From bf2020a1711c1d69cc18cfe5cafc194f2f140ad4 Mon Sep 17 00:00:00 2001 From: Tinderbox User Date: Thu, 9 Apr 2020 11:14:01 +0000 Subject: [PATCH 1/2] prep 9.17.1 --- CHANGES | 2 ++ lib/dns/api | 2 +- lib/isc/api | 2 +- lib/isccc/api | 2 +- lib/isccfg/api | 2 +- lib/ns/api | 2 +- version | 2 +- 7 files changed, 8 insertions(+), 6 deletions(-) diff --git a/CHANGES b/CHANGES index e58cad4c49..e89d05adef 100644 --- a/CHANGES +++ b/CHANGES @@ -2,6 +2,8 @@ to yes. Change and only set inline-signing to yes if the zone is not dynamic. [GL #1709] + --- 9.17.1 released --- + 5383. [func] Add a quota attach function with a callback and clean up the isc_quota API. [GL !3280] diff --git a/lib/dns/api b/lib/dns/api index fe671a43ac..88c9b9df52 100644 --- a/lib/dns/api +++ b/lib/dns/api @@ -11,6 +11,6 @@ # 9.13/9.14: 1300-1499 # 9.15/9.16: 1500-1699 # 9.17/9.18: 1700-1899 -LIBINTERFACE = 1700 +LIBINTERFACE = 1701 LIBREVISION = 0 LIBAGE = 0 diff --git a/lib/isc/api b/lib/isc/api index fe671a43ac..88c9b9df52 100644 --- a/lib/isc/api +++ b/lib/isc/api @@ -11,6 +11,6 @@ # 9.13/9.14: 1300-1499 # 9.15/9.16: 1500-1699 # 9.17/9.18: 1700-1899 -LIBINTERFACE = 1700 +LIBINTERFACE = 1701 LIBREVISION = 0 LIBAGE = 0 diff --git a/lib/isccc/api b/lib/isccc/api index fe671a43ac..9a50ec3feb 100644 --- a/lib/isccc/api +++ b/lib/isccc/api @@ -12,5 +12,5 @@ # 9.15/9.16: 1500-1699 # 9.17/9.18: 1700-1899 LIBINTERFACE = 1700 -LIBREVISION = 0 +LIBREVISION = 1 LIBAGE = 0 diff --git a/lib/isccfg/api b/lib/isccfg/api index fe671a43ac..9a50ec3feb 100644 --- a/lib/isccfg/api +++ b/lib/isccfg/api @@ -12,5 +12,5 @@ # 9.15/9.16: 1500-1699 # 9.17/9.18: 1700-1899 LIBINTERFACE = 1700 -LIBREVISION = 0 +LIBREVISION = 1 LIBAGE = 0 diff --git a/lib/ns/api b/lib/ns/api index fe671a43ac..88c9b9df52 100644 --- a/lib/ns/api +++ b/lib/ns/api @@ -11,6 +11,6 @@ # 9.13/9.14: 1300-1499 # 9.15/9.16: 1500-1699 # 9.17/9.18: 1700-1899 -LIBINTERFACE = 1700 +LIBINTERFACE = 1701 LIBREVISION = 0 LIBAGE = 0 diff --git a/version b/version index f5f7dcda2c..66268e7f1a 100644 --- a/version +++ b/version @@ -5,7 +5,7 @@ PRODUCT=BIND DESCRIPTION="(Development Release)" MAJORVER=9 MINORVER=17 -PATCHVER=0 +PATCHVER=1 RELEASETYPE= RELEASEVER= EXTENSIONS= From 7c7c5577f563f4d079e65a6e597cbc48bb933a4f Mon Sep 17 00:00:00 2001 From: Tinderbox User Date: Thu, 9 Apr 2020 11:22:03 +0000 Subject: [PATCH 2/2] regen master --- bin/dig/host.1 | 7 +- bin/dig/host.html | 7 + doc/arm/Bv9ARM.ch01.html | 2 +- doc/arm/Bv9ARM.ch02.html | 44 +- doc/arm/Bv9ARM.ch03.html | 286 ++++++--- doc/arm/Bv9ARM.ch04.html | 2 +- doc/arm/Bv9ARM.ch05.html | 273 ++++---- doc/arm/Bv9ARM.ch06.html | 98 +-- doc/arm/Bv9ARM.ch07.html | 62 +- doc/arm/Bv9ARM.ch08.html | 120 +++- doc/arm/Bv9ARM.ch09.html | 27 +- doc/arm/Bv9ARM.ch10.html | 917 ++++++++++++++++++++------- doc/arm/Bv9ARM.ch11.html | 302 +++++---- doc/arm/Bv9ARM.ch12.html | 43 +- doc/arm/Bv9ARM.html | 36 +- doc/arm/Bv9ARM.pdf | Bin 1101020 -> 1111614 bytes doc/arm/man.arpaname.html | 48 +- doc/arm/man.ddns-confgen.html | 128 ++-- doc/arm/man.delv.html | 354 +++++++---- doc/arm/man.dig.html | 720 ++++++++++++++------- doc/arm/man.dnssec-cds.html | 198 ++++-- doc/arm/man.dnssec-checkds.html | 98 ++- doc/arm/man.dnssec-coverage.html | 145 +++-- doc/arm/man.dnssec-dsfromkey.html | 247 ++++++-- doc/arm/man.dnssec-importkey.html | 165 +++-- doc/arm/man.dnssec-keyfromlabel.html | 305 ++++++--- doc/arm/man.dnssec-keygen.html | 357 +++++++---- doc/arm/man.dnssec-keymgr.html | 257 +++++--- doc/arm/man.dnssec-revoke.html | 111 +++- doc/arm/man.dnssec-settime.html | 273 +++++--- doc/arm/man.dnssec-signzone.html | 414 ++++++++---- doc/arm/man.dnssec-verify.html | 127 ++-- doc/arm/man.dnstap-read.html | 94 ++- doc/arm/man.filter-aaaa.html | 82 ++- doc/arm/man.host.html | 220 +++++-- doc/arm/man.mdig.html | 384 +++++++---- doc/arm/man.named-checkconf.html | 140 ++-- doc/arm/man.named-checkzone.html | 297 ++++++--- doc/arm/man.named-journalprint.html | 61 +- doc/arm/man.named-nzd2nzf.html | 74 ++- doc/arm/man.named-rrchecker.html | 63 +- doc/arm/man.named.conf.html | 199 +++--- doc/arm/man.named.html | 313 ++++++--- doc/arm/man.nsec3hash.html | 103 ++- doc/arm/man.nslookup.html | 293 +++++---- doc/arm/man.nsupdate.html | 420 ++++++++---- doc/arm/man.pkcs11-destroy.html | 114 +++- doc/arm/man.pkcs11-keygen.html | 143 +++-- doc/arm/man.pkcs11-list.html | 110 +++- doc/arm/man.pkcs11-tokens.html | 82 ++- doc/arm/man.rndc-confgen.html | 150 +++-- doc/arm/man.rndc.conf.html | 110 ++-- doc/arm/man.rndc.html | 493 ++++++++------ doc/arm/notes.html | 115 +++- doc/arm/notes.pdf | Bin 67302 -> 76622 bytes doc/arm/notes.txt | 63 +- doc/misc/options | 18 +- doc/misc/options.active | 18 +- 58 files changed, 7042 insertions(+), 3290 deletions(-) diff --git a/bin/dig/host.1 b/bin/dig/host.1 index ea0bc06a43..6775a14cd5 100644 --- a/bin/dig/host.1 +++ b/bin/dig/host.1 @@ -39,7 +39,7 @@ host \- DNS lookup utility .SH "SYNOPSIS" .HP \w'\fBhost\fR\ 'u -\fBhost\fR [\fB\-aACdlnrsTUwv\fR] [\fB\-c\ \fR\fB\fIclass\fR\fR] [\fB\-N\ \fR\fB\fIndots\fR\fR] [\fB\-R\ \fR\fB\fInumber\fR\fR] [\fB\-t\ \fR\fB\fItype\fR\fR] [\fB\-W\ \fR\fB\fIwait\fR\fR] [\fB\-m\ \fR\fB\fIflag\fR\fR] [[\fB\-4\fR] | [\fB\-6\fR]] [\fB\-v\fR] [\fB\-V\fR] {name} [server] +\fBhost\fR [\fB\-aACdlnrsTUwv\fR] [\fB\-c\ \fR\fB\fIclass\fR\fR] [\fB\-N\ \fR\fB\fIndots\fR\fR] [\fB\-p\ \fR\fB\fIport\fR\fR] [\fB\-R\ \fR\fB\fInumber\fR\fR] [\fB\-t\ \fR\fB\fItype\fR\fR] [\fB\-W\ \fR\fB\fIwait\fR\fR] [\fB\-m\ \fR\fB\fIflag\fR\fR] [[\fB\-4\fR] | [\fB\-6\fR]] [\fB\-v\fR] [\fB\-V\fR] {name} [server] .SH "DESCRIPTION" .PP \fBhost\fR @@ -138,6 +138,11 @@ directive in /etc/resolv\&.conf\&. .RE .PP +\-p \fIport\fR +.RS 4 +Specify the port on the server to query\&. The default is 53\&. +.RE +.PP \-r .RS 4 Non\-recursive query: Setting this option clears the RD (recursion desired) bit in the query\&. This should mean that the name server receiving the query will not attempt to resolve diff --git a/bin/dig/host.html b/bin/dig/host.html index e0076735ef..1ebf702999 100644 --- a/bin/dig/host.html +++ b/bin/dig/host.html @@ -36,6 +36,7 @@ [-aACdlnrsTUwv] [-c class] [-N ndots] + [-p port] [-R number] [-t type] [-W wait] @@ -165,6 +166,12 @@ in /etc/resolv.conf.

+
-p port
+
+

+ Specify the port on the server to query. The default is 53. +

+
-r

diff --git a/doc/arm/Bv9ARM.ch01.html b/doc/arm/Bv9ARM.ch01.html index 297cd1ec8b..edb5d11c84 100644 --- a/doc/arm/Bv9ARM.ch01.html +++ b/doc/arm/Bv9ARM.ch01.html @@ -614,6 +614,6 @@ -

BIND 9.17.0 (Development Release)

+

BIND 9.17.1 (Development Release)

diff --git a/doc/arm/Bv9ARM.ch02.html b/doc/arm/Bv9ARM.ch02.html index aedc15ccfc..32b932966a 100644 --- a/doc/arm/Bv9ARM.ch02.html +++ b/doc/arm/Bv9ARM.ch02.html @@ -10,7 +10,7 @@ Chapter 2. BIND Resource Requirements - + @@ -43,16 +43,17 @@
Supported Operating Systems
-
+ +

Hardware requirements

-

+

DNS hardware requirements have traditionally been quite modest. For many installations, servers that have been pensioned off from active duty have performed admirably as DNS servers.

-

+

The DNSSEC features of BIND 9 may prove to be quite CPU intensive however, so organizations that make heavy use of these @@ -61,22 +62,22 @@ full utilization of multiprocessor systems for installations that need it.

-
-
+
+

CPU Requirements

-

+

CPU requirements for BIND 9 range from i386-class machines for serving of static zones without caching, to enterprise-class machines if you intend to process many dynamic updates and DNSSEC signed zones, serving many thousands of queries per second.

-
-
+
+

Memory Requirements

-

+

The memory of the server has to be large enough to fit the cache and zones loaded off disk. The max-cache-size option can be used to limit the amount of memory used by the cache, @@ -90,11 +91,14 @@ a relatively stable size where entries are expiring from the cache as fast as they are being inserted.

-
-
+ +
+ +

Name Server Intensive Environment Issues

-

+ +

For name server intensive environments, there are two alternative configurations that may be used. The first is where clients and any second-level internal name servers query a main name server, which @@ -107,11 +111,13 @@ this has the disadvantage of making many more external queries, as none of the name servers share their cached data.

-
-
+
+ +

Supported Operating Systems

-

+ +

ISC BIND 9 compiles and runs on a large number of Unix-like operating systems and on @@ -121,8 +127,8 @@ directory of the BIND 9 source distribution.

-
-
+ +
@@ -140,6 +146,6 @@
-

BIND 9.17.0 (Development Release)

+

BIND 9.17.1 (Development Release)

diff --git a/doc/arm/Bv9ARM.ch03.html b/doc/arm/Bv9ARM.ch03.html index 291a1c03cb..116ac7b6fa 100644 --- a/doc/arm/Bv9ARM.ch03.html +++ b/doc/arm/Bv9ARM.ch03.html @@ -10,7 +10,7 @@ Chapter 3. Name Server Configuration - + @@ -54,18 +54,22 @@ -

+ +

In this chapter we provide some suggested configurations along with guidelines for their use. We suggest reasonable values for certain option settings.

-
+ +

Sample Configurations

-
+ +

A Caching-only Name Server

-

+ +

The following sample configuration is appropriate for a caching-only name server for use by clients internal to a corporation. All queries @@ -74,6 +78,7 @@ suitable firewall rules.

+ 
 // Two corporate subnets we wish to allow queries from.
 acl corpnets { 192.168.4.0/24; 192.168.7.0/24; };
@@ -91,15 +96,19 @@ zone "0.0.127.in-addr.arpa" {
      notify no;
 };
-
-
+ +
+ +

An Authoritative-only Name Server

-

+ +

This sample configuration is for an authoritative-only server that is the master server for "example.com" and a slave for the subdomain "eng.example.com".

+ 
 options {
      // Working directory
@@ -138,23 +147,31 @@ zone "eng.example.com" {
      masters { 192.168.4.12; };
 };
-
-
-
+ +
+
+ +

Load Balancing

-

+ + + +

A primitive form of load balancing can be achieved in the DNS by using multiple records (such as multiple A records) for one name.

-

+ +

For example, if you have three HTTP servers with network addresses of 10.0.0.1, 10.0.0.2 and 10.0.0.3, a set of records such as the following means that clients will connect to each machine one third of the time:

-
+ +
+
@@ -268,47 +285,52 @@ zone "eng.example.com" { -
-

+ +

+

When a resolver queries for these records, BIND will rotate them and respond to the query with the records in a different order. In the example above, clients will randomly receive records in the order 1, 2, 3; 2, 3, 1; and 3, 1, 2. Most clients will use the first record returned and discard the rest.

-

+

For more detail on ordering responses, check the rrset-order sub-statement in the options statement, see RRset Ordering.

-
-
+ +
+ +

Name Server Operations

-
+ +

Tools for Use With the Name Server Daemon

-

+

This section describes several indispensable diagnostic, administrative and monitoring tools available to the system administrator for controlling and debugging the name server daemon.

-
+

Diagnostic Tools

-

+

The dig, host, and nslookup programs are all command line tools for manually querying name servers. They differ in style and output format.

-
+ +
dig
-

+

dig is the most versatile and complete of these lookup tools. It has two modes: simple interactive @@ -318,22 +340,31 @@ zone "eng.example.com" { accessible from the command line.

-

dig [@server] domain [query-type] [query-class] [+query-option] [-dig-option] [%comment]

-

+

+ dig + [@server] + domain + [query-type] + [query-class] + [+query-option] + [-dig-option] + [%comment] +

+

The usual simple use of dig will take the form

-

+

dig @server domain query-type query-class

-

+

For more information and a list of available commands and options, see the dig man page.

-
+
host
-

+

The host utility emphasizes simplicity and ease of use. By default, it converts @@ -341,16 +372,29 @@ zone "eng.example.com" { functionality can be extended with the use of options.

-

host [-aCdlnrsTwv] [-c class] [-N ndots] [-t type] [-W timeout] [-R retries] [-m flag] [-4] [-6] hostname [server]

-

+

+ host + [-aCdlnrsTwv] + [-c class] + [-N ndots] + [-t type] + [-W timeout] + [-R retries] + [-m flag] + [-4] + [-6] + hostname + [server] +

+

For more information and a list of available commands and options, see the host man page.

-
+
nslookup
-

nslookup +

nslookup has two modes: interactive and non-interactive. Interactive mode allows the user to query name servers for information about various @@ -359,8 +403,15 @@ zone "eng.example.com" { the name and requested information for a host or domain.

-

nslookup [-option...] [[host-to-find] | [- [server]]]

-

+

+ nslookup + [-option...] + [ + [host-to-find] + | [- [server]] + ] +

+

Interactive mode is entered when no arguments are given (the default name server will be used) or when the first argument is a @@ -368,7 +419,7 @@ zone "eng.example.com" { Internet address of a name server.

-

+

Non-interactive mode is used when the name or Internet address of the host to be looked up is given as the first argument. @@ -376,56 +427,76 @@ zone "eng.example.com" { optional second argument specifies the host name or address of a name server.

-

+

Due to its arcane user interface and frequently inconsistent behavior, we do not recommend the use of nslookup. Use dig instead.

-
+
-
-
+
+ +

Administrative Tools

-

+

Administrative tools play an integral part in the management of a server.

-
+
named-checkconf
-

+

The named-checkconf program checks the syntax of a named.conf file.

-

named-checkconf [-jvz] [-t directory] [filename]

-
+

+ named-checkconf + [-jvz] + [-t directory] + [filename] +

+
named-checkzone
-

+

The named-checkzone program checks a master file for syntax and consistency.

-

named-checkzone [-djqvD] [-c class] [-o output] [-t directory] [-w directory] [-k (ignore|warn|fail)] [-n (ignore|warn|fail)] [-W (ignore|warn)] zone [filename]

-
+

+ named-checkzone + [-djqvD] + [-c class] + [-o output] + [-t directory] + [-w directory] + [-k (ignore|warn|fail)] + [-n (ignore|warn|fail)] + [-W (ignore|warn)] + zone + [filename] +

+
named-compilezone
-

+

+

Similar to named-checkzone, but it always dumps the zone content to a specified file (typically in a different format). -

+

+
rndc
-

+

The remote name daemon control (rndc) program allows the system @@ -433,11 +504,21 @@ zone "eng.example.com" { If you run rndc without any options, it will display a usage message as follows:

-

rndc [-c config] [-s server] [-p port] [-y key] command [command...]

-

See rndc(8) for details of +

+ rndc + [-c config] + [-s server] + [-p port] + [-y key] + command + [command...] +

+ +

See rndc(8) for details of the available rndc commands.

-

+ +

rndc requires a configuration file, since all communication with the server is authenticated with @@ -461,7 +542,8 @@ zone "eng.example.com" { the section called “controls Statement Definition and Usage”.

-

+ +

The format of the configuration file is similar to that of named.conf, but limited to @@ -473,7 +555,8 @@ zone "eng.example.com" { be shared. The order of statements is not significant.

-

+ +

The options statement has three clauses: default-server, default-key, @@ -491,7 +574,8 @@ zone "eng.example.com" { port is given on the command line or in a server statement.

-

+ +

The key statement defines a key to be used by rndc when authenticating @@ -520,7 +604,8 @@ zone "eng.example.com" { have any meaning. The secret is a Base64 encoded string as specified in RFC 3548.

-

+ +

The server statement associates a key defined using the key @@ -536,9 +621,11 @@ zone "eng.example.com" { connect to on the server.

-

+ +

A sample minimal configuration file is as follows:

+ 
 key rndc_key {
      algorithm "hmac-sha256";
@@ -550,30 +637,36 @@ options {
      default-key    rndc_key;
 };
-

+ +

This file, if installed as /etc/rndc.conf, would allow the command:

-

+ +

$ rndc reload

-

+ +

to connect to 127.0.0.1 port 953 and cause the name server to reload, if a name server on the local machine were running with following controls statements:

+ 
 controls {
         inet 127.0.0.1
             allow { localhost; } keys { rndc_key; };
 };
-

+ +

and it had an identical key statement for rndc_key.

-

+ +

Running the rndc-confgen program will conveniently create a rndc.conf @@ -588,19 +681,23 @@ controls { modify named.conf at all.

-
+ +
-
-
-
+ +
+
+ +

Signals

-

+

Certain UNIX signals cause the name server to take specific actions, as described in the following table. These signals can be sent using the kill command.

-
+
+
@@ -638,26 +735,29 @@ controls { -
-
-
-
+ +
+
+
+ +

Plugins

-

+ +

Plugins are a mechanism to extend the functionality of named using dynamically loadable libraries. By using plugins, core server functionality can be kept simple for the majority of users; more complex code implementing optional features need only be installed by users that need those features.

-

+

The plugin interface is a work in progress, and is expected to evolve as more plugins are added. Currently, only "query plugins" are supported; these modify the name server query logic. Other plugin types may be added in the future.

-

+

The only plugin currently included in BIND is filter-aaaa.so, which replaces the filter-aaaa feature that previously existed natively @@ -668,19 +768,20 @@ controls { filter-aaaa.so plugin provides identical functionality.

-
+ +

Configuring Plugins

-

+

A plugin is configured with the plugin statement in named.conf:

-
+    
     plugin query "library.so" {
         parameters
     };
     

-

+    

       In this example, file library.so is the plugin
       library.  query indicates that this is a query
       plugin.
@@ -691,16 +792,17 @@ controls {
       Multiple plugin statements can be specified, to load
       different plugins or multiple instances of the same plugin.
     

-

+    

       parameters are passed as an opaque
       string to the plugin's initialization routine. Configuration
       syntax will differ depending on the module.
     

-
-
+
+ +

Developing Plugins

-

+

Each plugin implements four functions:

    @@ -720,7 +822,7 @@ controls {

-

+

At various locations within the named source code, there are "hook points" at which a plugin may register itself. When a hook point is reached while named is @@ -732,9 +834,11 @@ controls { aborted. More details can be found in the file lib/ns/include/ns/hooks.h.

+
+
-
-
+ +
@@ -752,6 +856,6 @@ controls {
-

BIND 9.17.0 (Development Release)

+

BIND 9.17.1 (Development Release)

diff --git a/doc/arm/Bv9ARM.ch04.html b/doc/arm/Bv9ARM.ch04.html index a35ee56e17..51039db6c0 100644 --- a/doc/arm/Bv9ARM.ch04.html +++ b/doc/arm/Bv9ARM.ch04.html @@ -2928,6 +2928,6 @@ $ORIGIN 0.0.0.0.0.0.0.0.8.b.d.0.1.0.0.2.ip6.arpa. -

BIND 9.17.0 (Development Release)

+

BIND 9.17.1 (Development Release)

diff --git a/doc/arm/Bv9ARM.ch05.html b/doc/arm/Bv9ARM.ch05.html index 4ddb87f226..1db7d40676 100644 --- a/doc/arm/Bv9ARM.ch05.html +++ b/doc/arm/Bv9ARM.ch05.html @@ -7798,18 +7798,36 @@ deny-answer-aliases { "example.net"; };

NSDNAME triggers match names of authoritative servers - for the query name, a parent of the query name, a CNAME for - query name, or a parent of a CNAME. - They are encoded as subdomains of - rpz-nsdname relativized - to the RPZ origin name. - NSIP triggers match IP addresses in A and - AAAA RRsets for domains that can be checked against NSDNAME - policy records. - The nsdname-enable phrase turns NSDNAME + for the query name, a parent of the query name, a CNAME + for query name, or a parent of a CNAME. They are + encoded as subdomains of rpz-nsdname + relativized to the RPZ origin name. NSIP triggers match + IP addresses in A and AAAA RRsets for domains that can + be checked against NSDNAME policy records. The + nsdname-enable phrase turns NSDNAME triggers off or on for a single policy zone or all zones.

+

+ If authoritative nameservers for the query name are not + yet known, named will recursively + look up the authoritative servers for the query name + before applying an RPZ-NSDNAME rule. + This can cause a processing delay. To speed up + processing at the cost of precision, the + nsdname-wait-recurse option + can be used: when set to no, + RPZ-NSDNAME rules will only be applied when authoritative + servers for the query name have already been looked up and + cached. If authoritative servers for the query name + are not in the cache, then the RPZ-NSDNAME rule will be + ignored, but the authoritative servers for the query name + will be looked up in the background, and the rule will be + applied to subsequent queries. The default is + yes, meaning RPZ-NSDNAME + rules should always be applied even if authoritative + servers for the query name need to be looked up first. +

RPZ-NSIP
@@ -9882,79 +9900,72 @@ view "external" { -+ - + - - - - - - - - - - - - - - - - - -
+

- master + primary

+

The server has a master copy of the data for the zone and will be able to provide authoritative - answers for it. Type primary is - a synonym for master. + answers for it. Type master is + a synonym for primary.

+

- slave + secondary

+

- A slave zone is a replica of a master - zone. Type secondary is a - synonym for slave. + A secondary zone is a replica of a master + zone. Type slave is a + synonym for secondary. The masters list specifies one or more IP addresses of master servers that the slave contacts to update - its copy of the zone. - Masters list elements can also be names of other - masters lists. - By default, transfers are made from port 53 on the - servers; this can - be changed for all servers by specifying a port number - before the - list of IP addresses, or on a per-server basis after - the IP address. + its copy of the zone. Masters list elements can + also be names of other masters lists. By default, + transfers are made from port 53 on the servers; + this can be changed for all servers by specifying + a port number before the list of IP addresses, + or on a per-server basis after the IP address. Authentication to the master can also be done with - per-server TSIG keys. - If a file is specified, then the + per-server TSIG keys. If a file is specified, then the replica will be written to this file whenever the zone - is changed, - and reloaded from this file on a server restart. Use - of a file is - recommended, since it often speeds server startup and - eliminates - a needless waste of bandwidth. Note that for large - numbers (in the - tens or hundreds of thousands) of zones per server, it - is best to - use a two-level naming scheme for zone filenames. For - example, - a slave server for the zone example.com might place + is changed, and reloaded from this file on a server + restart. Use of a file is recommended, since it + often speeds server startup and eliminates a + needless waste of bandwidth. Note that for large + numbers (in the tens or hundreds of thousands) of + zones per server, it is best to use a two-level + naming scheme for zone filenames. For example, + a slave server for the zone + example.com might place the zone contents into a file called - ex/example.com where ex/ is - just the first two letters of the zone name. (Most - operating systems + ex/example.com where + ex/ is just the first two + letters of the zone name. (Most operating systems behave very slowly if you put 100000 files into a single directory.)

+

stub

+

A stub zone is similar to a slave zone, except that it replicates only the NS records of a @@ -10007,93 +10018,30 @@ view "external" {

+

mirror

+

- Note: using - this zone type with any zone other than the root - zone should be considered - experimental and may cause - performance issues, especially for zones which - are large and/or frequently updated. -

-

- A mirror zone acts like a zone of type - secondary whose data is - subject to DNSSEC validation before being used - in answers. Validation is performed during the - zone transfer process (for both AXFR and IXFR), - and again when the zone file is loaded from disk - when named is restarted. If + A mirror zone is similar to a zone of type + secondary, except its data + is subject to DNSSEC validation before being used + in answers. Validation is applied to the entire + zone during the zone transfer process, and again + when the zone file is loaded from disk when + named is restarted. If validation of a new version of a mirror zone fails, a retransfer is scheduled and the most recent correctly validated version of that zone - is used until it expires; if a newer version of - that zone is later correctly validated, it - replaces the previously used version. If no - usable zone data is available for a mirror zone - (either because it was never loaded from disk - and has not yet been transferred from a primary - server or because its most recent correctly - validated version expired), traditional DNS - recursion will be used to look up the answers - instead. -

-

- While any zone may be configured with this type, - it is intended to be used to set up a fast local - copy of the root zone, similar to the one - described in RFC 7706. Note, however, that - mirror zones are not supposed to augment the - example configuration provided by RFC 7706 but - rather to replace it altogether. -

-

- A default list of primary servers for the IANA - root zone is built into named - and thus its mirroring can be enabled using the - following configuration: -

-
zone "." {
-        type mirror;
-};
-

- In order to set up mirroring of any other zone, - an explicit list of primary servers needs to be - provided using the masters - option (see the section called “masters Statement Grammar” - for details). -

-

- To make mirror zone contents persist between - named restarts, use the - file - option. -

-

- Mirror zone validation always happens for the - entire zone contents, i.e. no "incremental - validation" takes place, even for IXFRs. This - is required to ensure that each version of the - zone used by the resolver is fully - self-consistent with respect to DNSSEC. Other, - more efficient zone verification methods may be - added in the future. -

-

- For validation to succeed, a key-signing key - (KSK) for the zone must be configured as a trust - anchor in named.conf: that - is, a key for the zone must be specified in - trust-anchors. In the case - of the root zone, you may also rely on the - built-in root trust anchor, which is enabled - when dnssec-validation is set to the - default value auto. + is used until it either expires or a newer version + validates correctly. If no usable zone data is + available for a mirror zone at all, either due to + transfer failure or expiration, traditional DNS + recursion is used to look up the answers instead. + Mirror zones cannot be used in a view that does + not have recursion enabled.

Answers coming from a mirror zone look almost @@ -10104,27 +10052,50 @@ view "external" { bit ("authenticated data") is.

- Since mirror zones are intended to be used by - recursive resolvers, adding one to a view with - recursion disabled is considered to be a - configuration error. + Mirror zones are intended to be used to set up a + fast local copy of the root zone, similar to the + one described in RFC 7706. A default list of primary + servers for the IANA root zone is built into + named and thus its mirroring + can be enabled using the following configuration: +

+
zone "." {
+        type mirror;
+};
+

+ Other zones can be configured as mirror zones, + but this should be considered + experimental and may cause + performance issues, especially with zones that + are large and/or frequently updated. + Mirroring a zone other than root requires an + explicit list of primary servers to be provided + using the masters option + (see the section called “masters Statement Grammar” + for details), and a key-signing key (KSK) + for the specified zone to be explicitly + configured as a trust anchor. +

+

+ To make mirror zone contents persist between + named restarts, use the + file + option.

When configuring NOTIFY for a mirror zone, only notify no; and notify explicit; can be - used. Using any other notify - setting at the zone level is a configuration - error. Using any other + used at the zone level. Using any other notify setting at the options or view level will cause that setting to be overridden with notify explicit; for the - mirror zone in question. Since the global - default for the notify option - is yes, mirror zones are - by default configured with + mirror zone. The global default for the + notify option is + yes, so mirror + zones are by default configured with notify explicit;.

@@ -10135,12 +10106,12 @@ view "external" {

+

static-stub

+

A static-stub zone is similar to a stub zone with the following exceptions: @@ -10184,12 +10155,12 @@ view "external" {

+

forward

+

A "forward zone" is a way to configure forwarding on a per-domain basis. A zone statement @@ -10217,12 +10188,12 @@ view "external" {

+

hint

+

The initial set of root name servers is specified using a "hint zone". When the server starts @@ -10238,12 +10209,12 @@ view "external" {

+

redirect

+

Redirect zones are used to provide answers to queries when normal resolution would result in @@ -10303,12 +10274,12 @@ view "external" {

+

delegation-only

+

This is used to enforce the delegation-only status of infrastructure zones (e.g. COM, @@ -15374,6 +15345,6 @@ HOST-127.EXAMPLE. MX 0 .

-

BIND 9.17.0 (Development Release)

+

BIND 9.17.1 (Development Release)

diff --git a/doc/arm/Bv9ARM.ch06.html b/doc/arm/Bv9ARM.ch06.html index a29fd9c95d..dae6762274 100644 --- a/doc/arm/Bv9ARM.ch06.html +++ b/doc/arm/Bv9ARM.ch06.html @@ -10,7 +10,7 @@ Chapter 6. BIND 9 Security Considerations - + @@ -45,10 +45,12 @@
Dynamic Update Security
-
+ +

Access Control Lists

-

+ +

Access Control Lists (ACLs) are address match lists that you can set up and nickname for future use in allow-notify, allow-query, @@ -56,26 +58,27 @@ blackhole, allow-transfer, match-clients, etc.

-

+

Using ACLs allows you to have finer control over who can access your name server, without cluttering up your config files with huge lists of IP addresses.

-

+

It is a good idea to use ACLs, and to control access to your server. Limiting access to your server by outside parties can help prevent spoofing and denial of service (DoS) attacks against your server.

-

+

ACLs match clients on the basis of up to three characteristics: 1) The client's IP address; 2) the TSIG or SIG(0) key that was used to sign the request, if any; and 3) an address prefix encoded in an EDNS Client Subnet option, if any.

-

+

Here is an example of ACLs based on client addresses:

+ 
 // Set up an ACL named "bogusnets" that will block
 // RFC1918 space and some reserved space, which is
@@ -104,32 +107,33 @@ zone "example.com" {
   allow-query { any; };
 };
-

+ +

This allows authoritative queries for "example.com" from any address, but recursive queries only from the networks specified in "our-nets", and no queries at all from the networks specified in "bogusnets".

-

+

In addition to network addresses and prefixes, which are matched against the source address of the DNS request, ACLs may include key elements, which specify the name of a TSIG or SIG(0) key.

-

+

When BIND 9 is built with GeoIP support, ACLs can also be used for geographic access restrictions. This is done by specifying an ACL element of the form: geoip [db database] field value

-

+

The field indicates which field to search for a match. Available fields are "country", "region", "city", "continent", "postal" (postal code), "metro" (metro code), "area" (area code), "tz" (timezone), "isp", "asnum", and "domain".

-

+

value is the value to search for within the database. A string may be quoted if it contains spaces or other special characters. An "asnum" @@ -144,7 +148,7 @@ zone "example.com" { abbreviation; otherwise it treated as the full name of the state or province.

-

+

The database field indicates which GeoIP database to search for a match. In most cases this is unnecessary, because most search fields can only be found in @@ -159,10 +163,10 @@ zone "example.com" { is installed, in that order. Valid database names are "country", "city", "asnum", "isp", and "domain".

-

+

Some example GeoIP ACLs:

-
geoip country US;
+        
geoip country US;
 geoip country JP;
 geoip db country country Canada;
 geoip region WA;
@@ -172,7 +176,8 @@ geoip postal 95062;
 geoip tz "America/Los_Angeles";
 geoip org "Internet Systems Consortium";
 

-

+
+        

           ACLs use a "first-match" logic rather than "best-match":
           if an address prefix matches an ACL element, then that ACL
           is considered to have matched even if a later element would
@@ -182,7 +187,7 @@ geoip org "Internet Systems Consortium";
           indicated that the query should be accepted, and the second
           element is ignored.
         

-

+        

           When using "nested" ACLs (that is, ACLs included or referenced
           within other ACLs), a negative match of a nested ACL will
           the containing ACL to continue looking for matches.  This
@@ -192,10 +197,10 @@ geoip org "Internet Systems Consortium";
           it originates from a particular network and
           only when it is signed with a particular key, use:
         

-
+        
 allow-query { !{ !10/8; any; }; key example; };
 

-

+        

           Within the nested ACL, any address that is
           not in the 10/8 network prefix will
           be rejected, and this will terminate processing of the
@@ -207,12 +212,14 @@ allow-query { !{ !10/8; any; }; key example; };
           will only matches when both conditions
           are true.
         

-
-
+
+ +

Chroot and Setuid

-

+ +

On UNIX servers, it is possible to run BIND in a chrooted environment (using the chroot() function) by specifying @@ -221,23 +228,25 @@ allow-query { !{ !10/8; any; }; key example; }; BIND in a "sandbox", which will limit the damage done if a server is compromised.

-

+

Another useful feature in the UNIX version of BIND is the ability to run the daemon as an unprivileged user ( -u user ). We suggest running as an unprivileged user when using the chroot feature.

-

+

Here is an example command line to load BIND in a chroot sandbox, /var/named, and to run named setuid to user 202:

-

+

/usr/local/sbin/named -u 202 -t /var/named

-
+ +

The chroot Environment

-

+ +

In order for a chroot environment to work properly in a particular directory (for example, /var/named), you will need to set @@ -249,7 +258,7 @@ allow-query { !{ !10/8; any; }; key example; }; options like directory and pid-file to account for this.

-

+

Unlike with earlier versions of BIND, you typically will not need to compile named statically nor install shared libraries under the new root. @@ -260,11 +269,13 @@ allow-query { !{ !10/8; any; }; key example; }; /dev/log, and /etc/localtime.

-
-
+
+ +

Using the setuid Function

-

+ +

Prior to running the named daemon, use the touch utility (to change file @@ -275,7 +286,7 @@ allow-query { !{ !10/8; any; }; key example; }; to which you want BIND to write.

-
+

Note

If the named daemon is running as an @@ -283,12 +294,14 @@ allow-query { !{ !10/8; any; }; key example; }; ports if the server is reloaded.

-
-
-
+
+
+ +

Dynamic Update Security

-

+ +

Access to the dynamic update facility should be strictly limited. In earlier versions of BIND, the only way to do this was @@ -308,7 +321,8 @@ allow-query { !{ !10/8; any; }; key example; }; forward it to the master with its own source IP address causing the master to approve it without question.

-

+ +

For these reasons, we strongly recommend that updates be cryptographically authenticated by means of transaction signatures (TSIG). That is, the allow-update @@ -317,7 +331,8 @@ allow-query { !{ !10/8; any; }; key example; }; prefixes. Alternatively, the new update-policy option can be used.

-

+ +

Some sites choose to keep all dynamically-updated DNS data in a subdomain and delegate that subdomain to a separate zone. This way, the top-level zone containing critical data such as the IP @@ -325,8 +340,9 @@ allow-query { !{ !10/8; any; }; key example; }; of public web and mail servers need not allow dynamic update at all.

-
-
+ +
+
@@ -344,6 +360,6 @@ allow-query { !{ !10/8; any; }; key example; };
-

BIND 9.17.0 (Development Release)

+

BIND 9.17.1 (Development Release)

diff --git a/doc/arm/Bv9ARM.ch07.html b/doc/arm/Bv9ARM.ch07.html index cd5011fc25..8b48966a04 100644 --- a/doc/arm/Bv9ARM.ch07.html +++ b/doc/arm/Bv9ARM.ch07.html @@ -10,7 +10,7 @@ Chapter 7. Troubleshooting - + @@ -45,24 +45,28 @@
Where Can I Get Help?
-
+ +

Common Problems

-
+ +

It's not working; how can I figure out what's wrong?

-

+ +

The best solution to solving installation and configuration issues is to take preventative measures by setting up logging files beforehand. The log files provide a source of hints and information that can be used to figure out what went wrong and how to fix the problem.

-
-
+
+ +

EDNS compliance issues

-

+

EDNS (Extended DNS) is a standard that was first specified in 1999. It is required for DNSSEC validation, DNS COOKIE options, and other features. There are broken and outdated @@ -73,7 +77,7 @@ situation, retrying queries in different ways and eventually falling back to plain DNS queries without EDNS.

-

+

Such workarounds cause unnecessary resolution delays, increase code complexity, and prevent deployment of new DNS features. As of February 2019, all major DNS software vendors @@ -82,7 +86,7 @@ for further details. This change was implemented in BIND as of release 9.14.0.

-

+

As a result, some domains may be non-resolvable without manual intervention. In these cases, resolution can be restored by adding server clauses for the offending @@ -90,32 +94,33 @@ send-cookie no, depending on the specific noncompliance.

-

+

To determine which server clause to use, run the following commands to send queries to the authoritative servers for the broken domain:

-


+


            dig soa <zone> @<server> +dnssec
            dig soa <zone> @<server> +dnssec +nocookie
            dig soa <zone> @<server> +noedns
  

-

+

If the first command fails but the second succeeds, the server most likely needs send-cookie no. If the first two fail but the third succeeds, then the server needs EDNS to be fully disabled with edns no.

-

+

Please contact the administrators of noncompliant domains and encourage them to upgrade their broken DNS servers.

-
-
-
+
+
+

Incrementing and Changing the Serial Number

-

+ +

Zone serial numbers are just numbers — they aren't date related. A lot of people set them to a number that represents a date, usually of the form YYYYMMDDRR. @@ -127,22 +132,26 @@ lower than the serial number on the master, the slave server will attempt to update its copy of the zone.

-

+ +

Setting the serial number to a lower number on the master server than the slave server means that the slave will not perform updates to its copy of the zone.

-

+ +

The solution to this is to add 2147483647 (2^31-1) to the number, reload the zone and make sure all slaves have updated to the new zone serial number, then reset the number to what you want it to be, and reload the zone again.

-
-
+ +
+

Where Can I Get Help?

-

+ +

The Internet Systems Consortium (ISC) offers a wide range of support and service agreements for BIND and DHCP servers. Four @@ -155,15 +164,16 @@ fix announcements to remote support. It also includes training in BIND and DHCP.

-

+ +

To discuss arrangements for support, contact info@isc.org or visit the ISC web page at http://www.isc.org/services/support/ to read more.

-
-
+
+
@@ -181,6 +191,6 @@
-

BIND 9.17.0 (Development Release)

+

BIND 9.17.1 (Development Release)

diff --git a/doc/arm/Bv9ARM.ch08.html b/doc/arm/Bv9ARM.ch08.html index 3db76a58c5..cfc28d5ab6 100644 --- a/doc/arm/Bv9ARM.ch08.html +++ b/doc/arm/Bv9ARM.ch08.html @@ -36,11 +36,12 @@

Table of Contents

-
Release Notes for BIND Version 9.17.0
+
Release Notes for BIND Version 9.17.1
Introduction
Supported Platforms
Download
+
Notes for BIND 9.17.1
Notes for BIND 9.17.0
License
End of Life
@@ -50,7 +51,7 @@

-Release Notes for BIND Version 9.17.0

+Release Notes for BIND Version 9.17.1

@@ -107,6 +108,100 @@

+Notes for BIND 9.17.1

+ +
+

+Security Fixes

+
  • +

    + DNS rebinding protection was ineffective when BIND 9 is configured as + a forwarding DNS server. Found and responsibly reported by Tobias + Klein. [GL #1574] +

    +
+
+ +
+

+Known Issues

+
  • +

    + We have received reports that in some circumstances, receipt of an + IXFR can cause the processing of queries to slow significantly. Some + of these were related to RPZ processing, which has been fixed in this + release (see below). Others appear to occur where there are + NSEC3-related changes (such as an operator changing the NSEC3 salt + used in the hash calculation). These are being investigated. + [GL #1685] +

    +
+
+ +
+

+New Features

+
  • +

    + A new option, nsdname-wait-recurse, has been added + to the response-policy clause in the configuration + file. When set to no, RPZ NSDNAME rules are only + applied if the authoritative nameservers for the query name have been + looked up and are present in the cache. If this information is not + present, the RPZ NSDNAME rules are ignored, but the information is + looked up in the background and applied to subsequent queries. The + default is yes, meaning that RPZ NSDNAME rules + should always be applied, even if the information needs to be looked + up first. [GL #1138] +

    +
+
+ +
+

+Feature Changes

+
  • +

    + The previous DNSSEC sign statistics used lots of memory. The number of + keys to track is reduced to four per zone, which should be enough for + 99% of all signed zones. [GL #1179] +

    +
+
+ +
+

+Bug Fixes

+
    +
  • +

    + When an RPZ policy zone was updated via zone transfer and a large + number of records was deleted, named could become + nonresponsive for a short period while deleted names were removed from + the RPZ summary database. This database cleanup is now done + incrementally over a longer period of time, reducing such delays. + [GL #1447] +

    +
    • +
  • +

    + When trying to migrate an already-signed zone from + auto-dnssec maintain to one based on + dnssec-policy, the existing keys were immediately + deleted and replaced with new ones. As the key rollover timing + constraints were not being followed, it was possible that some clients + would not have been able to validate responses until all old DNSSEC + information had timed out from caches. BIND now looks at the time + metadata of the existing keys and incorporates it into its DNSSEC + policy operation. [GL #1706] +

    +
    • +
+
+ +
+
+

Notes for BIND 9.17.0

@@ -131,7 +226,8 @@

New Features

-
  • +
      +

    • When a secondary server receives a large incremental zone transfer (IXFR), it can have a negative impact on query @@ -147,7 +243,21 @@ to the size of a full zone transfer. The default is 100%. [GL #1515]

      -
    +
    • +
  • +

    + A new RPZ option nsdname-wait-recurse + controls whether RPZ-NSDNAME rules should always be applied + even if the names of authoritative name servers for the query + name need to be looked up recurively first. The default is + yes. Setting it to + no speeds up initial responses by skipping + RPZ-NSDNAME rules when name server domain names are not yet + in the cache. The names will be looked up in the background and + the rule will be applied for subsequent queries. [GL #1138] +

    +
    • +
@@ -264,6 +374,6 @@
-

BIND 9.17.0 (Development Release)

+

BIND 9.17.1 (Development Release)

diff --git a/doc/arm/Bv9ARM.ch09.html b/doc/arm/Bv9ARM.ch09.html index 042f771c62..41e3557d5e 100644 --- a/doc/arm/Bv9ARM.ch09.html +++ b/doc/arm/Bv9ARM.ch09.html @@ -10,7 +10,7 @@ Appendix B. A Brief History of the DNS and BIND - + @@ -35,7 +35,7 @@

A Brief History of the DNS and BIND

-

+

Although the "official" beginning of the Domain Name System occurred in 1984 with the publication of RFC 920, the core of the new system was described in 1983 in RFCs 882 and @@ -50,7 +50,8 @@ became the standards upon which all DNS implementations are built.

-

+ +

The first working domain name server, called "Jeeves", was written in 1983-84 by Paul Mockapetris for operation on DEC Tops-20 @@ -68,7 +69,7 @@ Administration (DARPA).

-

+

Versions of BIND through 4.8.3 were maintained by the Computer Systems Research Group (CSRG) at UC Berkeley. Douglas Terry, Mark @@ -83,7 +84,7 @@ Mike Muuss, Jim Bloom and Mike Schwartz. BIND maintenance was subsequently handled by Mike Karels and Øivind Kure.

-

+

BIND versions 4.9 and 4.9.1 were released by Digital Equipment Corporation (now Compaq Computer Corporation). Paul Vixie, then @@ -95,41 +96,41 @@ Baran, Anant Kumar, Art Harkin, Win Treese, Don Lewis, Christophe Wolfhugel, and others.

-

+

In 1994, BIND version 4.9.2 was sponsored by Vixie Enterprises. Paul Vixie became BIND's principal architect/programmer.

-

+

BIND versions from 4.9.3 onward have been developed and maintained by the Internet Systems Consortium and its predecessor, the Internet Software Consortium, with support being provided by ISC's sponsors.

-

+

As co-architects/programmers, Bob Halley and Paul Vixie released the first production-ready version of BIND version 8 in May 1997.

-

+

BIND version 9 was released in September 2000 and is a major rewrite of nearly all aspects of the underlying BIND architecture.

-

+

BIND versions 4 and 8 are officially deprecated. No additional development is done on BIND version 4 or BIND version 8.

-

+

BIND development work is made possible today by the sponsorship of several corporations, and by the tireless work efforts of numerous individuals.

-
+
@@ -147,6 +148,6 @@
-

BIND 9.17.0 (Development Release)

+

BIND 9.17.1 (Development Release)

diff --git a/doc/arm/Bv9ARM.ch10.html b/doc/arm/Bv9ARM.ch10.html index e09e3140d6..9be6a0cfca 100644 --- a/doc/arm/Bv9ARM.ch10.html +++ b/doc/arm/Bv9ARM.ch10.html @@ -10,7 +10,7 @@ Appendix C. General DNS Reference Information - + @@ -45,10 +45,12 @@

-
+ +

IPv6 addresses (AAAA)

-

+ +

IPv6 addresses are 128-bit identifiers for interfaces and sets of interfaces which were introduced in the DNS to facilitate scalable Internet routing. There are three types of addresses: Unicast, @@ -59,13 +61,13 @@ Unicast address scheme. For more information, see RFC 3587, "Global Unicast Address Format."

-

+

IPv6 unicast addresses consist of a global routing prefix, a subnet identifier, and an interface identifier.

-

+

The global routing prefix is provided by the upstream provider or ISP, and (roughly) corresponds to the IPv4 network section @@ -79,14 +81,14 @@ interface on a given network; in IPv6, addresses belong to interfaces rather than to machines.

-

+

The subnetting capability of IPv6 is much more flexible than that of IPv4: subnetting can be carried out on bit boundaries, in much the same way as Classless InterDomain Routing (CIDR), and the DNS PTR representation ("nibble" format) makes setting up reverse zones easier.

-

+

The Interface Identifier must be unique on the local link, and is usually generated automatically by the IPv6 implementation, although it is usually possible to @@ -94,7 +96,7 @@ address might look like: 2001:db8:201:9:a00:20ff:fe81:2b32

-

+

IPv6 address specifications often contain long strings of zeros, so the architects have included a shorthand for specifying @@ -102,14 +104,16 @@ string of zeros that can fit, and can be used only once in an address.

-
-
+
+

Bibliography (and Suggested Reading)

-
+ +

Request for Comments (RFCs)

-

+ +

Specification documents for the Internet protocol suite, including the DNS, are published as part of the Request for Comments (RFCs) @@ -117,358 +121,774 @@ by the Internet Engineering Task Force (IETF) and the Internet Engineering Steering Group (IESG). RFCs can be obtained online via FTP at:

-

+

ftp://www.isi.edu/in-notes/RFCxxxx.txt

-

+

(where xxxx is the number of the RFC). RFCs are also available via the Web at:

-

+

http://www.ietf.org/rfc/.

-
+

-
+

Standards

-
-

[RFC974] C. Partridge. Mail Routing and the Domain System. January 1986.

+ + +
+

[RFC974] + + C. Partridge. + Mail Routing and the Domain System. + January 1986. +

-
-

[RFC1034] P.V. Mockapetris. Domain Names — Concepts and Facilities. November 1987.

+
+

[RFC1034] + + P.V. Mockapetris. + Domain Names — Concepts and Facilities. + November 1987. +

-
-

[RFC1035] P. V. Mockapetris. Domain Names — Implementation and - Specification. November 1987.

+
+

[RFC1035] + + P. V. Mockapetris. Domain Names — Implementation and + Specification. + November 1987. +

-
-
+
+

Proposed Standards

-
-

[RFC2181] R., R. Bush Elz. Clarifications to the DNS - Specification. July 1997.

+ + +
+

[RFC2181] + + R., R. Bush Elz. + Clarifications to the DNS + Specification. + July 1997. +

-
-

[RFC2308] M. Andrews. Negative Caching of DNS - Queries. March 1998.

+
+

[RFC2308] + + M. Andrews. + Negative Caching of DNS + Queries. + March 1998. +

-
-

[RFC1995] M. Ohta. Incremental Zone Transfer in DNS. August 1996.

+
+

[RFC1995] + + M. Ohta. + Incremental Zone Transfer in DNS. + August 1996. +

-
-

[RFC1996] P. Vixie. A Mechanism for Prompt Notification of Zone Changes. August 1996.

+
+

[RFC1996] + + P. Vixie. + A Mechanism for Prompt Notification of Zone Changes. + August 1996. +

-
-

[RFC2136] P. Vixie, S. Thomson, Y. Rekhter, and J. Bound. Dynamic Updates in the Domain Name System. April 1997.

+
+

[RFC2136] + + P. Vixie, S. Thomson, Y. Rekhter, and J. Bound. + Dynamic Updates in the Domain Name System. + April 1997. +

-
-

[RFC2671] P. Vixie. Extension Mechanisms for DNS (EDNS0). August 1997.

+
+

[RFC2671] + + P. Vixie. + Extension Mechanisms for DNS (EDNS0). + August 1997. +

-
-

[RFC2672] M. Crawford. Non-Terminal DNS Name Redirection. August 1999.

+
+

[RFC2672] + + M. Crawford. + Non-Terminal DNS Name Redirection. + August 1999. +

-
-

[RFC2845] P. Vixie, O. Gudmundsson, D. Eastlake, 3rd, and B. Wellington. Secret Key Transaction Authentication for DNS (TSIG). May 2000.

+
+

[RFC2845] + + P. Vixie, O. Gudmundsson, D. Eastlake, 3rd, and B. Wellington. + Secret Key Transaction Authentication for DNS (TSIG). + May 2000. +

-
-

[RFC2930] D. Eastlake, 3rd. Secret Key Establishment for DNS (TKEY RR). September 2000.

+
+

[RFC2930] + + D. Eastlake, 3rd. + Secret Key Establishment for DNS (TKEY RR). + September 2000. +

-
-

[RFC2931] D. Eastlake, 3rd. DNS Request and Transaction Signatures (SIG(0)s). September 2000.

+
+

[RFC2931] + + D. Eastlake, 3rd. + DNS Request and Transaction Signatures (SIG(0)s). + September 2000. +

-
-

[RFC3007] B. Wellington. Secure Domain Name System (DNS) Dynamic Update. November 2000.

+
+

[RFC3007] + + B. Wellington. + Secure Domain Name System (DNS) Dynamic Update. + November 2000. +

-
-

[RFC3645] S. Kwan, P. Garg, J. Gilroy, L. Esibov, J. Westhead, and R. Hall. Generic Security Service Algorithm for Secret +

+

[RFC3645] + + S. Kwan, P. Garg, J. Gilroy, L. Esibov, J. Westhead, and R. Hall. + Generic Security Service Algorithm for Secret Key Transaction Authentication for DNS - (GSS-TSIG). October 2003.

+ (GSS-TSIG). + October 2003. +

-
-
+
+

DNS Security Proposed Standards

-
-

[RFC3225] D. Conrad. Indicating Resolver Support of DNSSEC. December 2001.

+ +
+

[RFC3225] + + D. Conrad. + Indicating Resolver Support of DNSSEC. + December 2001. +

-
-

[RFC3833] D. Atkins and R. Austein. Threat Analysis of the Domain Name System (DNS). August 2004.

+
+

[RFC3833] + + D. Atkins and R. Austein. + Threat Analysis of the Domain Name System (DNS). + August 2004. +

-
-

[RFC4033] R. Arends, R. Austein, M. Larson, D. Massey, and S. Rose. DNS Security Introduction and Requirements. March 2005.

+
+

[RFC4033] + + R. Arends, R. Austein, M. Larson, D. Massey, and S. Rose. + DNS Security Introduction and Requirements. + March 2005. +

-
-

[RFC4034] R. Arends, R. Austein, M. Larson, D. Massey, and S. Rose. Resource Records for the DNS Security Extensions. March 2005.

+
+

[RFC4034] + + R. Arends, R. Austein, M. Larson, D. Massey, and S. Rose. + Resource Records for the DNS Security Extensions. + March 2005. +

-
-

[RFC4035] R. Arends, R. Austein, M. Larson, D. Massey, and S. Rose. Protocol Modifications for the DNS - Security Extensions. March 2005.

+
+

[RFC4035] + + R. Arends, R. Austein, M. Larson, D. Massey, and S. Rose. + Protocol Modifications for the DNS + Security Extensions. + March 2005. +

-
-
+
+

Other Important RFCs About DNS Implementation

-
-

[RFC1535] E. Gavron. A Security Problem and Proposed Correction With Widely - Deployed DNS Software. October 1993.

+ +
+

[RFC1535] + + E. Gavron. + A Security Problem and Proposed Correction With Widely + Deployed DNS Software. + October 1993. +

-
-

[RFC1536] A. Kumar, J. Postel, C. Neuman, P. Danzig, and S. Miller. Common DNS Implementation - Errors and Suggested Fixes. October 1993.

+
+

[RFC1536] + + A. Kumar, J. Postel, C. Neuman, P. Danzig, and S. Miller. + Common DNS Implementation + Errors and Suggested Fixes. + October 1993. +

-
-

[RFC1982] R. Elz and R. Bush. Serial Number Arithmetic. August 1996.

+
+

[RFC1982] + + R. Elz and R. Bush. + Serial Number Arithmetic. + August 1996. +

-
-

[RFC4074] Y. Morishita and T. Jinmei. Common Misbehaviour Against DNS - Queries for IPv6 Addresses. May 2005.

+
+

[RFC4074] + + Y. Morishita and T. Jinmei. + Common Misbehaviour Against DNS + Queries for IPv6 Addresses. + May 2005. +

-
-
+
+

Resource Record Types

-
-

[RFC1183] C.F. Everhart, L. A. Mamakos, R. Ullmann, and P. Mockapetris. New DNS RR Definitions. October 1990.

+ +
+

[RFC1183] + + C.F. Everhart, L. A. Mamakos, R. Ullmann, and P. Mockapetris. + New DNS RR Definitions. + October 1990. +

-
-

[RFC1706] B. Manning and R. Colella. DNS NSAP Resource Records. October 1994.

+
+

[RFC1706] + + B. Manning and R. Colella. + DNS NSAP Resource Records. + October 1994. +

-
-

[RFC2168] R. Daniel and M. Mealling. Resolution of Uniform Resource Identifiers using - the Domain Name System. June 1997.

+
+

[RFC2168] + + R. Daniel and M. Mealling. + Resolution of Uniform Resource Identifiers using + the Domain Name System. + June 1997. +

-
-

[RFC1876] C. Davis, P. Vixie, T., and I. Dickinson. A Means for Expressing Location Information in the +

+

[RFC1876] + + C. Davis, P. Vixie, T., and I. Dickinson. + A Means for Expressing Location Information in the Domain - Name System. January 1996.

+ Name System. + January 1996. +

-
-

[RFC2052] A. Gulbrandsen and P. Vixie. A DNS RR for Specifying the +

+

[RFC2052] + + A. Gulbrandsen and P. Vixie. + A DNS RR for Specifying the Location of - Services. October 1996.

+ Services. + October 1996. +

-
-

[RFC2163] A. Allocchio. Using the Internet DNS to +

+

[RFC2163] + + A. Allocchio. + Using the Internet DNS to Distribute MIXER - Conformant Global Address Mapping. January 1998.

+ Conformant Global Address Mapping. + January 1998. +

-
-

[RFC2230] R. Atkinson. Key Exchange Delegation Record for the DNS. October 1997.

+
+

[RFC2230] + + R. Atkinson. + Key Exchange Delegation Record for the DNS. + October 1997. +

-
-

[RFC2536] D. Eastlake, 3rd. DSA KEYs and SIGs in the Domain Name System (DNS). March 1999.

+
+

[RFC2536] + + D. Eastlake, 3rd. + DSA KEYs and SIGs in the Domain Name System (DNS). + March 1999. +

-
-

[RFC2537] D. Eastlake, 3rd. RSA/MD5 KEYs and SIGs in the Domain Name System (DNS). March 1999.

+
+

[RFC2537] + + D. Eastlake, 3rd. + RSA/MD5 KEYs and SIGs in the Domain Name System (DNS). + March 1999. +

-
-

[RFC2538] D. Eastlake, 3rd and O. Gudmundsson. Storing Certificates in the Domain Name System (DNS). March 1999.

+
+

[RFC2538] + + D. Eastlake, 3rd and O. Gudmundsson. + Storing Certificates in the Domain Name System (DNS). + March 1999. +

-
-

[RFC2539] D. Eastlake, 3rd. Storage of Diffie-Hellman Keys in the Domain Name System (DNS). March 1999.

+
+

[RFC2539] + + D. Eastlake, 3rd. + Storage of Diffie-Hellman Keys in the Domain Name System (DNS). + March 1999. +

-
-

[RFC2540] D. Eastlake, 3rd. Detached Domain Name System (DNS) Information. March 1999.

+
+

[RFC2540] + + D. Eastlake, 3rd. + Detached Domain Name System (DNS) Information. + March 1999. +

-
-

[RFC2782] A. Gulbrandsen. P. Vixie. L. Esibov. A DNS RR for specifying the location of services (DNS SRV). February 2000.

+
+

[RFC2782] + + A. Gulbrandsen. + P. Vixie. + L. Esibov. + A DNS RR for specifying the location of services (DNS SRV). + February 2000. +

-
-

[RFC2915] M. Mealling. R. Daniel. The Naming Authority Pointer (NAPTR) DNS Resource Record. September 2000.

+
+

[RFC2915] + + M. Mealling. + R. Daniel. + The Naming Authority Pointer (NAPTR) DNS Resource Record. + September 2000. +

-
-

[RFC3110] D. Eastlake, 3rd. RSA/SHA-1 SIGs and RSA KEYs in the Domain Name System (DNS). May 2001.

+
+

[RFC3110] + + D. Eastlake, 3rd. + RSA/SHA-1 SIGs and RSA KEYs in the Domain Name System (DNS). + May 2001. +

-
-

[RFC3123] P. Koch. A DNS RR Type for Lists of Address Prefixes (APL RR). June 2001.

+
+

[RFC3123] + + P. Koch. + A DNS RR Type for Lists of Address Prefixes (APL RR). + June 2001. +

-
-

[RFC3596] S. Thomson, C. Huitema, V. Ksinant, and M. Souissi. DNS Extensions to support IP - version 6. October 2003.

+
+

[RFC3596] + + S. Thomson, C. Huitema, V. Ksinant, and M. Souissi. + DNS Extensions to support IP + version 6. + October 2003. +

-
-

[RFC3597] A. Gustafsson. Handling of Unknown DNS Resource Record (RR) Types. September 2003.

+
+

[RFC3597] + + A. Gustafsson. + Handling of Unknown DNS Resource Record (RR) Types. + September 2003. +

-
-
+
+

DNS and the Internet

-
-

[RFC1101] P. V. Mockapetris. DNS Encoding of Network Names - and Other Types. April 1989.

+ +
+

[RFC1101] + + P. V. Mockapetris. + DNS Encoding of Network Names + and Other Types. + April 1989. +

-
-

[RFC1123] Braden. Requirements for Internet Hosts - Application and - Support. October 1989.

+
+

[RFC1123] + + Braden. + Requirements for Internet Hosts - Application and + Support. + October 1989. +

-
-

[RFC1591] J. Postel. Domain Name System Structure and Delegation. March 1994.

+
+

[RFC1591] + + J. Postel. + Domain Name System Structure and Delegation. + March 1994. +

-
-

[RFC2317] H. Eidnes, G. de Groot, and P. Vixie. Classless IN-ADDR.ARPA Delegation. March 1998.

+
+

[RFC2317] + + H. Eidnes, G. de Groot, and P. Vixie. + Classless IN-ADDR.ARPA Delegation. + March 1998. +

-
-

[RFC2826] Internet Architecture Board. IAB Technical Comment on the Unique DNS Root. May 2000.

+
+

[RFC2826] + + Internet Architecture Board. + IAB Technical Comment on the Unique DNS Root. + May 2000. +

-
-

[RFC2929] D. Eastlake, 3rd, E. Brunner-Williams, and B. Manning. Domain Name System (DNS) IANA Considerations. September 2000.

+
+

[RFC2929] + + D. Eastlake, 3rd, E. Brunner-Williams, and B. Manning. + Domain Name System (DNS) IANA Considerations. + September 2000. +

-
-
+
+

DNS Operations

-
-

[RFC1033] M. Lottor. Domain administrators operations guide. November 1987.

+ +
+

[RFC1033] + + M. Lottor. + Domain administrators operations guide. + November 1987. +

-
-

[RFC1537] P. Beertema. Common DNS Data File - Configuration Errors. October 1993.

+
+

[RFC1537] + + P. Beertema. + Common DNS Data File + Configuration Errors. + October 1993. +

-
-

[RFC1912] D. Barr. Common DNS Operational and - Configuration Errors. February 1996.

+
+

[RFC1912] + + D. Barr. + Common DNS Operational and + Configuration Errors. + February 1996. +

-
-

[RFC2010] B. Manning and P. Vixie. Operational Criteria for Root Name Servers. October 1996.

+
+

[RFC2010] + + B. Manning and P. Vixie. + Operational Criteria for Root Name Servers. + October 1996. +

-
-

[RFC2219] M. Hamilton and R. Wright. Use of DNS Aliases for - Network Services. October 1997.

+
+

[RFC2219] + + M. Hamilton and R. Wright. + Use of DNS Aliases for + Network Services. + October 1997. +

-
-
+
+

Internationalized Domain Names

-
-

[RFC2825] IAB and R. Daigle. A Tangled Web: Issues of I18N, Domain Names, - and the Other Internet protocols. May 2000.

+ +
+

[RFC2825] + + IAB and R. Daigle. + A Tangled Web: Issues of I18N, Domain Names, + and the Other Internet protocols. + May 2000. +

-
-

[RFC3490] P. Faltstrom, P. Hoffman, and A. Costello. Internationalizing Domain Names in Applications (IDNA). March 2003.

+
+

[RFC3490] + + P. Faltstrom, P. Hoffman, and A. Costello. + Internationalizing Domain Names in Applications (IDNA). + March 2003. +

-
-

[RFC3491] P. Hoffman and M. Blanchet. Nameprep: A Stringprep Profile for Internationalized Domain Names. March 2003.

+
+

[RFC3491] + + P. Hoffman and M. Blanchet. + Nameprep: A Stringprep Profile for Internationalized Domain Names. + March 2003. +

-
-

[RFC3492] A. Costello. Punycode: A Bootstring encoding of Unicode +

+

[RFC3492] + + A. Costello. + Punycode: A Bootstring encoding of Unicode for Internationalized Domain Names in - Applications (IDNA). March 2003.

+ Applications (IDNA). + March 2003. +

-
-
+
+

Other DNS-related RFCs

-
+ +

Note

-

+

Note: the following list of RFCs, although DNS-related, are not concerned with implementing software.

+
+
+

[RFC1464] + + R. Rosenbaum. + Using the Domain Name System To Store Arbitrary String + Attributes. + May 1993. +

-
-

[RFC1464] R. Rosenbaum. Using the Domain Name System To Store Arbitrary String - Attributes. May 1993.

+
+

[RFC1713] + + A. Romao. + Tools for DNS Debugging. + November 1994. +

-
-

[RFC1713] A. Romao. Tools for DNS Debugging. November 1994.

+
+

[RFC1794] + + T. Brisco. + DNS Support for Load + Balancing. + April 1995. +

-
-

[RFC1794] T. Brisco. DNS Support for Load - Balancing. April 1995.

+
+

[RFC2240] + + O. Vaughan. + A Legal Basis for Domain Name Allocation. + November 1997. +

-
-

[RFC2240] O. Vaughan. A Legal Basis for Domain Name Allocation. November 1997.

+
+

[RFC2345] + + J. Klensin, T. Wolf, and G. Oglesby. + Domain Names and Company Name Retrieval. + May 1998. +

-
-

[RFC2345] J. Klensin, T. Wolf, and G. Oglesby. Domain Names and Company Name Retrieval. May 1998.

+
+

[RFC2352] + + O. Vaughan. + A Convention For Using Legal Names as Domain Names. + May 1998. +

-
-

[RFC2352] O. Vaughan. A Convention For Using Legal Names as Domain Names. May 1998.

+
+

[RFC3071] + + J. Klensin. + Reflections on the DNS, RFC 1591, and Categories of Domains. + February 2001. +

-
-

[RFC3071] J. Klensin. Reflections on the DNS, RFC 1591, and Categories of Domains. February 2001.

+
+

[RFC3258] + + T. Hardie. + Distributing Authoritative Name Servers via + Shared Unicast Addresses. + April 2002. +

-
-

[RFC3258] T. Hardie. Distributing Authoritative Name Servers via - Shared Unicast Addresses. April 2002.

+
+

[RFC3901] + + A. Durand and J. Ihren. + DNS IPv6 Transport Operational Guidelines. + September 2004. +

-
-

[RFC3901] A. Durand and J. Ihren. DNS IPv6 Transport Operational Guidelines. September 2004.

-
-
-
+
+

Obsolete and Unimplemented Experimental RFC

-
-

[RFC1712] C. Farrell, M. Schulze, S. Pleitner, and D. Baldoni. DNS Encoding of Geographical - Location. November 1994.

+ +
+

[RFC1712] + + C. Farrell, M. Schulze, S. Pleitner, and D. Baldoni. + DNS Encoding of Geographical + Location. + November 1994. +

-
-

[RFC2673] M. Crawford. Binary Labels in the Domain Name System. August 1999.

+
+

[RFC2673] + + M. Crawford. + Binary Labels in the Domain Name System. + August 1999. +

-
-

[RFC2874] M. Crawford and C. Huitema. DNS Extensions to Support IPv6 Address Aggregation - and Renumbering. July 2000.

+
+

[RFC2874] + + M. Crawford and C. Huitema. + DNS Extensions to Support IPv6 Address Aggregation + and Renumbering. + July 2000. +

-
-
+
+

Obsoleted DNS Security RFCs

-
+ +

Note

-

+

Most of these have been consolidated into RFC4033, RFC4034 and RFC4035 which collectively describe DNSSECbis.

+
+
+

[RFC2065] + + D. Eastlake, 3rd and C. Kaufman. + Domain Name System Security Extensions. + January 1997. +

-
-

[RFC2065] D. Eastlake, 3rd and C. Kaufman. Domain Name System Security Extensions. January 1997.

+
+

[RFC2137] + + D. Eastlake, 3rd. + Secure Domain Name System Dynamic Update. + April 1997. +

-
-

[RFC2137] D. Eastlake, 3rd. Secure Domain Name System Dynamic Update. April 1997.

+
+

[RFC2535] + + D. Eastlake, 3rd. + Domain Name System Security Extensions. + March 1999. +

-
-

[RFC2535] D. Eastlake, 3rd. Domain Name System Security Extensions. March 1999.

+
+

[RFC3008] + + B. Wellington. + Domain Name System Security (DNSSEC) + Signing Authority. + November 2000. +

-
-

[RFC3008] B. Wellington. Domain Name System Security (DNSSEC) - Signing Authority. November 2000.

+
+

[RFC3090] + + E. Lewis. + DNS Security Extension Clarification on Zone Status. + March 2001. +

-
-

[RFC3090] E. Lewis. DNS Security Extension Clarification on Zone Status. March 2001.

+
+

[RFC3445] + + D. Massey and S. Rose. + Limiting the Scope of the KEY Resource Record (RR). + December 2002. +

-
-

[RFC3445] D. Massey and S. Rose. Limiting the Scope of the KEY Resource Record (RR). December 2002.

+
+

[RFC3655] + + B. Wellington and O. Gudmundsson. + Redefinition of DNS Authenticated Data (AD) bit. + November 2003. +

-
-

[RFC3655] B. Wellington and O. Gudmundsson. Redefinition of DNS Authenticated Data (AD) bit. November 2003.

+
+

[RFC3658] + + O. Gudmundsson. + Delegation Signer (DS) Resource Record (RR). + December 2003. +

-
-

[RFC3658] O. Gudmundsson. Delegation Signer (DS) Resource Record (RR). December 2003.

+
+

[RFC3755] + + S. Weiler. + Legacy Resolver Compatibility for Delegation Signer (DS). + May 2004. +

-
-

[RFC3755] S. Weiler. Legacy Resolver Compatibility for Delegation Signer (DS). May 2004.

+
+

[RFC3757] + + O. Kolkman, J. Schlyter, and E. Lewis. + Domain Name System KEY (DNSKEY) Resource Record + (RR) Secure Entry Point (SEP) Flag. + April 2004. +

-
-

[RFC3757] O. Kolkman, J. Schlyter, and E. Lewis. Domain Name System KEY (DNSKEY) Resource Record - (RR) Secure Entry Point (SEP) Flag. April 2004.

+
+

[RFC3845] + + J. Schlyter. + DNS Security (DNSSEC) NextSECure (NSEC) RDATA Format. + August 2004. +

-
-

[RFC3845] J. Schlyter. DNS Security (DNSSEC) NextSECure (NSEC) RDATA Format. August 2004.

-
-
-
-
-
+
+
+
+

Internet Drafts

-

+ +

Internet Drafts (IDs) are rough-draft working documents of the Internet Engineering Task Force. They are, in essence, RFCs in the preliminary stages of development. Implementors are @@ -478,21 +898,26 @@ they are "works in progress." IDs have a lifespan of six months after which they are deleted unless updated by their authors.

-
-
+
+

Other Documents About BIND

-

-
+ +

+

-
-

Paul Albitz and Cricket Liu. DNS and BIND. Copyright © 1998 Sebastopol, CA: O'Reilly and Associates.

-
-
-
-
+
+

+ Paul Albitz and Cricket Liu. + DNS and BIND. + Copyright © 1998 Sebastopol, CA: O'Reilly and Associates. +

+
+
+
+
@@ -510,6 +935,6 @@
-

BIND 9.17.0 (Development Release)

+

BIND 9.17.1 (Development Release)

diff --git a/doc/arm/Bv9ARM.ch11.html b/doc/arm/Bv9ARM.ch11.html index ca185b2a19..3a681e51d0 100644 --- a/doc/arm/Bv9ARM.ch11.html +++ b/doc/arm/Bv9ARM.ch11.html @@ -10,7 +10,7 @@ Appendix D. BIND 9 DNS Library Support - + @@ -46,10 +46,11 @@
-
+

BIND 9 DNS Library Support

-

+ +

This version of BIND 9 "exports" its internal libraries so that they can be used by third-party applications more easily (we call them "export" libraries in this document). Certain library @@ -58,27 +59,32 @@ the calling program initializes the libraries by calling isc_lib_register().

-

+

In addition to DNS-related APIs that are used within BIND 9, the libraries provide the following features:

-
    -

  • +

      +
    • +

      The "DNS client" module. This is a higher level API that provides an interface to name resolution, single DNS transaction with a particular server, and dynamic update. Regarding name resolution, it supports advanced features such as DNSSEC validation and caching. This module supports both synchronous and asynchronous mode. -

      • -

    • +

      +
      • +
    • +

      The "IRS" (Information Retrieval System) library. It provides an interface to parse the traditional resolv.conf file and more advanced, DNS-specific configuration file for the rest of this package (see the description for the dns.conf file below). -

      • -

    • +

      +
      • +
    • +

      As part of the IRS library, the standard address-name mapping functions, getaddrinfo() and getnameinfo(), are provided. They use the @@ -87,33 +93,38 @@ getaddrinfo() function resolves both A and AAAA RRs concurrently when the address family is unspecified. -

      • -

    • +

      +
      • +
    • +

      An experimental framework to support other event libraries than BIND 9's internal event task system. -

      • +

      +
    -
    +

    Installation

    -
    +    
+    
     $ make install
     
    
-
    
+    
    
       Normal installation of BIND will also install library object
       and header files.  Root privilege is normally required.
     
    
-
    
+    
    
       To see how to build your own application after the installation, see
       lib/samples/Makefile-postinstall.in.
     
    
-
    -
    +
    +

    Known Defects/Restrictions

    -
      + +
      • -

        +

        The "fixed" RRset order is not (currently) supported in the export library. If you want to use "fixed" RRset order for, e.g. named while still building the export library @@ -128,25 +139,30 @@ $ make

        -
        • -

      • +

        • +
      • +

        RFC 5011 is not supported in the validating stub resolver of the export library. In fact, it is not clear whether it should: trust anchors would be a system-wide configuration which would be managed by an administrator, while the stub resolver will be used by ordinary applications run by a normal user. -

        • -

      • +

        +
        • +
      • +

        Not all common /etc/resolv.conf options are supported in the IRS library. The only available options in this version are debug and ndots. -

        • +

        +
      -
    -
    +
    +

    The dns.conf File

    -

    + +

    The IRS library supports an "advanced" configuration file related to the DNS library for configuration parameters that would be beyond the capability of the resolv.conf file. @@ -164,38 +180,42 @@ $ make with initial-key or iniital-ds. (See the section called “managed-keys Statement Grammar” for syntax details.)

    -
    -
    +
    +

    Sample Applications

    -

    + +

    Some sample application programs using this API are provided for reference. The following is a brief description of these applications.

    -
    +

    sample: a simple stub resolver utility

    -

    + +

    Sends a query of a given name (of a given optional RR type) to a specified recursive server and prints the result as a list of RRs. It can also act as a validating stub resolver if a trust anchor is given via a set of command line options.

    -

    +

    Usage: sample [options] server_address hostname

    -

    +

    Options and Arguments:

    -
    +
    -t RRtype
    -

    +

    +

    specify the RR type of the query. The default is the A RR. -

    +

    +
    [-a algorithm] [-e] -k keyname -K keystring
    -

    +

    specify a command-line DNS key to validate the answer. For example, to specify the following DNSKEY of example.com:

    @@ -213,36 +233,43 @@ $ make as "secure entry point"). When -a is omitted rsasha1 will be used by default.

    -
    +
    -s domain:alt_server_address
    -

    +

    +

    specify a separate recursive server address for the specific "domain". Example: -s example.com:2001:db8::1234 -

    +

    +
    server_address
    -

    +

    +

    an IP(v4/v6) address of the recursive server to which queries are sent. -

    +

    +
    hostname
    -

    +

    +

    the domain name for the query -

    +

    +
    -
    -
    +
    +

    sample-async: a simple stub resolver, working asynchronously

    -

    + +

    Similar to "sample", but accepts a list of (query) domain names as a separate file and resolves the names asynchronously.

    -

    +

    Usage: sample-async [-s server_address] [-t RR_type] input_file

    -

    +

    Options and Arguments:

    -
    +
    -s server_address
    an IPv4 address of the recursive server to which queries are sent. @@ -262,13 +289,14 @@ $ make       mx.example.net
          ns.xxx.example
          

    - +
    -
    -
    +
    +

    sample-request: a simple DNS transaction client

    -

    + +

    Sends a query to a specified server, and prints the response with minimal processing. It doesn't act as a "stub resolver": it stops the processing once it gets any response from the server, whether @@ -276,32 +304,39 @@ $ make further queries to get the ultimate answer. In other words, this utility acts as a very simplified dig.

    -

    +

    Usage: sample-request [-t RRtype] server_address hostname

    -

    +

    Options and Arguments:

    -
    +
    -t RRtype
    -

    +

    +

    specify the RR type of the queries. The default is the A RR. -

    +

    +
    server_address
    -

    +

    +

    an IP(v4/v6) address of the recursive server to which the query is sent. -

    +

    +
    hostname
    -

    +

    +

    the domain name for the query -

    +

    +
    -
    -
    +
    +

    sample-gai: getaddrinfo() and getnameinfo() test code

    -

    + +

    This is a test program to check getaddrinfo() and getnameinfo() behavior. It takes a host name as an argument, calls getaddrinfo() with the given host @@ -313,130 +348,153 @@ $ make will fail with an EAI_INSECUREDATA error when DNSSEC validation fails.

    -

    +

    Usage: sample-gai hostname

    -
    -
    +
    +

    sample-update: a simple dynamic update client program

    -

    + +

    Accepts a single update command as a command-line argument, sends an update request message to the authoritative server, and shows the response from the server. In other words, this is a simplified nsupdate.

    -

    +

    Usage: sample-update [options] (add|delete) "update data"

    -

    +

    Options and Arguments:

    -
    +
    -a auth_server
    -

    +

    +

    An IP address of the authoritative server that has authority for the zone containing the update name. This should normally be the primary authoritative server that accepts dynamic updates. It can also be a secondary server that is configured to forward update requests to the primary server. -

    +

    +
    -k keyfile
    -

    +

    +

    A TSIG key file to secure the update transaction. The keyfile format is the same as that for the nsupdate utility. -

    +

    +
    -p prerequisite
    -

    +

    +

    A prerequisite for the update (only one prerequisite can be specified). The prerequisite format is the same as that is accepted by the nsupdate utility. -

    +

    +
    -r recursive_server
    -

    +

    +

    An IP address of a recursive server that this utility will use. A recursive server may be necessary to identify the authoritative server address to which the update request is sent. -

    +

    +
    -z zonename
    -

    +

    +

    The domain name of the zone that contains -

    +

    +
    (add|delete)
    -

    +

    +

    Specify the type of update operation. Either "add" or "delete" must be specified. -

    +

    +
    "update data"
    -

    +

    +

    Specify the data to be updated. A typical example of the data would look like "name TTL RRtype RDATA". -

    +

    +
    -
    +

    Note

    -

    +

    In practice, either -a or -r must be specified. Others can be optional; the underlying library routine tries to identify the appropriate server and the zone name for the update.

    -
    -

    +

    +

    Examples: assuming the primary authoritative server of the dynamic.example.com zone has an IPv6 address 2001:db8::1234,

    -
    +      
     $ sample-update -a sample-update -k Kxxx.+nnn+mmmm.key add "foo.dynamic.example.com 30 IN A 192.168.2.1"
    
-
    
+      
    
 	adds an A RR for foo.dynamic.example.com using the given key.
       
    
-
    +      
     $ sample-update -a sample-update -k Kxxx.+nnn+mmmm.key delete "foo.dynamic.example.com 30 IN A"
    
-
    
+      
    
 	removes all A RRs for foo.dynamic.example.com using the given key.
       
    
-
    +      
     $ sample-update -a sample-update -k Kxxx.+nnn+mmmm.key delete "foo.dynamic.example.com"
    
-
    
+      
    
 	removes all RRs for foo.dynamic.example.com using the given key.
       
    
-
    -
    +
    +

    nsprobe: domain/name server checker in terms of RFC 4074

    -

    + +

    Checks a set of domains to see the name servers of the domains behave correctly in terms of RFC 4074. This is included in the set of sample programs to show how the export library can be used in a DNS-related application.

    -

    +

    Usage: nsprobe [-d] [-v [-v...]] [-c cache_address] [input_file]

    -

    +

    Options

    -
    +
    -d
    -

    +

    +

    Run in "debug" mode. With this option nsprobe will dump every RRs it receives. -

    +

    +
    -v
    -

    +

    +

    Increase verbosity of other normal log messages. This can be specified multiple times. -

    +

    +
    -c cache_address
    -

    +

    +

    Specify an IP address of a recursive (caching) name server. nsprobe uses this server to get the NS RRset of each domain and the A and/or AAAA RRsets for the name servers. The default value is 127.0.0.1. -

    +

    +
    input_file
    -

    +

    +

    A file name containing a list of domain (zone) names to be probed. when omitted the standard input will be used. Each line of the input file specifies a single domain name such as @@ -446,21 +504,23 @@ $ sample-update -a sample-update -k Kxxx.+nnn+mm for the given domain name, and sends A and AAAA queries to these servers for some "widely used" names under the zone; specifically, adding "www" and "ftp" to the zone name. -

    +

    +
    -
    -
    -
    +
    +
    +

    Library References

    -

    + +

    As of this writing, there is no formal "manual" for the libraries, except this document, header files (some of which provide pretty detailed explanations), and sample application programs.

    +
    -
    -
    +
    @@ -478,6 +538,6 @@ $ sample-update -a sample-update -k Kxxx.+nnn+mm
    -

    BIND 9.17.0 (Development Release)

    +

    BIND 9.17.1 (Development Release)

    diff --git a/doc/arm/Bv9ARM.ch12.html b/doc/arm/Bv9ARM.ch12.html index 020d12dbd3..8c82dd9da1 100644 --- a/doc/arm/Bv9ARM.ch12.html +++ b/doc/arm/Bv9ARM.ch12.html @@ -10,7 +10,7 @@ Manual pages - + @@ -154,7 +154,44 @@
    -
    + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
@@ -173,6 +210,6 @@
-

BIND 9.17.0 (Development Release)

+

BIND 9.17.1 (Development Release)

diff --git a/doc/arm/Bv9ARM.html b/doc/arm/Bv9ARM.html index cfd1f052d7..9ffb10deca 100644 --- a/doc/arm/Bv9ARM.html +++ b/doc/arm/Bv9ARM.html @@ -10,7 +10,7 @@ BIND 9 Administrator Reference Manual - + @@ -32,7 +32,7 @@

BIND 9 Administrator Reference Manual

-

BIND Version 9.17.0

+

BIND Version 9.17.1

Copyright © 2000-2020 Internet Systems Consortium, Inc. ("ISC")

@@ -247,11 +247,12 @@
A. Release Notes
-
Release Notes for BIND Version 9.17.0
+
Release Notes for BIND Version 9.17.1
Introduction
Supported Platforms
Download
+
Notes for BIND 9.17.1
Notes for BIND 9.17.0
License
End of Life
@@ -398,7 +399,32 @@
-
+ + + + + + + + + + + + + + + + + + + + + + + + + +
@@ -415,6 +441,6 @@
-

BIND 9.17.0 (Development Release)

+

BIND 9.17.1 (Development Release)

diff --git a/doc/arm/Bv9ARM.pdf b/doc/arm/Bv9ARM.pdf index 601873735a5bd2697f6502de5a69edb43aaf16bc..ea200533b31b790d6b033c9d477a8a37c9c25452 100644 GIT binary patch delta 300365 zcmXWCQ+Opz*R>nlNyoNr+qP}n$%<{Q*mlS2SRLE$*f#d_zu!Ksan)5vHLB*g=iJH? z>%A09(g&~qbCYaD2xtpKm+rv2C(@Vtz2OU4JMSZfl8AzVYc^mTy(7loziIk)tIr6} z>559(!N-2`?2q$qd-@*jt1z}y;aQMzbB8L;ma?quJkH3KQ&Ig@eXcT_#rsmYkTEtj z2xTszY#o{Z6GqBYdiEz(GUJSId0Q%V!(^sj%|k|~WZuBOn69uV9|DXBzX_U^b{5rm zH%e*1y8b*)%k|rtOmj1$@N!tLepl)Pl>b37I@P2ey_pv@lm)^ECiF6OfRzpKNt2}9 zHO#P$+Sm!7Jlsk}xPeW=&K>)}o`vy`U;f~p4xUa4Vu7YIep3yeIgW&h=m}VsgOhn4 z&f)vJ%ALf^z!)6@*5i??@q9)kbe>xWLM(@x&8K#=#9Uw8c1~;))fGgeB;siuk8<}# zD_fe+a&Koeq=VtHoS~wvcp3rVP;6sVCPojXCWHj|ScYf_ez7!J$p@2sO9(7=jiID&s@^P?u$?7y*>f&GzgJLf3yrPLVt@`FC#iLl48;!6mR{Kdm}PP zP%jyTb{PqjPH_jO&l&1|8y+^3Bf7OBYC|=cIwmoOw!q>0Q*}Cu zrFl$wQF8w6bTV1(EpK|&sn?)`a&*K@O2)=TZQcwd3hmNNTgfQ z=gil#!Cz{K@xZS?)jH|G%JgEb-oZz@rr_LmZpnG1%v~H3Ctpd?#ATHe3qHeA_D?Wi}_6x7jFw|e{0t=Q#`y*KQ(0V8m;QlZC`$wdX1ZRN)3gPo3ky z0O!DXY?r&Cj%4)tF-r+l{D92MfAaxJ9>FnElXx+KpnBjm&9l6c5O6OY zcRXLvzo;8~Q(2hMn^}a85YgWFC4ZZ>-t^J@0X( zAmj3f*g5`{zl_of^ILC+l6q3FaLs(h`DLxJZgM&#npJsmjW`%<9WNG#ncxa=-7unK zsO<2b%hDtF#25!-xlB8@3LHH5tGikm3s4_PrVX`F%R^ArA37Btat>JZR{)bh&!X49OEl{*ZD(G0h~raKG?IbxM(Z{#QoR|?0WkA0zyc`{O` zp=~!Oa$zZIl9A5a?pqa{6Y)(G-vWyOa2TmGDwx0l7*HC(RgRw91~+!Z&D*cuQ%HU7 z<+nzyO-gdH3X<)xnQQwEc&5te3S(`1*V6{0ztABAgmgvQGC_27ZFkm$f8HMh3ouR% z{O0%^{t&h7{l`K2cJG+zt?_>S`M1@UpCk_+h5Bdb%H{qor^_F#8cD%(biv`d*`7df(1Ey zHcx!Qf^os1+-IM-hM1?e^G}%8a!~8R$af^>6SNf~vSc+HmJyI=Q^3ejU>$+$wa?-- z!k386aE#}qS@1Cht)*6-+=56*mE{7K;O;?XpSg5 zXn<)2fSdhB{71AXt;H50%5knYL9qDZwq~aFoN?NAne$YKz3~T9MU(XzA_*lu^V=b- zoEwV342#f`w@oeovPls@V5Dv8$Btwwmde(X!~TQ3fY6;3sDAf0HRCR4a7m;iRXPlL zb|;1*KWIWoYej~x(fnL-#*H6glNn^M6a|X~Ftv(xL7N%np|l&NC#ywzr&~PaP}{J= zfRT`s$04Rnj)*wYlhLVUN7Y2em$IGV=@c}?^;4Nngo0A+Nu{CLrgpw?F^14J4ZsyE*yTbFys&b zD4-8<8CBbzRn6s103HX@jK?l{->uHfqZU?2SJE}n!x@g5@awCi@O{*Xmf_zUAZ0kZ zL%JuQlqse#cg=vW@0rOa5@MEFsYx*|`OVkmV@;0fFy}Bt5>GvCf4IvjXi=<#_Y0+7 z`nZ;y;0$_Pq_1cU(mx}m-mY|kO3nuZYWwT2`?>RaQZzPxtApGfIS$?YYGqs`om6OH z8pVQ+CW>55wjuqOOT1BF-L#$by4Gk|6W)n1k@FC{W7A;7!mbVy;(TXl6S!t?p>?^F zvBm@ac&4_m&;WS6dvIyDjZ6R?mm%2PLrQLSxDw6lK^oKN;R@5AXBKb%|!m#TVW)l1m2Y2W?hZIxOk zvh2SPA*{`1blC9xp(i>#r%FGT=vAW9)vZ<Q<{lKd{-%vJ$ao78hY(Qpn9LY*=KW!6I+V z74%ewKk^=n{j*Sq&qENn`i7Iav-v=2A2YuVe&p`HXU&_1L;Dlp@pE)P*aCy-jS3zSoN#g%)OP>>)EjoHgT#q zTFlBKWoi?gv68Nv$W?+Lc80Hw?-SAH*=)l9Jqx#*oWRo%Xqsjvtxgy~<5Cwlc#U)O zOLUN#v2FLFkh<5yb~`q#c|93ai&TVvbU_;ly$w43rA znQ+0A8|}l3@v*GRSDHHz4avw3d(~pTjGO^kslZ@b81&R~W6V?)1-j-F<17eRr2^xn zU51&{M4*ZhJVtZAg%vnzi-PNsjMMT;E&S}2#Wq<|#Mu(vV=*XpRa-#LlHYmT9 zR^2>{L#A1J+Z=5@z&1gysg-mG~F-8*W4cO@LpfwD6c{I5(KC#fkKp%23 zPC}*7{aBNvpety5(rSO2lxiEQPk-x-99Fdq^VV7< znfx>UcO!cuAOi}o_42(sBe>qQ_?%MSfoqd^RQS z>-_K1U8iOAt-RB3B{qKx+%mhMkP(w6e^)AvQQR&q?mu(5N{c4srowRTrf^0un*-1O z_7wjJ+AWW1)JwtVRH)1YeKtyW0HBTyMieu_dG3$209^{_#nC&nu6^yB@bq2er{1bE zGtI97RvFSfR{-`Y?A9em4QgX{3d7uAV}tv9$R2;z^u+{-xy|0o%`CoCYM6(?D~xeL ze(#DV;yAbb1L$bgK$OCiGMtEB`#6fH$SgCnf-JPUAIqNAIie_P3uHouj{puUT^n5MBSe&e^E(&eMz~iq_{)mZyW>>tFC=}BR zw4zAj^m+F_9p<~&q3HuG-86`7Ozy@w`u^!GwP<~u|F0!~bj*a2=d!tMca?W>1B^S(9$Vowu^zLZUE7$PJn>!@e?)ky zc6R!B+xg^B+jXtG-Yw)0(0UhgzSdgg&wV&tC_RmIpC~KUIdSZd59GcH4t6V7+a{PW z0IlP1kFe)cufV>vD7!X+5}xC5TM$|Y*f|54y_ru)9MUEOZRHvLjpb3Um=>tEP9W}S zGm44Ga&2;GE3voMgh;YF95{SU9k_&sd-ShG~}e!x1E$VD!VP5m}tc z?HOd!p_!+jAn1j?C`dy3Q?ufJf_pCr*JcdrWo@zCY89$m{V&(6B$&pMC_tq$bgC1oM z+rnj>dEhi=+Yx%4y~<6U(IsK}GqWjQ|9A7cg z?Ydxoz7Tdd+hOP2=I!#%#Im4LfHv)3MdwLT^tH(DHiWdQzID6h&jF`F-f?~Zd!%mj z$x3&$-30_Zyc!V(OEuN*?SKpB>6#up{3Il3ZCf0F#)tQGJ601IqW?9r!^op-FN6bK zfgP9kLEHD&oPV(NYD?f49p{J{ie)8AkPZdg-Q(JFBhnMA|1ZoqBIGV_K=`V_?}WKc zQcR$?3W1dUn+8MbNux8pWZ6A2grr2m6A{!j69`>ytRJ!WbP7C1*>ql()E;eDlYlZx zBDyInHw(TuY{$JxLMlCM%$%6eX&Yi3%K%T(1iZknQ?5?P$n$6Py$*g15TRH~t9s3v zy$d`#>AIBR?&x>9?auLTfRH_Pl2$_$-gV~rqmrE8@DH_$3)pj(9@wq{HqqOcexkh& zS~-W6e#5y~CbaCERzLJBFHj;3b-X<+_gGN>yUm|UkJmqDAaRH7(D9mR$fWQ~%F-InyKi@e$ zulK%X=09a_S5Pfo3b=~~rv^MD^q}ch(MSpd8KLXIy@@F%z+=7`;Lyo}kcA5vfhY;I zks`v*nZaaMTwxbbj?;9ony#FO4bXb2V36TTt&MZFWv$=iIJ2P47Yf5G9}bII>uDTF z?(Tvy>J*wTC<;RWm=F8f*g0y?NpkO?d+& znrdt1^H@!5PWX`dlqgL(@**PIVH;`t)eS}*kK?%W>J^dDtcxYxCxRYB%7QIlvrpkO z;J7P1yn+Id-G^-g?=7e;gddbbax5uMx{n`BfNOXVhzc5j-gt zXZuIU%)W9pNZ&f?h%#_t<%lCW+J?X<)#4flegej?zeBzzn-H#BE5>QnI{JbWL_gXtjUML@Km6(-SFu`2@*bO>-d(3N$@VW4cL`1C&XhD^1BH@R!fJIyWv`-EXcSMlbxz}|o1Rrzx zl)`e1ws-;$Pej%qSu&iC_OXHJCm)*66g^Zz<19WeZ}FMyKOAn32hz6R*#t49_n>N2 zN`p_@pL@0GJIg`(QqO$O{vMaeyte$jc4Gt(myus2B**Zj8+!~TsDeZmWE2inDpuq8l-A?acG8m@; zET%GSKURRoM*1es_D(Jsxh21=*Qa#UFo$_@RN9Qqu_MjM54} zAmdX194j%+X$pXJ4_W=#l>M!|_XFC3^*Z~6oGR#>l3o*Rv~j(92~*8@qMwNHCy7cQ z|3I$c1&g{OG4{|-e{E^e6k(Gfhv3`7^xwN{}(u+rQ;a5ZFbyk_lc$gC)iMBQOHvl6L|oK^yoThl+DYQ z<>086XYy1OXLrTj*R)gwBfzNMQE1^+NCdy9&uCD}@Tc?r>D<%f=|~pLZ$RGH z^FWlPO6>Iw1^?1Mc`M ziroyS#xhTdbgUgY1H*1O|}fnhtlBhuq`&QPoT$)^7-yiz%5rS%FYU-_E5-jFnv&%(pMHhm`*4Pqi{Lvw(OJZl<*%@P};*(AGv zv`u3|ig8}u=K0;=+CY+w7k;LQ>>l~KdZ-PlYF%(|*~e}TRa$Sxm1*brfz#VEau6+%wFLmBYhEn8eVyE z{_~2sok0F}z!{)vzwKUY^FVgB$bIrvXhHeB=0#R&fvEm4NS4psb~5*#Z1WM5%$@^# zG>V%0m`!VV;jdM11L$MwSE6dkAt#Nvb>`eG5dtFeqFxD%^d*t3ks?{amx*JCyIblU zF-;vU;0q63LEt3OL0qf0Elo^>7YzgxH~Z{(Z5}Io3Il$^we$ufaS=+KI&JV{$sbhP zGjimh29>4zBG+5knc0psHc`-LJ=|(-NSrDvA<_K(3oTa^3=Sh#Y5EW)u*J!;IYD(F zHOv%{+4(9E@Jv_!XhfOM1b|X|lwa3|j#OkpTKZgJz@n3TFq}AUv|D@)Z=Q#1#~h)|6Fc%78CVT` zdfYTyT_Pf#gUlkOn+K3z?)pUDoA2{e1zR7SqSX=`t1P&0>uhE5FB1`N+@F0FZ58oc zg)M?nAp8nTy-Ohk(9Rt$6;@CqI;5xtC*tc1a$>3k2Nw^bOkXO^Tiy$TZGMLKqve*` zDYO>Z^j=$o>u!Q=1CxCg&oKhu$o&AEkxevf->R}X zWg3HRDn+SdNIHc0H}7q3b6tfhibSmM5veB`K}No2h_!0~{#ynF=?*%((ZDU-1j=7X zhwH5-hh#3I;|v%4A#skjxGMJyb3wW;29g~gn3&CQrh2j{At`H>BQlCa$9R!B$HE^B zZZIOp-=n7)1&-GJg0qyS<{lzat9s3WlDO!i-jJ1XPYtXBMmvIA+n=dH+7t>JbLMse zP@awBAg0NP0MX>41qYZ7PUA&snpE60cF>emr8G*yy2nqi?569=T8muuBz40@<0W|K zUc3H($QCMvF=DByX{3NtNhkNcRb$olb%562T_TvIoUivm1ZK}BA2c%v4$A6)nbd@$Fh3X0T}s-IO{AJUzmz%IzEvo3Aos@&+q)HBSNU&aan~?npf_v|RxE=y&-pTexM@Qom`K zioB2MZ$~&e#+Z51qx#)>C_JfKL^54|+=olt?D6C1jYR9n$u$tOtNwBSZ8r`_8>|u7 zTKviCVwLSV)#W86PE_!?*-O0k0A1XKgQ{;1Y>xW504>glZ`q4?y-l}BG#mRHn?3iT zV!MK*t9lhH_(DJtWVo2v4;Y=sdWu*7nlF_94X}dN8TOCB?xD;Lj?p$^t#Rrv^Gt@# zzlWwY|JC%epiLZy{cUvJy=?VeiX5ZPY(T*@c(p95b4Ds&Gv<)z-!>Xt7`h&+)=Jsz zK_9aGFw~Wmbz2kKi_W%lExcD4zhO)kEkERND3TZ!+@$30BcxRqTn+{q?*{TqhXPRB z*F7hWDI~On1=)%ksDH^^ejL}YFJ8l4S1vDY^P`cmgGg_@8c zp^=ITq9tZJ!4dbQ3Xp1`DGu;R>#k=u9k%6Yt$v&u&O4u4rhV?|VeB zJzDvK9G5)%D)@zsviudmmO^+Z2#MTc!6Qq{ z$=XMm-+tYjus!w3&O47Ep0XoDS7Sf^6ORRSeZuoi`m0K)0|au<#g3mb)3dORAu-Y_ zgq+Y2In}!(bFkxZvX!9yQG!m)@hRBTCE|r6XNDQiUyCPTUf2;=axJjA4F1@u?Yb95 zX6yk^7gvVL4;*++KX9HmqslA~ugA<-$HA@(2mk#9|pY|ETpyU7r$ zv18?5^_}uXSE#%*{$8-FI3uP#ldG#qa&2kQ?!0}o4qC{75(-+7mAP}Y%b%ZKAmukf zN7b5Hqo@F(Yi~Pcy)8SFc6(*K(rY+wZ+AqD*B+rSgA=oZ(Eu%<Ey(>>GrblQ-f9xFS#-kTvT zaR}g^7sxL_=Qm5flkbH%v#(Ns6FbaYvs}$xY-RB(&L>zgK^Uj?>qs2%{yYnI^kj!) znSKr1Gv2{fg%EXE2jw4n$|u1WYa_0_w1y|ve3iE(th`E-O7DGtBPG$Jcb4G80303* zhw5|~eukkf-z%C*Ia(-p1Ly0(ui*!azMX}HT)}*RH!Y0|$kb1gY@f@3H2AFm;LU3K zIkGL+|3(Xkou=2wvQyx!;1*PKQH&l$=k_l&U{gbC(fn$^+9v>CdOqxpTO4UlcjZ!^8HM-vI^s zT-OlNm*F{zW8!>f*$-%}3oMWX3kkhBD7y$6cBxG92i)Vg5XAprxj=CkH0)ub#XB^r z`my(aOBks;Rha){k$`kfIk#MHl>b81J?d(NWC$2;-kG(Fr42T|P&>M#X;9=QDGQXa zNP?49C%HNwhvO!!s<-zlO)s+ZKi*5-Spkfe1@&&nM<$FNw=q^sWhAp~OuzW!{%z6G z-X!aPxpdMW(+TatQt&^9iYwp0J%7WK*1Y-NHFjlx?8Y_})B~Dd$8lpNu&HQXn<9kM zg9ihf;i#^0CdE*j^T3eNPaMA*^%*q-(^5>YKN&L~mdgr8OFRDbiCBL*7);%)jNaNC zP6bZIQJnw&`kg|LL3+2v8q$mw&i1=rWyZEk=NgmZhc*~q+#3yAq9^O z|3E%)yQ{&0yG>5ANK99nFX#*ul3KrL;xr05ZAy+>bpU+udVmk3-$5L>+!Axu)hl<@ z)}2@G;4h9MbPF{7BFx*o*5<1`%5g_Z_q?7Rz6wE2?glY47`7(pFZWN6`ph(Muonc; z>`KWClSq7uoW*7FBVI^@DC?aGD6GD^_M*9)(Qxx`H_PZ8c;dk6&(htrytR zUfF-dtx*SaTAfGE!xA!{fvqd0nsth=MR}5h#Ir$HFDYv}l@ZFR)uNVga-be!GK!pG z4QHzYxT{+^=v0oCO(RYiFTmg@xj9)gA44r-WB~2-dQeasz~Ha7j4?%F{U@s5@Lo9O zb+q^t8ax@EqE}QPEr4Sd!s9rK@*fk&+j00}1eDb;{D|~Cr$$Pui5;{4$}D9^*$|47 z0yi_7V-kf|$I}5sIK_-c)^69PMmmJO%+$dHw^)B3Y`!px6lS@Syx$`{0O1&aA@ljM zEx?9>&ileimYcg>uwVC1uE&@tCIz3KRU$C*^A`ElQlak3*FS?V^5+{JRy!k7Wtbn^ zz+}oGZ@a!>%7OA)3WG(&b&JzsQ6#!X7YQcK5)P;Mg^l$L^hx)s zy1(S5NKJuAoncuhpG^d4Mho%K81uv^4q&%?%coOqU_E9iSfFKg&RQimr7wUD-($HK zPwqFd-Dip?kfe4&Z>v{08;S!14c| z6YaI0!=OVy6e^LM#~2^$Wb&v)_fs@(z#+gJ6ZE!;e_??iE^GbY&eh{r7-Woh z0PGrZxoP#{4@ih23y_5c9zFH$1`CuMC=!oA11QtncG~1b0lXNIJVryAMi3Q~n<|}U zw9%{(>-Ag}F+fR{n~^qUX1l8Xyzt#qk0~M|4CTA?@2uWgD{;2Y<@ z@eo`ulMY8qwfTHKRY6~qDX1S2ykwbU%!zp?qbx-gt=VOLN8Tr=Nfwl+^q9(9e6ea& zaYh^`@8X>VOnNo;cE1#%=yBSeCB*F-z~RQ==OuL;;^YGzVHxc8s#Myo9# z%2XmE9Y>j`mL3ipqupSfF!0M7%4^jk$BL_V6hvp)kt>JBDeB6t|97?dF_1~8aLP1; zE(esjZixin{&Qq{c^wt?FS}`hOFz}p&mR2U&$uQ<)p4Zxh$s{uRN7!Ykvv}q025d@ z8?;%}PEyEvAa9tQL5*+f%Z}IF27W7=99CY0*Z{Xynk_Tshk9lf$DbAduo)CP(=Ob1 zvzS8lt`>`phZ7LreVBIfRr-?TMM&!kll|C6#}D#XmBgWGiFx4H}N zMWLpA=YnJNIf`aHg@z~!bRMcS!wrd7Q-`HqDn}{}Kl7p{jt9k}dq|4|9F4E1p_ek$ zV|GA_tO)O>PAh)2ePgU5y2vd-127@ePq--&2ij*4uw~*Dl=K|%r@1mgg(dmv!K+ZD z?YbC!;1n!hgJF@V}=dGzO?vhopfl*A7xZFbtLr?9xuljNV| zGUTVAd-pnASppmC{Li+JHYc~<5L@`~Cve^l$IOUcFg=;;CtnQh?B300%XTTVh4CBu zzVcqfSy=M<40?SFYVP<&%w|8Fuix7?8SOFtjYD?vK2a&#dRIJ67WD6@I-iT2G!>QA ze@}*f{{v@iDHRoFR#DM$otpmj2~gLyxqm)?$AYNck0|-{Q27B_rPmDjKhvOo^aFZ` z!O=8NJr+U3g9`jBQwD&U&YJZ6pB(ck518{4!;UAIky(*Wz}NGn=DmAxwFWDML57(F z;l`a=t!Q%$!Wd1}4?3^wvTHbh#+-$Bx|?2Jy{KWjVQU@VqJRE3;@d6FzdE}hf%f5u zZ5iwF`*peVYiv64qI>yiA(5ZTy#c6l$;0LJ6Hu4t>i8d9-npOK9HWA|zHzKi1)_8!<+99{kuB9{^%a#Q0#n5(E7X|`bQvku{`~6@oW41?EU4b-Dsy`|Ipc_ za*KL;@6?@9xY9WMYapbi`)RpA3(nFT-Xc0$l`A1sqPOq;$;(Nlf2|#U7SZ@L-0~XB z1fxR*8$_Qezy90fNCC&)6Y7Yf9uNcKwbyAwiN7%0W&6JGi&Hs=<4FOQ?8cAbi}E_R zqG6c6I&s!%w&{s5{y6ux#(9JX0)B-5QSH;)|2*5YnYP_3o7Z+yB&NmT<1xpfH1{1$FyRKLRlW;q8D#ibPU($fU4?2%I^|a-N63y*eB3nMw`F(8JtU*rlGgW1t5~i{iet@>%PJ4 z`P@a_>1W+3<(8T$lQhqVO{W;Yqt*F{CwM?wGsrxLT+1{pXsv~)M4E-W1xN*tYv~7B z3~{|@B?gL{bf1XJv7z0l{`nN=;VB5#fIqQU{5&!1N1%f{^h?U%Y-CYI zQlmeLQs^Ty6n!aL0q_tI?zIkpO`7vHzT&`X&;N;5{!M~`PLw2h3C`6*#Ri%=1@Zmv zOq~-_2Uf0YeiT_`@4KY75NltJ6$rDls$@_8T2f`zGM2bauVINs3w_Xv$E?#q#oN?O za*Jt-5}7d@VIEo_v$Z5QTg9czsTz0tyK2(Ve3xjVXHbMp7l7>~VsD^VSth z6UT!n#Q^bIMoOkI(6<~g8Q_p_msXmT*xY5CG=fdqOP%mBgoTEn8m-Em+5RDBfYi1e zq=@jxc-v6k5|GE(L1H>^=ecqTweVM(lGI#*OP-X);F1$?V6YdiXriU=r+fm(Sr!CB z;LDd(0o}OtmOx_Xy|yQ2S{T`4t#yq-T2!gAaZUOLGySLhW!YX6_BHf<$W-h2~#K)o%fG!Lbm`x zu*q>F?8iKyQC`Ara7}9(HH7gBG#{G{)DuRq1x{I3mC&9l6$CLf43l?0oW-198^e5N z(~Qa*jfWfLc#nl#IZg4%xUz{&Vhm2ZUrmSPy%W7TyJX*SI69Zd?$Wy|VmnJ|QnFxW zmYW082T(n+G+gz^f3RvD1KYtL3N^@t|6si*X9&F`t10J;pbUJ$7EaUXHaeFn+KmK^ z?tCKgBXCY(=HQ-Y|58rO)gZR!k!=;8QU6F%74vwB(7*5%7uFy-+CF){!G_b!e;_B8 zoPtXyMr8Mb0f(F+&{3YeVA}d;h>y;*!Z>9G2%x#^xCLr6pC)X>%cF}GFm4e<76+i( z*C8C|U3+<(67`Jq2ON-^Ad*3)3*5n|HI$2hSgsQXvFToiF7;g@F_h;u@6;7Vt3||! zk8{S>Ncrvh*&-}G(7+Eo#9Dc zEr<_SvE@nDy%9l#)4U~0WzM4eS2&EHLx!+`GQy)SS!M0P8$F%Nw-2C_OiDak!hFE(a3xP#01RAy8I%lCPh~&0!O~VF$3DGe{^bCR$u{g7&oG z*oA7#IgF5t|C35q)WUA};Lmm9({!|qz&WdDal$YnkoV^}t-44g{9^~VjyRDv1lW>* zRo5TDmR=)+w%L=EajkDdP7|Y;fz_7lSL|cLDOMW*C>8xG`hA{_VD}v_FYT}|5lbaQ z-Ze0_q)cO8Lp;4Q>YM9G=E@=q)uo^aTi<-OGf>@djPc^Ie1Z6PJO^$h=bcBX;|hnw zPt%;c0jT~H@^p7A%j32_F?Ztzd@1%)?)G>BL-#w%p7?v+$sROuRu9H5R zt?&aosaMs0#5j)i65={Nb9ucaIG6)@;+>lB_xz7-R|M0DIz`fQCnM+206?Czu&kQV z*kL6ZDhR($Y9eqK504snmKt)GKh&93Q8Zj6<(Lg*&Mebm85U&OerJl}ZreD;OoKHj zh^Oyrsk3N#9pBnWfb7#@aGw-|)c^Ou5KG#tftxphHH*efTF}@DeX~;8&(JLy@y@MDEi)si9;_XCRN-trzk>oPhztXmZ0hMQ*y;hER7{0L+W+@P@4^s$G(_o~PrGOT`I`waBQ$itp| zk9QO5e(2spKn4~~$Nuen;sK~gEjCLE#wp<+6G#{iblEZuHZ_pSoQ~J5t|BKo`B10g zjDf3ngzlj*D(Cg(xgZvis>zbPHqlkga)Osi@CE0fG5OuX6sUvFu#uPwL%APFF5mv4 z?aLAtl!e7bIDNs589}t73XDR#qOgF}t4s_xZgw{t!UzDlE&?V)gA!s7;tv|C+ny~6 zc(vkn^R-xeVM|JOZ+R#I$Dl!(aU+|=vc_u^$G!H0?#G$LlmDb6Q$<8GxbtxVQDHza za5rOLHwd9V3|*27M;{>=zT4mX|IWE?wtiRugj0OvK@$`gF#X|P*Bx#C9+BuCfUBQP=d1?|M%%`uZ985hlf3rEBi)P zm$qL2e~ZR|qX97TeyQif;g~x0Vp;nu$LdRbZv62f4v7h|gwcuB3cT&TB(^k;`chja zKhimn_wc|FR&S#5y`y!nRjZ#@5-kzNdve*3i=6-X>qIlL0%?&4p?*V1`~FKq{*P3jHQRVd#;zaW5Ltv>}}sXyeec*?MdkKgmN7f!A5)tGP$c7~_pi9?|ReO!Wx zKD5(Jpg^kGZ&m>`xxebv;2mZ(O}R&1g0m%!0!G8hNH?4(wD6ld83JGjjYfLrh)Zmv zsn*E=aACBN`tv$8jm1p`wWXE-QBFDW`p@fPooVB^(xeZ8C>CCvf7O2&s>}VL@Gr() zF3oWg_(ZY~GWPSfw>A|bwZWAEl&&@*;i{xu5hy#3-Gok*$UtYxkV)Fjzh;Wi%A;+uorfqko##J3UFqU2RPLk=}h5BM2;>NGTaN*moE8jFW zSyGgS+V+}ipBso|HP~FVxt0u|4kjo*z|kPxPJetbc{$F< z26q0pDM7iX_z%dNme;0*LAud&bo>HUa?RShY7;8mO9d{X^}ugl(yk5c;x0DeGa z|B6R8oW*w(_W`YQQ3JH`Y$yai}_lT-9nz9iaK;9$+|VW%N;{xYbI3sP>0ao-kFWowBq!*hz+9!GfQ3oaKRhWU z3x+gYswF*el~zSEZA6g`0^j zx&DB3b2Se0LYvAOh_l&;LHFApZrqv^?h8sUWYG{K>kI?~U`kBeQH3*B4L#6W|4@me zB53J0g|G|+#1#%ZPaKLQ##Igsgy=Gr-t!4=koy}2^U6*;w9J)DBJuz=jBlH-yNXC3 zIKH*>@rmAq8(Gj&JE6NA4jDij8ZCQHx9- znRVGE=YqNez=Jjv+Q zfejhQS9PyHZdyOlqn-kfZnPCZiZpf+WmwxiDw@~cKJEtwrnAiPhwqCg^|alw&^WqrkC4!V)jLs8l#OI z@CZq@mQAk8hB&xBb@czld;R@%{ zmvL3om%K#K6a3*a|5pG4sU_VQ>gsd6Yi^8ZE?}hvvdMDV_gFzWR8d;Lr7j0-OrB}_ z1MQ?E{11vj!%2X4Rn4N;8`tf4GG%BB5HOY7O<{bq0{YFflprOi=A{48a|%BmY8w-T ze3gOv#j+Mw!)pIBMFoKB8;}iyL%KF90@WQTzC>N+p*gi(6l_vaD95s2v*zn3^hZG1>%%Gld8L0k%a+TfZ{6FZ?j!gl&0tI9;fTL;0q6ejgM&+7OJt{qIc78v}|1lcy zCzowkV*?d|1e&~n(zO5K23>%I8x;Y${t|L!?qF}v76UDSMk6Gj+}dr-d$Y{@*QSe5Btn$gwuV4QtNMXvah zT@Sj`!yJ$+Jk*>nGdIZ|sjs}YVH2)O?Xq>+13d7n7k-+dT4tg9mQL#Hl*1^6&)(Pj z8f_FUwjIaXw?L;JLC}h&s+@O*ai8upMMG7>3dEmB4HW-u?=K|56{|)9JboVc|G~wR zDP+Lp&j!3dJN5N+M_AuzPw9P<> zo?!4Yzcz4e9eE=7SD=+VYAwWDz3Bu!Hcp?s7UP<(4XZhzWu@6-XJFK9VoE`NuRYNW z_D8TzpMXAh1th#`MTN!wH_Geu50RDI^b}v7iiu!~*rS{5*amQ_3rB_0ZES7}TOstu z-**4qVyL5Vc7?LaY`B;PUI(2YmaBp3mLJQ+?5aDR-#Y;X4>3j92m zwWf0p8Is3ih+rVMuZxpvt#I`w_Z?#)N~_D5>EsD$6WU*cymo!?OYi^o0c(Y zz{MB4{Qr?~j=^=cZx_!wvEA6V)7VL4+qUf!+qP}9Nt3j(ZQG5VynX-A*Y&&a*?WK3 zGi$E7))EG^vluKPCtk)#&!LL=6SFJIQfTLqyg!C#&{_>hz&){IwOqUvpC~OD7BYx^Rm1B zp6(~;L-v|#*n1Y+3bAodKpwIT_UwyxNnLGW2x@ps} zlFX!rf`aj9xX;NKi3UGs{urjRJ zFW2i?-F4L9o7*2KzA*vd8~+PkI@S>VOGnX+O4=2z5E9c7`>`n6KCca}YMEsje|Rlw znZ+<@5PVKCq+eP9@IW#YwS0C}w@fTKsC~@JA5AXk&<|!9{`A~9dOwwegfZT7%h#TH zOj>o55fEP$cOAMbBh-Q5VDh!cMon>Q3P`qkVSAh3d;&7%mIeM~6i5d2K)shs!kM<( z&qf5+?O~I+@vx}Au&p)DStT{!k2|3l5os0O6{OLX(Dfty0f8J$5}PZ(PEf}p=?X>) z!C}S)MkJOPVxa25goLDqtxTSOi@||J*y#!xh|ZIa_D?U-y_*SU)Ji@lR8ktfkanQC zRG+|0ls#O9jdmh_BjpdlGNtpOny>_>H$xEr?1IAg4$ z&cvD-FtrT)R0Q1_Ib3-#LTz}qI9_=%NK#Qikr6}~Bk4?EKo9Yw$rA9K&>qcTApXIb zHg^g8XtS}SwpAGJYrdv;0&f>sTL7mGp9{Ac(YFwNW^0=>*xgx{ps%$a2-rh%C+mS? z<{GuI!rfP6MJ21pwVWL;s+0*awi50IRq0aqlR1m334*%7phipDLqP;9XA#%J#Zcjw zc20@TF+VfYL=I*q&zh$KAM3j{eKMoT4+HOAp#>575=5cvCpVhkR1~&!-{zEaJKL*r z=MvFOxY%m}G|kMV-sG zt;S-epFzb5VHd?i;{h*P#8ZPSApdbKTL|ha=7l=%pHt~47*Ey+W{?Rqd6tG|W6$6XcPuy;t5T5!~gh}fg9s4GeV1%3$UeMg zHv!I5NH?^id@F-aaYcT9JNiBB!9KhQM>fEkUj+h}6CkiWN3u}d;zmT}GxU7>WDtP$pwaIyoDu{dn3T@Tlq>fms7hB&NoPG+d9Q&$1%;}p+hzy*L;*w za|7wE>JLX%2_nh$R60Au&|q)vRlhOcX|BIFzYqeQTl(3GYGZyswl~L8V0g z!L*982dF=a?P$ zebo-ZcJv6nMecXcPdtU>p$F&I>w8@~2j~no?a+bbtPt+-yoa$J)@{zc{I2-Q+|sMH zFFG|5(Nl!dg9V`5m6KA4y!O_|8lB_X?Ch#!O+eL)XRsh8iB*qws++^=+*s9}nFgqH z--QK|)J~V^8pE-N*%_&Vg;KDZCA+A8D#L^sN6%407D_T9_TUx%nR-exXcW*Wdtj|+ zxy$Q0S>Dd^ToD)ADutd}x*do|i(Wj6+}iy&XiyI|M6WSZX!VkzGALC)+EKJD^!Vnl z>%k3inY@%rC+K4T1ME;isB+LdiP&EEp3@+$lycio^&2PcR-+=PFj3JB< z-~}3@C>~iMW3i3!?2pST=h_R+DcdX>W=H6hndNJsEYStgB6R z+<%5&jJUROZutekD2gEfb%6oQ%Jf&?jBk!E25&E3 z&cztf1Yy-WH0!Vu?_)Wmsa1PfMvXHW1iYBO{9pXN++6$%fx9?g@1!uH9xrG4$I8;z zx37nbbRs=npF(}-)#ISM5zq1X?;6bLQDQ)?fslr?-;3iGvbT2+hw%;ub2|ptb@c+w zd$+HPFZJWsdB5T&Ph5v21tUzjy7{pkQySX7!1`AgZ!g-}VCnvdJhsCc3nDxixAMQ; zS8JLEyxEiZ=KhI>?so2G4txYJ1~6g~O?^61YKjaf03mMf%>RJ6V}u3zNtF|cq(gI@ z^k1ZM=*jEkzrFc3`lrkGO`IFj;SI9N<{<`W)S8~(^aNeMCduqGJu-BBAg95Sf=_yq+s+ zieq?Olba>R;1LDmx_vxmeZ1Z7`e_CGqL@M?`Jb$29M2 zw?7Mi*Y$pSA^dRowQriNX7>x{T18{KCB!}e7ZMJuI|1#AVCJ-&V5fiHLro{;BIV&^ zi03vGHdmoenQI~Dd}$5qZ_`ifWX?aX$>tCx&!}70$?DZPWoucz?RrY))2H|AuUkf! ztpOn@X8!pgb%w$KDJ5Z5MX3Y5xdnTJjpUZZ`-be9I5D6mop;J_adKa)vVjh95dt5& zB8W7}QZgQTVtFp>Cm32^#?wQcV%*$U0>g~+X@{c+EJPKgPQb#AkB}?R>90TpM_$gW!a4yu=;#+ zk!*uC)>*!8jn(7EZW-K0FavO8?OE+D(%8xYZD0cTr|Jo+G>h|l6pWVt)^3AlGH^tXl{Ja%g9f)3+LKt$Dl}dq0%8 zN^;8EWBgK2sPxf%&A1+dJck|&DGg^NVkvDGAM1XPvx71_!yxqj2wglf$~f@h%43!Dj#%Dd%A$jhP%q2|AkAA;!STm4h4rsQ!b4prlW})3|&*B1tu1=*I|*; zpdfC#eDG1lz~JI~B1(x*Iu011JP_YnPb=dBd4i>IcV#^vfh!D-^zA{=*OXXm+T6$W0e?T zNdgjNVsNIMNX*H;Yk)UjI02f&XJDW~lfOoyW3U30;vkEQfPa?CNP5Zml^IwbTn%Dt zchdK^F4qQ#XZ5vw^We*9Z^TQEa>*3^gbk8MkX@PKcD1pU`N>Vup(9kMMN}4lSCZ_P zI;9Gt^bsO)7m^XD$`&9+$SG+JdPKFEW9M3x?qE3uk&Gu`_9=x%d)NaI#Yike;SO%7EOj_TI3t2yKEyaB^Q z7N374^Y|9>LkhBd#uF#I@XcU3=Z8tkjj-nx&8m&$rLe#Lg4Q*yp*enAi>tqsHJlC% zekemuQ`U4eZctc5DA`ewZp$pK?k)mh!k~APWU~ixx;%6~%$yhOeJJ+a-}jW}^(GEG zSm7uD*tc*G?!rRt%dwav2bWj-d3ujOe1~y3c=e|>)L=IAjHWqey1ZarOi>%EeVKDN zck=^puWYb`*y)`)0A2b59w>ZYXylO1us6E0y4R#Zy%}1tz?@v#^nt2gT}mCy zmC)$2A_BMU6;Qkk$X&;wwi#Ym7G|LLzHOctm%WYacVtl!i0M17h=3wW&cVX(qQ2iJ z4IX;TF-Jc<8Gkm4FU=rG3r^>;gsxB2!oRxf2x-G}AyC{cIn%@FpwU&YxDC5KiE4LL z>{tV8(vFi1acB*Y#93_+uwGn#1w!;D^gFS9H;bg`<~w{gBR~j8vsQCx-&s_eFBIul z?ATa9d?Ljj1$7ne^~DRVQg(?5fCUl$kwB|4?1!V5VzqBl+!XRFb1F)WgVsB2Ql>P) zM4i&PVUk#RI~cOa&n2inR%jt3uTJTSn6WymkP-`~Z+JR2@UQ%yoJ`* zVP>-Ka~y~p0+Kk=-3$IY(WRYG+?d=4lfj)J)ylsN7#KN?lAHnC<GZ6tTj+>7IzaIx%jCg zFUMp*Y8wGDn`~ZdYF#C#vP;zdQy!m(XS;DW}by^^bZypb>8_7=nKe7};%OI)!7KRj{Inglj&YZOBS(@9v0QW1F==Uq3)IB$Aw+0Fs(>XtRRN+y1=8g z&P^2n3`a>u>@1_}PP?V9@5q8YuG6W5J&4lTds}N!z((3G7M=5)EAnbhfbK=}-DN}- zKPN1O+IazboD|QS9ei>`CRSLF~n#v*LC#4&M8In zfDn_R)Y?oqAwl5;_II6*>n*w=#kWJcIb;E?1(14k-R97mwGGjj!n2Z}gc=E`08Bho zp(W8FW9B?fXBzZqqn_qM&3i$~KTYLsf+2?1Mjf}AUeP92#iCpv9P;;85htOte&J;0 zB7R+&&yS6#$#GugFr&e;d*$B`z}@B&LC{-Q%hK|*S%rcQvpMR!7#QRmJ-^Hj6gRqm zT>88Rp8wT$bR;T#n-4&ID7?2v7Tq6*P*GBm3wN(Sx??~OhAEO7e>Z+s7;w^t$h<$% zh+H+5dGS8kMJZ=;^(9_bc)hTDR|!?zm~(t+R+QHQ@SH`i97)M4fx~`ZxKMmgRtq9_ zIaH7N8wwK#8gdn8-gh;xF`z=ssI;$}FS@7lYwi@>ltfHbMEgt>+|2pRszZB+gw3c# z8E7i`ZR3TcogWbQ)6-}2i(lFo_HgH>@L!;2&FUuI=?H+{-c<0$H4uoP114MZ$t8*uAf;?v@lM?s9Z1pKH7GgS?1GZ#oNPA z-GpClBcm@Pzx43{O)R8m%hAm{4~lZ+tTm|yCG9irewL=}F*GRp`zhb8Pll^w0Yx^yi;k_&G$K&5m+dt(d z`glxIV3Hwh+rt7SAe;2S!5Qrd83pvI6B6>y)X^zPqgv7(nEby~yk$<_wvt84BcF^Z z+VfyrVPc`Y_j`UlZ-?T0gJ8^6mH!y=I47o&O09}VXQq7?*0yWu95n=S-3Vf^VZQ!& zU6}@+E@#WdUb-|6*O?m!&SgVONTMgN87zr&WS@(@;cyPsM`68wD&j|isYM!?zI0hi zme}GECbb{3t*B@$G)}Aqd4DDpPH0xqXrKA>HSv2JDi|uGO6}wKf@-qLMvj?Z(6Qa^ z{Sow|x-ToA&~a10(ekUoNVFWbWz1lUlP=~;FzW(@Vxm5rL+7?OBxyv3lOOtP zjV9^DL$r{gNha`qm>}z{kQAU!pq!%wYtw$YLwb5>2lW-CeX;);=Tvy;wO!UZ)3TVT zKTG4{9k_MTBEn@y^@@j-0E;5P)vP-V%w{O3$^SQ~b1mGY22BtPNBunegS{qUs@1-8 zcHpTMzmgC2d1jc4A#^mLburP`Mk)Gsqj*G=6JT<6Rz^eg9kOHKWag{RpJs(S{UisB z#0GMdkl2>J7!Gf8ghmU?%eZ~?w#j?XiuR0FAXRRBqku@OUgA9RRVW|^XoO@bJa)hC zD7Ae-W#Vo02trqcAiD51MbhHD{t2vU8jI{^09!xd;=``-zIW|5M>mvQB9v?)sihm3 zO(S0c1Mkz8|F>1RL~e+{-B$vxkjO3d-Gqn5gf)xBjg9grX5Z;i!@4x-VV)+L-@;pt z-I&?xZH8VW(>Vn)y}+e38m3CLmq~osh{3n&iw3J%JrJz%ZxOKPVwmQfpIcX);yMjN zT1wRvbYpR`i@-|IVwW(}Ijg~4K$=!drO>KeXxpf|?COehGnP(9&WjDDqYeG;?eEbh zsLxQg%rGUpzuVack-fjdV`#YCV&l|jN?Vy(N%TAvsZTuEC<+NX4Br2)DOq>tjmJdf zZ|O}VAb_$;=Rh4V@7&#*YYTf9kU@XJAlAW9hbY0~bCQ?a4inkGql}Z8n(ILH4I71* z*U7~tDcot4k+2$AP>egprKCVn{X`sgYz)Uq^Q4uQXW&7anvmEcQa-z=EDi>?qX|AI zfSo0Vf9cI|1|6baJQPuI7NS?`As%BV4!;VC#erzxB1t?gGbq??*JWRl3;m9c{w_?O zh(WHOqKFG2_<#VTBS;h^-SdHE4K47oBwSYMVc-IUQDtTijAy+NjT(x0*g=Q*PnmP7 zw)02>?lJ})+C|h`Xj@;?zy|=oDp?NkmL1-jTt7P0{k%HZbv<}iys}y#-H$4>7u!*U zZjjzgo)Kiol&{0yN@{V^JYek54KmuUf-(px8hQ1&YP@pt2$#%I@IOJ#3R$U>b zlL+B3nYcX`1h~U0QrN@~HVIlAqgEO@f?}bSW+BB~RxZ!{ECw1aa~mC_BG z-s-keUYx3Yp$){HKnB?n#1ZHnCSp<|LU1unff(4QKv+6dYEG(e zM4lDED|DGEKkw%Rf$<_+A>5q9Cd5r zSy3h>+JsIOVISc`SrMiha68bdLg^EX%xt7~FyQK|T_*>&r6Kn;FqE|Ky<2mI6nfl$pK;JF-J^dpwFrYc3!^$BA2&Ej&9iyN{4KdYYb_40* zk*TC2@gbVZD(~iiu?cWmViHFWK>+ByK?GLrad5NfZ21WS60Y47>zH(`?iP%JGQRma zb0W?79@hq_Dq7pGEUz9c1%=q@1?=+E>>BKERA!*k-9Fy!MJ_Z}Zjfa^C?KQ#;XQRn zkrq{H1JO-^(7nn#2MyOlx1$`HB0LL?;@^aZ=bMUxeqcz+n$cKKOo>Tw$eF>%#qaO{ zW<9x{^%By!;@Lp(7xJjkG#Z~p#cc+9ss0bJu|hPgh|GMZ(~-{~<&=IU2>A&Y1seJu zb7C1cE@()W+5s^7*{A4FARHavbH_(VjpjOJ%^T8>k>Vdh5>R2-Z73RxDp&$e)Ier$ z-Jr$fNTG_)7o?y<|ID=p%@WFs?=@D@G4T+-nl+tWjO+6*rhi=nkiF*rEv|zA&a+!U-|eIKQrf3>EP{jqc-9{}bfGj8(38zCE{)uJqlgAo1PGVuke8?who zpXR_$PGq)DQn>w!=imKj1ZQLObRvwHrV)Ql46;BBd75nc2}*WWA+}UM1`JMHY3KFq z3zhfST30aupPJ_IIT;$yF>kWH$E~}4(2=HCB5XU2IyPYDnz7KaTWB;O1s*y7C17X1 zEuwd_>g?$aE#e~{o8{Nw92bXeBN3oA(5{oS+tW{Rc3& z0CF(M^Z;49lPLRF=^ZX908Ew5JZ+-jSSzvz#WZIcmBI}_ZRSn zi~_(wA<>oQ&u@2oWlH&Bnf<@M=yX&7&;W%leY7MKi9(oj8ly5Ph2SMU006|IZqhwJ z4%R3RPIn+P7ndjRY>{B2GmQHif+=|ggQ`_r`LOE$adqPBn*Iv_#0RBA{NxwFg%}|8 z>)?Wt9nnMjjm<_jtzcmA8O(C_+I`+#&jh7!2;w0^)U^C1$PdV|>Unqc|I}}fgEEl# zg^wSP^vP$~*JaZfrY7iGa$ht0zH^7QoF%f(ly>f^WVv~o=OXi*w-1lJv(Ux&{1j-D zcFmI*Pwek+uarhYzXfUsPP+|Ii;P8J<@^>)9L%MTsS(j?{vl<@3kZ(I;_xdPZ@7y) zIL}=rX3B6S&w1cPuaSymcE$d}(_FldqKgiQ)_x4Z47!k-P2<1f&Iu>?`C2&ESMhpD z>%2tm6DBSc_fRvy@=`(!n{&II-&Z&u#sa;2-=6KA?9CG${{R(xe0gUwRi&3(w<-?G zqzDg9MZa@qRs|ic?D&YzW$h=;jCdr5Pib5WQxl%$#{h>92^lV&xjP9FdJ@)YyXD{( zlK8T#Ye*05bjfeH)F?it(o3zd>E6BFE1@RpV0ydNGrK}5&It#JThg`COf~L_Ea-q$ zdvvN%&SEM!8Fj0gr0*wMv=_(~iat(_0t%?dfg?Nh= z?H!pZF^CQeXVPY69zHszJJ0kLKEF;1k9kS<37oBfIyVU!V8N&%(-fR)W@-o30!Jdl zshuC90k1z4Q1Rg?@q4`j zY|M$cu~j3N^sSo-EanMsb-D7EnG*(GI4((GIKKm{4ZXRwE5Z;|V}mboo4^)CmDh)b zA#ed~Q8RgeZ~$8V7R=fTs=AqkBgs%gF|Yv~sSp(A4QVzILUjZoq;Dlw(qrCL%00w? zr(A!@%z^F`wN8KQp`x+NSD8N|4w1gmcB=XDl>F$cL-PPj7_t1@5OW-@is&$w{X4&n z-DECUiZ`3>d)4r*fw|RZMizrAR_FBiR$9;1>hsC#8^6DCf^Yq#if|u$a5p()A!wgqq58A zeHHX!-1gEK+!>}xqL%A)0F?nFb|NL{n>9clJKhu@@O0lnDZOdP^)AAA9R33u&tZXp z+t*iUzkR6(gk7wF3;pql&`i9z8-Nq{Fg39L^^HO7p;WztIQ!B|Aw z)PS3KDC>=A1S_~bQ#H9<73PPm3%&2(zWHd#Gkszj7V?FF)v}%`MDS$10mEcGD3EI0 zY>U+$O3B}EP$C0T*ikM3OAGgqNIXjKc`@wDc@XIqQs&JCwT`L*hZ2>_;?ikR016Mx z$4BT4uxKvfn#uosW_uFqdg|hl6C0uAcZR1s%%+B+H@!Id`-G|-lLD;e=xCcVnk3bI zuM8TEFD!Si6lp6^e1LLaiE%#a03>*OIZs5O46rOCg$E1J#TaG4v@9Ajoq?$$1*BC; zf?4KopJsK|>JcBiWu4Yugu*`|m1iq#d2rP=+$fy6&O+ym6RkG8!6I z(ZNnjj{7X6BAQrxt)zpm&>BXy!fPr|0Ir>Fi3{xxIC7hXgYx4=>Nl}l{1*vB=<^8p z{cyaY@cd5vqSfABti_LNpx%<(Z9QfE?8Z(Sm?~M!$paP=;bs@V14O}qlEbBDV9>kN z`eSyJg_ymm9CGMm;dWnk57vTFT6v{<_+wRH&^=Ef`{WUr8whX*O(s7M2VSp7wuz#)H+KwVwT2-MV{dip+o5}@R6{9Z&FtbiAQa>y zV^Kk{zXNse;CJ}+aY%9WX>j%oQCi8txYP_g=bEk|grC#m)6n;|)7RkMik6OFU!(l# zin))eEaE!z)l+C2)+(FTYvKtA6A4qI6b)QFl(P|2Ic%IkO9WqYh(3I-1Ab68gfJd0 z!-ln@pmsw$5A$~9CB7;APsIK;^j5zk=UKdtO$WX8C*6qDgU>T3f>&O`<*5mQ{f+>} zr;nb&r6)Jrk9S4fi*j_xZHm$3LdU+2nYp+*X-w0(c{hle5Nfal%q6A7#|1XE7SeCe z0x_B=&d1+CJ#u-2Lv}~2j#)cUZod%;%Gsej_OHCwT~nb&wi_=efzGGg&hg(GL_yzE z*K$`c)uQ%wz>Y2plw%=%d*_4(c1M;5`vg)Yz@F??sR|-t3uI5Ck)zlp))I^|IW@PN z3cQn$TB$XY|q{JyqX(r^ofQsF28ne@jdYAG)p z_cKvd#nW4c8sUU_c&*q_qE^av9TRL5N{w@24rmSeZ7?t=?GiI?y>;k7_0vAW-xE?I z*QsEYx&1(E<(hA5{%U`sZS+$6NFM(EYh`VKnUx8)!DXcot<21NMBrh4xP|s6 z=ApL=Mmr_xwYiT)1ttW^$uOS29;QM8NX-fL zJ3Re<5-WWY9*BcUi3hB$>!n>;X_b{TET=}c6NkBJNq>U}f?#jJ%RZrRCI5u|&wjS2 zApl=tQ9OyxBpuuH(CqR)p`~WHtp8)p-+=b;@FH=xum_(^Eo3mv|H*=+z%pc1@Oi;Q zTqFsFN=CUaNZDwshyNffE07QscEqIg6Z{b!F8%*SjC3(kpaQ0B00eBAg7jWVXQz|$ z@UpveC$x4@dW9&E5ER~=t;OX7x_v!6xX`1t$Q(gSov2%CX2+mqYi3s>jcZN>pJ?@S6DSZMPpn@99c$s^E4Gm5cVaeaD-jn$y2b1UKE8!shJ%vbd;4m7QRurk0zTY zG1GQwW%X4_Tj7XU_*bKaPzZ&wV75PPN!pKllgtS6WQ9HEnK@cC%1@*w9`DJ?7|Qgm z;k`@%k&N*@3y3Cl26Y6HFO~Jc^l|&eT|@i$U+y;m5N9I*uw9tn5L9Pc0Upk9Y=3*5^MCE5>P}3?8 z&84}D954_r4Mi9UR5@k+8i&c4mddD)?o z{n-Up=KX**^ES)o*#Dn?nOzM?x^*^a^IoKOXw6j+6(C zIHV?uD#(!-nXJUPohIn;-4g26Co9C-F;j0t$9}d}f>Ot_0mK{$Xs&kh0qA8%3K=SM)Gs*|p<%%uU$V z?7SSFEt$eWBP9zbbBaC%DjCCyOLEfmCLQQu*yn#~HZ6SdixPhC%ta^`g{!iL-V?L7 zNP$f!YUj{`FH5HuW|PxC;|Q4jot@l92CYLo?I8qpZhx9Z1qU9K@k1qcIp!b7JzH$C z#pxtqF;+W6jfKHmU6{Fi^J<*v{#i3?R5Y{t4$06lBc41f-Q7G+$^?6KwaB$A89zhq z^`pT|&&^ATz@8~OE&ZG$9=}<()QpuQu#O>i>JQxn3T{t1)O6n8r0$}1MP0yb5vY)6 z*B zYh~@S)n$^rc)tflB}nB~bxfQD37o8ypKS02cBpAeBQAU|1zb}vS>tkz)9+-L^vp@D zjp0s5=EQFX?Acz0{(DU0_T^cb2}ocwjO)y>r#`Ks_a{A1e%&y%)CnhhOhsUp+?n2+0CxrB8NzvD=EJaxdJ*)nK7@96T#ljd z@EKLjDXOrF6|n3#mUKGW9&i~?19-RbY2SS|4k_#Hv6tT}GH;dG9+m3I?Li8g@|2RK z7krwrA1rWDmrHeUT+FHHm=})(^{Q90U`;j~4Q=B{skqrYt$IgqOLMf#IhGfnRUTgv z)n!G*kp)OXT}-fIOb)PG{fj>#M){q?ptU3JPYjiSKxT|PU>vW+^E=IH(!dI`|OdSbHJDY~!a{O;m3%z)nSrveWw3ZP^9aC?U!= z*#L{tJ96ofE7BR}&cq5B2R`*HwCS>D7p+t}SX`z$jcjmungp z776gq4KKGIn)3TX7;QT6)`s>|>JPUQEZGiEzuNEA7MFP6bDB+Es1{Z`gvxnb7QaD6 zq0ujs&y<%{q(N@+AAx8&T+Oisi}Z5Z1#6atgso8V1m;4ctCgB-Qf#P;nM;pquRBDq zIz&Z7F?tQya^PrwU%`fdcNx2C%;CvE&KiQvh=mL>r6r~D!vbFN-D{%^o=5&Bm(HMm zs5n`qV5_G4=H@c8Ioa;>7q8_Se_P+wHttpAjLO)ZFvqbha*ln*Y!ljs-Nn^tC<_2{ z;8vcoVu8XV$}UhJ6PlJND5g@I_M!j7`*vk?X4L3=X6BBl__}TSg)|TcRJy9fxu&uk zn9bO#&g>m*&Qje%!F7<=oaJ=wt2(1Gr@Ew}zu{wdN}4Dh{6w63BamK-!+^BZaz9My zYuA$C%umv3|Fu=euTY)5Dw+MD#)jb@7Vj$-Rdi`u55?fYKv z5fj{d#(XXvE?myFc9P``2pdyi%h|46*<5Esl~D;?|GO6YU+;{vV&Ak^!@ZWXOgE|=LSRYnTgm0HVVT}e7z3_IM*ABg@qABmFAX(rY$I?K*R>V(I zdXSoX(4v0dsl7=BgVA>04q_5h7RvnP_>Gw}JmVRO8=F4P&lvmM7Ebo2UB&K#onV$u z(#7HLS~cR(AvY1#qVdN0-8_@3J4w7pbiB0S#Z8e0z5=Rq1c<^p?}p$}n=J@sxPhGe ziyv`dUgKnee!<6;p!t}&4v?2Hqu06;u0q8ox8}o%>0TvO3<+3I^6o`lfMafQGs!cbjZumFreF0a+4aQ1)Wrx5lWP!W{5wh+NR&SwErMg=sKLFXH* zeU;nM}!fC!-j(qdEhPls#7e@jxdnhZ{!MOYia+Lg!@qU3QDS)~vA8n}>QL3!#_k{2!dZCsa;`=v4xC-()qZsG=(i*UND44K)Lf z%{I3$++xJ&%p1(UdkUE26sO4u2r8Nlp(RdRb79O-(5BKp#irW#9Pc?g^DHAf(T8A} z(A$b1q3a&YPsz|n@uU&+Cton>#k3)zsZmgt)m3HL%YR^UtA1~#o^P1+RAX3WAd>KK z&Mj;YjEqEZ$@CsN7!iJU>{tokMjC%||9uFD|CGr?;4vUkIA$FcI(2fUp9cYc2w!CU ze;UjsU7ZVv+#V|ryoQH;PO10;V91yn{m=8ZXKDla;L!e@>WVc~vT^)G3wQg19%613 z`;Wev0*w&hPNiT)KCrm8W`6wVlf9jQSm`&VFf{F5PQVWc^l;Lk@?w&HeZ7S#l8&#h zm~(Zh|E_Pk1M8vStyb=W{J#KFM6R0uFQd0t`2lNT(7|qFye9TA$$Io8NE)tx+4O3R z{12!5g#oeC8Z~TRHqU0vgz^Nh5aX=pI=Z<@-mf! z{8pY{Lk2XJ1+)P&JshH@he+waxszcV-}7@O6wSm3sv@c3*;=hGlrn5lNq|40FW2)j z;6ZoYkOddD5J;S;NU#+u4vv{j4abkc>feV8m3;#L+pB!w%s}z7#ms_P8{}p9HWd9l;h{+38k{2oKrSd7uu^A}A&pSmD zK%8>DIAxq;v9L$KhIoLx$j6^nJ!11Fzcjr5scjB!5$OY(M>ItOQ~`z2I~ z{N1x?0fgV0N03Mk*XNJV8-~Z1NT5*q$Ve7JxW@Ea6<>Hd9*lqi5DaYb80)hAiW)b`#bK>@nR4WUW zx-!zVTX9{wbM+D=82|Tizk)O3i`)k=%(d|=> zrB)_Yj%S`SYqgb!nR<=wJ36<4LFPN-KFqniB`kB|lpECyzHJ4aw@E z8=*&+Wg)1IprBHAqwB^sfq_07ypC70(c*bR{5D$+?;wR z3Oipon|M+Jua@MNYVd+7ps->bXHo&nN$M)EMeX4F_Z!iKKF#hg;u@nHuIbiUKq?UL zp8WQK`36Z9Z7B1pOS}vX@brH#9AZ2^@~;YzWfT9{ErwvY6tY{ z;Pxy0!6(~TE`u10)6?iS{fBb7+1~Ym+dcE&w=9#T1@TVP+3|X*e?sgBtjf(r&&m+a zSW55p-_H-O`96g>2+OQ>!h5E&2K7M0hmTF>CM+l}Lviq2yc5i#-d2MBl7G z)8;dJu3-@bK*9LScC87B|@nZU^J{5!2vQ2;$(f^p?o2z4^sI#A%3#V*3k0Ab2QEIs zyM=IZE$ob}DCR8uqeJ>pEVIp>h@sjL4F4)-IX_EiQ^CI@ORT*7jZe)i|2o;fM?)}w z6Os0jeN$iOY$%4lWnZt`uej9BU>P_*>{?0EEWfU-v`}kX`?Ez5Z|OF-{pvYLwn>@T zE#Q>RwauuQ=u3@7DBt2(^nea(0}s+&E<;?YT-6Q_;|dwEzF2(JH(e51aE!Oh4Rkr2 z>yxf#{zyl+P1E9!88Gr0Z4Xf-kn&lk)MT%0Ha2fB2M#>j>Y2rsW=YHV$L^1~o@HD? z`62`aOeobtRQ(#6|F6=Rj9O$LcH3uq#kkK8C4VwtgTT&(_#& zAR)P{{-Z-_`sgIHO>>#wrF`s?Jny>_KKQusV2?g~txPNjAlWSLh8RQdw%lbmc)j+{@Ajvh#UYk%ucB=p}VG8Q7iNI($419YwR|K}S zVy{I|eKDh#fiUP+p9mR!dNMq5(=UZmq{&YiL_GkB_hK68r8wRrY*VPeGG}9l5=+17r4wp@%w+Cup%EQ z3kQG1@6y-x1+9o`?DC(CRt2nvK_g41No2v86nQ*>s=59uJqdIDkM1=A^`Q|W7+7;8 z40pbUn=>Z=r>7fq0kM+{-)Y(lx_~MOC|Elf-__SM<%iinusjz!yZ*b3H4LLli44SD`a)Xty8@gG�`{WAl>}{ToPjV9 z8i)QWl9NT^`w?A!s*Tkr??m==ic?JNuaJ1-6oJ_(CH z&1li!rP4?=(r*n7dIDJ|SkR>d$iXq%xiP_spb>OZ4aP|SUJJ71Mk)Wlj+yR-4=xKD zi-kn@ou5BlNIX=PqAgEblgR>?6ZwW0r3y3C^y!BM(U&gNZN-P4NZjyt>4Q~vW0^73 z-Q0fOJid;CM*_z`&bEa2`+FiLRM@rFh?9s(E_Oau^LCwJ?eWvG$~XrVBTs%;9=BJw z=2k?i;`_u^T6?qyXv-k~ZOXK#LnjXe()#u5Ct?ng8~*c16TyxiI+QZDJg4A8pa4D* zqdN-s$GY!}TwNZI>jAyNA_wHUu$Q@bADbz%Ac;goj1`uM7#` z_7)yx)9!rXRwo<&vP7N9Zx{2LsZTDp(m8GIm42AtNJKu=uC?hAnPFyRC~^s)st3Xq zy-6;CCMV11v~b-ESTC0>N?e98#(_GM4(fZqMyF0~NfQj8v~S#)Oo!Y^l;o7B=u&^i z%Jga7_iEQvC?Ca~Lz8YJQ!sMRCSgS|I<}e4D%))BgO(*%;=qTQFuY?C-HJ-kzv}WS941Iiq*sl9< zugkK87D}U4AECbJy7TW!gj>>4PJc#Bln5za^BU^F>&~i)v9abK6Asz?-6Wf3XX043 z7f{N%*!x*K;!_T0MVAuaSH@O$YHni`tH7Z@qvYD*uVAP+PVn)#?a4wxe^rEi@svvS zlVl3?BmR%2YmCmUX|}-=+jcUsZQGvMb}})Z*tRvXlZiF4Z5tEYljP=m=dN{rRh{b9 zeb8N9y=#~5^eK3C%2SJ#Hu*`VZs@pIWr_%2e0DjzLSa!A9@$%=DXJJbLSnI_802EV zAh|gYZ7GZ`YPw84XNt(XwZLa5#k4Y5y1O#RWaTC}H88>GdvZs(FvG8UZmmQMw*m?Q z$ohv&+=Do0&l_o(c=A1Hbs*{CoF+HI4f)RXx##TVtf3)p&e3eFE)~cu44T_UQm&;4 zBd!tKUt-i%jgtl=KgGR@qL}^-L=f6FTuVZF5SqmPUTRbP=eie^*c`E9;g0;R6=g@`B8(?7U># zDD+G42nX3ueZB>V;-k6ozp?c|c<|g-e`fh`x?iAxv}aBaylraweNgajMU!N0HfEXY zpaKuuWQTc*`8FwPnKNUU6JK_z$5g02ex9o9@w@6;xVsZ!-huv}zn#GOTr}DkNJa#; zsJz)^sI*T#R8Uc~l>Z#YvP$AKx>Q`7WA9;%Sz-V+6UOB5==7>(L9t}#@+s0awEdJJAB=6rJP^Pb4a^u zl4yY)i_lhEK~#BcwbawCVwBGu)=Hr=P)Vhc~}PMiD#>R%(}OZf-I=eC5m!s{GaO z7rePQXJ4K>1p&6Vqbm9EC+j9hR4U);Be=y0XTVZ{7b8+F!Dy~FEiastsUJs8GC^j= zT0)se6RJ~$aXjT)$x3!Lq1B~P+KCH#p6G-LN26N$>r5{lG?m#~*m;XoLdp1>6BsvB zKm;PG5YwbWY|15uOuIV!BZ+V+K=*`~a@;HFVGWh!T>%O8*yiIdhQ|1bX??z^>GckFmZ4Dp{26u?EvCG2wzs34dZ^(vzfmB0KF+^w9ROMD|O z9h>N4nImu_E6Mt6nCVt0b4~r6D8Y*f=~}^`EEJZ|V8S?7$^{+o@LG9u z#e&yfDwVn9T6t_28|4V43eXr-8s<(Z%qb_(27PfUB{#2Qs)j;7t@9`ppJ91dbWyja zdIJkoPuH6(2e?$8(9~C{9w7o4Utwf@-wGv;dT^4^oq ze|a+fbtM$x2-r|z{{UU*X3P1>AJFkP%rcGtRg~fll$+YjQ2@{5mBV)Jl{}YNfU3sYDFVqbLb*G}j``@BU zo0ixMO_S!&01ar-CI=sZf=T!~6^29G**^WZRP)n;eQQ3^%aT2 zk(~N(sZKND1IJ3E+xj9)`pE~53Jv=sU=!=~6V0`-^WRdwAO;QvhmuqZnxM_7DAIZM zRr?`%cO&ONWwR1^H7v~YO!+7HqenKw|6~{~+ROj? z5@8Ka3JcTMQSt$|9e=g(PdNMooDU)mR0o{8h0Y7S6BhX<3Ixvgn1O=#{sgFea`Dd# zX@L&`7e|JXGWZJr1!q+R{#VGo#Xbf65FR;y>cAd^y8IZ?^A$-C0<7ylU7C9#IM#n& zR7)XvJ}g{-Yah4jCwS%f9_jzmR z>fe3e+rRE(eube)%V-Bj0*d$p1TS;52NX8hrWQ4>ypkRRz7B`bBGsg5V(-oz1VL1i zGuSTqjoQA0L=F1Me%P|!S=3JJ(@o_X6g#IzvZ>74*5?kY1PgOTkx}$9<`xby1y&56DR~oAiXQl}B!M<^HeIKU~t#x4B>h5YCq@QNMvLKo! zx80jI1q$bcQ^A_QT%Nz@eb_>{2u}N;6pfzeQn~+9f)WWEvE}aIeS4S?#9aHMZAI=l z-h(A=ZMI~0wv;^`1XT0#)O+83vv#qZGTY0*FhR0Yw!=Pe9vY+JN==y)DOua>DvPWc z8GC`cV&UaLeaddu@ z&}+`BJsYzB#SZUJE{GG=$vBo+P@Hp-N%z?^F?~eh0hDx<{W(nXQwaqd0>N_Yz8!?@ z4sq&N!w(iINd+;Y4xaG`e6~5tn!$#$60tBO8Z(~*6?VrrMEk`JtZLyb=m%neX+VfS zvH@B_v6;gU`HVn>KIXW~a$}-_rfJ+d&F4rJZ}CLGs;+hxxdZ#y>)c?t#%G030MiYB z(&0Lq43Joe-KfeJ%0JaD_KQlb6;2eK`x%mG3&R+U8P#hrlQJ?^a;AuZmd06}xM6ni zmVSfsN-n5xmN`4w72d4M{jai`XVmrt)-`;+v|{;!546_iQ_3XJ7rBY z8LED*S_k#cEmRyvWxXmQa-9 zQEd$}?r?5)cXXK31?+Z<3wFo|@CXymprlLiNv@7E@DQ>upr z$G`w7aAQ8M#U6)JY;mn0NYP_U1eLxA1dmzYbTTY7$d*(6!-U_-(r~FF%`i37Xd$Z_ zzyZc91)&vG=4sNc;NB7Qc=5lAh8fqUPGN9DE@R|$$o9*Oo1koqSyxY;EJ^Z7(a2Lo z^#L>_#kvfdJTQQ4uOD5P7x1jxw%?!jz`uaVQ zeEM$eustm67IG1>0-4Nd4RD<=ivI6e@+$%T{+F=O&Qjbxt}L;1&ac^$s%PLY8vfn> zyyT-Z%(8b%ioa*yn?W3&xq^-L%M*V`7g+lE!Z+pe2j08rxX|EI&w&lp=YbJddI0zK zo+@>QzL%e$jm`FC*(!%w1<}{WZ@K>7%N3!YGFSI@z*W<~g+e)i9xG;gZ2IkJDMVrI z?{m?BCGfc4+o%_n`pwrvL)J442C0KKYlt%o2fU?r+Wabl3cXj#!K>v!2Z+uJ4i`%l zk0k`#$$Nec4lhVMEld~sJJM~8{S_Dx?_|(1LR1>a{QC$wDo729l8|B!?M*V`I!Pdw zsG?y7WAi}vOzKbT(`;qoAYa2*5}`lzM9a5hTdb>Oby^7vY>*d#Bk zkK>z>sNa(CN4E|jyo?jg|KJmV?8|^04kf^stXOAs9@Sr*3ee$Su^iN2%j7#WZGxed z=j={^|K{!i6?!sa(y1Py3`>8J!_cRkDk|6D9)|obt--16E1fVv<~rE-5s-!;o)TG1 zU%@nRjomSWjwFsTrGTm4dhr0vEY~p+)zBn@=vfK*oJi&H4^V1vD*ah^&VpA(`lD!R z@|s@4{>ZdtfH1A~hak5(UR{!H&|QP}N4RkzW-@HmEw6PiG5%uUfQ$j$o^)~@g+h-% z7yVn}N{TNNj9DJLS(*5vbno+pw$h-;+2=3xzZDTGR`_vr_hf|3l)rU=KBHb~9{_MY zN2^*A@b!7GK<09bW|>TcP6G#qE&bbrKU{rulN|k>zjmkl3cvOXD^r+-wscjpRd5BF zAUWZt2k&9vgz<$eij+F4@AxQVj+U-$;sWI)GGalv0Uu%AZgik<95vtrS_1tOydal* zAi28uOj>Q_!t>3%9c2PQE#1r-)*7!q6Kb+R=bFu+_W+w8)i?+Vr$w(6wGm&bPdRA=Sj1XRY99MK!A6=gm`rq)AOg1z03mAL3LsA zPIKVH+E#0rV6kV>qbd$ChgTjoeGAQv65o1F3$O1_*J@A4sGGHbtGYnM>-pv3fXv|Mq%%+u}bFw#X3bJSrd=O z^JA0c5b)i0hV?C8UvDed=HmSg*5E6p7mKEQ2g7}7sm(sjjKdwAN>E8xX|1EH^Y!BL z7Q+CibY!|O{bmLZ7$T@ed~QIAs)r!3ph=lAxj;KjaPo&DRE&jC&*cP;R?Tn*fp z^Kj+`oagfI?tOt#n>qp6D>+n)i}ch=R!MpM?vte@F*;XsZ=dpbDwMaf8z>r8gA~dH|{*p#Nc^dnT-t@LyBt=z8SPkW)SgOC9{vc)Zck~^Gxvx!hjVG>=^) zP9Um)+|RkU0p+KW1q0qDxE@YACCl_=?5YGeRwjOZ6(KHp4TX)rISo;yPH~4Bo+%Y{ zlX!TkXgz$^P==zRj4gK{nTFc|c^Y%jw?-gb(q!4HlAxRuf`pOX^D+mWS4J-FA0v4E z=19bEz)ke+sym^+%N?B0p+3+qpL8lUG>YVN{vDV3!)ZY_S$aq!*VpkpOyx3($)_1{ z6sfY)4{HC2Ex`wPW_3pYV(|sytP+2(={=-s`A+f={EDP`KfV-wg*Y<)L%j%p0_+E7 z(W@cp-kQS(20lOjjq!r=#PCL5@-N)MPd~#pX(=H3fg1VWf`q@PN0%?bo#h8t5#MQT zS-GJD&hMe>)VszbPi@}+eC+z=JJ!7E(+{aWetdmlZ{8daCKxRkf61Qi7s(3F;UUx3 z2Eo5Tp-W@BQgvA?L}os(5DptWro*8(pR@a){4IPNZzo1L9Z;S4hK?L>UFBuoC@bxP zj_=^v%{jgU%4irmm>ZpPJqQ;4wMPkW?}!C4V zv}@={Q_cXOx3JxVlb|AlroVGVu}~r$^Swh++^OXJv+#ffz`?=XsFr+y!_?;dOL1$- zLjjDyVMvt?GHMFBY16rKoS653e?mFDKSTbriX#B5KttcFeQnn+7BSL#sUgtP0>1%p zk{YC_TL!)X%Hfbf1j~Ms%cU+6&fg0X2NA3PGfZFsOu)hX$u9o{twq^k{!f_ZDF6@y z+OJF9ZW@q0M?e-5ZVj8)`|opokw<3RR`HoZMq#cdhAS0?hGASRJE&{2BV~-P_&H*| zRlNO4>{?+sAAF1Atc)_)qL?B@k^U1JwP=pA+9$s!j^5t)lr%`Am{(W zgw?N(n0*fAYbc{YZp_Q^2ENPkSUSRnaCIrLfqMUO_rJI&<& z^gXzsMd}I5;Ik16r|P}AE(Gc;@Z<9P8e9?34dqzx(fT|c!jHL@Oh1j`hD;A6oyK(P zQ?XH7KRU!5aT2Yp_Sm2Xt4Itu%Afm-wC<)Jik6U)Mi&MH$%$fQc%U@aH72H=l7)i< z6%k(ONNzmsR{d6?9tyUKn(UAssDT;jINrcr(O&S9<8#1jQ!EqM(3x-sCI!(MRg6a2 z2UR6Ij3SMUJoFF|ar+Gw)o2blZ;+K?8A=3@#22GPb0t^LJ0w&(W zcS=BZqO88vSV=qPUIk+0j>;z-3K#*7Vm&*uNN69$vD?tfPcLFBh!%l!e=xpPIESub zZ;VP0?G5Fy$C#EKG2|}5TUyG{8CK}jNi|0@figNGBkS+XKDZy2R6I3IRwgQpxh~$A zk%>To2ghX(7p~dIkhim_lA&6tL3ICF?Rt+BXWpl6hW7Ra#ck(Gsb14~I2m)okCf@U z$|C{a4g@*uh@x1rN9O|C5~^#fZ#y@gH}p4*ewI$vrek+8qP|Up5URmd@k+~C3mG#0 zK7O;0BZ?@#T9{u99b$A4MCpO$Rx|tg$~&`5V7#E#%trwXX)#fbv~c@db3p~e**2Uv$yT6PyYO^)X@lV@|E-UqtqxE_8luAnfp%icTd6oB3%M}afPdTD;B zKOp!M&ZRH2s2k|}l53~O!F!@Rm4PjxH7$RS$O+9@UvUFm4R`A1H2ymhP!syJf58_8 zy}4rD-e1u7M|M8_*0G&kv-sg;Mq^!@(9KiEM!dVm%(u{0R3_xe1AvwF(>?!gHPiK5 zg>L~U%Np+ivtxZSSb`Ud2BW1dmxV+GIJ70@s0oV;dGS^1lGc7*!z_OPf<{bZ3}*@s zy?@2sWO*L&x3Bl75FGlVWh#DtMiQpPB)%`1!j1}Su1fhY3ow|HKT4(a>FCL|*u6qu z@QBNzv2P0LHduRf5D?isy#@Sw#(QSQ*t`6Rp|~sMk4GiK*j{k+1$S=l$S!h9LI^)2 zOdp<}S)P}+kbct4)39cdE6U)yo$?ad+c5N!CUSxSi&b#0mIDZe*vU%I{fl+CZc`Cb z>=Rsl-$2IO<$lmpHolPCO^Q|F{2Zax@BUn!? zGiQ+p=EYKkA<<<-atNaTWgn^8jVO4Pl<-M&MOfakt)?Gpd1>1*sjzIUCF6TjaSW0I zDBo5AOTqYV^S`s|xRgZbinD5S;F3R+E1@>bG$f}aI38=Rl>JpH`84OD?lPuFXqtLsvO_@<#TA7b ziwo_$mvt|h$7wQ^#gvv-O*87cBg-28>n-RASm||u_mYq(j5$>RX`{#{j{{#oXkyS$ zf@u=VDxk2Km+DbVH7ZT8fx{}vI786chJI$jpWwYzJh0X3Gc(_V~W%TV8j4`%t#trcZm|Q}KffO{XUfZY)@mW<2dV(`k^<;uO0H z7>c-W%G$yDmUnwe+SKXp<$JPq`g1?z!1c5zJ75mREWT3wd{FiFohU&OG%ea!5XD^k zpeusVJ*7NY*jJa3v!u#?J_qIK`bSP9P{VNV^{AgV(vY=eAO>=qlVpXrw$~`axX8lj zM?Tfb{JyT}+MHnuJ%Tx;Y*5@Oh*sVv(X5(JBw`F}NZiB0{K}jnsYXRU#1-~Hh~ZJ^3LB{zUz+|_{rYc@YUzLfHW}Zq<&h@5QzZzPae%@-0`mqd z6ihxmar?b`e!iwAv4I)_vIVj-EcDSMn64p*sTa@M6fin}?HO+H6in#h>SjXsbStCI z&6N={Ej+}qb;Z!25EYB>8`a?{L@#JZ_{5KCjg`+eRvL(+Sn>M$o_{wl3IhT8TLN+z z7R$-#?4#f0Zgf`K=Aqj8~l~#O`0qF__Ioup#jQSz81;|k+#Qf zFPup(S75$i@7J58U%VqdENoe=aV2eiLeh<#IIlk}8!-L_?;sY_m9X%kcTbeyb_X0C zbW~20oP<9_RUs<7O0-7RkWa1Te+-KS621rW*c|mW+2sl(T1^dd7;hL9l7eylB2Uj{Xrt!A(v)8G6a0^1D~x&7zJ_7vSNlyI+a z;np6(jh!ev3nsCS+bG4W_js>l-hm9C>tl!R&!X-u{y{_{&;Z6kprCZerwI2tgT{zp zO+boRjQ2I-?|}{mn5A8+xi%aqSQ~Zse8tW404G&f>?2YnqE;60{tXi#d|HD~<#r-8 z+Aa986y3J#LX=z(jK9M(9w?Z*Ln&1{h)K-f@o^j^C40V&EyFgVvn(nAo$oTMuX5&c z&*pk4NW&|aISR3ul{1+~crbJ4dfQ+y90HRT)jLa!iT&V^hVWaMV36Y@O_M{*(@sS* zJ|Nl9b1?roxTMYiHyFzwoGU`$L?B~n1v~H9*7OLikT5Q%`@IrVBs20=rXb{-{j!w+QB^G3%twa zc5kz_lY?tub7AF)s@miPyod@?QhYfSV^MN2mz=+!;4|idWocPYI0s}e_*8! z0J~j$5g3hFk|>F&%rVTYExLo|Uz|?=>Jv=-ET28p-!(lwu<2lQNUw0S(@&Ap(SO3_ z`quG0&#{A>1^9rh$J<6cL&` zcsyi2$$ILd+jwT*EolqhDlNJ}2;`re4QLpQ{v?i%Fh*9`YDRJ4E7_hVzDEjO4&b3I zuGr}%ljOYI3u^ZAQ)o9jg=OMYAF)q|gSOvxjw1^W);F7T7(|S_2D2=|F&-F~otnx_ zEo@dvEv*er_TWzqy4^P!8wVd(pI8Dx+*a?~c)qYYS^FlQ`L}BOq_u*(JcZ`dD`wYKKbMY8#JA-lrK3**|9-fiZy> z>f88xGgjDk;78{G165^eM77n;?ccKXiwDA>y}Lrg$V+7L`&~b0^f7L5Q9HYMxsP8{@j0t^8v9vBP`}|MhGZp zTB9h^Pfx*M@fahM&+?49G2wD;+^t4Jvn`wC8%Ic=Bm+@{3BPG?1qg`Vg_h#vCj|W| z@4)9xqzRxBM|9TDYw$tj$^~{91sc1-Z}0J;_vRwF5(9z)8eXtr)2DyRz)}tx3n9oL zIw*0(1hZg%F;&muCChh4fI%Od1)0(&E001>X>9#!N(y#LO`{dTfL^w?>tA9bc}PAk zogyGW^*}ueQYTmgl}{z34bBFOu*vhCyE7@x0UvS+2Ldb>_zrK*bteN0h$D&8NHQ&3QDG7dGO%rwpV1tIHX}bf2K)YvzRX(0if?zP)+#97w>H>_m9;R!sLMNM?!5-Yj?erWx6 zBV&dQuUr{Ztm;Y&ONdo5L2zoo3_5h*Z?>jQgEca|8J}bd-n)tbZ^XXzD;$!%OC03t zcubGiiY~P_`@bw|Jk|rY;SipU9(dDJk&|F!$#i{&$#AX_<@RrCs3 zvc2L@cj8PgeFT>)2<3j*Gn`ynfhPbR6fUjV6F>&+)5{Sw*FdY#I*f|Zut(Wyz%P6$=4;82`j)5&IyN+?;f8Ix=|mVHxiEr6!LN^J!hc}=_Q}K} zwaF0v3s-eZnPc$=p_Ak8y<9f3HiN~d0a*CK?x%aLUd6wjpxi9u!-Tbvo*d;^w~3(y z>_@&FM@g8>V~f`ggj;I(m2e$Ta#(MQOfiCwUd^=U1t_P)u`R4>JvoHBtV8cj5YyPX z)$}yIh^!)CC|tDUARj?+)VhL9XEaf?^;bPlXw8g*ExLpkBq_ZfzOA6Da;%9}^m!!z zMmc-jxEZ`ee=D&$ie`Gpo^KpX&@pGF(nrf!@fyFVhRcTmdwlJaQZ!rk6gxv2Ht`YR z%Gha}f#oTiL)ass!SbfiJaU}CgvuF}ZT9pVG>&ykt8T}8S44&-O0+wXB!DbQoqMf? z18Ozxo6pyG#g~KoJw8uPuP|vJ`VL9;R%1||Z%JXqjP=ieMtV|?+ocr*w3o>wDT*~+e(?)y%EO7Do_a_A(P#zzMuK(N? zY+nHOzaj@(z5pf|)E=D|*eMU(l5w`o(|aPtACM*gT%X!dKra+@gTumagxr*!f3m1p zKnpDLBKHFRSA9IXoYQ-tz>d%Czjn%3Zyb?Kv zJocs48$+PC_(DVI!$Ip$oeKJ+T&n+*J)uFk!lC3ND_KDjU@X`j%e_O<5Svi_Qzj5W ze1nBUGfDET{y@qB3x@nBUZRG`hC)F>M(q>>d~Zjd())U?qt6rn^L#N{(wQL!py77$ zZtB%Pq3*n&f&Xm0c_6}Ik*;Zy#+_@_ygI)Ev@Ue&X#r}mXf5R85b|&^&NPcaP>t%) z=YIoiRe z0rDF@6AekD4ePQnwlr=C>N(4^%k{9oYnU5d6h*S6KRu56nxdUG-mm(Smtr8KLIu~|dFne7zqB&e3Ro8?>0Krl;~G z5uI4qqHh8#_;m(Ez~8u?ww%NWx6)D=rSCS9?k3o@_Jo#8gC{7l zdKeOeZE6H|qLI4eZC<(N@oA-{J3^oUt%z65 zl)Ly!R_~-qXRr_%>+`<}Qb6A9@OkmoH9xLu@J2BbaCwy}mK`xK?e{8;5rJ7ynrbFf zc+HnEpQS+>tX0GAZuIo(U@d84%H~DQ4%;bn{Ol{d%d^f)O_d^_+-92fp*<}bGVDMg z(1@vLvx(F+_@e>F*+M%#`|{ijbXX&Z#DeJXN^3rODQma@>!ae?>Junn5fZ-*Vql3q}fa>ZF(8yX^p;s)cJ0p(w96_ zkxJ>k*sb+$LrA}Tq8H7CRwDeA89PKDk`fK+2)>&Z~c-K*YY3h@G z^rz2v;vOeE{Z{O+BAqKFttZqHw|<2r-DaLd@9RE=M_i{^T&HPVXCI-bIR9;=_rcS-64tB5;XZg)spiq^(%_yx z^XJhE`qiA*?`Xu6NETw|Omm<5t?n4;Wi!chX>KRIVvRa$mi{*fq$xQ=h%k023<$xC zzxjlW7lqd!Tcri~A_L%pmFU%oE%WpDo^TrA)*#4*oKvVWxLt-_P}6#yAy|Nv?QQru zwV3a>UVk$2PwNE@*jx5Tdqw&Xb0~h^byx8Rz(tNvOpmh}2`WgCykis1+G&1vuOu7I z=1pOnktqku{P9O{4g~eftC$0r(cebH|MvH=cPy)*=D3s>UR@4HU?p1L zCpH3vwmefR!m+s!eff^e*ik~GISp`syZz{1X<^ejWCxYq(q5=E*Q>Hpx!s#Q{zR!0 zOtVs|!sV^esbreQye{(Q3t{CVMNL8G6f*gEOsjlaZaL0?J<`k@ws^axB5PpEoh(Mz zLPr7RVqWGUxbq*O8-bDK{Vo=zg=YOC_tp-izj9i*eaPf!mMdRnLTS0%e8AGyQa4j} zxBMiB-C7$JoVjg>R8}VPb>bVQnex((Q=Q`>Rs@KfwoLM_HBS<~{J2vKYQ(I%3o9&k zZDGaptKg?wo)pzz>O?pwW;$6{kcG&8Wm>(`KO%qc+>jSjPlmyf@N0S3PMNM=amfKv zp-AA!63yq<_|O?t^+==sK!{~7$4A*R0QIvv4NS$GDOp4?R8|PQ^^zYi5)C`3cR(p* zZi@$uS7`Y{te?^WyajMu>;%ksflH^j3i#~V(y72f*lJc7w$zY1+CpPSk^fIKn{c5zucJ#T-A)96QWvs+3HT(S)s2L=)0C1^bkI zMd=4X>-`(VKaf6=v<7M8(KTh*2Hh{tHLFiY2!(P*!+h4B;lTt+^EWvKQR zJNdi$8~a-g_7nTz5gpBbwQ9AL;3-kkz_Jn-J6 zy*9pMw7paL+j$zKmF2obXeHHCP10J7Mj_)KL5N*LZ}E|gEI#<$TyDmE-|!hyYeV)^ zC1;`5~b`Qnd#Hjk|K!w~O}}P~7WVqXu$N+_g8Tot}WfLaC9BM4;Lf zy>C8EgX^@--}-JCx{yV5H>9&A{t$97Jl_*59%hr$-U~)2Yb_i>M%*}ADNO%V(JAI|iVpPsD zoGsObRU@Pa{1&#gCJQ<&_$jXK8O&R|GyUBF3XB4+^A-PzZ=K;CMPk?01RUn2&)Y^M z&_2qkD%vx}K=)S#>yXt%dcsgNB7TNzoABRIS_pV6F^BU;Psbmz=cq?kI?uL9^MM<1 z#7tkmK10BHl}6Yot*It(j-NmqE2<%XEKQt32qV!NDvQU7q}WceiwC4G8Nn%lrll(H z)3V^XnZ}KP9&Dc7Xfy?M5wkO{6T!N-#6D`VfR?0R*$M@ck=%y$$Vh}V%dF}5M}?30 zU>a<$OsnKK6(KNnLUc$5T?73AQ#rWS;f<2csmh~n?&}uY%s@t9RaSok4RnijMahxt zeHEvJRQWd}O2A(#Tz{}P&bgvikP&kQXw?cA;k6kdUxDPz%Vnw`h+&J5J2c|a9Wp59 z{SPwsz?40)IU#j~DfQP)8t+TlL%Aa6<+a~>i~?Psv#*(m0Xd8HA7CDZu0>IKHu4xsZQ5I&!?z2b&EX3{mY-t<%IMW z-%0?8v`-KV6P}tg(WvxvcL4;UVCJPvCUE`VG|ll0{BXNfqq~%x9A$zrYQ?6*zQXWk zyg7#}wArU12emIBm1A*-tZqLL;?^VFkj9UR9P^)7s@{cwVVFd`Y#3vHQ8mJCA3K?vH~Yh9lNK!ok@W*Q{*t2m(gP zOoElSR3oj5HDk5WN2ddko^!TDXwFj09MM5;bg-rC%qbEgqea`X^2>q|;l07#A1}G9 zO$uU(=KTY}0Jq;Cx0l;RNba^ZjVI#>tW?Yw1m#WBV3`iq*mt5WAxnsiPTprA74(mB zANNCEAlVe_U_&90{!&+9!jVEf=eJv~3VELF6LVzMY`2Xpc2>Q6I;qf@5m6tY^MXQ^ z3A|i}U^5yTJx?dF+Qy%K;#UU#ZXfIq&W1V~tUm~VtsCF;C=m+S24jZ8>zo&mO$dHFVrR48VnCpK}onpwdO z1_4gJyyrOuUr2orSC{#@!Gi2J5XXfSS{8aSMnjO5Gi;P~!1Vw#eX0eTmaPGWR+Jk^TLj-I5TmGOxqjUHIl>cu5F4`lfk#I%iaheRO}S zEGk{x8RfAJ@fr#Uf3n#NbCvFg5LVZDl*cxp;f@VL%k$ttlqQw&#dcl%j#nSZS~%4$ zqzBE#o5TU*a}dGtush}np3HJsKrn`*UH(;h<`J!M7(pz)MmV+=Kv^G;tA0($U-7v! zm}?GFWZZb3E984ahu(uNo+5AM36=Rfb?IZQDVv6bm17xGmFgc32RqhK4?IBt{tONf zWx^_7q*Y7!e2x>eB{cfhhoKlApTf2pSKHPd0+KLLgRFL@XJ+swMZV^^$r(D zGof~DsawK7=}o{BKdycx8h?0SRp0H7KeHt#Qsx{k`Bs1Syww*HvC1tT;>{isdS>=@ z@`W!E=E<~m1#^O_Xt^9qBq@Siz{oy;HYIu*un{IE!1jWjriE`|%lN9gB2HrCw z&R@eD#0Yy;Lp5>T66fZwK&&>{r+Y~9jj7lNe8j0c0DM@N%w&o^(Vz&$u?-R^G{r78 zbc`#;nN*8;Pq&}vtYQpZ87fBN+__QPLl=l3iq-%pB0H4)#4h=q8L`%q4m#-+fAEX;z*%*qyi^0AyX2OBInIZ9PQRK8@XNDG@)s5MO}i#-cTj#9`e*eP@Mam zOhUw$w&2j0y?1mlc~)mz-_;0=Yl>{2MXfFLEHXYlL+)bWcq!Q9KfK5DO^%#_+Hsjx z5H}=cseVJT%wK1`T|1&L;;*A8jTH|2<+hGr!QSinkSy48Nf=5y|EIwA@}@`fryUdF zCaXx>?qR}7{r>eJyBx=5^M~KI7S_J`yze$1fuYS0?3+WAZ8yOWdtq4M>rEb{UP13O}UA$ zM@qCGzCr}RN^r$m9CodPaVa>~np;X@;#D&^aR>C3BtXu1YYOeT2(^b5o5@ zVr8AC1&ecc+Nd7xwT|eX$w?42W-~Bv) zcYA)X+3@ED)u{=L=e@GOszFKGaeR3BLZ@AXF(RdnkGL;O@mZ?~rXHh@~0Mjnq ztR7Ri7PeQEt^3W_a~d(ajDxVyM`er+b#A!^kAvtIux<0`e7*}r3gKwiKxLVn1Mbr) zNSWVCY7jcN>3aGdG(HdpsQ9H(1bTMKM#=R0icIA^Xe73F7PS72r|`3_H7Ga!ov7YU zeHd*U6b`f8()ebVMAPwJP>vqx9@p}O3!BqSottMS`uu7|ZG0RdfQw6upGQZ!_;viu z@Pre$F(?C_3IMe)i#)}dG7J7)3mhlqCHd>1hoa#!YoeX{p3I^hrWyoOHxQGsS}h=r z+#kwBu8?v`PMU1nExQA*{V7iJg$12I^8Cq2f+3F{sj*B?s*vdKpzd3>H3hwa0kbdi z11!w<4oBHr08V6Cg#gZ%WD@IX8Zm}OXqr+i)%6_#$$5pWWOMBD50#Rg6)=Gl^Uogv zdsH60a*P7zS6;`t_iny`1t*SbN1xWuE7+zgt4yI&xqo9wa^*|4^R6bdxv0KrJ zt#f6II)`DtG&3)4SQ7kktBh8Km?UdPWf_U6AiO_s?E-?w(5;P&KZUd`#WX50N$LiB zSu!vx%7k_NT@YTP^9C5A`hlhgl*5gdnlZ{l*)0Qs5PXfar@lItHk?q>Fe_4gq|j8K z2*or@DvT^{Vqs?`P07bqD?Df|iD7YE^?`~b3LvU{ng@ApTM&h>M>Biq+T1g-W<29V zGP3*8P*zJAe(pXTR=~##oXu0ElZy><;SBADj4b%6Z5#!;BUGeG2!S#hH+eu9iY@m~`QRjhGws4+ zq={OWsJ8(+rnheK?~7c`l3+}la2CrJ*`v;|Q(SqK+}^AS3sGcbSd5p}i1#R&JiF<8 zOnfXW-w#9zsDadyCog9mlBVqBY6E?QO%^|FBb(WCYc6@}|kkGIUwB(t^>B=GNIa}5T!z-4(reX-3#2F@R1 zRr#fdMHV0o40y5}9y=`A@wkO8*^N*@g1V>ZRs$)X04GX#ZZ{`G#5YcTPon`+!T@+9 z9Ll!VU(RjAaDvh_Z?ytjTN~AB!aG%R_k;tJf>#WJo6*Xui5rFD#`Wyr>B2)LBidu+iREo4WzvAn5-amsbf=gb40a^(l`!>d!tiO4 zmSsxd&?@io^&A#9rJ`A(#4jE$i|l%q+r&ZTEFDd+j|?>r2ETo4vDYVa&UWb81JK^{ zUP52EFfZI#4EprvGP#^)%|G{DyC7yOvKP?TWT<@`fCNK29zT{?WD zC=P+w)}g-+4J%aBcr2ew+&Z>5=CXpp;}<_=E6#&i*dp{{f(j2(`t}6BpFe8GOlh)Y(M8uk}HCoBzx>F}SMxEaBR+DHl|HTv2(^`=8VtUhT;~$ahX~tRE zAJvk20C1R_&;6jq?THm~Tu%V8M$c_h(IWzmmwcVoJM~I>XEwm}cJF}Tss@q>1f?j! zaMpJjq@zV?Ck4)}cONb}eYnyH@h9k`yBOgFE^_!ic8d*Zo zS*aINw14TtCncYGJ*aUks=WAKiiL+ zFa=Qh0yCG43hvS1#*^)vS6j_kWu`boWTNtsy7BAuhC_k16^KgFgUQx7QDI zkziBS**Ep7t#nC!Sngaue7^s`O(htZil?8C$~60irsBm(A17eS2m{8EshBk-Jb8FrM5@RKrwY3s&@ZbfZCSWd~G=Htr zcaZZ3o4in2N|myHi`3cr4!ZBcR=owexx$CA0gEoKV2T6)W8}|kREPD?6xM%Qt8Ofu zH>xc5Z!|pk1ryVg5sYK+k5Q$1BE`Xaf8425V@KYP+-6i7awg(%sM0puzm%oSTf{)E zK6laiWBsm`>hd3t@#Xs7=7x~*=zkUWHz_=zf*{b3eogxpU#na5NLXcQi`hINRr$d= z2j5mG-Q+)qqI-_e8*Jr-2daC#eQVzD0HCT+gEqlV1AtCH0_>VmY2S`5j%tvB#qEl= zc!tY#rVHtBb7(DDXNO%6<4OCjq!U!zre^_X?hmQX{C*Pt%pcP8KcjBKSs(-jiE#BV zQu~hL2FsNQBdCoBe~}r~uVQ+t{{a{L>)w|!LWT*udmq79YD}S9?OOx7262AAZ zAbeSR!e~k_BprOfP1|O|?rwMEjg6g|gOCbPjF1>4VDPWse3c|XGaKy-mCCF~R=(=1 zLJd{}HTZb*etz@whsYj8Ry20TgZXk0D9ee$K`?eK&x;20bnxr&?$hLHe*b(sa(p%P zt=o}5R>SwRhbeO+Zh!6`A3n@JetVwW2HtQ!dwjV4eg4bOA40D)yB!9W<9e_*O$<}n zFtTZAz_~hs6{^tm_bo?Ozg~=V_%Qo?&(z1~$(JvaXPolpetz@kjSZ8if!%D-53TXo z9VDBZUw>DF6lA{)l;wixNIf?L&vz}~bAiqWFE?Lrlo(BQjei%q-R-HsvVB;?RaO{@ z^&b8+ef%<+kvW>N7j|(xD^laZ$hNJ>_j%lWtzj#U8m8qY&I+XM;l4=qZ%R3ZPFc9S zwZoyVwq;RC_pIWsx=6~@bX%Objahd0F!^%Noa4GQBkP!ETj`p6@l3!snvl3GMJ#&3 zwqQ$Vs{f{ZWq-kseYxkZu}00NBg?ZrG1lXBavM3rIsQz3$Yibq2H9-u6O$G0#&v>W zxnzb|tlSfk=q@)YsZA?pW)%;uwmQks>}XCDEM#)ABa&iA?B2CwJ59)Tq`q06Cfq6Q zvtM0qN4Y-eoMX8O0HD#dKap)A6I@#jXEh6W1IJxf>wk(l>^A=@Mo?68OXkK5!k-EA zzy#Dz9_}8$J(yTTTqd#TK8@@6wQiiCm6Y+E63>xlXtAt_cPHjdA6}T~ai1C{ zalynwbGxtDfouS5)JS^BSdv(2@YlpCwhRusm8!!-w5c9j#jGzUqR z+!|By7rGdGoyP`BOpU`%%Nm`GB)bB674Wj^4}Ts`X+;%_gln_tLhFJlUUZws2`lCp zC&6f(v}aEkP#CDLGc4kb#=!E&Qlx;l-S4(sGvI?G%tZyMTmaQLROB0`jJPvoU^vr8yRs@XHbCnNf96Y?SDFfZz&a-{^b^J4sqv&P&{NIw%95zvhOj9 znY*tzfK)`r15RT+pv8E|WehOl5U``M6#zavGZ=V@QpAlIc0e0LDO^(ux_t^@mrb@> z*G!Uaklgo_~Ex zVn5_jA7}r*|3Q=o=QvfCb(yDRCfjc8kHRWGRZP7}OBVCt0vw56nP#!CWw_pP%|LE# zR^cq<9%o62Lc$nrZ=2k1y?OQVKb^fy-haNI{uq42(xt1qsb}r}P}D>vND|DV>Y6Xn z3f$`=ffcr7VOmOUhS-$VT(+OoRDY?R>$o-*RiFC8!U8TF90$!*%1Qv05qvSF z(CO$3^!KJ)d#>RZxtHe2s(1l$O0Xm}5ZAo`b;w~%Q%X2KG}joDO2lxr?y!sN1mqX4k?WDlWd$8N6i`&}i+Ttr3e zdHT+lJF^o-P(eUSAK^Cwrd&FqK||oTrdy?z>TXHP!jq*W>r(P=ms4-*CS zVRD)t9w^S}0e?Z}B|L%zkAW1gYMF-3h?LIwra%hFKssVC1~yZ^+~4)(&qmiVKXl-W z8y11-<2xk~2A>0W=G~6a4seQ+IWi~ldY=W`ItD%BL!9L?IRItyQWTu4iV}7Wil}^c z-vi;g4fl7r+5Sx(00)Hp^v7T$G~p0lJ?@2_GY4oKEq{g2Q_5s;s5*r&l!r1T7BWR! z_(FO7LW1kq|5=l74Uh=Ej|-W+$k7Eol2V2Yxn+~+x|9WD`Zq#~(qgCMKSpU$RXX7@ zCw_ptE@djPuS%H@3(rIkNnd&_tTdj0ZeX%M>YRX%>UzBs>FwjAximtls(5(0l&asZD8tKCQx4Ia#Bv`>LbA*cX!1-18 z_-=teu;_goTDAn9yJCqRmqPF~51mkPvSkN~UDlX~l3x+{W}^C@-Br-V36M5g3+^z< zMK3Ybe3j>SCFu;TJ8(-;k7iHusv;1YUadx6*nil%$wz(>q1FtF(^QO9$s0{w>3rE6 z&)CCT_1^s zh&nLmpz~9gS(W*LZi{0$SwEFWEsu7jQ9x655pLgqW3~&(AsWBtzcKzV%)9<0(RRj` z>lumrJO3F1$grRi+v7k*L+Es=)c*iXsd7D+F+>Iwmrk?=6#_Ifm%#`DDSy>lS##S) z5`NdOV7c~z+7c1Wfook`wTfjqO4*VlGFw}l5fu=i2~e_}%75SP>BdEZ5*3=+ zUAit`4y}LdC@ZtOxNuInNoqReG zK*a8e>VS@KxvuI>7AHUbV)v#n_I=N`RN(g>%*;hkJIZo2GMn^h*r#=r7txfu(s03plQ5-55{18RES!atqU;Kb zCb4{(r8&=9W=TAGY>qyx;-X?B&iTpvtjl#_YM7Bk93%(F9SC6sjzec6KBQf83oSzo zo=MDS!M>E9Aw7_tQ-3(uBfWmfQeInR^vssgDlD=UlgeiF%%jzPRCdm?)%HfnMh+IC zY`Z@?4P>7QF6q?wQCjd$BrU@mQi9Pz*8vw{5ogG~@QnD+aFOnhAE|2^&BAqplz>2( zaxZN*S+DYHZ5l;W!z8qcb6n7zZj?_QMubS61Oubvh?$INq<`9~(k!%#ReX0x@*YT7#D+;QBFi;9;3V~FbUfdq6#$GlI;K%WN@Ap$S-F$=1izI z26!RYaYR2#!*Np24S9SVk-fp8r4f9F$v{72KYO>0Lx^ zV_I%M&C&rdi|a~q&FElM?;GivvFeo2o@Rz=XjL18Gk;t=i%iG?>OWkce|X!aEVGx= z{Yeso#|^GN;;Yj%P#82p0iKl!!wd`sJY1O|v_r7E70t*%+)TYO87#U0Bc+H2vtUOd zgZ>$fUJr=_&02v8*Tail%$HmmSNA|srC&&lgBdjiM21J|n?}pXkcCboJTs3MoS)Ia zIsBbbSASSez8+EstCbvln$utzpk)6cTPM6?%v5LDnux&e>)pYN#No@P;TX59x*!{^ zQRQF=+V=Wa1r3Hto>7af09s@PIM}oTc)z$F4&T0MQZ=EBm;G!z_QlQL1v~}ytW$7@ zyu)3U<641oN|zh2Al?q9X`V+Da+PvI>ySI#7k^8YV+;T>JaE1vFr&)7a9sL}}8YY<1kueBU&U6?|U{9P+ zFl5skA%P4+@`4wa5xI)vn@P+mlNg@Us!rkoTx4k1oqj}MN$r<52!^~`<^xIxNY&qA zy1ur2skRf3-!IlHlZT;Mbg87g|@bAPi({%mfAe5bP%ytCfQ;cCnk0~>~o}!4iO2*a%-2z3_a}- ziBgt^4xY6(2EI*9LUeE{pNEuyaN%yfVjT`x_5;#HXU=zFA6XY8l%N4dI4&vNdw)vb z5~>APZ|Ix!*R`7`Eg4koj+1Nx;9hx^iQW^$z@BhAjgd^4(EIJje^aAAB;!=<%%cLa zJti=1V{D4ia}Av`&X{dNh^!oF;D}iJY+!rhV|_O#Xl5MBE{hLnkO5JLkSu!skfEPX&C$qrt% zrB!VJz}W(jDSJ2#wj%m2~OG10oXia6U`j=FCd;REh zxBy=^SW50e0($(0nsNLxgnWKCFX(NE`8_Tk>8%KVHRuBtH6*(UBM6u%D7C^)ROy0N zTYCC31%FLv9a?g2%l9fRopn%iA*Jh0YB`4P4r;>Ebp>gB+%xFEGk@H=5HBZl zb2ivy93nEnev^Umxe9AQfKy18K3_~B1rlGEsR1l?ec265JB-Z(@KYIa$-t{Ldv(Sc z6!5C;YzC98yj>}!ZC=VM%D_d2hj(dKT|_mYbpvS)BqWE?2!HDf$P4B&P$;_LP#Xmm z^)0fg343(mR^HYrmJ&2fnuzIsL-Tc;NlnyfL?})~O%_ze0*{n+SQ6dS-P8`Y45Sg& zg-1sg#~TfF6wjqn+>^wdXIwO;RuV5_x*5UljGiGq7UAc3v0l*2eVD9Eayt+!;HVlG z!D3FJgQ7^fY=6PEl&-?#Bq_^B$yZM`t8H!wM*9e^H>wCI?XwiiVC6c^{10z&VY+pF zt%kiOroj_GI=E1LnpA|dfX;oC#!+g@7X?TY)HTS9M}(TV0&fdx>N<^?TD~@S8E7k? zBj&=~>tJKd3)h6j+^sUUJOgIg+2ckLSqWd*q)RL;>3>=UTa!t&EZ8fqhBwskU0ZO? z+K7ebs(TR@d6$1sDuy|YRE&3;*_s*)&aKc~moCY-0+n-eiCcmq^M%BQ^WoPGe7tLa zFL8ZKYp18QV+8=jCW{m7*HRkv1hLN#daI~6YkVMSQ|s>C-au)vyrA5G2n*ZPcn8tv zk24$eHGdR;EcBp9qK(qiie+6a@!PQ-l8n@-AINkGsFqD;apB*>~_VO+1cx~uQ zT4Q3+Kj4l{sxVZ?pT>fL3#H<3I~SQ@^P#3=*{j`qjl(Hkh-Bv`TOgAtxbW) z9b{}9&z;}w6!^B|m$^TkZu-oZ>VoOT9%Bp32Y<>(^B5Vxi1d!;F&p#`^O(b#-QQzm zpe@L}b&~x`R($%5*Yu0WWqYrkzO@K*{Km1d!|SIVauz2qJxcdJ-~15|ev-8?!H zW;oi+K-SY)tGcY&GixpGR{QTz)@UzSG07HP7K(R%;`BLVop&0y^TcVo7ASl7f@xRw z)wZ&9eb@bUv#-#WZF_%i_HFO^)w1tVjl0N`C?a zu=Vi@_YL|72EBus-6QBp+qN7>z|*yq;_nvM!#%>D+#{Ghs}KQYkbOLTw8jMEwk05A zAI){z^bd5MgPGkQ$_fwg4#)KLGyPin1rYDW3pO!fr@EC5`hK(Jy68p-q^;9IfHR)) z{p){S+*ZSvZ zJ1)ZhSIo{B*Z+mtX{tYuW_E4*2b$f%%)TI+Ibd>{4KdB8VG;hs; z+Dmr%&cN4u7~ajr`RM!rutU$Te=idX3@>nB^6zEa_mcR{1b=cTBz=iDXA{yp9SGO6 zgXX{BLHe^qi#y=zKdbvF!j~~b1{47`mtj}|6ahJxF!~89f8|`=bK5o&fA?RZmz$Gs zA_U(g+b1=NbM9Si*LG)auI&RYQ5Gi>sghJ2_piSN7WyC~DU@M0o}T?c5FfjX-5+)r zAVu1{@6q1-lOJwRUY|v*7m-MF-MgLi0!nxk_5#g`lu_??-20{f=AXl>+jrNe1FmRa zk<)?FwEx5Tf5ls@iSY8~^5X3L{m<9K(?Irb&o3`df4lwh^;sylsIxF2Tu9(;2?Hqx zBi9!@pe{~8LK?36E5aT3FPT{x&d&e+4omN^haWx+uMNqQcef|MpD-Xodu%;H6%wsQ zZ!|yo zYrS`Me;No%0c{t<5AW)fnbsr-bZ@XVn|*T}gc68+zgLohhUSaQx5L}v*99_t7x^q5 zJ=XiyY*R!08kYtqN_2?JIs;E!dQ1C-_6{JGfyV^%f1IeKlRABzu z=|F~GM^%xG(;^vF?Qm7)?fS*-x;@0RSyET#f9o^G=#~Kl1O%bj%EA9iCB-Pf*tVSl zA_KnaG(d_i08bSFP<9CTIs;F@drR8}@Zjw!xUGOfUC2?P_i-^!vSZx|$VvjCy3=lh zfuDB$rEQ^IE;Qjf1ZE+j+(o`2{54lHHvs`wGy9Hz_Z@4CXB`R~bGp-boq?yuy`??E ze}QZ8BUGc2$LF@-dEC*amxfF%UfnFMeU6

1E7Dim11pk6B#`WhC#x@GB?;|+u=odN0$JPqJ0?EwQQMU-;KJRxyUNI{+Z)3@UeR?@}O6IyqY(>gg+f07Z=;ju%V zzNbw+Wj$b0DT#_gG^yZ(eH)w7mwjHR1hpZuJFwIlc%r2{X`MP?Uo4^y-@Ixt@KlGd zvPsSaOh_pb;Ugup_z3ch!< zc=U0Wmen(d--l^hCGF{!`Ml+E)Z2@jmgh^eG|8%?L$%bH_IHP(e>wwC6!}Vf07W_= zVd%~j7~@Ae*5`DqXv$~aS=l!ryW3ffi+u6qU6uLahZY^4t27vRg3wpm10YnIM7+au zmH$6zNxL!Y4p}w&p1|r%R;LSrdynpvQD@+(4PR*wEHj}9rR`p@ndHSNd0A22J6k#O z(N$yDdEkj$%jrMEf6FWTNPqFFh4))Uw{NbFPO3QW(Yjk`bq1ab%~#q33yn)cSC6_h zMl%AWUvxNQVW;7&8ZD0KooBPhrw2b8k&t%y{#Jv5Cl0-(J>ncrGC^qM&fz-pM~w2n z3X()*_ShYs=r$PmA<0|X1Gu4-DE-vmSa$@pi2h}87UC|ve>%TXv50|>+7rko({Nx1T@aD5Km57*q@kJ&EcN)%cS^} z6xg;%3P_XZaW+cG=|E7?e;1FYjzFIMN-4iz7G``h##+3=EEMUv$5OV{CUIN+eqW|; z0M?pB(-t;De=wKN!6XNafeze6oM@(t?mM!9>1!({`Le*8csx$4G|%E0wwP}r+{GxI z?$7f4<8o1A*SiELT5+&3#>?-^qZkT?Zc4XOTF?l?Q2@M@RzhP1@( z0u;8C4wVmSHN{#t3rROhl&Hk=l_`sUg661=GB3K>f2!4R*8iBEvVJx$@h+cWd&5@H zQWfd_eNrHG-v7yXo>$m(es#)t)ZaN9`-~D>2V4hszhVpSk*KTQVRO?NFI8Sy6X_7; zgDMudrgXmU?5+UGM=WjG6Ye(l-0JK&l<7R3#RcBDjoNx9?tE}<2fEg%{Sh5r8w#Ua zc5yqDe-c2zBhepXmHD(wgvH&I<1y$Xt{k;_GS3S~4Rr_w#CDVWt`*^A5lp&;CYW-( zOr5nR7A$JiVV*uIFf)CZ8Ow*fqzW)A@3aH)eIDNjX^HG8mKzIEFFy zFXC#ar14$8G~R~mKBs>(1qGHf3n`F&yNtNie;~B4)y7v-F|`iaP->V2daX?Yt=1&X z!A=jRh)RZ5qX$#5(Sx}|J?xmkG&U+RU&o2@vQ~+?`RVEg3k6!%baOK{pZ&2jhQij2 zS1ioKMVEqHueb6@%Fffg?ph@oR^2_~6#M~$mK+^qBP6z zcYWqa69sG2^%>3Lr8P5KxndTeD`vV6En}>)K>)7#0v-SC(bX@D4EyF7^RRlOT1Og0 zxi_!#+M9`W=M23F3|+(pOm~TnWIcKfe?X|&yob>n2*@ELQ3sC!r2#nu|KLnGPA2hk zR=sj|v<|#x^c4(hCN^@Ku(Ja_do&&qy|Eoc#zC3KJG3rBBBWaNLp2(|Chg14R)l<3 zV$H)e0aO*}_Aq`!Enw*HuEWjc5DO^!2t(``>r&SVWUfRzx28HHYCKa~C)rz7clV;=eQ#xLnX^5?mzGk+=&&^&)K#8 zvArEJjTbP95^rXpzuj|*vz?|VQm;MoJk16u?I49vQhbVMyO01b8vNoqAlUG46EDaY zCYALJP(-*wVV;);eR>tTNJr+J&$b{hn=3}9f7TeeUbg1uA+=5tO3g1E?D|F>1CJ&n zeatuNzT8i(XmJhR(H$^teY=kU>cIv~2Q=z49yW#gAGao37MHPN1r(P^%>_0AF_%HQ z1S@}AYg{)Fe&1iA$M&H*8qGx#m_RPLEwm7lJft>VyPlacm1*eNibvO2=r>)-f#< zwna|(UMhiupPJ1-S*WFRB(&zss|8BUwN`%)MAARjK==jK+!A8v6;RrFIgn(9{3d~v zT}mTR#Wgg@Gw~I$g^KhQ4O9aUdZ=<|IR%ZG5|%bN0jlfCPQgRUbpZ;NL5lMrJ?G>U zz}d_xh+^t18Ynl95+KqA_y=i@Bk(Lcj_{$FOCdLsA5a`Pdt?zWP@V_MiWHgKol9UTY2m&ER_Z+DO}haI99#E~AgK5+!@qkS9<*EJ%rP>O52#OXn%5)_E30 zx@18)Nly$QqPg=LsNy0y?CZ5X9@&dUT4a zHxQw()TluRdO)q`2r1J-o=ZTqXxY}A)*dVGsVbgx6u0)$Ak?b1o|#g;<6M6)TFw%? zUi6%$QWqyDi|Iu;gCmOGeif#-zx*0XiU@rug81SIevQ&E|h%d9~eFI`8M@hmYsa)}O+eE77Jg`{p6AyuE|I^9_Um zkGgXFPEq%`q%R($ZKK!9tjja#($VTqw8j`(vOnd);k*^X+p#@7oOM5(h}na}iQ4V> zr>oT(LeIAQx|?-Rdj~A0*EjF4`}y9s)F0WfHz}J^{>%5+_N_0 zSvlUb`bZn(!HzZFcdUQW(T=tJ)l=5WjAwehXZC=ezXRU3G2`h&?;x0?AFxODyw6i+ z$8GSG@?JE3+&nUxJ^_!Pm-o=S^O8%%2s?=8CNbeTj&A7DF*IhUXsp9%i$zAg#KafN zeM|oTv59DZyVxlnE(4-=|D30tjgNHBGq;E<8_LLhxHp`exMqLg_7zQS_M|_*fGbzO zUBJ=J`ttrc@3*Ppp1%v;wsD~pOW{#)j&-)6XTX*%s*Pf6G|c=%U|i3lRr}h5CFPlY zC#Qo7?zYF79_xI1{4t8M&G;YSB;yd8ow91NFqd_on^!wisSQ?HwlR>ai*tjBM`M5gOUAJ|W%)1a_;4@VjF;tjFY5y;_YQcsnTg-2c@*4YCL07N^+RPG zOl8oFtk{56$H6qawaFkJ~}CVF0GlaI0d3(a~_LNc4Xz4Wb$M3my%(=8XAz6igIL9u9ZHZNo;x zEw#m(Mmr2gN{v-+CFdVP=tc{dF+>IwmjSp26azCdGnX;?2`ZP(jsyySe4?u&4ngpF z*n^YU8BZln*4FH9)yy0y3bt6GNDWEZ*1z9=fe)FfWM(cF&;S}hKR$Ff?JXV`-r~dA z+tt}m*Qr{hZW{T~V)d|yl^f__5l6lo1nFY6S^Va_`}y+A>gw)d>4%;Zx);kZ@|?Ff zx9^#f^3S`^x7Rlxe!aVYyodv5b@Tc5;*ZrYKV2umh`UN+*Vh{MCdR-@!OH%J7EF&5 zyNQ?D`JwB}?yonaGhE+%yyDh}yUS0XF7J@#+12Xo&oc!~yoKs77$$BM=|#Rf`|S^J zv4OE)7M`oqWbsThcZ(p@ZW!QU%f@h+6v>1dB_fB$8&%M3vYZZ zACwqr-%2m?<}?zxp;mTEYx26K;Z7E2#gq(G2M zrQ9?Og->@Z;g}kKl+zVEX&tJf!&d0DhldN5IKO+I|6*Dm-DO8^tnKs`rA91jS++NM z@gUQ>t;_>~9Soc}O0;v+F)b_GT3UH-_MPl;bN`teN#rT!xj8ghSJV|<#+%;ap>B3r z*NR;xdL%ZO3Ca$A%`@*zyRWO(u;n;Klf~GZIpv?|Na>9|&Z!EKwYDrwQCN4g1rS*`XCV6s#Cf zRpR=93={o-WYyfh+67k>R`nirJ0}1gxk=pHJsA27C)i5&r+O;P^9&z9aHBNt{ilO# z?m%7SLEt9h+p)7V`8KPHcE{bX#_VMzJ9OK+DPSdQA4nEkW5(9ld0=J8;S^E`w|?7SEasK2WU~7oQxl+3IL^lD#*xSM*YCF767Tp4HJL&LhpTj z4?l_tS=VLxSA+|IKj$8<(eVHnPXhj)gETh7+SR*%DZ5ymm?%wRJA?+<;fz1FAXqjF zLQSbWe1HTH zf&3qT%?5!nup+UW-+Y<7N4D9>so+Q=ypQ9vpeXvY^rFggE8SWY#<$<^t&jW98LR_u&SMBQmhsFzWFp|)>fIM^*nQBho=kbXP)hN`PKzV(bH$6rH4ynn zt^r+3#@Ddg&;_9PKzBnx7k9Z(j`bLzzQ4VH=LQm5ChkPqzLb?C6`XXbp33bp*b{R$n z*pnlf0w=KJ5RYoZjh|PRNpCHd$+KB=XU#V9+*%ehm+7_{zMEbwJMIk$*KEq;nEdB| z!L%}uA73wW+KgUzAZ=^;%q1MTN{OaAhs4{_Cm`Ct|Hr_w&GZ&lstd13H9viH0 zZd05{qcT=QmL1(pwlimmIbVWLt<};t4!abh{@06c^h@e-G>sfWdEF8QI}(1oJq5o4E?V z30C5=hJPnmIR|pvfK{>pPWowoXj!dgE4#fq zFbu+h0cQ#dcH#Vt`IA)>Ji!r*CpgF;7*Fto^r!p;g7fHAGR7fB#y^lHv@JJ@(J1)n zF~H+sB1D~c+@RPAe!Vx+-_|y5n^``B5YJ(~hn{^zLQxr}=Cc6~+G^zEIt~SN#K@1t z^HElZ{qg4KJeAQN=TdZkgDu8=87GO*S~?H5hDVJU^q9k^;6__uHqgS}m^258b6I}( z`9X2`nuX`%$>etkWRU_rFe+riSh7Y#nGtD?# z61aNsNd%x#DaUjCKysvzL%rAA#y-GXI@&e*=evdxLmy|`&`Oh7?3q`fl`J(x^Hp6f z&2HZvxqD(JNMgfO996&%;C8X$CP#_Fh+{{^Ap9qG`R25=+Kl<<41GfDj{EUS?2cCU zRd&L=yi9BIDRJGSdDxO(F^)|L&^>jg`#u1VCphah`I$ zIGEKCZs_qrNVXdNd2~j3w!$zLJ;6lQ5kH7g=%y;2`ZsQH`}sXrQ1Q>D*j<#o^8F|k z{DrZMe?+O+WTn252%DBZvKBTaLj$ZQuY}2vMKnilqTXbG)!=?W@1YSLKME&tU6k5N z$Ezd;R|AvjosgFHj|B`5I{|&D6aZ~~oYQ9zyRq(_t*SR!mwjKEN#sK2JEzOnTVN^5 z`#Tns!qK9!OQQ|=X$k_PTuq)+9YGMFl9}gJqdX|O0$GU10fjvsi_{xJmCDFSdss`F z$9;Ota4C0xA0Zm4n9{p^GIIIeuGpp(sgmfo|9k)W)8)-AQ%%FsT?4V{T=|6Jk6;|& zLuXPYP3O%p5Ho~dYlZ=vAzGU9@QFFj@E#SE(s?t1c*gbP!AxF6PCw%Ip&KXukC_S< zHC!(`se}GilkrbXCW6P3%P~3(#4GcArsK zLm&cwQpK2z>Q<26+?fY(f~;(LI>`a%ZA?i)KSh%`z?Dob;1}4Em8^Q;!Hm1&oy136 zl8!PM`giIP?02WJ(%>7RH}4x@vgwfFHTG&hV657WRPuu$8oR^yjDLusjGA!uAW7$o zN%WRz=h0NAks_-K#yW;U2rdbXp!r;sn_QrONS2PCpAtQ_ilPF6}PPWzTqzWDz-9z zS#^JPcLAXEpKFR4Za&H=2Zo7r{rPS=C%jKrcX#Oj{y41glgV4;f8#Ck6G>Di0^l4e zk=Pg)pTx$rt{JZzLSv+HXxuNfp)ui#Z`BH;6SdAcdyn+6%pyG`VMS%1cF#Z6oX1}v z@OJ}X1|SDWi!xWCtwVq1vao;p)eA{~L+L(%pzrOGHymPMm?CxOAu`7;XT!mXUBIlO zop4Zn<=ST>kfHe;FA3D&3g|t+mOdt+>XnrS7u&FS!h1{6&6lE^&jkx^fCB@@lp>FB zIwmf-~z0yj370oMyEe_B~{!ryojyyLA(%F19`_*~-{l)G4^6vE93zZYPr{`g$oPS<_ zc*mTSe;;pu`fzpq{^Q-nX&gB7>z_WH{yzWV%~cW%wCf~xJwJfHNinF>@MZU)55~iZ z-9#l;K6E|l{kSt4!`1bVmrT9CySTZzxI>jEm-CZ9PBbV{Gu=%vOx!5)XUp>B*WcA_ z1#Lgfl&xc{mH-@?VW!|u)44^d2O?Hke2h%;*+D*fdr&Q%l2{J(pgUni{ zf0kLrL{>FVpqA*SE)7$o(ZKs~G|YJ*RxOG%(OTrDk{+Hmbt7L7)|45!JQpUf)}pT_ zk+oTgh#lY5jDAzfuj>`Aiwd24)3&IG4c8y+aHQQxd)5w{BHvC~cj^XlXWXr#bt+voa6azG#7`xpkTCc_V=~e~)JO%yMZDw1^Rne*X6FT1E_p zH_G6=@u~S?4e_ewB?5yn> z%&Gbo&#!-Au*{(`fDDcSCzuA#J$YZ!vE$kAj=yf0l~>DRzar;}TJA2dKHgux<2D{E z5cd%L!_fKn6-L{O>mR2_Ua^%x@FnAfC-=97Q%i;c9Pvaz9T-g~-5U+C*l3aHtOs85 zs%cFoEro#tYo(-rIJuJte=dUP{Q7x|{MZViF}n6_MQ-TDFlm4!erm%Mh1E0;=(78K4aym-T)EJX{-Bg&{^0{HnQY~oW%n`7C4k(`xOCd zYypok6=b_9u$iN;wMVgc-6Ir4?wG+3fkvx!;624WBWuM#WZNxI=(EikBJBV$BtQ)9 zTRJsBfM2NTe{caUkO3(3d1=h5;m@X{fEVHx`F3Cb*f!_QGAqo41q6W`byh-w9ZyF@ z$Z#<5iEJTpRn(cz&hGTN7zs3o;Q>msPC({0F&GF;UN`KsiC#m;$iDCMMCKr3rXm;q! zqePB1cJg4dcHetmB`G*|pRYG9yL^Q?ra>R8okkcCNZB9G&OMd59=O1RU?a&2_>s`L zBGl+Xe=nag$wJ%rgM^*(#2h^z5|!Y1j-&#-!FN23{xBSDG|Pe5Q~-!TcfZvLbVox& zBH_$>&NeHUBaQ+|-WzNej|LfP?CRjaH*2L7qKS~c%}w*B8;&3hYNT{_AjK~ODA&sb z2mqMFMGO%h0&RGGL^zZ&J%4+9s$ryO{L0=%C?W1cY!=RuqSN{B7cNE{mi zCx*{;u|u4{toK!y9ng4*S#I~O>482GHbel)Ap(eQ6+$%t@)CmrDQ(texvwCsStr6N zu*aK-jDKzu>4i=jG*gBHj5P*NCM_^TB~Ky-m^v#>Yj#$<2yo`yMK0hBf-Ag{UxFvh z^aTv_Vt}4!My{#grp~(fXZI2Bi~yqc`{BqrTC1`5~nElYb?=RC&Y9?!^TI@Eo`*)#EkpI)S}W zA=edEL?ty9@){8}$a<;n3+LBjH*99?hE%iPf?q|AQsqD|@&aT@<1ZRHLYCloOSr$R ztjWM&(0p(dmb-FWJW|Sy^g$(%*B?Vd5T@eUlp1(8#V{Qg18H20G?m35$xK=Z*uv9% zHh<-oK`p!uiodB1sK}@J4fHehLS7##w*yA3{@f05YHvw=T)QZ+?BY&gR4%*5!Ewc1 zd<8Udu@e}d@`}J`9Ehg?Vj<~KmjEDB${=y@5=iwRR>fb9i@ZJnZ#TP)3$ux~*a0sC z1hND}hXZeUBe)<9+#vGD*mPeN`6pwomw$-BY68|k6TAt2e}qJA#T;;E6URJ^-7wY1 z82QzCrm-7G{}Twq8SwsJ91MpscmcB_((#gGL~PN$?<##@V6S!`dTyw?&7%Y=N$E5t zsf|TxR}w<{X_GHEBGv`X6cac`fWXhI$GpiGh2dAOuv$Qy;3)+>Q8LYO@3_l}%zqB0 z2q{WsOvXN%@W-m)l+uf=&yPkoGx$Ef3-Y~K!o=Vc?nvmatUHuwGAee$$Jt?j!@H-c z{-VSFVp)>OD+IwBp~!qoCCWpk*gn88p`ah+b`Xv-b?kMBs6f+Dg1;dcfZtAqXb()* z*U8uV2(3CRx6p7rW~{V7WzS7t_J0fx)22bu0bqRqaQlTk*n?1>yk2KXJUvQzFjYvM z4Q(h8h?el#qhMITD2kkmsddpX(m^KjW$OajP+t>}b-^y14PVqEy^wKb(pF$@l{NAf z@B=Kv$gnf(Q_&-+gTPv3au&EUn@Krd>bZfv`9mJZ!ZXgF7N)x*2pp_H6@OCd=hzI) zJ~pEo_68^bfPKZx#eT;pAP`^%ywO?dt_tj}@kD)<(nHUW2I-;aTj%22bFnn}wq*u+ z7@u!={iqu|(%?S}p}=coYhiN?1wvv<$*PVnk^N|hBmBs*-`(HLZ>2ZuIeoq$o;cqh z?r{oX;@r;fh)SIc;m9=vUVoWs=i=gmUu1^t)F|$wXv2--EfUQ8>Qbs^361Ct$51rCDLOFMmvAeseqJ=~BRB z_Hf>it@wapuXeEC6QNYQK@Tio@k4M1L&HLjJuQmNH+JxV zZw;1U=^jMI!}2}L@qtxc90ID!*aay2n*=hggSB_=zNe=$ct-yL@qgVJ24!Qr+Pk;N=yl&1-v;6u?QjXtA=5 z)hrf~|5bqc&%SB%2k9bTSM`pEnA$2d=!WHJCFut?Ij+=}1b2P((e@q~HDc$2 z>Wqoh2@_5V;3*Y1DL7Ulw2@Zs5Qy$r0}Y|T6c1Ds4ACKo=6$oz3fqm1TEnhZd9&nE zGBBs6hyDhq@0iiw#7z2OfVppBeGR8OQFq~Ab6t`y9FQ$PQ$(TEhJe*OyoOt9(YVca za)}m&cIsnzb$`aAV-tuXyQxuUbW#7)z|{EV?}@<$^{TFnM$C{)=6_Y zTayd^rVt>X7oYM>^DiyvPt7z~iU=aAu zWkxwo8eox~3VNwHxYVYez_1IG20ZYz{|$zif#N4G1GFZ>SUk6MH;P@&C$v>^c?6#v zTtpSmJWm<*$X{iRMKRSgBMcloR}>M9$WxF}>{R=5VRl1Mbd*JO7zgmvBmcz}Nnw+~ z4Ek%A15V4_0xtQdj9+rm;;A#Gl>FW{$LLoN)zgmz_=}|dw{hxMN$n>PQKPToaf=pkg}<>bg1+C?3?SeuU|>#NFsgLcdi#sz=+2^C-7b3dD6L# zo%fS(zdQf?^~mRSqr-3)QzIb~%{c!#L z*RMjaBb|i-aXE*%wO|m%U}W>q18j8y5>i?B7sNHQA5Nxqcy;l&msomzb^hkf`IQoR z_VW7d*E0q}sKc5Cijep|cjlY3_aCSe!@KVtO1KQ2JKb~Rc!Cq*DP`BryR&~E&S=+Y z*0O4uoRUx)qgAT}H1WL2JYUDE#3yAH6%{t-3v5~zQx;D0yEI$ki)L6A-K>*m#)iCW zLr{zQthUJ}&1SmqtW1APdTj0oBw%jc{U<7DoGhZ<+Grvug*Jxj%%coj%cQdO;cA|A zv)go(GmC;*HFD0(btwq~?#zD}BT@*Q@MWg^9j)D6K(KR#;N@$C3sC`3SXb zR79JkN{SNecWJfCcVZ@10hC^N70o8;FWOjjDRz|Q7E+KatP$}Qle z4DIrcz(iTkm6MwXd|`i-g%+)>=^o)MSV^<_dKcFN(+pb`I)~PDxl01k5bO%1zbJ6p zp6$e8J2j?P!1lt!fDoq755>a~aTK`IhyxE%rDc`QYb)`y_VE1!Qf6mM6r)^$B)4E9~U zh#rH5;QhQdf*cB+@eq7_7(#&&U;5ayFC4*Mb3FoH%;>nOS6}Y7+q|gFbotL0Z{M6> zTz0t}r}&&#;92m+Z5kOE?#%XrjkC(*^3OU7)#1ZooPGs;LVVbyg zqqUDT&owyN47UGmawxhtG<2-YaLLR&U?;vr(x{S(|2=y~`b5%ZSGC>0B4450k65oB zw&qQtCV>f_L)8l=|9ak+?lF&0-pxJOGZjOb3BDjEjw+-1uGA!8CX6%DH5+zmMs-*L zwX`((2Lpd+%6%K#RkChf8d|yzx!JM~zwM^FTcvY@Olr1&mRC(IG^Ko>6R{h& z5Tewhlk@d@ulFHHsNX_KX&s7LS4~#q$mV%gML_kvRW-uZTAnv;T@P=$`^+#sPS(j% zPg*|3G7)H&!J~&|(As(iU44XV%=ICNG|@KS;(~wGh>u3jeVlJ#iL;tx*!-7rw@~x_ zM5%lKS8VI2U4Tx#L%ZqBW5z~mm|-214C|nzS=X!$S%)#0QX&GsFVFMBu0Md9=8PvN zTSy*FvM)`tAGTu}wy1JzG*!h+5eA{85R$w67mYQPcUyewsIEFg=*?ntc4*|wNx4nt zsWN{PM$mnC*R>-IkRG}{S!erD$cq%xYON#GAaPUqwkj%hf!7{n{?{w5qclz@-z`^b z(<{z*klL1eLg&%EF4hU5VNh(Vu|?y|(D$UGnN9TrxRcCKMy zbb_YNLPHD8J&{JDMkfs0@g25olB~i;q!)jR@6$T!3neKa2}w_rJa^JMdmFcY=^(l& z6?%8^g>hIIi#uMh-xam~usOLL?cXKwzM}zurI@zdnW4{4a)zx2^>V8st$m)7SCmzq z{DlrU{y@k&r-PHFO8=1SV7eJ>{af{PgK+W=QtTQksJ@2d%_b@^^#O!b_M;xJ?OT5X z$T~ewI2=x*f_duJK(%|WOMG8CE|H;hio{uTt_f^u{jG-+aE}O}iJ1TetFR^p$~RXO zd-6TzLx#*wnxU2Dh3YW*8I;vGDGc%sI4by%)VEhDoCA65yc{r8@M*9am7U(u%NNZV zBTK4nku1`CbCJ}QE8y5Bo1Py}#oK@7MDc1gIBfX?;TWoH4;-OOm{fZDkmY-5yqkQv zD|^v!i5oOFzRB}-5@kJD*r+`}6$=KN4bDrWVPVT3h{aH4k6^(B9IQN{E5( zXpq?Ahaoal)yDyWgnWeln1sj0QYII^y=Q*YJY46LJ}67Ks^t9 z3zvhn|6ncRY3h2I4Ua}$TmC@m4pp{?x{RuiU>vpu1)N+oXI##=kNAIf`Kd^LIN6JE zOom5;!j?Y}ilNFL@giIjm+>AiGQ0JA%q?Mg;v`4XdUo(6{!^ah6ZRqq{$j2~enD4q zB5_?jI*dkKTmC@e4pkO^XVmLL+>p4!+$=l+eeGcyvB$52KEJbJc)A!3Gh6;Z%!Vp^ z#M!WbxU%_n8tX3*JzIazHuGmsASoU!Mnl7vKM;+f${s<3s_$v$5@K8Aw`rWr()&g6 zbWZ=d?}eDur;D)=vBeJqWT>i-vM*(uSm6OQ)-;)m(c zxF{hl?40iY8%_zQFfhc^)Mym6+4psKZfsqBAcy*{UyL}HD`zr9XD~>-%@1PgvU?1ha z($Gxx)VsAmn5i;>$HCDEXUiW*xS`4(iN(H41Z9V@xc^if`h*7mA>r8np9seup6*8D zp)G$P4~HsyEF3-yK)`eVkHfM5#lo>swC`U(i~}$6ClaUr>*w&_KKk<|=lDZL&o~#z zXZe~(CsvH9WsyEm6_fBo=k7V7EM<@gS(deXuMqUSD1OaUp;SpNPi5 zAY#U-$zpr)=`)`!VeF>~X9|XH-OTMo2Z{w+L4Py(c=7iOe@;&0EDmhfHg7we1=ma% zISFORjF6VK9gr-JVi<(!@uW;AtCOrA7Z5TLh+_d-7-nMeBoQsMKq?mLZ=kKi5ZFG6 zAZkXtFsqn><3hz*6cdPcMOjmTyHllcQz*c{^MKEu9M%e;Cr_FCBV^46?;+Za5$8eR4?R&Uxi}f}IaDtVPH{})k-6bm6IpD!wX0VAU_R@;Z7 z0%a06l*6htU(Odr@g*BfU`DebIAc&k$s!S+F(`cjBZD$l+lPV@8YXyv{;Lz*$leE}l_GFID%0uq2nqL2boCV90=%lWD(x5>~2ATo@H(eVY~bfvvb^1EK84XfrS zmrOzYZCX}GD;%dk9~M;P>9gewiLrNxr^86Of8zCgDC+Sa38Im@K7=8-21ywmVW=wh z=C!~byVN9Am&4EX) zQ!$DteVU$*I$&@P`iGx#HWz$)u&oTE>Bl;$(`}m9`1xb{JLfXb>a56-lH^P5{8}Y5 zSh;rV(}5r2_+&0MlZvisS2uo=>P(UxQd@Hdf;tBe%pNZ#U|MquR;`jsLrOv=f78l- zis|AeDU(H=mRVJ2iwft|1-92Iwnia*&#ct=U12|ve=KN=m<|G^ z^>$)+M=YnsVzDogmefc>yRF-c9dGjY6^;2xV51GgdS52A=U|qlY-mDJA}zBo z=tN5ftWscj$c0z^>I-7{*A{)2Oc#r?=za{)_=M-K5)>p{Uk%gFv`fpb7^PvdxjRbzZbvSjGn3E?h3K z%^{nKDTsC-9k;<(UJT`04SPY#NBtvVLm55n9}x|iF%S#zfR^#2f3oH(iWwI{-({^# zN;HjM-~-anlE^f?OjpT%Q&+4>Sa#FXG3>Il64Se4kDX;!VRnQsyFKkjwe$p=UgB3x zDs+99U18BWbH2~l_*v|U#dWeI8A+XhyHp^j+ob%G;Y?uQWmUAGSnsKOn{778jt+~1 z-4fjlOb^hjeF@N`f9(0k9?m(Rf*mq#N_G1bU~uJgE_nz)4#{SpHpzJ)c2JJ+NVm_} zR>$FO)E?bgHNXjWgJ}3PnCvBb!EEn1c`K%4(U0TF`XPv#^}Dh-KvwMh=G#9hB1nnK zPxdDnq&n~q)C=1TYlv7)Z*NlcvGN(*b~eQ#+2Dk>2yiDgf9#4yjZubq331sbRo$C( zYf-Zy78vDfSL91HJB*o(j*>3bCBjVY5o22iyak~YAmTIv`afN&v^{?nz^_{@AuQe5 zAp#3uPwSx_zI%3AFeXIbB!`qpxW@gCTaiu{Z~+f-vpF_3$s9^VM}WyL>%o1fIA_W{VVsqTs$mO7Suf0m=P)(bE4C(8fygCBC`gZ z5G_cwH4bi*JDRnr3Svrnxco&L;>FaN&@;NZf0SV~k2VZct}kfo&?OFe;%yG2=qC^z z0p@lggtWvfO855H+o-g8+wBbe5y$pp<;Sr`^J@0DCmC}2+Z+4G!{+#Ol15=!)WFOW zktg()H0(fS3Dth*p12*=GgjU-pe6gd*uwn`wxhcgz~E{|ncaR|C(eT%(XW6DL(-M^ zf82cNdc7)Ix5m14GkikIb|8T^FQ`o&SRy<njMw)ESZY;l9#)(!Tf zvDKakXe;#a&eC5;*A(b2z4)SjY2m1vbbVxv54O^(EkTvN%?;I^VaS5^L_JXzL~zVB zCr5Qt>^Do~pKNZEy9(Lg7UdUv%EeRyf7|ihzTCO%oc+MVOr6LK0`4S&hfhDuq-a!1 z^5t-uDx>g;=LF;|1s7y7^zhkrud)( z6!#nfEdfE}Ed*&;N7~+XVQW%5N(tIg5i-zm=M9d7&e?Vd7)~D-L_Mt+2AGE(6JxJovO_ZLuyC(M7%2l zKdp?Hct8R(;wfzQtG~EFX*+}zg0uNOO_A5t_(heC}V%FR*#%*y&Es<{mMG@ z|3yMYOvmOq|6hc^3+em+j3uODaQ{Nlo&URHki*1mE(~0Arb5YMrTz^A`O?alaY_ah zmwN^V6#_IllcD@6f1O(0lbkjZf8W1i9@#37A|V7Qd2$@v=Tzc2_9jB|L_0`umS6{rcYGZ|s!+3LZw@H+UbhJt0 zP(+d4+~k{If*1dK{_f`G`|E9JWMIVg*2FUS`pw&KsK?Udf5i`PU%h$#)BESwNfg|? z`Qh#LZ#Un5@hXib)K!{@P-|G*5e8BUz8oIzgZXw6kxJ|58xivAj~8=$c=hJHm(+Uw z{`vRcKYx!TuU_6<{c)v$h}@{*fF>1jtT(&k)i1xvO%7wOXor>Uh#Ei>)rP%s1ZlmS*475VcNdEKsXDU3v(=ztfFRHobUbkLs`Le9>}_`IG#HGvZ3d&)XQ() ze!y0Qi`3M&YmUc$i#y(IBQ31nY?Tt$7}{xF?y|0|fA=JThq60Ri*^N#^R-HY;@EWj z&RYW!f>^bZj%jWrFYdCw>gc6xS2!6;BP2+RxpXPkIH@9Gqi9q&xAQQRLPjC%9h56o z{~#`D!l}5neSX@uHzP4eIRb@`|@3X20)g#4~K}O%xi%}spNC{;SNgET{+e_y^ z`BfT;RQ!9>cWs$7iSFPS1z()Ade5Dp?G?3df4QeEtD^2I$2&Ox>}Xm3d*61*UmYvA z75Bsg>o^SRg7@5ZG~)I`O;q)=rgquEMinq2j=(dyZQn3eD}Vub7Gx z1dd*s-V<&Q^Zg8ZKr^$oljP+c?)0vp4cDkjk@OqJreicd(Rnz|MRIf$IB>{n-zpw` zfA02&jmd6MDfd-#n^nMGrBv_?r-Z>>!z7D8v*W2MxSO?(78sNvl7ZjN>dAhUGNj25 znUk&2fwL47c`u_EUM2#ecRa#o1ueGmxY4}i3Zc@XdDw9s?Pb{~l(ytE|S zm<8(9m4;B5U#m9cHm90pYsgCG+CG%sRhO$A{+Vcj1m7v(g~*A`QlX z7QkB{b+lbjaLz~BRD>pEzQhyfqoWke`Hf2Nf0n$$ zwNR)yo%{B+h@%scq(j7jEv}MEqanQCm&L;x1~4L)!+LE8oIZlITTn2aXfz*hG{}&$ zBUZGhVppP(pp(Rbj2_4A&+^zGef&#>lxD7TgP@fDL@b1GAd_)Ni4i#?vc(&{Mj6=4^pWs87BNV}DUnvI)?CFLu-}bk^7rSl_CTdih zzb9H3`=%?i?V2-YF2{f@uG65e9Q=SccmATFm-nw;U?UCU)GA~O#(~7gqqCc0wsa@+ul6f}PIl}g0 z*`Lv)Y91UWNbEumho-Oc1-b&+3?lX78T51_GBE3+&Wn65C{LzuDIhJ+!1yRs&Z~vt zEYM@O2QcFpC{#;hw^&I)Im#y-bD>3;(+D|wj56E) zHb#PVQIOt1Utfdee^YbZUo=>k_8jFE7}7$&qz-@dm6Lc^52`3W%bQ1Iu>wr~Zy`q{ z)Cf?9`W(vlSmY9=}j;oGMgff@AYl;t^B6c)=wuuS~8 zSORedKH*&6e`|Ugykk19+oNyyLTY4DL-q|%NxeZJTn^J1?0Lrlp&h8Oaam5O=$x?> zk+SRQSi+7maq^4f;MiAPd8&92(h!<-;0_1IL9HAf&#BJ|lZSyUDq_6w&yOax)bzRz z3s1AHgxp!;OlDY{>u1kMpC1n8?yz1dXtP@fX|&{>e`}di5fFRuO!(x$Cln*H9f z+5-LTT*FRrCy;hS){f<;FA<&?Z}|XbM;M)u#le%J4h-&Q`Mn$4HOEudmA6jnxC*5q zFu881f9K}Io7YVHOg+$n!jTLNwFDiX;Pn+?;DLw^et36-4PT7dHSU?yAS6XyR@P3X z@tp(+lfBuw-Ukm*AWmlYJcE#lX2^oE*~QiA5L46MK-^$<*Ac|hjDR8_x(e5_icK!R zup=wH&uq(mjWA#uS^vSOgm&;L-R`t)>guxYe^kOTwVq-M4ytkJ?Gw%i7S$q3qSq4{ zRoCnqMipf4VQ}-}-L(oWrYqQe;|YvKYOd&wA89V6$J(zKaG++mHy9i9IWCcLt&k;{5?08>+ zf8zOA6esX!_p881L(Xd-$tX15@rMJ3gFZSTG)9u{)$t`9kWWj!oE<`|A(YG%y!7CM zw*;kOU~b)%#fHKpW-f{{ub4|+c`Oi!%*z2&Zu3;O%IVbAs{mJ(JTkiGHn-6PkB zhPwZ1YM$&==*~mlW6>R&+!ZNJG*Wcwr!QWskw_^?{hG02nw5Im#o zw5P)&a;H6+fN}STMhQ7cD^jxvsVC<{Qaw}zsGx$iow0Y~>mZc)6Hi&W)WZmtvhfJO z>kFT1tx^|T5y$ZeRCXU*T0P_E(WTYnejtAQ{YDqxpPIIHfr6@Tc=Z=ADw0g?{(BWf0@#d~#E^CWe+OZeyGnt9UB=nGgJpLY#uE-1xh5IWG;dc7ghDRF zQ_*0pVDC-W4%ePmexfd!02}0hdj~rPNo-w#vs;lSh(1jhE)#K$mcg5~;&)_(8pGiK zvj#yS>7kIERF-oGVLo-dG!;p#KW}NsAQKT=wP5PFBIAe4c%8gz9!9Gte-!9rkxI2% zpB|D(!$~An09Jj?R>@Roy|_j8=UrPk3Wb&Nl)((Ob82}YU6n_NtYkU@^146X5{6C( zOb+0062WM!tZ$pXW`Yzg9GziX?#nTKm@P78I9>76j@MM3inpQFsDRs0;=Rxcmy8DA zzf^`*=79F;$G<#Ch9*)ie-toOzD5R9m}5ALW=pETVMn&}-kB0V$&l)k3LGlq{PS|t z+Y_tts#YahBvG=oP)?nV(5Zb&?i}LXi6`>0xP0R05Hr?iJg2apR_34w|M$n;LA%s98ZPXi)nyfxXf$80yH2{URP#D@q~YQ^8I+}C2FKhlM2|Fg9 zZ%S=`k)S6R3G}A`K3yc7u2M1*Wm>a*8jG-dz>Brdsc$c9J!!uGO+Y$s;r|0-rfq9K zt|^^@0mq;7y2Jd#k$UHuOX=8~6DnFJG; z#}ft@lNf|6mkAUG4u4b#?jW0|G`G6DO|psml;-5n5^ZxskuFKu&354GadSLAe|G@bu=_T~l7r1*IL_RXua*T24hc53AO{D182o6}F{KR{o<)?7PSu4X@7r{t`#8-#`21muK%S$di}nC%>OC z077T1XHX?XYcX4{Pd$a(&frbY?~3l)&tLluh;UtZ z{@tq*Ec1JqNTuIkx$BDC98}2|vsN#en!gGNvkIS{T|o69+}fJhu41TXQa@7Rso=d@ zEH#2^Cx0RPbgKD{Qf@78Ax$#>P^^pc6qM3}bf413F~Le!GVu zt|g&DKibq5LP&T?Vx>FYI9I5Bc*eX5%DqxxX*15 zH(gPC4E5y{H&THmKHeW0HxD`_+Xl-crBqZHaDP5nqXm9!AjKHkT+MLs{`JZ1qdye5 z+Ymyei|xbsBp--RT(dxTRd)~r_Dcdzrj$M`38|(bPRqb(Vx-y)N-7-$B{+9b)iCS5 z6h;`7bRU%LC&Qp*w?sk7f~j%gBKN_`Bt+;@aKfM@s0c14JSR9_1GMbQQfc2>I3sXm zVSn3a>}Aj+^!|{fQ?!2j33@R1%LXtXA#{$k%6$K-nNFT1{I2bX3 z!DtwXcq&3Hm&4GiaV8F}avWO4{z$~gHh($Hu+mfvIdKY?lo6RE6Q_})F?)~kA}M;C z|9z7;_X!x#8vdXYX+8yS52uPGY}bQ~9)Ea{G2VlW4ju$k=s_l&6m}}|AXte#2qv5d z!N#ozX_7!to$?@&cn=cB@liOZfm!b~FzuWMW+MA`J9?)9cirbS$_Vc?@QHI80O_4( z2dEi2joy3gi3E6}B31#i8rFSQZVZnYEvVX8R zEZFzho#ft3g)2=Ymya?sY2>|}1PMV5(Nd2Nwg1Jd6z$Er$$`YSTU2eanxIalpp-QB z0UKY0%^dP(T~y8`Al}?v=imqpF8V}L&dYk4l{nXz12DcT%F+k2)e5IFe1G%d>;+D| zeDUT3j_QzqzO4`qPdM^l1%*Q4m(BQEFId3dnq> zga^5PO6B3wlcrDd+T0V9bt7VKi~P>x_VrTFGK|X{JQEdcEsu!gz!C|P@h$FZwOH2m zmtxABlp%`q9W5IbYZ>0RS_aAaz^8gG8@1K4-Hcj>5o*~E@XP0K-~R3FC4WwNJ;TT| zjrxUCMwn6BUk{V+plCr=pDSp;$7ir{M((nF;}vc9+^1*`$JzF*cu;%^Pa`$EYM~pE zf@*e{eL)e_Z0Ee1J&jW;wF#E%VZ@n7w$7)FPe84&2ULY(JejYvub8a$+Qs?q8Z9&3 z>IY^EpEW{i;B&zZ)JVQ&_kT&>*8sq$hf(xY$pCxEE@83Fgbj4Oq!-5Hhpdk4AtEpb-N5s#A6liY+k31xe)pfm+w70^Vl{m^oAzgHDx%fS2eA zod$hkD{lO$O8dg=&x6%Um5mMGPUaE(BSn5Bty2<*!zX2y%*55LzPN_4w<}_87P$A4sTb1OgF?AT_;yAU-*IMHW*|2_nqejK<%OhBX(T$z148yF!t z&IpdC7Q5<^5eQqH0c1^t@%`byx+sp)XD*Tlt+UgGrgZ+%w^V%3g${ZycG(^&qo#|S z-)A;(8Zy%xS5bBORo+bKSPDW#8tK@d2XNGE>3opc{9X(Y!| zI~6Ltl_a)j;Lr22tnVh2Bsk$)W&Zh~UwfDSyw1Ai_2<0AQ+guEGvLJZ9{v<{NC-Jt zi-tq3DZZf=V+2QP@mOm2yE>%g6lyLf#{YPaczUoDHB{`7pME#NfR z{7w~7kd<5E3;jS*YfPW8?alJy+c_{>oeaP66br_n0)lGSH^FdbS+Ccds#s>eGP6@X z&w_ERFk#l+Bf-e70X(z=7jz<-0cw60t<8xPQ2T+6x$HvaW90xQe;zn+3}y zwg?A{TgLtEYIRvR>ug&K)t93VgDnzw8y}NBBUkS+Ig}J<${nxO%C9*>n7?m=C#YTI ze-sz)GI+4=?{;x=y(zomru3g|HPfNu7I)DWl@PsP?2X{TwWHv)u5n5Q)lO21fd5G4Br$bmdrF< zx&p4UxcFmT@+nrpd!D$CP%7sCZ0ia<5XRgkL|NI^xbmf{?rr6IiJb5#OG4pE04T2eW2piO-+y4U0N(Q3-1m4OE0#+4gtcH^GUjd)4k6RWQ2DiZWIZ#pWH$g@D97F{6+O$lTS)1TsY=>t$pw z8WJ|YyDpa3_AW#F8-9gR$v(rozqe4n@20}FncK6yh5<(hOw&r_R76_bPh{d)2@<*N zGtz-UK&G2ot|3vAgVJLJDJ6>8LZsj1yni0l+7#^MYJ~tRXbLVT0yVf_> zC?%AQt`5BCu>R(kSw~nc@jP^KiVx-U6!(B}R(ONn;+Eh&%!fKQba;5fLx}|^!II#bXzCUdYW`BEU zbB{5Y;l=*6F)+fn7g<02F!dKRHZ-Yl5ul|D!qH8@*(J7;E8hgiv)7KWuiQt!VhR}rXgqnSE4Kwmz8jHNoo2UMJ$H46+*&zUCa+0M<)q@4^zQ5I^6R7uK?+unb_{QxOarfer}><0jg#eQQ6EF_&P zM>?kmuPzUc-lob)MH+dLb2)cnB?3Qi;>Z(0kUEz$=d*kAuj5}X-<%&#yimHKIGlu$ zbYGo)c+HTMo0ET!AKspwemXxsj05-b?Bj>S-!9)By-k81b(O@z^L^k=gn^WTm0d#% zhT_B`k!gz`3eR%C&x~Yvd-n4i?wy_=zkh#xjwBD>Tps*!pn!;URHtB=h$!-%Y<2MY zH|fk^?wuorpC-;NVXmAY^hFq;uuJFS;NJ(bZ?u70Elq!4iX^p0yIkZTNs_v{Y4X*& zfk7(Wa?ZeVofoFKVxVSN-RQ>Djmc^TXA4~v`I0A%1y+YDar3&VOxENxo}1qBT+^~F z*NrI)y|f{zL8@$mi=2rcL_#Xh znJ6XFFl2vpWRBtja#PxtMDuo(go&+^Fwm?W57v3LG7T#U!>O*h3+feHqW3lQK%~SA zI}K;EDzED=E8S#^FH7J(qHY39qJCKV(s$41%%&*ExWv$nA2nkvVsFQc)^JHGe83$T zj-4F4YwP8_XkLu)4ie$Xj(4F~V3_;7eIE#K9i4w=`MR<6GjbuiiN`iX?d+Vmmn%D0 z+}REolEtcDf`L5c)~3jEo@D<*XBfn>yV7?ZPa89dCsec(G1{OgKpk|hO=E75oQhpj zG0P30%|InVRtz=4!FLV;D=Dm8(@=%qVsMfdaCd}FDb8}VI1w_9crk{WFM~ay z29E5!y|wSeZk>88odNj%cAw93fx;4vXtBK`?nT~rD zN!US`YzmWUjz9u|E;c+oKM_GZG%l(+G+ck!&$6l7i96LxB{;azW~rx3JET~H_C{Bx z+}H&iS?%g#W>HLjYhkk-G@03?tvCrm+q4pVIzQvih7%ReVX&nhZN9o5iyBzH5{MMJ zZ_5fg5`|XoSG`&<^A~m#U;xT?lL5v+S=mpbfMr@>S^O%ccg4X>B1s$nFpG&09fN;; zQU&G|q$>&kioxr$YPgrcAITD-40e^xzPlRrW%Fe(r_+E8VaO9WHU+o;eg89e*b5ff zwu`1&|8#WJN%s?qbHsCKv;8<aazkkY zF>V(oTku4t3x;*F0+3vTK-MH4e&~Og9-1Ce8jM5>y(M!Z6eEqeA=ESrhU#$>-vNO| zo;Qfbbm!MtA%x#<|XmNx6S%ke_tx z&9u&09zJ5J_B2GZJx}169EhE%MQBZreQinZ4XC3V{|G5=EVW-{C_&yE5P3x54V=VQ zIUbxMwshdd?oz`cgh1^ls@6D;)Bu<+9&!cB4KL3QeWw=x7Y6Y@aQMNVN58 z^Jh-n9{9{gzB}LG2OfJhni@NFJVHSKqXc8xX4uioy5!!}QsGe4Gai2#i}&t=u5ppq zWmZ~k+i|UbulXn##Wrao>h71xM)`Cnb9hO#%^Y45GAjV?XLWR=y3LO(`kM_`w%eVk z(HR1Oyxp<4v)w17=SZ6aD1~iv!2ZbU2HsyBOv^#(PJGtSO-=jsF0G_rrA7=B+JwGDhBmC~~?k8<}IN2wTk|GXM zI@(LT-U~l&kE+$CZYH|O4i)4eIC!bh#cdEL?#1?kfy2{EuU48e=79vMv2KFR>97(L z!8tz&9UoieVI>CPf#-=RN*zz6N$OO&Gw+pNhSbKP_Zft-2tt3qWx#|LVn36OqeVflJmp8=+d%Dj6Fg~ekm+DeD14Q)_qx9r zL&>y1pB^}$Cy})KAhS5E60Do-UF2Tp zcRScb=kKS6Ul4zZ03`ll(J`d|%;O!gH*(cXA4nVg-IS8%%~z4IDodp&$OZz!}niX5c(mSQ|L$NZ|O1NIbs{oF=DF z8ariV@I>Q!5Mz*CewcBG^q*2c`Nd>#xUhckl0e8ved`J1b&jVP-1Ahs0tlbBq4TNMxE!k& z(#=OImT;^=f2GOxYBN%ERYC?`@pI&3IUorMQK@vK+#0~GbH=jb6&Z)GKU`eAIpKa& z9VYIkwupb0KDaB1g8`nYTT)mxnPRPizy-G#-E&M5-Y>1&dbRa3WI@%-op=fiM6#PV zM=ycLVBjF`3GD@~&^$wxM`&A(XFTM(5F&E{6F}?DbZIi~<2Qz8TQVb)K+|01Ezfz2 zsktf2Vxl(<$YJnfLvIIwMmLd>(=&^iy4OW{OP2teKxMywN31;2g)pG%9+j@KKec74 zI?pzT3hz!a6=&&z0pR5n-z`{8ECKTUa&xs{0C><+&*5rHS41M3(JK%QjOAqPlYuo5 zt>q5WB#B`Do=Wy=OJ&eVZi)LL60aG$wl!FK0EjFV>QS*1P&Y+wu0Rt^6@Kb|q<0-e z(A&m@5wd+y!%@4HeYnwC-uB_c zciUF;!->zH#|~g=?iq_yZ>F!{6<=6K1cXnWlHEfrzs+}-?k?+&{YU{h1!?pxKT^2=;{-2-udeSq%8P{G zUjLLI!Ur+}!}Wj20cIC!SE~O57c#DsmvKr46qi;i1{DG{F_*yz0V#i-T3K`Cwh?~U zubA2wkE&KQK^!FPCwUJ?j=fGKC8?C-2Wm)ZSj%HPZ7XJ3D`Vr2tsBD1=^U&Ub%*<=-)C{W6-ZnM=d>vw;<{KxHw>+_39 zhie_2UuYAqzq|VMo+y8o9`Ans^zrKZe_dam$7+3h_4B9mUvGc-`eUL-+(i-xkyJ3Z zV+^bWjO-t7z;rorkc5fvuY-tZKc393;p5ehAE@>H_2o}LU0x&0vk$jtznuwS60StQ zL7fD~$knDg`{mbgmBF_kR$(CF)0692t(2C5RubCf>gMd9XW@TXXwz+laUeACmSK=s zmfB@m!oI9rf6kvI&b|j>Odc|Jg@vZyM~_m7g#(ssp|s` z$;!Ot?KStf$kl&^kP^fop&4vVa+q@%XyKnZ?pkdHhkT{a-w90>RZz5dZ`mTdGzG{i`{)V2T z8J-H%CdZ;-(jAY-tpp3Ygv$l%v8U-0*n46luS*r21FTZJN$}|wf{m1)Zl_Wxkl&6d zW&W6#)Fed!Q=S+JXoa+X29!h=z+v7mFUAV#yP|NB>r>Hf!D?t3^mr`tr*j*jzGzV5 zt9v3ByvTo|ovq#vziYZJ>1qTQ#$O|(X;36q!`80OYw+vQE&5o(Rl`U&)mnU1&l*Uz>3FuYG^Ze z2UZwf4YbCqfmf6YK2v%)p%S5A0lYM1jI429E$M$qNcYoj#K4`3U(TS1sP@OYDr}&l zQ{5hhCfh4g+kw$mI}$Q$voI2nD#8O-f5c9%Ps}uHPlGCXNs;(am57@LE;cxdjPa z(8ZFM<5fC`^E`8MuohMgc7Iv%khiP^;7ijb1-NpevtIS>Nd7>4-Z8ak7u3XxK*@M~ z^2O!?S8=Q)$^@eQqH zwrQB^fj14-`3nOB%V&__c*grF135r-Ur)Gb~ zvCF@7OZvqtJ6cv`Bv~0eQ+jYHc5UjvVN1Y}s_gn^=iRn}!%6R`33iu1l|`My?os51 zF%q)br2Bo5KICJj-CIf4q4utG!^fX7k3 z-IWDf)?w$}cE`L%?hW2>ukA~wCoO+?hAr$br*`jYknXHcTJwVS0d}`yW_{U`hgKrc z+WxWe0T_smjPE6GDp4cbQ&O_+;i_G*r!~9xk!uAi*&gkhH%AJMl=OkQjjV}HPJ+qJ z9J%*yGSp5~XnDf2<%J#+L1UYLNwa)YRL&Xz$G)WG*xA|Mcr+~!8Z;m1wt|01!xk4Z zsKMvR;&6O3;bZ>1#i1j=pCADbM31cv0PJ9GsLgC`2vEt|7;2EIp_&h-)^kKtYZsu# z$j+vEEEq(bTV&zGn~4XcFU?Vk0Lq@x2UZ3{%CMl6Iu4|frv(`7s$SFaa7cDvF__5o zd0%gnhHR3z)r$z}MO7U@=%s(tLe%qZQRV}r4WpUz68Mv`Tu7jh>O`|(^A^lBIxR+O z*n~B&N+hwTS-l2a-gkAd4%g`tk{FZfT}Q10!Xs)r8-OR}ao9=^T~npbOiD^E(c&Rh z!2LFdjwKc*fep=6V&Go${Uh2K#Ur!6r`TL^fN>7oc6_Afz6hh!?d0W z#JGo|b`ir^-ZL~7JOWUAl~|}Nj5OmlCmBlf8VZj?bCQz`13P~d5T2Sti7SL zLyZoRXin7d9LhS5N>LR0^07$-gU{3`oBAQ&e@l4Up$Z_5rtydKOdPz&1aX8R=={uL zQ0u_Y+%_fKA#l4=g8HuT&gD2lK&I>rSKO?3rNyP6f zAkcB-1vi>zEDKINh4RO@0tci5HB&*-@kmDOnp|^3Iu(COfz>LarSy0MCs$_|ch7I= zozfTRNHx;Pmz1$N@OCv8WRg9C=n-u#RU@NB1xctU<-dhpV~sGBGaEVUQO5T4ApXAGMViG?raG%y~!FUAT+p1~0ZOI#iUKGDU6QVd?ir+S2)3cL+qO@9H zbwu_H!PKyHxvEWi{0{;1cjm*@KAQ}z8yc9f#Gpau2Msnqn@nZr@(4N!__WE>mRV8k z875jtV>nIXpc;+~`1l5rddl~hlgLP|D=@XH_?>^ky$HS2w15;Vmy- zBGSwv^rqzaG$_ZUuZ+M~%AsGZ4KUx0yFHm!Ref6jInQ@9&w2Ik^3$hL3f1`AfcKwn zZa%!5l^uMgz%xYgEENX+v(4#T(xto~vw0hzniP%VJ)Z1>d4vG$<3AtpNA*k>wSB@T z^*Dbxjza&Pf9HYj{2WZ6;7KOW!GB1udIPVTN3vXy75a8#r=F!x2afMLA{E41opjfM zmw2%mRW}G`E(=atb8;>gMz5AX6LDfLrU0h*>1n|TnJxqnG>;@qvX~?UNucB5G6zG% z!o_gxZVb88H+Y>R24wFsIU+Qg(NhY>_+5Yc*`>)!_kK_UDicP{%h_o*GpQ=A!3AUs z6}vm~N8>66sO!F)F}VK7b_Z(~Gd5WK@ABFO#<|%qmgtyy(avuBAmM3?J741K3xCCz zeq9|FY^Q*W50%FZD9P=}UyUx_U$&sKEQp3KFox^Pm+$KJWj3v-O_8mW~Tk&42x!>Az_T|$&gKl(QA+`vielWro!IpkAdd++JE9M3|Mv& z|221km-hu<%-`qTW}COH|1ti)pq9dq7!}h+)Za4$IV(8UcMev-$5GKk$YDI=Kj@I| z@-GgTdNYBqJ{Gt1>MGaJ)ra+gQ8a%6?{Wm*<+|PFn*v41UO1fBXO>P2GOArXrTbkuZ5i?ozpoln5`Duq+xpD-dnjTi}n zRND!Hvz?F&-tJ&y&=xZdMa9f*3|JyT zqYMKl4ae^aQ$T4C11!=M=#YO*feuN8g@H5)bV%5y49?P$v1P_xDH*^|EG0-PGWtXj zUz$-~ON*YCoJNiT#3ngLIjql_9a4*XdbSOJAE9OV zk$!YMBmGDsUr;S6Lsx-6{fCBR(0Nxr8J(~VXK6i`Rur4N5{wd5Z})48Q+A+?erp0M zXGP!Q8@pvCm<?ndjkBXXSkd5D3;NzVIi4AKQ&?Mv-Sd8|!__LVffF57Yl} zxAgy>kV&8b4gZP%_m2PD^SmMxNX2(cqyHMg#{{6~!o-l_32Ekw`aekV)XbN0N(K~{ z#5V>O0Wz17aRMrTTT64}HWI%3SLi5LSqL5k2~Y%_M6(wTDR#v_x6VP^6Zm z#^Y@A-?tkLzGPbCSw<&9Akf|DuU`NmK6{w)+4b3XcW2*RSuwNBhBBPpt!I&7feL0( zC|MBL+1+aPVgBZCmp|RTy*Xb<&F7k(FLcP~-@SYPJ@r_Bdc67Z{nfkcpKmVDqhNmb z?#K7%zux`*n=2Fas0$M@sTA;bgn^WRneD?(7>W}y!)-HOGwHcMXXa$MdiT$_)VjX8 z{Nabo8zg!5_U`OIX99@unP?ZN4GTjxTW-%j{K{u5c=z`iXUdw{qZ_%M1zIs3ps?BO z_UvD0ysxx>!Lk~fiZf%q((X11ND``fo_wyURj1p;D@FBYhl)uaHEYb{ZL%6sol-0m zt>(&eGvDVG(T&%2Qu<~-!T^>UML{z)&C@!Kv&F~cX@rgDOg1Bna)g)=%-UzfR@Dft zAYg*G)M_VlRX2hzH-#5^6Z?hSCyAHe_E}mm8e_YEr3*7pw#BD$HHDzemgm|HF19#u zwoq0xWyEZOYtY(@wHd=iXcmc}6CLDUkjP^T4FwBz%e1QFI@u;UtW;P&|AlLgD-~AE zmzy|$0J+_Zx}aw~s^yR=H6WQTUw|yoEaYDVO-AB?+9+l!0%EPML3VKg*l_9eL~AHY zf}q-e75OU7A7~XITScwMG|Ncg(ikSpP~Z3H7D^6agbvYR*u9PO_<_bq&jeem zxQ_4RDnaR#26OUMZm!^$n z%+Yhjyh_SXN$K1e)VfKR8|q&b^vsKz8v81tL7&p(u|o9102Y~6^qN>vJN4vx5z+R4 zO;v)eMo}9$y@D2yAjlfoeVUJj2#85ch^Uu@R1nPny-EC9oMgm0CN28#p)7>=V5plE zCxOxLohd4g){yvF?uEB8Xx;ms7$2yzU0gz>pw7zII%}m%0^WieU+&XlBFfvOO zg+3BQn&KJu^n4$FIp2rZKF7dv0^YsqM)Y#I7yBR=?&B;&E74#jOUP){L>t0?z^HUESDgB) z1fs&KLTi(Hep_I)L1>?@oDETb7kp%^7= zeF6+t%$*AdqS?)*zbAgw*ltpQl5M09cYq!NgBz!4=t1M#76{s5wjcOAXH)OU2 z){WSW&WEwmDB4+nV;^}kH@*PJE(ZZOuFQn$)4wkK%l`6sQ;PQq4R#3lW=B#ilgbk& z22sDlb_@5bIjjvwk_qe;O{+bZnO>+7hKT};JgFO*IqX!HWT6nTt*dXS_#^>&8-cLx zA`mw2eFyBi$}(N865mfr9|^tSB}y`GWM66&df}Oj?1&+MWpXie5`-`0uFybEag#qe zltSS!D6Ju_+{eq07%MD=Lv5Ro1cksSw`sy=UX1COYZgfJDkZ}{yB$c88mQiTM(bjq zuP$gW&~k6h$VWx%cbNF9qGy~{1+^f3@6wFQN!tsb*^{@MP%y*Iq2aVKK@B~|bdLAR z=;%inPzsBGv~@$EFan)h446#XLFn5R86-;BP2h?mGr#Q)Gw|ni8E?0-%hqSWN8^zg zKCXv{Y@uO6pl5;POoACKw`bTNNXbHAE15NRRwlD`?^JC_ZM^q618$iNWW#_63miR> zzCY1BpdW~kg;ujz8VGO8Uyi4MNslKNoSvD={BvYAo+Uh zjI)OVwuhVTVEUoS2w|AgQU4(3At}EYC_jvuA67%**HZeGLc+K7V2n}Y&sT@y5b9DM zoz9qs^d}nARAG;VV$eqjdiKY4pBK2hdnrAJP}-^!rbivX)0_^IA^nM%OcnMBCOTq& zk@6dmU0g!RzgSf-f#Pb&6M_QM0$AF~KpE1X2+CApkAM<{EQ-PbD7&)Q#Sc#3i&c`v zqcy%zU?|<$>0b|!avP45;WHpV5uS;n9zh4c;)rN~PMJKUu%-GUJh+uVAv}_HA1A|S zNPi+gQ-wW(kPM*6^d}s<{e6~Jn?)6WL$x{zi-8@2Jz-Q6v;#RADnt4cQJE_25mba? z9+MLG4P|l!k`pHyX{m@k6(k4rr$I7V*dvf|cn1EsqDmj~xZamZ1>tNBkIi@mEt%}j zk^XvU3>AqdgJwv7A~aKleHj{Q1yGaEpm86m(s8d5JYw3O5SxgK#gkz(q(2dVo2kMc z!Nv&2rFs#Y1)cnjLKJ8w_326g8B*zZGKhxsCqgt;*dq`{obk}_HQhe*bp^CkU^FN6 zAWgO7$>15%p9s%XVV|EOwPIQ(xZidD`FiC^W~80+UFqOSce)23$r=ekb5?)NH?r>& z{49ze3EkIO=<#<%%>3sn#(8*uWtPv!zMJyd0>Au+y1PU^`W;Y&hj$kG-+P9iVqquP z#hKpaWOtu~WKH~CjhG((dnWgS<0TJ>ZS5rx&&sv&c=sQdw?DZvzTvf4bhgUhl5&?O z^zdriC0?^NbDWK>2!yGVa+{Jg@McpyQiCquzz9bgI<`f7MM}}VRX?SFxzQW>d&b5| zPS=M`^O+moe*gaV_U#)+-B%6SyXRxX;&8yWxU(qZ6$Y4zBw87Y}{=jc+!1SoKG0x zHTuF|#Oz6Mb94LddQ5gq{~en2xbpDlNptVfvFTmjq2X(P@q2@}2Ky(qWB;%a3Y^u3 zU-J)(=l`sb790``M#zwJ6#+Mwp)3g~ zmv2M{3j#GTm(igCDSy>iTZ>#b41S+q;m7u&K9(#?HY|Z$*tXC@Nb=Bj$wMwf2~B6p zULgJV{p9H;nT$icJDWmZW_)x$OS0}hOqD_kOqGME|L4%y|0Phaz9_*Tu)u3>ftv-k z0z#3Hnfy%)BED!8is%Xp4yE;1HE4FetpwX)EYvQkNvJN0Q-2E0`l}i!IeShVh+RCV zj1`o^$~EG;!U`&7>og4{)NzKDb{e>p)M*W?;xtNFHK!2;Qt33v(AsH`VcAt7$S^a= zAU`&D8e~*;tq3w2bsA)}(rK_rN={>#F^SXMD5)RK8PM+h&8yZ6@6GtpF2mK;=I6-xvD|zG1_pm&g`b)UGF*7Iz5_pv`wqxx z+IO^&6AsO=O-|}!C524M#R8kD_%Xyi?Lh!_Lzb={e3*;4sbI}q`f&wZ)LqHKAzOE4 z0l(H=S+KWtE?_FjPsQ+#By(wqCZTTdQn1p#LxaF4kbePN3%h=>qvYggEETKLh2drH z!jys(Hyjt>v^WkyA?Cpd%LS=!5LSq&-5UxKjS;g97t78nkX_s=8If61>7*9m71td~ z6cVQyf}A@OlTdQc5AzJ@p@c&r_FO3gI~9fq0~f7MtKhN=IWQ>J9fTAtyO2Y?m#WSW z=0YO541f5wv>px+q^XAkSZR_@L!PBZtCN$}@+h1kd<)Y0NmzdQ^*1DyMS`V7EmrK_ zT)ln!e0A^M7tlpxLtsv#rNjoqO`>y&3F$eBW{Gh5B$#r9C1%lyBdW?i`gFUw3@0aH zIRzgg+HE`al6bvF@e*Xp?tzdH3ddbP37+!xCV$kH9S+Qw$LHHuPuG{>EG&;7ordMv z`rT!CFZbEsf35N2#qaCY@(?<#HG|@*^5gRGjQWGC^$G{V5D<|D#WWhD5W{SWxdDYOk^ptT z+v#aozTZCE2H5$Vw-=Y2t3O|^&*OJQEq`YE)=l)0AAD4pj@f$O4$KWjI8E9a9V{kklVIbRX0Zwf=1B)) z_JFr1eS%pi`Xo39<{EusnFEtWZj(OoG|73=C#Xv?+oVr0#Ydku=fIYu%xa+=F@G-| zQ3$cd{36#46mynXdH;l=skOuAaqH^I<)C^p=VN<>&-HUXVu0QaBj#dCokiyarP?eS z1+~d6IMvuHPolNem^ja(tHq?Vnkc#ljb^_wS_^uM&Z3J%s`lpNK+Y_t>;-0js{iH4)l1$MsKZlc6;Fa(Lr4MG3SEGli_0z2LXe5WqJ+~;3? zRM7)*`6t|667DpLHdm~CX&Oa=<3l&po7DS#^z|*6qt$6NTlD+UEN^s&;eQ}FM58;@ z;UqXjdwWQ;dgo^7JhOUdTn~m#Z3sqpNW;Q8L=z+5@>iNuK3nu|omt9kU$B54;N_VT>=sRm=@I4a- zy0IoFjV;f3vu1ilJet!#rt=!UjO*FkC)3haMrKizgzyk{`vWo-?C`tjrC+qah=QRKzd`r?lZAB1=dzu#b(xKX4R`R?M^ z-@Qcvb3ZRUSHsi;aqbpDsNFEoFs>Fi7k|C*#zvceZp({ZKLpv@bCXo8c5NP8&?QKm z?6C9`$M8$tbUbLcLNA1C*VK1B{8v+(_8E^Kwq?HM;m%~Wi0rnRhyhlSXDnrd&(!&3 z9+$q;^2^>F2H7IHtSTPe3gyn!=8$!u5tt43y7GND4MX0Kxi|H4rG4#`8+-I+UFS$O-7c-X|vDJF#INx z`9-VAc|uPO5c(d;KCeV(s4c=24oD6HduA|nVf#RZH`sJ<6F~Tn}QD?%m9c3 zx{vO_HJ!SO96GnAs+xQ9WT15Ajx|!DQ?^XYo8A7{5v0J|rV&=T$-wx@%FFV+A(@2; ziP((zq)os;m_w&3HwKmya$)c))pnJCvOf9j`ts(((pRbD&iUM$5W@3ELba!yUG~W2 zTbbT9MTzT>!vn*u%rk)DXuW>Z@*LcD-x0n&TWX)(Wqd=BwJ=roh>(g{P}a;T`$u~s z4{jfyECAuIW4`;WDpzw`DP#qeC})$El{gpp@+$CR=kHr1ljt*v277{R#w!N8Dz0}EX$Ae5c3Sc^TIx#cSI-6-(w6~?Ps%sG*UfErmY0WT13pXI55NS$nD0ys7=G-U9T+Ijs*2Gcy(u9dshPKc{deU(FAJZr z31FfjCmEy#q7jN6eGv>_$okrU5m-trPQo1BR?>oA+45Z}G3KeT&{$_>Jz#L^HY4=O z_%U)p^msVn;#ip(c>e`dT@4tXScr$gZ(ivAa&rw29|_6C`&;H=_5V1QeRcuFy5VQD z$I~SDhqtl@jqp;UbDGB|7QG%8P3SK?) z8W$DZ#W5i)4#03NkH~5`c)=tPU)rhSpU1W{GEaDePuLHS%G%QKnjJZlNd>$t3qJ+r za?`e~jN%JFb4n9Hw3n8D%!AQq41F4yvtnVrj z0jOvJP(Bk(jV-2sCMN(0Gsjk#KxB2-9AJSRzh1p~ISaBkmmgFZ-TZV3zi4NTnHC+t zws8qkEwM9@xE8|^)c`PetSf*l4oN_^Sp<~;npC`GMu526rj@VrW-qcS57C}oR;5FB z3sg$naBw>tOE-XH5(~@vv_5J$W6Eve#AsscuQPrGnM!)I@BIr1B{ZSWTDny4+AOYk? z$x|}CMH(Yau>{+HU@I%@$B9Z8LF~DKN?7-C117}OkUAA^sCz7azg&T1uHjcXSIq6J zV3B||B25l|1^kKj0jLneCkcFnacQ%}YlhCa((xz>z}X)CV!R{B_{bCaHmmOpPf$1m z+UD3D4?;Vb%4F!VeuzjL!IfCk&BMu@3n={NVA_6VD~DwZFJtcMg?wB>sKkqRUWbp1 zwkFSyhXZz|oPPd+GuP0wLTn7ZTl$p9fH4X)n-v0o+Q1hN(m+^3bQm`gZ23q{wU|0$ z)Kc4;96$SX;s;`(x!nQE()K;<0UXTc$Z2nyit;!y)t7gdN3AuL44oap zN6Kh`)9sOJ%5*R~pI6|eaHV{-4>RuJV71*e<}~+f7`F>_QWS}@XGchdnOlAnL zV2}xaD=qeUkKK@tQ~ty`%}JbWxkaR0e+b2_RJWzNJf_}UJ+n>_ zy7362#zAZtm;MLHaSmW8B8bxO0kAK(KXsJ2ftL0s_4vGCwkPDr zfU)s+WF2W5pY>)~JmCU7r`-an7qu5kLlP)|tvPTC@7WR%L>)T&K{J^;ZI{hf+|<2_ zzglraN}_^E#m&vHGeyw&w@pCswllpJ?9mf1m?}>Y`3p4Dr-pcsQWwC1apuX*BzxdTKRl` zQ1Il<6evum(hER(#t*9FaX^_34mh*H5djlChc>k^P$yVPGCY!^1|?{{M6Sias>m!) zYd`Js+P2-ai%^^fh#srW=d$g_onEXCa5(CzAzNLv?w1n{DET0;>;EdzPysM#^)y_> z2rcUCnFhF)o5aEYH`Bnnn@xwUo<=%sii_V?2a^@TT1vxee`q)kLD@ZJ=jsLqlo=R#X^;CodJ(qI1w_s+8h5FZ zAxFX&o7>>Hv@x)j&}MSZdC8D9U`0AgBW*K}OEOVdmw# zo9nB8@SMcFQOSiI)Aks3uES)1Sl6a0B%zeV(&yJLCDBO05>iK=H+R2VjHN}3b(H(G z>FoX!H-sxlALAcm-)u8k@Dh<8|FUR19*zIK!FPs!81xw5$~y%I7)Y1W2%X|2JlWtd zkW?B*6NBrJ6`l$kiXvHiyq~$hrhN@*R2qHHU(@GKW@Q1KY6N7o%;+x^dlynLI7UB; zAzOz9PnG&N(?mXqm%(ZV6qmkL1{9ayB?2sewOU`3+cpk=-%sJm%V}p~RwPAAx;}05 zcbg{7?fM>W(mu$xyw*gPww9dDrgPu@00NXHTS=Yn?GtH`1VP|O5P%#`ZYJU6)!9$8 zvmaija*~SFDm$62Cb1NejwZ2HB8t+-J&p*6Oq8@jd#6oEedppL!O2W#naSMjx#3Bh( zKi>$&yB}}nWO#Y`%M0qgy1ID#_Tmazp1qiz{c$FNNjQ<+0Zk&T)sw~M?8EQjWC>$G zPeP&7WOCI>(VS6r_8f~GxxcYXch8TCKr z_s!GusScCiZe1+aMBQZf)S2hRVzJJun|z7tfiq2|6sa*Jc?}ZkNCz1;wE4|{uFSSX zm}gDlwy<$9-?c<+*LiPxUE*4 zN{Lu8DHytDY4Xq6=C;hAj-6ytSE!|%-PUnZ+Tx+Gd2{`SI`sykr4oh3yWuSr)Ig4sh?v^)nuF88@AoGbI&^OZUM5c{9(yQ=-y@0Mv72>cX!_5=Gc=c zxSLA(NqC3;>F#<6YQ=ks&8y+fPqolSO{}#dN+Z1aNY`mBz}rofNRxE3%_pngRUdL2 zryg%$j4;~x4T!PC*$?IK+{^)cok|gdYEIc;&nik1A(i<*$m$qwZzj~a@^4BsNx)V% z+Pg;!9ybA#4XoPnnS7Xk+As|MJk^L%Bus1{O~*s_57hC4Wj#U15^j8AVJ~bVR&w)k zpyOjctabD)Lt_L}CLFH_mc=$-wDtD>H0EWo%G&~*!b!7tRatC`mY$}+p1$|nCr#fr zS+maM81hsYB|n~uKCOk7@uQ({$o_%od$6qEfj(_T8uF|54eIG#H>+tzQu)%|; z+gd3BuItfkJ!JntTR&LV@36HpB8@CZT90IF`*tSPYyDQ5>qqei`C{2*80H;#zmvfM zVVs4K|FOU^WdA^LJXF@NKI}3AUNIrzzbC6MOhhan5``VKUrWmjqof2OdzYJw``z} zVWy-M5`M&#O9ch0R{4w*$JW`WoM>biAW<#|6tITQm-El*XPtzaC9jX)CK>g3l$b+?zv3#+d_&B%W1YF^7z#h>Y~A{&Jc* zl#P5@!gl9>h0WY4fs#>!Kt7j2Pv^GNxs6$`*6S74cX~bK>TD`aDl`a2s^IrzSHTHU zBx6`DCSuOe;Z!*C+@Qz$hF<1Lq&TiA^%G2KQ|E#B zX-_ZWv)(L0Bxf>|(3uR6F>bQhie!I-7NaJE8>2;k0-_Ia!+PnJ2)tfGk9Sus;11cv zCHrg_%-VBbN}!|kdCYksqa1nFyo$9RdaZ{YTu15<7kJTS6x6p^QONL$OSmcdqQ*UO zgk2z#oeT7y4u(~c`0GO|KNwpZzx4sxpl>)Q|z zB73#dDAD|&xt&>g&~@cLl*&s>ro-NWoN=()wYyHUjt$*Q6~eQr4t#BQ>JD%R1)X)~ z#+P?le_oSsKNSo9v8k84va2C&{fygeo3%WD1+?H+qb7=c98LI$9;;M^!X(MQEVPd{ z50t4>k;KMN#LYME(Vgm44Z{JQ>R?^p(MValXELSoXsQ^0@SAj=(xZR`*14msIrcN*=VfHwQHEP%8Jr|7x4ul z)qO-z{f`Ln%dlj<^L9tN+gH+I)scs1sj2msoRv}cSFY&CA3J)9yq+t6{)RgB-S9Eu z;Al4cK;_rvGBXO7;Jo-G#ju4<1yH53P4IQf9M-%0vg4hZ`%>&_b((fmfRVy_=Usvz|5? z+|T>N<%48{SND&0f$y$=0!Qi&cH=@f%rWVkD)e0F2W_@=_gHfRN|SQx@NJknQ5O6$ z&n>P1OP^dA?tW40-IfbUh!Z>~E>M9!xDj|-9h0WpZ^S4!g$pepd!x^R*aLsF#h?jO zpu!WKxX>GCt~sk)m4A<~%6s2w7I(y?JgVt0jZ|1vTnl`E!b<MV>KuxsF;&~IUG0&!(v6x2~4`Wy1slx zB+fxsnc8%YvI>J-9U8;5ECuX_T5d3h++{{SKb5cGtX!DenmPUlS8IRi_O#6}_&lCtBTp8wtj z7QC9apnPxX`QF*+$LZ+%*D>{C5=$n%>B0+r!s5saB_lx)d(*l1 zVf^aN@#XaN>S)4*KNjR@BBVe5@%-WhM`C|`yn27}`uyzItK*|E7*EgNUmX20{ptJH zQP84JqmVEj0B=heNKtsRe%Kef;)EpfqiVe%%yECn%*yck{Ou{W&aRH%y*s`#BuA&y z(WemwBECoK4T^|J$-UWT^x+TRo5S2so=-ST-Px5JFA$uFfJ1xjU5|bl`A%tmTX}yG zZ*R{J2^GMD`y`5;_KIYgs&bd>Vsfk2$vi3VtyC46o{CsNVqba_N=YmPl9;YE?y4pL zJv!d%Jjv!blP&P6QhZ)rU7w%fviyifV?E34(=Gqq7k;t3`BTqI94IqfoTM|oEt4#* z$-+yELYEbJN8rz-EOicKC|HD3TFHM%$8)_a{oBPpDT+Z&FFq%|Tg*>3}| zVLl01y~fDSP>MUPKNcuNPo-_MOa$mO2tbyYFcv;)mdQLVKI#`+=Q`OWYn9h}METnS z1cGo{iT?;5dW@ooFi`{lX6N+3$Q+-Oi|e0H|AXzWfeUL8zX45U5Zf6v0S$j83Ay;T zM&Lpa$+@#agk(1A^W?8A)swPZzf|vUlaFSHQ8+GPs}Hr#BNEl}_8Il)iy3InQ zoLOJ^4mz=61KP90#a7Rf-+iCyqLBa^k>QhUb{iZ82i+t^k=(2ux#{#RHo)>b_ePRh zSDC~RkRbYWwpf5w)4AcnV`qQ+z<11G#K>u^?T6#vRyxJOb*AP?y2PcbS%?Eh=(T%& zSG3kWL6$fc z{2`qQk03|UuEKJ4HzZa_VqUWZYjP$al-*c>apJUX3ayA<|o=iGnbT~e;_73Eya znA0>?$#Mm2?OeH1>5w)Vh#5zF;xPDN7Fq)IK?4$spsSFw ziUJKVq0$QcXnKBv4JXOW)uI6AO9|bLZ*GV$6vtt3o=GZVX z9U4~PBS=sM_Auo+&e}+feRZoKo;%fuF~A^MW3x`Gq91dS;!54Rm-OdtQe(#qEO37t z?9J3{rEQ>Q(gx~>cWT>DFv!2>#8?o_S-$u?5i;Gus?oIyoF!z3>dZmEkB z*B}}KYOUH@>eqpUI!v0@jhjm|>{rf!FDe(_oP@*Rtm})%;b#)g#rx^$zm3wM{B$UK zsJKvo7c_3ReJmcZYE2c+EM1I`2C5W8DGtw_HD~4e9!CJ*8LrysO_tv~Ku$QX5`|e+ zS;DkuDor!T2K|57gkS&&hJQ|E#Jc*yfMd&wmEI7OV~0Hxs8L8znCSuHCH7sGp|Kp! z`?ead^>8_5!J7eXaSC}+OQnRH!84vKun0Y;1pv8Kmo~C07Q6nVv3g>iVQr zVcLyu^K7e@%AjB}*K74IEV~vvxzsRS5`#IWaC;c@aRAyw=2(5;*vnlmWRmKvw+*%ro-`KKLJgD8)yl$m@6UM71Y&u2o73+MvNARA9A zFt?NLlX2+f(TB5$gkL54z&jBfb)n3RUDSUu#jS}toRLTdRjre%BM=deGv+`!pL~SF zhZx@%m~*a6*zpGU1l_Y-Z8j=L0D)=^hRoxvdwXdP*i#- z>Ze?Li}rnGhurY!00$8f3c7I|kTNyP4`zUuq&)@!l|;sLFBT0k!8jDBUqM=XnG1h= z_abxW5wve}nWQ8LS!30uHRgQ-vgREyOU&y-{{L_V_2Uj%5=?z#be=)Cb{aIc)7VC1 zn~l>Ljm^fqW81bG+qP|^u^K!1p7%Z9TIc-8kF00b+_SHZ*=zR9wU;=*?d%@*yvCv+ zhhaE;3uSCd?e;n`*gv)Y>+OpIMMdqa^8IXp$g#owuE^mt-;rnr%3e=@@0&>e_>Pbi zJ}rX}{s}R-NGQS=YXQ{60*eoyHAd<5#4s&@NFPV?_^R6a)BPGUg}wn76QfAyY>E3u-6D}ZP6am(#FmPmVs z@p3x0MusF)N1%r(i;vk>&40eT)Dnx!+)2tW@~>!s?-v#YsD{M^xx*os3Y%TVzS7&mXJ2^>0rDtsb`qY{|jH!BIn$yVvF8kJZ2*s-nY? zobB$;j;H(n=aJK=)0?Bm0#H*!pUVoU*}- z$k?~vJ38M^5S6frra-CIr!W2VmQL2Y3#Bh?j99zyzD9hhc^%*DU7Dl{&MV8FY!PGI zBWp?=M>uX&A7g%u*(cY&ZV|wZ4LemK?Wv`b*~(^Kxn*6>lM~(jm&{XjL`J_!@n6RSU+}&r&qhK3D0r`pi8Uc?@$}9X4Wk8`l4AnR zyIcKGErueTZ(-Fvqmp%Yck@Qo;(cgBuiWtG8Wu;XvBMFkN*FqlNRa@;tS*LoUxU*t zHMqZV&ZasVv+4of>sx>+OwGzB23ta5n$luMeg{Dm`qX}Y#qIiA>k8E$I%TaP4j+ zi5K6-=B+1+KUpji133Vb^u6B0q>b1>NJRZ{0#VN4nH-2WpA+#m7?Ln>j3*TD1*f@r zS>U`6eKPIu!#AC$v$yTc@w(CoRcU@rZi>BS+HbIg{q7;3&q92EXEiKMZDu|fJJJf< zgjr46QQVGWJP=6AxXE0$OsW1PU-OlRwv0MrsM5uZO10oP;D!NQIm)g|a|4<#&1)#F z=}NCGIZs)nf%$$~PPs$UD5ah_ueO-m*!P(&3jw@IYQ3v!y4Mk~w$Az`JO&~SmVVqu znHW*3mT7Ucc<^61^v$1q4qUkrX(Wi;!GyoSOm4LI6?lJQ4_FxqeMNaRzFzZfEDqyO zLtozqGSPXpRzd*LrrC7q0&TFX5b#=Auirzi^;P56X~<99Qg7$Bhb2@6FUE1IqN{%K zvTMoHN5L^Zq0>aujdUZd+^!`7ogjo)VlZ969#GmNm1XxxBn}wrJ-!nuU_s$8g_F+d z3ml>i*<{q2%%4zJmsx#2+~=2`8YF^A&vxA%fi3Y9{{jTCrS2|x_z7aYKP183D{5lE zV6&BI)}el|Tvd;VF}^O| zq!|d@H>t|w`OV@cU;DiL?)+zoFy4E)6w%j?99Tuib2+|Ur0(9St1e~)+r74Q$2@(> z_pR^@voRwsqM2fL{34%GzcU!Itk&>C3u(&opQ~NnsMm-*TkN3)uY(BEs&u@+Z70nU zCco)|o4gQr9l~)hJgmZ#E}7qx`k8e+Cwd*wbJL|ke|(U^toHnhQE1!su=J;iGnX&l zfWnUAD^hWzw`xckl%TC|{?snipeWU>K-5i!Z%AZ%4Qy_>rui9jfmYnJ=kD(FP0ByY z!r`r_GD}}OPnram#d5AK!IP5j=Y-_@hecbAomI|gPL-A0z1wA9Hqd(`trL2EOk7(4 zJYy35wJbw?`W&?zTX=QSNg;)jid>{>yv#Kf#Ev=@Ih1Eb_MO(W9nnF_mI&|)l|_95 z*>{6Vi~foRM9%8UL};6$H&h$x!-vL2x*VhwnO>O2i*kgD=`pr0gtO%G^iazz1vozO z=R2q;LW{i&RemR}Ab&)zSHv34MM7I3@HCbJCbsYJ0pX-oTXyZ3Wzr0ni_B@IubtMK z|JzN#zr<&isDUZ8-+b}OUPbr$2@~!1p$-vaye_!Qt0{Sk(VSCSPL~EDsXyN0*R+m-_m0$w zF#b(}>dSBo`Es^1#@kUox(G|@7y%y=R3uVz+^?1~-u>pf#XljD8dSSRsJaw_>mjqY zT#L~J`M=dX-^y3#96!eBHUNdTedSsED8&dQbWsL8o4kplCidH==#;vzbMSZk`AXP~ zjT5Zk$lejY{Y_@P7=?v{+R|SHWMuyTW){JSwC4C1|+#hm)A`J05ZP$v?XWw zob{T}jEZki7RBD54oOxstnBQVWHRqG9R3`d)wKjyNSr9gpnBC&0SR?3towzt09YHOg*F!{RCS zevj*i*iJ)$#C$FE$)i^XTpqPC$F74+>#En(sVgm1wAS{)q!@#WB*LwKI) zn8wYB8Vs1O$%fh7-o<{BOJnFNFr&qD07DXX)jv`~C{Z!;QUle@A%8`?)&25CSVFw2 zL)*-RXB=c7hUZ<{y~OeC@2c&Fxu~&#LELcv2K|jPWGSzr+X3fk?o{Nd$5|BAPH^Mv zolrh|QTCyt^e;!G(0Kd9ME5oL!Vtp_m?|(CfaF1DE*8V{N*gVya`|JzVk=XC$TfX8 ztDI~dDW$I;@M)cvRK6ML@J*H~k5${+ku<_`M1Vim4Mll< z!Me(uuGYyb_w0*PufiW)V|R?rh11^jIi*oVE7Zi5grMw5LeZu$PMfgs>E5sY1G|xZ z6H7b}0t70=xw%LuQ8S7QLdx5MneFr(MRMw5kB(?ZQizP+z|2S<KW zEW7VD+=FWJ59nAY3osK7m`w5m8SQ=nc=hy!vr6oHX34AIfPslefiA~a{ z^828U&Ygv6NMy4tN7PD~G`w9K-jCWSx%A3~5O@+Et=AA1U>myUcCNMXv3;{4Fp|~s zUG04C58p|Y{L!RMoZK;KBF)hxWt0cp(R3LLn(MCsuaC2Xh=_S^OgGAz6CEkO*UNL@ z4SGI4b^NhAvzyQJ{xRaHBz&52+J{@v+x2R0Xu~X$V4IbC#%cJ4UJ2r*Q$`;>gu0G zd+`ZpHk@%@kJJ&@VJ7DacqR34ylDo|y-FJ{8$i@KU^c-@nHrVv`#(c9vp3aB93@WZ zH?!m2l23pUYo)>@n`(|#(oaOAwi%TILl+klo~47?l?^??znrTt-&)K@4IWop-SY{) z611x}H8@R=^RQmrJ8NacStvD3EIHnCWo@#F1nlWIIf^Kf2BytgsxL~kNBjnKOP<%> z64J+=yP7&bX_r?y51Yo8BPKSI&-SJ^7MGh&Ci+Z|W)!8%lLsvmuvdR?)oGflpH!7z zrKy@T8T(^|Ma61)|FoYhT;zfxo_hsa)GBM`T)^^;se7fZEVW=EzRGgPhc^Y3@l@8U ze$B^ellVC+9}8-KVJ?_z>a7jnOu`hfJ8;q2rfR|cvC%HN-{UDi7d_+s(K5nXU_0AW zxjv_>JM}GTVjm|gRpYKuoT>5_3apAopFB#HDw?wIfT)|)nq3|;Un3ERTK&;~|{aq^~d5P_>nd$luA-)gtmx!$Ma zr&s`=55q-umR{!veom0x_9#ow7DoF^YhE+`i?hYc);cuDNfU>w7R;u~FHQky22Va` z#{e@Cvo%#ey*67|Ju`^YLQ>(x%c$~=WA2|2cqVWxQ!#9o=G%u+3J{M@^|Sg!Q$63K z582|Rq*hhOY8m{`N5tTOeb7S?@cNhx(qDh?V|Bs)YW#*)k2jo1LV8P@1wt+ru(s6KhoeyLQD!dw5BLrN=?Ocac0#S6qPEh-U|O#L%!!j;%go zBnDa-L0cgt)JoLwfkoFQoTE$6xzEA7dG^w_pIP68>d^$NzjwNKTvhGp~T6JV~fxA4;=JxSR%+&W=goM%B9f`GfsVc-#R9-teDhyNj%#f- zXB8y;VgOs^5j)@uu#>^bF9^FS(0K5s;7orQetR|EMb${Fzu;l;i0LJpOvurR67sDy zz(dMo^cM8>G9eHOpn&V)(Z$gGS@D7ulqm;0hD0wdq<#AR9~-5eg>J_tu#zH`duVai0iw=u5V$;{ zgslwT>!;d3Cw9Jlr2klAdppuLn@ALctoKcI#&t8qlGiFnqCxR1WXj}eL*QH7rMqb9 zl^GGjaexo)wjKYL(d;cSX3Z+~NLyM#AZp&!If@+}a5hK9$io%kYef&PC7I$^;`}7T zYfB(Pf^^>sBse1kRbLm$UFq?8fGAODd2vy)86gzhI*PJtKI}_HVL5#@k=cS?k4Rd_ zqrZbcE(WEMbK;Zge$5UIOjs%lNM~dH-<5ESoY11->N`ts2A}9ola>>N5vrQ)@1Bi0 zoKkl<*zVY$j1c0 zGNr6nl+~SD$k}Q!xaq3h@52jclZQezlz=qhc$4hhM;l2KPkVWpF28bfjr=ucg=nw# z4`iR;s>x1RadQKsJ*_{6e2>$}JJxUS=20D24_f;{$)le-X@7a~i9r(hy8Qrnp<;2! zOy?AzM zC7jp?D~U%2&#AhKj>ricPNwI;)n}ISM0jIHq^?vA`3|eg1voq5x|Q{-uPH^CvWP1> za1G`}oLj1Ui-#l!aL*P(xypx-V$1wRzn&A)`|k zAwf%}_)!t>7B-&lP!=GTM1wH+uZczR3ID7SyrQ>9zYDwrQ6EiZfXj`I$KV3&|9CY&k- znS9ik_8M$Ciz-ay(;1J7Q6LFE^aj&02+DbFEo`nLu}I1ugen>DT~_wsj5ZQ{LV}lU z`=>D;C`5V`JHh8yQYuR$-flnn1#`prXZ;c25$8$xis8Z>CnyQeAx@SbHJ?Qy5pu&7 zG~<7@3r)yoDkZy=tsJU+c>At;W!aS$eP8(V)_>D45aAfkxkhp7Pq>-grJ&WqXV+SB zxoVqp_Lto(ox786;sPA3oY<@4dk}J|)eVTg%#S4K{U`}(=YXTM{cq;fvBPoT>7CPW z{T(`(pxy*dx|Zm{B^1q~DenU2w)O^$AiQ*K-kp;LkrY;(i?~7e#b@MYj0ciliJC-9 z)*%<{9`L~^DR3qCIb2x4V+c^RUzoY0$#-Y zv=&|o2QAk3%sa-9s;p~HAh66Zbev4_$dsz31Q_8pz7dQn|Bwreg;E3!sQS-<@SSE~Gn=-mDp|JoQ{MxYeA1mi!k_^)paGB-#8M4c9k}|g876#M$dyfVZ;X98P~}+@ zGgmaISY)<(mX7cIMf=-ImKMUwy)Eqb0o!T*sbM20nNmRsxVsHZ3&0ntfy=u8spfJe zIIN*VeCOm&$+HB#gu2k(PFM%goOXjK^j)(^{I`jR6yz=2r`Y6A^>XkPg0cR-_lvslu{6R9>MQNZgHMj)RV5t0-l(| z0;!OHoXPD^nNsAFsRWL}(Db12I>U<7u7=XfCxc)X@0v-0fogMZj6>0uqNv58+EKA) z=(Anl;TiZ>D%80DCWGC=&BnqTeU-ENmyVd7Vc7KnV58dn&RGGw`FxLr$C^Uklunau zDLdvo8f}U!oWUPjZEknnph72z>_p&Vz()E5JG_8@xY|rw5RJarlTu-<&=^ zcP_)RqEdH?+pV=}Y$4$6;=MkM#xik>y6dU;^_gdcI8tB}9m^;hh3Je<@KWByYH%uWKF1SIw}2)n~7x{et&TC7e@1qIU2+RHcN1xq$oN zEa^jqak&T4XsZiNqi9)KV>UI<`)0e#F0}Vg;9TgEdl(;dwY8ECsug2-@~&rsNlqFF zq{!jwB_No@5QkOT%}#$(qI4@prxg>Z<#C@_QDGbDgE>^4PSBoz3AHxt@QhjuxL9|^NQ&;}o}U~~|A z4w8Kdy&h7MT*-Svt5G$RA%il9z&aPO?(pIhC^XUZ#)m`cevQ#C3?#o;B5sj?b#H zF+N?wb8GxbxLOKhW;GozVmi?93PpdMRSFXaPBvYh%KhpErP@jtf9bwKXc=(J3Q4rD z!D0Mz1NA0tIF=RUD>~vg&UB*Y+Id0BLxcjdxcWxJNhA#tvh%toPG#m(vG?9_byC(Q zXtG$K#bAMEuVXGbKHrQ3#8o=zn&D9|JE{WH?ENRtL{|IAai|ytV$n-$3FUt-2csZS zHQ)Lf=v5QR*)L3=Im}_<^sYEx`<;tK-Ph1jpo#IEFA)tLnNuZw$OP2Z9EdYpv^)t} z2u0mXiNdhnmg!n}(T`atFRkh)9TeJ`#SD4r>O$@h_(3a!vn}=mFr2Nim+hpQYsFV{ zltg=d40S^(H&HGNPPD0$rvVPTdk~|(cxMIyEaaNo!6V@fI-7)vue+hoHQv^S|Gx3r z*IP2%&m7pSu?>d21*&BE7-vnNbv!%YjY!J5#SvSwIWU*C=srpBX0Irdr)KJUhF_qw%-hL$=T~CL@^Y zP%V+`(pg6%#$fk+Vz%rV@+j@yv}D>;p8s3lVs`9(+ohG<|2K9(R+#pu=>U30 zFErWkAapzgyGtg1wt1rdVXTUph3SgL(iueKb*``vjwBzDdrO@m0lg0zcLM?XdW?)> zUr_(FjVf0CYky}Js{*^u8Xpf11xO)iAce>jib#_Z$V_aPP3<>*7ckmJevNeCz+^0j z&Cr4-8ySQ~1DUyKY^;>Z0ZKy~d(tmLrZQ_c*RpGv?*=6JHLC`ia-|%yYri(=^Ez>- zmZdELW?im-LYiQ5_oe>uw@Nu>(-FUCL^m&fbXS&fO#9$Q6nNBWKFT=Vh1C0EGO3U(|izmb`DIZEz=jvimZOcJ%pInD&nW zG;LZavOy5!;2_8`io?>5UKoEka8~cT>oV+Bq)y-R{F>s>cKevY!U4V7gp-Jl0FcR{ zK_cPrLnPj_(XtB2Tg5{$yx-JVr1{)C9WY#jQAGeiVCzhW5ds-%AyKyEx z=GwUuT^1XOPZ3K1!N)bimWF@+hURO~!ai8mRPirExx=i3Q<;Xym zsEa^0#sw|WloD0NL-ba6Lm`E-|IG<0z1}OkYD}e#lP=+e5f1$^W{X_7lp|@4gV|ZV zM)#Cwo)T8VhLKQ~1LW`=|8e*{aEF&%yrW>Y6inCcmsWL5+*%OR39|?&+>n5N4@8M> zAxDn1wsU9tj^0?V>M6$m+vRu7WPd;$NW@W)h$PUgqH3+HAr?x0Z0(d{uW2Yc*;FuhYMZiaiwcbA+Mr=UO^RYMqW( zZe8w>M`96k{Lgb*x+&S+?<=SFMq{f59W~G1%rYP`C_rK)!bBA&B2g5?a5x71Q~xlo zpS~r|wK!9}gphf(4dmZ9q&hgOqfD&_S^cjs>8F6^Ng-vkA{Xpk57C%)5t?PF}*rNgV1dV3mU(S z^U-Y5la7#O2eABmB~}NaqrWd`DCm=dQ)E!B-1+^fl(m-md;>sXMX16-$=7f zdvHYw{9dW@Al%Oa&4bwtGN58JCMELRG)?-ol{W@;fM=SLw(7K@WmR=%Ef6dWAXpkw z)ft|QwAz*%bQj6iL1cq-+3lP{g_FQ-KrKkUtN*d!;g#}6w+VSqfY(jIFC#oB3(EjL zK)(UBRxQw4&Ep3CI^6grPiA$0wBy9+vOCldaE9>mq2Eq^yafA1hcfp!B&+yDoAb*~ zRnsZ4MoR$T3+R$%>JEz0R=5Inqlqe^=i2vzqP$~}a3;3Kj!r4AGGCEXzW9CR zNFl(0r%6!kh6FM=5&pwG*+NjPjzJ>>?hpPh)b!<>VgtW5yvK0}3&ztH)9qnQHVlQ3i+}q?o?SW{q~FILHe0nfcWT#V!QbC zC2hl^!Z*6gNE|-iyy7_at0&hVMG>}IG;)^Cbb!RU{wKGTX+6d_DO)3P*zYUGs#4As zLe^vdFgM7*dlk(njohh4c(A+vJf1O5?vt7|OjbLdv8AJR`bmaxCw*Z`o&O6j21;>B zLSLxhjt@&nvsx7DQf#akJTkGcDPM`2%^zwUE@>BX;?Ov_&&Y%;12tP*qM-@S0v}B$ zr4KMd;7zeKVlJh2%FL=vmfQtbS8@206L^sF3xH3`?_mgCTj{wxe7RUZD))T+AdtoH zoJlm2^lI&qVyfMr5U?*u-Qgi>DNaR!6R@8%S3igG>e|!^s;{rfB!fnapU`kdvh#|M zGns>KT^F}}MIHz_H>1{UNPJJn(qHl!LIaGq0Rtv+pH%?1%gw7d|KR%IVR8OmwFPE; zU-HPny~zi_6u^5uzv^B}b-RA`XygmrJ)2zQ{n68(3nGYlxApXXwgl0+aX#F>+-G1T zH(m7y;c9t=NywpxR|Tnd!GwuBgfflX=`t~Jb0{1vd88;JrIg_3AH;Y6 zpG>A@Kco4oienk*()l%XrKpwfV}(KB5i#N(Ms>_H(<(DjAIK+ZB}yOac@?=XeA(%c zV)>B&BRpusg|&rAulch1l=3e zDVwNc%o2Wk&oR&Jpehp%H(fb)WNOCN0L5?l^sl_QJSD6ytN7Vq zr+MHaTU&{_adCz14>WK(cB-~JjEkU4v1P(lL>`Y+?g{evCG^w&n~*Je0ZbnEzc4qe&zd3kXc%ndh#xUEbjdoiu-Q} z$_c#8Qb|X;16&vt#|?I-37^-F#YyWnV*5acg#Vmx{76`DLG7BZo^i;eHN5_+ z>3L&oJ*=&HHI$Y~$%xIMWMoS1Agjzucy-tfOsXnpRp27+Bsswq>K{ zYfsxUKGwZ@0J2_p#VaRg40*w~K@KynNcnS3c}^viCUSk#K+bTj1|~3mS?*9>UOP!?%RYCh--P4}SPx)=mtKG)cUWm=#AVM5vn(BG(LR#Am&C4C%S7~^gNnrG>Z z3E)AIFD#(kevJtRpfivJv!;M7xL^^wm=LABpCRc>jQZX)PyO}yj7N_GoiU@dbzZKe z>xN_!ON9|iR)M|yjAAbgiY7m+f(ah(eypre621-!i~%O{0Tvf2V@{JW*~W=miN>li zeRvRK@g=@Gf$U{N%y+W=Y)c4GM9caT4G;NvGTgqE$E@7$7oP9Y@uRMx!sF|_W^p*u z@3gOkA|oBokH>!{Xv0PF`DhCnz)E8k8=^t~hrwW(igc5U6IR^jPVDEF)d^II5PZ-9 znk5Tbn5Pv>L@Z5U#4L&pjD}89qAk{8v!-~7syY_+Qb#7!Uh5qQM-jldT(X>|e0+Xp z-A2_tB7Wz2m|!mI+&puIF%L@*Jx`0pcfHv_n&u}JHf=D)*<5o^tXu+lev-WJDsKMJ z2aV~Mm(j{umy!%MaS_Hx&bi9exDuH^LI+4-$wm0?TB$*HMEga2{m8RP=>9J)#Y0!g zw9FstpEnKnpC0z_Ic9*v>d_94_)mfXR2z5eincuz*i%Q{S}3sApnT^_Igj5rX3m>(wber1{dGZ z)9Dh@=IXBG++0JCSaVzGq)Wls`O#P9-oaZs!;=m%HpM8U&V`Ihr4r=ofswtDD!<`U z-w;0D7RbhRchxTuzqNV$SXp#;Vb0cT^VdvNlsQ4{8K}qB2Ak2#HIKO(g{MU6J^#k+ zrxyh}T>M?iGPjgkvZ{C|x8i7aH8_hC%g3X%@{Q7n)1vFDzQlu3@&Y-2eljdQb1{c| z72Nj_Qry#vQ&Ewhq+=5?vo6{wf%+vwN*m0cG|yc3jLRT2@OOK(dOHdq^{pJsRk_FF zBQ@zF1K`PBa9t7+ThKGtQu^>Bq^+V|_&nb`{Hh???n{+z{!8#|kjaUyOx{J-^E^Eh zy(b4N*U39N>b}E@D@OL^U6uESM`U_2?&wI*nl9oc8K?;0EtA*TmuP1t9UA=3j~s^HR5?_fVXb<+9{(DJ$<{27EtthFy<&=V`ES6XivH=WVAco)>q< zk<42CMWf>V&kV5%ESKANHhV^FP&5+9HVseKOPdsB1yoNPx%57dFsXE#I1t&@Kk3qM`9h^7Y`BiL37$z zVw)tJIB(o4eBP`Gp3ccM^n}^x{XQ(Pzu@6ZgHV6eA2}ozc6V)Va1u}C?1{`yNGl0n zRn*EAUHSZTRsyGLrK#R(jo`uRAjHoMq3cbHo6nDT_|2u;80>DHm!^?tYk@4qEhN~Q z8fm(YS)&+aBk1r&VWbG^c>0Es(HpnCRhob`>hRZ=M+9gCe218a{=~40cT{6|u;{DnJNpDB;jp#?3ukSKNqyPQ_;b&L5I& z_Wj<^BS_M;C|o=x*gHxEpi>S!{vVx)NsTtq*UHwTQV|K*+|X)v2wGOT%zE)rZ9x9{ z-~z=ZZohnIhkW#Rl;(#um$fMAsNgX%3nev`Q(v0}hal*cG(4Lhn7&m*ubgRy1egPAR-oj$c#`~ z_sMUo@|Vkhq#zi246~9^y5E#|g3RVpc(x6n8I?NUkoQ(oi->($>3}i)gb%ETr`rBw zgD@j^Dl^2h%rSvuHtCDv#wg(Gfydj*S%nvkZ1@A z11Jx`$8!jD(8hUH@8WhV&b(Nr2M%adbH~UTK0t{Um?lWxS+vvVErIaHDrLqw(lm8< zmi(=~2z-k=Y~U{l>c1eUN0cyZGMpy3V|jY3rsXU5y5{BLqQh3C#Z%g8w4JZ}3y*TW zs(Pe}F)8n_{}0+|VgQbN{x_5R)O*ao>1NxsR|@Sk@$^;E=U_QQY@FAfg2gspgo;4{ zL>9iH-pympqDJtyw`5iKHXImHRfbE&?h9QCA~h>)grE^<%Z-AKdVDO0nw`)t{@DzhCfcwYIOAP$ zR?aN{7Gs$3=Vcxrv`0FE;z4=Smu<3@QFG4Yym6havTE+$gwz}U4)gy&SMKX^-uV4LB~qt%k6Ex zEaTCCf5is<$`nrGv(x7S%{DKd40+Plt!&4id-8S;lK}r@G>ipi3=MM7=t3#|-;vo~ zDp4!a+=7A|ftepqAeBCYRC-P3v^HXaEXdVpbZaQUP}&9XlF^H8oZrU0H`gC-RS4RF z*br2#hqNbopRlsPkUI_>4u7tXL%usTNvl*QlfEvKkg+xmR$rXBLmg{g&pH?7));m8l= zzP&Eu?hPu49U48n1)qI5eZ{t7=JUL6E_v9zJ)`P=yZPIO<$is4xVH(#B4RH_Xs2jS zP7y&F5wWh$m7d=Hj&Cr4M&NBO&>GsJFZB=aoDX;z9<;-5QN@!8E8SjVnsz1sVe^xc zR2(xta4G(5AA^D?OzQoFoVL!KgZd=)4e__S02P{aK|PE5%GjP3naDI)Q!TN-dm*A( z{Bov6xRjy&_eiI?^cm839Ch(FdNWN_^=Hxu^|P@XIfU-@1lZY7*hT}sUuvtmY7NP? zo|u5CZ-nIdlcQ(@{A`}LsC*?uZ(rR07^t`abw(0`L$uGp`TU)+PBSja4$tz%TzcXH zmLL+7J~G{nOHJolNG(^Nze3+pYF<~XY|kJTBMLEAzcAHPEIdrV(CKf#)RzDP%E3|` zgE1}TrCZtb4++MvddPrqBYvAf7LBecu5%ru{P(8i6z)T(J8_7lFq#Ea1YJ8Kx;Yq)N znV{!e5~M}_;n#wJB;-O!xFyjrj8OX%MdhlcLGm-DMzm1W&HHEmkiHSfVnn;gtLHN( z9`XjvJoeYjk z5j3(4G8I!IGn{G(Xo{r;#NLMUP-t3Qm__us$Q$ZKepDJCCQqjeEQPMz23-o-pYb92 zbErNxke}0i$~XM> z7B&iG_Wbp{(uQhLoXMt9r3@}_+_-tN|# zZfatuphXHyO31_goo)C}v8n(hcp(%B{D`t!!ditN@9Ao1`8nT2aFyv-a3rNN{GdU_ zM`UAYxTXH+L@AWkY59BmPpCsKkri?#9EPg@97xv?Y6UW52CdEA2xJ}2cX)(aMPVNT zxw9o1ktA@Nz#CfIu?s|u$cOb-l@W5nDYG$us2WioeVp0 z7}FoV`X75^&^!nj6(z95IHK`Emf$dk2`~DVE(Z{c2vBFRvWcXtL@6(?3GDodrA8%` zC3jSlo8H&8(!Min7@E_#8S%`uu==m zuw|Uke7$~ivHShzyn$L<0P26yo0Gb2daPrt=gLxduq&Fi=}I+;F4e!2(td(000CGC z0#G#Or_@=~^9>C^r*>VJ);OTb{t0@Gv$Da1Lk9wq4g{oHpct%;CsU5vI6Y%|!`L`& zPGZ6M&9073Q}(pN3bBTXcv_bI*4#$VlefRo`^TNPeZK@D+j*R?!rblh&7&jB~QR`VLX^x{r&W_%hy5G63dZe`rSi@1}TjIG_Mvv{6J)TA%AFL_pW=@w1U-UgZtuM@h6=;YuEQj z7#)!mJw}BYP4C2CqzmP`w9>nQ)96dxGHiFHiif7)m?*pnX1Alf;T1jcAXLf5H$57ryh|A(yxWGYY#Ro@XydA0c zHFfkv6Riq+BM!L`17wGPD5c7bQ|4XIDvpa5P9}h$#B?6tdVBAqXfNU-5Qs8K27Z?; zc-1e;imo~H>QZGiWG!&b1vO+uQnVNqAwS~)9IO$>@(iSb=8-b#O(@vqi^~z{Iyk5^ zgCwiM+Wm5yb-N~7fx^KCLEa0D)L$gs6UBSIPtFGr&q4n8|Ex}7CRc;Ee;-JvW-i{Z zxNE0)H~Zl7OK`i(9_no1uv3-jz1=3c{?@?$8KYGf{1w6)lfBzLN!URRDS8TO zbV@Mck~OMy;O-r^g2tZ8)OzFB1qro&^ur~5DpUw$H3n1_+be28y$i=<&}FD_OZ7fR zdPHj#+Yl<;5NCGW4~QrJk_2F$Z_>?EhNnST6RBK#7#Ndd%He8tR?sOG0LYr`Cwkgs~=dUT4lKR(Je@d_tnamU z#*9Q%7l=iq)g#(9=y(10>pgOAmeXJ-(zVv#+bF*|? z%KLOqTbd|wNN*D!%n-;sMqokahE9)a^xHL4ak$pwtx4*Y()cn3Ai$UBz&d${l@^Wj z;j(Z%8-`0ak1ZSx5?u|VBQ(WQEbUhlM)ONm_Eb|+L%y}X!;Z-EzWp6HIZq29%TtCm zwK_A$>plx5=jrpaS=q*md2i5PzZx&Grfn9_?aZEAOkQslht~@B1>F4%tvirnR``7Y z!4He@5Sk6AgkaMJ&_CoVWUi<@3smsG);u_LPYc;82Ro1%oQ>$)f>hCligErA35Jvg zEfxP+41Txi7`~Vvv}bvO_N)UPoRTA_S5YdPD9n`S5=Ud3dF$k=qY^KMcMtAq>{gn6 zdGElAu7F`XI=n|1P0zTl?G2I%oaoJd)(1{kyh>g{k_BP}cwAN~IjBMH3<@0`P&qO4 z{DU!0(;4L?|Ah%%HXiQ3`6@Uo>;JTwKHmr2Y2ViU#E{dqXdwcTcY9!Cn8$)%~|E9&70T|tW?x+ z>g5z-IFIfsfJ0XP_DVv+OPe%9)59hgkHQO7oS}GikD9}(lfL}+5<3o4>74%b6YZ#= z`DO#nr$VD{esGw6JVF6KC_{aV{k#*=$lAFO9Lf_>gxfokp}(NNOnfXut|n?x)cz<` zQEn+YBEyO=nf~Z{bly9iKPIqAxQ(c>Mx~Wwsqtk2ByySJAWU?7v2QrVhoNyBcTYII zfGL?WpG&k5@i%Vp`Soxd2o}>D>>XT9qF@|GmOe0-D+7|Dy)c}w|I%xfMI*D)zWciJ zA&EwII%3(av2u+pb&)Z`NpN##5vV0Y!l=aI_(`j7pg=h1(y|yLX|PIa%u|DDpsSgp z2$tRhp%LWegMGsjeF*Zk_F2MH_5-P!Oj2oW60QCk_Z!t@Lu2nehV(Hl(Kx*Ir=hj= z%t|_?5BRkPgT=!l_l_|wJo-?BO0=a=!jVupl+)w(Tx?7JPBEz%$@_06Q?+c&DMl=} z6BT<>hSR$c&MQA&nCs0DGBqpwk=4~h_HQ2mydpOH;$KbsOx+*B5aP9&76CZIwt`)r zkB9%xS3d(nK)3X*^fALlu3$OFdQxu88OIN(k)#GL2gtE%jNy z(;W^B5w8zsrqaqW9738%*7LBiw*GXS<9((-gj|$|Usgptk65BUgye)69MpnXFJu@5 zGIs=ubc>Ldc?P4DAnKKM64>pr4H<4CGa~cj7JAAP?5}f=H^|jw!`Dbx#j|Ilr5i_B zwIKgsyQ{I_sUEs1I+fzJ&}lMF(QA)Luuz$I8keV{U(2h6a|;iXT#2XW@s*C%)y$UZ zz0N^1Fnu4^ws4H&))UE-wbb{zddGAGmR*}4FHXw{svS7eo(&e*g9X<%_C4x=92Xt5 z_v;b@@6%g!@(Z!y&o_)orCZqEXr`_0&i7}hZN29Gh@<6;r_;NWF8-?h#cd$#U;iXg zN&mHE#fg*WCyDWJ!B^3c04_=>4k>-QzBf;4%S6ZdG`CkM-!0u0b%DEV7bTix;ag;Q1z)wn=zX*7 z*aCy6DpW0Ts&)M@xYnp@xjCD~<4qfPor)gk%Uzu%BLm)j)#2RCpJp{j3-iVMKZs$1 zCE`;BP~dJq$05}@G3=8-Ouuu0-X{5$Os-YA{+;yZqTHT|f3O-I$|DqFwHmRW8;MOh zT2sgPadNv1r<1^fO`|Nv`)?0+?(pCfRq$(DSU+vK=={zqz3gxA|BtD64y@z} z+D2n+yzzz`o{f`@ZQHhOCnvUT+qSW>lZ|a}?Bt%``+oPk_ur}M?&<2PnwsgZ=W(f~ z+KfQ%ES6;38qU|MTn@Yd-_?|fp#dx_6l-ahdD|Ncc339ccJ&FysKR5op3G7C+Xc|U zWorok&ZzcG=GTo&*RHk|_n=|};ipIQ|s_3#J2lKb=mA zI6Tg36B+5zAz6MiCf0w$0MU8=Pu19^&bs5e=y#uGwH<{uD(NHNa&C_BOBc(1XlCb-p;2~M zk?&$zN1Pm;;)vuMt3&3pMb2ZZ%p4$$s9ZT;E-z2d1V@orOb&_Uk`cZx_ZOhjTey{; z@B71HBlZlC&&Sd5;AS;aPcNs7^X;Y6Otq$Yy6UI4c-p`ksPS#%;LLMG2Pq(2ww2Zn=WGbm9tg(Z$lXpy+l7E{s z@Z=CZue0yBRPmCi}uy%fAYrfmCbA&Vh|x z(rav`GqDMG%1WMDz^)w3#DX*5rGS&3H)`+GZmB9A_bl746L-ekP1~kBeaEB-`{LF& z%mY-azd*0aKW|tzDt6r4w@Ac32$8G@TC*|oIZnk3-YJ{5vCo0W28Wu}c+tr@;P}+$ zP2j3YPQvV0^$pq^Nr~S2P0;}t`fu@H#8m)BHvtvx-qhO0Q;ecn$2^hTV+zU6b0yJ5 zOW)^_wPP!yWqvBzIfsG|iCjm5?T+14gdh;&G) zi9TjT4zO6~r1-zH5SO3lG%QyqFI#WQ(5|(mLs9*a=h8w6TCgw1AK}=K*zcVi#THD7bOnOFK zoKE_lftk}rg+vYu8sjCdVaH~=Z{lo1hBmQ(o?pF#75mL};2*Yc0x7i@vQ@6nI1!sH zBds_7J?ORK3&-OZ^ovIg+hF;Tj2n)tZiCH}*O`Yh%@D`~R@E%el(5@AaG-h5Yyxyn zXe%4i^lY`0aO(NV67a=9iJ!g?DJnH?Ly(#cL24f2uSUdF;_}5FwjNr1zA{xfTv)~fu@dSyaZ_fX z5#CVvZSy9ek^P-|Rap#=zpBy;ZU{p7ga!fltQ}-^A6Lo>wyZe)*R3rP!Mq0Z%`S=CqK2eIh_2jeK8=R~hvtUpR zzxiBkUIGu-u%Z;$fS>M4sS{;vpKaFEVeW*Nc>JEsST>`DnBz$)`(A$WW+h)@miXl+-M>o2|b$1Dh%YM%vzFer*ZBIj>)05NUhfVzsyY!z`%n1!G zzhMN3Z7?RdI&;WQLk=iNH_KR=?YHYa-ZD8}MSkMH{N`GF!*@I&dw&AWA3n{JWM~t8 z;Eb|#aey*d+dCPlT8JZ#Zy+kyytd)o$Jz1Gptjqci2D9uQd`MZ)CsBAC(BH~9tJ;< zLnMe11s`anu{nJ^M|q0Uv)M3dCjZ$xQtQUJu3CHJ{)j{z4hpA?HYSZR&42D4t!_WG z{Gg#$K76L?2Va&Aa>JcIgPZYx+w9`gr-5R#zF?uxjt3+j6Q{#S6mcb`y>0Y2ppAjp z2)-`Aq3}&NG6t_@P%Ksp@TgS)LlU*|t|r9A#Fhh9{DXWdP&C0Zm1|EV!43>pLcIyn zL5a^RQDDPd7Q>{|*4VH?M?Q?rw+H;-*?9BI0}U3PVW9<2@6RWi z*aGP_P(;;6z!9UtDXf_f;IAx8tj1td#$~GbB=CU(Mi-OxzZoDqW8%#aMk>=B0u^ZU z280><7Y&3N+E=)Uo0auua(htJawffBRPkEm$&CpAD=VM~QP35m^Q$`&ZwwNgcy#He z+Or^p0-NY@{f%&zxg*@%+4pwvaLkP!KN8;|$^ngPM$YHI+a4M7mW&|Mo!TWop1|J?^)cV>9gF(Zu6a zN;^3mxO}wrjl2e7D>NBwO0`-G=0M=vuL5Cqyl#5F_OPPw!ebEDKR)gbh$w+gsz1nO zF@ae0$6N``(8=Ya_Cn12!3TRjvRN)@)V!AkG~qQ~S~#@hPPr_+t07d@%yQoD2m z4uY6rsk`hTDF;Zp6EvWeVka@yIOgb+ZG7XMLUH50DuQGL)}JQ7(N_&h0vT*IZyh%B z`X8MjkK_Q@1REHw^>`D$)2x6?CXvmesf@1|B|n_eWl|7~w`9mS{yf}Po||423SU)Z>h+=A zmNxwz28=jIjwheVL;=$9Dtwz&m<*eDx%o_;dLwo}_VMeRHk3I%RT=g!@3^3-_-te6 z3$Gam_UM>+e1uC4Frxr~KVMD>L8-i-cy0Bz4ym$q)nfLV&VCI1Rn?tet5gABFyAHw+^9QXuhm;#(0TqC<-58{eX3@(dOQSzC~;`qTfvI4DsPA zmkJEEpk?ZYL2w1IJBUIdU}l;xoj@%#&=ZxL(5(2cKp6&AG<&zo?nz{fWG5>{k|D_Jm`cAcr7ZjU#rSs5M_k|rK#U&M9m^#G zPu&_hrA3D)QE#_Y!&?pSOlG?G%DIEf$g?TqSZQys#Jq7l&0S5(qF$f3UOVy6qE{pD zwVeb80*2$)+xR5Ieq{Oad@ki%@Zy__%0D-huX@Cl(x|e7w3eE;@l_yk-M7A?N^F+p z%8L)O%;;YlPfMqF*4ab~_O-y2Q=b`TQ}1}~$pYgx7da{31Wl0rT9%VYn#XFM1ahv> znrZ%}_C&@>YyMcH&lg1zjLC8Gz)ls};&|L6nuZYripZFuXjH1(y)P4v`EN4d8k0~G zKo;$`Skb<)qwoh3q>W0z4hJ*tA5V1_hLIkR#9GGZjuFJjR?eqns{Q*9 z{z+1YnYuptZ8|4U{mr&=t$p>mNJLRoLsDko1v#N0$O&;6yOi~oP$^bB$s*6if zzT#$cn)+}R5bJHXJ9~(F$t%Z;jC|BE`$;y+4^zC0>h=4PaUxBJ+)Em=Xc9ht837X) z_*`yFL`HrCDzRvBfPp>UWP$2+kcd>X9maA}VZ>5!zbaA~(~@6q<5feT*E@sa2GAC= zRtT>P1W`pEO0@*}U&LIe)%jkL1r?=&5Y!EyZ{z>^L9h1)#zmpoY_v88p(5`&^=bBy z6N%CMxZr2X&$EnK7q~$D8?#CUH!43LG;t2H7OFb^w{lc0pkPhS-7AemBHrj(rOAdg z5)nT2)Au(cq8C(Afn6dx6p&GBfa0G1u)5)|uN2YI0_%yvOK;G+F8;Udl}Po9ywP!A z*C2uW?P~CPZ1Vvr4;X^0eh>|Yv14V9=xDBG5Di%qfMnyfhMdU4L%pv1vN$e+y#~da z9-6rrsM#U6toyAduQz4)RjQx36WSZD9dsYEdfmrIv3^{{3!C$(j6B>Lc&@(fnArD7 zXfAmp1>$OtfR`1R-%_S`H0ehpu4xW~v<~`X&Ys z=Tf}Mia|P+D2zW=(iOT&;nn?RY88E&H_=iWYwYZdi*(jadNmWPLj8e z#GY_BOlrX|NT4quG`GziASKmV>^!_MXJmeQ8U8_>4@xY8({p%KJ*6=q{$F} zXfA!61hhYdE5n?!9X8u)M0Z?T?(n zdiVI|sYGuT8os0Dee_0nzk#0LK64LzQG>q^;d8IA5eT_GE8G|m{E0PRa)G%c)#IIy zt<&%9f?0%dcCehtedDo?n$lj{44&7O;+6F>ulsn(;(+`m?gLIamR`--tse!l#wd`@ zGZ?aD!CiR@7SL!<%x!1$fTaUYPjW=2CA7qju#0@TA5bF zFyY*QoZ$wf$RX?w)uU5s2M{%?bn2xA11ZQyZ4lv`-S#Jl1F-pcf%+B7&@_)}c-yZJ z`B;&mui3l@uy+%g558ZyT;{=f#QO3-BafnZ6OU+2*W_E@a=)RP!rfJ2VEp4F#VfJ< z-})v;69b!XiQM#XkSt8>|G&M7|I2{gAEUyCxH+SCfWYK%!5+hGI9IT$BA6tiH3TtN zTJhbG3Wx0ViRZBoPF}Hn!uIIpHG5^c-p+B$Swm6tv_TZ@Mvk`S-3e>YUOgX|@cr~( z6igQ#TNy)eDK_EmE{RNyKHNYstb>|<6C&~q&ESBMh?l$S+$o`@NrG3{IB@aby&)~P zwza!4SrcZCLP{N;W=c9Y6$IuSC5C-rf5KUvr3G^%Cp$ia5GYTGQytX0OwS>WebMu$@>F1Uv8uWyw z^{9pAR`5@CQFRyueJE#yF`(Chi+yg-fYwNV7TDyOaCm|EZC4L2?pX?tGs553TXy{K zw6_7wp3GnhcU_RXlwMolqggp_I|%1d_=JmwSXo1uZv=21hP^oOwo`X|@tLp$5$P5a zca~45H<)?I!*Ad2vlM!?AX7Z}lo1A^cdrfgn??5j>5P`B%!Qk zaLoQ#wHV;)sn<3nBN&1);rI*Qb}PhMlc;|}rznB?;*2mo13!+mvXP?vxiI;RA&Z@7dudgvI;@rNE!&m|6zyogS?Rg_Vds5 z3fh)Nx>Sv=ZB0#XN-A*kxH0+o@D)_qG>D+00Jgkz;RyLheT+__SB9XmP5uz~dU#gNw z=2Fm@L0&${p{ORONSSSQy_&(5Avm^*ns9b3kG#KLOwdzlg~UHEE{0`WxN+)U==^SG9v?OZImdIzVbT1?}Vtu~yU4&_$a29v0t z(OgU8Btz|VTO5E@#+}HV_;@ydj`#0!v-8c-NvX!p!3Wj0P~9aG?{to0*_d6nmz$Qa zgOBf}8lw8V*hmWkvS0>s>R~Xr{nu|_kiM-J1#{Jwyb&C79&%( z<{9i=yG;tWHjeUKyW+6>FpBJNKTymfkO)dzCUYAVkuzi&syYeKY?Tw9 z->WAq*9oe;nx@v6wZdglS4FX^3lq$-c#0BCG7I;X#acMVyI-#p$X@e8A9oUo*9u}u z%wl=rQ+ZyCv>(m;Y1g}1TWV}s^N*e9wS?vURY~v&sAAn|tN~qV09~l4Ab18; zxb756uKCL~n1%9GrKu6S2p@jFt~)B%W(^%WgeL|&heuXjad@1`eO0qqN<9gjjt{6n;oGzTD_&r zOe9>0EZj-&yD3E4i)!wRP2KKHz3%StaO^_%qI@2h=lyyFM0i}N3~1#fxwODQ5E_d5f0sVEiaZnxgEA(|jYkaz z!6yq*Qs?pRT{voKg$?xcAm_npM3NX$l;tH+TfeJd34(|1w6&&(*f1~$oRy46B*SRx zl@R4K)UEflk@+tvn7h*40*h*N903LK$#*WC2#h)JrNO)ZydmY+`V8ZSPN_v*%XS84 zbuFu@TgU_%<58i+LNfd^22}yrEm+Fba+@35y3reaQLa>u^^zG?H23S0v{jR`VS&XB zqbU2A+gW&h3`cNEUk?!MiuM{{^ew7OC}y^X0p0}z|F*H)==oR7fT{Aw&##EdAz36F zQenWHs=+Yg+ln|Gsy5W`shV$4dZB1SQE^|SJ;*|c%R87xT*~$a*7VJf@I4{A-|GFS z*i45n7}34d~Q$M2;bc||7dnmAa7rNVIXew^MO(#vmt4O=*JV+4fUU<(KV_qUWo|hP4Ak-U;T-g zQ7G;OV?l4-r{G=;2u)YkF7H~Wey94p(Kk>T5o?Tvqp9jRnWE2VT_i)TjeC6;x_TykUFLOBM2zBBiKaH}wXX`ZmQk7aQ z7$!s+`9_+itu$1UWox0sLb1H)IKWAUh@5vhx9}^th!uym%+wLW(k(hiTu1!w{{7NH z935Ljv}ly8xL;l2rZ&$82j^fKx2xQ2SEPzJO;&Fs1J=Vic=iIKM>kzFU@OQc*4FfwMmr&MK;Nqcab{U`Xh50IH_tFtN(`GCkl(K(ppC?V0N zdhX${pf~zrOV}YuFi2}3j+&TyiTp|uG%rmUVDT&_<0n4523!+r-7!26ZpI2y_HF=9 zn)JF-)i~2E(l|^3Hm*4CSU|u;#Ap}SW#;tUfYHyH&?3@~7=EU=&q zysWmOw)MdOB_h*okW_^05cw^_w6s71D|)rk!>AS7k|~Tak~W@W^eF7FC;v;{<`VC9 z7DRM_^?USA(d_QbxudwfNCPfW6BLii*JSeqpuF<0XxD;9T!cx(1fC8{=C?FEi)g7= zffce4hSUfFmWvjXVmZ`jiVUM|s%@YVkkCx_?jn9l0Qj-^VHGMq85#wCh=xl zCvySFH)aHFA#lh8Ful{cl2A=*Yk6O}K`G7$#v|EB|!PC1YxDn9aRk@{`gtwEt=-C!BH#eUa zZ;}n-i?HB1Il^~s#=2}N)RjH}u2N9@k%c}qfrWccr{pKF;}hQ{@4T>Y7w4ci zyc8a2b8P8q@e2d%Z1$apz^dtFZK+E-Iev3Yf#h_0z;M@_`$4l5$)bz^bg4~4W5ro? zj1Fm$Cr))>JNmabW8643oN4g3nmph;o_jJvU}KI^&{p}T2@65oQNnh@jC=m)YDrVf zJChP2--`$)n$}r#(D&1wDlWK_I-g-Eh0@6w+(fu&n(zlqgDop2u*YZ3mu_8a{oCcT zAU1{=HV!GF7*BuADmtksP@@)F`S^I&2vkJ`TwmHJ6eX-{kb8Q)Z#VDo9b8Rw_6eTm zPv<0()OrBhlh>4%s78tF$1{TmqFNyk^hKACd9=?w_>?>ljb|g@$y)tX|2!8vQ^xo2 zSEYz4|8#6Kmy{QSOV4A~l8a{k8e})@IU@Xs3K*p~cX&?7RVbq;AGmmCqYMfeHG7>A z>dsB|tA}d~4MK~d)L+<%ZM5&}1yAn~$oQYEg*kDK1rr3SE07CK1yqv(Vd|oGpR4@? zOpP-1+sVpB7`1~C*sRJ+nPG#1$Ydqt$@ziz%h<$V5nu*#iRc2~)h~LUT(SRk7an`L zMWVb7Kd^@CBHxmUcYX9r{R|rzl}ZE?R=B#9x<0=>TAsRoTOV0cL4BLRsjAr<((`Qt zJ_C9WZXNCp4ZMI)z~g<>WYLL_kJQkm){oM28!VZsK^kZQoZD{L!3~T9>XDJUK4(hk z^xX3oM!3bRyD1o=mZ#p$@wv_Yqr2m&LWcIXP5Ms_e%qm^9UT2Ee=_*)0uAqvBQNr= zr?ESMG_$QchQ^x$b|?q3tm^K~z1ZMd{>&9ge-w0jNfOip;EPv_H@!G1p-PRl#7^m~ z@lQXGlj3}o25oRTjjv6A!xVpvPAl-WVxcxr4x8P zteQjAUX16-#Q=20LP?%Z%*m8zZ8c~^^~<@0SC!}S&5i)n0|%N-BTADG12!G)roqO= zN|X>Kqyj`YV52?USA?X~usIRBs>FJ#i#F}g`&6#r!pqFG0(}03;vy3YQN(z~Y5C4v zg^{g)`}>1esW%IigB?tsePIs^*Y{D8XY|`B-za0Mn`g+uE047ILq=lNm%i_4cK=?? zH>5+254;{XmUFO(fLhk(3~IEtk*&+|FvpY|=>Vo$0H^X{49-kQy1A*d;2O)tCQaWC zqu_@rV38`=;V{cb=l1M!@Vpac8-*mDI8EsgALyW1G8i{_EYb@alBSg^ZVv0mBTSR} zh#@5KPcAV3NXj=I?1daU8@GH4`@ZVq7mdOYu6>1LDPHAG+N;zyvyeK%QRE43x zrr+jN&+GWLoz59USx`mRm#MNy|6@AgG zvb4!MH5AKdO2q9Sh=a^3@torr(Ih;x*y55Lii>P);0#l%$w|jsM3zl74tEABMxrR< zcZGHwm{d4oWg(^O3~tp#Qwoyf^grYZIWADk7s#~ z$bgf*ZjO0I{XUd}Qe#XdxhKKca>qIfkkNFU3<+BBc{uHOLh{x5)m{n;mz;;AjYbbe zQevwSJ*I|#m8>fRRYdp*Zvibalx1e6EtNxP{Ul1|?(3XN2))D(9qL*)7-35Jg-v*S z>O|7moo5!@;;553>sNLJQ4EJG?+#v&PQbLO9~W&-g}AfYs}OZk*-9+1xE)JnkiHeM ziS=)SM9K$}tZE+<_NvdY@@}FvqB(xVc(sgn@$970xu*7F@*i}Qnn|Q=6ib01qV&P- zR!5B|%3oXzy#gW{3>%TYdu#h`f@9}6h`&(}$6~cdLa3Ac9pm1J4_l>h$cUrz_HbzT zps^^*bLFh){C@cfnXi!(?g71p_pDO=H~$YK4Fm&As(%#hFJQKY)PJ!GgpXtIonT4= zwUap|A+xt=W7OI*FH3m|PVzIIMWl?xLhSOs*G+;OE+H=Aeh9m5Wu$fcDq&@nbH&5$ z=JIUsP(?5ciaZ~Wvoadp;DDkYJ(%wHV@ShfdSvzdI)$%#YikPI*3S$)gFXOtrl-5d zgY=4Q@89bq@aXJyGqm%N`_`=Td_D7psPbA*cev+g_7IvQ57FZlR3HGt?o8-uKt3C8 zm|gW8@?dcwnFHEGaP>ZPRED;+`l)ezSCxAXcrKw;HnFtV*dc$%9E> za)NjT`r(`Hdj4c*bH)nFBZCVHnns1QTdMjpwxFfs6xw+{I{N&)v~u_qj^r+MnU-?s zHpScG2rWPF+K5;vF-&KlI5gB$ow<;A@q^lg{qfEux3MbTHXm{IBvKRftNIMKot*l7 zLs@_mf4bo)uX%3bZR7zQW34VwCc8V#eZ1lf7_6vE#owxod;i`CI=KfNS)pB-O$bNS7YW2r&^_6qctGn26|6*>ikzV-3?v)CRhmj1l@|J~oA8hIqP0}BcE2BbFPD<=^e z1co+H@ln{BsT)PDWJL>(1_<7A0CecVjUy? zijTReK))3R4?c^|M}O9PXe8I|I|1zN?D66W`#_JV?x!`KbG4B23e;mGRcq3jv|-Y} z$3S{ZWWM?n-TnakVD4Kc=cW)!Iulo`B1|Q%KEIXejUI0GTxiiPApp1hj$>^>JLBq& zATy~wHIb3L%3fN+uO`=*XV9Pk6oF8wzGW;9F6jJlke-?>sg_U1tD^1x%VyakTR>PAaf42vw6q0GE%nO&30CPmr` zD~cr0VCz^6ChV`J35V^ekAHTwV~v1TrUEmYA=wgVu-;Euh}BT@M?{bfsK@UqL@chT zSeE8$fv1b{-j3Zj(UQH!8t~P7dW5nu1r}OODtomR{+DR&12qbRHZf9R?|UI{IQH<+ zuD5m&&J5k$VHelSagaLfQCx~T7E}?mV~9LiQL)Ar`t6&=;EKni<$Z&9-K-aG&&N|T zxpcKlUC5B(l#QN#^g)(8u;|% zu#7Yej!4guHQ)v@0TLjYbkAt>2Cy$3-IyzEz`_yD3cwdHA)r;trchZ}BXR#RIEfd% zrl@+Uks&nWh`$Uun9p;H;$DlYrZsi2Ds?ENu(+a!q+Tq{_ErN8{6Ji?e3qj&AhMP( zYeEZJb6IhzXx=#?k#oW`fPa#RXgFabu3{XVXg~cmBWwJWlpJr**r&p1?M9D5-4E9lcH zortd0@~TSLtes|6T6-CrmGBmW--B0>T&(+-%*)t)Oje=SAV{3H-(V+G>I_AVsiLV& zfZr;KMH%iPH);p`V`e_suoVdP%UTlXJ);NjzGH#2wN+aNs`dJ~7X4tO?xKllVO@5C z43g0M={iX`+KqPeaM9U)bnYrs zEWc76rRr$Qnb6FSChm+Pw&5v3TU(_K2%;$QYs3@2bKlZed^u=%N3V=M$M1F4s0BFa z-P0wEfFGgxK+Sm>4<(M8SV6VxWe%~W;)1lr&K^1>>F++oZ7>X|yY45Xm;}h)zN3xO z0&UdZEid2T*vVKod^ng(n#?A^!UK|XD)+!%X4w!Ix3RpdMFR!Ccvg(gKA`3)?Zr&J zkpZUdW7L^$-sZ^R$Y=4Zbpj+w?px+pRnO^16Z2M8z}WF$yiIpEaa%Akb=Uz)yW|Xu zLk{mtH%Rg)iJ#kndAb*Zm8_OVcA1_NUgqPqyi0X=&x-WM9ww8h=Y`O)9Y!{I!Uz_* z>7vuBaBI^P2zPh&t1E@4Gx2^yeSKfYz(4oLVefN-c`g0(wJ&q?A9%PyvSW@yCshYY z#_xWD7+`8As>BHPOr+q1>fc~KVNEvg!~Qo-0GEeEPmRKdqyZLdfKGd}qJmC)+rJyn zh{H+zTjTu|p3T0nQe7o&mT>?|5)f!bn4m1gK3*Y)g4x7X=O>K;b32Al7pt3)<1K`= z>z-_0-8tPI;RMt$4m&V^J*|R~|K*tl`y+7ExBM-Cc)6W=JG?$WUs@V?xRfH&rhV`0 z@%Hh0Qr!q2J_JsEY))Nv%2gh!oaofpU0>Jq)bMq6fH=xsD8Kn5{9Ny3nUv!x-Bx-YfIyJ3EVQcNxiIlrmoron$rM7i+?auMZ$(6Cba%HwwCj#Ouq(ba zHt;)dv%;wCj7@^(fq<00g&#{~8nYd%IDN*Qud-!z8WC-8u}y5Bw2m~qXjG|jJY(|Y zJ&VC@BoEK`?PiMC2YcCF&9n_w?i4SiZjl~!_V}o8J^!G9a`qaDB&EIDw0R3&RgLKd zKcc%V34mf6uBh9IBwvQ>S4K)Y9CPHd$9t~9X)K3t$cGfLXWtH;BdK4CoZCNCFJO1C z(5jPJA}T4hKd6khcC~F+en@0QG=zoF9kcf*6`bYqmnS&{DsBI$!eZ*RY6fOsFc1{? z#r3}cz%?8oDhP*Q#CleGvI}{zZpOu*-A+a5a)H3fAMLo3N(SkQ(yRN^s4z(&iq-cG z`DPwpMYx2^zG(io_=fdK3MnNk&eX8Hk}XWkT^#OTTStf*A&XF7P>lZ+^}pTLqD%iC zd=Qootp~8KTx&C!K9pC=1dQb9**j|*Ba)B*2qF?b`-xoL?}(U3go_wiBppqsjRQ6k zJO~WyT%!`c!FABcRf_NuzRmbhn~n2U{7kMYG^DO^Lm_>%Pl>-QljXc>I$(OH>`bdD zB7dXgtyWd$7^Gsg8@pzoKGa^KmT-;0oZm!J4X#dWi-%5ReM?}gMTQTg#!p2msGwVE zT-bPFtjnL)NiLOW6`-1M>-T0+AcYY)xCc`FyiVfeF^#cAjcco3R!lH#P6%zV*M}0M zBuvp>Xa4i(<)Ts$p%BwA6??B)U$JUTcG^a&(@P!I-L}lD!gD7pj!{J`2L{v8k9q&R zq9HL{|FgM-==vu?EyeyMGZK<5GMG)_k)DUxwQZ_lzy;j8u8Hv7N4oK9oNI$giU=@g z&l!LI?Dc42@IlKcnm3NSzi<@j34#M^+gd;S!!e(kS5)k05mx|I&KXA}cV{||38c|* zDEzy3ZLVk9&GA=E6-D{fdJImnD9Tt2zB&0sl3hV(-$!FcOhO^a#1G3$=bwi{Vzsc% z4Bi4MZ}woXgW|-%52Sj!{4#p%1QOtI;ir4=k)+Fu#m83KomJ7=GA_jQ20o{rC#@p0 zR+f?Kgrz~R8qpjqy^HN!mfXWx_|+pxtI7i3&lJi4yjO5I8~3#kNP?a9U8#U|qiFV9 zd^E1Y$KMt6PQ#DE>NAaTu45fIW2EVX&NwY)3Ro^SzXCIAD|kqC@T zB4spv#RiuBs8Bt;%H=8S-&P*{2+l;ZlHF@nG74OL05XQZqWCdRl(rn?(@Pq3qipfdGUcj>2cmKZlT|AU90kx86j(e@gIRC@`h94)U>ehgr<)Ra8%^qS}Im($9 zI@yHPuumWL_VyB?+BK?izkvW46O=RA2@t(y{>vINh=rYyfZVFJX@Mlk9EJ;a^(DZs z)a$bCqI1;Cci)>--ASs%Vx8ZWIHAuZcy4=w!|j^B+sCnOB*UtbO&hSOJRTZot{fw% z8BAy&s35;E7jOCe&~;JbkvY)*w-SEZx%pf~JtsCH1341;Ff`na>A(RRWO*x;J|qi!^0KWmWCpA5)O#}gB*`B)@z&b8s%NK@ZAcFf+{?)Ji|gVXs-js z`tJgK1{8M)i`fuNS{*iK&hezlQR)*2Y5{qm;JbZRib8`N)_vWa__(WO)>WEr~NB(V>ZO3Uo z&CLiRknp^YQRgdDjRKmQF` zQyGoG|J(FLGl8H2R%@L9$Hw(_)f=!+pZpu^+rO!e4cK7^d^gKZv-2Zcx=YxwAR1PT z{96N+kMmAqLT@<7gh%c~RH(kqVP4-(1cT$%{^_aJ&coFwqVIcT0Qk*WjhbvYQnv7H zfOGsch6RWClWm$XT%fer#<|Ura?Ivx=vJkcyi?6 z;MVGnK{iv9YSx>LMjSw3h>SA?K;)s^%<*}J=EAM|*wH`epYK_3cX{s<^1tqHv(K6S zbO}kG_tXRiwE=FqM<{>Z7Cy5WuH0y^WC1i4Z%CKoaQf#+Q3}}=B5KuB)M#vIGNOzy z;>4+s6s)_5Z=|iSroUk6HE2VXYerLBOw;jMw0Ye&nSf)zn}bsxa#SANm+fdP9c3JP z4T|xTyVm9fM_~&l;RPg60jpdkEc9y>$Cghyt--*(nv`|HvCK-^r!Su``_?vbYp-qwke*lHzU@ejCtGqjF2Ji+^|#3AMO)+}oC*cA>!S;B3l zetG(3B)pF5RF(P@KU>f8fi*K6{lT9?7?2iUmhWK!fp?Km{JpS24ZnOXrfCk_T87&FTQ1xnW6B!lu+K?pnfunQ`;sZ|XfG4s|Cq)i=I0 zs8frto-*$5uZnyTKaS=!IQy0mqKNu8=mU=oH@s1kx9b=wGo)JKIJKc+{LjM>i)&ZS zU9u>ezs>_+5OTLHzw&a?$mcIT)*0^uNA_KondI?Y7wc`d#j=Bu@Z`E1x{h)@gfN3$l ztBZfycg=s05*S-glVo^l#f}YhCy^Ow-_U*rB(6e+DPP`Y=ujy}lN5_%XPG8AF=$N) zx>TmEOLI^D?ywwN-X}#VI;RCvF0HOloGo3eOCr@}wKP{>V9{|rTUQ$clx*H};%Y3^ zLJ565-w6H;*{o_bzD~L(?yV)HBTVzPay3iKxIgriQN5GWriaCcG((A%MkdMwXx@_h zomP!Hs*x#2V|gyGRnm(iw)}?QlVz#=WmD6x=}Sc_=tlE#qY`ITvtISjp@4{Q5BT;<6e2^XM<5 z57HmR_%Y}B+SlqCwJ0URMM{@rX(!WSeGCc*zBc=6a+&^^nV!XrqWy0_R6-%K{aA=Y zW9)DsPBwSKwtauud)EVZc5#N~V|pY5ci^ZxPo&rocxOq3&nS(cy-G-aPuidkh#2|Y zP8%%J*f`5B%JG@4OVF6q|&?>;Yw+MxJN+S-5xBQ#VOu5AGL$> zX+dqYnbyHo-Jg_xnJs;#<9OB7|7@fJI~&eQ;tdx}BUn44RU}VrG8|OpZm~BnoAP7U zs(E=&V?Ju)frXY);mi*uwSSQwFwff$l=!G{bmU0w_Ri1=mA)DR_}~#EGBS~UB0(Q4 zHmJgtp3Wk!7f8So#Zy$t8ypE3w0gDRr*f`zN}td~LAtySe3)2NKT`h!PuGK;o1@8> zMT9|*->q4j8~SIyQxRG~aHl_gnEVgF!h&wjmn(5HRM?o8E5EQw2wtPlA>)#uh8%>< z3&YPMYQJf&TbeQW*{ZVg6z*v8ih26TcP2K)A&o>sVS1h^H7;Ju8 zCU0;uW4mNr<65bVNUAd&;dKJYfpFL^Co?9|fG`DWj&&gZ)iqDPqhlMC^6@j(uheDw zHWeuUSbTD>Uw?U3Y)~AySX7BX)%{8nJ9l+IR5Lyy3Q_S~MBM|8K$qLq=70#2-M7}0XlzV};^F{#?<1@Q1#k>!^648E-b@Pm8vIaZ65Q;C%Q3xYl* zHlhd08(y_+Zg!-hPI512>ev8ke?|rIzQ?qxe>gbM!=ABagp_v0{XS(#cT19#D33&9 ztey=NXC=RLw!hbJ3O*yE zixF!GAI+37U841i~&BqixFq9pDqx}87O)38q z>Km*x*?;*G1gHuro)f(_^9n`~1`bK#1A)rUaq~Y(qJJ!AEAj(OI~cV#{jmS_kP5B^BFdW5&~jS`p!z=5&W=s29V=s?!p*TgC0Kj5 zSg=XtcKFECWR;1fXiLN-e!ddWHIR!~WGDV9*Xtw239*BD#;J2VHMlmvfAzkE5jIjAE4QT?-ZY#UOUV^F zB9<#xir)X{c!WrfLT_ffmpe*biYpwdKmg1LZ#XZ4e@4cD(|HOFFwkHzgXU7WO)$A) z@BTi+rImX02}1=eIUF$J=FhS)`h9JEe+|bqYme6jzyYK010*1Kc_`HEGbxyuSX*#D z`Q;-@;Cq4yG8}Ead~1}MZXlyZTnr}mG?Ps-0F>R1$u!lL%lftx6IE?tzjY|5{oup@ ztikogg8Pot7@TpIB-7pvz*iJ!6n_~=;VzdJ-V9|RIXUN;fhIvB-oG< z=7|WFC~6X*S?w%g&PZid3ovV|m+Jpv>Mf(%YMZuUJPGbzv}kd6io3hJyA>zJwK${{ z3KVxO1efCOt_2DdcZz>p?ftCxTWhcUnPZ=`CCSV=a?FE{Ag6|Jo2!$Tsv2cK!AU1d zmE>fkUd?h@`wKMVUur2fhAKH=)3>omlJF6QfTQi(;kL2HLU={7xB6ueI8S*+;_ zX>`QCq7;Oq&TZ?dlN1Uz=Tf_mh@71y1!3Xzn3N;*V4pSdzMY-he^X-XBE@2j6o_Gl=9@oS?rirt8yY@{?}+z6yTlWcLVoL}kVf zmjzB4IV{UVSsodmzGY*8%RBJeyQRXY#&1G#`v{|>Hl)fl>+=-L_TWpc-n$s0_nNl) zWb-A5NxnAco|lgBRqqb>2Yh8o&Dj+U#d~(HIjJwQ37dT|{9Zgrg@s)6i0E#YEDYp- zE*Na6_)Sfai+PI1AMZoq9o=lM^+Gw>F!q}hjM{@!OLz8>R`Qhufad6#^lW+e3SI@y zVfB>=BBW*?k&JECGw4CcVCBP+2u@E_n12lY4~8Ec#NvG_n)n+cDwx;I`{c5TCa;CDmMF5jblhu0m_WcdKJ)0_F?YHR#;wl53R^Lbzdikek|2xcI)yw`D!f#O)%cluoT>&;|)9`k8W;W zaj}PZTzs*1GViB3bG?n_vacp8q0Pn;mAcLV-C{i+u2`u4e&SYpE&^L`eAu zGAo?!bM>{w<)I8_6{8!sO!27lvd@KXmC3YP_3rJ(EC)t;HprdQ(e0)r+aHa^W{I}Z zy)>xKb=P`ht-wW|=Aaoj0q8V5opimqo2iuFLCcX6b?x+G;3uak5Cd}!5uH)}%oI1( z&yQlbSPR_VEt}5L#xw*|x&-d&|K43G$T01g<6^Zkue&vYw1jCN|+ z7>qXiR3&*i`H4YAHCen>lY9MFq{TAx8g}f(@8m8H^*Y@tSBIWdlLtuOhMs2E3)4xChM)kzM>w4wI6$CsIgd15JXl*4K#K-F|9=m)@g?kLBg{28E++F|#f zm4xL;Iq#r@1Rw%lhvfWc1^e`kTnu^917EG+_K5^{o@_KOChk6<&cKv_{)^C26&8Xs z2Xly*4YGfT)5{Z?dw|9O*{r+J*N(+Dj%rUy^__234kTaX%bawv&o`)-WE&vKQGJN= z1?=h?mFz$MU{NQ3HZP!YW}i+;^+OV4|9TJHeKQxHMEn3un;n&j0;^ZAg@0*DM#)Mw zmrTAPv>Rd*49l*-8&yR9$Zl>Y>tA&3>8ew(6HX*IpmuB>ZYWx^fPO@__6GJ@;s*~9kSUJ(z3JKpCIw-k z1)8EtzSG|2kqga1jF`lx=yC#Vq9gs`bb_JY>f2IAxwRPPID^InoPsg~wJt}NNU39%aNsC|!&ng4 zZmQrfJ-N2ob*LqzOs zUfD}itfgs2y?8vPCXc+Vm6!aizkDaP8(BTkJ-Pc(uP~8aIOkCi^do+&au4ZRs%VR- zAkasgNL(MhA&Pdc-}DH2r4Jvzcsuk;3~g3B2h~~OWu0&JeEt3eJqcABSAmxbG5Cz1 z?=OkLO@G`18}E@n&u6YRv{pYn*p#2nFRa|^xXds3OJiBQ7kF?S0li<;j?!v5`kDpV#m;OAnkOWS%=$JV27%2L6xDb$Pd!q3E z5J6l6cjHuNRT{Uw1QATU_(1PYmkvgb=T@$@D)fyjpF8fYujlytLg52LnPUJreqz!< zj%9fEG1G3-H_9@CR~^9ZcG>byClhBJ#}~-R;o9z#%0_kdg$)SB$B@+@QQSu<_@-W-y&m5TT_rQS7+t;U&OrJeT*lFjl;fw`Sz+olBp^#(7Vvjynz7Iw1^i;ySvcQ{e3@pyjp zA|M2lnP{)#Y?O-bhF@E}^66N+#lc|Jw+~kO5>Dr_OtcdD16VvIrG}JzBu*T~pE1C^5j|sjew35pF^_8K~rDVT|UmtOK58 zBJp^l(6W-+sA!AY-5cc(CcfaOym6^Ga-%<@c@;9YJrS#{kNG0aXNT&$UJRFwxQ+%T zADIPi#B9F7S$u;Fjn`WvngoD>xqeiDrCWcUlM~b$_F5d7LX&#|=zEb%xQVE^107He z=TK=%QjdfRT!zIMJnO6C(Q*`4l2ZMA{~z3W8jNbthN!Rf|w;!M~8b|{9nu#PAd zu@~~L5DeLcOZaY%brt~T>&4Kg?PDHTbhNH-z4RX=uIAh3-+kqCbu9ol4RFg|PgGI> zcQ-~OEd;Nl8PUWJ1BKj~h!IY2A02p6P_2)@o7&1Epa{X$Mb$YzxCn`vlm+?C@c&^~ z+8bErRkDFHJ;^O6RA@r0jYJwW8Pfa<8syI zD{oitU6?uDxh}YJ@MC!$(=uNKWu&d+BgU$AhzE;t12N;?5TJ5U9@xA?AAY$+B;t?< z5Y}W7qfo)~cezZ)zT_yu(|(Vicb`hJm@;%VrNIuv5nBW`E29$Is?-jAyc5kL#wY%7 zoBUeB%=Vg)fX<--XaN}edtv=A^)Z_NF@e18=!5)>K*WXP<@#^pG?Wt$;0XlM?ixOk zug`=*)bfyV;5c|8Nn=R3(8V`^STyXjpNXa@IEc}7o{(C258-n^wZ|5kY|#pXc8g(`{y9)LK5OR28Gp`fGk zpYb*4qA+9?IN1Mg_HWc6R2J|Di1I^5ipKN_z+}GC^H;_PN$dvTL95jOu1L64p_EBH zA08wx+D)vbHa9TPM&6G6)x*aIsf|Fug&OJt77Q)Q0)P9NVwC#u@y|0Xw$!LGjhWPyufC}_G0~Ai5H@}4#$Ab z$A!$QXyt6_`8Or4;z451HGGUWJ215w)j~givt(9F2b-G z9UY-A?535Vp=(Y?x09}GRe_juhY2f!!Az_;5J(7O61O@sGrfeq3hrCR1R)2EZQC-+32DYEwS7_&lB>1|reW@(JCGX^C+x6iM#f?* zcPFeOqD$iogpZX+shu=vz$l|}>baoJwG=v(GwK;eYxP7cB&Pa?>dzY{o`g<>R;%jw z8L?~$S8;LOmK1HgaoBSp1`jBn0>;81`>9P;V(NupJm@tz z`IFGmg~u14gZ7f&QgPQ~@bjpR5B_d>rA4RnIjV?VVI+%gge?k$TCwouxE*Ic}~#1eM&(S1Dt?xrE==pwk?2= zLoNmBMAv{UGgvj*(7xh5Ps^f@^$@q>fh-d*St~vLUOfO~TzlgA+2gBr0t*X^%ec16 zYtJyzM(4xv)@}V91ftVfQJqb&6XaX_>JuCvl<#qMWK{;~c6P{3l>4&q35W1QDGRNM zXefIaP5o2Jgk;N$?XF+>8ArbRWr_HE1bUp`BNyCnSI_&u$7QHSNXrdzQNbb+2R*>!PVw zkk{S)Z(?ng^2-60>4T;F>dY(inWQ~duu)EBM@ZIn--miniF7aDO>qo^pxSw+^w+ z8%LN38x0!|8|(dk8B2{=q8EP8WL~+8-ydH(f3G* z+Yx@7l`W|x-!Stxi%%Z%Rsv1_Y<8IJeRw@4Jhpda zKZP!VLRX|a$f)M<*_+2nSU_MZ+*teeFDo%{nUCnmeS$U3K&1lLm~iUH z@Y4CCUxjR8*tV8Ksng+kEyRz}oWT-wj4jZ7X=UhY$Og@ z2jyz4G-_zwy4%lm{L*Z&BC6@)IbGa-!S^v~+gKrP-2Tuv+&y1Y2=q4ba0C;ZQuD=| zqpz5u^RJTLyMCpK437(zDkEDR@8YmwNUoF}eKeoVA7lN*koc^Ib-#V|Uo3?7L zxbmy6yLi#-n9%Sowm{$Bf9u;;;EW9^35%m!WOsI7I>{>Y6WzVW=|e1>>}-+LZDyVe zXY+IF{Cdy^(A_Z2?rKp(^=ymNV-HR`6yII0Cr6^)9%~@Qtvp}$RTk98a0zKA$HHM> zPAB&nJuZkNID81AWYaVqv5bjXp+4uY4-rzFl~t22@)=Z)dChDj-3k^rcpB;E!g zFfSN&X*DVkw|M|AEZaZlE^P>KgovAgi)UaajI^RKU?1Dn{Q^VBH1qn%<^gzr6FSh2 z2|x)FvYlZIeAf%iwag|2Rtn|SLF9kU^PIij)R%ccH3D82Hz`(W&1+%@7B$gY1>hg*6fyrEz zXx3j09OtX51AqcJub8!f!)=R{;RxZd>@8w{OD`u6=4(ID3qrE+B4oG9&$e#`>S7}` z3830%Z{eI86NjJHRbWiI3s>*Ta!Zwu;a?bZoN^F)aeHtiyRei-j7C(p7Ek`eVzBNn z`M_bqOt7>)@yH|R>sU9(;mfPSi_%ATl&h{tW!pHqb6)|=9d-v6Hc+yS#kze15_8Tpq;d1zX+m{2>C;nJwOhIIrRi)>gOz!e zOACNnA3H3b0R};43kJbbedK{P+q;rCfgf^jmtbAqhfP|npuuI?Ah6+GxxZMOq~1&) zp1!tAn^pbl44aBPb+-%AxXt@0Z-eCnoBP>corA{jUXi_kuuAI*wmSG+@!uQ&J8%{U zlJEsp<-eacSIW6I9XcQT|MR7}_#o$n!2dFcN-iY4fBQTa$$tEDjUb07guQ@;BI;Af zy4yPJB=U)4&8Dd@Ati%1cvCeL<^_KFg*O6L>Q|vzKesb~Mp}I8MkH{Eix=kzeM93w z=~Ylkv#rCPFEDQ#A@I{)+FczHDMdkR%oL)9&(@3Q%siCFOw0FxE$zj4(~RH&9=66} zYJh~immRI9z*a|*>Q%EufoBCePjy<#kQ%TeYGVzAMA0;2FjhE{vl-LY<+9Tcn+Lyb zqBkGk%#3N|X)1A21hLp#HOabu8Muo9ik;Lkq$AS=`Myn>?i3f8^2Fty2=I(7;EDuU*&0)`Ojl7!jSwY%}@h9_(a-$<&~> z8D0ZYhwqT>-a`g;UUWr$FVvBpt8b+Ir`M)yD+w9BinpLiE;iTxIye3RSmG8o+* z^D-EBCH`qlsYn4Nl$cY&d&(P-Qe1vf_d#TST|Mb?5C41ZRqucKY z0vE6WON7m9UAw!NmmMR8<-Qn2IY__bg_n{ZJPDbjUSk!-idh)ZW3z2YI?i=+pxaDM4*2HnlpG=Lp{qT)^iWadL zOXgoFiiFR!6={$#@WBsV$$1#q#qV4oBSy*IQE!wPkk#Fb==Ef5SuX9WG$fl7)?+T- zNhaiaD3X=ikn_=8>&ggBsmBsL9!uF&H}hgMECFyYmANFeCnZ?F1fsX+@BA?47)w47 zM#Pct!%R6~_sW!>C!ShrQPPsA`HF>#t{oEgxZ8430f$V zs!n~!U`lI0eh}>bOnZPTfn1`{Zf1G23X(57QU4h?h0}^p!myc~t{E(3PmRpLGnx3!g=43^x%h z48F{yJ4uxeiwBoLtVywxH0-=MwT-fFb1N>4KJ{B{+9TcjYZAt*xCaiZ~oObA5pJLgPd~TV8p;ubU2)CCjeR zcJTCTY)`JKS^gA8FcTm%;V{ zU-!0CO;@GG#?eLij2{4ewGd(5K08#HIMEnAu7Ak(3}bmtea zaSY$*s-4W!kI67A#h_8PjDqOQvl^RCRV;6#o0orDekaQ^38mz6*f9 zGRxURf82H(OeJr@XzXf*S^(3gf8t_K;4=<|x%=t?0zI7G>*Bo@F@|hK^_Py*m1u~* zC{xMslUl~r1BiTMkZ-1-P#23^!u-w8$nimUy2;({txx1q88R$0z~-58{NczQ_dlWx zQ8M^K>35+=dS}mYo>Y@_|ExOKU)KpTa{;hMjfRDb#fWwB4n`d7g-Bfj?7-ley?Tj5 zg_)T5);`v01aUP?i2Nw-zGQON;F+_AN|V-&hi?f2U8*cg+ml#VahB@W*e{K$r$?tG zf_)E{vTO^_9~@)e(#BW|cdgVi;L3drpmX!eV5wkH{6dMPgrJM@XPZ45hxERV z-g6~{Qr8i6%4wn$ITM-K79ZTfyfS|MgsR!m7O)~NS4#uUTNY-*|6^Ngx=(u=!+oQb zK))t%TJ!R4$xI_@LD$YJGHvZm%+56&$wA#8-8~ZCxw@s6;i?t>H>R~+Qj!cq*w7lI za;&0?Hw2F#QHo@ld?!qdwZ;N9d5xL_2q{^TB%|7eJBflrF@3%x(Z{!d$yM zkeKWbu-dq26^C%n8);!y+({F$tM)CsUU}k0sxsvh-gnREE|xkRH~OxzTz^1NK^C7Q zK*Itt0!jQry!uK?Di{n$Cskxi=UaMYHC878LM^NSrM;94vW?#Af zWvZ0TVKXc8)(YzUVNKT)cdqL2YM!NsX`!DqHOj$0_lw%xb*6oxK>%BmuED7`u|r^@ zM1!8W?=^Kgz(3S^$e1Ko!`k_UBZ*a0mlz=_f?uD3M6%+or%M4?YldkxF??LcahNmN z`r!|cHrtOTx-Nu%`wdf)6Asni;Yd8S%U1?F#`MR&A?Y&nKQXszm$-PXB72GdJZ*Z4 z_SARp+kl2fcLQvTRsa^uZxP;op`I3sI%C=RQ0QDc;2Q~CXldyw61054X%hU<;H_k_ z<{S?9VW`OB+aX6acokQH4wW%2ykENhu+zTEZHBkqcR{SFwfR!Zc-|=z+@M0$l{$hDWXaN+$7$b7k!$`|)tz z6FyhEp6r?)5*)8E&-kMXz(tsF7#<@CmN^5MLE^A$n2;?B=3UTniTj9p>|2aXcE-b`4TxeaESN~d+w7v7e7JPZHTNT1+!GauS6B(%(CJGqe*uAt3tiDRxr`3} zI#0O~O45u7(QP<8{`3h=%J&x5a{DhkPII{Ak$IhO7-*f8?*ih5dT%`~O{@|G-Qh~3 z3TA}vz)!aju6+A1YRj!{lNxXQ*sBzUqbw=6l8(4-H_wbaR%&U zRrVYY^mE~_Gdiy=TnxBs=e-Ezk6)ci0S_%kwh2FhF|D0f>%!GkG zUtAb{nd%|o%}pdf9@KatWx_ZN)|vHc?7g=;KXjJzoqKWVY6qWL76z!Q%SxA0{n5NX zUrG+JW?0-RT#$I<2I?qv_;?-`m)@O^*g~^oN>xU0GJ3hZ8%qec{H4RI>jv`Sl*@h0 zRUN%V*c)2!-L?c1*LJmCIt3_gK)c|t^-Hd=w=CgeRZO>|s4mVg%uac`PK(ZYYmpL= z-O=#qR>#Bq{H{#ND1={_8QVwYGqYvHpKQwQ$|DeEN^jVW3*_7d+n7M3|2&zEWa{-9 z=LMz(Dwl_ls94XA0`pJiU?@|(KSc1qI3A&$3ol)2-SGJo=EQQ9}lY)ycYk7Nb zEhh|?Kw|5cavDGCb~a~{anReI76j?CeV&(YhcW}=biOVfiT2)p?}XOTEsCaxdE9y3 zkOxp)7vI7@47-RB5dL`Z{a9TlGp1A@cE%;_^-zFZzqiyxvgMz=S9x@G_DvpBY;I5{ zh%TaMs?#Fp=of>vQ+lKuNe}oWW>f*sM|A!jy7C?$iLm%YZ|Bp4i_r_ z0GLO?uHorw4M}_l;1~|fe@4M87(n_5;)DF{W_4_VXM#omfVU{1LKW|8(fqrNAAbSq zs_?HN6<$bf&Fg%(ueu5znX-Q=F(kF7!iY>i=Hm$J72CJ3>xvX4lVZj(GXimgE3TjK zj|nK2vy zCGf+*-PqQ}wxjb_7u237!D+Lzxus+CYaC={1nNy*4aU#0HX$H4?o`N!|0Xc3X~|sj z)|W!8C)n*9yo~lfo0eP_8lVDM>aef)@KUsTy{^ACGxkys`!03_f}dr?GTxD6mx$@( z*QS-l=pa$8n-lm<>_gM`u!+bRrsKb5=&wdv#)lkS)xJ{SIRSS*`&I!EJXX>sR&^spXL)kqfi9bLRiCqF7-SAAP$FznnC8HPiS1p;q=so3a#~t)#(DnFcR<;A% zd`Wwxn46+Px^5R+st8hI$d1|N4qWsXW8gYZ|1`Jk;XTP9EDK`5zqnbOliO`!pH!Bw zfZIF^{XqNlXj+L+Y|C-b=y8yZb;v(C4^l^`@WnnQKV)*8{^|=f*7TYaJ=cKRzYZC`Qs;x|{kWme zcVKUH4Se54ue*F!H3IdLG7XQEfgYDNVreY<8`lc9iE|LyBfegf$ud$}n84L7xEV9m zLEvIUJ6lH+GfFDTYF(`gUQPGyn-n^%v6ar#Pza^MAq+q&qsVS~{GE@#k&*oAu~ zWy6pD>>hnMSzVFZ#1`}Uo_Bg3*!Xlfw3fgsnTSm!ZFrm_RmJiME<{+dRFV>1}d*gw(6x+D)|j zVrU#!@!J~Hx3{|Z2Q(!jmCYLYTJA;Y(vzoq-}h0a)hPENk^PByQ`GUP&)By2u!=g#SEO~95JH>ja`NAfEuP+}~ zeKYiDd|U8L&s$xU*LZe)_5EDedbGujdpGr!MPX+W37J%aVcnsz@rf$hqAPMd2@4rB zA_TTCZ(?s+in@Ja+J z$0dO|AB1AyOR1Og@#~yK%B^~R*d0n7QS3_jZH;}O0ZJooNsRNCMe?`x?4`&lR}1z0 zle|t!Ikd_3D;l2{WKz2*5I~0h5Pyg}UdpC32gC1bbiLn2TiL*BUvQNh_XGlj_m@yaMF`eA>}EDr#T09h z#b|vIs`mCgWeYz^w;Z6{OUA+=M0Oo#P58+~E&@INf<$C1j0dL17&M=2409sm*F5q#ES7T4y~aTrAnrO?g~Hm^0405mfIIKnGOByZ+3Uw zaYsl=7%IK)?Vd$RwAs><$ss9z#_JL#$s2th?}Y2o`4ju1#1*9Q^Oi^8*Cs1ABE{U9 zmo3g`WzR1nya%GsJAQqT;8$Dr8f|}#+v7sFiGgxJP+y_u3%oATi{M`wq}$@P2*Q{e zhy%cUFSYy1?Zm?u=s4R+oi#D_?_~DZfIbeilo99)53(L8d4{|4@S6Kig!i{hM1utw zjf|}s?y3|nN5K!IE6%(pFDw<_`iuCR%YYK_1J8jdjs-}3e_mjn8V|7lE&MkQiwhMJ z2a=&+{p4(&1n~y5*_X|}z_!l_aR1w*bMirgm4NhU9RDvm`#P!c+am*HLkWlqwoJmM zK?eHO;&qUydbTg(@8s>rnY~X!l|%M)>6GA?GT-x%7&uf?$T^Kl{X@qnR8W-cqxq=u z1Xk{)9?F#rgiHQRy4mXl$1O+1VvGG%wr4N;O4GqetVVN;lt>PdI3m4Z4Xbe0hbl`y zGpaxtr?m7?l1nc`RzaI?It48PY#l&8{f5Yn@P|k{%@b9fNH%Rg)M8cGcmlV)EFS6>je!uU2hgROf}<)IJ?9FlmHS)kn>d zR8zx|k7$yKUI&*}0zwg6>{*El<8Rg1m_Fg$fE9rV`#dMK$kXBZA=V!2`oSiJ}Z0#-cqcH#YPf4w`_ zEBg2_fj>FW*;sx(!Mkv~a`+&~Dlb0NX;Qi2a_Zc%8nnEAd;vD^bbNVy*jC{+nX!V+ zmEiPd6(8oQGX1^HoXTfH`_etR;>m9S%>Dj+d@HKX+DujIHz2^be?PJ}p))Y_oq8b| z4TMScFy00e1k;>$1a2mxqNb~t=8jc!rmxA}P3~!(OcHD{i8Ew2h_+A9M$>s8H_A-% zMJi4)3PfxfXJ~(8{e}vDbY02ZGR4rIjdqnELJw7=1@$8^3uxE!cd_Hg~&XT92gX&o2g?#$_Y`N|SNRv!n;o#?-FV96_DqJ~2>Ph@jT<=jVnvlBGUHAPC z>r5RRv1Grr2fn3f{eY`58_dMKK!!$BZ%y;5uGD(&Lxtf}^o8y#k@>Zp-U$IK<%i?U zLbPvb54r)`cVC2AP2wi@(yOm=tV@M2s%9D(3C;CWE0#<+C^_Jg6(AJNveqDHi6-)l z7yLm>YTh!sJ*4Q)qJD+r$4w5OFA^$s{a`aR<3O8VlVIJ!Z*D>8pMr+*Y9@mA3*(52 z>=P>|nUAmBX@tV{A38Qnej9xE=D#`);LF}LXgk~Qf?j5jR8GKO+-?ZOT3)}aoKB$N z9i8hlw{%W^VkI@Z_@QBwQGS*siDz-&uo<6}riXrdh_lyTFC(<05||y@YqLio*Vcit zgn<`(<^Zmz&zu}JnQ|vzd-TJIN5r_f6t<<)JSV#=WHhEI7gZpre{`&~ZzNl--~2=; zT#|uTZ|YKvKe;Z|0yZP_RcIIB)XlL$8d=Kd=GHYBxOf@7a$Qw;xwVbqWWq(uG2sf3 zpE?ttGNru|Wr-YABC;SG7z`6EW=3t78T`_^^!v?J0C9Kz%yw-7*o&=D7^7&mK9qrY z@bU%bwz$f&P3he}R4cvG(oXrSPQu zY`}$j1_MKpv0ws5D8e3#480X+!LTVwR}ue%{5zdJ4yXhKJvVE;!2jro7XK&Xg{XOg z@KbIZ7$8T^Kosb1Dli9#)7^*b2XE5v8i{3?#c?gVij-Ub7Y@hE`!8$G{x2DS{1rF> zK-q3CkB zwc8rqt+B8XPEq>hw;7e#%OS-`#cgr7;KJJin~Xi6Y~QYB;A@^wB9lKg0ARb~G2RdK zy6#(>+j!1EVa2$3E8o`I0Eu}o_p4A2mp;wkyYO~ot8ZapV`Ht&=w6MKrOx#CfLzm` zllyB7@IrOe?Gr}={({NcDobF}uhKAO2JeT9>*M1wl$X9t@J3rW*~rF8M|(?i>;04b zN4Rfvt08XqZ=fE=T>jguSz4tT5k!Jdf9mpAH#GU8pqjm3HJl zY7Daty01%YumqOY^)>oTO8&lmIH8DRvs zv`Zke^gGL9#Hc8b*2WaE^OXI7$41V+K`M-hM8ZiAc8)DFFsTO3%moil?DcZxmEWkV<*lXgN51 z{*tDEkdpHQ;s>{UBF5a2J)V8WcxD@Ip~5Xm$pw>M%#&MkN$n@!+=fJRbgk0k9YrDB zYqgbp5gr;0m+=<8nNdcM$Qg4-y$#J}({byHc zxF1WOI`*5W`&gLoZTVoPe63A z3i*+Jf&Gtw`00`<|z^)-qJ{&yWL z+WkXTNau0CFc>^tGbFSF3wSDk9>`>j{L2i;-UC&1!w8shGfMueXPTO$i4O4tHH|`b zl?vEP+mc1yz+R-t&r6WBXCR$;Sv47-vBo$%*Ibc(6UG47{h%W8ewmWSRY1qu3ko)I z%&`e7G7VUa9)WLl&JkuMT_zhgjvW^+h#Q6b?amYZGcM%$8AuIqE}u&;UUrAjzW~W# z{UI_hKx(jsP1dxcRWkkI2Rpxv&AA>*g_pUk-`f=F<5#JO6YrWvb31lz-d8&c0Qt$e z)>T1*nS64&F3xoQSJa5bIhNnvu~@qeW5OroA9E!kuzd8={jub*-IW2KOkIrdCD>8` zW++ud_28qWd9dZdg{A;(a%n^EUi~@_0bAF%2d);dCBTy}g?*M^GuQIPj*D0>RyxT& zGd)cDTp0q6+2Tzj;d>M zh=ym-CG)Bn$%#o_PKDYx6Vb?HS-zYG<_I*px zFcX2%NyT=3lkn!_yI~dTK5NEd7>gIMAr<(xHp@{auJWd+RAt`lDu!I#c)jC00RwQ{ zJpXuPu88O)VDfqCCX~?G&!61i?A`g1L0B`5NxxjGjaa(i?XBo&IN9%Gj=_NnYAezL zH$UrajGR6p(HF7Hw#SW(y)_$d43~M6u@2L4F|OR-TCFQO4Mj0Arlux|KUCnruy}7- zCiE#b$uwI*2kahd>kgHhb?cVCx#rwMrO&#R3L`tNbw9*19?H58-xxpN$p*Q;#`C&7 zBNH%TC(^$WP4n$dqFhqQ)2vgOev0Gu@{kA)dOElni^InJsRoxQuXsY-Upb7Plf@B4 z&CwNKU}ba8C`>ta{cU9!N4!^7z!sM-n{;j!%m?eQUNa$jPJVLnVvrizP;ey~Cc5P_ zkd&xk^49J%Ysa76Ye<0&*?aDm$pg{02EBuSp2cgCAyft)G!MW6!69O2eAMqwi4cE+ z4VKVF`RAu_{p;J%K>>vVKuHp%<QiGq(RH`|F6J;(&yKn0%hE<#5OhSgrC;h^h3C zwSOUy#Qy>&!6cwU0CMeK=j_2tq^s-Ozalv9f3=>l?EjTGGC;$qK{r55*sn7bR|W6~ zq@35Hw*1gv|2)Xo@WnSK5Iq|I|1W&O1!2DjF@WbXx}8aRQ6o+taQ#B`lCY(a+1zbI zSCJ9y(49g_Lp;@Rfm>8=AFqxdG#u#2P8GlDRT^DcRz>8MsC3eg@%5!jpfcY^iQw1WXNPb)!%WQv7NK@#n=9 zNgvv4p1!wOBbB6lDSIK5{ILl|XE@jFvoJjYhG|{H&$H&H3d)0+g*=Ke>}9?}J@EEP zXydC?BoUT&PO{Xc1|m<6SQdoX5d5X2bZ{dOPwji9czAt-Rf#M6`O!P39k8tR~2P`%6gImF%wmMmdP?PgEkgv_PTNLJEa!a_+t_P)f z!hvjUb`965sa)b^HzqOk~ciL~3VwK}#eT@$Wt*(e@2-jPy)8K~CMewqQ zWI9zVY6Yg4!w*cUfJQd1M%oC(Qd$!S_B{m(>N${lo@!p~XI(RX4|xV$S~?hK8n=F+ z&u4juEmaQRFGJ!I`UzLHPe4P2U)u$M>}zCwFYSY1G(eW7}%b*w!7} zwr$&NY&EuRzxn_AKA+E?HM3^cnsc4KFBo6OqD*S%2hd1bfiR#&&i`eh1Yr8t{3a%= zfv_69*(D)1HUHsrUf4PTJ*sMU3+x4_wH;BXrM2Q(wua?zp6>N*=Fq8>KVMj|{@i)l zm1${%eZ^82*6YL8-G&}`p0HN*LBI4?5py~WuEemh+Uyswea#;^oP^WA(E$oT$3C2{ z)USW+7oR@z6Iu7A*8rd2M3%exJUan4F0OmWogc5&;DjBoyEUtyA<9TZKpQ@fbJN!I zhib&^>TXYW;FD*CP~~}X|0S^Nb^FD_b+=zCF|<~OcFyRYcF5xqAjl(X{?QE1i)5o| zW+Cx$b84d=No9ChmPa)IHDC=!+N{&`cSah5-|D2|hiK_L_GH>mke=K%+T+GS4>&F< zM=-tEPLXk=tGa}kf+Ds9g8D>)mk7_gGEA&oXeRgnJ!tchCCmOLM1nI&R;ok+x8Z&l zWhNP;mF_ z=TNNuwSPX%pRS0pu7chh4rlv}XhXpm<9uS)texpvhr1719gEH1)j*_Bg zDG@g*@{3ckD+aZygOkI#a2!VXVr~UW_csuh+oPpUDL#Y4r~@Y|J4_sV=)r|{_|Fnm z8b8waJ#n3UgQDhYhB;MD)Ur71$80j%*<%@X`p<)n)5z|>+){O5Yn}CEf%ZSyvcnx(fz^6BLHw=A*f%*N>~*Jw+ZW1dvRx+NMsy7jI~6FZQ(KNuIwBNV)Z zV$1{|%+k-O647GJ!q4V%INEi~4+4!kbPFIM$qAsFC49{ke9gl0^>ni3ecc3o-L!o< zc}Ica2Sy+J65w0@?2&f8##&p-L!8H$y%U`_dU&=n6JT83sno(<2CP!1nC2;7*8NZI@Z}>NnZ@-)szmCYD|9lpk&6ofU0Kkp6r~PI*9>66Gau^EE7f6q$(1pF{|9xl!^{?cA=0Ue`7|CuT02<(zMdN?d zVRuH>Mr5BY2YW@-?@nn&rRTCm@p}RiF#~|F!~~3m_j?_EEOe?li3M5u1;`(^wNo}& zQua3cc9#o-_3hyl^vv7FG~xcs?ON`k`nm9(WQgk6CL8O0uUq_|1~(Vh?##H*D33~P zxMGZtz_gBcryHopjmWwlV0K5^M${1Ls1cO3AKGSkb93|D;Vw~ecW1}*b1{4T?>Y8- zIhShsA{VS~J(wClkGuukLYk;T_DyZir-4pL9*=W7^7?sh^~p#q(KwM@h_*Xxdhgb) zJ;0@V!YF7o*>5vZ!pP0s?Rzg)_C+2yD!+NDZE5^8W+o%E1YdzMVCNsa`=9j5jph}{ zvRIU`++jlkqO*8#pcVmQHY!TdLyGp@8b8P)SaSTvmoP5y7Y9AP`tIKbX;Ix81uhPe zB|=CqE<{Q17qnNM6!>H6NARTjT1|AOZ>LVOjCSl4OYJhLcJVnD9rVA#s6;wd;owsY zn#ybEkbx(XwR0tozeU)sdEhE4d&)I^z1@&;*u=22AL8#9^7KjF9W{du9v$fK2jLaXn3@lK{+Vs~7z(PDvFatH`w z>mO^=t3}gfc9}~QaVC-~Vp8HIu`~A+MFnNXUG#VXh)}7on<_6?>(AJ2ZV7wSY;rDQ>z;6ue5cPI5CV!4 zmou_&PID7})5z|(;zX+>!#AA>1niL^C)nj!4jDM%T-qC``cSU9MV>}rGn~ozmIJ(E z3au6^Dbt;1P3s6Dz;CE}1QukZxV~?ie?zKs5o!I~4z%|Kfz;ahH0INTPqKyS7q+(+ z;*{F5zhuReG~M~jfSfQLPzAbd2ROGk=<%%q$QukXn*T#E06R z_{0r}wW99~I4WpM=~QOKY==MD%zslxV!M9 z3Ozw20vq{C==F_JU*Ho$fH9ZVayo$Bk=6+h8Zh#mBOse|BMdkDz@Tk7x@`bAF{pO; z-ah+_VH{%9@bZEL{;QT>7!JxI=Oj!}?t*@6l6&wfCmlIHlrmH$iY&Pa9&{Wril}#> zn1s?!c1h0hFzjGx#e&tWHc}*Ex|bCcCY2QiPzoTUY;~K7b71;P*zEA@he{MhA6qhN zfqt1m9~IkZ*A5JRRe>WVtX96LU(Z1mYJXs!z`N=MTuYPxqK{Yk#kE2Qf)KSfJ9t@1 zxfEU(x(~D_qhDzb4A^yI|9s@QE_YUH{@>6VD`ZN?jSJsf@rijwZguWJ@FtfzBT7|HW2E+bpf{hIlaQ7fCHYlqE*prr-L^lMr^Vu$9*829Fa2TM*Tr?3PW(QgWf}7vb_8K2 zk?6iel$|VxeoBMal9uP60lNy^ zZ5nYrKXS!~_TRr#b*&vG@iffu+?bbS>Qo_!5tD8nM2XpU*lHz^UT{%HxBEiro`RfN z=M0~l(KvawY?OPd>1~^~&ZyK^NjwOaPDQajlVmk+T%Kf!5O%^bp}N0MMXE+^-T# zt+)Dyxe9o|*qUC0Kpd8uG@B2qx@mGu&uLfBxhmTQc3qh`0O^K>Wv>Lo-XM$vk}BrO z{MfTSdVeT7!o+*y0+>EgfPPL)HpUcs#4V=l?6LSEC<0VG-mA7*d@Svw>?iZ&*pUc4w;LXi7<>hV@yOw=7b6|o#{>;N6X0SHaQ$0)95*Tu zCYw0SIRCgTsTz8=_bWxd1$#fLm8Fra*U>!kV zy;(5r`j|gg?zP;n{T_V+LY2xtz|L1FkN)lY?EkgBf5`xJ07&9Pc`4M<4&Ibsax~&b z>g3vu|24+h|BaxZQ~}EXz)r$fTYWv8pyuDz9RJ4RUdfP+1m1OpnqIn@G?1_Kyz_&P=oZ@TvXyPh){MF|EYnfnEXx;e%XPy~Y(ngYP) z&%>T1Qxq*0dPf?ea1i~!(*Klo_FjNr0KmX=*$3PSJ;hLRFBU9%GRY+*Ml)3KSNtO~ zi~$OTHuP4?u=G3hA!!fCe+8ibHTRP{qXBfl^)GCK3VhVdy+&h2+rApCJ{YlDFOW$; z9X#o8JO=;Xi#d#18ltTIdhqeMI!H&UXu#u4?$t`+6F&H>c6svxEFnHUG^2y-)!F+Y zn#i7YL?r9Th^afPKvLb1!YnVa@!6;=?G452@nvV}dB6QwdYEZ+z!8&z>1BWC+y)EC zk9NLfR+S&FmaI0HI;s>dEy=w3Xj5H9*PY(k`u0d)y&?0N@#*Ny$^U9wr0>P4u0nL4#zxu%^^!iau+lwAb}9Jq7`L*aTc?g)Nl_Y0 zI_5@y*%;M{X@GmSd3Qkhyb*4eH1gU-!%^a524Gdo!&9oR~nIy%~&UDI}c{%mbdN*L?x zcXp=uGBdL#^&%^?OO=KaGS6En_qdBcz4qm2MAoZ(N#bYH%h~6t$}pUj?_L-11Ph+q zEK8bcs849{8LduLo^>V9Re$mWS!xuT95&NgdU^_8uF;4xq+u!Iohfd?27e23;xt-_ zWsa^Z1Un;8&s06zGF=V2wj8#<)M%h+3rdRcc4uSXyYM)l%TbB?uPFtq`p9}s%w4+h zRC0f3^hwaeR)ClR0rP!F-Fw$nYYAzL_M?*($ugD$(ZO{kl)r$PcBHEV<`a3-JF9qT6?7l~ObRa(#=IP$~=dk6L0Y7cwHU*8~6boO-y zUMlj_l?w#)o7|U@oC15sfEd}lRl#@&)Gg_CWv*rf>xnQ1`09!5#&|q>eW74r(0HQF zl!0h4hiZeVf!;>Msc@y^5}F-an+0NmEvlebU9OOS1ZBB78g7s z6sS4b z4AEeA+08_YNPYDlmnv7$#H7AMOj1!9omN%(7>LFmlf^P|o8zk0N-txDQr)H8oKyETA?m8>Wo!2uAj|Tl1!Wo_1zPC}MweVx6`{S8r#0=^98N~}B z*+bFD3|sj#(h|WnWSAlZl8#q)zBH(*U+D{vyG(k>h}Ev&8FsNH;Pubv{OzY;4aa8w zPy&O-|1KJZH#9uABc}8rLQr>qoByY54ZQ5+{oNGX7YJe%PgjlQb9vp8zFa({L#6Dj zSfuOZR=~M#kE0(Ai)cT--lkpEZc9*6%ct6*ljPTGG<}E%O*U2Yhp-XhY|m8+T(&Bf znc%(%9zKz>WG35$q6KZQ)@@u?v_3OuZV>9|bs6NmuYa+AVSe`esA(NZgAVbXAPAMI zq~KDm8xYxh4OiAU6_Ei$l?P~QJw-*nnJdpDHbGJ( z&mLsKvnP#_=(Z{6+>meR1vBA9KN_@=gfED9(liJ)>S~^MIiED&MG6tDbMz4Bz7MOH zu)6o`z;XQD0)HM|Oy4thuKC<#e1E%-tlL|~7dW`?sxm`AcyOBydEe!YvPeJ_5dF^5 zICC4>RG#kK#7)CyTu;bMkRWSUB$hvD=sdnf>fveNz7~ZX88A;#d++4+6?UVfls6?@ z>9=0D!xaSQ7f}|FF&>qPtWeu+J72Xn^h^!O|3zM2)Oxvb7UhHiWZ%vm(P~$Dmd0$) z03+92YB2e^#=15vO`dLks$mo2Tb5O*eOn?~_BP?Vq29U7PALwleWLx1clj^XELuc;P?KogB>EaSEm-n0U-? zRN@_53EF*Gero(uvWLe%i7K2TA`bEjN|Auq;fNVPma^Qb#unhxWkg-?z9ZAt2W~l5 z?}+mu?FY>S#Tc_B;)!4V5fU1~=QY}Bq=#=?frK{? zy5x>6W_AJ3c|Rozi8|qfB>4EM0T?@Dvh~yDO{Z?W3IkWC;em0)6Z0meI(6NXx*0E^TMfe->5slv!U`>ommWy{Ct?Z$5k)anlwZLM+VhR6G zhrSn^oH50d9Do#T@s!(HKHjH|BmW<@sbHBo%ms5s_f9tX8Y*U3oUWNj5b_1m=9M{+ z_(J)bY~=tOizv89ItZ9I*5-S9x&HIW_eK?RG&Z@c+ogxO?gn|-(D{_m*-$w~T}E4e z%8)qp(LXjo&sW}Ks37S;F6f05VBzmw-~Vvg|E!;yLs9{rkf^>MJQ2=31AT??kBKix zht7y-|DfIWDmcdfcr)A8UzQIR*?>G40DyPzNYWBf-E`SOqWU$StsWeH#u z2F33QL(nuD-j$gj>*TW}L`(Z$?U#|k|E3alwSYJnIIiox=h6?TH7?rt|5m@ex&CwA zVs8VSL83aqoZ;3JoE)z)$VI+jfqv^l{`Wv%-d|sA&mMp)0J@HLL9blBKiO{N%T0lq z>Ho7ap+^CGu*j%a%marD0)d8wA8^SF<}v^7&+^Z5i);bl1prjb+S~)NM8%5#|JwhM zI5-pQ7p3TbLy?aSzzP5@_c0(#Hy}1!x-cv{^##ekdnoq*s{b>I`0~Pl`6}i;2KYk5 z@Nz74)8yf){d>@_`3q(;{g+LDGu|~|6$UvIDFxPS&q1PH`W>&-;=1s^Dlj(oWZ#`H zc>cvp3W5eq8&-aR*L{?D{<{hL|DspWz!|?Ry#90NLI;C=g+ewRp_$O9+xN@<>i;p; zvwi$u?SJ@O0svbF17o>V)(sj3Cz?!xh4}Sq7+L@GRJHmEg#h+N<@qmGbs=>k3XdIr z_|hAew^zMDToMeEv!Qq6|E4zsl&}yhq$?oDtB-PS@vb{|#9H-G_Do`VUtt4bFAO4$ z$ik!x#9?~*0-WtJU|7ze3u}@zAuPEN3#x^J7QQite~jpCDW&n07vw7v#Y;rAYXoZN ziP6CoX607`g>;jFV0O%LQUaNe8uCA`NL%>}Y7^~a-qcC@mbU6JvZywz8g8Mliw0(qQOG;!C$^vnfzwu&Ks4>8lnM03po+23D(md@ zB&LVLQgK%wWv`io`YKt(;v4<&Z|-Z7fX9?T1BJy`f}UakrbpvR$6%FW@7>Fz1a zc^eG|g7_)l1JDm}6|Z%-3ijDN^bI}qY8WawEZFX}$HhXA8cxu9q3~3ATUhs&gMwN| z6tuwMaF`L$)Hyj7POF5>_i97x8ZdEa8zzt!h1q(6ECve3x2BUJ2N_!U&%eeBDEC+ zLLvz1RW8s<{}M-HO8T2@4}uYjM1;=h0rHv?#QN44gg5p8DZKid=wjoos~w5H|6yfr zwZ^L!`07d2^>Ve-4Rk4SeSfsBf5-SZ+t>u&o%L;a*L!unx;`HFr>_rtF_{~8pKpBJ zz9hF#Z5LvhE`-MFg-t7;{8;vQ2hD8p#v8yAj*OULXX2CvE8@&2SQNub1;;H8dIOhD zp8EsG;+Qc+BWp=Sak#}HU>kA(&CxZuILN>Rr0pr`XRybIi;Ul9fJ^f)bn4l+$8;YD zdp1l7bc7o6d*E9)U6hD$Z`2?^Qx+C}S4hjO#Q5RVE*4gpD_sbC|2ezsJ$9E!-|ef-T~zq+#=wW0h%djk&E_V) zUEe-IFLugH+PwztzpU$@H)?cvis*q_UjblvWS+ln12QA&rWNKXj5 z(LD^GhE1lE9X_-KIujITL1hoi66E}j7LI3HQS5H$%1P7xI2IpV~Z!o zy)j-Ir@TWh9l{~?375OqB^tC|Q7ws8784H0dYuYnrLDxOXQoqT-hU^cQcC+(m%aZf zH3@O$ zfB0)&{y(x}B_reyU?q-@Lw?f(Z?~TqkCMfAG6kup0bMQ$O8FC1K(L`;uaJQwet_q#VI{c@pKs7Xfx9%G4EUyQz5tYaUl zMAxyk*8||2=ex1ntrHuP(8aJN8xrdyu)XW`{Y5S9l}QQ=`1x{}4(WX&-bWtW;+1`g zHMY`!lU$y@zo4fER<)mnT?H^KYP_qPSZId6*spmAA5IM@#Aqiv5#5%u&+KeqbX9{4?%9}apSWoj*b%qKJj@omIS-nl3> zbUC~D%Eet7NI-yqF4gjIAXGyJ59s}6Q3qC=g1Lv{z+ae4^EWETUBplov&i1TENk_L z%<99Ts*`ZfSlgdP2;F`nLEcP}`=4lm+=~k=e7M1G?SUTl)4@A^dR6O=)~d%FOMu`o2{o{m zpQkii6HUyDSxe5PX7H&x7j8@^8;guG{;)KfpQKE(C{MYXcj(&?UMq7V%J?aX!ZCFA z5c3nX=0+f=YP3^p)#6QnrYcP+2!SSB!VW`5c zB2Z=*7Dg`Ip63}psOIlf0J5s6rr=hCtK2l#2RV&}6z0l;#<_G+bHiE=cZ#Q_2In89 zQ+I4KEs#>fdhC@7^x4f6%S=^~a1(lT2Hlwsv!k2Q`F2bhWD0_3m_-4g@NdmIkZMFC zP9_j>^eR3Li$R>jRFF)MgBef(Z5E}S9H9F0uP)Hkzm|pW%I!r?&t=8ITgiD^N;U2k z07YziR>3`MmO_{^=|?}u=gnj8@^aXKu(*OyYpY#)0pPhnf6=*uOswZgy(Uo!xa(oa zqI(UmR|U$OC!Hb~ek4dII$Hq9-BHXz5%r%wr%Rxw+*5W`R0ljCv8|lEj^pHb5b(^w z$enirB#(G=a!?p`P`hGdbns=p72EY9j7CJlmUW*6S6p|(A((WFrB9*=%n5&c z`rF6kcvJo=Ec*kc){A4_;R#I>TA(ve3W6to9HKYp*j{e7Z`_|Xoe;PLnH57`733vF zEC|bUF-e8tzrw&+zgMY>!c)6Eci<0_cL9e44iMW9e|9Smmz-thSh=3En<^ed*Hq-JTLrX z>O1|}rx6$&3ymP^@(mnplVDo*ZwG>>#|Qp|&={d4G-V+L#78LNuz-;+MBSxIrNeAN zWR#zcnWET+)$5*P%D>UP?a`)ATM6W#ECI8O1jA@WEW4@H$W&jVWE&SjJ zPv=KUvdSDC5a^b5vmPSi3A}m^#u*^w3uQGiKt@up--tj{7jIBK#7s*x<2D}F&s)am zdK_vWV^?)se-CH3*6XyZskB=E@*D-pbJ={nzwuhIzBNq?#mlu@e0x`OP7eHg-h6<8 zIrwV)GQ1C`H=FkgjrEtKI>5w$a>(wZPR^1}sg`=Kn2H+A*|rPX9{5rEic0QBvNus2 z_a!VXH5mJ(la!U)Ca&6)n!N1}KI#5M$9OqM5Sh1V-j_5{Dm$E zEh|Jyzd5g=(y$G2Xv&CYdy@hzw~38BUYg;b=@w zGY1aOIjgaL11{{4l@fe&F-wC5mU=I;kgc8f&d#}Yy+ryuuqAN+tHoH!7j*1BWU$tj5u4U+wkJ;*#d7R3$41M)XX;c&Q<>%1vzKo50%kE7oHa7~ z0{?Ham5RP~^WaW`gM~?p>8hNz#8^{NsaP;)At)2+-OcTq(csYHN6lbjN6WFk5Q_r4 z|2qlu?g9KJ5S<04Ie-u3W&fAbG_x=KtE6^TXX(gtvv$Aar#tLweFH1n5ZaYb=vCY~ z3?>0v>jvWVYBKDrxX5Lx^H;`SB?nXp&mElbtuP66c)1`Lv7dUdAqt1nb?hFw6?wqP zy*@%!Xr}n;$udd>0`X0lD3hf5%D^8_v!Y~5AIF4OU{OvmRK~Z}UH?wIay{-}@SFzy zR_ZdDji?eeW87}6xNQ!WR`MK&k}7}#MmLR8JB~fBs}G%He6&^m!^8M@JQQ>8YH%vA zbS9ogd1BisP0WR#CgAV&;)t9({>ODlk!Ghise&20GBKF}!&4o*lO`uFn4mI|e$tOo zn;J)t#28K=bI3*p`Abx{PII|zcnjs%Dv=EQyOVEaff-@kK-wshm3=^lH+bRv|@W?dTIAU zUcISro7oci*wiGVs4#!!(qe3r; z#$C%tvYI$o|K&0X4^t^vYDWz`OE@M1gS)a#S@o?*64?C*0u>B7WvUpd&AM?ua7oIE&C@A z2a)mB%MT852a=AEos7E;;AWL7sUS&f%Pi5Is1j1KUa7ojfVuFGR>thKZxid4rf>a7@7y}ZCUD5boa5OcK!>H>wKF9pjJAtf zarkiYzm*IRAj|5H{fg{&i)eYPnMmhp|tdtUj zhIA?LbCYWJY#%+yjMO~8oTb5oQ|`mXe(=Ppye`c%My~FAFOpOk?#<7*ea;!@eON(B zbC3!?8W@iI`&Mam6)x?@<6wNGo6(-@U#4B`WT1+#uy2`H&HQBMzXCfZS6kRpMg3_Y{CAtT&_I|$@&MvB0w`B zwO~{G+Hu@RMZEp9y*#yPbl;J-yb#Kf)0%@Hn~SGFto>p9G!BGUb+T)_@4`w-B4yx*1{f7fqEI16b-kPbr z2ir2a7_c@QR%;1-wc(9dt2p=A_lgz{K2B(~kvS+YPK{OYp?BGoUlu1z7Tnq-3leIQ zBJz;+d7M0XSR|HOD%iAwaIMM^$SiHv!I8!yB1B>_K&Lu*TV&y^M~;r5X5$_X(K`1R zN-fytH07?s*1K9JHzh+TB(NE{MOBy6f}>9!6hi_5KXYWx(2~9Wqdl2E1HR$FqP(BK z?beF=jsZ14N_bubjuA&Nlq&gfRUJj1Dy!ISq>l7&enZ)xlQ-lGg$!54|>adV3o%)RJe{%Io9s`=@^ejg~V*dfy*L}OPkW_ z@3F)NfM~f3=;0CkK8;y5LeC;s)E`pO$ArSZ(%^g2={xZzXoQMw;GO9?0tlBUmS-ay}dSZnkx1(on^ zpsDAZFJ^5QLR5_h1gs7xmV?W;49|vRWH#eLKx6I$IoQzpypZihrIWBnJfkep2g3kMWe(|{51Bd%5P zm?oQy_)QT-p{mQu3@sU8q)MrXBEdaby=l$zge<&zO}L09Bmi#8()H1XcTj&GG3Cws zZ0vTk(}>AD(Qvb1*_tYn@ywMaGWuKbWQ8g7eZTX~%C3)-k@g>M@cgCQWZ>}ILO~-rL$SrQa0zl+<4cImeSRag7(mate$ynE=;w-4E&tRzmS8 z;xj7hL%gt(q`3ZAz+mlSg9`q1;!4iFqGOZ&n%19)@P(^f<$Hf?^otSEXQD__X%IGO zlE_@gE&l7v@@!pUzmM|<-=MbHa-GKwmCXZn#+Ckxe<_8Jw?#MRph?4;UNBBywW zQj-U6!X~|P{eUZ$72J6d*Jk36(7eVf((NW5gOCJS&NCdtmsUAww$#B)53R&l)1+K& zocxnmhv4-?sh$xvm^j-4ksWl^3^TZ^-}N5b*$c3&G7N<6qF%>|euI`qy_Z#3L~HYp zF#k@iRA5?{(^=Z%_ez*P+pEu@nqt#v@ts>KwZAfuAjAakL@vz3{LbIE|5qb@cmwHm zdqtNW+K~eSK1R?+@KSN?9VQmAB^{I~S~TVyt2~1FZC$3R%g#l9W~nR!0To(>dP$*8 zi+Z%5ZUndwCzpg=yWq+=tqFjIJ zCc0*khxG!MWj~l8?)QSn8~f{nw}>|S>M8NNmvi7wgteA!ukvAV7>kCtX5Rj~Om|zy z$JFzo63Nfi`lq{>Obb7;RX9K4@m|w3=!St|Jn*(x@r3W*@2b3Kbq6)Ha0E}P9`%zS z2W#xdsm$}S;Uh8Elk)7wtow#tAQsN^2`o;n;Cy-%ZWm3J($1}n~2~=>L#U~71-6TC~^S?1ck%5W65Fj6uB|ij3 zdxp~G?yN4CyysxiW3+$G*XI+2pBl2*k-Ld8-zF>ZkogMdGkWc&r7AhVq14zG+cG9Y zQCb>U7;8Ji36m4A5v~{{7nlyHH$f+buvr2Fl!{S5glqAq=XJ=LHXA-6wizOJtpQ%M zsDA2Pa-eEIIcq)#7b+cv%udvYC(NC6lHD|VDtK0n8zoB74yau2eN7Bp&uIM{i)!GQ z17Na-tnr<%mr`-p${~LpDUzo1(rqHRIq1ul=j}*qeGt0lLq=6sTD`RdyR5b5kw<+c z1H#!_pO73zbh1*)Y@EfxomHId$^RZqY9qNZS{!AVH4$CzCT9<)_1Ea#m|5@XRI=(0 zZV7>FvSb2D)PY<%u$T*qmPtL_&(wkZ+T|%B5a#Pwe3g(4<;w{hJ`YHy>gnS*Anc}> z2*5~+e2iNgC%b)DzVDr14~U$^P^|zb{O$*LuYdSB5@2#f=}A=};rC8%^0P~5bal9c znlWE>SJRlS*bK{|osH(Y9&2nHgqSY~Hk8uPQzqvc?nY4(X}0gdrG617xD`thyc*_* zS7LuD5YZlvnH|7Vq=Y+LIMp`5=}k|5XT}G6ZUK|{Q>Ra1Dh^_%fsTxADwq!ZoAPVR z+Y!Cg!&ZaK+&54nTt-Qs`5bdlgo~(YI{0`u#HiTtr@3GRAs(sLPL6q}j3d4<-JZt4b1&3hZGBzK~I(27ayf`(0Bk$nc^ zgC3&v`Qyi{H>^@Y9-15Vj51A#e{AsudAZR@&3@AQ-pIp@GMc0ZrzH7CijEl$?rcDj zWK&RDsRrvRZ3dPnH^?{&u>lASt9a8qdAN`vYibHCWq@me);S_J|7-LxU8C5=$C0- z*Si+|tT%(_^VoDKS>ihEVJkCIsNz(tXW1yCHIO4@J5EfSE*yNJvjh^RS`>#zWw(&h z-oclV0drGC$m;hqr^CB)_`@sxXaNu_?9I7WAz?^UB7+MgKTZ^YHvwOI{~Cj?pH8sk zzc%Y$fRy8xS>@|uju&L*(Z9gEXo$gKWuuMqf3{9K7g_E~y|T@;>YYZf8@P-#TP~d) z4R=+P!OIVtK3nVt;J*Z2akd?S)O)TNczs+`XzT&Hqkr{GEr$?M7$WX*5@>Da4ieU~ z9C0}(e(!>a-JWg$t`Vj2nTB)PE}6&?IB|~b#MoS`M`GY?vK(}@0g<%kzAfkzQSY|> zuHgOYVFXAw3Pe(l(DdaWnEK1*(0-r{y;B>~XYgA*nL!^i)*rSj$LRnh+jksE5|%o^ zc$}0sY#WI*`i6nq51QYbFP3G+a@a>1g{Xh0_!%az{>01I z_3`&H%-*kYpk%&$d$9u%IpCEkB3kS&@9HE@(&zM1P0eOA^Tk#UE!`FmrY6dIlcZ== z?qFCB4978~4SZc+0j&hYdIKa4_A!6ttXm>sv&%`iSOvYkX0p~=i_CSN%!R&~I9^C6 z34<)CkswisLy`5>%dIDm+Gm`#yfk^kSdc@bdSb%~n1|PZbkv2Lm|>=RehaZ(0$xoS z{=DC!CxG%!^Zfi5cjx?}d^*-mXbB8$zTnKuXdZGa2qqfLT%smdxKIJ-za znQC7$Mb#!s89ykY6et(wv$Meb!7K3@mB9ZYrXo;AB))xgwR3~fOCY2+uw@?*mh(3# z&$4133J6M-}XP9BBff{-?s~o7nsbYpUq~a~}qyjQYt}P!a z_LVHG^@dd=J0vT+7}~#>)Ka=q&Wk->PwCq+ac2za=*!6|xQK^Dzk~RhJnPb~M%u%h zAF*t_M+e9ZQ{&9-yEDlAL=0FY5{wiQWG=!-4!4GZdR`sf&yJjlj7W;koRJtv-mPu# z!1FIQDxa+rf$V!AmT#`J2$Ag#juh>I@n-tnBU^ z2~Y=qIS#mb#~XbP_IOG}4g5fcD)KLFk?vLPvDqFY?;g!W#j#V@jD7-ouQq-9dZ9S@ z>-tF>2uHX7D6WycmAQcG8o%P9$=E*4^c1^E3)0vvCU0 zh$c(TET)gER`sVx;QfO0CWbg8dmUCMO9BE*cUY6gRz*t4u2f)#0I~^=n;7s2U^v7X zv-4N{hwjux)kar0$w9o8B9&C2V@Dfb0(z=@zJUy z&mnI7yNzwJm05aAL`iBICyDM%tuvNPI`hWFo0`Q&CldTuJPAysk1D)B$-_~Sy|Wxn z((Pj`%S*KN5ywAmlLk_^GbAx;fefKDD&&HR8rO4Yyvp;trox!w)750Poipn@6SB=R zPWs_Rx-aNgN+T}p>|1(qP->T#e6BPuxHKLLRb5vpa8KWKmGo<>V9AQaS!C}MB}TuG z1%yPhV2&cg%fpw=!AR$_+Df}V{g}|Zi1j&T3PmNIO!%Ws25ils#?emi1~T71W)25a z(TtJ;vdE+*@X8Tdgb+PrnQ~DU*x;M?Rn?5o?F-G*Y+h+2A9XYm*RQ|l@-9v^1^#q* z-i)Bls!*WW9esYGU$U)X^?ZPdgxIaCE-GF3>aCZ6<)IcLjIE)8Czz_MXfO+pb`m4m zH6S{yma~{hIoX$4B9v%S1nQAX+~pwxGfVzZP=hH%?E-aCJYnXQd5t4qHju48xVjIf zE^T$ur;#+HCy~t!OeN?STfKBCoHvNxjw6DvU4|^KJNiTtJ#=`~Ol4!l1E%%*=gcb6&RQ|C?7j>wW%o4*ztO!Rnq^xJH<(nHnPjOcG2zF_>FeozVS=mk zsHc7Yw2>IQ`0lRO*ROB5`+nA62~E(^GId)ph3wB`B)ZIq!1h}9qdC!=nJ-@duezl0 zRV{6L+EaSrFk);0kY?Mf@pYmn3Hu)B8VNbsSWu%mbFy;MM4}tXZABv@9o6*=VUot) zvRP)`eCJPcW)lxgW3h6GqS09gqC`m;s2klPhvK3f$xk0wVP6q~+VOkXi2B`cj7Z{y zA#N%&AR-BEgS1g9S0jHHXX84$0U*VLm*hiN8jAzM*eEcLKr6}!_Wb8yr&e_jgJ(@5 zs#hr1E5Y4BI;1vR$}&6CM!x<+!%V}MycLApCf(sRP7A?u!t%f)$MNh!`m#zCY~M8B z2#Z?Ny)7-u@kD5|b8qV$<|sxhTUeRLJ@PfA_}n?Z*mSC01?QsmHR(9wYPe_u5jRRW ztKXx4wPW<}fYjB|Ap64^s(*j{!hS&YLuF3`X0Ue_y!7G>xQFXj3x@%jlDhVR-8+ll7~~H%KXO$1O+_d zsMH$X%O6_W&4n06%!6R{0lLv@=_N8Yy(97Q#Wm+xNnk8eC7wXZJrO}{hH%Qadw?3u zapy{oZ1h)nqXs{tQB^B+5H*3I@e?tgT}J9gSVM-lyx<1w5Y*FIbA=uxt*~I`6c=gR zex{O9GbkCm>grkkf)8|AscicYdT$LI9R3yGqqWa-S@$B63^Gkv-1ymxO``__M>Qo! zgDbV}H1Pb}up#~PI<7;mliH5g53(NSmN1w}h#PENFYxNV z7r*GCm6Fv4U!@d|z6I_YC71uwO45xE6h%s9Q?=Br;^FSaj|(Q83^AM|U-vaG3fxky zbClng%lr=c*Dq){eMFjFosC$@NA2XOSCVs<;CY#K*&nFJ)CK$yufnsEp>ldlSv+9b zV!(3Gkdq`-!st|`KdP7P4$!VJOofImi`kh_k_uB~DMq?ycX|1x-o-@r?X&v+b0T*v z+jmISY0GP{RwGT3vX$?L$dIwRM{M9*1;>vx68{LhF3fd?WhC@PWO~(E7gmsoeMDztkJ+{h;oPZ`$nh)4dJ@RuijK2rFgQ z=`KOqP8MAP*7qO~o@|$Iw;`mCbY|Z$SNLDGr_K(zPvV%1+s2!%rQ{z{20G(s!i;Iy<>a*a+pg0-+E zqR*bVM`^%0P8lQmwF7zDipPJxkn_*#TLXUk_N4BD$WMT<0X#wv-L!gJ_>)hDTxy0Q zhTnT7kHkQZGoTGU|9D#Uzlh zAhnCu$8zM3M^nZ0xYh6MUkNln};llwM@>$gOr%qd*5U#ZvA)lJi<}AT9B~+ zAal88ix_!b%YhL_e@hRNE_}z>yDMCIr2mdmMB~@~>hdOaeBB*q1ho{;5I|x9%clu9 zi=cmiI?A@KapmmnAwwZO^s{f^%dQQ2#qEaTA7=6$fyOB2>vy~4h^S#<{GT{4p-NXf&Jgo|7^~5%K*In# z&?Wx~?mf|g_^;&uQT2`CnQTF~v27a@PHaqUPBgJ?XOhf26Wg|J+vdc!olH34?Q_oe zJ@?)pt7~`f)z$B>>UwwAUd8rbp=!Arf-)TZAGNX%@SSO{&i|eJx8E0&9)cPyhD@LN z??dW!2(O`G**9dm5!?9xCH+%|)ZAf;umcBgs{=Sll>A})-yHkDN_EqA2xf2?;qd7{ zu}#XvnDfcMen2J@;pF}g=f5>Wpl{f})v#&q2(NGmBLn1`AHdJw+4zS9G&lRFm)a-@ zK^+#Y=v_MqZGIgUCGZ)QDOpwTKf*tn=FJ+x2;9){%O>UTFyD8>6#w%N2+9FXX(2ec z{;5W#Z$67a$c4trQ54BTrKHy*8SobMQ~m%qJO&;9ONZcM{kJrDBo5&Y3V{r=Q1YJi zEEDy=x?ymhWEG&9EYkne|B5~NcP=_0xeu2ZBYLRnU-Ds>`}Z*o!i-xD zL9IOy(xrL7r%;E=6eBwT)z1D`a*{^sj#xTOE`dCp5&?AiAUSnH#zvgjU>Tkz$g)v~ zM|szt{?~|4^YP zO0zl-r>brTV6*O{VDVHv;Sy-v<^5hOd*9(Z zI0h}}X=oR2BNF$#Zi~m+>{XND6C{mBEA#wC(0C$lU4Y2x`yf0RY2E@nT1!0*gOk>% zy`Kx6asb@xd=^|8S>w?`ljKH{KTR|zB`x(05+clk%NK=2ej@}zEpZfWe~|gZ0eZ4I zu6_`k+Gr-8?a&6y@Zy;jMuT#*QRr+dyJuAq(lQf-HOGle(d>N%adrMx3w!!fT#)^ z9BU+$(T2~<^Zo7VM*9aWro@2=%PMW#5KJ#G&AdBO1`i+r3y0K3DH39`okkJK*Mx&V zDF|+`xhW739$wQWo)~J$e}>WMe@QaD9GrF0g(wuI^Z9rV_bRyW_eka@Xs#RdCfdzU}vum=v!!2Gi)5_NdMCbMD5tS)Qu z@$5_=5ks?xtNViuA;`oxctZ@EtOIAiv`x4TM&ZHcXO^Ber1%@f)chc?jvq9KLTe9= zy~gyIe5TP*68l$}1>WDya}~t|-;K7h)iFgn(R}HZmj6C@{@I%l&3fJDD9G`>-V4uN z`JqVyB^Mg#S^*Z!!GnGp^>aFRC}Rw1ye-2_r(|eDl9=3_egd>nd1-3h6yB9rL@a^4 zdG9?h5a_du!?iI;>#z*znxXjf0`p5<2AD6To%}sZ;UUuMHiwvko}vQ3u}j*|<`-m{ zNa*BXGf@KDIv0nh4v^`!&5o)fFR7EQci<+;Kv?$ji9$o`?XFI zi&Y|Vm#{!7-*`>f;b;{O3?;kk0&ZT1a}E31SXlQF%?+=hx%$cViUy{t>O#sk7l_RV zX!}#v(nvp>iavkClFCJq=|!q0dH?OP+C-JA7ZDfnRdT-f&M+eEah3f^IPrPL{~ui_OmL2WRt>P4 zb21TfpfGa!15#)X(bz42&F8#BpQ@uk{7Zu5VCPN-F9kYW`s5*4z`(V9TKG707`6Ui z58y2@Sdgq-fM%x-Bwey_DFO-z%#SSeWK1TbA$3Rr(<9MbfCGM%=oTBJp|arZQIvu@ z91RYmA&rJz&$L1s%=7YWTL`YQ5V~@y{wTTLqWV+ar<|$_?PSDp|DK|*gH|p_B5OU# z#o>5d;q1{EJ;`Xf-oIEGB(><~+Un#ld>CChyG7mYZZZLVtsQaiJt-dN zp4KOqevBH%f}Fk|?B}L6$mkRV!Rx=e-&l8gy8qyP5fIyzvdksM*o9mg)JT~U`r)TR z^~2jl|KQQUGs}xFjLymS;iIz^C+Vicf!hNZxj49A)qxS5&ng1Z z;a|H6u9zl^P=})n+&{UX-Quu7>b*?lx_u#-sw+F_YEOKNaY->^ffTSUx90I5r{4QM zk?Ck1?_i(Eb=IlNcR#cJX+_)_&5r5O2j^m-Xo5QpDChbp-1=rAlQEPb(dlhwM|KL2 zTkCO(mUHDNo{KsR*%jGz7Jyb_K-(k+c1N8l4vzZ16k33pREg99;vXsV)=0Arq1Xw* zE?27qsgGS6Znto45MZ=!`HNgSOEkON&3xhp}@Y}?pz&COR-l8CT$T2(aO!8R+lSiplrFf5`r0gk5!E^pDlUfJPz7=0# zeEH#5Gve}@fRa|seQjOm^w@^{JX%lOlBK#-s*GeHQ#(0qUi@gmE9v;NQ8vUQtDS(~*XB?USTFU@ zt6*1yGlhRzT3o8NnaZ8Pp#&mKo9tinF%{kjg2XBcmq0ct76Nb|FI^FImtlz>syl_o zywcHd?X9k+%gqz}_T{^Uy{G&t%#y4I$m>CoLe0#{PEEFI>NrK_AEOp?O{JBU8yZnp;C}ngj!Um z=Gwj#zU?-(Uh{C_Q!-2RJd9!vDx8fCgjORx+upif+Aa76=X&Fy zDm4eT^Zlu5;yVk4Kh=_ae7XR=*4EkFe7&m2xdJD<`B&xJSGeaLk=!XmNm(MQQI2bF z%qGrGKX^i1FE7%BnO-Q#Zq0=SjHpyvk097a6M6NNOWUT*j)?h}qqM|w8K##qv~Oo% z5#}IKiuUn+#hkIp22&z<_FK!Rmgy6llHR>278t-?DaPxpCSc*3ewSbk1}LI z)3Kwh?OAeGd#T)74K#&da#=Zlb`yCJR4^N80v8+&Nn7F2?@pzlR-D^1O}Q5Gn-8%k zWePR06eDiFnPAV0O+Vs?WWw4=xtXPAjgH2X5@#ZRLCPSRNE3XwiRh8_=+}+dy1G#XoV8-Xh zrz2m+2HlCNXs{7b`*ij;3)l={^KwSy>{Ux6B8RwO3eS~X%a3eXo_Wyh<%_tRW2B}{KQ=CHvx6xb$+iybLXZAPi$6i33 z=fLdW8Zhf~RX2xuFGKnfO8kI23H{{DzYSFa0!vbYN><4Ogf!TB|J?*9JA;e_!3u0d zI4(htAKJYDp6(~4+KlY;2-Bwg>OE~I?^3|X6>I4DM=2j07&m)t0x!$TS~E?DF| z!gGj3n%oX~bUSfB40+T!kUNct0gtN)dD(DT3kw(}4Iu;}6W2l*&L%P#_DcenYf^!M zz^n1{G6uid^72V}Pf&etP)|^C^DF#0e@)1 zuD&5Zf+eN3(V#jH^yqE1euJjrwgh)GAnS_zgL;RiM&KXyc7>3#vvzC{ zV<$_$N+U%lkKz-V@L@{);lzo zB3`t;uL^74xXkW{h|`a1O2>2WOyxpopl4u^Nzzn|@t0?H&;9x2$RJHc2~pt1*#T6& z+2!;1{Iu8q0|wJ$P{U@M^}DGD{DikhJOz8Ydp&*qR2RAy=k;zEIuSL?pO$I9lkoF(w|QgYr%q@V z4$PFF}y58{51wqId`;TVTq}d9tVW<{j zV*Ch>>_oGYGhH5W*|`^fG^YW18WPi&pZX;3wl5tEgEWeTTE;35eJvBc|DJ=IIwCfG z6Q@n>F5Ils^$O)HOK3F?_45g*>9v(r8YU*ga_C(s<=x-pDdZ&+y`PVTJh1KB+vTt; z7lRX8mrhNRTZ>)g)zllvm@3DZI$o|%y}~29%DiX-bhQ?KV$bJTE3!GOj(;2CXiKOL zLjMW$s*wa!<;8{rA30F#xeEeyHFcYnKf_$WK|XZ42bA4WU%lh-;J9%Ta)Ddaa@EZw zc?aZLV6svyJaJNQqE2tFtADXhjqC_`LJe_HYM2eNu(ysyd^5LB#Lu6|OIB<^zysxZ zzNnYyF-8myCd7pn8#I0z3aK5}84B51$iu@7(hR4__lmSuF%{61YW&OcL#px9pFfHV zc_WzqVvV2ba`*v4eNLig>J9V2;C#>iW}!CLUZHTg1grjYy*8E%E4q(9*2m+w@!_{` zh!0)vi>vR{N*_uyAmM4s{OI=sXQYUzg!iY&8{FY4h`E3BY6xHh^S|pdSd9oVFz`9_ z>L1{{^a(KkGs*jJ+j>Y=4q))lHfQi&gnnpLE;uLTG4jI(+xd^;@wmMIvUg4nKzJX} zeoZ#GgG7X21kN1lxix9`T;nEA5_xnBiGTG&%)FwCu=ogw^6H#ze+(q*n5&CWXNJpiw!W%%|T` z+J48gB@i`y2U}>~e}K=&8sqF*Y*8!tvw;b*z8wy50;<)LDyZlJ`3o!HCMADSTl*4a z-(}O^q3wGmIIk>%QhkJOaS1Y4yYH!4=?~5c-#C)fQ!$DUUnpV0DpN-!9qX>T&VA>d z!W}dd5F9=q6z}6U9GrJdDkAEFE+2NaVGXy|9x-yVLYse8>=Q*1_RJv5YSNO@-5lj^ zZstxN1|9Iqn(n9yGbLyLc!%aTMx$>+%4$%ibrA0Gy4^jT$^Xc)DGr3?ZL5}4udjVk zE2AX#X4z>nKWPe4A(qi5l#!duE8rBwH1CV2+E}C*q@z9I9Z}Yo`OZ<78nuzwF;0Cl zwBO7qbCx%CvdmVJ4@fB62b4|Ds#`VK+Um%gfXqzRv^bcE+fmcliQ74~S1>rf{&|#+ z)5uK|l;JQa6C`d^+&vFEK7E=9TC^HqSd({!lWBvuuBJMnf%|OL24Chr>xwxb7b`zo z`)y=aLD`0SNt2hL+S~dh2|ia^aD%Oo@ZNPiASO4f3sD)HW0vWw>8y0K{Ei|!Fhwv4 z0_La+675q37%H=(HgFd}O%v@e&8Ps&upTgoP5SQ?uW0Ua(R1-@kXZ`b2-z z-4g2X$i%F*XI84dx)Sd2cJuv^c?ker1)rU5>HqNfs1K{TQK(GM_ivXblAZP%D(k8sX?nu=a7;7Zt zI|FOR_u$v=`Q>b1wmsQ@V^(s^Bn(dS+YkajNI+U%NpZJelEXf&g?2bTS4Mg#1;Q$> z?x5lAD)7@74tW=uN<7Dj0)~ij_r{=5S78okea`*&yI148b8IOb*o>8lwiIm?2q?^P zBQCN49o%1TygzQnPuj!lA89eu`)UytX%c#G*5+=7l|VWl50?RJdvi+`r1P5T%eqW; zAbg(IHqYC0Y(Jl~n-r667AZS@fxoYJ7b|ktyN|b;<%9Y4;WHO-rQyFtqvMouS%R2A zLTw#>8aY*+wPZc(jhEqxF5${ZpL$PSOnvd*SpBH^v~-m$7N7fHkoD`R(fm+)lKjaX zz2E_5kq$JATcR`PJ~ARu0M?=r1zgJ@=yGr)cVbY!;4Cn)G6YhW&~EXqQ`?9fipOjb z3S3GsujP7f4%*u8t*S|imQci9NG}QFEJSX_e?o~q#T6|IlIUJc812D)V_{lhP0=<8 zTs+FJNm8|6p(7$LoVrZc$;>`HX8tP`t7f(28KE7C8EY$D4>sJeg$_0TJ{Y78k$eFr&Y583EG2K78fMkP z!K*1c^=JCxP@I08*Y=BxDgxXt|Cbe1aJ6aC3*%w7?|95su~{;Rni5&wG-*?vXCqV% z7CX4Cy2}H;{Y5&+>9@*1y7A=r$9O>3&Q~u=$j+tKjGq$>xDhold%=`bPw|NIu$w~R zMc%s;IexFfkGrbL{Vbkf~L8eG0BFQka-w28^L0aMjUSwuX{yJ;xSMM%U z@~An~e$2J5zSJ2k5!#f-zh}~Ok%4uyxW={8XfhI<`T~z8!>yeWE8=?PJ>3C$K!HiQRD%vY{{_Fi+>M?o^}RiubXVNu z3*O?M3XYWd_vG4+hu3sZK29qT|E#iW50lQ+&b2e_ayxbg>!#l?&R+ym5*;J_M04N+ z#C1m1X7rQ2MHJi+?QsH~w|VXjg-6Izq-|J+$Mc#MG|=U^Q0?jph_xEmjINgEm6>f_ zQED}Kbtc)%ArJ$cL4O@dO|f_qi0l)15Z+)ZhkShhhELsiWV8)w*CVumOcV<;dOlry z!|2({^_9sFRee`zXe*LF01H!RAE;qVL3eJf`c2?{TLP={?D^AQ;`G2wC+AmrUA$l~ zKC4qW6-zqReOTjta64j&4NSw|5PM1Q$;ao}^rfg>J{nJvl**EE!)%>7o|V0(RO`8Y zlE=}O#gZ{qID6Cwa&Vo*q?WL2=uGzPDUcGZCn@d_TMMm2&FjLEJ@cX%NSWUN0<%5)G@BXNh6Z#;V zjb$^r*p4&E7e}njHikAI=Zt|OZGB9B#8!65QeRAPRHlmock*p<5TW-tV+njHEX4BH zjrKw-(l=Bc2&?{yorGyUw}FNq*L>JnGET%JjF|5%uVWtvb4hl#J-LhgK8OeNLF;}} zrTG(R1PajpE&lptK`mWZ+iuzzlrXvlW?21TzE^>*=oYnOnt4DOU%}AnBFhg_NQ1`4 zi|A@R6eEaV`N`nKpqyw`YBk>J5Aj4pQgRhL*nWo^+2hCeiV4+xbP%dnBi&LgN7qTJ z0{FlvJ?HsL+NP*^=yku+mEv^Q)mwpTqLlA^L1^T|7#Vggo}5qH$ty+}_MDT1I;fdmSIV~%-@mb2i+ zw_jjJxM)-I?_ZQ(6?&)>gES7XBA86sf5K~D*|C4GBbX5r`tg4Dcl;hi&huqV!L9Ti zdcR1w>A#$pivy6`{J%Lb=f6pEvRxn~Jm`h)6`muB@xz}wnCrX}ZI)=2nU`@?8G&3U z4!K~fE4qQap%+5W{MGtLlC9k0i~N~)lD76%`EkvaUQ+^>HPd<$a?7(W<-S4mo zBgmA&ohZ~`DV0S+B%q64hio;<)ogpOZn#AM&vE733DqI46rI#b!$r2_{!T_GPf!Bq zB)byh?;Z6AM^D@;TaI(x_8mX<`br1GUlSWN(*2fesuGCdb&-6M;~gVCLFr_E@)3s| zYxET)ts#t*V-}7)gAb{-{nbWQBrSw>>2LuISJKQ2CV!MbNVl zjj`)iFtPEY?^Ezq|5uydVeyDjY*rfM3H$pxG?VX}wy|;-8I@Q|b!~Ox7l&Lu-ffk* zmHO0hRSTc{MBjvu;N}uuL?ar*WjP7M^duttcS>xVWo8b!QKDBnC}Kp^KZ6n~PhAO( zUEK+d?{>J_JKQ$bH#c?lK}p^PU3;qC%*k6nJ|O>1d?!X59KD5p{Jq|}m<-277tFT8 z*5-+!+Ms75(vCZn(3$J1eebO6a#B^(S>*mB<5uLm2ZbN1IO~g%ebLT-pZWmW;EKH4=%pWNGmJY_ zEV*ISBb>~-uS~bPtZ>LoPb%__ma!@HeN^Pv@hgiwe@iY%SDrM-AWk`zZm$aG@h0;m z-QhnYsK(iK9k=}|Jq+^ENY4s~Op5`BGVi4K{K!t709RYFY0B-)M#V z;Uurer<>CC&7|=SuAAxUxy$8u&+RNh;nuveEfTVwE+a=Lultjmjq0UhX9MPH{msPj z^s}YnKN~OUp!crb;9%iu?&NIrljob0dOD*=Hy1D8H_+?T!CZU!iZY!2%fa(|b#OLG zcapb%4SHR-f@MvNtONSh4ra#kMf%i-#T?CYx5Iah4mQpthmYXD_)+s~=uraz8UPfm z!J{MsHUNMt08;>J0K@@s0H6Zqu>lJO;BFN?Y9GM-Dmo}?02nj?C;*VK3Xc*9SXTh1 ztLP|dtFe*dfaL%z6=1PeLy@6@xw{p>0f2b`0{|KT6#Qcs;ZX+X01Kc1KmvdO0ImQ` z=ipJ)0V_U-{;tCQhDch{|At_e>`xDe4$l4WXSaX;jH8=DFf`B2A_&5una)AC|K;Jy z6`dD(L)J;7P8Oku0aU-Zfo_G@z{fY46$ArlgqUBd`Omn8PUjo{Mmlhw_+M#&vK!BT z%K$K22p3S8i-BIlgQCT!O;d7ah40Wh=vK7%H%u!w91s^_c%e@6KA|m3oP(Wgd5koM57j~zjavO}=+6~bneU)2 z+Wa2B(0YSsBu!`%m}|!fZ^E@h9K>0RKV&^d6vUkgziIaX=Hl@65gewu6>=g!6(*%H z6*i@jN#@$t2AW;xHgva0 zF7B4?LV{q6xCSVP_PNyhfIwAsef;DRb)6DogpYei38>voj5{MuWbyX=iS5E;f4W?^ zg1lWEN&MwyF=Ue8Ca!1#zd>oQhGZdupVZT;-@i9<5&5Ox8Hp~5!~{_;2H!*lp$^wL zAl=+OpN8|yl6(j>(a1EA(wfX*&GE=aGU+@qZT9KNc-$|t@_M3xGRS5ivJI=B=u?(M#QkO*QBE7rS_YV$&cAm~p{}k!zHteyBn-dLg z>TmzrOS$xYNicfZFeqslS=)%;m9ftjP*hu0$|8!I-ZJQX`|CQV-?(>MJiU5zaI&Z1 z?b~C3{`X)DlzBazF02^57o9SA^5>9GmN^x57`OPW9QA4|t7_UT#Y8ys$H(m?swU}L zIo_8!vUvj+klCL%f}70_*io-(ND$$%m3N{ZL-Esib$2c`-p)u~eh+%1+uxmy_9cTa z)$H1^yip?POvLf4>Ky!bOfDwxYvt=f9B!q~>4^90hmtTeJmtr&p-vIumUzv1licAlZ;3H);gb>B}D}nQVt3;hcL(0$1@*&)RoW}!_iuLSM&oi46TkXDf zZ?Sdjuld5h1?|13{z(6${%mLWA>S?H`PP2C;AD1+yT3+jDCAG7?tuD>6#JjUf<16Z zv`76(stJt9t-j+Es@qGjNX5D!3xFsmZPa@$>1ZTsJ`HLH5O^Ymm6iX(e>25Rb>qkC z{p3gN^^r{Y{qpLXPtHP9gbJoEU4y8!z`%Egn1EW^E;i8;(U*?TRv_obe_Fs zEdE8{P!*fl?9PwRe!0g5T2c@q#U?ntep|aqa1NF~=~=6yPot1rDbFN!e=V6x&lzVE zJ~ir{>p^~wy@{-V8R9qfNh$qxgK&~R7U6ydECu6^Ob(9ygeuaz2tz_%D%Xo8-+6wk zdJ-1*+uL|;hldd!PgR2M=e=%*gSmQR5PDh{+wx6N=@9xTR(XX)lz^1`FZl5Q5f6}I zZ1y`rFoJ>qVyE^2oC-q@lHP~`44z@{-D zLLMW-zsulRxZ1e2Zoodo6<*cDpvl+S2QN}E|(A8yayZzM#JR%ExR0^@{t?cYY)h zJP1pZaSuDRfXE&vjUveZaWLgxO12f#$gmMt3HIV95wmj-_Qh)ig`Yl??Ii(u0DCkUFn$RfcOt-dc{iLb-c^7q2S3 zHF3u!-|lrR2yHiU-ApzzFAJ>>Pk|#gofWW0tya5pAY6ehEkmb^4PplA%^SSPuxDOu zH<*^6gGFDHq|AyRYby_v})fYX4XP^XklanZ1}GOu$0^_p|fK z+4D+E8AnMaGuY4P+vY61#_*M)g=(3+y<_N5`$h=JWWrf1&*V2lEM8nbly2Hl(2dBp zZG3LIS2FqqHiqoeYr_h$5uoOZ!|3(OqRE?o|A5XlX@UzrzN^H_W5Ef=qQv)+-8{zLsuBp*WR=@*b# zFhQYfsFMVZvO~WhEOxfR0ziKfA$%>ewvh0$kJog-J-l(}n(Qzfg)Nsj*nDt}(Rwt@ z>tq-CBG*EshgTV3C3~bc(dQzDk`fHZ>H^HPX=!Z}IlVS^?l__F@+lt{)AR8f{d}}e z#nY&#zh=5fH0i1;)|a#+3!KLzPN^EtFUiT!MYP3HCpJphHd&^|@Pod`RMn^c4l@*7 ztH9HCaQya!_GDk~ZclnmvTa^+soZ!mE`mewkz4a6PJJr%DdoXC3+?IsW~>Pf{JgP@ zt93Zzf!|<(^w`meiC|n^cc8hp^yj9C&je4T_>|k!=U_f^Yk|25H_SNeOqnooN~A%X zF2RUX&S;?zy}~~FX)B`gat=pr>9F3S(6F7k>%;e-R?8>WLIqTm3O+R`7=;^Wdod_jDnT6N;Xg`?Wc)O~k+zhuZKM?1k6iq!4Yns?#B5_efy zJM3$935ly+(xi1d^1qI|wpMFjfCip@esm01Iw#s?7nSliGE#OfwRrjwM;OK zf&{^emDKjlkh1vZF(-KVWtS#u5PzA%|*Z?--@+Hl7{tqh&_jc;Hn3s zaTJ`!rvhxwR@6E0*H7l&RaYvY4=U7EQJ0CK-Dt$GX0s^p=q6C{(9hK-N7zoMmRs8< z_zA{Iy7h1A)sDkg9For_vtsdJ^+h7A&Jk2ZEM63-(K3;qLBpmIi~@%Peiq^>elv=w zc2pT8A><5#Xkv5#aE*b!pqzbTJsorcHEdzj#!y1zsR&O#c*bN)`)OR)t+Z1F(efc= z3;lgXBb-IpAj&?=;z&Z5DFmpAR8MSM#i7AJUe*J@7qlc-xg_Iw24W_DQ3M^Lm}F}) z*=iwuRwOj8$mAMWZjGX@y|NNR8h2wHsL>r31qOzq=dCDI5gQbr3DbGaZ9gRYB+Whc z7@W>kpz^TSI-F)xW`nTmnFm7Zxm-T?+a0n-ipwj32)QK8mv?(Y0-1z3q9e(JE*r>) z@&IUCiA4xf1nmS@TCLUQhStvo8DkNWqPYxQ<2S)weuH64i_i@|x`|HY9}8vQ%fTps zWOY0?lg+R$kU0#UPM6*vgw>)-I?yWn6vZnUp;9na8yQ#sh@RLu3(5K*jXJPQuer3O z84N1Eptg3)Damf`R}%j43tJ|pZ8E~-XWO#h>hyg%Jsph)i9|2N_EUUsy$emmnHkcH zS*G|N&8%^#amH7^Zr$$UwRt)poY>mzvCH<@=aSs2&i^%0r>FDxWtinYp;S4XWLt3Z zOdVe$EnD*)&!u|9y?T*;`LM!Q@p4x+b94~n`d%D;-qEo}Hka&j=|m)kd!=)|4e5bx z{iIOAM5hXmWt2oio})SE7Ne(js&}4a%fw{;Ewc-z+qp7&q+Iv3x?N3xB=y0ef=+uv zI(OyDVE1-cYrC)Q($a;ae|VH5W$_xahy@*U8{4XbvK`Yu+VyEJIKX{ zXQRRDW#{Sas=B+~drLn^#K~DKX1D6{uo~^^UQl|Mpm_k429^uLK*L2G*c>`RQh#=9 z5`vtACpxH9g_3e>$L&>FS2c@TZ30o;hRtS49AYPSmQQ$!$^a8f<6(vgoCyx-MCz65 z=2)B!mgq#BOcLgiaqi51`FR#M^Hx|5>ZvNzW9sIGRqbN}oz>Qbh6sYD?#S}1PDSC{ ztllB_7+PejO+b2^Hd!!+^vw)NeT{E-bNdNJ9xEkS#HuRkJ++E=|KuEjoCL8#jn36B zTwPp_tc%laT&vvq60EZq6uD{joys!p>s)u}*>|9eS5FS{^vW}%kgK^D6ochztF4Ro zsD0J>i5bLfHB-&L*y6Us4B$7o*OKmFm*_Ok-Ne{0C`wIj0Jqq>8mJ#0{9ZW|E~%Wx z!kOt&7$WUH=zRDn{hX{+y^ws%UH&;cdu-b6xp*h<^_l2x2NW9qe8%{k2gV=XRnjw+ z_gS{a<#?Rn9JmDc&!s-#(pXLXaX8;Um(cjb-&I53pdn-q(f^Bbyd3{*BEd{fyM$qE zhI&Q7g@L1&yC>xaJsc#f7$9N-ZGnI_h~zImfK={v^_4dpPemRCHMw+ke zT0?uL-Kt%^l2wt|7pD}%P%y=erk5?vAs$w?p^>4v4fm}KvRrT1>dWC)2tE^7zG~R% zX_#q!r+vqsQn}1}hG3Cx=Pjdo=&a$)`Vn5zuBVHqx0TW0{8+i|->_1YqC3|YHzx+e zAV$#p<9kSZ|K1WU>3w$9k+a}P;r8+F`DDE&+@HiHlPK`~F8vOl+moBM_~h-u_BqYl zUjO*|-V3mk;NK$AacHEJl#JP3$i<%$ai zvn@<4Zua^ys+%d${;>QE;YAYLzC~~>tIGpnS^lLt@)0K|`r!w~mHP+ndi;KTrIv9( z%QXB~JhQQ`NYM`8M&Wg;Wm@^$Nh*lwFc!dxVjBGC)8&v)nVJPiNs{3qk6l+&BS;kO- zaBPYYmx-m0DAd@jH@;=tAkq-KyW2}{IEx;3zlItjdkG2bHjsE_Mp>4lSm!8osQ3es}>Fym%kealG2d}h*#6N5@%oJzY7ZG8tlk8kgF21N`MwkeCgjFfI$^pbBt zt5OvSspd;Nu432U96^q02eol)N@N$GbGWm6)=Ee0;w)I@_9kco?9hFd(9A!33AB$f zo^FtE5jlN<+tjpA9iH(>NEaHl1JVCT7aO~*5YQ@_S6H{#miu~)%FquM-}p7Qd_d8? zbl(hZv!t9MeV;Wv@@Gv@GdJCsWg>Wbo;$`g3C#;jBCCZikTlR?R$2oBE` z?UKwCU{3zD>sv5%;1QlhpBpv9WOuK7!ya`7-t!7-c->mvWf2dWAvXJ%Y$$6~q7WFZ zV{wWNX!H1Mw`maT?Qs@d;ZL~!ogB^w*Fb}B2V1=?S^iS zqwWmW^-tquus5Od7RvDVjP;uF(OnG;e~i ziriM?!?IS5tO@qLoH7+WQnUlCvODVK(0<;{>}@Ejljltn_J>4+->-n;{gNlg!f9+u z*r7KnjTG)pFZ&~9&pW7P^lQPj%U7<%v%NJn#x{*0(wPbE?ilw8;_YO0+@QWEx$i%t zIZltvnvrm}3H|UpZ1Q+Lvf9|QQhhWyg6ch6e}^b zIe`an3SE@;7kriTgCk+4imns0Tv!WLi`8jqnbOp6vcjN5@DZ2CwK&MR@^7ixWjwr* zb+zmxE~#m2yh~1pMI-@z$ zlr|=SZRCR;ZmAaXjWU`i`&v9!b97~}=}a9)p)4WtHdLHqD4Nw_$wl9;A15BYo+VW> z?*&E!>4QrM6;sc0Zu0JI(QW{bY-!7e)M3D1T}%e27E4B{*eF|zKR6Xdkn4*&PNf?W zJ+^!8FP52uE(Mc{%)$Hf42_!@gz$0;V*LH6n^D)Rv-vD3u)9e6LSjUxnf1j_3wp5X zV+}Wz_Y}jsLl!2Qis|0-4v!6OpJujZl4IZyHOMYh#tXAQempzhOv1rR!ye}UEuE1hECd(|I8c_bgCECB#KGV0+UZ+T>a4AjjVl`rhwb11XB<-figoyA$o~Qi?+Bw zCsSVjP8s&;PfkYTA_`md5^_CCD9$vl4k%9TB?3PJK^v%Nx=yQr97%(a6s>8t0g4!} z#Xtf-pRoCb7>932aY8zlkLW=KMl})rsAvu%& z8GIv!l#8oGWlE@w{zXkEu_Rku%8?1L=MHQqf^24l0) zB~L^GoHGFaZu!$%F1SK5Ilr@$THh_Gh>`k)JmXj+1tuqDEcleL+U?ue$I3P{>uAjLE<7H%r#qCG z*jMFQ>b}W%1@lhiA3ut^9QOm6nE@3oCl!v z>)~z{=V2efJb(cJ4FC!NB&?#i2Ljd=08qH*uC|(VFAi7^z)}GggtZ#w1`SN!tpE-H z%mWwz&;XzSKmve(6%=db_wff>ucH2)Zn{6 zK|QGdl}w~vMp-FJuyERMVa^2Q0*)=%9V=CgKh9RkJ8c3vmssWSx03n_cfrec^8ci` z$v__|I@70enwq0P;#;ytmz+#xDhrucC1by3#JL|(?HK;T(J?#_fG8%yo@XzZ zfLX4E8W_ZNmixQJR*=QLYLWwsfXN%xvf)%PXQt@!r=;c;c%;x@Wty&Sl?vF!01M74 z>$r3FKCA#=No<=*(83xY#k8gr#!a9YcdU_}mJQwDDhnB%uQ7>2T#2WS$bP=m_tJB_ z-z8ORIWu+5BKf5N6de2|9~)19AL}C!6Nt&@iVM_ELOLxp&4$Hk zGR>BfTBw=MR}vSBj#W_|Ty$W`6UzA|`ss*|5L%^Py`KdXraftHt3P8c!JebyI}OWG zmVEnDGIJ9q@^COvRjg5)u*XnPz6BZ?X=5~lbD|C zW5K!)5iU`_r`Sh9o=WixX*Tkkt*9=fKezK7sFxVgT)|kLRZl0Z?^ZI7?JW63C+>MC zXxve;3gRSXW=0vNJ&|>3N`C&v*X47MyBVTbvOIrEHPp4)0eZZ=-}$E$w=tf~A%;1z zAjm~7H?F@mwbYWsBQqYson1OwF>L9d$Oi-^om~2z^~BN#$4fRqg1p()`qMtyWFlV~ ztMrj*r=-i7=_z}f&Pze=&U)n>-p+dCYy>DN$2vE(pHUh&muN#KQQjQ~_Cz2gA5qo3 z--5#pU)H@F>Lh8@K8s9`U`H`*HqZ1?BgUK@nbf8wsw60y6W`zZNz0!u4@YRxaYhx9 z)J8Q>yG37u{r0?cJb2AUHnonb=?G%b#`~Y?>&gM z)%DJYGT=5Lz*0s2CHTJNAq_IF63P7dAyVd}6O-k1VCA=#TdR9UYADoC&rt@m6UUl| zAK>+S-tutWGRp8U2)b?yoYfO+OfU^U`{@lWpt;Eg+Cgs#VKc1?yW?J$!PBM{=X%qr za=UUzyH}^X(XZJZAZ#oGgi3&*4G`i z!QBR^o|`gaTJG!x7@$VK_84)c!A@MAUcQol1`ayCI%`dS%~f{L4hm}!o8C>>9gVgO zo@dK|;~L<}1^}TQAlL(h$yI>R2oS6po<5wcyRU`}i9t>#8E02*tS_3=9uJfat%4h? zwb{q@sTDaby zt7F@?-?{gWZ@eFK*B(`?_W8HY-mBJ}GoJofk8hdEd18Iz-}D7)R7fg8z)aR=2GBLB z5&<}1;ItD@>_FuW+5b`?OLC79EM`+X1;7dhRVa@+_e(_1n0Y3Mw?!MQ@%Uc~WM&6t zz5n%Ofz&5zs$pq>6G>AMI-FkyA8#>yA#}8AP4GhKR+!pEBd;;*VnJK3&QAxQgs)j)-QZ7Q@~Rbw|a%s>QSVZGOJHAISzoA34|C7lHD-E zK-qxA)#-p``+iF}jbn*RfU8+CZ!kA<9h0kZDTu!Gp)YEpIwvm=r?Ez zN{jpz5(L3O+H{zo2|mebjs~XbRS24$Fe^3OoiI;hEHG?80FNg%;Yq*1+WOZQaTB&l zu+oS5k_Jp^%g>n2kM3~T3Qs3(UoV)=%Pnz>A?dP)vTGWhrkB=@rk6TfB^l?-%yP_2 zrx5YzCJz0NWo|vPXM=nQk0{S>)iuSu39WMXZ`A?73KOf~Q0E$!-uiq6+9bs2?bi^^ zq@2ddCHEOq_J*9CKBMWB#GINO<_>8Nwn88TwX(+=nROmrnZzKIabCboz~CRkzC4a! z!nLJC)&So^(fbB%s!$$Zeh?zv_5CGForhsQnV|D~owg7@*7x z9%A~LW`}=GDLBmToNZAxx952@XEWt#vYt(v zoJhdfPsv}+4#$>iMVN@2Sa-{7scQjgOM3DEo8&cVGrhj7ETf(23{Sq0)625AC2;*H zw&Zcq`CAJh)f%a+B=6u^CP~YuLa!{Nt4OrJHa_lzQqL3m=?aj0=H#;8uJ10ST zA&7fSmav!`C&1!Rl2G_dc0oQ(fW?E!;zi3(Cnr^aB^7((E-qXq{^!eZKeRlpk8!Ul za9W-yl}WUoJyVNwp7GcJQxNoBa62_GT^IF9?WKHPV6)~7`UpR})qQ$ncW%zs-$Auf zpO?RAeNHIC+TD412h&_%^ho0^=?L`17S1?)aY zy^yuKBd5b8Tajv}U*S)0p*c?+FIUf|85uX*#p;pR1Ys3~MG)pdm;zx8tJ`b{H1>he z1wtDLO(4{PPz6F62t`=kX23kqO%@30SUpt9STzy}pz#-Ij0BCLSk-2Mpfw-}ULd%E z-~@sl2v#7NfnbEyZKekrwLnk2Q=0%j8^-x-36ohtW?C$$4&|E&FM z!`OQVAn$Og&E|IOKac0d8hyfoPsYTyZ3Q>DhEO zb)9Hm?j%w)YOt$$)IKQtu}Tj(dVH@Sz@?3V{#LcEmRgI zl#y~W?g=|YoD|~L-r+i(ljq-eJI;Ls8#1oHm!sFaKqBCd*cXwZ9b?tB;@gAQCc7-8 zD&2SFG%9*F8#JBhg>lE#lOGggHY&w2Y>)cA%aggUq=Vs7xh}E5I58P2!F4HT^qULm z+*B#HvGqmLJ3B0X*c|k_qZui)G(4Z&qi6CoS_34?nO4f@dWGDgxT#EXPwH^v#fpVt zB4R0LU{#P^t$AvG(t+)F{*KKQ^}pBk(z#Z7XFSHLEE6n7XbC3B?I|;{Y%XfJ%T9q* zUnY_=Rd#OKyR5USG7cV|SL)U#4y`5}IkT$L4hFp|XnBj$rqo6*I5V(&FimCz^t96O zZs#-Q(avuZ>(nEMiO)r`Ol0bC?@cq841vgS3UHg#wGpOTI$O%%NXg{9}GJG zaW41+`J-d&6YQb~FwOt9LX^ZS$8)s2h62 zs8)+7;EDbi4?_N?1I5~hAWyNl;k;R&a#mDtkHAB&N_;2d#l*wYc28=dnK=8gH^0@B zFwRFyKgO~e0NI4y)`;E49G>L{N{+qn1-9eBU{6EU^Ea~TKLlPOzHcK(Ekv)_I?g-l z|E583)_?sGn`p%Wl<@FN8D*bfI zE>Zdfzj{Lb{9h#KWC^2*iYZ_d8ot`+$0yh^5$e%@Pv-b%KSnZ%HGl)VJ}9nvP*)*3(t+}S&9qP&sSM~ichEGX&|O8Gk%4wuiiLHa20eAtz_ zPRC$t=9D8Mh-m7R81xZZSN6;765f@SwO7!~%>h;`M+IE6muX{u{q^+p)4M&@NB7Ow zv4-o}5e@uwI+Eun4Prd`10e@hmO!X3l3ACR0ZQLY!oZrl@_>IlbNS*1aD4=*(A)WB zaUyPzomg`tk%L4E-M`BuiAZ~OuygVDaAWG=;S+4wo!MOEcr+o7f5b((S7xfC3Osj< z`sS6wf*6Hr-$R--VNFO?leI1J)aHp*;Crubh8NI;N#MPVeb4I8&}5@z7ny`~W0{bs z#j|Xh9*`}k1f)NqOo{yglq4W;McjoupTxJ~-9L&7cg_vN`NfaX%oR$zKK+Y`}jy@YLaFueVkEvKE*YBx%Y5%bGfg zGx#--W303hE!0S9TR)+}B)Cx)U9hd{!F=b(t6p7e`2(WO&w08VV0w~UJ__B@SKL;u zd8m5j9$&SF*U%Xj+4)7~RQ65-H8Ev@S~Hw=YebKDvH8b=Deq)(Q)(aB zrPb)Pj7iJB>nzNkSn6?lb1x;@RTeH&MNex&6u1!_$dDAuz$*esj|4flPl9VB0;hHh zc#+`T#u&hKCks?fi>wL*72_6_7LK+CdqBT*fqF&61qw*bm~hP#xW!~g)UM#4%`e8Mb3C~DC4tlyV&lTmjSW{ zNdjQ4O-)4|*a7|I;%AKbh7En%u@%RiUW?cC0c>qMIbx&YqF|;)nLJ>IbHw{;$9GZ8 zIRj;S=$FUDNMx;UHqa8n&Ja0W1>%jiG@2S-y^qAsKjr-*l%(9-wQV?lv$7Yy&6qP)QOZ>B{--fFT@WuGWmkApkCP9X@6D`*UG| z&JSy|cEVOCqgUP@I*=AQS>GPO4_=h~#~z@LSCNj959?zRKkQo+J<)=)#%Je6Z_!0V zp_q7(jOqXo20u(zaR9JDT<9c+Isiy?_A$px%vis^97c`_GB8aPemvj9;{4oPLnQn- zY`QA$OTwW1{*{#^{e}{znmpFPY*^t(qQEaW^c!jR7hYa z{RTY)7!G)rwiJi<+I-2-jsQ|{iezd>00qK#El{7YS6wqdL9&`7;5*Q9Mu)klFdJ*z zK-?>h!(rce%M{~SRRzIk+3eKunGZn#`szHt%eW8??e&p# zKJI6WfWMJ9gWM2;UMWDjF_V&`#33UOTzS}Edxc8nLVvl($l-ZbI})TvcoC%YKyebr zl4Wld>SdF#(&Xt%v!H=Z2VJl{F`@@k!vFaDE{j_%zyMuy^0eH`@*~>{h6`QvswHC3I)R06|_%v>>8o>@^|lhuO} zOr4Z?U(3)gf~0xh^elO(9rJ|?-%(VjDM>eO>tW$A<0 z_Wb(s@^);$y>71ncf~M}Z;_59an9*8uf6CaP9ioiU&?on=y_~%b|!$5GKr7t)6?TV zq~Bi`4R`7*kG#2e+-QyBCoHrtDZ_vNJevMN~pYF!GR*KM+f$vKRNb{QP38IGREbtht0<6H=(l*KbQ zE&6+KlGLSgjq|VwJF-r22%WLpHfS(`xc}m^=$5f4OaH#SdL8Lt4B>u zx}NXL+w*QRF!K6-r|-y``GtdYl-+fBK@}y3=`J%LM@PqqO4W)8KkALkkt5S&d%9Z! z{C=LxjX?q!Rqg-l)c{2nxqsUTV}LS7+m-mNQtdML1L;>TPUvJ13I;6r8MQbhs;PM5 zZ9p=jg4-lcYo@hAc;e=_49Dc_i7|KG+jh^dQ(YZVK&=mj1-`}G)D^NGx4HwS;uGd@ z?V3^z|3AM(Zjgd%?@6hY8%fSHjKuge2Qp{qyEemkI(S-)JjSYi9H2mPm_av|JsMj<~P<7ut$N3HO!VO20oTEs#P1*CKhm zP&;h35g1?ED=NF*<$Pbq$BObp8=W8u!Prk7x@<}YalZU@rwiW%8`;Ce!}o{wezX`! zI!BA)r2OpfJ!D=bQLB_z;A5?SqCA8VMH26VO!fN$&Fvc@mjC8t`|O$&ld7>>D{X^k zHAEt5e_g9xf{|aQyZMQY4Mv>+(wc@I{(01T7_gDK5`%BzrXNs5{X=ct@5~@5;^H@> zMtVB($SJQb9)a`8QIDpimjBOOZ3Hc()XJeD>7E-R=WB@A3@H!CV%#?{aRYO*3k)vG zi=Zd!!WpJ|r{c0(!HSaxt>i z-#JGE)Q20ohG*BGN6^udVo0pCDHgQpQoOvL$uujv!Ti!)J78Vs*n8n4zn`lL zZ)|O|y)Rj`-jRPwRX!x>Fu*prRAW?0I{GZp^=p>*> zV{!XIo@+XJi;wKZbV9~ULIjKAv|JleHGfEzPF!L~CI4?c_3o#N!X<2fe=HL102t64 zi-yfBI&ITa3sTc$y%~<9D&YcbT4UwCJGcO*Rbz;kHBY(s)Nm<6xuz)KvlwB6M3=}; zql8-hC*hgK@9Z#JJ$njTLJJMcGw8m^=lDy04kBg5&f9TU!`DB=To*ZEJ{T}F3=!`` zib6Y~umdx9q#qdDTugkiW_!tlmG(eE=AkdJtg4s380oMk7%e{?`CEK!EYR-6NJqcJ zllJ^hUCv;&nr?9J_<7xG#pQWZ2y&O$s(mW~2k55l%Po`}^nXc8Gii~(6IBy)yO8&q-PP=mqe4XiY`zz!%MlU(HJRA%75C>+8}O>{Et)xvM!z2rrywWosl@ar z);_}M@!t9aYkD9|c7_mi+=UNEn|zH9s(<{W1^Evht=0o@27}Tsx!W(JlQm#e@Bt%l zB8T+96!@=d@uD992_F7UyR-|ORu7EzzcsFZWNk3OnUaNXAV3YX8VYW!9ACN)Ri295 z=f8Z5k8jpm$k%D)VANV0TOcr&k-wvn`9nc9@$j$?iBG-RFtDo5eYYVvpGBxtbXF ztLwLyxo6n?^^7zi6Bo#47@)UZ4^BA}e);k+H!<*RQ64a|e@v8+CC@-b1^ffo{O6aL zTc*4^#>kAd!_6y^_wSw!1+qzUYkr=|0ZEII`uJ)Fi6*M940{&;M>#3uDU2Q?O13rd zR`L+*ue3!$g3uB_E+vaowr9-gpjb6`!xiLWe(J9CQESfwRiB+{g5Z`at3Te280n#8 zws6}8Ul<=HhBg&u2bXgm_4elOGdnmDuw0Tv)lJL;Mto+}4e{yJib&y4LP^K)jIGp; z%Zra>l_pN-No^uqMLwK0tF#Q;ryOc@O)b)QJJFLrTPD*N#@ZB)g(A|2n@ysGnt&&q7zEdEduYSrZa%-$jaM`aWZ3gkhU) zd}h1>?ME>~H$Ey|H&Wt`#pe%DX0h5EW_A%7ZbRF9=XX2w*y)47L=!#WWumz0zCo$V zL9w7$s$-~X5^k?EJ`6AOqEhBTsgv!O>IuzQq3pN=JNFcBbI0`@gJPoqHRoaBV}U8K zS=`7nZ85S;Wn~=nG~-uGQ~+yP+o}z+Z#s}QmXWDbUfKQ#KkAI&#{~}+sOx+BBJbdz z3&|_8oz9J-0p)oIUR+gCPIxGIih1~Sf%5xY8%keK;P_2n9){uvYHpC~!n2sUI3*V7 z)hr-^<#A>Nd4~Oq$jN`{I1CtJAZvpRSWb4JO6Cp#_L*{3Vj{|zbzb%U_!xPC-C=F* z0rl1(qpGjox>^}udCj84_^d)C-|ePq=+;1CUmKJ+kKl+Z>UoERpx$xX($XpndG@pqVft#KRX4 zK{`wQz$G`4p)We5{{BO}4Ik^9w8aaa*T{G=3J?=2&dl{otw7fP>3+kjgXpLIQuk_N z!B`09Jt3S&KKM=VBZ}YSbQNc$&N)p%az~j4B-G1^wn54;yR^oF4kYbz0(gPzQ&3z$ z2!}zZ)mFKnz##BVE3B`}s{P3%v^LH>63QH+xxeM2X~(U;mgC7(GW(VCuD}UwMHgc+~SR+0SwrwHM>q>K;Y=kx^CNOg}v4z+~WvS~PN? zqvJQNMZgfJh+2Tv_EXy7$!eG}#IIFvEm$Pwtm5u83D;y5bPR5y!E&T&%;e9__SEm* zwKN8nqO?{{9+$p*2bL@rS5lLVpg_jQ3ZFGu1;fzoLYlTZ3{^DIRYMg^d;w{ayFzEN zS64;QjnSsZZIM%WTs2mfdYgI?XF9_#cMWkHe2xy~I{z?8NUg`QbnM)h&Uz==+HK9f zV=VPomcvMBb=q7OZROFbC}Ul`n#8R}t@nWe1TV;j3n&IV)E+CLB`hyc-{q>HF1hY$ zAt|~k$*gdcHX(WR4hFeyq_)o zV95=~NkduWjeXd@4{r(@X@5KLNcP*}uygZkE5E!rqHns#aM!Cg;S(v@!Nho` zNCXAW+}Pvmb=uz5>NbQRMfqmh8!awA-r8*(3y;q-0CXAWXK?f=%P0hKq z+%nAGgkeulR}Avi{ zCbmHZ5#szf9rzplt-6u9DJzS?*4|&(8QU+5w1nfZwZB1c4F@VKzPVCT5gCzK=^e$y zu2eEAi>`npeFSZ#Fg?sKMAUCT1F6&g99c+WOOp3Y6V;Vz7Atb?L-M{>Z`b%}5#p6Y zFJCWmz|)|MTpouXxJ;Yx>`FVARqTMi$x}U7s2662ATV;+0L0W(o|!cZESmkMpCmr- z&`(w+DX2(L1y6n`x)D^QsAJ+={u!P7DC?9@^&R;UZpkhCH=hSozFbTYo5fKDT{Nj= z9eMJ`m4}P3PmI@Um-2Fl57Vk5r@rYFTFSBw1Z&%!z9}~XaOJ{3^;G~)k2j7Btn0yK zAS&HXL}a4*1gGRL7x{`>vR1Y9p{-<)Gf61K1W$d=IRnx5*euWHepW=U*~Tzwh=e1x zZlFS44e~a+U3aTr@GGLFbpKurJOaV#P;*_C+k^xxvcZ> zC+pQGw&kZD2{UO_N|4gZH~n-bO(;K1R`=&f>JWb}*?1igaXmiG@4t#71jrAn1_2#{ zlRJ6F27xxYG#-Eq9NWJcm@xhxW3p&LSGLe%F?0<}*ivNFmpm3%@AG^QjipW~HPd*u zz)EPK2d7`tT?aO)wO-Lae_Ka&T6dX6VVKw~brf25?}`b}8QVjH;KK{=*bi?VPk7nZ>Em>Jcf*H} zaXo1#}K()_a;O0z!D8c3a{k3Kfnh+go%VY!%y~ULPy;stb^$ewbEP!N9?3;43 zz%4``oicI7kt>@TC!5L%8`Zh~jlyh!MbC+EZbrkte&KDs3{j6dlzdIWGym~MZ=A=z zs8UjWaMVl;Zo}EKRdqlQTx$)+{XP{GX;O_DI#m5e<6f0<#Br#0$1zd z#s#Xn$z(vRBW8eK&`Gw>eQ4Xwb)K2~RR*O~AZlf@yKLN0F*dSURT0tA`E-)pGRtJ6 zt}`j)=}x6tZo1hI0o0l)k}#Lk7zp4wLcV4^?NV1bk)Cv}q_{)2F3;*2L6MiEBCPxN zMR$Cz(SOm4in%TnA3*i>Z6y)uTEuyb6KTo^mS7pyk=JepuHI1PpAdD}^42#;72NJg z%6Los8uq7*cxACCLsf?@)iRah9eRPOW+vo#r~s$bmv4l~wUShVoAb^k+`x`P=L8FD zC-Nv~^+xOOCl7l1>MJ41%|GUy$nbdKoVw)& zl18R=6_I4Zg~fT+`*RF}6^S>JvB+q3?8P|;j`FZ5<2^`M>s-VuAh(s?ajo~KG|h)P ztK8scyH9M4rO!zA(E5` zVy$zUyS+gPjS|<|zPhRvEbqE?oszu(=Z(OM13%Dy(j>|v-^+jt8QMc>8-i3(xjjTy z`cO|Rhi7AAV9SV)wBfd!%hQshQ~};s4UiJA!fQbG8 za3o>3jyBa^<6>h#HH8)6(uTz!1%sm+Q)h^XZhv769#jmG9BVrOdzQIZ!wE&Z%?es; znhK5F5v#Npp)ObTIQQpd;Dh`(3L+lNm@6_jSEnKmkS%bEWZRHWkBf*)A4OrJ@yrAP zq-S?F7~;^pRkXLSGH@wB`m!$`S*6rT{#T`vYhVMCL4ZpmF_$c08SWOSyg%r-ZF>GP z|8l~-MnQ?2f=^-)z?nOK-AP*G*wIt{AeSZAoyDk?CVVu4_C_zrAZ|GKGXC*Cmas0_1#gxuwDUe25oaD zBUNJffv5hQ6m$JT(t$nSZz50AIjzPejSiQ~78x0*YJ4?@gZXcP+~j@8lEJDhPdGXr zX?XkD8I{Y{C&rD?^R!?!}R!Qes_KC0_KM*r;3!ByG(8 zA>kjQP?=0wZl|#XUPVLZ%UyanY!W@lm1&upN63*OYLU^Oe|3PIVl1`@xGO$MY0*~- zOu1b;X8q!k&|sH7@U-?~>hMr_A{6j=hTF#IfZ^d1 zPZf7?6JnVV`2vsLcBNU$EFt{^{@*|*!V}`JlP6qKp6OM1FRKq4g(cK|KjWT%H`zaP z9HB5beIAvwa-y=Sn3jmTmUcBhL=$wMquUm>m#|;0))P;&zLB}JJw>+%L?F~H5`UGC zzT5j7kJI>og#Hj~oNSN=zyVK7_DlnifO98jqyfm0xm0JA>(F3#r)w+*;YBf$r_uml zp{aT_Qwc~#CN4Pj>KVBY3G^;; zWq+c}&?`X<*+~m$%H>r|0oV$nZgqc@ZygZdJwKyiVQ*jqxs$XW11XX!@AgGK^G6Z? zqA;%Y!U+FG6Ibf+(XwCJLX&mOe~m?GBIsx`J8_? zp{|%P>N=)oS`*Up%PM-Wbv9Z6;VZG&9g_sauHn6BpnuxSCvAoSn%UNu@SZa+oLMM4 zTUU>lbrh)xwzvIR>Sib-U#{=aW$z-3Y>s^@=m0xbUHuz^Tv9;m0qcN~H z=Fu+ZPAFLpF*gPbeg1D?lCK{&OGpv(TN=^U<>wWWO97r#3z~a0_-D}85d7a*gFTAL z1nfnH5lnP!WeDcQlP+cphlGDCPY~S9|GY#dGe?0+S%;Yb9*8RJCbB;OGzcJ$&fnh2 zgog51h4UOcoct8?a>tfTKVI64hl#PCwh{2p;T}0X#LaU9QpI@NU7w9F?vOvY@{nj; zZ3twnrNdz5;tUXJeW^7r{^`P zNHq)PU2NQ}-n6TaxeTSG%nLC#s<%|p_8H7m{pTA)_}PFd^YKf zO}7wnyX>Q=+v-dRZyrJ^kQu~`ToKSHvdS~PrC!vy47WOZkkrj(j;2L;n_fGbrloa} zLu~rtbY%Wvr4jK^XYL2gt{fN2;zHBG%Oz#~Vc#IL7Zo3mhU=2jG_#*#>+p6CYKUlR zRwbHESxB%y+&2I}UgEh;}O^ zaBdQ2di#8*mo$!*y4^xm_`KqpnE{EbXEj)tLi1lt~*uSrBYHSEV2hS!vF ztBASUbe!nC-|*=kj69|!$y`JhV?+ujDT_=>0!QuGJK?_-a6y(YrdloeO}ZMm);xmz z9(J_uM*NtGp2UL3U;8VYcBiS5#CJW(75BJ=1@=gCU>Ecf6^4YFEfQarLPCptz`tsb z*`GzyL^}beTb*yG8gH~a{xSob>!)(4Ukry*zpkuwq|p0(S*q#eJvB*@SwSew1X-Sa z0V+-77qhh3{Mv+3r*$devSh>){*L$sU3vI}F(6yKx0DND??(z( z>*BU9sa5(piIoxP*dW?K1w?6SuzH6cFVo@=E!z?S2!kbJOdhPSmsWXbMGczfeln{ zl#g_y@MS&sX<>rgx>(#+LmI7Z-?4N8(($3#LK9RLIpr}jOi3W4J@3Yy zDt?nk?HM)lzl}9!Dyb;Uo+zWDUW>4NjogV#l z)g)ePYvUUVGgR5ys`eZ_jU0srZnqBXLUWJY!edxlnk3x~8Fhh4LtvqdJWhRHW@zgV z;a868?FUTsTyX}A1NEb_F8X4%lO1*kI8tu3pLZ?^XzS30c6z_kkcd4^fU!No>iqVt zA)`bDL}+@>j6W}G3y&}QCnvr9%)}FZim#}jMV|^*Z(jZ>eFs}Qa^NHU(BW$=!d-q3 z#>t*@K4KgF@H!g#zQxA6#YPx=W#IP56CpMOt>6sbW`caQ$i%=eBQd=pX`q~8il700wS8ETAv08`&Ibxu{cO>3wM9K;H zj>w+Js3m{i$`2J*ylozGd%qj|kU=%%w4vauA?y31>LkHh;k{2sm>J9ZEgzjGOR6MO zd}poY^KJ3X)4_!`^V$FKyEPBs_u+@Y=iSg7*(|WKXvOXDvdVUQelZS)avOECXjQOs zbD}868Cz}cb-*s6Y+&y;DA03iyP}oYP#WH><mpp`17dIg~kE5>TWCIyw55zb9 z4DO}`paLID&uKbZc;~kO3nJq_Wm37qHJe6LD}l}3R=qCkrh<|yif;=JX;U}uHnH|i z<2%4w@`V!@(LM4?!$EZ$nLK>9u|K9n8AFMzyBWvCLKBgRHCb zh%uLmp{}tv=)pp1OZnTBCbp0G&d8gZz;Pp?;tl5=Ml*MKg~eL)>PIm>;y|gl|p578q(?DhkJSBSYwmM#A>eYb_s|TV$U>-K)44!2&li z!Gxt0mW%hU{g4yxOE)6^81JO+XJ)**I+nA7miDd^WC z&^?Kp5m*#ULULvc*~tu*9zJp*`{)W*qnfz>EBjmrw#hB1>GAQ9^ny1b757T4n?z05 z!Tu;BW~Dixv*r|kf~gYY*5oOgyRg|_kS}I5S{=u?A{XM|I_X#)zI$Ui=eP!_-4Oqy z?|1x6iqe2nS_;&OY|tpZqY&x10fR>Ndrp>>JE{HGTRVyK=S4KVS-QTNK0g~BzVv=9 zvNOR*Ot}INlSXb*e5#CYcuxp}rb^TmG>LawvEf`rA53fg!=ttVgz?A-?Q9Xs$Fb%$ z8xD<#$b$`LD5ZdJ8v&5{A7QpYNpK37QFu!&){5E+rrfV02P)6sdVyi;!pB%)( zJaco!!-M0oHZNME2t%%+q!Tp#ru3K#DEvapIg##cfev9Pnof6CHu6o1 zZadx4jsUVt1LCuq38KUOt z0RQWfbZ_<{7my^}V~Ic0hcMl8YTYJ1=9}FMCdxfjB~RD22gfSQ0P8IGX>&-oVlys$ zm`&S#UlWh9N$mvmX;^x>`Dper)%iD+(sJWwOp&@W{xaN{SNrKomI3deAGu2cIQGUH zg*u__4l3HG&KkziJ?kEkY{CmkUTy1sMNPCUBHhE=gaAk#t>fk7xH14HP$6_(iGU_* zRb>gJNa-!EA(JaPC0*^sio)^@@8A zk19$9GIQRFM5M1-h0msHKz7mikVULaZSS0p?Ea>dJ!>O#trNb0CYUCDa|bJozw{T+ zwK@@EQub-$bFO&a6}Py54Nq0CzNDyu(ER|LqiFYx|0I&=`D(19h;JHEOLwri=NCa~Ch1Ho-Tjl*O2{j(Gp zUCJxhIRrD43tYe6$Ljs-9Zqr}VsSi$^T42;#(Z+TTk+QtkcS6;A5d8w8IMpKu6-g! z4$!JBpAM~tC?1gz7bLxxHXxStw|Zzpe4z=qCq- ze1`7ND1HQcID@tyqGmXBFg;y(7$Xl-G50>-fBq56=TV-$-Qe&LcpyObF-2~R%4&XJ z!XmrLBTBOJx?vn^h{X0{TWrRfwkSz(Jl}eAk4VOh4C*unCJ?>z%MpIC4JYc?S|lDm zXeOS5#TWSEuia`Gu6Hbf`%~i8$7_#O?$>I=^*u05GzrqKU@gY)z9GtaMHE-VM0{T< zy^y@wZta-MeMpTV?C>VSZ}4}pUte64FsZ8ZJb6O=OGBt@czqxrb#aLWcu~D)WW1`D zJ#L1Ya8QQeN<>x&G7d?3H`T*{3t{OvleQr!W5f%O19Wv{**ILaU(ZKW% zYg!sQ2!{7ZYRP>jhm5F-nDSFY|_eyP-^qVO*gE6D}-TZ-5&Fqhpn#1I_ z&>zHD>j+B+@;Dr^!E2EHkY0|+(u2b|Rv25-j$Z7++VEETt1X6*m?R_Vs(^rIjrp$% z2ONAGf8mRt`ZE1GJ0@MB)te225!~{hv`?>HFSYrD*V+(pBVNop6Dy7)hh9x>xz{xb1lZokOS`Df#NBUq3aFnuWaPIGgOC3&}=u;x`|Drgb z`<4RQP0Ri0Y8U_{VLFk(h<=v7KTN#{1M5LjWwS-qA}*uQzafG9liRQHKeh*ej;u@h5$C;NKn26EnsFE#1^mFRs(iW&I7^G%!57Gfs?@$MN z!)2{|U0(`XwY%RAy;$D!YwL7*xnCaYxE)yDd%u5N^t}VmTc;8y)_$FCetO@ouMb^~ zVk_mxXZ2#HSDmvjcsU`H`3}1rQkMHT&S=oWL&Ph_GPuOnk6Z}aIsOWVui=WEIQcSR z#!BWm9Cc-AN`84V!ohxyVd;95a^abrQ8N8dd}BmRz;rIw@pjzQwa}Dq0(`>DjLwQ5 zQ!i(wTX6(pjj{NgE3mDQe z8o4D7cp@lctZgtd;kwjedbBNnQ|6f;)dMf`BpA*q=M5!<<}S=`Zg0`#vZkY&&0Cs} zf}~lX?P^(QMd^6pzVnsse}WWc?9;Z}84lYsg)~bbCVu7L{J)G zTrmGj=mzTG7)_rG02ep}!`{K77eRM|sjGh%A=sD`uKO{YN;U!G@F)Y%%IdJhumI4P zDRNklZRUUb+5RzS!$>w%fue0%J_aPiBT$RAYQGcB2NTr%7s2@tLk6>{;1*B=i?TFs zU?3KJuH-5Gw+paa$^E~Of2c7KOicgkv?sT|f{wg{wg`Nj2#SU>SL6&2+wYuNFyN&! z6!Uv!@IPNK48b@0)m{F;(P1qO=n78PxF#9ByI!B}4y3yUXa$5%BUTJmU^*Olbz%lH z-1->sn=a@*+=E;b1vk94E7rSfj2bmzbBs21)`6`rf##QLy$w~qZ64hvmlEB3;%S$= z@2kMm`ORNldTV^T-W^-S3pMVHlwle;oY=yWaNqB^G9Ce8|X|PU9 zzT3BFIn>;=pH3FzG9>SHQ6KIgicHDGhaWUrtfrcrW}6L3GoY_*G6RW9M7MNq9)K^=kW?MV9SxTgghtMhy}E<>`b8$FJZT3XCy* z_~kb-@BGN?ZKlQDK|K8tn@%k|Czc81z&^!y!Q~psV#TiOK*M3*}(I z#HSm++u}U@Gj6!#H#W!@S<2y5fdgJgENj)LVqSf2IA`a^8j)K{02IKDU!Ks zk0SM+Yz^B0X(+|B+>h*{c4{F@{AE0;%}ON`5~LD3FpA@DER*yisWOk*6MH{zJM)EZ z(rEKg<|a*L7n$hW3ey!v>}{Mow@;JY3jQgR9M(3MpQ)B=Kj{(o9@{PSlq_YvIS*x` zJ6G?HG{zZzry8uD$?FaW2=qDu&oD)_X3^txC}E|@=lQpI&uIflu{G}hR5uC4WIcGa z7Tt@^RyJo|n26r){l?RjphX_78jed2|q&wX=BZY1J?o&F?}w+i<{hiP>Rmek_WeS3yYag2E@h($|O+;HCQ zZTX!us9wNM0`58ojJ}@ioS6+r&c(-X=6l=5zyY(H09JIC`4PxbbWeT$+=_QNkWJnA zNAY*A!|RuhLE)FHgmxEbpq~@4vhN$I>x*SIsQa&@11Ljwon<=P?rs+q50qPCB-2+qP}n$ranS?T&3b9XsjR=$K#L`x*bgJ?B^(Yh%rI z&Z;^}Qw4f2d*y6QL>fd%0!6Ws^S$#3XkYV$EKrGX@}`p4nk)}caPuJX1cZU%td_s8 zjrxcRUuh~Qz8vs_EAR8K-L@ZieWY&fYPQ2jT9nW{&7Yg0JPnNY25t|M6%nDnV4PPo z5JR3-aa{HsX$PaqJ^}aR}76(n)XszPuFTC%PlZa0L=-$o>uq z|9;j++)bGnEpUZ8lQYxr6>HfHB=awN;rlLl@d7OX1AFG0n@#B>L@KY}V#B28f`H^h z$w}+zH{*p;2+bW8LV5_bm+5fJh~%^)mn?aj!;qofdj$r}eaWncBls}obu)3$R8!E| zGA)_37v1E?x?+By!e?Op*dpCSJV1QaBe0WH5@PUYyQ;$UAZz4}Jz+SQm#L&+70KQt z-0Gs$N;#RSlY{&ba-JYGxgN~0Oc<%|Z6BgkYvIXUt*C!v*7IE>i7GpKPJlO^zZM~e zWr$jawpsz=m}eFSn7ectd56_qTMvb>ar{dZgBguflFPYBH6KIACs`$>!z$EWf-4g; z(v$lS{ScM85ffn28{`y%H19xOD%mDoLcHe`rkfKFg#(5nyy<^Sh{L3i{3u0x)q<5+ zfq$qf)NA1V;yd#$LIuMEf;J>cpapsIsW* zV;%tf?&Zoa<sIJ5NhTc|j!#XiFY$!Qk#3zv*s5A9H^9UgctoPJs zom?{JmIq`$T$BpD;o_bIGZ@@S3lFp2xQuYO#o9<-$|LywkzoZTkE(aEx zTVNRg+-W;@^WPde7ZV{Pp@XqC3@`8hKUlK-U;LG(t^60<9xNKHuTZD{1ZnI&nP_8r z_8TINBOUht9{azG^kE7(K0;qLdDP7b@)n*{PjZSe$fyv~G%95xs#uCtg1+rj2!eDX zN;q7=q#E@f$_Vx6O*Pt3b#HWuz=3s_s-Ur z(?0^7_bYDr?(F>C9V3kkER4#G)t)ZDe{XL?pY<9JH}zkgNscvrNkdFV#6^;|_e0C? zh+kC!9R?b`idK!@4K#=}c+|+&;8)ge9*^&UQ~@)-1=N*ANkXZkXi~G;rYdWESzueM zqepnZnR1hL{i$J=t+|c!J8kJR;HgQ4?)M&{I3Z@0d**pT0_@)WJvHX!fz*v@UGQ3RyPNM9nm!zh*_Jn!8+Di7rp7Hl z*d%78BW>x#FrwVvmIswxn)f)Ivg@%akv{6SG6uwBbp7pTOY8J?2c^uoHa49%{!6(& z4%z1Mw-{|Nmns-*`;1$zYH3YF&vsLghHRXJ(1e=IdsPlsGJt<3N$uGljBy5{SP|Mx z@x}_wk|+HPXlp<{_0X?9!?>j3-|+Q-^Eh&b?}twyt>MV<#$ARpJ{U2ykl>xj`pEm?ewjCs?i0_~ zc#v}N>h^SEua&nZeChPjFx#0mFgHIOS8sclg3m!pN-_)0m28Gd0EYi?~e9 zW+>Vo%)kQFbMdy;-))iA+08Yy&Hbd140R;85W7DQoE)q#^fq`3YY~!B zG$ES*)hAmKRGW`UYa~As4eN1fp8GsWKMesO`oPf}{`t3a@@MAb!(4^C^zN=;L&3R^ z{i&jk0IjF&a++_HI2bQ^5M<+tnRGh+JPZF)XqNHLru}~DSBerBoFA)U;4o8rLYrBD z{ks;r(U!}IiiP< zYscELrZ+IQNofe!oGc}L=0S~G3PEx`{SoCaM57u|dq<^v_Jnreq!iVT$$&W?U}s_O z{R!8*SS`)Tg)XB#ryXvMOXbvQQG3?et`0y-hJPoV8S3#hWzgXQ2vM2nr=PWYjw{f` zh^3M`oUNN8E`LLP0QVu`1|6=ylM2TL4o<@}SNnlZn z?kvgd!AI&q`RI+Vp{P|;y=?HBy>mLV9r3S#*!ot%U2MA_6rcHPa>KX!hFXTTAS~xA z>sB*jcuP_i$si{Jv=|~JUCh6|kV6BEoLHkJ=Rot}l##)RNb*bgYK8tBU6ak@Ah{SD z-N-JRMvQWs`G!Fx3{E?FShI8%|A`DIL1!Qw4f(702gNX3QsCZ@Z47h-s?Be=A(39=v7 zU@)RisyO*)yY9j(8)u4SbCOOX^N_D5#qGSyn>nr5Dpr+=lztH{r8JPq4Q!D(>haN>7;4A zaJw1^S_!n8y)AjAH&=r#DS&Rdias?u29Qe-^ujU)dTAh8BE&JcNNW);ws|K}tuXA# zz2?E1UPa$F3eyiX2pO!P7CGX~4l=oo%#zJ9HZ$P@XhaaB|JZm7LQ$#xP9=~7)<#=0 z?=4hY@p7ZylIqc!4zt~Svc3%k;oD{CdIndSjPIr`-=q{M6GnjK`W-`*&#h90^LrR6 z9Av^1y!ib%P+hoe7!8`j(bi<^m;^1FJv>~=LsE$90SltvUzdoVP$-W7sI4b4D!fN*G# zQw8nIbQ_2#$t= zpg!;m=gnAFQ<7yb%fD#M8$4feMX#eey_%KM-WXkBcL3zfGe}YQZ?>?UMEDMN{u~`r z|Lcqk=KK(NRO8g^%mA8zqjF*y65OFK;(FRJMk#$`m#Kdd0ah_oeoVAHn|`eIqw64n zD=n&$^)46n;;;A4!qM6}dtb_{YMN$t0E@bNnLgZH2BMq+FV?T^#acR(8lnC`t+~m| z-hpr)-=-I7-o9cFge%jsa9u?gdZ^vYoK$oHYN0mvPmx9c5(M!o_w2jx)DRJL)(VKh zPTKji!%E09!h-;_gu8=av>A(TpN=P`#2{IfxE92WuiGdgl_ur&&XGSnVHije01HIW zij-Ej~G6zaS)}4=&hM&)UT4PA90Y+S7$JC_^a0HHhNlceQ+xU7cUgiJNWv;wqcPQhQ|X z)Bg6rwXVwebVY825_WwxJtSV5R4OgpweH*f_N>-u%BKOl(t$=R)g(ubnuZzo+}L;Q zWm;#FNv7n+jVlKpV|D7wx~XCikH~6T?zYV-sDZiQx6R6`*ro>Pp_6DE`rL`}SyX}4 zws&)!Y_$Q%qB!{w8y}Uy*((8ZCCZH+9`dJ$ZgIiE+M>8D#IjIM!W-!vu4pH=Yc$J< z&%KG4?f6#ARKAtl+C;T#kleu&0kVG%jajT?-CON!qV2cuH#Ja5=fq93oOZ;*!RO=oB`DS*i~o{Ur~ zG#+--5asLeMD7Q$w(?*ri7X97)_Yoih$7SuzlJnRdqi}%@;gswoq3QW&tD3DHV)t< z9&TLu@HK(Q6QReEvJJYX{S9W#4%M~UElUbS*pMSn$)|whu{yjhx7PPYJ2?@^R68>> zq-fzL(UQXcc)#tW@n}{Yo@bjIuvnvzWl}_rP=B(X=y-}I>|IK&5p6z<;==Id{(Yh5J#D*g3v?672nbO-L>nTu8 zI(%Eio)myBedcUSeq4NR;L3(YC~B*jOe}*Zc&^xX?%8{1RZQ{X#bEzKr`V~6a~kD! z+q3U*S0|IrbintYKXcb{Cfgk@=k8`64OX+wNQE({lY3I`G!!M^Q;lbxrZm4vATa(d zU|Gb@%-5dMaav(h*5+RNirH=tPkuVjKi)n}PyqmsVH5*LoVxUZ=`r9R)ca&>yO~(c zXor{=q`&c_v?-}SKJzcG-G%x%K)Fl7!QHVHhMM8aS1A5wNBbs&vS@3)%dqU3{q@~U z3GOl&XAMad#_-=bSEr(BoJhK{cIj)4N1{ENocn=0$SMaa4)_vITj5&|T(o`&KMk9y zE)M~UPCyVKjpE`=K}G)RUHraS@T16)#e^i>SGW5---k+ReRhol+7~M~__$t13#+zs# zGIJ)r_IpQ>n&By`0%?bSCc>fs`|MA`U%?T;wv*#?i_f892$umjL*~0=sBg@JOazz? z>4=C{7q(igwV_DJ+@gRI;VHpig zG-EflJjqEwMD2v)p=>GjgLu0bp;Yzj3Z(A6y5Tfube+iwPBZ2i`z0_>Ov$Do9V7w3 zN+pe)nsq>i@wwvKdRAHKLus2YSz>y?WRet~ZJq0k7IwrK+H@-2;tnj&9l=08-f-lP zf+1kA)gRD^eyXWc$nxRTR4Z8S-Ukc0$cr?giK))_d@R)smetYFP(uimd4ykx9*s%K zl%h?Ut_?r5aP-%An^$a5i~Pu;uqgykDLboxG9@hGAhEFuTU#J$ZB_UJGv|oEojNlC zCwjSJ8ylRCnp~w*n6wzOL<0JHst7K%9W{<&52Iq3z&Wt7+`KL}V?wBmnMu-#wl?J|=i5T|o^D zikO*dmbI|gPGdoH;Qqr(n=mhKnKpH#tpx}?`P6a zZ+7@f9FX2QkrvMO3fgd?6}UKHkrIz5XQm~SoxN&9%m^whF2vJ^(Y?r@v^163NQ_wz z%{|(Pq-~-!Z`j{|Z@v7GVy<}OGwJ+9?BQ|Kqdr1)elGf4vF(vDh)VMYq2wnkrz^VN zX||hwRcTuxi9}NfwS5#?J-Sy_i4&ar?!Cn@Tj!JI$LnWxZr7nb>nIBlLGWSq+g8JJ zZjVD4o~$ioTDuIO>&}`n4W}Hl;JCNdM$f7W3P0V8N z9OSJ*+qu5;lhgzKIZ5s^2vsneM12x6*gh4}p zYOc_Z%@Q~SEQ0L%!6X34KZlNstb7YOa79VLUDVvcv9tsa7^pBo(LT~1RzNpApD5M1 z0+RCaz1$mFO~DM%DQp4?nNKbgSvJmrXiMt=Iv%HZ0L&^YHojw*345sPBWu zjsPehKSu9*xSC)ZLH(z?oE2ZlDvKrwaQ~vGA3fcV+vD_FH|XL|hb@Q&r&Ygl^rG!1 z!GwtH`a{}ft26Z7><#}FJMK)Yc)S>u&G9_1X*Nhud1f0Kr~fstt#yIvQcD}26L4;% z2rkgLu?iqE@D1ZU7s&~x)HV~LGTCc`jPG+NYo+e-!K0zFgj_Jb6Hl_f!QkD`H?Xwm zlZwA40QG^>Ifyg~*OK~#C}Am3JLQwI8y#7<{d9c9VJ4|F<+&N7)sM5zzdX@e3kH~K zSRUohSS;b2a#ZEZCNwMMOg4vSwKSwqMBf3P%>^(L(o4&=ow?&5d8jTNthM5csUc1r zsIUgLC`Njz5YT0urK7HiOT;aW72HJm!6BysoP4bkYuEV@JT<~0x5iU*S<`*zYv7>L z;Yxs>7=(j(=j4D+mcH+rj*{SCpoM`iaER)_IY&dvS}Sb4p4#i*>4l z?F48Y{IGqmZkcGZyujC@h}Jn}OvuIbOwICbf5%A;L6GROCFsYqUE@RQdcfs& zVn2jc7)Jmjv)I>DQiyH}s_sh(Z;);R%kdzjrO^GXP@l?~;Ia^a$GASp z64Z)=K6A94gd|=e@lHLtW-(I`{Z;1l6Urhf^CGNlql?Y-4)G}GHj5*8hB(k@i`_(X zjyEycDt=Gdu>a`;)bD-U-S&(8M;K1GNvL+ea&pn%M5HvT8YgsRE}ijIDl>R_;%2)x zcd-U#OQL7J?9F`=l~@Tnj%oun2ha-)re@|2I-``_1!Zhj7RPwVbbf=e#!GQL4+mW2 zdJ)?JC)nmoW6x7sRl#~!PU?+X_9!a4Gys zM^1(NKid>hI0SkdKR;YEENtbt%9!#eq9o`T$bYNg%AjYz{thM#OdM+uMgXR;pRGj zaNZf0-0M_xss$bDSbFtdFZ?yofllS3>67uT({~kCD}OA=#lEjXcccX;HkYv3!mRkb z8epgW+fkD=Bs_{MIj(sW*un_Q)q4!TE%PgiU=HXS)>#U5Qes1N)eQOBFkhV+JJxUP z3&_Ce6!KH=^yaW;&o=5;V?TOs(E2R<{cbA_tPKB;b6gzDUx@oro6{zvr|$7 z#{FlCo|QcLM~|{T2XT|LkSBv+`!`ycZGa7jf%hud`59t9d?z*|0ucvHQMKU#M>{;g zLTFEnpBjrte;CZ8_V+`^O+ud4f+|V)rr8F$oH~a1{4$YCGcM#rf>S$*vk$k3K&V4- zYd}R!856ywZFFa(Mn{oW6#_NGGmjeUaD_N=bC<7(ct;ts8w+vzro5Fl`IT0yJ;0-@ zeez4qyhTxh6vT%Qr8R2o6ex=pESlHEdGSvq+fFyEdYNd=rZ5lQ39CY@)9*sPKlZIo zBA0f)ilVhC)De@6_64X1Wig$9YS=bhd-|fHO{4LhjK2Bqd3kJFn@j!#DIpv!6Up$z?mUOFM?zsa%jk$v)F~T%kel@*?x||TCHprZP&QeWhi?(lC#P)vkV;K76jm>ClxU^J% z_a&tlkN+lez|{yK)5=4sT*Mj`uvk<$;C(N%)XqN_zdG08OeQZ)P*8f=F+Y(R+1}_5 zBS+&VJf4d_qaa7gV$(s1Q~{7Yfa6D=nKBoy7coH$ypsx9GPa1Kc@dJ&)6R>fGlYC5 z;1@i&8iKW9n%&E>wP0TW|}!h!%n~D8x6@^R0Hw%e6sd7c@t)uC)G=-%9DC zC8~6;ufk&4!EK|+;WW)S0>!V9=kR*BWG>sfA}X#@+S>?T@7qEkYXd}J-Q-vB>a>Ih ziY6eqA{m}?*dPXlc0NZK7qNEv?C<+lApEXwE_zb>{7-m=Jkwqhv$rqDV)av zd(7+#(EB3~+H&m%EdbI^$0nWNt2*3uP)mR%hyH?M0mU*RvjdrmL4=_ z{V50%p}|~Vzah1tF|*M3B1T(=&VlU|HV^Unk6(t5fH$(NfNz+)M@bBA_Z(--?5u39sEHTdS3JT*rLdQ z{0CV%)mm8nrzxo}wA~Yfxp*GTufD*F4+|U;+)WLh17XV*u51~g5*K1Y5ZxWKm~V-| zSV0`5524K`YFC0-RaN=q6gCk-5{g$D5!R{8F}9;{cq%MLJR5&EF z$4q#KZ0=Nlw&o*v@< z_6C#5bI7(nR_7m~kmj*_bGv<#cKY=TiP@B%R93vP>-{5DhpMJ$DF0c>67O*~_sBcR zi{5>@qow_Q=wrb#lUE+hih}Gz|1mR!;9vuLf{EZG;Mo)0eLr5D+`je=(P_p==)Xhl zht~cdYJ~X*bEflC(bIyp8Mirl?bjzP=mdlvp%yE?Iwsdd)tW9R?;eODch8tM+KMD~ zaBgfdw@TnFIdNb2r%dpT6e0ZYt^DlE?Cf1GLA^e|uHQE|s{FB;6A}-i4#iy$p-e6* zLO0`dPWYhLjeeh>kIVD<)AKTS#1Ah;r

bV|V+**~Jea0vPY&K;(F?Zb^tl5+q6> z*Dn*gea!X%`{8N(w7k9CEUI+BZF!7xa(BrL!HZGj;v5WMW4AMc;f(Ey|Ml8{#x zFGZW29X>9<$M>rA?eO>RJwoQV~JwL4$efB78E(Iu9}-S&`9)*uZk@FD}d zocUOdwzjkM0Img}NZs11`#t1jV5=iSnHBm0H7Pk%M?4pVk0_Za$nIm(=Z~$SJY&h>~3o{1uGu zW{?vxrC3H*WcQBV)Y;;*emiJhm6ebtPFYZ&_&zFo1?;^K*cX7pZs2uLYun5DD5n9H zXhC~~7x4&t_5$_nWsB9MrxMiuIeV(uR6{AcDFtH5ETpnjhy}`B$CF)5%|3UEWcT`~3n-)Q75s;;-xYmm8{QIv#I+e2O{k`D8Q)=k2cb zBFy1r9I&gX?ka-T>EmV^;X1|US&?C)xEY7^ss9Kix0_#->2u*n~af&$>sU8JIPP6aOe2}tz7tFLX&$3PI694rKDY#T7P=ksC;XC_k(a1Gc6HC z7tpCOgYX#$OLG{YErYEjEQ0{`k`-*P7Ek8*mUtdh;@BXtZUVJhSw#U=6c$gDP4Qs( zGtakoRNVs~(*9o26fqj*&*7_^MF_WD#kJ(maa__fxKQs(MgmJf#49YY=%WZW1@ zGsToE!I6|i4ZeX3#<0F`Uw|`(Am*|olZ>TJ*6S02|!VxW|0L$0~ipJ zI(j}*WWXDKx{BRAJ}=dkJB;f5*f_h~VN(U;p%Qk`0R= z<-0E_Sn3W4Z`~R+X+o8I@4#ov2d`%3-EN`TS;EpfhtNNGS2Ecx8^YR90+eP?h!{i| za-1KPJYad7Uo%ygf$2XCQoHXz0nA#o^`$Ull51(SXl(8 z@Di-TJ&L!bALc(Cj5tE# z1$K`i`k3fMb?jssihH)(79pJa5>Zt*7p$l<#xNwBp}j?#raXgv0&pP(%q3q|`+YgD zeZsD`{B~I|3^lN4E1ddV8l)5uqR8SWfjSM6(C){Vc}zj#U3S&6F`M$E6?&+wki5?D zboLi77Vv+S7hG<7X>5`rJ{<&)Y3DnBbcq&^#57xk3h=Acq!d;5HsXcnu$V`{Jhe2*5U-0E45f2|tyN=e|O)S5YvxJo=3@_x#l z;)BJ2OI-|KB7k>-V3Ah7N}usJDOWGA;aERiUVKgAA+m~jX0?EcM?)>IOh*aH7w%#^ zwaxehifz7269{o%x(5;O~sq=>Pw#xdA6=FT3`V1J1K@#usAB;UP?O8UMgt%3H zAVG4FaXvM%-_}->S)vLg-H@(|%l(MchGoDtmcC#CHvj;Xed7AWEDn)knygT~e*e88 zw=bvmGzq@<;e&tBvo4nIsV5ex0`Kwooh?_-(zqjTbD;b_u$^1@!#gr^((iG4@Q@L2RCHkZaw>OCEfLtJ5M*xw6&Xh)MYC z14cIfa{v>lGa+FDPoecT4Xv^7QrdGm#g&Vx@dQ?Q?D{|a6y`;IxH4{sLP#qM+^5OB zw%Nr*z;&+X+@%b7#-UfN^v6r1I9(6zkl|^l)`x(C*`8i#r`^q1Tb!HHi7>t>{sf(+#nUNigSvp=S925u(Q@Rj66dEvFdSDDB4M5A` zkR8SUx&Cy<7#JIis;I(cmzO86f1+lL$34N2;$MH-+IGmYvPAgiZ2c~^x{{wJ>NJR# zaw09p#9s|ebo!NO#~(m>5oJboeqcsu1mgSem#HE@pJN_1$_`XV(u~ z&EwxiDFIob2fFT?6qa{>oq(>vHo!pTP=xtX8K7cjvG@t4z z%7=|OoG08gYLG;5qI@a*Tq@muPr{-Q($A&l_plVl#b*-95tWXsoHLPe!tfbjj|52} z5dY|+L(|#6O+D%PyW4ti%yix2i0`dF!{XOh8}_G_fJ-;AC78DO;+8YW?F@6d&r)km z(WwKwrWL%$M{}N)U~5;NC%_|YEW@LQC}@{GHNkTS5-}7wE=aG~pmu|dxYr?kuC`v( z);k?sF$z65g33)*A=76~YnQf4vF)!zt@vCV*(u!jSSk+r1g#-`AA37E6^PX7tt(9p zQF^=dhYcCvH{v%*temkOSpA*5*6`R-x-k9v)~svokP+f=SQ!%#M?ivU;!u56mHhLk zz#WSDeBLq81oS1388=ECw{I*-CZrPvk9{W>L26RSmkJC4Q=2I6VWea7n-IKr^)FE{ z`jSfxU$X&Spb}V)HY>;`@4I*ROX<&(=wqjZqsnYfn$2`BPMm=aIjyc->o@d0_}g1M z*rPz%xE^p$;G6W=N&p=#i#RYys!~91NLwmBB)*E99LbeDN&7gCb3FhU-Qk^Mo|<_M zZfTPp?CTQB$&}hA8Y`c}Ehw9=K(MwJasm|*u{4;iNUvna!=yMZ<_FI}dG)`Ug zM(UY|HKAvjsp*=WZqId|s~8_t%S}zEZ899$-J5&0m3`OWQ~V-9YF!bty-~fjz)#tz7d+glC z#Ac}*ybIg^ngMIoQWG}4`ir-r#ZFaOo?n&|EF+LZ4Rj%MGxawD`*c4Ud{B5T$hcu~ zKC8Ap8iMKLl~Xp|fFqg^i&h>r1kp{Iz?+-m)^ZROS+VX=fz zRQ1;Lb&ffjC|!1;S83Wf3aHku;D7((eT&)HQUEGN@U^e53RU=zcMBe~j~wiVT0f!k z#`r_pGW#vou4+^RAC}5wCEvrYa<6bAj##}HYgfz>#bGUkD6N=%%_yW`*jP31Qo_I- zRtI#|98Ci(@X(AD>cLwA7V8*NM!XSU-NS!~1d`XgV#G-d<$0Uw%&^W-@CAhP3il`Y zUjUdWct;0#aU@dy?ay?m-UjSdVo)#1gREZRo4+@y*dOvD!NQ50s zo=4PCwvy?nFgluKEYF*B3?9!KEE!p1EqSMZ!>J@LSg{F|I4YQ!XAphGa+FAc=fdaK z5paA81(s~L&!n#A3nQMPIWnb26D5!7ii?aOd$RoPsYgN5*TYs>px9n7;p|3qI-m$j z80a{XdQLbY#1|Fsm;bv&)231*Y%OYtR3g)$;SXGli163nqb_mmoC`v|79F!VPR|ai zzr}Er#PamKZrY=V+){S5!wkh_p@h2jjMwE#@~aWKsKhF97?N~e^Fm-&s>?NNrPKtg zrVb`U)04>4N2&!D>RG^7M43{;@_>1}zg?G1SR9wnNT1@*_1kF)ujvjm_FR>vmEV6K z&KaZ~*VT>d{C%TXu97QHZGU?_-{s|n7#kilhc;00tv)>O;b|&vr^Sn6*Bskfp9&jH z6LB7s!a{jV3q}z;!l}PMdVsZB+}_dy7lb{kG9Pq-6*=|7Sb8@nGC#uPc>@}me1|4O zJTz>U|HY62mcM{3X!P#>UTo0H5HGw2rmQ~)Q${FHPs|fAf2{nvjBuh%Yj8&Ydc$n&Rfk?AXt%ItdZ*N>ZFM4`JU zjENlfzMx~wPP(vm@}vRzLyXlMB~f8I0*o<7-s~P4MQ7qXIcfA#dITUtY)MQw^vN1M za;rhD-WDT!A$fe zut#J&zX6)Gyx-o@ev_pPR`tz-#9?Q1$U0ER0ryJF!Jju?^ipZ9SfpJda+E$GV)9ci z8|BOGTJ4iU?wN$ig)f>Itg5!>!`){A{|2HTt{=U!7bnStGiEwM zv}9vJ7e^+|^rh=wHCt^R($x-fcsBBvq-s;F)0vC$Y5YQeYPPK{HMLwf<5O>1jzt?F zg_K4NRzFEzp2m{^OYr6N-+uA^ja{-W=KeKmQGwwOEe6H~!VfT4J`dp<+}9G`Bl(3B z^hll|%SuL?XDS4~BRyv;(Hfjsz)bcIE$>-V0Us}Lj@h7`qd22Rq)3PMnvxrc7l^aq z*Tdg_<2kp}T8{bqzQ#4Hiu$vg1y3WRVk?tdTzoeNsT*(gW6Lb>yHgb?v=GK@)@a~n zCd(hgFu$-5GtJ)oIlAYiK>wExk}#@_$k-6Q3(Bgrg^<{>fayXP28xt; zh8*(e-Sj04zt(+0&ULXk{ZF-G{a?tQnKON%5SS_%uL>5RZcQEp)GPXQJnTG{xgPrcNHS+qnJrdMhL!J8&GIDL4zlOLs;MX6#OU|&G{3=Hj6ojso0)C;_ zut!UMZ(rch>?yPGq;;M0$Gpc<_C8`}6fpBqviQi8in@5Q<|0X`&YJ(mNV9>MHcgf?3`Q z#we9@O*L|^u_wppdnpE8y7gAz@qFX$}exDlD-PZx!ZXh}!Wv+SW62}J|go85huQOr8O7}34j)!OHb`kExp zG^1Fp@74d*ImoyX{!!N-suE$r+R2^pzv;c`Ol$U9b?C?8x|ixM!1q;yEbhWk86*uc z6gy9jz@o@i;5`zj+9&``2RLN`VAP^U(|S7mTDpU04bJJJ4?O4JhrLvNy1K4!4+A*; z^n3tmZ{|c$`&k6jQ7MtML57$$Kqj+GI0_>Z#uYgBjR}*lrK_S?%D+>aMbGeRn}TtC9^&l@wsfMyln;St?Z_0lBy~kVy}Bnu8z+*n6ENw$(u>|iVIAEe!P+Oyx1eVzmfKx53f0*X*p+VjB)K6S1cDiMlaX(O5{^zQ z@pD%mYB*FUmaY!7bLIDVcyp^J*nzw>*BN3khyv2Ai?u6+!1xLp36Ca&LbeKLWP<{ZlaceDvlJ21W!MGPc}Q6BHh4#DCfONq^2|J*u~#&Z3FEhXBEyk{_Z$m zp4by)F>$T_^P5J!qlSTB3smt2f_!4&zjmS7Ap$_L;6Wv4j$k=Wd>y>x`S$JQTYH#> zal_HbHtW_`wObLOh1SN$gyyx+tlWE^Em#F5E6H;+RLV?rg&>;K?BrpKI6Fl1>X23rrJRZ|gE7oS}R656-~uTy6r?^H@i`AhtX`(l1cG6aS zE!lrO39oG6%b7U;s{KI{3IK1EFpF#oe1;)k(NTR-K37kL0`bDwNm%v;(`+s@M7mue z?z@gC;&@U`d&orYr|I!4WSx64e~tJ3U%CYjdSoL5fE_p0=fIyv^bPLH0jY;@p{#^R;^RU zV6==_^SX+jZ_JOv%ID$53dI3AhK=&hAe}}z68Q}eEgxd7K&Y%sTdQ(DbUEq$Fy-k6}e;7Zd?}V zYH!=HfLGKva)cSx4d6Qh(XlAr&JYZiWCZk)PiO-}zQ^Lz{W~Z6zCVa3HFF{?b~Qji zULc27d35?|hl#ln&k4Xx(mD73r&+La{AAM6emWWdPqJvUvx4)0h6S%ZidFpvr%R!C z`7h@6Lmo-KQ>RF;zJ!DWVfk;8|4}!zrtEb&;I`*}m?Nwx1SsHGTFrqT;6bd>twNYW z+>|h2PKlg?Z_j*(Yn5XzW2qc_WvGScDU-n!9@rAeaWNvt1caxK}v_!58rN?Oa0 z0$RnTNolr1xvE?~N05gXxb-N}_XLe6Pxh=VFT{uF8-<#aY#{_=1W$YQ(FUm0;_?SA z4~>t;m!fI6 zcpF?2A>cy8Y*I3#ihE~y4D0E>`hD^ zyZ`DHJ4JK(^*6AMXE(5}#dB=hT2RwK1FbKVL5|rY@G^?RownLWfB5Z^pE*DF)16gH z$RK2cv}PT1WO;_Hh-V7^UCa!fU|73De}kjbpFzbG^}yw!a_D)_mH~kE{)JR!XFZ(e zIX|^jCLgwVAqr@}4K;Eml0u=KW(1@WAtaGLlnC^l_VZbg#?^AMs_6BMOTnP^`HgT> z#qv+bouc#$SXzjJQS2>SGYsOPp#x5IHwjx&|G?kl^^&sVPS{>;#-g8AIg*H~7C(gG zBWIK%zM5^ z+nL=)ueVojtAo3N!(tm#_v^_G9)9<`OWXQa#N8$Tj{g&S=_}wp`|4u*B%2|B=Z61A zqvZCp`Td~YLtx8S&Vi5YJOMh^Sh*>7H}Phh0?f%5?uK7UF?iCqxGepW$Y;!l@&Szn z5zBLYdjA8l!b{Tp5yxF`EM^JZeAL?fI=l~44t9Z7xhY^r298G%qxlam4)GlN44=rm zh!|heNpR3h(FmYb@Ui&qL!IqXjgeH7Wt5%JvLDETot_$dm%bs|L z349i)2!x+I+OU`4SMpvObo4*mcJEYE6kSr6WiH0n+so{G(lxy8JhtWfD=_9S9wx&ngCTqYb6%|Kr33j#@zP1GkrtJhP zbXw9>O-?36l=I4lw{fsf`!WBA(Ugbnp z^6-AIThfz+&o(%M?ly+?{K{%UJ&&Uto&X}7Z~HpHAaV+9t9wRJ3l8hIf3sVsVVGX4NrOg(9F>dqse}Wy$KsfaSiIM5CNaqk_YQu6UN%<#d^b()KR29S81Wk+5Dh{>x)Nes_V;1)eUi+igWw) zourI`p~z~}LT@~0p06PDmD&IXGjZbm2VE@38ty11D zd<2R~Q9ANVkt0p^>r(;0a1He67!))N2F1`U2B4uae@6tHQ0UjES&Zk^+piE!1;?)v z%>~t0e4NHy{4?`x>*eI0ItT`wWJE}U(T=1OvdNqhfB^3}UwuAcc`D}f4aqnsm2ELt z-#o>=!PsK*li|vCEi^qHgd~$5_iKE`K2H>flg%;B$25RByGT1TE!z%)mpdso!>(@@ zMU6Snj~K>vD%lcvYpr&2-1Nss?v-pC_IK1!_q6$HFFMpT@`fh)ezH4I)fzI#0_xq3S87au(rXAfCO8wGI2N$96?* zW>i_>Y4llk{TRsI%Q<{Gou*2W^b>ksL?=>AbrQhyfktHp$pL^kVwuBJH{$SkaGmvw zV81R~eV7uNE|kX1k3839_ZE8yS1Nq4WsW6L_(kN)z9&j|n?HSk9*KK^Ws8 z0`RWZ??8&ExkVkC7`;^-ReKsr_?kvptMwUz;5#uPW1dsT&8)FT(a`PC1)!V9R&ouh zjb0lct1hrrZ!O12E+;yr(NVkadl|UD&Euo_5P`Z1ard1L?*r3{HS2?YOt}{;awjE| zWhy_oi(ADkfudEKFOE?cl&A;5S8LyQGqq+i3PIDlGYEmOksKTX<4ideSCnDU8~k}- zZ0CPJZrXox%u7CS1kg~1){g)q6M^0T3o$tU(^>}MWcgo=K?Bgz^~mBv`q=~6OUPE8 z>Ldz$OZ7?ONZVMyJ}dPj(rV=%*~7u3{CwmU0SS)DxjH*0??lLS=zV2laW6%1XYip! z>=_6pixpE*+UJwQBP68(9m7QP%5^0eoh|ZlcKdgBe(mh(`@MgmoM$ZI>2vu$ z@Z2QXPvb6S7Ycxsf;twv-#PTSj5faB7>F47)2YYp!8eQajMa>4@#lSOXeJ5V;Lr^0 zJ;Jemh6$#af1_Bdn-Fg0;xVC^A@Uxp;?5eW?30aFO#sUvySJZ^#sJ1os(ySBB(UlsXaIa*@rN11dt%raPI=H+w?i+Br3#<}SwwJO+fVK3V@EijsAbqmGkETZ z^F`6x?chGCwiGRkgr1zNQ-GY3W)m`3t8xsOs@`YWqXNRQw~L8n!VjNv+SyoIyJ&e< ziK%yZ5(fwA8B*wo!a5g;Ax5F*p)Ka6~^+HadJ#5op3nrHX1?#ItGAu|dAQ>gRJ zHhN)|{W`JZ(!|*F?{mN@)5fU~SKiN!l|LkjJ|JT-N%0WN2I}KRtW@l7T4}Oqfo4w# z+#Q`iV}$}bL;=c|f)IuU@<#%yr>=i5S@(j4Fao5kIktrf+ZrLE!_Bv6GNQ0+S|MXN z{aVFl%4gOor}_$Gj+wTVL_mrJSrHMNhbJM2tuS*Wxy?l)>tLeoG6Hc0J-#X=`_xZm zf+Nb&`Lz`;8(_+(o)e(-yZlC7vO7?&Q9G?Bk}Jm^IbWfIB2c2vtKe8adXHcuzz*68 zzZ6jA_^NX+j5kd^4im-)M(+4LWt;GKlHfcJReqA6ud4xRXXXd!%n!x%Wd3(w z9S1vJe` zdR4P2#XAiFryRxXt~=SS8O(Nvp#0dg26O-+`ph8P>`5u_M77T|Io`UjvYLq!8*6FF z7jCw~z)G{K2~|6p?^{*?Q)%eLt~|cXT2_G6IvCh+WG89yjZef0UDk=VPAtl^4Yocn zyPDuHaIp1fJzo9N_}tD`4aG)vp6j4=2qZU$BIP(UEj?HzjL61fq4{-8^ItsZ)|fjJZE8@VZc>Gi$i{%v04}0!B*X-E{^o98 z?Z2!`Jc|BqyT({Y#RBVAC=9r^l{C?|x)nq%(R~i*?E4^#UYm~>>i;@-U0{5R>isA; zsfGrO)wvbMBp6ndA_ibC#oFmtlv#7dm^x;;bwrny3busd!=JazZ7ls z(^OB2m+s6XRywy>(7uoXPhxKTVJMtNy)~;O#;5i{#~huPe6*&sW7zLim(C+4eAghi zyCRUtf<5;H*Ga^1x?emm-5Ua&o;wqQ3hVGmxc{4_fgQoR84h`ih^$SQ3hOd;{<r zhS_-ugv^g%HN$HhoCCpO$IQ4FihjbXzkxTrclfF~wY)Dt2jb}@4SgiOBmvRjy41Hsck^x?AQxJ55~ z$Ge5RLPbIN(Bw^hE|Utk#e|)u*6>cYhJhe4I5Fu~T1$G!wJd2vif~LE(~rJf4@HvX zEeiHaUM30X0|nW(6RrY`scnQ+;f+5Q^~zLvJ@nznepiGW$}X<0E4n}N#pN}g9Lu%L zg%Crc!^j50(FBHcG54@Z8w&$>z!M<08v<5F zuyP@l&_g+ay(F|ndj63W-&lB}VfQ7&{`sV165|#%EI)++x84h4Ji4abCdYbxgqDEIy{41{-ctOq@{G$o3hGE zItDIk8HNT)i9&r`^>_jifm)Y;BTMh8f1lypordDIf#hAq)co0J?uP%3TF8_icz=83 z7{qtX&6huZFLGl1*Vn!7So7wDu=Zxmqt72lpJh4%VEg{h(S_Nk{pCHVzZS4Ye8tc! zB;23v>2voA>#o7%erPl-vhTaZ+7^4ldgKF_t7_qOw+Y@#Ikb%m!{I0rmH>4HUDh_W zK>pa!mF%QXw!G85jsD8O_;)f^UAZ+fQoUks^Bc)`w^w zT|O=QW#+#hIki4)>*uP1@)A*Bzy21J!(iIsXX{>!h3e}2AWH*+_6A14M3U}$O^wA1 zP^5_9t?i}Iw#o%oeFXBbgt%x-l;(&Kky6I;o>3;`7>R(=lt|If5C@#~%3Y40A6V~N zlg1clIuwzy&b2M9=%o3)Y_0Hphx);B4Ip9zMFt^KAs`41pq(Uo!8H&$GC%`!`Lc4< zt~y3x@YcoQLtX2d3(IH*yDx(neMEvfu6juz?OgN?EiF%ZuOsgX`GoJr$Lb7APtvujasUY zsV7=MkhuWO9Q9ocZ#mI6RpOD*Jt<2`$JIwk)kSjBpZgQK4T28u-;37!Fb)tr7-NP9 zB3y0_61Wyk zF@Ae)BzggMjRFWUl}9|auU~>@Pv<)Is&oHzg+>OJ$=tK~PhV7e_@-x{doE*rnE8`^ zaZ^kuN2T8wNX|ig?OzHF#uknKl7`gsY})aWOF5toHXbl8mVP$MI0_{;AXPPbHx+Bh zQp>vDlqq$8uGlJh?bWX9U(mZ9rbbVFRehXkmqU0-e+5La?6};8w@+?H%MHfo3}b0T zAefm6abQWf+lHR#_k=Dv)+v|b+Vo8k53AT@uYEYt8oQHvd60^TuExq0UFMnjDQsg% zXUe>%6mT8J8|Z$^|GUx{LV(?5EAr$ZskQwVNhoxE^*03+UY-t{@mPF)ifzifC)JVn z{f*<50TM6-4l5%(6Pf(V=k>5B~W7PM1=TK4^rREXbEIWgz$@XbmN@vu_zFm2M_# z!6Kcv&j$f+NNrml`bOQOD&@D{IJIc<9aEuNHq^scpA0KdNWDl4?F_}qSR-|kS}*4u zVi8i;d(OvtFPQUNMxjg4PAm|ndis!?#T?DU!wjdgas?G+hEJVjhXx9}4YFNPT?a!_ zx&GS(kRBJR)-bK{ed_6qV;}kx(ZXJN8#W9de z*d!+WD|$?(g6Rt4?Pv__ofxTCp~#gjx|`vInD zc?`;;WTQNJJM~lB>${R$6$6jZ@k#b*yb?Z?Pp-kGPpZ)Ks64m-WZqgqfXY_VhxZ}h zzFl%1lH(EVcwVoS@c7*FumC7)mn>)|snt(4w}pQjhJFwd$ef-z+q!#lz85!zt&$O+ zQk|@>6o0~FxHvF1lK~Zx18Zdguu>jV09e>eQG}o9Q=bYp4rsATVm$<(K<&3!?FHXU z(5U0E!Gy1Z+aCabSE&(wN76u^M6VS>rHGh-0;K2bmU)y%|6 zoo91cZyRYemg^^rgS~_v6B!pMH!i*67x#d@d3)Djx`&38V@O1R15>ogS?Y_|-Es1d zG8DUw6-1nXVmT36I;j>%(SWwfvi3jyPjGo*P>on=yz1{oQy_?yPpG)~VQ=1FZzIlc z&&zsi+B-RZmDS0BBO6*e#$zSBZ8j7F~;To9mZ^-ii>5jMW{S%M@Y7!u%H2cqKB%R*y@8u{ z%2=zfTfzI!TL^=T!_rW}mqVbTj6|TUK$ZyWkUHa85hwKTBUrK?p{JuT4Fk*lWhzA* z)0di+5xNeFaMHkq{nY|$p=0wQ?HzEldNO8S9LBWMWu|HC=(b#j9z!@k4hBg zIHOkSle7OH0MpR-028+WNZ~1VsXYO>a=`lUUn4H+lvR=~t%o{nVD|GsR^#5$2P}Pz zKdXJ2_;oNOl9Aj;2R}1135HL8gvoihNo7Ffr$ZTYC&~%40 zwbD@Y@0=_6tX)s)7?f}4O$&mJ2UL{PaBv*xFQ}nI&^EuK-jqYGHHyDY>Ppdffro<} zqIomYBp*VC!2a2Ts^r=boBHifd=siEUUm#9@gTZXH*754VCm_BvQtZTpHRs4{;e~c zBr`VZfQ>MS18;Aiw)$UV)U7A^?--Rdtt;7?P!Zhi$Y(ygA~liDS8hgVQGTHMm6Y`_ z4sY+G?b74t4Sd5f$j-x>+Em`sV*d_%VW>%pw|`(P=?W1!V}EtyZO?&$cjiUbiY=5f z;D8mgID{;hAjTOmFD9zvaDm()3K~{1Ad84#07XO94XnHefr?0k-pQ{Eo3AX>FST0y z-oQglgy#Br=(8HlM!p!i9;VX4CzO~w)sVrr0yXE8k)yKv-1>Dhcjc3ATN|YcEPd)N zQNNcqpJzD3m5W)H5l)t~#T|tsYY@3@|pED^&BN+`YEM9vrfmfR3Q`Mi0ehlf{EYs8Ta5=m3NS~rN5$ykGa8sIv`Xuk z_a<#D_IiyG(FS>tX9gL#Up#k55DS7bx;AZIp;K-zb6XuBG+{Yzuzvvo^J%&{OwRt< z7B@{#&X14WHWtDouY&?7?24%}dF1y}am&!yxkm<@gxY9Ro5}sB-p~rUeE0eD{l94@ zZ+JP>uC5*+T6LaCBcFwcs1|~c`21*=s`mvO!oQ{JBcze>;7Nn* z+|RYcquL(ohFFgrq%5X0`^9pi4_Nu@uC9Bd=A)ZiCC3lfU`P`9EOsgWG==yS!~PyK z-OI}$jEx|dd70gQoq;~Vq+Ar=HF8~gfIZhmBQS zDwlSN_jPp*Qw?FF)Y(Dj3s7n3CR&@w7w&m!j+>lecjZ+_@OOna0PPS+R3q_p*JI|>5C+pjAf^i0Uw}VLH-o=>eXtzT z)h1O8P{}C~N#el8EP-@7wYtv1#X41J%p`}D&9g0vt`E+Av4Wm_&acWARDEzh+bIPa zK3cnI`kpY*&4YbdX(fVrb%}f!Bmo*CXnucsHrdI2&@enyV=vd;8gz7Mu1?nl4to^F7_Y+M}ioqUQTrj?_t2`LP%Misz-D~9Aq>Hh{|DxkU~J-|}Sq678nkSqge3IUV9b&EtPKI1t#|@WtM8 zAX8OtKIRP>23~dNBO@_Mk@=jJ3w4?q!lL%j);` za7Lh1kDzq>W%A~EHzXevOeVv%KX9l@{c;Er3{Xeg+mWFoowcgpGVuKj3qr5nhM+3^4fn;y+XftEg~keV z$d_*T;TyO$Gyero{Nphp1`54UF`MLrV}$tCb93T9@d$U+mIU^q~ z2>i63>xUNoJGy*togmG7kcayjhfx`aUwDyF ziJy_1Q6Yr*U(DRe_SqDp{z|YL03pXBot@PTG|;JZ5wc6^u^QlJaiaIH*JuwtbJX{d ziaDFN@u#HVb`K-g5fhjlavvBEl7@JC z zmHld3=|&K#`J%K^sa1Tnf~z(fkexGRXpKtaH#yE61(2Ro45JwgLaAP`|F_o?xSZOC%9quah=!*?qwY;=@F= z56W1n5|BPucLYXFAQ==o+h&!rJcT;D@X2?Ylit>)ugwlhD41Gtc*nNf=`$!jNx~5B z%(1Snz2k#L=rt}zX6kiG-0ok91#sW_WRa0dZ@q|NXcAygqL4Jq!aI!ADf2p!&A}IU z$={fTM3Spw5oinChK}pQ)Mb9i7Dh$PdaZ~OqcF+(dJSsXp;W*Xu za`YEZ=S{0zPEt(wab5)Avw1uojKr_&@)Uqc{h1O+giJp@N;}kS(){b5hQU~edwD7> z>|SL7v;mriws&pdjvJZ}M;7FPvj4|H@b6zF0pK3a$3o1c??6sX^Sf#oQQ-T}QqySF zKLFsiCu?<`JTGXte&RQA;alu8-od~@P{_pVc61?-JY!_73++1NEt9H*)OS?XSwea&L0(~|~mm)5GkNZ^454(ipc=Ky=~u>P0{xUxAK-^W zF6*mXHRXc&s`S~eRmDrg6L}ED+p2fhPHB<|t!wnW4LDk8DsUXRZS9qzA^0+1TJMi} zElwJnpN^1HTbG`lut{g?-L~PLWT^#@^1|;&LLaF>#fXCx3{Z+aW!-h5qYi29=f$9u zSLdZ;04*nP+$AO7>Y$#vJTQ{5JD^?t0uiou+xQey!#u%DHYViGpf()?EVlcC5N#uV z88V`PW>vj&6X@9m6Lp;ZvpxxHjiN1W_Z&eeTz}ye| zZ`F-&a>QkWRUvDFe`qqL9XLoM6PD2(LegA0+xnZb!skK(;cah_{vD#;|0U=k9PIxi zPe=XFVg6UYZ_$!<+2la#eb;pKrshX2@cg%sWjj%Ux~f3#!Bde0DmH*JhE@?#jQ>-> zzat`-NzNhgJ}?2Ma~HgX9o`un`dK5Q-kS_-O%6t=5G?n$1-*$S*kZex@+0ooy7GJw zzeXNMW*)cSCvKM<^5!7nSV=m&>z)Z`N1rWrXQ8A3BLr3@5m4a3_le8vLz1Ih1nsf*VA1(Bdv(i_l=T2R%9fx$W!nqD z^g0wxsXiBAEFcRR9x!-D0SdqygH!_n5Ihp~ztY|fID#!sso1gOZ+ui_sG4CX6{_`| zh7c1e;EFpes_SIftY%e}Gv_LRwOFMNv0d?~F1nGwRnlIK=@Jc}c^rL(m=tynFXn z-g{|3Ns@)4i50av%l*-_@|aY;P|!(~P?2RJsKDl#R5K{qbFscYHY2Bp=tOgJQnF?% zA4-7Ni5a4+@t!xw3l;X=i;`>@M*t?%$_J8pYoLWV5F71u8F+!<5_3cw?n;Ta4f)~r9aRP}oZf9ijb7tyeRIwYe$u@CV@MC0+h7p3)Q(j}Cu@VrLRM6hQ#TarU0uR;u*s(Lm1 z*NhKWw%s-4C5BvxKYZ{39HL#Pm1{r!gBnG^5`~*tsu0|+%4sRIxLiEf!aBo3dSDKu zXpw82-GP~cXigjK!Hb-RLivnb(RQg|F)a5eJ11Su;fD3HCj zKnqP_4Cf=xOshV0_a$q58IjeH_aqgXN~GCb`XbF}s?qF4KL5A?hQ%E!S?*oH8mWrz zVDma{9G;e>a7qlNH)*9AM(qpAn&yt&sD}OO^L9tlL+p&=Lk`Dw!9c?s_H+3y<12+WIqEvw?IZEVjYc@Rw_;zLXMStRxwq-{F4xbG>U+5Qwq`jLeawG<1dcKUH#h2p4f`BUtTN14 z^w+)fDb1D{oTC0Rm@`{7gpLf>(#k$0{l(n^ur(yl*>_zw5y=v&LtA$W zye;@oJ#>+4h#Sz$$_DRpmRy);aMU;#(eA9O`%Lc$M&mOGWpP$zrQ7KeSD@0*1eadQ zgSBUYTpMkUj(qQk_d9aYTBl(%)H+D!Onb)@RphBRQ|f~>M59QQe`+Zw9{e^Wn)^`mBkM!UwXE;(BjEza?mC1>!_dV5qmo zLzRmwVD-ShiM7s-E=FmBea>XePd6R||tQxj<@QK_#%EYDGf7GjcQM^(9fm7J`W!cmhwP^w6dFL@u7aMWX zvUyhnt)~kEv!ELS+pFB8qnaHH#6lym8Zr+sPjI90D#oD4r;fsi?ioQ8Yhx8SS_!KF zLk3N6>4iryA&$|9{q!T|%OdIn!r4SQVLYI7L}02gxFEt2@JKx|xsv+};PH6!Rq=>) zQPcX3`Ca$w(Rm!@px^Z}3qU3Df(E62i_W)363zS1!Y49wMMN@%B3KO&fW~7YKhL-b znTh=(^6|dc2TI*B4HedD0KpTTCU=ak4;UzjwpD=$52J@e7?PCQV|qjfaG_^p%55?L zPfkd$=M9>oS&H9+;JLpO zHf-)69B&Na`dmHLA+Dwo*6!ffI_RpL`ty8zoxCEZ5l&@zu(tuCl+T+~b1vv#X6x#q zZ^t>ub{}EOo<P_3v5EO`*4hcLY&C zZ0RY>YYaeafW!cPEBP&+%%{gJGvOwl5_3^a7G@Ak)Y7|#lizYhtteCDC+&2g%+YNC z=4`>tpJZrpg_SF_pHQ%Mxvxr)Q0TA7=QOyl$PufupAxZaOw8^>O4Wxy#u@qq$+yD0 z$9(mdo+Cdezy%(S1LwXjLGlhGj2#g_tgzzSY-a+|Keqvl_T2SP=c|2qTJ3LB#E=qG z1oUTn@fx8?d%a3TS@2e{)sfaR5}=y0Z0Wh6Q8Arlu-7VOGe12ihZIEvu<&U~3wsTf z)+{&z1)r}8AW4Rjk}RB11sB0CBY?7D!i+0LdJj9qla4-xTvUrhT^@z5sC}%>37~&n8yl%&x~lS z$w<#)WyQxAcI%V4+f8``3{ehB9-=6UZ;_azzfs9DxmkPKx~O<2=(RWtybs*INd}jj z$u!InLvCu`g9`d9PmgC*0yvHm^H%V8wQ=o#sRAem=YQm0ZI797vQW?*kG`4!AZDwW zH02DiA2xfA|5IW5VY!HR0-*)qOxYiD{mZRG!tsd@1>w*UUb&`zdXm!Sxxq)ZZT+)=MCl@l1b*vZWS#AIM5X*vDfX6TMb zA&@jE=YkGe>ze82{XRH9pK6;+`_7o@DE_iw$&!`%j7!@UASH8$-L(fe-quaUtzxdS zBENm-e71i+e%PSFQPnFUVT1|ol0e$R%{~Y|^+%9Ph@#AY^;-QOkEVFa*ugPkiUE-*l9Bo|N z7f{P1LRJE)fclHF;D4eQJL~DOBG!h812wV*c+OGzQnk35PJUfojj?wsskET`$EttG z=5X6qt+Vx(Ba>-w-6fl5*8mDM#6R<^r}kXK;@a|eA3chB@0S%I6wrsEv_u(c`5T+2G(z|B?U4p1aXtVz5p+*mmA|z z;Z?IUUpf@hnlLe{omZ`lYN2Y=UG%-q>gVArQ3EdfOb$jEyd8&sBvVu5vr4#3r!ByT z3b?6)pXIV(4);%hf{kX4CvMO>xIs@keiKlD`{1D&6_Z?!{?6faW3VV!kF)N>PdcfA z*@bw@DKyv~`}%5*hZj8-Qn{u|47$oWV7y0y0DS}%m&6s>qvI1L%og1sFG>kTC1W_x$M*~^EJF3H&%c1#3@<(++`%Fm6r>FM(AD117!F%Ty+Zeom}`k(yQB3e6Z47RlBKnCVgl*uG2cWkdmH zg)j*~GM9*f%b{htF~eVLG`FcXQgl^qRHK83cb&xpM9|u<_nJm-uS-^8H)fK*E3m$y zvm$<~g*mARoAU>1Q^2y@501|Pc}=KI%Z%`si*Uh0wFR>4*tMlfDWdunlKl(^-i}S% zHPdCLM&0oypNnHVmAnnKrn!j$3D1Goo6$O;)HIfNScb&pMW5Wf@elrdb2|-?y<@If zRrhojM*K~dGx~E3o2~HjVE;O>0^u6)O6!^};<$Y#v-~>yh?kWu%YaX#0j5{xo==or zWDSVyD*MeX=RjU#rKWVCDUrDsrD-Q0y_}>t zrE%#E=Tt=*j)dphjm)GijJjONWu6OQvf4TeT23z!i0piq)@kgt0Z}U!y4cTwA-W^` zQCXhY(|A3<B*GE^`kUAJa`Qoq`4Qs4pPo)7%a=t5A?<`K|uU)rw(^KwhxyD zU+g%pJS86F4-{n=3Tr1xu&ahRktNxJ9QvvjeKipjo`G4GV&5_&Gue$w!2tzW6Nqud zoICc=Own#z0A4c7**X#5xpuT)V$SBojRg%4C*BWobN3OjRAck~5{1{c(EOUwDSM69 zHiEf}Ot>Z3HULApWI#aaNTPMno5LxVYZ zFoa`s{sUcL8j*1LR^$fI-{Ob$kVNl`An28NZyzj2Xv>2Y^lZenpk)?v`&Ml1`)_PQ zJ*b|nfCeI@3Wdc=XQZ;g#8D3cB|>l>Ma8mT$Q;*Sf1<98QE&Ms5g`eLXKWGFi#InC z(o9ormF*@7;ND3v~~@k&sqd%3Jrk2(;y#868V%xg}L1(Y^mlFA|XHFiTvI?mc9$=NAX1aryY0#3||nb6keNk z5`UE&pPfJigOFJ9>h4jbf9F=T!~om*h43c3@|dQSmMNcjJLJ3^aM#MY8>3gqb|}}T zw9P*3kCa{c8&46Sg%UcxF5jqwSxeK2rLm{DD#{?at5#L(eC3!vYZ3>Fxn0v464fw3 zp9SH=tGjiK;OXS%rG^SQM9V#7p4{yqg2CXJKg`0DYHJ9?SXo%!8mqRaxLZ}5^Fy?2 z;HqQ0$Ya>%x35e87Uvejx?QiHA@f&A3~C&$R#)QFSBMbch?cc=HXYs2#DYK9Tg4J1 zAJwvKm<3Xat=q&ZHuovW>B$NT_Ijh4${mI$Bxf>`;51$KY@8KvmHMg?gS)Y<)8#O? zh|cuB6jQMv*MC5%d_0|Ezjy5CDpp|UQuyy0f|qTsbM_7)GN^VeP5=G(Uo^Tk8^}Fq zg{W>P*cToE(M*}8%QEX}flf$qs{p4(RH<{(pBnO5gP^557qNLkNxYVUdQ2BBfa@)Y zQNR;;zg@QLsKMWP@4pk}yCV)~pbl(T)EZig-McA=v9S-Q1<|oNxL-T{%g5dIh}v8( zCkUUXQrJx&j1w%B`4<3O1uZaLn_D*=D*oO01JC0p7*ch ziNq&l;G-W(7N zBiyeXO0owiF7!YvSD)6SwMsF2G*icjRv(!PQ6;B@QZT^2GNTEQ0V6-PuAUawUb0e2 zZV0^F69$(8wclCH?C8t#KYD6%8zu;N;N5P$zd@p?@?3`bN!f{GsmqNFaPo=ojaTFSKghn+YVlXKZNQ!H1%}T|Hc4Yph z<~$Fmvn(JgSqoy%kEeYoJt8WZ7fl4sN_Deh!XMu^#>)u}N_0e3i6x*$Yc=O%&o9Dl zz`^7M_fPReJJ^BVIi;WD1CIy?mKF{;O#BVY%?%C~=3ydjKOa?7ZkF#s;e^ychS-a? z0kebGZ5eqBmCKxnMQCuuEYyfeQ)wAHzX7D#P5frrvr#z~xBLO6{U<&5B7#~+6GyspmQb9}Cx6o?Rx2w}a6T7wjs_fCZ;V8RO z*W@$1UVXCd@a+65S16aJx)m+nzC;E{{)J!BwIvE+5zFh@ru6H1FUCb|>)`)->MsTL z**>x?3shFbty^jXl3W#YC=IL;N4d49;ToE;cL}`+-WL39(9G}mHe`(c)eDDs53aT) z_$snucm#V-S+$HKqS)CRY`v|e57hK}cYUQ%3(&6p;?EM)cbMIXsV>-^2IKmk;;emAD|+J-SQWbQ|O~3Mc`| z-rOte9t!TjTUgFM+W>@-pnR<~mp!k1ZJ=9YMrl1Yc8^>}*bK5pUTM8BAGhlDP1-I? zUZL@4Quv+l-#~)VlRT@5a|4K%fBMIuUD1fU=9vVN?|ZZK{4ll|Fya8-vja9Jf`6Ii zOKSBti5cZ#qE`Qs8lZL7Ai296rioNl?lcv9C-59`?j6gR&vZjZ{cx^6M-Lx951gY~ zhor{thN70;n*=sWr(Kb4+|!G3B}TsaG9uUS2Kw4g!FR$BvC&hmqo_<%|RO z8?^gs)O*#gAb5rl2c}Z*1|CBPfi34uQsTL1TUqQrx?Ot=r4vsNuZ|sC!Wo5^N}8hA zD91OX!g)MTh|~lmlWvRVl_7bB+qCK8R}$2I&L&i^l8m8#iG*Tqhy;GkyWSHL8Hkl~ zHp3qH<`fFU>rH^ceqb44tV_4yt58`kWN>HTn?UdDo|ikv$>!0u-Ww~~OhMQBv@eZ8 zVHY;->&LC&4yW%F99%f8G1og>UExX0YJQm$_`p-+n80HP^B%D&)(1uYT?D1QLfKf* z!E852sf!yAEw&ZH^lCW@-B2NHs$XyJFDbS4>^hlopHqMqgyJxhF;g*n*4$@ym~MFfHkoBT zM@6^#c9}pLES8L$z0tBq=JFnVtdOC?`{AG02z`OV7JjGb2 zjmzuNb7uC2u5S%R*(5e6w+RN{%j(YYEJ2ya&K&@Bz|SYU@;QI3Jgs6(6Ht{i)}uTk zi@LU3C3?wvP!&g7^d+6hkDz;UP3GdEgHcn;8oo5^n8>~Dml#hyJGo6>^tBp%u+qKM zQlWqr`R@d)=wkqp>+(V$@R0A~&O*qCzGq=E(+5!6`B%rv75>gFBz>EHq49G3wyhk^ znhhw|V?0U-0ssxhaND*gf6iC;cVg~SXiAr;LdbnY6#2}p8D3I!t*w<6z^SWWWY@V2 zBWw=Td)-FyFj{fyAqvu3aZuQm_ezt4LG zXR&?c`B3MwZ7!KPz<)R51V>~9|L!Ob?x6*RC1qt45>@~I0WCn%zf0NJ*4Eez=pfG^ z<7#XR_$%gsqo5FTHaB(!I@pUFyPER?w9L%_;^w9RR#pHD4-bD290fqk!O_zhXldmN zp#FzH@9_gv@^GN{R{E`?5JjL4sf+H2Uq}Y z%>iOc$~rQNQUGcxMGb(IxxKmb-y)RVOl*Os0C}LPxxI@y4Zy;|8DRVG1Hjb5-VFFp zX)cU^u|!+|#sGg8M{`r)UpI3PQ*+0ERP+Exb7woCi_70<0MG?s>1=H8`nLzJ4gjFN zsjZvYKMDMmTR8kHAxCG2zZQ0Xb$`K>9b8;pOr3#_u7JN$mBl6hou{jnvFksvU4Vbp z00)b|mSzs7ZvT|@FWq05zgkygpuG#g)!f7NpI9d505gA}i=(Zv=ik_W!5p1||4PHn z1!!;ipBc~toXstboy}~`U0nXc{KfvKJO5cH;D4*$*wN9}^IzT$|FZgDIRIT<%xx_g z;aFJz#x!;P8`~0S56AS+sL0q`H~?6f|1CFjbNmmTySekf8btli%+UNz!r08g-qsUf zW^Mt;r09R(`Zpwi`u~k(#{WK&{~IX&Zz1@ zGyj(p;6LsdfIQ%zO9p8Af0!HF0c}11Zw~*}Qp^0`S*n^_y4e~#|5x?D;YI8%|1!eB z!^rV(DbPg{=wWWA40JWM0$3Q^{_WMjX&|8@8W zMO4(m1K`cT!o>_=U}NU^yLNvUkB6Pb_x}>{UqCGXc~&rXbq0C>^q3i$nOOjT|NrCn zpC^BV{{kanZ|Y$7&%~&?8rz%w9kTx=_(yH(=Is2J+kfr--=hEH{I790H}^0%g8ejn*4RtJURxc?EsB`G|&xqLJsWy7A4`pnb;{ELOTs(FB z*q5a}_&I=OOVyudepyK1OGYzTgt|%D%|(BA5XAJY95M4uE5`e3L4F%Tmy=oZV0S`A z^;_9H6ya1in={PS6HNe_dr<%e`J*F}pJ{qiJZ29{3kX_6@#z_5^6}Fn)yVkR=#Tyz z$iaPly1aN;3O-|OztmHb6jx6p=lf>UPsmqyE~hE@*FM|~tBCjL8o5(FFPxwowQYZa z4hg!)VJVes$+EQGsE)HFElq{@^G;J8JlZumBqm@@;h*0?zD(Ej8i`S@9_ktL&HH=v zfJg^<9P!K?8o~qkJn$WnqU2ClJ#FlLuE@5}pN7F2hqU4V_(JW6UMQ7hL~x9I9p`&@ zQNg|#-gGiI7rfgt3M9|Qzi`o8ZL+DNiCx#ckp?xV5T>9r!EOF6Tv}BRJ7kPp_N5_tZY}(`rtY zMBC>A4~%+I7c(OqL~faDG!T9IQ6OoQ4SpDsnr#j#8qr%0`4>jCyufJ)3)Rl~5Bs0I z?vQsrIdi}I$llvl^vCgmT6Ups@ zz&uiSRD`6omTW*<3T7SE>oF0aN1Ol$#%ftr+BcJ7C&dt@Vm~ZzSx!>RH zjJ9`Jf)>6GmF>gb0-Q+Xco!twR0uk*rziz!%2ZcTyE=rINuJxE4ouFFc5ya!#SaJ9 zwJ3}i@>yh{;?Okv_^B|^*XYEb7a6#VSnu4#t7N(@K!kG!Q2wh`+{BRRnZzk8)&UO*St_MCsL&3^bmjYlJtS5beuNBZK&vj zW2(d~k z<_~`p(*;7~f;j4PG?$4w;|}9{5X%i%Nk3f=+H$c=`87UpAfr%`rb(s7*m$iB*Jf~6_}qzP>}@Y3z!dZWmJ|0eGcVI*;&m&^`LBk*@|+-pBciG?#XIWoE<4P@u@+dY4um=v?aZ*UK{kDF~S{0Fq1 z^KDcmhE*|#1(fbZ@8KTh+kwWxM22)T(TA+D_R>{Ue{4U)Zl%CUS2e!dK$@*J2Bo$@>+YwkFqlFGPaY?aV8ib~6n*7oX7 zJ=<_>VQUv*X&vWSMmX7W6ZX3Foc_Mf)U@_VsKk4|Okr#f?UPV0H1jT7is@$i8)ZwW;R4q=5v5fc{Ui{KF~;E(13<@TdP z=R52r-nFO&?x&$}%cv`c*e7=R;CnEqdGPjgAw>-rPr)pLS00i8X5yoMhhdJAY1+7s zhoyi2kDY`vo{*I0Qlu*=J##94wGG$%p>)%$RG4YKr3?BmEcK|AITB!tcdA6c2}22m z^;A0F+vb~VVJK8Wxghbn3ZY!F6J>el{j)$=zUEK=8<6SJ)HL&bj*X^o(Kt_S{zE*8!mqJkbsLl-SB zLnYTud6jnMI~xL4#dA`_yiCo$%!0xI)@@NjR+6{vejk!Y#*fmKdC3b-hg72>ZtDfSU-pO9=F7!#Zg)9Golz?!sZ9aWCVHUImLOoP<+=kk>T5!tKx5t*i)!) z2)m~PwrAeuI5kS7tBAx}J3l{1^j&|))7{6Rey^fs&N{3>4eIbf@6udv`y_7RCO2Db zug(~gC$R{NV}2+Ut%~v?#$M!;^&V}t!kI?v_;_6Y8epk`j+aN~F{1SckJzq`mDX!V zV-Ru$X&X9brHM|cVZ}8ng$PS*Q89T7P3ArRvdxcXx!@Eh6c50UkCNZlmKA?D0yBd* z89Q*!jDzbg%ZK7vpaPn)V_;NUz>L_j&>Xg`;JPDkG$-#0JEN*HU&%CLY&&e?=xefE ztSKpfrEWI?;GhDls7%|<0&-k*{NX~kXL-{zZnjb!zY1pFGO=nG*n@($KGzy!tPfi` zM=qmeLABRvBksMQv2YN6u>^ms#IkSkuMQukpQ4YD#Z^DsWrAT81oY!qDg=ET8-s1p@N)V@MkVRt^h6lL#>qZaFYPr#DoQ=V(OpN? z+_i9bf@QE7w4D1mOCqigkmP-bsi^-LrO)D!%Hzifil}`?!XKxebA^A^Qt@iSJE~w6 zSPqJ?n@2+HwfQkAGIOR|9-&G{m!K31qvy^f?W5Q>$l5I+6}^~k==-I=5$<3LlTfx;a&?bdNq|ZuU0Z_#NF(8xN z=gPF5kd~ST;5L$Y|K5M}y#wpm1aY;T4o9t?_ziWY+o~+>SOX^UCMN~a>@Zk!gCD;~ zS(j3$+Zi@*k7e+tFpBkMGwmnoV3b2uiQ!){fRg`ap}i~ghxJisW;Rbc`lIMUPptJ+ zbDBEmEpjeN-v@ z-p3)D%993yXZlkkdf3wxPw|aNSi>KI*2t7Z$*6&K?AFcNaZ?4Ikkgd16R0;tBv2Scmpzm!PNF3b8%toDT6 z6A_={mF|CFJJHx_V-=Y-49tH4P=MY)ld4UQyW0}+o1J|4RV`e7_4zzTJtj>zTubP< z@A|>Zf}cTNp46rnpbwPB_zP4Gvy0AN>-35$H3i^1OrL=tFbE@kehxoXl{ky*Hax&T zMZJ&tvCrFh^|+5VXw>YFhiYU^J+gJ3%Ve$9$2NZ@;Na%9=6}aj56ri&V$Ct=T=2by z$2E-8`hup$wk)hN7nM(opLEWQfBik)%d%D9dD5+kLIDBxk+Sc6CV7a=8Mxt3c{QIx;uR1 zg8YAX9P@Lbc1y~W><2$+V;n!kJ?z*L-mt2BM}`8g+dA$(U|+^@*N^Dr_*HH&#^rot-oF)heM3uo=d; z$SF&`B^ta6^c?4VCy3yIR&sgyFoyT&j(&enVnYb$%i*`9b@j4h&8TKGGW^OIn?cn@ z)`&KK8)d|nGI{YPDnYvka`?3$LX4xG`qm&i6@rrs{Em{KyuYUF8}sJ5e?-%30P1&W zEzcswv6K4wrwUe zMciML%Q4?Hw|}xFI_(izf}n5(5dqPrEq9{N<=V#7nuE$(d4?j-r00(YAP<)&lf`Gc znDJpz$7^2JJfaR<%-&`^WqzoIWpN8pvvzujLyQazwVJt=>H8jRiE zpsyR2;Lpaka;4j=NRn((rrIB54?e7&*yDNS3|*UXfweg@$+&Z;5<`-XY!NH`AUQ+B z=HhyAE_S|TsmF_DIsrm zd9?n=spkEHP_{j3%5E>q1Q#Ci3DUrNK0|P0#ZpQePGpq#lpE?5^K3nZoA?-D^glH6r&v1XACKT)5so58C z40JG*jA->X9UDYjheceei#Z)ssZRaQzb|IVAcUt)~fSx=q8Em5cBOG{mH6-#b`-jgms2 z#}h|%fYh(GHYf!(Ow+ySEN^!+h9z$@ltwMr!OY;=7RZ7^L6-OfnAvB+fFcIYnfQdt zgT`NEDtkR{ak1vNns(5ilq0w2ODmtp6gt<@m`Q-pAY^UKrQv_$Hn^c~qIn0(0*Edi z^`?kP?Cs<>$Zr)^ss=~j-LEfVMdM@ez*&6BzvBz$2l0ehwWse;l^%Bg*p#;JdY>pe zg*q$=UA6@uL)38`4Lhsj;Tbca`bJSiuuhN5)evrrFK^V{oC8J9_6+_#&B_2vwSLBP z63bQgw?1M`g+zZ9jX%@+BjJGsa(6bsV=aN`M#vC^2&6f*{#d{l)97>Tr!6XI6c<#` z4TeEvr-*e36|e zLYB96j9-n<#AOh!G~QGkChdXOgsw>mgJvi?8bF{(OF zD3x^1ncZb_L2%M-e?uJ6mqz8+i5jsv##~phQmRNU#C$L^ODbry#1qg@LNO*2P&w+= zzEQS;bT#|%s~Xs#{p=Cpy(9yYD(A=uI_{n-;GpjnN3Ue@3Z%ZkR1_EUAca&T%9UOo z#_dI8vQ~eH1`*h58cA;1Vmb|y@pZEoQTK8h1%ddMddWR;GC@?h!ekD0BFS?=4KlxV zt8F8g1}6vwo{}T+yT2TpD(a|L6;kIY8~fj#&9o8N@|t1IPRJcnThJ&I;`BCLa|Cni za_E0R@+9uk?6V(xt}Nodtikjn=V4aGi+Yu7gI<4`X1$u^r?#_+j{cb#5Mw&0!LA?+ zajMn%frUOevG_r(_^~gqDpQkrT#Txh@-;0GaGKMj>K$PvDiTNfEzT3l-KMqnl-Mrn z&4vxk%HyCBR}r-4kvCXr$5dy(3t@SV)L&nN3xmYA5t+{be;`pdvUg_okI;iGO|J#w zBM*pK%r%WcN}%hvE=pWZ=y_mn zH_Y_B51SkY-@vmzRX8B?57&^UTmHB+nKXZ3b|B1HbEY^lgclTHRmA0!Z5W3%v|R&% zcKJ->ojl{LiY9y-0=5a=-f*4kDA)EC9~`z@>I_`(AGzR3*ujy-KMh+A*n)~dQxAJh ze5vaW!#un*oP-U&RTQ|;X9NN3#9MvwmgD$bqE91?@7H_H%yWa@G%ZPK z1dpmyLO5SigQr)}9&7D9YLK*wz1Q6wIgWS5*#o&(=;r@57TT=#e7BOvU zDM(KlMyGI+JTaPp5g{up=!KdedBTG12eHU!mf@veyHBRu27U5T*+3p+eCsqvSGw>c z9|5*yg~g4}eaY+D%NQYlP$Cz*ElPFAXmj^I_bX>~6YW|eP=oi1wDCSsd|Q7Qb+WA9 zwrWnX;RPMBLE6hkS&BOF=vs?gDb36#p}E`F=2{&O?hyJjoVnujk_b;fTU%EK94UeRo@oh3|J{n8)6IqH8W(sT5sNdf7J z2|Q)2AA@8R+I`8>i~Al7Nuk2B11WNkjc$@%Kjif+(hY2xIP0I|^G7JXG)OoGdLPWY zLG)WOvEk3jZ&3Yk_0U+H%CZ?mj}d1uY>YQe<<-*iwkL2Ujk#BZ8`g~4NPFU?2ZUURWCjRS8@o277$ zHGt|dZ{Tz?1y*)9>a zd5c@z3NcS~m`Dso7Qs?knwFL8WZ2OSdXpDfY}sUy$qz6y0$4h|48KCk_5qfZ=%4`| zxg+-uFC-2GV)r6)K4@*|q^W`TAgH|Ti4QwIUHZj;C&%cxojX(6% zI+1kW1bV8WD_#oxng7>aHZ2c9V zhf0e?kL5oUe!y*?BG8~0udftf0sFb|E!?Ow;NdRNz)XM9pf5e{QD4eo*i!~FGv2Tp z1;SlsL4??X&a{cT!083wc#%4<8h^Fp2rBdehIodSM?X#M*WPTpotA}(R9Pf$J+WZ8q=+m@ zP8AWs-a405cW>^6YKPmFP)S+(dzedAq}c3n7F*6TuT+GXz(fUY36gW)@dFzb!8%TZ z;5F73LnkMKsuSa^M$c*H;+vTjZq1|e^VU2Y!B4cEI z1pFOtmio$qPJ%DNyI)Y)vYb3tI0&7{%H1)(l<~=~gUJyuuB&hgP09!|KXZzW5L(vU ztU%FlQhYa`*v#az{a9PiWi^h(ttp)|4K4~A+4iz#PBxE?|aQVNRmTSjb9!UGeOv4 z!J0ZSbcW*D6gb8V+%E)yzb+x+R`Ag+HL z5qw2eRChQl37x_r^g;K|p8+dcNO3YQ#mcKP5-0kDc=^(PBHS<2IiygS3oe0kQB;xs z)cf3YB!VVigO?7}xLLg8PUT+pX&d5+WNPTqm$fw%%E!#f}35R zo~S=>XE{glc;hhg-V9RN!7UN?qym3}hzs4!f#+|*H5(KOo^B)l-U0Hq>Z*Tad3LHX zgqyUta3){U-fl2crB=Wc`ysZzy?G}{8e7g*yQaZ3HH(0q)scSYU*5I&R*8OYeC*x^ z7aQB+wLXn2y?2eK(qE)7Fom{SUG>|Ap~g*Z6le9ko>hY4mU)RTq`U1+r;HOklp`XvNB}& z3D(Cew*vA~XlM5xj)R4~swo!*_qz;r#=&%iE==2UYvAWw6RSj*;2blWnTJf(P#6Vt zI|mx}2%XA6`lZof{vExVuX+1yYUcT1TS4%(LdyJBvG52Ez^t9`VZ?L6Hjao;KH6Jj&OJ_lY7wNNrstG35G9!|}bd{OH zP_hpTp&`9zo~}A_*jj%)Y#Fc6-~0N}jEJ@q!{sL)x84vW;`-9}C4uyA@x^jJ&v+o& z)1xLMic|N@g!X|gX$-=WYi%>9W2`yxxmyOi7g7MzPI|c=Swo|=CU!JcY$3Fv3JHhM zmkFX3izbjiAJzO?#N&72WwPxTDO*&YiSvXJQs zZE87B8n0W}CqHYw-w^|VYx*9@R_iZ@4R!N#&hCa0E7gB4uKS@UOmm7nHdRDMH1%X3 zROi_AF%$IN0V=kqq@IDvcq%De!Phhuw3Thu2W6|Z1nMp|kP1Q=(bi{W>}@YC5acZ6u-frf#(i6SYve4w0-Iuc~%G~ju=kJBNEAyLhm|GMCrs#k4Pk}ob({`q9xbI89B2Z^+w0Q=XiwKW&UYtPan*oqp^QI;HY&;5K-c3TF!^1U221pO zRc#ZVUF4g6#sv~xg~AZ%rPd6jk-ddLRi~m+7wpE&?hek=+V`)cgkD;c7L(vz+NA9X* znQ+nIUGEHhm^L^IBHugK_I4XR{noX<^SP69|LK;6(;pNA_M)IrDd>*+IglZmoGZ;w zq7&2SEqsrg9t=7haii?EXZC++XNVpBUiJ4Qlb`vBZMw%Z#8T$N3QbfUY~nz>fN2Si za;bHc%Ec+Jy+;9j_P0yIy3T3B9y^dfT1F)Nbh^OQgiK`|-98?>%3$LM-@qF0RQA0& zj2o`si6xh3i54j`{BuP@XT27R)txJG>VXtRGPazcc8cheuh zESY2>`5bx2UGsp0<`m$3&ESC=B(66W8}QJkKZ24_hhXpv*ID>OYNRBqA}c!uEuFX<=cv!Fg3KAal?)leLYOgUqs~KWFIV3QflAaL-bnjkiRc!NL3eT z_+IP1d8RPKN-U;Dr z_kc$jhaxF#vDcCDEa%2Xl){q29lW*xxei`@oO#3tm}c)|_To7?*IB%Knht0W3WLQV z8+^pEjy{aT-o}~%(LKT?4dXMPS7~D1sDUna*Myl4pzom4aR-0H=wO4$ZODHJA)(&3 z{V!Z7fP{{{jWMAnaV)6wXeF}9pT+Boe0L?uh|~DcV)PqbTq(heS-rw`RcPOo=cmb$ zT`l=IY@uvPy5%}bp!bdlx9^%p68ps24p6lNQm=J4uk*PWx&o7{fj*R^IHc8ZhNN#3 z8Xgf9IOrP5n38`?{W6E@-DXHehvlETn!p6OatuWhcocs8g6jiPNNvd_PV)SwXdmqr zv~7X0KcE+_^bx3P$JJWll2I#5w+k_zgZ%EjT^a>^8P4_u#Asy_6$$o~98^u!Gwy{h zi#fA~OIK%;@(o>7-*m}O-o;gH&mEJ%!XEB<%{zM^nOc8x2@aR~+@A1o-MbAM>SbXw zf~#+wc&)GGJ`Ngg-UEuLd7)2ihO%f#3{@m9cY=IZAMjFpSKdxN>Driiw5w1ZTpjvr zK?Udmbo=BY#JU>Pbm&)Q@<_8$6z@r}Fp(OJdb2JCHX%b7w+#=IuvA+Dt4dYrPiuEDVt()R6^hqqK$1YJ5cb z-*s_(xVYwLsV`&2ylCH0MS|BPS~6xrinEz)2JIN~#oH)$WZn3J(&O!kfa1nJ8R}7S z0}~iQ`97AJN$m4r&)A2q&rlETKs_c7RScf32u+hGxKG2w8QuNml|NOx7fKM zBfg)XmOINBi!G;t%7{V!X||so@~I`=x?W|`&*MslHe^J77i%yUACU0FOo9Eh|tRy>ql=#S4Bm(k$&x z(BTyXb4=HF?pAZxIY)Xv`$l$(1u_XZd1Qa2t(l-@Y}pV%`S@FYavWe(8Z;LIyJM`{w78Y;Y59d;ajTE4%8AOYDs>WURS2%K)u@|qs`pc zT1+5!VuAZPvA6s)cmBGWS|;9g7ziwXy419U)^7EYZH_j9o%DE}SbjD_-lA`FRnC9g zQxp`ve_iy)g?W*o>Yw>@Wh@unmg0UzN;0@3(r!rieDEg0!iE$SPc!_=of6Ma?8l=` zycTms6We9m=oVY3Rk^0l-9k*u9wGibJHi$8lk1X#6;R~qc%hlGP-tPGlL2ZdXTfH} zsXqPdK4m76W)BRnlS`H0<`hWgg6x0c#LemtnxMGV&V-bpz3;qs!Mq`XI+keO%A%$! z?^67{x&bep!=VyY3|RJ-6c07f;UOs;^SG*2;r~oWD~{5e+$S%fvLY(oz((u{Lb6X} z#+~R`mD$_mi$G9R$&SyQ0$LoEp6?jHZP95|G=LLY{tl^*j7FDb`yL>H91nlOZn&FK z7dkZtS#%b;?DD;Ff7B~D#dKGS?Eym0HFS3NdK%nhrpyEQLFyqX#VPk*m#o$;?-~Dg zqkvO1s&=Kiz1VA5L0NNkGT`;;I~?GVIKxvnRU@Pf2dkB5dS+ojXnuwnd^Us$c)h0# z_)d>s?p7>~nU}_E1^Eh%M-YDj-b%#;`zSOVOn>=SPvT&}V$|)jPNgk&6~Ih`R)cEo z!(!d>1Npjn#bKS|V2XcscOgo{Z;KABM1QcyUA6PbTq?-#Bf&FX+`2C zMth4~pRy6Gzphfx206agJy;?_0xo;3z<3O-z6XRlk-oaXkY zg*Ge-T{$|wZhA(zx2&>}2Mq~#R5pWTOqvV)=ZPO?0k(0yRZONmg|VAWd=l>;xu7nb zwRj3zS@gjWrsy+W^8fjTOpmXGI75HlF)ig_Z3*H=i=~uoc?tyvM7k^VroYZHHPYJk!!V}Po1-wo*dGBSh5jElGRjm7DuomGL%$0J1&M)K$G zOsz;Tm46|S2(-x>#IV6{uPRr1VG?y|Sc+}RSZK9LEFdD){mx1r9$-~Ts?bHP+JPR( zd=nkKQiq^-<&dbE4)CwjVy(Wf0>(ndoWZRB%%|_(weW!jJ@9{;i57kwg}3KGcB{2h zw=S?*Q*~K9tOC39X0nLNGdwDq6yPBbL89b>KH|$L3SSIB9xC}YW414-eC&s>lOh5k zjDP$o)jb_6&PyBC`@Yb-7ZG+c;k2<>P7IEA;OFjOS9WSYgJQ}oF}lu)`%N<4n!Z8_ zO+Cb?l?-=|Pfvf=M!zQ+&S~cJb-eAG8Y=nzd-lq$C23oHC!JAM z*lzB$Zd}%f^wSo5-2oxt4-*KsXuBsihWcgL?=GZ}7bpaiqTJbhFBmMwl{Z@*MSNS7 zzS|A;AfJCM=I04?o|5gPC$Vp+g~u)ZFQ=`C#~OnE2%H?tdI5S$?3AOUyNodCJd?d* zj~`CBy6(xB5IAy@{QhO8txcHdg(ozX(?aAPs$H6kroIJ55GfjLJ-uB-l?c+w(_#$( zmmheHC^;n?Y?n#H55oyMF|9LSytflE(I!NBjVphaRpw=~{9 zSwe6jxSn#oS14hk3-~F&xPalG1V>$|GisWx2?bbF?+2ASf&Edg(0ICg>?Y=wt1X*i z;xq8A=z1|#`GU7TKtpTb%aQV!C!!ZGcj9-&P1hlg=qb8>haa3B>k$DW^%HDso1=dU zw0@L?{NHq4QP~?oXFE;H>L9Oq{!C8TAg4IfF|d|eyvjH#i1uz3>r&M+Lp>fKEbcIY zXY7p`s0b?EAXPudq>s+vFT`NZrnHxwmF!RLrT8fsADvrH->Eud-G$!~V?Ebukqv#% z?5=7)yn{MNdnBWidg@e>kSWM}I^cglFPQW}@ukk898VmWnvAPX>x|`^T@-|t5fh&L zRglY5EziVg!BNiZ6SnXq2)ABvp-qZOG7MV-u9|R5u5~9X4Cf?r+d_?PBZ$o9ee1Me zXOV?*cTB z`CPRAo{C*l&2O3xC0jaly7BFDAg>@t&EfYLBL%rrp%^PqBtQ1-`9WSSkJB54w)@si zemTRG#jE(Z$fU@^r}%&5^9~P5)$lAO_Bm>l`OV z$1m4ea7L~)VRlqdaN9aB7REK45B<2@^uPqk-uKhf=GNBwwUV}-8i=&^DSmi&-~nT{ zV&IP7xXA`>p7~7eqIK-0*)lCZUNi-tpxQvF^t-w6R0s_*0Tq9X>-vToc97YvkSoFi z6?noid2K)US; zg=f=Ve?J34AN7Aow(CucN_fc)v?I(~OH1dU!(+9locjvTN}e^wR_VH*9qTOJS_2fH ziIQYIpUk0Q{mHu+C37^WH-|KEP}xRVZaS>-=%#aND)Z0Y!YN(ky0drib1|n zd|=eY^MJ?jSN)9ehy0Q(II)=(bP&Es|HlGkYAU$5sUv^Cwm&rY7G>HyHrI)pGu0l- zZN@YEf{3|{8~nbt*cAhMCU2i`B{i!|*!#P5Nu_M>rZf7llkx|Z`tdx&GXkyyAr!Zx zTTdX$3pjvukAY4!sd3-OB-`(J2J(K?h-lk2A24+VRt%D?Z$WM-@cxS zOpm@PEG^a0HZl|KB(6S{6zJO73C8ENfCKzZ$_9T*6XwzoFF~+=Yzgrl7LbicB-YYZ zK-+WtNZBhVD2|&@r;gC8`M6lhaSMot{xJrs&tZ}Ug0v@MgVhe+{5~B%sF8fbnDHc@ zVj*-s!5CdfQ_8QedS=;{FpxXyS2=q+=1Ag6lslAAgIhp} zJFxnP8m>gRQY7LwOTuRdjEzuiveSe0VM`TcH+(t1pj|f zMO8qMJQ~w&$7xtUK_8u`4prndpl7#S^}-2~=a=9y>NEtuaA2{WMLdSp#a6?boWOM7 z5L)|?DP{AtPxY(1I+UjL6Kw@aJiE6wC_3cihHAzsYe)Z*gX%dYkbQK#eGKuH5&TWX z-AbyYWTDs$*|q9c4vKw8|?Xh0hE7usO?Q< z9*GcMSuSNz+E4DsMk4BQ#@duA3OO9?Nz*^?Sd4&-b=z=~OBU;pR2bu$MD!yo{M9Nj zmAd23@$ifN<06kss?YIYp}y4NaH3GT>g$ria8(CVsbc`VbXx-#R9AkK`sYyhkS}sc zCnO@J<Rq;|0Qx8+o0GEbHXX{0P~aCpC#?JXDvq?stEF%oMz(C=i8eORdqMY#(~G& z05?zf9NkW)jn3TQmI{Ak@+r>LzL8p1WG0`?(wwR@f?lclGABdg2P{J%P!+HqDFe4< zBD5&556Stb+5cCr;J8E`IYZpBE#D2t6j^G>+_>iiZQI1+v4>uY1J=9Jlu3d_eS5pn zj-oN^qvKMxfEO}WH-wR|s1@ZHZ=3s%TC3mv#T6`nuwOja6it8AnRq=Y1shL{GH#a0 zHBYtK`|($cy+gWk7${sqMO3~rN02~iufy;JaY|5Nv`7GDZ>&gpjgIl6a}}mOJwb?1 zK;_F?I@SOiGu6Qj8x8P!n)5i8SLJWOch55#CrbGs?2AZ-XUnNW70^I3(hoXz#bS>K#WYIZFshOz z{cMIlKxF65DVD{iaM6z7kW&XsNs?nKw>)%(w?QH!e4)p9;(YAt1IsTVh2$2Ukmh{F;EWe+fdv zK;)X?D*Yp>;o2!fq}}y9g+jz6suVU?UQ3`43IliS+M~n5#ZiBC_mv%hdeaALZVSzk611lzI;|dK zH92KeW*43GNux1EF^L@9LWuX((<;K5Q3N>!G8Yd|jjl0mavE}VeSvl2S3P4E7sW^A z0=h4TxzsFu!zlXLGDd+l3!Q3NW=m|)O$EM@%Ud8%$b{--U2dzVy01Q;dimzljr}u&da&cSi{1-_7G@=&! z{IHH6tQI6e^pG7@yNob;d!L~J+BQNMZkzWU@fICpBrF>sy{6DqbRKLA03oNgwPu+h4 zzU_3eY*?yT>Dz}57HGJiUwCKUq4UOLd93J-fJlY9oPrVQPI^+-q|y|R2ZhPx3fd-& zvl1!g8{$Lj%+2@9=X&|cI2$5`{0cpYTNKuj32#| z*`tkvPNy%`(}$4jdkF(9eH@;%h3S96oEQR^>GMD97^7BKkxx9RplCzzZ}>yry(B3+ z2%v`y;bC;5?mla84JTUB!VF=E4t0M%gGLiSJExxf$@oLHkAeRQz zn6V*4^R`vZo5qr!+@&xY>MMpSKJocweAXK!@+=OwNFoipyzAI~Ys^jn4+c4wdRe>cD%M`hSyS8xzz$5kV{{-*v;`VXY}>YN z+qP{dlca-*ZEJ#w?M#x1?TKw$6Tf`-zWdhub5?cL?&><#r)zarb?rSh(wPW6XIg8d zzDr*k?X2U$9|VbnKhHk%Eh_l)_eJTFAR`gnqrb4ukR~*Z)`*L#tvpe^6xrfP3MOfK zdap?1fwXA+5U_guCmtAzl&Oci6BncvlMA~;lMQoaf>d7Dd3BlHz*liy*(_P_FaplU zWWk@ko%id>n%tqAWJ+&1i2aSZd3tx=3Q7wKjTaz=6vLr8st46q2>b51 z@<gr@|PP#OXwVhL%Mz>aB9~Y?(Ziw7s|+`^k*-yniVq}HM~!f zq>%TTC6aX!uf1!H-D!Dk7wGCo^Dx`^7exUBudD&% z4cWs-u4IY8F6?ju z<7q)+nnK~8OU~Y|Xh%xAt79X0+B93+z~*6xl(2f2#OOte53S$5R>n(9==?CcDTj;- zxhdY*hZ*f{`)n3)_fDEwu&@?y$9m=U@jAX)5`uen6(XD#i#6T`Uy;EEo2{4)jn~=G zQ-3wY86Z*}fAkATy|c?t57xRuv9CH9zshQ_F1V{zul-y+l81|c%u6|J+AE=`K99Dn z{2WbEHV872;6k;(NeohY+<54um$h|IG-^f9f#|QB@)^OfIR2!+9a?q3HHqN-AML=Kf zGkw1+YL;g3KU<6VNIvr^=!jpw3?aQGsurj*?g#f*kn(?@?>*-w-T#-CWqSs*vr8~x z1G;U+3L8S7ueVw=or^~EFdM4fM5oJ*r3L`5007oiV9}JXyTf@#hlWr_CeGItR%6tRv?By(?kRdtn`LxwR#}_`)KwQ%t7D*!}>oA z2D^#PXyH+*i2;Quj*@Zaadg&so%;_3>yq!3CBeYD4Z>{QXk8nt;qmsf1gn0&bz=8())sEVXyFfK#-05NyLsjW z7QTuW^nAz$x<(Tn2&>V52exV-WHAsq`5B`~WLWjbGZ!4}n^1BBKa2^^ zT37*putZ$6F#aYlMOme7a_?^p#nWTmwqfNE+6jvFYS~6qKAEC^7(go)8?4KVc!E*Lh$dSRr> z4VD%%QSTR;O^*q$x14{0>9gb%m(rkVIQ{^3yN+EtE)!p>WjnfgGVkv$&f2X@%PTqF z2tr`;3m?8VsU5=;H=@tzg&R79D>&;ckBei=P2mx4A+i*@?Ys-pggf&K_FK_H1qK?9 zS**+Z{aj3gSZ@HUq*Pei$lks*f?<=eE7YjAls)(*CX*DwwifNhBH~~#Wi3>qG6)NN zj59dXO-buMG^&5|Ye#BPo_gz;^7acF@eYCyARF8n7uvTY=G4x>43TWn?*R$+i4pB=^o4E*U4~`vj?MP*skGVZ z3c9ZRN7!y>J?sj|J#5qE;`)ea0pbgg)QSv+x4u8)Sx{3D-BFCS$J1@1*3vO__1U?B zdFCdPe8wsu!fGG4&<>iiY#0qMN`g$IY$ti0pj(}CH>80z?Cz#;-w+w7xg;P*Q-F|w zd}cG_P#{zzwVTFcC>)Vmod_A8%hmE>^d073^_oq4g}a@+FP;QP3z_eB)ocrZk*hS2 zz-dI*J@W}cVL=}NJ4V_fyd2;&_d9kPNl-cHq=75Djq{rjy#9zBkE3xn42RQ=J)1~8 z0uls>vpDCoM_(ADJCZd4s>0(@+t0`(GrO4x^Mso{{@*XX=IkmDC{v3WEH!%FiE2d*;&qG-54o0nL*V8bO;WxAA7FuW}OdA9}8P&P$-@aH+BA?0g-LK8mK zY(w_f8iH9o^^uJoy78bk%W;eAHtjp=>;+|k5UUY~h`3Aqtlrxy0?%l+%r8syD)aL| zVw2HDSq?)~$#<8+n}^VQVAh9@WUc?Nng79vddb?XYv)e$S#Bk6v*VwA?PcR#lN@l9 z>Z;szEymGb@XvSFX(s(J1D>w&@}^cYs4H0-fYhCRmdQjG5ULl-URxA0b=G);0v zyhALH6?;a?abHJNq?b>GnB>mMV)^rJEI6Z$Ly;wT0lyr-=6IkkAZV#Oe1$vx9m0zZ zy2%yOjI!91NB9xiQJIFIfI5H@G~_hi^t?4W)e*9+WrEnFB+a9upBKSV?!x1obS74U zlXFbGFZsSLlmAO_JsO0+GhBskD%*d7QTi}pnW>8VZHY#GvX;T>m+w~l0Vv~yx-$dR zEm3L`i2z={WOc1IkWPE!ur9f-_%CI0U;=wYtgn&~ZSo9~DX53MCrce61bDo8@Co}!GyXL7-rP_K#k~l{lx9BO zMtoAZ#ztGd5my=lgb7Hc4QEA)xCu+^xR^6PpTT{!m5^)MT}$%M6Pyqf)I zuYX16Cvl;(DLYbeoF(~My#B$6av}K$JzfXQ@Q@vybiCXam$*(51f27Q$rve3LC{Pc zc7md@@}3&10KruY`YvH2qC_tunbF39FJJFn>z^1Q9I~hg zhlzM)($DYbL&p2$>~XNAzYri{ea|N2v;rn|3TarJPF0x>NdGk2iCx>HX9aXwirt*b zoUt?HRzbazp`q}iny6@mFek_{-l3)*Vc5F)96m^_0-RV(j#L zQTI8EPRFB+hr;^_pfop@8b_Nv;Fw08KR0(AWp-EPl+9i4ijqU*p{p#R@Q!jNruWm{ zW#}U2firX*l^8AG8aQ1J;pu=8LJLhhGB;S7=!jo6;M@^LKN}9D*S)L`8 ze8Sw5UVJGoKGl&M{D2V_s;qsOMh@{SZA~-SfnD5DEpMkQBfiPxm0d|BdTdenqs8Cl zM%VKR&bUMy;i6vfa50MCz4Z$$j&g2C?8e{!H;~}TMq0$oR5bRqGQv}y4F4oY zEXhhECFs<5;PMi!A{EO7?-OnDKyJwOH-r?A*X-vnE2qA$cFD!YY97(j9P|92O-l?! z;Q)P<=qrxOnA1z937uH~PrHm$7oUaM$yBt{E$oqK3Ax{Q5YIcEE}(0mAgUE5okdGc zd+GwrLBQ)N*zRsWCdMNO-(pJBBxj7sz2G+X5CdNj14~RvtKdV_!lEo3fY4gd+)3mo zx|iilg1WK~k}lN-rdG`oznyqKL3G;3w05#h`mE6Sn)Ws;B(g zkn$*z%fRq?usP24gQf5^ndbXaUePpmXn-*naSWegS94lI63kE$+n6F2*tyog zx-Wg$r(yI0-d)CS()8oAg-^7`Yz1yXG=r5_;yt9(`@0BDW{8o{UIc5n#)@O5!jnWU z2ogjnkN#tN?YD1o&he|_sK(UlW`G>*MM_ouUlLp6O#wD@t+TZ30}6Rm`n3+by+LDd}x?C%?m7i?;b zuxPNN<_O_{HgT|5l&m>_Ys)1HMA#Jdth=b|t;XUzjqk*N2L7aNNV}t&`^?f$ISYJD zS>)|NKZG}nw_noH00ololMQOI%~RNpaXSeWbP7Mic&z3DxoHg zA(NDQi7?puuLrq(!={0<{EKgPC*O&&ulCFf+XF4r``DIVZDAj4SuVao6$g*`kJ{&< z?;^MldZ>=rrO?qV8Rla-zR{1JF>Lpo$fv~S;MPl4M|A73#>uZ}&043(mA1~rUeUGJ z9ylE8^7$oaNjCo_0}G7_GL`M{1RceBw$`|=PPI32>5(t!#UKRQHgXVMgfy(tw?`vR z#5Jp#XKM8z^zHn%<|9Qn(x+^X<{EXwTHSk;+PFZv?HSsYH{;@$)V;wcbKofr`&3X- zLbSdw)IuGXvJW^hx#4pU-z~dK z^bQmMQYASodclW^``}=)*rxGX`-%MmURNzcZE?|M_8o{IU~H_2QWoRjJ4g^Vrl&^1 zd(kOHgy&!{@uZTH)WV2U>GsqTp8nqb(U}_epKQyQ%oPV-aj%fSV<0x~@=hzG$HQ`u z1k|cD>Y4J7eo2lgNhSw6=Hl5Ert?CGb+jIae~D9$_`Y$SczT&>u#V8aJikCs{QDA` zAKrN&qz=lAQp&iM$NUhu)JnYP(9xi@m=VlDfykt|o zk=PSIbt4C|84#dC+C3Nf#=##1iag(lIeeijPF7yb{relkdE{F!27Zt;|9&6d zE25bX!c3UxWcaYT1`}<4u8QUs7fOCG5_}(6FuxK?$%~oC@4rpD?-}YJt=DfYAt-S; z$a&zYI1ESpNG!Xjao*1CiiiJ8;K`oMB1DPA!pzF^e>|APY+UJyz0kD4f}W1snj~t# zQSF~S#}f6BcB=~2@&HlS%`^Jxm?uUxR#Ft!A`WDdY4f~2Rpm@}RT2wU9J6-FCp@M^*vu%%o>-sK=3%R% zv8HhkBjcp; zdToNB_k?d){z|*Db)4Y!W{5du1&!1gWw3dXvZE7yhAL!ELl%F4R7l8eOSoMK1Uf|X zSjbCINKpI~ypX=!9kZAMQyLMJ0@DN$TDxn)J+^X{4WD*ncE71+aL6t(7?P74C9kO!N5VO3P@*Ul;l!0!22^bQ5|RM@Dhw6 z%9|gAA!p(^uYZIw1U4DlR;z5S2E|*WDQ^)v&L5`~_&VzY;I@zr?rsQ=;7ij6Nb*4{ z1;#|qyyP6bA)pvC&UQ%V!gImnICP2b*LC$HwKtGoIy|&l@aqK2EZd~geF&Uh7Th2` zn!ML%s>zx@@s)qbGk*HPd)85=Jq2Gc2EE9GB+H($sLL(YiR_wfx6et!w*~fz{Ya?{ zJQOA-XGq!x&V@df(T=vRqU7=Ahwk#DSB!aoXDgL<-QKBuVs`uZKVI%Te}*49ZQ_sN zcVj=)T4l<3onI++Tl8E8EnO7C2m{D@oS)THd6STX-f<#pXw$D=Owl_J2!8M#RLGD$ zYsvo(c76-tBId=`N`0&P)3@@w%^#_L1C8i}##w$D*e?|lpgUaI5(jv5-(1)-{W5o3 z0i_&#_#K}S6Ij<(o2y^>EvOgU?w@aO*y4PzO^WQ-zq=w(pc6rC1~;Q2T`wuKM!BLn zX=~C-8XSsW4&L6Mv(ts}5uBJX8@ZBi&br=5k8e$Gh<`kyQ%-{DOpj;nsP{WBR&=`I-Dcs9y_K6ZC0j6{8&QKSi8b+q=r#qH?qGmody!QF{yUdb0Xbt6#bBi2B~gz z?j-<5#sLZ7+Jf_R+A%OID%u86E(k!?;1!k$pgCM%ojHjP!j_jzu5Uw6Po9M)WD+0E zpzdaTAye_gi+O3?mDNW8m(KW)BcJ@`*V=>uoH2e(E8=sN6 zUpq1;qQ|3ENax7ZSkM}GJu|%XF?zt!8h5x7o0zfgvTal%o{7-vk)v-YoLMsD;ckG= ze`0=UTZ8$#)26&Sw?tb*03s6N)K)(I>-5c_^}jkKkwjX5YGGf4Tat~waN~o`=zB;e zS;3UwM`gD;O4}@0smb>D;l2BhEl7qc31s>~8(QZESsjiC515kUX_{nk0`}gZ+mI88L#-{%3=k9pR?B4q%TCV83B3{ z53j!Z(=!WJMtO{XRti4dOg@Mr9i=xI^iM86jzW;2#%u1S-9z|%oI2Xn7&>A%#|jA< zk%`j4{L^iniJsQJ_djMDuly?+w8Pxotm%j~coOP)`*(`5@=(=Ne=2u8|HKY>rgIaC zquCk6s(MtW5z$rlt=H9DE;T~Hdu}ui44Tcxf^I~dgsXXvGfToTVjVvwcFtB+XSD-< zexIk;4jWZ?tU^DI4S8PnnF+)z?JQFj8pld?9&j5W^%`w;Cb@JU3LP)iEXFI288eag zz61du9@iGF<4e~JCKf8ZUfzJ0gU(i>^vTc;1FMEW%Kk)L%HN2Tl?O}6i@4QDVc0M+ z!B=vsEw)lqNB|Eg%~oyz_lcOiAtDuCW2{Do!}T%gbYs~Wn>rybTZ+@j@uDJ5g`w#0 zH{eo+Iy6?-lhR-{v8Mnkvf4L+3_3afweq9Ui}N)8=rd*Nb1<(7s}*o5*_S*P9X@B5 zQ*Eu7vHBH$bTy?_vYA5Qnu3L-SzyX_prPPnP&ID1G#-6~ocgEQFtFDobo93`sOcaB@0@D-)Kaw>HC`H_GYpN^!Z12|iQUR|b*!vW`<9Kb&S8$SGQ z=eWU}U4uUZgAubxMFpS?-*K;N>%zs@!u2s_Zhy_Y)Stv|O>cY0j0BH92JYU#B5r*? z5?cP*h379<@DurS1ODy}r+M*|dB0r$z6!6es43YZX05ZeBR6Ykh{-=1v2fvj7bEg; zO8sufU+}2;-gh_ubfuWbweVrR*w3kX_>a`$!hQFrqq$GJ;tJ5ch?-f@B9yxB$?0QE zjU&LE?w&2H`tO|E>&IIV>bog_hCbr(Qo-QPf(B?ph-un;g)EI^=9HS|Xw%_@nuK5M zcUkQeI#z-+md^rd4MYYsSyfV+$c?%b#1d+akX;H9xso(o##H4BvXgFg+FzK8tQM{-%t@VZ<$m~t1WwyqH&*BYvPG)XLw@Q0{tD9 zRv+mLWC+kORN#+$;J|I6W1{4sX|!?iHeYs?XyX~$k8#wW`P&o)uj%`HDAkU0rCJz< zpcd)!0s_HlR?~;fzjbD|TIW_4`2xSCi#PUBAF-?M0fLVtyI0}>+zkhgnd; z;MFA_R3};F8wdlLP3>$l3R9HLJgUie5T|_7yK{K?6L=k^`VmfQCt2`B>U=Wt1mxDM z@>GCKFcmUbd{PZVS0yN_&7F0U?@tYPg-wjnP%}9X4w1P?GQwtR(h(nvJX$)!a8{Is zOKDZvRc+cRk#ZX|8ya37`V#ou0&30TpT?kl%p%*etc85XNV@KuL##VrR0%NpY$=OA zbku8sbLc{pmYf9Y=&)+)_Idm$_jgb(5|>?mEH3~16lHT zQjaeqU{aXeE$(njfl*QRL>wm!4X;vZY`kHz2E#SVd95%}Fp>p1C9X+m(4BlKW1~PK ziPZJbBJvJ)?~N8iu0KqaE4Vp{Byl-9g%)`dPO5x(1fQr(8Z0XT8hHr$8K}tioTo|w z{9k#Q7WgBB66!zOx+oXBV_XF(WG3hwaKZ^4=oBy|ZXHr`E1 z;Wo_lEFURTN@9NDJ52~Axu!@565jwhXQZi>1!a=7O3h+Er?x3pdOm1;!YWsYYjv~y zQi(^8Yg+mPjLLr@ENPW}w1PH-q<2Zna$uHVY1s?4<<{TIjeYi%QOK>VS6CQCBt#?B zkAjH1By2}8DBRyVV=qB4IO+*kz>9V;hV>zC|6spgD)TCF;D2WQ%!C$KZUF&;wR92j z<&?=o4kr-B$@^Hj2UDkVFToDH@uqiGOy_vwBXjOKDBi0JP0?ssMafObJzBGd^%znu zf5M@=S2e{R#v;^WqiU;$f%SO={Uk4>c#zV4$$`O~X2W6_4xuRf1D(iH?rg)Tp9KY} z0Nx*`9Oa)gj8H}!1+y!vA_)rgc?SK|G;k|l;Lo-mq*SfaJJ7>G$>b{JucTuZHRmaZ zwX5k9ZbMYoy~Tl>{41Q0ljX1P)-t2(6*M=&I|(9u4QmCbfKbTkgY^wp!ISwfug!Qy zn!&6~#cgf@|3d?BogLJvmAi3~MAE#nR2Lq)e31;~8x;{sF=M}rF?uZUrTpsYNP?%V zd#94U^R5l)K!G+8>bS(hAf{4l%3eZ3jGeP8M2t;)Xiz{(l92Q+wW!0I7+ch$OCcd@tjs2K_%HoI_v9mg=_?j zYVtgDxm*?C(go*OG$^T`tEELEynPAvyqatV13S>Eew0iCJuus7JGWaK?tybKaGywd zh}6e_n%m6@P-lX2LC0a$9u<^sdUrKsTt!E@RT-1sw z16QL-y7>Hf_WB7`r*Q)cE$NfC=RMVOaxNB!uDZw)(FGM}k1r1BnX)1QDr(z$uK`xS zFy)V)TvdKF{W16+!G_z}G_=paI>hl?JE|k1jbDDzK0S#J-9EefsBQSOD`p-L>I%CH z!cCbcerVVSM}K&*a==sWb|g27ZhfdOIiy(*+&&>Mjtt5ES2~uPh3mgB*L0&`WCU<_ z?l0j8J#ZQzR^K3=jw{Z;r>8Ie2JA%oFBda5v0I}KeZnMt(r*Sx$!3F%R?l_MVNWmD zqa`L8jrK}%%>}{1Nitb}^1->K*w|I4zeA8#T$?k%gQQp=5vQXtn&}2)QYld#3+Q#Y z$hwNz9@muiiwUP8-%BB<;Ik5^@bV92WiU@PgJL4UH(8qPv~57|?L zZT#4?z;y+FW@eK5+5|!0ZA_QHiu}o~{ zM_!i*FpK=s-;o(Mxc*84#7qczT}008!U*^b+t!k9Q^xVD*of$-wtHZ$gR}4!cpvg9 zhH)>kDK(l2_%7_QRB>TCB?gZqEpt9U+Yn?X-2B=!nDcK&I5j5~%vlHOQr#UwX=0Ts7xgv4nPJ!%(75692e6dCH2iF4ZaQKbL-w7JHJI1QP@A8Fagi^8%{<>Ym;68 z&`Hp#_Wk{SBYxw+cic_WA>gY_2|)Oa#2Ewv1bcEFu_Kg#cRS51$Kf>R^qZ@b*3q8N z&i1C|kID~hdN01`Izh6z^`Zt}wCL}e4LGZKnlECzo(d)RBAPQ4g=yayW z9Xc8Dd&oHAWSLmkdZElbV(xO`%kj)WD&l*SSOPD*$=^b~lNov5a|A{{ps5Jaq(qG4 zVkVm4G#-(J!3)}CwJ?$Q2lwert-JLv0^0ii*}s9QlD+vpg-S5GJ@4Xo#90A^>^uZtf9NxQBdtMN%O=EjE}zL_9FH%Y z+h&BBCLKO4ye4$wf$>7Vx4B%;*1P8j)7lrBMf~_9A;N7qIhXs_1Tz$O+-Q4LXm|d^Qo2TG!Gy zp55O%IysqYhcV@%J;;t%4L8@|I>49oQ=ie2OE2hNi8_bP058dwTBGh;^eY7KbH(t8 zM8Ibd=if3x=bBapqgWbh4q@EJUP-&(0q%_6Q-q3b_Wb3WELwUWHdH^+RtH%rj%ShS zRjGgD=Nu;gSyTQhHMK^SYcdj533rUw>r(5+$%*{I(tTvp=Uk2=!$Bjc7gm?)>Kh&g zq7x-6rb6~CP&MrqVDDklU*_WAh@?_I!+fzeC$FrAg8{FW5lYcdE|98npcGo2Xr3A^ zg&Cs@8)i6lghwITAl6F0!to1SwX4em3KD9qL+|x^JU+jfHEe!E!*yIHowl9qSy}qZ zHCJdvw@wI;(?NF)kRriTM?gkM|DilmO(oV98M;d8e((5_+$njte#0S1>Dq zdl|3iGKRs>A{k}j9ao0wi&9v5Ww0WWusG;-z&z!y16d`#X$lyJHpTXsDV95r+2J(v zlqETY%A+e)%HrVYz=gno>ZP}SiKR`Qg<7Z%ZUKMhfdPv9+mvOaEe}&x zD)hmngjz~FJfu0xt=-Q%S&^MOtWY22!PV7p^)xd49l^fbP~OLnkls}(=k%NqLP*Oq zorz4xLzT*K5OkEWRFX|vmmQP)KRy75HsZ!tq8u@kYVG%q@a?xLx5X>;29h))imS3y zGH1Kz=+pn>DtW(QyhP332W=fbEe};BTuDyRQ8mLsWYI+wHBK&FMqd8ze?Fvzod^LP z8Q_rI$Bb$HA!fKOW$Hs;4OOL?W|v5j%sVMycd%U&AyR^*hV8{@yoFZZlmb^|oRZbGF4t z<8bbLedMc&mNv@)Ea~nX@`hw0G)V3KCYocr%$KEnzkg=NwXyV*)D0iX;%Q!4RjRjC zIO(hfoUhJbyj%cw-=80!TGLus+ajl2vPQ?#D9*iB) zfk%(F52EGjH7$op?vUj>J9!p$*Ml-PyIgf0tmPshKdmj@XzGkKuRiKFTJkrwZD!%E zHS;woZIqjRxB1%L?U1L3d)pnuo4;9ausOBzn)UYZ^g0E+5UzebCMEB=io-9Nz;V{m z{Il=bWBJBA^a|H2jLFgmCcBx#Kc#Q!zZu*Dg+;%um>Ay|Byc zf{6Ul>!x`_2){coE8X$)y7sPIqMBPh0{+UiPDK#C!|=mb(DVB$lUN1nU4Qpak4bZQ zU?1$ybvmAZ*61K`^O6kKbHfc8`3NqS){I z*)GtG<$6-s+4QRSwCQ-KaED!@HXw-hu@X>1!)8y`?Y^}3Ja;jh%ziZTnw~DmQ|;!D z+zq_3peJ;1T{a1I6GVwPr23mBf6I;9oiSH831=$@?MNqr+(9&4)tB%@uY08-%aunQ z#wJ*Jq>JmcQ@Z;43wVS{X)+I0b1QyM+t;>!%pi;EMRxnCTK7=nQPUPo!v1<{0nr&} z73uNCakk%`d@v6m7HdpEA*`@zX6wD2ej4!Nn)vf6&|{!DnYjE|#XN<^m9_fVNs>I2 zItZcoTTni9ubt+~2+D=S)>c_7CTMR^dIwNoC`>CA?f#vJYdz?!kpb zHd0Y6ffn5=OixW-jCvbzefN#@QneqKQDM)l68O1dixCoEgogyFs3Zyrm?Y+y9uI&^ z1$^~F+K39A7y*=vd@)wFeOytz9XiRxICl;R1~Oy(Jp6-ng3Q>PN&N1Mn+n9;DsIa`e+Uke(H`YTO zxp8(MJ0qH!S@^%rD2?H9HO`$RlmrAuB$OS2Uvt=K2F5GZn((C-t-M{LZ1&#-!t=rzXyfODhZhHI{b=hqVRg^_WE0PK4(EXkX+qn?U z_-DsYpXB5etcjOJAe=5j=Y&V!_2B`(hI$cYdME0q6W9%MGC0A!5Mj2J^rEIM9sF#$ zNZsJ9t;DRWI&})XEm)`rVu&zMaE)LwgPdW>&X8YIB|lDT@O_Y?bo~dBQyEUfTbx-O zz0mv&Th^PYm^MAjNIX{+iij=}X`8rbou0Bmk(`_?NFh9nGzu6L>z84A4NePl-U>=3 zHu9Q|m0{%cjjdVKlkrGp92|kJ6o4c%>K|wMS%QU4ho=B1!7Or_mIg!_Tm6)amT;!6 znML@5#xhoO^|s@5QcF%vFH5kv%EU1;;Pp;Vpy+Z3FR{guVm-B9!nya_Q!Hq7pp!Wr z_?0|RK?s1W#snwEmU58)$g~lTmWFneOxDLgJ#r7;2tLI%&@A~tBj_gJ>e?o+y#Vk68EH9ceshnC)g-`N1=wqIo-M9 zGyeJ9HjNz{oll@qMB9DcXpx)m(uuGeET@^i@~s2hEEW^jB5~TwV4WOMmoVpxO{&o$ ztFTda>;gnvBb46)Iw;H%Sy)ViewxNaNVrzkvr0O0xRg*Q0)x%FunHZ~!#rdGP$w3s zrltd=5`(ljMP=GND`f2pWBGN`j?K}PZ=1WiF0qsn6eD&)(kd`2Zxb`s4RN|Lvb$W} z#F)$-F$*vQsHr2>G)5#$GckH1E}@hHd2=#`Q*&^Xx%)nHtxLS4p;?Y~9W2&bgyP^dsGgWzD7eA%yQmeyLLKZ>KF>VGXca}Ktr?F6k+`D%7VB{3?Ei;tW z%$6jBnC0L@^1}W>wKY#LHSdEbi%N`Siy0ZD^uZwqu=Fgnj(HnX)wND2F9jmS<}H`C z6L4lXH?+yveol7QTbAm%x?H=m&NuvlxLQ0etuF46OivTV{>Bs7gvqKh%?t}a^^cU5 zTP!`#HYo8(dgPP2zjo%qk*>UE_P|Pua&&Zp>F8X(cjw4$am+0}ze=0xdt#ad^pv|C zQ|b!bTWt2{MNghkPBmM3UoC zQZu4y%`-?TjTu1T%)5lre+^|E75Lf=P-%OxuKGMx#Nnw$u&(MnWyDaaX0UcF z7@{4RD!E5R>cgp1vn{#<%Xg|Yn)=Lwn~gCf$Ki6ML;XC>BdSYx=!C|h6y|ohnBf+7 zp|_RrdfCN4THtLc4jRwusZIYZoAv^ekBd>`(n93wWG@u3Rw6FIV4AHZ@Kq)(dsddMr?pTnl5T&z7CQ^|nwExe0^ zR8k-8Z*zq2RYm||8%3|<$2{n z$xWg2Nd+4l#Xdl>?iBs&L@{ac(}yiOcRFSw9;BG5W{OW0A_V@H3`9U|ktM@CK_96O zf6>0RphK3+`AV0Nmlc{d13TrUAwT7uig9mmd;n(TGQ4Ss^J^3ZI9lEaKx_a>;^FC$ znr&7@NzZTTE(woT5Uy{<7lJ|O0ehOqVE;4R;tR2%LB{1L?tRTYvtfV1Z}z_6iWZD} zG&PB_dNOXY^ia~Hnl64R_UPeK<21dqv#yeLPR%*U=eiD>5v$b&ZSrhazl7<_e1yJD zMPW<*#pbjtq(SMCv2PgmhXmiy8|?S%%V0Ydfb zrzl$y&aY@%Cbaf{qsk&dFB3 zx14o1Z3SqQ-;ppn2ok+4y!=yQdRm|(9MgzWsQOzez3t?hs%as3qVaQ*G|J%N@_pRf zwn*LP&Z)@H&R=j)qwCD?G<}`b0XXxQd0@>SqtLXBw(T15SY(MxCv4p0ov>|wX8)Ki zEsEofdiuVocccV?>7wJ3^2M*qs?yG6$0?WQsxx3eZoEE5Ul4D}ZZj`>Z;NmcX~1w# z=m8HKz(@b)N|T1sZsGIpD&^yAcHPIy@9yWUWl0 zfoIb4M_J5j7*^Eg^O{QbA|P0a{mEqeExw4;Bjv1!^Ua<=Znf&Cg`h3lg3cgvvo<&v zQS%BsUv3S(13H&2UM!=+j5|>?0*%UYnS=HuCp^v<83C{Dzc%mK=QZr+=ZMU&>$-(g zNeK+{*+%1RVtlEjr7LF#vDiz^Kz;DqM#s%y3lznKO|D96r{tMF04i(OJ5>(e1u>>K z+O;R2Ixguq)La3Td$abECiz`9?52MgrMzfcccF@eQt$VVi<`0A9s~*fo0cwLyKTFy zq}r}n3D2%)z44nh@N)ladKGPu z)k}dmgSd5)EKrB&aK<9_h*d=1r{UO_Hn^fPj*^4hzU_FxAVh|me9*VSu(P2V>4G!` z8i(<@%^*I6Cwe_r8pXYb!joPrDtL6OF>)j-;w}0vz9=|w zE3R3P=k`!MK{$!`?OTc$2)A-O_>R!tN62dxe#8_&`PEnAJN|o{;dimuRc_l+rtsxx zHt;yU7@Wg@`G!S=WN?T~+bFmJP>R>dGl@ZZfgIu&5;-KQh-0&p9SD?f20RhW$1P;9 zP1zZQC!`6!dm3a(9d5{lGgx3Gn7+S=-}cv$`wKRoA{}0t=h5_HihSMPnd43;ANsi~ zxRwBE25}HYUF)5Ym_&)@SWcD^H&3z>t@{7i% zKl)|u!$4ZhSpWTiW}(r+3-DEBD4=j7v^X1s5p{Dz6m@H1 z%pqoP4b3j#(Zf#NixxBMlxYT?h>`k~u+P2Pu92dSib~cnLHQe=(f9eY|+#ZnG z0B|ocsbL!Zg?YM47hbV9^&y9Q&KXaqiFbQuJ%C{}vZSv!hIMsEB%*8zbq=W0~#ql_5+F>m1aJ)s389~P?Xd{ z7s-7qQeA*bb$Ov$(|hvk#P)#yzlouA;z0Y_DvkL-7rAftKi50B1xONE4{pEA-hW1q z8|9V(QYe9e%I2%8cVEhA@v)f7@c++1VPP85@@sn+e({WeFL+^U#JedCuA7BIp|4LH z4leOanhn+8izvf`%4_{jN@{uibH{NrqM{=nb9mbb@s z2nWb{k32>FoE>mgdf@3cbFVL%Mn9Vp@s4CnyU#Q=>%}C&g=>kZUvAW39X$1kTCj>j zP{ax-&4zuEukSTTRI_*1+DDhulKVP*6*Ew3j68{SP^@=v|Egxqhx`bAtv!He(6fdJ zn&Wc&ydi-2HP85A+3Mk>Q9t;+Q6JP9D12q~aUaj=L<$-(9A4u8ZqY^H-OXD?U^K6b zNEXXzNgtjliN)q~JbuhK$$xL*-kcHM9m9y}a%}gvHQtb{*80~$q>b20=;GO*wma|) zAlV3;3Tb&3UkUjO;l8vE2)I zRBf&%P5UdGJcUH@8B_TMhaF`&gr!$S{6}SyOA*L8Pti zyiM0kShv+Zyj{oo!&hbX)R9of-G?P;f2A>kR=9IW(9V(I#1)y^&`0%Ph? zJ3lCb5{%M1j<9R@^j&`f)IQroI!a0WQ#HM_YRp~O_v#vYZx#&14uUw962u=3a zYtGZCm){X1{H=0msv8H?^HLUdlBkqq&+6-bTrJ17@zazKd%mPRi99u}tNE+y#(&cR z$Hun@;rrG*%tJI|g41Fyx&PXVqg1q&MpZ$)mjmC%eYCsnqedSHU_^NsoBv3fh!DN_ zbN8wu9fy->Zir@|ET#*|X_k3sT<6u4w=jB%61K_!y;eo8$E#kmt(Sj^qSs(tjptr-jJoG2C*-Hkncdtw_D@4v|Ol+ZxLl z3T=$uD_r}E>iakdB#^Q`ftN#u}iO`}cOAuXRhpIH*eqfcb6 z+=B5DGP5*f_M@AJLJ{B6B72*gg@PI1(t?t;)4vC#dcN!IO0`uMR|$gH3ihS>*)mx- z4h1p8dV{Wrf9*O10aq~HnsdJEQq%_h@$uHd1g^^CZJH%q&eD8Xp8if4L-@_jXzSa7b_-;;>zmTlAs={OAbY6fhB z2Njl4;}(1SC~3`8bN@I6~up&NN7d7$uV);5F=aQ|ytlFNPA8MJ>Eb7x7`;#nU8 zHwLXXww(VQ+N_@O?a$m9y%AeHc=7n5)_8M~@}y@;LPeq<^9nuNFnxCK?+qVDl@-B} zwR|wwHQ!6Mb>_wUZ=Y{(O4BCGiJdQZ_;$f0-nHO)Ea22eOY?5h%qp6Hk}E#f0m{0Y z=e&0Ve5rmCWRfd9x2ss${M~iy)u*Z3)54_fSERZJ`i4z&FyF<*U7CU^6u`ocRm4TG z&(Go+C0}2W(g1knGJHjsjcF|B*Scplh*}g4b5RE9o;oh`BFc-HTmDU#R;sVQhOJVT z{j`RgT78{>Rs@cH50uEhth=C{@DMAuD1-U>j&ONTU?5}J1y?+6xZU; zF78sa=)x)P?pBIB6nA%bx8m-0cl-O_bIyI9bH5B(Yu?Ocl8Nj^GI`WjUZSDu;!FO@ zba*aEzM#YVdFo?A0V+7G^H&9y_t=;!Uv=J}013#8EC)5QWhMgs4*j*&#~m{DiBz!a z)phh-m8myXRkN0J4J0}>y>{IKqp71NMkTY>j08GJ-K`T$+M2c}Q(=3F+aFuqY#Qyz z$0N3=#_ujj`2d?9hkfxsWd_4JN%{}h~(gf~iZhj9~n0chBge`;SEGKIZW$5twWQWTn ziEc~J_53X2{a+(G+jhA(1^ z!)C*FesHZhmJbXVIb5m?)79N&e+n1vhA|eO@lotp@O8iYPp)+>FN0U-!1)D!;thUV zKWXsM#Nt-NW{9ceB;^G2IgE}{?TCH`*?_)<#ehEF=b-+f*ITXnE0g-&IabL6jd-2C zU)Mnn!-Q&!uv7*y7_q-oum$`Y5(H zc#;c!2pu6y=o!$MV+ey|ixFMVR$T&LwmIv9QRFu3^~e znGsP`fecKyAv5z$x6XNoseKIk3RnrS2~G$7eVKWo<>Z6FvkZuiA@F#SnFXe|(c)0+ML=`{-T4aSxP3nQzPtM~Fb8OobHsR|fXtJb*OglZW)%4g72s`0{ z=@2|dYD~2YfJjYDm}S&S3j0iWU@8QMQO-}{QO#d8U)ZoM5oW^0$Ge;?%%*M)>Lr0G z1QsK*pQ0mes48TppdUr3HB3FKKNfL_WXZ&ZVD69l#*I9GB5^#0-m2ED(k;Dr5^sjo zn~o;DgFQuoJxYMx!!9uFU{B{S0-SR@6L5aMGBtJP+o+Pr`58$0a>8<5d&EEpA+(MDPAV5``y+Xnh7;p&b_z2d*zVAS= z;DE8z?OxSI9LJ?*zZ(Y+qgFj;4KHeyA5}8dhdeFA9jh`m+n7rEDHP%sYfSlYZmP8R z8!!6}&x^iWtu}I6sp&dJXs#w+0>q%kx-4zx*uBBS6I5O%;5pGOWSCLb#whs zyxr=6Cr{Z$z^Hrq5{A-4`>Pm9RsX_UxY|J#Y_-CXyY@m#)>+WnSg9up&pclD(e&u} zU8B%ye@a;Y^i!l4sIG9F+wt}_oOPMlNYUtfLBFTO(Y59{?$Pyvt3_szm&tf(URKHD zh^g7ixf$}->iaQq>q#Kl#fy+*Ze^8#H5_0}MmX)R|E^3NI}wP8cvCzrXGfXT9x;jg?_LJCiKV6$E- zXI`Q+CU0ea)v;!@!X0^!aLO;=6`byuW)2Hz>zR=)zq&f7>7GueOAg#l|L$}Jo8_6& z@5og8GN3&}0z7X=2|e$&d%rCUWxYK&yglrcd#Dh4y)Fa=x8i2+ zb!Sc9vEoDomNRNc%%PSg%u#C_Y`);%Jj(Ea@-jD^uyDEcHqtkod>#GRpvK_Gm?sg! zfL{%j`%pOyBgEX10CDH3C4{- zuK5Q!y0Y-5d;C!6zN6OOTxkZgaMH(tlkjn*CzA<0^JZ9^j$??Q?`sf~VMfTl;xh;P zSacAA_mUajGguC5o{imA=I}tt`|qK$KPVl2p4cH;49*@jD#7NC(j&RTcYgb8r74Sz z^rs-$eN1jT?!r`F?!peOPM+R4H3ODy?AsJ@brEy^_YQgtVT{I}mm3hDK^~(aW(e-p zo&VLZvGjmn=kExgjyy&MW+owgNSEDkvS++7=b=|`4)ik3a&8Mo`j6Lvw}JT$nmefj z4|ZRA?`lrwNZ{}x!KF=tXzU&NA)L0_OoTd?W}#XO+tvmlHMW+VwjFKYqFKh70TT@B zQLV2EsYPHp1mFT$Sk$(`ej#d6S?L|YiFufWb|`Ex%#C!R}k*TZ52}ln$1I zPk*SES$7Y%v-@-dldIJq%pgiv+c@4RJxuGQxqMtQxEMSFu$*t>RzW|ekmWZ&%>17O zhn^IU%?+JVrDhuQa3f+I9Zi=^?xXP zW|D>bhK{oZuzb023u1<$r5=S7!HARCB}rzdC|CA0rt@q=Ex70Zj0=gCWd>)Iy><1$ z;Df4MDjF@bebD!6W(x`3-Ng~H15YxU3pWW2?hCib&zTK=HSp;`GCOTvcRt>bYDYfa zNmGv*wah%C5?EI}pU?jgvC9B-97IAgV)8KY;Qrs#3v_7tOvc=_{9@SQa40cQd7VZ( zOd^!ue>`JB6O((1`}F^AZDxCU5%tb%`)u6);|%v z^Fvb}K}u(ggHNGNApvp0ytYica*FHggTD@_!5_MvFpB84o3s>AXja9rLt|~p;l-u6 znk`D?B-^7WfBm6$&=hmRprOZank6JbZwi5mn=eOAh5Ms!cWe4H3p8LhE-h1lDAPphQZdXuFojmlG&{n(>+P-l0<;Gq(-CdU$H;fk>( zPflA8ZfvMz^wgBMN8Wk%J-B1|!aOu|4rDXQiAFIIQ%|g7U(P|g+lMLT_ zHw<_#SX|Up*)TRUl=sE3DDtjcOw&~9Fm*K4v&3izK7xmIiBXvTRInIAD}?mpFQqj0 z)#6n@I|hk+Q@17!;|$9j5SvZxE;#iA{to@s(^ZKb(wy0t*g9BN@ae~DrBsO!Y2YyP zY4-vTrB@u5ocwd>+=~~QvKz+3h77(}$68`Ew8tVP2p&`JNX=%swe6?{X8RN}Xa*?u z#Xz5^#y7>WJ@I(*)4|2oAId%GLd!Tx$4xyR)H3~H>&G?F=)K@~9;8Zg^cU~J^8ze* zULXWd7@i+A7dRmCQa%wei5)-{zT@n)D8@>smCXRp8IFD`CRG^NH>tkHD7WB2_al2r zHcyTg^eFr&t+|4^x`?A_O=z&0?-ngEZb~f!iq`Kah1i4mc?pBfoWND-Q-nSXEthad z|7E4%en{-VolFLYJ%LwuLe|JND)#hY74iWk8XGzZJ_TM;bOJR00BCdXPv<|NCHbq|BY<@GYLFgHio_W{>pfMZ8Y#V6U-s?XD**>0YxmE@W9o~bTgih05D;$van;XL_+Pz`uIc!34IgGsf|hDh z2?3?J?PLLJYn0p5LVG#Fn*M-~TihJf#SnyrePWhp+#GXfN@kUyczUo9XDklx=D$8m zWS@?Yq4qvf#fZEPERCSy8R-5i%OF(6ngz>hgc#%0$LKcM9`>&gHJ|O7WT_LP!oEI+ zxAUE(VbIJDw|*47W5yDjhk%OV&NlKPG| z=I5s;2Ty#R8*q05?!!_E|9|Bf|CM+2vqzw0@B)W}Cvx_0nMyNhN5Jxmx(KtKtPvVk zFD#0|W@P=uZkNc|A^BUoRqn-~lE64^C_n*>wj?6V`x)v0)Bmd|H@%a^(z0=oZQRn~ zSzJDH`$pBkgIiw_s~$GcUBxV>Oo&2Gd(lO@#skqH9sQ{tv!z&J^nCmeg`9GDsRe7y9|~kGMJO4ft}4qs71eyP zfQCkMd*d&p3{fW)eBQvlpR7&@gYpJ{FhkRtCTO6zI5Hg9#585~wN769a;cpVL`Ktl zhr>fBXlgm3b5x{k4n+#TEX_EKl}y+UmK3kAtIqf-{m zS`87XhCmg`N7%NC`l>H{HsD{L5>j#qafapSNt1f0^hp0Z&IdaycT$ce_|#OO?r=E+ z4^qZ@#V;}sVHLM~H251FQW!ZU6k$UjF}Cc@x2hy7r)mWmxT44Mlb%}{LcS=96YyS; z{MDnw?ybDl`PvkclWNY(JdmumcX&x%Lc8siWsQgT;H)ayFAbkqkjo9{e$@S?`K-sQ zPHlyN&cWTRo-*gF;|d*>dpppFyJ$r+k187?Sh0zO?l9_6{yat36j-XK(j-BW)5k7O zcMh z4U9+U<1I{SbT?_6G|e@;i%dF1e}3}==%A}hvZCSmVey*XqNKFKpVL6O^SbLb%Zqkv zPJ(k8yxo8oL!h@v2W^FP`;wOq=O>YYRh(B2+{Oa4;7N^2UX>bV{^Z$XDf$7c#5pmx z&W#9?(tB0&QdiH%5tlkWkvP+4{MH*}w!D;Vh|i*V4Ymin*qJE(h_4*(1W2j9Kj643 zju}$nvqae<)`Gg}uv>vqf>f>UuQFAnf-O+{I@g>GG&YHOHuBF_*D&&1Z0>OeMfu`( z^@?$+O)ZqDBB#}(UAKE4=d zB`0srJv|QB8Mp#|Ip7HM9lf2zU*({Yk$ockF}^CECy@a6(?Y<@KG3)%c9}#X^ybN~ zK5@SxK-V!S0{My1$!DGW+k18d-WEH%zM){LHoPM)-o0Zt$bm)2%6V=NP)VURVerE{0$c>#1s858LK0_kV_YqkiHr(iw*2J!7btR9&TwBrO z)BMh-fer7&4MlE%=o#LuEl&&2Ztn4KQI|c5BF~&f!K-a_3e~1uA)YGIJL)$}n zG0-S9F!bP02jklN4j3vU+E8q)gM6lGaLHEms&ny5{*wlNT;!Vb6WXS5@cADC>E$Ez z)E8#oJ{ZOYPO>rh@}2Wi>kJYE>rJa^33c#o!~o`JpcBw;A$|@+uW$Q$~gv;&BKkeH1Hvc*H?8sZfW8d0XHYG zn@IjBi&LrXSigsX0{p?Qvd+b^>G#yX{KX}fzx;0Jo3BtJvW|MOQ~yXcjC=iX8#zTx zXLJhOi6pw)F!uaB)X*9$0?@2vg_2mMLl@4#8gS&#CV?{AoNgdg?;U^v+to z1e!&3m~_t4sH|>FPN8aP{h{UTYtZASGDSV1^Bo%yCgB!ECH{tAG=Pu2#X>onH?DH< zvfFy+);|RfSUXOZeLpmhYv1R& zRIeIj(yEm|*j8rE*EN7_#>o(a1B-<0X;c`CwnLO= z_+%`>vSE1Q$}D!Z{6ZCYXq4=J zcUd$`;$2QyUfTlmufY7BwhHb%Dz1`VJcdRUhA|jVPU^eK@=2kziN(^H&&k9^LChSn zAi&_6y0z=KjEi*QeAPsmQ7bGoS5BTZ7X(ky6~v&h0_O~*2&qPpRQYs12YqiCl7gz* zk=*PH$9vzINoIPYFle`cie5i{(=QZ_UrA<{jN!B~g7P89MZ9$qo^(2=l?3PuWV)Vu z`lU#)5#yBMlt73qK>>p&->WAZ@L`oDy8%lhU+4%Kke2zc>x94{8DVe&Dn5UL2;Tf^ z`?9X!DVi5w-2#(G_D_ODSzokj79qs7Ox^&zFsR^_(SNd}|A@p(Hm^_iPe+GFbymo? z3gdQkBhf*9Dwy)v(XJR@wLyu^fsW!A_J+RspGqAxg%FKe z?Q$q9!$1v7%X7Fd3duKHQLGLV z%)d6?)-9&voGNJIolPz{pmqk>6=W5aF(b82Y?ZN)83YFV?kA?=7HkwXdUW(B_@Q5w zoiX^d8!}z)d;`Aa_gIIMQ%Q6;%E*x^+{El4ohjee|`FGez@ zp&{7EP#74y@HC}aT+L{m;a-bK)!Boq0{@TXz#+=xD&^If;H%(tR{js*Dy36~AV6hc zG}i~U=^9f}W*%JdwbCDow-69RKNKB)YFz~E$bnJDj?RK?$ulS5q{|L+s;!~qw&mk` zJ_J16D`kmk zhsgn*v-MHCFt7!1TJ4G4Q+r*Nnqs$t{T-8Uu?68RoFRg2&ipC1NdbF6OR1Sik@#PA z62-olC%N#vJ7NF2MZ=@j$6CH4W6!Wf$&~cOaxAr6KhI=$+G6-x6(;eSJH?gZ z4mg8K#_`R47OIKGX$zB0OYG*xT#}Y`R+L^b+9&vp4-9on91dqXnW`pJZP|U_O4|P! zF>5(5HAkj-!aLZRuih*X8BtKZFA)prMoqj(g6W0NueMRm;EKwpts(n`VmWXNWd;w5 zKnlR7P&}q63gzDn%creWc;P;)w~6Cgz7A10o|efX6;5>U@_VN>R5zqp-&%Mwm~*F; zJ5G2vt?qAo$98>!DihOMeMkHlfE;UmfWbR}Rw0<a;+-SV1@Un zUTX>Mt3b>{v;P$4hP zN$n*KIBbAuwJZG1PX5hy=$C)3IhXfGFtC*R(XfLEZV(GeviLZA#Xf&1auA#xCwp)W zDywJ_IW$h*u)lo zIEDx_p4q)+A0*?A#haE;ST%=BbKEP{41p+>3nU(H1k{yL7@JncplzZ+Q^&@r^>`*(`(}Cc$z{BVjDM5Im zCxNm5WGsrm^_QEt#Lhks!GkK6sG!l?#RB~gvf40tR3HdEJ%~%ZXe0?);w}20UV;Ht zoiLtlYgJWa|1&b5d0Vq;Urt8JOUSm}S4k(xX;bG3tphE|6W&ub4v~b_;$l@?-LcpP zMjx~8l9|u;(UuJ3SfeJeDTKy5v9|@sJLlYP(BG^@CDUlf&6vW=II$O=3`-)QZ<~IX z+t>6nJ1;glE8lDCHCT@4^`Dh4Up~k3EomeTEo?_Noe@6D!E_2L|Cj}bXx7ieXY^se z#h$g7EC2+Ul-g@5oK|=AkJ;GeP8{#AO(!74Ovw*PZj-w*MT2yqDhs1|5-kc2saQDrqP=#uoU>d+?bV=Y5IH*40PiS0+V8>Q@)&%6h0P#aX1E`22-o z7S+mSHzNcNN_39PNL&+0Y`7Y65TPYjN)@5Sqycu}89`Wf+}d|BGl00F&Xxe@j)dD-bXtXQ9c+Kj(Rq;q8_vDYlpGiM~=ocFKWY00xqa?g~e?o)?_+SNMRzCz5$BAhX=+AD5z72Q-I~M zkQbX>#{f2!B?D@6W9Tc|mqCaPaX)}wA@vjnU(%RvZepBnX44>8`CjBl~7g5C@ zyjy%Vv~87{f~XkA%tcPl!V_yXlfhq*)-xvk9#ngve;4<}thlOp zn%DoQN)3wY&Xf`xWAB83jP9+JtT#F~`jLudhcZ7=>Vq_VSdW@v#CDd7J0`HUqaS{p zElZ1aA?0jWcX??Sfn=#f8ygyd8e1{HW(%Uut&va(o`zl6%Vid% zEmaHmf<SFTguMFq4q&P`Tc7{kI1M{G9`Q{wi|yiSE>) zwlWQhgp`8!5s})IWjO>ncu1zXT6Rd)Z0Pj#@$tQaU=Ctv-IsiL!FPm$$Q{G9m`mu1 zqAc|Bsjoj|P3K5z?dcyW7+Q^AVv=zA4l1g9(sN&nWlOP;+(HDhMRf9QUn$$0Zi^YD z9xL)0c2Mf3Zg3a?8YdfB3uzj)mxLr$O^=*va1{FCil&_}6NpSH_=j~=IJB%V&Put-)x1|<}!$C{i*LzCDC_K>(IPjg2)!|K`G}>vqUYQxE zqSp(W27NmaC>b;K{t%;-ykmyEr2RD{hdLgCGDqzhQ_k>@IdyiA*!|*;8I4E~x}K5o z9I@pWxwK;4ZFK36e$VlfJ-BLhL*}Z!?M}o+ohfP(vhT0*hs+O*EfXe{JFTOISiY%r z_aw1|ohlEp0@~ESx>>cy&S{3t8?jZRCocyPsyGtAe9@5T&X3Dt)#j0>!P7hDxgpJi z|7}SyY+fKzL!CDpU1u9N2}R#4wbYloA>GLmYEj(8EvSyXq!l-5>F;V>ERLKkwUs*% z@UUvku245@E-$g2s}j}}-bXm&r6;kiURT~hq~r6k83>;%HC`}6qr@ZRs|bpU)?)kO&8y-e8V zY5PnC19*QKKkB<^AC_4lJ#MQk`LdV(F`RsuwNXz?xcd(xML>R6JMcIR*n#TpAnP)I z0&mw1?Ow(KwTO4GAutl zVb1{H;hq`=0_U%Tzvm!nhx+en6eI|LYUgHZ1DvOhmCAQiAkjm3kM=XYZ{OQa@&R34 z$aYjb41er=5s({EYt8t{=E!z_g*4Pr@pNypG4J)vdVVD6jd$-1JQ)9OPYMC*BCDnx zEa^9nAg$hm?ly;gDxS_wI_ACZtGhJ(+uadb#@UR9{ihvFt>JMOBrC+=ysi;M{^V(( z2MD@Teg4CgsZ3gmVfD}GmC!Y>dxXz_x;5|v1U;e8#Yx%_?w|GPR!Gb+v}Rqv#VzY# zdSq*aX#dlk3(?N~1^-?gSjWP;pX|W07wQdZEN+-~vSd7`0GiY{BwwA%I-;HrhC0R@ z5`9S?R8ls*Q{{ILqa`!rBw@UFw);DxJfCsFdC51D{wAn^hOfVcMt`&N?ZoWw#Q1_P zFO2?jY7K~?V36*qNZMhZW7|FPSF%i-!I-MiK_f`-L7>0lef!S#ybp*t8S%L~3IyrB z2ogj(9cL?FA-r7J+o^ire!M;Jn^oZm>%G`t0r~FDi4?0C803%b2H z>ZrKCcizx|X?y40`xhtzx3c-lx;?bIsp2I=jMn@xLGCo1;E9)g;}3)2GiR2M`Od}w z0Ku6LLoMA97a*A>!n`{o!NPo3+K!_1uJV=gBc=G^fc(3;aWd3c@;U{dz%_;Gl*WPL z4-yjU1&{CuqW{rK&Wf*L)a@QV5Nkl5@V*=yF)=LL{;eP$9yr%D=q{uO*=RK^Un+K zpM5f-Rf@offujEq#Uz#8SZwd0zrJGo`ApDTsu&D1`aI~b0waxf+wCT*9FW)U8I8Fq#b!0H z3k$Ut#rmKmwB8u#B0Xz>;8{L0@F zEOI*BKsA_uj>k<*y|*2a+*oZPY6xBn>o(5;%#0J#iNQ1w`bAAC&Mj{%Ik1=jxG50F zs2T`;`bep^fHDLxjdknqAgT~hgF@m!&JWiTjj@T>`8Ak-EQtYJ4gEU-=?G6OJY{x7&nU?1Kv<%LdBR3>0JoR%w?{}x<8g+N$e zfXjgvtR_aqKnO)4Rhu-+$p6z*4Lm>3)p6~K)fRW*;Mc*$D0Y$98lVm_GW~@c4U^}| zfE?H1Hct$7XC%&OZnNLf{ew&T3o6DA_mdLo?{ByM!kPz6-g&c(e&k=>~Hty>B#;_`=<~vtm!YmP!jK# z8GqT|Zi_H)9tZoAb~P#v_;>s7v*XfpKUGmm*7xtoc$nhgsdST8NFwqAauKW zNZDOb zFxao5>vagbg^^JEUSJE!Kx{J93~L6TjU6z~wJ0hIyM&Q=`5s{l-9yYWykapV+g?z7 zL|qld;H+IU*=NV0Z@7=alCr&kq_bby0*(4@VGGehbTfE=3COUQcp&uV(@Xr?5UBfG z*cN;l1EQ_YGlABZ6Uq#G#7fN!tXS!2Bsg7EzgBNP<<=cKb(ArFa_FQvNwa(f%<8U++&tM zL9$ZiR1i`oYs7?_1{u)OX@4H_S3P5sR z<9Zw@Cf?ZIOWz{kgM;~^(^lCq_9N*3frQEVzt^)lCoG9Q%|2>m52 zmibFGo*(UVynxa)p|25l=f@YLqb&qJo7)^`s9=}zCMV*lN$M=IvG=6pPJfQyTFvP$ z_e=!t?$8(nikd9JsGHIecf>PK{3&Ujn`!VxzS7z^F1Bj?XhqJEz-poVFCclD`#TCMB|>80m;B@>H*_JQc9L5r z!1^`svL(?D0O{WaH`F{|4o+t1QZ98~ZQG@piO|F!s`;)z@@Aix+NXLOx2n25eEV|Z zu7l*Y@VxYv^HW7P&1I#f)duTWA=3WI=x*OTxIXFRQh{D@)mtO$OI=q(zXsmT1$?2> zTgO`1T1ilO)q2CYU0V0Pc?7o3IIT>XR}UoP&OAM;lD4(?ml-!87Ob{Rc0hw6*$4leeOrni?RxPth^ z_22FRm+*_L>AicGg<;Pjo+%l3En)JVgmbr&^L@D^7dzHFS4p_DB_bEab>hUPHlKRS zwZo>{Upw_wd+7s__AVY{NztNE)rbN`EV<|f$?^~LRu9esL?#kM?XTSYZ7ux7?6^Lu%5?^!Wbh{>kZ+{tOzgcOvoFk?HZ~cveG6*6d&Js3y?1`24PHsR|Lnw=)N=NE zql^Bae4}e@I=guE)E(8odaHPyYp$zJST9uHT%o9QF}Qp?FX2`F+V_w<-SjB)qLFes zWL^$}$v~haWyH~UVuas_s-FuHf>r@wn$&ExL>DdPbz$1o2>t}0sXq0>?^i<*nMV&yc^!x>9OT4n#OM)(U4%a-jouQD$Oqy-1US4WkQh>Le2#b#EuVq6P z#(9Eop*V?7w6aZPDQnklnwAmqr6{ggurh~KbV|$%htAAsi#aoP@ir-s5yy{nR-jx< z&!YKOv7@tOJNy;e$QffNgN<3>NH^E^XSV*fa&@$sz(Ba`&73;2osKL~jCnq#(25%2 zry|$%`05k&m&D`L2_4O$GgakwlV*;CGCDoSxqVjWo`?4r+VU&a`gD;q;46afems_G ze-h6-l8twi7G}uH*H4|gapFrVq8M90=aZ=qZVrW{x(SUbU)ReTp0S$;qHM=a4jYc< z!@%Y*-_TV$f{T0dJUgtw3mjCdVHV8U?F7D=5L@H>)wvptT(L-SU&!iui-P} zKl>|Zr2b@p0?#~uDMgQucP+AiGkxZXT_c9QcOJ4bJA#qfs4%&fmJB0PS+DPqJ~P)6&WJlaHZu-r(9I%XAf2x9ht=AwI2j(AuQf&Fbz$mtdz|jgY7_xl57RZa(L&L{vXy-gjaH`Kr7Qxh(h$soCXIf{v7W%E>RucA?E7q7|LD$@*Ag^^kF#FONQ zWEu)+U9iO%3Z)qyh+A@pHmTPaPwA9!?ZymK49@N>+me#MA5D+={ys662R@;o2HxiU zSlTir5vo0f6e_AFzZ5yXIcC}gTBjWl6t>x!7_XJE(O?_lyWYehNhIPw zf%eZqkNF9Y$Y{io7KDF=FIf z#GO*eNZ*frk&tRFV|ef3IdksZ4|Cs#{&osWnGDn4LTg-9tS#8%spyM5$(vmDHk(|W zK%X(UVJ+IK(}>$IiWSpejG0ta1ZNu@%GDRh#M}9prF)0RsID9ZUeza@M0!cO}69(CPUuY7MSYV^5?$tf59FzHbRhl0DJ{r4L;F8r70 z-)GE8VN0SVAbA$B$|r>*T{1qkk4-|9KMS@mizKX@;WLw)+y5=xL92Xix2pm}&BuCG zt1}r0OT57NjeS=(ZFp}5lXu+fk^P+f#2m!YjN!5PC_BdE_7SiStTA-@#!@LM^fKor zsXC4uKRCJFz>eGU9L4oYQu@Wk``-a4PCrySWHy%nb$1UtGh5PR4miL|gpO>~HYa-9 zc*O*ZS90XN>3b0$Yiy6juPBX-*g?}}2P}OycSENsa^5fM2``JeQi~pVs!5-`QIu(8 zFQMjD=3P7Src-b!D>EF`A?DqtI$T+zp>l@jq*3{Xr2S^_Fj~YK*~ZKjXYfe6gEy?l zy|f!G8}H&H#Om303W)9iV~Jtbm!uHNHN3 zul^sgjzJ+F7X8%$e=KqpbejC-K+^mPyi*GMbH#}Rj!MM|@GFexV;`JXk{l|? z?;!TMJLW|B#}wmlMk?oYG7NFNfQ~$anRe9X;{-=3J>)}?0lmmVmzmx84@Nz0M$87N z@<}v^_^yfq7CXGvtrBe%ct(+;l55gTF~R(w+LL)hm6*SO|77A(9l$EyC&j<#Ww(>q z<3AR&((RJAMq9PR4Pe3{3k2))N%?jQcQJ?~FCxObx!-7AV2oE}#=oOu{u$-hhaS$d z1Ub%VL_cVLx!(7k0(Ef^N)4Icr%#Njnl&#af6P>ZO{?rHfJBf@mZ$alSyZBC&P2i} zEgUO~$C!OCk1TI78&V|PG!Eh_o}Kf^m{g)>N1UL+@be763~ZtWY5KORg2~S$_2Uk9Gj^P?^xgFHl)dzw z@V(co&Hi=H3LwoW1hBc!LJ@jfA(hr|+DIC%UCwSqr|(aQ8;|$&<%J>tIPaerTZ(F=7*RYA|K(3##D6&imtD7bCM| zXtd$RGfFl3K%T^r6qde#8*USK{L-Dj2_awaFSnVB2F&|0{2=%iK_?c2G4IDEK4wu) zYS9DdUDhC-8Z6yR6)EEJsc+<$O_iAP@(|D0o_ftC)1LZ2p%DMHfni}u>qijS zHB7&BRm4BP!?-;(y0lY0`Goj^g%-y@x%ZcDX=62RLYRgQc3yRs%s{R{aJ}n;vVG$s zL~H&Xj$Wuz9bS>?a;>}CDnIf zN~$eO#?Zq>MH$sT9L7tC?>pPrb+SK7D6!}mmkk#kuvKmr99}EFHfu`SQDPLTa)EaB zR$U?(p~H3RENotlp;D2vt~FG{D?V7*d}58IB~Gpw8o@$*7IHS5GN!IHSH*a`1e~Is zsi1vM`?oEdc?eMqHM>xw(&lgOy>6NW34@i?UvMkFz10hS7%%Dm*6N`jHSVb+XBP41 zMRK2cb9Kc{Sj%_z6DR1~N))V@-5k?CTSc{nI6zq6{PK<4GhZ@}*m*P@Yxj7nUuX@4 z>@HAOA>^fhrXQpdw_tl|((qP44ZyUme&zC<9?o&r(m0zNO;ATKUOxTBiDSXZ^{sHq z+LEhLs>bFt+SKUj(%`#030MEwlIh;qVan6m>HK(;qD%vlPio(4m|!Vq^Y-ugHM3(k zY9XZN?rZ{bzUJF{JrbdlehrSkk$|#D>m{7l9VU0=r;~Yu_(sO4;MU{C9bo9`o}D@U zM{H4McdSBX*=g~Ompei$OH}Y3mm9r_(7O&rMHvRe>a)zO`_ArIt6yg+?%re4x~cP?{bf#JCd=H!LEDx>f+*Xj zcU{+&?SiGC_4@8Zi}t5lH^7Y~Ay2i8jVMz#){Xsgpod#g+pT*fPS;BTt2~?0GgJa= z_eh*kJ!Z(Z47KCwA=MZ{lUgrMj@U~DtBfb`fzsYW(1)ey3%SnV^PJpFdwp?`gTGA40~6ujc{}^u)IFrG zN^hCt;_B4zUeLdpr~tM4l$keG7XoT<5C)I53?EhcR4sVYS?gtnl}4VCqHo@x_c2Wh zeWP7oM<*>*yTU;z+)cN8mDsE$yh%|l*sUE`6%1QyQ!eTMzP7SKLSlMicRmj(400

0R3IO&is;g2@%`|}23O?km5jY!SJgUpCMq69smnL>2F{1NrG9HK z(>VGk`t>lJbJdCW@m%wwYxM-!twP?_B!Y#i>Ld*)x9y0kbJ+|4(gi0TyM~ z^@}SY-Q6jjLw5?&ASK-`og;PAT@nrmBBKJ*qLfOXHFR?ZpLn0=JR=J zxBm&HG8w~*@UsJ7_Frhu+NnMqt`#`Z>`K!7_Ii1M?CBA^q@NsPQ{~DK7t!K<2Hcjm zjBS~jfp7AP-;X3_$F>x#Y%s&2@CSteW<`wT9ceP8F z3(Nf&1E3CuuafPRSnxoB&ERh1C-SV43KLo@?;t`3Po~>H4ye)E$kVzRab$ z>FrULsl={pR7mP>yYfn>|D0LKmM@53G|EiR*e&29&E=IkGyPcupzH^Vb-^wFO#d;w ze88*dUH-@lJ0n&A;joQ|q!2b=^!n=sNLkqe;A4969>SKjx!yD;^@HeVQbW=WiKx?Y;^Jja3hzBVM=K+PyD0iZ-iMkn6(87 z+}(jFcos$Qwb?4g#o%I55N?I+ltTuxhn?P?*IO~sqAx4W#k66C6UoRWe$o0~wi(ZP z0xTe=gd)DYFjrfAc;LxjCQl%Wy+cgQ%-jLLp$2`zxKeaLu-|=H>}_`$6P(4QQ!|Q| zgTaNPPipISSO`ztDoSxc3{l94X;R^ zu7}#e+qD2b8)xa=*vLWsTquu zl6!1`u?{niE1E0%)m}x%*vXBFXA^N+#i{yHwBJOAm5}V2=m{Nc*x01eVPs!`)%51U zle_Mb%IQ&sdr>J06ZSYAW%6p=H}*HGv>(w^8Wm&u4d3NpWFnI6$5tFXlu*(bVMs3A zOi{roe!fiVE?|bO^7XdS5bUv2dZzmqSn=~!(&TIA$?Y7yiV-oF8+)LJU2u#5B+@nIdHnpJsqvIcs>b7&@Us6 z6Va*DcQqH5we2I_S>yUbxRtqvV;8k=zR`C?-pY@e+T&Wy@G9kYVbVb-tI&Ur)RLI> z@Ae`$OO_~mp#6J|-h-CpZpx2fYou5^bjFWYm-!5^r#b@D@&jtd zpb8Uig!pJF9V|OXfRB~yJZwE~#Ol^Q4T&R0v7_S0ywGOQM02B>Sf(TMTG;T%o7gnO z!fS*Tn{>s)qP8qUicjK1@tXKwnFSM#i(yWv*&xgl-x9m9Y+3q9-H^~a@^NtRvG8N) zkxKL@UYY-ZE=IN0(fFmYM_S!KbD4RlGlE>Y9=C^=Tce5pB2XR&P z6x5HJ^LOoGyMv}<2>7R`^YlnikC0PMOnEIAWg&dz5YK9qE^ zC$e1^YQ1^2qte_GH!~}Nr(APS zg&vg7K)RGpljl`Ipo$+bBQyh2ZOYcIX_|ItOoB_V`a#DyH9LQ)`*Fi1?)oEukA z$J_CaU4Roa*BxnLAz>k*KPw^dER=aKfh(xy=I0;4EGG7^Zv%lOKoHO=4mXgSuj5T8 zMH;_-Ng=yM&ni}#%tU~Ji7C=FG|YF15XHvlbOWb7V(;c>at1E4_!VYN9nJH#^xXsZ zs+-<-C9q@d#n4#_2@Z!=MoB+1LicwcxZi1J+LkQPvsC%R{!px6AZ_6O3%Z0l3}H!y zM629>2!+_h11C=$bGAThgdgxs%KM!FN9T!TEUoH_;k$QtKAyBBY6V5$5AeLmX8C#+ z;InwwM)Zr!=#m))r}3LRy^3&lVa|I$LudApsSavdqGO!OHoa` z{Ip`+Qd?8?<+A;{sH>P)i6)3|4ztYd2GRvR$71C9Pm>*|2SQn)U5c<9|u?By%zudPJACDFney@Y{ITX@4CGF^yuaD zDr|EE99CrCqkmmctSWnJL;4X4hx^1TIH;1u!+{q_1 zTWV<3SRowa2;g(Zce*YWg&I74#+^Pj)Z*6CS(2Yng|>W8-5g<#FuECDnJ*#Vn8jA4 zCYuJP<=($$ujCwz<=b!0njm`(X5?(p^q4U;Uyn-%UcBY!v?#N1!sesGA??&E0eZ93 zjvizM&C0&3udEmEMW71Z%{B06q?^uL9@k1*<+}%835_YkaEvL1$y$qP?JJ-7SMo@b z72*uXD&ysU1S^SUq`B92B!hbM?6tYyW#z>O-gBcZx5Se(PUVJ?I}{r!mglt>(|(`e zdADb-R2OLvDvUC`S!Pf5M8oe4Fb_3>)+svRP@|Wl8L(TfmZXmr-HYVAVTRUNT%l-; zLnXa7z0zD~Lc)r7=W!zED;|C0MRU3|&MdjqaSL-FRVkH3 zYSO6KIJmX2^T~wXjj6g>nd(SDPa(NJ|AE%24EXBm$#vUUy&{GLBU(N4lyu=BFz5cn zXuqu9=UFmlqVq2nHf-%}>3)D#_P0&&`gKBQ8{+SxZLQVTlN*7jr$Kg4n#K(6A+@1r-Nm~N_THQLz6ca#iq%KQM!!04#bdwPu&iHVK(D_!H0tblB%F7hD zh;{PGD0sMyJ_qTZBllL^io7GFH!_@p+fIBGm{!Pkg4kQ;=5n93?QQz%EIjEFb22yT zf0?QAVQg^%&819CL45`IQtN}N5*FeKGdO-(iS9rlDWgs96MzZCdEw6FJi6DJ8_jFQ zKvUWAZFRf4Pw7?=?nX}ey-rB9pw&~_%8qvq=0d!j(uJ5z2|E5^J;830{1q7IxX4DPPv%SMrkFW=(a&+fq4_AB!LgD z;masx^tdu6#|cNn<8-D0{7hPAu~K#PG)!90z+?}A@8{))o$c3-3Xl@*OHp;VN;1c@ zw|x?&CNXa@UD8fQZOb}!KS(MBm5vWvcA^ zi3|#E{_y>>wPoO&nY<_d{VAJgcx6XrTF8Jk$W(%x{DqFK{D~#g$<)F?{l$^2@0lO6 zd$Y_Ts`mTg?>iO617^OrL%q zZf9tJj{bC2IoS2*spA9hImqHH<89@sSv;hNAf=s>>r@k`mqp@j1Jmdd)A%LRs9e*y zuck2#iA~;e;Y0jKZ>4%(9PQ zy2om|J6yKIa|7Qqp`CJjn?G1=HbZVQVLbRjdu~VAMyC>eH@ju0*mUm;%D2^hB@VB# z(ADj@P3*E7RhA&&LJ#=4Pg=((_wMlH?aeXL8Mza+ce~i|}OMwnYOXKZ@XUIS|?+8R>j6eGP2+s%0zu+|)malNV+$E8x z?$d4pS+$=L0it1^4j|dvX@Qa{dqS_G9ia23T#}Ty>2be7;4k>Ugu4Rj^~Gmhx{~s^ z=^4?87xTwlDEOVk6CGcV@xZK!fZZa7zzI)Xm)j(Ixz0di0QAqb4&qzo2gZZ@wU##a}XMd?sX1 zDU8{i`zRxz7%#zx)Ww(azAxFpdtiU|0z=CiMWVL`8AHv*Ej0xCt)rU`*wu}*JD=b+E^g3^J-NRoHHJ5N$ zm`1DWRHN@=knIs^QLaR)9)-N7sJ3W#eM3-VHn(8T1&GaI9E~$)OS%eTulK@Y}@-1bnclwU7zWXJW%^iS| zh>fjOh&LM(meSlE8B}x~2$!~&^zx4!lI(D%w-rf$kv~4d-hP}9Cb|19^@RuQp7>j| z0p%$w-M-cVmhJr9YEPTQDf$SJ^bDE=Sn3OV*i8_^H1E;*;5htnU<}zsm`KytmC7=* zf$MoSMg(K{jqbLE*$E+p@&I4zK}mdPdQ1_*7@CC6)Nb2ljN1w#7=?_3koA%6O;D|>YC0DjmW#x~2mHl*&Y79#Sw;L&XAzVk~7w$^+s z_}m~{-bw1SWoP^dSVn+IsRClI{jf#BkVK(}92hh|lmJJQ?VooPJ2 zQ9-+})->T@GV(ajtIK)Lk7RL(x`)z3wWVTnGV1AM+{|POVv_0m<$lJZgmk2eWGb6v zGD{)0Cop%qBT%@{kKmV#F@#n(%4|ud`6ntwS$7Z=dRqN(L8uBW3fnUyN1M|vnllQZ z)kqO!SCenw(&CLRsq;mLQ*t6@^>fXZX%$%*89sudC@%BVw58v_r9(?$9ri5VCgJt+ zUBoPEy1|*BsuGIA~v=FK%LAJlXL#z(%rZCzDSxFb@TWu_20qUkiAimLuV zy*28AYmgt<Y8;^{HN2vhFqfa z;mrUcI-5_4cBs|{`Qeymzp1Z7&mC-w$8eqtd5CD}w3U&bce(6rBu;|Z*i^?B+a4le-IMaH(`qtJZZai& zG6Q|*)OClL5P_Y(NS%(r(6z@d^PzQ_&;48sF^;hoAh7OG1uVOqEIW-Yy92=l;$X5S zVy0mkmelhB@Xzf<#x1tX*f-PVcdZ+G7vykQ-f~$Va~IiBk1WK^%xkrDJ!nx%WohGx z*sfSiQ8xSG_-IT?7fXuaM~laB5({U1A+_HHHMU(1W4j5O6k?dhujXs#$Wb3d=`)dw zX=R0pp@f@1v;pZR(b)E@0;J#W$9LXRsy|vVhCZ^clswd>lUn-G!goz9g`fzWALeFZ zz8uzHDT%Vh{X#zG2Y6Xvw~vz@ZAG&BCHHf)Qh8@~t{f)p=v_s$6!M{1G_G6f*jI}Z zi-gx>%U0E;M2RPVWOzrH1O-yXgIQt~)B#wn@o$VjYqWWTd1Kddk-YnbAJ9QRdNRpW zwr(=A!ger7`!$$3qY5!-k#zt?*E46t!Edx5s-oD=yL(JU1&e?|Gyo1)`a3w+ECDe| zyGkC?A?LQLp%)!3;33Sf>T&w*0L4hf%Y`FBf*5b=u_%sDn|=H?Ckb*SvskGDQ@T!2X@`yM%S( z{cUVddV)>#cIpw@Yr&XvJ7I94i}*DO?RL9U0=-)VBWMI7-asBI3H2APUTFo;@U_~$ zZM)9|Dqhrn-I;Xp(>wccp|yCIlz4I4;PYKp-32pOrgQfev@!3VwZ6Fx^@{7^oDz(A z=S6hy(`{QRDauI0lLP{~YgJp&w)b&c{F?>qSAzQHDhIoT@na7i=IEM+`jq*i=Sl%E z&FmTlxa|IXio)db7d1YjO{$t6L5n{OI@1J#$+Yo(?@p~{`C8;PrE~v&vs1D-?UC99BVyCmrVR^d2^6VCzDKKDeN+v?#PE4W7y*WXXB@J+Z7D zxmn9=Y7SXqGW)#ACEuj7 z+d?c+IAn#c4alYKbQ>rn^A#}-MDG>xEkF|8zhLKQFV5RSNviLh6FrrX-dH{kM-WP& zsy3H>mp40Sjfw%;(RsAMrO9rPtKgMi3mSv=s;x2>*{6IkzN)smZI`zwXMhk1Pj2O4Lk z_gq2zD2PzGLeqSk4O1madreEKCFau~IQO)H*T?eR~;7^YSE7Oy`+MqmL{ zG=IHj)gpxh_@o%xM|oSi3*dF9eT$7v5odH*SMmWKhuL@Ui<2t%?My6ks|*LlrlWsA zn0Y!jJla$vA{F}T0jyG=y0#RuzDe#sefrRZ(#*`!>5;La_!0{!r|QEKD_UuR%Yx&E zH~pVjc~h$R-uw<;zWK=vWL8~w<6*5#{5zmk6_4;&b)8LW>Tm$Qm7m~2hVNArhl+Pk{JA5oYTKFAiU2HAmKQwj>cKxG1M`NZ??k+#4+k$ zTzgp(A(_{^QpU}}?yzf{BU(X%Pm?w7Zy%RwN}y>50Tf|qlhhPIU7*}o5QE%s#<$07 zw1?a*Cnm%H>plZPMf|7*K~Yo9F&~-}&cKlg;MhKt)8nesEvP1Plu2o8U5b2)vD02vXZd%nKypNXiS3*qzdhjpRkZ_C-(+aJoocbJ1?6W`c|> zU^Kiy=G<+XJWZJQu1aM%4@;GS{GS2na_Rq2`>RUgbfxE!rD*lyG90-#$K(x^ zQzzSVB}2L5pZ@{u&&}^@j=ojAho*`{&aN+d{Jfl!C@x*_T)oBlZ<_bZUT`u_KF3Hd zwUK3zzC@~@o2#NmmZOLaTRq9tmJED#VOHM)!|4PRdp{DAlt6u=TS4F7h)=6hEn1fFnnKYm!%CNcD^?#7<-%9D1Q zrlH`uL+J+WOXgO8yVdF4Z_UA=$E+060MWVS^l}EJ%!IAks_ezWk=1Xv`n6e_HW{l_ zMeuZ@vA1?6wR$psW|CBzX*xMH*j6UUp6bv}Z#C?pytQNP2jV7%o=f;iYi~2+M*5=u z>iMOP@01;Vr*C108$I4rg+^BEAGhOua94ad0wNBze7DUkJ5()uPv9qGzzg5)Yd3wm zvjKh*+|Ikznoif8WYN4iz8$>Iz7;=w{v5mz+MIy}PP_|F?e+1)JH(wqj0N>hi7?rXm0_klXFWiRDLt{fK?LyRx_rTRs1wl(oHFUfVKiPDg z=50ncz`r)vz~V&PKmp=KJt>I~EOijdv~#5INfqdWQIt9&^tD_7dplXMy1S(TqJnM$ zer&ZtVD&SC$GXQ6hVZ1EIA(FZmb*x+fGL(%>1HVpAa-dWBhAgQ5k)D4JFNl{K^jW4 zDB?K{)evgLwMv4B5Sobra2R8^2w&haJC@JoybZr2=K4Co-?}kahVVUP9MI2i(T!O9be17 zkMM&Bs5KvD4Y(C{niY0GyuNC>oWQmE>pV3NC-gH6C6p(;!)2`3bf&vJr#r2tW16T- zuD6f{(4tIs(IQPel3s9!w04KqdxvtH`Lo_!7+bS`#c(v-txWx8H5z_UeZ{#2A9xk7mYw*{Y&~i^Nc8jh7 z<#nO*aYqSToDhV#osaWy+Ti0tDdPISsFL6dkg@%xSlZ_}Kk`wtN z$NdGdPjT<)rM|@R`_2i1wprS+?J~p+K=EF|DlK?mANW~nBXRM5ZDQ_&B^}!L(J0*j zD4m>oF;)0#-;HHEdCFhLP?owK&SQI;#}2nl>?uqf2*&Lh#vRbb?a9O)h%H`IOrdUj z!1rFuUA;PyfUD_pa1d3H1JR*9(;?yp;o|@1%=u8R_%KrWkU)HB?n8viiShV?eW;Fn zn22_WGj^z}F+wVlz7HwiD*(*1U+rY?Zv17(MO&+eD19JifM|apCjIpS@I+N$RFJ;% z!k%dl7o0U9x)W%)dimKV$)#7HLd6*07-ZC|KZ6QY;oumt>*p#OqZ$7vK`XHB`5rk6 zrhb3bbR|FQ&tMd&pT?lxc8X8>O0)R)vHc0!f`?`gL%E9?7*Na3`_UMTkkMZ@=d#01 zN_!GYwj}b$w%m{Hq)cqtP3*+RZL2xg5YVzS2jt;q-%a`+oQm0SAdi9Vd9 zbK7qyu1XzK`6kf!^#}z??iU_MHE&{jEt;-Mg-UqI5c<=lOgzs5ouodEw}$NtmqI|T zscTN!f({`xV*`1AvOd~xi06ou#?)CrSHA1Pws~Ko=2Y&88gPd4$i=fR#;Jd zk&8F5*yyt5-V)A36UrE34cJU0(F|xpDMI9Ty%)t#QhTju4L)A8u~&9dCHmUkYlMneGg< zB$T__a6!!S?u^Fuh!MH8R9G~VghX7`_N5%(xU(qll~9Co9$}t<{7PoxGn|L1SkM)l z3&&|Bu{_%&a6Bh;eo(ylp-fphOhN%UJWkvd_<%oPHvP$bY3SM`*Bghs) zGdhrHt+p@x90HKErXC*;B)Y0$NW4MwI{wABuV8ziqK7bQ;eSp;GK8wTBf|QGWHdF= z`Hm>tKd_{!zfqAUO(EA21CNh~mPA;ek$77$kR0^ilayCWPq?#=hvZ#Mu)ZVWM^L6> z|COnS0m(8B|D_6GeM$1nljhwbUGGTmH0&UAGE5@k8^Nm651g&oo?+_cL`9VL=ZTN( zWC@a5AqZ>F)V%%vy-dkbx~A4hMKxhvur5ry~u6rtqd92G;O-`06q1vqdtTnO1; zBK%L*j)6lahr-9b`$d_@n)h20rOV`IwEH9^nDCRz71Cs6S5PrtNmA0QAeCv3XKtN3 zp^Nz@!}TL~bp~9_?~fJnm*$F8r>#jwf{%K|!a=v&PB^S{GfU;hw6&bx=Z-Wn!5DV) z56^`+-#MNJsh=+mH?u`JE5?o$X_am#%nrZsO#nu0b+p{SlYQDpz-4^cx8QRD=a%Dd z;RWYAb_O%`HKh&W7d-nlmzT}moV7*ASgxm5t21HzUZG5mF>+BzEd|S9qd-acR78hSoxHM_uDQ^rkDNA z^nk|>ZmSo(3M5Uv89%Lp+$l_AXPKIrf~$H$st8*ZE~ULJVge^)37|)uD8twT72ig2 z_lOXUN*g`n@Us*J;wH~-!j0}4_}NiVFT;nKR9@X{Z{lo#X-hJaO_DqWPjIpEc=>a- zByGsmQJU`*s4#K_B1ePU+8)TiB?-j&OOk~ES0jkVx6O%r&|r6^>7Y*j=5?bM8i?|? zHfSr6XgJW4pcOc@K{P%9C(}WXrU3G$nVw%khhDkqK6Ke0Hdz>6eb(tfF47!jGkPP1 z_ZtAYE%1_qKTg?fTw7a=?^Ng%$~?H~s}rasZz#7l-T*%e&gdaR15P{Ujl5Sa7;6JG zEe&_`cVWBbCs6Nhg(Mkr@!X#0@TQBa#3^!d_Gjfrt1|V{UWSujg!^6GRaa#WP}e=G z!^fWTuh8v9)Se~gm2%h59eq5mt$=AO^IMK}sd#+bU0*dr+=AV5SUEp*`)k=^V>KL} zqbIGqi5)&SLlO-1qmJPpI(V<1^?YttaW+iwVcx%hCmd}S7x;E_GvyXa)1S(>3SEoK zEX5EGWZl0AzEYWnHgL1(JdIK;9gb^zwv`+@qM~C+xL9r?xL4DIb?Cl&W&x_L7}V`z|{^(p6f7SnnmU@-GVME$yg_DM*RsmA$q*+_z}o9jBm z><42{Y}dP3(xY)+`^-@$?CnpIZR+qYpxgdepdyA2*}*Z_hY%^*={}Es()ck+ymwVrb&j^?;7P~lc zS-kMPVBRgTW*t!=!}-@6d_7F`yo3|e$T-v3UiE(r1x+UEOr|P%beec{2W@odZghEV zbXsq8U&4>XuG|Op`aS?c`xmpV;PrnrS|MDhm=W+-V^wd5d_*X91swI8VU*V)gL;Fq znKCk>WKgH@w|}BO=&wrVSZ)k212f0}GXVIn1s$Qx?Jl+)uM57N1b|bXm{eVhnLnx? zC(^F#{~Z8RTKl)=)r6E`qO)_H z(Cw*Ogah**+5qm~P>8&1MeEv0F?ZB*=>4zpkwF2)WLB%F=Ms@h`&JkmE!S4_40v3lQJ_$f*C33H#rY0>8olkZ+%e8Gs%PMg&gLbFqtC zOW=`b376?Mi9|jBI+>x~5jsGb!><2W(G1NA=RXFpPzO|0t}3>ZfuruH0^URyc=8k@ zn#FukZ!kWQa%uhl4L~>hluzEdT#h#Ye6kGN`vdUyA39;80s7-gW>`)PIf42S+g+4g zk__;4!hq*^GpkBy*J)ZzA)-CIN6*Ia>abHD-NDs*O+N6Np7%9r3;r-ROR zsd(&nk7_dhI{gdF{4Jtq;Y7 z4}*jcDlf_D>h^Lh*q7)CdE>E`^e<;h&km<#tQ(w81;!cRdFrJD*hN4Ly;ZKpi;fjr zVlZ}xm)SERiq>ckaen-t0Pz3P=pWm(<#xP#fNaxXp3|J~5bS+R+ONed7}bKY``-e< zf2;Lh8`}yHmgIIIvyoAmsA>B9=9A(KYS`+c`IF{lcNAhQ-xlJGlKMM~GX8S65*+R< z-z2$jbNL7?zJ>$v2%I{d`fDj)J+19yNJe#?-i2TN5b-VGTh<1=j8}oZGv5O7Wk-<9 zssB%vtD}}AnR*as%Dbno7nwWZ&r(rTS(=pRpqqm(9ZK~S#VJrsE=UD%Zgv)tbx+U2 zuh=$GQR?LYptSrS0fh#%{uJm3#JD)=#s;ZuI7CqqS^D({my z;8~i??6+}B%!qR)i@Z&1lo5N?-bOM4YxkKBuAs7lwx2$2enE%hp=PsswG5=o{Ff_I zbL2Q}Rj+hag45KNXAg(R-Ac&!rbW+h(N>crr*r^y(`JwL1|hl?i`P^P`Xm)5btwHAan#?jldu^t4N=5C>gC zo}}q%TrTm}QzCStyNE`-=GcMe=*mPO8CW%Hag*rk*lQ@M&o9i2*=lNd-exMzF-YgLP`cc&mb*#^L+B5m#!SDBHT|jMt@`ZRx6BZKbiWmEVP4XlX71Hdlb+%ukrDt zyDjz({Zqct*blEnX9M-@v)4?tPh_!kwRv22u?HP?O{tGVD^X`x2%}JP{II|0p_J3~ z+Z*s?uRs$&Hb*??<8T6Tr)ZdITdSaA>6kr2-0>P9ZRsA)?f9rG0Pas&#|$h;;;WU7SihEpF?0QeTNL}BRKer3-KWmFWjEzz_HaRzc7Dy+Zeqm>O+TGWC`atC} zRV?859I1*V3FhUG6eMp|zr+`J2VZV^fihp%w`0?%y;3d+L@?teqj_@1nyRTEl$^=s z>IT8XZZ&{g{?KHNZa3B-c@Jgf4#Q|3ZqH}xfpQn8!}dM<=VrBh9|!x6e3P6z+o6dy zC_GUy^dTlPa}MSjMs1s2p|JS)1+n4G;1m4T*meN_ByA$|=n%iRW)}L@c&Ln<3V>5m z7M+1D@|xz)7QYcMZze{C!5Nn?Tv?0OvG>~Q0sf+O{5@K&#qt`VtNyvvviIHR8R2q8 z>o|KrP^fG!_MXC#Y|%Oap0ooG(|+773#MMf3%kw}?;b;RyH15uDA?WFbce~FnW<;Q z@x3=wvo}-EQTIF4>x4IwL3?Wo3+XL`YU)Hbv{b;JeR2 zR$pyBvAf`jqP4~@`$x!ao2)Pt=)3!o7Rf#XiM1vT(O6}N{s9uy+{i?&KZ7+8>}im{ z0Kc%DL&aHC|8qk#gCLD>>`ssztKR`VUI`g-pvG#6Y2zy`kh>hje#AhaH^1Dy)dHD3eQaMw%HMnEs~M@YMjm@NFOBub9nJXr!Yx?~x%jn? z;D52)2?XE05NkOqdYmQmKMFbnzoO0zGOx)#yrv6%O@+GiuzZLUe5mjGkoWn}bNY~~ zNXCsx#=MnG*lUhV`E9Xjj{n&lRnQ#w?+M<2JJm`ZRwH(-cTv)5;VXa=;dy?_yn0jH&-PIo zDYrQOYoa>oS^cpsN)RR9wXS>-FfS$tKS^G_N5p68D2<;O9Mxob^}4p7L!v(xb^;cx zLT*kMF9Xr8$F__=OB$u2h4HKXoogZEIKM{owBx$PHIb>{2E885??V125k*uUaqY{2oGIN6ZHNExl*E(>p%jzN#>(K|wGpELHxz)8dNV=>n2- zU}G>2Xqf${iKQ!`R^1GP!>Qzn(daz?Mb?{rtxul?xwYC~^8Me45aH|Lq56J>RJeD;#mURTJK--t!2G=srBiaXn&cE>HS*^%3uw%A$BJ*NX}PF0~7zh6R5rb+8am1 z2RrQxt?gRkxBmH*NtgZYM_r_Ry~2EbxNcQFJXNq?)>9v*2g-JWF*l-)HrmMq*>VQi zNgVz?P?H`PXLITPljL+W+w)3+RT=gJ*U8J#Kfuq)&hr|1+q>iX2iW-qfc>1DaX~^- Ql44?Fxa{nzdTO};3$TJSga7~l delta 289618 zcmV)XK&`*N>_gm{Ly%kp+WX#-Umkxp!3hZN1^t8TC{|mqKx%Z}F~lPTg~nL0n$UZQ z2Y6eoAD+u)Aq_3U1b2t#+@3E(UkzP9QLpKk`qb{z@;yERYl&<%6f$I&o6S?zepU6T z=S-b@P-!d2%)$ngilNXBz5El3?2xASjtrIQJJsDsliFdw@NY@#dRydD9A z4-TaVHY(2%VBd&OA<C0fR9F*@Qu! zlfg1Gf9xrcP`bn|%@MG<3z5XNB_7%sAv8FP^E8s5`f(7GM}d zUOwtCOEcq`8ih4Rv8i++cU@o;1POKYC$JjML4(maSp-9ysBZFDw@1mih?LVq+YxdA zRioVc>&defFuThV5Qe>TyyuhJnFgQ*{fzx`^0*T8$TFl$c% zqkKoeZiVPdzf==d3v8)CDV7@DT^3C0UKqcPl{)U{1G!y-OcV5GfuR%mhS{Yb>0d`L zSsp}n|Ch2qx*VxSg%9G2{g5Q-2C5>z#B80af>V<^DdLG=O3j}u?J+^W;^+quw=`P| ze^jq!Kb~~UR=syzwp%c_LQ!X} zKc=i#q#fmfKhI|^s?w4BLvnNXG_f@Kl6p5SdzBw-dyXk`4IZ>S>rk$y%pAvZ|*2(5pwUB0YHB1}`0` zI<*s%_B1npx_?$)9AvA*;c>jI!6$KD!K`eutf6E*kg8*}*%a0V%PM>BrTj!EP17EG)|37in;R=k1!U3%T4REpvd03n|l=T45LzsyX9`&_-sK5Oavuyi{KO0h!No zmqGCe6O+$17?&~Y3@Wn`HdzD`1!-frh+@m%J(#1O(|^%1{yLX2A_5bWkUAHaK}iHD zv(P$51PJ{GpVNO87qFLMUJ4VlGC$@G5~yc7A5q+W3@dFkZTbOfgiEEDp;8AFvp!9c z1AkO`!QI%dDD)BK*x#CX8S#6YMvzjg-$R{!8;Wymt9a4+UjE=#<9-LbquheK$J=>+ zfXwv$%+}9NKI5o>(Q}xlX594NSOtg&t$R?!4#oP$xu0<_(^_WRrtNVo_3oy)4eZK% zT9hzMqvz(`Wr8BgTSr}q<$+fbEbt<(xo);c+#Z-p?hLF4rQC>em==YJ;KY^u4V2tQ zxN3`5u7X1^zx;Ma)?6#=cpDM7N2}m!&+<|;<^0&RZJ02HxE8;%ZTQFS!c!pUkxBwAgmwNLdAF2*44m+@r^6qC?V7MDS~1Sx;*o6Bz7 zI24BWehMwRuoq%^zjQTi;sh=lr<1toVA3u$Hk$~wWRE51(x)F%7ss+CNQu)yd|8Q+ zWP$kj^YA~140Ns?=$y7b3|enb6mk?$9CK&z!x0c*B^|*rpj0`7k#p5PI`0p<{lR7D z`{1KPlmv{MU#~rCbqB3~TgZPrf(}}Ih)KXXafU(b>N|8s=GjLF0`nE;E_pL>C?kMT zV%lTpvh`;RE_Y6nrOqMB0EEgB1OlnD-UVLhUF(tiQ$Iwu8|F83={H;g!bslV%h-!` zpu@Q1Vg}o%GcO3dS;v)>wn4{b5Wdn2Rch^~WuC)IvCpoZv~h9Ta;|?|iFq4QSa>nN zuAp@@PA(Dv(#^>p>u(U^(2xB|nBMWiQQG(tnXlTWcr84ef$X@b{d}15Y#zncFwHbk zSk}oDEBLx)T7P*_(Pq>V&O~hvx?Z&=SZyaz^kkr!aBqEmSHclfz_F+ktRQ6D1-p6R zXvjVzx+(j54NJwh2z7r0#$pr3zb2tBXAFg^)wh&8rtjyl$4%K=qMNd>*SBJ5_ZCE1 z%GeP=LR4V-w`H2(7<7zXc$n(QPI})=c{pmQvWX+gm zgw;WRMVh=~O1q2#p=g0A1H>fK(C~bm;wQdk%$Pca)0c4zydofA3=}Gk$C62~LoxZ0 zUN3Ysna?^%wud^uGn^zhM$wAx`g)@?Cl*g~BbHl`8yy%!Cdlj6ZUriWfGj4$HApBy zhk#H66|PDTxAlL0Jom;aPkld4aOx;pnEQnwFB0R$x1D1{fT|**F3B=4cpdxEa9%>} z?5`4)a>#c%ST>_8U=w*>>Nxhp>nxBBJ|*<%VNrTEb<~7<|(6dixa3f$Bk7^jm}vI;wv3Lw7N zZTO?4)@52`v5EH0_+l@1BmX)yO=O%CMEes>HX9Nb8`dkeuqK1@=KP{}+Uu7L4HbYO zoWEC?A2wUr6}z_~cFqBP`c!z+>mPmka@;N3p<@7YQiUCp{V1we@)i_e@(h_92UAvR z=Ri_b0h@m?cG$fWq-r1pkgB+s^r6>3&YepX=d11G8r!{(b!eUXI|CP)e7St!C^cVZ zi;+9+_PZDFZL%~dn=hOI2&?9c{M~+kLx>n!ipBWxel$vUck;CGk>AN=7I?8O!U=xx z)j3;Q#df{g!vM{yZ&s=*rD`|W{3!N^*7e~-PV;{h_N;lK?MAQTew4S6_&~e~ao#9* zUtxSSnTIAGCx59u7kER?qBir%3s8M8$fd1kxB049Jp@9?-Ko?G@wDyCGtV~|LN6TZ zI!;W`?Q~442@+dQA2(17<#@-7y|P(3ax(m>vokQgx94@(6r;Nbs?pJbqe(C|RQ~bD ze*9RFV!89H0qyAd`3!idNGmld_tDG!~T$YIodyztBt5tN#G6v(Jo|F(LvJlkZkHmolmX zDYH*kxd?yexY7a!ZuUMAa12asclw7)t5~&ln0nC$yfaL}ve0~rTdZ?Mw}Mebzr~Sq z$rA5jGVP-MW@i@0sw|q{iXax=1Exoz0W@~lzA)fohwbYI41X|SnXEV{WdURRueKG8 zHP$ZL&g^JGw_?e5y1i%&M8dKaigH|>nOe`{dW{T>ko!(4_J09eyqS-ek(CG&lc!)7 zm!dNPDzoQcngj~((ZHy`0WH1gj+ent3ly`SWoH8sG^12ALjB(xp+QK00QX1cS(h=z z3>32}X^{sD(3@c&&i4-r)@J9E;l32J+Hmm+56}^~K8IYy4^{d<*$alGmywkS6SM7l zEeV%{6$UAPomoqB+c*-w`&X!PlB;YkN$`2}B+g8xD$cB}t*zb693YaCS*A!ugraDE z{q_qGDbdNyp3ry@Xf(RNe$bz-Xa4NxtDhEE|9GDVv)s#*Fqth@vo!D`70uEl^r9%A zEy~&F`P*Oaep}o>Uf+hXKM%a?+c@#(A08HupWgj{>+Ryhr-$p?AV^Z2i)423%RMiD z_vz!^hXbc~Kg{O^D4uVXvN-jjj}iUZ7ID3i(ty>|Q(z zZw5JO*ZAe^R>iTG1i=g*&CBDMztIMkX5n0aV-w8VuB>FBEt#mknF?;+mbej(l-;3a zimnBpnP>T`sq~5|+^OeTlCfJonmRmJED@gR4EAY;uS}zK4N$PikLL?}QmKumd->xF zt?)GEhav`~a4V+pg|O{S$H$g3-g2uao+1d92Rdqn%r8%yRJ*Uh?d7XP8L*QKUPT3e zG2FDa{OGnnR6Aki%f8yxm2~v7+Z!fHq+{;)Jw1V)y<{~6Rui%XIvK1>UOtDHkH>P_ zk^nl>6)m_Vera-8>YI|lpyj1%*VYM@6~sEA`01qM~iM(PMKDc zcq(uPh+y^j*dthZ`~pwirV^DHYndn63@1@h`OCH(O({DSjr0|PE&+T7 zwCQCFW^cvzc#a7KJfp`ja1u+i6xo(tvENj!k!}ON;QtcsTQ8gxEvQ#E3w$q)bJ8!L z%!xY4;(uR3cvuET?Tqa@2ap7RZc-LR>#wt8?h~*1g?O(VT7#>Pms}J zyFmrjt>N8_oU?CB04u{!1AP`EEGX+0anx zc+HzLS%C&Vcl)MfdMRImwiVBn9XxVdec9JvA=1^2+wp=;@fd^|fe*kO#1rxK(ABUG zbuxSr77QN`x_E_u*FCWc(c2;x7kE(>g>3m{C6lMHa45zg$UGky6**SlG@73WRyY;+ zK=7KzXDCXWTQd*ARkTI3ryw3D#AI-y-}4f1<^2>VY3${`gMQF$<7utEQy`V)YAnzn zatjXC?kB);ekcHb8jj9fE|=c-Hx3}Rieu*{s;^aRBkyj1zotMwctzZB$3!K6S=s~s z2Z@Rmu*=+H`0mX3$nR%rV9Sy)tvKU)RUiD!3j+5F_yFJMG7m8V`H_&5%!SK8mhWgw zi%${w(L3f`d>c@OmSl6Iw<3-J0`54y(38TDL?E;$3=G-#LW6lzW78DUXiAlX`I6$) z5FG0tJOnm9S8+ zq&4oy3C{sA>rBK{yG`Bd$&@wnRCqdyR3!=`FC2$|5$0JN8=+C`mP+sdBW*WveiD1W za;n|$mwek-99B9=nju)r+#BTa>D!42aS(;zP%8mvb^3ZZ??QxOxHxb%ygR!ou$C-5 z0}obm6)1|>g6PB=7V>}#%?(T2!6E;z_QzhAFO z|7kmal0Hr!yFCv{Nv!1FCLQ-e{6!eV^PfIEykm-OE3ySZ8q?go zaqkQrYqd6zeuE|yhGH<7R>Mp3g6*z`h^;1nl)@8a2Yf$SK^KINEZl~9F6Em5Ln26c zC$ne1Fv4h~sWgh^o2qE^&iS0P63v8rz~t;yPQh!H;2GN0luryjKUAm6iyvC-?zdG@ zua0~W-9o^Ybn#SH>ZL~W@8?QNOr&gFn|hJGT>U1BPD_-|&lh-+aWCWbuNe1STJ z*@N00rPseW)*UmkNz*}D0DEUAJt1sJJZ}MOpZ{{B80E^CvO3x{3~O!RNFPK1p8tOgF}0ZLhlrfmGyecno=)P@vwIP zmrA$lvMSC6|4SxrDJD$u{~9F)VBVr8l%c<3sdD2sNUfFnGUw+<@|IQj<)Im*d9LlPb-NBmEYS$5%Br*BSdfF z5@T`i&^DdMzXK|^wi{bP=YbSLGXF2Y-T)NhQ*hx_Y3k>8pfX5olE3qF`|_tYBnDm@ z#1vquDB!CpaE)mQ9z+68(8An9L_6o{e|d>+gp=XE6O)3E7ncIF0x1%e8C`SRxbfY; zLX(%uGZ9J>Ad}ROIe)@gCbA?-W~-9B6|qBxj` z;(8G$!Tj!i_3-KaZ|_!jpYE?0VVG!KQ@pzRa7)|YfBJZHcTeN{n~w}#{=Qt@ex&h# zf;f18zl2YC{pae}tJ~Gpm#Yxi3ud8bCr(9@$k}>#^~ayVtbc&DUuS`kuynLLcQX}B z5i1GfYPP)k*Hv&TVyaF=3tUCp|xI z%k>sj1@eL7MSm8@BtzMfMm^IowoJp9m}5UjIxTRmPFI~X$Qjsr7D37kZpYA{Vi zsx{EJbpPAb<_w)Zai((_i%|IkptT94p-7X&ZQ12*XZ7$stSS_7DBTfZb+U+bEL0#t zHK~wEN^5sDp<+E-DO=ONW#u$S^8(bgn!g?7wu1>i7=O-+t(%TDZGNPE8t1$pw9LdF z`)-7^tbuA?c*GON_8eM2GHqWml4diZ+*rX$uc_j-&UfXS_V@b&{B%OQNg`qh4`;JI z`g7T!6VcvN{EILGTg1_9A*F~^L}!*&{=!@?%>gvrPLKh)BH%7%ORcP27#bW1VK&eE zZrdEn4u9ys@M=r=P=k^BmYc@0NHQ;VYq_~(Ac{oj_b{8524<$bY8ztWxo(a%E#&PK zwIBo^AE=piQy2N+b;@re5d~^Q(99|SJzoEf8G1+8GD0+I>56d8L~bS_V2tyd9rAplRz|a zbO}}vuqbJ|?kw&sJk=i_+VbiBq1>T4?S#_;B@7uvlkt)se=^YI)SxGoMmEXGz()=) z9~+CPz(A2vgl6`qXft^qfo=XlU~W4hLMlN2_d(va|IdQ)HI^xTc8289kgEkE7RfPJ1##K`J`j;^<6{fsmw zgzyTG8S7tWdcM4UxV!l$0kKM&s-Vf%dJODfkpaXa4gZ89L#5jgv~9qqN=lO&lr#a6 zlTVZ;9xe6!cbc;9sH|n2RFG6&(_qvKaK3B6;}2y~po$}tlawNVFd)-iRVK@&7$Sz=D|OS>peVC7g=6^-hKma3+HvWXaAd}iOc?bFh56i@Z9 z!KiVC?z^%v^jBKf-`bu#6s57fr-9QAi>`e_w!221Er5o978DK*{R^yAWlP=xW9u34 zy zT$su{QFl4f8G{kDk4>w(q0q{cLVMDr0o+&OK|n!8ZRJ+Rnub$@rsZj;h(!pSHrro@ zDuHZ~o;#9CH$;+>juRJli4XQ99qx;`&9+lEFG;!r@|g*JsZ=Df@0+`3PrEC)qgGRQ z>qJPIegAG9iD0;X=X>*Y>K+t`OsX^8kL5z8CJK{%mKuK#waD~Hy&&;|gk4Cu1fc`U zD7bV$X>UlVOkDN`#EDIGv3wME)F->N29#E^wxA%KWx& zx)Jt1qP3S6h{I4*e%JiIsp)oy^IiUI2-5c6HFe@VR=ZlGeOcGkpd%!I$;&FI8!&*u z8*5s?O8`QsW@=Y|D*^HbbP!S|U6*+TCGbUeSIrIEyfF7%&&$oWF_Yud+djakR?25Xnf zQv9wAi%0GPU78vQ6VxjU7RpK99}RTG{3@CcZ?Yu)k-P_&>f!a8Rn(lCzOUH{ZF1!2 z;AXe$@qxbMh0(iE>~B@4X}0ORwk&vZYz|f7n#&a09--sRcb9OTku1i$e0>eMWJ`HK zr}O*VcJ(lSTA~7A4Xqx6{r}(h(!{?5Hx+vfR;b5A&iB^DRgLBa>lU@~3BORoch^wy z4%|bp(-4C=uQvGN6~yypzuwZ0 zoIaj^cp6gT0GR(Fm44%bkp|#<{_@Y7?GJ4^`Q9%xXi|K?%yN6uKj8zcriWMnvfz^s z{TpGHzfd7D^Yh*Pd*US%(7Fc>kgRkBw?{Q*>3@q?2|tt3wG*?0nxF>= z;!B|g$D^_k7fD?5kuy8lhL&kli#TqmjUnvDVM-+3=4k<&X@=Q zzK@P0yUx^>D$&!)xH-@wY++1-3?Fu!U*825dNsQA0xZ9MVzIj*^IkmW-ON50vrpGK z_i~yiBJql6FJ)BZnU^MlMp5n+mG?-l{1wIIxjT+kYTEwzxk{s;-bM&6bk7?0ue*7m4Vm+-xOeCW z-L|h&H$Xh0h#?*a4|0Fg>I#L++NzG~%`t7vu-hYB;nBJ6jrbM^exow}F$F1DkR&T1BY`TEalxGvZ*(zrvkrA-)6r4wo< zd$}O9uN*+z9`~!|12VhzUG}G%N;}&=CpJo;&6)aPbb^OVxuE%G&bNKI%NWin4h9UQ0bkRt-I=fw8ncIxrLlp9auCZnSybF)JmA9NST2WgwW+V6L1xfT*kIK9QMqx4^!8*{Rmxgrq|t(FR)_080bMv*Et_ z4+)|}q5cO(kVW{DVcHY3_s&`i5DRa?F=T+bc{JzgzX1?oJCkABDwhH91u3(%+6oK` zAfZE|{tE-s)mD>X+7q+f=J*H@3H1LGut7}4RHy#|f-^A_lVREullSiy0XLUHbOkAs zH}DXDpOT0@rCZvjSc7cwwuiPD7@3ZR$W&^|N&VmN$fF!PH82c&((!m-zuz56vEsg9 z#rw(I`Q-ea;f0~56lF1A78R#Ts-h|dRmv3eMe&*Z{Ndtee);=!CNv|GPG`Dg% zC2DSAOKb8ce7?>AQm|9F3O zeH&dSm-ETD2?rZi@O{a;re!IMW!txcxmix4_hF}i_|JcP_CQPO*YC%o>y(NLQ|W~kd(v$uQcUVeLM+ky93LAN)gO+ z-v(d}HSG{ww}f+B)`I-Cavs$&a-~Tw1r({2>=F)xS!n+P6;N4sianu0R_b5bQ?wHM zfqBVNldboyzX$FV(@^no8EO2+5@5^{4Zn20L69}j_vEsF)4r`g#dS^ECF(I3^9DZ(2KGBr!HUZ8dQ; z-(Us+8S$_Tq(mT%?YiVC44L5vCODupexZdzGP2zI6cCl;sH2NRVSlJV?%KPJ-R!2E z^LX`3CdmgZErx9Jsfmj;R8er>?Yi~uRZ#5P(5@ZU5e7he1SWUI`po8k+CC(9VoR;R zM^a@12)bpz!F5dc*tx`LMb`bIUG88y_8mcU>%%kL3|ZUb_bzXSbgL$fZ5~iJ+F1NF zU7L**88gQc;(5;5;wd?S=iAn8cKO=Mm)>2zz3g4TftE*JIU}F?@z}?`g&SAEUQLoBNryg`JYpP87Umo-yA8=tL6#{~Zl1jxfH`nn0Q5tQ?+pFte5U_z8jDb$~0zG1tQVcHXuk^D>n;FI3`9DmK%r?zf@ z6vmTWfaL68ml#W{XX+_|>`j z$Muh!+x2qgN1hY9%T*M6&h^`WFO^cx^~25WTONA*@W{a3?e#JVoy||{Tj+@*mBF$= z7T!PHtZ%=+ec0fX>+g8QFMmHg+%mLTUq3wF-L4;(zi+<%@-7W0hYLgHMrj5|r*i>9 z1uN_i7F^wKuKv7IFvD9YOH7oyaU3l2!_}|9dy4|bzFl~307K6-^RNh`z>UHH;Ck_R z^{*>$%Am6|C@*nU1h@mwO*7$;e$rLb56e}cLTA{Q2t>~5Sm;6EV}Dy$c~vfz({snJ z?HG{hq4TkA$~OQ8$~pB_^K^mjpJlf#yQNBw!XVzAn?58D>!iIJL~o1{Wov8`vI0Rq?>|KV^=Uo z4WBG;>0c0&VA&2^yD}fjg88w1;SrXaNJ$&AXw7M84?upd>-uHN#HSMYtOZkSF^z&K zyZ0=JcoZ!lZ@8;%>Z*}FkXLg=yenVG++3XIu^dXa7&z9x?SHC|aI&`HuBzw%R`+-) z1kKRU>898DI2W}<4hB;+gdT)RvCY}oWK%E_H;FQ`7oa2X-5?e^ zHpmk{Nu591Q`eyCV&gZ@^XqcP;$gKPxPeM}^>vL4!o376S z=swmur^5rhF<4-kYzG!ULjfzgHxVi}gks_Y(ujTFhJOxZCIFL}z+WGaWmB+Kz*LK@ z{4kVFk9taakxli&55fETiH!t*H1&-3__3R%%1lD#K)iMXCJXmOM|L&@-a-uG*z(zs zZ16LQn|kRv^+wA^iV;3Fb=iyT`(v3`IA}x*<1L7-tBRs*tg6V$i8h_1WK~K<7gM9< z+p5u>V1Gsa>OqFdhym#L?Wq>HX=QYKu8ZQ|%c2^L$2jQbMCY}(ZKJ`NF{k0Eg#bTS zWTYwhx4Lh+ug!Cfk`(fBR#y$O7(>Jt#p!VTLV`gmQ3?n1_HeAr!L}OEiJ=#)yNk)J z(*-v~EI8iIn%zJ;8OcP1tm%eHB&Lhq=1;r}ynoOs?276D>RiF56cC_8?*{Vp0G2x6 zGh_`98+=F%^pF;9%Uqv&K{o95z|b=b48eIh4J|6OpE*6mOorI{5z?4Mcuvg@?WyEm zA=4LQgui7MHg>G<5c-?J%6t`prrbkjQ|baw92ye=^eC}&d_`I77lV(in>OJ;SsyG@ z(SMvU4pno4pi6szC&o;G9fA+70+f=J2iwUcK*J!Rg-&!~3>gm=1)1~q)CrnI4i11h zcnk>?rBgW=s_abBu>uzGR91+7?!>I-Xt-N(B4^GTJD#gyf9BJ&(Wmt@PEA3csxmck zYR{i=YBmK%8=pZ0U>J{hw(sWf1a7A6W`BQ2>43DFg4Gv%BIiruT!_Gmy7JSZA9Rzm zxO_@D`_hnH*WxPu%=Ll`SGkpxg*kNqA1J;?LRVxWTV(WWn#~wr@a7^($xW7G(D!;r z21$#b8WYK9Gur>~&WhbBn56Y(N<1$7B^C_2WA_5n#L%Y;_oty~p9NbhgL$X>J%66q z2X8TOpSVa^!-zp;UwDM6SJNN>vuqH+87=og>fd(97SqmI@7B=7DMQ5}66b_D)|7an zmi!L9%R9;L(3oVA5IjX$>wdUIj&hsj^o_~cFqs!$7b?TsQ$6qqJEHc$qe$j~Z5YO& zC8`4^O8x+*h+{*fXuZ3#lRd`d9e-wVFv4zOEmdAIsKr19)vS)&{Yb+KEYs z#*ZSMt}t%vbUfd7tlZ2DGtwP6Del{<*ISa2Hx-IE^>dzZ+cQG;tjKU)FRA_o z|5cj0Nf=)69~SJovivB8tMb!D3QOV;mqfm+0xL07)?db8Q)zGR!QP|QGYN~5mRnLOf6nV;9{Byt;$9;_tKq+=DIUPUxZg78qoDGO+HI> z;`(Db{Ar>SKQNOd%LSz4Wu~bCl!2-ahI9*)AFEO-nFjVLj`7Z522Fb!geGuw zM_Y#{zUz76Im>5?te&!3)B;n&9W>>#u_WzyAzAKDHN$*I3V(y|t5V7j&s>-Ske}pE zpc&2!#~4lryHVX3JDX+ZJ1x%`^V|{FYwHOz-%Zlbna|2ho3-hS4DB@D)BaUBlS~@( zh8d%Z5;qH?nV^IEMbIj*OWn*IHVGj4kIw>-y;J8KLLaM-hzRoo&yB+rP00;?pVx#C z)#+{@zQNi0#ec6WV-9Lq+$av{#%)Awik-qCkWU%H8z(Lt>0Q~)`IpMSbRl1@@zG}71Uxk@HJ!ldWM z)Fbcy=espu`ru3n{zIF$;tt4cxx&H;l)+(JUNcgBd1#x0D^!@kwVNy=hy7|>$_Hoi zMC+&nUtx--=_v+jqT3Jdr+Y&9Ly{!-3QBGu)N~u)Gq(*2y+viyTc4{H)M`HvzQJT< z1CL&?0DpS;az%}Ih~|t{Ge-tLoPY#XmPPVd@K}<0%d=Sbv|wOOri62U9Aa#pK-joWH1}=~*Km#wQN*jv}vMU3Cy)*;kPybmZ0R>-&edJe0|d(-A7%L2w9{ z&fm_shES0yr4W4Hm(ypP0n(zqz)gvlJ$QsqsxtuRnGi7`1A5^`)$qM4znMTjN(mYa z==U0m#Vuzieuxt7C1nL$s85Apvvgy_6ny|5pqH2j0Uj949Kv2yYU$KHcePu)JG5wb z7)D0B+;vBn&IbW7NXN26naHb7$amp@^29Ghk-e10e2m4-ek)X!(1TFrz`oPK1YS*=gRhLEx0UN-fJi1I8*lSpWt z2UpABefa&Gm%m({zdb#Rj109nJu`_6U%vYHsZuI@dHMbMD_VMW`HlvEKb*fjO?7zn zueav_QJFRwobxB&{qobr)$YXaS3jPdU!8n9QNWT6)WCwtM3Tfod3*BycNr{U?Z-fh z7?!qf=WU=(ER2p}TnFz?em#+6u`)dpOUYCy1Gr-;vYh3*I?bc7Jw1yf9p0@^RTj3r zEqesSVZXA-8mMQCC($B*2Y@65UDaD9s;0N=rl@KAglv|GT>0Havz);gNg;Q85My*S z#$|h3R898+IM$Kl*vT>+cY-v3Y1GJY2w; z2rjE^n-5Y(HyfuPyQI~=rPXEC6?NTi2?|33f7;k}WxMHKV6U?)1Y*8va!s1QrCmky zKw$gX3xVKO+w~}Cltdt2S#OqAbK?Y&Qwf|B(6knpU={%!1a?)GE0=&40T+K^3DKcq z9j10fe-HUrcbi3Bm0!(?jm$d2TFS7!rtc#roQeoWV-udSvp5DF#ZQ`UX7)_ielBkB zYAZ^(&_k?B8j;AsfBtA23)ga%!VO=os*cz$+fBWsAziig;=rBro^FE|f}_IQbCe2W z^o%vcDc;4Y3emQ4LK-hy_g#N>1iXeR46=~4OhE53ZsCJ8az+aZLS;6HwB2r>&_Nyx z9h)aLo5Y#lbKT!Pfiue?R1Q1%O`F>Kc$dNs5ttvLR2ndGay|YffNi)M`M4D2o@i78_R4O z1unpIR1U_pTvq777-=L&RD`ol9P$Oc?^u7-my}4eC(;0LlbZZ_z68lnMH62lZo3tE z5RO;HJHdG=X0iz+tcp;4t9;eilo`kpiLgHDP1z(lYslEsIUZ zIEJ7;6EdAgoPkx1yc{OWmcC8f(||OHBbS?EgJr_Xt_ij+9%z6;7r%Aeesn_NWOK(j zFh$~^XY5N`SN9&rjuXG!gS?h#jcb8HgoH#Gv=XJ^e@=}FtA2ll&YAc$X!h?1miF!f zP2Ewnv`ozK(VAcjUh`ZJm4KmZ+YwCo+929CG)Eqp2B%SkmPIq1YvyhT!tr**Hl%`{ zzCNWBVL2*x9!d19t2fN|*BrhI#=}m=$gg>kKKsfezd4ME-?}1J0{2*e;^+0Wq*YQ2 z$Pa~{_Ku+(p%RV-@LkwdQD4(e=fc!TxPp;p zRWo3uZKJRO;KugbcKy*c7_r|p?jd{&LWf;soC#W(hp^nDY!;^`{Mfk2pK4A4so^C( zN&x`m6fl1}i3~y%<(32hKG-K&?CKSSar_}H+SjlKOXY5g4#gt~ce;0WT|c-E9!o`; z_-@jTT_aRazkp*eX0h)PEWZW^pp=7BsZ)Xcc|qvmgX}JW^RUEu11(1WUAvf z*HLh7E{?`+?q0%l3Yt7s4B~B2g4xXRtM6u2o)CWqm8aADK>*5)Oz=jM9Y+gG8;Yje z?vkfld7v-XnaM~bJg{p*BbibukDETt@-tiNjOqktjnf*Z%LV7XQMR>9-#?chIVo=X zY04dX>_Lk|1vSag$F}0ht_Y7o(6Ld=jEx!<;96*auysqWmjJ@n4UjqOj-zP&CIY+4 zy0U*w-|=DU%>m5*J3{Qbbv$s`ts^5Xt>TS5a8VzR3x8-2@?9^~Hub|yA%Et#%{*l2 zNr3}1Hgi4Jxt46$+Fywt-e3fA$ThPbx@#O3b=T5p!8mPmP1-Ll@42rEPp-CQU)}Rg z)J6@AQH0g*)@LklumO&+^B2!mmj!u-ppAc~Qgq%-ZQ~7%ZE@zF5B0B1Dq=nK(dU#% zUl4|irW7-`0TmkbKmLfX7N=F_U_MiCYUm+s=T^nS7nXhd?KC5U&qBus?HgPV5M)h! zfNo~LtT0eE`~*z}A;OM=%GZaTKaG658adxgmx)DDnm^gFV*i&N(UE7*YgnPekokY! zejhzhPMnD-|GRZ_5UwvAo3`I0 zFOMU9K6y#<-6XmR^`_t*tshOj$|X2z$;RM2+oDa;(}aS)AOA<2JHn#rHHl z(R)Ldj@}!x@lSw)DKk zG1!EwGHmz4Cw~UN!%Bn-4(?x}0al|{8#jTy%r?P?W#>5B?3J`rey0&)?x&@K5Uum% zIX^8A+hdO_N}zgC#N~Gvm;9GC2R{%JivA=wc^Jukp8f=+3!{vaVcHY7eH{UY2MJ(Z zQvU%rl=7OB(X|t|A0+|S2A4D53@NuBECDJ960)~Xm6M{+!s(xT{(k|%VI)bnSu+7a z1(!j(1Sz+}I04cM3%rpv!M*HY9s~cuf(I&^)AS$v^oZZLPEP^* z2nqi=Q-1(287tPeQdj}N3J(FKlO&IGPbSwi{SWu2k(W_M2@{tzV*z&xBGd$dMnAs( z8e*5VV*y4P_3q;x4&L9qzSe4a|I6(SNVrK;3E$=PC6^Rr0V4r-mpEhrLVw>(S2sGz zrT^q`yyp3`+a8NOSRu=nb&t#nnZoQubbkCKYu`TT;xAaqWl z1B3rs!(DF2z;`M!N`EEYc$S|9NDte5jxVYqhD|)xCXq?0hG9vux@~b(;KQy@5e7Dt zX+96I*X?t}zd|Hjq=dqRd zr}fHeN?(V#hVh!F9B4i8B;>5Jc)O!l6w&rWIDU1+@l)M2c<_uTOq>M|WM*}Q$cUU? zL3FU-tB(ZU=fN!#!~L9BkyX+}=3=^tj9E}5T8FJHnq4jgp?{-Cw79*!`|#seS3+BX z6C7sRXfbU0&>eAr5p6IyURi7LWkHjkDzKUxfh3{~7>8-)_jz|0QH4Y8Q=zn6?z-7o ztPTpejrp>Eh-_z6l8zAa1EGOpD$()`;kQ4;R7n#y;*?Dr3-2+eXK>ed2V`amTi8+qUhbWApa+K6i}$t7@&af9*MH%vH1YBBx%(d>HEKElD#^ zuWR{mR{`T)(rc{3WmC9GL_ZzNi*&EJlIILrK0%44?gE$p+02N#X|6i=wN&K1%48Ga{#Mv zPs!bc{`MoaB-cQ%8AbS}V^inp`$Dz=qy-W;6c5-3(EipVP|(lF`8~j0ot}w&A|V@-r`@kJf^>u2+z$3zk%4lHnmtOGKL=y~Ny8JoVg}Y*A?+4SZO!!@FT% zuiCS4B~_1cq#^WXoV$9{^t+*9oPFr+zPw=^Teq6m zcbefO<-r0J7g(5}k;)8Y=@X=E zkw9Mwn|r@@pv9?wfd zu;(AS!O;pxorgNhbJRR7ow(~9S}d8H$W5iCSRiA7FzcD!o+eZ?@4m-uX`hjgu3jNN znL}|AGLLJ+Tcu0x=LO@k!M~=a7cu`1p6#6)okSDC&Q&eV#HJ7H+TmxIk`!nOi7Mt#IT;`caI_m-3 z7m&J;LLxDNW(rQXK?cHqxfUoe<$VQJWo zYO*2dzlFEEc31%MC&$^}1wNKP5UQ2WwB;+};&j2AmsDwg@(Xj%A*j%wn!oZ*rS`f; zpxQEogr0#?Y=H^v_`bZv9JlHiiD@0Hx&d>?O2F*4_Tb0)N=SmB;2m~)hFWM2e$=jx zl>x>8^E$R$p+eDryU}?dgDyG%P==zD?*Pksz1`J5xWEFm_lhk9`%G6rzhxFVJC46;PGP21YQGI=wbZ(t4`FBW$ES_uYL$k4^%|5>Kx_cEw5T zKL=CTOhwk`-NM|j^BX{ zYra9vR;?)>2Uhc~2Gvhl*)~UiL0lv%lsr`unNMaL3~=<0HzYokpIMq37WLnOMKYGu zS$RpBI=R#QjFGd_6CEX8fD!_NtlxvMrRlL;FD9r7%N6R{&&do`mApUQ{{Z;}uvCfX zhaYbhKv&?%P6BXE?iz3#Xx`4Fc_0(#AS?z=1Hjj$s(S)r_oK;E@sTIQs+U7CyMtGJ zy>)|Y&b72M*p;>42wL-4S<*k0I^dYJHZg=(F*0D1wzd;!wa%KLxlDCD36UHm36YG? zli1az;(AAXz9V`dW%?NRD`kC}B>8z8Pn_2l|5D-eP&uDn=aPRSHSlAGXT2l!N4i5O zs9xdQ^Qyym6qzRr9`vBQUqP(u(lqNe`1PVGE_M&z@PgGFnpWz_KEI6m0))Dm zPp3rj!t!?LN#YmvSEZ8zsgE_w1sC8=6PQVurKvB3mYaUCt)J3S!v=m^!l)CxnOO2| z{O;1j;vw6yI=g`N-PJ2DI%xwEJN>}QP92)R*XwwRZtF-H8rW@@;sZ*`hPt}XdlMay zu!h&0Jgl^D|H*x9+o~Ms z63kAJD;2D^seD5vYnb)72-t(#!Xr0M&{--m-i`7OKM*D5P$QCGzljCWw!^QOy&n zm6~awzW?)w+hwf6$-4}=6TC$W6j%)G@)Hp;cZW{)r+cwss9xz8r!am0EWO4?gJRFP zIArTJrb;Tg!H?BH8=*wlC@+w^&bND)L>37YOug0I$B{jDmR5^Fg>eM2hH6@qKH+KhG)SrUf^kq>!zxIShh=|CSMf$`{ z3xA<$q&WQLlj?Z=vKQ{1%4is(Qi3>h>!7!DF&OCJZ|0n;FJYJjDzQ3 zclzO8*vx9&1HbN$??%Y3Fe|31h-h$ThmrcJ706NK2YHm0OQc@v17E*s=99j2)CvWC zR!1rrxg=o5T$z9`b7Ty34QQRBSL zt2SKX!Ahs_pu3|RITfoDz>B+LibGN5Wbi8MMcWo;AVW)&uBvT|mj+1e-Hm1{=uUeX z(VffD)``zU&u2`cyhhWfd8eYj-vVkos5LsZ-lYgltA|j@wR-@R;*PqVa=j{N0bYib zl%T6Xo6MdPTlEGu$)1_l5~ba*Gs-DwsavwHCCVxd9{DB?KZlO|$?S!*mdCDvbsJC^ zlJO4#V3m#tXkva)X>Q_ZM`77kcPo_@*_jbn9zg_nt;Pd&c$5_Ekz%M*R0!phh8PTe z{J5B_mQbc6`xOL;r4BDxWzC9Yt9Q!vLUSoy|2HYv+F^9Zl&mKnTypmQr zsBwUhGKO7zGB=1k-Bo#hJ6SY872wn|N7q5tc6lFLUl*NR<9Fb?kTp8$?FFJ(1>hPa zWj+-Y6KF*yH(8>cO|@PzmU>THwP;$qa538m~L0t3v@#BcuyL^yW$@Ro-}Ib&HDC_|HTuOznCteojD# zS6@w~+Y1(Am=clJO$M{^5*clqQNY$qavHZq55#eR+@t(A=3)_{u3vRB{pS}oY8$KK1lcTXYb@1pg|fs$%g%C=kndLD1PV|e)a9>x?G?Gz zsK1B|{?xIq)xvf69-*#xQO{9oop`N%Gaeo!R#uh(Hiwx!ybDTag9(CCzLXKI$A$3*#04++0M12qXkCi>am*a8oDroT9W)fKaXDzS}3{XPz!x z(mRd|n5yW`+|XQ$Y>GiioVX9{^`&!`C0ergR^6SWKp1|I)B6d#7`r5*`VRt7b;SwP;CidB@P`QE^Ccq>KM+hR|VR(iVOFx@}o>~$owvxN0D1oX$0f>>mNsGEKfMH2BGj}w5 z!|Du)%7PKQ%Eo2f(rR*RS5Y6^bJc(Ky37=k3XLC{u1$^9;`Z$|@G86&?SJ$Ri_SHE zj%GpZDXa9+up11UpYC6z-&;oCK|s&&Q}`g5{TQ8z;=Ry^n2a7sR-R^}5jFa!Hfuvw zHSWEXMQ4$l9S8Lqqc|m~^fLRv>a`Rxah?zl=g)T0gn5|)yOBk4vvZu?b(@PBNTgUm zdiQS_so2#j^wZ`(>=btF(vMD<3Uzg3>Iu=;1smLLIXLcnX?3T7pVQAvw zKkeB=d~=Dp$I8OR1HZ)p1AxxlncS;B?xxsIm#s8T4vg zN;y`UmPH4`nr)RyV_M>c_ZlBj|7LI6Zr3aW z>}In@XQ`+C4cp7l_-Z98O@3oftcTt84$-d|h&OiO0T|bEO9nZflHIS{1;LEG^UYIg zU>kv&c*{vXt}O$;)idXN=}rpbolpcD_t0#n93WA*-FTh2UVxR8Y&AzD|i8=y9jS)Qbj#F7<7W>Jbmt-SL0oK{HIDp z7R;ah;!)!Why~VSDB$0S_&~OW>wC9QRyc@w56N^#ini<`q)A$a4)Q8~r!9U$JIyOf z4qz_AH7mooi|$Qt28mVuX0rs*a)x%sThF(7v!8$e__e$BPBFf_HA3;*!Hy0bq@Drj z)0A0)Uv6=c8jzLxP<;l)%fyB|`!@#Z1!@}-?v}h+dLk4l?G>dfi_c&FXInS8aYZ`? zh|kq79YeI{jlNSLT44dE8!n}v+FHyS`Uin~>(oiV-GVbp%s8HlQw+#*5T>j2bvl7z zQ$M2yxH#FXkDjmuxSFjPh&B?=M4u9 zEFMAsS&dV@qNpj8={X-h561bz)L=`je2(iRpSTpE8meFy3DId{%#R!Q9u4QnW%y68 zsN+W1l3e1wt4{{9@cnIm>zxB6z3`Qw;CJY)97x+zq(2@$*tkFanK3w)TrHo0-U2&! zCdk6vLX;-+xA~!4+g`SASLv&c=vGfD*-tGV8_;ITYy3$K?V{2_h@-5WQRCwe2vUVD6>cMNreXS}cdfG%bO|TLD~V{bFzT_jaDX=L!I5Cg+#@ebq8bC+x(&D+o>c(!oT#FQceurifPB- zRD3s>xnAxgKQx6_+=eT27;r?*F4+z&lsbPz6Q$ z0KU5tm|i@3Qu~5N?OyE ztg9_vC1l*wrAQ1nOl+k(s;tO_WMFh`e7E(u@#|lsv67B&z2^c}9xKGZ%On_}$H|@m z18QlLkc3E4!`+bWG*^x zHqGBKbu3l-W8)g963HIPW}C)4waF2=zuk$wxz>%()za1cm)kF4hCjd#0MJ7vs5dw1 zn>}QLQ}MCec11T`+akK=JeisA?&zdmfW4G-pAaq@gq)APRzC`iO;=7;Ks`F|NW@18 zm?|8E?z9xa>Kgs4-n?&X?6#TENdVzvsSlSXU^28~^$)0>df4qj-lQNmAbfL4URA&z zmN|4T?_2*MGJy27d*X!q~1fvCPn zN!b<~4N$H6C!sg&)@fyZ^y#cGqt(7KfS?c;Eo)3rESG|^5xO~(xP-d2^ z5)Q;4-3T*rWn-(@5{{CZ4!6lvc&)BZh4`^XXXK%t@t%XNF*;uqVw8|JTE5wMbU0bJ zYqftr`X^g}qzPyWkwP;^Ez{=MphQz2(7~VL<%^KDcz2PbT}L>1xqmdobW1odcV{Xo z#CzBOcEConEX$jb4dCzX!OzwUWS1@acD#S}aj$DE8#;pnc?AQh1QWxq0O4j;FxZIa zv9be6mK>dIh7O1wKy=X0z^B+buAvt-?4Fh>KES7;K~T`btKKt4qNBgn_}Aca#m_AJ z-6~kPxTXpP1wlyRe?tK}OV;qMKg$wyjFS17Pr>d*CDMU=#R7WD^BAvgzzIEFDkWHWuqt5`yXUdED)1JO42=8}iuBv! zTPdEG7>kf$o6a#Oa#pm>R#02+vOimOgQ&Mr1-@r^&%ty`B|L&WTTCpGARMsc6eU4h zdk{+nRMa7^@bi+-8Yswsmri}2$8 zt62ce!H7wGVq)zH6d=z)a}ioFWLyGjXY-{5a|sp6_p{ZvIPvMSP*&W`?*%NV=|KhV zXa&Co@%xj`2DqQ$21{E@egkG?%=BYR$z_181f)YCkyFNAUe>E`0QTFn<6g3 zi5Nm+O$avHH8A84Gh@{8PWr}S>=C?hA8Cq-Pu z&U@A0WF(2edkHwm!Op6a8t`zHh+q3LOHDs6RUWx1*st0htB@$d6HqDC7GZcXRT*l8 zL{$Fzj=M?B*NKQc>I-hXAR`x7ly%F~?sMbnbH^#>Ygwk%t0PQp^(UiuBIV-KIt8b` zzQ)I#0@o&n8hi-NClh&)rdLZYXiJI}o(20BcMxSnCxdl?Lpz8M9s|_tDhxp&ArSGi67kCH zn>n;H1B*ZxpONowq0K>&Y}!YlC`;Y*e}V|Q5!4M1^^sgDswjp;`YkVO{NZOSp}PBj zY<>^uHw?^noANivLwUU9e_+=bC@UOlKt=0=7|54-Wsqq47aWnUc23Jbh4luFfYOfu zgg2>u2cCiywEedOZyQt|8nF^ojxK2?zgzAbjKy~Ce^JgU5yzldpgbukDF0jm5wnmw-TkO^e1hMp4FnU;um^Ody;1MtBv|txIK_d?TwH;? zt#R0e&M@XC1Vicy8b$jc?QzZj^Xk;s*Ovv`d8a9q4f}1rDR%qAq8Ga%cG`fbC$E^x zf()=tNQ3||iWStu2ctY>3^$5S1IC|})JT3CMz?=my`KC z5>3zSTrA)2PQ0W9AKdokK*4KyFf7-ehsPvkbLivye(me9S-uZB6EMM6>2A3g!R)yB z?ty0N6a)i_TFqap(O#kVPfjq+aQgTC=x+3=qDc#*J^Og%(6u)s`bTM#fE>W2#bz|- zRZryws&;t3YpL$-G=#e#X~}+V2e!WSBxup_+nzvm`I^>7=+;s*MJ zsrqL{zblSEDGq5Hg#V0+s5-8ik8WvLONP|?D+2squKvEaBQ;btj4_M?pHBYl{?9cj zul3$u0uH5H5Mt>y_b=@8+3ol@U-f$l;K5u z{+LO-OMg4LOA7rtDGRJN7PVJjR#nrC4Dcw}F+koT$J=M@FAvK-1;$^aT`ahAh@Q`a z!#(Q2Jr<(1EBm=mTv&~*-so)Umrp*}J4C_b=Rmk!WAQ)uQkiy&GRhm$5u&0QG6&tX z4Vsr%Mt)Ssw#_;feQQ2+whz$L$#M)eO-K3052O8gLjLU=9{SNHHgU+>F~hbb%8Z=* zHKz(59t0EaK)9Q}29!jERR0%$v2HuERvG>SE9Qg)-t<;v${RXp>US?~szD59ISH8h zfni4&J;-C+;*%3{phRypX=90#gi!JhZuBx5hGsF;T_Gs43BXXELO24a@(33+&IT%P zRKO}dp+37@?O$j$$Cg7PyPv7Xo1cei5Uz=bH<0emk!xqw;$C@~QqRJXf>-T|>J@|C!SQeup~Yoi9lKjgPQz zdQ#v38gP@I8|M8pwxJx+m8i(nZyEFOoe^O@snW2*up%=2{VC* zkgHfQ=R;Gz;))RH-jizQe`#1vtRbatf!_v72|)3l2O{MZGs_>;Uy|+e^H)cxaA70% z#7(^J&GilAxk(}t5zW3-xm^=wA2XyqULH2z(Gt(V=6{Y|P<|2|x&3fH7Z{30Ag^Bj~sFuimfGc*l>wmER4d8MYkeu>y5g`(`XRn8)Y ztTL&oK;+ak<1QgjUblWs)vADD_wz;EhUml~e{ zh(@Axa(A*e*8HjlM}6fyxew(0$$*UtTIs~|7=LpfOaaf`vmt;RQ(O`@s&%jJg272x z;245Y?HB?W?TF=iqZhP_Cma~b9y$C_8%QG?kgtCb0j7F1)&-H4;I8w}E}? zLVX~%PHEQ5r2U8NHFQ42KKfLrX{mQ5P>Das^{-ibKhDSK^2T}i?yH&x1$P@Qw27Rm zzBia*7d*D5oYv|kOn~b=+-?K8m^RK1dx3BZ%<5sK=(5@a2yT@f`Qu+*2~`ivx`p~u zb>AuvB)-DiMRqXB+J1#S5kZ#I$+AzzpUSV-oHR9)tDETH>cx@fcd2o?z_m7k zyD%c5dFKmlP~opayLb6DHd3zo;&74oS%=-JZMbvhnFX~9Q6F_fVehQj1m82YDGj&I z-lE0>X@Aj}c#bQixfhsAZPt-)7je-W12Ek{B)g8u*3?>xQ&NbJ}oy=#*+w~ez zO>Mx4_N*;fz;y~O-fw>b1><_w0G*w9z$YvKzUvlb;P9s8B)o_B!I0z(J32Z_S_Q+& zNwUXGo&A1M2Ha2=7!kz zVmas{gzL*N9@y#0zz_^5LJ!Ew2cY%WHGDjLO%l8l^DiA#kW89dJ*zd3AY$JN$%zQ3 zDp|WwKjjM-KR@xFKXaM)iEJaAigYp6S+jW2KN}#7k@1_{yfj#?v|eSy_Q+ zVf=)=dji26NFjXdCbi3Xz#iS&X1<0EC>ufx#P2Y}zY*&KE^Vg>n^!H>e|;DSWt@SJ zt^X=Ytj+&b6g{Do_pfc^i+A2;e}8I(r-g{1>x9F5C2m7KODjpMB3Rb5GhTqD2s+3p z>_w@R&v_fI4hozvkp#VKn@jLE<&5zG=e;ertYdKdURaDOZg2ABOceH<+BdiBX1 zwCw@EO%iVPUoDjR`>z(#4&5?<+`B844Fd#zS`qI#nqC+i=E(fZF6Ammn;isKqI?*F z62~R88?BYYt8`FT;+GEBL9ZO6v@CEW2xw+?oXI}zg@6&F&rk0T`)VW~A61qXl7B|B}` zT7dzra5aoII%dy%mI+uq5`IZf(#PO3uiS>P%}c?7=72wYfZ#JKFDTPX%PqD1(Wfta!qOzt9o2^YlCkeBT&XWXY#0Y)1N5&91C*XXxxPyGH z|EQ{>rEbcaEDLY0ezU?P4``PsQr$5r_XSN8k;YKjVaosmNtXF+hh){2camOANM)+K z_PGe=5bip(=aak*WEoeEGt@s0b#g0>b);KFdJtxZ8^)2v&3I(Y)1##=4Dd+Z8q~)4 zN&8mRKE4k8lC;@)(iMSlkRcJ2=TUu%aB& z#>Vy&2Ymb|(oAE!?D(TOwY|L9_SDm~()SOPR8b5GNfeXFJyPZbxPUUOygnNu&_YEm z{9ZzB0~Dnka3$L?B*}-Vl;h4imTMnRjMtbrz8@IG!7k>7cgzHKGzy#~cz~+vZrat= zCOLVd5^5wnap>F1WOx7&rf$RR9C*hy82Ufq+L8$mc!fc}6j+Skwdbc;|M7_=-NbG6 zAJ>Knu!Do^$6G@k{ruU83eD8=PwTcJp_uFzyC6Unl&GZ?e*@$ktseecj>HNeK!M>N zk@CE!ABdJBB??f&fDZtNDOQx(FKlabQW;rscW#5y$xo>g1rP!!)~4j9w{tqX zd3k(N%C%|dwMH5$9_iynO5BqNb;Oi;J9MV}5w<_J{uzPuQbIa%No~KN>1e8)oGF+PUq5OY8`1NY=Ea%^l9aYq2-%nmC0B6ej^ODZ$$UOO}%}>AyXi zxBj%ykdvm)|lcnOM|7Yeb=Gg0_Aa$Q#S z=ZAb_&JgQ)9$7f>W2Zbum97vGm{}f+{X=nSCfQwNi5PjZFH%M*+c6#Tr@Ep>u6#%| z&~TXF_(l#wKzH3?w9N@teW6s)XS(aHrp_;W60$?uO{l$l2IbF~o=#t;u-V`p2_;pc*@Zp{-#@O5Op zDZnd*Yonj7ZR4=Eg$KDGFrkVusqE*N-lpQHC5qZW%^MRmA&aZ5fZqTsiDp`%?ow_W z*U}mATbcyue2dxxNO{*+NQKj>!NbM6nZbah9Py3h_-*$WdNubHS}5GP^}TxAoZw<8 zP|Akg<3uEEqMc-pa%TDJ+*)0YD;Eq0BBz?sN`%jlF2)klDkwj{$u`s2Lwawta##_OvgluxCZLvR)tf4JYl|aeT?Bm`+0pn@1_AJ1JjBPA&+^Q%!H{m zK>viD7p;a_6#F3?_lHlv>{X<_s1t-(R9G>Pctn%tajHA8w44rbRZqEL{AStLOA@kx zwg20Onv4SSA_#0G+RBS!4~w@^_t8j*+w82RXZ3i)<|N%oX2gf27`)`LtSL$aA5vo7 zQzHEyE!r%r3Lj~T2CBB5vSQtB`ynqps&oWpt$EVkMdUgdvezTSxXmc~(_WK{;QkEA zIXDM?;nyVgXl6F|>dG%5B?q;ay2ww37Spf#{sU^3VoW*$LE|l}YaAqkAJ7->g#sZo zQ8sviSnGot{FDkANW&H4hmp<q6Bn#@IPB2WkZtJ)LfGBq)2G!v=LidLc zE#QvBUh8B6@el6Wu3Puylbu3^o=bn-`^EOBXmxse5P1kM$XPcza#!b&DTL;|G5PZ- z4xuFpdqHq03v{p2BpmnEru2pWKf5-5+*1{uZ>wBFxK=_gq(%27$@2csYsML%Kra-@ zja5HM476QFFi0XrGwu3cstxB27;Tt(AIe;REE)abX^{LIP{W*qH3p4c(si2x`cZs{n2xwtf! zr&z?S`F4DFW!027Z||LCQe^PuO%FrxvXoUc6Dwhxv{42MaELe2-(0Z(S0ako23}D9 z?st9~bwR?e{~EoEXVlaCoo-g8FN!lBlHSsNki6+6D;tX5{gW*dmS*4zCY;M<{HiXK zHx(&;7$!9aBE*zdq{tTw@b|}q4)V}N#K54=D)VjW=@JE71s$fF%jniri_Z;S<2C+{ zftqRTo5(p8sXJk&V=)XG`&s=}Fh@F1JG03Y2>4yQs@x$PbQTGIj;45j=`2xxnZ|^F z4H>`JrRV8kZHAoPObnUA) zt2wW>u4%C8leHjDiU4&jOnczRD9iRw(OI3v@;`kzexB=d!WMZH9RyT4NXN-%SNVFi zS50hmeoGu+ddpnW(TtcVmj{Y2882wKiPqglA*J^)->5P`!H$7d{-k zb$9-lO{-^MRIi|Zlb2yC^!g|Se!k%pMly7|IVGo6;jnbjeGpFCQTBWknY-9J5JhOqkQ`EoTQ?L#b znh1(+Q`fVC)ngSXv%UMV0keEK(^s(290k<0>yCpcYI%tlfm@nv&3G3c-fZi( z4U$HWC`>7}r-W|LiEIQ)wlUmwz_9XSN?Y@zHqK_*K;23NXB~lSCqkRdQ$2!FVo0+x zM#n2`Jzhkr=#4w@Ff(2-Y=>6sUnk8U1mNkft|p;T3bEq4yJ^$o4AR7mDt{))P}>o9 z_&gArw(fC?VTFB}n|QYmx7=})5V1OYiZCb8Us%dbOjD~FT4jlRJ>`202Z1uGK8#eo}U_I&L^<`Df ztDU6~bwW{|?5P1Rt>X(;;(WMmY}uSbc=%>WeVV#%aDLiE*U_7gYl3W~5NE0mH<6)c z7CM4yZ`7wjsG|ejC4*C3HMbnkrE5~HBAXDFkQgbJlw)CAuB)%9kS2-3kW2QyQ5YrF zq2cH-5N0*h<+*C=FevB3yXaQhM!YpCP}2}ecsb`6cm928k<`C?jvR~#zgl;#gzsR; zzIbjP!{NSUv(b5fk|>_gDhQt``_eA}K_w|KQ((>POjd}!M@70^n2R&4VYEI$-uwne&uU2hw}0OqPzwnMgXC>6do3u9 z=&Jc2TA9FlTKQHH*JXR;~K9Qp73;4lDoN`46(P0L^yKpGlBWD%yC z2k`oZ)SsA?``-zSu>dv5lwzWPF`^ZJ05rh(`h&Ht?`{P4mjp}Q=0r3hkdN6@kKn>S zGofHjsGe+sA3it@#FS2>1G~0_Vo5hzP|BkbNluQ*kVI5HpI;xJYhyW*s@11r@dahD zXNM~bEliH&!^bTi4nMQI-!5iOB;zwPv$}nJ9$qhFEtr}v^VkSb7|AdH27pHPW!M1^ z46qZ>5|tXvyGSRmyF1bf_Kwaj&@Qt&1-xADo-TujesJ^fy?7fcTlTJ_(aQHLfj1oW zjm)r18C}H&pn|Hd*dMXR$skieJlyXN^!>YAJkbdsvJ?w}4GMA=Pw*P^FwkR5tA{vGP~g`w?4U_lauL0W`{ycP<RU59`P|oE)xqH!q>YC0ncM^zs@37 zd@nU0c{7#}TFy~7XcepFBtc@9GT=Ib`4K51LkC>6r!`Dh;;B(k%JU_)zGnlOhd_c+ zs|xtK;&VghY9A$bAO>Gasz8B3Vzf_h`*Y-R(fFR(gn_8V#9Of3m}g@dh1qL)5CYxP zBa;}VyQ@6;#s~f(S^MR7xH%Z)}tCqQ2io=AwuEkF;(s&&PoT&h}@~> z_?7a^*ItJtn=hwVh>nJ&1*L1C@oD;BhX`?@x_DBU3C!j`c5|w1j#oe(e<pEJq}~0nM20!QS@H4ea7u zUV+;cyXPeGN8^ z287MgL&?wLWXg~Sv!MDn0F$> zmhKUU-c(m)7;QxC6d-cN%D}Z=-1%hGG@U%gJK^AnqXFaIf85n9FK@RzF^L)OF3g(I zbkk5@N}!Q;(2I^wi_>xrOFZ%Wr$*Z2pIfw}@yf)M-829$P?Hm<#7K3rH#mB zi6#Y0o<6tTlC9KMk}!X9(smTE>LY7}sC0Nh&F-RhMZ2r@0@%7~uU{y84-G!dOVr}Ug zme70z@$Sbm>UGHj>X22^P1ak|o5KkB<4V@t2_)@K`lC?mHM zpGg~V^TT{>&*3xaQXn;SLeF|K4I3uQjnEM@WV(R*uUTlqtF> z`g93MFc5cHy6x+iOSCG*RSwwKv0Z0D*R$EsEW5m;HuR*s6as#6g4n{&2KH68AKMIu0U^6QE#I`V)& zTV?!OrT8tPMXig*e#5T?|LP7Z@Vve9^@)NfBOh)H$^46LWV zT>~Y0-WhqFG~xYN^!i#&(QCGJ+jGAx09%QcT0hEts$J0SVJwf6Dr@O>N4Oz>ctEzZ zGqL3OlIAoPvvkMWRb!QY(TK*|kE!TJjMzPAv=lGh%zwNXu9QTo?nQku=^c(}$XW6b zz`NQNH}PyRZEii1Ej+hZCqm>=09sZ?cxQSN>!2@fR!RzqN~d;9{&sB?KQ}+BFGFFM z0Y{4!$p~`jR#>(=F%Ks?!a!G_^Bb+gW+Gk$YA3xi5E*iu_#x5k>oV$bJBB}1vroaQ zb?FEPK;cxW9$M-y{{F1$3!!91B)V&XG*}ti0_tKT=_5N1KKPrE>?WMeAtr^g98$^H zFFXKc#|qy6zX;3$$ic!PdLIY4eIqG>7(4$5AU{ z{$tPU0R~X;wG6D85{A3qBl)S5|HD%(+W$$$|NBE}ijWxqqNS=Gpa74Og6)iN(v)@P zD)&zed$zT;{dWf82*4H&AvzJWQ_S(J2NZ_WUiv?xd>#-EhpN0~H^%Y;p$c zfrV~mS|obVv&{K#y&N3a6bzaolSQqUY8}yNpEVTl8EEZhLHi#qhyg|n1)uTf=Q!!j zwIEA$r1Jmp6n}g$1)xk71e)){!r5Z{k(xYhN%FdEI+(l&CSIf(^lapp9~O9Ticp8u z548AQ7~BX(t-Z#AMS2g+yqzLH}PhC z#2x1FmCTp6{^tmO+ybzZLUSFX3G*|dOW0S**I4^!e+QC^3<5g9ZzYz(h{!rqe=A5WTf3N}J=e@)IcAdl$~ipFI>eTY{(*5MoqtVp!Mj`D4IAXd zVTYuxfTlOXJ^_ABT_BF&6efzM0QnrB@WXqOH$6v(054NL8%4%#xA$k=nR{QBVF_fG z3E7Cd)4Cg%Xr5eRZ5}#q6xZln5_EVZh4z1cKTr{0! z)JjTvC5L>#A{$Py8OP11OdWZ$?>xeRcHJK@F{1b?u52I7T~O{k&$jOwzD*BjU%*=Q zNBdshEIK|4o!SUQIXZ2__j%EQ`^_>`JcWE~6jgBPv2Y1bTinCSrS2xjE_(bf$_Eb* z7b%hcZ8z7WP#<$>tG!9c;MnD#af1@Ols$Q6RU26#T)1ANqfb3vFfwb;H|_*c;6NVP zm2aJyZBRi^Z!+reG@tcU)*iilS$sKCEi{16w0hF0c8lVdyp$U;$B4X2RE@L`?eeeJ z0{+&Akv?lSm$f0Aw}Xs1<6kwE0gmQhuo?rC_o?7}mhFcrJ`+85=Rd z?aP4!{vx{;Kbji)_>)>CzSeJU2~hmQABt@^BFqJ=wzUrf73wS=S@sz%ijIVwa(OO_ zU7b{E6)4^BkYVfL_%84*ng2sAc!6yUuF>1{FVXvWo$d-otdxOp>rC+DRC-`gL3OAi+?pq>E&bqAp|<8bfY;gvp0$w2PtCvmnC z4E{+_`FO*^EIz5)LF5@TbViIN$^Z_3sWh_fxzbEZjOPz3!>aM+2;b}JCgeaIib=4h z?8>1ZN^9fG_d)8hNnjH^y*4tm0HOjBReFSuG*g6}lU*>PAjeEJKQsl~!@L&8C^^9m zAYY4R5z&gU>t_4kzvBL%k(u{J%jB|=BF3kuRUE%``i0Bzon=6Fm7bqSl>17^h zzBZMkq>c8kareg85xKbyWaD>bizoEo0m~@@d(a#Zu);eH*MAl{*t$rBFw(R3#q6NU zu&2gDONe_H>`%N0RSAqF@?mnT4Xo0Ut)X!mw+x{aS;3S8asrsFDol)+i}UjUJW)wm zo=O5e!hYW6L?^b5*8AH$T;gyrFJ+W}Fs^O=PmfS~_I_Kr(oW-S6>3q@+{a&^0Cma3 z^=T;%DDlUIB8t|sS*2?$T_?#5OdJj6iWgE&&;9H5z$zQPv%KV2kxRX5nN-u&eBw@- zBcC}vYHFg z25KC@@nr5LJ%$CO)4Z+TF9{9`WWe+o%%Il7?WUAnp%5QTI>+22o?jE?>)jv5CZEFW z79@4Q+iV`S-da&HqSr?+ihdZTBa7nljV0c4%h8%igTt4h*z#z4BG;_UNoQM7>g}-W zL*+A(u2a;wuC8+`Yqeze|k$Gq>i0!~xZUP-&XV`5@6@5r~xreDdB=Fii7X|Jg5# zLBb-S?G%H@YcnZ`w4Ka+fF<>>X8r@A6(N7a!wu!Be8AjWWHS5{PHIDDp`bqUkWI_2 zV2Hc1zrjr5XwUz{;;bP_;o+oR<=(J2fEP0$5<^I=rb%Z=9;pAu0Dz-u`sNAQ3Xj%< z4gTeMTu<8d@bmkW#?SuwB2DPQkm9It_68*%;6V{({{OD&lnl9#h-w4tYX?SCdVuWl zjG}uC(e^(K%^m;$nbK+bRJ4GFr2%EOK%xR6{5ISa{va5CJ{rZeMDY#cgcTew@BKwwZ%2mgd-W;&GdDC0W}>s5lAy(9^5b|tVfS_dAK7df`~y7 zIIGV1`M58C;(*9kJ-TRs-H}Xufx7uxqutokszNdlv@l1cd_0!Ntr2da9>rfT-e6R{ zf=5U9p{dS;NsF|$7Fl)}QIQE`M!^U`+ERB=(BV{hc@mL0I&v*{HEtrt^j%H-8~(t4 zh1}a~uXL3vhmTPxa=ci1mM*$7R!6%rKQ=2B&y=4lSbA1FJ{oVs@$gHtz=}D8j$)eG zG$0FD+9F7<`=y>(stp^ZOJdWDu5KLJ>;bVOAGTMEILH6q{Z^_A(8VuMy=dgBb{V*< zx5k%ASIF0T_BTG3Mw2)8qAXFdK$z*CVAW+iW*Mg8kfPSP;+r^#L8hmTo(Nk0>6sNv zDtBOk^M|Pg(ko^T;>lAUJCf+aJpKuLticqJwlp}2pHr<7GT3{x?jjNlHN{%NxWs9u zFml~pawi#j$1ed5+MTHD-!6Cnm-gzw%M9z_W3D=k-fQ)5;t+iSdK{=&Mmtw||h<*PllJE>*4;=Gvd)ccB;7eW?KV3a+AV&>%k=$kWgW z311yUTTit2|FUtE14cQ`rq#ip2Y>*oV)QS&fmvD|JT`;*w=#c=3;Y>(`5P4@EWV3w zo=?e{FM!fTODUcXB0ici<>!`whXo#{JWh|4)_`Ka=Kzs-@`p_z@OF}MrRzBwlVG2uiCXll#sZ39sy3P=xf_-jjt|1y_7rt zQa^m-61A zcwZ(pNEFQ%rYea0SmO4CO`9^5$K&;e%(zR)3>DF7#nUs=U9hp*N+BEdX?C!I$#=ol z`Js_&c*x!}fFt-u^?8)>-}0dXt%Rarit!%LFn>`;p8G2;wU{)-w)ObVn9|*hTJJ8S zUow{fcaXR)d1n;~`c7Hl+zgom_j`P62Od{I4>`xoKvA0G z8G`TKvv&60O}sOC%@pdou=Rb|JBqI&XDMP~)T&Z9OV)-m8h02!>fm_oaVGV^g^_7s z{>b;oi_7QSSX%oKZ@^Dt+lP|l@|ar@9v^YGY<$^7A_`R;rE|Fkv0z45#pcb|NyPcu z{g4+YlhgL&x>o@+#Zu4(zWTb1;Ls)e=yBt@Co&u}+g9&k4Y!_atg4jsEmc@w$OR6| zyb}lD3%6qScidwmBbA6D#Z~Fu{~hq(U9bpdRg6CYvo;+#$x~SY;&I- z2C)@;TjVA){roExSJVF0uMJFjbImA}$na6i1KF76Rjpp-x6-o+u+Qf#-!~J!|218d z{(i=u>xw!)dr?q2NcNe_w`AB@!#R#-=IDg$fg?U{wO?`9 zYMlAXNR((Xudt8#KyGUd-q3m<$)%iK$$LtsNsPpAkOzlgI2sVtoH3@%ed;5-?6I~Q z4@O(=Ad=W%4G5p|voEQVXNVSrk7MA-U@a(tOV;87++CvLX{@yjy(nhBb_mcYbl$elJ!-cUk# z?k@R4uKuizs*oSV-~a*LYqbRG{e2oJMg3AiBg#;w0N?*}A%N$L(IYS=z<^zeHhL#M z*teH#f7dON38-~3onx4bz<4G)*mYl@Z76%3R+(V#bFq*S*#zR_=80jJsT*Uyuz9Sj zw#+blX{-yT{)%vdej-vrDMUqz;O zkwB&^Ao>K%A!UO32HCHb%Z~~hMpoU=jksW}{$oB89x5V(n_ z_k%J>(na|#VWC$HK0+aZ+WoW74JaxMBdkj?^{;wdxy!2mmC8aXc*Hw*^Y5HEeNu6r zpaE!`mz(+)WBVwDY2s57)6Cnh8uj$XV80z6liFDwk*Ckr5X=n>mGLypY1CZpp48GXY<4~7l7gg)+?SDG9s?w{8 zYy3AAg*gz`yQAucjbJe+K8Z+kvFzs54aEgqcsn|d{g5DXO5B0e>sLSIAmE}5lD8=Iw@AUHat z2vHqesBMC(l(!X@p`8=jkmGiK_lw~La`{+l+NlkM2@G|g=_at<7g^D&Uh?A|BOt}t zR@=|k?sXHYI>+pdrQ{Q4WL80OWnQ`HHKd3tcQ`<;6x@k*NOttx1&N4HO_DS==Tu%I zuK^WL?%{ZoPk`~|G@~cC)acG}@DrT28D|JKmZFzlp5$Gigqnx_d+{*Th6a1GzxPPk zU5O+z3z_j~#TsEAK5m=_t9qU0w?>`AJb`l(arPY|67h0 zS|{pJuJi!LXjz?khVM&_3POsjsDJ0`9|9NeS60CH{(0avmS}$XWQLbQ3z%ST{Zb++a$+`Gi7T(6OGXR^h|ptP@ANY zMjB1wWwN@IoRsW#BpEb6D~$%Wt#kOHteSXT87;p)%Y1ACy&jzypf_TsXaDN?2PCROffjro=f~q4_3XcwFS$!ScqBQP z7yo*^fBqEIR=Rr;u1ROZwuIt$dJ9vn);IWMr%$;VQn#gXGx+8kI@zxZ4fNG!A%Xim z>jWS{COTKuyE{E?l=f16v9_#+7wA&=82pfgSNWh+^d$}W<~iI6M@aq=31%ERiN`VX z=mya@+I#e*D{hra_^~A-giETB_DnQo+;0r>X9Zw3)$~JtML?Gh3KGJwP}(oNPW^0` zCu%=Y^AEkAf?R-u`%?^hX0p&1+Wnspw7&w0{lC6`O_ZyU`|xP+^5%I#k6Xo4|Jizy z6NUY=Wj=sBMno7C3u={p!?w+9o%pxC;ktz+K}T)>VIN69ocS&D=9Y+JQ91LUi4QaY z9sv%jSoRGDE;}pzpRfQ8Fo1wHs4E7dBj#mD;mL4j+w}i{{JH%I^-m#*0I&cHyI%T9 zx^~u!1p@bg#Q=p+0&xFrlm;mQr3h%3x$dzE%v#!BvY#6;VoPGxrq9uDAi!N_enyU~ zz&4rxyA&44R{$UabX<`ix_;LO8OnY59w>I!nE~wG@ z*$wPoqKVgmTz3Ly_1XB(uz%uPE{g0>xR}j=IgnVl{~a@}XlrdPR3~5^*zx}Ma5CY( z*LQZjU4;O{Sc5J9(M9~l=#XLht#3i_OdR@0Cxgva_q5W*D${EhhW`b)EOFlk(#qj6#MnSFF(oeJ8jIF>pE+7le;c@APFZ0(1o1y+OZaMQldtju*J%yP z6vA5TgD&6&5bJ%@;TT(x^MyNM$3YMJva@;nd^$FEQit!VhLPE8Cm*R;Y>mc|)gbKL zyhxR$GF!Er-}nP0RkJJaxUAI-_KF>?ngQqEf&M+mN`-273>qVhy!08bz~k45@aY%Q znhDuM;f70Rs&FYp*weiS?~Su7vYOj0&z9xM$GtNu2uI}X`I>!VDslm$dJeza20bgC}!4Vt@%Cy%5)e}9a%vo zC*eOUTU}%BJ=#Ug8ohpiJIEGzQO-_cgqz%}hYFuOT#I!Tm4l=FaE!mWxgS064=`l| z*A-m&K7iaM2c=?bbM3lRQm=kiH^*F%2rSR45xRQ=)2@NB8Vq>rJybH+Xs|02X#k2A zbQf5Wi`g*Nf|Wx?uXH9UR%63Dg-fj72-WwfeKVN)v%e?*1AQFd#l5?^vc<7Nc`hNJ zL;lJ|{{rBU5C+u{>Amu-d5!!{44ibKozmQ;(*dK^lK0(6*%`; z(aW_#$Ktyyq|x(o<(e%XWM{*^wxyW&P-und!L^oNKK<-$S#HaK(#luZKx(j1D=^hU zQYhlW7Z5%+#XI?AGsJ^2)u9NEdq&W~V$YHck>ZJF&QxNrYxXZ7`*S44{f2@a6v9|I1+c6g{pG+W^CDI`{JT%&tOnzCvY* z2>^ubRGzGkB8{ZMRG`1=WzC;N)(oyKjn++zA)3uuIOMY<^c^OQ8`O0&tCB75x%Jg= z%%VSyc$`g-TWX zUm8q89mWP}cnoPlO>JhPr8=g18vqDw@frPf9d;a1(na~vbKXT;oyA=i!dSHrV#WRTD-|^fRE_>tNc0|2FW=IR0HkIuC zP0hNOEUMp@=h3n&F;|Jvg@H+Y<*I(9C<*L!>=x;Rs<%C~q~dfq)9t&rbN+ZevBmJB z@UZxFb5~Z!lD@g!j=eQn&CI667kG)gUnu`1^;xA`u*!kY0LXBUxYQf<^wRbCTR_j{ z>7wV?#C1`T{-8hfo?1!O3qpq&8wG;Te{h{vgPPlH)TD|a4W9kET7iOxZfddKWY{#g zVq5r*)%RjEnBAzyEce{_#w^ENCOb)QRxu9&3HY(sv=)8wu`}Y?4JjMUb;L4`DE-eOM|ctK>pFwp<)zF z8Ap+tq+m$sM{H>tGeEC#`n4?a&s3Q~wmDhYgIjm~k79Q9h19z83b6^E2%HZt5s*7saYQy+j&lkuL%rAY!B*2q^C%PFb z?pW&)m{AO>h@^eH|AlU9#gW5qu}t*^W`aEms%OY?_(#~354C8gehvA3QtE4)HjCq# z0@{c#reux)2RIPvKIcxAp#SxTIpoPt;)wyq3PK2u%bSDEOdm6x`4YN^X6~d}9&1+1 zf!QugahDN^Q4V0ZK@DeQm4t$G{QNzA{d-zi>}viM^C1$n4YTkoswJq?dvR17@IQF~0;^v>sUZ-K- zB$pwnd!gS)cf_N1Q2H5Mq=<>dW;~|et_Hg>a0mIse$TXxE$CmlaVJ#kAxnhrV6r>A z7pC%KMC%1Cy-V~6z5R%ZQ;(v^3zWI`st3DycKM+CMa`Bq!WrS%kI8ck)jbAu%&IM`eJEO0J3pb4MRgohl$r3mvx?8S0)a>fR-+l`mOW-T?kq2bp8t5$CPMJwWfhDS71LGIZY*3`Q^r z6;>Y@0ZefI2=;E&8;t{ILehn!Kjb2J_O>#@&7V_G*Wki9{!nwvRaiUqcTjOT+$Tjr z&`t9=B&vHA7=yI0kA;420I0QqH zcM6pcXyb#u*nbYLf(l>?4)xlzFagnzBC?3}4Mn%W>gFFNrUx)UfO~KLOa=~_3(`4r@ZUk69vKVULZmz01bNodusErLgJFYxt)dZVL5Zx7)Z+r@Eu5BgHi7^ zxFXl^)5EouWz+|Flg;hcOm8cTQ2Wh^Z8>sujnkZBgf0!i%LpDSpj&7pc%BwXbiOai z)=u1==7%4z6XZel5W?19O0R~XDdu47yPqYHDg|KZ|2|m|j|oVf`pJf$#4A|ns#|QR zY88iYYU{ddZNL|URCM6W_#L}<(2#6)TVASKQeM^*vi!k7>5Z2Qb8OLfkXLYEX=2q` zOPf*Ia)XB&tF6bHg<;0&w&=l?a^?1)$ne_qh_C9xMS}xIb$dgNOEEPKWEbFLV4-{E zi!%N5U_aDsmghPRJ-740mT$YPE(`ZS6%>IIrHMoI9AM4c@uk2(T*lYc5jqWwfIV1Y zQUVhDU09O^>%Eval=Un7LrL8OS2FnQOtv%uF{_m}Kc;B}A5!PapMKGAB(r~pA*F5F zXfyihhw}Qc4Y#%jdY8Zoz%2)B%^KEfi zw49hf;N{Ug(Z}qXG;mVv=Q%{`?*_UjEqLqM8b)hYD1HKOvPN8*AZzBGejh;ECzaG+ zASF=>tU$qbjqimN52isT?)k1n_WTqEW*bu_sg3l`*Sov>&Q{)g#tL6~C^3s$gpoem z3ogO$Wy0w}LwAW;vu#T4(zgi}?oO7%|Fy&vy6oz`oa95b%aO$0%Ee-R><|-QJ;Div z42nKP&G`;=Os6Gq@oU+r1Z(;-60Ie$DNrPWgWkTtfCHwwyQ-E{vDq51J>|SBo(J#z z3>3>2jB4wxJ3`!z!LVHILq~LR0S}JG79YM-sKJkfnrJBhW-2OQzf7rZ8vjBj3@3tu z@kt4kljqRWgE%=Td^@WbLm-tbltc={U8SHU0D}*VU1Jtz;SKreKp0^-5yFG|xx|;e z5urv8lqiA&jahP`DMC4^Gro)9BKU3E93c%;>WhH~?bHg@Vhxv=f?LpCEGo0BQ?%*_(tU*h69cd?xwo}`OJ@UBpypd-oLkDLg47BW@a3GJ1BG1OW;po zM$m*9g}`q@({ag$z6Tm2H?_aWufTvDF)Z(#y68iL2v6hpBDkOv4et)D z{0w7QEfmuV325iM<6J(I>Qde$$HRGp;;{J@RYaJz=Zwkblbo^Q!dNb=hjs;NYg zO^;Bhp}O+H4T)H)*H6ZcA-rX5R1MCb25c^l@S{oIi|kOY%Z;AjNb}ry&P_*E9WP7- z6T<{j^A*=-g(-6((WJ=aL`VCORQ}j@UYOYQ%p!lKvNVhUeqTw&Rdtn%{HBnPCYiiXc-dh)whYRidTruq|QooFSac1&nGZ^brBk zW^l>R#bQw0Pg{LYW8v=n!AAvv0c!F9kO8~(vINc5G0L>|`oGh0hGo-HdDu3J8H``R zYuPW6eWMjXIx323sUnjfbtQzh^XQyU&+A|)}|Up>2Wx=i!p1}ssNr? z|CqQ7rg?#eN~Qb|wnF;c-{H&3fwDcrqL}MPb1QUNqWz!CsC=@Sh9I6rTWpAxpDFOL zV`0uIy^>HOEFk-usDegRsFWOlQdD@M`~mbj=8Nfwl7lkUG<{6Ec70p9s}Vg%_!TN8 zqdl7k++2irJ=#3Enqc_Z+y3l>Xa>Z8ERY%=PUuy9*02o@pI@E%ME z!PE%Rfa34`p>mxue6TvdoKGDM_?hr0o@!y6aW+*Ek&(J`M9HSrULDyv#pYQ9AF(y} z=&~$cpmeg_ek_y>E>9v6(m`0a;4xu)WBr(LHBG8SCmMxfr`#j;UOI;_F#^Iqm_-im z(;*e4Yz8z`*pTz>CSPl^hM}7xN2t5+cmhhPaBcD{{v7SWoL6IZbB0%R?df=!o<&rU z&*m>#a*z)q*=t`wr!tu+*!YQ_#&cyv!WWz)3X&9Gnt7;Us&i=!PziXUCng>`E!&Bl zeDU~oz6)3Tgr~^zH%9O1+m=!qwwlkNH7!y$e6WvuhxD}Nte1pkyr}s{Zwt15<7i}C zp*)Hq8C{wWmCUXuc~tKhsm0RU&#nvHDtgV!c6$hCJq=a5ViN` zvf?_!(~QfJ)yq%Z`MOV3v|Aog?p~1QQdI*I?w>+qNbjKg9C15|hi zmy9XS5G#dcfZ%}&W6A%lZPx%5aB$nIWglQUe!-a_@GAgT6XyY-84e9wW0N9$uuZ7< zK>7_k$x)EV0sk z62meR@y|r|R`=bYEet5ECU00MJp@?Y@nbPgytun#dpVbYTf7mlbZ64{%z5 z3DtkPm`$-nP?Ycpfx_s^3&$UsS3yw!#IrO|nK0<_U`ChdXog23TyDY7L_@2irvK0s z7N}lWgz%s%lk#_z8|z2ke_{_Fs8D#+P3puE$KR@+ZJ+DG2~`d8A4VLhbYq7aBF`H z`0ehN?sz6!TbFUSN>{*1cX8k5j@XTm3PB{7CVgO#Ql45|Z$L;M@)r+#1xDYm8w|hq zd*Z`z!Vm2+`=Y$l#~G)7T^($@a-`{huoIyG6XWQMn(DSdeFw1^Sgw=J(j{>uw|4&E z5u$rr#SC0UiHd!*0)qK}-9BoxMvPeB-ry@wo*wtj`P||H%lkG@{65p29)%4HEb&K( zbx_VbtBFGw5B!wi^7JyAk^f3gQzsdMx^n^rp(}XnO|*i5r&M(&dmGP4fqh&6rEITPk4s#ncNZp1o=3&(y^mMS$x5U&qYN ztOMaV^fI0)#$=l+ts1{Zo-A#EnmBi?T6u{rdb#J6f|6L8d`oTCQV_(`hd-W?4Sm zWmzN?4OKItA4}h!!*0py>Ny*Bau(<~17^5}Zi{!9t{2*R3Y6Kj`ZGtwG*v4cj>th{ z)7nN1xA@$#IZ@5x`XU=H-D`o9-H_tdP4pRXQfv&!K$l;3nGu1mQU!> z$A5i%wTdwJ>-!oJ)6nw{g-5I#Z;1aH<@`cko)WfIZPeDkFf zUl_5FTwb#$QiudK?lmuI2jj@5zKkE><7*6W8t7#*%W-LJBtBygscRJd@2?AzcZ3pQ z;#cTpMhtm)hmSo|G&z_dM0gNJ!&e-3X7)Gq_Ydz>I3zekjsqJ~DWmkbru5JTbvi<^ z0y$f(V#YNheLeV{<&f_dbE?u;u67Mcj6%l~raTPhv%8@B%=RtVyFmo$L+KaCPoU-x z;H>uubgQ{&P2EpgK3v{6QlYgw#qsAILfl`19G#%J&@Yq_ok|I05ZkdiOmRJ#*3St+ zZB9_+92ZlQUhKE}ADeFq;#gkYxkrNHa}T7$$xIX=ym&nkBKO3kX4SMz)+4*E@XYv* zB2UP*4P~u=4>Ve5sCsa;!V?G;tRueutWw{|XK=j}HIP5c=R+Id3I%{hjF$St&L@=c z4tWF?0wOW_WEH3KhAM=|j7>$!V~Bd~-4Q_qKt_GQ^x^N*B(gAJG~I+iaUsI;&K(1F z=m=H+6M?=bLSchQcwlLPg?M^SI~?cyoqvC-nH#HZG2loZ4@F%k{I7v7*JM+lFE5bb8!|5)C>1 z-CL#W?X}{MNmC#pxqglHXlm1U!*gwWs=3xg!9WJm6qYq;%h4*|=H`xeL4`uj&Zlqd zD+dzR@y}B>gaA?`QBpA8eQAmvUSj4u)&O+qI!j`1{}d)*(1I=Qfbz(7CaO-+Y(-jF zpEvL&O-eXn0j3XeL={P05Si9L=MMu|4*=*>8_w*NAfjd{bs(AKOE@>{L)DMCkze&WLu(^a& z2%urBFa)x&*3sF0U(2gD)?Lv`gbV{?@}Hz_R@4vREv#|?%B0jpgB6zhgHA`XQ3Rn_ z=%#iciH!G}ptpgqIE@&g9{54tgS#bfKz@$UVC`XcWIm;#P@o6AuIeF$34vE++2_EW z7H|4Nzb%5B-B{7C;Iaf=RXJu*-` ze1GdtY1Pl5V#Vu@mOoMu!+97{CA%YbSN9uea~w(2An4Jay(~z+P4WdL-W|3t@C%AG zpXAl0V5(4hSiw(l>Hc+>#%1H%h*6BK$2eVB5=KIZS41WLD80*b|D54Psrgg>=yC|K zBQ_C7d+B*HYy-ApZP*f&SecVF1u>QRuYci5|7xbJO;Ob$9GFPW!{YHUI-j30TW@9q z;R^BEb7t@73Osk_U`I;WH!pucn&$pA%#emzzn+{Tt>hCPrF+Erbt05&8o-&8pKYE| zDEK6;n9>a~*pj>ae~Mea4fVrIJsEl4$|fz^TZOGJ3P&$%c?2 zYsUrdx{V>TDRd%W7Qy`THHEnppl{Itz;R zTqHk{N6Ls7%SzMJ7nJJO+sX2dQ zS(4*&e^F}7XPt38v??pH+ht^?A~c@q0_79`E7)wkT2w{oVz>D9ub=6R&DpfV7>js@ zUqm1lX$2Qai`U`^T7^w&u^=XC^&sYR1AMiA#kE7-C&ZSeA1%``k`K@{)RKJnbSdvb-ukC@<21g zRP}@ZwfGr2Fv;wF84lxrV4*~ai@PwS_7vQmnT5ll5OMZP^q$71hl_eZ1lWR~C`E0G z`Y=*+^h)&wjW2Hm_QlKQbCfGd}!%v<^ z*hozVt?0_CNg}3B4kAs(P?tF*9GA785JJe!jR6YTY7T}{LTib9X0!wn8UrH+t(rmI z0I^fjJJ5@VC)Wa(>IjJ6s*80pL%GB!T>wW`JdsGd6?*RRXtgh%WyIt3EaE^qy}L-e zcwX0-E85z#PR`Hll2QV#tWiLkdNqv>-yg*u{R3g}QLozJ*Z1g*FV}g;(Of-*HWP#~ z=$hKrolMZUXHWgqrtFM_mb#~HakhZXAZ8dfHSndMGKwY*i%>v34{ETQP*$X0UCZ{X zHo<*7mi=MG>f$y&ZM>B4Z_==O@cT7ZVNZW zkP1ggvKU<2`fLK!f{eXsJ6bMsqN^7Lp9pT(X@Wd;) zddSpc{k1r!EF6ZMobI^kt;XdTkPA5n?v)PjG;1!A2!DJMQFJ;p*(YSpc4iDg5PrLe zEhg^1(%oeSS*n1KNH~EET~q;=Do4Z)j$wMBcWE+VBDVuvhFENsq%L}OFTno*xp7;? zZ^`}by>0oMRA&i@yD|=)e#xVVGor?CIuyqhCWManzV5=YIZna`lSAs88 zcYBWy7GgsAZ;`ZUj%~u66?8y`^g-f*BB~KBK$SgC#8V#9RM5*=THt#>;%` z8vg~=UE(S??Y-fXpvis2{Fqao^e;8Gs_lLDY*O>Sl+H8h9@|`n!#J0YqfaEf^78hQ zK7YO==kZ)OJ}S^K;XYUChT*yqSD`lIOYLiLFj%P~PeONsukoZQcu@|Z4d?45$G2|N zWZ_ldP&Brx>3#aB{s2|~@1@1N#l=!`P6X4_^z^dfdze+J!xocY65iZRQOem7XY;Av zbRM$TDs+!YcL3tOBJ-EgD@^<2qJ{{Wg1u6~gd=iXI))%z1d(ZWA6}jjn>#a6bC(h) zmBE5cIksg0Rr?EXpOmIvLPrbv>JNXk>69#T;w@@M+YHg+!bqH#s(JRk|y7gt393o^fRNcGtze8uB%akk=q)V;P4H*B)KZ;~WHt!IN*~5*wG~ z6Hvt;s)klWlGI}?4G#*~aa`~p-h^T`Ii7LfqL}Us7VSED{^zoT=Rkb{N$SDU0kgDp zey;pM_noL>el}&YW)NRPsYbEObZ)oI`sUz(Ebm5ynHC;AoNqlPH)GJrhOf*?2R==e zAnG`n_QZu9E=Ndd^Xag!?Vmo3^k$LEqhH(CHs^@_-tl@Thi~3_88WTQ@=nYCX#TUV zyE?khXE@W9HWnBsw^2DSlTSXI2{fo=(zp=Zpf`^fT&ws!UkBs>zWL(55S-iLbFbcP z+Kl07HdohK-G;ookW!h4>k)CSX8L-jcJ%BW_dwmPZ_o?)>aG%x)J2XhHL+o*R)?>^ z;`GYncqZBa@Arr}mj139VC=g~@p;VBJzxl4W_AsXd`bN5HEK~&UZ1U*0xTZLQr@I5+fdb38OsFTl8lXLrwJ?ZH8m%QXXDNbn$a9L z%~nw~9DklJ`7gJVQx>m;XHUI0esA!va9VIlASU*&t4b`Plnojvv*EBW)qg`0AR93Pk zqqrSLo=Y3Y6QPYHR>N%!UBqmol;+@D$%p9XPQmLigMprF~4{V&bjQNF;Ye_noZ<(bYSgl%9tZyQN zZ_2C4N+{jq#Y2im=-*H21F_PEU(pN_Cn0k19qn-Dc6f~SeZOCm*S)mz=S;hq1lOC? zUO1|HVnxCE1IkLe1rDcjWAOU4ksSfxgg%e!&tIh6XUHq54hz*Nlq*efUdM0*XOEp< zVENEdY;d&7iAFQhzLMwUlV1~bf`?b2l0$|c=;LssMG7%(e*BF~xmIe|P3(HW>pi>? ztYDna&_b0xDF5N~Q|hevZhJ>O=bLVAhh8?L_6Em@Ho5C<0#JFTP2$&Pw~Lkm-cQx^ zK7DIHD5VElC8uiF;-UIuI9uVx-*u|B3~gC_d*yR#31{=iNpYa!_T7Iz(D`|LU>C`i!o$ zoM5Psw4JJjxvHlkPpT7!{EA%dquqUKasCrgn6sS}85&R|$H2}?lxM%%7XMz;aa)-m z8lPwrRurL^{k^UAT)Z7&E;BbjpNLZod=D~6Ph;`>Igc7 z$9fC>#eC_qnImRQpzJ0ksA}U6du6KsQZNhObrb<7Gi7JDD zoUpQNS|i{WV#?~dr3Dq*$Mn3rb zIrEih0y1E7e~;rM`)90`u*v8zCsm~C*dhc5oVbQ>f8;u8Hwqe>_loM&Pgm2dBn6sg z+3eswkJv`t5z1%?@D-T0j>#axiHBpiM=BfL5^}Eu*Xgy^V!+q$ zDDJ!KeGxj4ceWFPD?Smu>wk%`4urHK_ysVWX-j^Iw>M@B^n$SD7#)eZGvq9(Tbml1 z(M|>41tfXXpDAU9au0IKJ4N~HYi$S`m>9MEX3(9>XhMBs`4K-iYzEZKz(C=eqF1p*=-!8FSPVLP_jC=Q(v~uSYcpw2GJ; zoM3lPhuq57*0nXayi=68D>kfQS=}e+Zud!@P#a3qK`s-j-eyy2XHHM{+aKbUY?@*N zX+u^t=kU1nQQh)t`3J25l=|ECbCvIuah6HMKO)gjo2a+^d(tYkdstGPvwE{|f8OxO z$Yr;=P^(wvy^hHaI zS8uT2CM-zTmxs3h`eQOFPNdY>*B>_~MQZQ$6Ssd6lZMQ3KnMN$9ILlka@)ohs?ID&M{B!$M?O{@yX>+fxX^hDD5zf&c$zH9j ztL0*raQsHbr;A_n(@_72eWjjEX{uc+R+fMFy&6m&n>?qb_UftFlx@+#r*jJb*q*mF znsw$_(siAA!=_X0KIX;N`pq$DD_PA8@m&-KsulqHD^|dM)4Db8*5bYm)Hb(jJnZv+ zT&o+u?dv?MUr8<2=U1QCn?Km=A^$;Usk!?yRq1QZxIiu0dXzI`x#o*ZUZ#g9qR@Y* zZO+Eb$4t`9DO_P|auUu=)s5M4{Yc*ySf}&}VDyPbG)376cTbBr&P>raVn&@z^(>)9 z(%z)~MbKQL^To4GoBI~(n_}#b3l<)J629h-%jusMo-ikZddStewrjrO@?bW1!wBl~ z&R;3VjT|<-)xY?4sPRR zSt?~BgTecd11-t6QnBPn%+}T>Ie@^BLMAPMi5*9T3bdmcSK-Cy?% zttRVE`I*;ee4frcjL&>o)2rwc$ zBfEwMoT?K!v5IZ~z|pe$ExZMVW*a<^# zlD%C0{->JcAp3cu91lbX>iIJ91J4P359o68eD&*<8XE0%e_Nh*R1i%fPdRZSR-41F z5;bkMCM(jCKUVebg{gYQZCPhln5S)ulshdN=A_)*Jj_4cF?rb3jbXA)ch_z_U7MD_ z&juZeGS9e6E}HDKjdW>vogW5D;+3c~3EH9+2WzuS_L@dFNwiFSh~ zK&m@Xk-soy#e><)dc7{Hwa6=MQK@TpYM4HxWr=E|e|#-xWvYKPV_K*Cc2n<)_Q?Ky z`|!*}V|K4#MF;~vz?t@)M1{}>5IUatVu|{?9=V<8ioKDMW^GYd4S&$q{!mJjQotak zp?i8d-s{H~RbIRn`JN2o+VjZd+?(Mv9=awr+qx{WBlrJWS29zUO0T6bYS`DV$iX6G z_TXdoe^d;!GSGN~i1b{?i#nW<1uyXky6L3rmX+zA4jv{Ym7x_MI-5R79Ob!o+|D#x zu%VfKbDbz~luB&>dW$v(zw={%I+ummV(YXjzNRQQ#Y=Z>H0!dA_fdS2n2x^{+ zoggp78DxB3zobRg47(=Nq7_DckQF5;MvlA>5pwkokk1ZBo%;TV`+wd&ocA9djt!XM zQiKNDRZ~KiOCfDukkHRKBHcY+AYZik=nIqmS(=7L`3^zN*4CJQiKNNLd36cz>sJY~e zw*vPPBoJY17Us2JGx(;g=CS<*Qw2LWX=@SH97hqN-j|4D+JnULYM9Dd37{}>dD=pu z9_R}6*RETi*YJyum*y#&bP0Zn*+a)-e}JD-$Y%t3;TG)5iDi$bt~g zK-CKpPoMvNq8rf{9#0#uWhf=DfJ1mp6>GBhca+_I z$aAZ7U!w1OZY1!bh7}w10k5nnt)ql%7N0AH3n)^9K$qZ?3A>o);42F|e_;*o#%zKS z#gJ7PSzKTNM?t|p68cm#xrY-lEt@8&JhB$;G z85vM>a45rvtU>h=eq+H@O2Vk8Tbe$+n;;F1xQQIgsngC~-nRIJE@ATuH6~5x%Uc8V3q0Jgy3WPOF@WdfyJY z+&;a(VFIqAF;iJt@AI>l)9ovt7Y+ z0Ji(|84aEh%BJR9J67%VPSD|kR+?=>mwJl}^kKb#K5R_W!vpylJs`-uRF5FRV<5zv zR;FPyB4rA`DUbp(e~?n_*}!hf=ewIRNO&=A$`2hLluZZ%w~s$5DPeR(HbKc@L)8v& zs+u`6C-E+;6zI_781zVA)1pl208qyF_->@AiV{8=6cK#t*cNJdBP!tj4maCx-~b#z ztY{BhY{b?bVs(xw@gU~_jiUwle5Gsz$7%q4@WH?b#8Rf{e}OMn634MkZ~tRWzBND~ zj6N>#))imS6M-^h$Ss>hmrxdk^hhY6wA`8WuUTF-jmdb-(KO>wrXu$O$^uyUUi6Ug z)o6ppU318Oxq^?|432Mg?_5umE!;q^*TEr^^zpBjRl%;99Wuqju3gbGaN zblJFnGw|eIf6pCxall9q?!V31pcR!B%(5v|4i65$8K&>P@CVlN$Sqp}^R8H8~DEZs#TzlTt32c>x~CTiq`rfp2Qe;V~>>=A&g?^iei6IF%^pdUry z6!8?rnA;LPVYoWZz>}+72h{fFm5da&%I3 z#7+%@f2)v9i0$5vqpYn%&6AJpiS^K3O4M?Ng0?JVFIwI_7?7|5bpX0pBdsj>YN^wq zt>Gq;w)IY?!Z5{_v#l^0FwYi3H5!U{#djx}P%eJ2;5M=nTZ?pCacIoOHuz#6&!A>U z^JALUK0mnu>!h-!OF42c>f@*jF{HaXIvsYGeUbW8O$abyFr zk;$e1NY;kR29B6;`lcdZ8hPD?s?SN>v-@sm z8aI&I38@Re3i`Z&G}RMKlWTXI~+an7?Jg z9R9s!R%$!bZ$5hDM-~)XfYSEi6PZhy)jm(*>ichl7n>v2r@3s%f^4+6zg|Fwf2ZFE zWBh>#vno>J1+f+{K;h5};M-R6{jB!RfgHILxbm|faP}1yZzI3*1fi37!Ds~7k`=VqL+W*kUZp3f)m&1PuH`N>|JC~5ZOcURDa%{oHvR$#`>jP1U>uX0WhAP zp6@>}d3n~*aq#Bk*|*2x1KHRwEZ(jcJAM*=&oADWzjWKVbm(}#EALhP{{(QriVCiP zVWg5NbUIh+KYqNH!jmyC6PG!(1r`D^IhR4Y1Sx;jTw8OSNEUwgub@)&?jz^OI+1f>;6xhdS1LX}JV(#x2*Oh;w1h1M8Q`%eS)+^Ve6WQ)=UhjZUYwgC{?n zU%Y?PJwjhzUS6D?zxnxUcIxuU{QUCb^tbts&(1u)N1b>sqKv`XiZGBOFtfU-33YZ{ zk}RCB}jz&o=oqOng{dQuQYHAlpMM zdmMSRf^wxe7+-9&B-hQVYh`G?y10MVjVrA+ee)rWqs6^$U&9`vg?aERwlPe(`fv>` zqWhwx2(zWX2&E3d7NVuv>y%)QuuF{c%$6e~wUuA#AT(N8r0Y!-hk?;iQmLawM8rl8 zv&+pU{u-toii9!5p~H;YDu5pnqYkiF+4Le!e#MyHZZo69sgeCuYog7I5C?zOp*t_4 zwoe5`uQG5-f!a~+QcmsO1AZ#!VO%(SshB6fvBZt z>@8}H98wL>i_9R%nleEU1}m-YJYS{T81Tz%ro5EA=HbQ%A%~{>E-F^#gLO1rq%o`v zTXZN^=unT!-N|-MKHx~6N+ozoNSn{ONh{D_0t9u|^8kDD3`HCCJ?c-6H%{$bC>DmtBCU5+g2BiA%CqX<6QZFu=*0 zK}#*7^+P;PiEt684TWVUR!ukB;kEF}5obF90B7qkDU6BhhcyeoNQ>|}*pKIR7&{k; zaB+;RgdqE}f?YDPgBpLd(cHVF02p^bCAFGd(rtb9XnXW^3gCR{{v?!pX9 zjYp>hm~Q|`88vlxCJF5(Xl06l+2l;+3Gh7p}N;s37E516zk*=8Q0GZSVLnVGcs3I|+UO;4W#u-AWN*`g%}5-qpV($f}d z4#afcq?Sw9-9io0HzIb_z{XwhXF+@HatPhg{jBKv*=-w^90nOe#e@vyOQ{ekfgmjW zC{}KSYHPQZzs^J5G-5QoVVSNd8wtw0Hr0bgdz|(*Qm`x!QXNs>vC42f zKDi6ySR!3OP}oYmdbY`tni!!-xU5G~bbSMOSPsHqQiVHD+~w>64tWA*B4V4Xd;2`Tc?5YdrE@D zNCo<}n4qEJM5LSxJXUptj!n9;=b}s`+Gl}PESM){B^HMt{iNt-OXV~$dKaadzU(uU zFVa$6XL5fo3At1==PDabbSsY5k&3LUJJnZTU)KJoXuVzQn~#3HEy;DHtdL0U5+j&w zBIvXz;x;fii1ErlF5bz^O!D>S#IQJRB+$~;Y#Tc$WBR2C7!0`KPuD+{gV-r+`_T6^!|0uX;NL{PJU zCQPs@^9Ip32P+Nw9O^#@lC(Z6>}WxXh#+(R3d|~k*{!7;SLHDpw>&UFC@jGMp-vMv zgS9-wuv1Tdwbl$V=%1R7CRKQ}b3l6&rVf7;i~sGMq#jHE)Hdx&_gXi85JL^pe-bop=5uw%bhO0)*94Xv&tkwYQ2^s;7E`A` z&|(HNdxXUhj%>nqQT8jL`1BF0nH2Y%`dXc~wf6G@vcSd)FCI3?WfUK~mG*U>eTjbs zKggON$LZY>PU(+rm>ubpCW+DHvok{Qp4K7bLAIc~8j0g_*giO1#NBGpw676ksB|3n zVc0f#Z36h==ZAJzU$e{Z`ckbdaFngoUIOiln-B{1wSZ+AvTd%#{^HMLBLNdGqQmlz zzM%lBWQ5E2Rr(OCD;CHcvb4p=w*Y@-6=!t3K)`HBwp}(_AZXAZ76^tj+anNEj0@yC zCb<7iR&*^Mhje?Kw{>U!xTd)cfrpQ$h&ug&iWto75sKg*WLZ=z;vbKPNWwhO%=P80 zUo?Gp`EvH|?dA2n8G+ElQL8$x=^3@ww^{!c${Ov68H;q?hERFxM@}CD>#Bbh-1Y;z zX`8@s_k^G=`bz)Kcc?pg)^ShtJ5Fo^aeBA!|74Tv}~KeVh-{=lloj-_i%f(hckOzA&_}F%o|T3 zb@~GpG8VI?Ffc)mJKnKUgZ_U&VGL!qI{;%YyG$1Ta8&&1V)p)Zzrfpaw$wQ`lLzEM zenf~?<}hD{SjI_du}hxqV#~}Dkh_ym+WL|*(|?1hnn|tj}J`mlD;%$f|Gx# zAE5#xmyTvRb@IauXE3Y%Q&}oF!q}Y0C!d0J?d$iEJ#)OHCp447R%L%P4BCEqV7StV zWG0PHr$UZ+#PTox{p#}l?EK=(jsI~_xw<494OMme17S6k*=`hhaCOaD!{61b9veXz zB*=F6zDVmh2>V`8r?B;xK%JxO&(Tmf=oHkwS~*l)ZpEkN1DT-Q}y+LjP-(k=DO7S@m5zqWI{ksD9L($yz7R5ca5Cl-Z9n+tm~$lNX3fy5{3D1!{wMOQ z)yFZFg+T=6SJAT&=~*55{f6E7aojj%J$QrXxro{0oFP(XBQbyCTk;0|fp8zpY@fH} z1cWVMErDqHmi*Swf-pJOlTdxAFq&xV^aqM|FtbOT{88#5TE6t0!M~;vQyB?hG-IWO4${8IvPIvcWcdryu-)&#jwy)0>)ky(`Ws}QJ$w__Rn%zaSf@YG9EUR7 zZH`>1-xz+``RVszM$8$0eEL0scW<=rX#4vxgaMBA$3}hsKFs0A$?DZMV-}(M_jpPe zgu16w;Zw0x%wZqCgaPKF)tGWF*cV$6$29kGcYrgKxrv| z2XuVmy26UqN1uPA)&k~!u_zHRb*DMkmUIMhq=0d1T^)TqqQ+@|lmw0%s>|D!WJV=n zF1I}H5tnf#T1{{g_yJ4;dteo@wR}|6j}>@?Ic#5nWG-<7Hb})zn8O9}<)qdccPR55 zF`+xU3P!qPI%|zPr~~H73Ek0EFwz}kt;Gx@Eg!bDD|HTN>;#(6acBReH!9WIiyI3E zmv4`(&oh@&`|QGh%o|mY@on-niSCE-7IBmpi*guqwF;}DV(*Hiiia_WX*yJDxyiFK z9%ycqXH}SFNp>@g|6~G}C0U2>Xe{hv^L;M{b?)fnPBuTzXhOyC)%nT$H~Yb5J~h4Tps2cx_>MneRJ#gB zMs=*U2cqhKI)q6VqbfLI|C_MV-mv!a>OeougiTnM)vDO;FBuLOhY~*sCWK2@!AQ7F zXRUFEfTQ7ry>nOoNN0?+^}yDVf^hB+>YUH7UJpaJZb!4lFvjz%|5`^rV2^NhkYE#{ zqN`veEJj=VzpEaNm)H}^}SmqRXkj7nXd=F zj(UB6el_s@QkukB_2f$J_}KGLhoY{6ktiB#?Ew_|K9Rz_Q(%lgF|j^pTE$R4^RbG{ zNsm>FBH#SsBbDR9)t~Ua%ASIeARKG$0T6oXJ9?I%stjjD*&7)*5#> zc>0*m9bE+@-7(hM13S%eh~s#JnucXwMDd@0tFVu5Sf2RbtG#pQfq%*keEj%ZxZb4k zh|}z&qQB?aKqIPr7~lNW#gqFgsZVLs?X!;jk=tyftp|3Ql*9?lYca4L;lFkM49Z>?#wUZVwC@7ki_tR zkUbrex(Y@jX{@yeaKj;iG4uZIAIg1}LxgWJ;?!?-55Q(3pat|VgENZ9@ab^YRWK4~ z(^*@)!y!`c-obHBT!0xW8kiHiSB>oM7of&7(#LbH#_;9Ee~xEdK>HbHI0%==%(s_u zRH=JrmvM0$7dW?x3uuzpVHU;YcqXWSu-}By$_U7_Un%7`+d{367f8h$>_JhU`L~pw z)h%3$@9Q=(3y`YXOg-2c!Av&?4>@BDd|*z|#x%v^+D5FWcr{^}ZwsV^i$zi;c^0NP zvk0s3Iz;1KJI(Vi+f9kA*D*-c=HO(Am#^EnxJM4-G#6Nn^sKy#jRUlY9Q!nXH=0dO zc+qFQ5-stt0E3p(fq0ixE2NsIkaXuniB2qEsIjnP3`b{``qE94>gCM-k{mNTTam&^eyfMeL{U>SSKpT(3D9iD> z=P=rei#eZ^00JHe`vghq%k2P%{gT54_#>>0v~|4B3nLAE2m{3SzV^25=F5)S7Qv+1 zXo5LLm!j!t;!q1$1BjdEssoSIb#k++3}>`T;#(stG}Ga?WW8PEjoKZ5NnFl0xD94y z42fZZ{6$#Bz39Krw<_Ck*XHzZYT!WR)JF28t+x@^9)$VEZM=RIMK#EV(OyV^s|g9r z>X7U&Hhxe;bTZ5;KPbY^59$v6(DMMRP`N~X{2t<^af!P5cyWb;0wb%~%oD4x`t=jT zp!LMH3Lnl;rUkid4)Q2}N8$MNW4^wcV>}cJ z(JB;NeICr4p9+AyOZ>97?D<`R%ZX1L-m(g-q^y#t#D|!1j}edi_$CinzqbS(_CrWs#6|qoS7?X<1&W zAH;Y8csDVtH44?FLZP~rafLHsRZBEtl5COOCX20l4AClo=#8?TER#awHCWIvR0ybc z8@UA%1mLVmeF`3Gu>sn=<~B$(Nx^LIpdEY;9k7Hh*F^umHwQ3qyWqQ@7U9lUZ=0aw z?jZ5g2I{khuk)y-X^lO&8_TO#}zq%GGM-IhpK2S;tx z0-6+E3?cMbi31x7WRfBccfKMv53BE1x`zaYI1M)?_W02Ln++ATH<5$%24KF3!PG()aiqCz7DH@lJpcb;1nEkPSEX`Ojp$OUhkmqugtdI zb39dP3#y`l%bRa1rRE0l=!^)4P`qw_oY$b zmaIVrwlt=gD3z^hn_?O?Js-}Q!#B1n%G$n??{GqQ9hB-vXQ^^WpEZ&Mf%Bl*lJ!4- ziNM*OPq@zT?Os0X(<{jCr>EFK^f^Gd#P=H91JHXUfhy5hb(_R@J#thG1Fzka#%lU--8+z9NKG z1wD>R7g9jK1&>kT1b_$1TNZ_Q3@~fwul~vE#cU6vnh9|TgX`|=%)X!Ys-!Ce_bET^ zefXZLmc?BFjp-X&KY1q5ZP4Qxb3Gc^jQjgW{SN&X#nlRBZe(+Ga%Ev{3T1AW?h^$E zm-x*EHkUxU1S@}7TW?!841V{o(Bt+n9Z?i12?z@Gf@}jepji8`EhvUGHHKoDJva%_ z{ri2SjW&tTP{q#H7n_IY6YrF$latnvLQYyj5&YK_h^rAf&ZsJL&|Ld z3YI~N@gP0tWE8+z)hLK!@)aGFnMVnb;sWeN>4qclG#ifaqN+(DNNx#k5CPJ}d63*J z7`Cc&Hx_?n_U7U!aLUHZpzH?}2hJ8*#0!+=fwCY)YIf%uxYV>TUjhp`4|x+e0D)t5 zLmBe4m}JhNx_ggASGNG^=4NIPYv7(OXbinw{cQ{I)`A|T%5QZ(4oa}0v+0&2OX822OZT@ zDbV4yM*PQ&_(^Iay3E!WkM>(Az(S>E~a54K>Arbk<6-q1IM6mzQrAPo6mV zbiKL`CnsS#wPr%G`KnWx_K8M^rX7tUDP{Wr0n^LP`r_5{I-G^+<%`oWybUY!5FTujfQXSuq*vfaQ1FQ%WCSL=V9&BgL+yRSI!$K|{C=g-z3!kH;At2Kn4ZTEFE>z;N8ET&gCZ?FCNhxe;L7Spr!=G}7RI?|izyXk-X z>G>J?gPC;!htS{=?SM8(ks;b!OLF8Uz&!Pky$aK}>(}dmkbiY~b-lXz^X+mIzrpqx z`D=^Mos876`rZeVgVA5ndTIy^U=*b4s8r)5Vs0}%W#>-Wh5O(tXtG}gjSs4V+rfZ0 zV@>thXdLcYpYg07?^%1K4f0^eI`4lw*6C=+dj8@m>vhI6Io>mUK+oR+Z`+vhZ$s}O zn4=xANAw>p@RagiG;Q2GGMY94kDr(K(7W@JYs3gUh~{3R4OrvojvgIDV|I$l zGK|((%cz%_^J2Yk$^Sn#5$$gmJH^9gK-BM_^R%<^ku9RY}JPOXS%@*_wShGf4E(WnJDrWv6 zFs^4&n||rRlJd;HlhZ*3ciZDkk99sh{uo7BXM8Tl`z#Nr;yd77{nU(-ph0j!59UE^ z?vd|bV*U**y~e~m2*xI>dQ5*x4^ATQ&%*ZU;@Bi|`7a9ha4-9em-Tor+XG7V4tSe) z+w<*{%pkbOtTG7B61zMATxPpq25f_2PCN=uaagdR6_p0T7^hkpwF0M4Yh@5jh+H0w z94Aa(s$<}6LtPpyjf^oMl|Bf@mX}7cO3^-Nj)5_v;Kd*q2X~giFlT?lJlqGvoUwy2 z4~Ci0!CVK!Os&L1Z4iuWP8qdAbF`0}k2DG6$Oc<;{`h3)5g)fJ>dXPI#~eakHY?;+sWFiPT2J zt%W0+cNEPT=g?@lHB%Ry-EC&UxPY*XqNQUV>$gsqe*pY)K{JyvFB1YWIhWC73=;!0 zG%}Z=<^d^xty9DY{^|bm_H5~go)fxf%P{hs@2_uvE|`+?=l#c{U1Dv4cRYnYoD11kk1`wtD6iW9qum)icJ>&xuNlaUNp*FRr!>4)3% z4$zd{mJJO1x&n!>K7O$ZWQUodVBKg@7^MZwx1TBtJ7rhLOr*OAk=Ocps?lQ z?&KeTC*D|TlVw?++H;dsl-8Q615pCc>1zBcXV;vm#HpW)+;Bsab!J%>+oCf$ccC7p z-PKiV+Ue-hJQiKCg&|B|mj%qwa^p+UZHkH;GGUcfkJ7b%VA4ZP{2xvJ4hg=KbzQc8 zvXftbLT$kkmrA*581g!@JQt}zB+x!A)cJXTEKBN-WJ&EBvUSI8BtMXuOTF9CbkIG3%~) zHs$M?Qi=_c27~oQ5f8rK6u3Yzx2;)kvZ`peT(#t)>P(f>0-%Pvrb4#wHg!|LV!I4~ z=V0o^%^eq7(>$976{{29x$c;{&MGdfr2oFPjB9CO$=Ca)?U@R%xuvi6z*(gpbH+kj z)-PPjcDu3w-4~#2Y1^+i(k7I<5BHy>O(vnrZ(itav!djhh-3=v08L7GR5=%Zythnx zgRx9r%!(^3Hj|guvY1&+x5;2N+KXj>#+?D}qV2%`jmV$(rj>r(#$X|G+H7l>l-D45 zMHU^W&c8OMV*0Lb+hSE3a1rgJq;*S{hHar8`j zYu3(g2dj@Yg$UkUiW6+}K;LtGK>K3C>6!(~i|$kmMGWw?0}<;dV=ZbA9?yM$w9~FP zW^2g!lyjNku9NxI+f`AKMQ}fgAZX(`Y#Z20Ik&K>&+1t5&SQc1o68%tDQcCrx>|#T zX4mb3FSo4M_1^ZE-G-9Mnrb>09k=++^L!%{Rr~Dbzp@87<}u>$PBlmNRPdltMHqIOB~kl zcM>b-g50JkQTyjdk-=s7F*Bvax% zu!^>_qJ97>Vd*CTY=UU23mthL9%i0hHy?2rEEUr?^}fLnNr$oz2NZe{_Zke3Lw;3v z+^_;(Tf_8i-5VUVK-`0W`0_mP0KcoaBiRx4F*IVy5^*ENC2pQSbw|_0QEzovi+PUY zy+{%_NcFdDg--fzXkV>mE3+L542>n8#UL{}A;`~>e==$kRj|cI6>Q{C7*C=K?V|D% zH;JQZL}3^ZGAax4ILX?Ui^OOILHbDGF{B7_=Q}PCh=Q;8PU@R~ngh@5@KGS~9NzlS zvqwoNTW0d<@e^8@gBBb4IF12Txg3epp+KohJA~I#5pg^xe$J+4qvnKe3VSS1ENI&gp#seKS^7!I;fBj zkquyra4Q}TxH1oa1PP@bN9#rV@)Ro+seF(aw5u;nDNXg*ZG>u-r8)*pg+MakeCY%Te!a7=|QT^IU$wfRCiA@|kI4AA(#u znl<|0XAL6`faHK0N@)^L;S`$5QUj>3>S}4WyY7{%2X=ygB(_Y&-~v7nzKfiT3>JkE zLrBH3_%l{{=`^&;$NbkE`-IlL?#3grIvUxVJyg)mmb1`Td=KJ1Po*^gDng$~;*W%6 zY?}fk?SIuKqQFgp&?>sInpqx1(3vZ}r(7=%X153@^jHwmtwx6)$tb5+7{;IU*9m*G>q{YK&UeZ6A20daI}+98J(wCowdS1tPsA|3In!6G&JSm5%W63 zdz4v!O6RQv@QmxngOz*{J$;MUhi;ts-)1V9+Hk!{9b6axpvm|LCKJJ7$w?U<;+3`P z~n~4qH~I0sU&(RjWCNfhHDF4kHCbxV%hF8s%iitpjE_Vl)ZvW&aHU>C&8#AtocM>0QNfKo+^f$5+?01J)Y48oG%=!j@ zm~1-S^BTLfZ!lKvMk@KnAR4>M|3Af0j+(IaAW7#_N_3QH=h0NAkyNV+#(NBn04^yQ zLGh(1^RluI zXpu3+72j?vv`)5l?vU*xJq)vv9xh=;Wsi2xKioObXK)JN9D*4HIf%5Va~0Zb^b;qC zeVfd;nS3Nk>{1S;lB3A^{*~t(P%!k81oVK-an@NtI57?ARkRZhs!w72YzNXbf6Yq* z^`{`c2jQiM1(e3J3gN69XjB$|A=x)yvTr`;EVuwZ3}L1eeSGca5r?iCu6VF~So%_; zS%M%_PZjj0_(AFdHW=O*iIos1zWjkvB-}nm2q75|f^}FZfC1GdZ8=ovnF$LAmIPxZ z%Lr}5V;k4on)8usVRHDc7Qv0avQi7T=aXg#_rTP{(r0L&V)4uEJ!hEp9t%SZ=ry)+U)N!Z>H zy})5p<`(7<&9_e<-KOYc2~_Fia5}+6Hn(#KfS7{?Ux&zPys;RBK$82-aAL*2y!vS? z1HB2(Mq7C(3}QJSu*A=QdjY13+ZP5tvEWrKO`m!X%?v4HToyA_iu*?vEWb#CFo+M* zT|vyE2beGC6EK(>D|NB*&8VaoR3V=|LZrZZg&BdD34TkIi?S~E= zpFemQ@MDVBHlE6Xq7j|TD;SjdNr#FxA!X7k)c8qQ2h%q}B=B5+nx9y8VE00v43Hx4 z#hM@4;L~n1$vQ3*<$B3MviIN_JBVlj_wWC%MCf4ZOr*h7GKA2^?73L{M~HH7v?KHV z+A@FWmsG9!;rgAmD(TVI{6(P7B}UiK1+%GmOXhdqcXRv9eM9FIw{BCaNj+-SIyK{Ki_W|Cgfw!p^39i8 z!IGo*zGVFPi0L^_NFji=FIrl%DDYMMvCc^7mYs2ggzcL!;@eu_EGXq~{I3V%Dr4>5 zP{lt$w91=X4NVOlU}x>jU{2Lv=oC6ISf-E+c<%%maDgd=G5kBq*0Qk}?3h8zq@r4v zd%jE{qua}Wt6%OeFSw1xg~Aa&pFyns;~d^YCr>&%@Y+cxpI?5acJq}7pxHZbQ2|oV zq@^_3ljV@vSEgAUseJ%p>Dw+B>E18V9?5BzW#_ZIv@)PbL*l99yZRD#-&S!4fw-6p`|gU!T6fL!#%XeIn3k z91Wnmziv>?HZwJQfA-Dd?9FxR%~Cgw{Ajj#n8nKV(_|J$z8eJTY_XpG>b(8-@^*1` zcRu$+<%I6}JdBj{&4-Wgn3D2;=j{(4uRpy1>F)A84xGh@A3mP{zWDCVbrK9l_mbH4 zbpUhIz%Y~tJ-ZKe7%wMw6O~y0(Dh~Z)5&NJ*B`#W;?n!O%bT0aI~?-tYH{}GnFoWY znb!#zCT;N}L)&*VZ@?{;R*1ge{6S67W`kQ6u%%u_N$R>}9!ZtH#C zW^MjxnADj4quF!0%wD)R54b+8gsI(1VVyr<({D=ot3%PgFtvV=;kkFa&1rx&ZW+iq z_dGWZLzZQi?WvmwQy*4;E7LR&hoT?~th%O-o4ndEOUCq}fZWj5+%jTV9pLLUEL-2L zE>J=^T|9B+Ig70fvNTQ0oDKHP?ZUE6mRGjPuE|V_bF}ror<`2A*pUiHyN;xKXZBfJ z?}Zhm!EcjqDxqvmF5UmCD?9X|p`F3vyN~zxS8rv4YJD{2Nb+ufMkLOsq_9hgeO?ND zAG0D~XRQ(HRth6|VLx>oIX`brW!XshSo0FKttaNuC=b~HIvJ{%{Lh? zmK#|)paE9UNZShdpLg|4jYd>@Y6fO%5ti5Q7rs&2Snt7Iu=YY`Gz0@nBXhs3qKexW^5Dw}8c%Ql?G>zUHt2oho95 zXTnp0A?aXNEz9X%H z0@#I`lncsx;q)EzyfS9pa5o(E^zi)g$l0*I zq8$mH>za%W%<`O-y8`dN4iYxX6EgY$q>|uNMj8UF!M|CIUKx%Kn)!fj3Q@w?(eNS> zb7n1nXPXsF5krARJ{xQoi#FE?;DTT*vZs_nG!atY+%#{xlD=scp~&A7aHdwcG|N-wy|)_Km0_>Rqg8`jt=WYO|pt)f+0ES1D14$?c zQ3fa>wm>6stP7m*FUx~ClD;SU*!obB`@;&Ymx$%=&gHG4a{FjO^v zw~Gk@%D}rqjSLffLDW}3%&Q)H%BrBt>+DYhc-NG2Gkv_7Q!Wf*!zAtuQEr~5AQJe7 zIC_2DrZw4`D-?n6f0WTHOuGsB~g(H0OSNGB+A89Xgj&BEfbkzw^qU z+Au)RfvX@&9qn;937n0heS>d=b_lC~v`19pJG?700A7d~K!GiI!)69=SZWSCFswKt zoUw3buV9um{-Tv5W(iJ@gy+l3nl2bDnl%S#=*_KxRBq%&W0`sX(I*69DyB`TfoW5W z({VGfjGK|BvKhpgNedxc_?l-^?ikfVt+%1rO{_N1Nxs4OT$=W;fXCeq8S(IcbGyK) zvnBSC`CJtM=cf(CPw&X61t$SzEVcrg$n+!OkGvxE2{g780G2>$zff38eAGn%NMw<) z^a@J#!CA#$4UGKW1Mjx`tRe7_cosasDlBFRh6V>}c_Y9e4cs8o<4bU;iu?~_Z!Z-B zI}(rvBSB37{3AqSYo>rPn^5yGcEi*=e+9{(l{1aqIQk?K1|9JKUmy(17`y^n5$gEK zDI~V=Uc1WEUkUF+-wjoFcoab;DQQ!ZT3?iQIUy`RZS&Pu*gCJ7Vg$z!5a@aJm^b;d zFkB@Unpi}epq2ulD7nmj?{vzE&Dzd`NW$hz@f2sRV_RT=-eKQWj)&Lm*f3dHbxIFAx z0|EhNKpW{w5RR_3JEaa3ANo2P#D~7N#zkAbSebm+GJ!0Nj>*D6)vg`OU_T2ffz`-1 zLS`Qd1@S2*4;3Hl9B>S91k`N5``94=!ZYC(RPh&%(D$W>Ovl z4F*WD*qW)8ivfJ(VZe+nEHV^G(1c{W6w=KvLR6t1QtaXN$7mLxcQzb|M_t9{=ZCYvrRK*%ecA&-EpUE zVv-P~{n|uZzmK_0f7pOALfggbsF^5;BJASX5xh*u%8=!j>nwILj9dV^6Dc`3Bz(zY z?k8An!$i&#q+SPdfRQ~5B>X1KQTkU2}$~8fGgP<4s@cZ zQwmN=(pv+P%Zwt1D3r7ika|!UGUQQ{G-U8Xw=;}pmjHH zV)5m{K2heVO0G2dUqa?M zQuV3kHe=8pdvLTIGfD;wzk5Q&l&&88!PuH-&ScAAT?SB{#<21zimNfg^GbqOLtq$& z9jXFJY`h~4W2}q<%t^wD9EEmc6%Bq62m$;M2^4>M8=y52!t$l1XHlGLF)>;t??%w&=nblPVL4^hBeR_~7Qa+4j4g2S zoJ&L)B45Eou~Qw&rP&YR&`JEzp&LL>k972ie{3f<)-HRMg@syc^N<}1fmykX;;Rd# z6tRL1f1=;3hr`o91g}Op2qSAUBKRjlo9$aB(xQR15!cCD8w7nf+S7~4fFDqB)cF&D zMDtJH5^z7U*M;$zrtZarc|uNC^KuyKARspFXgwO|5tR%214p4?R*7GIh(O}_C}O{= zh<8E}w5#JUOvZ(7s(T~?tecu1C^Y!TdLw^Re?Wy^e|6}Tb(OdD=m13XyvqPIk+sA+ zA$4s-1l>u4MSc{~s4-y7N@iSb>zvemvVzV_WX?2z#tOz>{cGf(If*e@^s>~pLac2C|v?q5DJoPz5!%D?9T ztyXrUbR0nte)Pya%6BO1#IZE`+ku?&Xv^dYHxti9gB_#V)J6rqtNW{m8+BjguSf=$ zF71E(cy*(6FFne&IQKk=g{%;hDF)U5PC(n#{cbk(_nM~@h-0F!`Frj3uQfZCAGtd4 zcX&raknIv;VOR&v}L@FfZmrMHJyWoNnAyc$+Fx_kC zJ_!VY#bTcay90wP4>oz1;>lOO(a z{I|2`r&B)&=_DjmKa79q*A{o>^1KTeOQv6!5lym>wSaQ4%8FQn*5 zXEG)M=P-677(_AXx%p{2*y_YY(xh!4lE939f3QY}7bkyxj-{8U$FE);pK6gu&(DrN z9Wf9>J+_%(C`lA?Z?-&o_kntIxc8Gs2~VVV)3jWABIG0#TG@Yv_x9-TN3?4+$$N~( zDUpdWTHo}k=LdpBAhT(bF4Y{ht=6kmQPve+z5dsaZ(bdrm^qbGCMRm1;qR=@iX3lT zXDJryn*s|W|H=TXj9giIftCjz|E;ZH9gy1fkvPogY#xiGgYf}rgU@9@0-m(r(rnB>Z_^GX*fAA zuoSiS!0MYTm18MK!|URusw-@pV#U_>`U*9vRz+SZtjTI@u5Qz1mMbIMbgtAYEz??I zlSXmB(HbVt7)ini^=)Q@&>7?^Wh$}@bK^?wCqt`H)AN6-ST78X&Q-V7Y5~KTJ2#DW zbSX9LNf)&$^R&*c)qT-qqqQU~i0@gM;gp%U$42A3k9{QFs-dtri59<*X%Z1ycQ=M2rM#mv*%Xuhr*66iq+ zGsMI-IUq`Mi`LCLTVN)78ab3@iOwBnSK zFy5gRnp?=OKY*)-Ga{L+rfh<2fs2MMaC6gV!xmlM8ckoO`5Zf;Bsp0W#m5F~D6d!e zdwzds8n0F=p97CA`N^bOsadAY1RZ-A)U_jYNCdjQ#4IpfD9Y?I%Nrfx>eE`4cUaWw z04oC^;!WBY zN-{ul1`Dx4vst`p-Mfspe(7Fx(JJ(=;uGVrFcx>bV81Kc`a_)YL+!gH-gPwKuQbyx z*QV>Y2RXy72JLj~GHZRFmRDA_Nl+pC0LLGPNt@GgK}6hg9ZcuL(!bWfK`bY4Ye;_x z3{-IWvP_rDw8Yd05YpL?{&{IAJM@GQgbAUuR9!EE0Fu_k3rHdpuT<(rgvN4{VYi6Cn`WQ46OAvLoeLD?pAXOMSD@ZFKD&!rmcHHZ4CNiZ=ipz#1A24qLt> z9Indtz##*|60K)Q!gi~0UR=G?b)GNfCmjCIUW|ad`B!? zl^wtWlIpOHe`=ohLIF9JOvZx(G9nJ+jRu7+-w_H|We1?3oP2oGcYwRXc>gmrelU<9j7AiL)q?TRu;n|V;i~Ka z8Zl(b0orbv-VXY!k=I9v8Qy0Y9rc(yf$4<@ zIg+hs2Tu|`r)n&W7RcVl;ouZ269uxhgy0Y*@PW`{(>PB`8Th##hdaWMhE+u7ayFYFQyVPK5AsnLHZXv=rxpsTWmgh@|a z4J0_<_Jy%uoAt!KxW;?7Puq$w_gOqHnHf)rjN?aP^TCrokdYDYkw#;rE#HxmuF4K< z7K1n-)DW^=={vyK$AE_&Z;YML_my1p)I(3!er28-gt!?TjdHepN6NV>I}nK@Mi^)J zBXR$pSVn}#zmb1n9Q|JeV}X0S(RgUfcjTd~vO~c*q=dD{?oV}^`I`#IPr&Dc12V_m z>u9XBcUr-4qdpoawtPoWT$LRFg~cRDLK~F-(gA-G#a-)Ykl6AaA#qi901~R- zk&kRh@+zA@JtQn?wryh}VvBbJ#8uV(c(5cSJdWGfQ}Ve#D~gX<|7#QaA>Vj#NZiwm zhKDWR5fE2p2N02h2xi{&s%IqWdF_=;> z)BJ8{YdG=ucA3ENH>&L2Onw<2NPh_Owd3qLxL^l!NMN2i8i#E8jvR7Tc7Q`6?7&2@ z!=b&8v-&yo;9Di)_qR&E>IF5UV&7-f73%2jJu3M4=hS&*OsP+GZ?e^2*x4-N{lq*C^220e|Qp1ykk zIorDV>ko^i4&*!# zi)9eX`FEG^UJ)dr;eY%0@7`R#{rSVoMP%n!m+#*#e!KeNn>Vo?P*-szw6Uo;?r+(mciN&Gbs!#-8jts%mzjT*1)`+eZ2U`g=C>gk$(g@#o_IMvXWM)P|qSA ziBM@IjSE^NaRQ5gp3Lfewz-$o!y80G1?qeQt3nYb>QP(t!~$(ZZ2u43Ivaws&tlM8 zXq}o(B0zAFks?mmh_YsVBn2y(3~+Vma9G2|q0P5>&6Y5vX^oJk!~5-9r`a(_BRzN8 zKu^HkN@}51VQgFW}4oPWo%|5&S)0a%g!idH+`;F(tY zTy7~3O@$B%pjflhKT7#N&~(JlwQXZz)mMx-APEtf;Opt`Y=h_N?%CY_NyG`0SV(Qg zA*Y%2KqI0gepn|4l2y>@_Ba8ajgG}Q=I|Mgcm&5Y3Hy8lX0TLpevPA!;`zrmZS#G8XzB4){;QPw zP_#vLAV_-1X!3KDF5u0rdq1D3M&)d&tq20%>T2ha%m7JC5LlN3ft_n_m?K(70a}*@ zo1RHyAtVu#d4rE?zTTyEx^DBjXxd`k5KddsxPQuNOq-@!7eFSXmu`x7$160{3l-1v zebwfKa7g$3Dl-X{F;>g5nqO}Go0yoEffC9XNLdPW6cEQpB8Pl_0pvu@%lxo)Tf)3R zCKI51%-03t7M}hb>Tw zpf6$u7N}9$DSAhu=hb?BstK011fp}J*ng`dP0IW_FByNsYaR*Ch-%oL>XdyBun729iW1m1p?6$ZsZ2r2`@D=uk_NA4CX|j5UwP1zR#Qb{4O#o!r<$ z!h2{}2n&&(k|odt3A8Dk4xfT~b;t?q&JE+9%x6-O7Mf439-~U7)Sc~{7k*206n~tx zyQ<;s(bR8gilKy7dCi{^tu7HE2y`SjikJ{2(*shF30lI^8v(#87rJmE<+C|(u{~71 z3+p5#u`3q~aJViOY7Sewhk@AO=}=9@S_|#I)(^@@gF}UOT0SbCI>v-9Kmt}L5AL-z zaU!G&#v<$YHmWCps#^ zQyNBr-*lnS&0Tbbm$rqI{b5Uw)rm>0(v0^=+Z4oQ0zKcS_2+^xfq>tu;TNjyiKjP3 zSrR!;7T4$!6A^fGs=@R)dj5WbJm*8OvrG)B&QHM%u6)d83DLuKTAuPQIDb#*F4jWE zodFP!({9wK?xLBX1m2)JI-O090=*JAI}hGQ*yK^c8|sH3?%qGv)ip%LW$|S*Wo$tV zA<=kbpUEK9fqbA|*cVhoBxZiI%Spz@M{t~!)jBN+p)UelrUtKAx1?pjOPR_(ZQ2pi z4O&gfBuLB6v4Z&EjvXaJ$A4!*m+KN0&N0Q{=nQYoRthHKI0E<|E>z;ow*vHZLnQ>l z-8oc%=Idc2Ylr92xzHF>hL`De&LDaREU!WTbUdNK1u`OMb7WfHb1D#>8T4&FWnRjP z#CFE>g8k?2$%D~(1Mf#LTk&zppPXf6i~};sul*axs%eTR`{M`Kx?m!(~Fvf7^OE3aoLcz}1S;+etq(QVJ73!4Xx`Rd>~qN*$zL9B8**3V<7gilq<^>Iz>> zx^Y`pE3^j(bM!bSu7AL3KXX`Y?n@x)C`yjgh}UlfSA6S%MX&%7>F zKHh|SWXQ0vA$Qx;6LBBvF6e}3DK^w+r->8CIpFp26HGRQN`K3lY^d2}L*-2tUg`Gn zCL3~x6zY3S_AClLq`W}%y7LyR*gij z!Hq<$GfvPJ1lpDs_vtNTl}*J&nGYAgm_uqz-4RBP)HP+K%`=CA%Jl`i4mWW`le#(5 zqDNpj8JP1zP=9GnEy}R_8#yXFZ|}}PpX?YPHh!IIG|%RwdtUzX2EU+%=h;bzhRUMO z%sh~2!Yt!uXH*DiPDgje?Vz5p@kaw#dTOgZ^k?9Xt|@@U&4MF4KCDtF!NJxqfr=o| zm6zOdvbd{yu_m?`Gdx1bc18l@q2e)j#u8KZz;T}*PJhf*3=yM1??(8|u2}DA+KT}n zy0c_++M4$5Kkw z+}$!&$A8fy^8~~!0}Zm8x_EIhA>wEeb1xc!+CS&K($b1AY6$A_p!Z38AVsWrP8T`= zan}(rvLRUNLI_56B+gb9)}*+~0op;yWMJa*4Xp#u#eT}n9X~o5m>*Qf1;%oy{n_zh zIscOGkB(h<4SMYh|c5cw13^+(mJsSuyvg_yPOedGhnu=>jeno z*zy84aWvzz!^}x$;y}aNVzLdrw|=nwRfM;T{L8VZr>;~(yzr0DD+nEpD+nD8DhOO8 z0RfaN2!xGtu8yTYBVhSj0?|^Ym-1U&OSl&(9!9>F;PN4kgf(YfOjl<3CIlw0U%mTC zrGLolUw*p$@S315dxPuRC}P(gpoVu*i9&J6AQ-n)J`MKZLL)5>TpYn#vFF8Az8Tyl z-LX(dLr1>O0Rtg>Kp2-%0CTG12#qVw#Bf5P8Btte50Dj;SurZTw&6B#=WcldD1EPX z?wSD|q9IJG3Eali%%Lq4pvl+JKc@99L4WVRw;dE|sJxU0PWw?ZsM_2zgmyBYSPu7~ zN8ICEN>FSy0QMWyWIF&ElO!XA$+0f>NK7e3wioqlD9*{e*j5uPU4)3$qd|U1Bsv+K`*`MC7OkRYT5I$1Apas zB%{Y(WcSxCd3I=~?_RA6?}QM{>cbEcQwV{ohRwj=cgB4b>1qkar+5HmN7}ae{@9Ky zlWrgKX2kQx6F}_U?@t^+tP#oC=aU0^cUKqEoybUQ!;XUNVepOSiMrA<5VHST`UG8R z{F-I;BXuSFegbv1JY~maQ~WU*_kTkX1b6ynZP4LewlY2o0*K`cpr2p;#8^ny&A99} zoF4&_W+17yptb{^SGQ9#!OtIw8GVnLx)L-{optRns~2eEE#)ohk4)Mo?zfG*@fJhC zNR<$nMyj+@&i}cGINz9+h%Sd`Ekm$y@~E6x6WYUoQNHpJCgV|>V&=Z2fwK?jSb zUU1i3wD^k)cfy<`;B~MDI6YmUz+=H(IJn#9#H~7K4Opd1a7Vb=jrr;9fH2dklVnhX z0jC>oO6ZeKf1%9ZS>3oRSbrz|7gJtv-^#3a-tp^>Kb#D>L1U#xqU@6f}-ZTI`fB2Km)IXZa z#KI=wQ~uGU-wN#AA6k_Tg|UicIrw)~s7T1gQiYLB=E~@Erv3-|$=a78=L8d%a|Z?& z0y8p~0q_MWf2CSkliaoue&1g)kK8H^jDu(VB+HT_S1c*g+NqT7N^yqR8Co22JS2C$ z{`KibH+U^|B~JuFu+ixA>n7#qu#uaWSKr-See)tyn@nV}jyE^An?#AwgqtMRA`G+5 zO|khUc=q?FZ*QKzyWZ+Z29dblMzIXOd-eKzn#t($f9%cc7q4Fa^zP|(5(YP~-n_p4 z?dFGXUZmlKx=ItFje)%#VIZa8&Eeu+n6s0JRAzpCBsA~-cr(Yti&y`6PNSFap8ojb z(|1Vn>iNypA6E*9$c-8f7^NbP&1QeP`sFvdDd5=;8!1edZtmU6(u?lXR3l3zER~5~i^Zf_gwRF?kx})b^Lo?mc`bU>L zd-;|HX{LgVLttNd!PNQ57Ax{LaDr@Dbzgc0>V~&0>|L36p3%#-N`vO)xhPv&beC7X z1;Lxp1UJX>8W^J`MR|*F+}caKpa86Fwkk`7e~vT^l*popm~e+PVH)i0F~2KOHYUu1 z=62$k^a-@xK7lhQCb&OZCodLA*^wyPv)z}!N~vv24|2Mk@;}Q{ zf6ubjIu%kzbJ-4xQm81q!giPmnT#Ac`&tu#6e>v`F^;aKCW^zmQ~uzm`ARm>ACA1f ztes)QXy4S}45z%_^V<8eJJP6IWmhL~N|P-#_RUAcy)_Ypmn@tMWy-EZyKvXrzU#g4 z@t($&&0E`wUuC46m?e-(MF_h%QtL8Re;L@FnOP}FwFOSsj8uu(MDqgy2N|fHB0`q3 z|HG8mxVw4&{pF$_!G-CJ8Qc{H@S@Sce0k_)H5>h=JRJOxux2Y03 zO&8)r^`?^FOueMqrb5$!=nM81O6g?dp6C0n&np@;&oJ^5aW~8tj9iGpnU0vpe__A- z-R}9h;~TCun$4$)*7neJWxgF0Hw`+pD$aoWH0Uea(w#fMwRH3D#WNhFL7Zj^g#vD> z;eZ^Dr|O6Yb--xk0&d#=d~PlsL}N$FNiWVu8tigFmZ|4;K~M6U*EZdeoN{@JqwOyx zNNV4DmE>NGby4mqj?dU`*e?|LGvV|UwO-q}$%gG#-620NXo4BXn*g)Qca z@?`p!64G#nm~+t40v)53i)vc4Ih`709;aDAlV@O1Ej`=iMfE_BaK8zaLwV=vl45Xj zI4e#!O!HVCj+j$1SWw7?NiPVuiRC%l(FAR!eTaIb6(rblKAqTtcbQnuf6j>a{){;G zN%lkC+}E6W8(v1X_3Vx6qu33rUC zjloT%G!2}U!4*Un(`fh5`ByNyPDwO<*Omp7V0a0mOI{y%(sRmje*~@*<3lFc_%J%- zIg%krB?`q4#>g5_=vXU80mg9KS7aCzi*WSN^fW*(q!9;EH?mWt;I@k>wnlhJsp;`O z;rrRUe(|nq_8-dnKz9`h^Dx66=c=^4dJ3Z#1^_-M5|w<`0HnyWNu5PHPBpyyrA`nH z_H)jQ0(pPDO$gh>f8k^Mhiq09EseaTr@>pMhiL7CXM%`Kv?YE&duI?fC70kzvC5zObkO7%*`&ZP9HHf z;~m63%x^n_ScVZ$2ty+n={h4H{XE zDtfG~r=WtfYOKA3!U4ghT7*e-dnT{yntj8tg8W?vH_zT)E1hAzg3~vi0DBoNA|&Hq zGUP;Vf|hGe*RzdX(1|h;g=%gAgzY0vlNi_`MeK4H7vQd8Ng`)FQ9UeE6Q`NZ6)rV` z{9>9le}IF!U1TP)?(^{Dq`yJJ(d4qAsJMF%lj$O9{Q z5IY{}=qt6|0>S&$rcQ)X88E>UDo}emErNIADGC^RkARfGgUm!4Ewbv_g%LoLz9~RG z6>RT}vy*TK*~FiCD$AuIhOku@j~Kju;8U$N>*7qraXey`{fCxz&-r?CmG#IE_Aful zf9T@!v zGt7u4A@Avw{sbXSapH231EZ?KZ>2G`BxfC=PBT9XNgK@QM&@MF-#*7Z2M z6>Wm*({vFt5!x6TyjtsjhmlZYBK%+WAT%UB8j_Rda^Xc zErdGm$PnUTsH@i9BQoj>di1eKrCM!K4|Qb3btE+bR%6Xp$y6Al=fT{ccWvWPi%iB- z0W;bzXymbURh}HUlIe)a>;AMO7@ZEV9Pr;Hh0(LJ-Zg#A1SwlMIs;qo&9Q=*Z88g1ZPUyaG#pDU>gSZ|0NaVw?gSDWReBbfMk_~i=~>kszWvRp$KyBf4>Go`SguHdeKG|g@CCysLX8HYqcEb7D zPHrIp)_n4f%M2fgV6@|zgRSj_OA5H{xv^q=V+97Ncp^B9<1jI4i^0jL*1>##KGS!B zweK*?s&v3fkm$4EDNW9$1{2MtJd|*np&Fhyk9H$0PyH^@O4!8dWj$FPte`o#Ve%KP$-qnV_{2XHK080JrQSL zy}b+B{GHj+R7_J-e{k zNx)mi-06#_0Rb6L(%?NL@G8IXX)r#kjAK2l_wSRYa5VE*f224)4OS5!ISmx2LYnxi z?F{M>s4JG)#T^Vg2|Mm6%nxRyW{v1sYEzJ;d#5il#|xT>R&Dz zV18o0-W!!pKI@HY{Qczrl#=h0d^X+EPhxtRZpCb3?UyWNAZ|g~{}sPvJ^mF7Y8)p_ zrDFkUm3UXi6kKmroXBkY+ZtdrA(veJ7l(mA?w4T)1{IfW6$TWS$3p=tm#h^A4u8}r zt_0XTrMcDZHpwRLQ`(cmNVLrjMXDri*QdMxz5~pVA}A`h*P9m+7=oDlU}hk`xLEMT ztD_&zj=p=DibcxOL?(-~^M&P1rfy*q$+S)vXY0j><+C53zCC;K?)XF+zBKIk#3X$A z!|Chi2ubnr?9J}l}_w?B6<$u}fo7cy`pZ)aROQ%P>3ul>B8gPe=VJiV&4v+9b zOpaxayMDc4lCbY13pBhu{l^O&y?XcbmtUT~^IIOhI6L~|NWdn1AqEDGV@aYGtIg4e z-}zzbuzQ5O_P92^O>9iMD zcm|dH#<|Sbo@Akx?~6@QW)1NHw8)gi=GWu*rq>Wa#(abw$9(v24}b6hcFK0XdOyQT zQ#Ix!C|q;Fv~#gk0(;=65qo~Qm!4z&vV%^f)nM{}T;ywisgIk(>dMh$af z-+^p0av*ETfdEPl1R!)E1SJTH90=aT4g`SUK(KJu$^lPY#VSB{`&W_q z9MrZF5ZqksO}dRb78B=6uOmW~AIxvNf@iVZKu` z2#&&@8I%meLCJnGDj7zoWIwTC6>V3n+LP5W#DUAKs`4_}I~*GDGT&enf$6Iz+ibEX6dN39^o4?d zyoyT?!8H?LJ%&pLH2{;LgG?e>4It zbS4P2NLZ4Jd!g8EW~5?H{~xFg1sU+ZaA4(7S$~WwGMz$PRx>K?)rlqN^iz`#Mb}^V z)v9(Jgdo47&|?IT6#8SSofEpSEES$m1=~>?QbF9?7qU!3p-eLVjT?@O1i0T=6>N7* z7Tat6(I>|~G2Y)Xfe@#L#P8qt*)Dn5cK0#@_|7Wz6^$T9@JJ(gEVbA_iflmn+H9dM z)PHz9c#t7N+TW9fdFUCj?O#D|2^X39!6puvyj?5rSNTYp`C%u76{XX3m7R_x&7Pf&@Bv3sjgLxKmn z^w(2kjNp-Kd@QwxeccEqpg<2|{13UrlY2{1!BJrBSCnFm;E_^%EVVOI9JI}u(3-^f z0QmuBiF-^oIeB7#JIalF8Wp5d+Ng(T$j@`%j;IRC%dP7>VQ%?roB6LVj!)osu78f= zzQSQr-_=*Qc1YR|W_r=aE`jLd#@`UdN(d-|px~u07(!O{W^+{)tBi^>4;pw@LSm5# zP~W2QPwL5e$SpqG+ZJ%(I9pTuMsO%Qw2A8*D8GP#ChO{^jSHEJpqE% zi|V{?HrcKms?R4q245%cw?5{YMt`B=6M8HtDNHzDt2Mm~bO11Pso)7(SNWgCr!tS< zw^yN3MBwJC?22tkpX|g8^(4{_&}~pf-PNl)m{>qedtTC)=T{xJQuA*I2F5MtD-zu5 zs=;MdSKg9Xs($q2+1cBD`C_#zq9T`}9#6Ztz$^x%K{@wboxKaQz6A~pZ-0vti)OyO zDY{F~;T6>y&KLQ5!B%YU_X1r7*f88V`*Y-@b;xvFm}9A+&pfIauAuaVSqhK_tK~q5tEl0ts)iT>!KEI;SoVgars+B5r6DWVuB* zRtbplswlgi?CPs&7Y%rBvVUgR-wogNK2&{C?bND*(Ro&sv4S`@hvAu{In@V!=V>)3 zVH>*md|D?(5|tnTH)vs1R~@1PTD0PQ{K1JAh<|4IID7UM2W`Fj>|=%>m!QPFDyj=w zO5h-?uy)rUpS=-EApaeeP#^o$eA;BPOuHdx^FI6lEGG&Qb7v<35r2?{n~@o0hG{X# z$lo(KvAnq~R+s)NBf-|WG8mNnv!Bzog`viq=`YQ~n%yl7_&H#jSEA%9(&AwvU0|h` z$oY_vjtl}4-PCig{{_&GhtR)2CuO>jJU{Rms$$=D&o z-L@OnBumG~Yt3*~Z~CixL&4LJ`okeKtdo$d1$b|tIQwRXVI_SPq0#*HVe>bkXd5m1 zhA;!-n%Mf3$D}5K)VW9_E#pp34w}PZO)<%*5+~sF>g7bb6yht`?=~EOlzIWM-ckhi zzzktg-jz!ZgmwMCt80rWYG}7b3GCMA05xb=ekG z_`^cl|IGmgu@PIkP(qw!GfuL-<0ivIKKw_aE&SgN{M6#fRfQWwcsZ(Md@z<86G1^Y zQLz59xMa8tS-j}~hu}*Is7-?H2usC>i~I;7R6mUXe0XdhU<^d^xwHj-4+c@rfeuciBGE+06sAu<6`pTudZTFJ&=5D$> zH?%C<+Srm;l9Og{@4p`&q%1jdnl{^JI)p$F06_pGL3_@^@tm`x7gt9oZ&K-`B8~jW zxtcq%6oCqyIPyghq|VjM`Q*O*`{~bDuP=@#e(1TOIG%)&=e{_9|B5kxDK{@aynl0k z_VMEMI1b#a^AGQjf4zEp@+Jv-++`9AUn!7HjDeMekzGRrhU&y3@ls143g1Y-FN}0} zbNX<44i6G>`}c0NCzC@*l!%Gg2m2KY*(v7J@Z>b7XwB5Nku zQkP}EYDP?#gd!b|$=7+=vXG+Tc2ghA#LXM%cs3$74MdPg%cIomd^RFU1;X=vOLbeU zR(2*vTD8ebhIDzyKvu2S+p@@DCY9;KxlE9~Gx1d-g4mfzDbg^1G}2+3wBjIWA|nxl zrK#g;nZpvMvS%0m);u}$aifcsp03PiQF42u>!RA40rRR}>(-7gXNIK6Zw+pi!%SvH zx!}*rFlns@A1}@s*fzNt-B#H8uFkT&X*&IT6NAxffkct}rm6w(P-*FY*6YnGe+CE{ zyTu$kVj~JD29t$Iiq;i&}4%2Dxp>&k>}VVgFfGEv%%M9Rul}{(R0z zp383dh~}Dq^X+dCkWE$>o8ANvzc+!=h=0K}*LgXqwk^u@+-5s%a@NOlt2wtuac{5^ z_)QClz|;^}(<7`6%YzPea-&X=*+I;%CaV-4ppsxh<<1-Bi;A>ho%2fm3hw?`1!4@ z%Df%u7qNcG7P@Y$`WnK*XU@0)$~U>1kX3e_w>yG?Xr+>eMX&QU4@F_{QPp?Mf2~Ws z7+>A5pJ1z->z=LflfSH#!-g|~`UO{LYdyz>Mu*DAbSAL_A_~2x_#-E24{WoMa_3vz z;1Ozn(9{TEyb+?mDZw{|83KCMR18fG7j{KG$(_l}4L(eAd4;Rf+bA zVv{tH^uW$E-OC()674dFpM)$5kcUN`+{iBYaYR4ZaHI`);znl(KytVvv={E9v1oGu zrLbKNIP6)SUPh0-q{Lax`i?pBeOtU+NgVKh2YlxIL>#o3YbX%cyVCJZt|!&8EBlY@iY>-=tyn)v+rSoiZGe!TGe zdB>3d6TRc9%8qzP3S2@3td&ry+3t(7XbZiX7~AeGX%vWXx1@jm#p^k19$3ypQjEe+ z7K6F)v5w=VLI%u(+{pVn+jZ%@SE-rsyy9*&0_}>qYwtXmMnm%Pi-fOuA zIyhU{b%>oUfL`ud$|)2fq_W&^XBLs@DvOj#66|`z$(o> zRCt8e&UnV3ToyuNu3rLbvz@MrjA7hksMoR?=>(p|BDXT#0Z(Go#z|H0+ zXEM5oj2!P-&D6avt6RD|V&RGIg8>!ysB(?))KsOKJlh^iygJ2Hn_b;8zM8hWFw?{e zAYU)HizOpq1r7HcZl-iYB&M0(HaUM3MiQwMde%TRmI3BT8bSY|DNz+P@^;Ksh|C+t zZcGW5>i?19LJ-wDfplAcHpK#Ff~i8K?uRln1ezOK1_VeD46w_AxTS8abgE@S_x;i{ zF>3})J4YI;6S7;GA|}kdFc#=6Wl9JwnLlLaL@*x?SZYJS+97nKSH-M1vNQm{hg3I~ z4%eN<9IlBdPwm~Q5u;nk02{JDeA!S|aG^7@&AW$kZL9g+MDfahBLGyIp~BEK+v%)Y zgUcDd)tuWAYXkPn=EYPK(1kGc{&|e0;GJ$*t(fMk>eiG=HhET{5Hea4({oV6eO%`u zdTw#XsQ9(VfKj!J7#&lwtDh=gL3oFMbk2W$fOG%GF#!Z7~#R0$sAHC zk)&$4Vz)~w&B0#R&t-6Ma82zQyBd9WETzN;V&z4U#AtbehHZ!>BTr(u@it7?+u3&8 zF?a1=6IEj0_izKRxZ65`!BQ4il*NC1{qL~=ytv@m4#y}<*zFiO(q*w@|;pH`3{ICde5WV)YTRyyO*e~7Iw#J;=t#?vr%=U4bK zn-zF`d5)WCXx$b%`UfhcYq{-slNJ3~Su5V-T$FJBC|b*aGBDDRU%)te<$g9=Gv6AI zG1_3Z>}i7=t=TQj(;gX>5uFBjRw`|>HPK@dtsUKRgj)u*D*Z$0*sn4$5eI4XHNVQZ z|7#3Cg-eN29**=Qq2S0*vz97^tQ5h%(*NZO>`KDh*XsWbljS#;VFv~jmvbuy6#+As zkq8AUf1O%cbK}Mle%G&H?TewRC5*Xn#82{i<;bz+L{gGUIevf$NJK3NFa)?-?XOQ? zI0!-}lcyOp20b%9eSF=6VDY>N7C&Bm|8Vi`b)puDpM*MGJUlI;z}HEzf4KSZ>+SW;kAJ_rx{R#%aP#Z!?x^5Y=x#yelj?8lSQ8m@1C{>Z%_@2-CNSQXu*l%uPm91e@aly|ZWh)V-&q6wa&dq0w~Jsb zf3(AG1(B~D@HT-TCnB|nbuJPx@T8+lc_$$_sF{mGovPn@~w%+Cts|VxQb&Xv7v8c*9`^!GfJmHJ^LX=RkTG~zQr!`U97sX zq#q>eN>U(D^=XfAY{`-+06{--04>uK`5|;nfunMRh*-cDsKpixv0j zl(EAnx(rnWR*XAEV&7)K5)`o%PW6Oin}2B!^eg0j$jXkEr9;D325rjC54ZP!`S>sH z^Z1omf{zNFc=y|M#l{=L;iQk;1-r{%%A(3)_bBqvvapcND&6gh^f@0he{J{BdQ~@+ zi9Dcqu6V{=z6Z;mv6*87LD9YEZc|UJ2z(2ufPUWZx~&6olggKmGOF2@g;>^p%WYA$ z!fWK-;0gEIyk&YO0nY&YqjO23-uj46)@PFN4eNs_m8gmJWpf_dD&M)}kB!gxMjsj9 zTik4HN495;5!=I6qgZ6kfAll2!Ojl# zSP6)@Oprwv-oj3eQ8HmXvMA=MC|1G?QHGF}VMZxk?c8ZC^2xa`R+5?7{{Z~d*axpTZwPWbqEMobuXU9(^d)gD8}KqcYG$Wvo%fQ;kX5}AEVe0{Jd?@T*$*(A z*>bObsq)>Nf5%;?nXIX1OJ)gvu0Q2WXRgo@-&}%c?RJs#C%8b=U<6=b{#Rp0o$BES z;0IP~?hey-Od!TR7ZpW}Fp)h&XT~D{wO5JB0Z#zjDJL12@DvJ<0(X{^4E&_`rZ4rr z#DyBmF2Oi&U!gx_8c7=3&uLkRLqIAAQ5Y+yW)KU$e{!d+tLJ?89m8n?6+j$K)1A#L zbLbo3pIa5}3mQ$oReWV{Ir}tph z)m}#L;i2TNgnK(x1)%g^h@My*@Z)VprrV>1w~yGJoserA&L!mFFeLdIBVIrV13qS@ zCP50He?!QMs6uOR4Ui6Z24WwmZNDcp&TBi4wAwYooA%{w@|DqB9jzT;=kUtl1G5kvD9!e-!2e?=B#l6?l@gXnXAPLQ$nKBDtsLI(gIyU;J+(h(9^;1J4Ye=iVV z$gp}N-_)PkctKp~-or^=)#n6Ur5`U|TR(F4zzg`W&ZjvX44k8IRN`Q)IWIdiBv~gD zvOu4#fyV00gvg4lOa@7C*TmCxOSpg#74{&cx?fg0d_ z2h0(t@r)g%5TM_tpD0(hu6Kn7f3TSf?V&3y>ol8K)h4aL3uH58yGM3O<5C7_?5>?K zxVsk9gEgxO8@vH%^D4z%Pc478PAAL@@e5UF;*j+;#ba0J>#KjomwsI>R&5VqmmI2m zGhij!k(dxZJatw4eoqaktO%m!TMSwaQ0G>SH#=B3!-BTn;S?%?I9+V!e-I`pyo=+L z5mNiffRx-6|KjrOeoj0QY5#H9>xd^026?LV(ySpZDnVc08?ps0@@N!i7P-ggEFdz&_ zxA_;srk$C<+b$e8{7B_%e;C?D_JNT;fbeFx5rTfR%~u7AP`q$3Ez-=L7UW}rJNG&f zg*gCxA2ElbQn^Yb$v`dZM1@2V6?Th;U(;SuT1dpo0w1*|^og{TAIT@+^CpE;B0-Rq z@HA>92v%(pgycMdRK4k7BhZ#~*gv zSQ!^MrO|N}m=7Yct}wirh;TQhbaQ3G2ozkObPv{7k(;;&;a;}C2yp}f9 zoEc98i2wRjJasNQH=c$=<*zIRo4`tEl^XI;6(@&EEjFHL-#9&~KfI~$#zCGKjj@J{ zJn$H+PlTmHfldw-e}L*!Kxy^^FmfE~kj$YDNeqaAbP(#0uucV`rKJGOOonnsfUiVM zkXdB>ietVBN7*ee`e2J=*8p-e5~T?6OMZvc;)&a)mN%>#Kqxj`&4E6`yoS4Vg+Lzi z4hm>U5xB39XQZ2babz<`W&$e2pZ{M&935Of>TRTSOc%wV`lu5!f6;lYp?B^V(J*b}!u*=Mq!Q2&_A1QmbNhm*b zdZx0dl7OyMaHkkISL?KT=9tUC7~6DK%As$}nOA%caKvd~80m9TSqN$2@Xr=ra8OJi z#r{>j8w$gjV1q97V(+CWOR4b0F+_t&ol7cX<71=>f7uAUjSFW(eCJAE!@bV--gD(i z%4A9s92g)8&bT~ynBc%0S}DD%q;kmBb?!grbLKz5l~E>=w&Mh3Hd(6Jt8>K$I;*{i zkq`&^d%P9ebQj(4d)&boz7&Z-A=nn z`t~sGfw5#;jVyU3c{1s?-+cjsk|kSlGpqU%(Ig0h_yHg&A$+!)@!8GAH}@A`y^F;x zW^v#Lv-{;N6ii7q3j?1i70>RI*+=iqKdyhee|vj5_cix4yPWHQd*8hO@GXD!#PoRc zd^|*^DWWJQJwq*>g1kCIncEV7ckVQOh={57+ z>c@*&8Q#7B=UZys++P3i!}Tq)ym)(m@t+F;O!!Q68`KdC0y$f3Ew#ah$s z3@61L_XV4goWo{PH_Hw@WqD4m2iIfpfhyaY$~3OiNl!medTJ%6F%PD8M9Z?GMry2r zp@qVJ4GRmqF!hlVQElTQ2uq54;=|1#GeX2ohSo1!b66G((1I0t*^&kfJ;vrN%Azq@ zQM+Gj*yo~g=AriH0nLAMmnYQRm`6KXds#z0Aa%Mjxm&Fsth(Q#lgfttfye$>l$#A|ETNyM zFF$H+5;``fZV(`BcL5Zc)I?a9Wzp{u-nOjk?4hGu!t^IvGWi-KM9_xh$l+)A>BJsv zb64+7o}-~?FqFk&S5Xtq2xFtv%9EV>>J$P)Qlr87+Pi-%F<{~XVB#s99!^nm04s#} zxC_<2lVIpgifO+)KdpVka=SV!R@5}Rrremu8ZHP#9t8axgHRTxSU5ulANQFAu7gdI zroj`)iF~mAPS4P5ii8@!mCkMtDHf)n#)F%le%_`FLKJ!}qVP;VXLUmanVZlp{Zv+u zc0V|pWMqFIi>9oeFNF~H6pI2It>4*G!p^lA0zFZi8tkC&t^sY&Y)Z=*<0QIzeRUA@ z_G`nB;o1}w*Dj80cf`Qc;*o!3vygPvPO- zxFt)PFZdvp;vihmGC=DbS;dzu7NRA(8j&2%ntj@M!a2Y)S}KahC|TzdV6eioF03#d zXH5os|2=h7#mKq>lpKe89}exDxkDh*EQIuG;6dndBat^|LD=okW;e1svv@>iTVm>n z-ROUO7%L;`-4jLVJQ+xvwQ*z?0_cH^EOGowH`3pmopZ>g7Y}G;OCl`N+HocBp;v?T zTQ^8(*KR9^x#7r3B3KZ0s@IvUS>7Dw@{N@vU7g>%Sly!UtkxN39l zw+j$sfz%WEyUXqYet5uhEY-lbf{aH}5y^0_^I z;{F`Xr09&kZYnh7){FLJaJ>$6cf9=fwUCDa`v+KO7OX4JU7xtM*l6pQ-N5s(P3`;XJJ9{;adzmLyq6W|le zQ3lqV=*?f8fd`dK@cVOKWS(csw8=K<3!?EctH+yGq}6N89&i&KEPps=g7-+k=0wNp z7p~eB#UNHP6?Qqy{I%Yr6?lJVa6a!D@}KBElZ8D(m|mXu)hGl22k}a2P-r0Cdw?R( zHd#X%$(LKF$yX&@4%eH(^h1*oaH*3z?7xOtrPW^s%8z5_hv`u8rJR1HknlA<7-Q7< z^VOjk*!gfbI-4;K`A;;asluKJ#VTN$tM+Bx=Q-Z(UOFBF$Zh2rk4JyF+xR*g>GUPuIlc~aoBC8S!87DP5uT~S9=}HF#0*$0+_m%1*DDV)H5pI&uypXGddIgu-~_V#@vK2U!s_ z5ggVm^uPEFzsAB{a35&uo~&5UL9(WRQ4ebVGka4hnG;MNs^xTS0xU+{i^efN`n z%jat7Dr%s&)vij)7ES13Va7F($;iXm*a|_ICapFZNdtc)>+*>jRCogvmNj&2%C1BT ze%Xbn>8c%p^uZ0H_cvozdhSy+=`nHe7inAiXqV{~?-2Qt9`zav2V15+ zM8Bu~s;F1O20y6&7aH~2v~?3iY<78*ZF5KGs*Q1=(-`(I$^va`wd>S{B(6FW#*@qzqAp#rF?ur+ zU==n5otlWsqGiz`$ciBz8p3|l>C)&-TTbir-{mmjGS>*RRg-CxGOS315;LtB=y zjee>Z-jwr${ZOkZtc^;XKxV9vErP>H9fs((M2f}+sJs}x;iwDuAGg|Sv%ZUt7wu@Q zr0dcW>j5K0W(tm)qm#jz0*1Y8`P?DaB3wmu2p`o|_YVf=t}he_Vtp1HeC`?h4+bH@ zFyi1#{)6H8KNtKMR0v7B@B=25yWlo((oz;!)YOU^W~Qdbe`@M=+M=hy#&1d*1CM`dDQT)d8i@+z zfm9RK+HJ*H^=d2Ai24F6sKm`_Es+$*b*$8B;3Cs$Gm(nXs9-gWMwF4lYYG|u zpgGNb>o_RH>NI$tr_+Dn91)|L|HVDTV6R(;;zzqNWyt8oG+;oWJ!F_dL(NLY&xAX% z0_Q2yR`{6+M1||QxCs1k8P238CU=z}z_pnOp~P$wEBwmJW(NF#@Y@^0iMNgv@EgVW z!4{rwn&RE5_7rgf6H`h#NfA>@1*>74Rg)0=8x5<0go1%d+)ICuE!%w1k%SQl2*X2e z#-vdaai1Zfq`4}1Al*Fx3uF{~w?V`Zr$NM+6(W$qGTCY1JaHhnSU!6iwuzOCMZA>A zXxM6XH^TdHh54sbQgOTC5LLIkkED&viViMKjfTY6?l|NLqUSX5>(gnR)DKC;$wS_n z3`AY0=MI9SvpIjQRceOUqw={SAkzXM*E(j4WWgzIgxs z<>JAE&!BtHa9kAKT2>sDAX+smViH7)WJQJs(agCav4iMZbBnS@Im@$MGxB(|K2JwS zX?ct?Kt$Wuj;(-Ru5rTb{BAddV$@I=E_Z?*U%rG&bcuhPI7~RHwt=MO)6>nH=d1H{ zl9o@O9H-@r)ra%+QHd9S|Fyz{SHG_o%g0b?wLU+y+Ta>2md{pan~T#otFvuMcG}OY zx9?s(+I&bSCQ+wm%h@56$9xHSuTH_lc(`&qzM18dZ+h{Z>K*Smzrohj3d%327)i)J&C!?x^Q!`Tgd_Cc)9) zygxf%U;O!cb(+5;nwjZa^U;++*nAMmwtX-;ShRm+3WJ676peyWBGDmZU~Z_V90XSs zNRl9!P#-m_b72(Ipf?!tY&?SCL5TJYf)U9c^c?HV9j!eEmXWQ=$H3h4kYG$O0_8D+ zF=5g?YcM7lz4rUce}OT&_!$C>l*}N)%j1wwp){-R8)p zaum%qLzx?AOE4>TQ|TTCAkqD75x(mHWH*0WQ_C;3_c;l5G;q7Aw~^Vt5tLl)&OQpZ zhbN&ky!dXj&S>UWXP`Uk;eDtjLJ4LlKuA{H(XpRdq<(HBLq^rTflTBp8vpGEzMmKU z&Q(OlO{&N)`roT%nP}84jIQVk6hjuVV z8$mx;#l~LYXmo>{+z$BizJ>eb!839Y49-=eU<`0!&M=>~2Emn4@i_>ldiV?7Auyw) zx9jcxE6(`N`x)QqRvCZQGrfL^?=)A}9B>aG<7)2*?AN>7-)?ZIcEH;-QXJ|!DF&8_ z3p3RyXUg^9V0@4>YK;W3eP$j}m9^sr#X&GC3>*>!GiJPl---@_QA6!tP%$tuj`o!v z{0{?#F|wCo2L=?E_Dcp80XLUn!3ipVwOL7*+qegwg|#G55< z68hn6wVg%6^^k0m14Q@~paH%?eVol$|>@#h8=l0 z)4vMgmv)!DJX>~mz5F!y{DiIp4!rO@H&KcXwL&r}ya7`wd}p7YXn4(k)B7sRaUa|U z3D!LSuc~B<)#`msy|iSa18M4zKBP@vl{A~_B0beF;KK`yv`EQ^M|~meN9 zNwuYcykQcnt{3bSa$r4we(1Sj;8`Ot(>-YI(s!f;S5TJfDK83Q{h&*IOdCx*rz8R> zvt1W?y|br49W4ArfmerPRh0S(h`^1=U?SkrHq{;!v`LHNH1|Bud4X&M9<(Id49?%= zkF+f;Ar-(xRb(S>0ZW8z2P=Yp1@8|^D>d)KO9IE3s*%EclIEL#oZ6{-C9dHABnNaz z4(Ocw3=A2c!6|A6{s&(*TyWMFy7z;~l|s@!KZCG~I)5mMSDf%Z(D_v;@$>Qy8V?8J zk^k33LkIZ1wI?xyWkqdu!22}b4_|o+GNDv8isbQ`8)k=ObE#ARNb!kc|-k_npaCAA+Gk? z#vD0d3FnX!S=mfRtottVO57A8FP;?pCct6`6jxJ^LJ@RsXb9Nnb}IX4TN~q$EWByq zJk-leJBEhVng|3R6uvA8wH)U*x~@qWpGhL5iDYUF*%_P!;*+G!djiNYSH6R{wc|sZ?&L zqK*u6!X+zTxryvjKkMf_bPCt&w#)Q3ZHs0qbovlrqXFtrGIEx>X;}RV4G$H9>FG~3 z4e=SxI9%<2<>nAhLr}Ql8w@s zAHJKwRZ*v{wBh}V;xE{XdSNI@<0NO9UL4BsMl1*#Is;wGAaFhn_Z*2Bdv4$*-@c-S zj00DIp^eOcleRTw+1O^;$cl$U6^*Rnh!l2P7_nxJqXxENXFZurw-ClS z85)>>s6?M%>xv-LhQAvMB_@MU(PM-u*fEk3c2++0yOJQQHZS*iy?M#j48AH@W|ytU z-Bjgv%Ed(DMqXcBn47!6{}!t&1*l6#&lLbN3SDnd0F0SP1rylbMpSE8>`BAJ$F^v7sq4TqV1IK>TsO0B2mmukYLvwdV)37_euoA!8r z#G=ya=AQ_TLvYmP5KRq0W0Tf)6b!ouUkSYA3^!f-?gF27Kx=6Vf=RLreD3f04bYFo;z@$9X4-p>VVx>KQG(s9&(^&@!%IhbNV-ys{7b=FWUhs^GSI|kB z)NJ5Ak(h#Z#z3|T;({yhQg>n|4pKr)#`B=H=oKH8Ku%4g`bs zzN(sC!CzZ~`+K6}1(J$c9HG~LlL7yZ1gq%8H`q22&TFF*nAcy@{h`3DECJ!=+cQZJ zgG{*Y0NzO7qlnebx(j;GX^LLNH?*gbBH?UIqXyyP+Ty6wj7f8TusR$oN<&a|kIAXBfsO$Nnm_9H za6l&tz#ce;T-X`CQpG)gM8XdXZLpu)6j*X*(;I^FFt*ma6gPa#VH^AUJ)JDR`}QY{ z5HCOR{x`|OPayNCWB@7A4YqhGPo29|2Ydx$huNg%*ad4)MHlpk1;b>{Nk$g=2a-;p z;)|qX9wNF&{EJ#%VX8tahL{go*X{&fzi67`eC??2fR!Q~zXI@oJGpRHfTx`I)Hi+r z0LtJV9N?G(LmU?gfy2zJ56ipTf6yFfyg|W*6yvus^Kh-=eqRex42PUyrAMDT1EFyM z3rHCXF=gI0X40(2D$0Fcb@u#;3zk8PL2dQ->g*chJpNr#H`FsmvOSSfq{Rc!=^}j1 z-zGIcho2}lkDDxi2`wocIt-+tH&VD%B=DG7UlQ@&6H3Cj2vmKLIJaeU%*|s(!hfqI zUAdn`d@LNxDrzb4B>V@F=Eu02ady=E$cD(kCYHB1)JJhKFNzqWCZYL|>v`xHHv<-& zvA+h-5euZ$(B=-L z_U|zn_Ku0m?`zHT_6-NOcuG%`1yNpZiq_VcX$LA6qdKZjXnG-rX>em&J)6!3O1SU0L`8 zq;+AEe3dJb&&&Qz=qaUt5z9LS4Le0ycKfbwo`>*TE^C%ciu73V_{_Et&@7}~g zOS+6BUug|%Tfrbo!px?z6T0d|ek>9N%%8Rt{<0L`J$k$2agEc+nCvoC!GjH*zsACt9V4uLrC%F;_pDNz?Xqb+4 zok%|d7ak*jFDZy)U#jqQO|87`tw+SQ18m^MfDjWPLRf31eWhZ8$(QV*vW|Chyw77J z#OM!Vc9!a3!x>nB_*gxgg}dT^Pc-q#x*lO;Dd89zaHsN>;h^xP`qHuSp&Yh4c%$cx z(U=*BGe+}#o6YKS`*57_RldmTe4QOPdRMISbzW!l|mC1a9JxeLZ_7Uz-mTsov=iGQ4?~aFEUBRjNYM4}M33BQm}e;j@9G zEB-`qoT}?%_qvG^$jLMz;lIb5PWw`tQ&O;AYxV1-vaBEEh(@t~lVx5(_L-Pb_BCB^ zRvCVTqiU1Q@?V5d8TZzI%d~dX_FTrJj7QqU#dcK7a<`fjJ>}kAl`$tT+;r~xRu&m# z#z7E+63oLDx0PF{{F3pcc~)n3ReKA=?#5EW=0n=UIxkR79VDasWj=Fr%vlkH~6&7F<#ZAVu5KDh_=E zwilhmqhDD>ezGqtE2B2s`n%34eT~(*Noz&W4tOdAIMqP8j4#&*~lv2p}9w@Cw zIhs~!7KnYz^e!VFIR;qoZ{8CJyrEN;VfTy7w3rje$P zS08WQzy8m;loGdpjD0U(-CT71YG@<0lu&CyF&+|bq6v@J)<6RhYX;C3Z*mk zx8vNQOu$Y+$-G}!%b2)0++%z^f5!=-`yTbg&u6?Q2r!s`_0g82ex+`FZ zs8SfRS;BxN17R_Z1WN;o?G04wSY$XZSao~jCb1!icbG%izRlKL*u1#$vk&XBW}fML4_z)r=y) z0MYmbXx2`+t+ZuKc_O16WtBXOtuCC^MFUrdZv!=-B0Vqhpvz!XZtA=&Qas`kPD(Z_ zaZT*u5QuDl8vpYE**I-ViFGRUO0Y76iP+RiU9$;!tj2(bHm7;9Uul^ouEM&2C`0V z)$_g)fDqYwmti?8jaJJyNnrUQ`MjF#m+^{h&JO#&+=2H_9B$>s@N3dmra zTh5|?F&p;qRlTAs7Y3AfurgeR;L}LQqbtH7T)=){^uS?9zcu*_IxU@o2n4f|djvMw z1r8@Yf#7oj{S+IJmlo9Si*Gx?nXfOnIkIiJjJena_TCBN;9<;YVSNsS7Ib6G(}xNJ zY2>1hacPq!2n)=o5C@Z%X+@lr8UPPQ2up*1_jap1<*x<=_N!dbd_$k>vZ$ACb*YF6 ziQSfXa-<*0z;?BRa1$|Q=&+3Du~)Vfqf278v_RM|s1=HL=1cU{D z1QJu8mVK?WVs2poU-^Qj)4{0oE#(r}AtyxaMnSDXRWDqhn$U3wr4Kr1-Pb9KMx?9yQTm684-LM##WVCN&(SME&xk+HVwC5)Vi=`QxcK{*NIJ3fQB#vSF06&QZ?%hIOR6C zsRdMTRk>yg;>{M5CM=?;u#(X9*R$tQUInVn&10 z$|h^BPPD@J%aF-J_kM$v%TNc@XScc7*v{YRdsdQ7C}P&ITfXfl%OT|Dt_5JMfBCQxkB+^|(;<|r|NPOBML@L!F5?_M=V1yR@ z;4?JaAA$o=;&g||P(==r_9S%?**=VnNM#>Wv~uNxa%s>y&5P=P2t=j}x(93y&`lc) zzR0msabx~AL;-zzUrs#}M5D+zc*C|KiZ2T(6sB1<-ewDEmQTegzw}0`^OT?>F6OY~ zAPtKYT_-T;`ugVTEwQ*3Et~5Ictw`YS-b^zM9&WU;Vc_nhIWr4wtJ+Sy}5`2bMrx` z^J7JJPj1KOUi(6S9J-SPESL2`jbGIHikYq#lA(O-PFNT>qZ5V;oS#)$5lj-7g6;*x ztt^98aAy=Z1xW|ze|^mxXlWe}Lkmg~Y4*V{d^H3t38`1q23ANCv0_AEVPOh7t+SM$ zuc5DF-HLb|{(<7^S4U(TSCngh7=bpVZd`&Gm@8PpP=#cF+rAk0jA`Hy7&YX-4ib({ zAP$d#EpqZF#OrXMq1)5g2(anZCfnxayjzXBRLWr=h8sNEl z&kI0z9b7&Aj=+cONQeJlCk*`^OzIfUg?Y-~!47{CREYp>wI}gr3;5@2sS~IGO(c@` zU*>!n`J%7Y{{TA%#bB4wcLo%fk!k}K12Zx>lR;@Ie_HEv+c*yYp1(rh&Y4+r`4B1T z_EWY=)9$uuFY(UJO?T&pu@zfWTXrQmY4-O1_X7y(U7KTYMnFXIluihMeoSd8=j-}=!%?`)f@X^n2 z&yJ}lf1%H-4`;96p8j@zbQp!B$=eTShks0d`SEoecDRc;Vp4@5+c5@K0#-I3x1g_1 z#9|)T^EH!R`dwj8hu3f4oe*_;e)RtR(K)g_IGG%LIS{~v2cp@aj+rqkn63^!{lSA7 zjQtXDreNsC&0GbcR!oNq=w)zm@Q(xTjmEpie~VRjdpu%7gAB!4oOtW4?AP(1>pUG- z)zYa`uivqa3|YcWFcyL(TGQHh+2<7Y6Gx+Jk$QV}1*(|EjWu@#?eNzLi*;j4oJgG4 zn<`u9KR_cvFsMqs zf9eyA6R7`%3Ej#lFUVWQ$piOJRvPz4qY?+Qhla;N8Ak0I?xvrP2uLjt{{)7XLn^L7;hZso% zKx{N5JHTKLlKX_(C$0KK0ZqG>3W;P ze%+YwyveEsEwR+$+=;{@n=fFl8><#JAF`$dHIw*>c#J|8%SPjyY`G*smnjLE+Rdg` zi#!4L5Fv|n*f$7a1!BGhCN%oM)P5&OIAFSD1HvKmFdhlwG;!!x+KlRNo~ARWe}vYE zV%K+kc5!j?YP_;pUcrAFHV%M()nz)h+cKrbje{*RaF$*#mkyFRRITZ2YhgEygkMko zbtu3JKQwycj!kdJ8ko(9_?+G%;S@d;BNtCzfUG5_s4=zewau2+n?{cS2HBFx^Ye?h zr`<(0XgtS-z4nXJubZsF4t8A8fBsg~n%e0iEirVZ0mG&Pc;S6NK8_b5lO|qV*22gZ zqxser7Le>Rl}jFg7dJwN0%B>Ma`UvTXbzzPMzXv&l{bk*cuXR7>BsUlwd-J@h1RDx zui-E_%d~n7e!p|g&pu2}{*Fe26V{{XuHhmLQP76j=DvI&>p68gb9^a3eQYnvFzK25)Rr0 zEVW`_0x=w!z)ipbHA}DTb_o!#sO?V~k+_(>YbsZ8GQ&GYbgQeXk$_IgA9rP zV!bU&)QaH&DMv>GGT>z8f6-I39@-%3oE}c~KPd~ZNhVqrdnn4N*4=7 zSy5xVnb}6VgT7QddxP&_z` zVhvQ!ZY_#|Gh|Vyc3BcNRn13nJY-PLLK$`qDm;IC`?xWc3c;Fc(3;N_ilOR;Vi*pD zB21}65ym^A7}g$D=a! zB|`gn1fq>c7|!4nDT!>N4d%FLgD*uJ3_55*N5ifM8by`g-%2ma)_QcJl53A4)lbzs zdl*Di!i)&p^Gm#WQiOUy;pz1_q6}Puq!7;H#REe|NR4OKYSoadklt%{u6ToI-gvPiffQZK02Zf7wDcNc#9nS(-cWGCg?V z=}9slNi{y9Ybt|WKB>XnJ#-(;L*Jf#l#E&QEZGOv#BkMxGBfd62a8+GI#4R9$keq? zZVy34xX$2(ayI@9mk&LtVlSc~)h1xrbvsqraZn|FiM|DNn!x zoQHUidO0lg1?-81eYG7*4;~DVdWBTJNFi^Je`iCv0dB$~>V~v;@t@lte;30f*HhRFKU$$$gI{tlc5*7mVh?;c%6Rl#55%J%j z9*)Ubx+&7BD{Q_s)514~B4dx^eem~~UfELnQAUzUBfqC=IZpA706|~h<83}8;->PH`g=Zw% zxTieg&w`zOjun&{LiCGpn0n)1qX&yrf8MW7t741w{j(OOA`#4l<^_vV0cJ97Ts(hH z+Yzu|PTO1C2Z~Y=D@aXx*O|{*lzz{lBMb&?@`4WP3)s^^`)Ygtp(7%w5rx_R7#A9^ ztuJWM9{)YoVnA1qcwLdBzJGLF(lmGvzEwpA)ES~YyuD^HwLPMySg^Br=C%@33 z3Lw1u=PW`Rrt14`=Py^FT4fxLZxiukBtqUZ2N>Xg%oGkG@mLQvR5~YZg9kY(;>YP0WO(dLB$ZzKO0zYofGqb39$75JV_XX;+Xv@*; zA=T-WnXE^L@4|DZ{JVVLKfaTFPqFjho28QP5$<`4XW>N@esjA94&Kh4FQ=8N<(Q{| zHlFwI&$lhkStqK8Q*5M^XM`{iv`Ee#;$EgBv6f8ZYxfzEt*<*)f#KYTfREzL+N1U5 zW_Fi!0(C93vcK?-2!*_tr^tC4D_c5~vXK8+0`A0nmW9FrQyV;eYUEskZRiA30x~rq zJo+N`jcEtBk&hUVQM8)aSGAk8(&zT)dfruTQ@XU@9&f)BSLg6Qt_&jr?mnm3RFf6k zDqz$#*uniPqt$bYmq@Z0?#cTm5+YF;rWwvXf6Ox__(dK%Q1=kZ|Cu5cMTwm6G&FeR z(Io4lwF9r|l-5dCu=elb-DkR=FW}uT&qZyovf1fuHFN}E3?^;gwo7-4$}rVN4){p7 z-`5iVnd?C6A;IhYfNoN_96Jar<0z!Y)MB%=$bENPDc-A8LZD-@mqO(`=~<=*trjIi2`ulca1SZ{!Z&qpvbe7keyVUs@;czQfg zmL*F%BZdmpiYyKNgSA=TA048;&5=bak1Paas7$+hZHxLCK&laxnN;s0b)pjkENSIOkQF zMPs0Y7=na#*5#Pb9R02u)F_t4t}Ar|x>SLk0m3+rjM=I&ruKAt=X^T4!D;9>WX8V@ z`A_`Wdy)7pLG5@FT>@i;c<~o$x*HuUVpWQNJn)i|%JJ;R+?JXqH9r(GvmipT)k>#& z^m5YytFiRd`NLly@h<`?E7EuAyfS4KwbL=VPTcN4PN^&HTt5*sH(y_F?QYxj1ab3n zD+#mdX%Nq%ZLQ-zTvvHBbnOsc)V>8>6Rd+rv#TK70LL)hS`JOgXa$onFfH4Zpk_-lP0PWNlLD z+2Zl_Jbg^wZJI;8Tw%7`EBWm>hEyx(}{P8lP7)R;~+hI zXMmb=@-jrS!fNW*ub39q3Q4~kb|8Ur={qML3}HiB9*1)z&tN=Ag^s0|;Qe_eQimNS z3fw<;FK}Xzv)gllHrvVBHe}=BKmn?Ww*daB(5@xM5nrkYO=x&=2}h&KjisRNzHX9M zjvyIh?|OIB*Z27yEnb}b2J!g7d)@fbL)R_41r(Lq_a+JEn?`LEpAe;5t;w_&H&|$w z2l~HOmWS(Q72*khM3BPQ*ozK{X1}kP9~?qKk|Qh&gwPQ{;6?>sX+YLW0VdY4M22%# zY=X7zZE2XEA&_N%m3y+pTqyN|evVm+tC#A;7PJu;aMN5FT6UozZXlw@t9{Al+#+DKtn?r3^tdcP|v z8}pWpBLzrN2vMUDVi4zY0MqZJ>N09bKYtrP+5U+)b_bRN&RW7Wph+>D_BZk9~91IpXRb5U(51vrDf2%Fo#_v@RN}sYZBoWhLYB_ zKH?9Xh)(_)SFf>iYrKg+MT7mZ|T_j?i(xLm$YMwGE5R4&f;;Qt72x`&{ zTR0eLm-<(hC^l!3Jb)|ToVFkpT?bT`DFt=sF=krbMQ9S|AnlkjY+8ivzu|^v)Ol2? z!0U%R!K0+t{0lQcYROU}4NB3Dej+fyADUu=NPy!AD6k|8g%;wlm7#l(eHK$^I=_&o zUU)L7??U_Z`KRSsOhx%ck&^^rxdB;bXYDJ7W&aa; zir@kD^>reO>O#>JA)u1S9g&r!AY(yiR#=Q+l1lCcQ*h7*0dboc>H!_~T@m)6yF6-; z`%XcTTqywkj@kniifC+^0i#|X=3E9W9C4&r+2ZvLPW|?I&+}ZY=mS zDSoXPO~7LAt)Negq-#Vsrs$wIp|6r<^U|*(|Et+Ji%l4=}FdMl2$jXBeUGma0p%;N-Mm zqkLSpAJ!$496?J~k~gg5xXYOte~h~<@{i|*rs}K;eJL>$91PK&!MQc4kX3NieEHjS4~|U3cdF#+@pLE88YBtxlISe+h~*j@4Sv>6EKmyjbl_5-@{Na>bhD8hUD%NQPobNmIrA!qZ~| z;mZTDfx2*xHSXSa)hOGcXgzsuwWkRig&gI#UX;v(vBZD9XYiVAvy3Ira`Se4WqX!S z_*WuTXW{${<`}G|kD?8v`NKQ~=Z0`{6e5%=4OvZxHVkvUhLMbxR|&q zHA_$AvrKrTOzUL*5uZ3vvSgil=yg{uPeWu(*~7Ma)cldo+>)=ba03B96ffWR#aI8x zD=vJSQXr3P&yqY%pAAwG>s#0K{Zgw83kPWGh2a%eYA(Qc1UTK|dDF*X@3FB77}>&I zce;sH%!WWTnL8qMv_!Uh1{q2tY!q(xDDrR&FK3I^kxVD>livX%*PM*QdT2;`(-Z7b zsBd^T0o?Zn&F62V;U@KB-C*GaD>!C>oXV?3L43mkO|JNdd9ayc4~&&zY?mP3C|toXvIclX4eNilp`Q?x3``+As<~vBbXv{}`fAiF|_NX6$z% zterKy=oVD;Nka8iA@N4@!?)9I>7M#ejyA}bw&#pbj$`~q6Q9nyB(w<>I3CQ;yWObV zAPdKo$4^Vk^#+IB%1?++iYj|J%hY+#uQaKod@yvthJhkzEfuZnRlDxtpF=W=FQB26 zzA}(mu4py1$7`uhD^=jAX)!CV<{^;&ehH73#HdmPSrOyVnH)?2Dt*jo76__(rGG=~(OU4F!i%vWKzP z)B|whSTVfQd#^wnd%rcE;GO$Spvw)&&g%Akeb~1Z+@Gy%EEJB7$cCi;_whAUO0B`d z+x_kXLdoi(F&FJ;+WS#6?vG@b-e21jA6+tlKmW@;Op8+gNW{zZ%f5xVRS+*(0#%f0 zQA~MhjqrAoo;+3lh)p7fuA2~#b{&+N;K0(?^?@QH#2jN%G8t=sC5nVFNL{Zqd6h5@ z0J3V*cTjTogU2vBg?hC@;zml#etnUucr|k0DrbZ1uGU&^Q<-9D7_i?uQ?h4HXRZXQ zbV{P9EFTgM#%eG8kV{Idef;YNOKc^Ad?7@_@@#xyOuw#-sD_ZytufrZJ?HJ=U*;H2 z$xmMglaG)4{!R;x>5{8Fwp^a^)eJ#AOCH@mveeo*7(8sCr^BeAvgPPY8dO&w22)UU zX(Iiybpnq*5RtgVHTy6*>QbeQed_?|Ci~&;R>FJ2w?97`^td>`9ZIrTdSv&rnT1{8 zfT>|2JDws@qV|#%@Pi8EDKd+6qDf~?kARhe4A9`#vYIt84Bstt?fgqaUTVlOrxlW>`|cJzo=@xQEKh3K(dAxe_J`l#a5$X2X=o?P(3 zZyeG(vJinjlsLD$^zwcB8sHl+8@nxz^D4Jym~#8P8^3GM=8x|INXtwKIZ9gaJdPz_ zU$;IYg0+Pg5GoXjnHNRx{E5GDN<> z4MxF9q<4r^V-yCfXd zzE4kUTS+agL0`Sl#huT~QroN!KAs#FKL`<1u~{VeM0|-*-!q8cw%t{8&umW;j;E0c zJ2@8jwg78xSgca%d=?5SZK_Z35ImZ!W&?uSU7Er@qeTn&AG*nN2u;+S- z59Wp}$)6=vFXDR_iN_9!is`zQZw_`K$g;WvKp?Ztt$X$%E`SJ{|b@)55%-v64 z4(Heu1Jbnn`DrwS&hJe>S!+eJxoRCyj=DRcV+^_saHR-|c*10}TB*FG$Qc5)%^1;H zF344%OLW}i=F$WIa&=@b{NPj8p{ky6offMawF{V3T8hE8mx-ayD5+)g;gK_`U|*iOpUVEO`%fAEwD;N56U84AXsMx~O9~4e|bz z+^zK?Z}hXcGyfKF%c|dM&@ISZf5IsTR5RPh8K8)nPaBohACPM)e7vzJG~g7cN~vYvIBB1Flb5kSF~D9jyQ7#hV$iCIx?+Bt(`ceGc{YeC+~N7lx<1SyVM z;p-zZ^UH4e10^CXHJeaYn!Wa3XreP1j*?1~-&%=>q&ZhsTD|FlkQ^|=r(|f3GacXk zC67Gc#Z^5W-#b=WTm-$>r%M;SUen=L>7(p7AY@#ZQi$9?%^L;Qn~y5@AV{14M+4VEXc zi7wtfn~wvR{UDT4upUipTT%;IhbkR|(>4`a%5nB`=tVop4W?iVLR<|mC4!YVZH|h& zfw@xGA}VIe?#9*%;Pms-N(`s|?KE~XUOud-JHWAqG~3skON@nRQYDIf(K;826PRYl zt@6m#`LQ#+XU$l!!6hb;0aAQUo{gskV*&4Oksl1Tq2{wiGsCz;yQjG2XQW2ssmGtd zznXl`IWPR%b8l}1zOj-?r|EmPpbq5kSCBv)X~MiZ@)QB)#^b|L2X{f*23wwi1=U}F$b9;pHplHiGoejMrTY1*EC zm;os;!Wv+?H@@-3<6RwuI|D9DYD45hAP4w0$^)CVFGb??u!DeA+xSIGd86o~l%Vz; z+E2JxF^!>1@X9%aG8SF`7t5xc-yZdl5>kYuBf&B#*b}o+A3(Xw-C!!G60@vk3 zsFo*%y}>&n;Y?nc^EF=6_jeu7gkMoYnzXFlhdeC#)4oIjlS~0u0!H6B!Jk6DB3-l$ zaz@+CKAFX#uVRYH^;y$)bWAcQtA;8xY2+zk6Y&{R*4ThvLEl0#Qh7238yc#jSD=Ms zzZgr*TF6c%RxTX>NC_F6OgB`1Mp=};s7|Yg8!S9`4$p++aySjv#XlC0ax@JVN<0>5 zv?Rn^*fdG=r#>a|FZu;K4L{qMh$y~+BV@k81Zv}cGj*7MFuv~P6A#_Cw6RNVDsc?dCG#On$~QdivWgTh1DR~UiGL-`K0r7+ z(liW;Wo=_U!r`*MD;gx9K%6V6X(1yUM>zsRmfHnVw8H*w%+blNq@y!btREoA)6KX2 z7Ryj7i%`6$2~GZ0aXJY7Th{irjN4N>7zy8r7GbGEs8CdzPzYkSS}}_N;Wutog#Y+eI>F=QwdID+iTgO4YCH zaEays{Gx-fKJ*fz=pYwvopxT{6^6JuTpy35I||00w-*z{^?3eb8b;dQVT27 ze4+e8qh)?@)4p#3K`xZ)*D&>!%z~tJwcURJUUP#kQz=QsHgEOLQQu(H@xADc%F?y* z?vy)fyYR#9 z!+j<;vIp^8I=)?hL*s0+8}W4hzp3{tnHe1mZBHP=)Co#4+oLBCUF@$_gCa0js>qU%ft!Lm*q1AAd)d^#m<>=3O z$`Hz_PA#y-y3hs{m?-e{!ETo1n$qbj_KK~DY<_5{(aF5!HP_QTor~Pu%eteL?pK#a zp?RS%nfu4Dsj0W`rJ$D(4k^$b(MxMUba|nGvA>SL0a4DZuWO@`skj{Zt8G;Ze>D0C8H^Sbwd;QX*8U2A?0wd9u$f35F z-6>NJOY+ECLP@$2m8b$qw`0@HbavOjRy9eLQs+ZIa_D0(Xz&Kb^l_?xL`cm7hBr2* z9r!p!FZU;J_Yl`COUQA<{M0-xnXpqHm5`5_Lx->*uFS@?y|V!aK||G;wU-)n2B`E9en3QuvEcNZI9D zc#mreA2~0*qMM_HR*R|&;+kzMj|yW}>0Wdyo4*=4F2)wFjj&NfN%_q$K-gl&bW3R? z7il(WabR&qVU1g<9%?L}aetCzs6bGjWSyj59L*i1I>qu0zpWC+YWH^m9jRsXlgyiV z?y=949n#t6YPZ{E-#R;Ec!Dk3lFGgzK)XgdsX^-%pt{HII#5UQNvoF4xJk}pN^?ox zD!3vvN@f?%HEz8H+c>Q-+lg|#5PWhoL@=dr%8@AjI{Soxo-NxzE0KVltyVqUj*w!K z$R>|i>YYWw7&t9c?ZAEH4pu9uu~a|9;RkLkW%n&c>T6A`1zcg&WEz{+!)6RSFK-QFtVB$D{)lcuMtI`eV*vPlKv)P(vx)Wt3niwsP1BX%#*vdi zNbnjMv@^4RYxmQIqCybPV8Yn8H!4jK&t6~xhAR>D((U%%ejM=Q{`CG7S(_B|NiDBZ zMFw&0W&)-wC|km$i6jXc0d z!N`sVt=#PHQ4>tufBM6*n7LvI)CjjBw3^6VX{`VPPp^YpOfK9uID-X#Yu%k2i45d| z7Gx?Kq_Q^jZGK9s1cP5}g$Y6TxiNgDBuwm?T~C>glu(OXNh9)T@WLP!o6bAS5QV%Y znM;%1G{aJrFsr8Sr-|Z+n-nT->~ML;n2NGU_Yl#Ksr$g1{dxqL1uo6({O(?GG}-j^ z@<9cB5h#aJqbbHalyM~64?kVGeH1Fp#2U|LL!a*_VVqZ;VeT@V+qOV!mL?>87fc zbAZH~Xqi(DoVCGnNKyB|R_%@@!uFG@8GQuMQMl8Vh=O%aBNz!c1=sSxK|fDGEt%;1 z=ReCn;a#Co+Is11=gKy>N_UKGs4s+KSk{2_-JK(>ct7Iw#MCP)1*THCl|3b@Ac6+? zTelBU{zY?96cIFUH_OF~(-q34T8huonKKRGR&jV1Q2~`uJ;%#E(c}98mEHK*bBN30L-zO#Gp` zRXoiH-;PL}AdqQ2`Hh$blAglsH||Z9&D>fO-`1JD0@5}j9;lFbphDU-ePL;kEK#yH zg`P3=)5iKC%%w+6mDDlB4XeWP_CHIurK7)qsXanx;5gRboZF_MA|2~$x8K~jvO-3M;tUOV5-VUTj$4UX8m zN)~~a>%f41eg)iZ6@A|e(GVYgTXFnSJqcqQq~SaO;xY0+9ua8WDK?Y8VCin!7irYo zZpOm()Q(YQe{vnk6)Q35d~Ya*L$C6N7y#u23CanD^cRXDrHQIm+!|dvzqFv1@MJ}M zx=BW+4u*xjFX5TD_#zrIBvx4kg!YuX8K!P)i6*ecR~&)5k~}0#M4OwGjCh)VzIuD$ zqF{%9GQXhr5s4e+w8priHy`so~cT5z<_y!7DnAAV%lZ z5s+fNDdP>md5)Rb@tNlr8|i$$v>BFHDESxj14P#?2xedAVi~DS)#*ku$5WHRKTcph zr^?`&8l(7Bpa@hTKGRTwFwQF&R^|)fur=Ed4p+?LwQO0}9Cn^7C|QUyIYzO0pl?jK z1CreXf?3rX=>$&|Je#>-BJBXw(gi~OFwuEI`K?VH-^UN zhnQ5l#vnc$C_6S#b|YmllAZK542kWsm0XEP?nylg896(#?n0AFbk*z1y2Oe^)J=AC zrC&3yTy5P5|9@`50qsdcGezXoz{BJAuRx!Im&uG(}`9llkXIuPdpC0dL720 z`w%o2zcl`$DY1jNRbQS=;~RN%LrOb5Cez(lui&O9JY!-%f01@hAmLbSTV3S-y=Bs| z>RzIVmQ`Em>ReSn03i#ZvCxalbXRCIj4PO$y3ome^qadT*GD&=9X-OQzyJRV29*jx z8M;P_FOiGVqb4`yS`z9o;3P*&XbcutB)LE&05vNDP_uHOk=D60nYS2s4nySn(#Guo zY5)!(X6i`2=^{pvvY0L7!xR(aXis;(DVuogvKwpi{iXHseAXRoRi|RXYPs(2L7NKn z#kn%EB>dCjZn&rk>!B|dn5i{i3cLzrTB`REqMPN`r3f^&FA(D$(`Lq&3o0VV=vbhA zb)IP0he(Ig^hncH2p^FE9cU5yE&KOf3ZFx+n-lYN66{5nsM$EQ7&r(p*$`C9^`N4~ zA5&G#{q@;bGjK$<{h`P7UWTu~Na|Pqy_9wx`oxto6Q4KiZaSMVFT@(o0O?ilca}8v z<+oQPXShpz=^VB(-1hbR5YRp!-+wtZ@(N=C={ydaNEw;8sQf=plqLZtLB(Q$-k zoH`uwzoRkvT;tU>HdeEI@0q5Bd`tVbj$!|IHH3TliY3PKPx0D;rIkXE%>jrQsIrQ2 zO4m@FXx}yps|FG0UJ>ceRG$Sz#yoN3`LmFw|vAoXe zQjxAEgnlTEc+`)|kGT=Zr|ub$M->0hBl2;SoJLO?<;@FhJrYsXnO`;b7br+=BVvJs zf(3#_hm5d7+828KV5asJa&H+EonPk7tF!&vg-fCw`h<5s2)+SakfX8=jW06H&WE>~ z05Iu2?>Ag;`8@|@LnHmWdO>9N{YPf>)Su!cEQVKW4QUPe@V)NNEJ}!1{}&{sR<0Bb zbtmYy>I5^FIGtMh8Hkuj0e=`zVFkU)9xVEBY?q9L+`4u3(r2^2N5$Nx;q~)?-*GX^ zszbWtSV^_>Sk!{ZnnDy6ub<54<0pXINaqmT23|%Sv)KmUIC4$hwriD7%&)##BS(9j z-HsEfC+fKnqmzY6?IRm^cIMRisS76i&pi(};_yNbo8ON6!e)Qt7T6Lcy)(fbpa0N; zF15{lPIn_;*fel-@)M%}1J>;1L@rRjBC)B&z1?i-BfXha60l=y_1GoSSw{>^O3DeW zAafpfbH9RAcMd`so`wKRl5$leg__Onb8`?qv$>=F>xge%>^<3AB4oXn!4vhvlmU@E zU1dcz>p$HM1Vgfp)E)%^v2xvRCTB16LPp{dsj`OHkgz6pD{cJu1T9OQDr`=V*Eb|2 zRlUcK9Kp$flJ*@$Ob}_90EjgW7U}pCxx!P&RQE)VRgwl>zgT(C(ro706}4=o_OB%} zr9>K6_4siECC$6hmLONk073uiwz*O+B93*S=Q7weJ~)U^gMhz(kO7e5o&I{ z)!ZdwL8190r0j}2lVAiI9A4AIi;GlDStHZ^X5%J?bB3#CxbzpFGEs@8L1RN2^+Nr4 zcsp?SPKRuYx2cnJQz>v-U+-@bVb@ZDGd~|A@zb-2I?FIrf{x(w(=Gl%2!`11UU)<# z!vBA^_x|@u?+{O(h=DMb}LCysq8m))*NW4QOnC3uH1Qy?$<~ z1-9N6{1cXmx89!)_D{7x+kO4>pPm;^iMI?oyIwvrQ!|`@Dm95ExsrF_FC$1!WS4b^5+PVn4KKr%nS;JI|K<|5l~c$ zvkiL&RjocA{6bLKftPhd-e}N}+{MZtU@io5-uDn56T?)=R*lz)Yq_MT(#Xkdi^{|j zW;~7_kTEFvSOJbyYSnD%`E2oX>^u}y3wY(Ltl{Cc;noh-W#uY9}8LRCxynMAFxBAjh3**PnCPWKn0$7K?#IOB)P@UPGT) z%S`85v4S}DhagNcIcW}u2Ezo!ZGej57m+d*M?aPNXN7rajXgUdFcI^@5%sV3C9t$q zeSsTjU=Z+&ix7)0VrdPEb&A=*6!v`Qhj`Ee0xh{Pfey$x1IV~eqJru1z|Ov73fB*T z>XT{PY|PtCQZx=xtB9_Mn6N^eQ*;(B4BJ98o}n5r67#ZVp&>c4puwo?f*T5zDLo&@ z!*=!G-H~U^skKuDr?G>Mn%wW0TH%iHCRFsDEdgem|G0y%gV;k>UV!$NlslrG6*IR} z%qh-Yi>j-wv$)*)KjI~mGzF)+8O705wb(x4AAUWF7%jO^9h>Sem9U#r&P&>#KcD6J z8)&siYmQC|o=kvvNZWp)te#fzfDiD6MXl=C4jh9d8TKZTka6m5@L())STu`yvm$#| zWcY%AvQLfIly1MQ0bt~^Q!gz_kMeXDTT!r6qHV0(kL#cExxt+HdL+T6QeR5-&iW`O z*mvr(W{3+5FdM6N*)-VM3g^Y2I>Wl!G+~+2*1p>u;O_T~yN=)4qLq3gxKH2sjWou+ z6OfD54)CKSHr5`m%npink+n&bgNvh;-{0$9DOWsgKN_x|hk#*d=>X`!vQOV7ZWJn9 zP3hrcpL4{V!oR{y;wwmeHOV0VlT}n z zgMfIxnLH&^4#?&)GhGXS0lmEf%i|CD?Po%iGck%VA#q9Kb81M}fq)bqrB7CG7-Evw z4EaYS@b~=yV?0F!WhK*NL;0>lx6Z%BuJ@$m%1b0PLue-&xwnfR=M=o{gRKbt%H!|S zI%MH%Va=4^c-CB?z#Jhes;9Y{q_Xbc|Bk-;-jL>$HUhq`;A?3mlDt8ehfPH0Sc8+D z72jGdY4qPi8xgd@X4pX0U=aTeZ?P3RIY;$QY4}eZ9$0Gq`}&HXDLB&qLq=aJY;Ok+ z>?XkObdQu0t;qS-Qc{n}`Ozc(f&bXg`dtRV?{rO;LR|mupUH$ZSn3;6cI~FNMIoo4v_?_uBke`v-?;F8|SN@*wz(8yk9p&O{@I^!j z)P{X&B-Qx6#^@#yawXT>B^}poexd9|gx`@ksK2^|fFg;3B89++MxjB^I%;AiicYKc z4d@cujj|4OH1XjiGk#&AGja6Oa9P_ZL`wc(n64TNt04MyQ5&ZjX+6Uw}IgeTGh)HY}U@99DP=2R0XKcUnk~Ij6_> zJzP1m4POw*Y2*Jlv2i_&(fru-6WBo^vXZa#J1Avj>EjKg2RnjPaSU&sdnIIGqL3@Y ztB2?J*S{~~dX_oo>&}jaY~0 zhvRg5b!wlgD->A0$nSesQ*hHxKK)xuz2W)xj6q%2>;re9+$yfIZl}vobwHmtbZ-x& zpFog)#Ci1uX|FErbf?4h8J$|;G-*xr8$$|r;lR{D!G&TIzSMp_#pmi)lG(}`6+(Gi zXfR0ftGkpY><;o^2uM2m!~_bcrr&RMe>MMc%FWFv7FXt>ESa#9<}`E~c33DjpNi*r zPW@^C$>u1Z`@e7l|ATj3NZM+wU|o#lH*F-&e-rx#1g3cNmb$U4LyYrQ!$?=IMah$w z{qY`9V6q@l#&gk9P`z&#k!i>JA*^XBA#_pm_q}P!1HGUiA0II|IEvvI(Uh z#Kjd8+MXdUj?)VW>P8UMEoI+Aapo&EkL1@=2d)dA?lF$_Q)_tv}$WF-kc&Tbuyd*eg(fuwapl}vYxCxB3L4qQiqF+m5 z^jfvBAhv^in~MP`kO>rMz#^1QMJ4r@=+nR>VeVU!hkxhWS(2NBWW)0#8Sw|n4 zC}ZYgBZ2=)WBedsGHL!+72w)O7#_w1`v)rGuykgF>g^XHM++Z@$9S$%#Bfl+04N|_ zI^8`a%Fv5w+%II3p#K`AtY?t2u2EqV8iYkT=?~(vYgIRk<97b=>_N1Fx!;@a;L%ob z*9(|6NTn+h_WyrUWMwbYa$d_}950D*-1DtF_?`hIQ46bxmMaqcPo#2?Rn>g7>K8En zt#+?7@sj7%wT3i|$uexHDuvxYg-;!^P{`cr3d^kWVl#(=wDr2qJZo+s&k7Intj!T3 z-uK{y_6DvgsmB}sal(ECLtIOU(u0^_MW7y0dT=5_>u-L;EvDmzZuaLjcaz}M_)j2q zZP&xNrTsoER^3T8en5-3m%vIMY{K-*_l_8@L*K}`o#WF%`a@@^Xa`xyM{Lp@yLIWZW0wY?%27>YKFB`SMq# zDM0l%-Z%#E^AYxC=+oV@0I?67H6D)oFyz*;_yeAb8r%ARj_>8*W&3Yb3(m!x%6f`G z2V`&kH>w@pde^?1?Zz#5LUg;JJ*VvcUSm6bFSyT!t5rZ?L^GOSwyfm+=_4AH1ep;+ zQ;pKW?l&?LU%a3CWRlte|7)mMF(7!n@v?Th+Xpj|M5?}stu+TKie$)@`0G0jD~2S8w0HiZQ#j-uc(KZl4BYr}e#4q>1-sFL(jZsOw`%{&s$UAv)LJ z+f_4Nz~_hG!|_iWavqXQbPUvl1gOO4l{HVEw3DrO9Fu`vn$}8TUgZB)n&lh-qBrk{ zOZIgHJgNFJ|0*LUPljyPq4Y6`5Sr$OW;T6=v>yciQNvcXD2{SbNkzkeSKx6&4j2ylHEx~%e z$`_^*mHF<|+b>KaA`(@oAGgl|;?S{{@n@32-?@(2EK1S%9H~v7wTHm0d^5tVVv!Je zc5lmg2Cc>>80~R)R$0JDia!CSGUoOj8(tv9>C}7W-1Fv|DY{KFW3^M|oK33mR#vOTA{_vJVDGyHi0ZhPA7$f!`$21DenaF$% z+8aT`VUP8pYLQ9Y%rTSP@cji&p-SnrE2hDch-XBkJhrR|I&Q9vn=Ulha@t1Qg+|q! zEO8xH;U?lwk@6+U(nlg>Nq(#M*a*gJq(W0gM}%-L2-fVcbc>kjX&yl-+sEYStnNuI zrp@ON;ka~*s6ZBt=+CD5V^Rj{7Ss5t?-+%zE2F+iYWIEF=r zjlFneB-!#j|56ePBi1Hn=_&zxOuhw5a^X>M(A}%O4oJ2?I#-zShnie(aGwhJh#MIilq;%;$yA} z{esh|3XZCn%PV=jv22s+*Gx}ZshFUuoaKCWso>H-{9)Yp-0^B}saG{e-rX`o&GPiS z@O^X2w8Fvtjv=w6`HE}Y;q{O1S4{hq&}xj1WZHNV#l6GNJ!oX|v1UoWVwsbW`6E1T z?+xuo0IdqNN0gETdi@)il!}Ca5gaJxF&O3=`gbnAd(E$njx)#Kl<7`uHqw=xS&w>roXDlT1jbFBzq=zndp_2=OOs;Oap2Y^)zZ zq5)!86ESMXE7fi-^od<Uut}Kz{BPPc zN-axyD|aVI8%ChiMyRA%i7A(M$0I3K@~8RqPKGZY?`+f$>~gmjn)ly_7zv5m2MZgY0BgqLobT6h-_$p~zG1Bi&FJQt5x0DUS?n)?=bXBy zFP#4K#rqJRQf5XRYcn^TJ)1xd|L0?7Yvxrk}PRjfi( z5WS}zu&47ge<8^$wUZ8O`K+diD|DS_0fucG=|>;$=Fkmsy#GYZtDOu+$IDxr-#JqK z)hv7Z=9`IQ6_3vtGgck~XAwXRYLcZ=d|rhEe>v4=OVX{uFEaRx;{8|1d&WLp$c-c( zwO1#GQz<(BKt9_dGt~`8;A$Vb`9~UlK(SB;cK;|^G;KnaZQ4b()464FA~b!8!uTJ2 z3Q&tc(>QafGeZ?s>wHSDar{K4G9Whj6h<(!YXw<cO)jt>yEbUqFr|5G2}wBU|E~A;Aj$<9^-xtnhh< zlE%*OthlYp%iV|9e>2H&*+;v$c|ax!Kqd(UeNmmg**@oS9}7OQH27Vw{;@RCLA~9N z@;wA9fII=9P;rEDy|Euc7ppn$d|TukI^necK5g_*#hFy+)}dv$W=`hLAx5|sn+?cL0(=L4>Wzn9;}1DqW|-9Hzo`{$A%#fv888h3~F z2H%NysgniW=?&t42gLujNhD69pi4!-14pd*E??k%=nxk&IYcraLf8N}YjM~gftaOV zBNUOFGoTtdfGBn$i{*)2)vv%-&dNZwWRrB(0cFAf%7h^*{{cWP3mcoaw30~Un8im2 z2^|*X`Xh^Ewwr4V4lS`VVxL-oPQe{2*}E{1ca;FgJQX2>LF=StfW90!b^5cuge`aJ zeCv=vIFGZc6tNMm77}dCXUudHeyvEsbSEQ5B>9)1=+Zd_rQ|S0H;MR_Ti%XkG1sJA zn*s+OW?>Wu$JtkMyc;G`gJ<)-gNg4u*}CRE^gn^8t^eJt%$us(4@a9i%?Jw*&h~$= zvRlv*bxz_%=$ft_VZIuWJ)=+?{G#GaPnrVJp^1#iuSc4Xl}uLu>7Ofz0V@+iIS@Gh zbMKOJx<1?2x#Vw(x>E5}LM!OKJ)PR*FO3o(j)jAqoD-L6nQAO{E4!}JIX5M>DBLWG z*Dq4CV;AMJgRG4AXGF4HZPMzw7ss|5oPc=|>+;WZD^}z~j*cH`=+;^cF_yfQuXbi> zR-8J!LV=dO+=~M`qg6=utTJ&} zPJo9aJq8wPgMOZmf#w*ufeGOmwL#`?P|#`-BH_=!Hh)U=g7a`c2C^wXng$ze0O3`p zqKzyJg9$qIHpd5z)mmJ};$#&!UodyS8 z#82!@QOoLDsnC5%Tt-f28}Wur!2l>ES|JF6xfpC}q#rCsO}HK>zX!ZGlmYCNJ~=Gf zvE`D#{ey!$UOzlve=#x5U87CoMvfj+e(gsZwf4dD^Y>*zoAYkQJ^b7J&XY0f{c#IJ zEvEWDtlD4pax|LQe?9oVktwW*Q6Q-m2@#EO`I6p3Hz&!b#v71%Hc$>CM>wEo%_W*_*7a zqAXgcM2Gehw<0i)3JBV+fDA-|#LmasAm(N>M29$(O9-YHkBM(GIT$lZKKj?{_*D4H;Pv#U*Td`cZDV2Ft z$MJq;&nuvu1w22uXfqq-e7HWG{U4^@F}U*Pc^?iowvCN#dt=+SlZ~C6*tR!zvaxO3 zb~d*4ocsIxzj$7ps#8-_pHWXw_cc9z4UQh%r}cF4c=~=#ATd_y;^k+%A zfLLzSou7nvg!hM)uCnR0t{PY3>Zzt4BU6RM0K#Z! zU}1ljnYyk`AM4(N=B>M$gGY%*$6M0F=JoxYmIqL9Hs9{@)b#~F^UJo z{DHuEh3GKLn5%01wbNuU{`hZ{0o%w)G}RW@#LlvS!84`|I)y&i-%weTkkGn4)(Lm#n3XOxv|bAFG8eQh z7XK_uwslG4`DxT~F$wc=!GEzh?!d%(ZgTQoI!Et<>+g>Mx`WGq3(;4tl?v8thycn-}TPV3jV&G2(E zj(Brjs)8Zos|@FcHIZ1XU({}a3(^z)!GF(%@p78;Drku1J{FkISC9|CuL3|I|?M3}y zLl^27S*adg@pb-!VK=QD7H2-F=_asMRCEi`TGQ8vHvx(*zA(u6`)Dz|2?eHDApDZ@ z$Nt{SAxGng+%(ZWCr3Ol2eHN~<=$6;#aJ8CVK8q_JX~oSWiKwxEavAG&# zKVJQMVq_1ez8hQ`$S(vkh726`Pn!tzDdW+T`plyR9AuS4SAM_fS>|pSX$e_N5Gi=uT&i_(ElM z%C4~u9v3!N&gV`6RM&N5roca$-+-e?%S=VO7I@;ep@J9;O#6Tq@ua1em7~zft<10Z zOZVC7#=BQUv0SMFGihIZTp_0bF}wrgTbfL`)*$zz-5DQk+41S4xMi>XWiW&2C+Zub zDC_nSqr%G5DjH6@>LEyXpseQo%n*R_hkzw!j4)y!EQOTjvG#2o=|{f z>Dk!1ifJwIyWzhIV~|Pn^-8Mdj?xMpXgGKD+TQRS_P$YrEaD!@#pt*~s8M2gq^b0Qiu~-^v@?0h(3uYJS`#4i zthJUVxu8>3PE$_}MoL(}qdZG36H`aud38CWC`RQwp4s|&5}j-STmrEObj#23#OlVt?VPRejLAB%c!-6#F-y z6~}k=1a|vNqQ-9UpX+O!$a%Bdj7{PMK=>V#Bu4_ce+Xm5@a`?a=c57O6I#Nr@+1W0 zK74@QB7_AF0ua|12JO6GBvIF z)8{#b0a_S*l(@Gb<{}y+N`v}o^`+}u{wnD0kQ8F@%Z50R@vS3RCKV_LI|BtVSMO~?Y=hx<}S+5FQN=xpG_N)?NVHW?2O->3$NmqAg6f1 z!R#1Da@7#N40m=Dq;*}F3BEK>RN!MhhF;llmXu!`EHD$`3b6pE!UWg+hk%ZSS2z2& zfK_ccWJgcqnmbPq;nNxy7N9QszC{cNO@P6?>icZJ2#W zQ$d3KakM+TB?n||{)a!JH~_;D=E2ohfsaLWf1wT^E$7?TI~NyWG7`E!Wk!HnYwSO* zg(C)|Q~l{}p2|4`{@n#Mz;T7{0)hKojEf3tKR2y|*IYv6pP0mg{2IP} zDmNeh=CjP{KNtk!)4qb3xdHk;X}8&i@a&O-Fwd!+*xXr=L_#{iIyV2!_?9({1)J}K zmq=IH|F6}G2xPCE42devN%|&Z7VZ99$11}*aY-Y26r)UYUnkZYi8h07&)~2==JR4> z9(kaAD+A@bO0#X#?D>JIwKS~H4i5J~&8IyN*oPpFLOs$xqUxgDC%`0E^keivaNx-bQTg*xA2xoxc70|c;tUWMx?xX}BwEukB z|FLOZ{`cCR1G(#5Fwi?={S;*$_blR4yoJw_3Zr)O9SA?=lyv$G;y$_5Q`YY$L0I_wzQYEK-A-D zbOg!M5bE&L@B)KLh`H7Iv#!0b)FiyPrduCHKgJJGixGy!2=LPP;}zfr2KW~yfjK>V zxIFj`f&`1(e)^B2R*SK<;pcSa&!K-knTSR>aI|abdE!WshbKa;c|L6XTS2L&hykFM zM*bZdxrMB6W-_B;*+ic52+;kQj%Z*o9$I3MPWso0W`*ZBwK|dHU*ghUy(?CWzbI+wP5_Q2Rbztk6BcG`32noBhHQh=Y zouPg2K5@i{!$`BSiZ21;+SDBLTLYl{PR74y;~Dv?Op?tfAfQZ0w?^oR?U6xua&>(~ z64Bt3JyY+)F{XXIZY>;Bee#A>VadHk+kGmg>c`DZC}vSt^052iCGfX~DnhjfaMeSv zFi*F3&<(*SbYka?myR9`+j2W=TbrN+Q8D2letbY0125C8E5>1AFNfw=-wDX>0fZ_L zQubPXI%JC!xncY@YFPQWh+AEkHs&6HZ#4rU4PV+z4Tcn$#-BCSF`mvW{VBUOl+AH{ z=+$JcDxY?AYU^0X{_>~kjhkG2MML)Zpo+d0M!r?+pp#oSBt`+~kc*@qTDCS71;j04 z$TWM?&uI@((w;E&bV>6RxB^VBvXlqjSgk~FgIZZ{1`t-RGt-b_n6;TTKl>s6K?*2y z11IDN{cy1$a`xcW#}lomM}B?-Q(-QVs!1Mr0sPo{>yk;K_4MSFt?=cOHJLPFn$WV# z0*PcgsYlr2^h;Rs)$FD|pZsI)%pvjZMN+EH)SD~?RXDSi(yG&T0^mp&Qu>mq7D5x~ zgeI>>L{v_bY8zJ}jNDh@^XZeZ9ldZGpX{oWDW4RB5X^bVu9AL*hG~?F+vHn{{d9B_b zwj?Yr4*iErvkr>RTlSg_t*JB${Y^+3Is>we$C$;D`_5`_#R zJ0K+=OuS4`1mG30d7laYI2EQ+TaNClnjDeP#!0ocz!Ik36?4B7rV@+TecNkCmPV&{ zC#-?XHv~=QFr2-;O*r-^-`EOK)I~KRRKODML%xySb9uZ?Xg3~vqN9*Sp5Us1tE+2j zRxtR*0|lqu+Fub6w*V&BECEM#QC-22UpmIu=5OZP1_(d*9VkhAp?yyixL4wb0no%a_Tb@&Vb%Az(<7Om)YX>vIdz5!XI%0W`=4tB|q|62-g zjs&xx;D_1@S))je5p*dep^@l$}J=hypO65avOpl;S0D>%RBGFR@!s^U zSp~T#7?&XHG?J>z z)4f({^u|15e+Z*xKGg?5Fd~5q3EWpkRMMutKHdXN^&ibo>$#*%eE_e0D;A=Y1|%45 zbEV_iKGUb$1QwIAr%^h5I&UYHW7~7}sReVp8S_g$Cngsj!QXOt?(5I|-mAU_eG|A; z>6EW8k_y5}T^8=o&j)8QhJEylK5ENtOVl4#77`sFn<;a5deabo1Y7BS9lHSXmM*$v zV)K)(>M6T_n1VD6%K)Q~@RSe>Cc(Sg1ixVNjbnBuJK{9MP^wb*&0$OzwOxoTJ|seJ zcgYI=C~gS-ejf;^u{PTCPDL-a8^^%BF*n-&9FlecNqwq%9^K57`=4FC^f(WX#sVGL zzwG#4s!EkaYagK(&RtxwOXwNAx#t-?*;~x`ab!J!Ys;5v3y8Z>M;-Wshz`ZAI4P%< z1ES)YSoU{Bmvu27AnPu&*kx;!3c^WtHq2bjvzML(AqdkaaPG++0a;pcrTKA zb*3FAY^*%-6+l-s0=0jOcvaRVGy%LcDDl7EmFthFpS-ZCH%D!j~p!A1_bT2wX`H2ud{=q)?X^(KL`-J#8&KoFs$~L1tRY z;_Vjp&%^p%FF+=zZz`j4wm2k`K*5tmlxfvonc_VxuF{jTyGE7hZ?UKlndc`$W`qE! zVy;p%8(Tw?IEKfG7f(}DOSm8zDs^_9_pC{|^oDEaWJQ;3n+zAH)Tx!oThyYpTTn>1 zg^7it!#C{^3Z*#CB7(Od5tUj32K;)V@$HCdWBTUyu*G-(ZQ1Q&4*`GG{@@v6%D_4p zK%{=jZa4jc!(npItk>k{M4f*&AajrI?F=6b8tZ;2adK-h35nb?w9vLW$BS?)Na zzS%s^dd*VvRW~7Y#90bgAoQMtj;Z|?w=MB#T)A}0$(pF)1)h$n>uDL)8J98pa9_#o zL00MD(h~R1I)7evz}!X3$DRe5xg8$Ai_(0CI&x%_{#g%AhFPDDB#PS#0Acuho}+g! z!g2s_!JHWT%9b@={)+G#WTXr>7Btq#)7}zy**drX=dyin!RH(#he#hYzkZ`XdK{Ka z{z;5R^?O%ErVp7k}_yGG>36nQ-+d5`+2mb5@!3Wm;*c?)mDRfH4V2SL_lz zX6V2_dul_uDf#yfj*eV_Zdr{oCL@I&`H>wzKomj>#3e^?eE}OMk)V%Z) zNeVO56#QS~)dEivqn{3cGU1-g;HyZ}2we)}a$$5>Ang;C`iRqQng^I6Ymy!12WwSX zT8LYxGCUy{HdQ})Aqhz*pv@7XR0&DX8eGts&R99onO1SR=2)cwY(mDW9Z-D`OErDV z{s`45n*jw>?l4aYF3G%_Xq(1VhD^>}1NAviKbdeD+!2RIq}$>QefXpa`=)yx|41M` z;YXR%&!u>prWhVOxSK5*&g{8OG(axsrZnhrGT)SOuZuOQl>Br2F_%iMjW!yuOP$`P z&3<4EA82*RQ}b>}AslC4&xBW3hiF_Halo!|F0mTHEnw{QaA7en^Z*-xzZ4 zpi0JNV#&#*~;lly}x^?@4b|@AG`}Jm;hWd^+8vFOke&^fEOH$+Xc?OH#qF^Y!ByMo{N#G7 zM)B+5Dby|uS|E&FT{TCbaZu5-Y^gi9>ZtS}UR%}2J5(?Fn|uNYbkhNAG*->EqT`CG z1okLc_5rA{q4I}S0+SREsQZ+-G72p(h~G_cL?(hc3N68k3p)nhZ7KDacT3j35}@V+ z+ns?xx>=+6O6sMaC~_B?vW?5$rul>B##s%!7iA|9d%x2Ta-Rnx`eWrlFuoLs&gW?Z z5q%)&FImCvQCbcxC<9{t6~KbA3SbS%N?=JXu*$e~jDA`1cN<9NkvC}3n+RB$^SeCA zsSgFx#H;JL`nM1GR~)C1%#HeIRc{uj5UuSBrhD5#X6Z@RB^;F783$0qp@Xrpr3K)F zql2=h{qlsO1~h3(xdVN&?sttFsxFJ4ATaiqV_MlXf8CTN+StYdNPb4pi_z#-QT22O zr4;=blYc*hGlI^3%=!&EIKAFCy-}GKRf*NY>}ZS*Wxq?OE+3wNCn1mB8a}_OWjcK_ zR=Hy@K)1~&Yf%$NDUdn+0ivKkeQhw2qbZ=@)zgy$jEQ@2U`04JWd;BQKifT?_c;o{ zPsv~t&Xs2Ae*{s1{mu;YFtU{oC&53x7jQ~>QZeff-FUtJeRy^`FtxQc1&-zUXzuuU z8R?IFfqalhluvwe+qX)8&+%8fEh!lYkys~E_a(85 z{!mDd%;SWHcI)Lwf0rKlqYTB>nLg~{v|2Ze>h^^yroTIphKZMDib{%$MsS8Hszuhu z04w+QWgh0MrXa<(w=8i*_WNZaE1dtSdg4g<6VM*muz#{#LnI3?VgQFV*MKdAGL$Qj ztWJ(})Lw~(Av?Q}0%4O(?#bIsM_rxidni$ZnVHrwl6^@(-h~XY$9)9WJw16(4HCt} zDoiXFz{m5u?aN;_k;g*-rf~iiIyrD`hQmr*eZw{y z8GsPYXiythxlVy-P0bS0RC#ZwOhmU&Wm&u}gx}UI37&H-t3npnJn7j>h4LvifD5TK zeNpnuGt}_`f8nj{$W>3P@VJnQX|-YO7Uk#gNHm6R^&J63JeIBni?A~q9S=qhIn@IC{z zPfDW&e%kLOr9)b^y%+KIVer~(uw9uHE%0jlo@1X(CYOzp|jl<;7;(IaW)5x^^n zjppZFK3Sxz_9dc|TJ>SW5=niL8sn%w)5m4lscAh?QSYd+!E`BC_5KgTli}UElgS-Mc0KK*}rt5WB>fh#E%a>b3&v2gSUw3sATg+EuNnY!ONg#C2A-Z8$0N!(vis7zAO>4D|?IZ|Aqj-Xmd!LGs5yQ)%2yi+yQ+&0BUtTNL= z2mG;m5^jtMW~E@s-6^Ap6wux zrJWBxuZidI$V;`Me>9)IVkTwFtsJG^v=Ze^_UaA))C2gs{Nd+Q%?R?c(kv#EqZ7wP z!bH(nwUD$rWXmvYlzhqr-akWs{9Rht0i3+$PJy!?bqB4BQCXv_dpCgdcEZret4>=W z+#e1bff70W>mihbC((F4Ja5Lrli(Z)Qvb~W`|bK9APbuweEU&v4ouz6mp0;vLEmcU^r+RP(7#1_sz zV5hDk+ldT4s1q6QBwf}Rx@rDl8~*uYI{GAag9ko|j6=nLJ{%;xnN}}YSNgr<#jB8| zn>H~yM+w?o;_I|`a--F{Z1GR;R4OZIaX;fK69%{rH5*2%Rt)9nWlu`&H6z0Y5~uHe zChe);fT~E{WH1xJ{xLVua6=N(*@=k|vhSvc2Na)4M}_PItzV8A7YpCLb~y)bwvZ;Y z=~L8@K;?~EBtHaeUeC;nSO_0Crf(aR#>2)en|uTNABeq67(<0`{&L$qpo}NwSl;Sq z`ZvODrL4Lq{tbD0K?bABAGC#LFxU7_7}O=Nr_g&wd&)O9yz8-NcbCD-+-XVVeGg$vGQI`OfUs|nyT+IK|ISfRb|AEg0m_l~tNjNx zAV*`ut&j_O>z!6}{bUeGNtU6;Ltrs)vCf~t@lc)Gu7mgoX`X<{tq>T#knU#F9CBS3U;%-+qrLSI2%$ zPr~jvflEBmn@3?CmlC(+7;)!}8&g}CfR^`4HGDdEcZ23iq7H?$EHZ4ZFe!MxofGfp z&^GE(jWda!UKdKph^&g&pErkB3sYW19PWV4@VU#+rIQ(r=bW*jDf`!brPLAmTwKl9Tc`AGeF&dm;lm`Y@ZHiGB~21)9;4 zq~8gN=w+CURj3MN-x&W;kl+{xkp(SY1`h*C6G=(_Ji=1Q_|Qm(V%zgba8I)b6C;T1 zsftBmHEC<_2t;F9sC`cshb?V804hWg1|EMP9vLXv*UUaKn~AOxE(dV$5JpQ%LCtzl zSEu8UhFUV1k8UZHng4ycb$q|c`g&k7(Zk&`8PtCD9iBK2X1z;0_sWpU+O`-KQO$-##+mq~KKCix9Y!5~V5!RH`;Wn0B4ybw2vMZOU2!=VD=-;L89X7i zfu!irc#QIg@&}o#(ww|U7@+wIVreup51jQBM9!N>jXkUSM};{&MjuI+3bx8LUw#@! zu%b~{;Ztm%nUj&qn6+pYf6a-_n4~J}RZOLfdLs|bHLcG3S2c}YhM9!2B)4LREb)`L zFD^6#b3q}AkJ0eo@?=ETL3a0iXH5u_%5~v>ZYq>QhJKR8V1g4TCxD?rsS=V!?`r38 z8RB}YUtE%?joge+76Elg#6PNKbD6s;r&u-oGsksar$HcPH20eOUtRv+t#hl27*eUG z?h;nkj70@JG|Xz;0VZLSHAdGdw==}6>cYgmmc|V_E(-zqF>+JaWydC*%UoTmBWkC(o4?TSx z9FUCkyMpK|a73KDTsKZ!ShcB!oR&4td?9s1T*_LuzZVkgxz!R@5R!O$)wQg-fJ#T zTM(O|sHOOcnz&r5Ji+M2PV0B-<*UAyI8?WJFOSYf->Nk+rpC6HpLD#0XvBhOUmqM! zEhd^Tn_B#<0YlPG^>@CBBXzr_8_gnmFb&n^FZ3HFCKyMimgE8X6Mrblq?OSl{I(as zH|9zht;0SXMfZt^r^HB+HZUkXwV7S+4D%YSkU9#e$wz<|{zb0OOrf&?2yTQr6tDq1wNZx$1+D z7uu1~FMB1knu!uAU5C}?fL(rXl@631d^Fv^-4=!%QW1ZsOhawP zTj;IvP2*3%Fd-xZ<3-DpC4@WhmcNV47}u`<{vU) z7Y9(I0rV)nxQpKIMPbwBV?BDueae)C$1+#!H?(v8V|`}q_=7)dF>65J%BOCZL8sRo z{^IOlgi>2kMtmL*<@O@#R`vB{yM4Y-b@fMTZuZlAtn}1hVJSe2yKgGDq1xhze@)#7 zX40TR%QlLINTUkbx-+=ZEPv(`I1-i?M2o6`0Deajcr}2=BE#pFH~Py$-@E!c?ot_q z2tao@X5l5!$`FP4d#VVL>r zZ9MX1pnhx?@7ME>BJjsCDTVhtuPfz^LC>^CJD>$RFvr|#L3KEx-()V z1PIfaDc|qJxbKs1gcF4H<+{kuvPE7kHXRNq77OEyI`sPgmgde#S64orR9xw1=ylbF zRl&t16#t{e>muoL=Q~y%Qdu(OJJc@Vj6tdn(;)y(_o5C(NrQ&|SL|T!nL3F&MS_-| zGJkiZK*UAxK)kdNR$pSpg^4^KyJUi%5`aZP?96zTU8Y+_9fx%T-xrgSF1U;sNFUPL z7WRWL)X#5jF31oiH!41rCIg?3c~VTi)B}SU@kNfRrg0T|Uey*Jw?MXb&ELluU%>K5 zTvg2!u2~@Jabdfi85{mnYRd$CkX7lql@Yo9sX~vfR`oXb8kZ7zlsZ++?YmVvJYX>6 zvSk#6#C38nm6CZ#K_N?8^qBRxwLwyQVHdSa04SQBR*RVuY0rBS0dZN0ixR7J26+d; zMqQm^zly=#>zJCA2I1=Z^use}y}qOhV?wuJ>eOACo%dlkgx*jJL67eCIlPcc2-Kb` z7Z#Albn$@kxjM2-7f@S>o$Cg64B)e!(3BIz>hMMQJ$gPioBn9nQuQ-;E&6tuGHh`^ z7o10%IfQ_%9Mf2C5Z!f0K|gPCLqV2t843t|zQ6jP0tks&Y({CZd?tKIJIc+bsV4U4De8*l$y{Qw2 zcPv0mfART?@H>D)KrcMj6l;TGK{U2@YTz%Y2eJyU+k* zq%ey2Q<78+5V29s6G7&IV@-Tjch0Bbv8wRY8_S){XE4Gp4HTHH=)X#heACP>GHxF7 zQ^;D|g~K)VBC0m$wy=ww0jhc*I*y4vf!U(9G^ifC@63Gd20@`#HhtR*Q$i zdvQO)(3&J6P*E^qOAZi3n50UY?GpOg8MNrL2D*%7)r3S08lv7lhn{TTq`VT#jZ5dzP%3K_!zuThV{`7>Z(_B-cI3<`2K^0|*$bVY8 zEH5j8GPddZM<+m{1w{pufZeGIpWwIzt$W)jd%Z94x01U!eKg|QI^RvAbBG~_f&*^0 zcP_Zx?>MEOKocKsaAd-PJ(u1xOgk4aKT-1PL)KQiOAA=C0!k)utv70a6Su_(6) ztB8u@ULdm#%pD%AV$y?(K|)YWRtqO-Z};a!$A|=QF;1Ds(S;lbk`~GyhH_E{)-yAL zZDmGb4gCNCh1GSse`^Wt9hDh;oJ}au=zKCH|1$RC*X92W@0J_qU_xk~d>H1* z@kswstjIb)11K3FQ-DeLcf`fDaDLY&j=)`chD4StOdFyO4&JNPfF##VNi`P9om+pZ zzl83Ap+;I7{7@L7N>e&KG5=lx>sjiEoHEX!r!`?hm`^MH? zeQvZoqE^7kp@qI8^xf+A<*u9niwEJ6pftab-Yq|Z(>J5(buOOHekLeTX z`|cmom?RGhg@zx_WPfH4+HG@GgL$keb_udv4ky2b! z1Qa3B9H?JPj|e%H-*5ljVtyESJ{p7YanN zzs{nL9GPPkHO_3R*#TrH0E|dbaKc8@?|~if>2F%HZ}-D6oQS(an=kjlZyM8dM5|v$ zIO0y3m7hdW(LM&kqf%Wyrz5#PX(V3^w)>90{-1L`$Bv$MrT|9^$kEzx0s`E=&l(ON zrZbw*eY_i#lyzwCxTUVir?N?WLS&}-#gd`Km#qdn5RQ8YiAkmuq!Eyq9Tx60gpxJR z*R9i8NonUvSS!?S%E{vThgB`|(Mr2e^7x)q(8?A$ynm+kyShG1d|lnU?}VS}L{BQ2 zoM!a5H@j06lwa=vXP=jkQ(1BDX(x^j&E1{=?=Q2@ji_^=hdv?|&9@WQ;5}dnJ0O2Q z{~O4tP&g>}_=fCx_Hbm>g|x!iV=(6a`-)+wtD_T*LZN1v(m;U;+mXN)3?2<#tUKva zLBQ8B2mk9S>wpC4qL26;ZNmr?g#I|yWdc<$58iZ=sLgV8R2^iL3Tn@_lQj!G~f zCey=wU}usE`K5Cu;N_FSns#=Q(@&^(UUG0S=|z)d^Q^)t9hU3rjo*y$zC(Shk*8c^ zYsjqTViYA1txI>KcKNnlCp7Ukd6W{`RTh*HYI!nt24QPp7qY<@Q$Fa3pQoyke;@fA z9n3ZNnacyTS?(*`v(bl=KC;!0ELI+`I*#!vE!cYEcjg3+(cT)ylD>962bv9<3M^!Hv^Y5ro@wZmXqWGH@=Vn z^teN*uItv}EP+`oCz4a>jS5(QPD8Z$#ViI4k|G;-wSgayNbUAALYVQ|yMItX7$uq= zz6F%6;9B2Gk)q+TCvxvc_)kiqOA{!_AP6rEU|hUR>2hE{ki|oXel*HV&>~4t#r9i) z6oLaxol=Jb%1H$mhr_ljOz)+1)vcEXU*5cNofI_J`T+>Yv{+=bW%d=S^1lTqttA&T z3@mI%f4I>T_xkj;=z_o|Xx^lnqR& zql&siNJzQ7NG=W#?e`Z{eF;Iynf1AC<>7Ftu_*YDY>qWH#m25X9h^sgEg)eMpx zH@)}ZvT8$3`Z7HUzIxHe>(~~ohO`?$%JV%cvdv85TVQP4dE7D=zXknJ$9G@ZA$-W*7soQKg5M{-|;1Fdw})A=jo6t^BU$?jgw>?G~9` zi!i=16HRrhUq}?TI1lMvZ|)SF*<;OcNN&P%;*(^$J2+ou z%}qeqDiD6A83vTV!MvN+}fAzci|cXvn$HY{xvvb886e)4;eEc?Jx9-pcDl`<5Rsd7A6rK=6k zf7sCnR#q&J!xg&d%8VYAeTED$hXylB+!(t-m+MA0Kd9Pi2y45l(;W#OR4sOFAaK5h z575fsM+yMssk`7UMz(~JSeJZITk5{*F>TA+Ydc3E$_9#jQ{D}<($MY}ab=b(gYGhw zjGtmRxgIM+A3|EP(prqQGgYt`4uL9JH!He2k82BD@+k|@Z?b6H>rwzPZ~BoT%G>11 zc!R4oNRnH(Nvg#=-QHTOEB4Tnt#B2*AIs0!zE1~jz%E+nc-kesgfo8dsMhSsDV9Dv zr!?mC-u1E_hW>F|^!qI1D5@1YD5gS8A~HjX*kuw9lMy_?3WE&E`wDF-T%}}}_1L#R@uKGcRqRDQxR!pPT7XS%4s)azPwX@8 zDbf!5Cqhn8OwB?GLWxvndQ#0V?k)uIo`ArAv?H-?~9M z-jB35_t8Hsz04950OF&(cITzs1YWK)Z^i%*W}@W414Y1zUa|-nD|ef76BJOR|4yTx z&Q}ySpa&IU%PeizPRZ%+ay>S-dy+RnM!d0#fKH3aYuQ2)#{{cVf)>~BQz^Fx&ktGR zIR)Wc)6nHt=G5TM+HJrU3INmnt0;lfyVnM`NpmRyz8vgvQ@QRLJNYpR+rLzhwGl=7 zf`qJ-LZTaNtv+kzQ#>Lf-%>=oeqB*3rT18_%zi8FQ94td`#lUq_+pS;lZRgelJv_W|99|mq|K3oq5WWC;o?dQh=QX5XgMEnpaMZB!&maVi&v!C3 zL>ho+ccN6zZ$C}l!9Lrj&Yq4JyT^q%qC`Vc0!rq)50Gih-~jZ{oKF#3rnLyAeF`t% za6Z?!Tcf}*q=`R&kNzDSIeK?^?2^sYXjlNUjfnSoT6+xB^Qi7}e7v7dIajC+uP8^v z1Y|FV#;ehS1z^F6hKuh#p8m3Gz}V%5)Wrc%S5aC~`nmjK($8P~{P&4f2a667);t)T z4rXBj2H4aJ{!0C_No?WJYR4Aia&-t+0!bcxgX;bQqh#%tfZk_RPY_3B&3{ z6P=Iur(a1AF{;U2eZ7Buxz(vg`jRwy5&pL9XeWWFC-5^!fzrhN!P?r6Kgu6!31$#3 zKD{6=kY(Ru;z~;f{+CyIB84&ef>Bu^%W^;NVYh8lwlTuoZ0yOIp(seq!YFzl`@G3h zeatyGyme#~T`b?_gb^~`qv}D zsk0cQ^0*HTd1Z;Wwf1_fU0muoi&m~XI~1}CW&$5z2*X~|=S(|;!Xo_p(zX%; z5IfD-QH9g_Hf--J``)dSgu-WFWeZ!d{yzAjgiTxX(+SCQ&ABlHW`m0XOQ z7PgpNaZU%r9o_+fH2Epkiy;<(sDwM>z?au5yutbTJc#2fzKKe*l0$zuFgw=&hVpr7f&q&2Vx1j6rbi{YVl zf@a+oasYQvTmu6v+%wkUlZ!ZfYMK`T31Mp<)r{g~~YV@!8z$1lZ!u9VO__h&wS`sL>bLL$^{ z$GT8flkebM?po9WLnJ7H>Vq9cNu7zD$R9Rahg$2e{D;}h{5)gzL7G1Fbt_~&*@E~7 zXt)c_pdiHLwUsSdR<2)wJ!5OnjH$gs$wT+?oo1X>{Vh#=R_J)a!)4nMk?kWkhFDRG zPs|Rg+eDa(<#@6xDLaR9G}au5*(NDR1-krV>V`BWbj2@6q>n}K^>~>MLYY*IL0rrg z7Kts~u;{{ZPDe^$y0ICjL*7IS{)%k%M*5NCC$9Bobw1U$)KejVWKk7W>VWWeV%0)HBp&AB|_p#fEr?3CP z;b zZxtY4(uSPL#wXuD&QN}~TXu`dke##E1HV|r8mpSn(QC|B?vF=Cd8nGinnyRobzh;? zKP+!~55vnP`-$;b3A6)pOBfc*Je-9MD2%A&ivHWtL5(d^Ve8)>T%j?o|FQ#!4qv$K*L>Z=?Lm^jV6=Ilc2EELe zl7n?F;+XIEpLI#s#bq*%hZDLsP=qnXpR%RHn$hY4%Ki{=d$e*p3m{A~El<9WmaAuA$b?j;yjV)vWIp8qr>F_p8R3JNo8fbq zjc|nvh@iCzA4|qp_N{e5!w$b0Wrb39z>ZRBdRzVJBN?sBxd_?a=(Y!rKIDskTswCA zmcGpAPlZpO$@U8JyW~&FOIr&CuqChEVG(T(KEGd8&ub)0eigR<4)3EJ zKXS&hT!G##=!>tIxt|wGwQrKtWRW zeS2#}q66y3uWQgQ&k7;eGELW2c{)YykoqbvQ6uDxlBP1#5-uo^1Ki}Gz)qpawv9*z zp6_0ydwzgh)0if>{ooNwc*E<(OcXCSKv8hGk!gK%#Uk(^_A3j^>|lSp1awElFB`i%I6B_! zeGV}Q3exI5TkcbrpDH6;1Kg(z!pVRE@x73cqI;>d|D+FVXkg4-X`nwLX#i7Nz%+JL$bQcT`C}7ntQZhKgde6p6Lfi2 z8qa2^m7cb8y9a8C^U7X&f-f8z8BrT3-C zL~y-MoE4A%m7j{&4f*L$};?9|}9}9LVa~L^Hvrr0!)#tEIiv+_#yWrsarY(Jo&FiiR4~ zgyK&G{t;_8u;?aBt8yHIp(?{J^F5H>%u&=vZKCo)>m# znDat`pI?4yFFt7@@>W?1M+injKsL+z=V`>3gH>`d$vVXtBdZ{jCS_7>XGVkI)qZDk zPd|-zq7zkEgEhfJ?^HPpU!)CZt)dk$5`TWofGQA$9AI{Y7D4sXoNy;nEn|QR2|ms$ z6~hKwLlm&ApU=-1r=ex{rP&2gJO1ltUUKJQv~iYKARNtj0l?FZ82>2_1~Xx;Xrs+- zV*LR*JUcxUtFiDl4&rK<=Jh-F=LMH(1G~>e!ya^e76;Ta)yGE=P3t~s7gz#EdmjK*915!UwL ziCEC<{y(PPGAOR+2^Yq9ao3>13GNUqxVsZHxJz)z26vam-Q5>=cY?bGha|YeCBOXd zec!56`(eAM&zYI3>7JISYtG_z&n&DLPzukuSHF55rH&rW3_qGok*uU^yZAhzFkuBr z17{3vR%F|lpBSEVv(P~w7LhC*F>^!fpUEZIB;W72$1%)T&?Ow-iyRYdMUMFqyrE-Z zOU1`Z2c9wuxe^}Ce@;!Qo(;N~^|7ew-9%mRUEr0J?wFGB4rj#5g&H#?2h%JE#O^AE ze;y*jZ-EN(a2R&#hi#D?$1Q(A_p7pr9(!U#QR>g?hE2n$wFHA|9$mUm(smKD;1-&z zyYu0Ux8X=x-=KgW1@u?41b=_$>7o%*r|M~E9YvYL`DI+wEXkm}s)PYlmlOpTn|caRm#-0#P*OSw zBp^|WqH=gwK2X=mrNJRACFar*tXsQ=R-;&NYl&xt2C-`XW%=YPKOX-10Et;^U0{^P zf48uetucW^Eo4fZ ztppFmEw%9s+hcr))*wji?kt@6lMOJk^)V;i1XcuIDsq+c`97)aDj*f8TV-z06F&;% zL6?0{x}BbT)!L_4X1&B}o`L@PYsGEGfmw4N#Gtg5;!w69hQT0+mIt4F8zf5fke^iC z^41pMgg4ttwIAk3Y+ep^tlv+ja?4{kb0l6%v$TQzfPDx=@&|@A(?{*jf{oVzIAHH#1T?VS4`gCA9(E)ac{6*9ua@NOtek(d@fbk53J&Q!SbtO6 zmq>N7Sx|Ky=x`sVtsfw z#rWkMD1sRE#prLA18!n%Wc`{6KKZ4^{EV%SVSTxiMwAzN?>8W2O&7)@!pT_7?eE&A zAT0=71s0O0Mdc{FaDd*2toQ_qQIgT;YLLa{j7V84k7yHi+1z5HcJL~p>)TPmx|qBh zh04_BVgS7Nfgi{zi%I%UL58io^9A=nArKV`k@l7iem+4(P}vxIU@5;OitQ%$^vjai z=l79iN1Ip*4C?$Umg;J<+k069PupWZpYJXv zi&{;XbB>>xdUu0Zslq5Mi35F@jeu>3>2N)!`PLX5;>t`=C6wJLuCv{oN8h*)(YPJH zbifhVLIiP=4}W|w6q5}Wu_-Yzsn&)f@MXT6>wsY>57EG~O}3RRp3X7LceY%!v#*Ah z#WTH(Mm{ZtPYOF2q&qUUb) zczH58*Jy?bL<7H2Fn)VF==#otR{@?EskdU!ibkLK;SY<7tkBKk~jB>4LOhvEtR@S0ErL0gaA+5 zuVQuOLoWqN`efF(oPYDl47~Csq&|{Oj9`~ln=(m-fKaF~KvAP)Faxmn87rd<%{tvX zECZo&0;!lNaGa^H7y&i0+!rkk0h!p56OFY;=^>|yZ{D)jHI&ai%yq7@zE=rh3hX3A z7$vE*May4u`kC%VWpOfNhYsnO%bL*q7iQ87`CF*77$HVVT8$56fUApfMescdu8cMJ|?fDfA5rlry?M=W-bMkql(d&jNk)3x6It#&P_ zyyotue5}T!<>?Fl#*WARfrH$W zt1bsP_4}Xf6UAyOW+fcBR8lSH8jo_9gmoL@qeC^bnOEFVSz5M9l1{siEco^?VdG;s zat01gt`Q;(&h(%I_A%a9+tRw`4y_w4L8@Pi~+07Sy*jirB zM)aIESKqnZa6E@K+?J<}67fDdOTw>#qSFrC>X-F5nYG3Y*OaPwPUf@GBOCVBejGfm zJqD%>$eO)$*{EEKFV=$eq1mDFQr!~36sbe?@U=q4{g#$CBui)tWeBxAEJRb@{7tC z^RV36p>}oME+l|emA1e=B}A2!0=jhqKUC_%ek;%dJ?^~_C~r7?xbOVb~2++OE) z6nB4V&L%_&pN?k#j#Jg=m^of6Vl}tTA2fv;Y$Apz0WTD&JnE(pY#jq9q^_u$KH+YHsLiWL`h_GzI+U234BH?UzgA( z>Av~#)oojZE(i()AaTC|PvhZkD=;qd@Yip57cL>e5dSd9Qz0)AoL(&y7lcSr`_1So z#SqxION7?4+IpKuOYF59mEiN>S;7sx|54Ywj!EC)Goob4@6A_u!=F3b`;x1OdtG2hNcKSftf z@@2&!;yTFrhCGmHl=D4M=my1BNUB80MpS`I+3tpKHC}9tu~D-0)h_ip_v!pjfCbNH zi9Mn#W>pwjyU!dxC+Ci_R1it>06suE^oib$XWUID3V2isi|fe8gQtyPB4S0H@T?XC zg{>===L`x0r`UlpaEcf!$FREwZJWXgUcbK${V2j$HEC_ z69eKvl<)v9K*Yg=&(CBVy@62wXk7o@y&;#RfCyBqtL-5d<2>^7z~~|IXMAz@E6)Fz zz&RTTxR4e`02u(~v;9N~oZb^U)DsW$KMDV0A`lc#fH(qnFy^TKsghmvhw282t@X`G zDAVSDB6?y`a3PWWfFgL5?Qmms#FUqJ{c+30|3vWo{RkY0g$Upgi1lYV(a|pe@w9w9 zy5?LMiZm7*jQNa&4a?5+KTkrI4B!rkyb~2J+x>vfsIuA%&Q*Q$A=LT4EyIW^zzG4T zH-I9J+wD>OqQlT!Vrvr}wVG=5AJdO&WE_aQ4qyo$g?FA28A+b|08}vBTd@adKu0cym^|!A!DjIh@p6~BH_|#B8g%^%0OV7r8{L1 zXiDoB=ZGn-?bHpc^i0v9{u#sKqez{2AIOBn{hwhR-n%u2w%ztrka zY{9}%I1P9ygt29eaO1dCYY1skyfE4#tK`DycUUu*vWEyrwnvLTPUnwC`*tD1Kv*k^ ztSS?!uDU{_rhjO7<`+ zcb-W=e8Gxn1tzgP1s*!5A`+6~t+A(?GO0~$Nk>SMo`R+q-8?U$3~xJPiPLb=h&4e+ z&m6Y|c7~lmbZ|WZq*hLe250aZW^@OYHC?qG8u=Xv2L*|}LVehAxW-tOccB6uUrh2{ zv|l`)@TX6Mra~c+BR7emxhkPX7-o}|Z3Dqg)&bs-Dn+xxv;w(9A zH1Ww3bQ&4yG830J%<1u=ByFwet6ffS0h$dzqtDG&&+`6}A;^Aq|1u(CEWLgrVNrN9 za&z;=?fh|hKVq!hut{qQ$+=5l)2HL!{Bnrp_^BbHm~$A0-(G1%&o&iCT@VSncuL?-M|ePOZg^2{md;}HxxNh;lM>2@Ek zAcimWnuwEaG%r}rY~6yBnk&?cZjg*LmFQ*t8ZK=bI#c9MAE2AEm$KrKOlO&uugIq1 z0qCkUrGIWn-hQux86nT4W&ZTLCEvyItcGB-FmkuD^Gli(FWCjQXs1#-*|#UeGg{Q**cKG2~>o!r6Si&Fo;<&zxueAg> zft%$1Cx)&i_-STIta4_NHZM6fC$)s5hl7G6m&2H2#@uA({yq+74#f%kj2i|^XD5+D zZAZ8f+k)9<3>q(QGEdF1|0}24oBybE4A`xW@KeSg=NCIJhbbXa)n1je^K9bhd{8Xs zoO^>7_XxtzUS>k3%efUGKPfR)$)$*Rg^D$%fNs5&pdDpo4&v87cr!9HN=9`RqvpJB z9R5c3Ea)3p6^S_5k}+a(xSJVl8!SI8M+2$^0E0s+%v`zI@$=j$Clm|;OhCeztmNcu4mzM+vWNN;PQ8L>l#YJ`?9g)VXr%er zwSN7;S`wSW3$oDCo_&BG3C)kT6h9Q%NKI0Ya^^iry8h1(pj+SCRbN9>*Uf5|wu6@S z%e7|DU^s!x;c-e1s#roSAX)twWiLBIfn<1t7;3i+k|gc-aC!IQ&DwMTEQq@Ii9o6z zC8w&T?>EB7vGtVQB`6XRKp!XN`e03tv~ZN)JG(}*=&8kM=8}+MRWTMZW<^2Nt<~wV z(3R48V@b~=X&qR`*_n-e$*90;XRlo&x85ZtG+yBJCrlwMh#>G7TS_6)$?_EIJMQ-k zLf_77zr3L5pRg>k)}K=~GC^KI=+YbL{Pe?-00by8m3uxDK1U9kxs5IEuX%ZZkJg-6 zGq4C7B>PrdsF@7!Jr!odUrT~Nf2HS1j34m+ zK%TQrH`Y>0hRWn~D8V53%i+Lq*p$QYNWJS!y)htTrDDy^S}z$I*%ox^C%6IW9@=@{ zSf~+%e2^@!G?v5smAk*h)vf4AJV0z0!}qm=@3adsn#5-AZn~y!r%@1h>f!hj62M@v zs%F8fd$>Vp&fSFzw{$BN9?nnK6;Uq2{^8WaPq9UTwRhFFG@i%CgUkTKZ<@1&$#i+drZy$(_r0x8;&-3ZTwW^rm$fu3lm zgfX`R_4!A(>TEh@x}cXC>fTYiQs%&!lbgj-X2ADrl6}MqlXn9mLt`np*aR)ird5KE z{H%o8GiDkMUdyv^kH<6whAS~4VFY$#TBMh5s)LYcvFM}1b)h0+#FMp0BlR2N@kO!< zvN6!DaO#>6;ru);<;$l2zBiir3HkzF^Qi-x4Ep~xJ^MeSNyro6iG=#6du2}@=J5q) z(jo-%PkXcf)!x{U(*S@GA|{)Nsxg!tEatgd;S02-rRMTKo_~fH*mwz<5mFlkkOZP6 zl6@g{r)Hf6L1R~dx8x9Tp?SfW3y8SjxM7435bb0D2#EWA2WRqqxD{4i3i^c#>+CCZ zB0u!-e*$5+*ul`*Z#F?Z5S|_)oDH}KpoULTc1Y*+bwMA=9UcAS;$;WNk-_6a?27?F zBphgHD0t*)ccN)N#e90TSJ?1JZuMT#KdYk(C5B;t7*=$Tho`;s*(k>b28>uDGefb#xxdj)mR*hRNdYj+gjHt*Tqk08zeLQ`bnGrcG!> zsSZ$hLX~(iSOd&ppoONmWH5AEfKx9Hw)vbB_qlZ9{bYrusTPF5nJ8U?B*=7gH-yg2 zMxtSEqnA&DdkBQc25raW)UPrl+}%ImFFl}Q{i!HiQ!){e1i2Btg4%lW4?EydWUHb^ z;=Q9W>5PBG$_{R`GEFl^^R&q)M1#P6Q4FQwiD1RB@#G%Fuw{1AFP7Y2iB`X}_lB<6 zjz}P|SW=)cbEBLv444PRBr^R#ArqYl9~YR7#?w`S|X*tlFU zf#cIaK~OMLZJLPpWNFXsN-XNi2#w07X2XT4?o2$=33wjYqo-E z&TBM9Um&kGs7H+A3t?VQMk=cAE}rfDmMReMqqHm)4J$6VDZ|Pwtfd>CGp;#Igrdtd zTwOV{-?SVA?ZCnFF28X=11xLHef2}UguqfY-8%>;o=6dq0c}~ld;qaA3$v<5MvsEh zIA0mFfHRjqETM>HAcb0O{RhKxkv5yF>a^8dXqF9YmytN95wYx{MB#G$SnhrI#Yq1? ztPRR~BjmU{UxJ8`DP4H@$6ga$lCh1AaxFr=V|^|NO#Ic!xsJe~LQCt{&wf;vxnw-! zsIFev{a?SE6rc&(Jf*id8$yO+@cYIl9-gi*Ml)Nt_b&16J?fvn?oHx(m}Pd|KRJcr zJAm|1LtAtzBTwq{);EJ_xJC6yU zI@WVQ*jr*&ckiU8)~&|mnFg~#_wz|x31-RuzeS#pA9i+5jaj)IWk+0E0l&5YD>;tx zUdKQ|Pa(lQw|<;Dshvk6;g5$urbU^<=}f|+x`iiRy$;e*jXe>Ido>+lo-Ov9uBApP)m-MXjmnIh|0m)Y^Aa}JP`O$T6!kF!lVkWVnfX^Ium^`O zN9qW&9)@1UfnpbhSA&sEJ(DQlrrJ*WPj#oE?d(L6lbQlS;cuMTul>hiBgi;01;}=SVUu*hQ1a zX+J0}UB1nu4K)VOkaDY_r0AEHK*AJ}J91PT^*PfnAfdu4+cXLgCm^6xxo~*()qBj? zxKR$xW(_%?0>AI%#9iy`eh9sM6TffvdjHvZHY2Eh`*AyDdzrow5b^tIlvgqwgg16F zqGs>TFJvP3{ihuKu}uDT2hxZ;$CYwGLWQ zQ^Zd5vCNqX%)?!=5$jpj?z&N0U}AB_PyMS2*}*IFyi}QKYc#&JQO-!>wy!I-a$+lb zqh;917if1)R1+GH-EQ5n1ToBj)Y2 z3PHPI$*fyd{qLBE;r!1w!U1nw0?bfqp>0Yknqvva_)7Zl>|A5 zK>aAPq;|4@27HS^3{`zLr;pvq;x8BBD-{62D77~+zkgPoe3`+{Cf;%8b9=2?yKoGg z%bCMak+eykA7Jz>jr(?hOxVL~1YexM0^><;?1m2!pmIzS@6M_H0 zAjbMlMp;d1j-UB9XtnO_^X8Pu-q;v~DG^7{`9s-ypNU@#9&)h#MV0m!!|Tu=m6vFb zWN9SaxSml-n(o@m>$%bfEH$~z5izcvPHIf)mF1_cnX}M%$e+a%;~AZhR~w0pM^~JB z-g+B`_s8Ep?P<)fNx9A@jfG(DV95k7tzM>M@&f&&Y{*xtK_5Fv;N^h$r#9VrMWj7) zUwRV-Fdb}QYM6$g>9@lb5!x#+c6M7!uYfqVsNtEd3-;-YXQ~cTe+tOeeP=M@a{Oy@ zX|=T?!^`Ge7o&4U8>j)u(FCVNtsg>N%ZFX1)G@R2#+B@JswXKG%`8n|Y&5;KARBfJ z`T=|VuLZR?AQ$3#B25dj@V?MpPSkWI-^J$@)JA9%TF2aD8b@aWf}(}vO2SN}dW1<& z4@0*T^Tj9$DV4KUMTax?ac8^nPhrhP2xWvC`dy`(tpk97h{kLC!rBD@pL#lVvX-!k zXARF`@@XS9zuEo`3--NeP~j&GtCaktx=;PGqPLQ|Ag+mCRGmYg{vrWNtEL!-FYuI+ z-Z1h;6*s6&+sv>@29`$H}ZK5mQatOSO{FWR$ zZaW!b-s;O*q##<8$M=3B0QmdDPU{%YJHtKHv9kQ5ZL3(5uwUC3E$>Cng)>b$Bd{$$ zUMutEC`h69Yj2LKj-@SU+e`UA5s&X|x;sf=Tlz=CJ+pPUJ0pD8Ln|z>O&z7Rrwc^h4wp@*kICA)w?WKfHAxa^oI-dfKI!;_o2ylfD-NH&qz27p znvpxse%T#={rYDiAXnhe7XEa6SZqtJ`Q-KCy$i_2_j(XGJe{S*fSB9!hwxU+>`q14 zXdp9!{A)I339hr%F%vb}uBA+6ScO7t4oNYjiQ`uWwQ-AhT>Cc<<0lnf0Kj-d$=0jZ z%EMMH;F4sQDZ5r;QKBA7Lo!)=fw^1%4NJPsrb1trsPfW!r59bmW_CEZNY9czxjGqII<0v@5_+8*ReJnQ1TXl(S@H_<-jkrJW%|rf|N0 zdOfjRZDBqY21_I|NiUA|2PbjNQrUJ=zU_OUwm*y5ucA7m@_@Z%5NW~z^oqyHC88;k zC)WwBh>>-H;JJS13!I^{3{{22C`ydBC_PAY`FBo5hn6YKk7apTC&$XI*u?^r%&nbX z>YIIwHl&)1jiNiOU-*ly?@V8$;EmH$sKAS}KfC9P5YxoG&ad3w@Hd^lnr++FuQX!t zoh3LK5`3XJGhmk~f2=DjlG)HyICr9ZSdBCJv7b0~Ff8VyBz2>4(@aSl8!pX1k+2B@ zfn+$!iUmyH-Z5BJypF2NIu=u?=M1~%1iPmmV`o#UO?fg)!-P%R zqOteie#LMw%dYiUGxLy5-1;?WATJ0Ki6%C0y6jT3>*bYU=gU?IzRTi1*SKkcr^CI8 z-EqX%eEzVQvXqSse>Ur$(JBF0d%?OI*l*Q9BRs;H%2VgO^4gTW_BkQCQZcK|!Ur2I0h zbbUSsd(-cf8{+jikH{y-`Wuun5&X6(@4P;I6r`|-#~M8fLu|R_c1md>OaFO!Rk;_F z&}emTsA6}FHGX6j*X`YFOTp29i$dsNrUXo-qGFkw5G5}g9DdCNq4-l&dN_+ zbaB@_*z?UL30$iYfT`{E9OL&EUmV_Mp7l2KCYi|SvR+uH*k+b@s7-0lP>`*($7b} z-JKWdQ}DrmzL9Q~AFH^`GExXAD6I>X_MUoj|9acZpPp|s^C`g+SLV8)?!xZdKHRKT zy1BrqZ(5e;>c0hXCcS+TYJ&6opCjM0jO@AJdA=>j#oMx_-K&jAW6ff3vZ(o$F5CV@ zJr^9g)LclKn*S*Rc#%2jV{xka-bpsDb-{tVrZ=KMj-`lY-07hMzsQRHve~`O!*Pb} zI0-wt<$*VerA~c-nPio5{mK~IZ;SvfzSC0$J$NsyB?03j_@A0iHiN;1s6PP~kg+Is zxAZ>^C&3c#b*j9=Bn~V^}RRBtQ3O&N&)}1rx*@_z4ZO3iJ z`#fCYgH>U+Pz?$x3}L&lcRjE7Gqc(!8uoI#nr3t?`mf0dVe{|9>x@(ovil&Qj7>&n z;mLje{c95=5nys;R#3znLSlwK^JHf>eJnXF*9L=PP$Lc9 zf<<=MXilIz84Nv2`wHa&f2axN&M=fd0Ac~kmbsauk{fxu9GRAhQ*GsC13AKQLB}FX zwHVj{M}5qbI}3KxSb7S-5OJga?iSfF#%L~nIjgv16lOw11++FHpr|cnkgaO}APV!d z4L5}0b9XfwOPJmfoiqj97P(P2EXZ1&HRio>LZYJn`qVy6opG0Q1%)7QUQ~?=zoq3x z;|C=fZX+-5x}+982x?d*f7jqPXn~S)jZ0x(U^=~hH;K=EA~>aNsLTyL2Z;WQACd`; zWzdt)Wjv34+gWB~VyU~K%a7NbVMVy`GzaN#sz|$V914!Q^zjB|8<7ql1~dZ zRh=vsC1L@bWF0H#qH!M~{>_W#rmF{(VlFmaa*df&L3s;2z zq)ZapVUA^0aq~o9Z{4P7kkm5Rwut8y?I;GY&*J#1etso^WkLe)f~uj;u{Ige>q<(S z#v1-14=MBlF}|AN&=^90nPs?kAfci4j4kL|?xqD6XGw(>LAk3;&97R}_zevtfR}r> z;(Fgyg;DY6&ta4PJh!c^w^I3Uv}%D=lt!2}$3zyp-6R6DUf)SL(0*EYZ{6MjE*_kz zu}P|X%87`{43vF)<7RVfE*Hz#nS3F|1Ay;$wo}zg6>T^{*Kcyq(uEvdbIPfET^MO? zp}5%A_X~X=bXwzC6j!J$Lk(k4&fj$sStf|G9o?SYytA_pJ%~trAX_Qbo>VuRFm`AN zlP)AON?LSn%XW!11myu9niU2oA01YCxy@$9=2&aEKj-8>->h7hH<@y@_GC=reyodk zYb~RvEBOPoilrK=r6!luS!(=RwRP|%Mr4K3U~9m`MEt|FJ3f!N?Zr;|Nm$ig!B`uT zF_QN!ldP{%f%&%QdSgEV{3a^H#ixFkLIPGJA=W9^Vv&f+LC{VXk$9k?QpiXzTz@6yu(<7!4fHOZ z+_o}I%5ubtS@nqZeX}X$!mRRgO>$+mi%nqBzxGWQcSbE6SoWW^pUeP_=vfuMcgMqi zP|p}bBEAxj@dRx?I)cah+cIrv<{7n=EYH)KjvhXBd;-_#2as*yL?L9skfFF2pb87h z`_C6#|KWZtGekWl`Di|cFCf}geZ}L`mw%Wm=e9mJMp6d-PO-;HY#@KY2=@Dosdk6P zSu|Nm>%A$NIMw?A84QW`zBIT5u97ol*+B`m-#KMnJ9;2~lMBk|#YF+-2C7TEGq1C! z;h!-sc|CHHu!4*_UbVg}S7&|Pn<6;DHDbTcy8Vknn9{PI!iv?v25rP`3VA^Pnj5{P zQRK-qxYG*KwDyCvfpJ5laqTsOjt~vR72ViE5e<*o{ulDpM#UhRABI!rrB@NQ2wY!= z;8%FC>XJda6hv@0PWnN)s6`R^FBcQW197~%`8`&$*p-{&Uki_QF#EI!zJTmcKmKuC za{o;Gl!4@;ff@_Ds1bu^t125*5iA!2t`*)U&u@%nC;BB{mFlq4%8;e#Nrz{3(Y~?W zp@6i`G!iYQNKHw~O7)y!NZOYw>|?*mg~mSZ#UKhIjU6bn!(3&xoUKUoV_6R_Ax4J6 z_&h8?#n(jL(cIi=7TrE2gVJOPN=Z6PHfx(4S`SuAMiWvj5%pXrwWr+=?wjqjZh8wH z;L)%{Mj)T}Ois5tM+Uwu-dru6&{^t{2C(n+*`E;=_AGuu2{B@lnWW zC7HJyArS5sI6yBuIYQ%a^w8#MGmEn8U8IGWeq$iQ3fI@bmOza_=b23ULU}+bbRU|b ztHfAru;oc(;B?jEbZiLyY9W@mym_x>bcX~w?+UxvRDJPY{kXTqf(1>U^vBf_J4I1F zO^D}M_+{9u9~_qieCrxGkAep|dk2&TBIe7Lz5uj=ul)Z}-n{2*2e8->b1EPX0Hb-! zo}eWRRgvu7H4EkUsp)@%jg_ErAax&rp0J2TLnSXTS0=7={|2-FOaIVk0fr)B3RxR6 z2FZ}~0cnfVAIJ)$-W2y40Q)WJf#c29j}0N?2VMY?z7`-W3%`?z4$ys=(iA zVht)l=8$$V&X4_ywwkNt1ILYg?eWT&qhrx*AyV&(hL|?-v)bN`0kojX7C(-Y;T{B6E(i%C{kFV*a7m`V=*@kddeu1O+b0)CiSkQIpDe}_0UJl!4Z#4hSd zdAb++y+5H3kTZ}FNHLthks<~XRmGCWBG|Cf5tmltWux*l^#}?cVwSeEl9x81N|zV$ zWe%0oO8wB*_TXRhgO_|7HO^gobx6@hx=EXk#y$9(_HUF(CPa1U=VM19Tl>0KzRofiX7&g_HpcfZ$(M19Wx6LzS5W+PEBrfHaKGQ+bb-{%qU6O>Wi{# z`%PPn!)E7-fM?y()P`Z#y{osHL2`tJQuQeQ(?Hj&Ep*3=OJrz@>zPzGujOi>Yuz$6Lg;c} zZHB?$acL#QbS2KaJenV*6xUZrcTOhKr0GgEA%dVaVU1U8ZHXf@QCU&wZi${=d%rwEkf8YM zl((DoqnmAhmKk!|ZH5l_1iyFkTKgbe(wEgMA`7qRD4BedH2M0LyqtL3EOoYcv*nHB z9yh00+xqaLbv?o=89>>d-L|J^>fyi-WrVO6y$^!D8u8yb=c*`G9~GS6xlxc$TFX_ zpyB4@>1wzH=x$zMjE3`4s$s3#{#yf}h2&38_U|4~QQS>RP<1$ZELT+_p#I6W&iXp8 zLC0|@A#QFwT*q;#6#naP@(z#@X^Who5XY&pxuft$4()_SSH{;EdGw) z8*>0sBVxAqM)~GaW_c(R+yp(a;A|29eH$KlyX;MseDDNPAR_v+X}!We)vo9KH##Bi z2?yfq4-7=Y+{*GZ42s=MJc$l_U`cSj3i>CW``_S?Q9uPC;?K3RSLoi#uup$!xZsN` zWNb)F5^w>Cof>iEvpq)ei`73ut>^{tRvK3KkLPdL9fqA1Y)pm70J+HmP6Lp(fNl)) zn=(2a2jH2ax3&0hnQ$RbMZhK?rjThBuir7*-FB_=EBu*RNz;Ek;2+?(bi%jL_azV+ z2CL_&@&yjNvHuqA)C>F@(S8GP;NbcP-~bV60g@wPSt;a-!8<}4m_Q|Suh9A%TvDoDT{3awZ8qZn(jisV~Fzt;Edrb|2lEJno4uMZr_z+)>uRxWvkCY;H{s!?JPnfphnv=^=T?z+?nu5nxEM?lW=);QGIHeS6b?svC}-lYKoqq8BI=7-e?9$`?YheA8qf@g!*`NZ|a3cgO3>|vraq!d$b+{V7+^<{Ogmj9_Y3yNu$CwkFAk6JB?3AJBUM|yde zVbHFEsdYn`0HUKTA%f1N_u*E5{%soF^R{;80!%0t;StE%M)%CGpXzw!!5}-d zo}Sx#9n-fM!gQTe``mdbb75d;dpmejC^S@0Set)cx9s(tbqy2I(fWc6R{f=%Efzv?7ZmKnQ)Hv^0%` zr>vC*>3Z_K_6f z&SM0i(uxc?!j;sH0L?oM+DZlj@kNJ8O)5EKk#GFX@XGL(3mkJ$VVu(M;W&r zN~frxf{;{`R+u0ClbUDKGH=Q|`w&va8PyJ?eUmUxt-F&zRz!>3>AaghfR4Mdd#X~M{XR zJk}<9sOCnXu2K$bc~`us2iT7gqP+ypd9rbIxN#y zyYlH=e?`V33O^%5L81nU(82Mp&D%n)CQD^ON3!9-d}{=9QT=?Tdm&CjK%@kmmQQ3A zuecx?=As4-rd#Iia2%`ox%dM2|fAp?N%~bDtwe zi<=}c1D)u1N#F#HBGzI0Y8czIbk7m3&QW-TP6m5__paqf1u8#eqs#@zn-yNi{qH}A z>HW;fQ_)1&_iz&V$y2q-Q(Fa+6u+BVGacSn-1ftxI35bcFoTw%NhVEExI&N;PlaP7 zDXnJcRPATur|G`YWA)S!zjdUQr67!Y|7lD{GEZ8YD!idK3CD#hJWu6kcr~9jiIMHO zx3u{_xd&*eRR&Gr49NxqrXBph_z4fyjxMmo>f}R@eCvhzBAUV&?(d=EQr5=q%q528 zZ=ouZIIk~9EZx)Ft(Ft=8BM>;oB|xqi*m6om_v`&3i>Rah2>qUa-r_o`q1P%4P=47 zuQe%3%+YKwD9sqo84atL=(Ies<8=;Xuxhuol(fI5Tf;nDMRdR5 z%T{hx~EA zVF5uUoE{~4BF=4Wi zn8~NUcPYRAV7}j4X6FG}@!9 z>h->t%&C1>dbp7#o^xEw(D!!V<_8CQ4pERx;Uk^X1*yp^K-b!6zHAO->ux5Y|d(0RCLE&d4+A>jX< zW`wKy-Yw|?IT7Wl=06@-wl~c8PkA_yaAL%K0Mhh;f%P>g#L$uQKkA#o^j4{Y1IzyA zc=+450un)mcmu>d-98y%DeoIfp~TFd>T9AU>dR4crIFe!~nGO%;yjTNy{bo?-zGHc?OA#$XuZM;hfTt~0xo9=$;0 zlw9Ml+62`y;djBExz1#dZGyF$(bKdEoI<(cJE^0)JyU-9IoK|;=bSnU?M+e&9v zmX4)@=%~B%cr#L1x{k#eez>_kJ5+(wQ~{hE%Fx1$=!}Qd)Od;n`fyeOdor8|MTf>M zke(@IN!niNH>Vjv^MW$Gar+<}Qm&Ls4{-tFcpeKOV}x?-$0+-n90E~ukns zx4;ymfd^m(?&tR~pewphf!gsVBID4q)|eRnTC*F_Y97%vJ_kS2kt%Xzfhu~#5wV!a zR(&SgahStQgh|>;ai+H6gj=@cWQ+-j@Hid>C4uwtrBc!aBNh1~75gOcH-0Tr=v4i> z(exPT{t-4E>T4eWb*q2dy8-;6cfpWO=Az}g)Ld{n@-y1(1&3*o_^%5wev1_H@* zbir;{#VSYD?%w9F-LD7lBD+xz7Qlr*7Ar@+Aq{`Ms{d-@PC+k z$M{H>wtG8HI<_;DWHPaB+qRvF?R0G0p4hfCv7Jn8+j_J2zMuE^|6FHZS9gD?I;(1} zV+CWg((&qazdCy+=mLu;A`aCoZhyVrlX}BlF7N?uuLsxonz1r+P);6pCk{(^@ZafJ z>6&w@yS+S`-#e&OI?q$iU%NLxoZeYFqoJ%h86HG2sJl9Qy=?gmVy`Yy)@9~P0p7(2 z?x^Ow{+sZu!fJ=)0j>yn)X^-y3n|Be1WrIzO3;4x3SFMs2!Wy z5y!Tt4>$v4l^+@Mmf?-!lQ=c59dW(daF+y8&?QtF8fhrFTYkV$WtU^P(X`D@ zUF1ZQspwebItw(LY`jJEpCMx=Kg>{H41@w%#_$g-u|F6lrn zc7Nn(PYZnP$12%YqaApi%D(RMaKfso;Db4wZ111YOruOmn(RxE)H;+_EPf)|wm5xs z-$0kwDAC~7t$!*>AA}QhHQXEfQ^Nam7;+_L*H~`wkw4kUSPyEj^`!QfuK1tRAZqfO zd3!rCiW+Ll8fo{t%2PB-c}#TjU08JYM7@XuV;_ktu&dsLKR6IenC#E&#U7Dc2OG^X z2rWg8nra^93t^&gdqC&2qmMafZR`6*ta02*Mzn(#mNIC*=GR&^>ST%L%81a<=<7@~G`5fsEao+gzzmOt@E$$D~+ zPBGM;Nf1Kzy(tzk9xu<%a#DR-?tPx__jeyBBN5sj?y+PBJL`0v%209P9n63L^3l%M zpvUshv$c`6*W>mX_Q;?d$O8LJn9tXdj2zNxi_3FzB;fnV*zvkK^{)1Q4+-QKlF8AP z&71YZ=4C9xmCx(bqTCEqHL-$RsIeJ#*O@rin2qkOo-esqZJ6ZyvpX$s~zl;?l5>biU}_R0?{nx z0aVUN&gNI|6-_EF$aQcpvU-bW9dDvRkkZDQNGnWRyq`hE3}<}#Ajwqjq<&D5n$9DH z`z&9@?`p#ry5#jEBHG)>9u?sZ%_Bd=7ftJz7Y>Rj??>h~uF7OW2y{lu!G7U0f-38b zIRMWS-y;aGV2mJMba6BkkYg=?Sd1i+4l89q?eaji<2EmSsgAoTequv09N6D z7wAoX0;WwJ2K>bDy^7UM|B_AHwdOG6$(o<6(j#Y1CsuIj{Fh{1=@)A;W~+nqw`c`#!ti_c=y9B@45qh3-?8Cg#IA0S;d5vCy-n>!(-s1970ZfY1J%hw593`&iygr zq5WZJaOaHu*O+4iONF0V2ux&3fkpns->DKw>txxAT5)iBSYM%_F@IZO0I48llx-sj z5FI<-`PU%pRoZgV6jG!h70DOqw-fQK_3TLy)Fe63MY0rrjOaV60UYAU<+~SdQLD~t znDjSGU+>5_Ac+#HGC);W?;8>HpnAY7(R-yGApD-j4K74mmZHqu=Gjr25Wqwx*Ldu* zOVV_4p)HH;dLDez?UaSjft!(kP`31KewkB7Rki5`fE$m1Te3xFvu_DsZT%9PjUt$gxPbTdl456_;Uz=5#zQl*zuKnwUVf?GW^L294y0rD=%7)hb4U>j0y zo#8q5$ucJB~WF{d4Z`^nKWHKiM7u@_dupYgCnj<)nQGnUs=> z9U1M>cUEMoI^I#|CHB<3qkXnj|39-Aqn(%pi40j&0eV9~Lt(lzJ)IwVb?9rHnm`=V*Lr7Shr zu}No$jo0n58cKyaIknm=ch4KQ|D)q@l6`?i@6ScJ&54yKMj(74)2D}{9C))^r#V;~ zZT+}xti6v%Z5jLn`xafXZP6v^kJQJDV)miJG}|FC65YRD*&DTmA1tuEAri=D)H`O< zaQ63?*Yt4tdr#{HHa$%Y=<5zJ#S+(JjA2xn@?T){0+=SjrT#9V#Q5J-dD-6wei|Fy&1fA zIV40OizL4jp_zPgi6s#Edt?4EN{C$Wb$a*H>0W&Usa8K!eTO_BCjY;6pY6W`a5Gte zHUOFDQ3G9R-+mJ5YiTD;qg?yn^3VS7Irys@Uk!f?{{u1rcKq@GKL4LlFT)Cu2?Gdo{Mt_rO}h2{JNUI5oc;-h-fZp+ zn1w+Fm^;z?2s30#6h_K^eT5M?$CTPmI5e=YtzwTk1ZK0V55NEbczQ1TfIIm{Hkh&< z0{FUWNT~ff|A!3)0AY}Mv%=W7IYEZFO;7j^p?cWwWxoL6P|zFh+VC}*6SS}elKFe z7$L-%(?B2FN~s^)oCNxiu2#=ULz-PqRu|RNOTjY+g+F(7ceHVS+PK(%TCKg25f&utEVp9E$)tck@9NS_rJ6jhvvTUC*JRbcF4NDPn%6KQ z{W~qRr}P zzWmXQGTeR^qS*x(3JIa}3{Ofbk@?t4q2bQOQbSRRThp{Nm`6d6L)l58*-~HJ#LnJX zAfQ8Yn-Jco`zz`(y*lD+3hT)4?L(a_(#81xTiHeA&Kn3GT$l4YQwRdZsW6rEv}KIS zo>s_}#zxM2KRS}DqlK&dkPT(bQX;H+yIqJJF*AMe>Y-N!Q$_eYKdzok@SSE#r(G$0 znh1$Gmq1@$@Af8yhVE2W0-kW6RTN!-)mK=*3&Op73B$&4ygoMqHSYH@9Dj;iwpbz; z7;{qC9U-uEl+8srUNUebKE-ex##x^0UBC{jJGkvHqKGchV5y;i4nM4RB22@x=d=OQH71LI6aL8YS+_5v=DUbZ4U zBmX{*Zd(}C4?KW@8rA^PU&7Qc)5Hlo*Q92JjV1~+IXmaU*;374aU^C*c>MT!INYSS zjI^^Zw@jmlvwK%Uc?jXea{y;x7;`p-&)Us;JBgkgXKvV=6SLib*cjEF?KzSg)jCgH zCI!eQD`Cio$*jCQZcvv~+q{OF`*Yb-)R-~YjD&<4GI}@XLLWDW{U%v75ycayaAkF$ z=qFg7elVz)=koVGiQy?p@TS=rMy#@i5aooHvX8GU27G=NbcOln^YiNi@5QtkVyV77 zvja=d#1GEj$nJSgwSISH7dWFGkX%+KGe3bzI-SRi)j3_6oHJrWG;G?(P=zAKv$w;4YUaSJw`F(oYv!= zlH$oV%}yHC4mLs?gfb7moF2XAW`@g)>E@8PkQiRm^zbsLYt);7z_6)>#X>OXG=_Aq zsbqa8)%hz%&I6O-;4Os&kzH~epDi*bWk06qDFSNmbjd7Er50Ryp*>`V84Lhi9njI4 z0^QtoXJe(CXjcq8R><&JScp4V-s|iChJiny`s!S(?RvcGY2j)1ulCLr-X5r43CcyGF{L;E@wwJO#Ggi(_qNgn>&U;@6rmI4F|0?q&k;C ztDqT&w7v3EFa;vkzY5)nAj1>54LxT^G1lNq(YX9>V^$}JV%!3=k0e!L2h2Cy%F+0d^gnyUySZ!arlmW_v`#bijwz&I6L$^YD-hgm1lx=ec(XuqoInd>&5{FLS2aef(WEch8M)A zxjH>?Ue^iooe##CiVKhPxL8A|WG0fL`o$Kz6&n=j&*3rLrv?jj71(k2L2a@7U5rk> z8ZdT#*c(JAtDsM4M^M-f^}|0fT-UR!@db8^F$a+R!!GCo{B9GDwu9&Ej>F%RT!r}6 z0?G9Vl>z+Y`a4EExQDOgCKPI$M}SK5@smK%DBnE&KA$zP&=@}RD0veud4;8y|5k=R z)>7_-Q-8l}rL5tT;c_I+nW3z~_MqX8LeC_GRQ=V~J{`?3IrEZbGsd?)=d$ta(9><~ zdE|LRN%@ajfUZ(dhV!$ol1hK^XNixMXg7E=1&d`c-y$|o$qz`itXjln;lK4b>k$VV z#I$UjZZ*%qXi;ramXE3HSG}It-}Aa?$$N4+r^{IcpSE}OC2G|nGIIwDzZg6^7pH52 zJkS}v3h+Rs^My@kQ$R^&at-)SVCXC-;gA-|VBT1o?e(&Q52D^15u7QdF}n|{&*!=u zreVW`PbEqW)eJKYk$t9-2LTOnn;&k^JjYPc5O~qhjbCa;)m`6z+Oq$VoSGxk0bY=( z0F>aF=n(am#O*G{PtZe6MAZM){L7{Ol9TYaK~Oc@<^u9zV8c9z7d}CiMf2|dtx5S3 zRbqm&{i|YZwkZXS!JyWK6u}638uw&8x5|G)msn|O{aXpf_+PW?SOA7bF>4_AW;K;%mtzC$;%xEyZ@T+28HfJ`mgAJBrm;QfI9%XgJwam zT&zDuK^^p~N&Vs;dNw4p@4yYu^iArDVw&wI&Re3$4mi!VIRgMO5U%o)}i1}?0=>I zgnxfwADI4iVl?xg0Q{f<_rb+4Sk!TNs{boVL4JV3Na5Iqp=>6&0j$9wXCtM;TI@MW zv`fF^mC9Wg{#VEPPlJxp%=iijh6X$hX}&|(otJo~^n!ia_Um9k(I6Pu>Ddyl?I@Zt z!C_yaP&oau)Sw(Gu-=rv)HDn!tndGo{=>3pmV||^g8?`#m34zgy@>MtZwtWskMo}b zf#v_X$ze$mkobx%Ur6t@!DoXHzI;XZ@Yje#l>pE?n1gS^LRcVLN8$TBDg1MlyqHh+C1CR{6P z9#rXh9Mr`0j{^NsJQxb}BZ1JGAzGM@!lQV|d=erwd?jF>JPw$n(o}3ZR=J;pQ^7Q0 z*uokt$w-Z!B0qkWn*P#w0XhEFoJWt4b(bUp{x)2^AmxTC1M@HYC46>~W`739(Tf5> zIxK&rlA2sCQttUZWy;0R$^6b2hg3xqFP|Yt)l{7#H({GM<;2g|rV1xDRiFfu4W7>*;7kE+ zaopcST2UzzU<}<~3K6$l0aJKDJ@nO|_+vQ!$ppsg1+9w(>)t~cMCusfArsFXp-qKK zm%8QB|JKIWpcPR1Wj&HG_Z|+BbmkMcPnms4T~j=w0PryH_y3vq$42BwA*<)Gj|ep_ z1Id*2p78X^6HbJ1dBZnUYEd~Gtkr3H3C!|#emcj^*k3h!RN--S$$0J+#AB7vjD3Yc z{`WwAO?rb=8>UETOAwvP{kZC;z733)ig4?yD%Q27ZK$#3nzGH{bKCAuKa*nc-YOh~ zAZo9Vm*ctDiE_2#2J31W?w(%p=a+|D@0K>$HOrbGg;uA|QBNRS0-~WY=jytMKA(R1 zY7s9b!S}Csfq2gkfaoUMuD?ES&aU5W`W}E2r>8aE&95%svkl!IFZsB*pRSf{>fdp$ z&v-XC-2svtzctH<+wl-o1Uo!yV zBi897UlezZIV0l_^eqVNG$sYf)c1Ta9b{W^EHB5RQsFf$s#p(+3IrcX*29?l!O=IA z7qz2*%F5Hd&!0jv+65kiOgLaaV~cLvVE?RC%P^f$N7T<}PhpC1j2Z$tn_a09w5~#{ zK9^jlrqm%eg#(rny>a=gu zo;h&qu)cECAp`Q!KKwoyS#W#G<|4eca&!)#DT`Bk^d>m{t;i(>Lq9-WLo z$w&S^GHaRXJfu@4OlVoSwQk9TqkV=_$IAu?-LV>#^%hHL*>#km6bCQn`p z@85qwyX>>cU(r1&z4bVohw^aZxXZ^1 z$+Ys1yi1so%H;oJrOKY^Py_(t-*e-05Nx|;u3#V**V7`V!~hLH(;Yvb_WRh1BS41- zUO7^HKm@ht|c)qzI7KmZpay(zvGc5F=F3ppW{OJ;+PaQEeITn<(tS;I5rMK zRXP{3mcyftSy?ZerkB%jmQ4N(Wr=v_PcP59+0sj%oGXfKmG%l_>#bKB^PQm?!{v$y zt4@C!uTC#oj9A5iE{nVQh%`$m9;F6Tm7c^-5j-!BTrnV@a$L7_e~vY@i0cKC8q0M^$yHeA9?N;IJc|0 z6{NBHM?O>HVfCUP1k`E*eHw|s1@eCsDPvNPZCO5T&pjXR52mbehr6fNt#B`Lzumu` zJl^V=pWjkP^xftFX))Os!UBbe9S?bR=#uL*_NUCS#_GGLAh^fC8FkOg_>c=}`XlB$L$V{$$bvzS<7SrqNHQQ)6SN zINNZ66v_4k<3aiw_-J2P0CWsP z27=)q`v$T?I?g--=iz_ytE6`qZ|WN4(yQ<;DpzShV;)uP<+eE9P?)DRSX>+ATP?k% zb}Q{u+3?(oA-u_H`}RAvXeTH)7kC^(P;2nbcR=WSPhP)6@*S`kX_B-5irJgUo|GOS zLQR(7$TXk>0=&Nk1P!8on^aF9HZ$h4&3F#*D2Jj|=n6yRnnMF2zNRNJO8&FLf4<>V z?Qn-ELe{@AihSkMp@~fY3st`y8rzX=3J;f#51g#QVY;zjo#o=(2qi3$sq)WIXRy0q zm7?7bP9ip2NwKtqG4bvK!#UP0Eeb7EA&~mWYmzigpy(W!lHwnJJB3S0AvEOvogMIA z9p|OJ_eldNSmVsC00iqpXBiM2MnR_r^K*5V3;fF2LgvO}8Ht3Xb&DnD`U-IllOUPM zRh+?_4N6kp`%Jeh%9oDnZ;{abel4jc zTk_BmK$X857310U>Vv3R@F$(?>2GTtR)mJ=-?YRbqzc)aATc;(w%};v$v>1qTX-lz z-4f5d|j2sUow}Y@jtn z^Tn804->yOnP-i_C#&K*K`Y79ltXA>zJml9QxQ7)htwtDbub2rCI8!5zZgz6$pq?gk|u@)V&8Zl7GP)) z0(^!t{#BoZD}UaUHKqp61Hq^I&I4J#mP{CQt%xRkAu1J~`{yo3TBtL zwBYWp?!Bwmh#OBGv=T$Kyt_g&mRL?(>mXkzw8Z_I}-a*bb2TN~&RF0*3PZjbJgc zPmETN=#6Ar9&S*TqiHC)oirQL&tJyqx*sfG(z6X}yke++xqRGuxrbJB_Br&VH-v8Q&SS6MB867V8F*gu z?n@a6G?a`|IN4Ognc>A31`Z04V&i%38A}WAYTbrhhMdHFM!=rBg(ON=;MofLEvj8R z;r8+BQuBJXHf%a_iwqzS?u{u(*Bv3dSUG3?dK3Jibf&YEu{u4AtZ^Rvjv7#oR}blC zEk%{NmK#Y%PHu!MCyc85&>-_|LTO07Sh&l{7!<4O^9f zv$+&zKu2cI_F|8ZD^Ib%%8&7dwKv`y&{Det`2KRllO|$Od+IvG4 zC;A}G8KSp`4$I_;EKohm={8#J01iXllZ;v>2(HKckM6A`B1UQDU_o9;WPXj+lKaAR zz9U4twHC(mce)1VjW$nnohDn~#&swvk;%%q?V@u?d$Q{G zu%LypCuqBllDj*pGS&M7^77xT`tFmm#}Tr?bJ7usZOuvM3TY*!BU4qO!obx1X#ZL( zDZIwe;}CsEhyiNRtf2^v0LU(SMqQU+fA(*j?rBXfGa2>!-ME*jB?&MlRG+d$4Mjo= z=&Nxd4Hk`abTpR}3tICz5t^8P`-4P?j`DYiG-5Pivj;+*cu4tr<8JV^@_6;dPoPED zeRy(bH>P^dr~mOZ#8*{Fpv$wr`ukmZh{sC+!k!^%k{kN01Ov6Q>GJv&bz~yv&lA22 z`N;q6yZ<9bgE26tfL=jT06R6L9M?oqyH3?|9rDWtuDN|d|FDTJYD)fWAf64WB!Lda zmn07WLGX3R)a&M%L-5Tdv^Xx)(V4~`zq@PiF8W%RuC{hprpD@BKN*SX$IVLv_DMq_ z;Z(2(H0$V@dmRYg7+O2B*J-OSCW{$&5(2a2eoT;cPaNc!b?>a616$(~R))%hJQr&H zW%{POPURx@pY_J{CaaRo^rj%R$G~TF(0)pPX$qUnfNz5VEMBiax1`fZo(^1X0_YW~ zVKJuNYuI1kBfp1dllW~>N00Nn3~CsPKgczYWyswIrR4I!9?tuXa;H)b8dqEmFmrF< zf3r#^V$z0IB1#P-26A7wHkpTHtQ8}d)(v<6Xr!Pb>AJ8Mv6M-|ysxUjt%*bRs;e0w zoH&hd;?^XCax=5zib)F>piNZXP4@F8h8Q|_k!rQ9tJAM8&E0XaVeif_C z{mfB?`3zANmuu{ktLOd%pu;w%QH%XXGD>!;E8eZkV8GfzrMb6unVcnrl+l=8|yRJrl-`R+A3dDKFhbn@|;DsB_dKZ>n0GcH6pZD zVR4oo9`vbb^V-tG^J>~`yD@5b7xqZ3!>p56CrBy)2Gnv6#WYY1Q(aTZUc9%QgxWn~ z$NhE1waEAzBO8cBAUC*WnNw`T;v7~kGz_l2yd*0o#`4o=Wb9_lC&Y3I&g*03hmZAX zg*Nz4yNLz4=Fgk9O~>cdWM_j6AFQ%%wtQ#H6i@yNucua3SL{l$$$ZWZD}=7545u6= zRuoGyQ{Y`k+V0$lgA#KSv4*UjLWX%tG3n}lfsQw*JA$|>CJRX?jq2v6lKOXD^R4VI zE$+56uWzrYApG-#AI;QLacqrLVulLfhSwIs1NIeiDuy+4t<_y``db1z955Z&TYyXA zYVl?l>D+QITduDPQg zqAt+JpIAX!2>E{EwUQR*p_}d$Z8awmRd*on<+=3aGu(hk(AJJTG*9y7fUQMwNZz-< z`3Ch5GMckW+g}^+IeV-#D@dD-#i!(lX5#&s{XeQt2LZ|@DG9S6+~Idx5&)UpW_!A@ zTaFP>neYp--wfXooYMWW4kF-ivyz$Bep>_2icVP;Y+xT}@aTZIRNpvKR;3taLBW=>^k&D2K~T2PPPHce*O^W;E9Tcw4*y&=AtaKBFGlL^Yi+OQk1Vw$Z!DQ~*=j=~39V2qy10HXr2P;f z4tauto!_vQWp46vi|>+fQlDB6@s0|by!^7vtpHq>rrpml$FhvnA_cs~UD*8M>MpJ7 zJ=8$`M{=-_8gXi)!wA2(%bx7434a4pv{FIpG!hw%3gwYAp+S{c96fH%u2ub5+-IHedQnuejp1HfaU6V1{^>x-SzrYegAAQ= zRHGU;_!eYTMY=Q{?B_!#464ueLzwS(m#T1I;7?-SGNOf29UEOtB}FH_g_1Ionx}8| zmIfJ6OoDBchqq!kKE7yB$Smp&Hm=Aq?MP2E3y%R*Z#c*FA~K{!D?KzDuMQv~bvvPW zeQHDlfl-j~GL$InkF|dfX*-C4EGwFPO~Q3Sz6xA3Vg$b;H4{T}Bos4v+_SDL25o5q zqm3iV2{Pibi|HS%T@kV_dsR#UX^{&`0(f=7xYA==Y|kvr$CWf*K5z_e-sfBA5&M&PA(vZrl-`D5l5v>$&l zXrOn$#+E+TIPpEUYdD+wpAj4wJ`UGN&?yxQ-Izg#h+HWoS8fSa&~VcD@7N$0qSrx& zZ~Fd1fmgUaARO*a%0e(ewU&?V84B)Fs#pP%35JWYL!@T$*iQVq=z%>`CPW$%sRj?) zO@`PAMBv6)NgBpO-YFj#&=o}DLqJ|Zx5Z*Y-lcs#3)f3I>f-TxWsG1{I4J$8kC{9@ z^%J(A$o8t$Uztp?c9`@QXMFl?Uo;uV#1=G^P#asp`m$q&t7$tMRQj~UERhn{g&#$5 zM6EfW)Q5vOr>+LW#(IWc?FGEWkWz%p!4glDM>AWEUCyW_Q>@mx-{1LJAM~*DP*cn9 zC_bHgKbznwQ?|c#!+v>~eCg?;;0qj61q{Xi=GY#5mnZEP9)GG;{&Kwz7SR270M7BR zBQ~Y>5{fDXff5!D*rc2k1VZxEqk1k7mW4A#8cn9C%fi$s5)nHHD?&+ZF?4&{jE4}5 zDl>HbZ4s-<7i!x4ZugWm=dbkBUP?mBSOQjcQYv{7F<(0MQbH<|-p>T~o3zAVb>pN! zw`!j(J({UaIWwQ(&OjM6gMrTG+cBhDHf9$Vl`gi=eJ?*gU;#S_X&&`v^(E%mvEJCG z>|_errYr>h7+F3SskAyeWWvJ3UQG8BNkHo+X(lASvl)9c8V(e7BIxv>vHi^}pgI4x zpNgcn7Xui+SM;<4(I2eABcAidgxo8~g? zhz#784rFL_F;ty@^6xaqGd}mB`aqZm!maY5+V4NOtiKET+E9y$_*!z<8 z`InHf?%YynBt&fhc_Tr|;vG%-J1b3SRmQ_hY-bfL@CSFa_Nk0VhMFgOB*OP&`A4Ql z$u4~q*UMje{7)k!po`+f<%WGo>v+tMT<--#SVR#CeyBdpF#|^RZ#i>mci^_IGY`z{ zU3@f9p0@$p_DC|+k-v>3qrTa!R?^~enkFTS3+E!?=B5OLDz22ZQQUSrizZBl>bE7x zc~sLL0&S<{ES?g^Os~f=y0w6ow@sl~5(%a=&vy z17d^v%_z&nBdbXy;Fm;V3fmKgu7Zl5CGpZic4+Ii-xdt8m^sljTJ(57G(ekFOkjIhgK*pzB$`ejmsOo$`M;Bcf zsAD-B@I6?XzmRvfpLIe$EX)Zj+1y$@(5M-ecjMQ9A4H4(V=DIZpLen&?Q~i~hL&xz z@^n$Ndib+&LBvd;y)zY!Qu0cPks61FnudjS(}pmUt}3qM24@k|ub18%*J zI+5^I!#SzJPHIJ2Z)YYEn8eAzc$*gxh|PvHZy_AXu0-ln!1mIR$AGVgv;HJuyCHEH z9&X4SsqO1H2g6~uQ^{|BV`^f=4ZkSUW_xoJ987e(Cpt#2)U;-aHf-P}Vw0Q-V~Xu5 z){OS3+OUpzLu_-DKav+Ng=gK>Nb6luo?mh?PMb=90Znnl&;7PP(2u`20RAEe{B}e9 z$$26Z3+=t2LAZxLP0hCYj3w*>NF~K_7ssd*cPZBgUhlqPfF$}MMBgr<)+Qj-)FbgB zC=%m!>gjYo*||VoZ^lSZGj7uIMhUAS_Eg2d#$=R)bD~*WqG9P9v4@9p!9Md_&s7(` zh__(-6Dg1KYLyu|K{TzJjjcEUxgCOj#6`$D)}_|K>BUa^;~<7*A`v7r!+C%S`p2o7 z0K)uOnWsflpfAMK;>y@)(V{aAh|C%2ArX~al>Qdp8W_FQc%{aTJB*7@hR*bhMRv#Z zF+81;4s!h&_4sUNCG#(Gl;n?7Ylh0|mDfc3+*GkhOZV1XwA=-!kLL9S0tl>=4%R2z zY{uJ5r@C$U@yoB3<2%o?3Rh%W>YeHW?A}Hx25EjW2{mXO z$ZV9?R9cT?ztDw;1V*`X#_0U~d1ehRUC(E;V|k#T4yVk#h^+IXL?g?@f{aT8N6`AwI8O~q>O zzD%};7Dn{$Ph?RB4w&o5tjDyo-HKL9wU=d}kEJz@4;*j&CG0sP za+mhIaJ;;)_Qks*o<60ET1ylSrHSkc&B+jLt09sth2H>$dwe(g>@ z7l&?{IOm$26VnAa@Zq~>IF5SbAS{K7YH3zYm#gYg%jQfQkXY}7%EOHk3*zl4Z7rsH zech^R-#9g93X)ypa7pVDno=SwK={C8`w`OjcG0SSfX3;X&L-9h$_0lF3d!bX2$PuM zRZf+nr)`_>$afgCZqj`G=(T2ZJXBS7ieC{v^8ja^R&fs`NS~S!f)2egF*~i7~W&72cC<(gkcVn(P#)G-OmB2>gLOMVS0L(*n|zF565&n*=#VBez2 z78Vi+ri)5dyMM32U@1kM%ww#wG&(0-GfJcR7QCcx~V8|^!z2@OsE?n$es!R zg+x$A)=~oYB5D>RUg7Zj$ScYdQKMm&3m^jLZ(u^wa5|psUk5O)pc;i7UO|7Qgp2Hu z@wcC)QIiIFpUd#46xw0K9?x|{z11Y-iRkI5=6C}7sAEK9!w--4ecNqmxt5QJ4{$91 zG@FOslUs|NFjT2jKyX=4y`>&cpgb`fhQhV_hwa}gHQlLs_spdd@Y!Ov&t0hvUKjx zjY9*5)QmIeY8AQ7HPl2YZH?qok4YK!&qh-cWtOh3SFIY!V1U?7;NkvmqNXn{Puf@! zxC2|_dn^zbOxwS&5}(0U*-BF3$e`2J(VmubZAZ~4$chPwnh03{mTbu`o zC%8_^iRIh>;pkGE+U@1YYX}1pj5ebYL2FwoA)oaAiD{!$0~_Ep{0ox$dI1ETJyLih znqo}n99gS(3>md}<{nvQHQ^hmanah%^iCdWuz3P^xoukxsje1ccxmk?L%6T+0@KHk z_@`1L(kBgNE-6A`jr;4)O=J}$HkB!IEV2l?yH{Rhi&((=}0lRDup+@Cmppdj6^SM`-9^$ukLyfni>s@B`w$QVjB?HRC`a&>(4cyPbI zT{z!4iJ^k}Wzhr0q9D1W4pIJcvTKHmUi0Y4A2vL@)$6e67YPwo=NqLjTZkXe>o$vq& za2N2cwYwA2HG#Rq$MJLW`jvTLST`|4jyWIRXITnfD`BaOeqbIsEK2e68|5L15p~^c z=oWFRlxUrD?f^QNw2&dN_5JrZlmq=gQ7{q`F5Pl zSjOs2<2rueOv~fFUe@aO1s^EgnyUga^1vjAjru8_7n})ybT>l_H+4ZqB9Clm4T=Q5 z7#j*0453Uupq8cRj=+Z3Y1{zentYyI!T^-QP`7O2U06I}+2K=+8Uz72OH8*3Q0DC~ z@&YhRZ)}Ju6AO|#aI!#&gd}>_?DQ{BmE+RI{pQ=g73V6`Zlj0xcG+krtu7@5;+z)* z3c!g7%c=da9&A~iF*WZyn^2BRSH=KN*z&yfoXDFE6K~>NhnHj)x6FKwTsd0zdFfsX ztm{IarE5C!%}N0t*jQd8gSsy(5SM3hhr}f1eOEhs*S)JHrpkn~olT{EyqrT5abZZ> zNKZ%pgT3T^gxme)Rez*mZ1eBN=hODZ`_9F>maFI+T~s!yP*~4Es$+Ig>$6nm(BqPBmG&I;@BW)+W14arXcK~?)E{2bc8JnAQiy#{8oOtH!Z(8=HG^)oi5 z&5E_eZvBD`%52-`&#b(2d($zx!=7a&zFcv-VKiG@eWbRoFgmVS-l&>ZeRx(*WbHIz zG&c3@aGf$9{bZ%wu+;z(<4sv#5Q;+CWFdQaKhk6qV$7a7odc#xbNNj|6a#lM!p%|T znk|i^L1)?-pVe4WrB1>Xu$0g4DsX|V%nw?-TG?G$B&I+!3XTfxLxGICh_m=krTx3m zc}KMQB{eU1NvURNH0cMW_v(In4@wKOyhBzii@=0fY<4T%0jBq2KsetrRXp9-z+w% zh_$m(-%A%hyKH%}@33+T$r*pbntM^Ug*cd6dqe)t+<1et?8kP|H@C#xz^$>yO<-}N z*RQFN6&mgZIfBDP0bi7Ul)4Vji#z`LncH=`dX(w0^-^LHV7yHKo66qE0BPtLf~FrF z*J3g4yec?(H)kgHbP*RcMrblvX`0!v<=7QB?A?By%E29Eq;k&Xal?Y1X<X7tjXAABphlcDP3F~BM#bk^mjYXh*+lN>5mLs{>|o58MjQ3nj=KJ5lI!d>#SH`$B?i~ z$s;h8q6-{z$ zgtwkWW|&i6m4h+6u46OC4(LyHQapRAXYgfx1|kS>iUOTOAZ-uEIm|5)@9RRiVbW(Q z^znj=A(fVyQOI%JEgNTBSd3qYT*+uS+4%zX$UNTrJJ_Zf=n{Xl^K!aA==q}u+zaQx zgJg z!GmsJElol7R%<$b4Ne=Tzo?i#3dPVN-{QJX{eWiMJfQGbze36p<-w}PbFVwU3sDRj zy5YUIAJz$z;9bJ{e9Ih?&=VDX80eeSvF?=^AK2%gM=U+R1}bV|Ig+RNl0(%(VV`>rtw3tz@U!!!vMsSHTDsXrEwH* ztpQl^4lX;{*j`QH#CddNww)?G;l(jw{xmsHnwfONUC0kgzSwHqSCw@XZF3&)0JiUE z4hm_bg=PRG|0TqtW`v|zVQA{_)fZ*$bN1Z4p#`A%8v@_rtIDg4qN(?W7B{pMCj%Ka zxBYYP&9VM+mm7^D?&{?uGUoP4;bVLNUYArp&=)Hy6{d$ol`Z$HDEdItO; z{XtE1H(T}z7FWW{`)}Xy)iQkPE76NncwnJX1c$!CslXjZxapMwLD%F^zlfq=tpymv zzxL^bk~_-gH(}U3Xt*!CYKY=HTwNIk)_=_hiX}99@w7B702%z*7#%JWtd{O81k9(l z1L2=>jQ>QX099Cd7{HG57t?LKi?!pwk$-6(;kvLY(5M1b83Gw8c5r(*->L4|C@QSt z|9v>hYiGmI2|3me7a)o_^ffLWE6RP?EX9(W@`)?5#Gjoa`{#X1LxgV?&G;-O8 zW-#*nUnIn!7bF@_MeYB-3-dpS@#cn5SXM~Dkx}^vl*dfC%zr~H|B^|-8JNHLp)G1&n6$MA#b$Sbp%|qW9lV zBaz}$da=L$uzV3HiWH3)FgP%#|6M%}YRK4rVMRJm)vmDQGm#J_dWQc$roJ(}vZZM| zwrx*rI};}pPV9+od&hPr*2K1L+nU(6_3d-c^Ig~bqq_HAch%~D-S?_4qJcbX}{*U%dA@yyph{j{pFwB1$=@=-#BwCc~x1=K$G zfPK59>@9KDMjU|6rg({=?)9MS;&Q@=9t-y_@Tb>Q9Q0*yQywaD!Lb%^M^rAiQ&oar zko7V4N8kA_f|2^03uh;)V$cSb+!_zqF6TvuAjIjmm0R%W+zFSvJjMt`mG)T$q3pgC zF@N_GrylJMEh-Du4PS6Xfi4Tm9WXqyd=dlswuE4aDRj6Xcbz7nvuk~@WMi+hGEHr- zvsx3RFTv0S3R>lo2~EzCL$^X^(JZZ~W(Fs(+LK*oIOFYhTJX9Sa95(XmAdqY5~jiK zXC(W(U)mt%Y_Ym4y6KW{Ra9DK4t%C%z3qHlBHg%X8Y-qNHEDg0dR^>~8vrEj?*X3x zt1(_Cw7Rz20qTA0O9;Vw&E{T*lbeBM9mi&a@U>Pp_o^(uz@s%1YPa-^an(O(e_xB> zf-+jxaq{PE(4t=3#979CNu)NpUp^xY7B~W>GU$lOM~FUaq0q()yoN$8o^%9wUc*TU z!j?Ko+Ueb z3x2{4Mi6wr+`ilmPiAmQ_AK7|t8i4E%+0zAfWgK#@Pd^_v6Rhm(d--&i2d2wwTde5g9i|jczuCaQpzz? zbewGZL_D+J+Su@Yb$LRm>U-Q+AFuhSd3#0avf1hH{yM+zfB4lt`DkWs=5}X)HQ4C2 zZoPGNY1jSNXKh0$`M~zgnbP>OYzqyG3-(%ynUveZo}ya$LLpV? zbNUH#wjpd7-h$S+@30me#ch9Vyn=nL2O`|g??oG0-MX_U@(XZ@&OC|M(QKN)Z7j=Y zBM<``#Q}UZWdNr%J1MEqTsT61vN;#O*Xx z3>QTBR5`yMuHVPXr>pA4a)zEb&Lb zp6?H|ybtXpwYLqTie{mopBMxn$eOY&zHj_G$|UIIR|d$}SH$S)Ex_)l$$$5EwL!|` z8SKmN8qE*%HN%JwEaqG}k$a7fKbrWc=^mS6bDrkBGd8hs@s7qaK7x2p#SV6qU6ttN zP&*K2UQj#xV`hbyF+i#HXhpUgc{hbq1#+$|Nx z{Y2}EH7>=l^s{0lp3`lKC07K&P&slCN};&&`%|Ds)lbRVzWDTLUiq-$k|P!J*rG6% z=uf6H7W*CU^b%^(pOVr;8+cFn1z#X$jI#~@rS`J_^SzAG44(t{2LcsDQVZY05Q!xa zOA7Jy*C`KD3TQ3x*kfn=_h@WB%!f0Ff+?Y1{5sSdwfHY-fSu=`GYuVBT9ftPRDqPT zGB_l_HHnmAnB#8C^!wL}^CgTSU8n#O%kz4pDMGnDE+L2wGS|3Wh5GwJR- zLH8vJkp_2yS*rzk@2J-*+I-4%*Z_Po>j^xLP0;-g>DOA#Q@_k7_zA zKq>h}wNeD)NthMXb^Wz0ElI_%i|gJD$VqMEo`@KQg<2s^Nbm&(; zfZaQZ8SBxfoI3;2hoKli)NgVJ0rLH0=jwG@lI`L;)bFV8`(N?+Z~5Oic0hSaR;Un# z*x@R_Id#Qv?2T~M@e2EiOs8T@0%Iqh-72-p*RyTaS{KsMqx{G1*9k*yqG9!604^f@ zw|lfX5}p>6d4rZJfg&Y5o}xEnXHvFTm)+wh|dT=^Dh`p7Nqew|Zwsc#m zc228ORyUOEeYxsx=b^5`JNRGl0Cf2a0fbKEU7Dui6t)RUbYLQ^Le3}p_G>WikBlLU z4x6kw(pXd`F1RGAjWjRugR*<;Dw+lsb=+FFO7DJ_gTovw>hz8Khm0U>2-7STSb-Z_SjxX=4qnGhlW<0dXN!%X-qX z@RgL7f!x5ZZqH(7`DAWduIm|(=FDCydL);^TKMXuU%AXwzS-q;)EvfS^Hi?qWFmnc zaspYW!keY4z*Jmky{y98PqarId!qRva&DJI_vW~i#XQ(+Jpvor*jv7%ve`OX?C(9_ zO2(HO0S$SjzxwUN8t*+30d*?Ry@0J0mOw-qVhEv<>7q<=3&h`0#ipPC< z$2n7ivmS_XN9Aye02KdpOA75`o|R1qMi1o#V}74H9|7VF~3h4 zd%OJf%KlKXKjrg0xCznMV&8OVIsF2Akm=j4JJ#%`R+J|I~8>LPRpp87f({ohTF;&GbP?W%~Wuh1yK^^IAeAX3w zsFgN@o==r2m7MkNvL{j08^1|{#3xZMJAco|9qnouKEIU`sF(MY$dre(%3C5=P=4Jb z$+)bMxn@ZDfLG{bHVBaa9XQPYW~rrouZ2TM`TkGR#GuAxOcEEu# z7JK`TusZWd4H8dPRS{XpK(Vc^;jZugFIu>mrR8VSPL2e8F&9xIYc}lh0_j@sO6xC^ z(G-|-=7kdYPL>t5#ipFO3+{<&>5I-Qm_dkbGv6yUNO)W1Hc8E$W>G3Un9oveZV-Cc z9gz$g0djOf8;=Og(Gr0}m=poVpj7Aa65FsD6c2G2Xpab^c(p;|>2Ye-0R(!m!3`uH zRV&fIjUf9&rV#NF@Ug0B`a>o)Kw&0P>2NrU4&YW&`KiTCnJ+*mNtCsgqh}1Npz40^|-oGKB4?3g0<8$pd+f3%!d_Cg9`a#jW{jZGI)n<~d}%@%QW6wEoqLRUC=cL%Y_j$|gnm zv4tw1A8DR>+3soU5^hVhT8ckS(=wogN-fmf5$5JoK9lpe~;JkTCuZv*^}4T<+t z>4L+d2(2f_qq;}DmlIz(a&fHW~zNyAkgDVv}U zb?02}iSP(%9Ep-tA7*QY8R8}nz1v2`nU8W$!tIZ8Ov0^?nxbWsz|E&+!y9#Y;{(f& z#o!_}CmWu;f{7whs$^!pc`R2GXNejdr27_8{Hu|AD6Do&8#t7UTd`0^=`ut_9deY3 z$KU7>E*|zj6E5bBH1VlMlF>nhTK+T^cB{e?Hx;IU^Iy!!uzH6Dy`5ZrB8bb%0_;(8g=Kwlr zW>0}_WB^TYF;K8Qw5ngAySTsqSLBa_9oXY07K}QDX&Mdzl=I&v27t;Gg~&`UgrTc9 zns-?CWQMQ6Z=sy$l_+xrYas+8yuU?8l8wPnny<(&C>zA{c<)*Bm+$J0$LluD+6ZVG zoq6&{7Ophq=dV;->^NL^7%VgAcxQfESy+|z7B&|_2_CBDV;i*kliHhIQ|IIHkK;g9 zv&Qtc%c63~r%4)AnE+gZ)5h1}oaowVCOXdxvo&kJ2TJnHZ)>*H&1yIk$}m)<*WzhF zCzrra7z*OmIP5INY9THWS-M!au#vI*H!jHF2N#y6gy68+KpC1_YlN{-mIve1pCV9% z9nIhpvK-C=hveg^7@RY6;LyH~FtD<2N-|`@3C=QAhuaQlSYwAuUO!#H4R~j}oi#Cv z3Z076(^?-RRXp<|gPN+BZmxwKk3k4G?|+9qL>k}n>mKFh#96AT4PmR|gqoJImenW3 z7meEBfZA?iV4T~OXF~$Mn1#NwF2;gEWjx8ZMs;8yo;1nQfX&+)VR(LEsOH1;ZARR6 zJ=C^)T@bkbz+-MGSyQYkF&*^MJeh%oiQ0z&>5x$?!>r|Eg++w=Ramb4@*M4K;Fjy* zYfEJX_I5rlF@Dw542!i^nJNyPDsYJTd0NY|(7lo4zl%n|VR)`tpviItX@%PiA2Tw9 zL@zhcql!|>8)6)(!LcJBu~O;pHMaBKw^ya6bDDB+J3rmM zEkQrWUae=5Pa@>)`}H|FS#S0wd{-3c{OyGI<=?Wi8mK5wdJEiGrJqC-=eySP z0O6Mj1s*76oHEPuR>nT#23k~S+Do|%7F$lUn-*I}Go#6Wq^Nw(C{8v@Ocj*03VG+N z&M2oS3v$A*D$crsxi=u*EEneFP?+#6PbkC26Otc+XE*SFWq~EV zq$t6RRI}{JkMxt|)uI_$;7_9TlXk#N!Q78#*^WhvLT%GMX}%3sZOpZkWLQvXstr~T zbzZg$FQT$9Ti_N$Of+_3)B0Dqg4woGuHDGov!ft8TcuR$;}u=yGwAa3mEyI?+cUu0 z(-HJ31)KP4>%-lLx_bOz@UGp_!{y^vu}j?d;fPrM{ra)_Z1TXXV)u1tClO#t`XO|8 zdw6^Mdh&TU?6#~B`#Lh@+w%GPwtjWl{d>7B6%;oQU_9eZ8nsEXxgKku2lOX?H3yaK zz9z@1-tZ>Xk#IDnoB{gYVPx_JC}1U(CWFZf5BuU3@3s|-TkR?4b-0x*7zx7Jv6IE4 z>$Ay)kNV=Xopz+AJnTyjbpYIGPK*Q=JlHV>nedW7rh>^yfp`oMA8NHP*yZQOZ~(&G z*fA8D@X&BmCgh+;eg3{qt5RL9_J20{IWg>jFc;7|1730rxbhBgWm}+i6VQ51ha1g? zh`^E)XbprTfN(Dm)&s&-KzIoVTVVom4xo8D{Fl%VhVr3Lu)+43kun}B=^jPxzV>fmlwRX^RfSBA|0hcsH_=hX@+jDZj(nP@0+3a29Y`r>x zCV{=B@|mF}3k1QrM$}r5LyHTlM#>&`cV<^Rw-+Zh!!R|`F zML^KU=TX?FkualN9KZ=lrH*Zv-6;}hCqU$cfMa5Lw>x@NY&We3^e*IdYcUXI=|&LC(6H|elFCsF_u4+5cDNGIu8Adi3-63``CTDr3Ia;`%)KAJb7sf}s*Eim$45FicRi=%%U z>PvDy*;byD(Ui4<0Unkb&?KQ$(XAVHPa0uXnMZBK`bjI`iKR>}#vKJ$+}~Ic(z}Y;a90D8@5Iyb*bt>7bqW9{rY9i)T6}7G=%T&| zCn!WdmEs^2h~GmfKnpBo5`+wIjJefG);cZ1qJ^DDU1aKZ`r=TGcASOx4-YIT(k|ck z6J$`8X^{)VVOCEZMhhN+M69X^{wG=XEU)EwY4hnmCc~DR@V5}TW<1WL+;?A=WY^yg z+XtIZIe7a@iy8nu>TX-C3d#V`KT3-%%#w80=;(22SK=4GQr!Ach}8GI;c7BMEUMxW z*dHK=Kfj5hjmvsZD~^MtiyL?qn>lT_UD_{JpU&eh>6{6wTrB#O<17y2)8uy*S}~sd zxkUIRn;he;DE25eFizlZYwNUZwmF{&ey=@`A#rXAC_n=Un~Nv#Iq1K9xy&ik+G3Nj zS?CV1!YZQ+ac6dvFpx}qLr$4r@cY8;(M5p{+7>-X*2M9~cRUNZ`T>2C_4D(3@0rrt ztumSpAvDRrZ&Y4YafB$nA+$U&pgNwQLDsTI~3U`8s+W_7Xf;8GAU7)SUvAOS&A#WE54M)J)M^~gSd z;ODUr4$I-$_%G*}?!5($rF7LELMO5V2nqi!wqrwpHkz6VtLvgw-Xe!MEwo}oI%!B! zZ&X~lOYqW4hNM8)+%Px+y%H1CIvAo(Qr0=_R9Lt+h5sr=sd`1F&|lr}x@>e%vq2B(c4~-HvPpV{4KD8(eHA<)^i`aYBAQN6=LpxILC_XCpwu^X6d`IlP-CGU-qYs18Hs)&ziAxU(w^G37-_OmFu7%7b=bvu$}xc z9tjVYL-E77;QHh1d9z(MgfNKjQ6V0$js*ROIcnG^96jzQqaZT+qWQe( zYol^B4!ChU^vR6`KMrEQG0_iHL}xrp0ocC}qGzAq{c7L|b2jsc?| zMv6fA%sZRqMn^5hkYAo(s*jkKzk;_xSU_A#KOy&%bQ=FTQ!qif|6|HPUjjU^A;N!6 zp8zT25jv6xAy0Q04-lsbr$~X=;c2=(+iRa2aF2A1X+oW44w}ohF%Cl3 zo2u#IEG-<91s9&eSk#2X#Obvdgx5e-2rj1AAdy2R_jPJw>>q0{%tiMaWgzklom!HH z76kRNIKVIw&U&F5;Irt<;j=`tFA@0k;wi^sem$0vLy@_S^PwmxU}Npdtq1zM-=!jx ztFaO9GVqyZrdwx#CV%rf(Ti5zuX&{;%PGzLT(A@@s8Cbz#8|vNrC3E$KMQDnxek;r z54K4$5u`5@Z$rG9ABx7*PJ|L@E!4z;1Mpql001|S zhvl4QM~|DctL66br`W5Us;eBqQ(OAK_bF~EDa*03If5OXz8y)yFF+diI9$CY;LBJ| zM_><(XS5}`xI09u6(oUq#Ao~YxymMU-_c>)3YC?YCpedf&5*dUWG&N&&Zh}6lOh5@$ke<* zyXahwe1r9-s4&eoZN`FqoKyFp#5 z$w1KqAVIYU64YiOb6y8BXB!|4_YwX zzyG-pxS9V6xWE8ze*g58ZMNQqyMRD@1aZ-!cP_I%>rhcU{iXF_@xQhLT>rUS5&utn z7gk{5GoT?bxOUuD2k3Wwqq~PBxFHP(i=toaX$KQd7uP0_Bq79r1Z%G$B>8wFa!kOG z7XVrJaFG)VAZb;lh_wPZ@FwHjqmW@;7*7Hr?*im~08%u}?QR=k)Yr z;h$jAx5ww}p|{cU(_Fs?sc$TVC9qrMwLwK!cZUbGfHTOfE(2dL$sP?_a zEI7%1b@m|0ck;2b8tl&|eYf`-(W>+P29@_K(QqmOT@03F2aT{=e#fxw^K|;K9XkFvcv(9VsGbgW_f+;10-~ZCQ+J%(X#oMK z3RD2gbpV*Y27Gd1X#d(tZAMAR@No^lA%d+T9uYW;b@1@_DAFBJT3j{(6eH8WpobiL zJ~wl_X@Q`o(*&~2S42kWU3@8cTJSn=_A|7H0J5fR)zey3ZndFWba#kOBXViA(aV~;ADsPb zAvk}U=kZ7liZl~fDBT+gL=m)kLU00|tOtpJOQvd~Qu}7qf)mi0*HYK?969Oe=mGQy z^qQ=)r~@|jn)?-mzUHtJO=fLRSBAKVg}mLpZg#~3s%`Cv)(%YgbPUp?d@}UZe|nK; zi1Hs0yrp#4jFXT4%0^IleHk@+D@1(lFK=Ie5+WjAbK&do^jJi)i^(BcTOP6deBTQb z+Wc_s;P#HyB(Nj8%%@E}+r55u2LRq~E)N_B^ghlqjeYe9zynn}0&71{sl1i>cnqQW+4~2{u!WL(wrMDz4dV=noyvcGB94z{U8nzS*^|GA`UYCQa=qGQ zQ9d0P&We97)eAhFd%Qftc%yY6Ev_qX*Y94?Tx(uDVmwzkdx3fD0a^thLkdnztW{p< z19&1bt+r7u^vdBRWYV-C%71!0miUWP+qQ8q=jWW0)!T%U#gVPVn=zS!s|y|b)82_O zl^)`{Nssu`vIXhpsG1)09va$gM?~qVR`3RvMaB|-s}WfU$4r~mlX6YMO+Y&GLPZcS z9^_Sm;Z6JrLFXGOW0}{H3tBe7Em%fJb}Uhk9S*rX@+_eSzUOvnc!j1zwil>{7{zDo zJy`1R5bRvan!oW{#<~aA+NyyY*TelB*%_I;t_Q@PEAEYV*ek=^KaB!ipvcg zFF+iOLjScvn$v=9l2fipVLgkGVI;=16>`6G|8}b!^1PNAiXziA{Up$g`B>`6o7W9i ziw<6^+H9K1bXpH`1n&EHYeQXn24pb4YlhgB9vAR4vN}cuy?4*o%iZ%2Zv!Lu-M|+x zboblG`}gYktuwc)Lw_H~*VpsFcdK?+5&-ln#6&gYCcjs(ehphEI(H9wmrh6e%lrMs zs?7Cn?47zopqUwVy#gDBkO;gDPp=@!Ky9C~s|RGIl&_bO@b-wp)8fd0V=Z{i*~rn# zEAyKZ6#j|+L#Kx3L;qWJ$0d>|3?zuKp$8I#?+gq8G4 zF;}>U$WgCGD%ad7m;i$Luc1q#2}{03bQxJ-q~BFrhC?@jmWw|>H1|p}G7JO`{unK+ z?P@+$uZ>4W;msc4=Mr~*JVw(3$xf;MAYt^|pbNN#o;mpt`eX#A@&F=AjSv6Nzs9!-u~ zz&CV{E5nOdv^c(97XN6>VP9O02}trzBHBhJgusv&Q{ok1tlihNgqkL&iv{>k;E=Up zt)gC|vR|bijC&Uhu*XcMewlyA8pS@QYU zqG(;99JHGt@~xPIjtDU|?)@n3-sQtuM-^{D4I3Dx@uIB|wKizIce>2J?i=|79&}1o_O}iqp^sVPf zJ6=+`3zRaCb;2txjw2R3HQ=oge(uLx6Z)asB}X(_>8;6dMK(0QGe18ISlpi+0)<k{5Ath*JtBvEp)n#1F@%0JSRR~g!g!4^ zf>^x~_f~iKP_GHIdv=nSupWXCr`+3*Hp5#&5IRjqNWVed}UdCnPfRjS}{tWQEeW*|i04rqP^| zW9T^C2&#OUfRYi%#I>+ncUg{^%3ugkDiT7iXTn-v)@k2@r0Y8;kc|dyU;ty?QiXc$ zzPN>w%oRr;A|CR(=lh$A%?vpAH6nU5aXN=(QWQAkR3D`v%s#NS%Ig$=H!ic_Y^XM< zn-}(clMR}^koht@t2Z?2cD|ZvUBohP^m^Qn;Waww-k$zT)cL5PK2; z(<&Iq>cz)XH){cb&RLT|Y7l3urh_w{f#ZFmJx*GUPH%osAY7s@p=CC|km_chk%J-e zs_OzGW2L)~VEv8=tF7UgNo>n46TNh5e2>as!3h~F#En`bBA+=qF=zO~V%>X1;xT!T zQbe;*II=Ac+gRiprYOWKP($)uY6YTBIbsFBbPM}vr=99^xdLQ910n4lsq)+S%=zTq0cfaAQTrTUHkyPY7sd0|SFq6I_G%ifE zK8weGg(~lEa1P14wq%_t=CpNYR64q>hl`R=9Dg;g0m2_%-rZxh4`|l~ z<&+)t)XVkiQ@>Tzqpt9_&QSMSGbIr^pOh!iCt^NLCG;I< zp|&tZ(j%KFu}O7*kgg26lK8w4jSel0GGf};b=0rr=i~Y$9C{}UG(=N+Y0Ts1)bk7< zSyJ#}wa+eTxEsMzM-S1}h{I$)hNzdBydb!}%NrF4aSG7G)>z?)(kH5s5@= z^oin>6B3be*PxJv88*)K12g9;m@(`7Z7h1SG;1JGuILSVVAL0_4GP zg2XX6BOI-Th~Ags>(QY_h^0hnsG?QUeWpQx#UJ=wrt%s3N$p^m@P(5#bzuhewJ{A0 z73>aSx!IgR?hBfYt}SRt5JFXq$a44t-;n-C#*mW&zTr9luvk>qQEFK29YG1iBR_Q0 zQ1+2VNib=AN^np#<}@G|kGj77I@ENZNyPE@yq*-xx=2(B2d)LU*sUg%zj3a_50ySZ z6RN1&N}hAnd`NZETnG*uJXH*@*&2#bbXYB_k%@=x_hc$tAwh|X_mj|zupKl`NrY+I zUQTCYVrqk=qwf((bCYJu1>h{-%kpM1r~yeZxUkBIf|3U%L$w4ZMaTOw`q#bRrRoztmNN^6SSF6-04 z5v@~(OA&2zfR`aN#_R|eTrG@5TWHEGFJBTDnT!{^BxdIuz4G+xo*r$U9N#OT1xD@C zp%8PH^|i_lpW$5PPy)VPwRN>J*0IS$hFI%R&z#`zym&*dLqWQon)fAZ^B;$niOD&S zq}FiWY(-SW@EH>|XnF%h3lDeEB4-9-tNMzGN#clfzq`2uo4~!@4DX4y+lF#gSFi1C+>DEQ#oS*`3&lL|^xF+b z_CJMrc6hYJW~ldl?Os2+1KwUP_ijFKIOW%ohkpUSt~V}HTnRxDlkjgbg`O_1P_Oz4 zrFQ40qr0R)Y`=~m1_r^tH7RE08gx%C!7~d4Z4 znK6!^hR z@E3b#(l4f2g|8Iu@^1OOX}Fri<9fJriq{GVzF@)XUf`pMe;(2P^9X@2T(G=fKCc_g z5CED@bXf8qHRky*SA_2aP6P^uUgm+A%l2_Uai>#9FT6OoTbzoX@=E~V1ZjjdLTSAYQ?;967P^eaOY0JfENAwDfoPF0_vdlS)C#& zDI>h(o28DHkxI9k&o670DvJ^YTJ&WAySuwAHy)$ItA0VS1}4oT2oGma;>x{7{lXkh z<&aO)Wt*F4L`i93K6V0^dpbK%k*u}Y;;#;?5KmXHI8{wP5)-B_>Bi#Y`u`K1!M2a?KzlPIg6+nzC=o4kJ7W_EerSeOsa`4jKaom3M1*|g7 zW1?~b@9dJ}+w3s&KRxM8REqPpV>vUFdChr6xhHQmMlbl{9^L+MUG=P&j@TravB>OA z9Kx)VJy%JlcJAMt)7F=`c`0)5`k{1G|7DHMzoO>yNmvK4zc=~)-p~}UQ7p}9*=S6z znjuyT0j0ERCsPm4I#(JUC+Ya9uFg4XgoO{?hqqZ~f6Qd)1f|m^q<1l}8i=^yPPWjn zVyFYf-#uLy>ENf^#kC@fp{9S7VCE(~7qisgliwnVHbMm=x|Hd*Qa~t-G3fX=i-@M& zWR6Q{P9Escp``6NslUW)4FefK%(e#*7eFxYrqwQNQqzX_L(^?K-8@Go^qDRn@KQ5G zZNa(2H&DbiF_ z87&2^nqqN*FdHnEogb+po}pRdw7azV?!)&dqxl$6C)40zOC1<)p8jehgG@Db1fkL} zz93u3CyPJqCUVKFP$rRYDMQ+_h7?5P4kwZGr`ftXSM~1s^^X_DJ{M1@!5r$6Ho9Ry zv@GE<1g!lsP6MVEc*c@66{bLA{{s8S-7as&C37Rpyr73!3JJ)G(Lj4vnTS{p7ZJH2 z)Pfm60ZNaPjw!t(cM8M#DTHG_(F1{tw)QTW!ebEHywbEA-RHEb;&*31fpwd8Lv4MW zm24A@%_8ct=34xjXpaE7Op3<>3fdDyO@7<5@;u|~6&EC{meL1J&YNc>?!&eTC0NEj zZ-NJ7pD%aB*L*SNdW)Z^UC!fz!CdJ#VF+Z#1j$v>hSLkNvJnOmog+G?b$Z~{oFJKL zSUud#ldz741J>Q$4`=f}!jhV{#;BAJ7&K9yILGGh% z3kl&JX8$fxPwGOejy2p=K9CLX4w)IL%eQ+i*gZA0QO|BIrQE{8s}U3a952lI@_lu@ znS_B319fNbR)Kh#F{z?i5IV8?ll%YAmlT6Jc2xX+%#d^tV~`?!L4lg zW@^7*dVmYSFmnE?ceI2trtI+n6?30~mn1N3vQEV=Q!dLWQ$> z3G)wVH#tUMx<@T%Hz4*WV6_e+3DxS=juQ<%K-tGxlz?$WXhbckh`s<`*zL|@Cp5P* zgp%Cec0{;)X;-ensWTCu4J@8XQrn&j`g3d)2d|p_0Z(SCmtQA%V$jfv7v-w35hS5E zBq$o+^?-IP0bEgG#k;g2^FXyD^9f& zy!nkd6N8m-g(sEu`;6SQNW#bNRJOz!ore=F`6^GC0lvwKK1#$aZiEis##~#tPuqFu zplN6oa6aXJl(!*&Y?Zww6T*)Bo5mf6!e4|n_2uV@L+YBTF_CS6{qaWq4GABQ>4O9> zM4gP3oJD_*O3zo-+s36E|w&Os$E1aSZ*HP^Z_^**}qO zB7kNILf!Oy7rVYT;}Z^PMc;(%A58?(p3X}0!%Gsp^R;h9vvai`b3Gn1b8;4jDT&S( z>>T*ouKBI?wI;S&2{8hcl}Ry`Kls)IxRH!g#1bxLIocEZl1`;Ut0J{rh3#p!vk*5@ zP^!M@1=8%}%}##8syikpi+2_qJqi0183F3!?0H>{65=~OJu3?s)|ET3N==PK4`-x) zrSS(zyp9>0;GNX>C|ML$%N~le`ItE3H_WM1c1`^|x;4zJn`$S?rc#{LmI`*VUR`bp z{a#;pY+a`WUEix|4^f~HRQmO~_846G>(fu;Ie>KFU@-KpSxAp~>*L`FQ>f$R!_(=7D6Q&>Sa9v>FZh;@o}SPq;Pv|P_2vfus*AX)`{U-Y{cZZ7 z@!LYB@h&bledPz;ZRd+03HNGjBCsAidibx%Y|I?llHG8J;)i#tzeENGTC~zF>J#Qv zJ5A;?oQ{MI>a4dtV2jyN{A$Gj-un2PkW+=ew$iN2Kjid@Ehgk{&VHuklIa&Pk_i_O zp%K7204Sb7aRiDbPz-^h1r#Nq`~d2R0B2sHuwKAG(_V~7kO5~r;EV>G;VuS3z<}86 zIgI2jP)>oe3zRjW%$-}pNR9!2^qoV5wgKllpp*e64=CwCNdQU&Py&FsCvbK=hxt-i zNLBgEtgwLN{UB7v@})k>h34D>5xu{n{Q9#-!jt|FxG>g?KN{!QU(Te5u{F9Zg8OtK0VRgLpT-AO5ypB<{@qZ zeFWm#iNVrLg(&BSd~sbq(-T4#%IbOGqml3u$z=Tb?8ODgUCY|`x4Yqh-(b+yw?4EbHGsp90-;Khi{f1JD zX8+_ani@wgnCjylSrat%47x4YFAcf@795?T=;-*Wih`$F`B_KG?MD+pSJuiT5f@0etgYhF6)YfSO2CV z^U#93AR}N41+5)t)?tP6RPnr15$OUy_FJXn!#U2ZS+^rv~r2<;$19udB5 z?wkS>k3oBpnmv81RV3d-n2x_uvaYaW)D1(wjx83=xQ+jBBsZ{cV-7O=L_EJ#lj6@g~@?=(uJ+ocil3;2B zt`T)gm+Ap+YBG?wO)8Et8Vb)lZYoJ4@-SJ`e8SuoH&Lap^^IiF{&ERmE+L~>Fei2f zKbJ%!X{W@U=yFMtmGtBO`{}tclU$ryZh$LxffwZxvo7BvYLTYYH7~?TAH`0Sno|*$ ztyRSjhQCYtxh0|Ncy75wwpM>rJzMlNS)=W>jnwdVnuZD!L)P)kND-SGS<_5gDlsS7 zy|~?Se&;kdp1rjfJG&$Srk0tJ9#P&Jth|bD;=Estk?Z!SyZhQVZuSA66p!gXuLY(* z1tebY%0u7Wg!HoKx}`; zRaTI8a?5a=o>iC~jXLn|S1oGSOZJu9m0LiCcA$bSP+@Wjs89)1(4uocYrwkRGzTh7 z0~LU&0Re7|R)e;3Kn;%y%=ShNI`^X*tn*EMphmY=Z(w-7uEW)!S`GE0x%%I?Cg3}4 zfbUoXF4DlT-D#%Xt3BQn&>Uj}X@|HDxB1!#RImanECCfNfC}nBh4Q9=?r7yVPcF5( z&*5lH`g6LC)DO2A?8k<7LV=C7TC;lt(`H|5xhsU#^i7^Rj*q_yACUdV8$JJQY?%Li z)MKUeu)@2;n+d7lt)Wo;@>%i_B67#gvq}IU zbQYSA|80%H5Q76antxLmQtIH~=>g*rgq;7zWch*-YTsgp(62GKi%8X*WH96@O+Q)O_j{jxO~w+PD#B_T^D8 z_sMA5ifb6W$CWa}``+UtFdO0VkCi}8vxfARM;To+)|Z?8KbpQNFwSUeJJ!UuZQC{) zH%{8vX^c0vokoq*#RuUi)N^`$2#NvedTOMx`T&HNCthM65{cTs*KxB z`)AN0?SkpDIgk*tgYf-VkO%O`!NP=0!WOEbN#kM2@67ZI98k>`%N!Q<3n>a zFa3Z0f*E*?)pD#+D^NewOW~R;2u;zZzs3;eeH>r~emo&NQ!`so!gX&Mk2kZ|-%={A zB`haSm_>9YPS(vgZ+X`*;}?D99nc%MH@b1;9az$~_<`!|XDJoyA1f6*J06a2RpGEm zsXZ4i{;A3@(bT4y&)($w8FU)0{fqdgPzN$+a`TrZ5Y_7N27tdTde1N;Gl@h)?QdtZ z1tRzy%&!*9>?GegR(jxvZh^}3D+Ip+$=r0izI_?pLO<uXxEf1e5g3FnK%?4WY%W7zoP#VP-;Lw=2U8tEw7~(nV^_cOy7t}ykqWyyUV>7 z34<&1Pmr}J@gFT%p6T|UmIf)zI86PnQkc=Uj;nOymH@zlg^n7jjxzsA8DDU%1f4-} z7wBj-u{i9fC07)#w0o)1q6&*Ixhw6FR7SBUokN>~568C4=u87<-cROrK85zL(aOo+ zMzPOB<;a!zO7p<Wis?lH7WaEjF44p7{pr$TE zg7kC+{bk7tnU!^NW3%V!{aM{OeYBy>bMJcR`KZ9}>V4;7v-)x8j%_h}v?cPJ|HGw( zJJQK(_UO$?#7n}(rlFXyEnb7a=iAfb;^rCvFtW|FlPlk%A#v-i9N_G91)$L}{s_MU z)^F_rM;~qBtS)A7lw01x=GHxeXQ_w}W_mPEF7+C3Zr+_CU2g6zF%uuyLM9tNq8-ey zTHfy~umvj@8o}y>WnunQdsJd3UNlr#Fzf?{+raQ=FkA_S=fSWoDL~A~10Nsu9X>)3 zjA!llB`Mx4sTX@Y7f%cGrdpE{GjK=5!GhuEu@EV5@Nz-$@*ME;aqx0WQes9f@a9?2 z!|h;L9}F{s;Z!jE7Yu&^!<^vF!LSb)7TE6tXFU!%_>~OZy1ysb#-8O5o1jo1aw9&c z5x+oJhpb@#r;mXn&68fSTe>(wU%*pM%{#W^f zv{OI}I4d1A=X3bqV;v{hE#dz(S|ISZNp0 z1OjDN4H280WrMq_2*x<;dSPmsMfy5i4#b&o*IBlrwcXHMNg|m=e*{}wsS?5CCsBOH zO)4@qqd$~Rg*~>d)Gv^fYLHg1bE(DWW{#0II@K?c=x`N?6p4#nJkI zQAHmgE3k1U$0)Gle{d2YWH`~o(pad&Ev&RSqfK@fm#02iT9a--{Z?UpJ|7-l000;g z{f3m$6Q^}$M1+ee%Tvy;;xKVPp$Ulyv39mXha}}FgNMF@cO(VB?#CoJJ6O?v80;6m z`R-d9hK@-P5Bo@BE2aFoDjSy=c;w*3OW<2&%~AtGq5|Oh%FMQ z=IL2>GkcFYUf4P}x%!l00`voMnW6Cx^r^V**JlxYP61*f-q&K*M~$^iGTdw{pZCvI zeYM;CiQIp>zF;0VjEQ97-&966tHi!&OP>_CHpw*N4>HpiMyTJKV~i^oYCEoGPn~Js zeh=-gDlAK?=Hvsb>ZPKs&qIIeOP?5HUxZWo2n?n&7M5We(`YxMMK1y>7!J9Y8H}HC ze`d5rq@+C%-NYfYg;Tbp{i>Gopj%|*+UNDY`yC^s!l0QwQ@KGD^(6SqP0_r2A%o;5 zZFG&pq-sROy!)Qyi;52Vrj{QVTB#bS5xLvf@w=E#NuaduW z@_;TbW73LP_&g2u(}C3msqu%Ow>{hH)AH<#M}W)I<5G9!&Y&1zav7lu7^@zT)fJAe z4nJ_XFpC0$Vm+O}w_hl7K17ZD$UPe|Q1>G8dMT{9SurP_i}o8J`Sw^n735d3E8NP?VJ zim5JDGQPod+a!aFME+AG^PeJla1q>pipc&`R7Ayo-X6!;z_DD(IZ9izfz2GW)`nn7 z1>AnaSPQ$XDur7Z=k`p}KcJ0GqFkb@(*DX@WMnU>T_940kS@{X6(A_+UW54{W4MOo zcQ6PY9U+I;W1#jcdsCdD?GssJ5 z*B618bp=IJqbl=ntG{9lF2uy)t$>8LQ;Ofrbk$m?Y{xVLRKw|6qMaMv2`}uGl%-pC zrfs?Dy!F0beb%wAm$~G$o>>dj5T(45-QZOmF9J~hcEj(mebPI||LK1?8JG)*I4vo% zAR0u(!<>o_2*Z2I&;LXId+<9_1G&RvB8DJp4j?L9bMBSNzQJFvVZ8sZWcwE+PRn;) z5Dp@ueq-^mn1-Gu(f`^iSOE4P`qh>x$Pf+_Mi+F-z_z_qf+50lO!jE00#3pO_uh;j z|H;Vpv;u9yB2M{heLx(cVjTQ$Iq!d$XGA!F_#lrmdK^GFkSrPV4j?Mv_1{4Y?X|Kg zW|G%UNm;*m=G<%)LNWJ-@Pp_RUQh1k1lxtGm1I}|Va|jW<}=wujaXg}-O|}ljQ6LG zQQsw`TqJSK@T=;J&CRvfgWa>EgQp9+jGGiTI*eM>u5yc#8FB@4r#gYBTY+0w{+D%7 z2!4DX^Zrl@BWh}_S=T*quJ-PWc|WM8$%X`76`Ll8`?EjM7L_MiQdR?TqCm%gOv;*{S1-zgzEe}qdipE ztj0WBIuf&Q;x(N;_z5;ju~Q!#R+d2rm1Z2*;b}hl>#KeCF6CXzyvKr2n3XD~%6F1W z&CwvI>cx3YsS}UEUXgNz$S<^R>?udFW;q4sG&b}vM!d-7=`i}*B-1ldQ*HBklN-y`KfD)LDhWRzbH1-P>tRta-_h7+;zO!tN%ZV%Hj_ zl~7P3_^nObWf02oArHmfk&=c{DA5|DVXf1Wbq+i)L<3rZ&b&=Eud*0^g>vZ4KEK~^ zfoVJtejw>O!he3XC2T*DW4?wt>Nt|wbo?RoxMVf(!uZFH1MNf*N9+?IAPLo7n`fOZvS1Zi1>rpLROOG{eb+(ri=IT$ zDlD*WU{|LEV8KZpe9Pa^HZjB&IEJ&+$+hThPg)_)n559NN4fVndyPdd1To7e#uTOS zdF>m&65vHr)dquzxx!;Nm3-S`T zK{a0Qt(ZNroA}Xh7|z#msYx7gxpx`Db$~x2kawyFFd|_F-pc4$B;mxI7HYejmGZYk zUiUU~^kCVcn=c~rB*ElAKiYix?ta0@xr)g^M)g-%V&U=Ez4SCH%n+p9dRcf>nk z6ffh%U^3vLKxXE8979B^grwS)&TVTlsQN; zK#F0PJ{Wnr+L^}Q4=Qj6D}R#yqpC_Df~EUw_If*iNbVLAoGxz0unR~8(kcVi6{H85 zn_=tVv5QoR zA?Bj`gJT$Wc<0s>C$?MlGVI+zl#nUrT z%Jn%2-dh=B|I^ApcfzY@NO=3osmSd1aK}m30^azBvW7*j{|5?w8%1o_1s_W%?KE$ctWs{^za49 zC8r=U%(LmqqcQj6=M&Mmn zXJF{}{Q9(;0o)wTU-$p}BJjjZF~Z{^f58~3j{mIsNtv~#Hsx0n8mepnvB2s?y|eXJ zQQ)&}ju2jo80}K;a6dajsqfAuN3=PX9IFtz$6|%&v~z@z|zx9@%L^#eYY<1b2mZbFRMa{?GA=&pdjR^OI$ZWN6)o^=aD&s8Yo-0;C zR*IJ(TveX?yT;aHp^bNK$a0+Q_KFZi7v2fd!(t~ksu3QST2WBDq7I$BphszCpHXHe3QPb%|$x9%3(M@PUe%6 zhX=eHBYp<@Z#Hk0`Jj1rGDU~JVl0;7Z4x~)WMs+rjPivQ#p3~DvroLEvoPoB*vI{Z zD2;}nLqlE@an$N-@O@v!d?ctallsR9EmuY?XC~tNN}``DoW+lHiMLw%gM~S>>L2H| zHtu**FB~i@J~kNt&Ii~w4xRE+OvC`BT*k;S}S^kW8(2?l<_riJ5bFR%V{5alwr&f;3EHyj`8tXn4lQgkM`{yLVUV zY0<%7_crom5TmU>f|>NM}L6h7X6oj(we3!Z`=%_A|G)l;=Ch2KOZhWUA8))$VIpRD$#5rI+a? zs53davfV6E+S98S8I3(rup| zAbMqw(Z_%|={T-={R^1mL)|DPE17Li~O8Y1GU;jbP@CRGT||3Xk;)dXZdJT??BSZ)>rVg%6=7*ajvy}Ihs;q_;x$Ef#~OakZ5xcEMA3iTq>D;Az9J~%R4v*VB5 zWCxAOJy3~0d)@cnp1w*k$}%Vwu@kD`6=gQCtH`=wbC%3ZbCbOhc79y#c=+6HUQy2p z%P)BqQjz*~w?4UEA=iey8O9NDgOq*c?^5^*XG0(ranCH{?D_^^S7r7 zT#$=5Nr%<5h%uA`-`OSu-f|OMmtJfJvO=rqhTDi4Sh9357xoU%PsOZql(+mfF_*by zE;A8PJOf!36q}V(HGk&^Q~mO!)?(h9wx)zpY8t{aAq>$m-V|jtoCma@gmEQd>`nAO z-lH;bgK3;mHpt%C9^}e4)n;g)>K;tKFYj+`5W$WL@}cVxl=j^gSTl2=>YUWc2S3;S zQ36U@fL$z}K@(`9VwprQLGfBaZQDHaV5FIzjW3GN}6|7LiIyDH-$aXJW@FUciq zZ-@{&{FFXNTcAB^zzx7`V+74jVeOZCaSwEeGo|~|RoE+33{{eiuk2qTs`dyk9O-WM zMtQlMzfJ!AkSjBEIXxq@J%|&?GS;dJN^IV$sv^B`wjosst0;r-vHgqy8P52Cse|vP z_X*+GcZ4srhIP!pDuw$xOwN*S&?uE<5o={fw0i;z7s&^%{CI%Lm_qIv0ZI9xuqF3_ zxjl)okWGFxrH=R+Q)68R9j(mmIyKy-%nc(z`cpHc`8=*${)0F)PPru=W+uQpN#EGl zKYB{=WJz81!|hBn4pdpR@5^8F>42A<_lK;29$fB-OJ^D99EK0`*(#Y5?(m4v7;V7B z)*6()r(ubvX&fMY0)s=<9ne~A=|XsK&Q7jWtSoDkL+<{$0cLUeR*{-on*$Ih`Xj+1 zh!ES#hg1CZgc1MG*3HV!*nofqWpe1C@W$O=VJ0OenF`Z;;bP~3WO=Wz*PXVs3$V_! zf%{XGO{d&I1OjZ@?m$Q7LLVbjq&nNB8_~C=0H1P<^)$eZU&ELFVA2Lnf$`ASmoBhC zomsI{RP5s`&HH#amZ0S!CL*%%M#bI5`)8@9h0&g6XFp8qyuz4*!G->8if|idIH!$h zld2dw&^0szx)f@t%Vf&sc!aU!-?4@fR!KY`rKRu<0^Hzaqa#`Ruk78D_gHwpS2Ler zP6H@P6Vj&-3t^{@BttglBLe(5W-xEf5BHe|*|``*%~afyD2!!=P+>{XCAwOh)D)M4=S=v{K_4?Kx9$rBo(b438Sb zVEop!Qr~5G)PF^pfATyR0>%~&z?|E2!VPa|-r#07(}Jn*4Abzx*j1ZF6wNtT3B!!J zaf2M>y7wU5$(o8CihRJCyQWGvUS&LJu!aCRrjL45sKZ-$IlKP+R}L~)?c(jG1%}xLDJY6K?L{$-E-8sXO~DOFv%DEY zIKfp-Zu6iWo@He{7^dhV2aIGI!)|s;fjP>xEDW>kDeg_&vwqxpxbHt=vlg80AxePu zcg>p0;~J{(kp+k@UGO&f8+l$znPa1X$OR_)T9yY|>*(`)-iE7?8V21)OCapbJNILx z51;c~zc3|nZ2Iu-H^<3GJL4kwNKKW#tnyUsLS2w?tX zo69~6sVkZ|IY+dv@iuOI;*IP0iI>hj*6uE`3bARq-sql-M)4j4!61}aPWW9PoNON! zds3S~i=HSX1zDhfI*1wJi6+d{j+FlnFd8z^7B4B?->KJ^u}gSBH2l@Io2>@UoCs^a zc3PUzdseK`kl*(HSYftuR1Rv2YkPZj^^O4{7j{6rVkEYeiJ?F^AWrVhBP1p8P+ zL>))a`)bOVzkXqGZ_i~eaA=Q0u;z!+n^@igExtp1gNkqLuf{Qhr*f#{zL)#8_(n)4 z)q}g#^2GU~!_24jLgVuL@UJmIQPN;g@)kwNcU1)~6=oR9gfb3&j$n&RISI`NfTY55d} zuC%Ye5N4SFmhkx*o2(gbZJgI=d0e26HP5kRE;qnfdSv&Gv5I8s#|Jk9zNY)#XulVY zspETVr1Uv8&Xs;6c=DSa*>AdyKzB&c0}(_EiI)J=uQN3Wr0}Dzr}L^L6gcON>?KFF-!}yx zR!jQ&CDR-qlf54%<^8}Qc_h0zrmRg_pu=x#3<%s%A7Km)WN4R6>KDZ~=;VOF{|*ZO zqfG~gFg>O<#G}=-dOB5Zv+=uV!met=;cOXHHZRvF zAm&=(OOho7|n!H_7cW`0(>+5`EbngTLAsAshHR5Jy=z@~ffcqEj2yPOL^)xBSap-)W^z z0d_Sq?9|@z{VAE%#v_6PzhH2*;TJ?g>S(pgU#myZ^cnJHLg(&EU(y$(?YZCMh>bjJ z$JK~)XC*gr??{q1t3LeQfIGI=2ND&(r7L4&vKky_$N|ixlgjd$WVnmjdaEe#d=3h} z?b2UYLE(7D%Gf$p2B{clJ%0Z<+)^=jznDb%U7?+uMNdS1M&AI{Qc$hq79;j;ilLdi zhi=_~pR>k~ek6H;_w`Ivq;Uvy<1c3UT)exF+uOs5ZjUirt|___fLiZ>s%;C?x5cOC zBW6Ey`p~Srx}L!O)bA+W^1?mqp?>^aZD71|l;GeAF&F@o*KM~p`V7k-hA%KEgWf(8 zBd)YJl&ALD`1bMd!{jTuK20qTk_%G~l?G;JriefI%&W-f&u1leFJRJ|ccJEBdM^H$ zce8(lg7M|%+&Q!WD9eFbN6CRaXV%)V0jgVUOgy;7b$^cshgVH}7j$|`!87>Yw1|d_ z3%Qy2lu0uc>4^UmrN&C7=|ZS=H;icwb2QpsB_ke&s2^GN)g^U70K?tHLAeuh-TtVC z0}68iAwb9rl_n+(8f%TSqV0w2OVwD>Rq^v_N(Gn9CP^4o_I0?h=e! zNIn}<|Mqq*rs*z{`zMYy2#wKRNA?;1mw}~%(C~A3Ee8SbeHA3FscJJ+p`E-2!mM8* z=>}eG8WEKAMuPAHfhZ!DIp&aG7`sLpjwZ`mUK_pM`N^l2`;=VK8GAv~ob5SujhWkA z%L(DP>;qU5AW3F?b2d>GW zpBzW?vDIU#b_Q=$^-jx+y>T0>Tl}{3EzFPy)crK-pp2HL8$YRck8ifL&$Yt;iTKqdIW=^jg^LmB0e!> zhTdkkmug<(z4JgjQ+;F6ZXY9p;Di6Bi$0H9oHhtrS9;`lNRcHh@8G!)-De*)Lz0@7 z?nh$g2r$67@Ki`?Iz)~i`>lQitQd>Fob|CM$1Y6#Z4~(jCFo_qxqae0F_{g9v}%V^ z#H|brFe6XXXvCY2*Tz{}e?^Fg4bvhYO3W0Qd>95E`O@b|N^K*v$qcE7%a3;KLp&+n z>Eg>l-Q)-JOn9gy9i?|S>RF_!W6_XjrEE*jgLoA~Yutr-6w^k-QXcCnLTiOdSt65q zB~?NLW!_+Q5@UuSI!#6y5q`s3CVjJby7PerIG;Z_u>MMMcc5=2Us`Th9ZS8VZgK1~ zzHP-A)+r;? z3N+*7S*_1dpf~W_bhO8h00k%-i>AGv7gw4XH$D>XDM^YPJ(n%{_6|nSRebt3z)oZV z7&ESemDH6+J)ccP!aD|}p;M@+l`n@<1vYf4ldAdf7rGH=my#V*b5y(NT4m$mIM~e? zS1OOtj&dQ(@GD}O&#L^OP{sy^(8G5jf0v$;|6IukTTi>TR~)_ z|EghE$e(h=q*C+iM=Z>{dj%4x;CnLp0(z^tH*bvzv=y zq5d0x$t#JSwc9>5sEqbww(vSJ`=#8TiXKF2IKGYKKA)~>cP(23cYu|*>l_+=)X;ClU{e8_s0pjW(K_PkMBlD-6~CRUCkx|Kh(dM z(4WkH!jTm*sks#qr_SlF3u7#{oko|Q( za%op&U`e%*+fgJFBYnk?OO00e(>_zllyI7+@sC!cR~Ns|`BsXoQjYY9X>)+`y=ewo zugigPV|d13g{%0W^~(qWSGKMUfYR*}*mxwucK*`eZR0+QtWsxFY-U$nB0}Z3^#seK zl1Qpe!iC3di|&@k?;lR#G?S6YOo*xim(3+*pUF+QCAw-;{^9MZ0tg&QKuhWCdwO^a z>7(X~^;vo`7zdYG0<1+O7j>hMw4I>U%FtA6WKo6VD)Dl!Dk z(PL$uVWTY)5t(goa#p$OQ9rUcl}PF}-oc`fx zX=QeW+w$|wq-cW7msW(dPAP1yhc8cq?sejLXeU@1{@NqA3a6s|j4&g~%Gk;VQGnSJ zP&puK7D4UlPYsyxyHj;GLx@t;rmHmL_9Kn&x$*&yiPT!MNK(s+`1Qp$n{s9>2l*MA zIUpOr^;R`5p}`?GLG0Zyh00k9mLMv0#&FqS2X*Pk(-F1P!+3%3!}2>a`>oZ3YsC>N z)V8`NMxPdX^Jel9@!7Q#jr8>#2J*%%YQ!o65U!IgnswACO=Wa zcfLol7YeCog3iUCwtD+2xAw`AAD^ySSUcGOSLT*;cqK|hjL3*v`4XZL3ggx=l;Coj z=t7^D=B>s)n#_OlXyiDKLOxD!+sgcEdLkrtgBlu}%v{a=ogn^l4maL=#^1Wd&P_s*v4XKs^3a8*%tVY$12 z@P|;=d%)5O#^=RVpG5W@Y_WBp0XF{A6_+XNF5*PIH19`@*@bVnfl1^ud^v1suDjGU z40@%gPR$v{8C%QZmdi30w4A4)R-gL@!9?B7Z?cy9z=(V??fPADd|Y zUXoc~)_rfa+Kd~#6-7QcN=p=w^!EmU=DGXO6p@nrNS&Avf?4h2y3dUm<{x2+wk+b-l>6ghl*oH3W&mAK|g)Y65D;hGI0jTCBw| z8-^7hP#k(L;D{;kl`)h6=YJO%K0EcD73DY$b1kc6yVif9+pdIr%#c; zBDKkmz%i}2=PCs0sk3&Loe|=h0{xy8lHE<%z1lDRgL-}FrIX+iuH0FcMC)`#SPTDP z0DoSFfo>C75BZ4WF}499-73{#gLW!1{dos@^bof0W0Z4o|zLWLm8?zZuR`8BJe zPkq-gUQKIxpy+i-4@5<;WKM6nrL^hUD<~4*oNm+K`g-5+#`)6Z#_x-7e4D;)6j(gbv*qH8D7(WFO zS2iclt9>zDgim_zas}?{X}p^_^HMf`S}hIuDG5hXJ_vhKc)$#aOVn-?U~H1(ueYrH zH6;9{aUwc9{mM^1f|K%#k^F^rbYYMpmI}95X#IV52Y-dVh(!YH;{D--oM&lAzj+lu z**g4D3Fsgx(A;`w_AkeNf%cT8bv8U9@yQ%6ky-Zg8YVuxiutTXfToVVo87Dk^}rZ_ ziZc$dC`||80x0NnB?RSIa)owMT3^DEsy(7|G(LTjEJD4x|0YmsKn(cOxm>e2&PTA9 z-ce`M=#!WnZ0%bp@Fz0yVitGDN&U3^qJb%iPgZQB8Ya{-{Dk306-&JJg>@~c$Hoe} z{L;h4Ea?vc^+w|_@`r^-d_4G^t-ry4dkfxUpya+mDFdGaCK%B%BF$1lGproa-17(B zN-?ODbNwpxal};$;5G#Ip@d|AH4Ge&`mOQ#+jdXLR?cQ< zEER*s2L!B-t+t7=Ow6YXMbivb?<-?0r``SXyc^y1%A(t}_{`d-R``keT~85_gNmVN z{*ksgbqBfD*s9tTTF@YDd2oX+UM0$Dnhtu%Zwm{D^8%}5BVHztNNjzy6;wdpA zlvEGU7WGGsR`@xW@8IRNf`{JMggo3`KEwYIw*Zu61I<|n$0hMk{bBy73e$8#6Jt{g z=Y#gg7QOLz^ZIQ4hEqE1XUsZ-rjbZlQomW9HNTM)eF41$KCS$;jUxX$CXG!I84A~h zQa#^9t$yxs0JANfZM~$&aiqzbgIyIBNh?uDKm7+FfLYI%Y&Pz8mV~$6ODR>#?C2oib(g3KY)Av$lla!vx0~7!o^yK;0Z`#Z7GK zr+9h&8sm0&M##ula08evJT(p*0XeQcac{+!CMEQ-4iHwVRUkq|--4O@73vBu`{T6F zrXtk`$1a;AOq>6pU6S{ICeTE)Y>=+Z;{rd#1v%w=Je|-x(wnmJ^3o!RN#ypZ@<|Es z7Mfks7qKei(z1+uuuIrBYDC(&+N?BG^-!u8*SP+C8s@8!$IbB6{#;^G(}@hw?6FSx zkq=!lGWiLWx(4K5CgFG zst`hs7q}fC4@Cvf(tr7(o{+b^sHpH;Uet26zsG)+z#WH%)~~b~X(UVZ5pDdLE)83) zwS)S$$deXkxc%rHIsambFTo3!_e(-{_VNqEGfZj)l24I^odv!JADJ#Rw|_oXqdjCb z4wT`jfRME}vh!mh7hk6*?X*KK0vizV*A8_y7>mF|Te)IP3tpD`WbMT=KIvP_wVDYZ z!?cm<^YvZ%Aw;1rDW`SlJoGxxm-oX~1;6Poy|&Tsr5#v8LKl#EI4YlUY%J>dCO&!t zdVColpiPU0ue=^Tua-P`>R&({;$=ruHmPq9Qz>!1HkQ3M!sOfi)%iY1i8-v8B_9~# zBi(&I1CvRnYS5g8(_GLL*kdHUo-g<3Sxi#Y>?Hc@xvTHIp67}PP#Gd+AbPAkd#G_r z&HD%)>qD*b4`}>y-v4#_46^`4oQxl3AQr&HX_X%ncql`6Mx%qaVr5WFeXI|B_8FuaIhqK7Pk+cS^&yfgo`KJ)dq z0yp0Bv-gO;uwa2{_ie7a_t-;IgM5zAL;lBi6Siu{QZBYF$AQuYahHdOr!uj9vLwJm zWIj&_0Ng<}dGXxr3aWnjjvuW7eEH$s9j)It*aET*S!na=pyu4^y2!@-+s%+{gZ8EW6QxS&nuDU|_sNIW z^F_9=`dNe~$>t>x6{++IG76X#+J>c1Slt7ET9_A3D9N}WEVF=AjgHnK zH7Z;LTrZYMv7vu3VET{iuWYNS)tDKLj5R0T%}ppgTG;g84fkr*dj!oHFT%@Fxy3n)^zfl?}R- z!|qrX6$A}`vZg=7FK9qLVgp9`F#WxL3KieY30rOAwU{aiUR(ayU@!V=svR}_9mdLN zAm^t!mjqZYlRPE298ex4$*wF4B5b4D-MdJx#JMm$I?)*jyoVX*L3)4g5Yq@F->_{d zY5OC+w@Dd0Q*Dg0iIZqb=mg2&v{7ga6GKbK@Pe7JRcMT}I^$0o$pJ`}*O%bPiY4BV zy})*6^}bD};tllAtH2F(<_Yv^<)DCis&_ zBV;?-lm3`&Nf1v8XMeJ@Ox=uc_Mu;C%{XqSxgY5q>i75hHo0 zT^p2Jbb-sn&SvWxgp}1|GBoee@b{BpR8fFGs~{yt_YyB783Vxrl$nLn>Mbj(7tlz-6@@?jWHpj);KgJ2t9W-FsHvJv|1?r zwL@pIO_QAXz1F+LJA~YWx4GQ3r(tzTe9BBp2!~a|FOtXXi9;!>9nXmUt6rPUMyXN; zIy%wH7c&!;i6tn5MFQkCfi{28rk3vs{^L02A19KLZ;ybu+DXa*|H)&v=== z*P(;uRPAW1Vz&hsl%N9VCQS6z=935~_dg?FvOx%vj}pU)wl2P`u%`UYob9?*Fk)qfBmspOn- z;o9qxSM#!eCdR+(0uw;byO+BVRC+HWJaTpax&{fO@{;C~PYRDbWu-`M-HtSLJW7(f zD;wkQ3}sK1&&Cv#an|?Hv>tK)>X$4LZN1p(0Rw=baLK$mmAgh+p9+Nn4NhV9gtA{g zf(ccqmNu9&cptm{uLSMwIbLTVBR1SWZ z0edMSA=wXD2acuuWaPgw{EG@ga}Xf^0hwhHV0FuFNsP$34J4he0@1{zldsR%rv2ehFA*oIGp#H3dnnbi?0z&@fQyTL%rL z!fQ}iwtra#@>nobNHI9ab~N{8{NbI<6U#Z!}2cL=fA<{uqSk3RHi z5aGiw`k(o0-3!{4#&3#O?QGMeTVD(uzB|_aFwy?lfgI*6*~R1@R)E#w5XOjq`@u;4 zFHGm)^@k6>vl{fZ;t>Krv4Y8uNnsQaF5|zIx4r%{&sJXF!SToUU+?f~%JLQ&+go6+ zusE330L9Ps-@kq7TZphNxV0d3cq}{&!CO6i4X*-4FWsLX5F3Qjo&T)|Pb$Df2<#TK z7LY6)=n`VPTIT~wMf^khe<?kZs! z8hVgmO)(dkk%7Sp#RbWoehJG6%f*3}Zx|@>#b(akn?uziJvcBnEj)B=h$SDT|M6=)GfTM6E%1 zLVnM3SXL5);9ZV#3Iq5Sa%!f(sNC>YNZ*Nb1j+^Z4}OgI=?6z~S)l+65b1=9=X#(L z!E|P=^CjHREabRIsXn2R@$`7H;*$2`a^dAMZb&PY2Kz>=lUFPQ?wm(l>uqrDxO+Ws9Mo2COsBzllFVUI;P~dhP z6<~fEzVM(NqsR6x#?k&*Jm*%}I?=&`GI=0e2-Dyr!Y!{|Rh)yLS3pnDX(dcBkN)h3 z6fB@g7mh0HWz22y%w#SORCwE?$_gU)OP=n#MYhVZy%B zJal9h_++x@&9kzt0Z!v2H1yJTgCSBbIM_i6{MfR6Mn+W&YW+;u$`U+cXeSvxuhD`G zNr};v#7vT{PnYNGC-W(ECK3nOOq?8%rG(kYZgeqK@va85nb-6!^Te72`>fcAfAOX5 zVnTlrODjbw_pjwxs1{i}uvj+sNPJ_#2os5BB`iU8Gl(DQ2i6odM%g_br>#?oe8_Kj zqj94h@?W0s_eBkj!tQvUGZwvo)0K{b;s`Qhm&A`NywA}Ey<~v*(?Ns@4i8g;#i>gE zq3fm5$u=BsISY@uo>)hR|I5w3XeZK%m0C^z^Wgrj|0DKB4DhkMHIyyJTXFY*;O^%3 zvEfr_$W%S%eM%}GqtR(v%65uu^|?UT?TNOkixa#+BbjK@S(e?qr<->6x?ML?=hWiHIUaHsK4h3T=eJ!(Rfy1tQv9mztAkGOC`h!N?qqHFhX%;>a3$Gz4*#Y^%=E-=c)C%Rd4 zh!rD;01{mQX2+68ho;8nmm3!DlueJ%0ZO8OoD^c3WP0Dde@Ecn4DYtb@H>BH)Oqaued^v45~I20dk8+-kz@UB1&095hIO_dRekcLi5Ei z@d)mSc8ys&>#BD1$(ArvSb|e9ug>kGn0AgurZFns=wpNiqamh(_acs{IWPw#MmjHY z#&fL6_6iYy?Bj|l5c2{){Z&^$d_KHxT$=8o zj)%T9p-LWa7_9^C&(Jm(y1(6O0y@0aH7BS{uc`VUuHMgpyW@-DO*ThTwr*o~bS097 z7({c-@a_~+*7xUZL4wM+bM>8=CGVLW_y~AW#8$N3-`=f{&JuCQ-~7UsOj?806qv_w z777;n9D_;x8vA#pr>69|WTnx!;??2?M%TMPaCgcXV-9dE#%ON(hjte4xhLtkBjaA< zR<8F+Zp`TbxP?R}okYAC2-Im|mHGLfhIINmqov*oCUA6ImbWPI{u*FT7zWtF?FL{r z_i&{~h!Gjh3uaNV1mTe_VD~iKOywmCd zX6*P#X)R>Sh&kNzqBIMw81Y!&J({D zH{i5*SdSi|hZ~su%`~Qde72ZJ*v6e-yqk~T&J;tgwg0;T+fjST@Y4eOSw@UA^0V&; z=k!ANMN;B~W3G1dN}6^I^pl9wif$?)(dPKmCyR4l5g*(J&{xYP-i{QqiC@ti(L$PS@`%3Z&+y5m!<5i^O89y>3Jd1^40n=+>Gi%2 z&f=@6%1Qh%WyI=nCS0&KG8Hx)ZK}&B;9p6nmJ|p3X+p^xf;xGPClnVk5l zD*l1fL#-Q{;}++B+S~z!1!R++Nfz2IHD}~#Gv-Me1%%rz{Hbb zgr>Cei*4;vJJ8hy#86%3Th0vliccLAS0hO+(FMZ9NOUMQkU+f0?0?lz?(|N1fBr1| zQ7~HaDQ@_@VB{ZLqBXb2#gE_ALQ%Im0gJ>*F@t4i$Dio%Dvw~cn%%Fxs=Ft%2NK{;~)`HG7F?u~&Tsgzd zF{v?cQChX65NHbyd-Zdal|VDR1@&TC6B3*2M+E(R7L1+~hSiPJtyIGPdeiv>EhM7i z|FLvV(V0Zs7LKist&VNmwr$(~W2a-IW81cEJ006jZq7OPd5;?PP@~pfn&0GKT^&7rRtez960U^G}7l@Yiw5VB8&{R*`~6YT6$pzP z^ZT@ScYAuI&2CfL>ur7Ao*u;HfkFjtU6Av9^sIQj6w9!o7YR$)Q@!8OmTw`@+@cI! zzd{bp5CD-9w$6CE6@P#SaQGfpr{BynTFw6MvrLEO=?}b7S+&Fk6VyLxPSXxc4^K49 z4`2NnGl~G`;on^Y04U#Q%k(PcwpTNgmlA(9W1cbU#NRi>Uj+d2fl(^VtGn>_vjupm z2jRvnB|;I8byWwdgUaQMJYd+FSScf56-eL2UF{-Oi#VBR58fK}mp<%0$(*1i#U@V(*a5W%# zVoFiGbKUTO#om1xA3=~lOp`p(GxmOkh67+HDyy2jH~KN*=WZ)_oN}hJCvvQs7n)sm zINOASHGlA@BaEa|8DTrjy%!-(t8?GuXP1q0a00!eKxRe4tx)ePcK3MSeyXv(E#m7SD;;rD-;l55#CrrDS_Vcg!G7EWK# zk>RwIaU-(EQs%f7E#|1^O-YJnJ~6Vr9j*VD5ODlAvuHv51(yX2&BMP00B+YFx%%(fe`cS8ACRa& z*gU~@Fv=DvJh-1^B}fr%?oo=&GKrojp=)#Ths&Zui}}Cz{kMZoN(sk9xLe?qu`0(_ zwpBLB%*n~8KtfU{6AvS4$y4_6aw*2HpBg|3hYJ{0B~D;~Qh(l1B?(dULJJ9)<Ej$7PUm$(8&srFs3?RGl5 zzZ|~Lmp0xjda6lq&ujiUL`R5XmaDq8dVTllA2K|jk7H0ps3Y1P8WzPMi&0yoR&-SC z)Brvx&+Bq(bAmx6sq_b-opVx5KMkA>q^WBvPObUzqK>qNa}NF1lVVqtq!2aK{4Tbx zX`SE_(i2hxAl^p9e|K#!%MPEL*_3L4IWE#y%rsj@ZZ=O2bnh+?UoAK*vM)+gn<1AH zTWj_ZRsC#p1Mn=b&Ad=9@oX2+ZNp?LmjTEs5cxXNl*q;>4^;(!U-agh7Hd`6_3+zZ^OYin-Ky2X_{7JcvMn>(wv=bsJjJGxBsJ=cpC$Iq10m7NEIXDl^)K_&*kQT(?S zG3kR%E|W^ii>Y7lCvYugVbzfaI)BwEvBX+wQ!5;_)grEfbdRIj`v+l3A&;!D*X|rpn2*3G49nnBo1@ z<<{25$|9YIuA7wvsVZdQmV!4IKHwapk#8lgnAvVTA%)YKX&PH=LU^RQv?8aT*?V9) z*yUNGss5GPOi-gw)*%$U2pH4iH)K(=K4D*pN~6TSLGGLnb4+~f2lq|gC$hD`7-1<7 zX(&T+!dw==bc_mgjwP6c%aId6#RN#Rt0J-|`?u&=snkVbm$`9C0YYD3Cg4ytg{I6- z%OQ&ay2~4ml2vxTnATV%nXxX3&(l{TDpKC=WC9APii-Ea{CYuDV{KJ;FYS?3(BGQK zk^kl?cBHE+%iZ!ixS2~visQAB@-kz2R$)s2j?2R2ac{R5uPj+~Xdry|g|@tNQ~(#F z!=|TTo33sW#4QpFWS=xt01%86LC`-fBEpoL4al~+*I4FOYtN`;M{++jD7#*xUPJuG z`aoCdoqpfjfAR2Z|FzEU+`Xel2?ggSK3_%^4nj}A?l@Z~elS}2Ai&BUJsyAi^$_!o za+$DAHpR#1kd*%m>4EVwQdSWiPt^G#km5|(j%5yfo;*BYuF=LC8?e4gY8bTa94cJ< z=WX$EdPsj{@X7@U6&EO?r$cw_Wl0|{!-27LNvC^onZgjbC0SbV%AE|g9Gd84)-|_p z1^TD#^r=epnhxs3O31Arg#ocUInF{e*%GKfU&u{Q2aBiAXYA>VLZj1klyPxWXOD%A zLlzYx3vzXxG-`M72Sg9GGHjGAWfZ7kMsoZ)9xuBft`{f1f&371fZ8{|MuFvoh}0{F z-Qz_zWYXyn6eaYX8M+~1+srE17n)_7*FNrWMSF0`vy?3+R z5HRU(T@+(13jpLXtO(s}4Z*pYReVkaZw5wU5PE?L@=UX>A?+F=bw`$Oo~3)2LJaHS+`w z@8g*HT+mw^-JRR0Y?V+#YlHo9drK9LfaLT^VyxIgvD+BSl=aIzxL6fd#3FluWz>$Ov2Wj!&@B+~Ezw zIzfUm41nhe1*b#L#OtA>Or9qOQA`+~-JdVY5a8Q5wQjhhY%NV_P!{FSYNA9x2rD7y zl24Cky|J1?07im(5SJ31=jKR_Y|P14&s2gf(oex!ya4MGEs@_Bl;aDl5Fjz^b$K7G zbJ;M6WP;^1%EZ^1)g>*FXXFfwT<{A z5AczGaEpaW74#O_jw0D4x@Ql##r#Jn17S3ucGhXZ-1nV1l}6u;)oPN&Q{#Va1+SZ^ zcDc+Z?G76g9{nbVkL?@Z_?Wuz%Ga;vF!B;n3t7fPebZdnXn)kF9e6chDz!$c`)W(rhW;ow~Nwk(kT*j zL@Bd)LqH$RA%_|Q@1|67X}q0&@wxH`ny&fV;g3%jhhaNxkHGdFkQhl4U_f~6CDB6C z%y9bK`|qUu1E?|T-hty>S$~CMRgTO{&>v%BnN4nSOYU<$_Qlr6wHU+@?;jghGr;ip zv|7|2)_vY-6r{27x6AoBra6*>!FnCjhW*VR`VLJu^33%~w(v94f-qevCq}Tnmt0f= zL2|D4+Etz%pAzJ6)dtzuZ>h;V7;F_#LtXR}le$X#K~dG_heg`&FNv9V*x>#1!0GeEBItO z6x1yw!kH>U_tLB&luCtxt=?VHazHsI)`X1eI>g|N3w7ZV8601A_;+aO;;Yb0_I z;Zl$WoLDDYkTk(+W+-p&suL#VS;F^&iw!rN=3tO@&c~YH#I( z9`N>;N5Tgx!HN|0!*IH~+{d{q#qb~bc5KgPH<64aSQ79TsronQ8|X7P+<&2etPKBA zh^Ce?fzhPyGQ%MNRH0B115GZ+BC;zRB37&^!>R@$y~5{e`-#X&#I=f^M(o+K2_vw^ z6_q&u8Yuoxo zcfXBPJh#~M>5LG|=4a`Sl*#2^>vz5HExC($19Zbrme}n9cC{5M5Q!#7N4_41F38gKX)(1eOgGCPU9X5BhiO9PuNr6isB+l7Tsu-n7u^n6;cYFP}mp?yB=);P&=# z{IlY`fc7fDnJs5K9{!WrW@Zl8tW!mha}Ef|73={4jb2 z0f&k-XSG5~M?Z>S8ws8As9n-q}LJ>Svt0YZ#)y4@7Rg&h1NfXyz;q@m!i zq5Pn}TrmL5jWbhjPUf}5rz1!+U8v4jSd8M(53@{I-oc$K&8^V$QQ$ZIJ_aFI{05|T z#L<(2qC0jhc?&qL!k?Dg#g->E1}FX0`?X$diyR$`oKdg|Q3yC~vG?Znc1`I|)C5Nb z8~zA@o!`ZJpRRca{l+qji^7_k8blohi?j$f%*W~qZA7O;L7j8YliVz(n1<|~gYrpA z?u%5>T#rH!!C7Cf5UHk0EX$Z4fgeFHl^AvD($tijA+>~HMLs&8#6gSi>dMAvd2^bs zr`3g3)h!Tpxe+CmYOM+keR(sF|I&Wn)2uXL>?q+>=l%3$70aT^SB=9^yLs^?SbbJ= zaVxX?M-s@v)kOy-u-dTauFbwxXPy2as#j%{tU1F#12AO#z1N&<{ zyc#aYq{T@{tCl9STDtiMTxP(?KFncl6KW@F-zPaCV0meBOl@>drgoJYR2^0#FZT*K zT;YMH8`*P$?lhsR|!ZBb#oKdj)4a(QFm)v_+et^tOPBL*eQ&Iub{YF4qFtCVui!}76X z49+8&t~Q=7*bRltlx-iJJ&kfIwwh%ZjCT%SbZ1l(4zqVTAMF8=5l;tCiJ$`5#DjF# z?+`~2OS><+PiTu(86A=636`i8RpLo%%2Zq`g%~6WfvdtAyu1OQ?1JCd5qY$mLX#*q zGi?gg-&3U;PLw>NAl{6_v}&)fhZ?BZXK_LZU(J9MomMFqvJch6{-Y#s8nId(XNwKlUX9cF;VzI>yiRsNFIBYG}1gd zxs-VK%0okyq@_jG-@}?Nc(3P74+!7NsB*k>Vdp0Tm77@DK~o5;{S|98=@yH<$FCa#wjNu6?pH+F z&l})e$O4-+rksEG`JP5%C}oxf)RO~mz1fIG$22HE5NKtAK$LMm#?m+wv;6t$E z42;-iBWx744OLpTA+;jN-~swlJmrZcryXxCN~g@=CpffkFzVoOP)S6;67dT zaeQJCxLm+t(MT83$EXHf3UoC1($i@aG=t!|5_GW-O4u=X0W0k_H)(Pm&@=TtbGlxs zxR@$++14d(nHQLdo_!f;%CH4QyHI4NfZwfGPGJGTpX93d{Za45>~%Q$Qt7hPC$CK1 z7dpa#YpqAR0AWyN;xIAW^E+Gk;!GdR2P)8fdkBCTEG|H6cO>{S0y{P({3HkKF~sb~ z9qWIS9BUWxd0 zp-tHR$5u3T+7yLjKoT@XE6Z%-O9J0$ytu{Wr)~~+_j|T%*|TV7^`eo|WDYwb+CW9( znd+qNyLCP`R0bt2sO~xshdq(O-3Jmt&jd)pEw(6J2Zt+Dm`=DzWKS;8ot{2VH@a1o z^aRP0vI2W8UJ7`He6C*~z|x>y%HJA-XXTE>qmab^6Hw+v3@Aic%)b!ds|w%k7Zs=T zvrbto>MUuhy*zMyHXUw^qL9P0)shH`Bb=)xnAY<1_p%gArfL4}2AAX{TxE7<@uu2sfR7v%{hbF4Hd0 z+I%{XNQbe*Vt8F!-*7j4@7pDNIPa?>0%OH9IMSt>q!YTJD<$w2V5aHu5hvfd$5RtG z+Xxe3Dt|_Y)C01*>ju%~YLshlItW;Uxo^0vStgswuktp@rm@Q#5OCAmRkga?yRue6 z=EA+K_XTpVH9U|2Yhev3nsq)IT#KXUA>u|#Dh;u>HLP$0a)bX3%0oL1Q~jlc-%mA# z?64hBo8|DBs732ccAWLeqS5--8pM>7tZ<-?k|07O_C&SY;V-2(@j63{vLXP7aSBwj z%hqyo@pmWp5~cG;D?4USyX|IioHs7c0sdCWqT7L{{KMVS_tlkj79^+58bnz_3!gq@ z4txYtu@jsXyK;Xcy)LpDe~s~gpWcX=0nVvX#qt8DdbA9lK#qp6$CoEKLiy+kRB-{J zFJkYk6qe?!`S>YysjEVN83CZ${V1XlT%g{U%2c4Bu#E1ch{_$S;8ChCbT$`q=r!nj zBxtqammk8lm)AwKaLOM~Ctd@VF`j&gH%kXaZzI$)wpg9Al%rFoii!;gk#plAY&{5+ zzpC46iwwo)#9lpd!5UvBP&wT!r=(e$@9J0|FjX+0-e0OmclstDdO&z#@l*H*L&c$Dd$9VGC|K;1Vrrs{Wp|xc5!!^PFtOx~3+NSnP4h@%OoTtDg6*&k5FjCA}Guh%wGmfaR2p}}7pCraD?`eo|H>xX=d8k%yzFeW^rRb3^(px&Nx%{7VWW1X(`_cCm5 z<*-9;^o<8S%lTdOkg9so;sPv>m)crY7ht;(88Sdj#G^8q?o!B#zyUjuyTtv}I`yFb z;Q`^GA19rmz&B6UP8Zb*`QDf?W^uv&1o;9Z%ztt%1R%!%$57sk1FyC~n+%-}*Z2o{ z`N#Zbt}a!K2p?=*7k^DYs!I?I)fR{^c&a-U4X09jPvWRGfYl8= zw~E9Weaf$f79{qu4rt?^r+TG51F_@mo7$5z5*O!g*b!VK;gB+(E5`7{neCHhy1_oO zc&V*?soE=q*-{DS6*c5q)~!utvudisQYa79=&Li$&xklrvx_vI1HdYzzZ;(>M~0F? zYh{eoDUTcsp)4&D4`~E41)}TnDzu7t`b$b4Qp~|yk!(jrH@)aJsnrDCq4>T)9#!k+ z?m^;w-Z?wx$5?w6tVp%6u6fI0zkSmbS~A(&HJtHa%F(+&!Z=iuZ@2HvC$S}#%y@hY zpXrPNM#r1sJ#{1R9{~N=!4^ugdBqV&9MrtwpM}fF3g%qYbj>9Aby{6-uWuPJ3eLeW zW?2fTdDbJT8Nclcqq-M?&3_KtD~Cr&*Dc4ur@95_Lhaa6jorVKV#KH(94?@bBpmSw zeP!nzwQWEH1A7#)^LV^tJrOx$WB)GVfnH_w0CYZxgV&tezySrcbFs+>*ecGK#l#Yz zaiPbs^$DwQwt;o`DCF6)_h!ilQw6KuuK4Y{nQ0>N)AiAmp}o|&?^8B)X*}~v$+j>c z?%Vrd4zZ3oMOu(i$wFr%v<vd~~aHc%`Ym#yVn`X7{xx%B9k?$EufYlG`U3 zm&-6yrBYs>$jtH$k^b&A;Wuxb(13h&zktZvj&L4tE4ArT{p(90 zk^56Je?r_6T9vGH2wROaH0Ubj_=1OW9&EjDU~v<;&u&(AO%p!{m5utjSlCAEVTue) zk)cqA;GB3xBP;pf9X5mZE*ifo?c#XZQpY^GsheoL7TS^&<=a0LR_1X`5r6;2uuA4X z1<|hZRRa=j-#u^|N*yhua(yp&{7z9OgIsVnEsPf-E0*l78>4l@QY(JdkIA!j*^TrUs}XD&m|LaH*)ga}1aa#`phG5fN6c zK36^_cXG)i{&igPV)IYkY!00C zg%(e|xZ(pGs=-)a-yHj*YLRz2o44hdBnW)x4O=Br8y9`#79 z@!@d$WAeVi-lq4DO1|I3u|=ye0OsB%o-8ji-^Wp%md{hYrDf&1yXWH1yk!NTPEg}{v-RF_9-G?DR<_)m7f+skEORB)4*UZ>^mZ&` zh}Yu>D4l9poKJ*P;+cxE9_`Aw5-?28%DZ&c?3S4fWUgw^^c8GDr{lHP^bwfXp7!-JV4ks(M#@F~2s&(wQ9Hg3*8g zz}xgV>WQ+&Mj#eNMj#xc!_D=k^vOnUih{+%^we= zo2&B6CXC&LW(w$*q7i=W`jqS`M=>sFco+7s3r$rp`v+FXJcTecd<{fZLi!(S7IGl{aX zS^{9gS-o!R0|$(26SK`PM(Jk|TwDs^?4}*M?Pe~(*5!>? zIRt)M$_=3_cg@xDD`GP=R!6T?wWxTVKL96g_MYxnfB6rorG@o&%k{uh4}|E(ps z49o(uLKEFU38HC@s@a zB#d)c!Y?$=fbL<1E?!ghCb;|BX-iM+#c>hqv3#JUo3uWZT=5juEsl zS}9pQsKGgtz{@LtpRZp4hJ=c|EM#8`+LjLbvp#%%U-o@J;kn2Q(#1Hh!4kP?#DIwt z6>U9yK+n4XLI_jdmG;=u$L~Pruj|5NE7=o_aeum?QVlsr>*oq{>xX?Pl zeWx5sHWR;i`X<_1dHyh-o=9!>sgI<fG%(;3l5T)(bWX3 zB`4&Z36Fu3Xfia0OgbEep%CloSn!7WNI^0Ev1j;P98U?O5iTG%-JWInEd^2X5>7sX zsTqB#f_>8fFeN7iW~gO17DWo79YG`6l5rvp z;(2Ay=rOzFRYm70fl*u?8ZM}qdV1+maZghz-w;tr<|Yi zczas;?{a(zGGHd|XrR;YP~Kaey~mam+L*Bdp!vVo%5Pc4pvtkg4tCU;@)=a}#z<&h zvbFCa*>Rmez~d|e^l`g_=L_7Dv;;8{E91ohgwDt-f+zUwgxRvpMV)^tb=EBx3WB1g zt-qFmRJQd znB3H05I=+l+n7?RbUV%vBfy;&J2R75gq88i)9QRc8ZPuo^}ZJTLYxYBr!Q;4EIZ=? zI{QnMmD5L*!1o3h=aszFRB|7r2rB4u+uu(|9p~-@HRk+r)W&22!u~a)S5}oaWX~KX zr(M1mj2BKJ|BmbCC85G(fgA7Z6FP^l^7%`6OhU z_^T|^<@ZUV6;gr*lX^x|UQ8p+*YmCcgvLkHD17XQi2)!WuMM24bFDQ=0Y+JDY1d6I zICunj&|KR6!i6bJT?67*6uSM@n9+0bB)tq`1bz|7taJSFs~x`-Rk5GTOd5Dy3gNG7*)A(c;#z_NtK9xwS?^C7w$D&Y~*@MocM3Of)Bsr7GVQ z#W&J^r$?V}oA-mYN0JG9C*f6A%<{wV)y=a*i}?O_%d0J82f(1m0D(L?_HV@$*Yo=d z6uE`~|N2OO*&hAb)C*lSgDD}IbnpZe$QmwK9+F}*<$P@g3lti=PI*yN@-9oMWpEz`ktfa6K1X-L{Xp=P7{h(O6*fo`9 z+1rF|d@-918PI0Lv91O$|59vA{rqB}%}9viA+gx&l>o6LFQ;`&yLu*yLQ;jmH?q5U zQpFqonU!1z=C9NX*rGaM2pqJ-{H>Z|_(1XCsv_~=RBI5_&^ouxt`LMkQ|HR0t@-Y~ zUq2T#*dkmJuOMj6l13g^om&%_R!^&hPsp&(;RT291=uQ`Ng`{il|me*HYJb87=Vns z)Uy?fqRS&l@(mf>{RDD^K|e`t^f~rC6IXG7P9`h?f>Cn(16-+1Lq{tx61+Z-Yz-o# z{ym3j;#QtAK%#fbvhuDAHo#eKoTslhRTvZ^ifLJ!XNQV{KISla4s?lxlxIc}&2XP5 zhPof7P-kuHbbU4Zz@T!~1=&94gRFxS)i(_O$Rm^Y-}YNk+#sNtiGs>{+GQGz3b%X7e;3!WAei5bOdnGlu-=~I3IlABt7G!A3KJAeApPu?gwBa`DhQ?qdUN5; zIyxK!NFRAll#Kd3gO|VrUa9%BV_8_fYNOiE3hmYPj-9P z0SFPn8@*~4qD}hbFt3gLx83V-aBrS5cX;+27Y?g?ln`495}|Oqa{)JUAIRC&kvMOc zupYWD7^&|$`DLW9TtWO7#E-=;*qz*R{my7D4RS_pMU&2$!nGybUv>kS&-2+-Wjh0KGw7b% z)9_)G*%SXf#9Ck9FdZUCWb!E%LjhlV-yvM+k0rwyWW`riXA|Lv}(0)pYV z00)DfuTVymQ7Te~s!jR0opk|?l3Bx=&F|OT(;P0szf|S#@d5Wtj|4tvJ+jCg4 zK5`!D=3j5yGn5gYd&inG3Bm8yr#lcM>gp2{3rndEzsNlug!)DM6L(i5Rw@p$>W?cj zT`|%6M$Y37`_xtZT!tTCnL4%gakJ6J0DaECVkO~dhEfS#ljixsKspcC-%mw%1wT)) z^t9q=jQ!R;THF^?4LWWp4Gq>~a$^1#Mi)YZc0bv7%H#9Wc>W1EB9S6uFDTqqo+8s> z$N($S3*Saplyf^=St$@e=ET`1k|1nmijB=-seKF+UR+Pp2+*dWaVDY z3j4-Bn7DdIZcgeDmSw#NUc^Um%#1nTWjPEpv`q{w1o03$NGBMO!;Rm!R~9?vu$SYg zH2gS+4x*ajDMZe%*3NAl{*u7H1?WD9rMvUWfEo|O^vzPut$1Uot^8rk#>0l$eU<7M z4&BITsZxo{vm(%IwrK{|7P(P#kF+`aBS=|C;(i#QL)g~|11#xMDA$42B}SjRS~reOT&Y5+se3 zUf>)2ndzUl|LvPIr!vHXP^Jph!N7ttv#_TsE`m`3WbJX;;kvGCX6a`mktHSlTs{cVu^P&aC)Rp~D(;WcU@IBWk=E{WKmV)= zF2^xv&I$z}2L>z24xo~x)28N%1QbCG5uoB)QBnJpD6B#BnV<8OhHUFDfReH$lSovh ziv)}U%z6`uR9BJ(I6M9jmAzs>t5Ey~GLs!L-VfqfODYmHS|NgXXF_ExOq2U1oN23;v7B#S}clrq2ve1d&J90-*@C_f~n!-3_(QG{!i6#pS1f2iss zMGBO^L3!9YApYrhWm@8 zt@iFy<^OKi=yiFmVKF^R){LH z`gLc!w-zk`1>AIj0aCTIx#Roddyi??|2B1gUhCKL`i9v(wYLTMw!7JVx}LHEd{Q4Z zynehGaH}-kRy=M@4Q!>pBW8wORv)(Sun~N>eI8y}x7NkYlbWd*8b?<3h<9#yb1-`U z9pGbm!^_AZ{@vGPgsa3DJc$6(F?vx0K+Mo(7^BcJ#bU~ejb9tq3x->uvs{#9hMo$3 zOfll1BQE$iT&YTdJnjSbq$`F8m~|#6YW_}U1AY|r>n6YYz?G>@Ol?SnT=TS%v5U^8 zN%*twq=N6NBfYo`5yLtXiRU(n$x>R-FiN`4$ZJu_XpBO@Og4dxh)w<{#AFilQ}Caf zcnnT2W-wMZTpA-3b4KMVL^?3pNDhRdnHA%bU>awMh6^fZmVFk)arAF?z#T=VbVa=Q zT679kIb6R^k`V^>W0nKSv7oUWW6V63te?zdWtZ!b|HhUxBEmZ?uBGaq7G(#kQ#Y;G zq~EqXZ)GF%=v9majm6k=hxBJ8Pcv1TtBBL>uq--F^8a$_W(2jD9pIb(zT`EbLf)y?j7!q4(Z*P&9s49xCwA$z)MW+wVsPTCpEkxY|mVc+Z>N9*e`^KpZJpRa~WMb2ktMn_Ah*=?vzFDM8@y$ zl8%+>1`sO$(hb~{XKLd&s>%E*u0|!RDte-DUBqr8D2tsYS;0<>ew*$+3Yna-$6#ik z#IR>BltC(_A(!AZm6WF#AuX7c*vqX$5-(~7I=tV@;Vd{F7f`CAN;=;UT7E`0W_4Z)g!<_ zk#GAyN0_W^OoR-C_C{7PJUlS;GNyLsE*6BGKc>rqE8R!b>vd>amN0?gfG94{cxYqgwje3eObS{G8!D{>E$9jOPS+}xr zXf7m@YBw|(-@+og(`V7njt!e`s4bxraDVPeRAFi%)8u<%)B^b<=$)jUB-IS>KhTr* z!z+HmkW7ln_R*GsD#33ML9>NKk-xtCG*rCuvIC2 z{*wpr?2bHf>wt~h_ATiTBy_yW#B`VXE%YRdVQ3b#GcHc)lQm87!j+UhDnFineQNxY z05Rx;c)=VB#5mtuD9$Kt{td!(|1^YL>Mzea2|t4>QVYjAN-7VN!>f*IhjNf;=|j$4 zicU4W4Yj1f-2I1S#RPJweza(Bd=ougL9GhFBv?k9Bl5yX_yH39>lJRcD(A1*DV015 z?|VViqL_2zK$t{1)eWvT{XNO-*aF!=qXdYsZ+1kh(RRKG!`+SLZ%MgRkjM3A|vwXnjs++dwVO1%^7Q9A@faBT>x z*sdXE6~|VnwdQ$r7318@FbR@Z7-Oth!`h3sP@BDKm?dM6O)Ibk>SQU8&cx5O87snr z{V(5jM!a4ZQ{DIwjc;X*4jby>82}uxQ$e&K-hIcxcF37(sY~^WweweNm7#d#XMa$( zUTRE}!`=*{X*61X)G<832TAfvtP-MJHkg=mmJPM@p05*hC$I)-+^)iFV2sgXVY1qz zc}IAdXJ$aGNJU8IQ+A$*XLBYQXIMeNd~ivcr!hhEJZJe5Ih`p8g356t3%S z_0wn>hu-V^Ay*4c15m3o1dF#bqSpDN?gF(gIx<6dV1TZ&?_h69IX4_}uJb})mc5?A zpPdv)HVj8(80>|PFdR({BtK8$v&(U}$(Sf*-5kg6#U?%h0($|U9 zaHv%fJroPkogNWsQxGpc)INHLyb913#sIrA+@)tz=^+~?Ia~`pZtOF>rMCH;j-H@B z$QaAwyCy&a0_bIn4FvXF2;(9id{6r_42BtVIZoRI!tLFnYzpnd!Or&W0b4kFs30dLOt?m|$|3g!=hA|0B6P!n z_Q*;l;>eo@vjW@M&Ya(0XTg`NSz58NPTaf%OjOc90+^{_Gx&N&#-Th;JUG)(jnb)3 zqQ{K2S4_4SrvTdQV7@+C6B6Mhf7p2}p*b#)7#;==M1|4lrbT`)x78sO2vJ;Pf`pim zdd(7v1ot^UDC%v@7e@<*L1|Nel#Ll?90u~GRrPlS>m`d?JhN{nr4_e10G(jv?(%sEOxS0b$#z{rCN7|87dqh44?ZQTb0tBjk9h|?;5!|Sqqq(WiD&K z6E@BS!0=oMYm0)citTwUb1F3H(%RIG>0f~;1rhFEZW$coD4bcQt9+6IAdtn^PvhEYz^IIg?(i$;f$$_5yOy=uGj(U5`xNg-_z>>hp>3fU0Y4tX>U=$=)> zqRa8xj;Af%jX+%g5kV9cr^I{aeq(vW^IRL2T3#RNc@}$;ZZ3^R1l~8n5Ort>}He|TSTvDgVE2Z{6wnlw7dvPvP?ucK- zn1Z>&96w}BetnrR-)IV7zE^Y_uEAc7jxeu!fpuLZQNdE@;--a|u-%RW+H3~j{{H=& z#a>_t;UH|7XhBZ^>tw;7h*_q}oP*%_gEg#q6Etv`xLj5N8DQiz6;OC5IBu0CxNOr> zZ7rKHd+7AZx`0f+)h{mHtkKVWoY12$hivSwBh#*614ll;-y6=R zs4t|%3l}e^yHT@SSNYh;MJFkDOnD+$CgI;r(In`M%Vv;qTXj?JGtfNt)>tmYxe_n!n7sz~gST1OzAtq2Bt zZbdES4<|dH+!oN}oL@0ki^9aZ^i-1Y?dfG`R&O=#$s`-pbwGc)N`1VLj!@Xl^?x*- zWl-4A)~<1PcXuf66u06~+}&M@L(t;x?(XhZ+}+)wxD|)XIp=;q_GI?#WamdFlXtDG z^*+(39yzk$(@0k7K$!ueCjmAG+EIwn)INUut18mG53H`H0S@8|z9EMy3vGG|Njjmu zn|OE6{M?QaN#df)tL^VQDc+B*NtUk`4`?X=jl}T_D!v>Fe#0K`c}JrvvShWuOKC)> zD(rNj(uYXy?jg{t%ZkF^4uR5?zkl(VOIUhTN8n41W#6g2>ALz@7R8A%dbs1!W2Oab=J|o~LA!B=ruqi@%)nzgLI- zzhvjHlsgw!iXj3lEubdj{GXKjnYx1$Ex&RDNT0cVy=jM2CU+CZ{3*A95C(-20vep~ zniAlH4KWg0k1>7$+W~*>`}zlLM3ZNv4KHg_qDQxQMXHPamfXDA#poQ8!eMXZF@WTk z8T@e{e@6DEtbNVpkp9Qh>p>z(K!4u3qbq-VYE*X=vxYbla9I@;hAloY8a~@k?u1qA zc0m$T7{!X(9q{H){9R(`^}-MDq04vOEG zjChdwl9xhev_O2xIPHTG90RU<42ooUF5ihx66+}Mo zaI!wPh~G;N82_z?-@n5i)kTW-6xhcnxN!@e@YM5U+;-Exx2Nk)3i}DYMZH$9xn*2z zZ;Tcc|Ncd?y{k!Ba7#n!)LE<_KQe!w2IN7Nxhnyty?7& z5eA?Rz?V3dEY9gGg%+bj!Y>7ka6Cq(Z6+sA(h2HX5R!YxEuyPF*9n5Kz zIa?csdMj1Ck7_JdOuHy6KA5!1STgciv&|midRbbmdnBLX%fS5g4q`|9LC6%9*q6lE zAP*<5B(ZhTB4BA`y8y}LzS<3`Rch64q$Vl}U!~sg#dsGDuHJ!h6cc zJvVFQA#Am~(|6WnJ>iNkw4=2aU6`vJ>J4|T!I1(r&!3>WP~(GoX2V1=+<`6*)E1>; z5h~N+H1Y#)KAM2(=BU5S^b>2b9`aJkpo&tli`@FD28sFlXO)ikyPBOc+(=iRW%8&I zASW}0CBeL%+BDfs{BjvkA*-mD`kc>Yu}NGP@>*zh6llk7otrw)K@y2e#H=%61y@}9U-N6n6|Iwd=jjn45;bb+V2pdD*68PuD$m zF{G{^LoV0%NXfFmpV8kUSzUDEGSriiwXT1;ql=nBtk}NCeJk>`g)}DcTb+@2UlE3b z;Pkb7B9%f91k!ytWz{>b1^u{0Q9^{^T#^X3_9kEl<46~yU?H*0)^DM|F2uF#1>1@k zbmRY`Yo&fT+LTu8q+v7&=?AAw1hec`OGv&&z*f>Rai8!l=tGFTD(d9VaLZC0~{y6X!( zIWwoqQ798-Wx3y6x@TYmR?6|Bw!9?hMiZ_ma~m8mwh^LDlg$h+`^M-1*WK*D3DGT! zNC?rJRPe7dfFUGq1FBgcV zqLM2W=wKsIkdTDMjz+>E7utX6m5dGPwL+ zQyE-r>?X+V;BF?^JVL>Nk}faK)a38rO?$rU_!U7(Fc1~g$h=hj>YTac8x@9N_))pJ z{bskh{gPjU!((Qb&ts;J;%lhg<{CSH4Sa7*5z|-C`vmmj( zdprUvMYQksWJAIiRN=i9jt97~F3c3ui4(B|DG-pOSVXMAZ;W*huy}sfSrogQBx({5 zaS0qIMN4SW;pj-_R(aQfeu#Vts?Hs}{ynim=Ava0kjd|$hcIS}PbnMu^1-&F)25_?P*u!r zxEdwh3$Jy)!Hvt_S75t2<>LPQRF$ub8|bvn5$k+eldpC1MFKOOGsx(EzNn)nI;3PXMUSIqk^UuaVQ?XVv8#N<3t zpZW<&^`N7f+7N?w@Us*6GBvP*h4xnfjPo*JNENK1hUk|rc*8#4Pl%XVA0H0tnKngO z{bC3w$i)zyo=-4ahwqH)k;F&gQIf~uN_B8ZGuamRX_tW&C!~brg`q=lCjr@tVhR^5 zL*W*{Qa5vd#7Q21x*}qfzycMglComz>yZ_Wsl(%~9L}X#1#fJeN`D2?0cu|vZ>$++h#}+JFMUk`QSCytazDAe7^5-3?WCN$HJ)xmou> zcvhhD4(CY)0{=m?(LO(tB`v~WVM#R<<4UadLH8p8-s zQ10V?37C@egBjZsh`(B(dMiN!GS;69y*i&3CTuY+wmz`$U_M-z1d9RZ z^!c{Nmqdd{I2Q=Yh2h!mj6XCvucjokPEq(L`D!%9&(8Ir3Z8Fgi+v)8;7lXJEe5^j zs_+OXTZ1b6Q!e;@t?2Uk<16q8gvqU0s-YxjHiwmBcqPz_Pb$ZbqV#_LBEc`#<&nX8 z!0Mr2nh82I`|&{aXWkF9O;Oi>G0IU(+A=)r^$+Fz`Z<@( z9qe3nG@zQTB7XD+Du?4b$p4eh9{}m8q;~wTqypn)O%TpE{Bk4YOkoj)!D!j&M38}j zYrcN2{s3Xoh?@SN@Z$Qfvk({uPfDFO0v&*-`{k;C%ikkHb14jE^_!TC_Ms{#;+(L( zivoTl?;BFM7~h|_jj|k>8^9F=7J1Grr%jU;9Xjl{! zN;;6s6++5?61Zo=6KJFZ&b~k4b-&*p?jIv#e`+$c74AaUYe-A?yJ6=Dl2F{h=hOfW z*EJDtDfUd*A|ao;-aQ`=Z^{HwG|b;%=J8JW4*a6}(sqXlQ)>rGsZa@#yh$dUa|y>1J7RTg}j7;iZAS0qffw)h+|p&Kf^@!VuyKt3C^h`fC0jcH3nP zP4xxUGmUdc;tGXW92$R>Ag3^k9!ExM^MINuvE>#h7|QS74^clq`VVT(6N6Jys!kn> z?64S+oac8MEpA%M`8Hmnq|-0(TEUQo(+K%R1GXH zxwUibNEYkAKSr*Nf@NMkLjqqLZ#z2Hq|uorXuy?rx#IK|bgk>ySWsb$yM8beL=5CR zKspl!*BA~7FPmKWFkqoqS&?B}`BX}Ckt~UBWA3!uTo1gi=ihHM>MA93cdlZZ>Zw>~ z=5ZP@TYwLBaS{MWQz|gsOzptB=Q7V~3PLCA+^CA@0My5M@bIXHL8@m*=TMq4bcloJ zeoLzDT45ILqy3D%U(heY*Sm3cZX5*|RjFKd@a2|1!(Fmj2q&>#DKu(f(#|$bpITf6A~h@}&#I5MqBqq0R(?2SC#fPyp0V{MKJE8NUF(z;OXwNnwP` zVzT?OY-f^kqkDgVz!X}7T9O33jI<@&{8tm*QU}zAgs_MPqg>KfqFEbVuUE31ao|uJ z&;AWg#FAJz==3t4PKhu^1*>jLjiWdC)L$q@U0E3S%1HTIrypV9OZM#f@6B~Eu@?_0 zVdK=V=7}hS&+zTjiM>GBr88a2lxB1!6{)h2nljpq60mQu<{xzTJ{peE&+#M@o{7e- z6i4m+n#mn$!)P`g-7ohN;!*#?W1@!FmHScxA+Pc|x*;I>t|(0j`-wllgF@IKrAV9q zKr1z4y1FWx>Q|@FfX=$Z7teGetPDo&Ia9Xr!GP{0U5cUyTmsEro_K|5g+G}}2WkD$ zo7`Djro%+x=;me{_L;|71W2}~e0bi(j7KQQSeBX0Bgw%^aQ9v8atsmD24)gQu)7i{ zO3ATqXa_&Zdses=UbK;Pb3oFi*M0X(-Y*VI9%rTpq-bax}z&5ES(gEqJEI(-;APf%7wS~QOAv1EkvW^J%oT!ud^v`kxm?W1n3 z+j4iZ_--1nv}CO^Tt#g3@8&mFQR*a>`GlQ>VXsyhX8`g%m#Fk%p}TGgYNu=WLhF0w zFs*$a>Gt8}7JNd!7GtWc>~pn{UsOVSXl@@9XpN3xGcPgMWqHf7Zdyh<>jd1b`HNyt9p!Tjjpu5Qm>${>m0t}~G6dkX!+dF;2lZUE8$6B}pBs*XeCYJ3#WbNHgZ7-c z_TKM!!+Mm zTR3P*-*5RVJ@kEAx=F7eZ2{=8n3F2QZk9@G(jz^}Hj-P5d!9zR~}g& z<#p38D)(qdM`kVAUgd^CXNKxpht8#FWCz!o%D~~TSmoxt(Cuh$W{6g{4*E_`G>8{_g~oTPV2?{S~M}UC&xNPM}aT>XyFHc`-Fc z%mB_*?W%}$3_+7l@dI<0h|kX~({lP{OSMUK%t+Yp(Xnf|<4^^QUD>ie9Vjule=N8V>+FiD zXDg@1kP2>wQiB6qGkYOU(RaB=6X(?y-W*dkrNSeDCyJ=;!@aremg;2)%I@=U!_O#x z0TzM$jYp|$p95~&WAeZ(>2mBcm#C+!1IW7F39uh>VDn9oeJi#&{)w3g8J1mG-gie_ zuCqSHLgWL5GSRKUR|Fa?mvt4J-m?G-h5P4~Sf{g?mb3V;juzC9zZ<6KZNnl4**^`K z>AG6s!dkp~@4&B=&Q=15^ePEwv}*meHyT@8rQStcGt{gDg)(LtY?{toeTthLa)9N^ zC^F2DtKpi{trQ{G;L(LF3%(t0Q5zsNTZL)Lrj&3a|B=u2$Bi@77A$3EOu4X|Et9_% zA2Cr}Jdh?U-07>ZEcES`TjWPd^T=IBRp$`iJexp!Y3i@r<`}R$aJn+5D>uZjf%B5% z%%VIeQU;#tx}$21Ay{Rb+kc;_^8nbk7IJv)?|FjOv5Drd$J&q{+Ssv1Y$dgxuPLZ{ z;UGw81My-BckC|&EkhzRTr4Yz8$6t72x=LDAFeu`?o8>mg75)*HjiP~BZUH!voCvz z)Jmq+hK%W2h+O7IR)`ifZeg=Y*1$RyibG3-4<+fhli|pKl#NGhIDUMO2`D-Akw$>` zdFewoSHC2`wm6dG;z(Dsw?4_2k%Q)#tvxekCEG zwB~5XTY9OrCjc|GD3(pl0EDqSxhB~)7uAGsMblpopONMi)clpxZ~Mn>WA51NAMv54 z+dsInm#iDnl|^p{kL>+=xF;+}5LI(PkfL;(2dnwq>yI}6SEF8(wzGV^zWcE--{C{= z;bH)B;HG@pD1&3L86R%jlf%2xy6bePYD|X?noLBf_Me0fP(bk`VOEU6VThGXR0AhqrA6;oI(2cwfVbgNnVzn`I z(J};hC3pMrWZKzAnSo;ohOydL+dy+&Wl_V~W?&~ha;?;PeBl7y6bT;qyU*7Z7)lKK zbooFO9JR2j^m~^<0ZT#g^@?m^8Z0=E+D*+#*X7q7Y;7bhcrL}Mod9lKZGbZoca zLt=y3^xyNY_-U<^KZ`srA@4VLY&Tt}jLj53IqfK*o40r&IL@-@DYj&9S2ni!Q~mO( zl%}6MhWnSxiLlkh#6J3GPV8xeEJd&tU98fB0`82zdW|i1b0hwvBr*S^Bhgc?OrRNB z-lh?jA>s1~t^3LW(8HiZqW?)vo|ON%TDL$gAzVYF*;9ZF&u+*NU|r|^`~+?1P?G+N z+c8q=hQ83kp5rt71w$3@BQPLpBmb3#m6EEL(~_ zG9p%sPz~aeEEp$8ivQtPw&1JY2@af91p&htOeKC<;$h*Q=??yA$u@|(kB z5f7pvqD|UNmAw@+rS|&kB5fLKdp@#>y2Lo6l{jnNen~0?YFAxm`{pELBxnypu(d5t zXuNPR6k3lL%7vC$tQf%GxpfM}R?QS{brphp?W z1Jpt0QFPY5p^(5#Lbq45BhCg9IM-AeB&Qv3DCyDVOn`TkbFk6~{Kx9$6 zQ2t=GOyI5op=|0jW5piWC8gvV*fnq>V)%D$(jeCvOW?%11YIn)hW(-R2aWNEP#;QR zYWx~{A*dm_5EPPfqjs$yfhCF)RMI?AFJLM23iZTh`4@s>{a_8m{Fs%RfFc1zDE3$w z45o97g5bb|1{Q`u*gAlOiMt2w!fJh1_ggb;=iZ}CErY=c=w@TsPCW#s} zVTMhC&cWXLAxJ63nrHPBg=S9CJ|W?s>QKYn(wO);36ToNihzL#)0@N0#qQDY0R#iq zIsbxT*YNj*UM#N={`o0hfLnrKpXH)K&B;wJIFTyp^n9{PGEgK?NU_(S zkOy?a@rNQ7=l&bhP2{6A7zZR${y+wb_?|dOF63zl*|k=J2}aoCXa_ShOu3+>cpkfy z1SA9#Iub5@tQ%hp(Zw~tYxrJayYJvrjlHk2ycyIUN-Y9i{izeHN5|c~!g^TMIKy8f zoH|#{=u%|zWD+EB$_yPdI$|14?F?F;8KEkjBh(Dcy?3W}gBT)~?wGaYAHc{!lfs2a zBQu^v$Rk2KDuVAvJ)PvRW1l=O(AF~jB=y#6kad!v&=870Xu7ehP%D?oc(kw@Z^rkg znwc_gg@G==(Aw`V!00+2bDoI8*~<&DhM)F)jrEF&8I)^Jz8l(Y@4#q}kW4l`13GKh z7iy(f=Pq~3RGwk4xV#~?2@qtxu>G=S5+EBiFKEs|U+!~}AW5~tsY5IU-|dEUtY+iI zf=1nEpA4E64f8R3upRYG2(f-%9oPQ*r?@MY?4jzlh>>^IyiIYu)0y#lc-|5=ujHXk z-m2;%8^-nN=GG>zIwz*&%Js=kGi#Xcf^_TF{LN30C+Rd`0k4mQ67Z%votY;^=T32? zFn9TFNzaCgaY95*OvLul_?;G)?7H8iJC(6!+9-)Xan9@?=yNGCNeXghHR1xJl5ykc z#*kW*NR_HY2)1{;$Kmgv+DVY8zkiZb^^N5%NSlb928yP0XkY_6z7A2C;BxI5@@ zsvC?Z{jEl*zJIUZvTT((6(-zQva|%$(AukE*)RLFb7lql^S<=?0hSJXAhcYV`%j<*SH4HSj-~0Hm`CK z0n8}*6F26iJ>~IqBr66cbHl(n5hxMUhS^3*jK1HSv^j`|aRBnc{#H9YtZadnEY9%1 zYJyV2c}HT^-WD@z67b_CwgfE;U$BZCQ;q```;1*wC$Mn%Owzf1xlJKQyt+dQ=7rKM;8czT zX8SU8=?cPjSb_|;crnbTHGl;XTd9Z=!upG?jHG5cqVT9%;4nPTAjjRleGBS}h>Ud# zb@KXh1Vrp(+5Bmdp82z|%yY{`lUi(%=!~00v-tUl2fQFJ%(*dnKfZiUw&l%)N9yu(rGNN1 z+s%}ewKw4zLuKKI4TV=9HjQ(E%LB-~Toxh8*}keH>QBv8V)o+kv(*b)QQA2vc2tE& z78buOVxr7M{#vZ>2VOqJWQZ*jQAb@_Z2xPqy*pq^u$ExznNO3^7s@CoFS0yUX<)h# z2bNuO+}CNVqo!Z#K-ab)c5c4&4D?qe155pdhPMu9w8C*5TtrirPDQ7=|B!qJE6o*o zGlj3DqRW80`wQg9U&p)bAFkBSm!;y0B$ljpgj<=*kAzN%-Hs`aW~L*S<`Fd<2aQfI zqVi7gL~rY>W@nM}6!xF~JJoFR6>cSxfPJ!M|MEw(@8z__Hy=E(46h66kJFo`81k-X zS`IG=?I+&&?&xH=dnF&|^;5F6En@pH3ZLedUz(QGtDl}q8*6TVSyZWmZ||u=yFP@8 z9W1JsefQJ+(8S6$NO`ruUw1t%L#khJH)@_D99J$v|-y+!!JSfQcFvha?*N z=7qz%tsk&$jZ8*yQdPOXeSp?eQGI?@)$Fb~xeU}wcxQQv8rS{YyiSo_2b#Q`Zo!HP zd)g-1F;_%i`dPlfmt_Bj*jJv9W!a26EEC-8>{MGLR23BTatH)oZ!Elhnlp)$=Z}%y z#z&vc?jj`)XiE5hu8isdI}6e~m8w2xD&1CD7Pbi@|Dxc1_KEIvKZ34qa-Ic%^zNI_ zEWzWDx6qy)re}KJ356%7x12ZikKdm|@OlhSxPtT&S4Rm(zL2GR=Bg~=2RV4su(7>v zjtmr42}V;5a`fzA?<2dG z^u7<4u9zj>6Q6_IH?TPa&zbsnv^miwam#=jGqJwB$EXa6nYY9?bvznuxoYZQxQ;~6 z{%z(o)i@6@z0I_rsdoTIgMIU6^AnsyX7JdXsAjn7^6m*#dSaN^<02SRUq_YYcJPW) z|Mu{nKr3>L?iLw%bNh$`_JC_aBh~7om;|@coWS?@gk`4XyW_!ClTMxxC(UCNIc{s7 z!mC)(-VKwut$6WYNQ`iG5jQ2a z5*e|D?+sCl_X}q8UoBqFiNwJEh0^)&Z4|KxK=ui>Yl3Rc4{l`bwQ`iP8F!e7*6y z+MqmLxr&XtO@q-o=DI%r)oYfsXXd5;=JD{B@h1B60LL-^Qa**Mn(>>}r2$-`ORbx! ziK)>pxJ9WIZN|!4dTJoS0j{ZzoDC>2n0cL;Xf!2+t{xlM)fz@0i<}F|4jl?U31VXd zfT-!|>A6e$r3MzHu#L=(VG7-02PS7{@Ago9rh>?JeTd#I&qJD6BImxm?jSY(a%co! z>-Y$M>Ty*82Lr8E6Y_%`!Gb|i{<##Vln6HSgVqY9(C?qnagR7nN7`Dz1jsE3TW%M8 zESACU4npnwBdEcVfj!bo2|IRikA}W30737Tn*1=H%k~WNrAU{)jER+Bdj3IDva`0{4Wk zs;P6k?a{84*7||I4tcMR=urD)ZFy;M^iM(RbM8I(x#AZG=xPUuj(>Lb=Kw1t05&1a z7~M>z2N-`sI=eu<(<5?W$95e8roA8zP+IBS8S7xWIv;=D20u#pK2@oAfU>QD+1aHt z{Vk-=`j=?}p=w4UZFnkowdNj{NuAH3W{A~(wof)X)_+(?AZp3L_~a(Rr|2<~%ZGZP z#YY3l;eETADC(;@!HXs|6G&@ zA*Y8Q2jbBKP?50dsKzI?mn|W^wU3*zTc@+Lc)4jzI?vxy{BZ|>VN1ib`kjd zeF}yq2LwI?L?6Pan7^(eo|x;M8bEMXHMu{lH@64(4-Fn(1;yU5QOzToCfJbaEpz>(lAArt4Gt9?1OU zxD?8zoi(xKJ0wM zDrCftIO>}U3NJUj!DpXU;p<>KKP0y$Y4b89p&AS%ukX?H^!cs^ZAFgbc@ZmnL_fOMICZkrK=Dm3xJ9sM!sYr@?Jzb?I0@2gpX5V!`CdAV zvR5#u!x66DH-8%2n13Shiu0b0A>$-24wCuZc0L7zoDU^E(*S|dG*bVbCKmn%>B(?^c8qOze$C5GJ6HUsQ)>NzIw_bVt)cve|KzKj>jaOeAvA`XQudvNlb*^)wDZtaRg`EAAEPzs~06|qyRh3ert5M;2tXoChpjJiGi zlw(I*axoAj>qtc@^4)F5-;sJv#H_G?89!MXkz(6Ug+|LXP?((cE=oY$7;3!RFJNTI z+#L~hw|pD)9h91B9ixXR%R}$&@N`3ogN@k27+^2m@BK@-(Wa{uU_$+1=;i92?TAuO z`-U>Ta+LfScIet`Ky0BUBdVMpzGTP{Tpw+9p9;%DrXa-MuWCd04S&=D9phx@m^;58 z9dAF7>;#DRP zZUWmpy;afVj~!^ z{ZDakkuHB%KN()7V-<~h6ICF%5VV`6fN)R^(RDq|gOMwcu2*HadzhYDm3_-$gW0aH ziulTBFz{2F%+SOq5~~vCc%iZIO4|uyz5)D{!O_0 zRzMW4Fo~(5GO5eRKc;8-S4AKw^~;nQ&k;v6i3f`Gc(PC<{g-Z)57{_m$V{c>p#fB4 zOKf-PGfVKd_V5pE0*8GbAGKh5>1e zreb`5ZEti_A1#c=PG3(YjJLJwbo!FrApB`+e1#Z(Jc?&1?KzbLUsG z8&(p=cGGd)Yi`oS`BrYQI00jB^8mWicNzYRkQr1W1*@198lcprrS)(NG$kbtzJHXFMZzid; zPiRNTwUP;aZ^3uGS}J{CVe|k`w;8t8CpgmLCo2*fbz*LWwA#HYlcIdJ>KnBE!-rIR z_PUn3Hp!qwm)p;zN988XBZL6!Qeu%&?mFifl_L6A#GhN0PIXBb`qFmhj$=b&7gL

;f_GT)xmEMq3+H4TgapN3UgkYv9s9DyoVqyy8Yxb zDUoGv-fyB>>mB?LHk);EU5E76^EAh3d!xk}p^w4Kjl<~~V{Kl_R!rGxo+3~b)vD*Y!9`8%OIFarVhW*8d2}2A+PbNmvb22tfb#;;n--Uw3cQiqk(SnDllZRXjDj! zj~O$Lpb2%Wt_=?(r`pj`dqG(~m$9FM3z~RN=^qqp-2TAFiD2y!eLlhIrUfzu$yYcK7o5Bx6JZySD0MK!0pqiHhFV={On zN`aFWyhEC_qNu;_S^yM+9W}dZfU~F5y9QK;(R9<3MbU zsh8A4xOgr50S9$D%y<~3u{+ox!aM9G2QeR4v)^T6e8KhZA^_Yl`{#hCF2PLgcVmaz z7$2@tOrqsXZ|SDQcTeCuihG&hjf-oT_2J&wR@)ZlSb8d^KPYY)1p0V<3fJ|`9@tcfO(zAl zGbPDMK>XoNBpBj0mM&9oK}8bk40lDso!ZPsI;f)M)z* zDo#&+XH|mZH&-~@&{pR)W3MCS0PQld<^Zw$CjMKN+$(@L{ZasqzdInC=d2cCv!Wlq zLDZ}1FrzgrWy7GZiPcynZh(#~`k`8}m252L{^EN~=bc3Z>=uK>@baBeWk?eml^#*> zaw_AF%z@ev4D7xYr!%^?yoMsP}%43~9u|0o? zo7vmfwR&K02;~T-xF32d&GGtT&|@a^Zh^!ZNp=Dbeg%|IZLNRE^t)T)!|ww^RC9LK zWSKPHiEkl@IzDnscdC?!(+gFeAm3dSd73mMJPe{ENm8eoCgQ$ zFH$VA+LaVTJ@OFx9Z}y2gasHkRa3Ol%~!t_|C!c>@=Ze=DE_F}yz_FHVSFX1Eh60q z88!aHpZTUHgIEN*u{X`Fy>S30<=>cY9d>SdtT)=|M7rRv?qNwewip?=KS;nlR`Lh; zS!5k>PCEPjb6;p2bUc3CaUf^u4-AWI1k%OezZ9o<2hgESMhN#XAC!#wJCllE=}#Mu zwAnnz;96_h50P~KPH%nA(4hwUdclvg5i3mbbbaVug8Qw1M4g=B5Yqd{8g=fAZ`6x< zS`Fx8(*8WuJma8S9)26y{P7cC&MUw9Uu;=Bz^lW-nIHK`5h%*B$n#YQA5Ui$N;qrK zf^%MMPI?xOL{}P59hJVXvz~OI7Kr~H>E zaljOJJ{Idm)&wpoJ(=Wqmgc22Jb7k|NGEy(Iox^ajSHwmmfT*-7TE{;VgIPVl{6+N zQ2f$z4y!jIK*^;%_@rTk@y(cnvI)TgI6u|J(#Su1;U&nIYHT}7F?Q#EZ=n;!DAY=h zNyWi7aUJoIny&eid&^b#4zt*XBM08eRPlON?RoON2S$Rk04eUmK0s!Tkgoo0lCdqe z{x3x#8HuOUxyP7~H?(n;(}oMIRiQlA(zi4Boi5eQ-kPevvrR$HDDZD$8vBDYpq`U) z9hH==6a60ypQbWX8`7`yd+`-i%u26FDj=J0ym>q~rhSt5MxT z!RGATpC6E`;g(eFR*zG!xMx#VCIS(E-&8(iCM_6r_aU*_5kIjyK}<}K;`d0jQ(JM5 zO)+UF`H*20&VuXx`{{GTuo4$=xkjGZFR^FMN4c`;chC4tbA{`$VrT_=2gs@%_7Pw; zG0h*X%!{g^E|uRS>Wb*_$S~4Kxvw~t1rJFA0@$>ytZ?v%rl_OoVEZOD%{uPkk3! zW8VH8*e-4KtH!^*opCWj3uC&;4_r2$FE4@Gb3b}+v-xi<)mjEU+Xp=mQj+5tO;?*= zmGTZkT8?VoD2J={z}WxgX-W*A#_)kJWOv?i*|1xK7q9!9%-#P@0pO<1nJXhfbv-2s z%6Vje3pUH?B41ivP!7&*jT`+%D-o1yr6$%(1KCSNY4E7}z+9eJkRYEni?CWk9|!AF zst6O28_{3IJcTlX!5k$ep63CEMH!e{Lza>b#x{j4wy_>r_1LZI(bBeNoPhcsN(6hI zX(D!x!G9+#-b+kB4^#vdAMqSMEioH4Y`2y-;?T>sr;tQ*=3N-cZcGqtf8_e~bX!{` zAel;((I3l^E@F)?BCuGV}Ef_*Iy*X+W4uj zS)V$cp^z(A2ct909hP*zNztx)(J|#a`J=2vlQMp}Jmb3W&mtW9 zU;c1m#Wwc1a^LE^{K(}vBe$j@L1RfOj2c~G2phk|%ZHI+AXSdnc=R?sdLz)|)Y*93 zKuBn(;q&^&@7@G-c^YCu!MZ*c?9%Spt_4@$3aGwlr~VOd-F}N~zrfMp7voRqm~OmH z-Yr5ss_Q?yHU5vAmO%WE*m}68s5uX(SN`{O%oGmSiW#IIZ!Y|2a8mC#B;#B72hyE} z&C|gzL&=(>zL5CjH&CS0jO@$Vww46<_Zh>r>1N55`Ua$z)?hPzC6?|JlSac~%CToJ zRe-Eq((7dE&dXybS!?#}dcD&Rq__9y<|26lVUQV`X)K2kW$9#!LX6sb{61BH z@BEhE)C=s+tQ0qtHq_EYNM!R4H1g`enfy%9BxI&j%Pd3l#k)+b>eZXGTsg0;k_!*>k-jjqJw$x&+{L zEL=)r#e3!x#cP*1A==j3+>76GHK3WMH{Vo5^h+_l4~08NNS%w|hJ6jAs=7{!5jEJQ z#Tk(0y^FVKy=OOLuxoL;`l@tg0+2elwX_PC20~6;@I0(bNzooyCA~BT$!BpXwIR~J zp>O!|qe@E0;Fo^ODukXWu)j?UzDi`m5e%7YKUeKyQenTw9h2-_)vXqCj z=g`A#0H-6jgIEu-1oM-i^z@dxcIls&uUbT_^snPcF9E@Khsbogb}1G6D8LkMv6i1C zSC#+N^;H#D7ydYsgKz-EnQSzhZ@~Nl+|}s850uKM$^3nfVl%AjM=!x7-i{i{W%>fX zcqR>M*vd-2ryTKU@(RP!@W}pmw&Et`e;)g&q~^bd@@Sr$(X6ZU^hyvh3yqfa_lAnaxpOm zex(k^559E$om5*Lhd)N3zq>{X;g=H%*d=wVaN`H`fN-4BTPAW?DB#aO%&5uKD|lLT zjp(U~d;XmaXt$rNRl~O`5c7-Ui+0+!kp3cO_Ie)7p6Y?<)$sz|tQ z`Iz0bigFw7jMGTC-~io!1jWUjIn@Px5udBCyHh8w;fZkv5@-AB?n9raiP^4N7Bz2d zI2Uj3@3+lo@CDVyqhLKm9IgF{GyP{-lhpO>n7sskgCMk2dTUS0$>zvxbl`7CW7C#l z9!Cec$&t&%{@3U^4aKFomiFM(E!alEFVMb540zu>umh&0(gD##v*e&Lk1KS*4maA| zrxxdu^90r$8o|8X=Nq0?)?|R>-##rji|nU@5~~n@gCq)sVRltt6A8Zfg(c=BC6&=0 zvciYyq!L@dJ>~6bky+zsw_xF?DrK>`QbT=-=};(it*flnE_?FClh<>kQij!s%=hIl zKqQyKU_1MD88FkJ*R4OiJ%DKS+0GLfz~Bv5K;66YP162C_FV=WWYS^IxYqULbk)L}OXZ%waLl%j{KHz4GR0;|26B!l*v>Wo^ zjDd!0Wg+1?6GnbD_N zB4(%n0>EZfatOCGBojSUzxWT&h#e!j;VfmuV8~{@J^ymzcBf-yT(I<9mcFo}pLSHS z_lWSRL*5BwO8>hX@ev>hi788*?ZeQxE6Rh1v0H{Ogz`<3W~%IgkA_p$KGby<4$y!>J4VOGcu`=9C=M%{&9<(rA|7FqhTd#ayu~wbP z9hg=8Ri;{a9XsicS|=hx8H_qy&@95`C5u8J3_}ejpHI%;<>p-BWQEy?cQ`xM7(b1H zw=tH`GG>sqaI0Bt!Ab;LH|Rj*gZUhD77E* zUA_gnXot(t+b2h*?F5(9T9+UYfsmf<(ZC`WQ^KW^ic5>|eHDg297Vy-&@X#*b(Jkq zE8)~6ep-t`-r8H2C)u^2_{0gs2{IymXjb%BFwrO1C^spx;wG1CieY^Tf>Q$aQ>ZW9n})tT5F)Wu72|Jti~rk0zVjybEnf-GB4E{}YSv!O@~xdiz)`uz}^x z5~BP%AoTc1Wj*&ay~UByz^V4t)`5=N>95oJff+M2UO~0L26^Rz@jx80a0l+;FnF?D z{v1h?1!mMc8V}n92l3?>4E$p4!b>0`zU!S0p?pl^5iSVin0OjVMS7(aR}YY8mnPb@ zcD|~nzIH;yEj8?XZ^kF~IYFrLIXA`T^gYu7f1hYdR1p4C#Q#8YYH6az|2cXJJxWYx zD4D(+-p1(j^H6}N0FT`~e1e}FoY-+{TotMRv0Q5A@9fypZBhCjk!iMv+=ScZg@JM(~-T%k@Ad0chYgAH_l9 zj~YL;=l2$WNPIjc-Rl=P;ScoF*y=>wWpq6n5jbf+joxGDh{bYYnF(T=`?Z;`U+-uf zU4A-xP~(qOd5|xRs9Ruvog_ACDDZFLo8;4zDb-Y`%6`X8vS(*sRh8K4T-%;GBdk!z z$X4QDb;;1VO!6UNUYh}LcZ9I!=3fmG$uNI+nB9m>URii);8N2lwPaNaP}MbCL}MAE zsqZncya!EPv$SZH4Hatxp?HrU0$*EZ-!zc))8tuWz_7d&Zs{y`kyexW$Hoad)X%ZW z{8iOQFKW_}+ex?E{rCiqL3y}f#|b=J2o_?aN~*nwXT6R6%UFTxZ)IL7weHHf-_2`t z{SmH7+NkbNW~*W5ZoBCVI~u{%UZxq~*e%{E&TW}3`7l5=t(MJM4nM|491f4u4`Ls) zTKSjWfG*~n8vpiY0^j$+;*EV6N=OP&S!Io+KZ$Vw` z@tYgKmW3&?UTq1yGg4{EdRgz-Vb8*r$)HoY>&YgHbA;TEe$xb({9W2pc=7)LYe1C0 zu#uPYx3lz&B2Kr=g>pD&8kD3&%aT~k)49E0IQXrkz>4?QUF0)-PLk;@xo-hxHfF&F z=QV632=kQ}S42rI5|iMD7(kZl-N!w^guH6YBG=k_h)#T_qIgg$Q-2KTfHy^jUf}dN zaP@cR^f+>u=WkN}jYOs__ktsEF&}k&Xx9?+yQsZ+v==C7`@qerd%d*3wrr9cTP@jB8 zNqXMMrTm^gC!hZw&(t{wzrt7Jr?VU6KfL|VEbTmU2-DqL(-YirxGg&h#JIXuKM89- z1n&>vK65r$1EneQze@yOT9DSk%yeo5VrX=c7*=8?P0va?pMUrT4}Ts?HH2?sKlNp` zt-uCbXu6l3NI|{f{{gJBxJREzY|T5`#B}aPnPmG_cWglj4W6x> z0+8*Vi>mID?HCaW7U#lCeg*~7)13J86T>||Co}cVCij>k$+Uwe)R5;tO(Ijp5%z<549Z1| z8pY(<1@bt%(q4GFPcbD_QnL4A6QD9l=1(w8<{KV3NW^3F6?KHXI5_HmL+FG?)! zE9UK+KVL`Sd0owR9Pg>Eb!ibXi-kXfm- z7JnIuP?thEDeB5$LoQbF(~g2sHE3i%JF320FFk$Xf>F`^dL=R}Kk|>-RJEsmKvJq% za?ITbyUY<)cXI-y6Y4W&utA$Pzhj05D#jDbq!*A(#-Sn{f-v^m4@}jYe8d!mIBCl- zfxaRvn#OE-;G;OtEbk7nTORikom(FBz<)=4muiAzxucesjZbi#xs%0LE+#R2gh3-+ z>3mp@pvywSV)q*qU|A?XxJywz3I)g#1OoSilp44nDb4Hb`8;#tZxm!;DO1BWw2sBe zSvS*7`jR^xT%M`8B6$voZ=Em=a}>Ri=uuGm>YEeaGA>sO#V3W{w0;RMOhST3|9|?G z*f0$e_}zU6J>|y@$-_0~Wl_y^A~br3wJrxTJ}xM!@%j@`cSy&`-x_hQ-JG2Xkq@Oy zJsAv#M=JjQ*@_?NOLyiA>+)?<{CfyjtQwPA2gUxcvjrDTct*6lWvY)7-;-u=1taV z9{35WwZ9{7Bz8bH zbr7Pt8e3D2G%3y~qF~}|yjQxSq`bFMNuLQ0=u;okw_I$xvY>n(sjNEXp>Pxm`1M)e zAsTWtA3$z)&^#M=>xs=MApGFRU0RrvH|uH6Q0pb-j0ioSg!TMlhwD(_h0`CUI#T#D z(c;Hzj;`*1CQ3=clz-e)eh2+_X@qnnz3gPvs!gxB9q|i(b?JO{?(Ng}aVNFh4+(r& z(^O16hKy0G747uW9o~2qJZ(b`Ir@y;CF_}9D;-dW_mbhS&{aBWyIB(?lZfxRWs$h2 z*vnEOBYZpcxug-5xEn6SsZ)WFK}nK`*AS49z~|p00bkfL#DCM#{F^n_-l4U;+ikmp z^efY&#P?oI3nvX&yu)F;^&HFY`9$gIA9;zh+L{zGjD09)15d~B>a(bmyQG>Bky?b` z=b@Pee?X_dLQMn~8~Gv8VUV2nshJ=CZts`bK69i^THSt!6 zsF2}v|G8Gc2T1vn)BRSx*b=qq2<|ZS*pEUldpt5(fC(s&-{nOhF6vi-Ys;9LJo(!l z^{pgQW2!xqi}BCc6n49`k;WsrB+}w2AJi^icf^IDU4J4~9?Qp~%?fQ|G_5j$2R2rC z@%(3$2W8^}ttDYv8o_D2fcT&_+_2Jxuai`nv4KJO1oSb)cO|VKNxxmW_8 zvAf53-Qn&Y-&d$k*HVRkClyr_VTITWQIN+Gn+WU)Qf#lRxZ| zGfFQU1b<%EHvX=9qPyfGe7YefPWX8-Q!e(3{(z!<2WH#6=wB)(JZMJvGw$nQ_bwH} z7+l=;)UV(GmF>t5@BG-l{7wfhtY$V%BDsnMp-RnMh zE2{a}J`Ui>MBfFm{l4N|81-yyIv=AIR<+Y1qJh*Yr41e$l=i8!1eL$cuXqVek;~1r z?bh*mOTjIY!5S45HxM)JLLP$aLZCrY)PI97qOZM;CsPUb7Fm)PDi#oLp{`NaDCRgWR)wRpv{LPD74U+Xu|-X}}dPp6KoMFzigt_+7f?zVnl zcV59(z$ZBHvc0D$t=rA|k1$MI)_*GT zqVQ{SY+^Q0E=9aAbf4i=(b^b{cHw18r1SB))=Bo);h{#&0q?%VTK$nQi&9v#u{;2I&p(R5RV9@{{8YgP8{M;6p0Q&si+GuHAF zls(~8b>bHsGu_|Fw{{B}+3>!>PL2VOHrK)})F2HqD)}7gGGCS0QlO4DyMMl^wi%6! z3Iwc03rBwG;h;Y$tR>;&S_PUP3W-a1hL=BhcGNc6e2N(jCROAsu!h#$gjaxtgTaeW z`&F1}R)MlTWvrUAp>@NL`vT&x=bB14#TZu{7WhHcF+>X|N62mIsVBTxt1(&b_$7(% zR>EeN)*EXqcD|lITYVUyU4Orsvz*Ye$`1~&pm_;=Y?44@A~D!k_M;+igr#_C(_)GR zG$|ck`@?5C(gR*oU7xKA^MCSD1*#FEPgbT) z-4q(eq8zub4zZpcj<=AgssSB`1qp&S);f$z85OFK1>G0vBlz?p<809&rEQ=fn6T`l z_ap%;>edn3NhB-?wV?nmOS0-MZzhNR7DXoKe(k`yDIV0+t$X9r2gF;p6)PL$IDLXeaVhBJh4p-tbRkNKD!478^iH~M#_s8Why@K!3Vduxt zftB8fd*SmN2C(spw)mlkm^0C`dCNGNE$YN$zbH6Irt7&0q)_sHiAU+%92Sy^vvBtO zw(F*y?bv~4+2EedRsJBGiJZ;DRVKTfN2ub-8NDb@%meMBC4Vb{8RKiokS)4Ia|@}_ zawzVHXL{X75t;yloTCgvs*QYu4xxl*$*S%>G3S(+_0mm$RZ5(L$S%+&LUsHo^`gHr z6lx0Ovw1{xUA`O!%yjO03D>vn&SPOToY6vU#SI0JU;vRhcxIKLGW6$9H+CqL-}&HI zSA6@RyDGGT?|*G}6;YhV+0c^w6l13CMv4_0d3^uKD&9tf@n&y4vCED@j>0&(7oy$@$U&Z`?&-F3D&c?R zT!_l@pMds!A$l1F^VJ6S6z``do@Fi*@{5X=3$`%y)_-5KCKHnIk6E$DkQH4KQ&-FN z74+>)zKwm3CGm(Jp?SJVjS=U68LOmFjJHF4)cwL^v}Nl%^4W(whV^}Tm=b4f2jA>S zH&D!tU73WG0div+)3L;W;d-=7Wg+Qp^LIl!9Fc8yI@>@^xKvv7 z@QTIRb$`$oaYxsaIQnlDmLDteNa`zm4U`3e339RTGACbG=&6yMq%y3|e&^)QFo@;q zM)azyoZTdKp2DnfnYpz4sD@7 z+K$T+_~b;mJ32(;F6tk#+)i&^mW`5#lxx^0kn2vz_SVm0$Rtw_z5)@?vWa#if)^5} z6o29ngB+R6;y2!EY76NNXEStdQqC{cOc8d-fsyN6JysiMHz4%skF-7TI<0eC^gf-R z>L#~Egd%g@G^0>>37IYgoz-SE1W8({WJ-X5ObHU>epju#?zY||)uL5oGJUWhRx$Y_ z_=D@p1T`(hl>Wh+3nPw%u(~B*%4dRpC4bV0zCJQC7&amP*_8N@g4Qx>&q0U|0tvcE zCj{x2KHDwvF)s?F=6mn}Tv)=A^{&%Ls^kx8YmKaxfO)$J3d;hz2#>_DS4h!) zysSn$+6ib{icxe0#GjQ1?$A`R;D>IK%LYutHB>ZChh@MAPi&2iPZzTE@hKq?50kda zc&}Ne14t$P9W`Lts#Ydq&ff(j(|@Kp-Y;+=!1XXs<=3ccCx`^Fv7rAfYfNswi9;TC zrPpEBs4_nt6(NHgnOS7p#V>AeC~BIU4A8F0;*9AY0f2QkI%Vda@7E;cW?>334%9sq zYJ;*B>?WYxF8neE__DD3724tm1S_u~%i-4mb1i z)SE?J71&T;NV%Abmo$))rfMrsEMYzd@r&9|k!+bi&1%=7nm$O1l>LLv?>bxqODxc% zqsz?mrl^s~dM$3Gp3b4ig+Lqu^;~`m@*an6jdJy(_IRJF8OK8VpnnFX)^s8TN}U?j zG?p|1Ch2cje29(wmC;(nM#oAzld>_xlQb0gN-zvT8Y2d`M|#K6K&y65V#U$oZ(S6& zs>YnGU+c5&QW9%=-@=pB5kf_Uy^!`1Ya?$$RKe)PCBiE&H`%MA9=karqNyh9(MHu4 z{Ja?XlgHx`l`>I5lYfOz%5^6b_yHa(?=N`ZbWlcYp8x`|oU4tUHmA$mkag`h!kdfJ zLx1wM8<*RX!c`^6rChd`r|9GM^@^XuN+jKS^b~I+1p1mYtu?OkMq5x?0_MN$J}R=v zhpacpvCyI-neiVWbR;H9eE92x0d74phQbL%SkLQv6KB-!FMsJK{(R=hPU;B@@6I}% zpdN+s@3SOF2n-lSGXkTdb?UVimZn32eVn)Y2S(i-I{t5Bk50Ggm^FwHqpHbN+6>N! zr+D4gW%{Wz)$u8I6Rj#WpVPMXxtrZ!5 z#EWCK$|T~FV}JjY>_W8Rr${oh>>2vU;7770d@1R8VZfN^ zQmVLPzdg4qUQ_eEWY0RUHYlQSyd*uO#(%BCGJR{kiv-vOh|TXzBQ0V^x30x$USDo6^O8?8o5$a(|goTb?6=*zOCK6bq`88-A7pNYM%O z)pWo}?F?Tv`>)_2<`)60P7&jW*#l3IA#F;{R51~MdxL-cDH&N!`5Z)z&oA>ideLzX zQsvhO`HGAQ9@}Q_;R6vq5)!2@i#Q;@?<~6}QQEraYUz2k)IaL>4#!qmsLd?*EyDWC zyMO3t_Rv^e2my4`+0<;87v^O~5JgP#WH`5cHFV+;e25F*C^pQ4bIAzQoJ#QgpuhTe z!4;1l)>Jh;p9+^i_{ijV2mxIbW|HQjDsXq+k54V^Cmi#$liQSVScsf20y#nN0wIW@ z0jV27J~OU-*{qQCO$9%wUWwt-|6DvzWPfz#oisiuRJc#$x+2+wwo;YB#e}z!k_(R% z)c1z09A6*YWe{8cfLTUKt4Sn~3D_iZZdv!m1gha&AG->4v`zEGPz^i5^Q0@>Zo-%A zdlkxkyHa-~p^3w7<X#~9Y;p*RIPQUR_0!Tkb@$Drhu*4oq%eMz0$l~|20B%Jdwz}p=Y-p@ z;p>pD);r>s5xqALc4#wgh%~Dt?0+&ms(~fnG*^3%2D)Mg%p1`_!;nWxu!XWN1WfjG zF3ys!SoS#5w;+2`?QZi41_=j1GAwCNlqb?vtZn{XMqb~_YWOL9Q>_*waHUBP=$ zD$z<+$5>zx)ilNddOdSDZiMv!*=L}8c;pbxJePD152*(P>Y_mImp1oCLw^am&@}&` zS0W|}Mw2<@xtg?lYi(;uGlN3OTR2bXL?fhq*XZMnT>YIek*E0`>G4C1z4m-f(Oh2J z9Qdahc!`)lRrJ^6R`2zFaWzZk^z4aqE^Ij91=w5%9T_Ijd{Q_Ij7%X!ef!$7&Cf1&fE^>Rv62Vd52ja9$SKGk?wM^*m4Nu=V?Rqn_|6t3z_EYJ8u{cb3H6@%KnGc)zQ{j}ghp%;#FiO(J_GZ4XWa64Q9O-XL`oIBb8gYk6^BrlQ}*s)lX=3a#^dJDqAYY<{HGP5at?#d1c(@> zJfb7VX8Z@r0)Oh=laA`=;9)Yp zi>t|T77q^VUCHUq_*sB+Jev8IzJ0EM<77rSv6X?{E}dK7S$?I|&%u^X^EQ%YVs%%u903@yANod19lNzuR!A zfqj}y`s1Xp;(Cx;y+IPE2|4oa%Yw}T15Ylbqn_t)lg?cWGWKV@9ly*Gjv)`f`Ej4C z!Tb>PIZsrQWtq9o?TYGI8VG-wsHzy^Bc|_Xq=kY+-5p}UHJJsprhSz`Ft$_`(l_0A zNUl6L|37-K4) z+a@{&h)@Sf46rp6aM6Hfdk_uN+GmzWa zB3AzOY>p3JVK~0-%;tt$9|m~mz-7VF5|m7=dX9O9gJ_R+(^4(OvmdQi^N=4vf)S`X zrL_F@^8umjhvTQ=~{hx!3R0)ganN1XLD&K{stFPIH#}4QD=7C zuB|`+NYLqG@u2l=yp|_)wxlmu2*7B$VXH=Qd)YTtfN_-BQog(!(m$0naS6EwH#B?Z5QIi21uyD?V-et)eoMGW}3{GLJ3pyl39NNSkxX>S}`VW?Y7I3fcJ zD4^MGyw`7R=E&P*7Ej#p;bPApH6D+5uwrdbjJO%iEjIm3W6RlIi)9fYg>*XTP>})_ zP}z$SLeWv>muk{K(?=7GmjrZ8KOf95_q`7y+vP{3?Ei{lgRoo$p^t>h-ha1i_s;A) z{OqZ+4L*Z&hIG^J4$XR9x_$M`>OJvo`iMnrnfTJ2HK7h*jSnOD7^&ZjOgBu#MA!t_ z9$iDfe#6T(^q|ZTcpp%2QlbF<7WUoS!be zpeihEDhQ=j+)SA6)1_ST^jb7JEwXw|er}~CN#0Lh?Cwp$%*@6`5;<+4JBk${^K-78 zGKwc6L-;V3eWZ&97@8>>fY_|AG}IwIdW(WKH^8ghnTG-7W@mX~G69%BjoN-51EcZB z-QLx|v}!<{JE`EDfqxU~>jzqB!^8EEQ#B$}Z*yRuIo09J{OG!Y@&mj0vJouq$239}&^%#}f4yY((7+Sg?~8YiYw zdfy}{b*LHnMS>n{d9#*)(-;Z!WovN&-~qu_ZOLa3S%1tptK&cffoyqV@8Yv%oEJw@ z5T=5My`@n_TPy_bMVSG&fh({#Lf54ex%+0+tfvMlRSZ+$;aXOpJM(DO^^;?2lR-Sxj(i(JRd2PlWMX6G=Hiqq^xj9m)NiD~ zI%1%(%740{S*yf^FSv*%8oILy~<+xZZCjOMcIuL>BJ~gO+0$3@NCklVo?l$ zP4Lr8NuNuI|K$ctd}@;P=0pZ%EkQ(VAYKn&W07KVjj_g@a;==h;%~-laE3&~>vk@Y z{++?EgTz@a(EShM37zkFb!?uLCNrvd_R)}i>VNH35@OnVJcPy;38DxQ`Aq&nl|Cy4 zRsP~zu4o8%7I?%NTKlnHsHh`gw1V5s>Ce)TW22c6-t%HrOf z`e6_|)Qe|)A1U@HqaZFohGRMiV7wgHDhOaMFwJu9LO?{ITz>q=%62JrsqWeGT>wOa z0Q=7!bYFCI8f*QbE5c&loM?@DL1}DBbbp{nz3Xv%aM(c&zr@&!beZ1Zw+^A81qBUX zz(~^({L>3-feA|tEzsx4XeEFF1+TgDrJpJpoSTLUIDMyNDGLjbCSVOhNU zYmo*R{bdkQu#(1lo9k*mEo$;5`s}*P2At817Fr4o#<}Z#cg^WxqPu6J5H8U1e;3)Pwdt=CT47oBJk-EyxxUU~D65Y_3kSbZ99 zAs4if20@zYj+GzZJg4?E^-dgtkn{^HQ3}_06VXo4H%3vQVLBPMOC2l^vtG2|yL;{} zhjyI*vw!B*P`%5GF|iDTvXgq*_J0*JkCT`vu{juq_Jxt|m+;P0?!({EpPxJhoNOt6 zjqy?w!vKf16^)y~8fP`fUeGs2H>Fo9zbUN5y3 zJ9q0&wGudu9QS3ce1<| z_R2k8R(Z_<2}F-`)+4!recD(Vhoukq{DI-4cC+o%N!?2;XBBiSJAAnL62O5(O#EKT=r`|b{W&01GV*nOTL{*lK`D_N;?s8e^}aRh34bldW#ph_bDLyN z%eSv<=s!A|3o~5Uk!?OdccGTPMmm6c(tNTsqn?}7y{| z(|Sod_qhH3yQx7Wrz?pa)anY?+o%A{Lv8PYn-XZAZCc6*aaY6=6~kf?as(wjQ4V`1>v$)Iz~TonDivTwwbg}0kM-{?-@Xc=gW=o zmlJL--dumo*Jo~2^ttOK<;xA`kb^~xe$SW-|JkfiX0XKe^IU9eaXJZ zjR_cJ&jViq)8T2MZ()qQEI=CTqfK*~@Um#nC1j%jh0sB9cz+SXUoalKjiEo&qf0NO zEiCe9i{!4(5hw0u`&5vLk0ofG6-G#leg&&CgH>dZAPtD3eu~#!;wNh?Kh}2xiI2X; zb@V_^^wEkJ)#N!PXD7X0YXFFuvJY$TmTu`ty1gU}Qk$Gh*2tGfm zMf))VU<{erZhY5>VBCr`4(-M&a5O+ex3$gg>}_Ln*U0v9V@dFb@XTzWLBfmunut?S zsIfTjb&m@uKWq0iEYLf|n&Bw{SN1XMMZT4KpiGQ-L4V0-bQ*pJ(To~>)0hW=!d#@r zu>fmhbCioL@i~mceCkUCU=m3Uhwx}HrJZ1>oC&+eNYF^9w2Ef2WEx)sdzhox(Z$)0 z|46r(K)kq%y+s((w-eu2mN3+WjKy?8Bakj_72LO_dDt17cJ&MbQwz(}GpZi}y0r{t zQ=DPX4u4X$ZhYTmd2J0XrrREtKueZd>=d0bmyP8L8xb)uF*OP=Ol59obZ8(mH8?ky(G~(Je_L&D8%GZQ zu3xbq?@$=?{st5U;x=yFB(@VfFHKP#WO-xjDoc(er%8YPku#*cD_OFo^#O^OTJ7>7 z`EWR#*_90;RPrwkYaU-_Wm1e}RFRSHxkFiykuK_)Od$tox? z+<~D%C*SkdSHZwF!D{%Q0Mo!3G$~oQ2HdKYRH+J4qGpIeND?BXfACVNEPy~XqSElK z0du1U3zani6dBi30ep!Tl&c74MQ6dR=v)=O^B{pyF?ds{WZ>Qy04;@7#T3A73CtuJ zEl8j_DP#eFtE2&3!!2N=bUm%%w&cKDZ47+t;S%kQt5N`SwFhbw7*lDqCBZEa5OhIG zn`48b0w;6=)|J#Ae_)b9(EwLQf?@@ix}K31&pI&1NDQ>}kRnEcHA;r$E2FZqB!La( zks1li83kbnQWT_#Rv0_2Er{TqQpP9{Bg6uN251ID3f2Icu^4d=31KW`5ZvzoEdVu2 zMei}w5F%kN8H_N536j;oXP^Vp7%~h+jm%qv`Cx%WYa@ydfAY&Zg`!ukXPrYaV7~gS z0W%148-O7iIrZTJBf&!(F)P4QgCY{IG4Z1W8-VnLB4{w62t{znI86VD_Cice4@8gS zE#=z+rcTPY0UBguJ_~3zI}{;?%Bp-8a!6Sq9L&K?vcMUN9#hVtkr-5q=?5a-=2Yzc z_+w9;eZQ$Ie{nDw&wr_BgX!>QKAHCN=cE2LeDh}i)4_*>AC89C=eM)hlkuy)xAo=i z@%d;7SB?6Yv&xps_xC5?sz3H1N%l0rgn-$v{_Kfovq3$c!-#i1@pJ#?MLoQ{n!`v7 zJ%Nz;-JY`W>2Tg34F}K0m!lfa=$<&8*VpfXxSse(e|JHx0VP-c>1jQ${w1D?eetvS zMLZV=;)OUAFU2eIS{#XEaU$M|Q*kCfh~GtDoQw1RRGd%ygL+hdo)>9~8ngIUJzty# zxqLAYgUM(z78jxx^_ScJNPHHbC%02^DK4jVe_l_;mALwTb5)PUQ2bZ?B}QUY&t~FU zjK%o&fBL+h&W4v`F%dW7ra!I686rys;07$1T!@>|?M!?TUv4M!`r>>freY>$!*60X z>d&skT-=J=@dfA_Os2K?D*hJV#CP$J_@|yu{#_z}Fob~F0F^;jZ+k!e^eA5UKfU<) z@+I+l+6P|uC!>q|IaQGNd#02ItS#w|RTvjde^&Fy1*yNRA=-$Qh&{~ z{?;P)4N?0}ya#$e0>Pg$#Z1^>a(&$g+Ab!e5wH&I4Dl2^~>L%_}~mM=4p_4TkAHLJe@Qj^#D)wHg~{O<`cyopvA>08kH+sF4W58pIt zf5qXtj#djC;RG+CSS4o~w5m3(s!gj|Lu+&mR<(JE)#btZZZTX33l>-D!|~UL<9hxc zOB#*1^`z}Wm)?f1Pp@9Qd-HLbE{yFu$|6#RQz1+V9Vlzm*BIB5)(0X+0!P93B`@tZ zUY;HPdIDa)d;8&}4`cFTIN4ZjU}A@Ae}ioVOsC1XhL18fee|K_qxb8ojc!gML3OV- z{TXJ=>@U%u=gDR8SILvzrW}CDQ9k^iGifh9CY4GWVG12{(kyu$xAFS)?cv$GvsJG*e^m#G z{^H66X6&}Vy6vw|O@G~bf0b?ci+A1myAS>zilerVX{+h#`PuRB&kou?zMWk6*Z2p` z{T?pbU@@X_ecG&kt?trC+4L{!braTl?=}~P%(9;oDWAA^@FA2-l}kZI~vuw zI1HzQ+w0Gx`dh0`3??_<%ayAYf8+WB)jy(e;3WFU^07rnbZ;eTwnvL87leF2e<&(; zY@r@mc+ytW^U;U1S4StS>G@#cd8$Oc8;Cn+>PaI(OL~?RqPA+$5EK6^bR*dt`lvfr z?%22|>|6B<&yHU|fAyjr_6MsTwz04vPFAg5o%m#0RbH(Nc4)LjHm+Trf8c@>gWT+2 z?_Y~NW)ae52~tMNf{90WtLdJ3`1yD+xfqTwAymW9pKE{`)U)ajolPHAMwZf18N=me zF{~R_Q&pmZP?^*m*!Q}!D3rNsl*mzVIM?#HM=x?n(7obl4rUH(E)O{nCEz)jTtB#y z8v)!Mo;}-_Z?fE=^#FH?f_WQFM zzp2El(|0F_`#=2r`t_lby`|v}x#vqaBo2nt*&GL0WuY{_>Nh@oe;8iOuV%PMyk>7> z6aK;5{j;-Uz(4){Ui=`J@o^twfsY^V@Z1OG0?RPw9QbtCo%As!?RDv&zJWd?=#MC6Fv1L z#%|E}rx+>lv&aCb#(bs|TN_*b3)ohxz`O!wYDvv$9I(9IMLoUg7R;KKgQ6>wMLp zI|1nO2m$6rSB_;L3ZICUV=3(U$^XtEHja|BYB^A*09 zkdKOv#natDf4nWqy)9w#rK5q`M9Kq!h7O+iGI>@R2DU3-M8J=SgaUL_^9< z@gxQUA@HQ=xMg;=KoTiWwuC2@3JAxNU5QdSZ5ggMNEx2EpQ1^i zDZh@8)hJD4P#IFJ9F0yMmP*A=P&8JQrojS&Wr4u8e`3LOh#$1*tj4hr$WNUJ+%S|e zato*^WedvC_)&&Rg0j-FKykCmu#h@HSxr7zrpP8b<7m_>uP9@D=;Br2Y@k^R1S+eF zHWg7IaD3xqcPM=Eqp0C1MXGx$a@I$yS%_Vr9IN59i0oc0Js}8zzbbt03RSv2e7A`d zC(ioBe-0;hIBl60ss)uaagT2+6@k+~v7gB^ln-5?0;`Fd1xBEnr6u_Zg4-QROG;#@ z5v;f@DnRgz;Q6a9lYI$_YJ--M5y&e|#TA7@qgLhS9ibF^g>TA{Kt3p94+H{NzDocV z6*{e$8Lqp~UQrjOX%^FZ%WN<4Tp2Vt}vN46h|o#hhKC z$OjNS3DjvCF7Y5l61?pKjU@M~O0u>n{F(%EqM$_B@f@7ge z05#{h<{YOT2NcK(O%(+M-v!E2HfYPHTgGIHG{;tl?Isb|h6)_6$Owu3Oq3QzY8FBV zC`0RZ5D3#~-gV&|H(V`@v0b1Hn@+PZ2z-XCg`xh#SlK0jyhCIxwN3y)n2uA?e{-n{ zouKHsQDq{hHZO5ZWYV~cw{pvtvjqjK(c*(uwC=Eq!ex0JSj~H4Ms1fCz6E8d9$8~q zANycv=>-B=VYcj;mY}Ft0l~4r;L)(aP)T)xqW;6JSEhv(+xuDE+|s5qZ7x%b>nTTq z?E(@h_qfGW+yLgEdlexqw$*GGcMR_yaK%-Dp9JuZaQ<}|ZJ>0*N``kTf2cm>-;>cQ zpBLlgsa6lK3^ripU!avWDX&6kYrg#aj8*_89zyrpWi*7sun<`Di%CTk|7Hte7;3;6ussJHPyK5ox}CIM46) zIWqhiUQ0ve&MVp)JDJvB%MS&ck1t7s4Gj(M0S&ayJgUDnj9XS{92*Mt0}5qZ;r$k> zJB21~R%k+7p<#vp1F~Z*r<38n69YIgGM7HkSeL1u1`x zT-%N#$B})Xui&G&z_jvy0Sp7OWE%!#VIk>lVGwMxx~JA`vPH668h`ypoUCHADx<3Q z!4Nx7Mr53b$jDobU9@qfRxVn%N}B(xS2`H_VbaPt%Rl_e8pl7VS$X=Q^U9^bKf=m~ zNPlR%3fA%uQe)F6`r%hv8SY4(w9$W>f5nxy0o~F{d)AjomyVWy8MV@x2TDe-jJAn? znU%4cC5$C=68gE73DMCQWSL13XjoYlfkv`6@@PcBx~TY9UfB@X7OPe^1=dVFor3K= zxCw!Okt!EF{~|L&;4v)!37ajERqUEXF7w8-W-`*djJCY;QL{d$RzAZ;POpE0c4#x? zABQ&bl=m#*+$zMFX$kR$#46Hg&S|vLXfA+nq|v%yCK}Bb z4^rA|Z($_mm-gPVSfbH9g@=FAXhCWAV)8sY9EYAJfDR5>MK02mUl4zz(LymNab_2D zGL6Km+BCj%+IZq|uVrY!0c>lz+@E(`XbLR+eeBl#m4!Y@Jnrvcyvc?#nb< z_Uyi_cp@SGnTFIk)0p&=rjjxo!mMa6DM!(#pEQ|NNb%F3{`BeFU)$@U;Tn*rB>ep8 z+wb^yD8K)Edv1@0oW`wwO%*GH?Y};K`(yjkUZ)Kk$o*?f z<^v4i;KpOcH7!~yjGGft^SbJtxw%rJ6*v2_e>D6P(wN7kPDvL z=eP6r+MbS^zqNmdX7l&+_T^=JUUMn$*!=L*FTect`}HcB&ci>PcAtN_ZqL{CDwmdj zT$`5%GE?&+aM!|wZ19tovpKh}mDL5%&=Ky`8XhRByB3QUeb+)6VbZ-Vlnh4q4A2tL zlE=o~M(umac14!9_eLbN+#8Y6(mDH==6Y?9&zoO={gHp?L9$((w-dHx8a@3rmsXCCNfd)GuOc{?QwHGoetC-R5!)8hr{Xj z&Go!JUY;6Om;2lqBAaV-egWLg*zN0UbKJLoJZvAnb-9 zn|0Ov12=#72464j^N~I8dK=%aUpA-X;p^tIeR(}JR9gDt1nAP7-@H2eWJ*}ywVJOY!B`AD_0kjKj8duXdlnp^H5}pWEZp ziOa9;sP4XOkH?1d*&2UqdZo1aFD@Lx4%*N(?8dXc@V~cuWW!zO+T0G}TA|HQx8s?h zhHYFh?8q!C88+)-8(023vNdsA<>EUF?s^J_o=>MMC&GtXZrN;)d!l-MYxe-Vg&|Mop??=8|@Rqc+GF4X-!+Wn|qmjzkZ&h88wcCGEdp#}!^73QNoS(F4bYNwq& z2;@<_FNUU6wFk7<{Uh|~ion3Kp};f^Isk&k*xaZve756uUe#Q%scMHi>^MF#gSH*J ziOxXK?V~tX#Dt8T!r4M|&tqShr)(mgBfRaTa)?1Pv@33QW^5I>TF|NokD5 zCNPh^OXpN1$tZf%9p*+oZr7l#$I+m}DD>D#8nA3AFipeylIvp{Wy%H@tM-!9xoUrh zxk^>-3GKRShx?S7qyfu@0@E~n@va(sE5s6XQ?(k#$L}FW~uQUqn!!#SM4Qf<1`IeHWZkqk!|t%Xll~= zDxy7B?MM=r#_fn+uzuX05p6e$lGT5uf~hb`1C|X1CTZAi`BP(ajVaL>4{tnZ*fDKa zrmR=v_Cmu{{mXh)PRSAtJ6!%CFipedvTlsM>#+_5RkxR^Jf;`ABpmk-zR=TEJKW(X zr+Be!C@@WQeRWhFOYmlJ0)*fMcXtgI2<{LhxCD219o*ergS%UBcXxMp*X-rJ_uJjG z=jF!Ke~~! z6bUg91VD~1UmhV-_@r^bl}c%aC0Sauy=Lqyb2nETH6JtMWoJOA6`!U(Xeix z;&!sOy6m~f_;kA|XT5tpc{;qQZQ>zTjAFI!&_`w7H7jI$m-X32R0JX(TvBR^Qr3;PYJQ;@N zyGG7xi<1IsbJRIRD6aJ?0wV@JyPXdU+@Lby6LXceuBhff zegg|VgK>nX@gm<^IoOk+$@NtTH{#FvZa111PxROTlnz6S74GpvkmPUB>mCe_G_iV65Gi71|@&0uuY4 z`;RNQsVpt_>lvx5bskm^UB%kwTya*&Em99o*YO2Xfd1Q*R(XM43yJJin%;S)cJq#X z!*Cfx`#sd}Yi+j`ytTVreoY6!#;Tf7LGGkw<>!JY=V`Y3Bbc$}MibRf{cf<9RpzTv zeW1gvsb1T7McU5Yi2gG7^`&+du<1HlIaix-H7^`WZ;<^X(MUgc|3d9X!{klu;4E6l zQoIgVS8*P}Gombiq2HdHd)E=0%|Q3!o?W`#941KAs1D9SIXfq&x>Ew0K zUyW`c?)v<#9IkI*Od_9{{p5RU`9whv(q==BXBz_Y_O) zI+^(Fx&>U$GaXeMw0=_8mogtn7cGrgSUIiyw|X1M$vY0&AF>GkSf1%+bt@?RTt<6u zzgYYb{E6@92}yzkqSM7DfFG2$NU9gAl=t`JBtdD(xvGRo^FAx!{Jh|MZ#=v{;DXFf z5yCM|cC<02QR&G&fA;L$%AEr1Kng(|%Hw6<1K4dCo;+cEceO1mC7}^8)akfLJ~b>X z_~WbBDOzdVQ<_e)l<1%8Ol}WHArUybQ6t~gDxZ9%F!+OXd?zB zrZJaL?=U$LHGjTOA>^Wl5Lw8XjkOud>e0sB6IWAxBZfxKpj=ZrQecvDN6*m~+g+pX z?5>$umwvi)XmvGi%g+}7t?i?&ZOqWf{y=1{oAQ3d-cU36^*AJQkyr+^T0~~_Mz$dO ztW5zm!oy?mS`L5-q6@vZ6ah9-!vmr#zK071shsqQocS{o=K#}Wi%WpH1zCMZR2nvv zI?uThnw6-(z{ejflqYr{u%Z3g(6S5|WyQEw%4wyB<(eIR?4%~42&@V}RzF1Oh0yX& zPoTy;=n5{-g7x&{jD--M!+cC5Sze|KqMzKQ%VQG20v`a7nb!sgMF$`kG5@f!HlQwi z>9MkiJ^N!?(nh*D)}C)6|VFIYJ@JP)BQ7xeYmD%PN+Sn zNaqk}3!oraEq@q?8MRC*@ji7zKjwLpv}ZmxO`O&oQLMzJ%2sipRISm%cy<>h~v zSWJi+oEc2yqxR{o$fe-!d5svI}mP z+5&tCb#c)P^uuzucJyUWlqeW)0WogUMB>o!oNBP8PP!Gm*AVpYC@W;vsv6CvBi z(FRDAusy?O7lR~C4I2z`Fpcx;2ti8uGKgodDskg!$JISs=Tz6YFW~FPw8B(mI`lam z%_87g?KFL^+&{u;gt77RRCI$!DR<-MBB;63tGE#{A6ytKD9`j{8U1Kn{V+fvSj^Z^ zdE*G5V`mTQ9W(ocpGVh~O?4K*lE4g+fgOcEY+6dg{my27EVSR>Y}=N<$xfV}VhAN3 zTuFP?X(2*rL;d*Zz&yYdQ{VJ~Q-ocbQ5SO=*C0ys#4ysXb=Bve9)gMw_hqNM(m}+q z$H<8WUBL^NWS@MdI#e$zHn{-`GJvev<)0o>79}l#NOzA<_M~F*HB211Vo4RHy@bFPi( zDKX!xcCnTg@@7F?5*Yz&Fd8DBu=s#Yxt^NQiN2}{9vb!u2}5V-KOZ2WL0_VS&iOzJ z9rHmS`ihpMpobDYGADsGt5)|~^4kZ~uap{m-OiU)<#f&0a2lTMmd>n3 zHAVhL<@6CUe;Qo11_Ls&khoF}k#@^;r;)f+1d%4kbf=KGPy~@$*EB(w+RvUUr+GxQ zD1t^a=d?Dc^ID!ti4yoiuwJtwn2$pr`X%7nG$F5izsQ9Vo>sbQ&df$dg(gnhK*u5h zWeIFbV#sJ+N4y82a?wZqqzr0bJb<}WMNLnKn7=3}IC=z+oCC&2Y)A|iu*x;W9Mm-@ zW0ypta%y*L7qph6h>Mh;3+9hv`a|FX+W#BW7}(rMJ5mSqUVxZmyjs1yR`#mHdHq@y z`tmzw9Kx12y)jk~geD_%5KJ>8&g2+q|D)-(9(<%QEgfz3tJV$(TfmRQBdTdC*A6J( zMGU^L*r}knR@FNk6QP8UeHkhPjoeO2L8Fym9~XYp;$3cICJyo?X!ewa ztyytVPQcUIVM;uLKr7uoW;;-sB7H}(uOwDRvWQmyswa0k3%)CH=VEj6@GUd|Ea-xa z)7{yA$oA%Y{~)~|+x4)Ckv(0L5W4;!+z-~5)qkUdwZ=S2a}xh3J5q_bU~Tg-FVP`= zG84DWFyb14to}X7R`qiI8u8N%%8cF)WcK_E&h-JAkEH*z!HSrX z0Q9D33FZNIO#(;}v8SUC{g#nIv$cOp2NEAm3%J3G$|5@DHYZ)QG{~Z0TJYccB}fDS z8IJ#jF(*$@L;?kjd&zDS*t}`W_n9&%&~)j$JO({JYGVo_w1vCh^?TB-IFYbyw#`D0 z-O-p{0OrvQ^N`NE6`o;RL>B()0gMEq5S2$nnqUAeUpTe4>XnJv4s24R9U&@NSv_QgD1GNS(>W-UC@E(BP?gs z3ma6el&7HAv4 z<-t2!V%*t2_%r3feX7Jyc3fAPPPjd+fL)C(`7irY11~qF&1}@7(P83>#SJij>=C?D z6R$?kl)gIW8r*+VnCsm#l2D?h_G#{t@09teuzQ2KU)~79BBG+t;5Il|c5^w093ysGJ;6sZ~wTO;;JdU6f#op5fly<-5b=Vs+1M!fCjeaB|s!M{n7+ zlUjLU_H~h#4yu51lZY2N@hm{&n%Rvfh$9$0*>7zB^7Z*=J2ZlG&n#GFq{whkr+vK} zk3?pBZRf!1(8&ZenN!v|@&$9|{x)Hr*jqst`9B7qPUV1IGEnM3ft znN)|rVMl2U>&a*hkH)BY=rpcsB=Xh0*^4OsaueYvy3{9i-Z|rr+v>k`V$qW))SdRF zP-0}z=Q5Fr;9_}l84!y~_VT!47huJ~p-Z?ddGzhv4&o!`gqF7gt1sWK()rWfu(oM% zGq;?kGEf`MQzz!Tob&_Y+sc!3nD^+}bDJq$!&pBvzJZ?=PsCauPtRwNeS!wO5oX$48i5{iQHvJ$W&h`X1BiM2Qr};I`=_bDyw&x2DF+}kJypYE$DD(1x$XyBX`+n4V21Qm- z+vNetgNXH9leI9DVbSzdlEKAK>R_o>JG>jz_)8)nLfz{c^A|JrIVN799m$>!tw`8O z=verGkL5}b>wyK#9oAQyZ(YK~w@}3T^4f#~)HhH$$?&f0GeI1jR_MbUKUOJfPrEf_ zjjJM#G+pM=MK(pe<(lMlc3yPwW>P88=J;D*KQttKw)@uQP}>${-!bsmEl})#9jNGd z7Ucf}klYmUYo9??`^z|wss;x5UsG&USieEOppRvGwRb(DUMN4@Ap5oVfR)d@>wp3b z_#qxj()dc*t17+QhaMF!lpk;8{Mv^;(y7J=9)B$J`L~c0fP16fm+jQveW7|#H|Gzz znD_MJ?w8hxwC>Ebj;JJpEEwp>qy@q@WH|unH$Pbd!H1fFrR-CJJy!v<{|c{-{znM( zU~s0aJnf~5mFDZY_Cs$myxN!x1YOD*0_Fr-Ug(A~xP^4ROn6wAmD> zCVx#?LQ{a8mTE`BVdSvM>SOoL;IIni&>5?5Z5*&c1?EXKMpTtl5J|R5{g=OMZ{OtU zo20eH(S{pINhHk47(WL#WlZGnnWVMP@PuC{rWDw`$yamiGmwQctvDn8@* zUcfAg$}`e9>VhIq=b~gUYFeuzPv|Wdl%(~Yd?jQi50wfrqVeq;Bgo7N%(ON|9uF|g zn_DQ2iFrK5-lOARStXod#T1HnW3Ei(p@XdSPm0)ADc8ZkqLuG)H; z?RJA)k5^{*M*C~$MKv(`IxtQSzW{LTjxJ!HqLM9g{PilxBdZb}-beMFxmuw(B)5=h zZOr0>f)CE7Dn8#?rjs(uG%Ro2i8NzQ+dGdvMs(Deu^+@TZ<&0k4xtlMn4t&IocWVM!RA8xCGD?u-4b#4Xq%nK}73Y$mUz_0o zu~#qRk9F!|{QHcM)_yoyO25nuSc$W5eHK{0S?r{YWzJ+&7WZKLX4}yuxiQ&B6>@=} zvI~04$)(h)k7|0Sbj362<}fpYqRz2;vx4{Wi+R;)>FRG5byu5^<#Kvs-d7Vqt0q;y z$1!l8r9}rZO7`iLGU?bkJc3xh0g4kwp`T>5Evq^Yhw0ccMu}f0|Lb&n7&vL|E4t6b zXd4v_8$Ru0o8UjTALA6}KL1+BDaGF}<+V#N(i>CF2MSrE2s(yQ1m+2xv$ z{oO`hil;rTMo$us!ICg6mfIU<;5dz$k??!cbTWojjTYNy?d%oX9M}PUA&rN~!nkF^ z6OSGL#Y?)dth*1T;WerX-n69h7Gg}fh!^jk5l3LXu-ppPBR8eW;6O5u-7i7{MmFgt zK9g_o=e-s8k~(Ua-RGIiozl<@WSyt#A-hP^TKcQs`PThmboavxXP;ATC#=R%XLjn@E<16)vnx1nE`62uK8?qj@MVexc`)2->aeZ*HND1v#W9Mt#*rO_wQP?iI}y# z)fUZ=UvnWd@oOhQ^f_zp$Dj%g!hap}tKV@zG-46ID)y==jdRc4?XqwX(3jqO3}1G% z-1AzGaEpUox8py-*^jFoLp<7zt{u~lNrLELH(yV;j4bdlJH`$a+|X{NLb_iiGjlp5(`xd_ z{`C-JR?0-2)WqVNsH|@4T3swd37W+Le7$ za+D~q>(t7X0M@P%m0~2`@mvgqltWvJop|otoOGtPBG?IKYDF+OK_iW}CS;K3FJgc3dqGlHM zQMe^%jpOpL6dmz6N{&I2s`_-#_)yB8$J{I+yJU57`}vZ4BXyQ4omEwCnltv+o^@!d zG(T4^Vb6vw{ZmNykr8t#SR1v;w+uzS7P!2RT#-fHRFc4e*YE@Z>&|Fr4 zWXkruTv5ik)v%3kIJ#L~H*1QRSXLIW>$&hHj%O)vJx0Ae^9I;99kxSt;XTpZa@YPW zG5&3W#|10=I)g@Jwov+)ovFft&k_PVzJEZ~$+XfsgU^Nw_|bc;f~c3Uz++GN*whPK zVmrd@C}o^vaB_$4@Q)8nuw3&MXq~=2wNBO&4IbDoW{@7j%M#`dYY8T^ggvkH7J^QA zGr?rin^a)eL@1|fd1EdnZ9}jx=wJGHd!4%gzO-J!p5GeHJHK#aU_pbSmW}9L**} z9kC@r9mU_V5G%b1Z8g;G*}R$*$sJM*(Xmm#3N+=3{B&Gz%@fJX#B5MZz5z%!@BSnv zT6~&YV_4s83`{2esXDkY#G(-sPA5$LT3tPBgr@^T!zfciR|YkADyQv65W`dMR(t&w zeRN)UAH0ON6t0B66#AH0&B?cpt`zb3j`9BZAo&{0G0RuQK2pz+d|KUO&O)8>Q*jyH zfFDEa5CTo3@of+n@62NmHVzP22bI3SdEjB9!f&KLq5AzFprAqf1%>&Hxu7jNo;F_j zUX$$Pj)9uxBcnZ`%3r{6P?|NZOy>)qNOJU+JtjJXZvW&n2FK;WZv>UzmR0jVw0tFy zmgfC;dyv`Z&Syi&vRE+ew?6Bu(jK5qV8L@i0rq{x+SbUf0;9|?H;Cx%V5wEV6gmuP z7tkuP;Mt+f`+TH9MMB>R0k-l zq-S>b6#P~iijYYl2j6OfSkl=%U=4w}%iHPcA^OUZspC6Voi+X4NOi&_tA_SK=(cuB z`;&cwaL8Bds=xWC#~YxXbAU)UVB?rj#jt1pzX4OB#5+_?rV7E z;I!0xdiaerCxFAO8v6VM-_X~ubJ{TDX_19^_H(ln?^W+L2lf+G@LYKIL%OD%jZwK6 zPW1-QPC@c8>D5`NMrb8hq~8l@4-h7risd2RIZ%yJdaJuqaeYofQyH_| zG$*jK?0$N|9L)62z*%RD(&7I@kxzp!6F(Y6j8V4KNf)_ZLCnD+NU+Hr0#cg~? zW)3?S=Yb<($MYr97QXQZp3FC%N0Z6>z$c;8_J!+Y-g}s5#izFk-nlg9zbYeDe7*gK zxwSy4$f@l1bV|7PTtSnkL+xwB?eleZEpM4?sq886*f{&9UK1&LvTk;|o$DBWo2w;b z;@)NJRDLTfw483bjjDITJ_jfVKDNHthpr~p7rQJy)wXaioz+zQHC%US_2^S*33xVY zJjce*oTOlTGWsp2=e~#9w4^exQ~%r2(~x3qwvIEHE<=`gyd3#%P$V#v)+|QxG zBOC+#*yDtul=#>rbx@-$e0BELrj9+Wghkmb7Y5KQ3s?21tEYczuH~;=@nw1JGPQ7A zmn%KiwPWU*<4gDqL9J}INUp6?W>CQ0q&6(>WE*)NcvkwMOl_S+Pt&zT#z~1=DfSH5 zF)f2rF{7_z^Kq)HzGXTX!``$Iu2ZMcCI~$%Wm+tqO#j(XM%9NoXRoGn!X$6TTP9xL zsdOgZccS{Y7Q?N43ERIc{2R-Bqbh;f=s3v4y<@oZ$P%{uZ=GMKpxWdt>h?Gb>($gD zm^~l234q6L?YHBG_SfrcP^twesSlX{`v!W(@!9~qJe`{{zAj}{uxTrQ%@_yVJ+&Jp z`?0zA<(KoSEpumtiWHWFOnw}-+*Gu`Y>oqePtX6Nr1Q)8oEpFP=ejFnOAB zG7^E5(h>!fbQ0GZrdgF{6R*dL_t>>ycCbm%BUHbz84J8jI?}-N!R(qTp@7~n^%+N9 z&`n2oz#bawrxb+=R%03d=`2pDQD|u!=_JQvdZ%z#cRU*HTtmiiG>*d+SJn`D>--}w z4uuW#4JoD?Y})GeuC-RapKXDk#?Ux${w?>O?xf0bw9ZdbLkx8-mm9Cp+cld(97Ey2 zOCz)9;*f-b{znGL@)Npq`shwppA~l97B*->+o^&Zc`5XugJc%=vB#joTshZBuJ(v{ z(2#1{D~QWS9^Iip5vtxs2K7EHDK3N`L)@grzts&WcK_UB{5@pCWoCH;42r zR6#I~M4{?=<8Xq6{hrH%Ds6V&@_xForlreujmIaY{YzcrF`Xq4U`~ zB$T&f5poP{jNBU0n*DZo!(7+&lS=I$VGmdRNX#7j?=>G&AX4a!5sjO(II|9Y_Pp{# zliB!f@HV$eCA3$%DHt_7(mL$H?7*j?Mm|bmGJ*=EN=YRj2tN@M7b85AMroanqVc^n+@F=ZAc0Q8PLvsl5 z2w{XGM!HB>9utab4_GTY2hn~(#wP|oium^PtV2d`5M3#wIS1XKgW+F0p7S1_V_xCh z;t@X!yZ7@%O67#x)ry@XxzG%83oV6QMEs$eh&}TpYLQzds@4*63i^#Xis!NyxPus7 zk<%#ny9D;EFcq5n@D$S)rw)(!oP^K@Q`9U_>|^wj+`h5g5>Yj$pW}?QTe>}P2cH~1 zgcyBJRQ+s+A8mZ{mL^Jy(!#fo0}kibGTPsjb8$z?dw7g_mBK`kQ4@4bAERFD00@nW zY$g*7HHX%s>8xfh=N@EnX$_bvI$(;^=AoWq``1GFb6L?}~79@UJsZmOB~OM}G|wI;Uu$j5wi1Olfjx zRaoc()y1$=mIpRu7-*GEueDvZQiS4T3WxI)6?vmE8J=vs)oy2rKy7=Fv&tAAh}-*Q z@hZb5f4g5*UNLclCOy5M8=~b;DlUrN3O5)XA>o1^bBP~+MNPWdO1XRPNl>iSO}6}v zdiSSTwVUElNtDLd@s~DWF{1*t#N@g#XWLEHVegMHce~6_tI6sZc7+>wPnW%Zl%7%+ zK7>&7h9^?=nsJ5cMdyo#*>@a&md~`o$CIf;Mg|? zmrkdK&mdI-#u*>Mj5EMGjWQm+j53U1Fr6|O=;s~pB(p9Z3W0}fM(&0_9*MWH+Tq-- zbHdTwjdP7=o}<^Xyy0zP#r>(gR}F@#?RDiBm!xg(k=!(bbshZKmj}da%DsN4B+=Gy zK<(E^gZ0x__l1b{z$ThEo{`7gmV%Phbxp3L-4{>TJ-MUPE=@J*7g}y_i8+h7Hw}uZ zONH6Y{+9Ob7r-4g943!mf;*2$;{OCs;BDb?@}Gbt4B=vlKSeL*+pN*?+tS}F_*c=7 zc7#yl`NHF4l}Bv0;sSvUp*uy`w1W&dZ`4(JO;B8;hsGMpYhLfFf8bJT3mAPB_++y) zz82_44`qZYm#bYI${*%c#4Aii>$;W$SZen--)Chn_A&}X%_4Q9VJQku2=&eUm`6*New^;45)`aKu~^DGHa=Ve1i=#Cs3t}D3#HPEa0|3DGX_>$kz<+E zpeurRuKb3+|38oel7inMJV!!`4uh)r1jCVUwfET_nVmy&Lq9K9VuKXt2V7`g2(@=? zT?jQ3no4QmFtFA`kPfQJ|+ASBwg;;rXM|syzZfQb?&O{RT zL;a@T{l0Y;!4VXPm{nskY`OHXEtX(jCVkm*dnCqhLAJ>8&lwkT&Q zgv*bhcu&D0y^*%T%EU)bdy?Wk5=)uRAY|gB@BxstPN9Y>7?MX#lirZBE~aJInJmW| zFwxzImrI#2_c0Uz1^bVqo`hHcznd;)$7*OW<7ny{pehWtR<;(s2gb_VoC|i08 zWe#Bkn+EE5*4P{^pbK+L2zHt#0<*7h`|3!_;(XQBH*;%5^e-I#b{)wT&VF`Y$uS`g z5CxU!99IC^c#zpl;7x9w+f(OzrNcjze=q!p5TP16)Mc1W-AucG=)SU( zsuW_(y_cjEVxLtU|dXENQ2k(DlMo|}ZK_w!` zHM(p_(Qf5HDpJ9H!O%VMkFt{?MW>bz1sCX`>d5~gp;r#rgg-@jo(#YT9@*>$^SC{MY4RQK;hMx@>uRa$7{X;`PPUW zSLl)dAaGYmlMn}&vRv@dt!JdG;Bek$RaUOu`Il7z#R)QF!*q?d9ihZmDb%?S6m3dH zu&&FjC5lk1RIMRXpsu#Yuw5>PVc*b2eu?BT&cPX>!@$qn`Ro_O3CrXFrVzu#BT5%@`M zy>*jx0j+X8M8DOQ&lJ6Aw__5omG{6CJmpR#VdE;51d#@65S&6L@}r#>i?&WV$h`w6 zoY%Dy74O}XRXa$&6d!f(gAvH;j^J4m3^&f}x?;GrFKqc!PGQ)gC1~TZlx3Je4q8Qj z9E8`r-Vj*FF;msqI-{vn-ueG#@szx?-bq4AVj)D9T(nRHDosvl*rEfETO zuOZEdF*DjHgEk}hsHs%AHT^xPeN1kpC1&8JOmBDveLG|j4(-`@(;2ux6-7Ujo74h+ z>1u(s6o?7!5S95=U52rwKUOZa0cbfqx2%K*)x6#3Drqsmpv86sj< zuM5Z89UIjR95=I1Nca4KH34+8x!Jz-X5jW8F>QYOzsa(Cy0Ra*qvg$?ZQZeH+C@AD z`2N2>U`nn z$H4Z5*lm?>(&mXE${lPPNIY=>&9_Qk&%z-hjk=75o14EVo$+WQ8}ZI`{wBSEA2C1e zciJh^iZ)CVp)l=N1#+SE$w%w76vKHU&!yOH1_0z7Ls`@{Z@s(Pd~gUOg?Y#{iN5U_ z)+#EHAJtmOQvad-#{%P~Q7ARy1Z~jg1LADramYxcwt(XnWG*`le97aBAs35!u~PN98;R8d+{jQ3Eguk9QB?X%S~9p*t$L>KML45L6gqzSfor5 z@T!qz^?x&rG}792!nM?~Y4@!XW%d7K7-|gXApO0|P|w#GZgcc)0G{B4&z!bxi@wHF?+5X2R^b6YZT}KGMvM>dMFh za*BXi4H2vVj3J*fTplp0HTDPY)U)wt_;Y$lYZjFvyE?x@kolTcw1D3AT?iUVYJ>9c zA31+oiH|YPI93Y#zFFj}Zv}T9)5z0mUp|GPfXB}($4wOcY0L5B*}X--T?x42|25{; zJaP=0*Gl^GE(B#Mwm~^AD&tRUj^EYJDLR=S#me%hQ=Xl{dy`>cnL)x>O-oBo7b_wW z#LE5iC&v$acNd-PZtm(Tq+0zhD)5El{E*42owDk!ZN` zb`jRxwZp&KYA)#g^P1!5xCh$$Hw!}rWp~|9?z+aCN)u0XgB)LWc2jG#JAVtF1IcOROjxdEPpA_r+;qe@~DyW z9r@R=IV+!v9vv<*$KVKvwB z0%di`+NUNtlM<)0Eay}0JBL=??coLU-s^|c&x+@{DL5LFL+(#P!*qnB53*ktC5>6X z>V43?7O~iHdc~@MVz=_F{d!`@5)gOsecH$v9=Du5Kdbdn3rj~5Ah5uubGnZksjQtB zE$caVbvr4WlsJ!^#rLpxDeZ3K#h0vb06a#d{zO`i(=xnS@YaC&IB^PhQU4uR4Cn1R zOu}eK-QO;Q(xuorrE^6#+QCC14^g;E*=jgiiEnTg)qPu}UP^hR`qqqH0UQMZcx2A? z#yT_ogWf;sZDoGVU925>@vWebeL%3&TDe3uT~jwRaJGt=N?!)AYgzH2-ekUA1D5SDE|^V`L$xWdKi?eCiOr=Go5 z)iB5~ZmS<#4byHclLuY<;U#Ld$ADljpxDKHzDicK*9w}7`4US(T-)8%%C7#Xm9zK> z1Bu&%y_GJgtU|WHsb|0;8&D%GFIV^YKJsAxruwP<^zBe4RQ6If-1}rHQUO=10w2M& zto7|-Iun%WQ2{)I9$&b=9rL~IYlEJE{Cz%c|NAzs{k9?VWN@@^GL7Ss3H)_u&*m@G z;2>fp2K`MQDQl6LtaukNL4k=bP$PIfPXN3O^Lak^x3?!rD*~^V`+R`tF<+5!>vcJf zUza~#SEoOCw(X|ZMQA2kmy2JjBkC-TM(CV};dD8LpFiAYLEoz)D8=B7`T=#!UASh- z%J{Tf(aM+xw5kmSbUgwk?@0ydFCX_SeE5NtT0j84xfTZs6~_C4MQao67X{iAK76|*)!zRBM5{O7>y~h%c0ZKmg0!NQwRipH zz&J1jMF)1AqFk8;jB|M4-Cz||`0{SwI7}F&wIM!* zxqZ1~ZS{`-Jo(2Pz0xS{8<<<)BI>_FYz@UPtE)kh@7%{w7NABdtohe>ZayBQrtyM# z#7wJ^YY0%YCMC9&>XW7 z(D^FY+V!(`>=6f=Xx~Z-mJ|4b9{wz@O?h>g3nkE!O*WXj7Asn2{2HqHo(qEZo(tjw z$^`+XdOY07HMXxzQTBE0-OgM$F#Te>#hTycgZVnkagBB9@? z35G!6t+!$5LMui8mPkY~E>c+XG zG{@$fBhHXWOuvgPKE;FHVWmhOm#Y43p*J~v3HIWxJ5KCPls$QL)Bx1_3#a##x=1#I z>1iLcBOR5VWW=yfg9knVsJTYz?kT- zY+*uQ5~&&Rrs8tKd_&P6M@6@WKF+9~GJIroI;@dh&Fb_+HAT`VYRJ@19&3qbzQW|P z+&O^C1cgRR6B-ktZ$ZpXw4j<*xsdi5M={|QPob;US(&GM#(@61JiqBl9@NroxoOI9 zh$h?3*FxHRU?(7bamK@P?09A5G)KqZahY(N++hGa{-eI1$#7Dcluwe!$ls|Y>C>PI z<}KMdJt23Dcm(A3FR{+@KNbS~3>XPY!)mJa`wR7!8U5F=G&Sj1w2fBqN)c+pT6}-% zBvk!W4Y2YUOtNAoG~q;?ez&Hp2Qn*l@e8s&1x_yDG&e}f&m)<|XiG5|^{e(qFD;o5 zqNOYheff~t*lCg=I2ZkSkQqC+7UbSTB4m(@(;T~|hNO?d&4p@)xMrfh#Hxsq$2uQT zk}m0bNg9RsiZmE=ZewR^9*5D?4+vw?Rq@de83%vUl@pOPHxFf2(^XctXB2l8ZUR~LtkFg4NF+K#?Y(n zX{!K{*h_l9&{ZkW^+CI{lAj|hmt;yGBG8;58Hy$mjf8C|e`)8hU@Z4pFv%4x;5vLR_m7MS=OYel8iZ>|?AS#5ljFdi-(OMo}UDUY1DLb5Fk*0XckZ42tfXSTJ+2 zAbo#rqa_<+ZA6Eyo;Osul(wqzz)ie=fYf)802!C|MUgaX*I8eo!Ja@(^jES75RFi0 zh%GFGWtuNn!z`X88v%19b?t-~wk9Vd?zuWu==c%u%R{czRB9^kfCxoj4?+Au%Dvvql*? zwC#@xMs2uYp)!WNPN5H4GMu_8%|&>Vw>Q{Sp_*tN;>@$8r=;p9(o-_*V`MG5B%0MF z)0XCH%_exA;kB`7{&dR8iHiOfzti>S|9}cM=4R0^6Y>f(!2ysS0B>@1_KY`*F#_5< zT#gmin8OKafD?8|#t2Zp7oDnaT({!X)2<3%IXR-KcQE~ANJWM73`e1_+*F||Q7&_v zVmLrWa;ClqTSxMzzIkO^OM5!g9O8!URXk*29s$3WpTqy8x*0b6xN$J0-qKXm`5OuE zBD}Snkb4ZvZ5Rb9V02^#9UDI1X2@8y{G8J1x`UViqFHmkYRh{!!oHCfm4|Mi$Un5e zh7yYVKEqLxzBo$n^jjzYqb$XeWV6hS*l4HhLWCW!B`-VHG@HSeC0G59O%~o|3FM|t zgEvjFsTn(%#;D(e!f>E3CioUIMN>G$(?)&Eb>z$dc=C%`K^>4#~fyCN59vfK?NSHYof%>Q+r{Nj%~lUF;yPOvsNvVDDdbE+g1Yp*@s!m>rR zDxnbc!QqiEV$;}1!I$azBUTTy+Ttst$cT<@yZ%A?T5pE6tyCL<03NU5j{^&SlJh!X zqD)g|M~gf;MJ7+~6B#*UA$;6upwq1s>F1xOMq3y*Qb0|0Dzc|w&$#2Ke=cz~C=L|$ zqZ3(xoN=+oY@aERg6hHCd5jW6Lmi>m|C`IQJw{*F=6CUV5w0xF*D_SbUYF7s9yuHQ z5>jc!G$raqdP0*dR@=GvMi;jg2-BCX)Q)u!qo<8T+u#pdexgLAxdnx`=wgf| zwFv=RP7o`>wdW^a%M_GSr9AM3#s;^SkG_Jx|f@v%(0J+w`C4X`47?*C>rncFMXlAWEaB$a>?+aO>*~O=)%MA zou_j9TiQ%^^Bur2YFR}j|3Jz&L-w!`T7)HV^dyfwIm70Le|m6k&9%s|IW(H*+75Bz zTf(BdJP_s1CDVE_E)apHOP?gL(o!_$+f?NgMO-A#IryY9L2Q1~bB&L__sSuVYA)Z0 zyrjR=&$*z#0s?@iLQ5AEyMw5%UnGj9M#G`*9#rh~yuW=Lqggp&QqZcWk4NK8nJ*i1 zMSlFWny_E6hODhctrux`)mF1SoecXRMwD=0BT43;v;{7v^Z6&blj4wT{?jMzrRGD; z3o7jV2LxV^WMcs#L*gTXyDuWjM1u6-2h{oz25RqN445nv2rw@(#bBmQC>02hCK|Nq z!*}s7{oZ#=t>3@cfX-6nBt$t-FR7=RLx@Fp0;N1adZA1Xj-{{6$>5K9x5i*qmFT+i zQ)|xB71IwKiQ(ApyO6kI5G60@JfHLnk~%EaS>}{X$ZTl5sh5jscz}1iOh|l?q?y5H z9A@4v1qv5)tN-|DV^d9DLwl;8ceZunsH0m;C$be_9Zn{s4+)tRFd?6q*YZF3p)IF~ zqMoXl7raLd&AI#VT?N(kuk}%*{yNOaj8PXKov0R@SbIqEMEC0LbX&^Y1FZ9X9lw0U zR_&yf1ggDMmCkn-rm9^j;G+y~JzpT;>*-v8iRKTXClRHZ33+^+m$kI7gO=n0#c&jl8Za<$8r9z!+gnws%vLb1FvH2 zDO?Yq^m$rc@DhFX9FdtCkOtigxHF90Z@TJ~e;)t5_h|j{OOQ+BYtk{$WtWRbbUU7J z2N~DmFAw4cdw?5SgaLCjFx<4nL!|7m^z+_ zjObQ!ASyOWjaXkyLWOh;rNp7dD{j2p2~3rLKFj{+1RJF$I>sjnWhhPGsh|9qRO|xK zfdmBkw4qMDI8qmRaTRbtTin&p&P4e(>IeBDOrD7%7;GMpYq*CuG%tOsy&3cT*pTw$ zDxvM-Q{lV9Q0BfTO=6*NJDVwNa1Ygw53^fR>O}qU{T2Dcjq!sY;)e@{IADSy&a;xi z7J7lNWeHg;BZb}8JvI_Tk_2<|`e#lkHmbLCb%VYO_Ts=<%&ssHz#f@fYp!$a7~OeA zEJz|;Q1?3sEqyMA*p}Cz(O7fA4(JZQ=+b)LmmHmn1o-;uLlJ&(cXdOv z$Esp%waS-4M>EPPYS4xcqSQAid`$i4BBt8q2&zt~OrOzbpOUHW(1%(UpEPz+ROL#o zAcD`n+1^+ILKgCz{l4%~8LPYWqYG?zL2vGKCCPT>D8WK?b@@Ydk)#e==D7No7{9_3 z`(D83Bx#-?r|sI<>Hw!;%#~j`)QrpfTPbRvbc(;$iZL%j=)iUo437%HzNy$^2wZ%9 z_##?7u=Xqfdrxrh1~jA=YHj+ocRmU>4{9N*<3Dj511soaSi+pZ0M;VSFWAkuZI7+> zQSx_X+>3g;u^>xIZk-^!QB@7Y0XqpqK7A0CmGaHOENACOiR>o-{Jjo!)FGun zNGBsGmDi6dq4YCre8*FVg5>YdHgMV5PALMU_TvfzO$Q3eLP60EF>RNzJZ#BzN2H|J zMsQDPVt z1)gJ-KE9GSvVi`anu8l*ghYzuEV6X}={P~beIA2kwalToNc=&_rcrTwF?~{uBdfH6 zu1bc0B7Ngflp?tJ=mM_pgf9gW(zzJZioFsZLke`_tzibmWk61ujI=I2mu{+B*iyn? z(XLMcV;%c3EEwSk7*PyX*NC_UIz?AnF|`!f>s zQF9mH;m?5z;0vqsl#|=A3H2ce*Y-kAhZ=`sC7^3svSn8oOWOT#hMXnTWRnrDC5w=* zMW0NNpBOAQmc*KjZWkz45o9LZ!J<)DG8_Oa5%fW37QI2Y;2bp-{8nxWl2DlIvP0^b z$B)#}Ey(o4lN(Xsj+cmol_+)dcth%mkHrauQ%eEVbSVrE%CaIje%cwYB(_N% z*`KwGk)AHdIxyWIm^ZGCMqz<3boy+|SX@`^5bYZkI|wg61R)470{zAtm@hx{H$>Ba z5Wb*6pZ%+(Bl2Z8#hc)9m<@vOD$xwgv#kN@A-X*dzDqVYuhfuRP;?Dr0}$o)1eHc= zgL%$e!ah{J3n%9oP@6{BjU|rUf`Mn?e0P^L9g!X{_P<8j1kv9qP@X64yy%_? z_DnY)|2l#HBk>;*v_B$%4I)rM#6EF#?g6iDbocm;Q&N6`uYnD}zf z6C&Op*gCqQ?Vv!;J2n}fY9*oEfjUvVg#z_`T)_suuIyGyA`^as?S_#|;M^U)`dL$w z`_t78RR&Z==b#OIbvp;t{7468*A7&5HKh7n`Co~exV`dSkY@*8wI3A_d@{bCM3Ja+ zcc*@|-1?npxHp(r`>D#E6xy$76LXz~Ec}&8SqJ7R9w55WPAo-|st<)0Ptg;dUf%gO zuyq#KkZPj*`5oO?UH?nOJsqHcQl=B#o9oCk41ER8FQ7*a_VzI(8}alGNf>MW0>?9i z+H(~{?pA(CWW*B)i)*u7-(@)J>l#;|j||Mst;SKJUQnM$qWioobWHu|(3NERcLiQ> zdrGO&JrD`!6(>H$kd^a#HgF`%MCFb`GFYP1IHl4<&NP*QPbU4VL+}E zgG-igze1Ww{`L2p0>4KM9j0y&hU{l>8WN)HXKbNBsoUNN6}o`aKhGHukPT(v zIU;si`VF@eUXn2i_xwy+v+x!Y{MIbQjBhitf)jGzV*SS4UnPn8=gJMah6)4ZP~ykl zu#b<085+1uB4&gORPjD4Y;w%hrbfR)oAcloL{ff$0I7_mH=p#)!5MC8( zbtOuY$Az$yaiW;})qf(%rhpl?LoyU1#rzI_*i4i17y#X8aLG(aqJkogQ@J$x;TMtozq#5>0cvWcWw_!D49PM|=Nr`E8ktlDrEbS%d^^Yy$n_(DIL}=ufxwA0d#TlY4hsMy^=4KpviIQ?%0A{*dFBq)VSf1Vp@5g1dtXa+QN%8N@H35!9Y_00u_q z^J#jH^(|{v$}Su7rv1}3&L_AB)qtO&+uIbO>m5Vt0}}p8zys1w=A#O7AOC1D-Qnpf z=Wn<})qrnsQxGCb7C#&ThsNqwiQ@aVq47is@990R*^O57mT0fl5(diFq4AC`kEC3` zzytc1D0~(EyL6lg$9yP~cgH^f^9+>K%*PRATK>C8JORh^Dl18sq+Gnf4SI2=9yNh{ zKlDzrj@0*!k%mnYj!6I=ieu&@iN40tmdRky0{x2^ejnf2*W|6!Mb7VV<*EUTh+3JC z6xR@1orUgbi9;YVB73I`oY`=hssSyCT$zvdScVXpYM^OFIiNCpxP7a{ zw`ob)MZ$`VZ7GZvgFkp^9LI(8%OelgP0-Nh>J`fQtEy)vY75GKiZB<;S5^;APw&@_ z*ozQ;V8l!68cL-eMJ1$qhZZ7J8?+J2!dWs~Uds$346me}e>gH*?vmU}3>C>9q;0n- z0*^8qS5CzdzSRx+wwFai-4n7E*AwD*A|kTbLg+cy{%Ycz zwlA(`P=ttPScIr%Afs>oH(qFviz! z>ZBu+U2PdDxjUYmDkzIK^=cnxFi$n`W|2=(Tlhu>j8A6e>y(#h4&i+E-M#f+4q04T z9GINxuWntfFBnKds8Y{lS8r`BiM{mu;w|Q;>Hq|+9*F}hjvf9c4&=qYW1lGBwLeZB z`*Dw6+_zpc^8>7zPXSj~7jwJqmuMI5_x+O<@dfyC%RhmNj%SfEmAJ9rRlkn+TkmmW zKFgn7JTEyu+`CJ*a&bhP*V1=v8jAlzSi)T4eX|Yoq#YH3{p}VinNo^gQp#aXnJu)Q3HN#UG1= z$08!q9ywcLohA1>uG6}e0LI9=^ScRp`N}TC9ZV5_fP(x@%#kW&C*7VaoNxH{%a07#;cx(vA#Vnrt3TL){Bo& z7mjo5noYoxkiGgbjNOntl!+pjm;pdHJ#O><3I=AF=6)hGE{#_`V2X)XU5Br{oz;#BB$&EDq3vnG?5MzdCbSVernCcU!%wZ29WNfQ zAgBHIpV{uzR~^PHRT`MZjJ)k-IyyVA6~h{2y96r6A{6_m(yu{o!bYnl?G>d@n>Q=d zhlkT@ZsO0BiC#O^zD7*Y_m;`K@x0SS`vNy6J{X-HC)bC+o-D6?+V2`tnsV>D4m}%v{qFrA0=ysn+b0Pw&fR1p z0)PtR)ywxtmiuYu8>3%~luy{huQnYYsH=-Fs`w{vuYdSH)*C;`i#Bb+S3w5F4o9yR zB5hFw{~B$>jvzgI>@;;swZz|tOZS!@iJ{vD9_BgR78_$$AG=mR-r;Rqy)^kJNgq?5 zVP;M@AGi7o*N3WpnX3fKRXLyUHj2$b3hfqj8Q-a6NossNE{VS| zzPlpk|8df2{D5tVquhQ>_wG6F&bGVWe0(H`3AN2PTX|*#d&bVt48>D9(?)-` z`JMCcd2a2^RPoZeCL^&vfrdy~3g7*0Cd<~d!y?Ev@6eJ-P<*=cpwsh+uuM0`{m$kJ zq9-*|KiC&ZiSEl)d0Ot9`94E-(Xx56H|)aum*%NO=}lX0?nmhh9HIKb`syEXFxq(GU$hM2jL4z?A1@m5pC)E2r$LbEmjl?6=6Rq+# z+zHmWl|dfwU^L5Md^*VEA;#m!WKu#ox1rZxgCt%9 zpIs(_-*dHCrseSULDjrC)a}rPd?0zv0j>; zu##d^ZT@1JN8pf{{tIY!&aH1y*%Nd&!`HH}pB)hy9W-VaNY={sl`wgT`SUp(ID5LSUkSJy5CUpnd zfpXF#G6hM_;0O`iu$h$`5xB)Zg5RGD`W5x(eUX(wlwl&HVHXK51#zDu5g@cKBe|4Y zVPS&bepiezs2!tpq{rx%*HNkM)bIIA7n=4L#trZ|5oHeAHc2TQAze3FjQ5KN zE*5{U-I+d4l2I_0OKq#A%(9AAkb3+VUy{jR1B9)7)b?Qq;96QMH%zb{?asoxH>6#(o)Z2chp{uR8@lpQEMQ(TWljEo zgIe!TkF7muSFJwCY*@fCXwlK;=m{tL{F|r}Ry;s&Qt9+8xB5=bI3BbJv5z8wDF#x> zG7Z*EJ20PBccR$23P)e#)7=7}f4dl9MJx*X99(%eGug&PvY zw!O@FK;A5s?lg zd834dmtu=rlq~IO4Lc-03uAYNM=#a^x>Zj-T0u#Evd90p@E)U?4L>N~CLYeNP+!p;ba!Q-GnJH~`mLUzpg3dn z#<*sXdcoCM)We@3i!(dY7wk(_0f_5gP55O+zCpyyjD|Wwh5es#!7bQ}uz(Lk#}P^6hWM*Uu$4 zVVojf@3SwDnrj-T)S$6r>n>1}b+Cd#VoE%Ewso4x4};yxi)*Pnu4*nG&M-nZh`895t85f81mCMytzOcbdE4fMIKm8Z1$kz^HdcL9;SEmsB-v!F7yJlqb48zL_p zS3x?dECFW*6&ev|h9xQ|QLMJEs$6Xb>Qr-$@f~)-LINGR$On}?-K0stzQOiq8`Tg? zWTA`ydxs8do*cu99=9>#F)w!d0vF_WkjxjseHJ|ATnvzVfh%4)bDj1tF*`g55ZSdP zz6l%Kdkn}qF&iM@yK%Vr%?ZWoTlU_d-8=1F80&XyPpjPo{h*A24q7qvmHD&<2FRyv zG-r4D;tzfLxP2G70EYN;gU?Eq(xYANi{I_tF1-AbaxNW(-Hh&O&0D`LN%LGB6E^=G z|Hw_TYq+aBK4nv9JMZ}75Y}`lp@Jm#Pi@}d`QE`d=n}ZqDqSYI%yqeAw zH2F5keX=43Hj=(-5DM$@sLyh8JN0c3%(UU@w)L`#uVmDh0X_^T1j}s%1bAJfv^nc= z&bVnL2y+ZBcllMX*^G@0E@2-QkI+REZ>F1+i?Mx$Jr%yHkYAu-Girx$D}1%T%h%Sm zPbw%esO4*>3LR{eO}SRgkCJ@9?8jt}61jty78XJH=D4XfkB zC3nHY*(v8r+8i1M8GW2H2H@~xZOu$(<;^V!peCL+>XsejN(x|Kn?_({&i&eWIQQ@n zK|>h$Nm$kU>;RDFq=BYwZ`y=JF6{ii3PSc6I(g_ismRI2=+$h!aD03(KzbcsP?>oJ z_S?|m`@TmJ_S+F4j-#+Kos#kdpq3Jb3gUsbPSPtMM{yIt__uMGThffMcAbS$ajn-9(%F+ zq-$%mbe8O>skyUCte?7$eMS|-UH#@y)Q5LXh1)9BGM^lq*Bm+ze*`H0>|HWZSu@BdeLElOe0;Is~P*4XTRww`S3=wLv$-tNNeFc9<*MjqZ<7u)}GNJ z*u+es=JBl(HRES(yzLmX0Ihx8 za6ftUL~FN1u2B{*3}5HlvYL|Aw`JpH54*T(4@j(2bN=JycyiPZ_vIBMxERs5>r}fc zhqGsf1&;z$lc^gOFe-9b`6A|a^QIw(O3n8jBUDgKmf@yq+uJsq151wPl1y*?mgRB0 zRmLZw3@SBs%fr^bf&`bX;#X2(0Da#y5uaN7qI8CDeRyQnYth?|PIUcpCUpicezsGQ<7_eEzd|!4&<1~W$q4vt@QS{zg&GJDI%2k`&NMoMW%WxVmbj5Yl zQfoUklTEu{f95*nU3<^DRT$uxQJ1?>m1fcrmAwkwF?;&L?f7q}Dm*YF0=`%~<&=Bd zv(0ZC;q)$eY{VHPsDB^MD;D~v=)I*T`__l8?~eytvea+;Dr*vL8ujH8BGYS9$>T$y z6Np%(A^Yz5(XW*H_vJx-RNeH_9P`TZ9rSg_E8Vg6S)=veWgG`A&r+pTdnmabX6)|w zQEjO2O4y{WcN`71!0pRj}_LhXu{VgNb0MQdNR}=AsZffqU7k`%ysgB|$Nxq)% z{!Xvo4Zij9CiDD3_Efjv;4b{Lq;UJ;v%0xf$J2`CbI9QF4v=U8Sn;TGCs5(_DWpp;1T0FEj_V0c&Sax;los zsHShlTv9qnMr|J6C5o_nf5Dn4iADTzN4zv$y_h2w9~7tPCYE$M`4LEl=?ne6&rQK5 z@RR+c7+(IvLg)glfw%m9ps9^EcRM*TYM30auNUuRW5X((YupP2L#M!fC+obKh1WKKPNq4j6xgd-9D- zN^m*rhHvWzt$2VR2|C49M&f6Is*dklvn6sDnCnzs(x2odL<#ShMcG6TkuQ6%OUpT4 zx*3Mz>G>zV(n=_PO8k@n&w;FCrt+$^2eo4Wbpq!rgM_+72#j}s0J(ODdYn<9jh;cU z++b7!9u*5fJ%QC{mIb8)tD9#v{VKE)(Fm&r8=NiidcjBI?uf_JatDi8I^!#gq;61U z$R`F&WgqxASZwAkAAu)xfogLTy%-?)0RC0QDO?9I04u3vdh5{{uN5+!oc zTJ{MA<6XH$w6Ch*vrP{Z)j-olQ2$AN84@vIQh<@>%~!dx7+ywqEO#SM${e<|etSYf zPyCs^$fnCX+3%M>JW|j_V_wm84|06Ke{(XXL@;D231>?Qk{H_-0^!)w=UMTIJ*Z;! z!2Y`Kr|ZGv&6h{y#ti$WSelU*A9|w!NA;`p>MM2>Ti#w`C`Yoo)SZ1+68)=b&U&tB zTNPkX>WmISpRpi>OKEJ>jQELDeZMwZE|4nOREmfm!Kk!6q(#Y*FA3JPg;;+sG3tj3 zUN5T@zA&xHq4tyT>QL1Bz?xQEh-e*R1FKJkzLIRimVu;F}8zyDaOeV?ASGb zAHPydn6@5!VnJP1?Wb7{b16I}9@$cAiBvw!|e%XK6Now55WcS&;Dpu>}G0Ek!}8 z(&m6;@4re5Vz%?)gX;f^| zhH~rNO_K$6t^@qe{^s6D2Z(=CAcJ#(yv??sxwk*f2&@aNOPaPD2V*~c(fnonkDvVc zSqFj^8b8sLnwv>87k~&3Y*gP*8Q-!JO`d<1GH$~cEgO!FLW%pE!G!FLj|L^!%}l%s zCC7DrRA62QbYO$I?04cvp(p0PHm^<)Cc8ZTU|a{uKy^}>!HoQo=UAaCss0csMHnRz zkb-+EUHD!jWc0CHFm%7N&82cvjS?AdSs+3RijT3&>UzQ+a(0ph(Z_py>L~u_S`-qE zkOMmn|IwpJeKtuYnZ^&atjLX$8+_zJ8s2EgRq3K^t@}^mPRuf+e5DKY5*SLAl0&?; z)|MtrmoqXUl*x8DREYhvU*|IxlDKZfC1Y46W^96m9H?RQeiFaY=l-Y?_vD_Lj6YBF zgc0SXGYk0`Cuyc06NZP6D{ZO;GmD;^lZ%ssit(XOboXG5QHm+{&lstlh|5?{_^78%tI!nqIRVNaDT-lpvJVW|uh29%-L0U{g z#6+X%!aWc(B5FUmfSe`M=^*2jiHYmhCOz>xCC~A?u$xtRTlBK`9d6kuJN-UY^%@L` zwx((h#7JXOCeeFR?Dcy_D$~}9%0?Bkp86HIQ-W*h;w&lb++l{GpUYEoL^9cPBK~7p z7(fTJva{H6ZtU0%U+mRb35U+m9jV{fE%**@zFK7oNTdOztDGLfM<7CskJk zC4Kl6EyvKV!@el2NHxPOI8-Avaa4DB=+_^1|Au!&m^FTe)1}4Bv_btRQ*%^f~!Sabf;4-z~q z2_R@qow{t^d#zr1Fy-F7gSbrtE)QPx9J*StmHx;?T+_#VJZ{_}V({$h#@m9?edBQk zcom)EO6B3oVcDLY+2397TwCep01f0`nGZ|qy(?hZ&V=3Lhrsn*Ktx#l#h8OjUmf_& zcrN{!Bjr)E+qskw-*_i6Qsz%$(s<8u1)`1q6i}6pFUChZlsuR`lx*WZ@OG9a(en9O zqQ-zn%8J_ZPZG*@Nx9(c=K{PaZKChAlx{E;h198Vl}vF#*J|l6@0qksQniRPKHvF9 zg=>IoHfuJwzgX!^G}|J&=>Y1a>ZBBm99x`Q(@4KCcfT?5zM;5|LmUdRkSc()He-0B zom198{2CS~2&p?n4P~HCn2otM_RWBlv<^}+tacC+t8SK!NFMRd@H^v6G@V4Ip=1lW zVKi$`Gj7EUb~~1DSR;s5u-xw)32SjamVK_nn~A{tlRkKN=?c^&0qAZ!p`&;(>Ck`D zD0)*As6q4iXDdjw)yM%~H`9fb&E!$kubrIFZB(K7uT(|T0k+5SuX6tAudCDO)!V;o z`c#xBm!puQK>n3kLg#*Ar@7ta#F6c|;V^H|Pu~cG)g1{HpYXLP)T^>rTKm?S+or3> zn)&rq-IbpJBgOf!ENDSGeFO8wh=(8bP#YCp`if2PDbUPxUJkJ~o2r(OAQ|tg@>g$% zn&9K0N$Ehva*#ETEsvRmR$yTwg$fJDoA;&Jb#y(OuF211Jh<-6doyerGEq7C?OT@Z z6Br3#FnJ7KW@2^no6BD{qrRNvdXgCVi^wHsmGWi4h_?<$fv zIO5L={AB9Wjwn$=jVQuY_V7%8034s>m{NB z?E0}2SU~eKmyRVoRgERYRO&q%79aJ!^Qm7zJ*+8xY+XT(9iqyR;tBmgtney@XQbn~ zij6(orOmtjJ4;=M_ebvI0ny#rqP7LYw1AG&vOHz{rebGRnw3x$VuSDqCpdI;n~tPe z^gui0IowK{LeQz=W(~Ito`8TfuJP;pF#58uK&BM`_RrFFr3Z8C2<8NIp6{XJaGuCV zxbsYna&RUYaoN=0x=hCyEi2AEVIjN0;yyAF$isceh$EA`!8WZVG58@99D$6LGF;Fj zFzPDBH}+;Yt$r%_W#e!KUM-%tSb+se(9*SHRAB zwn?1$h-Wglvw{!Z8{QY~l6a5zI38X`^&DfFBS%C9ayw!7b*_n*7?l^T1U)IXHWbPb zrU~9TmL*^R=JIp?C}Z#scuTaO#L2vlK(Li~cPY*Z{vQFfbz)s9n6LN&*DL3JIiEV= z0oD)-y;}xfknGf}%FxSTG@&nNqZ(m1ou5;8iJmSF)4EwrsyxfDuJ7&d4D^R5^%pzg z$5KyDP)hh8s5&Wp8(YW*p4cm<*RDRBH0t)ASGlZjPOmThDsgr9xpTcce)gn(oJax3 zZ?D`nujx9Cjf>-B4Bwc9jh63=Y>Ny$!w}9_`u>RvLuMZCH1S?cYIHsxBV=}M8(&LG zULHQ4G^bunJV#DS4oWR#c11@kr$1D#e{N+c4Mg}PrR5~$_~m#c<)nFe1$lU+_@(4H zxVgFc__(-bI0VHg|L-D@0#z&>t=&IRa&qwt@}yDKK`{VyD?aXe(I`nE zCjCJ4MMTy_f6tuXgIDM)+6frT-v?OgPwhVa(rdU>(bd(R0}hW54vvwHcG2Ah@uYNb z?#C9KsdE4$!j=~Ne(hepiIw`xB%ZhL>m3wP^Mu{69@Td3a9$V#WHGS!WKH%Cp6)>IuZQlXtQQyv*s{-W;lH2C=F(? zOVwl_s|g;eDG;17TdR58$y)H77SWF`3Edst2tNX01m2Nzw-b2{_=h!EnKgLAM%`2~ zV2-$T#<&duwRKvx4W6;}*JB$ZZ0po)8(fv^%#|BLj_dS}8+^x`P~>2&V>7Qkp>vkA z=T#S7-R6x4=U3S$v;NkvP--v=1makl!bqCp8ORQ@K}FVu6uk=Of^W@P`8H}!NPL1y zyu*N9??BGBK9;rtlD2-~HV}f}k%qf<6x2$>2hDuhNc;!N5%4P>{WqSPo3io}nn|+R z_-RtvvL5&Z_vANHb3-SQYXxqFms>E)-H-T31B_~+l_kLP_6*!|kGA`3p?lAqZgH27lOVapMvbP$xC8TaF)-^<{vcY~J-RQr)vy>iozmG&d(sme6D5 zjvf(s$?Oi#%drq%05pY-p%H)R|3OA98!k7Qr|JFy_b+%>u*>p-90TWGfPi$FkMTs< zMH!aR$ASNz3g46yT)U}Nm@vTg8f04`iF&KQ=c^INPxE~EW9qv}RQ-Gm%$`V#bfa($ zy6SgyqqRqqmaN6_u_smfx9f~!EzILx=7;Mx-u5se1o41F5W`jt>uH4uUy#Fm9NB!N z(R{4vJj!^8`NPJ(^ARPwDQ>t6th@^<$OYOO(`ijG3j~+d^KIhlSRM>BsVFFzBS8_j z&cn8j?YNG<{B#ELjv8x9s)rMZuyfv6glUsv2;A63sex*(reHWD&3+TM3k^6zE*oAHwNLHII@3sHI{)ROtq_S!i%V|Jc1Vm^I+0FSDe0Ij>?!V$R zFx>9twuvVYXWQ^gNL()EnKs82@fWESZ@309x}kN5WYm1zG>4_*Ci9C_vz|(~e)fCR z5~*nY#ze}?theb}!Op94!7f|$>Wt0O*}LYgaIyA?f{Go+a>1XrXC_B@d57WZpmr9j zlXtsacN+kCqu`@$TzrOf!A@zZAf;_wXvUV^lJs2slV@8sO#Y4@rdH{1BqQ;=Mld>n zATwI?wO+%GaE26~H(YYm^xsezX=qNZS5wpN%?v3Xue|K2rY4S|sxxo*FW8b@jn-o* zgI#MBb-DV?yu&p=p;!CA3U!l=RegCOU>6Y)@`qd!sAu4~$jIHXg*UmNF&e$J3#fD( z3CW;1wyl9_pIHSqM8Oz-6f3E0u>WaksHPUOZKoVs3SpHdkDE;nP>>dv`o8R;b)Nf0 z)H=;n5Nw`+ZuByj+h1iAn4%Z@OAp3Hba{UUssh94Xx${R6zl+6@rr2$I+ zpc^+&e@tnPsFn{0%w??`e{sDI50BlAw61sxwbGP~NIV>7>NV%&j7YBPF|}5Djdf*= zusmdE@HBO0{8`*J<|K^}JjiA|{u|sZeq{@5IXFOY8Kmi;3Yn~miI?=_K@YDMeyjCI z4@4o*URa7!7JyyyHSL~=F~2hL-seL>Wo!%Ifm!KCK`mXG6}!ZH4{uYgG+86Dt0hbY zNRbG7E5oVxFcHPih(e{HG%mB!=sdQRdz8Wa%HS6CgBqBWnKdcss~h80ZwHR4Sn}I+ zppYeG6IdD!`V8wk84iVNhB$=Tu}jeUI1TLVlD^Q=f^rvX5Lv1@LX=;W+rIVdL9;W- zY3YSs=@Ip`r=7W$SHmAx<7J$f7BDDo#xdo!#PL*u>hQDF4r^!L)GvGfH zS{pn`bFA>Gt^JlU;@YF~+3Xq!MnvWjiB2q0z0Eed_anZPqh#BuTU!^QaSuxC=Q;1- zM(=P!X+PD+Nu7Rz&>w@t)K$T4=;uO%9~ZI+q>WL1IJc4r(KpmzUI%=KJs-&C-|{O7 z9=`#R73X?oUPM0`?(UWYyW|gTio0pyr{Ygb-hy{qx>8s^?2;Eh20z;5%*h!G`mifs z&}ZMcidMz8!JcQo4tQ(?>o{C+^tbyCfleA|LUNH^PS_Z!t0LN{&!YxO{GQ( zw=F*F%B)IU$V=Z&y%2j1QnN?5y*~dj$nsy3EYwbQcgg_Oo6Q(VzJHM+nryaDLQY%v zZ}EJ`)`AJo%?6{XUJ&E4%$+HB=n~Q-jG=vy>Nd?^=tIOGuf6@T2bC$=10mL7e^^?& zzMPnqG(d15tMmB(fle(O_7L>NxTkAu?RnA`475HwzEZ$bC}j4^`z@VACtyS3x3s-c^5)#2V@+9@+&>2fIt zc`*kLShQOG@A9~vGJTeo7aOH-&dnal=~wu+8mJo4njHom)G_{OZ}?zW;6KjJ4#qVO zIsVMv&%*KKnHBIj8dtcO^J=kpjqj;pzfraGX%g?hMza7`FrIf0%W2=d#@?7ybf>QV zCp<#*6_EIV14<2{@;cDSWE{rO2CeQ5*KwJ|s^&28bHab$?D2<=UM#O(w1-|i+I&d+ zp32Lyc!bH$4Ue$|L)#}cZ>a23XrT=__a2nJ5P}J$DqkG)2dSHRj6U|Ic$kPzTA>h4 z(g7^eeoj&lQdS>R)&Nl!h&2mk#pI0O?123*Pwo+UD0(&oAoz~N{tm~uiY+}B;|#|g z`}Tf(fTbz8HR8hmQ@D2s$UAJ#o4BR(tPz|h3Ype?vNnS+(4C}i8XxuA1`YbsJ26() z&KfrxFalaFJGhPV9xf>CGd25SsI7203nGYQM=nE;*V;+g&E&X)^B!`aK8Og1(1zv3 z5^;{){$7d!{>agU5p~8uGL5)?_+Uln&QTCdL^kr}Ic9RK0%b+KgEoK$A}qTK(HX)+ zQwHH7T3CJDV|xy0t0uJSg7DO6Rcs~GZE#&Yxl6i|4_2u7IFq+9>asP{y z?#9tb)M=ara1N)VV0ds{wKuNNNM6b3oifd!}P z{eOG$!qqsf)g=G%<-<9mdIkQ>UYi1eNdlqM0>QNc;TKJxqMJg7oANuoAB;DA_Y{re zymtP0IN+0vlXbS^4KXt;j5EaeGg$RA)bTTDbHF=#F3)v6 zNct*+W>WY#wiyw?0{3?$FAp=Hz2--|GdoL8s_6gX{`iv6A5uuqCqW6xrO}5LLQRj$ znHPZ+e=GAyo_02liI;XUj*0Wv1<>gGhaJh%gzTek7*0sv$3Yc_#Hr$Lwr7BSveZ7| zc2c!TQy76HtHNj|^~aL`qeBmie%Yg71x_un1q&vIvXPoU`Hii+!RK<{W_9nPidmlu29N(n69w4!jZ?v7 z%M`w1H@TbHsS;|?f=FAm2}%FM0Dx#@qhG%rY!BJrRS~zo7n~kX4;Z_2E6(M9((*GD zdcow8-(-q+EW5zy_F|2;_RyG;R79X7OLqU?0;cC}$SaorC+=Sv`5t!r3YCj>7Kweu zUVwCO<$eupX+_i`Z!FH_zP}*dI5eHS(on60A~YRRGOY&JZDLs}dUy`SbC~z25aa&W z!r(-7r9Z%Z5k)E91|l}io{c6dezrfyoDX5bDiKJJkBh_#TWCU5BNUbASzm)T(H)X; zHK!!^t@iGI$t_bQX!(uH0Br`?j2_S5Z@<4=W=TnWqol>8SVWtWD4_(+)P9Pv=Dksp zSJJ_fGo`G^PS>7%sr3&4`#)e}i*FVMyd0Ce``)>Fi7dq$qf%mF`>)}8LHeFF;lO)^ z*LM_~tF-v0k_r_MIZY0E4-La*bf*aWE78(sOO5^Q$~C0GeuBVdyUP++MQ>Dsz{5h5 z1KnFw-r4v61PA1*#b_O4`l?od751+`ug-$;YyQ~OZFyQD>W%tgAjMWkcw zP}$FZ<|dhuI7xv`0))CD9u}l;oXC7RMsB}hFtT{ZGc8JW<|YqbfbHWIjd)JDoyuvF zwwq4OAV-cg5yx*-wDqNW!<8+^P`P%e0xXx;@88O^xu}9VebP@ZkxMOn^%Z8spE`&$ zW+&>xiefL=cIL~TQcycE_V_>bVd+h&DCWThw`+uUZTf<$iROXVn?X$ zW#aL|GTgswa^o76bf<4>#4jBOLD8fk3B~=q{)B&NZ7PnJR-LxZNFA>O{ED}^Su6M5 zG{zv>*rlYWi8Js=>pnorWi8t$nHa7!F23R-%MAw`aop}Bh zGpEO$@I>mzgsuj^FdFMIPdj~$wb57UL~myhC%93vyf3)P>*Fu=Lu}V=6St;Z+22m9 z8qi+NOgu(!AHN=`6$KzO5DcLlu=jL|az-6YC^cm?e=maEc@PvH({$Mo%rl+7$9fL%V(gL%wY-oIa%4 ze9vYatApP0b)03fiViBa=33H8z~UDXxanLGtowU0f=(5zq+%f-zRRKjCdZ`y!q@bc zoJ`S*`YJ!owD6ODe0kGXh)!?G=fi#Ja9ivR_v1_QzhnkFWBU!51BV#$oaQ!fEq{Et z6220-Bzw4PQYA@R{4z68$VXrQpOXI~$qml|4Rw=Ka>^vE4t4iZYmEagjUrBU@KS4| zPVv^FX>}uwDX9MH9fXZOEjB~>bSbGNsi_k0qCO~owRB`Pw=a@jd#H*tp^r{|{qBs+ z_QwZ^Omr$WM1U#3C;|e=6K7{9(#rbmu%wkySvl+aCb0hnYQ6^pf2)P3+glPV2 zb+kEuvDI-|W$U)4&q@C_jk6AR>ilwIN>Uktm8{PFzX5~@kyl_<$6(d}H+@QyrQ>d5 zTKW(Pe2F)CUO2&Zo7&xo+F^Oh8tg>mH@t2DzxEeNEbK!E`)%~~`m{7+-ih!WsCH#f z61sg)S{$Auf{KR!b7YB&0uEjS9{zBw<3ft#b=`_7Zn|AsV(0fTzy!Jmz0{-Z~4(Ui=i}sq3o|-4P z4*=h6>XY%fPfSSmnogYhO(aN2L!%+_(Ed*YV_$VAKS04ayd(G7>FoL7YhJM2k;F|b z#_e9u>h(wAf1Kex&?|UOi1%Lu2@WGh*T5=&mLeXmCS|F{F0UrGtHwX9CMT)J%B&_b zsK%qo0bztcuZEwok@o!wNUND*c!qQ=Sf05G*Pyi4P<)hLW8d90J^?!XaS^1}s{HAR z9fgB9v$|>~ZiLq;yhuU%S*ZRmXJ*Tu#MWtf+n6{21%@-huGAXEF8J4)oF5&w(=TZe zDL?KT9Fcx*5fIBVivQ@_wjhFtl>Zu3UKfK~yDd5CqM7tnhRm4NI&tPqo_4*lQdG(; zl<2gX(}_`^Om3);@dlG6ieb6v5|{#2kSvrawV~6o{~-l3A^pipbWiXI*tdyot1wwB z3I2=!Crj*mgxRoX%R?|;Ut_CNc(?j*)ThG$v15(CWa{Eeu6hF73?a;WFTlD@;jvqi zM4SAfY;pqFgGBGXt45k0eApA`#BU_)CCfs5+KuaTV8|O{`pZHw?cJ|wOzkTBmP+i} zzUjc!aI!H(U(tVPKfbgeY^&_QKXBaZB!|hto=R3Ke#1o`n1%*mHa?`gS%3QlB=3)Qj$mkH{70o%S94qf0WNKW z)UOAyU&|ufyzX_a=;N$Ff6{(2d0hOjWpIS*d<^S+6qY?CWdHg`jfZDP)26CtlbAj$?sfwH>2 ziC-D|oD1=tZiM^-s9dIdi8?2ZmeHR~?uE~&#o#`BhkVR?(GB2nyf6)yd3-;}ErR~k zdG^}{gme2<#td~_`o+oLX!#7<>5S|0MSKmr@vcq=Tz^6m4lclp#PBA#f7z=7%Ys3# zz`MLbwNmc@bC9<#VG~Z3<#NnGtMp5*KWC24v^V<}cV+pRB%`&V;AZc{FK@r3661j@ zF31kv?J98`35bAWjH>&kib&ce;+{R~6elC%Rev<)Rrc%rh_!wjfk^+PuYUAto5TRn0gz`O6Fxn`H#Ufz5~Z&AHXy?;O?J?;d|FO$^_AWE~1h^?)2;tf8f4l#f#e=_5>DSJYvt2P= zpX~8&0R6r|BByv#nDy=LDtB-RFTu)vQJ97A>C)|pUg}$~B_Ddnh3fY^9^?>piWG0* z;6iwNq_IpNmO<$EOry{JwD^PL)XN0aPJW#MYs=ExwROqOINJ~wnENQc$yav!-tI?(DC*;- z-*PcQE|Kc2XJ}yVgW)oLM#cv}dy9Pr_>*4hp~Yv8(~}NT_I$NmYQKA3nfIcA1_cmqGDfL~&{tP)w}9#RLfxR;}X1k0;UkLkTM6KwU6q$z){G)_Pnrv_8BwoE zBZU1hhr^W;#bgsJL{Wl=E?mN&ZO?l3%}t&6b3qQ@E`|~d)j!kPIrXk*R7DB{evb#u zz(-q(-gSKOZ)oBt$kNJbAno=&q~LJ!fm*SjmqR`!@Dl{^>J;(9_n-UT6SkeRIg&{E zv79;+wz&yA8hpY{4e2iFq-bRAcP;E)ZKykSSZiy2c{z9C%(V>_82r*dv_R3{R?Px&q2rc+5 zt+aRirkRK!TPQ}_^b|#SGftDV_cOA%_R7%$Gf(OV*{W#>Ydt)9qY9 z`h9j{6!4vwB`yYSox09Ur~{4o7~-8r_=c_rLX~0NYfom&E@+L;G^o!&2|LJv{|vgZ zcRlwxyy^FUe)7R0-$cp*6B!pI&6rfi%$-A~a44r9joV*Mo8QOB(1flyQPIeMIIuxN z*|e0E&0>Srj$JD)q+tQ;{F|Zvw$6@>sNYNbYQY&vMlH% zi>n3iMp#j#3xF2`$W3!f!uaw5hr6%aGF7f1g?g3&K^R+m)Y5D#EBQ5K)lL}Z=-(o3 z<>s5dgdIly(%YnJ>L#`*&?t)99)~ctjQ-)n7>I1wGd!>A_Hz?N?!g%mp=Sbk+5eri zkmW@?9vhbDkhl38!0^6~|I!;XbqxUS;q}>{+QUuFJ6fM=5-L%q^erCPd zDdb}Kn>5BCy!(cqAO0`4w3`zqOC-hfCDo)L+Ni&Ka0})Hq{b$q#V*ZX1@FB9&e=OK zJMG!SdM9SQ`fE|DF{7&qm8)@?3Tse@YoJ+bkjrb}?P|~u|MT+==f8du^bYqo{a>|R z3p7+)AHPw`vq>3B8p>2M43T#zR}nW#Ve*=x@u<*f$|QAiz49DaW%NKUr5KAw;Ucf` zD5FFr?Ep{r-FZ_kZs_bJjWk$8XIZimqDQ)BWDy zY`DRn^PBZhWze+_>DnOYYB|>Xu|_?Y^jg!avZl{eJH1yez0c4c3kI1I1(RZdug0%9 zv9soHdp$%ce z_dYD})mS!_&2a#fT1KwrhUd!U8r}R}aAyRuGjzm$NXTfkP^ibPt^uEogsauobD0;+Rr*QSYD?Ezylc&VSBus4 zUj)!5b?ZzTmJ^MfFCb!OW=<;b&Q~RpYb4|Qz}n=No?eZfzOAO_BBnC5jg-DNm@egI z8*C*U^1wUb$>Hiux1%{a#Q!ZK3 zsiEkT!km^0u*)p3aWRds^Rr@6KzW~60>HEH}A=RT3OIb=6%rnnd*Dxlj3ngSX zT3u5P`}Mm3@VB(TrJPE(7*;(xrq2>p37ajojafK=)Ix`y6mPb{x{FN7rc$aazHai6 zO%@8!tc#atLxD}I1=*}lZl7gvNY5LvINJZOmO7K_&gjekXxtcV@y#Of!4iV01)_RJ~GH>hp#Qy@9*h1qtBXZ0QF_*1Ky8c6V(Y zsMi9NRn2DXm@;9_qu4XLs#V9=2RJ;aP#7Rb_XEMl>-|M8Io0uRCGjhTnotL7pe3q* zpUKd`_08z8SxFU)Ld=Udn+qtjrS6yA2i|T59_F_-fSU@8=(jub3qO{t+;By4W|NP* z;Z)Nl`G?>t5Rv^=w;BuVA658*D-xQhR&l`?50aErrwS}y%L|ToXI`BRhGzk>7~=1< zdo?GxzAj7XFFO!UM@B8}tON}}tPjh>V8UQaL}e27bYOQYd0V{l%4Fb;D4}tln)CJD z&lEZEd01Wkc=(m@{RGLS*b99kx}RdESTYVJd+A$+CIK(Vdsa))<4l2jh)ML#;54IH zI*#58=Yd91*)(j#KC{ek@cMAw}NS z;_ojaux&!CM*%JVvy7fx{d3ayN@86f7D%LyKZc4X{ym{CaORkQb7j;*Z`S5SqtpbY zn+K<}(9p|-KYm(QbEYG%var`lzacJFFl4SE$ZV-E3b#_}?3^wqTq)ti^PavKT8oN` zJiddKbAFA%U8&I|8M<&PkBf(6R^GileAA4a$SZm`bckAWz*+k+@w9><#v|?nX~xvT zuxwE~(5Lver)CdhQ$j#AnG!!CMK{|5t2!ai-*bp)ryyYF1i#Ga*!f;mcSJNWYjLkM zE-T%B2T0M{S<6B5xASAOh8EK9bhDp|UnLf|s4-qAq@U0;J?C?@y^~v=PCx0x3O~I- zJ}p7CbRn=tqcPJt4EH9tX!0Fz##grzSSP~<#F$fz#W?|e#YH{7IwScJS(6q=&mgy~ zqOjw<-pp`Y4am_Pzlhex!sdw~2NU|Sy3z`tBX5uu4J+SjX0+<#xHdM-{1C+`VQ<&OzWW>Kp?7BaGnD6>P%p5J@%G}T=DZ&G1mR-4y2cBz`x6v94#TE_`9gU_Tyy2C>-L-U|BbI&y81+9Ux3VpbOI{7(BB-5_9GhS=j zR2~^mrO_Bon(F1$v3W4&yb%$0ld&D$NV9ZH+%x*e>QgB}hBv6pAgXiqD}}-njN5LV zDPF~~8tTQUcA7K82+$b4gKDMy%ossQ7NMGHeHWz*j*#$lbw&41PE(YVUd0zph=Hau zv@yIXksLIbYCS%Z9o)3E=$6}pf1GXwzR0(JHy!mquKu4q{Ye@2Z4&uaO>)T%lyd6V0swa10+WD^S{L<6c}s3km#5M$V4J$a)DADcLG{j{(ZIvl zIB-c@3`z@syZS=Ch{InC?R9pTP{>f+B51BA#R@r5hm<9@7(Fw5TJ?qFA`b21wwMiC z_^mbjKyPdr`1^tXO=uJbt?ji~U`+J|q{y89TFA)g!nxJ##zGpPfV!VSdkn2+-pCgg zLE+guhZK3+SJFKn)S;bx8apq92-Tpa!Bc6@*e1^~PylZ5cmAZN4uj_ZYJ2;Nbhyuj zJ-t`NUg~mh)aXlB`f+{<4_p=ctb7WkdyMj znj+Q1L;H1aKS}^TnG*t*U2C=c)SqSBhy@N)?p*h1OF3ih!bAH1FQNTB zv^;QZUS)PZFS&TcrYjfynP8+noLmDL%BS3U>(Pb`F99_+qy22EvTXpdz#7UOIrlcl z(~yw^Xur7fY>f%X2()pcwM!e)-DC4bJfz!Z(!55gP1hk!zq~)P^9PcPFMlb3 zV+G5T@GeH-LcvbA-QNl#AhxO6Ucawmh_5*HU$b#)nQX-o6EQRH3pb$|w#gm=9ej0+ m7=*|9LnzSmki;<}E{I49!h1_-YZ>Sp>gh@#k(PElB>oNVT;JIM diff --git a/doc/arm/man.arpaname.html b/doc/arm/man.arpaname.html index fba6292fea..dfcbab7976 100644 --- a/doc/arm/man.arpaname.html +++ b/doc/arm/man.arpaname.html @@ -10,7 +10,7 @@ arpaname - + @@ -32,27 +32,45 @@

-
+ + + + +

Name

-

arpaname — translate IP addresses to the corresponding ARPA names

-
-
-

Synopsis

-

arpaname {ipaddress ...}

-
-
-

DESCRIPTION

+ arpaname + — translate IP addresses to the corresponding ARPA names +

+
+ + + +
+

Synopsis

+

+ arpaname + {ipaddress ...} +

+
+ +
+

DESCRIPTION

+ +

arpaname translates IP addresses (IPv4 and IPv6) to the corresponding IN-ADDR.ARPA or IP6.ARPA names.

-
-
+
+ +

SEE ALSO

-

+ +

BIND 9 Administrator Reference Manual.

-
+
+
@@ -72,6 +90,6 @@
-

BIND 9.17.0 (Development Release)

+

BIND 9.17.1 (Development Release)

diff --git a/doc/arm/man.ddns-confgen.html b/doc/arm/man.ddns-confgen.html index e58f6601d3..59a59cb880 100644 --- a/doc/arm/man.ddns-confgen.html +++ b/doc/arm/man.ddns-confgen.html @@ -10,7 +10,7 @@ ddns-confgen - + @@ -32,31 +32,62 @@
-
+ + + + + +

Name

-

ddns-confgen — ddns key generation tool

-
-
-

Synopsis

-

tsig-keygen [-a algorithm] [-h] [name]

-

ddns-confgen [-a algorithm] [-h] [-k keyname] [-q] [-r randomfile] [ -s name | -z zone ]

-
-
-

DESCRIPTION

+ ddns-confgen + — ddns key generation tool +

+
+ + + +
+

Synopsis

+

+ tsig-keygen + [-a algorithm] + [-h] + [name] +

+

+ ddns-confgen + [-a algorithm] + [-h] + [-k keyname] + [-q] + [-r randomfile] + [ + -s name + | -z zone + ] +

+
+ +
+

DESCRIPTION

+ +

tsig-keygen and ddns-confgen are invocation methods for a utility that generates keys for use in TSIG signing. The resulting keys can be used, for example, to secure dynamic DNS updates to a zone or for the rndc command channel.

-

+ +

When run as tsig-keygen, a domain name can be specified on the command line which will be used as the name of the generated key. If no name is specified, the default is tsig-key.

-

+ +

When run as ddns-confgen, the generated key is accompanied by configuration text and instructions that can be used with nsupdate and @@ -66,7 +97,8 @@ rndc-confgen command for setting up command channel security.)

-

+ +

Note that named itself can configure a local DDNS key for use with nsupdate -l: it does this when a zone is configured with @@ -76,24 +108,32 @@ if nsupdate is to be used from a remote system.

-
-
+
+ +

OPTIONS

-
+ + +
-a algorithm
-

+

+

Specifies the algorithm to use for the TSIG key. Available choices are: hmac-md5, hmac-sha1, hmac-sha224, hmac-sha256, hmac-sha384 and hmac-sha512. The default is hmac-sha256. Options are case-insensitive, and the "hmac-" prefix may be omitted. -

+

+
-h
-

+

+

Prints a short summary of options and arguments. -

+

+
-k keyname
-

+

+

Specifies the key name of the DDNS authentication key. The default is ddns-key when neither the -s nor -z option is @@ -103,15 +143,19 @@ ddns-key.example.com. The key name must have the format of a valid domain name, consisting of letters, digits, hyphens and periods. -

+

+
-q
-

+

+

(ddns-confgen only.) Quiet mode: Print only the key, with no explanatory text or usage examples; This is essentially identical to tsig-keygen. -

+

+
-s name
-

+

+

(ddns-confgen only.) Generate configuration example to allow dynamic updates of a single hostname. The example named.conf @@ -122,9 +166,11 @@ Note that the "self" nametype cannot be used, since the name to be updated may differ from the key name. This option cannot be used with the -z option. -

+

+
-z zone
-

+

+

(ddns-confgen only.) Generate configuration example to allow dynamic updates of a zone: The example named.conf text @@ -134,17 +180,27 @@ all subdomain names within that zone. This option cannot be used with the -s option. -

+

+
-
-
+
+ +

SEE ALSO

-

nsupdate(1), - named.conf(5), - named(8), + +

+ nsupdate(1) + , + + named.conf(5) + , + + named(8) + , BIND 9 Administrator Reference Manual.

-
+
+
@@ -164,6 +220,6 @@
-

BIND 9.17.0 (Development Release)

+

BIND 9.17.1 (Development Release)

diff --git a/doc/arm/man.delv.html b/doc/arm/man.delv.html index 368b845acb..05147a811d 100644 --- a/doc/arm/man.delv.html +++ b/doc/arm/man.delv.html @@ -10,7 +10,7 @@ delv - + @@ -32,25 +32,72 @@
-
+ + + + + +

Name

-

delv — DNS lookup and validation utility

+

+ delv + — DNS lookup and validation utility +

-
+ + + +

Synopsis

-

delv [@server] [[-4] | [-6]] [-a anchor-file] [-b address] [-c class] [-d level] [-i] [-m] [-p port#] [-q name] [-t type] [-x addr] [name] [type] [class] [queryopt...]

-

delv [-h]

-

delv [-v]

-

delv [queryopt...] [query...]

-
-
+

+ delv + [@server] + [ + [-4] + | [-6] + ] + [-a anchor-file] + [-b address] + [-c class] + [-d level] + [-i] + [-m] + [-p port#] + [-q name] + [-t type] + [-x addr] + [name] + [type] + [class] + [queryopt...] +

+ +

+ delv + [-h] +

+ +

+ delv + [-v] +

+ +

+ delv + [queryopt...] + [query...] +

+
+ +

DESCRIPTION

-

delv + +

delv is a tool for sending DNS queries and validating the results, using the same internal resolver and validator logic as named.

-

+

delv will send to a specified name server all queries needed to fetch and validate the requested data; this includes the original requested query, subsequent queries to follow @@ -60,7 +107,7 @@ behavior of a name server configured for DNSSEC validating and forwarding.

-

+

By default, responses are validated using built-in DNSSEC trust anchor for the root zone ("."). Records returned by delv are either fully validated or @@ -71,7 +118,7 @@ be used to check the validity of DNS responses in environments where local name servers may not be trustworthy.

-

+

Unless it is told to query a specific name server, delv will try each of the servers listed in /etc/resolv.conf. If no usable server @@ -79,15 +126,18 @@ queries to the localhost addresses (127.0.0.1 for IPv4, ::1 for IPv6).

-

+

When no command line arguments or options are given, delv will perform an NS query for "." (the root zone).

-
-
+
+ +

SIMPLE USAGE

-

+ + +

A typical invocation of delv looks like: 

 delv @server name type
@@ -98,7 +148,7 @@
server
-

+

is the name or IP address of the name server to query. This can be an IPv4 address in dotted-decimal notation or an IPv6 address in colon-delimited notation. When the supplied @@ -108,7 +158,7 @@ initial lookup is not validated by DNSSEC).

-

+

If no server argument is provided, delv consults /etc/resolv.conf; if an @@ -121,13 +171,16 @@ the localhost addresses (127.0.0.1 for IPv4, ::1 for IPv6).

-
+
name
-

+

+

is the domain name to be looked up. -

+

+
type
-

+

+

indicates what type of query is required — ANY, A, MX, etc. type can be any valid query @@ -135,28 +188,32 @@ type argument is supplied, delv will perform a lookup for an A record. -

+

+

-
-
+ +
+ +

OPTIONS

-
+ +
-a anchor-file
-

+

Specifies a file from which to read DNSSEC trust anchors. The default is /etc/bind.keys, which is included with BIND 9 and contains one or more trust anchors for the root zone (".").

-

+

Keys that do not match the root zone name are ignored. An alternate key name can be specified using the +root=NAME options.

-

+

Note: When reading the trust anchor file, delv treats trust-anchors initial-key and static-key @@ -173,23 +230,28 @@ /etc/bind.keys to use DNSSEC validation in delv.

-
+
-b address
-

+

+

Sets the source IP address of the query to address. This must be a valid address on one of the host's network interfaces or "0.0.0.0" or "::". An optional source port may be specified by appending "#<port>" -

+

+
-c class
-

+

+

Sets the query class for the requested data. Currently, only class "IN" is supported in delv and any other value is ignored. -

+

+
-d level
-

+

+

Set the systemwide debug level to level. The allowed range is from 0 to 99. The default is 0 (no debugging). @@ -198,13 +260,17 @@ See the +mtrace, +rtrace, and +vtrace options below for additional debugging details. -

+

+
-h
-

+

+

Display the delv help usage output and exit. -

+

+
-i
-

+

+

Insecure mode. This disables internal DNSSEC validation. (Note, however, this does not set the CD bit on upstream queries. If the server being queried is performing DNSSEC @@ -212,30 +278,37 @@ can cause delv to time out. When it is necessary to examine invalid data to debug a DNSSEC problem, use dig +cd.) -

+

+
-m
-

+

+

Enables memory usage debugging. -

+

+
-p port#
-

+

+

Specifies a destination port to use for queries instead of the standard DNS port number 53. This option would be used with a name server that has been configured to listen for queries on a non-standard port number. -

+

+
-q name
-

+

+

Sets the query name to name. While the query name can be specified without using the -q, it is sometimes necessary to disambiguate names from types or classes (for example, when looking up the name "ns", which could be misinterpreted as the type NS, or "ch", which could be misinterpreted as class CH). -

+

+
-t type
-

+

Sets the query type to type, which can be any valid query type supported in BIND 9 except for zone transfer types AXFR and IXFR. As with @@ -243,18 +316,21 @@ query name type or class when they are ambiguous. it is sometimes necessary to disambiguate names from types.

-

+

The default query type is "A", unless the -x option is supplied to indicate a reverse lookup, in which case it is "PTR".

-
+
-v
-

+

+

Print the delv version and exit. -

+

+
-x addr
-

+

+

Performs a reverse lookup, mapping an addresses to a name. addr is an IPv4 address in dotted-decimal notation, or a colon-delimited IPv6 address. @@ -264,24 +340,33 @@ lookup for a name like 11.12.13.10.in-addr.arpa and sets the query type to PTR. IPv6 addresses are looked up using nibble format under the IP6.ARPA domain. -

+

+
-4
-

+

+

Forces delv to only use IPv4. -

+

+
-6
-

+

+

Forces delv to only use IPv6. -

+

+
-
-
+
+ +

QUERY OPTIONS

-

delv + + +

delv provides a number of query options which affect the way results are displayed, and in some cases the way lookups are performed.

-

+ +

Each query option is identified by a keyword preceded by a plus sign (+). Some keywords set or reset an option. These may be preceded by the string @@ -293,7 +378,8 @@

+[no]cdflag
-

+

+

Controls whether to set the CD (checking disabled) bit in queries sent by delv. This may be useful when troubleshooting DNSSEC problems from behind a validating @@ -302,20 +388,25 @@ the CD flag on queries will cause the resolver to return invalid responses, which delv can then validate internally and report the errors in detail. -

+

+
+[no]class
-

+

+

Controls whether to display the CLASS when printing a record. The default is to display the CLASS. -

+

+
+[no]ttl
-

+

+

Controls whether to display the TTL when printing a record. The default is to display the TTL. -

+

+
+[no]rtrace
-

+

Toggle resolver fetch logging. This reports the name and type of each query sent by delv in the process of carrying out the resolution and validation @@ -323,62 +414,69 @@ all subsequent queries to follow CNAMEs and to establish a chain of trust for DNSSEC validation.

-

+

This is equivalent to setting the debug level to 1 in the "resolver" logging category. Setting the systemwide debug level to 1 using the -d option will product the same output (but will affect other logging categories as well).

-
+
+[no]mtrace
-

+

Toggle message logging. This produces a detailed dump of the responses received by delv in the process of carrying out the resolution and validation process.

-

+

This is equivalent to setting the debug level to 10 for the "packets" module of the "resolver" logging category. Setting the systemwide debug level to 10 using the -d option will produce the same output (but will affect other logging categories as well).

-
+
+[no]vtrace
-

+

Toggle validation logging. This shows the internal process of the validator as it determines whether an answer is validly signed, unsigned, or invalid.

-

+

This is equivalent to setting the debug level to 3 for the "validator" module of the "dnssec" logging category. Setting the systemwide debug level to 3 using the -d option will produce the same output (but will affect other logging categories as well).

-
+
+[no]short
-

+

+

Provide a terse answer. The default is to print the answer in a verbose form. -

+

+
+[no]comments
-

+

+

Toggle the display of comment lines in the output. The default is to print comments. -

+

+
+[no]rrcomments
-

+

+

Toggle the display of per-record comments in the output (for example, human-readable key information about DNSKEY records). The default is to print per-record comments. -

+

+
+[no]crypto
-

+

+

Toggle the display of cryptographic fields in DNSSEC records. The contents of these field are unnecessary to debug most DNSSEC validation failures and removing them makes it easier to see @@ -386,14 +484,18 @@ When omitted they are replaced by the string "[omitted]" or in the DNSKEY case the key id is displayed as the replacement, e.g. "[ key id = value ]". -

+

+
+[no]trust
-

+

+

Controls whether to display the trust level when printing a record. The default is to display the trust level. -

+

+
+[no]split[=W]
-

+

+

Split long hex- or base64-formatted fields in resource records into chunks of W characters (where W is rounded up to the nearest @@ -402,24 +504,30 @@ +split=0 causes fields not to be split at all. The default is 56 characters, or 44 characters when multiline mode is active. -

+

+
+[no]all
-

+

+

Set or clear the display options +[no]comments, +[no]rrcomments, and +[no]trust as a group. -

+

+
+[no]multiline
-

+

+

Print long records (such as RRSIG, DNSKEY, and SOA records) in a verbose multi-line format with human-readable comments. The default is to print each record on a single line, to facilitate machine parsing of the delv output. -

+

+
+[no]dnssec
-

+

+

Indicates whether to display RRSIG records in the delv output. The default is to do so. Note that (unlike in dig) @@ -428,9 +536,11 @@ DNSSEC records are always requested, and validation will always occur unless suppressed by the use of -i or +noroot. -

+

+
+[no]root[=ROOT]
-

+

+

Indicates whether to perform conventional DNSSEC validation, and if so, specifies the name of a trust anchor. The default is to validate using @@ -438,44 +548,60 @@ a built-in key. If specifying a different trust anchor, then -a must be used to specify a file containing the key. -

+

+
+[no]tcp
-

+

+

Controls whether to use TCP when sending queries. The default is to use UDP unless a truncated response has been received. -

+

+
+[no]unknownformat
-

+

+

Print all RDATA in unknown RR type presentation format (RFC 3597). The default is to print RDATA for known types in the type's presentation format. -

+

+
+[no]yaml
-

+

+

Print response data in YAML format. -

+

+

-
-
+
+ +

FILES

-

/etc/bind.keys

-

/etc/resolv.conf

-
-
+ +

/etc/bind.keys

+

/etc/resolv.conf

+
+ +

SEE ALSO

-

dig(1), - named(8), + +

+ dig(1) + , + + named(8) + , RFC4034, RFC4035, RFC4431, RFC5074, RFC5155.

-
+
+
@@ -495,6 +621,6 @@
-

BIND 9.17.0 (Development Release)

+

BIND 9.17.1 (Development Release)

diff --git a/doc/arm/man.dig.html b/doc/arm/man.dig.html index 5747a46a57..dc0a0e1a0a 100644 --- a/doc/arm/man.dig.html +++ b/doc/arm/man.dig.html @@ -10,7 +10,7 @@ dig - + @@ -32,19 +32,63 @@
-
+ + + + + +

Name

-

dig — DNS lookup utility

+

+ dig + — DNS lookup utility +

-
+ + + +

Synopsis

-

dig [@server] [-b address] [-c class] [-f filename] [-k filename] [-m] [-p port#] [-q name] [-t type] [-v] [-x addr] [-y [hmac:]name:key] [[-4] | [-6]] [name] [type] [class] [queryopt...]

-

dig [-h]

-

dig [global-queryopt...] [query...]

-
-
+

+ dig + [@server] + [-b address] + [-c class] + [-f filename] + [-k filename] + [-m] + [-p port#] + [-q name] + [-t type] + [-v] + [-x addr] + [-y [hmac:]name:key] + [ + [-4] + | [-6] + ] + [name] + [type] + [class] + [queryopt...] +

+ +

+ dig + [-h] +

+ +

+ dig + [global-queryopt...] + [query...] +

+
+ +

DESCRIPTION

-

dig is a flexible tool + +

dig is a flexible tool for interrogating DNS name servers. It performs DNS lookups and displays the answers that are returned from the name server(s) that were queried. Most DNS administrators use dig to @@ -52,7 +96,8 @@ clarity of output. Other lookup tools tend to have less functionality than dig.

-

+ +

Although dig is normally used with command-line arguments, it also has a batch mode of operation for reading lookup @@ -63,35 +108,43 @@ from the command line.

-

+ +

Unless it is told to query a specific name server, dig will try each of the servers listed in /etc/resolv.conf. If no usable server addresses are found, dig will send the query to the local host.

-

+ +

When no command line arguments or options are given, dig will perform an NS query for "." (the root).

-

+ +

It is possible to set per-user defaults for dig via ${HOME}/.digrc. This file is read and any options in it are applied before the command line arguments. The -r option disables this feature, for scripts that need predictable behaviour.

-

+ +

The IN and CH class names overlap with the IN and CH top level domain names. Either use the -t and -c options to specify the type and class, use the -q the specify the domain name, or use "IN." and "CH." when looking up these top level domains.

-
-
+ +
+ +

SIMPLE USAGE

-

+ + +

A typical invocation of dig looks like: 

 dig @server name type
@@ -102,7 +155,7 @@
server
-

+

is the name or IP address of the name server to query. This can be an IPv4 address in dotted-decimal notation or an IPv6 address in colon-delimited notation. When the supplied @@ -110,7 +163,7 @@ dig resolves that name before querying that name server.

-

+

If no server argument is provided, dig consults /etc/resolv.conf; if an @@ -123,13 +176,16 @@ local host. The reply from the name server that responds is displayed.

-
+
name
-

+

+

is the name of the resource record that is to be looked up. -

+

+
type
-

+

+

indicates what type of query is required — ANY, A, MX, SIG, etc. type can be any valid query @@ -137,81 +193,108 @@ type argument is supplied, dig will perform a lookup for an A record. -

+

+

-
-
+ +
+ +

OPTIONS

-
+ + +
-4
-

+

+

Use IPv4 only. -

+

+
-6
-

+

+

Use IPv6 only. -

+

+
-b address[#port]
-

+

+

Set the source IP address of the query. The address must be a valid address on one of the host's network interfaces, or "0.0.0.0" or "::". An optional port may be specified by appending "#<port>" -

+

+
-c class
-

+

+

Set the query class. The default class is IN; other classes are HS for Hesiod records or CH for Chaosnet records. -

+

+
-f file
-

+

+

Batch mode: dig reads a list of lookup requests to process from the given file. Each line in the file should be organized in the same way they would be presented as queries to dig using the command-line interface. -

+

+
-k keyfile
-

+

+

Sign queries using TSIG using a key read from the given file. Key files can be generated using - tsig-keygen(8). + + tsig-keygen(8) + . When using TSIG authentication with dig, the name server that is queried needs to know the key and algorithm that is being used. In BIND, this is done by providing appropriate key and server statements in named.conf. -

+

+
-m
-

+

+

Enable memory usage debugging. -

+

+
-p port
-

+

+

Send the query to a non-standard port on the server, instead of the default port 53. This option would be used to test a name server that has been configured to listen for queries on a non-standard port number. -

+

+
-q name
-

+

+

The domain name to query. This is useful to distinguish the name from other arguments. -

+

+
-r
-

+

+

Do not read options from ${HOME}/.digrc. This is useful for scripts that need predictable behaviour. -

+

+
-t type
-

+

The resource record type to query. It can be any valid query type. If it is a resource record type supported in BIND 9, it can be given by the type mnemonic (such as "NS" or "AAAA"). @@ -225,23 +308,28 @@ record was N.

-

+

All resource record types can be expressed as "TYPEnn", where "nn" is the number of the type. If the resource record type is not supported in BIND 9, the result will be displayed as described in RFC 3597.

-
+
-u
-

+

+

Print query times in microseconds instead of milliseconds. -

+

+
-v
-

+

+

Print the version number and exit. -

+

+
-x addr
-

+

+

Simplified reverse lookups, for mapping addresses to names. The addr is an IPv4 address in dotted-decimal notation, or a colon-delimited IPv6 @@ -255,10 +343,11 @@ query type and class to PTR and IN respectively. IPv6 addresses are looked up using nibble format under the IP6.ARPA domain. -

+

+
-y [hmac:]keyname:secret
-

+

Sign queries using TSIG with the given authentication key. keyname is the name of the key, and secret is the base64 encoded shared secret. @@ -270,28 +359,34 @@ is not specified, the default is hmac-md5 or if MD5 was disabled hmac-sha256.

-

+

NOTE: You should use the -k option and avoid the -y option, because with -y the shared secret is supplied as a command line argument in clear text. This may be visible in the output from - ps(1) + + ps(1) + or in a history file maintained by the user's shell.

-
+
-
-
+
+ +

QUERY OPTIONS

-

dig + + +

dig provides a number of query options which affect the way in which lookups are made and the results displayed. Some of these set or reset flag bits in the query header, some determine which sections of the answer get printed, and others determine the timeout and retry strategies.

-

+ +

Each query option is identified by a keyword preceded by a plus sign (+). Some keywords set or reset an option. These may be preceded @@ -307,20 +402,27 @@

+[no]aaflag
-

+

+

A synonym for +[no]aaonly. -

+

+
+[no]aaonly
-

+

+

Sets the "aa" flag in the query. -

+

+
+[no]additional
-

+

+

Display [do not display] the additional section of a reply. The default is to display it. -

+

+
+[no]adflag
-

+

+

Set [do not set] the AD (authentic data) bit in the query. This requests the server to return whether all of the answer and authority sections have all @@ -330,70 +432,89 @@ from a OPT-OUT range. AD=0 indicate that some part of the answer was insecure or not validated. This bit is set by default. -

+

+
+[no]all
-

+

+

Set or clear all display flags. -

+

+
+[no]answer
-

+

+

Display [do not display] the answer section of a reply. The default is to display it. -

+

+
+[no]authority
-

+

+

Display [do not display] the authority section of a reply. The default is to display it. -

+

+
+[no]badcookie
-

+

+

Retry lookup with the new server cookie if a BADCOOKIE response is received. -

+

+
+[no]besteffort
-

+

+

Attempt to display the contents of messages which are malformed. The default is to not display malformed answers. -

+

+
+bufsize=B
-

+

+

Set the UDP message buffer size advertised using EDNS0 to B bytes. The maximum and minimum sizes of this buffer are 65535 and 0 respectively. Values outside this range are rounded up or down appropriately. Values other than zero will cause a EDNS query to be sent. -

+

+
+[no]cdflag
-

+

+

Set [do not set] the CD (checking disabled) bit in the query. This requests the server to not perform DNSSEC validation of responses. -

+

+
+[no]class
-

+

+

Display [do not display] the CLASS when printing the record. -

+

+
+[no]cmd
-

+

+

Toggles the printing of the initial comment in the output, identifying the version of dig and the query options that have been applied. This option always has global effect; it cannot be set globally and then overridden on a per-lookup basis. The default is to print this comment. -

+

+
+[no]comments
-

+

Toggles the display of some comment lines in the output, containing information about the packet header and OPT pseudosection, and the names of the response section. The default is to print these comments.

-

+

Other types of comments in the output are not affected by this option, but can be controlled using other command line switches. These include +[no]cmd, @@ -401,23 +522,24 @@ +[no]stats, and +[no]rrcomments.

-
+
+[no]cookie[=####]
-

+

Send a COOKIE EDNS option, with optional value. Replaying a COOKIE from a previous response will allow the server to identify a previous client. The default is +cookie.

-

+

+cookie is also set when +trace is set to better emulate the default queries from a nameserver.

-
+
+[no]crypto
-

+

+

Toggle the display of cryptographic fields in DNSSEC records. The contents of these field are unnecessary to debug most DNSSEC validation failures and removing @@ -426,55 +548,71 @@ are replaced by the string "[omitted]" or in the DNSKEY case the key id is displayed as the replacement, e.g. "[ key id = value ]". -

+

+
+[no]defname
-

+

+

Deprecated, treated as a synonym for +[no]search -

+

+
+[no]dnssec
-

+

+

Requests DNSSEC records be sent by setting the DNSSEC OK bit (DO) in the OPT record in the additional section of the query. -

+

+
+domain=somename
-

+

+

Set the search list to contain the single domain somename, as if specified in a domain directive in /etc/resolv.conf, and enable search list processing as if the +search option were given. -

+

+
+dscp=value
-

+

+

Set the DSCP code point to be used when sending the query. Valid DSCP code points are in the range [0..63]. By default no code point is explicitly set. -

+

+
+[no]edns[=#]
-

+

+

Specify the EDNS version to query with. Valid values are 0 to 255. Setting the EDNS version will cause a EDNS query to be sent. +noedns clears the remembered EDNS version. EDNS is set to 0 by default. -

+

+
+[no]ednsflags[=#]
-

+

+

Set the must-be-zero EDNS flags bits (Z bits) to the specified value. Decimal, hex and octal encodings are accepted. Setting a named flag (e.g. DO) will silently be ignored. By default, no Z bits are set. -

+

+
+[no]ednsnegotiation
-

+

+

Enable / disable EDNS version negotiation. By default EDNS version negotiation is enabled. -

+

+
+[no]ednsopt[=code[:value]]
-

+

+

Specify EDNS option with code point code and optionally payload of value as a hexadecimal string. code can be @@ -482,95 +620,117 @@ NSID or ECS), or an arbitrary numeric value. +noednsopt clears the EDNS options to be sent. -

+

+
+[no]expire
-

+

+

Send an EDNS Expire option. -

+

+
+[no]expandaaaa
-

+

+

When printing AAAA record print all zero nibbles rather than the default RFC 5952 preferred presentation format. -

+

+
+[no]fail
-

+

+

Do not try the next server if you receive a SERVFAIL. The default is to not try the next server which is the reverse of normal stub resolver behavior. -

+

+
+[no]header-only
-

+

+

Send a query with a DNS header without a question section. The default is to add a question section. The query type and query name are ignored when this is set. -

+

+
+[no]identify
-

+

+

Show [or do not show] the IP address and port number that supplied the answer when the +short option is enabled. If short form answers are requested, the default is not to show the source address and port number of the server that provided the answer. -

+

+
+[no]idnin
-

+

Process [do not process] IDN domain names on input. This requires IDN SUPPORT to have been enabled at compile time.

-

+

The default is to process IDN input when standard output is a tty. The IDN processing on input is disabled when dig output is redirected to files, pipes, and other non-tty file descriptors.

-
+
+[no]idnout
-

+

Convert [do not convert] puny code on output. This requires IDN SUPPORT to have been enabled at compile time.

-

+

The default is to process puny code on output when standard output is a tty. The puny code processing on output is disabled when dig output is redirected to files, pipes, and other non-tty file descriptors.

-
+
+[no]ignore
-

+

+

Ignore truncation in UDP responses instead of retrying with TCP. By default, TCP retries are performed. -

+

+
+[no]keepalive
-

+

+

Send [or do not send] an EDNS Keepalive option. -

+

+
+[no]keepopen
-

+

+

Keep the TCP socket open between queries and reuse it rather than creating a new TCP socket for each lookup. The default is +nokeepopen. -

+

+
+[no]mapped
-

+

+

Allow mapped IPv4 over IPv6 addresses to be used. The default is +mapped. -

+

+
+[no]multiline
-

+

+

Print records like the SOA records in a verbose multi-line format with human-readable comments. The default is to print each record on a single line, to facilitate machine parsing of the dig output. -

+

+
+ndots=D
-

+

+

Set the number of dots that have to appear in name to D for it to be considered absolute. The default value @@ -582,34 +742,44 @@ or domain directive in /etc/resolv.conf if +search is set. -

+

+
+[no]nsid
-

+

+

Include an EDNS name server ID request when sending a query. -

+

+
+[no]nssearch
-

+

+

When this option is set, dig attempts to find the authoritative name servers for the zone containing the name being looked up and display the SOA record that each name server has for the zone. Addresses of servers that that did not respond are also printed. -

+

+
+[no]onesoa
-

+

+

Print only one (starting) SOA record when performing an AXFR. The default is to print both the starting and ending SOA records. -

+

+
+[no]opcode=value
-

+

+

Set [restore] the DNS message opcode to the specified value. The default value is QUERY (0). -

+

+
+padding=value
-

+

+

Pad the size of the query packet using the EDNS Padding option to blocks of value bytes. For example, +padding=32 would cause a 48-byte query to @@ -619,30 +789,40 @@ however, this is not mandatory. Responses to padded queries may also be padded, but only if the query uses TCP or DNS COOKIE. -

+

+
+[no]qr
-

+

+

Toggles the display of the query message as it is sent. By default, the query is not printed. -

+

+
+[no]question
-

+

+

Toggles the display of the question section of a query when an answer is returned. The default is to print the question section as a comment. -

+

+
+[no]raflag
-

+

+

Set [do not set] the RA (Recursion Available) bit in the query. The default is +noraflag. This bit should be ignored by the server for QUERY. -

+

+
+[no]rdflag
-

+

+

A synonym for +[no]recurse. -

+

+
+[no]recurse
-

+

+

Toggle the setting of the RD (recursion desired) bit in the query. This bit is set by default, which means dig normally sends recursive @@ -651,56 +831,68 @@ when using +trace except for an initial recursive query to get the list of root servers. -

+

+
+retry=T
-

+

+

Sets the number of times to retry UDP queries to server to T instead of the default, 2. Unlike +tries, this does not include the initial query. -

+

+
+[no]rrcomments
-

+

+

Toggle the display of per-record comments in the output (for example, human-readable key information about DNSKEY records). The default is not to print record comments unless multiline mode is active. -

+

+
+[no]search
-

+

Use [do not use] the search list defined by the searchlist or domain directive in resolv.conf (if any). The search list is not used by default.

-

+

'ndots' from resolv.conf (default 1) which may be overridden by +ndots determines if the name will be treated as relative or not and hence whether a search is eventually performed or not.

-
+
+[no]short
-

+

+

Provide a terse answer. The default is to print the answer in a verbose form. This option always has global effect; it cannot be set globally and then overridden on a per-lookup basis. -

+

+
+[no]showsearch
-

+

+

Perform [do not perform] a search showing intermediate results. -

+

+
+[no]sigchase
-

+

+

This feature is now obsolete and has been removed; use delv instead. -

+

+
+split=W
-

+

+

Split long hex- or base64-formatted fields in resource records into chunks of W characters (where W is rounded @@ -709,20 +901,23 @@ +split=0 causes fields not to be split at all. The default is 56 characters, or 44 characters when multiline mode is active. -

+

+
+[no]stats
-

+

+

Toggles the printing of statistics: when the query was made, the size of the reply and so on. The default behavior is to print the query statistics as a comment after each lookup. -

+

+
+[no]subnet=addr[/prefix-length]
-

+

Send (don't send) an EDNS Client Subnet option with the specified IP address or network prefix.

-

+

dig +subnet=0.0.0.0/0, or simply dig +subnet=0 for short, sends an EDNS CLIENT-SUBNET option with an empty address and a source @@ -731,23 +926,28 @@ not be used when resolving this query.

-
+
+[no]tcflag
-

+

+

Set [do not set] the TC (TrunCation) bit in the query. The default is +notcflag. This bit should be ignored by the server for QUERY. -

+

+
+[no]tcp
-

+

+

Use [do not use] TCP when querying name servers. The default behavior is to use UDP unless a type any or ixfr=N query is requested, in which case the default is TCP. AXFR queries always use TCP. -

+

+
+timeout=T
-

+

+

Sets the timeout for a query to T seconds. The default @@ -755,16 +955,19 @@ An attempt to set T to less than 1 will result in a query timeout of 1 second being applied. -

+

+
+[no]topdown
-

+

+

This feature is related to dig +sigchase, which is obsolete and has been removed. Use delv instead. -

+

+
+[no]trace
-

+

Toggle tracing of the delegation path from the root name servers for the name being looked up. Tracing is disabled by default. When tracing is enabled, @@ -772,80 +975,99 @@ resolve the name being looked up. It will follow referrals from the root servers, showing the answer from each server that was used to resolve the lookup. -

-

+

If @server is also specified, it affects only the initial query for the root zone name servers. -

-

+

+dnssec is also set when +trace is set to better emulate the default queries from a nameserver.

-
+
+tries=T
-

+

+

Sets the number of times to try UDP queries to server to T instead of the default, 3. If T is less than or equal to zero, the number of tries is silently rounded up to 1. -

+

+
+trusted-key=####
-

+

+

Formerly specified trusted keys for use with dig +sigchase. This feature is now obsolete and has been removed; use delv instead. -

+

+
+[no]ttlid
-

+

+

Display [do not display] the TTL when printing the record. -

+

+
+[no]ttlunits
-

+

+

Display [do not display] the TTL in friendly human-readable time units of "s", "m", "h", "d", and "w", representing seconds, minutes, hours, days and weeks. Implies +ttlid. -

+

+
+[no]unexpected
-

+

+

Accept [do not accept] answers from unexpected sources. By default, dig won't accept a reply from a source other than the one to which it sent the query. -

+

+
+[no]unknownformat
-

+

+

Print all RDATA in unknown RR type presentation format (RFC 3597). The default is to print RDATA for known types in the type's presentation format. -

+

+
+[no]vc
-

+

+

Use [do not use] TCP when querying name servers. This alternate syntax to +[no]tcp is provided for backwards compatibility. The "vc" stands for "virtual circuit". -

+

+
+[no]yaml
-

+

+

Print the responses (and, if +qr is in use, also the outgoing queries) in a detailed YAML format. -

+

+
+[no]zflag
-

+

+

Set [do not set] the last unassigned DNS header flag in a DNS query. This flag is off by default. -

+

+

-
-
+
+ +

MULTIPLE QUERIES

-

+ + +

The BIND 9 implementation of dig supports specifying multiple queries on the command line (in addition to @@ -853,7 +1075,8 @@ queries can be supplied with its own set of flags, options and query options.

-

+ +

In this case, each query argument represent an individual query in the command-line syntax described above. Each @@ -861,7 +1084,8 @@ looked up, an optional query type and class and any query options that should be applied to that query.

-

+ +

A global set of query options, which should be applied to all queries, can also be supplied. These global query options must precede the first tuple of name, class, type, options, flags, and query options @@ -889,10 +1113,13 @@ dig +qr www.isc.org any -x 127.0.0.1 isc.org ns +noqr will not print the initial query when it looks up the NS records for isc.org.

-
-
+ +
+ +

IDN SUPPORT

-

+ +

If dig has been built with IDN (internationalized domain name) support, it can accept and display non-ASCII domain names. dig appropriately converts character encoding of @@ -904,29 +1131,44 @@ dig +qr www.isc.org any -x 127.0.0.1 isc.org ns +noqr the IDN_DISABLE environment variable.

-
-
+
+ +

FILES

-

/etc/resolv.conf + +

/etc/resolv.conf

-

${HOME}/.digrc +

${HOME}/.digrc

-
-
+
+ +

SEE ALSO

-

delv(1), - host(1), - named(8), - dnssec-keygen(8), + +

+ delv(1) + , + + host(1) + , + + named(8) + , + + dnssec-keygen(8) + , RFC 1035.

-
-
+
+ +

BUGS

-

+ +

There are probably too many query options.

-
+
+
@@ -946,6 +1188,6 @@ dig +qr www.isc.org any -x 127.0.0.1 isc.org ns +noqr
-

BIND 9.17.0 (Development Release)

+

BIND 9.17.1 (Development Release)

diff --git a/doc/arm/man.dnssec-cds.html b/doc/arm/man.dnssec-cds.html index 466a580776..14c02c1118 100644 --- a/doc/arm/man.dnssec-cds.html +++ b/doc/arm/man.dnssec-cds.html @@ -10,7 +10,7 @@ dnssec-cds - + @@ -32,17 +32,44 @@
-
+ + + + + +

Name

-

dnssec-cds — change DS records for a child zone based on CDS/CDNSKEY

-
-
-

Synopsis

-

dnssec-cds [-a alg...] [-c class] [-D] {-d dsset-file} {-f child-file} [-i [extension]] [-s start-time] [-T ttl] [-u] [-v level] [-V] {domain}

-
-
-

DESCRIPTION

+ dnssec-cds + — change DS records for a child zone based on CDS/CDNSKEY +

+
+ + + +
+

Synopsis

+

+ dnssec-cds + [-a alg...] + [-c class] + [-D] + {-d dsset-file} + {-f child-file} + [-i [extension]] + [-s start-time] + [-T ttl] + [-u] + [-v level] + [-V] + {domain} +

+
+ +
+

DESCRIPTION

+ +

The dnssec-cds command changes DS records at a delegation point based on CDS or CDNSKEY records published in the child zone. If both CDS and CDNSKEY records are present in @@ -52,7 +79,7 @@ parent can keep the DS records up to date and enable automatic rolling of KSKs.

-

+

Two input files are required. The -f child-file option specifies a file containing the child's CDS and/or CDNSKEY @@ -65,27 +92,27 @@ dnssec-dsfromkey, or the output of a previous run of dnssec-cds.

-

+

The dnssec-cds command uses special DNSSEC validation logic specified by RFC 7344. It requires that the CDS and/or CDNSKEY records are validly signed by a key represented in the existing DS records. This will typically be the pre-existing key-signing key (KSK).

-

+

For protection against replay attacks, the signatures on the child records must not be older than they were on a previous run of dnssec-cds. This time is obtained from the modification time of the dsset- file, or from the -s option.

-

+

To protect against breaking the delegation, dnssec-cds ensures that the DNSKEY RRset can be verified by every key algorithm in the new DS RRset, and that the same set of keys are covered by every DS digest type.

-

+

By default, replacement DS records are written to the standard output; with the -i option the input file is overwritten in place. The replacement DS records will be the @@ -93,49 +120,56 @@ output can be empty if the CDS / CDNSKEY records specify that the child zone wants to go insecure.

-

+

Warning: Be careful not to delete the DS records when dnssec-cds fails!

-

+

Alternatively, dnssec-cds -u writes an nsupdate script to the standard output. You can use the -u and -i options together to maintain a dsset- file as well as emit an nsupdate script.

-
-
+ +
+ +

OPTIONS

-
+ +
-a algorithm
-

+

Specify a digest algorithm to use when converting CDNSKEY records to DS records. This option can be repeated, so that multiple DS records are created for each CDNSKEY record. This option has no effect when using CDS records.

-

+

The algorithm must be one of SHA-1, SHA-256, or SHA-384. These values are case insensitive, and the hyphen may be omitted. If no algorithm is specified, the default is SHA-256.

-
+
-c class
-

+

+

Specifies the DNS class of the zones. -

+

+
-D
-

+

+

Generate DS records from CDNSKEY records if both CDS and CDNSKEY records are present in the child zone. By default CDS records are preferred. -

+

+
-d path
-

+

Location of the parent DS records. The path can be the name of a file containing the DS records, or if it is a @@ -143,31 +177,31 @@ a dsset- file for the domain inside the directory.

-

+

To protect against replay attacks, child records are rejected if they were signed earlier than the modification time of the dsset- file. This can be adjusted with the -s option.

-
+
-f child-file
-

+

File containing the child's CDS and/or CDNSKEY records, plus its DNSKEY records and the covering RRSIG records so that they can be authenticated.

-

+

The EXAMPLES below describe how to generate this file.

-
+
-i[extension]
-

+

Update the dsset- file in place, instead of writing DS records to the standard output.

-

+

There must be no space between the -i and the extension. If you provide no extension then the @@ -177,17 +211,17 @@ with the extension appended to its filename.

-

+

To protect against replay attacks, the modification time of the dsset- file is set to match the signature inception time of the child records, provided that is later than the file's current modification time.

-
+
-s start-time
-

+

Specify the date and time after which RRSIG records become acceptable. This can be either an absolute or relative time. An absolute start time is indicated by a number in @@ -197,69 +231,82 @@ which is N seconds before the file modification time. A time relative to the current time is indicated with now+N.

-

+

If no start-time is specified, the modification time of the dsset- file is used.

-
+
-T ttl
-

+

+

Specifies a TTL to be used for new DS records. If not specified, the default is the TTL of the old DS records. If they had no explicit TTL then the new DS records also have no explicit TTL. -

+

+
-u
-

+

Write an nsupdate script to the standard output, instead of printing the new DS reords. The output will be empty if no change is needed.

-

+

Note: The TTL of new records needs to be specified, either in the original dsset- file, or with the -T option, or using the nsupdate ttl command.

-
+
-V
-

+

+

Print version information. -

+

+
-v level
-

+

+

Sets the debugging level. Level 1 is intended to be usefully verbose for general users; higher levels are intended for developers. -

+

+
domain
-

+

+

The name of the delegation point / child zone apex. -

+

+
-
-
+
+ +

EXIT STATUS

-

+ +

The dnssec-cds command exits 0 on success, or non-zero if an error occurred.

-

+

In the success case, the DS records might or might not need to be changed.

-
-
+ +
+ +

EXAMPLES

-

+ +

Before running dnssec-signzone, you can ensure that the delegations are up-to-date by running dnssec-cds on every dsset- file.

-

+

To fetch the child records required by dnssec-cds you can invoke dig as in the script below. It's okay if the dig fails since @@ -272,7 +319,8 @@ do dnssec-cds -i -f /dev/stdin -d $f $d done -

+ +

When the parent zone is automatically signed by named, you can use dnssec-cds with nsupdate to maintain a delegation as follows. @@ -285,18 +333,30 @@ dig +dnssec +noall +answer $d DNSKEY $d CDNSKEY $d CDS | dnssec-cds -u -i -f /dev/stdin -d $f $d | nsupdate -l -

-
+
+ +

SEE ALSO

-

- dig(1), - dnssec-settime(8), - dnssec-signzone(8), - nsupdate(1), + +

+ + dig(1) + , + + dnssec-settime(8) + , + + dnssec-signzone(8) + , + + nsupdate(1) + , BIND 9 Administrator Reference Manual, RFC 7344.

-
+ +
+
@@ -316,6 +376,6 @@ nsupdate -l
-

BIND 9.17.0 (Development Release)

+

BIND 9.17.1 (Development Release)

diff --git a/doc/arm/man.dnssec-checkds.html b/doc/arm/man.dnssec-checkds.html index cd6f05a4b5..cbb152cfea 100644 --- a/doc/arm/man.dnssec-checkds.html +++ b/doc/arm/man.dnssec-checkds.html @@ -10,7 +10,7 @@ dnssec-checkds - + @@ -32,70 +32,110 @@
-
+ + + + + +

Name

-

dnssec-checkds — DNSSEC delegation consistency checking tool

+

+ dnssec-checkds + — DNSSEC delegation consistency checking tool +

-
+ + + +

Synopsis

-

dnssec-checkds [-d dig path] [-D dsfromkey path] [-f file] [-l domain] [-s file] {zone}

-
-
+

+ dnssec-checkds + [-d dig path] + [-D dsfromkey path] + [-f file] + [-l domain] + [-s file] + {zone} +

+
+ +

DESCRIPTION

-

dnssec-checkds + +

dnssec-checkds verifies the correctness of Delegation Signer (DS) resource records for keys in a specified zone.

-
-
+
+ +

OPTIONS

-
+ +
-a algorithm
-

+

Specify a digest algorithm to use when converting the zone's DNSKEY records to expected DS records. This option can be repeated, so that multiple records are checked for each DNSKEY record.

-

+

The algorithm must be one of SHA-1, SHA-256, or SHA-384. These values are case insensitive, and the hyphen may be omitted. If no algorithm is specified, the default is SHA-256.

-
+
-f file
-

+

+

If a file is specified, then the zone is read from that file to find the DNSKEY records. If not, then the DNSKEY records for the zone are looked up in the DNS. -

+

+
-s file
-

+

+

Specifies a prepared dsset file, such as would be generated by dnssec-signzone, to use as a source for the DS RRset instead of querying the parent. -

+

+
-d dig path
-

+

+

Specifies a path to a dig binary. Used for testing. -

+

+
-D dsfromkey path
-

+

+

Specifies a path to a dnssec-dsfromkey binary. Used for testing. -

+

+
-
-
+
+ +

SEE ALSO

-

dnssec-dsfromkey(8), - dnssec-keygen(8), - dnssec-signzone(8), + +

+ dnssec-dsfromkey(8) + , + + dnssec-keygen(8) + , + + dnssec-signzone(8) + ,

-
+
+
@@ -116,6 +156,6 @@
-

BIND 9.17.0 (Development Release)

+

BIND 9.17.1 (Development Release)

diff --git a/doc/arm/man.dnssec-coverage.html b/doc/arm/man.dnssec-coverage.html index c3faab3d74..3c4f351897 100644 --- a/doc/arm/man.dnssec-coverage.html +++ b/doc/arm/man.dnssec-coverage.html @@ -10,7 +10,7 @@ dnssec-coverage - + @@ -32,22 +32,47 @@
-
+ + + + + +

Name

-

dnssec-coverage — checks future DNSKEY coverage for a zone

+

+ dnssec-coverage + — checks future DNSKEY coverage for a zone +

-
+ + + +

Synopsis

-

dnssec-coverage [-K directory] [-l length] [-f file] [-d DNSKEY TTL] [-m max TTL] [-r interval] [-c compilezone path] [-k] [-z] [zone...]

-
-
+

+ dnssec-coverage + [-K directory] + [-l length] + [-f file] + [-d DNSKEY TTL] + [-m max TTL] + [-r interval] + [-c compilezone path] + [-k] + [-z] + [zone...] +

+
+ +

DESCRIPTION

-

dnssec-coverage + +

dnssec-coverage verifies that the DNSSEC keys for a given zone or a set of zones have timing metadata set properly to ensure no future lapses in DNSSEC coverage.

-

+

If zone is specified, then keys found in the key repository matching that zone are scanned, and an ordered list is generated of the events scheduled for that key (i.e., @@ -60,47 +85,54 @@ key is rolled, and cached data signed by the prior key has not had time to expire from resolver caches.

-

+

If zone is not specified, then all keys in the key repository will be scanned, and all zones for which there are keys will be analyzed. (Note: This method of reporting is only accurate if all the zones that have keys in a given repository share the same TTL parameters.)

-
-
+
+ +

OPTIONS

-
+ + +
-K directory
-

+

+

Sets the directory in which keys can be found. Defaults to the current working directory. -

+

+
-f file
-

+

+

If a file is specified, then the zone is read from that file; the largest TTL and the DNSKEY TTL are determined directly from the zone data, and the -m and -d options do not need to be specified on the command line. -

+

+
-l duration
-

+

The length of time to check for DNSSEC coverage. Key events scheduled further into the future than duration will be ignored, and assumed to be correct.

-

+

The value of duration can be set in seconds, or in larger units of time by adding a suffix: 'mi' for minutes, 'h' for hours, 'd' for days, 'w' for weeks, 'mo' for months, 'y' for years.

-
+
-m maximum TTL
-

+

Sets the value to be used as the maximum TTL for the zone or zones being analyzed when determining whether there is a possibility of validation failure. When a zone-signing key is @@ -109,26 +141,26 @@ before that key can be purged from the DNSKEY RRset. If that condition does not apply, a warning will be generated.

-

+

The length of the TTL can be set in seconds, or in larger units of time by adding a suffix: 'mi' for minutes, 'h' for hours, 'd' for days, 'w' for weeks, 'mo' for months, 'y' for years.

-

+

This option is not necessary if the -f has been used to specify a zone file. If -f has been specified, this option may still be used; it will override the value found in the file.

-

+

If this option is not used and the maximum TTL cannot be retrieved from a zone file, a warning is generated and a default value of 1 week is used.

-
+
-d DNSKEY TTL
-

+

Sets the value to be used as the DNSKEY TTL for the zone or zones being analyzed when determining whether there is a possibility of validation failure. When a key is rolled (that @@ -137,12 +169,12 @@ the new key is activated and begins generating signatures. If that condition does not apply, a warning will be generated.

-

+

The length of the TTL can be set in seconds, or in larger units of time by adding a suffix: 'mi' for minutes, 'h' for hours, 'd' for days, 'w' for weeks, 'mo' for months, 'y' for years.

-

+

This option is not necessary if -f has been used to specify a zone file from which the TTL of the DNSKEY RRset can be read, or if a default key TTL was @@ -151,15 +183,15 @@ this option may still be used; it will override the values found in the zone file or the key file.

-

+

If this option is not used and the key TTL cannot be retrieved from the zone file or the key file, then a warning is generated and a default value of 1 day is used.

-
+
-r resign interval
-

+

Sets the value to be used as the resign interval for the zone or zones being analyzed when determining whether there is a possibility of validation failure. This value defaults to @@ -169,38 +201,55 @@ named.conf, then it should also be changed here.

-

+

The length of the interval can be set in seconds, or in larger units of time by adding a suffix: 'mi' for minutes, 'h' for hours, 'd' for days, 'w' for weeks, 'mo' for months, 'y' for years.

-
+
-k
-

+

+

Only check KSK coverage; ignore ZSK events. Cannot be used with -z. -

+

+
-z
-

+

+

Only check ZSK coverage; ignore KSK events. Cannot be used with -k. -

+

+
-c compilezone path
-

+

+

Specifies a path to a named-compilezone binary. Used for testing. -

+

+
-
-
+
+ +

SEE ALSO

-

- dnssec-checkds(8), - dnssec-dsfromkey(8), - dnssec-keygen(8), - dnssec-signzone(8) + +

+ + dnssec-checkds(8) + , + + dnssec-dsfromkey(8) + , + + dnssec-keygen(8) + , + + dnssec-signzone(8) +

-
+
+
@@ -221,6 +270,6 @@
-

BIND 9.17.0 (Development Release)

+

BIND 9.17.1 (Development Release)

diff --git a/doc/arm/man.dnssec-dsfromkey.html b/doc/arm/man.dnssec-dsfromkey.html index b15aa8973f..3357a80763 100644 --- a/doc/arm/man.dnssec-dsfromkey.html +++ b/doc/arm/man.dnssec-dsfromkey.html @@ -10,7 +10,7 @@ dnssec-dsfromkey - + @@ -32,66 +32,145 @@
-
+ + + + + +

Name

-

dnssec-dsfromkey — DNSSEC DS RR generation tool

-
-
-

Synopsis

-

dnssec-dsfromkey [ -1 | -2 | -a alg ] [ -C | -l domain ] [-T TTL] [-v level] [-K directory] {keyfile}

-

dnssec-dsfromkey [ -1 | -2 | -a alg ] [ -C | -l domain ] [-T TTL] [-v level] [-c class] [-A] {-f file} [dnsname]

-

dnssec-dsfromkey [ -1 | -2 | -a alg ] [ -C | -l domain ] [-T TTL] [-v level] [-c class] [-K directory] {-s} {dnsname}

-

dnssec-dsfromkey [ -h | -V ]

-
-
-

DESCRIPTION

+ dnssec-dsfromkey + — DNSSEC DS RR generation tool +

+
+ + + +
+

Synopsis

+

+ dnssec-dsfromkey + [ + -1 + | -2 + | -a alg + ] + [ + -C + | -l domain + ] + [-T TTL] + [-v level] + [-K directory] + {keyfile} +

+

+ dnssec-dsfromkey + [ + -1 + | -2 + | -a alg + ] + [ + -C + | -l domain + ] + [-T TTL] + [-v level] + [-c class] + [-A] + {-f file} + [dnsname] +

+

+ dnssec-dsfromkey + [ + -1 + | -2 + | -a alg + ] + [ + -C + | -l domain + ] + [-T TTL] + [-v level] + [-c class] + [-K directory] + {-s} + {dnsname} +

+

+ dnssec-dsfromkey + [ + -h + | -V + ] +

+
+ +
+

DESCRIPTION

+ +

The dnssec-dsfromkey command outputs DS (Delegation Signer) resource records (RRs), or CDS (Child DS) RRs with the -C option.

-

+ +

The input keys can be specified in a number of ways:

-

+ +

By default, dnssec-dsfromkey reads a key file named like Knnnn.+aaa+iiiii.key, as generated by dnssec-keygen.

-

+ +

With the -f file option, dnssec-dsfromkey reads keys from a zone file or partial zone file (which can contain just the DNSKEY records).

-

+ +

With the -s option, dnssec-dsfromkey reads a keyset- file, as generated by dnssec-keygen -C.

-
-
+ +
+ +

OPTIONS

-
+ +
-1
-

+

+

An abbreviation for -a SHA-1. (Note: The SHA-1 algorithm is no longer recommended for use when generating new DS and CDS records.) -

+

+
-2
-

+

+

An abbreviation for -a SHA-256. -

+

+
-a algorithm
-

+

Specify a digest algorithm to use when converting DNSKEY records to DS records. This option can be repeated, so that multiple DS records are created for each DNSKEY record.

-

+

The algorithm must be one of SHA-1, SHA-256, or SHA-384. These values are case insensitive, and the hyphen may be omitted. If no algorithm is specified, @@ -99,117 +178,149 @@ (Note: The SHA-1 algorithm is no longer recommended for use when generating new DS and CDS records.)

-
+
-A
-

+

+

Include ZSKs when generating DS records. Without this option, only keys which have the KSK flag set will be converted to DS records and printed. Useful only in -f zone file mode. -

+

+
-c class
-

+

+

Specifies the DNS class (default is IN). Useful only in -s keyset or -f zone file mode. -

+

+
-C
-

+

+

Generate CDS records rather than DS records. -

+

+
-f file
-

+

Zone file mode: dnssec-dsfromkey's final dnsname argument is the DNS domain name of a zone whose master file can be read from file. If the zone name is the same as file, then it may be omitted.

-

+

If file is "-", then the zone data is read from the standard input. This makes it possible to use the output of the dig command as input, as in:

-

+

dig dnskey example.com | dnssec-dsfromkey -f - example.com

-
+
-h
-

+

+

Prints usage information. -

+

+
-K directory
-

+

+

Look for key files or keyset- files in directory. -

+

+
-s
-

+

+

Keyset mode: dnssec-dsfromkey's final dnsname argument is the DNS domain name used to locate a keyset- file. -

+

+
-T TTL
-

+

+

Specifies the TTL of the DS records. By default the TTL is omitted. -

+

+
-v level
-

+

+

Sets the debugging level. -

+

+
-V
-

+

+

Prints version information. -

+

+
-
-
+
+ +

EXAMPLE

-

+ +

To build the SHA-256 DS RR from the Kexample.com.+003+26160 keyfile name, you can issue the following command:

-

dnssec-dsfromkey -2 Kexample.com.+003+26160 +

dnssec-dsfromkey -2 Kexample.com.+003+26160

-

+

The command would print something like:

-

example.com. IN DS 26160 5 2 3A1EADA7A74B8D0BA86726B0C227AA85AB8BBD2B2004F41A868A54F0C5EA0B94 +

example.com. IN DS 26160 5 2 3A1EADA7A74B8D0BA86726B0C227AA85AB8BBD2B2004F41A868A54F0C5EA0B94

-
-
+ +
+ +

FILES

-

+ +

The keyfile can be designated by the key identification Knnnn.+aaa+iiiii or the full file name Knnnn.+aaa+iiiii.key as generated by dnssec-keygen(8).

-

+

The keyset file name is built from the directory, the string keyset- and the dnsname.

-
-
+
+ +

CAVEAT

-

+ +

A keyfile error can give a "file not found" even if the file exists.

-
-
+
+ +

SEE ALSO

-

dnssec-keygen(8), - dnssec-signzone(8), + +

+ dnssec-keygen(8) + , + + dnssec-signzone(8) + , BIND 9 Administrator Reference Manual, RFC 3658 (DS RRs), RFC 4509 (SHA-256 for DS RRs), RFC 6605 (SHA-384 for DS RRs), RFC 7344 (CDS and CDNSKEY RRs).

-
+
+
@@ -230,6 +341,6 @@
-

BIND 9.17.0 (Development Release)

+

BIND 9.17.1 (Development Release)

diff --git a/doc/arm/man.dnssec-importkey.html b/doc/arm/man.dnssec-importkey.html index 5aad272064..2b6267b8d2 100644 --- a/doc/arm/man.dnssec-importkey.html +++ b/doc/arm/man.dnssec-importkey.html @@ -10,7 +10,7 @@ dnssec-importkey - + @@ -32,18 +32,56 @@
-
+ + + + + +

Name

-

dnssec-importkey — import DNSKEY records from external systems so they can be managed

+

+ dnssec-importkey + — import DNSKEY records from external systems so they can be managed +

-
+ + + +

Synopsis

-

dnssec-importkey [-K directory] [-L ttl] [-P date/offset] [-P sync date/offset] [-D date/offset] [-D sync date/offset] [-h] [-v level] [-V] {keyfile}

-

dnssec-importkey {-f filename} [-K directory] [-L ttl] [-P date/offset] [-P sync date/offset] [-D date/offset] [-D sync date/offset] [-h] [-v level] [-V] [dnsname]

-
-
+

+ dnssec-importkey + [-K directory] + [-L ttl] + [-P date/offset] + [-P sync date/offset] + [-D date/offset] + [-D sync date/offset] + [-h] + [-v level] + [-V] + {keyfile} +

+

+ dnssec-importkey + {-f filename} + [-K directory] + [-L ttl] + [-P date/offset] + [-P sync date/offset] + [-D date/offset] + [-D sync date/offset] + [-h] + [-v level] + [-V] + [dnsname] +

+
+ +

DESCRIPTION

-

dnssec-importkey + +

dnssec-importkey reads a public DNSKEY record and generates a pair of .key/.private files. The DNSKEY record may be read from an existing .key file, in which case a corresponding .private file @@ -51,7 +89,7 @@ from the standard input, in which case both .key and .private files will be generated.

-

+

The newly-created .private file does not contain private key data, and cannot be used for signing. However, having a .private file makes it possible to set @@ -60,53 +98,68 @@ public key can be added to and removed from the DNSKEY RRset on schedule even if the true private key is stored offline.

-
-
+
+ +

OPTIONS

-
+ + +
-f filename
-

+

Zone file mode: instead of a public keyfile name, the argument is the DNS domain name of a zone master file, which can be read from file. If the domain name is the same as file, then it may be omitted.

-

+

If file is set to "-", then the zone data is read from the standard input.

-
+
-K directory
-

+

+

Sets the directory in which the key files are to reside. -

+

+
-L ttl
-

+

+

Sets the default TTL to use for this key when it is converted into a DNSKEY RR. If the key is imported into a zone, this is the TTL that will be used for it, unless there was already a DNSKEY RRset in place, in which case the existing TTL would take precedence. Setting the default TTL to 0 or none removes it. -

+

+
-h
-

+

+

Emit usage message and exit. -

+

+
-v level
-

+

+

Sets the debugging level. -

+

+
-V
-

+

+

Prints version information. -

+

+
-
-
+
+ +

TIMING OPTIONS

-

+ +

Dates can be expressed in the format YYYYMMDD or YYYYMMDDHHMMSS. If the argument begins with a '+' or '-', it is interpreted as an offset from the present time. For convenience, if such an offset @@ -117,48 +170,66 @@ is computed in seconds. To explicitly prevent a date from being set, use 'none' or 'never'.

-
+ +
-P date/offset
-

+

+

Sets the date on which a key is to be published to the zone. After that date, the key will be included in the zone but will not be used to sign it. -

+

+
-P sync date/offset
-

+

+

Sets the date on which CDS and CDNSKEY records that match this key are to be published to the zone. -

+

+
-D date/offset
-

+

+

Sets the date on which the key is to be deleted. After that date, the key will no longer be included in the zone. (It may remain in the key repository, however.) -

+

+
-D sync date/offset
-

+

+

Sets the date on which the CDS and CDNSKEY records that match this key are to be deleted. -

+

+
-
-
+
+ +

FILES

-

+ +

A keyfile can be designed by the key identification Knnnn.+aaa+iiiii or the full file name Knnnn.+aaa+iiiii.key as generated by dnssec-keygen(8).

-
-
+
+ +

SEE ALSO

-

dnssec-keygen(8), - dnssec-signzone(8), + +

+ dnssec-keygen(8) + , + + dnssec-signzone(8) + , BIND 9 Administrator Reference Manual, RFC 5011.

-
+
+
@@ -179,6 +250,6 @@
-

BIND 9.17.0 (Development Release)

+

BIND 9.17.1 (Development Release)

diff --git a/doc/arm/man.dnssec-keyfromlabel.html b/doc/arm/man.dnssec-keyfromlabel.html index eb168c244b..1fd757c12c 100644 --- a/doc/arm/man.dnssec-keyfromlabel.html +++ b/doc/arm/man.dnssec-keyfromlabel.html @@ -10,7 +10,7 @@ dnssec-keyfromlabel - + @@ -32,17 +32,58 @@
-
+ + + + + +

Name

-

dnssec-keyfromlabel — DNSSEC key generation tool

+

+ dnssec-keyfromlabel + — DNSSEC key generation tool +

-
+ + + +

Synopsis

-

dnssec-keyfromlabel {-l label} [-3] [-a algorithm] [-A date/offset] [-c class] [-D date/offset] [-D sync date/offset] [-E engine] [-f flag] [-G] [-I date/offset] [-i interval] [-k] [-K directory] [-L ttl] [-n nametype] [-P date/offset] [-P sync date/offset] [-p protocol] [-R date/offset] [-S key] [-t type] [-v level] [-V] [-y] {name}

-
-
+

+ dnssec-keyfromlabel + {-l label} + [-3] + [-a algorithm] + [-A date/offset] + [-c class] + [-D date/offset] + [-D sync date/offset] + [-E engine] + [-f flag] + [-G] + [-I date/offset] + [-i interval] + [-k] + [-K directory] + [-L ttl] + [-n nametype] + [-P date/offset] + [-P sync date/offset] + [-p protocol] + [-R date/offset] + [-S key] + [-t type] + [-v level] + [-V] + [-y] + {name} +

+
+ +

DESCRIPTION

-

dnssec-keyfromlabel + +

dnssec-keyfromlabel generates a key pair of files that referencing a key object stored in a cryptographic hardware service module (HSM). The private key file can be used for DNSSEC signing of zone data as if it were a @@ -50,58 +91,63 @@ but the key material is stored within the HSM, and the actual signing takes place there.

-

+

The name of the key is specified on the command line. This must match the name of the zone for which the key is being generated.

-
-
+
+ +

OPTIONS

-
+ + +
-a algorithm
-

+

Selects the cryptographic algorithm. The value of algorithm must be one of RSASHA1, NSEC3RSASHA1, RSASHA256, RSASHA512, ECDSAP256SHA256, ECDSAP384SHA384, ED25519 or ED448.

-

+

If no algorithm is specified, then RSASHA1 will be used by default, unless the -3 option is specified, in which case NSEC3RSASHA1 will be used instead. (If -3 is used and an algorithm is specified, that algorithm will be checked for compatibility with NSEC3.)

-

+

These values are case insensitive. In some cases, abbreviations are supported, such as ECDSA256 for ECDSAP256SHA256 and ECDSA384 for ECDSAP384SHA384. If RSASHA1 is specified along with the -3 option, then NSEC3RSASHA1 will be used instead.

-

+

As of BIND 9.12.0, this option is mandatory except when using the -S option (which copies the algorithm from the predecessory key). Previously, the default for newly generated keys was RSASHA1.

-
+
-3
-

+

+

Use an NSEC3-capable algorithm to generate a DNSSEC key. If this option is used with an algorithm that has both NSEC and NSEC3 versions, then the NSEC3 version will be used; for example, dnssec-keygen -3a RSASHA1 specifies the NSEC3RSASHA1 algorithm. -

+

+
-E engine
-

+

Specifies the cryptographic hardware to use.

-

+

When BIND is built with OpenSSL PKCS#11 support, this defaults to the string "pkcs11", which identifies an OpenSSL engine that can drive a cryptographic accelerator or hardware service @@ -109,18 +155,18 @@ (--enable-native-pkcs11), it defaults to the path of the PKCS#11 provider library specified via "--with-pkcs11".

-
+
-l label
-

+

Specifies the label for a key pair in the crypto hardware.

-

+

When BIND 9 is built with OpenSSL-based PKCS#11 support, the label is an arbitrary string that identifies a particular key.

-

+

When BIND 9 is built with native PKCS#11 support, the label is a PKCS#11 URI string in the format "pkcs11:keyword=value[;keyword=value;...]" @@ -129,7 +175,7 @@ which the HSM's PIN code can be obtained. The label will be stored in the on-disk "private" file.

-

+

If the label contains a pin-source field, tools using the generated key files will be able to use the HSM for signing and other @@ -138,18 +184,21 @@ may reduce the security advantage of using an HSM; be sure this is what you want to do before making use of this feature.

-
+
-n nametype
-

+

+

Specifies the owner type of the key. The value of nametype must either be ZONE (for a DNSSEC zone key (KEY/DNSKEY)), HOST or ENTITY (for a key associated with a host (KEY)), USER (for a key associated with a user(KEY)) or OTHER (DNSKEY). These values are case insensitive. -

+

+
-C
-

+

+

Compatibility mode: generates an old-style key, without any metadata. By default, dnssec-keyfromlabel will include the key's creation date in the metadata stored @@ -157,53 +206,71 @@ (publication date, activation date, etc). Keys that include this data may be incompatible with older versions of BIND; the -C option suppresses them. -

+

+
-c class
-

+

+

Indicates that the DNS record containing the key should have the specified class. If not specified, class IN is used. -

+

+
-f flag
-

+

+

Set the specified flag in the flag field of the KEY/DNSKEY record. The only recognized flags are KSK (Key Signing Key) and REVOKE. -

+

+
-G
-

+

+

Generate a key, but do not publish it or sign with it. This option is incompatible with -P and -A. -

+

+
-h
-

+

+

Prints a short summary of the options and arguments to dnssec-keyfromlabel. -

+

+
-K directory
-

+

+

Sets the directory in which the key files are to be written. -

+

+
-k
-

+

+

Generate KEY records rather than DNSKEY records. -

+

+
-L ttl
-

+

+

Sets the default TTL to use for this key when it is converted into a DNSKEY RR. If the key is imported into a zone, this is the TTL that will be used for it, unless there was already a DNSKEY RRset in place, in which case the existing TTL would take precedence. Setting the default TTL to 0 or none removes it. -

+

+
-p protocol
-

+

+

Sets the protocol value for the key. The protocol is a number between 0 and 255. The default is 3 (DNSSEC). Other possible values for this argument are listed in RFC 2535 and its successors. -

+

+
-S key
-

+

+

Generate a key as an explicit successor to an existing key. The name, algorithm, size, and type of the key will be set to match the predecessor. The activation date of the new @@ -211,35 +278,47 @@ one. The publication date will be set to the activation date minus the prepublication interval, which defaults to 30 days. -

+

+
-t type
-

+

+

Indicates the use of the key. type must be one of AUTHCONF, NOAUTHCONF, NOAUTH, or NOCONF. The default is AUTHCONF. AUTH refers to the ability to authenticate data, and CONF the ability to encrypt data. -

+

+
-v level
-

+

+

Sets the debugging level. -

+

+
-V
-

+

+

Prints version information. -

+

+
-y
-

+

+

Allows DNSSEC key files to be generated even if the key ID would collide with that of an existing key, in the event of either key being revoked. (This is only safe to use if you are sure you won't be using RFC 5011 trust anchor maintenance with either of the keys involved.) -

+

+
-
-
+
+ +

TIMING OPTIONS

-

+ + +

Dates can be expressed in the format YYYYMMDD or YYYYMMDDHHMMSS. If the argument begins with a '+' or '-', it is interpreted as an offset from the present time. For convenience, if such an offset @@ -250,52 +329,67 @@ is computed in seconds. To explicitly prevent a date from being set, use 'none' or 'never'.

-
+ +
-P date/offset
-

+

+

Sets the date on which a key is to be published to the zone. After that date, the key will be included in the zone but will not be used to sign it. If not set, and if the -G option has not been used, the default is "now". -

+

+
-P sync date/offset
-

+

+

Sets the date on which the CDS and CDNSKEY records which match this key are to be published to the zone. -

+

+
-A date/offset
-

+

+

Sets the date on which the key is to be activated. After that date, the key will be included in the zone and used to sign it. If not set, and if the -G option has not been used, the default is "now". -

+

+
-R date/offset
-

+

+

Sets the date on which the key is to be revoked. After that date, the key will be flagged as revoked. It will be included in the zone and will be used to sign it. -

+

+
-I date/offset
-

+

+

Sets the date on which the key is to be retired. After that date, the key will still be included in the zone, but it will not be used to sign it. -

+

+
-D date/offset
-

+

+

Sets the date on which the key is to be deleted. After that date, the key will no longer be included in the zone. (It may remain in the key repository, however.) -

+

+
-D sync date/offset
-

+

+

Sets the date on which the CDS and CDNSKEY records which match this key are to be deleted. -

+

+
-i interval
-

+

Sets the prepublication interval for a key. If set, then the publication and activation dates must be separated by at least this much time. If the activation date is specified but the @@ -304,69 +398,84 @@ the publication date is specified but activation date isn't, then activation will be set to this much time after publication.

-

+

If the key is being created as an explicit successor to another key, then the default prepublication interval is 30 days; otherwise it is zero.

-

+

As with date offsets, if the argument is followed by one of the suffixes 'y', 'mo', 'w', 'd', 'h', or 'mi', then the interval is measured in years, months, weeks, days, hours, or minutes, respectively. Without a suffix, the interval is measured in seconds.

-
+
-
-
+
+ +

GENERATED KEY FILES

-

+ +

When dnssec-keyfromlabel completes successfully, it prints a string of the form Knnnn.+aaa+iiiii to the standard output. This is an identification string for the key files it has generated.

-
    -

  • nnnn is the key name. -

    • -

  • aaa is the numeric representation +

      +
    • +

      nnnn is the key name. +

      +
      • +
    • +

      aaa is the numeric representation of the algorithm. -

      • -

    • iiiii is the key identifier (or +

      +
      • +
    • +

      iiiii is the key identifier (or footprint). -

      • +

      +
    -

    dnssec-keyfromlabel +

    dnssec-keyfromlabel creates two files, with names based on the printed string. Knnnn.+aaa+iiiii.key contains the public key, and Knnnn.+aaa+iiiii.private contains the private key.

    -

    +

    The .key file contains a DNS KEY record that can be inserted into a zone file (directly or with a $INCLUDE statement).

    -

    +

    The .private file contains algorithm-specific fields. For obvious security reasons, this file does not have general read permission.

    -
-
+
+ +

SEE ALSO

-

dnssec-keygen(8), - dnssec-signzone(8), + +

+ dnssec-keygen(8) + , + + dnssec-signzone(8) + , BIND 9 Administrator Reference Manual, RFC 4034, The PKCS#11 URI Scheme (draft-pechanec-pkcs11uri-13).

-
+
+
@@ -387,6 +496,6 @@
-

BIND 9.17.0 (Development Release)

+

BIND 9.17.1 (Development Release)

diff --git a/doc/arm/man.dnssec-keygen.html b/doc/arm/man.dnssec-keygen.html index 303399c840..12783bc5c5 100644 --- a/doc/arm/man.dnssec-keygen.html +++ b/doc/arm/man.dnssec-keygen.html @@ -10,7 +10,7 @@ dnssec-keygen - + @@ -32,49 +32,102 @@
-
+ + + + + +

Name

-

dnssec-keygen — DNSSEC key generation tool

+

+ dnssec-keygen + — DNSSEC key generation tool +

-
+ + + +

Synopsis

-

dnssec-keygen [-3] [-A date/offset] [-a algorithm] [-b keysize] [-C] [-c class] [-D date/offset] [-D sync date/offset] [-d bits] [-E engine] [-f flag] [-G] [-g generator] [-h] [-I date/offset] [-i interval] [-K directory] [-k policy] [-L ttl] [-l file] [-n nametype] [-P date/offset] [-P sync date/offset] [-p protocol] [-q] [-R date/offset] [-S key] [-s strength] [-T rrtype] [-t type] [-V] [-v level] {name}

-
-
+

+ dnssec-keygen + [-3] + [-A date/offset] + [-a algorithm] + [-b keysize] + [-C] + [-c class] + [-D date/offset] + [-D sync date/offset] + [-d bits] + [-E engine] + [-f flag] + [-G] + [-g generator] + [-h] + [-I date/offset] + [-i interval] + [-K directory] + [-k policy] + [-L ttl] + [-l file] + [-n nametype] + [-P date/offset] + [-P sync date/offset] + [-p protocol] + [-q] + [-R date/offset] + [-S key] + [-s strength] + [-T rrtype] + [-t type] + [-V] + [-v level] + {name} +

+
+ +

DESCRIPTION

-

dnssec-keygen + +

dnssec-keygen generates keys for DNSSEC (Secure DNS), as defined in RFC 2535 and RFC 4034. It can also generate keys for use with TSIG (Transaction Signatures) as defined in RFC 2845, or TKEY (Transaction Key) as defined in RFC 2930.

-

+

The name of the key is specified on the command line. For DNSSEC keys, this must match the name of the zone for which the key is being generated.

-

+

The dnssec-keymgr command acts as a wrapper around dnssec-keygen, generating and updating keys as needed to enforce defined security policies such as key rollover scheduling. Using dnssec-keymgr may be preferable to direct use of dnssec-keygen.

-
-
+
+ +

OPTIONS

-
+ + +
-3
-

+

+

Use an NSEC3-capable algorithm to generate a DNSSEC key. If this option is used with an algorithm that has both NSEC and NSEC3 versions, then the NSEC3 version will be used; for example, dnssec-keygen -3a RSASHA1 specifies the NSEC3RSASHA1 algorithm. -

+

+
-a algorithm
-

+

Selects the cryptographic algorithm. For DNSSEC keys, the value of algorithm must be one of RSASHA1, NSEC3RSASHA1, RSASHA256, RSASHA512, @@ -83,42 +136,43 @@ his value will automatically set the -T KEY option as well.

-

+

These values are case insensitive. In some cases, abbreviations are supported, such as ECDSA256 for ECDSAP256SHA256 and ECDSA384 for ECDSAP384SHA384. If RSASHA1 is specified along with the -3 option, then NSEC3RSASHA1 will be used instead.

-

+

This parameter must be specified except when using the -S option, which copies the algorithm from the predecessor key.

-

+

In prior releases, HMAC algorithms could be generated for use as TSIG keys, but that feature has been removed as of BIND 9.13.0. Use tsig-keygen to generate TSIG keys.

-
+
-b keysize
-

+

Specifies the number of bits in the key. The choice of key size depends on the algorithm used. RSA keys must be between 1024 and 4096 bits. Diffie Hellman keys must be between 128 and 4096 bits. Elliptic curve algorithms don't need this parameter.

-

+

If the key size is not specified, some algorithms have pre-defined defaults. For instance, RSA keys have a default size of 2048 bits.

-
+
-C
-

+

+

Compatibility mode: generates an old-style key, without any timing metadata. By default, dnssec-keygen will include the key's creation date in the metadata stored with @@ -126,25 +180,30 @@ (publication date, activation date, etc). Keys that include this data may be incompatible with older versions of BIND; the -C option suppresses them. -

+

+
-c class
-

+

+

Indicates that the DNS record containing the key should have the specified class. If not specified, class IN is used. -

+

+
-d bits
-

+

+

Key size in bits. For the algorithms RSASHA1, NSEC3RSASA1, RSASHA256 and RSASHA512 the key size must be in range 1024-4096. DH size is between 128 and 4096. This option is ignored for algorithms ECDSAP256SHA256, ECDSAP384SHA384, ED25519 and ED448. -

+

+
-E engine
-

+

Specifies the cryptographic hardware to use, when applicable.

-

+

When BIND is built with OpenSSL PKCS#11 support, this defaults to the string "pkcs11", which identifies an OpenSSL engine that can drive a cryptographic accelerator or hardware service @@ -152,50 +211,61 @@ (--enable-native-pkcs11), it defaults to the path of the PKCS#11 provider library specified via "--with-pkcs11".

-
+
-f flag
-

+

+

Set the specified flag in the flag field of the KEY/DNSKEY record. The only recognized flags are KSK (Key Signing Key) and REVOKE. -

+

+
-G
-

+

+

Generate a key, but do not publish it or sign with it. This option is incompatible with -P and -A. -

+

+
-g generator
-

+

+

If generating a Diffie Hellman key, use this generator. Allowed values are 2 and 5. If no generator is specified, a known prime from RFC 2539 will be used if possible; otherwise the default is 2. -

+

+
-h
-

+

+

Prints a short summary of the options and arguments to dnssec-keygen. -

+

+
-K directory
-

+

+

Sets the directory in which the key files are to be written. -

+

+
-k policy
-

+

Create keys for a specific dnssec-policy. If a policy uses multiple keys, dnssec-keygen will generate multiple keys. This will also create a ".state" file to keep track of the key state.

-

+

This option creates keys according to the dnssec-policy configuration, hence it cannot be used together with many of the other options that dnssec-keygen provides.

-
+
-L ttl
-

+

+

Sets the default TTL to use for this key when it is converted into a DNSKEY RR. If the key is imported into a zone, this is the TTL that will be used for it, unless there was @@ -204,30 +274,38 @@ is no existing DNSKEY RRset, the TTL will default to the SOA TTL. Setting the default TTL to 0 or none is the same as leaving it unset. -

+

+
-l file
-

+

+

Provide a configuration file that contains a dnssec-policy statement (matching the policy set with -k). -

+

+
-n nametype
-

+

+

Specifies the owner type of the key. The value of nametype must either be ZONE (for a DNSSEC zone key (KEY/DNSKEY)), HOST or ENTITY (for a key associated with a host (KEY)), USER (for a key associated with a user(KEY)) or OTHER (DNSKEY). These values are case insensitive. Defaults to ZONE for DNSKEY generation. -

+

+
-p protocol
-

+

+

Sets the protocol value for the generated key, for use with -T KEY. The protocol is a number between 0 and 255. The default is 3 (DNSSEC). Other possible values for this argument are listed in RFC 2535 and its successors. -

+

+
-q
-

+

+

Quiet mode: Suppresses unnecessary output, including progress indication. Without this option, when dnssec-keygen is run interactively @@ -239,9 +317,11 @@ round of the Miller-Rabin primality test; a space means that the number has passed all the tests and is a satisfactory key. -

+

+
-S key
-

+

+

Create a new key which is an explicit successor to an existing key. The name, algorithm, size, and type of the key will be set to match the existing key. The activation @@ -249,41 +329,55 @@ the existing one. The publication date will be set to the activation date minus the prepublication interval, which defaults to 30 days. -

+

+
-s strength
-

+

+

Specifies the strength value of the key. The strength is a number between 0 and 15, and currently has no defined purpose in DNSSEC. -

+

+
-T rrtype
-

+

+

Specifies the resource record type to use for the key. rrtype must be either DNSKEY or KEY. The default is DNSKEY when using a DNSSEC algorithm, but it can be overridden to KEY for use with SIG(0). -

+

+
-t type
-

+

+

Indicates the use of the key, for use with -T KEY. type must be one of AUTHCONF, NOAUTHCONF, NOAUTH, or NOCONF. The default is AUTHCONF. AUTH refers to the ability to authenticate data, and CONF the ability to encrypt data. -

+

+
-V
-

+

+

Prints version information. -

+

+
-v level
-

+

+

Sets the debugging level. -

+

+
-
-
+
+ +

TIMING OPTIONS

-

+ + +

Dates can be expressed in the format YYYYMMDD or YYYYMMDDHHMMSS. If the argument begins with a '+' or '-', it is interpreted as an offset from the present time. For convenience, if such an offset @@ -294,54 +388,69 @@ is computed in seconds. To explicitly prevent a date from being set, use 'none' or 'never'.

-
+ +
-P date/offset
-

+

+

Sets the date on which a key is to be published to the zone. After that date, the key will be included in the zone but will not be used to sign it. If not set, and if the -G option has not been used, the default is "now". -

+

+
-P sync date/offset
-

+

+

Sets the date on which CDS and CDNSKEY records that match this key are to be published to the zone. -

+

+
-A date/offset
-

+

+

Sets the date on which the key is to be activated. After that date, the key will be included in the zone and used to sign it. If not set, and if the -G option has not been used, the default is "now". If set, if and -P is not set, then the publication date will be set to the activation date minus the prepublication interval. -

+

+
-R date/offset
-

+

+

Sets the date on which the key is to be revoked. After that date, the key will be flagged as revoked. It will be included in the zone and will be used to sign it. -

+

+
-I date/offset
-

+

+

Sets the date on which the key is to be retired. After that date, the key will still be included in the zone, but it will not be used to sign it. -

+

+
-D date/offset
-

+

+

Sets the date on which the key is to be deleted. After that date, the key will no longer be included in the zone. (It may remain in the key repository, however.) -

+

+
-D sync date/offset
-

+

+

Sets the date on which the CDS and CDNSKEY records that match this key are to be deleted. -

+

+
-i interval
-

+

Sets the prepublication interval for a key. If set, then the publication and activation dates must be separated by at least this much time. If the activation date is specified but the @@ -350,42 +459,51 @@ the publication date is specified but activation date isn't, then activation will be set to this much time after publication.

-

+

If the key is being created as an explicit successor to another key, then the default prepublication interval is 30 days; otherwise it is zero.

-

+

As with date offsets, if the argument is followed by one of the suffixes 'y', 'mo', 'w', 'd', 'h', or 'mi', then the interval is measured in years, months, weeks, days, hours, or minutes, respectively. Without a suffix, the interval is measured in seconds.

-
+
-
-
+
+ + +

GENERATED KEYS

-

+ +

When dnssec-keygen completes successfully, it prints a string of the form Knnnn.+aaa+iiiii to the standard output. This is an identification string for the key it has generated.

-
    -

  • nnnn is the key name. -

    • -

  • aaa is the numeric representation +

      +
    • +

      nnnn is the key name. +

      +
      • +
    • +

      aaa is the numeric representation of the algorithm. -

      • -

    • iiiii is the key identifier (or +

      +
      • +
    • +

      iiiii is the key identifier (or footprint). -

      • +

      +
    -

    dnssec-keygen +

    dnssec-keygen creates two files, with names based on the printed string. Knnnn.+aaa+iiiii.key contains the public key, and @@ -393,7 +511,7 @@ private key.

    -

    +

    The .key file contains a DNSKEY or KEY record. When a zone is being signed by named or dnssec-signzone -S, DNSKEY @@ -401,49 +519,56 @@ the .key file can be inserted into a zone file manually or with a $INCLUDE statement.

    -

    +

    The .private file contains algorithm-specific fields. For obvious security reasons, this file does not have general read permission.

    -
-
+
+ +

EXAMPLE

-

+ +

To generate an ECDSAP256SHA256 zone-signing key for the zone example.com, issue the command:

-

+

dnssec-keygen -a ECDSAP256SHA256 example.com

-

+

The command would print a string of the form:

-

Kexample.com.+013+26160 +

Kexample.com.+013+26160

-

+

In this example, dnssec-keygen creates the files Kexample.com.+013+26160.key and Kexample.com.+013+26160.private.

-

+

To generate a matching key-signing key, issue the command:

-

+

dnssec-keygen -a ECDSAP256SHA256 -f KSK example.com

-
-
+
+ +

SEE ALSO

-

dnssec-signzone(8), + +

+ dnssec-signzone(8) + , BIND 9 Administrator Reference Manual, RFC 2539, RFC 2845, RFC 4034.

-
+
+
@@ -464,6 +589,6 @@
-

BIND 9.17.0 (Development Release)

+

BIND 9.17.1 (Development Release)

diff --git a/doc/arm/man.dnssec-keymgr.html b/doc/arm/man.dnssec-keymgr.html index d5e519f6b3..8b3b952ac8 100644 --- a/doc/arm/man.dnssec-keymgr.html +++ b/doc/arm/man.dnssec-keymgr.html @@ -10,7 +10,7 @@ dnssec-keymgr - + @@ -32,24 +32,48 @@
-
+ + + + + +

Name

-

dnssec-keymgr — Ensures correct DNSKEY coverage for a zone based on a defined policy

-
-
-

Synopsis

-

dnssec-keymgr [-K directory] [-c file] [-f] [-k] [-q] [-v] [-z] [-g path] [-s path] [zone...]

-
-
-

DESCRIPTION

+ dnssec-keymgr + — Ensures correct DNSKEY coverage for a zone based on a defined policy +

+
+ + + +
+

Synopsis

+

+ dnssec-keymgr + [-K directory] + [-c file] + [-f] + [-k] + [-q] + [-v] + [-z] + [-g path] + [-s path] + [zone...] +

+
+ +
+

DESCRIPTION

+

dnssec-keymgr is a high level Python wrapper to facilitate the key rollover process for zones handled by BIND. It uses the BIND commands for manipulating DNSSEC key metadata: dnssec-keygen and dnssec-settime.

-

+

DNSSEC policy can be read from a configuration file (default /etc/dnssec-policy.conf), from which the key parameters, publication and rollover schedule, and desired @@ -58,14 +82,14 @@ per-zone basis, or to set a "default" policy used for all zones.

-

+

When dnssec-keymgr runs, it examines the DNSSEC keys for one or more zones, comparing their timing metadata against the policies for those zones. If key settings do not conform to the DNSSEC policy (for example, because the policy has been changed), they are automatically corrected.

-

+

A zone policy can specify a duration for which we want to ensure the key correctness (coverage). It can also specify a rollover period (roll-period). @@ -73,43 +97,47 @@ coverage period ends, then a successor key will automatically be created and added to the end of the key series.

-

+

If zones are specified on the command line, dnssec-keymgr will examine only those zones. If a specified zone does not already have keys in place, then keys will be generated for it according to policy.

-

+

If zones are not specified on the command line, then dnssec-keymgr will search the key directory (either the current working directory or the directory set by the -K option), and check the keys for all the zones represented in the directory.

-

+

Key times that are in the past will not be updated unless the -f is used (see below). Key inactivation and deletion times that are less than five minutes in the future will be delayed by five minutes.

-

+

It is expected that this tool will be run automatically and unattended (for example, by cron).

-
-
+
+ +

OPTIONS

-
+
-c file
-

+

+

If -c is specified, then the DNSSEC policy is read from file. (If not specified, then the policy is read from /etc/dnssec-policy.conf; if that file doesn't exist, a built-in global default policy is used.) -

+

+
-f
-

+

+

Force: allow updating of key events even if they are already in the past. This is not recommended for use with zones in which keys have already been published. However, @@ -118,58 +146,77 @@ keys have not been published in a zone as yet, then this option can be used to clean them up and turn them into a proper series of keys with appropriate rollover intervals. -

+

+
-g keygen-path
-

+

+

Specifies a path to a dnssec-keygen binary. Used for testing. See also the -s option. -

+

+
-h
-

+

+

Print the dnssec-keymgr help summary and exit. -

+

+
-K directory
-

+

+

Sets the directory in which keys can be found. Defaults to the current working directory. -

+

+
-k
-

+

+

Only apply policies to KSK keys. See also the -z option. -

+

+
-q
-

+

+

Quiet: suppress printing of dnssec-keygen and dnssec-settime. -

+

+
-s settime-path
-

+

+

Specifies a path to a dnssec-settime binary. Used for testing. See also the -g option. -

+

+
-v
-

+

+

Print the dnssec-keymgr version and exit. -

+

+
-z
-

+

+

Only apply policies to ZSK keys. See also the -k option. -

+

+
-
-
+
+ +

POLICY CONFIGURATION

-

+

The dnssec-policy.conf file can specify three kinds of policies:

-
    -

  • +

      +
    • +

      Policy classes (policy name { ... };) can be inherited by zone policies or other policy classes; these @@ -178,16 +225,20 @@ 1024-bit key sizes, but a class extra might specify 2048 bits instead; extra would be used for zones that had unusually high security needs. -

      • -

    • +

      +
      • +
    • +

      Algorithm policies: (algorithm-policy algorithm { ... }; ) override default per-algorithm settings. For example, by default, RSASHA256 keys use 2048-bit key sizes for both KSK and ZSK. This can be modified using algorithm-policy, and the new key sizes would then be used for any key of type RSASHA256. -

      • -

    • +

      +
      • +
    • +

      Zone policies: (zone name { ... }; ) set policy for a single zone by name. A zone policy can inherit @@ -195,21 +246,25 @@ Zone names beginning with digits (i.e., 0-9) must be quoted. If a zone does not have its own policy then the "default" policy applies. -

      • +

      +
    -

    +

    Options that can be specified in policies:

    -
    +
    algorithm name;
    -

    +

    +

    The key algorithm. If no policy is defined, the default is RSASHA256. -

    +

    +
    coverage duration;
    -

    +

    +

    The length of time to ensure that keys will be correct; no action will be taken to create new keys to be activated after this time. This can be represented as a number of seconds, or as a duration @@ -217,89 +272,119 @@ A default value for this option can be set in algorithm policies as well as in policy classes or zone policies. If no policy is configured, the default is six months. -

    +

    +
    directory path;
    -

    +

    +

    Specifies the directory in which keys should be stored. -

    +

    +
    key-size keytype size;
    -

    +

    +

    Specifies the number of bits to use in creating keys. The keytype is either "zsk" or "ksk". A default value for this option can be set in algorithm policies as well as in policy classes or zone policies. If no policy is configured, the default is 2048 bits for RSA keys. -

    +

    +
    keyttl duration;
    -

    +

    +

    The key TTL. If no policy is defined, the default is one hour. -

    +

    +
    post-publish keytype duration;
    -

    +

    +

    How long after inactivation a key should be deleted from the zone. Note: If roll-period is not set, this value is ignored. The keytype is either "zsk" or "ksk". A default duration for this option can be set in algorithm policies as well as in policy classes or zone policies. The default is one month. -

    +

    +
    pre-publish keytype duration;
    -

    +

    +

    How long before activation a key should be published. Note: If roll-period is not set, this value is ignored. The keytype is either "zsk" or "ksk". A default duration for this option can be set in algorithm policies as well as in policy classes or zone policies. The default is one month. -

    +

    +
    roll-period keytype duration;
    -

    +

    +

    How frequently keys should be rolled over. The keytype is either "zsk" or "ksk". A default duration for this option can be set in algorithm policies as well as in policy classes or zone policies. If no policy is configured, the default is one year for ZSKs. KSKs do not roll over by default. -

    +

    +
    standby keytype number;
    -

    +

    +

    Not yet implemented. -

    +

    +
    -
    -
    +
    + +

    REMAINING WORK

    -
      -

    • +

        +
      • +

        Enable scheduling of KSK rollovers using the -P sync and -D sync options to dnssec-keygen and dnssec-settime. Check the parent zone (as in dnssec-checkds) to determine when it's safe for the key to roll. -

        • -

      • +

        +
        • +
      • +

        Allow configuration of standby keys and use of the REVOKE bit, for keys that use RFC 5011 semantics. -

        • +

        +
      -
    -
    +
    + +

    SEE ALSO

    -

    - dnssec-coverage(8), - dnssec-keygen(8), - dnssec-settime(8), - dnssec-checkds(8) +

    + + dnssec-coverage(8) + , + + dnssec-keygen(8) + , + + dnssec-settime(8) + , + + dnssec-checkds(8) +

    -
    +
    +
@@ -320,6 +405,6 @@
-

BIND 9.17.0 (Development Release)

+

BIND 9.17.1 (Development Release)

diff --git a/doc/arm/man.dnssec-revoke.html b/doc/arm/man.dnssec-revoke.html index 0dffdac856..87bf44004e 100644 --- a/doc/arm/man.dnssec-revoke.html +++ b/doc/arm/man.dnssec-revoke.html @@ -10,7 +10,7 @@ dnssec-revoke - + @@ -32,52 +32,88 @@
-
+ + + + + +

Name

-

dnssec-revoke — set the REVOKED bit on a DNSSEC key

+

+ dnssec-revoke + — set the REVOKED bit on a DNSSEC key +

-
+ + + +

Synopsis

-

dnssec-revoke [-hr] [-v level] [-V] [-K directory] [-E engine] [-f] [-R] {keyfile}

-
-
+

+ dnssec-revoke + [-hr] + [-v level] + [-V] + [-K directory] + [-E engine] + [-f] + [-R] + {keyfile} +

+
+ +

DESCRIPTION

-

dnssec-revoke + +

dnssec-revoke reads a DNSSEC key file, sets the REVOKED bit on the key as defined in RFC 5011, and creates a new pair of key files containing the now-revoked key.

-
-
+
+ +

OPTIONS

-
+ + +
-h
-

+

+

Emit usage message and exit. -

+

+
-K directory
-

+

+

Sets the directory in which the key files are to reside. -

+

+
-r
-

+

+

After writing the new keyset files remove the original keyset files. -

+

+
-v level
-

+

+

Sets the debugging level. -

+

+
-V
-

+

+

Prints version information. -

+

+
-E engine
-

+

Specifies the cryptographic hardware to use, when applicable.

-

+

When BIND is built with OpenSSL PKCS#11 support, this defaults to the string "pkcs11", which identifies an OpenSSL engine that can drive a cryptographic accelerator or hardware service @@ -85,27 +121,36 @@ (--enable-native-pkcs11), it defaults to the path of the PKCS#11 provider library specified via "--with-pkcs11".

-
+
-f
-

+

+

Force overwrite: Causes dnssec-revoke to write the new key pair even if a file already exists matching the algorithm and key ID of the revoked key. -

+

+
-R
-

+

+

Print the key tag of the key with the REVOKE bit set but do not revoke the key. -

+

+
-
-
+
+ +

SEE ALSO

-

dnssec-keygen(8), + +

+ dnssec-keygen(8) + , BIND 9 Administrator Reference Manual, RFC 5011.

-
+
+
@@ -126,6 +171,6 @@
-

BIND 9.17.0 (Development Release)

+

BIND 9.17.1 (Development Release)

diff --git a/doc/arm/man.dnssec-settime.html b/doc/arm/man.dnssec-settime.html index d5c8f3ed2b..37ff2e45f2 100644 --- a/doc/arm/man.dnssec-settime.html +++ b/doc/arm/man.dnssec-settime.html @@ -10,7 +10,7 @@ dnssec-settime - + @@ -32,17 +32,55 @@
-
+ + + + + +

Name

-

dnssec-settime — set the key timing metadata for a DNSSEC key

+

+ dnssec-settime + — set the key timing metadata for a DNSSEC key +

-
+ + + +

Synopsis

-

dnssec-settime [-f] [-K directory] [-L ttl] [-P date/offset] [-P sync date/offset] [-A date/offset] [-R date/offset] [-I date/offset] [-D date/offset] [-D sync date/offset] [-S key] [-i interval] [-h] [-V] [-v level] [-E engine] [-s] [-g state] [-d state date/offset] [-k state date/offset] [-r state date/offset] [-z state date/offset] {keyfile}

-
-
+

+ dnssec-settime + [-f] + [-K directory] + [-L ttl] + [-P date/offset] + [-P sync date/offset] + [-A date/offset] + [-R date/offset] + [-I date/offset] + [-D date/offset] + [-D sync date/offset] + [-S key] + [-i interval] + [-h] + [-V] + [-v level] + [-E engine] + [-s] + [-g state] + [-d state date/offset] + [-k state date/offset] + [-r state date/offset] + [-z state date/offset] + {keyfile} +

+
+ +

DESCRIPTION

-

dnssec-settime + +

dnssec-settime reads a DNSSEC private key file and sets the key timing metadata as specified by the -P, -A, -R, -I, and -D @@ -51,23 +89,23 @@ determine when a key is to be published, whether it should be used for signing a zone, etc.

-

+

If none of these options is set on the command line, then dnssec-settime simply prints the key timing metadata already stored in the key.

-

+

When key metadata fields are changed, both files of a key pair (Knnnn.+aaa+iiiii.key and Knnnn.+aaa+iiiii.private) are regenerated.

-

+

Metadata fields are stored in the private file. A human-readable description of the metadata is also placed in comments in the key file. The private file's permissions are always set to be inaccessible to anyone other than the owner (mode 0600).

-

+

When working with state files, it is possible to update the timing metadata in those files as well with -s. If this option is used you can also update key states with -d @@ -75,21 +113,25 @@ or -z (RRSIG of ZSK). Allowed states are HIDDEN, RUMOURED, OMNIPRESENT, and UNRETENTIVE.

-

+

You can also set the goal state of the key with -g. This should be either HIDDEN or OMNIPRESENT (representing whether the key should be removed from the zone, or published).

-

+

It is NOT RECOMMENDED to manipulate state files manually except for testing purposes.

-
-
+
+ +

OPTIONS

-
+ + +
-f
-

+

+

Force an update of an old-format key with no metadata fields. Without this option, dnssec-settime will fail when attempting to update a legacy key. With this option, @@ -98,13 +140,17 @@ set to the present time. If no other values are specified, then the key's publication and activation dates will also be set to the present time. -

+

+
-K directory
-

+

+

Sets the directory in which the key files are to reside. -

+

+
-L ttl
-

+

+

Sets the default TTL to use for this key when it is converted into a DNSKEY RR. If the key is imported into a zone, this is the TTL that will be used for it, unless there was @@ -113,25 +159,32 @@ is no existing DNSKEY RRset, the TTL will default to the SOA TTL. Setting the default TTL to 0 or none removes it from the key. -

+

+
-h
-

+

+

Emit usage message and exit. -

+

+
-V
-

+

+

Prints version information. -

+

+
-v level
-

+

+

Sets the debugging level. -

+

+
-E engine
-

+

Specifies the cryptographic hardware to use, when applicable.

-

+

When BIND is built with OpenSSL PKCS#11 support, this defaults to the string "pkcs11", which identifies an OpenSSL engine that can drive a cryptographic accelerator or hardware service @@ -139,12 +192,14 @@ (--enable-native-pkcs11), it defaults to the path of the PKCS#11 provider library specified via "--with-pkcs11".

-
+
-
-
+
+ +

TIMING OPTIONS

-

+ +

Dates can be expressed in the format YYYYMMDD or YYYYMMDDHHMMSS. If the argument begins with a '+' or '-', it is interpreted as an offset from the present time. For convenience, if such an offset @@ -154,49 +209,65 @@ days, hours, or minutes, respectively. Without a suffix, the offset is computed in seconds. To unset a date, use 'none' or 'never'.

-
+ +
-P date/offset
-

+

+

Sets the date on which a key is to be published to the zone. After that date, the key will be included in the zone but will not be used to sign it. -

+

+
-P sync date/offset
-

+

+

Sets the date on which CDS and CDNSKEY records that match this key are to be published to the zone. -

+

+
-A date/offset
-

+

+

Sets the date on which the key is to be activated. After that date, the key will be included in the zone and used to sign it. -

+

+
-R date/offset
-

+

+

Sets the date on which the key is to be revoked. After that date, the key will be flagged as revoked. It will be included in the zone and will be used to sign it. -

+

+
-I date/offset
-

+

+

Sets the date on which the key is to be retired. After that date, the key will still be included in the zone, but it will not be used to sign it. -

+

+
-D date/offset
-

+

+

Sets the date on which the key is to be deleted. After that date, the key will no longer be included in the zone. (It may remain in the key repository, however.) -

+

+
-D sync date/offset
-

+

+

Sets the date on which the CDS and CDNSKEY records that match this key are to be deleted. -

+

+
-S predecessor key
-

+

+

Select a key for which the key being modified will be an explicit successor. The name, algorithm, size, and type of the predecessor key must exactly match those of the key being @@ -204,10 +275,11 @@ to the inactivation date of the predecessor. The publication date will be set to the activation date minus the prepublication interval, which defaults to 30 days. -

+

+
-i interval
-

+

Sets the prepublication interval for a key. If set, then the publication and activation dates must be separated by at least this much time. If the activation date is specified but the @@ -216,69 +288,90 @@ the publication date is specified but activation date isn't, then activation will be set to this much time after publication.

-

+

If the key is being set to be an explicit successor to another key, then the default prepublication interval is 30 days; otherwise it is zero.

-

+

As with date offsets, if the argument is followed by one of the suffixes 'y', 'mo', 'w', 'd', 'h', or 'mi', then the interval is measured in years, months, weeks, days, hours, or minutes, respectively. Without a suffix, the interval is measured in seconds.

-
+
-
-
+
+ +

KEY STATE OPTIONS

-

+ +

Known key states are HIDDEN, RUMOURED, OMNIPRESENT and UNRETENTIVE. These should not be set manually except for testing purposes.

-
+ +
-s
-

+

+

When setting key timing data, also update the state file. -

+

+
-g
-

+

+

Set the goal state for this key. Must be HIDDEN or OMNIPRESENT. -

+

+
-d
-

+

+

Set the DS state for this key, and when it was last changed. -

+

+
-k
-

+

+

Set the DNSKEY state for this key, and when it was last changed. -

+

+
-r
-

+

+

Set the RRSIG (KSK) state for this key, and when it was last changed. -

+

+
-z
-

+

+

Set the RRSIG (ZSK) state for this key, and when it was last changed. -

+

+
-
-
+
+ +

PRINTING OPTIONS

-

+ +

dnssec-settime can also be used to print the timing metadata associated with a key.

-
+ +
-u
-

+

+

Print times in UNIX epoch format. -

+

+
-p C/P/Psync/A/R/I/D/Dsync/all
-

+

+

Print a specific metadata value or set of metadata values. The -p option may be followed by one or more of the following letters or strings to indicate which value @@ -292,17 +385,25 @@ D for the deletion date, and Dsync for the CDS and CDNSKEY deletion date To print all of the metadata, use -p all. -

+

+
-
-
+
+ +

SEE ALSO

-

dnssec-keygen(8), - dnssec-signzone(8), + +

+ dnssec-keygen(8) + , + + dnssec-signzone(8) + , BIND 9 Administrator Reference Manual, RFC 5011.

-
+
+
@@ -323,6 +424,6 @@
-

BIND 9.17.0 (Development Release)

+

BIND 9.17.1 (Development Release)

diff --git a/doc/arm/man.dnssec-signzone.html b/doc/arm/man.dnssec-signzone.html index 79b326e00d..3d4b9562be 100644 --- a/doc/arm/man.dnssec-signzone.html +++ b/doc/arm/man.dnssec-signzone.html @@ -10,7 +10,7 @@ dnssec-signzone - + @@ -32,17 +32,71 @@
-
+ + + + + +

Name

-

dnssec-signzone — DNSSEC zone signing tool

+

+ dnssec-signzone + — DNSSEC zone signing tool +

-
+ + + +

Synopsis

-

dnssec-signzone [-a] [-c class] [-d directory] [-D] [-E engine] [-e end-time] [-f output-file] [-g] [-h] [-i interval] [-I input-format] [-j jitter] [-K directory] [-k key] [-L serial] [-l domain] [-M maxttl] [-N soa-serial-format] [-o origin] [-O output-format] [-P] [-Q] [-q] [-R] [-S] [-s start-time] [-T ttl] [-t] [-u] [-v level] [-V] [-X extended end-time] [-x] [-z] [-3 salt] [-H iterations] [-A] {zonefile} [key...]

-
-
+

+ dnssec-signzone + [-a] + [-c class] + [-d directory] + [-D] + [-E engine] + [-e end-time] + [-f output-file] + [-g] + [-h] + [-i interval] + [-I input-format] + [-j jitter] + [-K directory] + [-k key] + [-L serial] + [-l domain] + [-M maxttl] + [-N soa-serial-format] + [-o origin] + [-O output-format] + [-P] + [-Q] + [-q] + [-R] + [-S] + [-s start-time] + [-T ttl] + [-t] + [-u] + [-v level] + [-V] + [-X extended end-time] + [-x] + [-z] + [-3 salt] + [-H iterations] + [-A] + {zonefile} + [key...] +

+
+ +

DESCRIPTION

-

dnssec-signzone + +

dnssec-signzone signs a zone. It generates NSEC and RRSIG records and produces a signed version of the zone. The security status of delegations from the signed zone @@ -50,34 +104,46 @@ determined by the presence or absence of a keyset file for each child zone.

-
-
+
+ +

OPTIONS

-
+ + +
-a
-

+

+

Verify all generated signatures. -

+

+
-c class
-

+

+

Specifies the DNS class of the zone. -

+

+
-C
-

+

+

Compatibility mode: Generate a keyset-zonename file in addition to dsset-zonename when signing a zone, for use by older versions of dnssec-signzone. -

+

+
-d directory
-

+

+

Look for dsset- or keyset- files in directory. -

+

+
-D
-

+

+

Output only those record types automatically managed by dnssec-signzone, i.e. RRSIG, NSEC, NSEC3 and NSEC3PARAM records. If smart signing @@ -86,15 +152,16 @@ zone file with $INCLUDE. This option cannot be combined with -O raw, -O map, or serial number updating. -

+

+
-E engine
-

+

When applicable, specifies the hardware to use for cryptographic operations, such as a secure key store used for signing.

-

+

When BIND is built with OpenSSL PKCS#11 support, this defaults to the string "pkcs11", which identifies an OpenSSL engine that can drive a cryptographic accelerator or hardware service @@ -102,25 +169,32 @@ (--enable-native-pkcs11), it defaults to the path of the PKCS#11 provider library specified via "--with-pkcs11".

-
+
-g
-

+

+

Generate DS records for child zones from dsset- or keyset- file. Existing DS records will be removed. -

+

+
-K directory
-

+

+

Key repository: Specify a directory to search for DNSSEC keys. If not specified, defaults to the current directory. -

+

+
-k key
-

+

+

Treat specified key as a key signing key ignoring any key flags. This option may be specified multiple times. -

+

+
-M maxttl
-

+

+

Sets the maximum TTL for the signed zone. Any TTL higher than maxttl in the input zone will be reduced to maxttl @@ -133,9 +207,11 @@ max-zone-ttl in named.conf. (Note: This option is incompatible with -D, because it modifies non-DNSSEC data in the output zone.) -

+

+
-s start-time
-

+

+

Specify the date and time when the generated RRSIG records become valid. This can be either an absolute or relative time. An absolute start time is indicated by a number @@ -144,9 +220,11 @@ indicated by +N, which is N seconds from the current time. If no start-time is specified, the current time minus 1 hour (to allow for clock skew) is used. -

+

+
-e end-time
-

+

+

Specify the date and time when the generated RRSIG records expire. As with start-time, an absolute time is indicated in YYYYMMDDHHMMSS notation. A time relative @@ -156,10 +234,11 @@ specified, 30 days from the start time is used as a default. end-time must be later than start-time. -

+

+
-X extended end-time
-

+

Specify the date and time when the generated RRSIG records for the DNSKEY RRset will expire. This is to be used in cases when the DNSKEY signatures need to persist longer than @@ -167,7 +246,7 @@ of the KSK is kept offline and the KSK signature is to be refreshed manually.

-

+

As with start-time, an absolute time is indicated in YYYYMMDDHHMMSS notation. A time relative to the start time is indicated with +N, which is N seconds from @@ -178,28 +257,34 @@ 30 days from the start time.) extended end-time must be later than start-time.

-
+
-f output-file
-

+

+

The name of the output file containing the signed zone. The default is to append .signed to the input filename. If output-file is set to "-", then the signed zone is written to the standard output, with a default output format of "full". -

+

+
-h
-

+

+

Prints a short summary of the options and arguments to dnssec-signzone. -

+

+
-V
-

+

+

Prints version information. -

+

+
-i interval
-

+

When a previously-signed zone is passed as input, records may be resigned. The interval option specifies the cycle interval as an offset from the current @@ -207,7 +292,7 @@ cycle interval, it is retained. Otherwise, it is considered to be expiring soon, and it will be replaced.

-

+

The default cycle interval is one quarter of the difference between the signature end and start times. So if neither end-time or start-time @@ -218,9 +303,10 @@ are due to expire in less than 7.5 days, they would be replaced.

-
+
-I input-format
-

+

+

The format of the input zone file. Possible formats are "text" (default), "raw", and "map". @@ -229,10 +315,11 @@ format containing updates can be signed directly. The use of this option does not make much sense for non-dynamic zones. -

+

+
-j jitter
-

+

When signing a zone with a fixed signature lifetime, all RRSIG records issued at the time of signing expires simultaneously. If the zone is incrementally signed, i.e. @@ -243,55 +330,72 @@ expire time, thus spreading incremental signature regeneration over time.

-

+

Signature lifetime jitter also to some extent benefits validators and servers by spreading out cache expiration, i.e. if large numbers of RRSIGs don't expire at the same time from all caches there will be less congestion than if all validators need to refetch at mostly the same time.

-
+
-L serial
-

+

+

When writing a signed zone to "raw" or "map" format, set the "source serial" value in the header to the specified serial number. (This is expected to be used primarily for testing purposes.) -

+

+
-n ncpus
-

+

+

Specifies the number of threads to use. By default, one thread is started for each detected CPU. -

+

+
-N soa-serial-format
-

+

The SOA serial number format of the signed zone. Possible formats are "keep" (default), "increment", "unixtime", and "date".

-
+ +
"keep"
-

Do not modify the SOA serial number.

+
+

Do not modify the SOA serial number.

+
"increment"
-

Increment the SOA serial number using RFC 1982 - arithmetic.

+
+

Increment the SOA serial number using RFC 1982 + arithmetic.

+
"unixtime"
-

Set the SOA serial number to the number of seconds - since epoch.

+
+

Set the SOA serial number to the number of seconds + since epoch.

+
"date"
-

Set the SOA serial number to today's date in - YYYYMMDDNN format.

+
+

Set the SOA serial number to today's date in + YYYYMMDDNN format.

+
-
+ +
-o origin
-

+

+

The zone origin. If not specified, the name of the zone file is assumed to be the origin. -

+

+
-O output-format
-

+

+

The format of the output file containing the signed zone. Possible formats are "text" (default), which is the standard textual representation of the zone; @@ -304,26 +408,27 @@ the raw zone file: if N is 0, the raw file can be read by any version of named; if N is 1, the file can be read by release 9.9.0 or higher; the default is 1. -

+

+
-P
-

+

Disable post sign verification tests.

-

+

The post sign verification test ensures that for each algorithm in use there is at least one non revoked self signed KSK key, that all revoked KSK keys are self signed, and that all records in the zone are signed by the algorithm. This option skips these tests.

-
+
-Q
-

+

Remove signatures from keys that are no longer active.

-

+

Normally, when a previously-signed zone is passed as input to the signer, and a DNSKEY record has been removed and replaced with a new one, signatures from the old key @@ -335,9 +440,10 @@ enables ZSK rollover using the procedure described in RFC 4641, section 4.2.1.1 ("Pre-Publish Key Rollover").

-
+
-q
-

+

+

Quiet mode: Suppresses unnecessary output. Without this option, when dnssec-signzone is run it will print to standard output the number of keys in use, @@ -345,78 +451,94 @@ and other status information, and finally the filename containing the signed zone. With it, that output is suppressed, leaving only the filename. -

+

+
-R
-

+

Remove signatures from keys that are no longer published.

-

+

This option is similar to -Q, except it forces dnssec-signzone to signatures from keys that are no longer published. This enables ZSK rollover using the procedure described in RFC 4641, section 4.2.1.2 ("Double Signature Zone Signing Key Rollover").

-
+
-S
-

+

Smart signing: Instructs dnssec-signzone to search the key repository for keys that match the zone being signed, and to include them in the zone if appropriate.

-

+

When a key is found, its timing metadata is examined to determine how it should be used, according to the following rules. Each successive rule takes priority over the prior ones:

-
+
-

+

+

If no timing metadata has been set for the key, the key is published in the zone and used to sign the zone. -

+

+
-

+

+

If the key's publication date is set and is in the past, the key is published in the zone. -

+

+
-

+

+

If the key's activation date is set and in the past, the key is published (regardless of publication date) and used to sign the zone. -

+

+
-

+

+

If the key's revocation date is set and in the past, and the key is published, then the key is revoked, and the revoked key is used to sign the zone. -

+

+
-

+

+

If either of the key's unpublication or deletion dates are set and in the past, the key is NOT published or used to sign the zone, regardless of any other metadata. -

+

+
-

+

+

If key's sync publication date is set and in the past, synchronization records (type CDS and/or CDNSKEY) are created. -

+

+
-

+

+

If key's sync deletion date is set and in the past, synchronization records (type CDS and/or CDNSKEY) are removed. -

+

+
- +
-T ttl
-

+

+

Specifies a TTL to be used for new DNSKEY records imported into the zone from the key repository. If not specified, the default is the TTL value from the zone's SOA @@ -428,82 +550,103 @@ them, or if any of the imported DNSKEY records had a default TTL value. In the event of a a conflict between TTL values in imported keys, the shortest one is used. -

+

+
-t
-

+

+

Print statistics at completion. -

+

+
-u
-

+

+

Update NSEC/NSEC3 chain when re-signing a previously signed zone. With this option, a zone signed with NSEC can be switched to NSEC3, or a zone signed with NSEC3 can be switch to NSEC or to NSEC3 with different parameters. Without this option, dnssec-signzone will retain the existing chain when re-signing. -

+

+
-v level
-

+

+

Sets the debugging level. -

+

+
-x
-

+

+

Only sign the DNSKEY, CDNSKEY, and CDS RRsets with key-signing keys, and omit signatures from zone-signing keys. (This is similar to the dnssec-dnskey-kskonly yes; zone option in named.) -

+

+
-z
-

+

+

Ignore KSK flag on key when determining what to sign. This causes KSK-flagged keys to sign all records, not just the DNSKEY RRset. (This is similar to the update-check-ksk no; zone option in named.) -

+

+
-3 salt
-

+

+

Generate an NSEC3 chain with the given hex encoded salt. A dash (salt) can be used to indicate that no salt is to be used when generating the NSEC3 chain. -

+

+
-H iterations
-

+

+

When generating an NSEC3 chain, use this many iterations. The default is 10. -

+

+
-A
-

+

When generating an NSEC3 chain set the OPTOUT flag on all NSEC3 records and do not generate NSEC3 records for insecure delegations.

-

+

Using this option twice (i.e., -AA) turns the OPTOUT flag off for all records. This is useful when using the -u option to modify an NSEC3 chain which previously had OPTOUT set.

-
+
zonefile
-

+

+

The file containing the zone to be signed. -

+

+
key
-

+

+

Specify which keys should be used to sign the zone. If no keys are specified, then the zone will be examined for DNSKEY records at the zone apex. If these are found and there are matching private keys, in the current directory, then these will be used for signing. -

+

+
-
-
+
+ +

EXAMPLE

-

+ +

The following command signs the example.com zone with the ECDSAP256SHA256 key generated by key generated by dnssec-keygen (Kexample.com.+013+17247). @@ -517,13 +660,13 @@ Kexample.com.+013+17247 db.example.com.signed % -

+

In the above example, dnssec-signzone creates the file db.example.com.signed. This file should be referenced in a zone statement in a named.conf file.

-

+

This example re-signs a previously signed zone with default parameters. The private keys are assumed to be in the current directory.

@@ -531,14 +674,19 @@ db.example.com.signed % dnssec-signzone -o example.com db.example.com db.example.com.signed % -
-
+
+ +

SEE ALSO

-

dnssec-keygen(8), + +

+ dnssec-keygen(8) + , BIND 9 Administrator Reference Manual, RFC 4033, RFC 4641.

-
+
+
@@ -559,6 +707,6 @@ db.example.com.signed
-

BIND 9.17.0 (Development Release)

+

BIND 9.17.1 (Development Release)

diff --git a/doc/arm/man.dnssec-verify.html b/doc/arm/man.dnssec-verify.html index fae87bb8f2..9895ea5ece 100644 --- a/doc/arm/man.dnssec-verify.html +++ b/doc/arm/man.dnssec-verify.html @@ -10,7 +10,7 @@ dnssec-verify - + @@ -32,35 +32,65 @@
-
+ + + + + +

Name

-

dnssec-verify — DNSSEC zone verification tool

+

+ dnssec-verify + — DNSSEC zone verification tool +

-
+ + + +

Synopsis

-

dnssec-verify [-c class] [-E engine] [-I input-format] [-o origin] [-q] [-v level] [-V] [-x] [-z] {zonefile}

-
-
+

+ dnssec-verify + [-c class] + [-E engine] + [-I input-format] + [-o origin] + [-q] + [-v level] + [-V] + [-x] + [-z] + {zonefile} +

+
+ +

DESCRIPTION

-

dnssec-verify + +

dnssec-verify verifies that a zone is fully signed for each algorithm found in the DNSKEY RRset for the zone, and that the NSEC / NSEC3 chains are complete.

-
-
+
+ +

OPTIONS

-
+ + +
-c class
-

+

+

Specifies the DNS class of the zone. -

+

+
-E engine
-

+

Specifies the cryptographic hardware to use, when applicable.

-

+

When BIND is built with OpenSSL PKCS#11 support, this defaults to the string "pkcs11", which identifies an OpenSSL engine that can drive a cryptographic accelerator or hardware service @@ -68,9 +98,10 @@ (--enable-native-pkcs11), it defaults to the path of the PKCS#11 provider library specified via "--with-pkcs11".

-
+
-I input-format
-

+

+

The format of the input zone file. Possible formats are "text" (default) and "raw". @@ -79,41 +110,52 @@ format containing updates can be verified independently. The use of this option does not make much sense for non-dynamic zones. -

+

+
-o origin
-

+

+

The zone origin. If not specified, the name of the zone file is assumed to be the origin. -

+

+
-v level
-

+

+

Sets the debugging level. -

+

+
-V
-

+

+

Prints version information. -

+

+
-q
-

+

+

Quiet mode: Suppresses output. Without this option, when dnssec-verify is run it will print to standard output the number of keys in use, the algorithms used to verify the zone was signed correctly and other status information. With it, all non-error output is suppressed, and only the exit code will indicate success. -

+

+
-x
-

+

+

Only verify that the DNSKEY RRset is signed with key-signing keys. Without this flag, it is assumed that the DNSKEY RRset will be signed by all active keys. When this flag is set, it will not be an error if the DNSKEY RRset is not signed by zone-signing keys. This corresponds to the -x option in dnssec-signzone. -

+

+
-z
-

+

Ignore the KSK flag on the keys when determining whether the zone if correctly signed. Without this flag it is assumed that there will be a non-revoked, self-signed @@ -121,7 +163,7 @@ that RRsets other than DNSKEY RRset will be signed with a different DNSKEY without the KSK flag set.

-

+

With this flag set, we only require that for each algorithm, there will be at least one non-revoked, self-signed DNSKEY, regardless of the KSK flag state, and that other RRsets @@ -130,21 +172,28 @@ for both purposes. This corresponds to the -z option in dnssec-signzone.

-
+
zonefile
-

+

+

The file containing the zone to be signed. -

+

+
-
-
+
+ +

SEE ALSO

-

- dnssec-signzone(8), + +

+ + dnssec-signzone(8) + , BIND 9 Administrator Reference Manual, RFC 4033.

-
+
+
@@ -165,6 +214,6 @@
-

BIND 9.17.0 (Development Release)

+

BIND 9.17.1 (Development Release)

diff --git a/doc/arm/man.dnstap-read.html b/doc/arm/man.dnstap-read.html index 36c7f26406..85d4996273 100644 --- a/doc/arm/man.dnstap-read.html +++ b/doc/arm/man.dnstap-read.html @@ -10,7 +10,7 @@ dnstap-read - + @@ -32,17 +32,37 @@
-
+ + + + + +

Name

-

dnstap-read — print dnstap data in human-readable form

-
-
-

Synopsis

-

dnstap-read [-m] [-p] [-x] [-y] {file}

-
-
-

DESCRIPTION

+ dnstap-read + — print dnstap data in human-readable form +

+
+ + + +
+

Synopsis

+

+ dnstap-read + [-m] + [-p] + [-x] + [-y] + {file} +

+
+ +
+

DESCRIPTION

+ +

dnstap-read reads dnstap data from a specified file and prints it in a human-readable format. By default, @@ -50,41 +70,59 @@ format, but if the -y option is specified, then a longer and more detailed YAML format is used instead.

-
-
+
+ +

OPTIONS

-
+ + +
-m
-

+

+

Trace memory allocations; used for debugging memory leaks. -

+

+
-p
-

+

+

After printing the dnstap data, print the text form of the DNS message that was encapsulated in the dnstap frame. -

+

+
-x
-

+

+

After printing the dnstap data, print a hex dump of the wire form of the DNS message that was encapsulated in the dnstap frame. -

+

+
-y
-

+

+

Print dnstap data in a detailed YAML format. -

+

+
-
-
+
+ +

SEE ALSO

-

- named(8), - rndc(8), + +

+ + named(8) + , + + rndc(8) + , BIND 9 Administrator Reference Manual.

-
+
+
@@ -105,6 +143,6 @@
-

BIND 9.17.0 (Development Release)

+

BIND 9.17.1 (Development Release)

diff --git a/doc/arm/man.filter-aaaa.html b/doc/arm/man.filter-aaaa.html index 2caf1081d7..0e91759c23 100644 --- a/doc/arm/man.filter-aaaa.html +++ b/doc/arm/man.filter-aaaa.html @@ -10,7 +10,7 @@ filter-aaaa.so - + @@ -32,23 +32,36 @@
-
+ + + + +

Name

-

filter-aaaa.so — filter AAAA in DNS responses when A is present

-
-
-

Synopsis

-

plugin query "filter-aaaa.so" [{ parameters }]; -

-
-
-

DESCRIPTION

+ filter-aaaa.so + — filter AAAA in DNS responses when A is present +

+
+ + + +
+

Synopsis

+

+ plugin query "filter-aaaa.so" + [{ parameters }]; +

+
+ +
+

DESCRIPTION

+

filter-aaaa.so is a query plugin module for named, enabling named to omit some IPv6 addresses when responding to clients.

-

+

Until BIND 9.12, this feature was implemented natively in named and enabled with the filter-aaaa ACL and the @@ -58,40 +71,43 @@ passed as parameters to the filter-aaaa.so plugin, for example:

-
+    
 plugin query "/usr/local/lib/filter-aaaa.so" {
         filter-aaaa-on-v4 yes;
         filter-aaaa-on-v6 yes;
         filter-aaaa { 192.0.2.1; 2001:db8:2::1; };
 };
 

-

+    

       This module is intended to aid transition from IPv4 to IPv6 by
       withholding IPv6 addresses from DNS clients which are not connected
       to the IPv6 Internet, when the name being looked up has an IPv4
       address available.  Use of this module is not recommended unless
       absolutely necessary.
     

-

+    

       Note: This mechanism can erroneously cause other servers not to
       give AAAA records to their clients.  If a recursing server with
       both IPv6 and IPv4 network connections queries an authoritative
       server using this mechanism via IPv4, it will be denied AAAA
       records even if its client is using IPv6.
     

-
-
+
+ +

OPTIONS

-
+
filter-aaaa
-

+

+

Specifies a list of client addresses for which AAAA filtering is to be applied. The default is any. -

+

+
filter-aaaa-on-v4
-

+

If set to yes, the DNS client is at an IPv4 address, in filter-aaaa, and if the response does not include DNSSEC signatures, @@ -99,36 +115,40 @@ plugin query "/usr/local/lib/filter-aaaa.so" { This filtering applies to all responses and not only authoritative responses.

-

+

If set to break-dnssec, then AAAA records are deleted even when DNSSEC is enabled. As suggested by the name, this causes the response to fail to verify, because the DNSSEC protocol is designed to detect deletions.

-

+

This mechanism can erroneously cause other servers not to give AAAA records to their clients. A recursing server with both IPv6 and IPv4 network connections that queries an authoritative server using this mechanism via IPv4 will be denied AAAA records even if its client is using IPv6.

-
+
filter-aaaa-on-v6
-

+

+

Identical to filter-aaaa-on-v4, except it filters AAAA responses to queries from IPv6 clients instead of IPv4 clients. To filter all responses, set both options to yes. -

+

+
-
-
+
+ +

SEE ALSO

-

+

BIND 9 Administrator Reference Manual.

-
+
+
@@ -148,6 +168,6 @@ plugin query "/usr/local/lib/filter-aaaa.so" {
-

BIND 9.17.0 (Development Release)

+

BIND 9.17.1 (Development Release)

diff --git a/doc/arm/man.host.html b/doc/arm/man.host.html index b32b021ecf..274a48a934 100644 --- a/doc/arm/man.host.html +++ b/doc/arm/man.host.html @@ -10,7 +10,7 @@ host - + @@ -32,24 +32,57 @@
-
+ + + + + +

Name

-

host — DNS lookup utility

+

+ host + — DNS lookup utility +

-
+ + + +

Synopsis

-

host [-aACdlnrsTUwv] [-c class] [-N ndots] [-R number] [-t type] [-W wait] [-m flag] [[-4] | [-6]] [-v] [-V] {name} [server]

-
-
+

+ host + [-aACdlnrsTUwv] + [-c class] + [-N ndots] + [-p port] + [-R number] + [-t type] + [-W wait] + [-m flag] + [ + [-4] + | [-6] + ] + [-v] + [-V] + {name} + [server] +

+
+ +

DESCRIPTION

-

host + + +

host is a simple utility for performing DNS lookups. It is normally used to convert names to IP addresses and vice versa. When no arguments or options are given, host prints a short summary of its command line arguments and options.

-

name is the domain name that is to be + +

name is the domain name that is to be looked up. It can also be a dotted-decimal IPv4 address or a colon-delimited IPv6 address, in which case host will by @@ -61,67 +94,85 @@ should query instead of the server or servers listed in /etc/resolv.conf.

-
-
+ +
+ +

OPTIONS

-
+ +
-4
-

+

+

Use IPv4 only for query transport. See also the -6 option. -

+

+
-6
-

+

+

Use IPv6 only for query transport. See also the -4 option. -

+

+
-a
-

+

+

"All". The -a option is normally equivalent to -v -t ANY. It also affects the behaviour of the -l list zone option. -

+

+
-A
-

+

+

"Almost all". The -A option is equivalent to -a except RRSIG, NSEC, and NSEC3 records are omitted from the output. -

+

+
-c class
-

+

+

Query class: This can be used to lookup HS (Hesiod) or CH (Chaosnet) class resource records. The default class is IN (Internet). -

+

+
-C
-

+

+

Check consistency: host will query the SOA records for zone name from all the listed authoritative name servers for that zone. The list of name servers is defined by the NS records that are found for the zone. -

+

+
-d
-

+

+

Print debugging traces. Equivalent to the -v verbose option. -

+

+
-l
-

+

List zone: The host command performs a zone transfer of zone name and prints out the NS, PTR and address records (A/AAAA).

-

+

Together, the -l -a options print all records in the zone.

-
+
-N ndots
-

+

+

The number of dots that have to be in name for it to be considered absolute. The default value is that defined using the @@ -131,9 +182,17 @@ searched for in the domains listed in the search or domain directive in /etc/resolv.conf. -

+

+ +
-p port
+
+

+ Specify the port on the server to query. The default is 53. +

+
-r
-

+

+

Non-recursive query: Setting this option clears the RD (recursion desired) bit in the query. This should mean that the name server @@ -144,30 +203,35 @@ name server by making non-recursive queries and expecting to receive answers to those queries that can be referrals to other name servers. -

+

+
-R number
-

+

+

Number of retries for UDP queries: If number is negative or zero, the number of retries will default to 1. The default value is 1, or the value of the attempts option in /etc/resolv.conf, if set. -

+

+
-s
-

+

+

Do not send the query to the next nameserver if any server responds with a SERVFAIL response, which is the reverse of normal stub resolver behavior. -

+

+
-t type
-

+

Query type: The type argument can be any recognized query type: CNAME, NS, SOA, TXT, DNSKEY, AXFR, etc.

-

+

When no query type is specified, host automatically selects an appropriate query type. By default, it looks for A, AAAA, and MX records. @@ -178,17 +242,18 @@ address, host will query for PTR records.

-

+

If a query type of IXFR is chosen the starting serial number can be specified by appending an equal followed by the starting serial number (like -t IXFR=12345678).

-
+
-T, -U
-

+

+

TCP/UDP: By default, host uses UDP when making queries. The -T option makes it use a TCP @@ -196,55 +261,67 @@ automatically selected for queries that require it, such as zone transfer (AXFR) requests. Type ANY queries default to TCP but can be forced to UDP initially using -U. -

+

+
-m flag
-

+

+

Memory usage debugging: the flag can be record, usage, or trace. You can specify the -m option more than once to set multiple flags. -

+

+
-v
-

+

+

Verbose output. Equivalent to the -d debug option. Verbose output can also be enabled by setting the debug option in /etc/resolv.conf. -

+

+
-V
-

+

+

Print the version number and exit. -

+

+
-w
-

+

+

Wait forever: The query timeout is set to the maximum possible. See also the -W option. -

+

+
-W wait
-

+

Timeout: Wait for up to wait seconds for a reply. If wait is less than one, the wait interval is set to one second.

-

+

By default, host will wait for 5 seconds for UDP responses and 10 seconds for TCP connections. These defaults can be overridden by the timeout option in /etc/resolv.conf.

-

+

See also the -w option.

-
+
-
-
+ +
+ +

IDN SUPPORT

-

+ +

If host has been built with IDN (internationalized domain name) support, it can accept and display non-ASCII domain names. host appropriately converts character encoding of @@ -255,18 +332,27 @@ The IDN support is disabled if the variable is set when host runs.

-
-
+
+ +

FILES

-

/etc/resolv.conf + +

/etc/resolv.conf

-
-
+
+ +

SEE ALSO

-

dig(1), - named(8). + +

+ dig(1) + , + + named(8) + .

-
+
+
@@ -287,6 +373,6 @@
-

BIND 9.17.0 (Development Release)

+

BIND 9.17.1 (Development Release)

diff --git a/doc/arm/man.mdig.html b/doc/arm/man.mdig.html index 44358caee6..d380317c36 100644 --- a/doc/arm/man.mdig.html +++ b/doc/arm/man.mdig.html @@ -10,7 +10,7 @@ mdig - + @@ -32,29 +32,69 @@
-
+ + + +

Name

-

mdig — DNS pipelined lookup utility

+

+ mdig + — DNS pipelined lookup utility +

-
+ + + +

Synopsis

-

mdig {@server} [-f filename] [-h] [-v] [[-4] | [-6]] [-m] [-b address] [-p port#] [-c class] [-t type] [-i] [-x addr] [plusopt...]

-

mdig {-h}

-

mdig [@server] {global-opt...} { +

+ mdig + {@server} + [-f filename] + [-h] + [-v] + [ + [-4] + | [-6] + ] + [-m] + [-b address] + [-p port#] + [-c class] + [-t type] + [-i] + [-x addr] + [plusopt...] +

+ +

+ mdig + {-h} +

+ +

+ mdig + [@server] + {global-opt...} + { {local-opt...} {query} - ...}

-
-
+ ...} +

+
+ +

DESCRIPTION

-

mdig + +

mdig is a multiple/pipelined query version of dig: instead of waiting for a response after sending each query, it begins by sending all queries. Responses are displayed in the order in which they are received, not in the order the corresponding queries were sent.

-

+ +

mdig options are a subset of the dig options, and are divided into "anywhere options" which can occur anywhere, "global options" which must @@ -62,7 +102,8 @@ and "local options" which apply to the next query on the command line.

-

+ +

The {@server} option is a mandatory global option. It is the name or IP address of the name server to query. (Unlike dig, this value is not retrieved from @@ -73,14 +114,16 @@ mdig resolves that name before querying the name server.

-

mdig + +

mdig provides a number of query options which affect the way in which lookups are made and the results displayed. Some of these set or reset flag bits in the query header, some determine which sections of the answer get printed, and others determine the timeout and retry strategies.

-

+ +

Each query option is identified by a keyword preceded by a plus sign (+). Some keywords set or reset an option. These may be preceded by the string no @@ -88,10 +131,13 @@ values to options like the timeout interval. They have the form +keyword=value.

-
-
+
+ +

ANYWHERE OPTIONS

-

+ + +

The -f option makes mdig operate in batch mode by reading a list of lookup requests to process from the file filename. The file @@ -99,36 +145,45 @@ file should be organized in the same way they would be presented as queries to mdig using the command-line interface.

-

+ +

The -h causes mdig to print the detailed help with the full list of options and exit.

-

+ +

The -v causes mdig to print the version number and exit.

-
-
+
+ +

GLOBAL OPTIONS

-

+ + +

The -4 option forces mdig to only use IPv4 query transport.

-

+ +

The -6 option forces mdig to only use IPv6 query transport.

-

+ +

The -b option sets the source IP address of the query to address. This must be a valid address on one of the host's network interfaces or "0.0.0.0" or "::". An optional port may be specified by appending "#<port>"

-

+ +

The -m option enables memory usage debugging.

-

+ +

The -p option is used when a non-standard port number is to be queried. port# is the port number @@ -137,51 +192,69 @@ test a name server that has been configured to listen for queries on a non-standard port number.

-

+ +

The global query options are:

+[no]additional
-

+

+

Display [do not display] the additional section of a reply. The default is to display it. -

+

+
+[no]all
-

+

+

Set or clear all display flags. -

+

+
+[no]answer
-

+

+

Display [do not display] the answer section of a reply. The default is to display it. -

+

+
+[no]authority
-

+

+

Display [do not display] the authority section of a reply. The default is to display it. -

+

+
+[no]besteffort
-

+

+

Attempt to display the contents of messages which are malformed. The default is to not display malformed answers. -

+

+
+[no]cl
-

+

+

Display [do not display] the CLASS when printing the record. -

+

+
+[no]comments
-

+

+

Toggle the display of comment lines in the output. The default is to print comments. -

+

+
+[no]continue
-

+

+

Continue on errors (e.g. timeouts). -

+

+
+[no]crypto
-

+

+

Toggle the display of cryptographic fields in DNSSEC records. The contents of these field are unnecessary to debug most DNSSEC validation failures and removing @@ -190,41 +263,53 @@ are replaced by the string "[omitted]" or in the DNSKEY case the key id is displayed as the replacement, e.g. "[ key id = value ]". -

+

+
+dscp[=value]
-

+

+

Set the DSCP code point to be used when sending the query. Valid DSCP code points are in the range [0..63]. By default no code point is explicitly set. -

+

+
+[no]multiline
-

+

+

Print records like the SOA records in a verbose multi-line format with human-readable comments. The default is to print each record on a single line, to facilitate machine parsing of the mdig output. -

+

+
+[no]question
-

+

+

Print [do not print] the question section of a query when an answer is returned. The default is to print the question section as a comment. -

+

+
+[no]rrcomments
-

+

+

Toggle the display of per-record comments in the output (for example, human-readable key information about DNSKEY records). The default is not to print record comments unless multiline mode is active. -

+

+
+[no]short
-

+

+

Provide a terse answer. The default is to print the answer in a verbose form. -

+

+
+split=W
-

+

+

Split long hex- or base64-formatted fields in resource records into chunks of W characters (where W is rounded @@ -233,54 +318,70 @@ +split=0 causes fields not to be split at all. The default is 56 characters, or 44 characters when multiline mode is active. -

+

+
+[no]tcp
-

+

+

Use [do not use] TCP when querying name servers. The default behavior is to use UDP. -

+

+
+[no]ttlid
-

+

+

Display [do not display] the TTL when printing the record. -

+

+
+[no]ttlunits
-

+

+

Display [do not display] the TTL in friendly human-readable time units of "s", "m", "h", "d", and "w", representing seconds, minutes, hours, days and weeks. Implies +ttlid. -

+

+
+[no]vc
-

+

+

Use [do not use] TCP when querying name servers. This alternate syntax to +[no]tcp is provided for backwards compatibility. The "vc" stands for "virtual circuit". -

+

+
+[no]yaml
-

+

+

Print the responses in a detailed YAML format. -

+

+

-
-
+
+ +

LOCAL OPTIONS

-

+ + +

The -c option sets the query class to class. It can be any valid query class which is supported in BIND 9. The default query class is "IN".

-

+ +

The -t option sets the query type to type. It can be any valid query type which is supported in BIND 9. The default query type is "A", unless the -x option is supplied to indicate a reverse lookup with the "PTR" query type.

-

+ +

Reverse lookups — mapping addresses to names — are simplified by the -x option. addr is an IPv4 @@ -291,20 +392,26 @@ By default, IPv6 addresses are looked up using nibble format under the IP6.ARPA domain.

-

+ +

The local query options are:

+[no]aaflag
-

+

+

A synonym for +[no]aaonly. -

+

+
+[no]aaonly
-

+

+

Sets the "aa" flag in the query. -

+

+
+[no]adflag
-

+

+

Set [do not set] the AD (authentic data) bit in the query. This requests the server to return whether all of the answer and authority sections have all @@ -314,87 +421,110 @@ from a OPT-OUT range. AD=0 indicate that some part of the answer was insecure or not validated. This bit is set by default. -

+

+
+bufsize=B
-

+

+

Set the UDP message buffer size advertised using EDNS0 to B bytes. The maximum and minimum sizes of this buffer are 65535 and 0 respectively. Values outside this range are rounded up or down appropriately. Values other than zero will cause a EDNS query to be sent. -

+

+
+[no]cdflag
-

+

+

Set [do not set] the CD (checking disabled) bit in the query. This requests the server to not perform DNSSEC validation of responses. -

+

+
+[no]cookie[=####]
-

+

+

Send a COOKIE EDNS option, with optional value. Replaying a COOKIE from a previous response will allow the server to identify a previous client. The default is +nocookie. -

+

+
+[no]dnssec
-

+

+

Requests DNSSEC records be sent by setting the DNSSEC OK bit (DO) in the OPT record in the additional section of the query. -

+

+
+[no]edns[=#]
-

+

+

Specify the EDNS version to query with. Valid values are 0 to 255. Setting the EDNS version will cause a EDNS query to be sent. +noedns clears the remembered EDNS version. EDNS is set to 0 by default. -

+

+
+[no]ednsflags[=#]
-

+

+

Set the must-be-zero EDNS flags bits (Z bits) to the specified value. Decimal, hex and octal encodings are accepted. Setting a named flag (e.g. DO) will silently be ignored. By default, no Z bits are set. -

+

+
+[no]ednsopt[=code[:value]]
-

+

+

Specify EDNS option with code point code and optionally payload of value as a hexadecimal string. +noednsopt clears the EDNS options to be sent. -

+

+
+[no]expire
-

+

+

Send an EDNS Expire option. -

+

+
+[no]nsid
-

+

+

Include an EDNS name server ID request when sending a query. -

+

+
+[no]recurse
-

+

+

Toggle the setting of the RD (recursion desired) bit in the query. This bit is set by default, which means mdig normally sends recursive queries. -

+

+
+retry=T
-

+

+

Sets the number of times to retry UDP queries to server to T instead of the default, 2. Unlike +tries, this does not include the initial query. -

+

+
+[no]subnet=addr[/prefix-length]
-

+

Send (don't send) an EDNS Client Subnet option with the specified IP address or network prefix.

-

+

mdig +subnet=0.0.0.0/0, or simply mdig +subnet=0 for short, sends an EDNS client-subnet option with an empty address and a source @@ -403,50 +533,64 @@ not be used when resolving this query.

-
+
+timeout=T
-

+

+

Sets the timeout for a query to T seconds. The default timeout is 5 seconds for UDP transport and 10 for TCP. An attempt to set T to less than 1 will result in a query timeout of 1 second being applied. -

+

+
+tries=T
-

+

+

Sets the number of times to try UDP queries to server to T instead of the default, 3. If T is less than or equal to zero, the number of tries is silently rounded up to 1. -

+

+
+udptimeout=T
-

+

+

Sets the timeout between UDP query retries. -

+

+
+[no]unknownformat
-

+

+

Print all RDATA in unknown RR type presentation format (RFC 3597). The default is to print RDATA for known types in the type's presentation format. -

+

+
+[no]zflag
-

+

+

Set [do not set] the last unassigned DNS header flag in a DNS query. This flag is off by default. -

+

+

-
-
+
+ +

SEE ALSO

-

dig(1), + +

+ dig(1) + , RFC1035.

-
+
@@ -466,6 +610,6 @@
-

BIND 9.17.0 (Development Release)

+

BIND 9.17.1 (Development Release)

diff --git a/doc/arm/man.named-checkconf.html b/doc/arm/man.named-checkconf.html index 7bf7ec35dc..33bb5738ab 100644 --- a/doc/arm/man.named-checkconf.html +++ b/doc/arm/man.named-checkconf.html @@ -10,7 +10,7 @@ named-checkconf - + @@ -32,26 +32,45 @@
-
+ + + + + + + +

Name

-

named-checkconf — named configuration file syntax checking tool

+

+ named-checkconf + — named configuration file syntax checking tool +

-
+ +

Synopsis

-

named-checkconf [-chjlvz] [-p +

+ named-checkconf + [-chjlvz] + [-p [-x - ]] [-t directory] {filename}

-
-
+ ]] + [-t directory] + {filename} +

+
+ +

DESCRIPTION

-

named-checkconf + +

named-checkconf checks the syntax, but not the semantics, of a named configuration file. The file is parsed and checked for syntax errors, along with all files included by it. If no file is specified, /etc/named.conf is read by default.

-

+

Note: files that named reads in separate parser contexts, such as rndc.key and bind.keys, are not automatically read @@ -61,53 +80,72 @@ successful. named-checkconf can be run on these files explicitly, however.

-
-
+
+ +

OPTIONS

-
+ +
-h
-

+

+

Print the usage summary and exit. -

+

+
-j
-

+

+

When loading a zonefile read the journal if it exists. -

+

+
-l
-

+

+

List all the configured zones. Each line of output contains the zone name, class (e.g. IN), view, and type (e.g. master or slave). -

+

+
-c
-

+

+

Check "core" configuration only. This suppresses the loading of plugin modules, and causes all parameters to plugin statements to be ignored. -

+

+
-i
-

+

+

Ignore warnings on deprecated options. -

+

+
-p
-

+

+

Print out the named.conf and included files in canonical form if no errors were detected. See also the -x option. -

+

+
-t directory
-

+

+

Chroot to directory so that include directives in the configuration file are processed as if run by a similarly chrooted named. -

+

+
-v
-

+

+

Print the version of the named-checkconf program and exit. -

+

+
-x
-

+

+

When printing the configuration files in canonical form, obscure shared secrets by replacing them with strings of question marks ('?'). This allows the @@ -115,33 +153,47 @@ files to be shared — for example, when submitting bug reports — without compromising private data. This option cannot be used without -p. -

+

+
-z
-

+

+

Perform a test load of all master zones found in named.conf. -

+

+
filename
-

+

+

The name of the configuration file to be checked. If not specified, it defaults to /etc/named.conf. -

+

+
-
-
+ +
+ +

RETURN VALUES

-

named-checkconf + +

named-checkconf returns an exit status of 1 if errors were detected and 0 otherwise.

-
-
+
+ +

SEE ALSO

-

named(8), - named-checkzone(8), + +

+ named(8) + , + + named-checkzone(8) + , BIND 9 Administrator Reference Manual.

-
+
@@ -162,6 +214,6 @@
-

BIND 9.17.0 (Development Release)

+

BIND 9.17.1 (Development Release)

diff --git a/doc/arm/man.named-checkzone.html b/doc/arm/man.named-checkzone.html index 6af75d2ae2..ec4bbc0358 100644 --- a/doc/arm/man.named-checkzone.html +++ b/doc/arm/man.named-checkzone.html @@ -10,7 +10,7 @@ named-checkzone - + @@ -32,24 +32,94 @@
-
+ + + + + + + +

Name

-

named-checkzone, named-compilezone — zone file validity checking or converting tool

+

+ named-checkzone, + named-compilezone + — zone file validity checking or converting tool +

-
+ +

Synopsis

-

named-checkzone [-d] [-h] [-j] [-q] [-v] [-c class] [-f format] [-F format] [-J filename] [-i mode] [-k mode] [-m mode] [-M mode] [-n mode] [-l ttl] [-L serial] [-o filename] [-r mode] [-s style] [-S mode] [-t directory] [-T mode] [-w directory] [-D] [-W mode] {zonename} {filename}

-

named-compilezone [-d] [-j] [-q] [-v] [-c class] [-C mode] [-f format] [-F format] [-J filename] [-i mode] [-k mode] [-m mode] [-n mode] [-l ttl] [-L serial] [-r mode] [-s style] [-t directory] [-T mode] [-w directory] [-D] [-W mode] {-o filename} {zonename} {filename}

-
-
+

+ named-checkzone + [-d] + [-h] + [-j] + [-q] + [-v] + [-c class] + [-f format] + [-F format] + [-J filename] + [-i mode] + [-k mode] + [-m mode] + [-M mode] + [-n mode] + [-l ttl] + [-L serial] + [-o filename] + [-r mode] + [-s style] + [-S mode] + [-t directory] + [-T mode] + [-w directory] + [-D] + [-W mode] + {zonename} + {filename} +

+

+ named-compilezone + [-d] + [-j] + [-q] + [-v] + [-c class] + [-C mode] + [-f format] + [-F format] + [-J filename] + [-i mode] + [-k mode] + [-m mode] + [-n mode] + [-l ttl] + [-L serial] + [-r mode] + [-s style] + [-t directory] + [-T mode] + [-w directory] + [-D] + [-W mode] + {-o filename} + {zonename} + {filename} +

+
+ +

DESCRIPTION

-

named-checkzone + +

named-checkzone checks the syntax and integrity of a zone file. It performs the same checks as named does when loading a zone. This makes named-checkzone useful for checking zone files before configuring them into a name server.

-

+

named-compilezone is similar to named-checkzone, but it always dumps the zone contents to a specified file in a specified format. @@ -60,45 +130,62 @@ least be as strict as those specified in the named configuration file.

-
-
+
+ +

OPTIONS

-
+ + +
-d
-

+

+

Enable debugging. -

+

+
-h
-

+

+

Print the usage summary and exit. -

+

+
-q
-

+

+

Quiet mode - exit code only. -

+

+
-v
-

+

+

Print the version of the named-checkzone program and exit. -

+

+
-j
-

+

+

When loading a zone file, read the journal if it exists. The journal file name is assumed to be the zone file name appended with the string .jnl. -

+

+
-J filename
-

+

+

When loading the zone file read the journal from the given file, if it exists. (Implies -j.) -

+

+
-c class
-

+

+

Specify the class of the zone. If not specified, "IN" is assumed. -

+

+
-i mode
-

+

Perform post-load zone integrity checks. Possible modes are "full" (default), "full-sibling", @@ -106,19 +193,19 @@ "local-sibling" and "none".

-

+

Mode "full" checks that MX records refer to A or AAAA record (both in-zone and out-of-zone hostnames). Mode "local" only checks MX records which refer to in-zone hostnames.

-

+

Mode "full" checks that SRV records refer to A or AAAA record (both in-zone and out-of-zone hostnames). Mode "local" only checks SRV records which refer to in-zone hostnames.

-

+

Mode "full" checks that delegation NS records refer to A or AAAA record (both in-zone and out-of-zone hostnames). It also checks that glue address records @@ -127,31 +214,33 @@ refer to in-zone hostnames or that some required glue exists, that is when the nameserver is in a child zone.

-

+

Mode "full-sibling" and "local-sibling" disable sibling glue checks but are otherwise the same as "full" and "local" respectively.

-

+

Mode "none" disables the checks.

-
+
-f format
-

+

+

Specify the format of the zone file. Possible formats are "text" (default), "raw", and "map". -

+

+
-F format
-

+

Specify the format of the output file specified. For named-checkzone, this does not cause any effects unless it dumps the zone contents.

-

+

Possible formats are "text" (default), which is the standard textual representation of the zone, and "map", "raw", @@ -162,9 +251,10 @@ any version of named; if N is 1, the file can be read by release 9.9.0 or higher; the default is 1.

-
+
-k mode
-

+

+

Perform "check-names" checks with the specified failure mode. Possible modes are "fail" @@ -172,38 +262,48 @@ "warn" (default for named-checkzone) and "ignore". -

+

+
-l ttl
-

+

+

Sets a maximum permissible TTL for the input file. Any record with a TTL higher than this value will cause the zone to be rejected. This is similar to using the max-zone-ttl option in named.conf. -

+

+
-L serial
-

+

+

When compiling a zone to "raw" or "map" format, set the "source serial" value in the header to the specified serial number. (This is expected to be used primarily for testing purposes.) -

+

+
-m mode
-

+

+

Specify whether MX records should be checked to see if they are addresses. Possible modes are "fail", "warn" (default) and "ignore". -

+

+
-M mode
-

+

+

Check if a MX record refers to a CNAME. Possible modes are "fail", "warn" (default) and "ignore". -

+

+
-n mode
-

+

+

Specify whether NS records should be checked to see if they are addresses. Possible modes are "fail" @@ -211,24 +311,30 @@ "warn" (default for named-checkzone) and "ignore". -

+

+
-o filename
-

+

+

Write zone output to filename. If filename is - then write to standard out. This is mandatory for named-compilezone. -

+

+
-r mode
-

+

+

Check for records that are treated as different by DNSSEC but are semantically equal in plain DNS. Possible modes are "fail", "warn" (default) and "ignore". -

+

+
-s style
-

+

+

Specify the style of the dumped zone file. Possible styles are "full" (default) and "relative". @@ -241,75 +347,102 @@ contents. It also does not have any meaning if the output format is not text. -

+

+
-S mode
-

+

+

Check if a SRV record refers to a CNAME. Possible modes are "fail", "warn" (default) and "ignore". -

+

+
-t directory
-

+

+

Chroot to directory so that include directives in the configuration file are processed as if run by a similarly chrooted named. -

+

+
-T mode
-

+

+

Check if Sender Policy Framework (SPF) records exist and issues a warning if an SPF-formatted TXT record is not also present. Possible modes are "warn" (default), "ignore". -

+

+
-w directory
-

+

+

chdir to directory so that relative filenames in master file $INCLUDE directives work. This is similar to the directory clause in named.conf. -

+

+
-D
-

+

+

Dump zone file in canonical format. This is always enabled for named-compilezone. -

+

+
-W mode
-

+

+

Specify whether to check for non-terminal wildcards. Non-terminal wildcards are almost always the result of a failure to understand the wildcard matching algorithm (RFC 1034). Possible modes are "warn" (default) and "ignore". -

+

+
zonename
-

+

+

The domain name of the zone being checked. -

+

+
filename
-

+

+

The name of the zone file. -

+

+
-
-
+ +
+ +

RETURN VALUES

-

named-checkzone + +

named-checkzone returns an exit status of 1 if errors were detected and 0 otherwise.

-
-
+
+ +

SEE ALSO

-

named(8), - named-checkconf(8), + +

+ named(8) + , + + named-checkconf(8) + , RFC 1035, BIND 9 Administrator Reference Manual.

-
+
+
@@ -330,6 +463,6 @@
-

BIND 9.17.0 (Development Release)

+

BIND 9.17.1 (Development Release)

diff --git a/doc/arm/man.named-journalprint.html b/doc/arm/man.named-journalprint.html index 9e2ee57070..9949d8b142 100644 --- a/doc/arm/man.named-journalprint.html +++ b/doc/arm/man.named-journalprint.html @@ -10,7 +10,7 @@ named-journalprint - + @@ -32,22 +32,38 @@
-
+ + + + + +

Name

-

named-journalprint — print zone journal in human-readable form

-
-
-

Synopsis

-

named-journalprint {journal}

-
-
-

DESCRIPTION

+ named-journalprint + — print zone journal in human-readable form +

+
+ + + +
+

Synopsis

+

+ named-journalprint + {journal} +

+
+ +
+

DESCRIPTION

+ +

named-journalprint prints the contents of a zone journal file in a human-readable form.

-

+

Journal files are automatically created by named when changes are made to dynamic zones (e.g., by nsupdate). They record each addition @@ -58,22 +74,29 @@ .jnl to the name of the corresponding zone file.

-

+

named-journalprint converts the contents of a given journal file into a human-readable text format. Each line begins with "add" or "del", to indicate whether the record was added or deleted, and continues with the resource record in master-file format.

-
-
+
+ +

SEE ALSO

-

- named(8), - nsupdate(1), + +

+ + named(8) + , + + nsupdate(1) + , BIND 9 Administrator Reference Manual.

-
+
+
@@ -94,6 +117,6 @@
-

BIND 9.17.0 (Development Release)

+

BIND 9.17.1 (Development Release)

diff --git a/doc/arm/man.named-nzd2nzf.html b/doc/arm/man.named-nzd2nzf.html index 3c2413e741..7a99f28e0c 100644 --- a/doc/arm/man.named-nzd2nzf.html +++ b/doc/arm/man.named-nzd2nzf.html @@ -10,7 +10,7 @@ named-nzd2nzf - + @@ -32,19 +32,34 @@
-
+ + + + +

Name

-

named-nzd2nzf — - Convert an NZD database to NZF text format -

-
-
-

Synopsis

-

named-nzd2nzf {filename}

-
-
-

DESCRIPTION

+ named-nzd2nzf + — + Convert an NZD database to NZF text format + +

+
+ + + +
+

Synopsis

+

+ named-nzd2nzf + {filename} +

+
+ +
+

DESCRIPTION

+ +

named-nzd2nzf converts an NZD database to NZF format and prints it to standard output. This can be used to review the configuration of zones that were added to @@ -53,28 +68,37 @@ when rolling back from a newer version of BIND to an older version.

-
-
+
+ +

ARGUMENTS

-
+ +
filename
-

+

+

The name of the .nzd file whose contents should be printed. -

+

+
-
-
+
+ +

SEE ALSO

-

+ +

BIND 9 Administrator Reference Manual

-
-
+
+ +

AUTHOR

-

Internet Systems Consortium + +

Internet Systems Consortium

-
+
+
@@ -95,6 +119,6 @@
-

BIND 9.17.0 (Development Release)

+

BIND 9.17.1 (Development Release)

diff --git a/doc/arm/man.named-rrchecker.html b/doc/arm/man.named-rrchecker.html index 70c449cd0d..b32ceb779c 100644 --- a/doc/arm/man.named-rrchecker.html +++ b/doc/arm/man.named-rrchecker.html @@ -10,7 +10,7 @@ named-rrchecker - + @@ -32,50 +32,75 @@
-
+ + + +

Name

-

named-rrchecker — syntax checker for individual DNS resource records

+

+ named-rrchecker + — syntax checker for individual DNS resource records +

-
+ + + +

Synopsis

-

named-rrchecker [-h] [-o origin] [-p] [-u] [-C] [-T] [-P]

-
-
+

+ named-rrchecker + [-h] + [-o origin] + [-p] + [-u] + [-C] + [-T] + [-P] +

+
+ +

DESCRIPTION

-

named-rrchecker + +

named-rrchecker read a individual DNS resource record from standard input and checks if it is syntactically correct.

-

+

The -h prints out the help menu.

-

+

The -o origin option specifies a origin to be used when interpreting the record.

-

+

The -p prints out the resulting record in canonical form. If there is no canonical form defined then the record will be printed in unknown record format.

-

+

The -u prints out the resulting record in unknown record form.

-

+

The -C, -T and -P print out the known class, standard type and private type mnemonics respectively.

-
-
+
+ +

SEE ALSO

-

+ +

RFC 1034, RFC 1035, - named(8) + + named(8) +

-
+
+
@@ -96,6 +121,6 @@
-

BIND 9.17.0 (Development Release)

+

BIND 9.17.1 (Development Release)

diff --git a/doc/arm/man.named.conf.html b/doc/arm/man.named.conf.html index 47306badf2..addde781bf 100644 --- a/doc/arm/man.named.conf.html +++ b/doc/arm/man.named.conf.html @@ -10,7 +10,7 @@ named.conf - + @@ -32,42 +32,59 @@
-
+ + + + + +

Name

-

named.conf — configuration file for named

+

+ named.conf + — configuration file for named +

-
+ + + +

Synopsis

-

named.conf

-
-
+

+ named.conf +

+
+ +

DESCRIPTION

-

named.conf is the configuration file + +

named.conf is the configuration file for named. Statements are enclosed in braces and terminated with a semi-colon. Clauses in the statements are also semi-colon terminated. The usual comment styles are supported:

-

+

C style: /* */

-

+

C++ style: // to end of line

-

+

Unix style: # to end of line

-
-
+
+ +

ACL

-


+


acl string { address_match_element; ... };

-
-
+
+ +

CONTROLS

-


+


controls {
inet ( ipv4_address | ipv6_address |
    * ) [ port ( integer | * ) ] allow
@@ -80,19 +97,21 @@ controls     boolean ];
};

-
-
+
+ +

DLZ

-


+


dlz string {
database string;
search boolean;
};

-
-
+
+ +

DNSSEC-POLICY

-


+


dnssec-policy string {
dnskey-ttl duration;
keys { ( csk | ksk | zsk ) ( key-directory ) lifetime ( duration | unlimited )
@@ -109,26 +128,29 @@ dnssec-policy zone-propagation-delay duration;
};

-
-
+
+ +

DYNDB

-


+


dyndb string quoted_string {
    unspecified-text };

-
-
+
+ +

KEY

-


+


key string {
algorithm string;
secret string;
};

-
-
+
+ +

LOGGING

-


+


logging {
category string { string; ... };
channel string {
@@ -145,29 +167,32 @@ logging };
};

-
-
+
+ +

MANAGED-KEYS

-

Deprecated - see DNSSEC-KEYS.

-


+

Deprecated - see DNSSEC-KEYS.

+


managed-keys { string ( static-key
    | initial-key | static-ds |
    initial-ds ) integer integer
    integer quoted_string; ... }; deprecated

-
-
+
+ +

MASTERS

-


+


masters string [ port integer ] [ dscp
    integer ] { ( masters | ipv4_address [
    port integer ] | ipv6_address [ port
    integer ] ) [ key string ]; ... };

-
-
+
+ +

OPTIONS

-


+


options {
allow-new-zones boolean;
allow-notify { address_match_element; ... };
@@ -463,17 +488,19 @@ options zone-statistics ( full | terse | none | boolean );
};

-
-
+
+ +

PLUGIN

-


+


plugin ( query ) string [ { unspecified-text
    } ];

-
-
+
+ +

SERVER

-


+


server netprefix {
bogus boolean;
edns boolean;
@@ -507,10 +534,11 @@ server transfers integer;
};

-
-
+
+ +

STATISTICS-CHANNELS

-


+


statistics-channels {
inet ( ipv4_address | ipv6_address |
    * ) [ port ( integer | * ) ] [
@@ -518,28 +546,31 @@ statistics-channels     } ];
};

-
-
+
+ +

TRUST-ANCHORS

-


+


trust-anchors { string ( static-key |
    initial-key | static-ds | initial-ds )
    integer integer integer
    quoted_string; ... };

-
-
+
+ +

TRUSTED-KEYS

-

Deprecated - see DNSSEC-KEYS.

-


+

Deprecated - see DNSSEC-KEYS.

+


trusted-keys { string integer
    integer integer
    quoted_string; ... }; deprecated

-
-
+
+ +

VIEW

-


+


view string [ class ] {
allow-new-zones boolean;
allow-notify { address_match_element; ... };
@@ -915,10 +946,11 @@ view zone-statistics ( full | terse | none | boolean );
};

-
-
+
+ +

ZONE

-


+


zone string [ class ] {
allow-notify { address_match_element; ... };
allow-query { address_match_element; ... };
@@ -1014,22 +1046,37 @@ zone zone-statistics ( full | terse | none | boolean );
};

-
-
+
+ +

FILES

-

/etc/named.conf + +

/etc/named.conf

-
-
+
+ +

SEE ALSO

-

ddns-confgen(8), - named(8), - named-checkconf(8), - rndc(8), - rndc-confgen(8), + +

+ ddns-confgen(8) + , + + named(8) + , + + named-checkconf(8) + , + + rndc(8) + , + + rndc-confgen(8) + , BIND 9 Administrator Reference Manual.

-
+
+
@@ -1050,6 +1097,6 @@ zone
-

BIND 9.17.0 (Development Release)

+

BIND 9.17.1 (Development Release)

diff --git a/doc/arm/man.named.html b/doc/arm/man.named.html index 738f24ade8..2519ff73e3 100644 --- a/doc/arm/man.named.html +++ b/doc/arm/man.named.html @@ -10,7 +10,7 @@ named - + @@ -32,46 +32,93 @@
-
+ + + + + +

Name

-

named — Internet domain name server

+

+ named + — Internet domain name server +

-
+ + + +

Synopsis

-

named [[-4] | [-6]] [-c config-file] [-d debug-level] [-D string] [-E engine-name] [-f] [-g] [-L logfile] [-M option] [-m flag] [-n #cpus] [-p port] [-s] [-S #max-socks] [-t directory] [-U #listeners] [-u user] [-v] [-V] [-X lock-file] [-x cache-file]

-
-
+

+ named + [ + [-4] + | [-6] + ] + [-c config-file] + [-d debug-level] + [-D string] + [-E engine-name] + [-f] + [-g] + [-L logfile] + [-M option] + [-m flag] + [-n #cpus] + [-p port] + [-s] + [-S #max-socks] + [-t directory] + [-U #listeners] + [-u user] + [-v] + [-V] + [-X lock-file] + [-x cache-file] +

+
+ +

DESCRIPTION

-

named + +

named is a Domain Name System (DNS) server, part of the BIND 9 distribution from ISC. For more information on the DNS, see RFCs 1033, 1034, and 1035.

-

+

When invoked without arguments, named will read the default configuration file /etc/named.conf, read any initial data, and listen for queries.

-
-
+
+ +

OPTIONS

-
+ + +
-4
-

+

+

Use IPv4 only even if the host machine is capable of IPv6. -4 and -6 are mutually exclusive. -

+

+
-6
-

+

+

Use IPv6 only even if the host machine is capable of IPv4. -4 and -6 are mutually exclusive. -

+

+
-c config-file
-

+

+

Use config-file as the configuration file instead of the default, /etc/named.conf. To @@ -81,28 +128,33 @@ directory option in the configuration file, config-file should be an absolute pathname. -

+

+
-d debug-level
-

+

+

Set the daemon's debug level to debug-level. Debugging traces from named become more verbose as the debug level increases. -

+

+
-D string
-

+

+

Specifies a string that is used to identify a instance of named in a process listing. The contents of string are not examined. -

+

+
-E engine-name
-

+

When applicable, specifies the hardware to use for cryptographic operations, such as a secure key store used for signing.

-

+

When BIND is built with OpenSSL PKCS#11 support, this defaults to the string "pkcs11", which identifies an OpenSSL engine that can drive a cryptographic accelerator or hardware service @@ -110,23 +162,30 @@ (--enable-native-pkcs11), it defaults to the path of the PKCS#11 provider library specified via "--with-pkcs11".

-
+
-f
-

+

+

Run the server in the foreground (i.e. do not daemonize). -

+

+
-g
-

+

+

Run the server in the foreground and force all logging to stderr. -

+

+
-L logfile
-

+

+

Log to the file logfile by default instead of the system log. -

+

+
-M option
-

+

+

Sets the default memory context options. If set to external, this causes the internal memory manager to be bypassed @@ -138,9 +197,11 @@ disables this behavior, and is the default unless named has been compiled with developer options.) -

+

+
-m flag
-

+

+

Turn on memory usage debugging flags. Possible flags are usage, trace, @@ -149,46 +210,51 @@ mctx. These correspond to the ISC_MEM_DEBUGXXXX flags described in <isc/mem.h>. -

+

+
-n #cpus
-

+

+

Create #cpus worker threads to take advantage of multiple CPUs. If not specified, named will try to determine the number of CPUs present and create one thread per CPU. If it is unable to determine the number of CPUs, a single worker thread will be created. -

+

+
-p port
-

+

+

Listen for queries on port port. If not specified, the default is port 53. -

+

+
-s
-

+

Write memory usage statistics to stdout on exit.

-
+

Note

-

+

This option is mainly of interest to BIND 9 developers and may be removed or changed in a future release.

-
-
+
+
-S #max-socks
-

+

Allow named to use up to #max-socks sockets. The default value is 21000 on systems built with default configuration options, and 4096 on systems built with "configure --with-tuning=small".

-
+

Warning

-

+

This option should be unnecessary for the vast majority of users. The use of this option could even be harmful because the @@ -203,18 +269,18 @@ named reserves some file descriptors for its internal use.

-
-
+
+
-t directory
-

Chroot +

Chroot to directory after processing the command line arguments, but before reading the configuration file.

-
+

Warning

-

+

This option should be used in conjunction with the -u option, as chrooting a process running as root doesn't enhance security on most @@ -222,10 +288,11 @@ defined allows a process with root privileges to escape a chroot jail.

-
-
+
+
-U #listeners
-

+

+

Use #listeners worker threads to listen for incoming UDP packets on each address. If not specified, named will @@ -238,17 +305,18 @@ be increased as high as that value, but no higher. On Windows, the number of UDP listeners is hardwired to 1 and this option has no effect. -

+

+
-u user
-

Setuid +

Setuid to user after completing privileged operations, such as creating sockets that listen on privileged ports.

-
+

Note

-

+

On Linux, named uses the kernel's capability mechanism to drop all root privileges except the ability to bind(2) to @@ -261,18 +329,23 @@ later, since previous kernels did not allow privileges to be retained after setuid(2).

-
-
+
+
-v
-

+

+

Report the version number and exit. -

+

+
-V
-

+

+

Report the version number and build options, and exit. -

+

+
-X lock-file
-

+

+

Acquire a lock on the specified file at runtime; this helps to prevent duplicate named instances from running simultaneously. @@ -280,54 +353,68 @@ option in named.conf. If set to none, the lock file check is disabled. -

+

+
-x cache-file
-

+

Load data from cache-file into the cache of the default view.

-
+

Warning

-

+

This option must not be used. It is only of interest to BIND 9 developers and may be removed or changed in a future release.

-
-
+
+
-
-
+ +
+ +

SIGNALS

-

+ +

In routine operation, signals should not be used to control the nameserver; rndc should be used instead.

-
+ +
SIGHUP
-

+

+

Force a reload of the server. -

+

+
SIGINT, SIGTERM
-

+

+

Shut down the server. -

+

+
-

+ +

The result of sending any other signals to the server is undefined.

-
-
+ +
+ +

CONFIGURATION

-

+ +

The named configuration file is too complex to describe in detail here. A complete description is provided in the BIND 9 Administrator Reference Manual.

-

+ +

named inherits the umask (file creation mode mask) from the parent process. If files created by named, such as journal files, @@ -335,32 +422,56 @@ should be set explicitly in the script used to start the named process.

-
-
+ +
+ +

FILES

-
+ + +
/etc/named.conf
-

+

+

The default configuration file. -

+

+
/var/run/named/named.pid
-

+

+

The default process-id file. -

+

+
-
-
+ +
+ +

SEE ALSO

-

RFC 1033, + +

RFC 1033, RFC 1034, RFC 1035, - named-checkconf(8), - named-checkzone(8), - rndc(8), - named.conf(5), + + named-checkconf + (8) + , + + named-checkzone + (8) + , + + rndc + (8) + , + + named.conf + (5) + , BIND 9 Administrator Reference Manual.

-
+
+
@@ -381,6 +492,6 @@
-

BIND 9.17.0 (Development Release)

+

BIND 9.17.1 (Development Release)

diff --git a/doc/arm/man.nsec3hash.html b/doc/arm/man.nsec3hash.html index 5df96cf402..98c514fa15 100644 --- a/doc/arm/man.nsec3hash.html +++ b/doc/arm/man.nsec3hash.html @@ -10,7 +10,7 @@ nsec3hash - + @@ -32,23 +32,50 @@
-
+ + + + + +

Name

-

nsec3hash — generate NSEC3 hash

-
-
-

Synopsis

-

nsec3hash {salt} {algorithm} {iterations} {domain}

-

nsec3hash -r {algorithm} {flags} {iterations} {salt} {domain}

-
-
-

DESCRIPTION

+ nsec3hash + — generate NSEC3 hash +

+
+ + + +
+

Synopsis

+

+ nsec3hash + {salt} + {algorithm} + {iterations} + {domain} +

+

+ nsec3hash -r + {algorithm} + {flags} + {iterations} + {salt} + {domain} +

+
+ +
+

DESCRIPTION

+ +

nsec3hash generates an NSEC3 hash based on a set of NSEC3 parameters. This can be used to check the validity of NSEC3 records in a signed zone.

-

+ +

If this command is invoked as nsec3hash -r, it takes arguments in an order matching the first four fields of an NSEC3 record, followed by the domain name: algorithm, flags, @@ -56,43 +83,59 @@ paste a portion of an NSEC3 or NSEC3PARAM record into a command line to confirm the correctness of an NSEC3 hash.

-
-
+ +
+ +

ARGUMENTS

-
+ +
salt
-

+

+

The salt provided to the hash algorithm. -

+

+
algorithm
-

+

+

A number indicating the hash algorithm. Currently the only supported hash algorithm for NSEC3 is SHA-1, which is indicated by the number 1; consequently "1" is the only useful value for this argument. -

+

+
flags
-

+

+

Provided for compatibility with NSEC3 record presentation format, but ignored since the flags do not affect the hash. -

+

+
iterations
-

+

+

The number of additional times the hash should be performed. -

+

+
domain
-

+

+

The domain name to be hashed. -

+

+
-
-
+
+ +

SEE ALSO

-

+ +

BIND 9 Administrator Reference Manual, RFC 5155.

-
+
+
@@ -112,6 +155,6 @@
-

BIND 9.17.0 (Development Release)

+

BIND 9.17.1 (Development Release)

diff --git a/doc/arm/man.nslookup.html b/doc/arm/man.nslookup.html index 79448be831..55ed84d0aa 100644 --- a/doc/arm/man.nslookup.html +++ b/doc/arm/man.nslookup.html @@ -10,7 +10,7 @@ nslookup - + @@ -32,17 +32,35 @@
-
+ + + + + +

Name

-

nslookup — query Internet name servers interactively

+

+ nslookup + — query Internet name servers interactively +

-
+ + + +

Synopsis

-

nslookup [-option] [name | -] [server]

-
-
+

+ nslookup + [-option] + [name | -] + [server] +

+
+ +

DESCRIPTION

-

Nslookup + +

Nslookup is a program to query Internet domain name servers. Nslookup has two modes: interactive and non-interactive. Interactive mode allows the user to query name servers for information about various hosts and @@ -51,29 +69,37 @@ used to print just the name and requested information for a host or domain.

-
-
+
+ +

ARGUMENTS

-

+ +

Interactive mode is entered in the following cases:

    -

  1. +

  2. +

    when no arguments are given (the default name server will be used) -

    3. -

  3. +

    +
    4. +
  4. +

    when the first argument is a hyphen (-) and the second argument is the host name or Internet address of a name server. -

    5. +

    +

-

+ +

Non-interactive mode is used when the name or Internet address of the host to be looked up is given as the first argument. The optional second argument specifies the host name or address of a name server.

-

+ +

Options can also be specified on the command line if they precede the arguments and are prefixed with a hyphen. For example, to change the default query type to host information, and the initial @@ -86,238 +112,283 @@ nslookup -query=hinfo -timeout=10

-

+

The -version option causes nslookup to print the version number and immediately exits.

-
-
+ +
+ +

INTERACTIVE COMMANDS

-
+ +
host [server]
-

+

Look up information for host using the current default server or using server, if specified. If host is an Internet address and the query type is A or PTR, the name of the host is returned. If host is a name and does not have a trailing period, the search list is used to qualify the name.

-

+ +

To look up a host not in the current domain, append a period to the name.

-
+
server domain
-

+
+

+
lserver domain
-

+

+

Change the default server to domain; lserver uses the initial server to look up information about domain, while server uses the current default server. If an authoritative answer can't be found, the names of servers that might have the answer are returned. -

+

+
root
-

+

+

not implemented -

+

+
finger
-

+

+

not implemented -

+

+
ls
-

+

+

not implemented -

+

+
view
-

+

+

not implemented -

+

+
help
-

+

+

not implemented -

+

+
?
-

+

+

not implemented -

+

+
exit
-

+

+

Exits the program. -

+

+
set keyword[=value]
-

+

This command is used to change state information that affects the lookups. Valid keywords are:

all
-

+

+

Prints the current values of the frequently used options to set. Information about the current default server and host is also printed. -

+

+
class=value
-

+

Change the query class to one of:

IN
-

+

+

the Internet class -

+

+
CH
-

+

+

the Chaos class -

+

+
HS
-

+

+

the Hesiod class -

+

+
ANY
-

+

+

wildcard -

+

+

The class specifies the protocol group of the information.

-

+

(Default = IN; abbreviation = cl)

- +
[no]debug
-

+

Turn on or off the display of the full response packet and any intermediate response packets when searching.

-

+

(Default = nodebug; abbreviation = [no]deb)

-
+
[no]d2
-

+

Turn debugging mode on or off. This displays more about what nslookup is doing.

-

+

(Default = nod2)

-
+
domain=name
-

+

+

Sets the search list to name. -

+

+
[no]search
-

+

If the lookup request contains at least one period but doesn't end with a trailing period, append the domain names in the domain search list to the request until an answer is received.

-

+

(Default = search)

-
+
port=value
-

+

Change the default TCP/UDP name server port to value.

-

+

(Default = 53; abbreviation = po)

-
+
querytype=value
-

+
+

+
type=value
-

+

Change the type of the information query.

-

+

(Default = A and then AAAA; abbreviations = q, ty)

-

+

Note: It is only possible to specify one query type, only the default behavior looks up both when an alternative is not specified.

-
+
[no]recurse
-

+

Tell the name server to query other servers if it does not have the information.

-

+

(Default = recurse; abbreviation = [no]rec)

-
+
ndots=number
-

+

+

Set the number of dots (label separators) in a domain that will disable searching. Absolute names always stop searching. -

+

+
retry=number
-

+

+

Set the number of retries to number. -

+

+
timeout=number
-

+

+

Change the initial timeout interval for waiting for a reply to number seconds. -

+

+
[no]vc
-

+

Always use a virtual circuit when sending requests to the server.

-

+

(Default = novc)

-
+
[no]fail
-

+

Try the next nameserver if a nameserver responds with SERVFAIL or a referral (nofail) or terminate query (fail) on such a response.

-

+

(Default = nofail)

-
+

- +
-
-
+
+ +

RETURN VALUES

-

+

nslookup returns with an exit status of 1 if any query failed, and 0 otherwise.

-
-
+
+ +

IDN SUPPORT

-

+ +

If nslookup has been built with IDN (internationalized domain name) support, it can accept and display non-ASCII domain names. nslookup appropriately converts character encoding of @@ -329,19 +400,29 @@ nslookup -query=hinfo -timeout=10 nslookup runs or when the standard output is not a tty.

-
-
+
+ +

FILES

-

/etc/resolv.conf + +

/etc/resolv.conf

-
-
+
+ +

SEE ALSO

-

dig(1), - host(1), - named(8). + +

+ dig(1) + , + + host(1) + , + + named(8) + .

-
+
@@ -362,6 +443,6 @@ nslookup -query=hinfo -timeout=10
-

BIND 9.17.0 (Development Release)

+

BIND 9.17.1 (Development Release)

diff --git a/doc/arm/man.nsupdate.html b/doc/arm/man.nsupdate.html index daeabce4fc..37cb94d42f 100644 --- a/doc/arm/man.nsupdate.html +++ b/doc/arm/man.nsupdate.html @@ -10,7 +10,7 @@ nsupdate - + @@ -32,17 +32,54 @@
-
+ + + + +

Name

-

nsupdate — Dynamic DNS update utility

+

+ nsupdate + — Dynamic DNS update utility +

-
+ + + +

Synopsis

-

nsupdate [-d] [-D] [-i] [-L level] [[-g] | [-o] | [-l] | [-y [hmac:]keyname:secret] | [-k keyfile]] [-t timeout] [-u udptimeout] [-r udpretries] [-v] [-T] [-P] [-V] [[-4] | [-6]] [filename]

-
-
+

+ nsupdate + [-d] + [-D] + [-i] + [-L level] + [ + [-g] + | [-o] + | [-l] + | [-y [hmac:]keyname:secret] + | [-k keyfile] + ] + [-t timeout] + [-u udptimeout] + [-r udpretries] + [-v] + [-T] + [-P] + [-V] + [ + [-4] + | [-6] + ] + [filename] +

+
+ +

DESCRIPTION

-

nsupdate + +

nsupdate is used to submit Dynamic DNS Update requests as defined in RFC 2136 to a name server. This allows resource records to be added or removed from a zone @@ -51,27 +88,27 @@ one resource record.

-

+

Zones that are under dynamic control via nsupdate or a DHCP server should not be edited by hand. Manual edits could conflict with dynamic updates and cause data to be lost.

-

+

The resource records that are dynamically added or removed with nsupdate have to be in the same zone. Requests are sent to the zone's master server. This is identified by the MNAME field of the zone's SOA record.

-

+

Transaction signatures can be used to authenticate the Dynamic DNS updates. These use the TSIG resource record type described in RFC 2845 or the SIG(0) record described in RFC 2535 and RFC 2931 or GSS-TSIG as described in RFC 3645.

-

+

TSIG relies on a shared secret that should only be known to nsupdate and the name server. @@ -86,45 +123,59 @@ uses the -y or -k options to provide the TSIG shared secret. These options are mutually exclusive.

-

+

SIG(0) uses public key cryptography. To use a SIG(0) key, the public key must be stored in a KEY record in a zone served by the name server.

-

+

GSS-TSIG uses Kerberos credentials. Standard GSS-TSIG mode is switched on with the -g flag. A non-standards-compliant variant of GSS-TSIG used by Windows 2000 can be switched on with the -o flag.

-
-
+
+ +

OPTIONS

-
+ + +
-4
-

+

+

Use IPv4 only. -

+

+
-6
-

+

+

Use IPv6 only. -

+

+
-d
-

+

+

Debug mode. This provides tracing information about the update requests that are made and the replies received from the name server. -

+

+
-D
-

+

+

Extra debug mode. -

+

+
-i
-

+

+

Force interactive mode, even when standard input is not a terminal. -

+

+
-k keyfile
-

+

+

The file containing the TSIG authentication key. Keyfiles may be in two formats: a single file containing a named.conf-format key @@ -136,9 +187,11 @@ The -k may also be used to specify a SIG(0) key used to authenticate Dynamic DNS update requests. In this case, the key specified is not an HMAC-MD5 key. -

+

+
-l
-

+

+

Local-host only mode. This sets the server address to localhost (disabling the server so that the server address cannot be overridden). Connections to the local server will @@ -147,72 +200,89 @@ local master zone has set update-policy to local. The location of this key file can be overridden with the -k option. -

+

+
-L level
-

+

+

Set the logging debug level. If zero, logging is disabled. -

+

+
-p port
-

+

+

Set the port to use for connections to a name server. The default is 53. -

+

+
-P
-

+

+

Print the list of private BIND-specific resource record types whose format is understood by nsupdate. See also the -T option. -

+

+
-r udpretries
-

+

+

The number of UDP retries. The default is 3. If zero, only one update request will be made. -

+

+
-t timeout
-

+

+

The maximum time an update request can take before it is aborted. The default is 300 seconds. Zero can be used to disable the timeout. -

+

+
-T
-

+

Print the list of IANA standard resource record types whose format is understood by nsupdate. nsupdate will exit after the lists are printed. The -T option can be combined with the -P option.

-

+

Other types can be entered using "TYPEXXXXX" where "XXXXX" is the decimal value of the type with no leading zeros. The rdata, if present, will be parsed using the UNKNOWN rdata format, (<backslash> <hash> <space> <length> <space> <hexstring>).

-
+
-u udptimeout
-

+

+

The UDP retry interval. The default is 3 seconds. If zero, the interval will be computed from the timeout interval and number of UDP retries. -

+

+
-v
-

+

+

Use TCP even for small update requests. By default, nsupdate uses UDP to send update requests to the name server unless they are too large to fit in a UDP request in which case TCP will be used. TCP may be preferable when a batch of update requests is made. -

+

+
-V
-

+

+

Print the version number and exit. -

+

+
-y [hmac:]keyname:secret
-

+

Literal TSIG authentication key. keyname is the name of the key, and secret is the base64 encoded shared secret. @@ -224,19 +294,23 @@ is not specified, the default is hmac-md5 or if MD5 was disabled hmac-sha256.

-

+

NOTE: Use of the -y option is discouraged because the shared secret is supplied as a command line argument in clear text. This may be visible in the output from - ps(1) + + ps(1) + or in a history file maintained by the user's shell.

-
+
-
-
+
+ +

INPUT FORMAT

-

nsupdate + +

nsupdate reads input from filename or standard input. @@ -250,7 +324,7 @@ Updates will be rejected if the tests for the prerequisite conditions fail.

-

+

Every update request consists of zero or more prerequisites and zero or more updates. This allows a suitably authenticated update request to proceed if some @@ -260,7 +334,7 @@ accumulated commands to be sent as one Dynamic DNS update request to the name server.

-

+

The command formats and their meaning are as follows:

@@ -269,7 +343,8 @@ {servername} [port] -

+

+

Sends all dynamic update requests to the name server servername. When no server statement is provided, @@ -285,13 +360,15 @@ If no port number is specified, the default DNS port number of 53 is used. -

+

+
local {address} [port]
-

+

+

Sends all dynamic update requests using the local address. @@ -303,12 +380,14 @@ can additionally be used to make requests come from a specific port. If no port number is specified, the system will assign one. -

+

+
zone {zonename}
-

+

+

Specifies that all updates are to be made to the zone zonename. If no @@ -317,32 +396,38 @@ nsupdate will attempt determine the correct zone to update based on the rest of the input. -

+

+
class {classname}
-

+

+

Specify the default class. If no class is specified, the default class is IN. -

+

+
ttl {seconds}
-

+

+

Specify the default time to live for records to be added. The value none will clear the default ttl. -

+

+
key [hmac:] {keyname} {secret}
-

+

+

Specifies that all updates are to be TSIG-signed using the keyname secret pair. If hmac is specified, then it sets the @@ -351,66 +436,80 @@ hmac-sha256. The key command overrides any key specified on the command line via -y or -k. -

+

+
gsstsig
-

+

+

Use GSS-TSIG to sign the updated. This is equivalent to specifying -g on the command line. -

+

+
oldgsstsig
-

+

+

Use the Windows 2000 version of GSS-TSIG to sign the updated. This is equivalent to specifying -o on the command line. -

+

+
realm {[realm_name]}
-

+

+

When using GSS-TSIG use realm_name rather than the default realm in krb5.conf. If no realm is specified the saved realm is cleared. -

+

+
check-names {[yes_or_no]}
-

+

+

Turn on or off check-names processing on records to be added. Check-names has no effect on prerequisites or records to be deleted. By default check-names processing is on. If check-names processing fails the record will not be added to the UPDATE message. -

+

+
[prereq] nxdomain {domain-name}
-

+

+

Requires that no resource record of any type exists with name domain-name. -

+

+
[prereq] yxdomain {domain-name}
-

+

+

Requires that domain-name exists (has as at least one resource record, of any type). -

+

+
[prereq] nxrrset {domain-name} [class] {type}
-

+

+

Requires that no resource record exists of the specified type, class @@ -419,14 +518,16 @@ If class is omitted, IN (internet) is assumed. -

+

+
[prereq] yxrrset {domain-name} [class] {type}
-

+

+

This requires that a resource record of the specified type, class @@ -436,7 +537,8 @@ If class is omitted, IN (internet) is assumed. -

+

+
[prereq] yxrrset {domain-name} @@ -444,7 +546,8 @@ {type} {data...}
-

+

+

The data from each set of prerequisites of this form @@ -465,7 +568,8 @@ are written in the standard text representation of the resource record's RDATA. -

+

+
[update] del[ete] {domain-name} @@ -473,7 +577,8 @@ [class] [type [data...]]
-

+

+

Deletes any resource records named domain-name. If @@ -486,7 +591,8 @@ is not supplied. The ttl is ignored, and is only allowed for compatibility. -

+

+
[update] add {domain-name} @@ -495,62 +601,80 @@ {type} {data...}
-

+

+

Adds a new resource record with the specified ttl, class and data. -

+

+
show
-

+

+

Displays the current message, containing all of the prerequisites and updates specified since the last send. -

+

+
send
-

+

+

Sends the current message. This is equivalent to entering a blank line. -

+

+
answer
-

+

+

Displays the answer. -

+

+
debug
-

+

+

Turn on debugging. -

+

+
version
-

+

+

Print version number. -

+

+
help
-

+

+

Print a list of commands. -

+

+

-

+ +

Lines beginning with a semicolon are comments and are ignored.

-
-
+ +
+ +

EXAMPLES

-

+ +

The examples below show how nsupdate could be used to insert and delete resource records from the @@ -571,7 +695,7 @@

-

+

Any A records for oldhost.example.com are deleted. @@ -588,7 +712,7 @@

-

+

The prerequisite condition gets the name server to check that there are no resource records of any type for nickname.example.com. @@ -601,33 +725,50 @@ (The rule has been updated for DNSSEC in RFC 2535 to allow CNAMEs to have RRSIG, DNSKEY and NSEC records.)

-
-
+
+ +

FILES

-
+ + +
/etc/resolv.conf
-

+

+

used to identify default name server -

+

+
/var/run/named/session.key
-

+

+

sets the default TSIG key for use in local-only mode -

+

+
K{name}.+157.+{random}.key
-

+

+

base-64 encoding of HMAC-MD5 key created by - dnssec-keygen(8). -

+ + dnssec-keygen(8) + . +

+
K{name}.+157.+{random}.private
-

+

+

base-64 encoding of HMAC-MD5 key created by - dnssec-keygen(8). -

+ + dnssec-keygen(8) + . +

+
-
-
+
+ +

SEE ALSO

-

+ +

RFC 2136, RFC 3007, RFC 2104, @@ -635,20 +776,29 @@ RFC 1034, RFC 2535, RFC 2931, - named(8), - ddns-confgen(8), - dnssec-keygen(8). + + named(8) + , + + ddns-confgen(8) + , + + dnssec-keygen(8) + .

-
-
+
+ +

BUGS

-

+ +

The TSIG key is redundantly stored in two separate files. This is a consequence of nsupdate using the DST library for its cryptographic operations, and may change in future releases.

-
+
+
@@ -668,6 +818,6 @@
-

BIND 9.17.0 (Development Release)

+

BIND 9.17.1 (Development Release)

diff --git a/doc/arm/man.pkcs11-destroy.html b/doc/arm/man.pkcs11-destroy.html index 3829cc3167..b2cd17ea5e 100644 --- a/doc/arm/man.pkcs11-destroy.html +++ b/doc/arm/man.pkcs11-destroy.html @@ -10,7 +10,7 @@ pkcs11-destroy - + @@ -32,70 +32,116 @@
-
+ + + + + +

Name

-

pkcs11-destroy — destroy PKCS#11 objects

-
-
-

Synopsis

-

pkcs11-destroy [-m module] [-s slot] { -i ID | -l label } [-p PIN] [-w seconds]

-
-
-

DESCRIPTION

+ pkcs11-destroy + — destroy PKCS#11 objects +

+
+ + + +
+

Synopsis

+

+ pkcs11-destroy + [-m module] + [-s slot] + { + -i ID + | -l label + } + [-p PIN] + [-w seconds] +

+
+ +
+

DESCRIPTION

+ +

pkcs11-destroy destroys keys stored in a PKCS#11 device, identified by their ID or label.

-

+

Matching keys are displayed before being destroyed. By default, there is a five second delay to allow the user to interrupt the process before the destruction takes place.

-
-
+
+ +

ARGUMENTS

-
+ +
-m module
-

+

+

Specify the PKCS#11 provider module. This must be the full path to a shared library object implementing the PKCS#11 API for the device. -

+

+
-s slot
-

+

+

Open the session with the given PKCS#11 slot. The default is slot 0. -

+

+
-i ID
-

+

+

Destroy keys with the given object ID. -

+

+
-l label
-

+

+

Destroy keys with the given label. -

+

+
-p PIN
-

+

+

Specify the PIN for the device. If no PIN is provided on the command line, pkcs11-destroy will prompt for it. -

+

+
-w seconds
-

+

+

Specify how long to pause before carrying out key destruction. The default is five seconds. If set to 0, destruction will be immediate. -

+

+
-
-
+
+ +

SEE ALSO

-

- pkcs11-keygen(8), - pkcs11-list(8), - pkcs11-tokens(8) + +

+ + pkcs11-keygen(8) + , + + pkcs11-list(8) + , + + pkcs11-tokens(8) +

-
+
+
@@ -116,6 +162,6 @@
-

BIND 9.17.0 (Development Release)

+

BIND 9.17.1 (Development Release)

diff --git a/doc/arm/man.pkcs11-keygen.html b/doc/arm/man.pkcs11-keygen.html index 6e62341e4f..46e0539413 100644 --- a/doc/arm/man.pkcs11-keygen.html +++ b/doc/arm/man.pkcs11-keygen.html @@ -10,7 +10,7 @@ pkcs11-keygen - + @@ -32,95 +32,154 @@
-
+ + + + + +

Name

-

pkcs11-keygen — generate keys on a PKCS#11 device

-
-
-

Synopsis

-

pkcs11-keygen {-a algorithm} [-b keysize] [-e] [-i id] [-m module] [-P] [-p PIN] [-q] [-S] [-s slot] {label}

-
-
-

DESCRIPTION

+ pkcs11-keygen + — generate keys on a PKCS#11 device +

+
+ + + +
+

Synopsis

+

+ pkcs11-keygen + {-a algorithm} + [-b keysize] + [-e] + [-i id] + [-m module] + [-P] + [-p PIN] + [-q] + [-S] + [-s slot] + {label} +

+
+ +
+

DESCRIPTION

+ +

pkcs11-keygen causes a PKCS#11 device to generate a new key pair with the given label (which must be unique) and with keysize bits of prime.

-
-
+
+ +

ARGUMENTS

-
+ +
-a algorithm
-

+

+

Specify the key algorithm class: Supported classes are RSA, DSA, DH, ECC and ECX. In addition to these strings, the algorithm can be specified as a DNSSEC signing algorithm that will be used with this key; for example, NSEC3RSASHA1 maps to RSA, ECDSAP256SHA256 maps to ECC, and ED25519 to ECX. The default class is "RSA". -

+

+
-b keysize
-

+

+

Create the key pair with keysize bits of prime. For ECC keys, the only valid values are 256 and 384, and the default is 256. For ECX kyes, the only valid values are 256 and 456, and the default is 256. -

+

+
-e
-

+

+

For RSA keys only, use a large exponent. -

+

+
-i id
-

+

+

Create key objects with id. The id is either an unsigned short 2 byte or an unsigned long 4 byte number. -

+

+
-m module
-

+

+

Specify the PKCS#11 provider module. This must be the full path to a shared library object implementing the PKCS#11 API for the device. -

+

+
-P
-

+

+

Set the new private key to be non-sensitive and extractable. The allows the private key data to be read from the PKCS#11 device. The default is for private keys to be sensitive and non-extractable. -

+

+
-p PIN
-

+

+

Specify the PIN for the device. If no PIN is provided on the command line, pkcs11-keygen will prompt for it. -

+

+
-q
-

+

+

Quiet mode: suppress unnecessary output. -

+

+
-S
-

+

+

For Diffie-Hellman (DH) keys only, use a special prime of 768, 1024 or 1536 bit size and base (aka generator) 2. If not specified, bit size will default to 1024. -

+

+
-s slot
-

+

+

Open the session with the given PKCS#11 slot. The default is slot 0. -

+

+
-
-
+
+ +

SEE ALSO

-

- pkcs11-destroy(8), - pkcs11-list(8), - pkcs11-tokens(8), - dnssec-keyfromlabel(8) + +

+ + pkcs11-destroy(8) + , + + pkcs11-list(8) + , + + pkcs11-tokens(8) + , + + dnssec-keyfromlabel(8) +

-
+
+
@@ -141,6 +200,6 @@
-

BIND 9.17.0 (Development Release)

+

BIND 9.17.1 (Development Release)

diff --git a/doc/arm/man.pkcs11-list.html b/doc/arm/man.pkcs11-list.html index b2be2b605d..70193a1337 100644 --- a/doc/arm/man.pkcs11-list.html +++ b/doc/arm/man.pkcs11-list.html @@ -10,7 +10,7 @@ pkcs11-list - + @@ -32,17 +32,38 @@
-
+ + + + + +

Name

-

pkcs11-list — list PKCS#11 objects

-
-
-

Synopsis

-

pkcs11-list [-P] [-m module] [-s slot] [-i ID] [-l label] [-p PIN]

-
-
-

DESCRIPTION

+ pkcs11-list + — list PKCS#11 objects +

+
+ + + +
+

Synopsis

+

+ pkcs11-list + [-P] + [-m module] + [-s slot] + [-i ID] + [-l label] + [-p PIN] +

+
+ +
+

DESCRIPTION

+ +

pkcs11-list lists the PKCS#11 objects with ID or label or by default all objects. @@ -51,49 +72,72 @@ attribute is also displayed, as either true, false, or never.

-
-
+
+ +

ARGUMENTS

-
+ +
-P
-

+

+

List only the public objects. (Note that on some PKCS#11 devices, all objects are private.) -

+

+
-m module
-

+

+

Specify the PKCS#11 provider module. This must be the full path to a shared library object implementing the PKCS#11 API for the device. -

+

+
-s slot
-

+

+

Open the session with the given PKCS#11 slot. The default is slot 0. -

+

+
-i ID
-

+

+

List only key objects with the given object ID. -

+

+
-l label
-

+

+

List only key objects with the given label. -

+

+
-p PIN
-

+

+

Specify the PIN for the device. If no PIN is provided on the command line, pkcs11-list will prompt for it. -

+

+
-
-
+
+ +

SEE ALSO

-

- pkcs11-destroy(8), - pkcs11-keygen(8), - pkcs11-tokens(8) + +

+ + pkcs11-destroy(8) + , + + pkcs11-keygen(8) + , + + pkcs11-tokens(8) +

-
+
+
@@ -114,6 +158,6 @@
-

BIND 9.17.0 (Development Release)

+

BIND 9.17.1 (Development Release)

diff --git a/doc/arm/man.pkcs11-tokens.html b/doc/arm/man.pkcs11-tokens.html index ba3dd0d387..60d0ac6003 100644 --- a/doc/arm/man.pkcs11-tokens.html +++ b/doc/arm/man.pkcs11-tokens.html @@ -10,7 +10,7 @@ pkcs11-tokens - + @@ -32,45 +32,77 @@
-
+ + + + + +

Name

-

pkcs11-tokens — list PKCS#11 available tokens

-
-
-

Synopsis

-

pkcs11-tokens [-m module] [-v]

-
-
-

DESCRIPTION

+ pkcs11-tokens + — list PKCS#11 available tokens +

+
+ + + +
+

Synopsis

+

+ pkcs11-tokens + [-m module] + [-v] +

+
+ +
+

DESCRIPTION

+ +

pkcs11-tokens lists the PKCS#11 available tokens with defaults from the slot/token scan performed at application initialization.

-
-
+
+ +

ARGUMENTS

-
+ +
-m module
-

+

+

Specify the PKCS#11 provider module. This must be the full path to a shared library object implementing the PKCS#11 API for the device. -

+

+
-v
-

+

+

Make the PKCS#11 libisc initialization verbose. -

+

+
-
-
+
+ +

SEE ALSO

-

- pkcs11-destroy(8), - pkcs11-keygen(8), - pkcs11-list(8) + +

+ + pkcs11-destroy(8) + , + + pkcs11-keygen(8) + , + + pkcs11-list(8) +

-
+
+
@@ -91,6 +123,6 @@
-

BIND 9.17.0 (Development Release)

+

BIND 9.17.1 (Development Release)

diff --git a/doc/arm/man.rndc-confgen.html b/doc/arm/man.rndc-confgen.html index c30107f79f..c11d2dce0f 100644 --- a/doc/arm/man.rndc-confgen.html +++ b/doc/arm/man.rndc-confgen.html @@ -10,7 +10,7 @@ rndc-confgen - + @@ -32,17 +32,42 @@
-
+ + + + + +

Name

-

rndc-confgen — rndc key generation tool

+

+ rndc-confgen + — rndc key generation tool +

-
+ + + +

Synopsis

-

rndc-confgen [-a] [-A algorithm] [-b keysize] [-c keyfile] [-h] [-k keyname] [-p port] [-s address] [-t chrootdir] [-u user]

-
-
+

+ rndc-confgen + [-a] + [-A algorithm] + [-b keysize] + [-c keyfile] + [-h] + [-k keyname] + [-p port] + [-s address] + [-t chrootdir] + [-u user] +

+
+ +

DESCRIPTION

-

rndc-confgen + +

rndc-confgen generates configuration files for rndc. It can be used as a convenient alternative to writing the @@ -55,13 +80,17 @@ avoid the need for a rndc.conf file and a controls statement altogether.

-
-
+ +
+ +

OPTIONS

-
+ + +
-a
-

+

Do automatic rndc configuration. This creates a file rndc.key in /etc (or whatever @@ -76,7 +105,7 @@ named on the local host with no further configuration.

-

+

Running rndc-confgen -a allows BIND 9 and rndc to be used as drop-in @@ -84,7 +113,7 @@ with no changes to the existing BIND 8 named.conf file.

-

+

If a more elaborate configuration than that generated by rndc-confgen -a is required, for example if rndc is to be used remotely, @@ -95,58 +124,75 @@ named.conf as directed.

-
+
-A algorithm
-

+

+

Specifies the algorithm to use for the TSIG key. Available choices are: hmac-md5, hmac-sha1, hmac-sha224, hmac-sha256, hmac-sha384 and hmac-sha512. The default is hmac-sha256. -

+

+
-b keysize
-

+

+

Specifies the size of the authentication key in bits. Must be between 1 and 512 bits; the default is the hash size. -

+

+
-c keyfile
-

+

+

Used with the -a option to specify an alternate location for rndc.key. -

+

+
-h
-

+

+

Prints a short summary of the options and arguments to rndc-confgen. -

+

+
-k keyname
-

+

+

Specifies the key name of the rndc authentication key. This must be a valid domain name. The default is rndc-key. -

+

+
-p port
-

+

+

Specifies the command channel port where named listens for connections from rndc. The default is 953. -

+

+
-s address
-

+

+

Specifies the IP address where named listens for command channel connections from rndc. The default is the loopback address 127.0.0.1. -

+

+
-t chrootdir
-

+

+

Used with the -a option to specify a directory where named will run chrooted. An additional copy of the rndc.key will be written relative to this directory so that it will be found by the chrooted named. -

+

+
-u user
-

+

+

Used with the -a option to set the owner of the rndc.key file generated. @@ -154,34 +200,46 @@ -t is also specified only the file in the chroot area has its owner changed. -

+

+
-
-
+
+ +

EXAMPLES

-

+ +

To allow rndc to be used with no manual configuration, run

-

rndc-confgen -a +

rndc-confgen -a

-

+

To print a sample rndc.conf file and corresponding controls and key statements to be manually inserted into named.conf, run

-

rndc-confgen +

rndc-confgen

-
-
+
+ +

SEE ALSO

-

rndc(8), - rndc.conf(5), - named(8), + +

+ rndc(8) + , + + rndc.conf(5) + , + + named(8) + , BIND 9 Administrator Reference Manual.

-
+
+
@@ -202,6 +260,6 @@
-

BIND 9.17.0 (Development Release)

+

BIND 9.17.1 (Development Release)

diff --git a/doc/arm/man.rndc.conf.html b/doc/arm/man.rndc.conf.html index 89fe14a687..c663b8b93b 100644 --- a/doc/arm/man.rndc.conf.html +++ b/doc/arm/man.rndc.conf.html @@ -10,7 +10,7 @@ rndc.conf - + @@ -32,17 +32,32 @@
-
+ + + + + +

Name

-

rndc.conf — rndc configuration file

+

+ rndc.conf + — rndc configuration file +

-
+ + + +

Synopsis

-

rndc.conf

-
-
+

+ rndc.conf +

+
+ +

DESCRIPTION

-

rndc.conf is the configuration file + +

rndc.conf is the configuration file for rndc, the BIND 9 name server control utility. This file has a similar structure and syntax to named.conf. Statements are enclosed @@ -50,21 +65,21 @@ the statements are also semi-colon terminated. The usual comment styles are supported:

-

+

C style: /* */

-

+

C++ style: // to end of line

-

+

Unix style: # to end of line

-

rndc.conf is much simpler than +

rndc.conf is much simpler than named.conf. The file uses three statements: an options statement, a server statement and a key statement.

-

+

The options statement contains five clauses. The default-server clause is followed by the name or address of a name server. This host will be used when @@ -87,7 +102,7 @@ can be used to set the IPv4 and IPv6 source addresses respectively.

-

+

After the server keyword, the server statement includes a string which is the hostname or address for a name server. The statement has three possible clauses: @@ -101,7 +116,7 @@ of supplied then these will be used to specify the IPv4 and IPv6 source addresses respectively.

-

+

The key statement begins with an identifying string, the name of the key. The statement has two clauses. algorithm identifies the authentication algorithm @@ -112,7 +127,7 @@ the base-64 encoding of the algorithm's authentication key. The base-64 string is enclosed in double quotes.

-

+

There are two common ways to generate the base-64 string for the secret. The BIND 9 program rndc-confgen can @@ -125,10 +140,13 @@ ship with BIND 9 but is available on many systems. See the EXAMPLE section for sample command lines for each.

-
-
+
+ +

EXAMPLE

-
+
+
+    
       options {
         default-server  localhost;
         default-key     samplekey;
@@ -136,14 +154,14 @@
 

 

     

-
+    
       server localhost {
         key             samplekey;
       };
 

 

     

-
+    
       server testserver {
         key		testkey;
         addresses	{ localhost port 5353; };
@@ -151,7 +169,7 @@
 

 

     

-
+    
       key samplekey {
         algorithm       hmac-sha256;
         secret          "6FMfj43Osz4lyb24OIe2iGEz9lf1llJO+lz";
@@ -159,7 +177,7 @@
 

 

     

-
+    
       key testkey {
         algorithm	hmac-sha256;
         secret		"R3HI8P6BKw9ZwXwN3VZKuQ==";
@@ -167,7 +185,8 @@
     

 

     

-

+
+    

       In the above example, rndc will by
       default use
       the server at localhost (127.0.0.1) and the key called samplekey.
@@ -177,16 +196,16 @@
       uses the HMAC-SHA256 algorithm and its secret clause contains the
       base-64 encoding of the HMAC-SHA256 secret enclosed in double quotes.
     

-

+    

       If rndc -s testserver is used then rndc will
       connect to server on localhost port 5353 using the key testkey.
     

-

+    

       To generate a random secret with rndc-confgen:
     

-
rndc-confgen
+    
rndc-confgen
     

-

+    

       A complete rndc.conf file, including
       the
       randomly generated key, will be written to the standard
@@ -194,30 +213,41 @@
       controls statements for
       named.conf are also printed.
     

-

+    

       To generate a base-64 secret with mmencode:
     

-
echo "known plaintext for a secret" | mmencode
+    
echo "known plaintext for a secret" | mmencode
     

-
-
+
+ +

NAME SERVER CONFIGURATION

-

+ +

The name server must be configured to accept rndc connections and to recognize the key specified in the rndc.conf file, using the controls statement in named.conf. See the sections on the controls statement in the BIND 9 Administrator Reference Manual for details.

-
-
+
+ +

SEE ALSO

-

rndc(8), - rndc-confgen(8), - mmencode(1), + +

+ rndc(8) + , + + rndc-confgen(8) + , + + mmencode(1) + , BIND 9 Administrator Reference Manual.

-
+
+
@@ -238,6 +268,6 @@
-

BIND 9.17.0 (Development Release)

+

BIND 9.17.1 (Development Release)

diff --git a/doc/arm/man.rndc.html b/doc/arm/man.rndc.html index 9c580e5d64..eb342989f5 100644 --- a/doc/arm/man.rndc.html +++ b/doc/arm/man.rndc.html @@ -10,7 +10,7 @@ rndc - + @@ -30,17 +30,46 @@
-
+ + + + + +

Name

-

rndc — name server control utility

+

+ rndc + — name server control utility +

-
+ + + +

Synopsis

-

rndc [-b source-address] [-c config-file] [-k key-file] [-s server] [-p port] [-q] [-r] [-V] [-y key_id] [[-4] | [-6]] {command}

-
-
+

+ rndc + [-b source-address] + [-c config-file] + [-k key-file] + [-s server] + [-p port] + [-q] + [-r] + [-V] + [-y key_id] + [ + [-4] + | [-6] + ] + {command} +

+
+ +

DESCRIPTION

-

rndc + +

rndc controls the operation of a name server. It supersedes the ndc utility that was provided in old BIND releases. If @@ -49,7 +78,7 @@ supported commands and the available options and their arguments.

-

rndc +

rndc communicates with the name server over a TCP connection, sending commands authenticated with digital signatures. In the current versions of @@ -63,38 +92,50 @@ over the channel must be signed by a key_id known to the server.

-

rndc +

rndc reads a configuration file to determine how to contact the name server and decide what algorithm and key it should use.

-
-
+
+ +

OPTIONS

-
+ + +
-4
-

+

+

Use IPv4 only. -

+

+
-6
-

+

+

Use IPv6 only. -

+

+
-b source-address
-

+

+

Use source-address as the source address for the connection to the server. Multiple instances are permitted to allow setting of both the IPv4 and IPv6 source addresses. -

+

+
-c config-file
-

+

+

Use config-file as the configuration file instead of the default, /etc/rndc.conf. -

+

+
-k key-file
-

+

+

Use key-file as the key file instead of the default, /etc/rndc.key. The key in @@ -102,40 +143,52 @@ authenticate commands sent to the server if the config-file does not exist. -

+

+
-s server
-

server is +

+

server is the name or address of the server which matches a server statement in the configuration file for rndc. If no server is supplied on the command line, the host named by the default-server clause in the options statement of the rndc configuration file will be used. -

+

+
-p port
-

+

+

Send commands to TCP port port instead of BIND 9's default control channel port, 953. -

+

+
-q
-

+

+

Quiet mode: Message text returned by the server will not be printed except when there is an error. -

+

+
-r
-

+

+

Instructs rndc to print the result code returned by named after executing the requested command (e.g., ISC_R_SUCCESS, ISC_R_FAILURE, etc). -

+

+
-V
-

+

+

Enable verbose logging. -

+

+
-y key_id
-

+

+

Use the key key_id from the configuration file. key_id @@ -151,22 +204,26 @@ which are used to send authenticated control commands to name servers. It should therefore not have general read or write access. -

+

+
-
-
+
+ +

COMMANDS

-

+ +

A list of commands supported by rndc can be seen by running rndc without arguments.

-

+

Currently supported commands are:

-
+ +
addzone zone [class [view]] configuration
-

+

Add a zone while the server is running. This command requires the allow-new-zones option to be set @@ -176,7 +233,7 @@ configuration text that would ordinarily be placed in named.conf.

-

+

The configuration is saved in a file called viewname.nzf (or, if named is compiled with @@ -191,28 +248,28 @@ configuration, so that zones that were added can persist after a restart.

-

+

This sample addzone command would add the zone example.com to the default view:

-

+

$ rndc addzone example.com '{ type master; file "example.com.db"; };'

-

+

(Note the brackets and semi-colon around the zone configuration text.)

-

+

See also rndc delzone and rndc modzone.

-
+
delzone [-clean] zone [class [view]]
-

+

Delete a zone while the server is running.

-

+

If the -clean argument is specified, the zone's master file (and journal file, if any) will be deleted along with the zone. Without the @@ -222,7 +279,7 @@ be cleaned up will be reported in the output of the rndc delzone command.)

-

+

If the zone was originally added via rndc addzone, then it will be removed permanently. However, if it was originally @@ -232,12 +289,13 @@ come back. To remove it permanently, it must also be removed from named.conf

-

+

See also rndc addzone and rndc modzone.

-
+
dnstap ( -reopen | -roll [number] )
-

+

+

Close and re-open DNSTAP output files. rndc dnstap -reopen allows the output file to be renamed externally, so @@ -248,34 +306,43 @@ previous most recent output file is moved to ".1", and so on. If number is specified, then the number of backup log files is limited to that number. -

+

+
dumpdb [-all|-cache|-zones|-adb|-bad|-fail] [view ...]
-

+

+

Dump the server's caches (default) and/or zones to the dump file for the specified views. If no view is specified, all views are dumped. (See the dump-file option in the BIND 9 Administrator Reference Manual.) -

+

+
flush
-

+

+

Flushes the server's cache. -

+

+
flushname name [view]
-

+

+

Flushes the given name from the view's DNS cache and, if applicable, from the view's nameserver address database, bad server cache and SERVFAIL cache. -

+

+
flushtree name [view]
-

+

+

Flushes the given name, and all of its subdomains, from the view's DNS cache, address database, bad server cache, and SERVFAIL cache. -

+

+
freeze [zone [class [view]]]
-

+

Suspend updates to a dynamic zone. If no zone is specified, then all zones are suspended. This allows manual edits to be made to a zone normally updated by @@ -284,13 +351,13 @@ All dynamic update attempts will be refused while the zone is frozen.

-

+

See also rndc thaw.

-
+
halt [-p]
-

+

Stop the server immediately. Recent changes made through dynamic update or IXFR are not saved to the master files, but will be rolled forward from the @@ -299,13 +366,13 @@ This allows an external process to determine when named had completed halting.

-

+

See also rndc stop.

-
+
loadkeys zone [class [view]]
-

+

Fetch all DNSSEC keys for the given zone from the key directory. If they are within their publication period, merge them into the @@ -314,7 +381,7 @@ immediately re-signed by the new keys, but is allowed to incrementally re-sign over time.

-

+

This command requires that the zone is configured with a dnssec-policy, or that the auto-dnssec zone option @@ -324,28 +391,33 @@ (See "Dynamic Update Policies" in the Administrator Reference Manual for more details.)

-
+
managed-keys (status | refresh | sync | destroy) [class [view]]
-

+

Inspect and control the "managed keys" database which handles RFC 5011 DNSSEC trust anchor maintenance. If a view is specified, these commands are applied to that view; otherwise they are applied to all views.

-
    -

  • +

      +
    • +

      When run with the status keyword, prints the current status of the managed keys database. -

      • -

    • +

      +
      • +
    • +

      When run with the refresh keyword, forces an immediate refresh query to be sent for all the managed keys, updating the managed keys database if any new keys are found, without waiting the normal refresh interval. -

      • -

    • +

      +
      • +
    • +

      When run with the sync keyword, forces an immediate dump of the managed keys database to disk (in the file managed-keys.bind or @@ -353,15 +425,16 @@ This synchronizes the database with its journal file, so that the database's current contents can be inspected visually. -

      • +

      +
    • -

      +

      When run with the destroy keyword, the managed keys database is shut down and deleted, and all key maintenance is terminated. This command should be used only with extreme caution.

      -

      +

      Existing keys that are already trusted are not deleted from memory; DNSSEC validation can continue after this command is used. However, key maintenance operations will @@ -369,7 +442,7 @@ reconfigured, and all existing key maintenance state will be deleted.

      -

      +

      Running rndc reconfig or restarting named immediately after this command will cause key maintenance to be reinitialized from scratch, @@ -379,12 +452,12 @@ in the event of a trust anchor rollover, or as a brute-force repair for key maintenance problems.

      -
      • +
    -
+
modzone zone [class [view]] configuration
-

+

Modify the configuration of a zone while the server is running. This command requires the allow-new-zones option to be @@ -395,7 +468,7 @@ configuration text that would ordinarily be placed in named.conf.

-

+

If the zone was originally added via rndc addzone, the configuration changes will be recorded permanently and will still be @@ -408,30 +481,32 @@ permanent, it must also be modified in named.conf

-

+

See also rndc addzone and rndc delzone.

-
+
notify zone [class [view]]
-

+

+

Resend NOTIFY messages for the zone. -

+

+
notrace
-

+

Sets the server's debugging level to 0.

-

+

See also rndc trace.

-
+
nta [( -class class | -dump | -force | -remove | -lifetime duration)] domain [view]
-

+

Sets a DNSSEC negative trust anchor (NTA) for domain, with a lifetime of duration. The default lifetime is @@ -439,7 +514,7 @@ nta-lifetime option, and defaults to one hour. The lifetime cannot exceed one week.

-

+

A negative trust anchor selectively disables DNSSEC validation for zones that are known to be failing because of misconfiguration rather than @@ -450,7 +525,7 @@ insecure rather than bogus. This continues until the NTA's lifetime is elapsed.

-

+

NTAs persist across restarts of the named server. The NTAs for a view are saved in a file called name.nta, @@ -460,11 +535,11 @@ cryptographic hash generated from the name of the view.

-

+

An existing NTA can be removed by using the -remove option.

-

+

An NTA's lifetime can be specified with the -lifetime option. TTL-style suffixes can be used to specify the lifetime in @@ -473,13 +548,13 @@ new value. Setting lifetime to zero is equivalent to -remove.

-

+

If the -dump is used, any other arguments are ignored, and a list of existing NTAs is printed (note that this may include NTAs that are expired but have not yet been cleaned up).

-

+

Normally, named will periodically test to see whether data below an NTA can now be validated (see the nta-recheck option @@ -491,31 +566,31 @@ lifetime, regardless of whether data could be validated if the NTA were not present.

-

+

The view class can be specified with -class. The default is class IN, which is the only class for which DNSSEC is currently supported.

-

+

All of these options can be shortened, i.e., to -l, -r, -d, -f, and -c.

-

+

Unrecognized options are treated as errors. To reference a domain or view name that begins with a hyphen, use a double-hyphen on the command line to indicate the end of options.

-
+
querylog [ on | off ]
-

+

Enable or disable query logging. (For backward compatibility, this command can also be used without an argument to toggle query logging on and off.)

-

+

Query logging can also be enabled by explicitly directing the queries category to a @@ -526,9 +601,10 @@ options section of named.conf.

-
+
reconfig
-

+

+

Reload the configuration file and load new zones, but do not reload existing zone files even if they have changed. @@ -536,34 +612,43 @@ is a large number of zones because it avoids the need to examine the modification times of the zones files. -

+

+
recursing
-

+

+

Dump the list of queries named is currently recursing on, and the list of domains to which iterative queries are currently being sent. (The second list includes the number of fetches currently active for the given domain, and how many have been passed or dropped because of the fetches-per-zone option.) -

+

+
refresh zone [class [view]]
-

+

+

Schedule zone maintenance for the given zone. -

+

+
reload
-

+

+

Reload configuration file and zones. -

+

+
reload zone [class [view]]
-

+

+

Reload the given zone. -

+

+
retransfer zone [class [view]]
-

+

Retransfer the given slave zone from the master server.

-

+

If the zone is configured to use inline-signing, the signed version of the zone is discarded; after the @@ -571,17 +656,19 @@ signed version will be regenerated with all new signatures.

-
+
scan
-

+

+

Scan the list of available network interfaces for changes, without performing a full reconfig or waiting for the interface-interval timer. -

+

+
secroots [-] [view ...]
-

+

Dump the security roots (i.e., trust anchors configured via trust-anchors statements, or the managed-keys or trusted-keys statements (both deprecated), or @@ -592,7 +679,7 @@ initializing managed keys (managed keys that have not yet been updated by a successful key refresh query).

-

+

If the first argument is "-", then the output is returned via the rndc response channel and printed to the standard output. @@ -601,18 +688,18 @@ overridden via the secroots-file option in named.conf.

-

+

See also rndc managed-keys.

-
+
serve-stale ( on | off | reset | status ) [class [view]]
-

+

Enable, disable, reset, or report the current status of the serving of stale answers as configured in named.conf.

-

+

If serving of stale answers is disabled by rndc-serve-stale off, then it will remain disabled even if named @@ -620,7 +707,7 @@ rndc serve-stale reset restores the setting as configured in named.conf.

-

+

rndc serve-stale status will report whether serving of stale answers is currently enabled, disabled by the configuration, or disabled by @@ -628,19 +715,19 @@ values of stale-answer-ttl and max-stale-ttl.

-
+
showzone zone [class [view]]
-

+

Print the configuration of a running zone.

-

+

See also rndc zonestatus.

-
+
sign zone [class [view]]
-

+

Fetch all DNSSEC keys for the given zone from the key directory (see the key-directory option in @@ -650,7 +737,7 @@ is changed, then the zone is automatically re-signed with the new key set.

-

+

This command requires that the zone is configured with a dnssec-policy, or that the auto-dnssec zone option be set @@ -661,13 +748,13 @@ (See "Dynamic Update Policies" in the Administrator Reference Manual for more details.)

-

+

See also rndc loadkeys.

-
+
signing [( -list | -clear keyid/algorithm | -clear all | -nsec3param ( parameters | none ) | -serial value ) ] zone [class [view]]
-

+

List, edit, or remove the DNSSEC signing state records for the specified zone. The status of ongoing DNSSEC operations (such as signing or generating @@ -680,7 +767,7 @@ or have finished signing the zone, and which NSEC3 chains are being created or removed.

-

+

rndc signing -clear can remove a single key (specified in the same format that rndc signing -list uses to @@ -689,7 +776,7 @@ that a key has not yet finished signing the zone will be retained.

-

+

rndc signing -nsec3param sets the NSEC3 parameters for a zone. This is the only supported mechanism for using NSEC3 with @@ -698,7 +785,7 @@ an NSEC3PARAM resource record: hash algorithm, flags, iterations, and salt, in that order.

-

+

Currently, the only defined value for hash algorithm is 1, representing SHA-1. The flags may be set to @@ -713,7 +800,7 @@ which causes named to generate a random 64-bit salt.

-

+

So, for example, to create an NSEC3 chain using the SHA-1 hash algorithm, no opt-out flag, 10 iterations, and a salt value of "FFFF", use: @@ -722,36 +809,40 @@ salt, use: rndc signing -nsec3param 1 1 15 - zone.

-

+

rndc signing -nsec3param none removes an existing NSEC3 chain and replaces it with NSEC.

-

+

rndc signing -serial value sets the serial number of the zone to value. If the value would cause the serial number to go backwards it will be rejected. The primary use is to set the serial on inline signed zones.

-
+
stats
-

+

+

Write server statistics to the statistics file. (See the statistics-file option in the BIND 9 Administrator Reference Manual.) -

+

+
status
-

+

+

Display status of the server. Note that the number of zones includes the internal bind/CH zone and the default ./IN hint zone if there is not an explicit root zone configured. -

+

+
stop [-p]
-

+

Stop the server, making sure any recent changes made through dynamic update or IXFR are first saved to the master files of the updated zones. @@ -759,17 +850,20 @@ This allows an external process to determine when named had completed stopping.

-

See also rndc halt.

-
+

See also rndc halt.

+
sync [-clean] [zone [class [view]]]
-

+

+

Sync changes in the journal file for a dynamic zone to the master file. If the "-clean" option is specified, the journal file is also removed. If no zone is specified, then all zones are synced. -

+

+
tcp-timeouts [initial idle keepalive advertised]
-

+

+

When called without arguments, display the current values of the tcp-initial-timeout, tcp-idle-timeout, @@ -780,10 +874,11 @@ under a denial of service attack. See the descriptions of these options in the BIND 9 Administrator Reference Manual for details of their use. -

+

+
thaw [zone [class [view]]]
-

+

Enable updates to a frozen dynamic zone. If no zone is specified, then all frozen zones are enabled. This causes the server to reload the zone @@ -797,45 +892,53 @@ zone has changed, any existing journal file will be removed.

-

See also rndc freeze.

-
+

See also rndc freeze.

+
trace
-

+

+

Increment the servers debugging level by one. -

+

+
trace level
-

+

Sets the server's debugging level to an explicit value.

-

+

See also rndc notrace.

-
+
tsig-delete keyname [view]
-

+

+

Delete a given TKEY-negotiated key from the server. (This does not apply to statically configured TSIG keys.) -

+

+
tsig-list
-

+

+

List the names of all TSIG keys currently configured for use by named in each view. The list includes both statically configured keys and dynamic TKEY-negotiated keys. -

+

+
validation ( on | off | status ) [view ...]
-

+

+

Enable, disable, or check the current status of DNSSEC validation. By default, validation is enabled. The cache is flushed when validation is turned on or off to avoid using data that might differ between states. -

+

+
zonestatus zone [class [view]]
-

+

Displays the current status of the given zone, including the master file name and any include files from which it was loaded, when it was most @@ -846,12 +949,13 @@ management or inline signing, and the scheduled refresh or expiry times for the zone.

-

+

See also rndc showzone.

-
+
-

+ +

rndc commands that specify zone names, such as reload, retransfer or zonestatus, can be ambiguous when applied @@ -863,27 +967,42 @@ (With a trailing period, this would specify a zone called "-redirect".)

-
-
+
+ +

LIMITATIONS

-

+ +

There is currently no way to provide the shared secret for a key_id without using the configuration file.

-

+

Several error messages could be clearer.

-
-
+
+ +

SEE ALSO

-

rndc.conf(5), - rndc-confgen(8), - named(8), - named.conf(5), - ndc(8), + +

+ rndc.conf(5) + , + + rndc-confgen(8) + , + + named(8) + , + + named.conf(5) + , + + ndc(8) + , BIND 9 Administrator Reference Manual.

-
+
+
@@ -902,6 +1021,6 @@
-

BIND 9.17.0 (Development Release)

+

BIND 9.17.1 (Development Release)

diff --git a/doc/arm/notes.html b/doc/arm/notes.html index 094a0cbef8..6cef9ed8f0 100644 --- a/doc/arm/notes.html +++ b/doc/arm/notes.html @@ -15,7 +15,7 @@

-Release Notes for BIND Version 9.17.0

+Release Notes for BIND Version 9.17.1

@@ -72,6 +72,100 @@

+Notes for BIND 9.17.1

+ +
+

+Security Fixes

+
  • +

    + DNS rebinding protection was ineffective when BIND 9 is configured as + a forwarding DNS server. Found and responsibly reported by Tobias + Klein. [GL #1574] +

    +
+
+ +
+

+Known Issues

+
  • +

    + We have received reports that in some circumstances, receipt of an + IXFR can cause the processing of queries to slow significantly. Some + of these were related to RPZ processing, which has been fixed in this + release (see below). Others appear to occur where there are + NSEC3-related changes (such as an operator changing the NSEC3 salt + used in the hash calculation). These are being investigated. + [GL #1685] +

    +
+
+ +
+

+New Features

+
  • +

    + A new option, nsdname-wait-recurse, has been added + to the response-policy clause in the configuration + file. When set to no, RPZ NSDNAME rules are only + applied if the authoritative nameservers for the query name have been + looked up and are present in the cache. If this information is not + present, the RPZ NSDNAME rules are ignored, but the information is + looked up in the background and applied to subsequent queries. The + default is yes, meaning that RPZ NSDNAME rules + should always be applied, even if the information needs to be looked + up first. [GL #1138] +

    +
+
+ +
+

+Feature Changes

+
  • +

    + The previous DNSSEC sign statistics used lots of memory. The number of + keys to track is reduced to four per zone, which should be enough for + 99% of all signed zones. [GL #1179] +

    +
+
+ +
+

+Bug Fixes

+
    +
  • +

    + When an RPZ policy zone was updated via zone transfer and a large + number of records was deleted, named could become + nonresponsive for a short period while deleted names were removed from + the RPZ summary database. This database cleanup is now done + incrementally over a longer period of time, reducing such delays. + [GL #1447] +

    +
    • +
  • +

    + When trying to migrate an already-signed zone from + auto-dnssec maintain to one based on + dnssec-policy, the existing keys were immediately + deleted and replaced with new ones. As the key rollover timing + constraints were not being followed, it was possible that some clients + would not have been able to validate responses until all old DNSSEC + information had timed out from caches. BIND now looks at the time + metadata of the existing keys and incorporates it into its DNSSEC + policy operation. [GL #1706] +

    +
    • +
+
+ +
+
+

Notes for BIND 9.17.0

@@ -96,7 +190,8 @@

New Features

-
  • +
      +

    • When a secondary server receives a large incremental zone transfer (IXFR), it can have a negative impact on query @@ -112,7 +207,21 @@ to the size of a full zone transfer. The default is 100%. [GL #1515]

      -
    +
    • +
  • +

    + A new RPZ option nsdname-wait-recurse + controls whether RPZ-NSDNAME rules should always be applied + even if the names of authoritative name servers for the query + name need to be looked up recurively first. The default is + yes. Setting it to + no speeds up initial responses by skipping + RPZ-NSDNAME rules when name server domain names are not yet + in the cache. The names will be looked up in the background and + the rule will be applied for subsequent queries. [GL #1138] +

    +
    • +
diff --git a/doc/arm/notes.pdf b/doc/arm/notes.pdf index b04e5e57b8638e1a0a06af5ec52e6b261de38852..336ab44c59fc8be6f4833eeac5a6512046beafb7 100644 GIT binary patch delta 58899 zcmZsfLwKNp(xqdwW83K1wrzK8TVIlnZQFLoX2(Xyw(ZRQXP&$IXLnAmYIUm4dlUmP zy$lgg2FA{nRQE;$)ZpkRWpUl{_YSDP*UPC-5;GZH*>Plyy(Y?)?){TJOXT}Yj7N*z z1#|KE`F5_+%EYBt+j5q>VJ%(r_0_j!%Xx3^VBq=jzJ4FI9%jad2G6M__I2UKs~cL2 zMc%|Erze=sZ_)HKwk-pG<~}>FQca~QtDVSu+GLYfey7DAfO)Zde96oQwqQu`mre?6 zVUpTN-G`@IkAc~!0r`R1u9K;wz+;JqnY#9;ZuKP&x8)Ls9|chp+Iy4hrzcG13^B-rJ( zW7HKnzAJ}WqgJ1@2hAM7QqrX@+UzLYev;rCVl}WbO*tYSC)MW3vmcnHS<7xomUAiO zSdMC2h9?G@jI`!VBqgWm0AJ;W&1pH>)WqtkeTYS<(Q=K%W zju}vyB5qY2q^^CEO6+R!amhcSRQ`e=&Yi5%soKwj<-hY5g>B5?8d6Vk?((;`bFjc( z=lwyIM%T!#4*1c7|1`r1JA|kA8|0s>cm#S^$gQ#1=U3Ys-_NM)$kexL-9IZk)IBiO zypO0KlA3yQ(Pa^Ig;JH^7YkvJXH9e}I)4Ce{RAAtx3iF~v#+mQ`dLv?Ee! z5iZhnNVbRI^9?ge7_K6upYF?UZ~A{SF+CLNAV?>aE~;~5QH5WgM#D6lVFp6Bd(j)a zL6AY!&E_4au>UQ;lTx$^luHyI+jt)e!R~39re;lL_>W0~?mW+X10dH{_In|$r>DTo zYcg5Xkbd}I9!qW8j{V>z@NMyMMQOiKSFvn$x3KDwf~Jm7ArKTR)8DpWbmShktZ*Pi zNR>Ku+jFFL(_t-J?04~bKpO$i`!odT?7tg3uVC!mWC+u7WXdF zZA6@F);u=ePV3oZ@u&_A-@Z&p)kd1?)$5y6cMo(Ebc3U7LlslmU{Dg6aaX32!(fiBR$`N#W}&QMm|m6|%-w0WHWDyMb3+>F9jA%Mxk9ftP>^ z)%2qnIk3#bV+NT>pvSQD-ImnASnB5yq#@pv6&_Z@UisCaS~9p#*yvX;;dXpy93(jc)@`k2iwA+`Qy zvyQ<+<24a53tw3G#D{L_hhj|uD)|hD^xe>QuH7>FZ1MxgqnJ+;nw7=O3olA zQQ6Qs@tCPU9igj&X2KhZqhnxbsbj3+w}7uCFjj4Mx5K+##RW6yleYew?>A$ zcc3AuLakm~%{pp*U7*&HQ`0vVGW0hriCpM&1AEnMguA|>;%)qazO?Kt-e|xfWshT} zx(j}byU`CtauYyR&`~S8l9~$4G09jpH|%c(y2$27X?@A7T?L$6OW;lRPlqkkJ1o?Z zCL=wWQo3Flt#6R#AEK?gSd=Yt?eR^EctM48@yB`E3DM{XYiWcNreqLNy3u&zv z_>Nag>5~WEOO};??SYNDek_^!8N<8_J+OE-LCWrj;bR?}fZoGL28V?&2MI7z*I2qW zzRqUvqEp1UAZ)+AJp2S3iS8|yK2OG4UETF(WJldHf*U&NgGAm{l^#DacrZi~E2t2z&Ru8x2y!bQ5i>=OM%YvSS6q-iXietA!S(jMsnijCuFZ31>x;P z=Gb8=!^d~YJ@2^U$01TmG@K`Qze!i{SKGIx>S=YN54+%4VGgI3eRJlCOMn;WQ*d|4 zpMS_>qqpqu>@!V<#V8T6VdWFls4>(d_9ySD#-gvMnOD0s%tjplx67i(jUj?y-nI_l{8GPQn@>EcrEM*)J6f+SpB1;3V$}^g7 zSkAlsz_nRWc_iV+xbu}bkLzozUzu--=J3Etu~Iax>YqIj@J@PanEaV-77y;cB>k+F z*`HF3lL0Iv6#6iZG8aZ8N#zw4dchSow`4#m4EAKJ#Q+I~h_e%D_(g1|nLbdKNw{F4 zR(**<#yHRy^v)%pCnhf{jQ3eo5&UbQWUPPE%0CaIArCvIY0*dy!bZKd__E)}{0r`< z^l!uld|czP&_09;KngqF%N;{;1t*Es5Z$q=jMp3$Rjy*?N1ueOA1&U-*58MBUs@pW zs{BCd_r7>qofTGH-_IF#!1$a)C-5^m6Lh9zp`>n-tpbEcRrg;8#JRS*!D~CRv>Jq8 zaqiM0mU1AsHM6U0I@`0%yampi8dV0GN+%ZbBGT&Cw^ei;=}J@)oy8v)7IzPK%7N*a zGT!AuS)G2l2|ta7?zcjI4itYqWm@f~A`5=XwRHp|6V|WsjgzO*QYDB9hy4fo#397J zkk>pZE#aY)$n4Rq^h$8C(D`mfZbb1^Z&ha-#~WpIuqB2dJVYS|2h*FYov<6Y1qG~sA( zsxr*$$Q;B`js?T^GIn$GcvK(NWJj}o$}+nDY!d4E>5%t%D4%N&*DF=z>f+Nnh9;;q zOeqT|s6Kbpvh~r3__-SA(8UB3bcv@QyO8hDMGf1s4G@gm*IiDHuJ=xn3LEsqW6=si zhhotfmOxItvqvUIac3EJL6~k6D%s=P#|_G-J3RhArJBgrycY2F{3KXdzThnwab|O8 zONq{`uFbH1Q~u8s(A|6*T#&~O)%_k(6?QkM&05PLWDMIrr$S|Vx+54r%atb6@0#+i zG}7h*W+)LpiRn2AeWS>C2j^Yesyh8~(|N2(1Ritzrw>kzD#4SUW)X!9>_gr+^RtJkyFT`hl9Q@l1}LFCB$ zcdEOupJn_}o+gCfZE4>t!h=bbr0c17pSPbtZwA*>Ohs<`NE4GAEd$y@1EVA#9S5PD z7e9(YO_PV`KE1xgcw1>P)y9NT8I06^NhN6-XRY_!@>ADG8e!LROeg`rVY|Ni3vH;& zLR+n^wq5O&{IGwnguUAEc>W!Ja>1GIl2 zf}L&s^voqQ)yQ)r9dJ)W^ zPsHX=A&%U;5!vOVQfNu{7R8Q=5~~=X)UA{UulsZe{o=qD%f881r=f*wTEO6}o3l#c zs!Gf+#w!@|!o;)CEaK{QJ@XTUqc27UDi!g%sXCAE7%6@xHE{7mA@7{#g+nmhLY|?l z;rVP@M}I7`B(RfxGx7$HXIXXLdu@7DOZ)h={<)|71Ia^SyL>39R6GKVW{ zrWN(jAAJfsAT25>-iPK#ay=^s{IGK=Xe7R z-HIE_eqe<{UOEa@Hiq@P2xgWC`1w7m*#Z{TfuuF=yy49_b0w*rJ|wJX*mO|X@0I$E zb|zg*x6i-(?mDFbUWN5&Z&XUayswQ!h7=M;D4~zdR4pp(egQgas-I#&s^x>1@U5b- zNEHKvoPs0u9Iv=COs5dLL}f8#A@$x3OmpLdp5+GT`uUZ+&$Cg z0BE5sq%I@)zWi&?mx5$v%OR1cg}*}sy8W}2)krT&bfccHPn&dH7S*f3X*m~I+1$47 z(Huj68es~I=n7*Gj0^uTc`vCK@=t}0%>Y-I^w>v$H4|kx>owd=vwHX z@#V_qWBS!EJXkVg4S{Jzyl)%YX2RZ~P`;3J6dd6oc)>_`T&6d*Wt;j!=sj#;bpGkD z{gK1aX)vG%uLV*cyc@2-=)$%R@28XFewpU=?xHf>6L;?0E+Jm|EBGeK4UQD)Fe*kk zlwRo7OG>^rs#1i~d5Iw@%=~h*Dr;&E)JNnrxEIW!<42@rRi`&5!jW$n?W+xnSjx9} z@-5g;N(Ldn@h7Q~#33O*U=Uq2)joAm@>yTjU?3uyG9Ht$tZI@oqJpMvb9GK4St zn-){dHHuCO9>pfTWA4M9a7*EbCo+xiKnjM+?73~Me!3n?czu_W72wcMe@kLLy;@5& zMF3&Y_mT4TDeeNWm3oy`HSRjA2_R>nGEk4L)C9ngxh(W=6_G+o38SDOi+T6WBpmvO zV)iVuDI+cFFHiF7H{_6CL?obi49Fn#@4+&5{lPZbOV7bTI$Om~3?VhHIyJ-1SJb`w zQ-7`F)}(&pdWjCwYUlYreN%n$s2v?4sIcR7O5qn_IL{YIXCC}hhg8-PYJ z*j~y;QE~x@i+?v48{p34`7m1~wEVhav%_S8aKbuSt!V$+A<5keNeenKu{M!joTXkoG`SidJUt~@tK3P0 z#TGvfWQhEfR9^>fa9>p-#n!t+Ii=XdJ0Z1`#}l}SzY;*yxb&9$K&nV zq6$(3to$8XSgC=74r5ed`@Hgxa~aH^Oa-)Dps|H|B9V($RyLe z&{gr_%|iRqLb$LD8IN4o?1FbgGCd-If0c_Bb$24wl{AMR40`MrA@R63OnKNB;lv0` z0u>~U7VJZzs)Kt2J##7Mtk!<>?w7ADy-L;vA#H!5C0I#ym$Bbd*o79FY(YC#G^Bhn zCKDzIcfILlUCTIfa1cXvOE85Y*g}htoIRXzp0@Dg+Ss4qU_n5`Be8g#Dh#E8p2fQ0 z#RiieKAao#zu+4kqieYLIUOKgNFQ8HL>ceJl1FVgd-l$?CNEv5x}$o3f2Yq?hk!i$ z{62x3Q*#lwSkQlM*4N&={Tphe97SUV< zt=yS89JwjzJM3~`Te)sh+CUlFSs+!1E9nbg>|ySVlz#9g9(Ja?D_TSZFx`r_2imH% z>bMgnn2Du~oW7Q5ohLv;1girQCfX{qEsKOYGBJo45`Iwl+O*;N!p;u_lj0+YK)?P4 zFAt666CfrqIB2>RyC*^0=!DCiVC2PFep&K9X9xPe}fkIU8HWY-W8Keent^;Zvc%)36VINkP# zY(O|*_Wlt6_F9omx2BbDUbwHzwd#}cRcIp*lOMk9)2z0CBhDd$BRwDA;fwT@LasCMEC9KzxkV_-ykYRv#h-EijjoIyQgw3EV&0P#m+-ouq7GPw)PHX<}}yWnOILjrMAsEz#XezTHn}vX?I1ZF(Y&49#G1OtUTT^O||3p^&sP@$}(@ z*4nP?9)txZZ3q>Z-EG89ag>q)z|!Bc>BZ*rycmJ4#yry$zZL*N6_eH?Ph{hlRQ4v> z_d`|@9JYz0@>*U`w?(oil)r7pmqa7sQ8P^=TK=cvY`)h!w)K zqLN0(!bkn>CI%ElX%4YZq6a@pXxuE=WTyvd8Ogk#UmjV>$)i5O;$V!$SHALjgX9Fc zJY?kYOSjjONRcCoN>*qKk@ZXB#Om2ywEQ;kNT1i?bq>CldpYf@VBX*BLG2)#&{{oZ zKQ;Z>LJKL3vIH&=i{LHfst6U!Yx zJnElJT92q#(EvW7$=R0Zc|rPga{cKpVzghWLq-~em`-w)%L>*hams@ek?=>?zd+eX z%p@UnMcuf*%w>;t1yQV!Cs8;~dqMiV$93Fz6Q}&v7sjNaq}(uW)ngh)%~`cLpnU(K zEg~*plba|K#Q7NW)|>&PQNyax}!kNz#za_@|@|IUx1 zg~Rz{VIHg22BU)W8dqI;Cha#J1JQ>)Y+kLfD2gi97`1WX*3ssk%t+oJqKd<<-ZEW5 zO+)PK(Bdv1+e#>xBO~k9q7^5kea!?=OmyISYRxhxfK+E?@cfa$Wy=)_~6naU~-sxsqLg*0$!FEf5((c>c7 zEe3WAX=p|jMi!H3({QE$YviKD)foFKOkr_#4~@w`CBeK_qM^W9$STl_ZXG*s0CT?ewh=Y~JxRC{5}VwEH) zK(ICE9f^2MmPTR(`!wFvTR#KOk^W|pc>;zeIgyLsMea7>FSs`0U&6#@pEw~3gAj=V zM*@sOpqvr9a} zgg2_4j#0q_h~b!nm-*ui-o=# zox>L>;-}2}{|--P=EMR_Y9@~VvLY5@HdYqS|2kG;rvFM}c4n6U7pXOBUR;ZxZ_|vp zh_qd)Jx_i(GRsU)6z_?f={V6Nlj%4UFbNDY%`gcUjTUr`*OBCnp_rzIqW^%RY3}Rx zt?k$I?B}>^H^00?7s2QIjhSPzzc$t+6@h&nq;B=th2&x~60l4XUhQuvwMNVmiAwai zpz%3aI1rHRw^G=sA;7R@f4CGyA5;WLbG)OF24(;?EiDTSSf&;}Y@G8mF&L@F5l7+P z-VeY#Rux2ZUXbh{2_l&n3WfChg>+6U8|#NCx#-6VG()^pz)2v)hLR>aK zHqIovEb)&WPxM%r_^M3n(~l$RhXB+#8#JW@rT{lG3(|VWy!}-F;lE4=)Tp5YC?KTs zd7gR`7_h`j5CA@|1nCOp@7ge}81ac6*d4f>M`~(OvoX}`Lz8t}Kh_4zS zY@{&CPo9|1l*gY))TE#h?n%Z0|2cO95eI8m)Cj*HZVOLLHtIpdj#`O!f4^HyVnuwj z6DREFpi(3Skkn(d!3q&?Vi(6Wh&f9O9rUVdpIxK9Isox64yZ2<3C{r9a~nda z^}S(%oA0cpNjjDnsJ|c+$ZJSHm_*+#-u<`pF9T|}Q$f>j_Bp86tX%+Xj%whq$!uR+ zQb~M5;_Iats;knMR4`2>%rnS_k>y>q|7#5s3^`%U0P&d47cLnwY(m1T?BqN+WN#=p z;oI;w2|x~Yt9fMV<$s&HyclqXn;HK7$o`pPCZmyKDLs%7@mUl{r!~|YZGu3JevYh{ z)>L*146K}rl2eSrEnPq4%r#(eL;FF1d|M{_{MisL&( zK%#~U$77uv#_lt1K*v#?zn<47;eC~T+6*U10RVaSFIO0NO{8Zz8EHxZ3!k;QBD3vz zh=Q~5zC(2_bBoYqBRmK4&9`c;lSV^a67_#ou3DnFdVK_Pc;Qp7>^Y+FoB|@XrjC%e zQ5+U5iZDwCKl0jXE|Z~U44T_r{2qVLQCahP;hbmuFsE`L;w z0gzZgv^dH2-wfTgHM#AKqtVYaVPb|5PJXUp+WTz&o7-wrSm2wY$;I?gQNkI)%&zZy zkC$@pchKlVwsQCT`N||8!M-s7)#x4lRCt{`4}CeK>64=-?78LfD}*Eo58*@;&da@a zs1w7o5_2%G4h)u;`7|br6sno6{@W=)80OY;A&UuwwA?V4 zcRwwMYwG7B+L863cyHEPTE-i!HxJCpshy*gVBXC&W1esn1-hLB zF3aQ=AREf&WkH=67wo9!hjdp)G=FrWbMf+%cP)xYq$qXA4y{EdqDR^|%-ZO%ouoV8 z#65~6#Ex@h3AmR7U}+66^`#@z=e3*NWs@fU4Bd(jEF}N=vBI9k$uH@oRHO4*8AR`D#kJX*Jc^i+KsNh>80eye3JC(Rk!bj%Q|ii zuq}FxVU7r*;N@zRUmJ3qi4;OemsHx6qieT+e{K12Jg~o}E%`iN3gH*SI3XEN`qvjl zqaD0TFw-UXAJM6Ty&Sp^0Ks1^fCjFtI2>S1v=1MpQ9%Ito82Y?CV6g4Y=87B?9{Kz zDahL#A*ghKOi#j=eXhRESPSAyx*0JgJxX|^ zsoEWj+yBMY0a=p1Uz0*!yjD~_jn^02DTFlc@cM_D$3Cw#{b3f}HVpP`PI#>}-F06D zrOD?a$Fz>7XH(0*zWs0UaOnQ4W;$>{QEAxK;Ytu_&|S*@V>y}~|N%L!*4Us+mv zieM!-c_8z)<}q)*$_*rT>Ub@NNOrUN&-#f!S%aoM2&t_;Ipg{12qk%M$;79KMD}VB)21@eTyNF$m8YP$3>&v7{^y1Uy&IB|=Gedo`ka>JBiCX*PRA;Tya9(Zme z*lLX?^Q$&fDSB8y+xVUxBeVkFzvwSpsYn)Ny@$nAN*1$j&&_)mO{#?|aGou$5mJAU zfjeM3oE^}hI)2jH4+qaDVNAUyfgK>yTJm^H0`qVkiU?BVc4uM6u^|c)Emr14+j2w) z!f2<`XJTd${kBJGZq_k{^vr~@gdjTqK6DO$)@8geK4804Te6cv7j*I7nt$BqFb_O6 zK2?d{JRve-vYOV?&{W^O)7$);)3YRX7J-lxXgL$0~B?D#P;+7j+z(AnY(q%u5#70G&63e}kJ`gU)xw?(vGp3Gy(m9^+z ztH62im~*>_wp?CC#y*U$WAf}WDIAVeaKrrR$>*A+_{I80biCJ$S4I8UY_Wj0|CkDI zz~dfO8;*h{2qUkbX8U?Vb3oO4H~edonN->EvGg+|RWy-`_0oXL#P{JNOLMyn$Zy}x zt~^?tjVcqkUBbZ7N1M|IwM1`S99TRF1`lZ!kb;Fx@skT|A^hVJ@U!fdelUrZswyqZ zdJsZ|bA}Ht-?XvUZ;g5^kaCX5K>e7Wt2a+|*Ezg*kh z37Utu>LNti4Vg*RFUh7$N+8uN(7S&%T@j^1;RLJ5_HI7@8uLVOa{IpP($>u!Jm&~F z^{^Q$<5TkXj-dUcUFKQ%1-RkZrNuFl!wJhK^}1Qnug2v_%dgLzk`WSCVS3lQ#3VX( zE##)$`wQ?H{Me{PTQKC6zF$<1;TRU2Tug!FQF&6|T52kOVlGU|I7Av7s>@Y0)2}+s zzpZv4NNZk$<9gE&U0jsL6bKJ^u8)3ndk**QubmA$ zSbjfYd)ziLccJ^^1wdN-WKPt{<6Q-2tn3Ny(y14e^=iL&#!{ZBOZP^40cU>sjVXm1Gdb*zp7G-Fg+G$o(-@L;y#Uye-Q0)oIw6uclmdr z2VCSZ0lkG|A|Z@PRj_X{9tO2bF;pL2_oKSyY514uBe<>a?5h`4E?Jcaa2iGs!##J zy=qU^46^6Dh>tTuO|ASkUw)Ib!pfa?w46ueJuCL8B68>z20sj%MS7kSS_z^8ylnU9 z7Js#7RHeJV4+dQu-=I9W)+otZ`$I|21r?Ony6nK^K8R$q5SoF^UQ^ATE&qCc+w6(ix z(ASt5uk-v=T$2d#GdVc^=#_dBvnBV%ejwRpwOI z*7R$Cg8i=KVh8=aUzxN~eI0lP zko9gl^5w`#h(77k8C~A8oUnLj8y9$R?o(fOTch60fw))Pi%IrUh|hDVUN7K6O*@NT=tjEl{Iqg9b_xUug{ zTx&Xeh_>fXH`Q~&Z^pCv)#R8=pJ{GQ;MEE~BVhI7Nf&Z@FE+ciRD8z5&vdo4LwVw< zJvwwu#(g^1;wnmR%G!pgwgDzM2a=K;c@6x9ltVYk-ymd1E|iB6VjKbe?0 zfh9boH-!^sWSC(Rtv>cdj@JkA=~AC+r=!*iu7r%5$jbs)As&e%i+g2QuEy z$4z_#-OIhNma?Sg@9wulbbGyvCRxu?t4+9iH!1&hfHZG?P7Dq%N-xTKP48OH%U)2%cd}u-~+1kb;}13+gV^%hZ|01f#@O>>XBH_E@AnDsRd- zy}7?^CWGfj5IU8V)%WuI&AF1@Q|(RnfE8((Wre#dh}^eQosMiFQ}E+C5}nn!$}~=h z_7ZaYvu`kZjI44t0#BOzXCp0yUDRmgO>FZ54I0!|XlD4(>xO(g(7DdiYCn<}X*#9? zudg?C=nHkSEGe!)-660}%(#2-s%JO9D}09&jx)!yJ?dQ@u|nh`!4gO&!4>hY{)v%L zDlZ=H51K4-+vt5|kUK*VB8zjR1AD_yy#s?+%JqDxxbLq73pnp-?J1qsqCS| zL(!53`$I8PCs?pwcmyLb9qSDmS95C$aOeGLQ9x8P;=kCH-BB+S&8_DZz-akKsz&z! ztRZ?G{{Mg@cM@m;X4BaZb2@Nl7UusLj3x_#RBSM2mLz2XOj>5P{~|{gVrDK@rvERD zWaeh#W=U#zqXMeERpU$a)6Ca2%*-hi)>`b=IcV+H%bV@iTkMMFTbLg|H~IPJ7BpG? zoJhAyEcoGlMtiu(A?{?@z(!g^DGOUT6xa}&AF@F(#M!;TZEV0z;B~EVg>`LA`V86O z5nvTrx~-c}Y? zm;b)zC4QN`!{4u*nHv4thjCnuC#r#pPF>41c(5KFmS+RTIy4Y=TP ze@@w%{{k0%o~e{tOt-;yKm-<%uYJVoF8DBs_?$KP-aXSQ|>Ha8OohQa~g zZ6+Y|0RUsh_r$-Qw2(jV!10$M|B~ES%svoCx@&sViVDVI4ulCS%6>b@z)LE_bE27e z!BdgB1XKh*ZZm$$))|}F?itzrGPwghGQX|K1409Hzj{}brx>EEZNIE|CwepFY@@&F z9(%#xu$*`(nB@^^m@B{EB|g*gKDNhrX*$*f4wV8ANTf!uVMrLaKD@A zWE7w{Mu3%bfbNSKkDHh4Bj>DF;bXh-Tl8zCFe|++1G~SPVI9{AQoGc=n0x8#FHSD{ z^4YZ+2mw+Hos|;fq^$F(3Zra6RR@G)MdR z;4Nk0$%Nz<>7`K-4?_L|Lm;5Ys~L6IWstlDx?ozO$-j}MrnJcL70{P+W#k;t;a_?~ z<~;T+O6K1vdc!PJ5hs2vW(^@y!NA2!CC}yMPl|_+heLSQ4tdS{BAr42FF#;*Ge~tB zO*}WIzr9<~e**t86+%&qpo2MznC6#gt*gvX*kOj>qr^cN;>V zry7R7v1i$_dwz3yh!f`RAcDWtp`ne@DRZd_U(3>bv;y&Z`>0!jXmfc;R|5a@R24eF zT8o@B@@q9FTY6C?$!`9K#RAt<>^4Ke++-2p2_d z6gsj5rgw0;BHuu!H{3UMQIZ{C!UGz1y~SS3OXChv38A|A#;u1`ZjgZO!mBJ!)kJM= z9mlPTF39=TF$s}sjC|6>d>(xJ@$aZ!OXE@nmG)JVyMUE#A~=glgYfJ_j?!|?hxoqI z2z<9o50TwFybd6y-gs!(Xp1+3F8_2FYlz!j%|Ye!Er|mALz~<6oVI9QRclO^by9Je z_h3|FTkorjf`jewHp8nt(KBE+YJ}y9p*^s559tp-Q~(hkQEskulPoBxPL~xvK1|g1 zH%~=zBYDW#Yo(i!z+bjYz7x{P+KOZxBmE_==Dtz#%oyP6HdMH7AY&|mvRSxjpVmpx zt($WWSGY=gd!uW>oRf9u4n~6w8@+x4G*59^?!J-*LD3qz!zRfpgV6UBQ3VItCk|&g zg%CyiU)3jsL>3MQ>)Iw28TjgHDh0^nR4v6K?!F$hF3F(4+b!UF*V5MKguzWH==V2p zp+hmXtAW@Qua*g^N4iH565XSu>Pt54cc(X0dHSA_#2*RV-XVBtFp^3<0;I)+cnclM z9Qeyb($F1FMTT%R230>LH4)a%J0>43agP2GpVk!O9{{~vkdIKNIqfTzQvSourfO?f#dkZ}Y=De4U zpgl2-#g)Cq40t9&uy34aCM>fuxuINFTIwAHtrvMzo`uiJs7UM6$37ya)+X~G{39Xh zpvFLm?X-6WWLPIZt9w$SI^LdE`WpO z>->v4@p>Pli>+m7lg=&FkQ*7Cim55kN~pXD{LV-Bdl_H6=S+&q!>f->9D)V2qjB;K zGV)qW)p4IHR(twW$|xRSu&qdz;gVC53#fYSPEcMHdbOG|F9(LHWtY9JN#Z2UAVdKh z!KN*GF;xzOEeGq<44PdBSVQD_L}ZHya!KVS?WTr7IUo#~f}SG6#(E=Z1RsSrlUS)4 zRow;v3*F#HplyS7W(8$ZCq2SZD6Qr{ui4aSLABquRD3oE^CdalzMy{++zPCz0J*7w z$En)fy;c@O8)913fR0(rjw zP=2=8W9&6u=tX~0Hb|7xg!i2TA$de&M+3L16z(=g^Q?*7C_h8zuwi|iuP4~d z$g6MRRi99;1~lzw>7WJNH@**eBa$BqqwD_N6K&F;)h+M+qV4>aC}o^eV6KwUL(sSQ zg5|)pEwippXW^{n>vtR?E6x^q_LDrtrwN-}sgqASROODuNBBUxCs2Yg?fjY?5w zOby|oQ+Eg41}`o%#VRPBeeJ?QtR1U4a-Bw?Z>fa*Pw=U{yW6sDNw9epkEP7sl`4T86h9chIPfF8&CkOa;%oZ0Z>nW#LNs*WEmSKIY~0rF1j2$KvuVb)%=;CXh^=x?T(5z(uMfL_lf=E$aAT_1i{B!l%u4yc8A zx;%NLKV4n-k@a}~K{*c$c_Oh>e|xY`9ycGSQfQglM9Y>H*`iF;j|gC%PF~-N_A#^< zvHV;iy@OzLOV?L{m?7Qq^)K^d^9FKeH+;Cm-Le<$J&!yERJRM%HfRqF>U@k1Puu~x zt1N6>u+l9-S3i&-rq2ABwgt3^!4P*dsb9rU8bnb{gPArJd1Oe5H|Yr?(ore!Ts8$~ zt?lirg`v$9YOwXri0vyRFKCSN`^wJ2MvES^-5!;+C37Och8dJ@d^<0PE{mK=%rk$* ze7JV-D1%X-og~A$C33_+^P?xk`hoiUh5;0#o3llzr_|IB7g-G?YexqE z?;Do%{%l&=mS(NQI86UVH1$f`Br`oX#IBC{#hJf~TOQK*M?1MgM}!d>%(!$szht z|1mngF;S;u@6VTY|4*DcOL5n52{v(wD?wPV$-cWwoX9f3Y@O&M+3r!?=0O$Vg}gT- zoRW>)cCWh>?}veKKcz%sNS7L#b)P}7Un4xQDm}HUs`iL<^u#Uh<8UvwaHidrwQ^c673C|t zRmR3T@8qwRA#1svec(>uDfSmnV8At@BRKnyb%unj_(3(;1m^{<5heR{O0F4-dlCY$ z4V8o(B6*JiHF)Dpk<9n$85aYdDPU+sK52>~oYqp1`>*#k0>7vH^9>>Q_I~zvw`C9A zJ^Dd6Qxbe*NW79%CBTMQa6+56pGr8E=YSXL4d_TTC&#Gei9CvGrTx?Jk>I;#o8I$# zH;1|LrmYujO9=hQ?lO^OSs@uMa;gL}gUoH#I2KjO^LbmltWK6XDx0kJS?j`Wr3tUn z!vd4?+uWN!Ob1L|s5(2bUs3i(8|(2SR}aoyU4X5&42Geo-{GJUfLJ!J!4Nw~IX}T@ z7qn*v;`c4MJDqTb-aH36&n8FAyK8B!9GdK>b#1K?)g#N%=5K_V`tW+AFl!+7hGDYr z5ZXbEIB7)mCT#YZt9vx5!c$;4tISt0S@qf?kFSvv!EF2>jHqJ3k4($3eNTv=Q~J~+ z30(|N#K4CQG<;~ElEG|yhN0mw;qLzcUO=J06>P9Wm07$dN=r;+v^n-=yo6zFicVq+AAym{mle*jg5yB0*msF`tD_Aj6X_=v(6Anv!r7nYZ^ zml{zUJ+%?Q#PzOSVqC4$&w>(%M(H0vB_B&5P?@Txc|Gk{ED7e_b?$>jK&=@!2GeV? zv|+O%^7UnePdzKSBI|fnsRlWUm%Rnv>!`m`slQq7Ij&yrujJws>KW2)kQdqee@g9Y zP%SQ0dpx)YPlQJM5exar&ip3`fjzw|6)(33_nFjyDvh9j z)+JJxYlt*opR|+1{-Ly0Mhky5H3iXrWTI%8A3rWI5IlV8U*+k}xSc-?C!$wm?=#}0h(+6KK5pa;fBXeFxV(~w6;>*waiwze}7%CXNR_o zsRKfl=48wahobfQ?=F`q4=Ie&3_*;ZPuSC4Z2DcDIy zK{wOu!|p|~`i8_%Nmip-9Q-dMEO_piILrKE2{(OTmmRp+LT1=<2yP4gIvuf$q{7%- z+ybecC-Uh9*|14Di#)sIiM8G!oHIM1C+?zlm|e+8Sk^8Ecx+7Re=vHCYb*=Oi(&Tl zLKV-0umVfvwaudwlvMAB>(})xQAHWJO_sHn!dc0fkT!*?jATo!1i8WK7z1~#w%`sL zAS{oo2ZWg`OZ^VjMZ8kYCJtpO*hOztcS3Fs!jt4m8#o+iC+3Lz(1P=Mk6A%@`_lWw zxu$Y=&A1EGJ+BFGf1P25D)w0J3!I%aouBWrW0%k|r6MACgLdSfqTXX?<#a+>D5eR^ zinY2OCwsr4oxHWF#f)Mq=`i#p8*suCO~m$VjdA0FKbTN!365$SfPgb8L4TiarL_0W zs!N&VYFljEhF%=LrU$Cuajdu4x{5#?)w?xAy^rEtuznRbe^4{^b{cv^N-P`BWfBBP zPmIJ{!=p^xN@4{NdJO0vy7d%|NLZhUlH$QH{=$G-y?~Cx>B=0RQ>?Y8^mK}>lJ*$V zRba}o59G&MWAmg{VOVN=6R!p|W`}pf?W31uNE>;WuO z@smNleN67>B@*9tsZf5`scW^uyjNKIZM+(`r{7uv|wc(!spP+wUGsxSnz6+!jnh_#=^44{ewuLJW0_%qR7Y}Ps95-qc+PBPWuVLkzx|7ZPYR&Dq@i)|Ueb|T zVodYb-zUKUVj;=?chK;q9jFNBE18SbVDp()X(ybEtY1-e>i-OfAS{DEbvWs~W?hV25K|EsK^%$$6ILF>&J~~w< z&UxlPQ=>eoOUc2@&uG^!%A*c^HZdZPMSRl(AQ(QmG53e@QT&}bt)Ca>eipFPjn}43 ze@my{dBP?&p#TUWth#0f!VS4y|BsoCdkLw{Wr0A$SGcF!j{fw#VIz58vYsE zg5o@Q@q966t@@0`S1FU0sVOt~dW!9#x@=_3q(pA(Ls^O6k79xMw?s^IX5Ct2^y+P6 zph>9}M*sexW*c4{huPC?siU67YOHY%f6#z)N9KWl zaZb#6$SFHHs*$7H^{ck0<5&M1N`~M*8Y%K6OvL!`t_AwW%5x`EgVg=G@oFQUe^Gu+ zO7tIt;3eI3UU@nL7$W6(L?(V%iENe9je*h;TRB^YRAd|9r-(pt_AGiuW~sqhN26{T zyG^Tk%FbCKLMiU0-!M}s=rBsg*Z8)avHTz8r7u8+Q`VVfr*rZAY;M?IZyuSAOgiQs z>Q9(J@1h$`2C9_M`&G2nqmoPjf97KR=YzG6g(I}AG^ye2=+cUSoY-iCRL=Z_DN5BqKmBvt&`phjh7B!`}rj!8_blAkTS!^#hB zp~6`qntfwA&0oQjas)6Gg~TeW*zT1dE4UeKioTEFOQhkvDAZ;gm!0bkO#M?xzsMK4 zn)o2xHv+8j1&BdA26>Voe?tieuYBzIN?Cu=ezcN-GpLo8GrvZ`b2+z;8>tG(P%iZ& zGfUF;__I~nm7<qmEzf1L82oY}HBoVkX4Wiq7;DVA(McAq-(Fgbjhe&MaQ zu$_B6TzE@qeIjFFOP^ta*2PJ^aBY%m4-WW^u%K5GI?#FOeB$QgHn6{ylVe9_Sq&pa zh7kBLSN%F~V<=x@e^~Q--x#VONbgDY(s^h8%Wa|L*?c}t0mJ4|+^MgN^g|l+O3n4E zYUcuFo4?0U{uKvlY|DxnwVT_bh8^Q~nx-&Y11vP$31t=x!>pr{LSYh!J2Iii9@>!K z>Eq}Ra={#lF|`j&AL@iIP?8xf8fQ%WmdPc9Klph5TgF> zgLRNcS#)2u-(w>R`w=%3Fqfda5eqWc5%h5rDAd%qyZfhCDjhHLzKm55T*HGZ@VK<} zAVD1Ivd6~ab5l3~p@?ulPhx`##V}XzCg)k~Qn(&Uo2plv?%V0yW=j+QQKM)*8A+T! zOxsUjd_Y03e^j=eLjnpKL;0JO!RW+urqkD~!b^-sKF)a)$en6;zAAFx_ z)yQ@m>*)gxE#$zv$hD`d((^DDS5-xy`YN=WvR2wJIv z#$lrHavk0^I*)_8!Fu%rlgj$r(?Jt;L6XQ$f86>gf7PYNT_+3beWJy2zrf)bvEx)D z+v_bGetSgHd1e@1A%ow0q!mCNulp4M$FO@W3c0>fGWDJd)WI6}32N>LGOuX;+#xc= znSKryA}2(sK_dHvy2zAAw0G@`qRW8HUYN;b&?-}NpCi_nEXqltbKT3$pjO#{@QW-A zSwnI=e@rNP!Qx)x!F<({U6P;(Ku-*JNS{eCzv1yqH;_}24+JK5je*dV+*0oxp{}W( zI}fmiHSm#Xq&wa5Y>(vol-~ALyhQqwYw0hf??BeK;@%t>`gZce9$?Pc_#kx|uWG)R26F6rEEe>BH`w|-}%oWW7M*&?B>Py(LHN1(;Kfn6I} zQuLC0)mpk#opgS5K>Z-NV_7F@PLwk2>}|&j9d~yD8H67-#T&EGaiq?oRg^wy-lnq> zxHJ^f6{tHM>&ycOM8sjlKDH3HJ|HUUZj0FKiFGErN)>|V2aM^uYoa}wy1|qbf6g#) zU>}sfA`L_GPV^-g^OTUr&G;jdt1v)ixkeZj+Oy~~qo!TG7HWOt zE-Q(XRuhe2t6+E-6B$Y3?CK3je`XFB={tU`t>M!J<6(Lu>?u}#KRJrQ%YF!gy!{A3 zqZgLHlThEhn>!swxm&6SZ1@hge+-ONto)cCuPiG$QsnLnc`jvx>|(<2NUgaw0lPdd zI`r+ze~Uu_IFUvcTp}Qj9G}yah1PzA;Jjql$yKZHVE31t@zDj5=g50s(wOAzuF~?^ z?s=jtVynIlVqPWXw;=Wp0_B8qI{)$nm4_@AB;Hc6T)mZzDt{RI!*hnbe@e-98jfUe z43QRzUiVqnBTEyyWICgKsmsXHzo34w9jmj+)h;mI$SZo9Lfc_Fj!(d_5~=@GuP!}# zFA!yOF;Y0ZN=yV1%#Q7YaMTK5*Df&3giM>ZM% zr2UeiUx9SwY#Da`iWOrofACxo(*O@e^;RI&3y(b^hYgrPoeKV*#MfN`uNyqKDc|o2 zvCnYjhok;N5a(HD72RDE>rf4Y<~zYBUV0#l=~`3&7+?MtS~NdIg6oa?on)8l1jL!hA)aQRVjTJ$8;p1|n~}%b z=A!R)@(vhOpze$ z$=avl;ybv=^867^%A(1$1vj)lkv94(Z7b3yBPW+{aIAk@e@&KH%t=2!arMw^Ays?A zh-$f3vqCQo{||4G^%3L=h{xlSU}(&bA#@zmCr)$%>H4QXv&Y$1d(|m#)#)5hl+Wz- zVbrd}@!ri8dPv284!D{;uZb zaFk)ay3TMVE#uW+Br%!_-JEL2(u){Q;@)Agxo++3`YmXXSAd?}cr-X-f%RAx(Wi3>ym7YoyFH}80MZx<4ZDf_#> z?}!9ee=ZY9hKybZBb&JriKDc6m*|N)F#;4Hy+@!%9L5)oo71!4JdaLwy?=*Wd?n2s zPzJ1=c=OqTh{5b2$To$ zd`3mkpht&?X*8!QZjhNAwMSoZc(32Y@fr!}f6fzi1>)z#G8&g>WP49m7FN@r$XnR0 zqgVAaVR1;5?4roGyC&nu>l(7%kW^kO1`#tmvr~mwzHjr$O4`CHZM;Yb8;bml**oE3 zi<7YZYE|f{1=>LWgYQgn(Yf#`ggZ$xsoU1wA_ZJ^!EzZ!IKHL(ct0o>56frYOu{od ze`PaCF@rcXxftAhC!#OAWeELUJ6322bux$R9jgZ+TNjInG1_5KDFemECsTnjiDL+F zB{J~DiaW9h&o9io*2_>hMZ=SMd!)x{Nc$E!JK!8nqv3xf1ZPFByeq!QwK-r$6=3$0ajhGBJp9f7)opJ%nG2JYSDb&FtNvuT2P!t2v*V9@A8d5GMtZXzCdkttl*riks*Xlze~Ar- z96)0*Xt4i_Hqcm|{2ZC`$n7cHSmaI#f3)SR!g2W3t9lxhYB3lI*VR{>I6=)yZ$__b zAogRSrxbEPKo*896d0H3wS}`0>SET&?aMZq$u6=YueWdiLRiMf!HV@fWeq^BM$@F% zZ%#NKX+TGH;yHmtwHE(zfI<(n*;1&DHXU}a=%iw&h zisKp3Q6NC zS8D_=s1A18P>!`OwZi2iV)TkOFRbqG%L!v4H=P_)h`5>=NHY%>%vvz=vga^7{qmd1 z5vk1U_&_va+#k9u33m`}h=SgM)y$}^$;#p0nToGG1Q~z!9_B$?X2O1KX`z0D(W2Qz zNBLmk^L65{)1$jeKv19{f5qBGt8{!HD) zy`S1cpn!DXJB$ncAj#nRiw#$?3OB;J@>9Yy!3H4bs8gsNcHM116^fKnA>uw4&Khrs zK{sVjex2>|TKE-Gf3(0mdkK_-BZZX`ePFCCXBC4vHJg;k#&!{l8V9nF8ys}l$QJa=lg;?TJ zP9|`It>XOJ;i>P`U8b?9*eO6(G9RPwH_7qawp$Tch_>4{e@xIwQ02dZ4WHX?dVYLo zB$vjNarg7%{H{G(-mEiP8d8snS~1T#SCZdzn^~msAynHO{&8||kY4+tKJKhm?rar& zqs`uJb47*4dKcHffhlpY;Qr#B|uxy2f_s?Dc3~#iF9SLQ_WKR)>eM%fkcOy z{_NxdCRsQ-V2L44f#ooQ$VE4&wHkI0+RyCVW}$M*AZPI%ueYDp^YOX-i)NxZHok=d zdn&Z;SQ&ZSf$gFsIv9K}$2(@tp>%2F8z-mRDKgv?6=px^#?6} zBCnaiW|n9XMR`8$&{woWy1d}p5+wn&?S=ft1*r&fh5lBLudIk7BNG-SlN=Gkm9-~|MG9?}HS3x*^eXwHOj794&y{|@{ zCF=FLf7H(~qIo_(ge14Fw>YyDB#&=RTJS_Gv~CDA$0g_7LyHwIC4nCaWJLS2tQU0Z zVCeg%OI?8NL;tr=e5TS>q1JQDry1`Fyb4Kw;Qm-#gvWj%+^ey1eeXs2gP=~vh3c{R zX7i?;Va$gwx6s=?XXKyTk_tb4#ho@$a#Q^af6C#W7>z5c=0v;E>T@;2P!oQ{0O>>} zkvPwinF(h-bss9gqW`KsyQ6ww)D75M$yW)cUeOST)xO)PLV6M_qhuUPH}-$dq*Ll` zgsN9F)Kk@~E4qdZ7$nH$L+*IOBLJmuA+$g}Xz+%|Gjm$zX~ts+xhT5qLwKm7(NPp) ze-p?Bj#BP*!9Zuid(Do-8!r585>7%oaA&W1mB7yFC97{6vCSYJ;T072Lk&SY&o`Kh ztjo8NCeWL8&yq7n$a*g`G-4_uRR^AYRq6Zl`U7kGGtZ;{5WTBmxjq#_<$5Ef$p-on z7vvh4zNXgMURlj8TZQ#!dvx@&w7C-QfA9kruOeqD12?7Y5`b`M^$>MA@4tECxRVXq zz&QGT{B~n?(KLqlI;K^O>CeV!-Hh5m;l=FBVgdH*p5RfA#w4 zdI%e&`h4+aA?-vR@65ee#E`ZzqY|TxA%;gdkhnqQC+P73_{oU9LeG1ULkWRFQ!IOB zcbNHPQCp7-#7elIg;^$<+3T`nv_mJhCp#k>uZ}j4Vz%`Z86*YUDYCjvp2^_cp~(sr zjTdUGPn(Kt9%-N5 z-W>LvmkI;B6xMn^yBGdYD4HDhHCC$;k~-Thc^JRT`K1(meX?5m{yi6Vj#hC^4o_`HeFiJO~>Byv758) z4K$!PfYGa@q1r65yjQ$hyE`-7Y~s zLAtD*@GIxCn@s<%G-?E8es&7+~OQ;2_!KJVNTX>kly;;@g*+^A%!jK1J$g57ZrGEF8QRNQ-=O{QbOVxe+wdZ ztv%}%wpgHcfAhIePHdSrgZm;{9=_e-4p~?rcQ1Mrzj)S4g&ZvgN$$&R68T{{yopC= zPbI1)+P;b|PBK=XfoCB|kr1P;MZ)+IW>?+kS>DpKy*trJdSnwD?qA~yc{M=u;m05C z3<`Go!2_n6&zNLp)U0AE*2KA#g9p;+BZDkR>te?z4l75t*{C{~C)MQ^ySj9H7N$5FPAZ5R=zWE&_g4^iJ1bh5J=gHM z*$;AyXnpgv!iXsP4&BcY!CSggJ}S{%ro@vZe+0p?qa^!}8irwmTGD=*_KX47Lu5~B zvi2@1dPLWnbHU7qvy19vIQGF5yK16TTR2Nu(w!k#FhO43*MUnlFY}@Rw_wPMWOCM{ zDIt2ZoYuK8@;AEc5@@B0@cW&zW~CA!OR$`U26-p-b5PL`+eSo<8PVs~n=S4_tWFvx ze;ymrv+)3l1Khq}g?w)^!nJf1|5zE9}fH}}8IX$yl6~{cd*Q((4M|~&k zo2%-evBOdJu*s|?l(G&0@OP-4(9}jT7=*{p^TvKv*m&LXoTzWb)VIR@_RBbDairM_ z|IAS;PHPMPiQ;l(f94OpF5n&_sL!`QeG^kF?BPiv2D(kdMO=JB9#Ei4rQNAvpLIKuz&S`Laj2`w+ndPUh zrcHusYvn0!VFjclEVUd4vboi9)RR96LQ1gwRBjd^PZ@?DCJpO4;j5obf35IgxAwk5 z2WBJ=ZFJo{X&%Ew=r9$$q2HNKWQO0EGW&a>j_N1{xt&GS#Fn61Iw4mx<1UKpiEs-F z5%;v(j9^Wf(>S$8M(3>ik*U1>C&AbSj#n4~cMEw!%lF)C^xHI%*#`s2*J%QIp(rFF zHYoe8_P@7Nz<-E)#AjX4e*l99ilGfs;lL_kNXH&zI+?|fITY-crY@D50d4#?mgJ;l zoh4i2P^&w??G2*jF;%C8hrGNcqDEYDGg2P@kOH+>x42 zmaMtorPwBTcDB@2IVpAY6CMU&6Bf3LQSZRv(D0nN2s zgGg_HTahne%{f0R3ta`$mVwZ1VxR0+252NY&haXk%*eIsO{Wm#aAA1?j0M#)+#L&~ ztkxtWh%{S7=*+RamDzLg`-_np=*S5frr4a@R{PU#3M%n4v3a@X@*LksD!v7K_0Wm3 zjS~Dyd=M|ZuN?cue?aP7=L`zgpM-&XCUNDV6$w?hZD+}w>RI03k?_Z19h6lYjoUQ_ z0*m@{Uou*y8%5z+g+s3cWWTF$O?l#Z#WfnwyAQQdV5nh(2bqJj5KOh%z`FR?&cW>M+*3E>>Bh<(LIK0v^IDysN9*39yaFW4dXtBUrF<4mkt` z4@{MWvrnC+f0VO^u=pAoS3~k>pK1d%u`BU#gD|i*&JV^)u?N5?UC6vC7m=ayB)a#` z`k4%`8J=PW@6KC)w`BDZNEu^fb-jvCN4qf>2t-lI3ojSM8PGAN;~iYlBU`{vHj~hH zf}Y*N3eL-MI6r~D6D4+w)9U*jKpleo&IF#P3Cl&We^H+{*fL<71p@MU7QRxHbL^cQ zEI=K<#W1dDOF4pBM?PdeZ)u?o!1Y;%Pm&X^7;Y!&r34$*D^ejFE%-W_+e}j})8}@+ zfnch{U=lBf6wf}c-SAXffXP}liJW&ka!LL%3VApA+8jbR7N&g$T~$nwE2WqGD%-pj z%25A4e>E~O230We+5X*|Bm1IoE61o%x;t#&%>(7`f?(tESc@7IiwW$j=%_7*Nz`E| zSxNI*_F877jsg?J;kO>)r@{wLmvRbIY@7T7>W*E)3B`N%LT@rH$*kwBqZFqRr{g8? zLZBP7m>=F%$JCPMsz3d>I5siNO&qWoBC>qdw0v8iAU1 z+9e?k2K%LyE#>Fdr8OC)0S@>{VZm4Qd_G&Uy-q3Z6{rH&!`ey66&p1NG@6%V-pt!u zT7?p3(eJXD2Kj)pXHY$xM=k0DsSaWXV@uS#z6Udt>f)()s#u`q$EKU1>FhXujH%>W zf49#ygdqUmhR1Vbr|8rU#cCF#3eE<`^Hh?j#|6# z8x*gbyz*G{1xG>FzODEWroKo#7mGRrvHiz`u&Rn5JY+AUQKFt^VtWqc(UCVzeRRc7 z`7C&xg4rPd55!0xb;)P?-k+riJILuue}6~WMi&3Mz=Mp4uv(lBBpXdj2bb9i+l~)L zCw^7*gnP==j<1n}OTL#P6=Mn;;O8K21!XJ?>!noYQl*YH0J`3doSn*|Qe!}CrrS5C z)07gAAgsxc5>66Lpp$k(o|M=Hpl`geVq&uAoSqq1MvhfjQoSuTEUuUZn5OLHe}cvn zPz|%6KSM$Xo@-pln`T=^A}WMcF^IkHA$p5#(QbmVDnwi3+6ixl_on0Tqwpxc+63P` z`*r-OUU5s}A0brUqZ9k*zQx2a5`BciwbB5;9V+{5ahr z=V7!P>#FW26(ScwTB&ofwMj5Fe~cTMyQTJ*S{#05WR$m$8}+Kk0Xoi{4GL+J0WXIJ zV>2Q6v*FfvChY7)^QZ)09FbL+V;5noW#%6fO6lxJZNejpx`VV>NN0mK7f9c9U1fj` zWgE-9=HJTvyHyV+<-022$v>i$EbgXKVwfcf1n$A;8wH`ya;Qz^;nyr`e}FXA+;u}_ zZ1y-GZ^}ckmwZidTV<(%bjYgk%3FzZlzOZgRex#2`-VQ^G3(C(gJOG;-trXmoU^qH zY}~|;;bojugfCp=%m8aR15=5sNOJ^VMWSDvPO;wKkfdOeiNl0?d(G#yvf(1E^(l_P zq{_>iq6})Ce%X{MtKkc+e~2-{awV>9G|P2GYLk;V;+UNcz4ukOtB@L-3*T}&;h57% z69ox^6Dekx$zdUi%VYsKzk(14G6ZlmeuAxAf!Gyd5@OCx*vZYJsGM3w>cj{#(1XB5 z00KtLO@N7H^+Frprp^nMjrSD{r&UbXamyz!;0R$9N@x6~e;>IVlKQdXg1#CA*ZQ5i-I9gbY-^JH5`CpdM3dwj?kBiitam*-gitc>SVhM0_$d^-wX#+CM@i_~4ToloVlry7E*#7vC zwDpj+=4dG*19H~s;5V}&?urL$yL|8q)I4PuWbe_DW>Mu96#2M|^XOdh^o z#t(T&7LA9~gQR#wNxz|#C|QC~D9^hzCP^l9!V;AW-H6hmC*4f}4wYcjiRVIMc#wK8 zWyNC@fw?v!SY5+Jux&_Ximo{S6_ks*;P7dfj5}K@P&M>Q&XLd;T`4S}ur!R!9DoE- z*>yzR`wi0`e_h{1x{v)}FPF79N8v#$R-mOwy`%-Mo7f>Npl!PrSgPqZy_C;uT&=jp z{Km(DW8k-o|L6rbEXeJgl7cw6SZ?z7e)a|jpVH=`f634Z(}!$=UoRVY(xh*bAD%~0 z#6>iIdz+gznIX_mTfO&e`6t2W88&j=>fF30*fqvvVdt`ZjT4d|$%kg=h>Kvo+UoI0 zr^!Y4f%{iiGv%T%I?nd8o#3+E{pQ7%ZrxWIHk!%mzWnIy&-4pXQy4kP+n*q*Q1$MBXd+>9a5 z#N?r0ZRSC8CqqrCFK!2Vu*%f3GN@z2>PiUnpKc?2PHCt~*1lRUs#oYMyxj_QuTe)uW1hOxIb-P-BQbW@iL3t1gFNoS6`vA0`)P<=K|#%f z&Mf(c#CbD5FIBC-`~jZ(j8k`Rx3_*5k-17{Na_JurMun=<+Fvc{F?92#bA^=lWydTZ$%xK8kR%|Chpgv#`y#*I(BXHH(N!e{;ZueRwUnQoo z5k`;vR6(nv(;*NtU0?(mVxTipEDDzle~*KGsmhVZ_~O^+bf?EHtac5v))Ufs`3lkJ zLQv&}%W{gK`T&T%GW(;heCZpkkck60;S&XCTl1vj%=5<-3?}*9BkV_AapO9%)`zOD z@XL)~tl!dRAe_Kms`29e`(b-y-Q#?ckO7tQQRow~eWc_*4^-zcO1CCwz(#=qfBjvF zNXDlaWt7t_Uv7Sc$7$Pw@cy6RqkFYb$Is)s?c7Y3^h^_Nm0J-y&V$%pk_N?{%6aU4 zG`*z+>frm!h@)bjKOeg8ZwA2@F+#9wmygELt#A0td|mR9rkn(gheXR$u1Z;r)<14H z;7;+x5F|Q(vY!^nP*$48AJ7%!fAcs9$-xXTn%d}Trj3EQ2DHIu8V>!qvP1Un`IXS{ za-sCwAtj)Q9acICGlZgRZ?!q+-+ge-8a$`HCH5nvk!y!1K60fVe|$}w4AOjP z=8MTiL-YtY8|R@f22?rjIVzOhflbPhL^54eOhr*1Upaaa{NR==lh*%L@HKvnCduZ!- zY+7=h*0x8dc(I>aB0!pxf4JoM=4S?ZGQ6a$!`0&$+57~Um^KOCJ}oZ!8o9Rgv@aP$UW zwfy!5uZyYXEy)qK=n27pMd;h60LT*M`dTBPV&`p-8Aul+HZUJKr$*sb1|?@po=kzz ztSZwo@D^ezeJq&sWi3h*tRD`)Q+IZ17qCvg4n#Daf z3-_NTMUYCNd=KK>FRi1g$*}-;TgGX4VXXiX%0ll5eBA zug(1g;k(R=5x4|`JL8)Op?2o}C>+l|Oq{Af#U#CXIO)>bvx3MNC2tO-I?xh(g`FP- zV{agie<4Z3b-z1CX(b4R#AAv(>v?uA_hnFGzph6PeHlgeCT-UO*Y^@P(UmBuT4Wg=BJ~O;)i3 z%Zj#YBP;3JZvCcl5A)GA|8EU@xqUu{Ua-@g=ms|3(J}~Namgom}+)6ZVe~lz9*c+TR z-e^@zrChNa2i$()3ZPU!(}U@7(7FE%mJim9g=<80-d%v%4ls}f+_(SyJEmyTIBH)lccfomDKD!jg ztq!B-*C^#!^;L3;jC6X0+b#-Y=C-Q1J=LC6(#3r6mGN6XK2w!^DR>F3cK*{P@0j02 zuEyC%Fn2{H(sUf%cULjznsX;|e~{E#mXhK%MzwA^;q3eWd&}8F2~WoE-Oi{90?&=-TD*FE2qr4VJQ`p#wk<()OFCJ$M7}0{u4DMM!l-b@r2{(o#Y!dkMXWI#`zb@ z3bB4f7Y`yqbT(Vgwykahcc==^UGXS42OGFHO4aUePD6$^;<-( zPNbbw>IuN&{OIoBmud9s_o)oQ6_|!F;{OaFm~A~@?IV9%ug z`(}2lm&YLbHrLNVYMhh6t$o~f@dtzJlPB7w`z0smt%`(1L0=*3f2LjLTcDL(c{+t3 zAuj-&l*-ayGZt|6T`{?L6K@6Ylf&uc{NWZVxBTj2im5Ft#5T=4w%D}HiwtLqgSM=Y z9?jvjCa(7duq1S3{Mksdp~FFq&$wb5an3sHM^K2B$~u@OEdvPSikl2eJ}OyCM-;W1 zrYy2tPaQjm?(n^de>*5h2=c*fXz&`=*GW^e`0)`v4*Fq^6Eqaw@i%lBJoLM^hfuK} z#p}Dn3ZgTSd(~YLeq;PD%Op#`p0FVQXtnS8x?V7KHZ%My7A4WwbPNZ|*grieQv|bB z)5-Dn)v*r4uaGf5a9K{Z!{$7L$8_bH+xVm+st8sOsS5?wf1BU4Ak7eP|J%Mogpc^w zZt|)qu)knnEn{SLzhrRi(RUjIrQ?&se8Sx5b*Q5!w#9h(9oRK)ze&2vCEFFrB>6j# z?)53tWmVlDs^u!GDC7PevBs{~HZV-wJv~@&xcrf3IYJ#u;pH-+&v@Xb)bV46W^mqe*=?yz~%i9{uYIrK&@n`$j{_EBc+Awv4(dkrkbezd&*Cc2#x57eS6cU zk8SoT2>*4Pz(3qPYJ^XW7I}6oR}r45N6f&jFK_Rr+~WFvz0@HTbGpj^jYd=fNa7mB ze7(*=@&L816$AQ|+%=*$2V%>4A@V@?@>Fuc7XdRZf575AH&1T~Qsa^r2T=B-`FKYN z&`Cz@>bg;WY~FfPV199Ib>=&7`8q|!O?%&F)?xV?$xWwyVyF@7o>J(gaH}eEyf{R@ z=g^IQVHud3SYgN1_hRNeaz^}pDMe2}M}qY2-fU7N(<0Bbv944Fa@jj|m2Zipvn<&9 zpd_9}e-I&r;vu>VbGdazku|0ajH%f09VpkOc>v#v=B2V`e_-v-QX^vZtu1!*n!~#6 zB_lPPlftuIwV;5%H>hWnngK?^z?!&!yaXRfQcqwcq`U9N%`W(7>3=L_*lwlqJ0Nde zhqzA9B~f^FXK)l_zek>R0(9N=3usl8@iN&d`ZgixEFYPvv$OzRA zf8$EyC=1ra?dl@g?6M)wEf#J;1f@5it|8p}y{qW@P5J{yP6=VH23Be1;^xjlqk+#+a3zGM zet=ho?O;93leyvp3f@H%w9vGs;+M&ke;sCLJG<7C+rnLoyByAeg#>M~eeSn$kX1$X znu{tDVHvB6(d$l$s+PSrY)_tgKAroj$fz9Zx(&dpeg+##Sv=KruyP!gL%yi9TdM;b z#XvTNq{ejS0D^e@#!u^826Xa`(X>BCaNm_$t<88451x#HY{=Pg?NPxG zxX0s3-6wt-*3}%Gj*8V_$dAQXhKsCh;_B-@s(%mI3t3(Mzoag>ShTF#ueDu?T^@P1 zomxbKK6REFWZi$8@w;4lvpe*nJ;3AHIaf;T{2^j@#QX+D1HL4IL7`0H15?5z>}~2W zQcST8sPt$jzzStFHB`_XLM*YATSCq zOl59obZ8(lGB`Leld<|If2_J?RGeL~C5*cU_r~3w;O=h0t#PMucXzko?(XhxA-FpP z4+Q7S``)>8XWf}!^UaT5>p4|*cI~QN=d6BKHzldE8l#Arg9%X5!5+lO%EZD4&`{M< zHnz1jHnVb&XH<2tGY0%Mb0Sbuia7&~K~@g-;>I8#A3zIe1`r3De*)Op0Ia;cya<#4 zF$YIaXDbU!5P;?{1}!~3!+%-+2?3aR{-@{fP8TZ+djQqn2RERtgQFeL9`qOD|9Ybu z5C{NS0s-b$wm^WGlJYkhMJWJ{l%fVe3TO{>Hns&QyPDWqnF8dkOo8?;Kw5yggEPSP zKNbK}2YWNCe@b&VFrzz-fZVM}W1m=H6MaJIT0l>=gA9gcW$N%)X0iFMC5Y0a`L;IJ6 zv6+LtttY??e`t=ttmpvxn-W0tf2T6j|2vWYA4vTFMBx7?^8Wu5_rGiOzZ~NKzvubC zLrc2a+A12`0sq|u_|H2AAP@NGlCl5aqK)mWY(4)^@&7$i3-})-|Bo;-AmhKS5V5!T zD+db`%YPWHTqLbLfM&{8AX7_#xv}lvKK*Ogur~ubf7@Ew1OMvzZz}yEG*nR&G8UF=h{jarxG054<1EBl2Y!=pki~k>= z|61w)e>WHjds7Fqf2KtZWNdHtcfkIq;UBlDtF!Z8UH?7ve~bRl^}nMI1bP5X5!QY> zn0^hh&dAOL)#K!iPK)af_On8chB}rtsTUUp)H?L}XGHAsRvEq3g)%kI@_lr8E}uKT zAIj1ljrU{QQun0+uL=l#$!P})(YL6&xap6Af0zx*kTWl|V!W?^$nQYuaIt6}?MP;0zUo1exD_pRbbE#Q`EWijXy{yox*wwKq}#`DO($x8=hoOu=VgcD zLwQ-Ws4puVjmba`<6KO>Zf&oAi6-c_`Or46;Fr*J9nn&wBXe#JXoCyGydqvdJ!Sm^ zqkl*Y#Q{CaYivg>bz~prM1CXiy&?pt9WMco!Xu2cq2!#Q&VZYxtNTw6% zq77RK;N9P{%cZ39{fl_>*Hm$PgbpKp z#ZwvS*&^@KH~Nmndwi zfb=KLz~L!sCUiS?Tf{-aT-q*jVIEAX?%|=^5n^U|PYNV~Xb#LPxoHdz*5r0MM zbXzFF@O%c3Txq=((YVR_mGy=9q5lvIP=0Sv!`4++nF0R5YHH1VbeDRg(lT#?J3kw- zsg{Ckf44h|&pcAAhkpZw3z?CU)=_VF?&K8sVNE!By=9!fqeqti8vn^lnqv_;hAb=< zA#e9G=)%$iZ73^Y?~_PHp*9ej*MIghFFdXXX?F@!`T5Sj8V)hwTC4Le(4${qhaX_A zjhuYE?`zdou0O5Zwb35&1x7z~m)a=cSston`PH{)?werckFS?Bmjv zw||IWBXTb2SHWoO8&_X3&K}=xAAn`)v(MsBD`%h1GU2Am!jj5yvY1c_GWQ3Xp7)n} zWLCdr-iya^b%D@qJ*3=`CQHGBiAsZ+pQl_UjQde}P#r8+L_A}BsKMl~A#!!)Uavm+on?9X&0{g_okXy(a-!$~7 z+$ldL(P5S%1AQI}*%`BZFs0CpY{s6MN54P=vl`u5Q8m*ARoa6FxPM_RYhvnFz>d{c z`^tLwiE(?!iak-s2#jQy4OiLTX%SF73@nMG5YT(7iuz``U4$-!HgfujWpj#sJLzUt z_FG4}$uif3sN*V~y--93=el(d9rl=ul5EBA)104FMur19x_c-Sf_5R4FAI|bp_1V0 zL`3(^9N%kd8_Ji_QGaJ2YI!E#4Wer{S_XC-x+%jQC+{`hlv}dac2*5__cFFh+35$; zlwe;wEN%hsC;9b@Midi z5UgXz4>+%TSzZp7WE6R;(d3h_Z%74g;$C*S5$FJhQHNx6& z@X(u>#VI35_~HwqncfO1K3zXcf3VY->bPCNUW2aerkgUoOC{_&b?UxKy_SV+|=I zN1gi;_hVY*xPkhad%Drsxud@}4B9z0GhZI32BVGKNJ4wv^fN$6rq(%LnGO(PPky@pMB|(9e0;qYH?6b60v_THuQG2yfkeRJmNmA}O6!Ls{ z-bwIV4u3#6n}BoRIs?N5T3L8WrAk{)-R3g*K*=X;X%p1lM^$kO-;=)Ry_Qp=e^?-2Vo4l^j%N>;Q&Yk{m2b(LRlWfw823TgfD zY&XX3-nK5DGOeW8aG`QEP-AScyXPleR6+7{_#vz*%`K%H$zoMpFKFG(e$X}7(mT+QC9Os0 zeX3PgNCm@Pw-hE=J#ZCh$CsNC;LSYK$@oNa+z|GrZ=q>mpkPMM7ipZ!MJ~*bB$%_} zb$|WDrre<%#~7^T#iEND$W$jTRXYmWPgWl0f7f4H8rCf>?F!|ZWFjlv9+^QY=oV6 zl$Az;8q>Gb<<5rn&f;Dt{wuw9b$j=V({G_!#>Q;(fP<7(e-Px-a_lgLSJ2be>)08B z1{n7Ic!GA0|688Db79#E&`(C$;M%cC2Gy&Fs?AxMQ5n|ztP=awo6@y@UsF%_5`W59 zEPOiLxbfxSaTo)Y5vjf>E16k9aI6dwqE)WOY5vCI3pE7kNK$gFP7e{~#0K+bQP09A zi7&NP8^+yRX%4sVcGOs^l{bRCRIY6G($gcpJGNPKekHf^qFq3zw(A{gk8!%32rH;j zP-FcV3)34OWPb=~U$aLN`2jf2Cw~kwTp$7JdBrSf3k>n6ZzoI-8K!A${#-( z{qDQh2)T2N-kVV_DmO7yRq?ZETp!qYm%Tvqh$K|o!wjX?Iu?)Qqpr;DgX$XuL z(~L*((Fe@lQfUoNcF^-dHuPar*XWpFZtL#jXA`mYl*d}n;UubHY=5dLTpvqslMow` z8OD7iL-OMQ9!uBv2siyrJapuJf#A;A7hy3*Z{bva`FfeOi) z?6c+jsV2Fqb2f%(u7AhZtq4(iexM4Fs-53^@VZ7Lx|HOCr+rYSu)$XGA?o$P_b_W;N_wU9l+qs)l=t5}xefEhmV zm2Dxn_OnApA~;J^{+Em-C}%SREs#J2fstD$389}$1U%PEvVTa2a8n0k4(4=3 z5#kBVXe%@xv@I=y5mB_>T zP*Pd4u=`-wUR!}9Sy=68fv+okOZ>~tq*_iV-?1Ev8BV}&KEhj<=KY@WIu zK~F<|Pf?kVVzk5$R{af796y#VKTcAZEr8n>&DRIl$!ZXj{T<6UmzTeiRW^A)pB&d2 zB``b&?qh*RDXS7>Jlsw{P@(^nXx{Fk;`u|2-FpX=u^)A)R0^YjvQ2_3kyM>Rf^s+H>)Ivym2;L1xaRB=E4gE0r!9VxC ziI+D_-+ywm@JTV=xiwU8D6-B>kK_Bf)7Z2AvJC&V3~wq?RcZC|1;n6qO1kKVCXjx= z{oAZLp$-|X)0~}!^U;YX-b&E&JKbLUrBH|;31ou756k13W|sWQ?cR!o;vrO(vnJO? z1-S3mO1pv7WcUw2#lWHW#J}B)Z zv0B4)4rx+_GKgzNW|_}7FEm>LoIh(;a3XkNm0X_RjS&@-TyH}(+3tQK^%`s+o!(WO zWb>xj>+HCu==Y#*OK4$%7v)g(%7iHq_;k-ems7x9mhCMyxpJg6-BmXb_>|b!l3Iz zs9(_w^t+YyBt0@VR7AR7Lf>Kj4w<}@`ljnZnMCk$09>+G83}wvC6gB6V;XM~;yWHI zmZ6;cKC-?6o=2r1hAt~ZN`Df3qc%sP#fHZhuEBKOb?t(3)%m`C zLS|q4tP!@wI{@8Q^h$XQC%u`JJI?Yg6=DUXVCl&wPzrJ| zLwp*%rPxdpPS{_{%VxsXp-+qbQ-3h!?Y%w_N&ZGy3O+OQwOXyE1}VXZNIvUQ5#y@% zCuE)ThTFx~S34fMK)m3cj+Iyo4sY@M1UfNfnC(3_)GmM^sR3FKc6w{gV;Cz6IvEU$ zcHATJ?=Us0Wp@f?QLh1?KXJU2FqMBGFYPXGK-4r-U<7}jAJeede!;BaaeoG!A`rNa zR|bXAwCg$62Y`1kkUW1Y%f7o-4^^dKG<{gd9-}s7xp!tHT+_ZN?R>&abk*%q<#?!gutK%Tin931G8uBB$x>!VU(_Ove2i48&q77 zlQm4&oenWW@K(LLfvVu>yye?JUSXn4Dcd~z9^I>qA$e^s{aw3f?Cx+AjGL0{EuRmq&DsNe58QZDG@?!) z)A0m@3Kbntv*g?IvVSE^6E1eAyu?HebfMvFrA!ksK?0H#ZSxu-*$5@FX#EOl2p+*n685Zm-2nzKUP7aW10?q?~94< zRN2LLHNq;|&EFB?qRn`=X52hz*P;x=EU%yMsmhajYxJ9F~!n2t824b{5J*)Or7FSG7 zKh;}vF zaW-imht;#+>MK|8aMH)3ya;`nd!I8{X85-m_quOFwrMj&`z*J=K;DxRet1gAHXyeUh2S(F1#-?CCJ56@Qew^L*V!f0b!pA!}*P|0$a z;0GSGFMoNO3d0%5q{T@ulCV6A*l_XUUKs}iN3vC=pXH<|HQc%E7~yIt8OaY>+$Ykj z8?@Ynn?p~3O8QZ1K4Gc+}`wB#N)@JK*x;%^0|AT0_JXKUSB)%_x1*On<5Av=EIxt7&(HRSJcrF<&jei7inj z1D3?-y)Yn8lC=u2`gtzO)5r6OMcXT3Qqqb&`IO2J{%QD48%@#tW>N|BKCOBZ%1WI{ zE+?NqpL;2FP`j@h%6-}TD|4CwmjKeBH~r2AQ5#qt`Y<^~9u$RFn~X;p@|`9PteW9% z%YVZvxOE+qDY0LQc-5yB4&Q+gA)U&j{45v?S|)1Rw^5@(VJ%mw^t{dnra=uop2X$h z;(6fwQFW&8!ZTXJ<1&&t^}wc7HuF0*RdtYHpSC!}>-_bS?DPGb`zd<9CZG zlmimlErLJ*x=Llk6bIS!7W~7=9(U(m%Wf2Y(?YWj}3zMsOJGF!g=&i!1_l-p|hEFMqWT z&~f0u1e&r%*#v|FMgs0fMj8IT%{6ij@uw_imX1b;TqNkSgN1r&U2oY`b+P-Jm)UqD&zQVdnyb=Zq1y!=3L`=Mp$>bTg*H!$B4^=J4#KY#ppFKGp` z^<<*#o5qE=Bl>_%r#r{xOCpwo9Cy1(y*fg81$VEp_tfxtjKB8dC42sud-((B9b6oT zS?Bf)8C;@avfTWtO_X}duJ(Pyt8QQkoms!oaf_CrVFQQpt3`Y2#X`l-8sNS>3NgfvryKd zDtFiXXgAP9x%!Zzl- zx)aL9{#TinHFHt-q`N2X(C+8CAqZ`uP3(8CX9L=R#Ul&^CY_;Ant#0CMK>iZuHv{~ z4tD6Fi7S&5b^9<#wjJJ@p(;v)$WbRer&~;pr68@y1NNMgK$UPECw7Ftei9FbUJ88# zALEAI=h}a$J#F7`XaWNoP=N=hz6$s>Cj$ zZ4hm9(I4|rPWsGgJ%8A_{`Ot0_7so~x=@-~NV~w3yuFD)AGMkHBO9HKyUXyfggL{? z7D)*ItTK=~TRiNAl!ym0>09#hR`$f=kBV&J%kV`sow5v=dA5cPkNLYxn>{&>53k#t z61Ec{QLXR`KxTTp!$(B&bm^+85hw6z>S#fB#zO>s{bDKEAb$v^?Cr%XkXEzjC2V32 zChs~)wNMnJMx(ao@=F1B?Sn%EF~V}K{Hb`8q`|BfG8GPj#zL}iRZ`3ZcQ?W2&;!~l zh8o&HEJ!I>xMv}Bii7W-*ys-xFM4MZogE*?l*pR*Py1=?X<=+(U8Ha(8?SY~U55Z- zTkd)}TyY}t^nX2%*Of*7U%xgr+1zkXS;QRP44ICtk7Lqm6-*mi%;}<9@ z!SpX4zqB|pc_}T*nJhHlxOOP+z+#Pa+jKiaX$VEwBs!-JP7%gazPP($GeYq^1%>EF zQEWLo13Rr0IW|MhOw%euc4+2!GDUcHfA5w}C=0s*0RVS{ar2;~OC9Cm_k_56<8*;9 z*KbThdw-(QjFq@*ANzjyNcF{u7(bhStp#kxbX2U#5dEeL^XP5T=VrQ4HaVaPk5bLR zh^?re+TjuSB0FF7$sHpFNbhpfgd<)CIM7hz5y)@Hy!$NZq`5~Gt*ndqB-nPoapXH* zegjvs#$S?>+47fX9_Ve&l<02WA?B;o6S+9hbbmFKu^h)GZJ$=eRFqR0U|_<}yw-Th zauKq0D+#{<*0n1uU$|FwpWkmj+@)#6#t01AbweB6Bp|pnA)c$;=r{nqPIMb+)O+}( zx&jaykA7fAh)eL1S+ihXrX|o@bZ=UJ6wVZnu(NSyhdVF4B$LOxfb*?Qw>6&HoP$|v zHh&+C-l1gco$w@?_jZ^`vG$Y!8KT@WxHmsRMtY^f&8udDTbGg+Yb=Nar%7ZSu|E5^ zDPZnWeK}Je&re0J=qJv_LRIqL-(+@I;dSuCt-(ZQN?x6Pgx2Q!NqwMSULjWr6|GH7 zM!Uc;97w6TuvTJK7$H{j-YG|Pl(_wx@U zC2Cdo&neLkv1a!VyDJyn$8N85205gVG8(JWf6a@4XxR!jU47RTL}s0@nd#lEvG{rt887ftlb`hp!iWa`(0D{Q-s=82<8pM$Xb8ih zx&lIzn@^^cOiyAW{d`90tUp>HzRUx6PVT74p?AtVAW*3~TWZE;>=v^K^nVgwDk44b z!$`NwJ+-I-XLN{a2x#!1=HI#R3Fo!*wbjtro|k__XXeZbosXJD_|jstsz8GfAB#&A z2g-|L*e0!Q9b#2;d7n%k52C5ssUHvZsSwhrzorr%^x8pzONi*kq(*Z9xl^fpH|wy< z&nR(*&dWJy?KPI;x|fF~U4NbYQ$@wO3|Uy-S@{*s@K7w1Jv_(K+kOx1b9~EN4k&0b zBa)2$QPzPNGfKbZr$MK?*Oi|ZYKajLQ`DftIVdVl*HodcIK((MQs z*rg#Xw~rQ{t_UiK#ysff_-AW{gnD@U(hySp*qe*)BP&D^3ah1+SFMS9=Ql#%MP%&lWFqF!Jzsqhf9|$qAI%mQGEZjD zZxpE+{?W`LOH>`lOMmh>VvLER(^BNFA&1XkZh=%!EcVnzyj-CdL7ddqv%9Q2nf$d2 z;M*`VHFCF5)RdoZP0qN=d5-0T3xihbr`GU(wYQt3ivn`k>R5(&+E=x5W0|}4L_s?} zjDW8ODOp^;zup=Ci1l2wNO~(JFG8x1fM2C>G4F-+uIu)^7lduXs(Hk$u3aMEu6(;bF%>AD ziGDaD*d|GKkbe()voM#oua*9=U?wZuG(ap&d+OF={K+}#jOdk-X8xX-8@vQ4&6Rhs(8`B-i8vkS!(gC9`T9HacKvTo?O}KTjwQ+Tg*vYDxf2*6P(gI(lc=%i zY{G7rs79?z=}aSwP>UvjVGXt0y~(lK^$i3#kLHQXu7AqMrQ-JCgn8lb4wo+TD8l$i zLI?WFEY%Tj+kHM%lr@CQjjrm;a771Q(nYzQdL7JTy^J`%HuoHR%sWxS4H7z=aR!^- zmyWAjJXyWW%f=(q8Dg;XFVnd{sEtNHIe&G&(GAlABYHPMDa zPTqlRx__-lqVxQmc|!(*LqFc{^s4yq53~oZ*^!K_;JNc3s;ecwo<@v7p4LbghD_6t zFC912sVpNe2nSt-Q?pThLb|xV!KC?xx#>+LxHA#DkC*o{IE|KyPt^S^hS0eilT|7T zo93fwS64UA2K{>P2Ua^-BBBk;x64{+0OiXftbeFf5ApH+A;H2%{}eU)ChoqlnB;I7 z$L^BDJPDb1;HBkk<(yRJu+EBq$ow|qs!OX0V-Ckeog2y_V-0e z$A7E?Sfa2gBejZLnK*?K;)Fk27I}5BLhbZ%KV%alT+$0j=iM`-0v!Q^Bpdfm+t&@N zCN&=5J>&SUgaxnLl<{`6KKG;M2n|{Kn`{VRzQNXBEkgZq-Wd+00xaRdq?~~)lunOC zRC#1tRv23~Esdd$v1|caA7mAh16M;yv42-AB4e8w^?2sbX^TO5bRO=DcrtAZkP)vK z@5+ZufViCcCRDHC`oeQ0sd%&zTrduXBc_I8EZc5RKdTwC{w~R&!^uMv3x_{-D zqQ8=o?==!r?i}ebp!*!)fgh2yqQ_)#hbwbP zD$Hx?bjltMt&7Nf5*sl=GXkW>x!zl-qV`yN?MfBBx49Z$<@uihKMM2~{@6tbl`V^Z z!KL;Po)>v?1}jF;sKx7?^53j*51B&P)vM32ZpYI5C6Mk4RXVa}deC#9`F|L#*+7~_ zq?)?q)-V^$hUh^Lwf8Jf$^G3Tz}eS$iC($Rwbn*{G4B$w?SntWtl^HV6xR$yQF>u- zyzn_^;`w>${^v{T)ss#O&FPHF`@m@GF}<=?RJvqyzBl>toOQ{bZCU$eaKj2225CIq zRO5pztHdkR@LBwhefrX5XMfen3OoSrj2aP#8;mWREPzvz#jyhJIh}Sw9om9lB-G0V zbO^!|0;A+(~v_j8Wt9OmM`Z8YVmev1UL{&QmL-f z48tSLxHZY!GQ{*h_Q=|@FJ&ruMm-i}$xT~#^hN*IKd7{GIhUT`()lQQqNOeJA` zR^xVt78d8I^&lyX4LUPwJiX~ErW5lc-iK{wJ6e=Fgy{@ut$(Zju&6GEqs9S=+U-NW zD7wzga1$ZUei+ak_oO&pUQoPlY&KLT#d#d`wseAx6HK>Gm@)(O$9SjaJL^16SBnKk zgyxp=_1@(Ux(p=N&Pef;KstQ;6m83erZimEd8=|$Ku+R0oNiEl2rI?8oZZOWiB{) z1#)NO6b6~MD_s5H$HjvDAn^6{{hQ$%ZBd}?q?lJ;5*t(veAxxvw@k+5Bf#x~F$WW|r2z%uH)=@M z+CXh2HX)LSOgvdAd2P29o$qBNuOr(Ow7=m0yjS1K5=+>EC#x|Wh@+8jeC&(_hw>}D zen_>Po_~jND8k_N`jW^wy{n&gSe~?@&UHO70T@E9XI+e*;B~&`VGMVyi3+aYw`qJ@D=6X8{!_ivWyXa!Ggg zaewbbV8=X~R;r~Lw##Ul59Q9>lpT-Y$&d0wKhbG;n2xW`hN;!AcD&eqM~ecQAZfEN z>JkXw<_Nt)vGVK-wnZ-S4{6N6R@k0X7A(RF}17Tqr~jAaU!wiJaL`mU&2 zmuBn_kjR`>w+$~`m}tXM=&;@RWgrQ4XMaUsvDkaMCVGb@@>d;Xa-flzvsN+Gx;nav z1)Yhpx1O)n%2xq2U&Xw~BGmWz-YtXiL|0_T=Nu}DFg-}krD67R3QN>lT|O9@E~;N| zg}>!Z5Z~Jv7txDStalej$!QC69AWh-I#e;U9ZrUBr*XvDG@vA`P4vBfti~qykAKsv zuO1>s{UkzA93?~9U3ba&Hm^KadCAW*JFBFQztr`oxYGioD;VaerOewB9rBCetWNF1 znCVzxm1X8C<=XIWz);~VaX>E0+D`pT)82(M;g>PjI*y>~-* zCEm|R#{G$WHN*a6a%GV-UDG<&%gb}!)kD-fhL;L?Ei2lLo2jK02Jo6F;n{)^qH|pG z5(Mf?MwCm*5%?MEM5WWs3*X+bAWRmgNu}q=;uU`)S6-K>PjMFlyLK>lnSX^===*dL zfoGfWeGFLds^VR|-Y>)yH_e^skIPpC75PV{(A@zh$F85vQONimTOZasXg7?B{-1tB zr}+9K60~T7t4Cifgny7)7+b{XN)21B9=7+q|Lk2bpOr!Osx^`xpMkG65=nl-tu*4-+vqMRSFZfo4K}X zpc6I?4@y*!5ua3R3UWGkl8G9%x!=(POl80GE`S8a|#SVx-g zN97eDf?ZtG3LEUHU-%LDIF=f~&PL_7Wz0_vL)!X?{uCh%`G3We&fSpNUUZc~5>sD~?!7jN=so_0{vm`c7E$K7iB*=I~u*M%XCh zCMCvYE9)(~+o)wD7cXt6AkF!`DzduI4zo;|C)8AwawJjzIz`abUX7^Qf>yU1KMPP` z$#U^%u}3M6Lw`dW9?R8jx8%L91s~Qfv8Z1EJmBFHK39*Yj-B*1MWH}6iB8Nwc^tx+ zBZ5!HrL!T!fJ*s^%kKvy3|T+V!me)-t9TdWz$M6D9OmAlZn!HjU-Bp7#ud`V#)&9< z*_=NUM0!z}W|80cLv?DL^Eplx{gL@0ps>Ci8UweKOn);YTJ8Yui^nVd&3FmFKV`9| z1PI}hq(sb~<;dCDGJU_WwukTu19j%sxgDJ)Nq4iKRsNMIgLLJ2In+#=eHyE{(z;f4!dI9QM+E$M)Ruo{eSR<|;-`lJJvfjOCAd4uqI^&NGFn+JGc;ybAL z)#4a?(Y_hn2fdUX?EJ0;+0Ugh1@8|lAZ2Js`0%-5HK(p*O*QfQJBtp9xTzc9_3HS7btUsX7D55Sfo262H4 zB~4^f3%RTwjv2P60GySmR#=5|jOJb#DkWOb$52~yF5=Yty zA0F;xpAuty;4VE2R|;k}CHlK%%QBqy{x+X`jA!(Y|M$IY&Sgjntz|Q^LO79EwO|;O z5S9@ghb^|nriprDF>PIZA=rTO1Zn1x1upz7?0cI6hl!Zo~>LM3M9TDNFeH* zn~y#dVLb*~;8Hruk?|l`ZHcCS&TXeUi=i_@a3H_B>{RTJves3h%yad$1E?NMhZ7c0 z_Mb1?;htsSbWnzWn84ObFPOj1*MI9{0inM5&J0~S#|#p_pY&8AW>AtO;?t2$B>egCdX@UU0s z@J8Ltm-8+m0Fw+|i3+90dX419XSZ!Hhls-%BGk|1`{~kzc?bpz22ISs#((<-d*CGzJ9n3^T)&f@f&lB*_Unv=JQVi!i6X|X7SvOlg-cj6-5R6vg)F%M`PKKqHYgkqN^(RC8 zZMdEx>T<~lRqFtliuxxX$A9ZIVKP~j=z9-NTtS11(efiDNo_YvFT`8#u1*xRE}6bJ zVHNqbxt{Ca+vrt+q#ag~{>_`I&F9Bk4@N<0eOgHnX{bKP;QX^; zCk`y`U?T_ft~3SR>7eaQ?N`Og;OC5@32~Y7FFMiThx3-4WWyvB`FoF!rpOWEW?2I@u?_4Cs6&1g%46qzh_VWQy{f_ z7ZKOwyH&7!ec~s4RDY!P!$&5saPahZv)>5H@iT~FYX*cn7~*r9++DR^+Dj+~_b%5I zTEqi!$?tXT8Mtlb>EnLh6-t%yW^>A+ z=-*irJ%sD}#cg(23MUCic5P|LY@uyeKHGSw4twYn6gF9|Nq>^E?x}%GtRj{LLLNeI zk=`a@b;nzSf%gXGuN*QA_zlzg`dF+|{LFGz5Z)l<>8?gFfRDp_bDVtq>}^9h_2_uZ z2A7`o+lEw_76*Yr)btkoImerx3R+X~2$E=Mty{H&8h%phn98mT!T~$+9O=G$nYsRG z5I+Bc=Z0GO-irB1mwF={iJ$zMq3MY4 zawY_%PG)p941S$6x-oEjZwebC;4GWi8Lfy&Rn(oTEw;of&p@Do0jUNe!**twTf^oD z_K5i8@JV$@gz1Y;!r;#eqeEA|G+(gBYW9**mNV5RP=8bUlZMSX*;=Yy$2o>6H60pS z#BsM}A@g+)3~y<4#nK$YhSF}QkP8v1XwK=GEOv9<1@|y<{1WR6#@9qGe|JkqsCS0xkXfD6;qbZ-dV8cDaqm-pdTXRu3ododw#v%9Q(GAT9tR=ZAJ%1yNH(XTv zR)88(gJ+fnjc2}|)VZa6wlF!^e|NKPIzRh{_J6sQjU$>E%~qR~ownAKVC3l`G5lW5 z4la{w5PmZA4)L)X-lK)7T$GQ(9v;b~ZPqx&vSV-Zdw_EZM|1FE@hi!$#xLV$2N?u+ z^e9H)X=%fpDYP17dWHXqwr8*6&DX4p-li7(vUE!)i8%!bp@KM*PD!^gWK@RE6haDs zUVk1=3ce(u1Ar;4Gk;C*r_{I)sfmVrGwT-E1Uy>{fZAG{>15s#DU;PzEn#kDshvJMVFjGhRW9|{L_vilIqT76lNi*YhH0Y zJs-rfzH8;m+5|8dI8@u0phYrsHRkYo$32q__I`He-NwM;$msAdeqXak*(o*@$A7%^ z!@Ps&`x6U2zeM>RRPTSgOY_>+)t>8C|d zKzylwnYZ0y_h2(Gfswll8I^g|D@ExlYyQJK;DQoqXxC8kzDH|iH4P)TPp6wK5E}!u zH^5~~MqnH|8)~o!TVvGDEcAd*Ie*1^bYdETE$VbybI2x{yVhY6VibK z4&%Lf|AYf~8zPNX3}~&qU}%d!2A$+=%|MBa&M2M7kx21LSIW9{Ul4-Z_(<+Og%-{X zN}LJ96j;ZnSz(+rXrcjfD{E8H6n$qy12k;0i*vXIt|^6CVVzW*c^XA2xPKa#9dS7n zr$WZR5ONKH4A`-n-b>Qq?a#uK$=X$r>}P+a5>4qVtm7teX?y6J07p8)P6XX(ZhGy`W~vwaxslR@3c zyjGOzY#h2|tHHTb{(rowzRac^UV>!3k!Lq8XOc+0YUC%2JN3MmQJKXukAbsf6hCBOPSp89o z*lJQczdkWE-#mmV!W~9*z{IrT%kJzHo)aOgYz}mRPZeCZB}QG7_@JdbdVuEM3#i&N zBWT6KUs3O|XMQ4)o_}SJ{&pES@&l}F zLgm3&T>%=uuYa{6rI_TUI$9)X4>m$!VcEPcI41|pl`X2Y^%XWW(t2@I+FAz?V2?|Y z^S}IH1BH{*-fgkh3Vu{lqi6ufe{Lk*^=m6J`DFX4h$b-qanB-uq=xU7QP{GY-Y~_X zE}^`26#Z_&ZKoQ!+F&hBPVQYld6Ay^_R4J9|6)@4gntu`TZfOgo!n$*&q;kLPRXnq z6O6xwQ%Y{u@q6^g5$uO8jeaxR{J6p^STy*^nS7L#Fm|&2le+IPe#=0+Pi{8MS9U(V zE}{u3#)nS<{hIA*#ltA&ZNg5^W`C9m&N?4LB;gxjP4PLm`P-=Jgbr{*R~RxpMmAI% z2MN{ISAQKPdJd!jz2RH7s=^XjQA|&lG)y`ARvt^jjwARq?`Jj~i66b00d-!QG@mQCDFsAie z)nG$4r{PJ0NiNz~6Hy{?5{*cLCECfbhY`wBM}G%dVL-q+&BU9ho*aTo7)VpHh=3GY zB#S1hRa8@^RB{5#sM^8e!QtJ>WYaj}(%ZE7?hQ`vW~RY?%8YWMJ2Rp`4CLe&ek_es z6$03Rc+;#ycXvso646oPE;(-R`kA-}w3JGyR>MqA;3ovW zIe)FhA*YR$NWH0n3Lp^oQoD5ON0BY`;lE9EJsws(u(9gmtt$)&RKWswgKMsq%XLe$ zI{DHgsn$$M?@s4&-hN6md|Daq5A%~T>wbCbZ$ZNOnYO_F;2otp24`?gI6rPP(Q&e< zSE#A2(RxY~dz$VLuyTj8wiO2h;EVLBY=7@x)6+VAe~;z@`=oWo(!FN>N`Et-t6qSKQ{B#DD)6R~V@0 z(j7V^9n*-$?y$(LFi6bqhG9Kwrz=#*)<3?SBMCzo<+dT5htOYdo?~J+i_Qr&{ z8xSS_fk+2WL(mAE!Iqc5H{Z!2K`wx(qNs`nJlHr`GNp8~^@W;#B zK)BBB%Y6e``p@m5@(US(GOeF;@UK1iF&7TEzsQ}`!2M@Y?n9j5`#?4-kfX`ISmYO<5tfTHczt5BXVDP3$BR~kQdk>wt^8;PgB zhxPw_=qMqmE>#Y9D1Y}Dkq#&fT?Q-hqbf@|mwkY&-evgoSVl9<@EEoKGibjQSDS2e zO$*#3U-D!T<;QGQ2u|gY(!DP!z+O}Co)+HS3A+pVZ(6<|{beSQ4tC5nnc;L)HqFo< zSCnJv)uERL2F@1aIOf&M83-s+(F<$i_0wIrhY`%bPI z_bPr=MG&2oc^UWM*;f6|(K+zy{Ji@H+^RbD1E_L|y1;~lh)EYIgDyei+UWqSKOh$mJ;^Y#ym2Gc+vKoabg%5P0KsksyHA?Y{-yqGpS z&TpLUV{CPcVSoETyJEuG6U#5R`Sh}+eE(oOBRNH@2S|5|LufA%*5;Ol0c$9dutH*@ zZD*d;*wzLEH6HC25~f^*xqf-@m=Q%Y4Bsy zw~c(+SgreQB_ubB`$bOPk084x-jv7f#4mAVR>aBnwn8Va^kLr{w1$gD9mn2p{;q@0 z5;zI0wMx}y7}gC6GvFZD+IP+X)P9|p{n$kdYAPQRdA3p%luQR0$SN0tJ&Ak&M6*lG zsK>f!;q1p3MN|unM!y)`m9w$|RKV&-H=WLi*)l5!eysU^jyDDmcEem2bC~%fu(`%I zHim|d6cw`RLXFEC44B}@b7)3ZuUxuJeq`RTS&OG^ojJ43biy5Xy;cGcy%NgQaLP0p zn;_?nYF=DH$TlmK|ebk1dz;klO#w!A!D5Z*NWFNN%R0 z!KKnibz{r*nUOGC7lI$#uOrS7KmU44wD}}`Pt;**g68c`jWwq{s@G1uR z1G-?5r|>U~t!@{7-dgPO*f^7l;qPapjhV}_{lJ`mI28&VrSZD~o9Sv_Heb21@LbQ) ze3Ob>Y?w+k{xIabMDm_GRnR{cuZZma5X#LRvgwTn9E`o3hy9hy1? zw&LQ_aE%(7_KYQ9@s$Cg#ubF+C%y9gOG1rWov)`6#ZZzJ#dq<&Y{=%u(XV zsF;f$6BJr$!y&?oFF6l;pJ;9hiP^v1#T2sq!n-$&`OBA*f3{CS)tz4?KfP#&*v2=j zrsMt{zh#l6373StbJ*+H1wn_5eKsNApT0ApSBR5-(Dj`-u=Ntk16}{gPthNc$pW8h z`cC+XG&&aSs$QeN=t$A9 z)AKYmp02#vVnRcwz1SS>3kw~OD-nqyI#V{RE zg8U0*CA7=OS(rIK{YvsaHwQ>%qTXS!WgEVXC|(wD>TM7h14cDaZi< zu@~xlnNXW?eiwy{??ASgDaL3NScG>{j`M*(8PeBt`OIw!vSclV}H}4%fhiNe| z2=lSZo?+`h^3!=NCzhvJ7;ht*=V%DXcJ)b5UANFTc6Yq5s8wehi)}te-;`Vc#n)t& zluDct2c1@H%Fe||-oA$=zmzo(DJvrE?TJD)=p~Cx{Zz_qu#{Swo|m$L#L^5iG5ZAg zM6u(tXdO$d7}vFeTx0bAUf#|5(jWiqd(8RPA#!5#@n(%Jd2xS+>g7@MVPjzOF?0vN zsYdi$$%Cup?VF$v6PE1+T1dL7$$-sDAE@_Ri1$~NtgXI9eYY*_yIpZq-006f{8KHt zk&SG>mDheMDo{Q@kWuV`y4}-5jr>jk>%b8)nZ#r%a;Yw*>F2+5XYV4PNrOclH&yGn zxH_$-Y!Ro0@DPpNPanVLd{oMYCBzl4BmOFo7TvKJx332cZd27C73y0O=?R5A(m$m3 zestt>Kwow%$JYR7q3}_-ktxRp`PMJ^e5~o^`TOpx)bpYrQCm8Hisr=I)i)j`08Z@k zN6@Xg6CI1I)%LJ_Tk=EFCVqs0y=iqz_2ne>w?uf4Ygh;w{R$me=cBL6HN7D+xAD8-7YlYdV1 zV!w0@eh;L09+%xwPSO{jp)9Aco{!BjxFOTEOLCUx+$2SEtTx56iL((ZV_ske=&h}` z6vAvEXE@?@E#n*#SA0WX8@Sh+eAw({FxvSCqeNugGc`9VbsV3)`o|p@9Nngb`Uztc zHRY^bAt6L7NO>o9LpA6D^3^eqs7VH#TDQZ`#-k;F8Csu&lEbLEk(r6M;@&~fNdkq& zMu>-L7w_vk&gnkaY0ICbjHpRek3XA9erQ#1=0EA9DR^}GEr`7k7#!O5*U|<4A;Om7 z&tAOYd1|daxD}Ez&-Z5m+TsDa5@qpgpgTX3N5(2X)&3b|4i0?k6pIN`4)$@eaza6&BgRt#&bIr)PUZA=iEQ=Qsi6}0uvpAmiPz9J%++xjB@I2p@Es6qXY=UdXjIJ6Ouz6@U3B+;O%NtKCB7`+- zHm?!N#%mJFc(flvX5NbNG|9^DwXuSsNU2G438~gNpf-JgV0+M{GR{elJ2x7jaY+`| zf?r$n+H!}K_B0^L8HP=LoeKVn914#bBTTr^Mpa|O8{@<^kzEfKK_xl5wX6lgRkwn5 zICcn)_OJ&a7M4@6Rp1Kk3;a2lNM8{@=xY(O9sl)fWB2@e`DV$Z;lr8pFB5-3wifIa zXM|R9z5(k{QI%iD^jJ{d3N*Q;Au2DcmCta47z>GGoAAzJJBC`(Y@3zXG-H02o!u~r zo(5%GzU~Z~L>hM!?Wl%&qx6k6dpGja6<=GE4C2Uuvob*k@!o{Q@*ASZ`fG0%!9Gp# z(IZm2RhEd1LH`)ASVrNFm*tr9I$ZK;Qyz&q!*GBql+-xH{c!9plC`J&OGnLYWwbln ziJl7FJ>_lp=aTerV7u+ZqL_#7cAFN9j2MFA;koJ08|B&G>%9sa8s@om&nYqsT>MgR z+g#@W72bFK)O(9OiOr)=`Jyy6_pRC~l#otHd+4XIs03@2PSI0czrQGmI0ARMFjjPr zw!h@z#3gE+)%|#Xcqd3M)8;D~Sw%W``9k3>tpw6;FYZ37NvwGqzngNut(?wc`Dzfy0Ux0~9 z17Rq0%0Sj8+lcGyxw`dGhnaOBT0FS(p7{kqp{ttnh|zvzEkx`A-oEZ%2so%}tPrnu z`5lr9+oBJSV#L3zAiV{Srm$Os7taSFVdhHnm!sTIQ+~)xbM^wgdUu#nb3VpVXZ>Jc zm}R_Jz;x;4=LEki*o&opmN9Kfm3l_i4v{4|vMt~Dug1- z^pYl%tg39 zdEoz!gjx^6gMvJz6^)4^P{`AXzl+zkp46m?S&1e(G{Uoe6<#u;`|C4ynkW7D$P&+J zs>1l)`;RF*bm8CXy6mFP{*n>q+5J#fD+8_aic@WA6>rX7WyVIqyls16CTurvkzYM` zcB^|Z#ahq1BM7H@AcpGM;2Z0EkZVp3kD%(pLisRJnnP! z!$5Ef61^#yjQj4iwBISzXaoFeWeLYduEyOyvJdUVI#Cp0qAf-s|1f`b$`~fW&lLTX zkjB>=_OQtTSvp?XR->og5f7<u@4lefuJAt;yD^!nemY3ax5K4&Y zCch6JJVcx4wAr~8+pgK`e@Nry(lr2II|VcMgy)}+?TmC<88qoOCv3xOWc7ES%(jd( z$7^KY8GqjC9%16ox16Sqh{{T1GPyGK>h+}24OAyGZ4-TQCLP|e zPl|^rp^xWBA&35W+lggP14~}QbuI2=bZFRmIyyAJX8OJCWuxsT^!Q#CKD$}u6fg_n z$zk!$o6vz9cVo-*M;yb&O#Hptd%>Kg7J6dP?e;>(doQti8q;`ajyj0nhc zbnpcz_j`mHc=&W6^-Ymt+KOhsnD9kVnoE9OqZ)f9Sw_In-Wb0Mv2 z#4`-i>srz0e$RmFs>2Q9ri%0VO7w_uqKb*ASNal-^@;u%My->1^$@_6GTGPUtF|v+ zOrW1QNf|>1FruU6M1S@u*tkUKk?wg$M)j<#fBT&y7)FqwpRH7V+^Is4#@QNc|F@wv zUTK(tHybSu&6-I%`L&$tgWZ_9PcjlB=EfbOr#*5ftl6T`!fJnNwwp06n+D}y zJ~#S$9-~ZaA*SJ|HAJQV^NZOr*~eKIOu0SA62!TK`Tw#?LfA0Av%s`HZJw|SBPd90 zS_j5SM1?A_zlwv4OGL5lQMv_sLzdW!*SYURpk zlW~RvmlEUyAWZ?mcig1`M9e$zdw>2m7Y1a-tE*N-4b=1~vi2}qbvNdwTdYQ>_ce0h zsp=!RrrVsc`^>=U%>vf1|Xhl29Wr{XJ%C03a#Z2R5!y+2d{yl$C=IHnYHJ?HiC|MTCToT3Vnn*vpcB@ z@BwZ$+$NwL3N5XS)1wbe5&-MJhLl!D5@sUbdBkrYC|O@nrvG z#~U3AGS2$apMK7twc1pX{Nh19r3HX>H12YBcmfrirMI3=l0R&%TZs%dtVWxtS^B1< z=1FRsj|bdRv0M&TpXb3U*d^#3=2`pCW*cVdO+nf5fNQG`Q?4udeo|9hC{KghN%4N{ zhvES{th8NO*QS)U{x842Lzwp5NgqNG;q*obMFu{K8$;jcMesTWaw`j-nGXYcW}nt( zb}W)uY#3A|nZy#6Vj16^vEs42&6&3Fs`nxZllt6M4dA#DAJLsusne1%gyTZK42fZu zh@L#(7lvy~;h)hM{++}zHswS>@9G_0bj2EXDa9dpsBjQ5HnYn3W)0@HWyu#rB9J#) z`}1oDP3qFFg)Oa)znT1J@sS)btzqL6Dj&>SA?rZw4kfcbR_@9qPj2}VQ-*9xwWoQv zKQ~0oVE{kO6iP=Wk|$aDb}+{*Yk~y~4`O;;+jhH1=Z&XYY*8;y^5AS|;t{}g&3i(y zm6Ge7=GVMGcH8^8__Bv;yM8qD@q?!Beat8|KrD(#PX2M7y^o4}{yp;K|M z`&Y92_rn%eQXyudAiCsTk`eeU>`0J{qD%uR;t4C_AZgAQyl%-9v#s#I>B_3dQWLv2 zBLd&QyLwr@-(>S*lkCAWjb4OX;hty2j8iaFPRgyol~E+0myiE|7#MLJYyFmsF=xl^ z|HDF*;OT#8(y8uGG^Csy94PFv4(=YFAU=Nn{{xc-ae=uxQ|q6Y0kzd11h08!oD^za z+LO<;WMq}%g=?CI5^DJ;QOQL0B$gyXtRlUCzlkLFBZm{EE9!Mf+790Z)pXzG{rM@) z)z3W}D?q1Xou|NVV6Ny$hoH5<#rQS$vvbzM7lm=pWMx6yG;;aLc(5{}EdrXfExIQ{ z6Lv?6z>*Hf8M+q47hqt7c11+nNFdqjb2t{j#;MQ4l3OT1J6uyZ6c|UD4R^mrQV@gQ z%cDp_u%L~Iyyzgo0xwH*^AV&8wBJN11) zX;@ccq<|&D9RHN%79P_NaUx%J#6kZfgJcC7!!1~Cn?Q5&pd2(f&vdvv7_nc)5qYQ~ z2oHa@c*Q5Fmte%m-(YV720b2-r;4=^f)g)sizuXzWGeN;^P{(@Z;GJ)C9+7(X-qU& zW0E5pa)ogG0HYC3m1corNfE{sZ0mbXbxUj<&Dfus4dSZIm#i9&hNwT-=4uO@wZ8bC zfJ7?5io)Q$SnMGL%?h}(bTC{@N+W@Oi6mPn{kXQTxKqWAyiu6(RCvkf5ESvSpOPWI z=#~YCq;Q~B*xzOVXVA|F)5lipfT+L)B5Jw#3xeA?fc^JH@1LN)&A(kgi2<P$QEBDlVX;zr&%<7-sRfHrvSQkZ=qU@G8(x1Z{1a>qUE zV82AmN8)F95|PD6&au(uevCNUF(K{r zSgQOkc+Qam*lbxWbYV=a{FLeT-t&^-L#ybN25Lv)4}Oal!GQdTz214*Jjol9aY2Zl zql@5eK09gP>O|6tQ)rO&SDn(IVC#y(prrmw!ji;5@SZrZpImpX0*=fDUodYL_Czms zcvD6`IRo+eh7>dwCb z`b2V^zH}bvpwNl_o1bFBPUbcBj6lzK9*}dx-W+FiZG5eQ+-n(0`((YDcRtqVO+Hn! z4j5O|pIvX?)Z~|a;%+;zyC3qdHDA1DGZ>9I4iIMQRTISgFspKa8NC(F` zVR@&+Q5c-QpvRJrG94~nye4CllI7j;oJ)I8dvTUmOA5X&nwy4EG8nwDhW+_!q9Ozu zH*7P1Vj}}ULS+sneJAgPLvR}pfmyd`dnAXtjIvghz5si1!(5mzaE41qo(Ix)ADF(> zHY?oEVM>%AE?~g~dw~$DIm2>W=#urF^lMaLkL4Gauy-=v=sODU`CFF zU@J5w1t$axRGXPHCYgp5CVUD`onQ2R$K2H___xp^i8 zv<@|nonRX|=xiYFrQ@ANPayh^d`7%^F!{)~xy$~K9J5vTKnYB20+-Z5KR2%^#kQ@& z%`TC9K{#asy?dFD@xq!$X;z}UJo(obFPj0nY`Az7l2c7S?R0x=tf#M&%My?bpKdw;$?N)NP0@3Xi1MhBnrf&@OQCA`Mg*$#c1qM zGG1#183s%~GPYj6#OGgM=Vu;1;^AL=X@F-f6?0e>qgu~XUz(l$nyhy^5}8c*Hw%sN z|2^Ay3dlI@`m0fP^3-4VFuBT8b|YmE#89n1PI8^e?GL#E=x4t|pyIvMj8D=h7-#O4 z!}VSlGvsq5D`Cg==Q~&8UE6^!{V!MMFYjM^4=EnX)521hU2k~ma5LkApa;mUd%g)D zc<_ao*x4d;1NQZb$1bT#YxNGwuH$f5^z&8t=o*9=19mqLmfRE6=v2zF4OQKEh;e$qIOFC7;dXkIY`*_=Cg+0y!Kt2VzMx7i z4ErgJ*y!KuU41miBuJVu)s7+fN_2GoC|qj^u3n1Q&(^vpS~~v<)oW)n`VqTlI?X;I^@mlm0EfVDZ{7)WVFl02G+OH{c#PtDj!-XlB{Y zSpGi(>%VI*mX0W#|Fo3hqYoW7hX5xh7Z(SIAtMUAii@?hg{KXOL0XWD_G@4)=z;l7CTk&*(GJx7iSxhrcrD3CZcAX*?#_dNbZjVU>OD18Ca$kP>Ma}P1gvHPjcceJJ$ZW{ z95E)N91V%;%#FNPoaf(APw$@0jHGxp&CT@kGL@Ymc1ZQuS@u&r4Jpq*ea^#E<;^&i zp9Avz5gzVaa{E=a92vq5U0|Kc%869Bn&md?7XJr2p_N@OQ)mq>IsP(uw89Ov4^L8L zH?(7B=C8;Y`8Z0IvqhDSv?xQotOy+Uo19}b_#EaEj0?u(*0GA6XDUeldoh-CUL;;3 z}r0woS--g@T(!1V*s;dSk`Usa+;A>Tm(^7y41qt5B zm}B;{i;Nf2cL_#6=zY~+jY0;)voaJhEL3eABbYp8G)M`Aq_k!B(k>o455a4W?S~|L zb~Mp(=Q<6%K5Do2x{eIKI49MNbSxDI3Mr)P_*Zdaj1Pm)w0_ro1U?KrtMj;F(0lu+ zjT8k|s3pn2#}(=%Kn+Z~=2T{Wavbl7jpEDs?C}>8y8hLjD)Ab|pHrIoeh^p-|SwYmXen)cEewc&kUZ(=6aRvc;Sw zb7aPgeDTzjlbF$zbpbq6x9nI?j}-s3U;V+!nUDOI2B;e81;f*S>P`2T9=@1vz(Q-| zKqCv=b`CC7aP_C(&%CfCj8xQo1FD|&B<{~%#VUVfZA2ozo7&twW_>(mtUt>xVokiI z?D_ELTfZ6F>*)owT_gh^ab~vLt2BD|vnxWOhU>{;7FmvL_>XL$TKXdv$MAXV`ul#`8GnHN zA;xEB`!8`@j>yNj=obWO*dh{kq*O_L8A)$%gf6eD3MdDXL_ymG` z<$wv}FdlqSlQT~{0`em`i}LM1&_xIRP{^Ws8Y{PmJX+0)5GZo7Cnt#RX_3*VdZNp; zh&Wm`iQp-62_WN*-WZ{C!tO5qv_$FW+gUGnBk57Ec9Vj+m3*YPg_Ic6(}Ft+Wz6Xp zFzzc=+!+zi@6;SS2qH0d}9m0RR91 delta 49697 zcmV)HK)t`t)&%B_1dt;GHZe4pz$pPJf0bEnbK5u${@!2V*`1qHW@<&$yY^eQO?tVu zX{O0uJJaq5TB2=DWl1YacGF*f00GLfPtDzZGDr~sUmgGtX>YMvc#AhLJpTRt@x|p$ znl41>24Utd;Bsvdo`kUEp$X0cIOwTEKd! z%~E9r!$jcZTUl?6j_{p+D|_nR%Dp0KrBqE{OV}y&fV-s%`r6d=+g}KW=8P(xtn)1_ zCCpOi(?t|HWxu6QO6FU#cDgU(d|#jg#GC##5P6+;W>okdRH@b6ZUe_(eWWd;gJ za8@Zv6DKcmpJGtOY2&x!R%7c>RuxGrV=o4$h3pk9w4nCEtO`fSqA2aAV*B(oc!Vlg zJUbX((rVZ+(!YA1|6LXCI4W_ofTQGo5*%8wK&xj>SUsUwOi-MpZYBaSW{kZ0$JO1N z>xUV%hY+GcXvd8qC+TO`f6$t!Rj6K;m01m5mtcJ2e3tnhYj9q`+ z-F{wHL*A?G_$%HaH>h< z++Kbl0gQCA!)d})Xx)j;C?I@jRsHbrjv9IQ)b`D$lkN8DKeQufH<%y*J1f?fdx#NE zNzkNIVDq@>W#qdap!4KBd)n`fLSupFv0I$*Meshvdux7*gq=9q0 zruGvWrXaMb<1}I^TT>@RWvMvUC(%LQ$LN-;W^ZG2QnWD(rrvZmq^GydP!%WBU_0|g zy}L+(4k8nZW3!R~fXyrm=v=Amzq4p&ghI~LL`1evjI8sVHKCr8JCca7pu~u;o=98f zxoUZMe=GZZtF-lLCj#`u5=<&$Giw>y0GCC}JtWtCIVA@io<=;a)}|m3X(`ztZ+feM zneN%ZUO_;0^Yp-DUN91afQiBD=1^CSEdD!>e>4CHfMf!tGf5ldJzXU;7Ff*`Add}93-f3z`+pV`s2fA3rU+vVlqa6m%hmO6JS6KpOEUc;ry z_7TpMUCpq02ntGaeE13RDw9{^?1Yz^gnN&hi!B7x494Dkm!$4I7ZqAfPn$Q&~reDjo>P#TA!XXc}~)R^9OT28cP2)#Yxefa573 zMkZlEA0ijW&zRN_mZRamlWROJgj`Pbe+@R@6WJL(HHklS)OWdSsjvWmu-1G2X6VLx zmpO-RY052phoZ58NoxAQmo$({++7-S;9MLt$BB{OsWVF%u0pfTEq~Q=XNzXIfI=C^ zp`ndwf+>!&3KcCMaxnu1eroawA> z*qk68hX6ooy{7#2zj;W35+qjL#S3%jeA-f(H5IGWd>nA4O}yk3X$%g;E+KObB}H?G zNsu5+@&`7Lm%JbZcGL5qnt~yke*h6%Rl{mKK!&7;6KLV8l)HfmM?vKLGSvM3>H4v)~0seq#p3#2C$ubZAx9HkfH5bA(#;f4KLYeJP_E z_OOvS*xJi zo@v6dbR^Rr<_h?WKGCV{U5=W-o@ppXt9dSh&L5n%yko$amU$fbeDl%X%Td3lU%nX# zeyE!`tkp&u8uhbuT<%(#f1{a{;RC;a4a%$vM2HSU5^BTX0X+u}ztmoe(`aTH(0P3D zNv9ygM%z}UK`_`eSehEc49Yinz zN8nMkn<4?|BbEe~(4E<8VP7sl(B%(BUrmfb4;~KnSPBaS$Ls)nf3*5oGBu4V+0Aq` zJ85VHLjik^P#87fm~>B6XR(Yz*9*=PAYL&htDq<$2)a2 zrS|2>z#%$Hddlz}f7=T&%=SA?bB$tv}tzte6akSwZ!yc)4HE@geqP3-3e)HAOX zejK>5Hxe#L=YN}LQ<)GGQh;8*ym?24e-)94{yfd!OW+YAj26qpccEC>KbWRtt{-3g z8z7h!oeE`cWOH4?5m(3{w8-J}>OLOD65x&o_P-+jMs!ST-OJr`DSt|Jbi(=5;T+QWY^i{r&O&pF}>@ zmaB@&;6&!RPyf{GffY4f`An2P92<2|?NAK5YkAJl*mfr(M&mZxo@uPqt{9tvcF?Vl z$6iSp2$`>Z7=QC5A)Da91H-48qhcCRdL8dSd0)7BM%YwnikOSKt7fk9+#& z?SLw~aV@=u*OkR+4+`6;I%nVG)zz5xquxk{@UZu^@>+Lv@$8f4HFiuDvi=nLX z5K)|XT~Cwau_^|djOj#hjwsE%lOAfCwLwRs?S^98@P~RW)sYepKQTja{B=9F!$^C` zED-ThNPoVFM7#%4T>>S+$W(ZzT9-AEHi=;@nA7#o%xG!kD%z7*jKL_x(!1Xg`wZbE z1ygpxN59Uzv2As`r|*uH6>i+&;+-n3JM4<1>LG=l0F^L?DUBdy4o3~XSg_6|ji96v zog1Rcmt$Ff_Cl z%~Gv_dbjx*L4LMs&!~)FgUxq@kjN%^S$91aN*ddE7+yA&NM!4)(j~(IeBzB^Rn^RY zR%a+i6kwO<^2&@zq=8H}&JHLZ@E~K>8-I(FO%P?1#aPy;{@4^H?_}YGwrkGelomZFQ_X6_F%iNdc7A+mS3*nrw7kdT8@PY`oY@SZLSXb$x2|F0WBW$0Vs zt_9!dJs}d#X=6qVd?bW}Uz}|l-72ELbuBHB4li*n!ysJhPP_H!v`fh`W67=RK8|Fu^rnkJb1OpI{u=mZ=soud741H`g zVGRO*!=3C74J%Y~#F!AFd<)H?~Wf z(~cP2Ou>4+qmgc5U>#sFxJ`P`K(L;Y+ibhiHdQckkb$Bm2-Zyv4Ic( z`op#!Q|q-9EwH9*`H66<@emvCT3}){WGBBvZiq|hXnm^93al7C`sWlTM(qGyS~ z+$cxG4c(=1Q7iPTjfOU03hUW1px-Ka@B7CO91)(Vhv8`ca(jC^oz{8i1)x9R61!!| z+eP3P4EYZ6Q%3x|wwiaM4|?}|_#e*jKT5njkQ<~@N&%R$DGlFaYxsSFvz2;LO?TwH z1NOGZCJ6IXB;G%2dw*@fIz1TTzY$1Se@d=XfI!m2*he|Y(2A3`fQrg_SAM4fBvizJ z$o&2jA&}V(N0eVcHnuy2sGn{D9-Il8CMUOnXDPW3^ zC9Ib-V%GK{3sY3BK%CV;tgW(6L|qDRPH0oA0RJl_-bYdyJAbIP3KUd^%~(7~M^tR@ zT$(fE@!0jYz+^nNes5fN{TQ~-vb)y-taNX-N76wbzpbI?@Gcj!u=nuY<8PN|r+aI< z21BCh@`kSbt2Ze}B;|PmB46o0;ecR~8*(uat^bI#0b4a)n^JoTnKN+x^gfKSAYgJ*)zP_3gPL(7(izC!X4Qr-8yW0z93`m-nUmjVw{bj z#lClEt$GM&3p0tKfCswZScJ1hcTeyB0{{eS6bfZ-WDs+7a%Ev{3T19&Z(?c+I5CsZ z92K);F=s0RI5U&b92K+TT$UIDI5m^d92Jw0bq)hCFgBB+brl3SI5IYu!6^YJf2_A- zbR=A~CLDBZJE_>}xMSNkE4FRhPKO;Q9ox2@bZp!B`hD-*xwG!fuleRjtyO2^+0Wk3 zK4(>t6Dugw3!2y&0mbZWo#~kwn0^3MmDCjst*s4BEbL_Hh3u?N0DsMFu;k>zjzB|a z3p-m8LucR*fI83wAObW7eE$w$f9B%if+YtC+u3_KT9}zT1E~IDP}9=V{g>sR5P*@# ze|r9AI$4<60x14|aRpl2+1mhZo&Q4oUneR9fdFT7Ai&hZ8VC@USJ0G{69-U<%c%my zfwn+LLu-J7i;=a3F+j$`7-;JRqz0JUIRdQz;{Y(Wvo*2!r!^;rzgU7!e*i;(lRePb z;%^$z-56;9kBbgq4|KG#aB}+l9bn-EFmp7tb^bd8XFGs}t+BO>$v*`C+D+~LC1met z_cy}kukSCIf}NAIld+?Py))o%RRs~T|KRCtZs`0^Z6}MrZh)QX-$)ZXW0!wg`q%dt z=C9Y;(8AUU;0$zk{->4^e-L0|;bd=Z=<&DqUod+|i+^djI9b@5{TBl|fFsb%(9y&i z=;ZVl<}da?)A_GH0sl+)hW7T>9{*D+Ut-(|;H(oWv~LfhGzT&c@~dQ$y>& zQ~KAgYHI>?w6?GXfBseT-$4TCnVFdWn@`2u!r038pRu$3hYM(H^53cd73g2$jEWKp z;xdA?|ND#jZ=Awk<(*YL?Eg~xADzhBnf%YgKPW;%cJ2T#dS%sb8FL3)re|e1*I?xiO^9gs^)Q1Eh1i$W zs}vRZSKD>_rH5~GRT#Yg4q<4R`tjN7v3P3#u`fk)Fw%o*P1&6ayv)b0(_ z&Ov(+$f#F>e~@ve9_@9tAhY#Ni=9dBU}r*6Nw4@Fl3=Qx#S!}IiQ1pkwZI>p?9m?4 z*Ep>%4xG$%q|6C;?y;tS0GQ!Ve|27d;%dI*GQ1MMCeL27sXfk_ z16U_2E6)%4FJ``iNVeNZ`uRP_Fhrq834sQnN`9^J+0dDM=)%JfbfbV;N#Nm18VEN@ zvh!B!Ix&uHd}`t}?QHTGQ=E5{I@swxDEzY;oo0NMlEw(ypP~63(|W+Ms3P$MjS;dr3zcYe~(46U+p0C$$w8!<~~pJ{LaRN82v#= z^1F^YAlmqNGr)vV(DAEhmHSqj6OlH_RIhH9fD5`uG}hc+Ov%|SnvTwM))dv>ovAiE ziLKZZ=5*9LX{=zTDLjr{r&N?y;Xz*b6x}lEI-H%Ct{|HQhT#sxyeh;{BtK76oeAMyimQ0H~;N9y~(Px*w{8^aubi~TPX(|{~yRK z%vXb_t>`5`k+P$2=Y$nGB0h74{_|vE#7N0#X3z*Ucpqw&jilug_uN#E>BsKM;(2^) z-WQJXlCM+l!9TRMk>m@30i$btoKbq1f6i|gQ#+hUi)bM_^gC`dR#euj3|wLpyA*x_ z%Iv?Gq&giVNJSzNxBI@T^o+jq;VB${6Scd8$|tRY5*A34I3+O46DTl53rEGbsbMCk z@AMT=S`wfW>E9637*xP7GNwU&dwi(&6^Dh|F-2JE&1-L`hqV%sb!kcXh8|U{e}R*I zy8WHjCjDITr|bu1>q!Xi!_))1c;atM8YI@3WgY@jd?A^{$j~}mZ0iQO2)F=bU6_XT zK567c?cQ8HaTxDCa~UU#Ig|nLQHgC`fMF7obibh9Q<; z`ac2$>IF&WMMyAnwV0|x_f3P>e-aPdkE-)sI~?}{)U1}|TXTfjDCVsFc|fFHc)DD? z_UW?_3p^9)$Hm2v{jdq2o6D1E6_73Pu1;d8Cm;NuJuTA&wBUaC;)HX)_D4Bs_w<2y z^@4+HInDn8;|bztVDC#b0~A((v^6aapM$-MDh6tt(ug01y>^KURx|*D)^K>Q zq2cI?2^+&6abj3=DKY`7ifUA-)G-A)Gle*Y`+G6_n;D_pALz;& zTWf7$dh9F{m#Z5-)Y6N>f9=XX;aaHg{^jG;lVggsfnnY?Xwzr}?pd^0O|swJz#}g; zi!LN=v>~0RAs}4kR0^v(yRzMdX zatEIKrN|Zd(=c=Y0hBk?&J5!L{I_3{Dw7l{(PULH78rN4f8;juMzG#pCNy*z z0WET}Ok7I+pbPIIW;TJ!@W0)LvT~8rqmE__AGjvMP{0w$f}RuwC=0x#eXW`76k8uR zUmE9cp*^-RWZ@ME#Eywwkbbw}-$5ed`>62%b^*88S#B_b2>)j zYqLSR)(u1;-q+V9f2s7GQdvmht)D7(4B?^oF`suh4WgLiF6By#!)FM4VP)`O@w$(3 zB9)SH2^YUjT_0mEd~5WvchlLFn<$@X$sV4_ixf3vVvt%)+DL9w>~cJ6Hy zezYxQa=_Pa7{e9Q?^nyuf)T@kf4~`SLUb(WA}DHQ_AzsH;+HpO)cQaf?AR@4N$sI+ zlVO|GT`EW96J6ahTNc6j(vA>IE=N(K=<6q&I9%Z!&?($N<^YMYo`8cLj(0QlN!%%` z2Kz*#R>UBbe_NWS^u3CU);+7u(heomk~k3$PQ}ZcoqMV8HJ1r#g=OlIqz##i8aHhK zZIXajB2g`b+LaoN{@>Ve*q$$9B^Nrxnv#mke8h? zgKcAm$27Y(ZmCk755>~SNOrNiWhlZf9}_1x%MCBLvtcKHLn~3{+`jE^neTWbXJ$jgomUCJ;0Umjm;~!-vNCN+63L6R)-8sPR+OiM@6I zet@EfL!q-9| z%7VO7!7)=gzDgAwSj@%@$FQ_`_7+g2KUZGYFhd7e=WW8c|q;@ z%aNH!m2d?Cyj3F1Sr;Ab`T&RAx@BXTC&Dom81=NOFp> z3Mw=9x{XsS3xt>W<9^g%#9OXRebH{lY)zwAzJ9}o0i=~o{Mq9jR7|N9+M))g%xBz5xBQdMhRH5X$ zL%~~#RHJxC33y1Ve>`oL7Bp^n!#SVanJsK3x)3uG16p*H6r&dc!5iK{-AoW=lb(!N!uw+o3X_ReB ztI!0mPiT$<-K<4S3!mdOS4_o4YQ7Xrbzv|$1wYHLa{c(3hrW!3_uElBol=J2Mn7O{ zt{Jf!3KGU#lPTae`vUARYdT^f%qPg%9Tzn|oAwN~Qt+l(f8yh_0*F`B2J@5cm9q~< z_u}2;+u&gLdE>sy%wyL?Cs0@8!$45i4QDNwmv(Vc?mb_ZZnu&ja~hz!LmwGYb%s7d z@f~^cNPCMfn^L~kh!TAn2l5#y(tgC*>|*dO(%lO8TkB>9Z)<+tFDp7MS~>KY1-DUK ze!LAnBxrQ3e`QTIP;yHu4lwL*sG+!6TkKg z_#^CJm*N%!i@_gnK-~yZW?67O>MV_)(RckX*9_=)8bGr;IT*!FQ#VLSTU{3;)}_4< z1NQcU=a_p%Xcwv+-ScghxR*R ze|Z3pOebK9QbUy+tQpj2*ey79wged=GeMUo?tDpY3Zkvth14kS#4ZNU(pYH3PQG#p zf1&p(TsS+0&uX$7xJGWiRvMq^cRLY(`H`RIEQ`f*G|TW`(0|pjWHX zKP=}4PnLy^Hu600U}Wzi%IqhAFi2XU!}Yo&e-P!&{!ou_;z4Hmj@fNI6ZK%XH!FdS z6Hz1)*|kT@NWhq#rdWSh&1pJnxTNcdM>{agbBmNZR3;vYF@|iA8o`7g?2{0#v1S&I zoYhlYB}cikohwX6ao`1D5c=!V3Q|~KmD2{luB30zc$O^5WFLY8T0AT{qBz)g`u5IYMzMuT9K&FqEaRiy>RBA! zS>NB5z2@t`A&6#erJ14{Yu+Rg%gYk}@e_0lj;gS%31`BAm3cVE!EgqtQ?tQe*{AwO7 zDi4NFa%3gxrunkV07n2lN&$O1O-y23I<*huFfM-BU~B))=J|b6&L1~lq2|sff+RaW z+gjk`D=SpfDu1y#hfJHvb7US+Ga#&yKQKLc{5dxY*KQCz*L$=UuBkTLyfrvNe{W~u zrVp1PWi(`cmF5_PXuFixW9bixH@N28H7DW}@kG?(1|>JgD8UQ%s1g}Y(N!AN@w}F2 zI8sHpFbMUW7D#;a7#RwY`L;%(sj27M^8>WjsgAosQ4p1RxJxD|&*L5F+(z2=D$u<8O<(2el6RX;E4fi?6Ie)OW%!vFvjo2mMBmc|@-wqoNYP6vf2^O(U0i&S zgye~OvF(D4Z(KF8)7bNjUGT(8KFErcK~kDf zoLr%cw5R&@vft}RKK@6Le*^^Wea|RWtZUUupvZ08gl5HeYdLig+oI&hXfORG<_9Y~ zQT@F_BSYvdIO$450Y#?f^ea41%3F}j{YOr@*VasmxT-x!u@I@Zmf^8B?fdLJSO;uk zLHC?T`V*U799fNtmekKgYyA#tW&YvN6#fkb!`se6c$Wc4z&J0le?A=U65>;8yEFEy zS688$j0zTGMuejzhXfB8<%16>crPolI@#YWm~Bw}SU<^`%+DBHW3>s0m`H}p?z7}+a@ zupd3RW+SYFbyJkp4?%Hkqr+KyZ5&`2`I^ctf)IhJ4UtyidnD+8LVW#4&u-Mn&s;@zD%f7xe=r`pFavz2C0%4|Vx6F5 zLGpvEtsWRV(l{j576WQ@yisDevk^Xdxw+v^Q4G5zPi*SmlCh`Z8UelhizsR$ZqdW~?$lGAZl0>O3IXwC+zCrLkp6 zzrnVifBV&GJX&vItfP_{Bj;!EEcL{P!M_~+U?AaECK|ld0AFSOmTT9K*=g&mEl$~( zW(KPo$A@}M)-73;vp^=%<;DhG2ffU>AWfGr#GnyJrxc&=k~M&rNlvExTTU&AApi{G zONTZA^jM$WfI7Ca{6X`OoaRe$bWrY7B(V}Hf0;^5{@tcd0mdQ)z^iCTBzW-epSe8FV{*E5sdE$b92gBkXUfXZOiaiKovF@GgQ!3PaYkQt^ z^o;~e$^m7S{KM;Rhqf!UgFD*~3Zt+jl#K{(Yt<#He(2 zrvufSI^I=XTV9fS&0%2IWoEVxs<_K_f4nXnrZUnqYLoRgV#3Kh)+!R+^-;UMn)$q%c~n5%Ji<~uF)5VCzJ))PBBFUGHaPf^|IvF}LelJnbx z{)AimBkj8qbhIwfXLd@~e71{r@}}8qKxc-TSTS|zE$yZ(S18JKqkSB#HRxv_HVUP} zK|1KtorzGq0OpOe{y#wr2{Ckbe|K6-N!Tw5VtI9WyXsS;EKK>5gRAN^fI9A}l2Ok< zR(UfEjqxLs^NM4su33d%peJpbSTQM2QBpSD-O^_1Zi)Zxstx>@$?BynE7qT=0?A}0 zsvRlLThT#BV~5e{K>(y(6CY zlp=er8u^RWv#6a8Nrm5hNJpwq`>cJyq>A>G!3CaKeVQme0z1k)rVd{QvxgZTlO~d? z+L*J&#%SDiAmaY zs4YmZbF24f_%zDgf6?18-KV&yGwcP?FJW7z|5_fzC*^*IpLd&z2oTqJX~`->RInP) z?d5jKK`=j`r)t3MzGK^V6n5?|TltiQT~#E%`K5(r@@&P!wrkl)lSZ0>qBcQ|B0%~< zgv0bfD&fk5*rw)W9yOoycWSO4_>4S;&$=Fz?WI;=?cr(kf9edh(%Vwl*N%9Ks&Un+ zjSW&c%a4|3zscW8oCGo_2gKU!N*1=i8)2oc_`G!OIMoFVGTj&B*H{K*u_j~VIiB`U zq?b8m`PDOJ7K)0ln-A<;YRg-w!Hg?3G;~qnoaTJRQ3?V!&2*vo1(jYnuqBC?>27_H zB;>lrEwUoSe=79e-7i2x{K49g2F*o27GX6-=`Hsyc|2D^9RQZx`@e?&4?MRt&VEN;|reojHMyguBEtsY0f7EC5)SCE4Pm4)Z*t7Po(aMUY zi>R%qC=dw4F+27-ea1$4rCR2ayv5hSf@;}kTNYeoibOIWuc?Vr2J*Q8bFaWQV%x5; zM4#~CPI}~?C?ql2YT)Bmm+!LHbIMa$bt<$0ycf~5Ct>;ih_c{;#Ki{Y?AE zp8pfZ0wz9ISg3TZ@Io%;uTgot+TG2+c5dPh)s=LNfcx3 zVcx4x+wQY#$;~TSD^AlLNoHZs674zYrE(@Be`tLdInWXd!Gf17vPN3mf+^AMO`DK{ zsG+2{teL}~Ny@nrKet^-OXXz+X+4g+)ZJ47N%qdQN5VeH9QLuGf|U2YtHd6|ZBo1P zSF~nRM5(qSg&)4aZ=6*A78C{|U(*Gff%rmps~PPz6efePBxn)=cqS{eDVBr)8I-!V zf2Xcd-kWs{skEMnk>i1usH`;kQrFR*M4HY9FWR6|Z1y`W-PuWoasGZS&oEanu0Q%V zeRYu#a0(O?o^bpoOYB#iym?_x$eI(gsLTA`((Wpt!h1)(!SH^(<)aLeM(}L7fF>N; z+vP@aFunmY8ah2pabgvfb`Ch{qqZpSe`U~g=)?c?)^__{oDSNO?j4d@avLx{k-WN`u?4V_~ z7{);EU9$kVh2|wM;ay0mnbj-UU!(**YL*HO@I7ff2heA;NwkxM(YCutZ=^eMe@Vef zZrcMqd#d$KPB!R)XQ=xM54pDlalnV08^Yw6%OUp%)v&13$6nq4U60~ zmTm@{H5Y6?UFGd|*;h{~?h5*>9*!H3LtDj6Z(I_ob%rfFCzqF2@1+mrldgkZ9 zPR@*Yc!6puhMEcuT1H?ARZ^LyU`>$^rKr#YA{F`^LyEu8Z%9UukisQpfAAFL3gut6 zLeE&H(66MkGQQ<6I6W|he&C34RkR;yRJU+Dj>l77(`Codc${6trWcJA!(pTzHk&60 z-P0@Xtia7?{0ToQLw~#Mqvr9`y687Sy;<7WrX6PO$<0t>_ck_AN;Ykau{2@}l-($h znJRSX*==LmrVT%L_ZEBOe;o}sZW%fVJ9a)k1yfBjA^(1Iy;X_At|#9V?4L$=y(wtp z^2;xZQ-75cy2f76F$v~*G?gB#($@snJF4Ma-w+eCgWaEqeH#PX5GpOMuM5H47$VkM zd#gXDZ_nnO{ZCWG@;PWYk`1jP%r;cd74)@aCR{Ba5hXvp0 z4?_Nd!ps!@KQ}D~Y&wjZ#52KLzhb7E4iDgR!tfK*X7H1X0Hmu5`;P1TKtmBcp)i+T ztrG{B%+1SJD4*oCf0I5z7i2GsScD$-RH`G=_(+A8T?N~O9B3*lX-iMEnBrg16AB&I=;lsshc-e3$ck|avdsE11rs0y} z(45j>B(eOe=Xp%qzVX|XDCl~;>w@-N{$X5}-|)e>FRqew@$%)oVoQH@G8?82{GeJ{51v~dfqQqwy(Y9R zK$pN5=o@KE9R){INuR>>Yn*e**0FEFb6JKs-FtG9-Cg&|fPlZC3C{Y@-^0g&@t?cF zVfw!|-I?L9e`&M#T=-}5YIKvkXH=L7pQXpbd3r3RXV2>KJ`QxnzRCF0#-cJ#Iy=;i zFzse*>*d=wj@?*KJZ!s8BAgV8y&vC6(_@*Cpiqyh>GZYk21ilZ(Rbms>-ATVAgu|T zo_?c08WADE^}-uWM^bhw#8|>6TQ<0DF$Qn_7JfM2e^;aZeI zqKSQql4C;FO@T4`KCGHY5#LsvDhqLkgN&R0>()H~z-|;II4lR*U1-ly5#K)h`<J+6B!U8B`?#VQkULfaOheqNF4X>$r9aoe!PI!_dEPA@x)F{O38k7YWMN2U%c;o5}(p7^4s&j`H%OD zi5weI6VU5l6Uj*S<0qbtEr`LXHPmvl!FM$@6--yQ9i3r%UO^RU$~J z^^q-LmzKTSB)qw)e{-`ccd3gzryZ0Hz7~Hp4r!j%{u)HG*ESx*$aF zy|lnS3Soiu2Ej5FV7+2X^{)glX7TqBH@B+TC|L7G~HsL7!fHi%5eQ`-uFuCiq94S|NOq*C@Sdv ze_RhC=Wef3XY~NB@h8=_HY@sv2UH1peK)prrE3!EAfh@H_Q8FTNWZMHs%Yi}8cGG` zaM_%RbDDqpAJ*48*)g5A5tuR{3O6IB-5SYW%$He06HX(Nc8Ks}PP!g}j&8NgyP zxLNj6kd{fMeTp-eVAZ1>g~K61f0 zXf-zJNy)QBTL=)^Vx@58NHPHs6E5|*9g_xmUFZN4-ukU0N{``7q}3d_r?f4sHJ z65-O~!ny8^5O~jL(VaCMok@4B!0ya--ufcCK2lZCejXA{3c@-k1_URu^(*t*f8#fJ z70`HFCv{bC(oPfXUF;}Sur(xkN0i3Ki5i(ENMh1jcX8YNqh>l8kx`i2ac&fyWLO$aMfb`Usxcc>%@xjrq@+*~)-RD-+HKK~d^R z{izuL9w_`LF8qR~Bn_n!#2*Rv1A)wzYvC-J-tX~nf^T3q93%_ND)oUQbnZ=sVobi= z3u((YyAOD(erJ}248hk=QzE!!m?PID0>*O0MMs(5aq&id1yacXFZN@ge}}urAKehC zZ)f~k4@WSM)n#PnNY&auASK%=&fg2}WsKlHni;|=-;M&N(zYOjkOtB_Yn-a+ex0+| zuh$1Ardln8T#amsEPVnO4kC@VE^49rrelE$6dd630&ZfhGsIPW8uV%|nacH)ze3`} z49v>If*Gm~=jL8-!~r#Wf40yHQBh}>yK=Jy_&KTyI)WW5e%fB|BC(4?u1Nw!-JUq6 z`)WMS9i?V=YMthXVb-yBxxA)Dk+@EJB#^MWsEWc9I|Y|_D}ZnX0-6PU0OZG67W6Uk z<1w?9axQ_4IzDP#2XhWJr9E$EVwdEh-}q<6jY!0MloCg*@5C`}f0yfSu=tq}0_x9Tr09|M<-3&pW*}_(TXSv6e@Rl*i^1j39C$6Q zl-8H+E^Bls-zM{k=N9_vjXx`I!Oy0J_^>8lt8j+TKf_0Aeki6YSLqNmuLfbVs=4^O z$#NNUAA@nWxo#tQf6_|XgYS{hDfGzIDdXjJU^y!FDxu2L{xC-_uQ9NW7i7(_qIeqX z-|}ypp`g5ap@#(LKp2rf2~e+4A$D;1u9hhRP!&| z80tVSu({?C?_!Ivxl2^xxoVO=SAL@j4FF4ef*6Rb6b1nj)3vCyNG-GG>AxKP_^GA^ zdIhCaJP!3}n<3@OPvnu#Gt$}msn5g=_gc(Aj9Uq$#Q@=|0|H0QV;sR2>dOqf-b8$K zt_xLli+M0@f6(-Y!CBkYg5vqun!`@Ci+NdlyIJ{3fIR9mWs=wh}0+e%!~ zx?46O7?#7^cE87S3?Db>vjy@N3_T0R%%d`2IKsdEiCuRGVadyAU9sk~b|sK(0R=D;PLl#W7(e+fCYV!PEe5ZwS3Q6c%g=I5T7 zuGrQi#6^u;JV+Nwr=NXb!&dtWn%j$`IZ}UDoyVpx$AY#H?3KjX-E^mT5y6sh3>A;f z`o{w_@~JgL3%6FkmF7K0)1BaHQ+}rHET$ZVofvCg=8z5_$hFA+{?GpaOH@lk!nC~g zEX7p>!lltFgrr>{~^|it6N$R7UH_KkQnp&R?U|st~l2^*$G$pW%@;j>t8U#$0Y6?iwCvxB+dl`b#AcZIEALn>|Xf8FEoFwPaT8E0MO zJ*L-f;eZFX73Ko0opN2SZ{`&K{6>;dSW*LS1J~9c(AQv+WLAHC27o}7LT5%&E5(Wq zfB3-+S}t;C^Br#;>(;=)7=ugl{uthsI-8zzNBM)dHjWEhV2G>3_Bg`>VG8JD@?rE7 za8fKnXw$a5oP>WkVD>T&yk>t4|%Iv=eI4Y(4ui#K`=T&vr6;ivU?broSuA=*mO~jzInS_+fd~XWUn&Cpx_# zA%7Zi)%59kK@kz!9P#B6L%l`=j%A&}06~Rop?CvGmN&~}RC?YC)&wJEjnx)hHv?J9 z2Lqq^Zd}_JMRB^G!Z(*#!eoatam3H4#`0s1b%dIB&k>1uqK`4SJ?DEZL}E)$;m0xtH}5TaaLQ znl?z?_t99ZdXDTPJ!+?h9xke5?+G-%9USG4epp}P1oVW6xjDLc9 zIBY%Lji%7N8AmRsdVtI~av@^$f=m2L3m92*zpFp@=#mlWzh32Yegr|oMpp0`jGC_T znG_RrU>H|og9v>yCB^M>RyNDN*{vtVQHiGGjtuJlX%kK|s9_S}#q#6$NDKg+QPw;U z-;VDd)Szdh(aQ7!i5CKRQ+d(ssec17QStAuPm9-c2)P9sWs_5|`A+8UT9_%sdLCGL zJ+AfANK8nyj2GNASLqX(OF%kw9NJJds>FD`=>)n&aX^qa{lBz6l?OVRnt$u(uBE6n z`?8eR6toGlkBP*h{e1o;JHy#K8-VMu1jtD9S@!wLQ&~53w*>MMOMS5>wSQ%uTtwN3 z31>SG;~!o<&dynh_x}22>+gCSK#NxOy)LS6QC?6x$9h6Sd>VjLTfneM6QR!9n|xB6 zi|W3_0Rc5vZI}qp@nt2rD7RH^p}YL7=QE1?buV{wG*Ok6y+^DPIiNMkK2do;4SYAytPEN3sJHJ zMqYgniun)smJEou#_aB;^I7MV7?Z@FY1b93#Ofh2{fL*dKai=B{-x7i?fPfbq;hM| z8zSz04y(k&E2ykg%%eJFfSqOU?_yS3;aQKQiTBLB=u&33VwWLdYky4=3cpC^TiURf zs4xUq^{VpgN6AU1mU4Z?_HL^x*Ud7P#JGk(CeJJOkai2GXPMgj0`7Yx&LP%#I5td% z!Q|kQlD|#y(-c;{BH}&qoNK$gLHYJBLe|5M$#2x-6Z~;z3Zg?Q;C*U}6|YoK5^meb z8u8dq784O4!1T7yQGa+cL-oC|bX!b0Ucnwj^q%iXIa00Zb+LuiILxx}X_?0YIl|ty zd#I&o1ydX`)TT~@;xf!YTv)u~@j(W6Auh^TNsBSdH;aX~{L7p0!LVIrt86Qk z`>>o7HeKBW#Y4MTjJz_$D2+}rU^Zx)I&urfCbYmkm3ED7!aTnjMi81y*IS5tpasUf z3dOzjPdBKG8h;&wC|uU#8hU`*!aP|TsyJato~BZ^k0I#p;^+?KFzt34XqY62Zelr$ z21hlOZJ#PK=U!ebB=t8q+E!PR!NHaKLm^J}XqkYRt&mr&ba@KrI zvVlJ{neK?+QLdV42kWL)bk!@Qvjso*KG`?*DSxYhMt}FB+|#YIZIyb+rv*vwu&>pwpm?)SZ2m|A9xTfz+evctH7n7hWKU_*(&4eXs1xix(Ht zq3RB&T;W<>O%mT|o&FCAhez$H;7fyK z2jVNZF8;!?uP`of-~9n4#05|APJ+YJfQDY@QcB=w5Oxfq&B3jy;(@w3JGv4I@@DTu zrH~=kpOQtGDJe0kBV(BJ9Jqj*FmVC73kZUWZ-1LPFJC}(>PNqan~%3WWU0Dov}=PO z@<4+$6?mP1(rM)?6Oq^irXJi@X)x3dk-$ClS=N~7Famuf?R7sIwo@M;jCRs_`9dby z?V}i@P_ceGf|Q=M)jMUxK}TUfvN;_a-b0Esv&!gLg;)bH<+z9lfAZ5XF7`8v4lL!& zH-9-jTa*W!J5@R5Zj7{KP_Fw#1z(BQcRgwLM~Bq982&hbFL=5jhycn=^ck~vNxG!Q3I3V&5P z<3(6sRz&tHL8x`>cM+3~+gxQAC zFf0KdC4Vi5HnJL^0gigfB(v&%^c*sk&b)6FePczjNctjIfvwT}}T3}h+|q^iAt z(DGgmJdBn;Lp|&HbwWYwWc2ev! z5xv)`$%!(v{2PBfNZ%YzVJ}H!k`$i%*_q1_{w7$RU||J#Mk`HiLDOEYdj`Om80%7!IO?M#ZkJ?7yZAZ^2uUH`!w+?Q;I~@v(E#NU zF$6(P^z3%KqAM+{$ozUwZh!XBS9M2`(w7&tk*CngG(|ZVV+6+a~=aO~`IOMvd(g5AbF?X2?OST*-qcp&k`IJl7YqYXz=|wmeTRlukocBGz<- z+KuGRVJ}{3nqU494rKj@dI!(vpXxBfWs1G)zbbH~QsjF0e<7|2W`9DE`q>Q7c8Ki2 zeo%oXNiHG6<^R!rMyt#DDKy}AB122OS(X}jMDU#9y>|NenxIu8pDh?DJKT9LcD;+B zJk}5z@VUN4vZ7TTH_lkFcU5StFhYj0n(Nx%!0xcIBN$Fm|q zV6ts3VfrcbPKOZEWPc)d9Qozy;+Bvv>pU(^maJT~2wywSN7>vGZk`^yl5bCedUQqq6haLbcRr^(N)H~u}4om zrV4s1@W+zJ_bl*5xI=oj^5^K<=r8AYy5jsB#)R_QjA#YcK7Tw0yEDfygrt>vDjm;J zw5bsu0h3$Fp+Ad@A=+UH;IVSUw@O7uRI-T|5#sg`_g;wQOUN`dp1%p_(L2Hc?cjK7 zyhuED4_Q+#*daeI zHLL^GhR7_VuzR>izPY%o=Y@k4D-}b6u%zHQp_EaI=BJ!ER1cOLUd3_ps+at=geS)$to^#QU15$lELk zfJIu>n}7C>n*x>;D@i||J+3d6?EMuns#oGSB-B>;P_sw^H?(Mdvh{5M17xBvUxB(t zHw;i(XdYMuYBz-W_+_H#Q+sWv41BTc6YLtEjtJYj99&1p8cTN znxQn09c31@giv*mgSYp#6?kNA+FQJGI!xpsbY4+77=8Q9CQSsajL`{z-U0~us7(Pg zrGK45p*<{SRYxR7+trndpm>VGlyJwFgvWpsaUsxZ`BiZTqWS|=wMmofy;3}vA{rB6 z(%DM}*-8UNIB}4aZMK1-Ti>Uz1hns5Y4X}npb~tIGz_$^!ql7PgTnd&yUHsc0@uVw zGkspSIME=g<|pfXJ{bGgL)c}=(v$fb4q~nX0)hc^wg3NR@H+}fngajt$5GP05^K3C+T6_~f(E{+C6l3L| zJB_NzH$y>tK0;l{S)k!$UFkgr#7&zjQ+U4Hng*cOd? zs;qFHSiz4OGgbfkMZkf)rQ|cq^ncXuqUL8Tth}+%P15`v}8halU?P z^o2JSSSm-bBZ$23Gr6%lZz?^{njp$LqpEa+@Kg#Wgh9~eA5yY}D$^ z={rpd&)N*tE0>+i`^RU(;eT{Z2bs;qciI$A!x{FtDy+Of_h-RH_pKqcdy_0@Sgo)9q_CoPprf=6@T(-H93ivJKvj z)TM;hC#_OO6mx}+YU;GkohLHjeF$vAFaBd%gw)pWgoQ`qFeIqCCVw-c&ii-RV;C#n zBZ}lk(tLMEIF{z|-0>`5nvKM9=DCU_YeSdnsJfYcTA97^qGs$CTkg?{j^XQl%2(Kt#j$BD}@(={uE;&=# z3p2LIhO!5F(?>{Pg84(bQc=g+$XiBx&w#`qgo+bVF~F0)mdNS+FNQ4-=M)oA%vr$1 z11Us6ey*G{swg%o5@BU+K23d2;xYu>q%&~2(mG5j1i7J~+<&9pnV*?l(IwywH|@oI zerKP!Bi0+Ci(apR4py^JXyNW4ac=;0hfvO%6{{&_OQi@G5FAovk8`ge;D#zsc)B4U zs$h5go`99CvmlLwb9Gc735o{OGJF+N_*#w+cE?|w65MBwtdcm7ChB|0LrkJ+1$WY# zk);PMdo2@?GJid!@90dDw&%ZTxJu6&OSM<63;xa5QecKxmt#3Vh`@*8oer7vD|FtU zsQ-1~$kDZW36G>-gIHUuAC1oI`p^beZ`F+;_zdUX>kp_@X4%7KBEyf_1sr2WSt%BK zxi#mwXSJ5j*8dN*mwXx#T|Hkw+bV^umREwBn8ggZf3s z^}1}>t>&3PuZqIM5WHx@OlPZ+;i!H!S`hz&Ka8Eo(f_$`V*X=do`N={UEy%Be|4v` zYQ3oK3G3KQd!()I&$rqV7@yHN+oSI)>`&*z5r3AMNS$CpB`-_`NQ}56-a3Z01yitR zFbE_%KHzMDJdzisSvidNT3a#`J;NM*uJHtt&QRim7hoE}1392x|*OV&Jk zfq#$VQADJNi5>wW9#wjVb<;JRzlwqN7kH%DXiShU(I|JWVvKcf&w29W#INj@PB>XYzk;tmsf2+H#3(JfyMMQc zdQcZfTb8&GuIHcA+}GAN>puUyMaVh`IZ^#Y^q7@R>TU=^U;1OV!&cEA6|a+DV6V^C zs~z7EUDC#bu!yI0^8uvkBl(~A_}Oj+2I268GK*d&$+*!~5I2mEZMne9Au>PCqfE(| z>vItdepx;+j!?T=C-Ai}-K&bPyMMUaTo&&5asS9`j=1nwlw7TbK#?$?NBX-koxB;#NnnNzu4 z&5l!@ok7%k9q4CiyG|~T6TjNO4nqATn{IJrEd;BG$u#)gY=aT%NelXW@p5PDf&Z}u zZ#gM@F!`--d;bf+dsD*)aeovLM`3t|@M@yV9{gz~oLU*B-8Y~2b{=Kdf?Be~$iWbyw`(ITGJ>z$QIdFu zl@VaAgF2rYc0}!x24uk61}1YWUm2~OQO|V&;dHDH5@POnhf#+B;F-ewMu8} z5u%p>3E;0dW`D^DX)_|3lB*`XmLFrV3EvAfn{j{LDF;8a6JXJkS=9#QFZ!WwR<+CX z&8ZV+>n;Vmd1lJ%KfyEJ zQCJ2-yJCGoLMx#_P11-wWD7oFrpMCMOhG5CPnJX5rxMp9ZuhSEQ>?X>a2HvsFVG$J*@7}s;_E>|3> z+0pYG^M8mT&sf8PdYub#asX(-+)I)yD2Y>e$*y5jdDdiI2?(k6Y`J)&{I|)$Nmz|E<o7J>B{Yt6BVP2 z_K105jEoRRWy2WUqj4tAd{Y`wEM2sOP-qmfPGQd2{?0!1hhPcJU4Tm!o;5$@KQ@i@ zTBkFf9xjEh-%_AVAO;Aj@&&M|?)Lct6Mt0~NIESJE@xM<%k}#0-p0|ST~1H95a(g-Mx&qIgOvuM5_oZUnhzR}U>={~_NkV#W;5hEGT7HvmO z6=ZMxolQZ$)3}Z35J!U=HGWlA0g0wU3Vq@kxU`n5n1uX|{Zv|0@aQ{7R%eLR)iH|{ zH+wkwmp8$)*f*`=r=50%8JRxQ<>S9T#IqId@vzbF4&Vh=1s}c|0U^eMTz@WD$Vpac zzUGhb;hM?UTMhCU#j8w$KZBSZQXFGvT5LjRD|iB>zf6)f;&We39T7b$qkV2SyfDjx zr}!+T|B>r~7V46m9`7H-FdGEMk(T9ur2vaP!hpJa2WH4&1r3y^Y`TtyXn79$`HA*i z>JeIQ)4*L`?{_L;edM^E+Ak4MTv9ddBa}YV7y@^Az_lm%f>~S?9WPt*9y|(VZe(+G za%Ev{3T19&Z(?c+IFrvD7L%R84FfSYHk0vO6$LUfG&why!6^YJf2_Jya9m5UB`RiS zc8i(Wl4XmTnX$!Ei_v11#f%m+Gqc6a%*@R6e9oOacjC@`&6|%Mu`4rc<;q-D)m;&r zl2k#NQP2cr1QY|=Ix(^`v3v!nDyb_NT3Z{MSb$_0l|VLzfWKx=1WHO_2cV&o1;|#! z&py3(y*5X9Ki#`U~-YJy9751UQ)k0j3t#K!C8kf~KULIDkf6P8A>yv;{gC zS_2fEjjSz<0WucGKwC#3Ex;7y0I>d#0l*k!Yhv+FX^u>Pf3XA|0fqoaJD{<}-)TTM zW1!tXE(U-d(80#S(edv)z`_w==3r>+^tT62Ab^Ffv9+_wKLq~TO+o(>vU33ajj;La z`wON3a&&SucCfH>0{qRYAR_i3Je|x9o&L$~Xz|w#0Ga-cGyxeq|5MVxzP~Vky-tP} zwvGTNpqtY_f4Pi+022#GJ8MJtzq$W{**RGJOT*dG!q)7+7%%`FfM$jcCe}bl$G2U#d5>v$J;pcQ)wXsQ<~q!pRY6ZOVke%Jw&>vD4q&W)`*x%>OJENn2A8 zfR*Jx>?Y23|LJo9I{e!pnt#>|?OzgxCLmjDcYq1de-wdP4&?MVC4lDtPGzS5cOw5k zkof;7IU_?mNT>g{yPcqpJxm}2Jp`zWBb2F8`@Y{ zyZ@i!|9hl5@IOfYA7Lb&4F9%5(AMm)94t&M|6#On6ti#xnkZN}8Jh!44Xyw7>0i65 ztqIVS zJ2?E+_1``Jx9I;I|GU(IKsTT1KmPl|4Ts2j(cx+@8IkwfG~PTP}!8oO-Gr;dwbHvk9fe#iF*qJ*KFnSNH})JkiGP0C)LF>r3vE>x)J4V29#uoLn1? z-HuidhEbh&a!M6{^!PyiXLxX+zv~*hXOEEncQiaDpCPVy;t6Sjle>Y#U7hg<^ot8; z%#%?pbGv#;ORC33WG%Vb=1)_|tq_D!fBX$)Roc8iu!7MvEUnb4&|j-gXH7vNn_V+xy4(L!^L=*ZQpfwQMr{gO5@f1+GF z2@lap*aWTEYc{M=1?HTl#xNB}R!XTKvxCg+N?MrsiEX*5k{0l4_*~Jxjv{sVBX?jY zP{Cfii{Fw?$n?ggwv*1o2IVK^dESh!)Q?|S4CF8l`Q$5>wkqdn0xoO!O;fVoF?E-r z4Ha6FC#HZVxL~Xcl9i())<+mQe-bDT=m9RzVZjHo5ST$I-@B;%n;8B+^UN0%p6I)! z^d;Kd+IIAmsbuutgDN*%>t@5VN=8v9zXv20vY1cK>y-vQR*!EZW6k$Krs_R|M3jQz zonwQsmZW_Y2CSN$Zfk$ZR-})6yGy&Yy{Sra#X|>m^hhaUJyoR}Yt>6df3DLe9C?6e zcf%H!yy9;Rk$S#F5nF^716{czNr{O(&%!tQmaWAJ^3BX+-`_Msf4ArfbDV!8T>$(n zC~c?P&EBth{mPU062!X1TIMV9Nz=1;gqjN7jMEgl8#9@-g`ArOlc>G7=dzEO8q(20 zWRZA@H%r}Fdjn@lCTc*De>m0@MEGYag-5!u+Jbn4-1G;+Ca zn7pY&mi-$2$xE7H7B-0dLp)T*=B3w>r2|@DO4RmeEER=vPf%9Vf6LU5AstAYBbd_9 zcmAaih#u!kt@m#ox;ZukzLpxu@drCz7EQ&vV+w7n&7l}Dxul_zDYdx#t5a?_R|D7mNqn3uzsVWlcdBJ*@ zt$xgNO?#kMd(9FNf0%7lvckrkAPyquv~C%UhOS}x1>?lQ^~Nq(nlAeU!I(n&(F7A- zq7*EtG$)G@l>l?MpYcg|p<8PCTk5Sy6jz%Qnzfs_E7C|ISO9Th0Q2)`qgor=sONlV zhmd=u>YR=Q8nVbA@TVqF@@^&KK{%ac-IDz@IfUQNMQRgTf4lP*8c08(W1NM`-T@xV z1;)^F)0}ALL+kxX*=RKuC`iDk(k)!gQ2g;APD@?VmK53j%ekA8&f%$tzA%D{td(t`0xE0tXER5VhR{N%^L*+{ODTWR+8|L@(K9`*_?I)Hvnt|2eGxGojG%&5!l@(Pj zSwOMbzlR&ff4m~1Y7y)}d8wf>b&$|Nl39O=?VT0@#ZAwgBpd;~qb#p$ zg4^-?x&LZLH;Gh6zE>;V_~K6E05@6c@^|W}QU?zd!QRPs?LE*ob6%Xa$Ze9tlVblL zKaTbe${7DG2!-?9I6tU3xGF)R9TU6viprYed34l?fBQxJy}JxMay8qmn$V1u)HOlqx%6Y?$bNvnFgDvI$r?`erdB`*kv zv`W>C7*@?bx0{NZjKiJ`ng{_}HvGUZfiONF&xgzbrbhZHL)&d`Av;%n`)qlc;SDcu z#bqgJf6=%jNFfAe{MQE9J2h@P!xOkggt1(muZ`Er4vmWoBJqtSJ9I>%Dnf#PrTJ6@dWOekOfhUdNcp8tB?K}eu&&Ng#LsMo z|FBUxWQ(n2H`3age-l1`6yPnIB$?hGf%G4ue=w`hbh}eGkpOKTgvk4UX2+#Ym`}cn z9_)!jzIiM}wq~c_?M6<7MTnln%ie?$BPB}1rq3ih2DaD)n!%YXuZE>Ok8X)Gn-D#i zBDf6G?pvkU;$&TR=Pe~iOL{`+)*n+C(-KgQs96ioyUOF`RG^jM{bXAv7B`B(Jc%kw zf512ex8QGOLg7+c_lwl03>$FhirtB5kmd&JrfzHh!pR&sTh(jkR7-t%814OK;PNG? z(?vJM3F+v(H0wGq(j-|FDxQLjfNff8K7cf@+g%ctGc`=Tkf^}luk;&g);aqGZ5gdU z$TNJqG8{6s5j#%Y6_-NhE52tO{5l8-e`n=;0$gEW7)C1!DJWHJ%BWhK2k$8uLo~c5 zJH%bJ#h?_gYc4XqR+{j4kWwp$fGUr8Vd~h9(T6OI9)|An&m=V;@AV9{ZQ?M2axP^> z%eDNLcBrCw_EvNnktmzg4bOIE*z9TT=q}kviUSuUO#?N^2D^1~*hb|qGfB{Xe;6(M z;-~k88^~L6ir>PGrcR%R&YzF~Sw~+Ni2H6sU~y;ft0Pun$x5q1Y$3EIK=S}1ru&saPGu{1Y?t?^q> z5|~o}Bj<|*?)eNC)<+!7asG;Ke{5Z5Uxr--_WVrV)$(LG^JED`=_?UAX5WnvqkK#* zoSmPX39~#3Dg+zb8aWcO?4JRc39Z= zf(H>$Bn^<>W0+{{&?AL12bIDHHh->SC|{{K6DY53r0>Y~e_VY1b_*&h z23Fa>DA>3RPEfHCwcb#c8VIP4T~il3=vO<4cpUmHcG^^J-_DG^1*I7pvP}VY z6PA3OAZOai;vXmAf_B%WnRncm|pwhMQzc9dGl77!R@sXKA33Xi6A4MDOEoE^g!T>V^W`8 z%B?VCQpPBx^jSx+_k2)(L9pkwmgGXz+{R3xj*VYzG*HBv;{b-H%?kTrjm6N!AJN+DAPGrqZi*Dw{AF5KLAlJ5lpE>2O zF_=#+mYHROIOFmII%et@?=-x$sUjk1E2v05WtB#|)12)#?#&EedhwG^10oGwl6w1@cE%}hXh zGiO48J&U{0UX^m(XPrZZqVQx_2_RlMwSDh-4u_XZ z^D4mv(;a_&y2H$uHD4Rv9RGzV_PopYHeS>-R#L-Q^gGogt3R5W#AGjHwbXC2dk(K% zAm`|GdOwc>Bi>oQ6vZwxeC#XRbY|sei=t>inwrd+q?l92S_+yUp&$Yyw^kfNHl@#x~EhV>2tUo8_LEf>>_*?v|~FEJyqg<^AceZ6WI-7*`|88LeLrq*+XG zeeaNS2I-mBF|jU=yXeJ!PaG(|D$1f>wq4(If59|Mkc{gW2KCFOQ6Z*vtzh7-8);u+ zcx+P={KVfN(HaYMKM-9za@mI-gZ!PKI2F!lP7t7U2ap>&kSacilby(c+Y!pv1=mWe z5th1({5qMHy_i-sayu0t)f)co&mg?F6hxv-t(oE<+sC!@NM<~n9PxZ0VnWr9!Snuo ze?CILZ5#jZbcNQMS^tS%2LuZ&@lnWLZ1P?SBQe*8+)W?^6is`|S7Jx%HY@c^4Li%4 zQ&#`MgbyeZL0LUPna0c&qk^2!s_Ux#FSXNSc;@Tx;+-tujf)>S;C7ko1UT|9tNr^8 zM6`S0?Qj&kPMVtNd-3-^neTPHyurHWe`~ozO|aG4bWYIiK;4j7^>!tMmYy0B>e;&>zgeO2+w(N5 z0^W=%#9S3|<5(G?-i9yLhvioP~G>h2ZQ;Nv}1qFQD`!=t9BgrEw6wl;R%RA^9qn+e}o?yhX2jcNu;ah~DXK_Pi=5g=XZN(mLoxn|{i^Y0v#(9YabQ z9!N2gzORRtPh&?+rq$q@e|!m=#`V|2P8745%Tb|sS}d9&fU)v|;L~H~wqPD`1@u13 z#7zfHM}AkRgcmt!6icY6Ylx(f+|f9$g>CTkMYk5ZP#DC`?&=X2k#<5nF=D59%9rVO zm^h9cV$n>5Sagy#cW3)n=mauBeCoZXSWEg5voo8O&V-{ypA`9+e>3XoxzZCx{zg;? zK0eM@uG~<86!Vi+h{7qo6ZG(&_}IN+?p7OMqNN-saqS8GwHfVR6Jb5DiSi7IBdmJI>d+d$IeuRqGY9!{%_=x_yeuKq-+WE}}% z43ao){W1|*KP9r*_I){&hdluf7lN{XF|=C+-3D%c1(0M4>mB zw%uLF;vKI?3xAJl4cAKLYaArcM5TeQSVoVaYl~}uyUb*f0OqmMm#7kGdAThdHrX%e*6Q*yWHo4yzL`#1Pe+qOjR$&LQS1aYceoq!fK)?BpVVsnko`N}RC-v@b7_ z+kZrg+>PxLQb=t6m3^oihEtFzIuv5Ynn*fQf2MH+8jS^O!MlQHUuWLk0&a)8A@T$&IxBo60 z`D>{QN8^6UCJVVGt8{lox{x^Kc*HgeyJM%(OS&3#*u|nS1AU%(o6%dP2PZx7!NLiP ze|e-HdAVSamHDw>)4Vx41RZ`$BqUS^8(;HvA#W#){1f$emF9Qrq;cXMmg_So&yito z{IZ`j%gQ@i11H^>W><7!*YI=&VX?wTj~zZK3{<0jJFJJ*((xXil!cuv3cg2gX$j|h z$BWq;2~yvJX(Jk+V`hd?$uei*d+s&Pe|hS1Lm0>;L`YBLu-)?5@bIHv8GHTu)0HHi zrNt>#UAb%+;VLK@$@f@Xhm*@|)Lnkm2OTYlc~h!AVJj|h2vzgzd2_ZWe2p$${V)y= zjpQHYMmJCy=+mX2e^j)Z z3H>^*Xtslu4}zsJT`IncEKni?7DVX0Fd&bRHU3!gcAt@Q7O#(n9^a;w}j3Z`4GeujXo=BXq`YKhwH1wjxE(d-etRlU^yko*jetv z6Q{R>B&l?ZN+Z>%i6iQ+@O@f)e>?w9uF^~`x8hpQncz%K*Ra%;c{QcUU*B9*5w^@c zS0-J+`sN~Tm|x&7RCZ7UBL_N3*}QzaYoDC{!bGTItprXX9Swaf*un*dtmy?2gm`nee0Bu!b4s*1S-9V=6MvcdbKq@mwwr-Mpw>7RD&k!@?30!& zUG#Z-<-o^({tMY%KSW@a1;JAwMML#trl%Y~|93bBey5U_;paKof1*9)QHLAYFPOw# zA%=wcs3g0mznuxNhk$u&9ix5a> z$%HuMCDrXPZ$Izd!;i`rITJB;YQ0#|Ux195EgSv-nUF+3w;@`wi65E@M-DSZz z){4ez{iR`=`DPAZol`d{s8vuV^)`9ay7QJT#jdP=9~s7|l5+u>J7TyYv>1K~ZYCMR zNvrc&6mSwo>cZ>9jWP*svfv(>YEJ16CqA0o(3M-toVe#ML`lgJ{HwcTw%m{pvmaaw ztKE~jf8L|{cZ(|H>Plz#-W@Bl2R-E8=6;`&5|*+= z7yELm;f&RZ8&gMPX!D7gFY`Noc5(HVI(s< zJ2geB3bj!=;Bse2e1{IsVILf(!B|15B+DE>RK7~@nqOL^-VwMTjg`*?Wn@_?(Uc!` ze*w=O*JaG>hju-ky@I2UXI7OrvQGNXZ`MLBefT8#7ngnG%sW=UxwSqX9_e1!E2e;$ z1*fA!#+p%`a5rZYYzY9XGE?)h6H9f65?%zACTmAMd;V)CwPhlGiF%0b#)E=lozVURX z>i+%0zXSIhU^PFIbhxWIq!`++uHV)(Q%L zO9I({tv_J36JwVy)Of@}Ied!{e})N$r#b4WMaTaEGI}zP+KLt;|uTJ^u zJ?^;xmTxX>YhwX(0LAlKh;EkXMs(+yd0Vxf{*%Z1f@B<3sE6GB#VTWo7vKc&WXxml zv|H1-zV_#jQEr${#w&aDFv01Y&*Zf}L=|+eGuU^W6|VzF9+bA69AVHHeQ&hKim#vl50w|l75agBe7M5YaOl42`iyLz zc0}8C*!q_Rr1vWk!Ol2|aNgO&b*z96TAR!PigQi!EwF|}~asWJDv8vL8Y`r6ks9el_X6YOCc*2%OULzJQ8 z=N3YRp}z>fmm;09e>B09QF!?krf?J2`+5k8q&u(~dFT^Xhja#+(}QhJZ?;<<&sequ z;6y&!<2|C8q}Z$|7x~Ct8&uWOjm;^%))myGC278_Npq^5oVL=CAF$KG(saq6&x_r; zA1k6EUv22Pbl=P1e-FsV9PJS-8*Ya>t15>$ zzbl0S6H(A$(aeFkwD>^h!`NUipat)r$T1sv33iGDB2R@AZm4G35AT z&LpAJZh&uNX``XjIc|RJqGPX8?bTN*Xu6J0Ox#TYR`fFO!u=}Z*w~h-ygI{thGBSF zo3mv`gIaEcyfF^dQAO`;DoLrRyCfPI5vSf7uF?@MUdv6`Ed5u6J2Qqv&n7Z7xA!!b z*ah-5f9`FNeG1u){bwtSt;G}Li)NUVZXS*0pB82+QD9~F9CJJ<((T|8Lt?=r<1pc^ ze5e=BBsM>4@X8Ch1xfuM=h=in3=Ek#aRTiwP6xq&7ypm0YNW6wsh^7qavG!l5nV}h zx+vd&!zyR^Qo)Fvz-eUHSkyR#eN%8CVYh8;+nzWR+qP}nc6!2zZQHgnv27<4O){~0 z=0Eq=eYvOV^g~y7f9PFZ)m0m7uVsdH#%YHpX?+0b$cFCKF>##?MAK;3eg-fZDR0HS z7n-1I?gUZ_I6o&c|BjG4Kknmo_NaQiWX(5=cB0#>3mEPfEFzg zx3d$zf~m+5o90%zsG^%&;z`D3nWQ2RPQrJJla-N;jTE!a*)K-qpK_r$z*;s_jex!m z2`!hmLq3R+l?faLBqkJ>afStF(!k`+(AoktZNj9b%IoDpxqesDV{uydwAqaf8dj@e z9Qu*JW}D_PAE%R=-a)YcrW# z-zovs2ra!K)H#dFycT-u8;D=eXASO4GcA34vUTu{i`UDhTe!ZrSSVQgCn~WUR5SwY zi7hH!tbslTU*)ZaR z(T0crQmPz^h;F>yw_I+%0@<~`#4I})d{CwCk-N$?j0RYEQh{MBK1wM zkC@W*TRf~JG?o1-?GFL#kiR{jBH;)4st3!x>gs#xKfQ?F?M8$zaEkrzQ5PAJO162tYJr=(mC4~d#4g3f^a#OBps zx8e7CJ)cbaU0%~eO+(rXid9<(Yz11-TA@bqM?EI#ON?R2mR)Q6!$U&#DEfm1NM`!M zt~rqyjv-c+w`K(H^I>q3Y=HD=$+`u}A`4Mei)A5?N}d)-QNKR%FPyh+YH#r4olJd> z)bjwn%l&W@ek%=7#_q4E+8$RRg00=Uik|h~3nkNUwn7ryp*_C8UQdTiYB+ z+~^q#IY9y;r1ojaY7Ks?5{Hg$=c8$SRJq9&f4kT_*q;y86Ellbp;8$3dx+}{eCqPp zjiPGVo_gOVL#DZ6o+(~Rb$i6&a^pD~l)8|lmaUtqr=D^B?){x9G)lmVe#a$!X8}iT zkbm`UD`vG#?4#y)qfz0cU0m(r*+d+ffc&S??WS>o;zBC_NU*kt@;?Q<2h4P`)$c{S z2K_>bC76Q@kF!-N=#iutUl&w&**6&(H(We^Bu9a*6vj@w83akJa8-E~OJj`+84$o$ z+Y@8vzmNiXGCJb7I5qJ5FeYinpv>_nQy?>*nV-`;7fBi7_~1>kl_~r7Z%riM9k74a ze;b^9tKM?FtZ`DDwqM=vBs<_;iC<$*G+D(^QvC6?mN7|`kQ+~i^tVE8m9I}5uMQDj zXJRhks_g>PDR3DBA=2cXlGUAqgm#|}T}~EeR4I;*{m(nraRcC!aZ`P69Y!ZE1YMF# z@mwu_wOlH=dwG}SH3BS`1|2nOB%}z=s<5u)<783yx-9SNe+1)fE807xlHrPGQ&8)w z(hN?b_*n)}ltx5nn47bN+qu|VSL#mP2q0M((X`x^TNX@@| zcHU-a@9gpZ@B%dGO8SU@P=DA@pUfRA7d&a~oBcr0Wh>&qn4Aq>@7lRG!Te6$!5`5F z@~#j8$R-Avr|Dlc%##PbjW91M1V>GC)mJBiV zc+#C!G&REdG|4x3lE9B1CiSnbs>Zn-MKo@ilOG#^j27MF zIr3LyCAAR3s~ysxp2b0G5Bs>6stu2ekGU4Z5a@n5q{BbYt9S%W5LLA|urY~7wcC54 zL{+7}mjaHrUQKs2!b1`3t1nzVmx24^t#9Wc@HlWbe?8Q3V z7*6Q$H4B??9}h4c)_iPg8shrz4akNDdl&d)eSMls6f0XxS%ZeZ=y~6@>GRl;(q26g z{Y&YaH_4kbbSAekJ>XzcxwYJV-8cJ}=syb)8vvJY=y4lXY4B?x8(mmSre8dkaY*k5 zQ=l74fF>?;ds3dmqe{DWC%BVQhkA`#b!=ENh{0sKkpJ%%>8EB*;ZiJ6b@=x)i<8^+ zLZA33i>I*mjbp(_(KVk@IsVlK)WufzB8=9U+4ix}C9j9QA|U@B$`tL3Fim9kz17r6|D7Ww(QV zq8lk#KH?v_OaTR3ITyM?b~w&4=s5H2EshHJs z-Q~9n%I8lxH*!Dgsa%1r1#Q*~tnkOEE`W873m?2d7*nk0jzA>POy#UAs%~BV~qo6hkPxL1T7s6M^f9NrRoVa z1tUdx-W8oIq8^NDxiIcnIhl@KBY@A>E&oxaTj$Tj;WRWZK{V<_AO0;ZOmT4Q61?0N z;iqxaBngeFcH<04Y~OPe+<=_hXmtF!jGm$+q{5>{e^yk=6!xq2--5ucg)D*x-X@D1 zs?Z*>(Tz~tUTiz*GnwtCN8ROb9Za;-l`Ma{Bu7qZF9r$W5q}27a2;?WnFC*unJLqO zp9d!-5VMpsMFbO^^Aq;>qT*TXoNg6591HbRFwiz3&4z4(p(~y3IGo=e4MB;Uq?c5g zx_3h~YQ zXO!b?`Ppsx<6xE>G+nbt$sCyc3(}a-x!VV@?LyZ!56}24tYf$*QhlS#!oOT4?Q0wz zk@>|*@0VhPs=&Y~EkA5``wq1uYZh{opH%^9CFO6y&#Yz$(w7JIEf3+-ZTtbIb7GVwW*O7h_CI0Vww9KRGpV3xDeGSBpyr(!IYwMpivD6OpIR0T!yi0-QpVe zEu1;~pS-@tP|?~M-2YWWNgJ3!{UFL`+>k+}dS}bXul{l1A}s`cR?C@&0TSRVeLL{W zji<_!p>xhu5E1ynDT?z}v%U3r=2soz z1;z5QE{fASIQ{y=EO|Is=7|XWQX)I1*8?Rg2LdVt{|1^Xb*b!bC}V?9kIRtHm4TiX zyFxFYg33?u_VOTK@y=nO*2wD+Qp&J%vy$QS=eho{sJjux_Rx)dKE1;x-gmI*w8eTs zxiPnZ_^U&8#C^cXOm!OAxweCSS>1cGl!hJqz6c`WvN1tMKq7ux=kyV2Mt#G_)7&E| zUuu)LHMEUYNKjHG=o)7HrjWX=%fCA-<{^lsA~F>FS{^VboWST@Zd=f&~DP4|b0$p)wq5F3oq5MuqIevJ&A=8CU) z1gKrz{Z5klRexphd$pERGEVPJTk?LL$@3CIv7=5$n&KNe{D=g}o-c%R=w<2(y^JNR zPy{FLfZ%1SbX(ZQvcOpOj@nOP9$k5ciZnEH*s*j%KoMET>7jVo*N~7!q>MdBWcyN} zTZv~8P7<)nAbZ7)jyazf)+ma2-Tc!9(54=7a&VU2GAeooVNpM8Slhu1=I`JUZal$e zAU`3}c=r3Z@nJYTBbw-Kj3|ID|Keq8s?Ch+3~LbQO$5uqw`W{a971vEw4J6-jb!X~ zGkTu3(n0 zLdk%1$-c6BF-_Q+&<-V3n^k$`+sBsnBY^Qie*1i%l5KHpqzWDV<6``?0?phKeR=78 zll6&bmna2eH;bLlZFDo7tu&oxF%NbhFTiHF8ZvDubP6vFjo5gqit%+2m8=?FQA75f zX96gn9sQY$^|{&F_scVnJZfw6$hmQPac2m7Odkd!mCNH9BlH}*i-y_3$N0d0$;loP zhi2u;&s3`rx7A^I*f=lNC!&6kCNV-ub%MFmS<%i@u4aaR(|sI z**V5x{t5qN5!pN!G-;ka&l}mEvJtugCt)9{*kX-(kQ=Ve_O-7@8O?4F&5&3>Lj0bH)Xh2F!Hqt0Va zd+@_bI7*_qH7gyw_8(+bRKs`Vq?XdO-_o2&4>fKZoryaz>V{VSYURzFEe0tnI_uEs zgA;Vrf(nF=76|I?4Mfcg;7;YQULF7^Y{S_t!x3rAG%aW3KVEfoS(frXG(qlH8~7jw z5_f&BorsKiEC0q!+wC=@Qs*@f4#$jP&h>0m9}2)4AD3lOFy`FyzcNFi`U}a{r4QjS zxY`U_k-$9FN2#$d)C%)c@IU68YrSSXYLi6>G&9{GcVNgG##hCJs++t0HUQ9Mc$d>4$*x;o6V*<@c@`&r-NVFnVx7l}1g+xrQP z8(MJ;if`ei@{j;BU&7|OFo;+QMn`wJN*CggKsF8fXl6z4*7y9Gv$hRbWg&rYpJR4_1Q`Y>6{!elP37>vrX8APaj1?H@#(8XdhA5C z9Xo~nd?dJtmT|I4(S8O_jeD5P_tzy=-EfG5#cwV3rwVFYz6%(>Jk{r+UW`%+smGUD zfj)?pex%F#2a;JMtusREfcquR&nMc1Z9k3I{AtO&V#gV}S78G@%a~vLG~U4Ky5cBM z;Cc>2ez0)7!;J4;?A_BiVAw$qvgOpW(809i7f`@cae{ODx|9Y%bVkfg*dpGWEJG-d z?Cc_9BF9_hoBA^gp4W_Eza=}Am9{x2Qm@+%bV*-10QzD(TYT-syi33R zQb+_*YDS65Ux&wMrIy_!{NC`{0{i(g0*REW2yU*1@ybh^ zv(LC$wHK*>+bmucWgVm5o5OyV&8|Wx!R25186xsJ^YjQXz<4?fKf5%QR@fmaK-t!0 zVGTE`X9O!)fBdGA(fZU@lWGtZ*@NWAQ`Fi|vt~P4cs#@xzuFITG>G}$n1_`b@2dfB z*&y(mkv=ISMwLi~cHon^xn@YCs0bx&2_@#aSl*wqediJPZeg~babk(&xI=eY(@EuC zbfKiD3jYjrFVz)E##N&D!&gqOHlx>MquN-Dc6?Rr8W);P{9&yomBpU>wkTdRt&v{<<~Ns3Fcaj}>lF5&=}iJ#(5U(6 z;P$%cP;0D!pp!S&?*pW!2M~R>HWf*J5ma-XIQwS%(WpoIX3rghw(J5^F01j5IX`VG z=^f5(EfYpv1WPE>L%a&_chq}L3n{JXUx{J$Zym%P4W(anC@(S4(b@IBe_c!XFv7gtsk zyqJ@#uOl0=J>VwS-1>UqC4}r7uPUsAV1LY&M_jsRS*Chi;i63pJ&9ke;;WG;NhED0 zi_;%E`Xn6xWAb9}ok*aLhX>~XUlV; z1otRtQ3FoOGAXF%=fNA*fjK*?2@kJA*N~s-PDbc8BVXf4Lvyf8n`Pl5OSH#tKyNM2 zvEa^TwS|T*f~p+uU(YhUW4YbjrNXFE0L7k5h!I#p5py0Q#Uf^&8fJMH_A3js!TR4j zuR0BKybCQ&3d4ObhYj)Cxa>WJ&C?qM_-v=tmjyUZoB`#OTMH4nWod_}zCy!nM;Uoj zcxU9zd`Qq#DicO_V=*Jo4COU#fZvTz+Q6d|OC)!$=QbY@hEY7kN9=^d^ep0}27Ojy zOl*XS2v0!}g8bcgi_@GmAx(2wz`c0BkFlE@`%vfYtuR}E>6cSgoc}`;~Lmi{D>MytGC=UD|pzBRgk!+I6 z>cWZ~WWZ-|xFZ)X$^Jr6b?i#~{%(Fs4hcexf+t9po$|?95P5q|>CV#gHEl_)HNvf; z7WB$^`%t3gWWhBVGDl=`t!N-M=Q|#SxZHJEFFcw?DkU18W)-^NZn@PyJ;twJpWykn2EK+BatAZ#OO#fBZS|^&;M* z(|dSU;u^(|88FqZ1}H+c5Sv!Xs^N9#FkJHuA3Dp?Qx~t$^oWj&3}RyI(O+aVdm#mh z#=!$79;je`ec1b4{OVh)yM0to2U%N)>s%UPWGoS#!I)0?5=1K;@UH%vnSm zq>o{iDA#)F7*^D#p*BRQk`io2PiM`-%UjipGQyB;qj9kc*jIB@sBLyo<>~uiXh*n{ z`H=)PJ7HayIS6*8ysKesO=SGUqJ5T~Bx!!LK~=Pq6a>sp9SggEN27{>Od-6PX8J9C z^C$sPWK~#lXU#FS3b1|76L^wYFrp=XKQ5;5HbwU`VVrHJ763dDO%Hlw10S{Wd(6SJ zn3}I2K;7)!S3WA#GMq~gA!(xU5EG7Y1x;p8OK-Y%6yvj}uFIKY7Nd)ud*3PvVhD2Y z`+ICIrN8aXq)^?bIo*XvZZzJ)j30~Fdwv=$Kx-3_Sf-Y800ivjH@)-H>qqlBgYcX0 z#t1e-Q;il{rEXTS)bMVeHtxj+37D7aTf90MgAraeeBmZJAFiUo_`#heEWZ{8o90HN zRW|d5d@uEO>PfD|H7H)2K3`})Nwkw&@dYf8+*a8eGr*1t}=i~fA*xwwRV$LR?m6e&{us>{3*C12^B zMF_R0B&-x%_!EHx1+VrsB(@Wa0YCrOYnQxt8N!RGZK!`Uc$)lHiKqP?XJ|EK0O31$ zyijWs1yUD0p!cM9bU(>Thw__?Lgf(^G@gkSl3l1}3y2A_kn1%Fi~#RA;0W^WfLsxN z5P@{NwTuG9Cdpi;w#0`oC5&-S5zNb!_y3LX=eA&;m}l>vw%x}{aq zanv{KGRvm8>i)8huEBryUff9t5 z7nX010T>9?uM-3Weog)Xy2qaum;Migs0~P)CkmeXjia#)p3!0Y?zj93o&U-n?=6#> zZ?Y7ynyr`E*Jq9KGNI>NYqa2#Hn2oP^6erEgUWhQ_a$@sKfxd`jUptx5~R_ zbsI9yo!;g^>9@oFA~v1-6CA3vB+ZNp>a1h80&&H2vsc~z91u&YD71cujP66x4eC^} zOxmN)zq1Br$GqB6>*=vn+?oX|pg!>Oz9Y-177zi0rlk0#CZjUCLLxvyj zz&~@!v|L?YA-U3px*Hi|doLpL5$k-imKU#93}q!0r#L8fx$7kU(!9=ud2lYB6{VK2(EPQ?}e(JU2|9Za0~Pxm`XRWy|WFPw~S z5whR4Z#^M5AX3wh^Q@`rXi_{k1j8HNtf}KK4h7}gcljLZY~2MrnAYqk#HxGO13(+i zg)#*Q?Y3pDC~IuC_*xE(MEBDSSS?UbEpBw9Lz5%dMq-y_LpAM$C<~gGUKh?#0xF~j zoSZ>>kCuB|J*gU|N58;!)p09;32AKNPN8chjnMtSyQU=nzM3;eWT2Sz@T+fss{cnA z*LtA($8rdHznb)cYV;0Nc~rF*^PBalkZ$u^BZ*DvW8BixAm zg@TJmx*|1^!Zrn7ck~$ps){-$v*9gRTZhT8dYe zP(~wDN_6Y2@4>ZgOMVRj+f&R#?CS8zZ(m@uSWIV$F~SpBd{TwE8S6dW{X{X*y!c&s z4EG{r9NJLvP|)0M_eH-vqWbg02UG(MJq$j=q(8;M`L8)2ww<0BYTu5X{ld0xUy0uz zTNy>rp-PY412$z->B5q}Ie6X=GHDV1u8!|JW4VI4|CYp>jD&{(Jb%keSFp2T()c0G z=#Ej^=dC|m5-1Zf?bJ+>a)_DF^xs8B|(!PBI?;d7z*chuMHy?G841rEgBiJL&>YW!2A@8DaN9JIYfsX9Y zabI~yx8G(ddo~yW5Xr7s-gG&wJQX!I@EcS!6Enf%qQT)Yj5=<`m+P??u*fsOT_NJx zsH0B#bs6K=pH303vf_Sow?1m!P@#g}5$R<;HnMH`zGmKEv_z8S9xPJt!%%bx)W3UI zUGPzfW5=M!nh8cA7t z%Y4ZEkGJp6pH9)dCbmXhb>Ow-1Ces*9C{qikQDhV^s@sEf@;yY%I!0WQ z0hzw8D;M7?Sd`(nkYZ9MgL|P`jwkYcOO#-)t4N4NjC7>cGduIq?I4rZU zQE9atzHtg4es54TdJ07Ipy9N@$sNj-H5vD8pdFnD-oZ7sx!sKg%LHXcsf`uN=d4n9 z|Ip|j+8LcUODaiSoXBqAmqHNY(UKvAUP-gvdeSQ%9&;L-*%1)Y1tWe6)#{YG<|Y`J zSVWxA9(DU*+BwNa*v)q2=|~m+x+^?qXU!CZs&Mv)rEITtKmH=T+&K#05~tXl(!5PE z-Y1L)I)rN+P+@WoREx_?5P01VYGO&fFn6i?E@oNz^xJ&TAj zOfA?Fn`Gy@{jr-V;;O_T{Jq-lh^bY12xp>g3~=;rfq*_UzdZhg9<*#EArI8aqlu5R z&}j>pm50p!b$i1E54Ic6Y%yclSNpdW?l2J@=qhQ@OoUqtgJ_NdrHRzWl=>n3oJz}R ziT$NnhmtBO_C_FWi$b;?d+?fSmcJm#^e;4u`T)ILD_P}|O-KyeFwl1R?yAUPip>gT zkwm5TgC;z;>(K?iScMt?RNG3)m>LC?+sL=i6&NO6&f*>cq86yItq9?LmWMBBVukB z^3Y_c0`n_cH<~o^59rN^LTyWvd`@yfU`NzVcI-yr0+kcmM&s*f!_rWN5Q|dcnvv$* z2Ij+8-vkKj>GnIY<;q?CQ=e01Lt49Bqs5jNw66xWTZ7PmXQtg_v7bWwh>{$lLJUXX zTp){D_Uy8Mq`aUl@K@#O=RwpU39Sh@QfuvEE5=nLC{OD6CUbS5B&P9Gz(9bjtNJo*UUsP?t9#4fRMGS0 zTl6(~G92^YA-t<+0Nxh?0R;OS;MRs}$0dGQFewa2x0s~mEJeM}UI(T%UQ4@{WS06x zJDsQ#Qg!hT(%jMX7!-blTvDnL^;v^NzSceZDzC}(t3+)@bE`{b9mD)i_4Wfy@r*VR ztZK+d9Wm-Bh18dJ(#Xs(+S<+0gR3kd(Pik6{a)0U6~YorxlBeGjrF`G;5*jZyJd$x zLX1+{O{q;R>Y{e9Wh`+CZY#LQMC}9hJ%$sCe0*Z-EqHllm;pYM7id+CHeT554O&z# zZbjIYSa01J@*D7zA1+mjFyt=o7|=fVb^Xi7TAfnLj5je>K!icIX|WIH-PmE9QclQza4Kb%{ca|K{S>HNq=DKq#uSMFSOs#B>o-v~UzuDA zL~7-etPkFotgMiVl2V&`Ci$u4ei*;6^QNvRp(foMC+vt^gA&qXpp(gCbvDYjlaH1T zBMX~US57HKeb?_C z^&F6i($;lvkQ{mkULq?pjct2SV5TJgA-M`n()GBQ6_I*JJB|X9m!Lp^?;{XJgtWcO z%nfB=%hZzJ!CKSkH(3Ofb#hnF6O$#ZLe9e66at}#Ejc+khO53s*5Ivq--El5f;`2~ z(-iL72E>pN^Y9uuq9}W!)@@BycQ(mI5V@-x!gC7^?=NHk70HI7VZ!S~!P6xQglu&E z2tu-JiL}w`A5`QYh0tBjXly7J4CjBezyg!?UPj0EO7QWQ$!pr}nfxhXvgpXDN{-u+ z3b2RkKd-miod!zaDV!KRf7ad#dcdw(I&E8N6bEwR-hV|WJ__agofJbcwylBM8uviB z*?lAuoj{WT2KfpI-3a+@WWuQ{2VH8**yR#UTh^JBC8Ijig#PBfPY5}*cyESq*vs)9 zzE5%E40)b^d;c{|9F&W9ZnalvKX~F6%? z+hW?9%}_A<&+y>Wc`_7mcTm%d#2*1uqZU0DL$q*R-2sFR|EOr)7J^2*k}a>MCKT#d za$uh0{J?2(mtIt^_v@DS)!Z<3+}$myhSH-$#1s-0=KayOQKL+rf4<1@ltanu^OL>- zRlc-}Q%0d$6YuM-%w8q~jPQonfV1@@_@V8-J9}1R**~71t(Rjxi9)lDn`J=jX@q}g z2N^t|ykR$x^p73H3);8doRS_lagk;+?DHqj;@dsK2a8*V+!gwx=wrNaB*=Bx6%vNW zyW0G9e#I?0iK}}4cNW!cE%;oR^`w9NH)-rIl;CTwc3hgK$sTnkFBbJ)+QULMoxaS- zq4U$y!*I`+#JI`9+LsV8vL2jc`Gx5Y^~%k`ALLnkN#vUnSZ}l*k{yDah?)M!=Zso zP@Vz%VV2PuOC=K|A*vPZl-Z`|Xcj3}1z4m$m~+{tKskqkr_%Ig1D-EkUxzE?J(N=#sXX)VIW%rU1%Y2!|EH?G;3Ndt$23v%nD^=9 zBq|5%q1^cF3X{pd;1EB=4M`WKZWIMe zRC5)VC$EACg2GerE)Ut$O3ViE=jBtixho{hg|4fVK=o%hO$i0yx^dW&VK=`I+#)f& zBDfUMBD{5_k@SS#Mpyu!?c-=TKf88tO>a0bc4vR*S#eDa45zt57jDINu4ljDwtuDn z#^mOcB59DSc|h}4RP`|8=>8ZULBP@Um~f)RC2400MRb3OQ2{9;er408u7Sy5HpTKUb@L|#PSJ8YUt0+%1VUW$)IZJG3CrBV zsE{om?p+-J{=$dc_Yju3*N^d{r7Q0*R#p32lh*`QFS8U!>EMBW9~EQmcQY#gjdEL= zQt-+x{oO-qnptM`21U3mo-a|RQljXezJaG4+3g|C*6SCvD?jM<7yPMw_#v?Ks2KA>l9 zdChT{P0@>l%@<<))z$TtxiQ`nDJgaO+3nxrmmphcTU>xsYZm~*Cs7ov^{3;`lh78xnUB;Y z?&q|`tyT5-B^8^G>1yUnTjD5jmE+k=Yw(P97o{j+NfG@B!OaUKGJ=Z$%8PmG7xt0c z>_5rOeP5Dq6W=T4JO-RTH3zw}8{_S?vcING7reM34z0IKLEMj8QJtqXajW4Ae*WMc zim!jwv2Ox4mNz~Urj_g`V6$GbS2rA4j?b60kww~$1ZnVqB}mJZzY}1IQc~8jPPETB z1$J*k?kHHD?acxaEoBDjp2I4>UC!xq&it0@Abd{Gi6caa{eHvAR=xk>Nld1VZ)1s zQ}3s^ShEUHqkC#{8N*VR2Qe7Bo^j0X^e%$$k{%Cu2@tps^_Dc9CWHM0D|Y8b(=}4Z zOevjq2m&E%qNaB`h_br4Q?>&&G+IO21h=zQn_44eAb6AFUjp~=V+FT>TjhYinvzrM zx;|h7vSed%JQ)p&SZ*;gOzsOf?8q$c#lPr*vy>v+Eh^^+^GiLzxQBhUZkaE{2tkpA z<`(Pvq>^UHV15e_Kc!7%Tu7iqKsx0Mgp|$O&xL1#RvAg-L->`YJ35B_-Q+zV8dW}1 zM|RIxCtfVFE<*YB!SqKN^6ulltg4N*BtucUC#1^91#aVBD!B%ca7S z1%!~NMb)N9JteBky{qCjCnUa_{uG%r3iqu8P2e`;Kv4Yj}oW(VSto$jzv3Lr36?) zuAlx;dP%rDJ3o!{zN5Jj3fhEjE6i9mzEi;dHSheZ8}pT(UwjE-8ndxZseW0}zD1)T zA`?zB2vYwEC>;UHb1w_u#M*BfeE($Z$5$Q>RAu+0G<-4iDO9tlWDf8RaV_q);e*;J zB%r7sdbnzxKZtBpP!fZ#O*hX>UjrWr2{bnC>0DJpaKi=MF?2TN&j2D1z=>I{K zOnz=v>IoaRJm6uyEZ)+~$XJSM5HpgWUMarK@b@p`;A6qk1X)K_VK-YT%0_bb^Xf9W zs&%)mnQWFhQO7`Z=HN=JpmYq=r=lgK8ZY}?=^Fp;+8sCVF?1_n=`D5Rn2i%ixosn} zx44QN;v-zcNU{gkXshskcLZ1;3dSqd$cU^)oG5>3a1%cEZ3+_`5s)VTu8F|qbN~m* zBb&6!+b(#jH?S!~(!f3d1OkfeLOfbt!h$YGVJty{VCGoY;DV;4hJ{6+xkb^yI-?3Jw8bmY5v z0aO#ykM$YC%BSKcO@q)2o=H59%HyR6@!LxI$lF`o%6$_cJ|QV$MBkxfIbqJ)W)i z^+m=vdz_!37`Y>~I)HE)(|Q}}xfCeli+*Y`ske{dE5-3ykW&56ZlXvf>eTToex>L| zFanZfjA)S_aV^on6wR0G*Sx-T#es9oJig9Gi`16Td65^lAo$7s&=LhX`c&fv1tx5x~byTYxj*D_}Z%6M%xgA9}NbichGL?+dDYRmLXOaDQzht`asq^3jL%+&J z)~N?F-9X(>iUT^y8`JS<%$aq)Nc%)*C-ibwtB6%AJv=%5r1T<&*)Z$_$Z|Qspm_PP zYkolWwEGHD~2O>q6Z zh)zF%uAc9Vz1?p!kC`Lly_Z%g)a9*AE!6H-&jpN2SX@kah;9p;-*|!u28(%1B-LES zimK;2@I0lI$PGL)6GG)ax-bU$6j{->>a$K0%r9hMoBqtkGqvW&?o9{}hEUQ*7J~I3 z%tjnjfNsRaCe!s#z^3Vp-<{H6Zc)^aeUeQjITp?_+${cC=PhsBSvfzzbLyKgd9op!@*qkd%WVa{l^!?mb!Qx=vxB6Rc!^C5kaR~ z%>0lakb8IKJY5}PgAU%)-pX!p_F7Lj%Vs?`S4w>}F0vEylyb#KOe%{|3_%DL{kM4Ddh+@VJ@a7$vM- zT-``GxVYgM<;)!{-K8rXv%YmOXk&R26TZ%baq_8HQv$^^|w1n!zX-X+r<)mim z(KVPxi0p%7 zF0ruUE+A!ge2HFlq-ErK{s`G149=mwYkP3~l#w6=n(g32zlOZRx*HOQ`;EybO{DeO zl@Z=JG@{GvvHsSd?{U4O#D)hG0?^z-7&F>jh-7=DHwVU3D9lKjW8RLEBf+F&+DaIp z1Y+h8JsSIeAYs7VoxtS7gG{mfXre5~wCgWWm|#(mzK_nt5r7@etq1A{)^oSlqLPJM zDdvOd2O`6+vPF|iLCvFhQF!*tU7*4;;rgCSgr`LGGcWvW4MRrC4di%D0<1W%)e89^ zuQ6hnGubu<;^&u$1`efIhE{Q^By?2Y+3STdHxh71Kv});dxCgXU0MheQ<1HeRg+sZu9;qE~BOVX`E06?)w2+ZZ^ zM{Ytcj^5MLQbYEbXtb?0m4Ltysri-|(TZwSgrtQ3YVI#ZtM|(*fTkqV$`eKbHzHz* zKXoR4JbK{^fyXcB5k~>W+@BcA*T2rXf04iV<%l+~M?vNhwCLbI`i677EwLpM`e&5e z$4wCT*%bngTtrQlGaoa~b(e%(+j(vv(-M0u3W~dwCixPD3$%4iPS&Xu(USUT5_k$6 zr*i^tG2QWVMB_gdi<0O}7-tj^zdhk9fpR)Z@Yk8oI_?feWX{qDDsdLNMZT|p^ znbh%SsWou}GIYmVOkQti=ZPK4DzKjPJQ&`HkxiYI)tW+y<)~`CqdRx2ZE{k&h}HAA zH$QbsSC5YDRHgvU3skj~J?l?)-Q&fV+?~!p+joDN^Eis}fzg0*qu3tmNOu(iG7VqP z1V3}j@n*d`B=jo(D)F_&P3u-JxyHvkvmPVMvoST^Gt(BtLLU;19R!pN9Ipihcpyb#{zF2hTc}WM+3Bee>aoN- z2VP%Ju0{>1Oou9!oS+8BlPIi?cP}=d`az4q0QL^{`&c*>4Ksa=8S-b3C%&*9j|lcc zF|7J^AvWzz^G+mO8fcJgA|E7w4(R8?zq&W(dEYvD2cJ)iL`!m zBlc%pzFI3}y|8d2+N)5!MFybBnR91q++b{%m9dj~bZ-}i_s+vqOhrg_qt>BFI%%1B z*=_kKtF`bv`=y;fJihh(oP|$?y!0nJMpr@W&Ij%$j$boA0f*(xg1WLwD>)Q-fItm# zNPqW(E)Sz4{Du;ee%AGZ!p+`V0K!UdX*n$rLXo~aJIkElGkc0mGoVr2?O*EiE$P@@A-cI6^UkGOJXeRgmw zlg-Kq=w*m;yy?+h-och=IrdTwxdcvs9L*5q?;L`UhdT7!4A+7`_{UTRmg3)+9@qKeKR3UQk1 ztpl|K^U6G}*Mphq?;4Q1cWpHsF&2cc^3P_Q0q#=Q!+}-pTX(t9F?>eB=`02fO1mp{ z8T=kop1vJB!xaEO(yego&V}mO{w(J+pwp2v;;h+k(L;JOW=L2bu*}+AX6RwCMMZ2T zZxlgpu42xax^k+7uV!pLk_Uoy5C)<~-FW)89Y)+_{+&nNbaq=E|C&r%t;)(A)ns3o z5+vi_+u2I${%uC+kwMblSzxB#%B&OU?EUxeX5TN<01exrSrZB++Fi zVI^Vy_f*Bv(T#+g^WPRK|5;(-NW#tae{aM{bonHhS=fcSImNj-SVY()*jWE5?{aXm zi!+IEa&ZcCvvCWM{O?o#z2*OS!Vn}Z|2*M78cTSTmZoMxPkxx diff --git a/doc/arm/notes.txt b/doc/arm/notes.txt index 061d585d68..d3f88c9fed 100644 --- a/doc/arm/notes.txt +++ b/doc/arm/notes.txt @@ -1,4 +1,4 @@ -Release Notes for BIND Version 9.17.0 +Release Notes for BIND Version 9.17.1 Introduction @@ -36,6 +36,59 @@ www.isc.org/download/. There you will find additional information about each release, source code, and pre-compiled versions for Microsoft Windows operating systems. +Notes for BIND 9.17.1 + +Security Fixes + + * DNS rebinding protection was ineffective when BIND 9 is configured as + a forwarding DNS server. Found and responsibly reported by Tobias + Klein. [GL #1574] + +Known Issues + + * We have received reports that in some circumstances, receipt of an + IXFR can cause the processing of queries to slow significantly. Some + of these were related to RPZ processing, which has been fixed in this + release (see below). Others appear to occur where there are + NSEC3-related changes (such as an operator changing the NSEC3 salt + used in the hash calculation). These are being investigated. [GL + #1685] + +New Features + + * A new option, nsdname-wait-recurse, has been added to the + response-policy clause in the configuration file. When set to no, RPZ + NSDNAME rules are only applied if the authoritative nameservers for + the query name have been looked up and are present in the cache. If + this information is not present, the RPZ NSDNAME rules are ignored, + but the information is looked up in the background and applied to + subsequent queries. The default is yes, meaning that RPZ NSDNAME rules + should always be applied, even if the information needs to be looked + up first. [GL #1138] + +Feature Changes + + * The previous DNSSEC sign statistics used lots of memory. The number of + keys to track is reduced to four per zone, which should be enough for + 99% of all signed zones. [GL #1179] + +Bug Fixes + + * When an RPZ policy zone was updated via zone transfer and a large + number of records was deleted, named could become nonresponsive for a + short period while deleted names were removed from the RPZ summary + database. This database cleanup is now done incrementally over a + longer period of time, reducing such delays. [GL #1447] + + * When trying to migrate an already-signed zone from auto-dnssec + maintain to one based on dnssec-policy, the existing keys were + immediately deleted and replaced with new ones. As the key rollover + timing constraints were not being followed, it was possible that some + clients would not have been able to validate responses until all old + DNSSEC information had timed out from caches. BIND now looks at the + time metadata of the existing keys and incorporates it into its DNSSEC + policy operation. [GL #1706] + Notes for BIND 9.17.0 Known Issues @@ -62,6 +115,14 @@ New Features percentage value representing the ratio of IXFR size to the size of a full zone transfer. The default is 100%. [GL #1515] + * A new RPZ option nsdname-wait-recurse controls whether RPZ-NSDNAME + rules should always be applied even if the names of authoritative name + servers for the query name need to be looked up recurively first. The + default is yes. Setting it to no speeds up initial responses by + skipping RPZ-NSDNAME rules when name server domain names are not yet + in the cache. The names will be looked up in the background and the + rule will be applied for subsequent queries. [GL #1138] + Feature Changes * The system-provided POSIX Threads read-write lock implementation is diff --git a/doc/misc/options b/doc/misc/options index da91545aca..2962f839ad 100644 --- a/doc/misc/options +++ b/doc/misc/options @@ -339,10 +339,11 @@ options { nsdname-enable ]; ... } [ add-soa ] [ break-dnssec ] [ max-policy-ttl ] [ min-update-interval ] [ min-ns-dots ] [ - nsip-wait-recurse ] [ qname-wait-recurse ] - [ recursive-only ] [ nsip-enable ] [ - nsdname-enable ] [ dnsrps-enable ] [ - dnsrps-options { } ]; + nsip-wait-recurse ] [ nsdname-wait-recurse + ] [ qname-wait-recurse ] [ recursive-only ] + [ nsip-enable ] [ nsdname-enable ] [ + dnsrps-enable ] [ dnsrps-options { + } ]; rfc2308-type1 ; // ancient root-delegation-only [ exclude { ; ... } ]; root-key-sentinel ; @@ -689,10 +690,11 @@ view [ ] { nsdname-enable ]; ... } [ add-soa ] [ break-dnssec ] [ max-policy-ttl ] [ min-update-interval ] [ min-ns-dots ] [ - nsip-wait-recurse ] [ qname-wait-recurse ] - [ recursive-only ] [ nsip-enable ] [ - nsdname-enable ] [ dnsrps-enable ] [ - dnsrps-options { } ]; + nsip-wait-recurse ] [ nsdname-wait-recurse + ] [ qname-wait-recurse ] [ recursive-only ] + [ nsip-enable ] [ nsdname-enable ] [ + dnsrps-enable ] [ dnsrps-options { + } ]; rfc2308-type1 ; // ancient root-delegation-only [ exclude { ; ... } ]; root-key-sentinel ; diff --git a/doc/misc/options.active b/doc/misc/options.active index a73efddc88..c44b0d4fb7 100644 --- a/doc/misc/options.active +++ b/doc/misc/options.active @@ -306,10 +306,11 @@ options { nsdname-enable ]; ... } [ add-soa ] [ break-dnssec ] [ max-policy-ttl ] [ min-update-interval ] [ min-ns-dots ] [ - nsip-wait-recurse ] [ qname-wait-recurse ] - [ recursive-only ] [ nsip-enable ] [ - nsdname-enable ] [ dnsrps-enable ] [ - dnsrps-options { } ]; + nsip-wait-recurse ] [ nsdname-wait-recurse + ] [ qname-wait-recurse ] [ recursive-only ] + [ nsip-enable ] [ nsdname-enable ] [ + dnsrps-enable ] [ dnsrps-options { + } ]; root-delegation-only [ exclude { ; ... } ]; root-key-sentinel ; rrset-order { [ class ] [ type ] [ name @@ -621,10 +622,11 @@ view [ ] { nsdname-enable ]; ... } [ add-soa ] [ break-dnssec ] [ max-policy-ttl ] [ min-update-interval ] [ min-ns-dots ] [ - nsip-wait-recurse ] [ qname-wait-recurse ] - [ recursive-only ] [ nsip-enable ] [ - nsdname-enable ] [ dnsrps-enable ] [ - dnsrps-options { } ]; + nsip-wait-recurse ] [ nsdname-wait-recurse + ] [ qname-wait-recurse ] [ recursive-only ] + [ nsip-enable ] [ nsdname-enable ] [ + dnsrps-enable ] [ dnsrps-options { + } ]; root-delegation-only [ exclude { ; ... } ]; root-key-sentinel ; rrset-order { [ class ] [ type ] [ name