From 06de2249b599ae140dad94c577b77efa16062bf4 Mon Sep 17 00:00:00 2001 From: Mark Andrews Date: Sat, 23 Jul 2011 08:32:06 +0000 Subject: [PATCH] 9.7.4 --- RELEASE-NOTES-BIND-9.7.4.html | 235 ++++++++++++++++++---------------- RELEASE-NOTES-BIND-9.7.4.pdf | Bin 55319 -> 59454 bytes RELEASE-NOTES-BIND-9.7.4.txt | 72 +++++++---- 3 files changed, 166 insertions(+), 141 deletions(-) diff --git a/RELEASE-NOTES-BIND-9.7.4.html b/RELEASE-NOTES-BIND-9.7.4.html index faf9424c15..5446df1701 100644 --- a/RELEASE-NOTES-BIND-9.7.4.html +++ b/RELEASE-NOTES-BIND-9.7.4.html @@ -1,68 +1,50 @@ - +

- - -

- -

Introduction

+

Introduction

- BIND 9.7.4rc1 is the first release candidate of BIND 9.7.4. + BIND 9.7.4 is the current production release of BIND 9.7.

- This document summarizes changes from BIND 9.7.3 to BIND 9.7.4rc1. + This document summarizes changes from BIND 9.7.3 to BIND 9.7.4. Please see the CHANGES file in the source code release for a complete list of all changes.

-

Download

+

Download

The latest version of BIND 9 software can always be found on our web site at - http://www.isc.org/downloads/all. + http://www.isc.org/downloads/all. There you will find additional information about each release, source code, and some pre-compiled versions for certain operating systems.

-

Support

+

Support

Product support information is available on - http://www.isc.org/services/support + http://www.isc.org/services/support for paid support options. Free support is provided by our user community via a mailing list. Information on all public email lists is available at - https://lists.isc.org/mailman/listinfo. + https://lists.isc.org/mailman/listinfo.

-

New Features

+

New Features

-

9.7.4rc1

+

9.7.4

-
  • +
    • A new test has been added to check the apex NSEC3 records after DNSKEY records have been added via dynamic update. [RT #23229] -
    • +
    • Added a tool able to generate malformed packets to allow testing of how named handles them. [RT #24096] @@ -70,159 +52,165 @@ of how named handles them.
-

Feature Changes

+

Security Fixes

-

9.7.4rc1

+

9.7.4

-
  • +
    • +named, set up to be a caching resolver, is vulnerable to a +user querying a domain with very large resource record sets (RRSets) +when trying to negatively cache the response. Due to an off-by-one +error, caching the response could cause named to crash. [RT #24650] +[CVE-2011-1910] +
    • +Change #2912 (see CHANGES) exposed a latent bug in the DNS message +processing code that could allow certain UPDATE requests to crash named. +[RT #24777] [CVE-2011-2464] +
    +
+
+ +

Feature Changes

+ +

9.7.4

+ +
  • Merged in the NetBSD ATF test framework (currently version 0.12) for development of future unit tests. Use configure --with-atf to build ATF internally or configure --with-atf=prefix to use an external copy. [RT #23209] -
  • +
  • Added more verbose error reporting from DLZ LDAP. [RT #23402] -
  • +
  • Replaced compile time constant with STDTIME_ON_32BITS. [RT #23587]
-

Security Fixes

+

Bug Fixes

-

9.7.4rc1

+

9.7.4

-
  • -Change #2912 (see CHANGES) exposed a latent bug in the DNS message -processing code that could allow certain UPDATE requests to crash named. -[RT #24777] [CVE-2011-2464] -
  • -named, set up to be a caching resolver, is vulnerable to a -user querying a domain with very large resource record sets (RRSets) -when trying to negatively cache the response. Due to an off-by-one -error, caching the response could cause named to crash. [RT #24650] -[CVE-2011-1910] -
-
-
- -

Bug Fixes

- -

9.7.4rc1

- -
  • -Improved the mechanism for flagging database entries as negative -cache records; the former method, RR type 0, could be ambiguous. -[RT #24777] -
  • +
    • +

      During RFC5011 processing some journal write errors were not detected. This could lead to managed-keys changes being committed but not recorded in the journal files, causing potential inconsistencies during later processing. [RT #20256] -

    • +

      +

      A potential NULL pointer deference in the DNS64 code could cause named to terminate unexpectedly. [RT #20256] -

    • +

      +

      A state variable relating to DNSSEC could fail to be set during some infrequently-executed code paths, allowing it to be used whilst in an unitialized state during cache updates, with unpredictable results. [RT #20256] -

    • +

      +

      A potential NULL pointer deference in DNSSEC signing code could cause named to terminate unexpectedly [RT #20256] -

    • +

      +

      Several cosmetic code changes were made to silence warnings generated by a static code analysis tool. [RT #20256] -

    • +

      +
    • When using the -x (sign with only KSK) option on dnssec-signzone, it could incorrectly count the number of ZSKs in the zone. (And in 9.9.0, some code cleanup and improved warning messages). [RT #20852] -
    • +
    • When using _builtin in named.conf, named.conf changes were not found when reloading the config file. Now checks _builtin zone arguments to see if the zone is re-usable or not. [RT #21914] -
    • -After an external code review, a code cleanup was done. [RT #22521] -
    • +
    • After an "rndc reconfig", the refresh timer for managed-keys is ignored, resulting in managed-keys not being refreshed until named is restarted. [RT #22296] -
    • +
    • Running dnssec-settime -f on an old-style key will now force the key to be rewritten to the new key format even if no other change has been specified, using "-P now -A now" as default values. [RT #22474] -
    • +
    • +After an external code review, a code cleanup was done. [RT #22521] +
    • Cause named to terminate at startup or rndc reconfig reload to fail, if a log file specified in the conf file isn't a plain file. (RT #22771] -
    • +
    • named now forces the ADB cache time for glue related data to zero instead of relying on TTL. This corrects problematic behavior in cases where a server was authoritative for the A record of a nameserver for a delegated zone and was queried to recursively resolve records within that zone. [RT #22842] -
    • +
    • When a validating resolver got a NODATA response for DNSKEY, it was not caching the NODATA. Fixed and test added. [RT #22908] -
    • +
    • Fixed a bug in which zone keys that were published and but not immediately activated, automatic signing could fail to trigger. [RT #22911] -
    • +
    • Fixed a possible deadlock due to zone re-signing. [RT #22964] -
    • +
    • Fixed precedence order bug with NS and DNAME records if both are present. (Also fixed timing of autosign test in 9.7+) [RT #23035] -
    • +
    • When a DNSSEC signed dynamic zone's signatures need to be refreshed, named would first delete the old signatures in the zone. If a private key of the same algorithm isn't available to named, the signing would fail but the old signatures would already be deleted. named now checks if it can access the private key before deleting the old signatures and leaves the old signature if no private key is found. [RT #23136] -
    • +
    • When using auto-dnssec and updating DNSKEY records, named did correctly update the zone. [RT #23232] -
    • +
    • +When using "auto-dnssec maintain" and rolling to a new key, a +private-type record (only used internally by named) could be created +and not marked as complete. [RT #23253] +
    • If a slave initiates a TSIG signed AXFR from the master and the master fails to correctly TSIG sign the final message, the slave would be left with the zone in an unclean state. named detected this error too late and named would crash with an INSIST. The order dependancy has been fixed. [RT #23254] -
    • +
    • Fixed last autosign test report. [RT #23256] -
    • +
    • named didn't save gid at startup and later assumed gid 0. named now saves/restores the gid when creating creating named.pid at startup. [RT #23290] -
    • +
    • If the server has an IPv6 address but does not have IPv6 connectivity to the internet, dig +trace could fail attempting to use IPv6 addresses. [RT #23297] -
    • +
    • If named is configured with managed zones, the managed key maint timer can exercise a race condition that can crash the server. [RT #23303] -
    • +
    • Changing TTL did not cause dnssec-signzone to generate new signatures. [RT #23330] -
    • +
    • Have the validating resolver use RRSIG original TTL to compute validated RRset and RRSIG TTL. [RT #23332] -
    • +
    • In "make test" bin/tests/resolver, hold the socket manager lock while freeing the socket. [RT #23333] -
    • +
    • If named encountered a CNAME instead of a DS record when walking the chain of trust down from the trust anchor, it incorrectly stopped validating. [RT #23338] -
    • +
    • RRSIG records could have time stamps too far in the future. [RT #23356] -
    • +
    • named stores cached data in an in-memory database and keeps track of how recently the data is used with a heap. The heap is stored within the cache's memory space. Under a sustained high query load and with a small @@ -233,95 +221,116 @@ the cache memory the heap used up and never recovering. This fix removes the heap into its own memory space, preventing the heap from exhausting the cache space and allowing named to recover gracefully when the high query load abates. [RT #23371] -
    • +
    • If "dnssec-lookaside auto" is turned on, named pulled in all keys defined in bind.keys, including the root key. named now only loads the desired keys. [RT #23372] -
    • +
    • Fully separated key management on a per view basis. [RT #23419] -
    • +
    • If running on a powerpc CPU and with atomic operations enabled, named could lock up. Added sync instructions to the end of atomic operations. [RT #23469] -
    • +
    • If OpenSSL was built without engine support, named would have compile errors and fail to build. [RT #23473] -
    • +
    • "rndc secroots" would abort on the first error and so could miss remaining views. [RT #23488] -
    • +
    • Handle isc_event_allocate failures in t_tasks test. [RT #23572] -
    • +
    • ixfr-from-differences {master|slave}; failed to select the master/slave zones, resulting in on diff/journal file being created. [RT #23580] -
    • +
    • If a DNAME substitution failed, named returned NOERROR. The correct response should be YXDOMAIN. [RT #23591] -
    • +
    • dns_dnssec_findzonekeys{2} used a inconsistant timestamp when determining which keys are active. This could result in some RRsets not being signed/re-signed. [RT #23642] -
    • +
    • Remove bin/tests/system/logfileconfig/ns1/named.conf and add setup.sh in order to resolve changing named.conf issue. [RT #23687] -
    • +
    • NOTIFY messages were not being sent when generating a NSEC3 chain incrementally. [RT #23702] -
    • +
    • Zones using automatic key maintenance could fail to check the key repository for updates. named now checks once per hour and the automatic check bug has been fixed. [RT #23744] -
    • +
    • Signatures for records at the zone apex could go stale due to an incorrect timer setting. [RT #23769] -
    • +
    • The autosign tests attempted to open ports within reserved ranges. Test now avoids those ports. [RT #23957] -
    • +
    • +named, acting as authoritative server for DLZ zones, was not correctly +setting the authoritative (AA) bit. +[RT #24146] +
    • Clean up some cross-compiling issues and added two undocumented configure options, --with-gost and --with-rlimtype, to allow over-riding default settings (gost=no and rlimtype="long int") when cross-compiling. [RT #24367] -
    • +
    • When trying sign with NSEC3, if dnssec-signzone couldn't find the KSK, it would give an incorrect error "NSEC3 iterations too big for weakest DNSKEY strength" rather than the correct "failed to find keys at the zone apex: not found" [RT #24369] -
    • +
    • Improved consistency checks for dnssec-enable and dnssec-validation, added test cases to the checkconf system test. [RT #24398] -
    • +
    • +RT #23136 fixed a problem where named would delete old signatures even +when the private key wasn't available to re-sign the zone, resulting in +a zone with missing signatures. This fix (CHANGES 3114) did not +completely fix all issues. [RT #24577] +
    • nsupdate could dump core on shutdown when using SIG(0) keys. [RT #24604] -
    • +
    • Named could fail to validate zones list in a DLV that validated insecure without using DLV and had DS records in the parent zone. [RT #24631] +
    • +A bug in FreeBSD kernels causes IPv6 UDP responses greater than +1280 bytes to not fragment as they should. Until there is a kernel +fix, named will work around this by setting IPV6_USE_MIN_MTU on a +per packet basis. [RT #24950] +
    • +To avoid excessive startup time for configurations with large numbers +of zones, an environment variable, BIND9_ZONE_TASKS_HINTS, may now +be set prior to starting named. Divide your number of zones by 200 +to find the recommended setting for this environment variable (i.e., +if you have 200000 zones, set BIND9_ZONE_TASKS_HINTS to 1000 before +starting named). [RT #25084]
-

Known issues in this release

+

Known issues in this release

-
  • +
    • None
-

Thank You

+

Thank You

Thank you to everyone who assisted us in making this release possible. If you would like to contribute to ISC to assist us in continuing to make quality open source software, please visit our donations page at - http://www.isc.org/supportisc. + http://www.isc.org/supportisc.

diff --git a/RELEASE-NOTES-BIND-9.7.4.pdf b/RELEASE-NOTES-BIND-9.7.4.pdf index 94edfcf6a5193c1ff5694b14a18729898c52558a..1082b592e1385b1dc50be11ed54c9c0908b801e5 100644 GIT binary patch literal 59454 zcmb@u2|U!>|39usvM<@UsbottgTdG-q^#L@27|H8XzUfTQ+BdvNs@ivvrDo>A^X0h z2+3B$|BV*+-p~Di?)`nf9{2Ws&-;B|uk$>w^E&4|&+C28xu_~5cbOLqBNPBZK^RkO zLNPHAL>&aVhS9))ATl6M2c(%J3WEmoa)Bfy2$5*>gGBHji8-&M9kCd5r^6&%Ki>-f z7gc=6Rq^uu)Fp#)LEB;w=D+mt^8Xh_{C`j+_*0R(lf69#>-bxb(0|bbJFbTh`cscG z(gh@kL^wKOkq*C<@$vqhGAGlYwu1f9T70md8im0^VAyX}|IOwCf57$2=;}x_CoIa* z4J3zhJ&x>e?fx5?z#ozE|1$m`k@5dG%L^Vy#{bLmKdc41YK1^s9)rgJw>9t^n&2Oy z!G2Z4AECki*8V>nRp>Z0*e}yxakBiAy7-T zfChXXgmQ3jLOOs@Xpo~7$^nE$+9DAS$X{+E@ZTy!_z%i|RfYyo2{s^IjMHyTe^U+m z0te+%1A!oNC`Wma;jxx3_@f#?Vq%04MI_qN(F(-N&nEyn{38SeY#otUK+qQ9h?GH^ zVa$<)KtJK&h(#jo2wjIi=_p`k1j*~(YcFt~xRe07X^K&DE*UcfaaPxzwIjQKnWJeq zChgkT`hd%JxS~GgOcLX^$&G|~%y!q^v$B*X+Y$Gm{%R4QrR47u%%9i!gtlMBBa@sU zw`qaXQ9K57B)76rbDCYjzttMvhUb(g_m0?%4Nfi1WA6_?VGFG{9Oqf?g@N#1v86R) zsd}Q%wd+!{#Y>%OJ+G6$Pf+hX63hAY3@O*H$?3T8g@QS4g78zm7h3&D$*I^WRH$(L z&PYYeT&v94v@60SHp-so0V@&sIoeVIp*ZHz zYVjyl>#S`ZS-gOkyXEZzB{1UTfwz+)u2%34t7LqkgaCZWg&_R?F<)y%3*GH;W>U?u z*Hk9%`N{jQ#)aHDs6-@p)OjXm-2*eLIGB);jPhuXeO0EA<>dlDHw4n$>Y80DUg{RFXPdJS-YiD}zHzDIG^(I!P|eo2#{-Qa_Zf z|5z@!Uh8|*L?vZuC)|{k-@cN1T7@wKR zD4)c*04k1zuwaUXQl>%~9Rkxq*8!hvWa8==8sC`(bzl86DqlI?u9h_t+*Lcvqd>8a z*E`vCe|q{9qV(2Q(n^ZhN4oQdIiv%P>7gaW??2p1ceA4RQO@?s0G)ZIsMJy;GT+Y& z-OzHX3}taj(ri-S3xeIXgPu&$x^^;!4`q5AQueX(Q*yqWK5?D)V&kpV4~<n=!WC?jNq`Cs;Zl7s|6V4*gp&&HzL7Nl zcpswdimn&C3;RBFvCYwF!p^zlr2bCzV8#5jD%q40$1u2$w!igz%1ceRXS(vFthAr) zTTX2&jP(!?dl=?bKf=GMtyD2G=kyhWNXcJ%%4MPBpIAK{KY}k8a+a9Cxjf-^8{)-O zJh5llkahHx2dC8%+U?@@#vqcCclXxE488~Pj?u&xmkK3h=V*(g`m5titknB0!nZ7H zn#-*|_1X=UzE_+d$rFH`P0fmuc*YI$Pwn*7nOpJ8NH`S{E;CNUO(L)-dcM#vkI@kA zbagIckEF($t;<;5ZaBTE!-moFp?=EUoG(3O#taTCZy4;d(e>qNcL)X{i;YFDr9~a@ z65h{Twmdfhx(D&|6OMXX7jppd?x)&iCFzKI=IUcBK>5@!k{(tP(ID4dw)%K5Z>N~EpD>2byv`TZ^aGkh`a zQe0Aen(y_9?)gFrjXpLOY1p+A^zY^oK3<+*bjtEg#&kJV1uT!v$?XhJ7Jby?=UMA7 zp&xSI$I;eUkL+n-J41PfMjSFfmg8tjR_t)f*0J=`xBjPr4`tfz5GlgULk9BJntgWT z4~j+33OuQ;sZXqtO^Zk3LA~AekCS=wNgO zE(aqNa5)%xfXl%k3S16lKtcxt4DjnmU)krw!o7DHfo z0R1T7VWxj9;2|JF$Q2CM9Em-|4mE_xL#{)v>K`bD0!2^*##E3#Oo$gO0Ob`13GfPo z1qFCvAeayw3=DVynu)Of(C=bz=A@20{;fu5dl92 z?FUu)-=GQbgWE@Xh)p>7_=Wu@PC5_;{^-D_>Nmm016g_3k&}v zXuo;o&l$ood_UOe|Avnb3WfsY?6>8BrT~ZY{wvEJ%{q=D`@tyxH)K#a7%C`y+;Y5v zfCmcxTg&~N!5qW)gVp{|`1s+#`~x87zbwZuEC7Z=;s45VN3)`1$bL*0{x@VofU^h- z9KkQ$P4oCCSW61v1=l})rf(|O`$8gUt0ER(y1&_O^4Cv<^AEKkH2h8C4!9s!nBNG$`8ZQ(k2tqsA+8(E7g2%n+ zZ>0r+mI3tXe-S?3ul${`0ALyzKlDFH13d3%%l|uJJ~%HxR``Ygk~QxE1O0E(yu!j@ zI6pv@{|x+)J^z%J16VfDGXk*2>5|9zEE4VM$2|e+~acC#ftgo`<8funVr_St3bO@Wm!$wy%uE zgALO)LVX0cPF#u3{?L+r!MlN4diHWsQDjAqkmZ1MWopx0ljVc{=C(N6%HTV9i}XCp zDnF@S2`pR6&d$}}L2q!_64OL5e(luWX=_4sBI_XQ{@qSh%aQM#@xpRjm$1GdEj_Vl zCzcA7?xgkbB;81`PMF}ATzJ>?j^bmnK(8_(?VMdr`din@i~YJ!4U%1W&I{hxS?>$j z{S?6b+LdVB<8F{y*GKS3d7g);=*TDM@)ce5FdJHT1Xe0&8IsG|DJECr;kK)oeI_4K#cb!r2m%_?4D_s>;s9;}u zY+^P}<_rAyy2GXUbvVLe+dI6fbiMLDW=Tk?p0@1j9Ui4{E(g{7Pu>oK;uCJ2)K73f z3ng8pWtkyj4ZZTbC-J3LeKS2KzTsWOJc~ZbJ%yC7IC>u?+zb||AM#)8A;iH&&`F4X zxH-<472nHjqn_!Y^q5tHAb{wj_m*#U%_2XGwJzdDOUS5~gSe^TC6|uMPwRf>B?JAZ z>2v(;;{)VrzydeU)3*12VI<3Vg}eQrjfevyCNFGOG{dMKRvElKWt1q=B-Hx+LJf-n z|8!&Un3456^ujkU7pu)tXLx09c)O)&QfaXlZ1#L{`7NK^J6uFhrpuINFKbW7*&^4P z3(MaIYN}maR!JJ;DFDN>bCGKAY|;fitTflS*VZh)PJK+ta%6ITHi%Zb;)M=k5@Q%) zRf-VVqAv2_o;JwjR;;#WuAt;5%WU~}+h(UlZ>k*<%uh2`%jDW*z{(^}yB#r@)v#sy z#Y+<9!n#dg!@g=(^1imDl6s~m25CX3lL;ex8Ny>uQrE1@Vwrtqb0>$ciHzl8^|qVs z;HiybSmoRHC)}KjNzr6*^h-+eOR6GXUUmk#{3s|6s3X&dQ+{?rDTY*jGjMwkF}M0{ z{tCNc-UNxE#M_jDEc)?FHvad_!a2$Ld*~lLy7w9+Nc5=J`Se2Pkn93eT>s5))JZR< zP_cRE;j=WMBAW(MdedU9=Ypaxx3aL8*|rlqRFQ=Vp6LiPeA?p=!qa?)RrMpQ z)7vhH+UQN~=P6KdZMe@x{^_kV5ub13x0{kvJP$t4MZq;Q7eC5$$7M-Wz6CXTeUlTz z-l_2wRz2%hlLwZOD%;Hp{Cs+W%TauEu!o>D%Udk@9KWUN9`B|m$s-;grBm)v+{Wiq z-yt)(^LQJA3a3xL57$ZEZLIRdwqKb}$XzVnf@L;JFpLiNs@0w{=Rn5h-8vUklPnsM zrol?)z{27qf-Z-cXRbtuCf%*w-XR1la5&39 zTIbMK@6IWvcK1ZH;tnzP0nUW0FcZCJ|7Erx$!eiZHY(4w`> zE}aA6bpTtPSm z4qTItt)>^48s<`Af75{?}>TpQ2rdW9c8FUGT$L)W45*2_MC&gbyf^ z+8@U2!#6(}z){TY|0nMAN3zEcM52JOlQ2k-pZ7;_1qfWg;K27kK^VXTd4-S7CjTGE zo&yr=i~@pu5QiThIR8LX4-51Eiu{0!2>^^y5Gn)~h6)_8YXPt@TmX0iOj6)b;eW}l z9RPZ5i*j&u_(ibo5GY$a1p4qP3T=V;6UY7&V?1;QHPAmKt3dGYH^~Ahn2#6wSDwuGC!YKtvlb8(1PcoQpR@nWH~Ef-R{kz;m=HghUkJ+k7is=K zaozuzHw*?u(|Cc9)t~d`|0hP{=LHx(6qpSBMf#sujSmh?abWPj^6bNQ`_osC@$6sR z`Z(wQM?72jcxis{Y(9P{|3Cds`AF9;Y_yVOFWH#4&HdTwh02)kd$*#L2w{yz5s#*O zj7a?k-gQ2EU-bTaWY_#a>{+gnlEtzIrd|&fZ$6fhIL{S2=(@@w*t9hUzu~PEeM8$- zy7W~y=6M$d{{A;PXcQ|>6#2F=e>KtcAjvdrbm{4X=OguBJ6^(v0vk4bDUi* z>gCfFP|W)nD&qH1V?3*AY}s2%WG70{Us{3K*^6Y($(Uy35i6T=7T>ayK-v4;_R#FX z-8$;z^z!qL$$AX0RCJv*zJE^bEGMazNO3xC>SlgPJac8C*_K2!q7ug=RDVe_uD89=J=D9P0^$z#VBDmsMomVnp-tW=$KBsV=)3H1e;*=UXqT79rjeRt zaBIUXLP^ZU%0G;bk6k+vGUwDNW5dGMgo@WgTE5VL_6KW9FX(E=dl4FR)bX|Mc<=^t zrj*}YXt?RlE6lxinU(tC8)u7~OCBTbJ+BxZiAO7<&T=}bLcIy};RCw?TYc|mOt$XD zwL7|XeQ!`G%f5r+tEMs^yPCeYAiX%(i&j42X!JdEZM@;;)5wkcwF>VZk;~P+7uD5$ z=NfaZ?(W++%w?6AY*}4t=o)foMZ-7@%RBvIS_Egx3t-;T`-P^usKL3JPQw-+NnHm+ z!Z;IEQsb~{QC)r`2F-=%7am^7x@l+Z{Au5^(^A{tUI8~)-^`1m;>ovI3%iXXhFqB& z9u{`^5a%<`9a8g9Gd7a~eft~Fwg{DWx72sDVqAj!5f4E}*kku)pN0Tk<7IB+wTXGS* z|0DcqeM>z0s7=jlhQk(|N!gN;anEpCzDa$mUzRNE?? z?^`k7x|Jzg@k3xS0{Ri~mwUw0zC*A4ILPbbudycEH7Tal!1G9~YU-G0^v6_*-lx1w zl$Tu<8UGITyB46RwJM0zZy0GPzh8l@!X1A%OF5q3GR~xE664By$$COi)9VCYk8ivH z{nyJDWKG;gsixe^V~5CBO!H&X>UgDW-4q2xo5n{@DEH z$JIrzV9ch~7@4bbCmD$l@_DN!iM&_OP!EwMJ{{$_0Z~JE(c(+&C!{b^|D-=s|8(o) zQ3|?CSb943BI9rE^CqvzYc&F5*oT*;>G~X&Ne0xfNX|-*RLt``P3-_7FJTHfRBlCpk0@QdoCA}R8i(-Zp zhhm~JL+>8ebGm5k-8azM(^%Sxzl|#%q$Dcwc9jalTHbmw-Sl(%eEaDa9KGshlvgI= zvJDDsiE!Da3A;WCP(I_bNxt#5W9fnQ^D-u0I?+e&CJxoq!`_i3JpC!q^bh$`4qW`A zo{I5sYES%dxY5Z#$mpQ)o%>3aF_Vo3iwioGBHm`YoMvX{d#9z_-i%EJ1f99O@!{*q zM~NdYeN%)1^st*jnX2yz&|zw(>T<=4w7RjMlM;qmv!{~theNGnR!@*+(PM~h#3NqL zS3L5q81vX4x_Ce9J_Cc~h~DF7GXk|9{`$@fxj2vbI(_R=QD9k(`ewmyy%#o8SI}!t zsTMLQ&E|~L=k>MueTH*alm+nQ!iD9aa6N{i(A29UN@nV=z8LN&Y7=5?X zWy*3&X*Xt+!}J41o_y|O-}cX&E~72qy;i_r2T91AY^eM8^ifi?mL144N8t`^-j}M> zEW_q`4*f(kYr&maHXT=+`-9P5-ybpxA@wVBoo~R0~u&F6OsjKR0VcDmH)h z23IcKFAciSm@gM!y#rrdem`P2dBPvhpnO+wgCxo7V@AFn*oHzc)!~lI{)cACiYrg) zR3aYNpynPtFpBG`R~ulW{N9M$z0}C;aU~%J+Rm?a!5lq% zV{cZTnS_k`UfI^I4iiGLd_|CFCa$e<4H|WwZbm&Z zOfdIgi=;zHG8xtG#vv0&yL&mum_iewXTEdFZzY~_e&(^Y7x>tG=lxWyHY;gw4C4HE z80}E&=xT;R2)2D}2NlEf!XtNo+&_pT=M(tG$%53EWsLscvLgC&%x?-9e)YQ}#KIza zd#}L8?MZA+nnan?owW*43jFbvlnT@&v(+Z+&FIX}DG&)PUwGSHowL=^HVwAz{m=?* z9@cVBWVRTqROFA9jk_~o6jK~&$CWj)@o*{YYiY>I73asV2X2e0FZNy#e-Kl#{kd0* zZM??QBNc2*kVxE@74}>^GnTeCiH)q7*}dB({dY6RR}Xf0tJ>XOY@8TvgJf``MHhc2r0btMd2X%?{u!y=e=}&Y(?@-MgO8CSuFvX5*n@<6&g0R{kSxi6 z$?NOr4|kt8&e#g?##y4iEA>C7iIiQ0q96X_TIMAkx>BE)Vjhge?s zdE}n}xiGlAofN*kIeGFeXp1EjrqMGqJTSufd9P{ze#DgVsuElAGGowEXtyBKj< zVk^*a@P4?X#kFzuf)&`HYNW!~JKLcwNjx6zkz5MXAo{c`vV@J!8u!YZG2d=HTjS|~ z;Fc}gEihLJuQ|SX`}i@>Tm$^wqDL3gP!rRof<3k{W|0_9l?CeShCLT9&T?HkrxH`@ zSBEtpv|?jCZP+E1#B$jrt%bF^Vq-;W;X7Huh*BNCO%Wp^>Lw<)ua~$uU%&6?YGiBfg#4f&S!PuwcFNnTLWV z`Gl-D^uD1OzlmTnDlXAdtBSvy2^(+uR3~_lt^sQJ%2x>HpE(a5d1pp4%u3VHJkzY= zun@(BKe79M#xg;2a|}tr6Oq##$OTo7B3bGB*dwZV?(U0y0fP2 zqOWZK^;!f^V0ie|B90eRgjRZ#D~K1aT2sWW$O#v5GG}H1U|Kq>ns)W0pMOz&{CI=n z5N&h3R#nLw6IR#lsgBZ$SWB)M_;jiy4>NsmlC?h#10T(-0FL!p{Xe7Uhb&0Dh z4Od@<&f{c5@2~r{JG87(%5bc)S>!?-)#-9>d-yR}pYsc;%PqV9Rb;^Yn!fb%yAR~p zcPx*2*jKJxzxTm67&nq_oLNn(-67@dP5j$V*d{4m&a|7#ayov>zV-wcCF1xdQXXu| zY(Sn(*>96Do*SryUU|*yEw)X$Xi3b^fw zO9us_GG9_4S#9s`H+ooQ~no}!aF`?rF-_BEO5_fG`h8vF$M-+$q&+bPtTG+)y3sPlcK!n}Uq3j+EFGS}p7+iCbHIDHY}K8Ashga8{ktT# z`px!V3G09TcmOO@IHae)m&ywNtB(iA2)xt+BVgF&Q`Y_l3z#4xoG5AN}PG0D7 z-usg(!hk^SKc;yw~jMEyRco?W23O@ehH`f zO(P>ETe7aOMwMV>P6}(C+r~0NkMDIPv>un!WDECeZxvC}9dym7Gx{Py{!hgP zbNG5nA8rP-LlyA&MVGHxr-!~5c+FL&N!S(1YoFH9zojy6SqAknte0MePw$J)o zZUT6)9e)hoBdIUnPN}3K?!A$2$fACPSM5k?H5k>9d!}=)QmZXqiJ{j=o#oEA$geLy z$G*Kq9IR(LL5^Uw;?xXgz%9{&ea_@GOz`Bj35ccK0d406&# zg?s5cdMeW>dpQ>ZUc`v{xTrB)W_#xlUP?dfrKf=F#ebJKGYLl2TgLO4GIelp1(hkM zhrkg_x3S9@BDzd@i|CE4ZRnj~xEsQap=w`{5={{{QJmaAt51VQbt)o6oAk!Dynj-9ed+}?1X_M(G@wThO3d%{X z{Yb-1O}r0AQ#UufJJL`cbDE{<3r{S=RMozyu~$QU%#m2EO<+o2zpuV0iR_d?fJ^yvEU6~?wVVkN_@Z0#(TAO@UD}Bj?f+8M8v>7J# z_6Y19dEfi|r&=Rfx8U!ha;>UQK8*v5@GGE$ofJhwXhdtx$*Vd*#oWR4v->O$bPB5! zn~J~MHF3EJ5{4O=Q7aS;^H9=^Za%K5-=`7f&9E|f)7E?c1ZUpsH}=HDQY_aPsK#h0 zwXH8zehABPVp^|df?l|`9!2k7lYf2Jq&0Nrts{~uBPO73jA)vs85B@bB~U?tS(h8x z&AK?qEEEd@Q=V?gCE$;_C=p0&3l6-T$ZDE7N^crwfcsf(X)(>F=No${*(45LKZrf${1VHN_Ihr0lJFHK%xq7AZXCj`^FY~bXm5C*sFS0UZMOcf3dRt zbdOy1yRf=dICkTWzkFINQC)ZyHsnd$)ix9E6f6L9PEW8N`v{n(-kxQc1HULw5yX`X z5RlM%r&J?7hi(B?>)8~VH)2lb%kh5C-+ZvT{&E5u!o%UGj(*8G+o0XZSj<8aQY=N& zb7g>o=uKNeF;#T@V@z)M3;12?#5=d;`sYQRX9o78!p$70_Is}7&4~q}u;K)YSzvl8 zdSPOa(#?Uo9rUYtKAetuA)L(7AsjJm$O)bo)9$geiUZ!0UpBh9UwKzd)TZZ)NHj({ ziJ5v!Mbobe>1<{_710g#!`*3W9Pj#6Q&U4N7LQrE@>tc0>!pnyU8!47?ibgs@F=>~ zzSnp+N!Z*yx4Q=bJ-hZ)YFnp*AI|V5v|Ojt^jlHZFRn5vwe_F_tUxD@B?(q2TE%yN z;2?xv$SLO?J$TMmL9dkH)s46cF<7=H#}y-N^f@ zYt&6)Q6j=`&(6#zl#F>_HmZk0)O+8g)0#>pi-1qWXd`0gC1!Msg@Y|kzc7U9FPn== zRGEu$n64;uTc!F{wp2F?7)5>5bN7GdUOC=z`GtBRjje5gD7CT83Yk}F8Y+6vB>hbY zA=;b52x@)JoVjx9(&^l9B1AejmNQ8ZedD(j^OcAtBXX#4ozBMg@DQC&xPGGPf^l7` zxkDOi=)0B3+-obqH(;@*7&PyK#9h~Y+Omxmm9q%X`cU2N zuEB^mtmXJE$jS}wj$WQ{f2c~8iX!31iz52W^x!NL5u=8J$Y~9Vs!?!zGn<0@i-3!X zM4TP-r`x$)@Y^p8;FO)+F;=`SMV0HFs)!&;&=C^5S8YRFWgLCio{5z-eZe&VY05Tu z?@ZU%uL0tQ%gQ|tzI!*%To>j4@S@mfA;bD5Ew%kgOnQpYsZkbpvr7#~UU4MC1dLB3 zd|d+u+K`L5(a#BLw38qYYC09pc}=GM?%gMewKD{@rWF=v@?Xnta3C%Xuj8KZ4^xn? zlke?#NAsSCC%whePC+oBOv%>B#-Za;ZWl*v?kAZgaRb-8FtT)R!Ei0beGMqgzx~=b zN|v4mG4E|x6-hJlF$tTrs)sE&T+QR1)}c>%6L`OCp52MFjT==VyZV$jsW$lq{H=Hg$NVO^yufGk-`N4n5{~l!$1&NXjQhS{p?`th+mk%vtVijr7wUE?YJn!LUzV?FD*D}A;UE9SSwjp51AX&K}Te5;p& z(+r+o1JCSqk=$BCqnp7Phbj8Vr`Eb}3Lk&2HlNzRVb1tn-wVE zo*fy~PL_8gBNoTwUhQRH=!Nc*jVt{$ox{maC|USM|5|P$;1v~Lc^(Vp3gr!2b>+@Z?Zof({wTGExNfgHB57LLt$0HM614Y3|+|{ zi&&1J8`;JAwAZUfEQMdN#_1Xg6|;+g)!5%^@MSrQDZJBtf_%GVo;Lj92~V9~Of8CA z_-rS(ptxAdsxs7uho&HY7%Yekc@}s@kN~e+!%dL3RhfBH&2ySQ+x!(1`x>R!>Ww7I z&pp#`%Y$VfW|UrvQ=HRlE__v%k$TF&y;@$n=p<|^p$>9Gjs;9~Mkmaub4%MTC_5sS z`s2sI=L2~>fg)d)Pl<_m*wcp@aVo0FyvAeMF}>ir)WZH5j;?5)i8gGS2^!kB-ZH__ za9Vh*Zpk=r+84A{`Fv*qs$4A4^;Fid!`y2+4j~WaN))@iCrq2xSR{)>8Gf>zg>$p; zZY8_cQ~&Vmh4`A}32lOcnZo#R*U(j=OK_Jrs#?@fB}K8pmuf9y)Qay5yhG)-M+UyP zz1or>;e*FDLkk1jXu0iF-mTnmvWh6nHZQt4a*5ng9GAzI_smE>8Dl>Y9{8f73G=|2 z(MuvYx}hAJo~mzU7BA1f5wY(LNU$*L&yH;Yy}WQ~+~!q%U2_zxn)S6Hr!%N2>jjhA zQ=YJs9&Kh`%(vAiSAs&k>Zud)_n(bj*ydQ`+upHQaoNd^&1iUk@-Yd0$!qJ24`g@5^m7KwF2gh|MuJ)$lxiAGuXyXq&mDW~zSfa0 z%0pdYDbafK0SqqJB$YBXzLkA-mb2^Zu8fr0=!=atp3*=aiw`wC9Eu_${ckWAY3)pD zuQ|j?Li0vW5cH{rRS^=%=dw|-o$3DGT8GM$!;Qc-Jy^Lyy`QD@8_opt*jXPcG zUGvVuPS7%nQs)h>XVI125u>JZ{;ILwMdMVWBJj-dJOYXvFIeN=k?UGL+nO~l$er;z zACAdpAcco_?5NNwEe_t<$QkgZ5V)*T* z!ZRhM7wwn6M~X6)$L(MSa;RlSPZZQW19FMFU|k8i2RnoI?D6xv^z zC>7`J4_tpCckfM*(s{E{^yv_;8s8AA5}`g?F|$2%&qU1CeB61mhtaGt6)jJwG^zOt zP=Y~>)@M!D_Pz+ER2ritsfdbKScd6ey-mDvl7Ks52A_JciS)8jqjcFYPB8A*sI|iP zjEmgkOYrDq4`nHEYrOSY?BeC~%vXtD%qgV7UW<>BtA{pfbP-y)j->?5Bny%!IggeaJv*=7z=OtgC!ZiT-woVlm4rT%2CvPsLT`Qv?y zEuKp;+ymh{OR{mdi#&e1V}UG6 zmpIqF_TlBu%l@^5x}g`R(V!6_3WC7Tox7%&bp>E|3LCwA{L31sy+SI!H~3p_uiw#<|3t#{$e!Jx_m(?jH)(EnFwaB) zKYl=$^Of3S@?~F>K3AO1d&T7=*2Xw0MAnJju#Z#RCuv(BxZxAWc?oi3)JJ(lGD z-?eb-YZncjQUmBF>(Fi@`5OvXZlvR1pus-@+x`NJ4v+`;qPXW%F4J^bL*fu9>AEzTjJ_K_-f;c+bh|zUiU4 zJ+U;Mu8a6SB(<1D3e#NPs6FwFAyTvHyi?WFYqkp{1p(Npx{bhquj#KVmpW#SpN;LpNS^--r*}Q9+M6 z1WevwC*RG$AAw63QuG~t8XSGv7>l<(AJD%0^dAW0@sH|%Ll}RAKYs^AfsJ5CG17l~ zcmOZ3i|fw|sgIuhB!T~OB{d)L!5$6;zU}i02mm|3fzu24fu*D{-h(H=T3SH?fn!@Z z|6f*8A1$B;Hvj!`88R>QcpUkV`Tp4V_0M+A3H)hAE-&;yiSr2wf`x!py?q)gM%mZ0q77gaGHcU(gMT_?5A`@n3(}bO+YMA5DQy~1r~9%3)9L8ZHd4-+1VnT z93hGhwg?9+i0#n@V~If{Z6H`cH;5PdTNy9J6pM65LhMjzCkJ5f;_o*wh@Ke&i$Ozf zA6<_A1@g8#8iTXUd{z=C@_JH){;Xb}6OAlo7#4)zE$Bn0Vd zW{a>pdSPw~HtiGumkQK5NPwG#8{N2l_Lbm7m2n- zTKu>>dWdiUaG@M*AojLS4iGa800&~_W^aWA5CJbR=8z*3-bP|E5WtEMM;8pl(F%)1 zLM(ujL4ZmCpgN#jAr62c(GcWePG}U6&6w3i=hdR1DumVM2~h(!+G;>FAzBb^hz>*-q6gF-!psH< zR0U8bQ{eUp>W`;C%V&l{nW3;|PIeF{G;s8XgBb?phq+>pejUrr5oK$R1o83- z{dOllI7HS7FdzyzUInOK+hdh$3Y^FV_%Q}>&R;cq_zY=li?Vk>IY7)2mX=8DkIO;5 z9~H;K7U_CWM~+q)r^BjNKXOt_CzS1>+Z+N^k%g$(AuSOQEW#XR2IP#e2RzO7upWTD z!?52NVM4$1Ka@Q5KOnoKl9>YAc#)0}U_dx%S4g|V%V9|&j(}>U9Rh0uarhI0BT)&Mbu|CL78(F&q`l%2{^a$v3Zfn8LNC0F^8;Fpx0ldU7l-qsDGa@2A)k3=<( zL^Y3zYW|YZJ$k8Og~6gBK)V38{s2x2?5;nOMI60G9Fqn5SD-;c0RKPoItb#>3<#i$ z`e}xPMhWy|$RlCoF=3$Uen_E?(x8sg{OD5-8zJgf8YEx_^ig)0qvV*Qq`X%9Z^b%~f_j-bvro#>;F{_Wmn1W9~J}>)+#-jny5pmHTUA#TIoJb?>N0<)HW;=-=y-;xoA> zWZ_IBc;epu5TE#(9Q;A)Q=J7Zxx~eVC!UW~MLf&8XecEm#8{Yqwugibr{|O|&J(G5 z98yvoQAtTjN&zX#rP)uWX2?(YslD%dGAzx_zh%x9kl%~ns=qVNZ)lgxbON@*$^yDm z7=_#R<`eVuzQ|1~ypxr>J~%Ogo1lA7vJ>i_-{-lftR>3`BEsTT;e0w_y=<{5IFECY z(IGtjQXq@T8Rrv&`!hJu)1rEV-}@6Tb%@4PUcw=;cRCqA@;uY)d8f3pXH^`IGKlsx zqxQfS=3dC9hW1kn3!4(SLePfRH^9b_X$Y`NP+@h#H_4!3g@SaY&IKw^n3I@O^&ljQ zak4f$A-Yr2wOSW-p$jHWL4& z&S0g;5N_>+O}&qB)!=uf=CS_PHy=}o<8Z*BOQ{e1#M}BenCF>y3O;-dEgLJ(Z&0FW(}w}VPk7B!ZEgRW|6?*=b+u$8N0*L(%n42Zyf!dF>p7< z5}BI#AcVGIwH70|SzohXu`j98x_|P*Co9tOZ5un-*u7AimBdX}|N7DSWiWW<t(!<-k98L$bH7V zmk`!XGR2eUaI(N~{8FYeMDi>hDLcOXC)5tVRIF^vUi7-p3%Uu^ZC84-D>_QtswLfy zGj|K>IPIG0RtrBcExmqb6BjMn9MQR9Ukx(YO(T1}&Pm$zwA$ec5wzP@x#fc_#;?Ja zM_4@ly7->MHBmlc3Bh4c647m+z#7*nbeNiXh z!%}DZuHL0TZC$~E>)PkKWaN1g*Xv(N`ymBqWcd__~|l}80j{JL(Zq+fkH^c90NJ*TIh$OhBs^fy?uQ4%){ zidvGNRhSZTXc-C*_GKyBIG3n<9UguqgqoHV|7DCTgP7(v(Mg-IW`~Xr{S!knclE3k zs~)omh}RFmZ!}8XR(~e9&#t}r{&`g`0BiUtLsO7u#7oQZjGMQ>!MOpt(LNBmpvd`Z1TTHQnFF zSSZ;tq&L38l}AD3F{Vhc{|O3hD>bj8KYDp#fZ&PH%cs|~8x^%SgPb4p&aW($TwYZr z$o0|tAj8D&eZL6QY-xiJyM|JGFVkO&D-gZ=6zf7f@s@uPO?wTFuNr=n%KvGTYc2`3 z=Smu*oaAuWHD}jVHCYSdvDK>5brmVo1+t>M4lxA}<|n1^b3aYu4XaHhy?32(`dN-@ zjq~Td<{%1jMP9q&@#SZ7klm^eqt&SAF86>HJN*`cb;4*D#BH3W^+xNoXcb>0{&|W; zqM)Q=8?U7L=ldUqnW3F8;j=lOd~UCwXQYS95vK5rNuNwJh}23V(7vSQ7C$U6=yqlD z`IC^h??vQ6jRuv~S+836a+4-ACrTr)$-YtMmCS4$>msJAcQqM*?Xu0jZ61FkqWl|$ zxsCjjH z)h3;4$#>bWCV>qFO^bF-t9O`5%iKmfR+-(Cc*bV6*jIBb8()}4F_6p%uCFq4n_AwB z?;r4CeO}nnL34S}Uh@B=>>Xe%>DspKwmm)F)3$Bfwr$(CZQHh|F>TwnZTHu6-|v(6 zN&fswrBb!9ucgY~JE?V?Cm53l58)txL+UK0)yqU~5y-pR+`D}*2HvaQ;kHbCn^3eM zLF_8&gJ-A1kEA~fpm-0Aiu4-dn|m$f7-(KC@}AGJ&Nr8Xej=@!g10}}uv}+wA0|)+ z-7Wuk-){pyXaOJHbS-*8{hUYcAYH>OaF(#n987*8;lPKdKa+6YS%ujN7|+>4Yo#eG zr=?JN>~bNEilntcX(!FHo3a^xd1x5pf5?kBcpW($=`9f{`}1XTWBX*Lx2%$Ox}Ayv)z~73WtJ4S5yK+ z9VtA)WOdr=!~SScaG(6ONelsgqC)*Btm!AsUT`&6oHD4SRmM?jtuh~Wnr3yhi5dP4MmeayoA;?> zZbiI^s+X}IZ*+*+%vPee8-^qID7}Aqq>1PZm9WQPNN?AJ=bB6dJDUjmN0U5|be5Uf z1+b&b(b~0=KcfHXia^A}ZQt9$eZ~m`B4Ul1D7Buj-mG|8)vGM0rx|6W*W!tkQsF(v zVEh|a1uJPR^~d^Hdx#~j@RE#;oW0{qS}}`G@66<>(=_8IxA=|?=wxK%}Pm|R#;2Q3#k}5EqR3@ zARW{GfYxYI{f0r!;?M}aC_5d5xo<-}w{{4L@geUIt%4gTGRw+HcYEhgw$>u!1}PQ9 znaEZ&l^r<<=2oEQ@e=8k&nk!A$J5CuKP9>#n%wBNiBG#3YK7D9i-E?H~+~ zS=4aXdfF@3a!aO+WUIdBmITw61fL%FeA~N|azdU)+ol8Nd+xl_tq}#x(~JMRtCU|fr{Q;F{KgL|xkN2ZY_{Nv*E z5w4mU)2~1H&YR^qKroWiDP`2OFLUX4bdl_`6m%&>rA_ICKn3R zE!(uqy)bN{S40n}2UIC7^`gIp+kT`PiK^9QvZ&MBXskc5j~+%k9uk}I<}zhf9( zmo3?+*~Q5q*WB^Vy&`9~*Z1Z!0UP6m%#}pwfNPHCpb<-sRYH(Dx}e;m&bCF~WK}Bq z?cec4cRiweg9ExKxyDjUxI?rik-LPgLzHm9L$QK$u0WX=n|`%e-HdST2B6 z!zYJMS`+`)YbG5F$W$;>;y4c~Ffn|s{^m}C?D%6vBy3}5Mv|uh{h|p7ay$Yj<+-3v z=ap>JT$LR}N_F0W;buGX^4LVG9>g-hq1As*>dlhdrGs($2|CJgwf z4kXICFmPExSG3g>6x*LZWd8MWiUr|>L&}7vJZ@UBy zheaK$Vk|IxZ)H86N(~w*gxG{@NEDu7Ln3aY?sGyUI3gXJP!Wr;`K4h;fjG`_KeMx? zLL`_^$GPa_Sk@2D#>TgMx1BOkMT;{PSXU&i78^z{6>hl~>h#&Z-+ioTvMyf$LI36a zF#34QK#Qtih0Ztad`fm9Z8Oh++CeFx;{HfE;LDn1Io0*n>_@&5Y%$mL|v<7iw%Ow zNf0{6?xvN~pS?*+y5e!aB^4Q+^?5&DzZTYLX(*z$fG)uB#+3n65k&X25}Sd07nb3kDWBzYG7_RtuPdYa?;LgtNPq~4ho!H35ONF}z5!dL0F*o37yD(cF%P#th~%i-P~ zGdzz3+oy@iBi=JbOZ+aPNTLFFy5(IM#&DUco0^$CL7i#w&>g_e%u`RDz4%JCUAh996vcFNW43s)t|Kyr|pU?Ir>&$p^>R) zzHM2O@Ir1!YiL^`DcttLD12qVw&AM{d6~NK7Ixn6vlJIOSsCOd&D$a`eDq1P0ccfV=A!NvkE@MZ9bdY8ItKxhR^FT{#zNJUW0B zR|36{zysLXdWQKsC+91p=w=N~#C=qdY)}LFFS<))uW*fBrwY;)V6~6|s zl9djNqWbE`$Z6${8g7tYCZg>$1I<5g#dbbKqyb3=g?|^sII;co+E=sS+c{mvMywk4 zZjVgL`S9Z`aCUrwOfGUNwRV@{;HoCxAa|>+=zc!jCC)=B;X$%FQ~>ov+qa+3-v;51 zcl0=Di{rk7Uup9SUz5rMM+Q4{9W|$;4u11r;I@YJbpqp@B)S|`8)bQIGf%iNv*uU+ zp+RUjimh2RY)1-P99)^ZJouY`iAv0_XfVm*&xQ_E8&@KHPF$YtV`TPygx&)ksM=VH z?m?(jSE`F7t7^#@{f7G^sdaE)aoU7_fY}$a!}lS#_GJm74M1^ts!4d5BJ#V8r(o$o1+U>duawm!;i~=T~4s zMSo@qOd<_8yf{l8`?ILIP2fb)SZAN^OG;NBaV~8+btMf6ZGLxkNg^8&4CSGIHH+qu z;vhS{qtj1QjoaG9x!}@Q<8I2e2=5nQ1(eXjiWbhDmG6W;@zBJ+v-w6B2M2Kf(b_YMh2W~NFg~^^{FP(2njaXS`Kn2Vu83V zFO9FoZrgCah_q5(0&FHa0Bc77K)$emwss{IfH5VW z*l@Sn3q#Nkr0^V@3W*ydHO9byWu6RF*c1t_uCN-^Zi4YAk7kN8mlA^}GHZydnhrGZ z#rlo1KXHO6AGs-XT?cTx(r`3XOb z7@p+Yps9=QS5baI#DE_m<}+C%olfj95uQGqGBS%bPo0ZkLRgc1`9n6EK?jImmG9k$ zIJ9yQ+t9Mgiz(o27Tx>yX=xQHDHK={&JI@(uVvAvW&UhTVa?TNf3~#H6D)Ws@6=sH zoS`r*+x!e8WVzB;Z|A@rIz<=li3tQ|39N8m|NLkg2RkJZ!9X7YII~CLtnKSUV!A_~bp6N)Of170RfX*fM$r=31yHhlLeUTtb9*DT6hzMj^}r zG&Vy#-_@F&*8s~Hfq14EobWA{MlfG&oONJ_GP!X%e<#WkB@EIrZ3cJV)HZ>vn%%4c-_N@=N<)ibt%kM?4?Gi>J z_}=E=l9Oxt6GzfPe~|V}PXyrh@D+RLI+`~pwc%F+EM1a!Cr0OHHxYe$ls+%rKquiL z@9W_SmyJj=xtH}5XXgc>j>4Ax+U4jl9IWe?ALj7`HBK^L;OBMOJTkO}uq30moQOHf zXw|qbDc7l^mpYje**KZ1wF{VxF(!V*bH2DJ1GLoM6UL+y=nrJi*02TYbL|xKl9nFd zn!JXi+#CnYq`%w={cLn?z}`nM+Np4~O}pHni45TNjK-uXN3v>!@tU+fhE#MIj*IJH zf{nsgGA&VFSfePg-X=Hy%9yT2r}I&A5w8ShTXEtc1i>^O81l|ibAjz;EroZ>tD6+y z(afxjd=pAI;*m^NttG{*cYj}1XZUS@Sb^XgrQjj-v-3;ffp`c5xy4M5!PXvGh_=Ap zS-taJP_ZXwTO+>DhO)#q25CA3+?XC<=A{UHkM0@aYE;94HXr_geQzas4tNJ;{pI>e zWzT!R#7A;d>Gf18gMOz@y6&x>3+sZSfxU9ZTRk|9U9a_%L5EJA_|+gHvT~OFYoync zl~t44S#~Ui9h)j0y0_0G;>zLY@{Mcj+bEyun0d5_-(n0KB43UUWQ(R1v^j#_GG&uW zPv>RPaO(g{16{#QIYt<_G{V8+z{+zOLe7r8cS}pj8 z7)bX{Ff;V>ZkZa+T9*4p9{)jkjEi$ecf98*NS-0&BzJInZy@eq8PE3qnzEO-P_Wa< z&arZA*t3|5CX{xof^nC1%T@DSj+dqFzU1P)pgTOt*6dtmFYtEEl~Nl$d6Y%l6$|2Q zvxP>e^JORA046})ER`1I!Ik~17^LAjnhgTSEgqkJjmm|J8@fHWRCD^*{euJPg(7AC zLwsH{kDKB>Jw^>d>)D=F#7Lb0s%B0Yifu6U8+CkJonIn-hElHnFZ9or>-0sWxth^U zeCMkDlj}JNu85L`kCoNewJ@1>MRUpU+cz3_l4WU9(~u#%f+L2puL(fRv%AmAO6xrlcn=i_CvH(|wN5l`3VjNOzk2D-i;nI8N&_lX%oBvd))A5{6Sc#}Xvt zH67n2$%vkuO)vWQqoF!`sdsXF_k+)VngO~{#3$!%vxoOhuRr0C%o8)(^d{|jOqKwb zN-AzS`%o((5mR!F(|Kk2{(Hm2+JTgwDxj6^F6?@|H(akMMC-LGI01dg)f-bkXk`s$ zo#U79;Wa{>dMTaStmSOfxh!D+XPmC`-ZTpbm8E{fRy1OUV-Y4$j}GT5PFav$z#fcv z_+A-EkqyD?8e#g$O!Sv#zJolhvN;r0W0XLuf395|%huus#(1~G$UW*p-TcDszHN^B zVvjM{p%SQCb?XQ9UC>O_-BzV^G$$t0)|7D^1&&LvE;KZFjt=b-EYGA%MC$TF zM^S6cW|p-aD4|ob}gM)4EljrFqsbafjIO9 zNW53o7lFV|)%wuOKuQKf+{b#VW+|9V-z33gEO`vGS9m2^k^>5rTRNQAm;v+q>p0zq z{=_4oqlYzh#%?0qJe7A?A#Z{Kg7F58F@;o5{{qHF=@sm~|28FEqALf1X^=Smx zKRnB2$(k2>6(^V-D??^3NEnB>x<678jb+i-%-ZjZTU8T>YQ+(-0emv>0kNrF>@j~F zwbhesVa4(|xwHjYI$TKXRGC47iU%<~z-M>lbCuyx{T$eRkN)$l%#A8+6Da*tt$*ZB zBp)yZQEi7qtQcAFAQrUkJjMB2d@r0UGorC;<<}1=gIAjLNLor;mFGgZfs(D2jY$i~ zYi?{|xTm*v&p@#bfdlc?_flB+o0-qZa>`Wd>U@%TKJhALJju|fc_4N()w{vndol?l zt+{NRCWiJk#Yv4d&=R91yyK!uYPy zoU6dlrj(f=9(Gx`Pr=55;(a$jmIWSj*!qo`pa`bti zEL!k1`7X2-UkBy<3V5>QD5E3MzwOst81G2%K0MU?en;1;bi2A;<_z zh@>wq6kIYvYgSM>NQo3U>8`gOkd{%nsVWW zdBM4TuQ(;BHGm4}5P@J+76EmZ`uS#{pfLs4_-Ef5jf`_U=j1aMh-429cn}VxmgUZLZ+NJ(aT<$NjDxG+tXZSO7m6SWN3{?`zD!wlEwCOA0J9b`qo@^&-px8|LKQ=L|>F8LOzERr|k`> zHJ-@ryfM7Nx&1J*pDgLF%kuDVx#?$Zf!#E5b2mZft9&towaKAlm-%UfIx>0S5! zI=K5;qw=(u=Kj&=2XHDQy3}ihoyjL5oV)Gj=jK$~Xq-+=@%Y1OkK!fd-?#fOTJ^A! zhkMUFrD9w-_&C6-KBo?=C(cc$a!-HQD^tWEtFfL2lwy82hi4!NCpQ@3OB3m*c;wEB z)f2`nIsLA@-qBMEOXbH(T_hbrLf)#3Em$nH(%v^Z4=DIu^60!clXUcCbwIAFe8sHZ|TVf{Ki* z>S_rNF^6?#JpyE>g5RFGUJPG&Klv&I)`^CcMR_9an{`@aulE-P`hbq-Y4BQV@_P5< z7K;PuAjH*mV!z*B^9;rLB(V}61nD?EPnfz>#Cd50En9UmT?@fN3y~p(yjqfB3`*ePmX2a+l87ydPDDmuwa$#5%rF8^BOuBB z#8=#*LU-9zfI69~ZaW*LVSaOqr5-kb#4b3$+=IXynfY zKXs|k)HbF$&#`VYfWr%Ik_~@TB_LG)r+SUV9Y3``NCZVedaNtIa^^FdIiX!IAI&oR zH@7wJ>_05^TX@8_Ov!JYyMWFb#Hf&R>L4n+^W2v8f_vi#WZRod3h%==S19CoFLVwW zYPHo>um@tHIfD3?l?qXAMvsV(TvBafJB*2&lM3Vq_R@dVfhjOBTEn-uRI$SAW)9#{ zju|xKDHHlN7a>zXuyYxRnfe~iJ&coHoJJLD+cDf@8nSib4UdxZ%p^3MT)!~{yOz>Et8EN5XISCzy2-e$cBBS_EZ2j$K7t-Kh?^PCKTy}r8=GaxT z1)GLMA34d=00encb7q!GXuuoM74fnUo&=A1-^UBsZhlGYX3F$#2=Sl(Q`WR)J23`uN(ZU4T+T@j^g_U9j&iGUL#*G>Rlr`{L-gB3s zxJ8I$Hs;BOy(g%kd{NII2->1A?Zhua;O(L9LVG8|Cb79T!UJ_yI89?XLL%3+_Q~sH zaa#2f=`Tw!g&Fdj8R5GE%&0<@xaVqLF<(Pr!~EWFfx`(- zY?d9^wMN4*h*#R#^r!pcYy+Wbe6h&#*VCz?0+aWaexhli*FcP+6A{S&(NYT(4p9;u z(CI`|tOjz6t^y|#4&#e!!D%w{bRS}wrW`co379fC$f?<3z?5+SHIdlMYcFG7`?(_Q zPHaukRi)N^dT3{o9cGNFP0HBbv)kT$Cg2;)Z$@T|MdQh#7b_**+zfW}qtKjeITNkV z;+^!+=w8Fzi-R7t&hI~Sktp2-l67Y3F=1)-RE zRh?T=Y`L0w3x!7fbN&S4!DZ=S(nJhg)tC5=bsoMBp=P?Ja-YBJyG4Fi4n|u_A>{Jw z!13s-@*t}8835H6cLR?@fn`qP(R~nh?H}T6av_-$puqAsaYdE}TBVX%NA}0U zZKdh7R0&bMtm?TJ5%*{}>-1@0vXE#NU^a%pCVd~Kg0U@bZm=b~=q6wc4zC{?0cNceWiLr5ZSWe+<6W%n@-nt>=h?#CT0*dQdo ziBl1ve9jU1Zz)LJlG`4OW5;*U*%j-OQ5wwordo>{tU;EQ78>y zqFtV`eML*y!JlxZowe=b03cbN~}{@NPKnrC4> zU0Ujhe+`1+y3%crO|Longg`xjs6``mxG%ZNRXiNb{3Caz#HQGe*Xi81$ZE+lDjDc-Oll3>0; z%t7oHPa-D?OB>*DK^08d{;NFrEs;)TLm#>rI~K=;l#Xz7(q2?DG3izRXlrZx6rDIq zhBD=Vxe6i@_@{&yH-$aTeXL$aPqBdDWOxi1HN7sT4^fmVT?X|;pu5cY9ind-W)sjTn>!UYF5cE_L>O?dzfzR@pw^ zM3PF(;4t=10#N=j(cgr*o$nd^dG1S28FK7i@qwyJpnV3x5h%(43Wb@%;W?4aX)3Lp z;WeZsuLyF2G$~7==cYQw)=oHA(Kt5?#oe=(SbrWT`7$(#Gn;-)xM?RFXJOq=(dXS& z$H!xG(v^|~$meT|kEz2dXy91zxJ$tQ!S&RuWP|B_W_cA+>GJlC|#Jad0A%# z9>NboIzg&Nb>*=tDoW!&%!=dPkQv=R3(AkA7l$*YA?zraAiDx|&pmR3VG{_svw?`*asL%EzXjbR{8R`Q+(hn zWGfTv)fyZTO0nN`^WPE*;4`FFDY};*f%*96o*J*v*?N$-;)J=E{2rro$ISM|v4ml6 z&>Ocwuevl=+uJ~WxL_em*%IKerNJS)MP;HYjj-!eAO<4qLppoG$U}9~iUP)^!wknP z`r61H$0MZW#HBx{JG0uoF_N=R@vKNhBZN3JIi%I}*A!0*iKepLxx{?yF|5#{KA3qQ z#6$7k12OI#oIgAy>?`uONr}$nu)o07&TjPLzeU#e;16{!_L#0G9bc=BRE7dCAE%!C+kcfoX7qqVZmEb7C{pk zd-CwZNqoiOMHnO&17QUBOXm5Vl`6CSMz=7oZLN-2_|W~+Fm=Mixt)3zgc{XL-yA2I zyw+Lrk68gruc5_P(`KowK%0Sf0FGLTQ{iUN4Uk`t?Fh%OCL|IeT5fQ6h%?#Ai6Of# zni)ieUu$p1)`M&n94RRTOHxuOm~Xe34l%>U6l1u1&9Ca_K(7Uim4mQ45#BRI_f2VM z97#6Q=&v&Qh4?bzZp!?<6Lu5H9Z`0vkak%2gp43_#fu$77iTTZX)~q_ZHhohi&Q{) z+Ai|!GE_RKhwO52flYn_d~{<}4pkhWm&bBRDG+j`TDD=Qp)nfHY=>^1ad`~$ntPp? z?}4v}S+K8_#*XBl`knBN5K z^y)3yeK|Uw-;)K;$d;x7Yi>?BD+j4%)-wrqev0yPDnlOErZ6qoqO%Y`46|H zU)X>XogSo1U&pj+u%-6K!83CL#2tA}7mDag|O|ZC|Lu#*L|UY+| zb)m!AsUyvJp@jNst)$7(AuwKQmQJ)OJo;3gs{X~3lc11(uc+##CRklT z%zzvt`&s z1~ph`k*WZ!8jpwF&wjO5rDAaEeR`nBUv$3+ynX?E$pECT1^7~1>w@P-V9kC3NvN*< z{J)T?|9I#92T}Z&C;SU4{+Cnp-%L6vn*UIS-z4B)1o2zhMA*#U!BN0e&mNcYFCOuY z#Ql??qyMh0VrJ-Q`VA`mWB>PEm;W2r`UildQ4$uG6cM11HnY-qa*(&NlD1)!r1}fE zeh2(+SkTD9z~0Q((Z(M4+lcdTJO8VL@=wNp`pW0<7Zmz7Or-tx-`2Ag{Rg4@H~BZl z-!dwC+HX+fZ&YbLt8cUJ|A(f<9Q7>C4EX+1gSg)T6&#JMl)pKz?_1UXiOk6SJ*>a6 z`2TV7rlR|vIVuLmZ#snbTi1n+`L7eUu%(`f11{rthrVa!uMHvTe`vt}UkKp8M4#}t z$+pBd#rK!qQ=`%QAKLC;*6uH9_b+GnAIk0@#*XaY9txX%kK!Ma<-cd|-?jLjJ}3?P zf4Ep$T&C}y|G%Ao3EKZYn7;$Fe7o%YJ^vb+|5d`F{lzvE^8Z;bbUp&o|s)%`d14fU|F{@+49tSsM-;s4*Dp2~J3SuCp- zVi*t?mz7ozTNjs*ZA;y~Z>R^*AN~7*cjg7}yX-lG-Xz5gG zV<976Q7uZYe|!^!)Xe6ncX+hF7g`o%CB2osVs(vt^=_D<9EeI2(B}a2Ix$gSn%4j| zwlk}>4muV!7nBkBTdW_@(h@)!8ynkI+&8r|pybDJ?<^>9L0-9#gv``+PP~sK0CDzL z-pkp^Hy8vg`_X9&yt>S>40NIS$^WjyQ4Z(_fGUC8gJ}p15=usPHcToGXj+KO1R&4L zk(*El%e%7B4`v7z3!Vmak?Ge6;NU^xJJAgfpy0v5FwIlM#_%zKWC!*OI1|gaIJeuH z7hWN^kB1!07kGLEW&iyB2_3*5OqCUFt?m87FMS4{| zz%Roi7+XO1*7qM{AP}^`Y#htKJU*j7P{;p3-q$c{X7M?re5C;b_duHJof{ehJ34I2eT|*^90J(efvu)8{AsBFh%!69WoZT-hRc4*QH!f% zXaTRSf7h@+JiW$YXUU!GMi;!B8lV1@>Rle+oE-e23&t2?qTJ~6f`P<)=QBh<=Yuoy z1&jREg7Ch@fAxjY_LWrdbwK>-)0y){(O6g!6_sCiu?6`26b<;UML+25+wB2{3;%2~ zv;2$W77cZ;+X}I+;aLI}`o~yz5Uz<>Ecmn}+P=Oy zBrQwx%UXla2-EqvuQW3*$F`33*Mc$t0R{A!&rF$yzhu?LC!XKl7I|*gici%xjn>y_ zj+&Z+uo!>%r%!|Kmr?1v3xei67uM(DBTuxzI&;=L3W@KgNI)E^<^feFa@Xsp4gV)}=mXCb)F8DqF1+vNR=b+&m(s`A^T(0cS9g!-a@uOf2Lrn~^`Nt{ zPsxQ3)TdlVJ3HG4(TmRanl60VeJ-s7`(g7cJSPcxD0CrI+>hf>H?g+$CG5I?bXMvF z3t)+(&qLno<^SLoMG%W`+rXh+bYqWID5zZr288Y<n4#Gwr+iioVxPb(Fx$qvUPUMAYnx{tTSkH_rd{zEkbKW3id#8tHfegf~0u3cEANZ0rPNK?<7{Rt7fv3q#?W{x2Y2hq`-~1dxnCq6X(A^$wr_+N0 zpijWwc1DrkplySq%AbA(ddXT8Hnekxs@f?MiU zuU1xL4_tBPLefRUnQ>2g=%u*qYR>6)5~3oVLlpsNxdC<+V%V@QT{TU6^)?``6K%^b{9fk*wl`GhnyQj@&JO%LC}OIn`Ul; zwvV(#=!(dJ(czzLXYRZDvB*Y1$S3CX{|r92D8W*u@SRPM;lPGa$d#!@<<0wXe`hw7 zWaG>bY3Qef_x=Arqd2yDT8x*&c%ep`Z?s9!(d`+n{s+Y8lEn*OA=e^KKV5bY2L`whDh0kntE}hRilX9tEWV z#gUR@jhtG+h@32z>}bjvqG+NMLz!7RLyvknJX&;ru+xg5_JUvHax>}ITdL&R00w*R zklTH`s12hdviRPCu~I~P@f27sMOxp=y^~&Cq$T9Oj!LL?b*n7g+*o(w)YE{dw<7XV zZ?e5xu0Sq*U3Kc692^nS*>Bu`cA=kv^!iC=bBG?bDMZ`pJJD!EcM!#!Twhp3VUv9% z)`^6_)nX_ZZo_Tg+P#fMc-MKWi;{Q@L8_pm6WX1ok&ZZK5Ej1-7H?MBPcNi>+oY)b z2_}t8kro?%Wsp^FBk~b8uC)oQvN7!imMa+5+;tslYk`wO1Ny^MM#?U|yRh725tZwt ztJFlBUWmgA&S>uSo}%$E(pS|OD}sxrxKnj=4$bb{R+dmZNzflh z4g9>x*mr8)Tg_gdCa|p9W?v+|Kc3nyd1+3QDYxxiUZ9Oa@BTj2zWSLGtI+w4?#~?e` zSASLo44Sbm=934*#%5@9ZA*hBg&lTW6jK|hSUjYt*Ro8xYij7;)pW!-kMy{kukgNo z7lF?&vlc@n9tKi+Uw?G?>HaiIa`n<~<2lpIE1tia{7@hZU?lE0-c<6uxYv!As zhTqhVdvYdO;l$yu(Om_Iiz(bhkG;a2q+KN>T!N;E-SV0b@y{ZQyg*$(8BrA)hH~|r zMrgYrP_(xkg3OkV?D&5|hVCk3j+Sf=a^IMggFeSb5rmw3io7%ntNU`ayd$5EkVw?} z2#|zvDg=*LyofdFGO6s+dpoy4Kib%Sej*w?Le>v@$#2MAGW4x;;OT_RaQ9IStJxya z`SJUw@*Y8^{&3--&xxkl(ogDF$sd9y8H{G!>s~uHFjE~ANOY)|_KR_;k4`V4b`0`x% zwJUNsXU^JTE*cv4RC^y;G19BA3=ZnI<7fI1FA?ZbKcczJWLo;MbLb-Irc=G((Lv)t zoPX4Ha+-=x*L+SkRa1FPfG91b3{0c%_8>=d6JEEr3$D?!(rM?0xhnLoGIfT&O_0Pp znr_2C_kcE^|3g?`7TU%2AwY7>Pl4+a@n|Dxidx%KPxmqj11%l08MhvBOc1o;)2;N{ zpb%+)Z6rrFMpG~UURWN@lh$H^oB|GA^lrOO+VbLIgX`UZ^Uc*^QaKp+a}U0K;$Wtt z?hXrk2?Y;vtDKl#5?@{<&@$c_Ze~Utk&1zEVUNGPB@Rn4nq$l~lKMV!7pGyDk7NP@ zl5U&6-Wf=191J;LGrtKDS=+7B>2b7zr;iz7#~vuEz}kn{AT#i)_kxm$3RP@7*J;z! zjnQ1SMxdMg7M)u>NyicbwX>iSwzM6a^*=St)M=LV(czS`U4le43!`1lb+3SlbvnV zt6lKPKACiKNtFD`l}HxYoUM*HpgHtg<2=am{5NnmQAi0#1i$Q=x0c`YQrF#iHYN?D z`JM^teqo|mGm)O4px(_tIe-k1CcI6TFX9DPkRjABPVFi2wVTZ2i_N1Pi>o+(YULpc zMqR_&4~8^r6jdS?)zdTv-nV>b!=-`&cM9ti10~*p`M4uki|jqmb`sZa znQq*$LsybkT03}ANwAmie@Q3qplWR5JcuwbCYuP{qMR{haL~vUJjvdE}tA9J^w5c9&IZ`i{ zQo0RRbvFqDcm>PN;6}s*mGovE1p*#eC+aI9+hA)8K77lnYG8eG2Iz z+Noxqc3EKGrzXbu#pcHR>?ad~Aoht+RxogZ@`x`KLz;$_v6$nVw#Ka@NYiR z^m9o>c(A0=G%kESei`*$Dhtk=90i-l$fTR{)Q!b^*%93`Gz?xe46Pa?2qLk=1WX>Z z3}M&ehC0kh;I5O{2@ezjXP}|IL*(s#8*8Z@SH^&I0RL=1MSW2&7$!4q)nv< zScRDDgTw2ab42VB@=Q2xhK+;Zi8JW8^ET^R>|pYkr&vt%tvhATnFTJ5fvhsm#N8{+ zClOpv%EGgX4dn`lG&F`otcr-Q2egx6yS)|f zv^zCh{I3I)%$BN57#W$Vp-K0V3BSPaD6j7A-%sE1o#vzlAqgVu94Lph9yv${r9=>& zhDcWD4trFAqZ}b)zIx1j0&sM=ZKXY|Pl6|EN4hj+m7XHM&R4LM-Wch1y|7poavr2< zuP>O%0exwV@=8z8q%b`_&an^R@zy&C^8nwd`7Q zyubR=1L0go92Wu|48oA)8AZ2BNRYKk9!JdlLV9;f=4=fd-wU5Xo9~9~vsSQO#I{a* zhWY~i5OJ`V?<`UckX7+;TOMgcggQF_(j+Ld9WM|TZqi>A+!q2|eLdMx>sdjG5^%g) zin0v=8=|kQW4dLzIKj~udX`d@Y6lR@mvf~a)lEu8N^5BPaFlu8-YX2pYFJU#YhMZhe z1vl{-95B<<*$_L){|vycW32x~?6!wJCk;bFWex1Yh`Oy8D86AkN0#0Zvh9Wue8NZCd--hkswWb?M9S z08mFCr(?xKA$5a#3y`zBz22^#p};>A4Gxu1zCm=>x*_s>w&ujHpX)yp%=ew+wZ~ODV1WQbHzlw%GuZY(JE3 zvsF+!PlU&`9s9WW2{ayS25A3mO3i18RmAt3JZJ@LNv+dsv6$I8m$l>ZD$UwZx_&du zsING}Busf2>wAs61}B<_AlH5t(xjMXU^h6Km7>7rcu{%$0EZVo$v~ZtbdBu%f;pa6 zU4gr_vJZR^Ik1*p;=308{S@Dm->Vm7H8qjx5HegP&TB8drKEN3gWe&5z+49`QL2_` zIOfP)Csw{PW!mIgB=P&edG>oabb0mH5tF{$1L>l?{lz{kEzq-$9Y=|H*^q_eOOY$~ zFoZzW#9N#gb+eOgKiL~7JH>gzqvzkB-3vR0PC)a%xenl;)cQp=*XB!*TUaHD_ql9& z?dXy4eVV7?k{Kx}0q#E<<}uLlwX{<4`~MD6OG9H|S{l*1Q;5^%6T+t(Ek-hB&e33`%w#<;zjEqYKKAut{4$%5V^| z*x1=L86Gh-jNmPo<70G1!VNSU1PwFpRghz9K%|*S3$L%JF~+JQkVNP40`3TsFSS8=id3ur5b%WV0PBFsOvJyjP3S(Qno>H-+jAQ>X%$i zJvy!59r@`RoQH45L7nNq`8p_FOYoc5JBCRj`io*j<=WUJ*tqd|U+OjB2=&u+KKbxE zUk2#SJZW1x!5__7P6v1xHd*H=%8XY3xMy1}e&$&?;30HRdg5znA=%L?J@IPpn%C)p za{Y+Tsr&1KZ0E4b**uw8Wsu2d1 zXlxa zPO-(YLnhuVscD~p2M@OM^rp^WLz9Z{B^>h`%TaUc4AF}oOd*jrMF_qWbt=Gol@~?l zH_d^Ddhaov$xoISOeVR@8{2sZMs9>sMpJDrN4&bG z8H}1=(Q+9{p~=+^mY|k35Im{VDJN6bmu=g%y`eto>%drwb zy{%k2df~6-hDjqKWX;%qpxxJemYL+0<&3}=k_A|jKbQMb`{*I zIfVo$61mt=l-LElR{p^IKys-NUngkZn$8KlE9_ljSb7{BQJ=9&DcsdESa&SnvinJK zi#j|~QnzTNC?6#}J)>9nyrP5}`4oVEx>Uq;P46ZDbeh<>pQMjJFBh-K|BXI|1HvXE zA|(VP*M}E(q-p-syK5&Fq{*`34OP9Y{c@j#<);`l|vV$w+M8(EU>LLF})`O+~?)86pwOv^0d|^-!%;a8lxVE^MUNu zPn2`uxz*S5SfsU;Xav*wgs|ZzK@+Y+P=yS0hcjkCnZElRxKhG1GCR9N(e8k?uGnXRg=vDw`oOdR1uW`gzImOq*K z!=xOgx}CRLij>Az(K6HWL4i4Zo5=&#{fB)$i0sm8fke;ZhY4RDxkkh@LVhXj+1JuC zg*pc@9Qadhf=69u`v6c`_f_(6;wPf;aGIJvC<7P7EtlT$XPE6R=Sau!ipc%Z}Y{*uN@o(0w)|)Q| z$XuyyWJ<@cjY|xUo4V=}*cBGr7!syk()mRhUX@_N@p=59#ZxyBi`n9)v(cl;j&qe$ z8XCeR(%WMm7;5U%3V5)pCZ&~f3XC@peMFKWUWu)4$$7R~U)%-$p7JIaKH_tD?j9J!<6#K8qb4cck)Tx;UlqM>^94;p!x6FW_O)2%nQdeH8U$=vI!Y?pN8-O4+ zJhY`;gmbRL-W{3|sd#FhZ-&ZGo!I7guPc2d(2+_9MQ>o+^Xd~Ym>__%Un1-ae{3SG zzx_mB$maVO0g(mGcFQ_b5wQM_j*>gRLYp>Z%zglr(7xWPg6)&kS0NrQ8ZW}%$s?#| z#EA0}2HMV#vF5p|)MCN=G1+-M^LGAu*6*N9gvb4Sp>M8*#fpvMiNiN7buik# z{r+Pg5p$^8evRRUVEj`Z|2~Fk0Lv%8T-z^iMym8#>6Ns4>H99|a{ItVEnR7@k=Y%Q z(w4p49j)&WNFqd(cmx&MA-`I=M?y)+GPv<1efJ};6(3ZK{qu>8xP-JBj_tskwxXN3G_}~a`0t37>t+-WmLhTj2?SX zIO*G@h8X#H9$vDXhvgo>|tff$KR)pj+S#1nwET2hDWL1a3SD@Notp48K z`?`y@grh4ma6~E~r%gkS_oH9H&Vu{71W8Z-;}Sum2gon+q*2Vm_d=UYVBz8YWc0{K zwR9r7#=swA%^!S6AM$cg%S5b9Z?NEq#driq{P4V8W^UU%@a^Y4mVAy6ov6(7x$XG{ zkJYG6K@Sw{3EgFwz7^OJrSVd`v2EbR_jUG{ea5SfmC3?=Lsh<6%0TF)dH+D_r^euU z@u@Sb(bXx=87=Aw-TQra!%iU0MyQXMXRx~osLUOnJ^o8YuhoJ{_CiwzlRV$}VPBlc zvyz|g;=#OCY7FABb)NICCrdiRG%oy3u8>b)usu4jp&+d1Eho;Ae|=%2VCGZ7Xp8yG zm0Jww;ss`0rrlR(S41)k&-|L?Cyz5H&E1$}6Ejj8jDCP#Cl3jsPzh-yWjX zR`zNlHwz-8q=8@_)dW8yZ9GTyafB}q9jA zLDB=VD~mz~&xy;qX2$`@lL$df2k1NdI| z#wmI=l?AwBdm~uez#mBvCCDj(ASINLLi}y;@Cg|Otlo9o9-Z=)1I-lc!?baN@pdf| zB94v~-q6B@?^3am{K{_MSINe)yI6wK6eFMDu71u>XbaL}|&Fs>0#Y+DCVt3Y&Xl1Acm`ng+qWQk1Ox4=wF*JW18-J(k ztyEMIu6S)+>DC823&dw{N+wh{uIyI`6fZVD#TM63!8kN4^M1rE3)!)107rGPyS(Mw&BkB=F1q%dyEig%^4~PbDePrf!9>7$5cm zyahzb7|&O->6bx^kD&W2|a1##c=!`<&+eIC_u28rCRRg9EJ*I zD!Uqj%W_$crNeVUYZq#f_mAnetLT?wd?iM;f_yuq{anE zV-`n*&kg6<$RZUHaHwB5eKirx;hG6^V?M;uq{^?yedlH2VedX`sw>ZOK6Lvl^vo25>3<_wV@S=hG%=j&qSr~8*7kDXTj$l z>AfnSAETC|hiy(5fPPgbd`6W6?uTh_pNJkA`^L8mqln4b0L!P=5s;na&Ex!nB;h$m zd{WZ{2(Z4<=4n~JY|FqdvWe|01`D`*-Gw7(7F*6o!@`F5FImmN*pKKo4Wn%F{!Otg9>COr^;a z?d0IsVG~IoNRp)MWBa2OrM-UuHTO2oO5#jPwpkwF{2SI z{(MEuQUh#m5pRC#mIluTGg3cI%v2AK$_jJ}qpg@W9b2i?h03Fta-xB!Eg#Uh zYit7IOv*tq-tL599;4em(FspZ9*+mBhM&xb+xZgjIOD6GB#7j(fbcZ?I!eQQWPMY( zL4k&4M`Mgq`uRVUI%v(?15SFl!J=X`(sS}uj3T|byf&b3yYj=B?ij{dXA?NIX>+S% z054-xgpb4FUvrzw$&<8<7ZVmT4h}}~Q{(cvj5=W6O4%?vF#&S${Z3nUVuKCDf*zP3 zR1An}u<^e;6CBA?GF{kVHxX9fCZ80hqSnO-5z1JSm!>jyhp$W0?O%-+j+L)Pj3;>= z0zXU^bM4PJ053rw@Sz>7t=%B$lT_15-zz+CA`C-VWSX!bCO|^NG|6fNs?pe@tA0xy zE|xQUKHxMcBpoH%I&Pj_)V* z$yhQvYw?`epDJ16LB2fKhXq>t_nW_$8Voez5htkqc$(^;W`h0!?wyjo!gMeA;QBb4D!`OaIJlY;beeBUA=YzvIe)u}4xZ|WC9=k3}?6KX2`fn(V zN&}aP;%Vd{za?H`7Uqi*S^fu)H%`+g9@r-ZjO62OriG4R5^ErcrVpHjX%N@o^4HOZ zACtJek;(&+-Q&uEsnH{NgbJ#cG^+lHp!%-4xuxfIa2vgNquzkcmxE8ae4|rlB_qv2 z)4hlDNaTx-7*Ux)G?QGCNx_~jkumYRL|#7HnR0atiZB^FTG9DW;JCXP337y|+c@3_4( zI~2AYQ(4p3L*xBtqflMoGurJ&AYjVQEg!uiHj<|u_oO8Di~BFXr7Qp*=x=(VSIgPiMeRPp~z{RML=E=7AX6GwTqfc5OZ4(Ic7(@ z;-IWaW@kYc5A@^fums;t2V&QjW+qVO~c z(p2FI(>|Usr}~XFKQQbwHmU}zs@IS0r*B(j@eWQ7u`p>smRv zv52mvcO~nO%e`5HQMgpS8ebvQ5f-FZ|HOXSyvT>$gJ_~Lel6Bkw*1Y>&?76%Z74PO z9##~&w7+|h5K7bh;wVlAbs1M7zcl^0H6>@x>K6&+!itmdj!_&cTbN8ljZ}b)+DF@OJn*VoJo*xQg5Or)h55odVOXsVf91xf_rwoBb%BBG|`d69Se*OI1@y5-8 zWn`>RWYRLXApezi6rWJP%&)ID^{mZ4@cjP$t=3XIMZi~y?Wi;O7y(16IeBy7)LRSr zYCKcoy66C`Mpju7dM(Ppo+oW8Q=#!~Mb!MW;i?h{E3V8Fd!nrl$>*1_wjMSirV1%B zOoD)p*Vm7dftI;d_~hs#R!R6zx31O;bxDCbXBV&xtD~hI-HN8eQHe{5OWE&&jgFcokS?3JknwaU7d+-L z9HI$ddp7$uvg$O~94>EVMZxrG5+~w+7)*GYJ3$|Ibk@(cTpp%^eXP2n8b9>Gf#l&^ zluf;%PmfzrVS~y|##PfqIS`w^p&u(`$s}=2>Uk}1hYI+Uq63Epk`z_6yK%2dh^#$* zRMPgT$vxQBPPHv~1mzNxfdfX8S0{|)UzjQ>4%EC%%xWGrc1OTsB6F12l~;uHZY$I4 zv+HX{f+VpeKGhr{w1ou3#1wIr_j1yxu_Bv4w zew16XxBO<@P}Z=if>);O`P1(pYl?$D^tTD5sM^(AxISfk`GNAaTZ{(hPcpVKs9|6|k)H9E zM(x-~MZ3<-VQiJCTPqXZ=QmEKHm~?1Bs-e(?9_Lpcl96lf=Kc@>eLz$_z-(q=k&?C_Avef1%LQICCPWKHM zW|p^QKr!}|BwV23gc`PNF{a(MroAWDxCm3dwq~%CrJ@wUcHNoz=U4J4UmKD5w2(i( zGu%f!`;qn-xF~Y~i1yjF8}7LFU7I_!rEt_acty(zZe7v(yy4jNypdS{^K{SU*Co^# z!lxS^Cj?fbeg}9t`1ju&;i|^<`nB{&ezP;o88pUe(dpsXvE&_}ZKL63HO12olLbdF zwelIo3iQreyCfBj`4s{k@&zC48Op-$^!oU$0;a-kId%50mZ#+ub?5~zf=!dDm7CQI z5k63B>V+KEB`p+B&$vIE`P`oO;+1jAx(y>q*%5M;3{EQTtdisI?7ILCV@mE;VU2?i1^7o8;|E;y*7#^wmgT1(U{7f-{_ z9{{xaRY*d^2zeMJk$w<7IMmJ1h&^4%dE9)yBZJ6dyP_LbvzHqdI_@+8>WxAz6(7&TRy6fCoGz~h`k;TZO6g-saEPnird`GB{(_ZIN=#`bCF&BQq!>lxuYkPcpm zb#8FV00q_J`4UH3;Oc~A>OZsfd?s^N^3Cf$8p4`l(Ov7|`4F{C7(cr#usr_ds_;vG z)cNoW#=ymge(D<06HA`+6`g*K+#Q`8WG{LBS)_Cs2UASlJVWri=aD!ZPO%J!Hs~u!*?1I}SAv9MaJXp<;VJZzkeFPA%!W z*rq4>D)>whqp6+4KyNZO?IW(}Y86?UT;t1keh-~nF=$+n$I^Nt?YFJSBhS{)glG@- zFpw(5K8P}oS;INuk46zD^*yyT6!rCT*{o5>R7aR}8Z<}Lzb6QP)5^ z7WOyJ;BF5KyuMc065)QD@RC9akr9KGla%%PeiAsF9)ZAElOg;GAh)vOpp10`h?v@qD0`veS`N=3pmc1I{Wi|c8S<&ZxQg(_Hn;f&xoM;ro zI+BQwmGy#y46n}MBi=KXDQvuHFFN{g3!PUi2v1dPnt}nEQdF-ttsmLp=_kFMcs*7a zh#`g)4m8pU3yW`Q@Se0`ii*I?`EWr?`N*D_=Xtx?NE66K=P?;Wt&%12;?TW!38#HP5@dUe9CvF3j zp=ox$=kGAV=wE!RL_Qr7=gz%{bDii<*2mQ3L1D`o_5|~b0Bj=Od5x%vm`ki0=OnBw z(|nYM&9?q=!h{>--{&i`Hu=eUbJp&3k}v~R!acQYQvhMf%H>Pf>|iIBtzAd)wbv(= zb>@uphvOI63sy{f1!&@M%EBdG{=ho->mf=&@y`ACArut55kko$v&XMPOO zy|J7W;`5K0Ptf9$?a#)Hd>J%LC%n-(X_bW}pw|vqSn+8J% zo_prJ!9e8ZLmEb2cLt01AwK-cQp)JFm84z;3H1!KNg#*nX09J{)OEm6f8yo@gOAsj zpT=gbZ@nryX*ynVZUF;4v>nxE4;}Kq7g$Pt)mK@PddcG|i*=!NJy)iEQAC;C0NeOw z9Ue9vFQ?31N)pMYQO;IX@RI!3in$|j9SLp zih!@=veBgc4Fr!^yw&FgFCQNSM&RUdHSKTYYvwocUsR)-To}%6RePN4U+zCTwM|88 zQ=I)#ACE}4k}}@^ttjHzvw{6C&+gnd_L{)dj-atthZezLAsTmfGzZv`8JUkiUIw>{ zj^#cK=?h*imw$#LP|I{_LhciA_3+5*I(5JKXnd@+RB-GpaYMRb19?#+YgagWChbj< z$kX>th#4-lR5~S>VqW{!Uosc4L^WWaPfg61@{uK$gfnfP7<>XDq>4_frud}CRfkP2 zZ9U#?$cQyKqc-cV`ZNlvnqTEVX)bW z7dc0*&Egl+;q=73u)Kf+n(yM(l_xRghvRK&C5W%MB%Aid802knv^NIv0=l5WcgH(c#x z7b_ZKh-LfY^UcbeAmBp3%}Li2*j?Ny`i8vAnLn;@vnOxZai-gWy=wCnuaE-(2gqgV)1-|-xLdP?K{zR91&tD}l~Quu{Vz&GNfypS#>VPCYNl7l4QplST& zQ$qx5EZ6s3uliD%&{rd$jT0dV%hS-~8Ww+s=L6Tm)5Hz9-LKl#zI@ibe%@`nwIJB) z+~4wIlkPBxCaG@|hP~;Wr+OmlLl>nm$HdxUk7|MnmR5p|bl`4w9AX<+Hrk4g^QyWH zUZni%L#~dxgNdWhVNIvoJcT@~0;e0^u|i)02LwnWM%EJi!Ha`V-|@w@2tR-23xD}Z z-1GZNg3V@$u>7+3<4Hc&*AyJNKd3fg%f{{@mxtBX`-~=N(Btf~PYO2K8#cJ>COQ%u zx_)OP3Eq2l)%J?r&Gilb4+nhhuPDPosle)s^1fOktdJFa+dM>#lMpdyissZ&%Vur7 zM+mMlVI>(dAxm6Ykps+Oxz$@Q4mQeaQ*C2Bj!mK;ud4k z*!L?nd91P(Tv&?f(onDJB~j{vdzH-zhv{~{lFIiyH;de&f|v<^nk(e29SYtX8k`pc z&*mMKP9eGyD!7uzp1u`YlztV#)!>3|JmC;SHhQEzI%3*etzJrAA+z*0cOGNEDAX`y z`dz&&6R(lZgNH|*E-&DpNXe$`1cA;B@IBi#0d?8v<7BBS*#dslMfbGZd-11%2G^qD z#dBQA%zHWGD~ytDM3p&+<*<;s}wQk>qh7 zrcfBgZJ#}jjC9zBrGts0i@aXGVvlL}LB?-f`Cc1)vSOAq=~s>M&c5^Sd$`8jI*tQl zN%a^TqnZYJQ|1G>|xQb+e8-2hp?fOucFP;dStBGN=?D+u*9OO7)x685_A9!nvq7kvFxJ z;w1Q7i@WEXUe@wq3Lh?vuu(jp#&no&kv^?{^ir&%Puvzqr8vBms5SSG(^58m)vkj6 zjq2AZ+2h_$A89p^JEv)7RWS>{;5U0FBS`f^-q`Glc5Rmxzep7<7{FcN=8Ll;FKL{J zHt);sF4hwzrLCvt(IWatI(Of&Qx1JXoHo~RSwyKesp`Y5bpjfZM}GCQhYdUjG=}~@ zjRPt1-0A{zv8JT&eJmi=!vtLueKm9XY;B47VPQec`kKlvdqU*+J}LR*?m4CROXuz7 z3141D3A(dV_YT7CyH{pBlj`JPLmsUWAP)oO`tw(u;Jl<tnpa!V+xlg7m`@7NaJdiu5Zm|tegiwLQ@ z5WcZsu^q=_JKrb{)@mwby{CO@dmI@T&Z+K(bs}EPY_0slytx9&zV?!E&sNhMV~5~! z4f7As{5*LyPqSQ3{8yUXYuu~`pT3*)${D=;81)+;2<{G{ZAIkbzdWF+M zGZhllM$UiElpj8)BY}UhI*4P45QzFI=3;Q}yWCVl^S6uUc)orfNh!@mP7y8a4|J0K zHc0GTaqELWB0qj4VIos5+c>^N9kLtRIlF|}TNH9o~4s&0+~RyYKn z_S$*HHi@P~>xZWhn_J1kU@xng2b*O$hLMjK8q$$!{?`ww7Xfy>o7XQ^UV1qTo98Uf z$mu{T69h82F=2-U#Lk2IMXzb4r)D?u>7xWg-tx_He7a)PahTpRu<6#dcL zyyJqq^hlodP*G9s?z&IIY7u*3LdrxQx_J=l#p^EwC*K5NB2+%za`*=BRNl1bxf z9K`l{ME;o)@TBeHY>(#W8qG}gbdmm-Rn&22VW+LPxmIhuhfG^8-#(ODL`NX+w@9m- zk`A63jdB*nRi;hDM$dmw=*G1a(HY-kw$Pe7i2#eXR{F~W`vM^hf5)ToqdGE+-XF7@%}H%k~U zRv013;{7@DzGcU*l%3pOySDFau>nao#`sdP&aLOm4_+^K@ZCE)t2r1r@?~myO^CW) z@8-oKkMMeTrmeSJmOG&{)J1W1$>3S1_%3THIUDiFGs`*EFnuzDGwWg6L}zc067hqV zK&Q*<+P1#7%8TNUsjUIM7Z{SfShImKmhY1VMKyrj+0-M$kJr`{yt)Dnc|GtZ`(@G# z+zERN*Mse*uMftblN1HGqpIgI5Jg>$(y+oTW?)7E=k7&4$o4pt43{Gv%t2p>q9;|5 zI18vcJ|ah$9M9;ROsL*(eY%pCFtc>5`OFmY_{U1^Ih|fHcDSJuv13dZ+y2Lj@J+^5 z6g1d|k{8zWlPzeLE&`X%Y0{q72k7s=ISVyoq+21^wTojnX)vlg%9~=((|ttKTBu)+ zsf~tPMTqfTd4>66%Tl*y4_i;|d-pDVozaL1;YjSE3)*m`fshDHDB>V4iiDf2EY;gOJG}1eol+h%G*%k7TCgn0+kdyEG@S!&s zP8E{(wvqWrUc1tFb#YHS6I&#p-@EEPZSIy^{>m&V&h;vD!cox<#uX=h#H#x1A~4?# zgO3*08MN3EK{K2#j&BY}VL!5<(o_VY;K9P+HvqR*U^kQOdMXD4` zYV# zo?3XZ2S@gSq%E{P&p+P#>LbLY?0WiRwef_t_ZWRfa?i{HQR#I#@pn&5^o5{YuJf6B zG)MQ5?I+g{MtaB3wJT(3iIgev*9WdYbjN1$fVQ7>N*GA5bL&mGBzO}hm(!o8~FzHeIq zG*SZH?cpDvH=;H1qp}+#DbUdN(}W3`W7iD0yXhV3#n%YzmEw({@0~n1f@AHI-?eH;mV-UQ@bFXVWVWs((D@ZE`In zgn`Lx5N`L+itdM@J$^Vv9L9+?PIR6tz-Al~Ncc`mkql z315d~zY{-pYplmgH7Lvm_EVdCOoGtwtIy;KmV96Dc_d)Wivq-uZGw~J5F*DX(`L~XZ7f%+1QNI zS&W(xWLs$qk?3=l!49j~}~7KSSYXYzNSVUo2jR=*8RxBLhP~o&ErP{r?3cgMJ+Q zKUicO5CE`$u*jfLRkyIn6x5{U#U=m3B2zLkbNPj%^d&yHijmSP8Mdizi5sYX6DWSdjm%kTWb^3-&enh)-Fx}BRd-#1Aw`Qy}60) zA51eRYXc{9fTxM09pL{HyqS@mwVf@%$;8Iu*OiHbi-9#j81M`BOdKEqkOW9Uz|UkL z@Mp3BIS2%rJU{`UbOVH@3Qz;612iCjXj%Y6M*|}(6XzR$e_#Ld*u~ZuGB+bTM-vEa zn&EHYG*iGY=rl_J6gYRK)~GoTtn$lEx&yJ1@ZO^!VT*04gA~hS18w?IsEYzI)+|DA?E(v`}6w8H|YI8 zv>U%5GSD$pHwQOF9(oOV{r~od9kROrK*@36txyUEW+qOMeQ)Oig(E})Jh3o#qR<9& zL(C{qa6^Iblqh&^$_E9{uMr4%Q;8tRflzHqy8nSV1c9KadVlK5uM#Nl;%seU3$<~B zxJYrM1xFKC z3h=Kw`ERYeA^fH4w}3DO$8R*q|EY@Ox1FaZ?#_RF{Z}ssbSAg;a@;H%5&)w2_so9l z{jKRg!cf(J3IE!SP~qRD{(m~f{#)}er+#z(TG|_rAnO1vhze7%{|?Y^-i1gwlD->@Q?8SDKc!oHQ#vtXKjCZe&f*}&;Jbmm*>#= z{$>21ShC%Y~>Cpervw*{7(RWd;U8DH*3!Rd+YBa1fSd^U&9Gw{`IB$HVptpw?r z`WI~Nza)rt&`qxWOM*B6`c>oqsAq-vz;+YYf4LxDu>U2<#X!OFd**+9;AViFQ@5Sq zfsp(K#kX}*N!p6e+ui(%- z-R8c1NI^aOlOw;*JJ7E@zRmXEyoWTx5F4Oh%lMyC3cA?}f0X??@k9+EaJ+VAkn;$7 zwo=?2x{!VL=OFy|y!w?@px-%s!!BoM42Al2GWmxaB4}@7D}0jz6yRUE|KBwIZ^8?^ zIGfu!(lY>5peH8eRoTVR5|TZTD^W)i0|+cJy_krsfr^O+3y_tK6~x8>IWz5yU5rc| z>Fte8O`tbGtZX0y2EY>&4>vnUV<&n@!+0YL$v`m!XA=r~FG zK{ymt#5GtYAPuIWfvv5HBL(Eg?k$`sAb)>rWu{Pr_Um@G6zr@Z4iK1!?Ux-EHdZzY zdUX>+Hc<*LRxm3hEv@VgAlS<$1{ALUNI>cTS#x(s6H_E0WEr`UAmGKnzCaY5U@)XI zn^OEsgCrXC>lO{N$L`P|>2QYzNya-g$kw}|+5WKsW`i`1w`pK74?84bZ}S0x(9Q5S zjr$G_%nm(|Zt;P^+~7a+_{S~~1U>3*@d1G#Xn%B@#>LHb*FP?3(|nr`$OgP?gYAwl zK(4!UgS5=haU?8`gn7UVp?TeBgc@_*+V2*`aWPeJUQcWMNP9SrUMZ}|s;v`>Gp3q>TVo zfA1qO2iu*zf`pg*@0J}tt+)8wX^0w~$pLElY*P*j2kB*w)f y0cIBw78Vv|7Y2)pazGjo9tlB;|2qq`$3}93K11E~abQl!CPkv96_=Ml`hNgupvH3m literal 55319 zcmcG#1z1&0_dZN_OG+IY={TIjA*4Y%r8}g%1*AbhX_PK03F#1|L_it|DG34TP62`M zfbsCu`#$gQ|9o)mYxdq}&)WB_HG9oHYu3;yiA%C_vH{WP21nY*(KrDd0DEIAGywqs zyDETP%3jSLz%CA8bT%__v9z~i`h&-AG!1MSDybO zitDB*-k+kx?cMEc?2Sx+iGlnVG2A!BaB}^Wqw4D5VDIGeOAIIXe~|2U)b_uty#H*lce zgX8{Xj6Z?n{#!%*=&#_L;DEnuAnI!V2VB6vHNtPWz`w@@{AGzh;R61x34Y+>{T;4f z+LyJ1c7K4Sv$Lz2Gr-ag;9_Cv3~(~DF*9;D`_*57|IH$ho5Fd1Sws!mPpko2_O8Dq z@%)W3ba<|srUC%4OIo_z1L)oO=D|P20R#ll*yYUZ%v~%1yu4t*_dhgf1sfMLCul_* zBNsDqGZTALGc>5jaCUJrGqOeVnB3Ipu^ZvQpB~WgNV@mVq_aG(>;+=CSRqa?5&@yz ze3GQ;yz&M|d}(KC754`m3p!8%^XykgAD{l$N0@M=el6{A=XruUtj|jK$qX@MWmL{i56bMPe+@9s;6b3``3nn^lDY$2f~abCYAhn7fyKuh9Z z^}aFCdBXC8rE6_=5S?t2o}X}RGAqeGw_~bdkkUcTu+Ni-dmqJeNhc-}&}|;j4BGpF z@9ML(+>c#iWQaju+A{1fg5a~g83TIw+%b8Q?K38$Kj6XQ(0?%(gAkPwGOcj*uwP5- z8NDCGT+6}j&Jo4*n4=6$>){*+j#Y=Ci3G@To3~MFyiD~$l2J!FnOhK+Mdf`|=fuN= z6H_EfVulffJxXw>aGK-@mm|gsY+2}#yre1i>m2_c)Zp~7ebO1*2dg=jCn$WYx6&>j zD}a_>7lbr@sHGB0q1=~FBH5wrrS>x3r7TZGCL9Rqo5j_{5$_|v6o%VpfHOy>jiN6@ zL1@~3i@s%P6Mq{cY6i>aG!IqqV#yX!!#Kq1-94ir?=2s;wk>97AK(2Zp-$q3dsxn{ z(&_T#ibZsl*i_NEiv#Tg;*U%w@X?AZYoD|G7#?@;!#vFlB3eNgwJddkVf0(L%QQ18 z-{<-@-g;I+fWJ^N-1mzELy$yuaY)IX;|-#xBW2TjO(%EWS`f?#AD3@^`KY*mHh#AO zdpGY{KGNoH@t!7yPo2rJJ~&k54i!C2YO|-K=kD6D;O&ycH3k<($iXN|WN|xc@5hQ` zB+7hS_Yz_%n-ts?T)CMVqikf@bfzpRWz+rY^)~?ZBm6p`2(hFs@y81a6Vq!Qo6B+_Qwl8J0^>tF=y&|Kh2fw`HUG2X=CY;>qhA$!o4T)awPW#^T{pq znT8Ie*c(>OOd(Wo+f~g78n7Lo`Se;Kklq(rRWYfQBU@id+}56~=n2euM!5CjO;ZI} zT^$cSN|2Zn;%yx}PIA^!VZzFc?u8XF{CLdO#5p>&JdZoa{9&&Dj=p+@i*!kpQFO3$Q!q6M1&jkY1LKanct4X23k?K${Zv|Q9tAVkV4$B^Xa8d zZo4}9>@Z9v9-d@hsW$AY#~AtL(Hm{nN3i1}%tKd0@{cd@$IyNKfkVge>(5xt)4>eD zu4H6xhQ=;tZ|7oW=i&^w{?Jv>*j3D&?OmNrp#BJa-JJPS7t@Kwcml2+aK-VST4^H(>o37ynIIJlt%&5Z>QlfwYxqpMj!@&mn8yo({M}AVw-=JN8N5B89|6hAOkc)$j14=1>_Ie<+*YomT zeeZwY>%SA$8?b(mtAA5t9K38C;NMVjf}q_E{MV>{)7Veidjr}{KJ(oX{=aIBn-@x8 zp|tC##<(FoY#bbaW6d9Y@H>gV0qX}d`xiCF4Tkm?$Zsm+=H-I+IpBX&*-tWl1KSVY z`)^|7;bObtEVx0OY@FPnzlQcZW`6_Kzwhw5fgEgH(D~LcLjobtKF9gjuzu@gKc@*d zu>Jd9pPQ4HjSI@Ve_`VSvvGm`vw!_Q>9_&w-*@|55D*(T2=W^&4jwjc;D7e7-=`}# zVEwJz|EsZ@1HcKmGRcpznwy6W$N>a!^6;`jiNjCraDpIgJlB2w$LP;~HTbiO2neuW zee>)h*P#n`RrdQT(pLwgg^P;=A3M9dyE~huvk9BMlR3NTkH~~GyOE8}9q63qH^kTc z<1gLre@D#84IP1?WQ!9BVgvE=05~BWY(P$E$pdEN;l1)2|NlU~>0rbGKWBXGnp)a` zYe-OP1%?`r0|c;hwXwNLt-v?G|36jbW&=a3fZxKhZSC9X$jkI1M9UN26&M^Y41GJMk$^lmm3D6#WG9qX#+Sdi z7p}z|p;gM3s8za5^xS>--Ms%Ya!lEhY{Xd;k<=|_G!w%7!L!nu%2F-$}M*_>ssuXGT{u>U6GtJH>#F9h~y?R&dR8_m>*ASQ+C* zJqp!|o`v;2TNAs}11Sr0SmC?ayvMPF-<)XnF)sMRGNzZMO~)`F&Ui*LcD7vL|$KDDzqZ2c5EYt{Gf^oPBAE~{IjD8 z-L5hFAhPPCxjx(`&qY{G!1yifa52&oMsW{}0vtJg$SZ8S`)KErIKxF)WuK98$R=Ve zveYEvdx3YW^yRJV)mMpVw3%OgWE39;&u^IzlV-@(FqKU8CMNVy;07;lo^SLWuw%xB z5&2CaD@~-mC4MDe(b`0f`kEnqT1+JnFU&@#OQj7ZF{{h8G?Ui5f1?wb!T2cE?GauR zPFH>#RJ0fq4}kHg(Xg1F?kjC5 zh**x$-=9nrwR!dU<@2gn$2@amtt&}ougnq%x`POuG}0qwTVhv+?^Mw!+#;kjz6-Pv z4B#Va@MqRw5AgX)V|1yY9AnMsjP*2K{VhAraba`%G@j2Fhp+wHPtfioi(5{J+T0mw z8QmmO`TAb;8J2BPVbgf*2CRm9dM?|@D)eLBk861dQw{-+Y0kRO z;ooWDK7E?Rct9}ai*s@m+HaHZdKkl5KDpYkMen{dt2aUFTwi6RXPArW8H3wEgc>3e zxK;uaqqES{HR0kwE(%lnqT!LPcCgnh28^|8cG`#dyn>ergJ!hS>qsU|qhbegtd-jz zoxZ-+e&D7Rm7W4*Tl*j~T9e2}s}oE!Iznyyf-S7x=M0Q%Z%^()t=l-pd2r8d!=>e2 z%FN%G3G6bvjXGNH3gn<;mu^!-mymp)H}a`O`yhw~ht} zybL>dlP{~Fxw!lfUoljbFivwbmklm9B}OUF->>D%NHhg* z)|+ll?k`YseC{_ce8D{wP0OAcwO$tRSmuEQ>9~ec!5JEwVQ);1njV7`!`!B8&E#i^ zaZAn52XgCjPvg{&Uf3}9iqE8AJ(Q|$?CqPo*h$}!q7xv`-yIWK?HsYoTzIYSX1&kR zvJ30*c-#~@^qd-87DR&E34;~T*O#HH!O>6kLU~6hT*=^qoA~gvQ4vQ|6E=LR`ZVh| zm%N_q5TH(DpVEkoh<$3`4U1){(I{xv$hgP6W>ncP7 z{vJNLImlf9@_(cx+|WP=2NWcToAdh|9y&<|UR?vBROM>s_kU+3&Sp+-me61lyYr9r zncwrMt9JZfL0_>3Xp9NO0cL}6T+LT`*dS0o1%eV~-s{=d|A5*V%KdCCon4%Nu|HcQ zOB-7wyX(7_b`R`-PXKxUz^1PIfC}KBuqn=)ZH97_-&g(5Y>M*_Ozf}f@<6!RxH$jJ zrZ{i1?7w+04+z8tfkwRk$ceaaGMK-q3j}ksL6>L#RP_&3?5`jLfzTigbiwYAb-Dk6 zs<^MZ0Wajwb^n2?xH-80vhMZQ`LkQzpn$(<-%UFB&nVzcE&QZ_5D4%eQ$S+tsHwVL zuSdZ#XG$czMGtjEg>3aDQUHP*^^B8?N`rW|l?-vO?wM7d9HxE7F!M5D2%TCd>T}@r z?(>T8t*JCUS~f>*BPufY^{y;7x5QnRNa#~f(Mn$4ttd3V|N2Sgo79r}iBJoOL5_5+ zID5yYcT9rxfuzqfw~PI?(kg+cDHR7jaTCBR<8LhxK!8g&$9Znsg&TrNnYbf#D z?9QSD`JoEO5=Lv|pfPhpJG(PZh{i-lJ+(^=C?x} zsuCoM+!LiiI(;sP#x89@mGt09g}(NPVXS}F6Ix&@A2D)X9$fxV$p>{UK+Vjz=<#wS zob6z-z+G8}lTOCwTa61F*bZu1KC;`hjzy#%2C?b-9HBkUmuC&`MxvI!M6~Ws@TVgs zIS_U-fR~um+oEIl`yy2zUAPQ$#1o~GIPOO@nldpSBqMhjl~y@yz|wdwEeFXz=3pnYgXQyw|1oB#1J44_2Gics3Eo@gN_aLrwqSzc)g-6op}Q86dtq7Pa^MyX`sH#xnOt@_%jU<@c8 zdQ9_3KR6Mks@*(*GLB0mFcWuzm+SV^hhmdc4Ye)tLoH;fT)lEQ-qJeEQ;1u8?G|A( zy5Jf2n26rBa9E=b5ZT*=To zp)E=G{3mzt{pFt=$~Cb-lD~)u=6?n(K77CPPynINarZ^jt5Xh9GE924`yWL)4V52h zxadBgh;vQlksoyYIP#(SWq?wns(^GEy?G>6m;KJUiCx%zCMI8ge zd0a;<9vJw?@wAR2FI!io1(pOVb-Cmp8A(w%eP-24%8i&SF|~=T}Wa5iozPCw$V&Dwr(*Zo)$a&k*qBy z)9f*lupmF0dATD&B)wuc%uFx8z*cL@?QvHCUND$?`wbYzk=2q8Us9=zu}Y;P_mud) z(cZ~?zO1qs<$^jMt6jjk$Gr1V@0?rgnr)c^wbJ2C)Sk>VN}uyC0=K7UR!NrjWSdD} zh*&&>sC_LlkAq=dE49>7qCkhkZIc|KS%?e4-OhM@$_oUz#?QI<7o`&&VQk~o0|IvgNU|Q(Q=5)&`(vc`yvFE$J-VhR zhkuFvZn#dSQap4Ld1xWsdJ65VBCUnxT>2zaPZ>M1j6i*lLW$$+L%4zfMs+ORmRk_o zm*{r%lC|78vJ~g1-6`Q;5Ky|RwN5jTIr0qXgU;%4GXYp?!>g<2XDD!K8;Tcoo-e^! zUw3Shk1sl^vji#B%H{@HTN^uC)8Ejz+>7Rs6FMKIQTUeNz9AH)02ps+)*blb8Y9>m z``Tw`^C>b}iCX6+QM8-Wg1-*!W!qZa+WD-0ANq!oYT4o_nf6hNK%{K37>()sLoJ-ziozK5b$#;n(UcY5UZy$Ra z6Fr>$I0BC?fya?NCpBaDjlSR+W#sF_vA>u-{5g#MhlN?*>rm6pg<0M!Zu5^9W`7G? zLc_|t5ghflT`ks zVqhqtzyAC02`weWdiGPGoyO+3;}lFUs*CK~qx4eTChCpvVc3XGAxmbnQgK;6cB$ML z+m3XPr(;+Hd7$7-lSeK3%zpT6!;fyhoe|71OZjm?zmYk7!s>PRf_KeKZ#Ii=hY@E_ zr7;P^gpFR`UBrw9-V|T0%aQFAA8k`3;y2b8sZv^iq7&+_Sm8MaEW2e#VzL@>Ykb`8 z^}OP+gXik8kKOkfF=#1v4K4aUzTHEbkj~!3uC+C>s;9#WnqOa`kbOM#rgUP{bQFbo z3K`$itz2$DVuCvSS<#bG++5owM?&v*-xjULRQ7omjCZYTX=U=#1(r31$~vMlJ{HVy zV8&_-?YG5C_G31+6)EOgWeC!KUxp6_umgEmeJMMO7*Dxs=HH?tA4Od@mZTLQOjw&F zPpRXnODk8`zcJYWbW+ED#$8(ss7{IHQB*X=ysS)=u0lIXV=<$%rV`xb=`msH5mRgj@Z4*&y`iPYCyewC`a}W{DPGiEmi7rfs(Rflvik7Svz8IzB zMBI1)DrqJ6vuK%`p=`w=0@GUB?4x2ae>@P~BQJ#!7-Jx|M(b$Ey@0!CcJc4T$<*-c zRqPe8fSHenX$0<|ZK}KD1oIEp-V5v~Sl(Zu7A7KcfJI`~8?6e!!>UUiHJs2wW_4`^ zQ|)RB`8gX>izD+O@Se#m^&gy7n^O?4qP9wPG{Xq;6~GnvsPo!W$D}G{QN;!MtP;md zrfr246`OgQqu4Deml+N2RVYK6dLmBi3@a(A z`NbyaJ_t*%MbAe#Ghu_QS6{5b!|Ujsn`pTM;KfjoP%K55>QLop(zbJ9O0`25a`|jp zA^z1{jK0VVa)AK#EQ#DFF?4t;uj1cVl?H8|WD0-tK0$8P1sY^)?9E)3)mnM57sJP; z*(Gl|%qm%VZZO_TZkr`ZHhE>TVp7f=+foHj=^RklVVnY{={W2gJu?})r;s_;+}x0N zD4*~C0w^1p#zE+X$EK+)V7~3w$JuSBeE-@`>S-o${aF5>=uV zbfcs_oL)X~+DD@wc`0LBoX5sdEbf8{b6kCFj{0Iejak`DUJ66WRca zWf#+u3qs5L$f`{gcd9VI^~#;b(?je2_`IW0d4Z(qq&VWvCZ z&o9SjiM<;RGCGj-4^620rdD_xw1_?xrgG6nDy_-ve)i(9F7V&;km!^as!_#wNuWn8X(P^f{s8{~(h=P79 zU`2T#PHj@5ga&9v=GzkKZQc8Wh}ETJ)lmy72N2<0mqez(x)kqX`a$0Qvi%h80#OzpF*B8l;d1fWkfJ4No_alZdJ*7ClvGxiAmav9pLbi$S2u)Ug=iXPMtj_+ zrzS~|?U!DplsX|O8LvVa{5B4Hge7(xC2#8PhnRUa$+^=>c_fs#Q}7re&M?OP##^TH zvntz1$Y);(F(7@vSuM{h6$P0wIcYGXI(fiHLp zN^4W#)$?EOJOp+~Xl;blNl>t&4|ZF|MS8G}4O}3ts6Ko27rf=qNil!mE!P9>@1veq zB;x-V7ZIVAP9R&;|6r_dL+{|0 z$;7wib^BxQO7{qsNSZFM54}X|;SwE8tQc?C3ziPq=1A=zMmo|4Y+*y)66_Cih45~J zXPjsrzc&+GIo_v@3?jz(T(WfNm0f_DuZOQV+#)2O>W5~Im;1g_A;UVbn zCV=ZfuvTpAj9&jfZ#{iCkxe68Y=)xjDm8wIRZ@P}Fyiqh(z*y?qYdplm&TR&huF&F zDB}6JlqC$iyX2LL);;Ga8$Orn!b`89pi4+vJ7{ z3arAq!)q<>EKh}aJeFesj!nh`JEJLL7$lqym?EFy7d6E~S6(mbd=M)f)INE^q@vgTs^-GURbcR)%vpDGQhS^O6%5$ zjLD(q_IAXvXS1RymEiM9kHGERr%^d+6^{CX+zAuO5=4Q~8XB{osk6)@NwYuoldO!_ zyJJ}zs`6-OqrMLA%s_cShLp>i?C8T`!rLd5+)}yV0U+RiJ5oqF*-uGRr9LUAm4>Wp zoBG(+-D(J6&23g>e2$^hI8q@}$|09~TQ=BJy2pfoGeQNe z0UE(d<#$??{cRup0Up9x(|ghKF0bv>&%J5l1^n?b6oN&KFDLnX68F9jUvsgc>+PKIi-%s zw}OXAgAC5I=McZ#{lpm(Kx)^X{`wQ! z+wh*@ofgxCvV%iLDPJA89Qd)@En4rVYltGxpG#^E&?e9kQa-UWZ$Km}4H(<1U5(_! zed&3c8nV1++TkY_hd0$iKzO^7i;_z3?0$Yty!adpLJhNJY(m5bx=heJNgfja4p@SC z81#Y03EW9DX77ZK*B)yZolt8vGRb{hJ9jCmMpgaaIdCx{QG4yV9E zD(+~w=9%03^2|UrXevY&0Tvz7rB>z=&ZS1CKZ1h}m0kqik;7@KL7Gn^Jr2!+wy{dbB;ox_Ef*s@%yJxuo`(eA@I>aU9U-&Wn!H+bUW?ZoO5hL6o+)SD2Jo`M5_)Q{>#QXFg*cg`H=(_$7VfPP z${nZrQ5+G75w5H)e`Y3!m8h~Ve7HX6J2E*x4|XAyg51edny)V|iKfFjQiqD8IPWHW zl1RSrxzrPxnEU9Ce}5iRjT0=k-eK}Om)#N>M%{F>6FGSsl~S7prZyZTyt^r&!Tqr1 z;q42v$JQ)U7e-E|1rraugOxZ~&e``0IMcVLGeAg!aT2Skp@<3UulhX$g0;bQ{sYSR zK1Mk^UgbvaUPWz}L4HVQX!5z;l~#=R*)H~&5Kqt_n{F7z&}LjL4A)BRyqKgv@a88- zw`OP!axL6=lq5UklJvjd9F2#E@0iELZyih^*pH(RCK7@^^mq}zlm?YFT)+w31SktBOD zM|owieeF7a-rhc1I{Z>2NP=Q{#&}hN1l#29;hxRy4(TOUtL+%UcE=@Ot#3ze{azSc z{S&S<-5;^>(krrFl&X`8sEjg~1j^X*O}uxLka>9s0Ct(_@MpaWzSZ|JidVJYT&Kut z{PD*pQwdfXyipor>^MtnepX8i&mb-+pDZER$_4Rbfq8(oX#y(ObZzGo)|;}HLm zJfh9+Vg|#+2N-sm=m)V&IK_x4+N7YuBVG}HDupg2(iRG(D$WNOu0imDGnSLAeJlFW z0kKhq6_w8ngbc;{G>bmT%OXyLJfn(c_g;Rb^sb+BITxW6LBXZPKGl}B71x>IP)aI; zwuwj{3AD|~D;ZYfZHF*1F#{R*lE909T5NmAUu^eLM`luMavGJ|eJe6W;zGv~Y3X-v zVgi0H(z1>4Eu`k~Yy;H>oM-y=d)xU%qhiR8Pf*B4MT$e^!AxGYC7*N$*IP$`b(6zM zoEDJCgp+B8R55QMZLB00`qb2XhR-{f>R&^hOr%rI?T!3+_eeGFS)BTy_L7eMp$Fb$u7iF^KL=0hmv8{~&BPAK&bnM52& z1}H=3LgCcJtNoo+7+W}Ut2-VR&nn5sbz1RInv5^84)~LOGN)fnyS?13dTGgH2zsE} zja>}>f=)n2uJTHFO)q^TJ1|t^ElfanZuHxRFQ}2{4F~OSqB3!#(ET z3^)_x8XHayv#8x*2lIjlOacZrS$Mu?$s=I%W4dlMoBWw#&&@i-oHTg z7ry)E4Dqjh_w{u1W&j?VRsTQuZuVb0qafe2MsMcrT;KZXlfS?I$9{zWo=VIGO}gcU zCO>oYTx~djmb}oN#?TxQZV)sT=6a*j|BwRnhwSGc`8v>K=-+3)a6)Ijzs-fO#-Hm+ z{Xa^50p84l_*2#IiwIX6t^T+O!1Etp`J*1!)sBKc=bv1g>ZgAHDgf|5r}J_`w}xG7 z08NJrii``I4a@^o%0D@{p}V244jyO%*RKOw7Xr<60Yj5)pjp({<->-m2C_? zxS>&xt9M+TUp)ui%JKc#tLvZ7L1pk<<6Tv|YRk`8U0weGcfBj{>bEO+SNE@;x#|~x^?&s{Cp3%a%05@;K#t#RbOrlb zpV0E^x2xkC9`p@ApZ{O&dWGfc;DO5cd0gRyK)3q;RQpexT(#k<%~$uYj%y51m0dpv z{f+m>`PKE$=dS8ronPDeN4;P6hhAUZzmoG)Z$M}^;7_w&n-gl{^R^g zH$TkvtNe-ax{X)e1bSTK`*D6H8+fH}==D{}bG^I%$}&ISboIn_Py8wR>WA+)pzXT4 zxN7%JTVBh&vNaEMXXdYN^XEVubTDAvq zSmbjzQ%ak9#`>yt8oY(oIz2sY_JY(M1^c*3e?r#6G%(u|lg+EO8kMv25wkmw^mr7TLwXnnd zTINixq!JE+m)9*J-)NWD^?w7ynh6mmvp_O5fiK(J*#RiQy(1%QOf6w8(S-%xF4V3% zIKa59`bGf9ad@gYAe9$Uoh#_Kw$Mh7;^a^TKiTj|_*?0%Q9oh7A_5#kBTP8Bck%JA zruexqK$Y;@Fn2Nq2PY5^l-#%xwNhXgOZxnd*o3wHf&;l>4x->&dRu2cotA#oO}tws zt_wpCLnM`%bSQOua2R9d>+=ZMITV+gN;k)ouSl8=Ff3{E8+t+y=GI`!YQXTXlP)FZ z+U!2>fT^U+L!(d{uxF7ID*_{mB9bbrUog+TD6FVk6!NIoPO7`OKh=KPhUrlD^)b+$ z!}+Wzx7ml1gHm7PmbDj=AM@bwVX1bWu;1(I2%7ir)?XYUC%&jWoCSW;E#73k?DB)1 z!>9r}f{-=!cRx!En`C@?7Ob)evTbVIBvVMBEnhjT{M z%#+!dy$9R3PG$kS%@T9I5pOPi=P!yRFE{ZnFK3p0gP*y;`{T=R+$Ef&w8xlRfM%d0 zd%xj^@oX``ews3UnP6;ej=6X0OLuNvMYuz0BS9{_bh#Gi$a6v*_PFs&C<}`m%O!_) z!#!;;xW0rEy}n`?Li)@o&vV%u^1&9Iv|M`t}9n?Cf@d^L4xD^24ET`sIu#VDOejNLkH>VF!_M+_R)D?T9#j zfjh6pW_!>eWNVs}nfhutN}GcV8H7!J`_o@@>EmBICLfpdS+Bm^bya+3=UYWYDn1+U&s}%!&wn^4Kb#wXzoRrj;4(`A>!ZLTK$n3U zX|RWC8C&$cd|y6rg7hGc|2a)!M`Fs0R~yO1s&711y+Q&cM(NXh>GxrL5EV_eSknl<%R}4M}peq7bkpo7z&=Xw$f3Th16jTIjt}}t(!Spq1PxVD-Yxk(qbc2 zSkku8I_jQOPqu&7NIVg?|6ea&KqYQ4!16M&P!l`AkTe7709$ zZQ$9T<-+wwgB@NkG8%#;NZqts(+P6kD)DxL2BRIw4B$xcMX8U?(!rwCg+|E zPZxC(^BbDxFzL78G{@>}p2uNDDDIpe3C0CjM;u8F=(rmq+1GP|cjXN#=B;X2>T+=4 z>1&#~BZx3jN6je=B(y&S-)_`8c*4b>ryeR3E%K#LrOC+r0ey$poiPBR*#5{2#HQAf-_rV@63^RP7 zkJDqQrFyV}>?tl-=^HHYOa%D?u#=L#eu%c~MKk;X-`-i<7OheQJB{7%ewZegCL=>) z^B68sqx2|lvO0Wni!V!MT>+bzW_(W`HUynEf;wtk_ufjkhFg~P&9e4)+Bm{D!EH|^_pE7J9Hvmw6;Ok1N`JmPmc%>b`IL5n(V zU{bk-{3)sYl>$3qW_=C`qK(xg!OPFJkLl=KMj@J2Se_{>o0+RsUZ@;arlDko0tNU5 zUCRD}18JG77MG7_C(T)=Lr)gMzEt4NLGmc%*{F}ZEy(CEY7jb9*D&b~v01TRHW%Vz zQ&_mQigtLAV(ilyH?i+`64E%pSsVh|-9XGTPcn-Q6z@*tX@oQ?Uu3r!=?4Np5uVc1 zsaacjxFohc@<|HL`>&}la)`G=2*nzPo*qeJk{7eN=!YmavoGVzy z>1~S5$$!m*+sp_YHPH{H^%p?lTd_lDLVFUZXlP8dToJ(KeN@CGzhRV{(!X|)Nn(6A zkXc*%DQ13Jm4Y|oWmr}=-%u-si5YLNYw^8rpN-Xq(gv6@_F!ATcyDl(^kr=(ktKT2 z*`hQEsX{uwu_zvwKC4S37`RoDL!$*^H*SkJ#B*vPeLIar@9Y*U=b#tT#0b_1}@ z`*8e`f0<>me))y|lQ;8B=aMCUVT14A)f|&vN)KUle+gyqmR}*PtRtvy5n8ns;(lmg zafVs0k28?^Bq{pv+imqK?a`?~jN2@?s8cZL^xZ`vVO!0P?(?)yKdyaQ*Pm>w;aaBG zbQDP_FPE0qkZEU=$O%vS5)nBaqRy7NSygnhsVujp%Uz9J7T*1`H=3jQC~IL&=V4Cy zzBcI!Xi*rOThOUT--;_pyGO|W$VQI#OJA(y`W%@PfNA~()l9~)d)0k2$*R@}s%Q~> zEQEQ!9q(ozadlP{{|CVhjI!?>ZR&#A1@7Q8U_EqyrrK61)b|ndA;$dc)a8;W1=CZX zMpzGpRm&!ED+d1!IsU3f^LX=w4y37)w3PhUaQHL45v*#8oD&wfHD&mt5&a zPeL*9$Xi7(BuW}qg!p?RZ(9w$u$}Ia%~eWVeDOx$q`w0aK|tW!ewW=J^_|VMLqJ^G z!1U_o(ffNNEzje+zJ=}IP7k*QVL$4eSiw*|k&qC!<8W`8fC$PPmG%%hEVez_9+#F$ z;7)3vU7ZjPeOVZv$I8EzYun*aQ@t;^eYeHwi(hwQP=u=_6MMv`$79|fsPZu1 z&YsK7!{W|ow6)Nfyb)rK$!k}BoW0gN(@HM=nY2YlnlY7Kdd7pC&73gdwa=*OQPD2H zgA?RL&``>Q#&6cejZ|zhyS$~CfO$tJ%UeRhRuUoWvmz?<{8WrcZl|W|Nyo^jHMKco zBEq{6SFiUrIMM!@x)XbyyQ!2fD3Cvu=bwm-Y}k(U@43>qbjya~IRoyg^3T4M=*+M^ zV*TXn9ilD*zp1`~z8g>l$WCxwnSv!`N+^mr!^-StP9*bb! z3%MFEqWo}Qi|!{3`7(aF@M7lf$al7^M@5s>Fw`}q%DUg%8f0`e`RFQdbcEfPYl+jW zVyH48d250{RK?QBfLlHS>-k>(IhpIae7B} zOJvjx>sk2}pX9;(+>CwPSN4qxh&n1lGNTNwN``boFXi6SCt`7Ag!QY@Ezj%f5l_kH z6({PbGOB)f%{A)eH~J!|vGfiF0`YTP6aBJsgikh~ycRsew!hT{3PrJ`V42OAKGUs3 zod?S8wcFNIUBvH_Vmtv2~QcDO!U5MA3O;aaNIYk)lS%Mm~F>KDdp6#(do8%5|S- z=W|LpPPGzAiaEg(!~|T5J6@A2$Q*u)?p2|-ZeAi)IPG~TR(|hw1BT$NPvIFeNAuYl zcINJ7T1mgf!E|sUTvt@psxF2jJl-lFY;CWJ(y}o@VCwHpu(SzbTOBV}H#$4aRxMgm z8NHR6!n1=Zq)b(j&LzYA(e1;R=ko+d;wh`SgzQ z%7>KoqQN37CVCC4tOqLd$2~zsH&31GVG`BtPn$K50M;k!<-E{?*Jnqd16L;)zwhQ; z_X#%)9)UEQKuiparck%gvV?We@K+OKvkO6K90wogEx)~dgxFYIVU{Y@)!`ZCN4^rC z4-0x2omXIPMxGee7KtjB&*-krQWe`=hGSLnyckg{_m09VPd!^aocPc~0Af96V&Hqs zdD&$2A^tSG{CkE;UmTJ02u7-eA4#_aRb+lJmbnu$?8whVwRzr;ZmXTO0QW^~4=;EC zyT$lCz*2!BKv81K!a-*Zeb2eem=Mo#t|z3Vc{26Zsij(tD>Dj$U5u^HlV`;6?8yf2 z$+`w{ePzXv@W>cZUeVLkj{+vsn?DV@jfp$0#mlATL(+{66OV()6C?I>jI*QH@KAS; zP0wl9ap~mX3y^Oa9w@w8X@;)QRa@~SmySd)#$djtI~OcK>F4D4dnB8zuP?{%Rp$~H z*Oi}d%Ti20JGy*w9zqcQWwEX~i-aofG~2V8s0h1kFTgVO*#iBVhp%g9my0z8{p`kc zJK_N61urj!_$eJXUh*@TJyYajL<4Vf5#1f3Q^v z`Q+u>#ZTY5tm83p!0|>5pKhdxUgyDf0C#mqS5xWs06c~>PT*}{gPiy_79!d-gM(jdr>R(L8{;b2(V~0@n#;SoJc-u(=wpr%{O#o#s^(Nt+z4xUfi3X z(W>uAH3TcKL~)uBQH?#%Z~h3wDuLqd`pCCtIz~`J)+Tpn<$xJ5e=gFiuYD^#{*VsTRF|m6a9sP=-ghYB@g=J^gGW^Gba|)q6&3+1 zk2;Z8-xu`4Vhs56 z+|gyCbcAz%yu8`iFHlD@Mlbd{|I@d16B8o54^xe37R?=82uHIP0t2wwCrO1k&kI$K z51Ey5kNSWKr;)5%)HOZnAnM~cvLRjh`hb>g35_FTe)zA}^T+(sw<9USP@bNe1P)U< z$v1W@X%Q`@9d6!*?`Io+*= z^kIN>jQjzRAFOCn+*FRtco%zHx%^(VV7qo}i$#gbdxI|yai@(eUg;0Fcj`^?l{Oc; zv3egB$0)Cl1$2&NytYC>4Vv1495|P}BP z0wXz2*F4!pT^JxF{{r|pLxs0XO1`j`u8=9`%K~{sppPTmut3Awf{T$a6YK}3|BtYD z3JxV`+je8ywr$(aif!ArovhflZQHh;tk~9{_j~_cU+vll`($dm20cAB2h&~8bzcRl zFKxYVUM)^V+FvfdmCLy_-%uHMceiG-E$T)U5tM!uV8g(dhz-YV^C>S1_*CX`fcTONtPW$eF}8%Q#+A z%&Usck_GWPy}pWJ$EQR+Dz`AVH_8jhxnSrU9$Q4tnwLowu(gEG+X??RIu3|j7ZLJl zwjPDneCm_!U(d3w;@i_l@B*eD_wGays3f5pg+3<%sJxKZMCzxRM{OaliWqkWDx$`W zsH3&JD?W|I41Xa-Pw3?-Lk{uXRTVjG(Revuebm=OE%q63gv3xvu{3){ZyG)c`o!24 z7tWt><$b;T*F4k}eNThhLcH-RCd(ER`MsZtF8+b7DOsjA$qZ~V9>a*!=Cq2FZN_|P z)t}0HI^869i5~q|!wPwgpE8}N7J#r@ptZHK%kEP*Ql;HwISjcVe?;@VBT>8W@_^aD zbPaU0Y5Qd$AC{t$rc$WVa=UY59Cv}y1+cCDa4{r>XJ&t>$U_X%N#Z_#&aQZ;vl)xYmUA(+M;pCNCRV1%esrUu_U! zw}y~L5G37cWkG3mzGsg^RxIOpl{P(t@uv&Rt~P@>LxLs{Veq6V8zo3B5!^6_oNY<~ zuwDI?XSs8|-A7squ7fmV@9C$Nc!P)Q)6)*q0Y2#LX?5aJhLP-`u<{UtK3A#%foQne zVrW*M3}MOjt@IwMeV{{qrkgMUd`4m~$NW*H{!_=e>4jhnhc#cGzBzCndN9^w zuvrz-RHTVSvX>6V9Yd<^VqTNNaKc{JLo6ZF0yf3=$8q{@vB>&JqHlSA47)h_w{q~G&++2 zW~RrFgwTX5pJ|J!HTICbu(8mtEe#J)o!mn;itYFkSbJQ%<_0>$4tkfy+vIb}!@w>> z{<-UMIV3!gb_Fx6P0&-SgfJA^8uD=t^!d{|~GM%Bze|~(Rn9aOP3=-h(9Yuc< zL`d&6fLp#Z%ad#8HkwqhlOWQ>B#yoQc6>KP1Z)u`!h@ z0gOJNO*J#7z1WRkfE!2&hK~NQo924x&*xHexvmrCD7Gf(MEG)t2XH;Uuj(t+j3AE0^zIL zmM=7yD`gRvTH3|zFA3zNbU$c2#0wAqW_NnY95&S>@st5R8s+iGkbV(M8am&`RSt9Z z&V@99w1gp8L&mm49KZ{OO3nT8;1?duSW$^KC74dLLJ2LHqs9K`WFW~1rn#+l=sK0a0?fcF+pd~;Zg zgXw#&+b`#9YMbLDWC{mc{-V)7MT=WxXm|eDm*jFt@jIaWIP*_kqcsgDajKkVjmFaU zL5p!G2~5kO{2%T&G^>qh@(Y+&EG3DLrJ|xx19uEtZSu#D0)(Kq2nBGuRmAu>YW)hB zCHLi85g{-$b*g8I2g8MW%P}M^29Q{m%kRd7eWA)@D4jxCz8~w zq5b5hvN&k|ZB8kM14GhtP@JT7=3*g6-OoD}pOmXZv&y#5SkW5)C3=!1ec1)iDwELS!^44D1sx{spR z$X*ya;)ROg&%9m7R%T@iy#MB@Pa)$sEwm?|&5x0d@`2-0!Y6b2IG!$Eu)V-`T>nW9 z7TA$&Z-bc1CDII_2hHT0hpnq^nC2*Zp8zv6*`=t zQNsm-uJ>FrrPoJ)fS$}jhC+AyyB0x)X(CTqs^q52{C5}Wrme;791lw^^-aaqlnI>i z9GJWem7dDnHM`x8(7y65ql%X$DJc7!2M*PIq0tCIqw*$6C|P#E_DA$a5&IQ#ZFp|q8W1brq)*cH1LYiE79>w!es zaD6O0VSYC{nLzHlsvCyXg<%=2m01-+&IsEJ9=34xeeE=7AsxFJ?{2y}bDP|gpWP>; zd>VMlN_~k$`x?J#XQ3_h0;k5Psd&lI3=UPtT`6unG9Xf%NFQ*haeIUG(}u6=I=aw` z3P&-mOnDTDE>*Uo0;I`uf=j+}Dj@s?1zt~$YACoIz4+Vl6vb7);xSVQDsc?6%MBm- zLAwMZ1AA0X&Xwy3(+KT`>+m~CYKy$yj;WWQ&WKl#374#;Y-D1;>L8Py8TRDZc>I&Z zWqm$b*{%z~A+(m)w*m%Y%rhx|?Lz{tngj>Yy>CUQ(|j#RkKzrFjPtE6P|0Fnx}k4m zUTUcEjndD+?@TFGavY$E;B04xpHJ7t&5}p?-J8Fxbb;DOr_k1@?z2T5d9_w^Ug6Kb zp?`aqJH()jq>cDv@BEXC`-T^ayv_XX2g7r30;3S!+7{}{3seUQwZqX_xp2;3 z6$Tob@uA#`-^B!Qdhf7|6|Jx0rBskL`byU{#?6F8u?FckLUp(mW;MRVE6bPxD<>+7 z%<*kev0HiD?rH5&sKsbNMyrtXQspcMgUv@1$(~3?jmoM9+1z;c$`Hy0^CwMCf-%zO zD!cP{csB>tLFK`4U^715SF6D@@*B>(QAu~KP$RdB$Y4Ly00g`Tr8tX)p{Rbp3t%#x zy{EC7wTZix(}EG-O3k=zfw=kh^J=LsgW=olPbX1D11c#lCc@-R!`IEKk904`=_YXb z>xiK2H1I^k?`0f#r7mtRz@mhV8917#Aw2*mXAxC8k(~j&%u&K+-hO0W!Gwaj-U%v+ zmQ^|Z=BEgQ^3`n0Ei6v=w%%9PC89lwc1*xqHim}V@4gH{vJJTZJ~J&rr8eqYJ|VBR zwGjE5Qeo7S>uaHAVlk#!b>}~$x^WKA+U9O~yJm~z>^cHBo@R46G-JU@UImG4<$OCP zxq$;j3k6{d`6Pzy>%>R-zc5yQSB5x;-q2F=0jGjB*L+7y}x=oOc{TVtB z%`h;iqc+TaQjN2_FlYNkgA<5?+2oAkzFvPbLo9=6#XA{or6L00b9u*{;iOvs0<~(n z?vz`{P-h*D2=C6tW>m*M&O*D^A|&PrOLyESMBJ)AFGuSkhlA_w zUw(dP*5WzI$wUvze1y`r(H}2)mZPG;(m`NA1{EC#SKi$>*Kn{l6q(CY!&;z=K0~DA zP%a5v-RoZf^*-Q}%8Sdv&eKT7BX9XC+|(SiBE5LqHjyc%dgzK=F3JH_&asPW@2t#( z-3cSDH(@5v(x|lYe%crwpAg1cifJg+A+$m6xVv+Ep^NppbuExoSxAf)zQ_n0dB=NF zb$8I;`(tJlIpYkhm@KU&Sk2qid!yRy217L$F_RPdT!!R*m?t|4^bNc3?aEEz%>q#W zT{j)eO5Hs!{{l+u2RS~>#Tugf=bF8kP)JD^OpX~|h)pdkbSRyM09U6Vll1I7<7aj# zPfDDR6X1KjoCx4UjWnYnZ;giP^xKrtQ7{9({wihSdcem_=VdOHcXVyl8>+e7ytO6u zAVzPy+Ea7Ff%D_o^!Pwd02XFj5CNG7?h|vXelZb3ZK$HodI%fOx~T|HD+r{t60B72 z&SBN!yECDw5q=IsgXJ{)})r5EV3L z?hdmCiH>ZtaWzGahR|g=JP3yij*7++Stc%69WU|#nbLd_nO%NRwU*Q?B*lCv0m~s; zY+oY@gFFT|e5fp5oB|BcQ6)!4 zxCMt7ue#HhTo#fCp}p`HY^<>?nrN^4J4_`mw)Kfez)OuMm1sso;6f^?TX$)g%Mzyi zMO{tt{N6pZNqSeRTSIO;5!`ywhMozZ$R(DO2*fuLT+jqIfjVj-vhJCoOOJar7?dni zMnU|qM6Enf(YC}@@bsluk;5$q3M4mjNK!C#;UAu|==BI{5U>+{lMy9c4&CAW{Rnb_0 z5bD10&i5a}HTwXe(Vm_nt$`WLK>33lKVN@Jj9sLgCAJltxsxr}7Mp9mzD$$p z^*6!N@zmviSHZW!F$yTTQK-fHs&CMRUfCJgxtB{Fr;L`})U(_9=j4Pi@G>U~J9hX_ zr)?fWluQ>U&a=Vi2&gl69&c%!Fv-Qz#Tg3b16oIH=LYt=t`g9rDik8tY#-buqexA! zvEGR{l8xk0X%$KR;MCBvQ*!{xLikxk=WY6lUq!dW^XxzbS?(u=xUIIW0jg01qLyQ% z$CcltVwM<4T2fIchnIQ!&G&jstSh?aT@wSlLH4;sAIWz9h89m9 zrI3(PWTN4{Rz)JDuX;jYm1J`d<59TOr<>FD|1^!Yd+H$wMjMQwYLWyRJDEZp%Z*$K z>_WwjlVy|=JG zY^(kDAI7MJCC0cCYwpUuNwDinKz?|?S`w!x^~!WzO!%s%lc?y(r7_?U3e5mK%h86O zIeGK4T!@Zq7&VuIY8IqiNO4AW50hlshY6rvqij)d2s}EWkPX_Q;|PS#w=YLeM<~vi998-x&lEV|c97 zf_qZQiNIEY0GDDK1QjjKV|sJBS8~hGro%-(fuu0WdYdb??xM=OLtL0QNmP^_V4>Up zXeC7~)jNps;e<%sL~g3RVzNY{lrTxm3BtBsfOov_aoeB(qG!zYt8o(*xW?ML@Vv?o znx{MKuWtRF_%Vf4gZKqHs0|KH^VJLN<4vRHkc@shdtffVhCh;jA=FF)HJ=q4MWsXQ%jYKu2 z%13NVWH{^_wBe80#A=6(LHWn6u8ByKF2x-(^AB}peZL|e8?UuNGMTu$+1RAn@|FR^ zRzoGuvM^QtTJIsO_$DteEyxc}0z0t3^y+3fPP2PLHKi}lM+0#bTS9f8 zlNJd0bYn!fzi54y)ZBFr7hhxtzTbBSdh^YtG+F(PQa?oF+&-=B5xz+$9r2TaJF4F? z1Ov%-mAkw6zZ>etu7xrNTBFSlR(exA^Rc zlrtlb!u9+4Fwjo+rw~BGf_jZs2`RCz<6Ow1V({_q0EgBl%g`?dogD_g52s!*AG|HM zc+&Or(ABJ+M3IA)`7}tk3L{0AJv`VtwY#{IRp&EWZM#gnM%H75DHM1=LH@VdRJ&59$EE4eiT2o|ZTxd9SO39(QN6OJkY~M?4S=hj-O$#| z(@tzo<}f#5xTZx%^Px;pqTP8_11|Dh9@U@&wRVRCUrP zW8iE8*iaz8tgw4rVIN2FEL!LXj(Xzgn1h*{_qD;yrdys^S&MfRcn@$-@d{{KU zpf=AZk>a)FBV5BbQTCAnkE@buwTzHxjv(48%>L5xwNu)2!FxK8VO9DP4s^p$oe>VW za>0_g!elG0+zdQBZf37|TMqD(o-b033h+;ht9CdY=t6fG0P5;@{SwBhRN%pU+x%&D z3ld+RCKwPwru&{7Vjx$k+H3m49JIQuGwXn$EALuwMmj zQI}R$x9dn&omb6%MsE1FN*Y(OPnciwE++H<4wsm6{hi5H#X$TKWL4J@!D+&Q(9!B|hz*m@egMieZ= zTJ)k|;e{c$G*rVSWn0r9La9@^XLIeGZ~#m!(fE>hk&K#YP0mzEkI6oe>OqFfSGsYU zyjEqTtkSK2>YxbzOnj>4Xj5Xz2ql=8W)I#Fg7))dRs9m-J%N|^) zu_<7`L*M$OJ>1^`!xyT`%R$sQ9N)Sr>hilt_1&eeY$IUe4pZySDe{&2xsCir*lSz~ zvy)?0=gp?IPBafbNgO%23%K(4mi(-CwQmZri_|yXzd27o0MSW>BL833jPW<8_DuW%)jKt|6moIZ2u8j2|5}5N72Q``HMja8`w*jSeTjr z-{yb%{Le93CI(I@dP!#kYYQVmTQh5u{~!}e&L%dhzlw_AUG@Ka5epmR?>)>79RK4w zpr99`7p51X7yH#`Nz=>yiZqnzHRuiKjp&W(P3Zrp7kX0*R}*^EUzZrY8NE5Z1-%u$ zHN7ppt%a=#y&b*X@7A8)-o(+u&Y0ej{x=`m#MQ)>-pRt9-kILn+|k5@-r3EL-i6+c z-ksiq^1lQ9bq$*Qj_$wdcmEq}$N1~4_}{nsUn2QGR0#9$)Bm^iONDSSuyXuA&Hon_ z^2?q4H-`7OkN+Q+VO6V9lF4=pDOStXTD-w#i;eMGi%lk`X{gQSM4ip1`&+is%Z}xX z%2#;>erGc)_`3kUQ&qP_1WJ+xXv`Ii?9iokwgu)HMjL=58e1rxoRlk@qiYsZlN6aL zoqw;RDu$w>fjBa-88o*RBCr`UoqtCJqrlJ*MBfmI{?XABZ#K=8HK4H{zP4=D)uoM$b@q?YCq6e-W*R`&v@Adg+6ozf zfd{CpB&P#FNLv<_z}C>p(0m_O-kzbkjRDBtdIqL?7p8oWv<*(6svjQ!jP-Ratxu&4 z}lAnpNK2tJ2luk z<}WJ?YqO(!dC8xJuaLJ&7q+@O7a)$zHtrwf$vF^x>wRN8o4q^sXFUcl@hHFI{R3kI zt7kpTIRG5lDHxoXYT2x;?}5+Z?^5m`74kj5ik-flosC1i9oL_R_gNg8tZbPo*)x5N z^zRWC$8YS-sR6Xm?_7=eCe~(P2BuFf+e^bAd@eQQQ9su3gWUA|&&=R}`t0gv@V>Pn zlu+H7nKwHLfZ-p^N#~y%iElrFyC3AhpWL|*Kk;k7(|>*)LqDxAZ@t1%?dn>Sm}{T7 z{(d(YeY>Pa`p~bPW&lk7erPex0f#@cqkSU-8;5?UPrKF2vftU)KVUKo>w9)uAU4zA zih}~9w|4m>zT&Paa z#MGO968c}Q6GJPny=u3qHGaqP^z^l4)WmXMz3O#8Ov_QL{fpN4@?SKNmDsdza?>aC6^U?7)Y;6~Ac6 z57*bH9YaBjnCr+-bZkRoK=s|O#fN-9za=rc_-HT5j}_o&^*jH}PlgvVvKumS+A=9O z@wNWs;}p!P=G4}{B;wV#uGri@!pANwl_==N`Fwp>xclww?`Ml-YAG zxT11cVK>Ig5pOw}+M7GyP?8VmSf(-Vc-bY+~tmvM;UG4R3D)dIprONn35x-BpaCzKASp11McXw4LIy_Zkw|am5ThYx%0T&X0pYHKTW=WlHb)l6y}Mzs2I zScNG=ixE-ktv!F2DL_cT(3zTrkfTYLFgX4)p|CC&xSOqMoZG)jioPKffLMNwP9(a4 zMjAPDXZb+nxpxLsC@+AYH_W1%hk4KnSQuf%Z4u$)xMP5Tu+R#Z&lKho>?Td98@|1` z+Y2bNV>1R%l+sY2hN|@wzAa`NcK)^6Dyn^!Oy8{={7cGag9X`MKBJPDCg`- zW#70FqR8w;wEmpXe#ZeTRS z*A|uY!53ZN@T`974p}XVzRWcLFxN9I<})^P4T8o+`Q3?VsA{3u^6PoIeqR}tlDAHz ztYVwVb$iVh?Kf#Kc`nD5CXx7 zhoe=Gel=^Ve8hc|he|CGxEf8%l$>YFH5vv@=X@ZZo5O{vw@=E_oHu%;D3}DyZYQ+Q zTS1Gr%3fQakt4s8oQaV0wSyMCXzalC^Ms?CP&3-m21N+siQiMnh18k-oI%p!2AsXq zMm836g0=apjo@r;TDGp8jL#n9e=Z!Y`#g+UsfAPo73dKd3aM-z*8tYzLpisZ!k&bc!+cU{btk z8nziJlm}~CYSu~@#g3Z_KyLj|&)ymLwz9vl&w%vk9&yU$EBi985evE22%m|q=uvBV zOITv?BZ6qb*=d%(PEAwUgu-C)cT*RjaOIODKJXTJTbDW|TxU+*YLa6qt}}j?{kc8COGhaLR`O5=Gf^tP%fo)J_)dYE;CCv5^Ju#`aGmdqkuU z=GiYM8Sv*sqyexm4DQ|1Jw&WS$s@$UwM~?qKc2|9<=n%mEAtp+(VQT^lAFN!hwn5U zX7P19`~$oy?1Y7s3j|@JNe_^Fdd$5?`Gsbs^V-4w^>>KeH0hI$Zi%e2fyKWxihE>_~7Bg;#`lMLuITc+=LlfZI#h8&TDH8N&0gb?MeAoEK)Ezb5r%FF*vLJiN=AZW0J{pWujVHvg^+9nwZ}uA|SbmlP_otBjRU6J}JxsSycK`%^ zR1xa(ZnAN9GDR09GSsXX)tb#QV!Z797V%|Z&qWyUixe64ycLbE?sNn{m?O_$J;-FE zpc`wITPEy16lDHjmk>O)x3fT9QKjA@95E{&^Aj_WQuuSF`YE|(CN|tD=MD9`bF&+h zzpUW70~G(xXHISSWz7p=@YsZ8E@m5hr4)ru<>%sC5YVn@G>LFm{UESM$c!ApG6*q^a5&Mlw zs8%|=)3cbe&GcKuKIHPa2aju*1H7UX4k^PAG4#bIzDM-4RZEdv|>RXoHKc7#_{B9zvm=nf`3*;lE zU8xyh!VMX`=O#T4Aak%a>4AnJAZ<@;EPmiaD~V@!<;TJywh6# zDhF)GGR-inXaL0v5l6*sc%%cC%01~+9A5Rh}2J8^^ zu#`=ko2T5dU-ib=U;oW%+{6GILj(jD~vO!+^U^W zC1B0&dFiacypJM>H0}?`NlNSAz_FD1s-ni|wkF;>0<}oGh29{=NBN*Ms7O9f)NmFP z!Y?F0+~p?79?1%`SYW%=Jh9VVp;~ZZee4Dd1uv)WM1o7&(-YNT2410UMd#9oVI;SD zj8EPU`dGgb5W0hF-pC2$!PGNh)uwgWHmuxkl(V*P8zzCc!1%zW`? z+9gaMb&?tIK9pZqed{tPg+$iEfsJ=85tAh!IAPmRjQG7&nKeJDc!eQv4?|VZYaP08 zPR;EK7WcBPqbaz_5JNx6%0(sKhQu(db{&q~7zE%d!Af!jUnUWqDk4oXy8(xbK&Z(U zO?$9;0FyQ36sYQ$X8%|MZNn2h%HdSLk0+XnL<_GWFGcT%Kz57VYz0&Cr#g3Y2CJW* zb!>>)Bkjm-3WIIUiIE4(?cNac6^XPG^Vw7P>D~5^Z!I{s?$naT{VZ)>Aih9}6FmI{ z0w|lc!6~L&PFXVs|M`-zD|@*?tb29p06A4=!vHD6*B^Y1D$;Az(p#8JHQW_IX<%r9 z9@tBEIWNba3&{?~7c{lI1rU_512<)2-m$#5bjj4tovM=8H?(DegTR#6SAn}6&(7!c zJfCsrAF(GNvcToiZNka)se?0TJAylx^Zu{67dsAc?6%7TtVVg3Bc+E0?&F@D=1qqC zKj%-<^C6jgsR2^sh>o%}L+e5Y78#vdJB^zcTS`*V#z_IwAGj^8AcAh5to;@g2XA4BFj?Y)J=hYaYcC}X(p~z?spN|jjbrgJ5}|POVFf< zYPVmXIoS}^vCpSbpJD(_*#+J0&!H}2Q|u1A6Dx3w?$$fcRkcf!LIEFX+*OUD!>-`j z2y@uxKx`n}PFoNy3NfOj%Vs$kjt5}bbjX9c`)myfSXG|DCiobW{zEN*M#Qk zvqS*h3wcp*`KyCeKE<9pqIr|Pf0*$kxzkhi`Da-edevO}Df?x~Da#3Am&VS+ua30j zG1EYs_?#OZ+XD7dMJRsOMxljKg+?#mI!(~LvC?NWfL`tm5fODk;WP#=l)+)CwQ8zb z4MLD!g<0GNjBK8}LKv1bQ|y$&A{OgM1t#MHm5~xv?C^Lr&_6Gu3K1#G*>-ntB(v1| zskV4IEF_a|Oez(~)0;7x?)RqTz0gsW^7l@5OYJ#MRUZj^MC%=2a~gG&2&26Gi933l z5T5j*Krl|yaG1p*eSSthJ>sx)Si*~=Ef@)DmC@7jsozn=#i(vH#h3b6Xff3rjK1fS zpv-0#xR^Dm5Lp!l5d)q{ioPGG^uIjH3FS`gq^V>Imuk`tM;4`!V?m&?8)ni|19duP zB#)=RO!1T!cAeBa%@GfKbJ}|4Ihos5{XJ0*XmplM%em9bth6GN3e8)`R-cs;XDBJ9 z&}7IhoX&_Ye8>(CUj`EcH$jUWMg$X5r0%Wu_?oB8m*@+j^tL|!0Sl1zvjFB8zmA;7 zEJlq&7Temo{Bai7VxD;5^BTu0(IWTEP0i_Gn8wz)8=q8;mO;0OOstXoxyw8NGcWj)pK)pAmQ>45hb|ux0)WW__cX7;O%&5L82xc8JQD= z9t?>*KXa}80+S#gI*R3*rw6`@x1ZmRCk#Os*ovV-)PZ#&$2>~YvU^8ad@QEQl##Kk(z2`xDrQOUx+6YRwJXcoCic#Y5Dj)2hCLl<_?;P6jMgW zu}f;GZt4~ohBk;;V97|0WKpyxq{gaEeI^~9EUaL7DFv^6LIsk(84{qrHI*eGPfNfs zgG>|liK|0%1FMV7VQdyaGj(OFvmDC9kp1!5!)nIaiN`?EnGBJB%i0TF5PFz;YJUC>U;2wXoDltN8an^JD9%qEWM-hle*_Ai^p1F zp>m3UDJ+Z~yok=DsY{kV+XlG>mnf`A!n!zl=(KI$*=6JnmVB$9g4c@qDyQ1i*pvUC zIv$ANWkP!`A*feq`7Q-RIkMmXo!$hNqcR%=TcnGP!eab^Fe#$N2kiIZhCQ_(H_}lp zb=%k75d*AUEReaD&NmB#^~+W-u4|*a=$isv@O(FQHvqkXZo$TyBD37V2U&(~#0G6}P_$@ck*%#z1y-aD*l4Mt}R11n0OA&rSKK`IP zR-QFo7FDrqpo*w^?9N;wvqv7B?w+hJ7@Jlv7Ygdpk%GHpes_Z5VJK=0u%7{`^e~5l zWRC;@$}d4*%y~zt9#qwiKMr~kn|iQp#aR5q;3Ob1dTizSE{!=@8Br~q#Pe^(%Lf32 zgO1hte;UIC$aqNG@Pp?Ud5o^CEl0~T$vyE~{bj-vb6|7IJ%>po|C|P&#|0@{GXA!TTTCd=GIQMYY{nt_pKbM4 zc3oIGac=~l2zDcvD-8aAq`u|XR6v=w-ZV$PR^FEM6o(w;M|PytQ=v6vb$9m&K!>dOcZWM zMabHE^=1)>HM@3XsL?TOYu4sq@^C@il)_bXyUDf0nSka>odwF6_H;^1 zTc^X$T?bd4B{OO*{xXI6o`7Pb2BqnOHR;wjr_3NMs`lzh$G-P_8lp)1@bcUoH~q0- zvuoLJLt9R`_9dWJ3>C+vakztZ-S-xC$4Y(qgM($8d6FqaZ|*6n*qdL@N$$16O)2lY z5v~>DUEY-z?SoP6nOqLRyqmC3s;GF%4TWmJfk9*_Cd8LC@u?ky;S94|u`9(vM|WPW zYh_S4wJV^0y<8>~mblD^^@E{tfwDPMtzFrmVgy(BgSNTa26(8cO)5kdODsmuog8HV zLxjQCq#rYxQ)27aak}@cXQ;>as*}P|7=WslN#0w$ULYBm4SP{em2AxROKv_$j`ssn33khC97sr(NvZ#{p!FtaGkjD&-#Hn7lSeXE zdsRCRuBtYx`>!csBMD2oDn=&XXCb$JL-lMsDLxCc(w%WpS-~{+e)_lA%fq?44PzxR z=}L3zAG?7-mO#~=go@OGv&B0JNn(B>$;8SwdA$s#Q=)LHYw@FkWoyKb_T zAP!fi=u(jF=UOU&F-Wwxnrz9DF3R8(nejKv#}b0xmo?5(dz@X)pbam#;B(-Hin0Qg zrSb0J({4(K>O=J=OULztJu@d&U?nFO;#P<&2R(wZ&*7%XI?)<`I+Qx2h(9A0RFbw% zmAQxdfo5MYWIc4g2~7*7HOyzGkRgVyucF;|3&v{_bhN<%gm;|X;BEu~65UW8Ec$3s zlR>UcTL`?g#VxYoRGjiRpYKL`eARNKI4mquF*Pl;iTFgiu28}}t?U6p9lp7UX8f|t zKOZ;+$s8*zv%{^2Kl$!C2HSlMdN>Rmuk>wx@Z!QbU4l62?+=K~EN_GMr z=aSW@CsW=6pv}5{fc$4C${uc%?8qNg2(O(oG|5uO^gJF=)z1gD=9@SPgo0R#wuTa` zRQMOi6jSYkvoB`XyX0A^d0vC1CEiBXw~M?3ZdlxAw~+inxoCR}d+K*42yb>5m5>Og zwM8_XwI!x`B2OGXC+|XTv%CoT2-T2wXd3tQrlB&FBNlL2yJ@+FiFgS%h>}x)$IbUe zz=3-T4}CLEELLbKWazVoC;+>|j!H+i)O)xS6LZ)D6aPqA6rQD1oh3 zFLypZ_k7I3@E7gkltD)B~J!YtK zW2#(xPPbi)=m%_D`TA(tN0%bRG~S=hBiEVg9+TKHU}i$gjT;_fEx;O-@fa6AcATWg z-$bp))mYPhpT~G+F+f$F~&yM01H?s^toKedFjjc7An zlLC==d7>(_+_Y!58tae~mEZ{dS*E{|#chXpO-F(QF2QZ5MnG~s1{GWur1EnBgEbGR z)aCTl16e7bN= zj!Qul*{4iO)!ytC@T{FAALqk9wg6+2)?=#p`DXxA^1R?RFK*9Eh6mSTN)0CWu zd0ax=3H!*niic{h+>POO0zonVU=`X7?O z&bF)YcAh9a<3Y{q$R=?#4BcjZoq%LFov!G^0bFHCh*#BzyS*W%?Q_pRq~{oq>x)TL zh(eu2Ip7}NvJ!7%sGJt!%((Vx+XIAZ>6)t(%`;yyp$N^4=naCK6)bd?^bcbJN(OrN z<|U%QzEkxCkirs)b(z-u9A$qU(IbQ0&4W25v<$4eeh07z`**!T;|2r!>ABxRI~zLq z>E-Q+>pjE4++`8 zi>uxxRQ^Ii>Qs!8cBp>G9+ucWF+H<(_N;1|NsN-l`wr%gY55R6#vYc2VcglmO++=( zj|vnukaF3l9#O*vTs-FUL->}r;b!#OTq-6Meba+~=6tB_Y7-IYbvu#AMIf^nz95&rd6|(|foQE#7S6WW(e^DCr^bUIH4b?< zIA`Y>zo;vB*rq{#VyRG(UY2Op-?CI=Z?Cehlh2*qyESDVdC-wRcAb4XDKxs;Y?Y9h zZRGb3f*c@^%$%d1hjpN}|FYEsFb;PSsD88$0leAW%`yT{6eo8i~JBSF2Wr}XA4#dcVT5>;cLM9aN+5)iR zf@rQ7FmK}36^db=Q{8F&hq->fPEXer6tjODOt&3`z7h*t>8L_>NSe@9^gRxhRiJLb zvez9)Z0*atQzGu7)*ohoczehr(C(>BR5y0okH!J9_-ZneR!Q?1l0y}Y^$yUI}@I4p@{HVA6NUG}H)f%k) zqdZ&4c+zdVZFzH=I*NS@6xDPNvkRe@L({-Oal;W7?F)PB;%eissA7~zU&%C?;TY30 z8iH3xxaPLEi^LHW3g!2ZM3?y!G}E${k-wVtBOs$ScnM$jtZKzVMu$}dgC1%#k@d=` zU?Dz@W`L(&eNAp=DqIrVDm_@tLuYLinrMFpY@{o{?K88#RY%()`T^4vDfolsdzwBz zDsdLytQ^lb<~vp)(uJIxrW^!U*s~HoWipVz&ibP%z1@j38-JIdyk&6a_LaFu1_(h1 zwBIRnLnzGy_f?LMS;AE_y>6lLsylJxrJM|j2MPpE}`W01|7t^z~#N_yZ*1AYdo8Ko9 z-A`{rxSUGoPKCE3(DY>sxh!6$025FAEfS-MbfT)Ke)1!Ea6RcA4?GQS3k|5rhx#|| zbp0oK7TuHeP)hJ!W!gyshI*l$IFH7OV_i=sbKY|OIe&;n_yU&U{>5}&noOIjk+Oah zTyCGV8@hTeurg8c#B4yhOem1UbTdo6;H&*!lhPZp4m)(b)~AqN#U}(K5vMDi*%{Pm zC8RjGc%t{tV>NoFlYaww2SjO@0SuGq6HWIp1aIw4!NIcoe$q||{D+J1#t4chDvU>< z!9pkLrO+?190>+e30`t7Xw97QED70>z|hI0jEK$ls)%in>Tlhf&Q`w(U$SJeafNHQ z+Va~v3`G%EMJaT&b8D?S;~KkYoAe>L3;3-lDn5hHr`^8^2rt2f0-cuGuvOI;`?&F% z^;xif5w(nyQUyOk9<-;~9cwuF{S!$W?C(_DhuD0e1xgJ?9CCrbz%7woEZ>;>w=@K* zTMdMb5@_DVb3H~<+Bu2e)WN1nEPA$Up3e!Vf4(zqoW{bhH@gm@bFOAP>S**%xmQB-`E<3Y z=w~AG3IBaODx}OoIlewqg6_J|!?W(Ye#AV}*4nK$L!MyR&x~ew4&_(fB$%acai-lT7w)oB9vJ6peILXal zDMyT27HPoQ6eQNxP6f|j`G(++61bMqR&SiQFJ5DX%_cB`%ahJCR&3B(cufYHS&{ni z`9FnS1z3~c+eSh~fwY7m4T5x!?k)wD5(Mdxkd{V5X^<8v5s(xN5KvM; zQvBWxRN{C2KQ1q~^X$a^#CgthrrfU$H2)br=C+5)nbMssY^(Ow;l3Wb{a&$-Wifkl zJ&U#!FUcme3h}!|dDvwz!;CSV@BWz$RV3q#;KcAW>xZdhhMCKF<#&jOO5TfiBu15W z$`-i!Ob)Pha{r*g&>RI1)5_#F2#IZUlA7Ig<7vryrFeBjPO*#dv-h__0-MpZq=cgm z%C`Kb2`@VQu0kpuNE6C*9_q_q?&^q8XRIxsm3s!;Z+nSl`6}csc00v&hgNtE(`B=w zXHS>g>4qg%=H z`Mi|`1h&5vudKK?B#3Cbv+bc|>KI9dU`_ z0Fy3tPO6d0Qtie7&frx9_muM)%KA1;*>op96E#SNQvUR*!6La1CtIY)rX_LN|u4a7MhKH`?v9p%+C@@@2|bfa3p0klMUO)5i3+D z4>SONcgY!fn?GXUZS=#p;UKr^;x2mKxZe_?@>5gkjRr=)_q!o?Tag)JIGCGML0w5<|k zvs=9G^=+7%#Z2RHtU_wW!?P<|-gKE+%2OM!x34<*e?F=y3vRPQ|ghOcT;ZTP5>#$?x#+!_O?)3F4X z+)P`m8L)rArQw*(}Z)|Q!a@nvyflu^NTvyr=;i}zE%go7Dc}&bQDo3?Fupsv- z-CDMfIM16yhl0Wm;Gv>;pc3wv7c{+pmUT@_Duc#)-+Wl^@nHH|-5EDk-Cg49rMrsr z5RH^Jm)-YtqFz(Z1>h2Fcbr?!a_%CTd-qs}D5=-fz@I4!K^XweCq`UE#$DZTT{<12 z!TJ2ycP(k#8ul7@uqF~Gr{^WEJZBb3F$g4}@-y)cep|AlLO)^da=t}5m`GAX*K9!F zrF`kv$6c)5467SomUzhG$jJ2Af{_gv-#?2@^wq+j;!2N^G(KJB7cKr0&O@aqTlW4V z-RsZ-2^y=g*97$}tL8UBbkoNmhGxDtO3BivhH7wGM9xd5JNC;bnMuR%(NEQ9eWF&DW&dg>I+M(rn|WD1Qgu}I zi{MSci$RTdq|d}9^|L$lP5#Qmj5KiqJsk0IWDs4o_O%YBaQvOcJ9&lXNA`_#QgO|c zHgjq132&@PF9nPD(u)vr)VBFuB+7Y5wSt=hf>|oG@~uf%WXigcs~Pz;Q{JYS@*CnY zTMVOrVzY!TSn(@6CmFj@Zf@&=WahZ(1jh6#WSAF}_L9oNvkOt&Ds`WaG5OrALRq9fsUm6;yq4XTc%0rIO?!&b23 z1uyXOKiFt)Tbqp2NLlTje0p}6!->4{hmF%7)JNW&Y1NVq$xuHj?zi(mmn(Hg?w3Zc zw8#fGqP`ev+)pndkK;(fGpmVRo0&`l?JfKx$HVey<8&|6hzLnnRugmNC0kTHqN5;> z9U#m=vRF0UDDk~EBw&a|VvR@>%eUy(=ele9bN-EfaE>K+A1SWXO7(Xk4vLZv199Zf7)c9 z^S?qJQX>x4XXg~Q4ijU{mK0XeTPW~K6K-IvJePQD({T>|VePVlkDb9>Xvaq$@1>Tu zC)pf!)vr76CWnrRH7S%le7P}ketb()j9|Klu2dNG6+F>Z%o~-{u43@0`1i}8s(Uef z@wOU>d!2Ui!?@sb7qdnZo+() zaSW4axTEo%S&vY14N_*-Or5Nm6;di8%J}$P8=>VJ^-k%|=D$?OG4Xi>L$2MiZ>S`T33H^^>c_1-x>pL z(^}iezC{%C&|DXv?71l0V0B& z4VR*2KC##qc97#VM)Elclu*BWw>?xJ=NZVY(=`9S+FFK=cDk)qG25^56$53?7b&kV z3g&B5oGbdTyUT)D{e&*r$Kh3%3hSR^s>qowm%pYQcej|NQuGs}{E`;w46!`6%hMzg z)w|}i9i_cgPK@{u6CM)f>ZF8r6ReO4#9ZT4WBn#m5HYP;`bP`BZ* z7B|-xq67GEppW(h_YsL#eHp_j>8Vldo=$`xHv4p%$>ln3};Ixu2{#Vp_!3U;3#N5Ax)WGH)Jc zP$g`V@v+7JS{_OB8V~=S>+Z9Dd;So%SYmf=7mF$NY%3v^2E3XEM1z#W$ zAk6hEs|t~4+0CKp2(Sa$`ld2{lTlNod7Lw}MHq@Q-(o6MnP3!rI-6 z*S6F*_s;14g>%hD&EM=@n;hGn1ye>R#Vba35pQ;i)!XsZ<3&lJJ?_FG`)nK}_1TY< zIA^c)6g(nf)F1p#=;!cjdq<-9-lS~Bx^keQH>0#eGH>%QvUen#ApxJWSlFnAI?B(x zU9M2ug6}S{x3I;HrMo@>BcfQYL1B;)ULlDu>T~Z51sS zFvQftaOdx6ft9 zE*}~p!Spyx(&Xuj56d>Pqb~>%{*Ka@a}%MkLiHccZsvh~;AL;8}%Hum<^!S1L8t^QQLaYa~6RK|>(f26D z)k!A`W#C67j!53U^4ev{u9j1X1fwZ!U;HL+jb4<-$6V2UPNJQZb&-A{^Fk_}k2ms_ zH`)pBPU5HU4e1j5m5=4GlY|O)*CwttGtV^aSzSPe`?auQ^g*nvJVpu(&l(TEsjKZP zN~-3;eBo^T;U{*9Q=7h|$h~a;r5Yz*L{XOvn@~>CAhvX78s+;C*7>hr&f5;cGYN+- zdMdG*W0JRATAQB^6)AqD-rdMv&ve^;yDEBUihaY%w51NO`dMw-X3(<+L!n2-4sSZR zq`RAbeixDG%@E9r01>5OO=L3PC0|YgbJ30ZO@s!h4ZkLmv8NGDvc_2#zo|*^ly2q= z&UNoes2StTmCvecFUD3LW>2ux_kFxmCR6=wIi%(ZzHMHQC97432lR{js(MGaEfp-<{v*WyaumJja#ud$ttdAZ~5{ zAx98u9p6sXs5AP+i}v;9h?`=!?_Q;GKg(x-ZnuSWMGxS@P43fcgex{3 zPl~UuMco!@S|*Zf4N;SCPtbi>J@e*ji|m6>+T0DkMHZjt(<;3c`+xnyTQ4yn?nlmg zlLxM?oVO4J4df~o1uN6IhSM>Qwz+nA$*MHtmp;xQh*B=tftX>|%_>!iIo>RcFY3{r zNYUQf*fMVko||PU(@6jPG{|^<@rx2m_@f_z>|A^?>w(r!ELEhq<}Lm7btni0F5Vne zES6XInZNppQB z^O~-66OChP3aK5%#_F=euL#F|q>S9Y6hiu|*-h7LSte`y^`%Fr~Yqs$( z)g}^N^`hA4xRX4mi#ct6I6NVdlVeYV;?6cl&i~}d0O1b3CJGO{u>9;2$(aNxnlAc4 z!L^Rc`5!tJ*xz2;dhsf;D;x5k--yL)Q@--L5AJK?z0=@tLJaoSBjg)qf9AoVR{=+6%SM`MoNOro;4qsH%PT$p%y zJqeyP8W^t5a`hP->(Fv8MicfOvE9YMu>LHZtt$^EZqBCK<5$p^sI@%K*mZ>BYYb-Y zu)=;^PJQJvXRscd;ATnf?R8eH-21|^48r1`)pku9AAf+iKRJB}-f9Y_Xv@s)i%b1> z;6$5+JD=aQzC^6^kp-{*y3`-a{NNfryYMmrHal$KmPL2P`#r6gneIWdo3>LL4MF|{ zQ-x*yZHyT{O&nsAGF0JWer%+C+y0bVWgiw_PgG)*b$i{v^WxHtK@9D&_bJ5eZjS9a zXKBXWD&#JS(#D34l)m}JE0p-0dOB9>vGIihw<l-bG;k2)go|3HVe<_S9*VJ-BXz_D^yCH3 z#Rw~0SFu^XXY^V2+RF)XFXi9!p}ocN;EdjY5P8cdI0(#Kv3s72X7w)}^|Pnw7wL^1 z$@l50Tk#zfo*4BAKMqW@2$61opCJ0}G2eNCa7&pNR#>g`<5eBo`x0+%^Hkku9_Xli zZt7p}!&IPVPP-uXJtInUkX6tZ)PXaA6LkA*+NM-;x0Q^EtA@v%BD6ZX{CmvQ^5d%U z^q7XiCttW1upS6&-FEh<_j!g;!@n0eQ*bvHM28vTb#4CY{@hcO*!!2T^s|OZACm`< z=?6v+_^{G)jTi;tF*wkbhle~E=o9CtavoqWm-zXZ<;@VuXHfyqSF)rV7}rY*KPgr} zmFOzhCHIkHP#BYS&6Nb^m9A?rKlaUEzR& zXG-mX@{)EhhZ--mLM{C&DV?WwcbgO$?Qdo>={Oci+qt-ZzN1~TEM*xfNRanysdDdO z{*9fwh+0VI45u4r6#`2V&&pQdt^YHr%J_l6u8^zFTRn=j=Leg?5O+nn(`7Zt!uR9`6lKEvu5Pf1@~QO>0VG?xuT`6k(pvw zQlSEMV!h_nkIk)@$i?qjAM_~dQFDzmf006lHnyYuf^O*0`q{-b?!Z>9kR7_nw+ZEx z0VAaRCO3#o8%Fb@1}nymj7iS0vh+kTT-f2hqC4^OY6ncbXWjO#AV?QMEBlD!-cy&P`O%0 zDiUv(zMwNOVURT8Z;(Re^|6!Tt&qM6W#OCof!G(HK5eh{eRy;e_Zh%0z7`MT)x>^D?(?6TCmt4fWqRClA%p)9%7N{c$ydr(mia%y#B z$kz(laDN+jN(mCZHR;r(8%`noiR!FA?M`rz5S{O}E$%OE-0I{Rbl>x;&IEjII)~L8 z(%=&pG^mKENm%ugbG2+6m3yQBY8EZv$UI|%p|(3?kC1Ox#GvNKZS0!*9h-QrQEzwj z8@%-jX?<8mE!%rWh(Szkwl-Tg$*rD+FofmD3f z#EF#tq;W2vvf1vFTf}oVYMq?DD(9P7HfMK>)N(~Yxi#A7)O4l`WyQ%2+F#jg)w0ZS zYcZ036ME>qi`4eWx67-X%fB;eKkTtEcipW`<5_Q);msAxZDa0jxsF?wkH2Z=`O-G` z_LO!dTI^lEH6~>H_4C=#QhMK!!lbja*GuRYEkb3SsgV(VY429v(@n)(ZJ~Ty0D>@X z`(;pw{n~cX2Q{fmIOPh*kF2UyD3vb7ku7<=r&xZnlNcVIZqCsq=`;T`p6{mN7kg2! z(67CCXYlvlJoq%k^l}Z1wWbo6x|*nVJ(I|VliH;x>*i7?My((=e2HXVD(y+Pi2FOH z5JYT~_SYLJokK&k+vyhu2Qu{Lq*XJiq(eTRx$Ban^O1ct$v;FcY<@Rv?bpOj^5_YJ z4yuQ;Eswu-`dl+(5PnsCbNx=3jpYKm#5wRGsK}#FOm3nf_n6rtU>D4 znDF;cb-$RMQw6mOkva6`3a980jm__Y9Sarj8T5eMb<1$1yp3;1vD5z|YRxGzLa0X- zB=F{MU+MAk({kZ#id zl_Y>})|3Lt${nJ}XiO@4FPfz;f#H%jk(`0`ZuWZ?qI=z?4s>5vmLTyf6E+qTR}(t_Z7dbJ9m(eH|g);bapC>@LOFSsF0pWap|>{sKbJsuZZH{p4wXl z#W*?djY0Ub5g(;;V^_;Q$h=JP!6w(V#uXQmo)V79i0KLE(6!$* zHE^m&S#S10mij;JEIrbW36-x8L2gV~6$ub%ZsPo$(8giOFtip~WJh)}H;MhaGye4L zy_zf?O0$N7dB)bM@7+{;Pk%<{lHpoJP-$o2&y-pXVz4g|cimVnF>+K~mK+H^BM4`> zn4BWxKA~#WHECn^meJJG zzn){nvn=%OxA?Y)5}N#+=LF3e)ATb_KojptHg$0oR`$tiNrh_^U}aYWDO&(uEb+%eUu`G9?`~J&JZ8%4%E+`Zt`lnR>~)1RL4f1k4th;{xlA{5= zepz@T#zVUm4_l{u?dzXmQ4h^c)1it8cHnVy7Ven4!6bBnA0FkWUVIgeja%_xnkQ`X zV=GO=@QOp3Wn5d=dp@XLfv2JI)oTJoeu85HWtoJDavZcI_j|AQkI$K(386^UqA^aa zPI~<`|HDRs0++a-#Q=nld@ARsBk_0hnw2G3*R;NPEzP3lefwpq>bkA%6lxaWiy`i1 z{Ek*+O+50_yS!&^cR22DG)(v3_97tu!4FB+E{0A|SnN--bH2moj37~oargo9+q}UZRGO z7v`{z1qN!QgNVK3s!KJ*v{_UO)Dmj<*NREKV_&n+w#7v|=9Im`abW`A7|zy#SmxpHPbBP0Rk$$k6%-Tx zmI$fUlu1{U*X4U5-5+zESWw(XhqfNPHRo{F^F`JbyG`;SS+(ZP(K%e~Qj(wX(XHeV zve{Zta}Wc8Hk1AK&5xcM*J8}9`JHvHCd^$4zSg-K8iU>KT+ZXjNfnc0a&hIQY8d1a zDQiW!qY7EYg%_~>jV}`nd=^1;b0kDOe726YE=0^UgNuxFIVf5g5%myu^Phm*0 zLwBEc#Vf|2j{{4E`F-;C2q8t9n|!s3^WApEoif{V+a`U4FQA;Ax_eKP*`i*=unE4U z3ltN_{mIUAFW1ESob}7;X1N$)>uFa?Makwq5og~7N<;f64)_|^$#KJPwgU9Xwr!=G-pnG3 zWkx?8!|i_b7`@}Ejg4Y8h)={%&Ru;l4XX0luMtr<|Bfk8Xl|RYV)V ziT`#wzJj!#=4;ttiv?SnWhq2wXKBb*eS##wh9YG&=v>-T@RQ5@tviLlRO>qzy@{88 zj!_6ECw9$Dc`(3YGLxFnD=OCV@Wm4+d9Dsmmt}>)cE?!NW|y1+!3A57Ig%mv;2lct zk13yuM-`p|WSLd_->&P^MZT&9#|#K3J|L2K4gz%Ei8}u@eXOWgq4)iBW&dl;J4@ph zhQus6&Q%*}7-W|nItn~I+0Lq`kF#8G>PewvRt_wM^0v6UnktHk8j`coMbB6>o_$$2 zb=}5g($nIVF8)>qTv{F?{>eflc%>;XT1k` z&z&xOSDL$Id7o6pxq*!_2^n_veUT212+@k`C&`<87WO$!H~qiJxe!Nar2ap0E+r)m z1^F8%$hlOJ=C1#PoD0hThnx!vJ3`Kd0EnrMkaNKSo~?i6ToB;V=Ko2~#ScHi%>_sC zd;R6+51`vTAa)AMjKXhOgo(>iO-fOQ8hsGSKbG9*Zwm3mD=4xjOENWu! zgyeBMU>xJ|;_*T{*&in!L(z<>5*#HSgPe*ODLWH;Q%gH@z=xJ*W=H_A3DOy)14UcG z2E+^d2lk(?AYOr^(9wFH&=>^c~Kejov5{M7NgLWE-56<)d1QCcI`X6zGil4(!0SWN_i5#>;Kmu@{e|825 zAkaZ~Kp1CsND=oh80-OdI7c)woC`n#_s=Ou0`yO~9?TAb3Gf)B<5BO3hY&}Z;r?xD zfZ)#6*u~QUAlX9+fem-v$Qg-Z-uvIId&j8y046#Vo1ZF*H_pk~1-1P^FkrXJ8yz+v zP+;QQmZmNi&Ol%2LEk^|0Z356b2OX~|4k0~zrg;lEOZhqD!Uy63q6Vz29N;$#R?GQ zp}PJrtO7t6dt)n*kPrddh9DkgBXguPkcRACQH+BGJaU$%K;XmCY<(ag^8r(W_|X;v z@uNno0ugfX!jF16>NW@%B|1L6lBD&=cYy7#aovfE?JSE`UeSK!COr(hUSVu-CucjusrB3U)XEnCdVT{&Onc!*vvq z9)GbOnHQzWiFpqw4taoi4>dcS_i(0vgVBN$gTW|s0^E-v-b0uFH>ksz(Vz~MJv1%s zsBQl=4*bdmIbvMiV*!gcF7H8(L@jL;gDafBE}RDfH5Z7W}8uX-EF`<8e10*XL*mK@N2LHz(@D<5v3X-a|8- z+)-$32RQ#t0|6iP6^hdp$cLaQHcl4J3d@bJ&IhZM4QfWhrlIYw2=gv4dIRY{&8}1Qj}eRQ-bx4Tp~n$cN~_ z026dP$IMw|MubrfTLsTp9Fx8UP$$y2tW@(Ykw5&pN0P{$PGJz z_GkqCLHh>?pg;5k5jFoIT}8-`LA zf*ySo^`DOc0Ibf(dmpzo3f)Ot9~l5g+wu>Re-rVcN9N8_$lM}i) zlQ05kiS2<}8eLm}5QkafPbu*4#6AcH$U#UQbXTx9Me?XSBmZLZX5*1Vdb-;?nL4uqw+ZxcU@u7;xgbHTlGmVM zz|MRSID{V{Tjt{eBUr#-7N8%1{{QQ8%gM;W0ci^2kv6h%MgmITlG5as21;OKBRe~! z6NvSeg{3nH_;Y{<_`M_4#me3e#LEqVLEr*VzCRGTpxjWPJ5m!Q4{$bvpkS~7a04~A zG_qp@Svwd3^()c{+^y1Kc3s!1-$i`YS`Z7xe?O z`y+!PP!2sNg9Bwe5N5|@K!Xq1j3;FRr(`gG)Yd-M510>C)E$$7!4Onsa8kwxB$wkd z1Q=C)9h1Q!yr?8|Oa=x+Q3TW{WvF82xD0_V`H#uq5QqSfP>;!g`4Fcu^P&!uzW_s@9J81H(}V;|Uobszf_3L%>i6+%Xv(jNm)f56p+U znH}o~1|v`xy5lkd1nR&(CWC|dPzCBS888-gZ#XGKT~&|E1o%<4_c0k94F8YV;78Sq z$NGW6{HTl9F&VJs1x~I32g6S9Be1|Jy8syhbwxNnA0HTXl{zK^<~zO5!2+m@-m!jQ z;68lHM^Nx-TS1|x{Q>=tHK1_5Q$B(M8|37=Q2x_#$_qZdr+Fc$V(d6(US8B4;e-r! zDu)5v?R0+OMWC*}C&mh#$}eCT_;mh*K~Kd2n2+zYZhVN-xdg_4S_T0lPWlblzNdW- zPWJ=w zo${r?f7lNJM^#hDF$*A0jDS#sdxs~ zJv|=`dMZvKaKtJ50Vf5jd^@Ha1kQIVk3(RvQ@#Z9#;G#}CII6^eCtig9W zw?h!8^?(9qIcZZU;J1@G2MFg=dle2wJ@n%Ex^R?or(}pzX9a*x;AEV_0Xv_TK~Z0( z9J3!B%6lqb0W!qtegMLMV_lq#fX7%k5eNx^c+@PtfCpLtg%gjey*=;+6uJZkuF|r0 zX7)e}h!oTpIkJ)<9U9CN2P#76JYLUGzXA ZA_UH;yC=G4g9HB_!B4=%B&8%x@P9yT!2tjO diff --git a/RELEASE-NOTES-BIND-9.7.4.txt b/RELEASE-NOTES-BIND-9.7.4.txt index ae736f44e5..6dd7e69e79 100644 --- a/RELEASE-NOTES-BIND-9.7.4.txt +++ b/RELEASE-NOTES-BIND-9.7.4.txt @@ -2,11 +2,11 @@ Introduction - BIND 9.7.4rc1 is the first release candidate of BIND 9.7.4. + BIND 9.7.4 is the current production release of BIND 9.7. - This document summarizes changes from BIND 9.7.3 to BIND 9.7.4rc1. - Please see the CHANGES file in the source code release for a complete - list of all changes. + This document summarizes changes from BIND 9.7.3 to BIND 9.7.4. Please + see the CHANGES file in the source code release for a complete list of + all changes. Download @@ -25,16 +25,29 @@ Support New Features -9.7.4rc1 +9.7.4 * A new test has been added to check the apex NSEC3 records after DNSKEY records have been added via dynamic update. [RT #23229] * Added a tool able to generate malformed packets to allow testing of how named handles them. [RT #24096] +Security Fixes + +9.7.4 + + * named, set up to be a caching resolver, is vulnerable to a user + querying a domain with very large resource record sets (RRSets) + when trying to negatively cache the response. Due to an off-by-one + error, caching the response could cause named to crash. [RT #24650] + [CVE-2011-1910] + * Change #2912 (see CHANGES) exposed a latent bug in the DNS message + processing code that could allow certain UPDATE requests to crash + named. [RT #24777] [CVE-2011-2464] + Feature Changes -9.7.4rc1 +9.7.4 * Merged in the NetBSD ATF test framework (currently version 0.12) for development of future unit tests. Use configure --with-atf to @@ -43,39 +56,23 @@ Feature Changes * Added more verbose error reporting from DLZ LDAP. [RT #23402] * Replaced compile time constant with STDTIME_ON_32BITS. [RT #23587] -Security Fixes - -9.7.4rc1 - - * Change #2912 (see CHANGES) exposed a latent bug in the DNS message - processing code that could allow certain UPDATE requests to crash - named. [RT #24777] [CVE-2011-2464] - * named, set up to be a caching resolver, is vulnerable to a user - querying a domain with very large resource record sets (RRSets) - when trying to negatively cache the response. Due to an off-by-one - error, caching the response could cause named to crash. [RT #24650] - [CVE-2011-1910] - Bug Fixes -9.7.4rc1 +9.7.4 - * Improved the mechanism for flagging database entries as negative - cache records; the former method, RR type 0, could be ambiguous. - [RT #24777] * During RFC5011 processing some journal write errors were not detected. This could lead to managed-keys changes being committed but not recorded in the journal files, causing potential inconsistencies during later processing. [RT #20256] - * A potential NULL pointer deference in the DNS64 code could cause + A potential NULL pointer deference in the DNS64 code could cause named to terminate unexpectedly. [RT #20256] - * A state variable relating to DNSSEC could fail to be set during + A state variable relating to DNSSEC could fail to be set during some infrequently-executed code paths, allowing it to be used whilst in an unitialized state during cache updates, with unpredictable results. [RT #20256] - * A potential NULL pointer deference in DNSSEC signing code could + A potential NULL pointer deference in DNSSEC signing code could cause named to terminate unexpectedly [RT #20256] - * Several cosmetic code changes were made to silence warnings + Several cosmetic code changes were made to silence warnings generated by a static code analysis tool. [RT #20256] * When using the -x (sign with only KSK) option on dnssec-signzone, it could incorrectly count the number of ZSKs in the zone. (And in @@ -84,7 +81,6 @@ Bug Fixes * When using _builtin in named.conf, named.conf changes were not found when reloading the config file. Now checks _builtin zone arguments to see if the zone is re-usable or not. [RT #21914] - * After an external code review, a code cleanup was done. [RT #22521] * After an "rndc reconfig", the refresh timer for managed-keys is ignored, resulting in managed-keys not being refreshed until named is restarted. [RT #22296] @@ -92,6 +88,7 @@ Bug Fixes key to be rewritten to the new key format even if no other change has been specified, using "-P now -A now" as default values. [RT #22474] + * After an external code review, a code cleanup was done. [RT #22521] * Cause named to terminate at startup or rndc reconfig reload to fail, if a log file specified in the conf file isn't a plain file. (RT #22771] @@ -117,6 +114,9 @@ Bug Fixes private key is found. [RT #23136] * When using auto-dnssec and updating DNSKEY records, named did correctly update the zone. [RT #23232] + * When using "auto-dnssec maintain" and rolling to a new key, a + private-type record (only used internally by named) could be + created and not marked as complete. [RT #23253] * If a slave initiates a TSIG signed AXFR from the master and the master fails to correctly TSIG sign the final message, the slave would be left with the zone in an unclean state. named detected @@ -184,6 +184,8 @@ Bug Fixes incorrect timer setting. [RT #23769] * The autosign tests attempted to open ports within reserved ranges. Test now avoids those ports. [RT #23957] + * named, acting as authoritative server for DLZ zones, was not + correctly setting the authoritative (AA) bit. [RT #24146] * Clean up some cross-compiling issues and added two undocumented configure options, --with-gost and --with-rlimtype, to allow over-riding default settings (gost=no and rlimtype="long int") when @@ -195,11 +197,25 @@ Bug Fixes * Improved consistency checks for dnssec-enable and dnssec-validation, added test cases to the checkconf system test. [RT #24398] + * RT #23136 fixed a problem where named would delete old signatures + even when the private key wasn't available to re-sign the zone, + resulting in a zone with missing signatures. This fix (CHANGES + 3114) did not completely fix all issues. [RT #24577] * nsupdate could dump core on shutdown when using SIG(0) keys. [RT #24604] * Named could fail to validate zones list in a DLV that validated insecure without using DLV and had DS records in the parent zone. [RT #24631] + * A bug in FreeBSD kernels causes IPv6 UDP responses greater than + 1280 bytes to not fragment as they should. Until there is a kernel + fix, named will work around this by setting IPV6_USE_MIN_MTU on a + per packet basis. [RT #24950] + * To avoid excessive startup time for configurations with large + numbers of zones, an environment variable, BIND9_ZONE_TASKS_HINTS, + may now be set prior to starting named. Divide your number of zones + by 200 to find the recommended setting for this environment + variable (i.e., if you have 200000 zones, set + BIND9_ZONE_TASKS_HINTS to 1000 before starting named). [RT #25084] Known issues in this release