From ab10a9f590ac57b5aefe3c21eb2da6245390fd80 Mon Sep 17 00:00:00 2001 From: Forrest Date: Mon, 13 Dec 2021 13:57:43 -0800 Subject: [PATCH 1/6] big mitigation edits --- ...1-12-12-log4j-zero-day-mitigation-guide.md | 280 +++++++++--------- .../img/log4j-attack-and-mitigations.png | Bin 0 -> 151966 bytes docs/typedoc-sidebar.js | 16 - 3 files changed, 133 insertions(+), 163 deletions(-) create mode 100644 docs/static/img/log4j-attack-and-mitigations.png diff --git a/docs/blog/2021-12-12-log4j-zero-day-mitigation-guide.md b/docs/blog/2021-12-12-log4j-zero-day-mitigation-guide.md index fe8a40544..939451bee 100644 --- a/docs/blog/2021-12-12-log4j-zero-day-mitigation-guide.md +++ b/docs/blog/2021-12-12-log4j-zero-day-mitigation-guide.md @@ -37,101 +37,37 @@ authors: ![Log4Shell Logo](https://www.lunasec.io/docs/img/log4shell-logo.png) -A few days ago, a new vulnerability was identified -([CVE-2021-44228](https://cve.mitre.org/cgi-bin/cvename.cgi?name=2021-44228)) and it has since spread across the -internet rapidly. +A few days ago, a serious [new vulnerability](https://cve.mitre.org/cgi-bin/cvename.cgi?name=2021-44228) was identified. +We were one of the first security companies to write about it, and we named it "Log4Shell". -We were one of the first security companies to write about it, and since then the name we gave it, "Log4Shell", has -caught on. This guide will help you figure out how to deal with Log4Shell by identifying and fixing the vulnerabilities -it introduces by walking you through the current available options. +This guide will help you: +1. [Determine if you are impacted by Log4Shell](#determine-if-you-are-impacted-by-log4shell) +2. [How to Mitigate the Issue](#how-to-mitigate-the-issue) :::info -If you're just trying to understand the Log4Shell vulnerability and understand the impact of it, please [refer to our -earlier blog post](https://www.lunasec.io/docs/blog/log4j-zero-day/) about it first. +If you're just trying to understand the Log4Shell vulnerability and the impact of it, please [refer to our +earlier blog post](https://www.lunasec.io/docs/blog/log4j-zero-day/). ::: -## 1. Be careful what Log4Shell advice you trust online -Because of the several impact from this vulnerability, there has been a lot of discussion on the internet -about it. **Some of this information is outdated or wrong and _will_ leave you vulnerable if you follow it!** - -In contrast, this guide has been written by a team of professional Security Engineers at LunaSec. Everything here has -been peer-reviewed by multiple security experts, and where possible our sources will be linked for other Security -professionals to verify against. (If you need security help, go read the bottom of this post.) - -We're making an effort to keep this post up-to-date as new information comes out. If you have any questions or you're -confused about our advice, please [file an Issue](https://github.com/lunasec-io/lunasec/issues) on GitHub. - -If you would like to contribute, or notice any errors, this post is an Open Source Markdown file on -[GitHub](https://github.com/lunasec-io/lunasec/blob/master/docs/blog/2021-12-12-log4j-zero-day-mitigation-guide.md). - -## 2. Known Bad Advice - -The following are all pieces of advice we've seen thrown around online that are misguided and dangerous. If you see -advice online that contains any of the following, we please ask you to share this post with the authors to help limit -the fallout from Log4Shell. - -### A WAF will not save you from Log4Shell - -The Log4Shell vulnerability can _not_ be mitigated by using a WAF (Web Application Firewall) because it _does not_ -require your usage of it to be *publicly accessible*. Internal Data Pipelines, like Hadoop and Spark, and Desktop apps -like the [NSA's Ghidra](https://twitter.com/NSA_CSDirector/status/1469305071116636167) are affected by this. - -In addition, there is no simple way to "filter out" malicious requests with a simple WAF rule because Log4Shell payloads -may be nested. (See [this GitHub](https://github.com/Puliczek/CVE-2021-44228-PoC-log4j-bypass-words) for examples) - -If you are using a vulnerable version of log4j, the only secure way to mitigate Log4Shell is through one of the -strategies detailed below. - -### Simply updating Java isn't (likely) sufficient long-term - -There are many reports online that only certain Java versions are affected and that you're safe if you're on a newer -Java version. - -We believe it's likely only a matter of time before all Java versions, even current Java 11 versions, are impacted when -running a vulnerable version of log4j. Just upgrading your Java version is insufficient, and you should not rely on this -as a long-term defense against exploitation. - -(Technical explanation: The reports we've received state that it's still possible to instantiate local classes on the -server, versus remote classes which are how current exploits function. See our last [post on this](https://www.lunasec.io/docs/blog/log4j-zero-day).) - -### Simply Updating Your Log Statements Is Dangerous - -Some people online are suggesting updating your logging statements from `%m` to `%m{nolookupzz}` to mitigate this**. - -This is bad advice, and we _do not_ recommend that you follow it. Even if you manage to patch your application 100% -today, you will still likely accidentally add a `%m` again in the future and _then you will be vulnerable again_. - -In addition, it's possible to miss a line in your logging statements or if have a dependency that -is using log4j with `%m` without you relizing. If either happens _you will still be vulnerable_. - -We're strong advocates of a "Secure by Default" mentality with software, and we recommend you follow one of the other -mitigations instead. - -_**: The zz is intentionally wrong here to prevent blind copy-pasting._ - -## 3. Determine if you are impacted by Log4Shell +## Determine if you are impacted by Log4Shell This vulnerability affects anybody who's using the log4j packages (`log4j-core`, `log4j-api`, etc). That means it's primarily Java, but other languages like Scala, Groovy, or Clojure are also impacted. -### By Automatically Scanning Your Package +### Automatically Scanning Your Package -:::note - -If you're running Vendor software with a vulnerable version of log4j, then you'll need to check out the section on -Vendor software in this guide instead. - -::: - -We've built a command line utility that will check files and tell you which ones are vulnerable. +We've built a command line utility that can check `.jar` and `.war` files and report if any are vulnerable. +It works by scanning for hashes of [known vulnerable log4j classes](https://github.com/mubix/CVE-2021-44228-Log4Shell-Hashes). +If you have a vulnerable version of a log4j in your built Java project, the hash will match a one +of the hashes in the list. **[Download from GitHub](https://github.com/lunasec-io/lunasec/releases/tag/v1.0.0-log4shell)** _Make sure you download the right version for your Operating System and CPU architecture._ -Once that completes, you can extract that and run `log4shell` command in your terminal. +Once downloaded, you can extract that and run the `log4shell` command in your terminal. **Extract Package* ```shell @@ -188,37 +124,34 @@ $ log4shell scan your-java-project.jar :::note -Please make sure that you're running this command on your fully built `.jar` or `.war` file. +Please make sure that you're running this command on your fully built `.jar` or `.war` file. If you are +using vendor software that you think might be vulnerable, but you can't get the `.jar` or `.war` files to scan yourself (or it is obfuscated), then you'll need to check out the [section on +vendor software](#checking-vendor-software-versions) advisories instead. ::: The source code for this is available on our GitHub [here](https://github.com/lunasec-io/lunasec/tree/master/tools/log4shell/). -### By Manually Scanning Your Dependencies +### Manually Scanning Your Dependencies -You can identify if you're using a vulnerable package version by checking your dependencies for hashes of known -vulnerable versions. If you have a vulnerable version of a log4j in your built Java project, the hash will match a one -of the hashes in the list. +The above CLI tool automatically looks for hashes of vulnerable classes. Read this if you'd like to build your own tool or scan manually. #### Scanning for vulnerable .class files -Alternatively, you can also scan for known vulnerable `.class` files. This is more accurate, but more complicated -also. - Our automated tool above implements this functionality, but if you need to do this yourself then [our Go source code](https://github.com/lunasec-io/lunasec/tree/master/tools/log4shell/constants/vulnerablehashes.go) has a list of hashes that you can use to scan with. (Thank you, [hillu](https://github.com/hillu/local-log4j-vuln-scanner/)!) -#### Scanning for vulnerable JAR files +#### Scanning for the log4j JAR file -We're going to be using a list of JAR package hashes has been published to GitHub -[here](https://github.com/mubix/CVE-2021-44228-Log4Shell-Hashes). (Thank you, mubix!) +You may want to simply scan the filesystem for vulnerable copies of the log4j `.jar` file. We wrote a small shell script to accomplish +that before writing the above CLI. -This is a less accurate method of detection versus our automated scanner tool because it requires the `.jar` file to be -present on your disk (not inside of your built package). This tool _does not_ recursively unpack `.jar` files. This +This is a less accurate method of detection versus our automated scanner tool above because rather an inspecting inside your code, +it requires the log4j `.jar` file to be present on your filesystem (not inside your built package). It _does not_ recursively unpack `.jar` files. This works best if your dependencies are committed into your Repo, or if you're using a tool like Maven that downloads the -`.jar` files for you. +`.jar` files for you. **If you're using Maven:** The default directory that `.jar` files are downloaded to is `~/.m2`. You may want to clear your cache, and _then_ rebuild your project in order to limit false positives. @@ -235,10 +168,10 @@ cd lunasec/tools/log4shell-scripts ./find-bad-deps.sh /path/to/folder/to/scan ``` -### By Checking Package Version +### Checking Package Version -If you know what versions of log4j are being used, you can use the following information to determine if your version -is vulnerable. If you're trying to check if your Vendor software is vulnerable, please see the next section. +If you can check what versions of log4j2 are being used, you can check for any below the recently published +`2.15.0`. #### log4j v2 @@ -246,8 +179,7 @@ Almost all versions of log4j version 2 are affected. `2.0-beta9 <= Apache log4j <= 2.14.1` -In other words, if you're using any version of log4j that is _older_ than `2.15.0`, you're almost 100% using a vulnerable -version! +In other words, if you're using any version of log4j that is _older_ than `2.15.0`, you are most likely vulnerable. #### log4j v1 @@ -255,43 +187,37 @@ Version 1 of log4j is vulnerable to other RCE attacks (like [CVE-2019-17571](https://www.cvedetails.com/cve/CVE-2019-17571/)), and if you're using it you need to [migrate](https://logging.apache.org/log4j/2.x/manual/migration.html) to `2.15.0`. -### By Checking Vendor Software Versions - -- **Log4Shell Security Advisories:** [GitHub Gist](https://gist.github.com/SwitHak/b66db3a06c2955a9cb71a8718970c592) - -Many vendors have created their own documents to explain the impact of Log4Shell on their products. +### Checking Vendor Software Versions +The above scanning tool might not work for vendor's packages because of obfuscation, and in any case, you'll likely need to contact the vendor for mitigation. -- **Vendor Software By Version:** WIP +Luckily, many vendors have created their own documents to explain the impact of Log4Shell on their products, and an extensive list +of those advisories is being compiled [here](https://gist.github.com/SwitHak/b66db3a06c2955a9cb71a8718970c592). If a vendor has not created an advisory for this, there currently does not exist a succinct list of which Vendor software has been affected. There is an effort by Kevin Beaumont to create a spreadsheet that attempts to capture this -being worked on, but at this time of this post that effort is still a WIP. +being worked on, but at this time of this post that effort is still a [work in progress](https://twitter.com/GossiTheDog/status/1470181063980896262). -You can check for updates yourself by following the thread -[here](https://twitter.com/GossiTheDog/status/1470181063980896262) (there is some information already). +## How to Mitigate the Issue -## 4. How to Mitigate the Issue +Now that you know where you're vulnerable, the following sections will help you to figure out how to patch it. -If you're certain that you're vulnerable to this issue, then the following sections will help you to figure out how to -go about patching the vulnerability. +This diagram created by the [Swiss Government](https://www.govcert.ch/blog/zero-day-exploit-targeting-popular-java-library-log4j/) is an excellent +visualization of the Log4Shell exploit. Take note of the possible solutions (shown in red) as we go over mitigation strategies. -### Upgrading to 2.15.0 +![log4shell 0day diagram](/img/log4j-attack-and-mitigations.png) -Apache log4j has released a version that fixes the Log4Shell vulnerability as of version `2.15.0`. - -**[Apache log4j Download Page](https://logging.apache.org/log4j/2.x/download.html)** -We recommend you upgrade, if possible, or to follow one of the other mitigation strategies. +### Option 1: Upgrading to 2.15.0 -### Enable `formatMsgNoLookups` +Apache log4j has released a version that fixes the Log4Shell vulnerability as of version `2.15.0`. -:::note +**[Apache log4j Download Page](https://logging.apache.org/log4j/2.x/download.html)** -This mitigation only applies to log4j versions `2.10.0` and newer. +We recommend you upgrade, if possible. For most people, this is the final and correct solution to the issue. -In log4j `2.15.0`, this flag is set by default. - -::: +### Option 2: Enable `formatMsgNoLookups` +The above release of log4j hardcodes the `formatMsgNoLookups` flag to true, preventing the attack. If you are using log4j +version `2.10.0` to version `2.14.0` and can't yet update, you can still set the flag manually. Set `formatMsgNoLookups=true` when you configure log4j by performing one of the following: @@ -311,47 +237,107 @@ Or you can set this using the JVM arguments environment variable. `JAVA_OPTS=-Dlog4j2.formatMsgNoLookups=true` -### Modify your log4j `.jar` manually +### Option 3: JNDI patch +It's possible to [modify the JNDI in place](https://news.ycombinator.com/item?id=29507263) to stop the attack at the language level. +It can even be done while the server is running. Please note this is a last resort, and should only be done if the above options aren't possible. -This is more advanced, and should only be done if the other options aren't possible. +The easy to use tool [Log4jHotPatch](https://github.com/corretto/hotpatch-for-apache-log4j2) will apply the JNDI patch automatically. -From [Hacker News](https://news.ycombinator.com/item?id=29507263): +For those using Kubernetes that can't perform any of the above mitigations, a new feature called "Ephemeral Containers" allows applying the hot patch +to a running container. This could be useful for containerized vendor software. +[This guide](https://medium.com/@edeNFed/patching-log4shell-in-one-command-without-downtime-using-ephemeral-containers-c69a9155ab1e) explains how to apply the patch. -> Substitute a non-vulnerable or empty implementation of the -> class org.apache.logging.log4j.core.lookup.JndiLookup, in a way that your classloader uses your -> replacement instead of the vulnerable version of the class. Refer to your application's or -> stack's classloading documentation to understand this behavior. -## 5. Other ways to Protect Yourself from Log4Shell (and the next one) +### Option 4: Remote hot patch / LogOut4Shell +Because of the extensive control Log4Shell gives an attacker, it's actually possible to use the bug against itself to patch a running server. +This isn't the recommended strategy for various reasons, but it could be a last resort for systems that you can't easily restart or modify. Note that doing this on a system +you don't have permission to is most likely illegal. The fix will only work until the server (or the JVM) is restarted. -The only way to implement software that is truly resilient to security vulnerabilities like Log4Shell is to implement a -"Secure by Default" architecture. This is what companies, and -[the federal government](https://www.nextgov.com/cybersecurity/2021/09/biden-administration-releases-draft-zero-trust-guidance/185166/), -are migrating to now because it's the only strategy that protects you long-term. +How to accomplish this is explained in [this guide](https://github.com/Cybereason/Logout4Shell). We are also currently building a small SASS to +apply the patch remotely. + +## What not to do + +Because of the impact from this vulnerability, there has been a lot of discussion. **Some of this information is outdated +or wrong and _will_ leave you vulnerable if you follow it!** + +In contrast, this guide has been written by a team of professional Security Engineers at LunaSec. Everything here has +been peer-reviewed by multiple security experts, and where possible our sources will be linked for other Security +professionals to verify against. (If you need security help, go read the bottom of this post.) + +### Be careful what Log4Shell advice you trust online + +We're making an effort to keep this post up-to-date as new information comes out. If you have any questions or you're +confused about our advice, please [file an Issue](https://github.com/lunasec-io/lunasec/issues) on GitHub. + +If you would like to contribute, or notice any errors, this post is an Open Source Markdown file on +[GitHub](https://github.com/lunasec-io/lunasec/blob/master/docs/blog/2021-12-12-log4j-zero-day-mitigation-guide.md). + +### Known Bad Advice + +The following are all pieces of advice we've seen thrown around online that are misguided and dangerous. If you see +advice online that contains any of the following, we please ask you to share this post with the authors to help limit +the fallout from Log4Shell. + +#### A WAF will not save you from Log4Shell + +The Log4Shell vulnerability can _not_ be entirely mitigated by using a WAF (Web Application Firewall) because it _does not_ +require your usage of it to be *publicly accessible*. Internal Data Pipelines, like Hadoop and Spark, and Desktop apps +like the [NSA's Ghidra](https://twitter.com/NSA_CSDirector/status/1469305071116636167) will still be vulnerable. + +In addition, there is no simple way to "filter out" malicious requests with a simple WAF rule because Log4Shell payloads +may be nested. (See [this GitHub](https://github.com/Puliczek/CVE-2021-44228-PoC-log4j-bypass-words) for examples) -Log4Shell is not going to be the last major vulnerability that you need to deal with. Any dependency you trust could -also leave you vulnerable or unknowingly be malicious. +If you are using a vulnerable version of log4j, the only secure way to mitigate Log4Shell is through one of the +strategies detailed above. -Or your next commit adds a bug that leads to an exploit. +#### Updating Java is insufficient -The list goes on. +There are many reports online that only certain Java versions are affected and that you're safe if you're on a newer +Java version. Even on newer versions, it's still possible for an attacker to instantiate local classes on the +server. + +We believe it's likely only a matter of time before all current Java versions are impacted when +running a vulnerable version of log4j. Just upgrading your Java version is insufficient, and you should not rely on this +as a long-term defense against exploitation. + +#### Updating individual log statements isn't a complete fix + +Some people online are suggesting updating your logging statements from `%m` to `%m{nolookupzz}` to mitigate this**. + +We do not recommend you follow this strategy. Even if you manage to patch your application 100% +today, you will still likely accidentally add a `%m` again in the future and _then you will be vulnerable again_. -The reasons hacks happen is because real-world software isn't perfect. The best lesson we've learned in our careers is -that preventing every bug is an _impossible task_ for companies. After all, even the -[federal government](https://en.wikipedia.org/wiki/2020_United_States_federal_government_data_breach) has been hacked before. How do -you think your security compares to what the NSA had when they were breached last year? +In addition, it's possible to miss a line in your logging statements or if have a dependency that +is using log4j with `%m` without you realizing. If either happens _you will still be vulnerable_. + +We're strong advocates of a "Secure by Default" mentality with software, and we recommend you follow one of the other +mitigations instead. + +_**: The string is intentionally wrong here to prevent blind copy-pasting._ + + +## How to protect yourself from future 0-days + +It's becoming increasingly apparent that Log4Shell is not going to be the last vulnerability of its kind. Any trusted dependency +can have security flaws or be malicious, and there is always the risk of accidentally introducing vulnerabilities into your own system. + +The only way to implement software that is truly resilient to future security vulnerabilities like Log4Shell is to implement a +"Secure by Default" architecture. This is what companies, and +[the federal government](https://www.nextgov.com/cybersecurity/2021/09/biden-administration-releases-draft-zero-trust-guidance/185166/), +are migrating to now because it's the only strategy that protects you long-term. ### What is "Secure by Default"? -Short version: When you accept that you're eventually going to be hacked, and building software with multiple walls to prevent a -single hole from giving an attacker the keys to your all of your data. Secure by Default software is designed to fail -predictably under attack. +We've written about this before in our post on +[Why Data Breaches Happen](https://www.lunasec.io/docs/blog/how-data-breaches-happen-and-why-secure-by-default-software-is-the-future/), +but the short version is: **Accept that you're going to be hacked**, and that the outer walls of your system will eventually be breached. -Long version: We've written about this before in our post on -[Why Data Breaches Happen](https://www.lunasec.io/docs/blog/how-data-breaches-happen-and-why-secure-by-default-software-is-the-future/). +Build security into the parts of your system that specifically need it. Secure by Default +software is designed to fail predictably under attack, so that the most sensitive data remains secure. -We'd recommend giving that a read if you'd like to understand how to proactively protect yourself instead of panicing -whenever a security alert pops up. (And, if you're like us, you'll probably sleep better at night too.) +We've made implementing that as easy as possible with our Open Source security framework [LunaSec](https://www.lunasec.io/docs/pages/overview/introduction/). +It works inside web apps, embedding an additional layer of isolation around the most sensitive data. Please leave us a star [on GitHub](https://github.com/lunasec-io/lunasec-monorepo). ### Resources diff --git a/docs/static/img/log4j-attack-and-mitigations.png b/docs/static/img/log4j-attack-and-mitigations.png new file mode 100644 index 0000000000000000000000000000000000000000..3886ce51b317b0df00f51413e5eb6bd6b4af0226 GIT binary patch literal 151966 zcmeEucTiK`+h^!1Aiehv(xgcT8%?AtAVi1=N{J9UK|=4nDM*oybRyDg=!o==fRs?B zCV&u02%GQw+uhljo!NbNXaCuE_sl)XOzxRG=Q;O0?elp~t{1MC0O0@+mw{F%(Qe2j7&^SR5UEC%#5t`j7*F~ zB!uy#WH-skZZc9+QZxQ9x9ctd-3<~c(s~jiegH8Y5eXg9bste706;`W^luIDpBoV| zVSeNkH*Vgdqy-QYk&qCRlKeAU!pH!^Jpd^k89krO19AovTMB-6M%j>*f*S%4YrC0D zCsBfOuRTI<-eP89Wn&i-77-P@Bd>5zQAt_l(PJ%b9bLUA&z_r^TfDHeva^5l*1^%q z+0)D0#~14NJ}f*UGAcSIHZ|?T$MlR(nOTKJ#U)=#%gQUh)zvpNHZ`}j_Vo7k4-9@E z`Y|;z;f0gHY5kN&kM0jB&bO24jm3m?9$@rq_2C}-T_vY%_uZD!xguvMw ziRzCB_)k1wz1RWD9J>xnit)n~5@Xgc-vH`aGJQ6- zWqxQhGCX1K+nuyXbH0JOT8nN6uC>wJ+Ed|78+una%2Y*VeVf(AkLY-wu|}1rtlpw` zMG1WkIAmHgT8Kjq#srFtJFFwPf1mU$YORD%Y^!=owx*A~>vfmp-N|7;Lab$70~pkv zp~2_2wP=cXg*G@X*r>wh;e3-li)a-w9N;EOviDxJ@Kb24Xg+bQ_~|tM)=%_4lBSym zV+KNnLTj!8y*!ISi->nvN}`>=L3Sq>_B?Id8k#Hek%1ADmUzzQ)Z^a8m#509mM*V- zJ!e1V3(iHzkTIIv|5vx@U2THk7~chsaEni?ajhN78K6aC8v{zstRLj`+A&b|bJKmu z=W%-_Eg_y_z+Z5hSc_i08kcc;**G3n$Yco^>6G!c(pRYuSkU(u5$V@rYcJ`F4ocx(_D!Up5Vy!GN3I%ojzyQs{aj0tKyCHr)gvOxT>e19(a#g$$m zLIG!s9zRE8#EZs}Nemd8-qz!&gXCdoW3ra}mbS9Po2DFH0GrTPv-^T5@!ybz-t$G& z&Y|CW+d5ea>KYJNUt&JvWhrz@KCu2a0;M=$_~1L45k*BEAV5e9W^oN5le((F`D3Ma z1BqKvlKtWI`-+Mw)&Z>(hPMW4nU>N9SDi06y0SV35Nk;^&KYm4jxG$FT0Z4>NukB> zQP`$Bl6b_5%k^^$)S`SNy#s=tXMCTQuT+NDl;Af__0fTvo4kD7ck%rXeBu5hz=Q8Zv}j>0;6GCTi@@KKxdsSZq95Vg z53d1dHSBAMwN%iFLzeGVBm{A$P;>D=8&NV7aQnX>gb6yogHAepfYkiC^aK^uZA7_i zMIK`3>*av{@@;p(Dc5w%PUrjIM`R+yX-A0`B>~-pEy;QfNRz-6Tmx);t^t=8)NUY@ zp7dY2QB{1e;_4;)q9O`^q7L`5_B21`x>Ot|5AtVW5adn4s3#3AL$OTvJMB;ItbH}z zE$~oe-j7f?;lVNb;!PD$s`&OZ%`4UAxgZ=K%dNo~YENlv|K zyEEh}>>2>B!vb+q9WxE8lmXKH?}d66of{jo+oP7-in8wZeY7ANn9?KTNR@f1gS&IQ zT?2rljQwDtY#o1^l?%L*Ra8* z{QG{=H}R7tJY~o=Kpu$S0AX!GDDU%7WxcMW)VNPjwL!+_3+!m~lu zcT&}57lDs&dVKFU9Jp&BP?2o*`4jOEw{}`p2u576DFxpjNDH)Hd9>f^@yq4+RzTur zJQhNS|9IwbpvaV?`HiQ?yY>dJ3U%APv0Nw8Va%~~9&AEx`}pUx^HofWE%xCGj1+@) za#XVtx;JMvTct;nsgyMGJjM9NPoX4gjzYN5gJ;bye?S;fio-m`gY2~q?)lzJm`Z6v zyY|$VoQ(VR%#(xldU9pFwIi`i9$;jeflDESI40@!pmWxN3fFcu&=2eYqygQg z7BHGQ&bq(S2Es^;N6K$!tRrGw)E?PEklD=XKjlRN=6&zh6$wuAQf%p%Q}|Lq2YgcQ zbKNdqOIkYCM?J->LSo)C?8yK*e!~Q~KGzx6Ml8QF!%C;ylf+Z(yGJT7jjhMh9^7q$eij%YEl)eWP5Wo;<m1a1KZwKuKa4 ziebP4L{}pTE1MH%6RZV>HlIExm6eVB+sMS}-iE2Hx(0+=L;A5l zfJ|?_)^!4OEi=8>ruO1t|AN`6!7nKijC2D$L_+`*wvM;~TDHVkJkfm{+b1FWG4kMU z!bOJoj(@G8PyVwstViJVHGoay4vwsC0_K9EF~j&5s9)8OR{t83<8Q6K^U3kUo6dTo zi=6`&g4OavmEyaGt^oxNuxmhd;2eVf0I^n@f@6<+(F6i;WJ5Wf<-D~GH2 zhM4`sshXf}g}{5b$7q&NLZD*}T(>@tTT4)V==%+w1Lq6|8j>01(HP3pv0D*85Eyf{DQJBI%KWF0+QUsIPE9Ad}V`jk{+?&P^05z|e+-)e< z;eQSKR{#7Z#2jDP#8)-fz9LSX8uQL&e_jK2D`U01HSTp{z;OKVDpe;jeg<^AfM2*a zbhXb%S2t!;;yYEaS0c1KAyLV#`Xa~f4313d=c3#&I*>+F4s>!fW3^MNpbX~CaZ0NU z0kN;pN?cs5vUmSHdvOi;CLQVpiQ)MQ3T~G~QYs)Oy&<=+Qulsc17g^6IJrkuLX}C0 zm6=fF2^*50=WKZ!I|ut4ahY#WdC@q9O1<@856$@4{Uo-4eimOXyXd~ME!`2_pmHSH z9mnvG zpwOn;zzGn_{MVztOJ4n7w};I;5Q@g3lMNjWElshn0=W8=G|wgiMCsL^;VB{40RE;P z$R%zj=#29H6(z>(8X$-uc$sr@f(e_v3Chhw0fYWBbut9aZxj4UK5%{))C2!3gr~U% zd{xN9M?WDcn3*3ypv(|)tEg(k8~;Q4MTqosbinfar?y5TygVJvkb>uQd6$QvHx?UB zI3|w4_jv=Fi>tke+c5Pa5T+h#I!U{m_1wcqeRd@O<;w~Q=g~YNTMEF(g}$>cR)I3i zI#%Ku(4$O!s&&1ZzS{oI3bWx|vH$I+&;<=>`GDI!B`5N$wpl_?F)}S{* z#QUD3JI?7oVR|!^oK1Ny*uv4Hy>gMOdUz_HFYsp`mj*vh2~81tjIftxepCWxw_miY z@=*z<(-C|ln{P$M^j&~;fXtQsf&bkgm^rDc#<}0|RHq5S zY?TEKZNZqY0dQ66E2SY&Wjztb53P3%a8x%s$D_7C!}nVm^H{5G=BV#%|I#^ksi=36 z&?QPb3K36hd9jrwj4;-GQ_XT7I|ac#3{>7<;huBh7S;aHD(Lt{kqkG5eVr6~&kp`* zs#6HlOVHkQ6yhq-Dev-O!)1Aevrns3rf=D*VdI>6a!21O;#Z=A>B!&$zyL5FA9%+I z3&AuE;t7$iyvA*mLwGf$BcZPU0C6mI)0)+9aSn*Ada}VB}49b&6&$eeOqacYmJ!y^eO$Qc*Glt zhZXi`oJ40vIHvc&@7Dl3X}aoi2;Uzrb=StTlg^1^hb3szSxp@NW^UGdeBU+Twqb5< zgnftH2hPmSC8dC$JIXxiG6SM?9avF}?|C?C0j&TZgfQ&pirjc*&AqP^tFWx;x5FY% zrGxjg6U*xug~<^#qjy%~%xH0ABe$sR*CRVyr&7?kySFEAqLQ8U14>ny_2&RRkuTzZ zauIp(s64Vj0sI7r122Y=Ti@#Gauq_f%s!sicq|9(_ps#mP<}P-cVFtpulgJ^K@y!6 z6_LX*blQ2(RY3`AzDs!>1@ATBjF@RRDR+u-v!?Wvu_Rg?4doBFO_JE8I=G^#i_{0} z@};jIZ6z>q`#p?G4hiiOy>)ZHizF8S9}mI^CJnmW+3&VObSLQRG@^FmVajUrfmYp{ z!)4l_chz^*GLbL=htF-~8s_kcMN&o+t^Xzo|1Zh-|GnSbGFW?@{5<|Hegvcde<+hc z$O?!DFS+&d$O!CZiBjg}*f6#cj9MgAQ?DM?j5>}|XqKdXz!L4P+9vi!wCI*)L{A+` zrlm;2Gks{gv-av^yEwYEmz!aZV*?Ufk6_rpxG3D4aY~5*Dz!H}yD82Ij<0d6?3VDo z2VNqiuAK~ohZh9?K+qwa;285f6#OhMzyiyFH9G7JI51xUeLgpm=C-5$c>*eZ>OcSM zgE7SioD+un3(g-yRt8g=F98d6)JDp;#XM@L9syb@1HO;Vo1~<)c*x3uXmNa~)k8Rz z7wTgah37(vMBxRXHY-jX`t7M`b|uBy*9>yK`~|Op?_!nhLdDOfVgVSEbE_-DFlWtr zrujic()^qUrum1fgqOaasV&u#TD=pS9D9{s2)lqHpWZ7A>P=15bByWyc`fEyz?wS9 zI4EwMEazS;jIOBvCX3OzqJ>?Ez>_1jZ^g7kO5>xKZJ^w1K-0y630efnGhlQZ_6GBK z!Umf0BynN5RNpOmq=|WojW?G;j4lV3UwIcB9Q;!WuyPHEP{u;zi0)!e*G|2+BC&G2 z=UuJ?KFrMA?QgTORQM%s4NL|)s9%#jP}-@{7&`wL7{*=jhBa;^_2xqZs@UQp#nBdP zfN8~hl%W~?PzL*MkKOnDxn|v126sn&pSM`a$zhY%3eyqspPj3>s%JG(=d4#TYPP6K zq-Hc;24*$u@`on+{pDz!xFu<&vqQ3;e5w-B)9{1>yB~MbLOqDXG}hqRnrr#11YJO5 z&pq2w8KDQSXS|2J#eor_;P8+q0`!BP$*O1n=z)%p&BImko-RJ0erk|3%^X*9!p`bwR-yf=zMJAwj7@bj!zWPl))#076Y#V z$iPe#=w;s8pU>6TfW%WqpXB8VhT6^NDMc$kvS(j3ulV3fdCxSJ1H1FS21RS!z%-d- zO3^yz26jk|YR-zUg4=6WepT#FLZ7YyRiDR6;XjC6fxb6rnkyCiI)$g&Ir2gKS=$AW z;@xxFhW^>ZdA&;26 zJ8{{V*=K!KSepf4t32ccasVRCxPBbRI5@z=TtDpetalN#1VLs!7LVQx{|OYoJ%+Bk zH+?m52LGnHR>VWxZi{^sIDU?2Mrq_RmsEXea(Qo?wXMYRLwDO;H78_tKK=s!{ED!l z95l)BBP*mvlo;9m^^n!Ew$7GU7Z!DP-1hL0v_t?vlnXF4UTR92`|n$KF~XWh1P+#- zmtt%ono);qJhbvGvQ8d9_Gw#UqEB5uj|1pV#njn!c;zf+XN)NZuK_3nnxE5ynstz# zBu2+TwQ1XF1&*tCE8Uzd?#twH-(%!HErgtkyMediO!)7s^{b&l@1)sq))?^mFJbMr z+2bSm{p`bsvme*<-ftB-5s_AM)9@qA9P_0D!I<9l!NUu5lWuk|`w@Ko8bH3AQ8d(+ z`{QVZM9_gROpRF2XCst_jekRswr5$OhK6Fz$ zh@-S5AY@JQ&dx)Wbd>y3AKi-O@5Z@P-dEk${ARW(-J9HCpIE@V8oQWZc21VhQ`qe! z0?2jQG&U`Eb`C7Dd@v&v;?Qg(C_az*%-=u*Yph>>Krg=Q8oRtanjyZGRxb!FVjH9h znNFIp5(U7=t}M>gF{LOh{+2k;01dHY<9r|mVrJ^t7}C_u7{@hYV~vt&BOdhB7u`s; zXdVrWHo4DpixAc7AYPAi;3u+H!(ra2737K$!!B*Mr93t+#C3`{Z8TQb{++0|$4@Hl z2NY_r&VuT`z_D+^AbKwnw8LZ6K-gNG{YP(wNd32MZCArLe!?<^h}wU}-(R@P>fRra zqy-4{#V>(sqxw7i&yyxQm0&FX){kr&flh*7bGJo>W03$RE*Me(`ja@)+;-v*^c=u?%Bk%OEvzxY zr8R&CegS(mX}yQ!jhHa`ssd04-Imz7`Nt8KHVWFgTJ)|iSky>Y#NQkbM3ubBtCqDz z>0S^!&i^V?0YVP*`!;n(*arKx1`uEF(50d#>-Fl*mvuBUY$nZuZ?s^xsPXflt9pc8 zjDjXLPB!cTdMDgf$_gpE)7tdHERo_9z2ECpVP2^%^Ecxct@C?Yj6^5L2Mr~GGrrtv zvkI$;?0Heu?FtGZq0w|y4xoNTLWlXWtbod6#h|{UN`l6H)Ao(yq}w3SULeo3>mO_R-Nl@9^pJO{{E*_$ zk~@@x+kA^yL+$l>wrX}!z<)S&xN4lisp)bc%>PZv-pQ^?_~b#9Y2=M{aMzt@0`v6hWYygEz(1qoMs1>sPVGkdP{(Yf% zU)z!7x7Fz(1M)*_)1VO}PD8~*=XPA-@5^tiF?vo0BTYAqzbH{|lH}wZ?aJ7=rD5P3 z*MR$OzAR=I@}I_|1^YAN4MmC_xP`N@Qun3cMet^p+N za+MhUa|EWKbYDXpfsP+uH=xU(@z(c;);tzQV&8fA(G4VO(~QySjjP2c(|BOIH=OY7 zFhMjSQL8TMXhGql0xGp!#F_MLD1AQ&(0wP(Crz@NM+G+Gg;41+mBaMC!Uc9@OWIL< zR4J9T>XG2^tBPyD=6vVfYrw+is-WMDv)hY2Jv`jbd8A$)R-pJ5fobnDFIHFi-Fkgh zRcnpe^ksSHiFQ-9;T-Z)A!U+;mVBBoyYNqW8^`f#mMD_7oJEF3CxQ;+MI=8Kg5-%E zy>N>SqlatZC@g=ZX_=v-iUTj_0w%#>gXd?F;Z(afOP@>7KrTnvv$_Vf)JLQ{nD<^2 zLov0tE2^6<2I*(=gC@DmHY9$6VyfOE5q1}y+nmSUDS=_JnGx)W9Ie0de|Y-QEWKx& zfn%VVM4YR?emN&^<#vFQ^iR7DP^_9Cnx$`UMR+D+I}Yiur}k`Zx4q;M`KOF|<}Z?6 z)YpJEpjh2FF2MWueI8>o1JH|F6h6bd+}StT=`x_|t>saTJ>4Mv?Wz$daeMZ80J^3P z&C>^BYS{nvP!Fd_6DvF^&mkKt5X&Jtb#qIbL_)BcAtyC(cYw@;kXKu?Ujt08GTZgN z9gqaVFLC++3AR=P{`IXCnz`BdOwe#mN{<^TY_zhhluuJ!24_W^{h2>Np!^59WoFf^ zk&x)>(w`ia{z0_rU#UtF9CZ)1QTODSkDFvc3eAYaj)u8k1!uKq`)jZ3<3>` zQF_dcc?rH-AyOe{uTR@MUtE^M$MM@C*D`p7g+oM5?cEIr)V`3UY%3fZDs`d<#eba3-H6#fI zIw>0)K56FArRbalDM1@Gnek(Ic@%Sn1}}I;9@P}1_5iXz3VMnbZAd9d-<1U}FAY)2 zeER;0zaCaV@5UGm7I~44Jnq*_3}V5ttQ*CckI1qnb00S?|A^@b z5n5K}bXkf8T&BnV-M4H;gAxM8Uf}pAVGfm!mqrmdRi`pccHbQM=B)H~X0Es+X%dH^ zP(=H*?p~&{nKeRzo2M1+5UL@)2fFD^!|wbZpNZt5dg+Yko^N;@zNg}a`krh=speiW zQZyd<{H=BG?J8i{eV&Jt1hfUb5kHERMkJ^~?&6nGpA!yCW6;6K3nN)A4_yFYY$5|d zgs*iIkDP1=qaR)ax>m{BDSVM^UgOb$YK^UPe@3BJy@HEc@wN`>N`<0!^dz2;ckz2& zwx1&TgEguOJE83mdi;1EV<7k9OXw01oe_$&D;vsx3B;rnWNr6gmWJIS5^_59G8QL- z2`LvuEidRoZ)^5uYes9b;lOAQ%GFpEL=;ZC06MUvQ#XC4D*oaK*HGV(=G2<5d?TJM z=2jW}bKmy|ME5oFDzeOL?P`9;b*P+B?mrVuxp}yGJ7U8pVO}7T3EYms)LGv+1hj*KB2iVV=7}`n&7WR92>Ag3ufWn3(k#?|oGR zef@8-+sL2OR(1Z$&wB*~T6DS>o}_Y2Pi)@)(rMU)rij%L#Si8&DsWr_SoT_7%WeIU z(NkE%#07n!j_Uqpcc5Y>We9hlme9jaM%(To37QJ|(I?ZE(=G~>l%L=du1LMZqgQU| zVGh8Lz249pyrJsOqfp<2BGjn~3ehu8wl{C1hSrRcJccRQZv9qiv&`04pLpE+_=tgz&h05#_OwE#a+hX1eIqkVga68OD#rs(#Ac%Kcqn z%6jMP9kya+!5T%nOKL3=4PP{OEo5VS(c(N1tsUOPvPiWk67v}nI4t2@FxMr#ws*^Q zae<0RNvYask;SOB9aD+b9EP~aqk+&?ClTm|M6JlVHS*}S#_kY_NDI>u0gM>2VMecH zVDI5xVXBLvONUt+5y%b?O@`g~8V=q9wkGu?-Oig?5Tw z1Hv!PzhN?vs_GoTX)num=^~(&HCW|cBMAIc{kN=kYB1Iio$#Zy^X>ypeUtm#Z?MLT zMnPD47_hN1Qa>)UU7&K1QAW%mW%NV-osc2HWB^n7y1$6=QY~|Xamus!7bp%IBay&zkCOA<(d7Xte2j0w)zEe9+ z8TyMNdk8RBdPrR`jMcz!tmh@F2^Ei*52AkEPQDB%rWQf*l_MM*{xZ&#!0aN-!cwIr$)a{P4tv|XC9^ekLxWL_d*WJ))PeTTsBu2MU%ND@4u z=a=30E@QP798f9#+B$>NF}{{qhZpmh>~}5^oN2+z3WxH>6k`Y`HG^XO91pRY=eiLw zmubN34SlRZrL&dfVLXph!rTj6Cx;jYzf=WtwDV*fh8oP4X6?xz8R+-@X7eQ@uppOjb0pTV3VpVYWnlYLv@vdB|4zJW}fcBK+ zp=*}#a->`EaQ%h#*4F?Tn`c-9%#tC-5BnGfnD=%(-kh#p0x{hCY^Si9QfWERHey_< zY?4!Z%T3k@Fh6a!6-1}Owa+bxIYcG(o9j_JX|Utx@e>Zo;_yXDbEQT&8rHQlmCWrx z2o0lEj1J{Cj3RScP_*rHXB{GabGgFv3bk+K@0lC_WKI`-`i(y_OE3IB|7LIvkhpa< z{C&V|)8Pa3^4)|37x%2s0my1%bZshErcwW31^IQB>?=CP5nGKB)yi( z)r8PGz$uu%`i!wmQ&Uq6>mFL|Q%`-7QKK=|| zGWh$Ugi2$?8eB~Nq-+qD0d_4X;dB8szkUG__dI_!eN;tYQWHl#T@+fEVOs533=(f1 z*Je`!xIAY)itXLI&)}Yg!D@2r+|N`gmy6sMl{);T{m8M8!u9bu$v)G&HL~O1AtE`o~!o(T}4%l8J({F`hPu|8he& z{v%Zk{eM~hV^x6t-}XK?0!48zQ9Ip-0!B0KdY%%@7Z*de#NBis7q!h_`y~2Q2()qk z2tTj+(W!}9+E}H4>7twZscEd{v>G}i*4q$NPA1juQ;{=p-e2A-AGEC};XezXU3~1E zP#X2Uxl!$j{4?IwH_>k7mv4nB?ez^5oFOFB8?ySh9=vTM|6~7X8zdsg)xPFHRpv0s zXpw@WXOGM#P&QU1`&M7-3U^x@N*YpTkFxe01yg%gkdA$0in91CR&hC(W%uCwMP~Ig zf#NtL^zHCPd}#p&)GK4vE1|-*Wc6}o^=ahW)3-*S?GlBIEk4&eE@rQ_0?+i+jG$mdL#ae7fy8NT%Js5B2-n$Y27v z8_=igD{)tCNY+F7RqDNqaf$a;!(tzd-Y`A|DNC3mHyOrn6@3vUS=oi>9a~)tva=-O zd@G=pFDK7CPzZ4^tMAotKwcOT<=8hjcJ$3`-<^Eq|M<;Z{{lvWU~#0P|2o!+Kg3 zMl581VPemL9M6b}Q|f){Ue6E> z>@SusHn6b=ecRSoGDjY{MWo*-YRRdK@BIFiq?TgxXvQeX>x!nQlcOHZjVRDT zCUIRQ>9o&siOe3Jc})woe0nlW~v8J&* zxP7+9pnoLu^{QG_`hc5yFe8yv2vS|OpIO$%DTBwkF>%{pJI#*w)HbCsCGeG8lr|eD zr#-zgfk6rC>6Abx_0dql$eWtb*7y`}WSKPXK~NBcT~9t;n;bfElQw^F@$fv|lzdhd z$oV2`Y0%1Syg%IUI zG#U3+gi$mh8e-7w-uF#$+Y>G@KCihZZfPe|Kkv`gn|ctgp5m`%W1LL7LyowHzgEGu zf2esGl?w%~7=@z+^3Ib=5LpUPuSLS0RL{Zx@y8OHg@ z(v`Q9eq>q?_Ih-BaO*F}Epn~C&Q~P1`84@=DxDj_Ob2;RF{$5EJZr;Pb?Vi@^T}7;MouEWaVLjEg5^Tq~0e9Z~@Tl}P|bj0j{*+&U&~P4hOiaAnS) zBLHI1I8)fr+Lg|jC6r={KN&TA4^*j`qLA^OO8<=I)uZ6v!*FdL(GipTx zzf`^I;#Ky3H?2m@FnOx^ht&AE&|n_3`AmJRHdJ`EHxMxIDqY$%4RiOWj!ckG=F}6c z7-c?@r2{$w(q?CTH%c)DNF&UnKsHPhXm#rv@WzS7cj+{t^SRXDF`bJ5@D3j;!vG!7 z)CG@dZHJsw(nPU`G&|xgdA*vZt2R=2oWyw*>1C52kjX6uYh<8x;_Fv$=of00$rl>f znI!4gzbKNj^3`#>twLSfB6!yCPAC(qm-+~<0bjc0Mc{xnLAJlL#rHdSbo|RqZP}mv zC^6jOvws?4>fuJDW|85jp*YjY2OV64N5ORMf>@xyKK2Ssq>ypJ(ZShJJ}|g>T^NXw zqIC$7^<~<<2GsGg0 z+Kg4S$vl0IUYbKV&&lG)J7uQ3yXPd4lQKCDhiQZ0#3FcJVo^2VePBkwRp}Qi8$Sbz zMLs=P>A>c4{@Ozo>>^e1$>mw8V6wX_0xC@@>Kyy}7uJ4eYFVf84vPHMa7NL{Nm z0cV6};~eF8c67Q)ieneTitVI4Hc=+Db1aqeYBrV(j4V4g33H5?wDYwPVqm zaXfSl(zjsu=LJLmu1&#IQP}76Qq|oY?4A-fj}wk6!EO`+#|WDRo`udkD4r-h)Bb#? z()=GdgN?J5O?KJhiec!~iP*gT@69{mWQ_HNhV~;bTS#L87YN$@b8e=I25JYhX69Cx za2iifWpjv>yy?i&b9y(THDV*@4$e3U=l#?wA~sfJ`|)`g`gX}WJi;nsAjw-Oz1-Ws z)XArb_UbJ4=#tV*yn9FPy@gcP+a|Q!hEAWPEQERA$|yqKQGSW9)QKS=bF;y*|dmoxfDs+mV0bv@DHj73)9Xx3Ock|)%Lbw(lJ;f8rzu5v8MdTmsV*pHNI^G>84 zZIWb2^X3Jd4?Q{`t!9MPgbpKz(2*Tq_NIT&&ug$vpMg&y4o*DdT)~bruN~4Zq_z$E zhY{-<}{6#Dr)vQb@T7Q+O&fvmZz9yk2tQX zOpWFXxGtOyGg|_JR&GGLuNaJGOD0R2@C$P*M=LkBG6iB6Rn2Ao#{P&8Tw!s47CacA ztiw`?*|EaBAQUL!vylX~dyCf2$al)P{2E}oVUW5#B_3D$v{Jr}?`?{}t1e|gLKGv> zA10;^(2e@h*Qwu<2AEbiG)0)=cC)l+&ohiss@UzKqtMmr)QkQa-A$N8w zR%Y!KpDo1n!_Cvs2R!c^Fy25KY4bCL$DD^1mGSjfF>EDB@{iKns}TN=Z?T^*><9qg&wKWBji5cQc_a7yZ?zg zdTj_%N75N0?A&KX95K0rmON^!wgCYLQlBh()UP~!BKR;^w6*b;r7j2K;X8Z76(KZF z@1ZABGqPTjcF!tJuVVN8y#$R8<<0<&lRpnylI2eJIStdIGoybb-;3%Z9-LOlhGUWp zQ62HVS)T`gR&Tb1PIA~OJH1VLo#2+AYdzzTKV}FJZjXA3!WXS+CTUPlRKY+<^|#Ze zlL{_6W>G){*2-X0?+v3XV=&+Ai^oXbSf8(y@$+Wrs6LhSv@)FXwAXOCupvoe+A_Zx^{~0ARcswQ{I*%s zt`Q{2I;RsitOHE`CLhsfANuJ`b5X9(Dk-9q95Zzd&}j?Mv{dm*Z)9;#>7>l8rIKn< zT88td9FYOuD=@9wh$Wd|bT*EOoztMhFXswoYarF$!!8fKz&;Ie2Cc0OgT!UJPd%3U zg7ZmZIz0xnHr0&2UG2#aT@i_o9l<5N3AlB6J4)ko-BWQASRYGoZbqO zre@XN1N_5Jjo9#_69~L1HFyvVsesOj$;V+6IC?L2!X>#~VcK-LOh&<} z=+MWqC2xY_st4!^BmAiO;w8D9|(>iOFd>aO*;4!Ct4KVjta;pK6laDG3N`+D%Nd5%bnecz4-F!xRSA8x@5u6d$m8dVo$?9s(FneSAZSM zjd5x&-t>as?sKv{e%<{7ZhTV*aIv@&*`9R%r1st_sr-I=YcnE1|Jkg!bffim!F2CD zljd|qA5Mm?Zyrj>mJar@>BpEN^dRzfK?T?dyq;N|4}OkFv2{E=`+l5B<+u1lV{w7C zOYqNjutr4HD#QNy3Il4Tx_V{j;Jr(6Q{5piS4x4;fG!u~A6|=)JuBZhn7|qj6-;Xe zXIr(5={Yu;>_7j|bl=G^qv`7dp$|R_i%jNg#U2}@5@jQ!simz~6|UQjS2>;h{jS^M zm50n529XbD?OQ-~1#AMzQ(-g46a`Q)(1;%6`DAt@RNwIrrEbj}n|r4WKl!bN4FLiU ze+L~>yn=giEp!-^^CU$9{sob&FL~kY>JOI+t9Q*ISJhGRFF3uAqMc<#skttR6;C zhY)w_w(EEn?agP^RJ?PDJ5&juTIh!`I{$!`*~Pe~%ZuD9N`LF{_I`jx3BjDr9XEhg z#gjBPp0qG$#MOS#5=#)GOa(wvA1l91bf2NKGTYH4ZGTXPDI6TIin!X$a7$uxPB*t5 zdwdsY=mKl#;-m8hRhJ3M#j>R9Q zP9c96!;*bS8{hnsn+_`1q!Nm+ztoat3~EMhZzcVd58wfzg$7oh6w@s(9Sy9HNdq~# zuap%ARtAy3#MgzB(60$PwfG(FGLscpA{@sw!EV~?>3#!03Jhq|r5oOgiI&ayd*Rs_ zlBYjuLsG`E8r`ay)b3Iat+bwmX%<*J-?K8$D_G4Id{A1Sy!`U%@5qmfNVb7_jTeuT zHpjMI9iC%GTwx+>5MpRkpKq4IpVcUN>@gE2L{cabm?X=z3VAnCLvQ&>+4rTNu3NM3 z!{8SeLDV=)R9@U!9=-E>jXEy;=k=wb0|nKxjbt6FiGgoV3SvWe&Ae69JpKSuZ*U1` zmM!hGyOdlNWlFjh>aBZ}=nDXTxZM{BRpMp;E6_#2YCAN~Ut)e$VaSivHH{;&FI8SN zG&<5xwhu|1ZEK0eyEKJ-e9lQ-L=wUCvOVQ@BemeEOzeu}xJ1t93T3;*()bB7BbtBQ zmd%IO^pEc6l_Kdc%&p@y9XB0UiGr1G$IDG@2=InkK%^zl_VtdAb`lroNS)r~I^0Mp zjIWd91_0>weuHG84Ay9P-wO@0-)YdgXOks!?M!}1>p=fEkJL&=gJXHeB24PMMVE>0 z2)qKku4%^0PyZ3W21J5b)%ZlB8-6{~i5h6tiS+t?EM1(wtMfkVx##1zN)AaQh!3z4 z_ejz;0HF3yKhs(eox(Y4J{~5A+FtGB7OtO`dguD*^E2bGvHPa8!U=-0N-jlSi53ag z#VMIH+_#K4F}c#WFrK|xR=VYZ)LUD#eHSB#LUU^U z;+$?C5ihm^-w|^#bO#dHfJCDx4FWmXV^Y>nzY2{d9DAaBxZ8AL<&#|=ka**9cA%x8 zlb!ho>VB6^-b$6PfD1?rw{k7!4GP=WDLqq^4yL9wXr3vJr0%pYXMDHC;0~yB=^~9! z70*w|+%SJ5+DH66XYJDB2ZBLp#tU*2_7vlDIaUC7N-Bf8_VjF+HDk3#9zE}fozpk} zkUT|p4R}FW`_Axz>cjaWozhhp5bYZ;tw6)*d`T0jrWkaUVe3=?YRJeIbn6%DAMJ}d zm7&+2tg=6#qY2dyDEgPoxarK`LyoavRkCCcW}q*ujZp^Z_SuMnyXKV z4RCO^f5lDM1Ai5pcDe5fUySY?i^a0|rG#I54y_L!T-0$IPFvk8#JSM$BHaHN?0U@@Xntf4aLq9(OUf872` zO~GXy8`S8`O_P1mcp07gOm6k+gWnOU=G)$fUnF}xx`-n?V^BHgzBbI0JJSvK=Fa}U zTTfkm=J&YTm+ij!>kXo&P!3*zXFmWKU_L6)5metd{93nVp*voX7e+uTYCnGU>m^w> zw;-HqVd+IvbOmyvwK}TK?_I8ByOe8zy+b6#EiKPrwh{qfoaZH^Uq;C6*$hBK zk4oM``l7!&iNUmueJa>VaiI1kolB=|ck#y(!6N>((oP)Eh*1x<4>Tf6=N6I?ZIG$g zmr{ghZm~Ux*WWr`u>Y%g`0HdlSY}1uXKJ;h`dgS7ul`gjK_M89ik8fYs2o(c~ z4W}-vG4ci?Yl!~J4!J%JrKWi=2=%fv%c4%Kv=rG@m;{4v>KEMS8avxgX24_@C5aXfPR*u zxj(xgIn;0KC$v^?)z7;vh1<1?W+|jJ5ru?F*pY_%y612@S&Z38qwkfY3ik)+m^*oA z|4>VJ2T||Lvj-UNE*oAj7(mhAPnd)<&3|aU+#!i)Cy<)Go#H4iLPhEl0lvb7S)lJ# zRzE0lzB_&wD2Bw6jhqgin_0J0`q=V~1lK$be;ce3Q`q?&{bn^r%>=8y2V&tve?gRh zTN?`ZG}!B=Yx>O1>0YWxhROrpH4E7=d)~v9P z>?RaxN}DIW?egRAD3RUo_dD$}8*x0$U>ou2cZJQCYKrB;AARKu9(z2UOTPfM@x|~8 zjl4=_*`~Vdp0;VjoY#k7_2yE&Kc}Wu?s#q`5_#6vVS8q2@Nur7!us*S-jpZ}r+cCJ zVUp9^?6mOipI7PfIFL}q+68Mq&6|I3 z(TK5USXkJSyvcpe@!lY!MFQOzkQ?UUsg8=-%JpCB==A>8H&tIZDm+2Hld5AEOfmX$ zz84;%V$qvm^r*dV2I6`RsIAYgW*-wL;3!SGzg=(qC=-Nd(BF1%pkNc6H_3;t%=c+X zq7B0!5Ltuuzmn_CpSw%5;7dz=PKZcowZ zp{;*cT=C`BM{1h{En>C6!E?_z9RhKC4WRnnDLen}2q#i@kHGqBN!m9jWU;N;dpkaP z@rVw!W(CZacU;%=UWT~zCg@-L681O-a75gc=x0u;_RzF|3>Go zy%+EKjz+#2PmG329p=rNx@W&4O5Yn?V%0F*O=Kci?4`AQf4MJM_I(y$ENMM;v;z9b zWLDwo*-Hd!dESC{c_o^zMleexx;~V3!|0=+Tfy_&exu%5B}wPGnZ6F&^*oLd$kS&W zX&xylxf=>^TaE!3h|7Gvj4>0dj>VxzWbsW#f>Nx9?M_z~*(p)O~;Lj0j3h&CLp8?L1B-baFP&D_ee4X)N_ zfVa~Pd&Hu4J95%HK7u$z^fia=L$M*5(XRK+wCng1y(zF&1s?Vicc+>Osj~K$TwU7f z;pYZZxk-w515HG!9CGJ;lEjRwkP64-^{(aD4z+xihpz_dXdo<9j}}K3!RXLq5s`nj zcP>MLcD&AWJNbDq>_g4y+T1DH(%Cp06_dDBhzfIk)k_p3`~G2VIjW*&P>r-`t)*7B zI1n3l)(@eaMX6$7?5-hv2{!;qKM%vM?M2roHCiVd#?T%7*|cdZA;NWPUjWst-GXF; z&+otVw|mz@^`lr#(z@u@57ML7;HRLs2)a&={11}O1{Md+H|%o_Vj7o*y0hLtBh>*s zNu~admj2XSL2IUmh5?BpV`}A<7*4KqKPku*XBAP{owTY!S(VZGxRkNT3^Md_4Qm#I zC8rBjAOtvy*{W2|3l~j=3QaSIV%u%4Iblyc@1^^8-_8N)63V`w-dA2Rb-&C1Ig{xL z|Fe`Ldk=qZwTBESS@gJa&ke_P11Hy#TSKn+vQ4V(YMs!<#{kZ+?_`CN-Ry> z-GqAeG;>KUNCZig!c4uFFbyj%?5m_p#!ugCULEV^u6(!4$zeNZ!vrzn{2t?~LecRr zn9|4KDOy`I&>gE2`LrD-MV%1>&CF0ij?kPWAwuo`5TZJOw}+ChTpPU~e8(dCQxnVS zw#z4HQV;bPbQ&P|A>~% zsXMp6_t~0w$txa!$${qc2WxJniEPF(z~rT)R^L06Gi!O@!pVa`RYXQ~G>5LTC_<6& z(14H<_B;&fxZm7VzkUa=2R z?rfEb-LP1L2}qn2%r~{m#pXXrw8X0X`U|l%pGV!C zxAJ@jYWFmhPSco1@?~e%OSin-h*%MG?MFq=v-(7@hyBIHn*C(ex#rDg8t(Jp&=! zGnRCA3^vi9Z6xQW$){i6mk-g;e%T>6Z4voVn8?To-dp+R^Ap1K42Vg95-{G6?WDnArU9esNYhbupexySf^IYrM zS+)W*ZN(^@W0J!p622Ree+Z{BZI>^0RwZpDz~stXr62B}@ipc;#ano& zivKk5oaCULPwmYkYQ(13W3CO>cU=EzL&TP^X7*y_EwlrTo-7lO(9KIvywLU<_ioVR z&Bc3e#_C4qQ(wuWMM%H2)qneW5UeB;8^`KMt6sJP0TE@pV;=77_(zsqiUGZm7hAn$ zTPF-lcr$UPtryc`;{^k@O`b}F>|Zxz-gK7_iAWvs(5$>n)WaiyDlVFfwg$(Q$=EN) z+-V!({y0jwPRjj{StRh_CLc?OcmHr^1FFrc1ZeEFCD z!?6F?m+8OzGyNw&Tf6AtOfv%zer#mDmnZlw{LKYaeVJv2c33n$b@}^HkcOAI%D8tL zz{bYJ;_dpIxHzVRq|5Q`)@@CJyYvvt*go`A!F8TNCE=v>zCE_tt{OE%I-f zTLo#&TsfYN!4AE%bGcX)PW!#aZ`a8`KOS#TtCAGSobSB7m(?F~H(55`@Wq_04NVWm zxlvm#PS?(#vVp1gV|d|R8{s9rii$f_o4=~HiFr8e7S9VpIX1#j5*6?_|zm;yO-LxZ&8OKG1g4HmbCP(Hb{Z@g!=aXzh{Am$i@@4E; zM+h-F?>FTFdlXO4rrn8yKV8Fd*c@dSr``W}P_P^<u~R%OM2&Ju53QBGYEO1v{4 zIX(8l!Xh2812Hdn`;#@H6scN`kEEIx3x-*^rE%l0uAbuq(UgQwaqjgPYC3DU_d(Wm zdP~--t-On$@A>(+ZadMq&!C3e(FBG&U#Tf$eyP#{ogHjKL~!N)0=GSIGmzGm8w@U2 zVSMyD_#NMT8Yt)wR`~_wKEAISKE2YfG!*;O)rxLIqY+0{TESt`Of5b7R;)0d_rv2@ z&e9FGpfO9Px0%&8IKfai09ni@bqF&Pxt{1M+8P>~^2e&tS(v z8(=RI-O0Vj#WhpXTGujnrCsytSK1Qp zxmlCIYIi1oo%==GA$#~oyIQ2Mcn(6rUd`fazMhG>M)Wncojnz={^A04PhK14 z&?foo*_2GJVvNF;WArRWhNpreU$fwy;$-9vF;MqnFZ)91YVuqwRH$Es>&9TV!$o_A zdi@g~g6i!&yZ3dx^sg8rf^;wy%{YMy`KTaWzSR9ZmJ|`=hCD4XgSo#!a9e4j`)qP^ zNkM&8)5ab5VnC<4#GBAx9mnqgE!iLv)4|<0tpUmSVzsi;TVT52Cbg=?b|-g>qv~1J zNluxAL5InJDoCRLglH0dK3g(PkzwrT>hBhF91rth?2VJZ{owt5t~l4qe;&LUUa>;; zgHNzwUmkc4EOOoc9a7DS%&pw<--_U2evoNr%kV`A^VnnbL+W=H#qG{}a9B4txke}^ zaflf~A>nNWflBM3nrWXe$hp6k>H!GXM#-ZC^kH5Cn=dq-h&O<_!*%`fO3|wrZrGo- zHoYH;(#4SHz807ty>8N!dkVds64j#)M;0atFu(HAD`kH3v-AGU&wN6Bz7akx?d@OH4+~=cv9SRC`_LJ6x80#&bSJVB7#@JB3X?v17 z4CVUlB37uwBtOXaxHtoB@5CzuPwfxzd+#lB(D-Iv#TNv26Qe2*D8he)WEJqkg_FRHP^eTLZMjuJKG z8zty^8Aj;pMO#|UhjEx6N6j$PoVUF_*Av&q+3#-^HWPJ#nKx>RmqwJX{>W-XU?1)u4Le+^zDt?x`(IWfWPIj+u^J>WJc(D<0UucD`sx5zrXGSP zTiTG&mbktP&3i=QS!MLHJVH-$NKrwycuSYdC4>~q9F4N@6kPtfLA|)Pu@-A=0&T*z zkA&yAv$MSVsp1+i;oH^_<`n(OpVksEfAJ?}T@D_42EuYv!|4a|#PP*AKhv2Y*K#SQLL3~aAke$ubgEl za#o)oK)ndfKFKWU4bk*0W=P_umU*Uf)1{#xoAIxwk}v{!MG`GxF~CB zS{A-8A6l?SVWIg@y(edT2iSFbDz}32>pOW=9vt$A1 z$8*oYN)xgtE~hx_i1K|s=Vhy%&u>?t$h-dE-9q0RiR$uEz569Qfmg*?r(%wzds9oY z9fC0`oIdSV5O0Ae;clXrOK;zm<;j9iby<5pQ6$m^J-{(F`fk|a3o-F*y{0Mmkz!&$ zcT|Om9JQ?Ha#?Fkb8_gO9b(!6Ql-}mEFwwa3WSDZHYRD#`Jh^?bYgbQ+-|6{yIf4p^Zwa}v=ZgvD^Ws}A7d<^ zNBNPawXM5=_oH{M9*ah+;}e0ZOg~I+?oLxyWn%#S8HF`59sf-(Cn|-)>AMKn;I3hw z`sxKEcz)a#pE_s`i;$(JTC!;<*s_^L)EycNjh^Hmo>|g({(hLSZkT$#3_=&<30x}S zfrE0^yf{cBM$BSB>DAPUY(-*y516T(|8y(#Ui9mSNSVZxIJ4{>QO1|9E*oT3s*Nb= z@`H8Jxggy#XL%EO-!p49C`e4U^&+x)NxvWZ@`SKg3`9wasM42KII~Vou zaqUv&C(GngrOF>~5qJ&S-1?cwE}v+Ad~?c#OUQI8TK||19)P(!3YVp+0>)*#z9GL^ zsxtc5NgHqy(O^NOm8CXE9y==QW}Sa08SQq#cWTE1zOZLgWrB#qy*8U8q5u++ zmsn@s46-d29#zhS(Ps8Q2%Y4RzHHKF2NJY7b z2@!ym=v_MY>$M3-Kn@RbM<{O&M zxlVq3y;(c9^Hat=rO!FP`YqB|_eEXYEAHEW+|eNFVSSwGcHG>fBY(q49Sa7vrR^`_ zQ!nk;-VnZO(U>i1$?|(Hq-RuRDZxQxxy$$iI7V_@^Y0Ly#8%0!(GLVHyw|zTkyA?h zlF+nnwd!#~E9VfgEU3>bjvq<+tU>fLAsk)uPBerWFQSW`$o2H{adC8T$U9Zzo0dsI zRZa}0zn)kUOr70c(EYbl^%j{>!MlIu1+khAlJLR^b*kXob_cTNqrc?SSZh%PFjP3* zYfOu1tW7Q<3_Nl*e7{N`xyq6nxd%XevZ~y`wgcgv4>E)@#eUk;LBP=D5Lx~%eoV5Q^WIw^bT zAIhGWU%~fw!8=VQSZn7ieIF#;W-wqQ-1>$cE^*|IM~dHVp}DWQeQSsGnI=7nDF;ni zn(|XZ1sk$u_{N}Lmf$AtX2 z;UkaMjd=714L*US(S~#na(~V~qn}H)?VHTCjloAN%e{1_CW7O*=bK?YN8+^Pk$n@a z;kFS0gY8&fs78M}pex?e3GBQ0I&*JYmVAY;KKYjjJae5_D4p0Snak{>llHF}P z!WY+>hd*^GE%w^{fKnYAY>Of9qTMs^N5WLr;uZv8N>bBL)`Q%drSG3L*HS>-%999o zxRhI9pA2{$G9{+22eyxAN_{K4n? z*2K>K^uEs}V{M8|lBm8=x5HZaUD2_(T7%zOZysR5T(Z~YGU4LYmCKYOz03xG)y&$z zQ(s{A-7kK8z1BPbFu;iuH&oM|Qa(mdV0=pF)32ftBybdPxAag*L+A z&oDy?;6NwF$t&Koy$kp7V$0P>e7AmBG|rxlvuP3tTVplaLG%QJ4~KyYo)-hDEpcJW zvRK z88=cjWaW-`d`e!I5x#f26~Rk;H4ruOA|U+}m91SH{xf0=M!UZ*H2+hV0v>R)t20yS z&A#Q3{N|J8>exYK@>s7u$zoj_NAR)Vljuv4>@Qv^Goxgq z_XS(mkIZiFUFY)7Z{eU3)$v!_pYdM(NKa4y0+(tShqk8@H2q2Tur!b3HTr4Nt?%`x z_4j|Nus;ibJay>3^6F`04(&=mwZl^~)rUfa-#`A#0I?NpGuRdVq8@8J0Jf{#SYO@e z1%NK9+P!L5u2jDV@lYe*f(rAY+CNF0pL4@GenKx52P7hbw9qbB4po+T3)3u&!!&=) z%xI(ZdT_a39mx~qne?ai?b~ljUK3LN4YI-NRDTFELI=Oa_@}_A$30b0LJu|kUpZ^J zOZO^otTeIRN zFtHtM``VnZP3cBPcDTD3e$y4v)?q_lO_y=_R1sntkB*aZV6o*Y&pqTzD*_=>#0VcC|?-V8*)ovyzo!S7cr(=ETM(`aztZWC; z_WIu;DzsW$-JN#x(Y<4{q^nZ7&NfptHK%u1dxbfgrblu}m`lk1_N&O})M+0%CIR!) zJHM!-T#NV4ZD@it{LsMyvSCAN?J)x>3P!#~5|YjIN<7_`EpEccj=MZu76tflgDD9g z7_+&xHc=YD0Nb)Fy~mw`xf7{EOZx{*I=vR9nTas!VnkEMA5^y zW4e5`DnAHE!B5ddxTqr?SH7&OS{JT(G!sI6@J8GF&i*eDi-7{HCMV%iJ%DWYc*X_? z@EUYkf^-q=05+Sq_{Idn)i_gS%r3(2s-AY&AI%Hx$rwJfr#l8|HOd{W2Ai1TEmThW z8*u5Fm=2pqEmn8p z^HIa@@9$VdqlBBVL@A06F7^$s@p(>5nYmHvB+w|w>wGa#04%DpX$~y-#g%!AoVcYf z<{17FN9x=s$#-F&*xPAPA7r8~6;+ui~Yy!(@t7j=CwLO~)nQ)8qki;jceKl`x z9xMbI7QkV{N|5-{At%bl_WsYd$pa|bOlwJq&UUE+v^}f_bSCCCaM3joi5t6ctlrY} zQKmHb8}tM_p9WYIAdv+vjlRv&t7|M*8ICPlT4qJ3@85*mLI*k{=K$(78T`(P@mwBj zwfEYC5F)x6YK)MDmnQK5)?{4&B_s2}bO+XZ3Qzp100eAFmSfiOA@%`b@IF zbBn_zKjb39rfSUn0`6Qva(KtAox;z10mSbba!suApXGmT?`UZ?j=4=A*Wl7NeY7!p zH~O^uReQMk%#{fSaYPOnG@e5Qx?J<|&-tfb;be9ct3OZAXgAL~z8WjGHuAsuS~b#d zuk7xi_>)s@bH0r0bIJY%bv&$rGekw4lk4J_8+2Fu5}v!xiBm$G%cVo(NJN?8rWsVi(r8+OEuU-*{a#rw^cut?py?N~E5AtNH8M+iW9s8g&NsPayk! z2>)y+DZUHy+T~)t7Na8Z2pf@5L6u##PwBVwMqZw|wl~aa^pl-ixrqWn&(O1P^H(Am z>Zo;bys>U#kXj`^+!{x`*yz~W%Kf@E+D$_I3#m(@I0HZlCo8`5eI#tmUm=een-Gnm zCb_c3F~>BDz1{7F2&S_O`E*zWSg)G(-1>xiVmkY{%Q@XQ(f&=SJ|7vOeLH%s0YTF# zhc_{q34$Sm)B!Z3WJAZR+Nwz3w0O4XZWxI%NkNPjxT)32OQKLEut=$u9ZO{E^I+qnd(OJ;wZj;#&eTr+r@E8p zhcyH@QG!9jo_=c}M;c6O)qFdN&+)9vn|=g7OAZ%}2TNmjM@eeqTUW=I@M@bKC!xnk zWJ5kTK9ZW;d}3w=?(?}8{@UQ{Q%*6d+cVdjv{76L4&(uV$K3=2IjSiAsZKkIMR)@{mO8E|H79|ML*X>BH`@ID>aeh^2!^2=Xf;yjRhPDG;Kw z24T&dFe_r(>xlj(mJ&Q3KxFr0oeP+NvLd17)|N|_m88%wBfO`g#xl!KEMCfw|IQAS zSCLde{+nj|KW$Y0`^F{XnR-<^gdX36YsNf1Ei!wTO!aq zx~k9XP)*IDObD?;i|A!ON^p6?Cf(y(-<#aYMi=1BJxqDGrcVx$f_Xoz_nR*o>Q-qi z#@gCa(0|#1g#TnSU;o8AJj}zPJJ6&QHINwArl)%Ept-G~BF9}*roE+mUxCi*$r`n= z$k;C{?f$l|!{6msUR)CMM?Teu(I~?L=ktumDvEBs?6KN{&4WwNYe}Zoena+5KR*}Z zI>1Oob**gB1_@$j=c?Qszd@^^AwwL_Q)~Rg@0w1#lS~c|!jz>0?P3A_g_EI!Z884s z!Jty{@4h1eXZu=gy+!v2-iW@Hl~JXVOg>tvFS8>lyhd*iS|kZy&zy8h;=2Z!nL7pN zy}2piK%gW%DIIwm*#o@Z>sHke7 z&$AdiN%{zr>t|SRA9nLy@GexWx%}o(@+>al9mH0T#of+~n?>-O%%7XP&NtM!;|^d+ zs(0<$bt^qC$j;Trm>TO!4_`i!tbO9b$^QhTd{z%yqbH-%J6Uv@*)3Mm^ZT>@TF&jCY>+VkKX`l#N*JMO$U3~0 z`jCqq8{Tg%h@U}M6Tm}$4=4d3NeF!dj;X$Eaiqp(|Gq!p)Z*RDmn^fz4X4V3jG5_R zsra4_?(>j*eODOg(%OLuz;Fe`F*|+Q8HOKq!NxeXTMbZ&^;G)UFxFu=InqtL_W+S@ zQ#G8qlWhirPb~Z_-P#7-4$}Q+EE~&gFHhOUdL@$T$~$ z2R5pgQjYV*^69AlEKK58=20W7wMD7U+V+A7$JqCeU!#S2-TA&#X@S2HmrngB>VSX6 zRpE4!%koX9EFSnD=wHlNgH?+y_TnoKOw8>*9Pg@Uj5IYRSklwA^Bo_5M68yVu}5EbEVcaRnuM^fF zG1LOe!37gfJYcfUFgM@7myu$=^2j5@c-`sayULLsD;B`Yi*U@tsP4h{4YE!eD|{ik z5xMW$))Za62tTk`Xt*}mmu<;ST!vNZ7i&E-F%#nx1PQUvma?lq%CcdDNV)=!C{WC3 zEGg=T4ELQLAIA6P60Ee2V>gVMU=-M z@1U9BlojKAbQXtCHJ^dM&lx?A)LZ1MgkYjM`?)XHDPC5W!*w}79&Fvo zR-bZTP~XK_LITS4h~e2sidt=fJyJ)v2NQA;(?B#E>_*7dTG=AlaIjXZ$Y#}foqHO5 z7pBrC+fP#do0&Pp^nGp4*UtifJ)ygsCTiYMZH~A4;%YAV-a8`;?uL>Nb_#ZjZbS_> z8Qe2jrDk1T;`pv{ua@|~hNQj&?+(tuGoCDnRdovP-w4-W2byB-)f+djSziV<|8Rgo$W%IUm%*I_%qf!5_kL=&cMHzB&}HtPxaVLQT)1Ke)k9!jx9ih8(u z0nGOL9CL}VpAw{N|H$T0s-M>POq7gr4~=8QUeD}kK`|Q~LZ@B~wwX)OBrQF|D*4e6 zRu_OrYpJwe>d;F2!|#Hij*rB8{Z!j8U*$Apl;&Ut(m;R-A!@ zYvUcqZGw$?qkZ$~?%BIdG4~6f`~_OKgmL}xi*WL2uK1JecG=5>4qwccpTM~rk`1ylAL#tICvL68r0VvOb_N?#0Sxpg07p1(C zvK3e3ircC52v5=9o=V#6gH!F}IgDQ)3_cn;CD`tw6_^DR6^49kVnck8J+gT|g(7xu zlDn8F`t7Kqj+UidOi^o3YC`zeNqL6G90a*;UF)JXK7h3xz9_cWViA3p7O_ypVN<7$ z7637_y4JkCls2J7kR5KpoL|quZ0?jGW-)kkuPtLB-brk2;7@brw5t~@RZFx7i#kEv zYgvjFBd;MXWDvkudA2SSY<_dG4`bYu3wXMX`-n;5YocfQ9-S6qM!2fQBgi8sNzC)^ zQ33o8B1(=PUSfeOi3aHAOJ>@hW$f)3(JC`L{*mR3z=LP81Wmy_J-c^LdL3N8Iygdrk&v(VNHLhE1rj z`y!rjrshI9W+E5UQ>ex3Gq?>MVD(IVFi4^R;(~nv3^oI}LXOn^O!%ty+>Q00(1Zeh+jiPhD9R;fD;dU#h?CH7gm&#y2+X z@kx)~uDew~xXC#`^;R;(95ix`v?{vJLHWIk2;V>FeQK4tsugob7TMi(x z*p!cUV>A*#X$M0F80?r0EuS*h=pXE$;6qLKJ9+VUE8&wp@_AefH}?+MKBwx{%py!akTT(+L_}8j zPUIuDx*N*do6$*^N2z{+20!qu&;{}!tvAzXLYKXGy5}55`dI=!UV6! zIOc9~GrGuGvo}orY|o}teiruoD0NtDEU97U`F>0cBXmlip~#U3XkD@``Qy1%4Ym`_MIQP80T=JSeyS#6T|jh_N5v*PVA4M^$l-6v2ph zpaY%a?NUa1XLPe3#C@MCX-ZC;@E?`BDkM`JCH(pe@!A&V0Iqk^14wMLXwMlbRHOXcuP|=&Rvf~R_inFsuqy>xvdK>fR&aPKFGR8 zw&$4^&zU?;nBN_VbW#q@km^>m&3(Z7+KL?#qw3Udbq6Z2)suIB9>wfuS3FRtE%vdw zjk#&+>#4?W?8lejqdCtYJKTrA z9aTqC_;j^kQ8>a#kI!8?3=M z;+akz2!&W~#~;3USjo-_)0_VVMf7HE#DG1^O2X4;)Qzx6WUtkmi_nHhOknGAVdCps zGashqQWSa;9;5&IY~#3aL-FH=7hnGgf4;wSaI~z`oYW+2a(Gtvr}KFVg?$6Uxn)^8 zZn&M*=-!t?tUE5q4C!jkiCgbNEBqRsJ}{`Mi5ziu$hA$N6-78VCk+lN6jFx0JS2AJ zj|QDth_Mf?%j3Etf~YaNZ2QX`%TA%l6O{T5SDu0+sw*8K#y&xw*3*=e9&f_8X{%-U zGfRAcJjLTd>gdD0jk$bcV(==$Ev%36_pkrJ`}+6ol>e>wdYXD# z3WO;-o;M(T&t`Q@M!>J;_h6k8cnp;6huJ=_?nh0r?;=U095ns}89ZsWITav+MSaVV zW?XoWH3#lIdNW?Pf7vHL)~DF1W@`ImaDju7=!>b}kH{9+;`?c&)I~nwm_Iahk^Jym zo^LL-a52}3(@_CpN(vM{$E#}t>fle5WFkX1^dSof;u}SHOfYc|mr~7qDP+iaj#$MN)im;&r{rc8Dx0rc14LbN#yQnTj&oK80vp82HgpLAJ0H{i$KfiB(Mmbl0+ zTl6@eW-U4Lu`OGD4w@NU&p{uW`cC(uYjO1i5WUG2^(Dx33MJ_DPs_Ilcd*XX*2)$Y zDN9XfW@e?3Yr7&aT>R*-(?nuoIu1Zg_!~>zZ$lAefZa9+Ty}j{xM_ZzwyQU%)05ID zU4K`&tdx?XqUN2i54j)Yj8*MXVdFFzf(X=L*Zw-T3$5n+vtv7}9z(9k%DPM?JszY1 zPy`C5Wb)qw^Hw0g>Pij!e*GTq={B_;8mio%Zqocf^gfS76RU;z<)D$)T|3LoZR(F* zn@BI$lS>nAuJQ%$rTc};oOkU3Pl&t1LA|+M3#4xYwgbsP*KoWAuDZL6T_(Cwf)HM) zi{me%phMISUw+m4!59C|dxA=yAji`@PX+L<&W~8<%(lk4x7(qQxCBTRvflT~hzAHw zuG@u2unH2#T)hR-OrB|1OB~sdxj1fJ-v1fcb>zu?(Zwfp3PhZ&z(k0vbX%)S5t|iR z;%PX$-W!e?8PyLVG|f2bNC|=T%ifEOXwk|l2Q&R!EoQ}*N<<3Aydu1If}nT7Q`k$4 zO+<(Y-rr}E81N9{oqirq+cvX9C)_fqUprFsRY5_4=jXjP^D7__D@^xCn{KZd_keHb zU3|pmRyDl*cuwYoViBG-a=I53ku6cjYUz%U393l_Fc?U7&6?B_A0y<{v&^zdzamJ? zod!~h!EX)NG&CQneRj@@ivAmf25fr4%C_{YlP;<;ud?vH@9Gs^vQ7{vKW5tcTn)Sa zsOp@{e*PJ+QG(x9uglk_8|6o?=f3S(pT~e87tAq1+Hb^7dVC|z#5za)Jf-~OsE1q6w`O@4$^eM(8mn<7 zh`?q5aGOfdo0}zI4LjY?s%$I?IxRkkZ}$rZk}oS}5U)=DD66h814*S4*X*SWtA8Cc zsWKzb=2rxNg9<(HzXA4d^^FXow-HYWxGbY_Cx3$oY_43-V`5Cmx#O&5aj;09>`m%- z;Jet#q4ir+4U=3e8pbQAMg#k~Q~QI1Q)%6GK% zt68-MOU5F>5vr)!e}*~77;!*?V0byM@y}rFT(D_;Nrvz*{bwj2XRsvOu+=@0<^E?d zD~JuXIJ|$oQ~1wNA*1i{|NR^ySWU_Ati*qY%BiQ_$a999GyQ)Cqb#8o#?IdS^*4}z zhWe+>xBd%%@(*xA6Zv14`cOyau}uT*Tk8u8PLuw0WMHM$;{khZ%5k>GMc!v-_LMhc z_HQ}n5r;_PFd+LmA1}CGhU;8AlAUCAJrC1J7NEP|;zDL_7F6<`#1tGJIhmQ?_Q^vP zYr?%0i;;+d$nF8u1zB{5#eg}{PAX;G(6h$ClDaHGMA{UAgF02w0~S%!0H-j#(IxGb z%L2kSKe|R2z4mNy|HNWO7RlWw4_N(Vh(I}eEx#r;k<}OBj&9#U)Nc}|jSxEBkOpG+ zXU?;(i%@1bZH#&&Qx}Glv|ttrl@PRnV9qsOH$!Z$&faTugM{mc;-CW|p*I^{w@~`H zgL69^cSI1&lZ!JQm_K7&DoOgU*GbB1ElHnp+^tsKjfOcjb|kLo>(A}*9n?o=n@1rw zB(67%(=zN)ZL`0`%zIsh-a{-z9+Q`!IIY#c8vYZ_3(C5FdEJb%!m;;s)#pcxcQWBa z4*I!-+sI!P^h>Xr4T$R>zm9+8!uj@A`A;#__TAfrIO%hism6-x6+yH^`d{`@dQmpf zyQg)UVc^EE3Mv%ZLMk=7`U7wC8-NpsDP)qHSvHXr-%sizcH~F-Bh!Jo>G+s#izh|? zh%d5_Fem03I6K3jAw5cohX+M#K^nNm992nuyyag*FJ zk-kpWkiiW`Rkz9Ic1wIdZnDn{uie`ekW9a4@-W=D>8MUwh~WDt0+4?cl{_O~=S#wq z6QDrTnD_2lGDJUDTG70S!M`1A8~r^+@o=zY%}(gS?CXv?m$U*YWqsgt98)pa~Tw@@F6!)c~7{8)3D^pD`I?2DSlqEHGJf@YD`a7H>w>xR= zk?ggCv0(HSHF}b*j{|ZKh<&Mk$~vM^wxsd4JUF~;fSECIHyr&Ux)3hin}{>)kM;{> zOejxhyOV0?4YmHQ7jNv8qLs0ez`|JIxD@4>C0VS#!DmYq^$U@pB7t$-g6>UaQBeTA-hz)A#1-BKY;K63V9t1bV=AzSIw1#c(Hg{ z$qyzM`ayA`DnT0cJ6Ons8sqKIhCBk^Q^~NRFiDNuY_B1Ocokr^lj2Icb>wtZyE{p+ zOc74f6|17=R()D;O_ZP1HTEQT4-Zv02+`j7f411_53gN`74OlAx#NlGN#PeBM z7@d|>N0E}b^z$kfn$7A}G7s&PTfg`SvTibdwzEcNI!jn)Px6B?4}PD=uPGelrP=gB zh_Sn2pHsN0@Cfa1uamxS&4?B@8AH$vj!k=(zL2}uwIO2o4UBGo(RF4B)ni_qdTmK? zN&h-;4v=84lltA`!B`wRKdAQjOCrY7M@m2Eto zm8IeuUnTMLyci`AvBJ1Nva=XHNfEN)XPl0pL}>=;Vst60S5WS8yV^8EVYO1+Np@eK ztW)_(RY`i;=uCNLo>|C%cSR2L=8Iz3Vr zuT0Gp)CxxMh;(x!5^^v6;T->5Bc-plO><}VC+FrYpPFM9Uq4i zF;}Y1gT1!In1QrSNip8TND_TB%s&J@iW~D~&e$!0oZcTzg9>dCH$x z9&G9Xe$lEfx=|s_*o}x^2f4nkM-u($Y>f={>EmB=D6;GoH{U7EE%KDNcO)Nev!#!o zM`9g6Z|15EB<0fpnZ2f#{FOIO5k98Jeod=xO|G^wv1b%@cl9SUdxl22XchpYU1vmn zLNRuIvd@~Tt7YNJVp~nIbzY{yA#g5t3t~^#ra8(NJrZ#SB4d2Ku$WJE1om_(Uad~} zrAxiv7M(4rjb4)rWHA;ijMS={43G~!tgQOgK3QwAzR#3p zN&Ow1eeCY2$&*Mz%3hSr?Agsa%yY|i^yWTdzz6WXP7I5hv@5(W9L&l(S9Q9zJ|g`q z4_(Z4p7u3lMU~1HryjqFG|;7m$3Ej70PXO9Gk zyIOG-+-$1eLfppB3}p#4iLvK zlTm<~a9b@8E-&75OM8P%3)sH-$T(R`cNq34cZHYAdO-KFR=!ctDDLi%P?a!65DwLprghpI@&jrPeL~~0QD(|2dVRy6GSTkL9BG7!P zcZagJkG`QjbojIn$|}}CXvzh;F6-pH0#^4lNzne>$DS(3bO@EcB`wnIsv%P?7# zgnbL?^672C?GZ7$wMp~1uabW1Rmq*}Qg)WOq=&Md+*c33h1`d$>EbjZB@&81Z$!!c zRwunHQM)YnhtJ3}Qk?@3GqVB7ROdiiXX*>A{B;*%FL)p@x2myZWyt+;^ACFPU*`8MHbd3|3_ik z^o$biboYnuwU7Lm&ex0h9;KCEl^(*^`jLKFa z4GvTPDf=^iBN6q$*1^f&3!@^iK7oDE)RKO|pWsn+XK|ork&iGTvw9>@#c+!%ABQ-f zPei9DqjPm1=bfU1bj4ApqUYzAu=B>IVH&1IchXh%v=>UdUvMV9Ff#bc4Jk948!#6( zSqV}@iwW%LFr6LI4V@e38@~K_XhL$C#t?+AO?dEJV=w0F5w?CWv9vl`CURz4pWG@I zk19@zdoR&WP&*-=Wx>r2w=;~~cU7g`llL^&*jd#g`uPI559LJu(P+hV+To#>96>y@ z2scliD>xtKjmN#pm5-z6CXH5amWx7U4)Lcor=5X zLS2_>H{1&HuOvA!#8=I}sll<26U5K&`Dr6b zdHPo?J%EFs%ha1(K2%UrHwY60Kkcgtf*-YO4K){SQF1yQJn72)>T!#inLB;Qgqwtp z*ELU$z$x|mo+c2txcApG3@5YL)bHyfE24)1~R*=`c*!MqT?+r+o?(<4XdJK!)n zcMcikO>{^8fkk_FGK?yF1^wM6^Pcggg{j7gYW~t-9@65J#GnStH7yf`TyLn^{QBH9duag8^3b$q zqVuJZvgu99r-ON!w%|;P~T0&sonI!?Usu3CS$aqG`b2(-(iS!36^4=RQDR$c#XgF+p;D zY8XL|47j)4F!cV?ZxzelrR>f{D9>VXSE88eN;&Dh{&Ld$@}u7Xk=2#L9uXWL#@7x7 z3;ze?Ny%;p(L{Yt1R@ok?jbmihPjK1r_Bwo&XSJvw-fFgx8dE_54UcZ2iFZ>xenDO zcT;}BETD|cF#&KZ9J{*%_smdk%T26zSot`DNXe^c(Kkt znxC(LmoD@GL^FIo+*x6`79wD>c>-c|e1tWVVo>gGdgT7Fr8lHtCu zlb}wMWGI2Kkfu4`WW#&&a*naK!cnvbu1*Km-vW~9)k)+RiXzr zV+QGGpyJ?ola^Viq5TzZ4~QaCtY@pny0c5^;oRQ5kA5zswMeYjwVM%t{R{LK zkPWcHR3KgZ)+Lr2-8$7O4%@wK-e$j&Vz%H*@ku5(Hxe}YqC@yKJt2?rrsrf2u8S+@;hwS|W+AQuCMac~~zTuz(Y(qi;X+8kx zDQhEE73Lm#lZW=amHZAjPv1SBFdFC52YLzSrK0@mRyUEn3>(OmLtTbL)xhGKsG+9G zDE>s2Uzt~OiK~uzx(nowW5ehu%_e0gUDn0im`Hwn@jmiO@w=Eg|xq> zZT%{bA{<$p8kgFS+;TQGCM6<|x_=|JN7{3VFKkJnMt>u&s` z(YH~F85*P?Mwxdzd@+KS!;bjCI|##>?*MMlYhG;RjLYR%lrbRjNqtdYuk{hwY)o3* zXD4wQ85hJq{w^H5h?4wx2a9R;`nEsaW!_g1zKDs*dMxpl~5`K~c`yXAwfxpSl2_YB{4g;-gd;#ks8K*}e) zutyo@A|9_stL(Q$naII|T3fp*8|vchv!E=%D8%1S+yZ7WM11L12ctm%?e^^>N zMU&nJ-P{9w&E@s3)gZi`D8t;$_LC;Qozk2V_d5bv=);O#t68oe@|z7|bW4@$&Tc$X z+&U7*_SEr0%?h9tNvRF|U&1@EBtg~t&=pRiZuZg_vz?3tfOWCVd$#hAl*_-7p~Th( z-IRQf)lcopjt>z%%vdQ*4Kl|9V;&q<3DN0_F>B_pq6?r09B z4LDdk_B!HY5avxS_47?#vPxASMCF2o1@1Nz@ka5|;PECP1eogtZZexhh zWzjy%#ZW;qSFLMqVBvy4A#^AlocQfrVwx0m6Mh<^}%)dW^B%Otc(QY-C(geElh&cgDTBCg5e?XJfC# zV5dxWCFdmrE1W0_8oMb@v3`i-S@3>k$nZ_`=f;LUcQloipvcIZwB9h?3PFVGE!?yN z-Az%aaK#~x3OCJQ<5MP<8pu)Rw%DK(z@mK;#hUs?2&%wdWs4vlI;8;eqYrT+sE1k9 z?o>ZDypBCdGA<{C2J-}u+oHpSw_!g#0eeMpQQ%-WAvFNyo^5hu@PJWw8rJ;^F_Rl$}5StgVSB@J#x-<^^6|=ClCS{FMJ65a3AP_`7o4|XCzO{X>lNo-k;$5w| z5|(wtrs=uptK7_<#Y?nthFk!4-oy`3r$fFGHUh~|2@f0{Qmg@~W)P--z)98go^d6@ zZnVDmlKh7rSwDQ^?uVhB%)4ml_~Aj|Nfwgv5%o6QFkF~dp}ApB{y=ip9G;@&Z5q}-sr<5u)r8M126mDSNDBEvu6 zuiRCjPA8tvLos*MSplIqgkLdkHupBhsAONl!}MT91>I3?-?+nS*!ZscrEVqN={dhB z2gT2q{vjsUdRV_!3_IMH;-`DaBOprs4y&`pN=fN%W7qJ(BDj`sfZ=7enTRKkPhTIt z%+5xA1Z5nI6RL=HhKxD+RhC7*VpOjCaYRQ_oN%e<`h3Go8r(-bY=jXcj%<_}UlHi9 zx#bQ0P4VRV@%5$bj6Cjau+&@{@4|)tPtJ8Pcy)-S?ASDyVxeh%215S~UVb4eJ9#(^ zL&n?M+bLJq8=)f-1TsjEt)?D1Q`joWIY&EvOPocvb)6aY@V;kuQeH(T z`YJj$P)cLhPQEw$p$X}()~HwdxhofEk<6|m0Z!Syhs_xkvA;spRRHUksh%ht5A0BD zxGB{|edPX=WSNWM;o)+&oa`YCwDpb0ao&^wb7yM!sxGFJum%%t$Z9zMbRl;|MeXqy z^S5@Z3Ve6Zna;i|2nA$E;z-(1K?8D`J+z&qJ=7aR?HMh}GO#0pg{H{Ru)v}r_I3?P zDYiyuVfOF0(yZQ0fI@=+nCmKWuOq7}?|~}ebpBE`R?DgETcrWf*Al%KENlF_1{JVQ zxzT*5TFR2pCZV`~lNIM8v`I3(!$K9(1g6DoQdi(|w1TF&$B8tgaz7#cgz%QnZG+6v8k;&Asm z6w@)-Ly6TwTH0ZP!-4})+>SId(VyW~C+yyVW7gbi?gnqktLoL(Qh8j*#B-%m&k+#q zh2ooV9OuCqRue_w3t&p#y+%7yV|9I;4c0i;J!7@DpT+Vo@GRd72N9^g-m)_$UUwk4 z`2eMXNOr|t4scRHLtlg+Qvr=ck_4RXcV2R@(6YgMo@^#^M@Yxtk}1oj!<2#8vh#2f}T2IWKOCq{X8*8hrB{U$30 zOMJW!g4=I~Acsg|boxRMTm!4>b|m8%%b|#RUA2W*YNImxCUFrct#PHw_P zn_?@@62*(!Z{BFU$jsRke;2Y8hn1=TyV@b?RA0B`f8=fpOJvL;Pk9vMoI2XYcC=zX z5Vhil53uPe_H$WUS|jzpL>fhJ9fU3ywIpz*1sA*Xr@UGCy!;_|JKaWRr-uS63eFpv z^NqAdv$e52WZu|be{>}IPVT&J};punD#O26a1M=sbZ+ZZl5I7y-I(Q>& zg9)q9DABC5R>wiR+@(WkWHW#;o|aeZ^I_k$?H5kD8u^qVvrx|ccAaFbCW2|ZHOFeP zM&#&)l)Q5^nbW-_`Di?2n_#Q$PnlEn0mB^R(@-vq|G7F!Hrb`lE$fZea9+83gQnOb zc}K<@V)9Cz0??vwoU(oOFQ_CkDYXpq_!3CY#`^Hg%j5(jbYDd!iT;|cVxQWT`!4&N zYwwGS3&_8DgS3;?eG_lfty8>2Jo2qJ3u! z)+3Xn8*hlnmT2s6GO0Lr!h0nZ##Hfoe?BJ0zg2~`#FTgOk>ym-cH!p^VrEIm`8+vD@zv0ix>Ak|^W z2p_Ji!^+Nz3p941R7!rTdPR_sThguqaEj_|rZs26H{|_tg4Gf!l+fzKDN6V3=!P$TDFZ$5maytmi1H!CR=H!Y_)IlDz650O2?b#Jd+qdOVPJ=#Ur>--Cj z1FJmUE(&f^gYLdb{XtJ%|EDcI;u+I++;O)8cyEYBpx4mSGPz%I(6V7)j8drIL2A&ngEMMuivYl-j)_;-5bGl&s^Hi-WNMK z1$tNNGXJ`FB^T2;MNzV~|C-85bZ5S$<<{D*;D*rv-o&Kpk+jgI4+ordJQxF{cyIg2 za$qvUH?XuJ2VP(RtK-_(Yosl}Flb(IC(~vAu}Pag6u?Q*<8f>-%ppImtW*tA>_*NW zgaBE%k?t@+gjBxCK(HiNH==AD#gy;Q*ZU`W_QL=bWnl6^yR+)u)+N(^!bKlZr}|8c zw(?$tTu_qantqkRUHq@FFG}4xfTob$*jyUUc~|>fc)kgONmECKRz!$A*Smc^@s-*? zRFJ;HK>C`B7usx7vV7R=J>3pb*yGt|5W#z3C95paPtvNRt+kNN^ z3hL&^z)CSKgE-nH@$FW3tW=Q9MPj==RpXiMH{V^w6g^?Kdcr;?F(YZfHP#dE7}rko ztNT6xz}d3rdtv*=rDC;uhJ=o)uBmmD{O5J{ma;dh!*;sUx(KW^kPC1~91~6&zg8bG zP#+ktth#3ob$*$(lOK>8<$Y-Wq+`tg^_%QP%w1GAWnu__4~!uO2H*c}?}2#G{&hYs z_?sW;uru*9;Q_aG2!x^~qVf zmZp}(=W$HK^wiq)>PH}u*>7V!U={oCeTe0pkaPVk&N%Mess3!f;&q-W^n8l@bdkqL z3d$8-#|=N;JeXQommw#zM)@wVNLgat4`u6-Y6KZvHV@1$?q2vFji9}&bS7@wShUOD{Se@^{A2XSUe-~|y|I`bF zhvFA%iB^@(rgut|F6cccVhV_BltK9*5PmqJC|x+JXL$+j zI;Zwx5G9itwUtceu|iQ7gzm6swQRHY{$1#tvF06atR5gf{#frv@u%%vIXLlA4Wfq> z@;Z4ddC)h(7bR!aJY6#F&Fx6O>P|*3F8N*W{;1~Dsz76?Pb*VhNqIiG98x@byMEzl zV_@Zp^}$)=RYqI=yOB^Hr-1PeKOQ#n%x|0KoYYugyOiMFm=gx;TOn%mEq=N`<6&dR zNa7L>I@7G6-V{pCVka&MG&3d^4Mo=V+2p2OneRpZX6+I)7@p_&9wtc~Rcl2x_g=Vh zRD-Kq(m!~&8uJ8x8U-On*I~3FGDVo6<51O^oAhV&b)Q?5g8q2OIR!YW$Z^{I63i!0 zB<^RSj4GWkoq1)bq?_}k&2wyDM3m=E?VfL!NQwITUWcsSMXkRY5cs`wx6`&2$Br=( z%hV8>Z0Gy(a&!B>_s7ZLi6EeIGFz0y}VFqxQv@GwOb>S?xJ6F);nYDeAGF%kAedZr5Gi##G%%Dm&{i=uRK=C3s zw#>#eJFU>s>+%doI+P;O1Vj7j=ooNF{N7?yo4SwT=v7`5?uN zelYO>nP0_t3*&4e%MX>G1uZ0eN|HycDYgR2OP)aYtFmD<010=jF)C<~O#Xy*Fjp{Q zb_M6YD;CdQFFE}69-N4E7rz2@@lA!dn`M@N3BKe!TV1>e4`0=(kZEUq|2FNBC%+sa zZ+at}^I`^|f!IT%O62Y!gR!p$b87T-U;&Sd;k-$cK32?%VjJstO|i^e*{c{G zS7y9R8H$iZ7Kt`YXJIOC_v9#L)yYGWJh+)Z3_w3<3&&vH4 zkjP@tw8->#JOUzZ0uFWMqPCsJZxU78r z9R;Odb~Tg)qUdd8HlG|0xgW@GKA0V~JX6zoI84DNJ=Gvd)q7vWh>N3XWk#KCxB=PI z*UgRM>vx6Dc#ijC>adS^K^ zFfi;BP>UB1hYKZz;F)7pHYdpXuBc}^m5Qw}K?Y;>EA9;6JZYrTtTUWIM7-&r0(XJQ zLm{;ZKyDp@s1_!;1S8!4#gHhb^y4Ekzk8VvoHKU(Cxf5cXm4LXQKm&k4s?T1fTgW@ ziH_e*6N0QHXsXSgx%4Auklk-DAqTpvL_h0_2mTM-?o2Cqo?d2TnS8Ay-i#{{h*4 zUG#ZXC7kHcXD=#4;yqIxu|Ia$}8S7VvKNLtbOO}wHrCcak)5kxvhEzVt&^@s3BpkJSQx{GC$X?mf*D)6Oo z$C2K$N@K+5&8|bj;Nme*BCPT(mL6`!AE`O_sFbkv{n%Ye{j)Y#<*%YV{$W)OfZ+7L zDm&QJTikq(7df18&LaHM5a7`eDMdjrsq8 zO!M>~73GJ3@Q|-(oP&1>z0&owYb;a zBA6V+29c(dG@}E}HF4gn6H>ddN?M^~{M1G<3J-1YX|&o4PDY3VGAq0mBEH4WVZ;K~ zK6h{%F7p+3zeIgUv z&c$5QJxr!Z0SY3YW?(+*4XhoWL~och#qG|5YrRX1Q4?e_I!~q}<-j*9(AnG=Z(g5vuw%XXMvSVnvIktbCqhKwHybVi zF>ygCB{PGy!|a zlDQ&Wa=kc5{h^d&pG$}1KsXDdiR>7};ms&}Rvs#reyqZ(qg1fji9=Tp4&B&A5fO`` zopPD6q|W62liE`DSp%o<0Cxf37!FQUZJuB}fF%AAsGIu&e=JFN06wK|#>V;Jj@N$n z?&lf}x)o@FCycz(K|!?Cntq;*hBQ4jS4y3O4+%(^4)qX2Oi_;SAbM3`v2$INLjgxY z#p?d+EO$TJp=b2Pp7_d9>T0gBIWJWlnGnp2FhW%ku#(n%C)wr(vzv|48(;BS*XD(t zri`X8{`IXF*;db(CG-zwb$K$7W|C>OmU&@cml`J?qfaKMOd2~n8@*d(k&o+m1!m^i zDz4_7Q5@;?H(l`uneL%4?VmM!zNOJOgGbc*zYIZ?fP(jid!lpsQAq`xqCtIExfxD? zrkBU;0aa-SL4(at-eyaNq`Do+*1JArw6JFs=Rt?Ugho&TuLb9=}Tt)y_$ zGD9aRlfSu4SinhZ?k`CasJ+qN8+6A!2l1b9EIRC%+*jw7gZP2)Ut5w9RKJqsc|IM z$$N_a;`2iL1Io+yKko??kor076QI^K*rrF*2DoGNs3V2%F%wYFQ=1wS3%I)=q%k?= z_I3v$X1Vxbvb>FRh-SYq_Fw+aLFr15T<(ML6@Cxfj&+Mb$6Fkku#VN3bn8V#(}MJv z)pMlC;>=e?!db<~mt_K!BI!CbUqF;XqMuH^8U}h=#QS~eu+Tg>|L3~km8*Mk!UMGN z202Z^3GJo z1y;<+3a-^}!yz2R@}perK*WaytJ#7&$wCqL+r&gK4KcEiD^hfod6K;J@}W_1aNCK{ z#k~Ry1(TR{UDAo&jXe#}Pz-?oeTxDws!@ZZrv}pwuYR|mt*zQLbpX|7%9f1!Kw$Yu z8;_SCkN4c(H5qFifV_mCR8`up)V&MrxT9!&EWOxj;4X6yk&qE<-D-LS`sLSAuy2N= z2C`>QP*eR=X1K~H&8W!Ut~$||hvt?~@3*J;c;VVd)G2QGZG{#4?UQ-c z)yHKUwvHk+jWjv#nHp@7r#w$T-9Mp}*@ZExxpm>gALWuIaAP8jXu!h*eI?S@<=?)x zwx7#(775@%8Zr(iKp{i)+v@;aXN#Q&F%k*j?ZBcJr<5K@yKj}?Y_i{Gv&D&4)xHcQ zycz7e*9c~=xC^oy{W*hJzOMG@S%K8&mbvP2lOv@0>GNqI_6d-6VP_Hg9cH--LW=xk zgZsRB$8{vLoImr=t6&~YCj!4L_hK>V3Euv`y-vT{J9H1DDg(xG7@e86znG2wOi{$% zc*G31rn_&!6QS*fUkBW6u&42HWC7L=W4~!DKirH{@irH2G9de~9kEdDy%>zY`6-i} z&Z*$gAugA1mbas|$`aPk?^29YDcN6O@oWRWQ;ul>D)m{rO zR1B?c4{vGCD5!z20;_^9(e3u1mV#O&Y;5{VwsV7Szw53Z2?r!Rp2vA8j>diO%ZS#* zPtgL$^!6mQUk*(ra5C2zTj$|{4J;xDR_suNkUw>WF@YG@wFI7aL8d8%(S3Cegcdj` zR#ozF4!Q)T1Xz{u7guJg9Gxi2INogTGhV($R_Vk@P?F0}U4`!)pYMdyPj;1BA7oy6 z4;Q%;75SIsH>3qxm*7{J35dw65PN`nv>s$NpV{kqr4KGqhfm#pX|M51_du9<2q&35 zuuirpGodIb(~)Cfz1{dF=|sMJ^<`=UU;F5WP(#LQ`kcbCIy)czHk1T2ur);moot3t z1&YV8B<98KG^FixGJ3zPx0e#Bj*HtC94og3g{ymUXjE=A7#*_!Ly)!AR*cLo*<8~Z z2pRa*vht!rNco$hcGB{4?=aSBC0r#lPN;R>+xmpcuHWGYzG5uVbEc_@n{~WHbq2xe z!&B;g#TR+(H@g+C?oK=e1|LtTxnHP&p1;(qdVTrQ{!i}1nTZ{RL~P5QuOsI2zjR7K zhFW0PUI28axHklg&trMU{|(BC(KL@#pYyShT5y6{(HBUanB+vhc`PB~v$*jm@C(n| z8PZFQ&F`Xrfdjb#76y@$WMgzJ+9(HX;x_j~RJ zmMLHO{cAc4iGH+-w}k8^VluXFJcl_%)X1@v;45h9Gi$8omb|)CfsMQpgEG=*x9_ZP zRBOEY_U*cL3}tT!L^KeEzZB(LghPr1xBpH(lLszx!{C z%KxohxnRDS(Z4Oy`L}i&T6q6wn$7vQZ_Ekl2uHpNf4fWyt9bt(<75OCe!Nb2t-qyD z|4a94{+IsxuRr{T``@m%LlBa4NHH%-l?v=Q$TGOKXFOj6oj)Tm``#e&C<=6o)=i#i zRAznpKMYwt;QD9-wjH?2ZGetvDuy*?1=J^`yerAUZ|haI9PU;Hz>II#?SheD@d0;l zCQeaw?dk@*)Xv@hys9tgYN4ev9fa%5HdgJUYrQAo<9(l1J@FiD#_}cQzdikbw+jF+ zZ#u4?4_&D)ptO_Sw^$$ixYlaD78zJdA!YL$2Bg@&LaDJ=z$+&F)i{>=e zCi64}x?5()ysun%a^ITG4w}{!JCs=j^e>lcak|IHw1ox;1i~gDvr0Yx?Hm>^{v-Uq zI*Zv(X4$@eE1l7j_#c6q|3AO~mjIKIV`B`fFe>3U1?)`kViMtb;f}yVKXjwBMbYF7 zH&hz3Xy;pu4=wl66@SZcHX!ZyEwM(Zl{ta^M<5rK=YgV-HiWgtU3L-HKsi9x!-Nkv zu!cBQf#Vc9jS8BJ3Ri0u7EAm*+PhkEXp4Q>ztj8cWQk|mGW9`yvDVidSkrn8ti*jW z+XhoAy420o(itXTIhT;>?>OeIX^-wG+igvVLz`7a0Z$>R$a9~ zZVbFr#z%4LyivZp35(@-q;p?!{T%9a6B|UZ)U5Tf=!s0RrR9C$NG3dQ+*5j+;&#{_ zOcsK2a2e+MA-|=q6Ju1)pBDuG)jd@Ad>WCm7rxQnpUveA* z$m5eN&zb{Owp{pw(u!iHsD*AOwvpWtZf69iq#VKJZmUrY438Trp5)W%SdLj8a*$hc znS<3A<_!keP<#8h(9{n%FCr5fD${KJ{%A`~s;lZ?NJ`v;{sGZL>21LVb{H5#MUnn7 z%yl!5$l=GqmzA4Lt!#E1cVEsii{~HD=i5GL>nO+ou0e0RIUSb+5T^-C0~S+=9C3PZ zmBn0BSraA9SEaeekFP=F9wEZmMAwXqeKMqj_OgZ!?=1N^V3RVM1va?xHdhwa6WOU0 zP@>us;JbCl$z+DR{rs7t*1>8Cz(<*kct$b3jF)k{?^ajC5DD_q5Ob&Uv!+pfGW=Bt zLA{-|we^=~7S|N(O!?<_QD+TNT2uKGA@p>36A-ENfjNjAvN)GI_9?PxUpBG$;n&V* zBIEbA1ug$%Q6Dq;=s-P73gbZ7CJgLa8S9K(I{xDlREptNBm0$kIbgaVUgHxr9OG9e zbNn*_$$NB6SMU4iK>~{cdGc42;f+F=rzqZ0kEhyl)?iKfy1k}shghbx`>vA{ZLp-; zO6Gm_bL4dp8?tJI9(^acWkh^=qqnE=MP!+~s=}=Ed`;tFL8vQV*L?GwhS+SIHIK{F z+sX->n;iL1@l$TX?t&Kh-+5--;>AQeJp+ccY(28087&ogmZhWHC>nX{&+skD( z%dtG_-$W=KEbS`Vc23q_+EVc}s_Xl#j8z4Pl*m7`@|m5HoN zalpX+R(B!Myj!dQ4Gz`6xh=Jqu-mCK;JR5`;CU@>0}(}{Tig+!l}2(|0R{6#%hVzI z{L)pX-NK7&vW3VF%FA$q=S-RIsPsT;DBKp)sGeKY3?<(nh2$9 zZy~g=?3FHByO;jy=2xf_Yj9n8kB<_-!@uOb-6QIH#q7SqB;~$29p0ZOa6MI8a16QvLmhZ6^J}H_bLmJaI8(ugW$}QFex4$gdysfV zd+ue~(~MzF=r)6wWolRzTrCDi3lU430`Pe;2*)Uhy;C{%L2H=opIXsEgJ!8N#C^f* zPlLv{Y*pUya;_>0;-5JUUB&cvDIr{sAN&JiZS*!Wv2JQ0jwvxPXgkKuFP1@!nY2f1 zZK<%c^rPkjpc+SA8(a5w0W8hAUNSm-7OPdUZ*fK6;DKha?PMu`a^(o`=`*B+2gNIgZm|m;8n)qgx!Uzr2ZzGnB0I^t>Xd7q>(_^Q|Q13`AIh; zZX8F|w4f>XuIXK#<044O_g7$A}dZ#YLnCTf#W;^wG;<`~h97#YtS z?_+{duf4glmS;5m?}+H`^zx9)(petWy}^>@L!^;S$v|E;U04YWFrNvwkc=_i;%=8LAF`=o1oyoCq$_IeZS5wjw`>}=w%bmI!c zRmE+Eyfi?bYqxN4CI0RRpZ>^UpKG;zz0tb7{K+r3X#&^B*$9v% zP7~Ca8d=?Cq~{?n2!oqY9Yz-WK|Ptgw3tvOE;D)UKUR^)6JduyO8Y&mkut{RCVv;B zDAMG&1#UE{ZCY*^iVbfyEVN%1O}|;|YVl#JivZL@yvc?_E=Sbj{IUE^Jy!Wh_D&e} z`nb34Dy)%*SAwQEtk@=+_e?qEyTYjNJc}Uyc|1BY4=&R)m>1rDncP?f2yDD~k91mf z``VN-zW6#M((B9u{ETqm51ttj!O4@6?}Ki*K{dKp;%_z@mX7(VYjY~yWmVZw4i#Ih zqDuA=ZYM00o^IX!Nwfa5dfUeeyxS2*<9DFZmTHJ85D?IXMTujjwrYg#_-gc!ig}5> zk@!wOP^->UB=qGHG)fB4`O`KVRDo?)-^-UG!Gv z%jZM*#bCK#Bgb8V#av7kLLiaTXBi3v`meahy?6gJTDgC(5sm^xxfy(8)>+@Ysxq6$T2}w8 z&C1_T8YIgZA*k?Ipw_ND8yz?qVa;tNZm(m)*j1rCw^SQYiipbl@;o=h{5LTQk?d6Yy#d}&Xj z!x?#xGb$tlU-=Ln-;#T{>6m2tGnH$$EFj@#$bJg2A&zw9!wqoUot0sCv`30nz&*nZ zWkOxk40VohP9o}{nMZzut_d9X2Pym|E|ZGNRu5Lf77~9x_q6?x&FtiplyLhgG(Q`| zYJ^(vxMne4IP?N7YY$h~8KoUzjdd~xzT0r)%;!fDk)U4KW>^#Cg@ zm-G$wQRVizMS4PETU)4r@IN5`Z>tr*@|p}|VpIvSbPY(?7%V&8qD|uotkK8m++xKf z!da5@!?;F&8rWP#eF&fj_Ng52CBwx!giomSYV>v@Khbc-_;Kb>wKPG_^Pw}j!YJSV zs=BC#eW#(2+8V`GD+l{LSu;zojDfJdI}x=;V`;FrmTMaXsw`#wj?s$Z(U;XN7O0P6 zC6AMp(k6Av3643w3o9~I*{*0hcc1diZV4`Y^JjMXu;yu2xic}oy+>cCk~c6bdy=EP z_i(OL1I4+uF?h&;T6*_N*q-75ut^V-w0fwwtI>L5nb>k?Kz{VVo10l3`UgY_6@lo_dv_970`W+P_NL75 zTeG_>f~#YZ&we_m(6c7ny_PXOgfqq&0pXO`=U0ou$;_DU;JWR(8eZ}gh83PScAK&b zj$L!Pm~X4=4Le;oC%D(jK3?LDWyfo3uDGc&qysvpv8%}h)7IA5)t&-*jEM|&s=+GH z1p*a4P^CadmlfX>p4xuF<8AF+>3HVeESD*fIXWD0oO&@TKiV8Qcf^ah8dsWJbl9HUrE3V3U0KGRm`H|FKH4p6`r_bmfTadc+ za+7_4C(i@53_u^gbKZfN@k!72I;i1y5>vR?Uw zcnmhwGc2gcY8=GiOMYZ3gTDW)3sYo`dZd^&q84kT^A0DpfnhbA)&6|*(VL>g+bu1) zxnQ^VBU3liy+0wod*v0_&}-#G4q5;#8y)C)`w&nhQ>}m-tXenTu;6w#zTdAB(qnnf zyLuMVe4p}3T!UYsrz$IE86{xbj`0pg+!407mphUg6lJ#j*0jvUZAswrfr1#B=ka}k z#w6qN{OCFu7gIHrwNz!v82$3HqP4hY=oz|zS920-- zFgLK+P?V^;R?Fk(Q4i`o;As0W*GxBR`FpsW+LM#8LjbQEd1nh2 ztx6KFIS+u+Su(cef~3M~*N)=81bs2feW2fNX$rZgOXj3Q|`@T81WFW{pdpr@amyV(Zh_R(Og@e3R zMzs|d@z^FM6-5M3V57u`W^UB9kNnj_qVN{FD*#D5oS9uS_XBf15Ta?o_nnGmOEwier1m z5u-@O)7Wl6vOFgG?iu!(Yf&Qq?vj6U^NJpm_0#9N1XYj&yX^wP#;7E6HCEDGVKM@2|%@T2! zo-OJ0Van2G*E{~XWVm?~FbE~WOhO224(BjAz>3~H-&l3{3t`*pAV-QE9j#=0dh+wH zzfM!$9Zb~#R1l+5y8^bjwo6u@E^X*(uFs@TyXSCwT72?=lIyohRT(lU8Zb!y2NYj} zIHdvd>c~XvANw(nW*aMfcyi$_t-%8ChxIFXc1TH7TSpXia&l@;I*wfcTwX+Q>&Iuf znyRv+8$h%nJ!d6U?`&oL=6GypY}@uG2WwP`Y3R+4+N}!{y_pYLxM&}f_(ok^EOY}Z zp6fKK9J@9=xWeDiUy*iTjz)=m`@`V$(yV8R%`C5>?(Kyy5r)!Mfo@PXkA^bXH! z3x2ux?|n!Pg!54JJ+Ykv*P4!)+OfW?tarb2>L>@wM6w}Y?pZ$^ntYfh&NQ-T@hL-I z4ki`xa$s@%>vYMOE3>~RT^)F3V%a;CU0_6w*^`AZIr_I6#Tp*~jr6tdjH)TdEB6Y;J8aO>HkuD3~r7Ay&Xj zQNG18Z;8`mAE7t_CqdmX;_(@Pyeu8YzvY~^so6R@Yw#t*bo?=+0JFl8-f2K!7Z#0e z#_DymKiiOs`3mq<2PTfgR{sG(vDhWw$40^&p~xbH_&ex*jL`rG(TuYC4ESRW%jKZz z-PHFJo}dqJ*o1VZgzss5@>UNE3HhAaQE3gGdkHr4u#|H11M@nBWxH;4Z#w*edUBL} zM;ZoCMgg>`Y~nt(TL&v*+1ZYRJ*3P&G}9T5%{CBnbdD^% z0N1+JDW#4IiamzCI5dhK+489YG>at})33#@41&E*NY|tvhzpNVW}34_PwMfocV+dp z14HPJs&(Y_$R?bM`kkY~w9g;2H!xlA46Dkv(rjv>2SaMhJ)Lq%9ks}=Mf4Z95c%5#HPG$<=XTf_yitcItC{26Y z)>ys6+EJwzsIQNHZS;g^OMH-I8`Dtw3wj^rPzK06OZ}R$U+GGS_-Sw707Y?Z7p#8q zYvFoHq8uL9(93ZD2gZZ286~@B5)&@m#9uF%j{!Cu?Qq#_8N|WiQA2x{TqFCw?Z4Pa>b3EOcFn)puRXHtN*Q zXwff1{%Sh?6?FKoAMUdIe(Qm6Qn^VYOrbe?XzXi;n%TlD}uf1U!hF zy0+{7o6-6EMLgjI>EBC$Vsg_MkTDWrloqW12lQ`Qbx9n^uzazbE^NU4Tm1Kjg?;~L z@6oyup9*fi?2~(f5xYKG=bzh7!cDHB-}$calP{*F$?LtBc8MmrqxtXP zWS@6NlK%`bdD{92=UhEdQ2wj%zbhO0KVntkkHg%Is6AvkNLrA)Z(gF;1yNyJVA!Kv z@g6T13(xq}Ur(Epww|5RBwegw90zQCBbDV!+*nj9t@ah|t1T=tXKsEJCO+U!&cD?; zr$s!n(FpCRR6L#SBq=M6chkp~nRHm4i2dOBXyErE{DR|EQIBeudVic?{(nZ1{{@fz zuYQO#q2oH7MA9E5S&v%UGjicr2a5tfhEuPjNu?KEk2@RCf&7%Dn9|;xLp5e_3|GSa zbHLm;HLu?<*~_wG`hKnDmUur9m4uj2PiAb{ODbIl@)f3^jNx-`C5{MzIYyYc;tt9y z-1V$;OzJG}n97uY8#XYTYj8+7H+tLC&=b*3{*iy$i#NwKh2C5LX0U~o5*Yy^Ra?WC zXPyYLr!!4(B6O?bv9l1TPO3cID&3P?==f3?Cp3BgzvZ-5Ptkx~^-LMD2O6W1O%xH(nLT+K)OgL zLZk->gx-sQfPjEXlP)zbwWk%SVqB;+^y{pPIiob%2(GiTP!tob9XWRd)l zz4JWJeP8!g3ME-H9*B0$R~cKDXgWJXOVJt-$OXTdu}{gj?Hs|o@0q{n1K0%zZuEe13~ zp?{cpqGliGv-5WLd0kk0j@FNdy#BxLuU;{jOl*Y)4HT2UDw0A5|b?U5mvrTpTaw>&i(62E&-zk2t}1-VvDo+}| z@<-I(dcl_Kf;;21_t-{t$hVm`-6ELB?X~GfJqgJN22()`k&zFMF2)YlgrOY3lN1() za?7^ty}S4imAeaJ*=k$Dr>}_R9#?{l^ZMY2s{ubAupc?^J^leIfnL~ZL9c$ASsTf$ z;N>k?EXZQHT1vU#+2>=oJ^aiovne=4dx&t~D7>Ozq8szxj(c)F>*jl?tDZreY*t3z zsKE>KH zHNNTFU6K1_2^7X5vI+Ci`V4&BGl>hx`nt)zvi3>Wg)E=F8m$}^TWf-3DkezUzjC|D zLbFT>P9jBy$!s;pvP-5{Zk-;-+iYdcpp$aXh7xo$UoLF^)RDs}@@Lo+sEOHx9mvdE zH&KiwqvGUKWNV`Cwb$7Dnda=4N%QCY?GGZ@DN-<$|}CS!LLa^gf_SL`P_ow z%fj}sJd^G#H0p-~HxG4ZAj=TFxrux|gBp^u$Qe@D?M<`$O>T>m_9=%v(voG_eh#YF z@UjcfyUAli)=jkg-+l>?eQdmOeu25pv<1J2BiXLrv^ck|u;c9`yUIQ`o2 zfGs6D#}oGFCo!eb#lVBlZk%ZS%-S-DAMV){w2|H?-!j|bW^T}3VVuGMvP^CR#SbP+ z7SMu#b`;o?9yLuhdg9N*-ckprT@U;NM&iQ1KE3$oR~z#?<4WAc2NFZYX=8o3a!0@| zCFio)`^qni7PdD#_F65gW2Wx6%oGG6eC?qKca^zGz7f4*4XrrX*; zUrx$>;dzg)8rv*WEm1#k1ThZ&tn@wUXwv zgYtVM(EW(7A`VFK<_uMHMO*~F_#M2F1FK%`)~vd}LVI)tUNC_t<5O;T469JA!^K&~ zH3?ObB}+JNIbWwmb~L1TcNaPD5oD5FU%H)ct>GN(?k`uAZ_@krY4sTD#ESYLpNXcT z3){}J<({b67umgTiVPj_Nm~Db3gDz&w_CgdSu>2}zu5*nMX$v9ayX{(@9fogjx<-MSJ%>!$G*^Cr#xh7 zgDCT^X?L4(KcLy}fgxxY{XPJ`@4dMdA_Az=**s7-`#f-ir84Df_vO?n=GF+aJ!R|9 zwtbMBO^u~i+Wyz0m#{5KkrP+GMhaxdd|GeQ!^MP=A3zDb7{xx!ndHs(*&@qNnMPp> z2XQ@Q)ZJ0#^^}wuPe84Ag^o4`uEsEYrCt2pmIW++>d89mJ34f{VOgJL#qC3DcWD2> zMe#zqxYIUQgC{2T4y1vz+f9dHa~VV=_(5K7^%RWz7`y z^3*MJBl5^f4}G;+nClY`7Y@ocm2*~M;}8-ivL6m4f)1ksSK(fOa?3_Ub(?sqtu0sn z`YC#2L}cOJ13;rf;E8t8(vD(q)LwDk@Nr}N(!3oMD*m(XsoDOU z=U#I^MpRsfD_&NAZEM7)v8&RjJqAR17P-~)Z}fs|LHH*3O< z+@F0yqBZ zpeIRHVM6*GG&{=;{wdtRv)|i7Zmwwxu!z6o^$dNA(0d3DFtR~G;Q!PP@IRO{&u5Mk z46kg?o>q~+(DU*JNLJreVUd0QYbEr;H2MI6esjMDKcRN1zt547S>}xCr>?LxyiIbR z<%sj~Tw!BClH@mMa}eDULeHn|u0rx}1hi?EUFUMhCu)6{E;wDU6V@1eOzU=peyo|q zZlYeEc#)dwvc>;W+Ufs_>1}{*7ve~YoBVoWP|yyor)iHjgZ-+oT$v2GxVXpjvXTLYz(Uy<>tK9o{7rp=N&Hmdy?f
  • >l-xfHdg*RQJAkg2Xj|Gh8pEI^?DET5U6-Ln$= zFg9Ix+U)UEvC6I-hn^SRF30A}AG)jJ?vr0>0)K}CA07!`-2K%IeSh}*^@CM`_=f%1f~$Wh(z;j`RmcWmdbsC$GOyQ!4D+|X z->=A@s9JS!E=M)f=u-Zq(w;KCuLJgPaw5M9rR~`niGAHHCZws<+XTP4)sQ9Y2;D&# zAGM_hrUHHAVrdBV|CAJckFEAx%%RDlhe{Xh;Q!#P$ z)`#%}ofJOU%!1^m(qaEK4`e_ef&NLpjL*|?^2lm`{jXf^^jUx{S z^07~qX==7b(+$iu=*#w&c=pKI% z&*>hto1FPc|1vw`!6m*SX`y|NO`U-wK?I!N(iz4c|IjR+ zo?M8%uJ`J$V7#Eg)bXJ3D(k4N)|Z01q(6@03*2`MvhFoj`Er#y{K>j!R_AJNgT7g( zoeZ;FJxS`|+xmxU&W4?^S82nOw1~FcMysK##m7H1^}Tx%)^Erg!#>@GAD_jNLzHq~ zu<9r)%5v6mENBQc1oXR;zK`nX2A}vLxS6$s+pKFE41Ux z|IMl@H~9`|3}{^ei}M*aMnwB66*O6FRzbr`f3ECY@Phv4I;?l;r(v?10rv6kA##Ah ztd6yHgIKF&V@vdz;9+)%ww874YgO$UQe}V;>Xj1NRo$12#%Etf5J&Tm#tQ zpf1HovmV2Q9{GNP#0(?W?)UDcE0}uz?`lu>HVfy~_ZEUecsb8%l75#mxfVV6>to?f zww7yOCi&F%0sEK%vdFS9-lOWQkSGOc`_gnAz*A)QxYb)_zPs;yTs^x@Sm{Xt^xJe- zmn=!zySDh`ZN}iWzx>YVdr^MQZx?1Cbe)>HYRX?~UGnhm5r`|@{d*HHs_D}3ynSXV zAph)00mThh0I{RiehM9diI_64hT;AGy@q%WyVTBck=2Xb=kPeiRx?&gbB=}blz7qJ(vRsa6mbgXQT@!y??fGUBNc(MfO zHr@h%m~sJGXBnV>jsIb^>_U6}H;0JSDFz19kZh7RSMdft6{T*A_V!<#eu0h2xdPc2Qoq}E?}}f#VE=Y4Vno_9pAGPU%Mb(x z_{H5HTMMw#GoUZs56;~k`_Mteq5QnZ>`PT3jbAF}yU8=N;7%nIxBg-98O-&C2cuk7 zZoOx^S>XPq_EXo^W=%HJ()a%>M*{mAMOqD?8ZwT!a+Jssp+4!W#{4r#c(-w%q{BX`%l^v!#TMW#o*B`*c zI}x}(2v7anQc=lRVx1MAa?iaUjF^&^m+tBP0NNDP>SvzD{aolOIFfx-(wD|@@&c;( zT;(w&%J^9F&VH!c>Sy`8u~lSOOk*C5hNSJDlw!>Kk@d*)s0`&0tk$){MPY-iFde5{ zE;6>LTQn@U?Dsc#iOjl{<6ZY+?c7K95gPf+y=P5M`2BF78V0!9c-wWxH1mhIBFtd% z?^A9`KR&Zc&-Cg&c+_v8{cgirV}YcvR>ib%Jrr}=9D&*2T`wuxmvj$s_f>@~t^5rN z*bJ`1FtKkfKfw3r)@Vd3jTs5KVwtpTmyC(V zr8g}8G{d7c1FF-pYJ9eEAp*3Q33xd>V-~3L8yw%*c|zQXY2sJZdmp9vSuuY4Gon+Y zZ`vRvf;3YT$=BSI{{B(rPPufc@qDRRD^m0}S@a(&$;#8Zczi)z!Bu7R8c-!Ml7b0} z05JzHSj+Xm-P#zExDopAq$tA`RX@$a6A;xt@0OF*KN_*jIbGGJ`xOQ;cIoWMHB4p| zGUT_<;C9fuEMNBK6@P|XxtFKjDJ8o{Ij8EHvb0=DA*ZBSYg3(W>#f4KX{M;|QL`@{ z2!IaEcI831ZMPtM8Qs=ZgnBtG-qszsKQ?1l|4DOjV<~e~Nr%{{gqa?VS97^7XUL99 zY&4_?T$YF23tdlHx)aCy7vNh(Y4YMPBMuVJ#Xo7Bs9W5uN^Mi#F3-RX8T>SuX#5?d zDQVd>0c}j5I@uQMB^wd0AYu^QaMsT|A>#3~57RaBY9t$VuOszxBkxoQ)n2CNH{hhs z&ydU`I7zWl#sfX#zzf1^4i1Y|`Eu4_K0C41LYz0=o)gc$-joXJnckl@Ks}JPF+`D@ zT_(xj-g>v^Rpy$uBmEY}h=F25D3=-zw`E2=DCsSwu&kfZQ(4-{uOdstw%iG_Tnb! zV^X%Nhv1P~cD|9Y7yhezr_HhW2UVsx(=X47S}-T-i}E8ZB69hn z;ysHwFhfc)b=*Q%Xoc}(YOVRkeELVmO13rl86hGCscT&$w;qJpJ_{J0EPQ^?GfTV* z;fprdYb<|quhne+ukF?yu_%02Pm*mAbx^@0Z5ekcnNB36O8V0E)7@Mhn)8DH(Fo0kuDD)@@*rr&qWE^i3jo|DO}$gt5l z)V&6KTJn-?_4dP))C|f@`JF%LC0jFxhUo^RYSfpuRxBdH*BuPJ>~6o)e_VBRW^+JP z+GKwbmm$dTDed0f037?aoSSY_D}OLteDis+slLS*FPr%1$tVTXJ0neY=YOwF&;3^X z#ACRpi9CFn$j3oc$N>@QucTI+Qtm6jq*Yea!AFaZ@6yF%;xt>_CZI#|+= z`cI#Csr5zTI;?5{H}Lt`jRxFM&x2rO=>Knz-;~>ch*}&-KR3j<-Xy6JJMvU=46ZQT zQ@omXUXjhc^3vuDp6%P8uE?*>CY1n5_=@fh;g*Emlhfz|wybZjm_#-u=Wz-+u{$95 zrxQ|FBMe-P>1jFX-KV`f&!38QJ*Jo4Bf39gIT7?bkA*Z0oXKF@J;MIg7KMW-_xb-f zA8n;Xf1}_puu+?Zh$>jm%UnO{cK1IP{r69~cE=(XuLjMQ>)m<8IwV%<`6biYJM@z; z*tCOghJCHtBqg|NbLwUNGS|D?6BP`1gFX{8e{^p645ahm|3>~V|3KT z{dm)jlhfUvoAyR2vi9$P9$w${OJsOQI|u4b!6XzEE!i#l{;Y&BatdSpZaY(4=)2}l zL)spb9d}I<{C`Otx8H zk=iLEF?>e~C-d&S$Jgw990`6?GX1f+#-G0}*Va&`7@rkgrOb;7zNP-{g85ccExIqi z*hqbi^wEKoLl6Kdj-xTNTJ2MCyVV6n((Q7%8*XMd2MP$NtgsvsVpR&XsSt|^d z%nbZKlCd)7&vP-(HK@>UKnL2E?+=%)g5+67xIPXfu%W@m$zfW~_L3`F?mdrFimxl1 zxJSmp;WrksQ0iCCRH?~9rUji+7k5w$pjkPJ(U!h-iLPeSc+wXV`Am|>fyVdmL#m2% zom5_LF9u1l-${JY+_D4YnRvGxe>>=YBE9CB_`GSc$#o^D9qKpRE_SoHt%3-{_g7#* zM(DfknR|0XzF2ql1NQf?+9ZD(4b=8|f`-zL1lrxR5?es*Io_kS+LhyEQoqQpg^kWD zZQ;j4_)q$1?F%2%2Rf*3ZCczWnm!q|(^JSWpY`1;)2h&~GWiH~$_bX7L5|n=`9c|% zfmvKi7+Es_QxQ3CtkI$udwkp8-d*hO?X=tCpF1MY+*Zhf#-O=+Q%2Pm`i_N*E~c!? zv85@>KGwj4`l7Lg0@H1p_&+mz zyic2_tM`tBlu8;Ko;kSS(!H90!0+wHaus-QIP&~I`^9$s79pDYty7K zaZ^8`u~+;$HF{riOZOk#YEDw_(`IB)E-P7G!-+LaX0$3PnZLwKod;_A3+OupEP#9a zojfD;SUwSsy4tqMOp(cbX0Pk1C6dauNRQPX<-m^&)OhM%Fnie+Pu$Us=Y#Yuvrk*T zY^^s}mzc|l%fCHG_|6#0nz(nX?0m<^FNJd=mCFkVTcHW7N2Yn&&y#NVjaW@CPxz%l zf`wf5G~G|eEjt^l^elip0tA!)8L~Rc>_QA=pI)3j+$NTt*Ak9!i@FZRczm!=7Rv^z zNb)wiA4>72oj+++@f~1^pxZtr)U&#WuPmtJo6lW>HxJS!ld4q{Lzi> zFLIW`b#TbwApIms(G~sC-QUsgw3|f`DMI(Z?UhWRWpex+`DTH&@OAv3 zisGGqEeh8j^ivLWge}9co<9#VU6BW*Vq^*XJt#K7$toalCd0R+NlQy4s!;8e-3he( z^2t{PR8~`%hre5G=Sbu&?pz-dueqGfjzTlM6nN{xjRp~yOaD$#{eSklwhe+^QtPz2 zGOMg#KKR=;MAnWPIVw88Huz(pY#J{v}nNt+35 zW8QDhOc@p)+gwud=W7V~QC~1MwkCnXhez}lPy?LLa-e_?{52F&e?4AhDB&f;q-;{b zd-qk}L4{o%8ovfJc7hp5b&3gL+zONc_m}mY+l@)DXEo~eU?*)^W(OAxUFIuaH15cq5UCsShhUqU@GYg&~dWL)hMnLW60UKhi} zHzbil?D;vQ(vHph8X7#oU5vbTcz9nXzM140GT}`D(@g2Wg1lr)8gfc3EVtZJ^vIT} zt2`KNPWC(O7Q*onlaClq0`HW(JE?Ou)i2X#vq*Rty{LIFFJT}4To+5N#TQ`GP9WnCjH(dRGfs2&R96ojhID=CWoLOCJgT1xw& zp&geAO-QISXi^avxMZdAD*2sIrqCt6>`+`Q&k>sHKYwpE1z>E70GhVfmbOC-&V(OH zaxAf$gW+u5#h#~~it@kwLc`p`Qg_?*4CmDqLmhv5J}ip;5Y%3zfS<9sd-g3v5-!?S zH+ciUANfXhr-Jvxjd#{R4i|ca;$HrE7V7xMU2~OTy(1JXOT;z=(DKCM*$_Us5k96H z8WX}60Wx-3$c7##V?AH3c_CuFnujvVBQ!6aL_>^{uO6nAccv76tziN*umve6Hqt!K zy(`o(tx@%~rQbaJ(T#D}GzEp;XwjJkaSZ+qqq_LuL8mI_e{vK5_fbDBC!yX_l?RZ) zEmihY5ihk8H z#1ek!?jC_=@i4%Oi7jldCY$Dcyu3UG~B?)@;*|_G>zHL z(X-`g?a+SnI|p|z`u<14%$xreXs|)x)3G##xCIn{-&YODjLo)J`&zWhYG{HkDFBHur#+jIQe z{iIL##|4IP1=TPRnl}Tv@{I#~)L5y|0(=DuBTzRfrG~jp@XZekIxA*N`MofdH_SiC zdPTa+y=QJrX7fLnH~YbC0w^Eh<9vKp-X@Q?)WWaj{GF0Q)I-VYSsfM<}={emAWqt%Nj<7J)1OaN$uco-`Wsa?ailfG5+|ho{Jz*cvX-H<7ezUy zRxSF{p?lVb@+bftZo?()id>rVZxHw!CPs)z?*><>Td3qA@?-rs`h_*bBU?+5&BA_Y z)|rCV?nkg!qg=!SWEo|ib>L}Z8yR`kCyx$@qhBvEd|}Jc<(pFaFs&C_F3;K&s+#fT zyKT6tBmtV-!L`}4lB_HY=D!DJAR0HLR}I(PQ!^~zZndj-O#b}SHORj7Oz=zF0ERZD zEf^=j3OgO>w`CfQ@EI0(aleKC6ExGaV!`nrs^A8OQhMINkQ3+&x1;UDYP>($X~K#J$2BCm?46i%jGB)iR!89WPU6VY)iAf6&I0B( zvD-1`_@%Y(*P$QjUcWonPRHljZ@PRVb`jspuRd*|;O@cS9*7 zdA>A}<-z4HZPn-xeADdsnIw`OW$eV3W-mkn*;T-}y?pWhtrvN+d%oJGFWnw=b?MB1}YWJ%}FY^(aA{}^4kxp4}i#q9qMwgR1g*{9eN-rdqb;*YA+^+eE za9KfTSp&WV?QQ|O4nE*H6DL`Zpwhacapkj*du63N=dWLf3fy)divMaUXpB6mfWog6 z3yH9IFLI-&wu>5%0c`6e^i=?VfTSM z`+c!(^dxyr%nOty{R)rUv#liQL1_yiIuGIQwG3W+b*e#@S+pFMU-c}<63k_k`IkR- zNf}oE)GR`LBYB{QrpK#s>T{1(_OFl3A7X8#D(`qd9F2iLA{l~q$p297Ig*rNxfrwf zS(Ax|JvlgIwK}Ms`O;HLuC-JOs1dmo{J2Apl7J3pHH0ftlWY{K+QmM6)?_Zgh=~H6{t9%gI<^j?{@6^%W8tVD>0^%B4 zrzPeY%VVL89FFugiEM*=WSvJN)E8($9!Zymn)Cj7Ah3rRT=#9_54M3{e6sD{b$5#c zO`ag-afyT-p&8AOZIxy4@8j!L96m+JV_&_Ux3S$gyoD;*5Hh700Zd(KVFwN{Ibu! z$+dLcwBA{V+P~9T{fd65>NMsv%0Om6tEF62>n=D49AdPxu?ZDRY8I1ZlMQW}uVF&{ zQ#k?F@qe>l&r$u=44~z&#noK2pv$$$;U3?q8om+B6>(3^Z zwdOnWvdIgfRu>i`=HRc+(%~9dfkeN5s5m;f;g1n9Hmd1{)>1Drj(R)lrmFhy^53#+ zjGo?*IAP@y@}z;8k=bN0QjsWU)ZB)~7@WI!v~<&yB3svPDda0RNh3Y zMO>Q)5_HqGXC*%2kCp}BAzbdiM<=DL*D2OJX89zX#8O{YFtXJJki^G?{0Kqr{In+#Fj_2NoO@amp{%o4~&c z|9E*GVso`2!vRo^(~OqBn!HZe>*~t-CGu>L3i@N&z(D%pFIzBL!Z@OHS!jYH4zW=p zNF}uymjQlCn$}J(lwoJKFQS*bc)rfjW|p&Evsd;Wm}1Yu=rd86Q|LEO)e49OyCem7 z<-J_xQHk>&3+ahCg~8LA;{UME_#Yu&On1&owdXsoZ1a4@G^l7iouxkaGeM6OlsUjR zBSOpfNT@xq>g_*Ne9CHIjqcnf6{{%HbA75!<*RuVRoc_ciQ8MFA=AiJ6$FI^MGf<} zTofSb88o#mN{?omO%#hl0J;_O?hyT{nB{9&r-Y zvRIq%WQT50eo<#o}PJ6qZfF7|U;2>Ip`J@p785#F_^ApE^Iu#ku>`4QiOuT^0GB6&kqTShec) zWgr=c&1l09mTxP$^4EX}SbhnFSOc_2M?LqCi3q2=D#THHa zwk9N5tnW2)#YGwBIQb3U&>jJ``1fd3T5v>xLogeMx~Bl2;|`8~jVjUGE3TBEV9;o3 z`klewdxt3Ryzfg{{ee9D9f~0%2z*P(4f0Kb8Ch6uZUr9(k*Ekx-?c$3)V)>(2XE4F z)Uj<4<80}*P5-1aY3KOXx#J|5N^%F>r?mq>V%R^p#&1wZ-Tsg(VnrDYZG#mIl5|- z50>BVSzTwQ6w9;wYV?|zxZ_JgR|oIhEMLgZpnH|*_lGKzijcmtk&rT{fz@ip^Ft#8 zR|WzkmH8m9L>0w}fu3ibyRluLEVG|hj`CbpeT+7su{!#6g_ej!W?_F1?3(Z+g98{S zLLFf>HL_d7js07n>hH;Vv=y=pT<{rXcgEIqsWDRe)f!Sd)tJd*VA=+4LYr0x&+O60 zRJG)nDWSZ=N5c8uwc;K2@>Y(|LN5&-BUnTF`0o%9J*ddQ;Qc;C9WaY&96-y~TwQ<# zibRIiR_YLkC3%NlzVnbce3f<&V*BtcootIONB~(b|4{Wa#TfzHxNZ^M1{KbyoXMH{s`gcU&dN0AfVqSv6dP?FLr=R(GK9X?LK`>&dD`DUVi9 zTV=Q^{(S+Dn)A@gwQT{$5D6Fx7t)fIg@*R(OJZ1NmN)eTkuNW`slOA|G(9h#QsDB} zSl|t6J0O@l|-d>$)b94ewc}Wlm2@NSfQY_SZHX z46rs#P@~zC1Z_Kda7P_nfZr_3sB`f)KM!)sqX8o%BkQRrlo)Q{_3(Gx!pBUiQ>Imp zLhP{RDl+^J+}~LuCDBqZ%GbsDSzYjFGf4fpPH`7&2bK+d&KW#~XIsvN!Y#-_*YQ zbU+9{FQPp5=?nX!R}izOLPHtI7oMg_!Jt^PezmwsxbCd-y=os7#aZ2ir?uZwYqRecvI@Pe zN=LqH{_#vSU*arP+4&RsH9@UcAOgWQ+S8iC!L>Hqkg&uf@niz)bIl-Z?u~ust#Dnx zzoAMl+=tG|Y8Xerl0uh6h|nes7sNJX%LaR)nV9skbhKcVtN(RgR!pekzPY~+3Kn{| zFp7NBEzS?%<4vu^X&tV!sI1p?abm&I^V9`Z}m(c zXoo*O%K}O8&O|$cR5yx~Z1jD$ao7vyoYiN>BQ6~q>3`QiNKYq^?baV1>JY61FVFZB zsmm^)voOq7dz=iGI^aGu-{ZRRW_~@uh1GBIqceBE;Y^qnc^gOoSB432LZT-#<2@q2 zw(-jXspaN?#UBUnbu9@8la`OEKQ5-xzCm0VXmkx3Lyp1HiS_uEu3+Qtj=Ka@_dYF5 zU2Fw-tbBWCeMLVb?q>5Z{C*r;zba9~?>f3Y9mBaxZHKQQMi*dj6C$=-7#k^NgtBqoA5&Vp>J$44}NS^0)I(j+o-FQTL1!^(zAbU7{7tNpX!8$xSj8k za<8eP=QwbRilx1n%Q$M(Z}KEU*^meygWIo47~}F&>{my*VN$D0qcILBJTVWuMLk$* zEzau{%_5TJChhb}KA$=8+D7hKD8jK3D8{F(uJqZm!5J;FN_}QMCy&6CVRogKMPR^z3g0n^rs~ro@Y)%$Z zg?yRN%Nu22|JVCpaU#(3!+B3W2GH<5H^^zxk>v8s`5v9G-b*5bcjgL`dIprcAc?6P z7-Di^CX@>>qi*g;m8PGbM^M`o{|`|(+VEjdrtW<-ma>h()sK-8n3P66nI<+j9!tBy zqb1k31yQv}HR6_*eP=0_{aJTra!@JC?q7iF;Gzm~v%s^I`9c+nm;DeL*J=N%Z6EmDJr4%n#7kh#lY zr~!-DHPOc(e0?Sw_!vJmH9P3CvM3{2bX!^A#ZSuD!mHnQQEvQ8>5FXRBtRd6hknct z@DItHGDFgyLk7p3@r*D@K|d&u0*6bjVw8HWzh2Kqguqc=7nFv47cY{I-DlVwDuK1? z5hTN}6Rzgy`ih#mn@%h{(T&kJAh>K>ae94M zLtrJK#LGK&GSTDb-jX#_LI@iy1}o5`jbDi)n>l-z>sGp=KTpY?U0ZmV;2P}ib6tnW z{}u1WyCbtYx$eDdsM1+D`AW(k%PH69ZB(=8*Zdi3IBG3tai z<6n_tWxQdupkKDk!JVz7u<8wNs24MEHx!3e+ft4_0M4(9EVKQ_!9?+D^5Pb*8$8(%jWVD{2? zaRvJtc<^e?RanzT*Rsr*L<5S&ZDNOI0g}(3^9Q24mMrU@rWtV6=WOC#W#~bO{X|&4 ze2}-lJN}Clq7=kTEpHIdSy*_0>?@J zGA-d|W?Y$@>D{^Q7LVFemA#D3sE=K@>0}Mr%5VCLb4N&ynccZW)pM5fYFf5g*}E9= zYA28>;?=Z$L62X{k<)`$$h2h{S>`gQ8^Rx-Jahid;?8AaWCOY@T@?9;DmMh|pE61i zyVJ*r@S}Ye*A|BgY@XME^;FS^A0m@JGqvHuXsRS3SI0N!>4qK%*KXdW&818r>I=xS zQe@DH1^9~iriNi9NYuola6@})ZU^3^g5$XQ2c(tzYAr6ztNGxN3$Os&}z zPEI!H{Qc0VlipSz9zsxrpqgfPvk}EMPfrcN*lug>Py$_HkfV=y;<;;A-*z%DQroN$ za*5txQ`t<2!O()y#+d7rLGWd8K!87($t+tvC+UV@K1(fOm z;JYr~0OY^Gp6vN%cL<=jk*Y%98~!7J`3WpxCl$wLeSrdGVG8GrEJAH}1iNE z#547{h86H6U4z;8pz4yd@wfUpZSgsq9Lt{hyXrF%(vW${@eETfm!I`v?>3Zz>DZz} zf-D{HR5NW16&J7dQSfzWYs^EE&y&m2hOi_+h z79-p;BuFL7Rb+h6dWwfe3AaIVH|K7rncrygS&SFL-J08=2lvmO;-UoYq&LX8528*Z|kzvI;PdF-%asK)`}IdV!Mp zr^+?{#gc{YzD^^14gJ=4A7yHMJWM^&8K#2okyzwPL)F|z1;}c6zZh)61-Qz0d>Z5# zVA#j7?B4iu^i95-kgm|3Z#jl-3&{bS()L7HDh70~Tqe|N+p@yqGTyI-v+P{pIUcl5_6t+Q@Q*GPSDFl&UDKv1sInFrM#^NXrpbT9oJu7z$~xW;^p>N1@3$4G%4_8gGj zjg~ureYwQX-I&mBy6!4DRCeW{e{bI8I%)YN)D@Pqkp(%Q8uwxPVVcB^|lo#K8#QvMO@~tLC zoWiS%&lE`ZkHd!zX`a1@tDT#^n5$!5rMiIP)xEWGaF~+iv3#3*T~!3gtAgthP`mV4 zcLVH;Dc@Se{mSR@|Le43L-w>oF$uVySzCL~T4Bo@8oY&fmwK7W!>tOh9xXzY zx;5pF*Qvj4*BB4I!*wO#Mti~PKzEhcDx!P;3XJn{ zX28)f%amoG+&GQ7?(31gP#W{>WU9`Qi|19H0PtrnDtDHvw#x|O+gp6o!MV2blyQN& zthf#-xE)@*w}2L|5ANf>ShdUZi)f4CvoMab))9u}1;>nM@Z_EFs#(GCiP_Ab|SZLy;_ICnWE&AxD zyW*dnpOf}Uh4HV()VEvXJAn~@ErTmw!RbU7pdD098&c@Z373Cjq4F>ArIE+&G@#5U zi!U+B!*laGY*zK_@&^GM$}nhU2_|Z)Mett(5OzUlB{@&M0$O6;3Cceo6w*0hTbvtu z(7E`QiW}S3s&^Kj^>7B^Vm3jxC+ag{e@FGQxN1LLlx;2hoWYN=9XW5+a8RpX_VMe| z!Fs4_5WwV2(t~TCC6VP;ZRr3AXuuIAmv^yY4zB-oJFT(XVz6D<`*K-Nh7)x}M1-w3 zoB=R$#LHtiqu_L4l$FA8CT8Fv<- z3l?nWOkYp#fjGv2GMU9cASf4VlbbTril+LDBIcf@)~L$Ba6MqiA3M&nCI-RUCQofK z54pRL5L*(OrTVlsP2pFX_mAG>%ioj(2EtJ;qe&~&9ZDdL)PJBtjR`{JmkE$)FysK< z%04|T8E*m^Gy$-#bFBO>g5SCL7yfS`TkJi6JW-h-QbP#pL9ld4lMQmQ2F;iZ@6TH^ zEl({RlOmH62OGJvd86LswMC7nhdmUKX{ss>8Mkdn>2FPmLolie!p+9XQdOuJA3m|} zkut}kA|_#|sBL2>eCskTk64CO>VA^)kVBt26z?ESv_kW;H z-fza}_{{5mT4-YaW8wrN=Gc{a*8V`IekoS+BS4<;l&tifV3({Pq|-kBWvWW@)}!7{ zzUcl3uVKPj&=1s2Ed^YZVX#O_CCLJXn3x30Eh|`p)okoNpaiEKef<(kpWx%hxN&tR z@lg4V^;;rg1u8CxZ#-lzK#(FmtttpB?aP;&RiwX1AS27mUE8)oy%;RHi5c7u(2T2p(j<@OGD7y(SFJ!>H1<|m?w}j zZWu#h2iG=dX9zET7TvLQmQ-Tty5e>~Mk)P_vtL2p^6=Z>Rv0z5m4nd}&wazI?TOv$ zT>+l*lX~zwJejBxK&4^n-Mp<$f9lZf++n3}S6>C#^BQw4{1EExc+kL8u&0fY3Tvr} zRt7bGQItz~2TpyAA-!T;qiB~-W>Dqm6=3=)VjyoR*01K#*?Y1Yj_Dk*k6ll4Tt#sK zGON=wX~<>%Nw}?GfGnvvQGBfT@dSpe{x0w6rS>b{I|2e~j=^SF0dV5SL^c9~aoHW$ z$XXNP3;OO4U*6nnJpTN8`RQ0K)oQ(6^R~jzGMgF<2#m%q3rvz9t6nF+KnN_m%?v>q zJYC+o&Y)qJS3gYL(@RIC4dhi!vM~TX6gm<~k|_~&DTITpMKJ7TVq0DSyv=j|p?Zq% zUc9kI7`}*WX-z85ON{5Leb7mt_vzfJnT=(U6o5JeTx5=;sT-X$mBoEFGU^+KQGhP7=NG0 zY~xIlw9*AjUHqVvw=j{yR|_g&y{xfOubosQ-wP)XBu{U%|3=k|7_Tm8pX=h7JuNOT zFiCjUoTPhlohJD3;plU)?EZJz#D9_W!sjt5v9|d5ka5sQuu?)9Oy^{C^Imj0D6UR$ zDppTYmCpK}jYB4Gd};ffB7FXwAoo!o`znfA%}t>JI)5^-tPFB6VtieFYZ$72XN;sE z+5tEkCdrK7Hb(~1K?k0%I@4-i%zHQ$W#_&mlEXx;+y@H$WswvHz_9t6pouH| z5ohR=^Fb?gJsIP&#i85c08BgUBgX%qi!F!xrsP4a$aDH_1j~$!9tS! zjPxv$EyfG7?j~1i=iOgBhA(`@7cmf?c^3 zB~;!0rQ%l>b#cWhtczoE8{CgtgxS11_&x%DOQLK;gdB`+2AYWjka{{T4m3X`q+3>3 z$t2qDmSU8LBbHYolF9MA;fYF_pLr9xZ$LO2b8QgZdL?r%+4V4!HA@@AXKq(4_dA*b zTf(V^(*^vPKGRxr4Z4x5#!CzqScYo!$jYD9x zfA@K6vCpOYm!myY#%$Za{ws<+*+y5R3^8Ga8OVwUwElo5Un=fA+{kadNrxVzVez6) zY$SViP~Jnmqe*m~+T#4LFjQ9yI}Gm;km!RLel9`@W?AnsPNThKTSF|wdQe8lV5Q&u zOd(9?ofFx0iffk`ttHQm?=!g!%^--v+#2@k?7H)mDno`qtM0ZgVP<_5m+!_5@<;^*OKb4MxBpd#V zw}OGp>21%3gW)f>!!T5`_nR2%PT&b$(T+pgW|d(wEgou40I zq9XV@aw7aMs@O>%g3H|x%r=Hj;z0ohJRMrj?tB}^$>Eu+Th|94=}sDYE67%A3`lVL zd>0q=9=SgSaayHu&S%)`aJ}Y&EdBBURcK_-m@krrZ>fJ=T@hjEowbtQ%w;C4{9Aj& zhipf|BH3lNapf&K*Vv#5#}ol~ecxBDs#W}W$=N`8N}60gmPI1SF8d~JQ7x+;XHT67 z$ki3K%CmP2;c@O{p8)_l5bB-arjA(^Ygg}uH^@wZ>T5;TW74w^-4{jX<|xCxHThrZ z1OdwJx3}>v!SfSpqL>smr-jRh3p;H;;#?^+o74M9t>hhF6j8c9oYn)asV#SF8R^zTEoeiGFJGF~kGJ6kuGzN;s~B zKc85@05bvZ{p6$yml@oSypBh60^cVhR)>czcXfn@r4k)*V9~u8smVX4MfQTyj{ls$R3%GBXnN-!BoSya>Zc6JeHO1#AFEO4f`@bW2N-%BxC8Z}ytn{bb* z&dWbL$tHgt(C*|3LYZA9o{3~K_pE!)*Eq=b+t{6NAChtX4v5}VrX=56-9=(u&aB;S z*3lM`j#HK`jfYMFy$$|Ly2I>as&X$pL#`32ivryPyz3M;=aMw+g@cNo<(1rE{m` z6j8B&;MvQsIHT}p{gqjaW(0XA|MLT#bju%c^ikJICh{5+WuC*WpkMJ{z7d5B2o49P zZ4(Nv401os-YrANoZZq40%b+sirRzPeS+NbT%)JEoK~r~A@q_Ru)T`MTP@s)+=g1N zWnV;hIZPfWn9?nh{RoN^zczTe*=&#Ai{3oHks+HcaD zT7DelDeyA(N6@o?M@!||$|trIc~>c>{|*>uV_U9LnrX0ptlMBcoWz^dSBo5B-SyT*$zURksX+K5SP)Q*jGl$$W>BMq>~{#eCT z9zC>_ZBM5F*5;G9v($M~XItiQ*0LSkm*mYqE#rRI5^^>{u~=^{{*lQ+NjlMZRFoVsCJ{Y058aq0-A5QAm+SPycAG z2>EcPdxae+D+12dwdSXl!wWP3m|i_&eBfF6gb+;U5HaMQAo%iaS?q{_-YpX{Vd=Gt zl$b^$1lQ8DB0fu$E!hqj2QQ8Qyo8K>iREH#n zNg{CLad(RWezx=@i^&5&B&|^m)Ft?q*xP3w7`vn*2W8g$D~_6GDa&^FF@~x}KGoZHhSpg#+)uLSQaY4eD*ZzAja)^$CQ0zxWQ#( z0f*$dr~A(H9ASN?QFdQ=USHCCrW2%1`u1QuJ32m301Hm&kScLGsRhc?nTiVq&1bjA zHc-3?48yOqKMlQ?)2(csVv)D`SInIMsox0A24hW)7n|2Lv(MImiT8*>^+EG*8=)B~ z5!9`VKSpoxaYml?Qw#6=FHz5en_KoS9uG|#d#h%pTXLok4+n{)8;I37k$(a(|KNfytPyf? z=;!C)(JX8chN{pWTe6W% zD}-~bqF=Skb`AUqT9`jSR5B^6H9Qg@^hHc0LswTUef$;CjO=&>_%j#&-6P0xcaEH> zIvvhQ(XSx^Vmjkgq&-#vJP$Tg7-4mKw4JiESXKHR`B$gu2-bg7M*#P}=s)g#puqvn zhLCb>kq#dMvajTp?Qopno7tOZXLpl={OPZyFTH*eYxh)c!|VdrDCqNh$ALc}=JlX3 zP}stY%dOn~g>w(`s3J?#5g;0*%{lUz?ujk_E}_v)`q?Myo|Zt+;-JW|JB3^q*Kd8w z$Zz3B!N)Bz3OTYL=t8B3$UfZhkm(KB>T*r(ugl7!I7xiKOyibYUi2Qogyu(wF=3yS z93x{o#0#Bnw9IpOZD;%4*!IqyKVrK~bv7~!_*Z_T&I+65-p^6`9Otn<<<38&9)eOb zRv9f}XP?=%w3B*wL4bv)0F>QuW@^)2PJncuUML>#Y^fo1X_3B~3Fe=JAGEY*+wpm& zYDuv3QHKS^tQ&u3;QonbFF>!7!GyKzfMV8q++%;YaZ$omp*5PpY6cVVD$1hQK>q3X zJWa}GruQ(zwXSeAipnn^fL@da_?x1bHgo%=-{8~Nx?XpvbSTAzMRloy`kg2ea4QvP zM2rfgciHzdV8CsJ<1ovf7}{5LeIYsWVKmOYOse-;O4e{1?}V@C$~*7!wj`M~E@E3WB57r*C~wuj`$XmGRv*uN%gty&}fRh9`37xD&3A_pzOwQ9f#Hla z^9qsg)&qjWHL2gg9SQmkVWSorm$6A*X$W*Xk2R8^Fh5(OTCI4-<>GhyH64)v+n@29 zVU(~u)cRPT=Oy@~$;Huc?h4jmrY+A@y@SGJ(s5@=X=ChqxceJ_YOvM}G@2+;NKi6- zBCk0isi3a-WW!qh#=I1oao2KA2qZUbAjX?+@SZ6ZF5%6XbtXp|$sR2d(n6n0^fhO3 zm-Ln~Yx5+`2?UBoJ@8koSkkA62)39{3Gw8`YMwAlPDab>j#B7@zAUJ&F~56AhoIRC z$O90uFT)skjAOJ8vzc~3?mcjaH;;Zl3}0;g{@s@PO060YOwcE&y}LUaT!2C5F9yy2 z=N!QSZ|PYj9Z8mzA0k-C$re;;L1={S@~v6YuK&`f zfd@8PYlz=Up7SxJ0UpRX)oEu%EnqnhoH+--Xg#(x#u1|$F><4hDwo#gjAmYH(1jTTt6yi%a zoaPS*Ib!<<~W;CoJN8`0tcLFLK1520UEyr>!K zeBaSNh2`(bS2^c1Yw&LYx8lZhb0r4Kxq4geCc^%D>LWGA28|E(f@t?!2bAEq#E(a3 zLl`16&ITF@X$b9)axa^kgB|o_kK{)kM@`x2HpSx)53lxDd(AUq?@H^;yG1O{E0NQH zbz!dPfhaZZHrTfg#bTh`n8znQbC@xI&^v<%tX6JCX*?jXo?$MHh&Uy!KJtsNY|t@2xlz=2^WsPZ8q%E)5o-q5pX^=flPnUgr2`p=SWHiE&OjRmdX^!2Sq72732_)@-_Eo) zAFp1x$p@KkAdm5eqQ&-;sU*H>(t;>JUZ8(yFZ}1W)aCosnWPEGp|L{B882M?52%7F z-=@UI^2`Vw#DKR!8Yb=~haD~q4rIjH7@o5k6gd<-0R3cPXeLD1TL z`Qa|-)!)=`MWBv7)BXdRh&Nu~A?eA4{{i74GNiZ1caA@q-kxk~YJQ^IGjs0l!Lm>0 zPdg~|meIs)iE-9+@Y&#=LHSm808;VgES|lke)|OM+K`T6ORFxO+y2q7uL`zHmqtg% zJo}an!mZ9Hm^Peo^y!mksm`GMuI^r)PlpA@QXe~RP|_bQbVS}ub%D?krD_(}wpC90 zk$dj4pL@PKOIOQe0g_w|()907SSVILsiMbrzoJ8acQ}UtsHd1t@U%bBxntYO!e^=E zCN(Y9&wrJL`OMkYM&?VUP=AQDS@lPM5;~penb|a~|JYQUDZVF|xy&V1oN{j3U;K;< z@-mTm@iP7Iuie}n@t$E2xaXwb0e@MvqNRU=l#v^cLG<>%B-p4io@=^T;5Cc3+HJD% z@s^t&&H&yH26*nWQ|0t-_E|-@;5<>mC3}O>%H~|7MP;|fFRqJ7QZ1KI)mjTiH~4v@Xf7J6-@6m6D*a8 zdt$ZSjAzz!_f+r@N!DMdYkI=>Fe99jjq+*yt=3I&qY^P03Uo<#!=UH#JFmOgyS}e= zQvLzW{;2x{DxH^@@#kZ`H~phFo76Ldf1-_mulps|in zz@O$_?4lBtSy9TzxMES?VcnYeQ&^TE^SRxH@TGdHEghFF4XOqJ56gr1#P;WY$n`Xy z^m7m33Dw*qhY@q0C*B~od+EydgZe@^;x(w?H*uZyr(Lmd8uW;#S!ki*i1wWbXM5V~ z1@o`7C~DnaEVS8S`&0Nv-+Hwf#V^uPA*{Q*5_CWNA6J(0bYzAD?7JYL_q_y+u{I6QZqa2V*&3`Li{ z6vg_5u^?!-QqcNSLQY0yx7;3Tdw{fBo^ow+{v09m9o3M1jPl2o;lrHl4Km=y6$P@j zPdS~elJ)rdWOfe%FQmkV$!ul$3c2D}@a6aQf zvcXhu;rOOx-xTGWO%{CgPki@!Y3CklIhY?4uJL5b&PcC&MPO$4vC(@#AA--%Fjv~| z$IU_`y}K>h`h#ngkGp-e8F|uGW*h$sq|5|$0F{0mLwdDrQDKaBXWzVAH|a1TDLPqY z7vXBC*Q^`8jJAi_C1Sg=Ti?qW<7-~yp0^67lC{MJU+_kdRUsnym0Af=*apoR zMYc!BNYScer~5d@0*XcsZ~R$9-_C(g@2)7q~?g3CBEbMoPSE3f&5w&)jm^L zv38yTUzU^+i)XMf#`U*&mlwYj*5jR(Qg7(=j=F)Q;>6xMRz^PkZ{z^JHsS=uH5p!4 zub&!1z?O2nY$d{6vR_iFtyVxbRI_QKPo2sHI=uPbaTH3gacyOrpS-pan}mN|Pgutw zLLmbJ^Xp-V}`3SKCwOUVi3K-8Ienr6wSj*k;n#9|R$S zu3i1|?24B!5PBF94p6$)k#)mWFi{;#s;qz#kY-(tty8=1H5-|umIKlEqR)Cg1q|CD!K7tkV*Fb6@TydP zsVTQ+(`}B3chdMZ*|zxkus?Fp>Oy=n22Iwg7cJ)n&83c1vwRFh(k5u&a6dV=U#aXl(=7j2jFfFRtOuj;l^bal)+Z-O?HZu##L;u$j(xg zl^~vXtEGNXBp&q%tELXucT38N3oulH&YF}GI>C!@R)WqN6Wb%#Bn$xeBB zsVm)C>*W3W<##BPWVm{Mf$eQxTC@;QYh|c|SgZ6MelZ~9CTfLU()DPPlH=NN8qlAA zYhd>W^mHS%vOt4lJS9d1`+Gu?F;cX_vNHp3cP61Z^srFY*7;U(#K&&RL=%c1dn$9V zlr3rp}TBls|j7USOA8EL;DRbhh=b3bx+B&JzxY`B4+zDsx0+1)0!2DB3#e+JS zt6n530ZnME=7|#y*vLswyx#t;^AJuY`?4)b|%$fqLegLf8>{8Kl%Mk z#iQZE4Q85w{chvedjq_FrPLXuagr341laMJf7`><j$q)H!) zeLdvjxA4+R)Z9Z|MamF-*U$3jE7!{Uq*$$A_#QiNB0AH@!?*}~sPqNH5`wMX!xSIbD_=FcFvu{yIklMU3l}g;!-bt%H*pQ8~FHIpg2SQ&QOb98@{s}DfXq>_6+Ma)%L<~=)Q=Qustk3>qQ4CBdgcbt|UF-RJl%H zRVEPmEz%~mENnENwlP1T*FZ64~MvpY%2ddXarOL`Ea(f8!i--9y*F z^R_0_jVBLbKqedy%wRlk8ta{jT%nJ+Nl8t~uWA7#m=|E!SyNiXg_Y?R=6TAZkl|>>YP03+92I}5@9IJH}{YX)(6W}GQHIB46 zt8FFod#D;;dav*h?;SZN#Zy%sP}nV^!TBrWD8HWxtK6io3;k(j{W+yGBu-e>%5T`& z2wpWsJ)GhlFit-f_9fAbdtzsMpp6fc0HLDzSC6}^=awGXzzqAW4Ch_wbKrBsCjApy z@|FF?=+r2{&Imk(;3Sj|d?vBX0Aklewc86uuV-gjqbuIk|2An5MbBjVLF-6O&F+2gYw;1;?)`?nIw-b+E7?!?dg=9cmcWk7T)fDOY|2i!Ln|-<{d8nc;V1<;adN?K6d{V zj@l@ybXturQq{80YhociJ;n*$HV?W#SV@@cs1M*ch)A3lqCE@cN$D308vAYZOF zLt;Bv(V|$T#9vQTF=Z%tBFwip$f4<^@gopw?5Aw9%*|b%6H7C$e9PPqx1Bl4$^QtI&NQ=;USH+El9w%&kKMTIyJs% z(JP)`G<2m%i;!!%O?G_Yo}Lxx*myAo-`0L!CL=^(#tJPQ^!1bcNz+q}eZzq+FPZ6$ zQq@xD95ZTToVu?WK(t6b;JSdQGb!hW9qyST+e)JG)Y>7EpGI3MQBAhxCBLztVJn6A zgK*I1(PnQ~%WxPqc4QM!R{$I+wgH6WFV&2BjhbqFwZm3$<6dsrtEqMwZ2jz)tn4Oy z!3U#?Wt*kPJEnI%L^`s~gYrxQIUL1A<2FS$70Aw2#-XqBv3JK7UHcB<#*>|FuyyM; z992w}a9{EAjvSX`ed}%My5C7h3LYQK#Km0Q7Q?L}Ret|sVg1J+iI`SzlyZ8vplg^}oWEPd=N*Rf6Z*K=?6~6IM@jUf|E+ z3@TZ8GMCQAeA#Ds_|}V^5c=$$pGTV{I;r)P-Ta6ZT5OfiZ=au5lQt^JNVZ0i>!+R{ zV@c%UqWL5`S!|O-+H)*4p*U9d;%?@LM~)GC@4SDF$dkZ|*a6bZ6m~$&`9>Eppi5xu zJ=5$M0X~ZYpR%Y~{{g`l{(t~DCi)0UkJ!@3d7d8une>1wrVHrb)aemLRj8uY!STTx z11~znYM$sh7dU6mtOT@R#2<&p*^_NmJ$i0&A&8pi-p(1dDS_)ukO=7{F+OsS_vLx0nlgkaq{rJE#QhSw}?%k#fUlQd1d?Ev+8>AixCDGX#Eu{@8 zn~GwmPZHg%PEY~d#H1@(RdVmttCWn6x_yevWrrT6-+Ga{fq)R**OEfeUGYsa46uB| zkK_K!Dy9t6854W3MdY`Li-Io%A})$ta-ukn{QDR5=@s4?NCcvZ3g@LAk4cv&o=(Hn zF}g`V01B~Ck`AUY6Cu7Ha3MqMc^Ne*EtL^M{d20zzKfSB8X&ScqEeU*l+xTCYZlH+ z@2w_tA|f1Y)n9(G}DJ6aeQm+@=p{>+= zz&TRoVk2KSDdlNDyPx>a9aF-Cz!Unoai`~%Vn8OSG?0$@+v!e@d#7SWI3@^`J4@7Cb! z!10||ft|BgzGykEFL8K(;k6GZx{d=>nU|dq#JJ>a*TDh;XGZoFnBtkjfeT#tX?=_+ zjzkdlz}P83nR*KeI|3v_T~|q}Pb9)n5dL(tq)txP1mW+6mo=^Vyp(+7ubfARsaxNk zFvOxB$18qsF9c~6H-UVie}6x;7(lKXKo@xWfQDjYK0nay%DXb9X6Rq6SiKR|U+pu? zL4FfHopCqWus&KJm+sw_Xt4>6@3I|B;=hR9FF?9>F*fDO>rGwix_XNP+JoqF+8ip-vG~(z<8~Y*ayU*#I=s%!Ar;Gst6M8ickUx%> zqV7>)EWoHge<&xFmrG%Er8}_>s3SOs19%~%K?t`R-5LsTVnBC( zD&3;t%Cv5EuYamFy`gE?TQvQd?YnIMk$!pnlR2PrNjKO6A$KIq(ueru_KghQ8{K>s z(CS)PD0s=Vqt)Za`pq%UQP5`GCfOk9m#htJ6?aPwGH2|)gqDJ?CDHT;dk$!V&hT9vU2AFl ze_2F$;tN{86=%6=2#rg-r$Y{mm<^`RZ|N!haK%TziTL}%|KFZ7-8_Had2vJ{rWd*S{PD%>f`{) z?aJSOK<}CAA?VUB`>|8SE@JB@5OV(Zl(3S^>!}bQTe2Mc@FAB-UN|iXU^#NT;vfG3 z6#?7z*E|Ha=x@)F66a-bS>Ut4K%yfu$+25qIB$jUv=L)*34U3tr&f~Bb-mx7c>uiJ z8-lf*Pd472l>(Gl#R#_OvDgVC?Vh}AQ_sfpRs}x2K9LrR-(Si<_R$kAV$nFQ6t;g9 zPZeT8RG8fb0+4RYA5fMW5LNa5egJw67{DpzGZDQpV7i?PKo9Hol!wA%L@s^m(0H?Y zeQ9ku^9dMWx4W&*FQPZ&{Z?53x|B<(y!E6#>%x-(jHP9v*Tq5lV*avn)5;KxDkqK?@f@yRxt| zahnCo;&Kuk`&`48o2~hNXafZ^2_N!}dcN^59MS_DYa9w6F{uH}H=YAgiD1#Ua)mT~ zMC>By_ytUF92mbq&5xUGV@a1?(B!aCzWALSha`%oD)&k3mZpt*bwmX&$WshP~Oy zI;6)tmbA#ZXO?f)&<~SoKC5{Gm%)9EiLlz&ru)JZyN(IS(J1lBtO%?iSm{eWll0=Y zq`yZ8sQ)IBZMS*3o$~!l*Os%roqaL9IjZm<)_3BVo zpoyXZ3}-e78Gk@tW9K)lOelad56^yHw})^AgO+n|E%3?rFMzZ7s~wq`@9^?vU5YTc zxcG=oBtw`>paNnvi?JZGxLS2iLR>3(44?d1d@z3CzTcCl*7Wc-@aYsu5S8=W03h9R z3y^BJ6^rrgpuKkD1QTY&|l#zI`Q6QfwDD7^MnO(~X~kU(9DUhCunQVI)PAh0`c zBM5Dfe>y_`|73aiaL)p9i3;Y6;ZImIGVTpv*N~p6UioP};qc0>g}I_zVo@aevk3d# znbyJ_7WwxT)`7skCQM^d_)M&ibK5`qzgHm58acy0e~ zxYtF&h+6W2Em1Zc2a&Z1KZ0W#_^6mq1{*M*Qe|54{#tRso+68$J^0K$3`J(%yO!u~QvXmfu|t!5ZiY3yYY5a?zv081v8@SEwcGr_JZw@fzknDx2zC6g{rnOml{7(J{CX%*KB8 zx&Tu+oVC;l^CXB%%Mu-K|4dk&^AOcmluSd_>4|KGtYvhHW1}{cNJ4N4TvB&aJt3hW z_Zr7h2lD3UG^+~;bfCdIWW`;7fy?q+;Q3X2H8yZh5U1J?X7x{roZ;3j!U9TyDkFK- z=S^w{^j-xtp1c>#uXbz84%%ECmGimYDM}QE)vstN_! zXQN+qdF|GzUc7-&b}GZ=2|v%S6Yotx(0b11ZH}m`9DTuo(biAe(r+5D^2C|A1*N$? ze6Bf^zFuav7A8d)02*cy(LiHf8rPhQ*1;lsyP`62#v%srS$Dv^?B3yFTTDQLT}tK` zPPJEp19f3vPGfdY-V><_t2myXJbGMaB$_Ui?^lwIk;kbx&wY!e1nb3TgDh}d&7))o zW4Io6Q=6cOwZ`ic%5ae=n@c$83n?`{^jS59Q9@tV)}c$O)8I=KcinHRyUzwkrvpIc zUqHm163PmI@H;4!9&eXF5!j93PKg6wgtK9)7xOL0t7VEem4gJ$y+Tne5Zc|!@2dpS z)g<7qls!*@%ex)^p5!I2aP?OP=ZmjL860BiF1BXnSs|L)#$A*JH#e?QJ-Y(g8E2BfI*{)C5B zg!Nw4lBT-*sg}K;4FkP4nS0*u8=Hl9eG?t#LoO%A**;8kf)UvtoeY9WiJn?jXk?cDZ@QCJQN z+GxD%9#}+3cZXVF_wtIrTe>XVtK-Ax!-j6^$`0aMIUypExy9j{Bk&_q;+SqkGzZU3i^H zMcZX5Z(eti?!cKw)9E@cA73<1qJb68 zYEP+gtRtC6ydAO%f1`Hw1ZBa_e`571D)bI z0~#tgaGW$9Pm--k>y(JhNrIt-zVAUM5_(=fdB)lUAy>QcPRD*t!d)lTHqO(d#^cRe za8+8~+s${!ND5FLi2l`Qa=_c8!{ST{pFBlWd2{}3`Iut0(DGM8t0p2urDK2-GJGnsO`w0jA zyReHAXeNRfxSuHosD9nUq^)3^y)$_nh)Yi6&Ug+B^TV&1LV%v=&Uh?^4~y~`f5sC0 zGNGaz&hSkQ_~)5Ob73qEScfbhJJOIbje)R&r);MEkzJ$XSB@}4@4V}v9L!pC-21(wG{f+o8ohp%cK!>KPcq#%C+>PkfLB|t!U z75^UF8HLU1KYckn+vZVFXk!rM)_`_QmXjLQ(yTa{^(hC7e^FQJdt$tnTfK^U61cWG z@QE5_BZ`fQnd|}jFP=`bO6=LW>Cvhs#tm&*l85XUE~-vNl**<$){?%O+pyqbb{Eey z;VM{}-btKr53`kxbds}r#*&hi;-`_0pY-&z%vVUZgL5~cEtGlcpgDkc2ooS+f`*c& z!1Vs5Y0sn80~S_-c-KVaA+LnNh5G%S2j@v)Qbhjqckl-|F)KjT+LIAhy51i>ghAA9 z%?5nEjH4M27kDX2M$%Wi*@K|{${l= zSZ-9-kMzns8^|7)xKz@!|5=27UGao^PpX7qydJX)Op<6gJ|D1-Ib&zhMT=VHaEa%zNh)Er->G99k>9NoZicHmM4j-}$c0?e5{RIo zqyzgtfaXE5#$Ag%y((k9hJfU|WaBJc^VH;yLJIQ^H#`-p=YDBupuE?RbI{}i@2ev= z6KlcBUpG=O0CPnyHIFWaFc#QYpMAJHhhBRZaM@S~SmlsYwG_CTo=zhmc`k&lk}e(0 zo%GIpk$L4^v%KIedtF(~uh0UV=rySEa*~Ff!)F>Hl z0>EX*g|$9IpF^KSbSvak1F>0O*m-z7s5;90IX1O8X%Y5?6FGKAoSu}^323lShJoQK zvv6BKqaV2?bB2iK`4>uLX7z>qQSZ=tZnemKxbqn`%o86q{_peBPPEMnNJ z-(P0_lr$T+>Hk(w=k;-_m$FZ=g(7+^B3o})0zFv?V?5o0LtZ_IHfG++t`r$gkkBLh z6cJh})Cg^NNP3%=26m}DT)p33arh$-6Q#g@ zT`j84fWq9k)}O%M!jY7M>RJdvXSP9y;-!36RszNLQSw1@`DYkitPz%J9GDsYRQE+S*16&+aeo@vn_+d@q$8~I zH70Kmx-YFr=9wd&?$gdqdYpBIxiV;G6IYsCh)rc$4ir+p*Xl$C(kVp{H$|V1)hI zt30EeTP(l7wrwt|R1E z!X)&kHH4R(+3}}YF-@T^KV}U>iXZYjXUa;1fXT+3jF7VRCAHN~)j3<;^Z3w&fE7gPf;_2#y!W$nh`pcdzaL^5lgk+!6%;G{L~yh>m3T(`zWOIBO-4+GKE@}c6V9%jlH9e-@@`JagqT?iqV zd{($FZs29FibMN{r5y{E{oKmK%_L#!{XstVAU@cNppIcg#BTc%HjVIHQ0@l5D|lrAMK ztKONBk(8==*g{hn?|9oQWW$X2Y?Arw?61JHn=lR%TmENg42i>uSn+F_Wr8P)0^D`@ zdf59w(3dc~2H8DW)50mOw}itbale~SOIw^T^rYo41%0rGL{LGZ5PFUONwXCIoB-|9 z|9G$+>Jcwz;ccb>CTpa5Rvve=Ql1R9al&S9;VMtfnm;*=^}L=%>A_MzM_lArV~Y`lxV;{lFk(csms7|S#1 zMH)v|1skKP>%1Qyj^4FyWBiC*l1Tuj(qrAL$yo>Ggs#tcrR;|Dy?f)|8(Mw8aip`G zUZDnS?0g0k-atT4;z^ZWr87TSW7|}r7w)mk(bv!o<_Oy2;lX0&)NbFrb6~k62_l=j zMU@2F0TV(KrkzIN=koJmOQ(Q9T5~O@VWcQZeESDm;uWueO8#V;b8bKu?|%mX{bfDX zu0@!{DVco(BnR$rPUD}4*NAS_aRBMS$C$X3Vy7sf|U%@$*gpn_>X z#$DJX20P!7UmY3M&@XcI95+HJSanu<*X+!;Wvu_s3VijcckFyKKyu*dN>`E00=qFi z3ai~evaZ@*386vQ4=Y;KDZkxo#^_Hb*Rf?@UYoE^|>gVs&xQ$L-cH(#~`-CVZcy;IuJt4)gwwH z<^oBv)CmY|pzj~hmnky9)`rMNJi8*FA3H4OY<*aLu7kC>0YsFZYfZoUC_nedx1SL z!pfk4@YZGo@B*6++}zc)g768CHcVTe>`luHQ;VJ`yv!tPXiq!j7(gz#V!(T1NbL&P z=93V@UcKb6MZZh)3lvj&ELbMZM;oyeB5M}o5G?R_pRJw>@B?Fl?qwkL6MFzubNP5a zpdn0#Star<{Q({NgW!5Pp};Hu=@;OCe!nU6J{YTm_SpF}cQ@;j3w!h%%4;Z=;Ai-v!dbTA0tfx&s#Fg(hOK+@ z{Tp{v-2p0@WsPF^cl7ucJH{6!aT#wIyW=P(TA4tIZuKxS_{|xiX}<%I zwaseJA_ky=XaByG{8CS%-i}{OA~ocjJkSsn>Dn!;a^|ic>xZ(=eJNWsaKeZ2H-9v$ zzbi73;~zO_RP-E-VcdLgf-tUNW>=(rf35s8=qZ`ue|Em@pvG4>5ymiIp-eDgv>fWa z_0PjE{4MK2Vm!aB?LldmE$Qu2S=h2lWiv!n&WG!)3O_g-9Z;0iPbf} zGR*KD3e9tjBLliiu3V?gP(6zg;5Iu$MxU&b<*lR5GcfAHJ#sE5RLW}i#+y)g*ky$U zllAy*bgAwIQmu0$Oa46!2T6Vo1WHE(gflWcxGY*>orMrTYB%*O;B9k3YvT2}fm**H zRTL_Bu9?MWeoDYPFKNwK|-*OMAj@k9IJuk zFLMP*3_Ks-DA-zb&}w@I0Ep5Y&Iz{8Z-DOj8NRcEpwo#BGV zrHYO`ovTOX!f(d8rj%}tb^m4vt2GsfP<676=A5}&bU%(8#AZeh0&QK;_|IOPu)sY_ zZyW%tLa8W4YcM^sw%*YYYIEh&?o;9rgw(p@zmL|fOZHNe#az<_vD*tTIlccM?7e4P z6WzKu9HdGSY0^RI9i>V~x#Bob%iJKIiPS_fy{w=L2Dw43m|awPvmBy8eZh?=q{?A&)9_l#4oqSL4`M{P~53 zcLg*8_p@#0;F@l-){oc8e#JVhDi(Fz)_-W+BJ;39oqLC9W=!5>8xum3xa)bNoVh$( zaX~=o^7~u5OgHXce|pD(M|Yg+6?3wbG)6WQ3=BS}V1u%yVbs9AXacl8=>1_;Nu4&2 zLXp`k-n-n;&*HHs%bs(ul-&uOROoR+=pXd=Fa;QPlpFO691lA_LrCIThXKzH$VN@c z3hNw^>zxl7(1c;7Xr!MfoMlTjds=l=ej#ok73eUuo9C^Dqw{0SCu0hIppa@H~KPP!uMyh3e1^@;(9z6S45#>7`*8guuIv=bzrRBbg68+lT0R9YWkSLA&>uxiNbyb4<%0|O2l+6kR@2@7^T z1XA>k(gM6IAbuLeskrfTY|dh$aGK9$F!IJa;yuxfZ$)*OTCLIEcO*DGmlY1=@$xLE z+B9J=Qo!@p-Q}G11BdI0j~j)Hf`13@GI?vubJ;F^Iq!Ir3DOdx7JOxYE}*%YO$ zwzYjEL;vnsCVyHcd0cCC>STN`)6G}+h|!NQbyyqJ7DBK$i-sMM5aWio|2SNv>8oZ zF$w;V*U+>-ic<}?&NBn#QpY1#@64L3&um7B;!Go^ppLQcSCHZoo8%;}zCWI(kx+v| zEzK@8Jdu^pF+0eIUm9ns*hk$P4SrC4pp{r!I&>5zpwjMkrT&f2{^SqYt| z-x(Hr*?l#PS?P%g{r(#w_5i>*Sj}$jf=N{zw%*@^2WG>!VHlO)L7yINzzNhYYTb$B zxw41X3=lz4$XuL3YxA-3EIpd5su(=?ZiJtMEUaGU0DOQ#cCX6t1UqkaCG%R*IeK^3c*ooMg4@i`~7}4}c)1HWPWp!VW{bEw#@YRIjrRJQ2W)-;~ zKj`Yu=h}hPRcB9U-C3-v$O<&x9_=m(*mNA900?QfZ2Pp+j@D0%2^Cw7RjXvQm8af+vZr09?+!E(dMe+osA5$j{fI^&JUufgJu)7=A zYH*^^qj58!r-$epBvZjur!|7Yf^ITDOypTnqFDePmAne{_KmK2QuM8^pg z(Ugx(wV+Yz@uzjggfQ%(-UDKJmbHZQD8I#bgNJh;aO$D+zk{elZwE`x1WO{S7h1c) z*L;IYpF!~&MY5&MulS<($~PB&n}13PfFjPe)j5su^vndq#zR71>-Z%*Y3P(WQX5Zq ztkuzaS=0d9mN2go4C*C2XxM^>`etS z4<5siap&f$JYFSwCh@;6+}OTNjMN3IGSF9FRq<^&af2T#TMxh*VSSPe8ceIXcBrbv zquSpva!YOfPw0y+iQRa4Z~39Lv}I?Z@|Z((UU=@@Qa^z^!7RdJ%Kod)XwGndkLXR7 z`So}$rhBK=7MJh&>#<8H0k{@A;cX?i?vxwvn<=)u`ss-6J$o z$LfJUn%A86`k9>EqBrNPznbDd3pQ+(>A*}h#K7oYW`>r()VBg#5BOev_QrTdY750v zZJq;_Q_A7S_)kpKE!kRO%}9rmE7>daPgL%am?vP(yKQeZU*_z!g%m^2`i!wrr7SooDsK4R4e`j8^NL z1Gqru8){VGs#2bpclu!7&z_2@b3LwUv$(&NJhJtfv#Zp1iqKZ&t{qu!VCw}>`~JCa z$jb1c6F+33ukkQnwJg7_97!9)hm!pEy>OyI_*7i)V39^tw?m%GilAx@dJdgm;2wH&c@lFYuZ<&f^QFBq%*TOGYM$z8!l^^JN=Ope9{ zpGQp!kvrL1)sgLaLE(3NAuz%fYwZc(b?@B1{Eq!59kXYNW=0fH9S@k7_<7JJvT zkq!3L_cPmDLj~*N5Yh9B$tA-3`~ER;m#G0+=BtwSd_ks6Kk^zPnm%K_*U6)OIRyy2 z`ZKq1l4<_-(i$QT2TV#fz%nw?BamKH8u5fcI;;H5Em#G)b_22)-sWY1;WT>Ok-jqR z)@{j8#LnKu`pZLGZ*sQ&oK_&-ROD;Wz{-MxIM2%0$KW`vtrL?yCwW5q zT2*XDW_T$_kwC$F$Hq!;QlC{?>#CUv#d^{}WuQd-zC_B4gT9rI_eTc!atczcyo1IB zbHv07-bP4V=$XWIcIN}LSxP8ri|7`hY|P$*#UX;KId*M@&`gQ5ZUH&AgU);pX`tJNYYuGg%G+!=#(@asEr&!0+t4h?agEl?c zN3XKCvQ=92KUA`{sGRo9I-90*#c7HpraqH(NPUviw39zuc+&LSTnW%K(*T^$Rhc}} z;Uee2fw*8z?{YD;=;{vJ$z)%^9fhM2&0c$pc;10~@sOm;q7I(jeFUH+v8_ry!#539 zuVcO#t0wBXuS>>mF$e(Y63*rmT4D&RBAbtrB}}xrxJBaSnW*J%6iu%h+$}0I-&t(c zby;$<+Pk2PMjghe^3GN$3!@x@Yz&X)Ts8Wv#M^%)8Vb1)9s& z>-}V~^{4lQ24d@oUoE8)qt_6E3Bj`KG-emOy`8it<5Aa*D5BYIOb#|yT$eofXS#Qj z)dv(X)eiy2M>5tF035@CP>Ewl4e!@V`=*oZcaZbpLdgcz3f8ELi*MrK00USxSvx&k z>*M2kD%Lur^L}vbF=h-h4RaY^>OtmpCoDn+Y#C71@oKerwc;l|oJDyU&Dd3|hBia3 z^P3K8(szF3))TFRQBz>b&R>gv3Dk15e+R`+0>*&+sB%JFbvGERFaz*JLb!3Xgk^4y z4(ZT|K*#VlW2AJYleuCDzSGV|pr8I|0K(g^p?#(4TA62VAV)NC2g7H9tQt9h`Su4A zqH(oAe$onrf?=H`!@(!6e~I443jT%O@~1D`jwCPxHpAS6*Q-EUv0Dy^6_Z~6!zYA9 zVe8O#U7@NIl`eqWeadernmu_Q#~GQ?`v(F12@qmBOPdUmG#8|r&=$!Su#UyrfKd-& z7vz6raw(Q137XZa*zw}fg}i#MaJvF1&;nZt_{p$nUgJG?;D{NsF8;;ut+%`1;wySc zl14$HKm>YM=9kRcd@G{m8^8i~+wy*$?%$T391@891=va*onYPj$*2`MczxPF_}rZ#+#fHcEPZD3t?vVIe) zJi*Mf^s7`&wfe(J?mk%?sfBZ+4e*xir}68VmzveNoefY_|XJql>G^1PEW zzK~l6GHC8n{sGT1zy&*dhmHqUclV>nBUQ&?)w)%(gq{ZdHL7vR@BLS)mA@=CCs4&p zgTb(#j9_Mf*~D%O5CnvPdmJf&l_W&V0Xgee52sjBdHZ2F%T)qgReAz{F9Z=oOWl!C za{1b>K6PX&ZtvVtqy*GN6)zQ_P)%Gtmw@#;1hCz|3LtA(QW|d5<{FSgn$&`KqA1y( z100;^)zMs{6EJ&#S~+il2V+$bOFFJ4blbVS^=XIeWIrFhv-D+oEvUfVYD=*@vk4vF zaEx}iYz*bxsYb&PjAs*A2Lj6}B*>C1!!7*#od=!nVlUjv-#rfQ^f`VHLkxFN0ZH#T z0MWoG^S9s2>DpE~-T~W=6kU7ErO=dxjQob1x1Xp^+V{Z;r*GKH9Z>#e_<3FF8j;9y zQrGsA!@U}`b>D^d-ZtuJ2#z%B3gKC#;UbCdv93$2c1@L}8!H`|kvh{_G1LO|L*xzPV+=T}s=Z12_xNxC2u zF}=xYw6=!Q9Y2>5S0eN zbJ$ZX)^gea0aDCP{&o^Al>fJBt-tQR55J-?83ED;s#%W8U#DZ9}B1R&hQ501%zk}3+Xz^r5040RZhMDjR z!;PiRLs+FgBm?7lS|l%t_S8_UYTXF{xdD7ZJP%u!f`vO9tFzW%9kru1eWogmXCln3 zUy#sEghfyNskrsmg|2^eTT~W*r$DDKOSi_sF4>@#-e}Y6@qg787%KW#=Lz{2U;qGu z8~`7NX%hB}7RZ~t`c7af{oiphNQ1-`rw!tgr{>rn+cj6*c}sG!Zu+lF|37{=8^v=| zKLb1or_E7IEj_+c?_9P*lMEw;jB0Qt3vvEFkB3Bb`}W4N<#?*-+wL&h6p>|yLLMC} zZ7>hGb8hF+R;n`XU_?LK{K~k>**mxULvQ;Awa|S8^eKDb<=(AR@fE1NIXYoKs|u>G z33tgiqQSaUEOr#JJzZ|PPi431|B%@kKme_Ph<5=ccp#OEXGT9&Ulo`@bTmg^Q7UwZ z_V~Ev{{HP9+ct)HLxrC$YShq2+9=zEYiXaH8W+uSn3tOxVtKZ{surFJrmVKjBSgG$ z$8E5|OKZA*ORp}?^)JpW<=>BeVv8$DZCRxIQNzx$WT%)|s@K zE-pR{@=;Uh`kB%-?K6A#ySK0eWLu~>WwP*Wp*YWOpke%NQzPIvB+vDZB1;pMkV7*v zrBk-cy^zl5;@O<6Fi_>Z7SpiCw&S^zDLdXB<9>bnNI7X~RG`MiwK#!~S1%d#%QN;> zWmq=bsk0CUVyy(8o@mH=oKn2|D0Z1ax8ucWYVitEXg5GD!?0wO&3_NQVI9Ye&<<;e z`5qaGm&;&_DERCI?|9tlBDU|AB!5jg{|7n9bDC-PS0`BmI1=zSIDygq^3Tj|C~#); z!LZFN_7}Q2#JF*hk!gI5Kr|759Ip(rXQF(2V-@@wZXQ)L`?Wys>x<&d#)O<9gNBfU zgBDS3ecsIkN-XV$?FXD%b@u|E_!;l8yZ1|9$mnwhYE_@wyBWi#4nqMSShhrH8+-xs zRmjE~HMAAsR{qh681Mq0@thDEXYT&1@*1 ziVT$(k&gWQ(Y~uYV<_dm+A_I4G^PDE*k)Q8_J=uKG+u^4VRMbJDV{kUT1~RyVEsNP zBbK!LlY(Gw+R`suY4i%A8sc6WtVkHDNy3Zvh-`(v91^;gUNd;TbTW}ToVsAgID%nr2OIy@7QK&%2N%0 zP-2-HQMg@xRna*6k(a@-jRId@4`0X7igb4yLq33rT2D_4K^QQ1-+?yWkKPHW51Mbd zTNxZxthUG8+<*%4ii(Pv>o7L;JLwPk^ayWwWn!F3h zbxbX)QHlH0%g-3PhTNqk7=tr0tB+KY`Jrmtkllao1{mLa*zLcPXtu;=IU_ES+ z9l}8LA&Twg)b`>^dQrgVIIC4_Ka2MnM>Fyt#=M9)e6}i$(E6B{Va6!On2a8)jHqjs z%RdrxtB5-rmGr(CVGF2>I}e9z#5PqV7EAR4eP3L6Qe)XO2HU{h8wG zw8AY79XD)jY{e>|mW*a38WMmh`DQI#a-+Eg^40a`Ys*3@1wrS{Z|X)5i26mhGYcRe zw;QdBewMhGEOvcf-NzX$dz1~!%~F0^rfvj*UZA7fO)0$O#yEOzTg(G;j4K9>7ej_e zp?VkmoBqwlnoKpwe-r)%44T)l0%{SelA%+;AWcKM)7yZ5Wft{H4vN$?C#f& zH`hG+f_iO8yUK*AWF$hDbV*_b#$Mx836qQdfLac;41FSMAz{aMqX3lr*y;I8g7qt{ z$8Lk9(gS>3vKX6x(Nq3=>Fxi1?;*gF`k(v>25RWAE*kDbUex(@k ztHv9Rp4o+U(xfDGZFHzLcv#&!)8R|3VKQGxd zf`Z(OEuYxhKGB3YxwGrb0G>WbO;!g7We|ujWtvGg_!I}M_d^9Q3p>cbP;hrBf7bn3 z-ZZ!Hq>%KMj}Kv!TTkUl$0)P+m&w+lB1GTu(wD_}2+knbFFcfKerXZUgj$~Jsl?`) zH`-k`$x%kR^xq@$;`Zl^0Z|rQ+JWEyVG$A*tcl#eViZY?9EewCg&ucPxXN;0Vb{0l zD=Qtyaz9Ft;?d!YO|%xgmA1BRgna>imv`d5stPQtg1`iU#PNUO5G92Qz$V9`IACG9 z55s1vA^x-jbdmfA(}|UN!|{>>@N7eI!2w88!Jl`0r2X&n{rB|)I?#Xjm;c|5j}9Pn z_9lri!Itn1yfC$W!k%7_=8ihZ(60L$i`Y*}%5}<^czgfjDGg83RJ9X;WA^VY7sWv$ z0p5?VPvTIm4E>TdW8#&oX2?&!Am7#2Yiuby;A)OQN(}pEN-llv{v3S&wKiR!jLRF1 z{ht)@-J8YaKO)0|Z&lzm&~9mn_A5g+M%J@cCUaABlI?u)9tz4t%PHSL$?9YsHJ6_O z_t&)uZUA*{KTeJf>pJs-tcoP`CS!xF(N~@*S=%gYQpeqWeRXNGBJBAW(3c0t*?B6L z$sICyS?nEGq!Zq*7+cwPuVNl%zumGH{-RMoN9w9PRrMc+gWA-~jO zOz=!I|+c+9u_85V$Hu{4pS@}_nOQ#4>X!aB_K;eF4Oqfv2d!?#$ z4|TM&pVdu}pugFaRGSFqb3qSvgm<%ysiI$uudrO^RCfV}eu8gKX;}&Ls>C?z7kxzr z66O99Q)WWXJ#VgRDjq#`s&U+AIP4TLCjD{K1)=JCG z%C83)djt3XVE9W(_KsgD9CE|fRRDMggZ7_y=s5llZGpi~2DM*XZ6QEtjOoN1aHIaT z0~DgG8QcWS?J;O+LVVD`8kQCU=xPAD%s=g!Apa*$2*3`u0N<6hH*Juj-N2@SP8MjB zQN5p2y{jI@jn!X__C!Om>-6mLJEFfRp8_-c|6W--q5S{S6p!-n9dquE$peZ5<(FxI zz_oM*V8lvMT?)uAEW!we)fn^NL0`rIWO*S^;^Zkmqw#}#e_Df)=Rg5zW0V?Dgoc7Q zR0#15{i>XfIDrxfuLfWAWUWhwpCwqHPdx)s$D+QiGS z-rz4Wk0yQf{To{Avy@)MMNka>;98Hpt`0cILMGL@_r$6G54?ANh?&BcSL1JEVSpG@w|wY@!>7+{EVer`X3yyR``)CJJMoq9 z=F-@kIHz)~Y0L~AU3_hn%B2j`d*o-n)X~Yi+;GV7YxPE>ejLQCW=edeQLO1q_=dg?jCF6%f>GDAvmW`XpzBDfB=P!Dn-Ow$6YjoL7w}K}Jjt#H zp>`at%qFI{^iqok_az>$G_4MQ&&|+$;oKoHC8Gk?o;s{Hp}MqLRbtVrk*<~a33~nd z_4wT?$KE{7U|NKV8&Z45cf?ul8+(+vt6+=VIV;z*cPxS&_+C$gu{$dtCcB>3(1^$s ziI$gZww5nmh*uZke)-p%J;&zhyHf)<=Ds8^p${jxM40zt7+mNa+0J(TSq_!&zu@lW zq>)Xab-uF`2x-+4jJnMZ7?HDFp`Cg3)4X9MhjQpzLD;6@=)!{P=t-#7CezOwdG%{O zRCAHTXxFmB(HenF*8CWS0f|AzP=VH%apsp8u3J+l!iUK!=8xiaUG^Jmr1_pQ-+UcU z#A%?H&0nV|YL6XJ+N{(v_H(yr$e(RD`|iF}TCMp4TG!WN^tw&Ww{o|syky&~Re3kV z>}ggu59(vCWvb8NleLJ@yI9_Sww1=DLI?~pf~+Bj}{rbng1UQlIm+fg+Ha2O9{J=lI*j3>~~m* z)i9oM^VLd!8eb~=IbJ0Ouk8=k`>EyvUdrn3to6%se~yXl4VCG9JL;IbFm`-zveN&Bh1Iqm8aYv4w0x;?t@w3bW2*TU z`5rI}kvfL;ukzNQI{QYYdhRv1r`>EoU;EIabdQ&V$RmEljwA{9ZAmMDQcC;R<^QuM zz7RAFJl!Vx$(e1eI^afLkrU>~#>QsMBe6HyawXv-=nsj5w~Ab)$hc7V=v7(tGK=^Xq%6ai|glSv-VZan#mB zcrX*w@Oa6xbp(`Y4Rm-fPvSm^T$#(m&>%=~uN5Z)O?fyA*i_^1F?%e${H#{v1NkYS zc`K$|iu?3sg+A$e`j1!Sqe$GT`RrG#h7K@FiMzSz^^mB3w3!5hFURF9)1g57e4jh3 zK!)^Ms9V!TO!q2xN_XDX`W*Tv0gHYyOoi_cCciNfKEjjm!c!-sb{OHt#yQ@21La>$ z)xxRN0`L!Eu_q$xH!(NOCo;@-{UI{fbaWpUFzvp%(+54sz=^*MghlSRsi;M_S%1bl zTvMx&@THiV(_CqVMCEJQj~U88Z@27P@hUHuJ?BnX_nhGr$+P^75Hw?wNO50z)ZTW; z52w!B<1N}u27imYalEt1Bc`~qU(@`2}sxiuBUFnNZ!h@MZZ$hnmGDPLVf}g|dXLYRjwd^ep9*crP z3Eg+MGf(0e*3Bb=l`61Wgr0qmlJJVH`e~PuvWb$MJUKH`e^z!uK@X0T${Yxy<3lCT ziF#IVCqv3ZtTm&dJU0&V6_9BjCJ!GcGbcCmk{o9;DaPx$`?_P*vIGKh%{llVkWvgM z>$%F!C3_iOEw|~gxG(W!(OX~RM<@9*_U9HxQqC-wYsxKH6rwmf8Rmx*P1mlGLw*E^mV)vy@Ay2G!S*wVAD&6yPbg>Yzooz+>FR`h6_W zT&*IQs1YsswxRkOBv%@3+f?FQO0SDqD))OC{MGEC9S?|zAEZDYd$Mbl$=n??%3$8m zk+MM>EBo8)vn(ZCtKS>2Bh{5;)wgDty!x#s&5Jz6-F0Mo1zRbz(3n?iY-6fZ(eT2m z#Fi(+6M!O}5NycV`po5T|@yg~f>5;R=LV~)NQJPz<2}^&Fm~#x) ze9g)|mcZi-qwF99P)H>Mzk@(f)!$Gd+03?_opY6Q2U{i%Ug$CzDW()YfjQyhD+w6@rn)t6NO5Lskq{iz?x^=63R-WT9 z$*9@lFzz(jjlLrAKxw}gRpCPxf&(WpS${ykF!hmSya#k+X=5w;IW}34OHsd{t)`iR zv-sP2hf(SqxkU3f6ue>JCT^4w_#F^#F{!;6C)u&8___PICf-J1!(lUT??}coIVev^ zJ7xI?9J#e0iOwCyq+AvSKSD~<&KupxDm5Uj%A*>sZHjH8DI{<4c*Gs`cR;{-F9n$q}VA6v-9_Yp8r$tAqf(}_Y)9+ z>$Z6>w}WE%o?fEUg%^j)>0T92V-q-l-v{in^|7kEEzF91!+ig0(Kf5(Cn)8DZ%iMz zm#fL9t&+|-$NBAmqojqBCO67xGG8?^0@rsG{F`5({r=#L?`}rQ!?}i=cQ7mW9gZdV zF(yC4!3a%F4xy^W|J0=XpHT<@UpkhEX{CE%aa8HbFuio5Vj>x&&*yM4eF#RifGxvy z9o@p}z*F1aP@Qmc1-8!Hv|Xl))_GqS>nyA#xbesX#!NO%L;$l?_3om;E*kC5fm z@1p-?0AJg1YjC zH(v~1-G_iWD?-!uo1tJmoObg+PcAFPD*>LhLfah?DBTmAMXMgqjys{+8I7j)piM*d@gXG!GobmLk|vX#_FyKf zoyD2eo9!CTwuB()M@KRYJ(13g&^P4k#iE(a*v-YuN`j-NSSzt2mRj1l-P|b4@_5mt zj<8|2cMwDyq3l$It?u&U5^BiSF0xsq>f-CA6_(o!JAP%J7(yZ22W7^@pgQ9S9FWz! zRNh4|tyD(Rr@uoByj^sbyvkB?R-eC8Oz9ULJRNK>qS;kk`_`_g@Ua0cSKJh6KceTi zxGkNLe0uMfoQ&5^^6IQ7qpPWz?%&2^?pQ9lPRVq>d-UDgm453+(x`hPxyMK03&{qJ zYT2gW4tL@gIh5XHp8fb86rdQKxx2S1Y6EPpWegcRwi@6xV9%H4cXIhq+EL1~h^%e; zyS`bI#A4QCOjW$PtO$~%;cKS_Xf@;mV2!mgBk8WpTItNjnar2GgGq4zf%tNl=4L1r z(HVpnQ-~(Z5ZpVh9+bG%mSFaV#pm>0*kze6p9Xh2`Knsqz_ZNp%a3AJCu<7;eYR7n zy7DCJZq-$Vk!V!J<-PLM60R4yL%)MQY^|f9$`4Qtf*NV2W!ufG*0x+nb7xORRa}E! zHYzF|#xuMOrGP6xs)9;dPx@R+v6N7GVfNs+mL(Wo#0?G#`YFyOM5qctLT}BARc>K} zs-5Kgm9ubPT^|@%P2GE%oWAw?n+hc3vIu~*!SULFiwe&DlAXzyo3@R6BZsrX?bL{C zb$5>2ff%RgDmTSQ^0{k`<5}~?@oLra)@JL1-!Y+HfnS^SGEdB$&rVRGPhiKDrK`%? z#`ehdSjlzb1jy*LBqaPtc^%~fOeEmNMUFFsn##DdZdV*zA3!+GCg1v}Kj=wePlVoO zH6t}7(^4PkQar=cfsNTp34Pci=S4dO-u(-Ws|B__o2ijNQABd8^AThVaH{LiJd5mf zqFor!o|X+7rV+KC^|fday~{7kw88)Wg(ag$mvvHZ#OrL>9x#MS=CL6-g^ng<;at8ek;b zp;zDLsSU8TH$~<=&d$) z=A7P#_ak&UTSQ(b8zF4P*E`wq`q=g&`FD85RW8(8#Lx75#nwBGDK<}5`YX&wQVXN5 z)0cp*1Rg;Jg@=R}%In}=i1OJIk($q+D4JIqr+&iI=UTm1=d48c{J8|NqU$g=8>=U~ zxoovFTMdo+cVFb_3R5PVlB*Co;I~~uDY5JZsJQ|J4oqXwlfNU8Y_lMeC*g3PRo{F5 zvs$x^ZlT@A{VDOdy<+gba0hwxsiTWVv#WrwPCq1A=dDs(J9pw`PrdVEF0NYp%6n!Th@n?v7Qbm#r5pp1o zt&-k0^F2(sXlz(Fin!PctE}G*N?>+=S6m<1>-8Xg#J@aYrG?&fBKC~9L?-B^Y!DTW zmebJftwYmhT2a1}0>5Ok>&vK=%2le_zCHLZNY3HtLBXz_86zgf)^z{=4q z>NWa#O$*6aL5WnR=E{aA07Vw|4xxmw8$f#h;3F!0ESeYh+r^8APr5wp=-&@ovYFW| zu(EPjGb(gbE;pVtQQuIzT~;P`Kf6GvU&7L-Ex_JEcB$ezAyybRqL@NT*FRERH8(11Bz*HV9riv zO|GA}=e|D7xPj~Gm$LY*bnizt8K=|G(tIb*`%#LYRdxqVdGNi9-6@s>|~=%c#CSyY2QDk}{*8i7!Cwo1WRT49M}Q zTp?@|vXctyY(#D8L}0^_@y)s%@TY_8tv(tCQTTp z6S{9}crd(bTsIx+#9sveu+M0o608GA$tOhQQlX}7B_e${Mj@sNy4JO|UB&8C(rHOu z&vEyKNZh_F@WzXlqHOZw_YQx88J#n4l$X?7MjOZtSv#dah^KJk)I%!Aa?A=BpPML@ zWEkeqRv3D2x_;g{6jhR|Uz!_urpahllKR(Z2B4g?uLg)fnBzo$2hBTL0(Pi$U=u(X zy8d?%J_r0qX6;!HP)XC#yj8HHCzStpWy=3}-qDUGESW!Szbt^cafh#6Rpu{rn+<05 zzEM!Nv)}bb!Jxe-ca6_e%oQ$nM9QKTc!+1x=rvcnfq#aA19gk4n9EWmr`CmvlbbH( zEiFrg&hdiIF`t(Q({qh6=tc4p=D}no3=%UQkA|3k*^yVYnjbFw?Mk0m_noWh+T$Y~ zCclwDSzgeje51o_UM8J@qhR&$*Bw&2m0+j9j0jh18pjt`V*1S;VuEs`N$NyDvw93k zedKr*WE3g$RYr~0DbS}btJG!xc~ihrMfi1LyVHJ%)_;)g%>SR?NBsTt0X7elJ?Vml zfUiQ`Tn!(eeC^B{Y;x}wRRT(1t~7yt0cu_SY-_znF$A7LPl3*Bac*lT-D5+bVeAuq z|8sc7!~f70_n$K!`Y)%^zw0Xld=^p0Mmq~Oq5Gmgxt1dCGJ7sx1Ftku1*3+)1zd(k z5#y2E*Ll?sLU**F3uB&)I z=wOE1-n4Oim`=kr)*ay3EG{fm-av_8EnGL3-N?HF>!w55trN14`raI1R7yybMa1pB zoAHliVoQe4BW9moyQ)A=)-jl0hoKorYfoz=v~opn=sfBjrqhafavYuuF|+55ztDw4YogOw5h>y2{3UY!NI6r3ndVQ2+3U&rM} ztpeN31NXE8ymal^OZkpPmkaR7!4rK*mE|rum%9^g)c$I4aF&EVziZ*?uYhY`H}c+| zbyA+-LJaKMQA&ei&!iWY^*IdKvTyL~7vFic#gW?vCq;$$gh(Pa;}W{}!H;HxNiJMQ z0VxHU>3Pc`ilg9+l!BBlP|7P9ZSk*4PJtg;jeuOApYo7po6to0{X1Ev3iYYeachg7 zKg^R?^mc86fi+@P*w6cawKAl=eOZ7PMicj~Q6BDhus}az&HMdo2SV)c#LLI;=PMD0 zZ+YA=duNWk+-7qH=!m$$iim#Anr}(OUf*v$ zYS6OwTsY>qaVb}w+o4G4;iiVYREy?fMZ@3KpKFyC4tBakEQiOKg%jQB^Pu=4YM1oJ zT*ymqUqc~p!ERuUN$q7P_YUmFslpZt)-Akm)zcG7m&qi(BgC!do)g7?b&LHP#Wz;d z6~S3w&h|F5bo4zEU1~ZZ9c0}7G9eZ~9{}W6D*Os~Oi=u1SbS0RA6`+Phb8wJ5L8!S z-sIuWbF_?BgIbH+6n)|#7`9Gfwe|W?>h!h#wQI^&H4LPyIi5wjH#tN#Zl>K+-S8j4 z6~9uG`wY+kesysC$^e3ra6|~NQD=zA@1TdX;;!O{NIu#6WWBQ5D}@}Tx0-LF=Q=g_ z@k#(!87tVdZ-lD82Y#oR5s$xx9ImhFsO{8cymDM10SlcLuQzcuM=ZDVMoIG+~uHo`RV<4w-5OR?)n*$X?AB%-sAdr2D5=1^4( zeu!G`phP)_52?P+f71W!sLjQe^Yu3es$29jed^Dd9zP9!#a;NeIGN6686qYo$%P^U zqF`?da3Po=`8)p?Ah|afI*a-wtMxm`vI1f?R@R&AsaoPK5?_)pCB%A{lFT5m(gCa8 zi>Yas%B6!V zt8A!f9>Psh%ydXI-g|wQQsoF&=!yf25bYi%z$M>=icGXU!pUhM0QRQr6yClP>eyra zvS!V~@G7&X6~#utBHZ~$FpdRNOF&8m=oO~CnDX=BE*7*#^&0P~M) z8s)aDPG^~g-7L4JyEQYGe~=p8eZr9|r3+lYbF?7fM|=+z*>6T*M8o1w_L;$1PB@Mj zzKHAJn53md#Q@-}6ccd$;FZ?Pn*Jo-T|5TVWt@C*VWOq1By?RQ{s8B2@wiJ-u$OyL zzZb|WW%TAzV#CzYoQF$fpFGR?1O_~a3ev#TrWD=pd+?uv(BNutt$U0zYeg_SY9K=S z7BWY2Kne@itDlyXaFNhxez`%xTA-#VEaG>-Nk-=Jl6d}CY3Lt4D)({_ z_(bf#cl<-wqa0X;xgIWjBuuS=Wb}O8QQYdL=p4G4leoSITeqU!MIjR0s z-VK9L8O5K4a!qJ|i&>EvHe)vQ6_~w2UwLgjRWh?ex^*fhJYlQcbgJ4%+~m+;#?_%_ zMw}liA?|j)FmbT3oLBhA^?M}TdZpk>wuElUr3~}-^rH(nqHlk>#3zH9&EW%IeBg_k zS1ABw5urm^0-sP}?EpAloFqVb-Hr+)T&2N@t~uRkN$3aDS*cVn?JpUj@Q)-|KZ#Mp z@2U_pQIs^(bG>D_aKzAE9-o`{s!{lGFNGOkUn4Bq>`Ji@p=?xx3?_{=(W5MuZ-^_N z@sI=;fFxAP52DREqdT8*uU(2eu>1_PSpLb7McS}8Az_8B7=ADXPF1G#RyMAsckk(K&Ilv^3LYofV_=Bgu1``X2Ac>K=EjP{|$=IUbS6jfWs<9{rXJzKV@8 z&3affS9$%r>$@jk;!WB^FD8hBSUxZ4isl=SsB>|hkhs)+Xgf`!rk{gMp#0P;K;G!)lsRo_d?GsM$<+faUR%}<7NA&U6x z$EzI@P$E?}?9W5(#x}+D489u|5g&pF=>WC%XS(}8>`B7y7)!t2Q?m9LXTogZ>2L_g zglE_le`HjB433)^_Tq`<^3J1A(X0C_iG`lYYJnOz?V4`+9cihn6>}34$mgL9>uUfz zlLnimJ9+9F)N`RynF@zF=)Ow7J98&)#s4W?7xLq_ZADZ~e%WVJ<5wS_66qno>|j#} zS6d4V3b8$yY+VW{5}Web>K!vSQ-N<~0Dl#xh;!@kyi7XP4_adkc8FeD|Jj84EFWFm z_O)ZSs`!H}?t}h$hUZl>-m$*tH9wVgS}l&>O8@$!7|70Zm9cc&^6k^4ZL5Y1!HfQj z%$E-U-{gO+BmX0v{jZK8k}bJ7#Y67b?W@77kycD%g^cELq444@0^_x2@mtN!UxW6A z0a22zy=gteA{RNnuUyu09_+lVW027*0tWy!c#2jzdxIw}g=+UCu0m}Iw3KyAU9y{f z5fvF3M?LfpCV5qAwQuNGXQT1UpuLC?@hWJY0qSQ7Vqf*bA$k|w;VRctartZEeC)TBEZc<=&j3rnllU&dNOV#@CxQMIpxf-=-cr^?%QZ$SR)X>sZLzZH zMvxKtuj(?eW`Jz10X4svIA2SKPi>*zZ=U6Mh_dO`&mZ3awD958d9atCtJ`2Gc#nBH zj7C|b4EkEuS|6wXjPqm56h3Rv*5t=BsR^3zm5alehi7IvTDnI*^bYzR9IuI5vO*^S zMpd%z?nN)lFr6FzryQeUZ0GAcUe0O!MNXk@V^0l3n2=kT`;4nDAaxZFaim0dj!QO+O2566wtAHpmV;I_%ZP=Uv3y<2R*hF0r()a z_I0pLxfSJ^q3S2PO8ZfYV(ub!0&~2y-Hm!FZzz=Ec?39&+Sfg%ld=G{n)LF_YXwaD zp7-t1#!G>?Jihp>0mFc5N|bijAy-FTDPTotOVQpr<(uQoX>E%d(sk!uQ+JpPZeEm@ z`2L%k)AWy*?|NJYNj}ED3UNg1Z{)@Sac2`3FMNHLZ%W)mx2j}XX1iK-l%7}TXo$y5 zD7sA7?ptLZ6Et_a>q2xVW75{ZB}L<^K9#OS(TZ3peG-TBh`J+5qN*urJV>C!vJ=%5 zT@PD;AqB&H01PB=^l@)3#LP+{g#(kqank}ej4g@C!QR$5td^450pU`9{rvdW&`ARjsA`a4v$-GvO zZ~3GzfN!yV+H$F(p)iH#ZnUm$T9QtjUw@BxqLliftuR`$2hJslj>y=cr4PP4i+4om zC(xeDb#SWL2b_%lHZ*d`XCwuvOx(#Isamys*YScjeGt7GSMf_#0?S^Zfm-Sfy$KJN z`h3w}{>)UiwM0r8|<{PtsQpC z>Dbp2QD^UsaA)oErtHaI0|Q1#*2-LSuDPx`uj~K&D;9*zyguSZaA$*0d}Z`pZtYLUc-)FM z-mdyTKD-o!lH#;vVeiy}lAj9Sa*9Mf&FK?~e3KHJIQdg}BTVR=m>dpH+BS+>;vUIX zhq=jm`#Z5=?T{8i6WWsn1z8ZwT&i!06siM(@+x_hSW7T!6UiSTvKb|L8rj&TF(@Wk zlj8*DwT}475-hGs^6P}j#hN~vd!{B}bnsmWV7E|nBZ`V@677z3cm3(%do85|EIG*L zGzMfP6-#@*Ro3)h(6Xq0PhnNoAA28$b#a;4Y3H;hM?6_&X?$qdT$jQq!_j9t8g_S? zNd|=rjt<>7LoLU+Ld+49+~)IaPL1nYbKI-Ow2!FcUJ`vM-?1}#=h7?9TYPBos0kBY zh6zQ$+6uwidJW&c%}cY|L+d9mW?EPd(adK9y2?lF6^{jYmQGf+wkAi9Hn7nx2{0@O z>zrkO`&2q!)L>U80D1JcvkPFKiR<hD7I$wMN?YexFS5|H&arf%SWm63tkBErDq< zMEONJ1bnqTOf3Cz^}a4%FYSKTkpGe!XN!{2j%^}zogGg3N%?bvn7AM~c?&O*uqMyR zx4_aIqc^oZpyPB!7?ooOX%4Y(@#oF1dOb}yz&LpfeMYiJne1*uD9`k6NoF}-WL1v( zAeR%Kmd_7DU^UcVt-zR-oM6FGt5xirNnp3A3rCqc~CZfe+r>34$b<~ReJvBA; zIQ4fvu?#A2c=G`mcosCS%epBMmCe^=2KbklDY%peJozj;Eu60=P%$A8Vy8FWrXc#G z>6aY9aKhYCq4x3+x8$ZMrQ5FRKa0!@r_8V!pQF6Pj|LdYmzxOrvI-C|@`x{*R@JC2`4F%bu8Qf;J9Z{b0Plu`w$`k5KxBRg*s!U@68dzn6D$$bcU z0Jk{IBmOKp=Sm*o$wXt-TeYN=0 zNJ8h;*RAusm$aK2^Lt%jQr(;)-&mt6=Q6LIx1Q51HAiNm{#9!kglO+6KCr&LGBRDr4e-+bHk5P+*XM`-;A@FThO`JlwDI< zsY7dP$4P8yVtQdW*%|tNNzY-TE6x_uw|R}G;5!;jv<{k0NZ$3Qg_MGKsV08Du;6q0 zH$r%i^gpGny$7^^TEH}Qkvz{2d*%cqYEDPUR#(8yl{|Sj@|U2`C6i)G$8l-CLOn^c z%&_;Ud=;41z2qNH51dB$nr1>VXa@KR&%akRhx z)ggyA{=>7j=CZfM+>Q8X8CIAJ_ zRY7ubfufrO<&Z~j7kPabzh&#h)-)azG`EFwyk~cGuzSd{)E-7sv>jSs3-!1o2gmER zV{!szX^#Xk^8;xI^WfJ5b7reR=@b;$hI4V>@O$j`2qZ=++0K&uZPXIKX(oQq&(C{gIA{5zX9 zl)Noh=VcY99={J%?GxW(u7?cdh&mr4<*1xpSe@Fbvb`(JdAQpqbY9NEX4j4t-rY}p>(48#}f-*g&8~vCYXLVUUOd@hK{;ImAk5_Ssjymdm zlGqrX8!goPbyJ&t8{T?bMihlrvZBj1A0`TY!{maLi>F(TY1Dpj z2o20lx8lol!)|MNYeVgoPbhVt-X9W?Hc|E6YIzccubqtu9oW3jV6bC?Idrpj$^J@r z+9Vm?-l{P3bHg*YbuUa(o5^{D&yvWgB?L5oo@0H5yjq^pv_Nddx_%zcVadSBeBhOT z*9s4MgzR+L(zLWh(MQ=YA5b zLG#O{8MXYuhyVUTzc%VFzVwFyfF(PC)~^l_UzdSyxlR6)!v&xA@5JAt<;Gs2RUYLf zABJX?C|^eYe;{llHwmq^9BSm2oxcsd6aA_;rWAB5x%{SC?6P@g!xX9_s7>RuRz<5t zOiPd-0hn9?{GOtJWNkqO^$?&K?;-KUGhhv8c`bZxIUT_SzjH|4`BT3C7pU@2%O4B- zjn(G;ggIdCO~!Dga)EbYKix8XTYOu*=kPPgbmEs^=(yR>q0>zI26&j5W0kq(9U0T{ zE&eq>a5(ab>}$*85C^zlfXdjl>}IB{{rW0q^^3RZoBzj*u71$5FwdjAC~rQrs8gZf9-V&>05wBc4&H~x)EEoNIc z-MlsKf`K_tYtc4$&n1TcZuPEgya~x7<{=_&buR@gpSZDc6ZqUvQ&8de!{!!~>Wofm zLorWvI-{@I{^_jzI<@tvpkvvLX&1}KcT5=XKD?Ur1oAN>-) zCj13@{C;-Xd1seCi4g2C$dA#0+%E(3BU{2dnW|kRhYGhk@`x;*NLGZ+2IW@nmP;DZ zz6uO|8u-u=%f_<=y+b*CP7F46kJR~$uO$s8wC5`1Yw2Nm;fm<(j(>~pi_k_W4*ia- ztv}ZwMeDV(IDkA}fEZtEVwjXM`pD47jwW5D32u#2;wL8aDs5_P8M`(NoyK?AY!MDJ z4_uQTRCN>Hs9*{a-He#mikL)Tdy5#BhfJ3iYq_I>A{C0)Rq$UuX+KkDFehEKH!lnf z)A680n6!j-8lqYDFH+k9Y)_b|HqjdR+p^+PE6S#}l(H;?&ncP75G&F< zkI#g@XcRziL|-b?M46gU2u zfURWe6|kWN8k$@Tjyto8*J|s~&m{62G71IRBQ$J0w``Z=6wzA8a?aV)q)gFrB%$@i zs5Mz8(`k%y>94z)mbo@Slr$|B5 z$($;vKo2zYIqNf5X2;zZ98bR*3GI7QU>%1%!EA34U0OH{TZ(wtBG0lr^{&%^ zCQ;b2hP{}9h}L3UE<$c|+(n5Az-RsN;Ygp+pYBbegifOY6^ zWqr)Yn>m=c(*_&0IrHYjD`9f=*EB#Buw5v0WQ4Xx)ye}-D+5JJLDT&;NY&ALiE;w1*I!v~F`7e-T zcN8NP+IKkecPPUT6TfcP>=Pb$eq9T!IvCsjgF)P_Dn-%}-1Gsm zj;GPpZj}4fy*Blsu}>fR*W?J8z6^$7z(ZN>a{cmMcibOYv)pXPuG6{Enaz*lpro}$79>!+t0 zVhW*nwv#46q~r{d!(=10B*MPnQQdUxRUkdw<+mv$ea zP0h5E$W>Ajywh+Tsx zm04er*Kj)EW{Pa-TjeJ?YBmTAsqrP$&~9s)2PSx8r%+EvW7-~T`jPdKJFZ{E?vQ~iz#wopD#xigHVBHdJ%vRxLFqRHtP@bp7pQmE*Tn(^1NyYHv?6w#0r_o7RM%NByCGVN%)=z;nwj zLEV5g3;(Z7L;1 z9tmdiCP4N4KC>rhpTR3PSVpmh8_3gtY1tYLdiV%J%R z`_hS6tLo0PFyl|$Vl$G>lIJp)i4b4JX*45aD`4VLZR|)VO+#j3IaROx@VesR;Q)%l zHoXV86Z;~6@i&9i*4_K9YPlX5=VFtBC*pdWDf;}+Z*Eh^V^Jx!y_hu{o^giGPwQvT z$FzA(EUB94PpR@gSdtyzP$C%&6;LNlzCmReuVBHba*#{FF|yrM>`#$n5p!RSrEB&K znV>vlaX#c73NH>qUJmY7NBgA*A*uybJ$|#b=~CwQW|BL68hM=3^O(e?v>VVxmpHfE zfA$Z(-~6?_G1ktF^*wuUB7UpFjVZ9V|KmO+1NjdnTm1H7<}rRP*t_qlG^$G4a4SBP z*a_NxTSpv ztysrIs6u<)?4Z4~)&pVGf0CpJafQ?)?b)`lm$J8)`-?EZn0Wv|)itGjz2dAd0AOgyg*;%u9`%6dQMU zs#OI^%8`w$M;R?|avgJ}B7?v=84Fl6DGni29oli0kLHoCChy#=w>8C-b$7B|g2qiF zQ$Uc_pqLFYJNP4UtV|v(_(^p})y<=pHk5Y%I<_*JuR33Q%jrqF+M=~aP<*&eUDohr zff4-qI^n?QKPr>qf(be}j8eA+=ayKq?U!_TF}|iu#DnBVhH&#Ly}^>s)T&sDu(6sc z-EEuQ$_nmE2_5e@zCh%)mvjB{AOt(PH*j|<(Yr)b>QGS8U8l9RIl&B9IO-Rv{X4+i z<7V4A)j*czZVCmyz9YK^OPf}My*1FTF1HOfCBv@co|1hjJc!-c6`Dbcr#+8_`XaFR zcxPRh2sjsRf)L46y-2qg{d#jeMe{X!PkG@o${T9TsY~*+X&)LNdDH3%dCF6qcgL6{ z6{1)5Q3=pXDoHnJTxM$VVjOYPh&|jP4q-1LPt;HUvh*FBm^f!NOu|W)W7)NuSH#WL zi7s;IDmXeOcSW|>-}6DrNX*M9eWtcd*JQe(Ygq%gaR4H$eb|j^4Mj);i@7s{;g!3= z+r$fQxrX4((9b)kzaSIt`+mpk4RQV-VEEk;z8dWH=#X}4;nMXrixtc}5w&~LFe|~% zig07=*WBNRPUNM$JFK^`=Z;3Y9ag{AnB6EZYwqq|n}aJZ<|N$R?b1Y})?#K^RHSV5 zrG`gvwK-*6mR+WS8BW^_6;i$3>MIqbPxt6UCVsTzv{%1Nnc+u>KF%mT#IjkLC*gqu@aFF{*li?B#W{ zYO$#cr8p}dj+bmfQ9)7RAdC@Aj9}^uO)!)sitv8dO-PlsEX5EWc@knxe{yJ@_-kg<4@BcZ3xWQb~4Ep;dV2mrfn#}V($&1Okb{w zbwH|2)3bi%QDO3sjHTDlA+In97xZg=)Ln~p`~HQ0^b)?u&n{Vd)7ay}7BHNZbuHw` z|C1Rh_tRc^{V>_p0vKc=gx5KgAcPmbhN(63M{%@mIr+xm#C&Rm%@1dTDZ+?P-S&+I zhM9g$CwQA##MeMH(Dsoix!$YG1W|r`=R5JnMQN4l!z{=<-k-WEyP8Cw@f%%JQ!*Wk z!=c>H7zwr+yd~=8CAeM2;O_2#0ThaEoHx@#u*Oo@eg1?3fzq@=kG4V>?q)WL?zj(s z9fVM#HESx%ia2)Nn$_?pA3UKgAmjQ|zmuHvoPR=M$8ao^S`^^)n_}=UvVheR#K9N2 zNsO_UBkE_ET<~O{5HlqDX3pFHGOlVvmpL0m@kn*lIs}-59kxDTl2JKLQBY#C{xb7n z#K(r$S!1zMa8~fAkAHz`T7B(}me)SmVCXQMh|_^un%chPunpW9E3_@# zy%dps>!I6*fk2ty)XLmNv8-{XE4r*7XfHcB4v4I=u|6$z$3cv@Pf0Muy;*)8!R6pk zz4<#nrz_?3YD@+X`@$UD)R4>FrYTKTcAob0tam?>!}d>1K5^%d+SEH1@bwVWw~H=h z2fZ96;8FO~w1;ju?$`~Yu&eD~YGKs)sA`(Pb8kb}b1X$wpm`39r4-FxniN6=Y$)$B z(fEc^*TzG1ol1^$oKsC`JSdMHJ{L8RzAT|RV|oUqH%PHV54;%|!(mUnH?S)hWkqx|6(7M@O}w zSMNv?iB^ZF5!G`2&F%AY{i!AFyKBqj({zpL7GtgNsWu~H7$)`uKu_NiS3Rv|xXlBG z6D=5E+gA61D_kbI2U6D#>C6JZ^i6C~BssB0A&s^Io~SMQoyx1nlD1;U0TG*{{~aBQ zFS7VBmo;w?9$8)FsadmDz?M0IcQr@8OM5ZBkn4zDSk+B{0eTpkNK{?0sZ@5*AQHcIHrfDVZGjKgvB( zth(A#snn^i(TROx_)*nKeZHKbFVkyFVTe2Cb)`#plS==?x0vj0UP@mnHz!2AmYX!k z7uN9alr3kxj}ccbpKPTe#V#rrtC-+2XC@FqJ?3bj8NV2o?IvO{>CmEQ4{K5o9Xj%p zwa)tzU@y8BpeLSBT>7*&TUN3={th3)gKA2OM{^stFaGwRb272PBoEY^X!8h|P1Q?M z#yu$H!Wy~nojz_;k{2Bvb4PYJ1EWK^!X%a;-uakH4SWA*BSsJkJ@AVfCPqwekixb3}-@jTWUo%tjpm3xKGwQ66 zVC_=M$5~!uStDq5dYpxh+;ih4-5dD<)FM-p{|o2~)2VpALBku9dm1w4WX|$OjQ>PJdgqevCKQ*Nhe}dgm08_(QU8`d{hC{G0O=v0Id3PTvpwQP@ zqAG-GEuSn_IqzcIp9A;8czwXr`;u7#YbC?QrF6I(|GYbbky(zW$%9;bn~B2lf^M?; zD`Dvh-*($X@&$VmyFd*^V#g<%Q8_SfK5^~Q|M5T_q-(aHcoR@^BiA@r)AXkOny;_| z?sy>Dh^rqL^x1%h;L~;4T&L&B4}$nF1gWz#{|KV+Vp|6D$kosv!7ln@76h|;*FP^T zUFSU9iw6A8KT1opF%B1<=*Yp1ME`0`s8X_0$G16AiA=4u06ryH zzAuiFd=EB@*q5JyQDl)c+^x4xX2H>YOt=SL-$$JgN8*e_+~RJZDeewr&Zy5 zUUEl;Isp1l0~wtlZH$z|bA++aod?N~4>K}$F6O5zEx1$t8r60C3*=>s<+bYm@y~1q z^ZOn%T**)nVu44RcYBg=S{JrZJTI+Qw&GNaBvjwm0WZD?a6Ef;%Ke11gFM{Rv_16a zDQa7Nffe=*m62GzBdF=JBpWaK-=Jld6Pk#LhAH=o zMVkB2zyJIs?OefDZ9eP~kbn3Fi^8WG*pSDh54)j;kqpHXCKR$y=G+(x+v{LZ@%?5; z{Dw$9`{s|tf`)7f6|L3}@n51@~^uAfVt&w8NTWeZPla za6g{s`j;^0fDl|TUFahVjJq~*KSy$~=SAg+iIc{fS=Ts_eFGpDAO>7>z_h0rp?7)xlZY2w)prrO44hNUY=QbhSlGs(%1On*wzv(YS2@ zsqH4`mEyBR=^8JiM_2eN3pPt4+1!}VblhcRK8|^TBx5urYqs9YU0!shJ>6JGl2oaM z=3x7ogLcgZW21gjaA&+9NE$08-1=>0yO4VGY|1C)%Yob*X}$jyiW!YRtZ_mUPV8)|-bq(y3;N*#(&* zde}X=QqP{U0DV8qPmSMUZauCttNno!oraND@%H381Xcg3hwfwf*-Wa54G)htU7mgG zV%5dSZB1GZkzxRm^HTazIgcTe^V^Vs0-89(SH}S)?`nF!ZM{u+R9bz5iwQ-_xCdM6 zp_&pmzKTxx*9u259SCMT6W8&pDzr`(0PPTvsZd}I7~jqMdsG@ZX41XVs4;bhuhFeH zvVUJSa{6I;EXZ#lRCVQ~FHPL^TS{ISgO9vS6wRXrQw>|r`Ov#@4$)CAwK)5%mfPme zk5Nr92ai!{LwCJdw#Xj9aUY(K6Gv}6p1W}<2Y;JaZHX8N{HQ^=kstOa{mC00V)5(x zmk)O4+uG0|S%2&;F&(Vkw&k zm!2ZjR4sx)rJ)#(kYp~cDjP}QUYjQOR!g{u8@17#+l_?%1>JxK?pMkgmk3|7aI)u4 z_<~9VtA^s{!ywxkyf4mq4ANGJ$&jPoz^K%(>)_GfghF#ezu-vQ`CRUWb}P30av$(u z;`GUTx0UEUT@J&P%-w`JJAil)iFB8ms1TgA?VR zUg6SC5B4x@|DfhwEVAL*0!eKNS!DCf)z_8|^Wxf%>J%;pOTBEKJ=b{PGbyy{pW)`- zp|2rm@8M@}Z#|r5l%~eERQx}u+5hk5Ty>{xNmQ-gIEClL?L_h>3CWAoUX%lJ0W^O! zfV@gCgScf5!(&j9^qqo~eIlk@ZSpk}lqTzENxI8M&Bn!caTGG1C$nh<$w z+9OMwb^^Z~g!?u%z|}n6jct=?;J#Te$+(sFAKcV!oxFYj1r$gfe}@Ie8{QzA>EuNc z6Dw6Xn$YnC1~)E~V?TO8x9RcevDCB3bsAxk-lU&Pr2`(3jFg!AA`_>Lr*n6k_rD+y z=ZxIhn_8PbKGS6r?i*#(Z2DwJ^O#JMt~?)NF?*wcX1wfu<`(Q!W%{Ez>&DHS?ty!? zLjWr-OO4u7^zl3SUZ0^YFcA77szex6dUL6kZsZVoq~N5#K!g6vekMfGc9iYwo7D~N z8s2Stq$(aC2=`QvevN#w3(F^}?PqEj?ytooH1?^*HyLQ}ioUQfY8Ykj>5kwV&|ZGS#!8g8iCY~BUAy$!FiVj z-u;xOhqBLQvoWfETRS?Gs#+QkVeYSv$=q6(6w6duaOHjC zkk=0|7XWeRhh%fqCEPbUlJ|t8rK`2c^n0e1OC*Mi zm0LiJK^*OMh+kZqOebYkDsn9F-f~Z;z+i}FkWMmC+BQ$ z?iXdzXU9bCN`0)Ll2Gn_EE%+1f*vYbVb*kUhx=_Oz=0MWeBBXj}II-D* z=fN4*J11vr`2o(>tY?DJf!4Lf9rhp7WdQu-x8UzW_*QJyI~?*8o^Fa^k5Zm(;A4K{ z4G=%JypdRd2qHtVFmp1rzn!Xovo(2etc}zarD{`r8)W7gs9Eo!c>A5zX%d6=JVvAz zaF3#rX0O8Z8>2IF-v^ZPChoQK!sg;dvnCE-kqi{M+aza-=M!$y+>LJ%bOs@_r%7CL zX|D|mA+w@aDxtpjoAYh3bk1e(oT8gr|7 zgqCiu0Z*%;0jdOTH#RR<>->+rjVVInHS`0PB){pW;r=~$RE{^6h-@0`gFe1x__Dy^KHbGzWg@>{(nmOl^J!v3L3gn7heCVh;Z+ocbcg;m9;Xv{N~9lIdErafQ)TqOdIs zZbZB6a-7Dgj1`4N+uJj;WzZcjP52dj)JF~Q8XAB6mchLs^^o~8@!f}pbq`12Nthyb ziu{uu!2UP=;$!3NjZN(jxMBE>HnLi(pC=Z{8>AAB+c>vgVC-kLXY9_Vy3R0%lbT@; z=J8w3yYaa#7iGQ{bF`2_QAghBi!idb)GhG(N*TF!BP}U14YtQyjrnjHU-~K3sR{+y z9mzAa3?#2qs-mg;yB}dV73&%p>E|J8b`=}nU8sf4iZ03p1Gd*WKTR14Vi_Ip)81>} zj1I+u5Tk01yO*S;3df1+gC4YG>vk{jd7MB}RzGm_4x|aaq|f73HQU;b8($2OgJT>J zRWN=uQv~ESVny>j(5*DugZH?2k^h97N4bezO zoYZeklY#k%I90OEU3jf{i$0hPi;zSaZ)LsoniTKRQ~kB+H{bFO&!GS!h#HQD1RyQx zoZxz<;OqgkHIypIm8ZxW`4Y1dM#%38O{ zVL|%cj1U>X5Pco1(UR;S6{rBn%6w3~A;FwMq-Rw0qV{oIprn9Rdc>sHCMoRsDu#8S z`HpH1fRhl@VcPd5ER~9WKr2X@`D~0i+CHZ}_}E_eC(nOO^|iTwxTs8!F={YpKeka7 zB2lfeM|<88gb1u7{7DkfOCe10U>F;ehV}M23BhJG(?bY1Dr@XwwV%$$IQ!t`rN7~G zZwqs?R-FpF)|?GvfkJHW$3&mXfN9vjx0|5J++Pnh6iJjGRP)NAJM9^phiKtk>8915)MOQvrseU-IT-LX5U-Eo&`VJ(l)W{(JWp@0t{&K~odpF^9@ zGnm+G;Ts7|Es|pC=5_vL`Jv}e!7)*d)_W8<+*~SLWp5w;37eL2S>T=k{MTL&S`tGP znbQ$9)ktl;n2f0=#CVyzd%i2=&My69O4;w2k%7<$`9$GBfWjXsY8hoHN9-Ze+>VNz z%yv3+Ix~MYxaGS0s`zFKFl6%!K6JB0L`MNz#aO*tU5aWNwfKqzR7WM!$-9j@8G=LK zUE34mGprS{qDD9xAxy|g;o%Ufxf{ho4Yn(TQuj=QIZgb&T^d{W#2!1@uVF0BPqDFX z@bX8Ie{OW(t`6pT+H`L&O|vhTzK+MN3pe%HTjSqT-UEdV%lcYfGu^Pvi#?EL5mOZL zhAZ(E`m^~FK91*#f8(US%6I<4fF#Z@OaYtn=SLl^e^!Q8tB($Aw@;`#@`l&T$jBf^vL=aaYG{O1;+fjVlHW-SdKAoz^&aOQ zF%Df?@|R8~G-sb2AgOhIS_@%7CejZ=4MK2o>9cc)b>c3bvbnt=D?23@Fkm(c(^AD* zmO}D}0l~s>FHm1{Lo)*yyfTt3SufhmLv%w!#XDPCI?{}ls+!~7^}mQrGJRpkwr8@k zYP{93D*Ap9bT??{;k0KHno3sk(`O1#Mtk4j2ll>pJOGZDWd#?$Kv^_wtsdjO#6(yj zjy8!7z1A$Wn#1Wklnfp1j5J29+M_lALfy%umG7D^;D)W-rmbF7i$2E2t$5u6jIGr= zgP0Y~&TMSyn%|4V@gXnrqS+;M!se!U`>to(&t=^)pEz?1gNJ@SAXz(@XlVc_1o01Z zMVjaM8vmTrSH_yEb=7&z%C95|O9Lo1!C%FfsvVT7)vYiFfXDY4?SMFqz46WmYxMcu zJ#1_1Fs;Vd&(rN(D1t6&g!0lJfBnTfon@Yq$)k@)!vTvd2$Ow++Wg7+JSy`QDk0<^ zis2&CCWtH)tYbsq!Ej^mzVx@fS^rKA?G4aBKAR*Klb((#raVmThV@D*%`@*NK24ikvBZJ?Y$7dzPaTEQb&4XViGRSb zvQ<%Iha}%i02A-;?tI(rsvjFGpnUb;{+LsKdi=Xw&XGTgi5$j`DeWIGS-}`uqS%Wo zCPNXy-o|Zp;TJa&Tn@jg_MVeGd1S!xwD_C3*?sIE>QAxvLle5OZWPfSJ-K+DXxs>d zF~ky)qpYzEB)THUe_YnJYv7yS7QILt0u<5V+HA*ZG9AWhoS#tpKNAB2P}@k+h##_4 z7>`N}lwS4x$nBofZ}x94#?lxQBvL-cd`Qq8^9r?8X*U|)$YT3Ct`k4LC=YMkN_9U2j_Lx~>$tc!8NZ~g>kHooURsw;C z2Z%v{77*#s?{+U}0JRs5rj}ni{=G`WTkFssoY0wx=o&4m9W%axH4hC06@%B#>0koh()(|8~`wS=yknD%H&slYKKF-zm# z{E<)eS}}8I5{)--P^I{_G~9su^;ZqsGX{m7r<+dKsvaqzRX^9`<=h;=J`xWf&AH|O z9>$k#4ADodx+&kyP&O`XJG68+0n+XA_L!>r-<*%Ov*u=`p9O4rU@=guEb{xVUaLA> zQ|`x}+O|X0XmhrW_j>)5cq%)f-wUDAxd7*A|Bh)C84IB-=uWhrL!fO;zAkLfzKWW3 z7@lA`lXdGh%ky3;#|T-{t5t)mz%>j+yzHU`;NZsS&m}?pyaDZ-J((e=Z9}r3W$Y-h z#x(g8qX+37k;hWP zqpL`lz{TkU>IsHgJHe|Qerjo#J6N}B#zl_fIs3I4R8Eah)~#Q!>4@BdDUa?eHk z_Yr0((gFUrUW3b6^=X+qGA+osAkMEjV>W|BiC{KO{OyA$smnN|X8b+cl+G|wj0)n| z#peed5KcG zAe1RERv+bJRr^e9_@K({?8~!Zz$U`Hb7oW3REFr%l)44IGUb}ZeogVJN^>B4#hdOJ z6gdv*f8^pE2O3=by*epnIn#&{ky=+?)=jf*Td0OJ6XlYz9L`0(9gqS=Shuh_U}y0+ zt&VF`I!V4UVK`n-+@U6$tQ?rd4-!irUwIr>=ViOG>Q~OhJjD$h^S>&hc}A?L0fYmf zF~9+45uR#cyO^hAo+G?GPoszfWPn6d`R_g1JAssjL+Ic;SI=8BQ4^^iVH?Pn>P?YPmcNBikjORT3=B| zIoe{S_SlKDX4qL}yj2x0E@%bxzGkTXfiBB|EB8om-ofE$kHp9$X(f^o+K->UqYfD* zUbA8ft>A6JiWliKuKc1q+Qi^Wo%wUAwyNKRueD}3_TaQEe}PQL$R@~Pi<}XIpuj~+ zQ;mgV(JrBR-MUtd4*FI-yOLA^;NqVivA4HV z>rDYvjfdjWM6Hv$Xv3tc8}2fU)|io9d*(n^>4pB+2psNPXi(bm-AEE#akvTO^YI^O zFGJdr8`Bw4{B?tsT;yz(=x@~bfWozw=TS7p_hcfI)-)QS_~FSZAe;-If1X~~)WUS5 zu&EP0Rd!4+qD8}9&irxvD-MZ@HJ8bM*~I&=cjiC-=5jnKO0ap792gacYjo|J8~;c5 zVnv4fSFJe8Vep!mfW?S%cRBB^`-;V#*#>GhwisMkd-;)bUMa0Tt^BZ7pgclamoF+4@%K4YR&CEM z$10a)(AYy_8`vm|?pm!`^5TO`ljL;PjxjqsNZLpVzjYGN{Q!VtFn9%So*du9^l< z>dRMP8NMzqPP+k;AF4^C&H_(7o^of>i{k~>sBN=mwGiGm_1}*}J~M)vv4(qf3fu?@ zAIO_^|LcXd0SX)3%eRwp!TzS%FQ8j4bQ!-pG~Vi3H#8@?q~grQvaKny2|inCJ^je= z)jL@^pYLA>K!uz4BdrvXvIcRUR4CRbq9USFil`GTFW!XN`0$Pa_NZT7!bz={|Eayy zmrGaXiG#aqqi%pzw5G^h^Fktp-KX3hkd_O5@7*&GQn2js0QC$Z7ykFj1zoLG6DdEo zKHK%g8k?uap^>o`o@w`|{y8xIqtgK2J0gW0(pOR76Ki9ZRJ+7BqJ#%>FP`E?mXx==S^d9UN_|G;)7>P_3@T&c zdfG7iVNPrqcM@tdiSPGjoP{WARpF5noUr-J>{R}rWa%T}kt**593#On*)uP254F_v z--C(i?~|0?pLotZAyfo2{j_O=3-7P^;=?-kY58K5dtjNAr@T>!8Y|PYZzm`huNn(T zF8|B8uy;18E=hJ{yUcuuPEey{~3Cr92U+%9~fE~Mc z1V}fxv;68`LMNl&B6ls~1o%(P{GSJhQD)j!TkBoc@)xlVW9>%5oEQA0)s0bfQXlGNNbUK+DG_?Zvy`EwacgZwYZ*1rER_~m@|!X43U z(3wT@QmO9_{gLs-4w+2l1c0U=H-2)P4P!J@kK|Zr{M6(`8TBBjYOOi=OmH&LFy`D2 zO&$-bAi!hdYnHlgzp1UnUxo1I+;YN1jIhly1+o4^|CABhe#Oh3BGfGIT zVqa9*!KOP-%4ny8&*UGXS_xIQhli?P-3yuYE^^F9d0uDVZ-)~}1$UQd39pLwfH#rO z5N?m;kZ1FDaZ)Qyn$KU(C&ZaZh&t4@C|Osg9fmvNALB%ZDJ*KP*C=7##Uyc$FVU#P2zHq`Yg($G$cElnk&`1`N!pGFilK+k^W(m;Rx z!gty|OI-XtmXUUWR2d%?V{84>u!I;r4kKp45Y}RZ6*0#y2us|<aM8pAm8VgG1G#i4-|*2|m-f9<2PC1Pp?-_5XStcQ zp2&k_=7+TM<}J~+kr1s*;oe{%`QOB&#<-rY;z^^TGBPDpU)TFM z|5&A;AM3x7_TE8Fg>BepklqF92nYm0dhb%DiAYg;6ObB0=mhB?AiYT!P^$D!D53Y> zK|)PXl%9ZM6y)9Wemnd9v9r6g`zVJ5?wvvh+h~WSGKDqnvd)p|t zE1!*u*|}X=Xc_UY8!$r1id1-*&hS%}#P&uJFIR;(9LgLQxsCm(Q*kJ{>*}OO-I+*| z#kwz8ek+4v;~Ige#_llSRC*eYR1|@^-t`mg_D+2Wx{+y{$v_>g-mUM$B0JOPvNGFB zY%dce_ziL>67sCXa`CLLzFmKo3FC|^h>d(VPcRqsAe&PX{$pZz#k_FxTGbk#BBQw< z!EnqeSMXb}XOS1O($TK3Z=GHo@xBA6lfX5d_B*93_thpsq$_Fy&oe#pdq)Zz_{jkv zaUAFNL1r<9vu0}{98CIw9q-9bp_M5lp;vFm9Eqd3C3QEH@Vyk*qgTK*S2`_ueMf1% zQMA0jW5s!y>PNT#8|i{l>4a~BH!~f8S03r&a+(ez+`V~(y&Pd9YT?kwsJ;u;0Y!a` zV?Pcd8~O?YyTomypB6;B{(l?*!ld`EW zr?^0x9cqd1X*k^B#W7yRS5G=s9tO#(+-(hr+neq8LO|+d|ZU`NWhTUNrVT``CR27`O?R14@76`Vp)_P*;X;w-*EKd z_@jOS97lM`xZ-ZYgEa^1VCP~=rHF^(8_vnbwYc+>bZKN7lP?SJ7A+`QEL`fevcgC4X1-3#hmIIz@65LDKa1J{#Fum%VlT% zuS9F9O4p&-!hbVlGfjT4Ezt~ZK0Vbal0NQk|LHh=NrmN5(W_{ml69s#r7;oKAQnJ& zW*v7~s%s^Y?C`{=CiN!)rkJ=B2TS$}rET0eE*3`Ow6HUza=Z$^cO*V4 zd-5K%V*}&-6BO&}-BYVGfXEHxx?8`8PpF4aYvHojs(o`Fi7eU@8YhLOQOOQHcr~8M zOfFy@)7;uaRHB779IA%^LjmWGT#R8tK>foh+E%MC_L{F`KPH#v^XWThY8ywBJ7ji2 zw^mth>36J-WZC8uk--=)R!cX@B8~ayy@=*G2}SLrmdUFSc!9am%uD)vKHF{S6>7@G zXE6HX6432~n`ea>l3u5fN?Ul+i-k{Z`MmAziA!gPP_rjS;R|)?f$sNC5BzQOAB8VSB&Yp@X+R+s*yJf6S@>q@tNMPsWk^yXm~7V@%i zMDf?}c;%p4xc2zSJ-)eGS0^Y;NP39j?KBMhd5qKzlPpIi`6-ghBAr$eo0}Nwgp;$t z+kPxzwm(e#E8Fi=?_oywq~++5dkEAS_F#%-@qp&y%ycOFS|c;LekoKP1C_GH$qjFF zjk1-EN9@1H-WJw*WQDa{8n)TeQ)}SLGPRT@V6p-;g;&VP^r;>QN?8OOqk(lzkUo8( zYbhe~bNdb#jivi>3>DMjB=WBAjs=>4FKvso8jL@Y1C;M-Q&fXE-D~jdc7XD6EP`QhuRh3Z6=_%*s?-S;#>bn; zB@u6*Zd`0UtLQj`%6n_iZ>Nfraf}ZfpK`QsUendVFC3o;2|e&=JIOh zslWsU2u8U+_*<3uY0lkQJs zL%eNl7wYLGjc;dMp{H~)%C&yllxP$EEM!Ucfs+zQ_0cQcaN0w)&>Zdme?Ivwcq%*pR>*@K8Ws+!-6xQ_{cx>aHNi^Ic;g zVn}D?4f*;n1KMFumbf)mhegqXCCt@d_{{9Vvwp?#`vwH28a)N(+vznzJ=n%*XefUT zzR?I#?0%-KQ$ua_V@8`^9Rl;H>AWwHx~4iVGkaV@vT1}Xu4+8A69XWP-6P(WjZPKp zJ{-qSD(DR^G%lW8lW8orWY**fzLWvMzYo@H0tVJ_b_)xS_2p5FDkr|+_AdrwFAM2a zp*;mh>f)7J%mx!C=C)|4U#5-T@-L~}hm!rj)WH7r7Iq-w7whI;t32 zU|oko=4rO9kF2UvkOqwqLvrgwQL)60dEQ4;uP%ORT3@l{7mAHR5VEW9=iJ|oaA3I5Erk$*3J(!K-vv?#-PuS^goNR z8?U_1Zg?X4G*`DG*js02Iwo?gXSJgnFNaea4ot!nMc6O?N|7=yH0fA}^{q`@O)^9u zNvcWwJJ5cz$#woR)`Y~%t-m#Iv5(UduZ-WfM>Z|qjshLVpUa~ze2aZ!>Ii|!JNdd4 zpKsm0e~=Aqjr_2_q0Kci2)`V;6<$%+!cf1^DbYwWxmK2)uCjWj3h!9tIW=>!*v_BM zk>KZkDFC`qB@s(TDqvw~*vNLsINMcYokuG^ti6!Dfx&{W_asAYqFHeNtDMIvH@G=D zGcb~QBb2!DNJS2?u^E^tb&qe*AUC80%hV|w&xBEIdjQ1&B29p9K$41&zjYVqy&;EE73Iq_16UIK= zaryX5QzRGx6u@=ed6~-qMCo*rR|(Nm0Q&KxG?D24b5HmGfwceMV=)$C3_Mh+@j)+F zD?!5!5Rv7We=8c}KN-vH0&uy5#SihhWhG?pfP_{jP6lqbX}dC$3hSHsLJNbk*w!p@ z2S`cXp4@-ysBT0H>d1Z3gr~;RqEq7Ie%UkGd9Z1h)B{EIB5Li??I`TN)HCv~9I}Ce zGhHXaIo2|%Jqfc$Jv?jUwnqeWpM+a?e{4G!d0**Y*LUW+Yvpa3=BXhsUSH6*8cI7` zw(XacD1g)DUSHGX@AWckuY1W9DiOt)6i@9w4<42nZ6ncScuGE0lmA-YNYeTP?uA(F z&vu+9KG{lOt$5b|s)uR=65z-4iFJ@5|DF8AR`5YoiTDkbrE(Yq+cKJKVdRTZRNE%yWNyTU^>@&x$V@*}bd69_oxsNgGyWfDn!ZR@}%ns{2&b z16vG=CHITioL~H3mjA4S-ys}*+N~)|>ZBuLIqzZrH73^ooMjUt!Wpdm?jE-8Dchcv zJk6Mn+bT~x%ZS!v0T=8n|9q_abm6oOqObdL>9l@riT#QFcDdjuM$k_R(0Bz%YWU45 zA~95{;@IpN=e%)y;spt*Lh2KmstcYzHC$R`DEI#EmkUF7e3s@?dm}6Sc5KdU6_B@7 z^~6E7-PS1K<)JJichF8xGI9$VRYS_QloO!Q%p$ASLk`b+^Kd1PZ zaAS&9JRYnrhbSWA{b9-75984g5w?Trk!V%KfQXr);?eq?S=84LlDRq(ugCg(9}sgQ z8gD4EstHIPzlI~WhyS!ss(ai-zefuV)zBG?78HMLQ^s|H#iO+K7=!bMga7LtB?>V&!lVHwR-;EtFsnKeFpWnw9SsrHuUJs={>WIU>p}Ze)yb09SX=IhE?vZ zHhTH5Cl`{xF20&kCrF5*h22dxO_iIc8`GUiygFwHWx%>7%Y6P7rmw?mqU(f^la=$^ zXlv%?_##{Td7QFbDLh<^8ct%_=(KoJ+OgHTEmS(e1NtBmLznK&vR^%4e^f$-_AFfVA#uBT)u9TYvVWiHea?DFuL*}a?O_6 zbyn<@5@PH&CDOC=&j0P-UK#Gl+J9G-A@G|Br*nr@*@Vxs5iiH66~+{(Y55S4+-h@Js~mcljI>4 zr)rAT8>tIDQ;V(La0VhWuTxmugV;QO2bO%f_`!8(6+5$3NKPiH;T%kvK58z~6Uacd zM_`KN!ZHu`5w3a$P%{CT!Q#oM*5#c<}mLo!P_$#qBK+N?}3Or zcyo(1lchGswwy;)P1cmvsHN>W-$iSwJV#Y2-**yO$9m{_z=Dsh?1I!D{^h0Ilr;F% z-P_rfx{xjSjBc72%lqRIu#tVe`{Xg?$~tvrZVfJ4fLG&ssidN{+H$K zK9`fF;&_~NV8}OzxnD7On#*O@ETj0j|s7-#FMP4iVgf$ zWjNn!X>AEi6!>|qPuW!!Me*-T-v&dorwPbRP@IHxiEYcua4_v{_tzcPg*yLUDYa$M z^Lqax$qkV`lXsVlx(md%vsnZ8o9o$W4u;B#H?s5fo|Ad7t;ZL~KeNQPTP!P*ead-E_T;yPTxH%$F6urrVVsHcx~l_4nS$ z+>=?+J(jL_%?_O(F4b(XJq9}VO)J0pNp@}ZNt2ObAK}ig^Pg{+9E60_hG{#`>%{F0 z>AeZti|HfUr4{|uwH(U6*QJ?4iH2Pjf2w&hqq|YHZS&<&LIPY=*QDp&rNH$%?Xf`^ zzt5fl$@$n?u~?x&sv#Z9Ql*6WTFNVx^wmkED-0Yk7R)OTW((Yci%X>)}+3usUhTqdK~J|6p`y(>p1_LGV*EN%3G5jkvE+N$y@+ zjO)^`e~Jd8fi3GYw5O2H)K7k~$V=sU6~Y6T9Yb-_ZJHq#!WEauE(~Dd@weXqinPBu z71(3#r5lL=cc2os>0f!Ubjllj$05YnLHI}HBOzYH_B_{DB@Gf*c8YkhJs1%Lh%0HU zm(y5w#);?VW<7iIvZg=(P-}F=jt>C{Y5nJ`C#TYr zVlOPxCReJ~VEij*Vos=+I?}%l!I=-tUeV=!rust2ufS$_@(p{g*}Ej>d80@Vq>Fax z*Rro8J2NpPrp_9A--)hl|P?Kk(%8yt2$$QqIp_;$W=O>5Qed86eb5W!SR2hK~2@&?ye-!J* znxwoq+W*=_ib)t()9M8sIa6rH&;rji+;fCajYl`H-MlYGzc5(Li@0JMMB>~*A1vuz zrnK;#@UZ}89`ocA;k~qXeZ#C7+$l6Kno zwsU4Ut=hsb5tU`*BqN+l{N2P0hU~x;4dz0EsBa(jmU%xYg$V)6;#*N+q&-ILo(Gij zi22qurQEyubw|_N<^)N#Kigk(v>lVO^5B7DHJ4Y2Fg7Yor_( z6o2iXDQm7x+fZR?eRdc%K4R!i(c!{LnRSSQ-Py(BOZ_`{ zTez>KN6H?V=<&;Z&$QTd@8elfzV{LC3p6wOarBp`Y$WfnR+_?0-H-e8JqeK>8F~S9 zIZy2SN*&^8{CoyzwS=vTutRLF^=0W%a zoHl|pwhXSaZk0O6f>iiOaOD=7ru2{dYMkxQ1$nl;$DS}9^=xvoby_BCFI#8+y1g#JV zj3S~xsTY^vXfecy;cdYwjDgB;%M}^+iJzxRPnS)pN52iny-GMxd_X|23@ZY+n7mmV9+)rBLTD*32|%Agy-UW_c=S(pRV=s!!<|yq;kiBaYH=#fH+z9E zw8W;S&_?-(g_txgxLSZAn;Tw%-0!20YDDb0)%d>=o$^^1;~3|YWaguQ?p-*yTw1`j z^{lGtdOw<_ZMi}pE`nOSfIy5NP#6p;r{6K1)JO#xjIe5AZqD*Io4PY%^5U+UeO@*9_T=POWy4B*DeSEs7w({9U+nG% ze0pU4udt9q#nD3%l}XrneW~oC8p)akCND;ako(Jgr#FZca5Z@%t}WUw_pgl&KuC6(iCWy8|pfML2(g4pzkLHe~k-CKo zta{D(z+eAB6;~_tbTxOa$~^M4q7}cn5X^H-he3Dyd3_s}l;qn|oCfW=Lg}h>F#jTK z*w(UYZ9Nt|aw);|^*vUCy6L54dxF0OrC8K79T4}~Kv#u5(_t#xXQEZ9D57r_`9p$N zUyF%f9jnN-FNQ+U{ZzfkWxL~y?OBG5s1`8drRe-G$sE`og;s4b-W*dt-T#1cj3?7HqZRISZHElXSe@`)BmB~;}9EF%x6nW{zWagYu%q` z9Ft(N{SvkO>^<1w+3ft)dZ5=S}ay@gM+ zT2z)mCw=h`u@<4g)fFEdpDb+6`v_Mju@F!q1`F9sLDq^a?*{@6LOM9rWTa&<_BY@$ z5ML3lGKd)I2?##Mh#aAPCL^L(V+&szE={n#=dtI?jM&=YV({vT!^&wx@K0x}2VlfyrrH8DzlbQUkk=k zS@{-+jw$PO0T(7|1kr~ZFF5w(x6S%tXvf7^ez=aJ)-uqKnV&4x?~Loe*AyAuN(lz1 zeLvmhI-BhaZDDzD_yIIEz`3mz+Fa&gC%>+87cY7QIcGdBW;Zamj5qJb{+y7huG{Y| z7I~b6e(g^u7#v6SbcCDzeW%JfHrHq|z>v_=1|MO!qO4QVGu6BU45#>(S|+A&dIy3N z_3T32mY@JZO{a8tPq+(t!#0Q|O*swc#=kLe zoZ0~%g`e#$9((}JUs-oS3)D!lJsP$lr_OUUY8L?T6K}`fpIXAK{34*vO)}nw1&2=C(~n zI|R|o2hm7ApQ(2{2Aak1!kO^vRG< z%dgn>-%)*Xp$dzqq0X54SN5A81vynr_0{?N-PZ6=ZzYmJpNVoaI=-ylli%lt2zC@KINM2;CtP@^x+4QVfVB`M{(9h>$hY&fS+&pR$yJmA!3gMX5M~_>V-@S z%LtiwB*CENCKC&>@| zD#!8tT0(U>5%jZL=sPTqIXBQwei^F5eQYPWr1HRK`#En%PdBf|syN^&oq0mtrIqaU z5{h6+&LyQWT>Kxp(Er=S>HjIEth>aBJPI(bgp%p|a3IM7x8`%)XQ=3umOst^ESYi9QBq#VaBS0|jfQ8RY)~1?zGAxU>TJ^HL7+dmbZuE`mS7j^ zW_4n9#x|QNe9`K&E1;zDozq9`?F}7v`YOJ?3p*d@uSz?Lp12s(yW%3Ms%!6b`Y8o&0f?b~!sA-lb_5qubU>wSu2|Iw%JUuV*=J z20c~>{cYPG5Y=ifknlE#zirwvuk=~x{H3q6>J^~SF5S80^|P(5M;1HjznBpiMTf*+ zDLIh47;!MUAQ zH^LKr=YgpWh&Z?;`s5Qn9)=d9^{^})-Vw%`C*EjQTYaZHV!B$t~3Jn;?9sva+axm0Jk2l)cLU3jkiFq;C^sM?VZVtjLyJ`!-4}95%{lgrcg1QebQ{g zD*KaVQL+6dOXXI7+?XW~ZF|T0E9SuEl#RhdJ1s115M@84$^wTB6#!ZnYWLemS%#gq zN@L+%(Xvq8C-+WCe2+xAbJUJbSS!pFW-6L!O|MNGH~Z)!oQQY+p7oTvp=G}^l)UIj zeRfk7#hU&hWJa%@@ZqtEmf*9BvVaUtM!x6T>JQRB zKS%@i?a#2ev3-I!8hC)oxo@z1qwb2X*ON9-S+JvE*hX^813hX;+zI_iZQ zy4S#uM+#(yVyL&5rk$zl%cp$#64xFrNv33rz$ovpJ7Mn)+i@=T3Ea5k4l6z{EIZ6W zwa2A>bvMHel4r7$d4ZLj2DaFKz5n1UsD3y=+HPZ`X6)8d5}g;ajX+bQ9x19r=I#5%le4L;n|!$G>u`0#Cdi<|3E5?v=eT zP%_GQXo|jlK#6)hgWF6PgU^I}-TJE7#YHNWAU1>NnNd8K#@VcLDN{3&A5%wCwN$L% zeUwOW)}2XdCTwCaB-(pZOv|}?IsUGX4uH(6vZzqF7jt0eGAccMJc9ndUthG=xjKHw zv)o{u+*-0T*$v6#$WLN&CQgt!c+)rppk5)W&EJ!i9m2}2ck#I+SsvXfan*17{I8_! zJzmJPqJW0$c;8wvKd0SR6ZIvhE-5N&OUpCrAe+ZzP*Vv+&JXh2D)_3xh(C&WSHM|c zJqcw*GNI0@Dy;MJnsSu%C!wLk#os>p9UdNq{s;6FTN0-t6sm#GuE&3Ww%mTLO6}oZ z>V8%5RbtEP@aoVB>L*>QK=33}r_*;SK%!jp0hL+fNlKOV;clz>@LF3(>fGA(GXoQL z_y@lG_jWGWT_&L@N?$Pre#T?8E7$1VCOL(!{e?a@&?QW;#5hr`sefDje<6aL3#&~rv`}R&je{(|e zpwX-qy2x?5$}7sQG%eO6!wSCHEhb}DuZO8*Q6OX;qc8k^!5ru%8|5KhNVv9SQLw&DnW(E&nnNr-ZIbRvYD)!$Al~_~`*zaeyg3qDE z*wpt*PR=P0Ga%TC83@9lqr2d8%KOD!e&ZeKyg6=^xZG>P9~9H;H~Lj@7a{%?{tKJ^FQT<>oKFbRCq&fn|F#s2JSZT;}_#IjaDRh-r zes6OP3Jdb{qy8Wwd{Is(N)XHNky@mk8AX>ejX~(DSR4j7 zK5EZ#NR8cpjPxN|1nP99w0vpsb0VA3{~d`hQze zmJ6vI^r`wH(!H4kXC(xOTZPs}`o!|V_cCJa<+*4MBklq1*l* z**9vcH?uQ8NcQ}?QH!Qc!6wsFMdgIY1%j!uAKi9Xu~^Wu!wi3l5EtFfKk`vA8oyc9^?L)r^{!J zUiQ-+9SN1$^Vphby_;AQY)OJAkT+|~KEf7}CoBUIfSulaL*3eZ=8&Tqr;-#P91o|{ zs)Uzdo@al?yL+7}bMKv#r%``7GM8Oa%at+^rWG9HFb|wKsYghrbfpV`Yl+wT{uRIO zMXdT07gDrQ#JlH;tk5J(>mV^AyD9Q z?TXrx7!yD5GUQOOp$DSJi4Gih}5F>Z~+xcY~YGI2GD*ExjwF7ORRtRBz?R zyb9iE-qf*b$NGz!UcTNAbzo6yVVa~YB6#OrlMCllxHaea+&Je^&vqRR>U^xBXsT@OZORR(o^_ zxw7L~34p}D)erIUm{`y@H3EBAWwX^hV4=|C%irj}E+Is1hiWY&UtLbY>ilbq90eIRqG3LXAxO)amm?X}^?v2i;MiVrp@-(x_zF_|((X zN4QsCZ8jX1L}5<-;5rlIhX1Cgf>-6Z0ZLHgf;UBxI#L%V+rXh zL4)(oTA*Ot^8t3=N))x&h+;!RgCzu&+7GEm)zM1(?o3O~lI!uhp+s8WQ<%%A%Fdy? z3(Ifk1I^@$RcIG3(kyz97P zZtQ8m@mu6d9d}E6*9-5aaneFUefHpIlMEqIH02GaA9F+w-y4w@;N#JpwLX|4Lu>4K z$}cXm`8qACH>K8=n>GnMV1cZvf@I!8msOEC6W(W4)3g0lH;fBN?nbz|@$&2L6lH}n zyB}+TOP%S8+XhhS%ZU>?WZl(g{d7@&cyT1RfJlMyBD=Z} zujx_BfgNkOcR`O>>|4t7UJbPNY10TcRAB9mSJ~B9obfS@jfp=4J9U-SIqIXQ)_&hn zRop1OmV58yL}fU|M9o(8g{9FDU@-X7Zj>47bFo-%;~VW)>w((d{crpERo0-?pS8+O zCF?0t&*)VG!_H56+MmTqBhZa^P;l3gThVpy&VrCedOP(X#iz`kDyDU2M+uQMTUtE_ z;BT89phEy)Bf8v2=@HKMUm*@HRj9^#r~X9w9!R)gYYihd3`o_opuKQTQX0)#Vlx0E|SfSX4p2B3%D{h|2qQ-n&D zN&=KRxvB0_A=B@E<|gu8i|*V>Puk4c%Le#yI1gNw>s=oRh!_<0`rg#B?!Q?i38^(9 zY6dS#drs&+5U0`w2aNgyxCf~Q{GDOjwHx-&$X0dW!?b_RT?@qB<#i3wJ5_P`!P}X| zat0~J!3MVZM}LP4AUjtADE0qA+cun#?XT$%FD-PPJ2I)KhK0CAHA$#5$pm#9b%0Aa ztd8eZ$;EN$;`%=Am(W4}uBMg*RO;qpR-xac17oMi%3{qPaFT6GoVo~p+8By5h7;~_ zltlZ_#|O4T5U6SV!<~>2RxihdXQdWztxG)q?L~DFz3y>M6k$ zXkOb-eOSD6b%Z&ve7@AfL1AY|vLyAbL+XRfn^*>duR$fPTXx(FNK@v7P~+<3Vs0Gq z`#^d~_)Bq__Yw-33>~pA90e!FG&>~%RV4&J*9K1SRm|)NFDV;0;Fqn}ex1rrUCfco z4#S|ds5^IX0|{-4Z_$Mzp(FI>6pvLBL6=b8yn3(;kea#a$Jg%t$W9tl-_Kl z_?#mg`JHJE$9i8!IP&!g@ifsELu2`(*8jct`2Ro}{5iks#ErFkC{tpOhr3Vu82WK@ zpM0p#-@Q_DS#F!QcJ1oRWcu#8V*=GomDC*srF{|_iSXcxE#}2#$G^R?--AP8%6@xA zdhH^rhJD`Y9%dI$7PdE(IPV(VW88vIfcEIsNN2k3a<9caRA{ib*{;`*@#`;oaEh~j zp8&R^tB}Xv5s5LEf?LWmf0kHwi|C_28KAU-(J<0$L3rATqIN%y77a`wLU!r4;GCE- z139ae@xRVvg&_nv8=^D>?qwTb&+)9bFvFOd@OdA%+KTCGr5hszF7){mJNCG7(`y^5 ziHSw^z}B~^3kfWYdQ3d^nZ+ef!l!}a0;z{iPcC78eTz#ZDi5>bmP7lE*|QNuR(MJ*qriz8W+k7u;9 zfL2nbSSLGmH6w1tL@7BKF(}Yh^y13A>))qaI+W_$TW&m)Wf@K+rKsl1VK{g6Hhsvu z^0t&687|j6#te<7054Li$64clX%qSgHbU*NvEwnn#8_?w@Nw&ZQ%kDdIv(EI5*qa+ zCzN)!8`;+1Y&~scEBcU355H86+PRN2Pf~U6y>}Ia6^m;ZQli#6i$IIwGs4OZDlNk@ zt*bKDR$ZTD9-u!-3})sTfv!89L4RwnQt`kx*>5i{D`Kz88pZ%$yEa(xr%b9KhBk<8 z8}oU?r+B46zH$N+yfQdM(hYSv9%6~Fa4x;MyQK2SU6rOjXMYTEQ^yAR%Y=DEfM>n0 zGR1i$KeMDD8BxRB?-5&ETzwP<03hZhoEXv#e@ZoF2c)<@m<)O%h5F)3SK+V%^z!R+q#;6w+!&U>?GIe@tpB< z1j&1*3J`8bypCYlg1e5J^${=2Jl3(oLooJagZm|99FCeIXIWlLEij!k%JkhI^TNw{ZGkJp`5Lo|DT=_a|fUx{E)@q>DXqm}utX2PO(y5~Svp zCEm0#jd>DBYmfceN3!IJRDz)au#on*;q5Q(bn@xb@L}Hh>?K*D51(x$_^Xik^Pv~` z*5@tPBp)*2PV^HJzEbavW2&5^ro4ve@e1k`4v;WyY*#*@$JYJ#Nlz9+Y*z} z+Q-l7T|64#%}8Dl)6f2U9wp4}=C?!Z0kq_9W*tmH&#ta=4*t3~@Ls<466MY2eVI@S zCK9&NkP{tZC;2`0w=neiTBw50e$qd%#pCQ=q-;0aR#FyNVCF)X+gW37Joz(W6XVv= zEzSB*V7_g8Y{#(jbCdhCIu!t%DSDsvWR__!b8K-UmL1~xN|S_~Q}$G;H9kriR*BEG zTy2YB#E0)*TUbx}QU8v2?HpMgYL?=*{(-GWaO*lsrHt2uyuJZ+ zGAVL4EzAD>L{mAZKA&~?ir&xENIu*e3vSx~rq+|kXx7kiusOzy*<#~?W4=juwf$*V z<-e9)$=>u~Ba88z+iuW)gH@<6azz_nH5Bc`&0k)Kw*NDsc3k>?a^2s0_6pIKO0wDW zyYO|Zo?=4~be}!-=9bYtG=MgN=|o7YQooAQiAh~dP_I7_z3d{p|KS${!3!h6h*TMd|gXTmDh;Azk@=-84&e!yCp+&m=3n5;xR_`u6{D{VL}Sq|0qhB~L~(^2ze z?UCHyu!c6X6)OX@8yr&=nzRKq%T& zaALq;F4ao+1vmoJMDjaMNd4$Ha-ZVO|K+>x{ZMUJ-o@**7xr2QZQ!obRM;nO`g<=< zuU&%tO2k;$J3;4e|0lIOV?IWe+PzP7DYdZHDruTmT8@P0KFRurL?Y{hffHKwZTmld z>t)za3oqech2K`r%|mJ*F9FW1+BoX_iQGvLZj%ZE7UgwoV3WC8a&n3NZJ2Xw9YLeR zfQl;;%?=aXn(w>VQ5#$f+|9R$b2v~CB^Yq9{!2OxqlJ4w6(K?j1!1bsp$}1z>B+Nl zeY1eTv8t@o-&~$Kha4QDR+lr^>P1%a6S*@x zvZ5@njH^N^v9h`UN*8`S;v1`Q@f2$~^Lki(a6upB=w2R}X*R*7)a(VCztht#K$rrw zuK`Cbp7KSZ$>PsR<`+4<1buzT;w!WxSRw^nw4Fh2%J(u-mnb=L9LE)jR0py$tsWmB zWKv3^Z{*5#X9SA%keD;L(s(6ueZU3_z9p_r@4_1H_M5(>SCeOXKmlvJ^N3z_?B3!)A^ z%bsWaImR&ICwUVtz9ZB#vdz5ig4#Pmou!cq5$rb-*!2;oD%t+Ze+^Itl)iqR7ayXS zet?ux_*nyEBtfo{HQ|Fj6F4tAD7KG%wnjBh+D%$(?EbTry!0< zSI~!oBe#z_%==<7w=B4wc37Q<(UBRd?JlKpL>WY`+vY-p1(@oz7szIc&&<$G0;B$~ zD_8v#NC{^QyNEA4d6seOGD!-1Scf0`M)Zi5u=Ukbg1`q8b?QzrwonGDOG>VdLUd)} z6(JN2$Al^RcQ)sq`sKDfDyk-Am10o4AFTW2^()2!#!vhM_IGA6QuVW?>`C+OVLg+@ zR~UVDpZ=LktyWzJ8m{lut=wJrFKz!Z5De&HnFm_o$;W&QrIAi|0ObzL5Xk7IN=^+k$;G9Nf7c0HfL5Ig-;&@O_=B zPQ5nx4&|mv_TQ_2_P<~KfCA1WXLK*K;ga+h;)Wsz7)M1Lg&y5VA|nI6p1ct$f4gmI z)O`lkJIa(WjHS$%Hg3j~T% z+s|}=3$M(7j_zOGsi(FmGZfw<@|-Utvx1?cT@Sne3J^xGsSv@L?Qk4xUBRD7`jI|- zdx=Nzk4W!Na)x*06P?;k{dk&(qQ1O98e(;ZfJqbs>h!d)3R1oGBz;@I{5S~ZyIp#R z&Wj%9w&qQES9#zIDTjQ+St5ydLCL@_(Xk4+(7JbVC#3eBWAxFNT^mZF_LRUe*Eag# zdy)+xce*?fi8ryT37&7S*L>)f4f_)%k@gh3WjtKYSHE?2VL6r&ELbh<)#5b$M^`wA zrmF#y2-*v1jN&B4kyO)^1(mkgjT4#G%T%0>HWv$w@#-O~8J;oFljiqC>uBm>RR62X zG)38XunFBXRdhu!{l%=2J8Dr>gC%sUd148?kKp@NjJu0!cQ-7p4|B|}0t0bYDC@Ci zO(HUS`9*C;QymcS<3H+al{Pp}deleNjI9{UD54oM?QDxv$}h_#S9b*KWsf9o1pbM6 zea0*Qut!mVZXWK01|nXMr+a#NhEEXYfmc_pGs}8HllPTwD)_!+A!f6Rt9<4lp8$r> z{~SdBFaCb1ih|i>4M(&#j?8LM{i_k9v9IqWC7M}K1h#MuQ$oe@!@0L2I3FyL;%(U{ z{EI=9XbH#o700sGw!Q6C3$b>7xPPL2srC?~=(4YOo}wz7f3F_~I-5JZt@@-pO|!eZ z4Y?kw>20RucCugO3~>vGUKl)jr|sQiY@1)GWZI#ugAD^R%XZ*tdbq$Yv}L=JMZJu5 z7}%Pj*8=g!pxeT>ES;QHf9z#8N?x#>P`Lzs4$MN!4fn#HN6;M=R7O?9&+V~acTrO0 zmi3E`+^sI2zC_(`htf8m=Ww~tpH6}5YP$`5yB*DIF&d)_^jvUFP$f9l$U zprZJ*eou(lmxi~1X;32hm*KVa;VjnTM#28xaV>=Dql}P<(@fIony<*0F5ArD2#FmU zJGHsZFF6V3P{eV^A<}noWIKpgEx}W-RU3=GZr5s7_7vKjcr}_gO6k(3`{xl}e)*jBY z?a?QO&;5v}1PWz;YMGy#MXr{}WgD#^upZb)9d zS&t3XbafXkUcbAkg5>R)m5FVR{3$MUrxTs|ogDVjT zdj$DVocYTXQ;k?ug_@Gyq{yW?M@{&&k%!8?PHYYQdQ>)?Nk6u8xh=`ht=R(l;dyi1 zh1@J#lVJ1IOph*+?CJwTG0gjdxTyW$@3@@WeFHi4X=NewirRIUnWp1vxe|~B>PLJH z{||`&x2s=Vq+sUebBq%{H#n#gKBNz1)B$>tHawIm*W<6t|F+!^qZjEWOvyJsTa$Zy zjwhQL->GX48PzlI_*Xw#-y(IsJL=b^=a14mAAb0^P_XH}R}-(T`LO`yMLxPUHxBna zS)C_+J6Zko)_E#Fbn72+yxX$lpTduJuMbnN$fr&|{LLUjB{TnN#~DGN+@6aI1AE%_ z%+0RHPtRaqoY`i)?3P4c?;AChn?*5}GYbrUx3eqH>Ep{f>zJ6FzbxYR&09{}zHR%s z#?Ymit79?O;u{RC{uECm;GTkbQ2!8kq0{HrE9&oW0UnwP-0RzVaZ&yGbqoJ9)B)G3 rb}!)j)itVSG<-(W#%R76EfYq|!_m56v@RH}3r6dL0jUf4|K9`vBvC35 literal 0 HcmV?d00001 diff --git a/docs/typedoc-sidebar.js b/docs/typedoc-sidebar.js index fc44d7472..e99a55768 100644 --- a/docs/typedoc-sidebar.js +++ b/docs/typedoc-sidebar.js @@ -1,17 +1 @@ -/* - * Copyright 2021 by LunaSec (owned by Refinery Labs, Inc) - * - * Licensed under the Apache License, Version 2.0 (the "License"); - * you may not use this file except in compliance with the License. - * You may obtain a copy of the License at - * - * http://www.apache.org/licenses/LICENSE-2.0 - * - * Unless required by applicable law or agreed to in writing, software - * distributed under the License is distributed on an "AS IS" BASIS, - * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. - * See the License for the specific language governing permissions and - * limitations under the License. - * - */ module.exports=[{type:'autogenerated',dirName:'cli-config'}]; \ No newline at end of file From dfa5cb59e69141b9339a784672f856913ab67164 Mon Sep 17 00:00:00 2001 From: Free Wortley Date: Mon, 13 Dec 2021 16:23:15 -0600 Subject: [PATCH 2/6] Add CVE number back to first line of text for SEO --- docs/blog/2021-12-12-log4j-zero-day-mitigation-guide.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/docs/blog/2021-12-12-log4j-zero-day-mitigation-guide.md b/docs/blog/2021-12-12-log4j-zero-day-mitigation-guide.md index 4de777749..04b81abac 100644 --- a/docs/blog/2021-12-12-log4j-zero-day-mitigation-guide.md +++ b/docs/blog/2021-12-12-log4j-zero-day-mitigation-guide.md @@ -37,7 +37,8 @@ authors: ![Log4Shell Logo](https://www.lunasec.io/docs/img/log4shell-logo.png) -A few days ago, a serious [new vulnerability](https://cve.mitre.org/cgi-bin/cvename.cgi?name=2021-44228) was identified. +A few days ago, a serious new vulnerability was identified and published as +[CVE-2021-44228)(https://cve.mitre.org/cgi-bin/cvename.cgi?name=2021-44228). We were one of the first security companies to write about it, and we named it "Log4Shell". This guide will help you: From dd21d1611c820e53f14769ca8fc80622dc2d3183 Mon Sep 17 00:00:00 2001 From: Free Wortley Date: Mon, 13 Dec 2021 16:44:51 -0600 Subject: [PATCH 3/6] Content reworking --- ...1-12-12-log4j-zero-day-mitigation-guide.md | 120 ++++++++++-------- 1 file changed, 65 insertions(+), 55 deletions(-) diff --git a/docs/blog/2021-12-12-log4j-zero-day-mitigation-guide.md b/docs/blog/2021-12-12-log4j-zero-day-mitigation-guide.md index 04b81abac..1cfa3dd32 100644 --- a/docs/blog/2021-12-12-log4j-zero-day-mitigation-guide.md +++ b/docs/blog/2021-12-12-log4j-zero-day-mitigation-guide.md @@ -42,8 +42,9 @@ A few days ago, a serious new vulnerability was identified and published as We were one of the first security companies to write about it, and we named it "Log4Shell". This guide will help you: -1. [Determine if you are impacted by Log4Shell](#determine-if-you-are-impacted-by-log4shell) -2. [How to Mitigate the Issue](#how-to-mitigate-the-issue) +1. [Help you identify trusted sources for Log4Shell information](#be-careful-what-log4shell-advice-you-trust-online) +2. [Determine if you are impacted by Log4Shell](#determine-if-you-are-impacted-by-log4shell) +3. [How to Mitigate the Issue](#how-to-mitigate-the-issue) :::info If you're just trying to understand the Log4Shell vulnerability and the impact of it, please [refer to our @@ -51,6 +52,26 @@ earlier blog post](https://www.lunasec.io/docs/blog/log4j-zero-day/). ::: +## Be careful what Log4Shell advice you trust online + +Because of the severe impact from this vulnerability, there has been a lot of discussion on the internet +about it. **Some of this information is outdated or wrong and _will_ leave you vulnerable if you follow it!** + +In contrast, this guide has been written by a team of professional Security Engineers at LunaSec. Everything here has +been peer-reviewed by multiple security experts, and where possible our sources will be linked for other Security +professionals to verify against. + +The full list of common bad advice is at the [bottom of this post](#known-bad-advice). If you believe you've already +mitigated Log4Shell, or you believe you're not vulnerable, please double-check your current information is up-to-date. + +:::info +We're continuously keeping this post up-to-date as new information comes out. If you have any questions, or you're +confused about our advice, please [file an Issue](https://github.com/lunasec-io/lunasec/issues) on GitHub. + +If you would like to contribute, or notice any errors, this post is an Open Source Markdown file on +[GitHub](https://github.com/lunasec-io/lunasec/blob/master/docs/blog/2021-12-12-log4j-zero-day-mitigation-guide.md). +::: + ## Determine if you are impacted by Log4Shell This vulnerability affects anybody who's using the log4j packages (`log4j-core`, `log4j-api`, etc). That means it's @@ -241,45 +262,63 @@ Or you can set this using the JVM arguments environment variable. It's possible to [modify the JNDI in place](https://news.ycombinator.com/item?id=29507263) to stop the attack at the language level. It can even be done while the server is running. Please note this is a last resort, and should only be done if the above options aren't possible. -The easy to use tool [Log4jHotPatch](https://github.com/corretto/hotpatch-for-apache-log4j2) will apply the JNDI patch automatically. +The easy-to-use tool [Log4jHotPatch](https://github.com/corretto/hotpatch-for-apache-log4j2) will apply the JNDI patch automatically. For those using Kubernetes that can't perform any of the above mitigations, a new feature called "Ephemeral Containers" allows applying the hot patch to a running container. This could be useful for containerized vendor software. -[This guide](https://medium.com/@edeNFed/patching-log4shell-in-one-command-without-downtime-using-ephemeral-containers-c69a9155ab1e) explains how to apply the patch. - +[This guide](https://medium.com/@edeNFed/patching-log4shell-in-one-command-without-downtime-using-ephemeral-containers-c69a9155ab1e) +explains how to apply the patch. ### Option 4: Remote hot patch / LogOut4Shell Because of the extensive control Log4Shell gives an attacker, it's actually possible to use the bug against itself to patch a running server. This isn't the recommended strategy for various reasons, but it could be a last resort for systems that you can't easily restart or modify. Note that doing this on a system you don't have permission to is most likely illegal. The fix will only work until the server (or the JVM) is restarted. -How to accomplish this is explained in [this guide](https://github.com/Cybereason/Logout4Shell). We are also currently building a small SASS to -apply the patch remotely. +How to accomplish this is explained in [this guide](https://github.com/Cybereason/Logout4Shell). We are also currently +building a small SASS to apply the patch remotely. (Subscribe at the bottom if you want to be alerted when it's live.) -## What not to do +## How to protect yourself from future 0-days -Because of the impact from this vulnerability, there has been a lot of discussion. **Some of this information is outdated -or wrong and _will_ leave you vulnerable if you follow it!** +It's becoming increasingly apparent that Log4Shell is not going to be the last vulnerability of its kind. Any trusted dependency +can have security flaws or be malicious, and there is always the risk of accidentally introducing vulnerabilities into your own system. -In contrast, this guide has been written by a team of professional Security Engineers at LunaSec. Everything here has -been peer-reviewed by multiple security experts, and where possible our sources will be linked for other Security -professionals to verify against. (If you need security help, go read the bottom of this post.) +The only way to implement software that is truly resilient to future security vulnerabilities like Log4Shell is to implement a +"Secure by Default" architecture. This is what companies, and +[the federal government](https://www.nextgov.com/cybersecurity/2021/09/biden-administration-releases-draft-zero-trust-guidance/185166/), +are migrating to now because it's the only strategy that protects you long-term. -### Be careful what Log4Shell advice you trust online +### What is "Secure by Default"? -We're making an effort to keep this post up-to-date as new information comes out. If you have any questions or you're -confused about our advice, please [file an Issue](https://github.com/lunasec-io/lunasec/issues) on GitHub. +We've written about this before in our post on +[Why Data Breaches Happen](https://www.lunasec.io/docs/blog/how-data-breaches-happen-and-why-secure-by-default-software-is-the-future/), +but the short version is: **Accept that you're going to be hacked**, and that the outer walls of your system will eventually be breached. + +Build security into the parts of your system that specifically need it. Secure by Default +software is designed to fail predictably under attack, so that the most sensitive data remains secure. + +We've made implementing that as easy as possible with our Open Source security framework [LunaSec](https://www.lunasec.io/docs/pages/overview/introduction/). +It works inside web apps, embedding an additional layer of isolation around the most sensitive data. Please leave us a star [on GitHub](https://github.com/lunasec-io/lunasec-monorepo). -If you would like to contribute, or notice any errors, this post is an Open Source Markdown file on -[GitHub](https://github.com/lunasec-io/lunasec/blob/master/docs/blog/2021-12-12-log4j-zero-day-mitigation-guide.md). -### Known Bad Advice +## Known Bad Advice The following are all pieces of advice we've seen thrown around online that are misguided and dangerous. If you see advice online that contains any of the following, we please ask you to share this post with the authors to help limit the fallout from Log4Shell. -#### A WAF will not save you from Log4Shell +### Updating Java is insufficient + +There are many reports online that only certain Java versions are affected and that you're safe if you're on a newer +Java version. Even on newer versions, it's still possible for an attacker to +[instantiate local classes](https://www.veracode.com/blog/research/exploiting-jndi-injections-java) on the server to +trigger an exploit. And, even if no exploits are found right away, it still enables a Denial-of-Service attack when +you're using a vulnerable version of log4j. + +We believe it's likely only a matter of time before all current Java versions are impacted when +running a vulnerable version of log4j. Just upgrading your Java version is insufficient, and you should not rely on this +as a long-term defense against exploitation. + +### A WAF will not save you from Log4Shell The Log4Shell vulnerability can _not_ be entirely mitigated by using a WAF (Web Application Firewall) because it _does not_ require your usage of it to be *publicly accessible*. Internal Data Pipelines, like Hadoop and Spark, and Desktop apps @@ -291,17 +330,9 @@ may be nested. (See [this GitHub](https://github.com/Puliczek/CVE-2021-44228-PoC If you are using a vulnerable version of log4j, the only secure way to mitigate Log4Shell is through one of the strategies detailed above. -#### Updating Java is insufficient - -There are many reports online that only certain Java versions are affected and that you're safe if you're on a newer -Java version. Even on newer versions, it's still possible for an attacker to instantiate local classes on the -server. - -We believe it's likely only a matter of time before all current Java versions are impacted when -running a vulnerable version of log4j. Just upgrading your Java version is insufficient, and you should not rely on this -as a long-term defense against exploitation. +### Updating individual log statements isn't a complete fix -#### Updating individual log statements isn't a complete fix +_This only applies to log4j versions `>= 2.7.0`, older versions don't support it_ Some people online are suggesting updating your logging statements from `%m` to `%m{nolookupzz}` to mitigate this**. @@ -311,34 +342,12 @@ today, you will still likely accidentally add a `%m` again in the future and _th In addition, it's possible to miss a line in your logging statements or if have a dependency that is using log4j with `%m` without you realizing. If either happens _you will still be vulnerable_. -We're strong advocates of a "Secure by Default" mentality with software, and we recommend you follow one of the other -mitigations instead. +We're strong advocates of a "[Secure by Default](#what-is-secure-by-default)" mentality with software, and we +recommend you follow one of the other mitigations instead. _**: The string is intentionally wrong here to prevent blind copy-pasting._ -## How to protect yourself from future 0-days - -It's becoming increasingly apparent that Log4Shell is not going to be the last vulnerability of its kind. Any trusted dependency -can have security flaws or be malicious, and there is always the risk of accidentally introducing vulnerabilities into your own system. - -The only way to implement software that is truly resilient to future security vulnerabilities like Log4Shell is to implement a -"Secure by Default" architecture. This is what companies, and -[the federal government](https://www.nextgov.com/cybersecurity/2021/09/biden-administration-releases-draft-zero-trust-guidance/185166/), -are migrating to now because it's the only strategy that protects you long-term. - -### What is "Secure by Default"? - -We've written about this before in our post on -[Why Data Breaches Happen](https://www.lunasec.io/docs/blog/how-data-breaches-happen-and-why-secure-by-default-software-is-the-future/), -but the short version is: **Accept that you're going to be hacked**, and that the outer walls of your system will eventually be breached. - -Build security into the parts of your system that specifically need it. Secure by Default -software is designed to fail predictably under attack, so that the most sensitive data remains secure. - -We've made implementing that as easy as possible with our Open Source security framework [LunaSec](https://www.lunasec.io/docs/pages/overview/introduction/). -It works inside web apps, embedding an additional layer of isolation around the most sensitive data. Please leave us a star [on GitHub](https://github.com/lunasec-io/lunasec-monorepo). - ### Resources #### [OWASP Application Security Verification Standard](https://owasp.org/www-project-application-security-verification-standard/) @@ -393,4 +402,5 @@ Feel free to join the discussion on this post on any of the following websites: ### Updates 1. Fixed some weird grammar. -2. Added social links +2. Added social links. +3. Reworked some content. Added more options for mitigation. From f0478fadffef2ca2ddc26d56f0fcba71edfce81a Mon Sep 17 00:00:00 2001 From: Free Wortley Date: Mon, 13 Dec 2021 16:47:11 -0600 Subject: [PATCH 4/6] Add log4j to first sentence --- docs/blog/2021-12-12-log4j-zero-day-mitigation-guide.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/blog/2021-12-12-log4j-zero-day-mitigation-guide.md b/docs/blog/2021-12-12-log4j-zero-day-mitigation-guide.md index 1cfa3dd32..364c24a61 100644 --- a/docs/blog/2021-12-12-log4j-zero-day-mitigation-guide.md +++ b/docs/blog/2021-12-12-log4j-zero-day-mitigation-guide.md @@ -37,7 +37,7 @@ authors: ![Log4Shell Logo](https://www.lunasec.io/docs/img/log4shell-logo.png) -A few days ago, a serious new vulnerability was identified and published as +A few days ago, a serious new vulnerability was identified in Apache log4j v2 and published as [CVE-2021-44228)(https://cve.mitre.org/cgi-bin/cvename.cgi?name=2021-44228). We were one of the first security companies to write about it, and we named it "Log4Shell". From b6b2dcd6c1f1bc1c140552e4a3782246e888c8b9 Mon Sep 17 00:00:00 2001 From: Forrest Date: Mon, 13 Dec 2021 14:57:09 -0800 Subject: [PATCH 5/6] few tiny edits --- .../2021-12-12-log4j-zero-day-mitigation-guide.md | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/docs/blog/2021-12-12-log4j-zero-day-mitigation-guide.md b/docs/blog/2021-12-12-log4j-zero-day-mitigation-guide.md index 364c24a61..db32a2030 100644 --- a/docs/blog/2021-12-12-log4j-zero-day-mitigation-guide.md +++ b/docs/blog/2021-12-12-log4j-zero-day-mitigation-guide.md @@ -42,9 +42,9 @@ A few days ago, a serious new vulnerability was identified in Apache log4j v2 an We were one of the first security companies to write about it, and we named it "Log4Shell". This guide will help you: -1. [Help you identify trusted sources for Log4Shell information](#be-careful-what-log4shell-advice-you-trust-online) +1. [Find trusted sources for Log4Shell information](#be-careful-what-log4shell-advice-you-trust-online) 2. [Determine if you are impacted by Log4Shell](#determine-if-you-are-impacted-by-log4shell) -3. [How to Mitigate the Issue](#how-to-mitigate-the-issue) +3. [Mitigate the Issue](#how-to-mitigate-the-issue) :::info If you're just trying to understand the Log4Shell vulnerability and the impact of it, please [refer to our @@ -59,7 +59,7 @@ about it. **Some of this information is outdated or wrong and _will_ leave you v In contrast, this guide has been written by a team of professional Security Engineers at LunaSec. Everything here has been peer-reviewed by multiple security experts, and where possible our sources will be linked for other Security -professionals to verify against. +professionals to verify against. This post links to many other guides and how-tos that we believe are trustworthy. The full list of common bad advice is at the [bottom of this post](#known-bad-advice). If you believe you've already mitigated Log4Shell, or you believe you're not vulnerable, please double-check your current information is up-to-date. @@ -283,8 +283,8 @@ It's becoming increasingly apparent that Log4Shell is not going to be the last v can have security flaws or be malicious, and there is always the risk of accidentally introducing vulnerabilities into your own system. The only way to implement software that is truly resilient to future security vulnerabilities like Log4Shell is to implement a -"Secure by Default" architecture. This is what companies, and -[the federal government](https://www.nextgov.com/cybersecurity/2021/09/biden-administration-releases-draft-zero-trust-guidance/185166/), +"Secure by Default" architecture. This is what companies and +[the federal government](https://www.nextgov.com/cybersecurity/2021/09/biden-administration-releases-draft-zero-trust-guidance/185166/) are migrating to now because it's the only strategy that protects you long-term. ### What is "Secure by Default"? @@ -385,7 +385,7 @@ updates as we post them. We're also currently offering a free 30 minute consulation with one of our Security Engineers. If you're interested, please [book some time with us here](https://lunasec.youcanbook.me/). -## Good Luck! +## Stay Strong! The last few days have been a painful experience for nearly every tech company out there. We hope that this guide helps your day be a little better. From a717e2051cf51baee364a268d7c9ff34974f1890 Mon Sep 17 00:00:00 2001 From: Forrest Date: Mon, 13 Dec 2021 15:32:30 -0800 Subject: [PATCH 6/6] small edits linking two blog posts together and other nits --- docs/blog/2021-12-09-log4j-zero-day.md | 6 +- ...1-12-12-log4j-zero-day-mitigation-guide.md | 62 ++++++++++++------- 2 files changed, 42 insertions(+), 26 deletions(-) diff --git a/docs/blog/2021-12-09-log4j-zero-day.md b/docs/blog/2021-12-09-log4j-zero-day.md index b0556cba6..3e5ff15c3 100644 --- a/docs/blog/2021-12-09-log4j-zero-day.md +++ b/docs/blog/2021-12-09-log4j-zero-day.md @@ -37,7 +37,7 @@ authors: ![Log4Shell Logo](https://www.lunasec.io/docs/img/log4shell-logo.png) -**See Our Updated Mitigation Guide**: https://www.lunasec.io/docs/blog/log4j-zero-day-mitigation-guide +**See Our Updated Mitigation Guide including our automated scanning tool**: https://www.lunasec.io/docs/blog/log4j-zero-day-mitigation-guide ## What is it? On Thursday (December 9th), a 0-day exploit in the @@ -86,6 +86,8 @@ existing code on the server to execute a payload. An attack targeting the class `org.apache.naming.factory.BeanFactory`, present on Apache Tomcat servers, is discussed in [this blog post](https://www.veracode.com/blog/research/exploiting-jndi-injections-java). +** Edit: ** To see if you are impacted, you can use our [automatic scanning tool](https://www.lunasec.io/docs/blog/log4j-zero-day-mitigation-guide). + ## Affected Apache log4j Versions ### log4j v2 @@ -101,7 +103,7 @@ Version 1 of log4j is vulnerable to other RCE attacks, and if you're using it yo ## Permanent Mitigation -**For Current Information:** Please read our follow-up guide on [log4j mitigation strategies](https://www.lunasec.io/docs/blog/log4j-zero-day-mitigation-guide). +**For Current Information:** We have written a comprehensive guide on [log4j mitigation strategies](https://www.lunasec.io/docs/blog/log4j-zero-day-mitigation-guide). Version 2.15.0 of log4j has been released without the vulnerability. log4j-core.jar is available on Maven Central [here](https://repo1.maven.org/maven2/org/apache/logging/log4j/log4j-core/2.15.0/), with [[release notes](https://logging.apache.org/log4j/2.x/changes-report.html#a2.15.0)] and [[log4j security announcements](https://logging.apache.org/log4j/2.x/security.html)]. diff --git a/docs/blog/2021-12-12-log4j-zero-day-mitigation-guide.md b/docs/blog/2021-12-12-log4j-zero-day-mitigation-guide.md index db32a2030..9a40fdccb 100644 --- a/docs/blog/2021-12-12-log4j-zero-day-mitigation-guide.md +++ b/docs/blog/2021-12-12-log4j-zero-day-mitigation-guide.md @@ -38,7 +38,7 @@ authors: ![Log4Shell Logo](https://www.lunasec.io/docs/img/log4shell-logo.png) A few days ago, a serious new vulnerability was identified in Apache log4j v2 and published as -[CVE-2021-44228)(https://cve.mitre.org/cgi-bin/cvename.cgi?name=2021-44228). +[CVE-2021-44228](https://cve.mitre.org/cgi-bin/cvename.cgi?name=2021-44228). We were one of the first security companies to write about it, and we named it "Log4Shell". This guide will help you: @@ -64,14 +64,6 @@ professionals to verify against. This post links to many other guides and how-t The full list of common bad advice is at the [bottom of this post](#known-bad-advice). If you believe you've already mitigated Log4Shell, or you believe you're not vulnerable, please double-check your current information is up-to-date. -:::info -We're continuously keeping this post up-to-date as new information comes out. If you have any questions, or you're -confused about our advice, please [file an Issue](https://github.com/lunasec-io/lunasec/issues) on GitHub. - -If you would like to contribute, or notice any errors, this post is an Open Source Markdown file on -[GitHub](https://github.com/lunasec-io/lunasec/blob/master/docs/blog/2021-12-12-log4j-zero-day-mitigation-guide.md). -::: - ## Determine if you are impacted by Log4Shell This vulnerability affects anybody who's using the log4j packages (`log4j-core`, `log4j-api`, etc). That means it's @@ -79,31 +71,33 @@ primarily Java, but other languages like Scala, Groovy, or Clojure are also impa ### Automatically Scanning Your Package -We've built a command line utility that can check `.jar` and `.war` files and report if any are vulnerable. +We've built a command line utility that can check `.jar` and `.war` files in your project directory and report if any are vulnerable. It works by scanning for hashes of [known vulnerable log4j classes](https://github.com/mubix/CVE-2021-44228-Log4Shell-Hashes). If you have a vulnerable version of a log4j in your built Java project, the hash will match a one of the hashes in the list. **[Download from GitHub](https://github.com/lunasec-io/lunasec/releases/tag/v1.0.0-log4shell)** -_Make sure you download the right version for your Operating System and CPU architecture._ +_Make sure you download the right version for your Operating System and CPU architecture._ Once downloaded, you can extract +it and run the `log4shell` command in your terminal. The tool can scan individual files or whole directories. -Once downloaded, you can extract that and run the `log4shell` command in your terminal. -**Extract Package* -```shell -$ tar -xvf lunasec_1.0.0-log4shell_Linux_x86_64.tar.gz -README.md -log4shell + +**OSX or Linux** +```shell title="Example *nix Command" +log4shell scan your-project-dir/ ``` -**Installing the Package (optional)** -```shell -$ sudo cp log4shell /usr/local/bin -$ log4shell +**Windows** +```shell title="Example Windows Command" +log4shell.exe scan your-project-dir/ ``` -**Help Text** +**Example Output** +```shell +8:08AM INF identified vulnerable path fileName=org/apache/logging/log4j/core/net/JndiManager$1.class path=test/struts-2.5.28-all/struts-2.5.28/apps/struts2-rest-showcase.war::WEB-INF/lib/log4j-core-2.12.1.jar versionInfo="log4j 2.8.2-2.12.0" +``` +Here is the help text: ```shell $ log4shell NAME: @@ -143,6 +137,12 @@ $ log4shell scan your-java-project.jar 8:08AM INF identified vulnerable path fileName=org/apache/logging/log4j/core/net/JndiManager.class path=test/struts-2.5.28-all/struts-2.5.28/apps/struts2-showcase.war::WEB-INF/lib/log4j-core-2.12.1.jar versionInfo="log4j 2.12.0-2.12.1" ``` +**Installing the Package on *nix systems (optional)** +```shell +$ sudo cp log4shell /usr/local/bin +$ log4shell +``` + :::note Please make sure that you're running this command on your fully built `.jar` or `.war` file. If you are @@ -218,6 +218,9 @@ If a vendor has not created an advisory for this, there currently does not exist software has been affected. There is an effort by Kevin Beaumont to create a spreadsheet that attempts to capture this being worked on, but at this time of this post that effort is still a [work in progress](https://twitter.com/GossiTheDog/status/1470181063980896262). +### Scanning Remote Endpoints +Please see our instructions to identify vulnerable remote servers in our original [Log4Shell post](https://www.lunasec.io/docs/blog/log4j-zero-day/#how-to-identify-vulnerable-remote-servers). + ## How to Mitigate the Issue Now that you know where you're vulnerable, the following sections will help you to figure out how to patch it. @@ -274,8 +277,10 @@ Because of the extensive control Log4Shell gives an attacker, it's actually poss This isn't the recommended strategy for various reasons, but it could be a last resort for systems that you can't easily restart or modify. Note that doing this on a system you don't have permission to is most likely illegal. The fix will only work until the server (or the JVM) is restarted. -How to accomplish this is explained in [this guide](https://github.com/Cybereason/Logout4Shell). We are also currently -building a small SASS to apply the patch remotely. (Subscribe at the bottom if you want to be alerted when it's live.) +How to accomplish this is explained in [this guide](https://github.com/Cybereason/Logout4Shell). + +We are currently building a small SASS to apply the patch remotely. +[Follow our twitter](https://twitter.com/LunaSecIO) to be alerted when it's live. ## How to protect yourself from future 0-days @@ -401,6 +406,15 @@ Feel free to join the discussion on this post on any of the following websites: ### Updates +:::info +We're continuously keeping this post up-to-date as new information comes out. If you have any questions, or you're +confused about our advice, please [file an Issue](https://github.com/lunasec-io/lunasec/issues) on GitHub. + +If you would like to contribute, or notice any errors, this post is an Open Source Markdown file on +[GitHub](https://github.com/lunasec-io/lunasec/blob/master/docs/blog/2021-12-12-log4j-zero-day-mitigation-guide.md). +::: + + 1. Fixed some weird grammar. 2. Added social links. 3. Reworked some content. Added more options for mitigation.