrst} $2" | tee -a "$logger" + totalChecks=$((totalChecks + 1)) + fi + if [ "$passScored" = "true" ]; then + currentScore=$((currentScore + 1)) + fi + if [ "$passScored" != "true" ] && [ "$passCountCheck" != "true" ]; then + printf "%b\n" "${bldgrn}[PASS]${txtrst} $1" | tee -a "$logger" + fi +} + +warn () { + local warnScored + while getopts s args + do + case $args in + s) warnScored="true" ;; + *) exit 1 ;; + esac + done + if [ "$warnScored" = "true" ]; then + printf "%b\n" "${bldred}[WARN]${txtrst} $2" | tee -a "$logger" + totalChecks=$((totalChecks + 1)) + currentScore=$((currentScore - 1)) + return + fi + printf "%b\n" "${bldred}[WARN]${txtrst} $1" | tee -a "$logger" +} + +note () { + local noteCountCheck + while getopts c args + do + case $args in + c) noteCountCheck="true" ;; + *) exit 1 ;; + esac + done + if [ "$noteCountCheck" = "true" ]; then + printf "%b\n" "${bldylw}[NOTE]${txtrst} $2" | tee -a "$logger" + totalChecks=$((totalChecks + 1)) + return + fi + printf "%b\n" "${bldylw}[NOTE]${txtrst} $1" | tee -a "$logger" +} + +yell () { + printf "%b\n" "${bldylw}$1${txtrst}\n" +} + +appendjson () { + if [ -s "$logger.json" ]; then + tail -n 1 "$logger.json" | wc -c | xargs -I {} truncate "$logger.json" -s -{} + printf "},\n" | tee -a "$logger.json" 2>/dev/null 1>&2 + return + fi + printf "[" | tee -a "$logger.json" 2>/dev/null 1>&2 +} + +beginjson () { + printf "{\n \"dockerbenchsecurity\": \"%s\",\n \"start\": %s,\n \"tests\": [" "$1" "$2" | tee -a "$logger.json" 2>/dev/null 1>&2 +} + +endjson (){ + printf "\n ], \"checks\": %s, \"score\": %s, \"end\": %s\n}]" "$1" "$2" "$3" | tee -a "$logger.json" 2>/dev/null 1>&2 +} + +logjson (){ + printf "\n \"%s\": \"%s\"," "$1" "$2" | tee -a "$logger.json" 2>/dev/null 1>&2 +} + +SSEP= +SEP= +startsectionjson() { + printf "%s\n {\"id\": \"%s\", \"desc\": \"%s\", \"results\": [" "$SSEP" "$1" "$2" | tee -a "$logger.json" 2>/dev/null 1>&2 + SEP= + SSEP="," +} + +endsectionjson() { + printf "\n ]}" | tee -a "$logger.json" 2>/dev/null 1>&2 +} + +starttestjson() { + printf "%s\n {\"id\": \"%s\", \"desc\": \"%s\", " "$SEP" "$1" "$2" | tee -a "$logger.json" 2>/dev/null 1>&2 + SEP="," +} + +logcheckresult() { + # Log to JSON + if [ $# -eq 1 ]; then + printf "\"result\": \"%s\"" "$1" | tee -a "$logger.json" 2>/dev/null 1>&2 + fi + + if [ $# -eq 2 ] && [ $# -ne 1 ]; then + # Result also contains details + printf "\"result\": \"%s\", \"details\": \"%s\"" "$1" "$2" | tee -a "$logger.json" 2>/dev/null 1>&2 + fi + + if [ $# -ne 2 ] && [ $# -ne 1 ]; then + # Result also includes details and a list of items. Add that directly to details and to an array property "items" + # Also limit the number of items to $limit, if $limit is non-zero + if [ $limit != 0 ]; then + truncItems="" + ITEM_COUNT=0 + for item in $3; do + truncItems="$truncItems $item" + ITEM_COUNT=$((ITEM_COUNT + 1)); + if [ "$ITEM_COUNT" == "$limit" ]; then + truncItems="$truncItems (truncated)" + break; + fi + done + else + truncItems=$3 + fi + itemsJson=$(printf "["; ISEP=""; ITEMCOUNT=0; for item in $truncItems; do printf "%s\"%s\"" "$ISEP" "$item"; ISEP=","; done; printf "]") + printf "\"result\": \"%s\", \"details\": \"%s: %s\", \"items\": %s" "$1" "$2" "$truncItems" "$itemsJson" | tee -a "$logger.json" 2>/dev/null 1>&2 + fi + + # Log remediation measure to JSON + if [ -n "$remediation" ] && [ "$1" != "PASS" ] && [ "$printremediation" = "1" ]; then + printf ", \"remediation\": \"%s\"" "$remediation" | tee -a "$logger.json" 2>/dev/null 1>&2 + if [ -n "$remediationImpact" ]; then + printf ", \"remediation-impact\": \"%s\"" "$remediationImpact" | tee -a "$logger.json" 2>/dev/null 1>&2 + fi + fi + printf "}" | tee -a "$logger.json" 2>/dev/null 1>&2 + + # Save remediation measure for print log to stdout + if [ -n "$remediation" ] && [ "$1" != "PASS" ]; then + if [ -n "${checkHeader}" ]; then + if [ -n "${addSpaceHeader}" ]; then + globalRemediation="${globalRemediation}\n" + fi + globalRemediation="${globalRemediation}\n${bldblu}[INFO]${txtrst} ${checkHeader}" + checkHeader="" + addSpaceHeader="1" + fi + globalRemediation="${globalRemediation}\n${bldblu}[INFO]${txtrst} ${id} - ${remediation}" + if [ -n "${remediationImpact}" ]; then + globalRemediation="${globalRemediation} Impact: ${remediationImpact}" + fi + fi +} diff --git a/tests/1_host_configuration.sh b/tests/1_host_configuration.sh index c3e3d86..ef96286 100644 --- a/tests/1_host_configuration.sh +++ b/tests/1_host_configuration.sh @@ -41,16 +41,15 @@ check_1_1_2() { docker_current_version="$(date +%y.%m.0 -d @$(( $(date +%s) - 2592000)))" do_version_check "$docker_current_version" "$docker_version" if [ $? -eq 11 ]; then - info -c "$check" - info " * Using $docker_version, verify is it up to date as deemed necessary" - info " * Your operating system vendor may provide support and security maintenance for Docker" - logcheckresult "INFO" "Using $docker_version" - else pass -c "$check" - info " * Using $docker_version which is current" - info " * Check with your operating system vendor for support and security maintenance for Docker" - logcheckresult "PASS" "Using $docker_version" + info " * Using $docker_version, verify is it up to date as deemed necessary" + logcheckresult "INFO" "Using $docker_version" + return fi + pass -c "$check" + info " * Using $docker_version which is current" + info " * Check with your operating system vendor for support and security maintenance for Docker" + logcheckresult "PASS" "Using $docker_version" } check_1_2() { @@ -76,10 +75,10 @@ check_1_2_1() { if mountpoint -q -- "$docker_root_dir" >/dev/null 2>&1; then pass -s "$check" logcheckresult "PASS" - else - warn -s "$check" - logcheckresult "WARN" + return fi + warn -s "$check" + logcheckresult "WARN" } check_1_2_2() { @@ -90,10 +89,9 @@ check_1_2_2() { local check="$id - $desc" starttestjson "$id" "$desc" + docker_users=$(grep 'docker' /etc/group) if command -v getent >/dev/null 2>&1; then docker_users=$(getent group docker) - else - docker_users=$(grep 'docker' /etc/group) fi docker_users=$(printf "%s" "$docker_users" | awk -F: '{print $4}') @@ -101,10 +99,9 @@ check_1_2_2() { if [ -n "$dockertrustusers" ]; then for u in $(printf "%s" "$docker_users" | sed "s/,/ /g"); do if ! printf "%s" "$dockertrustusers" | grep -q "$u" ; then + doubtfulusers="$u" if [ -n "${doubtfulusers}" ]; then doubtfulusers="${doubtfulusers},$u" - else - doubtfulusers="$u" fi fi done @@ -139,17 +136,19 @@ check_1_2_3() { if auditctl -l | grep "$file" >/dev/null 2>&1; then pass -s "$check" logcheckresult "PASS" - else - warn -s "$check" - logcheckresult "WARN" + return fi - elif grep -s "$file" "$auditrules" | grep "^[^#;]" 2>/dev/null 1>&2; then - pass -s "$check" - logcheckresult "PASS" - else warn -s "$check" logcheckresult "WARN" + return fi + if grep -s "$file" "$auditrules" | grep "^[^#;]" 2>/dev/null 1>&2; then + pass -s "$check" + logcheckresult "PASS" + return + fi + warn -s "$check" + logcheckresult "WARN" } check_1_2_4() { @@ -166,22 +165,24 @@ check_1_2_4() { if auditctl -l | grep $directory >/dev/null 2>&1; then pass -s "$check" logcheckresult "PASS" - else - warn -s "$check" - logcheckresult "WARN" + return fi - elif grep -s "$directory" "$auditrules" | grep "^[^#;]" 2>/dev/null 1>&2; then - pass -s "$check" - logcheckresult "PASS" - else warn -s "$check" logcheckresult "WARN" + return fi - else - info -c "$check" - info " * Directory not found" - logcheckresult "INFO" "Directory not found" + if grep -s "$directory" "$auditrules" | grep "^[^#;]" 2>/dev/null 1>&2; then + pass -s "$check" + logcheckresult "PASS" + return + fi + warn -s "$check" + logcheckresult "WARN" + return fi + info -c "$check" + info " * Directory not found" + logcheckresult "INFO" "Directory not found" } check_1_2_5() { @@ -198,22 +199,24 @@ check_1_2_5() { if auditctl -l | grep $directory >/dev/null 2>&1; then pass -s "$check" logcheckresult "PASS" - else - warn -s "$check" - logcheckresult "WARN" + return fi - elif grep -s "$directory" "$auditrules" | grep "^[^#;]" 2>/dev/null 1>&2; then - pass -s "$check" - logcheckresult "PASS" - else warn -s "$check" logcheckresult "WARN" + return fi - else - info -c "$check" - info " * Directory not found" - logcheckresult "INFO" "Directory not found" -fi + if grep -s "$directory" "$auditrules" | grep "^[^#;]" 2>/dev/null 1>&2; then + pass -s "$check" + logcheckresult "PASS" + return + fi + warn -s "$check" + logcheckresult "WARN" + return + fi + info -c "$check" + info " * Directory not found" + logcheckresult "INFO" "Directory not found" } check_1_2_6() { @@ -231,22 +234,24 @@ check_1_2_6() { if auditctl -l | grep "$file" >/dev/null 2>&1; then pass -s "$check" logcheckresult "PASS" - else - warn -s "$check" - logcheckresult "WARN" + return fi - elif grep -s "$file" "$auditrules" | grep "^[^#;]" 2>/dev/null 1>&2; then - pass -s "$check" - logcheckresult "PASS" - else warn -s "$check" logcheckresult "WARN" + return fi - else - info -c "$check" - info " * File not found" - logcheckresult "INFO" "File not found" + if grep -s "$file" "$auditrules" | grep "^[^#;]" 2>/dev/null 1>&2; then + pass -s "$check" + logcheckresult "PASS" + return + fi + warn -s "$check" + logcheckresult "WARN" + return fi + info -c "$check" + info " * File not found" + logcheckresult "INFO" "File not found" } check_1_2_7() { @@ -264,22 +269,24 @@ check_1_2_7() { if auditctl -l | grep "$file" >/dev/null 2>&1; then pass -s "$check" logcheckresult "PASS" - else - warn -s "$check" - logcheckresult "WARN" + return fi - elif grep -s "$file" "$auditrules" | grep "^[^#;]" 2>/dev/null 1>&2; then - pass -s "$check" - logcheckresult "PASS" - else warn -s "$check" logcheckresult "WARN" + return fi - else - info -c "$check" - info " * File not found" - logcheckresult "INFO" "File not found" + if grep -s "$file" "$auditrules" | grep "^[^#;]" 2>/dev/null 1>&2; then + pass -s "$check" + logcheckresult "PASS" + return + fi + warn -s "$check" + logcheckresult "WARN" + return fi + info -c "$check" + info " * File not found" + logcheckresult "INFO" "File not found" } check_1_2_8() { @@ -296,22 +303,24 @@ check_1_2_8() { if auditctl -l | grep $file >/dev/null 2>&1; then pass -s "$check" logcheckresult "PASS" - else - warn -s "$check" - logcheckresult "WARN" + return fi - elif grep -s "$file" "$auditrules" | grep "^[^#;]" 2>/dev/null 1>&2; then - pass -s "$check" - logcheckresult "PASS" - else warn -s "$check" logcheckresult "WARN" + return fi - else - info -c "$check" - info " * File not found" - logcheckresult "INFO" "File not found" + if grep -s "$file" "$auditrules" | grep "^[^#;]" 2>/dev/null 1>&2; then + pass -s "$check" + logcheckresult "PASS" + return + fi + warn -s "$check" + logcheckresult "WARN" + return fi + info -c "$check" + info " * File not found" + logcheckresult "INFO" "File not found" } check_1_2_9() { @@ -328,22 +337,24 @@ check_1_2_9() { if auditctl -l | grep $file >/dev/null 2>&1; then pass -s "$check" logcheckresult "PASS" - else - warn -s "$check" - logcheckresult "WARN" + return fi - elif grep -s "$file" "$auditrules" | grep "^[^#;]" 2>/dev/null 1>&2; then - pass -s "$check" - logcheckresult "PASS" - else warn -s "$check" logcheckresult "WARN" + return fi - else - info -c "$check" - info " * File not found" - logcheckresult "INFO" "File not found" + if grep -s "$file" "$auditrules" | grep "^[^#;]" 2>/dev/null 1>&2; then + pass -s "$check" + logcheckresult "PASS" + return + fi + warn -s "$check" + logcheckresult "WARN" + return fi + info -c "$check" + info " * File not found" + logcheckresult "INFO" "File not found" } check_1_2_10() { @@ -360,22 +371,24 @@ check_1_2_10() { if auditctl -l | grep $file >/dev/null 2>&1; then pass -s "$check" logcheckresult "PASS" - else - warn -s "$check" - logcheckresult "WARN" + return fi - elif grep -s "$file" "$auditrules" | grep "^[^#;]" 2>/dev/null 1>&2; then - pass -s "$check" - logcheckresult "PASS" - else warn -s "$check" logcheckresult "WARN" + return fi - else - info -c "$check" - info " * File not found" - logcheckresult "INFO" "File not found" + if grep -s "$file" "$auditrules" | grep "^[^#;]" 2>/dev/null 1>&2; then + pass -s "$check" + logcheckresult "PASS" + return + fi + warn -s "$check" + logcheckresult "WARN" + return fi + info -c "$check" + info " * File not found" + logcheckresult "INFO" "File not found" } check_1_2_11() { @@ -392,22 +405,24 @@ check_1_2_11() { if auditctl -l | grep $file >/dev/null 2>&1; then pass -s "$check" logcheckresult "PASS" - else - warn -s "$check" - logcheckresult "WARN" + return fi - elif grep -s "$file" "$auditrules" | grep "^[^#;]" 2>/dev/null 1>&2; then - pass -s "$check" - logcheckresult "PASS" - else warn -s "$check" logcheckresult "WARN" + return fi - else - info -c "$check" - info " * File not found" - logcheckresult "INFO" "File not found" + if grep -s "$file" "$auditrules" | grep "^[^#;]" 2>/dev/null 1>&2; then + pass -s "$check" + logcheckresult "PASS" + return + fi + warn -s "$check" + logcheckresult "WARN" + return fi + info -c "$check" + info " * File not found" + logcheckresult "INFO" "File not found" } check_1_2_12() { @@ -424,22 +439,24 @@ check_1_2_12() { if auditctl -l | grep $file >/dev/null 2>&1; then pass -s "$check" logcheckresult "PASS" - else - warn -s "$check" - logcheckresult "WARN" + return fi - elif grep -s "$file" "$auditrules" | grep "^[^#;]" 2>/dev/null 1>&2; then - pass -s "$check" - logcheckresult "PASS" - else warn -s "$check" logcheckresult "WARN" + return fi - else - info -c "$check" - info " * File not found" - logcheckresult "INFO" "File not found" + if grep -s "$file" "$auditrules" | grep "^[^#;]" 2>/dev/null 1>&2; then + pass -s "$check" + logcheckresult "PASS" + return + fi + warn -s "$check" + logcheckresult "WARN" + return fi + info -c "$check" + info " * File not found" + logcheckresult "INFO" "File not found" } check_1_end() { diff --git a/tests/2_docker_daemon_configuration.sh b/tests/2_docker_daemon_configuration.sh index 5b81ceb..a985eae 100644 --- a/tests/2_docker_daemon_configuration.sh +++ b/tests/2_docker_daemon_configuration.sh @@ -20,13 +20,15 @@ check_2_1() { if get_docker_effective_command_line_args '--icc' | grep false >/dev/null 2>&1; then pass -s "$check" logcheckresult "PASS" - elif get_docker_configuration_file_args 'icc' | grep "false" >/dev/null 2>&1; then + return + fi + if get_docker_configuration_file_args 'icc' | grep "false" >/dev/null 2>&1; then pass -s "$check" logcheckresult "PASS" - else - warn -s "$check" - logcheckresult "WARN" + return fi + warn -s "$check" + logcheckresult "WARN" } check_2_2() { @@ -41,25 +43,29 @@ check_2_2() { if get_docker_configuration_file_args 'log-level' | grep info >/dev/null 2>&1; then pass -s "$check" logcheckresult "PASS" - elif [ -z "$(get_docker_configuration_file_args 'log-level')" ]; then + return + fi + if [ -z "$(get_docker_configuration_file_args 'log-level')" ]; then pass -s "$check" logcheckresult "PASS" - else - warn -s "$check" - logcheckresult "WARN" + return fi - elif get_docker_effective_command_line_args '-l'; then + warn -s "$check" + logcheckresult "WARN" + return + fi + if get_docker_effective_command_line_args '-l'; then if get_docker_effective_command_line_args '-l' | grep "info" >/dev/null 2>&1; then pass -s "$check" logcheckresult "PASS" - else - warn -s "$check" - logcheckresult "WARN" + return fi - else - pass -s "$check" - logcheckresult "PASS" + warn -s "$check" + logcheckresult "WARN" + return fi + pass -s "$check" + logcheckresult "PASS" } check_2_3() { @@ -73,13 +79,15 @@ check_2_3() { if get_docker_effective_command_line_args '--iptables' | grep "false" >/dev/null 2>&1; then warn -s "$check" logcheckresult "WARN" - elif get_docker_configuration_file_args 'iptables' | grep "false" >/dev/null 2>&1; then + return + fi + if get_docker_configuration_file_args 'iptables' | grep "false" >/dev/null 2>&1; then warn -s "$check" logcheckresult "WARN" - else - pass -s "$check" - logcheckresult "PASS" + return fi + pass -s "$check" + logcheckresult "PASS" } check_2_4() { @@ -93,18 +101,20 @@ check_2_4() { if get_docker_effective_command_line_args '--insecure-registry' | grep "insecure-registry" >/dev/null 2>&1; then warn -s "$check" logcheckresult "WARN" - elif ! [ -z "$(get_docker_configuration_file_args 'insecure-registries')" ]; then + return + fi + if ! [ -z "$(get_docker_configuration_file_args 'insecure-registries')" ]; then if get_docker_configuration_file_args 'insecure-registries' | grep '\[]' >/dev/null 2>&1; then pass -s "$check" logcheckresult "PASS" - else - warn -s "$check" - logcheckresult "WARN" + return fi - else - pass -s "$check" - logcheckresult "PASS" + warn -s "$check" + logcheckresult "WARN" + return fi + pass -s "$check" + logcheckresult "PASS" } check_2_5() { @@ -118,10 +128,10 @@ check_2_5() { if docker info 2>/dev/null | grep -e "^\sStorage Driver:\s*aufs\s*$" >/dev/null 2>&1; then warn -s "$check" logcheckresult "WARN" - else - pass -s "$check" - logcheckresult "PASS" + return fi + pass -s "$check" + logcheckresult "PASS" } check_2_6() { @@ -138,21 +148,23 @@ check_2_6() { [ $(get_docker_cumulative_command_line_args '--tlsverify' | grep 'tlsverify') >/dev/null 2>&1 ]; then pass -s "$check" logcheckresult "PASS" - elif [ $(get_docker_configuration_file_args '"tls":' | grep 'true') ] || \ + return + fi + if [ $(get_docker_configuration_file_args '"tls":' | grep 'true') ] || \ [ $(get_docker_cumulative_command_line_args '--tls' | grep 'tls$') >/dev/null 2>&1 ]; then warn -s "$check" warn " * Docker daemon currently listening on TCP with TLS, but no verification" logcheckresult "WARN" "Docker daemon currently listening on TCP with TLS, but no verification" - else - warn -s "$check" - warn " * Docker daemon currently listening on TCP without TLS" - logcheckresult "WARN" "Docker daemon currently listening on TCP without TLS" + return fi - else - info -c "$check" - info " * Docker daemon not listening on TCP" - logcheckresult "INFO" "Docker daemon not listening on TCP" + warn -s "$check" + warn " * Docker daemon currently listening on TCP without TLS" + logcheckresult "WARN" "Docker daemon currently listening on TCP without TLS" + return fi + info -c "$check" + info " * Docker daemon not listening on TCP" + logcheckresult "INFO" "Docker daemon not listening on TCP" } check_2_7() { @@ -166,14 +178,16 @@ check_2_7() { if get_docker_configuration_file_args 'default-ulimit' | grep -v '{}' >/dev/null 2>&1; then pass -c "$check" logcheckresult "PASS" - elif get_docker_effective_command_line_args '--default-ulimit' | grep "default-ulimit" >/dev/null 2>&1; then + return + fi + if get_docker_effective_command_line_args '--default-ulimit' | grep "default-ulimit" >/dev/null 2>&1; then pass -c "$check" logcheckresult "PASS" - else - info -c "$check" - info " * Default ulimit doesn't appear to be set" - logcheckresult "INFO" "Default ulimit doesn't appear to be set" + return fi + info -c "$check" + info " * Default ulimit doesn't appear to be set" + logcheckresult "INFO" "Default ulimit doesn't appear to be set" } check_2_8() { @@ -187,13 +201,15 @@ check_2_8() { if get_docker_configuration_file_args 'userns-remap' | grep -v '""'; then pass -s "$check" logcheckresult "PASS" - elif get_docker_effective_command_line_args '--userns-remap' | grep "userns-remap" >/dev/null 2>&1; then + return + fi + if get_docker_effective_command_line_args '--userns-remap' | grep "userns-remap" >/dev/null 2>&1; then pass -s "$check" logcheckresult "PASS" - else - warn -s "$check" - logcheckresult "WARN" + return fi + warn -s "$check" + logcheckresult "WARN" } check_2_9() { @@ -208,14 +224,16 @@ check_2_9() { warn -s "$check" info " * Confirm cgroup usage" logcheckresult "WARN" "Confirm cgroup usage" - elif get_docker_effective_command_line_args '--cgroup-parent' | grep "cgroup-parent" >/dev/null 2>&1; then + return + fi + if get_docker_effective_command_line_args '--cgroup-parent' | grep "cgroup-parent" >/dev/null 2>&1; then warn -s "$check" info " * Confirm cgroup usage" logcheckresult "WARN" "Confirm cgroup usage" - else - pass -s "$check" - logcheckresult "PASS" + return fi + pass -s "$check" + logcheckresult "PASS" } check_2_10() { @@ -229,13 +247,15 @@ check_2_10() { if get_docker_configuration_file_args 'storage-opts' | grep "dm.basesize" >/dev/null 2>&1; then warn -s "$check" logcheckresult "WARN" - elif get_docker_effective_command_line_args '--storage-opt' | grep "dm.basesize" >/dev/null 2>&1; then + return + fi + if get_docker_effective_command_line_args '--storage-opt' | grep "dm.basesize" >/dev/null 2>&1; then warn -s "$check" logcheckresult "WARN" - else - pass -s "$check" - logcheckresult "PASS" + return fi + pass -s "$check" + logcheckresult "PASS" } check_2_11() { @@ -249,13 +269,15 @@ check_2_11() { if get_docker_configuration_file_args 'authorization-plugins' | grep -v '\[]'; then pass -s "$check" logcheckresult "PASS" - elif get_docker_effective_command_line_args '--authorization-plugin' | grep "authorization-plugin" >/dev/null 2>&1; then + return + fi + if get_docker_effective_command_line_args '--authorization-plugin' | grep "authorization-plugin" >/dev/null 2>&1; then pass -s "$check" logcheckresult "PASS" - else - warn -s "$check" - logcheckresult "WARN" + return fi + warn -s "$check" + logcheckresult "WARN" } check_2_12() { @@ -269,10 +291,10 @@ check_2_12() { if docker info --format '{{ .LoggingDriver }}' | grep 'json-file' >/dev/null 2>&1; then warn -s "$check" logcheckresult "WARN" - else - pass -s "$check" - logcheckresult "PASS" + return fi + pass -s "$check" + logcheckresult "PASS" } check_2_13() { @@ -286,18 +308,20 @@ check_2_13() { if docker info 2>/dev/null | grep -e "Live Restore Enabled:\s*true\s*" >/dev/null 2>&1; then pass -s "$check" logcheckresult "PASS" - else - if docker info 2>/dev/null | grep -e "Swarm:*\sactive\s*" >/dev/null 2>&1; then - pass -s "$check (Incompatible with swarm mode)" - logcheckresult "PASS" - elif get_docker_effective_command_line_args '--live-restore' | grep "live-restore" >/dev/null 2>&1; then - pass -s "$check" - logcheckresult "PASS" - else - warn -s "$check" - logcheckresult "WARN" - fi + return fi + if docker info 2>/dev/null | grep -e "Swarm:*\sactive\s*" >/dev/null 2>&1; then + pass -s "$check (Incompatible with swarm mode)" + logcheckresult "PASS" + return + fi + if get_docker_effective_command_line_args '--live-restore' | grep "live-restore" >/dev/null 2>&1; then + pass -s "$check" + logcheckresult "PASS" + return + fi + warn -s "$check" + logcheckresult "WARN" } check_2_14() { @@ -311,13 +335,15 @@ check_2_14() { if get_docker_configuration_file_args 'userland-proxy' | grep false >/dev/null 2>&1; then pass -s "$check" logcheckresult "PASS" - elif get_docker_effective_command_line_args '--userland-proxy=false' 2>/dev/null | grep "userland-proxy=false" >/dev/null 2>&1; then + return + fi + if get_docker_effective_command_line_args '--userland-proxy=false' 2>/dev/null | grep "userland-proxy=false" >/dev/null 2>&1; then pass -s "$check" logcheckresult "PASS" - else - warn -s "$check" - logcheckresult "WARN" + return fi + warn -s "$check" + logcheckresult "WARN" } check_2_15() { @@ -331,10 +357,10 @@ check_2_15() { if docker info --format '{{ .SecurityOptions }}' | grep 'name=seccomp,profile=default' 2>/dev/null 1>&2; then pass -c "$check" logcheckresult "PASS" - else - info -c "$check" - logcheckresult "INFO" + return fi + info -c "$check" + logcheckresult "INFO" } check_2_16() { @@ -352,16 +378,16 @@ check_2_16() { if docker version -f '{{.Server.Experimental}}' | grep false 2>/dev/null 1>&2; then pass -s "$check" logcheckresult "PASS" - else - warn -s "$check" - logcheckresult "WARN" + return fi - else - local desc="$desc (Deprecated)" - local check="$id - $desc" - info -c "$desc" - logcheckresult "INFO" + warn -s "$check" + logcheckresult "WARN" + return fi + local desc="$desc (Deprecated)" + local check="$id - $desc" + info -c "$desc" + logcheckresult "INFO" } check_2_17() { @@ -375,13 +401,15 @@ check_2_17() { if get_docker_effective_command_line_args '--no-new-privileges' | grep "no-new-privileges" >/dev/null 2>&1; then pass -s "$check" logcheckresult "PASS" - elif get_docker_configuration_file_args 'no-new-privileges' | grep true >/dev/null 2>&1; then + return + fi + if get_docker_configuration_file_args 'no-new-privileges' | grep true >/dev/null 2>&1; then pass -s "$check" logcheckresult "PASS" - else - warn -s "$check" - logcheckresult "WARN" + return fi + warn -s "$check" + logcheckresult "WARN" } check_2_end() { diff --git a/tests/3_docker_daemon_configuration_files.sh b/tests/3_docker_daemon_configuration_files.sh index 8c5e5a5..6d8c984 100644 --- a/tests/3_docker_daemon_configuration_files.sh +++ b/tests/3_docker_daemon_configuration_files.sh @@ -22,16 +22,16 @@ check_3_1() { if [ "$(stat -c %u%g $file)" -eq 00 ]; then pass -s "$check" logcheckresult "PASS" - else - warn -s "$check" - warn " * Wrong ownership for $file" - logcheckresult "WARN" "Wrong ownership for $file" + return fi - else - info -c "$check" - info " * File not found" - logcheckresult "INFO" "File not found" + warn -s "$check" + warn " * Wrong ownership for $file" + logcheckresult "WARN" "Wrong ownership for $file" + return fi + info -c "$check" + info " * File not found" + logcheckresult "INFO" "File not found" } check_3_2() { @@ -47,16 +47,16 @@ check_3_2() { if [ "$(stat -c %a $file)" -le 644 ]; then pass -s "$check" logcheckresult "PASS" - else - warn -s "$check" - warn " * Wrong permissions for $file" - logcheckresult "WARN" "Wrong permissions for $file" + return fi - else - info -c "$check" - info " * File not found" - logcheckresult "INFO" "File not found" + warn -s "$check" + warn " * Wrong permissions for $file" + logcheckresult "WARN" "Wrong permissions for $file" + return fi + info -c "$check" + info " * File not found" + logcheckresult "INFO" "File not found" } check_3_3() { @@ -72,16 +72,16 @@ check_3_3() { if [ "$(stat -c %u%g $file)" -eq 00 ]; then pass -s "$check" logcheckresult "PASS" - else - warn -s "$check" - warn " * Wrong ownership for $file" - logcheckresult "WARN" "Wrong ownership for $file" + return fi - else - info -c "$check" - info " * File not found" - logcheckresult "INFO" "File not found" + warn -s "$check" + warn " * Wrong ownership for $file" + logcheckresult "WARN" "Wrong ownership for $file" + return fi + info -c "$check" + info " * File not found" + logcheckresult "INFO" "File not found" } check_3_4() { @@ -97,16 +97,16 @@ check_3_4() { if [ "$(stat -c %a $file)" -le 644 ]; then pass -s "$check" logcheckresult "PASS" - else - warn -s "$check" - warn " * Wrong permissions for $file" - logcheckresult "WARN" "Wrong permissions for $file" + return fi - else - info -c "$check" - info " * File not found" - logcheckresult "INFO" "File not found" + warn -s "$check" + warn " * Wrong permissions for $file" + logcheckresult "WARN" "Wrong permissions for $file" + return fi + info -c "$check" + info " * File not found" + logcheckresult "INFO" "File not found" } check_3_5() { @@ -122,16 +122,16 @@ check_3_5() { if [ "$(stat -c %u%g $directory)" -eq 00 ]; then pass -s "$check" logcheckresult "PASS" - else - warn -s "$check" - warn " * Wrong ownership for $directory" - logcheckresult "WARN" "Wrong ownership for $directory" + return fi - else - info -c "$check" - info " * Directory not found" - logcheckresult "INFO" "Directory not found" + warn -s "$check" + warn " * Wrong ownership for $directory" + logcheckresult "WARN" "Wrong ownership for $directory" + return fi + info -c "$check" + info " * Directory not found" + logcheckresult "INFO" "Directory not found" } check_3_6() { @@ -147,16 +147,16 @@ check_3_6() { if [ "$(stat -c %a $directory)" -le 755 ]; then pass -s "$check" logcheckresult "PASS" - else - warn -s "$check" - warn " * Wrong permissions for $directory" - logcheckresult "WARN" "Wrong permissions for $directory" + return fi - else - info -c "$check" - info " * Directory not found" - logcheckresult "INFO" "Directory not found" + warn -s "$check" + warn " * Wrong permissions for $directory" + logcheckresult "WARN" "Wrong permissions for $directory" + return fi + info -c "$check" + info " * Directory not found" + logcheckresult "INFO" "Directory not found" } check_3_7() { @@ -180,15 +180,15 @@ check_3_7() { warn -s "$check" warn " * Wrong ownership for $directory" logcheckresult "WARN" "Wrong ownership for $directory" - else - pass -s "$check" - logcheckresult "PASS" + return fi - else - info -c "$check" - info " * Directory not found" - logcheckresult "INFO" "Directory not found" + pass -s "$check" + logcheckresult "PASS" + return fi + info -c "$check" + info " * Directory not found" + logcheckresult "INFO" "Directory not found" } check_3_8() { @@ -212,15 +212,15 @@ check_3_8() { warn -s "$check" warn " * Wrong permissions for $directory" logcheckresult "WARN" "Wrong permissions for $directory" - else - pass -s "$check" - logcheckresult "PASS" + return fi - else - info -c "$check" - info " * Directory not found" - logcheckresult "INFO" "Directory not found" + pass -s "$check" + logcheckresult "PASS" + return fi + info -c "$check" + info " * Directory not found" + logcheckresult "INFO" "Directory not found" } check_3_9() { @@ -231,25 +231,24 @@ check_3_9() { local check="$id - $desc" starttestjson "$id" "$desc" + tlscacert=$(get_docker_effective_command_line_args '--tlscacert' | sed -n 's/.*tlscacert=\([^s]\)/\1/p' | sed 's/--/ --/g' | cut -d " " -f 1) if [ -n "$(get_docker_configuration_file_args 'tlscacert')" ]; then tlscacert=$(get_docker_configuration_file_args 'tlscacert') - else - tlscacert=$(get_docker_effective_command_line_args '--tlscacert' | sed -n 's/.*tlscacert=\([^s]\)/\1/p' | sed 's/--/ --/g' | cut -d " " -f 1) fi if [ -f "$tlscacert" ]; then if [ "$(stat -c %u%g "$tlscacert")" -eq 00 ]; then pass -s "$check" logcheckresult "PASS" - else - warn -s "$check" - warn " * Wrong ownership for $tlscacert" - logcheckresult "WARN" "Wrong ownership for $tlscacert" + return fi - else - info -c "$check" - info " * No TLS CA certificate found" - logcheckresult "INFO" "No TLS CA certificate found" + warn -s "$check" + warn " * Wrong ownership for $tlscacert" + logcheckresult "WARN" "Wrong ownership for $tlscacert" + return fi + info -c "$check" + info " * No TLS CA certificate found" + logcheckresult "INFO" "No TLS CA certificate found" } check_3_10() { @@ -260,25 +259,24 @@ check_3_10() { local check="$id - $desc" starttestjson "$id" "$desc" + tlscacert=$(get_docker_effective_command_line_args '--tlscacert' | sed -n 's/.*tlscacert=\([^s]\)/\1/p' | sed 's/--/ --/g' | cut -d " " -f 1) if [ -n "$(get_docker_configuration_file_args 'tlscacert')" ]; then tlscacert=$(get_docker_configuration_file_args 'tlscacert') - else - tlscacert=$(get_docker_effective_command_line_args '--tlscacert' | sed -n 's/.*tlscacert=\([^s]\)/\1/p' | sed 's/--/ --/g' | cut -d " " -f 1) fi if [ -f "$tlscacert" ]; then if [ "$(stat -c %a $tlscacert)" -le 444 ]; then pass -s "$check" logcheckresult "PASS" - else - warn -s "$check" - warn " * Wrong permissions for $tlscacert" - logcheckresult "WARN" "Wrong permissions for $tlscacert" + return fi - else - info -c "$check" - info " * No TLS CA certificate found" - logcheckresult "INFO" "No TLS CA certificate found" + warn -s "$check" + warn " * Wrong permissions for $tlscacert" + logcheckresult "WARN" "Wrong permissions for $tlscacert" + return fi + info -c "$check" + info " * No TLS CA certificate found" + logcheckresult "INFO" "No TLS CA certificate found" } check_3_11() { @@ -289,25 +287,24 @@ check_3_11() { local check="$id - $desc" starttestjson "$id" "$desc" + tlscert=$(get_docker_effective_command_line_args '--tlscert' | sed -n 's/.*tlscert=\([^s]\)/\1/p' | sed 's/--/ --/g' | cut -d " " -f 1) if [ -n "$(get_docker_configuration_file_args 'tlscert')" ]; then tlscert=$(get_docker_configuration_file_args 'tlscert') - else - tlscert=$(get_docker_effective_command_line_args '--tlscert' | sed -n 's/.*tlscert=\([^s]\)/\1/p' | sed 's/--/ --/g' | cut -d " " -f 1) fi if [ -f "$tlscert" ]; then if [ "$(stat -c %u%g "$tlscert")" -eq 00 ]; then pass -s "$check" logcheckresult "PASS" - else - warn -s "$check" - warn " * Wrong ownership for $tlscert" - logcheckresult "WARN" "Wrong ownership for $tlscert" + return fi - else - info -c "$check" - info " * No TLS Server certificate found" - logcheckresult "INFO" "No TLS Server certificate found" + warn -s "$check" + warn " * Wrong ownership for $tlscert" + logcheckresult "WARN" "Wrong ownership for $tlscert" + return fi + info -c "$check" + info " * No TLS Server certificate found" + logcheckresult "INFO" "No TLS Server certificate found" } check_3_12() { @@ -318,25 +315,24 @@ check_3_12() { local check="$id - $desc" starttestjson "$id" "$desc" + tlscert=$(get_docker_effective_command_line_args '--tlscert' | sed -n 's/.*tlscert=\([^s]\)/\1/p' | sed 's/--/ --/g' | cut -d " " -f 1) if [ -n "$(get_docker_configuration_file_args 'tlscert')" ]; then tlscert=$(get_docker_configuration_file_args 'tlscert') - else - tlscert=$(get_docker_effective_command_line_args '--tlscert' | sed -n 's/.*tlscert=\([^s]\)/\1/p' | sed 's/--/ --/g' | cut -d " " -f 1) fi if [ -f "$tlscert" ]; then if [ "$(stat -c %a $tlscert)" -le 444 ]; then pass -s "$check" logcheckresult "PASS" - else - warn -s "$check" - warn " * Wrong permissions for $tlscert" - logcheckresult "WARN" "Wrong permissions for $tlscert" + return fi - else - info -c "$check" - info " * No TLS Server certificate found" - logcheckresult "INFO" "No TLS Server certificate found" + warn -s "$check" + warn " * Wrong permissions for $tlscert" + logcheckresult "WARN" "Wrong permissions for $tlscert" + return fi + info -c "$check" + info " * No TLS Server certificate found" + logcheckresult "INFO" "No TLS Server certificate found" } check_3_13() { @@ -347,25 +343,24 @@ check_3_13() { local check="$id - $desc" starttestjson "$id" "$desc" + tlskey=$(get_docker_effective_command_line_args '--tlskey' | sed -n 's/.*tlskey=\([^s]\)/\1/p' | sed 's/--/ --/g' | cut -d " " -f 1) if [ -n "$(get_docker_configuration_file_args 'tlskey')" ]; then tlskey=$(get_docker_configuration_file_args 'tlskey') - else - tlskey=$(get_docker_effective_command_line_args '--tlskey' | sed -n 's/.*tlskey=\([^s]\)/\1/p' | sed 's/--/ --/g' | cut -d " " -f 1) fi if [ -f "$tlskey" ]; then if [ "$(stat -c %u%g "$tlskey")" -eq 00 ]; then pass -s "$check" logcheckresult "PASS" - else - warn -s "$check" - warn " * Wrong ownership for $tlskey" - logcheckresult "WARN" "Wrong ownership for $tlskey" + return fi - else - info -c "$check" - info " * No TLS Key found" - logcheckresult "INFO" "No TLS Key found" + warn -s "$check" + warn " * Wrong ownership for $tlskey" + logcheckresult "WARN" "Wrong ownership for $tlskey" + return fi + info -c "$check" + info " * No TLS Key found" + logcheckresult "INFO" "No TLS Key found" } check_3_14() { @@ -376,25 +371,24 @@ check_3_14() { local check="$id - $desc" starttestjson "$id" "$desc" + tlskey=$(get_docker_effective_command_line_args '--tlskey' | sed -n 's/.*tlskey=\([^s]\)/\1/p' | sed 's/--/ --/g' | cut -d " " -f 1) if [ -n "$(get_docker_configuration_file_args 'tlskey')" ]; then tlskey=$(get_docker_configuration_file_args 'tlskey') - else - tlskey=$(get_docker_effective_command_line_args '--tlskey' | sed -n 's/.*tlskey=\([^s]\)/\1/p' | sed 's/--/ --/g' | cut -d " " -f 1) fi if [ -f "$tlskey" ]; then if [ "$(stat -c %a $tlskey)" -eq 400 ]; then pass -s "$check" logcheckresult "PASS" - else - warn -s "$check" - warn " * Wrong permissions for $tlskey" - logcheckresult "WARN" "Wrong permissions for $tlskey" + return fi - else - info -c "$check" - info " * No TLS Key found" - logcheckresult "INFO" "No TLS Key found" + warn -s "$check" + warn " * Wrong permissions for $tlskey" + logcheckresult "WARN" "Wrong permissions for $tlskey" + return fi + info -c "$check" + info " * No TLS Key found" + logcheckresult "INFO" "No TLS Key found" } check_3_15() { @@ -410,16 +404,16 @@ check_3_15() { if [ "$(stat -c %U:%G $file)" = 'root:docker' ]; then pass -s "$check" logcheckresult "PASS" - else - warn -s "$check" - warn " * Wrong ownership for $file" - logcheckresult "WARN" "Wrong ownership for $file" + return fi - else - info -c "$check" - info " * File not found" - logcheckresult "INFO" "File not found" + warn -s "$check" + warn " * Wrong ownership for $file" + logcheckresult "WARN" "Wrong ownership for $file" + return fi + info -c "$check" + info " * File not found" + logcheckresult "INFO" "File not found" } check_3_16() { @@ -435,16 +429,16 @@ check_3_16() { if [ "$(stat -c %a $file)" -le 660 ]; then pass -s "$check" logcheckresult "PASS" - else - warn -s "$check" - warn " * Wrong permissions for $file" - logcheckresult "WARN" "Wrong permissions for $file" + return fi - else - info -c "$check" - info " * File not found" - logcheckresult "INFO" "File not found" + warn -s "$check" + warn " * Wrong permissions for $file" + logcheckresult "WARN" "Wrong permissions for $file" + return fi + info -c "$check" + info " * File not found" + logcheckresult "INFO" "File not found" } check_3_17() { @@ -460,16 +454,16 @@ check_3_17() { if [ "$(stat -c %U:%G $file)" = 'root:root' ]; then pass -s "$check" logcheckresult "PASS" - else - warn -s "$check" - warn " * Wrong ownership for $file" - logcheckresult "WARN" "Wrong ownership for $file" + return fi - else - info -c "$check" - info " * File not found" - logcheckresult "INFO" "File not found" + warn -s "$check" + warn " * Wrong ownership for $file" + logcheckresult "WARN" "Wrong ownership for $file" + return fi + info -c "$check" + info " * File not found" + logcheckresult "INFO" "File not found" } check_3_18() { @@ -485,16 +479,16 @@ check_3_18() { if [ "$(stat -c %a $file)" -le 644 ]; then pass -s "$check" logcheckresult "PASS" - else - warn -s "$check" - warn " * Wrong permissions for $file" - logcheckresult "WARN" "Wrong permissions for $file" + return fi - else - info -c "$check" - info " * File not found" - logcheckresult "INFO" "File not found" + warn -s "$check" + warn " * Wrong permissions for $file" + logcheckresult "WARN" "Wrong permissions for $file" + return fi + info -c "$check" + info " * File not found" + logcheckresult "INFO" "File not found" } check_3_19() { @@ -510,16 +504,16 @@ check_3_19() { if [ "$(stat -c %U:%G $file)" = 'root:root' ]; then pass -s "$check" logcheckresult "PASS" - else - warn -s "$check" - warn " * Wrong ownership for $file" - logcheckresult "WARN" "Wrong ownership for $file" + return fi - else - info -c "$check" - info " * File not found" - logcheckresult "INFO" "File not found" + warn -s "$check" + warn " * Wrong ownership for $file" + logcheckresult "WARN" "Wrong ownership for $file" + return fi + info -c "$check" + info " * File not found" + logcheckresult "INFO" "File not found" } check_3_20() { @@ -535,16 +529,16 @@ check_3_20() { if [ "$(stat -c %U:%G $file)" = 'root:root' ]; then pass -s "$check" logcheckresult "PASS" - else - warn -s "$check" - warn " * Wrong ownership for $file" - logcheckresult "WARN" "Wrong ownership for $file" + return fi - else - info -c "$check" - info " * File not found" - logcheckresult "INFO" "File not found" + warn -s "$check" + warn " * Wrong ownership for $file" + logcheckresult "WARN" "Wrong ownership for $file" + return fi + info -c "$check" + info " * File not found" + logcheckresult "INFO" "File not found" } check_3_21() { @@ -560,16 +554,16 @@ check_3_21() { if [ "$(stat -c %a $file)" -le 644 ]; then pass -s "$check" logcheckresult "PASS" - else - warn -s "$check" - warn " * Wrong permissions for $file" - logcheckresult "WARN" "Wrong permissions for $file" + return fi - else - info -c "$check" - info " * File not found" - logcheckresult "INFO" "File not found" + warn -s "$check" + warn " * Wrong permissions for $file" + logcheckresult "WARN" "Wrong permissions for $file" + return fi + info -c "$check" + info " * File not found" + logcheckresult "INFO" "File not found" } check_3_22() { @@ -585,16 +579,16 @@ check_3_22() { if [ "$(stat -c %a $file)" -le 644 ]; then pass -s "$check" logcheckresult "PASS" - else - warn -s "$check" - warn " * Wrong permissions for $file" - logcheckresult "WARN" "Wrong permissions for $file" + return fi - else - info -c "$check" - info " * File not found" - logcheckresult "INFO" "File not found" + warn -s "$check" + warn " * Wrong permissions for $file" + logcheckresult "WARN" "Wrong permissions for $file" + return fi + info -c "$check" + info " * File not found" + logcheckresult "INFO" "File not found" } check_3_end() { diff --git a/tests/4_container_images.sh b/tests/4_container_images.sh index 0c76141..3e83a84 100644 --- a/tests/4_container_images.sh +++ b/tests/4_container_images.sh @@ -22,37 +22,37 @@ check_4_1() { info -c "$check" info " * No containers running" logcheckresult "INFO" "No containers running" - else - # We have some containers running, set failure flag to 0. Check for Users. - fail=0 - # Make the loop separator be a new-line in POSIX compliant fashion - set -f; IFS=$' - ' - root_containers="" - for c in $containers; do - user=$(docker inspect --format 'User={{.Config.User}}' "$c") - - if [ "$user" = "User=0" ] || [ "$user" = "User=root" ] || [ "$user" = "User=" ] || [ "$user" = "User=[]" ] || [ "$user" = "User=" ]; then - # If it's the first container, fail the test - if [ $fail -eq 0 ]; then - warn -s "$check" - warn " * Running as root: $c" - root_containers="$root_containers $c" - fail=1 - else - warn " * Running as root: $c" - root_containers="$root_containers $c" - fi - fi - done - # We went through all the containers and found none running as root - if [ $fail -eq 0 ]; then - pass -s "$check" - logcheckresult "PASS" - else - logcheckresult "WARN" "running as root" "$root_containers" - fi + return fi + # We have some containers running, set failure flag to 0. Check for Users. + fail=0 + # Make the loop separator be a new-line in POSIX compliant fashion + set -f; IFS=$' + ' + root_containers="" + for c in $containers; do + user=$(docker inspect --format 'User={{.Config.User}}' "$c") + + if [ "$user" = "User=0" ] || [ "$user" = "User=root" ] || [ "$user" = "User=" ] || [ "$user" = "User=[]" ] || [ "$user" = "User=" ]; then + # If it's the first container, fail the test + if [ $fail -eq 0 ]; then + warn -s "$check" + warn " * Running as root: $c" + root_containers="$root_containers $c" + fail=1 + continue + fi + warn " * Running as root: $c" + root_containers="$root_containers $c" + fi + done + # We went through all the containers and found none running as root + if [ $fail -eq 0 ]; then + pass -s "$check" + logcheckresult "PASS" + return + fi + logcheckresult "WARN" "running as root" "$root_containers" # Make the loop separator go back to space set +f; unset IFS } @@ -104,10 +104,10 @@ check_4_5() { if [ "x$DOCKER_CONTENT_TRUST" = "x1" ]; then pass -s "$check" logcheckresult "PASS" - else - warn -s "$check" - logcheckresult "WARN" + return fi + warn -s "$check" + logcheckresult "WARN" } check_4_6() { @@ -139,9 +139,9 @@ check_4_6() { if [ $fail -eq 0 ]; then pass -s "$check" logcheckresult "PASS" - else - logcheckresult "WARN" "Images w/o HEALTHCHECK" "$no_health_images" + return fi + logcheckresult "WARN" "Images w/o HEALTHCHECK" "$no_health_images" } check_4_7() { @@ -170,9 +170,9 @@ check_4_7() { if [ $fail -eq 0 ]; then pass -c "$check" logcheckresult "PASS" - else - logcheckresult "INFO" "Update instructions found" "$update_images" + return fi + logcheckresult "INFO" "Update instructions found" "$update_images" } check_4_8() { @@ -214,9 +214,9 @@ check_4_9() { if [ $fail -eq 0 ]; then pass -c "$check" logcheckresult "PASS" - else - logcheckresult "INFO" "Images using ADD" "$add_images" + return fi + logcheckresult "INFO" "Images using ADD" "$add_images" } check_4_10() { diff --git a/tests/5_container_runtime.sh b/tests/5_container_runtime.sh index 443a7e4..50eecc5 100644 --- a/tests/5_container_runtime.sh +++ b/tests/5_container_runtime.sh @@ -13,11 +13,11 @@ check_running_containers() { # If containers is empty, there are no running containers if [ -z "$containers" ]; then info " * No containers running, skipping Section 5" - else - # Make the loop separator be a new-line in POSIX compliant fashion - set -f; IFS=$' - ' + return fi + # Make the loop separator be a new-line in POSIX compliant fashion + set -f; IFS=$' + ' } check_5_1() { @@ -42,21 +42,21 @@ check_5_1() { if [ $fail -eq 0 ]; then warn -s "$check" warn " * No AppArmorProfile Found: $c" - no_apparmor_containers="$no_apparmor_containers $c" + no_apparmor_containers="$no_apparmor_containers $c" fail=1 - else - warn " * No AppArmorProfile Found: $c" - no_apparmor_containers="$no_apparmor_containers $c" + continue fi + warn " * No AppArmorProfile Found: $c" + no_apparmor_containers="$no_apparmor_containers $c" fi done # We went through all the containers and found none without AppArmor if [ $fail -eq 0 ]; then - pass -s "$check" - logcheckresult "PASS" - else - logcheckresult "WARN" "Containers with no AppArmorProfile" "$no_apparmor_containers" + pass -s "$check" + logcheckresult "PASS" + return fi + logcheckresult "WARN" "Containers with no AppArmorProfile" "$no_apparmor_containers" } check_5_2() { @@ -81,21 +81,21 @@ check_5_2() { if [ $fail -eq 0 ]; then warn -s "$check" warn " * No SecurityOptions Found: $c" - no_securityoptions_containers="$no_securityoptions_containers $c" + no_securityoptions_containers="$no_securityoptions_containers $c" fail=1 - else - warn " * No SecurityOptions Found: $c" - no_securityoptions_containers="$no_securityoptions_containers $c" + continue fi + warn " * No SecurityOptions Found: $c" + no_securityoptions_containers="$no_securityoptions_containers $c" fi done # We went through all the containers and found none without SELinux if [ $fail -eq 0 ]; then - pass -s "$check" - logcheckresult "PASS" - else - logcheckresult "WARN" "Containers with no SecurityOptions" "$no_securityoptions_containers" + pass -s "$check" + logcheckresult "PASS" + return fi + logcheckresult "WARN" "Containers with no SecurityOptions" "$no_securityoptions_containers" } check_5_3() { @@ -123,21 +123,21 @@ check_5_3() { if [ $fail -eq 0 ]; then warn -s "$check" warn " * Capabilities added: $caps to $c" - caps_containers="$caps_containers $c" + caps_containers="$caps_containers $c" fail=1 - else - warn " * Capabilities added: $caps to $c" - caps_containers="$caps_containers $c" + continue fi + warn " * Capabilities added: $caps to $c" + caps_containers="$caps_containers $c" fi done # We went through all the containers and found none with extra capabilities if [ $fail -eq 0 ]; then - pass -s "$check" - logcheckresult "PASS" - else - logcheckresult "WARN" "Capabilities added for containers" "$caps_containers" + pass -s "$check" + logcheckresult "PASS" + return fi + logcheckresult "WARN" "Capabilities added for containers" "$caps_containers" } check_5_4() { @@ -162,21 +162,21 @@ check_5_4() { if [ $fail -eq 0 ]; then warn -s "$check" warn " * Container running in Privileged mode: $c" - privileged_containers="$privileged_containers $c" + privileged_containers="$privileged_containers $c" fail=1 - else - warn " * Container running in Privileged mode: $c" - privileged_containers="$privileged_containers $c" + continue fi + warn " * Container running in Privileged mode: $c" + privileged_containers="$privileged_containers $c" fi done # We went through all the containers and found no privileged containers if [ $fail -eq 0 ]; then - pass -s "$check" - logcheckresult "PASS" - else - logcheckresult "WARN" "Containers running in privileged mode" "$privileged_containers" + pass -s "$check" + logcheckresult "PASS" + return fi + logcheckresult "WARN" "Containers running in privileged mode" "$privileged_containers" } check_5_5() { @@ -204,10 +204,9 @@ check_5_5() { fail=0 sensitive_mount_containers="" for c in $containers; do + volumes=$(docker inspect --format '{{ .Mounts }}' "$c") if docker inspect --format '{{ .VolumesRW }}' "$c" 2>/dev/null 1>&2; then volumes=$(docker inspect --format '{{ .VolumesRW }}' "$c") - else - volumes=$(docker inspect --format '{{ .Mounts }}' "$c") fi # Go over each directory in sensitive dir and see if they exist in the volumes for v in $sensitive_dirs; do @@ -220,22 +219,22 @@ check_5_5() { if [ $fail -eq 0 ]; then warn -s "$check" warn " * Sensitive directory $v mounted in: $c" - sensitive_mount_containers="$sensitive_mount_containers $c:$v" + sensitive_mount_containers="$sensitive_mount_containers $c:$v" fail=1 - else - warn " * Sensitive directory $v mounted in: $c" - sensitive_mount_containers="$sensitive_mount_containers $c:$v" + continue fi + warn " * Sensitive directory $v mounted in: $c" + sensitive_mount_containers="$sensitive_mount_containers $c:$v" fi done done # We went through all the containers and found none with sensitive mounts if [ $fail -eq 0 ]; then - pass -s "$check" - logcheckresult "PASS" - else - logcheckresult "WARN" "Containers with sensitive directories mounted" "$sensitive_mount_containers" + pass -s "$check" + logcheckresult "PASS" + return fi + logcheckresult "WARN" "Containers with sensitive directories mounted" "$sensitive_mount_containers" } check_5_6() { @@ -261,12 +260,12 @@ check_5_6() { if [ $fail -eq 0 ]; then warn -s "$check" warn " * Container running sshd: $c" - ssh_exec_containers="$ssh_exec_containers $c" + ssh_exec_containers="$ssh_exec_containers $c" fail=1 printcheck=1 else warn " * Container running sshd: $c" - ssh_exec_containers="$ssh_exec_containers $c" + ssh_exec_containers="$ssh_exec_containers $c" fi fi @@ -284,11 +283,11 @@ check_5_6() { done # We went through all the containers and found none with sshd if [ $fail -eq 0 ]; then - pass -s "$check" - logcheckresult "PASS" - else - logcheckresult "WARN" "Containers with sshd/docker exec failures" "$ssh_exec_containers" + pass -s "$check" + logcheckresult "PASS" + return fi + logcheckresult "WARN" "Containers with sshd/docker exec failures" "$ssh_exec_containers" } check_5_7() { @@ -311,27 +310,27 @@ check_5_7() { # iterate through port range (line delimited) for port in $ports; do - if [ -n "$port" ] && [ "$port" -lt 1024 ]; then + if [ -n "$port" ] && [ "$port" -lt 1024 ]; then # If it's the first container, fail the test if [ $fail -eq 0 ]; then warn -s "$check" warn " * Privileged Port in use: $port in $c" - privileged_port_containers="$privileged_port_containers $c:$port" + privileged_port_containers="$privileged_port_containers $c:$port" fail=1 - else - warn " * Privileged Port in use: $port in $c" - privileged_port_containers="$privileged_port_containers $c:$port" + continue fi + warn " * Privileged Port in use: $port in $c" + privileged_port_containers="$privileged_port_containers $c:$port" fi done done # We went through all the containers and found no privileged ports if [ $fail -eq 0 ]; then - pass -s "$check" - logcheckresult "PASS" - else - logcheckresult "WARN" "Containers using privileged ports" "$privileged_port_containers" + pass -s "$check" + logcheckresult "PASS" + return fi + logcheckresult "WARN" "Containers using privileged ports" "$privileged_port_containers" } check_5_8() { @@ -372,21 +371,21 @@ check_5_9() { if [ $fail -eq 0 ]; then warn -s "$check" warn " * Container running with networking mode 'host': $c" - net_host_containers="$net_host_containers $c" + net_host_containers="$net_host_containers $c" fail=1 - else - warn " * Container running with networking mode 'host': $c" - net_host_containers="$net_host_containers $c" + continue fi + warn " * Container running with networking mode 'host': $c" + net_host_containers="$net_host_containers $c" fi done # We went through all the containers and found no Network Mode host if [ $fail -eq 0 ]; then - pass -s "$check" - logcheckresult "PASS" - else - logcheckresult "WARN" "Containers running with networking mode 'host'" "$net_host_containers" + pass -s "$check" + logcheckresult "PASS" + return fi + logcheckresult "WARN" "Containers running with networking mode 'host'" "$net_host_containers" } check_5_10() { @@ -404,10 +403,9 @@ check_5_10() { fail=0 mem_unlimited_containers="" for c in $containers; do + memory=$(docker inspect --format '{{ .HostConfig.Memory }}' "$c") if docker inspect --format '{{ .Config.Memory }}' "$c" 2> /dev/null 1>&2; then memory=$(docker inspect --format '{{ .Config.Memory }}' "$c") - else - memory=$(docker inspect --format '{{ .HostConfig.Memory }}' "$c") fi if [ "$memory" = "0" ]; then @@ -415,21 +413,21 @@ check_5_10() { if [ $fail -eq 0 ]; then warn -s "$check" warn " * Container running without memory restrictions: $c" - mem_unlimited_containers="$mem_unlimited_containers $c" + mem_unlimited_containers="$mem_unlimited_containers $c" fail=1 - else - warn " * Container running without memory restrictions: $c" - mem_unlimited_containers="$mem_unlimited_containers $c" + continue fi + warn " * Container running without memory restrictions: $c" + mem_unlimited_containers="$mem_unlimited_containers $c" fi done # We went through all the containers and found no lack of Memory restrictions if [ $fail -eq 0 ]; then - pass -s "$check" - logcheckresult "PASS" - else - logcheckresult "WARN" "Container running without memory restrictions" "$mem_unlimited_containers" + pass -s "$check" + logcheckresult "PASS" + return fi + logcheckresult "WARN" "Container running without memory restrictions" "$mem_unlimited_containers" } check_5_11() { @@ -447,10 +445,9 @@ check_5_11() { fail=0 cpu_unlimited_containers="" for c in $containers; do + shares=$(docker inspect --format '{{ .HostConfig.CpuShares }}' "$c") if docker inspect --format '{{ .Config.CpuShares }}' "$c" 2> /dev/null 1>&2; then shares=$(docker inspect --format '{{ .Config.CpuShares }}' "$c") - else - shares=$(docker inspect --format '{{ .HostConfig.CpuShares }}' "$c") fi if [ "$shares" = "0" ]; then @@ -460,19 +457,19 @@ check_5_11() { warn " * Container running without CPU restrictions: $c" cpu_unlimited_containers="$cpu_unlimited_containers $c" fail=1 - else - warn " * Container running without CPU restrictions: $c" - cpu_unlimited_containers="$cpu_unlimited_containers $c" + continue fi + warn " * Container running without CPU restrictions: $c" + cpu_unlimited_containers="$cpu_unlimited_containers $c" fi done # We went through all the containers and found no lack of CPUShare restrictions if [ $fail -eq 0 ]; then - pass -s "$check" - logcheckresult "PASS" - else - logcheckresult "WARN" "Containers running without CPU restrictions" "$cpu_unlimited_containers" + pass -s "$check" + logcheckresult "PASS" + return fi + logcheckresult "WARN" "Containers running without CPU restrictions" "$cpu_unlimited_containers" } check_5_12() { @@ -497,21 +494,21 @@ check_5_12() { if [ $fail -eq 0 ]; then warn -s "$check" warn " * Container running with root FS mounted R/W: $c" - fsroot_mount_containers="$fsroot_mount_containers $c" + fsroot_mount_containers="$fsroot_mount_containers $c" fail=1 - else - warn " * Container running with root FS mounted R/W: $c" - fsroot_mount_containers="$fsroot_mount_containers $c" + continue fi + warn " * Container running with root FS mounted R/W: $c" + fsroot_mount_containers="$fsroot_mount_containers $c" fi done # We went through all the containers and found no R/W FS mounts if [ $fail -eq 0 ]; then - pass -s "$check" - logcheckresult "PASS" - else - logcheckresult "WARN" "Containers running with root FS mounted R/W" "$fsroot_mount_containers" + pass -s "$check" + logcheckresult "PASS" + return fi + logcheckresult "WARN" "Containers running with root FS mounted R/W" "$fsroot_mount_containers" } check_5_13() { @@ -537,20 +534,20 @@ check_5_13() { warn " * Port being bound to wildcard IP: $ip in $c" incoming_unbound_containers="$incoming_unbound_containers $c:$ip" fail=1 - else - warn " * Port being bound to wildcard IP: $ip in $c" - incoming_unbound_containers="$incoming_unbound_containers $c:$ip" + continue fi + warn " * Port being bound to wildcard IP: $ip in $c" + incoming_unbound_containers="$incoming_unbound_containers $c:$ip" fi done done # We went through all the containers and found no ports bound to 0.0.0.0 if [ $fail -eq 0 ]; then - pass -s "$check" - logcheckresult "PASS" - else - logcheckresult "WARN" "Containers with port bound to wildcard IP" "$incoming_unbound_containers" + pass -s "$check" + logcheckresult "PASS" + return fi + logcheckresult "WARN" "Containers with port bound to wildcard IP" "$incoming_unbound_containers" } check_5_14() { @@ -575,21 +572,21 @@ check_5_14() { if [ $fail -eq 0 ]; then warn -s "$check" warn " * MaximumRetryCount is not set to 5: $c" - maxretry_unset_containers="$maxretry_unset_containers $c" + maxretry_unset_containers="$maxretry_unset_containers $c" fail=1 - else - warn " * MaximumRetryCount is not set to 5: $c" - maxretry_unset_containers="$maxretry_unset_containers $c" + continue fi + warn " * MaximumRetryCount is not set to 5: $c" + maxretry_unset_containers="$maxretry_unset_containers $c" fi done # We went through all the containers and they all had MaximumRetryCount=5 if [ $fail -eq 0 ]; then - pass -s "$check" - logcheckresult "PASS" - else - logcheckresult "WARN" "Containers with MaximumRetryCount not set to 5" "$maxretry_unset_containers" + pass -s "$check" + logcheckresult "PASS" + return fi + logcheckresult "WARN" "Containers with MaximumRetryCount not set to 5" "$maxretry_unset_containers" } check_5_15() { @@ -616,19 +613,19 @@ check_5_15() { warn " * Host PID namespace being shared with: $c" pidns_shared_containers="$pidns_shared_containers $c" fail=1 - else - warn " * Host PID namespace being shared with: $c" - pidns_shared_containers="$pidns_shared_containers $c" + continue fi + warn " * Host PID namespace being shared with: $c" + pidns_shared_containers="$pidns_shared_containers $c" fi done # We went through all the containers and found none with PidMode as host if [ $fail -eq 0 ]; then - pass -s "$check" - logcheckresult "PASS" - else - logcheckresult "WARN" "Containers sharing host PID namespace" "$pidns_shared_containers" + pass -s "$check" + logcheckresult "PASS" + return fi + logcheckresult "WARN" "Containers sharing host PID namespace" "$pidns_shared_containers" } check_5_16() { @@ -655,19 +652,19 @@ check_5_16() { warn " * Host IPC namespace being shared with: $c" ipcns_shared_containers="$ipcns_shared_containers $c" fail=1 - else - warn " * Host IPC namespace being shared with: $c" - ipcns_shared_containers="$ipcns_shared_containers $c" + continue fi + warn " * Host IPC namespace being shared with: $c" + ipcns_shared_containers="$ipcns_shared_containers $c" fi done # We went through all the containers and found none with IPCMode as host if [ $fail -eq 0 ]; then - pass -s "$check" - logcheckresult "PASS" - else - logcheckresult "WARN" "Containers sharing host IPC namespace" "$ipcns_shared_containers" + pass -s "$check" + logcheckresult "PASS" + return fi + logcheckresult "WARN" "Containers sharing host IPC namespace" "$ipcns_shared_containers" } check_5_17() { @@ -694,19 +691,19 @@ check_5_17() { info " * Container has devices exposed directly: $c" hostdev_exposed_containers="$hostdev_exposed_containers $c" fail=1 - else - info " * Container has devices exposed directly: $c" - hostdev_exposed_containers="$hostdev_exposed_containers $c" + continue fi + info " * Container has devices exposed directly: $c" + hostdev_exposed_containers="$hostdev_exposed_containers $c" fi done # We went through all the containers and found none with devices if [ $fail -eq 0 ]; then - pass -c "$check" - logcheckresult "PASS" - else - logcheckresult "INFO" "Containers with host devices exposed directly" "$hostdev_exposed_containers" + pass -c "$check" + logcheckresult "PASS" + return fi + logcheckresult "INFO" "Containers with host devices exposed directly" "$hostdev_exposed_containers" } check_5_18() { @@ -733,19 +730,19 @@ check_5_18() { info " * Container no default ulimit override: $c" no_ulimit_containers="$no_ulimit_containers $c" fail=1 - else - info " * Container no default ulimit override: $c" - no_ulimit_containers="$no_ulimit_containers $c" + continue fi + info " * Container no default ulimit override: $c" + no_ulimit_containers="$no_ulimit_containers $c" fi done # We went through all the containers and found none without Ulimits if [ $fail -eq 0 ]; then - pass -c "$check" - logcheckresult "PASS" - else - logcheckresult "INFO" "Containers with no default ulimit override" "$no_ulimit_containers" + pass -c "$check" + logcheckresult "PASS" + return fi + logcheckresult "INFO" "Containers with no default ulimit override" "$no_ulimit_containers" } check_5_19() { @@ -771,19 +768,19 @@ check_5_19() { warn " * Mount propagation mode is shared: $c" mountprop_shared_containers="$mountprop_shared_containers $c" fail=1 - else - warn " * Mount propagation mode is shared: $c" - mountprop_shared_containers="$mountprop_shared_containers $c" + continue fi + warn " * Mount propagation mode is shared: $c" + mountprop_shared_containers="$mountprop_shared_containers $c" fi done # We went through all the containers and found none with shared propagation mode if [ $fail -eq 0 ]; then - pass -s "$check" - logcheckresult "PASS" - else - logcheckresult "WARN" "Containers with shared mount propagation" "$mountprop_shared_containers" + pass -s "$check" + logcheckresult "PASS" + return fi + logcheckresult "WARN" "Containers with shared mount propagation" "$mountprop_shared_containers" } check_5_20() { @@ -810,19 +807,19 @@ check_5_20() { warn " * Host UTS namespace being shared with: $c" utcns_shared_containers="$utcns_shared_containers $c" fail=1 - else - warn " * Host UTS namespace being shared with: $c" - utcns_shared_containers="$utcns_shared_containers $c" + continue fi + warn " * Host UTS namespace being shared with: $c" + utcns_shared_containers="$utcns_shared_containers $c" fi done # We went through all the containers and found none with UTSMode as host if [ $fail -eq 0 ]; then - pass -s "$check" - logcheckresult "PASS" - else - logcheckresult "WARN" "Containers sharing host UTS namespace" "$utcns_shared_containers" + pass -s "$check" + logcheckresult "PASS" + return fi + logcheckresult "WARN" "Containers sharing host UTS namespace" "$utcns_shared_containers" } check_5_21() { @@ -856,11 +853,11 @@ check_5_21() { done # We went through all the containers and found none with default secomp profile disabled if [ $fail -eq 0 ]; then - pass -s "$check" - logcheckresult "PASS" - else - logcheckresult "WARN" "Containers with default seccomp profile disabled" "$seccomp_disabled_containers" + pass -s "$check" + logcheckresult "PASS" + return fi + logcheckresult "WARN" "Containers with default seccomp profile disabled" "$seccomp_disabled_containers" } check_5_22() { @@ -919,19 +916,19 @@ check_5_24() { warn " * Confirm cgroup usage: $c" unexpected_cgroup_containers="$unexpected_cgroup_containers $c" fail=1 - else - warn " * Confirm cgroup usage: $c" - unexpected_cgroup_containers="$unexpected_cgroup_containers $c" + continue fi + warn " * Confirm cgroup usage: $c" + unexpected_cgroup_containers="$unexpected_cgroup_containers $c" fi done # We went through all the containers and found none with UTSMode as host if [ $fail -eq 0 ]; then - pass -s "$check" - logcheckresult "PASS" - else - logcheckresult "WARN" "Containers using unexpected cgroup" "$unexpected_cgroup_containers" + pass -s "$check" + logcheckresult "PASS" + return fi + logcheckresult "WARN" "Containers using unexpected cgroup" "$unexpected_cgroup_containers" } check_5_25() { @@ -955,19 +952,19 @@ check_5_25() { warn " * Privileges not restricted: $c" addprivs_containers="$addprivs_containers $c" fail=1 - else - warn " * Privileges not restricted: $c" - addprivs_containers="$addprivs_containers $c" + continue fi + warn " * Privileges not restricted: $c" + addprivs_containers="$addprivs_containers $c" fi done # We went through all the containers and found none with capability to acquire additional privileges if [ $fail -eq 0 ]; then - pass -s "$check" - logcheckresult "PASS" - else - logcheckresult "WARN" "Containers without restricted privileges" "$addprivs_containers" + pass -s "$check" + logcheckresult "PASS" + return fi + logcheckresult "WARN" "Containers without restricted privileges" "$addprivs_containers" } check_5_26() { @@ -991,18 +988,18 @@ check_5_26() { warn " * Health check not set: $c" nohealthcheck_containers="$nohealthcheck_containers $c" fail=1 - else - warn " * Health check not set: $c" - nohealthcheck_containers="$nohealthcheck_containers $c" + continue fi + warn " * Health check not set: $c" + nohealthcheck_containers="$nohealthcheck_containers $c" fi done if [ $fail -eq 0 ]; then - pass -s "$check" - logcheckresult "PASS" - else - logcheckresult "WARN" "Containers without health check" "$nohealthcheck_containers" + pass -s "$check" + logcheckresult "PASS" + return fi + logcheckresult "WARN" "Containers without health check" "$nohealthcheck_containers" } check_5_27() { @@ -1045,19 +1042,19 @@ check_5_28() { warn " * PIDs limit not set: $c" nopids_limit_containers="$nopids_limit_containers $c" fail=1 - else - warn " * PIDs limit not set: $c" - nopids_limit_containers="$nopids_limit_containers $c" + continue fi + warn " * PIDs limit not set: $c" + nopids_limit_containers="$nopids_limit_containers $c" fi done # We went through all the containers and found all with PIDs limit if [ $fail -eq 0 ]; then - pass -s "$check" - logcheckresult "PASS" - else - logcheckresult "WARN" "Containers without PIDs cgroup limit" "$nopids_limit_containers" + pass -s "$check" + logcheckresult "PASS" + return fi + logcheckresult "WARN" "Containers without PIDs cgroup limit" "$nopids_limit_containers" } check_5_29() { @@ -1080,33 +1077,33 @@ check_5_29() { docker0Containers=$(docker network inspect --format='{{ range $k, $v := .Containers }} {{ $k }} {{ end }}' "$net" | \ sed -e 's/^ //' -e 's/ /\n/g' 2>/dev/null) - if [ -n "$docker0Containers" ]; then - if [ $fail -eq 0 ]; then - info -c "$check" - fail=1 - fi - for c in $docker0Containers; do - if [ -z "$exclude" ]; then - cName=$(docker inspect --format '{{.Name}}' "$c" 2>/dev/null | sed 's/\///g') - else - pattern=$(echo "$exclude" | sed 's/,/|/g') - cName=$(docker inspect --format '{{.Name}}' "$c" 2>/dev/null | sed 's/\///g' | grep -Ev "$pattern" ) - fi - if [ -n "$cName" ]; then - info " * Container in docker0 network: $cName" - docker_network_containers="$docker_network_containers $c:$cName" - fi - done + if [ -n "$docker0Containers" ]; then + if [ $fail -eq 0 ]; then + info -c "$check" + fail=1 fi + for c in $docker0Containers; do + if [ -z "$exclude" ]; then + cName=$(docker inspect --format '{{.Name}}' "$c" 2>/dev/null | sed 's/\///g') + else + pattern=$(echo "$exclude" | sed 's/,/|/g') + cName=$(docker inspect --format '{{.Name}}' "$c" 2>/dev/null | sed 's/\///g' | grep -Ev "$pattern" ) + fi + if [ -n "$cName" ]; then + info " * Container in docker0 network: $cName" + docker_network_containers="$docker_network_containers $c:$cName" + fi + done + fi fi done # We went through all the containers and found none in docker0 network if [ $fail -eq 0 ]; then - pass -c "$check" - logcheckresult "PASS" - else - logcheckresult "INFO" "Containers using docker0 network" "$docker_network_containers" + pass -c "$check" + logcheckresult "PASS" + return fi + logcheckresult "INFO" "Containers using docker0 network" "$docker_network_containers" } check_5_30() { @@ -1131,19 +1128,19 @@ check_5_30() { warn " * Namespace shared: $c" hostns_shared_containers="$hostns_shared_containers $c" fail=1 - else - warn " * Namespace shared: $c" - hostns_shared_containers="$hostns_shared_containers $c" + continue fi + warn " * Namespace shared: $c" + hostns_shared_containers="$hostns_shared_containers $c" fi done # We went through all the containers and found none with host's user namespace shared if [ $fail -eq 0 ]; then - pass -s "$check" - logcheckresult "PASS" - else - logcheckresult "WARN" "Containers sharing host user namespace" "$hostns_shared_containers" + pass -s "$check" + logcheckresult "PASS" + return fi + logcheckresult "WARN" "Containers sharing host user namespace" "$hostns_shared_containers" } check_5_31() { @@ -1168,19 +1165,19 @@ check_5_31() { warn " * Docker socket shared: $c" docker_sock_containers="$docker_sock_containers $c" fail=1 - else - warn " * Docker socket shared: $c" - docker_sock_containers="$docker_sock_containers $c" + continue fi + warn " * Docker socket shared: $c" + docker_sock_containers="$docker_sock_containers $c" fi done # We went through all the containers and found none with docker.sock shared if [ $fail -eq 0 ]; then - pass -s "$check" - logcheckresult "PASS" - else - logcheckresult "WARN" "Containers sharing docker socket" "$docker_sock_containers" + pass -s "$check" + logcheckresult "PASS" + return fi + logcheckresult "WARN" "Containers sharing docker socket" "$docker_sock_containers" } check_5_end() { diff --git a/tests/7_docker_swarm_configuration.sh b/tests/7_docker_swarm_configuration.sh index 2188160..f7faab6 100644 --- a/tests/7_docker_swarm_configuration.sh +++ b/tests/7_docker_swarm_configuration.sh @@ -20,10 +20,10 @@ check_7_1() { if docker info 2>/dev/null | grep -e "Swarm:*\sinactive\s*" >/dev/null 2>&1; then pass -s "$check" logcheckresult "PASS" - else - warn -s "$check" - logcheckresult "WARN" + return fi + warn -s "$check" + logcheckresult "WARN" } check_7_2() { @@ -39,14 +39,14 @@ check_7_2() { if [ "$managernodes" -eq 1 ]; then pass -s "$check" logcheckresult "PASS" - else - warn -s "$check" - logcheckresult "WARN" + return fi - else - pass -s "$check (Swarm mode not enabled)" - logcheckresult "PASS" + warn -s "$check" + logcheckresult "WARN" + return fi + pass -s "$check (Swarm mode not enabled)" + logcheckresult "PASS" } check_7_3() { @@ -62,14 +62,14 @@ check_7_3() { if [ $? -eq 1 ]; then pass -s "$check" logcheckresult "PASS" - else - warn -s "$check" - logcheckresult "WARN" + return fi - else - pass -s "$check (Swarm mode not enabled)" - logcheckresult "PASS" + warn -s "$check" + logcheckresult "WARN" + return fi + pass -s "$check (Swarm mode not enabled)" + logcheckresult "PASS" } check_7_4() { @@ -96,11 +96,11 @@ check_7_4() { done # We went through all the networks and found none that are unencrypted if [ $fail -eq 0 ]; then - pass -s "$check" - logcheckresult "PASS" - else - logcheckresult "WARN" "Unencrypted overlay networks:" "$unencrypted_networks" + pass -s "$check" + logcheckresult "PASS" + return fi + logcheckresult "WARN" "Unencrypted overlay networks:" "$unencrypted_networks" } check_7_5() { @@ -115,14 +115,14 @@ check_7_5() { if [ "$(docker secret ls -q | wc -l)" -ge 1 ]; then pass -c "$check" logcheckresult "PASS" - else - info -c "$check" - logcheckresult "INFO" + return fi - else - pass -c "$check (Swarm mode not enabled)" - logcheckresult "PASS" + info -c "$check" + logcheckresult "INFO" + return fi + pass -c "$check (Swarm mode not enabled)" + logcheckresult "PASS" } check_7_6() { @@ -137,14 +137,14 @@ check_7_6() { if ! docker swarm unlock-key 2>/dev/null | grep 'SWMKEY' 2>/dev/null 1>&2; then warn -s "$check" logcheckresult "WARN" - else - pass -s "$check" - logcheckresult "PASS" + return fi - else - pass -s "$check (Swarm mode not enabled)" - logcheckresult "PASS" + pass -s "$check" + logcheckresult "PASS" + return fi + pass -s "$check (Swarm mode not enabled)" + logcheckresult "PASS" } check_7_7() { @@ -158,10 +158,10 @@ check_7_7() { if docker info 2>/dev/null | grep -e "Swarm:\s*active\s*" >/dev/null 2>&1; then note -c "$check" logcheckresult "NOTE" - else - pass -c "$check (Swarm mode not enabled)" - logcheckresult "PASS" + return fi + pass -c "$check (Swarm mode not enabled)" + logcheckresult "PASS" } check_7_8() { @@ -176,14 +176,14 @@ check_7_8() { if docker info 2>/dev/null | grep "Expiry Duration: 2 days"; then pass -c "$check" logcheckresult "PASS" - else - info -c "$check" - logcheckresult "INFO" + return fi - else - pass -c "$check (Swarm mode not enabled)" - logcheckresult "PASS" + info -c "$check" + logcheckresult "INFO" + return fi + pass -c "$check (Swarm mode not enabled)" + logcheckresult "PASS" } check_7_9() { @@ -197,10 +197,10 @@ check_7_9() { if docker info 2>/dev/null | grep -e "Swarm:\s*active\s*" >/dev/null 2>&1; then info -c "$check" logcheckresult "INFO" - else - pass -c "$check (Swarm mode not enabled)" - logcheckresult "PASS" + return fi + pass -c "$check (Swarm mode not enabled)" + logcheckresult "PASS" } check_7_10() { @@ -214,10 +214,10 @@ check_7_10() { if docker info 2>/dev/null | grep -e "Swarm:\s*active\s*" >/dev/null 2>&1; then info -c "$check" logcheckresult "INFO" - else - pass -c "$check (Swarm mode not enabled)" - logcheckresult "PASS" + return fi + pass -c "$check (Swarm mode not enabled)" + logcheckresult "PASS" } check_7_end() { diff --git a/tests/8_docker_enterprise_configuration.sh b/tests/8_docker_enterprise_configuration.sh index e151a1f..aef9d23 100644 --- a/tests/8_docker_enterprise_configuration.sh +++ b/tests/8_docker_enterprise_configuration.sh @@ -10,11 +10,10 @@ check_8() { } check_product_license() { + enterprise_license=1 if docker version | grep -Eqi '^Server.*Community$|Version.*-ce$'; then info " * Community Engine license, skipping section 8" enterprise_license=0 - else - enterprise_license=1 fi } diff --git a/tests/99_community_checks.sh b/tests/99_community_checks.sh index 5f26ceb..e0ad438 100644 --- a/tests/99_community_checks.sh +++ b/tests/99_community_checks.sh @@ -19,13 +19,15 @@ check_c_1() { if docker info --format='{{ .Architecture }}' | grep 'x86_64' 2>/dev/null 1>&2; then pass -s "$check" logcheckresult "PASS" - elif docker info --format='{{ .Architecture }}' | grep 'aarch64' 2>/dev/null 1>&2; then + return + fi + if docker info --format='{{ .Architecture }}' | grep 'aarch64' 2>/dev/null 1>&2; then info -c "$check" logcheckresult "INFO" - else - warn -s "$check" - logcheckresult "WARN" + return fi + warn -s "$check" + logcheckresult "WARN" } check_c_1_1() { @@ -39,13 +41,15 @@ check_c_1_1() { if docker info --format='{{ .Architecture }}' | grep 'x86_64' 2>/dev/null 1>&2; then pass -c "$check" logcheckresult "PASS" - elif docker info --format='{{ .Architecture }}' | grep 'aarch64' 2>/dev/null 1>&2; then + return + fi + if docker info --format='{{ .Architecture }}' | grep 'aarch64' 2>/dev/null 1>&2; then info -c "$check" logcheckresult "INFO" - else - warn -c "$check" - logcheckresult "WARN" + return fi + warn -c "$check" + logcheckresult "WARN" } check_c_2() { @@ -63,19 +67,21 @@ check_c_2() { if get_docker_configuration_file_args 'disable-legacy-registry' | grep 'true' >/dev/null 2>&1; then pass -s "$check" logcheckresult "PASS" - elif get_docker_effective_command_line_args '--disable-legacy-registry' | grep "disable-legacy-registry" >/dev/null 2>&1; then + return + fi + if get_docker_effective_command_line_args '--disable-legacy-registry' | grep "disable-legacy-registry" >/dev/null 2>&1; then pass -s "$check" logcheckresult "PASS" - else - warn -s "$check" - logcheckresult "WARN" + return fi - else - local desc="$desc (Deprecated)" - local check="$id - $desc" - info -c "$check" - logcheckresult "INFO" + warn -s "$check" + logcheckresult "WARN" + return fi + local desc="$desc (Deprecated)" + local check="$id - $desc" + info -c "$check" + logcheckresult "INFO" } check_c_end() { From 81ac358e82625887eb20de6748c4fe338f50c0bd Mon Sep 17 00:00:00 2001 From: Razvan Stoica Date: Mon, 29 Mar 2021 15:32:34 +0300 Subject: [PATCH 43/48] Remove temporary files --- functions/output_lib.sh.save | 194 ------ ..._docker_daemon_configuration_files.sh.save | 607 ------------------ 2 files changed, 801 deletions(-) delete mode 100644 functions/output_lib.sh.save delete mode 100644 tests/3_docker_daemon_configuration_files.sh.save diff --git a/functions/output_lib.sh.save b/functions/output_lib.sh.save deleted file mode 100644 index 6ead504..0000000 --- a/functions/output_lib.sh.save +++ /dev/null @@ -1,194 +0,0 @@ -#!/bin/sh - -bldred='\033[1;31m' # Bold Red -bldgrn='\033[1;32m' # Bold Green -bldblu='\033[1;34m' # Bold Blue -bldylw='\033[1;33m' # Bold Yellow -txtrst='\033[0m' - -if [ -n "$nocolor" -] && [ "$nocolor" = "nocolor" ]; then - bldred='' - bldgrn='' - bldblu='' - bldylw='' - txtrst='' -fi - -logit () { - printf "%b\n" "$1" | tee -a "$logger" -} - -info () { - local infoCountCheck - while getopts c args - do - case $args in - c) infoCountCheck="true" ;; - *) exit 1 ;; - esac - done - if [ "$infoCountCheck" = "true" ]; then - printf "%b\n" "${bldblu}[INFO]${txtrst} $2" | tee -a "$logger" - totalChecks=$((totalChecks + 1)) - return - fi - printf "%b\n" "${bldblu}[INFO]${txtrst} $1" | tee -a "$logger" -} - -pass () { - local passScored - while getopts sc args - do - case $args in - s) passScored="true" ;; - c) passCountCheck="true" ;; - *) exit 1 ;; - esac - done - if [ "$passScored" = "true" ] || [ "$passCountCheck" = "true" ]; then - printf "%b\n" "${bldgrn}[PASS]${txtrst} $2" | tee -a "$logger" - totalChecks=$((totalChecks + 1)) - fi - if [ "$passScored" = "true" ]; then - currentScore=$((currentScore + 1)) - fi - if [ "$passScored" != "true" ] && [ "$passCountCheck" != "true" ]; then - printf "%b\n" "${bldgrn}[PASS]${txtrst} $1" | tee -a "$logger" - fi -} - -warn () { - local warnScored - while getopts s args - do - case $args in - s) warnScored="true" ;; - *) exit 1 ;; - esac - done - if [ "$warnScored" = "true" ]; then - printf "%b\n" "${bldred}[WARN]${txtrst} $2" | tee -a "$logger" - totalChecks=$((totalChecks + 1)) - currentScore=$((currentScore - 1)) - return - fi - printf "%b\n" "${bldred}[WARN]${txtrst} $1" | tee -a "$logger" -} - -note () { - local noteCountCheck - while getopts c args - do - case $args in - c) noteCountCheck="true" ;; - *) exit 1 ;; - esac - done - if [ "$noteCountCheck" = "true" ]; then - printf "%b\n" "${bldylw}[NOTE]${txtrst} $2" | tee -a "$logger" - totalChecks=$((totalChecks + 1)) - return - fi - printf "%b\n" "${bldylw}[NOTE]${txtrst} $1" | tee -a "$logger" -} - -yell () { - printf "%b\n" "${bldylw}$1${txtrst}\n" -} - -appendjson () { - if [ -s "$logger.json" ]; then - tail -n 1 "$logger.json" | wc -c | xargs -I {} truncate "$logger.json" -s -{} - printf "},\n" | tee -a "$logger.json" 2>/dev/null 1>&2 - return - fi - printf "[" | tee -a "$logger.json" 2>/dev/null 1>&2 -} - -beginjson () { - printf "{\n \"dockerbenchsecurity\": \"%s\",\n \"start\": %s,\n \"tests\": [" "$1" "$2" | tee -a "$logger.json" 2>/dev/null 1>&2 -} - -endjson (){ - printf "\n ], \"checks\": %s, \"score\": %s, \"end\": %s\n}]" "$1" "$2" "$3" | tee -a "$logger.json" 2>/dev/null 1>&2 -} - -logjson (){ - printf "\n \"%s\": \"%s\"," "$1" "$2" | tee -a "$logger.json" 2>/dev/null 1>&2 -} - -SSEP= -SEP= -startsectionjson() { - printf "%s\n {\"id\": \"%s\", \"desc\": \"%s\", \"results\": [" "$SSEP" "$1" "$2" | tee -a "$logger.json" 2>/dev/null 1>&2 - SEP= - SSEP="," -} - -endsectionjson() { - printf "\n ]}" | tee -a "$logger.json" 2>/dev/null 1>&2 -} - -starttestjson() { - printf "%s\n {\"id\": \"%s\", \"desc\": \"%s\", " "$SEP" "$1" "$2" | tee -a "$logger.json" 2>/dev/null 1>&2 - SEP="," -} - -logcheckresult() { - # Log to JSON - if [ $# -eq 1 ]; then - printf "\"result\": \"%s\"" "$1" | tee -a "$logger.json" 2>/dev/null 1>&2 - fi - - if [ $# -eq 2 ] && [ $# -ne 1 ]; then - # Result also contains details - printf "\"result\": \"%s\", \"details\": \"%s\"" "$1" "$2" | tee -a "$logger.json" 2>/dev/null 1>&2 - fi - - if [ $# -ne 2 ] && [ $# -ne 1 ]; then - # Result also includes details and a list of items. Add that directly to details and to an array property "items" - # Also limit the number of items to $limit, if $limit is non-zero - if [ $limit != 0 ]; then - truncItems="" - ITEM_COUNT=0 - for item in $3; do - truncItems="$truncItems $item" - ITEM_COUNT=$((ITEM_COUNT + 1)); - if [ "$ITEM_COUNT" == "$limit" ]; then - truncItems="$truncItems (truncated)" - break; - fi - done - else - truncItems=$3 - fi - itemsJson=$(printf "["; ISEP=""; ITEMCOUNT=0; for item in $truncItems; do printf "%s\"%s\"" "$ISEP" "$item"; ISEP=","; done; printf "]") - printf "\"result\": \"%s\", \"details\": \"%s: %s\", \"items\": %s" "$1" "$2" "$truncItems" "$itemsJson" | tee -a "$logger.json" 2>/dev/null 1>&2 - fi - - # Log remediation measure to JSON - if [ -n "$remediation" ] && [ "$1" != "PASS" ] && [ "$printremediation" = "1" ]; then - printf ", \"remediation\": \"%s\"" "$remediation" | tee -a "$logger.json" 2>/dev/null 1>&2 - if [ -n "$remediationImpact" ]; then - printf ", \"remediation-impact\": \"%s\"" "$remediationImpact" | tee -a "$logger.json" 2>/dev/null 1>&2 - fi - fi - printf "}" | tee -a "$logger.json" 2>/dev/null 1>&2 - - # Save remediation measure for print log to stdout - if [ -n "$remediation" ] && [ "$1" != "PASS" ]; then - if [ -n "${checkHeader}" ]; then - if [ -n "${addSpaceHeader}" ]; then - globalRemediation="${globalRemediation}\n" - fi - globalRemediation="${globalRemediation}\n${bldblu}[INFO]${txtrst} ${checkHeader}" - checkHeader="" - addSpaceHeader="1" - fi - globalRemediation="${globalRemediation}\n${bldblu}[INFO]${txtrst} ${id} - ${remediation}" - if [ -n "${remediationImpact}" ]; then - globalRemediation="${globalRemediation} Impact: ${remediationImpact}" - fi - fi -} diff --git a/tests/3_docker_daemon_configuration_files.sh.save b/tests/3_docker_daemon_configuration_files.sh.save deleted file mode 100644 index 0d9019f..0000000 --- a/tests/3_docker_daemon_configuration_files.sh.save +++ /dev/null @@ -1,607 +0,0 @@ -#!/bin/sh - -check_3() { - logit "" - local id="3" - local desc="Docker daemon configuration files" - checkHeader="$id - $desc" - info "$checkHeader" - startsectionjson "$id" "$desc" -} - -check_3_1() { - local id="3.1" - local desc="Ensure that the docker.service file ownership is set to root:root (Scored)" - local remediation="Find out the file location: systemctl show -p FragmentPath docker.service. - -IFind out the file location: -systemctl show -p FragmentPath docker.service - -" - local remediationImpact="None." - local check="$id - $desc" - starttestjson "$id" "$desc" - - file="$(get_service_file docker.service)" - if [ -f "$file" ]; then - if [ "$(stat -c %u%g $file)" -eq 00 ]; then - pass -s "$check" - logcheckresult "PASS" - else - warn -s "$check" - warn " * Wrong ownership for $file" - logcheckresult "WARN" "Wrong ownership for $file" - fi - else - info -c "$check" - info " * File not found" - logcheckresult "INFO" "File not found" - fi -} - -check_3_2() { - local id="3.2" - local desc="Ensure that docker.service file permissions are appropriately set (Scored)" - local remediation="" - local remediationImpact="None." - local check="$id - $desc" - starttestjson "$id" "$desc" - - file="$(get_service_file docker.service)" - if [ -f "$file" ]; then - if [ "$(stat -c %a $file)" -le 644 ]; then - pass -s "$check" - logcheckresult "PASS" - else - warn -s "$check" - warn " * Wrong permissions for $file" - logcheckresult "WARN" "Wrong permissions for $file" - fi - else - info -c "$check" - info " * File not found" - logcheckresult "INFO" "File not found" - fi -} - -check_3_3() { - local id="3.3" - local desc="Ensure that docker.socket file ownership is set to root:root (Scored)" - local remediation="" - local remediationImpact="None." - local check="$id - $desc" - starttestjson "$id" "$desc" - - file="$(get_service_file docker.socket)" - if [ -f "$file" ]; then - if [ "$(stat -c %u%g $file)" -eq 00 ]; then - pass -s "$check" - logcheckresult "PASS" - else - warn -s "$check" - warn " * Wrong ownership for $file" - logcheckresult "WARN" "Wrong ownership for $file" - fi - else - info -c "$check" - info " * File not found" - logcheckresult "INFO" "File not found" - fi -} - -check_3_4() { - local id="3.4" - local desc="Ensure that docker.socket file permissions are set to 644 or more restrictive (Scored)" - local remediation="" - local remediationImpact="None." - local check="$id - $desc" - starttestjson "$id" "$desc" - - file="$(get_service_file docker.socket)" - if [ -f "$file" ]; then - if [ "$(stat -c %a $file)" -le 644 ]; then - pass -s "$check" - logcheckresult "PASS" - else - warn -s "$check" - warn " * Wrong permissions for $file" - logcheckresult "WARN" "Wrong permissions for $file" - fi - else - info -c "$check" - info " * File not found" - logcheckresult "INFO" "File not found" - fi -} - -check_3_5() { - local id="3.5" - local desc="Ensure that the /etc/docker directory ownership is set to root:root (Scored)" - local remediation="You should run the following command: chown root:root /etc/docker. This sets the ownership and group ownership for the directory to root." - local remediationImpact="None." - local check="$id - $desc" - starttestjson "$id" "$desc" - - directory="/etc/docker" - if [ -d "$directory" ]; then - if [ "$(stat -c %u%g $directory)" -eq 00 ]; then - pass -s "$check" - logcheckresult "PASS" - else - warn -s "$check" - warn " * Wrong ownership for $directory" - logcheckresult "WARN" "Wrong ownership for $directory" - fi - else - info -c "$check" - info " * Directory not found" - logcheckresult "INFO" "Directory not found" - fi -} - -check_3_6() { - local id="3.6" - local desc="Ensure that /etc/docker directory permissions are set to 755 or more restrictively (Scored)" - local remediation="You should run the following command: chmod 755 /etc/docker. This sets the permissions for the directory to 755." - local remediationImpact="None." - local check="$id - $desc" - starttestjson "$id" "$desc" - - directory="/etc/docker" - if [ -d "$directory" ]; then - if [ "$(stat -c %a $directory)" -le 755 ]; then - pass -s "$check" - logcheckresult "PASS" - else - warn -s "$check" - warn " * Wrong permissions for $directory" - logcheckresult "WARN" "Wrong permissions for $directory" - fi - else - info -c "$check" - info " * Directory not found" - logcheckresult "INFO" "Directory not found" - fi -} - -check_3_7() { - local id="3.7" - local desc="Ensure that registry certificate file ownership is set to root:root (Scored)" - local remediation="You should run the following command: chown root:root /etc/docker/certs.d//*. This would set the individual ownership and group ownership for the registry certificate files to root." - local remediationImpact="None." - local check="$id - $desc" - starttestjson "$id" "$desc" - - directory="/etc/docker/certs.d/" - if [ -d "$directory" ]; then - fail=0 - owners=$(find "$directory" -type f -name '*.crt') - for p in $owners; do - if [ "$(stat -c %u $p)" -ne 0 ]; then - fail=1 - fi - done - if [ $fail -eq 1 ]; then - warn -s "$check" - warn " * Wrong ownership for $directory" - logcheckresult "WARN" "Wrong ownership for $directory" - else - pass -s "$check" - logcheckresult "PASS" - fi - else - info -c "$check" - info " * Directory not found" - logcheckresult "INFO" "Directory not found" - fi -} - -check_3_8() { - local id="3.8" - local desc="Ensure that registry certificate file permissions are set to 444 or more restrictively (Scored)" - local remediation="You should run the following command: chmod 444 /etc/docker/certs.d//*. This would set the permissions for the registry certificate files to 444." - local remediationImpact="None." - local check="$id - $desc" - starttestjson "$id" "$desc" - - directory="/etc/docker/certs.d/" - if [ -d "$directory" ]; then - fail=0 - perms=$(find "$directory" -type f -name '*.crt') - for p in $perms; do - if [ "$(stat -c %a $p)" -gt 444 ]; then - fail=1 - fi - done - if [ $fail -eq 1 ]; then - warn -s "$check" - warn " * Wrong permissions for $directory" - logcheckresult "WARN" "Wrong permissions for $directory" - else - pass -s "$check" - logcheckresult "PASS" - fi - else - info -c "$check" - info " * Directory not found" - logcheckresult "INFO" "Directory not found" - fi -} - -check_3_9() { - local id="3.9" - local desc="Ensure that TLS CA certificate file ownership is set to root:root (Scored)" - local remediation="You should run the following command: chown root:root . This sets the individual ownership and group ownership for the TLS CA certificate file to root." - local remediationImpact="None." - local check="$id - $desc" - starttestjson "$id" "$desc" - - if [ -n "$(get_docker_configuration_file_args 'tlscacert')" ]; then - tlscacert=$(get_docker_configuration_file_args 'tlscacert') - else - tlscacert=$(get_docker_effective_command_line_args '--tlscacert' | sed -n 's/.*tlscacert=\([^s]\)/\1/p' | sed 's/--/ --/g' | cut -d " " -f 1) - fi - if [ -f "$tlscacert" ]; then - if [ "$(stat -c %u%g "$tlscacert")" -eq 00 ]; then - pass -s "$check" - logcheckresult "PASS" - else - warn -s "$check" - warn " * Wrong ownership for $tlscacert" - logcheckresult "WARN" "Wrong ownership for $tlscacert" - fi - else - info -c "$check" - info " * No TLS CA certificate found" - logcheckresult "INFO" "No TLS CA certificate found" - fi -} - -check_3_10() { - local id="3.10" - local desc="Ensure that TLS CA certificate file permissions are set to 444 or more restrictively (Scored)" - local remediation="You should run the following command: chmod 444 . This sets the file permissions on the TLS CA file to 444." - local remediationImpact="None." - local check="$id - $desc" - starttestjson "$id" "$desc" - - if [ -n "$(get_docker_configuration_file_args 'tlscacert')" ]; then - tlscacert=$(get_docker_configuration_file_args 'tlscacert') - else - tlscacert=$(get_docker_effective_command_line_args '--tlscacert' | sed -n 's/.*tlscacert=\([^s]\)/\1/p' | sed 's/--/ --/g' | cut -d " " -f 1) - fi - if [ -f "$tlscacert" ]; then - if [ "$(stat -c %a $tlscacert)" -le 444 ]; then - pass -s "$check" - logcheckresult "PASS" - else - warn -s "$check" - warn " * Wrong permissions for $tlscacert" - logcheckresult "WARN" "Wrong permissions for $tlscacert" - fi - else - info -c "$check" - info " * No TLS CA certificate found" - logcheckresult "INFO" "No TLS CA certificate found" - fi -} - -check_3_11() { - local id="3.11" - local desc="Ensure that Docker server certificate file ownership is set to root:root (Scored)" - local remediation="You should run the following command: chown root:root . This sets the individual ownership and the group ownership for the Docker server certificate file to root." - local remediationImpact="None." - local check="$id - $desc" - starttestjson "$id" "$desc" - - if [ -n "$(get_docker_configuration_file_args 'tlscert')" ]; then - tlscert=$(get_docker_configuration_file_args 'tlscert') - else - tlscert=$(get_docker_effective_command_line_args '--tlscert' | sed -n 's/.*tlscert=\([^s]\)/\1/p' | sed 's/--/ --/g' | cut -d " " -f 1) - fi - if [ -f "$tlscert" ]; then - if [ "$(stat -c %u%g "$tlscert")" -eq 00 ]; then - pass -s "$check" - logcheckresult "PASS" - else - warn -s "$check" - warn " * Wrong ownership for $tlscert" - logcheckresult "WARN" "Wrong ownership for $tlscert" - fi - else - info -c "$check" - info " * No TLS Server certificate found" - logcheckresult "INFO" "No TLS Server certificate found" - fi -} - -check_3_12() { - local id="3.12" - local desc="Ensure that the Docker server certificate file permissions are set to 444 or more restrictively (Scored)" - local remediation="You should run the following command: chmod 444 . This sets the file permissions of the Docker server certificate file to 444." - local remediationImpact="None." - local check="$id - $desc" - starttestjson "$id" "$desc" - - if [ -n "$(get_docker_configuration_file_args 'tlscert')" ]; then - tlscert=$(get_docker_configuration_file_args 'tlscert') - else - tlscert=$(get_docker_effective_command_line_args '--tlscert' | sed -n 's/.*tlscert=\([^s]\)/\1/p' | sed 's/--/ --/g' | cut -d " " -f 1) - fi - if [ -f "$tlscert" ]; then - if [ "$(stat -c %a $tlscert)" -le 444 ]; then - pass -s "$check" - logcheckresult "PASS" - else - warn -s "$check" - warn " * Wrong permissions for $tlscert" - logcheckresult "WARN" "Wrong permissions for $tlscert" - fi - else - info -c "$check" - info " * No TLS Server certificate found" - logcheckresult "INFO" "No TLS Server certificate found" - fi -} - -check_3_13() { - local id="3.13" - local desc="Ensure that the Docker server certificate key file ownership is set to root:root (Scored)" - local remediation="You should run the following command: chown root:root . This sets the individual ownership and group ownership for the Docker server certificate key file to root." - local remediationImpact="None." - local check="$id - $desc" - starttestjson "$id" "$desc" - - if [ -n "$(get_docker_configuration_file_args 'tlskey')" ]; then - tlskey=$(get_docker_configuration_file_args 'tlskey') - else - tlskey=$(get_docker_effective_command_line_args '--tlskey' | sed -n 's/.*tlskey=\([^s]\)/\1/p' | sed 's/--/ --/g' | cut -d " " -f 1) - fi - if [ -f "$tlskey" ]; then - if [ "$(stat -c %u%g "$tlskey")" -eq 00 ]; then - pass -s "$check" - logcheckresult "PASS" - else - warn -s "$check" - warn " * Wrong ownership for $tlskey" - logcheckresult "WARN" "Wrong ownership for $tlskey" - fi - else - info -c "$check" - info " * No TLS Key found" - logcheckresult "INFO" "No TLS Key found" - fi -} - -check_3_14() { - local id="3.14" - local desc="Ensure that the Docker server certificate key file permissions are set to 400 (Scored)" - local remediation="You should run the following command: chmod 400 . This sets the Docker server certificate key file permissions to 400." - local remediationImpact="None." - local check="$id - $desc" - starttestjson "$id" "$desc" - - if [ -n "$(get_docker_configuration_file_args 'tlskey')" ]; then - tlskey=$(get_docker_configuration_file_args 'tlskey') - else - tlskey=$(get_docker_effective_command_line_args '--tlskey' | sed -n 's/.*tlskey=\([^s]\)/\1/p' | sed 's/--/ --/g' | cut -d " " -f 1) - fi - if [ -f "$tlskey" ]; then - if [ "$(stat -c %a $tlskey)" -eq 400 ]; then - pass -s "$check" - logcheckresult "PASS" - else - warn -s "$check" - warn " * Wrong permissions for $tlskey" - logcheckresult "WARN" "Wrong permissions for $tlskey" - fi - else - info -c "$check" - info " * No TLS Key found" - logcheckresult "INFO" "No TLS Key found" - fi -} - -check_3_15() { - local id="3.15" - local desc="Ensure that the Docker socket file ownership is set to root:docker (Scored)" - local remediation="You should run the following command: chown root:docker /var/run/docker.sock. This sets the ownership to root and group ownership to docker for the default Docker socket file." - local remediationImpact="None." - local check="$id - $desc" - starttestjson "$id" "$desc" - - file="/var/run/docker.sock" - if [ -S "$file" ]; then - if [ "$(stat -c %U:%G $file)" = 'root:docker' ]; then - pass -s "$check" - logcheckresult "PASS" - else - warn -s "$check" - warn " * Wrong ownership for $file" - logcheckresult "WARN" "Wrong ownership for $file" - fi - else - info -c "$check" - info " * File not found" - logcheckresult "INFO" "File not found" - fi -} - -check_3_16() { - local id="3.16" - local desc="Ensure that the Docker socket file permissions are set to 660 or more restrictively (Scored)" - local remediation="You should run the following command: chmod 660 /var/run/docker.sock. This sets the file permissions of the Docker socket file to 660." - local remediationImpact="None." - local check="$id - $desc" - starttestjson "$id" "$desc" - - file="/var/run/docker.sock" - if [ -S "$file" ]; then - if [ "$(stat -c %a $file)" -le 660 ]; then - pass -s "$check" - logcheckresult "PASS" - else - warn -s "$check" - warn " * Wrong permissions for $file" - logcheckresult "WARN" "Wrong permissions for $file" - fi - else - info -c "$check" - info " * File not found" - logcheckresult "INFO" "File not found" - fi -} - -check_3_17() { - local id="3.17" - local desc="Ensure that the daemon.json file ownership is set to root:root (Scored)" - local remediation="You should run the following command: chown root:root /etc/docker/daemon.json. This sets the ownership and group ownership for the file to root." - local remediationImpact="None." - local check="$id - $desc" - starttestjson "$id" "$desc" - - file="/etc/docker/daemon.json" - if [ -f "$file" ]; then - if [ "$(stat -c %U:%G $file)" = 'root:root' ]; then - pass -s "$check" - logcheckresult "PASS" - else - warn -s "$check" - warn " * Wrong ownership for $file" - logcheckresult "WARN" "Wrong ownership for $file" - fi - else - info -c "$check" - info " * File not found" - logcheckresult "INFO" "File not found" - fi -} - -check_3_18() { - local id="3.18" - local desc="Ensure that daemon.json file permissions are set to 644 or more restrictive (Scored)" - local remediation="You should run the following command: chmod 644 /etc/docker/daemon.json. This sets the file permissions for this file to 644." - local remediationImpact="None." - local check="$id - $desc" - starttestjson "$id" "$desc" - - file="/etc/docker/daemon.json" - if [ -f "$file" ]; then - if [ "$(stat -c %a $file)" -le 644 ]; then - pass -s "$check" - logcheckresult "PASS" - else - warn -s "$check" - warn " * Wrong permissions for $file" - logcheckresult "WARN" "Wrong permissions for $file" - fi - else - info -c "$check" - info " * File not found" - logcheckresult "INFO" "File not found" - fi -} - -check_3_19() { - local id="3.19" - local desc="Ensure that the /etc/default/docker file ownership is set to root:root (Scored)" - local remediation="You should run the following command: chown root:root /etc/default/docker. This sets the ownership and group ownership of the file to root." - local remediationImpact="None." - local check="$id - $desc" - starttestjson "$id" "$desc" - - file="/etc/default/docker" - if [ -f "$file" ]; then - if [ "$(stat -c %U:%G $file)" = 'root:root' ]; then - pass -s "$check" - logcheckresult "PASS" - else - warn -s "$check" - warn " * Wrong ownership for $file" - logcheckresult "WARN" "Wrong ownership for $file" - fi - else - info -c "$check" - info " * File not found" - logcheckresult "INFO" "File not found" - fi -} - -check_3_20() { - local id="3.20" - local desc="Ensure that the /etc/sysconfig/docker file ownership is set to root:root (Scored)" - local remediation="You should run the following command: chown root:root /etc/sysconfig/docker. This sets the ownership and group ownership for the file to root." - local remediationImpact="None." - local check="$id - $desc" - starttestjson "$id" "$desc" - - file="/etc/sysconfig/docker" - if [ -f "$file" ]; then - if [ "$(stat -c %U:%G $file)" = 'root:root' ]; then - pass -s "$check" - logcheckresult "PASS" - else - warn -s "$check" - warn " * Wrong ownership for $file" - logcheckresult "WARN" "Wrong ownership for $file" - fi - else - info -c "$check" - info " * File not found" - logcheckresult "INFO" "File not found" - fi -} - -check_3_21() { - local id="3.21" - local desc="Ensure that the /etc/sysconfig/docker file permissions are set to 644 or more restrictively (Scored)" - local remediation="You should run the following command: chmod 644 /etc/sysconfig/docker. This sets the file permissions for this file to 644." - local remediationImpact="None." - local check="$id - $desc" - starttestjson "$id" "$desc" - - file="/etc/sysconfig/docker" - if [ -f "$file" ]; then - if [ "$(stat -c %a $file)" -le 644 ]; then - pass -s "$check" - logcheckresult "PASS" - else - warn -s "$check" - warn " * Wrong permissions for $file" - logcheckresult "WARN" "Wrong permissions for $file" - fi - else - info -c "$check" - info " * File not found" - logcheckresult "INFO" "File not found" - fi -} - -check_3_22() { - local id="3.22" - local desc="Ensure that the /etc/default/docker file permissions are set to 644 or more restrictively (Scored)" - local remediation="You should run the following command: chmod 644 /etc/default/docker. This sets the file permissions for this file to 644." - local remediationImpact="None." - local check="$id - $desc" - starttestjson "$id" "$desc" - - file="/etc/default/docker" - if [ -f "$file" ]; then - if [ "$(stat -c %a $file)" -le 644 ]; then - pass -s "$check" - logcheckresult "PASS" - else - warn -s "$check" - warn " * Wrong permissions for $file" - logcheckresult "WARN" "Wrong permissions for $file" - fi - else - info -c "$check" - info " * File not found" - logcheckresult "INFO" "File not found" - fi -} - -check_3_end() { - endsectionjson -} From c67469d96b052e49b3b6d67575886a7b254e6308 Mon Sep 17 00:00:00 2001 From: Razvan Stoica Date: Mon, 29 Mar 2021 16:20:01 +0300 Subject: [PATCH 44/48] Fix systemctl error when running inside a container --- tests/1_host_configuration.sh | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/tests/1_host_configuration.sh b/tests/1_host_configuration.sh index ef96286..9fc9402 100644 --- a/tests/1_host_configuration.sh +++ b/tests/1_host_configuration.sh @@ -223,7 +223,7 @@ check_1_2_6() { local id="1.2.6" local desc="Ensure auditing is configured for Docker files and directories - docker.service (Scored)" local remediation - remediation="Install auditd. Add -w $(systemctl show -p FragmentPath docker.service | sed 's/.*=//') -k docker to the /etc/audit/rules.d/audit.rules file. Then restart the audit daemon using command service auditd restart." + remediation="Install auditd. Add -w $(get_service_file docker.service) -k docker to the /etc/audit/rules.d/audit.rules file. Then restart the audit daemon using command service auditd restart." local remediationImpact="Audit can generate large log files. So you need to make sure that they are rotated and archived periodically. Create a separate partition for audit logs to avoid filling up other critical partitions." local check="$id - $desc" starttestjson "$id" "$desc" @@ -258,7 +258,7 @@ check_1_2_7() { local id="1.2.7" local desc="Ensure auditing is configured for Docker files and directories - docker.socket (Scored)" local remediation - remediation="Install auditd. Add -w $(systemctl show -p FragmentPath docker.socket | sed 's/.*=//') -k docker to the /etc/audit/rules.d/audit.rules file. Then restart the audit daemon using command service auditd restart." + remediation="Install auditd. Add -w $(get_service_file docker.socket) -k docker to the /etc/audit/rules.d/audit.rules file. Then restart the audit daemon using command service auditd restart." local remediationImpact="Audit can generate large log files. So you need to make sure that they are rotated and archived periodically. Create a separate partition for audit logs to avoid filling up other critical partitions." local check="$id - $desc" starttestjson "$id" "$desc" From 38ac7ef8d874ecf541d860b4419bea59765a2703 Mon Sep 17 00:00:00 2001 From: Razvan Stoica Date: Sat, 10 Apr 2021 12:01:33 +0300 Subject: [PATCH 45/48] Fix the printing error when using bash --- functions/output_lib.sh | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/functions/output_lib.sh b/functions/output_lib.sh index e40fb30..e13def2 100644 --- a/functions/output_lib.sh +++ b/functions/output_lib.sh @@ -20,6 +20,7 @@ logit () { info () { local infoCountCheck + local OPTIND c while getopts c args do case $args in @@ -37,6 +38,8 @@ info () { pass () { local passScored + local passCountCheck + local OPTIND s c while getopts sc args do case $args in @@ -59,6 +62,7 @@ pass () { warn () { local warnScored + local OPTIND s while getopts s args do case $args in @@ -77,6 +81,7 @@ warn () { note () { local noteCountCheck + local OPTIND c while getopts c args do case $args in From 15aa1eecd5695114b4d62eb555ea5dff691ad48a Mon Sep 17 00:00:00 2001 From: Razvan Stoica Date: Wed, 14 Apr 2021 10:58:53 +0300 Subject: [PATCH 46/48] Update remediation impact message for test 5.31 --- tests/5_container_runtime.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/tests/5_container_runtime.sh b/tests/5_container_runtime.sh index 50eecc5..f906a77 100644 --- a/tests/5_container_runtime.sh +++ b/tests/5_container_runtime.sh @@ -1151,7 +1151,7 @@ check_5_31() { local id="5.31" local desc="Ensure that the Docker socket is not mounted inside any containers (Scored)" local remediation="You should ensure that no containers mount docker.sock as a volume." - local remediationImpact="None." + local remediationImpact="If you really, really have to do this, you should use user namespaces and always ensure that the images you run with this configuration are properly audited and that you trust them in order to avoid potential breaches." local check="$id - $desc" starttestjson "$id" "$desc" From e4d9bd155657138972138378b5c40106ed017bb0 Mon Sep 17 00:00:00 2001 From: Razvan Stoica Date: Wed, 14 Apr 2021 11:17:22 +0300 Subject: [PATCH 47/48] Set remediationImpact for 5.31 test to None. --- tests/5_container_runtime.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/tests/5_container_runtime.sh b/tests/5_container_runtime.sh index f906a77..50eecc5 100644 --- a/tests/5_container_runtime.sh +++ b/tests/5_container_runtime.sh @@ -1151,7 +1151,7 @@ check_5_31() { local id="5.31" local desc="Ensure that the Docker socket is not mounted inside any containers (Scored)" local remediation="You should ensure that no containers mount docker.sock as a volume." - local remediationImpact="If you really, really have to do this, you should use user namespaces and always ensure that the images you run with this configuration are properly audited and that you trust them in order to avoid potential breaches." + local remediationImpact="None." local check="$id - $desc" starttestjson "$id" "$desc" From 0a59baa9fbf5f7b372db70248dfca9a1d0769850 Mon Sep 17 00:00:00 2001 From: Razvan Stoica Date: Mon, 19 Apr 2021 09:51:48 +0300 Subject: [PATCH 48/48] Change "Impact" to "Remediation Impact" in bash log --- functions/output_lib.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/functions/output_lib.sh b/functions/output_lib.sh index e13def2..10d58c3 100644 --- a/functions/output_lib.sh +++ b/functions/output_lib.sh @@ -184,7 +184,7 @@ logcheckresult() { fi globalRemediation="${globalRemediation}\n${bldblu}[INFO]${txtrst} ${id} - ${remediation}" if [ -n "${remediationImpact}" ]; then - globalRemediation="${globalRemediation} Impact: ${remediationImpact}" + globalRemediation="${globalRemediation} Remediation Impact: ${remediationImpact}" fi fi }

    XD8Bk@#Q8d?MOD1%g})X zh91#`?=+p&<$i-`mK%m#0O`sqlXMUG>s`wIomPa)aO?b2C;&f&f_z^JfKM>;!GCYj zd2RI<0o~s9Edn>tn%dI6I!&;f-{m*ziuJ`60R>*3HV_NiCPp>`rMYg^c_ygQF_6^l z*6}!v15-7*36=l z#glClrM$@#m$Q<&G9<02`ci|w|DMWFbJ?N6Z1>dWctu0+H!jI;?$p{)umKNvr0A9*m2;DmZsg=t&2l;y47fK;Hpr#WD`~I0D#MQXj3B`c6?= z6C=xCrx$`ET?XuJn+ALP6D%r+VWoE3_L=naAIzM4Qe~t0zdf3I=XVeGhS+R|yw5P3 zsPj2QH8mEgYw}m8`_oJ!WM;no;&sx=t`&~yl4K5DeUG$U1rACh8-$=+aLHj$df~*c z?AoDF0_0T0MSoqx)r&=vpnh?)IXg=bq-yQzn#G1S6e(lQuA;Zi$1ABLm-6z{Ehh*! zF7|1`pPrjFZD>H6e?-e|7L+uVchGuG8}}yv7Ir<)40zH=9_?WhF^yw0!#*Uwkq~~& z0+Y#pKC2f*y$QqxEfK0I0$O@HR5BGBY$6{C_NWZ@2 z+JE}1{TLen{uBPFJHkb+finjx=G0%z@8p+io4o;9{B7g-M6QaWW!gu0YTBp%hv%%` zkH;JP6F4rEa@sg3S&i-Q%;^@lsi5A%vG!Xa(5gfaQA~5o`tRlEvq^l|9xu!6P2%YQ z(`BpUje!DF7CfYULZ8QnqJX3Zw_nS@i+%F0jBDGfe#@BB zvht(cXT|kpz|5^1KJ63P3y+|iKK`(yK4HETGnsD;oY3| z<6nJl*!BGaP{cSOI<0g)Jw1hJT2_r%08Q8JvDsbyqN>qyv;-X-EN`6&L%HMTcv+;J z;1sF)jl&ryT}`JMhaw8lTmT1Q?hu$7`u2_z4kQ{! zae*L|+d=^8v{<*H?td2A z2JDBXYl}HVfVhfFH3N|K@YF*S^3f6B5rk{aX3q;?&4kM{>7Kx;t)&57-)%bEwi_$N z$-FBftodqxb7H8xM^jUd{EJ>L#g1fYMQm)@_1= z`K^idf|6~|OCWPP)qHiaGYR4xOOFZTb*1tV-u|gW&r>{-oy8_ zz|`vpH=t71b2ITUDUpOXMpVijj4sXoOI8+2pZA4TX_DK8G{77i+4ZY_b~@vF=ZWecT<6wAiS4<>c_Ij zfE4Kj_^_HAiD1_$55PocxoYNpr*)2$ZZ4d#O1#bYip0Bv65;Wsyh{+)3VhLaCcqef zqRUx^f+r9loT72tByib6FRvBenL9%8Y!aBOwYzlln+-nb2(!Gmc=tBu`?S z0($}L^w}Ol@aU;Cv!=fQ9QWxtdfe(g%+DEjqg1IRI2rQ%8+qh4^c7}IWoUp#s=0u( zlmfwZK*3LSZNABQcd=(a-DYchbLMYBiy zAyi@J1O>0`W>fmyQ7T+CvR_t3@gv&m!g4ZlA49TZb{m-60Sf^TW1R=(*Bj(p75M_*8 zqTpwkBH#$=Y!6oR07A#p4#C^f;Y@d6rqb&uv@Wni1Z06~fNB>+g$Z|P}? z9_eu=1_)c`wZ7mz?4ICwz&w@Fo>9(`^mwDd;2sj*PJUem!&(P|y5ed&&M?OVBGy%5 z`-km^*UuyG-jrO?7r$6j)DHChbTdFBqn%)l6;GdaQCOsuIn5ana;yjLC|^-8{4)Xy zJ+v2Z2Qi#XpD)9qcGE=sOr4X#1>~5;J>c|A3X7J;WWq>YwPwh)ZaP`fXnQfG>xU3j zcu?9JvH;>V?hB2Q_0t@C4F=mGuYd$$BBj&no+0h0 zNV6qF-ggc9?5*oBAvv?Ab`5Tww$I{khKou35ZZdg4l^0h^^3?Je!FG1;s1p9%cVxK z&C{{_|1Bf;Da7LCsW_g_R-cg?WBvUctSW^@jyD!+lWLZZl5BT^l49b0-}!ftwP?gb z)3R(&#awN+OIhpFt-6Km`!2-E)@T|=%OgcCyR34SJth6!OHd_!ZuKvTkY`6bJBPc* zyH}}Bvt>Xl>H&7~Etgly3sk#jppgLWd$GRQe6eL+i+cFv!~U?&(}(3`1FWVwFxybM zp$IALopY*%k1xE!E2qb_>>`MmTLZBoJ42z=aFzus`m`5I&oczagcgGtZOK+-5^=;Kg3|Ab*o4-du9!eMN$rOuz-x|f3?KW1|a z(7Lk<{;iAtc2qR@Nd$(OcbPGi9SoFw_0JBswCgM;v2by+{DP$VgP$``lA7Gaba+DQ z46gf@_wdLixiddQzibq8^m^rOJ1pjDe*+ZR2PMX;w(}pEva0X3H1kgE+3D7!v?%p4ke_Oy$H>9_wpY3k{uJ&F zW!qvuHGd63HH9Z&jXslL&k@&y6wSMT?0b11**f+h<~cV)&=NL$MusF7n6ZBoAveeb zqEa0UqN|D!T)Gu0UAg?zk#PUf;C@WGC_2(48s#BeCWXviT~tvSco(z&cNC}J9zb1q zBM!09S=TPpl)Am|wT$%*SGiS`XV26F_P)ENnsrY(cFk0b;RvXOxeS?Cy&CLPoLEw= zO;_be-tfP0R{?QQpE!eJU?tcgOA9yWq4ld7?mVahg)yekU7x$3dnnf?CORm?ruO1v zM}t#0)8z~cNi{F{@av96-K2`=Hur2^XSC(*)@+`yIRSn6jhmV*$By6oLiU-~DR+4i4`;0Tyjc_~`7PNk z_Fd8=Q!eU3sW?j!gc-00`C|BnZZO5vHBFSQ;yK}$lgMX3vbUW{x`?X;+?)0)R!g2O zP%&dXq4YmeW|r_XdC{Ct{ImRAK$MO+OW{q-6L-2C+q}iD@MBbM; z!tMm;a((k&wfXiN`>Ojwz#bG+zzx9&Cld8+yRZ5Kzw8KN)`}LucLNEKt+>orsm_aE z-CWxH9{HE@x#9%O{W)LBnAQ>L{Qa)|%1{wAtqiyK2;0)x6a<05wuoz=XZju2iH=x+Hh39oFF>78f&Od-`BV+B6 z<)(#yf~Lh?Q+ZX3AA_z=n5R$eCzMbXS3+*?C?cc_2@Es1lSz~p@xbu~JtPhAYy1I^7J@H_J;$)q7&bUFm9xFOzgg25b)&Z)NX0{yNzc;D}O zFhBLgEj{MFh^Y?5gx0A!!S%S-cVJo~@NP)B1y`WdvD$j5P%A={=|Q6v2|BZ4EDk)H zJT%(9;AW$IR?~1m54%mx|Lb7rncuD2BF54>LS*aIy$3~eycc}#QK$Gw$~Ru}8YV&t ze}&5}q9fbK5F(^1+|)AWP^?=8o=eg-<#hn(P_wJ}hH$Abqt!?_Drn1lz;BsDWGOp# zSu0Whj{^M7#_+?Lu~IW(s`N9LZgrwU)T4qySDBdtLVvpq{SXBvZ2<;`k3m?5%av#- zE&G9@{_-S`U>=kvyyh;BBUUO_{=!9GYv29pR;rIM(UQh8FFu4&yXR`#m-NH2-RG%S z;%@qGyD(E*|4|6e_IFs80)$CH65Pwr=pkzkLo}#1B`PfU{QX>W*Uy3qkU7ih87+T) zeHHrFvL%qQA*rS9_W=Q!063J@tGo`5AVPYup%QdGC${9bd&Qj|kGQ_3x+m=6-|eGT z+eV^U<1zj{6d&9pOW&TmMU;a*?3O0tVoPr!bwP9cemZVCmK8&7Sk>>x5Hs7PFq41x z;@J{#GnvOkxvS73PC$8-Hs#2m`vr#zW>vdPqIwRli6Sth$f(Aa9n#HQ|03qU*FLNp zwv{5J^H)~|0lG0k!C)6r@o%`@9`~){cQWDCt?L9pXlY!pX3Z68D1=J|l3v^P8D4tT zUOVXEv7=`$yq&4R;jGtu&k~4lE_==%PAL{{)L$W|1~)Vz%vC%Comt{EK)adfYH={a zWWtCt8j3cqp8{yc8cjOyR+jmZN+>=lNx+L;1%J-?IH*FM!^46j@toGHA7FZRH^93W1PQ7KZNhLQ&PHFGG1f+ z60?$WG2TjIZ^-g+lE=C6lmt1E=>a$qigEcfI|1@Su96K98DEfPkKmKEA_PUoP11(9 zf!zmO+jT8lO4W=6;WC<+zQMC7l9(?__M7hAad6`q07lI~uLYhr(d*dzFGnJYS~bjz zjL?Yo$11um&bn2GDS*vtoqFy(AQnTbTnn@t7OE|Xgk4f_Dtcg{ODmEgE{DRu0)Qkz zFO()DS`mWk&l66!0EcN_+Y|Ez5twgd+jQROMqBf6-OjMKg3a@qYMR#VasXR?pPJl| zgP;u)!lbuH3KEETkb)>!&(VY8eXBG{2(yRi+62KQlib6P( ztq7;aRkR#uSrL4)D_ej$S-?5s-JNv+!uH{RmE-1u1>IyHjH3mp@^kb1h z_{)DM4ZF|7`FzW3ovjt&PO$EWqjBJ#ZYR89>8G z^lbVNhKA$CuqqmAZbI%XAg25gUUbNLM~F}3TnGu*D5w?uE5SVNfRr@jbVY}d z(%Q2nGD$bdN?^?}2_#-sB&NB(upe;1b^s8?SuUoV`r+BvFn1-y38;e1(7?0PoX1#j zd_+0OC#Q_)z5>&@)U#@F{u(Eb&!Q`t#p!WST%5%DX&WHOEOmIWz%<(J+hhLo5_AmW>mT0d?qmp44>0)NG)fXijob6&+y5Ro8SlX)Y*}==rOTZ@L(}s>r`tG2M3u z8}&%D5-xiNGXfdWNR9LgqBf~l(^@#CVj!(xyTUf0EXbu>@QnrN{lMQH$lLa{JxdJ~ zx2BeE)G4hRtAZ+2t^gSkqZ_yGLf3K#dYKhqYNfDsDLAC14csa$^?Ynp1XtqN&%yN~z!=n1x`<6e6(S0q-Bqu4E7I z#$C5VF0^aUOjL&d-lO6g1V6~15}tWu9YPzAHpco!2o9o@j)DiDEnP|$om$)kf8PA?06r6FG%Jynl5&IE9R19t`E^Wa^kHT1-5p{M_U+`}1-zjsbRiC~zn;Bs{8% zrN7KThA|9*9^>|N`u#HRg>f~F!)IO11#VFTtQ!s>ss@Q8kdj$f%58$kz{}9;_d5%$ z2~p!Cg^ij<1v5rMo11?kaM0Lhw>C!E`LtbM6}400EFwz_;R5olyIs~N-V)c=mNVNC z4bbK@qyIN|f=yJF#p$8=qx^QayY)jF^0XUB)(0@Vp2A+-%A4k%&F!LH^sth`_j*Hc zab&#Xmg-Lz4P^4WEHi6(!D50kY>blRy~&1a2T`-0?1HL)(x2--`b;Stv8!rJ+MF_Q&Y)aR&oXQ2bI#i z8rm-Lf%J*u-{Qtp@n;|B(rub{J=)&FEK7Bq{7!vzx>1$-1n_UQ_Hr{LZM_~3R>i` z5GlM4;&T(X2IRgf$+kj&yR;UZu=AA4Y0$Uvx4ZRj?xzHvD6c9?QS>18VwtO|`g1Pv z0_+#9*ZHnh{f%(mV~a#v_tO2m%d%XtK8S3}f(F(Br09c>&u&!V z-Ei`K>Qk*+|GmOf^U|XJc2jdQ%Mk9EUpzDhBId(tG*;Gaqp}7YB~?P7JpVV9@;~@C z*npuVPytAj54F!GDpM8meQKx>f&yx@Uov~A*P)t&MZnG)o-8<9*L0y+pusDkgx>j) z*H$wPV~9VPzDJsclMo}9(xP(FJ=d14IZ6{OX-Pgt!Zz~7M;L4aVK#xLinp#Y;O>zV zgoBCNtM}C4oM3)WybyK~OyJClx2VyN?-R0kad~7el<9BXev)+jh{ zMo9W@Vwrd-PREDr1<<_cn##H03M+~M$u-gS!Ds)m-2dxG{AZv<#YPBH3 zlmOi>o-3^7Q1f`BS#!z+uQcG&oX9WY(=6}TKqhS}S65RWDYba?`Z<6K__Ey>AcCEK zHIlqPJ3lgN8$Ncs$sEG=gOz{I-EImrp)KaW`XB}M1~Q~L5kxlRpZV9CmV-yLLYNnc zlyE-dwNU#c5U(qlP1btRFTf1OQ841oEYwOemX3(scyJAKXpG6{yI8SMdfR=VHEiD} ziRl#kn=f>`Tgv|ubXQEwi>l(oNSIqO9Cm@8TYc;g&}@5J2u1Sc-lk$eH*gaouKBfA z^oea8`UmySIL&Q&Ms`YHNRkg!Z~>Qf6Ho&L5-xnM3_ugNxi#;G3}!|qL9Jl?ZXiEyD;nF=zG0G-Ye5>WWa#qA zgPxbMW~exL(755}z!ad3-os`E0H7k;VXW$ikn{@;(@ zPoD`*AA`QJQ#GX~wa=8rgmQrfr2g}hk_6il(~(h?N~@ji#zG0alro2d%Tl$DKHc(2 zMxCMr+qEzMyese@;7_Zjg_D7DKJVIJ_Kg5fZ~~i`Y(eBj#=&q&;Th#oEVY6`T}#7t z;c-|?y^L5isP5hlx&F>pHyy|9?0V{Wi=i*1i78oY^cWjJ%W)A`+z0;u>vsI#apL|f zG<8o^Azms5n)Xm$TkiKy{^>1-g}`I;QFhHTeW@b350`00)GxyNM(=Nqa1i}BF#8{m z`_$0^VjCxm>Q_-f*L?ag7waFdZe?wE80xj#M!E%>b)}#qUbFfO7}0e^3aztH0@E|1 z5zt|MMaix2AN>EcCaL(jY6}etX*vS`;?Cv1!N5YHfs95JXs2wQZj@A$>NtN^=*~|0 z>u38N$xCs(*jW2#jrU0bdw*+c41If10?Lit_t|VYQVI5Se#>NZ1LF{M+$L*mmewm@ z)g}E^Q3I%kFCeOv|3Sd{iyut~(Gvk{>tn5d0X+T(f${(QSMa$**Wc5lqViPmE$08! z4yK`KI+=BCdD4N_C|kJ#$v+24+D_R{l7tI$%N4pcCDX*K-zW82HZ}Y(-;n&Dzx|6P z0>3it{GF)gWusYd@k{8Vg}5cp9On+-7kayry>i+=rajL7F`2SAEW{OK^|#rQaZf)f zVWE19k`8q0*n~V}EAI0bNtFlh({yWS6vXw~IdJDK6KWE?3?8DD& z5o&s+s#KQZb{8;sHJ6^)ri{7Qa#+TTuPLLJISMaAe;ZR9u*jAVtucW-@p`tm%wOV5GmVa7C#BG1o;-A)tH#iHcaMi1KZpRv|?I_Rr3~nYV!JRs&`rifKFE2s1LmA zbT`3RbeG$`NDnYOayO0E^Y}BU9`p$*U`z!Bl@5f`s;y=wNw{>hl(ybg^zv7r3x>E5o2#WLab$x#+NRM0xSE%P zPc;G1sic#GA+1uvjR(DZtJ7T!ujjVRf$8sIj`+p*-h11PM>_RamuHV~KD->7$0nX? zzd9Xjo=i3`Hv5C=Xa2J{i4L%TUy+0FzZp@-hI=8*h4KmB=8XGgNr0*xo$#{E_8eN z5l};nl}7_@3EH1D)v7-d0?33V7|p+zy(<3&))v_c%C%CU`-v>_NrfV?`Av{8rq-8u zY~cElV^V}eJ#`blAEqk|>E~UzAWlcm>O}`oyt>BB2eco9e{w7dbV|i2nw5Q1*b&Yj zb!jm_)1966XlNYuRQVwa3d)w4@q&xww581g6&!Od(DvNxMh}g7*(Yf&)np-Der8q0 zSC-8wY6u)<*1Z@(YcMgNy6?En+0mL{-CzE@C@u#jyb0FIsLT1=;-vuie7wu!1@dRWN6L99rgJ;goB6AA889}4 zJR_vnL--@f{d!?ED>lr>G*lXx4-`Ra=pa!8D8;iYWvrXkQs}b zg+QxKjT-1@ZBT*U|E;Z!lO<01_$4tCG{3hdZ}jyc;IA;tAG~Ju5F2j>Skf~}A$!yK zs62B%J&f$g&xFYCDbwS?MgZPLoMLOfAwq7LQx(5mXwceQ_`(ibT5bBylv2Z|J?a>v z5k(_vG3RmQ5ZMUO3+~bI6KTMo1LbEa8pr^!&xNbQq5LU(oTnD+oFFEVMf1hsAt<`* zci%Fh8;lOJp9Zi{CN&miK! zSZ_x1o6M{fACw{L82YIC*cQMf5XCu`7^u#4KjT6JL`SI39s|v;xmXcswjupG^cLZA zApL+_Y)nv{uACktFH-i@rnV7a*3sM-zcKbahhi8MpY})U^{E`)(4P0(OemH2w4yAl1E6Ild#Zo@fwhGr%`~lT>S- zgwpUp=2P_PBV0B^hp)ImokFvYcVhIV`k+D6Sb-`KNnB3Y0$4io*I-`BZ(Y91WdcQ# z3os{BMh)NOtwsY?IF7mR1+GM=Hn8ttG@3cJ8RRh@p#rCtAV|ZfBfAI3IB9KJL9%2LiS}rG`HHkuq@E6gh+IbO!*`M z@mU#}mvuSW?B%sFT9jf=Bxy4oG%~hm8EwL0^o;epgI~uB2v>Y!r1dH$TXtW}NZ^r3 z2C;%;!-f&VhnrwfAb@qW?TkNE4l8htl<%`tOON94nTL55J3^CV5Ct9mk&>acou;#%T-aT}%r)Ii(u* z*~4^h%t^f&EpG{%lwoKr93!KgHTEo;3kcYos*^8G5E?#zJnN-^C+s@uX5!9#VMga}W*NHinP}CLtjhZD|~{e7I$!Bl}znVNC2s#y~T$I4&-=r-(nU%poEty)hu9q1 z@jCf>I_R1p9A1;|j6qqgnlBs;x)FMgLNgV_jg@Z-+Fb)F-`gyO?0kJ&mQj&+5-dbN?4gcT_q zmhizqk7|LFTVYcZ*)e0t)V;H`x$z*&0>)NuhC%ByM?WpLqdtwk>XtCokX1zonAMSE zQ6rZVAwY+w&$d2k)z;{~-i#tb%ATGUG-ZZgjF$z{!IrdjSti4WA7#C38NW^Wxsme~ z!euS?AuIu@U_v7E6aj#qMU7WBGA8tF`4J=?S~6oCKJ1guGx0SIP6dVpMZ-6<^@C+0 zT!HbCmUl7PYWoCkHMs_!q6fC1)WhgIH?;l9A-Kh-o7k3vzp%h!n$AA?;o44J(B+>N z4gMPW4w95L_?@;(um$VI%YPBEI8bd5=fxCc0=n#*ewC9AS*L%kP-A>mIVHxx(%1o+ ziFI|#l5*zU{TCg`Og!}qJI!H>0L$9a%v3>#2&xF(BWk0VCZep91vrk-)Y{M~%G1jr z%6hA#!c~38sA#$m5^sly2Lt_7U2?UJ+Le=I{J(^W1WlR#-~yD112A~JLkOf0j(M|q zdGuH)S)u7aIxNDx^2t*Vj_%NaqeM-=AhPc{q{AG4rv*>!`0G|efXpEvQ?ER^{$V|V zI510ui6Zvx&Pn)p;nBd z*+WVDR{GMd4F$e}6A1`pf_*wQ3Afx}+GmuBw0EPFcB!((B`8IkK-tX}WqmMqy8#z+ z1_|jV@OWfxT)YFTMb8EU{XSHKAgh3p7+@nsq*pL+F1Cejfn0+dF8V?lmr5T^@U4C* z0gm)(Pb<*vD@PBMi^>gOz7anih}t|}ic&leCt_CUp>76zRq~8$=z(dbLuqP|_3eHR zS+F?=zCxol;KTnrtp4J1q@oA-sG6%G0^Ic=ZGi=sbN}iW4Q^DSgZOdog_*@&WI=w&O$_Fr^ko1*3ESYA@cY=zawN zf~<9(vaB;e#f< zZ$4&c1EihIv-)?+5vO18d-H7fESHXxLY8ehIsGt>@FPxER&tqD^Q`BF=gTv(ebC4m@U|_%p~cs3 z)2^Qubn3j4WHMbZ*3~K9MwT}0n3aR%OEjpK`kvo6q-r+h zo={kU6teP+m>vFm|=MUxJE#br}{(60LuIDW7!qU%x^xza=eW;?bm#Zaa?frDgKLs9JUZAJ& z4an!b-75ei+|KGz=JOpt_V)hDgXEF3s^PM8(0R0*bCwO~@2h@4KIn;pHWrTZyHC6% zKvqx$#gz6qy>gDSixdTv!D+{ct*L4!yZ56ZYAFkDjL1RH=35&N-J|qTt-_n7eknLS z)=Qc`;mJJ{s|B(Fc4_HN+tt{Ndnl0huAT~+KQ+Yct=?|qdHX!wgx%z_XZmxZM`x0s zuKR9VF*qyP$_JzlLk4hQ_J+5}|^)&52K_3FSI2aMq5azV= zSsTBiWv7qJPL3(2eNKsb8(dcA3GzBQx4QRSy^M6LG)(J}8}FHWS2sMX8zx=~J0A2| z))EY9Tjt2`SWorsY+m*%dd+(IUzj>7PMKRB$nYGdh-F$nXL;zZyx_iC?N_)Jx>9SN zI)sv=oU;9R=A{Oa$vX1A*vvON3~OT4PNEEhdV*e~pbhRLrbdNH1#nc_`>NkTVRZr$ zVEjPuK6?CC3H){jB=1-u8wlvIXdjoy9NojS?g}d;bxqvZk zH48;0FT&;VZ=|#mSaP!Aw!a#%&W6=Xi$FAg4(`=A}m%EX90GEbwRTmBUKKOcvTN--1p}~-EC8q2VMFid-q{7JqOk}ia7ZM{gUcR~)&I4I! z>(#puP0IOsK{%#ZPKX@xe3ZRba;aW%jBL>(Y++7U@^YHCks;|7{6!Jo+%uJg*G~SN z!fvC~PdQXOiFCS4iTXSn&Hj2$2>T0V!)3jQp(r){$gqtkS>*P%|cXsML(B z;0qhsWmu>l8E8$I?U!#0r=W@GpeZA*{u;uye8#87wXnf_A8D5E&Wt7kd^D1T7#A|r zT{AIAWA0Kj*Sp}$FIoB^H;>)%g9!QPbKjmt%lz%b7US8ZZ-8CHI%Pw~GP3SA`=eVM zd#*%1yw&F5=TQ3Pu;;Isbcl&?yKJ^OS5@1(2m!v2J{B*<0xYP>c+qv#+N^4P{~e0; z@HHxrQ~r!~=xpSj?VF=rPVKX2cCM2P75SuYOmH=Q6U>Z`6iuG`gQXC;~( z<#UIZgZ#SV14vxSyty%>=!={;y}58O^7kc7Xx#cn-ZH6xre4Rv6(VFoO$~A-lknZq z@SUPPtv!rxh|_*yy?hlOV!?nYDE8k22l@nu=TLlz+QTPz zBz`cvelTgN5Hw{kUVtEeq(liY{gfOjHEnfq|BA2IVfe9aT|Wa7Gind@!Se}S6}vTO68Ov9(|47aujY%auH+0be^LwH7w!~W13^6&HhG_8?KyqNCE)UR8`*yLpfd$1j)|3)G1UVMAJBN@1reukcsS2&BkqVc z%nl-aauOQ#!6ecaOd<*IM%3b{SS?VQP^<@-K6;`%k0m3XrPF!rO~8kAe5q$(71+v% zOB0)P`jtC;H^Aiv0V4bcnH_Z^szQJ8E|FeaBR5Ha3o|qKljWc8dPtx zIcsE?+8JJPuG!U5c6X^1rf3UqYK4Uk~K@=Jx-(sqy&kTg5jq}dG3C3nzEof zS&+!hd(5u$ZkaOTNOTFZB(`;rS!8x%HYw%Ri=J*od>fgDsTSM*S>bGnS;sG^pd7hd z`7tsNb3p`$Bw$_i`;H$0%Dse#iHB=JIC{r=WzaDFt6GVkHpAv-#}1pG7}Z_Q`LhJn zyk-)2ngdTeXWB;>Ll~4s>&mb(+|+Wms=>|Xy}nqNNXpJSWTAoZw4vne9SNi<)j8(@ zccP1o=ImBs^9Q|5;sW40d@TBU-Sy3+Ywvri$O6ClQ=Z5;h)XA0zv0s~CPf@H@>4`< zgy@t_;Jq!Ofyl(FWNJu`%)Q7c`{eg{_DTBxM7Os+kDg7{9tNe2AV~P3Hp2A}O0P~b zQ@>1HXftW1#Px0=t#7X!GF=t+x}Ry6aPt+@f|1n`m(a!$t4QH5L!oSxr8TLKh}?4B z7}377)_M!)h>@o9H^%!FO>=^`+^3Dxv?n%FqzP;y=k0*3f1NCQShMr%u{cnGrP@Om z5xxWr@5KySLP9+HeF;Key(N(FWi3xEt>~NvT%>Up2?lmE@o|9QDkeM^>B3)3I+yXl zGCHs!*LwYYQ%@;4I1uX3jMJNC%V1P5;3?fDjj8KzOyWn%k&k@35D|bQNhl&nFnm(l zJ?R_v3@b{~NQuUp{g7Kps#0%(mYx$f8h+EM**h4;+rf;7sd&r230{CS3EWPla)0egTbsF&oC#6W|@7NRGPi+t4&Hv+jH7zF>n@ zs7XAai09h7>w%dQW2=#TnLMI~d`_bNcAVe$=-IHR$8?yZ4okLWGCz$-b?hZYF>^X+ zN;(K|+{#1JWhkjpPtg zih!haNcSL}(l7`D$`I1;#l81_-o5s7@8|cIYsrF{Z(P@P#&LX3lUckPGMd980|ZQq zq`Kzg%u6DJ$&-g2Jue0gfSKE;@*(yW7ulB%pBxXY1DE;lz<&G8?s|*L#Or3lH2<8z zm8h3$DOWaf!|p>*gm?;W-y@QibT z0SpA&m&g^;B)eu}qelFCDTx7g zkz-V&m(b2eT*#{NXZ*NIW|n&j{v67XiWKpK-SF*zUdw3>XJ6&&_C^VzZP^}g)a7r( z%ztp=hu)AolD^{s0rsbZgBgzARbRiHgBHM^?xRZTW)+J5Ei(gRY`j2uMi@HUuF%3r z-L8-C?g@_#H!`nv!ZGf}f(7i##XDeOzgg$!KdL7$HqGSUoZh|LK?S8uq-^#)oELlr zbrZ4GYR;Vv2;qFy#)f9558<91Ry_7!eQmmM`Bebuz8;d)^M8)TPrC+1ma?uWwq}>{ zPdZ2c=vqaqb8ie)O(zMSTqsQescX@MSCrUdW3i(4$6B9T=6d{9xW&-93D-kc$Y8+P1zi>lw}P<)_AH9HJi7|Hc~pidkG9*rD!{7)3N$ z&BdCB&aK!+L;m z%cF=^JPkwU#7oC#E}X67NkZ>PVMMzSVJy|?kD;68o|$?s26NA`ru(3shTGuJ+Vs<| z-^D@E|DQ!Rev*68Q0vDT?WO$;62HqX%RIrw8-hA-AkJPi%Dk#%RN!Etq}^SN4_7(U z9jtCIK7$A1BXwn^D5F~oj0xZd)a!_e7L5pkm_eeRrjT3>-jlPstsza;D}fQRozdgv zufJAWi8fQBf(dZ8V@iHu8IoAMB00_iC9~)%(MyiaM?Mey5SAdk&iw$wYpD7$WG%4- zM>CTX3(ulUcNuBM2dmr<>S@Ia!nx7}{VhMdv}1-p4&;n5J>}ff->*(e3HxJ`J30v}})9(~}-(@=;omTt-9^ zdSi)M>C&WipfQf)5^&~DUeYKt@EA7(9cypF7k^K&a=W z`YIB&Yqv3BMdtOB_EVBX=E8xfY9K;;+1?wxsNj@ro%1A^42N7iNt{fr13fLCjBby+ z&rJ4MelKn0Ac!VGGY*xK@G@b*qrBl9gj^8)$qyjAtRYx?@a5Ee-ie3miFu=jkE)KH zxC)Zvx(W188xD!sVd#B*4Rw0hU1f2cau8g;7$dyFPrjj_lZ)G}1yV11bjSDb@d@e! z9N*iN)Lt8wIjgt#Rz?0~01?j^Q~A5qF}j?lD5fsfnOH-u-HVw{`c}{ zrFM%63`CJHyVacOgf9XW(OGD%0MW?Q5{f?As|du1TSv>sIGAn_*=p_jL&`{^CmrxG zt$CJrGWVc8aNto;jcdx;)ufWe$n`fVm8W6Wn)L=PrZta-x<<7Jed*(rc$b9@${qex zKOtEaHMQnCfCQq5+KzT54s{&#aI~35XXB!ysIS#6nO|*!R)EVwCJB8BkBjJGf5uX>aTU$&Dc!hl zYskWrC&~9H&`IxUw$LjjA>YK@>St1v^E5FL6kM;JNYzW!)%fc+=`I{{D}I8yjIp8H z2}|F!$#^g3io}a6*Jkr^5&0v5+s?+xfCv7jSlX9b3TEtnUaB!~saTf%FR67^6CaL8 zuda_zYWBFl>lHoZl!wsFc?Z5&+NCfWx0j0*i6MY1d@oPF)_Rai_O= z^e51Mp+k8kA$v(T`BF7=?jWpH!+iXd_{a)g#esTs?`3(24urg|6Un=V|&G<_wlki zj>7&7hV%EfuWJRPPlywQ_AR|N!}9M>AyC^5b?xRK>}Z=JE8$QIr%>ND#lFyrQ==C| zALX3x=uUfw%QRk)GT&{A$IYMdyBdP-KnEuQbsM z43`~;M9t3>QLC1B1()49dTN6~NH#Ieej!en7)5(XnvoJoPO!;vI&HT9^>o^hAmO?D$dd{($T8h2LhgNF= zgwoSfwqmZexRLw{D_*AuTy6IeuUB0z_BfL42eiO8e0nP(SjGFg91|X~sVVPu>3-*I zrvP--K@i4qaT|oCqqaAniLd*_iuIo9T8SH}Mt#?s7rlpxRLAbKpiEdFb`t)&gn%re zmJ}s&*E&F{<0NBFUs4<4g}Ln zdUk|i{@y?opXaZa^p!zQ+D@8xMc(m&=&Ee=ujq>50Oep(^HYIrlFv5TZS@j^;1%eg z*Kcy}ZT+4K63Ra;D)n=iQPW?($`u=}YTa^o4agnyNO=MA;#{ZvS=&bMU>LoFhG+%N zMq2(021i!cEbjW;QyMdN<9lwdKPFFewOc)!+D|_?Yzg1ZWjPVsa;t$48EyD$Or9;@ zvt2ur1G(NCoE1nu9QQ$CiW5u8e1`9>*W0nel*#R&@yM!5MZ-^J zoGPoZ{>MxQnm{)kJodH2!smErQxqp-<9;j}87k=sbGP;rb0%(-iTLtqMy1_H6Xb1PNdplki;Cj6gp)()yE(2Pb91+4*Nfs z-J|b4dlM|)L-J#RJgo&yf(w79%ct>TeRd%VO_0N}{rL@Tmo%+rXHTYS?I8k6Me>{{ z#5-58es(w2+gDfGm=#XL;aK&-_H@5=spc%l;^yi!o;VD`JyP@MB6VE8V9>bCdB5i| zow#4h>k_xjO)n7EFXlGhH7C`?k+Sgr>hBtp+<{GMkSgq1u61FTY9WkuDVw(Pm_RV( z&C+g+trF$>ch!5XFsLgNsgO<3veT3y}_PKv=(4gW{x{^>Pncef9AmxD)b{&I9xG+ z?z)O&=by*RxOcyYG00dzC{^hQEk2aCY4~XZ(MWRmG%G&Znx0Jf;-ZV@ng@TWFix!K z0iwwN_JmQnf@9tjU3rTFqsKXD$m8u}D(y$X6;1ea!K&GViu1sFk1d55OM#}>fl_-; zNa)qOZ>C+NCO<)FrGb111GNQvDtW5hf3Ao&t==4tHrMew## zyo}3s8D#xZhxX~ zI1*h>Fd!dQ{)&dYL$fGdEZg8+n&Oqrt>Ne2Zq19sT=I0wF#D;8yPcP41%N;U{IuHb zfugAH5l>-Rt|#bGGFP!H42NeLQoZv4MajBx-Fe%IQu>~Xec@?;F$cG_6JOh!ckVxT za{ZWnjADuQmDpF3rrPSb4Y{4e!~fM}A0B@3X|!7RT8bzH~z<; zBaOf%G=rC)Vaz)h>+-GtuXUg^3?%S_bQosGv_bdng!aszIj;t)-hprye$kRuq9nZq zu^7KLZ8s&wvXZr1SBt5+FWq!%{4jc{h~rM*9_g-x<%2y0bsrlGjPR=SX5i~r6KgW* zp#`V*Y!bIM7=Q+h(u&xjhrc8jFviayd-=bAR#NfDi7r$cm+AyvP<}nAl19m?fm5-dB**`vn zojzjKMH>8-xX)fcdR`2|p?uK+`=F^b=N!4#>8T*CBzHIogY36rkj;B&KvqK->Nz}B zS@YxLKhX`sLZ9?{lQa*!?BQSg(w#CcV54MEg#C0KCM8P{n75MsckGkE~xLEmz2ndzUEZ7zVfu5QH4 zn&L1wYK0(K!f#t!X2nG@?~Un4gq%S(5cIxeh4!B@QYfb`WOU~#vs$bC-85&DiLoZ} ztuD}#v3%4CUe7hKasNPexYYPh0PaZrG5W5P0fk+3;qSgqqpsUM!2462=p@RT%m|Wt&s1lhnIUMsO~<9$o19DF~Zgh8@s-quF~h zg_EgGHMVgoidc5g6|7%qr%GQ?5XF>@^Jw`VJV9BB-J* zQIwPA&dZX%!xgU9VUVb)}T}<;zr56rW=u>YYhF_Af1f+)7upxYChri37c-i617k z<4PN8HSyT5^|a7w__jm!6kpT!qywJ+;*VX*BPjLr`@K%%ddVes!=L`V<(k}+Z{$!5 z;6&)hy^5Q_CFl7=fps83)l=AZZl_}q1vX$?yyOSkq4RQ8SaZhQ4y{Ztj7z(9_RKm) zM#C>bes(li6d`_1DdCiF3|aiv>zPYGh%ePU>KV=_UVWv^bMfr9aQWA}_;G~!%cn-H;Qu6)yqcd}B91$4tP&cON{_O=wYW#dLiDscU$x-PX76wi- zI&nICMV1KVahhnc;uPK#pF(2&iMaPY;x?1N|M@0vvb(n>PI;*7+EHA4J&JbDdGh?} z0{_ZK>eD?Vn$E^izSQTR+_z+g*Yi0{Kb_ph6MUwCDhO|E(6>PpTHqcq)X8sL;gi_0 zTPB@hyj{js7dnTd zjcX=%P4c-Ocjc0xKgw=xOK3C>O+$nC-IMQiu6r6{eN6#Qjd{u0!Vbrjvp02F4iRH! zc2(7l+5Bz~k&*9$*L(<8TR;oceIn%UG|){qKgqwol{$r_PT{+PsSa`MpMF-X3ssV^ z+kJ5RYzf*nE+-xg<$|^W=?#Y-ewiW2@gI6k&ilDBI^sb5R!T^|j(Wcv4vI9(do>F4 z`z*~rinEM~d?rmauK$2{)Y426!)!bNNc9nFoG-k~iN*Q%)*OH?BHQ&|03qgZxSk;h zauq0<`N(B>nAzg4<5ofLuJC zY4UzLm>|K+ROW4G36eoi^a+g-+&!g+*OTdNix}L9r#Eq#F0*d6aYR)@f_j9dh+SKK z`-*>5xbddeM4(`i@D0>{B}>t0DXX}C)I+Aggo@9xoS!X`rW47LgcsW5xmQ1{s68VS zj^lO^c-x?n6J)BYJ&xk1VU6I`3Ps{XRj(|aY^qPeue>DWtvK>xtKu1>b#DDxE@Of) z*GWxzY&RT4Ao=N0lXKI%K}2gR|NKB8++z18kl)+J0RktBwQ3c^Y#cT6((& zSid;B*Iyd;U$%SzXe5J^nJ3G_p*hLR6Y*C|t(z_h^fG961ZP_Y9lyDETD38+1cqzC zdax@bhJ*E>G%xqwqT2H|c@G}~>3Yt;)*w>LC{}GN$`{f)P_6l+|9BaKt{&VTb z+%6r3VM9(*tG2Q^WoEAS8TZdBBXNmMe$k;+FTCByYb`Y1WLgK@a2Z~1{J645oV{>S z6^=(1{QRV}J3p`TsbHaM;v%k^l{1wg3gSVSW6$Qu)y;sONS@gK^xU};*-1|0Xje&bdp_3uCN z%eHyR&7~D)22G^W937-%O7_&s`mHH9ncxwVCysBr40>N_@80r;$bHD;HSvP3pCNKb z_bjN}(wt0XgORjD=pM7_+r=Op1qwVfGR}Cnjx4(usho?Kh6*4E zcaOidcV>rcv%#^=u-f_xrdxqf_QD07U*Px8NmBxuqh3X$+|i)pYal!z_vr^fjV-k{ z(c`PD%pM4=f~!TFqc3HskxOY|j2Ebq)uM0ds~#CMQ~u%wPO*k9?L(G6wG&THYf!e1 zD(Pix;aAif994t^d#Bi@X6$<**Yx&M$n93mMw}U>yT?rAiE1BtWGGUd-Eh{lx5BBs zZDAL7k$v{v1Q7~~|D<2)u|AYNFZ}{gdT`W~9^aEKhNKX=`y>x1^m#Jzq&9${j+<4k z3Y;N!@3nwLW#iW;EAAl{3yG&BVP}uc+a22RC`AQXBoo@Qo~SP2+0M$i10LiX3AQxn zrS~%Er@w>vF{ryiY%NAOsw&dOkjU0E?MxCa)zSYgkzU~u4G~9}0{I2)@$L+_U}m^$ zP)TmonLhKT7^@*zTYKY@_fL6j%Ra(Hh3W~S_{!~)pF9XLD9HI&CGf(SfIX{h$4!Eoo zj5N~ptrHR2ykmf&)8Bo?5Ah+Y9^!6aYy-TX=B`6w^>4ZWu5?xHxfVV|7Bj8fgigMG z|6-!YVVPjj;`1U7-9K6YNG84nydM;dpQ~rPL@}gLO)OalY>uZ)3kHddYb~TQK5j|N z2W)xq(nXQu7SK63r_eQ}+cTdHbI0*>VUzPQIMue@zVylr*r(CErBa%M@fVxGsXs06 zjOmD!x-ef-r?8Yt6n57)Hs=Z@Q@bd1Gy$v;#SPj0wU&^#RO&vDL}~k(Y^QPN1{PrvEmHUeLX7W3(kjc0(=E zCX)A9rAu=j%Lc=9_L1u-Y6rFK#Gv7b{epII(q zii9D3WM522R~WSRnmanjOW&ncWl+F!&Y*>E=9-TCzSV3T_~g)+otIe@RoHVWW3)&Q#?L7naDH>pRI@;Pi-{nIEmrYL4e7 zgU0m-d=EJ;Kdsgk$oWDL>e^oa2+gWf%-!DYC;&!l>34NJQ`L^Uud#)zyz>rD$FC{B z^y?!7F<~!5gi><7?L_fhIF0{De1eFviovygM%a(IDMFz?de}7eab}R zA_>ALgigP_8`h7{!L`S#sUj=Kw`zSiI-Y>U%;4AUp8Q=}H2PSU^PLLhgD*$-FJ1*< zeI0LLm&%S9HPOY`@qL+?nbou7yQw(ws>TpoWHUuOrnQKdWXRx&0;=rnCQ5ib_D)iq- zvf~jiOvH?ahfd?qthMI59-(>Co8s@khJnmC$~O)KkZpTwE%<4lk_89(pQ)eUp$nMw zhuO}{|1myDzY}mi9B^}CI&*p%&fJnOE)5nuo}A(X|MZLV$5&iq*GIUhk0^QnCcjR>Z?u0QuR3kwa43x_oe)eCHL7 zU$=8Cgtn*BET2jEG-)xlr%?xlXOruVoeBObS^G9( zF?twt*ocQxrl0bwey?;k&FK&;tSh(2`JB#{B?GZyuP98$UD;532>ee_O_gCao~>_? z_%Z9N2AOs%c&Del_qFewO?t%{3w1Ths$&0X5GnC00b|{nAA}WUFU(%YzXcmE^G9sX zDhTIZTWn#u-sfa@c=FU@={HEi#;NUv;k=i&a0n7qoOt+AmV<{aez5yeJTr|E@^@5} z_{#fGVN9CjO+#S-f5j1w#qfttItP-!G&{8b^GI{>rnfa-{JdX`-7m`vdyT}tvaD`1 zqBMG?L8?^@D5dv}LY)Yv(b6@{Zy^#F;@C!v$9krqYWxlS`st`SHs_?%gDdgUQ@eRk zO@@Q+SXrBEwc!GWxCT!bIS!)i=Ffpsn})&DA)BI@u75~%I)yi_7Mb`TTHqmx+Y)Eb z(bgB%L1Z3Jv@!16-utd*_UsoBKEATF>(uApyy}=ou@KE?w0kZ}kL(9bSQ|UaFrHqq z5Q}LXXYtMRn66984_yt%#USjJDzOS7czJSAB!a_-Ql zur$H@Qm46$WE#!C-FO~_7o1~VrK(ESs#J4&hVL*~yp6l{WCuP$eUuHrF@HGMOGycN z^BdxguCRo4YSIt%bGPCw)>=9W;5PXKAv}@qcGR*q z=3`gW0fg_!OL32A(Ss$r=P@@7!H$A8DNBJ&B(;%BWcI|~i>{U7*!k6=r@jiipo`;U zJ;g#mH+vdGSgOi6OM4zO)fY-y-d$2y?|%2LN0AIs1Ka@ICtmm%tr!F?@;ok&Dc=py zFCq>!X&f{W5dv2}|6Ipp4 zC~)Q%zVLimm3bavr?;4l`)V+Zc0WNK0%uc#e24*V#DoP8$lzKX+sZmMvjFV=8a6GS zW(lQFyWIEWQ*mjs=(lDvi_GWzuS6FBiaV=bi7s_wMjxB)L($%?4s69-y$vDz(Q@^% z^2WnlJyW0$y@aT*ZW9W)KQ5DPE&XvI`>cv*dxBm5#Zxvak3SH~T{2QUrR&^QBl1kSp=($d2FQ#$Lxf&YUu1?G7gmpS?hXz@AqBWmbn5# zIhbp!+WViUWgtq^of3Ex;8C#CVi3C6uZ2AXQwn1EUZdA!lhXhD9QWK&W(mP!zH9%CIX12hQHi8`XYa(QNS z&kiD7!=S%99SUu|tVWX1)N}`?vWClfo9eGB8|~Yg_%aJ>H5*}5`zj@PiBJ7!r9~hD zLrxA~B#Ynu`9NCtFo`R>_J{7i?OFL7lkXf)pm0CZn@QcKr*2byf;T;rFE!+0$vanx za@nd>9_$Z8AvWt9-y$@Fb-ZP(ye}t)<&Z#t(798(9{^_q*E(Pds7_gdan2cYwVpTs!Rwpk9p@o7q{j@p)f+)95M=qgR1-&dyhtVOS+9D85=ChE2X;-VVYJ@BrqluPZ{t@9m@+UKX?!nL(~KM0 zY~=eiB{Sc%KTMr5igKc-<(9y0{s7-@eacv111x++KjCWE$oe#(+kO-ByO{OdBkhpK_d$&Mcd{niAx1?XPcx zF0n@0`fyCnL30{Xg#L{*hW&@(n9sILd&F47Mb5tWmn$WOwBWm*c?JECB#kiSDW(NP z9;)Umex5EhrO7BLOh;T97d*#Hb%!Bjv=hV;N5LrG1Z?#c2zAUW3sEiON!*08t_y}FU znwwYXJ~ml`b7NtRi9=UOj@O#FkK7oR)J$>nw3e8VRS*P0rEP%RMmsS-v21(zO{fgB zjXNjc+AA5J=9e}ss5r}qQbqw+UmPM2xl!O#f-Sg8i|h)#Sc7>mHs4=HmF;%nTKPV} z6)eM(kvqG<_uFqh8{sSSYb3nQ?0de`Hu|#vHhw#YPF<|8am5iQG1VhdD0SZwS@=?v zU4Yv2G@oT!;x(Ay+8=miSKX=~&9BXixYjiOw(kX9V87T|eS-*PgjW^ijS8FIGKsb* zBg@|&cvU|&(^h?>JAev>Hy623%RAxgeD$ESq2xRI6&rG0*wTGV7)XF18e1fm$7e@p zcNK5o2GOcA3ExC5fYq6)Ks})w>Zt7D+em{wn>>dYP>pb4igBiK&A?Uy<8H;intVOw zUp9hS%wa+L!j!ObN?nuvW_n0a73kUVbFOkW>p)98$8Hz~kixfdl#hPs0d z6}N9?JY3#tPxoNsWJ$|?a8*Fl+44rF#X9>?+MuHBu%Kmco@w0UxAk+LmZs~QjpbeR znE;0f&mT|O??t_(%e(zc|K*==czBhY9QlRfqXJw2^N>2AELVv=N20TXdk-?R9@3o) z?EJY-FUNJ#iF0$qRPbc)GXcWQis(!3 zfBUrm`6k`rcQV-f-^xA_&LBm9_=w1Ko!mb1m235g)Mu^z;1~tAW0bqfBbpDw%P=ex z7;EyQ{{(S(Iez<98zrp+l;n`-Ts_1z zx7s^J^?f0+pI*rY#xwQ6SFV)wEF-dwLd0^C_|H(QBi|Ar=479Sk7})nhOg`v5a0dl z|G`bT{qf)Y(~o~oHc2CcPp&tXg1N?KGJMteZ8*ngb)_iy9jA{co;3G9&`pVyK?#0wNo;A3-xk-8KHNXo`H!!b*G8Y$?d3;f z<|pwVKl%6X_qSgrFa%?R6S~x(Xc3epk(xm`h43YujnOP-_sH@`R9;oAAuffS%QeqA@aM0X%P!Y47m={=WRp z)jh$!{m`XdnAV(seRs^0!qYO_(8J$8u`>88V)3S&KKt#(ujM5>m!Vet2ETn=?zL_9 zZdN1i+7-Ia@EJG-zdmejF}57QMdNeQeLtLT%!0K=^kDB?iPC`uy2L|L+g3!Ez>1pr z#Fnm9@4}}1m$>WgD)qlQ&j`2%CLB8C*2s`fJ>NXn!6kr2{1IOVWXe>)coQrb9X;)> zpR=ZD1f1F;%>w!RSUk2Y)xfDg1o#j?FPcF0V0jZz*z8!IrJuHdS!IQ;2>6$!GvJs^ z0IVB28+{)67~-Zniq0^#NPOODczXhL zZ5rTMYc{#>vE9-+h=_DV$lC$)=5{`|CH}ibiBAB~bK5}4aB~56<3T_whFz%J;=X?T zmWu+|1J7>pTOF5aiXvdP&q>qfP?`#W^=<;qyteG$?h-q!_uRrDG-rl{xl_>}12*^*M6=CLyc8OuQ$QZO1-Yw;s>ru%@!oFt<6)?AvWt5-Jz*{I=SfJHU3J zvrw4yZ->nPYBSz--*oxCTspC0L;u_d%#bbuV3z7GoTnJQgp`vHn__@4n;yun+J$&v*S3Ic7{ipY(+ znJL&2G8H%3p>Y-pU`Udx4X7P#e}hYyA*5uQ;#`eJbHr|?r73ow8|6X9)(mU8X3DZR z?jSP3ZMElFx?mw-T?3MASlBwWTUh}-~w z9f(CUwL;)6MCcIEO$PZ#MG2d}CnXUG1C(tjzk6RCl@;I&@p{_zOt z$#1=Jx7ah>onRJ7)yv_)p`6(BFlBFr0)c+N!3`7C~x9F+@WTK@7_4y zjvsn%xeYAoG8Loe(lGu`GTj$dV@i*pT-6{K9|HDq$CXHBoXO*0x(M2R-YqW&m~QP zWt~|VFj};|(|ns)U#y9m9`V@NDBeyt90d2D>sI%jqPd_ft6Qc|+kSbdqWf|beQi-h z_qT&9Kr@HLsWO?j2i#l-xhm3~fyUGZK!XfF$T>cvEx|+F4(+-{4QrX0I8ySv6rt}T z8@8MO=N$b1H?0I*j7gt0-{D_Ohh6!DI)NiI5Fa3Pp1VJ|JP@1SK&>*r*|I+Ce}FfqN92~?$C)=%YfWQctr zYgqd!LH)&$Weq1=tg^|PXq;dWlYU(!^65d#M8bnY_Df(8w*tH=Cacx^6!tIazD4#+ zvazvk6lXc|B`#;+<$EQ72E=z+dtZQS+BzWn`1m{`s=i(3gxjPALiqiokV8}V*=@-) z0|GVg^f0Qk&rnV0dB4;WAma%VLA&_sDSBmCbR-9Zm{7ODmCDuKmjPP~IDtC$>1c?9X3(S2R1ivP+ z{-rpd~^QBi;MDbhlLS*c( zHEJ+uGi`wBp&xD`2YlAU>4rZHc~4$|*%0G^d5YX->HVyF^o6Sy+@agLWD8KExxHVQ z@58`gftpZoFv96o^X|VXAwUSAKQ)a&-hYC|fBi`rW^;e-O(b&oh|RDR^5J$4+!j;+ zG8pa1Z-~Ncl5MvJ8`iaKkOrl5LmB_@L@;!yJ4ITOg}0+VD)$Ybloz@LfDN_lN$CuO z#Rw<=aC<^p-h0-!`UG9dN$-EZI*&E*UsZMs z^M#9Z^?*^bUnC?09P!W=CCF@y!b(P8DyWfTz~@%=6O+W)y-CT0mewkE1cVA zX&N}F`>tco$6r!*HFq|ukxj37$rjraqazXL&NSOn7Hw9$g@ zKy?8wFE%A5CEYL!Ao2@Jz6kqYdS>uhMOEM0^uwndHj?X?Tn7NvJJHE0Sz(BH~ zR^lxnd^rS!?yQfw_DUk%!pEkOEc87e{BX5C`vcoBlQg&LmDSE17;RU@B2=cWYWMCV~90fok2$x}9dm^!@48*T~32oXA4A-D#I`CFTM3r+bzd=+hXd zVESUTe1ItUh%NUBq9aKrMsTvc69@oohyeg}u`^*e7_mLVn=?(?tAbQg0jgnfh%(SM zja-Hl?#3y^Qk=9kqwAXM0T`F~Vp!w{K>VNvkI2e?fB0(`3%EwotY*>0I1APqWPw?+T-%jz&|U;`At*81E+uTVPcFd2`}Xs9sqWNp z+m<;0ciw?Cq_d`G;#u1U_JCKg*jxTT0ODcZ_V6o3AO@nn(gmPaGR~r?uXjyv9-RpO zuN>yDWGpZ4@wbz-gm93-6R##dTxtz|~IsQSwBT?qDF6c3Xr)sv_8u|M0K z1X%ae*8G-bX8NxcbQSbRFI%3OQ0dUw5um@AN#}#s;y*!0CPE|-FjwrVFj*xBvQv>; z5M*p3C5kYEjv!`Z!!qNSMX9!j_grvgiDX4+IFig*RB@cuQi~ z!%VhN8B7vh)`t8X(fu^66XDvwBkp%jM(>^=nFomX6{&T)lS&<+kJJ?pFaM` zXm{F?4$5lUj7c|e3dUi(3$F#%$dhIvFpn#vwF-x;9- zV|H1=o*OM0*nO5^lfw$2kNIaNq5xf3<9`3)Q}iQ|zm02;@LnZ!doAE>-h-N~q&x{Ysw+PH zE;M!X)kzOmpBBVT#k1=|pXbg;tz33`rl`-I+NWj3DPQPV5Y4-Bq#-LlE5WatY7|gifp~vTMUY+)TN^eFQJmflEApT(K^4$ z;Ln5bBeEdjcNn!O`R{X6* z(-HO~BvAE2{IM^?R{7;dDt`9$Qj)!KKGO3Aip|K!K9%fE@qtP4TWoU?rRmWYWi_V>@Rg7A*lAnbFQ zdaf6$9+`>r3dBOgPqT{dXpx3vMwsQpGuCg@s2>F0==bi5Z4>7++z#bMjt)EI&+GHc z)=B*e>;v+J*YntPaOlQkX^K@7y2S`4>+fRLf zAIs@6G;e!LDvJ{mr*}K0CVBJT?X;v2ueMiXbnBCn7qY=?g>S{XFj22k6kU{H{4|_r zxK&WV70vh@77JnSLc@9Lu9hDTXqrar_HXwC`{hsZzGNt^QQGiPlH>K)juj|meHro0 z&w{edgACpB>)X45-CnSD!x`-_eec63=AH)a_f*CFq{;O?j1+DUN%Z~Jw+@Joof;$OnEn?8?^O~N+y%uHq08PR~9HVy`AE7&GMg}J; z^yJPC{DjXPi>^|w#xJ5?2VGv(M_V3Is1+(fLyww0LW!;uy{>lWLJyBxztAtK@75@b zIO%0w=K1B+IQs_i$XIhSshMJqNvy@L69Vw~b8<|Hzu9F1Rp+Z9!2; zoG-AORB-SpR?z^pzs-UJtfJ$J|+dXELcy0z@4L zx?QZ#m2w>qVk~}1j8pw8xCX^Q2h0?AJV9wU92lm36K%@2+tBxgix2_*u?p!Eg4emc z5C4As!CSX-?8F}-G2d4bQzp<4Bs4Z~i8Bt%H>;O2#YD=VLdu=sPc@gqTOX{7N9e=F zAOs<9OudbfemQMl}19SU&;u52v<#;p^kM{<1`f+|-zj&5%;zx5uRK3Od z&O*OyfO_wI^PyKD<1swalkpg;AB+Ha7mLpd1XJwp(D+AVM8xSjv8$j-jc=VWBC8!w z&R@)STw;1d5ZN8J$z! z*2)IaHJ1d~@8+N5Bla(wz*F}vn2Uha;lG*#ADp@+Y|;^ksle1vbiOCjoZv_;jc+c- zGQ}|?3apz%ytAb&i=Rt;`vJOhM4Hez(|Xw+u+U3~t|-aLfGcHxWpkqsmh%En)Ts z_4oq$SOR6nGfZ_cNZ`tLsLTuT+>t%6kZRUcRNSXako9LKA+NkDR#=3*4lR>;yW=tH zXPSK=an715=iS0gpWFI-yvUe)WN?JLA+*od!gzm2?S_!PgCJlc_Om<_3~(RF?~?!a zPCOEYieG=HBj+ttD#vf#IDa?(NzLlv(Nqy#{jmd=)w@l&Rc?;m#@m8VSgGwIAN7mX z%G7+d!`v^v&kRyue8wN|LdV44t`O7a(3TibrC3620i=(P!4Na?Oz1!pS~(Ef9k^%xm)*z`V9H z0>1|@hJKT8AxAHBz0(d=!#h)d_y)VfzgyTf^zcq3CBME3S%VTH$99cUYkb=2Bxp@O zT#I6<+-^6iK60AuOF8G#nKG>J%hp^w2d|_hRpPqtEW5L~l;Xn0oK5c3+XXk-h-&xr zr7JYR zB;5ps*I91TeQ9`yhDCy5!|rq>Rut8Mi!jZfDNu%4tnEY_!@?u)_XVm!P}};G28%^3|88@`vpQ4^)Y~5`I=KKN9}g zy%TY0DI?W%{ItT}db}>2xF2a^lQ!rb@QJHT{3z5s=6Wd4@@*v$zgM97{)~xd!N0Yv(H)YTJNXVZwSn={&UB5UB6mrZ`UF@!XhvcdL2}6zWKMLq&R_bZgOK=Cr z$I@_Td6I+Fj&3H@@Ge=%JYQyAgL$90!VP;(zU&B#)jFv^P!noEmFpFHUZ*E z`^5~bK^=+&o6h#Nl4T@*iQ&;TmjaW6M}I8#bp?Ck zvgNT6m3`N(*ac%LP#uVRq&iOwsc=ws1!tTtIg&krY9dN%4=cas@vP4kfbH$lt&LJE z`~%9#^;R8^W0xrCF@3fmn+^Dv$<(f?@;IVi>aHsMq2_wNo!O2c!h2#t3yxHAprvLcMreTRL?H$-4nURd@>W-J|!7iuc&_WZz#j_U6EPBW=U<`NIZ%%BzJ zTt_)SfU@Kh@yma(N&e0OxvdG%^%?Qo`cDOxr$X*&E&Ys`FNq=3xY<`W?mn(#C_!dX zFO;S0Wo91GhoPkZl2TeojsYKq?jqJDzC=iz+_yOW)y^^&MLb-o1=h#e5>J6cdA&Nn zWm`_0`K}q$BRfTP)L92MQ;(kFBE#5#+)bKe?txy&JV&xTJCm%xh@_M@-#Sl&#yeYy znij>oYHY`rE(l;y4l6UxCQB1ooT*yR^Ildr0o68DhZhxX>U#03<8+boDeW5lknprY zlkIX1*|AcSZFu!bzCy^o#Mc2-KE{m3H&^zDlxifmymWSM{9W?BC-KDqRAlWoU~`(&CF z>h+pT*II1;2G##H=3-U)>jNOQ4&+Tw7p|0wG{~JW;|?>+RgW`MI$XSaUtA#l@}eU* zCueNR+Z+(mKfe!eI%}-@W92;cW^a9ho$m4u*9o{4Rg7<$cFCkt0E6FT?bjqHS~=G5 z13ep_;ij5F(rHZ)6i;{u)pLG(w0M`~r|))s2=g8_z=oo7TMQ@LEyyOkwe+mdEO*dl zvQr8Mu&O>)ND0DESHj*$Vf)?J=(R;FBKJ)HpErx%;BESIp!rsO0G|9Dqj)sopjy=* zO0Ii5g_J=v!BN%Z01R(jYR#1cuRD#uDEW1rRS*Z>x{cTr?wZ2Kk71R+h zr~aDf0Ye$bJtJ_$tsIf;<3vj)hjV%!v^1>yu?=TDmbhBtL`%}Dvzt6zk?Ur-4WZhv~AI=10a^J1DJ!7=< z;OK0HVC=#{ntF~NXM#E{QjIJw*r2+)uYvif)rH?6&}*y|Ciy0Nx+UaTDp}7YpTl(G z<4_Aoiqy}Jb36-^4f{-30nqE!g!VcsoF1%;Hgx~?Q@6v7pH4jwc+jHSaafY+JJPp~ zQcE*Gc;t2(9lqz&NZys3Ck~ZkJqa|>cL`r_`ETIxU*sv?tC;}p*~upCK^gJOZGULk zu(f?y408_ODTurPSj($H=kLp7Ef=|cqg;uOAFapw30riX#@?w0|Ji0garW9i%LQbT zuYYQFrUEKkAFu6y7K2-HX|sT3lrB%xC8H5G+I}ZDc?w0_77m*IjB&R55z$CBM+z>i zqe_fhyhJH&uC^b6_KgVU?{BC!R7e&In*er81+jowdeJ)sA#S<$&B$ZjcoS{Fr2G0E ziduGKP`do=$`+H!E7x)+xD&(yWr1{1YK(HBkrl4oloiVQiq}BR z27X5W4EmnjYq#xBcxIg%yB>J`k&6NCRSgIqQSiW{S)Wc4ebZVM)O+uF8{U&A(TPtJ zLI%@iVtD<0*rp)tPg-btDCMNjySwLl=sQ(7@>(Vv3}vnyw1ZlF8Ec8&peJ_pQ5RQT zn+8>;=0)#+L|QwxtZH?&;BY%JG&#iTW5A}f*dgoMa`67@%3}R1!vaNBK0LSkO9@mO zfV^v;pZ?mtwkob=H~R*BXUDuqGr79LVaIbif8K{birD5ut*o(W^-t1ALI%E2S5~O~ zULN_qiRrXFKWNk5`4si{L7na}G zq;6b-+)|NU(7yx)=u|V7v6EEWRQ@L#AcPQy3(eGsU~bz$Q`e#&QLow({%&sZ7B{c2 zO%*P~XZmQ-#PqIYgaUSo|3xxTbc3yh!erfah^b4=A#bO$e$Uc99(^XJ)O9miC{nH;Yf9j#u<=*#h z=5bYOxnESuO2S&zEK9|qz{MN6%1fv8+?E!jJ#GMNm_7!f(Ao484V5Zpi|4TnULsuN z4|&GOM{1CqfYjPx-8^C098hAt_hhq91yvM@c%`o@`yNy2D=WmNe;Th^#I*F-NHihk z)p05Gb;k(h-)DvD@%JA~qVp? zoPl<*fyrcXR#nbD5J{AEAPOc-#bo^>*FOw*?z}EhMNJ38mW854AKkcEdb(LD8n|WV z7dzzAF$uZ)td0_GS<}3yv$o?a-`3j}&;XtIaM9&L6U9hE zp=GS4(aV8g8YSn6w}^=5@N9UhbX5p$@XnQXlwxrzu?!hyS1*|?N_vL{^+5Lyr5f&H zB~FJ*7nH&TlQnQXC6<;un+4`Qm@TfUwIANg7WW*ekU}{1{lT4jiq8x?7$MWrFN{GD zmpl`SmgO7;fWovbaEV0W`gx08X+sQ*F>~;J--QZG8k<(9Y;aYv(1{ygMT7d-1nSPDx3e#Z-#<*ltT*P+5mtRlQNbe;D z!vc|@OV8nT{uvvsJT7MXX&@13XmdqBy}VL-^T?LKV47@9rFN~qaZD`xijS0PscJqr zSz9XPiQH*;Xie9ocL&170ya#<ixI!W4Y>~sdos+~!sU1` zrO~KzM-rk?%oiu|^2nbX>6cGLt`}V*xqAJO219Yj$k~FmT3g$z$hUbY3UWjd2~Q9h zig*$6JW|4dGl5((vwQ^Q+F_@2!?8_Kg?o}W_&v*vA2uqGfY`!`|j9nexl6lZyJ239H_eXQlL4FH!}?7KKCr|%@CPoNdAY;8TJ+F$A+9K z8*5#Tixio2?n^qk`IThnr0a&TmIBhK%Do+;XYD%Qqzr@xLJ(DY2rhJby*?*bv3?4r z>dcbP(}Ndb_&g}k8A_XHIh-(AyD}v;lc-WnO?74ucfM^_#-s0xVQ#3wuCoir{&xF> zi#|ivG&p^H+L8RVpRrzP-juCI6UH(uG2ekcL(PJRa!Rd$tDn6VlONI#_@`c|(n!v- zZ`xK4Y2fTq8l7c;Q?;k!l$zEoOlaQZLUTe{HIPuuxynbaZyD!(-KLNK1D8dayq63& z0~*x*W3jDN>?r1M}=#W zfc<3(JyAtbCc<`Sx&TilJL4II35gpS(QECtIEqKE0IN$KwCm5{ ziXm>SupnV2;q1$|jM^c+Fe`FTbt>KwE!b}tf&1x)*IeU`vc4U|m@WD^;a&wQ zU2@SP<&nXPt{TWsE_!qf1p6Kug(~gj-xDI5@4mjr%}z?lj@}Nr{TMqCURBU~r6VEC zDSY9Q#I1W~AU6=O%I=rjSu&L=?0qtAUMUK1?(Q&ki3D5r>-BkkBW!_?%FuTFnRB$GS4P3(hu%d4L$kty(DLhepvD=OpIb2=Ox+rg; zz=*f+VVf?XFc4CrhVoM~r}CMyAAG6CCMn|%M|Yg?+&V#d4qW8-oU8#~5o!0RO5y{h z1d+$)o0YdG;*Vq?eE8Ug`74L1vUEyOxq1bNfZ( zQ$+tD7DT)um^j@uGVYo>5}k2aj$7#ZNrq!>`gv?3cBbn=Qq+@wC{w`Mo8pSw>l^9E z#3@NW$bX2B!wBI$=_r7DEEa!msrE}H*U@4R`FjPa*KrL%{u`DFtKYyPR$69k zb5nU-^WU+Ylq)#Czqy4oUPJh?LJkNMsJDt7?(yv2UTiiX%?-4`4l^S7vDzB**ZIvC zBl_|58Tq;X-NjTSIzu}8CR1!&lCD*q#Yscoe{z0`q`?YP(U%)x9~Y~%xp?l{#v51|4t@}Tzb|&osYWYKR-GpaH}zq8mJ zLHw?@1jq%xS>hr%OH0l`%CqCq)?|s7H2Er)(|`i{n-WrSqeWQ!8Daf*?++_C=|DuO!(|Uidxuo+6f)@3GO=3f!^9K)tYZTY2yp%Q@Cc*UhuKOtjej zw)St&H|9x|jIEg&FE&8-mUWYaW%3xtkst!_=DvVd+0zY82Ex(R3`d;*BR_HvC!(1P zy^q7V9raJSLy9l~F_Y{!m=QioxI~TZ%*uGo;x2$*DMFW;-#x15$aD6cp%u-0V z76CZK4)Ud1w7*yX$A|TAV}rjcglH8&Wf$RHm;7hFpqxYws-?KC#-*fMU~BoD7tUU( z{n}s|YP1a6(`WVW<9J7DCfnFpRxG*=61(gQYs(WaLD}3tkS%_Fw7L4*{S_v}`39h? zz4M$N`<7;1@0J+~`aAB8OAu=%Vr0+%&o}$~2=d?mI%P9()sV$!*p&XK{qpZW`S(}3 zEsR|dHl(jxGyeG?|F0ka_wW7x?@fCx7n|X!y?BECVJiPn2u+pQkZP6KRJiWnFn5`~ zF~6E6?9M6hOdvn|lg;$q|H)AO-*re4=Nhcu$bG;^UpaqmdRi#$?fjCswT-hab+B$O zKB^r%DF-i;J_hg0p*fztC$>PW9>+&%{z-M&6Fe{SA2h zk8-Mi{pSn&zuwdalhJ?lk;}Q5t;I!OAR~F+o$=|F-QaV#Nxwgmcg3$#TqX(R_C1|X zr~D}>EtI7|X2y~C@mb#^29xyNl@)f~aNd;Qx*Ja2%c|xgrMDl98!kRjL+;1EeQ_uV z_V)|=2sJVVlgquVw&#x*hQI)bPyR9Mn?b4R-r1me!9;q=G(b4IX9Mha@uKvBy~r}y z8$ZKreXb-s{!0-QGKn>OIsuZ9G|7>La3zp!ybQv?#C8X#2A)yT(CE6lx;8MI*5rS! zww4P9)44%8tXoCIW{FLUfBP3~&g|VswJ#k;Al)Ao*AgiWpektD&0FGDrq%(OdIgFK zE^1kx@_@E)UZ14|(hm2=EWOpkkAVWoGD+$3;rtmk^qQ|Ty*1(sfCB{pOq>o57wi1c zy*|7ojqp}QmkS~5rrvk1UzY(b%V4Sx%VV#d_WIZdU@lIOA8a+cd3g12q`Vic?6+MI z`>8dOsqmuoQc5y4)O3ecod#fjeBPVXOr%WOeI;F$akI*8%<}Pe_WkTV_~KdMcI!P- zxtAt4C~ckdFVMr>Vu7&j>0jAv2b&5)V&i$}gNhshf zn{S&|kQpz^)5`e&z^aFYXvG}0s^Esy`%OLt6qpZmufX&x*P|B67OrH2_nofYQp;J@WsR?a4E?}qIFW{D(0-sPDsdFxL_iJe~QfNs{MvE209Cl!Y z1y7uvPg%%I`wC}%`#fIBG*wk+bgnE4D7FV$pk8J5wGtNiPD@L3vlS3SF#Sbu56B%V z>q1#}m+zKvi zJqCLCj*=D7C}G(XGC&Tr3^<5sKp>)UB=ZeIZ?f3@C?gZ~)r#$((=2&V zOTAnj14C>Fv=&Mwo$%qGy)VLjLSN_8Ss|IwQW=JTOThCS3&v;9WBuDzs9f=HdLW&p z!2JM$V(T8UN&Dpb#fgtAJ?hu@h6nY-L}xbJC4GD0^?ff#?s_tQT(2f=ML-cY!T5bTLj)>N~$7>xd;6?m^jf09K8jgNauMS z1?Ey*8@b=~{!<1NxKe}FGIy^3s^<_1<#{~@q-D;nHDLalnZ9oU(C(If41lw#FV*N} z;pk&IbmV|wKh7{CA%Ljkmx)0 zC4V1rIO_2evgKluI~f;Y2(?9)8|`FP%hhC34!us2!sI+Ay+yu}69SN$mC?F!x06SK zDv5}F=oA5n&g4e_vRGYuIPu25HGioXCcoRfuNTyIwj;M6@r)2F*f_bu^9ohq0a7ly zUpJMN^+L{IZa+K97L%XoqOhs%dsFT;d?o>mI9X8ako`46`OE^cW@-hGxjj#Zq;N_j zdXNDfy1o&xpA9rH;WOY1`EIz93Uc2KmI+M`30!dr0nc^_KROdS6la8JBWq|lIavR? zQt`U_#^Dp7jwr3@28xU}L6GG8VmC;Nlm*MnE`Q4;brDiVDlr^?hYbz)eRz3-(NF0d zeyO$sPFe34YwPa+qJ|vO;P_q@STcItV>*9}8JC_DPU=r{Xvvo{c2Dc0!D)c0PR`xl z`kjfEBOvD+H_GQ93BY~dYs zYRvqsvep5SomU8}`UUf?4TPnR?4 z!p(sWmfbu7R8NsqHpkTVj%9G`4SMw4@vsI;@Cf%O@A=^QCn|vQxlh}3fy;${O@4P# zerGbXV4DxlyxYhNXBN&s8KyUQ2d+RA@+TnHO*vGz9M7-h6_Bl6<>;rzL5@ zxZvTee+Rv>FbKtdcMf>-s#Bq@CnkR@Xd=KMGzx%Y1Uwbf{lhd*ofh#Wk^9?$<^nti z)k%yjdnRuWp!XBsJ-Dmg_~%`t@=jZI;M3zy11rIhEmM6IS!)|?bx={w{!THv(ko{Y$1qD`qgOZ~yAwlVj1@EH6RTZogqQ7JbX93maoE5fu$PNzx z_i~Pur`zhct;srl>-Cd;%vnR-k64BriInCqSS@XWv7^dAghWE%QtRz~N34e0x0BZG z0zu8Lr^`Iwo+tv&jN^RRaVD@8(gH%$0cbc-F^WApcyI#B0JRo;NpiN14u`M$($tqM z32m3B?qBgF$1jL|`Vf9TPF4UsHxw5x8`n}$QtGf@0J*uM<4wD&r^f6qir|2c-o2mL z6PT1b897S6&>8wF@Em}Gj-ct;TZ|Xx&f9(YWZx>fgQD}5X)G}vdlWty=`3gCi1*mF z&DdY8s|#ic{Ta~=L=m;l`iI$9q4{A)<}YJ6vEm%;J*ldOHIbmdcq(MS z6LKA2YK){D2HSg1M>nzlxvJ!vJ>P7egWZ$#>8u0$tZFL;_TxDE_7V@ ze%=F7|C_s5sRmI9k?O43fr!&RiuE5NT_+&J)H0Kg*NDo#Nmhc+%P73Gbq6aD0Vszg zdB7UgD!b38$v)GD#9zE}8L7ghDt_(TJ|RgBJLD-6y+m<5S{Ng_kGZ zEQ!um+fvF{aT_U&ag7VI0~X}^wA#{lLz>RqW#?t==Y+Q;Q_52+v@&Fu$F!MeKglPm z-5FUq`T(yq-Fy(G_6zIgKSnyQ1^prJGE!bF^9N9v6BJ1(j@ALxGL-ST)T)G=wj3O=2$EfO*zRcvW8C>eRgp??~TwF*)p<9KjLuvyf?n;D7A?nZ!!^D zv7GHcaC&eBr1bd>pljW4BGLAqsyEN~3;t9#C59^xtET-7Qi^zBSG9y#=1D;~CUnql zQ#10ja*^<>oExoxiLh{4ox)`}yNwE`T7DwZY>h zi<)Q9o=E~t=~ngZ5SxyZ)cs7;HGDtlTF8^lk;hxw(B|Nn4>6ZrA3huURKpB|)<-`> z*{s73zuU)sK`HQdb|2p{;Taqz8zK7JR4qbY#cOTw!Li3e>Bhp<27*UN?)uA}BkGc|jn+NBGJiI50^U6ao+~AxGZWunwi0d1 zI;JNKC7xz%O7>5>9#v&b!JmFP*ig==W`zqSS;zk{i^ps$jUIi`(ga@8P z9`mQ2nS*=o1WVT|7AGI?1#Jh@TGbzL3z;S|8QIY`i;CEpv8e_FcO~g=rEaKYmyFR1 zT9NE8Fk*-x!tR{?4oy*U7PN~PZzGl`pN8*z|yyO^&#N?;*y>wMA=@=*5YM+pWvq zkIyVK9b&m|1#6BO*FNB!vTG%!m*{-B+e34-1@is|~)O+cKF#6IG9f_Pe z#ngZChUrfqJ_PM#PMNE~noMpmjzU!DwbPu7s6&-p$7?DG`8I4&d4K>pocWnVvTj^S zyzoPx29Bqs_TJYm#~3#8FVw%WoQb&H*`*r>R3jOf_EOiC9~#rJ?lj4(_9P3T>j4@F z2R*QBRAT}LKOld_5Nmq-FrO)~z6=?2IuZRDj z=7%{PpDZ#UKiDHxlLIR2}|AH!AgDIHEg7+>G1IpCWGhKH*+J$;;`^{z{|dJdP{f8Ob{A{)_@ zdTY|V?;jvDlK{ws_fozUCaXG8F%@e3*yphdlog~b?q=r*ydO_?GGAq6p+3Vx20Ia ztoMUVS<|(2$=*7~Jm#>L8o`H{!mdC3n(R;(nbOr8Il^*Pz<^K}wXaurm(3QUWrt#} zwB!858>2h{iTFVuA`-aAOq=#Q=#Jujs(|YpJP$?iMHbTf3l7(*rwW@RZJQnf2f`?Z z2~|bTcnOU8Sb1D9a)hjQTA-op+A`5HHJ)>gSrl8WZGuy0EQxq@L_EXs3$hR0T)DsdC^fFw!b8iuQ4ON()8jJv8-^uKZGKCq?vSiK}mQ2~dU?P$+xB-EwK z0ou_0xaP9xYjsE7yG3X+D+Hg`iku*z?c3;FR`<&e4TjX(G1;oDuA2;y&OB!Q^V`Pv_!>HFfX3hHdB$|Ptca*4+qTS~6T;|4YEvuw@V(pu z@P|mQ8KQ-&Z-0thbH&x<^jBrqj=^5BiA!=k)h98XDFK1{%fnm8@(3qJc8{A>j4+w6 zKL_&$Tsu64t*x0ckLph&cjeC#@o;viSLydBsgG{t&L)XdB@x(kzzG|(Mivx|k&lM&}P8e>~m%U?b z?G83r=fNyj*w&#CoH^shHwqzI1kz`pVxBh6v+J6p=X3w~xl3>*@hm2M>#?unX&eaw ztlT4g1?@KL8DuRXU=j_`ssp%qs!;>Nv zZ8R^Mw+T#_*4%e~7%J^apQ6m z$qGHxA6GlBhz)Pf^wdK(rIuojLvM~ZHo-Uz*uyUfqRdg_V8QgjSCRWn9+vAA7}N+` zPs^h7=NIyE<3|0vTj@v&vxWo2eCtxRI{F7BW3J5q)Rjs3_fAx=UNH?AgM6K}U3Xxd zmw^uo*RoIEx~VeniOl~z3D`;Agyd-IEzcCRqxcQqqo-<_DiCIZ_TDDa4&>+v^jHD{WTBm=(gTU1ZIkR{T_3fG5_Pca8(%&gP zTDa?r`s%rf;oo1m0QU%SnsauOSqXpIdM(WQQ{5vxy43U^IfRQSiA~s-IBJHsNE`|^ z#}pB7(FRr(N6QJ9M>X+aXSU9iSoR<`#%yC@oeyMy?H47^51vZNgnSs!*>?<=MY72@ zY?e}#CUbcqTZm9YLOAy1O|i_e8tGK8!Kw{A4}sfUn);J9I<3H(#;y<2ViMnf=^VF$ z3wNkaLsiSXTPhQ-{eE8MxM-+K^yVk>wC9(>UmZ?o3y6T@jtqfNuQYMGN^z=WbI8|P zHGkE#5bbMn8gs-#j=@i~;D?;umZKb$*%n$>(3o-82vh2Tl8Z%Fay0zC$|cqQ$N5|AI~v^w=STx%erUdL<*6>r>PE=C^1 ze2_dOk5&&YorC5H8A zxTMd7**Fc@sV+5tu?%|@Khy+cgrbP;j$}8T+xd02UrZM3U*6E{Emfg>ue?2=GcO!~uWI-}7ee&a{|2T$;3bgIT14^wx^7F|k6-k3`8D0+ zWvd{Kb3;M?;@zt6Q>e?ug2WTf_`>!zBxSrUC&e;eYGv`4mc4!f z<40UUJ1PA)9hk1-Xmej1o#mm>HBk?SrivxBfR_PsQgSWB`>Iwo%_|*xd#k(G1(#)X#I> zlipPTBaVCRkMKL7j%K5K>Z8{+GRjb{HxG@P=(U_4e>2JAGaP+IBTc4A1JH^lY}ZZy zaqfSB^p1YOCLPL!( zQGOAAJll-*O+O_tYDoy1HmXPVzY;cO8PwH6PR=8=qG|DpMbgTT z5$RB#(NPMuxgg&@Ljq23l6%$O-zzdjb0!~XOyk9xCDcGjU=i0}v7&L|NlWSzwbxQC zI^)QWB?-9cmtfszB7U7A`c#YZW!)d#GYp+?$JlW%Mwj^#D4U9`IV^l4jPxZfN5};= z79b#(Mb-&$2p{qwDRDS)&!erEXXkylLqde3Q7=BI-SFiKtyrsCuHqyZk?aXkqGgYQ zX^TYtm(0jDfOPq1vB7Pi-Sd2Ql@WS+uul1#-%G&|c-iT9AoCpz-X?9KcsQ;sXG?l4 zSt&cReyXed+6&ydQ$|mH3FQjUszkGhNdOLAxBIbi9N1Il?>vvrPVTD)^hM7{<{N%R zxs_(M^Ok#8uU^%}yR#Ha-X>8egyTM~9H;V7WWF~^)$=p zG09%J(35@GCCqTQsY!n4(CzRufNbxqJR!%sri0JP{_$e!r!0_W&0B`|gwzC7>&5`4 z>p(V3hy7D;#{Xr3y5K$Qoe_4|%;ce85dYJp)3BA+DD~m^QY9#>H&SLK|7!rI-ghzh zJMm@oF~gTPG?bdvAqBZQ3?I1B+Piv>wB6pT+K}t#kOh!*Gys>?NPw55(QrIcd`f|- z*SxOAtijKI8)>x$ObSTYa|lXa*R)P$@ebm`nP1&x1l^FC=BcHnsob=m@GW>!Cs8p@ zbept=Jath9OE#l4Jn1X$`cKi4DU;5=u|_U@)>w~I9oY_7tK^mT`c1|fh^<>kaRGyuxKfuz|rTFh;9Y+T4teHx@2JN52MrKFY@L&PrqQTa;}bBenFQf2+4hD!&IZ@Ruz`N*rXSKg!90zgDix1wxn ziu9|!rg8+Y?qN%oxuK$~%{q=V_Dq1Slj>1#rU_!-(G~NR4Q)JYI~$~fk>kme{4u8+ zOc!5oONa0;=#*0>@T-P3b2VWPv#_Fx<9Da*ZmaTHP|R+5M%))XI4Q{J(Z1KuI{S9~ z?C;~mP&H+w-w;BAuR6tj*PKm}>pex%EIvoP4OB9tOl^f% zgS#G?4*Bj*E_`j+KPBK$qrxZ+4ny^ba)U-e2%ga!e9Nff2zsp1245Ly0AA_Ydi2mq z_DOcn|GMC^K_v&*zY&*MZU55eQv5@oYjyXq<}0_uUeGT+r7aoS*)`CA#TYi7t603_rz-bT5@a#=B+1N|<=OH}y;Jywwt9_2k3=H67GW zcXf$gW0zG8AaU39FWiO8mluD6xp6M9Y310Na=?1cWFd9wjENGDNR2nIT3t_f?s%MXgPv z#+~Y4V-^Xc1whB{Y4W(X_w3DX-*bux*oJjsn|514QeDKnA07T3%}W5?#g>s#Fd(~k z0eI|amyH+Fme|_!77stSY>|R0MQ1I?@oF}q46a7A?(J1-MqETUr#=rXjRCId_($<< z%fW5XIO(djbJ0LKQeQSGVK{;4u)JlxG5+b(1ab1m6d#g}wN2jgEqzEnbL}zo$*EhB zs76^R8~8Onoh#>^gyOLdN>+l&YMm#EUyGeWa6}wjFH7|4{z$*M)RwHK#dID+saI*|T~(f& z`rq@b;9Nz7O+_( zDI=iqg$3ljU5=Ph=+U_2(&t_KR=-d0C|Bv)$ST|p=Ef| zuM=sT=&+7FUnuK6xoPi}rr#|9y@7RobGdwlDVX;#nre??c|^E_*WpPWsS*LSs;m{PgBNahVvd)r5AjxwyD1L!_M??{)JlJ$<0` z3C|%#zdY${WK}8MN=qa#>Ut4gBKZ!_Da(h%e_eKTnFH>X7-wXx$4!4t`hv4dCLm>r zYD}11^Boa#OLM>*NV2-kV-KJDFqOk82}c^Xj2*fYM5FCY;B_L(Hk5g}dNWh0kPG0( z?p0+uu|&%=md7GvH%@4@DxdEEE#*0EVY2rY!L?P{^7;#{FoycBM~Z-?!@fHRdo!x} zlUd=BKeftwD{<n4C#xO>yG zW+a$VS`Eo^EJ8ZvUs3oN>{TCwk&W04#RYnXM^I)zMFGXzl{M=Pk1M%~kdlb}GXp0zX;xpzeFA4-$NS z6v*@^GT$jr@OPfKSnFVA*UK+Uzct=o0Km{?z6(i&Ujj%4-CG6rZ{VU!a`8bbk?53a z2L~{}K|g~!-=0R%WByJXS5^ZFAbu|I-oCXBzyPju%Z>dS+|aqX_t}*eCz@s-T$~yG zx7^kPZy##@&aIJ1O`aF1U~k!8Q4$nNsd1t16;`6wQi|V9cDMb$}Kw`z_I* zr-a>Fg~uWQ<$S5Xv0nb0BLx@}MN>OSdC$quC#i1OEk``O!LDUpOV)V>@2UW;M>fsu z#~|rH89=kVM3`y-aiTrZVq-oqXcm`@XM3}h;n*cp+$lM3<-qO7l~7B03}}#&HrHElm{X{WH*v|@v{*MP(?Kd>nNj@7#*tJ)>tT@fM&l2C1CIY3vZH)w4qavB3yKWuqDflTQw11FSyFXm7&3XLZ zo#ecE$frow+@X?4i9OK;!1Y3-4W82$sKLX!=XSR>Yb@|7{mb%nkC;IIkrg%~JKLn6 zz%N}UhmR>osCp-qHHX%EC2KNfK&(=`Mh&RJgRLAW@ZmcR5ytdr*J>YUXCX698eurP z9=?^h#(Z@7B29nGaLZWbR2VzWZ{w0>+w_6mNSEXS^CRxL&x2c(&wl$N{dPJg`#(QP zP#B;=R{~yA3UFiLwI4Sg=?qljCL+S9?Pfn!KpcL_flVmENBuu@p-+O^(kQ&TNt7-y zVWQHb%)TrxNsbgfm-IbB2DRZD076&uF<6}0G{x(xQ8>EcFEj~{9NkTqEs%-ZAuC_ZTvx=1O3j>Vx!Szt>sJ9orbFup!77 z4NpM0E5ZAQ06YETJqb?Nr)&*up=D%AZ$p5ztwe~sn8KA-^aWc=Yw`8t8?nBHa1k+8 zW{X-vv5c~ti2I}d4ti)RxIux4Go^yEl8Bc5aJP^4g)Bipukc2t+A{ZsX2t#(n1gfB zzBlt;Xs5qFAlfw%0JDuE&~X2~Y%$tF3XGs=`w@45uaF)Z9w8d8B#Txw~Ka7qhXi_(Tg>HlqUnm%qX@AQ9Jtq_INx= zJUSW#d7Dgs*ohYE;|PBx5&Iv(hzR)C%>m^SvV@`Lv){j#ULWu-UF*;gglqY68qF@5 zV0e!0dpVpW%$9EdKeT;ySk&9zuYrVwj35otpb`QCLyij4AsDozbdPjNgM`u`LkLJH z-Q6WIq;w;UG&pqLHT%5#?0wGmz4x#CJp6$?IP+u8TI*Y%c$AU_#37e2!LKuMNjbEW z7&0y>?yVfSBe*G;{2~b@0tk4}1WoJ;dD}({ku6ZOPvm(J5?T~0XerZEr_?kehcB!s zzAE@rG|%IH81dRn5VNhG?&~DRnKx@00~`IHe2>C*N}00`bkt#?x0{9AF8fW4NfMWc z(-ZWU<<4Rd=jO1ojkjXhnh3UjwNO}fJkQVZlB@wMJ#X~2NWz6Fhr9HXxZzL)EY}wo z-mdKRS%mf5vTX6}B4C6E^dcK)vlJ2x+DXsarwl}GS&cS|!~1PK&1#~6Ii43r7&=I? zb&G>6jz}>;t9TZm+hsJesAz`9425ip+Xpz;g?ixm5~DSM(MmTO4}gk%){@y1gLp zn_Yu>+8ZN;;gvle6LVYc&nAu$Ntt1OWdl?%1|)aWHOIvPF!MwrG=(7Ol=~WyUBBb6M?JPN>O-0+@1O+jaY? zyhUm@yX5Q}6r#aI-aXfEj#mDB)qB5D56ZeMveLxI1gh|>U7CB|FMBVf@6od{625D~812uk<6Rpez^QWa^~{ZM-=;{0;259~iB3m(4Z;rf7j)kJ^Vgme4(lWWGl z(5xHQ)n+y+wyg|#^=ba^_)13X00LJ>rTOw~-f^o?1~Z2(fGGOk~I z>lbdER~YBYcd6}@#8A`ljQni|*C40@v!qazMoSD7z{oNAA>yFfjC9(YFI0{GxdycW zVc~847O|D^uPlQ%!>$<#QF79I6f^Wd_6cCx&f+KUbe9tvRmezz3pk(RYiF7d(DjR z4E{oL$(0{@YCePWSv3us3!;z_OqmnYH z8DIY1MY zf@l9lZ2N^_sU|_H54Y}JQyuT(yDD$A8F#+dyYWw^`s0ZMqNFaPuUxM)!(F-+yFQzh z$T21jZ-q2)f2aZsFTkSsHK}^>d>bQse0lAvT{w=w?ROLmJX6GwNQLd6?TNHEX$|j7 zNu=%GC%*Y8xI^^z$_#tA(T2eAEZQI1;q1@Q9nKlRvwTe|hWZyiQ!v0j?Flbv@D?aola=g)C@gtlh zMxj(`(8TX~$hOhY`{&-4Zy;e;)mokWN}1cSM?p6tj5K^Z)obPUakL`y>RsvYg-VPF zxaVy`WW(Yhgcs>J<6^?b%OqJusTfVbD3nte9J{FL6VA}&_O&$#p8x)Y@#-c1*%hw_ zN}9N926<&8_Gu(4!IG1FFL}~R?DSH(Bds5@t(;UE22m{~Fh9ffXhO>mQ}kU^8NqeR zh?nFDx;H>LRlum(Ay0**k_Jobw0^dd)Z)1)5^@ zQHn*&#u5Ql-CK5{CMmfD>gw)tj0kj{UOP5#gSKtcwO-+`JDkal z6z;!t(QW+3ipWgb%3?rd4X~Nvp|tUdTzg!M%I92A8iAJ$eeHa}J{t35+7=s9J&qCb z*~8$Tc}IX=@a@YA*hC{Ymm9P{#}Cqw*K^JY5o;!ts7ttK(u%()K^}4BIVG2F1(yXy zvgFEp*22TJn}xPab18F6&d=UD1Rr^|20^$qp*goiZlFUKp0|s{IVCfvi@$8pEJD=4Hs2%3EHds8FXFpPNLf~+pq~~l{ zjq&rZc3;8WoptcusGU9Sw2^^wU&1ZyGZmX8n*ElUecFC>yOVmWpN&0^A3!b03FmuNmm)YdPYz z+GL5<@7T0z+XE6$+-C*lub0&31?_;}N=>9h^rtiqI^;9nzdikBh-nCT+lq)+akev3 z!kQI#{^L!BaGy@PgJF^FfFCdssP@=tBUhsTlw4Xc8=5T+9M(ENZuv|K#)!fMjiLvY}lF-Zym5vrS6{Nk+6;d?rE2^agy9$TLAq1cS9bwT}Q?E z%c?Q`$2)^hL|*)|A38l;`0l<`wwVZUUPvD)%iSRUU_0Y@tm$<3zki*PSovXdl~my0 zw#6S?q!e=HYi{v7LW=v1BRWnxagiRNGUsdkMagG8hQaSMNr#tWq!z;Z`>kBB+(hz| z{l~}huN~W{0AAYrzhC-4_TYc)$3#}}aVR=9Siky@zxFq;{MU(Su4@1LYy8*ujW-oj zlM=pj4>+ZUkpFx4fzQtjJhN6c&KuAF_*nnipnv<_|M{Ue84Gy2Cp&9D{@V9{KLfw} zo>MW^z#mQY-MG7;l0CBTbi#4}OyTDJZ;>~D{&7@=h4sI$Yiw8|Eq4^UR6BzI>*@cO zf0lAxxpfb5uwK%s1U0l~-guu`UZFoaT$-QUd1!sSRo&<~W8?Wlqg`}x;QYwhp}k_J3X4R9?JN;d%F!*K2v1aCGPDv1`dS{E6|Yabw9`a)VOonwizrp8B)QFCSQ^ zijr!EwG_!qo;Vo8ddy86@bRtFehM%n$dQ_}|F?zw+tQj+V`(PYdN%TumCut^-7=Hh zI+!uH;SSsQAaiN<428B@yNpjIg~fRKIm@9)2=;?~uI9`%!m4iQik91%u$J+W)Q-mh zV+p11i*f0#vWhzeWfd#8O9dywiXTjX9WOvm9b)-uZZ4ek_s&Z`neN;{b~hV5IJ3ywL4Ca1~iPj?DRodn@a02tg`tW46Ul` z07GR7nulb#at-nm2ta%v86n%Hr9~hvZ4sRv@09>TdN&ff82Uq(V_s&t9-Nc`&)xLf zh`{S$Y7YBnb~d)JV$_$-qO@W7u7wIzb(t3JB|a7gQxlECyvMj zzA{RgEm;zJ@Q|G2KDC1~o7-6%kq~9dua2s6gM-Yyk=wO-QHq{-4h{si8v3#6)GapP zx0jJ;JuS3WQzX402njR`R@nDFaU2{EGu!Tt_~HS)QOW@2cT$Sl$_O}T73b^JRQGlP zVBp{@uQLZXK(^liL)$L<+>Y|zvZ*&fJ>~RQca0$(a1E#dBq*&Pnz0#C=d%}QDM_F+ z8q9r^{$9LT_iR-y`2DDN%p<+UFu`)r9qQES*`9B)0{qSxJN@eGkZk%Z849J3e+z6oO|erif3^xT6)RVV<=fz#A)ga@czZ>pCqpW}ck%W>9t?_-R%)kk5N_ z{qAE4#Vs|Pr^%FbnYFVD^Vn88k!h85yV&yMu@LnQA0&b7dBw(;>x0)j$lup1jrLcmE*|I#sHaT=C z(sLLPc1+{6?SpH=FwGU9E?drW7W?Lm@q_SX$u+>I94^z!){7cxBi3J`)e0b@onTzc zX@~>>VxdZ-RnP7kY8d1gI-3i_)hgaTuYfJXR}Q2^kO48XWGFJznb z${8E%D7fZ1qlnDcL%>%z5twTsEGQe%bnN9H9jkRgPf1a;&Wlo>r`n$Pd7TfjDk0+0 zAs7SC+Teus>u;V5;TCGh?%oRLPVqd>38{|+xAg1ZlVnJ8jJ*~M9x7uPL)@9J zR>Ja>&kW;sg8g)l0rAzv`LzQX9x)NReF$U6+0;OS{l=D zLSw3s_e*ZXtUzhIxO;`!gQE%R;ct&Lmq z^X>S%TFTEe@i$TzsndIfmiIsLlf}HSjsf!8n>alcW?O3f!GEmqWnHksH@psgCxcu8 z5tA|fflS;tZ1Q&FQHP-srAZ3Vgc;-8ZbVwa<*X#ZQ-~^mD4Ln{Pf#eUX`DzyI%uM2J z4;MXl3*FFD5&ZcKL+$3e% zHvvu^H#Go@)d62iYbF8+EjZVqwSH(L#G7c$If?dt>xZ^~IwGWb^)eo6X{F7eb-&X^W)KmiT7TohHgMqf}q1P z;dck`QEKmXl%yZY_l=GD8j+ zp$eCG2i`cn6?u-Pq{u*>XNI>GdpQw-B7$K83)l)({%Gc_2XPIjpErP_>gLnIGA3ga zvy9+|mCQtKO&#QPnS~l2>e>}$3FyJzk}e1!YPuNrt+J~(MEfyfB23kRZ{kD!Yc{L9 zW%iQ0v#qN7#7`>Ue8eP~--n0CFt<67SaReK3|0UJzxGDV1B8N8dLS^_qYO@;i~~C~ zGoboaf$=XO9LHx~)LOxB}562vyYP>?rdAuasW| zQz8c*jhAsMd(8%uiyxf_{U7j4uC*k$#c=e z*EjY;P3M*ifnf;Ga)+6NL)ix4(Uf;{)l~8{057ma9>ah-;8`N&X4glcBsYcgnztHg zFFQCmaP8fpq0rTk9=dkz)fW4chV7mYTyaN~`4~elF`!spwDySVtQvq$CqW<15+lhn zpeAav?SI=a=BLCuVBR{yW&3?Rs859!=Rqh|50(-L zgMw1aYA{1qmV03Er`j@n=FW(&m&fS)o=*S^=nJBYiS;JN%yFiQZReUaO=rzDIP6Rg z*7P0~V-jMaCuXqu4fR~zJmpZ{;+x4#L4nhhU0@=<#w-vl^+Iucn`oRugQu>liV)(6 z1L5Ah9E`E6g~s}Ha=#518*jdo{}d*{jCN3!7&cT=p7gP>Kt!3|{}NmFmY<=EVyNe= zHtzmR&QR~iZuA*gA1G@EO`l-9I=R!BK8_Y}oYX!uok@&$0#2Pmf>LIDaaQ0%w-(bd z4C9}IOC?-iwmL3Vw=1RC3|j7akxN}W%ErG{*?mF*SI?39AtH*gLKke;uLcUXCm^os zq+kSOi{STB`Cq=+pH+igQqV>BXtd#cY1Q@pZJ0QU<>lb<$F?!OI%C?!x@*!n%MQOg z+!>0P!_9^eA9X#iwDToWIqg*g#~X*{nFY0Vk#kEBuS;CgOq(M`Wn=kNy$b1jxt;nm zI(*Bd$_7e$zOFQc(aBf?`8fBMwQv*yvleXi#J@-pesubr7 zKXU@l$TY%4H&5-rzF>MEXF34^Z7+1eT|#}%bvz!~HFy(QCC=D@6hhHR5a3dK zcvH}@CC5z^Al`Q}3k*a07AygG9TS@?!^YUtbFVrmju*auCW1V5zj-Q(Kkp8-FgKHt zunTuKPiabRK=YjV!L;dHOabNF-eQ*+s{xWjh!WYCWK&}uk90ufK`8|!>D!-< z4H6@VevV>PmGa0{7QgB8H8Y|uUjl{wxT@;TDuSl?s)!;olUGpga^<`82?uLyz>Xc^ z-1(81|APKHkn#Cm#DPsfq1SM>VPkj_vxn7Dk$uoH!ird2m;JH|%6$z(dJPSf4QT_BAE|^{;s?)+5C|^z=PZsFHP`S-+PA}U_kSC;YmwG$WdTee4 zQ)A>iFN0_AC?R1%DPbeiI2W^j2s`V6c z>8wp}&+&z8px7K7f69iLohG{%riXb|SAQd39XE+cvXy#fw|SDVVfjm*R$Fnm50+m% z;R2)sY}i3$X?Fm7&(hPfay~$*@^NYx@4|phHF1KZn1g^83xZr6Kl2WvME~1uNqvFJ zU~}f1qyq^-76dqf+3eEdAeO9YOA5|<0qG8_h1Ou}^f*%i0bbzWDNlYT{lKlt4-F#9 z%oA>&*x)I~>(?a+SRaSF;o$>4W@vcfij0vk#2M%>!l^UdZ_KC2m3u6Ro||95>wwhxpf>+O1EU_Up2 z@+-*~ZxR2|rJ~z7l;QI(dR(~pD6`#rDsM6Ikvi=`@Jkk|4@G@b0gL#M6Pmy$c&Jmv z&&M{n8lh{C8Ii&JlC{n3D$RV#7mWGznoOY#SVJ9!U9Uf9njbK7F8bKDBHqoliMGTy z@|Xen5QjAuLl(;>7hlx%9SV6WyJV>b)!9QJ9$=@kCi=CfWEY3=Rv+VIIyCoL>}Ol0 z49-)a`u4ix11i+6cW)<`r@m6E74BzrEYc;n5hdrmTxT2ZOS8rUzaP<)dlbsjD!0Wh zm5F_P&oWdxp0_>TNh4(Lot~UA8I91P;2LQAyT^BH-hJVw2|}qG~EH@zyM24X>iETx^EIr4Ezs znKi6I|H?v_hTjwY8w>Dfso(hoQywvG{xnMQELA5i*fbq+%M&K&S30w|DXF(GQA2!h zdlKWeR%V<;dvGG!hHqS82mD>J04ccvKXvW5-;?;N2vqg~Omy`(xg}?eC zn&P4T`WdT3p)85;Sgp_iqbrq_q=V;YJd|a|jPqicwJ+D&M~4i#*CoMF|>n zHOIte6_qv(Nd(g{y&pu3G@RpcC(DN5oyoeL68)9{A%+_&Q9pBS^AuaJ2{ezdOFfmI z;s`7f(#W+9{|N)QLnq}K(-6~_0ta@EdL%*!YrZhgJtCpf-eo8wd`u4tJZMk|TTo{R z$nS;N1~)dI`a$0sUiHx)vo)n}et?(}#0PhFc-SF;X|@LY&F{AN%9eAim;-O{;_UjO&2OcgKD-CX18nMeOJ+fq2i$_$fEt3DRiuLZt8z?@>ByFiK zkL9}@Ie_NgaI;Do3l@9Njj&H<*!{zZGn*n`D6vaAfy%FghKsrrb~RyZ?rpLmwwPZ% zCwnn&0C0d}h8}G9Z1WM|kkM#1x1UhK?S@^Oi?%bT@B`FWI$mjeaji60ac}GZ1uEcS z%KjceRv9#qo?(cy-LLAKaiBizS8aH5wOi@d*nNN&$%J`H|@%Y6Ihycw#isyoi)Pa z8RQ=`gQj0M9FlZ6MpIB5vO+TA7x^({Twcm z+lq!~ji=ieW~P0R1RD6LTr+X}b`@#b7{SGdho0YBefVBf`dwP1zamT|DY+k*H0&-i z9De|rqX{8-`e`{S+gVB7CasutyC%}+1hiD)7SG2tT|GEE#^`G<5#7+J&mx`h68>j1 zKh*(Zif%sg>^NBZ$sjaK}%O^a&Bk07DK@YvQ%a!)qyT?l*;x?eA(4=UcW+mH@5Cc(^m4l@r zgLkiwY{%HXg6@_2!`mM}H+p`5i79b@-gI`3RUaXfxU~sBN7*WcQg>CuXH-Sdl(*&0 z*Y8y-+Jq8r+4{i;(YNfi?=%ZF&jFR?k4apIJx`vT#!eIj)ng>YNNOnst7s^KY?-fK z3a1TPpCKNCR0K5|qiMV=o_2#2vN|m6lsVw(<1TZ?kzaV683%i1ronHMc?_i@pOL;% zD6~O`9oV*ju>F|WhdAIZ8CSww-#1}zU!2$&+sz@Ys4vv>wWQMVrGDrKa+#!e!Q8X} z5FbA1zgv3ugUhrr^NnpK7PiVTl;Fd4n09z$${>EN|Gq4X7~0c=r5P6A#t;;vIhBEv zm4SD~xZf7h;!V`ezjZCCFAY)TW5xBYxhkasNQrJP*8yj*v0d*GYdIG4^b5<)ubjnK z-+#5D;IXM4Y&y5I$U-ogVrCc0v%+g-%Z%jy^{VeP9}DyM70?WhFSln{W$iqeNKKN1 zAS-~4Jh?`z)Kln3mXMB!=TV?CmNla4V^M^%eKssCx8`~!IZ6@}QT|zDk!GNCbd5mQ zkx5QL3dhk zrIae)T>)2$1sBfc+g9>orpaZgwD2CDd}D!j0CF(Fd8QL(fI4Zt$SbS|* z{9t9@7iGS(S4Ly#D^39vziKuNXj!hW+@`(vk11yVK5nV&y!*Q0_kGY)Hr_MFCoeA< zhn1Fid8sU=buLhVl zSSb)$jeZ=u8`3De6CcXF3hyn5Jy_nhfWyVD5 zFsfU3zWi9N&>ko@+jjz2j7n*cxPCWq$Z)@NCdc`7OCciqiTc>5Os>RXit)R1Pch-E z#HG*JP8ENISm~HHJOu8_o)MO9=!@AgUYIzOtujg1eT$YNH!(2=WGL&PQKv*KDT+4% zj^Z3I?G#YQ3|@`|w+Y7glB;sgC$hTgkDaqe-g9!Txl8U|-tZ4P=MH*)7~Bf5jUug~ zyRRi_X_T8is2sxYJjGo9&Ahs!sn;r zp6{T|J`(ZvFah&N`({zHTPun`#KWnL%6Ete{d?G&6doTHHy>)Qo{EHguSnPM}B#NG%C0=M7 z4#C*hMb~Vq`-z0>Rhqo^s)+VG#j2P_TTq;tVX^5lf8BZ%eh*!QL?0I?^Aj6X86giU3g(?MeVj(L=A7cFMMTO|6DdHXE3av52>X)no^K(auIt+@w05KUb@a9O-KxL?6Vo@h0>d#S zcm1h(+j&Ar&&LJeZDpt#XlA(85Vi$2J!|cq8C6E&2+HM-&mOahf5RW zM$?BXd`OgLs}Ur1{n68Yw1exn@W&c&+0j>QK6$9h_POV*S@1LqMIfQwZR3$#h?A2A zu|OB!Tx{IoN796heJ&`5C!YO2%|aJMB9W|=YfHq^QQCp9fam8KyB+K&9~@&@l3#C9 zwyRfKK9vXACD9wsy82i{%cnDeJj%gWbSLXS?4%j~v;QDTe;f4386MM$e4o@%Lly=7 zaum`KhgDA`Qw`L&~=G8J3g%<46Hpe$D#I=*Kc;=u`125RqB#5$BI;nd6Q@f z5Ih?dN9|_cQb;^XK{u3qib#dS(z*L1Np?mMI{RD$@RpK-kgQ+G6)|I3wKXBjM;-6< zzHH9fiQoDO)PQZ6Ub{zwvHMW0Qvmye;zAn35*B~-_8H5D+N^FyJWJvuhC2mkLcTc@ zkcR9>n%OL2P!sJ1gB{<`p9^t}-KVKV}e5C4+Hc&0Q0W1}y-qX=emVq5*18m3I-B`%t!mgnPEeh&J zXh~kQGjC=R_sa4pJs0;f1loEJlJim-9vo|;{f*l3%IEzTUMrAbFr%aSGoJ|`9JQ>54Lnv zH_imUl<1xo+Zi6`1=Cs%9xks8K}K$fnI)H5R8(FbY|uUFKyJ>~jpUYuCvg;ex^BN& zJIz3r&2PlmeHU1rXRdVG%UNw?ZgRv10aN)6k^Z^k}~|OiPJ%8nEdT)jK&?QH>}h( z!_TChdrg2YYaSsbZ!7Ifxi9 zJp4dXdt%gLY2G)7SXvTqe z>IkM6k&gDX=!%B3-j})_4sHNY6vhL24S28ieaz!hGad&zahl@2f85K@=MgdnjPHuH z4e^==O~}8!@bPvGAf#S4?|%;*f?vbg<07tk{}Q6`P?`-4!?o`s*Z0Ro)zi{gQ7lGt zWas5Mtkn938=jtmg5M#K?KK)#Th)%t}h}>xt7?Tg3B}ZGFrP{ctr9OW)B_a!MY>oGX6x*)?t_}ke zKkaeu-}kn`xHRaer}Xdys}{HA;mY*r=-9Ae`m@3tRJ@}vHR@ERs#g(Q0&ppjNxc$( z$2q&Q{TZ!|4NPYw>PDhh1ANp~*{1iJqUO!Z^+Nks;V|3*>R6^9Zf|l_c4^Ex|co_OVW5 ziNqp|{H#FwaGsW+#I8{b*S&c}wrQ(S?#)3n9EL-}>5LVhZUzKuZ8X(ZP43tYi@=Y- z4+raTWhjgMl$3#vz8-e6Uc$8~HRc29*T6*~`a-HR-es~{-9g(lU3#p`{>PPoAtp=% zr>uaMD;79DZ^nq-oR@RNLRdgAVp#tZvL>7mo1rrb)DoXfKO zEu@Q$nY|D*uF%9xTq$DTeuTW(++Wo7eGawgbkZqlLT=*IGoUK8$`=ztWa`-`)(Z64YjBmXN&Q@?Ow`)tzO_W?{B-M;i)(4&+YmVrAZ`|8uQaGbm5!>qN z%_D9m|=i3;&qF zpIgNj?vvJW*9c)A>*wM7gJY}M1Cw6cDK=j$C){4_PkVjI{nBOWA48_m5Ed+F6WWoi zYZ0(5?l!UjcL8zpkImx`$6^wQ$R?EOQk6u5=2CG+(Yl52AZ}thXfRsJ@)Lr7^$cwc zBcdcYpmPs!ub<3dHIwft1)qK{=SzDt=9Aci(EwEZ_#kJV7>jJxZ+~lc_KX8;Aw^4p z%XZidt|37im2L~kvhxV${V2FnX16PkTlR%CTRsjuNAI@y*t`4gsB`O zsupa(gGn3MXoEU5#)gKv^)m)0B2dP?F~HT{Agf4i((_{2f%Rimyv&5E33z zT=J(xF3S_xR!h@5Z$^sLQxu#-4vI?pxc;DrT4hu*leC>2$sYZf(N}Tokn*+VeVT4( zva|_C_~k9Cph~EZ^P)KM7Z;l&pl+=l5SE&LB?W#vcM;PjMr|XBt9Wsq>`~@SuUuV5 zRu*4Rw5hL>cj>EPMZ!VCYCb|5(TAxYXR7>*jsf1L>WIO#$r20trvFu;vaNID4iO69 z6FJqaO^)fImC#W`xt&ca4CDz((d(-s|AZ4-g#dKGL$87nw}>QXV?)0#liOEFsH-##5s79%p9qt!*gs554-?XEB-LxC8 zvJmrr$@toubBtmHDvt6sk)q&t3JA#3z-B^7l&7f?VRyr_~@e95p`ILp1_z~$q zG-)5`Y-yAD@To{^?3jmb;h8k4cMRbW28b2hRF$8;J=1d*mdbt^#+Wqrp<~RJ z$Yv%J0|+m;S5R9Vvgu2^57dSz(ylXJ^0^cd3d|XD4BtJ4u!S$g`xb^XxJE4*fU#eG z0M9r#akdOw&td)f@mgXN!MnmBBgqpC=Pr0i@~S;&kA)_$5Nd1_C;x*DjV51Jv!u4{~V<5?@ngwt44G$)nee?4nh=$Nyz5?p1D-u8E ztBmNFVmQ&C8nD|f5i;uUWT^RBeUNw<(i{m|2-ZH^6r|`G3mV2^A^m~Q?Nh;M2odA` zWsMGvEBZJnW*P`^czCgDYrXGbo)hJ9N#ePYWs&DLf=_L`hi|iz>)cqOQ0d8@e2#}I zUY|QvvycUy0kn_JFpxjU#K(lN3F3L0xR>Z=oZS1m2i3Diffh)+V_~kNlXOD4!5sXU z%Xs@KQGgJ3qNq!;mNNAAW5Llq-~(LcWvBvP3JD-|8zVf)HY1Grv;tyo`)}a27vdc| zY?h%l|ff|J`*Wm;{LNur48>V>d^GKS69ylIjZHjjEq||aVWHRl> z0XWDKoqAuVOiW)>AD=#QPAp0&N+=%I^ZhjC7dbR?9(R$G>y{{7fCzVnAz;r>=zaO= z2{!zy_Tu2ATNX9azf#z!qdQKx^xp<=ZG(D$l`pkBdI`B`H-hVKOvv$yNrVgH&hKyANgd7`Tq#Hn2geOz~P zch7Mf4{bTV{H9i(#2rhI;Ls#HA-)T)AMX)&&EQZLi z3OpGfMuL*9*7A9jQgZLIb^!bvnC~G-J-&57c;r$7IlERE6z6M)JvXLnDndxt2GXUK zu!Gca@2EgbaBoUZFkut-lAA!W84v-S9I99_X{?1~V*2>NVp3$)4Mr`<=Ajdp#B-A= z6aCND>u^QTW4wZ`q-KBvV zq*`)ArD^9}9OPw?Tq}gB3uBXnDuulM{H}CfK;s}-ILvjQIEFa2`K5V-D};mmX{&vj z5CmOZtfz^}hSR^B?_3-zdzMHYA!hk`UzVZov@`H_c_Od#@(?j{{&B{g+MwewUP;a4 zTUo*G0fw|nFT{tW51o@gRT8iqO&|}1h@NF6c9=1m&oD6g=t_gE{|Mx5c2ZvS>w!#2Av(5e#SC-1lqNk%MzT#!cf0QDd-R%H7QUPX;4|b= zPJi^NY`af5>+5^)Re@TX0i zXIf!(d{uRyWOp~UOf2@k!X0{Q_SB7%YB&A7B_n3)3CqUfCdFOS0c}a#sI(Z|i(JNqG-y*o zP}b$E*p;RaQse|cK9J|R^vV=}z@JC{t~Qof+BagxZyXPe?%o+m7by1S7$arl4cn1o zrdnVgztrjY(1_Bi^$CoJRrbAn-J4ddv;>HA(4fS9iAENCUitZ{S^O1v)s1D9R&0Uv zDknx-0Kl|jQsh|VxF>ID2+Q+i5sv%`OXhFCmOvV`kns|##F0VYzQBl;PO&4#s0Z;L zpF1F9LA3bn&hK7J;AZD+a%Q2TL{X@AJ{zt20K9dUG+5-~_HC!OUn54NJ-w&~`tDzBg@;M} z?ndpXh#vl;@yMKTWB*TLkyeE543(?;!M~UnA6UHs+_~d5F8w`k<(wqr6La}Ls1Ecx zS3twFs=J)W{m_}werQ{jy3+BlFQo~IdO4}6T(@SilRe+80aM*4Ztd&Rd# z^8L`)*NAn(|5&ewAvb>lyKc)bYOCS8p!VU~yT5?X82YalNG-}l-zqmRac>WOxq*1xLjhf5@5 z0EChUtephR2ALCu9n6<>3-j-@c_WiVCP59b6%MS*GDZx;$p6v3@$SKUo@<+Yl(dHR z@29hhz0`b^nP^Srb^)wsl9B*Pp6f-;?-uW`Se&{?0>~K0C+be@e>U!k86VP4fr518 zcz?sb$Q1L#6JWeaF|wmpdud(cpxd<^N*gc}9h+2;Lz6Yi=WTholCA~rF+^xU^v+n!% z1dkKN7YvG(h9XWm6(6~bLsok{OJ@A(zBaFX`Kn6Lgz@%tGIn`f^qY=&T_Hl@_B%}N>OYpq24tK}i4y;!k2jv6Oz z+@AWFVlc0CP!0pwcdEgh3R?S4hPKvmb3 zib3DO$gTL{8o;T>Vt}ce2}i(o?o~N@Rq`8Np*YZC?E{w_rwDM>{N=fWf$durwUIdj z(#-@ow+RQ%w7*+PPDQ<72vQn0Ht@<>*h_eaxw$H^Ue9|x+f8_Ujhl;1cVRsmhAg{P zBbZllK4+B#aD7z`6)qS40^5z67AYt9ohD4^Hcc0kO+CE;y0pF^#*M2u3Tdt2s~i4& z19R5*K;uJT!jx$ZSRP@{J)Stm9<3K(V|6OM+IMsZF!3(Cn7#n+60?frG zF<^R-@^CpQba?7EyHuNksZjT`yd~C$Kd7mX#sExT598(5n<&_K){vi{uV@uC3v4(4 z&KIH*&WnGDSp@6KPdfJBSP1*578PHLdVl$H*9|~Zb*_Tln@>n5T6x&Mt9UZK#i?=TdwQTD62a-6;hE*K_5}X?SQk;p8Fx;_t z5EsB5-~zWD#DVO&&}mG7?kw3q)`^F^xU z(P)a=xGwiPO|V;H68V@lEOBtj%AUaz8#;T|8yjShT{)8Wq z06NieB)`kDZF6tL2`~&j!rBP^{Lvsar-p&jFPM(uouACrH1R)qMVt+%zqtNn7Ntp? zA9lbdKtCDrt^dY#6vn5zH-V4smuS!-p!Ymx9qs=}MR*-`af*Ur0INbaHY2$j`#>YE zoE57&j`wCIV2ey^f9knrd=uFX-PSyO4)$x5Dk57EF%3M~o{^W`xfgaxRF;!SKECT6 z8yGV>JNmnqOf?HN+|ULlcAHM#fce`6$U}*>aoscyM@wSo(S!qqR<~mP(B(sDuv`_i)zw2l{KOCaYge<%AFexjx=}G( zj&VXAP(0twf>~u3o&AVXuD0jGEz!r&FV``oD*p1QOfTg(m#ubF!HOVg03w$Q_23LZ z>?VP4@tD-gO8Gx0ld)J=tW=>{hS-D&7C|F37%#`Y)bDR{DoV~pvlxWW77r%1w%&rl zzCxK8Ppz4&Lw&=LIC>+ihTGJ1HM!yYSWQ&=v!)Z@SdIFbbCD9B7#GZxs}c0?Bnu!% z5#1Pb@5SIp%(2e>h`v@aq2l_H>fv0$R}@O(>vcibFR_AtZhpt5m-D z3Ll)EkZT7Q?$2J2A|^%KP8xleCtr#@xQ=Sc&nbGJxlD#^@nyoyW3>Mu6!g3NwvXaf(qq8!s`L z1o0T|)JdjgIiLSkIYoQ~7!0e$?O~Wi4%L4!i5y?5>t8dhwdV%obKAsk(SpFG5jZMa z0yS%wldR~gLAVpZC|3t|3hn}de4KQFpAF}G+)VrzKCu9!wmk1~i#vg{pF3vEAc1 z?Vz?cSy2#D&Bz;Wkp*+Xo}-E(JNXnyXTKi9y*4GmU|~I=bmYIZ8vA);`G)x* zFOjn&IfwdOGU2gr=c9bKl)TzsU5-E>VG>wXE=@ht>t_S9T-04aWK89933;k z)?^|ucK$!KVWF)ZAABxbU_=u*Ms{mwg&GQ2O&cb#lZ5ZzzgLxhQyEABJtj@G?H$@~ z=UNbhKJqtJ3WGRKBG{|lhVGhZflG*)v}R(I3xHPNTvy76kHRT%g9VZRA_aKZE32~a z2vaG!O&|wZ#nb58C03Z<7K62277;bm0uZuRKl?w)-cWYeE>u37BHw$xe0y1P~g>=U_Svke{qK86GDd-CCs4pjy15 za_e3OQI%8mlFqxLj{!wo|EII_j%zC0-o7FVf|LM)^j<|N3WVN5lcE%9QWc~_LJ^Rr z)BpiNnm{N5A_&q!n)D`8l-{I6K)N)kzB@Db&YgS58GoObzXBvV=j^l3Icu-=e4mB2 zS9s4?q(RP2L^WCe?X7xTQQhMU`8N671E_X^r~BrULQAIWtZCNo!B|%Lnqs*ladLJJ z29R9$0@b*D{TX!ZA-30T4J>uVIls^bb+P=faWYmNWiWFb*pD&nWfW0Fvxe0l*lPbf zMy3p3u{f<+-ML=T+;F~PVJ{-XLnmy1ZC~H)+@2$#c-5vqJ#saXMtx4Flo4P8wm-xYEm zltL3g)$GHrUaXn6O49)lKP@%26518vZY*GJ{cF4EqIYOu=6Prp1d3f>G`QpUZHX5L{MQ52=P^X=Tz z1Hcrzm;y%`1c4~9I7N3bSb^+Bv0Xt`Td23e2v!4siv)hne9l10;|TPJ-jD*;H&p$c zWyWFf$c~#>MSH|?#0aAmumQ+(xp4m!OTQ)4$1A3J%%I!CQ$keNR=_O{koIF~r#qZ_ zPErY$+%llTI3ScH@NInRRQM6YL*s{zVUPFi9GW~q-Rw{;lyz~qvYh5KT2ye|v&9_g z7AhodpC5|fdbCkrf5bI4cK7SHGd7%6l7#vBGAi4eK-(e2FQpUuHR^;B_7>d@XL%Ef zAF83D#iPt%dO2$vwToiVb7<~a)aim0e1ed6F4R36EC@uutzhdD_X-bpS1@#6ur>zX z*0fUX++ige7FsV;08Asb3>K}`TYKL@+7sZVAYwEzTK7E*v5oBQsk|TQ zwp?AQ%aDfX5|hp?mA`G9|Lk-=fZpM_UpYtH~YeLm};k9;4BCm(C!>5-poKg-L1 zWa6mFgMCV90YC^J59T=^CUn;^gphgw5<;l#aD1*ssl(LjLN@EMG-tQDuq1W6P4aD`?gLMb z5m(OYXcuQkeX_SG2(u4}w?t|J!5M~Uwq|jf0yJd}+hSALuKvfVS34ScJJmDrny}w8 z;ku|Q5D@YSmk4y;`BVsV5*TKJ0t#odSsXCa0p}g2mx{ohxq1-^Z$I$&<&Zyzb1~ZT zN+dbdswHtFyq(c+0&B{$zgqmX$HSs_t^r6U9w??ue*-&;F&7r)UeH3TWR;f#d ze5>uRR@om%Chbcd#&_Jx(DihDkwB^%nt_3W`lyx3OP`@LXz5A}(DzlYgy3b6HJxd5 z>6ElGm(?U?fZ;e36|sJMUi?ua7?gj*m&wP1jqk`jU|9H}!qS6yBv-`goLa1Y(=irt zTZ-&Eh-4p86Z^;Orr`o1(&9|nVWMX%Ee>=88U#b9dCZ0qMRKBuJRmP4$Vn6FN!xO^ z)NrkIqmuzOXBqJ@l1VO3Kv9?gxE7t?m(9j$F+J@bld%58KG|CLtx>&sa3s43Ll z5G5LmIR&+G_sEd0w62=2+%9%(3;SeDKwDCPHnC5WkxHzD!Sxp;AHqt&)3Wk()8%%2 zlj!!P`#e4VwO1Eh@(CtG7zvM2qR3TPD-t7-hfY9RqjoQ5Lmj@Iwr;nH_0$m67e*~G z+k-3S8{Ox^x}8C=y^WGG^wp`P7hava1 z)v(g)${c4WtR!mAcZw@Ydf%d4QnDn|ZB@rfz98v=ue9sf(c0QjUefDNlB@Hc6?+#x zLu}EQ(r0=0oms@fHgb5$BAkXWV2qF>t7ij5?290fT@rR4IaW~aX!39JG&+LulpMsl z@vQQ$7fv_;{0Da+2Om8x#N1GFKzXyCyB9PAkgK%_n51o@V!5Q5h|p|ojGeMaw<+YZ zbQXJFxh$Hb&>}j^%fhYcdMs{juMzV+F~ZjA7!})rd}<#^-g?8yWR9){Vb9C@yokHA z?KuveIQfGd zDFX?bYU@e&!R8GzH}zI1gvsK@J9GRUSSX%I7sQ(S9y0kDT~>uJP}S4x^IhP>1)mYp z50IsRV6KRwQ_#y5R?*!i9my{-jQAYV*vEjpGUI~Rf9m|4Yi2^+PGE|u4z?@Zi*yIW#h5WEsXQ9$XMU-lbPnr))DBMIX4Q4F;`H4!9OWiY8lIWzYo7u4n zu^tOIJ~oiQell%zo7QGm!#tesCsk z58iS2hCB#a3zMPAg2Pcy&ns!<1HF&dWmxI9Z)mfLt|iCwz4wtnTOe@ZyfuN|?ptHs z_-YYjVx83Ho^Y}_{-{P+k%2Xm_4$K#;#3T-$0g(C-=#U(vm#B$%$!4pY2_}j-BWJV zq(oG|&U`PK>q#>MR@~J;fbSk-^E+s;6ihXN=FCVTVJ?V$<25dll0)^!gbo(0Zn4Usm6g`{D6VG z*9QRh5jx8fXIn>;d1_b%a3By=K;PL=TgtA(3LsTRj&q63w)hVM5?zO6^MDYHrt`Ql zN0gCWKOumAmWzdZHjwI@s;HAdQx(<5=#G+dWY|{=2F2PI%rTv4hQDpHX@)FFWDUm}XaQ;d`3gE`|q3v6^nis>95{|2o{0m0-9VmAe(*B!6 z)GXt3ba$Y7pH!Ga;i1}WYzubl=ozU9n-I+nV zvmQRF&kXF%FSs$`m}}?ysW<{9g>=*mCPi_DB7?tE#ZkBUIjK-$A!e+q$kJE#N?Rj$ zL4NQvd(I=`NS?`#mZsy5@~GA`?ZHJe6M^Izy-888;E~Nlks|sNUSJHUsh@4&Uw!ayDD>35UDp(!EqkT&}aBK)Ms30z@AhR)L z;eqAm^v{JT`c>dMfuJo6G6Z->L2Rq$Fow0^TWH?Z{38Exy4H~^mH}mSlxhp8=1@P~ z%+zs!l?31z3ebMDLF~$rmmRNWqd^|cZg^WCc&@~~(HY9BR2-3AUKPCS*4te(!wYHex~W$6QprA1u3#aN@BYgvJu z;*b#@GRcB5NjdR6C|?+vzDd#fQrJ-v=f?~v@HXLG~$~->bHY!BXKzDGL8tGrg)>K6m|o00 zq&?m$UO=u>ANMXxb5$D`p;JCyYr0YIh%6rce8ymL5!`pZ3R7*k6m-R(5u@7A;5iTB z{6-2{W<6^wwfFJqa)O9Gn6R8l!qar5k#95mILA3dag;uZP?|^{vLF z!%dbX&<}rH80P^qd=&uY9o77f6HrdBn6I@))QH+B-Bp^k{%seMWAW=gkN5|LMwwE* zzkL`f(C-V{);bhgg6eeWD{w9N;1l*lz-(E0lnnTdz2X5#r9pnMp4g>n;XdO-%AB}Q zwGq`irkZ<(F3z9Qb=`~@o6f20zj;urH8gCN9iJuAAfcA@*a@n&S?3?X6N!&_gvBBk z&Vc)kN`It0oubWk!KjX(#bAB^CuoR-wufuV9Qqq8xKXM_Zm^3eT_p;JE zqx}}|Nc}TNF0Jpe3clDVw3=1kSSsh%LS4H;Acm_?L+YB!1O7VnF1Gx$kYAmxrsmCeyOb|4E z=`~f$CN)hh5rL(a7GTYQ5{-O8g$Y(VyF_WFS`9b3RS%XWf@{+h`Z;%#;2J7Kx9rR; zCY4JrP&)V4(z4)hubRy~mxj82zeEk}i%a#fNYoDwJGGa(#4~iKQpxHgjc-1!3~v3W zJp4z=GwL#yDk}MdDkAd~J(@oFJh(T2T+%5;n6B1+V>#MAaG{m*-5w+sK8|k++`d0% z4b<5Kz5~>3L4w@kqrBnak3QIb!q|#%(JbacM#zTsR51AfDB`-V%J;sE{Id$-YEU1j zat#jR5smK-n>u09v0c5nJ^^i)#GF?-H(To7YvIyvT#D9hu`YhF04RU=&!bQpCbh@K z5+e+~eB5KjTr=Lu4i$*#2UmpNgZqRqoi(sQGu)qJ+ifSj9PR=vnm~Z?2;Rg`ETLZ| z0w3*Cy2JMT8B*)?_G2BGNyd8@gO|J|x7hFHD66&h0#(b@zjr4T|Jh}_>q^Fr>#C{Vx89VMHMh#4$JrF@FKI{I!k zyhr@PO6QGUiMgQ)w)iqrfJ=p68ziF$yUKjmt4Mg?^v9td)_O9A>FUx8v&V;KJCYH& z+T~Q_TPEBqE7*!Gwp1~vWuHytyU|$8_fcofh;=w@q0{5e9lRB@zeJR0A@Fiz=>7zAD5t+k%yB{N?CpE)KZbQW}3PZO^K(E@g zfhytJ_ksmuieGBm`Ym zIZ7mr#od}ugZ3(xP?JS zOJuvK4xHFFhSk-~oSAhA9-XIicFwWk$=QMkc*_B(AJ`r@l3r*Qa*Ekho4c}6)O=7C z>D_DiTxShfc3YUskg}*t;23K)S9OF}#!9_pcvl#boEPtvy3$;L1$*G$@IgUJ+nqH3jwFADC678L?lfbYE2d%0{la!m3ATuD4n&BqT%>y_xTs z?_-`xao&YX7YSb<2ly3qjHzpTA5={ux|D+qKNVlod&rJ9@;ON6)h?f#UoxN+n__#v zZ}uT=Q(UD;t-;v+%iuJ{i!z5u5MstvJwY*yOr7q%3(l7bn!t;sh>dF`2F1e!8!r2N zLJJCJZ7qS^F;9_sdIYG!60LYM59j=hJxr$qM$aK!8}6{T4kf!y!D*8|J`w6ZH^j~# zr8B!Y#0}CCCY!oxP$i3IrZ^Oh%874Q8hUNK-P@ap8Ql92(p^7QW%r)`G|zLW^!D67 zV_ja1y0>|;a+)G7;#>}UpbJd3?^Z$G;a5cm4PnJl<*P&SroNt3RlyDNoz_|^3ASYl zH`#`7(I^Dc_Hlm9xX25Hpn4nqXIN*M76ZGT<^_ZyYfV6mCc;Tvnwt^_XUH!#uqPPO zYUkPa1Pjs1ht3y2NWF=j%Mh*($W6=*Isj&ALN#S(Yvb``Ju0HlT+W=(s9iJWX_u>K zRIC4}pY;fFy*c-#Rd4DZ03m4njmTL2X=i8<5nP{g4n#cYHHjgo60Lw^jIBiwuP2IM9!?lP8 zQ>b>EdDa|QPP@v}Z*P`=7fRCN!GBa6(3p9Qz^f?7^uk1;L+Gt_hdHuIz`0wK392iiboqI30^L;s?yZBXnuDdk*pGl?1@Prc# z$e8e2e_wvE?_QSBrYnM+JPp8>Q~M|LN;XclE$`lacs0MQAzbkeHV z(EBp!_@E#73RX8GVN(PdZe)6B;5rpmm+$6$RIlWR1W8>$`)hmOXw8=@YkBm2w=9d$~h z+k;a@gcEX^$Lsz4_A~PXU4+F$*&gzeEi`+eYB<*ucP4{i{v6aF?d8a?;a!EPu#`4M zZ`da}JHQ)BTOsWML%G_VdbBBfBlws^k_!21gSuvnzHXB!WC0kf+SrTYYaM92(6Txl z1L;jPu6AR4!|I@(X~Y+l(lKy*Z>tCWf49+?&8CaVKe8G%$ZTl3aGp$`0+-O-5Bnpo zO8EB+vLso0&8RHFJnb6o`l64{#1YEf2Y^Fxzq2}0M|S%@gLL?tP}LT?;f-s+BE@C# ztQM|Ip^^4?y3-o_&6vJ4p_ea`imSu~JI*~#%qN#^7WGFg+ZiTkL-)&f zQe$b(y!lngr3g-&gGP4X`w8%FW2E{5A<9>cxm0OwF4&oe}rwh`HS5ws1Y->8i}_A?}UK?P@OUMt|f@qi0yU7^{VE#OSugDt%BI!czP^KF6>@p$)OLKV$vbuD?6sEx(rTUaVm4qkp5{5r&1 zyy+edy#@DAulo#}k)qI`VqaJ{BNVzt9D0sE@kQ;{dT=xDMy7-w6nY^=|2x`UWKyGemXYv@;%#hdy*Orw!aAVK4oJ8J=Y($@2N&Zt%Mb;y!Q}sUp$s)cUCkj+N#|i z4LH$izxCVH@TxiC6Y7R-u(5W9ub++-fxIg%Vv746eBCa=SrWLVU5x&yY)LcOLdd|F z&$;B6%6F^Z$+oykSvEb#t{L5j#V{HCe)5epHw9x#d9(7`gymJkxQ>CIPUY~Kxji4 zy*HnRhm8X9gprt0A9oCg*i~>2$ACD>*uknGfM_1b@VY|3qwWeXK!j9+P}2!3Vz;OR z>@#9asIY*|I9w?`==^ZIl@a6a%c^W3YkSMQ@OZN}YebQMZ!L-%rvhKn9_0su-}R~A zE(1M#;_a^HXiTc;lMcbJ9@ynqn<9TC0g@?;xVy=*dYQvrqYVQ>iy2%SmaDn!w<(0T zN#d_cKHjXJ4k;yVyAfpF;IVoC96FOO5cz$#M|Ni%>qR*7bR;jKupK*71s#LQ3K&MIAP!|$afX3%uV63~SYm|x!=K105qW)-lrknfIk z&=(EbPJi*ClI`4CoNK}96d0XG4E|jUf`%8IFT!JDFDvKW=Fx;&5y|o2=M_ks?K&^d zXFH>I#g&ICkNBk91I=&luMWh{l5;2o9Z!ecG^W>RE@MC-sg0)laga9BROE^(id%ov z5&T}C_>NS_6YryC{>r35IIkcSy=AhTBL0G$AmWNfC-+ipvm4or_=C1foEqf2y%UW$ zKGIzVa=5|5Mm37Anf!hr+H^C(gNkT~*3t^RQ!>VLk-U@`<5_QZX=}X&U467(Q&Y|W zQpu74Y=wq;w7>MuJq++!_;^)-v$*10h*jthZAyanv-OKx?<<|pqNIB^=$$?Frcc7B z6!i5V-iWdQ?)GAnz_+i4^$J3^0G&GQoJz8OF68VYjbPQLR5&YF{Wk2q*Gy%wJWkuj z1BpVE+oIKw?qtBp2$v4j%Kku0z@qNMemJkvX!5+gXa8u)3I!-ZTc0AE@X*2sBzp8LgEVD6&NgyL{W%y#wv_ z+nHrmR?^6de|J-OAs|PPF=5%hzv1JrKv%mC?_VTN40sC0;w~?C^R`{P_2v(_9gW@L9wc?k4 z0Gd~dB$QIx3^}J+CEP}XHxFCIH-F#_aR|AAtEeN@>o5Y`eAieY5Cvyy7P?3R zmBZ{$0xjE$#)d7(BIZ-lna&B=RGc;xW9XmZyE*ovIq~D%B}kavZjUt`l|~ig{+FAF zS!6*j>+V1Y>}HdmdFd?w3-cDj{DU^~9tM2Nplpkt;esC$5kg57IVz{gQ^(oNyYAnQ z@ey6kP*HY)G#c@*BVeUo)3L$J%d2*w_h}6N_Qi}jL%X+NtG(_H2ZxtAaRZfF9;cnK z7j#!%x&@8<%!$O9%fo$64=`Uui@aB?>yA{ui9$MRMdn>52r4djQO2&&fqC6rMsJm$ zhuk}^i~8u{&P)y)0ld>f5@^4m5{tsALb=}?n%$af7ZF8mwTN@gv34@}>}WplZBluA zXJ*3cGWSh(zvo+-4}Ov#VN%CNH8*dIc@;48c-1&qNBDeqboFuhHx4x{IFdywUzTh#c`(cIy@;ZlqV8?P6H%q@aX+lc{NZl%BF}ra` zE5N3iIRvjSDP`=Aj6BFBF&9iIHc-wYf(({5azK;YQP)@sePW#e-#e`AD)RZ0y?04; zmm=3^SEwuL-L~v&kW+(Dc9=Q&c_fmAkY#DaB8U_6D65C?6YWG5@V7#%fjRi{MOmOa^mLKzKRhoj8F znYL@utx%bUK*Q3Y9nRz(WCCoT<+#skayHOKiqrVo1G*6M5(g$qI6caZg}f@>TQ>}@ zG2T^=NADUHzQn;ZF`Ua@y#^Fw?!&X%=UH_b5iOAD<%gk9G8qJWFZLL~VB{&P5e{ty z&+O-}WQ=8^Tv)#fq|NZkiQ^BU6WpGvoyRAX4N3F%CODxJh{QO6rMs`P0qR27s9yA2x-#vz?o9oKtq-M}ZBo7OwJ^IQx>8F6+3IybEbECfD9jnbmz#Y?l zM7JIf0&CiYv*1y{nn^GhAj*2H;i~KLf|wL&ALUZSz_cSs@@--pU7T7HA8|z>gQ=aO z#bii%QDB7snde!oAmYf(n3;VKB&XJJVM8RieyMtW_vSvy*S8KrZvj5>khLnRAxgn^vjx(g6LCrxA@7(Ts#?})YTOH( zOtYzO#KigA79wV9Y;H(P$wuxdOk{Zy;yl$PJEDW&wGBxLhn+G zH(OCn8^3Tj94a?b^Qia@)Z!W9DiPbPYpIpzrYPZ~U_sxI@^pW~*>nH6j{RpP(Oc|) z#;Hi$|AkW(=zO~7WBfa?!AH4Xvzzly-gorHecvut`n9xYA`u==%PWHi|B{@h>*L^W z1Cz@va#K>C1=72`Dn7TdFi;8SlYTOreS|IhnkSS@?C9zz>Jm1YWeDih6howF=Nw-) zSn(INj!Z6YJjix>WHPEdI5ij8q^6eZTzPwNbmDGoCcYse{SB~p?-o;s--m*SiOe`F z95^&rBJX6hsVMROeuO#pI8wV}nqMsFqsxhLpz;$~7ZfkDSL|&l>V7dtHTRz=&}=~f z=u~bzzSD;7n-n?ZfaOwTXqi5NwJR_;SDa7Lx_t^P&s~-+L(S-jltJk+;n>}~$}02L zc@gooOxwx0VxD{i@C7KHW6)oq$fiI0+JQ)x_@9u_f90O6cX4@ip-#K=ZUKKJ9Tgxl z&?(SC^fjO0@V2&je*eL z*0|#80sfX6F}*r;3fw?Syz9;Yy5>y_;HD7toH{j_vZoq>FX$FkjkcRy4(NDGx*0FerrpzupeD; z=l?Xyr}gi}D;-z}n$AevhTKgTQvY;;lZ$EM2 zcAf$gTB%6>k6-qr;TUZ6z@3fxZ@2gRuCNhs^^hYXIR0tRo}77l05-b4p)B`zJO8ia zQl_|r=A5Nb|A)iG{%f0%s|Pa`9r!mR@$XMZaiv3Vw+JQuVn7zD?x1_?Sug%#e3>+5 z5UEJJo4**4F1~bVnx7IG+24<^M6paba;t^fTjDH^Cm3dldojP*cKVYiv$YM+VQjw` zW{I<{o~ds?{9;`0$jBf}%v4zZVHdG8OeXcotVHjS#V^ho7gIWvuZRuui$h?#4TjIk zPVk?H@7BdK?QY4 z8;*qBK{L)-6a4eL@F_0eK~ou{NB-%nz?BR~HLT4Zi?Ljfq_+FjSCVou!`~OIlvXGh z$1hmft?95-ME&CHWv0(O6=)mt@6217N;Dy4K$Y7*w`QV zu@0Rwy^}g@m{az@$Miot3a@K8>GSr&__ZGF&6e;cK(>m@ABp+Z#{A-QGG-c2*QC2y zXXQ6ezWO%dg>RpHn!-7`3#+w%EBOo=F3P9L^NV9-f-6n$UzyW`9V3w&B$pSDmZh8C WeNC>4^~yd2epD1RUyB?pI`6oEyek~4xNkt8{TASei^NRTuliiCk7=cGuG zGz!9yb529f;r6ia?(4q02zCFt->urRYKn5Ed%91b^PJ~AeSY&)MM?JTX{yr@2;{8X zZ#VBiAcRH`2)-`?9{8VI{10*<5C(|c&FgBe26O#{G5V%n5{rWh7he*25XF&1v4)JS zf4Gw_ea5<=>rT$;M{0fK@Hc9NPPGN6vo5HpUHDjVStEUj$NpmIkNlJRSN(+NM$;A={J zB4aQ}zIo>h(U232KA}A%Ax(5AwVWIl7W}0hC*uhY1x)D+i4r^6Cn0_>v9Yz7hV^8Q zKkdV{VzGOi@RQg~xTmsjeJXi&tQ-Aq1Z=JK6Mpj4ta;=p;!KO=pS5C@?VGk(Ix+N=pWJeUxfZ4QvOBgzh;Gh zMCeo5-_hlcBYOImoxudiuzdrA5h1kVFfXW8)!y53$1% zuTD;|9-Bbk^nx+{7hNQd{p8_}QbK(po%vVa<6rvGH-5yBA0tTe-`S5c>%W%y|K2hR zatsoMK`Gb#LkN$f)_yamPGzU(T|0lItN$h7bz?x7T-2}&m;cLu9~JeIP9O+7v}2$C z6=RNAlplwJB*f|rTX8+p$%0TApvVk+%gqz5rTQW>gKxoOvcAz@{-BpftmAi6s3d@D z!zs$_@`=`Bbmlxsb^%k!PAmdSohNMK}r7k8uhC`DH*^ly{lbOBZLIdJ${_ z<|4nuKX3Pcy{=sYAbw9&r~i-JKYG_HMIf;HKTWV4bx40Pkx>tT5XIg$ckYt~*33nK zYr0*#Co`jhE;uAhT^-^Ra@c-gN2fD!u#<(MB^!e;)LMS_<6m}kq-9cd0fg8L)3sF9 z(|L#%ArNTWpuj-7UKFZG_h$3lw>y1N$A543`_m67sHjTcgW-)yNl9E>`lYL*x~!ia zy=}l&HTsDRq(8^)Y;Rvw%9C9YJl;%x8fS>kp5=J@q#ZX$N52lA-2h@m)!{Jw>G1&- zDT`vV?DCZpOfr4NZv7>byi#HqaUqj<1f=s?TIpiPwX5&ykI&)@<*PJ^ zI%k8OJ+fT9Lg#k^Yt#~e#fu^B1LnDkAR0SX6drRq^&^#)m5 ze*$x>`Gv|yvA-^PFTU&O3Y;cN(;iGA#o=@61Yb<>;2Sm={bJa1>6}XWMRKlaPGGMS znX2{-fl+}6=B3OVvu@Z)RtpG21wMGumjDYzA(u}8h}c^5132I%3kK0>nl(ScQDBGz z8uNluhGdMd<#`^DMF8WR~D|v6r&fc8`1G1dW)}&&yFDehZy4uI3o1akhc*qdVf2ZeJ3@U&>n<_Km z-nQwY_%^$?7E?ceT=Z8v{(^CRC@uhusyf_kIzC$^nxfHl`^9phoXRQ*JTqjNTb?(4 zwN8Pz30$v;)9mcIIy4eMx*HImFW;Yt%a?Mm9b~&0BlD zM&q$bS|w)OW^2TCktpI?bMI`PtjeUa>p4k5%}L~Oo#Q9shDE6voo>ii=LMmsOa!O16s9f^;%KH10Lm9Ife(>{u;1LQq7+fO1je!j- z1&GytGo^hG=a~^690wEBeBo2S5{I`{RX%F{A3uK7DsflrbKeLqzCS)AI9e!TqTRyr zVZ!!&&XgtJ=r@mzdK=5o_8!yosBG6tmP+G{I|ZsL!P$3!#+{f8?z35c*SXPKh9bKTM|s_s`u)wJm5I;r1U%!6d6CJpN)KLJ zMI)ZAxxk<8pXr`XFbxs!eI;GKoeYVqmBIbxxCiVX$8bpM0k6_{>@RUVW=k7-y<@K;&>n zC|AOH2l5Bxe3RDd_r0h!GDACD259+O&wpaYow|ISwZ58wBc~%b3N9kAj=gMz;6j^1 z*urUd#|Fyk4OU#P&{ocDni9;`nO24P6c48~hA}pq;B&dx!n-_*mWMN1w|N7cYB;P$ z1M)gGU1)|2y>gcF-FVD5{_|eJL`s=S9c2cMY}c&7`<>$$gP$CRp#K8D%SB#&U+X$^ zS-b&Wc59zkv};@I3X9j=kQOqgp45AE-85$^rI)#hduA3Xc-KsH`k*CoHOJqiUo@O? zx6TI<($3kV@?{&(@S1=bU3ts9a9Wz#2{)SIKsJq=2eKNPx#AK31Fe6t6Ox%j- zc$W{tEiwyTO08LINuC*=VM`I)R_?YsG<0UNuG1&q=+?@!^38#RGQMr3A*~n67Vc;e zaeUFU26Uee^WMMq1QB!|y=uf3|b zA?vjf%eb@Wv7k>MtzY8YsGps?(=jK}&uM1OSJbwashcC*c`(^uYNVci|JYkt6$FT_ zib^LWCny;0T2?kL`$F>&T$O8I#Y~X;F2Vcz`?p|rc6Qts2i;|N#}VZ9fk_YbQ_NbQ zY}QTZ8Kd!$A^ZFHi#CUbRQl{z(p}r)Q1yYiiYaC{9|)Q-6b_hNUsW%!Ou~T0bOO&x zek7?WO4CwW@%W1B84$Rji7I(M2G+vwyOF{iny3(nhW+l)r+(u>eV6pwRn4LS(vYaW zJKGeWMm9fAHizwPzzfUNChsD2%Y~K7?DVHi2v#;fx_*;v?lt%3@XqkgV;^B;qm|MM z$&x!R7f7ywVy+|3*+B*iZgU@HhcGym9oFL=racO9)7qxhkRDesD&YZJEsIu5o zI&BN)Zs!xfy`fu6Ct|BUv%SQr%XT zJfySFUHQT8oY=R6(Y4Wv@5tj81@XfJTn74vKvnAzr1QdJteqtnwifbrl~;T&%HJf& zx+v}Okjn=A$wt4cgI@6ix3n$g&6Rz@@l>IlQRh5)eTf0-stOPNa&(B*$Xj$Ik(4+Bweq{nEg86r~XxsMAJkm3XQ;*THte7#vRxzv9n4fwH{=VyD1E>X6xe z3xRZ+Otd`ZBVV|eNqcd8L z-%5+O1Cy2vglCXJbi9ls(l|V}u&wu5^ys(hRoWMqUPOL#*{fSJn3+7bCX>Vg0wtA7 zz*Y9^5UbO!ipBZlSn$_gUQ3xl3zQyUNvj(hnvL9of)pXP6^#4Ks1TDHl@j0fW=hgQ zK`)KDy&<=6gNE}L>1k+!scj6%l-*ahyHxlGuQ3|eP~zmQ(VcmV7+E`e_FQd+Jo?$| z51G%dlvUnhJ3h!IjYL6CSPF>UTe;tUwZ*&BvZNHa^DoQI{Vq>G%oVCW;NwQzL6Na( z)|wXek%rimTHjg$h}Z1eXi^kxU6crY?H3Kc4lhP&K|5ROdT}LT+Kw*9&fA-V60Me{rUtTCaKJi#8;d)BC97^$g!F$>urq` zpGVk~h+X8UC|F(cPpBQ^2|$b9)tIZ&EWpZ{wb3Ix@cg!2oIVELTN~#I@aKxB);;+4 z=+@rCUQ2@XX5*57WNz%Sa@KcNAd|7#&PSXv>QK@{pT$7$hel2<e1WTq)^^`|Lv|3J(BlBy*CW(gvr7MKvDc*({>4r-Uyc%V;6)qO@i1NAwy$(#JZ zu0}EEK~3G&mW~qFeST8%3S*7Aie3#KZkLHy6M7}?Qhjz!J%YpVwVVgFuTo0UBi1{{ zqn0bitqZ-i&2GAimThM?D-eZA-6?jj&%3MDUwpK+RVyqSL zu5qb*1ha;8_2&j2 zqPAW4KBN;HI(0^0f`6QBd8#dPR$*K4lc=-Z9xYq)0rqgltpOG0V=s)wfB-*(<^H(n zLUlSx9=R&?l5Zq3p`J9cu<4O&b9G;rQ<=4~(L($b8ciR04`fq~EQ9k!0~MFEbV`I< zi|1P#!)R$T@Bp8A`=RBTEV|$DR8C={0N?hG?BKq?zmz>X{jBuj%nUW&XtU3tNLB@NH(42)Ay}36-@J289!Lz@YcX^8Ph~T+b!MXk0F>YTVxv_*U+hIAYO4fCqr?5W^GpWd zl(pfSnS&H;sLT*;e}DVhbm-FSK~6;GY=@RJ~f-fL%Z_%2rT%?Y9NQPA=fwFN=M41|531X7=Z5a=(4rh zQ;d{jc#XriV>rGWMIIhgramX+q47XqbOY;cnSjl++S$(f1GoV-b)fssLCG}-na_S_ zc8rm@UOD~cgNW?~b9J<-qksQYn!&S)$#$9Bho+3lz^PsrhAA z-Mz#n>^=U%I{!gU<4(X_V(BYl)FMO<5T)`?AQMWyu>xd7KRIh$1~f@zJKMIUI9Jak z`ilG{OcZSWc5meseaKL-HB>%q=}^Sn65SwcL|lhtlv60W9q62*5 znm!}v;fO}A8(@3_+kbuLFKG7TbpL+iPcAY3wdzke!oQyLujl-WIscG94&CDaR&?xM zXE?Bc-t_+w`Tr-htKWgF$6VV{On$})n)Pdh?sG`zSb2HuPlo*Gt*_TW<&vU)@8K+I zb!@!mr~ydi#V@r;{)x~0^-GQJfSegIa=$MGH=9cH1%J4g@3?v4HBf zv+|a#f#S3^!ya)Fqw%pn`RCPAF+Ml+CxV(mFW&fbY9n@x?20~%$?{y7ix%DG|& z*%BQcmH0-p8?T8 zrS>1;!ar81Dk0!YIpF$nYLE=8?`wU(K{Dtx^G?uDSIPt!H^;R50;8{bxE0Ebta^s3 zfchs4^$*&3A1JZuj|;3KP8&IemL^gY8g-1`*Eo(ygJ+?NFbV>bKGF*)2=?9yQC-mX(oz&1tiW=p~$8e&=caq1Wo*_@zzEmayY z=!>0Mil93HI^%Bh{X0a%(9qCx!2uTH=jW%DZ*g1Cp#_RtO)5)6%97xCXLmWe>Y1vN z(0jTIC$as1I*>wh)eaFSma4kP9Og9=@6h^mZ5CDkO_rW^wlkCMowC^4cfq;rnvs|C zoKM5OSCctVMJKqeuKo@>eo}0@nkY|YyQdj`tcatk7G7>(9Q}M=`I!}>qL4t}sqQhk z0mYe%>`#iy$2sh`#-lYEj8326EXu&thu8C%dWbgLU?mpyIVp%vhem31Dcq-ArFBRh zFFPF>j-2Q5+20l1TWue0 zWJ9ngt}fOPhig`Cci4}H3e+_jtmmFi9Juh;Jn~O&;kSO+hY)yJTQZ6m&F408F6D%K z!KWOZntAF!H%79Z8IMpBz8WSt@?^77v+|e8L=T&$agGyQ+N*#zbq#1(MXWR=Lvxv| zzle}FJ8}8dhtExh`^$Hf9rxBy^9dch?;Th#)XFxx9`7>XX5XQ% zNmjK#B`YDUB)asucs8qS#0lZipMuKLFXLY*9u1Sx(mC}vc>G&NeM62dY_xWxqSWKG zk-B+z#Oqj+YO4LAUfU`!&+T>?r}uO>(%YF`w-CNLIVo|lwe-wfl(BN70$uysJhA&c zo4^U$im%-U!T41D^=2&KBsLuln*1ETYn$~Fl~Z<3z1Br!Ng1uKNRNT@_%wEsAcBPK zyG^5^ZEbIVM9CxAc?CuXdhG7B0d%0&ToyhknE5Sv#g)YM{13G*l`9FZ8)bv~G0ll$ zBH{;I$ol5jd?6+T(n)w zZhK$QZ2$E-e(f_#KIZ%|!@U{J9M7#~{Bq}Xhvql|u5+S`)r6Us3|AvyyT9V$@GOyKY@ zU`76|D#N&C^BL9wEA?g`{Q<;``+-DNS_bkitY%{#%SXcV02%acU4{&nq~3hH)@M>- z6dK^S2xX+{| zJHKItcGGjFk4St@-;{4;orvM|xuhYjm>!cH9IM6?RJt9~%6uSgPKGXEok$(2(5R&u zKw$n=#!$>6-#dBn+^#jZAahV#qSUFS5fAb@w?nfo)HjbDPVv01cleeLIApjR8-ueNo?FWm-R=GIm#PtV^VM@d?q3j0QyBQ`cR$gjxKdpU}3eNhf;;;Qm&&++6lYkuN@ z6caFOji>wo^LFp^Txp4epi5`7w2Ex>^CU9^|Ar%f1MRP-fLC++YkG=c!Go`tiRmM7 zv}#}*VrVyI8oO$&B|lE^>)RAEcpS$wN~bhh`q0Yx&~|E8X*A!`?qG{!gOy z;~$b`7-df#@gjo^(?0d~Di*vu&%7RkQg7Qkp0XrTgphM_-s5vz>zfo8$SPlM1aN%) zZwvjq?d*IGiwOcuYDe&3!DYplUo5q{RPrs9OeP8fY~^<RLDn@D1Ph`brZZ9PfdtJde_YJ2(uZ_@+ zs)M~8=lLGN?Wtswn!vLhsKOJFlD}QhrZ`ro4}ViQmLKEcR73yh1t1{lx_l_en*DBF z+H9Rxixaf``6Ysz$F*mbFR9NMsekG!lXI+|NvIGxt{Va*z;uuz(r@IrIDql3l`lmw z<1KzU0Z~GNb-K$KehJ0RX1zPt|10L=!^Qjr1IYl}Rll-sa}EnW(5?B<91DJnLh(Pf zYM(O0!4tvH0Y?YW8+kBX|54U7KeiV1qqCI`xDJ;qBR)YYrvq;5u2%*HrAN^_t5U$3 z6|+&w6<-bDvWgr>MT{enrpscXmIQ9c!V{a*RGciV<=!%PAahimuN~T!Yua+i&!+EOr)E zLeB|Ly}^L9=qM%f$ysXtSMEEnk2eP)kHXE`%;5r(*R71a? zood@{B%|*HcOOW>%U-VV#*h<0&X#>;2ku~NZI!qH+VOcfh@Ng|zR2(%gSCal6>mW6 z$Y9q2)FVe_CAM$(dGE}t+lE+543-V{Dcr5uWQ2*! z?aMvR1b##Uz}C5{gZ;;&Sokz5yDQ~xE5VaHfRY;QChBi=0WLW5E!^92XzBe6GkrVmcW#MIr=#LXNjDi8$Vc&H(sFo>O?-%;LDcOwcn>Fmo zxY;rT3^>}b-7yyG4yXnDDJ=NTy}Hvzq4`bEo2Umj>xx%eMcDdvL2ggOf}4bk@hb@q z2Rvf+rx`rh-!N&3h1OQt_7&Ur1cmY5TrNdbaMG=%%7&Kd=Td9+V@24Lf6FD0cbj-^ zKjephF~fUC6{fR0!29~eaNn+&ad)oi(ww=32XC}e9Lm6T__4Hk={K1oY_0AB+l_vg zLAa%}m*?Ql0J+5eQn*zfd3Abd=jXqM^BWnzU16)#x-G>&1i`5a5L##}?ntu3mJ}=$ zKh)Q0?1gL{CUv6>Jgo0crSl0JLaN3&Y@Y&VQhw*-Fc!Rtvy9yvR3;bu#pqVw;MX$J zZ#BG~m2pn}vV=a^M=!ky_k7p3qbc?p(&_a!0n(XSG(a^8^Vv_KA0u@Una@|PxotRN3?L z1QKTW1jC{1QTi^{r-_{Td?T$IZ0xqgzd(u3ox51j!pJP5-^!c61q#>PO;Lo2Bd{#x zO5EV?L`+eGO@gKAAE@$oz$v{1aOUjz_QEA!b(poL8E~mtD8fyV#(gSDnk9bMSU}c! zpaG(RXOgR{)FF#?j@Za_Ba`UvS$Yq2h08Zu%gF>6PH&-uEf$F_In5ch31)1qjWj20 zEtH{;7ikui5HDl}L~;c|_qb~f^?=H$#gtKt`w%vqP-5>z|51F2&FkfWX2f8O)qWnf z`B`v2zdaZ>xn${fVblVvdcJ5-JaMbpyv|&F<@LyvLb3-)Z?_$j^-3KrcSp#puB;o< z)yKf%gi1j#$Y4-3yY?N&T59Xv`N4hb@;Os3HgB~_b2%2@NFSvJ2`-AiI@KR24LF=1 zGp121>GU`XgxEk9sV4BIj_G{+?dcEok(vhDTD0Dq!%H)oRl+vqOLdBd*&0s;4Ipgj z0w5IB0bWPFx3?FH{?6#@G`K*)}@%g}9IN zKz9OAE;3Sr^jdI@ezjc!`n~v%mK30X%XJXxt*n9^hl3LHI*+4OHkT{!IcGx8CR~jn z%Q+9n8y^k7i%<$?3=_Ouxg3eOa49vt{wB7T8*phh7Tur8@ zb)wBPM}}4H&sK%ii!Ipa01P0jS2GhRgv&Z}m4e!`PVWHt+sDhFUA{?^OMCmlumY3aQ&W4N9MCc?n8=C=W2uj@mkW?KshnL9j(`d z@Y$QiSK#6Gb((%3eG$1b#v&oK4g{}}HGw`msoO#6;h-{)DM!P#^Xfc4k4%;f!q(vC zp<6vfx{m9r<~|cUY_u4-mv$EK?VBp!Sjl59+Z}6=98iUAe{TpA(T+21imF9;uVq~B zdvWP2YdvOH7d_sj+fAztBDNl2Dy*7wBJ6YroAu;Yy&%mS?`^Nu+TY)zT<<`57YOcK zk2Nevbw9Q!9&bR6O=?fZe3=BblRZd*5=M!;dc{MJ&IB7GQ4{8>m4mtBTLvwAi946e zE{&rJljl2HcdW<8wo2kgSf?XL;W!t?kmJOPIFI`&Oh?e$iX^-~K7 zh_5CQlcB59*Ci(nlzq0_M{&7auP-4mW&UWCt_`IFWsOwod7+7-r=SC=ILuVsO5A}~ z3X*Y7-Qh?gq>6cdGTq1)L0&zRdGHE75CG|1i1 zPGoSawc&Y}>u?6q-LV`mUF(95RQZNCDtNTKr+7N2PGv7o<JR;d)eb`52S5#r?6( z34tm~w8!91UAZjYBPF2cDqgS7F%azGd0m5}RpPTT=yNbqjQmyyJ~FTgsF=EwQ1Djz zX(LlbAlCtLtMZ#n;CY7web1#@6Y=`Ro`e3uJ^gsQPlOmL&Ez`@W&d4=#n%a4v2jtB zDC}Ztyaj2xYt_W$4Z50c!m&_iv?s#sO4j-3^W`aF5RE`7zNr|PWwKYwgnd%Uz>8$i z6{gqpC+P{eoOixm%c;dzcfpT_a<>^`q0T6g!P^i8h||U^ZWn!u>xr_{rlX$9$?@Ch}AHVE$o%9 z`L1E|;S^0Iqln6Q^juB-A+OT$#)>z*XTCV<)aSL)FU>GTUbQLBWA5zpB@EDtD>%Gck5?LaG$3q+YXaX=D>`d_0YsX;AzK;mk_eN7pEiiAGiH#2*b)ILee;Xy}tA{ zNIZXvN@ER!>vruL`+)Zd!0dSVfo4JK3l7k-gZD4H$O$5H{8jWD@d*z_LMjGz!d-uU@7|cdL|2No)dG40y+>j!$Cs934_fb zpUoiSwDZ%x(A-MXFotI2B+=`Q!#Oh&19Xg8!so&F6~z;PnEH>{o2nuqRHPOjw5Mj|{-a|C86z#%FM z^sAlf$c?zy$z|oT)}cwRPoA;xO0(V}CgP}?Eye&4i}|b%m}mT=4O58Mwn=$!zQ77@ zZLr~|oDo8ouZ*N;WU+b+)yPn4G%_L#HcC;}?$+Lf5*ogixk%_Yh{oiT&+!sC*Seot zY&Nt?W2z0(K(~$zgEe21q2=EYt$fcqk{A(4t`d)* zS?4YCn~)s03T+=(V_g_$Yqn4tl%sV zJ4ZoT-RNXKnej9Lv24)&f=MKAjAB-P2h=5?khYl-kC2@Soui3FfX@D9SY8d1MSSV$ z7xC6t27`n~);2Fek#oQ)>}g71JVxPtvrF4NK|SEA3^k=q<6c~XOKymYa|)HXFcus> zd&Xe#(d`_E$s#_3vKY&3lxz9&mdoBi-C<&FNn z7n!4(d7xQeuRQ}?sR-^a)`Yy#p}Q)wyeBOB`PD!&u4=tU;gWaaaF(aUPdmW3%FvFLd|1NPiM9McedpgandPqMOMqUqxPB1u&JCI01xU zAiJ#hQY={VZp)qNA4umsIq`8Eq$TX3p#i5=6w@#PlUy0^!T4EYmthE+C6wl2Of zoO8M1Wm?rmPY1}6R^LbbPbl4ytbfyV* zmKYgI#!L+o3dz7Cr=_~YOCy*MQTV_vn%bd}23gd4cQuVG=;8ziPVU9#O-l!^ZQ4-%8+tKIW z-Tas%>=fz@19vRT4!q%tEo8rebl zl=o|^rookEByYDL@<-wSuNmO?pWd*mSOL!z%0lM>+C^OW6V3{FM=i zjz`1Yi0;0&Q917yZvnA#pv@LeC|&m6LYmOhJ7aG5bO*OPjkVow_Mm{UqbT2JUDQ8< z$%*@3to?6+*>`V9pmIRgG;Spd9ls4=={$|)t4rCU-gdl==t~4+- zK2NnsRGclmi&{Jof7f8A2UXXhX(;xZi3~wYS51{ctyIZbX7Iiqs1q#>CeT^B2*95u zcsZmjyX|fAU%==o(;Im-@GAf`x8SnO@=rCxWKrYa-eT0m5GA)Abk#vht5!D$R}HP( zwduv%wL8#oRWVQ&1#{|d36*>AZOchKq{V`>-mnJ`hM1z#!oB89YHxpVdu2{H-A!2{ zu)-%kTT#M2_AZ3G5!bExekXH%!(d$Cf%i3y=;CjkUuPkm7FLZA6X%MirT1K3ma4Kv ztVAq)vUD!5Jve2HN(q$AybO-~i7N$V4CJDK$_k#F?IR7KeAmD!0a_}YJ=Zb}IUM*gXs=b^N^fUnwyy95nWyNo%XBL z6?x~SlChWa{1p#2k+~}>fkBPWl%9WZu*MTu4%w%n+-w{|X)%`BjYp#x!=C9h7!ao-%i7P zL8*WF$;V0YjgpPBanSxzarKot|1&{=0SSr1!|z@oI|+@vz@1U>2Dm(ra9h2DNO%C5 z1?rG-ymOCbZN*`&AR876U8dxl6Enruu3IS)_ox{W)bD>mc>M*Mz#a5)vP)onlTBP!u8wZ5-!41Vt^WUIW}7aiX+Mv zO23G8GqXDX&Y>OLYH7d(GjP&RdV2ZhAZiZ*b!Y>tIyyfVgv z@j}!)Vk`i^8E@ipb?^ilZYa^Dqs(gnB4v%E1Hz1D{f^jN>bTia9J(5w-(Y@;q7yu_ z&cXti!j?YioL@o*SS@R%hV|df%9w$Il5V_WS$-KK8Avy9;ZP@VEr2`6 zx!|==lEXS^2n(r7oTgqMYy!$CTPP$NTI}(VP`nwM5 zXcUm3(*@lNL0LsKZ}yenDh7s?fb0YWLu`LcdHe1r_q zmG8p)prnPrSE2NbrYgASEc05+P1eWD;9HIFpAqh_pUKKO@~46PI5596)4v8D*Twt> zL|}*QTP!$ZxM=Q_OoYij*Ysx60P_SV4Nr{W^Is0jl7NB%78=4?n);n{*6~iG$!CM@ zw&;tp#AX}GKmtYx>ey^8kJmIXgtB$pVTd^eILlqL!cBlwN$7NOX0BsWP^ZuzPZUB9%L97vaT{XTcw zJO4oDJ4~yrgwWs4rzJhUk`y!PP7f(zLd9^03wv#-V=D6p>PlWXjE#MX7|nUv5i`I|NW;^@+-@DkpE6grITA8T zPcG(L%OCI9CTFkn1xUW)hn1h6f;21Z!tJZmp#KOSUAll$O?dH~o5NmNS)#!lucPC> zbplnj4zTbi&;&&#z^Jd7*E!!f>!d~*2kIuNvXp@qD-pdg?9*4?`2O?D1=(uwm~0(u z#s|FYU@>oNVx!xX0assGh{9QnKCM1D6=$L5ESK^)S%)C<#>@2q4>a@w$rXWn1$f!1 zsn<9CHH7uGg&9=SmhpxI-@UveJXOQH#Gr6}{8?LC-As4?ONfRg$s-0*zsoxBuVO`1 zL$EkfTDH+X2fE0a4{p}Cv9;8q-!@+0ptUomV%tw5)k%IU$C%j-(QtRa^@&<7E3K&I z3KrZ^WeFs5Vg=Rcjwqe`Y2b3P=`|UXZ$Yun?>%8;G(pbSYewVCd}o``c?PNC_XJu5WZ+tKYJaeJSK~*cVhJv2c%g z@jHzTj-tYYqMCJmvp~!@a)O%2_~sM}VfdSJS^dGvWWW=Gy6-D?#RExcOuo`F{=w=B zOp)pxZkg$HlbQS1IGp8r|jy3bs(=_5fPD zal@MdR%yOlkPwsS+=Leu&dQ}S&F)HS1x{~UjHd?{i1^kP|Du)N*;Wrs)0UJV8irzu z(z=XiVCe&z1F%&)J9^uO?|jm;tyt^47Gl)bDuOOw%(V4l+jn!p&2Ag+l1Yyzjp_ln z4K*w<&o;6)c)eMe(8QA+wvRn*S;d#}vNt_FMxL^acz5e_yf%AzOAnvk({AqkWB{np zmGxoz1?%s-A)R16dAK4gN3QqwE7?(pXb1kxsOmY)4T+>h$ShI1Qsu$^j-m^r*f>*U zAAx%B5hrnYMBpc@D5~!l*jYu}LUc4Z?*7pWkWo;{VdxGM_ev@BWP-xqm?IPYrrilH zzw_q`$Vxp2`W?ehu^JWRs-H0;t$a&-hCN$y4(~v*>J~K?2i?>!sY6&BXSm9_Tjbl? z8T&!Miv9icwy0CcO^0+2(v)q`Rq?^2zs~_ltD$xGF}L$v*YtkY9Y~1f3xZOP{I55L z0j7tlI}zl(>&1{hL0k&rdhLz7L9`d8%(bm^YA>Flwk@~sX1ys*U^M*OP=GH1@etv{ zI~=iquRs(n*)$Kp2AV>vLI}7tW6^+=F4a++6vR7P@%z^1zBGAsV0KGv`=xrqGw!qX z>XxZ@WeAOO_T&nf_ICiUBnB#T&9wordOISD+$z3{0a3Z|9@^^5BsZ(FK%Smne|^uN z0Pjvo*o^ck-Uv&Th$`f)s~BiK`GnyQ#a*}Bi|pw+skgetzJ*e0Caz*O1RAJ3;^m34j$2y12NOaR}^orWRgV8-I=x{Bz~Vp z!t1@eS**Ys1P6_3_A^&fG%qWt_pst-yIKp|y;76f0!8Zw?dBdU1noJo)vv`IqQ6y6 zr^LN&0@w5x{Ivt9T)Ue2RbM>K*3+1M1?h~lt?Y(YFzx-?e1pUo^xqPLq-wV7Lv^VX z==s*MikF(DjQr+P0JHGo5nKY85(JPf)Z{8Ww~_Um|5D58s4>!NC?U{@qfUjJYVcsdd&n{G7_WcdYRQKEg4?sd30ofg_AP2c$9EW!w0?pWL z0XBcmh}8F<`}G@Ipxan&H^?jUfaTXOuRg^4ywtF9ZwCNkP~l!XM7Bd1di5^h_BYr) zi9sX(vm;yntP<}(eszrGACNF>j#;e6A^yDaaDR5N%7^GZGg)vco3FIt%h7NL%E@>3 zqjk9HByBN|xY)*GV>ae{1>(K8r$F1tCskcm{uMkdT~(y>-*I6!aSG1 zD)_SDMKEHHr`E^35{JqWB@nAiF8SwxNgGA zx_{ML!Nj#13;(ly>URPNkD?~VqcjR=pQM{Uvn`ns4B@JDh2QvGvwtg85*MpfL#^7l zB7pgv(AaYdi?r{#>G>_cVX+q`Fr30V&DwnrdV@)!_cxMUJu4Roo0y_;!Cvq!!&5Dd z1)^b^H~8l!fv_jgloe$1*jLvQmwiCeiM>@q&InpTg6#(yi)A&XYZi!%NOj&d(hkGg zqSUWvu0jKDcNfBCj3S22-UrrWI?V|j+E^7;b?5aung`E2-hzp+;s&?R%J~?m=}KH@ z?Nm+EfB1z-pNvUJX#-H4MZh+qz2x0vTW&SI7ruD61k|5ZIs&8Otz9fTtk*@eq*)7o z^;MsS2C&G6)6IYPSC_3OKaycxc_Wz!GWs&Ob}*%^p7CDMLv>xnVy6pM{r2=eze2x^ zJZqSW_9J|R=%TG@(`h5pSFzVD@5JLhzeRNlpH*E>ZX=uoNA=R}tAUnh+!*8|Q$avq z!z;d3BQ#zZI<7*CPoF+aLiYxnO#NP}f|LbE#zQ#{EcPhr0_x7|wInG?tO>bc-lR5n zXSh?CNByAf2|S!?Xm`*JIO3@AK(mBr<~!u#-uu(dAYqVZydr&)%3nYcX+qGInNvq~ z_X|_>v&csjx^)r3SJVhh6mlP3byKUpg=TqHA4qLO5v6VRTFdJ($w$zZOPvUUN>EX= zQ>)bii(ND|K-yI322+481>>U&YJwx4H)`MB%IwEt->$QlUc1&xt}rb(&WRmAC;Mez zuHl1TZTadt)T2C?oe0$Y^mTjjCLMh2y>*W@U5K-UW%hNkNW$hvV&vOI#W!uDQD z$bY)kPg(sI0pBr~*wGd>6AWj{jDlReuGQ+V7M;9({(8f&#j5g<5GPE#ea=G)>#pp( zWKzYM+vTJ2A4|k7735-^vaaa+3}CUZJAJB98^65Tcp*NLYUfw<-B|f7;#B9_%GP3% zQe%3P!F%)>YYwq%)_E=b_6nQq40`Hm4>fa%Nk1oF)@s8KQy)MseK9Aj$FC1o{7J&N zFr@@CMt@quK`D{ZxNT3S{2YjzBAa|R)k8Y?<}9|_dy`-l?6`oObj2N1AZLok7p8&l z>&_nw*p4Fbhko~+-3XFlmLBGrgar?yiRuwCg=9Fh8KxZqhh#Fg+KqQq3>_~U6={2? za=l>xTnhZ@!5I2Ud`LfeLSK$^oE8ssHpFb}%?j?ztGlW01>h$|)e;u+SBe_wSbw@M z$Cm({l&C_tcZ?z6_jJPCgTVTz&WR*r7RK#QusYYx#}00T?_x+^`?-bucBLc`Qg`RN za_(*}4)Zl=lu{mDyI>Zaa2f1eRpxDuH(+VanI;2Z=O%%l!VWjnEQt*|ZXO7Zzfw)< zeoHK|%S}WlDyR@IXph%(M?m^#N2T)S{3#+Mr%zX|4dCNwh4wmq7CCF=^qISh5X0O3 zC>0oJt3d;5_$Sb;bWtXpj&=at15!Sa@25G6*B^eHpAreTZwF!WS66x>Bd86E6n)LN zgS5to-tqi|Ti=Fx@Fe;1Agc1`9% z&+V%|x5VeGzPOaP^K-BG^Ih;wXq>}^;$@!}_x|0FkN--{H+g}=IHw*7_E(QQ+5UVF z3%B1Rhq9V=bFCWmjA2g_TtnvwH)8mZ?y#&Kx zR$?6db3~w_Pg}44Ym!tA9`yr~tcvv>JJ7B&UTHv{`ZE^tCw82^pa^#JP3A$*J{6{b zb$Wmc=P2sqC8D}^uNj&MJMipN0I1)xhqh08E*1u0@|D1Oy+=TA zoteyDP|Eamno0@^bn4V*QIgu+89WfTx%!a}TTAtW(pm5*j8qKBrRT6YZ~STNpC0~| z!asb|INY#aqq-ERub;5bu#<#|E;lTKlJ4gCS%E%o8qdX#!=NvVaAz)0`Q!L}6w)iX^NZ|hdw6x9PAH+ ze$CU2vSH0~)wMrN^E1S)z4%9v%q`76Ijt3EU8vnkjtot~ zjXsB(^U9*62c8&>#UJnNX;2OrQ1Cy{LRo!Kc>T+O+hoF{@JAS*&OgEC~)e>7eK*#cjWWar7BR=Y-EEzqQ`)?h{OZlUV=d3 z{ydZYX@6-lVBzmCb_}b|0!-Q!ev7RUYnNHj8BCTn09phnN^kW%A!WQ#<-PX_bY;+D zs=r4WCyi7F31IOp?Lred5UELtqrxJY*qwA9bEJ4g6eO7S+s&kXsN+@l-To8xe(H{rIfrPvi-FW#;VkUV=?^fv?e%%;R^eH=T@y#q&HnKy zT}~wtLCdyxpz%y3AWc=|e&^>$Xsi>4X)q_|=ou{z&wm}#87eS9VFo-g@IufzTB^Em z`oXUrUJ*ZCUJ>V8# zmHRS?Jv8VO-RH4L$4~gBdgeb~Vf;Shxe(z#m{dbder$+`FHOKAmO@00GP631pkQAdKhI9i70hp9iXIXfx@7I(m2}1HoBb zc+!Af1_2vcW$D5R8dqHI7a8d%+`+Q?kl=iJmk(%N+@70@#qY)3SDz$hVA>GxHax#H z45G=}&o@NvWY`tVaR@)=hd#(dmW}Br&jwwXfk5Ep>I2RDw+n0sD~DIxm5EhT6bLb? z56A)19}7+l=2Za9cNNPVp5kSfs+Qr-&b&IU#nE+*{CCp*rvo2#p3N5ySyb~OIiXd> z${2cfVlRsWUtRcZGS?W~b#WKkUec((538`!IGJUZ0RxQ;GTw>03(4?WFM$KKo%0#z z&66cai~s##*CT<~vI;iC=T5t5fTKmrP2ha}gkEq13_I^iyQpzEti=&j0etS2nkO8M ziJbND>wIFs@XrkJ%TW*we4Hz+QwYuD+aYA~O+{H4>I-dR&kM-NDrIekqV$HJOPwPetqTq5 zMOFD6aJw!JEdtRz$p4&hYLYeQ#$jvZFy`^)Yd+wK<^vH7q7H*@iL)316w_n>>787} zLw(!-hrPE9t8#1iM*%@X5Kus+k!}!>6ciUA4KkU8ba$hKgovWFL5K(<-65^CfPjF4 zFp-oJDe10rKlrZq-S6K2z4ki$T-W(>&X;wqb?KV%%rVA&-@h8UR8}Bf{D$NL@YLKRj`8>`L!3a3x14MG zcn`LBF?IC)M!t(hb2+&Wk*5C>FfZfaq;!rKb2U3J<9`=%j5h&?c1z2+b|c^U0rrWL z!O-H0BaPd=wE<=R8j52i8-P}nK?~A&)Pkrp1f&-aEMxW94t?+8Q9WAnhMLd_u@sss z2S77eo)@;!=<|0o8Ubb^r?%kBxlfme90YGvv{2gz*ZS=}#5-poP~^zqx31|0pS%f5 z6=h2#9Zf{8h;+y@l5x?5u)NFDamEitN4=PV54m#B{FPt2L5ID;gC2({vU~Y`?5_vWPq@d2?#JUpHwDOUT(U0dy@hR;7jvq}&oOh`Mfyp*OX8jrL0ip93ugVn_-n4lXO*Yd81?`Hv9%%WEn`|>*q06fW z8t@rtf2yOom9Xp)3Wq((%Pbz~4K5$)wNFChur^LH_-~tj!;pJSh@9dr)%amgP!4uE zo|B%+w~Qtc5-08o8^FN(%N}_D>J|R$zg;zjMNDaxbxG3hxIRL%U|J|qj4{Dk7RU9U zUs7}mjmG26BMC{Rw@nImX8}~hZ#)TvvUOf!3DO9}p!GS?v?+!G2OHx-r}#d49(ePA z!a~=+L7h!-uHC7oQu3tB@JfT9({r5RXj=g@cCeOw6n^dEEk_($Yh0QccyXkYeF%&2 zZMkUqPwnuH;XQmTLF(C)#%su&5T{e~CQs2NJ+6JqLh&;r-h0S2rey!>RJkWh1P$&~k*DV%f;SYJpU@4V_p#9hQr|4_JD8pQP;6duSYi0n zDuyvzs6hBNNJj`w(}&I|^N@p@@{nKcn%ra^?4d7_BPZa;zimTMx&Ur>S5}mY&-Qr8 zt#^$Vyk-$vZ2<6pGn=2FX0|1MQTmp=l!Z*be!7LmnHYv7BjtBZm(Q+Nt+sPddSs?A zf-2t$Nl%!h@KFg+;0QO-w4F>`2f;7n+WrS&AB1(&1utEy&>mm!N=!M+f}Bg(?72Gd z@dP8r#udwrlSKrK(tRndFx4&#pJuYs>ULML>~I6Rl_B|M2_xk@$4SPwK_&L+mw&%-hI*fiq(tuidC z`P9ZwAD=Lri%@gX!@}_QzQbHG4U*T0OYYZT&#$pAe=JRf;Z@xvr&Y}c*O}luOpok> z6!IHsXb~=6*516>TY!%K9@vf&uAXlw@|e846C$(Egr4O-_xz#(;%xd*q1h0n(NV>HGBFK@KQH$*d4zBz|A*Z_eWV(>}nX?M4l z7@VqSGtLLKzw0|wZ}w`IOK2TVJfrpnB1%UB7XeSE-t#xBe!wvOSo*uD42ZHq*w`Zvkg{dobb#BiVS&IW49(pdh}v z9neLGBBqwS?XW#>d_*k`IY0?_X$c(@zb-dOIqqzD7nS7?d6C~w1?OZ{o%NXq-?d( zGu02$!7Z{;x#Bfwo7sHCR^KB1fH}f1*zZA(nG8f+7d=_!Fna7*Eob zP;2GUAvqSfng!$;rbPT1x6&riRq`f}>-BAOfy&kJ1nou3Yo)T~J_H?%Aau4636jMP zBWQ`SSHzl!XH5V{zK$5Up3FJ&ODSz7@~v=mRc1Hgj0pxPk^5nW(k+SQCzeXO_CG(T z81{C?xG$~SUYZr%+d=|uM8_fj!kaj{Z-`)(}l364Y1NHM&z zctP_<7^1b-d~dDD23aaTV2xzX!OftVp^?=U&fwSwVcT(Icb;B(Ngb&W+h7Sio9T_L z6oax{Av>(FHNBhI;V$|&FYsWGzi$c_@?8@8cVX` zMycJTzLVa`qB+gYvj193|1~w#e_}eGIUSIiYK_G$;twjRSY!X40^6RftIhY9J?25g zvo91Rg1Y_YW;-Z2=$dq;9L4}OnhZD_i1bQ%p)q|(KOx}qy?$E<>5CXkq4aluu)MkW zC{!1hFU#W@`R5doH(H zu+O+A!aOvZe2-%&0KP#pmpe~Xy~DP-_eYDqVz~O$CO+kKU13q zfpx8@Czi7Q;$1l}Yrxv`^>;#Ds}M~f%E{qGLqref zFu|!W0kTxM_mC+@Ws@aPj)2))y&vVS(iRu)T{DRpDRgE7xx)*pC?%8GS>|uuJ3`cb z-dRQHK~NvQE0~j9kYSb&|Cm@HKsZ?xb=%FHs|E3pj)T-Uf~nSry4STNs!OO_O3FC_6)Zrpk!RgB-h;w5OnZK+oTD_oKU~nn61?eEnxgsA;;NX|+^F zr!xMxr-$ytJpqGA?aMq$qx1THZycEStN{$10Mk?|o_w+veHnb6l*JaNi51yy+FkeT z&@Y{;ZTEe-`f3h$=a~*JTx%BW3PTwyZw`S#lmo4rTh@1}U^*5UJ+!59=D#*tAkGev z3%8eDZJ3Acf7*~$Q0&?xN_bCQ3hblW+(!>)swYQQ+sm@1fd^m8$)sB1RPPmXsVb1> zy~~N6%3Q8v?W3+&+A0?I_@jt3J54qw4pGa#eW_SRElYvAnnI1PCTC&Fk`se(ziG>n zr9oZ)X6$(H$r%&alJ&o4)k?5*{6uY^M}C~%rlY8lvhJyf6(-Z2AkDi}ybw7pa<<;g z;6?QUnE4Y5a)ZUFAcH{HHAGNFG~>;CSR>}m0zo05(Y79vz2<$s8;-VnoWiz!8HS(q z8Df&2wxeL6%M&B9Vm=u0#2B8KG_W0WvZ&gqWzV)~-Xq93oK+7?^ldCX!#0cl?3wY9L1qqJm zbL;1WVN0j^5IIolL9 z@YC!<$+^&^r57=~j-Ua{AfS3s16_VXoWLuiGjq%?*W>d)M%bRuUigDsXC=31lMebX zSABIZDRQp%ce0e)sRRr?c7)tzW;|J;@>d_N;b?J}1f=C=u+Bqh6L%A$;X}eg3cj<< zL?Sd*EeoNEU_O2C{FkiZKc-MU(IYbgSA>7wn^@G2@ebf<#%IffW`fSK8%c%G~QN)q2<0~hW(pC)!dBy9FainY#j8>>@fee zF+Ix2?RN;`tJWaLOzbkBUvYa;QH8n1!>rUQM~)SnN0xIv6=bNcFM?YL$Sv?#dfo{! z31l$jWeQr-UrPXeV^Pk7syRKKcg901SYhqrihV^ri#J+$4cj=pRVBXPf#i?}Ap9&D zAy&;l8X7yit%H^MNggqYkgpw@5l*^Ns^8&Mn*a6oIvgF%Ge?Q6S{qy#79Pd z1#`vkAfvVKr{CldU!a^P1AU|x<%2nn(zM2pfb5vXyv&>9_a?rckImDFtr+vH=R1BM z3hBS!UB8-Xplb$Q_h}e>_3zS|1_OdqZhy8X;0~|`!Gh*3!lmAd(d^zry|iq-0p!~k zx3vp29cQ`&4&4*qhWF>&5$ymd+WiR z_f&-+(=K3kC!*UdjF$?@qG|5aY_Ns7-!p#~(27Ucop3tx(}F6~v!){UoHIZXu0$Ht z_r!zTNBZK`qL=$*Pw`S@&N44w=O{E_E>-keYa*2)MpeCG)e_FgHDhJcIXr|xhM52T zvTUqFQYBnB;qha!!jbbgdofJa+za#x`j|NYRC2 zI4c%b?0xa_E`kO(=Mu4>tyj(yPJ(W+$#56w2|X7TXE_OwWBE27YHp&xK2{KYwgCk+|&i$g~t8R^WCO!lQ4a_<4OYSoS#3dQOV#6E!&Q)#2p zyo&&ziwZ*gH*^lFp*uS8eo;qWaYrnYF)UIe5Y7&|0UQymsLPmz!mod~2D3 z42g+0&9(mqvwJSr{ zo6T`$6u*g)c2UQ-@S+=f+SfyA;`LF+X}Gc=Zv5KSz*!tZBeFERG*;}qwrA`LLuu)m zpK>S)Bxci|H6jkz6Z*mG@#VQ+V((ztBNOO&QN^fF?iW6hgWB7m@l#j#Mj%flyJ&XN zW(y~4RX#lv3{ly+Pc`!Wlp>qeWe$YZ)DvcQ0;Op^ziOHy;$@Y9UC0tm>vs~_m*{fG zEfA|COSIUtd$lRx_bVlcUb|3E z@b=^RY6LHmDJz8*QcR8WhO!PBw;#WDVXWcpZvr5Vu8gu+yx$paUsX$8pJPek7x9;c z&i%O1c^wzJ|7fTf6Yl-Baa*!tgfQS^(e$uU4yp#wD^KU!RajJ~F0L1Sk*8_4%*cJ0 zrXy=(4|yeF0Uy?_6r1C!CC|uy6bh8XOE{i|*XZGhJ^yqEHaYbyT5HKx0ooUQtxe5_ z1%O!yQ4;OU9v_~2EI9Mm?YmXNq-VaJ`EC%hDah`}sk~5-%kU`=$==NRCC{AICj8L5 z95G11tSBXj>j`ORQ&m4_W1Gbv*lK6L50;5ZLEI+^m@1@4^t(UpV&HO`({VOO?VN$j zwMuBebNOVJu&5dogH%zIlkXL5vb9^6{v=K+Bf?oJd*^J=`$4KxIAvjc!INn1YKS`F zP8t&6KWF85+n{3uNSrIov-W=pb-uU`yisv0Fpdb&3FlKg4@f`eh-g`v;uPq;S%Am1 z%%wsmAqE18&)d$s+Jgi(elwC|k5h0m4gi#5{kxj;99aaBge(mV5n=eW_11?+Sf z+ZkQ%+c^`W-=rkMFE#luWcl5vYVCR9cKwMgd{d+NF{Io=$O~IzG?p0!F$=oX& zcI#-?pe$siaGQ?NY01XTHu~UUb?kOf6`^djn$GyL2f=~l+&Ew2PcB20j}}5p8T>%Z zJZJ;gW?k_|?Wo{vrCaG(RE3r=5kh}JT~;EvIZO7r6EsSS>0%%h!e#_CREFdBmf4`wp#hS^43? z-W}D)mC$QdcvN>dmVaYI3#Ar24+k6_P`=v%Xtb3}Cp}{MEcR!FD55XKjS{nVftzdJ zEjGRhu`2a`u z@0R<_o-ESm9iEupn(fW>bl>g!vi0irAm=h^Ok&od>|}#X3U|af`Zf?_hPk9IsEIoE?J+C^|!Rea@|nR(jF-1-c2@QQTl`wX*IWsk`Q znRG`Omq}F4wu+(ba08#t)+!mtS!0ELKdWu|10wZ)%5ntR3FJEkzd#_m1T=(N#edQ; zpvUHsxQh4o`e|{Nle=7HZrX!AOH7H+PaBX6FcE)y6|vDv8f357oZ{2py$(@CeT8q7 ztK>gMXN%f9s=QMyT87Q~c>DwUG8ZSSX{~<$+SD`kmN{j;2qN7Dn&6@mYVCT0h37B3 zVzw|6BNt;z%VCKW^cBgRsn6*ruyQ@*J|~^Od1x2VEu5}0qHmuXM7z{xr*iG1^_f1L zw}W7;IG^d8C~Vu~5%3CAd4?sAJ@C^`g8#Swvqs?0Dcp+hct zGQtKWC=Rf;c{&Hzx`nE340`|?E9^A|X@Bga6p3pMjhZjJFA>Dt+7Zm`0>8cbV!I<9F$LLyEF!dRsbZ z#5-g-Z(k0FTy@SXC_Ke#o2*>tE{%Lg80>*NT=trN(M6V3Yeq(sK)Uun+4B5P(AB^F zXZ@$&`X%Sz`X$gx3k@DzCJ+$0Xi6HSi4agUKHs_4C`{VL;JTZfP9VlbyX7!7d1)6J zu$!)I4y2}=rc_JL(ERnvfIq!Qj4X~(-eav7{NwJvRsS!3h#eRQjz6@o4ar_Vg zbsx?s2ah*}gh1^QRf}sCHYvYw{d-nwBvEdDx&E=pF-tRbutXCP^A12f)`W+*N@u)C zjrA>wA4-4KZ5&VO|7NB=mJfD1jEupt+yv(+6(R`a1N#9iGSN>CxI*ijo4-aRj|pHz z4M1#K#=Kt&V#tTbXek`Yq|l135-%>c{7*8y`fz513oy6+%?0FspA>!T8PKaLN&*rB z)4a%a7jk?1K-86acEuI{c89${t83;mk^920iN5Nh=J0BV`yQ1fJpaGSrO74 z5*xDq7rjcu#@|(Netr)x{)1$w3K!(~U%O35Ug=}cf4)vi0;sE6;=^S`dog?yVPrGZ zUQyo$Y*GLe(X_Y*!GASv{)>mza5yfzur?8YFc=lUOc#ttrOQYQiBscG6zCtfBZmQk zS2Q8m0{~;mK^=cvD$W3}z9Uv{&k0IC*5qCv$zmMz(r8T+9G9Q~224X*B}q!$X%PzI zb;LUYsdN@1urTs@@=HH6g zzx}}{f@A4b=>HQlP9ZanE@Fy_4>;U;#}Xy^tMb@K0^r3%&`MoA+)?7rr#MMMO@WYe z0uBR31sFBZ1_93~iN}EVcg+jJh{uib)h)dakjsdW9X0Fpf zD>#(2v5kX@kNBLCm+Ai7!n@Plrc)oEnD*;glK{YB0X&ds^@lN7oy)MwlO^U6p;I?YpjnNQIjI z435FU{=2$;id)AR7R)UOhQ(#_3c_$rK|*}2p{oQ4Db)@{4^4=vCIgI2NExh!uMuSb zw-5FJhA+XzkZP|-_5^QGvhgr8L0T*3{(aVy5Yj#u85c6tsPUl zEt^jkxtThQ$>s(2N&8~*{_Pwyf`;QUYp z8Emn)cRK(3Qufccg}-u@9ywSw9L6poA6Pn0gr>gz!IuaB@vr>Fr*H&rs_*iy0UG(h zEt|ZMX1upx`1bETvS=jvL5gCif*AS0-Ifr1;%4f>^fy2E5Ui522w=^zJ)_@p90 zd>PE^DXP|0P}`y`hM z!gxw}1h9x-SgoqFWsi=>X5hle=-|iqxeB-OuF>->$GAx6DvHB3t zqe&7CXsru~^sNeP0reP%+bVuOG%B^CMDENR0C~w|BPrx`2mp!HpZ77n9AyHEBoag( zY|sjFP6h-qjV7JdYiM}*4 z``o@zzI4Cf>!XCFf3}^W$Z#xX9@7U3eCUloXJhj?T{VQ@DN{t^`J=`4KYN{H=L^dR z?M$H$It5Adr;tD`gE6H0+C@@~mI0Dd!+=enmmxMor`{jh4eJLWb5*b4Iibr0E*qb7 zFHNcHuYUxECbzpUu}P;u(=ad1rBsmTA%v1iec&?W`m=|h7kqPz$57D{TY88v61j8h z-WrOT_dtBW5R(|O-n+#SP4)A6NFX%a?~F6H?jsi$NI~%a;-ZFV!2vQZ=-Q+_sP4b< zdit5V^y9Iy)+h!BdQd_wLv!V69z|^&gPqs17`m$VOVK639smxa{pCgDqg|b$>ZHVq zSuBhOZn486rHjhoyz%^?w3|^If${Ogb4<#f5HZRwxY%ZGGz7aa!>_ug_U!vTl1%NTT-G;=;t z^j8`|!8zdz3+9`E#mDG}v6C+$8RMRsH-T<27M0BAxS0AN!cRuZ9Byyd$rT1Rdq;8A zm4e1VN(z*vBULozo`&g=5!^-gVPY*|en8FXWRZlo$LcH%hRfjXXMdnq%HcK^5N3xU zPS#CJ5UNCOjsI_-tYg)5tm)_1*H+?kf`7Z$#SCe+_5_=axd#z-j~XzlMNr~fn}wSD z0X!#1?z#yfsUVduAQ%a-8+*`=r7RRE za)Q|G^vj}NHA%d~7ZRR!+imLpXSfLlC~Q#hd#Ae978>1?!qLrhMOZ#punI)=pTc)E6hBf zu=>LVLOY#L^wwPBec0=E*?IPitU%zj(Pu*(Z@8K(x2{0p-g{h$X{Oh(S>(S?f8~yr zLUmQ&eg%}v1nH@A7-%bXb7)p;l6_CT8UU}rMAp<$rW%pS^gByF)q5`#UTYQ9%#n9< zg9u2%FaMvl`RW#oI}qn1g@I5|_0G#Yxp0~x*MaOmn1kW|0zFLm9M?HQU#1nlUsXc9 z7y56?zTQ-R02Hkd-ySgAk66dy+J>Y4GQJbKo~~un&7&?^pPaCAdEZ&K=6@x--b$jF zB58q@`?*OctIPKn*H@Qs-)QlEe-m2#KDjUED5!0Z<3DwTl|AGimivUz_l|%d{;}ANT<0}GN5iyE6z}$P!1%o)-miuox zKR`72@Vh!?QU5}m$pap}s_!zSkSWD{nm^;&vEK~#w1L(U!tO1DGDd(0L~o{`JPnI^ zcZ~JJk$Q!123#SZ47!~C*IpLE zsf(y{AjRwg5styPPi(m#1LAc*v%xBrv!m+P%)su@k$TgWG z$2g5c(KT9`3>uSHI!4}>`*L2F%6?cG8vM`C35$4SSd z0`|>qet21qwLG760MA5dZ;}9BJL0=R_>opSc&)w&$JcJ!5JOPS^YaAdm{`EXi#{)c zvUaZAufsK0c8ADUNQ&DpPQJ{5;T#P2Q}8CjO*W<=;k2ws|Ke(SCGn;BNwG+=R^)yv*Mo&jFl0a8V{e#2 z|4N3nb*u?%l{s`xq#|(N)NFa?SE|1(9@X6($C?IL(Qlze3$B9M=T^uzd zI(GLh+e51iMu&ADFA&JB493{IbRpMv)OBo9ItN`BF5p)xEUsev1~S47-y`HMau9zP z=bZF5A_e7NqpQq5VhxZX9R)_)>(`I-qPuytZPsnMFHmtpl_1%Zyn9xLC1ShHV($9J7OPrr=?qvg-OpT)83 zoP}#HM&=`*X6%I~2N$Xm-M9GtSHco5hy_^INEdcvrYiXt$;SM0R1Fgj9i|kX8tAx; z**#Oe{1_7?Tw7=efZ_{GWcvJ6Z4bQBg+jebhL1BuGpB#)xOQqSN-DW6uqXH4r6&cT zZ2vpH%%ia~vAPMx?@y&I%WjXoeWTtPuDE;PJv@}WPu5T5e1$f|bba%GYvFZybmeE-AtP^mb-ke#?IBpSpGmO(^o@3X4Y@zx6SIb+%pq zAkRU#v}__-*b+fR@3wL^Ipq9w5K&Bj++k4XeO~(S?$7c{$u-2`*0Od!JHVHTkG2Ai z&N-vv?2&9dscV~G3^{lYiD`x`&}YPm+Jx`cvna9{CYosvDzK7UO;6R$|j z8L{LIZn! z?!9}Ntbfwf;*5lv(a=IAn<%Fq{hny6vTeY&WS24Obk1gA>X$W5i9k7xz*-9tVsWF6 zE8A_8Z;M|{iWJfeL`bkLDH}_!1ilLJs@ESRSa6}!;G24S+Qij~k+G>ZaYMZI`rZC# zPP3n7s~ji97zrBujSGsCg+wSw7ppjp3syddNBdWM>SN`8v*+hQF6ug;)L!jxF;w+y zA_PZj`IBAnPo&qK?b1pwoHlhy4>S_mg;dsHc8ldR^3ff z!)zQcJi}cg8g`ytJ(;f!VS81h-)vGNE`{6%{BLE~4beGbtH^%T%YWhSy*tilS_pzN zacL8NN8E66wQXs1z6fmpA3kDL=-1A7lbPS63p6QxK->}~^I^P_tERjQZc$y>5NNpi z>1|N^5tzp(wuq#k*(?IB{fk9Fk>h^7tF2A;3s==Brm<%`!=I{uDH*jMoW$`;#{~4@ z=mslq=e^b@G8S>qWA$^`lrmV{&fQpgd2kn$VlQhl;MHR=uv<-&*R7c`G{JxDu;;ou z-*a)RlE3=I*9XvT-yh1AGS`d=cVg`oH9{DwhhZ{Zp?0<3;#Q>N@WJG@7Fvp(ASr71!`9t zMm!(RNFXEiu3Ty8^vMZbHhH}GJubn4`KYt$5C4en%T{IUBn!|sZM{mGVeyc$JhFY zZBy}0$_q~Mk$@qi?|8vnVTSj<=b@;m$Bu}21d)1hZPCmDYJ}0Ip<2uz3GkeyFJfus zj%gW4rV%%K!M6c)UZ@kw&}3Mwz&pCp`vE>fID4x_(!DP?Nx4q4)x}RSo!dLzDp^-L zbB(j^eWvF4Ljjel?^Y$lx78+_1)Kfb2V864n2~7X5PWepS{SNuzFYaJ_~QzCFhLyI z;9WzwmW0!*pI_#j7T)xvk99kn9MX|^wpZJ;hg3V8K%tMP>kbbyVcYW6_^U*9X49sZ zNx#0$VHJ@qn0@(N>h;X|X*Ql@_w|>4_myyjgDQiQ^}jsDqOuC-X1XdXzK}|LeSa`% zPF1)|vCX4?wsvaeTm06_;Kvz7`dYAAw_<1D4s9Du47XQBkzHIwL@O9!J#E1r2#nN{ zZCD6PRQ6`TK55kC|HpJ-59rGZ-6I-i2=^rWY<`|-J*9o-*=s(G2x|AEozx?BE=M=| z>9>=JJg8M{kCU=EE2sX1l(ZywnN^n|?U5q0R9CU4I$oYsL5*0ZCSK4(c8rsO)|tqr zr{;LZ(iMawRuAU0D3rBT>GjXZ&J6t6Z?l$6_QVz64xifZ$-$!9JJZ4bT+J)0Tdyno zE*rT6Yp`03P}j=cmbg;^mwiXRE{F>+!3;TL>i@A`gtS$Hi57!}8CXdNFRGX&)?+)rWd-EDC(nz-9I!;3LPEK7Yv zWf4FJSJ7MX>=2KOF-o;=738&$vRBg2RL2G0>KBi;WNnbDWnR4!fp*5rvnmJ?FXsov zMS)T)Dt~-1qE_=&xOtLa9Old5h589ex7A4!F5(!plD(C|Gr_5MAAu#It2_01J4sm} zILA1gb>>=^b0UV2Ar38)M^T?6a<^}xIMzWKYN=F#@9H*kz^v6~IC&5?zLz!@w`RHK z{7Z9Xl1#sbvS{02a#;P*b0V#9${45Yk1CUu>>MvQCW%zCe<{dRCZ)8qV4fS$xTptr z({?>EXj-L9H;}8F@=3I3tHpOC`Cv^}I5RL2B82k!;g3J0Gbk~gq%CCLczN2@IrZD5 zNO$*7tJbn_=F(Be$B(zaj@^$v`?q5;33SiicQ?x!jpB~C7>o9^?0AES^hg80 z;d|Y<>9|`f-@-h9C1TixF}Q)`{Cn?cLkUM_(%PqfXPt2@^?3bKV?tzuO|w|EcXO>( z2&|S}c)MHpd!L0|3a&lh;W633L)!K%+61I!FXM*AQY;rI!&!&ANz__i;u}jz6_mMZ z%|P=TDXQ*WByaQhs-~@Z^#!LNJp-r9GohnUqPKB%VnRhbLA3uYBd%z4hxXN`%k#Pg zed#^(1UZI2v*{~hZzf2r5@mXL4>XczD+q|S?K*?cCwyZI!c%$Nazdgdd6J7etG)b^ zCC|*4p8iiO38zhfB3~wBBE(s}%KO4CI)oDUT<^68Fp%X?N(H95o@Q}TQdS@Tc-U1{ zxh}*M<*GWC_DLeZH8r`Lh5nD#3k}!nd;BtAtf-8>#4Xwm$e>^fk1bGAkP(Y~*3FXf zmD7(gq1D=awAG$DncdqfqvHM=52YLdPdZJEpw|uMj)am>8Fl=kZQ6?tH)2YA1c*sn z1{9RKopE=)vb3vzr7=iZun~U{IWdzlRn0Qez1~DZf9Oun8mv87d3j1GZ}54f_p5he ze3e$Y>`l=(=E|k4-8Mk&D&c!gcYtu6`wu*R^2{@(h zaho@6%qfmttb{nSqZe2&syk_KBTL zB)ih8VmqlHvgB9lCNrv77s4>cGIo8A#H2V;zOL>U==}sOT0u@gwtXBLu&Y^^^MuR zgoC@C=EvJ!__(hajGqq(GA#8uq5D3>p1eS@hgZCA#TwP(3qg??JHEf}EWe8Cw)>U8 zd?nk%&Ksau=}CMY+_z8NO=l0E7(}`AzI>m#PW!=kJ2H0IT!laN?2=xeB%6ae{nq7# zD^_d!;Z9ZtYhpjvDmUA~+Ou^h{e5j+|DGY-PusR9HT-(sqwP;Ez{26Ly+5@@_tYSo zv9B#vtHv2p8)!V&xh0qaV@^&m(TmF13>PW-_jR9;bgFiBzvL|tBg!Lsqe@dLcUs=B zYJ=UlsOm`k6O-TB$Huo;T{v@DnTYbd=Vi!7Jh{t7o+m0odQLUo56;hx@Nw0#Xy+3+p%R=f+JEb$2hf44K|8}IJ$=hI zC!3rreFZBD-#hp*f!PM4xr@aVS1sn`@KX>Uqq%s!|TV z=C$-vO8v>}G36fH!R{w#BGaZFcapS& zP&ejsq<6tt0y&K*jD%eo#&M@jR%T*k(;_xs5j|;p{%m%VNspdMS@shxDe8g4ZR$_& zy9_s^Q6DDS7^JagImR@2>nq?$3?;5yc$4o10ndmkywL9|3Q;UA) z^Lq#rP7KK&ZWVtrKkH^HQt*Xvh&6^#pS)fl(say4H1(@E(|crYd<6W_l}|mOYi*LG zi(9Xi2y-2Ee?sDA_e>tc8w)zo#AhY+pX2BiybVa#{Gz)*q*0^M(?b@LM(`>ny;~W3 z{VG_wUzQ3N?%W;K$j>#fiNO>xteMm6OPnu}t-M?um)SDI{F%u- zBHh{UUc2#JsmQXl!p_7H`;k$l!j8!`kto;By@YDW>f_BQyIY$Pr{z4re(>$1wb)jT z(uqmbJ>_56%XGq3-En!MhHViHMivL(LosfzqERNQM}e#(M^Hv(aw(*{OXk1&qBkN5 zhhkf6BJ?*4l?vO|gsNY-I&Q{y&ku4(VWCIIVpew#^_T9XTeSus@GY&myxn{EFJ-xe z9t_FsQED5t7wU7IzJ4kES&D^r>#beCMoij}{ZNZqxc#i?fgGRVM%t(+i*Zr5$Fsv2 zXCLu43Ktb|g#p$Pud7$(D4k5mC$cHJQhcbipY~`O7xQGyD9Or7g^#lV-2)d{P-v-d zbLkncPA7$&+`n1-gi)8-uW&ud$5~9E?9@0mHPe+0y>`3Vmyf1piDzl@pASGr*4orK93z|H@mo4Ax4#je5eh&a7H~){eKBDT`LC>DBz}pKR1b zPkKYz?n-rnlAy{xqkJ%c+pX`}?^1K-UexQEnTnq}8oB@vav*g*_T_ZQRQ z%n5GuyAOlg-8HfPr>^!}TNo=D<8P7RqFJ(^gH65RUz^d*y7ADjCpiLzr&h}xla##O zfG2a%and3)*>lv=gx@Td>})B~ z29M}0J826+^Tup1d+jU6Q+2d_yyVGc4)nxq*G}ZrFE1yz3qF6bRKSU^yr;cH5|V~P z(=lGxp_=)OFI$yT$SE?ed_AIH$+W2)#fOcz+R!fi8%J(bWtp1Q-&f`50zd_$6ikf|+y_+r=kPLf7e@yu($uG(; z+E()${+#3Qs**w;bhUK7bIK!-8 zYI%N8Qkq_oug%oR64-p7JaWt}<^}=j+UtDbN3Wp0t;GPwUzcy_9elPUEg=80sh6wRq6a_TOsXdct?YHqh zHhb>Yo|>_+~^BLZahC-T@LxgXMS3QYWTC< zEO1qEcd*7QS`~}SlzB_QzH&t{H$B%?`_w!JL?CNE@kH^7t+uF~>3CKBRjefYQ?**G zeJR{@A&|U6T|=)HBFpVpr?}Ly2={GVR*QV%ftLq%pm_`;?lqbxyL13Khx6i|Etrfg z_f0}+<7a4FrKTwnZ(94dk_2&5OwITOXPeD6k;3C@@&XG@pIm4==hGxT+ufp+(qUm& zmp2!IyS#H~pgxKJNUyh>9W&Y2XfWO1_joIBj_zzZZ6Uz8w+OQ3$^5OlvHD%aPfIY{qshZ@IGBUiG3lIu7HavFu6~(`V!G$$ zJ-j`*Z+zCr20dRMGs-i=WPfJCj;$2%#i#zupCe!T2{+2Mp&rNVww-hI7wkS!*(0wz zg}A+f?%?OJlG{R9~5)M7V@^ z<2}1yFLGTyAuU|r1VZ4Y>S8^}B{{+=(|>T9zFwe={o0irUTwSJ#w-s7R{BU!`f!%s za?2Y27w!2;i!Q#^G8G3!uvgsXAWT~{@xX3<7 z`w>vtku%+r<9nQfahJz2&AUjve6tXf+JN{(DVtfa^92OpC2_mUuWZPX2dfMzT`g;s4=7(t(UFz zDQ|7~x%uf%UXu+W(sRvbQ-&;~IUG)+1lZh!jurxc{NY47yJrv+7-P=IKl)bx;QPID zN@e^zPs4mEi`=A1*G58T97{etmjmqg%4O+*(zB`U2O0|XTt``%l}qb2(LIxZzE3)Y zs0N826&tp&7py(Mcjq|{TJWsSO6~JpWAa0wu4FnqgwAC+hE7TyRID2&E}=iM<|~yK z`$gLG(p7Xx4R?rF43_^o5Yego;h*tK2kvPO;9dQty_xOn%#uqw7WHJ?_c6Le$A=y~ zEFJ9rsBazqtt+pz3;h~*e)v>;IrVO}Tzu)v!KQtry)@>n&WQAd4|mf2>*`|ns^gZF z#CL-yXOcqZ!#!oVu?bP+-)p6nh0jC>;<5;^;ZhW}q%rS0$UBe4?nymjprO5|c}kan z7J?j&joCl)E4M{I<^E{a#J~OsQ82Yr9Q-lDKQL>_$&b=QEwV=k_k^t&;7~PU@sEDv zuj613ovxB7TYJEN*A$6CoG>H!rW*Q9@MEwXCtbS{F|&`~_~)q44TVQ~!#oNra`Q-Z z7)PgA-ualoW;5(`u|YX5`=$wj66_0UgL0Z&-^bpy5onavRb%X3lX+g(fH*6BdQEqo zEmcQwx0A28bNi?Dld5M}@ycdDGY%}(ny89GG4{Q9d2V%)9m?&`U!+5R$jqqNqxmw- zo}yio7?JM5b8j_ERq;ZEhl~9~9+!2}0P#r$MaQ|PHz7EP1ia+5#tyc%pii2fA)QO81)_4*gcMt`zMzwD@s%uB)kv3R`mHR%YD{MbX@+Y4LM+dc{ev*V}DLB_>sE zUn6=-cj@AVsGcZ8{g{Hhxwr5mEY_x;lgrm6(#>9A-VZ(FE_3RG_JITec9{1%g57SZ z_*XWPN|CjZ9pzqZm3&Y-rs*G$PU5))fsAFp3`Tz)_Hzok?mBes*%x1_X_xj~ifCTC zHF8)~IC6#SN|bwq#$eId`OG`$noYu)#I+ImI%4u*T?XTS) zq#+Y_)3eS*Yt;@R1;gU@2j3=#8#fCdOgDEKJ#^Sj7oz1b|6}%=Q8^M^SG+(ShWkjU z#;Q=ZKo@R%oajIu#{FOHeRWjSYrpRX0VyeA00HS9K|o4M8UaCiKw^LabOTCANteXX z45fq;1|TicARQwJNP|jCmvr6d=YIEo-*e7;_C0s4`_EnLF4uAyO#FVo=lMS0_{0k= z?V@bdkKIs3InGZF0F=-X`omq&BVAj-evRRwY}&7JZw9_RVHO^i`nnZE zBwuBASgCakQc^Z_KIy}ya+HHoCkp{9az0hD)(oW*^WFR$sM%R5@M$g@dt4Rhz9=0F zfCBzSt#Uu8LT>ZD)eE}bVft0uE5|CWn$NSI7*Vahlv_z1o7K&nXcM*V=EFT#qinm% zrNW97eT&D+#>e@ny3%-(Q_A6}A)~+o%}LmWJL&k1=JMS z9m%5i6^&pS{<)yc8~l#D0+M#lOdPa}%d|i2x9bO$EPqY)i~9U%IN$2{n8t1V)7umV0!-C6)rbRiSL$6T7BVj#c@e=x#1@y(SPBbqVo;_DBLT)L)dm>=-ctveJ)|| z-I^Q@B;Zk4m-_3ngmW6__mYU12Qa&IvIZ(&6lU8Ds$rfk9NAe0t8Yu$uGU%pSZ}z@ za9&*H6j!SLH!IUTDi#~RHU~}v!M#KlR}e2RmIWK&`+5WHS_jp=MxYzOjaRT;3Aq@Z zxXCpx$a=?9!Xm=XIqy;XiiaZ} z_bXqp`Gk;W!klE5ndp|KdFvLu__+y@c+Tqp%E;(z;N;;)`-YZ@gpkp?W=iSwJccI`UjBotG9ds-*Kh*sZmw~gYI>j)F1uK+7OY2eK z`C4qt`pN=xww}uO>*w{Dhd)2QW zZGJ;%yv`uvx@Usr6F?A+y04mqQ_%T(+1mkRD9I-ejS@=RbYM`;`&x9#iJ!>Pz;>PZXgqcEygCQsK(oC&x(MEB-pHcnlDj?ul8yq#&KQ?{wyP zV2KKhs7!y0GqY{ooReU0NWE$1(SyK5e>tGe+X99(QzJun;hbSjN_(a9svx>yc=fD? z1!n*Rkp!jxCQ^SHr#dv0*U!K#MyIh!YmBQZxs&=aaAEn>uL679sU)vYgizCk*L|2! zEyd^-6dJ+@oa?vHx4Q3^1@xV}U-p4j$0=(I%Wsak3+oj44%eI4KHwi=PwVjX>d8iR z(+z&ItDUk1^x6!H3}(#YRdn*cE^{`-W$(K+YeDYshaL<{*u_ zifnM$Em*mUI}GWc()vXhj-7tLEyf+AsGlV86_CEHBdpeW;qb2@V7$K$6q>jXUk}PB z)U`CTjM?2(j|B>7ZPBA5x6H~ zPfZIiz$;{Q^>TJjSybUD$hT|a$kjPYE|gzu7`z4&Kj-OZ_mkQxCpW4y!v_5lueZeN z-uE_nqiix${ceKCw&#afx#iTN<$~P0xO58p1!rxZi`I$WQnP6wxk?g_{!Fl7y8f-L zv%eUgyF;o`(Q|XMNc$cU!sqE>V#EBIR{PzCi%E@&i&ewA$110%q8+EAs=v}vLzG}l zV*38bj2~JKxx}U6L55SnLpOA--c$S0B!-<#s3$xsLN;P)lB3!~ z%@+j2r!96l%QFJnngtvn$LfRT6xznR-vkKI1}FLPX9Xrcvm>SzXxi3aNIR)-hrROd zYpo5SSU5l)&0nz&#J9t%x1zRqAXcRNy9^6}upJX>rL z$o`-*fwr^xayVoCL7QL<*v<<8$CG+NHQ|6R1+dIKuzmv?*UbmAB}Vwximuq9E_<~w ze5If*>)O+aVjSV8ca@N9cQUxU&1GhE{N|LMY+WKqA&T3n9Y75_xqGkdMF?I* zl*X$J4jFgp>Z@Wrwpa7{TEWToNa70A^pc z$WjlTK%;_vCW1i9XV!yiVGt-%xQXevF{^Bb$rB_w5^6wjQS4 z=S0q*6=48Arx@(vpSRb&=+@h!>ZC`uuVx<8{@E5sD}s4Lufif)`ng$9gQ%6btn2Ps9KKaq!RE@tvc1iq z;FP1b&aDA!2o)vRJAA8SIMN{N#G}cRa|xSy*eygA}NU& zhW|w?z7=5^{RFsA6_-m!ll^A#r3A?+swfgiJ&65ohcqeH3fBJ|Z~_F2_7q}=J~Vw9 zoYjKTAiM9yQ7tnL2`iaa1ru*bp%$T{(}FUtAoGET-}@M)a6CPl*-hN%v~obSXs>m2 zCQpW>?k9d@gI!<{ZT#91XVQBs2H2%4vbf)j19Ba31W6;xdvEfeDbzBykrH9P-1qPm zVb-tzZQA6!&F!18G- zWU!y9-w;)tms?nZ3hf~|jY-j+AwU44Grs=1Ul!&`h<6e1ofdtI3MaB(Wr0hW+NnNX zXB_~xBS^BtrLbrezt1egH@froUBj50BP$X_h;*YVKc-fVZol?NR3)A5gw{$VWj5EZ zQYuh{R+$s|c|9v5gT*HO+Vsjn3!K*iu?la6*Ik#)J7r!Dz8@y<%MJ*|`;>lBn*+YU zpf0WRH1_`cPV6_Z`=u}UYfB3{`>b!wFsKkcB%P8N$c9Db{L5G<_O(GZe z?`3jQBzEHcW<9szu7kDh_6@XC6XqPC#oJL4H@%p^#yZff1 zj539I)9_<|Vp~T;WcD47u6Pwnh?&?NzCE7Q_aK}1LC+BOd7!@MQr}!`nrz!4?9=+$ z_W}=I#VYPRB?J7Sx2n?`=EuhYwaZH7H(2z*&IAh{96_B&-tD?AO?tV=3y(;>KhM2_ zs${u$zOBuyh-5)J^BnRYk!Vl#_~CJc_kb+$?Q_xs<%noIy}cAXkv+w%l$`Y)Cog~C z3Gkz}zGNzWZ0RPv`z|DS4o`fp9=X+MGbYrrbA2{zB~$3O+$N*?o^s~A=enKG^+rJe zfi67^rY=dn*NMO~DtSXL^9S{kOwYG&J-C&bQoyF#C;$jWI*|(ctVnq|rwz4li;xWP z=r;pS87U%!lMGNTm_3bulVG-DZXa=H%ByP7b8TTma=qB?Sae@RbT*(mU8wtgps7-2 z?N76KW)6&qB8Vo*)vvt*>^L$<27I5dRoO8(<5oH(CW7@m_VBHnOm#-b~ zdpv3lUDTiPA6l~Pi0#}L6e`*%ln66F%B}J(zW0R>9kaI&v*t3xybLut z{RR<5HCe;eTqlM9%oS*G@C$X~`&KO^70uo z@Zgn#wjX#j^p|W5U!UC)P|T%oWpf)UJ*F%fB}b2i^S`ar@cLHAGH>J(F7eKa(HyxW zoJgBkH^+NX@ChY_ah1Hu@0{&h;&``VuJ`Z-&nSK(LU>iTjIbH)7qbLy@A5wEBe8Gi zHD(>hCs}~&VnklgRhd)Xym{^MHd{vNN2|FPK`BpAIp3Ad3s|i21*;3nqA+qI>Nx1i zy9rTZ*JIyD8rnRBj&&~N(AvnPAn!3#j!#Sm}oX>O-=&$*4}A{WwG6ZLzlp&5JUQxv1sDn&-7M$KBsw)-YZ z_VqP`z}1!=x#m0kI0fsb=BAVLX=k4v`MIWBbbnOfw$UyIG{qvV6nFM&gSCR8Y`>|+ zX_uBbyTh*Qjqc zF?t?X*WFGk#~ap9-#=_5n@M|ih%PKK2rNwDIG_3EI%Uz*p|rVB>pir?;bOCu#+nkK z%n%n?Rm>4sWpKWu*lbw19DZ~5sF#?m{wLAI;P4*Cn`Mp7{tcU=M_;pg|1Of@+a|4d44-4BJhmzPd{kDO)4U@S(HFJ5-(hUzXubFcY`om)*v%MjY> zcfU`1up_sE$S9*}ufc!B;}=xP!Ez{?B*fBc5AtX~7W0h7gdXr6+Q-o-Ay+s3Er_A z`MI6W!a7=XW`@79!Dc$5ko2T1bL&&kT**Lcq8r+Qt_0cpf(icQV}SeP#6$d|99YSK zh8~RThXt${`N>NBwEOV7KgOTloYC&|*M7{~S^8jcaVw!L>rj#i@izCmZ+E>+#EU4M zg-d>i<_78&p4glF?eeC@b!rQy65O!buJ!~gI$RjZPr|#MtCRL={#AnU(UGe`Yen%j zxUj{pY#dH!x|~VcC1x0=E2gDB#9N^o-m*iIc4V?EGy(?)TL?B!+ByzD&_PSu!+FZ% z3Uft-_itkttL3&DFh9nyYT)UZ9!Bi!>QdN~za;|2ZnzxfB+iCV~)U^{u3qf7xca+hCM%SXm=NlBh z#mOYXHL>(4JI)K2aTNtWGPX0e?Y1-w)b$G#sAqtkJ&|gi`oXeg|4xI^E<;6Df_J*c z(bb*?0$yaPe}hq6e}rV*N+#75N`Xs*eTP>L#*$wqyX#%FG^XdLF1xso?TzPB8CbM~N@Z&&++Z}XnySH~~)TA)L}vd6!uyZEecceSk?PmX79 zioS0i9F)hDX^GX`c~SaPD9)Z;Gv3Ah5%Wg=p`}E5Y>Usxj2V945RhkgS*2C{YujrQ zfV%qAx-!&UVn*whU-2Urv-sb+gljFOhA{83g61U^zkX`rgon)czx5PI#T#s&f>7_+FG44mrL49aodO2{_5-! zDBi-czit}#-Uz?YGXCmkXX+9Hyx}SE3ICWY;85OexQ z(uUk~!GC;-rb$)s9oAP|`w+NP2jqcWHB}miEf7z!^ve=(wxi&&oTvZ|3(n>XN069q_=bu*i`o(KC(lwUJTRt6$^N3U!H z_dy;w5bT_W4Avkm;hdd@U}AJ4Zr^K zkL$gaNW_B_t=?Av1DpTBcUp(s?4Tj*Sk2y_(+u`n1|0kGiU-#w&VbNX=;{79xn!0b zziu~jn=(~%|3}w|RA&627YeNcCD6eitA7XX#hG5y@1EylK7Tg%7i7W8bG69wZU;Z- zPpJ8-Z3^__f$YIF=z$PI68aKA9pK8u5ac)I3ETmgARRA=mskSK`oe%Kl{CPS$XK>V z(L?G-mw;;Qee1ryry9^2y5)_VxOCOg;@4lGI|6RPi!M-#KAZHm1=qh33LekF)t~?T zs{i<*KNsLXZrVTpHFW~IecpJf;CfD92MleVl^_09<^H#?f(ER=I#}RU*3hl^|1bU9 zTmFCTHZj=lWNk&+g=C%md~JDlxJW)?>Uw7sG{(Zb4g#6&A^9pGX>TUo`~2(ASAmQh z5LF&wn`YAtJOru9WPW}QWVFUe**HK_9cH4_7nl!jK@{i~fB=A1j@dphlATqdqT|9@ z2qgFYp|}-yvT^Ohq%gL{yHJR8GksB-JKb|8qSOtjLyWY%eVuvp)ioxq^0RN}$Ntj* zMUd3tP$IT_4W!N|E}kuML7L|!fL`lfzLYy^3&x?B03rB^bc*~IGbayz;n|Nq zKx3Z`we6KLNL1#tOG<~a!5(f^CO8l1Y3T~kI z3E+^%`T(tvN=dqpMH9aS@Bqo%v|7@25fVHT0}h;<2`P0PSN(?zji(>^AKydvW?zE1 z^;IBj*T|TTOgMjKKK-F;H*p5}OF}ACGo}8($|4k+$V&qntJ#JthJg<$bLTutq?gci zWgh7;*ckPoo#XTv@=L%>iEUbIgW9uW-`E&&M-0avv;;}`i|bqvK;L!deEU4jh<*h! zO@!HIxR(KamGs z(^;TmK@R!0H7kkHQ_9FpIX;NOaKNi6+6k1Dt_*@j|+)ML2OR8a^~aF4wqTxr8DZ1 zqn2}v^IZ$bJQU4*ww=-_Z3K`R+E^W68nSb*S?TFG;Hfu5^uP%*NxVX3m@x+s5s{s? z5%f0h==JH4`Wo*$U8ml}CyvLu;{EN|oV^U>Ju*|?@9+v;&e_J-0Cjm9wC6V@2%gt` zoTDh&?$6T19cK8t`E)Zr)+d*$w*;?{+;1~jh=hAaui$&yfxX4C$;keMpZD{^_JI^9?OHQ z;dpN3Le6t72^s?QvZqVhVPI+smujPJ*bEKy*S#wsVAEOy9Kf3)Pl2ru&}}FvmWD&Jq8$@80Uw-_c`h{Ez=vHfO^Ki>Rr`LRrjJy`xT@$hDe%++kKUPTLEzSA2~je~OcV5PNe(^& z%{NK%EME&^gf{yfTo}D)0}v?EIteUo9en~FZX!jLfV1s73fR?F3-7z=h!N%c%P7#7 z`}uR4++QN|J0uSPDc!beJ_Tw=qo0M5zU!`8Xjjp+xlTl<>n0RxMhO<~F6aiWpzSP$ zbuRHytabS)e~y7vLy|A~K}~c>;8-Hdm6j>yPe$e7*99_kdC&X-sH08L4NvLkO)vJtKY%5 zopAy>@**o!I%*qz$&6NiK5-gLkPGD1`)TPMX1ct7b$Ag!`Bve!ZglI6QsW5E^dj*t^0 zSgC1SU2WW#4VuP5T(*W~Ln@ke&}YZWoq75*nat{e9)vq&xEcoGB<>DScYRl6KDryt zPPUf=7UIqt2eNb?JdbWfOw<7g>&)kAQ7;2Ty^FQDa0-5}BfHn6@a2xphkIsnY7OC5 zc&-{t( z%T$b8iyb;mCV&DqE4b9fQN9LDKwY?7p(Bm!xdT1&U?G)&>%!{wPY8bKK#nnPLOS{0(ruTvQE$!-_c#&}!3TmhOFq!`v5 z4y$Smy=f##HbyE(iBz{8NOv*yjNav203w+&YdN|41v~;bXg?gzGN04Y&edEhOYJ{{ zbfdTGx|)M4%7#ts+Z-ey^BXHEXt3O>N&L{&j~t`V z-;+<1C?nGOY8S5zi?EqISiQ}iL0yhp8lc8vPRa&ZbmMoMxM+5hIs)6)zywtYB4X-P z4+IFUhtV8Nu!&pld6>ZHy@X3eW+m6VB|5Lco8uBZ>+xI|@(v;cmAVdHeG_Sj2~0Ok z1*6E@;WjFbz|6ueX{~5|^vAqU_rz5IsIu(F@H(H=?__LX6O8kXaQLrvF0OBwS3PD& zmdXiRIIq3-%1CfCCc$ZbG11sU_dHP1d|N0^oN_)oK(10&ZGRDCYa^kQWzNthzD#X>L3At=3r6qVJ z9?t?futlC4kR-X1rBC+J`>!TODMyI}`GRA`pBR$;x8nWcu7kOsh*cbuS+E&z6B=b+ z`+iv9qcsJF7Z>t0@2m*}BoWtOrD<4{*ZNYrU>;%ue_wFjdW!f302tO--df4F`BZZ3fdZvlX#CS*RrKFvy>lQEB*o72?BxcC z5--!oN|NCkI>*f)P@5I~Yi5_)_*3b#m0H zDod3YY}mhif+op^UoBHh?)IbESFTLg_FdMS2Ex&ArIjAypxfpxKn5}WJ(!$K1DJ_2 zb~qT!goO@)kS1OT)KwgfOL#gJoDE8D_09;Vd358bDiOjWAl%kCC&6-3q$(w37x5Rey+wIwt(`G-$EVT)heZBzT8TPO_dto5)RJKnU+>|!gLd)k0DUr4LZ8oqh)#O}aW8r4 zj;h>|P7h3I14?Ig3JYu22QS_;d$fiJFS3{`0HOjPa(qH>M54-pEslOAjTdn#VRfDX z2M$^nX)1^ca}Z@NTe~Da8TY=nma-)BwC~V~9IiUGB1!}S+T7Yzwi-GQ<|P9Yx(os_ zkY%h@r5q;?S}000Bllee`twgCv8uJjnRl zv0kaAX1l8&8+ZhbqW~sFND=w)knjBkR-c?`u}EDpg}dU5-6!&CD_TM^xWgd-`U>d~ zb-dEMLa`-m7Z;f9tVW$z$#K+hJhc&n>n*gx6eN*XbLnsLOuB2}K<(cy_6F$v8a&k# zFZ{wiCV)j|yL>6n7;)XMKOSFyj%F^rg2KXJI22ZT5c)-)_ez-oD`DKb&^9BOfBa>0 zV2-X55f*ytLQSjGC7`_U4iY40Ib)G5{Y}%IWUo&a==&_D8o%O`P$3Qp2cF3`rPoeT zO+YEJyct4wnS(R3ozxt@APe9_I%TP1jwW;Epgqz%ObQD$Zq=H1mk0w$`5U(6@-tRA zKxahxJ|Z#nB|NKcj#Dt=82Mb4+4qKR56c8Ky?dugkkZHIYw6)&oh>2MEKqe%fQ;h> zdR2r3mmZxwj2tG5mcIw7CUu-EEl|@Lwn1vJA{SZR-j6pikZ%bE9OjYK3X-Mx!VVJr|xS)edf&`0fC)o?g z=}W6#QJ@+?B!q z{0=Kkks`W_kP;R)h`_)7OM&@rehH)l^=ZQ9DPQk&MW{DH$E<9RgjI|!L%Z;ft03<1 z^*R3D*u{$rn%QP5JVhVCk>cwt#la<<;2sHDbdZF^0er9V{J2p^cwUmvj>Q8^FJC&R zfLX7cWu1`!R^x-O^Ykg$S9oa?Pd>$@m48~-_?sN)40Hht#@OYdzKH5rp>d8ZK5Rm7 zjBz|@u4RVRroNL$vE;56uMCV9O>c{!Lv4B8)lqHAz5|a;SbNK(;3RM&9)uM{edbYh zo^CXAzW{4Qgb1qY0C1Z@+Eqk4Cz?1A4{t+DzV?AXm>rbSZqwW3Q@ri|*!*~T=cjls z2dsn$hR6HOhzxZ@*gbcvrP*2NfRQ9pjT~;P_v8(o+MRGZUV>{#XU5*dLi4uLKu=Y# zJFo-#5jEVlM)vShI^q^XbVm49Oe4wy2#3upy?vqOJF)R?g&4t@qU@xkz|lsHNkv)i zkM;Sv!$plauPo3poMw6)F$zSf z!QQwNO`LYQqzC|j+YfR2ct%;AdV!)j;rf`m64tq%3kPkz@9qCiN~}ALH6EW=5fNqe zK&(vD-0yJyvcCW^Vlr5-%ecJ*O4_TK(nJ!QoGo=^ z^QQVaJF?}~b2@Pxw0*jesz1=kVP^!YoKxv4+7m46tS(g2iE$a^lF~%&yyaYD0||_u zB((Z4GECTL&VPW%{!LZN!Vlsom`FE(di^DPpLdfpMMB9qpZx)42*-qR;Axo+^8M@{ zWVUJBDSrZ21r}@I)CKT@4p1b|ob~!POwyw4<{A{8$Tj*zPtIo;Gt{fMz73|@W=;S_ zI_|x+?iJ@#;n(|Alb5T-sUYbo3Bb}_Jn#g|C$>JhqJXLdK+DiP@sz>I#REilK(pNT zDtimlzD}7hEQg0;S6ARsIv#w%J+r0LFZ6MklHo36e-GW;@#KV0x1VV3FU}ycfAYKV zrVXSr5DL2p3)27lLimp+zlmJ?rw4yx0YGOiXWnA}2Qk8pDCS@XjM+<(y)!)MXW^H4 z5fU6NBqR}-QU=2>lqH>-No8`F35|AK^~F;F+K*{gl8j_iW5F1HI?sjn%EG|J!)IY zg;%lQ$Aw1BvShMieqL6_A)&{iue^5{Ih%*|Mons@RpgJ$6R7nD@}#6`Owi&Nx^oU6 zN%lRI9gGHpI*MtYMNg2qeyW@>9kHh>IRYRxItEa>FUE67BuVP(CJn@u@F!Qni4j<5 zOfF|aMF>SbFx9%VDv*Q;briaAzras%U|O0eCKj&9g3a|8^sAHz^SDxA&;chwgv&2g z+ak7U*7&|M^cZ&>9N+u8og6?I0sjDEpL+)9!*smD?DTK>a<$c&QjWpDr5?q(ltSA6 zJbNO>#h$XPoiS~xE21L5zZN_2_?x8bM=WUW`A@db>j4bvz-8Y`>q)%Aiq8l*s|Z+= z9aP+%cogPu{-vYYdVROOrkG7?tX#?dD$@3_S_42AiV zSs5z=hWK{qqhE2*&k)H=N_CIZ1cz!JVU%6FO-etf2ib>`T4VSexCtKjls#Vq>j}mC zGOHk)r>O*K4i|rB?eN&uFQbzFH7TO4Qka0}-3O?twQYm7;T3^3cXY_^mEL;Lklqi5 zH3Ao4Gju_e{YAO#))@{ON|GWopfWqT^^_qyCCb|d*0!ZeBtIt>beM7&v}(47OB5wp zm-2$cvE~e&#Si#ZDCO0>O9m65iC{{GITjwve0AqJOk}(N1EEsIhtw_pk=L;0a4Cge}tm2Zg#XXZ(xFJOH=hk%zyH1nvhi0#pzdtNfJS zGF0;d)Q0cbc4@=cDdUX~&E|`wXRqn1FfeN3BT>wF`lJ+#cuew51MR3R<>`_k_wUflHSmQDe+RkBO5>hi)t1(7rS{ew8`4~S(d-piD6YK3$ugyr?p z8c`-qPXJ4YI+Pp5-Kw4GONk|*Z-6DQbM@{k-jG%oafF1J_<)M+i9I6tKeKlxR{d{S4yBs`fu2rCsB*}`H9mf+cldgq0SMVo+_n5}jTn(i&2Ra{G; zZulZE*@VxwO)c$F&7qSJiDI!$@W2^}8&f5K`QCbtmXJ4Y%vVDfo;ZHyBs9L2_ZVqV z2N)Nboym&H1wigT&!skdRiTnUBo3N&=@7pxoCn~BZhtZ{qFC^mr>66L?v6)Hs+JQ;`S$RIt4^$5$lM?qZ>>*zV6c<~nejIRZSqilFZ^yWS!$8C!SL(w*_ZgN=9lAHG`AXljYfleUn z>Yi;Xs=$6ORd@@pDk+B`qpfIlpMgEke$f?$V+tHP@i)^Ox6>b#~?##w;|!=7O1%QPS7k{hbrtrY(* zJCWs9@+D!XT@!)=3mkhew~sZ>fB~KD)M{d)>}Bck=!iv`4KJa@3x$xE7b55#BPs>S z0E>d!l#DqBD#cdAaqdCbAQAyOkw})b5{lS>w%wr3xR7#7Q~owm{xzilmwO;H0*Qx! zEb7e@(2=9{7}2`2JP$Evu|!j*3@D8WAjWE?mrCmr`2@6s!}Y?Sn8p&`F&%9C-Y8N; zZv>fx!AlKAH)v_k(AnDKMy1qOt=}b@nhc4*1CY-tFr>RM!o5{samvRCZ0B58aZ5MB zm)1VnILTN$ihf0iK((;)lj&fdxSAEaf#_}E;Q#`AC|zPVk>Typ2kESBg}}<)aq*Qr z5rPpz<%SW>J+IEJ{t8)S`w0dY$r|}QobW$C&0*}3Zr-`X#?dEOuVjXUF3ZQv*Ma`x z?9RBJw#?AhW|YuE6tCW^R>^06b)ZLm)30cVK<&QtJ(g(Qgfa$7vMxVJN4d7}3Cyx+ zAyb=~y*B=^Xi#J>lD~*!Q5AIC-}c#16R~R59cM*zW=9RSf^-^_0KRG zr^gXSqATC}Owt&cQg#N2t^)p<^3wt!laMn%^Q#j@bQN;cg8T;U6!oY}4ipV;-|X&$ z3i~ZrC`m$E*6KNcv&NY<@kgGIG3eiPSboI7VXe^QyXnx7h#op*J%90`c!5NJ_n21b zb|iG><-AaMD-TmZ>tJ*bHbCs-F$$B=m8L}r;VHo^Hh>Q3CYW?JzI&WH{wYYfnOJ_9 zNuA&lKO!VAWD=JIPN7kulmG7d8*tuTVVJ6TKPZN^K;35tCKz6zOQ$qe%;*q?Q9OrC z*Bm`23Ig7P$xUn9qoWysmnxhTw<1-*&1O~5<-0JtbW(Hb&5c8H80nRc6~H_1oiryy ziRFrAr|NJ!e!vR%w0Z>y7pC*G8GB93b=CSTfYXO0>tv3*1xjW+N;84>amT8rLE6?h zp#AVfNWUwRYVC)*I_l(%&s{=!(T3HmklJ{9Bk-twq(Ad8C;-0$vOey13#UdkP=Zbgi7eETH+P5SO|8p|w;t643JJ%b!fZN6OZaPH>fyxre) zXOLRI&@VK9pkDxb--`|Q_AtrMq~Z=0E{PO;lk_ISX(o#r{&Vo^3{-60ahRq($7sM+ zV*qnVsf12jj6J3&Tc$&?EDdz0A>>ZZCaz!zk1&D;947IOL5_W3xQM`wTP4A8vfaZ` zAWS3V8B=^!s3kvq2}W*w!pVOjkBzcT*S}N^VE`)w6BtC>4C^+*)@!*_-b@l)q7Iv_ z)UBQIkp?jqJ)bSK1u4c1PLO3Yowlt zTT`J63F!a{%opPs?mka7SpBYMIltWI>r270ju#rP$sM=5p9KGQi>nlBqQ|_xApi}P zv8)O66i|wxW!*5*Sl*=fn& zh&I-v6Q9@B$I?gLJNgdg5hr0Q@#oq^{OV`UQ?Fl;B8N_f)(#CFji^g{L5E+$!+9Oc zV4A}y*Tu3X9O}%JXpC@d4GR z|7|geL-b#!eFA{`u5u6t=TIZXDcrhQuqqw& zTRvlo2!XT0e;T$y^`mmG6@Ul1L`T;wX2~{gck^HDe#~~Gf}|+Rg#gZx^DtP*54cJ7 zReF_jSk#`f;KUo`r_8!d6lDhtEsMY_^$e+T3e2v*LKLcUy(KPkQ!mMQJaGG(N6Rh_ ztuU{l+5S@SyRw1DfMj_BP39qvWEFp|xG-6g$WPWVwjPd;b1*J(SYR>m*44$z_j;Zt5tX?KYS!$P||t2@{%zaRw8k=kNGFl zSZo|?+PRbsa{0#a%}>k#_+Z2(CZ9PoR+PwrH)xLXFS5^MHfdu3)5x(9ew0pbzq|Yc z*>=PSdFGuo_m4YD-O`;WN(+2*hgu(Hn2ga>9R~8u+xx)CvUISh8Mt^cY{=YhRvuX2 z^QxWgo%&BD%AZ)!UlS27LI_TJ9sE{%-p+LaHgDJ&b8GnW9Cc8X5bBx&6Xa>j!yl&H<1 zYiT||7|Nz{>2d>->>cK;+Ji*Pn5}vNKRf$Y>tvf-J6#?JY};1y31v25KJRtlil^yy ziYfa$y-SP_kK)8Kpn7kDB5&NB-Aw`r2@o1}W}D^^ssk5dKUE^O_ko%StOz#LlpXcj zvfmH%m$zj5wS0IoFYd68+}NjE&^-zV0RHH*G%SOG%^fi4mC#DaIq*;?H0-j8x*$x; z7C)dJu4cM}H4>k6QcTa`%@|*n6)(btt#P*KUa?Sn0p)WYmR~kZGc}sjFRj}Bs-PsD z&gZX8XKE&MwToG&>DGliLEs0-&pxMB>+W#nq#VdBB;1|-ssOqs=R~ISmey0Ek20bW z32QNF_nNGF6$aR(7=z}4t(%zYUbBlgP;_zDe!-N^?84E`k8TF2svzhrj)LJj>1t@#s;{KxW9Y5HBFz0}^%xQQ=i zj-i%d;za`yqf--(P9b|OQMO)^+Q5GA>5IP!O8?MXf!_TF-~k!3*Sxg>vWq}-g&1Jw z8x21hH9gB^x_9%MI zzu#6Y44@Wq;887O$1jXW_IcdJFZ6+TJkSO$+b;}<r{x_r0fBEE_RCk+}!|xZ0gSO+!`qHF?2-3~=OY1cNULUp3 zm@uU-`31NfGB64SZ7QUt0dc5(Noh#?%Z_ zEE))051A>oTZ7T}Rm)R=bbOueqJ99Nxk;y0>v#WWdkA_OH=;o#8+_uhx5xMEkQKWy z4CQO?0PhKr{#BOv+O|5FnUhUjx;6nW>?Sl9z4ZFg4kt@smukSo4C2YVMDq7`9RDTw z{?|C938|p%A%8JzqTdAooUC`~NZo>HDe1IF!%l`8{T4BfJpjZ1G8c#D1uaVxe-UB+ zb>;l~ZFe^dT#4_~oXKE7(Oj~V*sDrrIe~n}U=}`GAkJS50m%Vd<`TrNlm*2?7-(N! z^Z9;(xzlNHUE%-WjzOPOetZ{-YU0WCCCTPbmNwTO`AgZ>i~|VjFY*H~@I{pQWt0u% zct`<~=W$Ed|H-ug+gn`2t1&s_Xx!m9opv|ZB~VRI2A_YWmi_sXeAi7yeCn|t1cE*~ zDr8Rh4;jZZ<3?zwr|-uUfkPK9vf)5|D$H)*@*p_ z{U@)32d^YEyEHO@KtV zS=93Y2nQDOR`2!GKc|_LmvG5#E<$FFC15BXYFuu6iF6F;%+f;&hedn-Kq4U&{D)(V zMj%aQ59J zU;6`)u1HQSNFH%?$gYmOu5I(n@Ksu*V{j`LHPQEA-YYmI##x+x-63D#{dmg$(~9W% z`vvKf8-t8}(vo|B+?N$mFqP`(mfVBx=IqI-n`!1-S5te*Jt5;Fqhq(dMe*YyuTigq zC86)f(_@Qa`K9qdjK{EW3R2Ami1Ym&wbz5b)DCFp4aBzu{DWat>!S6G**$&Y_QKBg2$iPsyMj%{?v(C zyGKsjkbUZJ3*GMmEOhPUZH^2SSh{A<=8$XuiK;kkLA&Caa{IsSO- zznx{L{NVI5Ez8J%vWa+|v?hJfGdA1Iubf=+=5((w>X)GCL}R}61++ePb8Rwr(TTJv z6L5yjOFsR3_k?PS^bdvWzis`$`|wfdZD-Wmb|z}p&^zt!6kSiJ$htfW0M@s>b~(;F zX#Vd2D6ss!KW)tR9|AU79&q&ibP85!-QJv79Q@w&%f0)fW-#y=zE{Es+UK!YN%|F01^&<785H}4|Z zmMBnE2Oxy4oKMX}Dq4lO)7%We#T-D?;ulu`tH_0-qgU#S_esE$wA%eqdrl@iIgYUjI*BuL06RsR=3I1WX!73IxHcA9RJbonhms*;NV zZvOyummjF70sI2*W7<)tu8boHTRbfXyE&=l{Gk4$wit7W$;s!I&b8>wru#4Zm?< zP^HXYHOqgjV8`90hAb_y?n+(!5r6#U?;o)f91@8kH!a2E$uundHZ6UQ|K=mrgp1miTV1V4l1hvH@sKkBk*~j6A-*ixQc&!W zGJ5at{$yYNH4HpH0Tl+QBv(Ks37SdIIUqwdXH6uSJoX>BsS%R-u zdR8Bt%zLrxrs-Z}6;J{ia}J+yoj_U%wW-3Ji@zE_UA&-yJ$ad~CXh zY#)R8N_T5r>c)tS1Z6#=^ZUojNe&xMD^5oPTU_1_iw+A75OTeov|(EP3rfzcJqauC zhc|&KgzD`?42ti-)Md)4USG}$l1;n@D7eXJCvE^K$6SDzTZ<%7cB8m7zc|~f(g|@* z11CZr81MO^uB|9=RCoK|4;EX{E`jpAb|}h-sRdkOzHjutDoB{m`UXnjQ-+7Od#$cW z?cn}JVg{Kv#Cyy%7(9{*3PdPp9(Y;YaU$xluXcH_X?;if`c1ttqJGBP*U@pmy6F27 z`CY6RfCY!2d87^-7pQMcz|=fo_I-A7AN>h%EwF<>`lcngamc9YO%5Vg3>QT3)nQA0 zz*FV&K4B@?H81XCJequ!H{f^h$Z}m(CD76?SFe9&m$)~W%z!L61}&E{CBRYKSKvA4 z+Unl-($(%n{QhAXkGZ5npyjnYCvo?_>G-!7yMvD$w+GV^KOm*g;d2ee3*jNXntmlv zU%Cbwe*dm_$kYZ&^$Xt?%`^eQ$oNZa zqRPs%wqYp#uKO*GXZ8|ZSXV)zg-eT~s}(<6amLp+Q;fZvDaOILo!a1)0f6lkCBP27 zraV)?IUYbX6=kuOBO6euFCQz)%k>(BrMBZW2YJ}@$E-VpUR)jpLK1(Q+2@ekyT#9} zZ+P(=gYcGT$6W>o+4tKn@4VG~3}zbyJ$+LeR0_lfUx59%n>vI?S!rZ)boW{KDUf?Tn@6+Y`Cfl`TJ(1zfFWniR_E&$ufOPA> zSiFhtz%esB-dviS*uPcZbZaOS6Ujy3) zyEg(|n>IogdPmN^g+on{x$luf>2TPO=@pHR%70rV8G^Uoa7LRe*jEWC^yNF$luuzI4yM>yRa?~SuooEvB2P-`h=JC zJNA;A&#Dr(K%hP~HvgA3kn=FS_LrK`0ZzzZRjGJ`uixsq>zu}(@KK__e|O0%?qLBr~PAimvM%b*Y+nS z|Fkmv>&gEc@_4d%6BgY5J1nSiC-j0l`PQR*`4&#`I$*R1?IuAQVSgsLw32GdrC#Le zG2fFK8rC~8egW9m9J1W#)HVHDa{2Hr6>)0&kv5q_fk&ujRPMt%ezj?J^S&Oi*#jZR zn^+3LZz7w54R3%hjJX59N__B|k-mO{a79 zb!obO@WicClfHzVm|Q5t`=iIUPuiCb6IRw zP#d}TYcQ~ap^HtCUkZL5=9lUe!pwPKUWqvK?E^Xs{>ZbIk>6)%BwT6skj>XqyN65G z9rbgel`^RRpE4UtZN)=d5GCh%!%^eVJC@M@31rRCewgA**S=M1E9>wv*H=B5qA>WXnRV!JuM+!Bzg8|t(w=cYTzlF~lhXXU z@Lc3$IPUrN!IEbH+Cr{cE0?|DNHkl=ag=Me{L*<}>)AtX_EcrDd3ET=adQY}cI1wq zoZrUx5;@V=6Aynb{6upcW(RyPiwOnDwYWVax^h2Cgr6Ro8)YIW#r7@SUnO zPv0Qh6rp@&r^_LOQ?hLO=g5c85fd-}($pD>_oMce<%9FnHd@@%?Uw_{i_#9fA?kzi z9Dzh!wwbUSvZfPc>Cg~NY4hVYrmbgB*;YN5!t-k3Ncsm@(=-k}h>5f5-Nkjm*1fm4 ztZI^)<;%&sZEe^3MqU!m@>ceI!M#&%UFEePU0%Q_@mscB z?acz+ShP&2W3)(&e6;2A-aL4!QQzRJh_~!Vy-ZyTG5ND7tNDhUy4H=7MLw6S&xAE= z<(cMKieJ!7_GQ(nzt4-Nwgq!t2Je;gkK>QsGU1V25dA{iqa=Nb&lNOCL!&hL>#R>g zU1QwM%AuL|A#e25?x;n{Zmlnmz}iYEXv>#)r4+f%rP4;VyEycx2*_i8Qu#eMEKarP zL6^~S>UvvI!!cvjD!gPY1j%?UB!Z{5Q8ap7qNdvWlml5xA2q&YZ4E72tO#WYNr=T{ z)yia0638?pq!@+lO}JV*K*hAw2EzTI=7bp;6zXs-qjeenk^38&UAy40t$wFaP%IQ{*X>d)s$GL&*-*95TlPsU1(o@|sFFQ+Hw+>|gFhS*{5% zBQCidkIcv7b4_+=gQL>=d2i;IhXsy=qb&7Of;()ugK_t>W`P7Eu5kt#qDIZnYvKZNMJuz0tQPmiPyJebcpKr$?%%)^By#; zmB>C)KM(!i4|#S6e|{X6Aww|6H2V*7q*#6T)TSGX(je*3Ts^15xo-i<7S7f^flOQY z#A6y*n#F^)wi<^6R1EJQ4ktfC)26sJYi9lR9;u@6r|IqHT`x}`eSSAU=;3LWvNt{# zZbTp#y=R~4cC5*sleOfE&i{x8bk!?x$ZEenZx(F5ANKf#gz-d&8}WL@ba~%BBC;O# z$Zg%1oQNC+--95ZcT30NWdZXVsc%UhJ-}}{XnwGceul*J{OSEqGv??wJVB5YIMj57 zlW%WIZ4Q|3y=z6i`*E85f@h4p9HbA%&tJ@1-WdOYslc073V!3H`a&($&~a6m-Yjxp zPs|ayqxX*N<+!_5J#{DUmnWx=<5(Ek<(^8$@I6$eW4V)lH1xGfMPk2GA6~E3i`a+F zuI%b_|FCSB7#v&=z7tbp>xNyP5|x%4eH#*zb@C@l&3sR3+~AuccU1LEBiu*zU6w{W zwaNnxX|JV3IYCU|(Z__=*L@1#IVE%Au9e|XP!aR=EZd^(dIIH%U8Q)bW0-Dy-@)wr z!g0WNfq!cryXjXo#V(msQD6u(kElZI(gz>s-?;z}Ty=%MRJO|>$R49`JM%b^L~}*t z2%${X=48JzEq-+c5`ND8MjrN_Ub-3tH{2Hi7&S~@KjSg1V?&Y7MqSfb?hbqs#!FK} zQ+IsdA=5~Dsb;3v{a8eeSYw}hs(CDz_DW;J?D&`W*=4V2$+8(ooD zj2K=3X4a&M%xXWgtGA_hk+j5<8X|ve#zR-0qo;_rBv=(}*wW&`8v2*9b7W$D?j;?I zY9=QlzUZ<{MOR?!=x@6iZnFmm#g?frUG&TdV#~dZ6w4I#{{TFJt^|);?$%Vm(0I|39{A{Kek6+ zAopGt)?NO!uWY*^&l7**72DD%AJto$Niw=NtY#5#p2$4hob+@~dfO?BBR&y68VTX# z-tG4}S8^(c%-vswH%lyr+P7b1C!CI&Ampgtn}izEkZK*NT0bxqcZ=KF&d!&%dgjD? zEq@jB^oA?%b_9C2{Ug0w0U*l4QW>xvjR>_Cf=cwoRqpR~<%tV7)ju4M1~{X1R+>;U>c3Y zeQnjdMcdSXlR14=EW}xlhb4jrY;NDUU8(iK+)5EMEe<_h;u@9eWZC1CdS6Rgf;3Aq z=VHzWSOt5q?Qd|s=;_Zo%dZDn1>Wdas^9&|mGPxena=n4A3XX!BL-(lGMzI`L{&+! z2eeXxg~T-B0x0h5X5XIKF-R`8jyx_h1wtPytzg*INHf<&X)wm~`Bd#}+=S>d{F|my zKVBaKld$aJQRMtMRMd2yh^MWQ8{x>Vr=B?|Mt$-k9$)xLP9S+9^ssye87qkk5CFS4 zbdrFu0gOZ}Aw3{wyD>gv?DMi!`2t!`MOJKQLP?~gSE{TgQWo6hX^YfDAL!_g;I|R$ z^wPnMEIl4lG}aBJrZQhj>OEi06`V;pX=|vZUcUoN$402}F7>jq1w^z_UMp(FRuGL% zDe_eBjDvb_^y>3iLs2$&1-NhIZMx5iM3Is;*t%1yq&$+%0fs%_-k6bOYIJiGe$iVI zpG|;g*DtSETA1Cu!ou`n!AVz`Z7%vor0b!=1$B-u=7nUX7`ZP~_X64`NN8$=!K^gH ziNp8<=*aL#bow+fqijc`LPvFBS9mLDldG*+$JrDe$DNH{tbyp?-JyxCG@{u;Hw{DLhSw570g14oNiy~lE?^3TuP?iON!>+J|iQzBa!BR?BL(_ zbmfli#`D(%0%RzSsRlFVc+={wNjR%36x@^AlGdWWSWSVu_F}+qPxCIfk3botF^3rf zn|Oebb%E-BfS@0@PlTqtRq4afB0n_twpGOY$XE}haZ01S`@v@m50J5^IdHL{B6MiF z8X@bT;O>8v_9nIV=qc3*Ei3hL{h5QttDtA!qSWPt3V5VLoQHN39m$jYUtA5J|T&sGQ@XvywqRBN0HC$wI`@ zdCTr3P8`f5W#WN2jMbc>hlTUKo7s9E<^hrlw%7_as5;*L6? zq*N#CUK;DZT0Ny+-?(xm>*VE?wKwYUkXcU>(%Lz4D`P*N-=e*iqbKEzu}PiLBuk@1 zDYlOL1b!@0uT>+%6yMWXw4gtx+pT6b6!VcV5<35;lJ!({DCISb=mLG@_^=msUvoK& zM&3+<{DCY1H!5RA3&ok8LzR4PNBtu=#6m(BJ~IUOzq|dezde}Yv3}ejC(nzmq(LuUL(dM>xP2eEE8`U->gIYH{7~~@;v4Z$ zaRwov*p~(~T9{~?x<%UxQ{2E7_Yjq|=D=g&TDstoxu&rqnhT<|P@;*c>rOQi&WY*v zMovOG^+%Vk@;;4T<9T7W{G4nOqKgUM_YP15A9ZIC3cnOWni#nVjLCV4-Cz~w@HHjs zM*JiIta=C=UhclWH7^0+CgP1N826)Qk(IrDwFLs*&p3=(wL|k%%3IGvHXfmqVQya7 z^KQN@M<}PCMDy06?E9u4a%RDtwQ8$+k4ze+HpYxKI%01nqgc=jH(ujy-3Wz!tSPI`l@k3#H>`ySABcPxpRyk&Xbh@5VR z5IiG`?I#MjVT=`TD9)@NRTmCzv*wANQW}b#TV_glEf%oeayX$>wC0;wOf`i=}8M z)@)$5L(7dFy{s`oNKnVQOkjMSwD7(_hcRk z+;1oQ{TOp{fZ@UwiA6EuGb{Uj9fe2ahf2nK3q{9HIb0>%PKP{lgkYlRXrf-kX z-66S*)#QlF(j4+BwVf`e=mQ>@uj|yWicHnFv5bX?#o0F=PwSNPppyXSRrW&L`mzo6 zRJoPLEZ3gO6mH9&x>PdbgaT1^I$TZ^hdUh@ZNFe3O}plv?bO1s2+=*sV^l41bRnWj z+*aeYypO;HyG*e96@{@E0nkw>0enqpz7=y2I!WHyq*XZGa4VRu`@MMY9^etG?m(N7JdY`f zG|LyK+IEyQM16?Pz$O`QqYMVb`C$Joz~)29cpA3E{&D6NkC(la@<#>oJiliY1E7~M z=NMt4>4S!l&B6#m#{3J#jx;*u**BErxRD z&!+3HZ_7j0#SSpATG{_J0moM6EMkyXS=$36MRa>_TO`wW!r`vrwbI)UpZDBqF zIj%?*JJ!)zb{6^Lp3Xs=Ds|W~SxT-}470Eb4*OX*AAvJL^6*sgp);XQkFJ7^jL!=f z?yCG8<0uz-d8=aYsLGqha&+Jo$25JmRQVlNr@@|XA2g+>?M zgsPx+3{ti`ZW5zpb4IVL^?flkDVGxm@qS`DnZ-$d|8xLCC)R%S&7VbF!0yxv3i9t{iCpT){>Mo%VKILyyU{wMv)Nt6Q%=n zpRf*s3x8(yl}SsKhOu%Fsbbi1onYw4>6hh5(@3FHG zTy(ve#$L9%5ewv`Wa+HvB8et6beO?p>pB?4qY?x(-UOvkA4!giWJSY_6DiB`>tb!Z z=h>{ql`baY z0Zs*?A*)5!eP!G`M<^LPRSYuTAN3aqHC8PjgdO29L5`u>)9jdFcS%ZfV$e$2U6(5T zoQ#zRQW`tKv_yZmqEoT@wXxIfe!LS0^jIX@3wJTtem02lk$>Ob_YKbR zeulfnS|&|~3MKgdP&pUZ8+3UBs zI3A+W36HPtr_{c!8{SZLSEe_a!%+8mk+g2jm&ED1%{(M2(dh=)-&gf}4xcRYA<-;w zz6&p1kS@u?jXf+jQP|PAI@@ZLIg9)rr?9VR%6gz|8g)hxr~~A_i}P#5=Svryy#^lf z8qOyZr?ZVx`$17_Ui{%kToQ#z?GZHSLtcuJ4p$ep&uTD`oL7~WHKL#l|M1|HDCY1{ z|C5^9DILyw5ihAb-+`2oeg46EJX8_F-6Wbhy?s(Ao+oWq^t~SdZyt5S*QrzFQ5*My zqeGJfNS%6aoqY1xOPb6c7Z(0lo5(Bq0)-luwAWsW_ypgUI?6cKw^93?x^G*#M?d~( z_ChPB2F_`4!qp-yJfKVBEH}?JZ%uu3S-Ouoi8F8rnYRc&M8PGeVI=ge;VnTPFsT}q zu@Z9zBEnpO8I5=mB&D^gR_0MFO5Zt1lNQ{q`v;A{Qn?Wv-aDPH1xJt&A;{~rOXmr= zWd}ry71YsVJ9Al+->p|z*nXb!V~x~)TD0EWFNhhzOD7O~9jKYA7W>?X!G2)^whjyF z0K%h=s&sI_kHRk4tWo5t0E{clnL)|zx@8|TPN|a~ zLc7G+irw55Z{?%DPEZO(RvgmQF^|XxjJInoVMW$1cdb%@sLxJcqYJzjnfDHpqNW&c z$nUAUyTfM?TJ@lr^kQ}X3=Cq^8!tn>ty_b;Lo|4xE$x~hrUoUG4K$hlo~``sYx;>0jI z(OV66S(kU(;87Odlf(TappE58f^T?_%nHwWkw+qu!Q|??+1uQ4ZzCS-b5XY+5L>o7 z{?4#1Wli)^t>c8o%Q8CF&WG0LD+9c`oc54rHFLU)aW_#*(Th=wBcD1s-HYbQv2OrV zYHOO9^H9j(WqsQ*CTo1W|LZBf>SwxGwr223tarYu(cRaQ-{pE#CHgHKGmUDMIZI|7 z#ZGaSQd~GTWNYgrdWtmBS5sJn*_tA+%z$NurAyY|F+-Y6s8VxT{#A;vkW6qzQhvSB zOjy+Qc#B%orB$Q{R4xYmRI{h159$m70oN)9>tKyF)SaF>w zWb7v3OR(}77U{=%M+NL^Dk<(qviG};yw=?Uxb`G zatLVzTO2h`2J`Eb^f&YpuO+6%YG*PU7Msp4xsYagBt&`x-pz4|8*Bww3GY;`*t5T@ zHsCs3xVGlO`I3?xrteXZtHwMEFbF5|vB&n-C{0l4^*7DV)$Xs#)7&Hfj(=D#n(cWs zvJoj_A6H+>jS?6ij+P|PbEvG?k6a@1fi6X)RK#3?w@`Hr$V?V-vyG78;nBXbWEIS7G{(z<5-i zQmrUv`oIs~{KtMa7TwGmcmI|(zUXS5JLFDgrB)1w8nN+o_CiQ-W%+fP|L|*0%EE7v zv{u>xlpwX=`jP=*H8CqE(p+sP>5`%Cu7a3x`!2LLNc z7yr1LAN){8x!u@_m40*!6m)K`Wy(q84z9ejOV4+EspP=W4EnlQ zP^32PfHrVGI95bJyDWMADqwd!@W1}UJQMmq{3FnMOt@pk#G`y67R)SkA^>jz@k}r~P)@ zT*d)F7H|)wKwu+~b3E1*68}Bx`1j_~p2Ki{kBgy~d72vQ@5?dbKgvh{d@EXV?wjk5 z9oQoC{68!p|9qY(m0d(HD3u);vt0h+WBBvqQ8}~u6rh|z3lsC7ZZ+v{Bel>AJ{R0Vj45Qa{>N2)_l&+lFvvmGTHPMzKQ)7(h`(k!MBzoihcIauQUev&7o^oNP$pXX`Wc62g6*gPIVAofp0`6r_M1<(Iu zd;jYX|AhMgf97D2vVQJr4;Ejr?O>!neAbv6GPv-XgST>l0`dHaf(2!P#haOGb+#=d z<$sGtiZi5;Mb{yYSL2IfqM(f*p)ue5gmMX;^;3`siMuwY03KJ=F8&-3Uv zjEw!?{GrL5xgN$pA`LiZG_ZGu~z1^{*$;-`;P9M?NIP&Tggp7<8Ggl)214 z0(VN36#sL+AH5YS7pt=gwesjPC$Gorl3;}&8vNPs{9yn-=>&T~%~FKX5?$ud@d`h5 zr-TLmaw~ptpN;8ZJ*1MlQu1tGW{15sx>Gl({`RZ=OU6~x36uxLM-$iMb z^#d)VJnA)jr7Nipzz?jd2miV`X%?N)tp-K-qk~t~fAe^(;PJ#5-fS>1LT}+;w?V&w z?7vt{+ZE*g_Cv+E$ijK*&u}?kX8OV7`D4*MHi8fLdgV6;aMgfraFr#C4?!@7=U<-4 z-!Bh8^x5f=NmC8L6jMB{Zv=ZdXa3~D|NMl{R>P`VyHC|MO{V<<&*a%EO_FKLXY^m} zft?Ys2UNIa`os6ujK*Cpse)~&KW1|JKYdGdK2gB=M0+r25Y8v8*m6Q3iDti9)qk$9 z_Z;AWJM=_1sEQrknr=H!NfK-c@x@<>0YAF(HNcAIIZx}??=Yt7a+?!7NSamEz&3XW z=)~os-#^}_S-w_v9h&)(faKsr=iZ((hnD>bG)I`tChaN^O3ecWh{up_rV*U)RnEzv2Fnt#DGag4y(%jlYrF_593o=s0qqU-N3&AMV{X4IH7g ztn$gS`GrAb6s5%Ro@iE|CO(fdhk2+Rnb}3U4Tep#VU~lNU?{ZjnuLbq)sWPn``RUv z%m&W&Dc(iNZFyVgnbsHII!FEFp)1lt#Wvcw)?cxSKbc39X}7{a^rjUs$fG|>XA6Ww zZq$Ut`mTDfb$LfnoqqRt73ira5Xr=M*aK$pMbK($Kk?eo$aT|j1)dzcM-H2}J+vz_ z2yxV>tOLPGKN$&O6sxi^Z^TwOo>W0Q%)5E2AKaIRV2tsLtBE^|75#goQZF5DT^eLs z%-wKB4CKzm{_~v1RHI^|f#fGH{IL!H=MRrJx$(>{l1SW~vpCewbvl`ku_ z{(VrsmYFWf$jfyJuGtVxwx5ADQ-x4FJcUul*)`DLal)O(ZU~BO=|9lPvz`ddy2v~G z4NEjV%7BMw@lnZdFpLLu)J=E6T2VL#a7x5GQO0Q`1c@!Y8;JgR>dj^F^gIsaMXgHR zo=b+H-yLe?%;f?RXTMy=W!9`2u${^h1>V&Vng?~YfVw6&^@2mpP0Z(*)&d?Mfs?B2 zM}EA$Tz10V5OBY=`Fzf)k#d@Z`O5LNUz-AGcI?>7xTQpS(XmxPuRFFcNmAs|+ZS}4 zYyf3kDHvzw9!GM>M#Nw#f_~vet^IL+R=ek@p}nR~#VJ03Q9cGeQ(K{rK3f`*J6gQ} z^~)Ym^)`Whm|(9Znf4ZgUF>nc2E`kgAD>q@>!A1)aL4?5jWjiKdZpy&yg)#@Nn@na zTI-sl$lF@}5RqFil6-{*L$*dD*rDgS-Gs*F1mii`+m*|9@e^RK$Ay;nqvrEHJdjM* z3&&oVf+Mg}Pblnf&eof$J3edW2A^JIYuM$@PTc zZVwAdn!Qmsen_x-NwM_%rw2{Q5WnYBwkN}H%-o3^qoJ)dM}j#rm*-%m)JnPaL!< zyhJ5w{_+!|zBdBM+%tBa&EtJX;`-bS;?#R>fNYxwC|Wu~h*yA!Qc6NY524lLVO~3Y zt#N;c-wZgvo&b@&7F9f}3vucIV~sGVqS^5|XzIt9MF&0MynXs!JLM#2+eM`&qh>v#0G3zrHS)q0f>nl@6w`r4P+*R0b zrh)vYe7(bp0cE|Rgg9LUyJld$=|bBg#Q{+%&?Hnf*QF>oNCMR5udk1y07 z!JMgp-u9$6hF!yy`owE{+;SL)2JU-Ujb<$d#(P|+68He57jx(q9db?xw~~zJkjXY~ zLX_#gZ+?QE*m+%2ED{2UOcbiEwM-QE8)jZenNj4pWdq@R$ehPrXKfs&R%AR$P(NXP z2zI0|5rXh=#1yo4hr;Af97p40o8VN}=fs*PQ@6s|^;XL~$7}x?=Deti&#VI1skisQlJ|&21|!mn z`1(C&2`X9(U%|XUjnkNQJ2De>4JuVy&^gHCL%@Ew4!y7s7ePpvOJTx?I_!og~-;bT>~4Zs3 zQs=dJxSMAxA;rn@^Wj76wB@xn7RmeQbe*rq&4l@AuE^F5B!??yFsG1b?K<<(hraHB z7&Y-7h{3Hza;NJadrc?aSGM&SJUEsD1o9MW?VcI)1gmXPA7weD@xcouiam$ft`Nn0 zZVNBD>Q<&07_9g^zvox|dd!A2?Q*i>5IWT8$u5rJ-|N+7=@c}gENgjKY4IejV@!i1 z6AYeWS>thjI6xJD7Ix%RJ~*e!-*-4Hh|MUutR!ymT-Z%D!&f+r-gLs< zc37JxQ+f2I%WxWt!k5OBFy!mnNr;M@L;-brQ?UNK=}0;+}}pRXvQV=$o2tURJDbp|sSAOM7` z+#ca6@Tu^mqQwWR+so+{A`<=4IVfm$E6RDMl4)bqQa)VH=t`y?(0&r88Nx;yTT;Bu z3YM=GPt-@+NehDZnY%U)HoxWjp@)nUQF(0Sb%y&EY`BVn^UhH5x$$bIT>8-rgMc-<7 z1gnRP{nBz3e_Qb+2tvI2Z$jFZ6FvAdjA*AOgoeC?4$sp7dF(s%Z61VBgtAK1{jd0T zhlgup`q0KD!_`mwqYB?!2O`U!t!(Qsbu4%_t8!E^_q-Kv3CwA0z409>Ny4y3h*@={ z%dB33B2PCWto`X#h#?HKr`s2JHN5$xwcc3m9zFWd9+;O-qRN@(-H5&uHnz(xnO-?3 zv?v5=N-rL)S^&PHZoPSOek;T!-jU;-vy~qyc#bK1j;gr}JJ)(nMBH&(R^7eL6a4#m zQ0x(N*h8BKhdPc)Q1gIog`RBma2MDzy=K1cLImxJV4sVrO?DT3BCsbKQMQ|tVO6|{ ziqxV>dE@DNiFNz6VF2P%!VzN@(7?zI5q>+M*0Nm1p*Ku17@ zL<^YJ=mv7yP>J9f7(B%QlF+Pq_S4mh5V$iVHL=DED^Pr%--l7U z`EV*$9|u#K`sl?_k{;xhz3l2ilYb>}fkcyxl%B)_ z6FDy)IE#3j9(B!u<(h5cDw^=<60Y%RJV*9V3)inoY-9B(0*fSKuGxonvb=uYZYNKe zmdp3VlBHEjN->+)-!dD-Y{Is;Vm6uo{*iJjrua`-XZfM@!XgFEriD=Fm%wQ$dKtTVfI9x^$w6krG+zkNI z*0Oy5yR;^C-K$rGhX48-dx}^PA1fyFY1}%C(Mslf1H4Ib2ipnKEL1SB&-!Y5?RgTi zutV^;&pc!TmC5&2unMQs`JYgXd`nUPCWlWmtV23VFpNnv+%>ThZL-~%RiPLxFbJj9 zkbZJ*CK6S_4LMkMk}(KE9Eb7JpT#k=DoAd^}^qT zT3wZNpoqXy)T$fEpUf0c#c*b`dV?pxn`tM~tcx8Yq`$|NzX>@vF$kRWx4BXU5cMf} z-e>nt9ruY4xvD`zZ%}EC5D-*$UpT;cbW|plux|n?GTigPhM*WI`^qQ=6f|puH_P|K zl|kgQ)NkFnf&x$Xq-%0Cp^+NcpohB%3GK|eZI}J6v&)?fVo71Vml2EmW^X*!02`v zU4KT`&!O|x62L8vKxq!mQ{m4c=NeHa+8b3l>6FX4TWs#FZ%fCrD%rt<*Gf#XUlS;O z6+ZjsdQM=mD$Fc4Tc*Ik!CrY5#dtp%Ca5;(V`UFK?KlJe71o4A@*e6__pqA_F?5At z?NOocW*qij1uj!HqS!JjmqTF}NFFYX*Esl6-*12cM;7%_L-$RJu1>ArT2MpI7!90l zVRC9qi;yeop9`g-`}J{5Fh5uKU4AVit{Mq7gYFuKN#nh(X{w~7{wzW1#mK3xs&7R- zuz@^JmpMhf)eVMFsxZOVy{XK%;9g|(@GKAc6TU;Yn=S79u3gd0J-HYx9^*;lKqm=+P`r65~iYL$8YAc*=$q)&Y z&pY_L-onhEqc&h@#IQ9s5ACoazzt?!o8aDpCso=*ihbITH$gE_^^Ut$DRs#j8^eK_ zc_?M3y|`*V`(n0CrulnhEkW-aJ8~u0pZukoATmW2!ZWvJS^Ty zuadm#4io1Qkq#K=s-AVK4e5FmNjNuR9i{P*8;ThS!_m?k{s3^!{G$+K^J3_lhAi)j&ESoJd`;GoFPpjigPwbN7kQp^+!xF8@qBqP#lALIt>WM_2`-=RIeGFy zYK=^d%)!)%1A&{aV3GCC=Dwqcc>1DU|NaGve_iV*@19+6{aUc$ZE@@TU+}t{l5iwY z$vIfGu=oh@Pi`q61<@t-ff7g_HUX6xlo_>bbi5p7(#kAL#%tFh(Uj7e0pISRreS0; zH`dw$NaqZI50`^Rxt6#h+`(2$tMjdF&lP+yzzM}j7RkySp&rx7v+g~gY4nCS5qQ&? zSM#249TMqZYAL~nzC~7A>cJO}F-wNr3qZ~`LnwVWnn0z zmL*|c?&Ju}h2t)rQhz}&mayEJ7Ksv5zmT5#!$f=~hk8P=@1XQlE>S@3(lwx(W-+Hq zN?-wWcgWtX<8QtS7@sN$WGam!r=NoSAZV--s`!X4yG8Aqhs{Fb%=kc5w|jO{E|1S$ zVrtWUV{k72?#wQQ9Sv>RFimfy>kz3DneCH*%pdXUQ-t&6NT{3!PCEi+K!in&l`Fe7 zz6^tKvj_}r@?jt z{$bxVyq3J@30hr6o|ru;p9srixe}_ptk2T{G^t#L%qKRG^Ld8v7HZAL*F0a7zyFDIjR$RnZ0jyJu6s}-?wj@s_$W=MljsUZq zM02LWK!z0*!py`mvdL0foU#uc=X$<;Ln^h4c1P;jJMDnPOAsr2`(z0$UGx!bm&AOR|+!7{decN=iPxTIqr8~XpgUIt{3^$v_X6yuG zCJ0!IT`2w1fteFcNba>9KjeCFu7C(O0G4M=9{XnTwL9>)I;_Z=XNm5XfRv~aQqfE2 zHm8CZlx+sn6s#j)%ph8?`L9 z8g)!w2Vfibgh+IS13(O544x&CBiXF{#pLzW7B+Z^<`tU?%KNuHb}JKlM0kFd3^V|S zt*B{dQ4Mf+!FqVrGVFX+QqCtn*H|QjS%S_y1-}ge#@&jv(Wv$xO5ySRT9VetGfC52 z0&uGc6CyT8`ZB{psp4&Q1T%{$2;=3w53z@z(%zu=w5v6!XK+;La{TN=uIn&`IU2|W z^%3-d3f9g%xrfBwey{52F}!A8NiVJnd8tS~O1PHuLK1WT==LaH&38#_SX_Q*#z?re z^)olFU~(N*4Q`FzI{HT$zff5NxYmC81o!aF@U(QTj+IE4mBJStfYci26BY{7B7FDH zav@?dUchqw13kvr1{@6sTO^)jB2m#$6o5ewui+ZD=JA!1E2yzrS9pdFA~($d@_l-O z1WIG4@&@FW;Ac=zDK_L8wP=^-X%8Migvj*ljLWb$`4Sh-ejQnwZ;y0RnHsouTKs23 z*OO|1mGiSoM2|rdRcBwgTla&mHor~! zAVDlv&c2(bI|-K`DW_}|+Rb#jQH;vXKrMosG*$h>{WTOw*HCs!5RjiwQm>1>ZKgFqUhvBzd`3SIff9)97D2IC;HEdQms6HMHasj?v z_0lF0cFE3)@_ZguC!VQ_tP7LJC$vPw4)OZS^zphH4e8V2@}u5b^|>#36^9bTt=6KP zHTwo#hd+BpE#xifaJuwhK?mUu9S}p+HE#DDG5;QU5-eywt}RYF{%f%O*Uk?=GgNCd zqqoabNr)f0EI%u}fNoJ}ob#ohz3JETug3H&Vs}3{hFIb9cfw^3dhPgcNY3AjAsMw^ znE6et{SP(zAI|zuj`H9B(?4Q@|6^i;lWAwy*_V@ye}t6X^k#ul#e%2kA05WR@;^F^ ze*`lBD3|_HRR7?p{y(6@_z1xUvyojZ^if(9l5#s353T=HC3x zE&R8eI&uVQ2)U1-l#vrD>1vo#q2atG?A+EP-;&wIHo10NgrdM|993Z4Mem-9E|#`( zqp^do?+4eXa^FL3nS*Td2dRhNA&iC<>j2|IBi9!D4}B#e{{nts$nQ#NM1g1~b+ziR zc+kJyy|+oAGz?Zb=N3&u3^}2Y+d;oTLX_ObsE!ns3D+#aCWB`wEy^B*%u#?Ocov-l zr@9X_(5JWjY$?O&q`n0G>37rDp+mNzhn&oWi<_T$X2E>fA;2=dc{^K4&fWO-2Scu96!p6^$Gqv`<~^}4*OWTqW{FMVm(zuoA+ zR2*k>5xYu`YSAaOnrbL zuz{2xqA3Sr5pq{`D`?oXIXz-CEa9#*0-B4eftX#^jGfBzXh(_14h|-`ZDhEChrd#(I;!rz*S`0y-@g>e{T)= zV)tnv_L*=s;))3D3?o|8k!d@ghy!a8J=f2V5dh{fa_$gEtJgxoSSz*mGBiDn5K&~g zqB&L|bF$cDy+PT_A(=znTPvn73Atwz-5bxK&H(Vmgr8uz3Yz&?O>#t?O*Qo6-rn1w zsy^jUqWLbXp?ctpebW!yg*UChSs<2e#)4_0 z;hLp%;iD@@@ zW{(X6L90ueV~M327;iWcHp&Sesp-#9Dcyfdx@$ zOnL$1TuHrHj=1uYv-_TcYEH%ewuz~y(>)qW{Q>$`Dx_RtKm10p^ivW2I>Rh&xPnZ( zV^GvwYj4f+ejE1@W?DrRZ2!)>b5>5E~{;7)cf+^%Z|JnT(Yb>>fE&-ML#YDTY}YL)V>9GaPd2V(MG__+I0mc7*xq?y`jb3P!K4_zEdsxFq)g+@AegWGlr^I41 zhSJ)@u#16m+-(-F*ocgPZ@VDUBeuL5bw@pbh#bpu>fP5CWFS#?7mbge=}Z&H7nN7Q z&fcU(!ct6(K%-^wo(3x};2E!ynLp3p_q|Rqvap9??lpfI>Qr_hYReFKJjH!uMJAPz z;9`>x1Sy{54^EU_Spv9S2eEL&7E*A&f;~^xq^xYdXIYA6B8PJ1Daox9hbTF$q|d-o za;SKde+510kpp{re~WRQv+sjpML8^VTejM-0>b;*ZLMt(FlL_ri@o=ZifUc9h6O=M zDnUR5Bxe+81PKBHl2MXClca$rgGy47oI#KrMMadL#3m|&(Bv#iP6j|w$wA5Ct>roU z+XIVC=E?7U;E}r)t)$S+kIV`<`!Fo1#1H2U#Ijf(XxcEi711ZaLsY zzyB=4EXMH%6(-azINuZ~_MR5#1m4c@I-JSdH8Y_8GF}I^cY7rL)6bk$BoahVAu%kj z!&h=0(S|v5y1hHtj5&C*Bj)uB^2f^^ANTZ@aYbWE?)Rxv8HlVAoMMXK3Cuw>*)Okr zuE{ubbqY2%<$Yf8$l5l}{bmWS(Vm(=)65+UD>@J@pg12!f7)=Nm1 zw)*6#@NDELc!zd)Q$OhdSLM?l4%TmAQB2CN=%=v~*_ch->{ z#GQY&qS&X<;IR68+a!I1m$X5v--7iJCv0OG`=55iIK*`@`C9KA*ya3tP5_Z14m{Ou zuz-HbojqfIoox1jyH=>PBs5PQ9{gsl5hupC*NefUuW%kD>t-^|APz_WZX2G{Bz`&n z7EuLzXl38;btlG^9u+M{dThJUQs4(fW>z?w_%`L1&ZjuU{K%H0dnN6rf*YxwwR7ni z&#Srvj*(|8c@Yfep#Or%s5&H?yD#uosUvE{7UV@qV%^3wOSp>{UUDXHD6gxvXaV*y zp6L3I7x$mQ%RgSO-4lR~Yl8(oEx#QkXmO*1H{B1-foSvPfCII%8p(tkG;`ZN=rQ2c zWBCg!QHbWT|BFiQhch|q+T8VpHxv)$r@!y_`E&-~as70Dw%H)>!W_!@?1FKbF(!Z* zn!b;85#i;4b{Ap_eVX5%g_P78HmUzou_At^t7iAuWALSyfP7N9HCS)oR>NBt9Ky_P zf{=kr;@5{5-}0+dAfd}=%ZrEtb3fLr3Z}nZ&vVtDF8Cil{z7gCaX}H_esBh^iSHBJ z6;O8K?xP{IdX!XQg-8-(I3in0o-Ka)!L#8`9uU zmxG)^i@3lq;0_t)?Idk6FA}^vVS$<+s3^mX&vHE}HPC?-6 zKC;>;{cPI@Ukv|(Hw4cjx!L}}{JskCY$|N~{bFW+@jtKZ#rXWC1pvQghSb3T22v)j zyXWs^>6<7RBYWQA96CCL+x*-_v>4RdYDooyTlXIKeV?-7_pg9hH&p4*@EJ1JZ<%N9 zO*ZG@-dfQqXbfN7g0YZKD@;fkVPp|P>u|~*&{jIf$q{&q?n!wbj}_!dKW5*%mYbaO zTu4ffpa8Upc?LV3s!A_w43%Socc@o?Klmb~6Zc?*uyiTp;K001CTGBMa1Id=yv|K~ zd1#RJ$rfm%a>Y6ycf2F@{$7M^Fza&ADMtTb{)10463RMSQJL>mR_toza&nC zdqaBV%DgaI+Dc$Iloh`lljR0r!~I_O+Aojg_44u9jw zO4lnn0aEiP$abu8M`P<8%j+#vDoi@(YL**(&v3QE^zq+uArt{Hu|+A^z?lPeG--{+ zX5OK}I)hBeTN#U>aS|i>g(N2fi}vqg{vJ>;Cn5T%uIyS!DxHV`eMHufz;RhiS%Cvc zhS?uYq+({EFO*>(>yZaZ7b5kr3VlM|tA^&Wawje@sIDnD7z4>gYt1eKAWlDR9|lcP z2b40hV@z+R&fq3_8Mr0H${c=|NilQBwEd1RjFqFiZrt{)8R>%>u9xyKrjgQ*uKi||4V4D zgb-brrvuJiGKLL;Z;#+$b&60Tm^&2~6U$5l(>S16r^G;v$F%Uyn8&f$#$%gGrlgK@eh> zgmPj&oNX!rTJs4#>3-JmV#5KiNrSYj#;4ZxS5!(vV*Nv*s#XNaf2>Mnp1 zBKj=7$x#qNifyOS<7YkRBx3(I!MwKv_DosGoCI$Gp)*7)0V|LKbN9Hr%6%L#$@>u+r;QK%_jtq?~u~N?~ z!7|;#6I6(q=Eil%kj7#kf!Jvpe3<9oFdmp4Mw?mWO!&)R!=Jt^U0QNOtZ@1XI7Fs^ zdw6-JbElteU9Qn$^^xNh8Q+si%WG468J_%JdM5lUD%V9h@h;>xr+vH z9UL@}b*(C&&OVo~u3#O9>ccUWukfOYv#?5r6-Wy628cvU>w1%2e%gID+yj)pGosPCjaTCRrw3%N0M*@zq3RKKe7f88Bod< z^dI=->r`{dFz*p!`}gZOG6{o>Svxe?x7ZL&<&(%ggQ-YNwq;5z)5k_jYKh?#Wv>IXW6!YRv2k2QB# zT-(@YHm71vf*v9t5F2_Brnp4tIh$UNpC&j&80Kx2;i z35EJARVsXyx{SgK2RCDG`HsqakyMhe=hww_CMR8)?KmPiB&#<0B*j0e(D0`l6(zwR z{=8r&;>2WEvv9$e15S+RUdk1`!>5`mhKqM^4Oq&OZ#47Dt0wTu4A=U2jY$zDfXC{a zQB`SRu?k5Pw2yzVX6+DX;=)*ST&v08VZ%U@@hhAB2wR0Q&2*(t*@8DGQgGNBSx_5` zox5N1Yc{|5p}F6l*v~+|6DnyEfptCU7lf!OHVC+6=Z1=Ja%-kyVw2PvV6?e*;uBZP z14i3W3I^(j?RHQSRg`vTsU_rz#T1w!roRE_BJr9b@9Rk=iHF#D#!IOz9-c1ZFMF>PX@zw+?>OaAA|+@RUJWK5bY(8-N) z8J7<_l6FOWBx{zbnHncPj5%!b?wF4M{Mm4>n>8z;2yGS6{?mxKU7 zjyYFd8jUeM?=&ntHgt}o9}dTL#RkR83K;gbr!AY7)d04Jm^}J*Y~KDFER%cAl zQNWM1W5=T$6wZGTm*^kD+jI)CLEsRHdmL79MTfyBR__t+ zqzC0!iS1+ULME&g6sLsoHZx@8!6n4xbXaN4Pjco!4lle7)J)=gh6-GOKr5bpD$ok8 z{jlif=URh6ib!=@oSoyhcaOV~y_usoI?{D#`cIsS4JdXVs}x(8A6HONYGOArxHh89 zd1<>bX=ClgdCyg>K%2-Ns%A=@#5pdKAALCSWw(|oeM2+r*0c2doC8F^e65)_s^NzpF%l*axT(!(!pld9s?@35%DmjgBY>b6j{e+Y$`>(@4ZzPwaI zx+{+3uS;loV@ui|DTK1A_r$$*>`E1}`S46h^1&riwB&@k`&1T@;Lr#WAnhGB4Y?B7#EL|$FQ4FG6cx({nT57>2h=xx1g87 z$wZLlr2#VRQrBjRiBdUt|173zE%pbQe5jLBIe`mtz&zZhvb2G=V0v2YW5xX-Qdg>t zQA2Yd>+4<%Vxsqceve`|<|0R%3Qg0ue^sIrR#$pMLWA367^mEgO>JXUwvoDAc$CHa zeR2_#m_wow50eL^L=~#Bs7IBFFDwpJB-pm8YW+XG?6#+y0%X*p#Tidpp=?^)19KE~%tB z3_B~~AO2{UKx)u;8ftP#B`QFt^51!$b0vLW-@Z_hmqFszQ|Ccwk~qXZI@wOi8|I&+ z+39hTiZVc*)&Ev-ta7C&wjb#_Q9sNU|MT0141eh{4=aJdM@8huz-6(f_w$8IwC~<_T6+Qy{jYJU*YJD1A<;I7i4QRu{oM)mTZN5?dc$o^L!hccjpm6aeLwaxa~Ko#GS zVj42fLy)f^rO=Ih+yFAxOQa3Zxo$0Y80bKJTx?*z0fi(Xqt~}G(?qO70IP#DGVHvsn8+T*>n?S%ND_iC% z3X_!l>K*srANtr61hV({1u~c`V*YQy*-uJ{K+Epm__D)4X?0(3P3cc5|G#1aIDoAP zOx?&JDoEVOcqsJuzsSG4nDCQjjvzn{Fj{uaLBIF^?#=y`qmU;lg50k?9s+^sz1;uD zr-}UHF@K$Dz9l&^^Z(tc{Ob|H@9af^#Pb9FEdPpTI+N6Z!$${MrEkxpMX_zMi8Mk! zYt^?G93WQeOf~Io{}N5$(K_c7~X+&tmi1*4G)C%k~PN`vWAjvso1?NiQB#^sp2x{;%wZ(sv! zI7N|jJiQFY6zQ-vf?t4UJG^!qMk2eRG`8_Q*xM-Bu?y-VfH*PGLxp86qg$_qwm78rD^nB7ok1;-kSk~ta z#E?x#BA?Aa(_~3cV<-s;eD3ETbFVSrlEK`kug24@@0k*L85pjN9u!p!8dn~JC)gRG zf0dqb_%1B5L$&!79ozK*VM?XRM_}n@p!+8Db@}DTR{#`3OX>hIrbA1nFS?|-cDn-s zkTc+Te!*>~OKqVdJ9`3DL!MZ5qc19A1zs z+mv-0#znoICPyb)C|+iexmR8VWRJrA;xtC|m7%e$- zs;|)G!p==F!}n*9^}bsWhdxd~9(Ony7AihDn-P9_9Y*a&){}Mdv%T4ov=8i#>XH&h zB&e(|3n zqty8pBbnkOSei1xxTy$cbH}V+r0MMkzGUGO0=do>zT_2xXHl?vJ>=cFKj*C^B>-{O zzf_6}G2<^ z^Yb$qEry#ggOCsgwXtUR`7m4LeQ7As$1p)bl_$tiaW0>=&-GgSQru`=%L34<-)iACq@wB&NiQUx;kRGq2?JT(K__I$W4g}?#fP#Xc&D2B4S83#>{9)OKz_pCFt(^;Fu=k{XgSQ5oNgdVFCX@cY?(S z-UM^^1&VO&B+tki@SsA|F3gRD!w}d7qC~qKt&B5L9Z~>&l9(O8zt5b3o@2YzX)erJ zrE8#&q~cIcg$rOL{{vEdaooqVbFAA3jI7LT4_ITCH*l9~-vHrN@RX9`!n?S%BPY%{ zz5W)P92js}Nv-CEpec-}-AA0&3J=lIw#lZLx~kdn$*iwrw_bfLl?JV-Q6^|2XNHj{ zumfJWv6;a4#Ru5xCTdg%7jR~LQ|gZ`hPp2Hy}D^GKorspM4j~))vbOUyw__F{X@Ke zf>Kf7r)=6q&(bXrZyp;QX0)V-@SsnCn>V{7aiqxMHs~1{V>Fel)fN- z-b++~)HJLj97jTlHv|G_f#x-uYOVDrR%}u-L`l3BK{4q*Qux!&yF{ce4}pb`mwt(f z8h5|7l2gTiv>`h+h>*_6`^K9e+|>ln+G{-5^2E>O_fE?S10_M0U89iK|)PSNRei3 z0NbV02_l_b>*uwumTm!_Ip)Wk+3wSP_hxTa1ntwdN0-MTEoU-##_~`ywKXU~PnCQI zO5;*?a!XQ%mw*^B%_+dx4E>xR>0^x`YNW@#jEm|{etj8*R7YD}m;gED6e zMwVJ7{{qs?9w9eOdT+t;7XA3fBcHk~b#Bv0IQ|slz6d#={A)Nm1`&GYd*FIe8Wx>S zaESKK)xWd=of)>!wDs~jU?XB*iIt2Nd2?$*LE1na$f@E=yAKUEcR1W=tzcXAF5b<$ z@5+UWp>JW;$5GO80})f`i^ zKl1;VKK{)x6mjjga6;$)>DX+OE!^ORi`jlRJSl)Gelu1X8<_=+$3(=*lqP))D-amcsl< zrqdTd@|IK6XPtZRPoT`oSRCe%c*W^+?c1}F>alzjSA91L=?=~$2gG|uY(=n=e@W!iTYZyJ zp73W-^i=__>$!6NnuaTfqe=dHM9{UkRRFEA$`^>)r8p#i3eYVjg;UXlc zEuz*h=y19y^E>85F&@xu8gW8l_a#@`IP&*~Q=Fc4xa+VxA^EqJhocXGt&Rspa7-MB z%BZFSxKBLlwxgj%>LBJF660{=`ekcM)L`sNbkrraBOA7mZ7tjRrYUi;jQ|U+gwiOk z|J0Hdap>noHYuV%kVIQBw0cVtf8gTXIVmL`xNr_qrHwdNG*D2ZG3-QfKsoG>Fu-sk z*XUdaWoQyvS8mTo+3~sYH6lWmK(lL!8h8atHx#c?ei1Yp-gC3(u|JHjB8%&w&-5XP zl#JC(s&~11q!uL6eP_}=JFL$L1{bf>{#DoiEuRwL1l%1oWk%#u{Pjon5-L2Xamnn+ zv!@Q!zC_0&*LYO~u1WKdvE$k5r;+}&w5rB!#!c{JtUB}miBOaXI$5R?d)=m5bym_g zt$qNo5l`U0QhE@)*;Gp+ZIM>EySKX*Cuvt7NUSfn&XvCSv3ktark?dMlk4FCq5zT~ z4LuD?d{)F$_#}c_(?*&eO3~c2K^Pkq> z!fq;D>=tXgF^wXQJ|i@t;4g{w=eCe0ezG<9k?Vch%un8HSNie| zg{oCd2^?3yw%g41zl?j1U72haQ-8*H*uefqo+}9&>0NanKgkmtGV|^+qix^tnD%TJ zDYeDwH70`2lugTw;Zr8Q&d_(zua;<^fp%({QE7uEEDaPz>VrM1>{-fdrkf+TCo6+? z7GS}Aeo2*35H=o#dTfi7=-4g}(NkQP`5wOpf0dBMc)l`b=|n}mg1FK{_SJ6x3Zw>l z8Nymd$q?Gm&{HYqGTD?@ntEeQp;dYL(KI#g(WZ*m8}}c&&$F@}d8VzZHsI*$SoVE1 zbXfvrESOeyfqK)4cP`>`tEsYiD6zF1Qm(Z%rocfCc6U4E7sJmunsbFQXjm<_*=hW> zi~i6gIr`4HOIQ_Xf)tAr3JepSqx5c{Pw{ z;^2J&jJ5Hj2dAYJLn%rKkIElmt@{~Q7bDbA0~jb&Y1b)}0-$yhe0pDn!22{&B^HgL z%_Ha6#R2h(W6RhZvJPPhP#RPubkJw1@Y@i@I78~pF|YG2>G>gk5jHhNiGnnt3DPf+skd z3aDJvwGUqW`Owltti*G7Ca$lp$NY{jjJ>*ftg2t`Oj=9q9m;D$&_#2|<#%@?8Z$db zKyGmdT5RnPyWcw-@)I}$aRcINY6RY$H6Jat?nGCcfqKzq`{$3iv1ASWYPQ78D+p~O z<-h&is-T*l?`fM|2WK07=Wpa_Y^PhcbkI>(!a?w^vEnVu``f_rugDT$NfYa@@6^yN zQ%h7Zxq5c{gMQ#GzDZt!$g^!TrNGgQ^g3c+@aOnXmuB9&-jN+g$|tx>!R(^Jq=q+E zFGbLmLgH)A(xk$1;L7rvQh5pTp)V0ip}ciDGyZ`PW@Y1M?G|^2&9IL*!&fk;?BH8F zl~x=pjM;&xKPpMcMy=!49?zxktY9}gSeU+d05XyH+DFdu!+k!+EY**=(HNX^ou+mR z;3vqJI?H3gHpcc*N$DkV0dxpICHHr8#TK_MDkHCP=4I{^REF>NOSXKbsgUJw{UD=n z1FDZPE>|_dKZK-H^m7PNfvIwI^*{iT)KQ?{E`1LWU8s zedH2~u-@|PPrts08sOAJFw3mIopWdD(>i_&i+8mo+p#rnS_A^??3^;|Rc+mKCICj& zUoa6GRPOUN_m~;bp|qG`j3SO*JJEkSCKFa|7v?#c6*&uC!_SUal_6Pj!G5jXc>2{V zN`lVrV@xrcS9Q2l%=q*w^RE%ifj&(X07IBk<7dQA)FVb`c$Fb0&zF3 z7q|@lTULK(g|EFWH7>RgDe>EGuYEq) zA9@5eq!JCzn}IU{AL3pL-e9BT5}-cn1~i%C@%=YcFCs&S2dgSx=2l}@$LARqKj~g= z@|#MorC>}AQ5W}3egUS?&B;BT7XZkNduVrbB{@+zwgQrKG%mNZ@auo6$FsJxRHq`I zg1UKC{h8A=4AmqrWlxu9$Q?zJ4D0YTHL~ARf22!uNAHvC`=|2j?>SVW&#MObB2Ucu zsyhDJHSTQT2u+0~X*r`NUK0&OLpTFf^oeFk%O;XO;9O}80%L7sI%}J5gMqI311s$_ zlzgeYq5jj6`bgvk351qHabwS_0Y8DjknBoGJ5u$77(pO&2-G%VsX$KR#ngw*IRn$0bOYSOf}B#A zx7UDX5xITzIFnsk4e-i{4B!Pn+f2}XYTWP)oOIzt{AG3pVWcc{TMSa*N=Gp5C!RJQ zpifIS)VN>r=^X~B`sn>SeCkxi6Ef!$r++hU{VrNGP8%=@sUrRou+j{OfGXuq*nDnh za6c}MPoz!)-aXHm#RrIy&n>cqLt!sEYA%y1uiu&eu^Y5G&Cz)IF{CbBy&5UHwuUD6 zTDH(b84%&xY%WiTp`rWR&q_&c0T6Z{VxiI229UU-z$m|Pp*R@Pry$5z3_EVH$`u>a zIAi)mjl>Jb4Rjnz)Vd?Ft%SyKwnKc=b%7>hV{>Jy8%i|#dt^kam)k&_+-*blbIFht zJ#tS;j{aXU^KbrvmmWgKG*&WR!-|tshiaoasYIQ5ms(0$2Nw5Onr%Ha*(}1|F%|b|g~F zozvm{5CotsNGOS1Tan2>#l)4?l>tL@XN1sgz6ql-m1$qXVXpPPDf9wDDYPx*jou)t zH06jcPR{h_(NY~uAh297hX{~=+i%;M&14AJ7-yvtoRe+{2^#82QS3fjgF0n=eK@t- zxgFZEl0C5MW|p)`f$m4TbpbR|Gu<@b1<8al@Al?|i-(`L*r0c%ioY)GMZ3Wf$lwCM z!$T3PmTS_|)AOk+d?_2i52NYiJGZzh%%coyI}s>HF!USHH#StF8zaG-cVsW+FF3} z*i@~ITeToG>?cbPx9+m=-E=**c4jSug&OCYs$KpPDPT^99Ac5*)lcM@d-}IfB=+|2 z=3fvWJ?`g(vonOR$jzz15MLA*6(ZK+j%AG`(l}vFgOfOJU4~xv&=DkXMCj_s*)~RO zto%7oFxR56JYqSB;HGqc{4E%TNM-TeWE<4fJx&nWYfK`24n(9zZZK>+dhl4x(Lmqx z?EV2L>VzR~hu6@deiDU53;*DnKLo@{RX{#DDpOlIDiuf=S~F8YpyF+$@(bld*|Ux} z@dj!--cmVk5yi%%{V9H4m#B0A2Gg{UwYKwQI30)O33)D?Z5%PF45ButQ1UL`S;rRn znqr0dI7!=&l#q!ueM~^ua!&v<-SZ=53qC=26<;>MoWX#N2m2bmGpRBg;UEZNt&})W zht6KF8BPv=Zpx76W=D^rew60M)T255-E^$&d^xE5Mh>jI0Q#)y8{MUJIrY4mq)C@Z z=0dCRD?CLdR66;;N0JzcT5!~fx46gXt^8#{H_9_VY+-uq1d3-(bQ0{DONVHqI9o#f zx`2p}R>&KABYz5CbjzD$4Q3Z=yZ)>f3PPo`fNi~9+gZesdr26ij6wz7iCM+ zZznp^`X}esZl~3il}*&nPZyJU<;4-Kk(M;PGg2dz|;DMJQf!s zK{;uP9XbvCAS=4DSOV>BSvDA8}GifkV z>bNVNZZwOUnm7rQ>CtBzIhcZRFl#I zb$~0}3lG&1Mm6!5pWb?ekK7Dg0b@LIdnX$KWM%xFB-Mn zL$ms^y+VVBqiqC4rR?<_+^j*L=9z+dK1x@mg2+!N>&A%c8v?xqu{ zJdyRd3vEw>>_SKa?_OGe20`EYtA;o$>dSkfaC)pWhhiV>KCme}{C0P>Q(V+QI6m3w zwMs0S*SQkra88%53!1)uZ)3!f&M>JjobbR=FO!h2Ri2P-j8=g$@Q4!?8K0*rgH-9R z_H0~~k;~VU(Gi>~RXQCKy%(;A@>lv#zZT}E)NjM6nD9oZ4sw)Q)F-SuVFSs?Q5WOX z!lM+hYV6M`8J?Y@A@OA5fXK?IMuskDV2D_Ss9t3)#>S_Pw`4hml5HbA(z>G z`dZGl%NwL3ej((~Bo-uzuZSo~wx8dY1$eAJde4f>ga+4#b*mGI3i@w9J`Ei)ZF17s zm(Kk!bSh0bMs}g)Za`kFo5K0$RvEiC86+2V`Kr6$pxC-t$tCHUO^%ig2Ib-?O6C4I ziTlFnz|Zd=p0`~6rz+yz0%p|s_p@N-Axw-h!(rsV%ld98|5x?_d#G$l8=v3SY8A1>P(!Uj-(g#%14c!WRL@Xfc zF?-GJM|KL`OJb>l|HWgxWCnLk;Nx3Cgr+r&BQ)rU%iH?r#ne{%0^e5T*X%$fr@~-9 zLhOlX{6n_%SH%3gE4+m?^o6QAhP9yO_*3yy;fp2;w5NI0?UVn&VgY0v?=uyTmO;z) z;Y@dWI->dOFE;0S}7MWE)JR@_jU%~|%TU}q<6Er@vKGykD6#CDtVpbiv z+tkfQt3hgbe#up=)^NFfUtPS6<%CLtzrKXx0SPrOe){F}2!E2qCwOoZumyu>2Bc7J zmD&Pm?DSB~(FW;~y8+wOI;z5$^yE^}o^cf2budeT4w3i_z;CfI=G*9b5re48td&$4 z1@-F!GhK}D_79%EY>kxj*A-gChv2*m8kJ^Yhbj=k1OUSKPnP=iw8S#JSJm3znMLqy zLm_Va@VvbxObB|qK}SR1l4c->j0?Xu4O)$|LPpS~?&+mWeSaP!9>(JPS_uawP!fd_ zXl1$(`GRuH8E3>-BmVKLQ#{5n_&Hx4_-vhe7`WSRm~yfgT845__~zSR1}%}WxvRSi zYAM^#0nu{%ch_KhQ~z~|H>m%n^a{8}1$R4dG4BH!AzSP2_xO82zrY=ssVAN1M&!6{Ff-|Ov+RkG5HNa-qnB=kd-)Y;(q~h7C~C*ofGyoNbdtX}^Z=Q!qIhT3G5`Rd=Lbe~DSh+eq`ybR%^>gp;5fD4!desFO zzRC_A*{_9aevISOU(%>A-&gLKfqW$&{hn?ZA1?7vLUEF%Ao`}~KgVKt#Y4b2r-_1D z>iqipC~lYN^m#iBw1@4aJZ7=<3NUTJlCMLJv$WtJQ{Gy46ghnngFm!m$|`kdv7mW? ziEYS$Am6$(c?R5p#1R2N6?nV2WyK%NP~-B-68w`6&}55S;H}y87d?>AFWoO{d-A`*tmweRri)Ag?+_B-83rOqgO^V3B) zn9&bDo(%PSKNE1e>$V8!*@AO%U;G79#FPPzGWv~RqYFHN^~>Fqm|p|sYVc5zPDOS4 zOvn$I$+z&k=?xn6E+F~N1zZex(you6OjPZ=SdE-U(YwoEh>SB8|GUB_{L%#EciMNj zM=FphuWpk*s_qrVObcM%!kI>}NM>*;Df$89h04#~rf|{}HV&W)o)2^ExwxiTk)eSn zV~K@Mbamtyqsc~Q;#OwwPgUY8Ws1DQnIWf~M0uM}f$XmS2 zObHE6dzILvuPqE&n#wfX&NnEW&!m#_Y!R5Gc~MA6w?tfX;%cgJJ)%=u2{`#0R_x4z z#+O#&Y0XD24AA~BMKQ;iB;Etv0-}ko&7By=oLc|pIwfmX{%rpWcwOlejbUTlpP=UD zqQ`;dz#TVeh>i)xSl>q`7}yj;IWJiBf8dzrz&Mw-bK3wrHPa(^a2~OmnE$Ll%WG*? z`QI||r3erN^HY6ie+=S;IDGOfu0kIl$im_eN?ltqZ5wJ_+vTRCc1ZL2V@#BxVC~9T zJrp*UHvjtDdoxgb;#kP)pvuy3y*XCttgp;)x>R`#MWbt=%0S|Fl$Su@j!oJ+oRi1V0O(s% zhy;PMJ&8j`x6+-rfLB3*^jjF@4IYE_Oeb-O6kF7e_<0ct8e8)$N}TJpr^H zg2T{KJnuE6Ob~gKMfV&A0No5M)yl7z0PY#nY{|ZYh}ur{ZGIUhM$u01Z?Yza7#ntQ z=&9)Tk}yPto2>Vcq7mH^c!4NVGx9(?a&zX~-U`q&Bf6x%YO$b4G<)MN;`Z%b#R7=N zS)vXI9A6R@fGbw_JUo8`g&l|vUGZERQRdVDUT-LVq{rPi3*>y2Y(JMp@>O6K5FmNh z4XwYl0C`96yFK#WsgNlAphM0EAA|Cq*hUgO&WQi~I6+Zm4Q9vm348(`x7?)(I`_`? z(8ujV4jSY&LmLtawobLO_?4%64nw?a2HOg; zfG<+WEzR-D|GSf%4b`$fpG=&&G+fKpLd*5M2ZV#bSX;I!hhQ7SD(hVpfbe`}*Ar$t zUwvz$;k1tjj3y3G(IBjAw`C&V>>Gbttln?27_?z5rr;6m_hk|l?2cqx_rOsCSpTsR zVym^e{zs?BLP&8cxvRjA`9$$79jT%Ai_>VvvLXu;sfDn0QXnm&ks zNqo}%Hm0tnMc;m6f_$JbL+=<_LM^Z!^K6r7l@^B>g^b8fx*dOF0uB?}D~$P~|1P{8 zL0Bf4i@!DAn$9P2+Z#(aVIkqkzNhksO)C9YiG45sBfe#S4~M+}5n=H%-)cz8bj(u0 zGJ)JG7~>L+CL~1A)w- zSb36{z9?zCAFe(^t)8<8#kdXV5-YjXUmsCV(OylQI%{0c`_t6)0K^`)uxd)64+>_J z+q86gxmPPjh^b5?srH{4KbitFf^Rc0ev@BfuZ`!=GB-q95T{o~_r6Tb&7LP8Z?n8` zV_c#$>ze#XKO!HBE!4HP8_zL*ghZ)bTd;@8(B$5cLGo^ovWG;AHGr zz3%=&37G~HMf!SaL<|XuDb`&Nm?Tl|np^|LrZ?vX3%kMa3}amBWZ!yzZw20D8X{Si zt!D9>7g03&tU1x5a*OfFP~ukm$^E^1-~~S#6&iJ7u?#l1;ukw6S3q}Wmxd+pU_q>V z^ce(GFCc>9vD|S-3%5`|%}*w&H^;~2{g}Xq$l#qs(fpGp#V~OrW#093U zp`Xum$oC#iEOK2tz6ZWC#m00|WlnKR7w116D`Wn==Z*I#5Z80)r8kNm*&6Hm zda&=ldIpZi+B@Mh;low-qo(3rI_arjUl^7f^PVV*+&eDyomE=4>N6r-GD%L4uZ!9P zb$L4obKe?Q4s)h~o@41JmSN($)gzZ;U@F4I=g6%%O-|k`cG>lgnb=Mex{FWPi1gkT z8xynH_S7Xb&|Skho>;qJgK{#}RFW*hJS&zREJrtb(buJKSxv&?+_I^J zZv=5yFfS8*r)7d1N5G1Sf|_RI^u`uowVO*uEm}Fl?tNE|^_VF=*b`-zF7|?_O_mJN~H&w0oG(&67vc z-dSi=?Z6?CS-dfN_21M0_YtX!4la5ADOB^JZzOmiMA2~(ZsC)ZPRpL3Y7~`&wzc1f zIk0goi8QgO4@)U3XCr_3NJtOv>QxnpHfLaLCu1!BBo3XGe&ObmiB!RJM-IzRL$Zu? zatb@n+yzo*`|SJ|;oFyLPZ176RCjC}Y@Iwtt&a{)s`)yq1-kO;L#JB;rdZ9vk-+-4 zi|7wk_5KxN!LR<_J4vO5w=R2!-v^>;&=mXy4Ri$zaFh===Sqc?ABR=e0tgZF?NSg_ zI1~9sCqUH&N`R1a%Tn#3s~50kU#h}3Pg2m`uR0NXc~>>h{GZZ6G_Dr-DO86RbY282 zbu1&~EJSX7xg?;eOiaEY*gF6-((W|DYNH(rF4rUoA~%vj-#@I|+NM!|sdl3FsuZZd zR#N7MZ!O3RW+giHGpX01LgQ4PKa2HzO-(F_ZAI{gzGa5r$7Rg%6A8Ff5QIUvnh&qj zS$Z=c`J(-iKcuKi5SNwHlh?S&&}p@gsE(ey`1&T*azjg)v~mu#K5WZraI1UF zA-CyV>q_O!g(s?7Waue;>n0+JYKADQ$k4EoA&QpSv$ny+nq(^Ksx!xbqm{G;A$QzY zsyyEcIr{WFC20+3THGdn1MJpH$74w;1xz7zcw<_Q+7f;C_JMg!g{n2@Ii%{?cY60o z^0tfMe?5ku;22VBY}#CiB*ZeXy3s}ocadL>Mie#kubP7DU*#Hca_doBYZ&1%(xpopy-Q^WOTrJq(}dEVy2k-NL3n z2xArPrO~=*@l6ZM_?3A^G`gOhIMQSUb!_@`^}#Ecw4Z&1Q5;N4;uO%j~hN zrPjtBugueg+KutU+$IDYXBXJYl%UuC1R_GTtUM>8q6h1xPEx)*!Z#c1jjLYQDD3Pyj=Ordb-A1~a>!)GjwI)~s zB$VE%&r>_&pM(Xqx|zm}Qf{l$*1l-mRNnu3UGXlLV=K&_T9+A9wIxSAz`UkbkK#c+ z6i(^8(DiY=7~9~6vdLM+)ToF)`L6fLOOl1WgCz5!Q2QB$7WTzNj?1Jmim_1r^i1!olq}6 z=hpg%Xoe=X>>S$=+jte}L`dhR3u^NDnYC{{udKrEaDSprRh*EIwI^S>kZ`F-dT@E7 zabZ18mWB7{KE+~>bW(zPdy!Jz+Lp4c3p5}Mtkb48PJa3Y*ji?%X1YpYkh_JnL1M#F zIR37(nr6Q@Ew=>GTuFb93|?3?qu3=58BmMIc4y@!D8)USabLc^mVs z&u>)a-(-tbfYbsk4oPJ(LgSzIPmKy%PsB7aZ2>PXW zwW;~^goTLcBla{URMovPi$YE%y!CZdiFntMrQJ1LY_kGYfHqZ9W(YCpcrf69pb(1D zi3xF-sl#kt9&Hd$%yp4Bl75931F5>eBoX}<`uv&mcCoaj=vWphce{P&Q&s?;A9HTg zrjdRis1H+mj;mEv7z3Nx!t+6R#@x%sQJqDVq^=2_tN|3RQ1XW+H)b7t7oxMnF5B1JKFvz9J+!XuP`D}yJ-whq=?f+0c!_Mo)dj;2ei57JbZiV6 zf@fT>jFb*mRVGjcdZxDNLt|o*fXBMpirtJYloA`6j546?0a z5xm|fB-p{xD?HfH5TQVlaf5|!IVd18$UDWIQ$&1x=k&%0#24auB6s98Hi-RM@C$`+ z6Raufl(>ewtQVFw+4YXENlgva(N`T`JlrHrH{2Kq2!)m*^%<&vS@c4kZ3kK8`w(8; z0t$a9hKK4mmD-jwG)Uf?lK1G02H1T$xESGeHo|I?(4cnD`1{+rp6ad`oh5$n4@7(+ ztU;VcfxD^>XV%9WcS9%?lco0;kM6e1MrnTy6xWWACrR+W+bVy~ozN#0DxkfNvOwD- z0R>IJhz^r>Te~lUfb7BNo#7bCfD$D-b@aBpAN%lY-W-3WEj=FBR;tpy+ee56H})Hr z8iie_i$zJ%7Y*Ajo4hU!?~r|4t8%Kn$o5Ep(=Q9Be@$AQdLuvMZA_0M<N|Bx-XT>gb|-)L}45?nqY@tOR2%;?bg(T$PH6#t6E*iOp&y5J=7 z_7>Dj;CVVSvV<_rk{tjKZ`P46h0%DRaWY_*s?dD=)gdN>-bAY{mhX3d^k%nAT2xlj zD&i*}E!C_=Kc)|&*1zV(YpAMBLst-cYy1(z_$L=08Zsm9`wUz6r9##PddZ(L#M!$< z*K+g`>0TbTyqf7GagIEq?PMGAPYtwqw&phrf{13576MlV^g8Qh(O}WQQY^CPtwM1- z{>n8YnOFGE*KCoOxY;;9`#xw)m_LkV3pd$*K}itlCVZ1L>)Nl2b; z>_aN{*9jHb5z}MYTDvh`OF@I1oM*H}4ko>ED$Qd|!U9tiaj79p}}oyq4S11lOju$-Z}w7^_0**ZNtr?)~p2@8EXb% zrcjK{g-w2in533O9!m|<~<+g@<3(`61ZjhQZ zDBUP6h`6~AX)n6=T(2I`QOAk zFD#)31Ht=Zska!&v1_VZ0t>`tIXq%0ph&QHK;7?X1Zd04s+PgOzf^ zVkKWcWYGF+;G|eoy_(fbw-*<2dcdR`o`w#7F(s zGI_x=1xbvtXUyCH%U*>}gSOJ=42M;ARgXXQ@X75ji5qv;oVYJzPPRIk9`#9D zHxc0Hu~ay^1Ks-Uj|H(#VR_rl6|k7s@Yr~HC4 zdjk~XNBmq!v^t~qkXT;gwV)pvZwU}7bl;VhiWGqrBIzL(^5Px^(`wBV@;jhjtNWZ} z?{@rZc7&=5(O!~bSg}O84;g{_reT!)FJa(qXC@~Q#;k~M zDi^&`mK>F#vM7YlNM#B#sg`0e*|QF4%duU zmPJoHPkNl=KJT{Y>%{pV*EweNQ&^vA`@jZ#wgdqUJz^ZA;vdan!Z|6JRdi-U4y=G0 z&g?zwqn}+M_q^Q}ufQ6M$=@zoQP>;|8W-X~aT!$KI3Nj6A-Af&t%k;%EWLsOSNCU5 z3&mW^f}%g)4?T0H3r!`KJ!zK)UgAU}^=KCJ4!T{pmti?T#rNr3%hTr4u+>*7st65JvI3XT;*1CGkl!0?5 zL9LSyfi<^@kEoSEvZu^(E(Y4{vb@24W79gdCa>#E4j;`C+=1lP%?6h#!f2eZN3y* z3{uwmI0}z*^<<92t&+oyV0IfH?86Q$^fUkT3GP4i?XPk;`m_vHMg)w~;^c7x>zJ5G z^`D07eaS+?={V7!TbY&CwNanK!rDxQFp-cx{a34^&ebm9JVyrj0@bNha`~&VaBcQc zcJoGL5hOsrWHormeAOA+_nRYLowVx0!Ga*UF?&=X=d;$#KE%#@DstVJsU|rvuAnCS zCKv3Jdt7Ssl`V@+0&2=OETK1NSiUtsltrg3oP#{kYxWg}|9vk4U3-(&WC<7NvU~kG zdiT^4$B z7FA<_F8MFDj98e|cGb(vUwN2Y=I;_pNu@r)svxtV63xdCU{AM}v9S0^3Jx<)ZZv%R z^dX!zyijt^OVBpQdqmCq5QTd%SYp=LhR9L*i=D9}!Y~seYmBm1o8azyw$%NEGK70H znOmLD{B%?vC7w9^F2S|%Gt@BD_?;q&$3S-q-%a}R(x$Iu2%yq9`2?s0lb3B-lRd08HKrk98 zo{0H1)q-F^?-U1-iO~*tS@Yr+&bA|*Asnv&G8JDbO}Q`y-C$f~7U;IG;*+`o5F8D^ zBkzcEMT4esgmCupe_R7!I|F|Oz)%2E-|m%&mqNQcM-C;w$rHI+j<8E0sDAQRJNIdy z=b9z(fe3wk{s(mp1o6jNz@a5l>ofJpMW!pFxf|*x11N5E>>E&Cdr5yF zn8T(W&nhHXg&V*1-Tj%n%gCA$6ixL7 zhu~^R38U;gSuF~CAo5ECww|RHQh&=dqzcrP{*;-hhfQN$CPAQ)RXb?&MU&M*e-;zz zKR{=bwEFV+$-J-l2Qy<#B$%d66Ifs*W%0^Uw8&oP-brr^OUj3zu$@TuX9(Q+< z)i?w;6T82}`qwr-PKn0b?<;Nw+@NbQg8nRT6G%frd*Es>ve6pta8Jx^ydo5s6tW^O zl;1u`w>VS*6f~TH90+s5Yro%Yof52{tpN)cdP&HE@Lj}LmkY%0)XaCX&T3Bfzq!f>HZZ@@wK)KA2>l@aWl3PhVs?MPIACE*HBLr->#eSM#9OiR90eE>c(PL!(4%sft ztn#6t3S_U2RBiz{z;!@nB-$|@yVOexlOJ2YIjqS794KIpG~o*XNkOFLo@j%nGa#G9 zX@il~u^{WT&&GpB$TAd4K7T4-(1LTorAvSo6Q)V|`P8NU!Tr-?#I7H(@oX-9Y+fQ( z2+s#oq_u?;jH6$Jy|MHXV>*-kQ&5Y|ak3N)C23KFVVL;OVg)E)0s01?(hP+h-mp8l zw4Lnb=B#{_BxTN<7gp;WMOQ7dk#c&;v(;{>+bO*nR+y;%=Gd1YSHxAgK=@;)Kj3 zDeQdu6_{2ogX zM3bvH)1lU7aUt!Djq7W_lnDYL?q0voc_O3%W3_KOMszbD7Z;09QE-@73yg7k+?Xlp zeZ|DYZ4L#T9}N;m9=7l@$46kY-Z66MU+AUcC{%y*E6x4H$5mztu-~Z9VqLk^QgI zQdk6V2#Tlh_|Sna*W8_IV*@H-bF>f@E?LJs*?^`cx&&}A%vER9c3{y>6I=ABsZ1ix zfxmUG)?sSo%H!=Pz6QXE+Qh)8sG3Ar5kjsEgl;gg&dZrlOG1CE*fzl~>@98QsAf4P z)L4Um)vM6nWph~;sH1eEprd4Sm7DxI&&?*}`%k=KU|YGbmJ&5cg>8lX#Rm|_ z?|_t-RLFkhbo$XGWGLR%S|~{q%i?k~{k8QHImzc&MPM^HOBGgvV_X6CjCZvtoOcEi zj^wY*J7CP|J`mD7iHUI=Fy~+~KOHkH;E?;uZw@GBwNF`6RJ>5>p_rr(2h;d=EG2B% zYW_I`W2Tx#y4MhSr(@;Vj-;`^>0T?OM z?2cN70u{dZ!*J#WTwgm*Q0dSgg0Zrp7{_1x4Eb!OT9uY!ySh6gzjC{KCXtBD6xW;v zr828#`}@#94hIrL^xorXVAALhMGPeSuHmr> zkkOBpe`Yvh{JE;lyaw>5Rsx%+*<}7s@c&XgVnVms8!dR#`sfCjo{B75rM&0{fU7eM zX4hr1PgayR&2bgQllWd95MnS*6VZ!T%|>`Y!&5`q?L`L%|C=WhRUvT25HvlbT{l84Y5W8-~^2&M9j^`OaOe`YT!$y8K|c8V;K;j zNzzzt0M>~x@vZ_JWiA%=5Si*Uis>baDC1%ZDTedYvFbfVGBUO&`h{3>5 z-j3J6g>Sb_Cg-P3Pjd$sE#{NAFx<`M8t7fu0Rd7J(j+~R$_6^TBhV1;gR|NLc*B!j zry|?#mw-q;C3t*!-4)WGH~T}*odK#*pQAS^?*?#s3+N_%`(!3s!T`_kFbn5<&k2>Kv5Mzn zxD{$R2(^(euoqp46K9j12ovr-l3t7yL@Rr6mWtH2_F;v!UINf{Ag2=dC_4L7)W~Uv zNA99-rV>dKKv{l$D!1X20)=;PE=Kd2ODGUo5!px%K-J5@~%J{@#rAD_P3W-CL{ZxEQ&gHhcDGD_xY0)l7Uj7wc#2D7@2}rS(I{ z`AxGtX7E>bx9;be#MK2=0u;f!$m4kP1eWMnM+=&9sBPZ*_d>o7kVGzCN<Ku_CyM(%R0D7sZRzP`Qi%*q4!ab~;1 z0#vhiq)#tebl=|HZSa7Jbq}A{u-Ixm7EePGy-^t(*8ei}E zkWXnXx{op!C)R~IV#c$?&{<@BPx?n*+zVib=XOU+<9T%-HdnnT^W5g$>D95_;C<;+x8GCvaEFU_(wQx zL%7mG8DC)n8Tc3H?3&V^MpTJQees{9ZXKg9p91`x?RgRC6donHn-;})bvS_w^183# z-58YZkeRAwO0!C@8bVBz>gC9b8J5weZDo)vlyD&EsW^%he zBv^XhXy;4my*>R!)@5F%JMa@_6<76^@{Eakk1cS+7R;Ll>9j8|CYqgu;0poaW%fJj zJeR7r z_2obnYTMZT?Pa6*qHUDi0psxAqZYj;U$%5Rx;=r&AnT_q8vfd${MH0d%>JX>k4C~3 z3Thz5AE`lRz=N^(GQ?O1Xz*l%Wp`@7zJC^mi?~SmgxRXLjT**4lj7z%S@L;!4~(`x z?U=CRj&0h-0F_pXgLNXiHnZ=qCA+uZU%JT7vlpW3LU(|EGT|q^u2t7g7pol8_aHeCCq*BPUriynAf;K6_iX`C60~13D0Qy)LQDz zI;ZmOW}QO&a#R0^;$jo>mI7tp&7p$G3X8vvm~_AReX>9N)M;WobK)_FhwPz5)&%T+ zW=BV(agObNG%-u62NpEQ3si&djxAdDams6IrVYszXRyZe?!dFy$|Eq*rS>9p6T#x{ z69OB=hoQoH4MpHIQycCI16J$zL&w${Q-PLWApvb{;Cyi-3iS;%izaREsu0Nz{#281$9R|)13GFu zC%HkuksjAA0oY%>3U-4@{b(6_nTK5qBqtImsy!w(td+D=fv1eeqhXFdK=J;F8xH@j zkZB++9~MX4FbWB-oPneHvlaPS?D}i)Il~qzw@3XuWLCSyt}PSiAOw^Yf20WpoLz05 zEkrX8Oxe`pNfcr4?xn^aMUGA`2v{m$mqbSWQ_@z{l41eP5Bs#5PM2fE9|At zkJ1M6kHgQE{#~>Z;VQG5G&L6>&nh}#%leyOy6l?yC(apT~vqS412{ zLfo8TqHcN(TjT@GOzb{(EHg^2oFZLEw3scnLn8e9eMNoAIO6bK)<=nM!AKQ&cxTCU z$1)@+a=d$2-KDy;XPL#4sZjT=W~89iQqBg)WsJFEJ&e+pMh`x6R|VV>Mp7NxP{b(m zOnOKxcaDxV?~r26>T&a!5I<77*@HW-2c7qr$?+0%6jaA1#55ArbHDjwCUUa3)vbM( z8Lh6q&lU=Mf;&Edk^h#zvR+WAU6*CsBA?nrF{;FUDO$IP4Jf*5tm zswZrRx7U{Y#;`Tkg?c`N>Ca9;XTaV-l2AGe>?BifIuFT}lFji3#!4HTSkZ^xm(%4D zMZZrjMJmx6l z7`?Y^xIo-Dk4qdMN3ECw-W`d!jQH`+8nH)d+_R}#?Ur<{zm|i3a%i@@OJ`gI$(^*X z*>}?y$S%f0C@B3b?ZXU}JS>M9E zfHFTipaopuZ#t;;bheuY{ruXTpp*W; zdS*ztc+o;jAf>v1tS*)W+`-U@t~5DDUJ)aKA#v$+53+Rhykg4#oajaU?>`FuPks5| zM7WsI?*y`1o&qYoCrVEJ;F=O5SyzUEl$`k1g!uO#;*vlcSYUALCb`W^Lvu{dszZk> z*h8~r&3j8qB$JimA1lzm+<@H2F*wR#Vsd~g>K!}1RP_I{jI=@Hl5UjM^dVVLA_$#R%pEsZr9FGIK-@{ zZxiLee`eSVa;U4fJR;Kb*Vn4=kE_U33I5?&V6V9NU@!2WKX8HL2sp!UA=?Fz(u#n) z#K0c&tOf>8iabcn`U|!LfiIyTUp%McERKKq_x|mc(xC!GN_C$~4X9}a_{yp7MNeD* z!w>Mkr5L89fQOT`tbGBdv84BmXKxx<;&zUaexCV117-gg!_zltMg4`SZoW?WzYCiF zzw9d`t$MH!^nZ8^An~KB`@qncuG0HoSK&iyK#QQ5WRbWHbfNL>JWhvT2)NnMtiDBF z_ute+|C?vz4tXxI5mAm=+f+ONS2M=FCKU-duGLeS|Nrpi%n$%Q={2I&3Ybcm&Xq?@ zqR=NPA30iJ5z!-7&i)}Q_IXVezxpdl_ms^TtB2Yz-|q{h0r0uY9<8CBEHA~ z^*UXMEe#wG>RwHKhsdf;&foLEDYIV&Ah9`FvUF3<~WgRtD%`j{Sv90ZkkMqp!ScAK!h(U;mimo9{CNICdlc zpr#08L^+;MrO9&BwWs8Wr~3tdqA(PNra?v^EN}RKU_~yXEW0+&y1y+&U{(Z`GPu?)? z%+`r~^gE9KO34LO)Ah-@#=CUD+Ei~~Y-Z|Yfb||-*69oOe9K@Pu^@}(|V|xxIZ?S(|a^*miL*xM} zZ7TN@#Q7wMXxRoZvv8rm&{DEtqYxMT9#eod6bS@jE$2p~w=uLOf3kZ3j;+n&uWOfm zh-3kRX?hkO)1~F#Kq&%!czFv5<)g{~M)lsOkm43hlSKgquIdzkM210Inr=%nY2nF? zO}ZFB-Ih6FFZTkY8pRelWUy1eybFF|tpsp8?|A)U>=H57rAAw?fLdb(*xcd4e;^lK z4)9M+j5I)OZs1&`UI+kDY+4Y?cKzZCK^=B+oEA(mtbOcowep_YZ~fe#@9v{$uOSob zSoT>R+&wKdlL)CEC?o|kMx0A=w)xpc7s;lpqAuwjKzdenzLq1Hp@uJZsWadVLFp?D zlAeN)7}Ch8Zej=mvH~57)OoBQV5w~HjX_P@ci9HKqv=~Rqv>KNxfVdrd(?KO`Nn_< z-}K+W)$;1V5~i+pPeoMkZ|iK@R8R-8WdDUcR%8`dSnvd(wgG%yC65}{G*PSA+<(B& z<=6>h{sn!G2kcBThaFN(<@eNY7x6%i`gy$=AcHUxk`HTlYq{?o`q9tMumLUX9gU%o@Raq@ zA-~I`Y>EO}%_v`lrf)e!&(}A-Jfc=EPxPV8F9Cie=kPkGQP*D(~hH$6OX4!+}qyCn=7n#_wE4pG@gpMM@C z3gJmufT1`n8-mQnge>lJV`lRuotd!C`MO{F0^(*qwwWd!NQ5h$?%Mm>CkKT?ZVQyI z4ZP-e${&>(r5X$;Vt6W)IB^cR$L}@zJj?&RI@b{brJ=s2;pzko7vXDBmXphF&bNbq z{Za-+Uh6bB8R&ZN`6V!wmm8N*0D<>QC3c3^pK87x;219N30}(1wZ35acwVRy7vG)~U3!zVQYG7^n581H?W3I4NKQ3HwDn*8qsU&F^IDGd|fRMq=Y4j4!Q!Tsz$*%lV{R$-dG?Zt!UMn z)x|;Bwyq}HpqcbwN@i579MCCS`;s=@}|Kraq<>Z)*5g**zt>xXs4kxk;7lKc7EeI0T7iIM!ys!Gtm;`9WF#}!bj>=5%XJmEU zzG^<__!ck>TPV#~(`+VxPZy&a6&{4!0_9Bui_3bBhqlzZ+}RH{I)e;1Qrf-1JfR+5 zU*T4$Jd#S+mHYLE5Vuhs$F}o#Q5c!0Q+D_A>z70*o>Y~%%dxw3PS*WfMEGZz2tjRB zXIoEBL`>S9Es3)~VBYUU`S{sV#Z|v_Amr2pY61RK&EX9BpQzF>^7qlL*+(WM!1-6` zuky$OcFA%Pfz)n3`zd5s^%jQi20Y<+pjQoI6grk_jLT-qDHerFqf=f&J-fPsa$lyk zIS{8ThDi6OuJoF_Gx^MBQRvBMW+|WQ`Y((_U7_x`9*ReEgvtsilD~UUvP#RK{?gm# zvDHVdcwRFL8z3U6cYqbeLZv4#vdutAA&~OS+vSsN0d7oPYZK}dt%KKAG`h%&Gk7u$ z4zvRSLw?&~hkevL^)BzF*0(JC&taxBeuC=|JMyoWwZBI)-8FL<5KYrCdg!;0{>1Vf z;cOd@b^cMvvtTkAj}Aw`vw-6c9ILg9wv```vMd;p4kkEOOiiFxo%5WDabI!JflzD}6cx^^BX>jz_zhTWNS13R22(S#D`@{X^gzp^6z{$`R<#BM( zSeP+Fa-C*dl`I8c;+FVB9tbMtl=4EX1>^e6_m5OaSI0lKnby4Rc}hM zqIj$mbzqNmg!zg(N5tNdnW7-Z}f8pmyKQUOmS-fFvCT?Q-WREb-7WRkcvVK*r}$=>n#{8vj4gGf?-ei&{@svDEFot zqk<{uzEGBMqEBM9Cu8T9euNcbzD&3w(PaeSR^Wa!pVT&fDSYsc7CGP$ub~6^&n_S&^2vO9P*%_RjRO@FIWz)`Jj&hC&za!l4lJQY}ayhZhGVX;ywNV zC+s2#1D?XJ^Sk52Cjf1DB6Yk(-TtM0$9F6^6jPT)>yq1`t(>-VP{M~>N;{rsXJFU~ zhvIwW;Y(S?w(n{FdkY`SXKB>=O9>UihxMeMM(9ZDE3r$I$c;EYBxRx0G{U-GYHT}ci8spSDh~U0RrO2bgph>r?u(Q`~&dbsodgQ;N zf}yfiKj<({P#j$0^Z9tKZcH>mmHiQBA7RV=#n%_&y<;gw^k`+9&;D%4Z=&mxOLt_| zhx_+0U?rK;qQyvxTN1=uK9s92#6u*sBg%AW3tCI>3NFGJOF=NFH<4F2{OAsgKF*!T zTSHw!>-72Zf55~q8_Hmgcj%EW!ibcmR;LiJQ6kc6qu1Z4l=R|$9~{<{@8CdQO0Uqq z#_+~e%>hcQa1uZ^L9G6ship3ZX!lut~NBHqpZJA%g?lTUC zRwqccvEg=<1;Afb94&=s{j!m+(?h+n5!%e=U(&gxJczgOx^a(AeoGzMY=6Q*OMm-| z?2W1Fo6R#?2joO~MBA8R=YEsAt-j1e5#&LQq3waBO7_HsGJXo<7`nQ)NOPpmwhMsgP=Ob+ zUO&cCpr-llZzk>xbV9_Hz$v+N40)o#j$1$Hzw6`+GQ&{D3ZzJN^T;n1F!FXz zwN|&_7np})L<`bkq6Xggr2S`xMJomL`R?LyQ7+&kjI>@FcgBM z7T(Z73O`mG4dYM|N^}p+NlZzXH4gQcpQam#1ERfCjBIdfeH)QzRrqW*@|r%DQ!$ET zkjAQIa)+~)lgP9R?~mKqG4A`&Qugr&Y5KWso8!e?X!slDdO4l;gI8S*)H?%LG-Dj` zK{yP^R|!=~SVoDbX+oK`z*yy`8PqG3TjD>Vy;7&$9KKL4{P^;7Kmzr&R9LJVJ_*|^ zYeb#45JeT2lIlAcD-F+U>O;~)y<~&bUmE)h2N%8DCSDKF200HRTIpzb&HFeQ zXK4>gf}%#()<&sTJ7h`2rdMr1FmA4M+*#zv_xkWAL*ZHct#Y0hEO(nJ-%+urf|~KskdFEQDo?RJMCXOE z)|d{4Vt;sG4d|$7t$v6gi1fJg>O?t%5(;d4kS#hfdgtdoiZN7bUV_~b4ZRS9`8 z58Bp8mvKUUO}J>u2fLqC+SSZje>x34xuhN&@iMC)EF!G?ctVMAoVaL&8bUOljCNk( zB8BKba^3CDi`Y6M%m4AxST&LWV?QM@7LS=n8x%)&w)KB+xxlNNN`THp$%@t z3|m=6;68`o!##Gi7*UsCRr7-KW1JBt5TW&6((gZ|?dHij~& zXbmXQ%4+6_Gym+(mgA|mdYr^C0CDj<3y*_=osyR~DegT@3nP-$t^RIKUy@xp{RMn& zb3Z~wSImjg4YE!*F~yzTRM#?b5M;2YoamGV+2X2eZCs)9Fq|;yK8MBronw$r45Jxa z>X%j)&jUd&U5po;!#>YSBq~s|Z@JM83?l2SeVO}Ux8t+te65LsD%h=iptxnkRGGTD z>&Q3Boh$=xdYXjCf~tn%=dQ*ic|wEF@zC%)EmXDoiETn|jv6-YPfQ%-T*Wi1^iilL zRuB8cLIDH-r+kyl1_%|qc_z)rv;0%V8Lb6wM7mJnsVg{k`b+p%PbFTdh-NM5PqVoZ34^FpneOqeH5bu03H zg3J$Idu9EDa>*bHK93)bfFW{J$N%t&JMz;L!*#Vz;zZ(jx12%!Ax`sx7VQ2;uG9D5 zdK^;E>^|yww>j_>KwWn6QZ%P1aKtN0+I)SOz`-MA0L{ zJHG=wmY$C(zWx5t3YjiMZw^aIS|_U-h&4AvP-5J=okF<^AoDvq!zfvn9J}YBZ_6B34;p6C@z@SS|nb)qZa? zH9KajzK*9A-{^x@?nkZ24J*>B6K8kpPV2nZr+SR14bGSEVO5r~bxmvQ0iDx_rWkIs z?C%4v?bDQZqr0@1gDK4JfE&Zl%VDu?4Sy57h=k`IsvJn9?HclN5RcD`89XH|(Yx_Fw_vsy8NjTqi&-^XKTbn_9WQXuL^n7vpT(X5SG*K? zI4(`JIKAko?D;m?<#Q}%?` zezY~P#y;qeD`J_w@U~Q#v7&!jDV|&nxH)_ z3UQw~o8+oEGL^&g4z`U z%PteAW!k171;U?V!Yq8da=a>r|yhD{DU1s_ykCaKu&Um6eMd&rQ1*>w#Os zrOwDD6$pA;9orYDwE7w;BV$NY97O*?bKJaB!d97XZ)G+k zdY>=D<$3E~+u0^>Sz4xOP^&82&yrLp(Bv>>pDkRw|5!9yY`x~--YMxP_1G9{8(bHa zt+yNhzOukQfjKr92a)?t1Udze$j}BI+G<~FGrD1q%v-L#^-9Ko``~B#%;VZGA_XaU|#1ElX#4_#jWdnwS z(QXo0-^^J_(90Df-?T=31G+h^h>9BOoy`ceS1RoxFy&0#>(x#)yRcTrseR*;fJ+~+6t7K>UL(&- zrG%M;BTl*>L{1FRX-N!i#ruLUow@fP1QDR;|>QOQtR_7_J*a&cp>M0nN8E!C$FgMCrSw?Ou=-A?*P&EZ4>I1Mf3`*2Y5=^t=dG zDaB7I#gPkvU<3vvgAJe{pz2u#;p0MF5}`<*g06hJfrV~ol$8O8;JDXrlSF=#O}P@k zGT&%aa9uo@dYd}>sPdRQeOL;&1xyKl%eb(jhH%Qu6D%gyl znvbS~^}xIEuGpSTf(TH6Bp7H8MIa@&rhjFiXdMRnhFUZvd>Orfg6LXotDg}+? zOPx5J`p++6p`{NL2zact!kFP2?d~3I1x>oeHVkkF(6f7-Hy*P$C~fnx#q)Rb|JpVC z>*D`VNgf0F^h4d?BhW$9(0B-s0EKDrpyZEGM-^%&=VSK-yr@EM^tAipeXOoa-H#p0 z>l`tUz_{!XicW2yiVPM*E8Jx_Cpo&|MG+hLiOI+pV>UN|LY~rDwQ7Y%vBhe!JQ%c_JyI?<{CrNYVgBgu&L$gglb*{Sf z1-T=A1Tz?4NU@zFgC8(vK6QaTkM_bG^gx|ToUoj~4`u#6;jLJ3`F`TVssHXc?&O0d6+;+OZh4ePCr}`>BuxLX+Dy?5~9P$`D zwTQ&YzbU~w=%1vOM*8J`(Aii1x+*AE%LF7hka5frVZb*sFxh&fm$;R%SjdW%QeH4m z*@oGdNd~R`$wn^5@R&FLQY}hlR{_^1#TN>p=8N=rnEJKxU?&UNfbgDX9P{MtjC~2A zbJp>Abw(wzQ-#k?MpGFoRSq)12y~~IC~`?9DqCetOSbE*rX3xBTH}_4Tcq6pD>0lg{gvG+bI_XJ0az6vZp^?Ef?Y z7$KkUHK=%Zn{d+o(=Msf{~+?mCfg+O5FkRKc!{{@0~@`IQH&5cG%#)+-7t}7l@`N5 zWd4`sRZ9sb0md;t+w;op(Q!{=zLJ5i(sv{5T*i3aZHd{?fbfMji@DHa-BK&fl@?ZdwXqW)`Uw!s znk@lRA2?6H<>zNHn`e2wZ8bYZrJFie}1vd5)Ys) zX9G!a#qLz!^~_$$_omag^4P{zv-aWd8Nie(|5KAxtXNl~Su_vlgAwSHH6R^exX@%} zF3qSr)xdnE%)0QF{M_d~BMlY9*_=1XbZR1lGmo@W>tNPs zg5Lo+-M@Jimx9fnAWznCxcw#>DuvDlK|Z0~xdc}A0i^0+H#%ZK&TL=1ZZ6Lcqr5rH z6(V2WNUk4^ou~jbh1Y~}YWX+jcvjOz(J4O=19My%Ax`$-GfiX8xGB`-hwW#4S*`dk ze}Dnl_|M|4ArcyvQHeTQIi^lcMb#34b&@Ka8g<$Nv9L>WmV!ZlUj1^H)IR`RT4ro} zoYyv`o_!6%6HfV2z(q2_|JO~PzoO+8DL;l8Tw_KOT7FRgMoy=?mr;3?IW!pO8~F+L z3w4CjJ{8*wQ6$*D5IsrbLAiKh2rbw=Hjj71Dj>7ug!0B7B|SG<$qwD`Yzps0{CLz) zyfsoxyN)WF0A|b8x%W#|R?e$!r$7RmZYCoGD1->5s%ShmVbT!36HB5osyQ{8( zf!tM;eb5RuhJ^QCdw`kT9nM_O2k9P(N{6=;VGme|o=E)Yfe7v%APiV*e7TgJ;azQZl%CWuIE%R5_B33G}Qo2=62BS&P3 zPHI2YKv=Puf5|h7hNobX(u}b8aPY8%%6Yt(?nf;L7xIVxAuwVXr1uywEPjoOnAI(Th>M?iB{_c>9RydEwt?A9lntaf{n&@lfc3T?m4#lqC9%g& zF;x2g;W?0smV?c);Dd9%*?@va;`)@O@awv}T%|X=xk9U@jAF;lmA&5uMc^{mLlyv2 zDzE}$T0)*J*cDOn?QyE)G?n&cqk9L-dt8h2pwcDd_yW35s!Z^6&D8yYoX`;6*&H!Y zM@}cCAl>YX>QQS1GJDCwxN{@^E3waaAfzvd5=C97+-qOXOnA&yZL8N*i#ck&~26qRS{w zFXN_4q!BN&DufRm+kRe|Ff1C!s~%LLB)70EBSdmKfx0jI(v04nAD9f~0xzCv;Hiob zi6xJGgGsRdmeqdZ>eW+ju1I1Ix*65hl6H^~OJ7o>rZ~;`DJf>Q^q=h3fb-d#4`yA# z6{thdBQUVmPxZx{om+{{@PzyAosEel)8w?rLiE?Ar}8NCSmCMf)9eB{{J$wu^u>SJ z<|tMuMzPq31}-HqcAdU5hF!vv$Ogm`9{jj2njuGvX>l_^f^aU=LwxKbC>vRSgvEt^ zb0{^T12sTW_DIKNmNJ62NHh}8H7ZWv))VTyIps73CVF3!)IPXff1)y*-d9(p97jXk zq~5C~+|it=vMx<#$7*@`hN7!_cs{}^)0db{(~B0ZRO z7mK2G3D7B>`ssg6>Wu5-97ZI^Ubx;>=xqN<#By_)ApohS^fA~gSho9l%*$GwFR#R? zDKPS`A-mO9$28L&=Nt}O-Cke<9g*x+Ttzc1k;H(HGkV71~0P5rwc7{DVflok2W0nm48$ z1DxrC5pPV?&58xSM9eT1-tNm$RqZHRBdK~qcSal#dzvBRhI&=s^(=1UUh+>+0`ES; zChY+r8FPK>%xe}^)ctQy-o!bYbubT+$d=(MMPa4NoUuAEIeY<=1M6PerHP+qu_F9! zt0Yw!4%1db#3F4~+FwU$Mz^z>>&e{Hp5J!TpPWK~PVzS_LR#x-!~ci9w~DK(ZQFjO zCq3zoNq2WMY3URY1WA#WP$Z-#-QA6(3J6jPNH>Upga}9pf+z?I3ao4RJoo#4>wR2n z?W~P&_84 z1kWp+`{sJpH%_uIL@U+W)wf^pZP`A;&y5kDTBV5&!kFH+7?eY!A+~42K`=NPe;A^E zv>$JmZ_MI+cn)M13yP4H-pUxVV#f})@xj7!SPgU!Zz*>SN)g)?t61(EOEW38B%EHy z9~!|T$fjcBhZPl!e0A?HnmO>Xh{)YRnq`B$@=dEadCox#Y-j5r{LY782}f^boT{~p zpA}l&2T!pug0cO<;BVaz0f+|sA5@i`|IyTeqemV3c|VY8W3B!s)Ao()p+1YP`ya7_ z8lNw3)3EXmB$x5Tl68#>RXdj&_73ryW)LCgHxO7$d0Fj;^CzelWg=FMp+`QBoU1ZSxHK{66~1npuFs!hHaD&2gh7oxdT zL}VIwj~>Opd76UGY*Dd(O_``F51%HM6|>1LZ+&f>rph5JD9LxmqhY9@dI%n{oTul~$NsO#!oQglIaK{dlh6^6v* z``}U)Y@8r$LuLF!L6scF{oVc4+yzfBBm}HyO)_zoQ;_9>N8^gV%4NmIZ6`or^Jx*} zy}Th^w9kK*mz^oGDcJP}p;$@7=GRsCvq)d`R0lqc@ZunxVGCp&zT+|&5(|%p&p>Nb zEe|Mzil1oQ>E7PK?yODMRYIyQepW`nJ^N9wiALs2EMKwqo z?8+7iU1C8&_?-o(P|DKVQaaidG=;7YCQcGczMoEOY)d8Lj?S;4-&?1~<=%DhD+kA_ zkLo-`=pI3&A#ZL>kJbj#H0d#-#RuJ?@)$%Wy$&nhd9R$vMvjMgG7j?8^kW>CGG_Bw zY~N6|t91cQ_04edjjTRr7^=D&{sDI=lgUiTM0N(DvjDm~_380D-cd@HJ-f+EbZ25( zJ@>X)#tD)<2kG>5_aewXg5hG*b%V$iC7L?ZL3$X1B*;5Riqi;u;Jv7iR77iPlotIT zvW6^_J4tDYTPT-e49cVw<04(l_VeAEVhi5};Os;`Hv_&A$){Uc3Zt;dg79mf>Vd3j zEaJReNGV3^C^{$XA$c6oLr{ znqA~w(<7Em(FfD529IB#O(~RSn)wI&Io63r57slS_Q98!?>9&)t;8t2ei&}V8~4No z2oIJe=NOI~y|6SUiSKMQpK<5jsQ1Cm7Vr_u=3RK_lNx)dGe{XozCFfLA(TxSC~>Ng zk@^aUir~FMDK|Q0!1F2On^+m4N$Sr*#9xDZe^8Fz+O%=F8n%)Gf@keD)U^>yVvD#l zbRC1)F&4{oK_4n=140F8U@|i|?AcqGBAL z1_2pTQxT*!BfLM-5q@rZWTa8=UFrL`HYwd7`CBwJ+&OqxPTnB%lH1bgH#ju4RM?HG z{#!Hm&nPI2G5MMUX;sf+oL7rHqk(CIH)a$8ja}w7gk;$z2N}9N1sc^ovL;Eq`oBq^ zJ~2WwNyhi~TRiAyd~BWEg+&#ibGmSUlNT(uekMLO4ga$!dH_nI$}iI{u#ymz9Z#GO z4ufxsDMuP^SW(oqxYvEr#I1WbWWTi8k5Rw^X^U!;|D&oeAp&ZvIpt@+Rw>Zxel3@n z;X)0c8%bYrB7@R0RYI3vyzkImYPj7uo+E5O%Ko?t_0Oe3L)1U_Yb6pil2|@Qbn|Im`G37`1?ajJ_U$+M07ymNDNIPx z&_VK>(vctCEI!ms;(uPX7~r+c6MO6W>5#S{uU0GqhgiZ`M;Ju|5=75{86VxK)(BqM zJnL8Bp1-Oj(yyLCeOm$8)XY;MrSbmjbN|ueMk-sP^3LRq;w%-tvNmoUv;)-+%qh|GtYU zQQ%_s=>GCA|GvLSW`;jY@cy4A$ca@?Iz=KuK} z@IT-A|6cdw89%N$K7VtHG!P$iD*J<&o^3GNJMikiY4aP3iU#q24rvL|gmg}TaeI4? z&aLs!Gx-0qdj661{#g&qJm9j`P|vqwV?*ce4R1ItfV_;ukB`k2#Yr0W>_1h38q-QH zGY>wjvIYjs;@bQz8D~%lgH6on21W0@yz!^=oGy&M`s>4waVWz3anZxO$Ka{U2YK_| zq_oh32qk1s@YL1Yfea1-QQ)iLUwPcQdNKJDh?g^G+)uRS9f=a>p04Sy+UlkbDBA*g zurL&ORnWi0mAMKsiJZU*rj^~&xzNwjtf?r@dF+~-vii!Lq@_WN$B11ldzKJ1A)g2Y zjRkRikl4_gp_2QTC;MO59QkL^1q@=rpvyH7t6qgjx?c_?$D<5BfFT>Z#g^bB7ci77e)>puuey93Naaa%z7${muJUs;k{JDT^Xl?qLK%m_q=Nc1*MRoR z7WmN>8RKlw6%Yl?P%aeMvAuGCRh(GvYbfNZcLp-j@pt+n6wgNV$DujTDu@^5{`B1| zAJH((5}yMx>qgc9+1>^UHT*0u@F~Qr3jOmgo|y7HgowZ0ch8C^(!a^JOHXuz-%c0P zY}){uy35`Ak}JNH$_F<|^GB5CwrBvk6BGsY>2ga% z6PP*HnW4Uda4=DbD_pVL?z-w@x}2^D;xH$OS_D6r%s&Kin7}Yt9CW>YG>E&FwJ__8M55>2-(CIcz7mCks|p`M z$&EwR^^EBI3_ZudO;QY`jp)4UU;27rmhJ|z3Y}A73BB~Jt~QvKE0Rl8u~O`0XuL#8 z*VX>MJKn(t8)@F_7So!z&^ew8y3wi?iiVE#&=c?-<-hvzK{h6c7iP}&X&=1Atou<8 z$_jvl@BzuS`2gH)_c{cdr;y3R1~zmsxEF(Bq5XPVkdBpwxaKL6RMx(R@oOc@5thiO z+>2I;3L&5?NjF@M;0404HcVxIpr+8~-vLc>x1DaNoBgIk$wUTFrQ`HI<0RwJXH+xV zF$CC)d!Ttc$-fG8r0%gVp-{>%&rO*^F>!8*PDWR;)#!LN{DSE3|sfxXNaan9L8OXzSEFyBI zJOLprKzcvYVVNTq+{{a`Jo2GLwjdC>v@O|vrn|gW60Q@cRQF3=-xGtR;o(F4x{$x_ zGBW=VGlS!)}t4N=MWUJ-=ak$LEQlzQvv(L+p^U!!}k3xRjo z&rtV`kLC3$HoxB%UpfHzc3@C@X%dr9Q}+3|NW7^V6o*ASRJJ102A+}$;4FGK9%V%C zLx0!I93UopY!EXL%s5a7PJg4My11`V58q4k~g00tdv?a&<=o? z&u{A$->t0~hj`(!@JdvI5Ab5z1s}ARluYq#lMI6!!wzdyqB`0(#h$sabd+@2Dd#q} z4{ty|NEBD41%6*2L_(c)qsut zZa?eJyL9q~wCR$cP;AK3qbMOiuuz=KcE}oFC(-G@!NBN6(&q}GZ>2!cMdG23<{(qo zM|d@iZeX3xzm9W6*=Roo$FEJaip>uA&$(wIj^MeMeGYuf^pIR`=#Tw5Y{d;%^{)G* z>q<0Yra@6dS@c`7HAma3n)=YZ7GcGBh}?_l*<1$Dw>yO3X_;65PH`erH)q#uD-Fnc znOg;=s{NAPGlB;PM^uZyv+|+Q)J51QF1kK@Mc_*856*Tu5GwT0^!)^E zXybS1+y`%`mfMVug{U3?A>LK-M;nY|g8?B)A7 z?);QvldhtnNdg>S^C4Aump=#>@=c8zdz^kEhafGy%ffRLfu#P-kYlHtwq!T2?V_6y z8UvSqrU8Z}-MVT$aq%_Vg>4Tca`Ry3-ft+-cm;~C>;8Rzi~&v$=HB1j{J?r^q5U>| z2G#!t#i4$)h8h-InY&fRAE4=LK35RJ6V%|A;DZtn5%OvCM;UlR>~ydP*z%k2iUJL} z86)!i6%76RD@b;uWa4}KDI~jn{%w#hpEX%-Cd#Fcxw-_d$~6J3t|~NVP{pyjJ$ZnL zbHCH6MrA!46#mmNv9}wa2dxPn!A!mnXee(`J)%hOCb(8?w<2vYVOan4v2oE)eJ3(&gCOgH} z4-qg{`2ihGw($|4K%qjE74~8Y3Ip|otak#y9$ua?$BzDOw1$K9;a9MCJy$#cZ;BWE z28{ht#7rI|q2S!oV#+@5`q=@2c;C_J4GjD&2l^KLfe}D1PzNtN81~_zq<`<~Kf2rZ z!49nPMCpwLQ9G(~vxf;9UMvM4AsWxT{5b(V6?oqsg8=x2lsJTnd!n}l$kK)0w7I*F z^CwC3cC{lfpcr-0W3PUU!A+a1^BZ(|X~Lb5Eczp3#hqSH(vY;K^cS9&Z9lFGfA78x zh%#C<(&o?nVgBwgfmg8^vF8dQgFy#qtd;C!kNLC_U7J3y))MYKL{N=CB;1E z{)LI`G#c7OC6=9K1tf*^T6Hbh#V<;y8ob)?6zKkauan3fG)yFSammefHm+2GYTpELob4)Qo8(TH+L7IvJ}EK3e6s^^<%^&Lw}0>eD%F?AEfNEK^(Pa6p0rm{c&i6ekB&w-58kJ@ zJmWM(YIy=D-fgPxpD4m76Ec^;3}QjNFd*Rs?t1;=-9#U-Z^{YNfl%e;qfiPTUPSz2 zgcXSb`6euGo-Xh`NOuFw1zMRJ4zdnO69KUJ@@Uj7mvD%OC=jMZPu>j#M^PaRZ-M6A%-YZNIlz}JhII1QmHKEhocx9{ zy81$Zy8@*wRk&C#(`{43>(@mKnjpq$K;A{_$}8nqr<1gyAdS{>ipA{gSRBs?II0AX ze{qcEhMNe*Xi3>3Hp_^xqHGgL{K@2m&v7m)5*i2F8cFaZZ*n|ocIN&J3}_FgT=2}L zHV}7j>!OhLH>u7sHVI+G)kT%k{lQgcw6VD@@Ng!FF|ml|2f(Z_|J%k84wE+~-*9z> z8ue)L#lCaR6jI{b6C%TC-#wr?v|~GY2_9Xe#u5*y5^n`jbp&Pq3mKnkUhRbTmmaV7 znq2{usLc3frSm?IH>aSOd!YoNEbVj$QVZ4ZmLV? zl=sXMe*(YR>S=IF?QSGa*vj$didy>%dU#*PB`mCeb@iSh`VptL%hz+EiI2T8daQpoH4{>eetWVpDxK1qKMDg6r$9eajqo!7>82(~ zcZjbOKoa3mf@a|Z%+e}cJN&!!An>7Sg0n&$*)9JuhLtZM<`V7F;;v>ph1(~zM-wXE zJi3IFhbk#k=3~Jaf%Lh}7#lDRS~i{~GBx~y1zN$)- zs#O^Ov)lU;Pb zZG)qD@$4Jifk%br2TO$rm_3iJaPgW|RKvsrmD~!DbLyW|2wo9d40=lAmX>!im}31_c7q=6?dn?DeE$^=kucSZ#HZ z9U?7!nX_bbm_E)D|KN4d94JZaJ~mGy@fUx@r{s@K%09hp1P{Q2BY`;Q?`plU^2>o% zMmEZAGA||f^b5pi7*99?C3;zSA%y+7+NlX!$XO)H;^x_)Lvl)0y?Kj*@VR<|L``~B zcXXuLCfSTOSjiS+9u%k~Ww!#WnJ>*i-DS1Ma+D;u-96rKG@!974h@Gp2yQdN z1iFN63W0veY!OyQnO#uOL>9OUnLdAEdT$OM7_2u5iWw+*!AQD6-pz+XL(KBu2-BNo z+&@-fy_u*%G~I9z*pW>>V`$+ZZ_J5qVdhAe`bZzKx)$bv@Nyz`KBrKsu2|s#AsT*i;!WPWfd9mto zH90|b%LJ1hxcvcg2GXLP%mcp6cShEQvM2@OR)a(+a6$zLkY=kSXmzHnu1CW-L)f?F zndz0qyav$(?Xib!jVXcsezZZaMLH#(3sCblZpN`-OGiie)&slX`^Y%|l&1z4ub~2= z5Tz9%6vs+}!?*W9s|CA2Cq=mdXrRs}DYmW74TlS8NxMr;e8+`{$X)V!r%Lj!k>L20 zF8}`8AhqBP59e&Nv)DS>xz!Dqn&ncg2o>83??p{MNNFah^-n{MEMWy2+5w|_OI-7Y^IUfLJ76XCf zMhs3fT^kgI^n!Se`6RJD!Wl-E<;dl}*5gKj7T?qsfHj2JOf#U_Wm*dpC;1{8skJDb zA(odjX7Bq^=3vPfX1)e{9o9ZWtc!Y{=ZBBV<;W0GIkAAHQtHxv$w%WHi#nKXqi;_;Jh)YK{O?-ymLAr% zuF7J<=nq8FmOI8X21u6oc=Jy&`5Kf~Y-?*CH(`pHn5W&fkxKD~cQ%MbnniBH-x~1U zlUzVN4yD4QlDZN)mpguXC^X)IDpKzW{}c$CWRlm-eA}iqK5dMA&HCN~>f%Wr+zOO= zT&#OxGc#qGOw@CFq}@y|W+_29R#e$FSHC5x5f-g!Vj6p?Bjn_b8Q*@4%c89Zf|jc? zstnz7)glcx+;&`dLeq`=kaL_a@D&40702F_D;Ae`0gw0Tuiw%g-}2jA`|#xLQ~B7? z0js191(y&m_6(1-iZW{VwJJkY=vMkK+c>ZU|$BCU%4szCz5N+S27WGF`GsQWXTgAAou@Cp)WM-4+qjV<5OXFp{T zVa(~TfThTMtdbPr-pH!A#5y^uf3vqS%e}67r|@~~Dz3&)ptW5*Tc}}c^RlQGEa?p; zIUkr98S!num?HE~@WaYfAtz^^7k;PmcpzXoqcO@Gzt}ISi7oM)_JTGHQ#VpM!BjA# zuAp4J0<#sA_&1|n^UBB&Q+M=3qI=X9UW=(1MhIz?HYC2>AZutsvQRz=WGG9rDFVg! z2Ol05&zIk#7D3I;!6QI~JQvf`9z<+Tnwf*mQ$$=id#KvA(EorNNTyG)PjsqmW6=3N z-%JOHAXaYNSzbVdL8ObSyGfvVd5%hMyxnA_$1^MmE{d`sIuVVW%~tRy6fwC*AL}g& z>z_OYn9jD`dsUm;T^Pj9DJ#rP71sXV!FXvrZ0iOwpEyQ$XA<5>+BIvfhy|f%J-c=Q z3#)%uPdLeJp}epBIzc{Pv*V+Qe(IgoLj)9gI(UIss?1;5)KpKZP|gEuhKM3c|{ zZW!Bl4RWmQa7PZ%;HSVBHOhK14Xf+t+{vuBICS z6y`|TD_=>&!w5?ALsdm>FwVr8b1(^tp@(Z2STnn!>%j}sxv&QeB1ghSfEjy}F;0w} z)D7H#-r}92z{w9^pMF&02b)@=MW^?ulPFrwi>QrV+-ArTPFI&M>VtG28dOZ%6qH7?m|W zrzkD5{s3o3=tPYZtK_Kn*fFA-Rk#FW)PR@Ib9V7)zGQPF#}Bd6#5Z1xoDpphII6+A zQal!y!wqL<1Ui4J(w`3le%a+mPh__%&t{3u3+iB2_54}gzE%CR^-hK}1{OKYyUr=2 z0Je0CJ&&aE-6kI!{Z0sb7b(&omxjbuX@#5@?jH?mcGc^Coz|y#&3M`iF@*; z9V{yuuCP*ARB3g;T4R%0tFBc@2or(;0Swv#N$=&QM7Y$hhXmLs-sm!%xAM{b^`w`+ zw@ASus8hPE_^PwJt6b@`$;6oLn8N+Fp0HC9H2c0QC%@IeCnkdY#{PeS5aH+(tYE<% zQ%mMXz|3{amcyGV!oARkT`>8oXa`CeTitOT4KhMA)gEiQ-Xg!|m0^ELxVCxRl}91D zE`4WAl-qU-QL#G4yha}!N$0!%&C9Y>y?HZDn^scOLdEZG4nKtlg{X6p zdB-G*WOz!+6+OBP=nIUL;=b!Rf}wyGkMV%$qslhS9QdooD?b^N^r#@S6wsFjPGev_ z?x93;&WMLd*$~cBq+XXoJL`NK?R;|$W$sx)L@c9F`~GSX_4u2Ll#FRT5Me%zH}?V& zJUNgC#3W1VAwpI8TEE3uPMo`d4skFBd$vOk=}|=F7Sbt9Q16Am_)dx{3j1S@kCbqT zg->pTLA_EtiwpcDM|RXaZ!eaWaSgNL*?bFlu^v4|My|<&nrRo4tzaHBkv4j7Cw;bC z`yePA-SNY2YD;*}xXL;Z5A8GXgZpHJr(-wzfL)H1(sJ3ZIjmS6tV!d(K;TQ*X#!W- z3MWA4#)%0;u>KSE%mB`9IV&ogVSM<) zTiBhDb6}UGL$yA5b^n8-H4B^h46}nb3C>5M>*>1Y30)-Rx_ggP)qCz?mREF?v&x+# z6b)VNrWjeK9d92#dL{@08>}l_ksp++@oBDmb9vk8k~J(GO5JmA;sbpj9k8psdaAMa z0vDGbaQM~;{km%M!8>H#laZwrQ=CJ5R0M5&IHm76(>TA?%HG<&nPLmR=L=+?bYk=N zvqJ^627|JzE5xZ>b^PrvQr%Q|A}?ye$x{7-H0Ov?Q1q zI=~9%XfJm`#Pp4r8mRd+$a3ZZ+KZ>^&ci^9T=TTyCSvz&TJ~S#qVkVEpR~Dz=$YQj zaqgFhW@y67HLAslYVr+qzj;=ZZKIKD4+qWY%oEyc!njD*4WNlDqQA=1(StLaowy(9 zA&G$1)vdewyW}9+5-mntD$)Cvj5zLPqE{SsZCK=0yo*$u;X-c@K^0LF0lh32RhdX= zXI@9uLPK`XuQQDA!Tp9?@kn|z-#x<*E)KwSEFjaDd!qno$fw3T z&G*M9OG9LYcaEt2>fSyDL!dihv2X8yK7S3zjaCj}O^J-xD6P%IY8a^jB8Ur{eWGio3DEH9e4#yy$&pG7s>I za8GknJgrR-pG0yotr|`;Z@r~D7ML_)c;@j;E5z!~8ePViOtnEGpl~T8UbS{&uGttJ zeO`Zd7$oYGTTw53-}@}W)9gy5sGCV$I#pWtuRThpKRwF)KRrrL^sILw79eV2yM00d z*pVLRul^p4f~njsx;Y^g8vJ>+yIc8)sje(^YgYb&;@G!!*-OJ3W?${1*wD=Aln}wV zYtgU1o6>(Tjj)DUa>2Z-6YK?FoNZo%ain-5w||`Rm6;t`?`b?B$#4hedosU7uOsQ3 zb}TH8lnBtXn8M){Nn+!&2+Z4zUBACfy;H!g8tzmpvH&xF!rL%mn-Ri$bglb_zORFZ zoK2%U6?asaX+hU2m4)&l_6f^84xc{vIOo;9=d03bc#gBZ(Lqf)Oi5%oh@>_LDVFX# zkvCLZ6267ysit~~yO@3khGI5qXbCVH4V(U095eX1B~4b-K7HQY#oqXqaED(NX#?c_ zSobxx^5sX_vh-12+Z_`+itvUI{d?<$S~YiJy@2tsaF!obBc(Fqvyhn;LonLw0&IS= z&o4#ogyckHTPj1~tpL6hdygDg|CGZwfB{$z;n>8Z#(HmqD#m}+l=-KH65{b5POb=&IcZ&wBH8aTkv z;6{Mj^X_b#XI7VMq_Eq=xXLt3ygnqcC&aF4Kn4w=Y8MfAMFYjp@mBf45x1K?qhop( z6*{f*m!b4@IULeCAheH!W_k`zEtYJ6BpXDbhple9iK10XDfQRH#XFs zc?tvwt7vxL$3wrISZ|&VpB=bgVS-RCbLhz#isRu|-d|f|8e>tBuD6Fb1ZhaEldIg` z9-fjWT9U`SeM>QN6K^py|4U?P-#YwlkcOX`IbYS!uOPoGe?nrpo>XftaAuaUaD5 zndo*P^VrFJl6Wo|J}!d^sTo)Iv`Qncd8CKh#5x4{8JY4LxA9yT69@(?;vNVe{wf~X zSX0Yl^mu>78SD~jN3|l^R9cdUxiSYbKuWO?k|?ZT$a^=lv`0A?bG6pbObWVw@DQ2ePsrCGaDFb*=DPe{){Ul!+c+)~so&PXn8Zr(R zvwBGX?{742Qt0#1gimvt9e{B+WP6VLILr?3GfkF8&pm`k`ucj)9=Q*rK)CgiXk_id zN@pt+JlR2xN}np*#2aCvU^+G3e>O_(!yBln`E;KQq+)GY_OBXz_-CE*p;P{%*YvD5 zmQfoLaUcAE-C|5Y!FsMW9P(>M zFT?i@zk%Z9;C49^y1VhkihOJdeB$MCgC zXkDwvgc(PsYBU_gQO4sNH1xBcU1v^CV*|{#XK}VJ*KMR|3t4N@fr3n+t%NWdnJ@Q! zT1BG5s7RSFyaB@y*w!!we>eQVyA31}B0!td%6_&s`#NBcPI3*QVUSdN9lu%LrJ)Gk z71=JQpBdW{H_aQFSf>ARUtg3yb~amtG<*>CNn7DCJ%Kyghv#u+JSlZ>zV}Zs*t2BU zjG=uZQf!VJMp!AhHz*U+M=|6&{7Dv2+yxgk0*zb}Xk)2zwNYaADn01LJJprNDj&US zaV;VzA1`(8(_2>1@8^$#vE$4{;A7zX$wRA_sdqeT{QZ6mivT(I^+#G|>^^vod0>?6 zmIk)<5PfiFVZ+X#M=(pc=uL3N`=*ZO>thXK?P@ zoJ~DSzU&npA2Ux2-8zh(8OBW@n^zb{TbM3YIXKU9di1l8X}sg}Q`dJ|898z0;{k1& zAudx5#Sw0Wl{%<2UaDISkYeZaq2tks79ydptX59#IOd=CAF$3s_cTS1%jX2c3kF%@ zs8dI{`cA&5!m`f6b!h8*O3e6REzExvmuMXIto!oen=dZK@ozZPM67^#g|If=+|=)V z{WlpPA6q=8;`?kwgxA5fYX>ITErrJEpn0m+0a<;s2aw*SN2kPG`eGo+KcoIo{Vy|o z%V^NSebUzvTL3z^=yQ~h7a@6{WsY@eebCU|xjs>mqqie?E$euhfL$16(7Jyg7Ee|Y z3y;je8RC@8YXli4hVL@6hgQ<_zHqVOi1RQ0RCfiqd*yQqGk8^ zD0MVZd}Ap$bl`m)&vnhYWa$L|V!wHd1FHnGGr&v^@4t9&KJ;b}sYR-u_Tz}akxEnD zd?pM@^8={ao(9mW3B-hUtv3gP(dZK+t(XEa0HISCSW4+OfT+AhiSZ_Av`Fv2aN9cB z0k!H&tSr@w8x8g6oq!Kby2Co};(PyP_pH!#M}g*?Kx{t@@)wpa3H;>Y=1c&ebdHO> z`5Ms)Jl2;k`+h40tEhJ?4`9#eX=d_)C48fi)x8(AKLCnZ5GF;wyF8wrA`NL2B9_eS zo`8q1?AIT<0!dATNL4#VXr8^<7JAGh3s_E+mp~myCwFvCMqPDn_Na zAzC-zm@N?apie;5C+@S1XmQ#q*+|crJMeqV^k>`AY5W~GxNhFq4w=6;Pu5$e(t9#d zW7z&k8;loQ8pV+9-IOUruF6aFBZnbBW#{E$y43jQ<*eAAH9K1^SjQ|z`sqv_!y7DE z?>tI)5uNafu2!jc^XG#4J3-_Q{pAu@0$UB(4WzJ!ZQd~vu*kf}eW)G_OuVpszf4fq5Xo1Fts$8)smkF&^Y z(bpy!2eF8>h}w%E?r{eSO;Pur!IUwyJHrSJad+@H;sek*36C*0F?z$+9R|-Ps5gX| z2HIJG5~a%GBb8$qSML*tDw98Dn3$72*b44};TA&B3%&*q(^372xMVnjC=~j{wL^j} zex$G+giiLG{tKO?_?~#mR?pVYvxI6Ap+eTO?=us@>tSaxJ9jh+zH}+qhgD}eN-cZ8 zZ0}f$>;fHMw@dKef1yjIf`-RpI#WBsGw(rf_%w*(SEv3*K zkb0S^reaiaOj_&^AhEuHx~(NR?3*yaC;CLG_cSsvKI&#kAEgIkr={Ts7&!#>Kfuav^ns(toUs&#y1&bPS9@c0&q^weHo1d^b;B)lM~G;|``x_G>O)NxX`{8Zr$ zwIA!CfNRWWs%opvnr+jXh-b~fG)2`g(Jle*lq{Vhy_6~oESk73h17GWa(S7{gm94R zVUZ~1Nn~ubi~SeQmn`aSx-gG=;f!#oU?NDC9R_TQn246^e)_(E-_noP%y z3Uxg}_!gquNI&6_YF_NrtsZMOb@kKzHKdL9FLmI=d}Qiooo|Xbk`$KY*8QJ@K>#{@ z`k#nKVi8CwUiXRXq3Lk3i3C1n7(30+AH&QmlADNeI=*;GS_smcM}FWTdkPQ;mRBlM zzNF|0H;MYBgY-muvDTY?iOjB~sVv3nCR3g=Hzkhe7`!MrS*3vcrLZT5V;M?a0MVVo*Z}ce*e+e4TVmLh0t-z`$+zv zs^-C04{I#Gnb3sjG7RjIP-*lX-}~md(iunM;-G0A2=r6M<;V;Pe*~7YgL|)+({o}! zpQ>V5dbuXZ`hb*JI#9J9(~8ZJS);^lf`Ci>0L|n7=8V z_t30nD4&L}4ZO@3n`ec+@E}fMv;8J_5ev6Yvdz@N_(&a>G|rhq%WSOVJ0-HWA45E{ z;{n#Hb^@VALO`3qq}E)6!^0HLPoD({ZX0clk;oj4qK#0o*K@=K2poc~-xoBz=fr^S zrh4o;?-Pe^;+d{;1`nQusgT)E7F2>)Q&F5!lz>3-&g_M?%ek{nHG1gbLiBXDLLUM(I&-VF}$ z$q1oB|BtFItOz>06s|mmFqL1W->2qxmZ z1Hu!5UQG(q4eu2bz_Tzl@Pxq83L>isO0Es)dd}jv73#udXE)ODv_n|vD^xfT?`P2Q z`D};i9R$c_4ceJ!u|}B!MpaA0*FUMQmxItXGHF@Jw}Z%|wEQSc1b5F`3gsPs?`AMa z)0Rk?&m;I@0?6XKV0DwMJO0N2RGj%Ha{ z6YCegmBHL6rTm7FlXD|7goqK|^J%BLlpG;==J?(=g3#>~$2{w~Umam4mqvxs3VPK| zLyR#1VXV~FHcB8P9TEpD)R$8j4^$r1rVN+?Tb#9$itcrgB`V{Jg%=Jeq}L zqtGt_pMmS0(&oL%ply|N^Q=)?2ZDLZQ%Wuv@}5t{D^O)Q*2oeM^^m7w_RGwpQPomc zvW-qkGTBd(bS)}Q{|L4}99Bqs#ds3!7NdNsUb+vYyDwbbcx=2;av)!lSYmu;pctgTng!SovujlFFj5BF0S=t>--mgwz?T<=5Y9(IN*q48Gi zRh^Uw8bK}=Ql9K~A=j?zw;c5hTqz{ma0<0Sj$pz}nbUr_0gb1H>Jartrg%g!?Pr-l z1EG>hE05cgp}zZMODgLY_GAsezeVIRu?hWE;q>8;!s$Q|QaITpgGb_ladX8_pvuK` za%90=qD0HclB&?hpL+8G>&ELPQnad|aN1C&?N)yLI^-71T3uXW(9wv~_fK!y4?m$H zQlfgmvDmIpO}R$~phZ|2|AhfgUqgrYg3~fiz6jNAX6&)QAZ@ls>OdMj>G23k0f1Eg zUr%{&1_8TCmd86Nr77iWnRp%tKEHlLjEu6pCI@CMOV7i5U?^n4J_xYfrP}Mm01@aF zf-Hp1QVC5BP1qffB@l;Xs-|~{`)_cKE2#&_i#;fQ8my?iHuzhI4+(vWFBpHehZcFX zvFPk+#>l}Gz$i`&t3(mxZdQWGL41-_<@QIouxcyd$Xh*st z8#jyx20zCV7oT;9MQBQ?TR5{SJz&?&jhsgW5tS~0Pxdb$QvdLuZuGE5sKJr|rsR4E zZZXea{EEQ^fN$x?pFY69Z;uhUJ#i%!&VQm59P2=@`h6NNaM8v(1~+Ml=N5nW?;|JB zL=%F%kph6EcLIc-%!u;TTQ<{&L78rD&nG0X)mnff{a6CEaM_llL6kQ<)E8?V3X{pI zmWRaPplLF>4~kZ(!xEbwYn1B-B70Z{#IgKecQ zE%Jj48KyxmRNHd$O#EZlE5ThF_vVkC<;at&rhi%4DRr`hipWtR3ZTv}0pwW=g_~JA zWNQDV8nA@y3i+|+?)d|N4ZC@6@Wg)nV|I6=nj<=HS;e_nJ;cH+CAjZ19mv9nKw4fbRN3uPtQHy$zT#zQ`kBE$Q;pxc?RaN1q>0%IbgrBnW7lSR#UCnLREa(0s&9 z{{^T=m&b+vmN);O*iARcZW4;?1Y2(Y8OU66hV;{rtz-@ft9lL;K;@+%H>@Gd)SE-z za9z17dKrdRZ1NMB*sWLr_w?M#e1N`;Lq3^agRg*bm=kd15nl~{=l}k#1kzm11w9Nh zpKxn_qrUwQ!dS@{6nz9a?1BikAJ=z3Rh}Z5)mQI4qpcBhfyI!Qbs;c0)Ou1Sf1(bH zsM)9z#ZQ{4VZT?eE{grGH$Cc04FZhGpyrFAO5pmrBk8gdU>>;mGq}Vfzn?30NgO*) zUXn28hU`JJaYML#Zs-ZP2aEL}($V^4+wB`b8$>q-6Gfp=^nlG&jd1|0GHfB0c^@W& z)}fL`z(0H0f0_~a-{{%XL!bXA#K(558Jy2`zd{wP4q#DViv)r0|2A+LmH-iB_trnK zf}G>(@3vZ)Acyr1ICl{L7X!?`D)8f{iLtKZB$!hlmor@qGx|a=rqgbhLEtqqKyfhj z`y!UJh%39ah!ULy9?B;L<`p?mxCQ}}!b_t#DRkVSczJ;S_>YgsFojVEmmeGE$lYZ& z8s2;}S?ef`+4j8&>f&WX#zKG~$-jq-SpGgZw=N0LCB7o^IU$zH_fn~{5Jg$Gg8%ji=gHF^_{#)c|b^Ljy4-pSZ(dt0ACQ5Pg zAqaP=j5z@$TQ0EBe*RfCCf}`smP`7M3dfmRw1B0$gyzB9pJG6AJfMW zucVO@Yj8w?1e}Tdz`HSSeRfhG&^lnNSncpz{_m}V@5O@Mw&$Z?`A_Jb-3nTC1%S;s zh|)3%6cB})yg_g%k0MbnjKqj80ZP4k5e52!FFY72^!|NZP~rzR617-1t=+&z0-zJG z(7&^xn~}z%C@qKS0j_&mjL`9BK z%N_uMbOPJK^Jh?$wzZ_s@k5||34rbXsD=IByU{JO?A}_)uEvgwGJQK9m@MQ0*_-+; zxC5jXTf}|_*3u5#Y?k|oH{Y~pf`p5euu!6gPK=YuVdLO((IswmZZ*8vu(BCA`Wfs_ z{g!G$BxF`NWv zj8*~UzHYV~YYti=57O%d6LgAV0UHgn3s^ur!1z?JFw&M~LG4yx znsq+m86v91l>lly(Fw71=;J=IBVNY>DV*=LEFVIa8c@zlF7Pp(fCO400PdvIwEqX| z<3WeUv8DyQWD?DHZ+(%^2xYbqG4try<*4)BT88ZKh-CMLe(Ae7jCMFq|3a2qbCDqV$-*Hyku-JHb&+4=GZCal}8t4AdSE*v4my2n}&hyXn#t)5t!Gm@W z0oDS6b>K@b^!Z5tuejzK41O7eRqAqqY!Me0ZI-%La2 z&VJ+o^$CD8Y!f^4z32NNnyoojX%s2{rAqOlhTZ5M*XAhgC|2whWS&&(2!_IL5O@D4 zg^!&Eve$q;J5gvu_-n#9t&; z2g!fyC!^FK&eo;gd$fuB6mopZ1z&;Nt;j6MWkHmE)>=N*LJ^#(`BO7PUcXn#e|dTS zIg9T;cy}y)tqp+S!snwrb=2g9hyt*0WJ?g9Qv|5XBX>BasNaK4hTm+q@F6kCxJsIk-p=U@0xsa& zfYoWLxYaNr@&QZR!%w6OiiZ021>|?${l-eqMXj9h5@@*YjhUUG4K73UHYK3%Z{lc< zBzPjRjTz_n9jx!@&zp>1fD&NoW{t%lV`zl&;ELHzcSo>+rfV^B_FuDa2GI*nAR_Wb zaNf@FFOZ8PdjGw*hS!&vIZ3OqoE?C0GaNrJzNmM-dnviG}@Bx4;>XamP*l^Zi#%3HM0MPNCdyD01Vgp$F}= zmU+vl_P*k7YQb@uk*{wBNFEh5R+S~E5FPvi(CUK1DF7#z6pEL=A5gkg&v9vzegS~aVhcig)@E@Z8pn8-1pTG3 z#x}5gmcd>e&%aMUSa1f$28%5erZ?x?#p36lCY(TU%hNYLlhRd%DvLWpm%GJ~V2n*I zM*h~y2ku;w3zV>Nzg>d(5#skcIE{J&!^~U(Imk&N9>?d-hb8lh`hY1RoJMtH?DH>R z#k>AO4~_`ffTk1cpHu=l&p$(sxIZ{Oy3@y}PLwZ$p^UKI^Fga|cIG9NbXZe8aEW`t z2SC$ILPA{1edV`&>a+p}>{;f$^{-Bs%y#DwuFN;Uq0-}~!hAJfT}PFZp4}5}dnh3^ zg6E~h1Mt`?=MD^i^x)^Gn7snufkb5C3Sp<7|W zXE7wK_XK?!f0Q##C|>>cpIpn2f3bF9M%qyO15?&sM?Y*8O39?tbAD&7c~}xpIQ0s=c{)~L3_uXsZ9v97U-cAz z0z-=z4-bAr9P$;T^J+&9aUk01 zFlh-%Dd`fVk?wAgQV>wOBn2rEq@)|9!*kEI*LvP}pXWJyk8%E4V>p(=jNg4<^}Rk{ zEaZ~f0?BXR)`Fh^IU?j}xl3{c(~F|Gru%KO)%l%ZA(^(KrPbZKrFVy3@t@*eyalOa zZh0^L!36+KaT*)Elz>~L^3uH;T#?^uSL(y2ywt2dapzOuqW1ljKuyg{2_~3QHYG8k z-@*-f{tiYWc!3~Vfp!nV`tjtz?Tl9!aKMH z{Lf5x%x*o4KaDI=l~aci#tk?<48g{j0jt#0S|ytH5aM4AZP%-hkU4BaNJO0TMpvMd zeSuLKYe>nHE=<@M$IF0UxQn*klZ_i7(^0c}#sk@RVxcKi(~YtwL*t-F9W6 z(+{VtkrKwz58v6+ny=$5b_8jwu)J}&TL2Z9=Znxt1ys-{p1T!r{H}N+#~tQ5K~y3= zPI?SHEP3Q8okMQQ0Am2@mkVaqjT47km%YFnvQJ@PGn4IFeBqZGuf-4=Wnr+0FOg+i zp+xcG9g)HDPU^lbilJ)$2&cs3vp8pY#UG39XTt(Y&YTjj4|hRxtwBZlRHD@q|Mla* z{&Rc+S{1)bYTIm^?z=gjZ)H`iW4ki%Fh3dw$&XG&GK{RB&p#8tIhiL)jCOEqfwGPp zmq}@y=J=2U`iKo@wE39R=E}1+rQ4?en$lqXzSl2&r1QP@i%x}~#~>%Zb=&@?O#9b(l+>{rJ%Irn?|x}F$!MBG>41;tJLVmC0MnAc4>{NDq^Y*GuNy#RmS5greZim{Z;gK@@EybT zHQ^Qc*Wkr*h#ZXq_1WL4P#QWuAVb-@Jzu7|67KybMr zFwuwa_7R5e_12e=ggF6Ro{cU~0f~lA%!9Xg;k(^y4*m&|NQM`%Ngpw%TDrk=6+Zxe zVf11EW2sO5#vyKxB7KPLe0N9Oqrb}~CjZ?p4s@3Q#e}=f8{1WoWRW|(I8Fuz1L<^N z9~QorsHswmx48K0>o~CIWYaRw{Kh>f@o7Rs$t_-)|6KTFLeups38vQs-wcGn77Lf* z*}>Qj5=CU?_H)T$q}mM9R)Lklu}J*LU%7W%o^96)S@}1gU!Bx7)(h|}3H~sWoU2?v zNI^w)__E~G?G=zfP6XNNUvT!!s|h_)A2+*K!^Dk+3Kw^NEMY-s;vlbKjH{z|YYU3h zJUZ9A=uI&hyK{A6FT0kw8-H@)a+i6G&n@AEP~z64$vI=IGvap32MZ!>FrpT56i~wW z(L34g)W8HLefyxt^fv)g^b_?oXb650T8J7kp`Oo*cy_StY*4U1 zuCYM)`fH&P1$iU*9ol%Lt7m`dy-pO#U~bCwIS00ifSxPL%dzB2Qy}lq=1Nw;TM>^5 zZYm7q*^*{j|H#{+k8wZl#EFxuw;de_8PHG&U7)^pb03`>=G#%$iJ|0E{ImBy0hs8Y z24CW|4J2ORfw)vma{@UXMenYv!~A%kz+zFXq-as>WA`k`C`0b6KWZNwIT`b2 zgShtdXu6Hj`tIxoy~RF8zqudAYyLgW_0{2@#Q58G;jPTQ-*&w?d2#A+X&l^61M;%R z6@L0{7v5z3IW~aOg7@qva^pVB&_}8VqYpM9%CDAMkV;)Dv>TI7G-4W6i@Vl(0j>Pg z_tQ&!TU*P-hcNypG~VjYCT#%RU_&O6044!vmQ3WJfjwu+!wiWb49+7flZ^ePo{7)oL$O+xnv1L`&B6 zD-NDc#A>9gwwqN2s>&oqUUJGFl0Xrhvtb{e+8YBwLloYW98{BuI+XaDa5wlZwP<^M z!1;YlZCZ_J-Jc1!8$tQPB$jt7OCdTDwX%Q2z#5vp$VS4sOXA*ve$I@yeR zZ^%Dt{p%bbmYv=u!7<%2L2H`Vo7(mMFgTmOX6V{zTcT73rz7XSOHJU#TR#Q=7r;}v zXSQOb`O8u#zxel1H&k@>oJFy67oVFz{Rwds!=aoM0e9CGV}H-kR>| zKlP~!cHllO(%?aB!>6&UU;T8EkMwJ~@8L%bQ`sPTR z{)h;zIMw9G{5$5W@BsqIe-+$cnUTXfW_ILM?Qy_O>~H@_E|9&;)xx!drSPHWkOlA zHxApRQtt?y3%ForzX3?Fl|)Qh1_>6}@B(2-u2c(<@4iuE#2rxze4mUJ?a*^! ze3bzf7!|Og!}S`pT(UHedZR>#&>sXEh0Aai*iXc^2S$J6oQ&UIhf-qBh4@B1?g+ve zWlLiJ)1-ZgUWWE;KvaI_JTIaXj(e_eg?2K7?E~7>F0a1J)`zoUOuCi`M#Zhiq7LTZ^@#j)H)_V%s(M{ zEbgFsKP_hw4OZTQi+SLm6EJvm?2)3dhElJ2iP{951|d*wIFr*8PKT9PbsApyqOs*X z-)3#Rv{9h>DZUr5vz}-)&%J$VngSskGKW6O?lO3-B?1?&moK&Cf>odSlB^_ZZkcX5 z$w5|rl3p;&v|OUJ*P8duy1jOU-a8~4isYKC(OTi@4)ek=i6Ejy6p`9}TKVX_Qkl=% zO$>V#b#GyVZ-@-uiTQj zELbY;hrem3 z%HtBGj)`K-?7XKEDp9y_hjUqWC`1!^m;O{{9E^!##x(>z-9F_=S71eaNY{EuVN*%#_FnR@({Ch3`P0Ob{RgJ&dwRqnPB;1ViQ}b+g=MRze#s)9g7@Hk z4D(0APvZW%0GiE3Wm>?A@`dP3?(0r@lsa+Y*5jfc;Xu=pPJ6;$Z+hMAK+nHB83$1g zHQp=Fg!h!0FR&^xpBq<%gyAn=#R@b#I(qNHKBN{ z`ZZrsQXDZ}s35|^Q`>wl@hDLRM$?V`7BvGaQRzTLi&|c}Js%hT1%_@F{l^Ni&1>xW zP+~T9mIR8CVim(%T;&TA?%G9;>E?T#*8&Uz=Vc2={iJhBcc^pL?#Wy?pJxOyO~L1I zRr98M#!hZ3+X2fksa?9#&kd%RS#F8S|71e>alU66U(fX9EQ*d9 zUSO1*sA~rPS{?#w$fMkxa#Vsl{0Jy?MC9z*mGyv>Iztiu*U-!^W+xwec~APHT+K?! z;Ws>~j((RPKLrRgu)-jpN>uOUv*iS!6_>sUy(O8vyM7ECQcre-8mY|=U@bfCB9U*C z$2EVQ&tm(WC+!Qzut??~Z|gv7SK^KqJ*WTe!3}lYNIruv%hR%*6vIZNO;@NEjRq%U?-Z%%7`*L1dKEAYBUQ1) z)MM@?kFZ7rNc5s5q}H~&VL1;U_=|QBX~S^uBz>3w0_R{0qV#IQuDL$SjSSWHa*fww zApDt0JnzN4B_U!8S8&)Rn3}|knbOy6ObE~}q~>h<_NZ1ZKFr^Bfho#u?ZZqS1lL>q zAhJkXiVEF7+Olfb=dB+%rk>lhvD>sVf)h;q&zSDq+wfSBmYE$eN-+DRp|iE0S?9;^ zv(93tKk)pFa<_!$w?fq36?KrH9h0>~HSQ7p0;Xl5Ay@kN8fHn{fcI|854<BY)MTAe%*K^ywvBtPU0_o@ zil~J22QJ|RXR-R;-NwL#C%WMasT`OUw!71!9Yn$U2hF$?)YcqpFXDKZsgf$9O z?QMxs1|7eZj|L!mKB*k=Cbv%e%jyW;Z`{OE52tx)B&qSe6-7Os3#v{(H-tkmZSn(d zL3e@<7GLw0L+$LY$v3$;r^GpmWTW2ecs#x6&P=T%EK{PDui+r)GLxo05ev6e$+`p4 zy+20ahDW$B$-|HnATx`;mXO+XVp6$(Zex;(Wv=&H_4EyXjmEiY_GSXQ20mJ3L%nMI z(T{H?!TDw@Yu4ji`3+Kw1M%O;MJl4GPp@=`+L{id#&K^-6&Lf>eSOUoviDtV`s@3j zyUh{>g=!v0GtYnYI6(E~$~T=qB=0J>j}z$8TWP^P(kwU(gkbUWw~^7K@!0xVXi8V3r~%*kI*s{=j`>@I#i;y22|5`Oemhtw*&lUp*T%fNInD_#@BFlri&^ z@~4WN7_L+0ndg;9-Vuk20%dKk1D8t&MuYDx=Wlki3#d?7wH~?r+KYPxwoSr+3r^FO4W?pUWxU5Co?jlM%qXe%y!3ZJyA*{J_?OO6U81#0`M9xW zcQq0%Xwarrt1mdWm7I?-UsgVz)&{}+awIQ%WL?~|;DrYD`@yb!CeYGaQPVl!O*4D+ z_V>~ryv*OT{Hc&jm1_I4lO)-ZcKOBRWK-6z0WqJ^qkke01u_Cr7%;cQ01cGK)ti9T z4<=CoJ)<0!(SJIgB?80p6JZFMEuQHX8#BV~A~!v#91jyi<1S;N{EHAp2+BPOpPNdC zZs=EC=I4dk-P|;zG~ah`Gm~sbQWP0^M%|{3rYjRjsI_jGE!H84HkW1V# z1+D^YnkwqGD>B|Q6R%aGt9>|(#@3We%wQVtTbrI?Fs2Rte7)!WR9D+<>tFc$5uZGM z@`$3aM$UY>X_Yjvr&231Qb=396z(8T6f<8tlNvw$s8zBz+q}YaI#egI)@&Xv$X{oZ z))3mh>0_F9b@UERmGdDF2Rdee0Gb=)wOeU3IV&qTG#3q@o@7=AQZCWR-c}jDK0YaI zlOARsyw*zB-?H>`dOwoh3>;c7F{Ggyj#4qw9Wh+w^)uHyt?EY;b@Q`XQuh$s8HV>H zn4FkB%}3XADVS%FDP8@kVy(mSX9a2{MQ+^7gRFZj?!kG(Ylx-Wh5M6B>#ltMkZoZ_?#cU|7tA7QX z68!kq9dDwhRwk6lrVIh%yVJ_dr*ysq)1cY<{66Sb(M|5VMjK){!9qpGz;^PC-OM!2 zeS+eR)4TFKZOxB=e1DhJ{!RIxnW!KoQkL~8kX#FBfA;>%pc^cOHsN7G%Ary6>gs@C zK+-+9B^Z<14#Mittmm27%ewKjkkL4ZP72-(ZbfT?;hE-G?P0jf7@&q*U*GX#EjQLV z8DVBp=LfJ~h7V2Yt9Ue~nWZkd;A|*2E z3op?2Y5bIsWIqw_PGE-wcc`-khDaF*FKl2yRn=Yu-ASZL0HK`LS@@kOu&nVgXAa{rkPv-N;QMex`YGL9tewXkodH-|`br zp5T{TA^$9y&+~-J_r*ZH=!55#_uQxx@g88KeyzjGOucY()XIAMHh@#nhhvi=pT~xz zpOjX^yxysjKS#G=z_SJ+=PRsIN^B+Jq0if6FrJ!YbyH#y!yY3*L%AgKcQ5&M(=M+Q zQ2jh-pk)MaWVNW}c)dL}!XnH4q|FuhTJ?)!h+kiR`?L9tl1_q(@x9;*&uh&z8rO*0 zwGu=2Z>`a5p^q&urr%l-@ni*}Vw|!BIjZ*e!0()&4$+a7fd20SG5vg#;!>E=Kvk-N z?)>9S$t9%V2Gvg=ee-7#){5aT&=KErExQ{tWrR%0(7scCcqBJsH_>L+G2Oht6hnw% zI#sk2HQ5!f0nW#AllC++pa|zUK3ij3gJ0_qDRCKlIn3{8*6dkcJMDZ1A?4;VI2+dZ zHFJEsK)Ye9XD#Sz-nsB+v5|0vMe!TOpurAY?V#In;kPQ1T2IqZ-@sYgr&p`i@!7eqsp+@YIEnL9i#Uewd4b#(yUTN8Ff%lc^4>6peRWN}H;H>JFyx**l z?17EDwW$k62cQva|COo;w`gMOS+==uT`tYsSWegZk?m#{0Q|Q`)HHnhv1>s~<6bJ> zwpxRc=5RGLOmB}O$U{;lMT(JfDo|WuRuFsDK#Qj~POGnNGRx%VrmPtd7#0L%rs*u- z0p&kytn}{X8WJ=t@BLkoRk7XWm&Vo_wZrm0c$G`Wg@dBvUS%*nAG`XJu=F3u!ISBU z=0F&KNxF$q)2{ur&MB?Pzvgxo$UH<_o^M@%4#9&lotz|yXb%`QJgo`BI}+2lp?TKv z!<&OuskfgVAz)+j>x>qSrXu>K+m6M@9Q3LI1)H<@(a2xS%1BkQq}r0MAbzq@v0`W$7aYNK8UlzaV1tBGuUMgY-Bq=8dN&&*$0cb(KoRO-T{7Uzwbh#TKdoOqom4 z&089CE-`_(Ts8n97$*BQng@1FD#~f)M%+FL#s7=DUw?2t!KmxXKq)7Lis9*N-4O zyp+l6?(7sl7v2d7f~RZJ6Niggh|k3z7=)LtO%p=drren}B@tFTg5ycC+!z>XEj8dM zU4tKb6nP#?2p-IA&C~QcXrSRH?&UQ*dWP&Xfxy%mr-$p?gA3|mHvZ#SwJbL2fQ^tdbQ+$RY$#Zn|?{` z8H7hUOJTSd;QM+TL7460Wr)8#co9X$-CIufk_9D_gzkj=SD1BA zdWOUkKVTJsw>%8MtjHN}p>Z+1o;VX2VY< zQp3I>dDH99*;v(f_s&#*NHO>>zhPucBdaK9Ssgh27S2N#q`gTI=R+!W-S!-78QusU zOLejSlsHZ@58$Q^#1z@TgU{7cE?Im?lkt zUqKBWqW>nz;8rF}Q`*#SaqgnsXNS!o7K*jGN{)Y~8O1}g!wsa&rSx{{+c0{BHhWjRA!$P8 zXPU$wY%^h&R4CTGci421;Dq=q`PRPL8QLg_vfd^^j$TrdUu2N)gDLRf!MdA8(a5@s z98XLlas@ZPAKnbBNTgy|{hVd(X?|mUwfV?=Aw-5;sK;|vz^&C)<9w+ms(C?RH@!d; z^b@0};os_9>CZ|YBD8I$36JgO_jT7)G+Ir)!nAMP1U6S_UtH+uqC_S}!CSw}#q4Gg z9+EM)x<&|>?C^lrQDTl++n34uZvatzkc(I6*gN;d;M)SLVlByL$;TnXdOlmj#xN3s z3jy)1sVsdAVvXVItgr8)oyPb7^?c(apYPhq)>1IGnxFThLwN0iW%A|6ykeNS$ejtD z=sbW$fW-I+OT6?1(#RcGsTFhFBA80S(`@1I_P|ac6oLU#fQta_6IXmDrFL>oM1aU- z=tTtUlGL+TtPl|>b)4kcFj^4oCjkueMU22&O@>$0rpiNvb5J&p1;iw?-y7)0E0im%&I@n}}1$QG%3P%rj#mOmpb?hCE z6|lWZHY-4P(A^JSF3(a$Xg-W*KmA}nc^A*J+GG1GkWJ2Va!4NIVb%C~14Wy+k>n5V z(He&iAdI=rma%Y?Mtdg_N=En5F(yF!LsXtr*lCXWE zun&2$#Uw*iGT7j_a|uWZefMiR>%!+Mz4YW(NNV&Va+@u%bM)R$J}mX-pZp4v4f3kb zTkkU3Q@ftPJGnHT3XS`x@v4Gk)i`TElhBW!tzf`l>QRA_>q{(%PC2q}b9eZ4`%klD z+pn$ePp2PqvIi3e-6|5BRvj7tZJVHmDWyxPu+n;1#tW$(CQFI`B~&tjde`_FaMauq z3S)5>1b_s0YyVEF-!2EmGm*bnAUoVH{P_d-WkJ8IN`n7+SRSz-P=%as(lW2<>OKcu zLB#a5<-ZfNz!eBiMC&7vRP^@Q;zDQ&%EwpN4^u zdd3yg&+J!!ycNddZq)w~7eB&JD6V0U_ zfZ8s}dirAI%}EdF#UsxaFIxfC-)GCfe63zCIp)I7*04bg3Y$uKm@W}%gLVxb5&#mF$SbbPZT9!%&uTm*?ccngN7pes{VWrWY4^K1wD5P0Zuu4ZK;zqL#?yIIF@(iL_Jr(y^9U zZ-rk28$aageT|Z_5C`Ya8$}nPK(m)e_;fpC37?`+Zv#WuzvE0PkQ*UX50aw!5*^jt zB=2Vr6Yz%9s2{9@C5CQ?%#d=3R`@VBj3Tka4a$OCs8d>_QD&mBv2T#j*tCEU?=O#2 zA6f^Y1C?0P33nj}-R|pSe|-j`Mz5|fLNJZ$&!_3yzr}|m5=x;d9h6crIg8fM=lXi% zy@@06;{0IeOL&;#!OVrcye#$oqTnL9qNS9} zg6s@_-3!Yn_*x+51NNCt7dC`sCR*F$6FyDgJSGX$msj9W!&aC=RW;Wv>*n5+llv;8?f)LPWSm=U2&MWcZYWX*7khot?PutUtye&J)) zA1&JvakCo~!uObO0oJE`S#^O%eE2o11YhOz@;BwaUAmfPnUX9)aeZq{C+1x_A8=OA z0A#LicexT2h^38-cCdqS(choxY;yFDYh{C<2FCwPbfbnU`(TwsZPFKNAa+8aAs_|M zzKiM6A4eXPm1hz^3XTUl z7oX+oG>SCc1ARapdH3M8X_V<&0;xiyL(5}p7YOwq@r!e3t!Jh8d=vK{$~~2$Jpf|4 ze&6Bp6&{_^yX4=9p_6l&gCBsbvhC7myO7jwD7KVq(b|*44rh%xeC3>A&D#h4=Aq+_ zPVu9V>E?aa@b^Q^&|Xgyh;bxGbE#3-<9+kW+EiW1V95JJWuj zGdH>xJlwu03xmRgnUJM4H;!MPYy8+QI#K6)Fg>>caT{VuD7u#y(AT@)^rfd?EDTpy zR?t4TtjYj+Y$?Wo25V(a5YF?u-Zmstg`$aTK(LmjOtfM@t^wiEIx+b46cija1{ejCP+9hE3=>x=`7@`3f?WXM;Ykm+4nR-B>Vm=kF)8 zvi4jn>VrOjRn)yC=6~i9^GMmt9&zaz*mmApnm%p8z$QKL`oW5?)y}9+s4&0cz!=c! zFT>{U(g>u(IQA-jg2=Ar(S_5BR6p8Q=b4!lWl=2WjnvPpNH7xh*hqJf$;ASe01q}4 z;C*FhA^WOof!{`;1$9GW@%tuHUqcX#87KBnJp@rA7ugt7F)uC20?~O9G?^i5ypEo# zK{B<8QFFoj&~KIPWQ7k0To{Myw;-(ra?krYwCE_BT&2}SH}(!w7^L>wyCo6rD|Fw4OG*2ot&%-`)2(0? z;9-D;J&`qRH03T6zIKoq4kW<2?D@FfztC9ZU;Tug$P+1pMdry_$n0D03!3x<9*U_>+2lKYE## z$GxfRnBu)rUPMH6^2E`VBVhXb(5ZWt?zPg>D%Kvo0^GPJ%yBDU$EH^V{mWmKY>(T- z>IZu9-fHk^u^m^3rFJ(n^OC^rgZXy}>5c(_hiQzDrm~k!H4lvQw-P08E~eJ*NG0ce zYJWwq>h|OT(BF(?l5J;9;6pI%IwyKv^;ZP*{q;oco==f|VqGBP3Vly#fjt|-1wrAk zg5T1>o#ZRO{}oRKw;%qQ7hvmq6^!ss9uti-kV0d7S1n}BT(IY%Quz~kP-OqlL1Ftz z+vBM`_K>;Pr`)}YyRG=#&ob-IQny$kh1t+6jJ8e`@+o7cj4RN{lUXRXm#=`I*6o0* zPna(;8hg=h0(r7)C(grzf@%c#Jjyr*y4_amA*)KTUTg=Nld@cj%LjEWTD$AdF z^$Nm?_P>(j*L?h`J0IoSRh(`D#tFluj4c0fs>EBs%2vfZyW0K*uutx)-t~wKIFY$W zNQ?~cyX`-cvi)%xO zwaw_M2vAE})DBH6CFqtz{(y}0XPk7$YgEQ=Okyduz_=indn|I9A77RP31xwXA#~IW z&xej#X6EZsh{%3$1g6Ehtb#sP)3DAl1!%}$7VuQ=q4FG zTquGmy~%oVlOjqJc7Gzw9p&Ea8W6pQX~#=oK6tAAy$s5B5J0mM?pHbnM{wA_N2T~) zs#d#ZI=4KES)Th;-s?P?lO|meCGu5%K*!88yQ&XtV;FTTC84zMzurH`?R^2n2JfiX zZV9Ec@>4;>fB{kE?Rol-7C_w{6o4g%4_7@3+U2z=udjfRp-@?K4=cAQxk;@pTOeS$G#Gx!c)UH&8tU(?_wL^B5-sEJKoN_H% zW2M|+qxr;rxTj6xwhLUwmB$}rKHv@5{}x!&b3%wjZJ8$vfR6OzXW!xN{O8@5cz>Q! zc~W2Vc|OsoQc`HoR~f1=<<8gX$c)YLm;#`bRqm367$V_w(Y&^=cmlx4p;OOI+GR~( zYq`2w^DWmo$ISDB=$-4HtNP*+cD?<$WFN5kWy1mnakCWz&CEMz@6pUdPS95({RVtu z35ahYXm5qzBC-w@jWm4LyL(;q#dcEEt=YF@856r|bcV)2ip|_>m+Z*??ICmDrwY|9 z_bS1*Vj6_He`~z{{=xjvHC8+^^_S~`Gu9B(Uao-xJ$VL2nRXYwy7lh#IIo<2y{)dF z=qyQ0n_PXXyYX5#BR22-N{_s?(b%%JtwAs4LzZ+_T!2i*;fu}LxBJRk7Lo5Lw)bQN zpMpBzp#{~jLFi}JHQK4Sm1yRh7){9F(;9I}?`9btfu&RV34~ctdJgb^75S(16#UCy z`*Y~gHY2isXws%AF|(>X_I3-vgb7kl;Iy1QbZ~;2Vm+GTc9Jj#i7ol4d#TW)mX4W3 zMkCtZFDj5vNLTaAN07|h*WzUKtWUP9q#(qBVrlRV2B^T6!jIxtw^ zZJ0O+{{IFZUK~-6)_`3})m%m;`nb4>-4JB@q!wqe|w6 z&8j05ELi3pnbo^QA029dl(3Gtj*(wIJ`NC7zWU>fOT12)%=|Q}bo`ba6xJH_hYAZJ06uPD~o}x@PtQ6-sO#!^4}j)>0CSqX+G0{M|JC^t&%Y)_mkTz!zRRO(2!#j9%G3{fL{5!3VUxC zv*$9S<@;|mGI2s=tDwak{7O)>9AfE-egeYVZF{8pR@no*f3^GIFASJZv3qc)h|?kW z*@mU?L@eIijU!dlnFBr0Az-rW@I@aiAy#WAY-wcxc*(GC>k&~s*qSnc^bT>4+H1z& z{9+X2%JI9jDbX=J0b<`=2qaEwJ=Gi+X=pwBKKQ&Gi5oz=CO-kYrCOl`74viu9iF+D zy4!GhiEKr6+3lZts>pvh4|_R4IqyLE+vnfk3pa9_LRQ-F?kO-H4Rh1Xo_K?$r|hLp z^!G-qvK;uni>2loFf8J|j6%WQDR*$h1kw$>K@gblSUA8){XPS*ixU!AK-gq74fglH z%D~vbR_Yo+(C%xSCtjb*MNe-PXPs@rT@nJuv3ZTHjXc=#xE@}m^Al6-Mwj0UzuHB z$_3;p{=+N)AdJ85&Iyn^&}QO>&ocj_#+iT~;6goxWAvyTs+ zC4RuuwG97-vlrL^Cv_6}r>_6Y_WVEo%YXYnZ;-3!T)FHVD$q(|)a*-VIz*AI*6Kf4 zrvLMS{^w5z;tfBB%f*47m!*`r8UQA6;srI|Y|$`n>y(s_7!6`7d(sd$bMAn4Q*3@rr25KW5AZ1Wg_AwaPZI|jSL8A!9%r>UGB zU~JKJ;QH~vaN#of0>BE)_id6O#3(07l7sj-8NXBR%^$GZ?XZ0SHZ_ww%O?iWN$@}? zv$A=s+zROPo*id;uRGX97@AoUGsJpkH|bU+K6^jigdswqm~ zZ`_axjEK9VDEQvFr)g@SAQz^G!HVMdxR-SR#hwoK^@k*nBTcS5k)m-boNw6NLkQj( z1Zw@4hZ(6iXA29T08N6*XrXcd>1}J(g~Rvc9DdCyinDM9igmqZ{M!|PwlLIfHJns* z1U<~PFtO{r&si6^CdN}6)FoN&>1p6Yyqq&g3_v?f@Io_x7ZN@h4JZNiY5TtW-d06P zI(42y{3}uJqWQ7&NHhmPf7RdSQ9Rw9)vrn%z$+m=&I*mPrT?Gq4G^evkf(Hh7fd`r zqSMEU_yDRD1eIlM>W83!(DFVM3`#^XhV`zNLCx@gJmW;KZVWKT2exH*BXl)e z+;zBtcn{Qy*0cq)|H}!!WJIcCJb>r=-yKjSKYdBe8X(d=V(Eyn2#_+~QAcW@0|{!& zDm9eINC1zqK1SLDtFn?jK;Wx66fUA2t^*6L-IFL_Upk%nYOBl&*#B~a-b#~pn!K>ZA%}F%U;}o6YZbY2L5Z6q^(oy??{BQ4X_lo zqXqM{Si(2IznzXUMI#|T=%42I7s26nB<`#?e59z{ehG*qw#0_^Tp3n-Aig&2va!a1 z^V?HvyP5>9GtR>KPMY>PAX#%4ZC^k-{56cO41%Na&=oktpQf7|=#RP!N1laE3|vEP zK13W%aP?7|BT<#dKp>DNaynBmZa2iY;In3Da+U6T3zVGNWl`=wLnP<2z4vS?#3NLu zu!l~DR7=eSR%OF&RGcfbPS}s^KiJ_X8h9v!2Q7kYp}BD?;eWZlHIWAPZXQ2C&i!AF zXj4tL*7M~xK-Q`IgKfG6j{C?9cAzUOZ~H6lIvRY$XPxDylXDe8P(!1W3)7lXYc)W+ zProS1bctvJunTXZS^(_H03G}BTf?+O$6Xpk6#y_04+0O>@nY2wY4=HO-S5qf5dm&s zXqql|y@Z!6j!%Fl&xo!tv;^qbKXcf5P%6aCCnG$7JcWoU#T$LoWK>|CGQ;5@%{sf* zHl&uYC=L&4W27`xo)6J}r*pGyyQb4$%@ihp_WAbY^@ZaxxW2vt{Xj8e(W(RnmBp38 zb9k+M^$y_D3(9J~YH>HXDgj zA<*w}}xj7B$+He8>YoX^O5q z_J7Wpa+{D>(=(q8qh^@iuB+LcB-v~CJRs%aa;rJSV;yNv0l4za}Tkh z^rS;X;y0Y>LK;MT^C8HZcaEE7h`!S_io1A$3lDqX5z~^m57M&i#VfvXQc3v$Qj9O0 zR`0MA-#o8RMcQ?UY!3SYWKss-PtSt&IwSY*JxHa(TM{xUedeL-C#Js>DymxrZMcDA zAduG0*zC;%Hictk%8RAUgmVMj2==6ya7@tYmOa|8jOu}Zdn)*X7Ld0)uL$|3hWZ9= z(RTNndslJf$T*Y%LNA!cfO&_(-U*!ECWlBzuLG1Q!d3u6{$XE|;_bk1un<$XIV&HW zG7HG$jNCrwPKIn{3lYU$C)V3)Ub^vMK{#6q&hZ{Zp1F{c_n&%dU zvp)dbhW&n_YEhPav^Gz^7tVMe!SrxBIDM?``5?edjFwA1F7`XE&mro3;Er#}X{?@MftvxoxvEiy$vptY zd=Ai!BSUqX=SwPfy5p+cRw;%K0>OBuQD0+_{u*h3NHPpe1g#EX>!|N6+01}jL~$CY zsU#uafN2c4jWb?p>2%#a1FX6(gP3*6cLfXe#sygimO}zj^~gcY6l>TXT;eH65=P1sEmPD8Ilhj?()=dmCFh@ zuzm`h6lzeMdnvmEztSY_d_McRmY^!Sd2DC|_M@CIn8n+JV|NdXAKkI{~L zTFqE7&-O7Q#vXxa&@|oy){Bt7Hs#EID-;VGnz+7K2VHohzfb1w*kHXKdGhV)y()}u z)Nm~LP910hS}<=VS;p1Ui1v)LPdzYyNuVB9D`_AWE(lNkt9#4Sb~V4R*yvk8L9-&B z-%D9rI3`lNKr1JC5a^U`2`7pLz@UxHwb}PE)O&^QMz&=|J9?caVMvOOft$Jpu6Y#= z0trf5i<83TD$QaCpqjCVL6xfs{+qFdHpQ`^nJ>3CtTxYGMEy=^t?Uod1LR6DWGr>5 zZL=$G%nU5uARy|5%P+Ah`d=f1a|Jg2{Qs6>>Hd{s4FjGP(4xWgjIY2xl*(i*kdPTm zaAvp1)`K}h3?LLL-FB)ae9@346ZWjZX*Fd!${qUFFWnwNFCEc|j72)iDEVk1k+=3> z7!MWqU4}?_-Wuxwol)#HMqr4ujK5rm1;9QvvWSsFVd3z+$p;Aa`-+0d=$D6=n~y>} zNVYF!`y{bYZDY}^l(?ut3(7{=EgMB@T7mI>5hQ30TN6dDXB(LL=dzd7e<4>$l8G>X^=gs;2XLhN-Ecu>xfip>7<2oVa10}ykLFzF<)ER z4jpB%T1Xn>`Un&&&&oG_AyeSyay0ZHELNin-U!K&Yl?2gSh88q@`z#S$mR8DN5Rk= z?*Kf%7fHrQpFgG2z*6)j$jQV0f;bT~TdmR&&OP;uj^{!efASv6{=fwkNtRRbUtcu9 zZ@31N*D65<9W4}AXtiy*U~dsU!oF!W*$QNTA7oP0+k<>ow2n!?#R;j!7iOtZOO|20 zC1jD4S)0LT4%qVY5bG>^v#50zOALq2Eo+_6K!=HY>P{>Be4D21{EWARhIpLldi z&)?m5yLKvh&+4}aEOWNhcck<&LmymXmAhux*S*mOtEH8|ZWe4)ekX{0Zr5L38o#7U z8_rc7w{;1UTFXa}WTkIlr$@xrA8tjq5asGaZEH=csK?a6JBT+;b^M9`m*#+}eXXb` z$ipf}CBER*3HkSi6%fF9^8_Ho3=%$Kg$-anIr5HzSl7XL#?w zdWorT|EfU^P5vdMxr?a>>cmD7wXX(znA+F z)EnAl%zF9uL8$mvz#K8Xj-zP3_a)o&wRR$_X(|-cJ$vVR8a1zViN|9T{4Z=ca4xsTwDzzU;7V-!G?)`%qM9}@> zH5gJh*sShn0i$Z{!11TgOP@%@n9tz=P$%BlL*R_QE*TVveSCYhZ>Z6UtlAaGOXHsi zm2SiCT3(9Fx6|$BYC1?cGsu$D_Rur1Pw1*$eFt>rS0ZoQ#iRvqW48#)l(+RJ+r?N6 z3!iqWod;t7zzud1Zwt8oMFC|xkfO!TRCj-q26j^_8$iA<_pN=*m`QQ$O#aV$0>{P~ z6Q>y{Aq%v5BgwGD9B{>Zuve+9OFs#iQ5O>SGrLt`k6&y4U>`v>5wi7=|<@eNdf6@#0gRgij<@@C?OyvtUhW1Ju7zXN2>_kEuGzET9oJQ5SXwv?1nDt3$SUPpdz0S*l_m%Ljfl181%oXqCO ze?ZSR3?cM&GULxpz~8;;Z}A~ND)|5t1g(aDxW%{tgc;R-LeImZXK_~uBS5cTEnX_Q zEl<)d1}9hOh5tw-UxVGlOiHT#jq%M+IgT(`D?@jMP$vQQKw_XLkCGh5rEDppU#hCw z!6Zzh*jg35<06tyu_=nARh_zbCpXP=xE9Dw`t$)bkbF#2xH_nN$4gOA~=+W?}Icn#J(NAQT3wka0?{5F@g1*>|^va>J0P^l60R zxRJLm0DF5(+S7{0_)f=J|AJ>lf}3UGd^yfP;yk}HozEn<_DF-iP?p(6(@stREk+{*lb++@s za+q<+7rDs_mk^`?valecW*AjSo&L(PTjYa;Dju0eU zW~Y+R#}lUi2aNQsE%e>|o&?xm%bXTEch!|Os4lzxibRoJ#`r;6n6T%PqBqF@wL2kB z(|gz~=$ArTZ7N!Fxp0`pZ{wO!V^3ZBCg(!AV7(Q{NIvSjQkz+*XLphFRgt^Rt==0q@t#f*s^t2d6MQn$DB=H$Co%a)*%UO$Hp*BT zkXEbkiCJ}`2g-1|B7fHooyPzKW{%VUVlBv#PKH+cJ>AY`705V{mY%6G0KfN9LE7t@ z#s^?ud56k!6Pt$fi_@MxRQ$kh`?L&5^2)cf*o2n=VB(h8uU_}7cod4F8iuHft#8R; z>BUEz;|nT1DlG&537~+Ie0}`3{^vyln(N|14*c{-WV$eClJ9PfMF>l|<`)2h8ixFAss$#>vN@Jw z$_e-44BF(jZyAkN#b7ex%5#*3A$zDzUUl366w}GzN@aMRCL}A(lU^T)aM~pWLQGN7;p$a+-Ou*?34(Zu9BVMC-nD^ z#22YndNXhavc47PKQlZpByQcV9SksA2XAcLw@e!_n-?xdRq*@=`sDuK(t#iEK$XUS zjpKGe*U?>S@WwJCRTWyQEHjQ=D9l$x{;36EXY3g=!bim2ztfZwA9j2LJ1_MFr?-9f z5}x(FI>2u5!8M7_v~*(T*9z$rv4=Sb>X%wY)=WU5_Tw^%6UNni&giG~ zQnQ>s;^pccpmU*=8wFQ^43pT1j09y1cU+sqi-QLQxOfe`9CsZr(Xj{FAw@46K}>@( zrrM5zf4nbAwY-lkgK=)j1dw<$8*~{L{NXsi24XzZh_m_Y6H)ayECvEGO!FX`)agbt zbF9vt7lu%qC_=1zspVKtt&fT~9tFxrmUqEK7OT08X zlu;a@F7bEAhtUi>-$1%L4w%g@jG*wlLQm9<4WZ;-Sh#kULn-RbZz?GAnAIlbt!HJ^ zTJ23v=4_S8&T3{$H?eva=vC(5+$}FeuwcB+%^*MMfnfgMA5YD_0fuW7z$$~mh@(;n zZVS79%9{0t$dct^gsbAi(nOt~SJK#&2Y5alHl=#-NgXDv`3fy)8ud58l!~2w0L-Qba2*9yYn@LYEJUL|^`VJYX$~^($%UPf6$R+;z6QU(1buy5=Tsb^ z*@fvciZP6^)BxlRaR!t}t02*;oFVUz5iK@)HzmdmNJiqNy&xpMD+a%=eU+#hVAWje zmE8#K5da>?1oFq3KtOtdQQ2i6WHg$2vx2FEBd;{HR|@TrJEsIK`DC$$F*gqaeiaP^ zgw}fO#VW_=BAmue#$%B@P>i_d;HSDSt~F+v>5PM-_Mi(9ArK@B6Aa@ApS-Ak1HY7UGB&O z#w3NM#EqjamE~JmI;zA zW0g)|zfVE={b8BFdx-zDP|zxAc&Lm=;%qN?Qh#nWB{4=!BTK7+)`(LX>U?Ef%~oIU z|5!pqv=KAZEe6#UP`4SSCR>X3V^-H#E?sPhUEn_NWKz5q#hAH#XgdGkn2Hcvel=GDs2xx+c4XO8F{1_FH zuT4nr4+dGZNf%zZmWm7?cN*uY4NAZ47P_%C+&%$2dC$eC<~1(WMJ@2=zZ_M1i`YD4 zA%s1L+6uY?kO$9>ULvum1f>_>Ee>PzSrV99MU%P4Us9#l3G_}|C+*XpwP%G!JihOI zpIdocbuqR};(dV`RTYFjYA_7GypI?r#F^9phSc4 z6kN#0tQ@4N2i!^v^K2B|z2RDF`Mfn@cMDne&U!`LtUzi$nR>mK&por41wOf8n0m>5 zGDZnEwy0A(FLQh8B=lv7mDiEZ2))^blU9RgqM+?HP)RtXQpZ0gu?jYm?3vgbkR z!-gpwUxLUwjh#y?0;#HythKNQaP|@KCaSYUBGLId8s63PQriPtQKPLfX^gc9XdHM@ z%lNBPg(Suz#&LCs&2rzJ-+*qs?;-VEd1dp!iRk=BAn3oSiy8yXq4Tt$nD@npusHz4 z|0qGFv+V@2;v?jAE`g`_`=|jzG@!5TJ#{{yR)XDJ-(ok*h@s;Epl}h8zh4&Y`Yo+J zWVR1%TA#`+!yh>owkq!I05uTzp=oqg(MLzzJ_UH`i&LF09Q@IJ@DkcwrMZX9H-U+q z$7LPs9lM6`ZtJm_&( zq}Fhf&NS7hFyl1!H<^}i|N23`lYEG(Qyu0;2!@)!k3-nFq1$3f3QhAY1Sr8H%0mkMl`(4OYrjVnP8B9jDKV za9f>0Bb5A#9G@6gm?x_4$PSt8vtDLx{Y+RW@1^hvBb7k;mbm^~Rid-g^o1t`n+9+q z6@F}SD`@~EAN=TQ4p*&pO2 zjy1ufm0mjZciK;}^RY?|bw-;2{5Aw;0;_Al+04qyNIQWS^!KOKtuwwaj#!o9is-7T zp0E`B+W0MsnwpIu{zu`Qa7FYu4N#HtQLf(&aNL+hlu3qwJqk$Uc08cK_OG1*8Z<3f( z2Bxj+-a5De_pso56J5B^lQ3q-Fnl{{aN0_h+Wiu(@$>wp-jv%G|B~tIRe&HtR-N`# z#DX7S&5D1UORb(4B6^vF(b6?~VK|xfSl-fCpHnKY29PnyAyINUk=>u0Z>7RHsD1=s zMAsradZaimJz$zGvt+GMyUUh4rNx=dh4?Zip6amLgF5mK>%;JQdbkOrWgGa~?Samq zAt5x03?$7sV*>SV-p0N8t_@tHhn~@N>SvxoDDC^2M+UtzJIQ4aG7OHpY7PdH{ey@L zIgKnPG0t2rZ+i>1<;c{DFkd;BSpRzFKAWl^!*4@xSvhhLszKAiY5ebQQ6QBIhtT@) zr@HxS;MToWPQteXE>m{JJqx19G}-FU@0rlKVRV4naQN~F(mvnPB_Yz6Prq%Ce4tG? zpz9F-V~hZG5>RS5V@-72uID9!VUm|LIb zM<@iwVm3wTJGX)9MuF2hM@$%gLj?p!^`&Q&Y{rxxr(>U2i4rylk$Q;KeQp>%2M-wv zF5aFNR3mGDY#w}UpuQHLVnd5k{;fsMUJ1KgC7}(9HV+iekMPLhdGe7#vN#fbFq>s(rK2HP!gF>mT(VlBOi$*N%d`t zsfo~KD5O>SWa9g)DARP*P4KBt4;W~&<{C{Byh|R_d3F+~vzy(!?;5o;_>GYG^ zL5?>=P!sF-Z<&V`2@J{UMs`D05Q~wLf`-l?Ii3(e6N_hk8>7NLfFYgd-|1mwLlq%L z-OT{nW3DdJQ4K+)33|JZqKDibAZa#Cp$~8dke57ExD#YB1Uouho3&&+%{IZe>sq#h zsRM^79Kl)|5QOoLl7PwbSg8m=0)3n%l~B`;NKr0x6#(9P=AgR243$OQM?{Y8K$h^R z`c64v)Xe35+^p-uYsluH8BW(tsTO|^`Ka+`=_ zQWWpFrHUfuqVjySQ$N<_j_p`C3FhJ+%VCx*eOtYhM$3P z>UtLO|bTQ0AL!n1K+4j+()|$i)P1zmefhC0&9%daM9PG{yGt>%$y&< znh@sQ^R)hH;ijS-76#Y2i}of;qO$UXFy>NpMxDGPH2*~L@Mdl4&0zm-v1+@Z1M?*O zpG4LKU)IgX8>l&q&W~55K*&PioMB}gM_0XBq6?KEo#Qd)Z>@@s_i28j3c!+txFV^f$%2W%(GP7QiQ~8IsZ3-L& zH%B0<<3Xx+R>GGm8#a>avPQ1W;*w~7&5d~^_)$=Mdxcsm^EU^MkBcrF>g5%+2?h#i zetmK!qH>ne3(?P9feY!h_sbgsrQrS0BlQc$>u16nKqX@RnZN8QCA#!xhJ)RehoOl< zujDeGm(-RhX`k`nlES`t36?z5pa4;ISpeC;M`k_$$>o<^nsKsFHfwJOQeq zy7_%VBIpKwOo_^fg4-E$A1K047^}hHVcLmcQG#ij6waMYXlwn4-5aQyvI(j6vA+w0%a4sazKsuzU_Jb z9{@~%hi$n3dEKp*hl#{lBiIL!r%HLD2VCxlO=5R z-j~oltEUiPYtkyio4fx3`-8qNND}Y!1WmZ)_1_Q%x>7K0Bg-!S zxt=G%j5pEcfeKc(gIe;5$C?6wcFnx|7-OeNqafk?fA|eoe={Ch4E~FjDIc8En)pXc za`*^zNR7BsOqAU)-EsVisGD^ze*u*u4}l@UK8DKv4nyc=jX#)yhrqDqaQl9iYaoybICM^En{;aIgzhr9Q z-@h>ga)#^_|3muzAHLE5`E>q1;*fF+DzAlt8z=sM@iTl_P+azVC`7?&ughQynK8V< z#OEiz^sed}DtQsK?v9ftr2nt?dyA`(?Vpvn{}(*s|NgkBg3peNBZr6YJ}`MGygms> z!^At2d=!7I4xTmXm=J8BHt*3Z`p07`OZ`^@eOSa7+i&L4vs&}$CKC%|}qZ6h)tbjZ>6Y#8hq_T}#y1t62}IRHJ~+78mI zj9sDku@0O?M!hDYjTGS^cTs6acvAO`aa9teY_s3^nzsfu=RI((QTo`~eEAzHqk@V8 zPk2HOv*)uQjq~8V%ET@vdfUZB)$Fk{+YB~ajwMuXNFTV(FX*+>m!XeOJ0iA>clgvj zsOxW49N0&-)L)m!rYXF+Kc5A}S;M;_r*|P4?MrB{fzn%6>EA*gn*ZZNb)*5OO#}V~ z3n4iQ7k1JPSK%18F-U03Y6AF@0E(%{CyZf06K(HOJoE@}g1Uaf#lf%21_R4y^FW}0 z&H`tw(ymRN^RVz#eS1x5Be-AIFwvogtGXHc>|>6^1%UrN9|lT6%lUNxzY75oc6-5> z?>5h*hGJ;k97F$H9)5WjFp=%vHnTnpRaoYD4RD;y`)3aFwp1*(gl;{Uug(5uTuxdI zJAgzJ_VKJ4)!AW}p};=>-scI_Y7CHq@6|s!cqxS(ktRM92E&l!5TJPU3LcrV7>~Tb zLh}+#0-vrw&YUz<1;4|>-Md9Y0s8?Y$5658#5U(+#dFY|l}H5`uf=AlZqrx62&f-q zPnqw4PQWb45AIsqf7>3&X+@zY__SR=vt6!CWX7#!XNWNLOd%2T@a|y{)!&XzV54`= zF!MF(lGK@a=n?;iqiPJbz+k?7Ah>=9QjT?q0EeB zYYfsjh5^cJ11WUToN|Jzp^CXR&>krSm8CTSh+~+>y;bMKeY32mvLN~QQ>OnKAku1Y zZa}#s+mnBNFg8#jRxv_(pfvv<*HCT*0DBVke1Q(7$>6Ky*dS3VweTR|PN5VZ%0Q~q zZjqsBeHxjNR_HzqOmKOe%9j{MHn|R@$c^aiBE|Ax;Jd^u#q%<8{2|{l3zqh6d($CP zr4H)5zTCl5?;k*R>9vxAWP#8>bMw?bxdZJamn-O28S!E1`0rrG=`F9^NKxrxJN()X z=_1>^vP8i&5=v6!{QR$?+X?%hitf_P0t;=5N!2ui39uK4q3u&gZvXjJoNLHawzV4x z$Koew0Y!wvP)Z%xOl|(00>Je?$}q3%B4m;;cd00ntuY7U*WhrVsye<%{mq+vi&N`2 z++s3BcYk!$!X(31?>#1 zEf+Ewm8*zg@S@m*e!1NOH!>h(#>|T#do8p@jylN~vX5H_B?$Pfkun$785o-MTz>?7 zXJ!a0P^CbMOKX9 zef!IMH^#p*@e{h&K?kZWR)Q1ydM_a8uuTn!1#+hUbTM38x&ghJ z^e0P^L&x$7Ba0uCrAeu#GmC`r?jY*vJ&O?PSZ>fkyg`x2ua|H2Q71vEm7S_5^mx6+ zLzjq`ykm#>dB$_MNCU)CP`B@=dG~-0GrRaTU?;Q~0zLw%)z&96A!C|URacZtl>x#; z)oqTvU`H+6^7XM(>bS^1pPpabTZFVUrw_#*8gx%S^wt3Pk4hj17M*G)Ewh{4@7PO) z8ITJUl9KPEL4XQ~r}@h@(P2mltS$xYc*8)G#G3TKP8Sd8blJmn)|UFmN{oTx@I%`Px%tg;g@xUyL`g^fXG zR)|6^-$U_to3YCj&PlWTu3&9DB+-tXC;_^F_8Hsf8bfd7B3<9irtDwuKMTzQ$I?*Q z!bfnzew+JykpEscX$Nym{?s-|kAiZrK*zwk%#LyL3ugKcUT;Ce>>*Sm9(39=FI-sF zO}KytwY+Ub*8YsIe*mtm8jY!2i_iV!R(HV@D-6yx|Fyuv%{@!dZUF~owLxQIF7(gf zm>TDVMX<8vJSci%SZqc|4;Ry^RA_=T@B>fFgKeFfWwYt1#cMssS?#H&>{Kh_!&1{tejy1?$>YH@u z1}>C01fkxI^pN1O>1b5_&v>zB%f;d2ln`a9@2&JLZO+-G{=Nk+7wRoTAC4AP31c&Y@Jj?Ys z#BNJEM;9JbE)A#Ci4!Js;YvE87jexpfu=ivIytPzK>B~*N0*(re59qmt1elYDheYH zpE2CNB2s(bs+H1I>O7C=xc}zG(OB!<-KVv@HzO}2cWWZyB#$gKLC(4q!bwk3I`}p?lPhz9^X~# z0!L+;!MfE>x5NeTNZBx^!h*ek9j@N#A;%xEc-LJ$Z(wlQWO9}?7*sibrAPKz*-5fza^xjPw9rkXa(_(<>R0dn_r9#e{8V)rvNM8$2x8(Ck#; zaURI0w7+t9e!d-hw}2N|KpIWJI~O=fGlW8WZKK)wY=sKvXZ>e+Tpru@Q-pMl=BH3Y z))~@Z(Hn_AqadwT@Pt5(?K}^=LFcUVm9)3a)yGQDuY{6RyJ>^e$-;Ax<>6`%JcrqH z^d*hUgE}6k?dKab!24liKkspTqUyi>D@8ZO%lKx&=vU~Gut)x@+Q|qI0QvHp=tFXp zOT>IV?ZdQx-Ne8Cb-Oe@(krwFPJ6l1$f{q2Am6+D)!fD{FH~Ay);t)m zmQKTKpSkpP;+#Al7}8+|)E~RA<=$d~c?ginUp(1D2B?S*iz>Wc++_enpmgT=4oz~H(x;&8g(^CZ zFQJsSGHa*EsC4Jn$>Y_^N)T)T4}c{_VpGN{cl?=ZzxJ_zUSxbIrmHg1K*6Ha+Yb~` z8FTLu+4e+@TPOa&tHw}SORt}0CCG}xA_Ubop9mSyUvLYx9jf%> z{F1ak`uxgww!bpgI{0}Y!lEW5(seFL;9<+;)ktY%aSH|B2E%rutZu&mtQWFGAY)T^&gu-eQ(e(Xo~Ns#c{ za1{fYXIW31g+e(l(mC#+&oWOFuea&_jvg0@ScI(ONJk4;eaa<_~A zmzr+lAv9WiZ{*MgPiDfK@lR7nSU@jeWb-+>fxQkp!IUiK;#PJCrPmsI(02}J5v&<_ zIC{sLt0Ve|*vvVkkCKJ0shGIpJ!;u$G#qBB2gHnKy{C1?FcIlJgvoif1~`A7U*xc? zL`e^b|274WKR)*?x-Ke;geK=G<~sn}Zjw|_*RRU-o`QX!t$ZmmfzF1$hakyP_Wnfd z*j~wxZ&=zaOVpa4b^PjgUTJ8P;*06bf#juPP(~;7ctg9qxl`439BX=7IVJj*K$Py~ zb9eM7grIqM>wz}AtT<`|nMk~Nu=*{EB{u0O{43=FA%otqxvbSD^bJJC5?ATnN1dhC z?`!a#lAretSCj6j&F3Yf8)0|C>ltO$JDyt74~U?P+(9KoVg-Sf>@46CcX!ZU80A)V z=grvZhC4FE<`8FvC(Sx*4wetEh^g}51i!2P>N8O_U}vc3p0Pha*uZKf zVZlvfeDNS_H%R?QrNNlP#G~h=!S7@m%Aehv5Xr*}O2+LIxQ)QKRwAwL6e)ckft2{r z!5J<&>Fjo8sOXO=->S#1D4gzzPlSnq5s|~rX<0#nSc)xF2M_fEsS=JpJ8Vxd_KkIH zEqP1=ec=$(aoLV6*`rV|@i*z& zWi5xahU$jefuJZ{3Po?6?amt8CF0TGrAh}W8S$DnY63f1wBdVqAnUlm^oDJb#nG@^ ze{I)Z??i+(>1&!ivhZnrd$8*B`6aW595^*#6>1^Dm2Bs->Utp`_4b- zOKJ0o^-rHdyGbcH+_;X&qu5=p+Sq$on8&kp2BcJDRxp=U#GcdV<n#s@i7v2XaveT)+p4E2tn-f?K zr3FJ>v(3BTSq{7&oNhxVXBK_qL!L)Fkd2a)!HV4qvN|^H8EDAGxraqPl_%--L+Pf! z#Jr*)lQ^k1{<1)GzJ?pGD$S8uGw{9tlyA$nEz~6R>&^LzqXS*OVJsS!`R{V#5x@R16AE~YnW!Ce}@0>YS=JAc0GlEt~KTW|um@LBYH6vFtg(njm z+bjQ7komujou}Z69@&?w76Q8bR#JShAwI^_dhlUBbkJk}X_# zZp{okj5mi&O^o=Oj$nMgeyif@%?H{P&Bw!UwS)$kqE|eQjKsGocE+Sy2MzP;Mo%JB zfsoJ;J05>jk~wVH_+;3~jPVJo+I>Qtt zaoFVY3nYo`x3apR+w2rZ3cOmJ>U~P%F!mG9zEmg}?lljyC%$Fdm3vDFrC_}Gwy>Ok zgaH5Y$KE6=8!fgmdztfoEnTBe8JYQJ*xe-XVl5&>T!RdyTm3g>5kwR4CY&;9pDWUB zlIr;}PDhSXDF@yas3F8DBt%6)Z?aZKVs`Rp6qhZlP$EA*w1|84@V4xi!@uuuKbp@R zi;}~Z*3Ra#PJ@R0ea5B*hiXHT>dWR2LL8S5Qb?oDG~Z7q46~&zV~yEt$>xUj9K*A; z3l8u{$($bCx%n!a(DuSWnG9HET|e_J<_1M-CwgIcYdw)glv^wYBC7K45S3|Z6O_JF zQOcTyDYrDmgmH&28Jpf6B_=*&UD$b$&;}rkEWQ(P{hF6P!T#!XhUOJl)s`KtG_n73 zHdC*?*5+wo5C%^iytRelaqQ5ib}L#_ae#9M$fbAu6Y%~IbXJWix1DqHmSjmB#I;~r zEcA(PbA7ew^2HzwLPT+2N?!kbPij{P;uD{E$!xk+@Xb6A+wM9gW~um!;Q#haMTxRb z!iJ|OtN5DTvF0W_C!*^y<rQg0sD0y>9B#)YuIQRb%n2-HK z;M4AH`b|`998(7mmDz>r#s3Kd!%<%)f>rd@oQRS$h%g~alQ??`h-XyuI4svEvK32T zTw@L#L<*)A7j4BkxTo*f3l6-Rv>rp;r&+*K?VLB;lvuQyHUcY!F`NcA&B4DdcOtWb07}t%a1$NjxGi zf)CM1Ou9+peBj%#Cj`LS^UOLv*9${9-&id|S@^z2$CAH)c&l;n6H(nFOa6-QQVKD6 zzr-IUI-?~Jz7vs=;x1&(Rmmvh^_e3}r4AS7PV^Xbhx5X=i6jZNg8wMeMO3!BaNA*o zW9dhVJsrM8l93K{#f9S-4SP1$A;1wkl6V`DZq< zDs%4l+hWl@)@E3`eZ2RFtjr>fOz*X0Z=l}oHmV$xbuk{t1#^AvZeeed}^^#R6 z_kQ9M_Es3Ty0E#;YUcjxcZ=9CrFQF_Zqyz4SH=sei;V&)MRcS2G#7e{@S^S6M1%x7 z-8BRAqENX-?CM)%LW)wZLet3<6Z8uZD9q&J`1t9r&A#wiDPNl0O!LKe^2IoUphLO1 z{VUY&C$NK7Hfd(AA6a@b%u2LdqVu|G-^zR+MR8oe>bjL=v`Lz(O8sLuq)Kp7H~GBv zB0p#-fFAg2% zDNaGAvoCyz}_g`98XkupPU7=0iX!Rm+F zI{l+7X*s$B0>5aV`}?oP652j}2os|?47Br{`tMGLf0AQD6abcandn}p4ty{(Fwv&V zYY+>3gQ;hKT|*#Zf#5?pcC&&HisJ{=@Oe1Lql_p;J^B$xfucCTO2xkG}n@FsICdy#LLH z;NZjcVy;fCmLoMgEj5Z@`yalnNaYIwk)>av{!u7t;@WPD-6FO;4$?YoTni%&L#$^$ zNw=cZ2h&e0Lk2`EBQ1w|rJN!=ACp(o-s|j`;y2etBFY+F$PQ!^L^x(c4=T5+c1(*j zti^ml4++r^s>8y?0jA~VHxelRx}#^|(9(cIPtlF<$#hK1QfXM^&Y|8BafEt~kyuLD zbh;lIZDK3XZjoo0$Z5y*^l?0UxFu4PF*l=uG`Ne+G9~}{W5>Mnt$>JD{%CnWt+M^i zf%474rgj1pTszf>Q+|cxO#O#L@k3ABiXI-G6(Vb0_%>I1DWZJS90!Om2TnduA4}^L zZw82!(}&E<62X}8b}8R-u3dwtmDKnQy`ojfOFHkfMWQ^Ck&ZJ#^r?yuZH4?X-g02_ zV_)M00ruh-JEo*Avka*+=(c@#;A&;2uWB;9hGLITr^bhdH91}>1Os=KU!{DjwxWTLQD<-a2^j8#0?gS_z*en#Sby_cU)$vF*^a=&I_ zow+G}lMuRj&`#tpj=Kfr2D}Z00-N74JfpgbstKchkVH8o6_V?Cq(Lvu45kyVi*keG>7aX_HM+>Z|*5! z+yl3Xlvf zejgs}_xp*nd78wA4YJv{7%~!eJ3bfKd6D7!rlGvtAzcL9YWy8oTa%(p+%_P9Fsj8<-E^o(Ya~gXg(r47zNoFkv&%CvHHD!iFIEDyK8;rEu`r@jE|0v= z3Z%~^)%D#~dT|*nd5AUts-kDxB^yUPYx^$$N!N<%8E0oz-gT6<5M%3D8-;xGX>(xJ zXr$nttWLVzjeJHZ<0m6oPCa@R8l-47r9V=u!k0(ynXRcj&uc)no#bwn6;D#R@PCHj zJJ*SnbG|<=Dn^Vp?|d^2<=c%wDG^Sj(p)rrC2G`XjhEgl{%f=l!KzZrw-61I>JR!5 zhB~dD7{y#+Gb9&PW6Ota@>IlY{w};lyO<5{t$WTDk!k9wLdAV^S|C_>VA+gQ+Pw6OJF{>_Nobrd#eK@|w6}?GkBbs`00KsJ&Y~`j-5Sho zmiCpL&fhhQlNjYS4e3qL!}E7F-$wSu$m3zHD^-*!w5t5{ne_p9bM)52Kx)pHAP0$r zSfsncT5LT`{D=5TZ%wAM_2J=TmX)u8wAjlaZDms@oI8Tq$@)EXv?qyhn9f%`Mk_VD z3NUnf4%hqv8n)DYzsTIQ&Uk*N(`&hB zi~)tdJRn|A#+S73t=&Gs-lj-hJLT$hiyh~(o)msT5k-CPCq#{LMvo+X69w4IpP;yE z)h%=su9JtFber(%)NVTl5>N@#f`$6AZaR?u9u7y#sn=@WjY3-Zhcux!bt;;uBiAK? z$iQ6Y&G8w+!>4ibM}W{VbX1YAhee~8*PU`6E#)Xmqa+ThhhB{3MrfVQUv4k|c+XMR z7sQ+?oNG+QO!$+bz-(}m`31eTKp{zzH(?r0x#>g=xy#VutEiXsjJpZO^otcZz*+R; zK_OnDs=1IC%bWh^Y^PDVgsT|g)MR~cv5k2ZS?!<=9M{a8)6}nR*rbK=i52522XB=} z6P}&LWI^p(xx#wsPdS#@!enY`&JxwbKZ-Mnn*43v65m9>i*xzJY8z+l88!x|{i{JH zd=om#=~_f2LG}iXX`V6_CSZEtWMUz(cinQgM6bneEyC9z82-0q3_OAs?^0I z6KH)VO5DHT3shijdemwwc9-;iPKCdzai$PR0p=U865EJ1?tOO;;)3<(h1!@pkEbl$ z5mHB)K_IH=n5=qJEa&0wLNCuDOmrz0pT>R-FhJ&XY+K|muBhai5^?!T!)(Ix2jSae z7Hgf}`ysvLR_6#IkHER7{GB}#K5_&**kp5Q29J#VVAmkJWY+&(Xr7RkYSNKbJM!F#$2hPi7n;a!)Y%brFRx=G|;%$-wje&7-o*h|dqxNJl7e{>q zqIWgo1jUYl+m>>zz7!j+$WItTu`e!a2u@wkN%-6JbxdVnKe;{+zL9?+0CN zSzs0Av_3e{x|wn%h26f31)6J5TCaS%yVdA2;}ttvAlvOHKn_CQeJgsX4@0K=K}yK? z7>bpA{BF9bOzhBgmB8&LY>iBNA8cb}jkYeQ%PYi88V8B(;}OFv-+i?f|4DY} z7D{;#$Fj^fAVk*QL0A%v++r;QYKNbr=NG)1f=oE~K%jRvD(3CB9 zHdOk-Zn!lfJoOM$Sb7`cPqg|{ZLdSvr@*Vz??>^-Xv!S^SzEhQ{%Zws8E>fw+6$b{ zJFAvMh2qYdQpfr<2i4#PC;6{O!useqe6&)PyR2Rn_Qj3WvIiz83jTBhc{qT5o?@*)@TeiPA*-w^ax=qEz3DQ_^eYDM&1@Ea#Uh57 zSyn$*jTk5LuR$KVa^L$f;}L!N`J1S3ibceOK1|@%SB?&R0|plL>UpGk|*3w7VEhSGJ8tQcl((vd20KZV&*>3QsyI;2@c32s;6%) zDhn(ML!2qiHJs}FIzt0&J9Ie4PEvh@gnmHrWNHvr$p4yZik)O}0sjTFpNLY21YqHJ zzW2Uc1_nKDO7geU?4_><*bIxJjhXx`j(=9aiwAir0b+{x!QtHW1R6egs6I?O!6W#|d0oxN+EbG2u)Td#VS$9PweogWPq-zx-#@;3$kr`PyBK51x@k zq1na>z-tD6B99KEJ-T=dbLzh%gMs*h^XX%v>RF8r>&gY>YtJuoje1WGXy(LMu!+{) z)-T$Z@glyf(rXY^2Vpr*AUV<{s!!o+8oZZgFHI?*WY(BjTiZRW$Dy8-hY zekvUnm;@SdqK(sJr*nZeuu*OlhAzIw&HeQL+&t)-3y@dQp_sHd`EGX_!hfOc3JCB0 z+3ts$DbcAX|I`A^WzxAw>SczJ{o|1qCERb3(L`860xl(buJpIOI-jHA1+H*)1(q71 zNcbEQDIjB6$c$%1H8>ZT-p|DY+TA0vP_Od_MR=3QeZsnziaj|6wr8?#fTplLjn_0u zaZ=Za}Z9zQ*z;}C#8Q zh=prSYHK-?0=XsBIdOt%Y*Dtq+&KLq%O#x{k_FD;hy&jn0 z?&eT3<^2u21!((r{IyIJ=;$8)T7K}T!N6naPoC0PpT7^x7>rymf75^+yUMJ+29U#p zsWtyAU8o+ycV+=TsrDD2G|jO`02{LBy=hVhv3-#2b^iLsFZSv;!-vJh$S*GfUn?L8 z&Oemq*o(asn_fa4VY>JJlf8mfQ{KM{^y1I%TE!BxKi zLE;DTMDMh@7WUY5pN{i$??mz;Ge-#(OIkcbexmA&Ofb1!0uhRMy6ovY_uxS&ZJ^O9 zShsk7vdw!3ggn-7I*)kh?|=ixKAOz1`evLIB{4FHK%NnHhXF_-L)HM@gX^o>+oi_! zZk(jCL9HEMN)WJqU1!~+ea;~ps-tq!YI-ykdX4utXXtXKt<4btB zv`%cZZ0B;vPtml;h&?Nk+xIub$9O(^o&-oJd#2*YkypUIl528z)i5(M&w>0uL! zExaHrcrD8&xu%D^j9PZK`H^n1R+9skTFdR4lG)q+K|#^C*5uc^1$uwF4rTG55S{4v z-x*dqJeYWq>Rgm3NvQz$@kka(MhIU7D!%p{@wlcpC4^?)i<g9HBvn2FaiU)e&etKbW`wQ8Qz=k&{)c#QKdgLO-3zN|tWDqVwKt%lg;r z({%#g<{h97k(($2q0RkeAM+oZ& zFu9pQ)o6`G~m5BhL{^%hGQBJlZyOjvqms$^D$O z`1+KxtZQZcJ$4{kn~BNpnO|GKn2d@k9V)s11n8z{c7LP2HPTuZ^EFABkAvaAWsCo% zB|Cs5@C*ea#o&}5ey8`w6%8b}-aTPlL)`n#kn>^gV+X2S_*~_+9C@-Qff15t{lq2% zvd3=MK+mJU zL*Oay;f+ZSBAlsqoQ}4#Sqo^hg~E`F7^*Rr_Q1hT;QXK0jF)6F&!e+fk63?xX-#;EX)JNy$xo%3@t)@2n?>!M z>NM?DQ-=6U4<@&u#U$+EF`v0YH48OqLG4*#ld7^u#GT`8oMs?8&ezP3@z!}&)k9iDoz$xibxU6l*V=LWsFu?V$7TudF(1@2|k49OHb*%x}5FXZZiHAL(a?g1E zMPgIor?%(SE8AUdhp%?09}gX?md}X-V52N)>h_vftlmtG;Xm)C2+pdxF5={0K$O?; zhwH?ug3P6&CWemBI1WZ?qrvp7`HxlaEk*TS9B-ldZnrku-9AwQ7Us~K3_LVtacl4b zTQ32b#JxQ_SpO>2JLiHG=(Wao{pvhvH|6U~^!~_`E<}uMbpWVs*cKcL9%37!Dv^F0 z{h~7a-Vfh*iA6W9S_5|TF*w3kudX}AEVUA->BVw^bKsNF6u`oITSLi@z-c@!QnX{T z{GxzE#wJsu<}|hh?VNW|`yd+8-Il&9vxag);l`k8-Y+G7DB69$m%P_JRyh6&(}{8a zt5#EMm+4S6#zmGp==jOlX`!?_q^v`Jo?%mvSj&EXO{iK=g3e7L{cQi!*+6sO##Gm< z!0>qxJ@0tqLEd>ovP2ZYJg+`7Do^Y66McWcOl5H>>?50hlep?f&4}j6({9nuf7FN?e=6?I!S{c@?stly+6lkYTYuHF z9*EGdlCRgE*JVY`If-FVP#4LwXLhFf^(NLCwp>+>q@iI`m5Vv4n{L z9s4XzrKBV2v)lv3nDv>J!C;Ctorq9SRX@))R1Y89G^IgDFz*r)a%!N-V=dl=qlEEM z$bs2_W9f>EItTru#ZnBA6_}cD zy1SjgZ^Wa%!5D5O^>~DJS;*IMz_=JjEPO zubuaa{?%>Ngx6;y9%B5=yBW{FdnZ8`z^ZhJxy!T@o6;?MdlOF4QZtHg@-N6**saa& zyI6UEm)&EM)!9s7`$+cgXWQ)3S~X$DLviL39f7BTlGvV5Zs<2V#9CqD>>FDCvSSCN z4V-1pd8hGmt9Ma(%;+hl81A3BOUtb5iCerQ>9mSzIwV%*GSENEUbGCxo+mZ93Jx2Z zG$Q8gD(#5-Eq*z6@C!BwSMm$z4l~|t4!af^dO=uC_}H@2$>2yCmdb8JySJi3sc^Ze zfFu8&l!qE~nMEwoA^A@7MP6a8@7kZueI26DmsXm9|9^)wwh7@b57C zD(^Y3g)@JaeMLa>-Dcxm^vIPb9UPXfThZ^NQf-;?WmT;3h6Pl(!~pt z9TDW%onhn@e;L+(pR`$b$tD+*hH98_Q%UHFKkg2p)i(Gh`r=`&$koH(sT|l@ZL8x> zWu~#Q{CN6!6Rm@0{&!v^L*>jB6Y=`v@n?epepMA`HVmP>?Os?r)ao`S++}Z5oqb%M z^RCJ0p4z+)#igMVsNw~R#c^qX@1b4H7qRgx>i{X+nHUt~I%&yHub*`bAQs}=80c#GTEc#+wB5zR zPgG>rO&LV4GXHmTv7ie{&}^*rrBo-TS&p_6qUj86n#&4kB#F~V(VBw(KLfY_*`cpS zOiq(C$|h`(_4Q`TSvH($ZM*Qh>K0g$QN0fyA`PRK657UuOPrQaG!T>wpY*V-esXz)g|IyrcVt1&J($EA&(hPwv2lyT`z3<8$lE;@`jjF2X+d@;d)# z$28S$*`8C<%KnKB4)c5E@6X?YYmYxeBD$djU9u^%FzG;P&!hY4=v9Z&S6@CEa{nc} zOxB*5iFFk^F7^tkPLPQsdhbQq5s5f>Ec*a=?Zn@(K>Ekx8W^sR@wbgT{LjY_tN!CF zf(PJpM8VYr)m@$Ih+8U57SyXF4`b|axaqyAea@y&_}~9LSd>}t!R~Dl@Ma@G&vc|@ zqp754!p$UzFxLtUbfjJL!X@vYv)YG? z?GOI>^@7o2gQ6rcs$553VN{tJ@cj3;|M%8g3^aJGjc+La7|QQH2LgdY$+tg|UGU%q zSyu3SwVry?r>&Qm{#}|5U-xfrRB9A#0i$1D!Uph%p=kCsfV=7Mjl{n{*nf>(0sZfW zH1f0&Ec*Zd8h`Mx|DX9i2HP=tqfgbmo-yX_LS5O39)(y%zyob_II@9+t$+kmJyEU^ z2o%GUT!Dl4K%^*Wgu<&RZ{ z_}!+#Zyc`k6-+|}fzjho!@iAZ-^|sT;l8-*MhdxB{nPLt->)Ie#0)SykEO&3ABtLk zK)KHbV^eZPXp(ieU6tyjb5BEHY`iri*Ka{dTMX<+fqj4-aspKgzXqW<7*+9_Bf~6C zR*d@8II?YXe>_1STbBMUfwLh&H%>0O$Fju|!)u)aX&p!| z$ob}pys$KA>*{alUV(%ZfI-;n>SUE#h*Q z{WbX2Zvn=E$nzN6Vg+BH=;1^Fm~&zou%?NLJ^QAc+PodUnh$Wy8OJ>&whmftwXFxd87~5 z*y3Y;Cve>v_PW?&n;^*SRKe?YI* zKJrjUMHMjAs}PXq|#FTcTR2g*(!SR__YSG7JejPcUW6E7@)U>%fsW zPkbO={2R(0`WQ=WpEe~>PuMIUe?h`NrhdS17XjaJwm!*d&tLXEQ$%_D(lJ9G3kD4F zwRO!)2`FQvKR)-U3hK$`7b1uRbeF)^A~9lrFXa!@o2E)U-W%`05t8 zz2%P8)XkuNI=vJ|rX~1EQ!G1~yBV_L`T+l6>C%<|?E@ozkx=E*bOfLEiCoJhIMVx& z5ThG!5%1s9Rwttv0$eyb(;_L?dGP+WmlI>YX!}eaGjpV7Rgd8|!Z6=*sN}kjDC+4<6Fn$&`!= zTnW;4zp*w10i{FI3DS8aM=vv_Cq=5$gw@{P;`kd?A7a-V7}6O{JiN}V>P}_=m%t|E z_aL}q3~N+u11v{wGtV&pHaTPvbGVGoqu=mbeY2VnkRV`1HzbvndBPmVRghl=Fh~;g zc-kEY>R3;V7~JX`pK)mO{NJ zDE?=Zae7-LI3`n${m{pdZQ!AYF!LZeAU-aK-#c5Jx`ho_uanOLyGy|_viRHju~O&x zThB^?&X4gfd}sCZ(yzIYF9+6OX~@Vsxc}xJ45fM~QZzN1((uQ2Ul_@k+pN4sS1or9MA)(TQPc&SdE~I5ZozWz?n5kPc5o z@`pb_TG-oDeA>xVAxD_&)yJcnRsgZ_9LK$V+ec^(_Id|5JIU~i#Gz8K(gc6SXR##M zrR;xgk@@-a@$hf0A!T$*HrBT%umax`kgUnZgyU(0IpmHaL-oQi>#`F-6RQkLxUJ)> zl}tM{t}{2QGN|h@1eaj)_D3@}S%UzG!RxO#ut6GRkH+uUe5VA-y$S0&O~9h^_S#1wcYj{6e48gem2u+N?yiGBf)j1@)U_C0kr%f-3YO~m$+4qm)_ z!*F?%@t!YNmG&5B;()f=@)Yl6K!SNuPDM_fT+1PBst)wj&9EjA-k%LMlw?G=?+Od)p-u*cJm&w5+sKs{l`-gG5_>uX(H(Ykw9NT z0_}Ey`8+jPf>^Bchz^zCx$wJWX4=au=epNL)j@Ayq&(lC^FqM}94#6J-}*#H!ON5~ z(+vR!Z1j@~4vjpcT~=7fn=`i#4)^m`4{*ZqboXJDRj!_!d+=kKy5QdFhuSp9R;k)C z)4L|T-_OF#<~n5ZtX}j$%g{-I%RYR}qwWyrwfqdr2W)q8D<7Qp-s2=Yr?Z9MLX(+p zd6cbLTHkL8DrZ00qO5cVjF9Kon;;KxY%c8Gb(};ZQN$nyH7PqLL-;Gs`7)KYsqgmG zcCtSn|DHjz$6mj_Vt&%gh3EeyhJg6Y!Kj?6S9D#TbFnbC2L(8RV*0vXkzKw+EXQLo zqmGuy2x{H_%t9F|WxzocMOxNb+;-@nCk<$%3wAVQt?GG-RUE$$W`Gc>WIfNtnuj&%Q5 zg10a9wpp}>ey3=vaJmWFF=PWz?%r*;!$TyI;OP8OGm-Q@)8(ntX|eX37B=g4HZ^x| z;27V>M4ekp65@xnVjkPwBIKAE!GHhg!O|eWN;)@;qF*_z8GL`X5Nb_y_v&4;)l2H1 z)=uPC{TR?08PJHHW_CnT!w1T=jL0o-nT1RJuyB<+pTe_j|XL(d8(Y8q2^J`XkG0e>%3kvKWgy$PG6gf+c{RC1-jhr&IKH^xDmb=VqLDwpQBXUx$O$ebz z7Pejmyhs)Ba7{UEGf1?8FjfknX8Qnm=`Z!pD_zcNXP(#Dg`Au3zsNk6&!q_ww+4Tp zL!AL0q^cmgFt%X@&XHANRS7~`u1|?WF5AWjfjaEuZ4U(H^h-Q-EhY}Q6zAQVw~Y|B zER??EWGz*cae>E}j1@K3p_5A#o*JjL_d;aMS~7~cKrko0PT~B-SF z#_&k{U@3JHI4huGO$A^f-@bd`W~TM4*ZmF__5!q3W>eQ%wjZt{0SE(L1v6^OaTn|; zOoy9v(-hJ(>$4u;iluM~qHdK;zU8o^Pl<*nPqD+mS|PP<@Z}xVq9+Jn#(?B8v|+*Y zoQ>cc+l+!HHS@x_b6B~p+2Zj-JUQdr0ns(0hF^RkkZeY@_wh{@ptF90BlXx_fzWR8 zRGvhuUn~7>@j>lJ2l4hZiM&M3Lj&nIGT5zzl*a?D0i_nsHbx9P38}DVZbT!E8Lej6W( zS{FiVFVa8?3rSk0??aSvu5~7>W!_#$nM_Bd%mTi>CTV$naC;tQEl69YXw#T)xP4^v zl^>Z~lYP%MpxAR3y>l*$|hg7<>_nlnZ;Flfy+L zJ#&SQ{M+}?*;H1`br|!8L)Z$BF@{Op8Et8^I;L|thzNOIohS_GxjsE|l^*`>+T~In zh{VutKRZ09mMH4_fp@7Vfi(7_<*37F+w>mNa-G5VbK!GA9VGO^UbBQhA~1Z(pJWI_ z>=N9!rf64``T{9E1iGW=QLX1rqG*>2-jlR8dcdWAuUqmwTIq(d##qgrDAtvF0LPhj zlG>abl_XbZ+K^Wcxg92qc|zreYnxth(0_;gVwxAVQSTKb+b&z%IH|lA+Q2+{f=Z0H z)*E4wj%sHLy{q13j_qjY2I;p#mw~Gk93Y#q<{vvl)5i|JL z*B*X%UkJ{}>?eucvy#4*!!9tRgW2jDSwZ#GEM3F3^;?$N?YwY&OxY#6A{V3k$K;yJ z^4i0%y@?c!q8NAC4#|!4bHeh%7WeQ!9EBoMZcg z#OF?i)u$it!#+qmCelITF1acaR`5O)`v#VTi`AMd7xO@cX|mK}YUv#Y;-&F7HpKZ% z_QUXYPXnj9ExFU~bi`(U`6xW0$cfl8YKaOVK6?O$sx8SmObHK0VL5}h%?_pE*eNOWV zcEOzQJ!O5IWI~UG1uB0Bhsj;3)YdSi{jF*6*=S`c=VfDR+?Q95?3Q^s3-VccvRDT* zVtdEOwEi)tZS7bcZ0=|$kPjDV-#c8FHm`8rwc|zV_RBV@@Iz6beEv`t${j*($2^gT zpiv*Ve#){?O6@DKvb2P^_iMK86ziI?&A7aP>lrlHs1u$JHu)&yVnMmd#mwL)RheHeH@ts= zF#EHyozs0?Z_BEb~+{SX(imB1XPON;y>d`;5wj7hu9Qj;eJ1+CNcUrRZ zmo3ve&6^V|{m8Z_-YokgUIgoR+&BHh@y>kl4zI|guiP3f+XMO5FH$Jh1=RnRb{37) zmg|c#cf=I4`rt9b)CizM9PJEVa#2`heFsVOKWyEzpiZ-!{ zj3yHOEFw>mdD}>$eZLu<O>ikUiFC0im zc+dVrXIY1~hMn+ICJWACWCsFOx<~Ja5C`wkxab$W&}hH?+4f2@o26@7j2;%cg(>Hi zEP=4*Fyj%NB3W4S;o+kv7$k;auVBhCOAuNUm#@Uv*k&5K5`Wr6wRdUW$u`IQvz2M`)A{2rd!!94e5UI59VZT>7GBH zUwt(Z%eaS@P@1??+mm^MX0?`m7A)YqF_94dx2+H7$}!u zPq^LZb(+G)M@5g9FlnO4$zVb`xkdQX)KGS=d) z{H+)t7x_`xY%X@MqKwPpoSG?dH*r6984>YH7VZq|+K-V;hW(PFxkFOPVNcdCk6A{2 z*CzX2DxAg~X<9iua?(UD$8O$NeL`*P+9Z-RGc43ms@;P7%YDzWtiiIs2{-?m+pB@Q zRl?1=P}<%@H=Nj%95d(;zKhoJ6+2(lmbZy*crWZ@T;*eDJNvjd_;%J*1Ub6ot?K9YUcmF0$+`T^z}wAEcURV8~XH`{tAP=QdA`> zC_FSKREUtqRk5M`KGZ>c;^LA>IAWaX-nyhkyAI|o-42$0AIHy2zQMKY1j@?%Rz9OF zujABE{)M(r@~n$B_SrKMVS+E0q^x%07VWCwZXbyUwLPa~Sk_zO zG$x{g7ux%gzSD$666;mnpD_WuP12DV`je&Kbl5#8z7dyNP~ds^-2M90cM~@X;#4sv zFpKaV!zJ~Lk9#}CL2c^IcFL#xhP~$o)J1pbR@~|}a-Zh1wuK)M;&%jgq3M&?vHXBb zzPAzOgrI&3HD+0(4WG#?ZbEA(jZXpNaY1eQ+aDfNy5;}W$_)xH!CVj1t1HfH4c4oYNfwNG zGCI>kavC-mtG3hmU}6i`hsqi^Et1^e*lURL35Oyp@AXt_2c0RKw-ugpsy&t53omQ~ z47ObsFgm1c(-XS!Sry07@Ui(9ZuWBAV_zm6;dKxg^OeD8#ngIItdp>?X&mdR-%`c8oCA4Gvo7ACY6taDQws@hOsPrRtG)Frg0J8^@fIdsBac&RZH3KAe7~sIptvGl>ZZ>kj-P{* z^DBKt8AgV4^`tjnN3xnZPZP}u>L%O?j%?T|!e~*wx{OU3-HT%6-S~BH!L$U$1@#kO&CKAd2gCYLrKs8#Vyn&?a^sUIsjw3=w?DB z+Kz-jnTBNYF>(4Vsqjq0=q)VXX6@$^O_hg2b0*)9)_h!!Z@u*A1P4uWA?NaMqE>9l z#0NvJ3x^oY*sdta#fba?v2;RvK3__FVU$&Y;1l=hnUmi~>xrL@k{0(2u(wq`v>b4h z1gTP9snOm1YKg{9UBE-7%r0}{1X|zX~InviL~w7^q@u5aPQUP*yoRzv&pEh zOXjhB>iS`DbOL=F5n5bA>?>*P4<~&NYCUH3?fgAFer503?NuTQ8styOq!V|_U;oSs zf2QrEo~W00H$ByxsJk#>vosBq^>k(te(gt~V7%Et59ph~$=aluX=xKqzSzbovBtq3 zP|_%U?r8KC2z<1{Q%g3SxalrvC+)t}`tlj)68UHAI3q^A!%=8jOc%xE^W%JEyt~~R z6DTLVdPVduzAIrp1iDYUd{Sef9B_Rfw269hJ&DrhZAX?uY5$^7KilyR#Yna8C?SnK z&8yeoQ94*A$x?zdH@AC1&L7Q|$kXNDe0<4?d;a@!0=Wu<74`nk2QuyP z8{d5T8{trEH&XBCb}L=9<#DWnM2bJ4uB(~b1f5pgZDef4y_t15q~XX>ceGyK4) zMM>zfbf0b!>WiuGhgM=GU3PL3$QIV+yE|HipJ?-<8&bGw;G-LUsYv-y5FJXbV%x=> zIO;?kd0eh5j_$(Gntbk9%B7{=B>>L7L!C5%)03UhYoclU8ku?6OW+fosFjy@tvS+o zWeMj@A~(oj%t2eaN#U`Z9#K|!825(?GkwkSYi7g4ZV%5bOPtwFR~n&AGTJ&BSM54W z-Jhnsz&8BbrYdC-NVZBdq!)K5hZwjqRu1c}xT(+Hg1naSn zB-ruY+#YYGrJlEr%XF?EXiEpFK7#J|?RQ!y^f$K)m47Z>EUp(CEPY(1t8|0s1F`f$qW zP2Vi}M-eVd|7c>dFZEjyc?`kPibVt-=bXmorGlS^wbhq=yTQ?8zNf=m%J`Yf>l(UY zhC=SPL=hTuC}5Y!c!dckpoQ=SV(IAK1*oVkLM6Xi>r?elH;6iBA`0@=Rlssu8?R7G z`dy%L6YYzi_U_NNJP(o4abi--# zb$Kgpt+Q2y>$Nr+0I{oaau0tMLK(j;>NnO%sVWOi%Uq1LD|)L}@U>v;H@Y-U8xc`T zFCItCMaRq9Ee{6DnorNaU)j%7Wnz(4)SQHpJFn09i_7&h6Jm1m;jABxnm# z`Ed8Ka6&{4VTkrUn`Sgu3VCai8~(pWMQ~>9KI-LprS!EKwe{$w*)n$J5DTN<(db9% zs^nVA$Z>M?u50StdG?OEWRP&z>X4Y5X3c}%RZ#hjWak<%;eF*RA_PNZAD zia(W7MubU8HCf3$Ayc~9_zpj8fcvPtb|bU<)oW?xjfqNMlkMC2e@am}=hR4Z^*Ax9 z^uHQ+%GW|NqRF=lOQk=y&Q6_8SR>vZO!OJ?(>vk?qe6dTZSnNMa((=k9*xIGh~+h* zP{40BS3fdYecbe1e#MrOH=<)-e4m3UC`U+*#Zz(2mh&_9JOCf_%yBFD9iZ~k2NjvC ztPXoIupN2EI@#<5MGa*1XM9Kt+V3|>VT>2-@Qxc|e>H5dyiL7KDlH+QNfYOmFZ+XE z6>ej4tRCH_SqH*(U4Lo&hRJ3kT|~{7x=p|pPVOu-&<4h^gL?t+Dd*^L!ggi*3ZTUL z#;o5LXSua+FyWxipkb&z?{*H{PG!Q56Y#;|^Nzr0Ld_1ZJ1B{wwZH4}MaT5Yk$~;V znorGuURMS(48mt8+Gb*zCEw!H3@^YzADeP+c2tv5>XZ4d*vC#j_Vl*7$8gQ)W7X^u z2qMB3ucqE1Ze#js$zP_MbMXyf&PRJ2IBl%Dd6V;5z#Ve4RB|lQj&GGI;?nA*z<^a+ zgvJ#dDtFN;L@m8M%8gtzcGJ&AgNTrmH0A{cN04C^zq+$?Ai=XthEM2cAG3P8HgWvqORR8vH9a>R`yCeD|q zgnQgF+~az)i*>w);fift7U%KX`~*Z)?hu0l2pp`h)3pc%O7Gl22Em9HDort)>Kbc#VpeXtdFHcDdMnF3M#Ye&^iQc@y8P=V6W?bY8WjZ`{xY(XjnC z(iP`*5VSQQl00e1D>GHE8N-t?V0)r9Jg3<2c)cZGYWgkP{V+X&yuJa@DQgtWdS0q4 zxMBsrf*UUXW^=CA-quGBhdUY`9j4n8fLqClBo={~gbTA_BJ8)1~Kz zg&Cg~pseB&IGKeXGrE<4fPF3uWfr+eLRKhz%YtWMK-wvT$?erJGC(WQ*LuYUXp2vDu6{#B@I;el(M zpsM?QK7_{CYQ)C)6VsII`PM)MWZZ18Yok-D+iGbx+(EU%CI8DiBRJ>8ZcVbIQ!Z;H z+&O5v8$G)mIi`_wxq})m>jfLgEheASr&{+#Rl&!~&><*d59nSfVO){@_~uJ2Qq zIIzcUw8cNMql{y5=o*geZmWJ`Ka31?xwe0~%aS>ic&;^B)>aE!YsJ*VO_ZC zGKJ9FiH@&XxMI?y@`%BaB7n(=N=T)!O-*&5I*Qn?FZ==`vM6g4vTbrNec_Q$<|w?= zD{>=IJbnyGhwRjyTUonO`yTyTi7BYmn|Yf;bfT`^sF~i7C}$}E?m*e^BW2U5Ov(9C zBmMUh8zZ$VW3ShCHssN*s$5KqCP2jH=%Q-f%a^BjwBtPxVolmJaVJov z672WEs0$aIU2@*5jIH^{4d>S@g_b+{W+$7XQL%PY#n*frt4|-K)GWK5 zL@p=7fuLAHvehjz)}=@*nDqHO6$YOI4w@tLCGvh*`JL-SjS{eshHa8jSIVPzjQciJ z?s1^S#8}=eZ_~NDoXKOWLhqrkZMXH$KJlls{fEHnfh|1-nAUs5C1iALt>aV zLdcGcskj9na#_)(&sS73qYhr#2}Ep}X{*}&jZk=-3<;`vak)Dc#17kOH7htI<ROde`wV&#uO>jfgeMV|CA!>Ko1giS2^@#exxuRrr^h2m;Yq>{FDoV?46$14-%Y!q z9ZV8$yCm9rO*cM)C0;uW#f2p**J7Qez@m2dS=pT{q$NF7>I?~aDZuBy5m_y?`TI3-#YPYYVR@dAZc*NA zS%^Tor zNhL|^9PYHaUc;Mgv7JvgQh z`C(vWHp+1Z-HlX-K+-NMyb=Ut~l10%|?lO{Jn@A$R>imti zu*7iIl4C_PNF#OZE=PRZ(h$mq`QuAi(S@ti~N z>fZ$L>d1W^r`$A6AG3^7R6U&q4tnvd-*^701>iFE!7Rg~G;U$QZ6xv{?9V{SsXlb+ znr~?V>$A9s>$eZ)eJe8~Zpfgnz$PKlX z6Td3fm(6#zTD)mo@m93Os{5tX|9|7WuiA#Z(I|wmFiBRnVT+_9ZPD zyYv&G{1f7jrQe?w0rh6in`m}i?Tg4 z2o`6jKpZ>z>|BW35JVFVEw@y`UMx21D*kl;J>5-DLRUieNy=s1u^%p2P_TKaDbjc8 z`4f50yY%wd14j!XgN=)f`$^J@Ezv?_$4v{7A#;`t!xlMm>T-_Zu4)#uKj|y)cNzPl zZlvnF?X*Qs`|b4AGVXV*doJOk$lxQEQ9H`hyOI`K1ywyRS0$!)YW%^jVXATAtQNA1 z$4@Bk`VFTq3|H-a>kS#~9@jPnx7yJw5Q=bk+&jt(Jvf4U%1)!kiy7CZ2I9|aJWRf< z*%D74OE05T)`%uJ*r8>m^d;`+W9kp$foH4Dc**F8;;gOQcdnb9bA(EcXF#WXm>5`` zD)pLK=zmm^WBn*yYfi&Z@ZD!2Fk~Yle^QKbUhO;dZ&$%FRyMC1uJc|zD50&XRjjDG zrTN*dsK(@;PvL`zuKON?1C{tnEl<51z9oZg6DxV6_84U6Ufe++;{qwh$najVIwg)> zw-{QgNehF#;ELSGtB)8dr5(=<3kGbT2m1|V$ort$yZ3JqrCfTVnKqv|6IO6{{y$DI zkq9Q>@UG}g;LVKNliRRqyEpMc177q7`Dy=Q@}(xm`b!H@86TS#leiU*NVa!YAE~pk zh9?}-M~iT-hwEooqKy5t6+$e{LtXHGh&3=GW!~{!*e8Sq&jczykk)E4t+E=p`^jJU zk%U=hjPx-6<9GveNv3eTQ|>FDH4>%9c3mMzO>t$D5sEJ2s%wVV%MN=_}Hz0XS;Kjs&JF)LEPCg)5D+44iQPLY8_pAdFK?e zX6SSRLGmVwc{4>4eY4|Xn$n6XC7%xL^?vK)8zz9%Fr~~svCaBcty079(1ea2FH2~F!-4q` zC;39w^lsqxz33pNbiYyhC8{VwZKiE~`?P_g_*da6MdfZeRh1~zu45Mt5{K#``KiMg zOr17m2m3+-SGI9iu8F_bJ+^w;q7#a$A-XHbEtp`rPv1`3af)aj9-6F?p-L4p&p=;X z6BblJ4~WHE5dOKB%b}TJOTm~XRxEQ8vK4Q`0FQ~{ndbD@hqY~J&`LfHQ=stsY+_Ge zIu`m|LUjCfMKk)9NNiuxrTd52+zh?XE!ERMjSPXen#oVNPKT(AkJ#)x#+r?CJe>nY zY`LUW+IGilJuN2s=+fTz3F=I_Lz_Bb`7=UV?^hx4uZpb)ndewud%R8qJ^N2{pZT>O z%bto)x>5_NJZ*2;9jjc+;dC`_JxFnahng2EHyW1rL?5kuUlQUo8Ix4z0kpva(QDl{yau#Ic6X>){ThC8}URr5Attw{EZ~QSxRX8OsfGpbInu zIL1mYxLoodm{#h47MR!t-EWVx&w9+PA*pn7NnFgOSJ%R+0z|#}+GGq5UB4fCnZ9E> zFZ<+9tBcmt+rea)Y-9bO@C--A3Qb-`Lf*w90 zeCj+}W?TpSPI{3jlm`y|TWovLRnuZ;Ir)(LD;Hu8I`twG z>)l}}EN8us{XCep-2CXk8w#s(qe+cvvxAZQiM0$uMnds7zne$--8AhI?m`!DW*%cB z5T-m>G)b1C?kQs?)*FuPVNM`+L9xe4(Ej3I_R}mWKS))Sw|aOp0ODh6EjL1+k_&g$ z%(jI;hEpe#-}S&E@(f<13k)OSo046c4iTh8tBNU=rsjcM+gIk;Tn(>yd>IrmiGJfa zEoNY5u`0QqdD{r39BUzVdb}4bh@-|`$d+s(@1xKg^c{`lVvjQ1M3;4`hWXP|{PvaS z+~hKXx$Y9MYD6hGq!j+lQfXmnUTD9tC#_cc<~K|8DZ8ca`6X?@DYAvx^XL4$8WFzt z4hB5%4xtCw_>Tb}TWe<)+_j17@!7$kBG^BV+b8tVURPdmh)eDI{U0mwpBo*&b(7fe zzxL&S??vgWzh|j7??z|qL1o&2kJiH#EpNU^m#}l;@As-d0iZ9Hx|3DFRODU5UxRe- z)kx4&0-wckfa2}3%=Kf$FwbV=>W){$E2if8~ShmG@jH17@YvxU@+eaaz0;|XlMhldu^)Wzr4>LZt6J?%D6D$g8^ z8;1FwIh~3-$xpnu4JUFZaaUY{iDvGc;(FZgOHeN=7I6~)Y5#Vvpir7K^yzjOI!?C| zr_E&tx+iWTxsvW0nHUaT@oyQosR*Ml-G#S*;}SIQ$CAalzDD>FCaU*WB1Vnk30`}n zr19Y<&R0)kWuwGVLH!w!>p<9Q6q1Km6Yh?lPga0)+DDQD;tFG%zD~+zDqEwybDVs0 z$DX#2;EL%ZOT1u$;wE-y7Ih&WknG#HTzgiWR+xdlvFmzB=1(__Md(?y8ybz-UjZwX z$5fb5kWGf?qNg+_Y7(c27}t16q zBQ(5WQn7F8zn36G@ro!XSvNcJ50@zUtb6KMoufGIiicS7w|?4w4PL;^5ud^t5(h(i z>0VfPt9=KPWy5wkHXCn0LjM(VEupXG@@1T4)x6C1x-aH9ewzhX1+mflhirX3>>js< z?6Q0(Tpt0xUc2q9#0TlC-|LEV8iXt$;|Wv*LFar+zO z?_w>f&K&=GuBtlP2$wcP5c*tE5lYQt=rXpCC6*_#8-Qul5`4AoaP_rwbNY9@*o*ci zVV8zy_m>h0{IjH$&#WEuo%M>exD2ji3qB_-L$i8p@h#eS{hjJ}8e%hhVH zb%r-)KN!U)4_@otTQGyt`_P`>(I-Y7hp=jMeJolJM}DL7CLyni+I-SZDcs;v&KGHZ z`_h(Q>=}Cx!=lN!(~6BhX)AD-Kz_#p){8K&@<>^%n5(+OAmxV0=X|Z+#kF>msqfke zQo3ihL|t?(Ug#;FTTEk<#&(+&NkIl)Z)+b1E%Ka`-{yN@mG~?2s^ESl(cVu3s z4v$Y>4*yq27CD~=7a|-!hp@~(3(T@xTaHq{gW;4)SBCa8A-A?nfF%> z#GmNk`vU02A4slK+fDP;j^~$~n*AR0?&gwMS3k;Eju3wFcXbfbvYVU~ZtsRS5y~>n zEP-kvqqw{*@f}4&LNxiSaWo=@0}7DNbUBG#lRGv2I$rR1RC%l)=~W{;PRz-OAiVU4 zE2H4cES;)!yvvlV@>lf{{J6wu!H6}L_ucMrqc_yGYi)x|XjX28@hhH`+}5!^(+~bOlK=JF{dJO|!7uVJp9yLRk6yTuqyP1m__rDLudfp( z%Yn?;q}!c=sVL(uq4nGGz-=IRdiS@H{%`*BU!KVj0%?;hpzqVcEQ@cYKeGd2Y^T1& z|LeSS`KL+9!&IxDZ`Qyp+fVbn1kh+n+&c5WQ$PRZ6a34UhuH=ery5F@c88);y#{X&VpLID{OwH8Ol6d}X zA3rSB@t@F*65;1zQY2cfDvpj?3J0Z)6rDx#rJma5rrAL{@pH|2^OaiiF zW60YIaTezoa%|!ydMEF`c1$t7!zFUGR+WhqKbF8$B8F&Tkf6~%uwLKTzsic_zTeT3 z{K0w@OJ1%nSMZXS4LB~s^RBlhqL5U9wWgzuTZknegd%Pqi!wD}5py3W+|7cRXDxRq zjuje;JPN{^SebSo=nMY=QOPxmUyaOto@-B1`z%n(;`}dz=)X^q^O*3#J-kE!=lo^; z^C5AV9eFu&B5Px`FOCyeDnlG(NQv=kGdxsZ|0gwxn7pLU5E3d^|_%Nk+x zsyUP}l_PzJrh2esBXEL7b;>v?*r_g-YmuY}Kzg&NeU@v)%T=%{JMX}EHu=S~q+7;` z7UOgH9-FcH!v`qMO!@6qRem)$HKK2s><33jpY2+9z$9cLNte^xJ&U z=iG}$byKG?^{HRY@pjMDa=gr`H{cRJ?{?e7@YM<;_Uw~7c(uVSuy2NcWkxq-PJ2>} zjt(aJoQVgkFZ-mA);6baU}POSjLNK-j&1Z0p(pyFl#6aWlD4w?sG% z!5@^mrV=VTkZ8S#8tf|v3rT%IgdE~=h?Od=kI)PMKP_&8;mBU(CHD3|SUo=Lpm^JW z*zZ57!*(wa37;RBW8RrIszE||^S%;o?Furh2n6b3Z~pzmuDJYo!>d_@7!w-pW>sJh zq*b-?0e&rm{NX!p^y0p)qS!lTqh85AT9{?Rx49e{&_O)tyj>l`MCAFoPxeM@s zRb~PzpRwl;AFHJQ=6d;WPGtXP=aIdF>{;3C*Q@nmL@AX#{{h{QW3{R1B_5+uX7>@@ zmJ4D|Sp-F*&~{I|_(-bKXkY&4oy4G;Z_zxHgNDW_A(VMvo4^P^b>DZbBGLz}d2SF0 zQ+6}z$*ew0`|Z@v8FA8f2@5#vk>K_ zo72#3J%XHd^J14UqQ$EV3MbH8Fs1b*#Cne83tKB24;AFmDXTVu)qDoTP>22jxiFa4 zZz`S=EBu~vmZ2pTur2rlSNVU4`^vB?yR}8#q{Pa>`t@+Gn&T)@>++)B% zuA};d+Gqf5uObO%ZyjR?FJJLhGM3XFnb1gF0Ktq@0v6#C^>le}e*R;^0mpGVxT~~W zf-jI>6Y$-|x_q5E4WUPU^t;O(A6y<`^Jv18?u1v%Fze>9+W^!Wu^K;=JkXKxF1bZ%^su6P0Ca6Rb8xG;qTJVbQ`VC&G2GK_v*b4Ln z%nMqJTW>cr3cXFIibfo3$g4Bxo0FyDcb-Lpf-P_XY%y1Kx@3>JEJS9wz3wdOb7ppZ zJAqYtUhF<}Rx;KCd~kYY8h6fRoVflqI;Izn(Y6Ulyr~j_ENY{l^uv3Q5M16^8uYj< ze4J(DIOEFBVs`bcAkIEWg;nFwnU;fyGE^Z5 z6Ap74MPOiIah`}EHsN5|`bYwvf4{H=Z*RdV5}SlKSVwRqFOY?Oy62Fj*>u;Cu$271 zImgZt;{6Jlj6rtjNE{hH&G!dn-iyz?35pQ&hJ|)k_tQxFEJ0zuTBZf?xDpxk_vv_q zoHel~dAslSwT{N&1=^$Py>hBU95MdzUGJ4~o$}IXGPFh4K{+9(^j+_00+QCRs|dT4 z5}WsIxLwCJ_cHKXk11A7`dI1}+z6lHy0Zqp6Q$DUzzf62l`J-cXXjph?~lqUS$KY2d=ih^HmHt?nFn>zxdM#_JvroaQm2 z3wn$`vgv7tT?LOj|JDtf5CI6p7gf1;3vkk;a_y5OxcI4fiOppV;FNaAI2N&i2>)n+ zzr=PDt}%w&k?KnRnVclo5MTMH`;(hLSbvZv($J|M^P=QA(ILYp@r1eXI-f{xvI&od zQ^)_gNF)ts985gbrOIb#bTX1IxAdV_(~Lz2hi1ox zg4pkXx2i<=NOG;hq9`;@CPx_(tEZ6O??#L<(4Dv*(8m?wb4KdhVEs@wd?MmUIs2j4 z%u_>7eV;Bubw(Z%dXn;@hhL-L?PxGBXf9!unqtcw(^Xb$Z}L@zMT+|dik-kCRWv*q zx*c(T%*6PdBbqdiPRo+MRNi-BvmjkA)FFbzENdq}9~3n$!GsR#!&zCkXNcFK486$9 zw~JX$Emqe2T;x*Z{#(c7k>P8s1w~2?g6E1V26a!&>&BGCT)6CQn#~pRVG;K8a9*Bv z8&gx7KjNBVb@jlT_Ppc6*K`NbLE*08BNcuS?B2s16J7V?b@!&qCebkGT>)=%xUgO2 zeBA(otgUjnnW&EDD|V;?&ZIM;nTeSQG#FmQ-br` z_hRMa&n${M{T`2Mv?HO(Z8~U58K;>yZfapqG_xEX@KUl@pRt z>qJKHn4`>Nm^%#5v0RfcSjy+;-LaMDhuNd~c3EEpGzKQ zbVAAf6FbBo*s#n@{-+k;u#9*0Nm%!jml&m?sjJ+P297bm zV4ryn!LN0BcjJBqK`n8m=%5${=6qOBFKLf$K?!fHZ%6~>TL}kTJx>Li;e5#&v3Wl6 zb93x#>=V+xvHl>ZPAiGOg$5n|oZnlNf6$-?oZq4vP1wZai-Ha$nYsFp^7-%ti~UtK zMuCL#`I9ICq_m3ux+Q?hxhVjZWpW<#P$?P2ThI>eAp_uLt-U7`2Ep-&bX7uJG{C zTp|>|9!f4w;si=bGa!+;&B;)n)g7CTIvMR+oyc@NZ2|ld8M0GpYoF~ zeBhVHBh3@lDC2TyJB@Fau2{fne`5Y6a$i$D;yd@`rKBdxROSnDoNQru*%o> zUbGaLvgUfge_>@I^=-16fh1l`wz5OxqhU2T#kSiglb^c(7HvNkKFGKnNM8qI7eW|` z(<+c}*5Op(%KIr;yoD`-8cQ3d^7m+vfACv-@Ul!!264g51(Sxkhj%Zw{~j`MH@$$E zm+xsL!B3}1(DP`=Ht9-gUreYh0o7OQ3fN`TzA^d-(Br|!v4ULqpa; zQxUWj1Bo;}B(OZ-wo!8%hZ6ebuGt+XjocOr zg`V(N-1(5d&S*wM1HnIcy_bzrf(fa~P5ENH2~*Tf?xV-VKB_;}{3h59CjZY4A6c~C?vmM355Y_^gX9@DPuziAzR*1F5y<Td~pU9uG`Ovi9FN)|g8EP;BQwZ}7)^(rOQ` zqJ6SN0u|F{ho6eb1x{}uchUe7UBB<~^2`W!w6RGc$R&r~T z!r2yjLBrx1i33ha14G1}IS#fubUp2q>S;VS)H5qYD%&A}agC2PXv@IfRq ziqa|LHx^M5#)+F0ql;uo!*0HKcxP-8EfBPtRKXS@`eZ{qpZ`QG+ zus>r6hLh=Hw%COIMAOuYolfc!5K@c0pc!37e~R8_EzGvpXIJpJ^noh7)*7}nYC zD_Gv14)c$shH1qwgqeZlyOTsJ|VKfba*@g7u_cU}}ea6+gB(_*Ynv{*V0+}e9(Na?R8YBGq=w#SxV zrIedX;CQ0T=$5=TFp^vA0y0t`gJU|&pkWrHGUPwCy4h)+?D};e*C%cQzN%je5VzRg ze2u@sKB^+bssOQh_kEz#%1-cGW`gm=o%5UNPlxt!C#J+NZoUapraE~kt)wCVWLQuF zZM~G}L=-jBQvo+vMIr|baE$pe4Y5q(&1|5l*~~8FvypS8$m;h}rQJmlQmg=kmO^SO z5e+Vzd2BubA+@S+ctezgapdn~YA%Q#Ttf)OP}&GAM>f+Rzf$Xk$ODc;oiRpgLsGEDcJ&>)tRA%M26818OPYd$WaF`Wc~;hS(MQwym!3K}G320_N?kem9fONsGhh z(=*t9n`EFob_ty4-YQ}=DPZIfP6T%8iEAB(N9y894Z2rafsA-_L4w~V#ZBZtrLccl zY|^PhhYTNGDGSuFuv;dVCN0dfCc}o$_qxVPsrWP4wBriM_h`4FWG>A=o;h4Eb2WQ! zVzJ1Ns7v;LE5NB?;!8k6Ao(dPRT=_5zTNfog0!25@J?14lrnSXhY*ASm`UJ68{1s< z{mDv@0-F9$KX0+RRv2-Xbs-+Bsqm(}Xbq)#4`z1eEX`ny!mPHW>)zgq_wl?<+W^QK=ZpLqL3DhGG2+q9Sam6aT1ozL`Q{ zMeGLb*hNRjl-4xkbeU3cIBTMD+jh4=j<4%qdi}6WN=u8)zvzW6#}p06xQ4SNJKFX; zk%xrx5Fz6{*a4DxWnF%J5wM<2J&_)1-MvCOu#Hs0qPh3&EP6VoE_C9Wv>I%V>rm3z zKOAS%wc_)egh2?Uxef4MTIftu;I$kSd#^66 zc?`dgMo-B0o*WJp2nVo#%J3zy z0Y3zD%<;o@sPk>m%xX_{Sn|2BlHtRzVQU~nwA_5MF=9g~bQN`e0pZ^T_YjBDKUXXn zW;Hzd{!@w5(ENOuVs^3f{$(s&!Sh(|*IPX5vQNE*Wr%2;5~{rOrRmd-o(0bUrm1_cU~loH^IDRpwS_NC9Cw%!DeJd~1LH3bEJm$%RN|5L9x zq!6H)DShcb%;YwVYEQS^3l2+qq~gS9l5_IzBn)a$tl^k35oOcu@}R?&ez7npjL#5f z6G>8#r@H+bnTE`rDQBetAz{k=T z&xDpyw5CG0Y-)=Z`yw|vv<+phCsLb#%2cfYxv?jKt6ZgjXgF(O8%AG$p6Vz|(YNdq z&~HlVTu!*^J@AoRzC(zagJ*XO-o2cDTGKkjE}D9c%CS(WGu$}}06oWjifIG>Q&T95 z738j^)13CFl>ds(J~2as8D`pRI$_6fn|dkE9elixR(#;x`&ymPW0Nk=BzhNz!;Zo? zzA#!?PzP*B%d-$3A844IP0T8N^fQ!UGtph-yy`~Icc{@ZAH0XkjKmJ(;7|VaILW4 z>0;9N>Y&R_!Ptbg9?SX;Gne(?X6I|rCAOx$S!Z}83%v0g?B6pw*p^&dk%WdW(|*g&`H^?(sXp&6Mmw_U`GU{{S<~Na8pR2tmdOnF8JF~(w6d0lA7lk?T0|5M zLTIR@=^&l2gXEK!Zomq-LCavvLA}G!5xXsg0VN_Z05kE^NK02KZuAdM7G7yNd+tq*7DSJCqWw@}V7by>2_-pYxR z=R231tYNLry9AagnDRB7CQOnpi6C7PGExA3HazEJg33)CW$3ihZTF|XnZs@0JZsL1K$dwkK!Sz>C_I|$QwdYURFxORn=Th!$>Kv&5^o15)pnuNG zyb-!`I^WZ6O=aZD?krZ&bl6zqEPvL ze~~oIOM@pUmDgqPH|UuE_VZNh5W@NLhEe5dE*n$LBFArtyoy;vAntFxBLDHRFCwCo zm#?zo!oaYdTjRSvbhGM~&pi1L75QI2*MA4Ls;7|J8E05`2RyawmY>;wgFm7YY5wo4 z^WVPOAN@kk2ZR7wTKZ-#3qm05@DBo5yt*J0dCY%&_<#QZ|6Tj=&%e2eh3BgeJ)EsS zKSDkgc3&J7f5`ujg+kNg*HlmGq@@4jrKuo+v+ANLdkQIV$BrH28}J~$7gDDDSCp8R z1pfGT{M`7*>VM|X{O26;-g8RMJh{T5MQ&uR-+_e~!0`FUhn&ubCkoAPBr=|{Ctdmd+8E!ML`hBdM05Wmr zDfHxJJZCg+L96xS;mWtC8GVpRSv#^0GLN*!6UmFveX0dkV*T2@sF+jzAw`L3;cO_ZA@V8qnx? zQ7L%lqammrbNlxvIMo>WnFo3ow?ueUJk-(gE=m#P+ z+CpRvlTgNnZc%gRw3=?pA>{>v945eqer8K{#oOU8-ueL*WOs0G@_&YLeiFL9v@@TG z%_G=-((2%f@S?tG6GAvad1qVwXb%|{e*|>slYvZdb(}!NTG^W*>%Ixb*G|9X*p?7i z^&|E^i_8#B{Z-LBJKb)`+6suWaTmYYeCQ9-g8eNdg9VA&cz-JhlnSg~4sSq=V)bST z`R68ARW?iGYiSJ>-ydbV*8+DSAEcoFf^+{1k@DqYx{}Z9Sz9$>3>Q15e@7HFO(D+F zqAidqF$)~|Q0W9e&6idX(wR;|nKli>o^C`TctmvGUW<=zy@tx;^HF1l^wIu$onxv+ zI}%>+2GGzOaYBdw_~*sLU-5Tp5b7V9d%6q=@&|a)`^!X&Utc?fgu5AOAW8?PZa~-y zxm>NTNrB#B@#0QtHJOLgu;TJ58-N9`#P6d%%d;+5wT}ImGZxHf4Hv(dk#_aH%Uf<5C!%dkjsLbn- zP5c7{Z{DH}+jid+Q^Yt!1oqgxLcVmvZkO!eZajk80cG_U=f_uM5PpMrTcemBPmns{ z05&|d*B1@xrp16kdd14cf5$DiGr`uW@-unWo5KGa-M(vrs$442gqTIfX78I#2cC*0v~XSod*d&`U1 z=g89Tb-PRUh=nRZad1GGFVUXfg9uvQ$yX)0!k&IILh@*h`CDUgSwEg&-vZz^A%mD% z#ZbM7zv_Q}r9>8-Xv@SM7M%WmV3#v2c#{_D383RiggN<^eo55K~CqRftx`>(& zt~txh*R3tBT^jS2&su4%gPWT<3ZCNf6C~K7I0MzzR&Vjnq}bc=#pc;!V)N(YT9w7u zov%@s9KHx{yU1}$#r3$?iKsfLV`mZuMb=sO>cK0h;Sv3}OaN0CKLAxg4xvV%Z~s0C z*M+YE+a#oTyt!+7%D$JRl!ezkCh+(6uh~iHW1MOXvRC}F;sgZo)-2xAMee}BPsBqK zjm59~G5zd5qi#*qGtTU!d-gYX~(#UR?DAVy;}J&X+2-gamKEE}Y7} z62{Gp)nbN=MS0PK%@zsn@rPgZ%rEBnVC3RIsB~iDj%3BM{*3D?Do1}x+VjR6o31kQ z|I`8~aq|XhH|@5|G)(`=d(k6Ul0Eq_S(Fg(Md#i|5!F{|{DkSV8%b0{2s2r2{e0hr zYrq9Rb-evZK$oEC2&}(b)W4mqfFP;%BvD|G1dr@Rf^ym|!{?031yB2(B`CV~6V5qg zp`IR^cY9&(y^&+Q(lv@W+fc}UIhLJF>IqF&uL^^HP!MPBtAB=Am}}`pDNm1u$nRx( zoZSNzq@byLrP%*C&s4J!TyD^G%I_u0{9f?N1!;H$NPN_7$LB~68gjq!5jv(jqx@U& zXmFWR00ER0**BrtrgTB`8IA=xNoVx~SdsdNxjB0y%e)=GrYtCp(wu zW{5H$Bl$*zM>@k=ZNDC4h>{J!*n4Jt&Xj(_V%)4T@q?FV6qJcy)t}}Boa}}IN2oF` zh}-a;`1|}G1S1;sQ{dwxBfga9aPwi29Jo~`V#gIJJU!RhJ1=1k1MpLGZw{ytkzanb zjo=!$#)C~WA3ZRuGmS=>fB1RL@>-u%!^TVZ9lO$a!51g|0V4T-Sc0C1|AtUspu^;u zoFB>&q~W9@H8#J=UhF*?VFfs@9eV6XRv$^&)z42Z{S%%4DGgqS0M49Lt-R$6$W@`J zZtdx`Y7_PeNu@vxYdnGkj<$fupIdlz%j(EIQomy&!;{LOLuPInqv+`Rs&>H(=~x`Z zBbf2SGjuzZJV{<36tb)@~9D6kdS$`fReG#Z6uG?MvM1CVLR4LUTNQ%$m7Q-NDMo;~f| z*PQ~6POx78@_~@}SJX9DbJY`X=I-mg4tl{R1XZhJHE8PnxrCS?70=Qtj7q5Xz$*W? z)5bN~)+TvSYEQDb6unPeiInFsry7rxZ?nJ&P=3!#vga!LR6=$Kj_(O1L9f)GHp&$U zfz`A=8bglc!?N%pl10-Ik@}y_m@>WhdWh;S0z0)Dw56~G31mYNu3-hbcXH23yt^y4 zZf})Qw*T!yOz9V0?a#1mLm&CC5dzbly!W9vX#Vrw=dE37eaqEwi@lD8H;^<&f8V?O z8`5mrJ*@oMOj-xIXdhmP=X79Ih+crq`=b(ZNT~Wl!$wF5Eaa?1rJucnSs8)E!U^cB zNw)1`_Sh4GETX?Kh4JVsJkuwB;169ax^OqwacKxldq43@$ZU&h#z;BVqR`KA!j_{X zA-CrpVt~e(0Vy)ZoD%$6_x0scS;qz!2zJvyP;2n)_5%6-MThryx}v&gN)=vTMKm(y z&=7c+d-f}+M=p=HnY)zrovff;HZ!sH-P~XA-*R!Ia};my7)~v7HI!}_6uB-`HEO4B zE~fHWwku6Po4?Ft-Gx1~`Hg=1;#Jlv8ImE(JC3p4vJ(zMi(W0D3tu!1v`~?BlRT7c zd|zcQdb7LePAgr>%A=mKf;k&amk>JFP{pOV7En~joT)m+cm61s?c8oXM4$vFOpyo{ zeR-#35|G|#5uvpE^>L7BcjhFy{r4`vho#ZdUA!!xJ8MGonAd51AZU48#lpT(zc&3b za|@GXC#@#W?!IgFsuFNW&y4cG*(oB?*Y>kV^AAXG$tr5X zqlwVc8lSO=^>7v!)NA76;fQl4JLPkmkDjJP7T1zX!Hn_mfJ$b(&#RgE)a_I96gS89 zPd#%OuRfBISz_j5(luur1*!1+$=kgposztGq|Ou$glhyxMV@Iv052Bpsu89Ps)`|6 z#yoZA}^IV9#n zrO+hALmzR~gHQa`bYu_9wG$ODxZ`A-k6<9N$m3PtG7;5RL=owBGbvXQ@GggpQxB7Y zNsnYCudKg)tKGO5#tyyR8q;uM46n?pCuYE?+BKhNEFW#7c5`R&K?5E85!BzSRsp{> z4YZf&@ks5smhnW6tA_Wocz54^B-L>~g3U|&$F_mr0?z_*X1#dmC3S^&?=z*c!cN5L#yq=3 z)^Tx2ZhWEb>0Tz?Mi0k5>6W&;`g?^ddojU;K?!#f*|%Gi^$9#Mh%pSRR+OK;rXm2`IdOVlllpl*iMVRs-c zrSg>e+-0ds3~S{fzf;Le*4^kuvutJt}6`6DfDeShT#agdwKeUicJ@ zJ=zv*+wh+H7@0=HLQ&WnB}@+pE>LyQl)!Z6ynAGxd@xBWyKGc&%Byn2Q?hckV~?Ii zrT%a=UTCfJEX4BU$IcL(Q9DL+oa97V0Ks|i4x#iwQ+g5;F%s?n7N^*$)rrqF$Cas% zATBw@X=g4sfU}BKEbe9kJNnBPMYXH_i`$Kay<6{+UVch1B@w#Z{HSO z!cEA^JR@>I4+oZ|-VLUgufNJE8~ZhhkKp|UqmQcR!acd;gEealZb?Rp6f7s3HgyGE zn54q>$YAcxz{|aUR9qOW+4zO>2LBw_&m8@xZr-S&Gvkg?tfs^s%lH{PPjcYM1m%eLV|2ou1lv#fGLtKUdYZc1*#=t)&xl_P58G;)^e{@eCQ3)w-tCmvHA1kcXBQW_q9jsKbO^kP`qXc4pRlK*NE@28~E;q`y&3sF(r*vMFuU5i9 zTqHtka_EjBX=y{aWSYc~(>BHUslZ^l_*(RG&r|XwqO0af!Gt8IE0|5D3@yul#oxLa z8l1v@v{XedB5$tk+`$ktpP>2t45}(1dc#q~e2zLi2ByA)TqQ)EvRzs3Qr#C?zxJp! zvox#rK~>Xj;?htbjXK;VQcp@di4!9|md{@b;gRCw5(kV3x?jC8u84g)>jC|1p&bFu z>}PS!K5b!C?YEZbKPV*M7BlfPACl<56&f72CTUOC&XOP{=V()8|ETF=hBssCnWmXF z8vB#Z_%Rtp_E*=7KBiM*9wbr{@Nd$HZ`7S!o)%LS)X-@E1#?TDQB+$+E!*sS0o?C@ zfLBydqkF1dT-An0QlNg}VfQ5;;6ip+%nEXsd9_`Nb_bm^sf^R;nn-^R;bvr`3+ z@(kO8B7afZvF{y^DW%@G2NTaC+N+X9wrMZMGTvM1gx(dNHA@Xnv18M(?7tVt$s@(e zSyR${o9izq?U2vNRFwNK{R6NwJhOXv!(?@sWr-gqF+GIpy?w> zBhsJFQQi3IRiGDnoTA)Q*0U)hOrsc~pO7=#_=6cUzS-?j&D&gTgSn2d*%%$aoI@?V>!J)@iENECSsjRhmE?q2 zl@rSnPTu@YCI7yiyWOayQ(gw5{Ycrd41L@ktj}X_sfyf&;Kw|R^~=aC$D0|-KFQ&0 zWh2SKZHi4b-BYp<&t@ObKTa_#-o?RCRRIHPsl6R<-hdbPuiT(zs*(<(9t=%*S1c8C z+6|*u9mam4bE?}|GG}^kCYBp40ynhimQUgd1{8$Jl1 z{p)3}_4;oHPkN3U7ysTVl86e^pScVtk&$ykuu)tzzqTq%3mzNGbWqh)kpB@kiZ9_* z*@=+mVKa32%y07ENWmgKG*10AS*#ST%c=4zNNL0W#3C>4V|18sC9%5U)FbL+OFhNL zrm8KRr+ICpz7-dwtMWKe97`H~ed4b4EX8-C^TZCt$*`d+`<3@@-z5$2>S?`48xfUQ z=z5wxVjX4f^D6@X7KuVyUjKSl$z}1)fz_Rcm5H~Rs#jFC)A`9i2n@d{F|V;0dDY|X zBhD2c+~ybRnHa4v9vXa2;9_Z|*3d=?b&0vZBVVEVv7U=HBe{3f0wPAU$xZvWuw1=Agfrq=CdU_XQ=MUCk#>A1B^mxb!1o`e zSxz<5fw8PNZaha&G#t4p+Xyuoei<}-hZN+`^&a;+cC^rx)FSRyGdrs3dOV_bvUygF zk5wx=Bb;r}er(F}t7;^h&o+aZ1qU7}Asva>T4n<5b}Wko#foGHo6;S!ra+Z(NJ zK|vu75qmcoA~`CE4%^?xjGL$CCoP;aUZ4TM^Yx3FXxxB&wO^f4pY$R#O-WaB(qX!H zL54kkz0sLS_8E1XyO9Zu91g%~c<;aUsA%nA(wtvDfn=umrIg%u{6sTNQkzS8LY8c; z*@@`~U#nQwMoTkQxkcNtuA$^$ATV6W!(R4sq$5;dB-T3S%d6|5!-Wdaf-4TfiP z8(VjY351OwUzNn`Zf4!MC@#L@f-91846FC(dbE48&!rhFAwn}FAZ?~P_qI0PNX4Se zK)b2%lXSD!W^{1aMLGvbAp>TS*7^(3V{Lhj7M-|O73VoKJLhaw3q6JU7WsZdv|6sX z-c42B6W-=*jlQ;d=8{GyjkjF{@dSCaLkZIyVwH}k<(8p-eT-xtyP1ox_hF~f*t%$U zkB*>7{y=Kwl%|8!IOhX%be@^%YyMD83;a~-w;hstr_a8ZJ|EK}j&D}e{!ODn_x&RI zddcP7fOqu?rust0D&9jSqFQRPwJ5K^6+6Pc({x28iZBGQ^|A!(-Z>7p7OPwQ*&FL zdfwi>k@izz8p9!Q4A(f5%GKB%E`$PCs`;?rVUI=q zyAz%52!ycGo*DPcRHaoHtO$x0gc;vaQ81gtp-DXobeU4Dn5LyXF3reJ`yfJOWjc{a z>FCE|@yCXu*T|a{07@BpG>KD5l15;+=_wA&8RUzW60}}xHg$c@7cDd%$4ooa)K2P* zk#O<1ijbWe0GxD8g2|rP&rPELarjTNe&dE%Wh?$%jZCyCIF~^mE00#wCPOoo_>@U`5*2 zh7YzcfBhPokN=#jqNI4(mDM)r0Fu3~Ns4tPWiGEH7^@awq9{|8x6<7`}tF?gbypRUML7{3z2i++>! zQc5AQ__nfUcJ*uGPxMQJe3qMo%^to_lamAQFbPzV;0dxurAJ%zxZ}LZTk4*eQ?lX- zzJTOkByahSTukW)GE>p!5%I>H=GZ3>ACnKA+{-j^4SsXn9~IMJyx2^;$Qh$laOeC5 z3;W{s34%=vz4z9bQ?%_KgZVmE{E|);QX}YpLY9x1FP8Vk;liC z`i3gG@C`rb|KRnSv=NoSTQ@xD5%?UCv*M?+bE#z^uIu}`9DO_{$B`iv&Wnqs?>N>q zgzA39(6(b&&856-!fzyc=#I4*4XWNRWqrYx=XHhkA~QZi#J6N3`h+x4bLG!6H>2}p zn{I)6p?*CqB7V&BUGI(JEOjRAT$JD|rt>n-vy5+Ls|w>s7+BPSa`=Wj_k&*UR1qGV z_toEKO?%mBEr`yh#ZUSyoK&uUR31))(id<$`0E77MF03J1m%R z8s!+57Iuxx!tprvhq>$&*E12B`C9S#%5;G2!Jg{MP?GST^%4DqOqEFt;27U~P;DmWc%+(j)sO+anWBAf(M*6r=RZ5X-TXw3l$ed-DhnrJv&WjYV94JKJyCN|k0p4f z%gpVt06EPcmce_Jr6{ zi2CB=#3Z1ElX*|jSfv@t7Ae?~kU5UuOg~+~inPY9Lc({73d3}LEbOq-qM4xqi-6SU zQ*_iNA#A5AG4Mho%Dl=ArxziAI7yL3ubbXOO7)U(9%5^V{~e9j&S9Lqj103M^m=Rt<*wqsnM6}a45cNv{i57 z%4F47!&Z7Ug$fW8S<3QaN=8Fib7N(HT7r}?PnTjME+W&k-L9`17!={|>#_=NGY>BX zT6JVA!c`~A_L1$Rx{!K0c%e&3NqIl)4_J`2A}6nd5yLl+8yTZ`9d)~7ZAk0h$A4OM z>;hvSHr`Cf7){(eZXw!SUiI#}=?QZD5$KfOGLRN_$!+;o@HlR5*1oX^t7dV;6F}W} z!{lO7b~uTK>`g;Xl9$h0o?FHdYrEMzGS%dZu9SOJ-d9)FZz+#z#oZLrQ+CxYBWCZx zxxejXDi^y9;)Y~S-Z-R7Nte4&&L{#11JovP=s38Q5lo1QR5EBRg6nW2hQG=w zrFV&{qzpNr$b!IDdphUaR!>NQTB%jAc02HP{JZt@tW|;{a=#_&-30I%NZu#R*8Xg5 z6B=PHq9%U8P7`GKX>R6&I;GOwFDcj=khr5Pfh)YXV#K6p%;Md*%Pu7@#7a?j_0CK6 zrY`Q4a2IyENT6tz1`U~@rzSh`GEje;8kr!xkfXlwC>r zpHOIc>8k^d;R~8Qw5e5X1Z2UBK4XrIN0Q07?HgVE&u)La!?SE(?L@3z-Goni({FNM zwf3q`qCy3sO*4E(pAytu}P5pa+-#BdH&$;R~F zxMtG-W{1``ty?1Z%)>@cj~iE#@Xg3HVO9#IelMydb`<&-^N+6P!Wh+bGIusOYS>1n8b6)MZ~!Sv0&M`eUy*K&zMQ)Oi)T6EK4JT2^iN2|%M2tr|yhhgs}UhUO+ zOocnrY~=4edGq3YV!UsE4h|htsl#@M&p40Z_cwz(;|h1KsuYCe1}BU+8_E|5&V@*sU<#RJyew_Yz;??EeboFfDULE(nK{&*nj3J&CPAU6nS~3PR#B8=2;$i50 zYrz7A#-~5_=01wzr}k$2rfe45TwcQhPOumA=N&OmK!5#c>uVf=E|R1$et^LvZLa