From df154dd20bdeb5a0f5d78f1d03c3973845d440b4 Mon Sep 17 00:00:00 2001 From: 3keyroman <46850604+3keyroman@users.noreply.github.com> Date: Thu, 16 Jul 2026 17:26:53 +0200 Subject: [PATCH] Make PKI MM 2.0.0 lean: remove extension catalog, integrations, and Excel tools --- .github/README.md | 8 +- .gitignore | 2 + CLAUDE.md | 11 +- _index.md | 2 +- extensions/_index.md | 4 +- extensions/catalog/_index.md | 17 - extensions/catalog/pqc/_index.md | 116 - extensions/catalog/pqc/pqc-extension.yaml | 478 ---- extensions/catalog/templates/_index.md | 70 - extensions/extension.schema-1.0.0.json | 2 +- faq/_index.md | 2 +- .../convert-yaml-data-to-csv-package-1.0.0.py | 80 - .../convert-yaml-data-to-csv-package-2.0.0.py | 96 - integrations/eramba/pkimm-1.0.0.csv | 1960 ---------------- integrations/eramba/pkimm-2.0.0.csv | 1997 ----------------- release-notes/2.0.0/_index.md | 15 +- scripts/check_model_docs_consistency.py | 87 +- .../PKI_Maturity_Assessment_Tool_v240318.xlsx | Bin 663921 -> 0 bytes ...Maturity_Self_Assessment_Tool_v231220.xlsx | Bin 110316 -> 0 bytes tools/_index.md | 19 - tools/self-assessment/_index.md | 20 - tools/self-assessment/config.yaml | 53 - 22 files changed, 26 insertions(+), 5013 deletions(-) delete mode 100644 extensions/catalog/_index.md delete mode 100644 extensions/catalog/pqc/_index.md delete mode 100644 extensions/catalog/pqc/pqc-extension.yaml delete mode 100644 extensions/catalog/templates/_index.md delete mode 100644 integrations/eramba/convert-yaml-data-to-csv-package-1.0.0.py delete mode 100644 integrations/eramba/convert-yaml-data-to-csv-package-2.0.0.py delete mode 100644 integrations/eramba/pkimm-1.0.0.csv delete mode 100644 integrations/eramba/pkimm-2.0.0.csv delete mode 100644 tools/PKI_Maturity_Assessment_Tool_v240318.xlsx delete mode 100644 tools/PKI_Maturity_Self_Assessment_Tool_v231220.xlsx delete mode 100644 tools/_index.md delete mode 100644 tools/self-assessment/_index.md delete mode 100644 tools/self-assessment/config.yaml diff --git a/.github/README.md b/.github/README.md index 3a70bdc..b8356d2 100644 --- a/.github/README.md +++ b/.github/README.md @@ -52,9 +52,9 @@ pip install -r scripts/requirements-dev.txt - `model/` — narrative pages: vocabulary, modules, categories overview, references summary. - `release-notes/` — per-version release notes. Each version subdirectory uses the template at `release-notes/templates/_index.md`. - `assessment/` — assessment process pages (scoping, assessment, evaluation, reporting, implementation). -- `extensions/` — extension framework schema and the catalog of published extensions. -- `tools/` — Excel-based assessment tools and the web self-assessment configuration. -- `integrations/` — converters that produce artifacts for downstream tools (e.g., Eramba CSV packages). +- `extensions/` — extension framework documentation, structure, scoring, and JSON schema. The catalog of published extensions lives in the separate [`pkimm-extensions`](https://pkic.org/wg/pkimm/extensions/) repository. +- Converters that produce artifacts for downstream tools (e.g., Eramba CSV packages) live in the separate `pkimm-integrations` repository. +- Excel-based assessment tools have been retired in favor of the web self-assessment; the last Excel tools remain available under the `1.0.0` tag / website section. - `scripts/` — authoring scripts (generator, validator) and their tests. ### Conventions @@ -74,7 +74,7 @@ Edit `data/pkimm-model-.yaml` under the relevant module. Use a short ke ### Adding an extension -Each extension is a single YAML file under `extensions/catalog//-extension.yaml` validating against `extensions/extension.schema-1.0.0.json`. Declare which model versions the extension targets in its `compatibility` array. Extension-specific references go in an inline top-level `references:` block on the extension; common references resolve against the global catalog. +Extension definitions are authored in the separate [`pkimm-extensions`](https://pkic.org/wg/pkimm/extensions/) repository, as a single YAML file per extension validating against this repo's `extensions/extension.schema-1.0.0.json`. Declare which model versions the extension targets in its `compatibility` array. Extension-specific references go in an inline top-level `references:` block on the extension; common references resolve against the global catalog. See the `pkimm-extensions` repository for its authoring workflow. ## License & IPR diff --git a/.gitignore b/.gitignore index 36cb51b..ee27bac 100644 --- a/.gitignore +++ b/.gitignore @@ -42,3 +42,5 @@ __pycache__/ ### Local Claude Code workspace ### .claude/ +docs/superpowers/ +.superpowers/ diff --git a/CLAUDE.md b/CLAUDE.md index 9c2af8d..668f99e 100644 --- a/CLAUDE.md +++ b/CLAUDE.md @@ -4,7 +4,7 @@ This file provides guidance to Claude Code (claude.ai/code) when working with co ## What this repository is -Content repository for the **PKI Maturity Model (PKIMM)**, maintained by the PKI Consortium PKIMM working group. The content is rendered at https://pkic.org/pkimm by an external Hugo-based site — this repo holds the source markdown, the canonical model data, and assessment tools. There is **no build system, no test suite, and no application code** here. Treat changes as documentation/data edits, not software changes. +Content repository for the **PKI Maturity Model (PKIMM)**, maintained by the PKI Consortium PKIMM working group. The content is rendered at https://pkic.org/pkimm by an external Hugo-based site — this repo holds the source markdown, the canonical model data, and the assessment methodology pages. There is **no build system, no test suite, and no application code** here. Treat changes as documentation/data edits, not software changes. ## Repository layout @@ -19,13 +19,10 @@ Content repository for the **PKI Maturity Model (PKIMM)**, maintained by the PKI - `data/pkimm-model.schema-1.0.0.json` — JSON Schema for the 1.0.0 YAML shape (retroactively renamed from `pkimm-model.schema.json`). - `data/pkimm-references.yaml` — **independently-versioned references catalog**. Per-requirement `references` fields in the 2.0.0 model contain arrays of IDs from this catalog. Edit here to update reference metadata without touching the model YAML. - `data/pkimm-references.schema-1.0.0.json` — JSON Schema for the references catalog. -- `extensions/extension.schema-1.0.0.json` — JSON Schema for PKIMM extension files. -- `extensions/catalog/pqc/pqc-extension.yaml` — PQC (Post-Quantum Cryptography) extension version 0.2.0, compatible with PKIMM 2.0.0. +- `extensions/` — extension framework: schema (`extension.schema-1.0.0.json`), structure and scoring documentation. The extension framework defines the non-destructive, composable overlay/relevance model (schema/structure/scoring); the catalog of published extension YAML definitions now lives in the separate `pkimm-extensions` repository, rendered at https://pkic.org/wg/pkimm/extensions/. - `scripts/` — authoring and validation scripts (see "Authoring workflow" below). -- `tools/` — published Excel assessment tools (`PKI_Maturity_Assessment_Tool_*.xlsx`, `PKI_Maturity_Self_Assessment_Tool_*.xlsx`). -- `integrations/eramba/` — per-schema-version converters that produce Eramba-importable CSV packages. - - `convert-yaml-data-to-csv-package-1.0.0.py` — reads `data/pkimm-model-1.0.0.yaml` (schema 1.0.0) and writes `pkimm-1.0.0.csv`. - - `convert-yaml-data-to-csv-package-2.0.0.py` — reads `data/pkimm-model-2.0.0.yaml` (schema 2.0.0) and `data/pkimm-references.yaml`; writes `pkimm-2.0.0.csv`. Future schema versions get their own script alongside. +- Integration converters (e.g., the Eramba CSV package generators) now live in the separate `pkimm-integrations` repository, rendered at https://pkic.org/wg/pkimm/integrations/. +- The published Excel assessment tools (`PKI_Maturity_Assessment_Tool_*.xlsx`, `PKI_Maturity_Self_Assessment_Tool_*.xlsx`) have been retired from this repo, superseded by the web self-assessment; they remain available via the `1.0.0` tag and the 1.0.0 website section. - `release-notes/` — per-version release notes (`release-notes/1.0.0/`, `release-notes/2.0.0/`) and a template at `release-notes/templates/`. See the release notes for consumer-facing changes and migration guidance. - `faq/`, `.github/README.md` — supplementary content; the GitHub-rendered README lives in `.github/README.md`, not the repo root. diff --git a/_index.md b/_index.md index 170c392..5cddd03 100644 --- a/_index.md +++ b/_index.md @@ -49,7 +49,7 @@ The assessment process defines steps to scope, assess, evaluate, and report the ## Assessment tools The following assessment tools are available to support the assessment process: -- [PKI maturity assessment tool](./tools/) - Excel spreadsheet that can be used to perform the assessment and generate a report. +- [PKI maturity self-assessment](https://pkic.org/wg/pkimm/assessment/) - web-based self-assessment tool. The earlier Excel-based assessment tool has been retired in favor of this tool and remains available under the 1.0.0 tag / website section. ```mermaid diff --git a/extensions/_index.md b/extensions/_index.md index 0403acb..152e453 100644 --- a/extensions/_index.md +++ b/extensions/_index.md @@ -18,6 +18,8 @@ Extensions may: Extensions are optional and independent. They can be added or removed without changing the core PKI MM model or affecting the baseline maturity calculation. +Browse the published extensions in the [extension catalog](https://pkic.org/wg/pkimm/extensions/). + ## How extensions influence maturity > 💡 **Concept** @@ -46,6 +48,6 @@ flowchart TD - **[Extension structure](./structure/)** — what fields make up an extension definition (metadata, Relevance, Overlays). Read this if you are authoring a new extension. - **[Scoring model](./scoring/)** — formulas, order-of-operations, and the end-to-end worked example. Read this if you are implementing tooling for an extension. -- **[Extension catalog](./catalog/)** — the list of working-group extensions with documentation and YAML definitions. +- **[Extension catalog](https://pkic.org/wg/pkimm/extensions/)** — the list of working-group extensions with documentation and YAML definitions, published from the `pkimm-extensions` repository. - **[Extension JSON Schema](./extension.schema-1.0.0.json)** — the canonical machine-readable contract for extension YAML files. - **[Extension framework FAQ](../faq/#extension-framework)** — answers to common questions including non-destructive design, multi-extension behavior, and overlay tunability. diff --git a/extensions/catalog/_index.md b/extensions/catalog/_index.md deleted file mode 100644 index 0b66fa4..0000000 --- a/extensions/catalog/_index.md +++ /dev/null @@ -1,17 +0,0 @@ ---- -date: "2026-05-13T7:00:00Z" -title: Extension catalog -weight: 3 ---- - -# Extension catalog - -The catalog lists extensions developed and maintained by the working group. Each entry links to the extension's documentation and YAML definition. - -Extensions follow a consistent documentation structure so readers know what to expect — see the [extension documentation template](./templates/) when authoring a new entry. - -## Available extensions - -| Extension | Version | Short description | Documentation | -|---|---|---|---| -| **PQC Readiness Extension** Under development | 0.2.0 | Adds Post-Quantum Cryptography readiness criteria and overlays to evaluate strategic, policy, compliance, and operational preparedness for quantum-safe PKI transition. | [Details](./pqc/) | diff --git a/extensions/catalog/pqc/_index.md b/extensions/catalog/pqc/_index.md deleted file mode 100644 index 3abbb0f..0000000 --- a/extensions/catalog/pqc/_index.md +++ /dev/null @@ -1,116 +0,0 @@ ---- -date: "2026-05-13T7:00:00Z" -title: PQC Readiness Extension -weight: 1 ---- - -# PQC Readiness Extension - -The Post-Quantum Cryptography (PQC) Readiness Extension adds quantum-safe transition criteria to the PKI Maturity Model. It introduces an extension-specific maturity signal alongside the baseline PKI MM categories, plus weight overlays that emphasize requirements most relevant to PQC migration. - -The quantum threat fundamentally changes what PKI maturity means. An organization achieving Level 5 on every current PKI MM requirement may still face material cryptographic risk if its foundations are quantum-vulnerable. The Dutch government's "harvest-now, decrypt-later" framing makes this a **present-day** risk for long-lived confidentiality, not a future concern. - -## Status - -This extension is **under development**. - -- **Complete** — Governance module (categories 1 – 4): full Level 1–5 criteria, assessor guidance, evidence examples, and overlay weights are defined. -- **Outline** — Management, Operations, and Resources modules: PQC-critical considerations identified, but Level 1–5 criteria are not yet developed. -- **YAML version** — `0.2.0`. The extension version will move to `1.0.0` when all modules reach full Level 1–5 development and the working group endorses the content. - -### Open question - -The placement of overlay weights is **not yet settled** between two candidate designs: - -- **Governance-centric overlays** (current YAML): per-requirement multipliers applied to Governance categories 1 – 4, emphasizing the requirements where PQC introduces fundamentally new evidence or review cadence. -- **Capability-centric overlays** (Kennedy's proposal, section 7): multipliers applied to crypto-agility (Change Management & Agility) and PQC training (Knowledge & Training), elevating the operational capabilities most underweighted for quantum readiness. - -The current YAML follows the Governance-centric design (because that is what the self-assessment tool currently exercises). Resolving this is a working-group decision and will land in a future revision. - -## Scope - -The extension targets the following audiences: - -- **Certification Authority operators (CA / TSP)** — primary audience; most existing content reflects CA/TSP archetypes. -- **PKI architects and operators in enterprises** — assessing internal PKI quantum-readiness. -- **Auditors and consultants** — using the extension as part of broader PKI maturity engagements. - -Persona coverage for **certificate-consuming organizations**, **software vendors**, and **AI-system-layer cryptographic governance** is identified as a known gap and tracked for a later revision. - -## What the extension covers - -The four Governance categories receive full PQC-specific Level 1–5 criteria; the remaining modules are identified at an outline level only. - -### Governance — Module G - -#### Strategy and vision (G.strategy-and-vision) - -Strategic direction for PQC transition: executive sponsorship of the quantum threat, the Mosca inequality applied to data lifetimes, organizational persona per the Dutch Migration Handbook, board-level visibility, and budget for PQC activities. - -**Key transitions:** -- Level 2 → 3 — "Awareness to Action": formal strategy incorporation, executive sponsorship extended, working group established. -- Level 4 → 5 — "Execution to Leadership": competitive positioning, ecosystem contribution, crypto-agility as ongoing capability. - -#### Policies and documentation (G.policies-and-documentation) - -Policy framework for PQC: CP/CPS updates to incorporate NIST FIPS 203/204/205, deprecation schedules aligned with SP 800-131A Rev 3, hybrid-vs-pure PQC strategy, key management policy adjustments (larger keys, HSM support, stateful HBS state management), CBOM adoption, and multi-jurisdiction policy alignment (BSI / ANSSI hybrid versus CNSA 2.0 pure PQ). - -#### Compliance (G.compliance) - -Regulatory mapping and audit scope for PQC requirements: DORA ICT risk management (EU financial services from January 2025), eIDAS 2.0 cryptographic requirements, CNSA 2.0 timelines (US National Security Systems), NIS2 implementing measures, and the 18 EU Member States Joint Statement recommendations. Audit criteria evolution under WebTrust and ETSI scopes is tracked here. - -#### Processes and procedures (G.processes-and-procedures) - -Operational procedures transformed for PQC: key ceremony evolution (hybrid generation, quorum, HSM activation, stateful HBS state management), crypto-agility procedures per NIST CSWP 39, quantum risk assessment with Mosca inequality, change management for phased migration, incident response for cryptographic events, and extended segregation of duties for PQC-specific roles. - -### Modules M, O, R — outline only - -The following PQC-critical considerations are identified for the remaining modules. Full Level 1–5 development is pending. - -#### Management — Module M (PQC technical considerations) - -- **Key Management (M.key-management)** — algorithm inventory and CBOM generation; PQC key lifecycle (larger keys, longer generation times); stateful hash-based signature state management (XMSS, LMS); hybrid key management; HSM PQC algorithm support verification. -- **Certificate Management (M.certificate-management)** — hybrid certificate issuance (composite signatures, external keys); certificate validity periods versus algorithm security lifetimes; revocation strategy for quantum-vulnerable certificates; template updates; cross-certification for hybrid PKI. -- **Infrastructure Management (M.infrastructure-management)** — HSM firmware upgrade roadmaps; network capacity for larger PQC keys and signatures; storage for larger certificates; performance testing. -- **Change Management and Agility (M.change-management-and-agility)** — crypto-agility architecture enabling algorithm substitution; transition procedures; rollback for failed PQC deployments; configuration management for cryptographic parameters. - -#### Operations — Module O (PQC security considerations) - -- **Resilience (O.resilience)** — quantum threat in business continuity planning; recovery procedures for cryptographic compromise; redundancy for PQC algorithm availability. -- **Automation (O.automation)** — automated cryptographic inventory discovery; automated certificate replacement for PQC migration; CI/CD integration for PQC algorithm validation. -- **Interoperability (O.interoperability)** — PQC interoperability testing with relying parties; hybrid certificate compatibility verification; cross-vendor PQC algorithm interoperability; protocol-version negotiation. -- **Monitoring and Auditing (O.monitoring-and-auditing)** — algorithm usage monitoring and reporting; quantum-vulnerable algorithm detection; CBOM drift monitoring; audit trail for algorithm transitions. - -#### Resources — Module R (PQC people and sourcing considerations) - -- **Sourcing (R.sourcing)** — vendor PQC roadmap assessment in procurement; contract requirements for PQC support timelines; third-party certificate provider PQC readiness; supply-chain security for cryptographic components. -- **Knowledge and Training (R.knowledge-and-training)** — PQC technical training for PKI operations staff; executive education on quantum risk; certification programs incorporating PQC; knowledge transfer from PQC migration projects. -- **Awareness (R.awareness)** — organization-wide quantum-threat awareness; developer education on PQC implications; stakeholder communication for migration activities. - -## Product and service dependency - -Organizational PKI maturity depends on the readiness of products and services in the dependency chain — Certificate Authority software, HSMs, IAM platforms, cloud PKI offerings, application frameworks, IoT firmware. An organization can achieve Level 5 on internal governance while being blocked from PQC deployment by a critical vendor not supporting quantum-safe algorithms until later in the decade. - -The PKI Consortium's separate Post-Quantum Cryptography Maturity Model (PQCMM) assesses product / service PQC readiness. The PQC extension is designed to be used **alongside** PQCMM: the PKIMM extension scores the organization's governance and operational readiness; PQCMM scores the dependencies. Integration guidance is on the working group's roadmap. - -## YAML definition - -The machine-readable definition of the PQC Readiness Extension is in [`pqc-extension.yaml`](./pqc-extension.yaml). Tools consume the YAML directly; this page is the human-readable companion. The YAML is the canonical source for assessment use — the prose above is a summary. - -## References - -- **NIST FIPS 203 / 204 / 205** — ML-KEM, ML-DSA, SLH-DSA (August 2024) -- **NIST SP 800-131A Rev. 3** — Transitioning the Use of Cryptographic Algorithms and Key Lengths -- **NIST CSWP 39** — Considerations for Achieving Cryptographic Agility -- **NIST SP 800-208** — Stateful Hash-Based Signatures -- **CNSA 2.0** — NSA Commercial National Security Algorithm Suite 2.0 (2022) -- **Regulation (EU) 2022/2554 (DORA)** — Digital Operational Resilience Act -- **Regulation (EU) 2024/1183 (eIDAS 2.0)** -- **NIS2 Implementing Regulation 2024/2690** -- **18 EU Member States Joint Statement on Post-Quantum Cryptography** -- **Dutch PQC Migration Handbook** -- **CycloneDX Cryptography Bill of Materials (CBOM)** - -## Attribution - -This extension is based on the *Proposal for Post-Quantum Cryptography Readiness Extension to the PKI Maturity Model (PKIMM)* (Draft v1.3, December 2025) prepared for the PKI Consortium by Kennedy Nwup, Principal Consultant — Post-Quantum Cryptography & PKI Readiness, Afield AB. diff --git a/extensions/catalog/pqc/pqc-extension.yaml b/extensions/catalog/pqc/pqc-extension.yaml deleted file mode 100644 index f62c470..0000000 --- a/extensions/catalog/pqc/pqc-extension.yaml +++ /dev/null @@ -1,478 +0,0 @@ -schemaVersion: 1.0.0 -extension: - id: pqc - name: PQC Readiness Extension - version: 0.2.0 - description: Extends the assessment model with post-quantum cryptography (PQC) readiness criteria, maturity guidance, and PQC-specific requirement weight overlays to evaluate strategic, policy, compliance, and operational preparedness for quantum-safe PKI transition. - documentation: https://pkic.org/wg/pkimm/model/extensions/catalog/pqc/ - compatibility: - - 2.0.0 - floorScore: true -references: -- id: mosca-inequality - title: 'Mosca Inequality: Cryptographic Risk Timeline Framework' - authority: Michele Mosca (Academic) -- id: dutch-pqc-handbook - title: PQC Migration Handbook v2.0 - authority: Dutch NCSC/AIVD/TNO/CWI - url: https://publications.tno.nl/publication/34643386/fXcPVHsX/TNO-2024-pqc-en.pdf -- id: nist-fips-203 - title: NIST FIPS 203 - Module-Lattice-Based Key-Encapsulation Mechanism Standard (ML-KEM) - authority: NIST - url: https://csrc.nist.gov/pubs/fips/203/final -- id: nist-fips-204 - title: NIST FIPS 204 - Module-Lattice-Based Digital Signature Standard (ML-DSA) - authority: NIST - url: https://csrc.nist.gov/pubs/fips/204/final -- id: nist-fips-205 - title: NIST FIPS 205 - Stateless Hash-Based Digital Signature Standard (SLH-DSA) - authority: NIST - url: https://csrc.nist.gov/pubs/fips/205/final -- id: uk-ncsc-pqc-migration - title: Timelines for Migration to Post-Quantum Cryptography (2028/2031/2035 milestones) - authority: UK NCSC - url: https://www.ncsc.gov.uk/guidance/pqc-migration-timelines -- id: bsi-pqc-migration - title: Migration to Post-Quantum Cryptography - authority: BSI (Federal Office for Information Security, Germany) - url: https://www.bsi.bund.de/EN/Themen/Unternehmen-und-Organisationen/Informationen-und-Empfehlungen/Quantentechnologien-und-Post-Quanten-Kryptografie/Post-Quanten-Kryptografie/post-quanten-kryptografie_node.html -- id: anssi-pqc-position - title: Views on the Post-Quantum Cryptography Transition - authority: ANSSI (Agence nationale de la sécurité des systèmes d'information, France) - url: https://cyber.gouv.fr/en/publications/anssi-views-post-quantum-cryptography-transition -- id: etsi-tr-103-619 - title: ETSI TR 103 619 - Migration strategies for quantum-safe schemes - authority: ETSI -- id: nist-ir-8413 - title: NIST IR 8413 - Status Report on the Third Round of the NIST Post-Quantum Cryptography Standardization Process - authority: NIST - url: https://csrc.nist.gov/pubs/ir/8413/final -relevance: - modules: - - id: G - categories: - - id: strategy-and-vision - weight: 5 - guidance: | - Strategy and vision form the foundation for quantum-safe transition. Without executive sponsorship recognizing the quantum threat, PQC migration will lack resources and priority. The Dutch Migration Handbook identifies organizational personas ranging from 'unaware' to 'frontrunner,' with most European organizations currently in early awareness stages. Strategic planning must address the Mosca inequality: if data sensitivity lifespan plus migration time exceeds time until cryptographically relevant quantum computers (CRQC), action is required now. - assessment: | - Key Probes: - - Can executives articulate the quantum threat to PKI operations? - - Is PQC mentioned in strategic planning documents? - - Has the organization assessed its Mosca inequality position? - - What regulatory deadlines has the organization identified as applicable? - - Is budget allocated specifically for PQC activities? - - Critical Transitions: - - Level 2→3: 'Awareness to Action' - formal strategy incorporation, executive sponsorship extended, working group established - - Level 4→5: 'Execution to Leadership' - competitive positioning, ecosystem contribution, crypto-agility as ongoing capability - - Warning Signs: - - 'We'll address it when vendors are ready' - vendor timelines may not align with regulatory requirements - - No executive able to discuss quantum risk - indicates awareness gap at leadership level - - PQC treated as purely technical matter - missing governance and strategic dimensions - - Assuming extended timeline - UK NCSC sets migration milestones through 2028/2031/2035; financial sector guidance warns risk could materialize within 10-15 years or sooner - - Evidence Examples by Level: - - Level 2: Email/meeting notes showing PQC discussed; informal awareness materials - - Level 3: Board presentation on quantum risk; PQC working group charter; budget line item for PQC; Mosca analysis document - - Level 4: Quarterly PQC steering committee minutes; ERM risk register with quantum risk entry; KRI dashboard showing PQC metrics; multi-year migration budget approval - - Level 5: Published thought leadership; standards body participation records; regulator consultation responses; crypto-agility architecture documentation - references: [] - levels: - - number: 1 - name: Initial - description: | - - No awareness of quantum computing threat to PKI cryptographic foundations - - PKI strategy documents silent on algorithm longevity or transition planning - - Executive sponsors unaware of PQC as a strategic consideration - - No recognition that current cryptographic choices have finite security lifespan - - number: 2 - name: Foundational - description: | - - General awareness that quantum computing may impact cryptographic security - - PQC mentioned informally but not incorporated into PKI strategy - - Executive sponsors aware of quantum threat but not prioritizing action - - No formal assessment of organization's quantum risk exposure - - 'Wait and see' stance toward PQC standards and vendor solutions - - number: 3 - name: Advanced - description: | - - PKI strategy explicitly addresses PQC migration as strategic priority - - Executive sponsorship formally extended to cover quantum-safe transition - - Mosca inequality assessed for key data assets and certificate types - - Organization has identified its persona per Dutch Migration Handbook framework - - Strategic roadmap includes PQC milestones aligned to regulatory timelines - - Board/governance body briefed on quantum risk and migration requirements - - Budget allocation for PQC assessment and initial planning activities - - Cross-functional PQC working group or steering committee established - - number: 4 - name: Managed - description: | - - PQC migration fully integrated into PKI strategic planning cycle - - Executive sponsorship active and sustained (not just initial approval) - - Cascading sponsorship established across affected business units - - Quantum risk integrated into Enterprise Risk Management framework - - Key Risk Indicators (KRIs) defined for PQC migration progress - - Strategy reviewed and updated quarterly against regulatory developments - - Board receives regular quantum readiness updates as governance matter - - Multi-year budget secured for complete migration programme - - Strategy explicitly addresses hybrid vs pure PQ approach with rationale - - number: 5 - name: Optimized - description: | - - PQC strategy recognized as competitive differentiator and trust enabler - - Organization positioned as quantum-ready ahead of regulatory mandates - - Strategic planning anticipates cryptographic evolution beyond current PQC standards - - Executive sponsors actively engaged in industry PQC initiatives - - Contributing to standards development and industry best practices - - Strategy enables crypto-agility as ongoing capability, not one-time transition - - Proactive engagement with regulators on PQC implementation approaches - - Strategic partnerships with quantum-safe technology providers established - - id: policies-and-documentation - weight: 5 - guidance: | - RFC 3647 governs Certificate Policy and CPS structure. PQC migration requires fundamental policy updates: algorithm specifications must expand to include NIST FIPS 203/204/205 (ML-KEM, ML-DSA, SLH-DSA), deprecation schedules must align with SP 800-131A Rev 3 and regional requirements, hybrid vs pure PQC strategy must be documented, and Cryptographic Bill of Materials (CBOM) requirements are emerging as compliance necessity. - Multi-jurisdiction complexity creates policy challenges: European regulators (BSI, ANSSI) require hybrid signatures during transition, while CNSA 2.0 recommends pure PQ for US National Security Systems. Key management policies must address larger key sizes, HSM PQC support requirements, and stateful hash-based signature state management where applicable. - assessment: | - Key Probes: - - When was CP/CPS last updated? Does it reference PQC algorithms? - - Does approved algorithm list include deprecation dates? - - Can the organization produce a CBOM? - - How does Key Management Policy address PQC key sizes and HSM requirements? - - How are regional regulatory differences (EU hybrid vs US pure PQ) addressed? - - Warning Signs: - - CP/CPS last updated before August 2024 (pre-NIST standardization) - - Algorithm list lacks deprecation dates - - 'We'll update when vendors support PQC' - reactive rather than proactive stance - - No awareness of regional requirement differences - - CBOM mentioned but no artifacts produced - - Evidence Examples by Level: - - Level 2: Internal memo acknowledging CP/CPS needs updating; informal algorithm inventory - - Level 3: CP/CPS amendment project plan; approved algorithm list with PQC entries and deprecation dates; CBOM generation tool deployed; hybrid strategy decision document - - Level 4: Published CP/CPS with PQC provisions; algorithm governance meeting minutes; CBOM integrated with CI/CD pipeline; compliance audit report including algorithm verification - - Level 5: Policy templates shared with industry; algorithm governance anticipating draft standards; CBOM feeding into ERM dashboard; multi-jurisdiction policy variant management system - references: [] - levels: - - number: 1 - name: Initial - description: | - - CP/CPS silent on algorithm longevity or quantum vulnerability - - No approved algorithm list with deprecation schedules - - Key Management Policy does not reference algorithm transitions - - No CBOM or cryptographic inventory documentation exists - - number: 2 - name: Foundational - description: | - - Awareness that CP/CPS will need PQC updates, but no changes made - - Algorithm lists exist but without deprecation schedules or PQC additions - - No documented hybrid vs pure PQC strategy decision - - Cryptographic inventory exists informally but not in CBOM format - - Regional regulatory requirements not mapped to policy - - number: 3 - name: Advanced - description: | - - CP/CPS formally under review with PQC amendment project initiated - - Approved algorithm list explicitly includes: - - Current classical algorithms with deprecation dates aligned to SP 800-131A - - PQC algorithms (ML-KEM, ML-DSA, SLH-DSA) with implementation timeline - - Hybrid requirements per applicable regulatory framework - - Hybrid vs pure PQC strategy documented with regulatory rationale - - Key Management Policy updated for PQC considerations (larger keys, HSM support, stateful HBS state management) - - CBOM framework adopted; initial cryptographic inventory underway - - Multi-jurisdiction policy alignment documented - - number: 4 - name: Managed - description: | - - CP/CPS formally updated with PQC provisions published - - Algorithm governance process established with quarterly review and formal add/deprecate procedures - - CBOM generated and maintained, integrated with SDLC - - Policy compliance monitoring established (audits verify algorithm usage) - - Cross-functional policy governance (legal/compliance, architecture, procurement) - - number: 5 - name: Optimized - description: | - - Policy documentation treated as strategic asset enabling competitive positioning - - Algorithm governance anticipates regulatory changes through standards body participation - - CBOM integrated with ERM, supply chain security, incident response - - Policy enables crypto-agility (abstract specifications, modular structure, tested migration procedures) - - Multi-jurisdiction complexity managed proactively with maintained policy variants - - Contributing to ecosystem (policy templates shared, lessons learned published) - - id: compliance - weight: 5 - guidance: | - The regulatory landscape for PQC is evolving rapidly with binding requirements now in effect. DORA establishes comprehensive ICT risk management requirements for EU financial entities from January 2025, creating regulatory pressure for cryptographic resilience. The EU Coordinated Roadmap recommends PQC preparations by 2026 with critical infrastructure protection by 2030. The 18 EU Member States Joint Statement urges prioritization and roadmap development for PQC transition. CNSA 2.0 mandates PQC for US National Security Systems with preference by 2025, exclusive use by 2030-2035. - Industry standards are adapting: CA/Browser Forum S/MIME BR includes PQC algorithms (Ballot SMC013), ETSI ESI standards are updating for QSC/PQC, and WebTrust/ETSI audit criteria are evolving. Non-conformity with PQC requirements carries material risk: certificates issued today with quantum-vulnerable cryptography may be compromised before expiration. - assessment: | - Sector-Specific Considerations: - - Financial Services (EU): DORA compliance mandatory from January 2025 - - Trust Services (EU): eIDAS 2.0 wallet by 2026 creates implicit PQC requirements - - Critical Infrastructure: NIS2 and its implementing measures reinforce governance and control expectations for security measures including cryptography, creating indirect pressure for cryptographic agility - - Government/Defense: CNSA 2.0 timelines binding; agency-specific deadlines may be earlier - - Healthcare: Long data sensitivity horizons make HNDL threat particularly relevant - - Warning Signs: - - Compliance team cannot articulate DORA requirements or applicable PQC regulations - - No regulatory mapping document exists - - Audit scope unchanged since before August 2024 - - 'Waiting for auditors to tell us' - reactive compliance stance - - Multi-jurisdiction strategy absent - - Evidence Examples by Level: - - Level 2: Informal tracking of PQC regulatory developments; awareness communications - - Level 3: Regulatory mapping spreadsheet/document; gap analysis report; compliance roadmap with PQC milestones; audit criteria review request - - Level 4: Quarterly compliance status reports; third-party audit report including PQC scope; regulatory horizon scanning process documentation; trend analysis of algorithm-related non-conformities - - Level 5: Regulatory consultation submissions; standards body meeting attendance records; published compliance frameworks; cross-border compliance harmonization documentation - references: [] - levels: - - number: 1 - name: Initial - description: | - - No awareness of PQC-specific regulatory requirements - - Compliance framework does not reference quantum threats or PQC standards - - Audit scope does not include cryptographic algorithm assessment - - Non-conformity management does not track algorithm deprecation - - DORA ICT risk management implications not recognized (if applicable) - - number: 2 - name: Foundational - description: | - - General awareness that PQC compliance requirements are emerging - - No formal mapping of PQC requirements to compliance obligations - - Audit scope unchanged; PQC not included in audit criteria - - Non-conformity tracking does not distinguish quantum-vulnerable algorithms - - Industry standard updates (WebTrust, ETSI) tracked informally - - number: 3 - name: Advanced - description: | - - Formal regulatory mapping completed for applicable PQC requirements: - - DORA ICT risk management requirements (EU financial services) - - eIDAS 2.0 cryptographic requirements (EU trust services) - - CNSA 2.0 timeline (if US NSS-related operations) - - NIS2 Implementing Regulation 2024/2690 (if applicable) - - 18 EU Member States Joint Statement recommendations - - Gap analysis conducted against applicable requirements - - Compliance roadmap developed with PQC milestones aligned to regulatory deadlines - - Audit criteria review initiated (WebTrust/ETSI scope expansion for PQC) - - Non-conformity categories updated to include quantum-vulnerable algorithm usage - - Multi-jurisdiction compliance strategy documented - - number: 4 - name: Managed - description: | - - Active compliance program executing against PQC requirements - - Cryptographic risk monitoring process established aligned with DORA ICT risk requirements - - 'Leading practices and standards' tracking formalized - - Quarterly compliance status reporting to management - - Audit program includes PQC assessment: - - Algorithm compliance verification - - CBOM completeness assessment - - Hybrid/pure implementation verification - - Vendor compliance verification - - Third-party audit readiness demonstrated - - Non-conformity management mature with trend analysis - - Regulatory horizon scanning for emerging requirements - - number: 5 - name: Optimized - description: | - - Compliance program anticipates and shapes PQC regulation through: - - Regulatory consultations and standards development participation - - National cyber agency engagement - - Industry leadership and framework sharing - - Audit program sets industry benchmark (exceeds minimum requirements) - - Compliance integrated with ERM (quantum risk quantified, regulatory risk appetite defined) - - Continuous improvement with effectiveness metrics and post-regulatory change reviews - - Cross-border compliance excellence with harmonized approach and interoperability testing - - id: processes-and-procedures - weight: 5 - guidance: | - The transition to post-quantum cryptography transforms operational processes fundamentally. This is not merely an algorithm swap; it represents a multi-year major programme requiring new procedures across every PKI operational domain. - Key process considerations include: key ceremony evolution for PQC algorithms (larger keys, hybrid generation, stateful HBS state management), crypto-agility procedures per NIST CSWP 39, quantum risk assessment integration using the Mosca inequality framework, operational change management for phased migration, incident response for cryptographic events, and extended segregation of duties for PQC-specific roles. - assessment: | - Key Probes: - - Can the organization demonstrate a key ceremony script that includes PQC algorithms? - - How is quantum risk incorporated into the enterprise risk register? - - What is the documented time-to-transition for algorithm changes? - - How would the organization respond to a cryptanalytic breakthrough announcement? - - Who is the designated PQC migration lead? - - Warning Signs: - - Key ceremony scripts last updated before August 2024 - - 'We'll update procedures when we deploy PQC' - reactive stance - - Risk assessment treats quantum as distant future threat - - No designated migration lead or crypto-agility coordinator - - 'Our vendor will handle the transition' - outsourcing responsibility without oversight - - Evidence Examples by Level: - - Level 2: Email threads discussing PQC procedure updates; vendor roadmap documents collected - - Level 3: Updated key ceremony script with PQC algorithm support; Mosca analysis in risk register; documented migration lead role; crypto-agility procedure draft; incident response playbook with cryptographic scenarios - - Level 4: Completed PQC key ceremony records; quarterly quantum risk review minutes; time-to-transition metrics dashboard; tabletop exercise after-action reports; HSM firmware change records - - Level 5: Algorithm substitution drill results showing minutes-not-hours capability; automated non-compliant algorithm detection logs; published incident response playbooks; industry working group contributions - - Suggested KPIs for Level 4/5: - - Time-to-transition: Hours required to substitute algorithm across PKI - - Crypto inventory coverage: Percentage of systems with CBOM - - Incident response time: Hours from cryptographic event detection to containment - - Procedure currency: Days since last PQC procedure review - references: [] - levels: - - number: 1 - name: Initial - description: | - - Operational procedures do not reference PQC or quantum threats - - Key ceremony scripts unchanged from pre-PQC era - - Risk assessment methodology does not incorporate quantum threat modelling - - No crypto-agility procedures exist; algorithm changes require ad-hoc engineering - - Incident response procedures do not include cryptographic failure scenarios - - Segregation of duties does not address PQC-specific roles - - number: 2 - name: Foundational - description: | - - Awareness that operational procedures will require PQC updates - - Key ceremony scripts under informal review for PQC compatibility - - Risk assessment includes general awareness of quantum threat - - Crypto-agility recognized as requirement but no documented procedures - - Change management acknowledges PQC as future initiative - - HSM vendor roadmaps reviewed informally for PQC support timeline - - number: 3 - name: Advanced - description: | - - Key ceremony procedures formally updated for PQC: - - Scripts support hybrid key generation (classical + PQC simultaneous) - - Quorum requirements defined for PQC key material - - HSM initialization procedures include PQC algorithm activation - - Stateful HBS state management procedures documented (if applicable) - - Risk assessment methodology formally extended: - - Mosca inequality analysis incorporated for data prioritization - - Quantum risk categories integrated into existing risk register - - HNDL threat explicitly assessed for high-value data assets - - Crypto-agility procedures documented with algorithm substitution and rollback - - Change management integrates PQC migration changes with CAB process - - Incident response extended for cryptanalytic breakthrough and algorithm deprecation scenarios - - PQC-specific roles defined (migration lead, crypto-agility coordinator) - - Dual control requirements extended to PQC operations - - number: 4 - name: Managed - description: | - - Operational procedures actively supporting PQC migration execution - - Key ceremonies conducted with PQC algorithms (hybrid or pure per policy) - - Risk assessment continuous with quarterly quantum risk review - - Crypto-agility demonstrated through tested transitions and validated rollback - - Time-to-transition metrics established and monitored - - Change management mature with cross-functional CAB including crypto-competent reviewers - - Incident response tested through tabletop exercises including cryptographic scenarios - - Segregation of duties enforced and verified through audit - - number: 5 - name: Optimized - description: | - - Operational procedures embody crypto-agility as core design principle - - Algorithm substitution achievable in minutes, not hours - - Automated detection of non-compliant algorithm usage - - Risk assessment anticipates threat timeline evolution with scenario planning - - Change management enables rapid cryptographic changes with pre-approved templates - - Emergency change procedures for cryptographic incidents - - Incident response coordinated with external parties and national cyber agencies - - Contributing to industry procedure standards - - Procedures support crypto-agility beyond PQC for future algorithm transitions -overlays: - modules: - - id: G - categories: - - id: strategy-and-vision - requirements: - - id: sponsor-support - type: multiplier - multiplier: 2.0 - rationale: | - PQC requires active multi-year executive commitment, cascading sponsorship, quantum risk in ERM. These are new demands absent in classical PKI. - - id: responsible-leadership - type: multiplier - multiplier: 2.0 - rationale: | - PQC requires entirely new roles (migration lead, crypto-agility coordinator, steering committee) not present in classical PKI. - - id: scope-and-drivers - type: multiplier - multiplier: 2.0 - rationale: | - PQC introduces new business drivers (HNDL threat, Mosca inequality, regulatory timelines) absent in classical PKI. - - id: architecture - type: multiplier - multiplier: 2.5 - rationale: | - Extreme outlier. Base weight 1 (floor) yet hybrid vs pure PQ, algorithm selection, HSM compatibility are among the most consequential PQC decisions. Largest gap between base weight and PQC importance in Module 1. - - id: policies-and-documentation - requirements: - - id: policy-scope - type: multiplier - multiplier: 1.5 - rationale: | - Policy scope expands (multi-jurisdiction, PQC obligations) but the core activity remains 'define and document policy scope'. - - id: certificate-policy - type: multiplier - multiplier: 1.5 - rationale: | - CP requires fundamental rewrite for PQC: algorithm specifications, deprecation schedules, hybrid requirements, CBOM. Weight is max but PQC transforms what CP must contain. - - id: practice-statement - type: multiplier - multiplier: 1.5 - rationale: | - CPS requires new operational procedures for PQC: key ceremony scripts, HSM initialization, stateful HBS management. Weight is max but content changes fundamentally. - - id: disclosure-statement - type: multiplier - multiplier: 1.5 - rationale: | - Disclosure scope expands (relying parties need quantum readiness posture) but core activity remains 'publish disclosure.' Weight 4 already substantial. - - id: policy-review - type: multiplier - multiplier: 2.0 - rationale: | - PQC demands fundamentally new review discipline: quarterly algorithm governance with formal add/deprecate procedures. This is a new governance process, not faster review. - - id: compliance - requirements: - - id: compliance-policies - type: multiplier - multiplier: 2.0 - rationale: | - PQC introduces entirely new compliance domain: DORA quantum requirements, CNSA 2.0, eIDAS 2.0 crypto requirements. New obligations, not expanded existing ones. - - id: compliance-monitoring - type: multiplier - multiplier: 1.5 - rationale: | - Monitoring scope expands (PQC audit criteria, CBOM verification) but core activity remains 'operate compliance monitoring program'. - - id: compliance-responsibilities - type: multiplier - multiplier: 1.5 - rationale: | - Existing compliance roles expand to cover PQC obligations. New interfaces needed but responsibility assignment is the same core activity. - - id: regulatory-inventory - type: multiplier - multiplier: 1.0 - rationale: | - EXPLICITLY assigned 1.0x in v1.3 Section 7.1: 'Already highest weight.' PQC adds entries to the list but the activity of maintaining the list is unchanged. Framework confirms. - - id: processes-and-procedures - requirements: - - id: process-scope - type: multiplier - multiplier: 1.5 - rationale: | - Process scope expands to cover PQC activities but the core activity remains 'align process scope with policy scope'. - - id: process-documentation - type: multiplier - multiplier: 2.0 - rationale: | - PQC introduces fundamentally new processes: hybrid key ceremonies, Mosca analysis, crypto-agility with substitution/rollback. New processes, not expanded documentation. - - id: bau-execution - type: multiplier - multiplier: 1.0 - rationale: | - Timely execution remains 'execute recurring activities on time.' PQC adds urgency (ANSSI 2027, CNSA 2.0) but the nature of timely execution is unchanged. Weight at max. - - id: process-evidence - type: multiplier - multiplier: 2.0 - rationale: | - PQC introduces entirely new evidence categories: PQC key ceremony records, algorithm substitution drill results, CBOM artifacts, time-to-transition metrics. New evidence discipline. - - id: process-improvement - type: multiplier - multiplier: 2.0 - rationale: | - PQC demands fundamentally different review cadence. Evolving standards require near-continuous updates, not periodic review. diff --git a/extensions/catalog/templates/_index.md b/extensions/catalog/templates/_index.md deleted file mode 100644 index e3970ab..0000000 --- a/extensions/catalog/templates/_index.md +++ /dev/null @@ -1,70 +0,0 @@ ---- -date: "2026-05-13T7:00:00Z" -title: Extension documentation template -build: - render: never - list: never - ---- - -# Extension documentation template - -This document is a template for the documentation page of an extension in the [Extension catalog](../). Every extension's `_index.md` should follow the structure below so readers can quickly find the same information across extensions. - -## How to use this template - -- Copy this file to a new folder under `extensions/catalog//_index.md`. -- Place the corresponding `-extension.yaml` file in the same folder. -- Replace parts written in *italic* with the extension's actual content. -- Remove any sections that don't apply, but keep their headings unchanged when they do apply. -- Remove the `draft: true` front-matter flag once the page is ready to publish. -- Add the extension to the table in [`extensions/catalog/_index.md`](../). - ---- - -# *[Extension name]* - -*[One short paragraph stating the extension's purpose: what aspect of PKI maturity it covers and why it exists. Two to four sentences.]* - -*[A second short paragraph providing additional context — for example, the threat model it addresses, the regulatory drivers, or the use case where the extension is most useful.]* - -## Status - -*[State the maturity of the extension. Use one of the badges from the catalog (`Under development`, `Release candidate`, `Stable`, `Deprecated`).]* - -- **Complete** — *[Which modules / categories have full Level 1–5 criteria, assessor guidance, and overlay weights defined.]* -- **Outline** — *[Which modules / categories are identified but not yet fully developed.]* -- **YAML version** — *[The version field in the YAML, with a short note about what triggers a version bump.]* - -*[If there are unresolved design decisions or open questions that affect interpretation, list them here. Each item should be one or two sentences pointing at the trade-off.]* - -## Scope - -*[Who is the extension for? List the primary audiences (e.g., CA operators, PKI architects, auditors) and explicitly call out audiences that are NOT covered or are covered shallowly.]* - -## What the extension covers - -*[Section per PKI MM module that the extension addresses. For each category provide a 1–3 paragraph summary of what PQC-specific (or extension-specific) maturity looks like. The YAML is the canonical source of the Level 1–5 criteria — the prose here orients the reader.]* - -### *[PKI MM Module name]* - -#### *[Category N — name]* - -*[Short summary of how this extension's criteria differ from or extend the baseline PKI MM category. Keep this to a few sentences — the level criteria live in the YAML.]* - -*[Optional: highlight critical transitions, key probes, or evidence examples that don't fit cleanly into level criteria.]* - -## YAML definition - -The machine-readable definition of this extension is in [`-extension.yaml`](./-extension.yaml). Tools consume the YAML directly; this page is the human-readable companion. - -## References - -*[Bulleted list of standards, regulations, and other sources the extension draws on. Prefer authoritative primary sources (NIST, ETSI, ISO, regulatory texts).]* - -- *[Reference 1]* -- *[Reference 2]* - -## Attribution - -*[Optional. Credit the authors and contributors. Useful if the extension was prepared by an external party or working group sub-team.]* diff --git a/extensions/extension.schema-1.0.0.json b/extensions/extension.schema-1.0.0.json index 331dc29..16999d7 100644 --- a/extensions/extension.schema-1.0.0.json +++ b/extensions/extension.schema-1.0.0.json @@ -1,7 +1,7 @@ { "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "PKI MM Extension schema", - "description": "Schema for extensions to the PKI Maturity Model (extensions/catalog//-extension.yaml). See https://pkic.org/wg/pkimm/model/extensions/ for the framework documentation.", + "description": "Schema for extensions to the PKI Maturity Model. Extension definitions live in the pkimm-extensions repository (/-extension.yaml). See https://pkic.org/wg/pkimm/model/extensions/ for the framework documentation and https://pkic.org/wg/pkimm/extensions/ for the catalog.", "version": "1.0.0", "type": "object", "required": ["schemaVersion", "extension", "relevance", "overlays"], diff --git a/faq/_index.md b/faq/_index.md index 4b2bab0..d7cea74 100644 --- a/faq/_index.md +++ b/faq/_index.md @@ -57,7 +57,7 @@ Growing importance of PKI maturity assessment is also reflected in the increasin ## Where can I access the assessment tools? -Available assessment tools and resources can be found in the [Tools](../tools/) section of the PKI MM documentation. The tools include the PKI maturity assessment questionnaire, guidance on conducting the assessment, and templates for reporting the assessment results. +Available assessment tools and resources can be found via the [PKI maturity self-assessment](https://pkic.org/wg/pkimm/assessment/), the web-based tool that superseded the earlier Excel-based assessment tool (still available under the 1.0.0 tag / website section). The tools include the PKI maturity assessment questionnaire, guidance on conducting the assessment, and templates for reporting the assessment results. The tools are designed to help organizations assess the maturity of their PKI and identify areas for improvement and are updated regularly to reflect the latest best practices and industry standards. diff --git a/integrations/eramba/convert-yaml-data-to-csv-package-1.0.0.py b/integrations/eramba/convert-yaml-data-to-csv-package-1.0.0.py deleted file mode 100644 index 6e72d20..0000000 --- a/integrations/eramba/convert-yaml-data-to-csv-package-1.0.0.py +++ /dev/null @@ -1,80 +0,0 @@ -import yaml -import pandas as pd -import re -import jsonschema -import json - -# Load the YAML content from the uploaded file -model_version = '1.0.0' -file_path = f'../../data/pkimm-model-{model_version}.yaml' -with open(file_path, 'r') as file: - data = yaml.safe_load(file) - -# Sanity-check that the filename and the YAML's version field agree -if data.get('version') != model_version: - raise ValueError( - f"Version mismatch: filename declares {model_version}, " - f"YAML declares {data.get('version')!r}" - ) - -# Load the JSON schema from the uploaded file -schema_file_path = '../../data/pkimm-model.schema-1.0.0.json' -with open(schema_file_path, 'r') as schema_file: - schema = json.load(schema_file) - -# Validate the YAML content against the schema -try: - jsonschema.validate(data, schema) - print("Validation successful") -except jsonschema.ValidationError as e: - print(f"Validation error: {e.message}") - -# Function to clean the references by removing markdown links but keeping the text with dashes -def clean_references_preserve_text(ref): - # Replace markdown links with just the text inside the brackets - cleaned_references = re.sub(r'\[([^\]]+)\]\([^\)]+\)', r'\1', ref) - return cleaned_references - -# Prepare lists to hold the structured data for the CSV -chapters = [] -items = [] - -# Extract data according to the specified structure with the new Chapter ID and Item ID format -for module in data.get('modules', []): - module_id = module.get('id', '') - for category in module.get('categories', []): - chapter_id = f"{module_id}.{category.get('id', '')}" - chapter_name = category.get('name', '') - chapter_description = category.get('description', '') - for requirement in category.get('requirements', []): - item_id = f"{chapter_id}.{requirement.get('id', '')}" - item_name = requirement.get('description', '') - item_description = requirement.get('guidance', '') - assessment = requirement.get('assessment', '') - references = requirement.get('references', '') - clean_ref = clean_references_preserve_text(references) - item_additional_info = f"Assessment\n{assessment}\nReferences\n{clean_ref}" - - # Append the data to the lists - chapters.append([chapter_id, chapter_name, chapter_description]) - items.append([item_id, item_name, item_description, item_additional_info]) - -# Convert the lists to dataframes -chapters_df = pd.DataFrame(chapters, columns=["Chapter ID", "Chapter Name", "Chapter Description"]) -items_df = pd.DataFrame(items, columns=["Item ID", "Item Name", "Item Description", "Item Additional Information"]) - -# Since the chapter IDs and item IDs are structured, we can extract the chapter ID part from item ID -items_df['Chapter ID'] = items_df['Item ID'].apply(lambda x: '.'.join(x.split('.')[:-1])) - -# Merge the dataframes on Chapter ID to get the final structure -result_df = pd.merge(chapters_df, items_df, on="Chapter ID") - -# Remove duplicate rows from the dataframe -result_df.drop_duplicates(inplace=True) - -# Save the final dataframe to CSV without the header -csv_file_path_no_header = f'pkimm-{model_version}.csv' -result_df.to_csv(csv_file_path_no_header, index=False, header=False, lineterminator='\n') - -# Provide the path for download -csv_file_path_no_header diff --git a/integrations/eramba/convert-yaml-data-to-csv-package-2.0.0.py b/integrations/eramba/convert-yaml-data-to-csv-package-2.0.0.py deleted file mode 100644 index fa3e756..0000000 --- a/integrations/eramba/convert-yaml-data-to-csv-package-2.0.0.py +++ /dev/null @@ -1,96 +0,0 @@ -import yaml -import pandas as pd -import jsonschema -import json - -# Load the YAML content from the canonical data file -model_version = '2.0.0' -file_path = f'../../data/pkimm-model-{model_version}.yaml' -with open(file_path, 'r') as file: - data = yaml.safe_load(file) - -# Sanity-check that the filename and the YAML's version field agree -if str(data.get('version')) != model_version: - raise ValueError( - f"Version mismatch: filename declares {model_version}, " - f"YAML declares {data.get('version')!r}" - ) - -# Load the JSON schema -schema_file_path = '../../data/pkimm-model.schema-2.0.0.json' -with open(schema_file_path, 'r') as schema_file: - schema = json.load(schema_file) - -# Validate the YAML content against the schema -try: - jsonschema.validate(data, schema) - print("Validation successful") -except jsonschema.ValidationError as e: - print(f"Validation error: {e.message}") - -# Load the references catalog and build a lookup dict by id -refs_catalog = yaml.safe_load(open('../../data/pkimm-references.yaml'))['references'] -ref_by_id = {r['id']: r for r in refs_catalog} - - -def resolve_references(ref_ids): - """Resolve a list of catalog reference IDs into a formatted string matching - the 1.0.0 CSV style: one '- Title' line per reference (no URLs).""" - if not ref_ids: - return '' - lines = [] - for ref_id in ref_ids: - ref = ref_by_id.get(ref_id) - if ref: - lines.append(f"- {ref['title']}") - else: - lines.append(f"- {ref_id}") - return '\n'.join(lines) - - -# Prepare lists to hold the structured data for the CSV -chapters = [] -items = [] - -# Extract data according to the specified structure. -# Category IDs are kebab-case in 2.0.0; requirement IDs are also kebab-case. -# Level names are unprefixed (e.g. "Foundational"); the composed form would be -# "${number} - ${name}" but levels are not output as a column in the CSV. -for module in data.get('modules', []): - module_id = module.get('id', '') - for category in module.get('categories', []): - chapter_id = f"{module_id}.{category.get('id', '')}" - chapter_name = category.get('name', '') - chapter_description = category.get('description', '') - for requirement in category.get('requirements', []): - item_id = f"{chapter_id}.{requirement.get('id', '')}" - item_name = requirement.get('description', '') - item_description = requirement.get('guidance', '') - assessment = requirement.get('assessment', '') - references = requirement.get('references', []) - resolved_refs = resolve_references(references) - item_additional_info = f"Assessment\n{assessment}\nReferences\n{resolved_refs}" - - # Append the data to the lists - chapters.append([chapter_id, chapter_name, chapter_description]) - items.append([item_id, item_name, item_description, item_additional_info]) - -# Convert the lists to dataframes -chapters_df = pd.DataFrame(chapters, columns=["Chapter ID", "Chapter Name", "Chapter Description"]) -items_df = pd.DataFrame(items, columns=["Item ID", "Item Name", "Item Description", "Item Additional Information"]) - -# Extract the chapter ID part from item ID (everything before the last dot-segment) -items_df['Chapter ID'] = items_df['Item ID'].apply(lambda x: '.'.join(x.split('.')[:-1])) - -# Merge the dataframes on Chapter ID to get the final structure -result_df = pd.merge(chapters_df, items_df, on="Chapter ID") - -# Remove duplicate rows from the dataframe -result_df.drop_duplicates(inplace=True) - -# Save the final dataframe to CSV without the header -csv_file_path_no_header = f'pkimm-{model_version}.csv' -result_df.to_csv(csv_file_path_no_header, index=False, header=False, lineterminator='\n') - -# Provide the path for download -print(f"Output written to: {csv_file_path_no_header}") diff --git a/integrations/eramba/pkimm-1.0.0.csv b/integrations/eramba/pkimm-1.0.0.csv deleted file mode 100644 index 0222f53..0000000 --- a/integrations/eramba/pkimm-1.0.0.csv +++ /dev/null @@ -1,1960 +0,0 @@ -G.1,Strategy and Vision,"Trusted and secure PKI must be properly managed and supported by the organization. The existence of a strategy and vision for the PKI is one of the key factors for the success of the PKI and contributes to the overall maturity. The strategy and vision should be aligned with the organizational goals and approach and should be followed and measured regularly. - -Formal documentation about the business drivers, scope, and design of the PKI helps to ensure that the PKI is properly aligned and understood to support the organizational. The documentation should be reviewed and updated regularly to ensure that the PKI is aligned with the organizational goals and needs. - -Undefined or unclear understanding and leadership can cause loss of the established trust and can lead to the failure of the PKI quickly. -",G.1.1,Organizational sponsor and support,"The success of the PKI implementation highly depends on the organization top management support. Top management typically also acts as a sponsor of the PKI, meaning that they allocate and approve budget needed to build and maintain the PKI. - -The basic assumption is that the established digital trust is going to be maintained and developed for years, and therefore it is important to have a long-term vision and strategy for the PKI. The strategy and vision should be aligned with the overall organizational goals and approach. -","Assessment -The following is sample evidence that can be used to assess the requirement: -- Interview with the top management -- Documented strategy and vision -- Documented organizational goals and approach -- Understanding of why the PKI is needed and what is the value for the organization -- Support and sponsorship of the top management - -References -- ISO/IEC 27001 - Information security management systems -" -G.1,Strategy and Vision,"Trusted and secure PKI must be properly managed and supported by the organization. The existence of a strategy and vision for the PKI is one of the key factors for the success of the PKI and contributes to the overall maturity. The strategy and vision should be aligned with the organizational goals and approach and should be followed and measured regularly. - -Formal documentation about the business drivers, scope, and design of the PKI helps to ensure that the PKI is properly aligned and understood to support the organizational. The documentation should be reviewed and updated regularly to ensure that the PKI is aligned with the organizational goals and needs. - -Undefined or unclear understanding and leadership can cause loss of the established trust and can lead to the failure of the PKI quickly. -",G.1.2,Formal assignment of responsible leadership,"Proper leadership and responsible person should be assigned by the management to fulfil the role for the establishment, maintenance, and development of the PKI according to the strategy and vision. The responsible person should be able to make decisions and take actions to ensure the PKI is aligned with the organizational goals and needs. -","Assessment -The formal assignment of the responsible person should be documented and approved by the management. Formal document should contains identification of the person and understanding of the role and responsibilities. -Interview with the responsible person should confirm the understanding of the role and responsibilities, driving the PKI implementation according to the organizational strategy. - -References -- ISO/IEC 27001 - Information security management systems -" -G.1,Strategy and Vision,"Trusted and secure PKI must be properly managed and supported by the organization. The existence of a strategy and vision for the PKI is one of the key factors for the success of the PKI and contributes to the overall maturity. The strategy and vision should be aligned with the organizational goals and approach and should be followed and measured regularly. - -Formal documentation about the business drivers, scope, and design of the PKI helps to ensure that the PKI is properly aligned and understood to support the organizational. The documentation should be reviewed and updated regularly to ensure that the PKI is aligned with the organizational goals and needs. - -Undefined or unclear understanding and leadership can cause loss of the established trust and can lead to the failure of the PKI quickly. -",G.1.3,Scope and business drivers for PKI,"The scope of the PKI should be clearly defined and documented. The scope should be defined in terms of the use-cases that the PKI is going to support. Each use-case can have a different requirements and therefore different strategy. The use-cases should be defined in terms of the business drivers that are going to be supported by the PKI. Business drivers helps to document alignment with the overall organizational goals. - -The scope and business drivers can be considered as a formal high-level overview of the PKI strategy and vision. -Its purpose is also to create a common understanding of the organizational PKI and to provide direction for the detailed design and implementation. -The target audience consists typically of architects, experts, advisors, management, and sponsors. -","Assessment -The following is sample evidence that can be used to assess the requirement: -- Documented scope of the PKI -- Documented business drivers -- Documented use-cases -- Documented alignment with the organizational goals - -References -- ISO/IEC 27001 - Information security management systems -- The Open Group Architecture Framework (TOGAF) -" -G.1,Strategy and Vision,"Trusted and secure PKI must be properly managed and supported by the organization. The existence of a strategy and vision for the PKI is one of the key factors for the success of the PKI and contributes to the overall maturity. The strategy and vision should be aligned with the organizational goals and approach and should be followed and measured regularly. - -Formal documentation about the business drivers, scope, and design of the PKI helps to ensure that the PKI is properly aligned and understood to support the organizational. The documentation should be reviewed and updated regularly to ensure that the PKI is aligned with the organizational goals and needs. - -Undefined or unclear understanding and leadership can cause loss of the established trust and can lead to the failure of the PKI quickly. -",G.1.4,Architecture and design of the PKI,"The architecture and design of the PKI should be documented to provide a clear understanding of the implementation and technologies that are involved. The architecture and design should be aligned with the scope and business drivers for the PKI and should be reviewed and updated regularly. - -The architecture and design typically consists of the following: -- Functional and technical design description -- Description of logical components -- Network infrastructure design -- Technology involved -- Integration requirements and interfaces (APIs) -- Support systems (such as IAM, logging, monitoring, etc.) -- Operational requirements -- Security requirements -- Deployment options -- Staging and testing - -The architecture and design are further used for the implementation of the PKI and serves as an input for the PKI team. It can be also used for the procurement of the PKI components and services that are needed for the implementation. -","Assessment -The following is sample evidence that can be used to assess the requirement: -- Documented architecture and design -- Alignment with the scope and business drivers -- Interview with the PKI team to confirm the understanding of the architecture and design - -References -- ETSI EN 319 401 - General Policy Requirements for Trust Service Providers -- The Open Group Architecture Framework (TOGAF) -" -G.2,Policies and documentation,"Documented policies plays an important role in the secure and consistent management of the PKI. The goal is to minimize financial and operational threats and risks in the digital world. Well-described policies and security measures increase overall trust in the ecosystem of trust services and are a condition for successful operation. The basis for these matters lies in relevant laws and regulations, international standards and best practices. - -It consists of: -- formal policies and practice statements for supported PKI services and use-cases -- formal management of agreements between parties involved in the PKI -- certificate and key management rules -- roles and responsibilities in the management of the PKI -- documented disclosure statements -- maintenance and review of policies and documentation -- code of practice for information security management, techniques and risk management - -Properly documented policies keeps the PKI assets trusted over the time and serves as a basis for integrated processes and procedures. It is a living management system that is continuously updated and changed as technologies, security, and compliance requirements change. - -The Certificate Policy (CP) defines the overall policies and requirements of a PKI, the Certification Practice Statement (CPS) provides detailed operational procedures followed by the Certification Authority (CA), and the disclosure statement offers transparency about the CA's identity and services to relying parties. -",G.2.1,The scope of policies is defined and documented,"Each PKI implementation and use case is different, therefore it requires different care. The scope of policies that are applicable for the implementation should be defined and documented. When the proper description of the policies scope is provided, it helps all parties involved to understand the purpose of the policies and their applicability. - -The scope can include the following: -- Identification of the policies required for the implementation -- Reasoning why the policies are required or not required -- Structure of policies and documentation -- List of policies with references, versions, etc. -- Any other relevant information -","Assessment -- The scope of policies is defined and documented -- The scope of policies is complete -- Interview with the management and PKI responsible personnel to confirm the scope - -References -- RFC 3647 - Internet X.509 Public Key Infrastructure Certificate Policy and Certification Practices Framework -- ISO/IEC 27001 - Information security management systems -- ETSI EN 319 401 - General Policy Requirements for Trust Service Providers -" -G.2,Policies and documentation,"Documented policies plays an important role in the secure and consistent management of the PKI. The goal is to minimize financial and operational threats and risks in the digital world. Well-described policies and security measures increase overall trust in the ecosystem of trust services and are a condition for successful operation. The basis for these matters lies in relevant laws and regulations, international standards and best practices. - -It consists of: -- formal policies and practice statements for supported PKI services and use-cases -- formal management of agreements between parties involved in the PKI -- certificate and key management rules -- roles and responsibilities in the management of the PKI -- documented disclosure statements -- maintenance and review of policies and documentation -- code of practice for information security management, techniques and risk management - -Properly documented policies keeps the PKI assets trusted over the time and serves as a basis for integrated processes and procedures. It is a living management system that is continuously updated and changed as technologies, security, and compliance requirements change. - -The Certificate Policy (CP) defines the overall policies and requirements of a PKI, the Certification Practice Statement (CPS) provides detailed operational procedures followed by the Certification Authority (CA), and the disclosure statement offers transparency about the CA's identity and services to relying parties. -",G.2.2,Certificate policy is documented and published,"Certificate Policy (CP) is used to establish the controls of the issuing party and the roles and responsibilities of its entities for the specific PKI implementation and use case. It's used to provide assurance to partners and show the trustworthiness by the use of standards. It can be considered as a high level contract between the parties involved in the PKI and therefore should be published and available to all parties involved. - -CPs are described in a document form where the content may differ. Multiple policies can be part of a single document for different use cases. A CP contains a set of rules that indicates the applicability of a certificate to a particular community and/or class of applications with common security requirements or level of security (for instance certificates for the purpose of: persons, domains, organizations, authenticity and confidentiality, services). To uniquely identify the purpose of the certificates the CP contains unique numbers (Object Identifier, OID) which needs to be registered. - -In general a CP addresses the following items: -- Types of certificates -- Document name and identification -- PKI participants -- Certificate usage -- Policy administration -- Definitions -- Publication and repository responsibilities -- Identification and authentication -- Certificate life-cycle operational requirements -- Facility management and operational controls -- Technical security controls -- Certificate, CRL, and OCSP profiles -- Compliance audit and other assessments - - Other business and legal matters -","Assessment -- The CP is properly documented in its full scope -- The CP clearly defines the scope of the policy, such as the purpose of the security and assurance levels, the type and use of its certificates and parties involved -- The legal rights and responsibilities of parties are described in the CP -- CP has listed correct object identifiers for the purpose it's used for -- Verify that the CP is published and available to all parties involved -- Interview with the management and PKI responsible personnel to confirm the CP is accurate and followed - -References -- RFC 3647 - Internet X.509 Public Key Infrastructure Certificate Policy and Certification Practices Framework -- ISO/IEC 27001 - Information security management systems -- ETSI EN 319 411-1 - Policy and security requirements for Trust Service Providers issuing certificates -" -G.2,Policies and documentation,"Documented policies plays an important role in the secure and consistent management of the PKI. The goal is to minimize financial and operational threats and risks in the digital world. Well-described policies and security measures increase overall trust in the ecosystem of trust services and are a condition for successful operation. The basis for these matters lies in relevant laws and regulations, international standards and best practices. - -It consists of: -- formal policies and practice statements for supported PKI services and use-cases -- formal management of agreements between parties involved in the PKI -- certificate and key management rules -- roles and responsibilities in the management of the PKI -- documented disclosure statements -- maintenance and review of policies and documentation -- code of practice for information security management, techniques and risk management - -Properly documented policies keeps the PKI assets trusted over the time and serves as a basis for integrated processes and procedures. It is a living management system that is continuously updated and changed as technologies, security, and compliance requirements change. - -The Certificate Policy (CP) defines the overall policies and requirements of a PKI, the Certification Practice Statement (CPS) provides detailed operational procedures followed by the Certification Authority (CA), and the disclosure statement offers transparency about the CA's identity and services to relying parties. -",G.2.3,Certification practice statement is documented and published,"In addition to a CP, there is typically a Certification Practice Statement (CPS). While a CP is more at a strategic level, detailed information about how things should be carried out is part of a CPS (tactical level). The CP and CPS can be combined into a single managed document, however they are typically split for most of the PKI implementations for better orientation. - -The CPS covers the same items as the CP, but includes technical detail of how the CP is implemented. All parties involved in the PKI should be aware of the CPS and follow it. The CPS is a living document that is continuously updated and changed as technologies, security, and compliance requirements change. -","Assessment -- The CPS is properly documented in its full scope -- CPS is published and available to all parties involved -- Interview with the management and PKI responsible personnel to confirm the CPS is accurate and followed -- Confirm that the information in the CPS is consistent with the information in the CP - -References -- RFC 3647 - Internet X.509 Public Key Infrastructure Certificate Policy and Certification Practices Framework -- ISO/IEC 27001 - Information security management systems -- ETSI EN 319 411-1 - Policy and security requirements for Trust Service Providers issuing certificates -" -G.2,Policies and documentation,"Documented policies plays an important role in the secure and consistent management of the PKI. The goal is to minimize financial and operational threats and risks in the digital world. Well-described policies and security measures increase overall trust in the ecosystem of trust services and are a condition for successful operation. The basis for these matters lies in relevant laws and regulations, international standards and best practices. - -It consists of: -- formal policies and practice statements for supported PKI services and use-cases -- formal management of agreements between parties involved in the PKI -- certificate and key management rules -- roles and responsibilities in the management of the PKI -- documented disclosure statements -- maintenance and review of policies and documentation -- code of practice for information security management, techniques and risk management - -Properly documented policies keeps the PKI assets trusted over the time and serves as a basis for integrated processes and procedures. It is a living management system that is continuously updated and changed as technologies, security, and compliance requirements change. - -The Certificate Policy (CP) defines the overall policies and requirements of a PKI, the Certification Practice Statement (CPS) provides detailed operational procedures followed by the Certification Authority (CA), and the disclosure statement offers transparency about the CA's identity and services to relying parties. -",G.2.4,Disclosure statement is documented and published,"The disclosure statement (DS) is a document that describes the PKI and its services. It refers to a document that discloses the relevant information about the CA and its services to the relying parties. - -It typically includes information like: -- CA's identity, legal status, and contact information -- Certificate types, verification procedures and compliance with standards -- Reliance limits -- Obligations of the CA and the relying parties -- Warranty and liability limitations -- Agreement, CP and CPS -- Privacy policy -- Refund policy and claims -- Information on audit and compliance - -The purpose of a DS is to provide transparency to relying parties, allowing them to assess the trustworthiness and reliability of the CA before relying on its certificates. -","Assessment -- The DS is properly documented in its full scope -- DS is published and available to all parties involved -- Interview with the management and PKI responsible personnel to confirm the DS is accurate -- Confirm that the information in the DS is consistent with the information in the CP and CPS - -References -- ETSI EN 319 411-1 - Policy and security requirements for Trust Service Providers issuing certificates -" -G.2,Policies and documentation,"Documented policies plays an important role in the secure and consistent management of the PKI. The goal is to minimize financial and operational threats and risks in the digital world. Well-described policies and security measures increase overall trust in the ecosystem of trust services and are a condition for successful operation. The basis for these matters lies in relevant laws and regulations, international standards and best practices. - -It consists of: -- formal policies and practice statements for supported PKI services and use-cases -- formal management of agreements between parties involved in the PKI -- certificate and key management rules -- roles and responsibilities in the management of the PKI -- documented disclosure statements -- maintenance and review of policies and documentation -- code of practice for information security management, techniques and risk management - -Properly documented policies keeps the PKI assets trusted over the time and serves as a basis for integrated processes and procedures. It is a living management system that is continuously updated and changed as technologies, security, and compliance requirements change. - -The Certificate Policy (CP) defines the overall policies and requirements of a PKI, the Certification Practice Statement (CPS) provides detailed operational procedures followed by the Certification Authority (CA), and the disclosure statement offers transparency about the CA's identity and services to relying parties. -",G.2.5,Policies are periodically reviewed and updated,"Policies are living documents that are continuously updated and changed as technologies, security, and compliance requirements change. The policies should be reviewed and updated periodically. The frequency of review should be determined by the organization. Good practice is to review policies at least annually or when there are significant changes in the PKI or its environment. -","Assessment -- The policies are reviewed and updated periodically -- Check the last review date of the policies -- Implementation of review process -- Validation of documentation and reviews -- Interview with the management and PKI responsible personnel to confirm the policies are reviewed and updated periodically - -References -- RFC 3647 - Internet X.509 Public Key Infrastructure Certificate Policy and Certification Practices Framework -- ISO/IEC 27001 - Information security management systems -- ETSI EN 319 401 - General Policy Requirements for Trust Service Providers -" -G.3,Compliance,"Compliance refers to the ability of an organization to adhere to relevant laws, regulations, and standards related to the scope of the PKI. A properly implemented PKI Compliance program ensures that an organization's PKI is protected from threats and risks that could result in financial loss, reputational damage, legal liabilities, or eventually in the loss of trust. - -The compliance process helps to manage a PKI in a way that meets legal and regulatory requirements, and ensures information is used and protected appropriately, according to defined and documented policies and practices statements. - -Compliance is important for several reasons, including: -- It supports the risk management process associated with the PKI assets -- Minimize reputation issues that can lead to the loss of trust -- Provides assurance for the relying parties and subscribers -- Proves adherence to legal requirements - -Overall, compliance and related procedures help to ensure that the PKI is managed and maintained according to the relevant laws, regulations, and standards. This minimizes the risk of loss of trust and provides assurance to PKI participants. -",G.3.1,"Compliance policies are defined, implemented, and communicated","Compliance policies are a critical component of an organization’s risk management strategy to help ensure that the PKI system is secure, reliable, trustworthy, and meets any applicable regulatory requirements. - -By defining appropriate policies and related procedures and communicating these to all stakeholders who rely on the PKI, the organization can ensure that administrators, operators, and users are properly authenticated and authorized to access the system and that appropriate controls are in place to prevent unauthorized access or misuse of the PKI. - -Having a sound set of compliance policies defined, implemented, and communicated can help to demonstrate that the organization took reasonable steps to protect the PKI and may result in reduced legal liability in the event of a breach due to improper or malicious use of the PKI. - -The compliance policies typically include: -- Laws, industry regulations and government legislation that apply to the organization business and PKI -- Roles and responsibilities -- Compliance program management requirements -- Reporting and auditing requirements -- References to relevant documents (anti-trust, anti-fraud, anti-bribery, anti-money laundering, due diligence, etc.) -- Any other relevant information that rule compliance -","Assessment -- Documented audit and accountability policies -- Documented communication plan for informing stakeholders of the policies -- Formalized process for stakeholder acknowledgement upon receipt of the policies - -References -- ISO 37301 - Compliance management systems and related standard -- NIST Risk Management Framework -" -G.3,Compliance,"Compliance refers to the ability of an organization to adhere to relevant laws, regulations, and standards related to the scope of the PKI. A properly implemented PKI Compliance program ensures that an organization's PKI is protected from threats and risks that could result in financial loss, reputational damage, legal liabilities, or eventually in the loss of trust. - -The compliance process helps to manage a PKI in a way that meets legal and regulatory requirements, and ensures information is used and protected appropriately, according to defined and documented policies and practices statements. - -Compliance is important for several reasons, including: -- It supports the risk management process associated with the PKI assets -- Minimize reputation issues that can lead to the loss of trust -- Provides assurance for the relying parties and subscribers -- Proves adherence to legal requirements - -Overall, compliance and related procedures help to ensure that the PKI is managed and maintained according to the relevant laws, regulations, and standards. This minimizes the risk of loss of trust and provides assurance to PKI participants. -",G.3.2,A program to monitor compliance with the policies is established,"A PKI compliance monitoring program typically involves ongoing monitoring and testing of the controls and procedures to detect potential compliance violations associated with rules and regulations that govern the issuance, update, or revocation of certificates. - -These programs often include a risk assessment to identify and assess potential risks that could lead to non-compliance, including regulatory changes, operational changes, or employee turnover. - -The monitoring process may include reviewing documentation, conducting interviews with key stakeholders, and reporting any issues or compliance violations. Reporting from compliance monitoring should be communicated to those stakeholders who committed the violation(s) and those stakeholders who are empowered to take corrective action to address the violations observed. -","Assessment -- Documented practices regarding periodic and aperiodic compliance assessments -- Documented practices for regularly review and reporting of security issues -- Documented and implemented processes for investigation and response to suspicious activities - -References -- ISO 37301 - Compliance management systems and related standard -- NIST Risk Management Framework -" -G.3,Compliance,"Compliance refers to the ability of an organization to adhere to relevant laws, regulations, and standards related to the scope of the PKI. A properly implemented PKI Compliance program ensures that an organization's PKI is protected from threats and risks that could result in financial loss, reputational damage, legal liabilities, or eventually in the loss of trust. - -The compliance process helps to manage a PKI in a way that meets legal and regulatory requirements, and ensures information is used and protected appropriately, according to defined and documented policies and practices statements. - -Compliance is important for several reasons, including: -- It supports the risk management process associated with the PKI assets -- Minimize reputation issues that can lead to the loss of trust -- Provides assurance for the relying parties and subscribers -- Proves adherence to legal requirements - -Overall, compliance and related procedures help to ensure that the PKI is managed and maintained according to the relevant laws, regulations, and standards. This minimizes the risk of loss of trust and provides assurance to PKI participants. -",G.3.3,Responsibilities for the compliance are formally defined and assigned,"Within the organization, there should exist clear and well documented guidelines outlining which individual, group or team is responsible for ensuring that PKI policies are being followed. This applies to governance and oversight in addition to operational policies and procedures. - -Documenting specifically ""who"" shall be responsible for ensuring PKI policies are being enforced enhances accountability and trustworthiness of the PKI by enforcing the mentality that ""someone is watching"". This will help to mitigate risks associated with improper or malicious acts. -","Assessment -- For each defined procedure, a specific individual or team is identified and assigned to perform the tasks associated with the procedure -- Interview with the personnel to confirm understanding of the role and responsibilities - -References -- ISO 37301 - Compliance management systems and related standard -- NIST Risk Management Framework -" -G.3,Compliance,"Compliance refers to the ability of an organization to adhere to relevant laws, regulations, and standards related to the scope of the PKI. A properly implemented PKI Compliance program ensures that an organization's PKI is protected from threats and risks that could result in financial loss, reputational damage, legal liabilities, or eventually in the loss of trust. - -The compliance process helps to manage a PKI in a way that meets legal and regulatory requirements, and ensures information is used and protected appropriately, according to defined and documented policies and practices statements. - -Compliance is important for several reasons, including: -- It supports the risk management process associated with the PKI assets -- Minimize reputation issues that can lead to the loss of trust -- Provides assurance for the relying parties and subscribers -- Proves adherence to legal requirements - -Overall, compliance and related procedures help to ensure that the PKI is managed and maintained according to the relevant laws, regulations, and standards. This minimizes the risk of loss of trust and provides assurance to PKI participants. -",G.3.4,"List of relevant laws, regulations, and standards, exist and is maintained","To better understand the relevance to PKI, one should understand the differences between laws, regulations, and standards. - -Laws are legal rules that are enacted by a governing body, such as a federal, state or local government. They are binding and enforceable by the legal system within the jurisdiction of the governing body that enacted them. Violating law can lead to legal consequences, such as fines or imprisonment. - -Regulations are derived from laws and are often meant to supplement and clarify the broader provisions outlined in the laws. Compliance with regulations is mandatory and non-compliance can result in penalties or other legal consequences. - -Standards are voluntary guidelines or specifications typically established by a particular industry group or standards organization. Standards usually define best practices, technical specifications, quality benchmarks, and other criteria and are meant as a means of ensuring consistency, interoperability, and quality. Typically, compliance with standards is not legally required, however, lack of conformance to standards can lead to diminished interoperability and reduced trust. - -With respect to PKI, it is very important to understand what laws, regulations and standards are relevant to the PKI and its ancillary systems. For example, given that PKI involves cryptography, one must be certain to adhere to government laws regarding use and deployment of cryptographic products and solutions. - -And, many times, a PKI will make use of hardware cryptographic modules for key generation and storage. Therefore, it’s critical to ensure that the hardware cryptographic modules comply with the relevant standards. There are many laws, regulations and standards that apply to PKI. As such, it is necessary to maintain a list of the ones that are relevant to your organization to help ensure that none are being overlooked. -","Assessment -- Documented list of applicable laws, regulations and standards is maintained -- Procedures established for periodic review of the laws, regulations and standards -- Procedures established to remediate any deficiencies or non-compliance issues identified -- Procedures established to communicate results of the periodic reviews - -References -- ISO 37301 - Compliance management systems and related standard -- NIST Risk Management Framework -" -G.4,Processes and procedures,"Proper and effective processes and procedures related to PKI operations and management are essential for the successful implementation of the PKI. The processes and procedures should be aligned with the overall organizational policies and statements. - -Process is a set of activities that are performed in a specific order to achieve a specific goal. The process should be documented and measured. The process is also repeatable and can be improved over time, based on the evaluation, feedback, or risk assessment. The scope of the processes is defined by the policies. - -Procedure is a set of instructions that describe how to perform a specific task. The procedure should be also documented and can be used as a reference for the process. Procedure can include specific instructions for the process, such as how to perform a specific task, or how to use a specific tool. - -Processes and procedure typically cover (but are not limited to) the following areas: -- infrastructure management -- data privacy and security -- business continuity, disaster recovery, contingency planning -- supply chain management -- physical security and access control -- incident management -- audit and compliance, evidence and reporting, archiving -- risk management and assessment -",G.4.1,Scope of processes and procedure is aligned with policies,"The scope of the processes and procedures should be aligned with the policies and statements. Each implementation and use case can have different scope, but the scope should be defined and documented, with all applicable processes, procedures, and eventually instructions. - -The alignment with the policies helps to ensure that the processes and procedures are aligned with the PKI implementation goals and needs, and can be effectively trusted over the time. A simple matrix can be used to ensure that all applicable policies and statements are covered by the processes and procedures. - -The completeness of the processes and procedures can be evaluated by the risk assessment, audit, or by the feedback from the users. -","Assessment -The following is a sample evidence and information that can be collected during the assessment: -- Documented scope of the processes and procedures -- Alignment with the PKI policies and statements -- Interview with the PKI management - -References -- RFC 3647 - Internet X.509 Public Key Infrastructure Certificate Policy and Certification Practices Framework -- ISO/IEC 27001 - Information security management systems -" -G.4,Processes and procedures,"Proper and effective processes and procedures related to PKI operations and management are essential for the successful implementation of the PKI. The processes and procedures should be aligned with the overall organizational policies and statements. - -Process is a set of activities that are performed in a specific order to achieve a specific goal. The process should be documented and measured. The process is also repeatable and can be improved over time, based on the evaluation, feedback, or risk assessment. The scope of the processes is defined by the policies. - -Procedure is a set of instructions that describe how to perform a specific task. The procedure should be also documented and can be used as a reference for the process. Procedure can include specific instructions for the process, such as how to perform a specific task, or how to use a specific tool. - -Processes and procedure typically cover (but are not limited to) the following areas: -- infrastructure management -- data privacy and security -- business continuity, disaster recovery, contingency planning -- supply chain management -- physical security and access control -- incident management -- audit and compliance, evidence and reporting, archiving -- risk management and assessment -",G.4.2,Processes and procedures are formally documented and followed,"Identified processes and procedures needs to be properly designed and documented with all relevant information like scope, purpose, inputs, outputs, roles and responsibilities, and other. The processes and procedures should be also reviewed and approved by the management. -Once the processes and procedures are published, appropriate training is required to ensure they are followed by the PKI management and staff. Without following the processes and procedures, the PKI can be exposed to the risks and threats, and eventually lose any established trust. -","Assessment -The following is sample evidence and information that can be collected during the assessment: -- Documented processes and procedures -- Completeness of the processes and procedures documentation -- Evidence of the processes and procedures usage -- Interview with the PKI management and staff -- Training materials covering the processes and procedures - -References -- ISO/IEC 27001 - Information security management systems -- ENISA Publications -" -G.4,Processes and procedures,"Proper and effective processes and procedures related to PKI operations and management are essential for the successful implementation of the PKI. The processes and procedures should be aligned with the overall organizational policies and statements. - -Process is a set of activities that are performed in a specific order to achieve a specific goal. The process should be documented and measured. The process is also repeatable and can be improved over time, based on the evaluation, feedback, or risk assessment. The scope of the processes is defined by the policies. - -Procedure is a set of instructions that describe how to perform a specific task. The procedure should be also documented and can be used as a reference for the process. Procedure can include specific instructions for the process, such as how to perform a specific task, or how to use a specific tool. - -Processes and procedure typically cover (but are not limited to) the following areas: -- infrastructure management -- data privacy and security -- business continuity, disaster recovery, contingency planning -- supply chain management -- physical security and access control -- incident management -- audit and compliance, evidence and reporting, archiving -- risk management and assessment -",G.4.3,Recurring activities are executed on time,"Recurring activities are the activities that are performed on a regular basis, such as certificate management operations, backup procedures, security reviews, risk assessment, reviews of logs and security events, and other. - -Each activity should be tracked and have a frequency defined, for example, some activities may be performed daily, weekly, monthly, quarterly, or yearly. The activities should be performed on time, and any delays should be properly tracked and reported. - -Recurring activities needs to be incorporated into the processes and procedures to support the PKI implementation. -","Assessment -The following is sample evidence and information that can be collected during the assessment: -- Documented business as usual activities -- Evidence of the business as usual activities execution -- Business as usual activities tracking and reporting -- Calendar of activities -- Interview with the PKI management and staff - -References -- ISO/IEC 27001 - Information security management systems -- RFC 3647 - Internet X.509 Public Key Infrastructure Certificate Policy and Certification Practices Framework -" -G.4,Processes and procedures,"Proper and effective processes and procedures related to PKI operations and management are essential for the successful implementation of the PKI. The processes and procedures should be aligned with the overall organizational policies and statements. - -Process is a set of activities that are performed in a specific order to achieve a specific goal. The process should be documented and measured. The process is also repeatable and can be improved over time, based on the evaluation, feedback, or risk assessment. The scope of the processes is defined by the policies. - -Procedure is a set of instructions that describe how to perform a specific task. The procedure should be also documented and can be used as a reference for the process. Procedure can include specific instructions for the process, such as how to perform a specific task, or how to use a specific tool. - -Processes and procedure typically cover (but are not limited to) the following areas: -- infrastructure management -- data privacy and security -- business continuity, disaster recovery, contingency planning -- supply chain management -- physical security and access control -- incident management -- audit and compliance, evidence and reporting, archiving -- risk management and assessment -",G.4.4,Evidence from procedures is collected and maintained,"Each process, procedure, instruction, or activity would not be effective without evidence confirming that it was performed. The evidence should be descriptive with all relevant information, such as date and time, who performed the activity, what was the result, and other information, if needed. - -The evidence can be collected and maintained in various forms, such as logs, reports, notes, screenshots, etc. The evidence should be collected and maintained for the defined period of time, and should be available for the audit or other purposes. -","Assessment -The following is sample evidence and information that can be collected during the assessment: -- Evidence of the execution of the processes and procedures -- Interview with the PKI management and staff -- Logs, reports, notes, screenshots, and other evidence - -References -- ISO/IEC 27001 - Information security management systems -- RFC 3647 - Internet X.509 Public Key Infrastructure Certificate Policy and Certification Practices Framework -- ENISA Publications -" -G.4,Processes and procedures,"Proper and effective processes and procedures related to PKI operations and management are essential for the successful implementation of the PKI. The processes and procedures should be aligned with the overall organizational policies and statements. - -Process is a set of activities that are performed in a specific order to achieve a specific goal. The process should be documented and measured. The process is also repeatable and can be improved over time, based on the evaluation, feedback, or risk assessment. The scope of the processes is defined by the policies. - -Procedure is a set of instructions that describe how to perform a specific task. The procedure should be also documented and can be used as a reference for the process. Procedure can include specific instructions for the process, such as how to perform a specific task, or how to use a specific tool. - -Processes and procedure typically cover (but are not limited to) the following areas: -- infrastructure management -- data privacy and security -- business continuity, disaster recovery, contingency planning -- supply chain management -- physical security and access control -- incident management -- audit and compliance, evidence and reporting, archiving -- risk management and assessment -",G.4.5,Processes and procedures are reviewed and updated,"The processes and procedures should be reviewed and updated on a regular basis, based on the feedback, risk assessment, audit, or other. The review should be performed by the management, and the updates should be approved by the management. - -The review and update of the processes and procedures helps to keep the PKI implementation up to date, and helps to ensure that the processes and procedures are effective and efficient. -","Assessment -The following is sample evidence and information that can be collected during the assessment: -- Documented review and update process -- Evidence of the review and update of the processes and procedures -- Interview with the PKI management and staff - -References -- ISO/IEC 27001 - Information security management systems -- RFC 3647 - Internet X.509 Public Key Infrastructure Certificate Policy and Certification Practices Framework -- ENISA Publications -" -M.5,Key management,"Key management is the set of techniques and procedures supporting the establishment and maintenance of keying relationships between parties and components in the public key infrastructure. Key management encompasses techniques and procedures supporting: -- Initialization of system users and components; -- Generation, distribution, and installation of keying material; -- Controlling the use of keying material; -- Update, revocation, and destruction of keying material; and -- Storage, backup/recovery, and archival of keying material. - -The key management is important for the PKI to maintain trust. It should be an integral part of the PKI procedures. Proper key management is one of the basic stones on which the PKI stands and relies on. -",M.5.1,Key management roles and responsibilities are documented and formally assigned,"Proper definition of roles and responsibilities for key management operations establishes a good basis for accountability and auditing. The roles and responsibilities should follow key management policy, principles, and boundaries. - -Personnel should be formally assigned to the role based on appropriate skills, and background check to ensure that there are no external risks associated that can cause potential compromise of key management. - -Naming or assignment records should contain relevant information such as: -- Identification of personnel -- Role to be assigned -- Date of appointment -- Confirmation of required skills -- Acknowledgment of responsibilities -","Assessment -- Documented roles and responsibilities -- Signed naming protocol of personnel to role(s) -- Roles and responsibilities matrix (that may be used to cross-check if there are any conflicting roles) -- Validation of required knowledge and skills -- Review according to the key management policy - -References -- ISO/IEC 27001 and related standards -" -M.5,Key management,"Key management is the set of techniques and procedures supporting the establishment and maintenance of keying relationships between parties and components in the public key infrastructure. Key management encompasses techniques and procedures supporting: -- Initialization of system users and components; -- Generation, distribution, and installation of keying material; -- Controlling the use of keying material; -- Update, revocation, and destruction of keying material; and -- Storage, backup/recovery, and archival of keying material. - -The key management is important for the PKI to maintain trust. It should be an integral part of the PKI procedures. Proper key management is one of the basic stones on which the PKI stands and relies on. -",M.5.2,Inventory of cryptographic keys is documented and maintained,"Inventory of cryptographic keys is important and a strategic database for organizations to: -- Monitor cryptographic key status and compliance -- Quickly react to changes and incidents (deprecation of algorithms, compromise, new attacks and vulnerabilities) -- Understand impact of lifecycle changes, migration and use of keys - -Although the cryptographic key inventory may be implemented and maintained using various tools and approaches, it should serve the purpose of having a consistent and accurate map of all cryptographic keys deployed in the organization with details like algorithm, key length, usage, storage, location, generation and distribution method, backup and recovery, key check value, fingerprint, number of share or components, owner or responsible person, uniqueness, crypto-periods, or any other applicable attributes and properties of the key. - -Inventory should follow procedures and business as usual activities to keep it accurate and updated in time. -","Assessment -- Documented inventory of cryptographic keys -- Accuracy and consistency -- Completeness of inventory -- Validation of cryptographic key records - -References -- NIST SP 800-57 Recommendation for Key Management -- ISO/IEC 11770 Key Management -" -M.5,Key management,"Key management is the set of techniques and procedures supporting the establishment and maintenance of keying relationships between parties and components in the public key infrastructure. Key management encompasses techniques and procedures supporting: -- Initialization of system users and components; -- Generation, distribution, and installation of keying material; -- Controlling the use of keying material; -- Update, revocation, and destruction of keying material; and -- Storage, backup/recovery, and archival of keying material. - -The key management is important for the PKI to maintain trust. It should be an integral part of the PKI procedures. Proper key management is one of the basic stones on which the PKI stands and relies on. -",M.5.3,Inventory of cryptographic devices is documented and maintained,"Sensitive cryptographic keys are protected by hardware security modules that can have various forms and comply with security standards such as FIPS 140-3 or Common Criteria Protection Profiles. The keys may be in some case software-protected when there is no high risk associated with its compromise. - -The approved ways of protecting cryptographic keys should have defined rules, which can be specified by the key management policy and followed using the key management procedures. Cryptographic devices that protect keys may be quickly identified using the inventory of cryptographic keys with reference to an inventory of cryptographic devices. - -The inventory of cryptographic devices should contain relevant information such as: -- Vendor and device model identification -- Serial numbers -- Hardware / firmware / software versions -- Security certification and expiration dates -- Locations -","Assessment -- Documented requirements for cryptographic devices -- Documented inventory of cryptographic devices -- Completeness, accuracy, and consistency of inventory -- Validation of records - -References -- NIST SP 800-57 Recommendation for Key Management -- ISO/IEC 11770 Key Management -" -M.5,Key management,"Key management is the set of techniques and procedures supporting the establishment and maintenance of keying relationships between parties and components in the public key infrastructure. Key management encompasses techniques and procedures supporting: -- Initialization of system users and components; -- Generation, distribution, and installation of keying material; -- Controlling the use of keying material; -- Update, revocation, and destruction of keying material; and -- Storage, backup/recovery, and archival of keying material. - -The key management is important for the PKI to maintain trust. It should be an integral part of the PKI procedures. Proper key management is one of the basic stones on which the PKI stands and relies on. -",M.5.4,Each cryptographic key is defined and has documented lifecycle procedures,"Each cryptographic key type that is defined and used for specific use-case should have a complete description of its lifecycle. Each lifecycle phase has a proper description of the process and is backed up with the procedure that is executed when needed. - -The key can have various lifecycle phases, such as generation, registration, initialization, distribution, loading, storage, archiving, backup, recovery, revocation, removal, destruction, or others applicable for the key. - -The lifecycle phases contains appropriate description of the procedure such as: -- Prerequisites for execution -- Required roles and permissions -- Procedure and records -","Assessment -- Examine the definition of cryptographic key -- Documented key lifecycle phases -- Documented procedures and related records for the key lifecycle -- Lifecycle is integrated and followed in the organization - -References -- NIST SP 800-57 Recommendation for Key Management -- ISO/IEC 11770 Key Management -" -M.5,Key management,"Key management is the set of techniques and procedures supporting the establishment and maintenance of keying relationships between parties and components in the public key infrastructure. Key management encompasses techniques and procedures supporting: -- Initialization of system users and components; -- Generation, distribution, and installation of keying material; -- Controlling the use of keying material; -- Update, revocation, and destruction of keying material; and -- Storage, backup/recovery, and archival of keying material. - -The key management is important for the PKI to maintain trust. It should be an integral part of the PKI procedures. Proper key management is one of the basic stones on which the PKI stands and relies on. -",M.5.5,Cryptographic cipher suites and protocols are documented and maintained,"Protocols and encryption strengths may quickly change or be deprecated due to identification of vulnerabilities or design flaws. In order to support current and future data security needs, the organization should know where cryptography is used and understand how they would be able to respond rapidly to changes impacting the strength of their cryptographic implementations. - -Specific rules and boundaries to be applied for cryptographic cipher suites and protocols should be documented in encryption management policy that reflect the current status of cryptography practice. - -Cipher suites and protocols should be regularly checked against the implemented technology and configuration. Any deviation from the documented and allowed protocols should be fixed. -","Assessment -- Documented encryption management policy -- Validation of implementation and used protocols against what is documented -- Accuracy of the description -- Security and vulnerabilities of applicable cipher suites and protocols - -References -- NIST SP 800-57 Recommendation for Key Management -- ISO/IEC 11770 Key Management -- NIST SP 800-131A Transitioning the Use of Cryptographic Algorithms and Key Lengths -" -M.5,Key management,"Key management is the set of techniques and procedures supporting the establishment and maintenance of keying relationships between parties and components in the public key infrastructure. Key management encompasses techniques and procedures supporting: -- Initialization of system users and components; -- Generation, distribution, and installation of keying material; -- Controlling the use of keying material; -- Update, revocation, and destruction of keying material; and -- Storage, backup/recovery, and archival of keying material. - -The key management is important for the PKI to maintain trust. It should be an integral part of the PKI procedures. Proper key management is one of the basic stones on which the PKI stands and relies on. -",M.5.6,Key management is periodically reviewed and updated,"Key management policy, processes and procedures related to cryptographic keys, inventory and lifecycle should be periodically reviewed, updated and approved. The frequency of review should be based on the organizational risks and needs to be protected against current and future trends. - -Periodical review helps to keep the key management accurate and helps to maintain required skills and knowledge. -It provides assurance that the expected controls are active and working as intended. -","Assessment -- Risk management and review frequency -- Implementation of review process -- Validation of documentation and reviews - -References -- ISO/IEC 27001 and related standards -" -M.6,Certificate management,"Certificate management is the set of techniques and procedures supporting certificate lifecycle management. Certificate management encompasses techniques and procedures supporting: -- Definition of certificate profiles -- Generation of certificates -- Installation and orchestration of certificates -- Inventory of certificates -- State management of certificates, i.e. expiration and revocation -- Discovery of certificates - -The techniques can be applied to an organization that makes use of PKI, or from an organization (or part of an organization) that operates a PKI for others. This category primarily targets an organization from a usage perspective, albeit the certificate lifecycle management is equally important for an organization that operates a PKI for someone else. -",M.6.1,Certificate profiles are documented,"Certificate profiles specify the contents of certificates for one or more use cases. It defines things such as: -- Certificate use case(s) for certificates covered by specific profiles -- Naming standards for subject distinguished name and subject alternative names, which are allowed and mandatory fields. -- Certificate validity periods -- Certificate extensions, mandatory and allowed extensions, their criticality and possible values -- Allowed key types and signature algorithms -- Revocation profiles, i.e. CRL and/or OCSP -","Assessment -- Documented scope of applicability -- Documented and approved certificate profiles -- Content of the profiles is complete and unambiguous -- Certificate profiles are implemented in certificattion authority -- Certificate profiles are enforced by certification authority -- Certificate profiles are compatible with RFC5280, or deviations are well documented -- Profiles for CRLs and/or OCSP usage, i.e. validity periods, issuance intervals, max revocation time delay, etc - -References -Most certificate profiles aim for compatibility with RFC 5280 for maximum interoperability. Some examples of specific profiles are given below. -- RFC 5280 - Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile -- CA/B Forum baseline requirements -- ETSI Qualified Certificate Profiles -- ETSI 319-411-1 -- ETSI 319-411-2 -- 3GPP 33.310 - Network Domain Security (NDS); Authentication Framework (AF) -- UNISIG SUBSET-137 -" -M.6,Certificate management,"Certificate management is the set of techniques and procedures supporting certificate lifecycle management. Certificate management encompasses techniques and procedures supporting: -- Definition of certificate profiles -- Generation of certificates -- Installation and orchestration of certificates -- Inventory of certificates -- State management of certificates, i.e. expiration and revocation -- Discovery of certificates - -The techniques can be applied to an organization that makes use of PKI, or from an organization (or part of an organization) that operates a PKI for others. This category primarily targets an organization from a usage perspective, albeit the certificate lifecycle management is equally important for an organization that operates a PKI for someone else. -",M.6.2,Certificate cipher suites are documented,"Cipher suites, for certificates specifically defining key algorithms, key security levels and signature algorithms are important to be crypto agile. For example, the change of the cipher suites can be required when the cryptographic algorithm becomes broken, or deprecated. An organization should have a clear rationale to the usage of specific algorithms, and how long they will be valid and what may replace them in the future. -","Assessment -- Determine the scope of applicability -- Documented and approved cipher suites with rationale for inclusion of algorithms -- Documented agile path for migration to other algorithms when needed -- Cipher suites are enforced by certification authority - -References -- RFC 5280 - Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile -- SOG-IS crypto algorithms -- NIST Suite B -- NIST approved algorithms CNSA 2.0 -- NIST SP 800-208 - Recommendation for Stateful Hash-Based Signature Schemes -" -M.6,Certificate management,"Certificate management is the set of techniques and procedures supporting certificate lifecycle management. Certificate management encompasses techniques and procedures supporting: -- Definition of certificate profiles -- Generation of certificates -- Installation and orchestration of certificates -- Inventory of certificates -- State management of certificates, i.e. expiration and revocation -- Discovery of certificates - -The techniques can be applied to an organization that makes use of PKI, or from an organization (or part of an organization) that operates a PKI for others. This category primarily targets an organization from a usage perspective, albeit the certificate lifecycle management is equally important for an organization that operates a PKI for someone else. -",M.6.3,Certificate lifecycle management is documented,"Issuance of certificates follow specific procedures, be it manual processes or automated processes using standard or non-standard PKI protocol. An organization should be clear about the full life cycle management of certificates: -1. Certificate Application and the validation procedures used, by RAs and CAs -2. Certificate Issuance and protocols used for enrollment, on-line and off-line -3. Certificate Renewal, Re-key and Modification, upon expiration or other causes - - Process of monitoring certificates for expiration and timely renewal processes prevent common issues -4. Certificate Revocation - - When certificates need to be revoked it is important to have a well-defined certificate revocation process: - - How subjects can request a certificate be revoked - - How to report misuse of certificates - - Expected time for revocation to be completed after a revocation request -5. Certificate status dissemination - - How revocation information is disseminated to relying parties -6. Key escrow and recovery -7. Trust anchor management - - Trust anchors on machines and devices are a key point of trust management in the organization. Unmanaged trust stores can cause both outages and security issues. -","Assessment -- Documented application and validation rules -- Documented process for issuing certificates - - configuration of protocols -- Documented Certificate Acceptance and certificate subject installation procedures -- Documented renewal criteria, where re-key is nessecary and which certificate modifications are allowed - - Documented criticality of expiration for different use cases - - Automated monitoring and alerting of expiration for critical systems - - Automated certificate renewal -- Documented revocation process - - Documented revocation procedures, both for subjects and administrators - - If suspension is used the process to lift (or remove) suspension - - Documented contact points for reports in the organizations or from relying parties - - List of relying parties that depend on updated revocation information -- Documented Certificate status service - - OCSP and/or CRLs - - Documentation how relying parties get access to revocation information -- Documented process for key escrow and recovery when encryption keys need to be stored centrally -- Documented trust anchor management - - Distribution of new and updated trust anchors (Root CA certificates) - -References -Examples of process, protocols and profiled usage: -- RFC 4210 - Internet X.509 Public Key Infrastructure Certificate Management Protocol (CMP) -- CA/B Forum baseline requirements -- 3GPP 33.310 - Network Domain Security (NDS); Authentication Framework (AF) -- UNISIG SUBSET-137 -" -M.6,Certificate management,"Certificate management is the set of techniques and procedures supporting certificate lifecycle management. Certificate management encompasses techniques and procedures supporting: -- Definition of certificate profiles -- Generation of certificates -- Installation and orchestration of certificates -- Inventory of certificates -- State management of certificates, i.e. expiration and revocation -- Discovery of certificates - -The techniques can be applied to an organization that makes use of PKI, or from an organization (or part of an organization) that operates a PKI for others. This category primarily targets an organization from a usage perspective, albeit the certificate lifecycle management is equally important for an organization that operates a PKI for someone else. -",M.6.4,Inventory of issued certificates is documented,"Certificate inventory consists of all known certificates and provides an overview of known certificates in the organization. Certificates in inventory are subject to certificate lifecycle management. The certificate inventory is important for the organization because: -- It provides immediate access to the current status of certificates -- Provides possibility to react on certificate-related events (compromise, change, expiration, etc.) -- Understand impact of lifecycle changes -- It gives information on all locations of certificates -- Can enforce and maintain ownership of certificates - -The certificate inventory therefore consists of information related to certificate like certificate attributes, validity and validation information, fingerprint and serial number, trust chain, owner, public key, signature algorithm, certificate type, compliance information, certificate locations, change history, or any other attributes and properties of the certificates that is required. -","Assessment -- Documented inventory - - How inventory is maintained across the organization -- Documented certificate inventory management -- Validation of certificate inventory records -- Effectiveness of the certificate inventory implementation - -References -- RFC 3647 - Internet X.509 Public Key Infrastructure - Certificate Policy and Certification Practices Framework - Certificate Life-Cycle Operational Requirements -- NIST SP 800-57 Part 1 Rev. 5 - certificate inventory management -" -M.6,Certificate management,"Certificate management is the set of techniques and procedures supporting certificate lifecycle management. Certificate management encompasses techniques and procedures supporting: -- Definition of certificate profiles -- Generation of certificates -- Installation and orchestration of certificates -- Inventory of certificates -- State management of certificates, i.e. expiration and revocation -- Discovery of certificates - -The techniques can be applied to an organization that makes use of PKI, or from an organization (or part of an organization) that operates a PKI for others. This category primarily targets an organization from a usage perspective, albeit the certificate lifecycle management is equally important for an organization that operates a PKI for someone else. -",M.6.5,Certificate discovery process is documented,"Certificate discovery process protects an organization from unknown certificates that may be deployed in the infrastructure. Unknown certificates may be further issued by unauthorized certification authorities and mislead users of services. Certificate discovery helps to maintain current inventory of certificates, but does not depend on the inventory and is not nessecary to maintain an inventory. Certificate discovery process should be implemented based on supported certificates and use-cases, for example: -- To scan the network for certificates used on known protocols and ports to discover certificates that can potentially cause service outage or breach -- Search for the certificates on file system to discover unauthorized or unsecured certificates - -Discovery process should be run frequently on the specified locations and the certificate inventory should be updated based on the results of the certificate discovery to keep it current. -","Assessment -- Documented certificate discovery requirements -- Documented certificate discovery process and frequency -- The supporting tools for the certificate discovery -- Certificate inventory is updated with discovered certificates - -References -N/A -" -M.6,Certificate management,"Certificate management is the set of techniques and procedures supporting certificate lifecycle management. Certificate management encompasses techniques and procedures supporting: -- Definition of certificate profiles -- Generation of certificates -- Installation and orchestration of certificates -- Inventory of certificates -- State management of certificates, i.e. expiration and revocation -- Discovery of certificates - -The techniques can be applied to an organization that makes use of PKI, or from an organization (or part of an organization) that operates a PKI for others. This category primarily targets an organization from a usage perspective, albeit the certificate lifecycle management is equally important for an organization that operates a PKI for someone else. -",M.6.6,Certificate management is periodically reviewed and updated,"No certificate issuance and management system works over long periods of time without changes to use-cases, processes, protocols and algorithms. It is important that the certificate management is periodically reviewed and updated to avoid gaps. The frequency of review should be based on the organizational risks and needs to be protected against current and future trends. - -Periodical review helps to keep the certificate management accurate and helps to maintain required skills and knowledge. -It provides assurance that the expected controls are active and working as intended. -","Assessment -- Documented process for reviewing the certificate management process and systems -- Ability to implement updates to certificate management system -- Document management system and validation of review - -References -- ISO/IEC 27001 and related standards -" -M.6,Certificate management,"Certificate management is the set of techniques and procedures supporting certificate lifecycle management. Certificate management encompasses techniques and procedures supporting: -- Definition of certificate profiles -- Generation of certificates -- Installation and orchestration of certificates -- Inventory of certificates -- State management of certificates, i.e. expiration and revocation -- Discovery of certificates - -The techniques can be applied to an organization that makes use of PKI, or from an organization (or part of an organization) that operates a PKI for others. This category primarily targets an organization from a usage perspective, albeit the certificate lifecycle management is equally important for an organization that operates a PKI for someone else. -",M.6.7,Organizational PKI governance,"Large organizations commonly have several PKI systems spread out in the organization. Some can be consolidated, but in many cases different PKI silos exists for good reasons. Having a central governance of PKIs across the organization will help to maintain best practices, ensure secure PKI operations, re-use PKI knowledge in the organization, ensure consistent profiles and avoid unnecessary duplication of effort. -","Assessment -- Documented PKIs used in the organization - - Different PKI technologies used - - Installed PKI instances -- Documented PKI best practices - - Installation procedures to avoid re-learning the same issues in different parts of the organization - - Configuration to ensure consistent and interoperable certificates where applicable - - Security to maintain a security base line across the whole organization - -References -N/A -" -M.7,Infrastructure management,"The PKI implementation is a combination of software, hardware, network service, and resources that are needed to operate and manage the environment. -The environment can be hosted on-premise, in the cloud, or in a hybrid environment. - -Independent of the hosting model, the PKI environment needs to be properly managed and maintained, which requires resources and processes. -The infrastructure management refers to management of the technical and operational components of the PKI environment, which includes software, hardware, network, equipment, facilities, and other related resources. - -The PKI components may be distributed across multiple locations and managed by different teams. Therefore, it is important to have a clear description of the operational infrastructure with all dependencies and prerequisites. The infrastructure management should be aligned with the overall strategy of the organization and the scope of the PKI. - -When the infrastructure and environment where the PKI is implemented are not effectively managed and maintained, the complexity of the environment increases and the risk of failure increases as well. The infrastructure is often one of the key targets for attackers, therefore it is important to ensure that it is properly secured and available. -",M.7.1,Network and deployment infrastructure is documented,"The network and deployment documentation of the infrastructure should be aligned with the architecture and design of the PKI. In other terms, it provides details about how the implementation is done in the real environment. - -The network and deployment infrastructure should be properly documented and maintained. The documentation should include the following: -- PKI components and their dependencies -- Facilities and equipment -- Deployment infrastructure description -- Clustering and load balancing -- Network topology and diagram -- Communication and open ports requirements -- Supporting cloud providers and services -- Supporting systems and services (identity management, access control, logging, monitoring, etc.) -","Assessment -The following is sample evidence that can be used to assess the requirement: -- Network topology and diagram -- Deployment documentation -- Sample configuration of network to compare with the documentation -- Integration with supporting and other systems -- Interview with the network administrators - -References -- ISO/IEC 20000 and related standards -- ISO/IEC 27001 - Information security management systems -- Guidance for Containers and Container Orchestration Tools -" -M.7,Infrastructure management,"The PKI implementation is a combination of software, hardware, network service, and resources that are needed to operate and manage the environment. -The environment can be hosted on-premise, in the cloud, or in a hybrid environment. - -Independent of the hosting model, the PKI environment needs to be properly managed and maintained, which requires resources and processes. -The infrastructure management refers to management of the technical and operational components of the PKI environment, which includes software, hardware, network, equipment, facilities, and other related resources. - -The PKI components may be distributed across multiple locations and managed by different teams. Therefore, it is important to have a clear description of the operational infrastructure with all dependencies and prerequisites. The infrastructure management should be aligned with the overall strategy of the organization and the scope of the PKI. - -When the infrastructure and environment where the PKI is implemented are not effectively managed and maintained, the complexity of the environment increases and the risk of failure increases as well. The infrastructure is often one of the key targets for attackers, therefore it is important to ensure that it is properly secured and available. -",M.7.2,Separation and segmentation principles are applied,"The PKI environment should be properly separated and segmented from other environments and systems. The separation and segmentation should be applied on all levels, including network, infrastructure, and application. The separation and segmentation should be applied based on the security requirements and risk assessment. -Segmentation isolates the PKI environment from the remaining environment and reduces the risk of unauthorized access and data leakage. It also helps to reduce the impact of a potential compromise of the PKI environment from other systems and environments. Segmentation can be achieved using a number of physical or logical methods, such as: -- Properly configured internal network security controls -- Routers with strong access control lists -- Other technologies that restrict access to a particular segment of a network -For the proper maintenance of the infrastructure and deployed PKI components, the staging/testing environment should be available in the same configuration as the production environment. If needed, development environments can be used for testing and development purposes. -Production, staging, and development environments should be logically separated and isolated from each other, including the data that is used in the environments. -","Assessment -The following is sample evidence that can be used to assess the requirement: -- Network topology and diagram -- Implementation of network isolation -- Separation of production and testing environments -- Sample data -- Interview with the network administrators - -References -- ISO/IEC 20000 and related standards -- ISO/IEC 27001 - Information security management systems -" -M.7,Infrastructure management,"The PKI implementation is a combination of software, hardware, network service, and resources that are needed to operate and manage the environment. -The environment can be hosted on-premise, in the cloud, or in a hybrid environment. - -Independent of the hosting model, the PKI environment needs to be properly managed and maintained, which requires resources and processes. -The infrastructure management refers to management of the technical and operational components of the PKI environment, which includes software, hardware, network, equipment, facilities, and other related resources. - -The PKI components may be distributed across multiple locations and managed by different teams. Therefore, it is important to have a clear description of the operational infrastructure with all dependencies and prerequisites. The infrastructure management should be aligned with the overall strategy of the organization and the scope of the PKI. - -When the infrastructure and environment where the PKI is implemented are not effectively managed and maintained, the complexity of the environment increases and the risk of failure increases as well. The infrastructure is often one of the key targets for attackers, therefore it is important to ensure that it is properly secured and available. -",M.7.3,Network vulnerability management is implemented and maintained,"The network vulnerability management is a process that is used to identify, classify, remediate, and mitigate vulnerabilities in the network infrastructure and protects PKI implementation from potential attacks. The process should be implemented and maintained in order to ensure that the network infrastructure is properly secured and protected from potential attacks. - -The network vulnerability management should include the following: -- Included in the overall vulnerability management process -- Periodical scanning of the network infrastructure -- Identification of vulnerabilities -- Categorization and prioritization of vulnerabilities and remediation -- Updating and patching requirements -","Assessment -The following is sample evidence that can be used to assess the requirement: -- Network vulnerability management process -- Results from last network vulnerability scan -- Remediation plan -- Interview with the network administrators - -References -- Common Vulnerability Scoring System (CVSS) -- ISO/IEC 20000 and related standards -- ISO/IEC 27001 - Information security management systems -" -M.7,Infrastructure management,"The PKI implementation is a combination of software, hardware, network service, and resources that are needed to operate and manage the environment. -The environment can be hosted on-premise, in the cloud, or in a hybrid environment. - -Independent of the hosting model, the PKI environment needs to be properly managed and maintained, which requires resources and processes. -The infrastructure management refers to management of the technical and operational components of the PKI environment, which includes software, hardware, network, equipment, facilities, and other related resources. - -The PKI components may be distributed across multiple locations and managed by different teams. Therefore, it is important to have a clear description of the operational infrastructure with all dependencies and prerequisites. The infrastructure management should be aligned with the overall strategy of the organization and the scope of the PKI. - -When the infrastructure and environment where the PKI is implemented are not effectively managed and maintained, the complexity of the environment increases and the risk of failure increases as well. The infrastructure is often one of the key targets for attackers, therefore it is important to ensure that it is properly secured and available. -",M.7.4,Infrastructure recovery objectives controls,"In case of issues with the infrastructure, it should be possible to quickly identify the root cause and recover the infrastructure to the operational state. The recovery objectives should be defined and aligned with the overall business continuity and disaster recovery strategy of the organization. - -The infrastructure should be frequently backed up and the backups should be stored in a secure location. The backups should be tested and validated on a regular basis. Infrastructure managed as code may help to reduce complexity and increase the speed of recovery. -","Assessment -The following is sample evidence that can be used to assess the requirement: -- Infrastructure recovery objectives -- Backup and recovery plan -- Infrastructure configuration as a code -- Interview with the infrastructure administrators - -References -- ISO/IEC 20000 and related standards -- ISO/IEC 27001 - Information security management systems -" -M.7,Infrastructure management,"The PKI implementation is a combination of software, hardware, network service, and resources that are needed to operate and manage the environment. -The environment can be hosted on-premise, in the cloud, or in a hybrid environment. - -Independent of the hosting model, the PKI environment needs to be properly managed and maintained, which requires resources and processes. -The infrastructure management refers to management of the technical and operational components of the PKI environment, which includes software, hardware, network, equipment, facilities, and other related resources. - -The PKI components may be distributed across multiple locations and managed by different teams. Therefore, it is important to have a clear description of the operational infrastructure with all dependencies and prerequisites. The infrastructure management should be aligned with the overall strategy of the organization and the scope of the PKI. - -When the infrastructure and environment where the PKI is implemented are not effectively managed and maintained, the complexity of the environment increases and the risk of failure increases as well. The infrastructure is often one of the key targets for attackers, therefore it is important to ensure that it is properly secured and available. -",M.7.5,Infrastructure activities are periodically reviewed,"Infrastructure management related activities should be periodically reviewed, updated and approved. The frequency of review should be based on the organizational risks and needs to be protected against current and future trends. - -Periodical review helps to keep the infrastructure management accurate and helps to maintain required skills and knowledge. -It provides assurance that the expected controls are active and working as intended. - -The review can include the following: -- Changes made to the infrastructure -- Regular checks of firewall rules -- Review of the network topology -- Review of the network segmentation -- Regular checks of access control lists -- Vulnerability reports and timely remediation -- Review and correlation of logs -- And other activities related to the infrastructure management -","Assessment -The following is sample evidence that can be used to assess the requirement: -- Infrastructure management activities review frequency -- Organizational implementation of review process -- Validation of documentation, reports, records, and reviews - -References -- ISO/IEC 20000 and related standards -- ISO/IEC 27001 - Information security management systems -" -M.8,Change management and agility,"Change management and agility is important to control the PKI implementation and configuration changes, adjustments, modifications, and improvements. Technologies are changing fast and the PKI needs to be able to adapt to the changes. - The same applies for security vulnerabilities, deprecation of algorithms, and other changes that can significantly affect the PKI. - -The change management should provide a robust and reliable process to ensure that every change is properly assessed, approved, and implemented. The process should be aligned with the organizational change management process and should be followed by all stakeholders. - -Agility means that the PKI is able to adapt to the changes quickly and efficiently. Agility is applied to technologies, processes, algorithms, and other parts of the PKI implementation. Efficient adaptation to the changes makes the PKI more reliable and trustworthy, reducing operational risks. -",M.8.1,The policy for change management and agility is documented,"The policy for change management and agility should be documented and approved by the management. The policy contains principles and boundaries for the implementation of the change management and agility requirements. Typically, it can be documented on the organizational level and applied to all systems and services, including the PKI implementation. - -The PKI may have specific requirements for change management and agility, and therefore it may be recommended to have a separate policy for the PKI implementation. The policy should be aligned with organizational policy and should be approved by the responsible personnel for the PKI. - -The policy contains the following information: -- Approach to change management and agility -- Principles and boundaries for change management and agility -- Roles and responsibilities -- Requirements for change management and agility -- Tools and technologies used for change management -- And other relevant information -","Assessment -The following is sample evidence that can be used to assess the requirement: -- Documented policy for change management and agility -- Alignment with organizational policy -- Approval by the management -- Understanding of the policy by the PKI personnel -- And other relevant evidence - -References -- COBIT (Control Objectives for Information and Related Technologies) -- ISO/IEC 20000 and related standards -- The Information Technology Infrastructure Library (ITIL) -" -M.8,Change management and agility,"Change management and agility is important to control the PKI implementation and configuration changes, adjustments, modifications, and improvements. Technologies are changing fast and the PKI needs to be able to adapt to the changes. - The same applies for security vulnerabilities, deprecation of algorithms, and other changes that can significantly affect the PKI. - -The change management should provide a robust and reliable process to ensure that every change is properly assessed, approved, and implemented. The process should be aligned with the organizational change management process and should be followed by all stakeholders. - -Agility means that the PKI is able to adapt to the changes quickly and efficiently. Agility is applied to technologies, processes, algorithms, and other parts of the PKI implementation. Efficient adaptation to the changes makes the PKI more reliable and trustworthy, reducing operational risks. -",M.8.2,Request for change structure is documented and followed,"The request for change structure is the basic stone of each change management process. It provides information about a change, its scope, and other relevant data. The request for change structure should be formally documented and followed by all stakeholders involved. - -Request for change can contain any change that can affect the PKI implementation, including: -- PKI upgrades, updates, and patches -- New components or functionalities -- Changes in the configuration of the PKI -- Changes in the algorithms and protocols - -Request for change structure should cover the following information: -- Description of the change -- Scope of the change -- Category of the change -- Impacted systems and services -- Back-out procedure in case of failure -- Testing requirements -- And other relevant information -","Assessment -The following is sample evidence that can be used to assess the requirement: -- Documented request for change structure -- Sample of change request -- Review implemented changes and compare with the request for change - -References -- COBIT (Control Objectives for Information and Related Technologies) -- ISO/IEC 20000 and related standards -- The Information Technology Infrastructure Library (ITIL) -" -M.8,Change management and agility,"Change management and agility is important to control the PKI implementation and configuration changes, adjustments, modifications, and improvements. Technologies are changing fast and the PKI needs to be able to adapt to the changes. - The same applies for security vulnerabilities, deprecation of algorithms, and other changes that can significantly affect the PKI. - -The change management should provide a robust and reliable process to ensure that every change is properly assessed, approved, and implemented. The process should be aligned with the organizational change management process and should be followed by all stakeholders. - -Agility means that the PKI is able to adapt to the changes quickly and efficiently. Agility is applied to technologies, processes, algorithms, and other parts of the PKI implementation. Efficient adaptation to the changes makes the PKI more reliable and trustworthy, reducing operational risks. -",M.8.3,The change management process is documented and implemented,"The change management process is the core of the change management and agile systems. It provides a robust and reliable process to ensure that every change is properly assessed, approved, implemented, and eventually reviewed. - -The change management process should be documented, communicated, and integrated into the organization. The process states how a request for change can be submitted and how it is processed, which includes assessment and approval of the change, implementation of the change, functional testing after the change, and review of the change. -","Assessment -The following is sample evidence that can be used to assess the requirement: -- Documented change management process -- Sample of change request -- Steps involved in the change management process -- Interview with the responsible personnel - -References -- COBIT (Control Objectives for Information and Related Technologies) -- ISO/IEC 20000 and related standards -- The Information Technology Infrastructure Library (ITIL) -" -M.8,Change management and agility,"Change management and agility is important to control the PKI implementation and configuration changes, adjustments, modifications, and improvements. Technologies are changing fast and the PKI needs to be able to adapt to the changes. - The same applies for security vulnerabilities, deprecation of algorithms, and other changes that can significantly affect the PKI. - -The change management should provide a robust and reliable process to ensure that every change is properly assessed, approved, and implemented. The process should be aligned with the organizational change management process and should be followed by all stakeholders. - -Agility means that the PKI is able to adapt to the changes quickly and efficiently. Agility is applied to technologies, processes, algorithms, and other parts of the PKI implementation. Efficient adaptation to the changes makes the PKI more reliable and trustworthy, reducing operational risks. -",M.8.4,Requirements for agility are identified,"Agility provides the ability to adapt to changes quickly and efficiently. Agility and change management are closely related and should be considered together. The future-proof PKI implementation should be able to identify the requirements for agility and implement them in a timely manner. - -Agility can be considered on operational and technical levels. Operational agility means that the PKI is able to adapt to changes in the operational environment, including any changes to the organizational structure, processes, and other operational aspects. Technical agility means that the PKI is able to adapt to changes in the technologies, algorithms, protocols, and other technical aspects. - -Identification of requirements where agility is needed is important to ensure changes are implemented when needed. -","Assessment -The following is sample evidence that can be used to assess the requirement: -- Agility requirements of the PKI implementation -- Configuration changes -- Changes in the operational environment -- Changes in the technologies -- And other relevant evidence - -References -- COBIT (Control Objectives for Information and Related Technologies) -- ISO/IEC 20000 and related standards -- The Information Technology Infrastructure Library (ITIL) -" -M.8,Change management and agility,"Change management and agility is important to control the PKI implementation and configuration changes, adjustments, modifications, and improvements. Technologies are changing fast and the PKI needs to be able to adapt to the changes. - The same applies for security vulnerabilities, deprecation of algorithms, and other changes that can significantly affect the PKI. - -The change management should provide a robust and reliable process to ensure that every change is properly assessed, approved, and implemented. The process should be aligned with the organizational change management process and should be followed by all stakeholders. - -Agility means that the PKI is able to adapt to the changes quickly and efficiently. Agility is applied to technologies, processes, algorithms, and other parts of the PKI implementation. Efficient adaptation to the changes makes the PKI more reliable and trustworthy, reducing operational risks. -",M.8.5,Change management and agility is periodically reviewed,"The change management and agility requirements should be periodically reviewed to ensure that they are still valid and relevant. The review should be performed by the responsible personnel and should be documented. A good practice is to review the change management and agility requirements at least once a year, however, the frequency of the review can be different depending on the PKI implementation. -","Assessment -- Change management review frequency -- Implementation of review process and documentation -- Interview with the responsible personnel - -References -- COBIT (Control Objectives for Information and Related Technologies) -- ISO/IEC 20000 and related standards -- The Information Technology Infrastructure Library (ITIL) -" -O.9,Resilience,"Resilience is the key for any organization wanting to thrive in an ever-changing world, which is obviously s very important factor for any PKI implementation. The PKI is planned to be trusted for multiple years, if not decades. Therefore, the ability to absorb and adapt to the unpredictability, while continuing to deliver on the objectives is becoming mandatory. - -A robust resilience framework helps organizations future-proof their PKI oriented business, detailing key principles, attributes and activities that are followed to ensure that the PKI implementation will be trusted, secure, and effective all the time. -",O.9.1,Risk assessment and business impact analysis,"Proper risk assessment provides robust understanding about the risks and their impact on the business and organization PKI. The risk assessment results (for example potential loss scenarios) are documented and serves as input for the business impact analysis to identify the critical PKI-related business processes and their dependencies. - -Documented results of the business impact analysis are used to develop recovery strategies for the PKI implementation with required resources and availability. -","Assessment -The following is sample evidence that can be used to assess the requirement: -- Risk management and assessment process -- Documented risk assessment results -- Documented business impact analysis results -- Documented recovery strategies -- Understanding of the resilience and approval of the results -- Interview with the PKI management - -References -- ISO/IEC 27005 - Guidance on managing information security risks -- NIST Risk Management Framework -- ISO/TS 22317 - Guidelines for business impact analysis -" -O.9,Resilience,"Resilience is the key for any organization wanting to thrive in an ever-changing world, which is obviously s very important factor for any PKI implementation. The PKI is planned to be trusted for multiple years, if not decades. Therefore, the ability to absorb and adapt to the unpredictability, while continuing to deliver on the objectives is becoming mandatory. - -A robust resilience framework helps organizations future-proof their PKI oriented business, detailing key principles, attributes and activities that are followed to ensure that the PKI implementation will be trusted, secure, and effective all the time. -",O.9.2,Cyber-security management and incident planning,"Cyber-security management covers activities to ensure that the PKI is protected against known and zero-day vulnerabilities, cyberattacks and other threats. The operational procedures and technologies are evolving and the PKI needs to be able to adapt to the changes. Without knowing the threats and vulnerabilities, it is not possible to plan for the resilience and properly plan for incident response. - -Incident response planning helps to ensure that the organization is able to respond to the suspected incidents. Incident response plans should be documented and tested regularly. The result of executed incident response plans should be documented and used to improve the plan, even if it was a false alarm. - -Cyber-security management and incident planning covers important aspects such as vulnerability management and security operations center (SOC) identification and response to potential incidents. -","Assessment -The following is sample evidence that can be used to assess the requirement: -- Documented vulnerability management -- Vulnerability scanning results -- Documented incident response plans -- Documented incident response test results -- Monitoring of cyber-security threats -- Interview with the security operations team - -References -- ISO/IEC 27001 - Information security management systems -- Common Vulnerabilities and Exposures (CVE) Program -- NIST Special Publication 800-61 Revision 2 - Computer Security Incident Handling Guide -- SANS Guide to Security Operations -" -O.9,Resilience,"Resilience is the key for any organization wanting to thrive in an ever-changing world, which is obviously s very important factor for any PKI implementation. The PKI is planned to be trusted for multiple years, if not decades. Therefore, the ability to absorb and adapt to the unpredictability, while continuing to deliver on the objectives is becoming mandatory. - -A robust resilience framework helps organizations future-proof their PKI oriented business, detailing key principles, attributes and activities that are followed to ensure that the PKI implementation will be trusted, secure, and effective all the time. -",O.9.3,Business continuity planning and disaster recovery,"The business continuity planning and disaster recovery are the key activities to ensure availability of the PKI operations. The business continuity planning is used to define the recovery time objectives (RTO) and recovery point objectives (RPO) for the PKI. The RTO and RPO are used to define the required resources and their availability. - -Requirements for the business continuity and disaster recovery should be properly defined. It contains backups of the PKI resources, such as hardware security modules (HSM), databases, configuration files, etc. The availability of backups should be tested regularly to ensure that the backups are available when needed, especially during the disaster. - -Proper measures are applied to identify the disaster and a communication matrix is maintained to ensure that the right people are informed about the disaster on time and the recovery process can be started. - -The following parts are typically covered: -- Scope of the business continuity and disaster recovery -- Roles and responsibilities -- Activation of disaster recovery -- Physical locations -- Communication matrix -- Other requirements and information needed -","Assessment -The following is sample evidence that can be used to assess the requirement: -- Documented business continuity and disaster recovery plans -- Documented recovery time objectives (RTO) and recovery point objectives (RPO) -- Documented backup and recovery procedures -- Communication matrix and contact information -- Availability of backups and other requirements to execute the disaster recovery procedure -- Periodically tested effectiveness of the disaster recovery - -References -- ISO/IEC 22301 - Business continuity management systems -- NIST Special Publication 800-34 Revision 1 - Contingency Planning Guide for Federal Information Systems -" -O.9,Resilience,"Resilience is the key for any organization wanting to thrive in an ever-changing world, which is obviously s very important factor for any PKI implementation. The PKI is planned to be trusted for multiple years, if not decades. Therefore, the ability to absorb and adapt to the unpredictability, while continuing to deliver on the objectives is becoming mandatory. - -A robust resilience framework helps organizations future-proof their PKI oriented business, detailing key principles, attributes and activities that are followed to ensure that the PKI implementation will be trusted, secure, and effective all the time. -",O.9.4,Technology future proofing,"Applicable technology should always be future proofed to ensure that the PKI is able to adapt to changes, and will support the organization PKI in the future when new standards, algorithms, and approach will be developed. - -When deciding to apply new technologies, or evaluating if the current technology is still suitable and support the goals of the PKI implementation, the following should be considered: -- Technology is supported by the vendor -- Industry standards are applied for interoperability and security -- Review and references on the vendor and technology -- Applicability of the technology for long-term use -- Vulnerabilities and security reports of the technology -- Integration capabilities and customizations needed -- Open source vs. proprietary technology -","Assessment -The following is sample evidence that can be used to assess the requirement: -- Interview with the CTO or CIO -- Documentation of the technology future proofing -- RFI and RFP documents -- Vendor and technology check - -References -- ISO 223XX Security and resilience standards -- ISO/IEC 22301 - Business continuity management systems -" -O.9,Resilience,"Resilience is the key for any organization wanting to thrive in an ever-changing world, which is obviously s very important factor for any PKI implementation. The PKI is planned to be trusted for multiple years, if not decades. Therefore, the ability to absorb and adapt to the unpredictability, while continuing to deliver on the objectives is becoming mandatory. - -A robust resilience framework helps organizations future-proof their PKI oriented business, detailing key principles, attributes and activities that are followed to ensure that the PKI implementation will be trusted, secure, and effective all the time. -",O.9.5,Competence and information sharing,"Organization environments may change over time. The impact of changes can be in various forms, for example: -- personnel can rotate in their positions, new people can be hired, or people can leave the organization -- technologies are changing, therefore required skills and knowledge may change -- procedures and eventually management of the PKI will be adjusted - -The organization needs to ensure that the competence of the personnel is maintained and the information is shared to not lose the knowledge introduced by changes within known and unknown variables. The organization should have a plan to ensure that the competence is maintained for the most critical parts of the PKI. - -The competence and information sharing is an important part to achieve the resilience of the PKI implementation by having relevant information and competencies ready when needed. -","Assessment -The following is sample evidence that can be used to assess the requirement: -- Documentation and collaboration -- Onboarding and offboarding procedures -- Building competence and knowledge sharing - -References -- ISO 223XX Security and resilience standards -" -O.9,Resilience,"Resilience is the key for any organization wanting to thrive in an ever-changing world, which is obviously s very important factor for any PKI implementation. The PKI is planned to be trusted for multiple years, if not decades. Therefore, the ability to absorb and adapt to the unpredictability, while continuing to deliver on the objectives is becoming mandatory. - -A robust resilience framework helps organizations future-proof their PKI oriented business, detailing key principles, attributes and activities that are followed to ensure that the PKI implementation will be trusted, secure, and effective all the time. -",O.9.6,Continual review and improvement,"The resilience of the PKI implementation should be reviewed and improved regularly. The review and improvement process should be documented and the results should be used to improve the resilience of the PKI implementation. The frequency of review should be based on the organizational risks and needs to be protected against current and future trends. -","Assessment -The following is sample evidence that can be used to assess the requirement: -- Resilience effectiveness review frequency -- Implementation of review process -- Validation of documentation and reviews -- Training records - -References -- ISO 223XX Security and resilience standards -- NIST Special Publications 800 - 30, 34, 37, 46, 53, 84 -" -O.10,Automation,"Automation of certificate management is the process of using technology to perform tasks with reduced human assistance. Automation is used to improve the efficiency of the PKI management and to reduce the risk of human error. Automation can be used to perform tasks that are repetitive, time-consuming, or difficult to perform manually. - -On the other hand the automation can introduce new risks and challenges. The automation should be used only for tasks that are well-defined and that can be performed in a reliable way. - -Justified, well-designed, and documented automation of certificate lifecycle management can significantly contribute to the efficiency of the PKI management while reducing the risk of human error. However, automation is not a silver bullet and should be controlled, monitored, and audited to prevent the risk of misuse. -",O.10.1,Process automation description,"Every automated certificate management process should be properly described and documented. The documentation should contain information relevant to the process automation and understanding the reasons for automation. Monitoring, auditing, and potential measures and controls would be ineffective without proper description and understanding of the automation process. - -The description can include for example the following: -- Use-case or process to be automated -- Reasons for automation -- Description of the automation process -- Involved tools and technologies -- Monitoring and auditing requirements -- Potential measures and controls -- Exceptions -- Logging and reporting -- Any other relevant information and requirements -","Assessment -The following is sample evidence that can be used to assess the requirement: -- Process automation description -- Interview with the process owner -- Interview with administrators -- Sample of automated process logs - -References -N/A -" -O.10,Automation,"Automation of certificate management is the process of using technology to perform tasks with reduced human assistance. Automation is used to improve the efficiency of the PKI management and to reduce the risk of human error. Automation can be used to perform tasks that are repetitive, time-consuming, or difficult to perform manually. - -On the other hand the automation can introduce new risks and challenges. The automation should be used only for tasks that are well-defined and that can be performed in a reliable way. - -Justified, well-designed, and documented automation of certificate lifecycle management can significantly contribute to the efficiency of the PKI management while reducing the risk of human error. However, automation is not a silver bullet and should be controlled, monitored, and audited to prevent the risk of misuse. -",O.10.2,Monitoring and auditing of automated process,"The automated process of certificate management can cause significant damage if misused or misconfigured. The monitoring and auditing of the automated process is essential to prevent the risk of misuse and to detect any potential issues, inefficiencies, or exceptions. - -The monitoring and auditing should be performed on a regular basis and should be aligned with the overall monitoring and auditing strategy of the organization. -It should provide sufficient information to detect any potential issues with the automated process. For successful detection or identification of issues, proper expectations should be based on the description of the automated process. -","Assessment -Monitoring of automated processes should be supported by monitoring tools and technologies that can provide the necessary overview, reporting, and potential alerting in case of issues. -The following is sample evidence that can be used to assess the requirement: -- Documented monitoring and auditing measures -- Monitoring and auditing tools and technologies applied -- Sample report or dashboard from monitoring -- Interview with responsible personnel -- Simulate failure of the automated certificate management process and verify that the failure is detected and reported - -References -N/A -" -O.10,Automation,"Automation of certificate management is the process of using technology to perform tasks with reduced human assistance. Automation is used to improve the efficiency of the PKI management and to reduce the risk of human error. Automation can be used to perform tasks that are repetitive, time-consuming, or difficult to perform manually. - -On the other hand the automation can introduce new risks and challenges. The automation should be used only for tasks that are well-defined and that can be performed in a reliable way. - -Justified, well-designed, and documented automation of certificate lifecycle management can significantly contribute to the efficiency of the PKI management while reducing the risk of human error. However, automation is not a silver bullet and should be controlled, monitored, and audited to prevent the risk of misuse. -",O.10.3,Incidents and exceptions handling,"No automation is perfect and covers everything. There can be edge cases and other situations that were not part of the initial analysis or were simply forgotten. Therefore, there will always be exceptions and incidents that will require manual intervention. The automated process should be able to handle such exceptions and incidents in a way that will not cause any significant damage or disruption to the service. - -It may happen that some certificates are required to be handled manually and therefore the exception should be approved and documented. - -Handling of exceptional situations should be covered in the documentation, stating what should be done in case of an exception or incident: -- Communication of the exception -- Approval of the exception -- Incident handling and reporting -- Any other relevant information - -The handling of exceptions should be tested and verified on a regular basis to ensure that the process is working as expected. -","Assessment -The following is sample evidence that can be used to assess the requirement: -- Documented exceptions -- Interview with responsible personnel about how to handle exceptions or incidents - -References -N/A -" -O.11,Interoperability,"Interoperability means the ability of two or more systems or components to exchange information and to use the information that has been exchanged. - -A PKI is composed of multiple components, which are often provided by different vendors, or can be developed and maintained in-house. Interoperability keeps the PKI components working together and allows the PKI to function properly in the long term. - -Adopting open standards and protocols helps to ensure interoperability between PKI components and Relying Party (RP) applications and avoids vendor lock-in that may lead to interoperability issues in the future, especially when the PKI needs to be trusted for a long time, may have no control over RPs or needs to be scaled. - -Interoperability includes the following aspects: -- Interface specifications -- Data formats -- Communication protocols -- Algorithms -- Open standards - -Main principles of interoperability are: -- Transparency and openness -- Technology neutrality -- Reusability and scalability -- Security and privacy -- Accessibility -- Sustainability -- Portability and extensibility -",O.11.1,Maintain PKI interoperability strategy,"The interoperability strategy defines the interoperability requirements and the approach to achieve interoperability between the PKI components to ensure the PKI implementation is able to adopt new technologies and standards in the future, and will not be locked-in to a specific vendor. - -PKI interoperability strategy should be maintained, documented, and integrated in the organization. It should cover at least the following information: -- Application of interoperability -- Using open standards and protocols -- Conditions for PKI components to be interoperable -- Restrictions on the use of proprietary interfaces -- Interoperability testing -- Requirements for migration to new technologies -- Requirements for vendors -- Other relevant information -","Assessment -The following evidence should be available for the assessment of the requirement: -- Documented and approved interoperability strategy -- Interoperability strategy is integrated in the organization -- Interview with the responsible person(s) to verify understanding of the interoperability strategy -- Review documentation for PKI components to verify the requirements for interoperability - -References -- The Open Group Architecture Framework (TOGAF) -" -O.11,Interoperability,"Interoperability means the ability of two or more systems or components to exchange information and to use the information that has been exchanged. - -A PKI is composed of multiple components, which are often provided by different vendors, or can be developed and maintained in-house. Interoperability keeps the PKI components working together and allows the PKI to function properly in the long term. - -Adopting open standards and protocols helps to ensure interoperability between PKI components and Relying Party (RP) applications and avoids vendor lock-in that may lead to interoperability issues in the future, especially when the PKI needs to be trusted for a long time, may have no control over RPs or needs to be scaled. - -Interoperability includes the following aspects: -- Interface specifications -- Data formats -- Communication protocols -- Algorithms -- Open standards - -Main principles of interoperability are: -- Transparency and openness -- Technology neutrality -- Reusability and scalability -- Security and privacy -- Accessibility -- Sustainability -- Portability and extensibility -",O.11.2,Documented integration guidance,"To have effective interoperability between PKI components, it is important to have a proper integration in place that serves the purpose and does not expose any potential risks. Available and documented integration guidance for the developers and administrators should be maintained and updated regularly. - -The integration guidance should be available for all critical PKI components and should cover at least the following information: -- Integration requirements and prerequisites -- Applicable standards and protocols -- Integration architecture -- Integration testing -","Assessment -The following evidence should be available for the assessment of the requirement: -- Documented integration guidance for all critical PKI components -- Interview with the system administrators and developers -- Review of the integration guidance -- System configuration review - -References -- The Open Group Architecture Framework (TOGAF) -- Integration instructions provided by the vendors -" -O.11,Interoperability,"Interoperability means the ability of two or more systems or components to exchange information and to use the information that has been exchanged. - -A PKI is composed of multiple components, which are often provided by different vendors, or can be developed and maintained in-house. Interoperability keeps the PKI components working together and allows the PKI to function properly in the long term. - -Adopting open standards and protocols helps to ensure interoperability between PKI components and Relying Party (RP) applications and avoids vendor lock-in that may lead to interoperability issues in the future, especially when the PKI needs to be trusted for a long time, may have no control over RPs or needs to be scaled. - -Interoperability includes the following aspects: -- Interface specifications -- Data formats -- Communication protocols -- Algorithms -- Open standards - -Main principles of interoperability are: -- Transparency and openness -- Technology neutrality -- Reusability and scalability -- Security and privacy -- Accessibility -- Sustainability -- Portability and extensibility -",O.11.3,Adoption and application of open standards,"Open standards are publicly available standards that are developed and maintained by communities or standardization bodies. Open standards are developed through a consensus-based process and are available to everyone without any restrictions. Open standards are usually free to use and implement. - -The open standards are important for interoperability as they are typically technology-agnostic and are supported by technologies and solutions. Open standards are applicable for interfaces, communication protocols, cryptographic algorithms, data formats, automation and orchestration, and other aspects of the PKI. - -The adoption of open standards significant increase interoperability and reduce the risk of vendor lock-in. -","Assessment -The following evidence should be available for the assessment of the requirement: -- Documented list of open standards used by the PKI -- Policies requiring the use of open standards -- Interview with the responsible person to verify understanding of the open standards -- Review of training materials - -References -- Open Standards Principles -- IETF Request for Comments (RFC) -- OASIS Standards -- ISO Standards -- ITU Standards -- NIST Standards -- ETSI Standards -" -O.12,Monitoring and auditing,"Monitoring and auditing establish the necessary controls to detect and respond to security events and to provide evidence of compliance with the disclosed business practices. -The events and logs typically serves as a basis for incident response and forensic analysis in case of security incidents, however, they can also be used for other purposes, such as performance analysis, capacity planning, and troubleshooting. - -Monitoring and auditing provide reasonable assurance that: -- Unauthorized PKI system usage is detected -- Critical high impact events are monitored -- Appropriate logs are collected and relevant issues are alerted -- The confidentiality and integrity of current and archived audit logs are maintained for the required period of time -- Audit logs are completely and confidentially archived in accordance with disclosed business practices -- Events and logs are reviewed periodically by authorized personnel - -The outputs from the monitoring and auditing activities are typically used as inputs for the risk assessment and management activities, including incident response management and investigation of high impact events. -",O.12.1,Monitoring events and logging requirements are defined and documented,"The monitoring and logging requirements should be defined and documented in the CP, CPS, or other relevant documents. The requirements should be aligned with the overall PKI policies and statements, and should be based on the risk assessment and management activities. - -The requirements can typically include: -- Events to be monitored -- Frequency of monitoring -- Logs to be collected -- Retention period for logs -- Audit trail requirements -- Audit log protection requirements -- Formatting and interpretation of logs (syslog, JSON, XML, CEF, etc.) -- And other relevant requirements -","Assessment -- Documented monitoring and logging requirements -- Policies and procedures for monitoring and logging -- Review of records -- Interviews with personnel - -References -- ISO/IEC 27001 - Information security management systems -- ISO/IEC 20000 and related standards -- ISO/IEC 27099 - Public key infrastructure -" -O.12,Monitoring and auditing,"Monitoring and auditing establish the necessary controls to detect and respond to security events and to provide evidence of compliance with the disclosed business practices. -The events and logs typically serves as a basis for incident response and forensic analysis in case of security incidents, however, they can also be used for other purposes, such as performance analysis, capacity planning, and troubleshooting. - -Monitoring and auditing provide reasonable assurance that: -- Unauthorized PKI system usage is detected -- Critical high impact events are monitored -- Appropriate logs are collected and relevant issues are alerted -- The confidentiality and integrity of current and archived audit logs are maintained for the required period of time -- Audit logs are completely and confidentially archived in accordance with disclosed business practices -- Events and logs are reviewed periodically by authorized personnel - -The outputs from the monitoring and auditing activities are typically used as inputs for the risk assessment and management activities, including incident response management and investigation of high impact events. -",O.12.2,Event logs from systems are collected,"The event logs from systems should be collected and available for analysis, including correlation with other records. Centralized logging is recommended to ensure that the logs are collected and stored consistently. Solution like security information and event management (SIEM) can be used to collect and analyze the logs. - -The availability of records for analysis depends on understanding logging format and interpretation of the information, therefore each system should provide logs in a consistent format that can be further processed and analyzed (or automated). - -Logs and events should be collected from all systems that are relevant for the PKI implementation, such as key life cycle management events. - -The event should contain sufficient information to identify the event, including: -- User identification -- Type of event -- Date and time -- Success or failure indication -- Origination of event -- Identity or name of affected data, system component, or resource -- Additional details -","Assessment -- Logs are collected from systems -- Logs have a consistent format and can be further processed and analyzed -- Review of records and their formatting -- Review of configuration standards for logging -- Interviews with personnel to check the understanding of logging format and interpretation of the information - -References -- ISO/IEC 27001 - Information security management systems -- ISO/IEC 20000 and related standards -- NIST - Guide to Computer Security Log Management -- ISO/IEC 27099 - Public key infrastructure -" -O.12,Monitoring and auditing,"Monitoring and auditing establish the necessary controls to detect and respond to security events and to provide evidence of compliance with the disclosed business practices. -The events and logs typically serves as a basis for incident response and forensic analysis in case of security incidents, however, they can also be used for other purposes, such as performance analysis, capacity planning, and troubleshooting. - -Monitoring and auditing provide reasonable assurance that: -- Unauthorized PKI system usage is detected -- Critical high impact events are monitored -- Appropriate logs are collected and relevant issues are alerted -- The confidentiality and integrity of current and archived audit logs are maintained for the required period of time -- Audit logs are completely and confidentially archived in accordance with disclosed business practices -- Events and logs are reviewed periodically by authorized personnel - -The outputs from the monitoring and auditing activities are typically used as inputs for the risk assessment and management activities, including incident response management and investigation of high impact events. -",O.12.3,Audit trail can be reconstructed from audit logs,"Audit logging should be implemented to ensure that the audit trail can be reconstructed from audit logs any time. Audit logs are typically recorded for any user executed events that are important for security of the PKI implementation. Audit logs should be stored in a secure location. The audit logs should be protected against unauthorized access, modification, and deletion. - -Typically, the following events are important for security of the PKI implementation: -- All individual user accesses to sensitive data -- All actions taken by any individual with root or administrative privileges -- Access to all audit trails -- Invalid logical access attempts -- Use of and changes to identification and authentication mechanisms - including but not limited to creation of new accounts and elevation of privileges - and all changes, additions, or deletions to accounts with root or administrative privileges -- Initialization, stopping, or pausing of the audit logs -- Creation and deletion of system-level objects -","Assessment -- Audit trail can be reconstructed from audit logs -- Audit logs are stored in a secure location -- Audit logs are protected against unauthorized access, modification, and deletion -- Review of records -- Interviews with personnel to understand the audit logging implementation - -References -- RFC 3647 - Internet X.509 Public Key Infrastructure Certificate Policy and Certification Practices Framework -- NIST - Guide to Computer Security Log Management -- ISO/IEC 27001 - Information security management systems -- ISO/IEC 27099 - Public key infrastructure -" -O.12,Monitoring and auditing,"Monitoring and auditing establish the necessary controls to detect and respond to security events and to provide evidence of compliance with the disclosed business practices. -The events and logs typically serves as a basis for incident response and forensic analysis in case of security incidents, however, they can also be used for other purposes, such as performance analysis, capacity planning, and troubleshooting. - -Monitoring and auditing provide reasonable assurance that: -- Unauthorized PKI system usage is detected -- Critical high impact events are monitored -- Appropriate logs are collected and relevant issues are alerted -- The confidentiality and integrity of current and archived audit logs are maintained for the required period of time -- Audit logs are completely and confidentially archived in accordance with disclosed business practices -- Events and logs are reviewed periodically by authorized personnel - -The outputs from the monitoring and auditing activities are typically used as inputs for the risk assessment and management activities, including incident response management and investigation of high impact events. -",O.12.4,Monitoring of operational and security events is implemented,"Monitoring of operational and security events should be implemented to ensure that the PKI implementation is operating as expected and that the security events are detected and responded to in a timely manner and that evidence of any malicious event is identified. The monitoring should be implemented for all critical systems and components, including the CA, RA, OCSP, HSM, and other relevant systems. - -Monitoring should be aligned with the monitoring and auditing requirements defined in the CP, CPS, and other relevant documents. The monitoring should be implemented to ensure that the requirements are met. -","Assessment -- Monitoring of operational and security events is implemented according to the requirements -- Review of monitoring implementation, including CA key life cycle management related events, security sensitive events, and other relevant events -- Review of monitoring events and alerts -- Interviews with personnel responsible for monitoring - -References -- ISO/IEC 27001 - Information security management systems -- ISO/IEC 20000 and related standards -- ISO/IEC 27099 - Public key infrastructure -" -O.12,Monitoring and auditing,"Monitoring and auditing establish the necessary controls to detect and respond to security events and to provide evidence of compliance with the disclosed business practices. -The events and logs typically serves as a basis for incident response and forensic analysis in case of security incidents, however, they can also be used for other purposes, such as performance analysis, capacity planning, and troubleshooting. - -Monitoring and auditing provide reasonable assurance that: -- Unauthorized PKI system usage is detected -- Critical high impact events are monitored -- Appropriate logs are collected and relevant issues are alerted -- The confidentiality and integrity of current and archived audit logs are maintained for the required period of time -- Audit logs are completely and confidentially archived in accordance with disclosed business practices -- Events and logs are reviewed periodically by authorized personnel - -The outputs from the monitoring and auditing activities are typically used as inputs for the risk assessment and management activities, including incident response management and investigation of high impact events. -",O.12.5,Critical events are immediately alerted and resolved according to incident response plans,"Critical events should be immediately alerted and resolved according to incident response plans. Monitoring implementation should ensure that critical events are detected and alerted in a timely manner. This can be done manually or in an automated way. -","Assessment -- Review of requirements for alerting on critical event, including security sensitive events -- Review of monitoring implementation -- Review of documentation of critical events -- Interviews with personnel to check the understanding of critical events and their handling - -References -- ISO/IEC 27001 - Information security management systems -- ISO/IEC 20000 and related standards -- ISO/IEC 27099 - Public key infrastructure -" -O.12,Monitoring and auditing,"Monitoring and auditing establish the necessary controls to detect and respond to security events and to provide evidence of compliance with the disclosed business practices. -The events and logs typically serves as a basis for incident response and forensic analysis in case of security incidents, however, they can also be used for other purposes, such as performance analysis, capacity planning, and troubleshooting. - -Monitoring and auditing provide reasonable assurance that: -- Unauthorized PKI system usage is detected -- Critical high impact events are monitored -- Appropriate logs are collected and relevant issues are alerted -- The confidentiality and integrity of current and archived audit logs are maintained for the required period of time -- Audit logs are completely and confidentially archived in accordance with disclosed business practices -- Events and logs are reviewed periodically by authorized personnel - -The outputs from the monitoring and auditing activities are typically used as inputs for the risk assessment and management activities, including incident response management and investigation of high impact events. -",O.12.6,Review of events and logs is periodically performed,"Logs and events should be reviewed frequently, preferably automatically, to determine security related issues, potential systems failure, identify anomalies or suspected activity. Regular review should be confirmed by authorized personnel who can proactively identify issues before they become problems. - -The review of logs and events should be performed periodically and the frequency should be based on the risk assessment. Any potential issues should be reported and resolved according to the incident response plans. -","Assessment -- Review of logs and events is performed periodically -- Review of logs and events is performed according to the requirements -- Review of logs and events is confirmed by authorized personnel -- Interview with personnel responsible for review of logs and events - -References -- ISO/IEC 27001 - Information security management systems -- ISO/IEC 20000 and related standards -- NIST - Guide to Computer Security Log Management -- ISO/IEC 27099 - Public key infrastructure -" -R.13,Sourcing,"PKI is a complex system that requires a lot of resources to be managed and maintained. Proper sourcing of the resources is one of the key factors of a mature infrastructure that can maintain and improve trust over the time. The resources can be: -- Financial resources needed to maintain the PKI -- Computing resources like hardware, software, tools, technologies -- Human resources (personnel) -- Management resources like processes and procedures - -Sourcing is a process of defining the required resources and their specification, availability, and management. Sourcing requires monitoring and periodic review of the resources needed and alignment with the overall strategy of the organization and scope of the PKI. -",R.13.1,Resources are identified and documented,"Resources needed for proper management of the PKI are identified and documented. Resources should be aligned with the PKI scope and use-case(s) that should be supported. The main question to answer here is ""Do we know what resources we need to manage the PKI?"". -","Assessment -The following is sample evidence that can be used to assess the requirement: -- Resource management process -- Documented requirements on the resources -- Categorization of resources (an example can be people, processes, procedures, tools, technologies) -- Alignment with the scope of the use-case - -References -N/A -" -R.13,Sourcing,"PKI is a complex system that requires a lot of resources to be managed and maintained. Proper sourcing of the resources is one of the key factors of a mature infrastructure that can maintain and improve trust over the time. The resources can be: -- Financial resources needed to maintain the PKI -- Computing resources like hardware, software, tools, technologies -- Human resources (personnel) -- Management resources like processes and procedures - -Sourcing is a process of defining the required resources and their specification, availability, and management. Sourcing requires monitoring and periodic review of the resources needed and alignment with the overall strategy of the organization and scope of the PKI. -",R.13.2,Resources are clearly defined,"Identified resources should be properly defined and specified. The specification depends on the type of the resource and can include for example the following: -- People: required skills to perform the tasks, roles, and responsibilities -- Tools: description, supported technologies -- Technologies: required functionality and performance -- Financial resources: required budget, funding sources -- Management resources: processes and procedures, inputs, outputs -- Other resources: description, specification, requirements - -Without clearly defined resources, there could be misuse of the organization’s assets or inconsistent interaction with personnel and other parties, leading to insecure and untrusted implementation of the PKI. -","Assessment -The following is a sample evidence that can be used to assess the requirement: -- Resource management process -- Documented requirements on the resources -- Categorization of resources (an example can be: people, processes, procedures, tools, technologies) -- Alignment with the scope of the use-case -- Interview personnel in various roles - -References -- ISO/IEC 20000 and related standards -" -R.13,Sourcing,"PKI is a complex system that requires a lot of resources to be managed and maintained. Proper sourcing of the resources is one of the key factors of a mature infrastructure that can maintain and improve trust over the time. The resources can be: -- Financial resources needed to maintain the PKI -- Computing resources like hardware, software, tools, technologies -- Human resources (personnel) -- Management resources like processes and procedures - -Sourcing is a process of defining the required resources and their specification, availability, and management. Sourcing requires monitoring and periodic review of the resources needed and alignment with the overall strategy of the organization and scope of the PKI. -",R.13.3,Availability of resources,"Identified and defined resources should be available at the required capacity. The availability of the resources should be aligned with the overall strategy of the organization and scope of the PKI. The availability of the resources should be controlled to ensure that the resources are available when needed. -","Assessment -- Review of the resource management process -- Review of the capacity or demand management process -- Alignment with the strategy of the organization and scope of the PKI -- Review of the assignment of the resources to the tasks -- Utilization and performance of the services - -References -- ISO/IEC 20000 and related standards -" -R.13,Sourcing,"PKI is a complex system that requires a lot of resources to be managed and maintained. Proper sourcing of the resources is one of the key factors of a mature infrastructure that can maintain and improve trust over the time. The resources can be: -- Financial resources needed to maintain the PKI -- Computing resources like hardware, software, tools, technologies -- Human resources (personnel) -- Management resources like processes and procedures - -Sourcing is a process of defining the required resources and their specification, availability, and management. Sourcing requires monitoring and periodic review of the resources needed and alignment with the overall strategy of the organization and scope of the PKI. -",R.13.4,Resources are periodically reviewed,"Resource should be periodically reviewed to ensure the accurate use of the resources and secure operations. Frequency of the review depends on the complexity and criticality of the infrastructure. Good practice is to perform reviews at least once a year. - -Review includes the following (but not limited to) -- Analysis that the resources continue to match with the scope and capacity required to provide the services -- Review of the specifications of the resources to continue support of the PKI -- Review announcements and technology trends (for example “end of life” plans for a technology) -- Documentation of any remediation plan, updates to sourcing of the PKI, that should be approved by the management -","Assessment -- Review of changes to the PKI scope -- Review of the capacity or available resources -- Vendor announcements -- Technology trends -- Skills and knowledge of the personnel - -References -N/A -" -R.14,Knowledge and training,"The purpose of this category is to ensure that the PKI personnel have the required knowledge and skills to perform their duties and responsibilities. -Education and continuous gathering of required knowledge and skills to manage the PKI is important to be aware and properly react to current trends and threats that may impact the PKI. - -Each of the personnel should be aware of the PKI policies and procedures, and should be able to perform their duties and responsibilities in accordance with the PKI policies and procedures. -",R.14.1,Establish training plan,"The training plan should be established and maintained to ensure that personnel have the required knowledge and skills to perform their duties and responsibilities. It should reflect the current state of the PKI implementation and be updated when the PKI implementation changes, and provide necessary information for all personnel that are involved in the PKI implementation. - -Training plan is built with PKI needs and requirements in mind and should cover: -- Training prerequisites -- Training matrix (who needs to be trained and what training should be received) -- Training schedule -- Training format and methods -- Requirements on training reports and records -- Training plan review and update - -There can be different methods of training, depending on the needs and requirements: -- Instructor-led training -- Internal or external webinars -- Coaching -- Self-paced training -- Online resources -- Shadowing or reverse-shadowing -","Assessment -- Documented training plan -- Training plan is up-to-date -- Training plan is approved and communicated to all personnel -- Training plan is integrated in organization - -References -- NIST SP 800-16 Information Technology Security Training Requirements: a Role- and Performance-Based Model -- NIST SP 800-50 Building an Information Technology Security Awareness and Training Program -- European Cybersecurity Skills Framework (ECSF) -" -R.14,Knowledge and training,"The purpose of this category is to ensure that the PKI personnel have the required knowledge and skills to perform their duties and responsibilities. -Education and continuous gathering of required knowledge and skills to manage the PKI is important to be aware and properly react to current trends and threats that may impact the PKI. - -Each of the personnel should be aware of the PKI policies and procedures, and should be able to perform their duties and responsibilities in accordance with the PKI policies and procedures. -",R.14.2,Responsible personnel receive training,"The responsible personnel should be aware of the current policies and procedures that are related to the context of the PKI implementation. Training should be provided to personnel that are responsible for the management, operation, and administration of the PKI. - -Training is provided in accordance with the current and approved training plan. - -Methods and training content can vary, depending on personnel roles and covers: -- New hires as part of the onboarding process -- Periodic training for all personnel (the frequency of the training depends on the role and responsibilities) - -For each training, attendance should be recorded and documented, and in case the training is not completed, the reason should be documented. -In case there are requirements for score or threshold to be achieved, the results should be documented. -","Assessment -- Review training matrix -- Review documented training results -- Review training records -- Relevancy of the training content -- Training is provided in accordance with the training plan -- Training completeness - -References -- NIST SP 800-16 Information Technology Security Training Requirements: a Role- and Performance-Based Model -- NIST SP 800-50 Building an Information Technology Security Awareness and Training Program -- European Cybersecurity Skills Framework (ECSF) -" -R.14,Knowledge and training,"The purpose of this category is to ensure that the PKI personnel have the required knowledge and skills to perform their duties and responsibilities. -Education and continuous gathering of required knowledge and skills to manage the PKI is important to be aware and properly react to current trends and threats that may impact the PKI. - -Each of the personnel should be aware of the PKI policies and procedures, and should be able to perform their duties and responsibilities in accordance with the PKI policies and procedures. -",R.14.3,Perform security awareness training,"Security awareness education is an ongoing activity. The security awareness program is implemented to make all personnel aware of their role in protecting the security and establishing trust by the PKI implementation. It should stay up to date to reflect latest security trends, threats, and challenges. - -Security awareness should ensure that personnel are knowledgeable about the threat landscape, their responsibility for the operation of relevant security controls, and are able to access assistance and guidance when required. - -Different methods can be applied to provide security awareness, for example: -- Posters and letters with the specific topic -- Team meetings and webinars -- Security incentives and rewards -- Training and education -","Assessment -- Examine security awareness program -- Interview personnel to verify that they are aware of their responsibilities -- Review security awareness training records -- Security awareness training is provided in accordance with the training plan -- Review content of the security awareness training - -References -- NIST SP 800-50 Building an Information Technology Security Awareness and Training Program -- PCI SSC - Best Practices for Implementing a - Security Awareness Program -- Raising Awareness of Cybersecurity -" -R.14,Knowledge and training,"The purpose of this category is to ensure that the PKI personnel have the required knowledge and skills to perform their duties and responsibilities. -Education and continuous gathering of required knowledge and skills to manage the PKI is important to be aware and properly react to current trends and threats that may impact the PKI. - -Each of the personnel should be aware of the PKI policies and procedures, and should be able to perform their duties and responsibilities in accordance with the PKI policies and procedures. -",R.14.4,Establish education plan,"Proper education plan is required to stay up to date with the development of the latest technologies, security practices, and controls that have impact on the PKI and its future development. - -The education plan should establish a robust base for the personnel to gain relevant knowledge that are out of scope of the internal training plan, but should be aligned with it to ensure that the personnel are able to perform their duties and responsibilities. The education plan should cover: -- Education requirements and prerequisites -- Recommended education approach and methods -- Approach to monitor and assess the education results - -Methods to provide education can vary: -- Internal or external courses -- Incentives and rewards -- Mentoring, coaching, and shadowing -- Competitions and challenges -","Assessment -- Review education plan and its alignment with the training plan -- Interview personnel to verify their educational goals -- Validate education records - -References -- NIST SP 800-16 Information Technology Security Training Requirements: a Role- and Performance-Based Model -- NIST SP 800-50 Building an Information Technology Security Awareness and Training Program -- European Cybersecurity Skills Framework (ECSF) -" -R.14,Knowledge and training,"The purpose of this category is to ensure that the PKI personnel have the required knowledge and skills to perform their duties and responsibilities. -Education and continuous gathering of required knowledge and skills to manage the PKI is important to be aware and properly react to current trends and threats that may impact the PKI. - -Each of the personnel should be aware of the PKI policies and procedures, and should be able to perform their duties and responsibilities in accordance with the PKI policies and procedures. -",R.14.5,Periodically review knowledge,"The training plan should be reviewed and updated periodically to ensure that it is up-to-date and covers all aspects of the specific PKI implementation. - -Periodical review of the training plans helps to maintain required skills and knowledge for the responsible personnel. -It provides assurance that the expected controls are active and working as intended. -","Assessment -- Training plan review process -- Implementation of review process -- Validation of documentation and reviews - -References -- NIST SP 800-16 Information Technology Security Training Requirements: a Role- and Performance-Based Model -- NIST SP 800-50 Building an Information Technology Security Awareness and Training Program -- European Cybersecurity Skills Framework (ECSF) -" -R.15,Awareness,"Providing awareness about the PKI and its purpose in the organization and outside ensures that each PKI participant understands it properly and is timely informed about any important events that may impact the participant. - -The awareness is important for all PKI participants to know how to handle exceptional situations and how to react to them. It is also important to know how to communicate and when so as to not misunderstand any issues or incidents. -",R.15.1,Establish and maintain awareness plan,"Awareness plan should be established and maintained to ensure that the PKI participants are aware of all relevant events related to the PKI implementation and its purpose in the organization and outside. It should cover at lease the following information: -- How the organization discloses information to PKI participants -- Contact information -- How are changes communicated -- Who is responsible for accurate awareness -- Resolving communication issues and incidents - -Every PKI participant should receive information and relevant resource in a timely manner according to the awareness plan. -","Assessment -- Documented awareness plan -- Awareness plan is up-to-date -- Review awareness content to ensure that it is contains relevant information -- Awareness plan is approved and communicated to all PKI participants -- Awareness plan is integrated in the organization - -References -- RFC 3647 Internet X.509 Public Key Infrastructure Certificate Policy and Certification Practices Framework -- ETSI EN 319 401 - General Policy Requirements for Trust Service Providers -" -R.15,Awareness,"Providing awareness about the PKI and its purpose in the organization and outside ensures that each PKI participant understands it properly and is timely informed about any important events that may impact the participant. - -The awareness is important for all PKI participants to know how to handle exceptional situations and how to react to them. It is also important to know how to communicate and when so as to not misunderstand any issues or incidents. -",R.15.2,Disclose PKI information,"Information about the policies, processes, and procedures that are maintained by the PKI should be disclosed to the PKI participants. This information should be available on a timely basis and in a form that is understandable to the PKI participants. - -Organization maintaining the PKI implementation should disclose the following information on a website or other appropriate media that can be reached by the PKI participants: -- Certificate Policy -- Certification Practice Statement -- Revocation information -- Valid CA certificates -- Vulnerability reports -- Audit reports -- Contact information -- Obligations of the PKI participants -- Legal liability of the PKI participants -- Warranty information -- Disclaimer information -- Privacy and data protection information -- Other relevant information -","Assessment -- Review disclosure statement content to ensure that it is contains relevant information -- Disclosure statement is approved and communicated to all PKI participants -- Information is available to all PKI participants -- Information is up-to-date - -References -- RFC 3647 Internet X.509 Public Key Infrastructure Certificate Policy and Certification Practices Framework -- ETSI EN 319 401 - General Policy Requirements for Trust Service Providers -" -R.15,Awareness,"Providing awareness about the PKI and its purpose in the organization and outside ensures that each PKI participant understands it properly and is timely informed about any important events that may impact the participant. - -The awareness is important for all PKI participants to know how to handle exceptional situations and how to react to them. It is also important to know how to communicate and when so as to not misunderstand any issues or incidents. -",R.15.3,Establish single point of contact,"The single point of contact (SPOC) provides a convenient way for any PKI participant to contact the organization and responsible personnel of the PKI implementation. The single point of contact should be available 24/7 and should be able to provide relevant information and trigger appropriate procedures if needed based on the situation. - -Contact information for the SPOC should be disclosed to all PKI participants. -The SPOC may be reached through different communication channels, such as: -- Email -- Phone -- Web site form -- Other -","Assessment -- Contact SPOC to ensure that it is available and responds in a timely manner -- Review that the SPOC communicates according to the awareness plan -- Review that the SPOC is able to provide relevant information and trigger appropriate procedures if needed based on the situation - -References -- RFC 3647 Internet X.509 Public Key Infrastructure Certificate Policy and Certification Practices Framework -- ETSI EN 319 401 - General Policy Requirements for Trust Service Providers -" -R.15,Awareness,"Providing awareness about the PKI and its purpose in the organization and outside ensures that each PKI participant understands it properly and is timely informed about any important events that may impact the participant. - -The awareness is important for all PKI participants to know how to handle exceptional situations and how to react to them. It is also important to know how to communicate and when so as to not misunderstand any issues or incidents. -",R.15.4,Timely communication of important information,"In the event of an incident with high impact to the security and established trust of the PKI implementation, the organization should communicate the information to the PKI participants in a timely manner to avoid increased escalation of the event and inform participants of further actions that may be required to execute. - -Example of events that require timely communication may be: -- Compromise of the private key -- Changes in the Certificate Policy -- Changes in the Certification Practice Statement -- Security breach -- Other events that may require immediate action by the PKI participants -","Assessment -- Documented procedures to timely inform PKI participants about high impact events -- Review that the procedures are followed -- Interview personnel to ensure that they are aware of the procedures and know how to communicate the information - -References -- RFC 3647 Internet X.509 Public Key Infrastructure Certificate Policy and Certification Practices Framework -- ETSI EN 319 401 - General Policy Requirements for Trust Service Providers -" diff --git a/integrations/eramba/pkimm-2.0.0.csv b/integrations/eramba/pkimm-2.0.0.csv deleted file mode 100644 index da35f8b..0000000 --- a/integrations/eramba/pkimm-2.0.0.csv +++ /dev/null @@ -1,1997 +0,0 @@ -G.strategy-and-vision,Strategy and vision,"Trusted and secure PKI must be properly managed and supported by the organization. The existence of a strategy and vision for the PKI is one of the key factors for the success of the PKI and contributes to the overall maturity. The strategy and vision should be aligned with the organizational goals and approach and should be followed and measured regularly. - -Formal documentation about the business drivers, scope, and design of the PKI helps to ensure that the PKI is properly aligned and understood to support the organizational. The documentation should be reviewed and updated regularly to ensure that the PKI is aligned with the organizational goals and needs. - -Undefined or unclear understanding and leadership can cause loss of the established trust and can lead to the failure of the PKI quickly. -",G.strategy-and-vision.sponsor-support,Organizational sponsor and support,"The success of the PKI implementation highly depends on the organization top management support. Top management typically also acts as a sponsor of the PKI, meaning that they allocate and approve budget needed to build and maintain the PKI. - -The basic assumption is that the established digital trust is going to be maintained and developed for years, and therefore it is important to have a long-term vision and strategy for the PKI. The strategy and vision should be aligned with the overall organizational goals and approach. -","Assessment -The following is sample evidence that can be used to assess the requirement: -- Interview with the top management -- Documented strategy and vision -- Documented organizational goals and approach -- Understanding of why the PKI is needed and what is the value for the organization -- Support and sponsorship of the top management - -References -- ISO/IEC 27001 - Information security management systems" -G.strategy-and-vision,Strategy and vision,"Trusted and secure PKI must be properly managed and supported by the organization. The existence of a strategy and vision for the PKI is one of the key factors for the success of the PKI and contributes to the overall maturity. The strategy and vision should be aligned with the organizational goals and approach and should be followed and measured regularly. - -Formal documentation about the business drivers, scope, and design of the PKI helps to ensure that the PKI is properly aligned and understood to support the organizational. The documentation should be reviewed and updated regularly to ensure that the PKI is aligned with the organizational goals and needs. - -Undefined or unclear understanding and leadership can cause loss of the established trust and can lead to the failure of the PKI quickly. -",G.strategy-and-vision.responsible-leadership,Formal assignment of responsible leadership,"Proper leadership and responsible person should be assigned by the management to fulfil the role for the establishment, maintenance, and development of the PKI according to the strategy and vision. The responsible person should be able to make decisions and take actions to ensure the PKI is aligned with the organizational goals and needs. -","Assessment -The formal assignment of the responsible person should be documented and approved by the management. Formal document should contains identification of the person and understanding of the role and responsibilities. -Interview with the responsible person should confirm the understanding of the role and responsibilities, driving the PKI implementation according to the organizational strategy. - -References -- ISO/IEC 27001 - Information security management systems" -G.strategy-and-vision,Strategy and vision,"Trusted and secure PKI must be properly managed and supported by the organization. The existence of a strategy and vision for the PKI is one of the key factors for the success of the PKI and contributes to the overall maturity. The strategy and vision should be aligned with the organizational goals and approach and should be followed and measured regularly. - -Formal documentation about the business drivers, scope, and design of the PKI helps to ensure that the PKI is properly aligned and understood to support the organizational. The documentation should be reviewed and updated regularly to ensure that the PKI is aligned with the organizational goals and needs. - -Undefined or unclear understanding and leadership can cause loss of the established trust and can lead to the failure of the PKI quickly. -",G.strategy-and-vision.scope-and-drivers,Scope and business drivers for PKI,"The scope of the PKI should be clearly defined and documented. The scope should be defined in terms of the use-cases that the PKI is going to support. Each use-case can have a different requirements and therefore different strategy. The use-cases should be defined in terms of the business drivers that are going to be supported by the PKI. Business drivers helps to document alignment with the overall organizational goals. - -The scope and business drivers can be considered as a formal high-level overview of the PKI strategy and vision. -Its purpose is also to create a common understanding of the organizational PKI and to provide direction for the detailed design and implementation. -The target audience consists typically of architects, experts, advisors, management, and sponsors. -","Assessment -The following is sample evidence that can be used to assess the requirement: -- Documented scope of the PKI -- Documented business drivers -- Documented use-cases -- Documented alignment with the organizational goals - -References -- ISO/IEC 27001 - Information security management systems -- The Open Group Architecture Framework (TOGAF)" -G.strategy-and-vision,Strategy and vision,"Trusted and secure PKI must be properly managed and supported by the organization. The existence of a strategy and vision for the PKI is one of the key factors for the success of the PKI and contributes to the overall maturity. The strategy and vision should be aligned with the organizational goals and approach and should be followed and measured regularly. - -Formal documentation about the business drivers, scope, and design of the PKI helps to ensure that the PKI is properly aligned and understood to support the organizational. The documentation should be reviewed and updated regularly to ensure that the PKI is aligned with the organizational goals and needs. - -Undefined or unclear understanding and leadership can cause loss of the established trust and can lead to the failure of the PKI quickly. -",G.strategy-and-vision.architecture,Architecture and design of the PKI,"The architecture and design of the PKI should be documented to provide a clear understanding of the implementation and technologies that are involved. The architecture and design should be aligned with the scope and business drivers for the PKI and should be reviewed and updated regularly. - -The architecture and design typically consists of the following: -- Functional and technical design description -- Description of logical components -- Network infrastructure design -- Technology involved -- Integration requirements and interfaces (APIs) -- Support systems (such as IAM, logging, monitoring, etc.) -- Operational requirements -- Security requirements -- Deployment options -- Staging and testing - -The architecture and design are further used for the implementation of the PKI and serves as an input for the PKI team. It can be also used for the procurement of the PKI components and services that are needed for the implementation. -","Assessment -The following is sample evidence that can be used to assess the requirement: -- Documented architecture and design -- Alignment with the scope and business drivers -- Interview with the PKI team to confirm the understanding of the architecture and design - -References -- ETSI EN 319 401 - General Policy Requirements for Trust Service Providers -- The Open Group Architecture Framework (TOGAF)" -G.policies-and-documentation,Policies and documentation,"Documented policies plays an important role in the secure and consistent management of the PKI. The goal is to minimize financial and operational threats and risks in the digital world. Well-described policies and security measures increase overall trust in the ecosystem of trust services and are a condition for successful operation. The basis for these matters lies in relevant laws and regulations, international standards and best practices. - -It consists of: -- formal policies and practice statements for supported PKI services and use-cases -- formal management of agreements between parties involved in the PKI -- certificate and key management rules -- roles and responsibilities in the management of the PKI -- documented disclosure statements -- maintenance and review of policies and documentation -- code of practice for information security management, techniques and risk management - -Properly documented policies keeps the PKI assets trusted over the time and serves as a basis for integrated processes and procedures. It is a living management system that is continuously updated and changed as technologies, security, and compliance requirements change. - -The Certificate Policy (CP) defines the overall policies and requirements of a PKI, the Certification Practice Statement (CPS) provides detailed operational procedures followed by the Certification Authority (CA), and the disclosure statement offers transparency about the CA's identity and services to relying parties. -",G.policies-and-documentation.policy-scope,The scope of policies is defined and documented,"Each PKI implementation and use case is different, therefore it requires different care. The scope of policies that are applicable for the implementation should be defined and documented. When the proper description of the policies scope is provided, it helps all parties involved to understand the purpose of the policies and their applicability. - -The scope can include the following: -- Identification of the policies required for the implementation -- Reasoning why the policies are required or not required -- Structure of policies and documentation -- List of policies with references, versions, etc. -- Any other relevant information -","Assessment -- The scope of policies is defined and documented -- The scope of policies is complete -- Interview with the management and PKI responsible personnel to confirm the scope - -References -- RFC 3647 - Internet X.509 Public Key Infrastructure Certificate Policy and Certification Practices Framework -- ISO/IEC 27001 - Information security management systems -- ETSI EN 319 401 - General Policy Requirements for Trust Service Providers" -G.policies-and-documentation,Policies and documentation,"Documented policies plays an important role in the secure and consistent management of the PKI. The goal is to minimize financial and operational threats and risks in the digital world. Well-described policies and security measures increase overall trust in the ecosystem of trust services and are a condition for successful operation. The basis for these matters lies in relevant laws and regulations, international standards and best practices. - -It consists of: -- formal policies and practice statements for supported PKI services and use-cases -- formal management of agreements between parties involved in the PKI -- certificate and key management rules -- roles and responsibilities in the management of the PKI -- documented disclosure statements -- maintenance and review of policies and documentation -- code of practice for information security management, techniques and risk management - -Properly documented policies keeps the PKI assets trusted over the time and serves as a basis for integrated processes and procedures. It is a living management system that is continuously updated and changed as technologies, security, and compliance requirements change. - -The Certificate Policy (CP) defines the overall policies and requirements of a PKI, the Certification Practice Statement (CPS) provides detailed operational procedures followed by the Certification Authority (CA), and the disclosure statement offers transparency about the CA's identity and services to relying parties. -",G.policies-and-documentation.certificate-policy,Certificate policy is documented and published,"Certificate Policy (CP) is used to establish the controls of the issuing party and the roles and responsibilities of its entities for the specific PKI implementation and use case. It's used to provide assurance to partners and show the trustworthiness by the use of standards. It can be considered as a high level contract between the parties involved in the PKI and therefore should be published and available to all parties involved. - -CPs are described in a document form where the content may differ. Multiple policies can be part of a single document for different use cases. A CP contains a set of rules that indicates the applicability of a certificate to a particular community and/or class of applications with common security requirements or level of security (for instance certificates for the purpose of: persons, domains, organizations, authenticity and confidentiality, services). To uniquely identify the purpose of the certificates the CP contains unique numbers (Object Identifier, OID) which needs to be registered. - -In general a CP addresses the following items: -- Types of certificates -- Document name and identification -- PKI participants -- Certificate usage -- Policy administration -- Definitions -- Publication and repository responsibilities -- Identification and authentication -- Certificate life-cycle operational requirements -- Facility management and operational controls -- Technical security controls -- Certificate, CRL, and OCSP profiles -- Compliance audit and other assessments - - Other business and legal matters -","Assessment -- The CP is properly documented in its full scope -- The CP clearly defines the scope of the policy, such as the purpose of the security and assurance levels, the type and use of its certificates and parties involved -- The legal rights and responsibilities of parties are described in the CP -- CP has listed correct object identifiers for the purpose it's used for -- Verify that the CP is published and available to all parties involved -- Interview with the management and PKI responsible personnel to confirm the CP is accurate and followed - -References -- RFC 3647 - Internet X.509 Public Key Infrastructure Certificate Policy and Certification Practices Framework -- ISO/IEC 27001 - Information security management systems -- ETSI EN 319 411-1 - Policy and security requirements for Trust Service Providers issuing certificates" -G.policies-and-documentation,Policies and documentation,"Documented policies plays an important role in the secure and consistent management of the PKI. The goal is to minimize financial and operational threats and risks in the digital world. Well-described policies and security measures increase overall trust in the ecosystem of trust services and are a condition for successful operation. The basis for these matters lies in relevant laws and regulations, international standards and best practices. - -It consists of: -- formal policies and practice statements for supported PKI services and use-cases -- formal management of agreements between parties involved in the PKI -- certificate and key management rules -- roles and responsibilities in the management of the PKI -- documented disclosure statements -- maintenance and review of policies and documentation -- code of practice for information security management, techniques and risk management - -Properly documented policies keeps the PKI assets trusted over the time and serves as a basis for integrated processes and procedures. It is a living management system that is continuously updated and changed as technologies, security, and compliance requirements change. - -The Certificate Policy (CP) defines the overall policies and requirements of a PKI, the Certification Practice Statement (CPS) provides detailed operational procedures followed by the Certification Authority (CA), and the disclosure statement offers transparency about the CA's identity and services to relying parties. -",G.policies-and-documentation.practice-statement,Certification practice statement is documented and published,"In addition to a CP, there is typically a Certification Practice Statement (CPS). While a CP is more at a strategic level, detailed information about how things should be carried out is part of a CPS (tactical level). The CP and CPS can be combined into a single managed document, however they are typically split for most of the PKI implementations for better orientation. - -The CPS covers the same items as the CP, but includes technical detail of how the CP is implemented. All parties involved in the PKI should be aware of the CPS and follow it. The CPS is a living document that is continuously updated and changed as technologies, security, and compliance requirements change. -","Assessment -- The CPS is properly documented in its full scope -- CPS is published and available to all parties involved -- Interview with the management and PKI responsible personnel to confirm the CPS is accurate and followed -- Confirm that the information in the CPS is consistent with the information in the CP - -References -- RFC 3647 - Internet X.509 Public Key Infrastructure Certificate Policy and Certification Practices Framework -- ISO/IEC 27001 - Information security management systems -- ETSI EN 319 411-1 - Policy and security requirements for Trust Service Providers issuing certificates" -G.policies-and-documentation,Policies and documentation,"Documented policies plays an important role in the secure and consistent management of the PKI. The goal is to minimize financial and operational threats and risks in the digital world. Well-described policies and security measures increase overall trust in the ecosystem of trust services and are a condition for successful operation. The basis for these matters lies in relevant laws and regulations, international standards and best practices. - -It consists of: -- formal policies and practice statements for supported PKI services and use-cases -- formal management of agreements between parties involved in the PKI -- certificate and key management rules -- roles and responsibilities in the management of the PKI -- documented disclosure statements -- maintenance and review of policies and documentation -- code of practice for information security management, techniques and risk management - -Properly documented policies keeps the PKI assets trusted over the time and serves as a basis for integrated processes and procedures. It is a living management system that is continuously updated and changed as technologies, security, and compliance requirements change. - -The Certificate Policy (CP) defines the overall policies and requirements of a PKI, the Certification Practice Statement (CPS) provides detailed operational procedures followed by the Certification Authority (CA), and the disclosure statement offers transparency about the CA's identity and services to relying parties. -",G.policies-and-documentation.disclosure-statement,Disclosure statement is documented and published,"The disclosure statement (DS) is a document that describes the PKI and its services. It refers to a document that discloses the relevant information about the CA and its services to the relying parties. - -It typically includes information like: -- CA's identity, legal status, and contact information -- Certificate types, verification procedures and compliance with standards -- Reliance limits -- Obligations of the CA and the relying parties -- Warranty and liability limitations -- Agreement, CP and CPS -- Privacy policy -- Refund policy and claims -- Information on audit and compliance - -The purpose of a DS is to provide transparency to relying parties, allowing them to assess the trustworthiness and reliability of the CA before relying on its certificates. -","Assessment -- The DS is properly documented in its full scope -- DS is published and available to all parties involved -- Interview with the management and PKI responsible personnel to confirm the DS is accurate -- Confirm that the information in the DS is consistent with the information in the CP and CPS - -References -- ETSI EN 319 411-1 - Policy and security requirements for Trust Service Providers issuing certificates" -G.policies-and-documentation,Policies and documentation,"Documented policies plays an important role in the secure and consistent management of the PKI. The goal is to minimize financial and operational threats and risks in the digital world. Well-described policies and security measures increase overall trust in the ecosystem of trust services and are a condition for successful operation. The basis for these matters lies in relevant laws and regulations, international standards and best practices. - -It consists of: -- formal policies and practice statements for supported PKI services and use-cases -- formal management of agreements between parties involved in the PKI -- certificate and key management rules -- roles and responsibilities in the management of the PKI -- documented disclosure statements -- maintenance and review of policies and documentation -- code of practice for information security management, techniques and risk management - -Properly documented policies keeps the PKI assets trusted over the time and serves as a basis for integrated processes and procedures. It is a living management system that is continuously updated and changed as technologies, security, and compliance requirements change. - -The Certificate Policy (CP) defines the overall policies and requirements of a PKI, the Certification Practice Statement (CPS) provides detailed operational procedures followed by the Certification Authority (CA), and the disclosure statement offers transparency about the CA's identity and services to relying parties. -",G.policies-and-documentation.policy-review,Policies are periodically reviewed and updated,"Policies are living documents that are continuously updated and changed as technologies, security, and compliance requirements change. The policies should be reviewed and updated periodically. The frequency of review should be determined by the organization. Good practice is to review policies at least annually or when there are significant changes in the PKI or its environment. -","Assessment -- The policies are reviewed and updated periodically -- Check the last review date of the policies -- Implementation of review process -- Validation of documentation and reviews -- Interview with the management and PKI responsible personnel to confirm the policies are reviewed and updated periodically - -References -- RFC 3647 - Internet X.509 Public Key Infrastructure Certificate Policy and Certification Practices Framework -- ISO/IEC 27001 - Information security management systems -- ETSI EN 319 401 - General Policy Requirements for Trust Service Providers" -G.compliance,Compliance,"Compliance refers to the ability of an organization to adhere to relevant laws, regulations, and standards related to the scope of the PKI. A properly implemented PKI Compliance program ensures that an organization's PKI is protected from threats and risks that could result in financial loss, reputational damage, legal liabilities, or eventually in the loss of trust. - -The compliance process helps to manage a PKI in a way that meets legal and regulatory requirements, and ensures information is used and protected appropriately, according to defined and documented policies and practices statements. - -Compliance is important for several reasons, including: -- It supports the risk management process associated with the PKI assets -- Minimize reputation issues that can lead to the loss of trust -- Provides assurance for the relying parties and subscribers -- Proves adherence to legal requirements - -Overall, compliance and related procedures help to ensure that the PKI is managed and maintained according to the relevant laws, regulations, and standards. This minimizes the risk of loss of trust and provides assurance to PKI participants. -",G.compliance.compliance-policies,"Compliance policies are defined, implemented, and communicated","Compliance policies are a critical component of an organization’s risk management strategy to help ensure that the PKI system is secure, reliable, trustworthy, and meets any applicable regulatory requirements. - -By defining appropriate policies and related procedures and communicating these to all stakeholders who rely on the PKI, the organization can ensure that administrators, operators, and users are properly authenticated and authorized to access the system and that appropriate controls are in place to prevent unauthorized access or misuse of the PKI. - -Having a sound set of compliance policies defined, implemented, and communicated can help to demonstrate that the organization took reasonable steps to protect the PKI and may result in reduced legal liability in the event of a breach due to improper or malicious use of the PKI. - -The compliance policies typically include: -- Laws, industry regulations and government legislation that apply to the organization business and PKI -- Roles and responsibilities -- Compliance program management requirements -- Reporting and auditing requirements -- References to relevant documents (anti-trust, anti-fraud, anti-bribery, anti-money laundering, due diligence, etc.) -- Any other relevant information that rule compliance -","Assessment -- Documented audit and accountability policies -- Documented communication plan for informing stakeholders of the policies -- Formalized process for stakeholder acknowledgement upon receipt of the policies - -References -- ISO 37301 - Compliance management systems and related standard -- NIST Risk Management Framework" -G.compliance,Compliance,"Compliance refers to the ability of an organization to adhere to relevant laws, regulations, and standards related to the scope of the PKI. A properly implemented PKI Compliance program ensures that an organization's PKI is protected from threats and risks that could result in financial loss, reputational damage, legal liabilities, or eventually in the loss of trust. - -The compliance process helps to manage a PKI in a way that meets legal and regulatory requirements, and ensures information is used and protected appropriately, according to defined and documented policies and practices statements. - -Compliance is important for several reasons, including: -- It supports the risk management process associated with the PKI assets -- Minimize reputation issues that can lead to the loss of trust -- Provides assurance for the relying parties and subscribers -- Proves adherence to legal requirements - -Overall, compliance and related procedures help to ensure that the PKI is managed and maintained according to the relevant laws, regulations, and standards. This minimizes the risk of loss of trust and provides assurance to PKI participants. -",G.compliance.compliance-monitoring,A program to monitor compliance with the policies is established,"A PKI compliance monitoring program typically involves ongoing monitoring and testing of the controls and procedures to detect potential compliance violations associated with rules and regulations that govern the issuance, update, or revocation of certificates. - -These programs often include a risk assessment to identify and assess potential risks that could lead to non-compliance, including regulatory changes, operational changes, or employee turnover. - -The monitoring process may include reviewing documentation, conducting interviews with key stakeholders, and reporting any issues or compliance violations. Reporting from compliance monitoring should be communicated to those stakeholders who committed the violation(s) and those stakeholders who are empowered to take corrective action to address the violations observed. -","Assessment -- Documented practices regarding periodic and aperiodic compliance assessments -- Documented practices for regularly review and reporting of security issues -- Documented and implemented processes for investigation and response to suspicious activities - -References -- ISO 37301 - Compliance management systems and related standard -- NIST Risk Management Framework" -G.compliance,Compliance,"Compliance refers to the ability of an organization to adhere to relevant laws, regulations, and standards related to the scope of the PKI. A properly implemented PKI Compliance program ensures that an organization's PKI is protected from threats and risks that could result in financial loss, reputational damage, legal liabilities, or eventually in the loss of trust. - -The compliance process helps to manage a PKI in a way that meets legal and regulatory requirements, and ensures information is used and protected appropriately, according to defined and documented policies and practices statements. - -Compliance is important for several reasons, including: -- It supports the risk management process associated with the PKI assets -- Minimize reputation issues that can lead to the loss of trust -- Provides assurance for the relying parties and subscribers -- Proves adherence to legal requirements - -Overall, compliance and related procedures help to ensure that the PKI is managed and maintained according to the relevant laws, regulations, and standards. This minimizes the risk of loss of trust and provides assurance to PKI participants. -",G.compliance.compliance-responsibilities,Responsibilities for the compliance are formally defined and assigned,"Within the organization, there should exist clear and well documented guidelines outlining which individual, group or team is responsible for ensuring that PKI policies are being followed. This applies to governance and oversight in addition to operational policies and procedures. - -Documenting specifically ""who"" shall be responsible for ensuring PKI policies are being enforced enhances accountability and trustworthiness of the PKI by enforcing the mentality that ""someone is watching"". This will help to mitigate risks associated with improper or malicious acts. -","Assessment -- For each defined procedure, a specific individual or team is identified and assigned to perform the tasks associated with the procedure -- Interview with the personnel to confirm understanding of the role and responsibilities - -References -- ISO 37301 - Compliance management systems and related standard -- NIST Risk Management Framework" -G.compliance,Compliance,"Compliance refers to the ability of an organization to adhere to relevant laws, regulations, and standards related to the scope of the PKI. A properly implemented PKI Compliance program ensures that an organization's PKI is protected from threats and risks that could result in financial loss, reputational damage, legal liabilities, or eventually in the loss of trust. - -The compliance process helps to manage a PKI in a way that meets legal and regulatory requirements, and ensures information is used and protected appropriately, according to defined and documented policies and practices statements. - -Compliance is important for several reasons, including: -- It supports the risk management process associated with the PKI assets -- Minimize reputation issues that can lead to the loss of trust -- Provides assurance for the relying parties and subscribers -- Proves adherence to legal requirements - -Overall, compliance and related procedures help to ensure that the PKI is managed and maintained according to the relevant laws, regulations, and standards. This minimizes the risk of loss of trust and provides assurance to PKI participants. -",G.compliance.regulatory-inventory,"List of relevant laws, regulations, and standards, exist and is maintained","To better understand the relevance to PKI, one should understand the differences between laws, regulations, and standards. - -Laws are legal rules that are enacted by a governing body, such as a federal, state or local government. They are binding and enforceable by the legal system within the jurisdiction of the governing body that enacted them. Violating law can lead to legal consequences, such as fines or imprisonment. - -Regulations are derived from laws and are often meant to supplement and clarify the broader provisions outlined in the laws. Compliance with regulations is mandatory and non-compliance can result in penalties or other legal consequences. - -Standards are voluntary guidelines or specifications typically established by a particular industry group or standards organization. Standards usually define best practices, technical specifications, quality benchmarks, and other criteria and are meant as a means of ensuring consistency, interoperability, and quality. Typically, compliance with standards is not legally required, however, lack of conformance to standards can lead to diminished interoperability and reduced trust. - -With respect to PKI, it is very important to understand what laws, regulations and standards are relevant to the PKI and its ancillary systems. For example, given that PKI involves cryptography, one must be certain to adhere to government laws regarding use and deployment of cryptographic products and solutions. - -And, many times, a PKI will make use of hardware cryptographic modules for key generation and storage. Therefore, it’s critical to ensure that the hardware cryptographic modules comply with the relevant standards. There are many laws, regulations and standards that apply to PKI. As such, it is necessary to maintain a list of the ones that are relevant to your organization to help ensure that none are being overlooked. -","Assessment -- Documented list of applicable laws, regulations and standards is maintained -- Procedures established for periodic review of the laws, regulations and standards -- Procedures established to remediate any deficiencies or non-compliance issues identified -- Procedures established to communicate results of the periodic reviews - -References -- ISO 37301 - Compliance management systems and related standard -- NIST Risk Management Framework" -G.processes-and-procedures,Processes and procedures,"Proper and effective processes and procedures related to PKI operations and management are essential for the successful implementation of the PKI. The processes and procedures should be aligned with the overall organizational policies and statements. - -Process is a set of activities that are performed in a specific order to achieve a specific goal. The process should be documented and measured. The process is also repeatable and can be improved over time, based on the evaluation, feedback, or risk assessment. The scope of the processes is defined by the policies. - -Procedure is a set of instructions that describe how to perform a specific task. The procedure should be also documented and can be used as a reference for the process. Procedure can include specific instructions for the process, such as how to perform a specific task, or how to use a specific tool. - -Processes and procedure typically cover (but are not limited to) the following areas: -- infrastructure management -- data privacy and security -- business continuity, disaster recovery, contingency planning -- supply chain management -- physical security and access control -- incident management -- audit and compliance, evidence and reporting, archiving -- risk management and assessment -",G.processes-and-procedures.process-scope,Scope of processes and procedure is aligned with policies,"The scope of the processes and procedures should be aligned with the policies and statements. Each implementation and use case can have different scope, but the scope should be defined and documented, with all applicable processes, procedures, and eventually instructions. - -The alignment with the policies helps to ensure that the processes and procedures are aligned with the PKI implementation goals and needs, and can be effectively trusted over the time. A simple matrix can be used to ensure that all applicable policies and statements are covered by the processes and procedures. - -The completeness of the processes and procedures can be evaluated by the risk assessment, audit, or by the feedback from the users. -","Assessment -The following is a sample evidence and information that can be collected during the assessment: -- Documented scope of the processes and procedures -- Alignment with the PKI policies and statements -- Interview with the PKI management - -References -- RFC 3647 - Internet X.509 Public Key Infrastructure Certificate Policy and Certification Practices Framework -- ISO/IEC 27001 - Information security management systems" -G.processes-and-procedures,Processes and procedures,"Proper and effective processes and procedures related to PKI operations and management are essential for the successful implementation of the PKI. The processes and procedures should be aligned with the overall organizational policies and statements. - -Process is a set of activities that are performed in a specific order to achieve a specific goal. The process should be documented and measured. The process is also repeatable and can be improved over time, based on the evaluation, feedback, or risk assessment. The scope of the processes is defined by the policies. - -Procedure is a set of instructions that describe how to perform a specific task. The procedure should be also documented and can be used as a reference for the process. Procedure can include specific instructions for the process, such as how to perform a specific task, or how to use a specific tool. - -Processes and procedure typically cover (but are not limited to) the following areas: -- infrastructure management -- data privacy and security -- business continuity, disaster recovery, contingency planning -- supply chain management -- physical security and access control -- incident management -- audit and compliance, evidence and reporting, archiving -- risk management and assessment -",G.processes-and-procedures.process-documentation,Processes and procedures are formally documented and followed,"Identified processes and procedures needs to be properly designed and documented with all relevant information like scope, purpose, inputs, outputs, roles and responsibilities, and other. The processes and procedures should be also reviewed and approved by the management. -Once the processes and procedures are published, appropriate training is required to ensure they are followed by the PKI management and staff. Without following the processes and procedures, the PKI can be exposed to the risks and threats, and eventually lose any established trust. -","Assessment -The following is sample evidence and information that can be collected during the assessment: -- Documented processes and procedures -- Completeness of the processes and procedures documentation -- Evidence of the processes and procedures usage -- Interview with the PKI management and staff -- Training materials covering the processes and procedures - -References -- ISO/IEC 27001 - Information security management systems -- ENISA Publications" -G.processes-and-procedures,Processes and procedures,"Proper and effective processes and procedures related to PKI operations and management are essential for the successful implementation of the PKI. The processes and procedures should be aligned with the overall organizational policies and statements. - -Process is a set of activities that are performed in a specific order to achieve a specific goal. The process should be documented and measured. The process is also repeatable and can be improved over time, based on the evaluation, feedback, or risk assessment. The scope of the processes is defined by the policies. - -Procedure is a set of instructions that describe how to perform a specific task. The procedure should be also documented and can be used as a reference for the process. Procedure can include specific instructions for the process, such as how to perform a specific task, or how to use a specific tool. - -Processes and procedure typically cover (but are not limited to) the following areas: -- infrastructure management -- data privacy and security -- business continuity, disaster recovery, contingency planning -- supply chain management -- physical security and access control -- incident management -- audit and compliance, evidence and reporting, archiving -- risk management and assessment -",G.processes-and-procedures.bau-execution,Recurring activities are executed on time,"Recurring activities are the activities that are performed on a regular basis, such as certificate management operations, backup procedures, security reviews, risk assessment, reviews of logs and security events, and other. - -Each activity should be tracked and have a frequency defined, for example, some activities may be performed daily, weekly, monthly, quarterly, or yearly. The activities should be performed on time, and any delays should be properly tracked and reported. - -Recurring activities needs to be incorporated into the processes and procedures to support the PKI implementation. -","Assessment -The following is sample evidence and information that can be collected during the assessment: -- Documented business as usual activities -- Evidence of the business as usual activities execution -- Business as usual activities tracking and reporting -- Calendar of activities -- Interview with the PKI management and staff - -References -- ISO/IEC 27001 - Information security management systems -- RFC 3647 - Internet X.509 Public Key Infrastructure Certificate Policy and Certification Practices Framework" -G.processes-and-procedures,Processes and procedures,"Proper and effective processes and procedures related to PKI operations and management are essential for the successful implementation of the PKI. The processes and procedures should be aligned with the overall organizational policies and statements. - -Process is a set of activities that are performed in a specific order to achieve a specific goal. The process should be documented and measured. The process is also repeatable and can be improved over time, based on the evaluation, feedback, or risk assessment. The scope of the processes is defined by the policies. - -Procedure is a set of instructions that describe how to perform a specific task. The procedure should be also documented and can be used as a reference for the process. Procedure can include specific instructions for the process, such as how to perform a specific task, or how to use a specific tool. - -Processes and procedure typically cover (but are not limited to) the following areas: -- infrastructure management -- data privacy and security -- business continuity, disaster recovery, contingency planning -- supply chain management -- physical security and access control -- incident management -- audit and compliance, evidence and reporting, archiving -- risk management and assessment -",G.processes-and-procedures.process-evidence,Evidence from procedures is collected and maintained,"Each process, procedure, instruction, or activity would not be effective without evidence confirming that it was performed. The evidence should be descriptive with all relevant information, such as date and time, who performed the activity, what was the result, and other information, if needed. - -The evidence can be collected and maintained in various forms, such as logs, reports, notes, screenshots, etc. The evidence should be collected and maintained for the defined period of time, and should be available for the audit or other purposes. -","Assessment -The following is sample evidence and information that can be collected during the assessment: -- Evidence of the execution of the processes and procedures -- Interview with the PKI management and staff -- Logs, reports, notes, screenshots, and other evidence - -References -- ISO/IEC 27001 - Information security management systems -- RFC 3647 - Internet X.509 Public Key Infrastructure Certificate Policy and Certification Practices Framework -- ENISA Publications" -G.processes-and-procedures,Processes and procedures,"Proper and effective processes and procedures related to PKI operations and management are essential for the successful implementation of the PKI. The processes and procedures should be aligned with the overall organizational policies and statements. - -Process is a set of activities that are performed in a specific order to achieve a specific goal. The process should be documented and measured. The process is also repeatable and can be improved over time, based on the evaluation, feedback, or risk assessment. The scope of the processes is defined by the policies. - -Procedure is a set of instructions that describe how to perform a specific task. The procedure should be also documented and can be used as a reference for the process. Procedure can include specific instructions for the process, such as how to perform a specific task, or how to use a specific tool. - -Processes and procedure typically cover (but are not limited to) the following areas: -- infrastructure management -- data privacy and security -- business continuity, disaster recovery, contingency planning -- supply chain management -- physical security and access control -- incident management -- audit and compliance, evidence and reporting, archiving -- risk management and assessment -",G.processes-and-procedures.process-improvement,Processes and procedures are reviewed and updated,"The processes and procedures should be reviewed and updated on a regular basis, based on the feedback, risk assessment, audit, or other. The review should be performed by the management, and the updates should be approved by the management. - -The review and update of the processes and procedures helps to keep the PKI implementation up to date, and helps to ensure that the processes and procedures are effective and efficient. -","Assessment -The following is sample evidence and information that can be collected during the assessment: -- Documented review and update process -- Evidence of the review and update of the processes and procedures -- Interview with the PKI management and staff - -References -- ISO/IEC 27001 - Information security management systems -- RFC 3647 - Internet X.509 Public Key Infrastructure Certificate Policy and Certification Practices Framework -- ENISA Publications" -G.cryptography,Cryptography,"The organization defines how it governs the selection, approval, documentation, visibility, and evolution of cryptographic algorithms, cryptographic parameters, and cryptographic protocols used within its PKI and related systems. - -The cryptographic policy and strategic direction should be established. It ensures that cryptographic choices are deliberate, consistent, risk-based, and adaptable over time. - -The organization should separate cryptographic governance (what is allowed and why) from cryptographic implementation (how cryptography is used in systems): -- It defines what cryptography is allowed and why -- It does not define how keys or certificates are technically managed -- It provides a single authoritative source for cryptographic rules - -Cryptographic governance may be implemented using policies, standards, profiles, baselines, or other organizational mechanisms, provided the governance outcomes defined in this category are achieved. - -This category does not address the operational lifecycle of cryptographic keys or certificates, which are covered in the Key Management and Certificate Management categories. -",G.cryptography.crypto-terminology,Cryptographic terminology and scope are defined and documented,"Inconsistent or ambiguous terminology leads to misinterpretation of requirements, incorrect implementation, and duplication across teams. Clear terminology ensures that cryptographic policy, key management, certificate management, and change processes are aligned and understood in the same way. - -The organization should define and document consistent terminology for cryptographic concepts, including: -- Cryptographic algorithms -- Cryptographic keys -- Digital certificates -- Cryptographic protocols -- Cryptographic parameters and security levels -- Cryptographic profiles - -Terminology should be used consistently across policies, standards, and procedures. -","Assessment -- Documented cryptographic definitions exist. -- Terminology is consistently used across PKI documentation. -- Stakeholders demonstrate a shared understanding of terms. - -References -- NIST SP 800-57 Part 1 Rev. 5 - Recommendation for Key Management -- PCI Cryptography Guidance -- CycloneDX - Cryptography Registry" -G.cryptography,Cryptography,"The organization defines how it governs the selection, approval, documentation, visibility, and evolution of cryptographic algorithms, cryptographic parameters, and cryptographic protocols used within its PKI and related systems. - -The cryptographic policy and strategic direction should be established. It ensures that cryptographic choices are deliberate, consistent, risk-based, and adaptable over time. - -The organization should separate cryptographic governance (what is allowed and why) from cryptographic implementation (how cryptography is used in systems): -- It defines what cryptography is allowed and why -- It does not define how keys or certificates are technically managed -- It provides a single authoritative source for cryptographic rules - -Cryptographic governance may be implemented using policies, standards, profiles, baselines, or other organizational mechanisms, provided the governance outcomes defined in this category are achieved. - -This category does not address the operational lifecycle of cryptographic keys or certificates, which are covered in the Key Management and Certificate Management categories. -",G.cryptography.crypto-algorithms,Cryptographic algorithms and parameters are documented and approved,"Without explicit approval rules, cryptographic algorithms are often selected based on defaults, legacy compatibility, or convenience. Documented approvals ensure consistent security levels, reduce technical debt, and enable controlled cryptographic evolution. - -The organization should document: -- Approved cryptographic algorithms -- Approved cryptographic parameters (e.g., key sizes, curves) -- Restricted, deprecated, or prohibited algorithms - -Each decision should include rationale and applicability. -","Assessment -- Approved and prohibited algorithms are documented. -- Parameter requirements are clearly defined. -- Documentation is reviewed periodically. - -References -- NIST SP 800-131A Rev. 2 - Transitioning the Use of Cryptographic Algorithms and Key Lengths" -G.cryptography,Cryptography,"The organization defines how it governs the selection, approval, documentation, visibility, and evolution of cryptographic algorithms, cryptographic parameters, and cryptographic protocols used within its PKI and related systems. - -The cryptographic policy and strategic direction should be established. It ensures that cryptographic choices are deliberate, consistent, risk-based, and adaptable over time. - -The organization should separate cryptographic governance (what is allowed and why) from cryptographic implementation (how cryptography is used in systems): -- It defines what cryptography is allowed and why -- It does not define how keys or certificates are technically managed -- It provides a single authoritative source for cryptographic rules - -Cryptographic governance may be implemented using policies, standards, profiles, baselines, or other organizational mechanisms, provided the governance outcomes defined in this category are achieved. - -This category does not address the operational lifecycle of cryptographic keys or certificates, which are covered in the Key Management and Certificate Management categories. -",G.cryptography.crypto-protocols,Cryptographic protocols and versions are documented and approved,"Protocols define how cryptography is actually used in communication. Even strong algorithms can be undermined by weak or outdated protocol versions. Clear protocol governance prevents insecure defaults and uncontrolled legacy usage. - -The organization should define which cryptographic protocols and protocol versions are approved, restricted, deprecated, or prohibited. -","Assessment -- Protocol and version rules are documented. -- Deprecated or prohibited protocols are identified. -- Exceptions are formally approved. - -References -- NIST SP 800-52 Rev. 2 - Guidelines for the Selection, Configuration, and Use of Transport Layer Security (TLS) Implementations -- OWASP Transport Layer Security Cheat Sheet" -G.cryptography,Cryptography,"The organization defines how it governs the selection, approval, documentation, visibility, and evolution of cryptographic algorithms, cryptographic parameters, and cryptographic protocols used within its PKI and related systems. - -The cryptographic policy and strategic direction should be established. It ensures that cryptographic choices are deliberate, consistent, risk-based, and adaptable over time. - -The organization should separate cryptographic governance (what is allowed and why) from cryptographic implementation (how cryptography is used in systems): -- It defines what cryptography is allowed and why -- It does not define how keys or certificates are technically managed -- It provides a single authoritative source for cryptographic rules - -Cryptographic governance may be implemented using policies, standards, profiles, baselines, or other organizational mechanisms, provided the governance outcomes defined in this category are achieved. - -This category does not address the operational lifecycle of cryptographic keys or certificates, which are covered in the Key Management and Certificate Management categories. -",G.cryptography.crypto-visibility,Visibility into cryptographic usage is established and maintained,"Cryptographic risk cannot be managed if cryptographic usage is unknown. Visibility is essential for impact analysis, deprecation planning, incident response, and cryptographic agility. - -The organization should maintain visibility into where cryptography is used, including algorithms, keys, certificates, and protocols. -","Assessment -- Cryptographic usage information exists for critical systems. -- Visibility supports risk and transition planning. -- Gaps are identified and addressed. - -References -- NIST Cybersecurity Framework - Identify Function -- EUCC Guidelines on Cryptography Inventory -- CycloneDX Cryptography Bill of Materials (CBOM)" -G.cryptography,Cryptography,"The organization defines how it governs the selection, approval, documentation, visibility, and evolution of cryptographic algorithms, cryptographic parameters, and cryptographic protocols used within its PKI and related systems. - -The cryptographic policy and strategic direction should be established. It ensures that cryptographic choices are deliberate, consistent, risk-based, and adaptable over time. - -The organization should separate cryptographic governance (what is allowed and why) from cryptographic implementation (how cryptography is used in systems): -- It defines what cryptography is allowed and why -- It does not define how keys or certificates are technically managed -- It provides a single authoritative source for cryptographic rules - -Cryptographic governance may be implemented using policies, standards, profiles, baselines, or other organizational mechanisms, provided the governance outcomes defined in this category are achieved. - -This category does not address the operational lifecycle of cryptographic keys or certificates, which are covered in the Key Management and Certificate Management categories. -",G.cryptography.crypto-lifecycle,Cryptographic lifecycle and deprecation rules are defined,"Cryptography degrades over time due to advances in computing and cryptanalysis. Explicit lifecycle rules prevent reactive, crisis-driven migrations and support predictable, risk-based transitions. - -The organization should define rules for: -- Approving new cryptography -- Setting expected validity periods -- Deprecating cryptography -- Identifying replacement options -","Assessment -- Lifecycle and deprecation rules are documented. -- Deprecation decisions follow defined criteria. -- Replacement planning is evident. - -References -- NIST SP 800-131A Rev. 2 - Transitioning the Use of Cryptographic Algorithms and Key Lengths -- NIST SP 800-57 Part 1 Rev. 5 - Recommendation for Key Management" -G.cryptography,Cryptography,"The organization defines how it governs the selection, approval, documentation, visibility, and evolution of cryptographic algorithms, cryptographic parameters, and cryptographic protocols used within its PKI and related systems. - -The cryptographic policy and strategic direction should be established. It ensures that cryptographic choices are deliberate, consistent, risk-based, and adaptable over time. - -The organization should separate cryptographic governance (what is allowed and why) from cryptographic implementation (how cryptography is used in systems): -- It defines what cryptography is allowed and why -- It does not define how keys or certificates are technically managed -- It provides a single authoritative source for cryptographic rules - -Cryptographic governance may be implemented using policies, standards, profiles, baselines, or other organizational mechanisms, provided the governance outcomes defined in this category are achieved. - -This category does not address the operational lifecycle of cryptographic keys or certificates, which are covered in the Key Management and Certificate Management categories. -",G.cryptography.crypto-agility,Cryptographic agility is defined and governed,"Cryptographic change is inevitable. Organizations that define and govern cryptographic agility can respond to algorithm compromise, deprecation, and emerging requirements in a controlled and timely manner. - -The organization should define governance and planning for responding to cryptographic change drivers such as: -- algorithm compromise -- algorithm deprecation -- regulatory change -- emerging cryptographic requirements -","Assessment -- Governance for cryptographic transitions is documented. -- Transition planning aligns with organizational change management. -- Preparedness for cryptographic transitions can be demonstrated. - -References -- NIST CSWP 39 - Considerations for Achieving Cryptographic Agility: Strategies and Practices" -M.key-management,Key management,"Key management is the set of techniques and procedures supporting the establishment and maintenance of keying relationships between parties and components in the public key infrastructure. Key management encompasses techniques and procedures supporting: -- Initialization of system users and components; -- Generation, distribution, and installation of keying material; -- Controlling the use of keying material; -- Update, revocation, and destruction of keying material; and -- Storage, backup/recovery, and archival of keying material. - -The key management is important for the PKI to maintain trust. It should be an integral part of the PKI procedures. Proper key management is one of the basic stones on which the PKI stands and relies on. -",M.key-management.key-mgmt-roles,Key management roles and responsibilities are documented and formally assigned,"Proper definition of roles and responsibilities for key management operations establishes a good basis for accountability and auditing. The roles and responsibilities should follow key management policy, principles, and boundaries. - -Personnel should be formally assigned to the role based on appropriate skills, and background check to ensure that there are no external risks associated that can cause potential compromise of key management. - -Naming or assignment records should contain relevant information such as: -- Identification of personnel -- Role to be assigned -- Date of appointment -- Confirmation of required skills -- Acknowledgment of responsibilities -","Assessment -- Documented roles and responsibilities -- Signed naming protocol of personnel to role(s) -- Roles and responsibilities matrix (that may be used to cross-check if there are any conflicting roles) -- Validation of required knowledge and skills -- Review according to the key management policy - -References -- ISO/IEC 27001 and related standards" -M.key-management,Key management,"Key management is the set of techniques and procedures supporting the establishment and maintenance of keying relationships between parties and components in the public key infrastructure. Key management encompasses techniques and procedures supporting: -- Initialization of system users and components; -- Generation, distribution, and installation of keying material; -- Controlling the use of keying material; -- Update, revocation, and destruction of keying material; and -- Storage, backup/recovery, and archival of keying material. - -The key management is important for the PKI to maintain trust. It should be an integral part of the PKI procedures. Proper key management is one of the basic stones on which the PKI stands and relies on. -",M.key-management.key-inventory,Inventory of cryptographic keys is documented and maintained,"Inventory of cryptographic keys is important and a strategic database for organizations to: -- Monitor cryptographic key status and compliance -- Quickly react to changes and incidents (deprecation of algorithms, compromise, new attacks and vulnerabilities) -- Understand impact of lifecycle changes, migration and use of keys - -Although the cryptographic key inventory may be implemented and maintained using various tools and approaches, it should serve the purpose of having a consistent and accurate map of all cryptographic keys deployed in the organization with details like algorithm, key length, usage, storage, location, generation and distribution method, backup and recovery, key check value, fingerprint, number of share or components, owner or responsible person, uniqueness, crypto-periods, or any other applicable attributes and properties of the key. - -Inventory should follow procedures and business as usual activities to keep it accurate and updated in time. -","Assessment -- Documented inventory of cryptographic keys -- Accuracy and consistency -- Completeness of inventory -- Validation of cryptographic key records - -References -- NIST SP 800-57 Part 1 Rev. 5 - Recommendation for Key Management -- ISO/IEC 11770 Key Management" -M.key-management,Key management,"Key management is the set of techniques and procedures supporting the establishment and maintenance of keying relationships between parties and components in the public key infrastructure. Key management encompasses techniques and procedures supporting: -- Initialization of system users and components; -- Generation, distribution, and installation of keying material; -- Controlling the use of keying material; -- Update, revocation, and destruction of keying material; and -- Storage, backup/recovery, and archival of keying material. - -The key management is important for the PKI to maintain trust. It should be an integral part of the PKI procedures. Proper key management is one of the basic stones on which the PKI stands and relies on. -",M.key-management.device-inventory,Inventory of cryptographic devices is documented and maintained,"Sensitive cryptographic keys are protected by hardware security modules that can have various forms and comply with security standards such as FIPS 140-3 or Common Criteria Protection Profiles. The keys may be in some case software-protected when there is no high risk associated with its compromise. - -The approved ways of protecting cryptographic keys should have defined rules, which can be specified by the key management policy and followed using the key management procedures. Cryptographic devices that protect keys may be quickly identified using the inventory of cryptographic keys with reference to an inventory of cryptographic devices. - -The inventory of cryptographic devices should contain relevant information such as: -- Vendor and device model identification -- Serial numbers -- Hardware / firmware / software versions -- Security certification and expiration dates -- Locations -","Assessment -- Documented requirements for cryptographic devices -- Documented inventory of cryptographic devices -- Completeness, accuracy, and consistency of inventory -- Validation of records - -References -- NIST SP 800-57 Part 1 Rev. 5 - Recommendation for Key Management -- ISO/IEC 11770 Key Management" -M.key-management,Key management,"Key management is the set of techniques and procedures supporting the establishment and maintenance of keying relationships between parties and components in the public key infrastructure. Key management encompasses techniques and procedures supporting: -- Initialization of system users and components; -- Generation, distribution, and installation of keying material; -- Controlling the use of keying material; -- Update, revocation, and destruction of keying material; and -- Storage, backup/recovery, and archival of keying material. - -The key management is important for the PKI to maintain trust. It should be an integral part of the PKI procedures. Proper key management is one of the basic stones on which the PKI stands and relies on. -",M.key-management.key-lifecycle,Each cryptographic key is defined and has documented lifecycle procedures,"Each cryptographic key type that is defined and used for specific use-case should have a complete description of its lifecycle. Each lifecycle phase has a proper description of the process and is backed up with the procedure that is executed when needed. - -The key can have various lifecycle phases, such as generation, registration, initialization, distribution, loading, storage, archiving, backup, recovery, revocation, removal, destruction, or others applicable for the key. - -The lifecycle phases contains appropriate description of the procedure such as: -- Prerequisites for execution -- Required roles and permissions -- Procedure and records -","Assessment -- Examine the definition of cryptographic key -- Documented key lifecycle phases -- Documented procedures and related records for the key lifecycle -- Lifecycle is integrated and followed in the organization - -References -- NIST SP 800-57 Part 1 Rev. 5 - Recommendation for Key Management -- ISO/IEC 11770 Key Management" -M.key-management,Key management,"Key management is the set of techniques and procedures supporting the establishment and maintenance of keying relationships between parties and components in the public key infrastructure. Key management encompasses techniques and procedures supporting: -- Initialization of system users and components; -- Generation, distribution, and installation of keying material; -- Controlling the use of keying material; -- Update, revocation, and destruction of keying material; and -- Storage, backup/recovery, and archival of keying material. - -The key management is important for the PKI to maintain trust. It should be an integral part of the PKI procedures. Proper key management is one of the basic stones on which the PKI stands and relies on. -",M.key-management.key-mgmt-review,Key management is periodically reviewed and updated,"Key management policy, processes and procedures related to cryptographic keys, inventory and lifecycle should be periodically reviewed, updated and approved. The frequency of review should be based on the organizational risks and needs to be protected against current and future trends. - -Periodical review helps to keep the key management accurate and helps to maintain required skills and knowledge. -It provides assurance that the expected controls are active and working as intended. -","Assessment -- Risk management and review frequency -- Implementation of review process -- Validation of documentation and reviews - -References -- ISO/IEC 27001 and related standards" -M.certificate-management,Certificate management,"Certificate management is the set of techniques and procedures supporting certificate lifecycle management. Certificate management encompasses techniques and procedures supporting: -- Definition of certificate profiles -- Generation of certificates -- Installation and orchestration of certificates -- Inventory of certificates -- State management of certificates, i.e. expiration and revocation -- Discovery of certificates - -The techniques can be applied to an organization that makes use of PKI, or from an organization (or part of an organization) that operates a PKI for others. This category primarily targets an organization from a usage perspective, albeit the certificate lifecycle management is equally important for an organization that operates a PKI for someone else. -",M.certificate-management.cert-profiles,Certificate profiles are documented,"Certificate profiles specify the contents of certificates for one or more use cases. It defines things such as: -- Certificate use case(s) for certificates covered by specific profiles -- Naming standards for subject distinguished name and subject alternative names, which are allowed and mandatory fields. -- Certificate validity periods -- Certificate extensions, mandatory and allowed extensions, their criticality and possible values -- Allowed key types and signature algorithms -- Revocation profiles, i.e. CRL and/or OCSP -","Assessment -- Documented scope of applicability -- Documented and approved certificate profiles -- Content of the profiles is complete and unambiguous -- Certificate profiles are implemented in certificattion authority -- Certificate profiles are enforced by certification authority -- Certificate profiles are compatible with RFC5280, or deviations are well documented -- Profiles for CRLs and/or OCSP usage, i.e. validity periods, issuance intervals, max revocation time delay, etc - -References -- RFC 5280 - Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile -- CA/B Forum baseline requirements -- ETSI Qualified Certificate Profiles -- ETSI EN 319 411-1 - Policy and security requirements for Trust Service Providers issuing certificates -- ETSI 319-411-2 -- 3GPP 33.310 - Network Domain Security (NDS); Authentication Framework (AF) -- UNISIG SUBSET-137" -M.certificate-management,Certificate management,"Certificate management is the set of techniques and procedures supporting certificate lifecycle management. Certificate management encompasses techniques and procedures supporting: -- Definition of certificate profiles -- Generation of certificates -- Installation and orchestration of certificates -- Inventory of certificates -- State management of certificates, i.e. expiration and revocation -- Discovery of certificates - -The techniques can be applied to an organization that makes use of PKI, or from an organization (or part of an organization) that operates a PKI for others. This category primarily targets an organization from a usage perspective, albeit the certificate lifecycle management is equally important for an organization that operates a PKI for someone else. -",M.certificate-management.cert-lifecycle,Certificate lifecycle management is documented,"Issuance of certificates follow specific procedures, be it manual processes or automated processes using standard or non-standard PKI protocol. An organization should be clear about the full life cycle management of certificates: -1. Certificate Application and the validation procedures used, by RAs and CAs -2. Certificate Issuance and protocols used for enrollment, on-line and off-line -3. Certificate Renewal, Re-key and Modification, upon expiration or other causes - - Process of monitoring certificates for expiration and timely renewal processes prevent common issues -4. Certificate Revocation - - When certificates need to be revoked it is important to have a well-defined certificate revocation process: - - How subjects can request a certificate be revoked - - How to report misuse of certificates - - Expected time for revocation to be completed after a revocation request -5. Certificate status dissemination - - How revocation information is disseminated to relying parties -6. Key escrow and recovery -7. Trust anchor management - - Trust anchors on machines and devices are a key point of trust management in the organization. Unmanaged trust stores can cause both outages and security issues. -","Assessment -- Documented application and validation rules -- Documented process for issuing certificates - - configuration of protocols -- Documented Certificate Acceptance and certificate subject installation procedures -- Documented renewal criteria, where re-key is nessecary and which certificate modifications are allowed - - Documented criticality of expiration for different use cases - - Automated monitoring and alerting of expiration for critical systems - - Automated certificate renewal -- Documented revocation process - - Documented revocation procedures, both for subjects and administrators - - If suspension is used the process to lift (or remove) suspension - - Documented contact points for reports in the organizations or from relying parties - - List of relying parties that depend on updated revocation information -- Documented Certificate status service - - OCSP and/or CRLs - - Documentation how relying parties get access to revocation information -- Documented process for key escrow and recovery when encryption keys need to be stored centrally -- Documented trust anchor management - - Distribution of new and updated trust anchors (Root CA certificates) - -References -- RFC 4210 - Internet X.509 Public Key Infrastructure Certificate Management Protocol (CMP) -- CA/B Forum baseline requirements -- 3GPP 33.310 - Network Domain Security (NDS); Authentication Framework (AF) -- UNISIG SUBSET-137" -M.certificate-management,Certificate management,"Certificate management is the set of techniques and procedures supporting certificate lifecycle management. Certificate management encompasses techniques and procedures supporting: -- Definition of certificate profiles -- Generation of certificates -- Installation and orchestration of certificates -- Inventory of certificates -- State management of certificates, i.e. expiration and revocation -- Discovery of certificates - -The techniques can be applied to an organization that makes use of PKI, or from an organization (or part of an organization) that operates a PKI for others. This category primarily targets an organization from a usage perspective, albeit the certificate lifecycle management is equally important for an organization that operates a PKI for someone else. -",M.certificate-management.cert-inventory,Inventory of issued certificates is documented,"Certificate inventory consists of all known certificates and provides an overview of known certificates in the organization. Certificates in inventory are subject to certificate lifecycle management. The certificate inventory is important for the organization because: -- It provides immediate access to the current status of certificates -- Provides possibility to react on certificate-related events (compromise, change, expiration, etc.) -- Understand impact of lifecycle changes -- It gives information on all locations of certificates -- Can enforce and maintain ownership of certificates - -The certificate inventory therefore consists of information related to certificate like certificate attributes, validity and validation information, fingerprint and serial number, trust chain, owner, public key, signature algorithm, certificate type, compliance information, certificate locations, change history, or any other attributes and properties of the certificates that is required. -","Assessment -- Documented inventory - - How inventory is maintained across the organization -- Documented certificate inventory management -- Validation of certificate inventory records -- Effectiveness of the certificate inventory implementation - -References -- RFC 3647 - Internet X.509 Public Key Infrastructure Certificate Policy and Certification Practices Framework -- NIST SP 800-57 Part 1 Rev. 5 - Recommendation for Key Management" -M.certificate-management,Certificate management,"Certificate management is the set of techniques and procedures supporting certificate lifecycle management. Certificate management encompasses techniques and procedures supporting: -- Definition of certificate profiles -- Generation of certificates -- Installation and orchestration of certificates -- Inventory of certificates -- State management of certificates, i.e. expiration and revocation -- Discovery of certificates - -The techniques can be applied to an organization that makes use of PKI, or from an organization (or part of an organization) that operates a PKI for others. This category primarily targets an organization from a usage perspective, albeit the certificate lifecycle management is equally important for an organization that operates a PKI for someone else. -",M.certificate-management.cert-discovery,Certificate discovery process is documented,"Certificate discovery process protects an organization from unknown certificates that may be deployed in the infrastructure. Unknown certificates may be further issued by unauthorized certification authorities and mislead users of services. Certificate discovery helps to maintain current inventory of certificates, but does not depend on the inventory and is not nessecary to maintain an inventory. Certificate discovery process should be implemented based on supported certificates and use-cases, for example: -- To scan the network for certificates used on known protocols and ports to discover certificates that can potentially cause service outage or breach -- Search for the certificates on file system to discover unauthorized or unsecured certificates - -Discovery process should be run frequently on the specified locations and the certificate inventory should be updated based on the results of the certificate discovery to keep it current. -","Assessment -- Documented certificate discovery requirements -- Documented certificate discovery process and frequency -- The supporting tools for the certificate discovery -- Certificate inventory is updated with discovered certificates - -References -" -M.certificate-management,Certificate management,"Certificate management is the set of techniques and procedures supporting certificate lifecycle management. Certificate management encompasses techniques and procedures supporting: -- Definition of certificate profiles -- Generation of certificates -- Installation and orchestration of certificates -- Inventory of certificates -- State management of certificates, i.e. expiration and revocation -- Discovery of certificates - -The techniques can be applied to an organization that makes use of PKI, or from an organization (or part of an organization) that operates a PKI for others. This category primarily targets an organization from a usage perspective, albeit the certificate lifecycle management is equally important for an organization that operates a PKI for someone else. -",M.certificate-management.cert-mgmt-review,Certificate management is periodically reviewed and updated,"No certificate issuance and management system works over long periods of time without changes to use-cases, processes, protocols and algorithms. It is important that the certificate management is periodically reviewed and updated to avoid gaps. The frequency of review should be based on the organizational risks and needs to be protected against current and future trends. - -Periodical review helps to keep the certificate management accurate and helps to maintain required skills and knowledge. -It provides assurance that the expected controls are active and working as intended. -","Assessment -- Documented process for reviewing the certificate management process and systems -- Ability to implement updates to certificate management system -- Document management system and validation of review - -References -- ISO/IEC 27001 and related standards" -M.certificate-management,Certificate management,"Certificate management is the set of techniques and procedures supporting certificate lifecycle management. Certificate management encompasses techniques and procedures supporting: -- Definition of certificate profiles -- Generation of certificates -- Installation and orchestration of certificates -- Inventory of certificates -- State management of certificates, i.e. expiration and revocation -- Discovery of certificates - -The techniques can be applied to an organization that makes use of PKI, or from an organization (or part of an organization) that operates a PKI for others. This category primarily targets an organization from a usage perspective, albeit the certificate lifecycle management is equally important for an organization that operates a PKI for someone else. -",M.certificate-management.pki-governance,Organizational PKI governance,"Large organizations commonly have several PKI systems spread out in the organization. Some can be consolidated, but in many cases different PKI silos exists for good reasons. Having a central governance of PKIs across the organization will help to maintain best practices, ensure secure PKI operations, re-use PKI knowledge in the organization, ensure consistent profiles and avoid unnecessary duplication of effort. -","Assessment -- Documented PKIs used in the organization - - Different PKI technologies used - - Installed PKI instances -- Documented PKI best practices - - Installation procedures to avoid re-learning the same issues in different parts of the organization - - Configuration to ensure consistent and interoperable certificates where applicable - - Security to maintain a security base line across the whole organization - -References -" -M.infrastructure-management,Infrastructure management,"The PKI implementation is a combination of software, hardware, network service, and resources that are needed to operate and manage the environment. -The environment can be hosted on-premise, in the cloud, or in a hybrid environment. - -Independent of the hosting model, the PKI environment needs to be properly managed and maintained, which requires resources and processes. -The infrastructure management refers to management of the technical and operational components of the PKI environment, which includes software, hardware, network, equipment, facilities, and other related resources. - -The PKI components may be distributed across multiple locations and managed by different teams. Therefore, it is important to have a clear description of the operational infrastructure with all dependencies and prerequisites. The infrastructure management should be aligned with the overall strategy of the organization and the scope of the PKI. - -When the infrastructure and environment where the PKI is implemented are not effectively managed and maintained, the complexity of the environment increases and the risk of failure increases as well. The infrastructure is often one of the key targets for attackers, therefore it is important to ensure that it is properly secured and available. -",M.infrastructure-management.infra-documentation,Network and deployment infrastructure is documented,"The network and deployment documentation of the infrastructure should be aligned with the architecture and design of the PKI. In other terms, it provides details about how the implementation is done in the real environment. - -The network and deployment infrastructure should be properly documented and maintained. The documentation should include the following: -- PKI components and their dependencies -- Facilities and equipment -- Deployment infrastructure description -- Clustering and load balancing -- Network topology and diagram -- Communication and open ports requirements -- Supporting cloud providers and services -- Supporting systems and services (identity management, access control, logging, monitoring, etc.) -","Assessment -The following is sample evidence that can be used to assess the requirement: -- Network topology and diagram -- Deployment documentation -- Sample configuration of network to compare with the documentation -- Integration with supporting and other systems -- Interview with the network administrators - -References -- ISO/IEC 20000 and related standards -- ISO/IEC 27001 - Information security management systems -- Guidance for Containers and Container Orchestration Tools" -M.infrastructure-management,Infrastructure management,"The PKI implementation is a combination of software, hardware, network service, and resources that are needed to operate and manage the environment. -The environment can be hosted on-premise, in the cloud, or in a hybrid environment. - -Independent of the hosting model, the PKI environment needs to be properly managed and maintained, which requires resources and processes. -The infrastructure management refers to management of the technical and operational components of the PKI environment, which includes software, hardware, network, equipment, facilities, and other related resources. - -The PKI components may be distributed across multiple locations and managed by different teams. Therefore, it is important to have a clear description of the operational infrastructure with all dependencies and prerequisites. The infrastructure management should be aligned with the overall strategy of the organization and the scope of the PKI. - -When the infrastructure and environment where the PKI is implemented are not effectively managed and maintained, the complexity of the environment increases and the risk of failure increases as well. The infrastructure is often one of the key targets for attackers, therefore it is important to ensure that it is properly secured and available. -",M.infrastructure-management.network-segmentation,Separation and segmentation principles are applied,"The PKI environment should be properly separated and segmented from other environments and systems. The separation and segmentation should be applied on all levels, including network, infrastructure, and application. The separation and segmentation should be applied based on the security requirements and risk assessment. -Segmentation isolates the PKI environment from the remaining environment and reduces the risk of unauthorized access and data leakage. It also helps to reduce the impact of a potential compromise of the PKI environment from other systems and environments. Segmentation can be achieved using a number of physical or logical methods, such as: -- Properly configured internal network security controls -- Routers with strong access control lists -- Other technologies that restrict access to a particular segment of a network -For the proper maintenance of the infrastructure and deployed PKI components, the staging/testing environment should be available in the same configuration as the production environment. If needed, development environments can be used for testing and development purposes. -Production, staging, and development environments should be logically separated and isolated from each other, including the data that is used in the environments. -","Assessment -The following is sample evidence that can be used to assess the requirement: -- Network topology and diagram -- Implementation of network isolation -- Separation of production and testing environments -- Sample data -- Interview with the network administrators - -References -- ISO/IEC 20000 and related standards -- ISO/IEC 27001 - Information security management systems" -M.infrastructure-management,Infrastructure management,"The PKI implementation is a combination of software, hardware, network service, and resources that are needed to operate and manage the environment. -The environment can be hosted on-premise, in the cloud, or in a hybrid environment. - -Independent of the hosting model, the PKI environment needs to be properly managed and maintained, which requires resources and processes. -The infrastructure management refers to management of the technical and operational components of the PKI environment, which includes software, hardware, network, equipment, facilities, and other related resources. - -The PKI components may be distributed across multiple locations and managed by different teams. Therefore, it is important to have a clear description of the operational infrastructure with all dependencies and prerequisites. The infrastructure management should be aligned with the overall strategy of the organization and the scope of the PKI. - -When the infrastructure and environment where the PKI is implemented are not effectively managed and maintained, the complexity of the environment increases and the risk of failure increases as well. The infrastructure is often one of the key targets for attackers, therefore it is important to ensure that it is properly secured and available. -",M.infrastructure-management.vulnerability-management,Network vulnerability management is implemented and maintained,"The network vulnerability management is a process that is used to identify, classify, remediate, and mitigate vulnerabilities in the network infrastructure and protects PKI implementation from potential attacks. The process should be implemented and maintained in order to ensure that the network infrastructure is properly secured and protected from potential attacks. - -The network vulnerability management should include the following: -- Included in the overall vulnerability management process -- Periodical scanning of the network infrastructure -- Identification of vulnerabilities -- Categorization and prioritization of vulnerabilities and remediation -- Updating and patching requirements -","Assessment -The following is sample evidence that can be used to assess the requirement: -- Network vulnerability management process -- Results from last network vulnerability scan -- Remediation plan -- Interview with the network administrators - -References -- Common Vulnerability Scoring System (CVSS) -- ISO/IEC 20000 and related standards -- ISO/IEC 27001 - Information security management systems" -M.infrastructure-management,Infrastructure management,"The PKI implementation is a combination of software, hardware, network service, and resources that are needed to operate and manage the environment. -The environment can be hosted on-premise, in the cloud, or in a hybrid environment. - -Independent of the hosting model, the PKI environment needs to be properly managed and maintained, which requires resources and processes. -The infrastructure management refers to management of the technical and operational components of the PKI environment, which includes software, hardware, network, equipment, facilities, and other related resources. - -The PKI components may be distributed across multiple locations and managed by different teams. Therefore, it is important to have a clear description of the operational infrastructure with all dependencies and prerequisites. The infrastructure management should be aligned with the overall strategy of the organization and the scope of the PKI. - -When the infrastructure and environment where the PKI is implemented are not effectively managed and maintained, the complexity of the environment increases and the risk of failure increases as well. The infrastructure is often one of the key targets for attackers, therefore it is important to ensure that it is properly secured and available. -",M.infrastructure-management.recovery-objectives,Infrastructure recovery objectives controls,"In case of issues with the infrastructure, it should be possible to quickly identify the root cause and recover the infrastructure to the operational state. The recovery objectives should be defined and aligned with the overall business continuity and disaster recovery strategy of the organization. - -The infrastructure should be frequently backed up and the backups should be stored in a secure location. The backups should be tested and validated on a regular basis. Infrastructure managed as code may help to reduce complexity and increase the speed of recovery. -","Assessment -The following is sample evidence that can be used to assess the requirement: -- Infrastructure recovery objectives -- Backup and recovery plan -- Infrastructure configuration as a code -- Interview with the infrastructure administrators - -References -- ISO/IEC 20000 and related standards -- ISO/IEC 27001 - Information security management systems" -M.infrastructure-management,Infrastructure management,"The PKI implementation is a combination of software, hardware, network service, and resources that are needed to operate and manage the environment. -The environment can be hosted on-premise, in the cloud, or in a hybrid environment. - -Independent of the hosting model, the PKI environment needs to be properly managed and maintained, which requires resources and processes. -The infrastructure management refers to management of the technical and operational components of the PKI environment, which includes software, hardware, network, equipment, facilities, and other related resources. - -The PKI components may be distributed across multiple locations and managed by different teams. Therefore, it is important to have a clear description of the operational infrastructure with all dependencies and prerequisites. The infrastructure management should be aligned with the overall strategy of the organization and the scope of the PKI. - -When the infrastructure and environment where the PKI is implemented are not effectively managed and maintained, the complexity of the environment increases and the risk of failure increases as well. The infrastructure is often one of the key targets for attackers, therefore it is important to ensure that it is properly secured and available. -",M.infrastructure-management.infra-review,Infrastructure activities are periodically reviewed,"Infrastructure management related activities should be periodically reviewed, updated and approved. The frequency of review should be based on the organizational risks and needs to be protected against current and future trends. - -Periodical review helps to keep the infrastructure management accurate and helps to maintain required skills and knowledge. -It provides assurance that the expected controls are active and working as intended. - -The review can include the following: -- Changes made to the infrastructure -- Regular checks of firewall rules -- Review of the network topology -- Review of the network segmentation -- Regular checks of access control lists -- Vulnerability reports and timely remediation -- Review and correlation of logs -- And other activities related to the infrastructure management -","Assessment -The following is sample evidence that can be used to assess the requirement: -- Infrastructure management activities review frequency -- Organizational implementation of review process -- Validation of documentation, reports, records, and reviews - -References -- ISO/IEC 20000 and related standards -- ISO/IEC 27001 - Information security management systems" -M.change-management-and-agility,Change management and agility,"Change management and agility is important to control the PKI implementation and configuration changes, adjustments, modifications, and improvements. Technologies are changing fast and the PKI needs to be able to adapt to the changes. - The same applies for security vulnerabilities, deprecation of algorithms, and other changes that can significantly affect the PKI. - -The change management should provide a robust and reliable process to ensure that every change is properly assessed, approved, and implemented. The process should be aligned with the organizational change management process and should be followed by all stakeholders. - -Agility means that the PKI is able to adapt to the changes quickly and efficiently. Agility is applied to technologies, processes, algorithms, and other parts of the PKI implementation. Efficient adaptation to the changes makes the PKI more reliable and trustworthy, reducing operational risks. -",M.change-management-and-agility.change-policy,The policy for change management and agility is documented,"The policy for change management and agility should be documented and approved by the management. The policy contains principles and boundaries for the implementation of the change management and agility requirements. Typically, it can be documented on the organizational level and applied to all systems and services, including the PKI implementation. - -The PKI may have specific requirements for change management and agility, and therefore it may be recommended to have a separate policy for the PKI implementation. The policy should be aligned with organizational policy and should be approved by the responsible personnel for the PKI. - -The policy contains the following information: -- Approach to change management and agility -- Principles and boundaries for change management and agility -- Roles and responsibilities -- Requirements for change management and agility -- Tools and technologies used for change management -- And other relevant information -","Assessment -The following is sample evidence that can be used to assess the requirement: -- Documented policy for change management and agility -- Alignment with organizational policy -- Approval by the management -- Understanding of the policy by the PKI personnel -- And other relevant evidence - -References -- COBIT (Control Objectives for Information and Related Technologies) -- ISO/IEC 20000 and related standards -- The Information Technology Infrastructure Library (ITIL)" -M.change-management-and-agility,Change management and agility,"Change management and agility is important to control the PKI implementation and configuration changes, adjustments, modifications, and improvements. Technologies are changing fast and the PKI needs to be able to adapt to the changes. - The same applies for security vulnerabilities, deprecation of algorithms, and other changes that can significantly affect the PKI. - -The change management should provide a robust and reliable process to ensure that every change is properly assessed, approved, and implemented. The process should be aligned with the organizational change management process and should be followed by all stakeholders. - -Agility means that the PKI is able to adapt to the changes quickly and efficiently. Agility is applied to technologies, processes, algorithms, and other parts of the PKI implementation. Efficient adaptation to the changes makes the PKI more reliable and trustworthy, reducing operational risks. -",M.change-management-and-agility.change-request,Request for change structure is documented and followed,"The request for change structure is the basic stone of each change management process. It provides information about a change, its scope, and other relevant data. The request for change structure should be formally documented and followed by all stakeholders involved. - -Request for change can contain any change that can affect the PKI implementation, including: -- PKI upgrades, updates, and patches -- New components or functionalities -- Changes in the configuration of the PKI -- Changes in the algorithms and protocols - -Request for change structure should cover the following information: -- Description of the change -- Scope of the change -- Category of the change -- Impacted systems and services -- Back-out procedure in case of failure -- Testing requirements -- And other relevant information -","Assessment -The following is sample evidence that can be used to assess the requirement: -- Documented request for change structure -- Sample of change request -- Review implemented changes and compare with the request for change - -References -- COBIT (Control Objectives for Information and Related Technologies) -- ISO/IEC 20000 and related standards -- The Information Technology Infrastructure Library (ITIL)" -M.change-management-and-agility,Change management and agility,"Change management and agility is important to control the PKI implementation and configuration changes, adjustments, modifications, and improvements. Technologies are changing fast and the PKI needs to be able to adapt to the changes. - The same applies for security vulnerabilities, deprecation of algorithms, and other changes that can significantly affect the PKI. - -The change management should provide a robust and reliable process to ensure that every change is properly assessed, approved, and implemented. The process should be aligned with the organizational change management process and should be followed by all stakeholders. - -Agility means that the PKI is able to adapt to the changes quickly and efficiently. Agility is applied to technologies, processes, algorithms, and other parts of the PKI implementation. Efficient adaptation to the changes makes the PKI more reliable and trustworthy, reducing operational risks. -",M.change-management-and-agility.change-process,The change management process is documented and implemented,"The change management process is the core of the change management and agile systems. It provides a robust and reliable process to ensure that every change is properly assessed, approved, implemented, and eventually reviewed. - -The change management process should be documented, communicated, and integrated into the organization. The process states how a request for change can be submitted and how it is processed, which includes assessment and approval of the change, implementation of the change, functional testing after the change, and review of the change. -","Assessment -The following is sample evidence that can be used to assess the requirement: -- Documented change management process -- Sample of change request -- Steps involved in the change management process -- Interview with the responsible personnel - -References -- COBIT (Control Objectives for Information and Related Technologies) -- ISO/IEC 20000 and related standards -- The Information Technology Infrastructure Library (ITIL)" -M.change-management-and-agility,Change management and agility,"Change management and agility is important to control the PKI implementation and configuration changes, adjustments, modifications, and improvements. Technologies are changing fast and the PKI needs to be able to adapt to the changes. - The same applies for security vulnerabilities, deprecation of algorithms, and other changes that can significantly affect the PKI. - -The change management should provide a robust and reliable process to ensure that every change is properly assessed, approved, and implemented. The process should be aligned with the organizational change management process and should be followed by all stakeholders. - -Agility means that the PKI is able to adapt to the changes quickly and efficiently. Agility is applied to technologies, processes, algorithms, and other parts of the PKI implementation. Efficient adaptation to the changes makes the PKI more reliable and trustworthy, reducing operational risks. -",M.change-management-and-agility.agility-requirements,Requirements for agility are identified,"Agility provides the ability to adapt to changes quickly and efficiently. Agility and change management are closely related and should be considered together. The future-proof PKI implementation should be able to identify the requirements for agility and implement them in a timely manner. - -Agility can be considered on operational and technical levels. Operational agility means that the PKI is able to adapt to changes in the operational environment, including any changes to the organizational structure, processes, and other operational aspects. Technical agility means that the PKI is able to adapt to changes in the technologies, algorithms, protocols, and other technical aspects. - -Identification of requirements where agility is needed is important to ensure changes are implemented when needed. -","Assessment -The following is sample evidence that can be used to assess the requirement: -- Agility requirements of the PKI implementation -- Configuration changes -- Changes in the operational environment -- Changes in the technologies -- And other relevant evidence - -References -- COBIT (Control Objectives for Information and Related Technologies) -- ISO/IEC 20000 and related standards -- The Information Technology Infrastructure Library (ITIL)" -M.change-management-and-agility,Change management and agility,"Change management and agility is important to control the PKI implementation and configuration changes, adjustments, modifications, and improvements. Technologies are changing fast and the PKI needs to be able to adapt to the changes. - The same applies for security vulnerabilities, deprecation of algorithms, and other changes that can significantly affect the PKI. - -The change management should provide a robust and reliable process to ensure that every change is properly assessed, approved, and implemented. The process should be aligned with the organizational change management process and should be followed by all stakeholders. - -Agility means that the PKI is able to adapt to the changes quickly and efficiently. Agility is applied to technologies, processes, algorithms, and other parts of the PKI implementation. Efficient adaptation to the changes makes the PKI more reliable and trustworthy, reducing operational risks. -",M.change-management-and-agility.change-mgmt-review,Change management and agility is periodically reviewed,"The change management and agility requirements should be periodically reviewed to ensure that they are still valid and relevant. The review should be performed by the responsible personnel and should be documented. A good practice is to review the change management and agility requirements at least once a year, however, the frequency of the review can be different depending on the PKI implementation. -","Assessment -- Change management review frequency -- Implementation of review process and documentation -- Interview with the responsible personnel - -References -- COBIT (Control Objectives for Information and Related Technologies) -- ISO/IEC 20000 and related standards -- The Information Technology Infrastructure Library (ITIL)" -O.resilience,Resilience,"Resilience is the key for any organization wanting to thrive in an ever-changing world, which is obviously s very important factor for any PKI implementation. The PKI is planned to be trusted for multiple years, if not decades. Therefore, the ability to absorb and adapt to the unpredictability, while continuing to deliver on the objectives is becoming mandatory. - -A robust resilience framework helps organizations future-proof their PKI oriented business, detailing key principles, attributes and activities that are followed to ensure that the PKI implementation will be trusted, secure, and effective all the time. -",O.resilience.risk-assessment,Risk assessment and business impact analysis,"Proper risk assessment provides robust understanding about the risks and their impact on the business and organization PKI. The risk assessment results (for example potential loss scenarios) are documented and serves as input for the business impact analysis to identify the critical PKI-related business processes and their dependencies. - -Documented results of the business impact analysis are used to develop recovery strategies for the PKI implementation with required resources and availability. -","Assessment -The following is sample evidence that can be used to assess the requirement: -- Risk management and assessment process -- Documented risk assessment results -- Documented business impact analysis results -- Documented recovery strategies -- Understanding of the resilience and approval of the results -- Interview with the PKI management - -References -- ISO/IEC 27005 - Guidance on managing information security risks -- NIST Risk Management Framework -- ISO/TS 22317 - Guidelines for business impact analysis" -O.resilience,Resilience,"Resilience is the key for any organization wanting to thrive in an ever-changing world, which is obviously s very important factor for any PKI implementation. The PKI is planned to be trusted for multiple years, if not decades. Therefore, the ability to absorb and adapt to the unpredictability, while continuing to deliver on the objectives is becoming mandatory. - -A robust resilience framework helps organizations future-proof their PKI oriented business, detailing key principles, attributes and activities that are followed to ensure that the PKI implementation will be trusted, secure, and effective all the time. -",O.resilience.incident-planning,Cyber-security management and incident planning,"Cyber-security management covers activities to ensure that the PKI is protected against known and zero-day vulnerabilities, cyberattacks and other threats. The operational procedures and technologies are evolving and the PKI needs to be able to adapt to the changes. Without knowing the threats and vulnerabilities, it is not possible to plan for the resilience and properly plan for incident response. - -Incident response planning helps to ensure that the organization is able to respond to the suspected incidents. Incident response plans should be documented and tested regularly. The result of executed incident response plans should be documented and used to improve the plan, even if it was a false alarm. - -Cyber-security management and incident planning covers important aspects such as vulnerability management and security operations center (SOC) identification and response to potential incidents. -","Assessment -The following is sample evidence that can be used to assess the requirement: -- Documented vulnerability management -- Vulnerability scanning results -- Documented incident response plans -- Documented incident response test results -- Monitoring of cyber-security threats -- Interview with the security operations team - -References -- ISO/IEC 27001 - Information security management systems -- Common Vulnerabilities and Exposures (CVE) Program -- NIST Special Publication 800-61 Revision 2 - Computer Security Incident Handling Guide -- SANS Guide to Security Operations" -O.resilience,Resilience,"Resilience is the key for any organization wanting to thrive in an ever-changing world, which is obviously s very important factor for any PKI implementation. The PKI is planned to be trusted for multiple years, if not decades. Therefore, the ability to absorb and adapt to the unpredictability, while continuing to deliver on the objectives is becoming mandatory. - -A robust resilience framework helps organizations future-proof their PKI oriented business, detailing key principles, attributes and activities that are followed to ensure that the PKI implementation will be trusted, secure, and effective all the time. -",O.resilience.business-continuity,Business continuity planning and disaster recovery,"The business continuity planning and disaster recovery are the key activities to ensure availability of the PKI operations. The business continuity planning is used to define the recovery time objectives (RTO) and recovery point objectives (RPO) for the PKI. The RTO and RPO are used to define the required resources and their availability. - -Requirements for the business continuity and disaster recovery should be properly defined. It contains backups of the PKI resources, such as hardware security modules (HSM), databases, configuration files, etc. The availability of backups should be tested regularly to ensure that the backups are available when needed, especially during the disaster. - -Proper measures are applied to identify the disaster and a communication matrix is maintained to ensure that the right people are informed about the disaster on time and the recovery process can be started. - -The following parts are typically covered: -- Scope of the business continuity and disaster recovery -- Roles and responsibilities -- Activation of disaster recovery -- Physical locations -- Communication matrix -- Other requirements and information needed -","Assessment -The following is sample evidence that can be used to assess the requirement: -- Documented business continuity and disaster recovery plans -- Documented recovery time objectives (RTO) and recovery point objectives (RPO) -- Documented backup and recovery procedures -- Communication matrix and contact information -- Availability of backups and other requirements to execute the disaster recovery procedure -- Periodically tested effectiveness of the disaster recovery - -References -- ISO/IEC 22301 - Business continuity management systems -- NIST Special Publication 800-34 Revision 1 - Contingency Planning Guide for Federal Information Systems" -O.resilience,Resilience,"Resilience is the key for any organization wanting to thrive in an ever-changing world, which is obviously s very important factor for any PKI implementation. The PKI is planned to be trusted for multiple years, if not decades. Therefore, the ability to absorb and adapt to the unpredictability, while continuing to deliver on the objectives is becoming mandatory. - -A robust resilience framework helps organizations future-proof their PKI oriented business, detailing key principles, attributes and activities that are followed to ensure that the PKI implementation will be trusted, secure, and effective all the time. -",O.resilience.future-proofing,Technology future proofing,"Applicable technology should always be future proofed to ensure that the PKI is able to adapt to changes, and will support the organization PKI in the future when new standards, algorithms, and approach will be developed. - -When deciding to apply new technologies, or evaluating if the current technology is still suitable and support the goals of the PKI implementation, the following should be considered: -- Technology is supported by the vendor -- Industry standards are applied for interoperability and security -- Review and references on the vendor and technology -- Applicability of the technology for long-term use -- Vulnerabilities and security reports of the technology -- Integration capabilities and customizations needed -- Open source vs. proprietary technology -","Assessment -The following is sample evidence that can be used to assess the requirement: -- Interview with the CTO or CIO -- Documentation of the technology future proofing -- RFI and RFP documents -- Vendor and technology check - -References -- ISO 223XX Security and resilience standards -- ISO/IEC 22301 - Business continuity management systems" -O.resilience,Resilience,"Resilience is the key for any organization wanting to thrive in an ever-changing world, which is obviously s very important factor for any PKI implementation. The PKI is planned to be trusted for multiple years, if not decades. Therefore, the ability to absorb and adapt to the unpredictability, while continuing to deliver on the objectives is becoming mandatory. - -A robust resilience framework helps organizations future-proof their PKI oriented business, detailing key principles, attributes and activities that are followed to ensure that the PKI implementation will be trusted, secure, and effective all the time. -",O.resilience.competence-sharing,Competence and information sharing,"Organization environments may change over time. The impact of changes can be in various forms, for example: -- personnel can rotate in their positions, new people can be hired, or people can leave the organization -- technologies are changing, therefore required skills and knowledge may change -- procedures and eventually management of the PKI will be adjusted - -The organization needs to ensure that the competence of the personnel is maintained and the information is shared to not lose the knowledge introduced by changes within known and unknown variables. The organization should have a plan to ensure that the competence is maintained for the most critical parts of the PKI. - -The competence and information sharing is an important part to achieve the resilience of the PKI implementation by having relevant information and competencies ready when needed. -","Assessment -The following is sample evidence that can be used to assess the requirement: -- Documentation and collaboration -- Onboarding and offboarding procedures -- Building competence and knowledge sharing - -References -- ISO 223XX Security and resilience standards" -O.resilience,Resilience,"Resilience is the key for any organization wanting to thrive in an ever-changing world, which is obviously s very important factor for any PKI implementation. The PKI is planned to be trusted for multiple years, if not decades. Therefore, the ability to absorb and adapt to the unpredictability, while continuing to deliver on the objectives is becoming mandatory. - -A robust resilience framework helps organizations future-proof their PKI oriented business, detailing key principles, attributes and activities that are followed to ensure that the PKI implementation will be trusted, secure, and effective all the time. -",O.resilience.continual-improvement,Continual review and improvement,"The resilience of the PKI implementation should be reviewed and improved regularly. The review and improvement process should be documented and the results should be used to improve the resilience of the PKI implementation. The frequency of review should be based on the organizational risks and needs to be protected against current and future trends. -","Assessment -The following is sample evidence that can be used to assess the requirement: -- Resilience effectiveness review frequency -- Implementation of review process -- Validation of documentation and reviews -- Training records - -References -- ISO 223XX Security and resilience standards -- NIST Special Publications 800 - 30, 34, 37, 46, 53, 84" -O.automation,Automation,"Automation of certificate management is the process of using technology to perform tasks with reduced human assistance. Automation is used to improve the efficiency of the PKI management and to reduce the risk of human error. Automation can be used to perform tasks that are repetitive, time-consuming, or difficult to perform manually. - -On the other hand the automation can introduce new risks and challenges. The automation should be used only for tasks that are well-defined and that can be performed in a reliable way. - -Justified, well-designed, and documented automation of certificate lifecycle management can significantly contribute to the efficiency of the PKI management while reducing the risk of human error. However, automation is not a silver bullet and should be controlled, monitored, and audited to prevent the risk of misuse. -",O.automation.automation-description,Process automation description,"Every automated certificate management process should be properly described and documented. The documentation should contain information relevant to the process automation and understanding the reasons for automation. Monitoring, auditing, and potential measures and controls would be ineffective without proper description and understanding of the automation process. - -The description can include for example the following: -- Use-case or process to be automated -- Reasons for automation -- Description of the automation process -- Involved tools and technologies -- Monitoring and auditing requirements -- Potential measures and controls -- Exceptions -- Logging and reporting -- Any other relevant information and requirements -","Assessment -The following is sample evidence that can be used to assess the requirement: -- Process automation description -- Interview with the process owner -- Interview with administrators -- Sample of automated process logs - -References -" -O.automation,Automation,"Automation of certificate management is the process of using technology to perform tasks with reduced human assistance. Automation is used to improve the efficiency of the PKI management and to reduce the risk of human error. Automation can be used to perform tasks that are repetitive, time-consuming, or difficult to perform manually. - -On the other hand the automation can introduce new risks and challenges. The automation should be used only for tasks that are well-defined and that can be performed in a reliable way. - -Justified, well-designed, and documented automation of certificate lifecycle management can significantly contribute to the efficiency of the PKI management while reducing the risk of human error. However, automation is not a silver bullet and should be controlled, monitored, and audited to prevent the risk of misuse. -",O.automation.automation-monitoring,Monitoring and auditing of automated process,"The automated process of certificate management can cause significant damage if misused or misconfigured. The monitoring and auditing of the automated process is essential to prevent the risk of misuse and to detect any potential issues, inefficiencies, or exceptions. - -The monitoring and auditing should be performed on a regular basis and should be aligned with the overall monitoring and auditing strategy of the organization. -It should provide sufficient information to detect any potential issues with the automated process. For successful detection or identification of issues, proper expectations should be based on the description of the automated process. -","Assessment -Monitoring of automated processes should be supported by monitoring tools and technologies that can provide the necessary overview, reporting, and potential alerting in case of issues. -The following is sample evidence that can be used to assess the requirement: -- Documented monitoring and auditing measures -- Monitoring and auditing tools and technologies applied -- Sample report or dashboard from monitoring -- Interview with responsible personnel -- Simulate failure of the automated certificate management process and verify that the failure is detected and reported - -References -" -O.automation,Automation,"Automation of certificate management is the process of using technology to perform tasks with reduced human assistance. Automation is used to improve the efficiency of the PKI management and to reduce the risk of human error. Automation can be used to perform tasks that are repetitive, time-consuming, or difficult to perform manually. - -On the other hand the automation can introduce new risks and challenges. The automation should be used only for tasks that are well-defined and that can be performed in a reliable way. - -Justified, well-designed, and documented automation of certificate lifecycle management can significantly contribute to the efficiency of the PKI management while reducing the risk of human error. However, automation is not a silver bullet and should be controlled, monitored, and audited to prevent the risk of misuse. -",O.automation.exception-handling,Incidents and exceptions handling,"No automation is perfect and covers everything. There can be edge cases and other situations that were not part of the initial analysis or were simply forgotten. Therefore, there will always be exceptions and incidents that will require manual intervention. The automated process should be able to handle such exceptions and incidents in a way that will not cause any significant damage or disruption to the service. - -It may happen that some certificates are required to be handled manually and therefore the exception should be approved and documented. - -Handling of exceptional situations should be covered in the documentation, stating what should be done in case of an exception or incident: -- Communication of the exception -- Approval of the exception -- Incident handling and reporting -- Any other relevant information - -The handling of exceptions should be tested and verified on a regular basis to ensure that the process is working as expected. -","Assessment -The following is sample evidence that can be used to assess the requirement: -- Documented exceptions -- Interview with responsible personnel about how to handle exceptions or incidents - -References -" -O.interoperability,Interoperability,"Interoperability means the ability of two or more systems or components to exchange information and to use the information that has been exchanged. - -A PKI is composed of multiple components, which are often provided by different vendors, or can be developed and maintained in-house. Interoperability keeps the PKI components working together and allows the PKI to function properly in the long term. - -Adopting open standards and protocols helps to ensure interoperability between PKI components and Relying Party (RP) applications and avoids vendor lock-in that may lead to interoperability issues in the future, especially when the PKI needs to be trusted for a long time, may have no control over RPs or needs to be scaled. - -Interoperability includes the following aspects: -- Interface specifications -- Data formats -- Communication protocols -- Algorithms -- Open standards - -Main principles of interoperability are: -- Transparency and openness -- Technology neutrality -- Reusability and scalability -- Security and privacy -- Accessibility -- Sustainability -- Portability and extensibility -",O.interoperability.interop-strategy,Maintain PKI interoperability strategy,"The interoperability strategy defines the interoperability requirements and the approach to achieve interoperability between the PKI components to ensure the PKI implementation is able to adopt new technologies and standards in the future, and will not be locked-in to a specific vendor. - -PKI interoperability strategy should be maintained, documented, and integrated in the organization. It should cover at least the following information: -- Application of interoperability -- Using open standards and protocols -- Conditions for PKI components to be interoperable -- Restrictions on the use of proprietary interfaces -- Interoperability testing -- Requirements for migration to new technologies -- Requirements for vendors -- Other relevant information -","Assessment -The following evidence should be available for the assessment of the requirement: -- Documented and approved interoperability strategy -- Interoperability strategy is integrated in the organization -- Interview with the responsible person(s) to verify understanding of the interoperability strategy -- Review documentation for PKI components to verify the requirements for interoperability - -References -- The Open Group Architecture Framework (TOGAF)" -O.interoperability,Interoperability,"Interoperability means the ability of two or more systems or components to exchange information and to use the information that has been exchanged. - -A PKI is composed of multiple components, which are often provided by different vendors, or can be developed and maintained in-house. Interoperability keeps the PKI components working together and allows the PKI to function properly in the long term. - -Adopting open standards and protocols helps to ensure interoperability between PKI components and Relying Party (RP) applications and avoids vendor lock-in that may lead to interoperability issues in the future, especially when the PKI needs to be trusted for a long time, may have no control over RPs or needs to be scaled. - -Interoperability includes the following aspects: -- Interface specifications -- Data formats -- Communication protocols -- Algorithms -- Open standards - -Main principles of interoperability are: -- Transparency and openness -- Technology neutrality -- Reusability and scalability -- Security and privacy -- Accessibility -- Sustainability -- Portability and extensibility -",O.interoperability.integration-guidance,Documented integration guidance,"To have effective interoperability between PKI components, it is important to have a proper integration in place that serves the purpose and does not expose any potential risks. Available and documented integration guidance for the developers and administrators should be maintained and updated regularly. - -The integration guidance should be available for all critical PKI components and should cover at least the following information: -- Integration requirements and prerequisites -- Applicable standards and protocols -- Integration architecture -- Integration testing -","Assessment -The following evidence should be available for the assessment of the requirement: -- Documented integration guidance for all critical PKI components -- Interview with the system administrators and developers -- Review of the integration guidance -- System configuration review - -References -- The Open Group Architecture Framework (TOGAF)" -O.interoperability,Interoperability,"Interoperability means the ability of two or more systems or components to exchange information and to use the information that has been exchanged. - -A PKI is composed of multiple components, which are often provided by different vendors, or can be developed and maintained in-house. Interoperability keeps the PKI components working together and allows the PKI to function properly in the long term. - -Adopting open standards and protocols helps to ensure interoperability between PKI components and Relying Party (RP) applications and avoids vendor lock-in that may lead to interoperability issues in the future, especially when the PKI needs to be trusted for a long time, may have no control over RPs or needs to be scaled. - -Interoperability includes the following aspects: -- Interface specifications -- Data formats -- Communication protocols -- Algorithms -- Open standards - -Main principles of interoperability are: -- Transparency and openness -- Technology neutrality -- Reusability and scalability -- Security and privacy -- Accessibility -- Sustainability -- Portability and extensibility -",O.interoperability.open-standards,Adoption and application of open standards,"Open standards are publicly available standards that are developed and maintained by communities or standardization bodies. Open standards are developed through a consensus-based process and are available to everyone without any restrictions. Open standards are usually free to use and implement. - -The open standards are important for interoperability as they are typically technology-agnostic and are supported by technologies and solutions. Open standards are applicable for interfaces, communication protocols, cryptographic algorithms, data formats, automation and orchestration, and other aspects of the PKI. - -The adoption of open standards significant increase interoperability and reduce the risk of vendor lock-in. -","Assessment -The following evidence should be available for the assessment of the requirement: -- Documented list of open standards used by the PKI -- Policies requiring the use of open standards -- Interview with the responsible person to verify understanding of the open standards -- Review of training materials - -References -- Open Standards Principles -- IETF Request for Comments (RFC) -- OASIS Standards -- ISO Standards -- ITU Standards -- NIST Standards -- ETSI Standards" -O.monitoring-and-auditing,Monitoring and auditing,"Monitoring and auditing establish the necessary controls to detect and respond to security events and to provide evidence of compliance with the disclosed business practices. -The events and logs typically serves as a basis for incident response and forensic analysis in case of security incidents, however, they can also be used for other purposes, such as performance analysis, capacity planning, and troubleshooting. - -Monitoring and auditing provide reasonable assurance that: -- Unauthorized PKI system usage is detected -- Critical high impact events are monitored -- Appropriate logs are collected and relevant issues are alerted -- The confidentiality and integrity of current and archived audit logs are maintained for the required period of time -- Audit logs are completely and confidentially archived in accordance with disclosed business practices -- Events and logs are reviewed periodically by authorized personnel - -The outputs from the monitoring and auditing activities are typically used as inputs for the risk assessment and management activities, including incident response management and investigation of high impact events. -",O.monitoring-and-auditing.logging-requirements,Monitoring events and logging requirements are defined and documented,"The monitoring and logging requirements should be defined and documented in the CP, CPS, or other relevant documents. The requirements should be aligned with the overall PKI policies and statements, and should be based on the risk assessment and management activities. - -The requirements can typically include: -- Events to be monitored -- Frequency of monitoring -- Logs to be collected -- Retention period for logs -- Audit trail requirements -- Audit log protection requirements -- Formatting and interpretation of logs (syslog, JSON, XML, CEF, etc.) -- And other relevant requirements -","Assessment -- Documented monitoring and logging requirements -- Policies and procedures for monitoring and logging -- Review of records -- Interviews with personnel - -References -- ISO/IEC 27001 - Information security management systems -- ISO/IEC 20000 and related standards -- ISO/IEC 27099 - Public key infrastructure" -O.monitoring-and-auditing,Monitoring and auditing,"Monitoring and auditing establish the necessary controls to detect and respond to security events and to provide evidence of compliance with the disclosed business practices. -The events and logs typically serves as a basis for incident response and forensic analysis in case of security incidents, however, they can also be used for other purposes, such as performance analysis, capacity planning, and troubleshooting. - -Monitoring and auditing provide reasonable assurance that: -- Unauthorized PKI system usage is detected -- Critical high impact events are monitored -- Appropriate logs are collected and relevant issues are alerted -- The confidentiality and integrity of current and archived audit logs are maintained for the required period of time -- Audit logs are completely and confidentially archived in accordance with disclosed business practices -- Events and logs are reviewed periodically by authorized personnel - -The outputs from the monitoring and auditing activities are typically used as inputs for the risk assessment and management activities, including incident response management and investigation of high impact events. -",O.monitoring-and-auditing.log-collection,Event logs from systems are collected,"The event logs from systems should be collected and available for analysis, including correlation with other records. Centralized logging is recommended to ensure that the logs are collected and stored consistently. Solution like security information and event management (SIEM) can be used to collect and analyze the logs. - -The availability of records for analysis depends on understanding logging format and interpretation of the information, therefore each system should provide logs in a consistent format that can be further processed and analyzed (or automated). - -Logs and events should be collected from all systems that are relevant for the PKI implementation, such as key life cycle management events. - -The event should contain sufficient information to identify the event, including: -- User identification -- Type of event -- Date and time -- Success or failure indication -- Origination of event -- Identity or name of affected data, system component, or resource -- Additional details -","Assessment -- Logs are collected from systems -- Logs have a consistent format and can be further processed and analyzed -- Review of records and their formatting -- Review of configuration standards for logging -- Interviews with personnel to check the understanding of logging format and interpretation of the information - -References -- ISO/IEC 27001 - Information security management systems -- ISO/IEC 20000 and related standards -- NIST - Guide to Computer Security Log Management -- ISO/IEC 27099 - Public key infrastructure" -O.monitoring-and-auditing,Monitoring and auditing,"Monitoring and auditing establish the necessary controls to detect and respond to security events and to provide evidence of compliance with the disclosed business practices. -The events and logs typically serves as a basis for incident response and forensic analysis in case of security incidents, however, they can also be used for other purposes, such as performance analysis, capacity planning, and troubleshooting. - -Monitoring and auditing provide reasonable assurance that: -- Unauthorized PKI system usage is detected -- Critical high impact events are monitored -- Appropriate logs are collected and relevant issues are alerted -- The confidentiality and integrity of current and archived audit logs are maintained for the required period of time -- Audit logs are completely and confidentially archived in accordance with disclosed business practices -- Events and logs are reviewed periodically by authorized personnel - -The outputs from the monitoring and auditing activities are typically used as inputs for the risk assessment and management activities, including incident response management and investigation of high impact events. -",O.monitoring-and-auditing.audit-trail,Audit trail can be reconstructed from audit logs,"Audit logging should be implemented to ensure that the audit trail can be reconstructed from audit logs any time. Audit logs are typically recorded for any user executed events that are important for security of the PKI implementation. Audit logs should be stored in a secure location. The audit logs should be protected against unauthorized access, modification, and deletion. - -Typically, the following events are important for security of the PKI implementation: -- All individual user accesses to sensitive data -- All actions taken by any individual with root or administrative privileges -- Access to all audit trails -- Invalid logical access attempts -- Use of and changes to identification and authentication mechanisms - including but not limited to creation of new accounts and elevation of privileges - and all changes, additions, or deletions to accounts with root or administrative privileges -- Initialization, stopping, or pausing of the audit logs -- Creation and deletion of system-level objects -","Assessment -- Audit trail can be reconstructed from audit logs -- Audit logs are stored in a secure location -- Audit logs are protected against unauthorized access, modification, and deletion -- Review of records -- Interviews with personnel to understand the audit logging implementation - -References -- RFC 3647 - Internet X.509 Public Key Infrastructure Certificate Policy and Certification Practices Framework -- NIST - Guide to Computer Security Log Management -- ISO/IEC 27001 - Information security management systems -- ISO/IEC 27099 - Public key infrastructure" -O.monitoring-and-auditing,Monitoring and auditing,"Monitoring and auditing establish the necessary controls to detect and respond to security events and to provide evidence of compliance with the disclosed business practices. -The events and logs typically serves as a basis for incident response and forensic analysis in case of security incidents, however, they can also be used for other purposes, such as performance analysis, capacity planning, and troubleshooting. - -Monitoring and auditing provide reasonable assurance that: -- Unauthorized PKI system usage is detected -- Critical high impact events are monitored -- Appropriate logs are collected and relevant issues are alerted -- The confidentiality and integrity of current and archived audit logs are maintained for the required period of time -- Audit logs are completely and confidentially archived in accordance with disclosed business practices -- Events and logs are reviewed periodically by authorized personnel - -The outputs from the monitoring and auditing activities are typically used as inputs for the risk assessment and management activities, including incident response management and investigation of high impact events. -",O.monitoring-and-auditing.event-monitoring,Monitoring of operational and security events is implemented,"Monitoring of operational and security events should be implemented to ensure that the PKI implementation is operating as expected and that the security events are detected and responded to in a timely manner and that evidence of any malicious event is identified. The monitoring should be implemented for all critical systems and components, including the CA, RA, OCSP, HSM, and other relevant systems. - -Monitoring should be aligned with the monitoring and auditing requirements defined in the CP, CPS, and other relevant documents. The monitoring should be implemented to ensure that the requirements are met. -","Assessment -- Monitoring of operational and security events is implemented according to the requirements -- Review of monitoring implementation, including CA key life cycle management related events, security sensitive events, and other relevant events -- Review of monitoring events and alerts -- Interviews with personnel responsible for monitoring - -References -- ISO/IEC 27001 - Information security management systems -- ISO/IEC 20000 and related standards -- ISO/IEC 27099 - Public key infrastructure" -O.monitoring-and-auditing,Monitoring and auditing,"Monitoring and auditing establish the necessary controls to detect and respond to security events and to provide evidence of compliance with the disclosed business practices. -The events and logs typically serves as a basis for incident response and forensic analysis in case of security incidents, however, they can also be used for other purposes, such as performance analysis, capacity planning, and troubleshooting. - -Monitoring and auditing provide reasonable assurance that: -- Unauthorized PKI system usage is detected -- Critical high impact events are monitored -- Appropriate logs are collected and relevant issues are alerted -- The confidentiality and integrity of current and archived audit logs are maintained for the required period of time -- Audit logs are completely and confidentially archived in accordance with disclosed business practices -- Events and logs are reviewed periodically by authorized personnel - -The outputs from the monitoring and auditing activities are typically used as inputs for the risk assessment and management activities, including incident response management and investigation of high impact events. -",O.monitoring-and-auditing.critical-event-alerting,Critical events are immediately alerted and resolved according to incident response plans,"Critical events should be immediately alerted and resolved according to incident response plans. Monitoring implementation should ensure that critical events are detected and alerted in a timely manner. This can be done manually or in an automated way. -","Assessment -- Review of requirements for alerting on critical event, including security sensitive events -- Review of monitoring implementation -- Review of documentation of critical events -- Interviews with personnel to check the understanding of critical events and their handling - -References -- ISO/IEC 27001 - Information security management systems -- ISO/IEC 20000 and related standards -- ISO/IEC 27099 - Public key infrastructure" -O.monitoring-and-auditing,Monitoring and auditing,"Monitoring and auditing establish the necessary controls to detect and respond to security events and to provide evidence of compliance with the disclosed business practices. -The events and logs typically serves as a basis for incident response and forensic analysis in case of security incidents, however, they can also be used for other purposes, such as performance analysis, capacity planning, and troubleshooting. - -Monitoring and auditing provide reasonable assurance that: -- Unauthorized PKI system usage is detected -- Critical high impact events are monitored -- Appropriate logs are collected and relevant issues are alerted -- The confidentiality and integrity of current and archived audit logs are maintained for the required period of time -- Audit logs are completely and confidentially archived in accordance with disclosed business practices -- Events and logs are reviewed periodically by authorized personnel - -The outputs from the monitoring and auditing activities are typically used as inputs for the risk assessment and management activities, including incident response management and investigation of high impact events. -",O.monitoring-and-auditing.log-review,Review of events and logs is periodically performed,"Logs and events should be reviewed frequently, preferably automatically, to determine security related issues, potential systems failure, identify anomalies or suspected activity. Regular review should be confirmed by authorized personnel who can proactively identify issues before they become problems. - -The review of logs and events should be performed periodically and the frequency should be based on the risk assessment. Any potential issues should be reported and resolved according to the incident response plans. -","Assessment -- Review of logs and events is performed periodically -- Review of logs and events is performed according to the requirements -- Review of logs and events is confirmed by authorized personnel -- Interview with personnel responsible for review of logs and events - -References -- ISO/IEC 27001 - Information security management systems -- ISO/IEC 20000 and related standards -- NIST - Guide to Computer Security Log Management -- ISO/IEC 27099 - Public key infrastructure" -R.sourcing,Sourcing,"PKI is a complex system that requires a lot of resources to be managed and maintained. Proper sourcing of the resources is one of the key factors of a mature infrastructure that can maintain and improve trust over the time. The resources can be: -- Financial resources needed to maintain the PKI -- Computing resources like hardware, software, tools, technologies -- Human resources (personnel) -- Management resources like processes and procedures - -Sourcing is a process of defining the required resources and their specification, availability, and management. Sourcing requires monitoring and periodic review of the resources needed and alignment with the overall strategy of the organization and scope of the PKI. -",R.sourcing.resource-identification,Resources are identified and documented,"Resources needed for proper management of the PKI are identified and documented. Resources should be aligned with the PKI scope and use-case(s) that should be supported. The main question to answer here is ""Do we know what resources we need to manage the PKI?"". -","Assessment -The following is sample evidence that can be used to assess the requirement: -- Resource management process -- Documented requirements on the resources -- Categorization of resources (an example can be people, processes, procedures, tools, technologies) -- Alignment with the scope of the use-case - -References -" -R.sourcing,Sourcing,"PKI is a complex system that requires a lot of resources to be managed and maintained. Proper sourcing of the resources is one of the key factors of a mature infrastructure that can maintain and improve trust over the time. The resources can be: -- Financial resources needed to maintain the PKI -- Computing resources like hardware, software, tools, technologies -- Human resources (personnel) -- Management resources like processes and procedures - -Sourcing is a process of defining the required resources and their specification, availability, and management. Sourcing requires monitoring and periodic review of the resources needed and alignment with the overall strategy of the organization and scope of the PKI. -",R.sourcing.resource-definition,Resources are clearly defined,"Identified resources should be properly defined and specified. The specification depends on the type of the resource and can include for example the following: -- People: required skills to perform the tasks, roles, and responsibilities -- Tools: description, supported technologies -- Technologies: required functionality and performance -- Financial resources: required budget, funding sources -- Management resources: processes and procedures, inputs, outputs -- Other resources: description, specification, requirements - -Without clearly defined resources, there could be misuse of the organization’s assets or inconsistent interaction with personnel and other parties, leading to insecure and untrusted implementation of the PKI. -","Assessment -The following is a sample evidence that can be used to assess the requirement: -- Resource management process -- Documented requirements on the resources -- Categorization of resources (an example can be: people, processes, procedures, tools, technologies) -- Alignment with the scope of the use-case -- Interview personnel in various roles - -References -- ISO/IEC 20000 and related standards" -R.sourcing,Sourcing,"PKI is a complex system that requires a lot of resources to be managed and maintained. Proper sourcing of the resources is one of the key factors of a mature infrastructure that can maintain and improve trust over the time. The resources can be: -- Financial resources needed to maintain the PKI -- Computing resources like hardware, software, tools, technologies -- Human resources (personnel) -- Management resources like processes and procedures - -Sourcing is a process of defining the required resources and their specification, availability, and management. Sourcing requires monitoring and periodic review of the resources needed and alignment with the overall strategy of the organization and scope of the PKI. -",R.sourcing.resource-availability,Availability of resources,"Identified and defined resources should be available at the required capacity. The availability of the resources should be aligned with the overall strategy of the organization and scope of the PKI. The availability of the resources should be controlled to ensure that the resources are available when needed. -","Assessment -- Review of the resource management process -- Review of the capacity or demand management process -- Alignment with the strategy of the organization and scope of the PKI -- Review of the assignment of the resources to the tasks -- Utilization and performance of the services - -References -- ISO/IEC 20000 and related standards" -R.sourcing,Sourcing,"PKI is a complex system that requires a lot of resources to be managed and maintained. Proper sourcing of the resources is one of the key factors of a mature infrastructure that can maintain and improve trust over the time. The resources can be: -- Financial resources needed to maintain the PKI -- Computing resources like hardware, software, tools, technologies -- Human resources (personnel) -- Management resources like processes and procedures - -Sourcing is a process of defining the required resources and their specification, availability, and management. Sourcing requires monitoring and periodic review of the resources needed and alignment with the overall strategy of the organization and scope of the PKI. -",R.sourcing.resource-review,Resources are periodically reviewed,"Resource should be periodically reviewed to ensure the accurate use of the resources and secure operations. Frequency of the review depends on the complexity and criticality of the infrastructure. Good practice is to perform reviews at least once a year. - -Review includes the following (but not limited to) -- Analysis that the resources continue to match with the scope and capacity required to provide the services -- Review of the specifications of the resources to continue support of the PKI -- Review announcements and technology trends (for example “end of life” plans for a technology) -- Documentation of any remediation plan, updates to sourcing of the PKI, that should be approved by the management -","Assessment -- Review of changes to the PKI scope -- Review of the capacity or available resources -- Vendor announcements -- Technology trends -- Skills and knowledge of the personnel - -References -" -R.knowledge-and-training,Knowledge and training,"The purpose of this category is to ensure that the PKI personnel have the required knowledge and skills to perform their duties and responsibilities. -Education and continuous gathering of required knowledge and skills to manage the PKI is important to be aware and properly react to current trends and threats that may impact the PKI. - -Each of the personnel should be aware of the PKI policies and procedures, and should be able to perform their duties and responsibilities in accordance with the PKI policies and procedures. -",R.knowledge-and-training.training-plan,Establish training plan,"The training plan should be established and maintained to ensure that personnel have the required knowledge and skills to perform their duties and responsibilities. It should reflect the current state of the PKI implementation and be updated when the PKI implementation changes, and provide necessary information for all personnel that are involved in the PKI implementation. - -Training plan is built with PKI needs and requirements in mind and should cover: -- Training prerequisites -- Training matrix (who needs to be trained and what training should be received) -- Training schedule -- Training format and methods -- Requirements on training reports and records -- Training plan review and update - -There can be different methods of training, depending on the needs and requirements: -- Instructor-led training -- Internal or external webinars -- Coaching -- Self-paced training -- Online resources -- Shadowing or reverse-shadowing -","Assessment -- Documented training plan -- Training plan is up-to-date -- Training plan is approved and communicated to all personnel -- Training plan is integrated in organization - -References -- NIST SP 800-16 Information Technology Security Training Requirements: a Role- and Performance-Based Model -- NIST SP 800-50 Building an Information Technology Security Awareness and Training Program -- European Cybersecurity Skills Framework (ECSF)" -R.knowledge-and-training,Knowledge and training,"The purpose of this category is to ensure that the PKI personnel have the required knowledge and skills to perform their duties and responsibilities. -Education and continuous gathering of required knowledge and skills to manage the PKI is important to be aware and properly react to current trends and threats that may impact the PKI. - -Each of the personnel should be aware of the PKI policies and procedures, and should be able to perform their duties and responsibilities in accordance with the PKI policies and procedures. -",R.knowledge-and-training.personnel-training,Responsible personnel receive training,"The responsible personnel should be aware of the current policies and procedures that are related to the context of the PKI implementation. Training should be provided to personnel that are responsible for the management, operation, and administration of the PKI. - -Training is provided in accordance with the current and approved training plan. - -Methods and training content can vary, depending on personnel roles and covers: -- New hires as part of the onboarding process -- Periodic training for all personnel (the frequency of the training depends on the role and responsibilities) - -For each training, attendance should be recorded and documented, and in case the training is not completed, the reason should be documented. -In case there are requirements for score or threshold to be achieved, the results should be documented. -","Assessment -- Review training matrix -- Review documented training results -- Review training records -- Relevancy of the training content -- Training is provided in accordance with the training plan -- Training completeness - -References -- NIST SP 800-16 Information Technology Security Training Requirements: a Role- and Performance-Based Model -- NIST SP 800-50 Building an Information Technology Security Awareness and Training Program -- European Cybersecurity Skills Framework (ECSF)" -R.knowledge-and-training,Knowledge and training,"The purpose of this category is to ensure that the PKI personnel have the required knowledge and skills to perform their duties and responsibilities. -Education and continuous gathering of required knowledge and skills to manage the PKI is important to be aware and properly react to current trends and threats that may impact the PKI. - -Each of the personnel should be aware of the PKI policies and procedures, and should be able to perform their duties and responsibilities in accordance with the PKI policies and procedures. -",R.knowledge-and-training.security-awareness-training,Perform security awareness training,"Security awareness education is an ongoing activity. The security awareness program is implemented to make all personnel aware of their role in protecting the security and establishing trust by the PKI implementation. It should stay up to date to reflect latest security trends, threats, and challenges. - -Security awareness should ensure that personnel are knowledgeable about the threat landscape, their responsibility for the operation of relevant security controls, and are able to access assistance and guidance when required. - -Different methods can be applied to provide security awareness, for example: -- Posters and letters with the specific topic -- Team meetings and webinars -- Security incentives and rewards -- Training and education -","Assessment -- Examine security awareness program -- Interview personnel to verify that they are aware of their responsibilities -- Review security awareness training records -- Security awareness training is provided in accordance with the training plan -- Review content of the security awareness training - -References -- NIST SP 800-50 Building an Information Technology Security Awareness and Training Program -- PCI SSC - Best Practices for Implementing a Security Awareness Program -- Raising Awareness of Cybersecurity" -R.knowledge-and-training,Knowledge and training,"The purpose of this category is to ensure that the PKI personnel have the required knowledge and skills to perform their duties and responsibilities. -Education and continuous gathering of required knowledge and skills to manage the PKI is important to be aware and properly react to current trends and threats that may impact the PKI. - -Each of the personnel should be aware of the PKI policies and procedures, and should be able to perform their duties and responsibilities in accordance with the PKI policies and procedures. -",R.knowledge-and-training.education-plan,Establish education plan,"Proper education plan is required to stay up to date with the development of the latest technologies, security practices, and controls that have impact on the PKI and its future development. - -The education plan should establish a robust base for the personnel to gain relevant knowledge that are out of scope of the internal training plan, but should be aligned with it to ensure that the personnel are able to perform their duties and responsibilities. The education plan should cover: -- Education requirements and prerequisites -- Recommended education approach and methods -- Approach to monitor and assess the education results - -Methods to provide education can vary: -- Internal or external courses -- Incentives and rewards -- Mentoring, coaching, and shadowing -- Competitions and challenges -","Assessment -- Review education plan and its alignment with the training plan -- Interview personnel to verify their educational goals -- Validate education records - -References -- NIST SP 800-16 Information Technology Security Training Requirements: a Role- and Performance-Based Model -- NIST SP 800-50 Building an Information Technology Security Awareness and Training Program -- European Cybersecurity Skills Framework (ECSF)" -R.knowledge-and-training,Knowledge and training,"The purpose of this category is to ensure that the PKI personnel have the required knowledge and skills to perform their duties and responsibilities. -Education and continuous gathering of required knowledge and skills to manage the PKI is important to be aware and properly react to current trends and threats that may impact the PKI. - -Each of the personnel should be aware of the PKI policies and procedures, and should be able to perform their duties and responsibilities in accordance with the PKI policies and procedures. -",R.knowledge-and-training.knowledge-review,Periodically review knowledge,"The training plan should be reviewed and updated periodically to ensure that it is up-to-date and covers all aspects of the specific PKI implementation. - -Periodical review of the training plans helps to maintain required skills and knowledge for the responsible personnel. -It provides assurance that the expected controls are active and working as intended. -","Assessment -- Training plan review process -- Implementation of review process -- Validation of documentation and reviews - -References -- NIST SP 800-16 Information Technology Security Training Requirements: a Role- and Performance-Based Model -- NIST SP 800-50 Building an Information Technology Security Awareness and Training Program -- European Cybersecurity Skills Framework (ECSF)" -R.awareness,Awareness,"Providing awareness about the PKI and its purpose in the organization and outside ensures that each PKI participant understands it properly and is timely informed about any important events that may impact the participant. - -The awareness is important for all PKI participants to know how to handle exceptional situations and how to react to them. It is also important to know how to communicate and when so as to not misunderstand any issues or incidents. -",R.awareness.awareness-plan,Establish and maintain awareness plan,"Awareness plan should be established and maintained to ensure that the PKI participants are aware of all relevant events related to the PKI implementation and its purpose in the organization and outside. It should cover at lease the following information: -- How the organization discloses information to PKI participants -- Contact information -- How are changes communicated -- Who is responsible for accurate awareness -- Resolving communication issues and incidents - -Every PKI participant should receive information and relevant resource in a timely manner according to the awareness plan. -","Assessment -- Documented awareness plan -- Awareness plan is up-to-date -- Review awareness content to ensure that it is contains relevant information -- Awareness plan is approved and communicated to all PKI participants -- Awareness plan is integrated in the organization - -References -- RFC 3647 - Internet X.509 Public Key Infrastructure Certificate Policy and Certification Practices Framework -- ETSI EN 319 401 - General Policy Requirements for Trust Service Providers" -R.awareness,Awareness,"Providing awareness about the PKI and its purpose in the organization and outside ensures that each PKI participant understands it properly and is timely informed about any important events that may impact the participant. - -The awareness is important for all PKI participants to know how to handle exceptional situations and how to react to them. It is also important to know how to communicate and when so as to not misunderstand any issues or incidents. -",R.awareness.pki-disclosure,Disclose PKI information,"Information about the policies, processes, and procedures that are maintained by the PKI should be disclosed to the PKI participants. This information should be available on a timely basis and in a form that is understandable to the PKI participants. - -Organization maintaining the PKI implementation should disclose the following information on a website or other appropriate media that can be reached by the PKI participants: -- Certificate Policy -- Certification Practice Statement -- Revocation information -- Valid CA certificates -- Vulnerability reports -- Audit reports -- Contact information -- Obligations of the PKI participants -- Legal liability of the PKI participants -- Warranty information -- Disclaimer information -- Privacy and data protection information -- Other relevant information -","Assessment -- Review disclosure statement content to ensure that it is contains relevant information -- Disclosure statement is approved and communicated to all PKI participants -- Information is available to all PKI participants -- Information is up-to-date - -References -- RFC 3647 - Internet X.509 Public Key Infrastructure Certificate Policy and Certification Practices Framework -- ETSI EN 319 401 - General Policy Requirements for Trust Service Providers" -R.awareness,Awareness,"Providing awareness about the PKI and its purpose in the organization and outside ensures that each PKI participant understands it properly and is timely informed about any important events that may impact the participant. - -The awareness is important for all PKI participants to know how to handle exceptional situations and how to react to them. It is also important to know how to communicate and when so as to not misunderstand any issues or incidents. -",R.awareness.single-point-of-contact,Establish single point of contact,"The single point of contact (SPOC) provides a convenient way for any PKI participant to contact the organization and responsible personnel of the PKI implementation. The single point of contact should be available 24/7 and should be able to provide relevant information and trigger appropriate procedures if needed based on the situation. - -Contact information for the SPOC should be disclosed to all PKI participants. -The SPOC may be reached through different communication channels, such as: -- Email -- Phone -- Web site form -- Other -","Assessment -- Contact SPOC to ensure that it is available and responds in a timely manner -- Review that the SPOC communicates according to the awareness plan -- Review that the SPOC is able to provide relevant information and trigger appropriate procedures if needed based on the situation - -References -- RFC 3647 - Internet X.509 Public Key Infrastructure Certificate Policy and Certification Practices Framework -- ETSI EN 319 401 - General Policy Requirements for Trust Service Providers" -R.awareness,Awareness,"Providing awareness about the PKI and its purpose in the organization and outside ensures that each PKI participant understands it properly and is timely informed about any important events that may impact the participant. - -The awareness is important for all PKI participants to know how to handle exceptional situations and how to react to them. It is also important to know how to communicate and when so as to not misunderstand any issues or incidents. -",R.awareness.timely-communication,Timely communication of important information,"In the event of an incident with high impact to the security and established trust of the PKI implementation, the organization should communicate the information to the PKI participants in a timely manner to avoid increased escalation of the event and inform participants of further actions that may be required to execute. - -Example of events that require timely communication may be: -- Compromise of the private key -- Changes in the Certificate Policy -- Changes in the Certification Practice Statement -- Security breach -- Other events that may require immediate action by the PKI participants -","Assessment -- Documented procedures to timely inform PKI participants about high impact events -- Review that the procedures are followed -- Interview personnel to ensure that they are aware of the procedures and know how to communicate the information - -References -- RFC 3647 - Internet X.509 Public Key Infrastructure Certificate Policy and Certification Practices Framework -- ETSI EN 319 401 - General Policy Requirements for Trust Service Providers" diff --git a/release-notes/2.0.0/_index.md b/release-notes/2.0.0/_index.md index c8ef8cd..fe7cc31 100644 --- a/release-notes/2.0.0/_index.md +++ b/release-notes/2.0.0/_index.md @@ -1,14 +1,11 @@ --- date: 2026-05-20T00:00:00Z title: 2.0.0 -status: under-development weight: 10 --- # PKI Maturity Model 2.0.0 — Summary of changes -> **Under development** This version has not yet been released. Content and timing are subject to change. - This document summarises the changes from PKI Maturity Model 1.0.0 to 2.0.0. It is intended for assessors, consultants, and PKI program owners who use the model to evaluate or improve PKI programs. ## Change types @@ -61,13 +58,14 @@ This summary uses the following change-type vocabulary: ## Summary of changes to extensions -2.0.0 is the first release of the PKI Maturity Model that supports extensions. An extension is an optional overlay that adds emphasis, additional requirements, or alternative weighting for a specific risk profile or industry context. Extensions do not change the core model; they supplement it for organisations that need a more targeted view. +2.0.0 introduces the extension **framework and schema**: a defined mechanism for optional overlays that add emphasis, additional requirements, or alternative weighting for a specific risk profile or industry context. Extensions do not change the core model; they supplement it for organisations that need a more targeted view. The framework and its JSON Schema live in this repository (`extensions/extension.schema-1.0.0.json`). -### PQC Readiness Extension +The extension **catalog** — the actual published extensions — is maintained separately in the [`pkimm-extensions`](https://pkic.org/wg/pkimm/extensions/) repository and published at that site. This repository no longer ships or tracks individual extension content; consult `pkimm-extensions` for available extensions, their status, and version compatibility with the core model. -The PQC Readiness Extension is the first published extension. It overlays the Governance module categories with post-quantum cryptography readiness criteria, maturity guidance, and requirement-weight adjustments. When enabled during an assessment, it evaluates how prepared an organisation is to migrate its PKI to quantum-safe cryptography. The extension is opt-in; it has no effect on organisations that do not enable it. +## Summary of changes to integrations and tools -The extension is currently under development. The Governance criteria are complete; criteria for the Management, Operations, and Resources modules are still being developed and will land in a subsequent release. +- **Integrations moved.** The Eramba CSV converter scripts (previously under `integrations/eramba/`) have moved to the separate [`pkimm-integrations`](https://pkic.org/wg/pkimm/integrations/) repository. The in-repo `integrations/eramba/*.csv` paths are retired. +- **Excel assessment tools retired.** The Excel-based assessment tools (`tools/PKI_Maturity_Assessment_Tool_*.xlsx`, `tools/PKI_Maturity_Self_Assessment_Tool_*.xlsx`) are retired from this repository as of 2.0.0 and are superseded by the web self-assessment. They remain available at the `1.0.0`-tagged raw URLs and in the 1.0.0 website section; the `/main/`-pinned raw `tools/*.xlsx` URLs will no longer resolve. ## Notes for assessors and consultants @@ -75,5 +73,6 @@ The extension is currently under development. The Governance criteria are comple - **Reports referencing "level 2 — Basic".** Existing assessment reports completed under 1.0.0 are not invalidated. If you regenerate or reissue a report, update references from "level 2 — Basic" to "level 2 — Foundational" to align with 2.0.0 terminology. - **Existing assessments.** Categories carried over from 1.0.0 have no content changes other than the cipher-suite removals from Certificate management and Key management. Scores for those categories may need a small re-evaluation if the removed requirement materially influenced the maturity level; for most assessments the impact is minor and limited to a single requirement. - **Cryptography category.** Organisations that completed a 1.0.0 assessment should add the Cryptography category to their next assessment cycle. -- **PQC Readiness Extension.** Organisations not concerned with post-quantum migration are unaffected. The extension applies only when explicitly enabled. +- **Extensions.** Published extensions are maintained in the `pkimm-extensions` repository, not this one; they are optional and apply only when explicitly enabled. Consult that repository for available extensions and their model-version compatibility. +- **Excel tools retired.** If you have bookmarked or automated against the `/main/`-pinned raw `tools/*.xlsx` URLs, switch to the web self-assessment or the `1.0.0`-tagged URLs, as those links will no longer resolve. - **Questions and discussions.** Engage with the working group via the [PKI Maturity Model community discussion](https://github.com/orgs/pkic/discussions/categories/pki-maturity-model-pkimm). diff --git a/scripts/check_model_docs_consistency.py b/scripts/check_model_docs_consistency.py index 54dc630..f515b52 100644 --- a/scripts/check_model_docs_consistency.py +++ b/scripts/check_model_docs_consistency.py @@ -101,8 +101,7 @@ def _check_category_md_parity( def _check_level_vocabulary(repo_root: Path) -> list[ConsistencyIssue]: issues: list[ConsistencyIssue] = [] - skip_dirs = {".git", "node_modules", ".venv", "dist", "tools", - "integrations", "scripts"} + skip_dirs = {".git", "node_modules", ".venv", "dist", "scripts"} for path in repo_root.rglob("*.md"): if any(part in skip_dirs for part in path.relative_to(repo_root).parts): continue @@ -130,8 +129,7 @@ def _check_counts_in_index(model: dict, repo_root: Path) -> list[ConsistencyIssu count_pattern = re.compile( r"\b(\d+)\s+(modules?|categories?|maturity\s+levels?)\b", re.IGNORECASE ) - skip = {".git", "node_modules", ".venv", "dist", "tools", - "integrations", "scripts", "changelog"} + skip = {".git", "node_modules", ".venv", "dist", "scripts", "changelog"} for path in repo_root.rglob("_index.md"): if any(part in skip for part in path.relative_to(repo_root).parts): continue @@ -174,29 +172,9 @@ def _load_global_catalog(repo_root: Path) -> dict: return {} -def _load_extension_catalogs(repo_root: Path) -> dict[str, set[str]]: - """Read each extension YAML's inline `references` block. Returns - {extension_id: {set of catalog ids declared inline}}.""" - out: dict[str, set[str]] = {} - ext_dir = repo_root / "extensions" / "catalog" - if not ext_dir.exists(): - return out - for ext_yaml in ext_dir.rglob("*-extension.yaml"): - try: - d = yaml.safe_load(ext_yaml.read_text()) - except yaml.YAMLError: - continue - if not isinstance(d, dict): - continue - ext_id = d.get("extension", {}).get("id", ext_yaml.stem) - out[ext_id] = {r["id"] for r in d.get("references", []) if isinstance(r, dict) and "id" in r} - return out - - def _check_reference_ids(repo_root: Path, model: dict) -> list[ConsistencyIssue]: """Cross-check that every reference id cited from a requirement resolves - against either the global catalog or (for extension citations) the - extension's inline references block.""" + against the global catalog.""" issues: list[ConsistencyIssue] = [] catalog = _load_global_catalog(repo_root) global_ids = {r["id"] for r in catalog.get("references", []) if isinstance(r, dict) and "id" in r} @@ -212,31 +190,6 @@ def _check_reference_ids(repo_root: Path, model: dict) -> list[ConsistencyIssue] f"catalog id '{ref_id}' (not in data/pkimm-references.yaml).", )) - # Extension citations resolve in their own inline block OR the global catalog. - extension_locals = _load_extension_catalogs(repo_root) - ext_dir = repo_root / "extensions" / "catalog" - if ext_dir.exists(): - for ext_yaml in ext_dir.rglob("*-extension.yaml"): - try: - d = yaml.safe_load(ext_yaml.read_text()) - except yaml.YAMLError: - continue - if not isinstance(d, dict): - continue - ext_id = d.get("extension", {}).get("id", ext_yaml.stem) - local_ids = extension_locals.get(ext_id, set()) - allowed = global_ids | local_ids - for module in d.get("relevance", {}).get("modules", []): - for c in module.get("categories", []): - for ref_id in c.get("references", []) or []: - if ref_id not in allowed: - issues.append(ConsistencyIssue( - "error", - f"Extension {ext_id} category '{c.get('id')}' references " - f"unknown catalog id '{ref_id}' (not in global catalog or " - f"extension's inline references block).", - )) - # Authority warning on global catalog only. for ref in catalog.get("references", []) or []: if not isinstance(ref, dict): @@ -252,39 +205,6 @@ def _check_reference_ids(repo_root: Path, model: dict) -> list[ConsistencyIssue] return issues -def _check_extension_compatibility(repo_root: Path) -> list[ConsistencyIssue]: - issues: list[ConsistencyIssue] = [] - data_dir = repo_root / "data" - if not data_dir.exists(): - return issues - known_model_versions = set() - for yml in data_dir.glob("pkimm-model-*.yaml"): - try: - d = yaml.safe_load(yml.read_text()) - except yaml.YAMLError: - continue - if isinstance(d, dict) and "version" in d: - known_model_versions.add(d["version"]) - ext_dir = repo_root / "extensions" / "catalog" - if not ext_dir.exists(): - return issues - for ext_yaml in ext_dir.rglob("*-extension.yaml"): - try: - d = yaml.safe_load(ext_yaml.read_text()) - except yaml.YAMLError: - continue - compat = d.get("extension", {}).get("compatibility", []) - for cv in compat: - if cv not in known_model_versions: - issues.append(ConsistencyIssue( - "error", - f"Extension {ext_yaml} declares compatibility '{cv}' " - f"which is not a known model version " - f"(known: {sorted(known_model_versions)}).", - )) - return issues - - def _check_reference_shape_consistency(repo_root: Path) -> list[ConsistencyIssue]: """The reference-entry shape inlined in the catalog schema and in the extension schema must remain byte-identical (canonical JSON), since both @@ -329,7 +249,6 @@ def check_all( issues += _check_level_vocabulary(repo_root) issues += _check_counts_in_index(model, repo_root) issues += _check_reference_ids(repo_root, model) - issues += _check_extension_compatibility(repo_root) issues += _check_reference_shape_consistency(repo_root) return issues diff --git a/tools/PKI_Maturity_Assessment_Tool_v240318.xlsx b/tools/PKI_Maturity_Assessment_Tool_v240318.xlsx deleted file mode 100644 index c4d876303e30aac6290cbe752116f142c161248a..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 663921 zcmeFZ1zTK8vo?&o48a|OySqEV-QAtw5D0F;U4y$raCe8`?(XjXkuA^O&p!Knf8e}x zt!t)-Rb5?mchz0JRz~9bc+v>k5ttzm)V%3jNQ+z1r$}6ZnZs?=NPPTpvJ@k4_zbF*1xdSJEhnkR&O_z zB#~uiw@eF3pqfP+xG_nF?o(efL_S&5HzYcf`pR6{_=q;!(f+cS{+Qkg>8EB0mdGN2 zaLEA^~!nRs!ZWw|lYlzA!X2vnsfEd5Q4ABw&Zf%$hUbz&?&*{?J=}Hhg#Y zYKw+g$s%dwXHZW~jkdf9#WbYhEOb|&$JUmgxfj(z^}!7^zaKCBzW)m=k#GWsu#3{6 zZVl@J!BPmfL!;-mN7{EpMrKV`%TLmhb!@wEYp-fZPcaeHxd$2W+;aUQ1f0AO*;|V5 zACTEwi~w9+kO@1~;D`#Jeer@UC}?9*X`y6=DY@P0>oQVh>seR+W8Jq2{qAdS?f6yY z%sw5%`OL4|z7hjxwdy?OqUh(G&XEyV%%es5Zw6^M)uAgygtq9>A&zhN1#Pg?-J`B6 zrF%2;$P>J$9X3z0LJ=#hIYLx1EOa^Q)~tf8dKo)3O9^SP%_=LqCE+$pjf9Lkb_a2b zprT8a6#8OvQ+X5iLFW?zCr3oS8^>Gv4^MpHL35pEQo^rV^KB18^m0z??VtDmBjZ!< zH_?JaANg=*aPi=v|FnzP$v@-sMvHTn1G_XQ1_r7PnG-$;?6mIn#b+!7c8Sdk3ZfX{ zSyuO)x2f{$S7CZN-p35QjjxXSPmjTRnI1SB*RZy^$jk2iTlQ^ieFlx)81cjM1uMK_lnk1fuaI`)Kq@tFIc|mjllTDxQ=DR@Sp+9>$KP zdd(%|AHeekb4VReCZi5G7?>`Udkk0+-aKF_E1GebR~n?-bAEKwHL~is5>9PLe(|7@ z`97fVk@>?t20Mh)}DaGF~W8+3Qc!1sQN&j-_|n+(9noFt&=?3L%3HEBMp45fibrWyK`tEfu}VzGf!xS9G#<2ZQh7N{%Z zm!e*9?81!9O6T>|6n6A54l}h`h7TzqxzEXx7`rC>EomBk(uDA0eI|m(d)y$N=j13J zFc7tD+C<9!f3a%vaB3W~w_lT2?NYwMME|JRNWIgrD<5MQ6SjloF=={f;=`gmZp3kXNF?N9 zbW>b#74`{QeS>rlmf*6JTPe`Gxrv0>2gCCxG!+9GvWETo#%hJ_j+Ui+jDlVRGg&(u zCXt+42i-YpI{WSUk97TX3Hae=s98CCZe#z_LE2X#3TJeu5X>So73bv=0^XXQ#zzvv z1;f>zqm>-su1K1_;j}M>c^YX9j{&7wKqh?JlJ!Y!QcB(4yZ1Huub>ll)Y%1s_nhd> zYyDYZvdJz4S7A)hp1MJ7QR7@KKG#@v`U46-Y=P#Y1otj_Gq4g&0#ghyW|bJyfGAGI z=TJ;@4-zn?z7sgM`x1@Z8iZh{pQ;m$L>MEJ+y8J1tq;P@b(2nL5pRZvJK7oJ6bg9*TDd{1x6jUm;f2F2Ez2yI6{$`Cc$vii4&8&g;Ud;@os7^vHe+AD27YFN4t`~5^JTSV_m6R8u8XeWO+j#*Ma)&#_! zG#4!d*7*J-(;^mr)4Bt~N{(`}kbc#MJXAh^g?W4AsW6hl+);SMjbIl;P2Ki&gFgLY z9ShjvxAt&6Up=UEIS%s#Vz6ByuX1-^^m(CS^$1CfoUfi)FK{19aj9Nz_W03gVJo!Q z3H^XD3?d+5PM^*R>cosTiDe+008e*XLS#}!=H08~XabXK%C_b?crXNgZg36)Enpkb zp*1#UQ8evE4>Ke!StO=%W&_jD(Yq-jXqae@A5~RxrpDvHVID@agmjTt3X^?sAw7F* z;HZi1*}+2GJ{kbS9;63449yHmkfI1?jog^>0j#b_jqrL3 z35G11UXp!d$Ld3un2c?+d$+o;we;UupF8jUa|DDnPtpC98mqPEd|F>T)36d7w^Z@?5fYna3 zwSgf%5*aj_0O}_5DNwk}9@Z)nqN0rDwk{fHQ2msE@xDwXJf8MwF%8@H6wU{JL#i@H zQc(&?xld`T#RKz8uLm}RACCBU_cA|3^!zdIUGaR-%3nF=KdA6uZEVW5!z;g8gTDC<{*_ z6mct>+<1{~ESiB2;f7~P4BwEIB4|4GUJt|0(46NPO!Y%Z>##LOxsCElxn|mwZ>@Jt zr4mSQMYHsLn;No@etu&5ScfIBG4gS0M4U~){5xO0-F(eTl#A?S@Ogb;VNi|uC$f?# z_74^ha)NmfbYFwBlSG{v^YnbN8aKUkqHn&HiC){>FVs3+!T(#d?rEQEOTS;O*VF<5 zVf@nui`(4$Ndc5La>V$irfmzp4)PCgC;!C(`lH|T#MVwyZq_8K1$6kHQu{NHi{S(#h63B9(B_!+z zWy^<=LhmzeWEiV6K$-RyZLN-rw>t`oL3sk@`Ry1Dp4X>J`+_CN!WB3$(XRqGaU8E8 zk^3q!dCoG!Hm&&ZLHUdOs&cKY0PnWKCd1dgupz(L>#H+E%ur7iyl_n)^|z zxj5phYG!HC1!;+hP}wg}@b|?6ok$u_ywt@nxN3oZKE@Ari_iud1o#>0+bjNthEv*a zt9bL#_#_)pX*_jRYV(>y`!x4}K=;WYk_NA!%6q9vW4-Z$7sy|6^&UEJZ#8Kv_S=2- z{<BUMHXxhRZfb0ccJk#!yzVom}rovFK3DH6T!q?KyoSJ?!`Hw*N&+ux~Qrs zOHQEtaG~Ke6Bb4|0tf1O=Ae9WKmJ(7mmx<&?mSLxS&rj~PQ{R!LyEBSFbh%moCNv) zLQ`gXEL?jm0ocj?>y4nXx0{4ERQH!F7LVKp_0A9ir@<{twT;i^`rc-buMY z`x-lHfi4D={nL#@r6j6T4Do8W@lN_94q4B|#&VOSxez~G{1)}rlr$A}?2Do@y)?a6 zJwLr1Qyn5W=#Rj)%nHe8ZCkfKqZ!hvN!n$VV5F<1uTIoc{vMQ}A2z+1=Hf#CCJw z!sicoGfpg5=8{Q7SQpTL3F#ol@7PGl3unVZ>Uv~@1sn}od84TxTc{54{t3K{pZS8M z`C=f2ew*yTih?G*)*Jznnuc{U(0@YOWjW>^04BOK|UR` z*_Ke3D;dc;V1(v7LI{TW8kWtmR>TBd2K}HXeB83*$zc2&(x4Z8Zyi6AmoY z^OG9L(tH;mnpxh=Y^}rw!)8JjFmchPaAl4BvW+tjhN(XXGYdTn%L>K%WtS{2skTkw zVQ>4|?fqWg#xz87l!LY^6TVRwvh~QyC9*a65!ey zQc*~Ab-sTDMYd* zMEf`0y4P(=_WecMPR6gHfh1=CeU5oIxT2w)+(ZV6jC<#cv2#?2l$_SmpB}Uw#9gn* zPru)NoZWT|4OsZb6{lN%l;^n_A*X)mLiv;TLG-DN4(aO z>RW#>(HzD-jXXyojJ2zeju6xQl_1%)XI&YOL+HxQM0>f%US1V5SkYa zRNas1Y=4|-Q{FzJqZZA3ghn~Ss8o!Mn0A%_H3XkYqT~9~*wRk@cZT^rtauu5)&3|; zZtQ9&S+&X%y;{9+z5l?Z_m-gMG_Qzjb#|GYOE}%=AZyqL|C17j(jm-v@GEsQRP*0D zn68FuWyhkhQ|mZZz({`Bmc>%)cXc+_9SPB7XohLls1&VKsg$YIsT8Q3V4};E%v>d1 zk0AgD#@~_;|H?oG!uUUg$ksb|jNRZ)_pV@EzN~wcxX$KriUNl(P-g0>c3N~|b!v2S zc7ExE=oB4m@urQI1WAuBUM^XU=~oWYPVS}8k;be@?ft+d1H0+OmBSf$ecO~0AEgdE z3pM*!#LYOE>#Nvy^YR*{=6=~G_vJ%sCH|c@bJ8j8MiBz#2nn}>P|B5F9){- zv-~RnWBOaHhqRQYUv8i9Gv2o5+I6@g8gvoo@e-D0zMUN^a!6}L2(8$?<+0Z;^YO&i z1aZ)C%$k0vo2m%1QtDH(PI61SkW;Qs8AV|6GHGUPe$&Mj(pmi`d-5y3U-}>S@)>`= zBxtPZ5Avsdr=UpV^@?XgX{$JBB6?NF;nv;n6J3@tpOqZVwlbzg;tjBFv0^C^fjTqI>#O1y-zAV1A|H)jAmB?aYwluHCyRhe&-Xh3sR;GFnUun->wHxk6 zN_5FFefw6@>Mh6XN}LFe{#cDZYQEmTN7kF;=IgGO_rkej0!-o;&O`s@gaX6roNLEz zyloCV$4*3tU2|&gG}raLa$ zlJLdS#!t7!1cIBkEKIsPUbTE9-$1u)R#YHs4+7r6&>b$stY5&ejbF$LnWQxFwn7;W zat$Y6+N;%BgL>%G@rr}L+S{o`*f|f=dsAVLbSFZd=7A1U7XGN`-twC^=83-kT zS?DT9`!7BT%`;hi$>%&Cl&O{`2;g;KX}#QFL7byur$Cpqn7@+i+sTG(uB4Q*(>V#Nlirlqxq(t zw7%NlC4VL>&y_)8k1eOi4FrpV_R`DecFx|DYX=4@o!(>0aqDw-x zPWVr*!Fq(9y$8}MydT=%R4+UZdy~qPMgGY=J(Lqm%%4NABPpMf>+D&d-mW|(7f1L4 zy4K&t5e5G-Wp@O4k~THEi_j~lN0B6|4Ht{c3TAEglQU1BLkiQINJ@$D;rTJi6Ojk{GzsPM@wf3G^` z_ewuvU0^@RqO@#Snrg7E)`K;Txa8&T;f!@+R4cpuH<_QtDfhIIy$9f4pyy5qlBl4n2H?#aHR~Mx;E@beS0bxF zDfWu6{*E)tvzJ<{Dk7cJ;5@G+-JOxkF2d*Gw#F4vp?0=Fv->^(?ixn+4z|#>hhcEO zE!@P-r~sMQ4L>$k{n*?LsPet7)8>xCc?T<;WmE45t0cF3p_`0ph=VU8I??O+IU1jEo=ah6nEZK?rC{7m*r+C7XLIk!@3K=@W`rxt{gv>?&SWN!!%_={EEw!6;FLEDP zwCJPv%hbJs9o5Jw>K5bEo+$0Z*=ECo!$88+kcEv7#G76gXVE5myTGUj!dyeB0}MgV zz^I>{1h_NZY(IlBW+!Q~d;3 z7hyWsRvnv=(`$2)xUQC1T~%nG+!?k8r7calOSG)GLkWoupuS-UehiEn5TJ`TN7ZnK zF7DPBBJ~{Bvj*N3iS;KEe@3`0I3e;aJvq^|+4)OYd)G1h>?!9G?;L9SQgplr5s==W z8c}tK2Oz(z!nd?*{y`0|CO=po^#di$Urg^@8Q+ zxbKrqJFZr8U~3f4qJ)8R!GtIVPyrZ%@6CbE%qUKqAJUm5V({+8&v8q69#!mk&m8|kJDkfDFZ zB2sBy=V}Zy^=!%}@Cc&$!}E6#5WWPQ9#uVR<=y6b0-#-$6I@3}V+t0BFVe9CT}$A* zWdvI00%hYGV1T*-P<3!b(DQCIEa1{q>*-F$AFke>LB4 zHfF&j%{&iHKShXkswea?n)LvFb^)*${6*oikc8g9{oaiB6CkREY_irF#8qFJQBbe)mJ>Jb1ra2SM}>t7Xp2QXGf%WHj##NFW75U)N~tX|gYBH(sdOj;^LN>S zD`n0La)#T`hRebgazz(1>j$j%0v0(iT1tomNG!_o`c&7dEe;#oG%0buSbll1jOUE$ z3r~xRH5_qp1IPvtro#wvqXxQC!d)m~Y!=b?DC!3nbOB_0JI|FQ5^n0WKs0vadQEnM zg2soyHPE=WHsG>IgvA%tY?9a`KqMQ;{BR3$v2k(}bB@(83?%7NJjUP@ah|Z= z|E6PWc0BY!fZt5(G>PUSfj4kGiICX@DjXLMt6i169~;h?=IEP+df(6BEDQCn4+e!A z3ElvqnIGJ625}lH$y;?+CIVqK`k1U0Mc3xXVHi7`Kbi@s2_ZDQm@ow40?*+f{V=Ln zuNFsYlo&RXvOqZ-J9E#*Z-j>}3{B(g+~Xu8CnVGaG3)+Jt4vi|7 z8{w?6`S@|Nb<`EgDHNkvE?{iq11bTK85DM|uB6O{_wf4*4lKp)^9f`<}NUlZ5^rTtMps!-`JM7Vi=6^|%R z(hnmGZX@y+ecluOBGcFX%tUck{w8bxd;|ec|J^zP+Thbo^Oq(@=U#KL9``+E04l&X zT~$Ddzs3EPOJLfO?aNl1-+`0TX-!ekcAi9;f6LR(t6+IkO(?2k@Mu+;JiwrYfRdm` z<-JSrOBz8)`BZlAbq$T9DQJjA8?vY2rZWKf`e;MjgNp%70ZEA;swW}M7Z6MX2~HSQ z4Y#EzI-VLL)z}?L#fV!h*XmgwrcD6>_0EIiv|`N)ZoUrx9Tx}?C#y8GKY26^2pX*m zOsvlgTr3cp=W(+bok`Y^0KR+G>$iJ^AcCLk{MX?K*@d8f0(`ml!P#CcR@t3WXjz8S zbc#3&Olb9Insd6f8V^D>Z}6PsrZAd6q=Q*e0ds-7gF}M%1Nrq$SxHb;!;1k|6tWeh zRF!?kz1;{Fus#XH;C>T=L*)hY$Ds6pf@07?z~{R1d(f0ArMtZlnGgE<%-~UXW%`Qn zq=r-FT*3%b2jdKL3xfa?0nEv^z!TS?{}^j+7rUc!(O()QBxy*2BiBm?O$$;xL-CC7CUHz)L(iex)l;zcb~K5G@Ur zQ(pYNFTXT2taLmC;mO=tawQa=j9YLDj)})EZyPUP9`jpz9|zA!x9dp4ofEAa>nh*Y zlH0>qPw{?FtiGL-!`(*~>7eP{#6*W%`ZiqC=UAF6+qG&6p7N`oLl%Z4Z?qTRFbDz( zG%Z!QLZ%hsN^tRni;>QJ++^toz~fz)2~jDn+k2L4#Y2np|IC1 z0V@H&77AsvvzRwK>0^nTxH-95oCQH#KpkLF;1J{*W~iK>aWX;){aj9fCzmG3`FlQ? zU(CXkYmLZQlfltCUVlrqh}hahMB9w0(38~Bkn)~d4;z0SN+bAty+kJLwy1SN+M_qx z0x@dH17?IXWxjyBP8@N_oYGE zMc$SL7zT7o6|xXEOdpq@{=C6#0cy>^r&v2-45P$Z-9i-{4>ipg6-A{bQc$~hZ+Y^S zPKwjIUGT}4Y|;B-oePg#18el>#}qXnOi3$mdT+xhSjv8TRQmzL2mu6maKt9iFSVUl z6q_vW+!?z9LFVgR{NpfC9xh>=4Mc08j=3;tMQLUVn*w*`nJhT2@Q^%o=U0vmuxY1h z`{X@-=>@%XHIJ4PNRg0Z-wH1bSqVJH2N`-Q6gXys2!a@QF>DCFOaMHmfCBYJPpanu z1TOjzv_es9mX$>O5jOVsrF%5eeE*Y9u}gJ+k<$S0UC-Mw*eb;q5a zP{F`XWc+!iKVz)=$u7Nr4t8Df@XlPJa-g~&X|CmsPVM1lx|z8>?T4b5#MH_;TiF#1 zdb_!Jf8*TIIwxQF6!%Rx9BYYw`_F=mr{2?->2}2a?zuU{lGXl$G5dg)hu^je|M`TZ zZ%zJ$!!e2pl1=7G^gO~BR8R-Se@zQqssPlmFF4&Dib-ZPo`!8$M?U zTO&PHRyOcw&7t1n|5Y<;(ySw~>yi4~L)_^?FvP7-4lfjz_^D55@8szg?*ca1?Z%lY zHZ4;K@bGudofd84VqCv9+CTR=u9H?LF-7w{3fRIX@Wgm*qp&X<00@U2T2XPi?(B zY1uj41^;>-aPPHN7P68$_xAN}_oiR3R#v3~lv7PfT}g9VZJXMH=8*c328$YtCWV?4 z<~qeFe390tuJ>^!p{Mofd8^;6?JXdeDsyre`vY}DFfl7FXEXL~;#tqr5$ly|qZ)-5 zc*#=0+vCCnWGH2*MJQG%PR>W?HSn5+-ML!Lfuq9(3v_G*v~V?fd)r*aDWm00@~Dff z&{$C0hs{znj5SUFrXk@~x?NuPa6o10K0H=LOw<7kW`)9@F4)D^+G(xW)wD$F&fA8q z;FCeC8ilFy;71D^dBbSKIF$W$<5QS;xnpAlV2V+v(rV@W#`oSTS1TeZ?v^I1Z-69>QE+@=J2*HJKphpABb(r_}Sh$RH;4N1yoV0|Sc zz7!>nOB;f9uNx9ZFl&bL(cY(4suD>#KlFAcd|G>v2ygeAo7Kg&SzBH9kbZmFs?TV9 zdzg7;KWTq?QeA6%TT%^L(M71IYj1P2yJA@&xvaZ?Je}$v^ZKGot$I=6#LRvC`rN&u zi&$R}*%mH(J@>ftzShz4It#742|eR|e%rT@*N@o7i*bSjeXUIQ&rl{viNvG^SId$~{IaH9<9`_nu? zyMZVi^(dL=HUq zZUUD8l>l1;Ie6E4J9*!D!+VE&OMBxIrN+iMZW~uyBaxEN#!J1*F(dJ^7)ZwHh2BhkbUsxQu`*Kc0Z{=~0i6Zf1+oM_0y+Z52EqnT1>zDl zA*!2pnCRwkX1%i*3Z4NsFhL_i`@~lzUeYF?c!rB7fBZuAmkG-#JoQ%XM(cD%BapD21=7k61s2<4 z3E>_clpPiwSRFWeG4pIu|!7yJIG+hpGKXw9JUn zV50PLdeh?DEQTyi`L2vpPvF-%X}qcg#5yVFoveQQH^Sh>>%S`LWbC)&k zstO`M1)3m_fz-g&;MIP?4qggc3TXvo1!e_uOrDHGZ^mLTBV7qM6*VtM0jrH{WI`d9 zn_oo=pqRaiP+it5-z|8cL}Z2Kus#JQiJPMfK^5JwMH@0Tb- zC0ZpyC0-?PB~m4HWscEgs2Q+=jn2d@LDNlZh)bJlTh`i5PVjKApBBCrJrXxnAEh!#O<}4Ie*8c26C2D$pE$H|SWIbS z7W$4Rjop5h{H;P2j*3-M^BM9#IQ|{-_b&He?#2^gO^u=2L`a$ZX`NIDse2oZQGcKA zn86H})AS8P%&s%2l!wo?sb?8l7`YCrHFLB~!bK5&$NxY6c7p{74fvN%#%nIsu}7RH#;~}E%;Wiw8vm! zqmirW_TQ63!RSur34g~}9?LQ97OF-4RcD{xixB+fqq(vOX^wgs?vYu77?YQ|0mA&> z5<1$)Otg1BegdbMo1&Uh4#Bc+$k>F`SOs>JlXcX1H@|Ttp*GVRQVnq)XdY@F1v3is z88kg_5LZ8VX1u7aX{r@UA>nE{RguGMO%c)!FSVt;9!-0AVN_s5b($Wo6?xIa7jLz zthx3!NUajCKGm=T{9Dw=O1*N|q&bha;aJD(+S5C;)`z0CE)S2ya25nXK7S!AGE|3O zWcB9g(CFao_|gH2=UZ!mfKayq2sYk3tGS9Xq|KBWc?@-H+lLE3sR6~BIqSOkXXP`^E%N3Jl9 z>^DIkPwr$yvBNy_jJwO8R{W)3Bu7c5?)P#My+cxz^4xC*mX736*V^jG7kp$Y?j=Y@ zMHUC5%q$5rJ+iMt5g8Gyt z$sv4U3YsPDRq0vjitRBgt)P8eDYw1D=uxw1ZMT6-WBTgc>i6216mV@CXxC6&EA7Q~ z&px4iV0$W&*FNwAV3dGpXkvj;g1?!qo{#-o)e$mcf9Z`ppRWD| zW1ORzhh70uY$_5d-a5U!hWsre0hlsg7lxVGEp}d!HhTqpZ|ijx2A9|9>g9w>#s`rn zN{@<1pyON!SwwrQ=emLYP$+fF8?q|#Fj?KB2 z_<+$Lhmolv*XYNr29`Sbadyjbw-W|8e*m-aNkaP_N1wPvYEeAyZrAw$du=6#kxRh# z4_?h@d(AJ<(rrK!sSsAAfp+_}hPajQOPG&b@P@5G-|+qPJqAIxef3AELOfvf6D$X) z@%vh$kgDouL)qVo8yn?@499*T%)hUpqE{4qKhLq=+R$+kaiu=N$o2%gF>)}4KCO8x zd(U{YcsCC8B*)dJI4zEZ(dGTB=uoAZlL1Q+zm{Gk$k@%VC(h_CT2`#}TzijMDI?V8 z2tVb3ntxxZ{6#uo^YV-o=b&7xh^wm?XYJKvbY(XuX}_1}RFvPBf}cpe@F<_kIYxvk z_}%k~V9)l-t)dS7c$3u?Xs78O1n~9#Wo7lA=Y_C^K^Za)@XFyH&xSepZv!JS9Yy9a z(!&o!syE3lj-e&zgfacW_v*quN3O& zhl7zFnpW(M82FhJ||>xZ^3^p|}o0_y5B z$?DsNunAlCcJ`@|l4yaYUdcT4um@d&W&|q z*82wF3pdx|Kijas`F!ij@P=h$zKqVox0ZD7BFU=aGfWPgQBk(q{!l0R1P|}K{lW4R zZB>+(0byg0pgnY(1WRi8yAS@@OWh2;f)xsQrM46qK`$DdkHgTuHC0jn^YE{X@(0Mx z(0qx%NdoBe5C^<}|JMT`2W>YI67K%_;H4 zgU&EDqwo(P{`bTCU5xeHr(n5U2|{Y(e?P#K1ao2BU&6iE`VEErBI&m|3_K^Aap;Ks zYyYjsFLA6pZo&q3t%3FVBT37~x_C4oLcDXD{q zzn@d+iUm|my_FpQ{>1)ocRIq<%x#xMQJ$%&qbovOY3{s@`MHI4<3b_!T{QBES>p<0 z91ZISyw0d`xjykgSafi*e`&tj#dZG<|I~!%b<$k58Yb=Hn12R4=aP1MipY(fKh~Yk ztMYY9dTn>lw7}Hw@wNW2p(N;y_j4fM)0gJY$b8N*9o=5r#95JE8=U=za&*f}&2?CP z9bcK|L#;_i0_+)2mZ2P|yjZWw7M|h139XzR*4Qj{E;u6gBTb9!r)RYCx{#_go{8;Z z(K*Mx>9L_{I>0%1EkfInmEv|QtiehJq8mU`*QgCt4H$%xHQXl*=k{pgdkhEYSHhO! zZh@?UTK3b=2h2uX_-mV;U?e=H`=%8Xnsm(K_@&i3r!1MjpFY2)mW}KmsOH8De6X_O zL2DNjun>udP*BK~i&B@5_lZNHKp|Gq(y#RE55rCBPjDNF4=Ka#)*~xR+jgE@WPo#K z^)q8#Q-gEn_KP~GbnoX&6+r3ssM9b<)#KGHLy@duu1|4`van{9u7(_75wY)>2BP@&mrS!UkYA&UTZlZNM#X##5agstk>($Ai2^`{S`ls(c@#Wa zvwS&I$|*AlS<&l>iBJ<4mYs|M&dn9iqL0pA0TKTc4d>L9&1sZmDq_hM+f~|tz%TLX z2_fpp1<)ftiSel?_+x-@xkgdajgfAtrJEL5H4_;8Xc zSnWpZt))mj!60e~L&C|3o-!jJ_(faZW?#U$Hm@xka$zRHz`Rrnt@?P(r<5W_d`wF` z-}Pfwlo1T-hgN~fRiJmXu=>|URUrs0LvpM9;k8lUJ&*C}3}F;EaK%!THFU+AdQk|Y zk(Y82=AT9RWC)DiBnLmB|PsY7UuLJtLdYLb~Gb8(i9C+dLt_HVi#oBAs6aAjv?%u zb4EJoyK?B-Mkw{OPaj8+tK4G9!7N!3WvF-23KHt!K9@7p1K*HAjl6HlsslO$MYy01 z=H)~{;r$}U&A?3m&6BXeSc)by%cE{-{<_EW*$)mhNpRrSkM z(dp9eJtiA$MMehV8J%R?RO+th#%=Saw z8Ogz?S$<(pAMxO|y1mK5;>AmmUV~q8er`BGxUy-sX1(!Xzxiz2q|RA$)p2#LHHN6{ z(6a&u!EiUD_M%e@zlxN1mdI9tEKvK#B>U1(RB*9%C*~r$J=n^6)On1%8fX^BYy?;nSFwXo+y(?bs!G zzU=PS9U&rG?{pvdEu?StS-%Yj?F0eAueJrOE_i^PL&$qR-Z*AB+t_yXT<7eajqyFJ z^B7S_qsSs{@6AzcU(sp5xrGcowEsrl|J+RpH!*^IWCj9q00#cwe$dDC`)-Q%`)&$K z;2GHopIRHD9*Dm%q4HFMwE~Os5pOvzeJ7=!377Pw`P1d_v~S7}CD zTg>hwd{h@G1y1yFjZDK~Y zvDeMQ8&@?pMmfVBEBH;2i{H69eQZZ|rAV^c$FcnFBOJ8WV0z<12hot1rX(?r+A9*P zClNK4o=M}jRreLxTS(5hY|ba{%Y?aMc>ut+Mrz6xWi2AnW!ol2^!1)iXT$-4%SwrG zFa(Tl@YoZ}z=fe6;_>H#N?KSnW$&%u_5+VCMgx+^^GD&AB>8Ihi-QwW!@**AGp&{n zn}h4T0xozcHs;;quT|i5#Oz(-p||O%kAccjjy#>gCMkT?kghbHR9Ur!qb)pSSa_%k zEtP%FLzEC_zF^(YPdf;c0*W9nMHwn&VWt#Sf-3?C2A(+hN(Hw@JmPWHzBZI!iHh;L z=SZL&HtFHAT|aDgZ=+Ye4BR(?iFAn0)>eCX4J$$PLpgG_(IkI^xj&DzuxW$*47dNY z&$|Csc78$B=eCWU!8b_wbELGtt9T1Na;X6m;cfC(2cZwTfZu+6h(HEp)fntI;xZOH@Tp7E)hh4-(9_N>)sR3~r}qcH*pf z4|UL~bl{83)ntGzCo5hJN+zrmI!wa+U^@p8`UAd zYLW2VQICOy9S3#Hai?EDk5Qr|o%TyUL0p0N;CFeeX{8-rF|VRpeXc2LGftg@d=RM9 zMlU%z@>?xwaf#AC<7ef@LPY$ra$|7Yzeb6IW8}5#XK-ub>7rp{x&vd>FZSYx--_kR zsF1^a29LP<%-rqr3a{DDi*eU?9y1528MW3n81$0i+4A*jDw4^gXIW4TT==kJ%I?f8u!epPf_ zMfqwL;%RbYCIDm;F3(E!|Izi%(UC{ZqUcO8u{9Ihn%J7yn4n|Zwr$(C-7zNU*tTus z<~!$|_wHMF-L-c2?mxP#YwurqSJj@1+;|(x0fFYHM@n?$HoV>3Y}+@{fg(+#FAtkK-k*PbT|8Z5$0LAN!JiISUI@+)hvPRGcdM12UbP#E z8nr<;TTw;ro1lR7C1Lu$#fC6X!#L(R=-S?ZZ~Y4}x}@>Gb>iO^(6i?Ap=*neI;dWz z(BH>SlzaFxJK^8?-$C||i`|;%AMUocu2*DWv_Sgi<;8l(E*g={b!i-*_u0K*Y zxh|4{!IS0&`qj}1^(vk9sHG}r!V*SCg*}w*xnyJ56>nv5Y@n4)F(a*cV@Rj-iN z!@X=vy@aLFW`^@Z85SxI9NvXhq=*a-_+NZ}!P~$H$)39xw^SOnIXDLqx=|>-KChvC zGf*IRK1_>`!iEvWJOVA5%XJN}g}K-N`v{&3%(io%`I`%L;A-(x<#nmmR4dMRPU9(( z&C$}P#4=?sawIIhOfvMFXzFjrKR+fHKVNN1=mohw8^kh1stXE!L3%Ga&<>%=jNg@l z@-I}6(f;1N=(0qs9`8OKX4%u|vB*pVl*x-B-ah8fz;=e=3qG|P4K9!m!;$4%@S+*%;tYcW}amw5+3IQ z$?sM=v3ul`F6P^828^Etr!y(KcTAL>{HKCuD4z#noDw=1xLFAz-`Pb84~AgFJMr^5 zR&8A7$KBdm?XxRRN?|8w&HU4l-*~sPI^0h2VlHL3hByeA_(wNXYdtH&=PRYR9?W$& z5M^Zx$)PMIkW62^pt5D%oKi3<+?;_+{<8^@BsHj+R(UrB1pHp@Pp>u%{9W9yH#emG ze7K%ItyK>hfampy1fPzd9qx8FlUSV}dY4zJ3uWv%g99!At2HLrE?Z}%%J2%*PMSxI zt+X~du2H^9W6*oYn(?5$U6VaR7oGDWps9^oCBlajt4hsSRk<#Z?FyW2-{%|)r^MVN z)e3W!Kk(+yqM;TYRs+yddtxnS9iOb4<8!U6ao2MS3Q1f2_*WB-Oo1I5yZdC+zu&l9 z?mf3PF8gOMKr9;_c%07Vy2d+P_s3(dd=jW; zXhN|h^$tonX`avv&M;+au?O6MIyDvJ^nj_3qEP^~^=;fLE_VzG{+Rmkb8By8x-BD6 zepDosf)fLB6emQpzNsx9E--V@>$ z@*U$Db?a5u_B??vl)AC58bI&lN3)3Pj~hp_oFJ3Lk?iH8d*8Y%jX6gE(yX@koosh8 z#c%xmrUxitpN&la`kZ-dd@$1ZHu8;%7eLqdG*MTxk(s@yUvv@iw$rn5d+zExY0%kx z84iOe>Lj9HO68xp1gTH*;`v2bTxlF8Nz_G5oM_F2$Fq__;S1WAXV~>ljODZJ?NBuq z9_QX`b3yeRmButCt^>@_tz{w#OuloPwkM9-@8Sn?(SGvnoQrWo6BxO90i-lF)l+C) zxcf}qC{tT%y)=C>Z9;?@T?Cd=yvWxqg*E&0!EOhNyS#N zPpvc1)kk$9VNNSJbrxQvw&qbMg?>9OUslVwx@%5U!z*sqva%~ipz}az8g7W#wx$^FxjNzb114&y57;@;8)T7zNarH#1cn!qFw$g4f=t3p`c> z3Y95qaP8h>eQpgEjmXRn_ABJIvRUc1vM7HKxm}xo4=519HLdo0 zya-zllNmTE^Pyihq1m`dP9oq|fWLJ$mQZ}%s-~y*y9)A}Vy(YZ8{n^l8f-F%d#k%{ zE%4y;9Xnz6IDJyf81SuSnpU6&N9*ashsV56#nwK|4Z-a2w_$p609Su%vGAU zXNlDP(zB-cG|z8u_PU>+w$F9HQe|7Qc#3S@nWdAGfqG-Aw(uS8#9Z6*zzJIUDH0aG zqT+pK&}*C}A!49b6xx9CuGs}=`0d#gp4n2d;;)m^nxGNv0DxQifR3mtDamKy(<^nn z{N22z4O|tDNqOsJySw@^!>K7KEyvJI^WS^?KO-WKW3_N*bCV&XHSsWzyT7dUh}OM3 za!ORr&y;BjQaiwZq-YAS2s86~Ht+-rs&g|EbYyX}`_MW@(-WSs;`ryUN{^+C-m+e^ zuaC=jSI(N-_=b}M<8FI;FN4toKZ8Is_)gT~`@bu%cKzzx?OE=)C-zk;t=5~e)$_26 zGUuYx>Q(mZVMLDm?Z=P@>Uf?H-pq=(u#rtG4(rSAN?KOoIGMWE<@5SbyFY7zq zGx-d!wELtBhpgAa4o=o50v}n(J03Zd#H0nW9IvVwz zg`-va39;C@3BTFl@2qqM>-pTT-)1X~vnT-V(8CEf5DN!sBWus$WZZZ>?xZ`@*1~Ed zYcR8Vw*8&HvoE&*ZCf0lQ>IqB{f;)FSplS&qWsG6IqA8 zT()$-BgYP!ejm?=%97YyZSwPgRf$*Kv__5talx~FC8X3?CX3Zd*Pd|%SRWULLZqJ`usNq2;bk6i0tU+hKkVKr;dfFa z(P3EJ*${U^C!^3zVLG&)HQoI%1`vemOKTwP#txgI>?#R^Q@pEw4cNs{3gXr~Q}M2X z@H&vj^6o>wC5Fi}SRn2E=vXET;Y2YVg^gE?4J)s>ysF`>Rb3?wIJi$IS}*(~zW5-N zDoqp&ZViE3S9oHpYWZ2(jRdQBl0~2v2_ey<(V|FTq*JXIuN7!NVATopjoG$VezIEc zL_{pcTjQzhBIL3qbqQDm{zE z&QpFxhuSKcY)eh|n$BB)$#}9;VC2R@fh7kLKp4hfysESdS?0b^kRg&>G(?3Jl%`i3|3Nx`9FMA zW>)OnOyyW*Ms8G01tI4>1wYpT){m~{*9Pw>K4~YH?mVTv6Nxjm`fv=megT*EFI%sz zxftkVy@v0QhH%j)H-QQQD|S|}6=PZ@ZCC6mqzwTZXg(R%6Bj{9@5Q6(IVXJ)O;u7s zhIDzuB|zV5?kQTuXw7Ie(paR9LTDcFLL9FN-_+ZoYWc{VvU7-<& zw^X7F+q=T)NIP;#>z=!%i0=+sI-Hi^7tWz*74G^4`=G4`G-rlav7LO& zO|)nN2H|~G2Q}6;YntA9UD_E7MA{qv7z0W%>!z`QCrdEPbG-765Hrhjz7D{*+dtfa z&BFJkmsr{uKqmjH1?z`DkS_@;dKu4Oca}Qpd6``-OU|wPh-ri%&LNR1HM$P`(!MaX z3CTT7ah=BrwDl1AkGp3w`Y>9@UhaNoFq#PdXhH?12^eb0J+K=X4X4EgTT@s@FRt=Y zl-m!8Ay=x36TY#G0g$p7EX;yltjbrd%YJGj!{nig(U>sF5*c4I^1r5V^)pvz{_T4~ zR18wK=_KYaDwSb0iDa9m+%beqmU+^@7@p6hTaXX^@w%d?Q#hG;Mooyc#ZZY8-Wl=$ z@V8~8^Z#WyNc{Il+aNJMGBawYw8uggt17ZLGglZfi!swuu(Kxy8?p~u{~3XSf@lRwyIZmDFyuZ z29@kZtN{Gsupq?I$RF^1H?c934UFY|I5N6AvT&gv$!ozUx<4pdci) zp!-|;OIY%Rb)gNI(VlA@`qRuJ`DKo`z*j~X`no_WSb8rVjb1W#MSoE5dq@ua)>T69 zQCKgTmk_F^s7-gQPg*Y-Rf9jsE|e%S%B!*mn!XdvETC60KZ(%phif4Kg``EHTo}q+ zkALg6C;xj11>RNWcVs)TCY;`x^FwzAv~1rmVfSU%agzdeU`XX%#_?mBKxjWhI0To+ zhG604dT3(hDZG8d*p0v|i?Vy=h5G%Hf6KSrtTFeZ{lb&E5C_VD?&1ASvMSr?ws z6bR=c(~_QB1$AvdtsM$xDgBs9+ikZB`|@K>XcJ0lST`>;t{uft_T$DxJ1xf9sT$;S zAo#VH%fA*i*9peiGO2fJEOVul7K`8(GHU&T8g=Qn{&Nz%t?z?t9p?4a2-QC5{r-IK zPWGI5Sowh+FafOZzEecIiOpAJ+p7bEvsaly<>es`ENBsG2~FTkDEQkN)!b*XcZtS+ zx^ta)QEAEv&X_<${H2UUZnVjX-4-ZF+^oM|@nmtH`iNQpT}5M&8?;|O(X-?2l|7+* zo&J01e=2!8%{e=7{XP1_m%U=Begpqq^ZhGQg4QnmUR{><05KZKd~ie{7=LH4)T5C7 z`jT4nP@9F3q4(Mf(w5L*s)nj2EJp1{QR=D5?f+xld#vy z@{z^BbsNl^G%9^FfFR%OfX~1k`ZX7nirqJ>-4>hQc#%j2_~K}6{njS|EN8OOn>@FK zse0^6hjxhQlel=$&K+bW+&{ay2zJt{PClElYYX?;e%49;luUMw{eb zGS-3X+PyVBg?}^nPYfJJ@9WzgN+!s~GZ48D@R{LFWV_N@gP13BOx9JP-AcH%S}=q* zS`w<$g@zq~rt8(KMb+x?UaCUb+Pc-Ny@IOF=Jj9}>&B4XDYjrL6)Zzt zUr&vm==Jm{m-$~&ht5=yq49upulJjJOIKE43A z6wosc8LJLg8wUw5%!7n0Me8X~N6!tvW)_tQO3SLoI+GN=2Q2 zsbY#x6-LA}zS%$heiLH#tZYYolln$p%#2`av84bvd#%c9Nd?E#8*2A4$7}pqbhcmGpL?q&!L%uviKa zu(%lzh~OiFY5Z>uED(_h@LOPUT^&u9P|<}@*Zz*LDM_|$3d34^EJOIM1n!{9H3BLW z!^RGW?3~k++is~+EBi7`+bEH zU!7;RRYL8}O>hKM^D`5de<1T%8&!~6Fe3P}ZjnymKASrilCSmU0m?2#%wT7sOQQ}v zoQl7m$di2DkOU@hT{5oGhQj1~k$C#5NQ19BY1SB+*0G(tpA|&!rOJbB{f}8_HSh^A zPm=_0=@=8QN{<1rB(>l3gc_|SGCeQ|2v-w-pTXa(g4hU{fOIC`l1EY_j8Hw3M}GN^ zXvN_bxhydYEVi2}8V3;IS{t=|A=Ybxu$M;8?i=RRt+XYAXR`vPR6Pott5_`u(~;_d zkedUa#-9|NYg^Nm#R3uJvG1&~Rb*c?LOYe@QG~VUsw%dstTRNkTW}V4hppb9sC30@ zVMC1Ad9oRokwGc}On${LmOkN4V5_rp)et;o*f(bww)EOz){kellwI@iGs^lIZm<2y zs1Vm1XS=n%vvADpVn-KLn9Ko3mvhlJ=F(yUk|$GL-_SpCd@_9{ROmg zw$al|5nTvK&SIHK9aEAOUHYX`9zyHqXOe`br6(ibHlXSk{ao@=gtc3r2yUg>mu9FX zItT~P%)#*h@B9I$ziBC4oBA4M$czB9%cO^oY;lBA}H z$|c?5^p9T=Y52`gllPa}Q;amicvs!{&vH{=ini{bkxX)-<)xWJRyFw-UN75f2beC5 zObFq7LD$5ZRnLY_`YZWT^ch5_&O1ozLTWdF82$S00!o|#%8W3-Y#$Xv$r@rbHqt3Q zFWjMG!&&6&NIGA<2t|7=?FibS?0hMWlf6`ThY4RwRXjCL{kF5>d5{moUP^CuyWPAr!HGS}; zuVb6m0H#yPFjB|u6jJelJdo)Uk)wpp-ecSJF(pUsR;-~;y29p^JV9b4yCD!TpVchX zVsNX%!y`t<9S2YKXB(WEx|ak=697g>?qc*6QF-2cu=JEp@Lf z8n8j8yN^T$tc>i%iIP_c@arm&cQJuw4R1m_l4p?}y;VYJ5hbj=u)7y2UP66Xb z?!a*Fwj^j?Pda|UIWAl|Yggfo9eIYag0U<0TXw@bc!c{vfu(f`JM}w)JyShO#e@n) zZ&6@#_~(=v!|?OdY^zclx{Ec=h8wcIX;B#}8ut@)*cb(5E$a5lVH3lqy-wmz&&gpo z#4!!ab^rDpplvX0F$auU|GuR``QnfKJIev;YLi6`d&<@ zf9gpi!%fcYRA1r~)ASO%hmpTq2P$X>porE5L+gHYszmO+7XBiMnx|H;O@{g>E-MF1 z(vT>sUouH0Ln}JzU1sCHlO<&H=)h4x`4n4IuoFX@?8*hx82dQYnl<{T=_0xiZp?>;=gH^||DwF8k>cX`Q)0kO0d&d#q}3<@}+D zd7_Ce_X_)~+{1Wla~bJxg8NkEc%~*7a#q`3KhJqoOikiNtWjGcw$rO!@(X^ozMf8xli};J3~36jT=Yyc7)Mr?dQW>cQKhf&NwQIGqaEB z1q@i)fo0EH@i4C)kkVAYOX-Kq*i6t(+vA;Oq6aYmm4&Q9P}Mr&OBT!$7Ro2eNPbZx ziyK1DI@#q>(NJ~jV;AT#2?(ITOgqwy5h@)=oM^?-9Ca`kSbc^f>f1d!4=ZzlGN8EJJt9g_es2(L8V6moZrC)B;<0uZ2o*iQ6>3N z0lU>}%v8*~WrA0gN$1jE*vh#fI9|dTgdSQ=Tzf;ct|EPK-?t85jSGaWnEJ*4W9KKX zV^I+|jvuT}6=Hfd**~d_9jjze&pLHJKEd5xOEN6RTB>lkYD(gj(hg|iY6uQovXf=C zBiDPHK}<$>IuUi~wK^;u61T3_!}IZ)@(3EdAC}<%4cc=oo@f=4bO2JWD2khzV+~Eg zQpucK!W~IUewprIZ>(OehIg~KU)<3T))9>K_b-5%d_TuEg94M-u$JAa%W~n#b~CNE z1#J;6tJPc5exyuVo&vyf(Uv8=&QJ4?m!GE7K6%7WjtT8vLbdoyJC{P$Xf79hu|#P? zaA?^9UoG-JTlgW5nL#;$PhPW98gY5zf;|vgp{Ox=MPxVC2qpi%fh}K4%HkN3Ex$KP zr5XQ=qViXgR@NBE^S{Ji{(7{vtB}1}KKepDEq=YG8jbngTZ8>Dbx>2K9C?bkG5A{2 z8L1H`gk2S@dw;B`LNmG>f&idt{-`e4b$FqBaYJzcuZSqKK9!z`$8D@?1ucIylDqtd zNR>~}6Wk;4M24-7+fK+`^yzbz8edHFI`qQof&0YFIPWPS9*t?ozf&RwjbMYE;>zk% zt!F>QL6_v1Lib4AmtOJ}Eh=gW!r6&;;p-7qk}3y<3G zvh{cl*s-fC87Rds3M8019D>ZIwxU+ntx=tyS769R|AlApxQ{p7lbg5Q?f&>(H*1@d zx>>O|xBJj-8$Cfa@~<{xW>MNBjYA{EXvpu@eexwAQq`yqZ46kybm!k;VoUeY%stSd zkZ{QQlc;_X*#ME93KJ)n`S2b=T%vN|U5|b^QqV!_62c9{qB2Sl!lIOmYW8J96{b}u zi#JFUkH3)46fy|4CzH|G_&ch?uHFxwg5w<59#8_4zm%ZaLToj-_lKN9aTlY)!H1%} z3e^#2A`t6FmyCy;B)@Jvv$6FveRW^(VFKj;>2z=(=JiGz!C@9pmg(s4`X3u_pLgf2 z(JPdMo}#C2eOTTNA(;7`b-(}!D)zd-hzNM#UEIsfgT4VwNI1GH)}{qC^U#n7#>$V< ztIV_8I&MYM?Rn^Jep`E;Eq&NlUG`SN;(J;5!7FI0d% znn#!;wi>a$jIBsXYB7DdwwNSVcX#%pHEY@_sL$;BDD5bHufu-*J7%2Dhj9-)P+FH0 zl=Jn^K9F1673ik8FC#X$pGorn3hK$R9=JlCmmVw4^Tzl8j;^|nUc5qVuJ+WTZ(giM z|AsK7mpajg*J{E~iB2H7n@wORN%vQnjRLR}Q(%5jlS(uab$I;gtV_}995-duU-MZt+wlyBQ1?vx8$TO4B0mR!09Ds}TPb;jIqm`21!~RFAWG(($QwHi5RB zG$NnGnxcS&0ZrG#3(RtX0*ZY^y0%0M<_l&3o~Np2(L7N)+$lLERr!|vd!SYeazsIc9qh}x6P11dy^uO`~sSu%62Bpkw`mc zc*R+@HDz~Zb43X5K4a~f(*El}duu0l`=2bSUT!HOik;<~M6VoHUL&62`!s#M5^9lj zDQg51H{494(kLHLgPLNE;EGr(7fPV<*dJLByz*_LUq~Vs)z#~hse_B=NFwn)WIJi1 z!Za!w75Yt2svP$|--D)3zg#jasq4IDr~C1Bw0doDO(C)GXxI3Xrg`5Y;I2o{H0)B^ zN7n4zcF6y93tQJ;>VjkrycO5>%5rx!s5eV^Z4*M|921VwP}w=%UxVI2h4>PH=(aO9 zVh_|c!=jsY3&zosj$p=VVq?!}AIt?6tA+hLzd;`Nt8{JVO7TgyADmuo$=CTt7m<){LW=9Jp5_BrLXZAloL4T&9F zKNc&&!~)p4la7e?^f8TM z1Q;+c)xNaEw2L`Xj!8+sjz!&8CGCDJafrTAo(gO02b!z$H$ejSQ*&@A_p__&>ShJG zcY}7-wUEBf7dsEFWZvL94D-$P0 zi!n%Iy~AIb%}A3f@0astO|%(+^_YKRP${QaF3UsUUM;o*mDY)A9E)2)@RTHPiD)%*!msK65>9>-qx6h;8RW-?U zNB05K)4k^oH56oU6kHdWUYBh!6v=3la!-YXIYSBl>4&80=qSHq5cUT|(e-_QqD~92 zgc)whh!XQIf`v0hxX}Kmmyj?EvJ5f3I5|ChX%<)=>HmDMm2rT}e~(gFl=#QxfBzDF z%Sq6_v45KqISLdku7n??zQn+{-=z6|rtbV(ek5+O zgXZxP;fu0cc&K#(|AS(uL6+_g1ep?ze;64G_&{vvk9>&%vfm5WWwX!&@uA=K#f8DA zNq2e_QskW%|DR=0^|bi!Y4~Mf?#aSUsl+y7sFe^dj`;1d_%GYrH{+u3kwS8oPDqq9 z|B_*H{r9RpCUKNOT*ZVeMf@X_2n9hnAru@^HvZ+u{|8@@a!K311k#j7dv<{lDOHJHz^_eX7Z7D@-~(#bw@+aC*wgzGUNmP*c1sBjTiA z)?TWG+`;^KW#9W?MV2AqfJ*1!_8{5rfadx+%Ujb`G zo7mCX`1~?d1~}yyeq4R9KfQtE=W|35$-WzK?OspvmW%m`EQ5Rtqqziby7MPJo-UsF zBau{)L{=AsFQCXmO0_{ur6MPRig*kYc=Ij3k4VBZg7g<}bRp=bP{8+%&R-Ggc_{$LnQ{}zQ zyoSCLbW?Bco&EkDPg(ptR+etHUg@HL+GxE|hSNfD-0(+`RrI90n4(t8U^y>WPm9a^ z7^0XDY?)UMX_F zH~0C?ZFQo|YxO91I@p>mYf>`r8bqR$eeZUt&xh!x6E*LuFp;dwL7o;X_MPfb*7DCc zj)&O$iqqM09rk5)r^UK1Zcy!=_E0TQ#d8>c3{U>M23(9BA|%>W2M`pSMah+Gh?*nh$dir%D=*3X?h}l8OGZYKdXTT@cui;K2>kwP1<;z~bGo z70ual9Xk0n;$bj>My50&^G`pcD3U_6p5A8vIkNR+@g>(1!<>t3B(irnefbm-xY;Prlv`Q(fkQ1P8`34AbT(s<}Is-__l)v z+rSVas;w&7gi2A*z!I#JhaC4d5u@5K2~{4U9c3@Lyg*5oYoak>LrSf*p9u}jrGzI` zFysTEOQC=BEYeI2GDBXIbVNg``r}Pn(bBfHNt!YKoY5cW5Ui0^q(%R#V74y62*Glq6VPT+KW*x_I;Yhy;i2~s~qk6BMwX}`4Plg#7m zXsS*Z%}%16sE5XkZ5t4@6ek26?9Lrg?yWcL{v713tJu7=jH%c{@fN*~O#e*nUr9XxLgim0`wUWYBw@e50ao1qAF_{P2Jd9f zd{^L~u5Si)d#pbWfU+$M&8H!qJwBQUTYNYRC--@M=00A>Zo)VmP>qoLM`t9a!ahX) zl&wOOf`CmE@gq-u1Qw(pM)#{Ppv~au7_Jib4ws7p&7tA}FSGzx_TMASt!-_ zATk5M((_S|Tv{aY1gSksfGoyh*#;Mmm+CFqgO>*SE-=wsi@j~~2x(=CB5AyVgW`L8 z+#RQcXQ2{Gx~%sMz`+du5B$DvM`i>nK3vJA*#2p*E6vQ2)uTFb&UL0I#{jH6Uakwi z13hgyPwD$p>6jR*WcV;j|5yyOrlRf6M37gn=U!4cenQBZbwJ)ZrzpSkQsVpyxfyOh zTR1$AD+#cNLMm0T1Lv4!JfA+$`=s~`u$=r!b;#^l5a#J}|KObGGv~RU{eECQ=-Dh3 z)1Enb>ayIS`O)5$>Z#Dpt*x!y#J{rw*}mR_WHmcCezony+@{`g+4n6hL2BzXuKfnS zLy{FX*lgIy)G!hldfJ1V?&iQu(t5nUQ9e~@v1ZL9!%$t-t=Ymny?AdMg+XwE(vxBBv$)l-oW7`Hx!1Kq=S@ocO{FmvUoWC}31_dNp#dmmb*TDAY zCYxG<_piQQ|L6U@fn@WLlb~Z}n0v|5Y#b_rL0;ymA^pec$kVAfUs9D#)yw zCFWJCUR|9dVN|{|ubRcnzFq>^VjV}(>m((r>l`LJ4>t@B7GKL9vs3?S&QbMM$Ka|c z#a+86-HCUB7yl>)*MrSncJT5Jxui3pT?Q=NVDRH&#Mt&OuwOna&GHK%K_ zW$lS*^0yVNdFI7Mnc&JL8Lr-!Dxhl=K#U20IE1quMy(;%RVo+g!VJl#<-4g}3*4K- z5%VfSJ=fSssLOv)E_Cd@=t{&XO)n40(2)XCay?@H2xWB!%6;3k%lUVaV^q$OBow9z z>^W;<%>m`OE5%Ha%(i_9vT)pydh8hcQj~8wk!>FhV`L8ht09euF)Y@yZ{7!ldy7c? zq%9b9MSpGCro1!oVbOYNDHycJ-d0AJR%waYJTlL=ORZJd7f&uR^)tz_LnXO1x5m56 zYRGc0bN)-@d`UKW;X2+Et!pT=fK+Mtmw7lM?v_^gULfq33E0rkkleolBcPdOC+5!d zln+EIQW8s{@x*rCcZWjCAKKGvb(#zSm|PdMJ>>FdG+;<~kttmxW)f!$mRP?E{UCFN z)qXQ>!HDh0`(bh+S?6y_y!%<|79_$|?i25}3y<1*taELyU!alZIVpvYtu%Up! zlKn8td;e1|SkP|MsNrZv|K|f^-9P`T8rjYd9iJ_O`&y3Mr8e_P_1FKcYHH4F)gDJ8 ze%~YGo;hPhKz?;(%&7?`_o>Qoz1@xNFEMX&ifg(b()=zs?e1O+22F zRpr7TbCfMMmu}r4#anx%ChSqgyY_g#fGX47vHJR4!f@&RVOD4*dspwgsO_ANkrh_D zXf7dF0r}GI;c`m`@Ju7s`E*=+elFoYc{kuH~943ZR*mpoM|TDVupJgSH^F4`M#O{<(YdxQa|(?Z?p z7Ejh3bKGm1rel+bfS=c=ch=1gjt*XqS7sikuAM)t$!`Hx-XY3~bHN~^dQCq4^^P*D zdH!`=f;X$z`xt9U_xq|9*Qbuk=})W9WSH{z7Y?t0Ap$a+mTb%s)Y}xxPMVYUdCOMo znTFX#sFOCcPDbL#F8YT2ib_*m;kWOFd|vRM7g=4#wJZ=0W9 zub&@SE?AW$%m-f0nom>OTHPmI>s7lx?))>|$GZieMK#tf8>N@&O>Yz9v>Eeo=jFhR zldl%MNhG+9nG*ZMQAJ6)A8yWXB$DK}`?w96uffJP{*Me^Q#Zq3^+uD4qF zKa6U+%OZp0`Pv%w(!IhPil(zgz zebeJX`}$1s(=LS1+cyM4IzkBn1U4UL@`w6|;Uv6H)?HvA z&y@Y&V7plMEseUaBBRBdqnQn^sBu}?0MPl{Bys(1XeB|Mmat(8%CfRBTWx)|23KrZ zO&rkq!=eV;g4@N}WqYVaUF&DEbIH6zmw;pqdzX@08OpyTQl6$dzb)_Drz0QUrU}fC z+-cvktyp=3k~*c=R-r56HlJz)liih+5mdX##$88C4+p7V3n~x19!s{%URqllndxwP z?O>)Ki(eYRJ+!z~W;AilNm5yHs|M@p{XCKlUmT>eNh|*ET$Y2Ny|^*k;R(Bc#hB zWQrIbq5$}bfuY0nB=r@cmbymP>|W=ca!aLuzD6q9WaNH&^^r9b@1b6*ML}*ID>U}0 zdHdGh@8Z~!`h89_lw~tvXUw=PF~j%JGh$+3B`e}S!DQ3M$wMQ_QbT~9y_c{baB*WLI}5*)$Ed#$O5y5nAO6n zRHvWqrKtud#r9}|n>uHMN8|XDfvlXK{^dOa+#v$lIwJu?%P!r5R!x51ajc3)+CdS5!p+oE)J4iItcdMfOkzJ5o0bXFQBuXH z<2@Zdt+l(FmY4}7K1+7fDeTyPmpUojCGQn-6a>xVQg|KajvF1=9p>j3D_Bu3@XHt@ z8^wJwHPP7XFY_bECFjg6erXjp?^Y2eeYB9_A`FWKDE5@(1^yk%RyR*9GL&V+ZOKrU z$t9Cbb~lM*|4cb{IbPQ?LLTB-82B3reI@s9hhKs64ffF{|-n?6O^?v(IQB?fv%NvcVBXSw1~Wzt3+)6fceXh{6qLPxZeJo2bn_^IGF7mgJ%_dfU7PeYa3a&NS*n%(sj>E~m%q5DzHS#=k?NS(8Vx71CXo?3t2AETPY7 z*c76Q0GQ@$TPTqSa0?FU<1t4Hb-sfJ#lkf1uDIT^x+!9~7AR6J#3;B(5IVZIhfRjf zn*B@}-v!)^t4vn(oKzB6E}0CNjI?4&YDSBO4ZE(|DcREEE|Vx0K-wnBLrcp%^#UhJ zA}SzR84UlnzRJ4k%&bPEsLES&dnlyokf$TOvRfxpnDhDqo%8Ti={(N_vX0Ks^$8vJ zpF`^qh(Dd$m$OcquJvz3Je8eigpjxzD#2%MRNQKlUqp@K>}*q`k)QIa+BPE9=AoLffkbmn;kIw!xfIyYmrH1IYzJWUt&&P_a&uPmFQ+9F-r z&*D93uiacIH+94_OKEI4o4PeAr0uWMv~(Cw874RawPlSPfd!DT;}b8O;4;GPDw+X2 z0XV=C=2qw~+gNS`+oDC{fYr5uE#r0?rq85=-NHWzFV$%Av{**j2--5a6``eq&~Icz+gb93e$dxo|{ z@D*B~^$c73=7tX)-b3+=4mH|-PV{z2jKe^|0zDNu-MrqvHFJmfr=C@$3@ta;0u2rY zbcpot8#^IcPMui92VHq|9r?LkTi)!e=rjWN|Haljg@@7v-NLbL+qUf;+qRwT*tTuk zwr$(qv7JBf_g{VIoQt`e?q_DYdU{pWT2`7{^0(=8Zh|;XjT8V0<14<}lLd1Ye(wvDV}mAEYiP!#LXZWAu{k z!pVuM7jnYJ7IGw1+2pa8)?auLt=vAMyXTPCCtpMyX%=9&i62GU^bW%>hk4_9pG9ts z_QEe!o;VH6og+aN!UB2kK9*RTN3IWpx=U)Ey7wS>@om_C?teg2Fb z>>j~Z66EOU7kA6I2eH{Gd-=cG-K%6*Js~54m@m5Z<|IIy^7?h{b4;2==hqlvTdkPi zoqLR!rUvL4$DiZMZw#vIVC>Et4upfx&*b^k!}gZd#aTG)+NvuLBnI?l>H;FQ?6hP)l7>iQ=&VRO z_c-8j_SYfPF~y&zGHf@oR?Kmc&-8m;<^@PBodi}i-f;xEL)B95`K!;1EuE;^V^0n% zXr(ygLU$INEX`Gxt?tUpIRALTw`=vU;b>l| zIag;W$e-hRs=_BS3PrfnD1krliICSXNiP0I$Ouq)AdF=c5hDD;9j&pF1t>D;8gs$( zZxQ#%OEz(wMVh$(F|+m~8{|^%MP^ynik^i%gYhY~bOPmun;w#Sk#%JdIS2iu%sv5D zkPhg*13D&E{{VP<14yo8eL3Ve;N=yomX=jD-uyOW{)K(+keV-;`>y`7{gW-~V+4Yk ztq^u+c>c2SJ}RYqvFZV6h9u_aqfN3F0n;U8=-#Z90; zf0$CJP_f{XBrRLf9Oc~R%#|Cognc?-Qj=AwJZ`e0)tk6Wl>zc1sZr0H&52jmMaqpk zs1>PFq`vW?+XpJkYm|=wE8OjyvUEkLFMyR5skngcb+Qx@H6|41RWclv|HG&5F%ch8 z@6%#s%2;obq-KaabG$;u17BFh3t`mBVAQCe7!=83^@`ySFl_XJciwZi;xfP%u@9)y zdsX#|Tjkxka^%DtZBA!mjYwU^(28m;O0g|@4Pt~g{n{A$v@GFJYGPWqHLXp-{~N?N z(AeZ-hSu3-If?LxyctZaR2@}Xhh-=j`{m(2CS^(Y5sV#FN8woC+aXmb& z?6(%si0kemE3spAL=BT+m;VC=#I56EF+?1txn~1og#=}-crRr@AM;Pu@qJcJu`hdXe zN^6;077}d)SSX2TG1x#^K-d5GPEC{rwC0&i8v$(8`Lt`Q-_+(HMDe;z=x1ZLQ|m;RNK6k+8mJFrz>sVw*;6Ch`ynRSPND8za$6zrh_=8+ zjWYMw<7;w7t}+Wd?8W086258kCpO1M!1lU-@vap-Nl%P*-v`-gOhmx1YTDIEuieCu zUuAUviJP)|Ni*W!j`TafA{cS8NcqLWxP{qcW2lB)as!f6fZFB5x(xVpuJwr3b%V7T z$G<|rf_Pj-ZHCd^+S?cOk=xIW5jc4HPnzoIuTkrai4 zD$rb_kiz5KMzgiIljQZiw$WXw;^S^)2=WANCskeF^ zi$5R~4LhGHi|3xx?i}wxbrpQokW9fHBbe$!Y`^LXuqs+ozQu@s@|6x;5-Kx>y~$FB z+OWcXHZYhlIWl5pNTD^Cv{4N!KTyG++cANsgb*QBR5XHUHy=%E4H}k{;k1dfuWUwk z?7KMJn%X=FB?~X&4bl`WCro3f+3KPKjEz>qS~k`b(!7bWE^GX5UztRsGwl@LKFtV% zlRR?uvLlcwekOcl*kYVO!33!~;-G{?$TWa2u~%odTr%NKFQ9gSFqaiE#82Rm!5Yxw z$e&E?Y{4@`U_{Z)umrF*JTPYBD7w--eEHwd4o`mo}fz%1PIo)E?GW*XW z3SZpV0BHbz?4ch)ZCRRjk%=h{<_$EjiVzW=93ZYK2NnNX20l5n64K?ezD7(GrHa#o zC@V_SV5yT($Rq<-WkB{rbC=_n8?j|ukj-9;g#%@_1 zQ9^h)I@F2hT*O6jGLC)+WXT1q{FiAMm6y%7c`7a=EkYmJGA;qK&|6 z5~#+q!}+^CG->i*%g9Ke*ei}W6&&p0^LZu7XIg0oEb}e^MuM8?!G=F9J7o(Z2C2Hq zRO!A(CHB@L6Qm|L5pEF#ny9QYveIBB{0tO_ZdiZ0Nk#g6oILCKlT>5=Fla1Uv40(| zsv{uh$);HjUh3Z8T<@nK0;Q&^_^Niw-R>i7g#NK^D!EHS7-vI&-6(HdHxieH^ zl<*I+C^xVb9z;LVmguNji0*)YEEJ9-e{u(xz5X-k2Eo?EdN3U3!r)gdRuTdlgk{l3 zuke|W667XxDuBT-Xa>NQe#HuyFh~7E+E!MY&%r34MmSZgT6gs76`DiysJUwlO|@D#eKMMq?t|NF z=@o!?jbVvWgVO$9Ue&(w3`#UbF~r$|J@&;j7?T}z#cZlw|~ccW}oc}PNXkIx^pMD7I##RxxL@@apEuL{imo1Vsa1wU;umHOl2NmuSD zny2W^v=BS9XKuvT7Txp!J8@%R>W96}ncY!O zM9{u}-8X2E>iIXjJgZS{3#JEnRl}H2igp> z6MN;x9uL-gEYfs2q}6H9$fOf!6?>VD<^T(EVHl(%6)UcziI3}AYg6~`Js|#MXS^DP zTlCotzumXsYS(}7 zCX)!fNJk@0kNJZ$2`ULr$iw6g28u6sU-8>&_`K7I3-|{L132rZCd~ga99YWFP*Qo0 z05hJM;Kx%mG=V21!#cYZLm1D1ykrtiV2V+&A6P2PV8W9?JEg?HdQiYQiD3tjnCj2S zz@KRE`R7?0u;p$HwbNyuD9tNOky@yLayJe-mbAwIsDOtJInf)fFqYuc%DV= zOt4g6k8LQHa2O&YuD>0Z(k~V&kABrm0cNG$MP(c2sx}XskLeY@O|c_mao*-&?b;H{ z??|!&eOcceUv*p!wg{t>?iwo6nm>j#%D~w=qJ1q5?#O;ckfNca7j$*&AD7vEJq^g% zcE1kdTPzKMSkG(MzhSFaD?^@(42y@0OOQm3EddoZ9+RAMngL{C%u`+f`JA!y)Is`m z7>p8d@R?8TF4UE84094^?aljdqGLtOv$z#Ld_=q?QM^kWafiUmdDa0R`-(5&uV5{y zn``?~t#YP)iNC$GJ2fNzwTefAEBH%f5IYdW7QqzRZ_&wWd0oS>$1stOsoU!~4b}Lr z)N}j$vctz+T32kkp+mfly3Ve$gF4r#mZ?ILfj`-RUZQX6)^n%(#D-$hq#RuU%76Xg z$3w+L3;!WGINkKMsewbJIf3#&05Kjh)FFCspLEuoTy;JE)j7Eu^W5oMpNIB2jSGt! z2okCAWOvjtIUT9`?i*)J$>*3Vs8*zLPcF{N`Y*Ptn>LL3#0TTfRs9<^J3UhWK;tlA zca9~PAo{9^4dgdeKnvSHoQplDkeZyQ+d+NfV0<6`EdZT1Rm-6$Y7fx3F<6u{lw_=dBxDFRqtL4m1O6L7JoN?k!37B^wf zruEPus)1NoDm0DpO)KS|*L7?4~4MoJ%dpO&Th!=y3QE^9mzcL8<50b(TB zaZ;=%pH2vyXAzGD@;y|Z`x+O;_kb-llLlb@xl(TE5BZv=TkM@OV@no+Gf~{3-Aj-d z$@lmwjSP+C&%x)6ZG%IZ{Zb83HN7KXu82E4M(vM20;_CREFrFXQeXH#u2B)OnbnFkAQay11KCSqWalo?S^H2a-|DDw?;?hY`KJS_tTMK44&0%mH zS0&*q`i!J>PxRcNk-cJ`n}<}8jJ7PrCy1(B=na&6g^*M1@n0-ToVlZkNxZQqVhl_y z#4;&lEfBcN+WVg>vohC?0u!KjM{*;RU4!`a{^tFK)?sYff<*&(5sKX*uG;LlGFTtEY_EDrg3+htiYVr$$mZdw6M#ENuar zn$sixZ&&8`UXPo^v}lgS8w9iW;HiJ zGd(no^{6IYHWSuIx)X55Owkc((Iqm7jq^>E#%v>4!Bb+3C1LAjHWO*l8&yH;=31ys z*oW0jQ(~J{NWUYA`J2jaXG2(v=i{G>pS)xZ*;*jRo=W0q;oxTqK-X4krk?#6}N!9Dv~`L28=B zEc}Uk{&ZX58jBVXPoJ{4*ZUeN9_}iNh)V;6#rz-oE+buKqg}=*wO2##r2;x zqM-byS+9KQtRlznoh~@YmAWtx2?~%pgppC`1RQY6k;X=^5JW&uc?i@3j2BRT97({A zCe3Yl$RG!~0hb&={*(`w$(wnCz%SqZ9OA>Be^LfWDgg>`y`5Vy=G#j|WQSopDvVlV z$)FdcoPqxpa)%l#^OnUsQQ`^(aiAW@OGmDGMWLF=D30kMQcvJz39wg$Tb@>l1;w8J zDIy1jN}<60EqL@ymhEj)_spXXyau*)hVOwAk25CvcO_NQCP?vuw}Z4<;?MNPA_^)_ z@i()*JVZ;inKStnIwd0Cv6X^n77c1fB>{y`|EaJT1fU*kY1Ovk7=kX?LeIISUKa{# z>2QD=udF_Fg6YW+fNjzaF^^!Jb(caYWLkr*+3I4`uznUF$kxky&y##1YRGO zhSKz4$5!?T#<30q>k%3|K&pO}Q#=C&1fd41MXDi$?lWsqE8%;WLc&;3R6 zSl>eP^9&i_Z*Qs3Tu^G@&){Leu^s0z5#t(SNhKCBEUY0oF2)gRY7hCb>f}}ll$GtrMkFU`Kz;IP%ygDi?rs@JNpvt{ zyA2sf0O+bpRfd9QL|6%b31wH_crtxO!`*oy?W3Vu)cFcQo@@u#Trkd69(1P0m)E5n z9IK}ekHr4NksR$a@c#y1poqHPFrHEzgqY%YXhd}0S;rSSL~v~=+%x>kS}O#Xv=qYL z*-^Fx#1&ebs7$lLkpPA|_6dzj6g2!+4OX1C7l4^6t5)+^nvodMWmWZ-4NJd3dmxhv<{OT3AJe(4Nj^5uZfJS;y#X8H4Gy}Bw^}CwQ#C5jK*+bFl zt4RmWn-n#d zdD)cA^AgaUo-?x<8279T!X;=zGa%hE+>(=O3XLRLXHT4RVPbIjLg=)BEDZEpj7Q|N z>_+X48+rq_E&Av>jVoVkPQm&rpm8fz>BK1+%YVNQRf;o6CVaA4i$#d}Qo z7az-P;ZR(wJe1m9hgEhqis1#wmQ7$iG4D%;PglkDky^^d1R_5>>%f~}XZY_Ulcd9I zeq{2Aa=D>qXz`Ahw(U~aI*?CW^FrNUsQ+6iLjoa{N8jZ99t{|q7RPPs1B$5AYySW+ ze^Ut(qxQEIEoLOZVRLpY@o$| z;0N{0_R3ix{t*KUZ!^z$t+KY{j1pn>BP-y`BsHB=FW88eqzZqSK&Y=oKXpZjKrp5K z5ITa|)5e!!&q(?7UiZE_6jbk6Xtq8+6L?|z zvflJS@8bo1!)+MK63I$QDC&kNKr9@lXm!TnN`0>%EjxZPP2EA%_rV<5Ou2sy^5u8j z=g#dFQ~a(qfFtIMB0MPtTFZKVtv@DvL@ma9b+w|Ywh86g-(P|S(`*#C@Ji^Nq&R(E z@%>br%C5m6PRv6mJn?(?|Y)8SF+~M=FSKThm1{h#z#_$J2@w+B2nYJypR&vf+Hi2 zSdkQASl_u7lv1KZlL^Pz{mFjvZ!`g4he38^W8{vSpCOd5`2>?>`WiDRsfqbD3ck6 z6FU{E5b1~=Baaa3xAJ>0LvX+AX;b3x6uY1QYKzyb(IN@K#|{pg6>Cl`Dp_K0rRQh! zr*rb5#K)IkOIc@F+OW3honqbQ(sx!7ojEX=c)zoLDCSaAW%G%PVK4HGS1=1SaCEYzk{A|(>dlpJaEr81=AQyP;#$}*7hpXn#Q;b6PITMcr5xz67g{ct3G#3UDLUaSq zu?=w+OrEh-QJIB>q8#81BIEpes#!*xj9&LG29zUl=WO657*{h_S@#ga8&>`E5z{g= zMq{pO0_X+nZt>BJV9tczewO0YJ&(Z32GHlgbMq0PD55sWT-FLE<%4MdRBEKnCvHXS_nN5Gj{df~CJ!#>7~DK`oou(@q; z#?14YSb}CW}pkMC3+ER8!fsq(o$k3ZVt#4wbNG(==5)+NOdtha|kU zq^5|tEAuRxV2qKqnrP^6pljMoeSV9DYIBO4=DDA+9t}Q*xM?`{nPH^u>gaxKFI^s$ z1nvU+OcDTwJ#YdVbO`*=>z>EF?ODs7!)RhEDf_f&+r2)RDECu~Fdv+JN^a<<$raZl zdWT;<@)ciVH=@z^|K}=yEGu+^;L0}lE`}-`y>jUSQX2G(9^;8B3EWDC-hs42L7a>NluFM*gtUVDd|Uz&)s=nGq%%UsGlk4S_08Ke~qd zLuTwuAthi>MRi-_vdZ~i8&29clf^sg$nn~egihW}s}WFd(oKY}@>dwgXGf904#N}o zcndvTvT=DMnE06{uhQ<7l9AJa!)!XtkOIsb(!nnFMqCt-%`ccIwY1l_A-0sAqZ-DV zRMKx#M^q@)I^|?==j(PGv_B#A%=9{fdL_I=N)_YuoV9AgDohB-eh&H|5!`!~mZ%Ldi_$`_@_S5*Y+SuHm^z1+nZa#z!Dgj_o`U25 zpqD!-RWp*^tD61`jQQBl_BR@618b}C@pRf$Zh#~M*q)K?lVx(VWnOadVY8F#tAXWi zKi{r{8)ex;?G<}FP?}}M{25n8pbRxX>`1GeFNc~x`3OO{s#9#YPzIX+O<2f~J2^lj&1dQ%pMpeu*XwUkaN z1WOH`LPQn&9%UV07e=&m;KH!mJB_cTPx&;_aiYSbzkuQS;Y^B;C6+!#$R23b9^rH3 zGlfpk_5c~_6g8M#=XE~_mPjepB2T3HH!1V@-O5_FXU!O8x(}wIn12Yp^yjz-GrA8$ z$P)?yT)+sRzd{Rw(3A-R8k=@!G8Vbi0_JRO?<->oXrAq1n0eAPrLMD|uO~E)ma!X+ z`wq9ehs>JfuW5?|ssNmIGlxV&k%oN)8-a}_0D{8JD#SXYf|IixcU=4lEtjOF5P$cq zdY>ry&aN5hY0aCl~dgaI)@x${=Q$aZ=6SK2F|Pu|I~?10&1mnLiRc z?m5&K%3#S94GZrLVUs)%Qb`jG8~fjpU@({sdNpWS;tg>&+69u|jNAWe`%5x_Cj6>^ z_UAW*6bjoH`i)_7c#jT-q_!a_xVf=|!PA#`1CpaWQC0{IK$-=;7wZh0<~7paco;a? zFP2S}+Q;1n+zx|N6%X1r9>O>9$A3oXx%~r;!x69&Y#V?fn)MCa-Fky}FSEO9?enb@ zA6G7i{av>)-&fVS7k2C4+Mj(lTkeF|$1=&64#iE}?S4&aCCstODVm+Q2Mna(I?wPH zPZhLUmZ%vEs>ojS;uVhKj+Dcw(M+AH{yvN$mRzHlHc?V6X6}wK1EY%#+WpE|DrZG1f+SGU*!yC-|T|b55hl&3>%8{>{J55{o$T zs&R0Q_9#IVe0TwB(~d&FI(HDk5ATin4>k`+EfAJRhF7rn zr$3}4KzPoIuF$-3r^ct8h6U9GQHEaQ z7owGb(<#@M=s>nJT}c|70C%&wL}f5%eaS-D1yxMBkVauzfL-Qe!`D}$y{U7t^@!l? zgs~k-8Sh2o!tb~}1kvYOq8twq|JDqBA7KMwEAUcYN-u-5F1lC3G$X1Cw#7>3M21^a z-;-8PO(#yC36Ph!V_`So(wu15W@66a=_TTWJ5|HD)kv#Z@rnG5kg+T?>!iM??myNEx zQ=h7^xhCgI(Wl%i3@E3Ma^zqSfv?DOAz@3qpyJZHahEW@4@VIKCah=3>e3JO4Zzyz z*NL8@$4#`10dtBa9}n*`kv4v!C$Lcn=D+9U$&LIZtWfy_g82z-moRQjoaMqcs6~L8 zoO@WPPErnX|q(y1Gf*UZp4LtTGOg)rykk)({Pgv>wPJneCQH3j4LnI**#n zW^a2QI2%EFYaAT;Zxr9`5LAP{;rZ&?3r8A;%~+3F-w-Z1nU5M0b=W}!_6H2jjQZ<^ zxnYuinC3@?xgpiQz>4l}WDwkd<8+AvWJcTJUN7iM4+E~kzC9yz8V-!(3_(^oyZvlk zR?oARpU_A<$};tkaVIs?(=OD(7n+h@l!%YG`!bZl=b3_DJqC~vB$5t6p;5v@yu6>3 zzUN!e)V}_Vu2}-8VJ_$Vmq^Oau8NZ+0spYTY*j0fCc^m)vDYqGOx+&XINTOwrA_jB`sAuMET?S6;qbj~$Jw{j3gPG7}qrIl<`zM0aHXlJZsEx75lbHcGx*qBB^fPQ?n7V`klW^SX%&$gf! zKRwjcmG*9_W_GhyS{77RF#NP2rw}|~lsiBf2Ay0ygWAY+qh0@drWt>?8(t4y92!9( z`R{~F02-7gHsbxVu?&dfK3HeGxohkHY3wpAiO4Aq?57v1SCaM2t&wXxvJ{S4THPbvDRxpCtnEuYdI+FZr0$AKY%u zdb=AQw3dUbqGs`0|ED70&QTV)|G+qKdbc+zeD_}myXTgI#vr4#EK$Q^*d+}SckKU$ zmri<*ti~ZGB2lTfjXn!j%W}_LPl;bOvoY%<8iEZRuKz@0+OJ)Av|n74DFgXsZ%5(J z_MURfNq@J}`oEs`9V<(zPlx{`BsN8)^h`GGtuH4Yy~VV5qmbXPfPwKTO$Y`BZ`U7t z=Pa(U3gEukb9(%9dDC$Vv5G$T>f{p|2(}ZgH;1upTJIj&J-loUCESsBBt+cNWB-rb zK?pZLQbWV?gP!+xS&irF*81+%Bi6^qG?=Pp>9Pwdp`v6c+{rs$s3OwQp(l>y_!j~? zLv*o0?oZx)(_2IKi0ly0uj z3e$}O7Kd|;?bGD)^z^abjvc;BH;LugU6InZn;rrlHDY_ehKTF`iNPIsela+XoO-da zdhxCPMA|Xcshg|sqD5oJuR2(F$M)$NSLA1Hf+xmI#1$((`~OyvXvCPku-|Q8MJ9B! zI{c}g#a^M|I??LhCbBKCK_LN?mB!9>O;=EGWDaCMQgS(I&s*59ku#Gct-Z0geO}|c`x07Ka#1=xEi1$ z5scTpbB3bVnh})+^^X3wQ$S{$`lzO8cTyny1Xm364N zmYHfHOHLNdk&VtMYu2hH-5>x4WdXw5I-lf2n0iACS)h9_v4ssO`$A zc(IM6OP>A_uxW{;>jtLXH;)al=KH5o;TFQ326EaO3XT+y# zOaq$cqi0vd$Snpi$86yY&t|e{@7n0vN8GYT{St(Gw7)4PF(~kgZk^AOSW@HuaCj%q z1|Bf}>-GWcMtS^z&1kgVi2?#uVKF0r5xAH zWANs4m|cZdvTJm%M%?&HoB|bqQ3w6bh?{=pYHi#C;_9!jJtTT=9aAA9u7EzQEJEX= zP;?zV9u7G}RJAc%7+k2SXi%_OeNgadHbhw1vHj|}5bR%nn*ve;^O>OST#TtE8y}u^ z#}PV&0zAP%a<3RMmz=qDv1;J4jan3IE~Ga_c%D+nH(5G?I$=6OQgMLX^@I0Rm>&^h z+_b)XYlVT#B51Rv&zGrBX`BkEwhI0n$K_%&Bx>{Z@?;FM0X&5yko}X}X{Qx)DAC}R zn*I&AxB{P~TBHsTPSs@7iaCxZ8W&VX_+i*$haeBa2&90cE#i>#to6M3EcJ}jE8?cj zL=Bzb-~F&a3syixkBE7_?=$0oB~aO8*7Q!SFfA&m6Q(uzUIKe}dkIpUUAu!gIYzjg z0^B!7dwT)36R3Ng`mfQ6;xn>?Gb-Dr#+To0+^S+w2|EjY@_XnFTZId{v3>ak(0AVmE(v>Le#M(_vMSs>mCxu* z%RpYdx&y2I-jJE>-QRXYCLk+6M^IGj18l~Op!1(0*PSW>K@eO)6a$q!Be(?+4GggI z<^c3aSVv;l`u{(*_dpuCC@3R!x+;-n^g=v3tOj{Yg4K|#;$ zagqE76`Dy*sY;3;F`2ylU$a*8qkTw7^^ctuHPWg~TRqB_oaX8J7UMS9N*Wd{nvnu9 z+`A#Sq4z!NTx)=TXHIcW)v6e982HoN-CnsOF*$;YD_L@}a*VK-Sfnpc*Ye0b?B9Sd zGSFV^-V9@!tVJkn_UM>MUmGDLu@rx_-_@_kt*?EqXwrGt8%654q?$)srUz{8-E@mu z&S=ifJ0++)jhywrP9Ru~%_!T!J~}&_8=JT*4?7x@Na4?22x3bp z*L56Hgs`6P@LSDx_i`E>8T3bf?9uAzlwy3lh_?{e+r5KHIVV%zqveX{Hzk)OhJ zw@5GO8dFBMKQZuk|0E;j$Q0*62bJw_a-_CY?T31Rte;O<>eSTT#TzT-6kYY~Z94B1 zV2Zgj$|A>iEFKNl%@kT_s553&ZO!w}Pi#uRV_nE2(rEpaU9P{`|0)Ked9=SGPQq;D zKCRWzl7{FEs|hQ`f_gljtYTE1z!iE!?$V|93Cvp>i@mg6=+xPL0uwCv^(&yvfwLO5 zhX#7VP~NX*Qa8CnQt)F4om?u)aTiUq+fUZ%N)aJ7bB@e7+w}_JHL(nmJambgw7_Wn6tf0ZM_{nJs?vk3z5$kR z_{(*H2FoF6N)AO{1_;0Ttj8tzK6!TACH+-^T=XSLPNDJjwe5Zd zG98*t(CQkEtn4In{i!nQLT zw^z=DR#>EYg+Qwutco=UtL&8o=`c=rhNp$N_@NFE8BB$oQ+9oO%NNe6BV9;UxPp%{ zX~-^p`9C83(GtTUD%|2aOxXe1P8i6nyr!zNa#{++*+d58CCL&IWA2g)dTmBnW0%*R z21Fc@fzvQ&5>bSsmv>A@#Dhd4`BxTxRcM6+cBR4vvx8PhX0z#U zQ(Zh5cX{}IUEqp=HV7A}6_{Z&WVNJ#jJb*%BD!m!9yaL5uL?J4STQ&^47_N7vHH0I zn{do1&7{(R(`zg5@ldt9`1{TkeS2r&`EYE_S4mW%`qpIL(Z zRmul@04I^85W%Qi#JT(!XaiO#zHDrBSD9Hm%hypv#CJ;+ikIf;g5)p_=x$g2{je4i zH=-K(pc9Tl0MJaSTkqD1R3Ou{KPYOF+h8&vo6G{_>n*S6%}yS>KaUq>%B$kF zeG4TkB`r5|_26_Re7G@URh3lnMDWv#NgiEl^WURn_Y0&4u@5)!<+=Z+1RRu$dS`N- z^%i4yybQ_g=DrvX%FLlnF#TG=gl=6t%JR@k%_&|zKyelbz|iDg4nnI8-2RB9;oqf9|#f_cua! z;~~gFGq!7d0trz0UM6bnsbZlj0F6cwSsiK>qOtiCB?P8H6->3&}<8ZAUy>HB` zFJ1F$#JzN+=#`;~N4;NFF3tx%t&Y+FE|iKxI(FiC^;DtnJ&!e+p%n6Yt8QnW0J(Kp zEAQCULTYvkuvMlo8goBx1MJ#pkDj6MT{XOc@FE{arIg<-QL^`v|J6~9@8czL1|Zxq zzSIW<)vB88C=Tq??8nx4G_~!FFMh@@GNxHt;JJ0@mFK2J936d)Ea7ke!CeCMMKGGS zv=z3QVHp0Z_OyXD-O=Go?N^Obo8HCeuEpnq#pi}a*SHN$x|6Qi$xV*xKnF{@6W|x0 zG8(>t;UulH-@&T(jMdfqhBJXXI@7~NS<+O9n*)3+-Enl*m53-w)vYV5#n}U|m z+EcfDAW~g<^TaxT#aK3@HljELZnp^butsnisSEY71%@z1eR_qQ zQ~P{OOZ+ni(?uHBmW)UCfwX(A1m@xB<7YlQ?883A^+PSRS#=4Ot)$=V^jLAm)`Bt5 z$kXrt<$eb$D4hg2SR6_3?mq&DWZ?a!yP6F(8*oLjC;ACHEIT-E>M0hZPSyuVD6x0i z$)TG)N>k$lx*sYnI}IbC>C>q+!a<(sO;m%-Lx2D+lk`V)VSu|5oL>X3)dpIT&^cI| zG$7RjzTTuf+ymN8mEvg#qmoM;f>#%WL%2sEBx9v>;C2({7*}`9EERpbw*T&F4f1?{ zC#AomExB7xWan3X)7M&E42#M&(t*eQ>Vb2Z*G66W17U3AbKnUnN^ByA4>EK%A`(Tnx?*uCgzVB0LM5DomJdCUX zUmXA{`_5ZW9Jb@+4q0&cv`7x$iv9w6Bk-9e^2};`>i~Hm1$Xt(64$h#))xyO`DZ1+ zmh7})OtO+6g+^eAnnb%l>J{{xE_bXJCi~U0__I@07ZLX97X#A-NVHqWE|0*4B}r+m zfgb-FyuJsJ^pp(aSxpdl`24b*g-Hb2f7-No3H<-G-t*$M@R>w{UW<%X*oU8ijVs$9Kz17Ji`zN~})mX^Cxh#?3QU^k`FkJBR6$7Z0Jg(Au6_Mlhb1owl2 z$|Ijx&&x=yIgYlm!mpuihm`_2V%Ir_;7AP@mU2Uj4(M2$=OEJ=p7~_?ALpqzEigvH zL9A|~N#Aj6yrr{6s+2$B-OGiSakMIu9pEH!`dS+zcLi*uxz3+8N5oG%#Sh5X5C(5r zaM!gE1!qQ&es_r#8VTb@DUe^Q=%7cSmsgj=T&^_1i;oUl$Y684^YqQHE(K@20Gx9# z!EY_)feCo9lqmt8I})SrSu3bT)X7@GTK0L#F_&@1qx;c#`}nIH%<7w%@uW8O?{Ki-DKJSVsS1cz zKMOkz7*d<;zX2^3ZUQdpw&Ch(T24RzXR0)YTg-A?!O}9w}q(PM7v@hW=aL zv}AJD_(uu6`INS$!1t4{Ak)8havOyQ1=5Asjxnd4D<4AvM4xZG|BP`Duo$dQ#&7lA zSJUC|ZgFD*S|At~-E8^Zm}_*RPyHkzh5VNgKm)EAb|BRnwgrA`jcHT6+5nQ-RiNAf zDxTi(1k;%*Y&^K}q1IED>JgMYp!EbPo5_f)cUIE(x~caF58e~XyR-+r5Kb=akmb^7 zA0?4{EtVaKW%%UVVK79>Wj(-`IYYU}(D$yX9IGh`G9Z+0TEOY~FoMe;9Awa+e?s&J z$6>WvjrJOp1J**nE9yd+OUr_)ci+ zU((P&Bd>5kZxmXJs2HoR8XmgY3TgD=`FO^Z+Ds-2DW6!Ar6<)XL6S5>sjjyY#1QF8 zeT_TO^`dE1fh;@I)e}Tj?nih(oSDA?=8|{$)MULfdfX;4C}j0tL^olflwsJ~bG!rm zg`0pTt_lJSWSIVn`82=OiYxTLMyxgVI*y|Qk7u(91=F4{E9KL@&31={PaBvBo{rh2 z7DJr5Re@9d2N9b<39VHcV(N~aRAUA9AZ4TD6Cg0jCE=f&O=`3QsiXt6KK-C(Ls!j^(s4A zJ0Q2gE)9izaB<&m^|%X#_ugKI!ZJ_>1ZK-dPB)d>rq#1?5euaSl!WU>bWWd zhnC<~m)<~s{{Z~|vGolwq6F=hW81dpj&0kvZQQYK+qP}nwrzXvXy<>sFWJr8q?4*@ zR4S=X^*Qx@eU5eHearN3OJ%VoI8OMI|zmF)s5UQn1R7qc6cjYv@KF0#< z?H;b)!#CYa6+Aeuslp{X`Q++qZXDB-`7TqueRX;_b{s>zd#vYmdd67$cv>HcG_g;k zU_Gd*LIy9pSl1?4{?(Dw0e<0#(}8l~BKOd+rm{+Gjnd}RfxZ_^UUakx7sFoYNX7Ez zrPBe2p7}0c@OSMqid(X+jug8m{X|Ximw}S{`1$u2oH!P*Li1-PwAH8FBYuHwrT`i0 z)twlAFiw#$BqCIx=3(8%^PPPbv>f{QQbd?PPioT#NE|pg0lMY_{=M~TJ}C!H`%hCu zc@b~aA~w-xk-(Bbi#a{Mz1(O8vjwo9f8P8`m%w73~Aq2 z_xM5`p!d1lQQ9E%<1&e$)vX=L`nC8>{^ZDkZ=YP|B8cy4fGa<+h5~GN+J{OHSEe1T zmlv}xZqj;oRN*(HvlQOJ*#QydHQVoSHg_E?T~h(&_?yd0b-c>JEc%8_TP|2onpe9K zgt%P1V?+?ik3ZfaZXh%(Rt`@)IN1FHd^X3RqDHe^V9-nenhNR^VE)24TyB)q|#Tu zjZQp5O;vcS_@7xF=ZEQtQQLX`jmLml0^X!4c_=>;y-4%YdF$h>e(VOAY17sLe!REy z^fMy& zH~^Ia+iqqWzkh0Y;t@rpFhAcRhMRQ78`Pdf0*ZZc33A<%lr2H-!xI0e6zke#KiGVvGG z7laU@2rNde?T7=ennSs7y7?$E{Ch_wjG;eOI!0 zAiP``xP3>lzn^TRpsIj?|M<-Hf=zUh+5 znd_3_;olHUyHg#_)JA3lu6YLAGlxr_#E!C)&%MU%lXqC8@%oTejWIU ze49(-mm^V2_==iI{p^<8RnQP>$$y3|<r_&-h zz3?_Yx+6Hm(v#I3qKyutXQ7N+iFf^5iUS{PmqLkvF*(v*=-~rci=i87CyuU`$3bh`gJJ*X&K^Eb+b@IC*wBIX?BV27mbORtnQ0Vn1tV z_2hPiMl|4k;b+@qwqIW9$E8QJY8$3>?#=a0Kfyme6dRDrCCd*1SH>dbqZ*5sniLDE zZjSoQIR&3UICDwpPzCKIg7RBNn<#z12VcI#`K^BqD!Y~aN;>--=?nfsGW=mEiHJ#kAoP>M>4Pn5p zH_S%Is+(su(^}-C)^(Y|G(D>mqcp7L>St?#Sg{ne2c~4r;b$;CsspiH_5mHz{Gm;u zv&6rS+vH4Wzdu6}9n!!v!@gPvqt|Vv*Q>8pHV<1qj`u+o?hQnRck%k5vJOE`oWo(j z9oHFUTJZOcLlempzUUXXndhTBfA)=-fvl5C&{E(BoRoMsbmTg1NynsA!pzct$q`_ZmJC<%OYBr zxRY5E2jOf*0*qcqF)zo$srFHTu?xr88OMdmk7F(xT*r1IS=ONo7(Wq z&oEP|kvwy1SQEdX24aWmpBPSa+G5jnC=81?L5oJAQ4+WMCgJTdYMy@UUsc_qN=7eW zgTKJyYuQIFVB0|xvE#G>Ur`O)F=lG%U8||~nmaD5{^SpTQtJ}6IWo~^d)V|Q?xhjM z^R0^dd?~`>i`-St!hzx!_R-}ZD59&Xr+hjJk7BBFJIo;4eD!nOp(C0ZEMQ|bCG;?| zIV@n?4{bi1CQ2>!3W|{OeG5E?-jDY3G%g;-ON(J775N#q!PI^2YXc-)P!T%^}7QR$$Qy!?YfcUx}oc|q3f~%r>KR{ z4SAdRd-HHE-t9GW0h{?Z;Ph^fK<@2b?C(L~kq9Whd(b$wYpMrfTu_lrb3zVn!Zxem zy%XH~ov{&cCR2KCQF{F$yV)qa=~H^`UV1H3dTmmAP0-x@+bf=eyU{#0rb+f$v?~^J z_dTys0o#h1_EX7fIof}>ey=%e5ql(hfX-*mv66WtcKp|qY_=a{?r(k3iPPV_lNUTX z(#Ip?(Mttv&eNQiO|nm>h-ntS$n%-LPQrFRbw_wc#2H!1VN&U-xU-|!0=E1hW_zp; z^Uh%eX0aSZ0gv{`0a>tYG9cjDc5X#)r4!qqjVS&7nWYdjd>%yXZUTkxZe(TLpjy+4 zly~L{6U$4-+QcYYvNH~0;>ij{2M~?#MB_xze!uDiv4{KuuH)u9#)L{}EPe>xx>bq? z(l|V!*H1%)Tat6rR}ewOH<)m_y;-_dGwlnC?~VRqI9^ydOb+_P=iYVveui|DuEusk z?6aeqQ9{((dv}M&()KY#6AIK*9%SepY#FoQRJ!KUKd-;qw$-JfV#0EqBYqj{3I> z_pEhL_aQU=;d|xP(rFJTyA;g)V;p9cR)o?>%+PK@L&nKD`U3^|jo@O2rPW+iXYe9< zI9{m<#zCp+9n_IKSy_7?aafYt{6bNx6TC0=vPv)SIQW-y@45I^n(|w$bnuwNI{}K* z^(mmnF(W}3B+PwA>|vrIKroBOlMY{9KPzNpUaewWtaW30p66cRuurxX)IP)cG;(In z)f6|KCw97;vIU@m35q$Jk|uQ;i(aCP9Q8U2>3593@4Nu1WLI8cb?jonuniv~@|F09Hl>;_gbB6REu zQBcR8*{Ne4K`&BWhbdmq)^6_qCKAeXYoqh~wv_@0GYiK&FT*v|kPswoRmdg$5M26rgJ7wk)84;(=RSPHKltPtOk z0#o95El3o;=OqxG)qtW?MuFosbr3TMDa=JQ``A&v|1_1702TuatrNX3h+-z}I&jUE zuf|Cg%K*g-`#k+1okJhJGi!VymRX6tQSN9jq6L`7K#58~&N-N`(X0)5VObD%${AV% zT#y7M_H=KXZ}}N!+q|RRM#c=;@+%_WM1L4(lfk))Zp-w$@6)9_ar@0pB4xoDwf97 zzsV0N*2z)@PZ&Q6+=sT-rx_TJ3QHK)jD*ig3vIGz6e=Eo=A-lvmUO*ROFT5VGb|+4&O?d7L*1tr~S=gS9Iw8`D zW{#}VG2uP*)OrOHnk!TO&(!lI>4c4Cn2dLZVDs5Geath~lX3G7JhMw?V|noN*|0*U z4An0P$9QynI627CkK`V8w|nxlVa&L-;bFU^b>es0uO$lxM;*g`$Mcw3or|q+bZzF6=PK0Ccn-zLDaU1zdB0jz zn>y*UM>Q$zoIvRIC^}{SsXUDG$_fnY_Bn@HNWtv`*a5_pwhFYP=K4qsZt)BYqVa)| za(m&NZ!Wzzd#$dg&FNq1;Clap?sj_IUjG3E7$L09YTRc;(#`HfX!_%eh-ztzKNt-a zwzOIK3QoBZycs#GN}Jbbs6_4=^vDs!7n2qa|A=vzM*Q(au2HE4cRp~wCaHXVg|E}b zlMS*Y7DCtsS<-?)bJ>KeuC=dc4BZJ|sVO>H=MDFcKHjAK`WmrX z7GT0z^N#)|MyDQP`iA~#g!yL^`YK**v=_nNeXDfu#u<|26K16i!=DaGC#u{FvEBCC za0wNrdQlUdcupilCkpEApukFt8nF@K9+YoxdpSoK(Oq|L5-`TaCnkvrPr~vQ zy$3+Ul>Z*2#9D@dFUj5~7k__qrSGTXKD_o|t!J=1YtATSW=%9 z*!~x!y|Zm_-rcQqXQTfcSQDew)s9_(N%e_YNZ1I)&IomsdH4x;pPJuG^6IOAp{ z3sZ8u@=}vMZ!PAvJ-eWEbj(Mj+BfXHDaTL;JX*RYCl{YsJzH(llNnA$r>J%F`d^{B z2Y2Y8Oc3&|&2r!(u0iaXJ`b;9t0nB1s7t_w?C+39VnD^u`VD&*r1@E08G-M8jwYEd zSsq1`0DQLh8Fp;sPvb0u0DLF2q+aLPWPasZ_;Us%Q5pNL`J*6Ryq` z_VHQHcwF_w&lg95A%g_Hx9-P+9OsP}E}K~{8#+!KIxZXV@@mre>t{$k?8HxcS(yh< z4Ae?7aUVx$)bZI3sD#{R7LwlX&_R-39y)ssXj@m>JMYr#{}F2h8mH@$OZa?w`F?V9 z`4Jd=5c+_(R?EQue#ZT2?rHnlxfRq)RH!(3DW|#nN_`-YUyfJGqtHNp8414rE`j~C++{MzQ;AO1`;K<40`SE)hVG9j!xs(=+1=lkss zN4%LmjE=aV56VQ-wm|~t`Q%e_l$tSK6bD+erb~QH?+Rb4IP{6#&PY@`?Pq@*&gCA5 zkqx9t`AL<*C0|f15lR6&n+?y_13#LrrPU&U+_?Q4z>jbHL(b7JqI@rfJLxg; zZ=&WEb&MMB!x~`Hs z&Rf5JXab|pd11Ks(l*E521!Ar622a>EC%q|ZGNT%EjFh*doeHN$DEO0wTvW*(+GBW z_(atXMV1?IYqXt3_3jC(PAFMaCUiZ&Sf8SR4F3enf^o~q3_|fhc_BGCikb$L1Sy&y zJED?QEEEM9NP)sksZq?Bro++7SjI$5h&o-HWpi3UEyGReL68pacUMqDMi~hItCura zsghUN%t3NR`Gvy)S$<%dtzg18UlJB`gIp_~g8g*>?cg)`81CM7-6uU>!VjUJD^M0? z*yz(a{A8>`uYWOK?QF0Mn0-b{-Y<_{$I9y2AI&T*F;dMID)$`S)Y@O5>&5trxQ;f% z*hz~-RVKoLE`7~^9pVnED!)p*#LuCK;08Q9h<)jQ;v@2^K9#+kg^cKs8ka&i1IR39 zh1iJ)M%fLx2_?I}cq&)bHYCO$fAzPRYo2X{_d;W{unw#j$zx{G2fezKe9i(+AW#Ln zPp;zlkbKSW);-=W!tDg8;HgS5o9))}SDuXSA3kTnb29=|O|)R61OL%!=h&(ZO=w%s zo3U|`}_TiVx@y~FN>|fOKaYa zx>vZ^0fBh&lCYY*apB3UHlf;5Y^~?U&v)hR9YZY9-sX&CXN3L|yck3~ODM4Hr)^N*9lJ5T-J5pPOS-$m`Zo+QZmVC&GCnH({Z*F?XSdPnU~`N-Gb zs-IcIEpWan%9O9^Wh8E}*FGI>o9Q^*2n{y=H4N|JwAqpQbKd#n`P;q4zq0`HuOky@ zW?`J1%%Z*+MKL=r5!Jte#{7{Ju`JHorPlWV#hqNO!LvMu#c$%KS}VC_>?t{?5}q zEQSMIbid*xg&Td!lvG2JlFOt8v;u_Kv;bo{S%T@tE_u)QmyC@hSA#Qy0#56fII8^J zz5<4crjbQe=GtB`krl z{R&cNyGs>ME~aa$8k*uPv8aKv3y5M~#0TD~LvXPECS3G?yZA1?tZ zt#CrGs0z{n?TOc~miap70_x42G*=iS_>_GCrGm9tdR~D;uVfN}t@ceF9 z`7Tu6>1p7JEHUgnHo{t&M=|_qWfxmNS`*`KP+i7T<5$6Hz~9C(}_o83%P>tYb}T`kT`_!9tZF3sj$82|DZmX}EzZH$jd zyD^{u?6X*|4EqUo5Cdkq%vxXJPr@KL94-P?dq&)Zg%qCdC55X#18UlU+GWYV^JSg~hsIjd>C$>h3vCHdaj6n#3#3pOvvPZP^`p}rc=qR`C0P3-!+ zPwoxgxKdJf<@pxNnp5q+*anSLmfie$_3GQMVmFCWn<=IL zi-%pC6Jd>~Gk&E`$4a-@HVvXw6mV%Mv(HZGaB)pNz7Fr}Zj~$6j0w*XZ?>gh-8Kw;@qs!z!A230eL3PHGVk9@ zOsx934beYMEr`&+;}*2S{(qW}BcJE``J@;(XM(?ughMzooqz3G)-sI{>F_RoPW~vh zC-X?r(Erj``@+g1>NXetx#S4uUuD75^3?c6X%0gGL6N4(EKYmy4z=@4d0(SE=%>Zmg=~?dGFTO2is8_vA%?bs&B|bsCAIy5VHtkw@?O6TqDd4^v0ewh*`Y{rb z*!sC;l-kPGif~ZQ!OO?El!+_HVk2&6Vx1Wy8S zhOWZ2d!KkG+I_`h&_bhtYYkkt#AeX4AvUeF8M1DUPNT8W-ZQ_+q=(V<=_J8fJm?Sa z*rksN{c{K+HE3`2*v)wKPira)WDMW!lkn8?A5LY;e(HsI?3*at#@Ih1GCi zLsVLQGYrxSo58?_n5@cXD9F9AD*xi~pG*O)ZoM<>qSCxez09(pOF25ua#OlW4R;GS zHWlY5>N1esI_I#4r}{q9-3C{;WlDqVM)*}G)VIIIe7xz=#;Nz4fU{m2B^NI5pA@BK z*uSTtV_jMFuI&y{6{DTYS6+>Q*~EnuKMx&$yh#LRNrJy!_D(xGsBA0%iZFus0z>bcgSS+vQ53>PiYVc!u~{`IA969<>B!1?%# z5=sovE*k%@Msy0Kzm*i{Tskf#Q4YI}s?^ryvhfH7&l}T3(<$$Uh^#G<2%2 zvH970%l&|qfzU%xSfHv`%Uoe+&@u6DV}1om(`lcgj{*>XonRrbmPpU5b%jQ6WAgX` z<>hS(L#$1iLG=@VK-%J&C3iT*_VKTEk8UzP)NDsNBw6!<@-1EVQ0oPy9fc}jIT7_0 zOP?^+cYG=FKrQjkNB67GsmF)8F0o`0IVL#nLzfAKQ-bB3+-dft^SjSPiXH@RJ?d`+ zk6komK&kWi#Tok9FTNmb{;eJ(R#+uyHSUj1B(f5|U;=K>dvCR!CLL!aBR}cnlF1Eo~t} zRktKmI$OQtYUZ-HTToa`eMl1@5)Dy$t6?_w?2s@UMPz{PIJDMx=m*_D$zDSNz4DL< zt1mn@vq>Im1$%b|473i3j_TcYRMSwZZBb%qR!Rx9Lj-EGXy8Qa7LG2459($OH|mwb zUz(wrYjy|6D>!2lA=2PCXU<*{F{!om43zKuLcFvxXQh8ZeLVV7KaVi1kfqH{s@=_v zU~4bpDN~*<$AkGUe9HAjMo70_1W%y2Lm51$(EDvKz#kO)&owL3L;-7*L#syR!585~ z^^YVtTk7KV_RH}3I2ZfL*RM-&@+3utZ#y?DN0#8X$-{x7nL&2i4zbU&CLLO2<$ASq9R4oh z-HiCD6m^;@?_}c4$Fd&9XjLB6JuK)w_o4Q3o!w?*>A&h+qu8%MK9^5C!CD>Da)`Pu z&hCfXP4||aq|4gk=ElJku1S^(V!>Gjx_b%`{EG!eG9Z(sjTIOgbI3;TIwj`j39Jpp zSrz{bC+iz2AZj24^8S=4(=_q8L>~qm6}Y1Z(`{cIs<%$0uI#1=H!L+mI9kq5q{{9P z*%jUwpAz>paY=33#5KwuZv%FSfXVedc@d0psOe$()_9-4D|=^Yz+bRa4yDukI)^P9 z>|OGh4I`=M{MA`ECTnFU{Y}C@;DBCEVW1deg?>(7T0`B6W6dgWWy6`d(xY=58{3Hp z-75QBCysU>qvfQR04T+^TM`;s+Rh2>!g!5~2lNkV3F+bHejA?*#mn*L{&bR9-)2{< z0MHg&T#4&Se*KIes++uokHTjumP`JwDOc#s;gG?nBp3QJrR+j6Up}~PldXl31wuQ} zHM<*9X}QfM;lv-@mb zg~g#HZPO_js_bHiv<(jB)F7Neiv=a!99K84Y-EDXG$qqM*~x@P=|R&~t&Iczm9ehV3g zfnikcMekgTw$1YzWhJw>x~KHRL)QDB(ZV@%Y(?h_!FDiXpiGlosb$NI(7bJO=s~nd zQ>~3~lN>fRJgJ6>8%5-ZkVcdng>4n*d=F=*IQ;J$fj42;C!|pp8t}{2CJY-w7Xqj3 z0-@VE#Hp9kC>k4-Dy64PBP46JQ_uj)w^zVF9E-ydlh9&3@l({cAWa-b2DeBJ;dxev zYxpp>F7?>jXlb>#J7_td(k_vt5UWiZH?gxb!n^CeK4bzst)QfYlby=Wz8pR3kzk#{ zI1|F~m{gG}<{)B$>$GK1Feymz_nG+vPtXHOYKkR+NVR|lCaN5MW1si}^Pqx!WYS>P z=!zKtqWNh3YzNxv1j8Y|q2`!PS9L-mE(p^K75=uO(jphC7~aSXM+HOy&15@)$!6mE zC6l@P>gDgoj4#&iUIoXig^aezuyB_CfEEaXHaBv(ct7CWk;nDuiWCnelv>&!fe?c4 zYDT}l-)bWT+#x7@e>}L}T9%fL2huJiA1WRm`?K5m^WdR+Q0!dtu?xEB(>bzzylZ}@ z&x<=nyK^s+JA18EXh>GK#V}4;2yqk z=Pyj}TjTZDiuEbuDt)EsW&bn{tPlI6{Th%j_CB(e>)`9<=17cMMjxr{vT)q7PSGY& z&Oq_OjkUT|X5rcW$;xR#l#OLom6fBN@q>$AWYW$7?EWBsQgh5F8>BQM&n?v}@OLGc zYb+55{!Z}D@ixvz^p&eI8fRL&sc$(^iWKrV)}WUJYslP8tYjX`1_&`7R!O>Z=%rlL z-*$l+`%Li0Y2$TWo|{@rlLvQ$hVXL{P&+RRJ;tY2>LZVX{N@ooud^nJ#W!FsvS z%j}kU!u3V=(CbvUHssbid*pp)#e!yc{onNJU3ND%Ky}Xuz3V@?Q{i?~S!bD>0Vj{% z9VeG}>Ca&-UgWe3OfoA)Zoel(9=Q{y_$%GTOp)2jpmELC=FgLBesd4X&l7yk&lBJ_ z>p!Db>DyEvVb-LVZr&C7^*-=IQz!mbp@+td+tVS|{C5VZ-NT~XWWJS3Y58mKc2hY%hSyLzY9aE-V#m%GRWQ12r0YMz``Aha@L7f?GV7nu_iebYO#|J+olIx!j zrN_&oqzkn(EQU$Y&cGU(>?2y9ph3h!r+03k+uxkQbfsHaU#u$bJV&5!fQ91_Z@JYm zKDv0jCUp8hb<;pZ0R2BSefe=pY7k^l#c;g^UbNF~lKL`A>z3Wd3M{4J&(K@V6zQo? zX73RzN#tbqgK~1u-WU1jx2b|vaZ# zrWRiH9RakclEIP10RRDVP7GCbZmzEh<3K#rrn#D_JpZkh6!m{7$vqmCsDIF(h=TbP zHkz;g{oLA69QhP%m%34JgLP<{XZksP%PGx%@AjxQV;wtI3L@<5&Z&V207FZKyxnos z1(ZtfWBoJ8`=$dU?XaN{$AS4n=Hv%A)Yqn;zx0YLj-xL_Fzov8Wl=TtuKR?S#!F!Y z@6BgJuCJ!Rptb_V)jOGteIKMqocsoayh&>urj#Z0KdTw5!d%I?6m#P7^bA04NbMn=&QWi^_u-Ym@Y*=k(H|3aIo2F>%GeqtIL*fPn zt{ro~?-BmDOgH7rF;VIg&HjpS-zD!&M=i02V^6U+eEJxlI5XqszD~{=hsz>Ecgu&hyLI%?mw&9yo-YxxBcQYOxk&Z6^XK3#1- z&On;3Xv7XajgidlTqBNG3M5Sj-;(8l8YS4f{ftsxUr94G>%u-Hc#QCU=miBHEo<%+ z4BE=X8|4HJ{h^Q0pShlHy9lJQ+z zfc})&3s=xy@u|QlKf+xvKFhUACr?j-fo{(_~_@evo8I3xelp zl-`hVW|^bdg)IgjMtN&t-Y2$BDtQeoe_U9dD#ZI3wDWqx-$FnlhwZt3H4p8vOr}BseS<47toC{Wi6GM2ZW*`_uZi5Rj5q+|O%# znm)2sDdyhI-bq4^k&Gbx0A~-#0J#rBlkZNX3k4gmh;qPr;AqhMYfVka6nSkye2(IJ zAFzWP#{uqBVx~R~o@jB$SlOv8KYU5r0+w%?fIcvEc;QMdw$_)*cqDECo8>QWXr}Kl zfDQbm#Lr$baR;edXsetmF+3{|C^|kH7X6=-V+K0(gjrNZVBXpv{GyeNE}9il=ZK3;J9M(~@d^YP^ARvT@l-an5uPAE zK~zMR+Uloen+_9UvcgI!ItyHD*D&bKp-u$D>Sg&C314kDO|D|t;WP(s-2^697f-AN z#d_BJ_#6R;oSDSiN3Qo=qRH9|yA0k(QnVI_`#!Yw0Zb_k`8xjaLqSHwE(C?*rxo~X z{x~8Y%8fj74GwQe~7EcFEszu_r#t}_3ZsXkpQY&{|wjI|+ zYR`CX%s!jzxYLm**pRxbaWz_z8^V66Tr+v~dk0_?cV|6nY&c7}6 z=u$B~M84qQUaZ0Ac%QZ`HnZ#92U~6t8*R1(`m#8{Z&+;R$5L-KX1bSO+m!x(j)OcB zDa(b|{Qsykr11d%LMaYHp*k0Ar(-`^ij1e9m(kv+ZT}>e&ExEIjD>6duoI^%e$8>Q z!DIsprfO|on|$ z6B|;yxkHxv&UR?ky^}V+Da#@+?J|^9hS4lB5up*^uEWh;XVCe0rn%Nn<%6lbk4nnL$wP6lmtvLV=HEo1RP zZGZHq*?8JWGK}R%Dv>32lzA+pckEH@??M)PX-3M>$nulLM%wuO<;UACtXW98`Gn}` zf)^<$^>}>Y3}WNp#omExmL%A`T0t+u@YRH%h;&qe6AQ_1DLoM=gA&q-pqk7Qy)w8^ z%aPSZRlW(e`_Y0yshhQfS<)?8s5+uBw_ff{vQ$+iE}`LE{4=GZCZ=H?@zqDJ)sed4 zv1>@`10i0$3Q7JGR@GUGoKMM+G!C4IOZqTUhOI2KYl$>2SPAlw7<$qqL9hCQ$vaBm zUy>BZd?E_$PM*U(>U}Lp@kE>h%ith~k?zyYPVg4^Z%5yU!Av#2?cC3gN%XY!(pi$u zUveejakc#CV{&<`wuvj6n%jk(PEu_u>13&1xe{3DGP}GW^QlUEgeYV6g`fq2Jrb}K zR^QtV^UrH@sFX=QW}14w2Dl0U4SH7 zgQ^LrbEXUqCb%`1He6yAM5fW^g*%@IJ;z9ZpG8T4D^+U))dzXUl!jacKHM_JbTtB&Lp^b`9htxlp+v&$ry50t5x0C@9 zI*Q&LpIcwZ{m>f<%%2Wppf9YVb5yh%UJ`_5eg`39JZTNeBv1UH_@(Jp7wffIBq>o`Bvis;;z{bHEOl)%jN_5S zNyYNIlc-T{0KBAXmfdl|Z(f_0ff4`*gu&zx=z|Nvc4GjEhHTUrmBGf{Q66Cu?5TzaGAM=?nlZ~n z+mZ42#j&e*!V2+^QeKAmeLt1gVx)^He`r^?zm%#&Lgm!8Lz&B4sAikjd85O@V!2Z+ zK`i2L2r;-fAvR9u+^RFTv5;D4MmrJ2+B*W*{m>lt8YgY`S&uxD^#n6CPBObS#LjIO zQ`SNeKza;3n;VgAaMxihyRUBKo$$NE>tL&yQ<>jF-aeD8|5cmed%^<6&{&XhM}S~< zbOC9Z)I_J=wfk0`s&4H8QS^v4i~-3qwf?>xoc)_|7s#F?dwTj;5E)3f>P<-pwO_k1 z2%GgY9ZDa<2k{61r${>`%Iv6yqJ9{O?>T{yRj6JfOpu594Nk>tP>QoX{R_$f>}-`8 z(Uzc`xHqUJfsAr;*qlTe>CLae&`g4yf*?#$THm;puq^Q6om5ix&l`7Na>>y*S=l{T zZ(9RadfQ(xe&h1pSy~46?H)t+Nx=RIP;Q?As|>UQppIb7qIC4t#M*6+V;U07EJe)W z*7Act8md$TRT%)1mHwORHI&rggW40B`nf0gVGQpXMWacb15Z>30g;HaBV-wNY_RR) zhl|YB6`Fu&of^724oKD$MLdNU9@=b4$Z&mT`i2cfaY_ zzo}X{{qn85xs3exb*{|3`|PvM$2$d%5m4DgW_#wYe#W^5Txz&A`!Eq0dH=LNJvgE2 z=Sn}LSa<2p<{k^ZEJ*2)nFv&h66@6qmZ!-jh3h-J!)uwR#HrUpfPNOnHnnI zv62ewuqrBE1Jwn`8zWjA#uyAja5el%MnQBPj2X^wa}<0&i19@yQ!%}>b&6piDFMRW z!&#~r4ZMZ2l(TTCW`tUd44B2g_-@2drJ8Q+ zyhz7mu6(Hv7hER>FgJ>TV!0yt4r>y*x^N6=otBelyZ!Es%T;n|pI-JKrn{H%&rCW2 z$$e{iJs&N(hStMeg9>OMw{~Le>ao;7$@7ekxv1)P2xEwNfPymL>!b!rfPL{2h#GT9 z`NaRl);C6p*2C z^v$?LqnTgRWo85C{;Z5YQhk}aU8$gpCw3!=Ft7}WWeg05+RT-eDs@Eb5qTofc((Kg ze?~av>k+zN8WD0L(X;`z#LMqBq$1Po!eH-Z8lX~$-I1RqK1-FNK$YCdfHJ$H5m;PX zgaHJWzo&1&E0AKYZH{Mj+61QS@`m2C-9|)T}$|5}+~3+<6FUOLWIz+Lyq^ zQ>dJS&EcR^J}T@Tn2WFk(1{%}6FPoDhz^CZUq-`xz(3GmW=Ro7@P%mSq6R zMZaAf&bpo;z2yPk7i>OE07+7bziSK$r@9ds%zq9%3jZ*j+T1*qQfCWlj4W%d^FVF* zuYW&kJZ|2O_4mDn4Do=ce%V|=h8z=4v-82)ET$#y?17BR6Wd=o+4xKThASx@MlcPR z!VRMrpZdNR!P2`CvB1b?KwxC_RT+e=jr5p7_t|P16q!+m`m9abWaBV*L}yjX;_8(! zMDv=5IkTX>)dqGoo)yHCIip#dFB#%4zU= zXYb9ngRcE(URzDPt#mXom_)HU_vln1t#fpqDUp1!a}qCwBkP`LlWaMm`l=T@@R(v% zEn}J_ayOu2jRn`zQ46YnvE!4mHR|i-^fO7@i_mzpsOOdHE70@1!4aX7T;{-ebC8W5 z!PVr}ZNj*tNmFXTx7xOxL}w-SHq67bVwOkkPvg<2+!dm>l8)9{tB96g>u62Y*5qI7 z2o;k6Ls{IQt!Y3sq5RbY8xa1I?>UPhtKppg+2=4|7o%eRZg2)xx(WYkzPJ|FA>)1u z;eMV$zwbqJzdtCxmm;>9aA|bc=86`!m!eCQ7 z$|lX|t%eyMjaAQ#;B~>}r~t@eCRh0>ELR&gJcqXCEw<{K5%vIl>4Ce4;Py9uq<-~g zd)kvCcYIZWHEfsg6N;2n)hp(^Z3sl#TlUkPz}G5iq6Q&wKuOm|#El)CDQ|q?SJcrO z=Oe&B@~Z3NgZK>w89WxEI5BPE4nzLW!8^v0nH<5P9&}PgDmfC4-<2}8@a)K&e0ZVw zU^zDt3H|%SNkWyJ>L=puhS31TZi{i*O<{!qEmt>JZb#do?F^DQVx35^zEJz3e$4cH zKf9Ge8#NV|Xyjos0S7wwRJ+IUOo^N}6W`_Rje}h{BUXol`|HbS#xr07EuFnjo0pOr84-7bOkNf^Jcnt=n*r@UmpZ}C>aaBrYBryc%watRd#$K@O{ZB4>2 z61s(R#+rmI=Mb6UXvzFm67|gguGS?@a|rd(-aEl{KeBhK29@*-UFBbAaaWp+BCh!? zB`pLIgND05K3e#zdA5vTfZi1g)}c#As14CVvu?ABVIMJ2MP&CgHk(#LTl&!)TP)df zlV%{NcU$}=0nFM()ox007cvdHoOT>2>ortb9*my=%Oh}8Q2*ZKXhW*|+zaE-<9p+_aw%j zKcNWhr5J075kRv#lthJAMoyocD7^tFZ7CM8392C>jScjuqxE;MmJGZ=Fq^cqV)9C` z0hp^PylmBZkE&<6luE`juy08xJl)T|x9H(#X@kvbTI3o6M3}%tUSkUI#veUE5PS*R zI+OkF4CTy>ge3mvvCX@hB<9Vh{ z3vWf|s3P@ER&RD`OexJe$*_fb0!a!YnrUcHP9UmKP~A@QTUped*9Jjj+?u3|3{oW6 zWDu?_W4t8d81nBp3ZPfjB$?nV+09xb?DQof0IP>Z@|si32n-QAqWxApgbjk%p^V8$%6}O578U1yn+QKrzxl7aC!o2`ZugO!~tb2*m*VrwHCDF5YVPLdrb8pwI zeVe=jY@z(IW-HQV1XG-^SkeyMcHfvf>Ng#WQ7c}l)W>1&VYwC_U*(!wBem!4*P+(T zw(mRsE>k<7;<$iVl=&Kt26}Uo!NnF6x*&pG0$DKyw;qcP7@j*5eE~xox-6S*p&zH~ zgQaQ$8xfcyuACmBbB2;xg6m;oQ9mf=F>M?es~iczJ{@UHGus~b=1&n&BG#Hv(u5M? z``jw4hxtPh1v&fyX**z+U*bvNJ+cCCKP=XXe}%~)0G2mNaLfrrcAI96Uq!g`A2BT6 zmsH=sA-7Fb(YS8HH8=2DD6!g&P~H< zKUkcqRx$uXW01fd=N(E->LDOovx8DFp1n!_^&X?<1|gU{RG*EFS&cP|Ghcu#B^c+a zm&!|hi#{gz4L{3+;nXWHhMZ@p53PRwQIjY*$~bc>egvVfiG4%eqggIf!6iL!goj@S z5Ni3<{gJ4oYO~DzNkqV9|y+br=JZ zM)DUM@Q53RVTD-Dab0j@Ydnha*O3(oz{ zr8o2tL7>!jsAXLxjX1AAMI}moyJXf6wyUB|Wr<-SV%FMUw$-C3=d@qmpq2u?jqG%R zwxC};lL7yH@SdfKS({Ryl}Tk14ZO)%~j;#_)Wwje_ck*v3eWS`}QM-mDgog9@Hxpt;$fW^#;w9L1}WK z^BO)-8rMe1KNjfunsbxkU+aeJJNm70J5}b4y^W-XNo(uP=?&Vi_~>ft z3)Qbq_Xe$SRnq-FGsK&e&ZAza^CdfG`7MGL={Y-KK9aKe1zZ1dVf3jd5xslbL7m7c z^7I68!dSmAhI*_(IdB2Hr*tE^3DM!!qE%mY!6xN8YCE8aK(aNnjJs$vAWzWxx3SJ^ zXGHh+bG_~=HoY5^ptJUFRaaNU)52M=!})s}pV2mIF(0sTD2HyU?4ol#67ES4^_9i! znK}@2e|)?|DvB{%jF!A@J2*!WR}1-mpV9Lnl%&MWbInhoQ5mrM?HFn^RTzWUww(Z% zj|*dbSd(^;Ck33?(yiVks2~zIk6_PhVxXS#`-;}_)659;=V1QqD_|U*?I6y?lKmMi zMQ2lMhsP2ocP?gP#7%k3&c{&Oa;Jk(+n+00(%tXPaigc{)HdCV7*tn$a6wz3#eEa?z&DM}$+?$tBm4n#o5!7mtE^C%! zfNtw$uO|0Z&8bkj+Sort4BFVvLF8QaL925Z^*RQGIX+gOHOpb6D4zTEzc%fbwO<63sks!b`sY!QbYVc#}sr0NL2MGi$w1ljW zH+O;ehx42F>)hAwNAMm({bx}7kyq;LPF5@Y1D9v%TeRl~{)v~P?(R-@YY8AaR#Q^- z>4mdEV$~;dtQw@WMOEnF37KIdUJ@fJbs3|vyx$=_T8*Y2ev+8QpnXV$Ds?UF2m!PH z*Y_($(rU<|eq^65_taT?^5`crxIm-I))f~E3r7lWua)#n(Aat6)<~O z;hdxj?x?ItM-8{8yo*r`n@1F2;D8)9s5{y$`8sLv^_jjRUbE|~KPdvSN|iL4Al^L6 z%WTjFkAAz{*hqg8WuWo8l3#MP#G+2j=wN^ML^t{7)V=cVf6w$tYJ2?dlSNDh%_Rz{ z9-p*B+~-QU7!j0fjQWfD*{ybq_CHahz!Z%2B!-c^t4vRYXK}!EU(dVqD@7NTv z*p%zOPv?9s@dJY0b>SGif`-k0t99<TIdf`pwgwiw9*4t?K$m?I?;%~BA)8_c^Z?B4gY*E`ym@33gc+EsuRnX#18O9!4( z30Wc&#p3kJ^8<#L7a8iK=z8Y4MD*nQ*#L-G2kxO0dgJx(i`pQkrMzzo&^2^5X0lPY zY4u%l_pc*nHdVwW@d1y{9IrPcaF~_DRmnN5v_wN^S3Wj;n7X3k9^?9+R~z&q9`#quzlE4sHKdQSaFlSWC6r_-IS~vV@>Dg zok^EMQ60Y?)phbTlxjr&uO4%435vDD+2CKw2m(yfx6|8L7UvxloB5<)VdO2Gr8PMD#@SnBq>#r zI2NWP_~Q;zA4kN7J5Y!7)vnsF^@;a_%ez`U5JzEzY4efHlj+NM)k|Bs&_x?k4kH9L4Gn@VG_k_qPzQSMvS10!F^!20gm08b_ z2{*lgz=#Z-8q9xJ7(wTmABa#+5}z{$7pTnuH{;ix=BBB?{yg6H?#(3?b9yujx`#8m zd-b)S&Dl;6z3RvEBr(51wp#8{eP2HSo&EX(t8|vQvgn)SO+=DjD~c5h_liw_K1Y8* z=Yqur*fH>*2+;jj9JS=AP0CjlOOYncyTYYs3OFw@KI_WdU=~mu^9eyk#31WT8myBi zSqAI*GM1zDT(Q~#yKR5Ev7xo)p3W4Tm0clpzN1=Cbfa`E;#Fn_{uX`ehb$aeDmfHy z6aK^6{)hXv_~XMRAlaHQTM$`AMZ0JgR4Uk`b8K6x45o`^2NrYx0dSJ01tKnbu6OT` z-j~*!U4!H&GovYTiVu|S4Z!i*2FmdPe%cj~u@@i_;>@3|()0-DO7GOhYgd%KZ)a;& zr(ZtLAu|J=L&l_E2Ysyq)ac_8YqR&CN0jL7o)f_lnGWTV8H`9lZ>ymC#F2@$ z;wzkyYdo~hz#PHut3YN#j8c!Mi(@Jpwq;zWtaI3*wY`IlU${G~3pK^W%p;;=EiTc3 zi1#V0%6=U=5^Fy#-lDqN)96_Yx&H|IFr8kl{1Dbojy%^TYlJx@6+V`7sUA%la$;m`T-mj1X>%Q--iQ*z(RRe-^mqXn3nQ$lc)KG)EZM52WoVVg zj`*Op(#kee%c_jdM+M`l@)gaUi1BM0n$;@&p0sT~Zmo8uGjL+Zed4Z^_~7e-=i?N7 zvY0D3r-ZK(I?ywcrE2}`e*?54LfPy|VchzZD#g)(CGNwDjQRD{Fe+*Mef;Bmq`Guu`G?+HC~FrF8-Cv0Q;5}=E;GW7W?@3(5igq=-1hm^j9 zOb+fAt$z*^4}Thv@utrm3YR7E3I9nD0nIh1!Yu4BYbznli^GDIAVGI7Py&r!XWGFs_Hsid_5KAZ0aFsTU0$01}jy8%X!} z*iAwraoo%hvGYM1ZhbCsUZIe*(A+RE>bL;vAsCz6TE8-}dI&PLHc@U2)%#blx5gQdn(sWKJD>A85bHB}PHIG0(`B@5= z?=F|2el$9EN5HnBz&a~z$;6Y%f5Q0!A(-7rkKwY^<1aGI~GT|p7B*oPaVqHPd1CIhMduX(jegzRbWjgFEi z)>qGEBNCMJioD^ei(6N#ca)qjic0Y5y~qaj%An9$iz;^sR{9pjqF{ZFdGk7lv)qpWLlN1bYW`ar{|Ie$&iwPje<+k1L}X1BX%%m|1R_oj_=p zn#Z6esp3()A(Pf;EcqYBBiJRR=0_0maC6?QbBGI81z3)CO>nxH*#~r8MAM@zhtf#b zvRzS1;N|7B0k4uJQ9Io)K@F_rlJc*vr+S`Vq}e%#C+1=9OP#|%lT1KtHePI#h^E>CoRt~c-MZ9ysMGdJ;w7?mkBpZ9)-%Z}05Ul{Pu@fXiyA8=lGp!8DCdGNU zmtw`<6eo>CRufEKqP7x}5bDB;mwCV$sX$EWO}LpWHSJIo4FTAecmm_i0#NXT3&%gO zp3tHGIU(yxz4?EFN~Duv$DyCgP-xlD`;x_xYq{nc@-NS#rJX;fFoH)eR=G%5y? zL(s7#&8$DzfFVP-<^?3i?x3CNg}2_#SryA`Vz&0h%v+M({7Lacz{-vWcL4s_9s8_2 zLCA+<;ZdD*l(?h;jUH^DN=KPxd}{5e$1o=bP>`j#jjM_sv^d{83Ce~R+rP<* zlRVo5ZHC>|Z*AwpRjmuuI*TFeQ(1Y|lenkA3vU%EN02}o#!9Oz<;%3)2#4$&S351% zFgs7-IU)skkVbN{E0ar5HQ=yl+@=&5qDVDWv3`~f1MJrQR~m@JcE@h0tL;!?jZqp_ ztLeS;=|?!xIU1kEahwz-g6#Z`?z#fp%qOe+>A$c(>kqjgJF-}+)Li-r1vv(ShIC&x zp`{+6*irj1r!`eNBvF{aCmgbr$UG0lH_iv>JKYfDAJ*1Sxwt3efuwi6 z2w3_QIQs4bZd0;?1K0*YBfi?MlN%UwrdVGB3DQ;|&N)I)Y;M`xJ(ze6P6$YD4)C{$ zCV-S$D6l&RM}B^mUk}XFHz#+NSC5~FMfSYpMl{${q$|n04MN=xo^+TXXoBz`W-}PE zci{vnplliibygW*4xJ^{t+W+zPy9$iPrNk8t@NBx--z=8CZjFyA~*yVxc9M;Z`2n*h_n_v?}iAWK8zq*bw zsunvaaA+g3X@pGi88|$>WX~r76@`o>>fxMN+c2jI zOS+>6q;bCu>@A*q@u^K(8t=TG_v4q_D*ToZ?jA5fpm5Tk_r)%8B^n^Cm`B5)96lCA zl*A-hFDI{9&0O7_>00!9CYaX*?qqr;GSL<-#95%c`AHEcUM^^ps(=1D)u@1MYm6p7oZs=X z0g%E+ej1ZOI0g2S`wD)aL=T)uiQPH^V)Y1hpp1jQvs5U`(Ryo@!{PRzbtyE*jv7$+ z%?tGj#{f#05<@@u?(p?Vffr#U4Aqx@LPm|~;{x4@sBN&}T*Av@4mivzB|VAvLXJ5O zu5xNC#JYH#1<408Oiuw)1*AtD%r%=LOy1b7g0voBE_!nh60^>L4d|ruEZLw_8n0XzOV}>%hpMP+F`F;uOCM$A0HUIeoobmL_=QUrefC<{d@UU#U&@_^We+jZAV1J0O%95>V1QAWjC~5Xt`0qrE-T{jU!4K) z^uj%o!f*_gI*9=+#Qik1I=Hl=5fS1tffh4=#rw`D=+}~4>mo~@G&STn2kLcy4t_j} zyH+nqYXaq0!hmu&mk95#s08Ms{RwuA)B$Cpp`lnRr8n{d`8JDdLZKtbDkNfH)UXL^ z(q@bzU_MZxC=tk8Mx+nIq;($%EkqH0;cNM!}*HfKmxbI7aVR@gPRK{Vu$cKD6Ts4 zFeowo_rEOSpo!{GS!ejN2FCLGh5-6Rhtr*rLrvjueKE=C;A~{D0e@MgX8N5HK!Jw$ zv9p8%gc;w52hMc~YZu>;ONZz{4RB2dYfAUCaY zpx7f44#We-%WJ|!%8P5}NOeovY?%hgnwOB>Z-(93$|&n7oiT|w;|fZ9@oW0ltP6?u zA>P|qB-FL&^^$mEoA&7>CZ7WXKb0szG*J!K7+%<78dD6I8N*&Ata-+ptVH8-5B_w=)&GX~m zOO2Q={vvLx{_Bsyz^}yr&3G&!iROw*_YXpqlQ${WW(a&dR**N%`ehU>QYS%X|qcb^4I-S#c-3ZkIv9GpuzGD8K=6|G>v@+C7>gc ztn7|Io?ncPiR|7f<^=L`QQ^+N8y&u>04}8Mjs16wvzTGy*s91R1cZOYewrS?H|lDYUxGe0e6qjM(~BKY56)Faxj{Bb@{QRDSNehpeZACkK#dh)!oGS zsvk~wS&@eCNnDBtg_dNQxB$UaP7S)YGl6{Ade!?%fy<7Ojfhk%C4?qbTdXoAq$OL? zE4&u!=BXg8bDzv7awU-Rdb%!ZW&dX?Mtsx4ziB8+AZtGyv-{%$N)+3wXrv^64<+=Y zrN+!il>xl9vWH_ED)MUQUgRYe>ykGR2#sfcVgDkQ5U(Z`b&ob>AbH)OgA1ZEigVGh zIj1s|G<{v`D?56f7OE|MF_r9MbL9ke`5yxdnB{->{k(VdGTJr+fq^IjPG+`@zf;A5 zBOcF<$Tb`QN(Y>}SVfyx&`m8|AbI6rd{dZ>CohPg5`f?ynbf+C65+H>Q1a$J$!EOq zuQl#P2ERH8IM&OBT{BUME#EAhSvs4R?4LQ;hRpZVCrZm(jm`2U3J#|!cB#VjiCl<$ z-V?+w3E0{+@bTdo-sBAM+RcyZ{5M4tglBOc=LGL2@37YWcj=4Lx=6@JMTd#Xvv2z? zB@v%OhRTL8#Z=7AnI^cN?$J9$8h+~_7RX~S7 zlV>lVYQzD#NS2;OX}~EZB;_B_Xs(%=-pGdX001pW5?N%LM2m%fzCXrJL7JK(v)QxR z-pM2qF&4wV!4Zc7`%Pz1vp?KpqVUH5oaTERWrqe35Z$fP+|J!;LZS2j)M@2* z=N?Ky6srbp(acQ;KDu?2>})j~l$7?loB%rL^y=zVF#Oy+wEhMSF#yIrQfztXFR~RH z9PPA^ywy?l%oT5K-vird+NObJ^9(erC*Txz0z}S<7K;7npIr*s@*0$8oZVB9qdyi` z$u{JK^-~dy3FVXMfJ+A2@uCdM+i(HjZYh7=T+i@YbK5VUw`F*8!}8j4CfX_zXdhd@ z395_s@@RjxG8XmW6VWdpX&XCm0m~Er7Glr2g;luz;$_MFKuu)1sKc3oOI6%ml_-JD z&g0ek_9N_7dh{Fwjf=@0Ba`e)%Libr=RzEO-39^%q7ZWX2gK<#r)bU-Q~v&`UV4;% z&y2-(_Jv-FoSzDPlq@WtL^)$EmF5j_hgQ!riL`bcuAyv-@<&WY4B5TIktl4Z`>$z{ zmiSrU;J14dANrKNbDAsu)q`v-4Sn%|Rpx8e(s}(&po^y3I(R85RYy8yLW5h#4z*MZ}Xo zDJcc3(CFr64@B21aWcG+ioFZ1tK2XDS$!GV#i)Hsu*fGnPe)B?_4UyB__kpLm=ikm!#A}+``U* zo&CN5rCT|M1oBr_IgGdjyu&bMmrBCp>&*a1D)Y$F{pq#*~K`bl*Fn}{ak#Ep(++b0lnIcyJ3gOCdP%~|6I9x+Q55c&G zTpX8S83xp9Lh7U9C!gXCr+<;oO-s`j1>zNbPN5dElpY*Po*MKUg3e8pBA#WjE@8dF z8%woli}@TS$dprZ*ozVL*yn~5pXe12r3T+n%WsMd4usrP@WLV%NafVdRmb?qjrL_T zBM_KS&X{!#u!75;#?z|Aul{TTdDDARDS4m&5P~eR)l9JN2FxMl&d_*Ednx1a3g0cr zIS3RlhO1oacM9Tz<(}>q(A2%6dcxq=$59{4WV^L$Q;Vl&m9)B_S##vF0VUvnCJb0BH=zHMMCnvtw)w9TkQ=JHg9Nfhj#xQtTY#Ik-=?CdVQsp? zMew&7WP9hbk!21OonecpsC4f74CKG(;mgjk>2yk_0>e^h6^!`?Bv8xga`~Hb%hdv{ z`4yVMHiJMN`1a=<*TBPPUwhm#&Hi{i$_ngFE)~M@QA*;!iv~q+u>ZQCmzuBWEh?8p zQI0So8m!8k5dX^^%NESw66NVohY+pd$y@sw6-iLkJ;E_RwFsilmn!iz>c`Fo89)%J?x1 z22pj&=vf2tUkRvdzp1b(vnL9l5@}_XL2dEl(oLznV46y4AY$0ONKiMdzI5n0rFt+A z2r70z0Zg=teYtaRY`Z^&EO^Sou}g@0<%E)peDui0^0I%n0DwvHcFWodSOlQu$_y!k z0_M>{)P&>DPPI65)QJzNpPYIM@m-YBpNf3J)KKw_oY0?!Ogu(N7|ze2 z(uk}@W;b5bJv??yi0ljHyyf~DXe$3T7U$rA5nnAEFCltXL}^hooSV0l2 z`Ll(iY(DYbD!4aZcr!lmkmOa7Z;wEs`@-Mgd?_qD%y|Eq*F=t`xf2H~J zM;MKk7OhFhnL2qbxW&7i)vbxNOXn`ce;%oJ|1#ytU6D7%$h%|jtX?W$p9a20Dmt>e z<93|d=e*!Aj>i5bSK#FVQZL&=mjw<)buk90$|{+^JR=!FVU7(WzK&GE3jq4lqn1VE zYUv9s`je9;q!2xa$ewBW>RRzbgR_gfPji~C?CRpM7Z)Y!Wapg+clIuiwXgtS%NnVr zvHsRXm8G%$+5}cF@mA^9V4Xbh=RgQj@R4haDOpzjAKlxK%-(U8qxVwJXKK>em&tL9 z;g5~#i_y&fCt*y&rt8$jVTX?IvjSAb+|ZoP2lInMQo_Dqc)G z5nUVq467|Q!cnV#GDyPyol+MfP5Xz=nT3u>W*Eu{6lqNE;P4%FsPaCE*ib6b&qzeD z;HZ(vtqhSvIu;I1rE0Zj5Ee(-VpkucwPzrj7Q{V=n%MW!lU8KApQu4}j?k)E_n}67 zJy6uThTqRnqZwSI{E#|N`I@6Ltt-;22d#M>nVoK~s)5ZYhH z*N-`rN<^Ko6{cxVIqo9H=vIof7OO(mhHRSHCawqFj@)ag;&=gQLta<3#UL>yOFwtA z1r?*WIz7brgU4#v*rfT-gxyBv|Ch}9W3f`&HDa+Es>Xv2O+(l-j=8Vv4NvE78qdPB z1}3FaOKwG>s@K>tKHCWXrY>$r=VYvb7VFN9swC{ix%0s){Apxi2q63gcp^wKy9n2c z*ZIrjfIj+~{sZ@%p6y6z5!bJyQFWVFF>gSkZAL-s&m1D9W~!vOqdBYD3q!;^BhPd6 z99JM(cC$4y{+#-5Ufs^yPG*F+a!lb7@`AeS4<7QU}$CrLEKk?50O^!A8Dt(7Z2TzT1v z6~yB)cEF-+D>`hUIh(QsG8ml3>8MiPQ5v4`*w41I)Se2Vsab(lQX+?r* z0qme%d352tj81Cvrq=I#Q=xpftqJVD4Qh8j*>iQ8u|hRdn7_7F4qMe*QQPk7Hcc`> zJNOEIIp<(zbJbidzu#y5Xu?jO34fgQ;0hUIaL_t>AE>8>>hQW0uSNzIP#v(*4D6@6 zT-@2P=sM#@cboaD)!uYw&zzqR9@=zyxUzO@(5OUaK6O?OYn$3TGInP;spvi3J)I94 zHS}aU1MbRlnxEKkWiJY1oXOPE`aXXc(?VIDwi88jW2V%vGP>^}+w(TLr+s`CydHHm zdVh8W&g8w6;&2_j={^m0=Sh}va{VhkfH(x!hYqV0ue9XL%F?O=uxCCq{4c+5Q70~) zqXY>-%wGOm2+mK92h%r+2)Iw?Cc=jWQVkwf_|F}{zH7_@B+N3538J0A>Nl7ViqF}d-vC^Q@73*YcI*nJBb6!_NSpjk8ag! zWGB!7tlL7++Fq}re4Dx*f{!O5*qZyrF6l++$I4e4-owjTuYQEsUS1H%!;{)tdF1n# zLAy>&sby3D9nHpMzcZuejtpq3kxx#@NF+7m!29*a1+nm6vQKSlCz(_v8^@QC95^}5 zTja?F(WVQFLA@c#!C^cbSt8v|b^uuFKkWCvVDN!oS&!hvUqp8WI<+V3KI!h|lpZ<@ zk=A|rFHNX=s7yTuLu z5odi#b>h{yhStf}vLb_q5-C_0*QG?fqJgF+kB`5sSA@D)uhv|f2KY$i_4bLHeAL`9 zK^<#-OczZM4Ka=~DoIP=hBIL)XY5H51}-53zoLYKwwC_(UE}Ii*wHsI5o_zRBQ8?Ij~QL z2&Gb$sR<%Ja+kq@q))$-kB&=3$F2U$pFYg5DmEeIrW`gA<&A?+*@(m*M67Y^SC?Xj zFD)*cM^h~C&YEp5CbeT7RDf*FPP;ajF1PBC99P8!R{E1l_n2gPLxmfZw+g;G5_wRT zs?oqZ`#3PxC~wx?WEYHjBySR^W2BwI<#}f>InHu6?e#|b5x1#);8>si2cL)do2ZA# zhp1oRQ_M^3Q`D<895ec6tlq)qE^S1eD9SFlk;#XE=DswX0{8}5eEr{X=n>E)UF)<( z?uhzvSc;BDLd+%}bXO4b(&U5BJf-44{?~>L-yi#iPqu8Y_kAi}$xhQ@_4gyIuj$m* z3)_t=Aj_W*Y%0d>VdiNK9v?MYq106T&l}p$1UKvrPp>;$_RHRSwRKr7^=Cm^I&MBC z-ia=sBsALdQFW!)^s|>hQ{V5skFJ;5+8z`{ZcJKPm~{xouI72i9>=8k9hvCehBO>= zNS>h0wSi+6Sx>x<0#r$u>^CDEaA7^qa@eLQtyina9o>i8oJ;@B%e4bq-K#CPP17Ef z-HoBZo0+JeCtHS%n`pS*^`AlTuPGcR#%D6J?%s z&DP1gW0hJ>~iwF50@WA zPaf>yE;$Z=@h+a;^>uP^SS4J4=yRmsaI-!>=^6DukzVb3pQsU;Gi&_j57w>j%6Tzo zeXUTUmqUk3`#-<+x%a(5{XXAD4cfJ+Tz$Q?TyQZ$rw5>ltbu5uA)!*>I6g*_bmHGy zh$0~hze&XCDl|iut+=nrvGJgRbTL{_6g+2b^e}LTUBTw)r%CUS?!~#fz=O5=i=l!f z&3kN5RC;Vf9rsi$`UdSLLoehQf$~ibC!YYcqP@m>;%L|R96;}lIk#s1*ogLs;`Tj_ zy_^BH6d=RBwp(Mk_}BHl}w;QJ~Z%?`7)iSuO7|1O`&Vyfe z+^aqlq+IV?@(r&-3pF2ni1K1<O~bl+e4A*XQP_jHXWKVa`j=FNKhH4w z7&mk-QF?gZS%79ZgMRh0yL54o8~KwPL%G9-yUzuG!18DQfhcZOt|rbvXOqtb->qi9+!N9{2zr{mG-s`VY@>QY@F*Ub5tO=-|B^pc*r*P%Zk9CbV&bmKr0w{*8|k+Aif(D-)18b-*gd#_dZY75D4a>PzCTPj>!Nddhhi)L767ghXa2Xos9!t9zc4wMyRA+2NvRk4Nsw zt`CRh*Yicsh}=P5nKnrAw26Et#5s#1kha2Uga9{$w&Ig_k_8_~SWF%UZMw9uF4x-! zuTBoiM`^A|DeegGO;&exN#>hFJXLPqS>Ya_{`4h;(Dm>+goif($&t+ zrZ`UN?rQk!?u@Q7t=RY7y8|$gehTi5m-dn6Dbd@Ec>1|W3W~*64yU`p|*d|~|=ZE$KgD6g}9vN`|d=`*a98H{= z0MT<>=cZ3QX;+m*PBXP@e9iiLfA9Vzop<5LAFe&t%jOzEV1EdV@j)7)1)+? z?)m$O$mI$EK|qr;Ex=*-*ELk`>U0zYBgoGW6I@6M4!`eZ384OUjvyW;76?^=ZqXAy zR?15lS9q;0KUP^pKF=pe>xzKZWOzx?~xa<*6NukuG1Clb!5;1*=Aty0ok_y<)YcqYXeBMe7YbyPK>%BJm?s{8(4$S z@vz&$ld-1->9qBFzyC@Mi}Xznm4B|>$*7jKk~~*%hA~RzvJ9o>$P9HHKAXO--SzLZ zzrL+qA-xkdbOTX~*??U&`J3gu-}X zdAppH?ZkCyd^CGGuyJWiy-J7j%BneGj3sj>X0r3kmmr&prUFL-@aZQATUqFAqEz&z zqg1zaySqp|qww7VVDRGD0cbDGPs$!FaS&BnywPC%95B01=W-UB7CS1lr*`IJ*^&KZ z&r|qcbbSMOWXsm*WHPZcv2EL#*iOgn*qE3TI}_WsZQHiZi6?%UbMO7%Iro3>`?~ku z#a`UCYIUuuoUv2TSIJ^U?~I~^5p2B@HW!+Hd#n$}_YxvgnlWjqH~Qv&Si z^z!pNTvOrYRruDoK_lvJewYA)&#bVxibZW^I5_KdTpGFT6NE4z0g?fhB=qA}@hm#M z8vu#j#?vNAqE2=4cx2b|5~_2TpoLNZoK7@eC_?n(&-z82v-f7qUo5ER{mLc^+(61Q z`|xD2>d1PGMW7X{OgD~SsZFJy_K8iGgXzNBL2Lh0w#gp!SxWa4ESp|cc6T0n*k{CAV2OJyq5bDg-m>W zebx6z_ZT@7-I&VRd1F3z_vDH$_`1OLIjYANjW-LvRg&3$113#6w$lAkE)Z*<^aXHO zP-^kU)AH`NC@Z|k| zwb`Rg2Y!5el}JCTe$AyVoq03JYcuqE!w;oU1?bj80lj8~pvHwY#;69y9Y)~|l)ao@ z!G#kIv)i(HMCZtjCMNDTz9Zo#+?pJ)e-@eh99G^*;lfwOhbUpsb801nlD96N)p z4>5zQC)2n1Q8iLT4bWjWQ-hx}F0uOEVOnyN*2_~N_1FQbKWq7f~AOZ9X%D&iqE$V{MN(N8tb1gdf0q*O$QDH(M^o+xGeiLM|lxv_!ctBU3J1=C~HKvx9| zc#j+lxRc+&H|Y(sfp4bZk9I&;r!Qg2`#bnjwyve3C-Vl_gNmQDq11RNM$BAF3C4cn=9gm zPH$c%L$ES#$`y$!vEgNi%w+B(GStYJ_E92s)gW5+#!k5w1Ok#6w`4xC|Gvv|lqdVx zc&@6q{jdx{WEJ&w;ImXf%XlNi>t+vhN@f(sqZVb%L0G zDW)G6<0n)f363gur|c90$H#0NF9n6}td1${wM=Qpm-(!KF=sz!3SQ`hQuX!>*UgRU zieWY!iPtw=JMVaaH8J#9(XbSj5Fr0caB-92{Har}( zDWfM-K3?Dj{sQ^J8+1md$RRR_cBtTLv*y?ps*zbTqAfC66n5DZnK5P+57go)cieR!B9r zuN-=J)!VT4qdTw#LpxQ;OvhS&Vq5uSKTFXW1xv|PFxwrPmm_MlI5LqqP)Yx_G>3Og zwAR(-wwiQ@rooo#NvMXQumB=O8T)yd-0DW_Ij;mopb3@vP-1rMIfNZG-GmCRH}2S{ zK$3nOtU$lGru&kiR+JOq<>GA2F*SWgc*8eWmonNL94Jp2--wBIV*aJk?hEz_RUC7qt|OD)Ct%?V9I+Qw zo&FfsNAw`$FJzhtlKO6jW-}uJbEV}i_HcVXgQ9XlEI}*O85bE2cr+DM1TM6>sK(TE zWr;o3tdbge1}K%!+iXe%Jywy-*FkpJ1JSD{l1u^lhz^CxXIch92_VZuW=?*TVl}Dk zcUn1FNr-hl)PAV2D?-xY;k@cNe7^X<535>E-`jpL zo*4r%;aclcx~y@#t+y!QQx*1oG1~-_PeU8Vi_D}T*w`LoS3TN2G<|B9$l1fYY^0=$ z_;CZ4WXKg4RJjwFSf7;zZH{*KoP5hawb!3aV}q{@&Zf#@$k-eWgy%M5g*+`??57=# ztNTfYw7Iw&5u;tj8l4@C7n$Qjgk+syO3s~$vRRjq`JOF&b`lC>z2z9TW{{TjC9Uq_ zX&r73({Gd~`*Ny>)nk2SHUPLj@HF|O++HOEf_s7cS1Fg-zu^hl2OD2|hu}O{Z3O{0 z!^uh0UA3_qt99Qa)Wz`V!f`|;ji0_y5wgDw`LsLEs%--QUJ&^!48MC0ojC}1W=sM+e)3W8sb_;*X1p--Xbe%NUuw=eZYfhb9$IMU zAG)X!Zl+H{Avu3kYQ0e>tSlh2%<%X~2|E!SwH9ng5qTxI++fd`0WKz0N$9OAYxh+l z!C#+SdA^_pspeeg67f+sA+PhU%jo|M;`97Cl6 z`{@PkLF(geKXd01)_2dB`xVU=3p&D_of^^tZaZ<|^nD*8B8)G3BNrH^(gv1LpFhp3 zin1aWaggN!dg+tA2mKA~WnM6u8hPcHnW+GJ-Q_A!okvtxyI*MPjr3s_v))#Uf{rzs zpz7Ry2MpVF=9ouupJ30A(6cR+Y@>_bW&O#(!k8b~W|{sgW2y+AE6vc;Z*6+2NX0AG zy&TI+U-@TQq{$%t53=a4>pB8tQ|2T81i39?8|`wdt&76jU#1VSS9=0#(nE*kx?c#l_UO7_((Z-+zid6z zsvH91n{^NmYp&gf*JJKS zT?wr5J-e7nSk*Mj6sA}KvtZE7Hp-7pcBY^`)SN>5N)78@LL-3#u^tQHG3@Il;d>F( z8fDx|V1AXQ{(A=T%OscO7#BHGX0dImM!Q@iJtVrhN%}FB*)-DEPI^AvmoSG(_;Na7 zd(%=UQ9Msk<)CwLyT*%k-ahis#>kkY%TwHP@1IzqTTm+3=h*tG$MRi5?-Vk>PIrGC zV6}`=*=eEFc5WKiP`t@lY=xFLg&Qz{k|KYUA&3CK$HsbiUM6~FEN4T(H%g_*!zCm| z(UFbGydIPVZ>K#!n#RdbK(~chz$tiaztP`B)-y|m)H@4j<#E4@f5lBB#||nQU<{Wr zurs%1md=z>=s4n%L8qATtImY-=#=aAi3cepW8>(S`C#D-g zYG2#j{nsS7E=%G!?4j>Lskhk*yHuLZE{YvGzxzn2LG!`N|I#n-`ud`nzRt8D!k!WE zK>)Oh1jX}|b6(TUxLDqmPY{Uve5?G0jim8FU4BT1;Nm{n^XA@!vSZJ}g+-S;{C294#D!E$ekf{zr39=2AS*iDn(YRBuZ? zW(52r8l!#6)~0)wWDA@1$xD&M-RJZ^)(WX26aTP5`p)2x<7w7LMl3X&u*XBC%YeEq zI~uh=0-mRE^p+vSTAQjlUDT?49##{qeW2b;gvZc+%VTT2bjiKIk9MYidUraxqE9Fq zpi?UhKh*sY4)3ry(pJ594?k%?8JH!Kq5iojzZ!i&LuYKQwvK6iVLKeJ>Msh+l5iATZ} zm;wb&qo#ZB&wbni@QrT+Wty-Mh}L@6!ZdcrCX<4sMnS0cuIM2R z5N)zT8k(QZ1|`Mbz-sC7$1Wcu(|V5+{g43L_6mlI+%ZcR&z|yJnx^f)F0^rv*g8$J zzXlO2lu14})AWdpZR`;l+Sns8`LDui$CS@6`&%%Ku7xKFHNh^JRDt-x!5Jgb#U^6+ zoiWfsuPYw?ePR#Q=!AjJLzYJ@?TDdTt8Eoay+ODl*o3>QgUGkBv17&>AZ4*>jNSCy z;Qw7nL91bOaq|*rjWKclWdd7U4>{qxh&aaAl=(H}6jYAEpSmUbHf)r;W~zgZBA3qN z?5;hcCwC96nu-BMjYFhjLE`Njje#wv{bEMyv`G3k1Ik9Xt4JFg)?hX^aN4A|t-M-8 z<7&%Z>|7>J!SS7&ANWdlvWA)+EsidGrl)~Dv<5HlQ07VU@d|A%1u2WBCM=4=o7~rf23j5t#(lCCKS4 zHugo2(H;~W8*8k?Ui4AGK(ZMXPluUG_r9i-CKQ+rg4H#% zs(C;~J{^V&Ah#-?MvK~cd)$`RQQx9YL9C&7zPEBD^OGO@^PUriwd-uh26G?I1pqkV zv;@-(4VI&0?g;tEcNqztU=?2-!N4Gec?%E3nf3MJ1C6%6 zEdgqEmQW8WA~9Q>mOk)(VQbRpLi>7e=~+v18)_La+S?|mqj%=aDm@)9SlPB=?`K49 zv?JZ*I~&-M(K&|R#@k0px+0mxp`(3l-IUP6@O4qqBz(q@UrS2cMd;5(%yJHi>`lQ( zZ3jtq`;$WwMsEDa=2;X64An7IPTkqxXrxcE3X;Fk#C=arg6aeAefXeQlE(X_3D8D3 zrKLfui{}15(lb=MT0%r#yX8svcQoK2#fq`;SUR8AD zZVpVMIfF}RL?<(OP6?d{Q%g=e>ffqD>Z+ zf}>yTAlRhtQ#%i%m4w2C3<%>Oq%seCNwXB_yK*3Af=!MKa|b!PnnzW^>x7bTuXL-E zH7azgtCZAOl*M_jG;>*uK74KkuCJRTR#hY`KG$_p4_wA0+bRj0=9fbgYSh=oBmTNS z%AXt6q6Aq~M0Y@5q_AA>$N9k6x&Ll10BUItmvHN3TVwvUj}~^_m)$139E&k1{P={8#BNUjvtsRiS3D+xvbyMuv`O8`gXrAqy<#KrA%6(D_{jgTQs+ zwKfj_&}U%#gkx$dRo0u7769F>tT-Upg02p1=DJe-o)o8`1EdCE7TT|F6DdP(%t%&C4 zwp?jFu>WB6uaq*klb+RW4M&rurBiJLkqby{)t@U=4`_|b(u(LhT(lS%y~#A#tf8E% z`lJAcs%6|qSn1r{3i-_M0uVqtQ08cj@IQVO@LJ5IkU2rlARn_lw13Y1!7Ff!=X0Vp z(o0tLak)WtV&wA{^wAr8WwvQA=o2<|uEij;(8x}%%(-+KJhVv7M^kAhvoQ!W?N(_% zx0Ti~z>N<26qPR|6wx}q4&`n(huLN`mFygS*fX0r=-cu}n}!$h1Lnt;&8{)Id*+*a zY(pX=F&(IUq`^ zNlW<#SVfKz_7m!4f1DswdThAN-I^4KQ;cvMIsb4aNevQNXDz6cHH~dF$~sf)pwnJ< zqmz$G9W`lBF*b$sd!$xei*)Eb%K~ww`zNDZbXk^>PnAzJln>MAWV_((eUgniIS?Dc zF8dQw3WeN(>FxH3v|>F}MhWqJaU;AJdXk5IHL9*_-IBvdM0oi3ktoH^>06I9E)$h~ zB4@gZ_4}GWyS-fTO)R_@3J^EE8;XccG+0U>$|Cmhp`RI9>qY$>5Zr+LIZ{JFlon=WH2PNToh0@pwgmWH_>Mkd%1x*CSKfb8`~g~C?~rpLh34b&?@&Dd(h zT{Qa+$oX%_`OW&y-0jeKn2>u=+I#zTYN341{IzC{ud0Xop|w&&oMqD0wMD)P@`90T z?P9*NYuhXe$l?L-bReXTH~-`LB4(&|wi-A{PD_qEtkZ|frH|`LMCAAVv&2`(#kZcW zm>FFRrWH}L-Wtkv^T^wpqZKOFYb`vgAi-IxCvgKr`|V2OekJJ%VTV^C zLsuqu)QDhVR_*eFO=slC6?}1gZAZPUs|W8k9@_iu!^XQe5gP`+&R2EC_nQ^{b)APM&xK`mlEIrLojboocR=RFv-THg>)#iz z!fhwfG9Tj3f5`tgN1vn>r6yb+1tv z&0x)m9z8&Qn)#?|eVSxSLaoGzStZz}+{EVL&m9c?>pG2&5^zs{DW`=TI1~9akB07^ zcHez-(02s1%B52PWyVU2GHphTQ&^&aSibgr16F%x@Uz{=T7u(REcDWS7$+5qoj-pC zCyH_GeYKma$m6U|En;a&=LxX_jHmJuF^0Ua>^)pk%x>?^Q7rL)V+^vxEg1 z)_$tZ=sf=L^Xe#(uFSkEPHT5|+jkcN@dmGcuQfVgCN+w(WNWO4#P^&!-6=BZ79D|r zJiyc{&|Wv}m^``Ulzq>EM6{|YnrY6#H$A$sBu>0NT)p}@&)VB}Jd1}`k?2|0;wbAx z1*y~~6jK?UdQR>Ui6R5#Cq-81ev!sE(sQ)8rCTrI|WIL+fe!nbR2B>{i;10(uV5p<&R# zW%EZm2#u`h(0QeJog$t~ZPU!4T5DXK7x z7zjg)*QFnqtkzi}b;o4qa)cyRGo<8G&|>B5qUtn$p#)2nef`S&rk6CXt9vuZITl*w zlGf2Bv&6Bd$J_4VitasTJUX9?k&|lFZQryuLAs9G;B12CJ2U`U5j!(~`i<7y^kY=~ z>Xsgms74SrUcn7D3>Q-y7s%h&!B7Y3*X}8OoU=fo*w_ha(E~|}t1hmQk3Fd?A~cau zS!n}fm)pDrO+g*?XkVY)-PEZ#wZFngMU$gRXCE3a-d{Ns5iAj152`My4@)lZ$J)OX%!u_VQ)z^=?Iu7Y@s+Q>r0M z!Omenc0SD}Ou-Y5P#~2xCu5ORvJ0@j!~7QV^_*};dOK!_;(SaVz_sKSB!&sBld|K# zgk&-R@aUl{Fe|2+B3zMcNn#YHW0xvI=rY?Gpk~;TkfeOCy1GY0>&vXEG@Dp9$Fg@CjhSy z>YFRFR)`!+Z1wA272fu%dRh*FZg)Sw0w=VSvz@-V^t529a8oIjtU{HEi5;(I=*>9( zVr{M7$(w7>$ZQq2MqXZLBIegv^`( z4rzDPp=AGQdP9Kp(YGcaAJSh*+KWHQ)fTmO$G0coSM~B ztjhJCj<#O-@7y0AyXjcs;mfmis`j6mM3Aw~4^cfEXmeA#TI-#?l-|0VFDxxU{umykfM-~ zN`S{ilRykhAaBWnUdswaMUfzh3;#hu;&V(C$^MZ|+DP<&eyEEP+m7nepMX$;C@T0b zK);X>NY3^f-HAznmkf(LjH z6jlA5Hn#o@h$D-f9_g_i6W?kgVfjP#78BX`pPZ(H?Pv3KRZ7jY=@)L&>jI|)uv?Q~ zJvwRPo_=xG(ntAQXi&cI@E)lNlOe)67x{Wf?C|~(w zsSoI;vxDl_bEw{P(hB;pAg=Yf^HzIZ+6r)QSr+Zzk^03mDGc$N71^@VqpE`i7mpog zDH+?Ztnzp&qj$!)UBBnIw6!-Q0(-~DTY;?WZR)hvCH6`aC+zI|=4unhVX43-0m+Pw z1_Xf0Xm*9!#1v*lK^UtwY(zL({%yW z&}yYFygql$?FIas&c;3CCC|x_unR-BXZv=tG>;~OREY~t|1_heuA_&Xs+GPpSw}zb z@Y*DLhLWfp_k&k??x22((b9#mQBUttbPvEvCbI~ywwZrmDbx1;vFFAxFh^95xvyj4 z*YAv9utJNO4bA6V9p@|8wGnti6dn58`xJa8E|@Oc7=w(F2A>DNM1~x=|6VnH1NUoi z=}DW19j|09Yp~KA?%@F}eypio>vu4c&@@U*t=JC>q5EwDQ|hTGLI}U$t>V3&;r3Qp zN$0Wp;?v%N^$P@$&)0f?5On^4z8Q3mO>gm@Rb#Busljcj>#hC_kce_(`wo)=4peJTE{)qTllewBF=2=c;=T~+vEdP}b=8XGY?Hl@2lK}zO(F~`*o{bS>pBMPg z`&$ntmqwZT;GYd-LvT^HI$RIo*Sj&e-S^-{hnGQ}r%K>4x{J=NDG?}$8Q37Ec ziY^oHer`^l;`7rouE`vVu$3Q#-HEEBF`psKZDc*Dggv&dZ#udz;)!GzFzVYCKKpE3 zHI$v&JAUa93eh2OHnW*pHzvIowB~2w#U4n+T?o>Dg zU}dLeLLtUDBXofG^D%xB-ae-UOs|m(d0_+Z-sY?LsFyl7QcA43kMl28@Nf08dM!?I zR_=)72<1BT@Mzy znTrk)rOTSdL>@Z1n8ywg#mj?0dd?VfO5aVQVrS;dM4aK+zFwQ?xp8{03?2#k7qsC- zm<3%ugd-dDrzRNin(!I{T-Rc;n1k#|h**1+_Q z#r+DRiw^$Yr-tGQ3zXAS{ zD?6Sqh}!g4PUY-Zl-M0IxEKB$IxQ%h;{CwkDDTXQ0yq+6JZ|{@ZE^WRD0+r@P*APJ zK!#yzV16F$KE(~e-5Sj$DCh2q-}V9hNwZ~K|8#YnXS5%D zXWXHghF>~i_ReOVAIsoUuCAlClKITg|F(gD$=vkS4`KeOV^n%<;Je`-@c}Wf9Z!|A z)h1?XfaQ{qrxO3eB7Cy>PzRs6oofjByopT^ zfJqh^gjAU{B2qv6>%nGJ!8f|PZp5sZDr1|N{kQr3+qy&LZ7wB8BP0e@>~_zJ+fGX$ zs+QtzQHts>qw=~uG@ZKv*7^e$8-W@J&q?gom{4eE*srfx@bx+{12!nDk~+(g!Z$G* zQ#Q~Fsb5nKE3;#j`K?cplxo03<0%4o8}cwD*qT?BC1(Lpj`-r@m|Uh!9!-8qDNb)R zu_)5ixeE&*#*MQcI$kFQbVi`FuCJ9jgxRH!vMkuYh4(vUkVC-f-a}|yh?iXmELQT# zHKR>_%SDaZ9K!HpfxWF^2P_J3N$&o3stZ1}!*Vg8*An%ao)W98eK3-}vchLZ7c3@%}>zfctPb9qyl-A-G_=!pZx6(D-yvYK& zT_w!X`yw9GxEt2>1gGqgOrl1Sz^~*XIkstiNPM0zIrsR@ODJf{y_Oce5?*cFf!)oY z^ds?E$AKkZyj+MVQ$XQ63WC@!xUJQagh{Y^?fV)AsFuk|dD}pJaWx3e3=zW9r+)7E zw|#>kb)ZIh2Mb^%c$4ykI)V+cnYi8zMLNk{LP;L1NOB_aFGh*cIg&a zxz@1ww~1t4%Bb}k8%p2<*c1FnnFc|%SV}7H5_n3qi`0r?v?rkj3m&ThWt1WJMaktf z;F;sL?08_#3PGKKAt(^k9Ml-p8Z;Y3Xs=nwkl_3EJ8B7@vOYj#VE1NBqttWGZAdtn zLQoh{;p6WNF%q{r1wV$FEG=KV4iAOuR2^kH!-gO&nu882(z!w9rN^Z3?Bk)FjP&s! zj-3}_2Hn)mtjLQbKRbx82PWezG7c)`y6Tm17OW5!^Fg%r9=9swQBr2!clUg>m$kRs z>J-?Q@j{vv2T~R>B3`SewHl^S-y^rj%q3e3PVYFt3#tp!9L*y4$4jtbCQs|ec5~Ig zTpTGS39-a-kM};7t7}MAKlRii3=>MrSzp$AP&e1uC2D!Y4_jedsq7kyt{GGzn4e&P z&L(j;duB^u9y*>?Usv*1yuYo>+GYAHq#wCmfSVUAHAL$+jA>#w>J)p{Y+j??G`Ekn zR_!-=2zeW}oMiIjK0FTJpUbV{Z+N3Wb%#woWKOnezo?COT$yg2~h89VeJ+oQ2%n1#?PXT@wZ*G4QBa<#wC(T?e-uqGROzAhM;lT$?@ zihuF{l>H3@5nlMHZ_Y?_gFe-wymM}Uh2+)>8HDf~1tPdVC=wUr{)&_8u(qY_-cn3! z37xfi$~p^W5|Hj?!V8Oh2#B;KRgN&r&S^M3wT>Z%6V8S4o#8?cs7LL9*pEfqX`RU{$c1Fl8Zd?Pv4SS1uB5H(Iz~uqAf(Q1x$=0T z)$4YKgVP0nw`L-y)j-QlLMvZK!3}?OCy}MNonzBgB6`utuB@#ou5)$K>>|EKJAJ)S zCAm)F&WsdZ^xqgTq#gL2pQnzyy*WNR&lb0xl-;gocWSMOoUFY`w&KCda3=?=1UvRZhp ztjAvuLb%TIvt&Q-xX|FuXs?Pq)VCEq%emUcpzPC)+O)O&s_`I~Yrmc@HD5N+x>(5= zy%n86sXqr;@$*z(+&|L{@3q!F5YppC9$$bPi)Lon!GERY?FB#58|!ZJ3-RGJ4)kPH zU^bvl#80Eh^fpCku^22_9ZX4d@`j>rfQi+`*tmNtutx(V#7?j#VQG3ymE9J zI}ziAYuho_Pp*-X_Je^%Sc*+PtbW;LPTN+sVa`?{x8N?p-?`rdE;rIBr^ zngwGJ$8N2=uL}#^^rHMe;2;FLZb9pNtdEQ!0TSY8|Ihm0I1sbHDlOJY34BWYOh6a~ z2?-+T!$5!&JQY$r+JVBOKyUj#;(&n=`p+VZ6$9rfx9^^KDYkfAg1>)^1Ss7F0d;y>m5< zWvG()n`TYbSMlB+I+NWT1CKOJRmuwi~-fBQQvVpSH8e|G}k{%;7bL)@x$8Uy0D zP2zog8va{Gy~_Y8ABY+wsB=k$8!-5>8f*3NaCWn&yYxGianTeam~GCnapql1zE4eJ z7C3dXsnL&~6JRC>j}Rlq@4Sr+RHYG{U?NUmR(pA2d&e}sV`)zqjaBxI_3$0$BObRS zzG!RjK)~8$pb|~ z(TXHRLh}xOd1MllLg6VT_uvxW3A^13(Un0Riu@Tv$2s~{nw;%G#Gw6+*Ikk zmBD-|-gArF&oO7kU*>0W-q@(#e>uMY+j?#%m=R0G`ShtW{Qqk`v;WI_*8XEXduGpk-R2q7eaE>1A~%X*&tV?9HESkE17=be`+BrJ-B4JBW+3_K=yAD)t~#svVTHW{<4g<%WS+A08kVubqQxn2}VT^ht`UE{ZZ%>KEx3YE{rB%({m!r`Ae>} zq22QU$ilNi#0|sbgIpOmt+YCDnj%wS5;!(M<8o zEn6mQ+*_g0_I4~{&68IM;xKM?m?~lnR|qNlwW|6i1F?2TjMoJX&;2o*BSbWZ%FK2t z>R;XtyzZNXo;6?lR=tYv1}4`8Igu#pbCB1t5g8%58NZ_1%0Q*1>83lK#0RC{o?hjL zi@2*?z)|&uT2Zsl&daGcF%7CmkwVGT3i#6FcOJcp5iaI~&NHk&*(&24_Skb^5YPmF z&5SvP{=FR%cT0{FJ`QiSmf57QpAbb7upewwK6{c@ckT%Bg}?6G(g?FH;uHs_;T|Rd zFDPM#k3YD-=p?E1Bu6khPP2KhqFQ5A#}m0x?`3H`+?6+t9Ex-obfHT3RyZ!-a%t81 z9sgf)_}8T@ebt&+!and4?l&$+kIq?FJJv!75&AmZZP7&S_aD3u;6XVWw{ zBbVFM&ww_$8o8aJG9F>$7aobv;21}zWroHJy6RUZqJZ{wUYf*b`;N>`@78q>Osh?8 zQq|n`%bUB4b->f1p$F@eX3QkIcgM2^opac}+xvyNM>^WaMiz9++n0c2XVu!&Gjrkh zI^wrSPp($i=k>z}n@-In#m0^~XYhDr0P;LCD{?)uBk~={Q>5EzOPbD{5y0)J=6tMN zIA1tkxL!CyxLi10*z~TjU3S&l^od|zHb7F z``^sCoi^Q*;6cId8FsRL`e666**?dDi4 zKPGSh>w@f)6H0Wqo z_0f$Vzkc=oIdk*vZSx9obmQ(|QCg^%FtT^(Q2Rg#gPn4Y$E>i;k|$DZ17-AeUz053 zO6UD~6Yp|yv627X;dy(JKSAQDkV#@gE8^ln*I9KlEa=0tfOKa&760&%LdV&aoa)NXMUUGfsU0YR0_SWWt2HFg# z=kY?P=BJ{dt(Yw$#%&W@h~XNRjyX$4zF`TK<`a)*tSa!TKRnr}78J#_8!8(BMVOu@ z4Wq)$QSlrPG64ZESHi99*kgg+-nA4oI5BS1+8DB8#ML{Vk7v3HpLCf&eB7P&=v*o5 zY?d)Sn2Q}bH@@L`+7F`3*fp$YEnSe+fzzYa!_{jyP;y<64^P`HBF%&8+3Wj~IgKdl zvsz9)5Hy7+`L3F4vxCUykAjv$_~O-}NxO4ZYe)Z+nAGCTX7jf_tzNo5y<%=4h zCimBm8Y^@6J+2s@JUiAa(d2&KoSQOk(u$>?A3dBO@F#@5ns#(x)3TkuI^BE(7Bt@4 zJUs8a)#dNrmrjlzu~e%p>z9LAe6j#J{d9^O%OtnEq$9Vmn>fDNqFBQP<{TuEA$HS9 zJ#dz7KsFLX9&&MWK=QiV`KCIKeL^yR`F2~S9?mzuc=L0#m3=zu{f56dr<0H7*s$oU zePf$$`LW>)rjm)P#NaIFtoJ&v)$t_#-Yvev^z-=c?!oA_by3gDid$_XKWhp-TI%__ z`K#T>$_15E?v_)l&PXTs61$FeZ1W8|{usr%x<>4iEQeu^{`&uqi6HH5WhD`_E|>40m@5LnsMIia2%lPSdmC=v5e@{se;@{saS^SptFV}kZ*%tn`g=Ce}TAY1T(UXcw2QtDo!a*Do!g-EKV&> zE+(!7nTkL#~<169*0OK^KYk;q_kS z#{Nuz{Aqk{EXL^$f8BccVR&zSejfYjCvk0dZbO!~Q*z}vf>?-NfL?^2pI(?=klrOB zhC&^Qo0IjIyET%N>4hayGwqh9C?hPJwq~Go!VkcY`5&x-`OTG;U}d0X&eD~ZU^Qdg zzSvgxorVBq)sn!YV5-?_c_S{-5{Gz3h0iJ=DxeFW7CtY4EMPk^FIYiAAeYPWibW)X zv9o+XW{I?ok>0gLPz^7g#ye358<`KZ+h_ez|HJXeT_gzW08*6Bn`beWjNq06>w#hf zr*dw2c&S1SRbm-<8A#b52-smuu4+i}Qk3IDk!Ko5kwDA7d{E>+r3mUS>)H)Ru?W$C zC8c3W`HH_6EzOSh6s}oLf*&f^Ajg${D*ex^LI~~twk9BZO;|ucj+9!U8M^8}?^`}Y zeK~qfs*xb0Ecy1B_$)0jH8{2ZL)SZiN49JY!!w!Kp4hf++fK)v7!yo5v7K~0v2AN& z+qP{@zCP#N@BQw3|NB2(y}SGAy{l@eYSmg*YyE?G!rJVjelukt1Hrh|&!m6w^ba7! zaGtQDrOwW--T)bHI~M#qJVNQZ0`GFMMd7$5Hn#Zd;4XR&69Lrf|JTk2^EV=O;Px$= z>GF_%9hUhDwMt;PoSsd5mI>xRQ+a&gwRv*#`h_*i)f*pfg z|3-hVS=`sM={+m_h^IP{(wd)E^+}HGG8!21f8X{Oje?2URXXR&#-ccnE?l|ans&a`!0W-C2Txz5)oJ~MqhNBAq?2Q`?pdz$%w*?huI%5S zNv(FPX6`qmD3oK2hmt~Mf|DI%bJY<~QvA`5ab_eXuf~|!=_d_r;0#a2s1ZvfB+J+} z?98@y+OFboO6?AH(&34`)JKqp9(K;4!5lp6K|!duwd%3Giu$m8qWId?!PBi-qlZ=- z?^Na!X07Oh17heu&Mj zbuftDWK}s2oltfv{ndy1n86m7#5adU!!6$)KPxvMZ$6!n*508%OmP@`bKV|LemdSm zz0dxMoX~RGk-QAU7e$6oa=0~DY8b=_^T7}@kmXH-VC1vnpF{?o6U$@fRH?;8a-breVnQ#M?mt?ipWm|De%^(X!PlHceoiI5^%Qh)9H&pVF2g zXvC(bf_4jd?$s=jPoJ!k{AgXX{ndC!Bt~bd5%ZPh=RA7%N>5Dn$JRH@Y z2(8XS_F0!@If~W1}!nh^h=%_m9f%pY#*WyL3{yv7qhf zd^CP05zG0>WGWF$vqEgtE{t(8a|RKM4rMhQL<{V4Zpb{&f|elfr&FVmf;}7CmJJqI zK=+wLHaDetNU}E42T8q7#a*%bmkYvAr|`1FD6i4jF)Vnv%_a?>T`f^A17$*D-8gu2 zRbDg9o#YF5lE?Er67AduRsM(w-eN?|FP`<&Xcw$jQm{2z?Jqgj6dnefX@_5! zYt!_VT1WP!dDLLalq>(T>cu(jx5@;+9WDe=X{cWO)N*u=j!0TaH`rlF(Q=WG)B1c0 z57%dfjeL4Ggm~jvb3zJLg6D*g>aEY-GEsTI%1WSVNFOr4*9W5op>@9G=y;M*R%bqg z7tZ>1XO3NBXH0P{zr02vBlsF3eS$?GLB~}nqnVqs@0q2yyPul$P2xOMyw2J}i%Maa zE|x3CCL{y7NS=$2C1FLgjcm~rV$9@n$M49JAoJOyLyf#lsAZ*QS7n}h&O+J+tbhka z1tgFvnHedP+9n-pwoj7>%Bl=0lJvYp>T4NjD&oK`FZ}Y0*bccAn3v>>H44 zy*kIWNcT?y=1jWg_^M0F?_+#jOoHT#%8Gge%Afto40em$w@!!>FYEL)M39OQDtI!+9f14Lc_#D^-xTzagM;upY7@JozK}ThBhA`3G&?!{6u3B2ip-)vo z41hDh&o9I1tAa}VE>l)@P#w=)tpy#g;WzArY<0iPL91-*IAN7?N3HEMk0n>~U5nSsZ6%jif%2u_I8}1}b%J&aW$)%? z`ol%~r;ppmb`3>>fesbp#wE^ggG*|(vhfb|d^Br2HjnB;kLu8m>~mNO4G_)-P=z|1 zIuwA@F0gGJEZ9XJCa!q`%NgqJ&NPU;CSYE*kO*p}BOu2CX|-C+Y@2T~1R>-XawWTQ zYPgjk-!xppbSFktxP0w`YE6i&lJra|{SQEyMOzhEYn4cI6%v^{+vi~wDuDOXPEy}Xf+g~9=y{>}qhSZtiyuMtT*0+!gE3`;@!JN0 zU83%!B#LemqN`LUD~8FQc9&Wdu{OqcN|IPk8s|H5_g?@ObpBdqF;Ig>{et>Qx@5>k z8#?L5tIn*G+Ci;k!DgT4=X+15zNX}tF1y1r_L&M7g`PzzGO~3UEl+nqlLc-S7*3T4 zRuz~HDMpcNgS+)Ry!A^`a4WkV-CTtq)c1(=?=nqQ7VTqA*d*)z;}v~A{luY=bb+nj zo!2Z`N?fJ7*6mIh13ph8Ri*l~rzN}HN%MV$TBmvKKGLPA@oMyZ4D)sPnxFACiSaZ) zpMj#xeI0AvsW4M%h>kEbTZ#WhrGDCcg$`;)q;#hu@%{`~fhoCcJnSffI(M4nOR- zo+PElLl0kt^ptU$90-8j`;}PcK8{h64lW*#!(`bFJu+YtE2`2QSb*Myz(!?>kRQsa zg6!mUJg9q|fQ|^epUJ0k&5=tto(G*6T8r+)qM|^@mYEQ6G{Q&7LW zW~}`jS;HoN_WuxirpJgSmEs0_CYItx*%PbB%cdY=#sZ&;l3@FiJDehcsx5R9{I(SP z90w~V9IN&9Q+oD^42?h6S26+8x!lmTJi`(adi5bNaSzE{2`SV?ROY0_D(9i)cqgZS zzf24XqoZR(gi%S+z_y6|p=zyUQWe0`i%OwJi@b~V4?#aBhCrg85zT;0DBla~iL1iu?BF$HFJd z>X^z+UU(z#Mt22e%%PfqlE&>DIF(guUtH~g0XfraV)UzQ>=R8E@0U;N6H?_)km^iR zDD17(sm-aPVDuXXuUr}25?>|Eqx@;CB+vphC3Z1>e8CCR6!YRmb2KLraQuFWJ2$_h zf`30+%DZs5VRiR;oTlxD^x;TxNkfycN>T^e<7C^wR9DoKxs3!HA~J$XX|`*saig(! z>X&)wV(ZGOU803<2&VkQAY1dW1^}L#wCiM^191$m;t13!hpcw!unrBW`Oc zLAD;?GTHUfOOV9bI3os6Gs3ltQ9^p*yd>;Zw&6>eY?0@B$Ku1u;mP;s{r)n8EM3O3 z?ZUDU-cz%-#qn9nOP9s;!YqTD>%7I?X73l%ZJ+%Xo#vQ=^R^RFZ-EVKw%pw5K`XbW zR7-ImMf|*C`;f2i)jC_ga5!}5F>!#psGAlvNS{4$x)t8AF&0V-Y5(2HWH<$-Kx z!p$4QZw5%c3nTiJPu~aLa6xF>4 z*1_d=^gK5f2O889n$}BjAhl+E10KXbi#>VnovvmQ><7o>6X9cRghq6-$1&SA zRlrrMQ4q+kHqoPP#&9Do&X~-^Y5&eNJg>+kgI-Wb^dv#Z{hkp1mcV>~PN*?C)xqfK z*!JgG`zCTUh_^C2_`)8ktUrgp_pq(;8?W`xMI!u1o)o?wJS^bnPxuhO;RcCXXQM^e z*&wsOTzO0k4zKRM5aT`sMfFzlnTjIA?gz<1@}-5hy;?T$I)0ajmKYysT0a6#1OMP( zM9>0I%h^;gLE!_u_)=uYFb-gy$*&CMjSz}Lv8%%~IKM0?r!zZqG>K`Is zWr2Ny{`Tt;DZrj#mFn~SR4(6<8>jj$Ho}^s$aX<$FDo{YwAcxm3=QS57!bNLUX0ve z`ih?DO-Lw!wi_&rI%rVz7;0=X0|w8RGGC}TXtgMbG{3oJrw5N%d@~rzIS~Djm!Lc~ z*0{SAh8nUwJ$5IB4LlIN_k%hAyMkv{9#+9AlYvDT=?r{<-EL8Ie9m{T?GS1h8+xN?>RZK4w&Y5n%j3U~JHjR%EyGgbWP8 zNFjJWP`RibE|R-t{Pe5A^KM5Aizd%Ql1NHby9`}h@y!VL(=P(S(UoBb3_wkI%X^%)PMW%Hb4xNNz$2< z{)s<$d5iy+HheFP@wY=$j`xZ(jpz$E4`i7ceY+hFZ2`Ga_merPWv&qJy7U_P}_ zhKCRDCGv!*Xq0wu5tq0pq1)j^5c|$?c(_mLv%|WP@N3Z*C0J=QG_xG(DiU@Rh#Kah z;U0{z35|PS-KuBao}?ZA0UjvP`{c@%GDwU)wI|9VWj=iVGurN()WLU&oqhwpOjA^a z=1N%X8ky_J$jjb9V_%+ccz<~_y;&qV7GGl|%#mu*4JDaw5F7KGjjgY{L0&SZmx_j$ z5pC~m7@H$P!9@o8?vI|?`9XbcC~NYD^JE?SlO$d$%Aax-RNz$zp;+*|%wHj@&B5&^ zsstV>oVyggdAKJP&FIqFZY-53G;DO6TNr#s#`dYBJGjD+s5-;1j`zQIe30$&xW%%U za|qyB4B{Gb1K_2`;PP6v0bjdA4DwCAdwZ77rXpW~2)MhUVx&vaPYXO1t=ahrO(IvK zq=9*7ftmyed1Wc>B>9=h0}4{bl9pFG-O5D)*ZHK1E7j-=^rm|65#M?@H4``@KZJ=5 zBN}a)j=6>-yl>MxK{5LOZ{ELp@6mYN;hKG)u>(S)G|YJU2pTd1h@m;#0fzPhjZq!I z+B#M!n09k1n7bcMZOQ!GV7a-E*?}zRC1%RUH={@vtKDqwp@lyH=g3F0&c8apl@6W#Y@qy6}8<-Cg1xAlW#`4`9P`|YE>-3Dd= zr{LQU6W9++8Q%|cuT{_49>L6?zRx*Wn}42T41At$2{|k0^yuy-q2$@v=BMODoe}8S z>gT3t{QiU*;QBaCA5o^y>?=M99w>;SA;`0{%}xPC;SlKA>t(X{9{n;P6VqmrHj8q? zf(vodzFAi01O)?ebjX!%USFbovZ(c*y>ZekElYD!gAZ_YEG|2w_v1NnEOL9tr&2iGKEpu`Tf;C_g-}a31vTS6M1-a>@5&pAp@tba|e^v3{ zTb4-LeEg(*hPbiee|;FTevl;>G-bz+1^?V2LnoYYLqQ*q|$p>y_rZ#~R!f#?B(>lUmR&dw>-(cC9(GbvZtC0gxA z-1mFAs~2^vygcAKo_zl-hJ3sVmZ_He zu8-UwK&B};sz=#0jmfgxaWTE-Z{B!ta?Yo^^}jeiE3~2{biH(aygWI6JX{=ht#^2S zv`IHT_2#d>U&tT&yr174JVqyMN4@i&o1Wmb<9`nts=LNe7dbSh`*T`96v;@})n%Lq zT4BD9KIk4^T!FKm>L#JRw`m?TsVbzEbgrumq8q3M$)U5T56KZb2hpL|stw7I9AB1} zwx63;%rWjyR*)pvVWiTS7RI)SV8UwCn3Bic9cs+$-8y?V*)unej~+i?)h}HLEK^(N z0={Ryq&Pf3v|!i`X{@Pe-#6t|sr%_>5~wpI6F~{=B8Cc3PX_DqAsM z`J4z*S|43L^MZpT14;zdml2F#RVBFBnWA1@?q)UQ^pW1i;HuD8 zvWAZsliBrQroF!Vy^eLde6#%kTo>6!x>~(kB8|O}^wB;FuEZ~G&1J;G43;*0Rga3I zXiBsHBYoM;BQ!;%ILHpx7m($ee)9ICL-QmKC;he4-sCS1LZmhP_1a=kpmmaF+L zx}{&oj$WuuwVDJIqyT(67hz`3A-E-U;K*4rE|>fB?!IKBSTu1lx6D@_bBdtWvEJ4A zn2EH>vwDA!bNj>FYr|HbU~zE5+&BXH!7H z{xOsEg#WVBhL$Z%`T1KWij6|`-~0?A7x6=R{`}nB`?mFcl>;^&a)#&Z;Z;38qfrp~ zz^M47o=zUM^ENvF<5BQW(=sQ#^y#Z0A09_$(Y??6H_s0}vyqQeUuN-5K^x&<;ys^N z$0n#$!?Egiac>9nk5*sqoyn@|J3^c3n2^E2-o9Lib37sV7*Z9p`l=|y@^&YN z{VVJk2A8M@6I>V727`$NTfMhWY5;ju(OdZh|2&A57t)Tf?$?8zL4}qkJU@8XuPUBC zxhr~Pomk{xi0=rZyCL@>>$?}vxP95qPwo6GB?f{bN(zj+l0Ay6uj`|#4R?^O=hs*D zytcBr4DG^9dI8z3ne3z`PEk7cpO2;{thy_xx>bo#!2XBixT&89vN{#7Ed||}(3+OUrivWEYEzk( z#3qT&Y^u-CPrg;EzybfNRs27MZqMz$l;`{VWo>_g3Dkd)SgQl2i=^<_Em`9K(%EMx z&jME>UrmhEViwh)F?1HqArWHPpmMVKKb7V$5{k#Tu&Gr4*`0a0%_C}W(f?9k|GK^+GgYRbX=nXCWn!3>@SD#049gwZgubmgX%@O zn3{g0#u&3t5>>kVy0HD_Wp#ItC^jru{cSjAef!aV!z<)NY6$-*h4ctn4^uZ{mf2`4(T^2!0=wC8E8edRIv(4M zVLHNu^lDTun;?21Ezo6oM}{uq1QaWWqA%W1)qfnC!%b^C=A0h7k!*>^aG@?K)GUi< z&0*;Sr>fX?PEI*W4UzOS=8zud`=)4Uhp zq{lk_4F~0tzoD#ug$mt!!T4NJC+{zLuKA_F#DDK`lJPO4?E%&aFFn=se}51l{yu|{ zC{r~+k-wH`$m%~1(@3-wZ&-#d>vNo)3N(w*bS3kbhvpz(iZpcg{|9URGX^s1rLrcj zdHUg4ocM?yVfbO|Get>D9NA$}Dx$R>TbB`0LHN?u)II+;CCozRhq2fY649DBrskP# zb?uiB>qHSD^anv;6okMo*@VlRIOvt*z(#8?H#TRrDG!Rc?998wae{+gFaXNJ~D zs(=z-%hZdmA0c&cp#CpC@GbwH9u!fb$*tjR8?{xMy;ae+qTVjyCz^v_6AbYGSL3iL ze@;>|#ukgrmNXo2f@d2HjZthw{sIT_bR$J+66=$`TJMHg3$l?s4gl3=zlMz71$lic zY{LX~e~u4(^c-UoW3@1jjE>=&v@AW73NzOQn!`owv!HFLoii2%OVqW@?``pv-OX0c z&~Qnr$@EK=yRM#78sz-06#N4TAlQQ^p^UF?ii91la-TDI#!xcv3Cga1{ATUV(vam( zLf>W^AqHb=9wt?d<868DFM`%EUE3`%>Q=+9|$oNz$+0%>R}V=7_j4xwMW7)k#&OWT^ya z0J7nUuTCbY#w_tRUb`H{t?sMO!;nV;#AgjowH~xM;qh|a)U@0YMD?|I00kdbSZfqL zlHs7?K9$XkT-~I-+J3e82)o3+Tnim)k0d#H?hUG8h6CtpSLJy2MyDjWK6Yg3iO6F8 z_^3gH5>#8VWe&AC)4ycKS&L*CT=%(EEWQRh^u#@kY&Ff5Hs~QW!E{RNpr_;f?QAz( z5kne?03mG-8pi5AZEzvQNBpch8y3Hu;cq!omcF2tZlu>BYjJZ`1nwflpLK(w0EOdW z8gH;jv{T4#Q8MF95BjXhhZ!(sFNR5@{%(^7^b2q{OKXrU&BE@_5Wjbmf+8dAfkT&2 z1xv`W>AU)D=E>8J7YD73VLGjVZVIL#37!FQHIRymE!=457ty%)8Dq~6)pXTZJQhkM z_8hoYVK?m5t{kgJg?n~QHH4$vG6G?o2+Aypl8It!zTUx7=fr;F8l_=j^gFiV7PYN+ zfeo>iO|jaFHQZP^BXoUxgxnRX=YJHp`gP{kv~?q0ne#AS5SBo&tYR0hD-*cQt>Tkj zM#~}Cw=iQ_Py6h&+8epQ?P9mEt}1TY_{=4*!(hwJ%ad?mOV2NGZ_JRErLq^Ls0>g+t zw;D0BT4P7;(70L|WHBW^Gu33k(9mQc1%+F`{|)PVYh4aUT;2#u;f-o@TrH->FA?Yh zaP|i`bDute1=^8#JqpDaU0U zEjj^Rgv3?8Ed4&uu-?Q30a$6139UTK+g-9lSC5jHZqe>O5uXoMG9W7zr70C9FKz4( zFGid^%L4(U*73slpsdNTEXfZ(Wnw*oIN3-CLg#@Vr@c=d`z zL)nl5&l28MBe0bfSC*Axd?kIM*9}*iNDYssegxv?-OrF}QP~3;dD&JrG#*F?s@+x) z4Zbzcb43TL2C0f>5hd9VLC@cjrluJUXJrm*>)z^MHYG(7 zT$hIqW3K(#6m@zfRk5*9InEkL)k?o9%YwhIsyC%P8IBUnO- z>IRki8jOvB zJ+ct6Hp0Lkny$GX#VhjLaS#Y~D*kA^TB>MU)>&Ke(wA}!w;GP~$En^Z>)w#0{d3|B zZugkRXvlX3uPSpx7x@J$@U+}{Y+ZW}btkGm`Y31xYFeV~f(AGM>NaJj4<*YcbtSx=^IwW`9La6#RZQ;vv z<~A9U*AhPoIDNd>_j!yIOx*Hdl?|L2p6JsklNE8`*P?9>h^VOg+|UU*@W=hS}9WLynIJKpT1N@c|(eNJj(C%1z!BIN3&MvR|T+<2p`(?zY z*0Ekh>QZApQAPiGSafUoKTJEMLTy3;XrE^$~?GiqG#-S-`I5y`K$#+(o>P|9>OseWs;>?7(Q*7M}@gOp$ zY*`^G8rDWWDe{Jnn*9y*;v_YDoBJrR*RQ@EmGh7rgo|zb3A*;&JhU{y{hK`7k&>NnHRldhe4js88k5E(V=yr3=h5PYt$$lr_(CqWKtKbyEos}@5=kV1SEnd`0` zoYRWP- z`$ewWXEeL3EePT3J<$6I^ga_88unVvek&W}oD~n>X^824%6^uqeKshndt|{!$Ns*F zA&_79su8DpLU#pIge_`jxB7bA)#1zODfnKnvXidho<^OV6f&qNwmKcvt)wJ3;&1Hl zZ(L+ST;InD7t9Xr&tGhReY&FM(s1seGm(NIaJC+Z3SB3x>^B7PZCOO3sMd;8wn8T& zl@}`~?Ui_iWSNkl3BZ^JZ9mQaSLrVig%(FHw?r;?kFDS-{Zu0>GU2$>K1{Ku>|ktC z;&T>^1p!Ktlv~bMoFBb3;#PArIjDI0eqr!OFKE`H-Nx^$Qe@lt-OcmuwwCl|@7`c= z|C%+jYL)O`!(m{f`K=gElfyDCxC!caweBdn5UF%q=DutOn;Z&Fmak#m+JS}5W9n#3 zQ~(T~32`&_mx5ll_X8yzt_G&xQL0e!6*FVBdQPwzm~e41`>c@Lt&r=jkjsIF5lOr@ zgQZ7`)i_FxPRn5sdM(MD1Zyr~MDBRNO5-ejD-A~jRshd-O}MlzC@lZ$y5nti?}bI) zk1?QE%!vJN?SnOyLj^j!x$YIO3uU{kBVE z!SUUIo849n{~E^p4~Yuu9J6oSm-KXwT@T+lJnlr=6Y|n*jM)QY#%b=}0dcKg>^3hm z)x=qbmuHqv@y7o7{zlFrl(EYY5KN|GtNuFv#(Jped#LEAGanCqvC~BG*hnC&+3g;i z%jT0DzugdgE^gx>e5%f)d@&v+cN+7K+07*nZ>(Vw@on0V=iIm1+0l){gcF2>XWzBS z;wAR64^bKa#Ku2ajvXI|P@UQ;f=YN_RQ;WNvIo49J0l`d*+Lbx6OeKei7ubET;+@3 zC)(Nm95?&0O!f&Tp`75~uDG|%@ff&GA}#RKR;C_!^!ouhfyHI9^*bO+u)26@ZBN<*t{zUU>cQVU zxl`pU11@_=Dd20godMb}1MTNdrwgtDz>1xH+0*I8-h?t?lfeR)syD!w-y2H&X?8S^ zUuclkrWp2ESoWff(ztugP=(eSkQ@~mrIRmLhJU|&oT=+ei+kjXbJ znVtmh(n^*BCy;CY3r?;54Vvg!oQdLvqf1RcNq?zt&YJZAppHF|D_C1ZpY9~I*)`03 zK%MUPv%38^U^fW?d^ zK^S8b4YlUv$>ZEM-xsq)fEZRl{qj`~4Lu?ud#hCp?uTJ7$VRz*;8vqqys<|III&gu z9A2rPaFy5TQ$R@CYzMCwX)ntXE5Wm*ca2Rl1@{$@tl+z z7`bk6ejIdBA?L)K(#8k546d&~C1-Oi2VbDpL9v)#~PmuJpIx5xZcMQ)k@SxX2 zC2DhP-q2z&$aB{Xg1T2eoJnk7 z^$eZux~`UC*2u~c0p=fo{WZG_nj(srVzgt@tuZ8d8cSzL2EL`W#Xz^Mk!&A=Mn=g_ zIghZ&mYmg2`R6{Vg6CU$5;NGWC4@AuMK_d4>Mb-#1?eyUTXTy;6t@#FWWvT=P-Kv!@W{k!v@u#q}! zYUv&3wS`|WT#~T^qPOHjZ-eKBm8SkF%DMb;PjEbJ&^&xn^|dm&e1N55#eyHNMGPC+g~ZdPMiC&1WEZ|c%pOJ+h>U&E;D*;=q87X>CNls zE39vi`j6*mLeH;f*2tUg2>zZ3JGg{z&@0yy6dl^zNLm7U`eirw1+#4BIn^FP+4ZPKlk#>q*`%1@P*cHuz8B;=}1=CrgFK^ zToSZzjBJh=SqPPP`dN(fHJ9&fMZaR{x(AT}Fho$pU>6lgO-4IyP`&^d-BV2B??}0j zo;9b@(?PmoMk2%^`AWbp&q_Bqpg%qm^C0_Ml8QFghu;s+jKQAu5l;C#=IXMHt*-0l}0grYK51{=`qGRoDWR+zPQp~dJ`U=BEn?Am7ME&5u4{5 zr6)RBh$AxpNPf8f3panB^m5@%8K=OV$jv>hCU=vEx7o1cTx<|7`S7ADT+1DPK^$(b z#r5$Vxo{n1kJFU}yIM*(W{Iw}z5g~7WMiautiq@nz(b#9VWvXxmN`O8SJu69z~+M6 zntD!wZg2hg4(!zutt$cJRZE%910^CgTWbs)ViX)=yytlCJ9AU(8|ASgGQLC)kj2@% zfvokeX-}YU`a_!K7S@E#|7cC+A!%QwQ&RunGv|lbZI5;dnphm3Co-NjGP*S~yfrd7 z)K}G6m$iX$a!<6oVCHIY#HzJ;(!JFQ1-DjI*b@s%N`9+R^;8DezgpiyNL+l8r`+g6dxdaiSpj8e2T#tR|nc#{ugLYj)-S2#rkF z@Uo~_yB6h{&iRPzIa{4|0`4~kuR)}ID9so?MN=v%N;A-GB;1-6-d8_QB&UmnY986+ zNWQUMW*6UMm4{gkO3y&r+xkXiD&sbKUsIW9xt~z35jCnnG z)D!Te$b+m-5%*}s2!1olIZ~suI~XJ(7v{P(;jZrA5!f9ZDNzDZ;YTKEnH#?((3S=l zgDIRq23UAZbEx4~toQ6e&@{op* z2XS6?I$4mdBdHzhngdl4i-nlE(b+LU)^YJfipk(^w!IA=_YAb$H)b;thH`hdBa}Vk z{0GHWXlpjOt$Rd@YihlKgvv~FNJS6T@%<_xlLSONf^TNif-E|qvAog zR+5zRLr3sO!<60c#ypwEMnY?A9YD&ldY%(kxyNZvp2+xED!gfp^J3SNlmo4A)~WPO zZU`BhBP5)>Jp?)vIU`R;ahzc?Yk7q^qB4xlggK)!U@cAfOZ4^<&lJx(d)E8lv#ndw zJqixVoTZq;^-Y13e^IHa%0{C}e}*9-T}%enM5;uJPDch_lnV3_p4bpXFPU% zaDQw{yJw19{40uWYX-`J>M5w-O-2r3`)JCwzh3F+PVS+=8<*Sn(eQzEC9~=iIs)6_ z`_2ZZ5s`$;>4t(&MfumgBmUkhm}eoyCBXxVACZi-qn$@g3|Cz6xfS=$7v-8-f{o*6 z@1l7}zfDX2!m^25lIp4C9LgK>AUZY7LyF0W-#9yCMl|5p3biL_vE8Flaz9(;kvCDS z-sm+Pe7Ri-ojtZiww0LFN1)ZJG6SywW{i+Xo-igJRWaj~L^uXuUGEXMmrV<)8*L(w z@Hqx&YBCP{ab?JYgww}oiF}(a9GU>hj6|L?5%8M{3AJoYbV51jLh;*H_DNeTUV=Oz zy=OTBJ7Wd^T&Kq;>VQEGS1d723il10*X2hLK>ae_Hewz>*JdZ-dMhBCC@|Zw@8jkP zxj)`-t1r2p&>xn1@kabEQ`&Y${513^qOD*_JIfkMEgxat%pq4^7{bm&>>#^^TvT~` z9nw-)Nm%J$W!u-&>-wvjC9;}(EZ*i1W7nb6N+SG{Ag1T~k*5YYq(`mIO+);TcnC#5bOaz*m0YP~-k&3g)4b+$ z@fG!?s*ut|8`cTFX+w*C&j;3^x6QuXMJCewq82@A zJF-3BGePy^MEZfG(f`M^PEhAyM!%O(Ekwk^SdAPi@Mu?+e6~F1_^n||+Tg!R!v!qb;y#Npj_nF{#U~#IMk~LNxzui7gq_OO< z;9!oMLz!Y!Ko-h5VUIh-Ofu-hJme^bUm%y0AmA)lWv3@Xtb;?W`#|>bp1=ddV{Hq^ zuBXG15979e#F_YN8FNiRj%Sx=tjc-sXRWPY94K!fR{l^tz^^jvY2EaBDTEGuG=sD-R&cV@T+Y$5Ho~%z>{v>69%$oq=!E%`^0Jf_fo0V|4l;bG z6B>A;G9s~z?Sx~$#=YIuwpqkI)oS-xUH$HJSDcbjx{^^s#`PD$Db$76*&rn2MehqX zs%H1B5iA}qs=f0t%^e!}!`2sDUV()cpms1mZ5pBUy8ixo@wdoh&1WQv6F1eF$g-g7 zAQ8%&DxP9-IuB$oH1vNJ&$)aFz0Rbb)jkJgyr`bW7>#QzK+HO;U24zs9`CyG)}jVSIzv&kKx*zH5O*|D~3 z=YCEUi{GC#{4W+KIN$c*-8}nimk{c{sXP5;q%GB9X3wg$(Q`E#jb6ck3%qhFP~|Mqqs!k5^k@x z8U1pwQ>6x95n0OOLvUF}4X5#W$#&b9Qj}h^i(^6WfY-N@_I0|o8H0Hdvt9qyt>`!n zD9|cMa>RcFIdXdH1gr7;`Vb;S2Z)7?3`Sj8zx(0Oss7Xif_JRUI3zj4t!g%UT0kNC zt(#cXZMX^8oc9cMMuHND;sb9RK=D)Hsd7h|3r|XqcztAGpn)zfv1jXC2RuNE!htI} zAC(CUB3_VI4Pq!Sdbg?SJGrY_MZP66sRc+-U-f!B8<#p|ztn!m=|;0QfW9lrwX;^d zMaJ0ONQx&*ABlsWkOpbdO4S4aHu+>%S;e?B(D&dT;6nqSc<+pDPjAKbuLMKAtYVN6 zwgCU)tXsP22Y$zH*Am6a!|^xIu7F1*d;dy8N0gYhD)dD)LV~UoL5}p^>kY5D>tE%= z{EdS<7ns&$7F$&6K|-O|p&gxXK_#EXWJK`3OG}AfowBWe(P>RK4H3cl&9p>tm9?#p z)0&O*;!5=^95p^Cidd7|85Pa?!+$lb$zYs+zJ$Z#(nRL>_v;Yu&{^)oTG}3uEBt;T zhGP4_bSH>w0$UF*R-5N=;F%IKVX!cse6KYG=W;Lub4edLAszN|!|YhT48ybgrp7LDJeNkSeDc|l2FAq1Jkm9O`S~u|~gJ^RBgV)$1DEUAE)VN}-;lJ1E zk$}EnzsShY$G~qo(-YC;F4KHo!H^78PZ)1P!!6sz%2G?-%0IeSNLPy?q2f^T_csC= zKOroXRQXHw%Hz%yWAP+}G0)HY8A>1zSsJGS(QpJSu!IW0o&y>SCxG#J!EC6^$Kb=_ z_yWVaDpU*OV@w|uIc{{8bnpah@C0>hsO9W#$|?s^Sx8(?(~zUsFy{@&;f6<0-cn=g zs9Db_z~9)Gwq+!hf93zMch_NUMC-!n+u}}fm!ieprMSDhy99S>fkG+n4h4z_FYX%L z-HW>g*PHIW&pzMz&c4rc@Be+6tVy29tTh?Q43qc$Ey%?rX4+F;G+B&yv9ydbNHmgY z!4Iju{8o7|j@f@csRwVd;bRU_|H=!EIq4!7I8tJrQcl1%$u+WR2)p0yVd57$N?#21 z+b+CeAs1t${&aKFLBn2xvSFd-QSWra+WySxaMFIae5JUZh{d-%(c|Z2x=o+xBU#bn zt)*EC<$_puMgB2gYXB4EDhJ^#$_xB~%X1fE4_dPJ z4xCojyS)G>8*5Fx8{^Ah&TphZktbu6O*lJr;YR3bQXtEdakxeR3wvmW74%yFC!~(# z)9-Jn!5eatf3A~8f+5#Qkc*~7V?H#*9sy|}8yc=&o1NoU%VW}0S)st)PO8b8H*7+4KgPtv)-O`Ynv?~f|$|auYWiL7Z-K+}5LXgWK zFxjGbwrH`!Wy}oIwrFKjqW=256#4DWw8QME0v8?aH92gzGn66%qACKSrdX_~81Cr4 ze5~jV>-$ABbqxyHOpbgziH{4RmvVEYTKI<7to3D?dNu8rEzCTfH(I6LkCtP#`?s>c zXz*q=N#SS7?#yp;q4XH0*hLV$`P9lLR=*R0x{?q2R1i>R65`~_H^MXw0<|H_q#ItA z$qz)Vo2K%eq++YF5pk79iwjc&GJK=9sCE)ux^l9exxpq|%-3!-A?gKlHEUW2IlvQM z>J&(=1a-C^K>iz&RdPY)>KM6L(B3AY@3fM*B_M zzDNb7_1+xmT(=r3e`(=Mg|I!FJUTWlN&Qi*n*jNdezDp%uAkRR7Ky!eY?{6ARi#ku z!+wBn<3$0@D|D~h(P8R|)Ari=cA(qtws3+q*&`-BLu8POPTd8mG3Kv97{Vk=_ubgi zqnI@0B=MaKshL76lf*i(oeDYyNlpdiB-uF(vVx?zgAX9S-f+SFaw@~!7MSI%?xoeJT2wkwR$A|OOg@!RQ0 zc}tMxRM+=F|H0|DafnjM!Cr@@Oa#45A*u2(3sLt%yj86k+9z$9&Gv z3v{jtmVJTY@w!dkOmYBn_D0ye8cY)(7XT}hmZ6JzuD@oL_*B7*WJDGWlxEpl zd%mfWi8K@0m+Gt zuQsmAjYIBiTI0doQ%5s&&)ldp+@#eRM4moFK8=Db8?R=I)k$=i; z>Oi_Z{b;K5>+`<+#84iLv`j3W;xXY)2E>zdXTvFioGAz-yEG5_gtB12k1gDDHr`fz zi`Kz$Ii}ld^~}9_TuqSSS|G~KHoV!yfzmJY;@QLqwlc@xPH{d5iN_Epvx-zlB7C=y zS7te#EDUIM9@fWP%>5yNEM_efC?IIxFrIJ?eh7O-`*-TrNV)^0KQNrH9k}~}6Np^_ z2@{8`7mAYVKJSQI=7hj>YpPu(aA|8f-0kX>NHsoaTFm z>>bbyNIzXRTjp$WTo;Odc#LosAgKeq_SdQf`Y&7Xkb;{kN-c(+kiyha zM*gU4=pFUz;)3FA@x8r093&h?F&X_g1p$2#M)N$e&bDVIza#c8NS*JZ-9o+``$&(a z9PUWZ9!1jZI=>jM*7;*^FBQQ$nlQB9B0H%^?!}FGhp`!3Kx`(L))yJYjIvJ3qERX1 z_~~5=mO&e{t`C%#zNY?I7zeS9+8`l$GuTT03@n!6`%X=ik#SrOBfL~J#Smk#3Ve;# zc>vmc+k z>fnOx`I0L+!Akbg6ci^d@Zu^bpY`gJE5df-s4A%#+dUV!U7@dFrt((3Ua_qlb1?o6 zFW!2jH)c@feQE=~6rnLx^`{3aLt#{*SXVMdX*gfoI{2Xyj%4sqN!Og*Rl=!I5$x;^ zM*y*muwF{7=Fgn+@Khx~{NivP{q6=Rf$7w=2Av94*YPfWkHIzrmqn`EBia-Lm+^3Y zp&_`S4z0Ia+Qv+jbxA8Brf}qdIWcbi2e*m~5=2A; zeKW{TYv9QAw0dZcuBVSW&^UXprjZ_o!9^zqU`yZDW#Meeu-)X8>q#9|aigcv z{`{?%({|95fO^g=V}E{yziMS3!xZh<_g_Bu2{BTD~w-)W-9`~Ljp*TBUfv&7V?d=E8 zw`}L7q!*X1ZA~SQX_Dh;VT%VgEoQ|+LJZn+ttU( zjGIDUzvtPQ(TkrkB%8IxuS)CJCl5!JV?`a&-rhpbF7+8(H$~4|t2E(0b42MaC#TQX zNSc*Gxq^W7z0(XePw%k~3d%;jSN+6@{bt!snQZDl%Bb%dgBnfxikg$N*vtqCwrN%! zkp&Z5HaA2?xLc1EzUc}@MXUbcD#0wlV^7e{%$kQ)%Z+S;k-=vBzva>ff`bXZSf zX+^r`blAyD9Dp6qyxxu!aKmv2<;D;LiKpdCQgp&cnNy^5tMQ3qTM)l{=+}{FOzLj?-md6w0C~c{db> z?zQs%2#4u?w+U<*9NyPQW!(sreS_!X<^Qm9|FG~4z3N1_TMXROa`GFBupV8} z*W_1s0lj|nzl)(|%>aR(0>8%|v8KdOkjuxYH~O*^8?RFZ0SaL;h75>vQUpqy64jYM zy_?h3=XFvUwEEaUE%RWDiyYvAQiSt@XP}?StEaazm>2}hG(#lmxFJ?<3avOp$Fw0) z{tn3z61}h?RlW%yJwxZQAybZP?IEiGXsnu#$=|h!-yv9_K;WiD&yvsA>XGnuFt? zZm3+y%hgND_zY{r!ONCd<^Ru*ty?ll{tuxp^ zub`6+8P?l%h<-ISzfDWJ|C4N>?0ORFSoLT5&%e)UOf#` zUSg$SpTN6PjCxYNmbULIZxQYStDu>{27W`T?&a&mfQ>kF#AE178^#<@sv%2 zg%=jd22z3hE^%@KkWQ#fjT5HmxnB2a-d-n1%!#a15gq6AR(}<0WoPS1!u~-#IpDhz zKa~#not$$urgAA~cP(+g`w4S}MIgXdUpMcSCPwQF)&dilz)^2x=f4j0>vW+`E%}Ne zZuY6$d7+0haiH1M%QXPCsUgi*>~OfR=Sjc6w2j^~bi3+z%ap;{qlmicS9G-5*TesUy= z6~*2$zVe43z!Xo>D>3@s{Nt~+&KqI1sn23~SE59|L9)V>h3r1NU=f#_8-0`WG4tLvs60V8T~h+|5u&(|E5kQVk+=xlmI zTucpRl!Ie_LR3r+r5uCy-amin%=a^`2OI#s_W$iO8BfbB#1pzlZ z*f{y%NsRb2Ir4JhT+IkOmcJr4EmJ*MX-5B< z|9ZleRT!GCQBsK<7H;dFuTF0SWZvy5Qo=;gyme^5XZ18vD5jPS$Su zytbY)M8EC@`rmcD*7EfQU~E?EH6^cpn*LZ(8h4WHUDA&NXPI-QXLz<-*gRrT9iZQy z;Mlue`Eu4F6tL3K_IMBQJcHbtoML=oIq>N4oo+G;{robL>(E*=OzvJ`KOh&6TL_Wu#1n70AqcN zk_TcsEv`XP0JTx9VP!EBr;)s)3qeNcu4xngeJAr|j#vuaVa+x(6t1e;)!7MI ze4#6+DErkO8mj6~gvMIbO{PZbVl+ahJ=el^ASr+9HO+hkO1TD~R=tiI;PMx(s-L2U zfyUNfYk;TD&5LQ)a{$BtN`E${7$umFdu-_cI`c{4ly9e&?JIWQ2@_U=+J4#Q>*z7R zptwBwj41b4;R>Y|1^1WMHTrAms8Rp*hUyha#&#Gs%lPw3r7DBF0_&=ev4KMf?N68<8=x0^N-(={d`8) z*xvPpcZ0XLJ}H03waqdw5r0lhSm3&2HviGHzm@BPFezG0(b&Vcz{k7RRnO?++t$aL z@(D`Gog(*t=d@$9Fz!ldG&E#fj~?9smTBd)zWhRMc@9XTEIL68@y09VW0Xq>Icudj zczup}b+|zhn|gRbLkm;bvuQI5Tv`j%O1pf0Fp{6VMbnElfp1z5SUC})#$#sysE}qZ zcAOeT-+}2Fp5gSa{sg$5yZah({q|WV&Gy&Iy0&!XSv$MQ;TsPda}12BT)WWQyNbk_ z2R+v8Y~5f|_SyRu)nx6wTwPvlIo1XnHG{{We;;k#yd=aU3k#}*TABKE!%F|l&xn+k zoMmB+XYIXIGfMQ4^8Gy${bd;hENWZUqMySSL+h&CD???)^g{~4p$sv3YtS=sXYy=v z+vxiO%eqe_1c>oCoR2|IoF1N2IiJ1>xV=noD24YE|`@#f}_8J zqyTz_a7vOQUVyOJJqEQ z6+Vox&Hpgp*lFI(XaSLCTsR&3|HZc0?rw8sPtUBD#fFRiU&oDs2LJC!B06r5+^2>A ztx~vOvv-uu1pTR1M&L47TkJ2k7exNU@tV$?=v(lC@=o9?!WKEfJ?5M?vv*ECF~k2nd89d>EXsOx$nfm{$8^}O z$|D^={C7?=P>n7L@f6Df_IL-h)~5P4=#6m^4)uY{O^cK6rJ3j5a|ZYNZ($4kxlK2DJRXaU$S;skW4uQ54Z0w6$uzmE%?0=;7u@2o{Ay|wgZf5{;XI#nobL$L ze=>F<4gs;|m6`89LdRszHHFb)lzNq-2%}^N&Yk7F8u0rUH zfAcWB$2a}aR9VuyIkps0qltva`dpC|tCSJ8zoclX3nsOq77`OPc;#i+{sl%L;>Gos z!kVvkR3=H{qHEJf`7=iO(?zwjevBf>xZ(V7S;7S`so#=`#GX#_dvoj=I)!8v!vAQv zK)d-go!9@Nz%uDYHA+Fc>Hj1hJ|@3RSstpb6OU78+S-c_{ZF#uDuv4x`8o?H@##O$ zSdkZS04rOdWrnHhC|mX4-{0Sy7SpJeZcXC!FY&EFsqsJiqPh?~eZ0>i!pH@!1AyN*uo)Ef$-7d1R99eEo6;y&N_> z#8edY;a}S&+4||9eoeVqnwk@5_*d5VhVL`X2nF*mZkuI6hwf?7*aVn-IR9ha@J1eJ zf5U8y=HPm)$nbiP*=XP#p>DP+23g7Nr4x5D|2!x0$jk0SJdMxqZOk3xwB+(5W=p5< ze4!Ylp#E!npmO}5+ap1;SI$6!0I)b;_FD^7pWDtSab30*F<6QEKN^RT4|JDT+&!9R zv!~}l={eA4sfOnw|MPLe+yU~%R>*Id=}sq`7;rxTWr86}h(Pks0@OT0zDZyCyv%eO zv!=Gq7Sm;p_>exT0CV?R%s$aykOolcH;Pau9Z-A33t0_icv|6IpY(2FRW9Inyuk+F zU%0&tV1ll2YkO7(R67IC#0~&R(*q7v-@TZ^Fz;QY1Wi}uF7-4?2=P(Qx6o2h1|%3H z;4Fve1Y17_dmoJlDzGI#D^tB&D&v!ts2(r?9#)soYi;0hyX=jHKy%UT{L2t}&TTHp z-4Q6fA8Bo*#q8bd&H7}9xtzbqDjre>a@w`izh%3BNbYm@9EShR4&`F_g%DF~9BLUI zU&rSrh!-P`3UR(`rHlNz!(9{2v7(-q-5ZoOg|E5S0Pl1fMd^m_CL){;Lcd z=_J04rDCflWO1suvjwL9(PjbURac)-+n*JnMzQ}vhA9R=7wczH7u$X5xe55WAOJm{@>2lGI4&{B5{4eOm-s$WQplxsw%(#m9B8Q|!?N4{7#S)w#db z^tlD^cPVWU!}#adXvEL%npQb`k`;#0YjxIK?`V<)Z;E<^jW~@RqgJvDZc13QZym52 zLfHtTL*$2dIL=QdW0D__sOPGA-wg9!j7i&+Ttu$$9a$ z1U^DWb&vJ8b8FcbjTG%fld9;7e*_#P?KY>S)UpVVDIx5!b__+xZo>0u<)O;DK$eM` zfSOSN+EzTQj&!>Go%w!j9v@kir!G{Oo5nP0)%~DKohQqpE2MUpXFJmA;d4)V){N1~ zls}SMXF*$8$o`NJU-XHj%Iu$08Vt}--2whuB9HH99-n%itsd~(;rWOV9W0^5Y}ub5TM)LTIh;wLfwGz)KQ&xu&tUzm4mECd78RDQ(GQ1Z7Gx=y-R zuTMp^HA+=#xJj+sJjV%+3OXF6`F#f2Vj}K4jXx|yT_u$(Erp`O@5QSMdQ?S5GnA;` zmuKCZ+Yw+lNh-J9tK&tvHNAT2Z_UN0jIuKcm&9pUea!t$TSk!a{jIpp_0FNiwJF4% zC@*TS$$se7Kgg-g?ne8T)`S#>Jy>|iP++chJ%_of&fZg!qCuHqFziQ{QM#an+>4#N zBOw>w3LAS2bmDGETBte1kGqysH@TW=3A=ttz|uJS;d48<_MqBEHHHeb7aS-*o(gXC zo?UIEpd|9N_pUN@W3DfMn5jRchaeP@Y3)_z#lM-Q2yb-IsJjV2eQbL>VqfPcz1Mqd z3#&PAZlGEB4p!7JOOOhC{*CH|gM)>8T&89;9qH&K8n-n;1D&EiS&1I;IC%y}4Z$*Q zO{vI0DO?s!HfhrpGgrmKOyeQ_R;hh;9tQl@_rnSo2%XU8O%;vmKlqLnS;QZOOp|`n zh#dk$lxfvgL12hpQ!?`;Je{{cYnGNq4%0JMj}c4bGyqoDkpy-C-ue{lBv0FtRZcEi zO3mN}15WtxYvZnr@tSm3pg`8 z^&GzwL#W`c72nT1mbb5Kri7jkt_$LC{5K2%`Kl=+hCiaOo$a4Q?7F_u`p}3f4>PZ4 z>{d34e2}?eI11fUz9Y{#K?XgqqhGSIJ6cr{-fd$QmZUKbU%}n$BU$Eu8-$dw*py^1 zYhSZgh%rb7q%@yR0jA9U+qfV=Ke8hOR*p~;{t-NK45?}kQL4ll&vEclG$3d~jV$SR z>m9F?P){83Mrx>w=r^^U0s}Me9)~{ry_H)LG(7V^X@*1Wrxv2z3Ly4E0s<(Y z5r23+LB)tR#;3aFby|kHDXLal**D>0$9H~adP`n1vT#Y3G;`CR?5p-eQ?;#nmK*Wd z=;^vylh7+r|LjKIv27=@RWeUxpd8lfJuqcC0;TdTXDjT`IYF%1&#oplM&6~yp5}Fp zpDsthYIR4*rqhFLIu~ETp5eApsYrVTU#e(7~2u3`_*>R8sWfvwHd; z=%!N`R3Q)r?z-uH?AW)`=A_z5Owv2-mo{1781rji12<+LyOAf7+t`AZXpAu(EAmCc zdSAh7MKK1vB-&O5wSce6f_YxXp+DHaZ%W{+;sA!w-DFf+F)@eYrJC)V#U#sl16?yx z0qNTle(eSiA{OnByR4yCCllJrW87jz2BDix5vnlqja|XG(0vJzM?U0Hi~E)e>=1le z$+j+!`|#gf`inoLXNq$Y>6qSu?3)#K-@ z6x#>@-*1~jeN7S);r9+w-0#FhSU(~`+=TC0*a-lT=rDRKY_vp(z$JO31gG%OCN4ru6H5L&BuO<+m+? z_nz2_ITtlBhM!nZ>!*kJ#>330+Rze632|H@!Q5@ItYCuP-W0N*)OETkff@3zC!XY9 zz(6p~&+^Ulqn4btwhq0gQz><~MWFBtPRD^#$MfWi-3XRZ_m{?Lw8z1hr*HmYA$$Owe;RJcNl>PD&=OlFI;2^5jqT4fpGX{dj4Szp&#g>7MG4{GNqwkY{x ziaUJZJtz5|>v{XzdD(lV;;aEQ-E->N9Mo00FNzL{w)v+oaIE60(;FnsZY7?da6 z<@{-JsDR{-i-;f2$8x7X)e}=1SU*wY;<)oL^t!OY0AiX!W2O-Z3g(VJjqys__d4|J zMbsR3`m(rCMWz|Np%MH;BiOhOS`WBl!mlY27&QC2CTUoaVSlLY>1Lxs4!Ucr$_@MR zO11X;WBTtYgcuEZTQls(rL*XaFk%m3!cnvOZC@hpz@?13r>Cj{tcYY75H!r-KNILk zIM0Bbx~&Z-);P})bifu6RAN7Ih4n7t*2FWgV|BSGoA7M*RG@1`OXB7*6?MX&e}W+; z$@OSKqrVbqUfL|YpD#!VB}fn@NB||M1;f5tT&iwmFiy-HyA8fy^;b6@e;g|km@~48 zJs8oNEaLW}1y?RIuP2!S{3g*C1O3W41*d8Eyz|_A#AJaypRBV*`I@Ztpyk zlLyhp$vSEP67##kQe@b*(a3RNKb7P!QG?HyZ*d`-&pmHKa*uN^na@uuYF+|&A)OC< zA)6032rI3Yvt(T?#7UFi)+>+@1i8+1aYVTv^6IX1tsy`bvdr;cB3*k0Ge0bjXAQqu zS<^~VpNt^OyAn*R5QHb;fG6O9$7ww(EqTv&Iv2P#kdggE>k3E9NId+5S#4D5ZUB9d zT#o1%^aZmgAyfzh&)LL4Dp`AdWO{?#afbKWB#ry#sN|#S)^HeT_23ISBy$lN6AKFy ziwF~o63$azjNV-T7rD+AwKOViwTOMqq=xhj6QZNl116$aO}&WzkeVa*<4~O0b^^uT zNNYs%;)g||5{$V+`))5@!zQ0116I`PpYAdfn`h0NF2;U_Xl&j>GCy0o+ z6>zWdZ{M#sL8{sPTq7~6NN8ji^Z;arXgK{c-+r%Bq&40-=hOUr<`dw?t_75u@$S-NMnvH6u!h zZSvhGoX)!MSJQ%=+gO$J`(!JWjCKzD0h$GV{`AbBsbnR_3oE}7%soWjBI8fi|49C! zodONh1l`ws)gj1g&H*ph9}KyBCcvw($}OZ8L&z4qA9}(nRygO6Ne7aNwv6;jduka& zrPQ_CUUP zW?e5h`;ZTflBYJeEk;WU&}IW zSWa(->xh0&D6*Xmqiv{`Jt5WFk(SMhp&x-cm3x?k1$FHQiHxwMH*(Po#iFNi_CNX6 zbK@;E20AWo@A$QMC+}v<+I}n+RL*=ImK@EcoBx`>JRh>BrP*GY$sf&{Qop=R_tMPY z87@jq!VAvocw=BeB?5K^OTVAI%zAn?{e3E8 z&Z^H`4ZiGf=y5}r#uS<4NXR6JB4g`q!%FtpiX-O*MSYldU#B3fmB~189vOD{J@D8U%!3sS+pCr17-V66Fm8|!KM%b zUEZ&9i=#Tcle2d5mRQSc?D5quekUu>&ROb%C~$6?pnES!9~zxh#k9Ct-z}t-|0H}U zDo>EC2#m@TsROkDHNPTIVNTv!XpSX4$$phn8)LXMX+4?W&ZJ$E^OUoU3mfXN=Vk`6 ztrO7j8p+CmSlXYlU*Ew2;6MW7Ek#2|R14N-k3q&LK}IM+hA2U+8>WAfn|q0#pYVlE zZkcOJC1QfsKG$gYQyFRezD#2;^TBIt@we>qDnc@v&AquAM$J{`$$j(^5J=*`7gTgr zv;?miUwoJu;k~l6$DT~tNdG~W@xwUd#}9s<=yaxCcE{3VQygMM2%3Wf?#nJ67DGTv znKn3g%`~}Ey-91s@DsiwqM4~!9cShly2$?pCmG~1*`{0okGS;bFo`H$R6(ViJNvzp z6rTim-@XDl+xmP8&+d2aH^MH`ygLRsULxn0)hNl6K(f*^T82snDGtRS;CaAe35ZLX zUy#taZaIGwH?kGygq;k>F((*)Fmv3m2dD|Ls@lBxMM$T0(|80^uU{KLZ~2D&6)64+ z6n_PZzXHWyf#R<~@mHYuD^UCuDExi};;%sQSD^SSQ2Z4r{t6U-1&Y4{ z#b1HquR!rvp!okOP^_fe0k-Wbv}^v4vTA`AoZMDNG*Uf(Gl`T296b18@|_ zA(^*I&AXTO>Ao+m=T8U6xC0oFep4~b8RHPmDdJX;QfXqr&?EV=7-PC0um>bRG;yzo zm?jIP12ATDM!C}tZ}oq=z^DeC=2GqeFa1 zeFES1GRQPrFe$+rWVh47TQbopHT)$jSy<7cF3iFCSGCY3l<|*D^cv}Uf2x%F-5U98 z)tElDU+Y4OQ*(8UzA-Kf*kV!T{0^Nb1IBdUuydRf9;kaZl*<)*R#pmY^ zGL9e`=@1A6GnjJJ6;TcNK!=OCUAg0rx$bzmEvHMegkG)0v8sga$@)(?w7y49@~Viw zs~}FQ5Tfteh%!!2Y@EsyoL5EG+QTzGmt;xYYEtDV`3Nu7yo(Y(jAv=)Lt&O4El>_O z?ncS#LNAB?4*yILm!fDg4cSsCG;WtA=a*~D3^cFQWg2-dewVxyn=mCi3%^`amPTkC z87*@5Vp=4{ImXsU!VoJi+I-|za`MTW!Hd3BTO+*bIT|GjmRfdv!LAW%RSV34?rI>b zmnA0KX*Y%QBp!a!;D@dEyh#Of5Oc+4$QovRI}uMHK~0jui@K;+J7=*-07Zv1t))M8 z++Hg?$=EXIQeGSfOcCD2zB+`7nJsuD9Vw5cV;%AeS(I2=y-UWqN$c!_dkiz7?VpnZ za@SP-4QzYL9U7cQvW<^w=@Yxh0Zt>K?5}Ma-LuPh zv-RG<{IA9^GkyqOSPoOQda}Isq3k4Qnj+AvnhXP-6U?d zKX66zj|zIJN4TL*GQQjw_NI>eu}`!kKq{~_ZpXJ?hYl|CXXh~F2}&aoEf1TxLbnzC z?7*RUmwP}y;(Jh(_w-y#1d4$=$h{Dy+iL+)b%j`M^ z%zpHh(*u5Mwzvdl@>^8taG{w?pvI}sMgAid{2cv$yJq1xtSnwjAfV>vur7ifH}Qeb zHxr=2(SWT|dxhYngTM)zrthWuNx0*djZyUxveBBAx*MSqNV<&qzNQ^|{6>C0+pkP; z(mI2MaK`=Px-AJuycH)}6n6V;iZ#dh?({X4V{ufG|Ma08f!NtDeRHxE9%NI44&~Y_ zm?6~@`vTjyj~?Oy*Hi>;9@8gKT)u%KfdM|nmFZgUo^>sPiZ`QFDc7emoq{tzmkkWi z*1LJ?&is8@7-SMAuJb5INCGwww%wO+Pe$RrR%dV(xFh+p^y?j7ufE#BWjtmScJRxi zUgsXPFFsFXD%2kQJnGLxGuzMcE-0`qCJXqG;apdv5JXm&x@UKxKE8c_Q9Y$bIO3B5fQmYgXo!~4rY~P@7BJ=UB!9=2OifsDGcp+EJIvIn|$ID~p{S=AZ__%{HkpO>M0Y)%!}>rbW!bC+{Z zUrrXW2-%-s_6s9A4ZP%vw3}F$;~x}d>t=NtEvhbYyf>L~g%?d7cT@J58=(Y`GET0I z3>gf)4i4=1iE(_K1HA)$7T0R_mOa)z60!}iK1tyUT~tJ14wb8$6I8dE96>&yY0i^n@JAP=2k|@nX+6cC{|D#d8~e`{AnO zEzeeL*KC@>kg^k*Y@a9Cr%S;d-~QXkGo4;$e|-NHDIGCpZtJ;;@hrqBtIt-SaZ!9P zS@=jn3>#?1Z)h!9K2KafYt&p4G5KgJN=r;ZVmTA4IwB-UaAgkKxj#QiT#dc)!h69( z!m9~aQs&5&r31S!zh53xVsyL|7VF(+j*Gt`r@QX&sBZie>iQ;&r|D+)V<9urJzGvmWD2YN`>E$ zm-p?mPNGOUjPqug$-Uxy2TqkR`FSW!2mp10BX2VYHkS~X`J3`ZAvYz#yt_p#A$~#+ z!$(dOAhXYi&_j${h7J#E<~$MLd_=Z^kqYTY>-%sR()K zUCcEukDW5#3maXx0Ns$EjO^v|_}XpQZsV!Y^P3m{lOLPqr6~2v7sV}IBy_$E-PCj> z7F-Jw7BN~2k`^|6H!6#>j9jXV*PI@zi*;=Es?LHl-tccGtg@TRw}#muGkjO-?*!hNN5(XiUr^-y1W0l{n8@m4m3h6F2v4Bm zeF${0nP-d1vd}aa>H1B`aIv}0Pt{iZ_^^H*05Wpv-r6?x1R9-XR5su2PLPI0o?J+n zs)m5v?gED-bCm8mU+IQ>jQAF=gGVfAsA!VJt_Lm#^{FaMH&-`+AdIMHVA~KHVPf4stxqCLctRlbY z=Ye0ikxHOh&x@0@4e2F^=456JHy*=j-~q}~c%^!HF4Y@}3RJ7`bE&9#+6u_~^Vmj5 z+0^@tJR&o;wIs?P=RT)`(=+^$B%*)x6j@MUr_IOSqDqDE@x$c2X*VG)Tqr(OQcB=wLbPR9<8fhI~E}BJ;iF4(==2IZ1 zu-`yomwjySV3Zue@*uj_Av=>T{i8Mp90`CMJr56?Mze#LX(`Mfjmx zPR_Sn-b7uj&6ASfgFn|tN=dtX{w(;(>9}xVT#WwwyP1y@w69Z0NgBI@<;t$}Ebfbz z?vAk$E{8BrkiWY!vf0EelFwq;*C|WZXiU9o`oX1oxAv<2h^Wl(DO5*%&ZAA0tU|MN zp3d71DwS-l^*gU`|IG>lvzA>}`jZQdzK$xpSxXgLXy%qmmoiF7n-eS3$T^OSk88kj zODsml4H8pY0EFd?Mr%g|7J%~GydBVpSP$J9&o(CH;Ym$wuSp2!Akey_V>VM|cE#HB zozv^yWY6-}dqt?dVeop@2>~+R? zpuw7e;ra>!zqbML>&8mt3`gjnN5hm;i zczH@0K8O+aQz>t3?0EILa#jN==-dxGs2viOyZ*A7ux4}Z=;4xTAv$5?)4+WpQ*mQ0 z4h{d}l5gsCs_S8*?7m6r6}`)=yKTMr13Wlzue(z`HpwSN7)<9)UE0FY#oyenDtNOR z_zXTuX_?0rK4D&ay}Z1;T<)2jK6zf9e8xRk;Fi*giQ$fk>5$V3aCLh+Ovzzdf2~Xj zeB>s*oz?`s=NNFQA^$e7E?FEl-DvvWtP1@W-*a zhP9h4gXkNagGrn|UpD#HqzuY6*sm93lLAr^M2v)3ef(1H(Q~{@c)b@DxXk`{W3Sgo z(;crzl}fJ=8|UyYg?3G`JCa7>0Z)XQWJRRG2fU33wIj*@`CF* zRoj^GQeKxqa)lMobV%BGl*hZIm*}aICLvoZ$HnfZ#O;x+Y*+x&6#A;K&2fWICj};A zbopgJaZfo!*Okb^t|nU7bbqwJ`Qn)-^eS5jbJneZ#H+h!Z59{llQS8wUf&U~NMj?9 zF(G_LKcH# zaJQWOkkZNrA*c*>8D+*j{y?d4*CcH=D1=6r5!%wR>5VWJ#78kdYF2s z`WPJ!{!FymD#F2TT7qu$c;mN4qw6F}iqD@~o#gkzEZbo1Pg74nEIFE_LVM#dB7mG@ zQ`W|eS`keevw@otb^vbo12YF>&hWXsK~*<1U_X0!h*5Pm6-7w-m{}RIu7Z+jSzB%V zn-+dWsWG}k==?L?wdF5`ZN)zxK(4=2jXDkAW$+iymr)m&YWQqtAF^h^Oh306{jQ9p zI6$y^$lGq3d0Bt%c84@!Q*ogr!)?Cxa-X?Wt??xZW_~648w9iduLQY6M)I~3>jEwwXq^BgafaG#waK7(JD(NaA$WO1n z)1&hy`hW{GPN%^`+*GW?r$l{W&iA@?c*I=}^Ri<~X{J2fGI^B0(+2E3tvIa!#3PuS zKgmBQG(vN61Np#89ws{INd;{;BWPKW+EZsvmssf2>ND@-s-5Q_9v#1&d_H01pO1^l z@hD~H%l4>61oo;mx*_CvP?^mMK>DA0y`cPlygT0!U2!Tz`t1BjyUE~x9yNTylgZ=4 zMY^c>_=b@o;Rkklt)ao*WJC=v0Fi{+x~#I2+G2}8fLE;@4-i;nd6FwJey+}?)}AwS3|r8Z zFqkmPh}6IJ)yLQ07hKHVz4v$oC>6+OcTdM77*DVvyOre4Ak@rygs!O?DTP(LK+>%% zwl5RX7hL;)2>S}CIF_|rLXZGKf;$9v3GM`UcLs;xZoxIUdvJG`!9BrUgF|q4w>KnL zPR_mee{1zx)6>&c)m3|c``a}$U9DYU+WDYT^C{@ImcddQuAg6X?o;X=WxbPh=z95N z7qcYXmwP=8hS5(@tJ>70}^gJYoku> zG#J)mRAQZ_;C?=i)#|ny2fK41();183%#Wqf7OL831lhPD>LT7 zYT-4{B--SZB4Hs`!%xu0aFhD#VhtAWF${n~H%2wQlr(a{tNMJ%keg16=uYQ)I$Ds#c{UXU?5&Yi^8w z5izjM^!)9o!AZZsHro%M$dkaoxfH%96NX>&Xs#ui{aHEsncZPR-EljevK~9IZEr5{SbsFi#HLcm9b$L zda&cBMF@0SVW;_aofXrx#DxHJ>bVnDxh%cQ?Lx;+^6egUwCLupxTO5XQ|TRi;I|(M zxjhwmBzdeCPO8qT?aLIKSlj2a`AoTHuI~CX-DiFa_Pk=!1zgN{HMt)WznUY5cH1Q2 zO1}CSX&wD4Pe)K9J)B^?-HPk&kHyM8?o_lC^PIKmOe$>cgfHELl_sCR=8v6l@_qiS z-fLSu*)5s6dJ=N8`B?>5`>@USbMUcXplY)-t~Q9XYeuczC&={dEg!VgZIkh04J$5l z_L#>{&Uh5=HogycPaY;Nm{Z;Z-`3LEI44T=P9-5i)Cn`<4qmV>V6RGT zdP^b!9U}lE-s1VI-j8TSy0H4HgUq`ei{g(T)<8MqXm9WdZZO}LgOJK_E&(;6aOR7} zfw1J%sdxoxvHiND@Sz6AAfoahc1Et`)WoAnuo=HcNo_pC(0$XRUUtnGt>h zM@w@(U6@{~SX-T45Ipv3eRRE#OKmnshZ3%ukA5=|i+Q+zTE$~6ul+_UJ$8sLZ2hzJ z*dmQK$`2@ibMS7B8HjTEJQg3@=rWj|#~Fwj=?1dOGC!71c1dWE`f-}zt|#ld+i)_J z<*@j$ch(}E4xYN$O0Rk}v-ki)&3(h_D`4g|!*}_QY)m*Sm*0s*BmFBcuzcQE`4q~bE8hr?lPCS$RJKVO#~{J z-P!cYWy24S+yMmkB1x%kKo_PT$dS5w!mYpw7saW6ivZ>{YeH;|bm186A1s3|E5 zJ=`fN#02ahzbK}#$+&HWUo57&o*!}uA6N0rpd;7}cD-7ztfVrghcB^?%&x zQ@X&fPa_S51e%hgw#K923Z8OQ7f(q7%g0^5%ii{!#-5(tm|Am05P(GDrfT`TIMs|x zrVxuhlE6NKhDR(vU5zFP*(gm0Oz@cQeN{Lu9Z@1Sj8vrg<;z02Mg4?+*R ztkSA`Jlx3~`S_;Lc-pT>hm!0Sk)8^II;{(dR$!WZ)!0|lEN)UXKfr)a^pwBdoN@~{2t^h6O zI#oRMF+H|nQdn}rZ)OH#B0eSA;RFa>*{ByAyV{Ybr)-x>q2c9(n^#GhjAE*PrKnwFw?yu2L~mWZovS$U3QhIzPxLZy2|yu)G2VtLmvi6s`?!=tbhq2P(< zhUY6Ac>8=T)?kvdo=>Kfd>8W{RD#<_Z`cB5WCk>QP}-4q0OC433xh2*$3JgxrxuBI z?aiH$=@f99sW{Y8jeN?NsMdedxV$%5Jm!x#)pA5n&8wwZ3Dyp;d99pxuZLa0qcx;h9_P&1b{3h>rR>(FSS~>vuQ%lzJ$_>0 z9Tjn1^JJem4g3j=>FFU6Ph?RV{Mau9h={mQ*wE}t|SKjoEG<_YnyTNM6oK~mh z=GxzCCD5>BvMdl5SbLl5`YDZ==jlMj)%&3FQu|UP$a9^t@R}2yCJ!D?QgMccMw$aX zE}sUpA0Xda&w0ZiZ=YIWACFRe-SbdQg)qXbaY4@=ewn!EkgAIbd=PF*H$gn@4M4^6epJgUoN}6u)b&94FGA;=# z&0g2mhWOMMTDay)J$VdZug}?@nd6Bq;UrmcITiVjFY5*$l|R!^6qh^Q^w7EAL}wx# z|M-H)hrH1uh(U)7qcB=xjI0a|kDyah$P%*GMZVe1rr6#_g>FI@mQl6Cxe|!8@;;^c z9@5zIZApw@p`LJeT^6BaX(&_OF&2$VuG9)pO?*FjM4DY{s6YI{f3bLAWIpalG!*Tg zV&n1Jp$EMeI=#J)Hlcz)1_jsrR6V8m^9R~wN`K8P(0zqoZxEB_BC?Dv%tfJUp6X9D?0G7gq zZn1@>GCUACtVJvlo6Z4ln~+K#i|tq;KH3B`65BYl3EMi*R-)8I5W#nTu*rllcf)lf z6=tb*#`A&a3D#IYcY5v9a_(m`vXes*u{D~ov$-7f*>SVf3j{vI^_FdDDP=C(2Ru7` zGJG%31#V0)Xm`C@v#aB3*)X!Y*3hw$QIpQ^=p+4hA8o{Kge%D!$Qs@^kTwuE$m%|X zJ#Iu=gdp zmK1>XDm8Yqi#N1{q zDjI3#CWpp|g-^=|f0j~jrcgi^i3V?w%h;YJh>jqFv=L5V>164I@1*U->umKyEvm&n ze>gCPgK)(|l`*r7HlrKpQL>x36o5(Ca$8zUs%H4zW(cZUd0+Lvso@+&B#ivzavm2S z(@HcAh!dv5QJkT}R{Y)CN;XGsHE5LheH|RNCC}Dj&xL%^SB0 zx@5uU4;Wvoeblu`^1i{f&QGm$BT{`pkf?Xq=l6y4mGq_d{mZ2Wx@Hh*LuU)|T^vV! zMV@oJHP>)5il${&^qAMU@vQiksgv{h9YgeFCV8)fdU3{leBS9e#b9+dYR$1~oMHuq z;up8Ig?EJ#zV^Ow_Y`u6qFzd2hlo{SCdx*Rufhu zR+m49OzA3vU9!>Mi4IVnvMUq;nMY#9p{U zbf<4BEwfqG=G_%(X<`#-%_|JG>1d8<)aF@>Cbb=oI9G;qkPm+GKrN&#sHq0NrE{1^ zR)e>Iw|H#Y*q@6(F4G?Rhf z<|jJkG?D)^6f3@(OL8=^E9r&``;o;pSQlAWOnGFhO?XIJV<5;PJ=j}gjm+sblKgGZ zl53z#zzeTs2TQ0u-ZEE!CxtfEkt)A>_?`vKtpPJ^BxxX0Ljj;HA}t~>zFXva6Rl7{ z8X%r9uV^c*92D1BsHo}MtSjY$DHQU*(7wYJI%YI_3DaWQR;}Og5#GQ14^0q*SAmqv z=-DAC5eP zkqDs*VeV`0i{q>5%jN5aXm44hU2*4WS=3qyR61_F7)zMPt=*J*@-)ezot8bEpSanX zNYKA}oIk4-*1U7_-(5H=3Y?Fj!MKvo1g1(4&VOhaGnLe3sbr~yucWQSt86uB1S+jS zVwp5<)DLfN`aB37SX^zjKHQp>(O!P48&7EEj4y$yHJ5zU%)3uO2$+xg&!O=e251&L zn?u1`IE1|CLCarp8Ac0jdwexNvGApPG65-D>=oc<@bRGSZ{sg!f2FJJt!|E%iAqU6 zx^PV!es1U}tPEz2Rqj^=%b)Ov1cB7Dvlwizb^DC70hN*)F6tOGPU5*cG~V@ZiG__{ z_1XP3c{(Ezihey_8BudtOZW4U|id$6sSsrH8M&EFIQ6hKfQ;>=RHMN-UGCkdTNL=Atx>gYXrNOpkc9;x2(snKP#RszPzxBn9|N}Vn&eoZs_Qd(KX z(|J!al@vc9cf4u|j%AUj*=$0OXd)0Kl(PxOwDS}7#8R+Unv2~W>U0M={FW}9l;(r0 z0tK`_f6b?x^9oNllX9_@wNYos_7{^UKnI z-$3}cF5K%d%_bE1p~2S{=wHpgrkG9G${zV0TABhupft5ck68P6n*NHdJ_08Tb**@! zO=h=dkRlm;|Ebr2kWU5ncM1MIpkguZBDs~YQRb5C+`*{IuUd?LpZs_60*!rNU~a~{ zqAr|QyKQ;4=|UmJV9OuEKt=uoRZ^WF_$IHic`nlmhJ@2V41+ue$@3NQe{_;d>@PSK zs>`orf#{{C>56G0`Csx|BQTE7lhGSErLCqpKu&vqplN15mSB7~*CL_`%4c<;e3l0i zOxE^$INt4l!X(QxmSEUe83|susjfVe(D_A16THNy%*WE(^5u5{yurH7Io*m0b6Hwr z{ZTUO<&2VGp^3Tlhl|N$YwdJ3l z(K%}C02C$0-*aADM%yK~zG%rQ=Z|iim$0h-uPPNaY6+x3f228g4R0(wmnyA?dy%P= z1RoG_{)740rLZiZQo&F8)rdw3Se_VKG1&hP z);tXBwO)SBwn)bY5C)<1)krM%(WS@pqu*ScS3M*VUpo4CgM7^}o3O3)Zs)Nr@2YG5 zj2o@u@cx$^Ha_6_{{^=12hDYxH@Po*2!TS|$%*d?r<8V< z=nDT~p8UP41Ots&9VkGMZiG+m6MBUOD`M^;%k@x?5%T@ z0E^oD)s{LWxwmL4;AgFp>pU=MY0xJLYlZ*C5fnm|K%~~IfQMvJ;l2@r%s)-{50QAa z{NXK{8eRXNQu$IbC8%Olxwpz$=uuQsFBMONw-{kk6+=dC{^7O>zZ8qoW(Iayl)<5P ze?oIh{N~`4_054HE(r|7b-Gx#)8+5^ts9^pA+zJoZyi3@pcl=-DQ;xZJYaF~@zVgG zT3V5p1xE6WbmD}P(+WL{D6ImMiFjq4FsEpfO(eu-{)4%?bwDC#r}$r{MIhAEa$-A| zYpelv6taw;&pjQoV=5-nn{bi@Ynr@RNZ}t1R8{SbPZu@|EEP)mc;F!^6n0@Q(s*;J zbCExt5ZXdf`9M)cLs4ZxQB^rbk|kz;&_Pf(G6BSYFMMidXvC~bbSxh4V8HIam~QJ} zP1=a2iwm;?eSzp-Qf zWI`SNS~D0|?vE{%%j{z`PH7=w#=4jGMrCP~x$?e_0IqO^4CYI*4wat275M!&HLtQO zq1}oF0JNb0fZ7XKYxzi}m6E?lOd`KgID+&;Bsxdp^*rcWRfwRK{@9EuMXV}gy2T!| zj?Qq>H!ajDICCXt?qqv$Tsrd<;cX@rYM|WM zdy6u!uQ1?7IAi?tMDdRK&B}yU(GsYgD%o$8{@8XXf&o-A+=3f-WlIQny0eSBZ&7yOtP7(UpC8@y{1K zA6lkD0rtniH#L=Hga4X71rpj#>!jmvO}-^QESBDg5FxS?rRt@OE~%d`>pPsAUX*-= zM>NY!`K}T4QDWf*#7&_$1lA60kw2CN=?FjR7(eL*Kj{=d>CDl1hp%S(t!}5)H|B@$ z$|!&Yi6%&B+#NiZZj-lum5GdRm52g2VX~1qD&za~Tzo-17(@{wwNp#Ci6eU+x7ma_ zEaqO@$9=U4W3OJ{cNrkRQOUh#*=>X)k7d95@mJXoTb0}&m3nX!$b$xw%&BF=0;pw8 zR7ZnS6}MtsH)T(G_eSl#`&gc0A?ph|k8Xns!#HSUk^a^kAyxEWih}AQTbJ6vem4Ep zTn;1X8ms@$5`Zl3=wQG)UpS~}izOuGm8@$$*;DTDrbKSQT|u{GiO z>GsA|-rDQy^TXNqUW}Z6oZI7@gXvJ&yKULC^M!Hh>9C9*<&r)}+Ta9r{=C6g@%{5t zNU%iLEk@*Q4a`W5%Q}R1_7rI!0w>7rDYQT@#P$?;69Pz$>z!@f3=`$^LPs}3LPu(w z?4)*=Zv8SFS9@k#GBJvrLgj2zUXW{dJ8Orhd6tDzG;7tva{*pf$d-v>s$%B3=D9ez znz>xLZnEN3;ejP4CaRmJg4@)tL~Zoy^xj1=9~BPIlqXhI3n>a=)>#FdBLxSlC~g7NNfZB1;$!qZSnn8u9jp zYaoaxlOQ5?Ed;<>fmr!M6h>&^?;VR^5L07l7eEbx8k?VHswPb!=l{hL{-aURW!4Z7 z_Scus*Z_l&}A4L*#`PbALVcH#6(v$uIV7K1Y`< z@e+r~L^=n7i1n^9J%FoG$f)k87244Tay*4^nW0Q3vT){y?N={6;Xo`D8ka|EG|2Ow zq`1OpoR|K%5uu2;^xm$HCm8T9eyi?B^j($U1~wb=j#D(X(@J|RmnlkP8|gUsoMojO z6(vETLt{X3nyS{lr)$*Sb)xga?a#zSf(;!_AuF3Aj7G3L)w>im$=x`PINq;OdE4VUVgAQvVLZKhY6owCj#1F9s3E7DNy57t%1>5gu$4TjS6*1pfmXXy89J2BhO4 z{h<)CYB&>`)=sAo0aZ-+tBhLu$*=tK4>|jjICCoLg}+s)FX79X5ZPZ!fM^2zF#4OB z|CXilGVUzZ!0u4M;T4v=gKG;2H;_(TGNb;30U>~FWZ}yAQ|On>&_nPd5&fzBq#+T$ zePwarPo5y^pbC}W*v1H$s-KLl;d``YvgM(fh3Ycu*S+ zskO?hXoD8_YK1qT5?!O=dS% zVz1-nUdO97iwY7sH-rRmM*yAU^S`ih4I4oR0m#>K7{fMUj+v7msz3wtJMR9P7%Vqo z)cp}zr0Pn}{B=T78%ysSs@dKWZ<|us1=EQL{imW7aqjXT`@Q4?5b!U-+V8tCNdZbQ zgrKziw?G9&AA3kNPC57ciaj23&E&yq#zZ{TtAOz&ki^u(*O1EpQKaB^nE$53x7=24 z`JsQJ>i{BC*TO&I8wl}7Q_#R)8sh56-qJU1l@ZO6hJTFI*yBZH#{(}+C;#<)u}lCo zdf9J)e@6Ga-vPeoy$SY`0fH9Ai*vY~R%>~J7yE~T0hb0K@v`C+F8|@t-j`Mv3|NVw z*ldQslG}(Wb7<@V655g1phx2X_Jry9cjKSPv^T&(fvhQ!IFxnKhbs|SizHM&??hk* z|EbntSGF#KtboX_;8)gf_CagpX-+OtbqE4HF64PtDbHsm;(}1loUnSLV-%Y_Vj%HE{8@cuDsEOpw0; znIAxjeGyn?m#$e+d|kw4fRlIM_cQ-??idLH2xTizZLYqLtwf28(h$G`Sz|nVYtBn8rh^~GSZKr zd<+tbf11cY1e6gJ$XQyKksy(9BcH_yn45SRdabY^y6Ez#8L?S0HnDm!XR+(_7^P%* z)%3CQ^mmN{E<`AxP>iAF34amt|Kj<6n+^QUV0vd%E$@e;^-w zPU*NbnxNOYGLb$sRX3KD@`4_oqSTYotPGN=ftz3c4$BLq*Zf8gzq0q~Hbu}PRy@^R zd+dvHAJI&Y;}NNXbURJ@m!1KbR3msWZ5ZU=jw)R0% zv`(yi3k7(COq%4sbF^J_m>Y38--4Ki?YYu9q|CG+nII<>qj*r|T)DOhs_TCbVF6r%-;bp|oaAWD8)4unjlRUB{aH z9KecYkP_A@J+eb){8_Owv1D!&RQDZw^YX|nvD<|qoHI2qi>Ld5MS+x)8Qy5BF=iSk z7q8>fshEfer>7k@!KVfFx~BQk1UT*Ohb_Cdwj|Z_O*- z#3@(oK;bnHR4(M#qmOUJ+G9jLWH_3gsgOD9d*TPU-^D1?nFPu9#?Q{6x4s%zL28BE z9lal)Hxt>P8h6c?SC!lD;{5^yw&1EZ0yD646{C}CCIJhk@DoL1H0*u?Tz)Ud)Ifjd zT2oA(AxsMq;<940%pe==fe#Pa#HYEYQjUg6G=I~ZleRDw(LOG6hYsU7z`jD%Ie%O* zcY|YDw?dSBN2hzyQ<#b$4&z(2XbSoxL{54bbq7*I0dr8#wyri04zqY{(VOHv(47t# zNLg~Ga!t01X2uwPcx)eIV@wpf_Y{Gm;WeX5lqpfyOB zN-2Qq#5G$C@+tjb$=AB86rJ?(P%4jAtbmA7kld(P27FhE+w3e0I$caWUjpW(22lw+WeNV5(=Ym!@4OwT zkl{WT$hknj3}pw`mjSMq8hn{3rkKEXuL$MJ#T&5%Q%R@?9L2$IIuWEsDi0uU~*#OHms^l^9E*rRn|tQ+y({eE7T5((w#Tbgo!a; z5_#ddH_}s~HtZ{TVWnL4%mrQ3$Y-!DrNr1G0}&!}$mU;AEcF%jQ^EMQ-;!gPW7i3@ zD<6!ha+oJlxX3a2$EuJjzOSP@=RWT|k58wJcymUL4SCTFc(XFbccIDF+NfTO7R>t&8=`>H7EqhRrT;Ge^zPT~k48$-` zw=I-A4$ucX1^TH4eSXuMucTsBsdQpTvNO!y1t=wk2(SBl$`lY_?oaKKQ{v|stKHB% zI^dAN5aw)K+(_~9a2b;D2<7aNGTa?zW%RukXCt-mGFC63LzLO*+&u#$D-w)HAo;#i zun@>QUT8c-a@qIf;4xD`diiErEJ-FOLo(yXR1Fq#F%FN)c1`Lw{#`Kl&O6qOybL-- zWCKiX7u@mjLU9(jBJCW7-bvX=^8PGIJ}oZ^igE+c z`uG=jQ$e7eW%h20fZJo&W%zG#_Bm?>Hy7N@~xsSy(w-uO7mi7nnWxwB1q zfm6Aj5%S)8CAF-amnQd&Srb@txoOd?1<+blHqg&V-4fmQYE&N)UGUOU{QlLeNqdwH zrwKQl*PYYr+6PwImbodPyH4BUnKT{^mU{cGQ%!2Chw$3Q#?H?0=~5tDZ@0;mIMV6A;!RJ(L z49WHSawgeW=My2fp^!M4m_N^yF6FmsiDJf+06hTA7t>s*K^%DV`0Te7Ig(@i#E$CA zCjOwW;7m5c1v`vz_UhxTgo7xCRwMdxanb59i&oA=I1;BNO`*s?Zmo7yrYKBqh9lFv zMJZsWQrp{D^bv0pS?^HHL4Rl1sKHP|fS%@@@-vsO9@Ry@juLnEd=}4n6Z=^i0+EWU znW?nUZ%J=y6ej`sT9zi<`Tn!o{ds`2bHH%MTXStW#Na|35gZ(Wx%G8g}trN;-7QWE`0mJ4^UZlcZI+Sd#>^d2-YmpvgJ{@abpgGd_>9qtt(KgjInNIWheoW^#-@xi}|kHsE5S;(}gj^bI!Q4 zG^v*dXuq!mv=5KTbvv{}PXVjAE~?19k6N!EBFXqAx?s#X1c%XMPk>wFA_DZ_=BKa1 z?YJc}r-b>R5f!-uDYd&%BlSY+89eqVxiyX=(n&Ec6$V?=wT7PAHFappS#vfYQsLNk z%_$nR0q!ksE9K?)6-H}{0^9@vUN+?(Qud_w4PdmfAXWBQqt#d+zsl7LG10oP0W|!;x$a9W{uLT4jTqRnn6-xDoWm zq168IAA5?82U*Hme=LFjxUk>K@bV4&VBN;FFUaQ6iT%X6a-@dzrm{op+4&urdXiAe z4d&iAHpkd+#WE;yo_ZG3GGW%w_RaANwhc+ZyHo3$P55_U06V9eT}l$z=9Q^i#FB*@ zu*2_`b!A|Q>*w_hF3%h9p}UXMFB+N}TkctAS9zbdlphC@GiHYm53eH5F_)~iHu^m3 z(_tu|2_G6d-QkF`qzJ+hs69SK^71}sxL!mXdg0dZzemT0ief0?tA7Gt(X@a={}#~} zoeAwFO&6Djy>M)M^W9REHt1fs@la3hCYD_2Q4b;m(9ZR2MH@!EP4kdAZIpK3B&A^P z{!^Ms+$L+`TfoGok(s_`Qu?#M&(lS>`(wBMQ%1$)SR`!a zmwBY2y3CL)qxYE^ERaa^$cSojsLtQNzCV(^+&I?ppe1+ka#C(QE@b~wAnMS*Z=5!M z_w%t|enF+^VL$Tn*#@;ioaZ=hS&3ngBpQk0)F_=aucCyc2dQ)rTfg<^69t*p}&f&1E0ZD!mh{R*6oms4&mem1FZ-~ zFGNcnWtLl#!4MMEDv5{t4PY;w|Mn zuIG9v8&;=dRco5FYrJEmGgf`Z1^paawXCJJV(~221na!iw#wm+_&nru34G69)WZi?LT=}@ zj3^IhXFu5I_9J$g#oSs){tWg9ALbeHuPK}`Syls7=9AUwxQn*S$LtF%mwOR4^zG|J zp%6J)5(2EID91nCU|eFmSk);GNiu$P-el%nk0)8QkFgITPJX`W7c_qio%|ssut}{+ z>Y}+3d~KN`HNQw&4lk_NSP(mB6Vx*WW!QVW>aJ_*CY?LcaC62i5+rYxB?ajF(6Tr| z;?u!RSv}y-S=O-cdc1m+!w6IA*?XN}e;jexaibI0gQCQVj~3CgZ;G2`d#Hdt;cZHx za26G4A_Xtx1i+mE)F0hqELD}+_*ul00W=A#nJ5l)7dXG7&Zrg*576Mo8I)5GL=1K( z5At3%dD(I}kwuzfd+68f2t_c_xJ{Fo?vumg>P&xMy>l0_kN4Z6LNur2`lbMCIKIN% z_f=wU?jcIXTo6w{T?#j%%aI3D(c}B_t*)#wc2L__s+lEPJ|7S;S6jZ@p2Ks}%+HXG z$BnSEvM%F+8n(OQ@(kFzL)$S+{Mv#*iSNEACc-{}91Hc#I~tOGkwxRj@ok#!kR?$v zBdak$@HQK8D3%PJ8cu>pYiHs9h386LKZS}mnTRF!XVmCsgZZ2AG?#!aSe<2j=%+xv zIA%o|kI>9AerZijcx7~l82ke^+vw$#b^6qg7;EAY{)S!IKHQmzRM>tHN9rqDiUJK z6#t3mHiJMzxJG|SxQ*y-7h~p%L`2c)Sd2;;Y^`zjFp5{SQpA_Q>~>FHNJ!EV`=yg* zlfoSsTn{ymhe~eDW_vtuaGFHvFN9`cyuL57>12h72SGK03#8M zym_vIGswnsj*r4F5Ic6C11lb16E(yOqp1r%aLyV_*%>Ak6&so3fegZD+zZ+Bx!f$Tl9 z4STz6{Di3U@9#$(BD4^E8Ib%ds^?z65voiEV`Dglg-irKIrKZBR9F|??QjpXoij|5 z%jRO}<*C0GrQp`}>zJf9F1le>tVM2+W4S7EbO8PokUGf}hAwr6`sjPkSJ9GiVKU#e zE9G{#>KCH;+I3 z=J8-e3Il4ub^IMd!ZqNve`b{Yz#GRYy7}V7Is>UnU&gw$l;SqG$oKt15*Q{V9X(gK zPv;B0g9WiB<35zbMv3bkmyG&&@o2|Dj;GUB2ZgZO_gcalb5*z*UwdRru8$K$i=3MD zh6o8AID5kxJ+@quS*4H;2htrG6eUT6e01tA9V#%30tm-lvyREr30t~}-zzF&R+n=a zjm8{7?hn0@FC~RKn}t8Vj3?VcO(is|KgOdHMht?tZsb6e3xgQe2Bs+)PWm1zBE1Wd zflWtRo>TsW=_QApN>yZJ2_SSc7>T^XSneXe5OKZWgFz8W*N3)3JV8Tiqs=31tLjqy zaS&d)0ade*SItvl_h5XKD2!PONB(Bu3yQGqUa23E)0WY@(OJFQtP{WX&vm8jsg;gj zP)qDv5Naw+{adH)C^9or@h-Ipu;#oz)lsS~bp0gk>{Hnh8A#K*10Ue!XEDdBtMh%s z49!aS9Ote1=r&g6fpls`b^TbP&!KdQ@r6ny*25fj?&)W|sayF?Tt`YwgJf)fob_*iNk7yxz5-uf%A%1WlKOmO~bwp@Yky1FN*CWBksFTLhMa5)W z_fL8b9tB!nBPH&p!$GHb1h4OQ4t-?`pTy|GXtp+L91ZcPYA6KK`|a6bzJ+ck`2NY6 z1NHnf`;DT|cQeoHUQE5}*Thw1C;{)-KIn1} z%e+z#R|xCAqV)Z+=Z8$jC5LSO!GOXx2P$vF5cI zsiP6*PxY-NGnCh}^BNfqm$S0A9>B;H4|U5BQKq3>M5&|$Z}BqRPnOfVU3z)l0qqGD zeh&9|%crVLQ>Fxk40EsIH5ylDRN&2Wz>Z7wYv`c}ioKrqBcC6Ppt$y5qmxn74X@G! zJ1(mCOVajuuzs71z$VQb0$^hW7mc44?5nlarAJ->h=s}(##&LG5z z6WQj|P-<7r)ns_eq+_BSLAiGAmBOZX`cl|Heec#D|@4u5nL=FEbsu^CD=6(5QwjSAL|erxPp z;onBgxSlto{YI(2KJW``78E>SJS}YP;wXtoe-4vrAxU|9#XwehP0&Nu z3`im&fMy%X6D&7cYp=lMZ_Gj|ZOddR?v=5^c6_d{elSB_g9B0gM9>>DiPpKP7Cg6g z;8XmJuc;8eEsjt=L-bQaAWW~Xq1l!vMKgo6LOye#wO6k&*E}%m=Uc}8L9=^9brx+AS&^{s>0# z`zol-Ef+`(tNw+(dl9n*QPN_NMrO`_4pYnQY94{fa2emDvx`G!*D|S&=>r+e(*tAI zer9;_E?bM7tRyb&Jod`!tUO+Qf&nt8rmkfS+MG?UKN$~oul04a?q6{k()sYw)3`Wg zLNP~%5`USNYHpZcoJL&wE=_}x2&Kiy04w6>e&3*7Hkj4|Y(CtBsZia*f4D->lWlDU zTNax9VrVmjUtf?8p0w{rmB{sR&SD&kCEs;Sno20`Xx<`|>y3p&puDDAcvo~O7XIw_ zPs(<##4>X%RDoZ$Esu)UH|6AsTM2cnQrSNaZU%@D86Kifr#R6;J$n8y3&sQAJQol(@@I(n;$t@!P z{2nIB@wD!|1pn3TrGMO@<$=OD{c8lVNWtx|tQ>DfgNMBe%Fdt)T?p8&m0!W^PnsdZ zu4TFw%kxDAy`_BYUm-zK}=eI z-}-2zzJ;NRxZiu(wx5KDO$HVi3hnC6abaqo_A@IT0_!-CCb6%S7yqh6-=<07yUh$v z&HLscW7ZkrS!`H&EH7&34x6F^j7rXJwKpjO`>{TTj8-Jct&nUG95;nX*B9)I48ln$iSHUuIQV6yxC? zl_a$HRnr#(va4gI&3N9_9Q7#flwV@k1Y4NDL6ygOEjZOyQt)`yT-4w<&EiR{c?)XO zjj`-FmEW!rsAVh810Cn-S5JTwTT+0RdLY>78AUAG=!D^#)jF1<@j5f9cIjB`N)RYJ zJ+RvEnnq4GM$3>t046j_FSPhjn*+m0dx^_n*I2#eD4ylK=(zMn+l2li-)S~&C|QDD zVCmkm#>0i?n6RMZX=1im&HC*Ikk6N{`$hq1J(WLQC)UKJuMFdTAk0Gh(DHuEj^M^) zZn4t)N$Gn1!&UOLDzx*gUqkprn=(_&*SgsE$eSYk#1+~h#f$ux!*v=Jkl$;cqD3hO z5j=P;`b<4|0|O_`7zE0It5L1IZtpQ;1Wv3OEK87f>(O&@?{J#u_DGs=D4`?T+kkf7 zo7p0q?oXm8BCvKj6jY@Zk%eFJQuINP2PKKVS5cTGa8;Ij#cnffu$p z+NUPLlV~oAUo8#D{ZY-?;L^9JH15d_E83RK8>5pCrwmu0W=JT0GX4xokuOv2M_Ol% z#e}!2{MKoW(2(BksbOVO2Kf#k`B-ID1DLaU5QHAxf&(-};${GM`cBvL2f>OMl}3^( zP0QBBj$7usQKa$zKfm4+(_{;THleSBa>N8`MIn3q z)G>gTm= z7C@wxko(PH1lpJSd4?|qLMrs1YmaO(&KV;Opl=HUY1_xXNqjyR_$CSdfZnO*wq03! z3ZB-E`CX#rv`f&y+so(;PCq@+l*3UIap8vokv9e>Hh3x|Dw!Xd*LL@}EV8saX!{c* zXNR7-nPZb6`TGbmgDtuh^3O3c$2=#i2k4PwZLqvM9M7Hb_;%lRawqKxz|2H7Ppm!k zX#G@-=NXJLC(Q`Ja<>P~OE(CIv0u9?UCH5W&v+NuTfD&3t%ckPkmey+axnOcmCW80|a##v2g@ zY*JeysHXW?caBd&qSFjK6J8OlHO@wYw{u(Jtx7ENOm~7V$6=m7d$R%my)g!Kzd?C) zryz5XB9trTnv$}>VW?vz_QV${oP4lf2fBi&->Zf5+F)+MADtf&^gm+!%Sk!}izE0k zycMp{zXf}%FBa;}6N*nnK^BY|7DigWk`Q9_y!UuLzvSwwern65noIaGDT1`eEmu=;WART+v~&#)i!xFdz%;Hkl6tPwAG^woc# z2m$c&3r#}o8Tyj}wRZ*MiYu<=I$`-cr-O)5pa)h$D|avRyzXQi zNd&^6=QU6G%sU8Ms8VuEJI`$|y2Fb#LXGWs&_qZzdkikBo0H0X*;3+Se|us$ItPB& zY+@iHeka`Yg5mzos43B`1g9tLwZBYaA!B~VOmEg+07*?K|ka5XUrP;2wEBfEnM&5yhO}bk+cqggV^^Zf9`nqMd!vpUHt#i z^^Sp&HDR}CG%+St$H~OWWMXt|+nQuz+qR8~Z5tEY6Wg|})AN4!et+&g|GM{H^>9_y z?%h>SEk17s!5Qk+s`0X15d`s3QcF+Ly&*^N!bwflc`w4=yy;u}0?)_;O0|qq-r86Kx$G^S!0rJ`>*wH85!01MdGYNU!X$XQJyAyytrJJzFgLb z(Hnl&@(B9bQ5a+5=2f6vvI@e(9xk>n4ouS%`&+NWraqG@g67-wV9@oFk9y?2w{}Q_*^VA-HDE_d^roR(%+}3glm51#$IAXy7syd#SNQ=Z`GAol2|Lb3J4@3w6 zSi$(MS(XuzRrW9D@^*&bI?E~)Oy4Rv(c0kWeUyzpXinq1&Mr@0Y+E_#WPO&cx+0yc zV{Y=NKYrFOckzzu8ZA#BRaa=!=~ZSip1#*@0Cb5m-xAftio58pw=G=pKFm;je7NYt zZ&I?eWqqFAmc3qry}9zUJ1Mf0DGz3|b18~AMI;?2ugpwaR;gYJQ{E|myiS~CR`J9n z;#MB4JW5Y)Y&=T$upIFzt(b>?r9j_7cASze>qc>e9vDaI_s){4K=ZMEyIw-jJ)X*# zK`#<`6lb#P+Nt5jqrX&mpVhOjSu$wW;vtH1zDIIQyg9o2d~57ne!Dw9$<99L>Uup7 ziD)(<@)?%(=Ha#G^X2P0^J(*bJS{Gd;X7-NX*YUbPp@#l|Aucew7yxreYtq$@|5iI z`FiwpbTmZd^ZX3G`uX{B`Wemp$A{hgA%Eb+#$|Q?$h%f!ZK2%IwA;YVH0$K^WAiFk z&gH&}kbbM{)p&M|ZzG1#dDW<6b5Y*D-u$!4eQo}AcRHor*sVAV$iv4nHsJowvto&o zpMLJ%@vc~1bWc zSnpNhA{jA|R)WAc{u5@W7CiN4!)Ci<^WE9)UTz)O<#X%x z4F544zAM!6=k=m)ZvA?b4W-?Eo(?5q>QwWwW;*2n?6M&!+p={X;Jn&+Vi$3rGH|=$ zsI=1EYPB_$so}L5Wrkz>eMYugU%i~<%6b-%Hn3tN)+7J5KKj7W8Lf^`epEdsTtl%! zK?}wBrRvTk`abo?=`;|{1lYa(r{sQkw{qy=K;A|ezpl(C4Jp!aB$(ryFg_CZQc^32 zsZb&Gi}k#v^|Yz0D3@mOb}j?b1xDrOpO%HV04=;0pAfq_&0`WJV#Lctb{_;AUYYxrIyz1{({c4AhBZZu| z(4>xQC%+y@`W!?$iMlVYli3-1z4aP)Ttzx9VqTuED?x(gcq2G==%+tU5Q@HouX%}~ zp696KYuEa@tD|_oi5wqwKIM2HM4ZyHJdp3@ zmi|8~PS2gI`A3BAsBJ#5HawRkrBjoR-uk^dmihn+6JU+(A(M8IO%<6|Y1z@skfyqS z3Ew(0K_$t-Up(0P(Q#pqjE~Lh^z4&|xEg&-vUQH908-ugB%ll=>%a6S=iI160FHc4 zQSO}kb=TLxLi`Gy4_>yq{N^&?+_`n_^kX!;qM(V)qPW~o^XJzl!CFoV@AbZ82XQ{3 z?I5j`H_Nnq56$(*0v!y#zGgj#y`%24c7D}P6ie?XtL%mKv8q``gz^{Wn!btM@~QZZ z)JFFW`&t1UT1#JY(z65h{bR@qjMx-f5yKS$9x>golnwG~j38}d_rZ?O{5#IIa(OnQ zKY9o^^Ymk2{EM@IQ)~JIW&cr+ar?%GVCc}oC|yWYy%Tto7dxh{_|9X9kV6bJYS(!x zg^1F&89p~)b|IskNOi$DHq{6kJ>p6K2A9{m^E>S_-A+{5`TaD8LD4~}XK!A-%{Db= zB-YM|hN9=IG*FhQ3=N_|L$d^rsQIL>nIlBbOgZ^vG@vIy;H5qi%1?v%0Khv?9lsF{ z6AhuaFBge#BDNoSmalIGOVeh!NdU!8NDi}TTleoDS~!_0R7Q>_K==> z%RS{wvXx#yvekBa#onsBf~#WwbB70#`O7Bx-Psy}Wsi-bTzxeC8v|!WajF8K3MboI z4ScPr$;MY@*_Sjsrn^|^@-TYMmif;Z-eGI|k#e1a3tTpGWZN3S);4qlS*nQWR4p3! z*|PedKslH}gA3$WTgVl=iC)%2^)M^n#@b(=-SB#&avR7N4-Q#|6c0nm?v>m}eV235 z=D{V0oJ?PweP>)G@xt83P^^6>OgxV~2n}MiT?vmT`hZgyL3dbH2q>rf?#F)?v1_Xq z#r7*s6W0BE+fU15hN< z7;b)RX1Kb%_qp+UcsV-qaDN!KdihGMx@_e+Q5P*xB-$H`6<%Ut0Tj75ORZ;$Rbx$ zYT>0gY=Yy9il;<*q_Wn|v7XJhXOJTqoo!^NlA|6;*n>srJ@v%%%N89`g4*}Xp0@%p+T;mgx{HW1HWLfk)l z%6Tp+p`K-@PG~&Eu$3OgW5^H_mJE8p(uQXG#+d?Cor$a@W@h8v9gxe1Uf84E>si)c z^!TPth%Rz6!i~kFdmRGg_oa%oZ{&y~@> zLyfX395*`Zp+`cgF^b~-wZA_eHQPD_+{mj{zD@t&wc6jlrBhLhmJJ_Kd0qN@hr;CHByv<;*wx4c9XriugKYrHU+O*XqdBDob3MW537n?5( z6o_Q0l;oj|lDA4OpM-GB#FmHAtCGlfh$q#+YK2J z4Ha4d4DmZni3aVq2A=JP$ZS!#UuJInIaxoO{%G6lG6?G~&?CcxsvpvXrCggCrc!34 zsOX>ux7Pj1_#2SpydFR!I}wEA@E^#niY6=#6!Wje#-J$hC#S(c?MxGvti$%Vwtj8Z zXy%}b-RmkNw;n96E$qmtOJQh8-0OJ7!+1FFR`$C*i2W_736v$r-e= zlR@H>Z36;+?TF!a`eL=+?@03wW#E-afiCHpzL9MoM0 z2h@_YmE2W2$!u9NY0~`oemP8{-;G4C0TenNopEh zb{doleq@m`2)pp$m5Hyr7&@UCmH!3UKmtRj6$7}B5d{kHp8TE7XoOejwZVU43jc`# z_uIo{h6i@rSISndgc#3Gbr3 z(|{uhOd%gN-)BsyEA5>1Adc9vqOjTejxYZW-ZlqZ;Xmrc%>SoMUK6Y2@Q_|IhEpMy!kOW2U zm}ky97^Ft>pBj+U+1cc|Ag6bU~ne~1fWydNM^ z_DBFLpAwKyi<9c@(e&%^{}mt!5+UMO0#gqK+=kM@^}ledNj;z9JWD_Ws-p?WY5Ql{`47tF z_t!#sc~|l*X~n=8dfh^pvqPt$J5r!ESYPX3_TZ*A7;s3Cg6v))lKl&^`_&N6ou8Oc z^1p7HGej!zFK_WYODthI*Jfn$&b_FbDp;nlSU@OxB%HsAv zXUPKxiwS}_gvv(^FzOJ2IbVy3OV+9SIo;`k^PLg`;3ar1)A~VC$o~psrlJukh*hA3 zQAZ5iCkA2({Nr2fUjNla^b-Y<{j8XCuLMY0ek{c?6gP<1y!{gHbny+=_VOen2{H-d zc-hV`U&a1MO5v1`O4V6&C>e}=yFzIGojQmtd%l7gwOfE7Cf|U`PDEhQbBaC3FOvhIiyEBwv0Xms+ac^@(5s8)VZZ((&lyG4c z76S^0pbMY1h1l6kqL2FG<=s#69G!bL@c5z?hkhQ5JJE^Baf-u5>#1jWelYgu38%V0$OF-^D8eg`VpSY%|Wtrz90S{RV>(pVDV60f>_0hPR7W zO&Xxuvvu?rOwKp?e*u{BZ;Nzc`Tw~;{m*?sbTa0S15?TR9m(W0dffjcm5DUT5x zX#=9*^3ktIFfS(3p`naUlq4h{9it8a+ywwpIn#6{3cU3W>-sMGUBIzh#Ca`~|7CGD zgacFx(*VPsLsK<$N;TK{-vv40=mnXJN0KDleS6i;w(+Y2J{|>_jyp?en?eR?!DaG8 zHYtA#&y~2SzDAH9Hkc}-W!D@$bM`vBmaI_Q%JefLcQ+6AuQcRbpdu$(s4bK3DW;;m z_v3!2J~S|om#FA0Pxkp=Lr%kB7u!a_gZAd@G|;qnXJv_YY%6IZj)jo5$KbEw@aC*B zc6@=T?4C#8U@*}Lw9)jZVD(J^HP^d1ff<~>nK`jRXSg9}VK~(bGRXfa8_q%58B0$iTtqBif6ND{D<=JQdH_8imw_*wp+uzxv>sC5Xs1{b7A4xKzl*p+hbP?VuSXafSi0@meCDr&Fe7Q{;#?2?49zZIw zLB}m&V0GU@h8A+()J7FYXRW85C)VEb;K~xcs@`=j186BGwM}tLA=h8W$zz+OIJ8c%UyT}S(t6T}sm7B^66~)TNbv!+`+n7r{c}*dpZBR%g>AM5|io-6Ov_`FJ2a*FU*i% z%5XJl%x-tn`obewGLGgZ8KbE2W5t4IyInmdEv(08_991~G|5o*7^*rXMyvX8EqtR; zSbly0v145EIjGI{iuB;e65 zE6_AX5V~iKoBa5F>I~zNXgaRKqF#+B3@hTl!_&&WLj_d-t zzYH%ROakStFj6#W#y}_WAr?f`J}~B4_nHE4iq<9vOD|r7Sa>m!A^ux(gz`Y$gwu)pmmWrh+_^RoAEI6{Y88)rkk4xZv%6X399Z&y4*^%2giW^Zq@*%u3!P z+`DFHWRL<2y`ZNhEu)aoSg>4%r}U$U`0tMDTvG0go~)(;y9y zRE_%4=rJTlF-el~lh5n_LFhuBN$C?OpIDdjH>|9k5n$VR8B`>vz&qNouNIB(;*pZ^ zGo${F8FlkQltumuaOXV2wy0^V2F#uASl6~zW(t%X?VdILdqcS43#gbj{ia3lq9hz> zd{Gsehh41FIuFh2uv1?PX@AALZ_V#r@koqPlz$G#qW%ZnRKG0zc~Oxr89#^K{aQn1 zHHTkTo6Y&FvmP!^V2FG1j~VZW$NV12Na?ytNukd*k0(y>~0UsZvN%W{fd z_KVgN(e>rspB|S+F6%o2N(`5_W8XD&M@t;G{~XCgg4mJI0DIUGhAMM7&ZxhPFbp3Ces1dU1438Wor|+Ed)8;erb&;uo`-`QV43ZV zFdVr~WZ9?U6i}IHXlf4Hw}(fH3qH2NBPtGe6p9IT3;N`e((ZA`;UCc{|=`qduhK4>_j95Jr)w-PSID$){oEx(-F5jUGe^;v5v>WyC2rgO34@80Z1p5Ahg0svesXN5rqPmtRD>r% zG|st!gQBI&_SJ!+=M?*p2v*nXbK|ac>aivtPuHc3vtMZxJT7Wcq~s(@wrcT_l0O6_ zzA422rKu#>fA@S=Z6yCNxRu6k-?+FC2p{m?T(iCk!LzavZP%2T_0(O=cj{1|Z-3Xh zB`%PmOcu6iXlN@MDN~RX?FZn}A!dM|b*6pP<3Cc1$uK%~4xy0MRfvc$yCig1+ zWtz}>FkCFG>i6>Yb^T(_wRxfV0+~0by26F^w)jNh_%|qWzgx9v1v{5ve^k;08!=cf z0Qln?XZe68tWT}m0_JIFpa$Gxy1Q;i*AU_+6TYk14_)ZyMeyT%ymRZLJ*s|YMDv^OP@@dv)B}#|e*SBrUnhkTuL;u zVLOSaJAdITIlgPL@3^i7b}a$q1WOE50qPzAuO<5A5Mzy)5037(f}0XOlBBUDR7KFB z52|}3sgkR#5~$oDNQ*hX8l_D5xXs8mM21?nWK^$L)%-d{fY@Xc8$!+xKPGew$9coA zNR}e+K(5Sjx`$S_2wMvu#nWS?8o6I>M%ilJ(~ynr14Bn6ZfAWh&s^$6)!1*fH4jpKw#86%C_~)f^rDZ0=a6 zzYq&KKkAHvkKvE8uJpPqtT^`%~GhB6rN z4Ua3oEHa%T6=TprT+p-aTrC;+vbOH$fD`B}_T$XrYU(=~RQhhb95-L0l`P)#%$q=! zK+&ES*z*Bppr_osjx_Ps8rt`;U#HhpUu&ozEb1@6^`E|&fhX+V?~HxmR9v6$YKow4 zF>)aI%QkAzJJUW{ykjT#_&_!Lplr`TzEL8i1kbWm$I=1@jv;Kh_((V=A{%|DUA220 zf5gC`f7ism#Xn`CDk}9`b19J52E#a{gbH8ghW{Q(i8Rjb4u}WqYfJqkm|aRXeze<+ ztFr>POwX2Y0&0PNdT{~ER>Q|n8srVGlj+osn25LN37O?-8Wp}~V4gQgh5B9Ta4k(? zTfjnqWl|-SPgH&vQyd9&BxmdGl(f`RXrlMEx?w{AMU$NDQ98&N*52Xy&mYjR}Ijx>L8#X zJCc9~CI2kxM5Ka4#mY`x|AE?So!@NksSwCxfJpZfJ(_j{p zZv_X07PMWrBt9}6ya=v>O(It(R8nUEOTI;iA3Gl;Sxw@e4WzG0KO=~vV@Sy&&XBi^ zZXZu<3fQIpIVyaEAwortdXtJ~4<4A2{Z+7tF#G_;-m&(VGy}oKSu6;PKPr!19YR_f zOuC`ayTUZEf>w(q3*PE144{Qr-Wg=L_oyq#e{l*@ub>WoCAq{-AF#r=Ubb4yjQMej z(~>Q^iiOqqqXnN|J3fp`kS{#hSrcp|NSj-mbfY8@&BXxTrQpHD3f;_=KHd z>df2v0i3E=Q@cszHlxcF3QUF)aE*0rI{Uu9j$OL8rbi+`Gi`gwNdv=NDo~Sya8Hr~ z7XWT!*PL=}Mi@e|RY}c8yZ}$i;wzTbVya%v!e0dEquoJ8oB}&ctQx5cL9^S$n4dBf z0as!fu0x;f@-AD*V&8k>f`BHa%g%m(;|6CD6V8#eny^KM)Nb~TSdBA$ox;Ec3sun= zQ}g@GRb)UNU(`QSH&f$Z{UiH~Zf(^rMPJ3#-7HXye7}d#>+?%VjqEbhw@J@Jww5VC zFvfK=OK#0PVSoW1gMNQ3WT(|8r+)EPigbg}FRYHri%%5&=^)1p#fc}7Mrv?@+Rhxl z?k`#)IooXOpk5qjQz-Q>^=plQBQf@bw~~S+**kVYT&I*rb{B5QSS({ z=Xj(xT5sB}|87d7UbVO0y0!~)nxXCG|@YdJ60PWqJU zH~D%qEX@`ragoGtTC~VWgOh|0&?OHr<2f^y;2#OV$D|_mTZh7?3xwIWEW=y9Ouiua zXf1KxR^*E(CXgG=^p3J1#ID*=Ij9Y<*>cbtPxhWP0EY}*E_4@`CNu&KZWXZ|26Fq3 z%YmwRPP38xRqBatv;`MD1}4zue`$<K^u-waDpL2k?H4)TN@hzUhEo~BxLyU}|5hxjk zU)+jDwZGR!*O1u$&2EM(TMLwwk(W+J{?(Mr5u_~fd2>pVe=*S_01GX#Bil1 z_t=apBWv7RPQu*`Ysf$4`?)3U4yeCu!wYc4EQJZoLULZ3Gc7d>Q(>g5wc%K2DVKXs znJe|w0SQj^k??jzJh<54-^B6qU~|dIvlPh*$FN<%|&CeZi9jdK5=hR)c7KD@nz z7;2Or7j0b%-)lI;<55M9$iEa8W5f=@4vPrOryaoCE7v)mY2jdmPtfWhaw~UXJ0bkd z`dYqQPJSCNI>a&%bDBX#5EB=TAUQO115-ZxLWwY3Xo5!b&$6YV7e1o&OwCtQ_WPr_ zVA|4_a9307U!w}g0Xqu6LGwmXZV8X5G6NM&L@(_0;b>i*jaw}1fH0&??L}gzWk~#+ z5+1`W4_}omM#@m=*q0uogX}<^v7~`tn|LIz-n6o6GxC|#+N@V%os4>#h4X~%OPuDjeT8JR6Yivy*%qj7u z)BZ+B5-vm_aehj1rtD#be-+=+<~S3C5}c&Z<4F1TS&M8|!HIo;ESDN+;GlG-O#~)1 zW5ZU11{qf&8|lojakdSCsa`le3)zDbwF$Ji zGuCOSh_t(u15mH8WpJKG25?xcSdW`E4{rz&xhWozMx``-{XS8>OCt#9;vc9r804#w zsfsF7j#G4!Es7OBG1RuS**?+ZYHknp8aT4gSX0>2u_!-75oKbgN}z^4T93ZB{3F@~ z)Ce1?s3c+t8xDLEq{!@1ERUuJUnDAHb;y|Y>kWmO4=G}~;~jEzOG~hmKR`<~$kR-h zaHz&SQUu7;DYhicv@kHKss_;ta^H7`LHpBKMr`)5JK@*2gt}0n9oIidGw)-by zhS%nW=MV1O_hgjlkb)6XDDCT1xVSH<^#!5Sqk^Xm0Yg8EOyI;C*YXcM4P?8vJ50!Y z1C4>23~c#RjcM+dE2gApLh=Umb4pZM1@dTiy&4!l*Z}E*VGiN_a6=Ykp$Us-n05Wf z8qFZHDce$+H#Fsz{h>CT{l%K@w43oG90#NnX~RUfIl>FD3a6=Os4|+P6s0&$*lJl$ zG)A^%n68PH&LF;hxGuRCSbWl||y?AE5r3)Tyobu~00? zvJ|+hn;_#-$=<#c2hX6f00brK^&sYUeqt?p%b=QXbJ&<##J+e}%QTChYJ89X=ZLzC ztzpCWX7nAAA7eWC{Azff5;zEAN(F>MOwQprTGL1fA1cbag^kKsroae6#oA|KY(q6o zn*68$cz5~YuaS+`_d;lt)Q$+nisW`wpR#d2gr75#8?*(FPxYd zX%n>BeySF6{yfWoiOG(25mv3*ODEiN<0F=%C-zvdC@^pU?fZ{5)0diUZMhWhaSqql z8d-(d$_TrPPBsRPF@Owq)Yk&bm=-@RM=SK_r0gP7q{)bPs{HfW3!I0@&dfGn`PE9j zDuP`Knt=kiVXoZgFO-XQA|li0Vgs2_-?a>sI7YTleh9Gz?ba~8PHba@{zYLi%KOnl zoC0#r$=c91(XWpoBD2F@pypZw&ueFQSUMpyiwlnV9T;Pa6=3T31Pi0H+wk?tu1w%-BAM(7u?< z966n0A9Xm36zMf-#vpMSF=Oxc!c`~kJVZ6c^ihcK973|xz=4v^ndIhbUeTWx=u%^B z#Y=G^ku-s!dprzGlhANmFg8(`pUd85zfqj7mXJsu%))TBB$Yg8Fd@L77Nt4qJ}VhkGc2i|)roe6O#)!n`Xbw+X)z)R$z zJ2SJuMdib1G!h3uE7$=X<`87fo-)U!g~-fj*vbDr6d1$Ebhw{kA=%0@IHJT8QVPOS zKfsI8hJGDR*iGH{;7BBa%^g7tI-(zz95?{IuHb^{lCruh?p)SZB#Yu)P~hGg&25N-i!y0{meS!&hUr<$2#j|+}gqJ;&`PqYs?q&xdmK8iUdlE zm_=I^lFVIc8jANKzk@&%O-1`}d7YmKadh?ij84%FHPqkAu3eDBiFH}wv1K0{H2HLA4mBScH`O4PTf_KLcrJaTkcby8P7N7kge#mqgSy6ujvN%e zQ!i9Smn!a*uLDgg%&!XD$avij9?QDTZ}6{!TQjzQaOm>J3Ya8PmZIQKa3qSUJaQ(zQD5iP}*h7Mo!Pe3k_+}O8i89fFTbO@uN(BYb;uxhamFt z5_arf9eZ~wUZ#{T*N<;Xq-3LpQ%TvA2>qLjeF!p^N>~;TYa;@s*!JK%hWSc@i$YtWau zbLj3Y*;lPFjq?lsh!O&#Vj+l2#-erAmUe=dFRs-|l>%*eL4puBbYi6TsXJy-E zwNy7Z%-(HI&Kq*8_C@JQHZ44>z}~L@qRu7pn+OIwOnS{hjoCNOyw9 zHy0X*8%Izl8Vy}bEPCLsnbrAE+f=`3oOI0-zHHuEv|;IzTE-`e{9$UO>r;);#sDZZ zbHjulX_^H<*vOp!L~GXUoiDpO75Kxr)(Fvu!$>SMy@K4>v%xyB!8+SvaRbpY_FA{G zfq4YRfFj}uhV9f#;Hxc(Q>6oxwUS~qV(Pd3vg*%{?d7M$>iSgiQcaEu$MZjjkKG`Qq$IiG~8gK_8!KCrYlfJ^4yF3 zf}(md2(*4`F+y<1*P&du9JYBWAHiV9b`qKwj}Jx06&n+iP{=R zs@?9M!HJDeaa443RtL-7FhU^%q7@TSs-!_A$x?Az#qD+H6hPOb0QN0Uq+0Q5T4T@;;Uv+Z3G^z*qJq| zra;Z>#Y@tvzoRx;&G0ran2rju4qs5;fh0TO)folGiv5km9$9_#YBBXy0|C!vvNnso zQPZ1vnAEnEc7m7oY=kJw$%sphzEORnP2KpO9+x*=XKJ8>GBY`MC?z!~sE4tJLRVg0 z!`Oc&%mY-4yC8+P_qU`wyC;IEyL^<@F)Yr#Uur!QA2F!<#|=21AQd%L0;ZtBv7ZQCV4rbT75gpXXrB2-G>{7@cE|r<76Z=!UmKeREJ$u0 zQF`icHWe6j3dpi6^>fn9ue}4MRES z{Mc^)r-bp@Aer|tV*Z}4r=y;R=!1zHk#+Q!@fMzO2cKn+Sy>OKD0V>O=4>;nmLIb` zG^un6P#7zTe^6vW*&|jbQ+LIy)-#eIFPZQEccXsddFw4fFeKOw4(|W8-~`LR{V4@% zIyU*@Up@JbKOlG3p`n9OXk`=oM|2Bj%^TZY9;NjGF%Xd{J$Clx@0Y7c7d?sv!-fSM zN`qN>ZN;PJ3{|?Pqi(2`$z>XCJ!>um(->um6SFh#hp+E+P6X@wGQZWzP^BJaOdn5f zruY~h%DfivNw{Ee@H!mXb((ctvl!U&ChxVaL?E*(RJ0BW{#a%6bXbY#KBS+F8g>$S zI5FV6=&Lsr+m_sGVi^>I-Y=zD6Pt-7x#Z~C?5Uz_>0}719iHD>bJHq!d2OyVV-04tn^BcQM*VUTo0r+k6 z%W{$DCbTxN{D3OXUDq)|m2Q;JOicrWo|0#at_zrpzzMR!1Qy>*?g3esGTt>-jx!?X zUhqfmpTIN3L&V9Tp%w)fnGM;AtgrI0||VIWBbj9}Jy!0_cW?^g(&^T(dd z$k<$}(B)8gU;ajR5kQ8u2CQZwS{2tB zvPOw$cCyym<37^ew_6iP_DEWzI2GwJ)HWqA2h;~Un-BOI0u?n0oVboW!;5xWEk`MZ zfvuPi`Bv5BhBQ*Uo!B2-1atU{t>7cu^+(>kIno*>x#*~(f@CGo zh4RBhO(@k9PR?XG3Ho9};uDKgsV3#xdvI%dk^i3wfSxhu%fiR!$K$=r!Mm8G`J})M^|zL34YRlU`HTDZ7`|qh`VW0XpU*oxtNq(cFH1H3K0ehIEiGE4CnIQ| z&+FFtkA|058$RC853MfGvu+@Cb>EO~(bd-C6l1_gv(K1jWz?q6t2v&xrI)34r?dxS zKyh}|##8OJAqT$f;PqH%_n3bQ;QUOtgHPS6i4V#qOe^DL-R32@oCx0}VY-G7FfRQV zlkjosg5z)*Bw_bW+zwBo_Jt{VM>EA>Ose*wRzbRxFDAId&gW~_uISM{*NIcqU7C@3 zb9uIBvlY&p;|$Tb@%~ZvwO&m1Y!4k4>DU+Qob10)Ry2cI=#bq5BsD8E1L`8M0Az2r zXph~ES+FEIuFVv#O$4qXwOFkimZ2p_iFFkuGz`$pN6y`yVV-J7I2$}6WNa}(6Dar5i(W&%p#j%p z`dn^=(jGqWyOS{m7by7`)L1tT9Ukl?RbEhZ0J*`wlo3Y`@48VRFF@$OIrStN zH5J;8mJU2SBM3zPtC}(4vX>`yQ-WYqlt8H-+k1HlW8$Kyw@Cx#TlFk2zD+H?Bf@1S zJ^}s^7tPxba_9DgqFy#x$dKKU&HNrRU!uj_ax)u_13_^q)H^hI0U5og0dcHenLsNR zuLluH zePhi(KdU|cvxI}N{cQY-SFS!gu%|Zye^c3$_7^t|gCY01`2Of)2LyFhTF2?h6+XJG z?3Fs~zhj@gRu?{2yM&fImjC&b_3}v`A?WT!qamS9B&@UQhyd0`(5DvXGaxrGbROvd zq;xDRrmjr@Q;3zUj~o)8ChpiNirDGt-;c%e`2#50Tc+DvQrebIzKS23)+uAVRXN99 zit9A+Hp1#VG-%Ytcy*w>r7fi_zcj!}36+!qqLR;cg)bqys5ZnbqI_w@$|+u3W?s9i z!yju`NE5`Ojiny0a~>47Tqy2(jMW>o%3=)EE+P5oa#6TcuvX~Qk7o5rCIc!Po&3uM z)8P=jXz2P|Yv!#d>@X{TShbD9dd$p6uO=ElwP-l{(^InwS%VHDwpjwwYCxY?pVOG(X(&nzpWb>qzaZp5sVA`)HH~xzUG9ibZ%frh%OL}DRi6eP8Vs)so8>Og>Q(?l1 z=6Ct*x9Cw^{Krz$D&}cz&jjx*Z#|$x=I8;bf!-el_Bm~}P3R~MBImHE5w#~*Ni;JK z3m)W7&d1GdYIcvW}SK_D7Hykg@Bp(SwEU z?#ZFLOgUk01Z8%HjsD4xB-TbB?WxH%aNnOPx043I+GmcOtsd%kE*9r#X~{^j3>bM! z{^NR^o@X$)-EH&n$mUkK0!v|(mLQJr8-ta|GWWze;B=I_S~A@pa*b7{RB+&4-NZd3)l9i4_6%wVmKaT_y;oC0gVUOPUHti z=?DCnE{zO%LkIUFOryuxnTmXjWDGYJe;6~kf=NA)yEP8}eqZ)|uAgq+&e2C6JQtq| z4zLxFS!SUm6nXd>{9D~|(Ctf|jDvRkZyCR5(kkx@tld_H+|oVV{dRu^R14`kSBno^ z)q`hH-Y~PUfn+<7duuT2O_b(y5!;Boa)`H+*-(~+Q%PPnRDjK$wl zcrRy_;Kq=U-$Q&Za&Ytb9pTt|rdEAsA!~dkQbbR^tj*Df4)k+cx~yOLQ4jak6=s{O z?nG32&nf3&E6w9YW_O-P0GuEVA1=>>W8p8?SU2sh+kxUuTGvK>m@O;t!Kd=@*_WNU zr49U8tNz>a3|NMgt480~-jePSVWuJw$nBQlJKGpn(Y1(Sn5DV8Cn!8!`ox~tNXSb3 z`)ETg>g}|Y zoAc*pMl?e-*~F_sOdF3Hye$z!gG1Q)f|13HeV>pT3@<`vO5l!x_6?%}}m&Q-5PO$%1F^z6JXEI2v)UM~h= znFvZMm*Kj4WjrV-yRkNBUw|eDX9dDL>;|t#v{u0x!)a6$fNauGVWxjTY=Fs z^-Kd3!*Bb^x{S>kF#(+;pPAFb3|>=up&lQq_zpVx+LWDlLbEf8DT~kh^F8zT^OLV> z@QvyBKf)KapZRcF@7OBF%{LAld$d!7$W3SDB19__CWSB@LX^)rD72$m51%;p;!?I9 zxsI3hR<(>~vYfO`dncST2y`9(5)jH#c3g^FBJ~}!1%BWkWO17yi6iQB7S+HIN{4*< zvwluxBf+`}@&AEw>v>;PKrxNoK!sFN0n2i$r@GG6Z^OW(<-~Pm~ zrvVV(6QZCyhI$+yteyaJ;6oCosnQXk(Y?y7uAm9pP5BG^wv5ztc&@%aql zXU-C{^`eM|NiW)p7`fM_ip@CA?Ah3P7I%`&pDaeMPU-XV@O3iMWgiE_X4!(fu#jwa z@8_;8#;=;kNk6>q5q;?KvxHqPLFSu3A)0Iyn_YVB8qGXeYha}MuE*ixPl^mtjQ8QR z(1Qo{c2vE-%06x!6Dp2dAINXHd&%d<8j)hD(?KlGxNZ3s`WU$tr|-)aI6=a=Hlke@ z`*xorg|%XgE8nUuAgccQ@y+ywNn>B8e-jQg#KUz4W$ONDcP08T`nf%Adc!^-+@$m~ zfS{%)x*ojXtG|MO16a|94gt7pSyO@P$(|)@y!4j{p=9_ShW`4DlkbMV8{oVWw zz7pQue%pE)v)Uewo&k~EtjqC01${tdoNlJHkAbzS&&%!e7n2whj;y~=7GRuF3R|NU zc-EgIwy4~aZ>u~|=m0KsOK^q<0tVr8t`MpuQQ~a_!+^i8za9P$TW=W^SFp4TGq^j! z-3JM7A;947?(XjHPH=Y*8r=Wj`sRB323=rL;GPiAiQUjuf#e|3LAsg2xjga|(Lp?E zk6-0YZ)Tp1r304C%D9(sAH^ObEt#34L#KQhq77)mpg;O6;HG_6!PQ4McCxy*ckukZ zJ5l%qCuPP5Z{7i$w#`X0Wsxd+uIM88BlOUz_i(TfRu8V?Ga*^tPMWMu(q+R+v5fgF zq0HVMpv?DDRi~Y!JM+pom5hO`gFLx3PArw|!^m&|i{Q`3O!Ld#i29hQCVIv9_X{TP zIFqsA7Y0@%rana)464M>KzQWG-dudc*IgY;3^!%O9FIUXAiXFw+)r`L2PUrqX=uDl zKi-`?Q=JQr9V`_UONEh25#JnAuXsX&T<%5!ph&pDQ<={>)vK(M{kO-bBje}9^`duy zh~~L8j8Prv1M$eOhx8IRYw`Qmd{C|A-mPI`NRf!DOj(lo&1tgVk`_cTherjV z8xwl8!R6B!7F=sTQDWi$@c(2#F}43`q;oL^hb7K6U+UCocFXixh0A^}RgV1*`iIPy z6P^OYsKg#yF|xn1`ZE_-D`~UCyT8 zbo<$bGru`;@>bq;eor!L!ZU^BZ?JGZFa8L6a$_HUU}J%H1M&k7+W2x7cb_8t4sml~ zbLODe)a$(oKa^^g0Fuu+ql<-6SW|s()1VFPjW;Tyult)a&`WG&063K#$4|rxCXMzu z8f`K(3uH1Iu=G+!MYPkA?SPZaOW?upZ!>*-C zV<3NwU@!S3dvr-0dZ53V2J%KhYgz5-7pwC`qr&-K_e5tCvVwV{TYrx>p_{2hD>K|k zm@*iX!7@c*;;>j3Ju%ry2FL26n_>A0^)KRh5e)k$3&9e9b)GE}e3Y;+M3>Bt7HdS1 z-M*29Z^xWgRfH*d%NtH@`20-zMJH4cyGe(^^g3em4JG<+G|pmcNEBTFPjwziWy*f8 zR1q@nTLOAJ)COUcrtWFhw!cpmi%;8gkYPw-`ki9zCe_XfQBqVQe!|1_0{ZXT;PrqS z5)nd*q(9%QM-S3VD->6u;q6sG?<XBg1I_Ic>(?YJ6cWC2BKgt!gz zY^})BD5vfK_>NO|O<#Gi7mQ(#Esn!nii`KIQ(5mH=Iy=bi}c*>Y#k_6opQAIVr<-zCo?V*9(sutPvIQ>1svMVjXHjDtRbN+B^o zgC}yc_xRoX7RC_y*0uaA}e0u@us#m%dAh#52pl>aYQUay_K_=i^ToN zB(@H_rHi8Z=rT)NyTKm&;KkPOX*q}9<<4d9h2)~J@uQ~v+qRNhLI$^Xk!ShH#P`M~ z!gP2WF9sj8LRT3c_vg0$MH=F!lg)&)ixu@50i`C&|J)N@G&mI$3{?~0Tw0f%dgf~x%bu30Ue zqa%60irLer(TJB3SQeI zhgE*C_!p4Z)U9uC)>ECuO>*bnpZG4BKNJleG-QTeHtirulmf9VD>hg>iJ!yg57od= zHX1^ep3{>SKtofo&QC_IZX>TPvkV>uF%yAEA^cBj1uM@VIGfOOxYB<4?%#)FhOn&0 zq^Hy>ECh!IiC#iQ55oJGe;mGm;kYN&up^EIdwSIDEi#*DCJ{NV_iem?{Y~CXkhOx| zv2y=m`B#BGch1Sc>XH3K!H01y9};cypkyvAjZD2*)4aV`oS!xI;1P2 zHnE+Hb8hWSgPp~|5r*3)wPOQ>W^-(lZnlJv;^ti}U)x=KjRQ>|d@5R>+%$&9ccu*1x|vE$59HLQ(4omPoPqO>dUK~!4ue__qF zUPM$Zj3*94pO)fj^Ra0tXR|@1gLhcOj(#<54-WLHDVL+Ro%?oE#RanvSi}6Ad0UVZ zNwyH)iOBdqj<=a7yuV1($?iAnwfDET^n%AfLtmqGc-$`M-Uj@mo8fWQeMzq3;P%T4 zt7_c!Xgu&7S(IpD#^FoV-LNhavti43LMd%LmqdD!TSM+gQ8jT}Uoxl+lY`3X?+0Ix z(WHI_kn?>WG7;6o4voB7$;Pr(&GnH{Pt~hZOZHn=Zb3D`a*D|=maT_9xR_SX%VQPX zGT?nPj4NQ>k60zJohYa*o`qMV8Kc0~qO+W3g6~+w;Cigft#ua@k2qoWpj=$Ww5kBC zBA0Zzi#Y?$=?>JnZ@Vx-@N=sZ`ON!xt67jBubem>2s zOPKZHrRYwYZy|cYF3qRsz#cj=^?QJrurnH-`Ea)~@AmwM$ipG6fQwi0)e&6kFlbkA z$-qmcHLQUkry;@h13aCiLw9QFuz30dAT_yz!E$?Uv zqQ@h@#xHT%vaHQ3WY*Fon0 zkwi9|bY**6AwoemA#4rRtrV#8t)AsM=eiv00^4tdmJC~!`3NS)8&51tzwS)wx-%3c zDLft|x0F*!(M*!LKgBQXN?|18-@X-q0?M9b9qg!|xObDtH9p5!ujQ9x(f&%;6Cy5_XPg>DlcR%+t@pyS7_;^TB>i0Gp1~`US{bogK#X zgkFf*e4vT8J z*?N{WFe8xs8DYPzVYC4lhz}y`f5eA~9^^dyYnI{u0dsT=RKU78BvYCwC+Oew_ z^u3?k`|LvEsL}RWt-pvZ5U6~-+OUP`n7R{1#k#}(I4r*kj)>On_{D`6izgfjChAR~ z+-~L&;6WVapgwq(6l+AWJ?sI~u_R_n6UQ3V(Lb}p9tAqA{UCcqXj{^sIUd5akO;cG zSz=_lGM(lk47bRp+d9obov6H@)#0FlmhbUsxtfPd_ttyu9I@N4zb)}+mFV$r zTF_IaCJETf7*wawc+uBn#M2uQ1fKCBmZ?(XUxDW$dGVKmRF-u=#d?SQg=EYW@`CtC zoTgzUeLg!@(_B%*-@)nIOzxq4s8t*hC;m<$Q>pF*Io>uBJ^AKzD5BN!(29RV>*Gd` z&~2YqC3>FMlTKYfmmj!=eP87elddkP@3L^V?L-YQlO>BeK3R68bnV8JDmUpw_T-H& z(+#f+R8)tHJQ(_@avWmN!T~ zy-JbZ2POGeL>BNH-@rrEy!%xakf1nFK0RJy2eT{7R);tb|3f}HMKtm5&2M7wzi#-f} zy$T)Tm~2sgsmj@anTwPg3!Z-a<|5DPw1@D~;q;43Ossl`MxO9y%`HWB-;~E5I89TA zK*OlR;4(eBAz#0zbeCznh7)Up%eoRQK8T+(Dt!^uwEW4RMz2(`{Kjs=3HJhVN9vh!~s>N)DLLW75&f^O% z|KE{2uhj+MaE-KV%oq#lnH^{h!nQghtcov!>7XC<#< zF>~G~)nZ@%Hz(q*r?rEhfzc5}d9lY#Ml-+1d?n#7p2B^$yf}Ur0Y0SM*a7Xd$5`gQ ze59yvu%`(+JXoTBvlh92F0mtcv~aJy`i9~~&Lgm#=p`qppVwB&(+-#FRCD$4x8-W4 zjzRM;n>zfZLyuox-W74q?dx|di{PSA6asgCthC=tq8!?(G7Oh|mDSD- zJIwL&%5h`^3&?ZsO}g@?h0m!y`|u#cNUbCh;}4Y1vKMp^__QMBz`YV5(+n z)dr#39L;fVKx`0;{v|&v&oRGY`>fXYlx(PDSZghVyij(3lVwkx(r0gwG07^7`MbyI<#c`2q|(8_SP5|eiX^;6g+fFAT=;8S`TJTo^)H-? zvk?lM&&C8hL-0;_XTNWS!)v#_jLsSfl+|EC2@r1lsRNNeNrF2#sUm;{CVV%It2xXq zUbWE`2@#X2A~WEVQK^9DERFOMj^>5cV1McEZpO@sHB+V}7tk zM{S-u3H2JckV$ z_pFEPtPpd$yTNRTq>_nVc(`E2*mK6*`ebpM9yV+eGb}`N7A%G(`NU2S>iDyG&S+?P zV+JHA#^W^~%66KzYuUtdBZ2%n1aRi$Q7@qlYkd+H(JWt2emYTOzn!byL@B@i024pE zaT!PT+<9OQld4*{`Bv*xQ0RjJvOYhE9}48va}S9s?K-Bojo}8>uBAHR_2PaJ?H&lO z2Gf1rtkACmC^RIK9g?w8TLZ+QO7{PWKQ?z9%vKZJT0MAxR0YDKz6kN0c2A%dwoYk+0ilaUdJRP zfln%}OUTGq8~|raS$aDV+jM0#-pYzzI;=C+NN%W{Y=&}!&{M<}J&y=4+Sh%hA^I~q z9_}^VfDpcQMqS*#>)1}^M_4Bh>Kh3Twfq&L#avrWgvk;4N8>IDD zzYu$>*{2xf%1iro2zAj5&II1qt33C zM}Rq`P}Y0;ZlW0v^T8h15nci7fkd?Pk8LZ>zM)pS2+AoAne!>C=(FHz%J`*fH7+5m zXywY+n65734=H={PhDd0=j{L(8KKF$brf&grPCpjxItBl1d~X#f=;_M#W_sOk(a>0 zl}g*zh9C6AS-CH&%ZjXkm&tv_iXYgTfa?E?-^N`%LDLw$?{b!8Zv+ zuE2nzY7?m<+8^7&(l_OL4D=sx5uVo8#x_1;!nc$+Uulag3&Jk7^`T4svMGKF2>FV+ zI=v!;LcA6xNGE_;AKFxYknQt?8q2uh2i=IW`9`gO87>t|Bc)uzjf47%{VX? zy7?2Ar%V-6523w(Wpflw{a7axF#D|}LZnNh1yh^1H$tTQgjyI+GVtpIC7To8FlJ?Y z><8!v&4tiZr{{tCh>)G*0K^x)2xVx1)`F<%7ktue9WNGQtXMCSl$@tJ`^$mxBLJrp zbhvgdenA-6>c_-j-3RKF=B!e8v%FQ79_@kY-2OVXbfV@Y_>!sPW)haT&`K}AOm;A# zr%PRHiaW@nYLAPLm(!CL?5?p;428mp!!jPPK_Nr+9SEDc)`$%ELk`)y@>q&$94JZ6 zZjPrw6AO8%FO+<^*#&(~3IaSiN(c|NZOF@{t80tzXvk~RVtnAP%4(F&V6xq}s>SW5 zWgM6jLBS1Q^nkCb{8Cq)RVW@=GsJ;Csu2?GCIblEPr_5?&`mCx(J!G8d9(#u=A?|p z`c`Gx$Vvij_YF#LacCKL6}4K%B{V2Rs7fInWUn4!tm;{m5L|+ZtNa*49Rd}TTul%! zE~CMf%vXgBcPZ0w$*BOmQdAX*sG+`A?Xsp~*H{oY{R+gT2p*f`Vsw;M6};pc<()N{{JSP8Az_XqfVv{;N{A@B@97ZsBROx;H72!p)+`u61=7`;Tms z)3KKrFVTa1q6~PTTjg{w>5PvFzh80`3&x)_`>ecL=DwdZ`qL&xUsmhnUv1Q)*&e(0 zm2=<;E3KsM$sZhi*AoXHv4B%w=wADYddYEi^Dpg@^@ZRWFO-A{SJh40<^xb>+GKAs zf%*bcyeb|GWp&8qnesU6xb}bJ8UH?;RwFT#O4yEzi0jLqmlT&=vw!DOnQeXHx6Bc} zuI`nn?1m|xz<<&6y~=Fr2I@-7r*21$a8+9o5HDG|{&U(i3WU$e2h}t(h6pm?wxGnYfqA#ZbuY#$R6fM_J9y+tD zI}6A^=J~p)t$4hB0>(CAoby*O7iB|6k^Zy?=G;m;2hWk@F8Le2FbTxFKVh6F;2v=e2rxGhQyjjB{2 zkl{?8yi*+eWH?Ehsy6~6u)wBBlRmbxT@nZEV#}1F&?bxf{;R7eO_MC(OcBGk7DA)y zhb2SR8X=E;q9C3k?Ld_x{(SjRws&zhj4wkKz)U3r={rb;7zp05a7JWM35F3}%(Xc%@YMFEhKM9FEY#au|8I;dot zMJ#7l$^j*kxTOE1%@!w{W)aVs36hJXf+3##U+~S*>TpmpBfs(+s1 z%hSZT!;wfMSFYWR(Q0?DVk# zB z%s%t@A08om6IV||HFI=VX`oUSgQO`)#s3Hnw5}ZfY9I6`R4{L%ZU-T4w#CaLm+3gT z%a{f-uIP~2?ppBR{;48LCV~*OoCJvuqD4I8Gff=0EULv=Xb2{RZ8Qkmw$cz*(W;Q4 zY!L(L(V>;ae1)mF%XpHjC?P?Lb`l!%ud$vYzodxcDG?JQW)&qQn{Yz{zlzcT01=o5 zz+@1>h+w?-D5cPQ*%Kw^?C|MQ>86wFfj={<^j2`=(@O&%b2rtxJGpc5JW%GivXb1kY9lav5bcF7)>FWwt8 z?+P!mHp7cW=qi3EmGsvgLaP|}8orA!x)$kl1M1%P3A9}!?9FoNZ8LPr>zx^lpjy#n zPS9v)-z6=ec#q(F-ZOek1jlz>0Tt4eaGXu}7u%*V_FD z;@1bN`p4cOK8XmASmYbr)wO=*)*6XFMUm@O>fu{mnayf`G3!;mc}Fi)A2nWbT>Q17XI~EBQm|@ z=~#?INa7GN>A(h)&6H{Fp(%t@g$VqE^Fh1xsr*e%cKH@KHAvDmCI7`(QBzX=OqcnH z78;swE{8}?ULA(Kcfbb>E&HO2DjAdHAi%V5cGHQAm6dPbFTAnd>x)ru-6r(XczwY% z6SkEf7q^7+_!p_)4W>}frq=)Q^1JQLQWVC_sT}_#{8tSe%Q%ew_j|mPOPJcNRpL?K zEdZAA``aD9gdTNC`f3=TjOU>!X7o8W+WG?Ce^#b$Z;3UbT@1o(zu&X^t?HijP3^Su zWJ zpRA;G8gGPNjho@#&3^p|YCrYGc<}yPXXLXbkfhQofgT-%B@eG)SBzBHY@MQT80a(v z++UWG_k5(=YL^&!{DYCYMQ#)AVw56=URmvPTetNY{)hHRZEad*h)G%{e_JJ^@a%!+ zUt!6Q?@#1PAK#HQg&n`mz25;;R`ff=w8Ae-jzb@0j6Q#1@oogX&K1Ho+V#K6Q}qPl}Kdfg)x%og%Qxo zL~6TwSL8{(Mw9~%B@(It&Ae{IX0icVH+fGCBXcg^c-CLHsFYzexG$h=A4qK3zF^xv zU@Z?=pkTW6!!GXzU@sfnHW(#<_j{*?` z4pX;%f&zo22Qz$E1zuzVJrh9L)i)H#8fLggI-$r!W;<;23}z3eH(4487EcD)y*E zMI5|C0U`ETA`abHh(s$k!io~m!4z|sp^94l#0)=lf(^fH$3^T7%M-L$bK;l8NC80k zZ~9VPF_#W@W`()TWF(wNsKXGQ*X8U6VQwQ+wA5t)DET5N z5eHGwK;GS`hzkZ8B8bE06fKcypyMwjq4O{C!I*Cu(8XT)I22q7cJbMm0dnwA*7_LX zk44C$4A}yaB8cy( zAjEh5AM_(yu@vF||DFoQ4CSa+Ld=$EwG@@+*@qe!YZb93TNXJcw-%L>fhu~J1$BHu zB7T50-!QJeoN3Y{&*_?UnIn)P!YN{=ey`&W9>?F|rH(4>ePb5Hz96 z(D~2v)08LFa8S2KJED=Wh({byQh6zZH+BE@1OsXa`kp1#T!d4W{ygHb%JWB7o=rjLPgW8BE!1gsJf)s6G8i_j^#I@-qMxUL+a` zF(N4hig1xE+yz|}i=J{oI1|c*3JriaCSr}o7&cGH4_o|144{1Zr`kNc#F7V^#ssBV zdCMR6Tmqq32`M-sg+ly2eI{J)e{>s)HY%G!+kVqAwiTuPNrwxee2TpzYEPb^f*yD3 zC%p)@4;?NC?w0^va&t^%e&l-}=ppwE=%4AQQ;jZ0XG7|y>_^?R3ASudLMRkf#(e5!;bh*qUWuyeITDKzaS8UN+v(Te^dDQ@nZ-)*J$+Z?Zh*=G9`fJ(|GBes|k!s5Q z$D=2pK2<+T?mhfT&cp#`R_gOw_dcP2p7b(RtQn^C{xYaa78RMON9=|$U)BVku(9wS zmA{W>Z(m;nU+)9|h+zF{2_3m2LRX@7)0Lw%zl3(19PrD4`uNi8*A{{x<81ol%OK!m zHJqWp;+!+fAb?DpV^{Wd0)t11qsHFpx!KE(D@%Bf6fp;P7R&-(ee5)sZ@fih{#TLgg z1hZBTuPcdZq7h}HgoE!g$}z+55xWA{Nb}IV77B?&5e1&7b!I z(@_1nL#P5bDF+3E7+dE9V!7VJQ_rkpNz*rO2J1kpl1-83J0v`9E4&|(rdP#lmlg!(c+qe#-i zJGc~Ag!Zu}mt7y=;Gc>l1sZe4<~%-)n~#K;RTXwmcNO16J0eeq_lZ5(RbGVHiyYYE zLY$KC<1(nRXywoln&Wj|jP^H*?}9J%{)uBgQj6|7fxqQjfra%a;t`+kBpa9d0vFm* zZ7z>U8t|R{NYeulcP7P%Uj`62E}Oc1#_{IIcy+8{@biaI9bv_-has0Y%p#r@CI+(-;!C^Wy!L3Zp`X9L)5ONc^qS{uPQ5~$p_@r{ghzsP7 zq-*9Qr#1g1iP$;S%=MI?lGBJKWI0ILLD1uV+Ki2Tt9faXMZJ~1} zF{cip{=pGv--~h#JZTht`D!sD|26m%`&GCe^hSr9N^$(Bte43+Jv_1SG_T;c6xu(< zXnqNNa)P1vcM#MNbil@fj<(!ex^G7D?;>og7&q%-xA(%1k9v-0YfUeB;oanp9*@-D5?c$zz6t=E~Pu-SKUHQBUL-ALw=DzSb6TG=z6l|WF$W~ z`0H99+BEk2Y%0tEybe@&>baCWdq3yEE$iPlkjUEdZPZ3ZxVP6(!@(Id^ZcLy1^>&X ziN9dY$G#JydK=`a+*MdK(_XrKef_1cIMWkRhaTOZutpJSKih9&74o(zTwm+@_t|Vd z-kyHK_ATq8230s-iZI@)H6m=a5o6k3b+$MxH;*3GIf!vE^KQ<|pGk_5zqmgaHU9pC z-mO(y;ZP&_5dZ0Ol}f3eCd^&iRl(zK#gY*iJk+MR>Z7FAXjq$D_A}B$tnrT?ug2ra z?dsiMNfH{sUiF6F*;r?(W~&zXbDk z$4%^ugEkr#YDMBIc*eukd!voxVW8_oX1&YdGmiP*m|sfCNlQAHhu7L4q{%-_{S}N6 zPTNahZV)oLHgCR}qMnVK7lQEAmMe~Eoqk{IAKh)(0Dp_ERV=>bF~e3zcVJ<+oYWb3 zD_D8zSGh-N0ZZn?H$5By&@Tw83u?tTa8>uP<0?hz_M$CSr<$*7o1@+(Y;Wg(ebu~K z-ZCMsJnN~bYILgI{2&A}gP@XHDC+%I^P=CUMWWP-+R^1zByUCUZ~Ak_P$b<`uiIV{ z0wn#W*Ip7jc^84c)AHw@tF-2kqTJ|0e$h4cl=Ar{@Y`%8y3q@rZQgCW*3#ZEN!#ik zQw)-V-1?Ub{~q00)(xmR80_UBBI^B{N>0KcBD6j<%nN>mLM7;@Sz_^?{8_r@W+z7G zYge9JW&wq_p}@Zle)(uDpQxlVl`!K1Z;5bqxayytEPX$H0}HU;;=~M_jmcd4k`^hVMxXS1hL<)hG%=pI`7L`f;;TA z0`IoTngdZ$h<`GiTaPSU)W06oU11XiTj3U&C1Nt`Yi{a6}m^_;Ve3H$@i2 zIHuSARm5)XUhP<_UP3;mS3JzBKEY@J-=$&g>YihKO<2VNfQJbOQs0gwK?|zsrl^%1Ed7qpGH-I8B;*`0(d`Jo_%1H*HpfZ*2rer)3*Zt-|mW zmP<|IQCskU9Q+t4Qitj9lFI7Tm7E;e+h>g9#`Hxjrz`PprFJ~YAcq8bV0AJmxysHn zd62X?bo!N5ZtGcU9>d~_FW*34aV)?)>zfORE&`t5v1IS&=P3^nm6X$DfwN0v&R35N z09<)6{4z+#Y7O(5(|a&48$skZPz3Z;1JKwir*eU{bSe*?#nfB;xNwHyB(N;nFvpH7 zY8W@pss)m74mKXDjm`3i;7Y#MAf^R47LKrXge{#NRmD<{EdbR;rP#!KAcKX0(g3x1 zOrF%W%jK(x=e5#7IHf}3n68KX*;i;(_teu}WboXuWn5jI=Jys3+X3}eZa9Lp?17(i zZ&zY06u7xa(VrEJH!QSvHc2beH6BCB$*uW$^MpeeCxO8NU2~s)ib1LCe6T*sVu|j2%ReY7=T|6w`b8W?KSoLKuf2s1_Pfk%kR|22G{md$+^S=6Vq098C4U@ z#baE<(pNH|**4ur*2UmU(;Ik0@bwIC8kvPfKS;Hz%e{x${?LfnK zOp25DqJyRgG}|qj*4%vDE#p=XUD`5Z!l5A(;-a1 zG}-4A2gBw{eztbvg+o6`iU|MSHr zVB?vGPB5V~f&clW?Ijg?Z4U9ym3^$+r70V^5$lx|PmwibM-isfbL)sqgJB9f^-N0l zX{`7uk{BYT3aCA+^5>kbx+Pkd)|E^EZ9f4EkT>li zfnY#Y+QO4F?DIOjc&GKu9U(=f)zX|0#j}N-*MpFpGt3a@aSBIkJ)rparbM&RanLA~ zEHVG2?&L0eolXpo<{lDQti(yJ`?E(jAgFq{^hawbM(du6qn=y9U}4T>%UStEVKvT% zVdn5KdJL_wBb`OvSYfE|dWLZMn}u@I!J%bQvBDef6zNdvLYuh*!E0jk3Wvq+Z0^+U z_jUNp6tykW2iMLVquCFoe)$LB>RBrzMkUAhYiwSvw9#(C(nKGV)`8K$uSSwE0(n8d zgHqY2UR+8F6}tVp1yx)c)_9P*Hz6C)syRWFC4(WSm$USzcuMCwcGEfImmkZlYUoYJ zS(uwcDE4!{fNhqX^7BV5%(RkbPLR)dJ4fRD9vx`?{$5}Q7|RFpvBpkwoD;4vv>e`- zn7?TsmON$Cwl6~w8`#Dc#AsBv z1H7v&F;z_z0so6|(ORGt~6;vJ#9nHM9mRA!A+>ObuLn_yq|{b4(B1%TzdI1~&rn7}4svNVG|2 zTtm3w!`4XAZULDGyA2Z3Z7PGxQq#o`?~fw%gbB3gU2%wj?kgG`#t}uFwp;d$N|LtzqX-3^kEwGp7~wYP)!{N2NWz10 z+^0MaQ|&zOgijXA;N~p?K=>S1Ppxiw6D&m1Z|5v{wI@;=+M?4(cT@pm;uFRfygxMtDu2#xzZo2`$nCfejk3DDsUKe; z%y)8iA8eN*$=`l@EHAmquaUfTX}VF%-aVe4b((X7M=IOm4NXJ|e2ahNgF#MBMA@d@ zKX7MA+myVtyXRB>Lkt;Y-?NorwGy0V^b^A-3zMt-_vRP^ak%>;g{iG0e!miSrzE-+ zud{ranp*L`B%Idy5RDNd+nvWkiAOXXQq`}2kDznem2=;J`#m)f%YU%^>)ytP(x*&z zT9nX=CDaHvK|5$}ZS4FxO*elUe%_$Pb-`T+&wEy-eO!`fqFFRk^ytrw<;fIVFN#27 zllxYT4LJpNN4v#%)qDN>3S-o^8_lxkYK8?8Qk?Y}<=>aT3??h%h{Ph+YXlRKIRluu?WuWvNo6|r-Fjw|IKnfEvSzW3Zqo=zESvglPU+nzB<#>6vgR@!Jl@#681Qa zBDwz9KIS0CXAp|oQNITrP{5t$Sry*l=I z;qj&i+gT&2DH@bFMAEsc7m8(0!P;4eAb{ud$p(!aq71uXPgk`OcA}(jL5!&_0Goyv z@N6vf;trbhLJ)GjwOH&k^rHG0g+%rY({s{S3x31v-P&W%BZW%I_d$yU9%tl?{Tv@$ zzFsb8(F%s?(s-OxlswgJV={%j4cg6HgCCB^ttdxZsmVf)7Lh#8D4K^G=_) z_z}4+E@A;8dO(~XWifi)=ENQ48a{DXE3A1t@pZR*OlmFY}+H$gvR)A?RmZ*DD01zY?L>87p zees>%evR#Z@k+u06eDC>Ay1 zN39G8uHd6qB58E<5SuZ5>$_S;tdQ#ebdiR8*T2!r8iG-_)3q-RmvZu@=2=9RW+5G2 z3YaW^2Pb7qwO$8?PqF#D4Lz~z@8|w`WBJ1Tp#+vJ+0kyS#P!QAR+ZA1W6TJNR(8>V zz7)zdu1Nw(hGrdgFH_i~_LUJtQ|{wrV(gm1r75&-A>JWj4r{}!T4>f^`&oY|s+@2O zR>I>>nFMQs<4)HFYcRBQT@NVXP9bfWRO<(qe#BvV%fZhu(P<8t>0^cIq+kBbHNH#9 zIz{nTB`kecwj5ky9iqeO-m*rXt-x*Pm8q#aVkW$8^BWCO?f~7y*5DZvu8!>L&}u*N zXd}pVGJdtXtV*0@ZU~(+o&RRnFu%!<%kU}WgYbmBh{22!HrG-{4|Ctk4#EsdgIMhz zg$_3odTvE-)XaSpyqx}?IB)+EKo2}p^Gl}7cCi340J){zjT@P3B@>r{dYxRk^-Q%W za5D?~+a@utwbS=T#icC=z~WuemtzAQ){$1tf*Yvn&bM3P%i70kOcO^9li-@YLTB18)tK3kS8j^!^Hm zjS1aVg@p%VEmxpn+oGJRg@)_GOOyL2B_!gdB`Ad!25bsiU3viK2wTv-6-jAM@h99i z*i-^0++>R?3nXG+iA3&l;WfG?UzucPphAL|QFXOuQ&N_>F2$^5RF?)Z?r5v3cB6dh zst9)<)Q2y!-_M)|jNviR38srY@B%bAvfvqx0TadoMMZt)YbOKi6Q#Qr0Z4bW235h~z8|E2bJ#7U6G{JuoZiwgQPd9O$YD+D zoC>dbfmf?+xz$B}G^f3+0mro5Tv>OoZs(GUtO*%|mc||^;$=JiSXhKDbc(<+{G-;x-~ug{ zSd}mqJ}$#VB~)LoU7S}iWuZ0HwITr4f{x;e^Mi>-oe+Jc)pg9w{|631@xH4V49KYh z$Z2p9d(&vDQRfEaVbnYz4|Qx#(Gik7w6UT3l01~yP(71846wodp5mk#{rsyjh0)Uj zrZ8$AFogyd_~8Nzlv(5CG=El&lU&A`LK}CI@tsA~gSFlrvqf(A0m zh3RR&7By%=Wt61)3>o{<^fb6NJ=LyFPuaa`rUeTrb0u03?|(g7(C`1^r&-g2!E}H# zhMW$9L!C+s2Ct^kg66ALo{_!o6=^}LFKEGi?w3iAy*4fAw%vjjtlC?&VArPw!Q14l zioNcZv|#Hz{52tXheLP~FRF~CjVthYu~>~* z?v95ITowtaf_}s@nLQ3bzcw%E+fu*_`i*N|ka@d4t$$FHFZ5BbD|tae&fo=GP}jU5 zv4V{OKK$Q3SXvL}2Ew>x3{4pmR|8^sDQ99EOu5O%m($*!kI&9Q@D4|pqv;S8r!rjg za(20yhOFeiyw`bCm#^94{$v4r8c==;{M#nZT))JRor@7tYa(p)^1Pp7MI%ia*yWUY zm*R~h{xc#=kB~NIcs5#grlZji#526vKd#1;90R%yNnU;!^Gbi_o8$8|XYn~`e~@)Rye1uuat3w9Q{=qDi5>YilIzSBp_+ z(8qr$x##%PCny)D%OA-sk%D(d=^K{t-A+kRHY%XW9FfHJG@;4LNc})@#UW|%2Q36h8$OE&Su)+LDeIqXM-yM}?J1 zwckMknI%baIs-&Jo=q_z$R7GrMCn-PDE{yN{Qry2oRV*?Q*ozv$LTU8V5urae-9 zg?ASgN%h1gqRASYrXxc))>%)SRR-DArb*YFQfDs_O(tcpy4Oj|0GoiTC13y(Kks8B z&@Kcy3G|QH2;>|Sd4`QgzMV$u1iy8yPT*GlyJ6+%KSiBjTRG}0>I7-! zsJCh5NMn*$a-+WOF6|vY*U5QP{yb{B=!}|NMwFPhb2gh{JJCn3!?fk- z4+gUpa_^PMOKG#a8sbZ*XL99Y?E`v?R z$4>&|O-C1TPCqzcd*tJGt8I{$*UyCOPxDPYYsw#1ACW`S*EE2`|t!q&XGtiS$!$8qj!az~xh+?FHruy|Y z6vQ*aK)24{ys?q1)7h6BAuOeN{#ze$^0HaJfu=>|s-pvUvka#F+Hsyh=lLQWp|BLqSj?TiI(m!0{cMe>dAHnd3YH-uUwzjdue;)4R0rFu{VIVh;h z94(R<6uG|8B56C$bXwm?mEF#r^BFQ`FFWhIpp;{;&8$c5vY}w|#T8J=s$C4OO}0%& zR%PD9m0Q_mvK-ww_^c+_P5h0vwxhrLWMUhkLnkv_A}126gahG}S9*ZxZRSLaJ>1OkLC}`tnUU5`FotYta`U0OiB-W&Jif6_ zrJVswPrf+`r+Jj_7}EMcx5|_~68jcRva;nz?2|_2_Lgp++uJm3h-d4YF>RWq%dvEC zOwS+AE{T*ts>;#ed^$sFZo0%Rw;OcY0+UiUG@n*W+$!Wtg|B1G^5jZ~WddZ!=h5)* zR0|ITM?zcs@t}i*-^1CQPwFiXVanoEYers6mU6n?+5an~a=y7nQaQhMEtTWOp6YpI}Pkz%96tuvYa${+CNKIeMAP1 zzu=NXTtb|*)PkuTR4u#LWvReV+LM7{+1H9r;%|YPMD0c>px}(b)r8DuPt#?%VzW4J z3RN!395tb|*;Jp|EXpd14iu0atw1(yOq3fp(9Nq+m2_v^(q_$G8E44_-N(^Rr2Gz4zSnu$ zjzpMrxqHjTy^fU*ewt{KJgL)L;aYCd`Py)U2sL;MzuiZS8QX0m)lTe z5HVeL!gLx;H!bZU@?K~CKxh7@c{@`fg+KW_QRsieRy`4Y>y|~mF&gGkNGgiXe?ZKW zh8k@}ri-s2wNtzRY#%g< zfj9`NP2HN0*uBkZpbzTqTu}xaSZ^eQ4Vu?7SZ=+BG>AGwk-^&5i~9WHke1cv3dyZkUn#l+Xp1d{wjO}mQ zXrm2H?_@7HyAD@L0zr10(^f3Ti5#KL0$o{`w}SX%f*Cg%8M42VC0U4MoX;p+}4k!)ZV}ex!uKbtGx6=nXTkNVCC)wKHl6vh0GTu`k(F6s@B*$;&qAx3ehr zYO-udU#}Id$=_$_vTXl{ZZZw)XidTQcHWZCqvBFpZ%vTR<_k!90JAI@<2pu3`F z|8u&@qHC=r9l&Br>(LPR!&sP-P%vFMVVhZ0SfoPW5t_ zD6##UHKRud;yHa>#$W@)i(tUr zjt1H9*g%8qHjXsNDk|s*sX;bTL2ao)7O0?>fyx^nmA48ifB2}}jU?9Z=RgwcHx4AR zDoE%TDTy^fLTxFD6(FIO0n!H_Bq$f<*g=FQ|7YL2Qq=#tNGa;Kj+CM*NYpQiQq+Wr z>MKf70Tk6Ukb*3-yowR0iD6v6b+<}AL=U_NQocn zS@=B(@O!#}-#WM9!2y#HKpE(E$W4Ma`45hQHu?i+Bl)Uq70Ncq2A`T z&Hw3~ZfFA=bsydI(Y-_^1x#l=T-iV})AEbB+W0hvI8-S9{1N+F8?o)OdH3=@AFxQ? z=eLgJeLCFe5k=l-!;SiiyidZ7de*S~GZ>cdHIUk6^SdeC{N9d~Zhq@X>84|aj!~3u zHdd%Fuu5e@>1JUC8J0Vspb^67Y^M*&mH+E+LvrPQLnyiOTSt;B6&>mdL1?1Pkz5IM z=o$PFMrFoGf;z}Y=XVXAc2&F+C6M2n%$~k z!|%~3{FB={7HsH%yi)){nIqVcfTa3Duwemm+8%pN^?(Ef;h%z^f3w^%(bJ>wPr=JY z;h$7&pb8Lk9F;jr0f9}fFO&i%Htjjrz~+&%_JH>ee*P7C@8D?>?;SLccyApG{BVW$ zwy{8ch4&Ww0Px->7QuBaD8}_TSs!$}dj~95&1rB+dqeg$==h3oJ|Tj#;x&ik#Q?JO6g*)q76VtBB#abSp%AT1iW1!Qf|pdL zMt0j<;!0)u=xPKeNTTZzm@bGqfmxau^Ne;{JPl5ZdR!_0)l>r0dbOIs+~ox3If%#Z z{=I{JP>@Jd^7&*&1wVBD>hARiKMlV<7?G0#%69JU;%DbvK|OkmI~nIF-4}MPua5K7gaoVs&wuWP{KNw&6rJm1D#4*?0+$w-iEz94O9aNt=r>PDn%q zHbb1N#*Z(BP7@)hT;qMN&P)4y>=OM& zV7#|O|N6!l(7$fui2hYA8GR$^U(=FNn{NbDQEka6(j%LY<7W1z1%O(X*^)}& zOZ3m;Je-64(H6Nxa-s)iQR>D|Z`~M@;CxDQ#zFdF5U<1SjJ!=Zo(r{6iX4bA65|EY zOl!rui0b6db0CVfRreX>UU8QjK=E$J>f~ZJkjHo~v zpZijjCJM2TLnBpjnsR`;O_#_VrP0h9n8mCUM2CPyrcg_bS5d6tErSBtr@ZTX4KKQL8;e$RH(0_{X!5$2# zF9t&@V}k)@n}gv+E8}190n>#7CBDQiHyd>kVN-M_isqC(A2%14MRIS*eqdEAQewlu9~I1l}F}g`MjZ8_MF;zgWx$v{aQDoJ@SsrwMrNoko7k^BLyl zG%MGUsAQBUe|CPVTj?R&wm{3_Vtf-VhyUP6%i*_dwWp;Htshi!VOFHA3$G1Eg? zt>t*u$7bMcL&ZxXj>YQZ|07oyTyfD3WHnx#!y2aji{eOAKJHJF;lQ&No>=&>%H2xg zbW5^Ua?gST48>;rG#*WcA`sZCU?O|1n#kc1pUBz`^4;q}e9$93h~GNWgXkuMPEzzB zw#lHrFqu@wOa^6q={CYWnUS5=9=UZ)o%Ipiamn50WOV#zU_tLy3p%>r6JeQrXv(gN zJlnSpDU>2i4OX<(84X!DgtRraFZ~W9v5Nn;kyu4HB=nUcRX2=FIqDJ-Ic} zjLMPK3_(N(;pXfx%omW!YE$Tga!W{&T{dik$FEC=oz~;EzSQo2LHxTC>66=3dnaw! z)bEB(@kJN$iG0j%7N5v}cBD%3TSuxS-I~xbiYm#rCe-KC<4GzLs-*fFwq)6@0Xs#PJfm=4GE7Kb@`#5jojd{{u4x4%@bfVzCy4^jtbvtRdfd7iP zK)#to8Y;haq@mJ{?4@F4C^M(5{8>F^r81$R5^Hd^+R|Zfokyc=z1TH0Lgtj0Hq}-t z=)EpuJP|U-@4M@T%<-QYDX`quu>wnn^PK`G%1k)(XFLHP>N7Y|kMGS9BNah!GB37C zENsTrtDLR5gLQigYD%{>boY07q>O;izH!`_0I0I;950~ISkT^^$uNSg5R3eB{3mOk z?$*@EFJg6oKFdV9e8wZc2&Ac=p(Q?TukTDfmp&Yi*x?5nub@w_sPPJ(7HPbK=8?ur z9f{ClNqkUds)q7sJjI{H2lc9vSj9EL36Syzm78ul^rXw@#Pw9uFXAWQIwpraX(Li$ zGswqidlzOvu2Z{^jWJ(($i{+RF3Z<1O-T9l&TZmH_M3_fm^g- zS#onVEf|C~*VBTz$mm)y|A#jBGu03M;2V&x1@m7`)q+{CR%^lbt{BXM>Sxhc<4FIY zhq7xcyxg{1D7>onmcnb#S9tBU3a>p~;l-B8-|AmXriy=`{POFYzn%8zVMXD!=PJB- zMP1>w8Rg(%^SzdAOM>$_0O#5oEg$nhqvbcQHCn9ipUS?^8m&F4(V`wUG+J%vuQggI z;u@_zV{`J%2jV$>ERKi!2khSJMS#uiNRa%#4kSo!<4A&34^4~^0t$U2B}gVvs4XQ( z0w~nl+@;VW^=L@S4u~SFBn_=frM+2duApi@y0Q~R3n*4qqbBd38YcW7?K}+kRa)hlOw`d_&@vBr7`~3Mba3*btH{ZL85+9 zq%kH;R9}(C2%xB*qwxW1B*^l z1PV5=sILeVB(SK*H#ID`LRO=uSg$F~bk5kpsQ*8M!TMfX7u&`3y9KxKk%{yIe(Ojt zpyP^;QS<^fuBfl*1thMhXH2XJZsCqcu)FwN2Dk8k{cVun?l*+wx8J%Zzu9T;#B_#?n0()I1_~iZYfs}Qv#a9V>#<-PSR)t0VYMK@epQvnvry^#!vl5QI=DB~_rLJ5AP;3}>4ph0zP`sokV< z*KoEWq=Q@P8}qgS3^8vTJfMohq42gUj^J0t)JtV1FSv1i-CT_3`ivGrJ)5^JuVV7H z>R{XLvi!&3ZG$ekB5xZ!E#hs1<`HkJH2elB(&^Acp6-6gCbPH+dJUtae}+;8wTzOu!tDgpn1f=>QE{d+tgj=P*bk9bA7?U z3MeUX2Wc!zat+G2R~#$((uceP)@ZD0Ktz5(%AF|=7rQ@ockZj9AA0*3(k1o-)fcfJ z_Sg`9fEL$h2HmzTGYBP2jn`__sdq=yxL zaNp$zdBtt`!O~|IKd7N5BuTuP)phLBzUWeG~|Fhm4IZ@a9@&!)a?do z*dnqf4N=5N!+n!9bkTWE@2HT5?AG)}&=0pm8v0NLq@mk5A`Pp?&2b-nBS}LODAbmu zp#TcC_!9XlWws;7v9ISjdG6Y+9n)<~8e*qPDI}V|bGFch`K=1`{T_q)4gXy-AeyM7wj>Y*>ZrAe`osR06v?22>}wFHEk;Z7$0t9~$+$m-8-Hs6 zDeA#!h{WMdnsE9HUBPayzR7c%+`P#(bvVL-G`l;j1G!YewwANmXP6P?Q%p&47t7IQ zPUSV9AqQ?&tkbP8eGj?+WDg9Iz0XI()c^|k$>@xdpO1?_M5Bn$kq7Ww`kjyX0wnMq zu2N6}ygq_9!226Ud;xl3FrKXz5x$n(8ZTtFUUSSLrn2$d`Qz&Kb==#hzkDGYYyQqbfvfnzQly%I}DGH@*V~+X?r7ST=J)2Ud zunJQO1_rnIwF7)|TrIBgn>BJON_cKil${AN(Nyzt2IKh%H&L2yl$;6va`ReUZjQJc z4p?cw)616R8Isq}=AUzZ*wN)=_AMDT^ZItYosZL&&hd7RSZV(?BUW0s4Rn&iO53)9 z`ocC+S$(>JBtYz%f9(&*W0@Q}3Ea_ttj3qpGX=ivKCJI`Snux&Uv|I0Zr_*P|GtQu z_FG5Xw2m(NO5vt$bWvZRo5~ovDC66R;`&`Oh*Lzu?J`<|%y#hx`-;!yd6zp}!MWS- z!Q0@s-EV04ZR=*@B-oQ2RSY-3ngGMCVod#`Fx)1_RG(v<%NPZNdN#xDL-xB0Sr`8Z zhTHGan>kPW&yE;wzjefL>sX;<1Xd_B>9YJ8XSl^m4CY+Swr>}7V8sazd8HAqbC_~e zrbQJ;#@S#tVORR_W%faRX@GjbL4D;9#JkN0;iDFj+XTg!wb>zbqj{J^gAihrB4fHulhh*mj31m{<+L{T=S{8t^VR=DGtgVy-)Q zK+SdYyyXhJLYMi}JAz9^nMuIq&$y4WK$D)!H$@vkByjBQ(~V$f^aZKF>B=w#2xSoz zaayLRpXo}4Hpuf4?U1?uYrBy!sdIG%?{-;iV^HTo4_}cw51tlL=Rxy`I#&lTC~gTi z%1pTPXPi2haHF0{otN;Kf1?Ps+1EKMRS*)pjkx{w9FYiHvV9%V1h*t3gp?cp8yocP zm4)f_tb)FGz{E*#dJg*eMo!Pcvm?qqXdY4Sx(O(>5GZup1QcQ@*B6w#FoAbK9CrYl zF|NpU4AFd7De6}1GA>-9ttq|c-@&+FiGQd1+zl6H*LK5o+ip#^S5L9X_WM5Bejg(^ zr(3wcCD~qoYelxx!wT7c-zD35#cjy;^1T+>E+Kl{^C7x6v+h4OWY+!W0kbZ8KQrt1 zC9_U_Y%uF>_ph0C6me$#zR9e+P&}t@SD1CSZF&))b34qs-`4@N?lz8?brmS|jbzqM zpirCNF{GjzC=~G(^fdxc50)#C=s3YtvEqj%yj=3r)Q=j*M7Ht7nQ4+Q-$Cq zLDhC7Z~d0v^D))5D*jyvibH)VRUJumio&egNTR+#GL_unm&r2ZF0B&pvzB1v_a(MbwPYQv2B z3P~z9svt?lfPG*x%Nvmmh3l@5@p~QP19ls9+%D1I&70Q;D`HIj))8Z>Lyf*t7*iW+ z)K?f&2{r2Rxfwo)DQy`^0JB2h2=UGC?;rRxHOM^tH0k~8_ttH&qwY6s!H)XvBX(59 zlR86TM@>AbzQT?QJgJ_|j=IAUWZfE{%Kw+0GZ9+a?~$9aqyDoacGPbjv7uQG<`JK%qo`cQgP*ifRIcN5 zeZgm{<8YFEpEk0x&XBMd>8Hyr1kxmsqG8E>#M>(aapPN4ng>^;G^xH!C(kY{9`sP{ z+AOErc59ZidWywz9{4QhLCbO;=qx8wz5G`H?mFZ!J*=>t2QJIWE9xxg&lEuQ;rQ&F zR@;w_V_ETw%lQ%Ox%y%AauyY;K`UfSj{|70&5rsO6SAXz^O_xHs6CaaWp?yHvZI8J z!H%}Dt=Ul&ad!0J`>2$j`Cvb%k0sf+|gYY z?)jsN@kvFTY^`voq5A~+Ei0b2B-8qYxE~Ox!Epz<7m5qdXgOdhwBGpmzE$zP-(v^h zKm5UbH~z~$VgV8BHx7tc6>fBuBw|gtQCkwRVwj^AALg33a+K`ogAX#8MSaTVAzV)a zm~WlP^-(HIgypGm9PAzrDk_(IYJkdBVW!R!cgrYqs9b?GJ%i8aRAy7T>zuxNLLQO-4xQ-p)7LK;s;`16__aC(AMr40U~v8JyF~`q|DuS&^;<^_u8uM~ zNnvnplu=({a3#v9C#Z$V3gJ2CDO?ELTqm>s5E<(yh!P@Pap3FfkJ$G*wjw!vyG(yK z=GF%(Vs8D`5p%0UjJ{HsTN`53SD0G~G3s%MUjW^~7|tBollddXgz3+lOtn|za$N%e z&4|wx=T}Z6{TdAJ+n{${(6*p={q{Az%g)DeepNxI{!!>%6LhMt(7OV3s`q_P$tUe? zhT)C(yJ`V&rDc=^*kZqfZ^jn;&yLt)zjeeG>(HZP6t>ug9`zNrSVE6_3K_ASj|Z7A z#^oouXO&1u6eI~Ff7zdZ%lV2w^>K0*Y_UJeUm6&5+6nQa{hqv2w%Gsbh%NS8M{Kcf z0_Zn|Ew)Vn^%b^QngHra6F@kV6fQic$VjpQqL77itq=7(9qQgL5B}b64UFLL*Q1Pm z6e7ylZ5>m_I*8~Ig)+85M128bDif5k0C7D1GMm7)uJdLF|MwJy1kuyZr!xSF)mxCo zE|g$0@wvkOAF%Tj$l{>m%G&p8lsQkl8GH;9r-IC6cwKVaZ~PxbcWCgW?;4uB!6MmZ=)fc!^8q00(pg zm}3>-T^@rG%yH0zS7eTZr$x+h&^%&}bvV%(3Uh43iTVQ0R3?~X0cYzJ3(rY-(&nIs zqvg3sOau3$I32+j)yre|}YY^{qwa(+75An50VE?fp3G6oyNMM0pCV>wn z2}~FnBybDgngm7>CxH+78v1C8ORF#A(brC50qKadoLz3nuWA&ZHT|!n_?$jgTxr>% z^+kZYE zd6Zt^;K1v5@vZZ|{@2C4uirl6eN~g7o>6#T(~ts~x7hx9iEQj}SfI9z@uq^XQSiZXGyMVxI? z>0sQ>;F6+5OnnlJ%%|GOY!~p`Cwbit4@q9XbxrbeC;FGQxwcO9=mCY~wc$d2h2#|z z^D*jKBk)xK%4>B^J>ns{K->Bqa*MRB|3wjP>$i?*TYZ?JlN8$4#troq+E(I*dVH8o zOL%8&dg(ea2cRB~`)Bk1h48oaC)f8nv?8x{yP|$K*4D=;Vr~7_5o@a>jJ{G>TN`22 zS6Ew#FzRuH=Md23y-gdPtHh%g4z@17AP2R@v%9m$-M)Se#_nyfvMwlFu(E#ph?P}A zr4CY9Srb&MuduQLRH`R<8A?2{;Ukm+%%>oVY4@wT41sg?0sdVFxZ7nn``}#t?zOVW;T>aJ&=c)sXj!`&Q8(7p=I9CZQ>TzIsO5P5V5H4jf+x7;*pwH8eK$0|FPSSu{ z^*iiNsa5~0BWl%e9Z{<~(&#sZTD6fzeT7<;NTVJ{`gjFb><)#-oK*CUU{?J>`%WLU zyoKc72obaDwvL%q9Ygep!mQdDqQ1hcN(@ntW4I1Boh}dh1Su)tHt9G) zuex}G=fmd;y}HlinLhCGysNGBgGIX_X@C`9`sP{ z+SIYzc5CXmdWuCIANkbr5zHe;M?Tt;ITVcbzv}~r*KZs!yy}ocS4oD~#0|CiwmTKo zLk>maVr$FW$`3xUAPKc8^S(%zcM?E*>rAbWOw82!?Q5o%xs$*{SA~{3OJQnFaH+ny zjZS5PsjcvRQ|HFRzF8!Pp?l2D&DLhJm^NG)ay2JEGZO3M%rQ!~7=&|nCuDGwnuQ$f z@({2O0}J^+T(A#�C4UBQ97s8uXtq8kAWxIrX95QD;_`dfxk&eXBUr#DmLBpgMGtcMHUM;{g=ihfNoL9 zVjEA?7kH*Jh9}Bwve-u|Z6UUPopZp^U{Si~Ir zts~}GhZ}vRFvm9Bs4w77WejeV3Fdh7-iy*XUCqVU#T=xjw)}Q?cqAkwxb?g7HrQnM z8@6DR{q_-?tO89Pq_D{*&{SX07^$oVn(8^{+*d>_uQyd4IA^UUJjNZEWFOq$b#S{~ z7GMQTvfp(#W0L)6M@+KcI%1M_P|-08lWc>E`u{`Sxh*G>WNZ3Wu(W+qdt0Ui0-egb z%S@2xb4to%+qO0mA&FfGWFTdh`f8qK9&Mgv{^bz__&OqivS+R;%fmeat>4d|ujNA2 zl*U9wTG)Co1~}A{dT#7TzQu`m+X)c2;`#!oNrc9ixxj~k!1v0ReFY=F?3a%CvaUbu zrtoE3f8-bXr!=NN(saIzGhKwCAazpS9;DmVCWm=HuG(R5HF;2mYP4Ug3$L$61e)E_ zF=*Ds{H%zHG;0OaE}rrGagm>iiF{nl_fQai*zhg7=y#{MD6D`^bnQIOcS#psxAg*c zs#3OgSnGugZ(z6;U3i1H$Ba36LByCWfA{JfDCX$&nQpJ=2*++~xFY*p?@ z(;g<(w8|~REj;RVrz{SCr`nS+NwF$$le?~f6bBZ(B`FTx7LnqhctnbIIbSGpBF$>1 zAjMM7lqN{Akh3Dg1o$v_N{(f;PP)E4!D#{khy7-%F#}v<8yION5FETa0>MG?90W67 z&@q4kfURtf4lz+x?BG8Wsc-;Twm{Onp&^;v(KiqCowISbj9CItpmcE*(mhbu=>FUBdTwNrYFjlIYa_8zI$%3)IR3BBT8m%1`Bj{6Li2Jz2Hu$7Z zV}rszjn##Ntpts=g+p#ZV`Z~ME@i{_ayUQ?$3870$tP&h>A+r0e)E++I8deD5dj|C zf$7#wXM@j$bT%j-&{V}By1_^iu{ydTzeKExZpg>m-O)At z-Ej^Xr-pmO@%0IfyFU;UZ&GadO(|H7h_rd|B~baR+VSp-Tdb>b`&R+hK&}9=2BibQ zYKRS6Nx`lFNaL_|amr2Jq=*%DYa zFxY)!)!@?sRt-uASk+J(c9U4uQ5yLrR#lWnKCblB6r3{+(8Xa@#E-k2AQJZMaALY( z_qXZI6#sZwdwKNk?ZeuaH?JSoI!~THtkH#1%V-+Ng%Qo7Y0J#fRoh}#tIHC=o zE6guxXu;m=&vS$>g|`#Asbifu>i18|`w@PgBT_t)=;@E{@VcKi4(R_DIVwk{uIlen z%g&D}ybmN^4g=>(iv(psq9e#?5Ro}2v3WtH7N2;EC`&`dzxHh248j+~4Z-hks z(h(BXJ6{+{L87+0$S>4QX-r+DIY<<{s_0{L6k7YOxH9Z21zzf&r9Su}MPH(r{-uY+ zLtIFEc7~DqVeMi(8eAc)8~t0^jRi|B|6(JC{8zPl?Cw*M3uuF`a~X(nesVXc0rx2FX%nkVBS?>Cj(%1$((j0J#aBOtL$4#w_#w0E;Y*$+mhOlW`q4+H} zSkw=&Qr~Q=u~Prt5i9jeN32vA6oye)sVyk-3xbx?n4n1Gf-c=kt4#+h$g$cJHyXPf zd{-mB!Nu;CmilT%wA3#h(NbM&%-9rKYHN-BLhF>qv_{$zy|U+m>JPo`&${4SO&*}U z8pGELLVYbF5bBnWL8vYzEFz>tn%NH*&zK7;(#4K&oJqs#H6a2z?ni!N;6qc@hoRO zDUG2yq}iC%7Yv)zYBcJ7u2{eTZjDX@g(7qs6pzrUu8*?&51eZ2Q#{M{NohPQN!SOp?1)DsB5j38t^TXOn{}Km{5+x|^XD2i;3rL)TWThRc-?`_h z-_e3F&SjrpAR9HxRXk6lcgOfOkUYY#y5tG~AmcdrRScCyekM8IVKqsc0_47@Terlo zl%M;aBJGZ>)h)R+Yt7zbvDPi0wQg0cb!$o1ntwI(Jf)YFtaZy}tvn+eK~>Mw^1Bvm zoeQ++dCI0XFPpw*cV?~rYeUxR7Y|sg5Tx)t-IA=8%xgyAtRkt`pt89b#DF6Ga zIKWLIFAQeMTRh6+08{Ql7M!D|4_Px`00_46d@KHovk$H`+~;E$@n zJ6lZPPrktS17v-{0wC)b4uGuMm|-g3n2}@yS<#qN?p$poNgz9$u~W?bDoX#!xObiA zL3D4&)!Y0q`uFJs+_wDp_sQTpwwKEP!$xucrZ((e(`k%iwuR#rCvbl|qeX$b zd;HC>F<^^YpRgk$9kzoyvv$DiOCAGWzkCFE)jC7QQUI@6Ybd`0cttNk`FO=qt^p^& zJHKH~c)GfSIWVQ#_lp>_&jX!*4d(U53#Q%&!IWe-1HB>~?JIqFAPXv>*A^f770@fi zM?M?$`l7y3Mcv)ww+FxVMO_8-x=Jkpdj0Yd=+&Dk%%Xr^TPfsMK(AB^`ApE8?mMJ- zAU`mK_xf;{Jf*O-DNMoX02f{g=IcwFCMo<3Mm7B3Kj8Isi2$!(ItRS`pv7mS{lOv% z;I&mneg*JKRguqXe_w*Z^Xo$Ut6a#d5%-s2R^QqYX7x+wn3ZYO?igCZFbZb1wL*Rc zvr4Uy&(I14)ooCKf!Y8Fp9k)<^fc%!*FjKSn=e67{qhk(ReMb`kl49LnnO^9X7moR zbB{DWxe>>SX;Fj_l9f3KMl*6G4IrS zP0Usl-f4@3{Gx58G{HMXuh|{lI0uSK3_3?Ff`q!`BeW7(cER1Uc#X?FxW~&GkAAQ zG=mr9M3e2h!=Y4H6UGs0Ivekxm$J2`G(j|lnhOWB^Q%vpp7u6-PCT0n#B(2)rT*1u zb$h>`+&u12d+@vX`-A$%);5OH6zH|nr0mk)lntGaDcc zY|+oAPd}R#{cNiA^97s!JY!$Y=qJ6bq@PWfe)5dV(9hCZ7X6&7HJhNm45Ya;>hu*4 zQKw%#N1e?2Z>04L)Y+7%lWc6D&dU6A)QKdHI-AC7;qB~4SlCi)INQ6d;k*yjSr4}K zZ5?7uw|Imtv%+(1DWrPWG^HvYF>EQMLawE;Wp8|eTjqHv`D0(wk7{3t$hs^J*e74p z`yrLSMgghx3kRf96&SXXq|y`^x%v7cC2>+I1U~Rr7wO*1$@Q>b>yY3n1aCfSe)A;< z3xkL^kzIlf`sE`ws4E4tC~VMH3i%Z_D3wCKoDJfN zSh^u;wtWpUm@puP#+VJ6Y0Kt%)V=sVIJ+KSOGM}^e54Md^4i#HEWUqg=qpxs=4OoJ zV6@-MxS`UDJtvK>4+)yfxd^R`qmHWD+a@COf%TS^(VA;W20=9$Ed@qBE zTtL7?y~)B_3QV*GM1BP(N&%72hKa6#;9PhvI#+ROs?C7&Jnq*U0MYzf?)Qda70@WW#ymMsOx*am4?A%8ZX?NsDZ zgDsyAwkkf@T9OauU(NU+y{zPeEte1SjLY!B^1BuvoJ+Id9mxX+ylnbv-5DABuPu8^ zD_+3s;8$hHkVgx6lNX*X4_-7|5*d=&4P;m;GDn6;;>fUNB12c5ck~+-Pe(E2LWkJ}%UN*=pjGFZcb>L|?vuCi;bQn#fifU-f1R zyGWX7YLDD}K9rI;O|+Wnx7m*{AjN^+PI)g1Oz2x;?U>O2T-j?|-Rr^Q;OAzTkoT_# zPjuyg^MrJiWEV|b*MCx*-J*SbX0uK;N>pioABf$Ceo z0<7YJ=&G^=W%SEOlu;dE4`3FBGTN#lzd{+sAWQFMl+nVnxXEpp0*~U<>R`0sk(h3U z!amtKB930k0AN9%zDTsb+(*i&dT<*HS#NbQEH8R zHed8*N@G7iy-|(DzYHe&){bGKUp|6~x>_)e0uybukY9m`QZ3}OVWO)R;1`~AAGN1J zqgn?!bnUwYIrPitFI)zXqz z1%R@7eRfnTp7Fq`vg1QOqvHbrbO$EzDcQW>66l(5W!x9MJ;r^(3nG_5wGELe1av@} zgZo4qqIU@BfHX^;YRzom*))R6$l=W`w#f;Xz`!K8yhJj1TLk)o;t}Z6^-*@80qJag zif7yP#tcYEiEz9oDB{l=tkNjI8%b@rlQQ+mZqB?IfnOfPsr#PoFelpSd> zI$J(vPrAs@Xu7g1ec1mo=>M$E(H>pMK?ilQ<=h`luW_U~`8o{JEq3$}p>3!0&~1a! zX}WNEFy_~*R_kEVU~>exeLDn5*@f5OHmfy{o5*%YD(IG6f(mBkEh@O}Q^DoED#$bHR50CuSYCA4J$ZCK?v-KK5T$Q?in@c!(d}Igey|I3 zpU-}yMG)u8&OHo$8Sjh>{nv)L&@Ud~!n}S|7gugeTu6EtxUiCHjth~*apAU!3(Fs2 zc^FD5-UlseJ#5f7Y{&-P;?V_@sxI%ELKh_2Y*6Tua_71r$HR1&rrg zZS5G(|6Gjm{PGdTQyUmrM(jW$&B1s=DS8L*{3y-Fcy9LxjHk7;-4>f<0OR=v`862N z{|zz5^UFsVPZt#yR4|?`D)NhM<&-8c-lC{!CUP`5qcG8M8>3qm;8%7v?u}EJwCwoA zArRkhQ-pp0@yFjbdu0rYgV#Z`eWTZeJq~o=`ZZw{p6AN51kdx!M?6oL7iLj-o-Hr( zD?CrOS>#)i=k;mX(Sz>aZx&!479lm8<@t^N$QWGNjdH+yzD3uF_xumVc+W4N<2?@O zKkK9F0nDV}JzIL@SMZ*c9{Cof#~mxUD1A5_|D;xplcv)y5!@P9t0yTYVp^1zcd%Sf zQ4z3S?M|n3rDPF3v5Ne~?pDG5k$y!;^9f~^#VbNJq2~x?h+fO6wd}JD9KRXNZ!Y z!)m|KYXI3tL6l|O@9SP^zgD<>wu8k;YgL^4TcW*C~zk8cJoICs1l&l3SwG z;B65~4T?u7Ro4f`5c(j^MBT+Rj#5QC0*;ki8U5kuqsuNWYmdttBn4IVl}n?(qTC)k zNrK3#fw5NdlnmY-Q`O)F5mnWdRQB>gNo^&IXStHfc0Rp>k8ILYvOBvBg>FVc#G{Mr zQMwSNShx;{H6m)4U0jsX8(iYzD}JS|jRta>x^p|4O4$WX-4Qeu+3rYF-I7bt)U3Qk zQ+Irtx>M2Aoh4~%{?*LKl3rHQ)E$?m@{A5mEpC)e;ls*X@349O zM}k+9&H%5Ks&nv)Bo1D8c!%(h7f0_lUp(p5ws!0FM(t7U#r)hvZQAc$llQ^Gb!N5c z&Gf2&G5zn~&abX6r@wD*{`~oKV=x_Wj3;NC(<}5M-O0)3c5A!Y+Bmd+QP1k1kLwNm9hJ@EI9uQv99~XpI$OL0qG8K=q(L5#PG9k$%yl%$| z-l#UIZ8q})^z|*VcIfMWE{48-`5gLkitt2lU}P)>`kLBNez9wu(ik5^n&^2CpLS}^ zoz`yZbSV%?|El(7W4pdzdw=~M_s!N`;TBPJ$CGYxw*eh_TMX~{o-U=mN!t?hWFk%P zCv?mS!*uQGq`ijPM z+b2ogKjXYSe8Xfzn|0EzZ3vKoo@-yM@^zkEcZ zb+up`g+$wGA-_VRrCP}6w8QLT>J+4KjB|qB??rEh6#y=&K4WnpK%0G)KNu?Sa+QPK ziu-lO^+k+nvtK@<&3Yw(2yne9T+&`*Fo`!U+en77z)3(^+A52PfBCw3y{Wp*mtAhV3ckyA7A5eHbHKSQge@Wpn%tbrB;I1!MkI49lRid*Sd@flOTgx17-P)!)w{h@QxT>(>w|5 z(yJnP7M-sKh3bw5|4RE4;^gc_jaV3vP)9UcGn*_k?oG8+AX;Rsm{tEs)pObBPQkv$cV^T6YeP2e7Z03*g^b0uqq~w#lUN3u zu5_HUX(Vwry=x4sZ+$7=(PMU=@_o?U*29N=!-jm=EgtbP`b^HFoB#ddZ-`BL2vGWJa$B4fXJj*QugI@Sb%z67qCtlW#-|9Ml6)6WYJZN#KZpGjz!&O2 zrhg8GLw+gd>!2FE(W}8euLjlNzkc%TYO@6S^~*=(SJxJ1QOK{YE%FO(QySA2X*v0Y zCrNS7DeW?L4qvC~@FxEKu5&Iolt0ZywhAS3SlJ4};2aq*jjoE$Q;?Yp_O_Xa7Sn z6!yzUP*|@lFp~m>?aG4uqOznkR#}iHCJz0};rJ%`z|E+tvc!f9bNNe+SwfoqNZP;0 zPYiwYX9@QJgnfNtAnccqfUvGFtfc^9TVLcC`ld9dFVeWa2SY@wNb;uR9`6=*QE*jO z!H5L`cC`ka)CPLEGx6Y|)r{dDsjw^05>(hPpHpG((D*{1@{@rSDs0M2`2~YWX^cT2 z&7B2qVW*Bw@7KMIv|Z#hcfhLn(@;XDx2H4 zt1TNdYP8z(Z#CI458&)u>TX`o{ySsf?3Ry#vo7CfMLwjNt+{x{y`IIAANR%z`AQcp z3OE#AvI~stHdxS3P0QB4^o$P7b|*C|sm{5jBnhq8!+0C88X>J0{A(3v!~&8(3Q9 zD-BGc7@)?sfC|Sb^0Nkpd{zUqQAUo2_il%VDZ50&Y!~Bk6WQ*FhTW1&py8~%g@*Th zG`v@#;k_l%aQ@W{4b#g?G`#1cVV==J!!Hmm{PYy=>lDGK+PdVpxBO8S?$xB+uCs&e zF9Rvd{_rUUCLdB%xY?pRO||CtYa(9A3Hp-r!Dap{Uj^?EQLtar7ErK^6Y?hi_S{W* zPoiKF$3VfAZgUijB#wgjOcd#CpsgO(THT=Ks*LXZLkKWcls+DMmNAmyVSEBpj)_$c3xwT(B;MStoE?k{O zor3*rZY}Cm%AGfVBstuA9-@S()a9@{O3pyVbq}Op4#+bpK-_9noo z^X_DJ$Oi!1x8m9Xw*R>pVEg5x*x0J-WErtDjWh>f3*qSzDgWySBfPtvR^*O$ZQF9@IfExasRB85@}}pES}{DOj4S_$Y%RI z3}i`@5{dq{ShQM%vGxtJMyBh3C}z5T`H1Q2jSyy1n69lH@+(YNHbUeRyB9^|YI5Qq zoL%D-b$QHV?f^{jz!3VY^Z};^>cd~ZVSZJ6=>0twybs>MzG2tz4eWm}hQEIK2>$97 z0oGFBuU!$4UxB}}A|RiDzbOP9R-}koPa@BIV1ayHg+VCsT(t2We$!pM8q4pI__~@b zL45u45%EFmv zZJdpNY~onZ|MYuT(@ny@kLDGD1@-{f^=m@fsgOI;jV%`016k2F)pdE1|X;qlK=f5PZgwXI>?V%u3zbHSZBu+p8NZ}83t`Ub@#=&K3` zh%1DnG!rTo&vK}k(ggIi7F3;Tqr$vb7(bP*a{+jRKmV41H+WkFc!T0O;N^VKAPxYr zQVXOxfLAmkdI#TpqBM&SR@(=L76y2zv&AiNZeWp>aBlGKvLCf>Vd(^eE^a9)E+J@b zG&dSDj=Vt~fMTUw1zb=O5#{GYSCJ-gt|^zj!=K~a{oCPO%3k2ySr7QQiL^ViTesvA z>^3WJvDbw$fqFVv)pI?7qoj%O7Fg)jQY3aR_`L$h007 z>)SeHv2O8*#i~-hYYM55WJy&#%4QQODVGXKVi({SNB2JV+v!JoEcb^vpa107iTgpT zzQ!S1^@|5+Rjnd07H`c+vZ_e&h`9ud){I=diWG-Y2LD0`joJEuT*4M8Dgr4~r)JVF z()A_C>!jc74=$@Ku`I&s_7UKHYK7R5UcnkY@G3lwT;7(gZ{`l{yTRI#QL|-{Spc zH4fi@v}9ko7^3>+BZ#Ui2Qw)U)m9Gqg>os4DTg#|n~fq+5j#!WrAOD7mt)+Pgxzx* zUB(nKeRgSz2%qfttY3At_n7YmfT?f9^#fD?doeKe%SXUe7ai78fT=Ay@(a;Z8WSC9 zTyzzZl!25>hMI280!bNxsGwolOnr|Ht-^wu>b<4+SRByeoiGoILnUG(!-jpWLs5)nx{HTsabWbh@bN~jkxbcL? zhHd*&0s^XI_0~3by$n!6qkbn=8b}eb(x7TKsPrv*@IM z*&m(2XJC{Ly+BZ^=P}!@5c?WMx%a9z#G(na{YBcH-1iO(~KP(2xb|LdWLupB;r*&1G0vwLP#^K zQ1OiW@X9KLd^Y0s1;XyS#O=YxL!-VD&keMRd2aB6i0A6sDCh!w*49RW7e#)-b4_h* ztdQ~CR{d5yH)R*@xh*yZKc;MVL%e>;3h|y+)7pBsTk{J1I)h+Vt zi}X$vX`6?1dLP(fE#x=&Mnr!7;sN>9rGj<1R7f((uaqj~X5=@M>W}~Pzy5daA5V^t zUeunvtu-6_wN|>>`B@*w{&32_yf^f)h~`Oyda)Wko*+Vc?FbPaad#*#5gq@)R>y>G zW%RG6gLH8y?SkOU@Fpevvp?FzcUtxOKj}aF`^En?HtSm(_2x#s@z0(5W`C3()*C~w?ANw`y<3i15zQ? z3eT8cq$R z*UoPP!9so;ln?l=Avmlh`K=>3@=JcJ2#$PQ@Hv>D^oRW)UBrdLoz~b-?DaXS^(AgU zS&(>s&23I#xEB$l-mr2G=gN(CvOMOv!C+(2Y$xMpKuJ6M75 zuY^Ve%Z6w)D4(NI&cM>rTVY@@gG8f_GRQB{sGQqa2%bj#V^~%9FSS#O_ zHb&xvv@v=?KpPEpUnuG#&8Cftx+y#qp8r-qkhyOgep>{zbT1>>JOv+NpWYlj*4N`w319Vw-(hQ$n)f#;q<+qxAml zPc{bqtJ7k?ecanTzq%N1PELExoz^bfIq%q8=Q$&7+>Vh_cINZiLfRdHs9SPrAez0! z0-_Bchyr#Mp0BOOl0Y>7Y6e8)DN)jzipoW@wXp~zQ}K9<~96Y=`m|E z?*m2FgF1b~hN#mm9$ZJ8|9!LA(C=D87bMxJQ|OX%bJS_+a_sB!aY2_we`Mz5^vRd% zUVKl3PnI)Y%lqj|P&~tle3kiCR}RLKIMGxNxg|~%Eeg3zoapv(09*4WHJ47@K?1_) z*Wr61jQ%Ix04WELgCCsnMSc|I;EApsnM>h|rh1fL;fq2)%4hRMU%_WerwEwn+wRxE zME^I$Fwrj`!9;aDJAk8k6MY5WsBLg}pNChjM#r_^*Xq}n*he%d zpZkcirO3etqpiU#3SYF9LVkrWN~Mr*aVhd9bSO6c3>M2$nTxIPEj4eeVy) zKR5VwuKvh-aHO^VYPi0Cyy-U4y%=x$<#W8r-M~K^6$ds^@TOgHkYB-@vf?10)x@ib zf^|8oCeyc|*{q*U`qqxwq+dQ~lboM)47D&#QrM)e7V;}>QmTb~7C))x1_nP#qrcp9 zuk(P~?Wci)&!ECD24 z+4dKJq>Pr)#$s)8OJcVE05}w~QJS>^DWB!2B;{wQ1Zg&qbjQ*5D|H-|*z2{g+KPV?w8cVxg;9z&Mi#djr7u<*^*KF043xRg*tEf? zV<71Z9|1{SI9N#thcvU570)=3l)@pOC0w;iH#)~O>T=d3di*GA{tlIH`Dsm6EU{QQWsu-9#qKZNBh$^ZL z2SiY)L}?~>DxNV%Ny;y%Vzzi7cYx#ZcsTvNcG92rCWzVv1o5yoEh3cw7GL#y=c6%D zv4#!ZF0zw`UO5eEHaRQ~cBOBP5(7nIlo-4qM~NIwrRA`KreF>Mijn4^MA7ibq(ahs zJ34uIJf4R!JDzmm!HkGAbR8DIcGO>-0eZm@^5{4B*69R$*eim@K#UkP1}}&}quxN3 z4Q#TPsb=wvgGQ+)@(IxR|E0eUsH4?A5z6rdwPW!22Ro~SOuqsJAk#0L zgG?sk8!2J|GPfkiB&iILS*bV&nMmRw6Ew2|nSa2o58Bn{H_YZ|hlc&~zK4ZK3dKFO zm?ntpf#^`u>Gcqsgy~EY9Y#u08FhH&$?&ZbbTV0wmo}6_@gMZCx{MooWEZ#Nh_fMv5JM^tz z_utWDIo@uwjr8|H-7iPP#lt3L05bdmEW+s}omH8hb2r8h!6!mu>^6W!Vl208j`Riq z-*#EQdg$4Vcj99Q=I%2`9P++#AK~b6|RrxH_ zsz}S*6s6fL*q19!U_=MFTj$pRR&$7dX9(e-7R7kj7d6Mj96G+zJ4xVSDJs%TQHy7} zs40z!iZrn-$pgq2=ZuFbR!O=ftUEa|VjT{q<3YdoXlu7#Z#*h)XHMg1g&4H(hX=3y zF8Lr$oMh$M7om!M;Z|{TbroF#L;K|;46QeFm_@6vt)!t=EXbR{O1U`1(I7_ym#X|Nia#>gsa(`{rhNB$hxo zI}&?v7*wV-30cDHy_zT7KdSaCM>%Mjaj-uHwLU}D!nOUg(cQpI3aYj%7xIhBmC{({ zLYj@L{W0XLK8Y6b3cdvfSwFq@1uPeZCRqz+EqfWg7G$ks2ncH_^x75>`GtTfjR}Y} zn_jyDg0$i}2Q*Iuwbn$cU5S<;)qeSiRI430*+T#uq?rt@c*aS!So_d>ZBp$^lx82& zb=LpuS96{9-yLIVzkGzHb!A`%1xwq?AiqFqDUG2tq}f>7S0*jom2r#R0sz-p-yru& zs{K#Lq}nf^lWI0`hU=`ZB@CyKYFkU>7h0w?rX|vXi8IZX(gif>q5$ob&Gcq^)xU@W zhi|vGn=LhPcs2H$NPOPoI_KZvqU&3}9D>TLc4i)@i;m;{-fZt*PdbW@t3J(&GYx z;sQuLu3;w_z8m$3lBtgu(6jyHa|Nh_-BnUw(`wtSXWLnyL{5ha*-VRVxb^)k&*e=xL z7P8$DP`f3U2GrSGEI{4#0d*776@a?AB%sc}ngMEhSqZ3{E}-Ta9YFo2e=>k)14Gp0 z5HT5F45qAgKc9(Wq3OA_GwAa&&~bGR?bnllL;HmThgzXk!J(UyLz5x~hpxn$b7&-S z4&5}?J8ykO-qB;>Q0xEEYoVk5Cqg>v7LVwtDhn(j>8L3Sa`T}wC2=}x$#U$=@^L|y z`Fdi9hcW!*x1Ia(r}a%A0#mowepJ zf-B>us)dNh3(g$nGP6AOk&~SHcKgqtKQ{nyQs9Xh=h@uduJ5UrR(H{w6jdy zsqtx0sh=ss5?q@73h`@Pn*HApGi$$m1cX+e#t7phYQ7u;i@!0ZZ;2Y_@B-e;kwd z@7-y-RdE*fEZs^lACG$7@7O)PzDNVoEbpVq!VLzS68@Hdo^fjENNc~YuPD8r&O%&2=OOO0Q`jjR}uh~ey1dTLJsMzfPpqg;}vVh6HwPUR7myfWnt`%Tijzkc}~{c>EG zb{N#C$x%M`14mW!3r1p1XLH@c4S9qu2jJ)4ZLFKY*r-uVD-c`2e`6(X?q+wr?+ z2T%VqU#MY9JvyUOX>`0ApLO}QI_>vT;k(z~Hz|D7=^ zcFV`8Sl1bUzt9-)=y0w|F2G3eyg#arN{-zP}vhuu@qUs9F))MXl>AuBjVQW z5HV$!KFlnB_v03_-4PMHC6`9T*;_0`-0~4|t3t%BB@uD{)eI5S%SuGtauG4l=pf?J zxQ6)LQ+9jx^O^B26s$=ouH=3hNVqy3_Nz$QnOawLzYcz0#)tVez;E)xGo1CJ)slRe z3jmdS@p16To<)t1Kh9Nq_ZSPL@tl`4BgeZ%3<|9v?y=KBptx=!z; zPDrwJDjqR+TA>qi89E*N&FLdO7Cqw57F%O}3hZz%9=5J-yCE?4iwD41bcKb7t!QDe zpAC#f3ro547KS9TrhNP2=(u)>TgPi}x})w{x&T+ZlAt%8^fpFt(Aqc~|JcOg-~Ykh z#B`JHD}OYn%WMz+n_nRSBKK3K;6txp0PrrQwdCH^g z{_pzY3*;#!M45v;rG%+IlMrP#@^rUKxX)^9@Xj8$#CYX*=v~}r-JZS%^7PwB$Wxze z=oSTe+Df6mf;`1mN!{ICae+Kjl&7~VSdyQPVTI7j6;ni8t}k~lXY=J?@}x?+{{CR? z7?;8?2bb&5j*r$;zV@{uU;A2>uU&#re@vvagV>kF-S2+2y+1q~^)-&!sNcTLM!8ka zCu26Fn-n%`j}g>Y*r*&MsP}i?^df1kKO8=*OT^wbw~DAX_rHz7`l`kZ)^FctupAK` z8lwWer7&1~RG_}XVCASlJuxZ{UmqO3hlBiVx`dfj=k-@QgCQ#WBE?*4`j^oq)w@wP z?rZwAFmNnF3X<0V@{fPLLD1NvBRD~&9;euv)^<8{9zWW0XsmM^cu zc-7s6dPA@RlsSx7j0t*%U_vOf8Lux;I-*ElUjMJZ8_@Ni9RppzedNolD}!zj%Am{v zx>A``UjSWGnd;iXu$XwOF1I~+{4pQO;C^85LD8!(MvPwl_7Qs3#YE33=+zbz^%e9g zry1(m8}d$fZx6QBMfN|ur@(}@nf)&?q3&<@_f!+=gX-GDblQ!dhbg8ad>l(tkgf%XOkIaP5oc3?=y5#-B6f5yqZ)1v&^Cf zU^eKOTY=f&nGu)`nnz$(ovQ$-LMtkBz^u?J*Kcb@WqhtS?y(wV)-o0sCg=ju7JrbT zb-H=b5G~g_paeHYw1G@9q75DpAzEE$1q=YW+B)aY+5kS4F`ZEsB3gH;dn0O-^fP+QU1_&W- z$Ok;078=LHxEdvkRf~8_9aQB&NfJDr9(|pQN&4V z-z2H7Ca2NY72hq#< z80Scs3>9frfFcWDGvvydb?S)mhz5k_r?UyNV%AQj6h@xq&w~^7>FJZsr}6R}zOF?J zvJ9oL^Y+V08I=BHK&dy8rIXxd({G?ph`tvw?a$|<0Xfpr%`XD$PnSSUldDcL1RPAS z>S+Abnk=EDyQ{kj0cOg*0i@R-8V^Bw{cns(uiri*z4~BA=ZL|KGKcia!JO&~(rc|o z2$byW^-^7qcDP5!{wrU?yO3VDr>{YJ{q_;*)s;fGD5Td`3iTDzE0-PA(@5`TZ*Og@ z*IVng?*%KOJA~8g_tAWv3jQ2T*HM3~+x?UNXKye43-1=a^=|J;ck@ZN_vdzZeKbuU zQ~CEUVybm}mrpK-+~WtakNxp+td5U|=ktMATOwFX$$P`r6|K^%d$X#|!Ftm&_@E#{)-<1PS(s z$Y*tkNW*~YWc0U@U|;E&1pDnH60DCD^p-+`?U91|3JI1Y1@-<;`v9EZZ`0Y2XXI)>)>EX^EY>4ZB(nx*2n+K986PS8jKF!@f$ zVLHE-hu&uJ8Kja*`J4vB!6kk_%=vNtJvkpt&qj;-SWQ2@JX9CIC8v$zzkj@>y=Xc^ zKI_?HF)kiX*%Pb$Rrsyr$#_KX4=Lhj8U3cJRHei&5>buVk@}#z&N7hR@5W3LUbod* zPhVimT+oe#kmX%Ch2=e4jfXN&=|MUmIx%@;LhsL=2BB9ncBiW*)#X~w9rTk!=;ho= z^#!4~PSWs=_7}Xj%9{@yq5Z%9L211I)iI6t+eb;D)$I=s%ThR$nZo7I+77a*j0uM_ z%jl)L1v8O(y;D_IN!6jpm`k?<TuSu?Ah#re&$2t0 zz-!gR!v?o51R4*z*&UVl8><8E_)kK-8 zX8w!=aPbyE&o!38!|DddFi~hyo%&*Wi~Glca0fkdQ^FlQu2^Y}VDiBR+v~RYHn+`$ zd$B&-6tn|gZR?XiYwM%X9eRePPj!PL^l9_$?VIs!sxIA&nb-K!EmVt<_x|uZoe+oZ zdH&3Ad~NF8`Uw{G-u9{Yc169nHR`>|9an#8|8|<6_`es=p1*%|xJ3^usQ0!@y?Mp! zQ19ZewWzlyTffVUJ%0;iySq!VKP*BJ?l*6PaFP1BJsu!S2I1Qhgj4?;AiR>M2H_~; zAbh*|!b~BSQVy0$C#N)S<{oyl2{S)5Cx|G8GrT}hkg`RYM)?Fr`}BI<84m$xs%@5X zX(s}dqDQ0`O+*aAKbCmsq&L~(^ORXRCtqA#B5(1yd=(eDhuz`#n#Pq_HTr#Kto9}t ze)q!s{UH=Ef44DX{%rgm%awt~AG$^|e{=kyHov?}MV$G!#$U_XYc?65T)~;+&Ce+n zMM3qdq}lm?BYS!*%27a>)@e{&4(3H3l0*TKbvs|HRAU$y7wOsuqi4KafLAW_zcKpL zgBQh7FUJVExSS-v-;|y+k3obFIYC6uC!M3^|3IRQ;@45=T#R3uJ*zow7<3UsKL(dW z`4=Gc?vL~hi7|o*EYIPtxmc8`!|^2gW2)4l^ac2)1UE577I-?+yWnt7S&BS! zIT@#}uac9ewBM;CpmdpZo$uwJf-eotH~bmbFyD}uJ)iX%hwhT*8|I8dZ9d~t5jWpx z&bX#I+819t*bUT6W5XBS|Fa*&R>S|w$X3H|-L}+4VAj+)M z71b94rZQolU<&vm5b&kCSnllcEa0zv0qF&o6KthWUnrHz zm{KV7>=QQbVxO?F-rdmb6E?ngHyrx}_oTX?j%kWlIv*d^p8W7$>Av2vSGwOmvQN;* z3%W_MPq4=e>WlG`%Gh{8nV`<)O-({%{F48^(Jgt_di`A}#nBG`zbe9ix4seoPTyHQ zXbnfewfYHbXkY(x?RDeFuBC=+-+O;{HH(@*f)y(^M|;S5!P7V6?7sq~#amuk!&S(mXnP zfAoTR%Mbn`BuD{N>x;kS-#C)8mHQulHr;1rF%4ts zGlbGW&cIHUBny`ZCot|#1~SYapWP#+pK%Ur@F8aN_@6)R#TefIX$=go*iWRp2E~5j zts)l6OtJE39K%boP|wEj{sNb-9;Ct8MvseCZLmI?f0^$>N^7CPYKUbwUzHA4%h^Tp z04+@FMILIu&tp*Uwr_!YCFX6qV^BTWcBtDfGEpF4^Te% z^KS*^gJ(uiK4>06d3DXBKVO0JrXp0IpH6a_fbymy)lG%zX|An#{jPL04|?Q=d831; z6)UJ^mVFp(l)Y|?vy0U2>6$pbl z134n79yE`jx;|SJc0#>jilNYxT%U=7dNx$I#ArkHotr^*s?MFpQFeQR?l!(QL2o_9 zBIr9lLEnKKIgRtqH3@qATU!L39##Ow&{4z*`cCt0`UoL5=9EpdQ_&}zn*-XNj_1Hv zc>BH?)PCF<&SAM;ct?^q<(M(blatvz@$teEycz8S^gUfajn1wF9e0P;YZ^1c{oNPp zUQoFI6#)u&8%HQy9Z2X0iNei+gxdV*lZrSBZw{m;n0sH&R12y~Q9k;U`=JP`-_s#M z^_vF-RTb)k6bePwjL#pn-WpO7C#aTCUwolJ{q&WYnWVu1-tUPAfvWyj2F9ZMPlKP_ z!m8X94OmrGk2*}js-}KaUtEEvGJ#bs34vAJ6%gQ0&NeVqzxN)3q59t#F;u^G#87p$ z&^1CWlv%Tlx>Bf>$^=6-)p`-A^-`U2yE`n$41B!Z4!H|M^&ec_2b{vJ2lhe>=JWd| z_+b%4)s;fGC=AtB3iX9jsZ21`)?oi`j4mJFoTQrjW$V$yDvue;Z}=dpo9#e)~3MWNIB88fu|y6v}9; zh5ACRR3<2+r560B-AM%!Rd2BkcG2D7p1naHaSF*O*O1T;r~0O*Ut0NY{YO1d|=moLjpv)8|f5xe)6bAKdYU&G<&L7+?q&f*aAR+bpHzuTR z`%AavUDg{D4n~=H!0q@~+1#5GAFHqB?c-vM9XWZP&}DRU z6aTOO{J+@67YhX7LOFa%k{1g0UF_2oL?hXF!HzNAcUL)nllMptc~ZEHJcg&rpuCZW zpBKIR<-j2;xUL}H9{H!VFR=^PE?jT3jrFj)a4}JEJ@iUn1^8D7n%uiFhcN&qV+E;8?B+{-<_4IL??kD5R!E}iu{rhvg10cp7`Fy6IQn#*s%dmP3 zI?M6J2us!1!Ghiz5ab9KM1$mwiXV<2gwmRkm2VZLH(TpVSu6${pR_^v?#)0rRTtjn zTkI9}=@zQpo{hVWD>i-vM_62$&F1X#@Ok^oEh@h2Q}JD_9GQyms#N@l-8B5dzO_Zg z>0t#G-*u@tuXr6QUi6kl#cRRJ9pSe?ox3A&U;Pk)`^|%B>aE6gUg}+mz^Sth1YYS- zBXAUP1iot=5nq)ZtZVX`K31HqS)9B#flT*8nEkE}2(#NbBFw5z=o(3wO`TAi9}`m% zC(KQq{&n~U>nv9J9OC9{b`KuZe)+U!cYdT}VhSY(cNRMHT_D=saC{10@uc$-_bg-h zMk7XC-d0LaWm=Ev0%ib9-{~1DRNnsNV4a)O!|2ROZq(Q*_B)4fk{fdh0)U32^n^Lx z=@&adUgy$3adNzbpYKVIxObJm>tqCf=Mq6gapQO7%!6s?UCk*pHNNp5 zoqSA2l)zyEA^4BxiJO8{mn5Y4!PGIQIWPheqb{!=uS-$Qb>d{fF!}Ak5)71sy7A`uEa_+>=Q4x$`G=JQAef0Ea42bc`d8Zk8 z5Vvp0dQD#G!WrCMkw2)jUtE5D^k@G=nKJlO+I@NaBlyKFLk4~|_E~P9Ior8d572+s zx}85_h74leMlECA{^GCO;OufUh1G)JXAfev;D2RowcxjptQORzn|epFS}?_;`U0t> zGGVn~=>@9=cd7xkYdbAc^)cN1YoOsn7&7=0M1~B0>$V{SPh|YNKG&$X6hj7EK-58x<4(D(lMXjnQ(ucZA?#yWvsQY;{Zu5q{<WwBP$1W z`Gqxt5Qxf5q?JG8p3XubdWI!Xbt7bYI@jl@DqwQ8yWX#-v)`o=o%dTubY2$(=Ow`y zQRdKjF=Gx=eL?3h;^i+S+Q@+t_0_ z=0M#+m)sC_2TzMpckqBV>gFUhy`HKr&QhTxdzAy~mI|dZfx27oXaDt||F82OctLyL zIeydG?RM9C+g7lg%A);!nHZ5y(BpZE9=iAk-r(OM7U^1gn}0K!CoBr9|Fr|W$qzd( zXUKL|zxkak<|j|4xLbX4Hv7JwGB9S#_{I7#*|D!LF4yz#!OP%uzys?b?zum~oBXA+ zk_c$a%^7?keZ=5{<`IK$HLrruD|iL`+@9MCV9E8_$U!}8ZdV(95afLCW*C~PbAN1< z-JUtSjjzF+TkS38yyr9Ly^1;SU6VPtzqQ4j>0t$P-gB8VuXr8iTzs#^oNINOp4coP z#cx}_V0XvR{__Ki(ig$cYhh>}p5kS@agCw(B!;H`H!yT1O^u;Z#4+@qiJ@JYUej+B zUd?`=-3xQ}zan7HZsUkKi|LXBd<#*~HI^v(qt@GYD&ox966Jk4GAyrVDauEGBt8@h z^m{r$fqvrv1*$TA*b*|K$VP!;?xfmnnNVb+KzHr{UTJIG_BM|~dJt&$Aav00{Fn~< z?b~#a!=-2X%10fh&_Po_s;|&NvHDTHCRE6&94PBHx$EGnb}=C1TDY%}i9nIEuW6W< zjO?mF^F>6r4l)v!Q6|U+c(I_1dybc$`%@X*OB*9QTWlYM8@1oz4?!ROZ;a@p-#Vg? z>hz}GQs|>SKu}+yk8*&ZUUPuZTTO9^(m9!5T`nn<{w1tCI^RZDlz(8k%66D_M14UO z{iPx8{cK+aLUjA=E(pt z`CT1TJHLHI?R2ToFABA@r9yp$+DWNU&!%>+RNzVYT>3e6HyCsU$@6>Uo=BeiB_YZ4 zTSp{M6^(jGTyCSxA$dYHdWN{%Mp<)9v-3S?e}clhxN>4HvOqVCY?4zl&PprTIKsL2 zdm}6I6)az;gR^v#m+tQ>jW(n=%P1%h#v zd6E~>f7l;+zZ)Zu=ZJsFmxXCB4XWV`g_Nm#^jESl9!#%bkX;V0`FQb- z%&V(RPPxg+ica#$=o9Rpik9`uC*Y;Ac^UjepqPeVN$*t**R$YMQf zn)l5tz8n~C&?C2ExWO}vEoQ&EMPLv(I2`r5EsD!S$Q`CT289u#PZWx4%0zvrP+TDs z)w3zCFVm5}Yj5l^=Rr{1pigf|af7GD6gPN4L~+%L1S%^PLYcMBQGKCMDiah}+;_An zZok_(SdAyiB^~({jr1oK(cS+6XQ`B_k#@L>@4m??2ya1c`(2CL`opJ*D;nXEHg|ZO z^J)3`vbaH%lvY5v0#hwdtcZOs<7J|yY18R$Drei1N=Q_ zNDjW#C*eWkHVJ1d>StYQbQYHyMJ5TCQm5LCgtw*MPYJ*qNu}W!PI;zNlJPS8^wlLC z(I@16ofB=tt$cbmqbiNsDd9GJX&O1}Q_^l^e@xej%>XPjIOQ*KvDCQ6Y5aumzO)FCn+w(B zz_$@0vWox1MjwN`&jYp7VMoA^onDuF76)DT0Bk?_#(?bytpm1iNR8f-Y~PU@^(EU^ zq((h1_1o3>2I7enJzCAf6Ntoc$sgHZRphVrNeTX7^>#%mv^~il8N6IC!BdBAm?1 z+io@}(=p0%Obl%Xf?wCL8Bp9x-x`AieIsoKoI!&6(q=#zB&cWF3fV}I5q6HtO|s`+@YZzI!amf@Yf4LP-cU6MUYgVgLYex>Ndmj1y(nyUT=%NJRiIZdgLx3Ie2scl7rT5 zkj!l&(%pfU@mP@xXAc`BD^jKU93;07on&zga{)C?bRG4xN*0|X+Ei8v6k!7PHIplZ z|Adjm^kjmp#dw288oT)@zsTlS+JT!4NNH~*>5DHe{`2mD5l5BNWVadi)fKKOBd3J8m$a`oZifVpFd+U(dDjwfO_22UgXuL$b!v#`NqH?h;uTa(1(lh z*)#<##H1MxE?`|onI&>8?jc>u;6GF3zcY;9Va{&Bu9TX|y=i329|GHdx}40WW|#|j z-Al8SYLjsg{n8@*cedX?PZUEKQG4j$_?4r-PDYpMs)@(xu1;%) zLvuQhF%$8_02$rR#XK5ep?N~|fWSOK-$oD70n$9d9->rVnkUF1O7%?h1pi!fn2umd z*#13c&U#oKkSxA@GxLO~gG2L#=mCLwf}s$)LnwqY+dM&0DAniY3G&M3Kb}#HuMw7q zWXW0?m>z!{PjE~8d_K4s{g}p7g9hf6T%>#1;W3(vr z>CnMX#b>Q8Czr9&f@kmxzQabe+cy+{_lgHTH15F8=Io!YaGJ(}GlXfeTAjV5rBGp1bo0f;ymrA zl%kAyI)=ey4BxLSM7Ar*`eR(9l%7<{3o0j6gF8LX>ir^E4bm}0c+UG%|IR4f)o3?H z;ePuFh3gulBNP;FYmE8|3YQwAo{hr&NqXFvq~(qZ?(P5e_Z9~`_@0P+`@b^c-nvHU z5QTf&8lk?zy`@H|XLD~~qtBW~)fW8sKyJUQBgpNyjv%)#6naI0+_q4tuRv}o6zbWK z+Z76!7N5%uQ2Z6+;CV3a@5giA|B{k>TOMo&!M42DBH!GB?EvqC%^Q;{Ff6)AA>XEI z)TIjf7OGJ_n|%AK{jRFk>+yd?YN%91&IqURU}=QBzGn*t%gypK|}BHBNZA=O!l z*|Hy0ul^>HucvqI#vM$vJJEMv+=#yWtt0xb4~@6V&_J0(-{sIq^#y%5=Wq3bZ*pTr zmOlbn?t>Bg{Tnf2w{^^jb$LE1@}SIN#8RGApUHzV3&2(H@Fo=1HpSk?HV1G|eaUVK zN`r2WL22-SHYnvRKfMEMe%w+gKu%Mq;d3M2 z(!x2f13q&<%;5eVtctD%7@?h)61v~xe3T3tBMSa1+Q<lr`z}%n6uU1!kimE=G>?- z=f*WLXZu@Qn3En>V9pH}bMlG~<|GG8AkD)!$2p&C^0XWMg)l^&ugGdnKF${IEPknl zJ8Ow+zh+<0yR%LI`61i%n+JZ)Lb&YLydl{p$z!n1O1YYCqKLCi0M3eSHaWD4E zyiT)}rd=C3ZnWq8n_$}A3v%?kIzWzY;|MvbI-zU0PAIaGqtGeU=E$+BQ)1AihhS$4 zW1}?j$`ruajEK`mcZz+`<=kLiULSoq9|}nN8U;YoZyW$gRbX_M1d^t}s4an{n24yw zPPbqZU{|<6xFE0$s8!fnL+fk}T8DWi!|5uYbjm-PVmI;Faz$j4bdiAjgJf?#ox#kE zu-Q2K8Q1pQ$QDh0$+P)YjZLZminyf6Sq2NcQaoUGHG+ZkYCa|RW#NhJjy|xwdWEke z``7->PXb&%PFXLaQaP2RmjWwQ-z55Hp!t8NUJb+%t z8&Alg&>G<361zPfOSM29CKNfg<;gWgKwKEFlXDl0&8sxRkFzTjwazEZ+k7cyLQh{! z=%TWeY+S|VKP$Pr)CU}PoY?;(Sg1a$V}DQNI{6Ze{re5m9(-9un*9mTCe7UA@X(k5 z=qQCW+Y>>xMCHVbb-abA-4% z^BJ8_7Bp68^NS*N`PUil8wN#FisXzC$R{|w<{?}SD@3K+lvD5-7Vr819L(yI*n*%I>$1D7$(r z0u2`Fls{v+rl~%|K&WR^c6X;e_+4FXdc6&H83M}g_sH#ny9W=AD7*iYBFe6d zgdR~SyDbvxE0kS|gnIn-z0{4J^`Y?tsJ zr$}y{Rb~B2&gG?(dEOV&;e|{x=5VV8prAui@kZO&Ivx`loR821F7mYdhZIU z~iwRt-56bJci;PVyNdlNXDmvI8=R74kQbe=H3h0;8X&e9Y~ z^&26OrJuJus6gZKxiY9k%<2HB-O{8X7znXRL-2seq(L1?)F}d~qRbjeRG)8WxlEWe zi0!P*#@@_fQ>-40rdGFPhH=V~p(IZ^1G|Nw(~2_yej0M4EXH49NKc7IX4C0tLTmDf z(yCw#BIC&PjQz@VHu5sY$7T${uWOhw$k1(v>B>sWNUlhV9y2A)pS7)2QkgJgu#S=N z&-SNYjnta;dYe2RC;YR6E-5zlr-(^0nSmqF-9uxOV-m4Dt#to>4nNf)7J~6Vf9iE3 zGlt;TL}m>7oKq+oOb~2=@@L#XTddyn41R=sR|izJd#So63yc>wZ)Ute)ur(Q%gOq* zk7~C!UT_;T7c&OGs{=Czw{c{~Af{UOoEAF0?wdO0 zkJ?GbsWvxbXzG;A7QXDB`;RrGbrt-#D;QP}M`vNE-!H zJ=Eq0)>PD14@Jf-`{J*Gz{=VpxV_7a^uYK1o_G+x?|)^?_x<(}-&fV64paEPsUOuB z_wuQ%tsvFYF3{%R$A}vJ1JR_DWi-u6o9K3k{b~pO8@;4` z(IVdOw~lzfE;)Kj;r+Jcs4pZ>WlVCEH6`DlEOFCtmW7t-#E}>QcUffgb1|UQnB+!1 zNyfaz}u&EgUy<-|o+9Sq-V75 z(b5&!$;pZ?HSjAg>6(tNKg5q+(A^)|9S!kzlb(!dDs}RwG@Oy1VK7EWt`rio3Yq>m zrB0uWrf17@kzSD2DWE)dv@{;mbRXi;RoX5!J=52P%~ znI8BXH-7AN430)8KZJcx+2GgkGCrOSvn3XV0<02K5vZlNb%cXYKf5@{X5hR;P{8sA z6rS%KvAzhF^p}mvU0LqD^4IS>d%nB#E;Rh`TStZ;`m9AaD25;QtVMk>Yf~AUwJ5U< zKm29)SX1VGpv?VQdHB5?S$X)aBP$PGBXo#j6T#M-5(F$Dr+wwzTZuEg82TUBZ%*}jv&6SANoLn__lti z&sSRNM}EIUW!6gj(ccmgt6N)XVMN2i(;ifN>jUC!zt1C_?Y53_wk{d^N5R>)WT-DB zOJ!`zp{zOOU{hDTu$9IRi&YUueAzOxgU?Bk`%Vi#USB4NIOk6~&+)>uSe=kb#OZ2M zJSG`r%u7F(!o-wbP|A4b`LzWx%rB8}uSl3z1NN3-DGUM;Od~})FJE!w&tMp=x_dI6 z{q^y=!y^A7Dte&*ZIZS}&y2}<@S`F!t`162Z80dR%*3eqGw$p!))9IJ-v=5Q@mh9X zcok0p@=I1DFuA)Mz@NRAwS12S5)XRoZb&?Mc#On@2Si9**AhJ;tQ=70AaSw4P;c@* zfy#_M0Z7~z2UJ0`M%m=iHi5*0F1aZZ4;~jG@t}Ex#C3tt8$uul$pCdrfl?W>SwI<| zY#(8S1W)e$R(et4&Tom=j#>_~wzwQjaem(X$KLKwoxgfpgOh&@ubyI&#$Dq-f9gKj z=ws16>CFH6(_x>gXChus$EQ?wd;IM-z6SnowYTv1mXE);D*U~r<8Kyz}_m9v+HU8dm@i(ui4yt`5kx+c+ZEs!r${ zt`mwZo$^PFTnn90i?5N*q(O@B>wAAHebDvWWN$kkef=KF=RGsK!iz&SCx)G=`DoP?@p1tB_#|`7UooKk>7wo zR$6{Q*#l`lx}3q>h{zXsO@6^CDNy#r@6@@&pL9C!s`|+nP|tGSOx<>I0Zs%jy_{4H zpo(%>HQkYZoFmUL60ePysSd1+t1o=C_&L!mqZI+G(Z%KL2khii2myL*&i;ljfF&rR zF4Mal-VX=EAxx-%2Ahuubo!cDAa{lO;!hZ`>w5EP1_@xsaxfzB2jGJk5%^yj8xi>J zBO?NJ(olyfMg-=xq56suftWZ{kFSOA3+rFZ7kF5}j&6}dRnibA^{<`7+}-nFQBV(o zMz{dK^By8xfd7q=`GDU#G9S>zM%O6j1Gd{4ym!tJZA6Ma6J{tBRtG5p;FANp6YO6Dpe6i#`mS`i zOV%1if3>=Y3`5RmKj0IV*Safg{IFKR-wo3byhPLIKhEJ8Mg}$5_$PzJszw*3(aPzH zI+5F7ybC7Ru{yc-y6pUjfcO3YzCZBqe@_Jd{nioq*Vjb!kplkhX@>e@nx!%U{#(=R zcyvY~9kNd$k~$%35=J1693J!`o!;_oCD~EYY-`4ZprL|8)ru_6n@K-cQ`}yk&*mw2 z?jYTpr(rc5EC&<``Wwuak~ci|-C5^+G`S>mtm0AWNp&)eK_e;@og)!jVw}@om_In% z6BUsr(ibg2rMzgykxWLtU^?s8a_<}^%8Gh@?IzyKeJt9ys%1k-)XWTkN z%87bh&Sv<9!5oYJ5|bFm8Kz-%4QWi$bWm0-Z2BDjSH~hl!#mk&_*z7E8h-1@PD57` z{i4`u*h-?lfc~kBL4TArm3)Dm_IYC`>uCg*Cd5Ylccd@Z&!)qku>g0@E4L5_7?0g}kAo#QYlX4{h6A@pG`-phpe?w#< z;I{H+U#6SWN_7ax1He z;F+=2MDT#fYC@gWux=1KQJG2F8_2IjNx41)xv0n2=R=ANL2nLK#FN^o^%3%y7jNR7 zd~E**9Q$W5s(f5u*cJad#F~!dd2;f=|BOz~r!zXdj}|-)d4LdM4xo()5kwL;7(w6P z%?2ZQc(IS@K_m}@lSHrEvcTX`BoUNA9~bBv#R9_~7pTuyd+J`r0>hlY)!myhe{0Ox z3QDlG%M74lff4lRO)W5j$3+$xLG#E0Ll;OPi?Fh=1ya~zt}iSw#KisBIvi(U#4KG8 zZN%8N!06x10)wiHm;_twRr+Zk)oyQ;;Wn;}GLXS-b}~*Fiy}g@zyEprCs?K#ecv>r zk13QR6ZBQn44(h(7xt|!(+ql85t*Rxnr85d*D=i~`ph!TP-Wwp-hK;YyS253KN{S# z^NZj&wQM!`V)|0bk!>~l(pG~y-LTcD^r&q$P{eID`lhXhtIccrjY@uYX43H{=!bi; z)$nx+Y&G1*k*!9naTyH)T_bHZOr21hZ+NMwtrLp)G3asz9|B;F;RSA8;l!yVeSTl| zzCOP`G&HP34fq}MK%oZwFAa<{{KjqL4EEmfS)Xd?8EKqhN{HHA!c^3j5JkpR`{K(4 zI9;!U6(TVFVib;Se7S$Kmzp0E}|Dw#I#MLgX z&nqx}ZR6VMG2bdg3Gh4QAuzxHjS=SeTSu5*T`sA&6wGf6i26dnRK^5ES#!-is=@#i zS3%kHF25G0cfocLqQL^7X9cE1#y{VY#*_%w43|BlOGIBrY2nVFvaMf&TNOV0;|l>k ztJ8onUebmyQ?9$6ePx2Un0yz*;nJ^(RXY#vX z={;6w^41=z286pmB<**6grxn}5t7zrLmw$f+LjIV6(lW=ru(SJ&pdDDl&%K> z&0wB*IzGb%4#mlUc@}INIz^0suv^Sb3a^Vw%eio-1b8j}4r4Z^Gl6(p+}ma`XaQdR z-n{2X`~H_j;MH#(fmdC4bd&;KZQ)U00k2Yc)DyxZe9!6oZb= zXK;Pn+;oAf+hj?C_^hkRl51PN@SDEvsPMcNzF3U&^Q0aHbeSk{;8;T_vH?6SLCo?uS0E3O2p-O&P zdYE3vRa7Z8L#H{YQfij!vq^?B8&$ef2}Dg@3AeV{N(fZxcIhocp9jy3QDyLe2vw?c zi#kOhDU>;=Qs_j_5J(DTd@yffT0xkx< zbvL*eJUoJnLGuVM>Pn&?6u4+BiTVm$luDwWHRE3St0YjEI^#BZ-cP{Api6EF7lX$| za4~2e!9`slEU0MBr#4jFz8O@c>fEgxWw$4YZsThc z#MV#Enk+EJk237BX}xc@xR@Rx>$4F_Sr_a1^A z`rjClL%(&K9CGygyP+1kMj?l`TBtA7N@ao^nrgiW)Ou;mICe|2|H>b}ccy!8cb5*r z)(y#iun)I0iu09m|E(bx`bObd; z{MHfQ)7M1wk;319P@@n%TWZu7Ql~N|HOjcuuaKRi&JaM3 zv!|^$KT>Fb-$0PMO2!KwXjx+TE#9~uEX zzjYhnv6Ie0dQVo^0{(iT9Lh}P@@L%rQ7VUe77wb<0H%MVI^lYK4uq;b_#ylo{mzci zo!>e_clsp5=|@3#wp6Ik*HBx#;)eF5L|0m_O1nkf6(feS3{x`(z&ut&GKV5Y6h7cWP=KRc`aW_RN zI_lZ%&s{KqsMPtnu_M`E&?UEWQw*LNv%la05&KhhqE1oRpQ#ho7sM!)F(835%@86d zA*(YBV|tdkrC^xG&p3y_`sY|U!s(K7j~KAPp!e>^0)vM~EHG%^W`QjJ6dVn8WzjbZ z3$&F*eW7eBW6Gk8FT2G#hGmVe9n1$mQU3;+2! z=W0Br%};XIpgY9r&f0j?M^GF*D04ZlgBw!xLELNnb2=l%Dc|udZ&`BnSZGxd>KZxO z$0N!el7bl4-LB!*UT5E$dA8T?>If}`Hf3; zVX1vrDjM{)h>8ZyBPyzQRprDVl+*62%9(#rUre=hb@(w0PJ`fd)o{n{=^|ol{!;dO_A@QIs;RuzW*4R3%bKuI)is451^q;)b%Ay7wn)3~IlhzqS32#p43 znc^-}in~xoA3Pc&0#;i7viugbw%~!|0oI^FtFDy17zZae#V@UYLHuh)>hNmGt9~t_ z7nVO5mibY<1i^d@tu3B*yoxqAvmJsXihEp?6_Y~8G-EGf7@dp|u#PQ{AN*moOCKw2 zoSi}M1;c1AY}_9e0ULK4M{Hb7h(*F~F{EHEYe*Fzv9RZ2NTC+rs_$L>pnP0aQdGJ{ zG#RFpvDIFWB6^8a$wOb+PYq>j2V37vkK|zMe`yHH{pJBESEYq*_-u(H8yW&`J})fVP2OvLR=P|njPdkwZr8yPAW?Deg_H-VF_ln`asc%%A4!c-x||9*+Li8RC9ViZI40-TcfyHh;wfJNGBrZ+cJY@QJosVgDL- z?h6{RbH8=O&h_p9Ln-Xs?hdFgx|At*BF^w+7Hxgz3|+;;D__&{dJiMhZbUMW*@!?xnI^WU6;3f=-^5NTH*9$NDm- z9fCNUlYV^F@;%?s!oDiyn}q4QSG`IbKPsc^d;tbs*Hwi{6uNG!iuyv;RK`?AnN8Py zl|Jf&acNW1b>E^7a*XvK9np2abwt;7sbCj{uG>_FB zCMU|8a=ss3&~Xl(TjF?Ai)-XK(ON$@1z58Lid-%)ece}f9KkfYjbNDcvEK>LmZ{8Ay3;WiIp$qdq zd-60{@Cm^96EN|o6*8?dNb`yg41b5zW{iZ_X`?s+FMpdw!0R3~TX5g_QrsVRXI2sv zJ;2?5;{bQ7{eNd|Q{rw?!NA>>KsD}05y#z|rhl<3#4Z_KVW{l9axc(kE)3N-b-+;F z#t}nRb%JTQPAIZ;Dn4QiRp^9T;<{t@qLlW@l;Mr`xCL3w2iD1)v^sWFNyjf;<%*RjwTwVWfV%Q1yTrL2DA!AWmSH^`A_ zV>}!k4f}=o)xR}TJNGKE!rVW;``rPgu%2j}xR2$-LZW2fxQ~Kt{jZFXt=~RJwmcmx zTli;g=wvVj*_vH~>WkCpRK`xDQO0}4zjqFH7k6H4x0W~B?WNYU*3Jd)^&o39rOckp zf^jyoB9&GX2)kHy8GKYuPD$>aj=(kvpS_r(!9)Z*Ie+REy}>Gb@JrDFjb zcGm*1%eu2PJf?j!KZeJ&|BW#S_S;7wSX~XsIHF^q%$h5xzUUaKOn_i(>F&M@^m?xj z?oE;R^@BgSAIyebbKk;e+Haq;VVPE0mkYL0*sv`Z>I=D2nP9`&IR1O<`GBtf;o4xj zwO(B^>|I{c)uR<91$`0TSvrL7ZV0ih_Nju>I*SbnIOjI z*!vo2lr|JH*l~yDLPD@(-ym}icIYio!4Lc3HZ@UB=;8QyKC zBByxA(N-P1+de`t(x{q_;Y)z!n_ zuV7qTJ=7QKr80qWt?6~EI#4j3q}4&U#BNZRR38PVSH_|-#t^W-%zjfQk{8rZy1`B3(=3q`l|?+ID)8 zmgED7RH#m6mg?nand(KEz^v9p3(V?{RNzH*qFwGVm;=}7z@`sFuffA3^cpme(5pH~ z$u1y?Qt^8gKnbsOLPV$#nEVehZr|A3P`%_fE zHv|;bZyZomAxGgf+>sQOjBZfWN{^bNqKH$}j_x!}v#s!yEz+b@yom`mQu_j7#BQfO5%g z2oVIvc(X!)Mw&2+lnUk5*$U@r;Ud2KGd~!kHubNsbEmScpgTMY#P!vTA+Fy(g1BmT zAcH9o*X$5fUz|CoGIr*SG68X4eAqeYwi=%Blbp{EkYu{IFt|bnM*5${%i3ptA_1*C zD}X6#9bsdY)BI{H@fSMp`Z~tU)^DFPTMhx=<{iI+`LLJ5Z0&x4`l27CGS&}J=6W4n z_K1=JUPA(gSdfU;&^cnMMIH60xQ7qwdFIJ$v9N;;$|Z)786*tm!N{Z)U8Ky_&= za5T6)8{MGu&~5EHc=OZZ%D}XDf?dL5ne?$WxVRo7fOpD%)`*RF-5Z|uexO@Xz#)o9 z)H_eX?ovA6G6W0797;d!2wzT}uJNpe*3L2fYX%5%_Y{GS@M1E$OyAL{Gs%vEQ=q#d z6J_~V)Qv8$#t8K?;1PS^746Sv-x@u+x?)uAfBqU5XutPGjNES>F><}{!YT?QxBD*Y zi@ux6Sl>mNe|;O?6Nvi{je)q| zJ_q7#-w3~EU0B#e0phl>s4s*~WlUI<@dKus&Q(lKoAhTvN9&8gv(qFS(E+mi(tp&) z_|hgza|FolTlqo0(*C0($nLj}AiFL<>>}hxnF(i$&vH1M%9#8p6R!<)dX&QY4bNFN zQzRDl<@=(`x4g=ZghAPTE6szl``-{#cDH>@*>xddA%(KrLZZGH$Ei$EcJKYKaYHF# zI!drf$3W+U-h@IIGuB+4+L$06e;k7|pyq+W?nTXmXU5b#ctAwWRTV+Jg^E;W4af2` zPR&uDF*!WL*d2kIyF(8ISJ5OuFAsH24s06{@}PM{$aQI82ZfN^(x5&cU}Q@n4azKO zs&fuAWOgl0*sgp(iuy z6`ss1%#*ovTrNLJL+N`|)t{2U|H_vR|cp9pkYS|Lp(#t^2p7m4Ezg z>u*aNPsx}1Y5Mgq(yvcm$LnnkkFWAzK(C}NDzD?x6y$YGe~s;REGn`Ypfo^+$7kPb z;BmDVtSvFe$2UPQxNl7D;ITd)4;uS;T<@AY>urI@lhJiNUh7feaVp9OJ)YUzzV1vX zt@0QMLC_J6Wio0Zj$WT`U}H~9=Uj*a)4I9<98b<^B?_Y>Di-{ij>Xa@ctq!FbT<*f zt;d7n3~To4b2LDjo--Vx9StUkDxDe(^UMzU&gz5TV|J?^vsz3Hsbj743l)2TI`bgt z!B_YM-ESNabiMb$G=iYpy$7`gL6^M;wfM`=%U++NL*L*Ol_uSE8cE%tiO|dRg*^AN zFYPB?+7vF?f0-xJ*qc)d273Gr!iX22nDpz9{LmH!= z0zZMF6wu_Fj-880CnZZSGvHx@nOsdShyCH`3Udx-h-)Rh_;NP2Gf2dXdWxtsu~p0TO#R$Cb>YIQ@fdQ-o#%FZae zuLFZTg0ph)jUo6B+6Um1}>s1H{2_KB3wzy7P+f) zAp3zTdq>EA7#MbLWIOntfNTe?1F~(%4;x9c?Z}V%l58vTqh3?~z455T#!p+=uM?9l zA}*S+xCRwxqZ3?&Ji`UJ$pDwv(;I7A<0qrD^e@Nb(Rph?>26ZzY2?pL$oi-^?G?UA zc#}weNG0WN!fAFvw)-{cTi^7)wIQ-s2dd52MLYPi06zz<1N>}sFc?bWXQzXqzQoT; z2SdGP2iqU~*A<0drY&CKs*Qd&yCzZgr9NGjPFPuoRm8N>uMT6?Z#gOQ&I!c$8 zmU;g1Y6mgbxY~i4L;f7J5BReo6Ko>+vm+DgOa83LgnG_P*$(a)%vSl6t6|}JMuU~o zb@g#^jiz{Zg^67@s18dkw{Ao1O?HEIYd^5-Lx^+m=zur}tpnn02>wwK9A!3fRs>J= zIdPVPA6)h6RU1cetz(?0(G|7f1%i*I-5q!Hp8Z@y&M&&0%c~+zcVM+S5a{3=LIUl# z4+*p(EG#4mv?DC)O9HKoWYps$*}~3;Bg8zB@wZceA`UvXt3wbAMyrZ%cGzUS9nhBh z1<#Ho3i)*OfSgaW*RySfd=$a6rN-ODKMY^A@-xP#rN&f`Yg~tnYvcdQqp@O#J&XUw z+z&)}xQ+Ju%DNUFZo4`>F|<#c3VBm(g~uD)4j{_|L3ku$0K%i@0SMQ}`L@DasLbpG z#bT|TN zY|@64{#g$<#K@tbiV?}~5miSdV)*88ed%s+ovJg>@O6~ko20vKZ|fMI{{q7?e0|9$ z-@uziyzTX+TaxeWx6>_vntap43deAKtw+9j#oLhY@_Q}vT}#w-3}+{&ZvxfsO}_ok z5Rh-baX`L>9LX_!eMypUGP*&&D?MuRP279dcV7Q(8J%PuJq4nc*D@%o&a^i^86bZg zF88HCI_1eXu3+DQPNkzT%9t|lpTae$Kb<^n4gSPTO#je3g2VS{jDM=RXK~V&AQwL2 zuHZB2^bW8~A4^woe)VB5=m2v8*}k3u$aWh?AY1JWFpUJ+W@kWczWGi?d1pWo-hKOG8NQOX=r5W|KSSSQ^)`jfB*ul&H<6Ohp`0 zH>J$-9{WQMEK{3w*Voxj2vFI#L=`lN0{hU0tw!3IJP@esPsD*Hw?k~?rs9ftcRP4| z43Pbw*8s>X3p~tK_l2$$8Ak!grdCv6oF}KUTrH|+17vq#bziA^ZLG5QRsdw*Addl% z{cnr`vfn-e$m+aF_EG?{Eg|X)2~!!95M_Mw+#b;-E->SCDs_w7k=^&^~aKHbx|DqYz|UPSh82rZOfc%5s9dojF9O8H`?7kawr` z5HqUN{bHyKgD8O5 zRu}b!x~Yt*i!y7z{TgWWO&yG#4j+u)1KH-xUVZCF?A31_u~&Vfg`pJoYHNr3Lc3JP zv_l!6XmM{A6z4MC;wXL93k=In{h#~V0`_Tp9}(FToYgnjoH(odB{R-yMf%(d7W_`e zS@{lV3onKSXBDcF*-V~Oe3p90EFefb0>&6c7%t{>?}WIHDDN)ff4r zA@U}7=C0P*M+lo8NFDK2U+9Rh>O#XVLTHqkUQyW=6QPE{%8)#%y5 z1e?}*30js{MfmK%)bqfqz8o=Db=${SRo4?1Qn0G6C+drVo64A;DB}b7poo}VL~|o* ze$<-ALz-m90l=smear+qP}nwrx*y+P1A}+qP|M+U}mVZM*x`ci(+K-k*x7s5(_UPMn=PbLCpO zX1O@ggA;Rq(IpCHUw=ZIYFaP25a|DUQ4Qb%P2!`%aeKUla)juk7s) zmo3;BuzcG>HqVz1VFI9JgG=PBcx)xQKNY1|Vmxj3o!u{GWWK zmNBc@mO+v`#J+bt>X-;an;D1P>Rp`2E*l!@&SmYMp}vOOafZh`w!kxHgboav0nXas z*}Rtld*~l4a1IMYGW{KwAPNR|905(9c}6Lc1nZWk>g2Ep!yTN{kL-xQOLw@+GNzty zO0HltJLoJawEyL2q}*9&Mv^G72C~s+t`!pynhOqs#54sac~0Gb2zm!{I0MJ@R)Ef( za>NRmtaxC+7`f}8hLFgX?HBQBGcC`!iqJc17<94o+uGjr(bnHxKMxReC=m>qNpeke zie9L)H)lpg6=l!%7RHSb`DO&^U##wOTEHa|UivIbl1`Ch7gw-Y$wE-80Y;Lr`MpSz zI%xI8s-NuY4&;3q?Vd)XfJ*lHg5fO>NTwhn=tW&*N(W{chosk5hMB zhuA&EJ!B3j0^mmufXT`I%4tZ?Dgi}+El%67EED17gYvb>8|*xEiKPejTVmI3qKkB& z4YG)te)qBzPpinf3bIM!2jC&}xN%aQuvi}Vj<*&{jJEPW&0g#OY4&2hfZ8G~4YX4n zP(nIQBa*y_F;bq{r99;n+#2z3Pce}o?t=a)M-95Hk+?M{=*Kne_Zn zzOy@C!`6=lk)0`Kdcdt{R!W2BQ2t#&k9tnqtTYkg<@4tX)6!H%rjFYjhUxSo1H(Ep zIn^VXkIUe_)I0v5kSO1!o8>wF=bh=vWKj;5TI- zdt+l!8KMB1uSa-;b+z?mR{;pIT=}($<+3;QW+8DJOKt9EQ}6$bzZ3=981oow=h~AXou& z?;?98rjstt-Z`Xd9S3BphTO+zj~V}4IepW&axK;-{6iRBoQ@8;V$u@EI49PROE z^e8Np;jMQ58dA|6F@rCb?W#9j*)HebmWQnRB>0&5ha~8ddD2Ro`8PM@T~SQS2vp%2*&ej1K!taIRdVExn~h~MVtKDzJV?5?Wo zq@bkDIf+b5q~M8_hlvlPpo#Te-Oe~^wqq~tHVurzJA|YRD}Y2gV@RQ>ArJQOM8Xo?dmk}0F?>j;rG;Z#$eD^Kj(V!*ysiF9|dTjvjVcv^){3Wx!*cpV1z z@I6L&;N0t81-)~$Da<`e=4a|PGZNVc%|Ov0H9uy@PZ zw7egv+6Sv%i-<98iX6ms82|@&2@3`0giY-!VjZZh2R_956ktcwj3CVeBw1pv4d;Vo zfG1R4#J50&#)PI|DlDQ`W@m}KYN!s|tq*c=8k^*OC61_YhbJha6X3%Df^2&QXr`r2 zq`Ofac>lE(1D9YqJkKB5ji{|RGFUe-t(gv%?u84h>O*HoAC?GupHX*UtdC#a-L&u znS+y3fYKeZvlYl(Zw>|*e9X;cD#^8RCf;Rk!pZ~;L^T%ad?^1k!X<46f|Y5kR`(*D zuFkczIYORL37aOCTY32Abyiwr=sZ$J{g#k0v}EfIE0*5UhO}212c=0X)?P^}@@)J- z^Ar7$UIpm3BiD9D#A_}g@7W)E$yHD#1eeN~vWqKZk;qZ%_8ZLlWq>1Fi(8k88}@pm zivBbZGXvC-!%R2mX7!^vPwLWe(%`{Z8X(KVNaER8wVA{9XFU|3lJ3&fp;(R44&DR1 znXt@&d=W{s%~1?aJ;w+~8t%WrYO}c&RIAY9K7HE#1B9AMzhLeqy9S#Epts5E*Tl5& z24M8L1<#xqnt0Xo0P@I5i}_Wm;c&kPJi^9``>br5==KT`W34%ys1eCEJ92bKA1boa z#k`e?Q5l{$X<~d>kxi*9o!pmlZP@Sszuoh<7~J}5y44NpaVsx$VCInRPkwc82H_ON z*O;Wu0w9Z(cFj)0N8_+`1Ffv9mu99^<o!YxHfK!{DQ#hG9KVi;cArnn`WcL`f4oR;#Gxs?Pj6o1W{9CqIo1Q_n#5BT% z5&JHlN|Z--J%}#dPf%(DWF$0EvbR=a0l>prz+^4V12BaA&P}kwR8Gsb&;etK@)~LL z33d=~vJFXQcsKnrbqk?K!qL*GTPxlD4vfA+d1m%P2M)Y?;UM0#smf`m>8Z+h1Pb#j zoAXmdbZDHZ%HvzhXJc3H;Dm)6Uiib)`cJBwq6gYviXLI5vbHh(4Pq&z+Bq%18o%B~ z>gY{3#d}8{d~P=S26yUQcrSju_9Jwas!0r~x)8APp750x2RBsNxGuOdlBUw2(8=-)a?j{vzghfaMn( zD1JQ!5qy#o&RsX5*73(4V)9Cbmo)e@k+~ahx#UlELAH7F+WCQsL zGWv2E!Z=9&!(^Lf#M-v>Vw%`=+iX3G5 zYfJFL3U{m{F@mLqYo>_|A7w)%d1oI@N+95Qy)NAO;`7Acjof>0Je6A;XY+s#NUd~Zj#OXAkP@_LLOXTUSwS-}4;*-ph%Z;%q6;tV06WMtwLwThLB zm@Khy7>4&!<>3@Ac^^EPxwXHnt)4Y#mD_*DhrUmPV$e{m1%<*~83|_rUICsBB29PF z?o!`hzfN}RTLiN|=V@y9=NPJc0sj7X=U;H?_N>B2zT+d6B>df*nj#8Im$&`DiI0W)gz(grhosO@a7E1}M zvCBf+P+8wijc3{3b}=40dv5-+5A1 zZ2@X!e%$j^!I4Md<>NT`gwDEkMy&pFeLacITG7*nWL zzii^v`Hca1Ppug5zj$uTdB*i^nWd$B>!0pi+kf80=MLPp9E6CTcgR76g%2*!BlqX_ zw)%d?jJlcd$J(sep!mkVL)e zj;-P3-|e@Hzl0iiBAA(*T4{h-9|G!^-TINd6w=pHPBGHg>l0J9Xv$Qml zeCKO?8>{D&^pa{V^@1e(&*Ze4AkH4(x)5RQZ?EeLCqy*+shI=6OU(g&{8aF9IaeVwGy{X-akyUja zFIoHN*Bfi~a=c)-q3du~-7`|M>dVj*%d8D{px;NHHq*y`u<%%)C|lR1m#OK}?oy}K zh9u>EKX!Ww7rrAg{I<$UPX|*&-8uRNyaN`soh9;tPhLFd_YfcgJ06u?aFHmI!~_vq z%T`6r7R426a8j2)TXi8yKQ-biL*$`!VgXC&^W}DS@Oos-IA_mLy@pBJp44&kGnmcs zp!p}b+c8H|?KiZywhjhiLwv7@>=KKmvn7ykv9A@Cy5yOw?X%YJwVwqfdcZtgs-E-w zVB6Px(FAg}J7ni3bdiEo;w5)~DPXA;lgb2~C4heboDU$C>R+|T2R2kkYYYbQk=HKo z<#LfXyPQKe!!Yp1mU@uMx#mdqkm<5o{(#*w@P#%OId7YVrk1p`e}YCLQZ;4-=(s2gO{4Pfqf8F?>ypK07&(h zy1p3zeyMDoC}&htFaxQANde5#j@i7Vl2KCA)QIP^Jq#+mk8fUP*mtC^toln&RSC$) z$}0;^NeB9r%yVZk^BkjSI2IrEgq0CH2@zoKrNhI~@waMfmyUWnlD0?4wju%v8As@K zQRNO2htL_HpNNhBxi75d^(TI%gG zTM?hnG$H-vXJ(f;Hv2WF2;#hEf-V=S)wu^+g|FdyPUi5d7;|733 zM@ylB=pjs0tdgd8*k#!&SW8XRWsFmp^67PfOb<}_mm8cCnE)8Z@*HFUM}#Oj0|Y(K zv6vb#t{c~~6C`kN&l$TZi<<(-2?C;{Y0>Vs8_Ee{+WGIef%I;3)w$>>(h{5*1v{<4 zLA>gz=zHJK*|*2(h7IgFm@J%7weRDG2ri!t{P zgW$GS{y(RFUeR#8pjpoATAY4}fQe2+&0iIut+z^J z$N7p9L|ngfgN+EN0&LMM|8~^}g9KeM#Ju}7Q0O|%2$`)UqdI^AxJ47%XAXjoK;)bJ zY)(ddSZff7e-r5QT;W`Vo{>o_?PbUShq$Ssp2nkz%))fKJxc-C(`WAJfV+u!ZN z=Rw*FZ3IEuZze(l=s|Zz0B9$eQ;%SZmWQwX4o0;UTPUAQhuF%V;#@S;P;U{tvOH9+ zm)aS4MoXJ-ZI$(k&ae6@fc;wZjp7ve<#^0*4Cbw2hi`XGWIu?|Udm5S1n0ATq5XJ_ zYX8$?Xm3p2bhqdZ=>wv42hy-l|6PlV;=?=xmJTrVHDtu@0ScpPZ~#S*3r%|vose0J zE<}_b6(db>Flc1GUdQlP_C=FmwfU!qfBcEIqGtbZ)^$0FXnukYW#bJ`RdBw1Xs|%E z#cMV}@HZ46XQ%{UU|b|mvp_?IuT=jR8_g$am;|?vV=lrd1!7gXKWy*`19{YQRGR^kCmA<)o;P6(qAR&$k`Az)p6l=2Sf9c_(O6-N zs_)@Ho#({fv*`d8%Y*sckYMV~@2|649PNU7xz#pWR?XwHTOTD4gcpX>@SG>R#!eF+ z`Vk}BZ~g<}1O};2?2n$OlyzOsR4pwJ4}uT;eP+HmKp&|C;D)k)?u8lFBZeuF!M+wy zHOcVbx-n^eQ?MN@ElrASSzOrfc@uwXYO0bSbNc8{do_87&9mGiti11}{HAI>+HOq% zM8`jRn1rp$SRM2N=h1Hf<*-C<oD(=C| z^OF%WudkDE4jqEG} zY(mBt_889&z@m@5@&Z!O4D4Q@0SqIO6lenmijd#|vpO<02dU6=$y*~z3-R@uX{L+a zeJ?HoeWeJPT%&hurpLu+8J=wWdtQwl(1FS60Rj4&+l(?;A@M>To)x;BYsUy>Z?s~; ze5l81)NR|6t7O!9qQaBjV`TnS_V5BUFMzoHUF1QH;g$=C^~BND{qY5&F??`J9>1bjsH}o+HQ`)4q?QMf8E`rdehR7q>8V<8Y z^8lFy#MLsiq&Rz6vQkQ|#t^~X(ADrebH}N_^m9K%r=$vDabEf+-O%hG?C6Q4`e#Xr zJVCObpwf>p-PS6T`I+BGcFBW4z^WZPF(+M7y-OEjelJ!<#h)kOoU02+}C(WVs2Pqo@u}NqU z_OJj>**~?>5CEs_A7ZqAg4C)$EpX(K4)iqv*51q}zlXu_R`79xa|6%6Q$@}8t_tX7 zOfb3>W{@xzSQUtRU>{Y0yLt6xKMCRkJpzG&Lf6)~DO1KALiSUK(Y%3`g_1UyphDfT z438$3WZ*=rK{?~2jF}u`@|w~bA-{a5lA^aPE&er}0e$5Au)BLXo)nts5kR7&wi2E^ zhy@gD8;Lfdw1laoU2RAsKYD?IfQZ!E-hC)SfTM{i8p0t8OfEl|gF3Mng*kPGba(8v zf92TaHI2BhZ@(Qw3P{ls)@V;2T-CZbCEYf*gGeo|=wrLjoDZj?NbR>1NdbY-(G(B} z6FBu_0f7(?yC6ma6Dm7{0l&C65#%7Q@il{0M^Ex#%A$RhHHXf;x}s;)nV|=Ish5-W znOFJmAAsC~6~hT*%0rdK1ZCQ2G$ogvRRY;!Gz)>XHxn*b8Q?<^J-Jf`+a?<&WpM!i zY|w}a#fj;6S%q|O(#Cx-W`pV-|Kr)x)PRKi+$csTVEm~S5uu|eHrN^=8kd3h-~k-a zcyUofyzh! zc!w-H^n2{ql?~;Y z;svsg@si)4I-y*!a}hxZr4ik)txU&`ke{rn&ijuTAQ3@X{(!G8CQ|O&$?rYotdJv8 zZlLC&LIF|zwB4h*lzo%WD({0V@|iJRid&_iw37XWe#h7{;V z%jvm*)LNwg%U8Wlv0vFuMXy$t&pG~WwG?Q)Ad$oln${kH8_1kBlTF(r;M~+@VD>}M zg+rv5j3vH9J?ps7{FagKn?jRN-{t``Mx1k&^>UuzPS%o|u~WtMa;n^wj0g*=8AchU zPRrh%<1Fe&NGOTg%{s*=7d00M@wy%t01K4#ikX<(<`kBKDX*mbcac&x3Zv3=Tz4FT z>05MZO-8^F!X814vq`^Q1mbO)I^-&|;kr0d<~l(J!Se$r%cO9QofpdGnP8)mI%POo zz>TS1Vh=Mz)3OB2T@*P0{8-5x*TBR*gZ05D!`4Y|>00$pS3Yjln5KzTj>;;r_IoiO z#5M8r>$HC~FJ~U;Ss#@(B~q#Vq-Q%afOSYJ*XDaEQ9TK7O$D`>iu)A03Aod8*2m)a zhVC{&e=S+-rVwzlt9D4W0Qt?m_%NC20M5+94~)oY>hZ)C%Ck~LDK+w1oUB?hbfKjT z8eVAd?-dkwK4Z`iemFxwg?IO#c-FA;Ae^pXS5_Bq33I=gC6H0xv9isRw6Wc98{TKU z_80LVN2A29FlGb-%!5fl)aYFz58@9Io5AK(DoLhFf%c)+XxC`?sv-`G%* zu{NLT(dTt9N>=O1Pi|^>_rW)Nkw^s8Z$#tOJ)va00*RMKXy~;y`1sO|X``BNhH^=? z-w)R#lS78Bt7pH+6EEAP5;d0+$f~>l{aodJt-Km48qD^t21T`S#o%i24b5Z;)p?7G z_u+;p&D#?QjdbG*#emSbk*Se2;VLz#6o*Ao?JG4L2#uhPl9*jogKD#ZXb>&WjF-Dp z#GAZb&>xmhbdDmJzkq0;1mXF{h#a1B#KjlU++BCZV~M8@k4VCC!$c}a%gVL=3It3U z827DlLC7g~AEo<-S}1`3xOK@Y*(^?*n5<$R^o2JEma802FR?gVP6x4RnTdDWg|lR- z7A2 zgD6q(eL#u^P+cpP^AN{dqM=#Qh(C=C*wUa&(;)bx*{Wnv zE^>=BDS2QB@VdGO`C+SS_g%1+SMzaS_b!KX>8Y8m3TLqYt>``F0q|nAt+Pp$n(Fqw zUGwc*J-wz7dxZ(*%m8wZpb5Z^qp6B>`6p4(`2Uo=6Xv7<4s5h(q`2PA(K7`L2~9zd z>M)5OuZYa>_*oOZ9zCxWK9QXmMMy!OTYkG$YN%n9_L0KKyu})kB-p`+P64GkbN} zL0iy3^EJ<`5~EkmW|6G0;{Xk<9o7G9A4iEZ z+W%HwYwv(^G%!~cx)6URyt&NjHl+^;H15kIL1t*zR?(sFAj2gr1NtMG8WMKH)ZqFk z*auIPBSu{KaAP%TXmZvv%r~KR<%0iuPbU}{n_hJDHFkWCNSG%z^gr7HG>ifA(CGAL zg~`k1%a;b$0GD*HD5QGH^zv{3(=_s}@}r5Rmu5#X-cutD-CX&#lAiV)RvU1bRjpuw z8M>x`z$Pz}WQzt1{>;o23_KX8c<-Z550%pXh%JYMO0flH? z%)4;v?FBZ0!racq4+Zv^^aCz{tlk{s>0z(>E>L08n$j8mn<-MSMgdgC&PWjJ_$mBy z#)KRj?$5&c@4RNKxUMp@iVq3?)Y_=7YhiWQk=YmEmOQWN+fQBgMO5ADH{l6T(avcW z5Ej*GrX`nvwpnNJB4-QNKm!c80&r`fv!xqm4c{aoO`m5=mJNOgB{^pylLS7Cex8bZ z>bt}2;)QnHDjBkcHP=ELPt>k@50~wA6EwT?V&0*O#Lv{jlLWCky)pzxcI$9$)B5%g z68r3$)xRew4>d1!vp(7Rt9R>O$0!y10oIKExf)XT5LV(Ny0@!qFF2nq1?zCJeb8i` zj5hEDxC1Nso(Q_wM4pT_c}5o!y8SDrCitx@$92gCBoMls>!XtckcLtEu0S=m^}x-T z|9%lnvAsq`WV}z`QG2aF*~`LCzWy+{FD|77Iku}%v1C-J(JarTh$I}BdU9|9KM)`) zDg-i}jR0YzGmLk=Lz;yU`AFYw$RtX0W5hDy$A$}{ut*b`ddCII8@?(|V145KyG8!u z47Pu!HlO=fmfrcugqTJkp87Z<$vu)BjMhRIb!NSMMPuyR79{vl@R!BICx9+^g}c!d z)#4?T0cK5@L{=A&>%``(VoRo$vTRxHal|GsqD&%?chv>=2_X1-6RKhPSVq7EKLgXS zkp=sPm{PIMCPdHPJ0GfzDi_eNbs4dhxMs*|)Fj2BX0No_PJstMb7LM3ofQ?p!x4An z7r~#)GEkj#Fq~tf>bnch9SdchAq4mN*=^Fl=Eiq{UpZfos=phTgC$8_AD4%`Cw5WO z6y%mHtO}LbXUgmVzS%oR_u7b*34R6o+gu8~3ko2f5@i*yRLhfhqhc+{U|iPFkvV|1 z(Y*vu$vd>0i79#u%X4hj^b(jh`ZbMD{1)0$gRc+JGH@|SWXR7K+W?|~ii8=3IIOAn z2G*~bgK@WT(k!cnhjE>k-^mL1i(TNK$BrM3G6izKq>wGJ?eY1I0G`FO2F4@M{!nWm zJ-G4mj{5R-WjX_t&VK!056#~4w0DZz5$jAZ-ZBA?&&!%gO4hSJ|Blsu+vF@Be zfX(P_kQtfj$Ir0ug%fT^;&GJ&KYqhCybg(LQ88B;sgzFZvaN0-+0Og01f;w&OBuC_ zu!`HoXQoAlWESNbV_+vxq!@*(U%to;r}`q8u@>SWDMH za!GJxT?Jpc@6(2Klz~Qa+V0rs^kdMGp}nY_acnO8oHlp9;zOZK_UxE~)cF~{><+Yn zTUL;Q!(ywy|Cj|P%moF!h(2x_8piF5n&~v>s>X zh?ml(W!TQx39taUSWG8ZNiASi^zL!8xa#fCmcOX`AI@?NeI6Q+7W}}pgR0jd9m?() z>r!p)oc*P-`q)O%*NLG2)_M9Nv_>Gg+}3G9Z0=M^17hqnfNX5hjSlcNf&WFF90RrL zhzkdpM30dCSpB}*PS3J~OCjAgW|Jgl&((TtxvL_Xidp^eMnz;8dPC&BLUSfD?U(;)@B=obh7~!F3hsWYu?^Iu26>O=7TvdwVoK> zT-wu;P@kgD;0cK(D9IF2RZ#s_!7G#M;XcN&I#2s~tNSU%8mS8wHxXHjR*v%JfTXrx zOZRBU^`Z5oH+^_g4#CKZK_p~NN1 zwu5Dc8slinJJN=YEFscc!I;akH`Q0Qf&C5B)<8HmS$9yecuN-{=(blPq#X^Y|ND$6 z1LQ{Vw7sD1TWabitjQs-#eJa@zu+@PT-vm1ha3O#ZY9i{~c|wO5%K99Trb)-4 zcs80+;S@0$+xE5l?1pMNG{wzN-H(zOL{^%t##j9r4!l`MSz>ts2C=GO5Z_8G>}~bX zVhxbf&liOHyF{qt^JR(>i#h6>3ZzX zJ`p+a{S+<27wSj{M=4kH5wW7aqg^yf2*SM>$Z{GB>jnWf_;QOyQU3cY7Wh%h>O1z8 zuo?(V<|@HE<+`&iGz^aI7S(dZ4(xm_RMq03#j|)k|MShQXs5hd!qnW=KWf5c+UCP& zZ?!RRKFR7kmyTJXIxE8XXfZf*$Fot8pi0<>J0!IyZi=AFxY&Ipa4_}FeV{WrH3eI3 zz8OOk$B46mnCk>drDf<1XG151Rjl67o&^hk|7Nwc+L+Yy1NvsQ6$G(_evaRhR%3=H z#F0U6bBuAR=j)DnHqi8DlwsSE0#yXbFe~jXfUi$9&Z%f?$NvdPJx&Szh8{g$$7+t@ zh}}{9^$bgB5ofYz%#jmI;UXo56SkLUSKuSaKL)-JIVS>3;1rmb2njaNb1nAgk-X^b z$)~wm3;d7`+E~=XsK`&~tRrUtra4714B-ZM_4j70)+8$(x(Q~LoLjcLb?RL>SfGA!g`8jcMyyZOPmTT?uxiowB=ik^O~;r_stE|?=&+8 zC=mg@=B{F29kD*Rpq_Jzl7`{I7X$Gqi$gsw0w7@Cy)Xz>)|do#(p_0uml4o-D@ez| ziE}!fZH`(8tJ+-E)mFf&r$zM9CvVowxhLx=cpPQtFh2Aoe?8-idrLw1l9xKBl?%Qb z$ZvT^rF7a@BhGwHVCU?_J?I2YpSKcphfNkMDuv+5dQB@kTfyR{8OoL`w);&uufxVv zUYdz0hR}1}=dQMqYIxktA~-r_5em2Fh}Yq%29ENtZ2ltA>sA_$-rxh?%uT~YxQT}T z_LRgfbe&tcSaYvzdokM;X{#qP6hnBqGj<#zp4B|EpBm_B3A^x+*3WqvwR_sg{8uBe z*>7j^L6x-V#-VbV`j{|aN2|X4k3N&j4Hk$qcnd?2Bz#LI$+m0gcgNVMsW;lC24+j- zR^<@=rN+{dawRp}5!(?X^CibTn%7;-Z1}v7kFcwh!!wkO-nI{L=0^*i>OfLJT0>F> zUHv|oxT|>30imI8UB!#da zU_^h!e$~iKg+frS|6xX+PUKW#8z67ADL)QUO1AbRZc?D^hSSZR9zQDhbcr{fh zN*g{03x_9#&Bgrp>D{fU{sf0#d0gAAsJ1LpWB}oDOUQR*s-A8Tp?S;W_}s#YkSsg7 zbKID-YgOIGPB7v5Lff6FZ+9r+#CmW!*e6pR|D$3v;2HX4T9bj8ati{LH1eGPwux|Y zPc!oG0P)~-PMs*%#4l;OHTp_`4Sw;M*Axot{3JkRQOh$C341@qVmYL``}G-1PKr5a zP-tc~8Km-!6AqX30J25O$Al#Fc{KCHi@y~+gW(@*ha0?yf+mm_0^S~Ra9VI4B4`BA zZo3bc%_K+n?yt~C6wO8 zck0asbPxN+&X@6-?qa^>1t!?-jx&EpAB4SXg@<=7u`RvP>Fa49}#1Co7!MO&gxu?96~Lz_Dx4_qeH}Ei_Q(BJ`l*@;FGf!sn9x z)vc2F(3c+~&=OJud;kt-{h*>aeu5Af5L*@Ld0swEEj_SM(zLES$cdJo=+rVemcEAJ zVf^AvufH-fjSqg(Up4(LJ62NhQkEY^BxTV~L{YJrtc{3rM^ISg6j#JEvQ9}|yJ;|; z%=7IQ@`&GsA4$mP0Rx^omYstV6%xEuzR(<%v@5=OYwIvXOGu0Qfl3E%97tB1{U9P{ zEzow}0Xd#6(6Qb-g1{n8lU7H$OaXJ#UBCrP{NN(m6agprE?t~Rm4J*0Dh7}diEz3S zxio=@aB6~y9F$2kR07^WZK(w+ZQt1mQ3Vn_tSw_5y+;(VWK3f)Y+Cv?8L>XASCrt9 z(VTg8wV=;_7{crC;F2%P{}q#d+GCcPKv=Th*Q_Mf<5W#fPEHY)rsZFuqR!-!=^Srp z^T*F6s39bH#Kq0gsET=42p7KFsx&r<2R3$$hMKI(&t81F*;yTpUc(WXzA)2CeY&c- znyzW7o2-H!wCn><(c3vUcMwZc)%a$Z>~OY8A1LZ?=v0vB(g3t48pfxd3z{RPg$z8o zIGCYVc{!lj%(RPL8%l+K*rvxBQNjRCX;qme);^f{%>f4~Pw!6@WeMJUrH%cVqvgGx z-x$1nZ9kA(bbeGJRaF}S4o?FRA++l-WT_(U+PcCwXoK>ph>tL~C66r&L4EB6@MD;N zg(V_hl5Pww(nk#M5JTFJgN?`koI5Pj5V(oa&LOq`01_TR6{%FM7upud*p|(E7Eh+p}G?)2t|yhs(H9xZjXyz#8lDEz58*U zA;}#-!UIWveEHf)7GH46J#y??Ss=v*3Nr~0%|k3Rnv+8UvZ!Np0w%m!yVEfSOzGwt zD?mUjQMV7z;|BJ+2)j3$(*?vnuZshdxh!7@WLsJs7HCPJo~BZ{FYq~DX7ls0uL-M1 zWNm#dT;e|xI5QNeWH(ZJg-*$1NfuYoHfxom6 zQ@0W7p$hC4-rVn}S2xPn-ljuDJ|fS=0&NT-+gIBLHtF$(vF;hXB*{CU@^-8oa_(!Z z8@~2$Uz_K*t@t;J(aQz9Iz@N_zJ31ujk(Kry!3}Hf$BG89QCLVN7$_E!P#6`|04#{ zjI%#x1lgCaPj?0>SY>$dp;?>=h8EP;Z^fO%-b?Zmpo_4$9B<{SIRb60yyR(6FE5-vxy8FHBPpGH>h$6B5-f5mzyS1zbOhIV4w0-=# zwqc3Fh`N<~+^V(!tJ<^261cuChpR9lp(^IA4A$|^w*Q?-R6qrFID=Sjm|tc>sLA*(0E`s7f@mm%m-3PwF|^1 zXykW~Xe45LOCs7pq=Yu;M@5^#7V?mYVG0FbICicJaLB@ZaWdeAb3I6?xC^|>%2sA< ztI2}~d^PfP8%W>g5jP}tDG=#=+GevoG5?q*{6u`nElxtBnv1`-u?s+!Usr?#L^V4* zgS$`j7!ZsX5J5;xuibWYf`RDzxfl|0Y|QZd{C*Y_O`EF-lG;i zj6p}9a~iXr4q{pY%jnNSYo3R7j#>galBa1|k|}9au#>W#R`xda*$h4BNw5Dp3SGsu zm3nwGMW6T(Rys(AwT{#j|J|ED0m8GFlP$Cwp>N|hNzvG}Qy7&CPuuQa;1?Jb%(rwG z$pjrX38`Q=S-(74_uPT`;=j-=Jdk5?3M}7f>_yJ76Dth%n_E#PtL{9Lau%|hK2Zq%O@$d)7;j4O_S?mw|II;%Y14l}c1m($)0_78OB$o30 zGktUiOQqcWT+e+}h_aQ*J3zdJtpY*&jKDE?3=k4&(tJT%K=&DGJe;Gi-UsrS4&Ru* zLmZv61b=Pz?<@XY4|4(g7Bkp5&HKI4LjD;kwt=o6v@-SfM};DxYoTN2zJRDrBJ)L2E`}n4dzw2cy@M-@P0J^o)2@(Q*|RAy>7t zjA4(#Sfd+ttx*uTrWbZLNar()$wgP&ONg$Q6H9TY4BY2qsS02J2Af})Z*^%)spIl+ zlm$=C!JkZIOZ;wQS)NEAp?lBKW~URltkA*BvfUC(^;Xw=r19QuBl$)5%h^=$Z(!5kSb93=~E_+|O z-GEgZsM5y%P1_jZ1V@K77SMb}*aS^a9xNyvCe6R&pD8{XgCEW%H8wB^&f@2c7Pj?vibhHR6DDfxV`*Vgu zxvC=tJ3saq%yXyvIjkLzTbhC~7r-MKHCxMRZ#U4ht4}sX^Y0$8F{xKzjVN=c-8q26 zMxx9u$Zt~tCXbAJSwGi~X8Azm!Fn4Nxs*mx9cL(Sccl^^NMXcv0D(h0(_QTPqR^L* zPS-a!((Iy$o=%qy2qiJV%mO~(ozkPi+T?HvW!6OmvR+4L76IcxDud#T_xt(d^sIb7@h&cE z>Qb>TWQhfSQtcWReK@$*5DH}SETarOaHBQ}JUE@NKxcOb-0|y{>q;Qai8goCRA0n2 z7LN)#nk5NWykWBFFQ^s8uA8P<&BejNYs-G5GpWPxxun-|WE0hNV z>`52Wq;eT62*_k%&Nq%?eJ)+(Uj(FSsFTJD&z#~9>yydQm?a4%cZU^`o|(Wvh24%j z?W0E~%{+_lx7?#iE+@3oV4x1@om+(a9O zN@0ISSTo_+iKLy`TGd&sGRudn%fRtMoA8Ds#@n*v_I{1#43Bj#q6bz#B#3hGb3i{9 ze#$s3)^^KkH;VV1YA)kd@*l;OFVt-0Pgl>4=}y6Ts{2z`pZ``(M?b5)es5C8xAim+ z?LGEEn^8AXKDGD134wgKrN;>6SvOby%M%Ec$Vk7Ah9O>wx+?ff`OpOkda^km zWi3>ONvR;4XApdw~KH@D`+Oz z-TUrmu>6r1i|QyWE60kyA6ExAuYX(~8~*jx2{9%X+!AlN$qmr;givckyOWPA0Z ziEksJo6PK&NKTIYBRwl;iIQLBVgF>#tUch?tyv*_%%)6aA6M|ky~$zM5Xy6O7_^=CW&@mW~w#r;;;O0t35fZOy{aBm@g zBb}S99sME58FStfBJ5$IBK!)&qw1>(zTZHn>Z1?5-{>|toqTN@i#$6s2M2r*bl-hI zlkaoa3V;V!baQM3Fq9H9zMcl6o65rRe^9>6%7fyec#6nlcLYo*9OX( zwg;k%l0a8)qz}et1%I5I*52Pv%(n_Y_AhsfJGX}^AtG3om%fi&B1EH$^3_hhAGqa# zZjhwzUp~#TlAzBnT7R3?VVZ&66~_xm(}A98zE>0bvN=lm^EQ?E>B11D^%!I(NrT59 zEU`r9>@N8>7j{62Ymc4W=DUb%d`K zV!clnlr8>Q%LoC~Te56qk#>ceAVJjkz9_H30<)^z6jdpTiU@ZJ(jlZL{YV5$%bh6U z9}~uTNKuk_{5NUBA+xuDKPxjIH%?q0iCm(NN(r?QLJ69)9%v_32~`BwL3cj55yr}q zY3UU@lxfdVHXY_XGsxyU5!`h>JN#aziD=W59kwvG5kkwlXN-uifvKZsBDvR4hv93cSxsdkA*mu+*xk+i zyPxjL-~$dqFY-g}8Wn$#-_NGE4wAQvRS!|Z_8X)Uixj0KVwieiz$4rx!;M>tM9l`` z^uh2L6lA<~YE^_gb77JiFw8)K10;U>;KS1bx(nL z#BA#qvN)?dUR~BRC_Xp=LuR6e-pzbneN@pwm zyYOWHg0YB3WwuDTMO`NQi{nd@)3M4t>=S*U3+6GeJ2FiLK^}0vqe|+=YHHdx zG*xGNc`J94#3PC*^FMD@RpbI>z>K_Xcl}13nRUp-c=o( z*;jw6$PpOn=DhCT8O8C>cUqXgis-|C)O-7E@MF||jJ6M-5G%*6-re!pzcc|0exfe> zKTKU?bY(%aO){}<+qP{x6Wg|J+fF97ZF^#KV%vH5``&tMy+8N-xa*#-TU}kJ&)&PM z{BCALNin&C-ac~BcqV_S{^LcEJy0QS`^`nmA+oTO^wjjDBst|6wuC6+|J{zvgnnkx!z?{b!TZ!5dsE@Aga1Al}TtXSP6<0h!|L97?X z^xpWPH49Er!u1~DT@M4(Ul7e-5|alqHe(4x?Mf!CuFYxGg#_6*(<~X&?%C&sID)cI zdoEX$3Q%o04|TPLpCq>s{oQ-_^#1ivn_VQ(!mV?+S1|qPyZD{^ z>MSpn7h74GhLa;{Tjh&of(5N)6Y2&}9RxTtu&^B4$xcrb*OiN#C2Jg+g4?HQW~OJ` zn3l?l&;S5@PqOC5QGJc%uaPGM&i9jK>zp?#w$WsL!P^p&FAbZ1U18xPg-1`AArZ6= zr06Z|6Biwbr@!VCoDA|RqE*44y8I&2`}^|TsqBNKIHlUdN=oKKINV4vv#Z#!9d*1F zjgCPNiGDAFB@=a?tVX45bFNFU4d?Tu$MTjDy5j0J84Z^sw79LN$0Q$rR{L7)$mRyYy|IQr?e@ni;i#A+*(NTRyb;}hMO%oFbJ!%a8j9j7iYpHr zMUp*up&o;by>l~hc+Zhc>BSfY8ny7?`w1Kq zE034ToX4Dc(P#`YE(C4T#8A#CC&cpS1^2l=Zf5zQ`+D@7um3(Q3FEkHy5J_^@p;B` zle|1QdPpx4gjgMZqvg@!kFLxmd5@K%kGz!mmGgFzd^kJ%?bx;bjF0gy)7&yfr}5jn zB7fHYZgs$Z-4E9hE6w+O!Nm2P6|@ktC><@PU%Tp_B>uzg^)v5H_FZJ!uh=t~fl z&$t4CIdpsP4-sQ%>>8@W6xthoC)K>~mIS8xBEh8lf||{}?&CiAu2?f-H66fVC|Dpv1v`SKh)%`@O$sdzrN^$a+(8}yZv}w491i5hOTH zUSNwFAw9uQIZ)IfVl?{8fV@WeP7%p{>8=k3-ZBCU-KLvLQd}qY`0L9kBwQW*X$==^ zTb4F1hJWK=d|W(iRX%1K22gKMd5=kgoQ?T$sxZ3_PQ?+YI)t!q^LT1Od&+Cxui%WsE6p_>m`xNF*uqKWp-?Mm$j z^YWXP`&T!F@tJV=*R_^`56|@LZHd}CX4u_A?iPR4DM9I751x`%odC|R9XYCnO3Ekn zsR7|j=o^V-qn2C#rYL_zW?{B*|MZ$Hyv}y~ePmVii~RJ0j2iox@&OYI37f>@6bp;X z!y9du0F<8K;ZsSce=jUXMrFPj+~BKCmKC2 zpi_yn`*s@|z3cfko&oZS+-?h5NyhkNq$mMOST~>Ef}=B#AC!Zc{(j&eNwtBLNuhv$ z@)1w>&z>U#nnvT`W zg*3QIUs*6fm-H=(GUzI@0!8yEN*VN`q8|fCPGOxv`gIPW$RrEehP4O!LM`y`MCG0D zsrNnYbo8~#$uvVugq1ARpy&%Uf|Y-(>EFwab2;adoSY3_F&AO+p1moaST`*iEW;>j zCV80uU~Nw*ups76GR%B=NW9}VcuD|}KX=kOrfxmvvF_U=E_G=3W4zLQjK{;gye#*} z*Ose(roVD?wnv_(H416Dg#f>)7?{Im0-afi@f62_pOrVW)aP6)aR0R(CdR8Mw*8xE zW90EPJlwryfDOWOp$ z|C>fv}#qdrDho;y7e@`=>u;aAcXSzYn6k1Zjlfny$NJ}7D!4wqzLUVwW63p z*T|6)A)10I4SqnbMHW^Ru$5|KjI3lu*)EYMT7n}T;Q|41QUfm|3!N9=5QX@?jR15D z7seKV(^OQdiP+wyGQnR7piutWT?2pr$WL^FeBwenC%ef z6O`+8c0Hv>r1>inDR14$R^}yjenP@h*peo(td}OvwqnCXx08AKv^N{@|HHEaPm{X3 zjL355nbGj$lKL>q^_#+$T#iK6cq{T zamlLI)wA=(RVO>3q+hM%z)}QuhzUglY`_&m7$-yU6Plk9A2KlkAv-w%OB2Wms%p52 zp(UCB+O#&hjeYOu%{TuMduoE<>aLIrN#e~y3e)~QV$G$@BTOlW2AQgu)HedNLsl!) za9XK?&gJ{yk;$bqzx7!Xn@s^RH!t-#di&I4Ey|sd?*{R&k15|!XQ)l&alb5JynjtV z3D>C@e~j*D!_b$fCq7BeT(WHFxfx&fJtCSSc#_zxaBpxu~);37Z`Pifzl|ygn{yAZ6_{sNf00Otb-EyKf$F<>20e~$roOtoGXm$EDuN!#0SJD-l5S7E z+TO$gv2RZbDB{2kMH|+dbEf!nuc99&@ZP%SQ68(U;LnI9H+TzrIRO15ZE$# zn#cqMAj=49uONT6tRd^*WM5do&>51L-K$#a==2UElR7rzy)fa+os6FdGX=?&FnF^I zQTrkI>gcrl*GKvqX$EfkmSQQZdbVzk9K4NxV(CV@nW6Z0kK`xD0^Li+0NHAh+^!mt zIM_}@&ZnKsomzKpE;*#C<-2wq33ll&NaBY#6-{j%SDzlz%|=zzK$0(@Z8Ub?uNvtB z#3VG$|F~!>YX$Yn`})*8A&(RGkXEnU?%v}Qm_*TR#rq3!_(wnE_rT4z9+PBvyjoXq>!T^`Of# zc@ROKr7Cl>H)---nuN+(watUU)$FEDWG`?(q39qWt(Dmf8wP-Vr1aJoxdn91rY-;K zMmC&mZKwyD)_Wr7ASHTD< z^vNk&STwNXF{D|iH`!l2VpwVU^L66F+OI0a>#8U@PGXQb<-~2PU##zhCAi=dcJ^L! z=ZpM~vNaCo`jf~p#F%B2$Rldj>U`P33ucyDg55bt=cE0jRx_BwvD&)AzN*JuCb5gR zA1bYq5EWp5as~F4Tna!uy@j+b80zYsM_M0~;A>M$_O>)*(mCYoq6t4jY1+ZtMldry zA{#W0`Y1X10=y~Xz@Y@FpdcoBu9sNljZ6Oo1Q)loLB%Gya@a7;)?|kq< zw(thBs*2MCZiyW|QQXwUYuO$_4*g54pzr3UA!-X?ip%M?s|9V{)t1uSb--Ha^0Gy2 zt)G^%_iFgkXudQ`5La2<>M`lx~&^_daBmfaDHRPC7%IX_Z{Reaat)w4uqxS`!BpZCLYuh>mO}B=%2VpV zP=3czC1+^ave_~q3x_!K(n&E3FnyJ5+y??1TzrIl-|(ZB|1@ce69o;!`ov68)39k+ z8~1*zZO~tjWmNCYl!yaarzK&)tqGWV= z9j~vd<;8JZ9viEtai)2B$9fV{2f57BAb6)Z2fQm^X4yS_Nc0RfjV|)9eXm8b#r1wt z5c4Hkt)QR{$@M7=vpVLqHxY(CnfLx9fQ7JI)GwvbBbe=tNw*o=^{&;1Wt2K|j&~r* z!|C4OI0_gU6Y*EG%|5N;-w^g6sgPGjp5LvmQS=A?l5=xgif^j&0Y=;CEIxt<=1}@{ z4&-4BDbVm#WVSf6Z%o^ydybVT?`mM=#pPdlG9DNMxRO7u1wfYEI_h-+$TdLf2!OKH z=?X@6gBTw+I-sJd{AlON+j5ALMG8URpT`ItF~$hkpyF72?{MDsxT6q~Dqj@D8Je(p zJ!!gQjm6Or`08=TdRQ|$;SN~t^yG!DUU9V!UItJg)oHfBill6Q*+OgPZiHRr2P{{z zSlA=X78p~1@RV5jiss}XB(Uz8wTr$ZPJJ~s^{ggs2>=ziia2QF0S6o>DghP1iL`S7 z)zB<}6g=shg3LF<2~vXq<+cGoVgQ}GJV^-n_5TvsKR3fx-6)jOD_oGW1XIfnU~}Z- zTf1t|f-7HBJkBjN5`kk^wb>#Ji{eV`?_dPvn{knVs3tGcHz-BNB8l^K_e*|1dhitO z`6oY0h7%lb8wCj24aLtPMoW=Mc5>S-!qJirG!sEggRu&<0=l*$fP52L2WN2MDC6l^V2>=od;AfQ>H7a|SOE7O}&MKzi!wB068< zgNnVb@9zePX}p2PYXN!EB!2Wn@R<+KWH%Uucf6M(_|itq6RVG@1;B!_|-R-+|`)UH)E`s5@ z`C1{$Lj|{nX7!@ll0R8Iyi2pN?IlpgHeVV&yzfX%#BdYyLh3EUs&Fq*E)s9u0NcZz zTKKkGHzlY)=$<5m`+@Z{!^1sWV?aEtS+(UO9sBVPQB8fU(v0_% zCyL)m??||__i54Im4bsr7jran5kI0a(g^EeaMU9ED4Npo=f$Q)H#{r>mj_PS_sYZh z$Naf?h5J7~;)Q|M=jut_`~Nc%rdB^IK`OP&z33hz=I_Y2{Po>VP_G7=>+zzut`AH| zKECZrO+wB5k`dYjSxze_3{0Q`4g8Ojw5WX-=OA0z^y`$N20qLLG36IVEl94uJ~8Di zy{a#SU(J6(`Tw#3q;JaAHS)3g_sR8#`euG@8yZxsqSY zR>!bc6WVF08GEsb{*7%Np7oaZgS>KnvpYS-CX#}-Ip;e8v#rJ+tNyO8LU4ko`Cvlq zsC9-R28@E(VZ)RV2b6e12mXZ;4N#ql=IQncU|qbJd!{*;Q4%^CfBBh2=wS50C0-oT zMd+v#n2-q`c|HM@hWr4f;nCS_x6$Btz)?$T8}YCB&MOIM?`AhmU2M`Jj+lcxL5C+H za!7z51RWNzfz&Bh1Z}k_r}d)`*>!P(2j@rUEXza;@=S>@D}&HVQLq&3DXkWn_9j{1 z$~Sq22F}?hr0eLnBd$kW^BP}UO83Km?RDDG0_hOo{o1q1-gf4PBpO6cLIk?)Hd_z? zZr9NU2{=hR)BATaKB@pS$;FiN!1$__UJWMz5Fou~T94)~fX#HHumbdWIS;EI)hS$ZQRV-;wQ%hVKs`D9z+yrIS43iw7`r3PYey6zeB7s=Nk0~x!&1qVZpEu+Zqpy!d2HBD(M6EROmU& z7*7hf*sG(r*v+QAFafr%zWus%9ub>3-n8!o^)-dX;RCH<-L`8h?SWvMlh7zRZvkcx z&=0Fcsq-%i2AeJn=Z)g1^;d3H3tdJMuH-wjRX9?2UDbVvH6HiY3?VS*^ zUE7lb&7Ewa9wLY*Hkz|NOj;r*=;YS0ZH!v$CZLMI?bbUcpqc|O3XJQQxN}_xB(iR8 zt`xE>t_nH#L2_wDGTJ&_!s||UHe;TciPLz!&w3TO3m=voAUM$Uz>hdb=T*4 zu>9+g&B6DlzzGsqNyy*!KF~u9O6CO&eIWRJW zCYS$iX-YhKA?H(21wvf@%nA^Yw`vXBA}w%G-lOLK_Gi%pTYd50+@_^qssi$O;aEqm z>GML#IiKX17@olCdtvjtxp-E83RbF{VL<#UZu`2%!bJ6}dAof-J#Bj#Qz)!FR;cse z*!Vev`xBW@sE~)649cJ{o5bOlgevHNnc>&8S=;8e7ULUs=08Yxo1Q)*Q9DYfHup@*-n`FT__?c_uCwBT*ln8IM7ehCW%v%_v7UNygeu^C9C3ndZ#xWmt}$ zJyQ6HLlFX4eVD5+0$}1X!b+7$BCj(F_4{)bP>26uP`+_99bi*^^d>?$62amzECzMS zP{LS|!=!gYWbi=AFSCqL#8u)7i?SWsy0YNhz0;5cQksoUd!n~*_`fOL39_rNQF_Lu zN6)#fR(`u$xJ~>rS+ic{u2cd*wh#R#j=xpp(oD85`NJ375R|LPgiy^kN2G$~e~qj} zmU9G}?w?aS1d>mGD=aF2=w6_T<2`rvfs4mFXV@(z z_&0sfU_IFfDSa%)HJRkV3Kz!#*Ie7vU_OD%gIX#p!=}b!2T4iEMJc6IL&a{iI4Z07 z(7)#Yyx)vg4SeQwN5wvkj(GT~eY!GrX?FJgZN)w-LT*iF0^8D(7=Is70aN9<+Cud} zZA~`4TeG`zkGG08KiQ$*F=LA^i>n*~&|kU-2pBM)Z2>29M9N_J zWVH~ABRKh_lD69}BK`tJYZ=9O#TkLmQ!%B}H~6;d#??R2UqC6B|DD*^`3dZp(eW^> zIN+_3mdDFJ9qPiAuUnXQmXxFb9FI?{H1#+a>WYZK zcnu&M;jKvB&*&k@NY>@k6Ol$794!tJQECb&U{dnF?N$2TuLmq*+EJimN^+nJWFpE< z=BuV9C{yhtA8c^?GjEfAN9(j05*HHoV$KNNM~q(FrN0^YZF+clxV>imL&N@L%bG^F zHW01z$D&J{t36R2f@=UMv5(B8Hm6-_$#~7$HFC|JL1pf`TiT|g+@30(HxU$=O=bu# zXI{J+F5ZTCA^74~zaApN(mUfeJ}bCcy&;|E1^W5^@t&I_0RDm=Sku@&PQrM0j|QtZ zeCYaNJl!Mk^?ozjY+gouVAb>GI%>S8i?QW%f&sF0DhA+amMS%rS-kzB&!Wq-qL=F2 z+WbTDb0v!%{X&w(=_Z}sX~0PH>zUif0ISMWe*@a?O-}_}&Ksf^zP0v1e?_s?o@uxl z0;g_hv@+;u5F+j9hT3fQ&hP@Dp*1_B<5cu~aD8@9o5_JhP~?Ym6pJHnoiIxL8%a-b zs%*}z>UM}nHj`rnIoZy!03x8CEsA^8!SH6ab+tyWmh-SSfDXK}%|nzIisKz9DS!Uk z!$rV=BU93vQE)$z0$qq`=zZRVmHN>fc)^yb%Pb%sZ^&)9%w&&nS|6{sEFazh?uGC2 zdmsT|<@kTB3`p%*RDw_Y4lf4a_Oy&9Q(W`G07tPfAH4(-ef)}GG0Djm7KuC5_P)_z zHi63RSM;n2vp^Pk4oY7=SEec?>S8w=x0o_O?Kx-6I;5Hk>uwlP)_O#J9LKr$^_*Nm zj;Y!9yKy${*t|^Geb8KlPLsh?o1)`k_3p2T;R|z0xO0n!|LEDZ?%HmJewRxhu8rJy~>o_aj8+maEGK94f`+wrgz3yzOZuy)#NePL23P zYY)x>qcbv=;O)$PzKO{#iE!UfrP}GuOW2KJ$y6GZ!IYPAno5wII$VcgBPob1>dwlKR+OJs4q3$dlTtdU{b9z-4s zgEXa}=+~Q=Q0Ol+$lGw6t~h=JZpp(g&_zeKFG8a3#-7(G%kciH$5U|uz6b&}2E9v4 zY`cK0MR0r7cwCi(*ZqckQcI9<-C84Jkgw_PYqb3Ywt@#$#JZc|z8W9t{-u`Tek3TR zONmLH%^;ebQHRlO(_5-6{NQRk?X!?Z9^OF|PTX4lr7caMn5NJ5<;cHU-4iVeO#XoB} zkk%{YauF`uRxo>N7Jl;HbZU?DQu?jE2&vuvI3U$%WyKXPmwLZY#*YgHW8B^@P6 z9gWZ{5C?*sl+1BfFO5o7!`PUXJMF{v`Vw=gOw;Q`#FmwfNqptY6j2XgwFh0o7<&L= z??SZEI}RCmZ4zb#GV8~OA6@|0zD=@U|qoZ(aul>GZtUTX?+4!|_<->~QTTB4+X~NzI{o3+y_m9jV7C7`$mxKd~5ECLM z=hp$yyA!aBu}d7wEk^nzk`(1BUR6|a%;UzK3e4eY((`taOu098T%wcc#H+*| zX|22?d*u+Oo@nSlW7?v-4$SCQd}H8W&s0Bdn>3@E!wRuRw5MkL|90)PW!}Q893{v` zizbh6qIti#a((k-W*K}>fuwy6wE2b4=SB-y71ChqRh8*;iqu_GVdwu^2Wq?C;Eo$m ze*WA&n@-u1PNek(?JotNV@DH1+9kAXz?PIFw#GcuIYadq#%4QHP8sH=`@N7ERqPO*_{%$lpIi) zMx{xwH%NHr=tPPbY{b56Hxs%%0Z%^?wRtXy2+V^(`A5geRQai$nt6UTs#nw$oqePQ zG)I&Cu^pXv{_yy2pd*|a^V)`K1J+9iqLJ*(5f8U9(U!>D)sDeTQzfu+C?f}L1Rs3A z4$incZ4h%Z1f&Jt7*f>dw_T`tULNbz{F^D=7pA9;6q*&jM-HY16?A(rg-Ig(Ekd!d zYrv$0!sDNFbu|8kdEIkPig0SMSxS~J>+ZAz+{uvZ#yDs4^PRD(@A~UQ9;j^ejUQ0z zn~PHgWd|@RY*IbW8TwXRjqN(ka`xWkV$D_EP{(Q=Ngf$X92x5+F2}IgdQAhQoB~Q0 zSyQTkmmGr702bP;YEajmtC6foScz1|^FPVBWT=0FnHOCST9#adGZPrINPJr|82`C6 z!Ry-z73?_?dK+Bne6JRyPSHCMDLLaS(&9q5U}F3dv@k0lIqHU$U`DC&pcA7>fojPJ zMR(C&-^aSgvh}d5wU^mX3*HL`8-3W|$2mp@p@!%*!e=U#rgmA9k5Zioi91g>2PuvB zphZz8W5RH!bTr^K93)x|#rQP`jG4zI4a-}{Lr*X7q(~Wd8b^ohgs&*3&2q%a9TSwAW#?(?UfJ+;koXnmu}$XmZw8 ze}cRi8aVkZ9hfX-6Sy>GfQdbfsj!XFpsMYSTtg(gqTN;f+Jd6+QTF2w(_PMquy&G` z|D`7iBPss=v-+B)69zQ0S-BvY9u}A)B}-t`>fdkF$&gNA*l1C_;iIt)!)`B z?Z(Bx1NQ=LLCHja<`9&1FsMi9*1X8{?@<(9OsQP!5@EsFY*5Y>LI z`ZIH3mtYk2M!g{3SAB;Q1$7&Rp^9$YLJ3zOsmO;sw+(Eokqqk)zxfc3ml=cRc4sf}D``mE-`VIex7-_i}@UwW!HF}|G%UL@zw{!+eAUI!0C zs=&+H2-k*4H62$lBxvC0F&SZDh4J+9sNY>%(?U>JcAu+RD*db1eR-X&T_Z==#iO}$ zISuco*c6*v19y!4GuRYM)=&+8A9(d<&9PsVWRwu7;bp-aaAB;NU$1B!mBJR zTS82sM-rq8$-HiV2gA0oYo`M1mDJaxpN4X|hc8PVcN@T;FE@l>KUFe9e~eZF(UH>v zoBkmiw$AZNO$+c!`>=9#F$$ZWC%0CtvuPCvf-u+g=R9Aw^p5v(wR1bw0=KRv7>K-q}mh{?oWAZlb`YZt{+$=e4*g29!=FgL(s^Z{S-6rAk8 zkKo#e6`m6PQxK`nvJkV%`HO~|xP_M>scJD993);JRITUuTL=o?f>qq4hS)$1tE(@K zBnPjba9nr?ai=1ze%%ad`> zOPIUgRxpLK^WDb;s_G_Yp2e*+q`pX`FH$O6@@Y*r2%uL zyDp+MXT(|A1igr%hodfL4-$L<)B+TI(d>F>GK95|J=li)o#sw>+eWRrXDkL$#0*n; zfPG>Qrm8yU_B9LdV}Q$6o<)cMjh|B+thPWp_Qlk(HG&vG#A1;e5G_0lYibh82xY!f zpv_-+5ui)r@(&v|q&5ycOZ?8Ibpg;^G)kQkC8RboO$0R{a%o{>AM1?weeavJZgB~J z;$rJMv71{NT1HUL^tlR<`lX4WPqCiFpe_3Lo`1Vj(`k?#$!X7lvt&FXwlR$U0@E1o zv7q>yymVehWhpy=uoo6RV{#$o?GDhab*x|Ub-dnH3!DWy`gAt-iboEAuUN)0lXP5z+!+n!1ht1Xx6{`DwnuO9nQl$yX7&xo6wP6q!$-swtBL~ED%MDuZ+$I79lRyl-l?2KtWQf?0 zCd~qZDV76dclWS+vPjh2Q%ofGH`E-CEE*^5>R3#m1a^p^=MG5ffwTChHDvI>n@w=! z{&Wr41q;;yzd8wIMMI8a_JdeWX`9BMSUVbRoiGYY4G(lMNF|33{7URmCMm>+TCQ|e@CWv@2H#-F_12@!A8-`A{!a!8?wN~;a zj1|<$47S4QH7R#Jo{W+C9v`PQ+s4y01K$U_d%^0u#Y_APK!7#$a$8vthd#9^iTDQo zrZg@uyfoL;=bRj+jE~J80F}ZK)-2I_IdSoCsb%5?e60=d(>0=oYmR?Abr(ECa)#V9 zdxgJHg#(f$OXOuMBIs)fSr~%_GWkmU&4}FY5E0jqBQ7~7isQu6A|X^9RgLgix)f{ObrUu%?-%tZEvF2Y4G1+8V*)!hUdl?19(uWnY$hG zf~sFkE37DWFYG<2h;3~Bym_d^V%gCxI6o_(b%tZ&OV{yX&K0oNaEotUP81$A3q+k{ zZmtofUNV;~jDex4d_9g(nE%YujgeOTOz(AzxaKB7y8DXiX z5{3sEjeNy<4zSpza>mHaTIDd>2t)96&u=y?h+t zhHu~w$RG+m+QM&hHD_WZ78x`k!JR$V5#kEQch$Amlib|b`tquU19pNhPD3V^5jED% z6R2>y-<)k2)fBw%nsig>gul4kx|Zyn`ozBMjw^QM_OJmTx$mZBQGI0ua(-5?H%|i( zO%fknfc?_@_Ox0pjEqY^xt-iPZ+3o0g+ujM8y(}kowk7UH-p-GiJxy`^y3ciPReEqg|2?T~ z402jp3wVO>g-ELRfin<#S}g)i&edWGQcA-CiG=}wCUO8J#)%x1NdW>jP>lnj zCrp%Kdq^qJXNL<|+7OdAK^-1w!R9_HIEZE!L)+vJO27k`m}5ijXy!J+_T2e&iX+u@ zDQN0E%}7WF93gc2FK*q0Oyyg`ckgkdxUAiZVOBnV)iY5!*c&$4LZF1-zeG z)fx6fHhSv9k8`9e#w8d1r%eG@hup$=H5szlG&FoFjkk8({bM zf9$rH$NhLnGtb7?sNE#c6WX7&{h$%(wev5GStpo$9R=&f5lfmF1;xKRs#1DiN&Wsi z-@B@+5=1(uy=1;z6mpBUUxpX`8^k`3iK6@2=NKTDJ62WK+z#%hvzLdo%C!%f35mpz z_u-si4EinO97RxW7sT^#Y;}ezg~?esb7t6l2IP{l)>@W#&Ow(hKW%P!^H{KsC!H%K zYMr+Kv7{b$hh$sJ%}u1hW(=3tP5+D7OCofeLn8hB@Z!x)B$yE!+SJE|s(9f0=F9-M zxq}H&WjmXkTpuOHf5&GKSw2f48K!=3_zIRLTICz7X~25coL!a4n%y*XnGd;_3+9N= zo~!+A0@7t@K!%bTWYb}Ct`0|@(l{)bnTakD*FE6TXJH`QjLZp$A;r6*NRSfpzV$(# zz$;68x)45Y*K^a8QB7zx=(h1e3sG(Qx1yGzYdos+Ti}@XPASunC#BUe?CKRnT>&MU z%?FhLzno(H`?Q~8ot?k}5`jd${lbn3NjfPQk4l7J_`x(1^aNf;1QQ%c z()ZVu(TJjle#U8?q30U=6U>pU)_uGm^Ap<^vS$Vnvj_-hhl1SH)kfzt8xqskAaw}t zW%aqQAZ5B1?tg}^AFr)g@js(eK=_WxAbeeeQ;yO@^{m-WA?Oo4lb5t(-gm3e#{k{m zTEWY??s;;rcj7)X^`0Gf^u*DcdaA4IJ0+M$d>9_mx@q@#5Tx z4=;LXQyTQbn4=qOS8D!@i|AevkrSvyw{IPR3?kt8TTmS1n2Ld_={r>w4l^_UmO;fh zxM}u*oEopTK-odzIq{z%a%14UtD+6!LHv{FOb_3sV%l>IIH!Em$*_|%8O{5=n(l7% zs-zd2ihKOov(H&Sw#1kDA!yGzb@iPgnpu(?s*UNS7mI#d$FY!fe215`myC$Gk8}kM zy(>FD&t*{^Op`AE&c9n5x>Sem7|;c4guNh;Gtg!)t7X|$7k%HI@4LHo4B`JJ;JN4K z;N|i0u17Bvfo#2?3CBS3z!aU_-{@XF`3dH6GNB75q0OKPQ60hN(FGbjHv34pSlx6Z z;~isg6628VWx8uLkt&yMnnvy$jM=6TLH}Ky;a#5T&g5-W@Zp83`*$8#huuGm&Ouq* zY`mDaX;R3eFwG!p8|F_6g`%&$dRAaDUsZgbin5SiLbaSfyF}!EfXS1LlR@j~w>9{8 zOIMk56Zbm`rN)3@P!p_l)&X!DX|5lOpV!CLmeH}Q0XDLrZGk@&TYEkMD=nP({hnjG z1V(Jtj(yK{8Vx1AL)GZ=2o`9#+l`$k#b>&Q&B1+e+ug9rvLM*CqgVxtGkEK>D= z>#%}^1~u|qQPs3%5kG(EbDFkdiguA~=_oa1T(42uPzq-~f8r=ra%}fN$y1uhzO;Jd zd&{Pbq<8EZsNRBCC8EDBF9y{rC$rtQzrvc*9Q$Mmg8f5!loC6DelGpXyvq}SMgrj+ zL{R>a%t(B^48aCmDDcmET|Rql7~iEjPj=t)rRAY`(dH7hGuM6M&R0%!o8Y(1dF7A5 zNM@$5n@`Qjo9GqI6{S%7l!aSl|TZb;8kmfe7HQZ0`L z_kt3mGRu;EdaF>D#e`dKN;UFqf{ND3v-}7(Cy_}CRTS=ZZoY7&==-4wpUXJ5B z7FLKl7Upr$=Q+-ZF2h@#0b?k%7_)Jv5)fF9lX4c~)8iJL_&sfK%k=;~jT>A@Ar@RH*F(YRJUxPvadsS}p$KZ$+L1z#4?SJd zQK09G*U_S`O?Xg(PLq2Ua<8WF&JkRglwPY+lQGjzv9Yvl*APq#Ih<2r%>}|VHqK}& zaMoRiwNB2$O#61CmdGV8t`H?I?sVIo=vgJIA@&CcOHW8Caa~;9&!>_&Sv<_k=fOK- z?aCdEPO|LrNt0#|P#~ICz%A4iH~;+m*2W47xuIJ~=x@uDNu3G{<*;E5kCKoyTbYoO zn1qBnK;5y#M0q-X-!r$Icm^KojtY(@pvb3H$Iri1=&VuPo(qF5l86)S-jK0Qk~ zlzEEg7L73?r17xd=*amTc=j=|bHnzrCVv&YR6azOq0=-f7w&9 zJ_+B1hPygjMeb}9nulr|ih9hQ69)kP%-Eak@fTg#@YAB3K(8QT_P3Rjg@j8QL74+9H7_?2;}pkbFw`{e z)KJK`$xXAFXAGnudIA?+JT*6U^WS^P=Xu5n)bC z@5zCE7gv(Mf-|Kq>zj*`>P<}QpvfZ&;p@4iqSr% z5y4DcBDoThB%RpmFCQhk>?uf;LRZA&WS6hvp29ow7ti*@Rbn&s+QM6YTj{+j@;U-v z{WPw%sgp#{5r13ht}E@@B21aD8WBd}%W2i}&HEzmelB#L(gbY5IjZ}4XA%h*O4R5* z!N|#AbS~RdQB08YeQ-HVFhl#`^{4)Ul^y2iLhT>>9jlf*W-{ghcZNnIg zn*gE@1ek_G_S;UurTDb_*s+T)-5rnP|UTGArib6$hNMrAmO$J5p|EATYNsY0b5hVDu&lAGWU$9l1plr;e z#|l063)@Jaf`6GTtg-;x;1a4Jf$*#g1L5FFHfI4Lo02Eo{mv5NOJO2Z8l~v`opJLU z`dDgya#GM12CMA7>fJjUxjbJP$R#yM zSf@W-v_$1n^#VyG;$Dj*0xvJ{1YwRajS$5W{)_z4)|S#Aius;3#nUVBCaZ+rhMA>cnfpvp-6+w=2OGc;&G!Z5 znryCI=qMxF3&G(&(V!57%s) z6W3}Nbj1q2Djz0I9U~y8!TEC>AHjDI@SS?UvCIc=Eu8SQn*p5wH`j`K``J^NY?RVu zF-w0bI5-S`@4tIJ#;!z)*`$1gh#3|>Aw`hxE(ol^7NJKB1OMy*Av{?jWX9q&P(siL~sXkIv!pHyj~4 z#^7c^-r#p5$ThzH{cn$ZfB##rF@CzTU#%5P3R?xZwa()rxJ<z^8~qg-sfk!{0E@4rz(rznB)e_^@0? z6s*zk%P6FHf+OcwRE;j2RcNZ&jaWtF$mfRE_$<)YP4`cDna)Y%~mO8mWI3ot-v z+Ywg#2v=2vpem!i&3=Uz==r;G`J06w{FRg_JZQh zgiNrPSylI1{ZLxL@t+p_pWfc#0CW(blA{Lc+eMz%K=ZTTX$O~>T!mz zd-L&*ZRe9+dCQ+Ij~3SlFNMmXrm`lQ;u??8f%<|L7mLP^{d0si0O;h(Ea-7-@=59O zou8w}sk(^NvCB>+p6#OAB8<6n`<#q<@)V0P-^nxPJHRa_;@Qy|b9O-Sd-~~VA|85J z!Ijb zEVSb##>We^QHviXh8Pi)zB?{HCtbwC$9R5&rAaKIz!MCpI>DLZ^p+MRF$ZTn2F2g;S*3;qED5s36-%@j{~<)U8+0iUU1I$4 zb`ip&fKDI6-mB&=V$yx^%zf#?hP?Tf!UlbT{>gd!RMx;_%zc)V6^V(^a#Ge{8b50D zwRtGwvWB|x*Q3k*ksq}{y{l`EHqQ~V=K=YU(IgzqvYRUC9Gnp=(K&F?5Yj;%vZ$dH zor8%R)#t#)GNE&@pzAz$unVgpG3D%Rad+x!HDdYbFG=U%!078793VZNgAOEGP0=~n zK%%|?GL#9OgII3VbPf>o;b46PJ_%FGd>V)B_}h7-cHG?!w%&loA>WG4htW7VSbG`= z2Wd~^pd*bYQZx=W(x@+x4rM~)kRZLi)_B$bfg^_A7@7u}*eP%~afc#*P9D-z71DN# z?f4;6a3EcdOu>QJlPTnHcV!AX#Aq@_reH&i`U2umCS(etGry+=S2)ZffkOAL7tWIE z3n>w%AP;v~AILBT4z^2B95}#wiUSAOH0z919O%HJaTLXY4J_&lU_+Tu99YxsUbS#A z*?7Dv!)vdaqnDpy#(~MF-W{M4w|#|rSAhbRE`Xvkllh6)IQ1^JbMy?Gde3$&kirU3 zuf0KYahlx$$fwyIfKpF+9#h+i2XUI9c>P%Jgx zQ=XBSvIB=<;5;UX!4Em!*FLczT_z8y_V}iMx`y`FItSa^ZExJ0Gk4JSIrIDj7-!C= zIJk-H_g{pwJ_U}*Q%1#NS4o1HFzf_M7)0u+4y$u0%&KwqqGHrJYKn`?rhRrrb` z%Z3<}L8+V27uQl2E7TVhyy)7UVfXsSgaZFko}e^g2J#cpfnuOFp@-^S%_5vkdf+(1 zW~SGLew%3C!VrRekm?cU6P`z^ZYk0SeV?7B!6wUD8XoA5AuK@EJBHv<^^PHURJ}R| zP$LK}2Fgr2GhRy#A(SygNVyM|ZX%D1PGmGUcbQrqj^GYf_a>elq&(u;LCPbZb)*!| z0_3udl)_rX`hs{CUG|8Abqm7TLMrs|S#W{y(Nc2R8+!r8ffPQp2PibXi@ z<_YKBig4bYlWGbw? zgz)x-TSDW}WQzF~jNM`9%_=hNg?xjQAa6LpF)_eJkoLRYnjoQzZ?HVTXXut%)ME$A zWiZYT$PVM2znd}6Y#V%8c-AT~k|LvgmkgTW!kjIKT z2zjii3K6x6!it(8QGJCK6);gf11GSe*&(p=dkv_X_qTBVttQI9m=$$k^jT2{NRJiO zfkdk*tf&nn>MN|M1QPXxzbDo*$oU!+!w{x~l#ab0r9=e>P4L?*vNcw$DWg_iJ2vn} zwSnCY?%(;=>%R{}jyjNg=%qlpx9)CL^&1>m7fkfRCUJJ2=-xiw@*NCsSF z<&jQih#jBr)?s4jY*{tYT77sqOsIpW$Aso@XG|zt-*i6e3!DzxM`1#3JW*fZ8Oj6` zYL3L89LPSay|67Z)l^fjh2j!8PX|Je^K>BeI8VJxqP-N((}ocB1%#nYaGpt*%zIhS zG>fJFkQ|z^|Gb%!G7^%*I8q~JRFKk^dAI0faWwwY9TraeQPWuZZd39IPzj`^gbOz1 zh)aQf|U2n%vGQ*1_8?BFLJT)%@qHYkk5 zLA>Uj9ksvg>g99@2bB>{N}->eM3VoKGJMfT#W#!}U1SbUZkJBo*?|niCaz1Nu%JV# zb8Kxk^ z%jX;T0bIl#6DUStE4b92w~$I*#7`u5t&WIb@}&u&%rt>`Ej58qCb(;BQiK0@zWcsY zF#~taL8}%tM*n>v7jQaA+mbcTr{n7q4;dTJ~Mk^75oI@Zi*?Vdx7*t*kq6&2pDa|n)!-&A#l+XymsCa!b(hW zFy@(+5qLe{#`h<-9q4^xJO2Qe*w(>E!wB$EmLayqItC%(CHN@g;MWwk2j6@B+h7Ka zI;jq6OqN=kkeeI3EL<2^Y6r&!SnB+fU6$Ix(PODq9KkvZ9I4DCC*w8FQVSgE863x1 zfDT%6O>X;SlSXXv>% z*X~%J$F)0_mvZfF*|%?yHQ>pm2=A=i{0XPElPZb zQa#=|bEA4$KE+zk-If5=RlI#M^w*uY1wk zeiU!>=pE5zGcJ#doj2y1IE+SzV)##y6%3% zifY{dGDQR(+O@}{)sQf+JHFt7a{kD7e=x;b|KHx>POy8P6+I+X?--0n)jJlGQuRE( z_knIQ)KCglZyF8N7wkePW9$OTYIdVXd_L&n%)a0PR^wkTu(Zdy{1E3b({OqNJ0hop z7$~aoEtnGp2s?*V9acma`az#OLd1qjypA>cdi zg6rw^T{QC%X*==R^mf7g(FT`|VZVPt@5*TI=Z@|FuG;?27LRLPEr9-Fse{uEe5r%e z5j?4by10QrM0Ny}S(6~u7abv#v5tT;zQXy?y~dU>gqy+n1i1xcfD>AV>?8?CZ*73v z-Qd{_s&$eD^22Bu985hegM+B2WzZ2t6De8-8&T93h=wwuW$=f#5X`vWE%G)OR*(Lo8lLERJe$kWUpO{coQ0SP zG`t06s=(kYYbY>uD@3Cy3Jlu{QD0bLC=&_{YkiG4_jw${@=>~&JD@E=Zs8#2$u07? zy9w!aywEs`+``5S^#xv`Ovo)Pyx?M<#S7H5Hr6-Sx7myiw{r)>hl}{`Kkh&`_wOK__^m74zmD)L1!0t#EMmOIxqoq50ZoC~J&&F4 z`A+Yi%{Gte@15N|829f$=W+iIa31%s1BX^pxPKcs)E8Ydl(DXfGQs^v9)=hhr~o?C z3vBkmX!|7yxNebm)~cVm;CMS;uDx7q!c&E7hr}m z1}4flm=v57p2Yoc(F?ia?BJ_jWB<-+`yXO5jv7c6bAhWf=AVub5X_Mr+wa)u3upD> z3r!h-Y66?v%mg3x1WKkM`T^;Zy(T z3MlJ?lar&9N3RdwKKk$P*O$Y!vx84(dk4>tP7Xr7mBz}izdqeqUH|phRZ(G9(0P7# za8li{N_VYda=;*S`S-tl{reFPmv09D;z^tjobSN(CkM6f*j)5GTI@U6YtxRWcw?NH zjCx3@2TlKYF!__spwH76H$($yW*V&j$1j~*=jv(i#7chF*zJXRtp7PYZY$qE4zk)jBqBuKfJ{WuIf#^NLf`coDfaQ?2#Mz727|AO4d{mEb-2ZWO3-#|Q z+@&r^=G!<%kh|Uhk$@)u>(SNS-Rdu%~ zbn+NZ1H<1cvG8y3-YuSDU*Tp`ZT7A3h+cO@A=Jia+p?Qrl1WPhW z^JYv3^~D$x$~es{P3LgRC)dwGgogSiReA?69a^`_($Y>UQ@hV4cSH z2v`p*hk(_w+Q$-1usV^>P>)urzF>7i8Dn)&W@()&%`yd27=wtt04)G#jlip}7Rd)= zY5?-dCi(r$0h_#TA%CxBKMYZMz$z3umuGrc?yFt4fMFtsx{0*bc~WHe-2MI>t!E+* zN9&o0!_gWhf`*YCt=*mXQD2xyC}Spqvbu>pEBtxx8aMsBs}W}LB5+gp_V#)ZQwNlx z;boTZ)xgIWoITGaP#t0z&}*mm``)qr#(nu+4`i3$^5&L z=j1rkUrjhpdRTOfZa1?WC$BgU$65TY#c|G1s&kxduzlIixBUG%&ir#dj?;N7hvO88 zM2@p5IZkSKgX63qnQ@%NaF*ut;+GBBNgKwJa-7flx7VW|!5?I#g|vBFwz!Vl5nYzv z8@t>k+QDrZoTr1R%X#MSXPhV71fQngTe(EH1*T{~3)6Usah?KG)Z&hw=ivK=AY+IyIiBLkBd(CiA*?@y*JxZCcN_80gI3e$qYH#Y zE@z%tywCdNYubyEa*FkL ze36)mAc$=Xud{znA^W))1b5tWJ)gc(eDCs|VbeGG*$;yexpL$8;M*NmgxCFUND~x) z2+k4{3i$~|C*>qBylF3ke;f&Rk=kM~8HKYR=BV~Z-t57XY9rnD4tIdv^9=tX324X0 zJp$S>a*u#kt(+Q4A)rk=r~2ZwK9mUpIx%$$Ejx3~hI=BMw|k@OYaH|zsp@aK@O;Go zA#7~pYj-?AI(ym|+|*11=R6@q042=8U*H8E45v3n`~d7Ksf==CkiE}-ZnoVtf3b}F zbkQf{Ll)OQem=;CqenM&m)frND;xio=4r8_S?t6dTs?-+1(x>AOAU=GdRda#wS@!TJ%^GctlsnrxV-Zo*>SJ-$lRnv2g z6RXZ^2go-DkRk`S2js&L^bT&t7-zc09y@Q@N+^2a7W>Y?4UMEw^fqp&uTb<7H`KFm zJ8^IeD?vX5bEjH${iWgM9T>KK);@0tjJ4W7XdZ>}w+#UG6~w*pEP2z)=cAI@kL z=@HsRSSiXf3Iu7Tp*|a|P-ZI-vcn6A^VxEua`&y)AWKjivGp8;H?^>RGr{2OTEuuP*ain_L;_Z`*zS{q7H|x0!gi+ySd9n9o_-O z{n>s8Tc7QB&`sHXw&UJ6h$(6q(GxS&6xA2#hBCqS3v~Ap&j>t33?2 zt6QCh($pG*b3p$A<^TZ}pyvgh1zFEfCN4Lp$5cPC@pJkCs?PNTC|g87;M_i^ejs^@ zr61VH>jyRfWAu^Um{UKH{%WEhpobOufsL$wfLEMHKT!Oxr5~7~RM!viT;uJ0%imu= zkbkbHA8_8v(GLhjqJCgQ>IbOZ4gEj`$xJ_hBCa2Rh=BP>BM@Xs{}l=C(lPmM+2odh zKm~4>O}EDmaLW)7IFPymg8coSfItQHs4YN6kp*hJ!~_HaRMg_2mf`^t!%waXI&C&8 z7csDIyW_h7_+@0y9bJFru_w;*xWA{%JTbWk^3pW}dB{A?fCIRr8BhU7GfB;W2{>x= zSveGO%|IRSdiIJx@|c0Dm7u}nI{)3xha|imfIPz6K`14>xnt--`k|$$hgwA;yiJg( zzBsH7WrFawa02aHe2M9CtpN4H18PYeuY;M-@j9q^9Ix83z{N_`P-cy#R9~PL${1=W zvpL>8YHzgeRn4DEjkWEV#WCkY+2* zc8jevLFhWe;&R-uozCVHy7>pVgszSw8ciW|Z5&Zw;26pnjws`6mmzY0jK+U9zD}>P zL+qZ%G;Fo7=S6M^rX=~~jHsVg*td8pWpKC-><=ID+UvVMhwEUTa=6^zbKjU2(P9dR zYh#Z30`pMDFh|*6L*j!H&JG12BxkeiY$yOFyvx$NR@3$JDPgDo`;@R_3mzq`_J3+A zg%UPxf$DQxh-K^m9`(fDrAi-9K4eIIG9G-7q)~D1R7;4$V0!7`{YuBX$}Vy01-4;FeF1wYW3Z!)ckja?s8x7q z|EtJog#0A8w>W?bDV=VSp`_*?8a1?}@a5^YosRyohI-9yJKuKqciVRQvQL`kAK;Rv zI;dy_g*3H6MSTHkC=;Zqwf5exjuK3_ZEeDpv3RSAdkH*hzO73h)l$ChdrN_oNfps} zvAfhl@7T(m+K8A=kv$a4FHKBY@3%=Il&%sgFbJ!vBe_xI*zxA)}Y z$1|iggwE>e%KF;I7Dnt|WBhbwzfILSU5c_r=u+qQIqA~mDHdJY%G0GS02}Gj)|_-{ z`l|_DN)IdO(pHu(NJ$z~#fCAsAX70m zPsij>OE*Wa6G@q7JMDYbP_{Rj3)lzGP?pZ3=3)0(RL5u>7F9JGw47v7O`}0=zL5z< zX@5si-Dpl`Nv4BaG+d~W?iWapM>io4b(9IiVS03Vhv0NK{Vq~)!c-nX;p>xb`-P0szxR zYS_^j9@{X!;b{09mJQ_%6jlcsE2Ir3g%wUry4Qi$uY6CXXSHyh&e|;q&)IB~i+H-{ zS?)tJ$&Qg0I|I{$@tO0kt%OS!9*hU+?KLi0SSmH2HNF+sk^wH3u|sn_!y>$%=cgwS zpBj2QO`i4qg@@jf=w$~;pI&wboRnVXE{v}XAkk`q{Xm%sWW1IF8Oj)tDC2Y0Ki(dm zo?$o8*j-=$ZEFXfGPEf`lB(#gKpy3<5Uk-%mHBseRN9-2du#BGxT8>*k1@_roYcu< zI>XM8N(fAe8e~j(>-Eg#Kp-3o=_@l zKEc{R@Z|X}{#k{-xvmi94)#kR%AF4H6Xg!@9#O6Xk0w)yavONm7r=)y20Y3*@UOGMC}WlCeMR&bUXo$0cGkbt%4WE_kM4R-6?Gi znup1+Ru0SaqjrqKXUrX=@ECL5D9}O*V{RJ->Ic1R>Zf+vSP5hN{*IR{B2a*n>3fPf~67!aUwkVbpu*Vx;AG(X9HS>5PE zWoCUX0+{{p#adISZh-Y=RafV)G80L$nxK5|e)%xbv^*_$*wPqspT%;Q8;D)UOcT)= zEhmyQT5d~@Q8H+`FFE=v$wONtIoe{$%ZO&#)U5-NC5k#v$o3pD&Do?VkDwuWTI?Uq zh5sl{T>lfh z6E!|0dBl6csUi9l2z8`!d0J7M>GTfIqBmgRa-!&yaXHbG<8q=X!{xT32EGCQ_7yb% zPTpVPa^ofU{TN9+nz$U!@Q`K^j`wx)_&M@(yccJD?OA1_zIbE0UwXEIIN-v2b(F5P3=j2n0GIiPpE8x2iOb3l{x-tbF$CWG^8(GZPIRNE#)CjxPXPBdZ+-4sd2Mfuaw=Azg9 zvzVc)=ZoCeXXwf41%_^|x+lFjdHg?^dOKq1L`criiI9w;+d^X042JFtiT(Y!rY>1q74 zDKD6JR1*im;Y8mZFmEC*XWm3y#=LEDF=Phw_QgeiC2nX_%v*_jJ&>0=fgT0&7WA1d zmJ!PQdwLFo#^Nv0Y^!?`iH!W;MC9#pZlW#c+(cW(xlL_lqzumOYAgK}-wJJtb1QA% zgsLi1s24c_CH)xQ<+Iz{yx4b$dnrnVDx|GIc5;fN$h4_`uN!BBE+6^31KC7%4zh{r z3}oA?V}uNl?W>OdO7+mDK(?`2yZPP)*~`@)%Kq$U)BUTP@1Nh4X~2t!VIvQCTKVsc zx2%iufxl~hO|)kGnke1m*HON!i{KP62q#9w;Mcy==&zIxZHixe?^md^ofhdwOQfI3 zLi}{{OjP0IIeh~fux-yk41&@HZQgq?$g|cZv?=oJ>4Jdmq%MG>=Caw3ADXDMogR`+ zICT2XEjTn$tI46`a{}Sj-^_ij)RN)y)G9uUIW+o5BnE1J>pg1X$LhqRkaG|11ve)}o?cEb7f1rR~bX zi=$P3dOI3_0t0|jDAUr)yiM*IFkuc{=4EMRC?j zC-ic3x=HKwy?m^EFUN6BjvttGJ13TDAsDeFG7@5`Ry#Rpfsxb1(v=at<2SX?6cfw3 zj9*+YCAt`Age%|AyXj9wQH!7|wB$1c$)NIPN@xdw@SX z1amLM!x(B=1X!@f^h1=^hCd?139>R9X@1+{>!geoAup_~#Yp z95bGpWr62Yp|7QfZZ;bdxZR!wGSlU2vTo-gcGR))%8)$Rn9 z{>l#?+9E$V+Tz1d$x5eU=k-G;;nbwqOQWhb4nB%;hs;6?RHI(VNv6L@J+0OgKuILEH}BiXv+{8;M=zf^jB69+7$Tq9>74=={X&?bLtU%dJskS zoR>SU-J)uu8%NbdH-@Th-7rW7s`hn5f2CV!Q>ePGTj%$O$zPC>Ync7*vqxm^kW-1D zebMRsIZr!tCuwFR_br}B;MmIW4N3tQ%|jfByYHoh#W<1gBnE7i}HEJs5=t`w~Vli_`p}EOlD< zpUo#XNOqKr3M8AX*E=BDM0HNGiRz4G+p1&843h1uj{ZvZ(56VXQvG_FJyzv*BwLR> ziQ5NqC$$HL#pjXx2r!%IygisrW9&|irb+7ydcbFxUj zvwp{FW+5*#>y+(-4MV?yq~oAYAZc50 z43mMReZkRR2_D)Ml6Gfl>1=Xl>5tZOT0VcbUU-@4!jW|P1{6u#x?m6tB<<^h{z{k7 zrjWF!3y^ejMuDT6tLMRKltvLqnoOw;LZj1nZh@qUS`0~>YRS;VYDt?5!t&2zB#r(G zNvmbE$Yord&KeHzHY2V#c=)O^gLt)>t>$prMNqT!6}WV|Qn-Yg6tQeTqKTS}L=!EW zBszwg4rT#~)>@*?)iVDqCed0;^z)!5fi2*n*33JK-z^XmO(x!xW1@*r#M^Vp9dvm!ecq8ci{jK6asWQlQuJ8yzpVzi@7_C@3GJzSyQT34no8&#fWWS~l4H}qG!g*JsM8&kOvRa+m(^WiXigx3@^Jd{1CjqzgjPSTKrZ@_IjndC6j zofze=!dc$Kz9D)mL7**}&AZ{2WL4+fGJS)HTgLV4e{`lWM#$inzA2!;GKJ8lxTQOV zew5^uBH3}x1or}Bbr8u|?;89#F`qG$g4 zZB+)!V3MxX(qDPiLz`lf-h>5{Oludm2UeozI14y?fA6giJCA0M;S`HJ9qQ!?upgAN zzSXhD$jYKu{NUoaN5ZcWUaH4``>c1&nIxH?j7ggF6Vz6VhBj~SEd7;ep-nMKH9!CP z;^z9w3y{s0i!rN-oYwlg+B_|*M{UntBWx)0Hm)j`YUxqn*xyT zlq?+!E`Y3-(^?VZ^q>Fqm{_6<2axF-PylJ`f<2D`AbnlXU+EIs6oB+}0f0c)=7V*V`z(X zM4JyE(_+=V>a|E$GQ*xs8i_8PG?MwnNTWT!3}-pWp|6YKF3VzhjAtrVDzNS;f=a2i*3H%?JbUVk2 zX(1R^Br+1LXv&C@i)BQUH{J4&BCM#U8+z5r)Q{ukeW>~@{%OQkB6~N&JK?HcbP$3G z%!5SUb9lAGhpQ=y_lA?doe%d&>@2l(&QWf5Uduf+9WuQqs=bZEZAnYV`A`}$r77qOx84d87k%XMVn{# z(qH*~LtEtcMO(~d4ZpA0SyUJu27P<0C~R8qFO7#2kZXFtdOJt1L~)K>iQ){o+KOYa z4CLx7j{ZvV(58^9_s9ZrP3!lqIbTl?;)1WQn55f5u0%H;9ZGa#$ko;jgJd9AUpMqu zx`j4{TpKgBfn0$lvJc30u+Coa438pN=I7b-;#h)Y$;^iGR1r`62OL1EXk)za=JeZJLOpJ3zB!*6#+*5|b&G8jtjxv+YvW0+s#{N1*S_ zXIQUy7H5GjABMZm4@{)vG?Yl!q@ht(8-!!pa|`2S&`@7G^jC8$v?&^@-bv0^BfNhj z+rb!{oIGF6JR9QW8i|XBa<($mxX*h{W_P;CZF=nt59WC7EFY0ukK!b9a)_F~0fnfx zoEQWHqWW^8zmhYwDTwOLL_pM}E}(qXQdx_E@1N)>&h(IMl2|x>=N1r^sKp?vsg?|l z0a0DGq`!i1p-n+lHTgm=wHc-rlJDb9LzPJ_-{9RyP5r<_kz1nJ2Dp?c#&Ic8jNwvS zu`5F{w0TcD;8LwvXj8b)DkP0Tb!~mujsHTp;~ociTVTzP#)l9`{f3bU#S&)A?!dsC(9VvqHkeVJK2{ zHNBk=@@JjYxU8SBeltU-{H?xfmH>)3>tu+Xm-E3x_F*>vtx8)l8Y~BRnht-<=6mC8 zc^i(3;dJ}{{qkY5KffKy4~nu_Ae_`&t()Pbr=JFSrF#r{(Y6WXC6~8^yp6kfkoPnV zc~3FDbI5zz67n{`wE=nMW(DLuO+wzdV;jg@e6I(2E0yZuq|srfug=mV|8(w~zAxv# zZ?sB$+x)AlaMDxFeP!ew?pumdabGmW-1qd85<1osIEE6pf_OsC#=w<|^r1%n z##igV$xE4R>U|XLyWSAJcR`kkB~Y@QzCI$$ktJN)mhk#aSpu3oOUOTpqEnS6pqKxo zc>YH|E0!~47Ob8Ui6_KO+Ni#lkE5mj2WCM#2i$3UV1S!g69L?6txf+io5-}PEwr4qP;M*_baJ#SVM*<>dwK1U0o5s>#8AE7O_|}`rz_)2Z z!#>7{n2qa`mV1NUCif+(aePZAF~hg^B*q{a_}14A{grN^P2t`5Oy;XC5dcKG$)S-NUG|8iHWSY}_8dCE{^@OJ-n`-^PsT z$`(&X%HX%Ic+y`%iO{C_t$w{)7l%JMIPCU1&pQ{Z#W+-#1!!81rz=^9Yp39f>Uu_6z^Y&BHUl~GZQ=HhH z#ie({<;3PJ?!`M~r0q=)$=0G~iFBM36X_Tywx#>dkPdCGbopnESK5ovrZ};h!xaGz zWr`L^jvq?jpn4CEzlraBGP6o3qV#NfGX7Xwv1?(rMAza)^a@A1k>;p4EuH-?IZ?vN z@O!+ZO>pEo3T_Y2_*6C-PKeV#j1pp7NDP8Oh4&ZEmymRh1LOrwew+Pk zHJ<0;@*QzD+(>;m7y+u$AeGmf`Al4j^F?#-Tjm@YWfR0G&G)6@*KE3v@9B5Dzsmod zo#p@4+wUIibr1Kty>oSymH2pM4sBmhLfrM%yO% znOxoyKR52;;pek7em=vz&++qFOZ?pY)&_o-n-%!^EQz1vj&1OB@x2~?u2ibw=flVq z{nc4|HT+uhtrPVA)hM&iM9*D7g!;Of;roIek3?%cjP!&y>b!@-)sriomkc z7`+r&EV%kc@34Tg50#F5=8q69g;Erb0r~?!v~SOaUh^?1Q^Zs^v-m8+v6DdHtV% z|F^_9=Qu=ymqP_!gfUAHv;T*nWy=@`!>SzAMj(uu@O%R;MoeEE1P zxR8SJ=>_=Ow2QNDe9o%eJN>b>c!`~GKA*lp#OLF>>OVTGGX~Az^S+&+zp|6irue+x zBVW!QU<{ofRugfRyc>sO8P~(yHm*M|mf1t+^UEKuum9BairkKo9VVQwAHH8K_M@#Z zYW1e=;%95M|AnpgI|#%k7Qo>?v4BP(wgLC;l>)j+81~NZgE&|H}aU@os|1nl}?<50xcf&JSkc#pPuN=O=Dc ze@)I;fSN~ixR?+3%F?ip)i*BoM;YD(Ci{!W{rt=K=h^$`z5UzqbP&HPG&xDA{{#=U`zL%AsyOW>GIFwQv%9;fs+GjF^EnH0Az_*6T7{^9p2LM za=w}lR?B-l+W$)$QNv^bM@KzHPJX-^oFfz0MTGB5$CR70yRwMdS%UPaK0ReOk(-|- zNZ){-C9vhjmd-d!;LDBvYV8kg>MVgbQ*o9cxs(ESYh7?|fatQpxq23%!i*c4q3ZR*^Bt4!&=a3jdgHT19_W#qtF0HW3gX90*>{44-b zi=729=MmVxRts(3vMK$QTA@vy1yIXol^C!*(;+@dxE#l~@NpKtSR4@$JQRGtxs!7| z56Lt`;TU;s8mn5*1R4Qs8#9wJqJt-&5FkqP69PnOme$)=+JHeaFs{-D4$Awh69VqM z^g&Gnxuas!Co%WDe+1n_;|A27Uf&M8N4IgfJ9;I-yL?`dcl@&*dXK-k&ffF;%kLczN^rrO~woe=on>0q}Ln>I6R8#D2w8crt=#H>M1p{<1WL zH`ECf9_v8c}6VDsUOFsqZ8z;7Uz31Yj zsAc{r8GS9_KWD7Y!7Ze+UaZ8aQOg1P^wV6uUKi)Ndg?rvw7>86yc1nF#3;Y78)aE& znOfkku|N9(g!@x#Y=Zx2*Z#9(jWSjW{U@wZ`p5ggysfzoNt+irPUJg3uj^OO8WNq& zKEI%vZZW|(m9N;yyGdaGP8DpRW|al@g(G1YFAbX$B8DrJJ6nc5KG+p{y1RI@w3VLqC&mlAIQ8-)whG}b zEheGDxbT?8ho4kc~aV% zDX-DELoCF5GOWaMDr`Of#pm^w0@~--M#kfE?4xC5XA|4S1r<~78qDG4A2if%-&Qip zvRU5=zyb2-ZDzgr+z-q}mXEL1SUf{`u~x~J&(c(vGEdLfD}1p&AJ|Pve#<4X#kpUq z#15vng=T~@-pfD@%8Myk zZu_e6R&~o??BZ2n_*LrM_z4EOINMg@4xg(t4lE1Sn1xg!`N}eOh*_s_kHr7vEx8%# z6@K5V8=QW3%rj7rrA2RAZmImzb(%vrJw0Nfm!DH9EyJ&oknf>1e8q%YGFx_$8u@~o z5IKkc^_NRK%^O)b4Ylo?z%-fvjrfbWpqZgoo5_*-cp1Wu+9@5UrRVpRjigH{IX-K* z5=J4r+~hGLQ;)6WS|RAKjHEG;l12tWYm^ngfN2YXjiQYnTxYhWm%N@VMyi{H%7Px3 z`bV``QI$lU27vkzD)@7BqE6fxHXWrC%?>kxR>M5q2dbUFV^4wOyVLWhe7LcD?hM4c z=hLBG-HoA1lB5mCq+FoMx(IS#wf3(ccUS+AK4CU!5<)+5(*I|lAu!nY>*o!PWzD{y&n|fFT8WD*GQyGA1DV;H#;`lNJX7X2SOXs%pS8WpIg!3$DIdOmJf^|XCYDjI7wP0Q58P0^LLR+;uRvtj7 z2QG@1_KB`Fz=vkWU6->vj-Yb4BtpJ>)76H8`fvd#JyBs#Zr;tLc!5H%rJb#dLN6#t z9&9}?27{p~rb$#dKlqFaV;BDPLAmaEa4f{)_YY0418V%9^+&PsG_;-`JsLs!4znJe02+6fiI%2l0cD^ zLk(xwU3W5DVUj#2iq$t})3xWByNiQ+5i?Gbq~Muh$0AmVv3(oBlqaEt|4Dy(Gdg|2 zP%JsP$1Tp}n7zoo9a%j0+DcYGglGe&`PRj9@MRh1!C0FK=A2NpeSo5V0#WQYT(H79 zyrTB0hD)AJQ+?C3Mdw@_Sv`IJPg?-6gTMNUeWdo#w+J5}NSuAA9e%4&mg zNV2UalVDCz)@7HQ?8HGb=utHl@)~B>pPG7^QdKiCAU(?Y} z^0+^=nvG~DW<5U`F!y5)YnQI11(Z}1gQZAlup5bvTcV*PLEdL0sIaT^{J9=J8FjU2 z+Kb_Z(&<2g;kSn6s$BA0#2b(m0{*ha7g0)m3qV z9{Zr0*|$jYnOn-Cbs=eTDDqK#PraAh0XNG}4};cDFEpV3?Ap+Z{`>tg&uHpzf)uuu zuTM87JQ>VX=zN9f@h|A#QOR34J)I+z5oLM-Ppjn}1E%we$@^5C{vmuaivdv2ck+j3 z=_ZH&7gMs*oRAUDE2c?-t)EvzUP&Hn_O;9WfM%|z$BZ{tQxhRzhRy1Pk^Sd&mD$Ew zmfQTY@{K-!hTrv)K22y#EuvD7x&qh-ph}@zp{j7srz1`%4K?m&N<53iuT}ogCV2FM z|19|L_m>x^>QZKe0M$toMYO$o=k9NqQLBQ()D}Q`7B&i5XM4&-@@BePN1zLcy|BBX z1CT9ex)~8)E^Ky7idO2Kef`$&C!n`T@q<4O3!3R+Jb}13glC80w0D8ESDf#?yOs^> zm~x#R%PsaFBTrUt!5EtmQLo;3$DC#PCO3XRHHhfY93~#5B%9ccZjZ&*?UPJ|Mvd|z z^|G8PHPK6IarFs%gKhAO*5G?sgm><4{t|J)_}D?*UDXwhcbF3IPtYx#3YI?-jpDjP z5B(fxE4t}=O)C>W8VwD?+7DH1?2_a)E)@d$DAhL_1}!@5DI!Yjl#xtuD?_URfgD<$ z)XGM`*>=B>*!1!+1042|#3ceHj>P1Y2cT??H*hkVYCEuEVBL*#T_u98As!&j@Bc~D zcik6jf>lR)y$z#7OhN1;#FH0b39@fL-aD0A}n z#l@?+H|%x*>&J&=#^hXY)8evkl{qm28E0(0oT^brFJyrjV{#kZ`<|{9^S3XHQ;Xax zh}Sz$sC7QRh|Vj4;g+L!qc2cOamJ5+Y+0elb0(y}nNr#aKJJQfk??A&%Yj*omt(#x z0?_=}QC7h@U|40A{T+oth;3)_GVi(x2=l1mcC6QlHl=41Vky-S3u# zxWm(}n(R~nkH?lo#$-)z)6lwNw&0w3-NUV99_cP0M1Ea+bT;f^T{4S8ZEQ9vhxVuq ziNcU{7PIfkCUYk+qkDsNWv!fD#bssMhq*T)-Z85hf*yjyxg@{jsBHQ}=RJ4iS8~;Z zI&>+l-KZIa)cd=App$b+n#%o{16UoYRi;b{FPuWL%A_ocw72eS)|E{t^pdbf57S(w zLcdH_nPJQRnP~k`9=>H*75n|Fc(nN8t{-SXg7S#i!T51?rjS9Qo^88|Yv3K+A<*h*?>pa#1cGBX9W0)xQMqrQzP>`p7 zL}C;E$FBlE*e#Y{4aG>DizjN-+aR zmusiZGuT1J%yS!xn|>8V*a{x|YAdqOb3l^ITcQXZgZ|ly3CnAy9RdL{v!(er1?VwJ zy2g^{ry%%me~%qwFt9Ut$Q8GPuuRlw2(Uviy4Yp@dHwyhp2;qgr4*6GzWXqmsXF@C zsw%P#t8nA8!1?u4bI=HIp5_~*bf8m0M&<+*;mpdS`YX|lwu0a(-c_j0@WHY~yzLGs zMSlc3${qLcSsGrTMurjd-a2D^Rwerow@z|Mu{E*)EYsXKGekod#uY;modzl}XhPJ| z#@8i~JgLZTaWpdYK#O~$m9`_DW07w%KQ8-Obg83KU3bS>36gSH_kpuyCJI<&dU)T$ z`B;-UKJ>ee_fMY+til4ZST>EDIA$|DiYH1{X!QQCmJdd8AK=L1V(Vtnq|ro(fK|oz zT@x&(k(4CoWMf0Fu*XiiX(VfLG;smJSG0g-l;W<`_3(X@JaQdXQ6q>fec^|w*Bs~< z(h*l+_OOuXhgztU6B@~CzZU2li|R8M+}puB*Eu-XLsd+c75LGTV3Fr}3zqS?w2<}r zuD%d=3lqbQeW-TaH;Avrw(0?Mex*S&FE+3s$YCS4@~q#cDwTJ7JNeiMuCDuT6b zh^k=yVYgJVeymH(;fdKCk=|ex)816zRi+7ut%0?YQL|mFfR{iQrKrHE$OyTy(5yY`Edx3;X+6Gd4+lZl`w^=i)6sjn?vOt@; zx%5o$T`JvN|F}YYDDKpVN7S)KoHMtJLVqMa+^eU%zAr7lM;p{scQ-1 zj|<3wDMtqi#g1)4=g0X7HFtXu4+Il1%TiGpEg_h&lL5hmos5Gtw%m$hIxmauoeT&e z{AOw?zmadI&s}};wot{Fzn4vq6s+R5WXeCqTqWG2n!ts1>{Zxjrtv@eQJXsj=D#DNe= zWH%c-vb7yZ(ALuWM+|CO&giOFr0Or#3GZCN>7!@vTcvR|3$9)w`KaU@A{yf3_ z`Gcb3XJ6u9Y32SEqE>6)Zxxa;M`f!`i58O5B~i{YdSJ_PTdl{^wHM~OKX-^_NN$x^ zl(m7A@5ihgg7&Ic{XI;Q>#1K;t`Cf=*qr#Ln~%A;+liD$CgTt%e)CBOa2XV)dig1z zQ*0L$N4TS$$TU}pDp8`a2!ynHumb`2_bo|`$sXQCVY#^;FoH>INVQeXRpF6X1-Tdu zvPZbo*+2qW9tHCODDBXB4H|t+MzwE}3-Soduq-Lt1GL#;?2APn;lYK#3P5O*l>|~* z4em^Fri2)ee+`7Hch&XIoQRaFCLDLM6~!6Pq*q9$sUlnYGJtH69QMOO#4V5+yRmUk z9K-?n#SzRge@-HjRiOP)zAiLPg$3z&%I}nIEk{LZyen@+(ILhhFGaxqK<`BXGmd3IC@7t|+DrHn{9~j86ApzwgWoH18{?uU6V|q~C69^zbgCSumRCQgiOF?X^let+Vczr!r=3+% zE64@5Unnb4keB3|?QvFE631QeUchVFK%*>ogY^b*ZT56x-)5RFi#sNa%A1}f=)N}Q z#*__ScP5p2_KJSVX?GC{U`IxO|m6^w=E^;0YieW6Ufrykxrj@w428bLwc${W^dv_1og0cNmrZ z?Oj-ijLxW5fd5As+V%XMqxBZSLlTj&1^DZmvkM?Do z#i*3EM|Eeb$>?xe*Pr&p>c{Le3Es<_blIwUXhp^Cc6dda-fD1C5j9#IU5R3FQXFbF zgdTW0lFP!9W=oxJ6C`oCm$h>6>iEKcHYxV5i;FC!5dfn4i`9m-e@-2{9X@v;O|H0e z1;%x2Beo-VTphEmYO{=xkJ%(Ej7ZP4=N0@vLtp4!KSzI#&f3F?Uo$CW0+u{}67E!F zXxiGAXKCY#Z=O!lpK;mCN)Cx^)+)#Z!n!kNB?e5#eq!`jrNYp#{eYC*Q+buIcc9p~ z)bWH6%lA#7`bejOiaFfprHe?0zn_0=@$AW0_-!tdXL8Kzx zt&6>w*>Yl9oy2*rA8r1&Amw9R>R+kV80%2eLn4t9V?xzlicgFR8^n2<$z*!#0%q|{ z8-KFG^^JEe>`CV4^|p6Il&U@<>Q-pch?kQbQH^Q-G-)=6Y?KDD zasy4g^&;?TQdfSIVe1tOY_>|wIJdYUB0kwSJS*S0*+nd8O}sU)KjuV&S0{w!oc%B!}$ zIW^N6r(bl=*W;!|(_?+vk6i_C`UXXF+27O0+;zPIfdq>V1NZkE{k=mIi=K$Q;1pcrMcI`bZPDhoMaCzHi;Xskhp?0} zRnrVV-mjJe6JIAo8e#6%xPRgo`cXLzuZd#CvhA`iPzYDoubk^M@7DLE5XSF)13ShC z>N&$c_clH8$Z2@m4sNsS9o8mK-tCwWEIafHMdNx;Q}!a}^2ksQ*_N1x?(C^tqZw94 z;9llNl?95RuqZMmJ3G&dL2M7prEd8>cYAxI^67GJR8iOlL^WnFLfi$qk1xWds;a|+ z3kQp|1)isp5Ga_I8sqn$^UIx_O~}vvdx4E#m0LOM%nXNHR<;!5+fT$Q( zVMAEDBF-kroOA)rczI8_bPj7`_)I8~T}v3X_4)0M;WHf2!}AP3I&~RxiH9@Hp@+ed zUEzB`1LR?FD^BG4+60EK^2V~}f1Q^!eMXXg3T#Inbf0%5PLVp5OT-S?u;g+dZ~NC z60`EtLoF1yN^Sb1BC^Trz2lyJ$`77^@;Z*f+({@MuXQcO+WPBOO+_D?YY$c4f|?YU zhZ$@3@!X(BFguQU60d|xD{mQuc<9z4#A94wS0aCMO0V_;^jol{gI$nIUWGZMmW9*< z1~Nwa*w+M^E;3;)oZD*nl`GdR$@um1>O6702SOi8M=gA-)5=$VJV1oe z^A?TdepL=dLbYnG8qk1GOXOTRv6(czJEaPtG(V|gz}T+Mkj@mpIe6UB!ZXM5(|o_d z*pf<0Z$?iZS^t6wx=dNBuV>TK+bz2F>OYz;B2?i^qh2J1@>(`x^x`YvmSIDS;DtwC z-WU8}d>D`U5x4^@dA}e76CS0n|KylT;8zs3gF_6~Rn4fF>d*Be^^JoK?CIw?pgoeX zken8><~+Ily{Afa=fx0##q_e?SG(C0h&`4Ic9p&^($H8g7N2P5>?IBR>=D z6}eDbXkW0C!U~ZT{PEQ<5AC*01FYf;6fM7%>bY!go0aqG!DUCjMlKR}NOIDR8P#bE z21PWoaMO!8iKeew&MhO}$sM{=mBOwg3Q0>AFMH2;3Svo@_-vz1KMBjxpiN6H?WYY= z^D%7hRU?7RpI=>-Hqk2BF$`J!S6lo`(jhjh^1`?#Xbyo4BcqnEf{ZLqXN5XrAGEPVAro*~oy{rp-9mmClq=rsfee8_nJ<{`N=D}T<(T$Hg!)$ zPme$hCGK@?0vABCxF)Og#02!JOBg7PAe&SFR^$6|%~c38-K>&2k1Ya$+nLMh64F#v z^b8^LX5{NFaVc&fb$0m=@TFYQ!TVebBWCld}_;pntZ1Y6IC?cl7hk)2>v?c5pAiC>mpG??6+q z#mB8ysnMm(UT~X@pe17b&UPMWW2l^7f<|%^F|n1d(SCuQ5Fqgwqgz`~*T`janvp*y zlL6-IS%fXRvIvp!7MP!$^5V~uw;(;Js(e6T9D|{9$c>@6$_f=OyFiU^ZEW)CH#1Sw z`@T0cqRZ-RVxA0M*Q60Itd=J<$kg>KPj7E!Kh5~QXI&FyQp34hPLwkapvwIZW1Jxv zL!}5TmfirUj7*5_^+dRUbQx|(==@v0F;E4#|MmHIHf(;pQ%uB;zw{!P5rZoO*)w@d z$8SjdgM31p$MBcf#u(p2|A)%IllorIUcZQjNRg}NmIET*B6be8m@;uk6BOor&sQ{J zpLIxN-B{Fd8xmPZ@i|9g7Q~+6r%&ixu@S4oGYZ}U7AipcE!pRDV}ivT)rwgGfO`)K zWG(F(Jur?BO}?it)y#@)G2y+?pAq^7-pLg>AM9OS5l0GQ&{nGxyO1o8^*u?N*wEr1 z213sJCB}=a$*Spx2kL23gZw@6h!(S8$pdL=3{UD6)!QKi)UEqB#7ITkO)_%Mnzu5^ zS66nKwva;b8IA<@6n$hXXWMf`khzg-R6LHB6;92!v^#S;Qm$zO7%ZLeMz<^K^3%3I zrc^F4#lXIo`#^7gqN7$9Q-y!HsZS0y$Ei%<*Hmr}y~Yv6?5uH~);s5YGd~ zjbf^}$7RRfz84_(D+qX|Nu7ZT7euv%fQFWPIYJrCamKjA1Y(4?oa@2idFmX8Ii`fk zjx(Fq#1kh?fjR!5eG2AytqQ(NK+o1#q}b8-_X6${y!7?bDG_ zfj*{$W zZSS;`$c7KNzN{Q?U1gj^t#QqX`RC<^6EktomcoqGsOQ(79cg_&G(LTtesX;w@I9|app zMLV?o+-vJ3-kZZz^Z}<+7!Hzaj$D8=G#EgjvDuqG}O+oq@LqvV3Oie2} z_;K^uiHq%ucE`?S7RM4hs+4EF*^124e71lUg>Y8P8LXYo%79ZEU5SkVhyO**CCYYU z*$OK#Ne=fY3K;v?PDQF-L&`Rmr=YG6D?(EVfHEs&gdc0IU6I#?;_Xr;-_t!OM8P&t zIe|JjLpi)EYRzR6mpM-vV}V;G&3eEzD>Q)?rD0J0VOK?$tW^~;@aIqUNBL#BW}Q<+ zvu4ws(U%{7eoSur;t~EMNZhSKU&`9Jc&^@_uCg)-NdJ&J9;Y`rl8JG|jLXOIc;rq; zgJ0o)ty~3jnCkgQhYm;IofUzGqg!6fPgza1DC*^zG1J*H>Z({xd(W{fgU(V-+4m*FY8XOZzzb5X<^?36XGwv8vOWMa(ON{pR|C6xh6@0dTqbW!m(rC?r9dP zn*?tz=$EBUcep+zM8Dm7F>mrUf6@D``9y9}?9Tq-PaVsz{w%7B=f9-4XrjN1(Qhl38 zlkF{Lx5_sV(=u}5so&QQF)h)0GAeABrXkJ{(-Pe^TR7NWBF}cYFR%|WE${`nrIYPR zcLK&69}(3t&e(_e`;S>_Blc%uqU`vdn%oQA_-%8aALi!c=9B(uY`^%v)w89`bXMTc zxoR0Ogz*qNQ%~l#O?GrJcGPPK;teaMoxHt=uK$C956!arjo4NpC^<>Cp>v_KO|~KH zyD*9Epe2&8Q9~xy3=TaXTm>>jHi1=fEVEQW&J9i;n$P#Q>-F6oMmuzn!96A?xg*yuC2PvrT+-Yx=|SjCY(*zHD91u4y7Yns~4o)wTJWoEZG z6Xl!b&w+VqlQDkdfyDs!%>rjsQ~G7CAi{44_@edLqx6&M?C?91TNwvC+LM>BwqO9I zpW>?dd2WeihJZGrxkgg^juhSc4Y0obSzl!@9pDrVrmrl-N(uMlx%U%_1=Bdv$G>ZO zO9C+}v&PJC+Hr{eWxpSNGsI-^;KoYoZqJGV+_Fv5vzVNIsnYtcNk~DXhm}Q9uzG0b zf&G_l`f>!ub{Ny2>!l`k5#TvK3>SR%e3{s&F2t#?D#pgFXL~#a-QZeg)K`&!K?g)7TBk`P)%T6 z91H9gx?fz2$RUM6NRksFtFkpS3a%9>h6m=}pc z9d(SD^p3K(!*_{tC3Vi@M+v;^%3~THZcMMw*;$B&eI4L~WY_gXQ)#B@oHSx)9LgwA zrmH2bm9JUi@kW^Dg%E{j!qp>+j@wlrUk86uHAN#{#x#}I7-z27%B22iH6<$xSb{KG zjJbnPP=@=C#z86@QeFwBQ~~Flp-os*q~mIeBjF80 zGAoIHwQYw~?`P=xEl|v|PSXAIQtR$cYu~|A^45O)JA1lVgp&;`j{2YKa766+0$@5m z8udWyu68kuAGae9psHNgilQ2oRxZ>zNR=NIRfwE2Lx=%5cai%JAd# zqU-lprSMK0B+^=8fzj~K;~#XShq8}uLh^h^e(C-k1K}+=3Fzo;oTO;`IlF^30A^B2 zor&=9bseEUD0j9qBHlw+q*S%-r0JUHdxP@41K~2RBjNwmEXYJZb{F@b3U6^JFMGZ= zbLLMO`)rmHA7oYRktE)&{X>E~+bwVW#k8A^G8;}&3JZf+jh|~2<8KJ)cZ}cT`+Jo= z!Y6)kR^N6xfdIcG4YF(WFZtrQgrvUwfAR?VJ%|{v;I^@s1RG4#@f0*LhfO3$yb3PyKB;1 zO#sQpjD~v|kIdmm`w`s%WdbUG$FBt-(Z-hH&`f%Sis$s6g-&YXrNt%K7)CA;W+?o^ zxSftZg#5Ueev{63nqP&bBSbf53{<7rZ8s)2YMmV}v?v=G3nTxUHJJ?51!%UKHxJod z`WQr=HLGwuyG8qgXi*o$*eoL=CT!MTThJfSu0(|Pt!$WvW;~X(dpuwZ7Sn% zx+dL{+WE)m(L6*t`=xiAWH%E`m7s~D~k;DIK$!?Nm&|awV!#vhBS7U6-i$C)Zc8_J8M}iLjH*&!lb1oG5q^` zV&_JQV`~V?p)65zQacG)I(QA}OgGwxlVLv%-%z@F?F%nWaSNL6;yn)8wo3}?UELir z5MOb*55%~1`I)kfu@^U3r+a~Sf9Duyfp-VmKy#x0YIkekaJ>IgeR~qKO|2eBs^^~+ z`u9VgCh^)5KOXmIuA$_{rMC;m=}jMG2?@gc>Va|JcCLW2GU`rVo_TJn`S_*)O@wd~&jf3k{ z_?K5rO|=)L92!%X)O6hqs+uF1KAekos6Y0l)`vszWJM=NOcE;Thm(t>YIsoMDht2p z*GRsb8$eaBE<3omC=w~f3R)(`c0t9Hl%t497WV3470ft8v(gyY73f1XV&$}!iDzW_ z1kU_A#(U>z8p9tx{wJ(z zAwMcjDSyx+gpsNh*V0TLAdFNkM5S#oW}Twz$HO#y_E+iB)csz|^r0Yb5#oSV8$ukg zDu@FX^8lfw>Pt`kphXBJX&cC>7(WyQFS2d%R&QC&_MZivwYlIkMA`DovC=A9ELZ=Fmp+y<3Z~Mq1%_v*y47Z~ks?UauES z?yq^d(#f9t7H#sWUf_Egxv=aiU7E(aIl*S4sN;j#A)z%qCjJ80&6ay`v+N1kC%;zz z@99hwIc@08^%2dj=nHNU&AkUGIQ9?ca6C;f-6laCryoIkmPRLnk$LtRtb~Ao>B&$4 zAYh5Tz~Yk55Y5gY0}3LN(Lhh1Dl}b)2gGzI$umyygLRWVGi^Yk4PKU-H8TTyIkGj% z9R72;WQpGTv^jOP0awM>lA(8YEVCk52Y#IKL>HWw_ZqRjk@r7V9@%o#+&;G_(dh^A zgGX>Y*9aj*vyrik&&;$@!6~Wm$@5kB@31aUFxOvaFOp`Nh5gy71HCJiX6veOQPs18 z8SyOLpDPr*7IbbirFDjoWP_^o3?C(_EMOr_^XXIHY$-FQq?k;o7`nX;*aRhp%M}aS zz7q?2S_TB9$X8(R*A&fyaEVn?1aP(#!X;7a#mXlI3e>8LVntKc(igq~B=)To?nPPQ z;Q4SMH^**egEwP8fsy6>;o)}*q=3B(dG4lJcd>xEr>pDTv_z)^`DlyR{it1I=zS_1 zcl>#R20ERTL1({({Xg0IWML+D(;3qsHKhBfP<{xQOLQ%09I;$TJ>V6rF@9 zO;E<1?@owrl7TnF7gwiiHBu4l6d<8ImhWQP`IC4v45&3W!I=WbH_wQKltF=rwrmsS zXyeY0+AZfOd3!08yA?eIEn76Z0h5(KnFM{avJy}*dp6i)r7lNv-tam?7D0ZiqnYt6_%Vvo;rDtm8rK_; zEd2g*n6_`1(8=ETwdpSlkBnT8R|58gZ@IFpw|O-zqH{y00Dy&+%1^rrd;eseo9 zjQA@@r6P;~5$IAmo_`-5t9jSXBBYB(0+z)Iww=JX?-7Ylue zp*0`;w1qD%G=`x=jd#p^sKa1=e9&7#FwPj|_z6BV9bYvMgI3YSh0F?#L9(B0NJrde zq}Nosq1sWJZjy=Nhl@cGlxDMLO2}X`>V&PqmZ})HL@Ac7PwU*$iU@|gDKku6!iQ$~ z69rxY?n+kZ`nWA^1F~!kSVh^!4(pb%m{}QxqH%XGlF*BXGq^C}VTNm?NJpKWc?#`4Ee*D&x<5)4U z1%tpX`K;mEhhy7qu)9rRUz*=oC(&j~?L?6{4fw5W?4&y%JVa$w?YTR4kBxTUspS}5 z9OOPc!JG2YWDb~ulyp0PdN7@)9ljDg*8nVk6Nz%n8Bj)mz?k_nyO1+OQ@NNg{^_U= zUARquU^bIiCCX3NB-Bh{caNq*j!Yj(Y_cVC#@92!3v{m`Eh2qt*gl2hD$F{stmt`IH;M{ssreiGj7hb%;&R^Bw2Sl?XVtj+bk$hT z6qa;t#Tc)88x&IL)YRF%LZdBsxhpVV^no;VUmp0w+GjUh=L1P+-Zs3&)JMbk#}b)Y zXJAKfmVpvrR@hkgClu!{N7Q(XwzjMOOl+-(s*@J`klFd@YL*AL8IxXtLPkga)8}RV zOhTgPnMdgxJCZB*eiXSe-tB2IFmaDV(;TfZkHfsc9lcWk83Hhe)DCt)sU@5A76AvL zjL)_f9lvT;2^Ep^%kigeggqL0!KugCBssZVbmNca`gQ*hhlyVl3vN?|6%Cl#tY@2- zKH_8k8Rty554g?Xf)aiq38ptgK<_f|!9@e=pq01I!BjE9^CcfP3O0vm0YqTUk`XZG z=w>3$63JrELgX~ag1q+bgz^WA3a>yxw72whE|=SNFD%X2!yVP7*o=U_;!p0f?IAE% zpSRuGpTd5M?cnKd5qY0x-CW3$qF|q@q$iMU5!K#1an2|qc{v`GpxZ|l$8idtt`idV zn-?3R2`Q%Db%BU6!m4DbLVmjigaN;~JgE3{rGH;&H@%&)aF-e$mC1pjJ|*9jp}$)# zGbBIC2W?wy~I8on&m?m1Uu538iBWs6F+^WjIL+`5+fvYDa&?8+Kw z9T~As;|Rz#L_!(-VyxvkwxuB@Id-o8&`F(EC^Ip29d5Q(`blA}Kfh79O;ZP9E)Cmydbpst2^DPdy+fd zDm5B)SB?0%Lxs2uM5aTdKB@DdTYdNe`+sfEt7?dR)xT!5!Y)dNdK7_}{5Z~Lwk*c4i@2yLpAW6cF zCXYyJddQOl28q?)j~3X5oAKUN2id4?zfR#leNjvPnQ!O=_wY1pLSB}R-j63ShpN8( z4w8qRH7fa+oMIVitNnxUUY2s2ya%^n;Jnwp`lQ}b;-qE4bhxc>My;Nree9jvtNIy1 zb*Dj$DcZX_9T29%Dxld2Sc(qZHkHu9KRXoE)E^9%3uz_xihM4`w&_m&XHTjo<-d<4 zh{xaXe1!dm{1}4nfNJ$wk!eV|92=z}sRvsQ+4`_#^;`0_FEedwbwzVg4o?G}DH5lv zpW;@(zbj_MOs3o$9KXQK@)8G1;`09H@?O`h?u@gE=ySb^C#H#LL7kPT*H_0a_q^Yb z5VdA-7h(hR8H>p}KyttZZ+u;|NPLf_&>n^Ji)X?C4WV-%&c9Nx?bkg!g4!OCoZ9ay zs@XC zCYq-=)Y%5?5x=Tz?SFV$;^xC0hb@oW(6kS8OByrOuzB1m#+S$mXbjzctTuG#4BgJS zHbkK|bkArt3p^h-;}q;K2ABU^E2C_;;bCDPIxB~q?C6P-pFls9-frc6mz|WLade%+ zr)6PZJ5uHtMF$~tNW%R7WIK%Im_n5fA4}P@8%kJr7`Se^<*@BEP=@=~{2T^(`C-_^ z);5FQ(Ml){xM%ZXcA(eh^j55Z^uzhYmJ|^y)uV}V8IxX;&qk;Hxm;tfbOcmLzm zhK)Rq-pr3)1}vIRHS0jY_Sg`nSRK%bnH&K`SXW|btLzIFEjTu*!!uEa3>)4#TEO`bnCi}V0TApj0Q7C z@g(T|bje~$gcwk8$dbezZ{dgSNnlS_e%e0SjsQc7`m?#ub(lL|dB5e|(Uxpn#q*?N zrDB9TenpElerLQXQ7z`HlT0P93B^Li$hU-RBIdHpYH%}UHqRm*HWKHTGQw?OkW>s~ zUGi^geZz=FI4s5o-71;s_FXR3*6N|mUqod-WV=-@w8_KXh7lF*QmbWKk}TPGf1doD z=fXcXcCUo}AXg1jjnP}eqeZjXiz@mIzsb|X(^GKp-7Yf`JC}V(874Nxr>1~PYSjs! z{#!Ca`;n@|P|x1&oOvT7-wnn&`RHQV)+5WB((f2r1tcFrrA<3-5_{oAr?p4Z;8oe6 zp)^L(rp6rgha^7Cu zi|^=4s2O<9J3q{RsMwU|S>_B%I9*4ccP`_dx%>vKI!m@PZvzw(yV~AlskH$hp;y&P zq6wEyjllC$z~pOZ0h1tzuR~j&=0n**{+&0|Vir#rGU z4c~oiDxl6l5Vj(vV>+-WwSG{CqXN39R>2nUt`L=IS- ztjS!|(h&3%wMCvGD2!ROc+R6zow6)67-9l z@m#TmSQrsz>-sACu7de-S6(42umb3QooW4Ts54@czZW;=GoUUHLoM{cy9NQG?T~8f z2r%W9LLF|!g%ftM6VBU;eqld--Xy-is+G=bcRVOw0T75610{_$4%e1b6om+`YIJheB~H&OguZ%lq*gZ?@H?jBYLs5nbjEv>B6|qgp(?8vqQ*-4D|DukLvIrh2A9`Pn{=3q7 zuSvxpg;$y+VVlOx5mKTv~-2-p@ zp>w0L6%?P;>napQz>PWh#>s3Ri6yqe+=J1L0PI zkb|VFa6)_-nbDLJ1+;7ZugQYU%`GXEBpu^Prb)zri?Q*sX^j}2@%ZtM7=tmsq7>*` zfeOI_jRT1>GMtPruG2Uu(%>Rpa5Vx0bch%_@=Fji0*(D_A-^xb(WQ)Pv43K1Frv|c zAE$TMNOu^wu18B;dFE@d1uoDev2Nork57)K)vdqCH5kq7vgu;zTC~F`hjAF?VBP){ zzJE5(!jNJ3Gxd7tMKgWvZBKk$CYXPG-w$L{fOf6=lrUcAA&EA{4@@D8Jq9VH)bMLcj zO!N3MQjLj84BU20!Vl0_@I*OOM9=b2IqPW8t7*d$kG4j7WLr%LT(p7Iz;6QdB{@g% zXXJr&TN!XQvknPq%(Bfs2D@fgMc>{tN#Pl;p(&4O{(>`-H!bdH9_2JXGv)HO$mh@mpYZ>S_Ol?R1p+zepS7ku-U|5F>DS z;9m9+{5X34|0EqX|4-7f9LNHFVIO#jSf5#_W+j6|YQ3(fd&7zJxpFz2%gVjpV3#9K z;ak{KTpJi& zq;cJ&fubXs8zIht3&-GGlgBFz3dj9Z6b}M+U732|Fan{H=Lzy>L#D+=yj}Bx<)87k z1)i}Wa6FTzdKD|7YXJabISuU==|r)qU^$IxZn(y-Oyu`c#}}fndA(e40Ix|F0t3Be z?JnAgY$5Aa!AmT`sOc*{>AJxDV`Xyc`z_mduu*MoNlma$YSF5Jxjb8P_7Vnrs!qLn z%KQnN{pP^6Th9=iJ!Pm+bsi`i|CWiLepSQX-XStD?iV(Qf`4Ik5Rjd1)9kQ0cpWe` zQxn*?-{dd+gBF44LZ};c>d+A!USJ1S|8ptCuHjhlV5CY@6kiKfXYg-xrDeyv&y~QI ztAw5T7hhZs2nm=XL^o3b6Jm&omjWvcY{fH(z#jy|*qUjYUEKRO%o~d3CK&O~W+&py zWU@ZYR!pBH>k1%+|L=X=&bH{TplM7}XatsQi`u13& zW>uf!?>V@=dj(SynvN7plZ6d2@7a8N`m@gg`Xi}f3LtKjHICnNR&^6jVnJ+gfI_hd zYu{_NgZ_yA{xknDF)5WCZ0tVx@E3Ss71-AL-RBKK4WGaWCy&lcKZFr%eRpYPpLNN; zhRwf_uK&Ft#|Vi|vzBHN-M=ggs_Vt^>%>Zykhow>go$B;vWJs-T|+GIxBM?NA-j9w z?#>TJs+=4SbKrP6uys=;(lL6ny4s##YK^sF*VCikRs5U4I$50Q53y%a{rJJD;DGwB zcG`Bmoyp^dMFmBbWVBlF+n#z3an^>Ax!`1M) zsn4_g&@Gr_d`uaZCvNG+xQ~wnOXuhQ%M+=-45E4KJ!*`9+N$59mV+hz8+zq ziGER;2;*xamrsQW!RQp{StTJrs5rg~b!={Q_9LjbA<? zc40lH|3ak78)LHKKInh?N7P9%iTi16t5etC@pu`4W4fd8gsd z#9sb{I`pCG*D`BGFD# z=A#Ib%vJv-6i6K`q4YuO45a5zIN;vI@0W(XOT)UpZ{KY#!1<~XFQu&YN(lUGO+ckQ zgGRUh+LBMwT5JpOFylSi$IEBF7uL*a&5b@@s+|ksp^ApatBuXEHl~gbBHO} z+3+hta+99^>A;CG{jrCeotiO!)=MGU_Wm`))rv2Lln6z-cig z46K9vF>~T`bQo-H4jlk{$^oW~!d^5euu-kNi=s>1hQEW*BEfZ~zBQhem-Rgm?sE z%rq^xge{e~z=FuA=Dd24>_AsqD}mnHP_iQ0@nCaX6F*WBfm?J&b<#j=#QpM=7_kyK zSnLNxJI(3fvxPi8aVF^}KLN^3_)__{Kn=-CypFXe+we^j73a9j&%xYyz_s_b1jU>a zIV8JtS%UR#2nVPCda_!bJV?-+Bl2e~f3F@`U{3z@a6rp!WyOQ5PDh)_k#EAdzU$;L z{|%%Y`>B%Dr^gf@4S$u{iqGs>_>rY!lnF*DR|khgfX-?LlXx_@=gY%)RsNwm!6yJ_R`g>tXJpX44IR^HwB3 zKvzNIa^q9jxy4V9fL53&%ez?la-&~#^D8K6^f$)bcIPnoZyZ}2u=4ArF@$`#Gst7i zTjjs~4V#n45sxUF+8qUXZXq8{jRyC`cU*{m8`B)50YAFqwHh6kN*f!4ka>>F8Ot(8 z9-hmVV9my|4Eag*T4sLPamgCeWL$MnZU z`6e`!GF|@_7i{x6+FVU_>b1YP<~@z}0LkP^0tz49+d72^GRE6f3>cuKjP5*tF*(%L z)%20Z@W1|`oW)lk{Uj%>EWGPHa@bsFq&;dR1o$CBf{0ACaR8Ff|Hgo>W_qmvPgdyMCPR$MXpb*c$kfPjRDXMM|8&98!A%?m;de4Q*FT9D zX9pvp(!7zCdKaEhBK8y^o%)5HJsD-24^|n=O7JVU{##Z{EyP$UGG5nrp#Z?j!d+E5t` zNNmoqZL?QB$fimEbk!pwfTXs-_^Hk)n1mCr49@OR%(ci)jng~{rgQR>*HR)hv@Obl zHSFfTn{2rl&`_x~5Y~k9z0@crGT?z}RQ{*-{xuOzXu#wdLEW5aqf>OZA(6mmnB-^v z6MT-*=L2?4z}}^|*O*Xff@IDuDykP{t8b^!z-26v@!t=AUPC$7*q($dd(3uTc1tnHgYbRFlH@J0jrV|=jsr+e#v^zKG`_w>}ji%7>av@jVrW!!urmy_MEO>vk2fY2e zzBdf4Q5%U$pv1Y=JFv)%)8e#2Lzv&`YuHL61Cwu>9a^`2=^h0k zCv?xgrtFW&g|kvN8$Fbzvi_53pH72W^rj^Q)Kpaf-1cG2v5~$KgW5-)J+;Fz7?EML zavtJtO)oQ;mVi|gdpYH{FB^lco6Z9}zA{=Nl1(ROkCn8dndqS6Ndik*bqj$;O5{oK z5NW>1NCzU)uqLT<(k7GRcG8Ugg#Z*xR-)vm6Cz$X)k7k{Az1Hn5Go~w!WYa+acxu+{e>iii`mJA=_q-$j#Q3o5CjC-hCm$VrS#4;=|&f zo7-*ur`3*Ox9&L4PgxV6TxnFj0PWbIq2H5NjRJ>c=61XrKbR| z$e{B}Zq%--E%)Q9PN-Cqy8CZM7?>DcRaEC~P7Z!~cqyF@Q=>$YTU)EW!$GBFTt-u? z0dc4f!lRvoqX166R+v=7K_X-}5{y=@NTer17E$ z>Xle&sPiG3Lr4(SV;|kOi8zH~~qRF>Max(Ae2BtK-o4J7wuE zhe{a@T~N*sVmd2b+u*+bH8Q7mF1F+;thLba*8QfvONH>&^y@=9a#dg>uEA=yObUP7 zM!?>b>ylI{7@ly(t~)YZwKQvOziB}LE*30PdW{kS0DNCW3CR|UBoq?*H;6xBH)-BG zfjYV?%f*{DP-$U9V*+o(u%j{I7!%3ez~x~g+EmBY2*BZ=larKC3+f5mjSE<{>q6N@Fr~SD@57%24bdeyVy$*DS@1oY?b}%} z@SFGaX_n9eK~{PB-)$3ztL*uw!vxm0w~)+tSEV?wT@(X4Qm>bv`y!SN)UirX>zniI zK@rRPQfmZBq5}d9rcX>J5(5nQM3Ro(sMz(VLXj_t*&a+cR4wUDEicHqlatA9$R2zV-7T`;nWO>)`cs z@FR!HRz^52^s4|fLx?lw8iNbC^b&bx>ac2|8v9kn9Z|Y+ArAC@%_c($6^jn;_C5)Y z=$1$_tuGCZ#m*E%-G9Rh{+JuSY?xhAj03q0raMCXe4~pvZ%LV7Q6U4@46FVnVb%W{ z3h7lT;^*#NgpgxzN%)Fn2twH~isT^7ecirL1~p$X3wG=qa*RRi(E%I$$n?*z&7n7_ zjw#3AC(*ji(JHb3Pn?};|DQNJv*JH-w%}7v=isCfd29GeEQ&;M-;>zSLV$-l#l4Af zOzEh!&otuLAowqJn?)SpA}+Z}x^d;%KW$b!xBMV1bAjKdW1VAw{p2aY%^z&}u-d5@ z8W`rV@ago=S3jP6;iNgk+|!}oAe=4yh)baOo~X|hTS}31!>>*o22Ml2*Ktgo`tn1$ zo>yWf$)17VBnSeh?+UG{wyL@cpx;8$x(ZAv;5!jQMGY_qdo}#>SkL8w3%Ar}5EFO= zhARyu$75oYap@j?WS9UJp7q_Q$s4OBwDs zQg?MALy{dsX!Q+~#Kc^;50jikT0eVz?T_p|J3DZO*>)eId%OI_7Us5#5ct+;zM{d_omW9uZ^{Be3he*V6G0=hk#Q)}%b z{1(uu=BsL;Tvg+jl*%fwSM-V8`xl8x2j}seMVh%uJik+AKbL;fN0+a*=Cc+~U(1eW zEKDT|($a&ZV{rJ{8CZuanlhtwC1YMF?wHtH2Kz~1Cv#F5=r!rZL}o_=@e z%%u|15=U=eJh{6grX#Usz0y!7n$pCTO+NM}fPblN4FlH^f|Lh}pO*;*v0?@j8h0W9 z012I)h-_rCp}Fa9>;d$Xo0nQ}$tkxA1x9PO0Q><02pr@P(g&PIV1jw2sV^^T^;Bn9 zxu|C%e}*y9Qs&w*Na_V8h@h7T#?QZI6w$b5kM+^GG-^ZO2yU6+TNe7M%2%SK6W}U~ z?^GNM&|P)9?s|VP_C)wehk*UmrYDr?Sg3knRT|tHzIlQr-quf`Z2@3HuMFK)l?K<$ zJM^2fJyg zFoiojgMkKuH~@yw6s>ZtN7vuy=G!-4arKtd*Zba6b^DI8*J(7*=zZ*r5U$Hl z0C~4iMuI-Q5Mma(60uFJ5?gEs2@0|OY&^9ze|Wlxd`I2cO?l=BdwDO#U+?3MuDSWc z8>a~xZ4mX_vaRcGXGXB!)7ka7*2B+qs^JQHy|&j2a)1EcQ(-_V=SoUF*HNaW`7ikX zK7;5e*x%v@z_i%CeK0LHKvq8*_CllHGV#GuzSNGzJ$mm^Hikr}zK~~4!v0SC z8UX^0s4$S6AD7k+PDdZ-U6g27%wP|3pe<8oQB}{<2@K6f5$KwnXyM{Pk(wMQG9W?H z#st_O#8+%433-R2*1C(Q6pbo3e2M&_tcWdkbhj*{_%>jD9Rcl(NO7r7I)%KWp8WI)0-TZcYB(GR3q3|^fxXi_`8l{orog2%vf`BB+whdVP9569A~2Ph}n z#AODdrm)A)^bsL7HJSc$jR{*$hBTX@>k44`^C#|fejJEKW7tBehMNV+rQ(qxm1-h- z*KdJ4@DlC7F%T2>eyB_o73%G`xq5kTfx=}6{dAy(yCbrO(oiG0(el8x+{BV((`D5yob`*15( zS!0Sc3lcb$DH}KZ&y)ApygFgwk*n;d*=1=r*)9z4nr5PZS2c2|@oQufb)#Y&1)xLU z6dx1pBe~tn05^cq_+jt&pJeT6%I9~uG?+XhF+PXU`Zg45C|MIIA4llK)DyF^7J^%C z_%Rv<)L-h)nQ<|RMkc20;j><=06jMHbW|w{O$Z}&#>64Y4ETsyE%N4USczH0%uQU9 zB_@8KCPhc+Xu77^x;mejPavho2~e-}@!x}`EMD509}-Dnuc2c9@^`+1=xK)lq)nKhMb%2Q0*J;CJkVH7jYGqnYK zzY-8_dXS-dXe7R!(JyzUG_U)t34`$&Fc{x`0)z1xpZYkFH5Q)T^~N~=BLy;Gq(H`} zAEq!Y@Z12y0^Re;ql!wfPQddoSSP>~)(HqIFDkp=pV`VFIVbOSZ2EJdG&8;$@Ot4Q zV!^JFn&>x#HGMLLpjQa3&3|0+42b1vSa=7rKN>L8Z+RaSq2j`z}`t? z4*mzUC3OAfJ?7X^LVpJn<7{P!JAT(=DlhVayOGUbka<1R7Zc8=I;PS^Onwi)W*l$- z3}1Z8O$=Z152f}0u56^~j6U%g32b6S6}{0D&}5a&rx$V| zw$Ao7a!rm|3vWzeFA!m$E*hY&3SlbFErGy{gU7P8`TqMTntb!hL@)PeftgE`n}N1o zbjqw2cX?f~QYG zvXyN@Gry7h!}d=1-v!c3_yN)t2-(fDfEr^wPBPrCiW-D|Y+9`E4Qs!;O zB@#Lv*V`}^RiB!3u=lI?2~4+yLXh@su!x@^VTW+cdErK!BK)yQ?WLLV+Ip=80pZvX zn=!v--;6GGKcCA%Xn~Rle!)T5{$MK`S6!DTvHgzJ=#xFJdV_PVv?QzsKx4uKA`42f2EOHhEf@Uqyl2zhvu+yBoV@1bnFjR5Xm9|O1z6#GWpE_OtmcqOpK zCyJAe+F5Y=T1a%|1NCBulKB-?ud`D%PSUhG4gEE#Ru$Fc=qN27+78e7G z_T*UjbX_#;mNo0_(9R`{V^R(J(|R^E?_|Jnu>`0%9K{Kx~gq@Vd&sg6q#h8mzD zOygSGx{^Jju)$9m*x=`N#tgsBIPhR>2F zE5Lj&PTGB$@ft!h@Tr+On?VCU`ak(N=?s{tEzN@us2v3bZ&ml`7Kt^tj9IPzs(3bK zT(#cWWr;vnf~eJ&o__o`-4(Ti`t-mrdba;0u$fn>#XfvW4`Cb;5%>6BeJlkpO^@$| zdz>fx+gK*ZpCK* z8{?T{2ANO;Zy;;b?-yz(b-Mc(JX)E=T#9xv-sJU-mM=^71(IP4bn8@-h-R%Hy93yv ze5Rv$f|Vf^W7n4eGMQ6hFFJZ&%pPAg8|wp)D>}KdmLRSakb2NDUYC$P6=Gd*P*f4TnA_y`*eJXWRu#z}`&}c&xm&|x zH2J6EcDy;*PvPc7l5>~Q)z9uPx{}__uO$NZ)I4kR5=IO}KT<`ciV}K+F1ju^GCxv@ z4$Lk(8Vx_Y=u}7ZStZ?~d1-1uCf_EFJU{Hz7`pXpKzUY_*XGA=g>Zj?Svq?S2#lr# z&Mjgv)JK)n5*aX6kM&_i7SsuSdvM4yZ}IIn2-NWq&3-4I08k@7#{cDGgCY6_?Dx|p zQ4L}zv6q6j@ht$qocW=txJ6(rWFNX4}x}@3cj8 z?q`_2GQFN{ePpO<%t~Is)U4}0>#JLk$?MYV?+Y_;pEi;8w_B?=-HBh6kxxG&QTt)H zPFPYN2FW~`3=fvyy)stxBSx6wwhl>Z(|NR%VS*d?AL`!x$Q?x@6tRXW%uQ#r^kS5R#Fj>gJZrs+5)7JvUEX&hx@(k$DuOv|J4z8OPU zY{ytZ(5nsS`07{z+h%6s$LHhM&q8_(8N@0-_WBwxX(6Ai8;#Gz`qN4%DNE;i-PwX& zy7#O{-rWL{OGO|TpJ~pVYd>sC6JFr~`_74z!EUR%s{aS&#IV`cVtoT+Qk^J$1g~e@e37HtRzi@rKW6 zo@d-MXwz6*f`XNrlq44Z&e>-sv zn21?0dE-N*6R^ha+^VX~WW-W;xf~sbZ_SsT6gV_05l88b^OB7WIWq@o+My=41vjws zyVOY%*Y#@Moz3@l=>2ZLIf3;))HyvP<;5%kFa_%CsyP7$O!Z@Z%4~#w7NZd^Z0We- z4$JezjTmP1k4~6+V6TOo*>N~GnNs*uf3a&ec(|$-FRmnHy};8MX**aBSuNm#t19r4 z4DmAqY8unb>-KzxsGw#lK5CPd99)oLb{~`sKTaiBAz+qttQG<6Jt)&B4#mn#N>yF} zcL}NQSLe@#6S{9g6u~+l)R||aA)1D)=D8J=@XSvJ+QAdG>wHbpDr%K}3g?BI4p^z8 zUstR>B#Vn&y3knYqrG4*LmJVFPBI`jdl`*CPB$ZQIeu1E82l{SA}B{6u~gGIP)!*s zJHI);XFF`v=T6&w9!G5-47ie-inGvdlP!N-{vuk2@rzg3`Gw+?G8g}=NXXnhI(hEu zaUVY5B|x+~`mUkaqdP*q7vW@mFfj!rdT zB0)_t*qSE-JB6EO)H(*LzFmC8{4=1TPP5+F%d8O-ss$lJE^X1_0wb#iR>LlzHo)Gs zB0@=FM4Qc~Z^}xNEvWJ}P&C+x?ON$W&EJKlV1xNT9-ghwRg~h2Hzz%EV2G1=wu*!s z&%Dn3DhKN64NiHBD7cRI`EKolb|FXG^W4*t%U?kG3bqM6QPb1*VdTPI(A7WD58o$lc1^=D zh-=BZZGxXnJu+XipT{j9>R*2+n|X@o6*&^ej9zI0?&)JX7ni*2|Kj!5s2BCs$Qjo= zJf*BHH-EnG)D=8_{Wy$>24qqjN<=ZEy=R2D_7Y4&mg(Ov#6fG^z&(_)4VA&URnHr_4_ju(5~Q>&7}=JkSzS8FCJ+@yV@}$mewu`v9O@5u zm3GLSnK53>sJDBBGy{9=L%f!Szk|qI^r|iXHgwuyqKW8NEfV9hv*}bK11Cckh7iWa z7V$3vB$Ob|{#3T4#@&J^dL9x>&>zz=N>&q!0or`QoIk%Pv8U|5T^rX#GNWUjZzxE~wE zy^J2g8|JasZww3n?HZV1!1#aRfA(Ma>#b{pQ|+MCzbGCfJr5w60{1F`&co#ylk~9285=vF=V@nvu&--EmMM{ z)kpZvj5~^{Cz3|s^whRh0|Sx$tx{=NY)VtDFpYIw^>AC&WoF&bZZaHU->8`IOw82eK2^}rK02HXPcBp;8vY+ zSOT5fX7zUO_{{Czp#u8eBv1V*kqrwx#|?0JWe7kI8|+YReRz0R$~wNP8p-oxFhUg` z$u>@kk@3sQtfYPqp4w5u;3Gv6)P*sF$w5|JV`;g4;MhZqP-dwIzcoL0>Dl@yMlW{h zHg*;3-BKCG8Z-%mXgBa>F2_4#Ar6Om%_i@cm4JS{SB#vHa6<4&aY($IK5u6U{6_&V z?r$OKG2bcn9z3ic6pT)a(Vez@?uj!B!Dy`S31YLV<@EkR4 zV4L>SbVJviVrM)%VXZk4LV*oc_rt2%e`&-f++@4LX6s}$OR-x{>#?qy$l7x?Ov=ZHBO@Oy_!F1P0`6IgYoG5k&xCtb=x^VdHA32w z9J()#zjHdvHI8mpt~YsK4#+Sh zK>0=+f>V3WyPezhRrK$;zYYH_+(O~vKMhkX6Pw{YQbP4xUo-3@UjBCtk?RLv5>&f| z+FG9|p%KVuFR!iK(v5FvApN&b=5S}bc!sw1+sF+{Qa|(66e-&fpeBO4^8BB4m*h&=>Z92 z;pfHUVWr?X>ZZ~3m&(Ba;roaFZeq0hq%NCWe@B}y!wt7iU)>HEt{ahd0&+}!#oi}q zx{LY_j&4)6Q#!hczH#YWH_FpJV{hOV87C;9Sy74qBl?B~%_(-79i1G@PRdz;y%o(| za#FvVKR21E@|oRifq1NveP0`4cdcM02CpOLN+=vy@7nz!`;&Kvl+WU)5a1T#z0O7e z)dE(a8SG|c0j+XV=JVFmzV|VIf`dj8`D{P+3}LBIGGX#kN}A*P;5~&n;v3XbewYJ# zW0)Su9`tBjEOZJfR*(vhl?+X3NAFw4OEWsiRg>Tlsc4@87BkC8cMCogKNcUz3af5q zz^<#Jewn4Hkz6^WNlJfqGi#{n1~~-g;U&QqmnnsrnynF+-7`y`5FQJ*KdI2F_@AjSPH3Z$^aU*@alohv- zzdtZHkfPbC%B47k7{D@sGtFoJ{)=qY#CW@^m{UZ+C-&|fM2)3j$1f)w>?sd$7}vKW zrgQ9e4gZ>H2_5;MN^cQq!&lCpyl*sbKjWV}Ee`G7r{qj)uH8RZW6_pf8iPkf!9nTV_Hui?@v*g4icaFda8Ep$% zT)PH``aaf2ZVTrNg09S*I2=9;=c1~Ohs)jP%$yl&tL3r}5K@m66@b;;k9&DjZo&HD z5x5}tOSN|iLXQ4eL265FxyzQnQj&+woEE7$7+Y}S#<|5%O#7n7-NbCJuh-m!#w^u2 ze;Chy<1f?>bx0XHO-ZJPVz(u|%Ufptn=}g|PRAmmr#hD$P#N`;-WLnFkwM7I9i2-?U9>=1^n)(Kt)C_v2F2d8_Y7v*jX}9YJu* z%)tIh?Ho@03K|%jclJzf#|zRsydd9^J<=~GE7oRyH%+Yy?DueF>|3hq^9W#EC85Tg zo>dLc&Ldbzk&=)v@`4ysfoGzZ`2q*yaR2qLy-7=p?cFP;$(-?dP=4e5u)(-s zHA`O{R{SSWC4Y?K58s?^$XE<)b}*oM?B6%@6HEzYrjj}JIIz5>vXl9yS~-;<5f;c^)b zh6g6%@`E48&M<$bPNw)s6D}8q!g5!*-3rr+L18#01k%8(frITN(U!xl7`-G> z=%M38qRf@;w3G_b==H(Iw7-jqDGqkT)!VNIPYs#BMS7oeNhfK)9x$tZc{%Kw+aBE> z<-m6%trsp3p}`+;AAZ@^NPj@R6d9oGrU{B{qdE{L#&>V@lH%4_L!SG0PQFjjY4%X{ z3wb}R9rIVa4`4q9HO0K*WW%Pw$n{0Z$rXomsk8O(XSNPk(UtbsG)<#(=lwm^Fos(vg>+ODnFaP&Y7L2I zGMmv5w?LWJq`In6gt!U?W`wvlvR~yQID8EoxDsO+eC~36t62K^N$=6MCaGqaD4NE= zO-b7zpRpJ#A8KgWXdeg(VF8-*4GC$(^XB{KltGH>Kt>sS?% zN!y)LUG)aI7Bs3;6j+I%K`V#~_Ha1Jc&+dh{amFcsic|7jd1TEACT}A2c%lS>e0qX z+dxL*tM29)tEYcQO5X97(WO%RjlcNND3y(o+?4C>e8^LdXkZx3O}Qp!-ezPcGc~3t zTZ&xkgl2zWa;!RqeJ9Z{vTd?)H#4f1&Y8VHuDRA~?H=vsNFX^J)-7mQe6jycL;jRdEV0DNSYfY)Z-IGMzrBj7}prO?7JI(@LienJXucZ{qk2 z4lI{x&oNgWaCt=cpqWZdYymPXOr<&<&~B9$@;c?;wr+|Pcm_8*#0S4Sd3!>8LrZcckE)i|j zlanDBio%nTUr7tiT^h-Bf*nA0>DDYvNAoy}7@(y18c-4%9gVUno;cNqgHb4!kz^~;>t`OR>?^`sR}b;=?aSxz>m*$FQYwpbnTlbN4 z%YtRvQ*;zHRPP~~GDSKdX{cx!iYCHr3M}{=vp~59)dSc-qx#6hRCT_3j_$oe+j=)5 z5l4S8@{+dEhJM8QQAR7-FwhZo5G7WSJ7qOaW8^Arbr@{jf;d_PL+>`zNe%Hzkb@Sa-nTN#b>jyRnF{QlmS#fGyy7csT$6okZb(- zC#N5Y?*jPUL*|~uHC{A~|3Cr}_z~AB|Cz5~wLD&2a*3dMX?I_Jf47}6$|{XS@Bc;D zb0}&5ZKOYHtP5M@EfPRD`^RDDVTdA&P%*bzOJ%c9z;%C076QD1AHJ!kG$M2}$UKYmNL) zMx~>Kw62P>gM})amTVZ1QbkY<99t_)ACfW#2$l=cQ=o}%ep-62i zKtF+XhOy5gHbFe^AWCGMU)I)^_7_7aqpo_N35mxAnj}?&Q_ObJ$l__`ap<%!DaPY90F6)_FChY9m9FudmW6{ zzSg2Z-GDW}*cg{-G^kigO%pAWP7CvN$IjXvW9ub*Uh7aR%w0%ZTV#6;#>5A}<_NZV z1RenQ>9(VnPB6aB1;)2Q#dt5+PfoYj;s9~E_?jgbr&$RupUjI2m-_hJ6|ru`IDnPV zC=QKyWfE(wILaA@4&O7$l~~@iuq-UdUzW(n2fiXUE#Q)tD$2CFkpBK34th*Dnz?ZT zV;U;P4xps0rwTlbUH{X8014tS(=UmtVa#VUmWJ;IG>1}k0Q+8}IFc$5XJMjrhyyH( zSmGJ~#}LtU*jFj@BSOfOB3kRS{fsc6^vPX(P28`JBq1`U5+;$nd#6|?A4##R8yb`81P zglKV}t+1YQ`j0WQdru-YBI(dNT=b)!FB|a;jm5qxIA=s18iHFR0#2e;=<$5NRc}QH zt|y#kIWLE>|76@-^6!f*izUBlJwUA)r|;yJ`=z^~5)jbUaD#fG>G?|-Cbe`y4|cOU zT+N>KHBk?LfCb~0VpDmEPh{s)xk5&{|E|NGcsu7^Wi6RBpu9pOWz8F4+R<`dz@aSQjwz8^)3 zx^^=GdbRjEeSrZFDVJr6i6HEpaZ6Za z4d($RBgFm-aYTPuh(o`L!K6TkXiRHy1tD;*22y5fFs!hgBEJCd4+4Ec zb?wc~)#&vqNX@48c&J^QttP{&gg6QC6+Z{q!6uc9=~9`L6w0dEuxyjmP4%1VK0@{kQIYZ9 zT&i`wIVdj2rD(J(_)sI^q_^SUE=K<%-R6|;{F-rRW%k{#%e873+;;Xilj3lqu|hRcD018yvn0@6 z)$FqX)Z7#UF)?-RnKkD6*%~I_E28JwC@>4vH}(S1Qf@}Z1g!hoQWZ#P1YC-eF?ooO z{gjP(DaG3f#^^fu)k_L;9EY(onru`gh$+f?P$H5;@ZWT`?laF|kH zp=u5Le~mT4NbOV|CQo$vTR9L?mq!D9Yp$7%3PAqGHFcLFaG!y{cWzHjH`dQQd9lrasgR^ z?wF<}huZg=uP+O%=2^9Slp#{km`2FLji_Xna!&Y<{Tno!5nRwM-nRM*8k}e?bhVrFoF5srHA@ zAH}Cy41)>`Zh?GR?y0uPs8&GUn81KTCRAQK$o~=b)lpG(Z@3^xNGJo+&5#aVDh)$- zh;(12W@($F&Rd?eRb5suDk7K?$k3LZ-!EqNAS@{MWt=mmt@x-Z*4{e1C5nua!r(nP>dibK4_GIglK?(;CacFpDi zy9Yb&e$(DbloKJ%wJ zdUkwXXyUUT@G!ggu?^Fy#$T5I;Z8PijAwr>)q1kEqNoji#7@BTZEfYMPKU|i@amgU zo#1xq-PBHLd0lG-fy02J>|O0z^CfY5_6fcNi&eE;pik>&S~fzYZ9?&^lb3%zp{=5F zB`RB!>cmBzH8ZvypmM*LLggnFx6xG`fVjKXgYI5MW5JvDZ0r+%S=fcW#R9?coh-<&eM%;6p!#oB00 z6%iUwtJ@suLAL~-t4|WQ?B`6ws0JI~7O{)yXyvGmC1feyZ1OnxQpgrBn(*K=$`B!M zDgBDN z^@~p_Bwb6-cm2vvto_MT>?Glavfb`%`4QPi8#;aUR6Drv@5?#tNE0To%11_; z-C+iN7p!68XhcwKyp@~gbm#HxE1asnz4&2ouM|5|8mW)XbA95ma?KjtqOlEDyF7is z%SE1jfD!lKpb%s9uQF&x(Zu#OMj$NCTOjB>jQGg}Qx9srq0!SsU)>a$ZgFa))MO>E zB}%T0@5mvNmnThmpWMMtI0m#_rLT_MLk~ z=R`47>OuHdo@{bM6G}=f{g%SaNm3sU9Lf}%Q4A}$D~Q)?2aP0+d7eBA1S0BEz(xCf z3dxakL9(DErW77YIfP0o7Fu*hF^E}+Vbe}AjPh;m=CW`KPsBw3eg2CKFy6_sLUQ>$ zupZ8o0+a_<7%)lh*0Dd{NWH%NlG`#B!I0ek`Z)_qkU;Y z035Q5Cjp1-OltBBA@%@Qrvjc%E*ic@CXfWmY!G-E<;yIsN+gl7k}|1{5=0YFGY`4^ ztG_yn5b=d&Zf&%VE<5-HXVlb?bKL1E*)uB0UM)h4ZO*RGpAN=vpy;D{6NO?JA98nOJKYym3? z#576VkPCnV1u$%0p%F7IE|>yG@^tTxf{|TB_Y`V!P|~?Tq0SLBf8f+^-iSPA^QN*O zY~Zxnrkvz=hYGI~xQ5h-LKO&pBNA>ysiu1YpG08^GdmsCU?S-YcCQt$2z!2%DqdlM zbYv11N=fo!{H~ZaX;U*%<|zU(B7JEq9yqKf09KbkxeT2y$$JZ~TRfC60*Pg%eJ#thzFIfFAtY zpNU_7m(R2>yJNd4gj2c;x(glET3`Fo{py%$SuoYR{Uq~q)mU*87q|pSrvtLwmQu$E zPCxYz0@E!3>2zC4pMu8=kWPQ%tVRxW?~&v-Qwd)C3Gn|rxP+9Hy>gC1@cCkEKDTdC$>qMMNj`&$@2MK7nQu5QM+LdR|dkPyjV!)mj4 z6e%(}lrVo8=Q6agbzsb!Fv2Al~x*qL!Djkw7HH&jjjJOhLbaR*K ziy8BQ#TOYeW(A@F4Z>{x$Ok)NllM1s{(Dw%9R*>*+UVWM@7%ERR;QO`__G122P$M! z>m+ zBmP7>C&KAx+*YpftW*;t7nJ?uS|5w0Ou|bXwzw>CaU^eU`HoUO?5DQSf$!$qP+4!a zJgYP}#%Rs$zvMM5>zIR$-zqmhe-n2vYvhR07d77aOlUsJKt7O$!aF-emeU6TbBj1M zyq@YF9#mYm0~!#4tSbE6Qma@sVCCx<6>_w1OB$iS`O+o~(mysvS!3b)XlpDGk+Y_L zH#cT@`(pl@WCOC&o@?yIACR+wE$oS$#+6FQ{jNioYAr2E?a{U^`A_$*XC@jkiFeFY z(Xx$4Aadt<>q38$wa(z)OJ?c-zkJ(s<1FE}7c0t(GIrgn6#KMST=L%@$%)vu1MA7@ zV7+qPI+yRP1&=U@DIrj9y=#mec(W*5WNvdeZTO zP5yc{W|ZxGlF#(sDm+UXe}U%eoYiaNVwhTMxCzo<#}WF{`bL;;q(Nj%vHoJnjd8R~ zL8w@InE4tnhn_6B?vR299UrFdx^2aJ7C{-m0P6WEdK6`;qT}d;reHGdy~zz^1W0LT zoQV^lH4C3iJ&T%HG|vqctra(4zqvxchW zyh@}}ug9A}R8jfJ+i`N}3cfJm3NJR)l)vGh58CH)_CH%~m62cH6&=jVuIQF(&xw+h z&J*~4cU|S|>*yi<;{;Hc?Vt|<8g2e?X!(H*sxQ?iX(TIFyx&4eR@uN$5xIZ4f`X%g zCL(~!^gVr2nbg=RI@cSoD>ig4&bnwo&*i7OM|lVzjFyn+@y%Dtg~z@IcXlJVGLW>( zHvoD7sIzDs{z>(xd!BdImy!V0rMRWv zcE}H*JCmLQpOx3ibP_m7ZUJsTxEpZ$zf$3W0>EA7(njsaZ>ikr&j2SP#Z%BxaVxDSdAtN}QoN|4Qoci?*GYcrdEYWjmmF^61BESZt1W_XAvcCUw z8M62*$j!I_GW9m-0@`B3U_ABHJPgF|Sajnn&fbwyYQvEfw5LC>A`&p4W^O;PvR8DY z!mI85^8`E_Ks!BFdFnOeJBK#;S2;Ww<`}Wd3U)pOC_8JGTURhj0qd4@f!xUyi4Q;GBo{6Dkb3H}_Wxgu+ z=~r6~XOU-Qxnv&$ZJ^{HO3N8M@5_E071~b;W(>;%Ew0mZXW+YG&JfDuF@Upsxo}=s z+Tz3NlT%=WWCXW~li=>pISvs7(YH`1{74Z&wHVy zz2Ar;mP*8gJA)w!xmXq&PfynW@T}kyT2tz^0~@jP1nDV5%oc+rst`f8i}6OXHd(Cq z#`mmW@i@PUJ0cS~)*I?}GB}(gD8JA-$KZZXdW-fv0b%+DOz8QC0tM&~R!)J!i}IV; z_QND7*0c{=wVB5SvSv01_oqC<DSEgdZr>$YIQ~BV(;`XWwCIX39_I@QK=j}hIXO5SPr}xJ6!!){u5^`!EW9! zMXazdV)I3b?u$fKx27?xA6a=k-F!5cOAf*VtAdtnD0Jt5V;9niVLx9`y+f(7owlfZ80&oeq9ldn9Eocct zoSqsV1cHVDx8rv?eF`!+;C6gZvKr|%y+?XM37mC#3i5rSJN^|k1h^f)nap1ZQr>;% z{QnqQBsD4WE0gJ3j+&G@?NWb!Y%LThdnZMYcX*S^nJRM)gUJBTPouz7PUg?u!w79scCsYx zr)QL}riCHs%= z4IC@2`va);dpC>{QN8UL1%Fqzu%UiLRivfRf&S z*Q5mv)RfAM5E44LOUeNageo_{6&8WIrb(y-q_nCUzkwfzX5!kVF-a^})?j1jr-~IU z`UR?fxT<);tLxsO+?DpD>4OAGd($_3U3wRHqbexdsHS}z#0W|4aLk-0q%zE+s#fn3 z@!YhEamuW!yl$xyV81j0GiV0~%wSFKD}=XN(|ihW`7mOSh~BSRK9n8T{4lR%2fuYn zudx|1`x2|z{alw`#{~f-i8X!zs#0kxV|tHBL$YFS#1KQov*ux#awJ|AY}Zjm(EO8PV|SCv^pl$Ec0_r$J3L zc%xV5J#z`ofWKT<4hw$72p-c8pKgHN#raC3`I{dZa(UtKZ(IIcRTpKv60IKSBDZbR ze1_I3mkKb&?A__~4%+9bbiDM9?XrcVBSTS;Qq2$ERpzgqbI-Gkh3K{U$ujF3*DTJr zUiidSM_f8FjIqy18c=$qob)^MABbXmWK&=)a5=TC2B~a*S+7JX$W7>wKt?uz2Y*=y zz>O0>0B%lz`XX!gPvGWrde3%X))ZpStZxR_h&f+o5nv9+>RW*A$yeT2~hc z8JeA1>R5HOT6Jw>vTio+I}Rt*8R-3UMuiuD_M5R}o0&h`oDKoMpiD>6NId8^+O2Jt_FYtb|JQBs@z|` zHyG@G9eb;m?QwhyKmMihH>x)(o*-oC*E_V951|bZ?2{@W-vn)u1?XM)J&)0at!@+{ z^hWcEjB`O~?wMY!GWzB4!F1}Yrg_6WQ)-vF&lqMtQEx!?%f1p8Yl`Ri5e@_wY{j5yms_qMbuLy zpus4C%W85zm~iJWJ@8LmY)4eN1J@cf#no_XP_6K5`~&h8i%UeaG2|0QSNi(=<+KQ- zM0K$M0To?+jo1+Uy<9_6U9U@fyhxQs|IFQ}^&uuY;O=0e<0{0X2YWKS|Magi znj>jCRhQwZz6cKAD*7o=vK`jl569j2SW$hFf3DBP#jQ3b%LY8GTfV281ZBT-I{N1E zk#6Vk_UOJe<8jmRM6)VlcVJ_~vyJ$4awoZ9ef4I)>s+VEjjqo{8Brpga!$BWef@j+=fBjPKd5<8j_!d|Ut5@fW^7}9jG`mmj@n2iHU&SL1oY5- zu9w%l%cer7%Im&25jZ^012oI;wo76n;XKf_uTKB|EN}^Emh0I4njaU|*m;0v`Q3Kw zL?jF}>vKy0G>b2Tj>|QDe$d}i=enXoVJ|AOewk}+mq zS~Jjc&XDt$q5CLC8NCeQ=>QdUi)E!j%lBo#MP^J%9DJ-v5Y0#^yYl-e-yAo9Xgm0i zXq)+uXghc!+LYf*Aos2{2UC9rq*R6xkkSKyXq)+uXiHN1FUaNdlax|_1}KOb?2#P; z_N3#I1_r!Flm)OjqQN2;qRBUCM`O&6WqT`L7#7A0Pb@#cWY*1ZNNoIG8CFe{Z8_AB zoin^b%cp4Qlq|D^tOUYbb>ixY(*8SOhiS}=rF09_t9i}{4=rC_llW&CXEt%!)tO1# zXijSTrha_p@BL36AGL?*2cdF$ybQImR-rN&qLTwA$?E3?l)i=O7|b0@v8E5Oe!`up zG)x)Oa_F^$t=;t-`;Q>LDa@q%lx9NDad}cAH%c=H-5U@;IWi@={icCiGj-hN#wF|6 z8tp{uTXy4mv-7{k`i?BvF}?q(%X+)#Sw?=FJydG$DhXjMNzJS=n zjR>%`Zf$`2c@Vfxd8RU}?w51Vx2@he3XVwNT@~Sw^mM}=nbG5aXP+Ea?a3G0{eeP= zhQqch;4dLim#>s4W?_xvRqC;5dFyp`C&Ms7&Km4ZsHe?dOfpPq@{nNdu3wB>bb+*oVyc`C-} ztei?N;&tkTqr(e1Jx4kwWmB<=Mg%BzH@zcRjV`6bOK(>IL#{6wYxMe=h6)QoNxmR2 zD*fRqeyT1ZuNbp6aQkgA7b+c2*E99akA`*e^wsUouu$FQ%QFM<9XLz3=&a7(DK*!m zg^L6|$->NT_cl{5&k0bv679%QB({_k*ae1>_JJmi=W)`ap8ZEcQ zn->!%KHesFeB>V;KGLR8+tF~zUKG>LN=0ThLQ4}~(L<6d@MtY@3cBbF>aI4ssEG1d z8lq;cMTYOSGq+6*-}fO* zDt(=%&*kb{RPs>;KjiayYGjs(`u%1yW>&$WeCPUmnJ}#pqh2H5dcx=(DtuXE@b`Bj zu4^(hWV_E4s5hm%Z*|g8dvUXPI$f|7<($+NZMKxsOs&<3JXnma)xrdJtGE4AC<0lA z%9Lt%y1Nto>@^$THZO5vwA?ftU(=DD4v$7oaGe~=EF3RW``qP!ZAMT^xKwY9VU+qd z{+u8>+OTV2i8rj_Q-MW{xj4JOsZ#TC6mj%eyW!FAN%xaa!s$pKMTlK&ZBj{(G4uIp zz4k$yzd~9$e*1^gvNPVBpPR%e?qBhqA+@dOjNxx%8p|ff7Sk>gR`Z@b8(BNV`b(vl zxT5Z#4J28aP)~GV^2VA_F!^j_A+VrI53~4dNU5{ro<3 zu;?+0YL8W>@J+4Eu1FGxrCBC6r%_5b^_$YNq;A}|Yo%q;H%gg2{T%}4!R2A<@d3Oi zsrFFX5MElal#(_bi=0*2F-@>Kt}c~cnG|Z7!mD3fshGutN|~aCO3R_ChkY)iY{eSD zd`Ot-f~NE?930&gJm)mJ3=?n~MO`BjFc+^1Q)g%{S4UVEs6on(XT>qcm~C~2D{{_f zS9iB8Xen~WrW_f^CfMS-76<{5PR|Fx%&7V*1n7D-C0E_%SM4g4pN zh~rfX^josS;!;|_4f&I#cR$_gez zou*v+pZ;HZh({e|B3HNZodEz_n)VFpY;x-c>IyFTMR_eb{z#NPR*A41ir*DA3Vm2= zfXHZz3z%Jfg5WOqr@h;0Vs{%Jt|M;*pX?;c-XL(>oJkgG^6(;jHG%Jd%bN+sh}a{0 z@^kIu#19LaxNY|?i!`=oE?4nYzUUDOS}qafhJo+R!V2AnEyE?G{Cse|#tQcm=@sAY zaBtE?7!?=Ta=7$>joR@BQ9(q5XV1$y_-G2Gu#Jz!#r-9S-^dK_V{N}mE|ZJ$G>i3M~;D5u!GI5EDa266V2uIO8O(iMGL zPrAaGoDQGPni^j~A#uHhf`M9h$@p3FiZL1ZaICRkSSGdpxE?JkCx{|mEIPefbRoUX zB3lC2JkwT>SAW?!xIT=60i%Kffmc`x5jduUVvgb3h7M~74B0_kDU@MH&2*2XMR!Y_ zE)5FO32_@G>#2VZ7m3@nq_J+6ox4fZHdHXq*)G|CC|x@0vacf`tKppp+w#4{(Z z*Yq9a$JOOLeeb%sK4?wR-I`p+c3Y}O=Wu2y4peCk^orH5^s#@}B_&l)7Qt*xD*pcH zwe454&<-z-<6O7i!KT&bKs$lso@8q>7mjcRpNxDT*u-ReIU1cWzfH5Ba}oH{$%&LK zcC%B_S>50|K&H|1x?@vM+n?`7OfVRNZTJs)y;`U1NBWnop-x4p(`*i@qBcLIFu{jX ziZT^!5dK4PIr{T(9R`a*)JyW#Y2xJa_b4C=*?;H#`k0x7l&Oi<-rwx_S?$p5QpBEX zQO+@jfT9(WGLpm!rAtZ4e_t)~4u3276A!Bc>9Nky^-9hc#f_0FM#%he*4{oa$E=~$ z*PD+Kdbf7j`p^83b9ZW<4&A~bmX&2;DO5SL3A<8Sbx5DMG@}X$S63Qf4)zEf#6{RT$I|!xg$D}sG^{f17B|h0m zt16i+TjH{eduP=IPFk^j@f6O@MTCCR!cKUzuNj(aRaJ#(sJB%dBFhtvJM2^j=!-EO&yzbPO1) zJlQuVbpaDB-+c}SzE8h{z9zNcHi`j7+b1pA#U8BO__elup2F7#hhavg+{c2=idVVlvIU!+VU1=8r()Mo~-P6Slp!N9kWApgu zd!ct~x)}IxDcU{|Lf2{ z9TwxCs_W|V?~W8fRYtZ)y3>%On2!xEuU|+JMvcCYu}MNE3^ma|u)6nWX*b^<-nBZv z<;rtRrmHufy`oj&6i6?&F0iNtU9{d8q`vwL0?LpKjVngJdTSP>7^ zEeuNO>svkTv*xXBz{s3+cPi4vDI@zXh1q{VdWFB^MtL?2|79JApAUESbn8X6lcDUw_z!q`T_!5Y^7f$Ex&u}0i2BNRQD2a`OL?a}rNY;o7# z^3H@SP5z>`rJ|w>Zf&#Mq3@nN!acY5`y)1xi;=NbRjpMqJA1(TE+7EwyJBNzV!zF@*}DRQ zt*s0amCxWuzX##=pZ~U9%PLdvo_?_ip6+iU-O;Hd3o*P9=sGQ1#GE z*mR&}aFterBNoFr$EspLk1>DO0uO!rG@9TH&VW;ItG_kuxTGUVe&ef4_AHct4%OHe zFw}OefK$H!IQ0wvIrWHzCqs?Ud@|I!WOVq_S~OLwE62~pKQUVnoUSf_5Uh5r#`5+x z6NDeEmUZ%2pB6VsDw*5n_4qsgzCSQ`O5XX=R*xTNZGCGAJCGZG0PoZoc|S9vx-cvgPB#oFmF)7B${#eaIu6;|Me0mUsYLW7%e?w%wf;is+}JNe z7lcWXt?MGsME0j@8ob_eRca2K61v50Vy!Y0HH;XQzx) zG^8K0*M5FKWSv@G<)ZSx&gFBMtE3n7TVpcDRE{Hi=l5fIiInn=i;t-GP_p7IUu%oVu7$>UTu1Mxc-FzQ`p69l{k8MK_|xmnh#;y%iCnEgKCip0XTHhsDxbQ>wu zD+4|t8P-n5AZS+^Ci8sQu8_V=Md+^3hkjrSosvkfPc6)C$WiS12Iy7Y#3{-EgI*NT02uV5 zKjxUf-mdE!T)v;wET!}>*oOM=z6Bul5CEy&a{x#kf06ihvVYW>65*Z$Kt}P$0Hod)AoUQl^{8|7K`Q;% zfcLGi*^}Z^Cl0oKlwk_)|6y#89OWz&0vD_&n4J?!=8*%q%iBC{1flyCMX3(}9bWf4?2e z#4Bp@YzB-b*;k(|`7kR9EmG_vv32$b@zK|0`Hpz>oP5kTt$pvst&6R@vfc z9xs>G+5NsXYuGryDP(>^>}H?{rEOj0yUK$F~MXe6ALMo(oFqE zI4j9OSIEibY=Fi!9fztt)SjebTR?`%UrA=~P);e&f4ipAHxt)hL1URuCgH$g{JQ0~ z;OBDhvWpIjL|aG@_8UK2>WHee96ZP>bv3uVf&jK6`a2%-;waYn_+4s!J77Okzec2T zJ0)`RC7HCh=|_fuCu&g8Wwqc=iN#T>=+;f*X-t|jZqKD|3S1JiUb~>-a#?&3447y8 zxJBK>?B|piy1D3)i0XlbF6*R@ZvEtiU9@@TUrzy) zyY!nh^0bI$KWj^UdZyVIb_aaQ>5WQ0{`5YzonsCb^Bkc)nzL4S^Y|-A6C3N=$;4Ja zAlt;>Cuic3-BKWy2SZ45<-|-Nc+;OO!5s6YogXtiwAJ(A2_GU$S!%cw3>D-KV<^@j zf;G9(lz`--3*;`4H-JA0;{R_vKV=(ip;H`L6)V-XE+?En3CDri_Ct12P{T^OYhIC)) zn!#0h%~v~rS9OyuZ?Y&a0(pfrc-mJ;&stgrY33R?U}nWkKrlTMz|4Zw3z+Ell4v+p zH*>$PHI~aN$f|=bhSM`>h}(EIj1EEEK3_&yQ|k|1;t`@yBZHk`N3Hj~wwwAV5I zin==+#l+0KOkl7V08|EKV+VHU2-&DPdU z_D28MfNz)HxHtQTiL0~rLFb{d{Q17?&1r;5kFlGjq49-r=9@DME`Jfj;lKTjsDD>& z9;F*7{dp)$UZ1%<`?>Xr`Hkqy!I+j=cLeF9_@Gk%&mg6$!m@6MWS$#}YIDzB&4uJp zNz>h8bJmG^nGeR=^864rOkPMl>4c9Wv!xNMsg&duwW0k7p`uggDy_cCFgRc|;mz6w zauC~tCUMMxN||v2G!VdBHnH3yzk9=(S}f$}Cn5U{!I6q;KdZ8rf*yT!YUAY6^zQn( z%{Q)8VVzVJtC+9YtRSK04^zEFk%Kjj-ohU2uP_S)D2nyy#Eo+e1bz5oZ^-Dp|7<#~yYx|368XI+vD8iFHymiWHb z@ks8wTT{)Op!q&Rklq~ON^AABL#qf?I`4))Yt{O}=FJ5{KDKS3m!1h$LJ2$-@w>H#6_B!7LO{xNJ;_(a(|B!*21nnMps@C=!NdNq zsPz&89xY)zk(N?zj}NsY`_TS5)pAhllJVV02*bhtRBpHT<<@+^VSxA9R$Wi0Z)A`A zX?9-sJK=wOj+@x=e{rv(yQ;2cFw18wH-E##8oqW2hC;{!QmB+G$?Db^{xLIFJ~9lI zjEZ!#w)u)IQ4yQ^w${UU4JlQdx8kUvTSk zgNt&(f$gdp;EdM3*brHRy7;MGkyWGj^u3`yKBw6qF-jNTXY8;V<129KeSBGJ_e#az z4qqXH>pkz>5G<<~)g}C+dkE&ug@ahq0yabO?zY-$Tjs!=LbY7wUp0AdHfOc?SdMjo z$T?WeBzIv+;UT)XF$2^a?W3h7fXO<&lS5bBIcE>&rdh(F11Dao(8&qX= zgaOYf&t4-B2+#O@{J*7S-};81ulV@J|8sa|^^FlZ_3^RmM;?7> zxUxGo&Mw>$A1XnzS1pa_U)wYNeV@-cRqDi*D%v(1eJCi49moq;s#FipruRbYi zH}nI{1%FYtLc3n%kEm@p+<#|^r##BfT>VhJ9%o)tyykm>ulN=8g?MelXz|<^lm7Ol zb3}L8A_Hf*!SapDV@F&Aat!C(myO@-kqtehoZ*}8$89gCt0WfvTyyRC4r8XgVkzV- zPZ|gjtq2lRQR{aeB7-X816oNL%QRrLNul_L!he}va2)eTM}@XGy-Fq(VMdG%p-Rg) zK=C`3GbN6s|~1Tu=^`hOnME- z>nLpq4QJv%XGnozl@yZEtt`ad`c_sH&hY@w|3>wm>d|{Cpb@j2j!>mMsOv`^MtJ}+ z@`t|)YN7?wA6}N*sgQGHuAmYiOc53|OUTb179gl1`6}YiHIg!(6M(t`#SNQVb>C;( z5c!F~bxwIi)=_ntQ;3f|37=s$5jMTr;^+`9JG5t=Y z8#~*7SU$6L`itmX4Z2XCt;(K$`e64_M9%hf%r)}g)i1ZqNm8MytxD3N%d5$S1lwv| z#ve<)?d~8Lt3_a9J(TL?ersPxOW49VO2qec%QAEqiw-g-tnotL4f)78GcyP4rcF_c z@`S45BStE(W8PAqZiM+es68%b8R!NmG(Ud-mJNSgDeBbiC#qwIUvINMq=K>F@{+MS zQ3fovMSHl$K%eB2W7t_CNt*(y$oWIjddhjT)O>Jf_HLr6g*g zv+iOu&o5!OqJLhC%K!Xn*@Ka>oPDjatGm?#Z?kirDO7Pw0JLk%X{)6Y4 zs-2DUB;#qECVwNfQP=}Djq%y+A00$UsK5Qm_l~?@4XSaEx4KJY{Bnm60xJ(eUp-@P z^uVJjH$A=|fX)t7Y$rjt z+Ol8HPZHe1GAEu5?`L_nj2~m1rLgDNhTq%NW`Z>z=KoAx747a+5?4^zQ4^<8bV08pjtgwn8HQ;JRPvMlfcfGa0?`!D%`Pq*4ESZu4>EC6KbI>E!` zg+2J8yI+sHFL{a=i#;$~LWglr=}3)f^fR+fLcK{A30gz2wZ1MP+*&`mwAB6c^=!L1 z2XVEEz3ho4ssg`jD+X9NB1V+OM>XVuN1r7d6ev*R-eQNlNsyShC&nUTyT%g3!>d0U z0^Y`;0e23)ktr+$&SUawp-ATka;QeuYG`{GN(SbNffK3;&!}ev19vTP0wuGu$aauZ zul~HEwg|Qg&LER`^@*Q9GT(-ipUHxrJ7`p(kpJJ{6Vl8I*xr((ufE|wL}a+2T{xPU zd3wzY>&BvsE$o_+J*yc2Ci{*XIDf%F_=0Z(d)CscC<8J;MF{q_FcmO1drsIfIp%Zn zbb?8Xrpp*_GJl=J@PXr8S3QhA!l$Y6jVsg3cV3Lc%Ep7_1g=VI7w+xQNGOrcp!&HR63aNiP;{kz4SWA-ZVS1%+uz}}wv33@f_j5|0hjUI}|%a2S!diCNt0*!vvSdQigWc^YIZNu3aZ0t9S z&w!6RDXiC7S^9%mCxqC}Ym|TI9x7(2OeY^gvN#F~OCU*@6dHb%tlmxC4GIOsUHXt& ze@1Ugr~(nbKb*JvJ?T{|J{rx62_-6x&fk{_#kNLMy!BCh`=Uh3XyfEgtN->S-~l~0 z|ClW~7O5>hxLL%0=8&nnyT!-CSRs6xelalScD79Om4VZ(l78|noJ-K3^6Knh@A$a@=gL-FiiO!Hy%1y39ieZdC-xpyd-6cQ|yvx8@ws59%K+`STE zu6hQ4Tn=Z+%g%J=4_BPBF2rN9$r1Ixf22~eR8;+-E<-OPRsTIvF&+HV%13%H^^1+M z5@u~<|JJH3Svv1`T;zl8#_+W&BpxaQv_0(UnmpnBmEaY@EWe8Ne1T$@V3$j{JVMrUbA> zpM7&gW_LbC-13$6rRMQEWJzW}mk5RLtZFttDq#Zye&@)#}Q_2Xqb zqxo4QIBBV_5<1k77JDnxw3vH2E$_9R1ris0zf!VP4EbjVk74x4!%ri$1oIU<4Fw9U zef@>D2Lz)OB{{-I7XNG={0fF@?9rE;Z$kqy)zs7akFxFiFAk$mP0nl!6;6pUMx43S z{6gC)dO?MppdNpcrb=1|Nh0>~M zgr?E7bCBpV#$~Wc^-Mw);!TJw5`rTGm4-KiPkb&_Jo4+Xkxi&1rai|IhEITR#^*W* zsqGPumkwrEg(K(NJH1z38$e;o!DgLhmZB>cnzGUWB`n1%vj*I*^pXgz%Uo7zDuz75 zvCVaHKWq>^jZ13Vi!)T0c$n;p4*|7)2w zWDEUtk;(#n?1+=+s5hXdp6c4<@u%m%x2wHAT9*d<)71n=u#?C8kmxRcdjU0_U{{R(R7zk48ZAjDF5ULlaz!nYtuo{M%W)$ zi&@F+!7Ca(_jy07CR;|>3jTKr0kyu)Fgp72?0B9{HJw30`@M3?v83B^)jpTv+nb=A z4bgV&mhiRj)7ASCOQXlX(U#=;T+nq%76B+F+p4N-?IJ&);wm4NRHLyr3R=;uMBJJ@ ze&WmiV0RJ)TiD4tAW(ZNh|7g)5^B2h-18+n~~G)B`-t4y0|H5MKLaO>K#)! z-ZAfR7N5=gnT+<=MD&fCu~1$K^N!5n6#sz4z4{O6)iTOQpWf;7|JBs>GpJ#tT0)~^ z9AcCny8GGkf9QJ4uqwLme^^SorMnyHknWI{4ygmuDcyaLI&?~RNSBl}2uMkHgLF6i z=iI;V^}Kst?75Dx7-!C`z4j;8%q>fb7bF#MZCu504Rbwlg^c z9XlSF+iydj6juT5>LLZut{egFYUdc2+A&A-;zq&1Yw2mXxV`_H5BLYGBVZ6+00xoH zstxD@1yAQ5<07SI`+~3iO=>fW43lFH;RXKn@$eE`)Z&ze!l#Ry$oGy?98x!T$u&wj{WJ58L z;m^2v7F*@ViX%9IYz?du@{N@-SiBb2dK6TOjG;35vvqEvy1EaSmvfHZ)y6j}kI!-p zs^0JAM%*0VJT|Tg#RvU#9-C0vqbTa_g6xk=Mbl z#e)0;zdRY9K#Deoui%s)f|#nN?VoJJda__^0dvDfBXvwH`goR=@=+nGXNOw;oJ zRu1n}a>a))SV#;(TlXn&u>H*>Jd< zThuk(T-~?VGSFjd0FJF;u|X!>W>G#`x}w-9X(C^%aXVmTuMB;r zCj7lt%XIL|s*|P4!#zMlqA^Gs$vg)} zh0K6vRSsxYVcHyRSJ5cQW~iL^vaEq$;GA;%pn! z4wLl}eI&Bta0m9EraS(CKNH2yYhS)u3eaguROP*?&v02WoNTJJ)ntS6#xCV!nuoa( z(0amAOp8*=*;w!^;SD6;|D7&zE^B} z7Vk|Qr3pyS@_-(OR|e=|c~I%O5Rje=!wJ@@welEc{*_T_0MfJkN?mEBrot!c>%RnL zfVDe=khWFdn}1Im$iNV?`&hZGhg{*X%)BwM!n`s2wc;Vk73%RiRX{!7<#NE|wfV45 z=FZ)Ish?*P>fHfBbZgu#>0D(X@kr_36$N$K5DWD48p1ts7uh;ZnNorQj#_N@EXT`*(mu~IsWnOQtxO}A{+gd$M9Ip`Z zGG4TjZI>Sd+3yLk9apOOaK;&}EoHT4cRG9xndA35_*W!F&0lesoAs^U%qC*6oovHO zUeEd)f1Av-E?Y^(T9lZHXu4t1LcPm!w4skt`)kbVu<&9sDVJB9;Wtv{H9x;LmAz5< zo*8DJ!(RMR=d`F6-V>$#{w?uC#i&FlhrE6TasEcnCKIeL{!1`1Hnj~c6cdc5*3M)T zLkBAh&u-sUdw-CA_xsv`N#-`wp4Zh8E4x4X#zFJMu zff>;nTDqGH7DQwIOQ;O5i=o59J&7 zjxKHj-5x1f!lvvg$x|44?_VqLRKTRD=7=7v>O?gZ{I+3>)6i=TaJsnLt~_O%ilI@s zDw+J(&yXl|xx&v&e`Rn7lFWGkWs2HJPRf~WC-Oe$hu#c-Hjhxnz?Sg0kvpY*C-{f7bEm z5~tn3D}X#2=3Z}>I+zE~7BWk!%h7z!%&6smbiGawo=&sd&r_gYl8rjIT%q{+gh(Y< zXFQ7>`1A#ka%H`C+zduytX;Tg7osAB3DvCkLwhY!0Ix_*`ov+d_#-jF}t zP(E)hjTvi^uBGSLg`)}$dSnxkV|B$HI5xxF?gQ`a<~JN(vvV6N5nk6>#g`@axaVKG zHN#faVyUw3Anf$)s=qY0J+t8T6|r%i(N^ZNh|bvN>m@hb3O`k?`%_Ffm#r)s3qtee zdq@gzSY7!oAoRzcIlPfi#O2=k0`a#==DEi!ReaOQ%w$+N5ELep}rTma9B zE%9m}TDcg`+f1D`S^vU)5k>XlmO96Bn9+0xj?OVR2T3%lVgKojvv>JTo+A+s2*6h9R zCAXgu!>E;D(Y|7-DPvYemK-@2o`eIpMaEBuT_yV|VNRq63HXo1W(m>j2z!&4c#D#_ z?G%?teTLf|%~fCAx~TamHBDl?KzGx; zO5fGd9ysFon!4!t{&^*z#Q%PCZ)77g!mAk@&$o&H2{mKNIHoxCVV;MMsMnsS$gW+t z>BeC)3FFqe#@YWXRue*VCQkWKhWk2y5rFPL0bO>*q0-e%k;vf8glJSv<+9F~C!VEw zoz*!bJI^g*J82(3xPKJ~HmvpNAd9bp2Qbg&F}9&}ZYRV}VxA%FW314N*1~4OoEaL9*s#z8WG}QjVYo{uTyf812un0?h1*?E~eA==O zp3i-<_`K@GM)P)_&&NIvV7Zwyxls@+GFr))y+w~CZz#{P?@~dJatZ5R`qQ(P4|1$d*&r8?f7Zd6W^6myWonj-?7zB@>)$XsMU`sI%Q)@ zMQ?4ZoB?^qqOApXX-0E_VIrlf+0&nDOE%>0puz+5Rc4HJ2XL53u3QP2gV_I;rl=)7-^LpypeXSXdT}rFencj427*=ZH)g`Cg zSWCPQ@*Q{XdUbqSThKe7Ue66^Src14#e8{g3E)UC!F&vfd+vQv4{$QKJHDk4!|v&I zt!?C}Fk~&zT1`3~kE}BeT(8E!C79ageHI!X`NdpJ(4Vs^qtBRGoHccc|R zf-7`vNNwBJxU5$G;SIzb0^t*gBaC*+xZC!*f0JIV@%23wU%*}>20h$S9;43$;Ru02?suA7vSU-~#0V5pPS zz~B0m9H=Jw8JrCgvHjrU({N{hxN|U|;qU{4n}H8#s9^sy@vQ`_zw2;)Q-rWbX9$x>Mqcj5Hky54b!LALduR1T{v9k0 zv%jxsNsy3Aa6q}gJT>Nm7zciQ>jFbhq!c)nr}-v+7lu`Agf0XY?292Dk46RDRBam! zK`Vs)nTWO>r7s_ThhoT;2EElIp&Qyknjit~ARWe{NrX8?(etAi^u1H3g)7Tor-Qp^ zW+syNVkWW!G{}!!ckk4D63{ZJU1k~m173YrM@}LNMMi!#;gJr0@%}DLO1jb#hV^fj zO<*@t^f=RU1F=J~*B^qRu8^X476MDhTAv#ND+pJQ#ecjxS*>Hup=o3TA6ywG3pQ}6 zrFgYW4llw!N{RldJ^|UskV~atj>*lVDnV2ZS2eTZ`enr1`coEcd(mJXBi_z?7M^rh9Ty;59DXA6R*dE6YMpHo) zbaX+H1z+!Rn{FOxGXIXZj!NH zxYqX;lE%wd9QYNo9XmrGfV)r{CBRK;B%zF2B3PgzyycNjrJk z6!@ntoa?!}{6s6am7i*(3V3<0K)*nBYLsCA^*8)~T6-?vyI<4+xRg`Ajo7e#lx_4# zjS|ecLX8rgrD2QU>R&VAP}*F?X9&>dB0kM1AiEo}X%eyB;L@+c_@bArw4`AWmHW69`mO9&)* zHhp!dqRha(PrDO@yBd!uye0O?{1A6Q@%No5`YO z414XP5lp2Cq|%^_bf5=dq@|pye@iV`4P}8Hb2DfE^EPK1C=Kby3e`d_6W3KQGx@)s z$mqgg8`TM{3_P5Ub88~SNWI~8_nGYSh{6ohILe1<`JdvY>?M>%N7J)PIYsQI0yo)dJA~c3J8U z^j9;Nde`5ug}CwiUI=8Wyd4&ASyAS~GGn8a@M&jJRqvQxuyS3KTy1AYA)Wh9`0&E29?)^$Hj^~-P+n5t5ppEUgH_HZ4VR}V6QZmI z3M~HCC(l!wNvCbJ?+%u(Cey~W3S+@VmosK0h8Rb_RcL?ZeYgFw#fp-^BtK8Rot`)r zZPMu-_^oeB)LVs5`5Qw7=)euyKk_CZ(mW8c*B2SMdxZas?uKVHQb)kD4zf~v1Gq{& zo^LGBXyL(Bj>=g1L7L(o`9Z$wsFPU6K~ZmUwabY<^0c&QAb;d3#ZPs4n@=T6FSUwS zXX2kV|9BP(MH9{SDPX<{B! z{$SW@Ad_~i1zy0Y`ugeWOLb}#X2;U~>1BV3m!q)WkCM6RTD#81gzv4gwhJkTuBXR^ z9=xsTY@#DD8q;2jwH02m7yhRNhp-k4hf6yT&mg8p)k=pQ6i2a6yTTk!!j|RRKGEURY!nD<%PmP?8lAI4MpWGY9i5?3(uy$zndMn z7E++H&2`=NwfgqPoh>4JXieC7NQ|Bz_ulf}VtejKGBf6Psg%~EOd+DUZH>eJn|B}1 z-)cFW&Mjrt)j?Yy6fA}a>{j2a@fRdN>2!Lz`MB2W{uWG9raid(F|$3XdogV4S?3o) z3g+)Y_*36&0*YpJ=%SW8dUSIC!I1RMy32@}X)4x$k!dQSETPVT3uwyJ@c$@_{88Z` zB|7WgV6Ut50w!@n)A<)zybQLub3R;JZZP8;ygaJ13~Z)DN{V+89xcXsm7ep70Yrku$%50gp{## zU#J)vv6blXyJxQ6bO#?_3WzQGER`fAUE!ZMr1~zPhiQAzC})GI*{f%Bz>*G(AXCgD z?Tp?&E%_=<4(FZHMWyXrB*pdV3*^Eqo1v{%4;!Vjb`wYdx|1fMUCb? zc|*}=-vpr?8i`a+?L$GmW;UVhP1pM;H(x=KE^f_c%riUwbpvysyr#1{<~`egp-Pg8 zTClqub&9{LAX>0LlC((Ke{QaunbTJ+`_O}uBcfs=E5A8igJ#Y}Ebs<|^ejj`-dFTV zG*sdUsnyvO_$q6Y;p(|%4KY7ey|1v#Ow<~zt<>*GQq%U5r?2P}3%IRQY=6U6(T9;# zng2$aM=)?cWr!KEhU^ri1wR4OLcv<>!ws#(K_^tvj)c=1D)+_I*H+gp;#SfQYf(f< z)N&X|j*qPT9k1si0ZC8C@gtm4ij>kyW2!~8E*9Xq3QsR1BxX)aznI|Q;`}7YgG)o! z(AbavVgDxbT3UPK&D?G)>vvM)&;CTp15JYl z<~$iItb?Z{^~MFpyJMag-6V-m?R9C{?L=wh*bI{pZ|N*0JYb`e>D?zb@!KZ+V1uwmtmVSSbw@ZW%zAuI zeoYSBjkUKNT($U2{Gof-LrUAI)}o2>ZN z>fzcZ*)x(UeIy7lqBCdn171aZyP~qWHaYXdCL@TTADT#f;syAA7?V7M8R{u>4MeJn z9*yKP=NAwr``hmaV~nN^{k^z;X7dx=`2ICM+63$q?nf(_HTcvIs=t%f>+Noo> zqsEF>?^#8BACu9BSDyl#2&Pz>^2A*tF-dQt_qCkIIQQ#nXuLWgF_Cn8BV7uUV++T5 zQh0;+up!LCae=fVm|^e)Ta?K$rZv$hyI!P)b(wvag%p&!gi@60f3YD=i63B9!~PE6 z=H`s_oadq{{R?$1y&Bu-c6b#}&jNNUXA-hf_JB?(B2Yg7#2;bsL-gGuK zFSdTNvtjXO>966O&up35^Pd!JD(NR_cmJIQlr zU_3p~S7NPVrd;pMlvjKXIpUIey7Z{F?n9l(kUbK&CPtZH?Z8z-AZ!t8R)q8qKx^oPaTXsbZkp?*6bOK zy-nNu%XiE()$k z0sW(jYJBn^jsRS07QE3l0gwe~)6oTVyaS_WN_~g6?g(Fo5%qM?A?eWQq9546^8kbEz(#=U>i|{n!03!8$Ue-2m#XfB#m|l$sqO^M z$@7x(jaC|BkbDMW?9fr5Txd+X*BN*brK^WlG8B*gpi+|h1iM=ptapudNl6Jr!YE`Q zqLf|r$Shf@S&{?kNkU+6&L8PDMAb-9=^r*MahhJCYf9Z>&p-oT+t#dmS?8 }p>X ztIX&9v(M)I@O*W0b@=mZS+wUo3Pbn+2N5=|6hb2QNiPZ)HSMflUaSRtx;8xxe6}el z^p_SD&4mc50#UbfI>%W{4QC=YxsJhxg*3S0v8Tep$=zF(DCk^8c79-G1j!kTjRsgN zqURZn6R}IAWwYqHU;_?Ekd}5qeb%fr+VAO-u*nmQTEPJ?Cl;ZeF#57!GDac^m<)NR zH??f>*cc{4tHWTVTm%v(@xIM$N>HfPFDEWZ(o#v;ZJ!CQ;2!4hrd-s0TFhzDPTW7D zl|a(5qc~?63qPax#SoXN5hpXKEJ6h|!=kZ#AY8$&(rszcV8Q(0VWe?vnn$ARXNSFq zDfTs&Wp_VW%TgoSqGRHL58DwFvs4V_Rd5X7VmS`6aAgqcF|rwDWx1y}A*9LuGw{hq zl*pP=#4tgXJxEAaQ%Fu$`{>-ToIIKWR>!iA@RC;e;Oz<46#9vun1AHBV1fFN4b*?^ z_2mh2OL#MfQWM!w)vWd$E^Ews%HwqdEKjI{eGfr z&$_n1Vuz<(1 zAyu`J-Qi4y+Xd0~Bdn6oVMkaDIZ0$s+foe6!x1s*M`sMiKrYE$k;5*;Q%iE4VoSJ# zZ=)iHFks3g-I3%q+|}fZ2$bAIA&Oy9e9rK8`bM6{WD8O{@K{OfFCsXu?pwuIaIzEBg>#!s?Ixo8I@Xnn1ErzKxDZvDA1 zC&`_`n%z9#7ryL4OY>_D$@&ed^aZTfr2nt@U`3R3keFdk**V2p5pa`m%0WW~%|L5*c5bL@NU>QzWlo|W77ip%3GUtR zllWW+_u?reh2pXr-O00fGy1aRMv3u8y*y_LTmL+GO!xOWG&o{XoMYmqug!BswLQu# zi}u1dJJk&S)P;2ttpCzB@2b7%qjH6BT`6){_z}n9$8l5LVH`b^vvhq+Yr~SW-tOeu z;PG+m?*esy`;5cMuY&p_!9^aA;i)OwJA2s&p(o1*#=TT34OB5P0vpWHF#Uj42CCx6A}(5Qc?jZf$8v z*o(7q>2%&v!Ewzv;9)ECgj4-kq+{4G`1fVmVnofl|Jn|@NUD2Vc4M@+J(3yd0>;H> z&#AD#Ny+tj%>S4h=GM9aX~F+vkX+|-Y(n)vf(I}eZpMP(Ga&FrFQvn%EKQV;kUA|YGM31;6naQu+p8U^n98ZOY16E=pNwDusT=8O#50bkjNX?lnJkuGxr z{4Z}-_K#Hy>O(?GB1#JQbS<7MFP3)*RFl)W_ zzp;LO*iHQ?+>N((aXX$_w6f+L;M}p+nf)AfFmrc7@=BQYr2LBq%?p>~obFGNX9 zGc$Bkc(=KS|8w&Xo84$%s?T`%-Nhb0AN?jv&rDm_{DMe7!GO>?lo)ja#OMwnMw_+( zG4lP6eeRY5eh(0%PPYUC!w~qk9YU(#kUz4=2 zVBoPQLnn1$ifhrEJQHCF@Oxms14p11cK7=>x1Rty-}`i+^Zk4WI^V(7r0EOz!J|KZ zOH+h57;dWJrF=Xxop!m-c`{iW6$JQ^-VZ20+JW+;U`rw;j4^g(WS&G#Yl`rA&3meb z!r$uGv|1F&el&Zf6WH`+W}2lY3BL<^hLDnFI0Tue(czPyJLPhTH7=1rco}lyi5U@6 zQjTf6k$HK+*5sJzG`M4lQrvUmxo#8zafM#+%_w6uEed13t$89!mwn4>-8^x7;qj5X z3at`?o({TcH1tce+6<@FO&@~e4AZ25g2PdPd%=V^`cFXA0@ODMo0g^esPOS*gzgT_ z$(UWDTv8B8TSL%E+Y0#;1}BRq$Id#iaOIP_Xdlb5wF-`zs%E%T1jU(B!OJ;U-6{H= zk&`)if>S$CAv$*h??iO_U8OO5AwJiGV_(!7NS=RZLCkNT1#YmmMJ9zq(_ELtFg{b3 zpJADmD`0kGr;DF~Yd9~l{L35hR;8rD>r_)^;l9f>!4X(s@=YrELKI9YN(D>_s^rfc znAnocc%xD+x4m3k=U9TYANz#lNyzg(3@km7U>t-nsUTXOU|-BdDJRfA+9ehzm!<&d zcwo#ctcdgQ@?YEQZNST^Rj*VQY4qn6rS~Jh#eD7(TyWlt#U0P#H2tmFj}VeNpZ2}+ z7kz07^AHe3>X7mm)k9IC@9;u&K0(_e>uc5A05-H8aAK(wc)MhquE=;NhBo{+f9UL# z+NDA(_Q*ajPYao}Ut%;l->yoKO8X$z!tIdp{hn*@1)ik(nRXQ>;LrzgX}7&MYF?=F zv*JFPFm2lp9AG8#K?GJJ4`3x)4T5c8F+s#y!Z}@k)3o*71N=t+ECE&;_5`^{2>cdp zkE}0PasunEeC6l?@%42ZNoLOH`OYt zQ^mFvlDA_^-yct@9+^tXT+N|(H8>t+(Jc0BN{?dWDam-o0uL7eXBC8PWtqRH|JAEF zHH&7>a3Qt47@6wfk-1-WSvyjlwN{+7KM42!_)ussf{#-S`%((w5;vPdmfoLw?~9<< zpraqrw?N*)9IOfEr_ez9XZVQlRSq$1DQFluF*Gc~l1dN&`bwe+Iatd;&^izV1^Qyx z!1@8~3s^t=sdvK9+P9is^5(`hmG!{)&5d5PWv=#`jn6^bgPz z@u?a#x(mZXv}Nh1s3T_m>2a;8kkBdF;44t9sdN>ryY=$ul=S;5)qtQcVeyd-Lwb!l zU4Gh@jPMmya|%dSc;S-biQ&P(3?t>S8$}C?nAP@_!j?SjR2U4;_t9zZfcLThLY9Ch zhe-pmlnLR%G+d4A*rw)|jKcX%JtW_du+d~bR70|Sq&eQfPD-JL1!|fy!qZwaLMyf< zBeY@@q1^83$kK;XNBs3~_+akid6nP%2iRNS(jPTol7~~Th48&2CHl~dCKHW@H>&0d z_{iavyzkc5M!(F(+=J(g{jGO*;^U@^*kbP7yuDfppH0g1?u9d7KRi4<&N&9$6;EU2 zhy|?L+O_t2R(F%1Q9O<;Tz{>bcl_hHn2hpdNC3j#x@u zqQZ|(9ExmobK1VvPo}_zCI(*2V*<~TcGDFRZ&d!y6%lw`8}`N`4^9czF?|OTRr{)OK{_q!-NnayHVQH_K_FH zuh%Gk0mp-#lTplQpQ2f4%xU7sTT{DAhF)?ZA|z^Jr75=0xi`62Qg6^Zs2-?-!cp=m zka(h_uR{WF7*LMKVHYWXP&rZez9lcXMY)1}Uy1z$RVr7xJeun(3&lUSlpQmIrEt9BhZIlfjGEA&Mk`I!+}#E_Ly zTOSyTtnh#~M2(N5T}o*dRMRu0%ZjA^>hpc(p*jHb;TH0!cR`}Y#|Y5}MrK`JfVrTr zJxYoc7R1VongnU6sb@GG9YW{)*m}=nFS=Fi@{E|QMBvFj{12JVy(_+rA?Yfm_N#HV zlydi~+AF=YV-?doL+B`Cf^B*IW68uvpAr1ao+Yao=}VdQH{TR}UlpwM;-Sa0T#^q= z^7@|`r8^u4&#~j9L)^o9lJd+EMQ;_155!n>OE3#K!I&|EZfXZH8A5R zh>r;?DAHd4CW2wDv!);I)z4En+t=r1$79UQj9>aWwHo6lR>kgp;^dQYXB|N>Yzd6r z)(LN*0C@I|8KNSbT~f7mpj18#>)+R1hfA@5>#;>VzMLELHEq*HxadO zbpa><=LtXoY5)q%y#b&AIwhdmyg{&<%g3N>q9gtVV>c*-js?^3jurtdzK9$877Nf} z;GjB8AfUs*{inmg{inmcnQ(|uO>u|o33wQz@OQl$OXT93d?UyeRUibi9TyPuTz#x+ zNrwTr?N}hdZHcga=6T>c-g`H3m|jx&JpMqo-Ly1XAXIK!5_7nlo*5vQJ6d{f*c@Bx zI_kQAx!&Ku@9s9$>lbunA2BDz|JYV_>*?P)|0L4?m2;^+)BbcRKqYf{TI2TX;!4}a z!SOivjVPX-Q|7WHfW*iLbm5D|Rj+ZNHXcrWwY3tuc{m*Z%MnoWPKK#tt2`DfnD2!e%{@ z^=y8*G8nGP>4{WmLdzu!y^RYQV z=O%#`_t9{mxc}%X*;F7Qs2>?w__92?AUV^2w{>m7UAKJQE>aHnt?;M3;|-;lMDN*6kEF^inU1{-z-B3y94wGHlP)+7ELFdyd3y_(Li+suA7t=Ssah!Lcj7Ue3V)o65sLO7L^j zsjA17xUx6P(~wpFJq?ZF%B{17O6-ZPirV^Ur2TS-AU5LUuJn<3dSc84ud9pn=&-t( z%31RZEXvaEXk<~Vv7ZHMI(z5iF@pioPcgj%mXJ0;!xRKG%nwiv(@_P`F#r2|T$G8* z2sp5Pq@eSgrSm^o(r?&26=0})Z{bZjtjp3d40U9?0)eqo;MrJzy zca|XhIb2Y&0sy1`(gH9#L;6U9J$HR#f&>wrgj;!&o`@$hB0L70XPQ8eXXKBN)%TMR zLdQF{?ytpJTO1G6$NtHkL-*Ex-S>IQO2&OpYTZ|1dlB)se+imZf`COOCkAV)v6hv$ZOnIIy{$N<}K9Kl9q+KTJalz ztMyEQJ(}4z2;nCn7z32^zpL-OlVjgHmQ}Ob3^N&gJ^8X%aUvy<@f|J=rMsy|6RBxR z)2Yb{nH!JOK$GLs#)28hjM+sSKYg0W>#Nglwo{(vHl$cGu#y80wvY#pl=h)tNd^rE z4+GRTnfWc|Bjxh02rpjZ!c70ymr4J%^O4laJIi}hzMPl1=YXca=A3OmZP=gx#Xi~9 z$bTO-bbV*djXB=r@h;dktN<&ks9-&75_yn_gj;Syuo-VvT^biZmRctC2*BY501kJ; zE%%+1L&S@f6ipLJ}dq`!XQSmTz+9s<{keul_ z-A~C?$4?F!)z(SFfOIXuLY$11JQ5fD2BfRpd9=W{FOdbm)*fPengr#}S>4}Nq~d%) z!5k(HyW2ZmRRjOwy9g3tG0VGW-10ZR} z|By5z6iExB{D-8~0VK`BFf^(T7DYQ??8{>&4Vw=E4wcxumsAD~9S=jlZSwsN7Qm|u>I|Dw8+zZI_QJ5Di84!I2mGFgWYC{L80 z&aQqU^*eYsQR_Q)mL7bKORP!8k5e)PtE$`cYzz#pGe6Sdx2T>&O^h}e;B5~W1Z=Ou z?<3QAnbUI4DuKH-a0Pi#hmjjj3V0q~n!V?Io=ttPJBj>AjbqmMb-O=ld&aD(zIT3I zz5(8X;c-SdHew`}art?E+Mj(;=V!$G|9{w>menyRDs~)^=Z?t4`Pwv#3)JK*0LWj% zhiQBFUP&VX=`FI6n;h>a!rA{DCF^Nx=c{{I=3-^tMDoq`A%ja3e&VAbG7FVBh6x?~ z6bcI!M3JRCKA&z>u}@yTyE0VnTYO~lke;6KpWTg($!=6fI`}TCs?axjrgZS~)^tFj zjna!Gq-9P^KBMHU6XRc-&!6&Yo%_3Ya3Qrva#U~SEYha06i_Rp-hzg59R}F*M5YoS z(mO2a;h&GkfG^CH9^TfPUcmNia60r0BRzC4;K!XT3`>{Crs4!@FFkyIL>e+oS&tHu z{FD+@s2o)Sgh~W%TnEXN_{j7jDm@1k%Jg(BNE0_MU>K!CH9z>l5Oxl3>@5i(j2u&z z-jaIId_%C?+){F#Xg~?@ihvIZmcd(+I%(-(=e*!_yfYhFe3{>4dXFGa8YUjZvPe?~TA7AT8$9gZGiChb3 zLC+{&j{?OfmOW5>!i^2nAV7xzj$XzMO$YGFA0+^vq(uU}R|$$wfYSkdBH(nOCT{vr zyq=v3VB%syOuKc$olAep$rNzs7V=M)#-L=^SYDce_Lad3x!rTc($FxGEykr!5 zCejA3I*QO2z;SPEo=(mcFkW%0UJ10YuF5>@$T35ZiJk9p731Ath98G945KsvKIk1V z3+Oe3wth=vWlpO&0|AeZ!xLl~8AN7jt4=iGEldR{Y1XQj zaFks-VSpIqx*1PzWpZL$730D;9J>XJYv$p?Qiy8KpQ(0lz`3|U`t8F5IynQNlQaCMlQTfmZyMQw9JpR8K>E!qQ@Z6i_OgG)@?`!h z*@;+%3tjgQLZR!v${DckPa+GFqc$UxPa~UQpcml6|3LXp>7?-emvbJA5<_2$TKCuB zL4fJ1fSs=KKV&WIFy#I^fM06y`A&(E?-o2CG=)sEWBXwvbU!pvnql41@4LxTmWn{6 zThG6u&=1{Gb%*bu>8Apu-ywW0ToEp#_$L@>`hDnzrr&n}9K@d_6?QuTM~;)kMdD46aEmYEX*x|Qi)p{bSdnnuE` zdvV%o3QBk?S%!#vEYD_l`8dt`uuiiWqE_z}P>|8&j5ppZhfvYsKV1RGon7sCRT)qHnNa z{)&Wc_WHG)D)t79^@u8s8TpJ*_-)=;JfT)BOw+sD>=jF+%%rxdvo<-QBmCRm|bl%^HbvPcy!4fArMlleU-h}KMGJZ zd!44e8C-j)?Xq{ReYGZitp2P>_~`RL9v1i9k2+D?H6QftnMu4Y|0`fAMn01P9!%6T zO<;<5;TvpmpJ4E_3|x5BbAJ%C*{d(+hno^W7yu4plNmTx52&YT_6nFVy1shY>>fN-E{R zKy6c4K=OzEucQV-a~c_%)0{AZJW&O}63u-cuN1fr4dMra_!}b91A!C-f|j8{O#JXu z*(4ePoC{4V&zCQ=g)hMqmjBk`h>s6Bpxq@JuMo8|ld>)vO*{SKaNTZQwT~n0Undt+c2KpYEbn3UWm4Yf4zuR` zPvffd#jL72)AL8FdWuxs2RV5D$g}i0(42~rceN?EbEAeqrU|xVP_Ar7&p6`xpsJR zX+NKHhANDw=iiC=eaBUJA9m!zT)5OkuX8XYULhrCs}__#N_BmGab}msYP?=Pbb-L0 zzT;}Rj{?LQ{udVp#8GVgv$!8W&D<&YWpNM4s(PIQ;6E4r7@8?v>YXV&VhnmOm$V~5 zdg*oAy8@pDMvOa>I7V*&M^$omq6l*9eQV*8cRmHC^a=sJP@sFLV{LJdEk44g5h$N5 zA_2P3hv~Jr2e``r9qcDy9c3NC1azmAoi-vsxYP5G9p$nJ9dbx*)m*G)Oi18U07-UO>W{RC@^>LZ7eQw~KweapD%!FqPDq^hnHMXw|R>WK(z zv{LXRX$ry+d@1|aBTyTA8P$rbWe=b}_{)P6YTdy;fXtt`E*fEZzzL|OZ$vem z-nVGM-v(!*od^O+gm4RVDAla50!*5=MYWac(@6_m3a(yfT7bcqd#@44`X_n&&V-zf z2ok-{$Aua{vSMJdgkC8Y=#`rIJw!VKOoWyr1`_{rAekUQq5#)E&4g=Y4-lkMb_M~x zw9a=Ng(i_z?2Cm2caBL%CiZ5@1MC{)ymMU_`xG@c^ZaG)S@l{_t|6-b5wJJ~Vvl7h zPODv?FvhuG#`zsz>t1&s=L!n;5D_B^pa#=TR$$yQSv~&Pwq>l`a;3<<<+(+zohbXu z;UVV8&h_Tf^YeI)*r_r>eaFJn^NX1^{{r#&_^oQJYBt%apRRxV(}0*BrI;z}4SnL0 zaIk<-(=F1bVd)vLfshB~pzenX5dcmC(u<)LOS>F+mq%Fg8`6D~9DE!lmPj8BK)1;y z#1qJap!9{D3QAw(oE+N$`hx8ue?0i%90_*H-4+%;8zl~MD&YeUt%l@O10g88*uvz| zO2U${gBtc+5u-Fn!o8mGK@~kTNQP51PC&X|B5|^7a>T7Wn*#fyHWZ0-ayO0(gx$ji zL@JSB0q_ly8RBmmK&0{t<=({pgA*6nbuAKX?@GSGdV>To7jJmXVc}pXbD;s4iwLkn zUm(596?_9_E^+^P0CE6xi3XTU{xNb74V1ZH1I$Gjzy`nvOo z9acZg20&#tQ2Jg>YzC~w<=sHRmF5M+pi`jBVthzW104{9YydIH=07or7%B#pcSFS> z-oj-pFCT|96rjoC81Ld`))PTO-Wx%&lqc9L3|av{cVh!RnAH&6y4*}Gu4+mo^mRNy z;jgCDRjB?2DEy=UkF_@sr?P$jMl&x%EUio#mqet;SW@O8s#VHRG*G5AA(UZZ8AFt* zWJM^-(4e9y7Lj4e*r1Ym$dqXj%di&vygc9c-S6J}_j~to>|_6t!&BFD-Pe8H=Y5`^ z^K*XA>)wGF{_-%y@SlM6qPqLl$+FGpg&(e&IdAFM4Ctq^wn=`e{zohL~dgB$}e36hBG`jdW>;Svj^El_w z;nC62j^5SX0mPLeP@h)Ej{V+Tk}ht;m9}8@M`O$7ldqF9Hwlwh^5gCbu&!;mVU&)6 z0!}*S%h4Ge%g%E*Wc37(R`EsZ3qoAqti2<)cI>aN4&Fi$%eY~^nH4_3gOz#ws88mz z%9HJm33+F4R)^P^Yh|x7h9~!(qRp(NjrnVwY}sFUUb@gDrMWzy^2oq0yt@WB_PJGo{<$XJ`_Oo2tqGF`Pu@Z!hw;eoVvxfU zk5&JOWYJ+a`Z*Czl@lII9w-0p>4sE=KRowNBKjPa@<>{QdIW`se=Nijw z#&d;TFQ23Th_D=7cx+-BZm|64;qu7z>5F+HGLLWk3QgD|(N}5bvZ1*B49U3B!XM`JejSFux^wB45VxV{56pddilibm9{6 z=7a!GM-j{88yDZDY`G|K@FF{SHQ8O8-121LiXW-A7cp+6lTqJIuhpxxbX7-}@7hO` z7)U6|U~`D57j~YvpS2kO)>$l3Io-XZOX>l(&E#wJZ*#XtVYd86xUEi&c(;njRx=Mq zLEsURVvPTqVoazqcF|^qJm!@Ix283=(J?GW)_ z#>!^Z8-;4TuYJF7t~polAZa!%S-L`(3k2j=eaEQx89y4W$KGbX6lJO&>^bt-8Yr=xxrCy z%<=P^KJU-1`_|@fyLuWg>A&W_^1}E5yMV9cxKA7W#{cOWJE&odPMdk{%?c~!_u6~b zd17ykoV)%YQ%+B3p;2vfCCiy8)_nBmwAqGDOxYJ(Sz>qw_F~NAoEK&nc3Y^}|I~5M zT^Ri_+~^i?O-))QWiG8@*0m>3eBXnN@;w+~muT;y-m$>dwDi_fE4-!-=+9DYh~8d9 zhN+RXP>ln2SyXH#RwD8DxM*8^9Z5k@_k+WB^I!1ilLM+<)i~6E6Q+qsS&E6R@Uo0; zjQkdq&c7Uji8Nc`g~+JF3Lcmy!YyTuB^l1Z4XChZR6;Mzp}z(K(ML;*E031msl<3b z+)?8oS9;Wt!BGXJ!%EE6c}8u25R-!^y%JPsbP-UUIe_Yn1gf)P756M=k4mDCS_bwCBk%X>ICl5pGg ztvkMam%eD1nEmy2ShjIg>a*z255pRG;`z7Y;4h2X(z7(|66sfu+JVf1%ENN_6AyCr zuMsCAzXQ2?XH)*>P2Q}}SM~(T+2KoJP!$Yn**FP2?h;Oo?_3eIY~@y_23uvo^oJgB;329RtH+mgUvBn+OKXlx93oFa>YAnWWT)VZ39b_~3Xpqf_u>zjn z>el^Za7Me8?|$u~W7rkxK}dMiAmMQe)B{$Y4lyEM`ddv-Z$5XQQZ#XPPDQ3cG!ubHwO~xX^-Iy-=4^HK7}{4Y{ZltStW!62i>wx= zahcPG^@|b$?>{&)fV#1bn}+bdX>i03yDvb z|CwiVmgx*4choA7g{cLzw|T{GmSJ_Vz^YY%j90B<&(Z(f3IYJJG-Ke%YZno_b098r zYtbIEOp&O=-*Z$^2Z;jNIuT-mnjUCA;6}hKga?UkqU4%IV5^e=YPOyqW%5iv-nMe# z()Hwtk*IGC!AFYjP0*+0!dx)v^7reKn5ptgwy&ozI1X)To?g`vKYV}5Dj@_VYw?cT%6%_4#0*?xx%#?@lkZlSlM-XSaU+9n}GCT}!GJ z0lmte0^w<{H{P4Ib8gV{|MTaCor@-xlS1JcOXCp#-m+hc){no@`m{f$VC*hd6%0-LCschLOh_ zXl~i4pQ9ji^xQp)EqUdC#2NzpXBkC+cbU z=&gg%JGi@v`+s)?-QwX%KlTc=!%E=A^T3N|zXt8Fb%tQ}tg@OCXovGaJ8Yd%yWa)0 z!`TCP@-g%hi3@>Z>zLraqx&OSHN^*zcG!AdJFN6Cu|QqWH53&BEn(bE&=MYl#*|TQ@-{a7>Vxus;&%{f;5MpO_HR`(-B?7j4Ki z&aNqQ{a&C6!Y3Xrrp?M&}>yzuhw69MBo8QT=I;!*MDYaDAJUZh`BAt|xGPkd-Bi>MJ#HrZY z)GUVGjiYJrD2}LI1Q!j%pzBGluGP*ionU({)9-UxUxHc%kRF3Tdep6x9)pPVa12DG zhp2v(YraM(c*xYVo%M^X$H3!a;j&we6l~+9w;Dwne{=t<794?53%-e=y*7&wb&v@# z2d@m*Wlf5sDT3%qcrXfLek`pUI``0o&UlSbSYJr-nK+dh>zc(SDWAAjuo>7CC{Dtr zKut$2_;x+iaOxccL(ivzM=pR}`3H6d5`5Sd;G@(kfK?ZKG4 z@9rtRIuWkVY8Aj>(zHJPaAY`b8kAO0(_8%>PrH&9ON$>ACCyt_i}o777IlE)IXH2V zEGJ;3ga)lbgsTuERkMf~soKSV4F_{a*RW<07^&Jt$iCEoK9d|=XQb*7BPBez&Pc&> zo8VD5IU+{N2{BR-7Yyqb5hDcw2N$yst-&AHR(4AWF9bWSX6C;|} zUbkL&bV0cz{=%cMZ7Uh_`(J!!Oy#~Vt~ze|Q((2TokjY7cUc-@lPp7#C0gR;fXT7;jQB(~Q5uR+{w*It zP{J6onR8SX7%72{RSD@>lX(zU$VXT~RtU=K?zrRfKp@~Bhe4((1evA~$}|r|qD<2o zWtwPRjUPa@%ftF>!O~EsAc2Q9@eU7aAI&j>_ECb8pNXj0w#(i3XfqF6*#&dL4E|#C zq0z^jgXO?M4j%5R%5dx5`|*vF(prwM+v|D?$*-nOlyc@UzNcpAM&BIZ02Ux0SOD`# zsGKMv79g3YUqUI!$+D{XAtYEl+ETHl+){A;R#i*GK6L$iaD6D1!}WR5^-n{2EE03V zLJ3MdN?9Kca6pMCA4)urfj~;)0eoQDA7LJuY@!4uo_r|rSnr8>j936mU;*+G3viDI zSb%(B0djx^F#3SR&`Nud7+MI#(5HZS_aKHP@PHj2;JBK_lMk%eAr2l$m<~i@PvoD4 zbwa`f>r{tYlzK7`@a_jWuIBON%Phz|W<`-89}AHnnFo0sOMH~8*mbVw$vmx@x^tHJ zE6wgXM#1Jgg}m;=&EI$10uSggdO#5R-&?;-6YmHL(>vTc*<(bbiuvs&y z)BDI(-iHkn7qwM<&0eQ*-co2B%RMgNw|dB`Z2HU3sRW-l#YFC1BPOCl3Nai%oL$pY zvFB?NstwY)h2RITrRa<|3*}t3jGoBRs)$g1k^hBK2&ezQQ3@I25usp!yy0Mg)dtw4 z>JVgr)iTHcRo4wr6b!Hm3{Vsd5W@xrC<+EBiVP5_4luxT>juaN26!3_kPi&-e@k`5 zLQxFI2?khgAX9+lWKG=6i3~8p5E-B-7$6xFzFF|gm3Ryc2#8k2CMZROhR8*-K*^_H z_K4aYPhq z+q`VhM#cxVZB?jk<2Z9oMAPM~H<14DvULteR9#T!0|2_2Q!0s@4HXwvp}5G)_KIyA z-*yAu71RS65sL6=q zn_trLy3GD49#<}%y>W4Ec6pHG>>+0XoXrwfuM?pvIR>&E{=Ylap|z38iImRLq{~bt z(d!PjxZ=Z>cNTFevgU6uKkdBY`*mEZOhI1WZBr7~n1v@SY4Y9PRxhbZorZ=tyhcJw zCx(Bq^Ok#VFMsDPlF<9l=9!%gxh)Xz{vjJ&Qi&4Cp>dS(+)^n$aH|!G`3LKfm>+^M zIi}9yU6m@)y=`&8`P8Yw5$5yHi(v`h7VjLr!2Wd+|IiYKZMAll-vY7No{Uw$1*Co! zjpHdyW($)c4fG)5^ffEaN5W*ScH|@S&wlObF%BdrgdBfJYxn%M7O2)r8hypYE62 z2V_nT#&X=Lb5NXiW3WA<32eF*Upc?4;+FO;67~|K_AvLZiYVtT4qeRVOMzF}it9vp zx8Jg0xgX}cK`q5Ckn1IRS`!kWaxg%n4qQZ?2voNRV?q4M2;_K9Qv|g=+!N$K7Xp3j z?xJl>gl(iw*xefan6L%%AEUuop`3L<^Mr<~(OaP8*kl3`m>^fu_KVKc@93DHUJ*Fu ztr5(;%v<>}&@*tBnW6aPbKvadOVhN~@41(1prIvrzJr_p_|#YFw{IPSnF9<))Ld%? zk;Xi~#_XK`GbU1K&-gq3xAupAdZles*On`~0e>fG3oY4Zos)Nx3mqtXrkj4&g=Xq4 zk2n5ktz2GYJe!NH@nz)q_DH@}5E--o$-J{8z0WshWO{-gK-}@usxnaPxje6e{`~l) zsaEgd(XEGs2fB+V7$c`TM^si9x*Ixj<>~*tk35#7JXF@er{#}%>1=pevT2W=|C{si zF|p6*a!Rhf^y>busPXlAQTnT(u(rXk-~F|Ng1pr#DNCMq!Jh8|uRD6}s~Xukk-fQj z+Gg<3gBK)+z~^5V3%K}1swOV$$@e@TYHd|_CSq~CT&tUlMl_j+^H_zT4yCnoQ^y1u>iORRI-jNR0hmFVxz%MY0W zdoFKT=?GZy`|;CZ|B8lPd{w-@+-7_&M@a%Mn{--7%lJfb>nX>Ni;rSykT&F!0iY_c|`VdQ> zE}Sf|S|u$6XcF}^ZV#8db^6Es#qiS~nO}z+PQQi28@Ii(a(-0f%QK~P=+3}{*Oz^K zb2Y;$4`APpeeyjxCl|~3RQyvhMZ4pO_VmP^?4Bc4pRVnD+(hvGcEKhNtBe@K;KDH+}6fAn3nuVlP(IrT)gbzoUY;Z)6A9@sA9lqa>~ z&K+FZu5OkW$Zzj zyQxcldMlpZc5AOkp82b%TuHpCY;jqT{QL7x%c-r6v(-DlTrVv$g~xI#hj0I>oHzDY zQ_S8*yZAfCo~@&GWbQlVTv%eN{IP(@R~2=f|LxbEuhU=MDik@Tcca+BvpjI8&dK17 zwDG}uyE%e#r-aY}#|mwqB&rtIl;ojJgUzoduK0SxBWMn-k~`2Ot-odd8}W!&%2>|q z{Ze>sR!*Jw)|tA(|Lin<@tEtAG$(B*aV~rJ+b5EJojQf@75Pr<5%#s7p5$nmsLLqr z`9-(r%QyEw*x9KZG-wksbn2_h30{?At3;=p&9dHv3Oi2^yW3(ODK3R&X^+Jwt_btV zYr7WP1!xcVpYbMaE|vJosg>z;GkjFSN;%7`>F(^2+y3TWO&{gzYkHTppWJ#UF{j$1 zCZe^iNljO-5ju%`18*z3hqS2GvMSZ*Y&cxGH$?Q17XkT4uO>`Z!-vf>n|4`XwVwb% zr2Pa4qTA%cEN=qBhQCu$g~*G59OQx9+169U*f=u$JKu8OKM}4i+oN0^qam-5j|Qcrg8P zY_9WpU;e_`YnQ5b7@FTWfg&w$AuuJ6EZo#aKR!)JAm2$(P{bKgH^~~h(L}FhE}FkA zh>mC9Atrql0AFnU`mr_l4W*?cpAjw(J!`VX9#8pV%UmXUKmI;MfPVBeqttx5U$;ahm-d1MyEw?;EPj8lRqQw447k zZ00MpwB1v-ms3k+w$`wi3K2K4(y~Wz$;@O(dYddzm$8B3-m+`kg_mN}Hr)&qXvoNo zF01rURB;axUUFpFHmhim3a(F(W1Hx}S7DpiH5(?uV10xkq8sQn84~wn zhJ;Vje>4j)xspsS?e1UrYJB`1ld+%Pwc5J6)esfFyMm$c-84zeNbTrfV)UAk?w<+% zu&;fRzJKD(p9T9@OVpk(uNH0jf?b9dCjERG^l#4RZ}6~ru%=fjS^0-@YpG`9K!q8> zH5u2LaW-b7nzOykZX;9p5!S@JxZl9T)*kD@ZvC?Sg9m$4+>y&g3fh_)9qcEG-9cI9 z2A)r;yzE+J5k%@W@}jc2e<*;$&t(q|=jU|wmFQ{>aR4sdr$YVlyn&Y;PZl|9^jJ_? z1;Y&j7Lh$hF0LljKw$Qs0h8_@3M`GijIGTON7&sa-aWw5{N_L`P5FnS>Za(s4R_P; zHe9YQpbVJChZzrZfQ{PAWHpqBARDzu8C@fauy7Rd2H1ajlBkKt8E4OCV~XIbO9G?L>bhx`Z^ za5|IQt`zx)ey~Xt!JJlCK^aOEZ@8U(pVTZ?7Sdxv&!Tky$)LeCe1+y9v-X>8NVh`$ zf)Fmd_c~qWpZLPywXc4`7Ye^*UYQJhb>1P5*8Y2RxZ}IPBLDSFk+YtI{-JxLn|Qym z%BtAz^q33#D48iDF;(MlxO7TI<%6xh%APLnxiAZ@ZJ&5CIV52(v7B2Y90hCYDo1&v z%R|^0QK-w!>8gDn%kH@qe?!cS!y#dbEb=9zwprHpkg8eMYcdZ+qJ^C8Kb*VUl29&F zXQO0p-v?DljTYWn@2Mg2n-ixZCukx5p%>q^@P6Y_Qo&?B)RI#%&w3a(#KFGBwaz~@ zWZ}m@#qRc=Lont2jYAxu*qCL#n(bnboiXV&w@;Wc;b`E+STvn(<~Ejpdou@qzDpuI}N6)@?Oxy0=Hh6X|9FTPl-sX(3}F)i1uXM4oxf#&Z4djT|=a z>(&WAA!qBG_DEuLX|0=267L43`WRgOIu zXzh=8MT$b_`>~Kw57WI_n0%iQoYF0sF#~9cOYr%CQ_>jpF~BbKZu|Q{&S%ZX;MJG0 z5XZ+bozO`mm`(^yXN#u894Fx--|U?5|Wdg897E4%VlHza)@WFb<>xVnes>deD=y5PZ%=@;W`61 z5XL3MZ=o@&cNm*#-22o!I>2dVSo(7m(@^hlmgks{LBA!8SbJTbZ1s>W?)yZAR2{vxUfog)<8aJLxwz zk^bbeQ8}-dc+}tXSeuORUA;Q}dG~Pb*oT295n~}y&SN2^D`^&7H5=Q;LTn8lvu(~I z2XSGY4(#m%k9lSk zrmbG|jh+0M4cMF~Y@q3Y84aJXAyV;6C?Xa2LQd_P#6Q$VFfD1@JNBXKwgnfs%tZd2 zsAmVcX2qX>Wof}(aT+rKcd0Bnqod}%OLFn=g|MmV?V972ftmC5v43K=aV#47tYk!_ z&EEZ?hojO%-(B#U{gu3(C5TEe`0#?t&VHH9?fG+bVMS(RJqGgN51m=TAF?BV=)#KpAp!YAIULoFoF@NF z8Hatw$*2k0^X-VKJh(%`x;vC#cZclY4q-lt`-+!Yo7F?X$5Gj9{B07sF(&G`zUVgY z6z-bnqy5-j;d;1eEFNbrSY<;rS%_hY9MvO-fRvIOW3Gq2~KqBKNT+>+E5S9w|BgnGyZ8i|?oekoZ{ zePfq^{aZrppGh!c|AvSrsbUAH3ml#^yGG<^b!DSLnX4!3V1Py@ZC={E$+;}tnlpQ3 zGIOO^&VUwObV|5uTL`#j^1&VLMdGJ4?K|=&#Ewc#dA*9LBb?9@KwmB zr5(Q|6W3Cs8TBz#(B{ha)}>QP60wMbF$E4r7I84Kh=W;2guuZ>APy#aor5v?4+nD) zI2btiRP@LYa4^xp!R(wx9E?1G%g13c|8g)?;9!o*Qwc+{dVGqrwGZJj+Zx^sL>Y!G zDnY~6z}sm81uqjX-seHyYsnAlSDTrScBOf)jN$LOuLUv!0yQ#z`Hs@vi*=VidHgNt z)L(00T7S40^aJ4DsLSwzZtD}r`C~Xm1L{|TS<6=m4Q=kphJ+BUoKARrU0_z-diva- z#fKM=S-JOSMx>HUnG*N8U0I(~_Uk2dLI*-uMIVep=Nyzs!#M}uD;eUh^6vV-IVUIH zRZYewU%66}S$Jx2fdfCbpa?bD;RR!;$-WChuBt2e2-R5w@9gdX8i+{{>bg6;OmfdG zGCGvn8E^LxMz!*2;7T%!)awbhZ%&j)d9HvM6V{f~iE3;AV_85&)l7o5@5Q+dFU;w6 zeVhdOgS&$aOa-Mim`V^$6^}tv$%Z`uLE{3)qm|Mi5HwEmntz$J0xeC;{zr!7PTz!2 z>Tob%!mkrm{jD1`%!d~^a^|}#K3MfH%n22Dj`%fImU&~A_3DZioz^Zfk9|(AMLWWf zP-lWkEzNpmsZ0r$!k&EC*1gW^l^|Bndj(j%{iVO|6^$QWUh%!Qvfa}i(uU~;NEn3vkT$#z5@_hEfFS6*GQjCpq9T0MJ(E>aWqO07 z^3@govl_kcn3ybokTob5DPT%efL87l;VST4S>pLMi3)3QGvJcESEk~2pu69yQBO$d zDB1!^Yj*{dWIIK6n3td$YSSbtQ+8EE0U_Jj`j8At?}@|9j|9@NOJn$_Cc(kkZ>S?P zZCkkn!l7+!<~|SPL4HqmdHKN$uR|Q(+P6`0mZO*_Q6=j@BASmdgyu7;&>uujMq9I} z0T91opiClYy}^MTz8Q$bGqU;+-oTEvkR5;8c)PLKD zD5RTNx_y)kDNT9;*~N$oZb~zRD)J0oinH5H^-vW*Q5vfFxTOpslsf=eJ8 zq>3cuP*Hb4DpdePgSk?03fQc%`Q)J<+aa8}{45xZ2^b8177T_u;zxK31|zEv29pgF z3ZMz~qX;{2IxsThTu+XQC+tV)p__rIf)C>&(SH1c_9NmcU7o4%-zAwA(Nt1WbRe7t zG<&5fhN19^>dwq6XrWmU4hP0(4LuTs{>><=)qXVIU zZvrBiNNVeeHrY&cmYu9VI?Imgix3lJk7RCW49IAQM$!Mh1DZe%D0#K2C6tt0;npnQ z6&yfSD#`2}&FEa~s63E4XVM98q5q?5+GS2k=k#pg>e_1Snj~|iQJS<g=x$+-Snq z4ChhdM}in@uLQs_>_BrUPYQl9SyCgJ4@!BmX^{8T3f#eC+=ax#`s6j(k)etiLEoOT zF;r|d8nBk`ZJin7>g-ovKYxH9`t#ix6PD0~MS7DIJW_ZyVkI7`!#FP^`8VA7MlAb7 z7IpTj0$F41Gv^yf(yeS94bII4gG^P-sO8h?-RIivX;LttO-Y@d<*+LTp;C1uX}7(x zj!N-EZB6btw-o$PP^sAs8LW*nhBdJXyGPasrcsl%e#uw06(AkxwV}VlgbI4?6&PV@ zdP7F0fp5JnK+Fg!y7;OLl{B`RPd=U8V=R-P499JJhxKLL?j}Q!|O*ix#4tD@X#9oQ=Wh+Jz+}JDRl!2zO50f1JF@yhN8Q}KT0DR|&SmiP?2 zHax&bb6DRnV7b4B;-xbNc{dk~puwE5qQTG07Fe+`;N--@fRnocRE`Ea;^bV`Rom+9 z>zv$;gsmF)4*$o!X|Mw)$7lFVMq^#JEoOu`Ib*1QqX*;W`ifg~MHP^lJZm^Ga-oL7 z+4E5>dvyLrb0FdN%MTwuer&>IT(~8X!R^A@3II#%e?eOR1)|xFs$9_maaiRg}1gBm^z>ujT za6rdWm<_m_XTU;1=L$eOIA&KC1Sd@;JE(7OF{4O9v#uRa-1@dYQo{Gr-G`z^MbC54=F#n%PsZaAuPhsN)b2Q zs`P`yx``yu{{~@^3`|xHWoKz671R^P?Ulf9(K`l|2B4V#{ocFXrL=k+|Is5ISXGgni8FRerNqZP4C^3T@M++PnK+GD!V!%kI%{jfg1y1h zmvq+q#dP%APXvLbHuWI>?&k_*ULa^KcOe3h}I*p)K2N6N7iJ&7?ACNLF*aOt+0jRZL|1xPI13@hcf?6F! z1ht3&wPFdjWQxeMl=wr^3WE-2ML)7>^|Zg&?e%cJx!^5B#Oaq~Um;cou=Dt;~ z%m8tR=X$++uDp2A@aOLX9wJ}>;yR}2K^S0yf;N!?!S;lFTT>4TwiJ;On@9>+BL!Kb z>ol^)g&wfRnx5R~vv+l6e-Z)l!?qN_wj>qP5yM+VN7gt&LDsmS7v(H`-$0!R)_8sz ztPyTIYf=|=vJ<5T4I@8(JrwIxqiwpJ=1=T%JZ>1oR3)=(Od!Yw`+#XbK#knnFsN;#`}B(Ai9PGZ+b<5uo3sTtzdlsz5akIyf?-&J6b zO)AJh>W~6Gqz)RMBv`+S^3 z7UqIbm%l73h~|n$b1BMhcaFyt*vq_+FAzykvZjQ{+2|tP)j9|w9V}l4^45Y@Jo$`# z0->GP{7-&BXs%KF$PPCfq>m%C*Mp|gnu2(SjD_Eq82gD~_0|+9%NIad9)8&d+v>8n zd$9Vf9BV5o7KCNHzP$JBtm?7(&mG^a;Mi`P`R$$sJ)ByFV0_=Y~u>W}hufnY7k@v7h-hffK=GYVpGVfN9lA;U+nX7bQFQ@?RHwMc1 z0<5#rcQ@VZ zDa^WUmw|2DfV=5N?xqZ|eHX<*u3HyjdtZd@z3B+sPwAPm=S~P#bpy7)N(XFT2H3uA z9ov^7Y(G3DnWK*GQBI?gJ?R~h<$|s+h%8H20y!q9wBh6e*aRf zME)7+@2PqQakW!DY?p`W-9i7M;_aM`+PWwgKb(cR&C7_d!hGlwpmD!SS9@V;*hSGF z{M7Wbdt{`mL2GkI2~Wo$OE=}>yX*9e9KWa7KxA~4jyiRGEwawJPQV^lTDtWfa=R3> zT>4IH@JH+0Bf&2}N@X%$o=>`{nW@wHtFyOv+2`)kRPB#Ky?s^9JI^eA{Jzjw=#ZYd z=DFGdvX8ZiN>W*{E_0wgHq-t=#o}_*oJcJBRQ7YT_>4)9X`O)L?jzbu%k8mqEpb=& zz0{pv`H#LsCyu-3dxDzb%Uz!L%n1pXZ@J*~dVlGWXeHA}TJ*YmdxVOMcie_Ci;3>H zPIz776UF6i41d}}YtUbqc;)lzT*lwsd{ZXfH$c9zab3QVxBT^nwsfUbZ``DK)-c7{ zT(AG94c_#ni>I-%7sjYRmUxDqdZbOVg3Wh@6U_9$GCW8DwAQc~MiJOPZXx z^AYq9R|-27U0mN=rD(jhIJ8=L{brzW$=^d%e)h_o0g?*HbVQHsJ3_$@B zjuap%CE9uQo0m?zpD=Z*;;h<;|7`o(Fy+dqdxGoB5<^u{Gp8laSJWFi`(C*bboO;r znrX_vrHW;!N@h|Ut{Y!K*7=-{bM;XJa~F@C+}ak6EyL(}XW{ zwspwHR@vX#@ad|m!dvR0_ol1LCDfBu>AxgOL!>g9kBhVy0@B#DO5DBS`3>8Gwq}RN z1U6p!{H$GC97lL_sJM}1m9w{UXIr;K^H~q?v#Pf_YKKFIgODQVc+b&CyJG_f-sT!LoGpSqKdRoL412D1NMqEf!LO*; zqR@K#JK~R{n>hZtQ(V;?l?0j6oz1*?N4*}G;|@+G9sR;Smi>E1`mGe%WH;%uYsb+6 z59ZNLM%R2-t_LnH^sX*WO4FsTIN3`a{Kx&E=)nNApOu8mBoX~*FC#Go%tE_MfMl1LgArCXZyx^ByV{XE&(E>t1P+(Xoo zI%7{TtNf{7G!}UMigd$!Nrx-(!50qpoFR}(xaVkrKD+$Sc)jVI-M3?|Vg9n-mbKmF z&U@LNB3YdRg-tK^UoU>QbFOx@Gd4bXEbVjc=$8sz$&v!*8R5YE_e{&!pvTLH8@j!67gppkQn$>BIJng| zM|6{tP>@lqp|s+S2me?0+ zfZw5UPJ4&9b%YJEmKY+vUu0+R32EZpA9j*YuR?r@ZHF#;&o)@?)5x}8m(+YEbA{hw zksu`Gdc5sU{T<3CJ6bzF)*JZSv{wm3)P8w($NmVOs64U1RmUSnpHU__dw01cMwvyN zJ)~pQt?+YGLJgO_;LaE>eX*U#%&8I3$SX=IUjAF(?vYxp9^_=}D*xGXx$k`C?`D}d zKT1ZS>~wOIUqrq^X>wuKM@b|V?myzkf45@3^%4hG;GzkeT~v|n#not<4eaW6aV{3%Y~t5(&1wZ^YU z6bGg}^y~$-4C;3{vIrF(4H3Sz2VUg?A@nK_+=W;9<3Sdqzi@8M320)EJprdB4BQRm zkSs(e6e-(tqc)1dQjHf)gaK&4xey%IG=Lg#28G~N_A`AZGbn^!W!gdXD%;cGRgO8~ z;>B6;hS$T*@z9`yhvGW1nTdq)v<-QFLq0t7Z{B)3)q zk+uWpCO>YfAfm_o{nyLu4Wo9M=5cS3?w4EL)w5Nd^8PK|`ET%(ig%Xs-*fhV<29MZ zZC|fW1)=KHH>ggL16jA3vWEgI4F5_OoL~B4p=1L2hbhWG`oGC;xf2t>m9GqUi^&f< zAf9^G>Kl7fOaQ>gV*nqcm!aG3Jnp&9MO>QXj8nJ@~Eg zj;{&RNp@UX;SnSuv5GEPb$v5cmK(Y=n#dj$H6RMq zfG8umV*isbS^2t7s~Br27-qdWQN{I|4kvN|X#%6rcTc8K^Vb3#DuXzNE}0Zvt)E2T zZ?8;qJOoMrbAV{UeRn^w2jK0RdiH^=$Z^`+=t(j+zK9;ywgI>jpd!NV7SoZRn+QT5 z*Xbc1M+^;oT*nznigY7jNx;yA07HZLK_aSn7SU0~6X*(8d#HF4RrbECptOp-ctwZr zwb7AHO(2_sslcXwu51>xE;3^$s$je8dw9)(pfLb~26f{u=)sXL=~DX-ktqWBH-+9# zL<I<>u}Vt+k~1Zb(0)>gdtdRC&{WbrgwcP6L0 zhxhcC9%%i#xi3vMwS!1ch$`s-J}x|l67M-b!CXBv2^K{Gi|Qo8k$%&)te<+oq9&Mn zujnf=6exHu^wgzOdgCXVpwR$Y0$3O*nNLzmS$_3^LYX1%14e0X9KTI z3?U0r{0FBU+DCYQA7XdEK!!tUx4sDtnwG2Z$b-12z`u zg90|_=qf_{K64jW_WYn@;!guufq;PagaT+!u!aY4d|o16`?@c`ArK+LB%gww!Kx;V z#meli;B4J0rvm#vvEf?_AcF)tB&Psmkhvg(Y_g^hso@3Sk5coNNAZQZ0j=@6TUG{aFP)53afZ zH|6d8B#v91czi2#$rOl00bSzA0Zb846u=Y#MNxn#3V0}*MU6X)7j7*?aSd^Sqz7J` zrANCK^c)_ZpKh?=_jGgvJ5*D%-s9MuRYE`G*t!<6+~-w*2|a9Q{1)Dwsp17@@y;xVGrk8POdhwEfMwo{)(N-V5fv%Tj=z3XR z--uPT5##F{0qaTzrAdD9=Z1M3QibQOaiCzw5e55X8BwqW>ji=N+~}+=~pkNC? zba9l)nqO+c_HVm zO2o&U2WG7jqS`n_HTY#4jQf`sv91Jj8ecc3RcQB{*QY!kHw(350t4F)46IG1twH`O zFtFpKgVt+bP38wZg4#Wtj?C-dvRMP~Q_yP+3jpt9Q(4M#avr?TcuIwGd96(G!NbeUix>+bkQvztw{tvA;LV-F|`A~ zdwH^Zp2lF-{$A`zVLHwP2F_hApAXc0&3^W`83{?=a*O_Sq{T4z{!_g{W!3wqd{%?l z#Q}!|NlONAkI;a_Ov*s!+^+u$PYttG;xJ8I?izvd$ zuc8Py&#^cr?!VNgQ zEWoaX-QB$YQLh>jL^uKiMY!lS_ymw!^{1LjI5~6?LR?K{h}&L_KRL#MO`xY+|4g7rnMwFrwIuodzM!i~%8T08VinSU+%LKp#R} z>LTbbVEH2nghNnDUxiY7O(m4lR{?-5j-c~*R^gOAPrv(yYu9x8wVkJFt+dn|@_qyc z9OD>G3VmwC;5}{0fZ)c1TZ4nk_MC1$DB#vH%XiK(4d`4WDVM>7+@}o z&`uS-#wNQeu!#okRJE12v}q)4>>5aUYAd6h2iB!LB#`nf0=r8CDNpgbl!t_{cn#^_ zb}Ak?OMekbc^F8_vj*61bzRD{x-R7*t+!Jxf|Mr&q&y5H6nSoE!5E4C{_l+1YMM7<)>1`bi|93~MF$y`=`9{AFACFq zS38NTlWR}z4Zagu)po|U4mD}^t3>lFGB`$f`c?KE>TlHs_q14_eyl2@awLu%GXvD< zHK6@@N7%SYK>IHO?Z1djSc!z<{!tsz$ysOrScqh+5@h*bY@~KASoJ+OC%Pp3R5b&xU z43eue5l);z0gs!60$x8Dw$R}$@(c=iixBWIq)>An5(;?L`VjD7E(mxLq?;JoUt7aw zAmD9fK)~yVfY-ks@cP#S-XaQkvJ7wY;XH0R+$u=Hs*x0I6?pW;bt%{?I*+U$4lHqv zsE;7suK%l1j&$J1ncQ1iSi=ri3IDZM%KfNtY-$Srys268L}SCy7ff-$9l#= z2sVSPXA!IigRF36V&kR_PA6U;KvK|IlPXt&G&${(guUiiTSx*F5PnS1X z4s|+qpjxw8Te@{j%Gt=|^UA<)Q z_lj(Y`n$q}@nitkUx~PWI&l4!!1Y(QBDvBu;`$jCsI=G%2JH`A z|8(q;7t{2)$V&{+@i5nQJe7#+pIbp(e=z8Hrh)69hK!B20$hJDaQ(gOTz~I6*H1@W zKW#-@uBeqgX(K1D28AA4 z4nhi^V5Hy~rXvLp0~9DX|$N~rtV(4+Wx%WVZHb6%i+T6;&8Ct5V1vc0LGPFv_ z(E91%AbZy{v|f~y?I;E4e~f|~(Y(2HOJ+>EAG z^UmTIy`*s_h<5^l^&N`qrlC$&*&6du4R*Q)?XctGflbML)vHW%wV_}N)+?QAkockQ!jAw3RVT`f>h zcKJRr++6E3Tj^rA)*ll1F||hi{JTglM_)cMsc2m*LHM!tBU{CJI5JeKhR7+TtTRL8 z)JUF@iE`xxd5%i8z-B3s=k$m6$$w-+z^dO6XayJr2FNX7=|1x-L%f;|f}f-m#t4SV z$bDo(LW@W)gsiIB5Uo%ho}SQg*@#-rX6P0&WAL&7BLMwPQmCPwR{(v`xIYx2)d9bR zBK4TVwsw9pwj0Hy;FC)Ip&@WlTeFqz(r-Ai%4N~g!&CD!uSQyS=o_X;J;qZd;qX6r}KZX_nu)ENH;@16zPG!JqsdIhJN_@aZNlU6YKO<#jdHM)$de4%Ph1+66!(yUSn*0?^kB z5Mn0ZnU)Z8ri=dG??AN)2w4X$%P)o#5glM;t1Mq&Wcd(3N94F`{g{$c=xzaK>e#vP z6!=urko~UjkGU4L1QtDu%juu^q!{mf%3J@i|0R&a+g-3#{rE(TljUl=_^C#t5!QC` z>V(0BuEU;@A<=ft3x<28+txK@=QfxYTL|gGiEo&nBxm`^NO|1NO}>;`I0n-c>R`IP z#WncqO;MfetbyT6+dJff!!K%!u4N$W5b5?GPC4a-VD=gX&f%t$OpM!P>#wcS*I?I{ z=XSR-%XMJ(wO&1)onouX=KrU6HR+6sNah2Y1dyr#EK#NR7@C%5-N zKJ8Vl_-Ed-QTx(&uENORN6eiGegu!0g4d9OMV0~y}D0(&2N1lM&fsMZjxT&?dL7f%Q|1Ho2kcs zZi|$WS1}QZ-;Q>Aiqh_~MH)W{v-BfiNL`?Z^=hPz@@n+Pfsx3WIJ%4 zULx_uU$4^ZDdy>Fu*+X?EtO@LzrI3$Suqk!N7%P>Rlyx+6=m&H`cD205})kD1}UjZ z2}7+e8(Sq8!_!9z#kObs7AhkSrm{7H%mUy4s}@`bUJyA zD`>>qZL9QfE~Y!pPW=2#nxF5EHgWtu*Rz=_jf^Y!x6>V;Z-*dz!hO?ac6RqShL*j! z8~paaeb5a$oD;je5`@_ZnMt5*IGCKYKD_+NHOOi8Q(#EswG;30yd_w$l+t6zyGHU& z4o}NCItFjAIS*z zR(A=#lC?~*b-1|+-qg>nE$q}(%{4Alw-+&s%@jVRNUPV*Hp@w2oBUQs!O7|%kY{~! zWBDmVfoJF5{Q&p)@n;7vSFZT8Z((PwW0G zw%fkF_Cuz_=JQH-$sv;1?bKn~YIcoOztfpxT!&x1XIM=Rqu1|3QN9J=))lv`8#ud)<%x* zlt`0D%;2kRx1`E#DZ?5Q{D{ZW>L2zB_k-V&cVmC+fPTISxjZ{yx$^cKdAu!`8uebu zi!B@?q_nNkC#384QgXCF=gh@#0+RV_u)E`&9Je_febb2S>eU*Y#3nddlE;zV=v_Ca z9`(6>Y8M)p{vFoT?*5LI4BXYKo`szHAcO8U3U{Uz7dN7*`R*>Nz?C6|_HWk)<}A|+ z=y_7~F3q5|L`vRA2Z)@UGq$WuxUEo#E}@eWee*0k$%c`A`rAen#dYO!(eRYLDy^ue zh6@4j1JAe`n48?eQ70v42;e++8oyH^z1>iCHT~XIf=+bQT-4%xZ9{j^3)$iZ_Ic6b z!z^_l?|m0ZckA9cH+_COZ#|Y-(?=$PhIJ_eN07F_`zA#r-Ybo#e)fxH>ebKv+e1!y zEpq^pXyF@%TtiwMa4X{y4!ARYp1~OJqv+*j0zTZkF}-+IIW0fU&Xw zR~wpU2vdFXAQvK8q%$fpz`|!nnf3 zA;adDRR3WKC2$m81`o^YzTR^x{Cb1gsZfeKR$_rpcU*kCCi#U-`rVD4>ULCr^gN2l zMHt~l!@ZIb81iC6{7pg|(dedZ=zMN;L{5K7Oro~BTl8Ay1w~Dq2@9)mO+mhS~`MQAVz2e4Ty`9vRdE-%zC^K$Xqx~#JkW|Y9 zhwXKBy#dY=GV;V~-kB)F2@m@V>4z^v#kiSpyR@F(H&YbSSQs4(rkrX#MD{7fM=5*wKgZ)6|n!-$94w`9=RhN*P( z!}2)>gy!bF&Wv&n5Gu8p&@!!5SxPKkV#0;@l2Qbm*gb$y$&I!${7O|R%8tDyhIxRx} zD7-OTtme~Ikqb1;6*IFGL3bw8!yDx+m~m&QFUC_v$0VEsUl+M9LjH-$3{sp!B>S9c zI59;~`Pb5ZjCkBNCLG}thiz>D{%$G`WxE)^t!ai_7iVTIW;%)>3L6bEHA{~TYFH~ftCyMfT~>pZ+v=`H z`q;*doEL8LuG8C0t^O?T+szzk`8|LrMWN5G&2HV~WjQHaiHz84|3^7143jI#Y$O_l_?LozwAmkMAnQljK@ZE7TZ zm%_stUZu*C`8k2V#`EecmtaCnMk7KS1Wq!tlrvpgeH6(7`Unr2@9FaNdg7UFA&+;I z$koE!>Fq+EVPCxJs6=pi%cB;r6(i8tEMFKhy{X8zA-}3oOnlVq-Rr?#@IgF8PcIb@ z3^}en6-839@We|2G48ymfelZCg9=_JXfW%hIBio-5u%UM9sQKYD>PwW){z1l1c&US z;7Im?EHnjs5h&v65a*$9$@7I2?pBl=n0A<@=Rh4eRq3__iPvP|P|yC^wyv z3E|Vy1coo3BGl__K6W4)M%AW7MR+Tg`$K-D1Q1FYXrq{|&mzWU%K=9|g1gy5{Buuo z(d&c?U|c2x6$|`sX)j|1)FS>?fp16$#F9TVMKoLweY|n{3b`fRg#B6ui^~q2l=Lc~ z%EhA&u7Tmu8d$<7a4elx5$LMBkeetNA#xIk%BQl}lBuviAvwS2?NhIcVwOCMFz%Uz zS}ZSKhMUaDU2hhKhMZ1eF(H%Gh^ieEz4Q6eUgV4i4B3PNi{~#wU*(5|749+(7Wh<4 z@V1!hU@yE{a1onIE!@p1LinBszaKfIP8U1JW{gTBd5)O4IiZ17c58mHs8ZltFQ$tX zOoSb1mZ00UdEf!zbcpf#gRvrCH~gQ{`FINDT=yAi5z@!bOeY{p@xrU)@XVeF%N6+E zxla#AUe$;|hzsk%)y*n9&-XuY<$-5-SK7=;yrR$vzxXulIs;1zTT~sBc7!O9h5eKT z3AGpr6X7#(^5Kt*(M1lPObiMNWOb5qX@Tw2IAqSg1Vf%k*Ag;i;5(wf1}P+LKeV?~ zdaY&L?JhT<&P4?+F8gKh+m~%!c

#3i-n>?zu{A6ls5#YSRlGK=52ns0J6h$u@$*-jYg1yD` za5C%`y71kXx`Dx-%rA;!X&JFW^-|swVKCu@E23>Fh*W+O8^hWC%tdt6zGx09@flYij+^f{f%0g&hvk5E{ENLAVnX;+QUk# z;g7w)XJjEJg!(N+_UwW8qf%(`JNkB;34ig3tz}-`8CRb;*d+^vJ!V<DuM(Ocf9r zX+|=LPr_=I8jGaZBJcehcdc+nEEl2AY|-4*fu9K}=tT-KzGSxP-x?{m>~LK6w=ga` z9cBadbqv9_F0F{Xti8=GAAgV=Y1L4Pac)EvT!7GYT4Sr_44gX`c&4)$Og8OTTWk2w zHTepZW`E=qvhgQ{6o+&vg{^`xyAYX0Cvx5UaeDmX-K)Tt)8g=a)M%IHJ)>S64BYo$` zYx0#!ZoQB$%Qli6M=#)taowXR!;Fa%MZei{Rs3?iPA(>M#?)%6!}O$&lbrxuBRb1& zPoi88u_G+%G^TOO7dSnP*ZN027Uiqa^KlOk1Rmq+z$DKjS8o#-> z#;0qi;VcVy=pKAiVxdFNk&Y!E@FC=jso8lY<5(mjS>kT=Y=l!0e+IEP?!BIbKGL~e zQJaSmop%R9XM{khc!_wnwj@V`yd#cy!aIk)SgRZQ{c-5Ko@dE1((zKhB>7KZV|4Zs{7!b76pKF4n0%!1QVAd=+@Ab9sIa>--f{t{4*V>c7x+#F_Vdx^vcKRAEGk(Wd1ephn@O zQwxJ2w-;7U}v_W9hI zIs+)EOqWr~FV;)5z``d6bw73om#Xq@D!52yB#C_E6K3f^N3l#IdA-qKm_S}!$357F z?d&78fJu!oQza+lsT_{PEj06oR1pQ<#7w`@a}z1R>HBzKKt=H19bdhAK15au6%D z*X~sV<1Q6@PH1b|Id(xxzFM6E6vV&`8$}afH`%b<+kV^%bEI49M$$oyhr_s~J^VRK z8Y&)Nsyj7|Z}y`CxcuLYCY>RWogfRzO5uQJcF~eUV-xR_o_1BN1*%n?g%$}wN%Pha z(RnLV?tm{57by=Xg?e3aEeoVB?k@e2@J~IL@;5S76g*&-`Yw0&Q0g_6_eMj&rN;TqR94Z3BO^UmlUkd*Hzci#Vqk!N}|g zFK%bAUp(o{#%NX=B2C|E0@ITS02|cLqn56G9l)D|3Xe3X!8T&>AnO3}Kz(r1Z_^os zsO)M#;fxiz0y?tc@~WQ(WRYI5M`A>?STRLy^OrA0SjL<%$Vv2i-#B)cSe^@v-u-(e zD@^$Ot7$XMahJwr&`VV+$Vd*Nt~EDi#vB}b>tan^u2_py8*Pkg{?N5jCxbR!Uhq>O zFU)J;{F~wi#b(dn)wH8nLyBT>el$6KTrK|m$fZ>{uIus8^9KdJSO<6z7lNzAT-Tf` zbHRwSVNL;^iyw9?p#prz5VcgZ;~f{q=iT zfsioBO}Ik{nvdErRP45}Apos_)pZhhS7f6kf;}|z8B*{!R4Ktpa!J|RmCs%am$~_r z&FmW#iPIPg=5OH@qTh3sSB*QP?U=iz;D_Wke-|ejc;F_N2jVB1dM+7ptL$Y4xxHhXr)@Tvi`o^y3ruTxZ)D1cTxb7p8p!oizO2ebITmH)HGDxo|9Ifz zJgE(r3`taTBA+^NsE7QApBxF-(ouEZFA_dO`(cT_X3qb$&rX%R=*ZjAthIK^s zap*6UO=|Ngeb2h)*d1e5<;L5?QK^ug?NQxisa#Yha`z-K0$It&>%jIty@^sXBbN$F zhDhX*G0KS?51n);;K7XfhGhWTp(e1MKDf7KeR`bgc(_LNKRMMSL$qW7lP8$^WN zA}&h@!fQQWSZ`T-nvl`l^3=r=)@}jL7{F6pq)Ew$rSf`qdC_c8PzPKO{Dr?|sHv~r z3j%}%tsl{kEV6CNSlNBey&0e5y-}nKbrHO)#C5N)`+vexMNWzcu!-lOl{)fTC7$id z=C@0}wl@%Eh=HqMs+7W3$FP6GR+1wpEmwhYx@E1hwE2t#`Yk8nB3fyWdz)XA^(nE2BNFkf4mHw<%W;7SOaHDGSu=;;k?SdpX{ z2Jc@ED|FyYV_rejA$(8n=KPpc1BGca`Lwc9lZbvV2GbdTrwuy~q@F9MwbY1Os&tHC z?b(~`NYY&dhRo8k+3Qo{2YQ?>-_gAS@f35Y;f<#FansJw(m%!raSE2u$^x+nWX&Il ze3cirHDbQ=r)O6I+el&(sGnL>uZ_eo7RaX1=8K5JAGnSM6F za*C1zFMBo7!Y2?Hu~w|t4O%tcF>uF8-jDdS{7+2j3=%efprHTe9)g^^ra=A|BhwRC7$~pOT*56cv+5u`JKWEB_~?h{a<{yhI8t z0+GJV>*d>>+_f~W)g_<@K{RS09HZL_qRXakz(BkEPxA4GF2Reug1Qb+jc|18g(vB6 zIcp;pc1MaDC*VsX%f>%yXawR32DnMek{^OmxiSnqa0PK3U!noZ>=0cJI*RRN_hT{$ zSL9|%O|1dhE-Eb9H}L=N0LCe23WyR3sOCJ6f#X7Q6B}9JZ_3hvBd|tAk_iW0|BH2B|x81mO2S;Xqk<5f0WAi75>rj{xw5 z~AC0`$tH%jJ1A$ZxHgF2DNRpN*G;3|PM?bobcMf%;@M)%s;0>oGG zNdp@yCpJ&5xK*wkSEEJ##8P8@8@*+IM98fkpm$!5NKvfrOx<&NyEHE7A6NP^xlrACyzRjKH8vz$$L8*K*u7Eq3BL!{#$(8rkQ04(9 z&D$g?R=hzVsy2{tA83i6Bm@JD^TK2VYKYR=;+Oq!+XpT?9LWZAv{sCNrx~l5?S-L} zg&goxf1vXx52rc)rvB9HO8PSEljeTw|LjB%fhN}!vu+b>0y$aH`hjaT-W{n^llm()3fmm7||&j80`5h1Nxu6ia4|U(lh|$!`j%52h=!Q4yIdAEC`$3Z4u_KaD2W0Z-rnUKprNe$2)R9@JlN%@T80=hAe%jF(Y_@Ao2dzOH=$nno89?0ngN*! zj@NrXT0{`875uHn=IzFebLI?f`b~dJU0Y=QQmc?>CDG3@oQChh_AEiyLFiAjk-oQN zwSLCHK`-?JSp#&SYzH*33OEtywHn4x{ElNQ$G^P(P4+?QR$-xE)d!0Qv<;BR6{Svq ziHB5;PZTs8Uer;+nA5}Ip>$)BmU#nty~Dc-o{$TMA87v)UxmL~SpqqamNI{6S2pG$ zJ|5GhYXRnU)ec`f4L?z1SAZosvLaXJchj&3c5oXqp4Foz1Wh9Hv97QK&;x943CS(E z?yX6r#w6iEC0ousiw2D8gifKM38Isx*ONqqPOOE%jOZKQLOW8p+)BC zgdYSE_Hfn;ko7x^0239Kw>W^imSiC|8#e#XT{7oJTn;?{PEd!wGXuHf`U>wY*?-GX z&{#OA3T*F6XZlL#Prm;-h@m8d6MLn_1XyN#@N}$508|9jWpt;H(rPQFkFnZuthCK( z2JKqHz2}ikVi-n}1)-Xlx^j8gNH*3uPFgd(%6m7qqRuzl&J7`)PIC;#WJmpd?OhgEy{h~-&8~Kb>xt~!8zgyBh0H7E#{Qgz)GZ&eX^8kd%om8hk9Qx49s;xh zMI)2rQ`Q2{$402tFWt+2-z`}q$qY2I6GsmEPGRY>32-)_nAd)bkSbQZ)6r;LEP5>| z>R)<~MpCoU&lz$64$iRy4BW)6oKNJgB@#pSUNb`7Chr|NROf{8ZRFw5-u#`MFrG0S zT@WCSTr_!eHzp)bOty1=Fv9v37VV|R60|3bgJuwTm$ouvb7IBY%K$(Z(FCkpvO#(O zuTKF;60Q*}&IJ#8^0RpOJ33b`(C+{(|FK@mXe|0gNY zMsKw1^07Q~{$n!vKOyrw=M84z610WX#r90Y1-Rt}GOpWPZ@)CJsN5HZpx;60ckmmF zTZSbTKCM2{X{G#|B1Z<#?>7-ONC4a3;!Eg(lYIU~vTL{5F&psNgvT_wSRlj;whsWB z2glY(5e`s8Ur2&gffxexT0X4+9+F1 z#(L`DpL+3bnqo&#lb?Yv6=4+;<`Sgw{(2+)ptS^U?I0%?Bv94Va{n<`k7>p5$sNnL*J16GyPNw%p2Kg=oZ zG@EHIot|IF(%3vy@p#PqGlOZIgX3~Su*3fgtV!bqtF>^%oTK@$I@$i_2PZD_XaA!vB=LFx3J9+&rYAq|P=%<9j!P_ZBx6&iQys&h;VI}01ZrnJ= z-JddP0|s%DQ*~XvQTH^tT1BrU6Zd)wBHTuIPBPDwWa5NW?Q`AIWY>8IylyV7e~}o# z#j-CVC`2jAsHlxl)owzbR_bkPe3L>xA~{!T27!7Wc@%cgvhzmeul3WItqx5E;>iEv z#*bTm5SnpL6D&DCVb(dkjMHw7>>vJ=`b~bd9r~s8buF#@xOa(JFo%5k@$zt5=V7M~X`iBr|G>!mUK2$+z(L}YNnvIV|6A&XJ%H1Bs%l*OUR5j(L>0PDN74)4Nu_`+279HveF z+9{@71-#!&(561Yq5D>vDGB#IX@U@Mk2v0uShbuz2cnGc!1jW2*j*aSpb$)>a3b0S z864iK(?FExWAa|mwaTPqs717$=erO(+8?0(=suxqq~;UDL;owRxcua}O4UYOxh2aF zYA?sf^aO9tNh?_Fy!@=|;XMbrj<2NrfTCN(A8`c&a3+igM5rg2|FRkWEb|6UZS*fq zk&HwMzjEs^C0({@s4tAMTJ@OmU`>`O*EGAhJD+^>*>j|?X{62ng#yHwc;FAj*>4aX zk#RC8#^R7d^(~3GFP}nJ2(f}&jeJ*#7!Fr$dse z5)h0?-*PArhQop)R>|D=LYp+m#A?ApRsP2~pZ$C3}ZH5FsnRRN=2u@MZ#mqCdMp=2HVD5M=g>Jj?qU=%`p~*S7_J== z3Nmr5Q__N^s%lo09zjdRS$>vIKR2!eoEH5D7C(yK8x~w(eH@?KxF)?S`K~FxK1;i2 z!XR^g%{M`Be}edUbuKZ*a^B#($a-)UqrQ^#{DyRhuEF8K$w)h$Ab@*e9~cd3jJ7+?F3!y8O=5jMiMh zIyPZxlE)c=piYep0_ICd{E*RkFvM>acdu%OHuu5zhTK~EsXG72@K#nh+%T$VuFRy9 z$U93ZwAza>vYqk-B87LMf4hPs0Fz!&jQH)!v6Sw!qb0=mjAkb6v#&vXG_X@}W@J$W z@dq&MfnBapwW62YuY6f9inuK789U2hEI}g$g%m?tXZCdFP7f(w)$Dy_4mGWie7*vw z)C%dT*{Yu0R>YCS%i+*aEN%IjLA;yZ5BH=feTiszBR00_qj(B%t2AFiKV5w-U?17R zW-PIsMA>o3#zSjWrjA?1)_^DVHT{rvrc@rg`pF&8tM`(wQd@DTf^e9VpkVaZ`!FA- z5hqsc+N_etI)zPW?@2fKd%mTQj#?lV77_F+b*}GHniSuCd8FS6d)4)=eM{}9X{5PGI5HnH@x=mp62h*6$|Mr zPQIs+qKBH?206@uT8<+A#zB;Ye8D-o)YWbWr^{b_@31BUYZ9mbFlFN<^R+XU#8#VpiGr|uuv4_?6sE>pl^v?^*C$N>n+0?@o1 zU9G$#*S~hZgsRs=#b8K%JrNLq7(B;RfwYn+WNUV-5FcUGO5;DNM-az;n)(=snvW_5 zp1m~3PoE!t?ja-)l=Oh`8t9G@9CHs>W;CzL3r1pn`60JkfRzzM2|+Nkm1dwrK8!ey04*t5dyCA~uCMqc|aJ z_*T`ho{y#1atP{F|A>{;{~kaCSlpTPCN`*6()__2Y^u^n9ed-|HYh+vsUa=W;?zUi zA*to(?$Hi9@r#FM@tS_suxZW1LMXvi(hJaxhc)Cwdmyv4z~A> z-fOFY?(Q!_?BNGQZyNwBfaEs7)zE^tW9vDkMa&9&GwZ{67tIFzM8GEJR;Z z5wEl|QIbGMbXf|!d0g(cA+ACmQOD818bb-?T#OPTCyAYnk&Voq7&-jSkie}@wZj%3 zzT!LM;BZubo+(YROQ5|qDZvfLl1sy~rz2$%qmGiWYad|9WPpvgDe@mZY+KVZk7$j- zMx@tWwagRMUP)(rq8hJi92!t#kEhS#@T9Nl}MFv)8AerC3L^3)}1`IYv*{CB+F^pQXO#0ybx1Ls_Ujx5U3jRBsZqtR zNoYRD4XN;xcSZCUmn|sMT#{NB z1`55n^)|8oQI`s~B2g4)@zF%k0E>u)nYb!k$hGgrVM0ac{pz)kmaAD@+`gQ4T^`n3 zQ`0zchPVLr!3d2vVH%mU3%!@Q9&OhQRFvC+#XV6kS;U+PE`;mL1o!D^s7Z$a|IS4OG^5s5iV9#K8qJdvq>B8 zE`4KD2(=T_fLqcVo7x%6h1Mp8i84sdP-hcww$1ou5pVLY?Exf!GXAYMl4dX~4E(Yy zN*BTIyx~ZDJE*|d-N+ehN{G^0nMqPw3BDc=hf{I)bj(XK77#2M)??|_9Q-N)F!XKB zi~6?6^#4yPPhI~1(3Mz;!7!~t_SA1S`p#D86sgUyBRvt0^@^9@1|AB~QxNK@U)Yvy z8zq5lwhhUIcHc4N#b_M%#^SOh))N6t5(xcb6Z>mY2EZ*_ybJF8u{N2M|6uEOwT_Lq zM{F7p=%5S0mw_s_IZTtTO2@I`cld=)hKE-y2@Tr}NzG~IsY_E_P@MLub&nznJpA|5TP*G9gt%}=2t`FDJfElHKvV~ z)p9Cgxm1>x)+FFDK!hcCBtY}>R!`t%RYu=^R z5C2nRwjZ?Kh`kgq?AsURG9XG{Tg*0@8MJ&h^p3T_ubA5agt#y02Wl)+&G75`pNtE? z2XlfL6=L>`Uy~u|3T@^x>QpJBeE82%0JYBKq=4iK(h}1^4TxUv4I&i)BFT1>3sd=` z%b7@g=xW6N2vA-T>`{%aS1io2^@eehB|id%1WSAtwO(XM4VyTy7zy1YIc@Pj6)OLK zfX&j_73G?QcTa2nDzPlJO%2G8#@1&5y0*q%%9O3w4AKdy|D?9f3;SW=C!kVt?_Z50{16>D5jR7$)os@FUX~QFD!p z<}Hg<0!9JhxJ#W4hpR9c^s6+2K zy8ZcoTKiw&?BmrcY_sZI%EHeSMQjX?Vj;PD5(FQ@=1|>iuQwtm%YT<9))M1_hNAIXudY z-)7@%TygkQrheA=Ld>K|d3^leOlcn#b78N%^5s*P^W0CcdZcT6{bj~ubUn@;?d|c4 zay;)I(3|#j4EViYIj)v&stpT-AeU|Wk{whOwes9u>8O2<)SG8c_9Ok+L_wqpZ>;VX zULXwjiJ~@fXXa5a?OVKaj2yc!z)qJG%`Iqhwm@*UO%z#BR_C?F7O|*DJW5cxpjRG#x9OMXBc}! zi8$7BtRGk!)SX^UJHCmLv&qjx{|G1Q5u5mTHJ&20#vCS$bTA#s^hhPT>T95C^UrGK zq#G6458VMW{R85tW+PI^Xn}F+eR~SksGB{GoTyuKo8-s*Ny_GfR!B*|rlIR{{b9QW z@#lsx%{BUbihzq#@yhSVZ}v~?e7}-L4xbxjB;Lypzb`yD6i4mDs1k~mSlL{|GbsD2 z+=wQ%bTexGC(Mtx>T9_mA5pRVOsLQVT>@w90Ry9ZrpOFr>(c6c(s9r@}l3sFg)D9AiTL%Lq%43c9j5pcVfAY+R5cfQ`^EvB#$61UCff`3T z7z(&IzQ+RqcB>g8re0UP@f~yS4kG3I)((Rw0pmhu!|e8>y8)3glz zt*OA*204${6cIBe-={ihe#P7J zJQ|OgD;^JXs*pBk6s4U~w>=j^cetrT-m-8drh%HZX|k$&A~xicX`ZL0L*89}#rbl! z_XM*tZ-Eg|L6g-BTBp!0>aKSak;>j?&(J3N2vXk}go;>vl@;|s&E^vLV`-{>Mn_=K z?h$Qhj1ugUD8~_;Yzr6$Q{vx);qj&->~?}BR?_J9>oqW|SwmL6og)>v zfl6uaEHTs`@n&;72iK6*p_F&J)z&zGq!SFx!sZG#vS*R@jf%!F!kKPxvQmZ&>~cp7 zB)8Gc9C!U-@$6x|bOy!!zrH9P2otj;)8+c2=z}T7YigO36jC`)sV%)qYvDCGia`f_uW1x(mr>r4NQW4xc$Y#^RVz4_L3=wiYuv-JY0@$>+3o$VPbZ}(KMJZ! z8mZi!Gih~ow6UEXr7FRw;mXyb81!T+(y#;5t93V(uT~B|`Rs*$nY%0!8=QsZowlnb zi^Z)bq1OjR`^QP%PJ4c4M|+lZ9SZ7pJI>dR~c&$e5U3BlJmOFlgKGT6c>;8V@^9csXOxc@Qp@Zy`*sis#(XTEq?4 zGpqk?NzP#=v#+k>(sq$*>JAtk^!w2QZ0>yp4f8CLw4ah;l`#%NR{l8*nnwNToM)Ji z>jvF90)CWSt{y>(LP{Pf2I0&f*wLURl@0ob7z>7_!C|t|k`v1Y;(}AGkvW4m^t2cf z>4V7?O{ei4Svt#NW}E`bLs_=haHzye=Lz_>BkN7kw7W)yU|ZjHLLX;juC5#aR5 zV@KE0j%%Xp$`TOK$c8+Z8@UJ_G3xE~cAuiqAzcPKFkUDQ(JR7P>LYLe)OIC42e^=FfU zslNgztuhJ0TzXnb{DHw)b4JD~g)}Y7aQ~EATuA_{>IwptyF3H~bEZgMf>H;0)bh&5 z=@%+;+R{eH)B9d$2Ai_Aj%U0CZEZHVT}$E1G;G)8>L3bWv%iJaL<lnEO52W4v!z zzD+n4X`}F_$gy4N06R~gS%-~bP|P*@t9(rH4R(o$%*0u zT@8#UhcO zuw@Bu7BEZ1LFh)|4KNEjGMI-F2JMBq+WCG2ioY0ogKMxF$!qj3Hr)qiYm>_+k&oX$23rb7S`X* zd!yv`22H9Q=ZGWmGNSFy34D}U-a&UE4i(67+m}D?6UPHgVh5Wt+iL!e+_5ls>qdha zdM0gb6vdvFaG9dmfE*MT#aHWM?JSH@VE9qf{aLS{an-4bZV2nzGu))3`{ilFO++pq zt|JWs++J&D(*0Ae27eQQX~fdzo?s_EIJj|AAI&-H8Vf=!Z)xm%5tMIb2)vL;aue!+*Xn~ zShiuN()Q_r1meJ4!DH-bH`?!oo&IfOEb1&g<2pwU@4G9flMTX_SX!bZB#mX9R07vMJgG*Y%S8F)Q}tu}Wpe(GLKsjFR6IO@ka>PGe4|L) zZcWt(D&dUa`B>ZGRfo!T>_B3^b5rb#rOgQj$73c2kbw5dw;il8z9nA z!=&}S{^GKPg#__E=ZRY-6F?;X>Bk{=wy#XgewjABfx@bi(Lk3ah4b$8TmTwdq^^z^ zoO6s*QkS0$IG{yiYftOe+_u`gG9o7)BN7)pKN7mgcoz$N1g298h!$QriFTc(QDZI) zRBHvN3@H9CSKuRV)ETI_8VGVYZB#~I$vbOg?0ZL>xllR0_B33R&)0J138(nd zthuDaBa$RmGYbtk@)$nrhrSkLJR51p*-Ub2@24NU>GW5fI&m*Wm%?8Qjd8jGtN8IryTBU5BOp8;0>-#(-HZ z%?;=AyOhbJw92UY&Y;QTOY@#5>1q5OZC6`~jL`ORpARkTwFsCSf7xwJ%MGJR%1Ps9CJ8v<+TfX+XvUQT;*8q5kg z&v1Wm_2j%9kqDPyf$HviHXn zAQX?`jTgrB>(n1*ev%g~C{hWW!Vl-DoIx2-S(Li_4zTBB^1FId@y3YcjJ=pNqY8fD zB;5bXkkX?5S4)BrHEX~d!E9~>mSzhiSApJ`{@!d*?M^yMxY|F=+DIp_0ESkJJuB0r zLrNz0V6?c=`*@ih$aEZP-kZozSd_z@gBLfCq>Ye1#DIkjOsx@WvXUQxG&^-YhF?)Y z%1}NN-|Yovf#)?ib)8C?oJ}#V5!E-RzM`NL7k2RQnBSXeCNNdRdD8wmK)}X-6BFz?~j^ca1_E6C%ZIZFKmVwZ1=T?w4r+&6F^|lsxW1VyR?gJ+Vgxeb*t} zZJ&^?3c>)+@gXu9q%jc)KR5g7`#7WG$RCt*Bs8!v-|)p%t4{t#wc=V*laFMoKWizO z_~9)4TJ^W*A13xp>cd^SUoE_EwD?eOF4=jE^wRDG_|I3-yk9hbhLJmT=X~Dt9WQ$lP}_{3OJrkkFO6&wZ3KZv#eK4$sMW`N;52!KTqkAecSkQep`%AqREi+4Xt4JlM%T=MpLyB-&To(IS6@vugUCQ<#jfc_g`mlYPXyNjQZ{Wp|4d^3Qz5qDYoUgEtBy1$)2Rw5?wDN-FXW=NMsLp zpE_TsUQ)V$HFn`qwU-LKZ;+udSgxf2LGcWm`8xQEfo6Z29nazJJ9KdiuAWO%{fiF~ za?HncR->pwm6pAA(yH1{4@y6mZhpb#xob3hh?TNqau@;6`4DxC$g2$gh?f*xUMt$Y z1p`v6Yk$=l6m{@z@}?usho&9)qyvVY$LM5N@1a@z!Od#wR2Pw2%BVOjtB!C?2j>8- zAC|*hJ(iY7J7eNv)GMKIT_H-$b1?)O{Ay%C%Ne&&)$neP?0W1R%Bf=a&lJnCcrFVO zHCY2{juUBW{#mr2M^g3%N{&(0q~26y z;nV|)0^Ow-HC4W77{5H{Clu#=h_2RP=25k` z3J@fuOwsj#oGu08QFELS9CI5kb|0UT9%Y;7Xp6l(q`P4L_m6A$X!p^sf?as= zUNro)PCm^lt#Avat$zPgAnr(Tb%L9ccpCJ;F4*$d12KJT9V2Unn7zs6#!rW(r=(+g zYHjNx8YhCSUf83~y}dq^d%yNozK> z9Jibaa(_&t8~$8y&A==FjAXezZUp~Z7d?fkal5FM{XIHJ4hiB_iLzlO&U;>?sg+%Q z{gRNWkWpcsZ-M%Or3ZsxYN)+~WiyK8U23NT2dL|Z_v-G`(fBDs78#?50NDpio(gR# z&s)=pxj_e7mjPwG8VQ1H2|Hc^(byXXAYh0OpyCSoBi$o%$D~_CY2y~WKfDtn7MfLy zPL(I=L-(2GnQNn?_#R~UyLl^2=b2BdyvPy}kq6y=m1Y$bGfAgr2}{!D50Paz1B8xr z_t&_A^Oe#=7HO<9+p0E2rdpzIl9gU~R(T_jNDMmX@1~QVYkLx&ord>iSA6{3p|`i^ z=kYs=`(uYrQ-kY!ANO%-+?CLSK^lYe=g&2wc^9rju_Mjuvs*i1rXT5QECwoqUzG|wwFxD)`iebV>BP9pb5YN-4p2d2ki)3G_Ss$>{@?^Ojaa zE6B{ZQ3_e7z?Nt~NQ$c{k-xz$BW~cM0W+_ylg2AFrR`(pxZt#2vkpw+jMD>>Vb4QV zMJG^7D(|CA?Xya8n=(TXra!}KZzh<=2eKE>?mZOaQxXqWSmS1GaIMONzY9V=j6bDY z%r28lg3IHH*^`uU(r~abnKsEdJ#uW1N5-hV`s+*L?b->WszXC7dqpB+z|=k@H_zXx zNpuEm=zSM$oh|s|=2^T1(=uq!)2DIdM#^bKi|MbZub2o$S1Z(qGzfckl0FVnU`IzW zHVGUtPtA2XAwe{DTFz^l%f*^0-(4u_z+@`s#BpuY!elP>61;+`vUs7|Es$yy9+O#J+rnST z7B-Yn4W?aMW$6si=+y0okG;mFaTf{IMdcmTBq+yQ;KwN;Tk+F1ePZrjjqb68Uk-k? zR#SWcRtrhmMG9rIFbh-t zGVFYf%!)4lKbPierr)oxt-8FZOs#Y)HkiDmurNEa+!rRauuivvR&2M=OXuhjtvq95 z`O34q*~@#*@79Eg*UBt9c;2)}jx_z)Q}cJ6mP^9}^WR)+L@@gnmKVnp7CCLEuQ#=Z zG>Q2qt$XIzuO!cZo2*R7BrH~rR!zygWx4ZT@_+9lvg)^6Wlh(q$+U=cniiG!0K06stPQ-8L^j^%G*G{c=IcH*= z^5WwBkEzi#*<*g6J}iEEAm%tJ5>+u1rid2t`I(3fnpm7jUQC#(Upb?iX32qJ^qqK| zl~9p2j+Kw{@fBb9D{iixD99NjR5TYTH(y{ zxS>14?&iFr6Ok=x-b+(bZ>3fTm!{4ZmFL$e{$R{XsqSxDKR@L>RgXsZx20j3#&4?9 zxI1Ov6xX>MbLCP}5$ceQ@g-#6c`+pBn;&at0qlTgQ%~r4ko)3-w9RC^|Gn~KetA4~ z2|^7rn54m(9=)!o<-Xq0na5uqr2Ct3UDiIT`AqDZ|EIC($o{A(&iS6G^=`G$;DPJt z-6cLj5|Y?>J4FSCm~ZNGYkcv47yCsuoSj6kYtHa!pzWO&dkczxql zNG$9VlhP>vMyIQ|R)#%gGe6k0zL;xs#sAX##hCyBc3sDg&&NFspLj-13>@gjEcDim zEDIbu#m;GgT388~ddE`6msTkr9-$<4i ze=&1?l&);Z86jXer+;>}cX}}Sl)|^41)UZ$&dE{%FBR6+gzlHMjt^3HXQX?2uaym( z_p=4~PGBoN9ajd^7FK#>C<2g*jq5A(gOQ3s^NFKWYyL>9$z(N`g)XUyvIyL7h33O2 z+*X2m=#x(>`gMM&jIbK)>AEGgIIuKKN5z*vmLxtAlEYk7Vp*p3PBKzBKt|o_N8;B( zRD+C2qwOf=P+6JVWOnkZ__|2hpu&Ns&0%`z(#Ok+-gXH7l+sPmtqmo_KTZ|<4HLEoph#v7Hp3cNdumb^@v8~5cke=|-Wqsw}8<^AHj z#r_5ue|?RKsnxH-O-%39%NWP{|>Qw>&54}tZyt$>oYH07+5`4 z6HYG5qd74zlh*x_ii6(b>#gV3vaBRK&~7VL=Wh>U*C&_mTwl&- z_K$I{GVph#wTrAs^*k@{{`AgmMSmabN-J5wx?Kj=ZKaS?3VtE9hy5`qrsejM$tN%J z>Tl$qm|h-R9R0#sHt#J`;p@BN+xv6I${$ne>ub-@)Dv8ymBwiSexTdwm$*+lKJ)ke z^tEv>lkOS3EF`B`l2;)2m!efe#k;`<(S@t+gM$q+hn!#CwJ7xRiaN<*=IdeCS&44E z>h8WilfJ$%uh_FXuedg+2!7rG316O+)x$Y2!UYi`(R+GpqcyTGUXFc=^B z;OQuG>9W1EyWM3&J9l?`=kspczm^oXws-!KD60Kdi5|V4pqAWnPk4N9(3#!GZD?K? z9Aal9p|QB(PJJ`z>ZJ%DGVHiNZDq(^&KeJ`)=YC%RTk^nfcNkOZO@76GM|a=Z`9bK z*D><1cP$O|8zD3I*c;Fl2ApbW#id)O#T#`T3UedM2z`JjUE7r7ElDWxu=OVMsr3&1 zsy)qEyK?*53yjN`Q{B{Y9DEWCR^a~!W-Y#CRB9cJVC`SAV3`P@tTuL>&G{MLBB1B+ zK^vYNaB^1rdx>Xj6Y@#IsaEy-eyqtRdQXBlK8mdV>~lESgZ>gkqIqre-$Lr%5o}LX z!nD+h3x)gn?pA1)1SZdDSbLxXJj}jK`lZ|4A~`@5&VEpZdlxNNU=_uOpAYu%u2}mz z^3BK^37y{iC_etf4Wh^!B>wvXbs^KNEq@+%2Bi4{5e!BHqu6EZVxxE2<&v9-jmu>_ zVNWMVuKOgr`0v7SmGJ-d!#B1W@%9MQjS148d*5H3Y;~4Z`5IU!Y)kwmy#I{mn$uY) z^VkngQT?h56qZyy_0PUt4DGjDbDJJWN$16!iSco{8+q9HrY7})ee@zXjOytX8u->I zyxxhyPgx3THgo*Naz25PGM`^WLVl=_$O+EW6oa}~j%cpyylL&YuzUA8BCMW{1?uJB z?d)^3rV;sHXfM%+n3llmNs9jJP^ugW8w#T@S2bZxm4dwy{jPVdknHxgUe0{dGl_~K zM-feCnq~PGSvFnAPEVTr=#t}+!(1(+dhSa1c7SiePSVdYd&!`!tp8e}+NC;)Bd14x zSY8}HDdk(Cd&$Kj|H%1wja|R$I?k)uzB#ReFQI*2D%7D(8J}jgSCr` z1JvJY<~GOS3_4|fHw?x?@M01w{EIjK;;jfsBd}*C&zuCVKP!g8mp4HGjAmKL&|A|VV(5rd*cp0g!iItqii?b@}?mg^dj6mcj@FuaYl zsU8Na3nSh}De{G+9EGBcn|~Yb2DW5!Y`3LEa~D)xB%mnkhP3JwAiYdN+vD=V50WAY zMXBIw(MV>4!SW-vQ+9_#Qly|LT;QlsR)N9HFK+kf>jOxNG!%u{bn1txDh&3>Wjn=S z2$CWLMR~x#F8ovp1{3tz1p{TX<$Z#QczhLKNxA7}vRJuw|^(h^O!2(r?VL(#0Jj4|605^9p zM>{vDye!yWFFu(9gCP`%fYNS#q}p%1^upQ8cD9D@V9GlWNeBhso9_ZI)F6hzc(wvy zY-Hp(>uoQe^}tVt8#?#vOMDYT>Kx`(FKa6RMFGv^Bml~g%MajRRy8&@A=zAU%jL?nww(blVOPg93cJ=5C9i0eJ#XLcp=G?ErBofbwPX zkjxW6CBc&rP@1$Ia1;vgVrCe1R0IaYJqZEG!R-KvO~B^yJ;$SC)CvOndtPVuQ{W2a z_q^hD4KlASp-wu5pyGalq=Io_%Y&E^5Bs<3t~xoYZB(GBF!+4?(SAH;B?#K8ah4sd z!s{fYRc!FrlQ>umC|#~CHo;(PtUJIqXA3bHOaYve5V)BFvCR~0Hb+Qkn*t-yE!>liAZn4^ zc+i&al7yQ z@jvP#1*T8|^&-^NeMj-2UxkkUutje+3A%2dqa%PB_u<Iz#4cwL7iu+e8dS_QFm z20gN$Af_ZLTM0HUjxLwoAQ8>cKlhS?@sHm&^oDEB|pTE2ZSzp%-@Q8oK=GP~X)50NB8#r{o zm>LsOHtXvsRDF$M5)TkV)>ow|fk(K+K$^01VrKu|O28)ulCX1B3+=WNHWCAgSiR$F zPYhXK{pSb}I5!{%r=8tkblFP4y8%hqxxU)mwh}hnfJ9hQ*~BM<;$Z(xd{*4?i0#Dz zNoh?{eF9w^4IYG)&Ek-NDvm@3^6SvWA>mEn5iY8b)xL97FJ9kDz(*C5prYr*As|<=o!y8@+DgE?0ZG`oICRst5;lqh z5`nQTqPPyUD-sAO;rMwq9go;v9FXx0ZkJUe1M$4}+kqmIL0||jr;r=v&cQgJyOn?s z1|(tUhKCnyC2Rx(5|Qh**A91&{CiG~3keW7Hy~Hqo!tn1xs`x-1Cp?FPLEe^C2Y6> zi8$jU$oUdvLl)eZ5T1*UuL%%1Hz0TFo!vN9x0Qf*1Cp?FHW-?=5;oj`L~J#Juu0WF zZbjgYfL`jiTERdtWRSLPMQm6B&A4EMO(g@fpvIByS|Qm^z`#XQ6mn46*%O!Et%waz zAQ3xzB0R7a@yioPhKy)&%vTVFkG~DrR)cs3?uPHz{oKZgy?ILqIbi2;ES%&9Fe)G* zJOttO!Tte=pMoHPNAFR_RsoR8Zx((V`U4PudP4$L<7qOWfxW|j0OC(TNZ_pTBts9d zu>Cg+F(ZEf;lyysav5ACtq$_^gy+$Wb^)XSh@Myor(c5acb2zn>z>a$&g^7dEt?F`&GeD>>5 zz|HEzuP%_`tNJ$U1nsc{j1u~maOeCQ{$ps=49u7*7mIXS*UyV?Qfje6ckGm{EPp`+bBeFZ==|Lceyk4I9L~ed;bF}1_j+y zSt{oQL^L1x2-JDY<1ocW%v_wD!1r09FO7CK3BBjPm?REm($3I4s{aB#`hSDQ?fWlK z2`K2^^LB3Fn`^LSaCt`Z`Y%xF{{`jW^c{Sr$MRpGV8QqwO+rYO2KUAPyGg*#0YQB-CES1X z8w^&^Ou8-6TpW0+%~?kq)eC3souLx_hny_`7n|^Js@kpwgm2o}8bABhEw%U0TX^)e WNy%`3=qmWfk{bqFT?acY?Ee7(knT7D diff --git a/tools/PKI_Maturity_Self_Assessment_Tool_v231220.xlsx b/tools/PKI_Maturity_Self_Assessment_Tool_v231220.xlsx deleted file mode 100644 index 50ae09546b5973bf769fc389867755754378ed62..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 110316 zcmeFY1D9^S(A-WCg2dZV82=+-J zBBTz+?Q|bcPRPGYs*@S(-P)-d5W8Ii2^2Vwb{)0UmPjO3B28_*Vy(0m_6sSq7B@Z} zo?KGbQs+9T+{v&r*Qblm#|MWIFx;l;sK#+Of46onwS7#ak1Z=Z9fYT1-;F4aWLn)- zXxF74;dBunw%blP&YD}^%eWb>L`7L?-iAqO=`|fr_sd+44>eVX9=RwuWi{KV9BOAp z)DM@qqcNk5n`9^v-G;5fUi?-?W?0CSSWcNAnllSv{YWkxb#Hb8e;{#$Ej> zQ#G#Y!z|4oe{GJ>Wu|iYY&DuUfejDpJR1h$it=V#-AoHpZ`-o)*WE^reqHrka%8d- z5$EVbP>%QMgU#Mjm;DXpPR{qsc<>d+Za2dD>0sqsFIc}R^QaDRiw(`s4lk6mn z%MmEqw^~B>gZUhSH?`w1F;dH>MO~IJKyR3jInHopKl0)-+i%Ma1aEY*vC_8K9ButC zPLg&7mW@++_LK`%`BJoiV%ojXP5|DQ*G76LyTL{}9h-qR=Pnzsfp&0ARGkA9JN@90 z$qMH**inGaO;4@6zQzwmI{X!Mgy<-Ur9qIp-2k7P-md54CpvvS?^*`F6%2y&D1^sB zh_~IKe`-MW^?+*`fL;kmzSEU7z_~Qwkqq#L?C%5B(-o|*CsfNow33GSF$(jYo=ZbM zl7YS<2l_zuc8Tcg5!W&xt)xMoO9y|NW1LHaK9T{yAqV(G^mGmA>lxNEFs-Cvo=d|% zl8O1beOH3NAqV+H^mdWz>mk=NK&_;Ko=XEik^#LX=67d+31jGEl9g zp`J@aKazpHB?kIP&Mq?irxxdT0ua9+Xwh*^vXoppZ$!mp;r>`VIxnAoAHQ3(r$th?L^AH{*oIAjWI=} zIGf!RxQNQwK_KFOoxbm5>zhAfPDh9ycUdc=kWqO^n%t^F(_S51AgIY5Q^g!AcLtDL z7atZMGsLAlC|x__s4H527f6r(B@vsy5vfC*rdPv;LivRoiq4x6pgAO~v1RyN4YVkv zbWs&r+su)Fnlzo|x13sX0>>ZDC38NPfi~h~XtrAIJz`Dt@Pe(PWX@$#YnbcEP3)m( zY~6DwlGTm!;Y}x(J)%g=iu}wxEj~<^|KO+DzY^Bfj zjw^rIWLR{S+XrLLQQ#GMx|Vlh<+{*Qd?#bO6COJPhDRJ$E`R}XWm{`deJV{ zvC9nlHvxkBc;aV{t{t;Sp!o3_b2j~58`{N zD#~}&_xQO68&Go2;0*x8lEaQO{*owA<5h%?I8ur#Fh_H^=lRW_exNZR_0y3}=8vN9 zis2}qL@)i;I4E8v>{DZ3sd;rYe|%Lp)$aa!PzB24GzoNe;m?_VAp4c#s|bGFarh}r zl&>wO5XJ~!4S(f_K;=Hsr*QrhNOkR-wISF?Fhf)Pw}~)M%E275Io{CkA$28oZ+KNE z%R{b&E91nfE=eR4=NAgi4N5=9#nm?CU0-&gTrz};Zcbm8 zRjDMS1Mg(SyT~0J#hf8RNh*sIGJjNMMv_n3)Y#{X#C2--*-yEYO%x00ww!W#=C_+o zHvOgxj$8?%v9eRy{D@eqZv9(DV6AZ{Ty>FF!W#F8T*1P`E;25;MUHt1GY!TpbFui$ zOrzJb!*!JHRIsgqCgSn?z}zffq3WwufqFk`Sv@o67kjo5Tlyl{uv+=t9$OftS69n+ zzz&mxp-rCp(}A1ihX7CN9*UI&rM4h&y;fpj&&*z|_-d!Am@ikkqejp5F&9{g0oWYy z)c_vG2a09z2q&i)D-*Cdi{knsE`KfS-#R)tX5(L%q_T4>DT(oETF-tB&t1y>H%rO1 z1%!i%1>PWT7r-?}1HJuxuH4tWWH{}<)++)?#W1gIAi_~b)3Y0-e>NjBCKNG1*%DJO zYxr07eLBCeNoEC;5Bsgef9mL`1*socXbM1FmSi3mhKZ3wF-W zyt%q(9_e+ebL*vJiafGK($>YJMDK^0KYV@&eGU7=L!}upDETChPU?Ldfd3tuxsh3o zGm8NL4Ie-N%>QX3oXky3oShi{lQI3X@MNp##AOPg`q<5V2^{L^0~8|8ORBA`3^Qf< z^TaWY>w9K092VI>t~yyD+v;3S$WKK>oi4eagiD*>>T7d<$49F%^)*G&YLfjhStJ+J z>!t-aGL{rAPe$!1Wa5^Ou(jLj%D8NCPv-hH1{^9iM5$IDiz`mfMHkWFAxpzK+Cmu- zSYx<1qA8zXuKnZ`=OiDQKM_#Ea(Ur`3Zl(w7ymDnX=OI}#e=!ZG;HN{iZtTpRB2GM7XZHZ|h zK`@w=5Pu@FXRV>4!TyGf61Y(roK~PIQ|8VwPk9BX{DrSRsRvTDWMoqJ!*{_tCCv-rQyA8Fl{2`qX@xv9cERlV#mUf zsT11980eQIO;I2^YA%>h=G{v_oTPADaN7vMQ2$(9YQPY8PRQNa(o`QUx3Y;WY3JUc zTWUG3uR@Qa6iYqb!pY$Z{#)*uk=+WO?`}InvW+8S_)ay}DJAbjnT-B)0c=y5VIPbH zWS;8i{S_K5$ZA%L)$I#=eo|F1aszb3BRo*Q5h7w7T4APMp= z5|qX-?&GS5d@C+#rL~rpK44!N-*EBNn;H229yphmSZDcg8dOH+P+-HK^Z8SRgrB7r z&)tj?;S}>9*>bV+;eHODgL(M%rtq)LXw5#07@OD5E}f}W7c_iq=m>i0#JmeJ14;y6 zOdhdVxBUN6fd3>7I$BORT-Bd6Ys&bp6+f_~yX+=qR18N?mqc7G8IB&5#V=R5Nh%uK zIFmjeAP9kw30FCWJ<=ty4F6;i3Ir0+zneU%r@lGVG5EfjX!+n-`}weVv#i)eK3pzy z6m=s^Z^7a}3Gn!_tnkxg_<8@nuHgvc4=Wwqy?XjPbYQDc9pL(I>->0VwmeEXJ37d7 zY~!$UQBhi{&6n=W<2!#S5ONg|$!cyhmzV7m)Z%0v|< z=^>NJbb{Lcg|%|LVxPEsaL^uwN}@>X(=R+6Ykz#?dz{LOtpkMM=kq71WV#z}TD<%H z9hRUjA7c1De;b_Ny#W8mBEr^yUG`iM#dVGQUW6~>9>hoT{yQNgJYUP-zG2^&3xb1^ zwaYK&*7t)WhUXiC$W6xro~*JO`AXi4-Zl8b@#rC25HYQ};{oaEbS`|bba!#xu(;V!k)(6gY)}mMTJGZ9K>vu4X`-QdAiLy@ zEpmfJU@DopMUgjxBF%8efy|Qplhk;d*Gy?=>|#J$!Y7+EPT32U*L`=U{#2IX|OGy~vkG;TP5{J#QHQ zkZ|T*Qt4VI7lJC>^2F7O+bNi*t)lDI3Dw%rhiegnu$A)IV30%+%k${EUN7_ow#S{- zuDLJlys=pURoXG_PiOYMxRgQypRa69IEGO}xQQMX{mwd&zkm5L&O|*3ra&`R)qHiY z7NQ;3d;txmF^$J@@u$=|=Re|5F-b8zv#VpQY&cvIIM<$L_jENiKw z-W=P#v~9uH9h=LR+7FHnEL-(b+Xd^o2!1fQja%}zFm%%{AAGa}{ebm5PenNEb>wiT zUK$kk;HSLw^Q=U_64D3<&t`+?EY;h=rTW=>0`$|PXT~fKNNv5>@}*&;U(K$3(Xkh# zvj#nk0$>@*8_j_^8qF^gsmI#uWXYzCb2!SV{p)2TG+e=X>C68)SYzL=;$!>66eLgG zTQ{XGiRVF3Gf+vq6GO6=w}}dhJW=oOP`H-|6g+Gq)W@2IPzY#Vv&`>aL3LJwsLgFB zjlyWYvj}@7Vtb!X^JY=_D3m$@<2~%i6l}RN;Zr@9F7`GAlz&3GjLaV5CVtjEvpfdwe_|>giSD4Kd*gM35XU@vcflR)^Dv$WC3ux3& zw%K&8Fq{!?*V)4;@CD{!RP=v1elWIt8sm3;-cOs~lqN`J#FG2U^}`r*r(b9-Q`603 zbUaUA3}IKl-byz}lnT^fCtQM1B7TwpGKmt3{ZZ_VtI`4FdDkGkVDI&!Jvj@|G+@iL zx)~GJw&P*_Awl9*dez;S?;tU4qF{$pj&N23mSB78 zDfZ=Mg@y=! z4cQH~lReW-1`NwG5(cIsYWkI+CbK~|y1)Mh37l&d%$Ch1yB8zD7Y=^cmHQ*IStP3J zD|8!HP^mC6)OE5X#bGcKVHe70%HvKoMRY~lX$ez}{;rz7FI*S>Q=BPAc@x5*=ZoH- zK#U3?_wIAw;LH#8YIgmYn;F=L#jGr!2&cejBP`Vd5k!;|~Sg=jzKh zM-qZ0wk9zfV{i7-l;$|ie62>1ux3iOX^Xro@8;ocqC@EgSzh`uzt;>EY$j8|CIoym zexRR0a8}Q%LU^@lw5Psp=4?>_5S)FjPWIA zOX5prAdPyC-G_aeTYI7!&5O*fIM;s0=#T`+@?-)ElXAd*>!$w4#*$=$6|&_ia^8#{ zz}W99M5CZc?hW*=ak|EU%AK17Q^>iZ`Qxy^<<0i#nAM0PvNZa z*;?lM$Qh`AdJAJ+qK|5q*3R!*P#{Fh`A}iMH1ekdVYVvMN{ z)&xk`2j=T93K5*4)wZ6Nhxhd4aJREJ-2Pd|xY0Y0naQX>UG=onV)i3CIJgUagey`| zjywW{K0!iAI6jHsn5sZWfR`u(I_E1?Q9V$(>~0yJEMj&_-c*mg=Fz^%s}i2ZU*+S3 z8+jHJ%Enl8E6hSjWIcU}vhZ+Uiy;>hSbc*tCS23Lg$8*HL@wqU6@hD4vYE;K4NsmH6X{Q z4(=c(3svc$ZawAA!8)LE*0B^!@fIGz_FdvP4r*l}J08wZvu8jk>{|RxjNwS^EvwSA zR-oW70l9_Cp>AZw5E&-&zxLZ+Kru0Q^^ZCGSU5Zcf#|~epQ|-%#?i7PA8e0$Xt)qs zvQn&q8X`j0dvJ5$f+ZS^P!pb2gNPq@$`LQvs|%x`2!Dn{1JRs}H+eF@HPrzrq60ym z0cYDC1Ofq1@4E&0B}etUM&HfBW2U$;5wVFO z1yDk_*m)j^Wv})*Kn{4>2yYV6@;NhXB03q%v)+vtWoeKE-SNSqm(L98D~E9R^4Ei- z;KN0x)D6*2lrdfaf>~N{DsQf3kgq|C@pIgVCK;b$sQ`dES#>nQ*=;TT0_MtJ=CIo| zx46nCXk3@36DjU)0vsP_;$vC526~9Si6Y46f72y>pVAper=Misw^_+en5g0;S;zD{vVC}zS6w_gK5cTqch1^3)YX<1FBJf84ptqp|>!6m@l|o011&XKgRIh9xyX;IoDBaH) z(|3===2?vC7fGPm4RUk0a*oM$L?^F{bQf5e;dGY_0`b|faL_i!Y{C{-nduno+rr6x zN7lcqa8C@{VAUDtewd(xW)T?s5f~HCV0{UwaTZfQ`)(W?dPDr7ZN;D^W7U%3&3m4H4gcO9>^VynZ@h;*hL}%q3yg+3rmt5+B zypvL1-YPUnWD&A9u&Um|J=`B_OdC)86X2D34R|fK6}<#xxwzjNZ4@SAUIA@}uqH}$ z0V=pQA~rN0G$Mu_;@r#%&vV6cexil#y2O2c=Ge~RTfp0@Zk@~vu}P4TWC9l7$P2hl zn2xo1XnbxW5r+wFJFs%DQ`QRd$NEZ%T7njGw_xpiejOpT`8MBbn=P75H2Bf~eFKjO{D;HO&K zSxi?!MDvI>(JyIiw+vVP{53zS-lLMk+_!UnP{&%fc7@gB%HR4A4sGK*4E zv<6$XG8+k^cnQ*aIT6D>F!4cRw;ZU}^8Io?g^rE@&r#GXbfFIM><}omeoxpCXEfrw zhD9tRC(k7~E>r49&w)k-0rP2mSETQv1MEd_(jeDAj+>emnj zPWF=P?#&>ts|YQF23u#-giZc@JEe$@P2QP&g&FWN*$xz!aswIAuo?1?k#^M(A-7Z! z679K`)mpURzRG>U)}|b!mOz)+D`evZ6Cr2o{HcM7V_JHj zOMC??0`7tr{DD~lJyXMbF+8sjwe@q!6sAAkZDGDgO!b+rnYH7Xfgrbg6>_(J7C zuiZl>hu3#*+Ew7jDr(`XlRP~?z)=rBL~f2@{gxksvnwF(CoL-KnX%KBvwPqlW==1J zUo%yD)TTs@>0l6sre*dW>{EhUX7B@nv+NKSQH2I%@#q`fzY++i`sl4jZx!TDiBcST zA%)CEA+5wKY4$_G;^;~Y3Yy<>hN44D!%oNXk<)cXKq{GLc-!0|2H|%lWz4BVGU+#G zqX)rQGOS|owqw&@+LE&%-s{=A$Yp$s%ao&#EXpv#xSEk&FbwDLl6G&6(;?qqbIs^qvfa5B0Ct9q_RMqZ-{WN5wk*JOh(r+Z|DixV8@Vf&dwt5YglhT-wAN;68lV33YQ z>{^RnwoKn!9T5J|4h)Q%*-PyTTGU}WMZh9*d==%~4>gCxE!ChlZWnMv%7 z%qN4>dpahxSL-^b8d+wGZ7V^)fZOaJ`VoXjQUDS&h$d*$*uz;*ST$)yOE*J~&U!$G;feR^0*|h;lsx2qNvT-;p!tqNtR=uo zK~I{u8(d}z7fY(3ao}C#5*6E>0ZHU36lQO6s4XGvh} zq0o$X@XLr6;ts*mKLB@DhM8-! zm_d=FXh`&!>_vq__rA9|{QvM82{z}d21XizUVoLIHg*w(e`Tem(L%ZZm36y4P{sGilw0UI8H*PCil-JgA%*x*^+hU~= z4!>w*Vb?!Y;A8N49$-rlQ@57WW<*tPajSZVl}!gvDO2yW4R<9{WS?Vz1XijafVmxj zG5rDDee4$v!A3E6UCw3F&xS&U^9?#(XV5;lFCpepDo2GjB3S$OdHLZ4^S4$Skey}W*5Ah3ke|z4tbygc^cI{*_c_b`eh0*Z6+qHQUb&V6Qtam z12HonwgiAYzfZTf!eiIMKtTHq3$UF3+UF)#OsV9V3hpV5p^a{T4*}`!hT`=45y(~r z#hVv5fPG0z!tHwuj#Sz}vAXUst1!vqLyweylE>&G-OrpN0rkID``aOom%GLmRVffz zNj1+w7~=Z8`0ZWH5K@dRt{>KtA^RpG58yYh5TVZfU5=+j$H`8Mf+LZc$gPZJw!)Z% z6xJ~3e^V;50AJ@Ava%sYsiXr@vi$(Ab=EPo83NvgQCKf`DbFW{lRgnA6?3vgI~I3O z0%|T_j7yyy?ppSZTtWy*XFCxm_>(-hbfAiwLW|o!SO&KWb#J9-bE0^}1kLCG4H{_6 zyA3YU1O`3(2S_He=TU3ubYYJL@HeTO5$y|^$eChCAimEBAam~N&-(sIW9=w{TF zqo;yY>DO2K6G~E68{tsboZyczsV9bF=YCI#&g^{o!zk)j4#uc%sHmJL)JnK~BOT7Q zGzy{+M2*!(W3S=Br$pA=ZM{KsjV>-q{52QSjJZ%l?u4f#T|em6h<6vd`mVMhAg01U zoTOX>k`V82v9hp+S&I+?gJ1+70k?wfQZS;(uqY3jB^Obmp4ZWU9{>k)y)#DAO@=v_ zwex_w22cg@*T<{R?(Q-#Io#%q{I#aEE_36jZMno~wlftpTQx)jp z6l*~1&-u;}j2Cjxag@%!{V4vP!Ma>YC1_0%@6##qN8+1BAFK{7c6;Mb{66LSPPWl=pwTE_b|XR zWo8T}gv^TmQ8-%WXF%oPF;io?VBEyg(B z?O={`?nMN{<3-#PE{~$u#jp(>M+v=IB7cr9&mAO;FN=#YXYekqWVY%q!fq1q#4VDM z&YGNT-w9vnjzkhEl4#GHUAr~dSRaD#9;+Zid$3j>BE ztaP$!U*^ojlg-cIiIR_jZLC=-p?Go`E%#eg>q7L!^V42R%=on+!^ zb^VpW&sRsdA;tkJ!g8R&YtMVy`Gt7MuDb-uA_m?q67D02fhPg~EKx|h z3nj>s1HNPzov%=l8SePmh!c3|`ovCYYTJKFLLx^u)Uv&#HfW#n39)0cua6C=ZhQm( z{g|Y?rNT?D(FA;o2P$Nf$rljj3e^N!c{m77%{-$DgXz{7$W!^SnE`12b=}I?kWtwXf&th3T*e~Bs! ztKZ7^B7_nUC&)d@tE^1(rJW3}^T(w>eKWjO(+eSil_L=Gg*f$>YXU)_s*ZXCG;xV` zj2k)BbEf33oCNvH@4Wv7&?vM=A;JoaJ6-`?TD+8MjAOKFEZ{CJk@Dq=XX{`?f50&i zAXaJndj`5D<;$Wp&DTQ=@bZ%Mr^4Nme1m{ zQXmny&wkHCGhFC|i^Up2aLvO=fx|_7(i8 zEom4mDpkczuEDW%_5yLTal8L{Y)O)7XmUU3^i&LZ__vV>ror)?3wAuz&sW$` zZt}i;P_Bwht_;A(40OQ71DlCr!^$K}m1afevWKd^4%zZ%MMmB5vUsu&=(-N)nlD?o zB6ci=R5x*AjHRlLK&KSfub}`JUv2Q;6&Po&5+$BKX8zm)B1E?Y(1pUYxv%E>Y1Wh$dqWzcFFNura* zmrm@0O-~4=`CgG@yQ0TYzC(Ui56FN1V8d@xpY_m5eG2}iF94>y95FmuOB)+zC9~U5 zRRgcqY*6_f@DbJ+XY$~~03Ge?ZLdPGEf0zqYmQ^M{lk!oPnLG)}@F~^QAco3Nsvs&kdYvgVXJ|rL()q#o z<3QSCuHfbyOx%|uQ|gg_IBzG<*-0V~4v-;Su;cXL=<>>TKc;*(jq?%tFH3Y)g;mk8 zfeOX;$`+G_Py2h)_9E0%VLTo}D>-E-gOyiexXTu_gFn;kXY*mtAp0^wo&6lg3sx(r zZ?Pr0iE~e8yQRG9Cn5T*!YHKvJ|mo5J3C+%*%UE6+fI*~o}?>94KTKa1qXvJK*SDE zjFxc!J_roQn%8COTL)=T(OJ2q+V{k6KmGV%3Eln+p)$DGY(6QGnq5KlymG{9ChVAu zXCf)}b77FxApebwcLwgltzAT`j&%v;?D?KdcGnRz;C#Ig`xr=1ACHadiu_1W7jKLQ zJ~?i4rEfN$nBM@cqWkg_-9mgIBYH?z38f6dEZDVSD?zge&tVeb&&`SAsbw0YReW2A zt{uDYq5?IzAXoyn#ug=8q_LG8ES4dBr&>`hD}Qr2%p|YXs@{GnC0!th^i#(HzNYc( zVkr`_BptD$Yz(MFmajc>m;i%FY}g*vSUs}wB45LKJi6h4M|Kv zp?4qK(nwtg!f^0Vg9GhcI{d*a#p?`mapkDtZB2vl%Xpua(9@(Br4;|~JAzBwf#HDw zyq-t`dF{=6Y->vN!PME!1u1kj3dK`lKURGoG>|0`Xu#Puvi7nRU@7)c)JLj;NIAxU zl#C=3Q0KHfk@sQxZUY`POWs>SGzhp3jwek3F6Qj;U1~&@s4IdhPB)hVKIcgRRacY( z_67Y0t);+(sS<1gv|pLA!zFrJ{_2*$I1Rdm9r_X#vmtkW?rl_+P0t>y2OBEPUPGPT zb72@+s(@I})zI~jH!2!6*(n-Ti=r2xC#nDL85>~ghSXx>1&c}&4F;S!4|e@lkxgd( zSVPikB{se(htn94FzjfAvb)IFioPyHpri$K`~L!Sli?-8BW5Fnc5d~G20kyjH;J4M z&WfbPwoFN+3o-D)$TNb4so(@l(Th+HGPnWRltYW1wt0p%{wpYV4lN`G)(!WAst!BJ z{|MN@rlhJo3M%IZ-V!1&M4d?doJnROnLm=)6F;vi%pW=uWZaUJ$Se&N!>YJ~Xlsgb zZnhec#5+sLG7lBV3AahB=vM8)beIH7p@45hakmypt52j+Dli+oB!|B?fXQtxQx0sq z6f!;t{aene0P|NOXBIICzk_gM2$MC}9XyhqAQ$j%bf($3PNUqCA!xr57_#@Y$a?j? z)F>+yEMpZomVMlPmbH5&*%j~^N7U-$cu{*cT!{+?>QpEUfo16v8|Y9Cu$MX%<@VI@ zouLZ2)BYMmULWNrm6McQR}mDQnWoTW*zhS}gZYD(k$ByK5_UGgcH+WPNPcsA6TY{j zu-}NT4`6ay0FLl$TVT<>MZrqNU=*+15jNAj@A)HAr|6y=ej&L;l}4(Cymn?_8JK+h zx(mnq7TNq-TFo98nm3(UC}@}E5&;nf2JNo_R%HFe4l>C5^EBC3Dq?6cbC`(?^?WGt z0F^ZB#3pT&Rd#x6GP{d6sm0sn{`O8CFRhSj0Svw)D^N3MW_XJ;E0SY|JGyhs7Ew<) zC>$qpV-{CtPo6KhQRPM)5${p+7sNl|mH&w@JJ->%E0RF}pcxrEi>2zSOO)V&6{fYB zE6ND-c;qClTVlcwJHJ1#`K!bk&{wS$1J@#5OQ+!~vqv4-U*$FZ(YAG2|3l~SWUnS_ z(&^RJOXsW4{mm(jZ&QZ&aDo_JE_!m8tuw>>#i-MLeAU>~iV zldLa`!{q3N%S)re`>qe8mp=JdNDznuW0o|+#`@NIFFa}K21_UbO^FjH^dI|ygdC&2 za610o-Ef+$%t6ySG8~G&n#o_?sVnrc5`J*vh9?Q2dlSF*NYRJtzQeL;CuChod$A`n z?s0J=eu*1;p^q<-*PA7rzqRsajd%S#*C77DceAGNG(w6Um?MeUGeG?5co7lA=2~nO z?PPeug)|j$a0D=`qr-y`Kb#{;h$5+m&5E#_I_!cyj=-2Y)TL}sc|F(P*m)8hKRo-9AP zSnm7T5!KJvtn0i!h6a!i?JbwS>`ew|Yz?ejs;=6meEG24U`=`S;chKQt%t92Y(3oH zO`n~74ijGeLis#&QE!2VSq^aPAYSixac_a|*hBLmKeWS6h;!>G?CEvkY=JMGb!lll z+isWDTLx-jo*3_I4{_u1{|#x6=k9iWDVXos!bfn$w*?ZO2w2A0<-Nz&mJa7_Y9q^a zm#%K>qCoUtnd^>8VnjSb1?{`l6;%U_E&iOifTuw}G-1n3)62rp+nQdF_0aIvRSmnV zCqm94pGLE7ut&I=SUxm)OHaddZPtaySd2MT@sa_)Ve0k#4la=kySpWf=Iw^+%3j;^ z@@I%M(9PZ4^n6KA`)jW2YNHGBeEZVz4u6F99FO!K@Rhm&U$xfJ5{_z5(2}mU?bfVI zbT~L6hGNthq45wA;%#W)h7y%wGjS8CK{RrWrKwL6fWCka`dg{bxA#E94M)$~Al7}* zs~~hb-H2od{FlTA|+d#qJ0fn(GM77)rE7Mdv_oFgnOn_nN9cBznM&zjohZc8c_z;yiw$GfTx}77zk;1aLKI@pgOrPJQ3) zv)Se$ck-dw_zE(9CKC_RdHLbc=CQ3KqhtTYl|846PH%2`a2;WleRG>|`42kR=LYXj zJ&bn0Zo99#3Ek%Ob%F}E?so<`f_-(GOG{5*Ao zH@z@5J2LW3IQw;aHQ9D+E}D5$E7W~?yFa-Ef|BY$L7kTqe3sJrfyWU1z45n$tzbON z>fhC?fXh9qW&%c8ee1yTSHzkG0!o(u7nFop6xDn{B+f%`OlE&vJ#rvIbEc zvG>B3aaEGM#UlhEmm}Bm42EUe#Uup5%MXUVhoLftmeMpE;apUeUyr3d3>9A&F`_~N z<;++Clp*PGK!$cP3G!1Bf!yhWV`Wv~Yf58Hg3<5#c@nzYiq$$6mJ zvgR1#m^lv>O6CN`uYWuF_{GdnP>-J}!hU2ghsac#B|^Xs-yG}77O{=_+AS%fal%HE zfkH@j0CLE}=MKfBE7_eTkKBVS$ztkb$HnY7YaQ zPDQoB;DYxgg8g*s7|N{px}GKR$Nbq5Trd{c6f$TgK17UiuSz8e#C}`v_b6`*7 z1BE>l2a;2jQK_sG@bZ%s#e9L$7?GGW-JfD3@Kf?z5#Tf=*y*Xiq5-v`;+6JIxL*(_!y_^Z%eTZnqS9MnJcMQ-t&4U^>=4)MRqyGt%RRxan-LRlScAQYo{H!@DtrdR&wd|dH(Vw|ZDYm>fNA_B`$WcVQrzr4qaKiR+;@+!^fu)ZK| zK&}9K*@U2Y-9SHJQD&Og%#K(LHz*s)gD3cToXJUJ>k@ZD-lFEi;F~jO`i^KYHJ7k` zC*^J-mz}spajFHu6>3bYZk}2gVIrn@<@XJAbu?4RYK%bzmtojnAWvafQV{rEn*&i@ zD(OTmy2+D^cr3~A8w9396(Dzpq5se}Q&N?p1xHmP`{O4 z;Jp3GD16dG(i1&$LIk!w!Y`k!d%nnTuc_(pLiE>P^tmJ~hYWe)m^*Oyfj)~$He(i@ zSOXGdkaz?5;&+S7{FyX!lOc|(~A@a>? z9E-QypnPA3!4`k zf?qmToet@3N5{>Gfr-w3=DoJy>Af;?9OcHW3w4C}NTPw#SI3j>qE&FdLxN=?(8HCN z@oBv{nvVIQeF-$MhONfN(TtWz4Cnjn#t0Y&k#KFx2jx!jQaD2;KYW82AFcC5n$~8G68LTg zI3r@GahzBQqJL}R`(yFEW3;ed{;7@yVkUNq$|j;Rj<+vv_8Td!Echf8j^=!4RT~m9 zT_#D_*~hVf&(M7rmZD)+C>OS(>rvDoD^2Cbk;Ki5a;^ zHO98s#^D~uwpM?q6@ zG4eSWmZ4~rZn!0RqLXR}ji)!4#T5ugv;~##SOHN-rhrleY<6*RZ|cZmdI0z{-pzn! zHH}oJ2MN)&a>c9O<87*#!V?nmWW}UpB&xx1P^j{10Th3xf72>yk`R{N{^6xjs z(+?ygXU;l#?l6cvP~OpqC^(_UDW%(pJL769m@(92WN}YXi#rnBf{NI;nC%KHFfSDB z7=V>h+)Cev#?xd=mrLyjLecK(P;_*-#9`6Ap=$87Q&A|-9!9=>_iu$_$*&$#M;yq_ z3a%v zdJOl~euQ@5SQkwwTvQeP?Av@pG4;B1p9(2#^zSd=*9oI=Ed~%4$PPg4C}-rbXtWm6 z&&dG?YZ@smPb>HYlaz40&lqb$HT{F1DdN`zl5tEL1T-Pu%=v48V3ZZze&r%$MRcgg zVKJ?7q5|h@7B5!nAsZu>@%;>5e{dUBBW>4a0(P^;kvNsx)-JrfYr7`3?Y!qDiszT>62*2YspUpE&RD?*lDuMNHA369|p) zWtPuRdgIbFS=6$f!uSv`61+$XL;?ZJk>b1U=g7br@M$9iSXZMDz0vqwrxKeSkEvD{ zE_Qbx7oLi#;(fx$FTF>{$2B-qRM9043EZu6UG)ymj4yAa!@I|~*R#Pl;Ah<7@rW2) zt%>4&s zj?Cz(;PGQ`F5IbVndAOYS-6@b(d%2kVOrQLlKqMd3w!4l7xo-oRWLAC)0F8av`^ZD14lv!7%?|p!6y&d)ds4&UHu$Dm|1Mwf z7R`9I=um7p$QsLt;b=7ZPc4e~gUlH%nQk)Ljm86Pfc& z%lDR<>(Ce8bks-VfW{WPZ)2Hw5}zNH%qcC)iDS-^>;jax%8kINEFQm2D!#5P7F2Q| z&cQ4H<|p}(jCV`h+AZkuuIFy&$Me=Z`Dp3t?(M*iHATALHh&3=)wWYWNd)2z0Sa9`CF(T&=BV}C z>+bdB42j^x)8-L`L{`(s)rCc?vVv8m^X1f;3v1%LMWo%sHRRgWA>g`}wIw^MnDOBN z?ity(*1G1~y!BXtl%GH`awMJrf`g;av$j`5D{1GuydX^pRrG!MeedS@^zy>;rRKB6 z=6s=2S9id{JA@SVq#3tU^tl^{x-{cj^xEeYxn%#;l5ThfpbPGdg+^f0-N!W3A=x}a z9f~|P(eoN0qy4rYY+Tn>PPcXtD8ke<0^pi{)n|uO) zV=ef!D7<8J$$S?o%5s?JBF2@qd@uXj2H9?`E0m8>l8h?Z-c;qin+J zlE;NAu!LMH41%kYyF@RO3>r9Uh;hK!D2S1!qEyu3V(PKlTYB!|9ndmeCXGE6!i^*q zsmgSL?Z~0ffOe>v=AhtJ)&}*7n4yAYurL`W7h-*pY|Laug!l3&A>zzJ~|3R=0fTu#BT5Fi~kF;AKSG zl7R^r?G;i4-eXycWYw0-f8bp2Mb}cUjE`$iq_4+n;i=m}_&z}I$Ro;6@aHEA^%A$c z*ohLwX#pDLiHi-P<*nxRI4u0KK~eIDZ50C~kT(ALx7tWmWG4ER6dN!ECCW#RH-It2 z9V`SYIVY^M2b2SeWPQXI0e6;mOL&s}owvmM4hIgMQ9y3SM5}L&;8Zw#1@>D?#&i`9Tvw_sz)Dom za5e3tKVo|n_@3N)0;3Nq4@V3jBSwC`60`r?7oE!((5V<24x);C93Ch~g&@F=poPHR zJFCr}Li(Q05@#fu`hyCGPq3%;k%p|Xnxt(r7)Ei0J){GM4;ChB%aOo8q=F_q@}e1X*2YL< z-TnpIR9ff&w|E>n#=~H^H?9}S!p5YLmr2iII{Yjwu_KJWOSgQL{k>0GV%h{FQPwYp zr0*H3-l79n;q+v5HjQFCB6&$M7#f%x2;6$pdGGo&Ypi4kupu(o0rC|1<1jqZph*`NZCYi3_ zbj|w4XnMo6)N_@@!Q3iBM`4+m(Z%@p^J420Zp;+s+VDYm85V!txm&xh^H90xkMmH) zUDHYXPO)ftO(27d>nmFG%GXkqkxD6(PQc1kmdRLhpVVU}N>{qO0ysWE6CT7RGq3d4 zI6)8T%-~Jab7++W$34imY+VJ~E{1Jn&5fxRs_*&0%S&!tDnoJ~W7L`XBN z^G1=K7FbG<%KJ;qK2qgG7n%u095@1<_zt|ro*7WnkAIh;{jkYCkD#E>1COr~LhcJRx03nr6 zh14cr>OB3gCLRSI(t1EKFqyWo}|FZzN8c2?KM-a!rD94CfoQ2PA1L zFpX7YaC_T%@T-}6jAv^;`|Jj(8i1`~Uo}C9Z{9}S$QT|S5d)|a9ca=lTWz179&)j6 zd~Jb}2f_2yo!RQC42$pP1aUss%>lb73pBf0crM7el)HJ8^rsOpT)EWAS;0wx-`6Wk ztqgn+Az@=K2BS++cDO{E+991zLb%}^2~0q7m6DGzZYObvOg{F`k-M}XDF=`&(HiIy ziPY+_0hvfcob!3_{iXpyM?#oTa={!L8bj(#Rfrh9JsCai#mukiodPsWo$Vh_eW45& zhpAZht1L1iV!#-`UXOrx|3njn`#A|@spux+J6JIaP|=D2Gmm2@a;#w#D>`w0znRRY zK=*J=8p|D;M*FEP#|RmwDxNbQ42qlrDbf)#DAVQLHB*%UXvG#A^2GWbIynF=R_3Y_ zI%mm!r==)pKuL9oUnMXhRErKx6MikWa;T@kS3c%ZZeT<@$L0-lLQ}4NpXP{(!f9=( zJFwL~;d8dEneQeuQ4oZAd6&#r=>?vfu$L8EdRavb zzarFuioo500OX2nUBZA+glke5BA7&APK_5`_3~6ya4!=+XRbIi&pg!aBF^rv2Vp9} zx@AqfX|71Q-*Er=2Ks+f0FGFk*EvuD05FUL{Qr1n82;gzNl=gZq2dhMrhMd8^A54J z3&T6(XLFu%nUby^h65uWg^fgMlQN%q zB=?Iymr6WO{CerSh$O3vPC`#;3rxi6oeLQqhTHFC!PEp`^ADUWZnUkI;F`VzLT=F3 z<`1K6WeI2ZWco9$0;;wYn)o2Fjq4g77M~3s)*6y`uVt%d)}<`hhBV-71be?Op!6iA z_<@sYVA4>0Z~wU4ToAl7TV|I$T0QmYqyQU08jRmN-R6TTc~ri0O+tbl zh{R{yQB@PLlU_b|_cb$~f3j4L@th#4Y+pzQ-ZSXBWYHRv+03}X08W9ubc#_eMWT?xgWHccuP{cx z2?FA@FFgfsp*%SVJR76W#&5Ocklqiv@7I#eBL}PJqx_cA%jWyXuSwz0VW96RmwldpTj=d=O#-DJx>)jErss5OG!kCnPr zpM%r9)Mn7vrSzaPR(m8iG*3Oa-ZX1jIXb)_AM@uye-@vsCaflcfFWRrnc`>E1dt%4 ziJ9)@GO{0;L(#HZZWBq1haLv7&xW`pw*@x=V2GF!XT$^yA*6|zl4d3Zxo=%lGmP@E zvg9lxndhwrh8yHMU5t-kYWu0SKR&!0)IW_^UQQojCf#tqD?V?>8&$f?f%hADLzg|m z|Hm8QW|13vuHZ9@&3G+BUWjG2;e+-Jt~5)xDEEM3XXFG3A)<(x;%1Zt7s1B-Dji58-%HGHNGtiwbL=yIg-iJ#W8lf4)BJc4Ib2jN7$)v0v@92V7e} z+i(2Y!R?Bm{E$bc_FSkr3HY*@(VgV*a=e)>_xXNnmv4X3U$FkBJNtL>5cwKEpBE9@ z7cz~PQr%gw&&AyCbf>qI9pFwa9WS5P<0J28vhTaS%?Rt;{fMs!>+^cp4XbCD`%nA0 zsXa2DlI7JWO;JP)NwcH2cwma2Yn*9T>2pUhSc#!R zy;RL+$-NcRE>2^$^bH>ZC_*PcS2Zv=+-GA_!ws+PN)MFRbblBW=!%ItaRuJJ`tNO@ zD(j`1x9;yHpZBl!>+q#<@%EnXr*UzxZER1Mc3RR-(63$0a}?YK$nzwglN!*^#mae6 zFx*BRT8oSfjoG%F@dh&uJng&{UTdjax0&{yVn`OK)U-mQ!{4n#Mvc|O5J@At5n51g z0<=0zX*@kP>(R?xpisBqy}%Fdx9Z3WO_2K zFVMc*X^Q(#q#jk9bdS$pt=zzvxeSYU_eza@$2ECo#Zl^922mcY<_-6iFQ2ViGjNkL z9(gVi+6T35@*BaIKNxW2<(yND$D%Q5gI^#gpLmF)Dv>>|KD$O#mlds~n9yxf- zWqMCVvR8&do6A{EMR6iznIA4WM35NXehs91xOZ7{|Goxv-dh{2qJLE5JbP~N6?e*T zy+t|zZ7N<&vtD)Y;?QnzZc7cW`kPVOybRY!Q*$45S`%?@W(F#zMQ~nmuG&Vj*)QzL zuL508_JNpFof2~BnM5nhUTVIW8y>8?VWHdLsC61Hsib0=zE3%Inlc*hfJS!M{Fr-# zR#Ixos<0LX{QEtF?6O#*U44zlYeq=} z_fBkM&u#sn6#Znj)?@O(i69AN3jh7pg&vnA>|1i>~f6 zPO?Xf2txpg1$-j0Xa+^Q+RDRQBYHh& zF2%|PIN#znhkRRV>uB%E(uy!V(-TN7HF=;^3#!5!sq#m6{&^GtIGskF#MSNak$;f- zD9x80=!)l=-PN_jZANYY#50P811RvC@1ipBrI<%6zKYk`*lU=Hs9$6nOgnmJPeaMJ zNjNm~&nw#=h{ry-M_?UTTl0%|r9%%tCo24~awzTGw62psTB&#iy=66yXMiShD%Hd5 z{*Fop7&15&&&j%ui8Q_eq8|edg6afK7;rH|*Xrn?`xC|uvedsLJgjrF-0xwV0zw}@ zc_n$d@2UGPmwc}AN~gOC+*u9SDu(-z|5s}n_VCJDHk!z&<>Jq~z0I<_ZT9}r4~>I>kj*_a%g8lajTu`xR9R@+UrqR64{mQla_?#9 zU^!!uTYlr_#S_GxGemsZ7WX%e{D1X?n^Zz|y7atzw4)QkFX=V{>uWQ%wTmk}=qS&7 zrH!kjh<O<)Z5zU}MrlnD0U9~J56abc#G5wDlk zj@({ka5?6(R>$qYn|7_p_l>F?~f91Ho2dQOK5+dPpD{6f0DE;f|A5 zt^0G#sg|Ne6;??SsxkDZ;Y8559^)Mn$chDM9*OY*&YTjm@O9HssiSX)_E`IqV21S-L18~^yZTq@$U0MKJdr$j7*1^1r|BN zIw;Iv8pZNAop49?>W0bQqn65__tZs=m^~Ezk1x;z-7%>E?~{NC#cf*D5=2b$H7$`d}9aF3FuzP!YGi;?q_^!rgA>vtHzTa#@iM!9m=-=t+)LlIQ z*Y_o1p*dv=!LBb2Xe8zZx=wO&V*LhkLh<;uc7h>*J!Jn%`~GZfRoAMEn>&BiT&r)B z4E5&Z(YUWZVz!htYZKD2L6P;b6eT(Tk&kDE;!+k~yul;C54iv@9v1t%S# z0gY8_Ze4Lov8}^&k26RyP&Badu3BNvQYf!MZV&csTM;g=5Mz?A(#*h5Dr$P@-%MSA zNu_X_!~+eEeHbmOMjH?>JD<>?Dn>G~GTLvtw03CE*tTo_EwzL=an^4UHjiCv*Xwk3 zq(}G?^6mWs6pZ3!J955evvh6`vi_%;zj&J4yK1uPVypUS$7`W?(xhq4bLdbn@X$R* zM2}x5SuJFvTC2A<*u$FnTPnJF1f^=8`es_Ij}a0KqUK+wn`}j?*90&DvCF{(c#YFU zs@sOfovI5j&o3l@iQ&I+JCz?IulunUX!lRI?U-Uf%mGa16K;oV_v%BK9C@F_os#}f z`{yP#FFR#?HSb1wcUE@fJtJEl8ZrqMG;pQDaFzDxoqElyt|5roOrAAEJtBDHo5@lC zvYjwJZgDhp-nES;n7si~LEAJaT8ps9;iv4&nfjeB&gGejyD}Id+#2K$Oak<2q)Ib( z_@wt~VQh5=$9U-T6%g~c&lrBBR~dECIJXg#d_}F71d>I$R=o##@lc!wm?*xD?~y*m z?@v-WP5L-qDNWUcF}%B8xuheyqyIQwJM1tQg*Ir`gz*gfA;ZW90$XT&8IA2f&oChn zUy7~-f@$t2pf(3};!kK6X@IdFUqRa>o5p))Y6M)^PZ?gkJk++Rzq3dWpC$!ks|T7= z3V47SBLR7K8GB6gJGmB3eTnrvLDghqY{x{S`PYPvNKAn8&3fIdYt>N^amc$0_)w(klb54A4pWV^Ps7kYWa&%TA zEb-MB;EHcM!e9{W(-;L%uE_O@z*5>qk{xW2tq|$amvh2=3a4>Er6yWA#`C4ROsmne z*r#S1HO`b>P%#21P!L}JKp2PAtd)m>qViK-FT_jq!UF^Gx{;Mz7_={mZE(rWZj)rbwEYfItvoP*|)O`Dvnp1KCB6Md$j4P_?a1gap&ZJ ztsVsJ8E<|!7gRCitLkiBRTuF!(^Cwe#c66@AedzTYAYm*O6`yF0v?*WqY8p?6d|>Y&3cr4ExLo(;(h3UAOgXpSP|>}X|jCnzf?*xuWx5`$JJ#$ zk3c+N9yaI5(=!t#HgqABLXc!(+N#~U;7tutO65?gm)IpA_`@15Z zp#=wipadE^F#3@A#xDiRo($xf?Sb_{S+nQayICExAWovZdSvw9Lv}^YhOKFInV1c#>aPH7nV34_8wVE^;E;^$~RT(xv^>rD<8YsUR{Nn-e<0-c7Wx8PO*{B zHCkz@gIFmgk>qzdf^|-UfF@Ew&oTLGl5x_eg+81P17oc+)gJB1P}smB>GYKrsVY&) zpV=|SG<7*cXLWIr@n2xU!dt0XbPf1;gj29H{?#pWJ3~C4zO$&w1X9uZ0+N z(Wj(gOP#e13uqh(&Pl%`)c-w{oS-NY5-URr+Jelz7;>*Ph;>eVZ-xF!Y!Wm^w+YuE zI7a9cNHps$AO0lb&VF~IfqG|J$3>a1{P{o;jxKkEdW48R|9yp6tr@6OXgxb0d0w+f zEmhKHt$$K-{+kT#k!q7*BdS44l|g8kdIAshB~TV4N2?h=fUQVV4-jn=sNz&fNL!y- z4h=SB^RE9hPl(H-Zi4_FywcSC>rW(#Qc1x9^Oaz9dI-YH5M9|Eb2*zSM##680C^8! zYAMZ)UWY2*&ZW28N(a$lfW2*6?_es`bPFNjq%AMw)FNm;oF%O)L*EBIvEcuiKgDF| zrp_foU~K+GrV0$vZp7*GqkK=Bj$REJ`$qGhdwfsU%1PN>=$NO}p7Ss3wP#=w?f(s` zXBnpsbMZv@daW1vXQ7MCaE`_oKY+{ThZ1&VqhBYSG&Uf-o)34uB_Sy92ZxPc0l4Y9P#x*--UZulQM;0UH&RB?9#)Ah&`OChq&!qac4wcuM^7VGM9;%Wq>*-riC z#;G6sH`#_c&;02E&~_3Q0vAC1`jX44?G>bLX~2J=fkhv9Mabk;0*q8m9Gccv zu%bkbMK^-)Jl#^bFR@}ZZgP7Rdn+U*81MTz?v?7F!X38g-_oS>rT(uAEVy4ag+|z8 z3;eot8p#=d*mSK9GN?)}B$C$>t}DfMVqH*4{6Xsf_r|5H-^IxUPJm3+j6;U;8Zrz9 zXvqE=8TwG#Joh99)hz*SOd|Z} zHexdhYE*>9v938fY%so59Qkb9_g^PC$b*k|BH8+r7H2d_v@wNig=Lwhvs z#5q2wnSK*(5NIAAhP>`6;sAvan!bgA!ZO1v9>Kn^HG(VVLMf8)OQrpyH%1&tbdxK` zFP(Zr_6f4`p3~pWAWj$i)jFQ9fD$%YKm$a@Mt$Q#hLWMYxtDTu2JS8S`CDy<)StkO zLz{k&^J3`XEPbpXr;KUCnEtm%-&5 zNo^4a!jAKsGDy+*NVD+QJ*XMpiXc(UGIi|<5%?1xe=QiCg++i#tIL7`t*kpgNKy-j zXmG+M*pY`~M03bkxoG&=lOZa^@ZVy+0(AZh2MB|0&00PUJ+Y@*KB+JpbW>!-J${`u z7GDYTHOj}>g9M}s$ay&VXcXEAyqaVTjr#Bx4au24beU4{Ni%%@nZAHJ*&jhAOXtfH zMLWN<@G)UJ(`RwaH6DqGZRM4}?=<1c`808B@Rzs~240cub^>uA*)c`XZSe4vv4r_D zNBapH#C!6dc>1EYe1YTj&j0L!qlg;u;vfPFC&92}4D!J^$5#ZCyvCOd^jbr}?U7m@ zW-CB~-Bppo`+R!>DfDBp%sG*Z!v2zLB;gVnn)$8sYBD^}9Pi9?B$+J1hTj=eZiqQB zx{qw1KP^q8FzJrlxQpj>$~n_`(|m^ym>;v^;O@>`4IlBB6%qKF82rF3o@Cc}kEM-; zc+GU#oZ9{I&PdU$&EGSYAz`=zMr{u%7O~OpF)e-ty?#-;3xT8 z9Uw(}I~q(em%iF+0A`U!=!FT+q1qZAgNQp5do0Kn0IUhn!X~mIgVidK$Q!Bhh98j=y zB?Z6UNz>B$Bu~pz%SI(bGr|5U9QQ4dNik$_3Q8iS@7;ZcilzF%jLJ&RLpIC={G0FD zu1SCVk=Yp;kqWOBmqm=WV1FjBt1MOLI}w654zF0%KUD|9z@0esH0j?7IEwria~r;% z^S>Q_E=tJnE`T=^PCnFbSp5+M@;eO#mRK2#@><>D`7JnG94VsFuSEjL%Qg1$SOrmS zWK#jduOq<#c;V-}pVI1`jp3y1_~F9w#638H#$wLK@UQ+a8^=|5(rGmwRED@-d$g~SFMZ;dv5DaGw-V%PZFVHZS=6*^_55Aw?})`YgD z-2{pfujL&<6D{Pad-T+y98`}XckkCT3iSNx+HE97nErN{b8bWr-)}!ZZO9-08MU+C zBGjYIqHs5T_i{NLxf>=jxRFwK51*9{bK`MC(y*@FwCi1GuKIl6+)R@$N<6cYv}>G& z3714}HpREZ(=q{FK5}`{PBAtIwalzB@Q{)C%ChGzqvoL}KvIS${Ba8$6MXsOlgy$| zkoN2xdMK1xAyC%N%;6iQqvs)uOxoh($s92Ndq@` zl-j-r!+7V<+FReN(DkrpraR}0wEaPP^MP&Q3{GWbZ})VSev54JvG{%p#pLwIal6@z zodRXv_^L#v0-++4PcTo%8^80DN3lMwKg2b*)4fP3J&{@jc(kCu`J>Ry z$DYu~{7@c5x;k)D!4j~Dmt*zS)MU;NX)PD{Zp>E^IfwnlqvLVmXrX?CmMwr#Vx$vj zXX1;FI%Xb|k>e4SDWkb@Aes^K(4D5^>T;B};o~boELAwPVZQw!UU7)APBE0P3s3s18bwyZR1F zq?B3*!i;wbL251`sUEBW(g-}0X9?7g^Lz57!&qOE&b$p zHL1sq74nWk2u^AzqFLk-4$29Ry|L0QNY$VOr{@_7Qy?jY9Jku{!yp}*0!tt>PaGv| zU4V~eD3N%|e<16I<&gy2&&l08K9NA}l>lyOH0X=?`F-6d#=H5>pWAu0E@e+eis#YVaNAi=*7Pca$qQQ$v> z|Nip1&CQRMpWAOPn^Vs1xoQpk+hEC*$892jxhmgX$(n<2W$PRdS&O#{N?c$hw*(#4 z=xc=X-Yx`RDd?|9{9_Qs;RX2oQ;8r9;<-x0Y$r?IRicp{mG+AlgxDyyI1qR`x|$bt z%vx>6VYWt0Mo!Q4EU%tN_`0$b@93ys@ltq+2bzJ{Ql7je$fW9>5BaW7D$BzFBPRCg zc7(LvOT-46e$gu;4oHdr&=~PgB>p6D76zQGnQ>w|SOV-^neNWgjrZ18b;R2g;g?qd z<*1CdGb7Gnk(RT{Sq1MTi(0M@_Bce29POy1i%kfB##+nMBM&^QxDK59Em6rp6BNLp z8U)E)f)LVjdfwaOsf_d=atoV^KC|-A@*9v$_+^xuFseRmB$?w7dHfo4BKQSt${NnJ zj;UdL4V~tWj^Le`>AbF(ReH;QY_W?w#n>LE~aByAL`J@-dzMdzmGY2oK z6vvO=&dV{By+nVGcuI~XAbmHC1|a{2k?~%2qEL`ierdU!RbF4xJcChAS5OVphH7b9 zqTHI4!}iK86%$d!}4mRE56_ex_+Yxc@yCr3Jfqa(WSp~`&BwG-+A4rinqlU1QU)<7b2O*s|-Q#MhFF7{e@prL!W1M83RSMD%11C+h3lf|s zSN%T{&F{rd;hcU_*k#W+Ai?adul;r8;j%(;@+dHB_S< zUC%If)Cld)0^`pqK#SVPFPj>jv!*5h0`ccdl!CFe9nhhh?9 zW9=xE4lslrq6F%}g@sko*$rhJKwpTW$xrDMMwlT+nO&i|6_O)_{Bn@SlGPLWVuo6MLj51WQuH9p?P8I9|hMu|x`x26}-c>?2?=q7x_Hwj!+yw9;`i(nqI{Zjano zFRqsBZnZ4Si#KW7tUEo>u)o|caGP)sMRr3P23OPMuRy%n3KDnm;$3aoMqG*allE?N z?f3u;!WXx*SsqK@opfb~AMd-W;J~EVa5i~sOrGcI&5RpGZPu&XbxRE4wbM*W50wjceFwGD`Nwns#DFDX)$f}=ct zTr8dOV;0zl;FnJU_^ls*09I$a{gpp>Py_s3%_Sge*H~RUrH{Br zc>{nwuqP-xoJTy=o?=!|4ED}`@C&%Nc!2dZkQv_{S$qHpl7KFJ-g*N(MlF-Y{S2O) zc)-<^fEnNXN`|W;d^eteizz-+uDMcN9{(sYOnO$(jBl~La4;yj8-Jk5@$CcN_*QNH zObU~k_iq8<^xrmT!E#TA;FqXykGj7v``um8tj?Ce0m2+hnNj6w|T6^JVkhIdTW1UdJ(fP=#x9k_ssg+UL9LL&xR?>}iAC{H@{g z<^1SDt!HI(M1RVq`zlL_$)cA!%er`jMpeq=f$x!v-L}oGH7n9+YtGB4bKMqxBE6Ud zOH;@<{<}VaEw|~{o16OceR^+Y3C2SXHTYXx=$=hq@D4C->Wo`&;u5+8ml742MjEmV z2#rt7l;!;5q;iY>e9fd{d*!#IvKG4+_i4^^b^dG2X*=-QxXFBD0c?xDew~3U2tOPB zA0>HnzX9>LcqmPWZARzF1exV7FLcKEs-1e-`3X z3mhxDnQSzn%$~%<(W5Hw7TepS8!mZb5)Qexo4Pn{>SRM?S)Y0Gp#nqVwOrst1w1?- zX{>Hz!yjUczE7X?9rk61^Pq0^`rL>ktF7@7i5JJCH*U%C@xpnPHw>&TY ziuTv!FcAhFo0gdBSOkIk?Rv~JEm6bMr+@wSCLow|Oor5cfsQ)nmE8p&uZf15?a zFw~H16i;qgzE@cD3##+{94gK;yXGbIu9MBq6MK}uRT-T#L+jU3P@|NI4ipk1Vf_JN z)}*;JI`Ie`)P-O=p}9k-hP^<$9`tO3+Pz!u4YHx&MDVDremf zXHDY)08FO-e;t(>|Lv%(ZIeNV9DGfB$&0rg&n!f4-^YwBBSWRqIdRkVP`v z_}$en%F`&OtORk>J2dS!z594^i}&X^>kpw)LSD~(Tt8+pAP6d7 z+fTfAK!kZn$x}1c4}hR}AtI)0tF<{c!w3X@>=BRV1L0j-wWv49NRU{=Q1dW_D-L$a zH3oYfzECGkgM4{6ln>2xOiscIZN&X=JeM#}N_IRPP&l)2mnE#)gHT8If%|UK8>Y}< zgLboMUA0Y5+#pFv$@^+h|!*Kxyjzb&=A*O4*>Rr6YS3EAcDCKlN;|0=C^=^7+R{`9F@z@-~>9KX*(z1aLL_W(-AR zlL}+zhOJxMU77o{psq9zE@TrqaHie5Uo@(3;QEM%GYZPbQ@3CBXLFM#6RQ`F#Nd*j zT7AYEkBhfS(QeU{=Zx-c_U_=79h<9nbDnggW8o6PNxn4C2OOySq{?hhWRt4@T!Qkl ze>=Ogvv-Ny&DcxJ-w^QYOQ&Bqheo8Jxh98Zt1G+jJNNkSJCg3R;me*N&!?UGuHILj z$fRD%3dn>5nF!|d`mC9N>V^r?I`jn#l5Pglccng+i+t|=X}OL{%=gHhheq*Z#RHB< z@6Q4CxU>0J53f;ac2BYOaDT)+by4Udnf9kZv4?My?lC;J6-#RH<2>g}cK}Xf$hXI9{i|Cu+$w>j-bZ0&Jb|R?YQFc#FHRyy==lLX_58bKa$$oi+~UK?Qecci(iG<)vGUu1 z!hRC|ArI~vwr3nR^z{M>w$METQx61v#ef?}t!bi#dXJjP()<)for+R|%cv*2Cq(&#f4B|m<4 zeSUfXfu}Ate?{`BwlebKw21y0xu@9KgO_pu&Y}~8=7DUkOJ(p)kg_}%X@f|Q{Iu(3sokg6I%g%TG!BNe0UnW!$ae_#A z^3-v}8N`CJI^8&j6C%9@2``tt=Gj}LVuNf|dYP`fU{ql``ec4q@tSu+L0PZ0+n^-~ z$2}$dh$|dqV5b_S(N}E~P?nVv-XT);1Ya^x841!nk%%9cOg5E*VV4;D@72$8F;u;5 zoQ6gnzipXh<#^usF|-&l&}y)y>A%+8Z#?aijxA$d)b%A?z?2YcbqS^N ze82s*B9Mw$maQ_T&R{SqN|r87A~`VSL>HejGE?6!l9#tthNrwVdr<6R0wTQN>2OB7 zhIyzDnS4%wFSe#uvuze+f-I_Ci6B;Gl`;L@clZD{-s$sfoB2P9Y|>K10k@c5(`f$} zSKk<%OVDi{+qP}nHcxEZ$%*X~=ft-8#I|kQ#)#KwFE_6zHLpU#Cp{Dw7aSRG2zTeD`Rjn zH0P`i;*nPbVn`ng)luM_woyVCFwcLxiVHl$%UN(n-jK;vfUy>HPdj{Ea9w7cB7Q1tw}01$g*Qvu6e5w2+9jkg1hebbFnIE<^0UyH zy)FJ9<}Aa8a7gU41XyoRaeCsHgg1GSFXTNm6chx&9;@eshNB#V*{;G;rMYPIjHpa) zP}I!Yd-_ZY%=NCQgFq})EXYHR_3?k~as9=3V*ZQ`B5*(3yfnJ4XXp5g$vl|*n z62}Y{D47!SZ3_It>{t_a6W^@YcXN9Y{^#dzSYETX)BleC&EFlG611` zc<1u`6516$Z}gI9F3cOk3*R!X=S0HzZC>@xwEqp zBTgb0$+y@OdXHW+Q(WCtk=n3(=^5s&(>+&zg*^9F*lr-Orv5H0&6{GMHz#$}JPa`Bf&)|NDArZuo3 zxlHwX99qar+6(`Qph&Sy@3Cgxr@{u>V5Q$jhg5A9Kx9W&+*4UtVUTssav6Jj9DR*{ z`u+|UHsKMI@e0lJS%Vx-eUkW!@srY8c;J;QTM{IUEBKRinlRKi^^3nXTr)ca?{R!U zp1XC0_?JXse^a_9d}e4gGa^r}o*#iR+6$OgVdLb8ML!Swq$$zThCfBq zBn8T7>bFX;Te6U9@BLQgI4HOXw^kE^DPeVu^>f0I`AN9uaIYhXVC*iTk%m3YE-d6h z{lDu9Hy1!Dzivx}Mb?{B`9{gjcTM&YtL;dBGTl@p=cdnyCMyeHB$nO9WQnj*kr7_2 z2;Urd&M=Pj427M&#V6gT>!SEEURXwZu$B8URTa^NGhS?vrZfU&>um|Q2+aHuH-uha zC}M6k`R&`BC;SFpKWvk5*+?l%rjJCJegcFo6ye{s++HC-puupHTO<+( zC_tkHz#f&AfJqo3pT_YrMuRN=AxtX`xV@zA((rO;Zf|kx zlUn@QP+vi?JH)Kvm4B_G)luD=G2ft0R$SXxa2$7mzU@@7e*p}gu|-f7ziWf_#R;B5YLbZ*G8;t1Xt?4`f=CQc^KVW?uzgg3O#|KJ8yy=~;yFf=2F z#J}1eGlLRzr;o^YxFP}zbY6iLHqj@TMhRkwI^?KFR?n;>{$g%SNG}YTN)sK7T~zMq zWDx!VG>&~QGgvuwOl0#&t6LI;*d*~o5-!N{gpYdRETn~2KAbW&p@BR(Cjx4uuQ8TL zwfF&>-BZF0%~SxZfl@btC#u&Bd5tLWW4_r40jGTGWJ1>?%{4~L&>i)7S7r3{x`t*$ z9uajY2!DMa=!f1#hLPJ^VUH#S1sq%U1L>znxzqvn7~@_H05Wmg1DtGtsk$~2xDkvb z9gl%>#b80dLg0Ki5r8n$p#gN zkZ_hTmGT4hxzcmD7yY@6L8 zxlCNXhWO2P1Y=!1EonR{q(B&Ngr-2K-LVhdmfyL7inC?U1%M;uRVCeC>LC;7Zbj98g11xQrXN9o930FJC|Asx2cMUH8MG(I<6uT zvoqlhJ~>-sQ|D&k0qp@)EHaY!(+6$q5y`DMili+isRqoFBDW;6*b-9rCRu;dHFmVW$-!dT!57f1<)6&psVKtP&1o z?xqmmpM`_!^3lzun@47p4+3GXB-&5nJJ357kT;kuFBHvek-R^{R59(M$ zpj%nShFPE`@0?1o|7zgYT+U*>KsK%>s^RDb1SXo(VhE}_riEpDf;`o-LdjFK&lLApx@^?j$WbD5d5h@h^%`DWPMcgIw%h zN*9GcQRrsc^>ej@Ds51SSy&D^Rp zA@dS!CE4{tCPuz#&Nc;u*Ml|w#xkyXiK71t?__H9Sl#0j8Vq)y32?1y#rOx4t{ z;~P@-!0{dd+?G?jm@sr$JQ;3rth7#P@fX;rxB~&{sHO zU?kqKTy*|H@YT3#fzRxb_HoU##Qoiu!jJcu(iJQyay}$UH%wQD) z%A0~*Zj-`~&Ix$~tfP#}T7y7n8}IH7OSF9pQFhNDq{|9UNnpO@>XVCf+GfFpVNtRJ zgE5Kq;s=+nH&Q&SW7awq!-c6p+tz4#3`nTx-|BB}?xqVZDBIkPA(9G=Y^V zVk@>PM+5PiMCOd)!Tmi`Ux)A15Yt{xx=KJjG~uj#?bO~a#^^2}GLcbpls@r;%k3nt z=1dx#zrO!-k{py~TG+|PkYB!WqWSK7^3_iNLT)iIG}K>X`lA+?cE3YgcGN$bMDZFbeUf>h~)#+6zLIKojnK+W!bs~$D0_3JsLypT<`{FP8od2x+Y!8)KNajq2Q1*&3tD=hytHJ+oeP) zTB1PLa@~{f0G68LQIo*ecTOxt0ovF*&i(u(#To?8a9hDt86R4T49ajQElCBjZ`7d^ z&>LY~(6FU=H7DuMVcUwC6XXS4yyL<5eLkx{oKiYFak>kE$UL`#uE`fu=0(Jn9!W{JL6acXXbU5_tjG=o9%6aC$=?a#!q zb`?Y2kV&7JbZCVpOwx)_fQWq&d~kk8iojEnFvMX!CWOf--0T;yq@`C>AJ(bu>PB9 zk#ZPNJbpIqW<^|8<1oSUG-#@nYlwzTQ%gHvA7eaWY6;9^zay#l;0CS18b{T#lg4*{ zo$U#>=Y~nf0iDHh1^mGeHQ&Aj*3%;_6>~N)Igmu8@4|vSo@u0m13N(@qMXqdjeHt= zt$^=7aj$X5XR0$p%Fm|lVq#VeVztO`pw~ENa0hQrOb5WcHW}R>l=>wqx7gcLc6vc`&I!m;Vi{!Gl^ zV~-MfINT^%qn&X9Z z!6tN-ShJH#L4Un&2B3F-{{}T;UWYXj?ixhKczS~gsWbP*&)YR(d>BGS%~6e3`?xvZ z&NE>$JccTfr|tEo@JY6E$*YB=M$TKQ1lL^v6WX1Mc|+h(TDRxp+5Jf@^o?SP|DT9j8DXqVm$IHKL?_ucJx(8j?C>0l`B{*)RZ zY@4DBLwG_-=2<*()^e<>{4DJY@haa)Z$_WivMwNsxfP+z)VyAuDOVFg$!xuZk$x?gI*aq+9E#vu87CPE?8F96gFE&w+mJa1bxGjh+(Iqm zoOwiU3|1*q!biVG28#X@MTee1voCZ#$B;9U;SW6^m-kD)cYSdOg5}m57Sk&BgmBm* z)<@veZp3WfO^U*4)^`F%yF_1E4Unu;*BueqJmysYs0Wcqx48!;ZF^kdO@&}~lG-%eJv!;+wnN10{5ZK*{07lyE=6<;@m)#7)Z zomJeop)CTsYDxb)ZwcZtY*huMK3yy2q0t>iM|%5;xdE61bI4tuvl)a2glSI+wlegw zsosGX^MH{EX_odotjMrEqtRD6^uN2DB6$al>}-z-#IT1yW=-01KWOW-!^mUC`H4h= z6aTTLBNrWD0)RcRQF2}Z%}dU|PHcH0zxm&Am16=LTN{tx_q_a?3C3Vhd3Jv`h!aVha`d}MsmwoX~>ozVcr+QU5ciF@}*g* zx*%lPI~ZOAU9aRp&aGEk`1gmB-|C`?alPbGEuZlnvm3&pnb5Y!8$SJ9e@3gHcVFXa zFGh4QJYQ#DWLOnnq#f9RMn!X?6K(U7ab}P>*>H&xz?Png+~sgfVe0sTU>7XCv;S=Y z^Kl}c>!}|tD`VEz+o@5i45))*x6vmBz~0Uw3LT_=MxW$f6*a*j4D{!Tb_BW?^zYl_ zZgs!f#*63%*M_0Z!kf>PZ0HU2({k>QX(s4w=I-iv7y!V@~~?PKAEdxJBHa7uF1Ea`OmW1<6+2g^Yob`wEM<; zq1af=qbW3}WL1gGGcOUs9hN}m`jQ3>sh5^f^T7^amx+KI{SCw^KbVmiDG(bpheh{ug`_{5;ovjH7EtTx0;b^sO;OaNs3*AT&0zw-k)G(b;~ot!1if^^XZH^Vzb-nl)pwuJw(urIQa5m zZsPV(D-IIgL(Z{ko<08JJs?nq2d8#z)aHKs{m*jK`(AEKDxrYB|0mJc?bpFocQ(_UMCh2pwK9*ZRf*VOoY2qHUy-XCq3!$foVv!#qzAyX?Fm5n&w2bZ3Au z^(G|LvuNLjS#Q5Fe@~N9segz}IHoWrj&aSK zAkUfrx4hW!d88T3+v7tCn*@X#h1SGk-#hfHQcr}Gza&@H1oN5@PsQ(P<}KpXS*jb& zb0E+6>^H)45js4{EHe`vEghMXHcsO^b8MpU;8`uh8VE-=&1Hm+OazqQ`~#>jz_`B0 zu#9~~HC?BFy2TJ~uNFdO5)JOc)#WdgPTaa;K;ojZUqz~7RN0WxyOG~q^Y4Hjp(52@ zR~!7&9rkU=Dk$jiT#uuuITYr|(5BFuR0{|m(b%2#Y}n2ZjTGk~-8dEI0%Tal?c8Tt zIhM7>@sHkdVt71PRUh)lemY&9mQ&7*WBr#;ZyA&28zYg;cS-$5G&M|(6JS(Q=6JG{ z{yLje08!d4LBeXQICs+Y)7^^_t9X-;hJ|i86?ipae9j9_q?E4M-J%~?XBQ$ydN|0~wysx)CAEClzFoP3ici6K=Gki?<%IIDUO znz`Rg6S9S~P*VMNqgRF^o_zjyq}iOW!CHV$rLw~$x3;E>h|lzvN_bX91AA5#J&0?; z8EZ}h8=VEpbeCKl&yxjS_Qp?N#-SlL$~1+JpuqDL-mm-KVXeC2PD{DEL%-2u7cQt{ zk@~c~?ZNhvExVKj>fjfHA1!b_=j8Fj3_w_oIA#JnBAD3+_&QYCEs9UmDA}cbDL1VT zB!oBypLV%qq8GPJu9{Xh`s^R%5cL`~Rq^vDfX{F^7VIV!bd_Rf94 z>gLd+)8Ltxk2h{FX^ar%duz7d0g3xR%v%4Kt*u@h{!;fx&^uxYUx3!{tQjh8*=LdSkd)svhYD z^nBi)mlEoKeO4Oud=3|O(cad>6E1{Exu$02L-GZJdtFkF>`##mGnd4I#R|7bJ}M0% z++M@564prSVhW)2atZ8KADN6S7i!X>KTi5kD&XxBpHz*6t^m6~=%$2^Ot@a>>eAV5 zf<`O)x;#6bgL$;-0$r)(j{C{svEHy|(eP1HD@*y0C_>#;U8~CA_YllS?k3Kly(JY8 zl<22MpVj}B3Y`^@Ct{$@4MegY;S7&cieufWfIM6j?{Ds%H2Fwl8i{GSRoNRXb&f_g z=luYxT(vlylaaICRHBJ^$YP2OQza=@JkAMt)E4dmg*!leC)OcnP@(eLU+@gzZb<<3 zn~!q>+^)+ltPcB;C=!V?x6dRa`i*Yk7vvHnaBX2VLZI_-+3B6Tw!UN<-VX? zaQt>r6D$=&F}2RJ`@@$vFTF;}a>9Gbt(#4ngRX!|_uHx)R@q$zQ-PZ?dE4YKDy~PW zNF>zjzS}rIG*8tb!S%eC;PCWXac;4ofkuDij`$PS<-~|XJEL$|XFVL!d#Eq#@ML

J1s2uic$X&1K}5pjli`KwC)ANbQTB zOtxMUz`v$qNJWXwe7r343;6^+cZr6A~|cp&P!?HFkZ0%!Lq5MBRid!Tz$xcd_7up zM8@n?qT%%1ZZT8fY}3_v1;TQTles@*lD*)XxuA_8B;q3n+1xDESbW1oT(;66+!}u< zhPJm+{@3m!ZlA0-Wki2f16&L@)lw;sg4SP8d_DXu*_a0g3l?6`yiI)zA>^~>X1A03 zhjYNM4xu7^(kfS%n7VnUu+)7%-YfMFv*C8VkVR(24&yFd7}kvHXJi|Bs*~2hVh+_h zv~0H^3H~6RG-!R-AZ*vTJrh8{X2KghTm!f6f?U!l$HxZKgoqS-FUvHZy%eQMa0m?v zQlT{E?8J^Ks4RRq)XfUh$G?90;}s}%06%yT2zMGRWEh2W2DklCwH-(By~Vq0|vQE$aEv^XjKUYgWR1@>KwF$G?3SZcJv`d8F=bTkST%D=k= zgD&8j#~ELzUY5oE0p0a&9DCB~nNc4A=1tuP4I9jkQ%N+a(*_B<#hMoH7?qA~{N#S& zS~cru+^+e&IR^xZV82D{xEzSn#ef0(E<%p5YL&wEo78>@amL~$2KE8%YFv(vYNJ)( zj8wMW&}bRwo`A}j7|yT%){y+a#aLaWE&LG~2nduJ7zqA9#n{Ew)7H%8zss>RyRjlm0sehrwoA6ygaeOO62& zBY(tw>6WKxtiKj?&=9)c&lsfkLydNHhI`{Q#&{xfF^6wLxlpu0o|R8Kd3( zEj}JzZv3a**St^teeXVPfkX#8LhlmIHXs)^tMxxdH?}Bs1jBl46WQ)rUeW|IJM7NA zFYw!_VdO^u!{&$J^~%w=NYx$?k)01SD_2`Ikip*v^{X{=F@TxZaB~q7`S5u=_$d- zUnwxLhZ*JH{6rHLeAArLSyvF1hwRfBVFy4eBEjK;2ZyyD(q9m=o!{#RKF`m)9hm*- z8%%^Jm1J`B!Vor)MH97y`iGc1FQ=h>syOkrcAZpEJ5dt~emhaA*8$M?`B{5Ox)WN4 z{tjrpLGe)(z#2k){>|f*Kgk+@`XTwwCu&xL95^Tz+L1`0&SbZ7{`NylIFVl5Axr_W-&9ZoVov4%RJ^JM3m(vf5brxZT@HOQF~p|Sx-%c%(GG&8+Z|Vjm&ONeEvn*Cv#&BSV0!d*fAxf-p8%CjJZn-Ul+oiPdguv{a7b7V?`yxon{21 z=ukxFye}O1#A&Xv0rxjN1;W$Pc61!AOXq~F#6d-0%ni*1E?e&!g32Bxmh_PkD*IXe6=$9*O-CwrwmXVL-ncXCH&$&veCcp?AZ6;Mu^S zkWx_ZxQpd=;l8q{;OgN_w7b&(?ZX9&ZzLgir4Dz9si#=_xE9cvN?FU#cD9D@Qe49A zDk*}B-)Wb|N`Y3HcDHv8!paUmp9xY;F;oS?D2?+0FGk5vGq}Jam8*hLHEJ;`ha23Z z;_yD@AB^)=pnYpc3a}m-TMTFbsd%4N2?6eV%e*pb6-&f{%HuvA?BH;Pxk_!!6Y2AG zH8E`prB41gUP<*8*@ zgtmb|Y>Zsaz}{O>Y9aE$k%5etyLc3TVbe7Tsa<#sB}kGr>T?4z*7)94p>}Rvy@sE` zlM!3CMMy1Vb);=fVGU6fifRZ*9wxK~k-I^Nyf4uaB> z85g5)zV5>{Gr71>o%~IsG%jak(nzkiYTGAtk~7FFC{{u8NRwxoO^)RiGm>Xf?qgYy+&-;#5kk zhb+k})g4b3BRO$&n>`Nt$fG!a!vDVm`xEI=DM_u`$*f(Rqk4dZPD1Op4g$}hqqEyb zZUf8LYHAkFjc&k+E$6<@hPCT7s6$Mal3L8`ELWK=QV$1gk<#T|!^XIG`uia{^>IbhjAHe!wIoqV)Y_=?@v}kA(>{p0gJc${t|#ajOFPEX z4RzxtMtOl_jbC-*g9_-04D?{z=V4l#YK87@x|f9-Cf6`6G;ytiTY4aN@Ct1S+8Vi? zu6M9GkOMOk-S{q%qNgMJVV^X_*gqq<8Xp0`3glF2_M`9_*xJtt20LG=rro{t-Vk{FZ5E}Ud zbEIY$e8aordhvV72-~y-@SRzg&W`#7ighYc3h*ffRMRZ|GD&77hb|8nv?(+^$pgj1 z=yvjvAP%eC?u5u{V1F)gL}_j=o50FhG9f`|>$|)9^a<#R?t`akrDYR@N==J#*s+ti z)#7Rb@-_J^G>YGgrO7aB7takV2I(ra(S=NZYXL9sbEO{BTR}pTG3rvkZHTGnCjJTn z1Z$B&=SF|Rby$ZcLn)ve=aW;`K&y!kZz&WqEe^(qk&CXVGfAZD!<8pNT>&8n@X}|} zTG%MIKN9FOx6r316MJ!M&@k!@i(jVN--i>O5&J_WBHT;<>bAcKBRZ?MmxwVl=!9^k-rsxWx zx`J@RnzlJ~Y3D7+WlZfAoYBiC$`n{OK$t-8*i8}D()c>oXcQ8&{zo!T* z{~zb~Y*X>iQ8koNTKgZQY4as2HZpD=iKg?W!?a$EMA~L$d2-Y{(^`)OpDDEHJu+Kw z*%{dW@_TqrMmyIh!&kTrbI8rC7>2gs7hBgc`az3AS$pZBLIWzmsDTs^!P{E>txr&x zq`R3?Sk|gby|;0Fz8L8EhVYmZ}|CrTVMh5|}m`K-;6-a@UqJZO>V{ z&McAlWaf6Ipfx_X5~Ih*r zNFjv0^kfO*JNr~c&xrq;-K>t~|J}%M!>H)u8{FUUW#tXmo-~XD$w3t4CKd_bn@y%w$PNjxT#64ZN4d$ zd>gN#vo@8R{X3XIcV{(irDxWOloB)_|F8P+T(*BE(`e)6i_rD8(J-_;u>;@b*Pjwty7uN5Lr0KO5^YQ?w=d} zF+IcN5UGd)5J9RI=t--R;lWeXlu(8A$Q`VWU?geHj2EHGkbh>Up{2~HIk#*OTc|k_*g@U@@rLuf`xmfW6+Lk5!hVAPH)1%??f7h5 zYEx~8pOiAXdOEx{nuowQ5&G8=TC9y$F~453%L03#1!Y#*j7-#fKyst{g8(IW_QF!x zQtBgBUXwyc{Zi4=s#qeYFkVA%*_ATsyn3){a{cd$m9h%_M*sf2s@+J!!=uT`P6$mv zRB;m>DrG~tCSK7WlWZ^p8hOI3AkGnOx;HZwfU}|;sm#5}WmQ8LNium5DTx8)-LD6qCc5c3c zVFD_NO)cLZrhS1+R-1WK{ovt@hh$jNZFCpIIat(6CFwl<4!D{nL;sU%NS~TYWPmh6-Z>;jvRd^cx7>uQg^oN z@QfcFMpX82p%x*FJ3c`(C8qz16!$ArE9(d@vi6w7av~%VjMmg4%&qzwlIzGg{MJ7V z`D=DX07;Uei8n4y2XjF=zP>*mEugv4j60I)&4%T4W4VbK2Z7o~NdOPBg&7ACd>t-X zIM&C`&W9sEU4bmI`2%n=5Z(kE+rP^l9}gpvUgO7faQYpOBMu01bc}Gn9@#t*ymj=^ zc*Zn@?qMx1315nT^}o!#FDniZef^tt7r~h{2xfvcp4aCiA7UR#czXWGC`!OoiJ@79 zSJ#hm@p?M&`E2GUsjG%I44{p3neT-Yr8G)J0AS`C21*W?0GGK5x>_`xtzyTGpxUtD z$(z5{4e^updSp3t(fwOUyF}od&dm{=2NiBqhI2jH9^h)o=f~%M^5Ai;-aFx?B!t~^ zz%a?+2HBUNWwD&d@$Xxdx9n!4E+IHAJF@TFL{Q2F|4W68d}^1bry-TS36 zV32_$cCVX4$N+a%p1B?)*kS5Z%J&PU_z(Gj*oIR1fh4{C7%--(9Hrlho^nXFxjwps zycgTRaU1w?=F_Vg?N5UM@GjHzmsq+y>TXidvoHt7TSEH#!afm#BO#LfGD~DlcMdno z8g?hi>DF1nM-%aj?XbY%ziXCkIB``8;PiHU8CA(b>c50Kel@^M#(E`JZ`ZMNz)Z5M zeTNYCanb6Y={t9O)tq4tq2GHj;yXWnkkz?NEkp z{?wUL`G#V+pr;!c!jGXJTJq6zqey@3nVlu%n*T-1u6N>*C|&fzO%K=%V>^BbN6E&$CVWYQzOz_tUs* z^FqYjYl-U-#9RS-ixd;z4@m3rLZ)s0&b8})k1@biu+_D?68`nob>aUY54DM-avYh4 zNB;pewxVtz|7L=IKy8Rh+Cj}{`Ya1jww#OSgLXye-nP$&&O-IE6

COS)vVw-b{M zlTlO8pB8&sQjsb;&8)y6Vro?b|8CxMOa0&KDgm%dzs*zyb@=(-ekYf=TP~Y*c{abj zcMu|ew~n_9)UJ3gEuOEP%eYkv@_&Ec78lzUpIOyiikT6W#h5=I!9G8pq<1AcR|ipy$ht zqWVnk@1uXEpZ~%o5#sjz^sg{!`waWVHbKzZxD8 zH+D;cVSwbq_TVb|j_2(?$otXm^6`Bdol24GRs5kAACHGqD(|UMnQrXTnoQ%}i6h^; z13{D+HHwjS!pn`$(+QCTmags?piTI9--Rb@dPDb$u3phMe9=;bs7}=_Wpjmxy7?@N z*AlhkBGx4X8a0de&a2m9K(}QDES~l+ni>pl&d3)}&P zD{TY1odZsBg^VU^)?Yy(XdA%7k&WH>y@41K_mJs}Ip>5;6SV-=(2eH`a_&Ct^Wd)= z(5ZkcwdE_}x_^M(miPQEPW(C>fy{s>XsJ~WAqJ+3vFV;=(aLtLr?wLyh5&Hwz{CjI z_fGHHxKO&lD|Xz(V@z^s=cKNU6tZZOof_o%c;Jf4s#TFzKv&1ShiIEa&y@Ggh?^2*CaXx(TyzYFFZWQ_TR4!e-F zg0A)FsgkK@o!OJF_W3gEcZSMw7d2h<*N;^Q4pw?4K_5MmljD&`Dp2!8%M{VTAo##4^n*dZ%dLJ*im>M(V!TB0 zFxu3Ks_Ga6qdoiO{p+lPbBXm5Mw8%t1f7yodKYmolcG`~*cSfXC_uFKcoX{Cm%av$ zcB1`)dQUC*a2;RKEh#yR!g%qIBOHO?PtHTyN%BEdXVrZJfX17+LhVHT7_oPtPdWQM zoPUU#vAMV%sQMFCEb8Ex2})e`*^K{oQ{U}nCT5nGXF5@!%~?`mKh9HOfSsOG`*7~LaN=y;lE$!dnBjO@s3`2bP z>POBkNJ!$|>Z5P8muJM3g_!&(ZcGkFoMH|b0;l?_1^`DJ7||guvJOE$p<1#cL{+Q+ z0jwkbMnQ;(`d;uQynMw`QENn?Jq6Md^F;?y>(~jG>Y)8y! zlauURJEIFL=0OJl286}odLI~jBJ!!6U6RN;o;wrF-paK zMWInoUeAoqLpIMbtNX--L-O8t+6#M%2>;~HL$&)vjWJn$a>hW60P(qY{;+%b`&iB~ z-tD5B)9+`0Ki}MuaNo)9*JGpKP^!Sy=^8sef6dlLE-m8Mtsu1}n9P80?pj`FMyT@$ zflmcb^t7Nx!PZr4B5;tPYup-FFOlMy7rFAVdX22}FUy}B+Ru>t`cWBXqQRnb2LzH( zYNQ+MG(2Z|1PEa$1O4Fg;#Qb+p!%Vn>1I11auVh;A)aK1OTc_md%`;w%iBS@i036t zvxHZW_;bL)Nt|&knz}jZH9 zgJJx&xBWO`9qq;$!2OuK*FYo-oC7B|^d_443Lv6Aqj&jUNK>`w7Z=i{|b zc~_xi{?VBKB)F3a1Y=}rf}2=8=cc!;(AeqY?}9K0?7wv))yH^1IuID6!#E;P4m$*V zpvF8J<$)8J`PnWPF8qdhp-re|$UDS}(oY&crwws;WfjCW@$U>wARWsZv94$(t%|*e z9ynl2lRn_mc;;cFi1vZ(kDjbrTRu_10p^0^(F$ojysmm<)`@QU^-P*hW(E<)fVKgk zr75y+dRplp@+qS%Wc7*2Ql4u>(GqfJMS@DtqF$jM?)kNAB}r!eLS+8)s<1blWtqHs$AlG)zb%DIs9(qa#QF~dUhZa&(U zxGFYPvNaRNRIhql5VARq(8r(HFDY34lD=wGl8>Ubff1-Hmy;9$uidLwSIWMad^1Vu zdCcwrF@WjGfye*F;B0x(Y??h`STHjUNdu?j%}mF-D26x>%}EmzYF{=i;FuZ*6|O-P zN@L#TnxO{(t?54!rdF5QolWmhESbdMNkUcQ6gJG0cdai5=Wyr2BySTMcq8CP5UPsD zTF+#GlfZ}>-CJz)4mD~It=YSL41HpvL-!Dku8;8f_1tjA-S@4o=FOA~-aEmPibJo$V1981a*U%lZL;3bCG46m5V9g0g@pzhe7?7WKgNLOX{}A)i-ZVyahja} zWJFT}%pf)}r--4g(m6%_D@XfVtK2=(fb^;Gz7^5HEx)2p=u9kYaZoo|a|DA;mOz&P z%`fHYu!-q%?4rdW1vkYzy}ONrx{u9U{p z13+#?H`Rv3I$q;;m%`SXb^1(T;Jn6zLcE<(piy+dp;r^6MTM~r3=PKdf;_);+rlljR>3PbfI>xhhdEcf) zpMm_K#;>RKviNCD$PW=j!)>p*I;Rqde0tuZ6HzsZVZdGHw+fI*>j)zOJMflMpZFxJ zFbG(gcCIOwz*(?vd#f@9SE)BL~x|TGw{^(V*PN>QcV4 zeq?lsw0>py;;u{nGm7Y+w=#zcVk@!fgyNLPl?zI5w@HM{I)%c?Mm#$*Ud&&R<&iw| z!8Rpv8-|*4rdkC&_YW3C{3cVokL>yz%5$RKO7@i^WsO4d_Q7K$aFu#Sb&2|JGGWp% zH-knhurO~1&+m;(#3W}FS`8{9bpgWl7YUs8yYp|GQsr#_nu`DLZ4Tb6{7GQQKsJ65 zj+vXoz#*Q8_EQ3|6+eoP%Z9qQfYQ@gF&^k@a$EI|yWCLg5XW?Z)S`=Pp$)S3*ZIlF zi3k?h4?uahf)Z>G^nKWJn}|ZBGH)iz#w8p%d+&X)Rem0h3pHLUCi59#^CFXqK^bR! zf<6U#J25; zZQHhO+qRR5lZow#ZQHh;iJg7s``fd-=iT@0{_{Ndo?G3wy1M&Q)m68;`;C=mVjM`$ zepDyBs2fG>Fr<-zz@qhXL|Y!!QK)y!uCQYU`7B5IZ2vUKEQrsfv1A*e!~V03$$QWJ zz0dBVXcY{$)!%G{?Ia@aNp`eThI~BP{~5Ntklm#q|D_1S*YaTzwQ^Qxu%OPx6XJ7{jSr6*t!K_HMc(-;beNbZtT4z`B6w3$vzAf5S1_QB zGbp{d%gknj=^jg_S6%F_c<)2UoNGN~&iKcUB8-elhD{umO?B=$WXgkp#j@A{3U*V3 z-S2j!aK}}GrzxTaYrl2I&cK~!0(i~UxZ4;uQ3~7Q0UH`+$s?lCBHCKcErE|>$#5v6 zUKqDu0%EnB4Okt*;XF72<;-h_6X0MwSFvSeT}um(Z=$E5?ekU@xwUmg;~?0t#sv7b zpD`Tbq9#s)0)i;bMM*d8+}#W%e@g{HD5k(LRy?fzpFNlM`&v!Yvl(PN1M7dw;BJ%& z@_;3C7*QTDMvdIrof8?S>dB8d9Frr{Y*8Nw37astv`f$yK9jaL=(eH6O-KLvzHmS{uhq-D+ZiPIf?Qx=GijJHUtnv$%1(}J zUtLrw!x`xjVYkhx{(|XICx~;qP#uoU9&qGk z9-+zAE@vSj-1maD0qrpB^i1!lqqaDv zeYR7KL{*sxpTc16!yJ)K-09q%9t%ShPaWA@-e5)gQ?qu%XvMs=gNwdp)Vnwh2d%tO z3D0A%md&;hVs`^p9>b}|1m3U;4h!#;_1l2s5?{k2Us5x*22Lko%tKB+#!iG%I-oE% zN|8&ugn<){-h-{p4jVPBnt5pq%9IY<>oJ_)q`5f)6PXq(dv<^_x!)wgZYPyZXENLV zo_Bb}NYp1&IK?l`@MU32T*|zI#qqQrOA%vR69kkiR-r<&;+MU5lY18=nOBqnAru;H zae2Vq#uAkIZlz%wY(vj*3~9%FnkxTPm0|k6(Sl_H;$mSqn^qv+%`Ea}W>u}@4qxTD zHul7jal8SC2y94vmxH6wMEw(osg;!YIz|1JwHfNd{s0+#R7oYPQBoh|%*Yi7pP|^f zePWo@f@@)?(i|ztZ!TT~i4!tb*<*`tUKScf3(Ghj9wUa8jBxFfvs5u0sH@aAdn$Yx z{Af1I&3*>>PfyIGdJ&afICBVa+A(E0I1U=QSVJBatr&{YZDJ+Pt868n|4qxL#tYa~EWduuJlm6Zi26cM7A1B|7k8 zwuv1!j41Cz$c%g-&Q*>Wle}Kovuhue7dPKdQr09-Zg_c4sx8-XwHs9SbL{yAhQQ2r zc4Z6bb8HPXohTxc`Xo zzS)QdMhRY)l>ydcZ96JJ#q1ujdr2dH(UtRDM1+B@U`t$kS=VM#Xv&{F;hJ_#qJ88E3kPq;Aj-lK&Gqh`D6tP9O&?wK6!fka$GB8r)TV{{S$lt(b-Uu>*~ z0&v5>dZo#aU#&ZS1V5Ol(G)#edrv~d*GsxTPGTn(=I>aJ|ny+4a{K5<4va$pi)T?K^(ob;kD

}Prmh2>x?!4Hr&;wWTGKT*^2qlBx zW0EN}IrbXQITxd+zDKO%wIj)**=jV$;2bdR`i`famY@v~?KDT(YGnB|tf}QDZe_BW zoQjR9MEONhHt$-eO7@00i7&^DX}&wOJd({^I&IxH=p_-O6V$+YL}Ohx4iEfG&&uq1 zOmuqbZZbGOz#$-*h}KtRWnN(pAKff=50a>w2V-Vk&vaP+5Bdxo{YG{5_x$HYr=iB_ zTU(Pf5*B)Zfj@TD_2Si`Swx7iLzx5$NPLjZaI>!UgSyo~&jcnFT(vNw-S0RYbDhqO zj3v`JQpuh{I2I_evSFYPcq-KjqqR4p3GCL?qvdL4%Cqg2IL zxHZAb4my$K4VORD+Cfs2zST$X+EA_^a{IcFxZm3;{i;gj)-V9D?OxtA^ptuun z6W&KnSx@Do6Q$?5DDTQiNB9P_zp^Tzfel3Gfs*$;9_1G)rj z`Ibv!r^s)s+^4+CRQg%pN~}KLcQoVaJP%VWz3Z!~$3Q7gd(ob6=UU>EIt<=@^^KBU z69v3}vOA^8#1$9ith;3h+ep?@a$GnvJe%S8=WmtxZe5$Fsh|3 z%msoa-hRssHi)fIUYg#IiM+K}Gxm*S_e;pORZQ$|WL9%T7Z$b$xbO8IRrzc*l|D)g zP!^xC{+6rHtz*z^p*I!qENGH61#CXT5_76({N74pqaXn(j0SZH<7-nTFBRTVS6%+` zkB#6KjNdlq*uUM)rq=xA8ei>iR$bKwq!*LJ1K8C@f7uF*<_1UvgjT6u1LM#QHo5Wg zM+C#^Y{R#`%_M;CnVAo~px7JItJv5(ro#(~(=S*&0zyEHpc1As#b`nV_d1GO%FP_= z@Nv6QJTR$o?qYuNVO+kvia3I8q0)Lfji2EEa$)}0pn^WR6}uun5Kt2&C=llV2-L*M z(EVRLf&Txz_@6Y8oGbfviIw3V{`q@;jW4;s?=U~x&?Gce&+RI&oc(KX9gr)B&1_30 zJJ!EHIgKMwD8u1?Ai%Z}qrqa%0A1_wF|WMlJb!zpm#jaxQYQ0UTpV)?uk71o%O_oy z)P6sIi{%KcjQ<=bSIjhb)c;0Gd-I?EdiLMumx%sT*yJ4z{#^HBa za`xdgYRN=*$JA4^JxA33`pA0q_0o67Q8HJ}UGa(a?V5(_xVA#FkZ&Aq-`GAA?wI-8 z{9vPVc3)B{XW`;uD%u?5T?gaUrTdvfex~YK_peyJCP5$@pRRr`*3`nj;-^&NPVU2rOqSRK?~|);<$m~2 z*+2G;yf@-cpA(nP^`{F2JNy`0O!>(x4riBB1yngDJ!r36GB}3_nMY^qwoDm=`wu10 z;=EkzBY(7PEZs%tSH7Pv19>q$3`hQi7segvtmn)^4ouH7hW%#82K&wbA>O&+a$1Q_ zF?=LkoWeYJy#f*Z)t&14zSZ!&)gF0t5HGge+l9-SgJkQ9YrN|Mo+h`7rRnBi`C6E7 z>V1FU-NpEsTXx!W5H9JQ)A)BN5Dn>=yB!KL3j2H`|*@N=xKK4jN*;R z?hNShxhVETK8_%_xS3#wiF*9Jg(KI>sIV5}Z)*htmTzgzRL6U3G>2Add=g7FLblnu zuRenAMD-4XtOd{Pyvh1X@LN_oyT5esj450Bj-sd}*G>t15te(wtfnKD4!GP%eW&yr z5j`E(Nn!rNU$K%Ky;Y2Xz0g;Wf=PMqxzgfo*CEM=kERh6vqx==os)fQI`e3Iepw5S zj);oWzYrSOj28CTpT{IByohlHEL~BQS!=kXMj|P_5CC?n#w8Jx{NX#1iMp|)g zem}JNZI}jJEVv$e;;||-Qgt`%wi`z37kqHJ`KJa?3*oLSqONK5_g^ge2ttkr27G+@ z_WwFNWFDN1CoGL8XdGKIdEydG>>pdDqpv?xUR{tTKeTY*{Jt8F%bAf+oo$pbq*YR< zzvZ4Db>z;c51E05$T#Q6cV^VWFXSiJ>?FnXnK_nvvz{r~P9TwDo5 z2==)X{-9HLkynyVyIP`XZ} z&Q#fv8?yelBz+41kZ6XYHLq`#)>Hw$B=*+qge9p_49CR>TOMZc6Pabn*J2u^i>%m& zyDx8{wLVfH>KJ=_+2|epBl;D33ZpK{yz@P|`)i+4`{a1z`3OyS+^|a#{a;yp>+es7 z9uCa3N$Cg0viE&u6?1|=MN$PSI`?yE#U91o#rCD$Tovg2nx8<}+h)BDiUR||mVmrJ zX>2=2Y`O3E;vs?5AZ)&nup8`Ufq|h-5EdO>I06wB)Uz<_ z6Qq`?{@?)kevv($i5i^QM=NLDzbv+I?N~Bdinj^{K^xFNU%*gtq3Mj6ME30Iq4{%t zN;9H8K#=(Dkk~UAeCUb0Eq`tqYS~E+<~$PHE&NJtWY|aBt7q{0;0t(_n z4QQp7mx&hQcURN%DqPoN1z(&0sa z!orF4IsE$(^EQDNiATg&!T#d`>56b&uo3j0ezGUL%KeYxz_an!mgqo6D&B}?-^T^x zCXqO?d&FDb?=Xm22MZ1s++%&94+Qmko8+L5t9^g=e*=n^ibELBiBu_^2drFJ4H7Io zNVw1NOBC&Qa4Oyw<$g7QOt!c~W`Z`-V}MYL?VAgkQ{;CPZUIWQ2=u=fmld_tjBejc zc`*yA=b?tn2^FG{GVs#x^NgTJ1-XV z4sA|uwQS#Z;om9dU$&#_^2hq(#E;|3iC(S+uJ&nCZT6aoH7P>RnsgPLE5i{bm+zg| zpPifU#;?!u#pyk$L)#PWT3i4>Y(~vzTUz^G2SYf=eJx&1%dTD8xdnvm`hN6OPn>yk z!ucpeIBw)5k-X?JVnrPBx@7$&fu=fPgb z`lxuJfZ^_%?r->&V(_&^1Z_UmQ%&8f1E2x|Q1$+!f{sfn1PrJb994$|{}jS+Cv=@k zU!*jvuSXp4xu{ol;&4C@WJjQYgB|Wn>@qoU#U1Io;U4T4IP+n1;n|zKU5ENI;_9V; zpR%lV{t3c-G{6mVl(0QOoa~vO>VZ+!sm8|tA#1v}#A=!BxZ9l_)C2_FU8mGGHko^q z^Kikw8AEZAK%JN&cvV@tLZQWgu$=$A;AoFpe5T6sMJ^}pyC}Kb8VL6$d@Ck>XcF>`3U%m z6f>UA;dFIig9mFQnq(eqhCck4_L)hz2-Je5$D#R6Xufs*a4Q*Ej^&!WP%6%7)8&ul zH?SFXMs?pXja?~HbOnM%9Dcz9|C|IUWdpbRf~8pj!H=G1i7vF()_R0n@ZPZ@dHm|OgZ7Z2_bWU9iSn50rcUbnX+ML% z8XSn>M&r$K&M{rQ1r^J135#cZ>RG6``#K>0Fv(;3ewRN#uE}(Ep-%w&_O6u)4qyaK zyo(8dzW*^oh85rrHNXk#@J>9970^}JM@oBy&=pmT#DZI3iu6qSC!!4DJn|(nl`$9? z^B?DiKzv-Fw{+M5>WvkLX`s!xFlHVad13@=g~aesB`?T9q=*3^SYkE5RTZ5QhgPzT zFYB>_Z*aKJ^RbT$Nz#9KE4oRc#e#6GpYHF^`0cbw6m1pY986~1waDiQFa(0P|t_Uo^sv!4?qz3L!{;Zx!ujzq)rsnNBVZh{2^veZyg1CQu-8 z13+1Bfa)6>Z9<_whQ@UvWW3PAlIiMVpLnCJ!LxAN7FU+80V-#er4)_q%%|gBrRT~x zX^53ImB%ywxrx2jY#_B^CM2YqsvaiYX0d~~?D9nD9UtRAOX>c-TTWvwqhlDB?7b+zro|6ov$3N`HP+eb%1$bBgnNRANNAm4n8aiW$ zo88^0eNaz*;IJK5njh;&E>c_R^EUC#{b^zN?*Di17s z7VbXqd|gdz-i&)?H%S-%Epm(qVB#-|sQ5n(8Tg8EyfcvG&u+;9&@%c1#hL!X;GBoj zBJhg;@MRJAAI1xQfxSK_9PY?MPiOdVs5_J&?<4@jzaj_z8vv-dXyW<13IKc;{NiPJ zbx)3PKHhl})v0-HF+`-z^7oCzEl?1IPjoI2l`#AY1-uV1P*RA#?dJcJci05$Hxmtw zJ~0fnN}#RT+@Jf^JMVeHQf;l*EJ8uR zH*SIxJxoweHD0z0g2Ha=xBW@z12m@oUt_}L7jZ>pv3GYwsn@Bqdfxcse9F7XF~L%l6N0lV(HeUrdC(-{lDxAe>8b{EQRoC)%s~?*F15 z_?kF9B?mrna@fECKzHhoY$EvAy9nWud}2q)BQc^~M2A-Yy)Ryyra4*c>7(7|+C3e3 zJ8r>$wglt%_yJ-@*gso>R_H%l;-5$=p#ky@ah7bolIBPY*@z2arlirwhn`?j5i!h% zr|WkJ*}MJff2W>!?|`%&<07AV@4)*|Pkm0S=;5vLvp2vIppOTt7!R0 z{I2wJQ^Er^{oavlGSX{*DGu@Yl?g742Ysj*E&|X@e2Pw}zz87t9{ziuyp-?%-oLFs zW8M2sfBWV1@+FHr4XAcv!+XhL!602YkmoqzG}sF{E~qfUL4u>R=k^O9@v}p+m-EK{ z9RxtSf#d+rfjSBbpAi<+OC(jqHAW@#61IyIWPiHjBYcv4qsSIVA=HHwLST#dj~swx z?;CMp>@WGIH}-@Gf+pC|#1We))q>FfS=)P`s$d@-RIn$VJph@UeA!-iuV^K)nP;pTTC+7pxc5!I zN4%Lq&W{uxAKm%u=+l$~8#Z_)ZSv!hjL~1VAzzR8{!@xn4}kpDUbz;1+An^4?^~ev zE9O2uC9)U_wcy}yC1dkpZK=G$HLFjt((JNf?5GllZ~$-s3=CV;5~B35-S?rSgL)=^ z-|1&-u!~R^>f;+RD03}0TI0_l;glH)w($(MSjvFQ3l>SiWJ1d%-@>cc=(T71DcI4M z_#2k1L>UXIU^=p8X8$3X5uen^C*%e>BS3G8h$2}d?kD~ql#MXI%j-e7d^q}}=UxC;PU`}uQkd4RuU(FZTz99#;PkRPT!QwkVS#TCqsUQEk z55)l$D>Oj3ckey)Mm^~!Eo=J8BTDpNZP@>6V?E7B+o=`#0O$%%xKdb~UJziIq9T`G zkoR`Q(i8dp3x2A~o)5{_Hy8_IM#PKk?=taI;r9Hr1S@d*eT0|cn$OEQGER>^o|Siyc783 z7TNJey5@bGeWu@(>8`evkZEl~m1%ucuz(ncI|_4JsRS{KG*BcutEZbU(3$7iEwqww zRMQnvB^5$dlqmlnm*fgr+-chxNzpzmm5Dbc-X7z)t(JEgE|P|dS?t*TV|pgqySg2@ z=OhcMS-d8+S-fW%HZY)W;kNwE1v@|AoS1{_qKNC{%Mxp>lDQl)$r5Y-VgD^MQ5i6t z^3kJ$x4wDNXmt6c^K3netl-vPnwR&3{w0U!%;Zm7Dtm79<5NSMfjcs7wa0!F%67v} zcG$?gC#gZdoyYsa_2K+jUzVbN`g;4ZPNq_bD=epyhh_E4RzjaMG?_jBnZ|p;kG6FT zdW5<3MrgMkE-}MK_O)7sdPHyUD;1fI&BGC754r|?G?G=cVOmmMeRa;_wAYPSCuyZK z5qD4(-qlqh5;C=D$pRM{id~L!4)qdAOsz-)!b+?_vcF>`64AMCd55xQB%VOK?DwNP zIBFugHv?O~gsOftx!NF+0%4FJOp9(2pF~Tp{Are0@p5YBrxT2R`EAL<{2-;CM+x_xB@ z4=To5Zc)IpRw75)vM#F$646SukzhN@X7Vn;X@si%C(J&Y>aI!Gi#?6>nETSCjpyt* z#;RaHy((fuaklK(JHbw5)94FI!I?DD@K5K`*d5+-+fmW+$|%zlAQCYEOrs~c=OM9fo6*Sc5y~$l`asSQk*MrgFg#%5pE~iDv-b~ zxE2=KnzVAR6W#3ai}XgSuWet;coG8NZT?=m3JZACPTZMl6#UA|C_s*E#MBmiEB7xT zM8E2;4W~;ybf3-B%cT8?>fyi`D``Do^7zjyoP%&^m7SZkpW)>~YJGU%yLAYHPAkP6 zgww_Ub_lQ z*FDFxj-aVTrWo}{_HLZ*ig;g#uG)|tw?Y(d`1NsFZCTGh8Q_@X4qSr#R+^|qaf~CC zUFo|kAOw?~{{kzaX4H*58*ky%<%}3Nfra9?gEB8e)dr#B%$+3%s4P42eqB1zk)-qj z;T#2ec!(KjM~?klcI@z6`EKzwOrCL)T1cdj3m9gN5}an9tm($hq$p=sqB4PkMuAP$ zI=T>kA;LHT+`yL&*g^mJKd0cteuu>Pe6-#(mZ{NDmrtVE)@@`+CrWm-kyI@;K~ya! z@<6npjj%wFw-@CaF!7P{;~_ZLmD_@YK? zN}n*Ef_&B00;;viZD($rcOj*0ZNXo5N3HpR|3}b9OjFqU_ac6YrP@=;!T%i(y2vB_ z-?~9K&3N0S=8N9u$keOEGn8E}_iW|bqN7QW<3H1c$77v2Gy+DJlaJ;tXhv)tg8mtd zaLV=A@D~$JoAWkg;Xe_{?22P^p$niv>U<3Wo*hUio_kcCA3PAmaIZKl*%LdK`U7nr zcxgY|F8%xe5MfrS3^tG{!Rmlffd@uINw0<(;0S%e=ZEF(ikI!`yve;oPZ!@b7VhGT z1xpQ1ME9c&TKwpJAb}P~jeE$!@4r3An;LeHR~T%&%mH-9#I~jQAZJV%EmGm$&xkol zpMPo_DU8Isv_z8_k)IFFJlS1q#evPU6bbfcxKCx@S%RcZ?fC zVtcJ`u{mushu3TUsT=j$ajd0z@KF0a#Op0~oO{;(^ciRAhQIv;NOK%ilTK>GCb0uW zs;1i*`_K4|$D!got7mx0ylKWvIVix}Ies&1kN#LeDM{Zj_5nz_%~_Dy-qQf?{L5~l z0IW@Z!vN<^^eWa?VJb6mMS24`rlmJg;%A;*8M|M>8+-wt2)D#`ptVGtwFLy+j{My; z9X1`S=ZN(#81)!;oJat$s}R7~@fQ!^>-dPZ;)uGzh4|?p{ASyldzhn(s$+E*H&VRA zg}eY5XXjKLWuO0iK1uEgozA|EhA)0e?runqj0XQ>AZg(z+UgBN}A6uZnIQs9NI&QFY||P&a2oqDa6ns9Nor z!7$FaN0hzI7ecs_yN%mW16fr)0g*dp?8kwkQ(Zt*ujW~muLmRUfVX}9>38>mGnfNj zB$xw$Ing}|se6p5Uq^+cvK#j=sh*iKA}9s*e_GqHOG2M`rQYAlzO=L9X5222=epUS zOJ{b(UwU5xJ4GII{&UaV%r@d08-(U0V!Ys)AGYSqvIoT(h6N|onF8$iw{VMB`H{DD zlfO!@Al>F-pU?l|H7rDnJ^$JAU}$IZm#B|+2Nq23QuG}qSqQ|~wSQqAAu{~);)`#^ zBlC;0eaUHpS1a(rUk}4M4$-#!OYDErRmi(I=Nv!#`eu_e>vqr=XzJ5{w?{{5tjr^5 zuB}YR^)Gj zx(fvl*($9Vil!4zN5A3s-Yk?y}FoHaQTFgJy8<4K=vx;IP8&iKix|_LE z!Ix7eHmPLj+90kG%PKN;g?BhlXJkxFF}3U}R#C(+%$2G#YR;gaF=^%kPJ^q^No!ep zt!`e@ub)J<4IkcT1J*!~|4(z9 z_$p1!n&XSh9TzUAO9LLivFgszO7Hx*+K1eOb{roqb5cTA2jq#_>>7A> z@HwfYiE~t6DrLl}J=Ahrvk#9hyM0wxLl48F4(RAdn^yHOy%d+9Rte&1zAAFH)T6%n z=<&y0)%whHNC{RKG94&kp~Z+yO3DUsgSV-gY0B;m1D-AY?m!hc3kd}&bYkye@@&560SKv$9jp&!w;-Ff)P5#Pd3bE+@QrnR6q2{MiHU9wT z&(2fyT7+wE#BhZt0Yu*xh}r~^1Xs5eSJZ1QmJ|$Hg)cE}2nsc#VvV_E939Kt2|0sr z#eEuPxMqOGW<}$V*8Kgt+esTe-Y#nvkoA0~o1x|39XvB-7wI5As7(sGA@8w*8!xVY z1KkQt`g#P`eOp%lDb6(WgD;n{l>~G1w(cN}V^P>+x8wwuy%Pzz$3%2p3}{1{1jwGo zze@;LUl&wl0j(QlO_Si+Era5=|Gl!|f|-3VxY@fo+@#X=@l9DZW$3Smlh=r{1JG}s z;L?+=%iQSFl`*a?xFB)?WKk3w_?Qx7GprVSl~uNBZl5k>4wKaU3ACBK{l+p6R)3i& zO)dfuO#G_C%LIAmTU2&l`&r9lOaqTDP!iJKya{?}*d3sQ#@-iJs-%uU2SfJOfTJ{s zEYJgxwD^^17q{H$S{rcW`aqakV}XNbIP4L!ygtAxx(6Oi)L@hs zutwH_h|1?ojHpT8r^e@1K@TF#C06>wo<;*|#4LOgBT7Lp%qvf1z0>2OPK8DG-vU1f zqtQVqA>3C2qTuoxNy2_)CtwC;6ojE53wJyHwcq5X(V9dI6_p;v#?d*IfOE81TucZE z%UndP;8Ggbnbi$kb89t+3S(Ha>V$~u6w9g%Jvgy~3QiCP!IFSywPp~5hvT+Y zWK;SJ^vLo6=Pk^Bw6L3K2Q1Tqa6@6XBkw}VYm^+72RUgY&;)f0Wyb{K0nYOjCuoD_ z1A!r3bO#ZTv3C^y1g+lckY7SPZJINvg8EQ{?Cod#3=6rQUTGA~MuL)yX&c-Y#UqHn zq!BEu&Ur_9stfTnVp80Lfi4Eg$4C>_i1r#=4QWoase*|0hl}A}81e7)lW&oHs8DY z?u3Ja#Qh-E@XF5ngZ~O&?|Pa-+zGRrQyhl(e-#_ejBEmTSLHic7lU$({alVGL^co( zf&@|zmX!>mywrzz8j0O)BES%XSxzF_pEZD01chV8Do{{^-foh78H{fyz$RCI9h}9S z)g7cH4uU140z9)Z{<0p=Ng5>+vVUT0i@|Qn0WG#g0lSF}GHeyRj7DZkdb*^hGX#$g z8t8tc3O^!=66Ji9*wymY)*32ne)A%o4GKd@#U9RWpL18$9x@|(m9#-L+^I-KF}z-* z`>jO>IWpSS-cC3RMeF3}8{=-M%)8BZsXgzci@dK?o<=^)A$GpB`omDTh&l?M(V(}a zGJAvb7g}SxRxJ)IKBPZAL(F2Oalk~VUN#LwQCXUPUHNVZ5%sjI;~u~h4Kq=;9Ae0n z=-Mnm_>+=}p--O^Mr5%=ZwXV2GGg4&G-`0 zu-yap+Ct9PVPKPEtIZ{5eC240C}w*T^mr{Ktiy7WFuGS7jaT*m_VX%)u-nDit8_Y) zWeor)+Lc9NBvwrh55v`iiE93x;#iiL$<*SsaiHWpJ=!%A3P^?b@DPu?MtK}_lsh?! zFd1s2%LXy)*dPnjf`X}0tZsU6V&KTn2=0}XWELl_oVw~Iwo0Y`g=sa=Z?W8-$%)A{ zJ0+M9IGNzIu0xY`uq-NeihNH1<+w4*P|;Lk2M-=IJl&^eFtEY-Rw84pDe4WuiZlkZ z6^=avxxVhji)n}505K4oWEQWXm36(`!4ZRfCxc?TMm}B_(D#y|EZn&n%4|{~Pg8j^ z+zWk3Rle(V5j1&hWoXVU{LQMyPbf|VvDIax-&hT6eZ5HacWVpkpmbZt!>(ID8JkV%qaGDZ@b2X`x^ zt`WmlG)%H_bvYTNVPF+vU}%ygUwxI%R;Z{5Y>Bs_;e(YeoFF7@kuM}eSgEg9skEu; zS&Odx1u_J?sD#_=Pv9B)g#!!+ZEW#`A>m@Q zMzaH@g1u%F zWR=!@3s0=hvHIs|+Y_KlBxt=(k1u~cBvgsvdT={LOX|S|YDW{?#mZC_mqPZ1eI!_j zh2kRJ30Eu;{TcZ~{Fjc-=o?W7Ge<*R8%YQhiWmfrG-5G0%!PgO`WGF1Otstz}z& zv;QbN?JrX-;zSv-PvJd>FQScW?RHn(a1IW~^d-1omMKrY5-o3U;X|J|V;&`h9uWvLwIsT*9y6|q4{35f%0vhV*a51=5mHw1JgvzeN0|2TZK6Xca$VRcI z#_yx=&n#hhO2@XDr{5#n*a{Uh=92d*(Lb|;FXXBm;WfdoqDSv&P1n&i2VJ$jA0;uz zWApwZYTfO|s80G*7!|$I$J=1gAof$3sD#a!EigT_?lQ+~G+`;IW14HE@QWx4Rx65& zL2~>bw=&A)y#Z5!7lQcArV`JcS4qNp5tqm_d;%Py@&S?^A8eZkbMd_H$rdG za<~w3qox}zeyZR?m-|~NxJl@>iq3%47Xb5${QM$OR#_0PPH983V|_$`;)C3v?o+mT z8$ZoAy!hlN>AE~FdPwNR>;!E|udDxIccmJO6x{TH03{?bstao)^%id9N!1z+v%>!a zLkxO(i9cl4;zJk~8}I;ElZ@lGefIWJIL}Zi2~ar^6ZSWva9Gk8k$Csm9XwM%XaW+p zrMC7rqEX>r1V$UmGXf_sjLpmRA~3}#RQDAw7YmnD6ybxGX!SIV7E?uCUA@T$aq@3H zJs!EAh<5y`INe|)^O`KG6)*qpp(ZyR^yN}Fxo{!^*fb^LutObm)1yQCYy1*SEz@G`7S$W z_ExO=l$2dWl|w{sHy~f4lRp)Ego$}9J7o6y{D_0fW@hL?x!S8p`F1MiJ=D-jTCVIZ z=cI~X`sD!ZIvdP;4lLAulpIdXDJmk6%!Ne9N^YSh zYGLARTTZd;9_8KTSkqevqEMjYFT0UaW7ilQYu0>A#iZ2`s@Te^!^heX8W57%5L%@_ zb48Q8pI5$%cX^Z((_DS>Hnvrhn~>s~qQgJ-p2u}j%3*OB88D6#@vEB0kj0jl0xIMO zX0Ah0uO9JFq5g{wT25Qyiv{qB#wlTwMjJQ^sAa8;6(WIgC|iYF1-kJklfp|ob{%_p zaW-rtak2hohqzuF4w<53=MamKN_@hiWKnky4Wsis5gQmJvEF6oggQ>**+t-&I*43i zFS~v-@4F?f4jNik!8uk{7<#d-W#(~24JUQJOH52!q%~IwbyPiqvC_HB{9=Wb+o4n2+ z_cBI*!L zsWa8(obHPo#5%gTa?p*XKB{boS@;yf*<#MN7frV-l^IGp)lc$b%IRyxU6~VteKlW4 zuNHq<+WgSLqf-7II!URl5nTv0K+Hx$M%IxJ1K;@{?+Ab5rg$u6tn>$wNyZ0)oESt=?4Ab zvwkQOG<+E+0gj}$__RtdIHxiQ&Y?_7mVD4xw8AjF9LbJRSjptS|_5aREK64E^NI952533)EO*eN`3Sq=Ov3Rwh|TsX`2G#0RK ze4*|1b(yQb349BAH}IC%95&hZlRwncv@8=##A=ro&7s+sF?~x4gt0em9q+jbWfANQ zaB`>3u^+bFrkb`&GytlZ#T?v@k>A)}vGIt%Iw{=QY#~==ZL7e`a7##k!G#ZRD{gf` z&8rs@_cNWj*Dt2j2I54`f?j_6U)aQ{MLT{tZt4Q=~TH&<7_>$F18wRgYsfd@2sVU4&Ih(nz z60IdGDo>Af-vw6^##XnZ9FKj^J(>f~(yyDBtvbh4o7=ggeCoo^v4d*6C>}SsCxrmL zlEs&V5@M9v&g;!U7S!eq^w*FubZh|I#K-wJz{U0d&c)z!Q8?HDJedU~xcq-6w=n(N z5&Zv=+yWbL6Wkp<*X5QufLSOOjmw$B) zaGz74$3@cExPU^Bl_FZ!-Fo@x@dp?=qHg|zq|Ht=T&ccprsv=+7v>qBtWb)ejUj%W z!+au{j&mKCXj&*`;x4zul5zXmg0omJX=6WP2W@;t6({=Ouydg#{v9ND7b3W--M3=IlwOl;k*mV~fGoKL1hP$P!dH%Aih#ufUAgHuj z$DJ?F826LV?QXajQD#1gKj_BJoQgNg{Ye&5IqW||xr||4bKT;~xNV<8t%e{k{B?2E z_r6uLRn*~kfB&ofmH%7O_W19M=VdsL8T0jm4u+}cmlKyhmF{tC^m$4GDG@1_f`k~7 z&^%JuArui-u#i(GViF2NQD^ryPgjm85tuL}l?0}eNywpsL{c9aR2wOn@t7p=O14Qa z@*gE;jdDV2R^xq^Z1xF*;?Sx_ST(ItsTqUf@Tvz`HLppjJ`E=%I?jo@6bS{R=571y zA3@kfDyGh|X(6Dr1 zqhykb92$8FQNR&oQ@u%H8uPF;mJwtV1_8PZ4lxQdq-$t`aLR#2jU^RwN zc39)q^><7_cKP)WF*;5RX*|N7yeiwh0?Gj<(69_(qs0=I1A>quVi2tR@aL@3w}v(y zoU!@~JSSU?XGRleLtW=X=9+%?9V^YbnDKD@tl+4mb|?&ad4#B_pwQ4lg33xz$4Q3i z`k+&_rl?Bj_7#xh*U1{Ie#9&c`Py@^bIKltzxRCLT)I>L`;FW4p`9cfLF9xGon{u9 z7EZi}O}u~M00jlX7b0Xh#Utz_36@53qGGBN&^ZleOrkOpH3WorI>KU5Wb06-E%o{n zD66G)U>Q=g!X{*y^NQ*CYd^n3DJ3i zr+oyCn35`ojQxtgW$+>gAuuKk35m~VL>&?k{R=DVsGvw(*n(<^z{lhzjr5#ald&0J zdVu#+;cGk1wA=5IR&N}KFabD>hzeXP%2*41FBrM zw`l|^=@Jl0rMpDBTR>7kLb|29K|(+}qy&_Z4(Sq*7DWN+76cKbiNDD28)5Ob(_<^8TwufAiY0VMAPfWqF2#Rq{{85$ zgV30M~< zxvwR31v!9Nf+x#m(q8RLXk8+#e*buss*nH&%@qVZ-8?#<#A%ymBm*PO9mY&TN6`LX z^IgP|(fWp1eBxjtUXN8^*{MpkZxL~;gytd#|?(1#isR7Xe|KdSpGO+6ft z>Nk1$i3~9K$a>?1VbUik3zqz5jXoq~jcF4xC_6$@8}P8$F%U?1g_{#DDKL#ZteH_Z z)$eIcBK!DA_>w;YGsW!TrS$F?Eg=bfbh!_2M4m)yMDOf2@bIiv6(!6LSl2%%3|-AI z(=3CUP{plSFvW(GMr9sw@M(o{!PuJ`!CiPUI>W8btl+Kg9~$2>KkBe7MJ%)VbuNF< z0fYU)tA;MxYk4|ZufAZjS$T`ct9tLwOoQ<4;{%kXff~@t8L8|r zf7RH+W;kVs?CTlISa=2{iS>J26(1O6%yJ{D;^5NW;c-55$_Un2^c2}5qZ;cZ?jrRF zWonnX@`W)s7Jh;zrof_x(>EJEH}KoC+avi+o%A(Zq1_%k4MT0H!51hm>&+@{SObeG zQR{~)VS~RU`DFC3XwKjTPV2-Y<#T>&$NZE@x5sLL7TS0DG2%y}LLWs-`}&$J_m?Rq z{WTx9iXh)&4cU0mG$?yo`{1A@@stL%LMd!}yzzikqTUhk%Z|~+3p#YkiV#9?rJR5D zOk)Qkc@awg>#kpGmMdjPoX2o8VcSl%1$BOx0OK6774quRn#_Izd+4iRKYAsoWW^#d!R&xwWzuM385r1&;t8lkEis$yhrAX~YL z&+UXLNx@G*^-y08ynVw77t=&y%XbU8uc;+s{Bc{Ir(=NKl~`3+X{KvDJdyY01ZSdX zA4Q_hoh=|8wd#CDblGS@}!#TXLVu%ElB! zB~zr=Jl?bHSM$-n^X^q`7&MbspC_zG+zL(MtSs&!#~08G$uFK(L{tl@Y1wzXUf3#m zfbP8IVIb0doA;G*cPgbDi~T#=9Q=h*O}?hS|_+?K2NOXSN1Xg(aR)8IjuSac$Tdw-RwLq_PM2=nat6L!=P5uh-e*kmyNZ zW3<$;B<+x3)ZedEaoL?t&?1tY9l7%yvEhN6E$$A{OkCUL+W2ka(Wh{_V|U`eCNeZE zbh@X#Ih+A4=Z@<2FGY*F-U$zOs`tq;Vq3E)&Cje!eq(MV{w_6}%D?p4WAZ+RCpq`% z+MyZfRbLYOr6=o5vLm(K#C?)6ZeI84L7fWSqu}I#TsrCx%8254eJPL+)fL}Zb)AiYhC%M4v27|&!>`jYs%VAJPs0@HTpEJ&V7QRQ^> zF_PT3Ecg_P*AnH{OcBdC zBMgF_M*k{mL%_2f=pq4&LEs5ZBHBPyWE6heTwA3rk&Q0(O8w+jo^Dpn$(6r z;b$2XG;11h;(lbgQd}!%qFg**XEl>MCfsL_=}i~pna+SywMc6vXw^pz{~2qhV*ZKl zG!@s37@=?$;gsKG(Vfu1^!X>(8w&!`?%5%tbLQQ%lR)Pzy=Si#(!cnyoJOYbgL;um z0||Zx|4u;b_`}L30Z7ZcX7!Nohh)r_lY$b7lH}WH5SS}i@G9e6bvmx5Al3P`%j|QF zJT(4bWd89xVph2f3QAZK3`%Iyhq>O5;^XyON;G!YoB0b98n1zVQLim>EWNI}Glz}J zH^FSZR9`s*=eB;O9}k9<$FbBW_`3}kZg3Mzi1$SMycwE*BnyWd_dL8s==ANF{?oF}`xFK&zLem*yQ6u>oP^ZY2!_xZ5{K|)6 zko4FJTa%#jy5ZXPTpFG{=QVF>;?(5#ISetMaV_}9?WtC&)Jh#I8R#bZCbQZojkPGRk5(U20eE0DCX0lT)xIq!|A@OTwb?1Gzcl#TuPKlrbGPtI9P7R_L}RV zjZ4l_6n>d~#su}g8S&vYJxH(kS09sK(QLswnm!pM?UWWNPR0A?Kpu~8r{fEwmlQqZ zY$wWGw<;>v5vws(J#Nop@gmDqE#kJXi@+FPK;gs+4s4y%GcM9aQS!szd)#c)L_D3a!w`jNyQi>XQL)pGPEYr5} zC`%G_7+!wo#ZSN|A2U3>hkM__ zuiBkKR@cEP24|EhzHYs6UFT+}%}l!onY>%Iv_zQSzIhxPQ0|5~lN~x2uVk5R8e5b_ z4dLD`A5MsSru%}J%8ch@BZ}I7cW2S^=KD;d?ag6lOeu%Q z>#p78Z4e?zSb8jG?u+(eb|`DJSj9DUrMOPZ;=83*jKP=w+44$t49D6Ax*MvNu7a#A zAMa8)jVM5wRo%HZuKpO|9hR!RSm<5YyR(-Yb(m!CZ$U*hW9+hjyR|oO8@om162)-1 zy4y;})j@~@&r7zjg~F{;hamL)rn;C}pdUj0j{11t7}(jGP#o!XYEY$>@uL~Y$!zUx zaggIwRH9+wCavDJ>f!FNq$0gVUM(~)P0EPG#W^BqsQy$Fx#6b)Nd|N z3K9^__aV)7eKV+b;Mll2Wb;g&+L}=Ml86R_YU%yRsj<2@+J50|ii#zXUUOSfCVO%& z`$ZheH@N4c1RzLk;hu7u2M-$PWUDqgzo4}4fK@Sh?qocE$E;DJ51MaN6Bi@G&nbr^ z&$g*j6&ZVJb)K@WF+A=OP=Ay zb65RaNNoqh>hgm;-PFH6-&l-RVdo|-SAUp`C56#NB52#mNb@$QrlH+ez*MeCelbOa zQa0Fiu?36O)^Ney0?Q-}^%GSsiKmwCSyN0@%F(eb0bTW!O#m^oq` ztY|PNe(P>HGi-8Mj^<~KTc$I4QJrVmhHx57~`e#nhgW!|rTM(_n zKvQ3kg#0NPa8k(UR41O~Iv+PkG&7+2t$3}V&6@Ww@e8qyc#|wCeSp8TP=cJG*C>Uy zyOD`g_((L2x#`gLwhfQ#vuxgQa=9|?S45Zwvbt@>zF{4UO&CB8s~L@wV%O!V8W znj#Rnt1cETC&Vg&eOWSZM%85XG6m&Ttj;e?S19iew-wWMYmEehj$eeuyEAKlWPI;f zQa`r}@wq74pjIbqJkBR`$WbCblX@$}xHI|1{$xe19GTlolV%Yc9^KOM@}$^&EEv!d z_n!Z*$W73CaL#Cr)fU)NJSalzW7VK;AU{q2{&%#UbjXiCo~D0&!nzPanG&C)F4-`D z>x34bSrgEk^A29+?HANC@ivh{3yTyS*oOWB?j?3^;qUR3s~Pp_#rW27o+Kt3+(Y-8 z@+y}?NjTEXtgNG1Xqx4shNZ2ZA?R{V>a5eCw-otZ6LD7v>f&QAvQ0L%=E5-uHbScT zX1M$@a_GSzzppIZ6D=wEa(sc2S(5mctm#A34-eB*iHb%O9|NMq<{Xf7!)#{pG&_9qwq-bCa1+*?=4TcBtO zs)pMkw7d!L38rAT5XF+VuxIMnidqk+W}L*VLyvLJV_SwOCan@|ZXG6tXWGn{cNJ7+ z;%iW`OFQvGA`uERvSlBR%!^QBT*9p5HSDP9CRk^nW5{mX;GR?{WA6n&2kIA^M>%R$ z{=c^BxKC-*BuVc42ZGt}g zt3utmy!!&qSI-e?-DraKlf9^%0#XPClg{PKh@h1k8@t5*sONg2J-Gvj;+JcmEM%0b zgtd!Bd3Dh&N$7JL+0m)IW720ycW91C<9+uqoghhyL~idOjkbv?uXn1EnQF4(LG$n{ zxL3QNG~GXaMYRV{+ze{b7SqzIZfpG(p*0K9g=9 zH}Z_%M+_L2lW*?^&9d1zTFhF$n$2)4w9dG%J@P%Jfa6=C3*Hv4*3)}@g&!x)(!Aiz z+bp?wc?qH3^T>ruEGQ_YW3n*>(m3Z0O2^XLbH0+0;^z`oy>qEAb@o}>cb;n!GCP$k z_D)&FA+VUPZt0P$Wh{MF-^2M>BNF-uaF-z!1EOa3u7A5-@jY=#ou=6HeZi0^Ke_c< zz+EGIK4S2TH0L8K>rvw`5K+(9Dz?9}RqTIdt2i!LtIiiHIZs-3VM3)9&S&|i--Svh zhND)2LZt)@BPdjQ9iqk8aN!B}Ms?9uq~M^EPQf>4Of`$Y^0&QN zqwNNYxb}wc3|{<*gv_p74o{Qwmm30{f@&F3y_pdSH)3$An)8U_N~|2sGVh2HcD`8j zE=4!Uz2_G%s5_A%IBv}OjIj63P_Jm*l~QbH=1}#j()SObnuxVwtsDH(0S>s=#JOS$({Uc~Z;O;n z7fq;~&sRT$%HJiwn2v?Y1(IK0CAYWAK{2KG-{cq5u>v6sWi*FkM1$BB+iOtkv*u0l zyyT6Up@?~fi%8pLG10rm`5WDpy=06T7Up7Z9tpNX6>>&S6*gMjjC$8JE%=ya=R(Nq zpPz5WAzbB=A1`?7xY&J z*8cW3R&aJ!!vhN2uY8_OZr@8DX>e9HVt7Zf(A`% zER^$R)82FkwdwLivyKMGz}q?w6d) zpC{+WZpeM5Q6NT(%nOk&A}7e$uYt6%iH|cWhoi5J{V1!(>hM3&+#S*ST zRW#?8uwubA!4J#!AHo&psb_@_l7$L|lo@8KH8S*=b$T^mAD}aaR5D?bg`_i6If`e~ z$_8*cIKEgEVPi7H;qP7ara&E55I{A%>PbbxoUYV+2>il&dF`TU zlk>Iehc>w|G38vdIOZSOkqa}68#k&%|E=O;K2{*7ifh}uG;PMk6OI%~;c>PCi7ik4 z)&M8G^X9ZB+7HDwcuRuKJ~twk(B(K#x~AQRpIc_o^1Sl>-EOB3N-|Z!u$!AH>4%~R zAjPH9rFYGWAv<(zKmxbG!AJrz$~T?O^U)0M9lo2o!ebpC+2q5*!}(u^u%BK+(mG%? z+$7BEZQl%RXjT+juqF&|E{>0|4MDbe9^SY`J(@^ zHu-y_Kg+R7xj6~#gGZllrTTC!g{bNB z6jw@0X?-elXDFdU&t1ayA;V$(%h3isln*GxTwUHHpo=s9S3$}0S4tC>izZFZCAe6A zNRtaAxXu;+S&pU2g$)1a3zR>k$b|`%=_GSCzgZvM;Hc@VhJ5Bg`|8S5W6N+zO6XQ2S3-P&JTULg&7tU_PQ9 zrMO`@?unE&wbp-4t_vFL`4iq3#!njID8gryOzbcWIy6J`(eFI&mLI?ru+4USZg@*J zAR^LjVYg;<(Nq^wSZi!v&xHnbMJ_LTwum*e6Lgb11lE0h$Ev_RWb<2;yF?wP+N`-{ z1ag6&cqTQ6uJ*QS{qM7ImW!56IahdLy=Xe+e66}@8I$w1>Y}aToGVnaUbM|7I~|B? zzg6xp)&F&)xPSe7YYEPjsM6Fhrt8ME8+L^Db`NrTVEk^^GR)hmR?T;{c4~7` z)8JlBJb;dUk}yA2{&{SC)MS-D4jVpUu4@GQcm;I;w1PVEzptP&{+%)9BCqG*gWh{b zCma8>`$@v214_{pvO(_svs_@%D$#xtpK$`MsSy*USY#ZK0xMN!kS_n5I zQ7DR3AO_WPiFGdV%Pq&4O9#BlZ@XAlx(H=96W^gKhbkhOg7(p3i}FV2c=oJTk9yuO zY#A1UMdo=tVe8_?1@po&g*57|s8Wc+$9l4&YU3{RM$^iUKBfDJZ#mz@3k0CB(qrY# zA;??5rFX6S;GASelQO?ZkQ5yDERb$M6zaX0xrl}K7HWz>E{z3ycwIx@oZgsj9CEJT zdpqbG;R&MEl2y<=Yd0h%bs>*=d?C=u=Zo9 zR;i~bqgh!A&J1bEY4o5(r599d)A#qhRymXuW*YYr7BJD_i$CvZ=lS5}#H7yls&Fiz zRjA2O!fV_WFd#$>1*o&Gl8lh)s#pBi<*fSUB8-0J}(hl22(<$fk)nBP8+5gH(4f|iI zK-m9E1;YMUDiHRIra;aW1KBUys?GUYb&*pbfM@vF|4MDa{#R-X_P<15l;53XONMOw|v$rgyI=G(Yt}vVslg`h}XE@RV$VxQwp_< z*KO=8TRbc)^hjGFwq+WPrr=T~Mo_$7iC5z}afQ!UMU~f0_yE22@|zpux0{FP#awuk zkHrXKXoE3m@r>{2oHpD`^8o?=7OE0$`dgTTZhY}c6@7XJ?ZLu_qb*Za)th$y&h4|r zIb;;@IhnBDm=&_Nc3+3D#+ZN-!cI@)dK;i&QFgcgvvbw`MH~$o3fy}ulRO{DM=_Zh za;hB07!@j^jIbq4%Ih^q0cu6ACc_~kA15(9C+aT4eIc5{u_r zwaAHC{rxwou+^)j6?^NE@lbYK{WVkKMQT}&8QGU$x1BGe?$BuPro zrS_SZTT|D z{TQ4u0jo$_F69tq2fuy*s>%NEhhjmcdckj8Vq~~zI_2l-_rEmjqGe6a*{qAaB=axc zx@dajoZh-5DuQt&T8;>34n7>S^=GzJq6ElD(_cd0 zjov5QmU)v^(Rj;`A1~qw>>_fN^Y=~BJE=k9U4@!dik3#W*6>o5c0x^`BcshT0&cB5 zltq-|#(G}bO6?N=@}>+sd5k|_RFW{%ZM2U!0)kZ$Cs7S0xVf2PG&*vb-VDz6ZaO7X zS|=|A7}>=0MO#^V5(Mj0h3ZqGOypnHzATC!O>UzWnRc5tZG@|B=+JJDmY{? z>q$wqNV#0mr#J2f%NYqKCS9J|r}wM~3UM3cmFI#r4pBAgn$^0pkIvaWwqC5eNIsAe zZ8-Ki6H75C1%AC_YPR2mVyt!03r5W2^k)&;_~*H?u$b=_vAuedGJMYAmeA~TVa>}_ zhs#Ap6T7^v*a$)}=-g610#IapP`+1UmnCt;wpzA6%FHTdtCbMSA=AcPhQ+^(utx;- z6l}sP1_P!3KZP#zKA�*tu|tPo=%RI{AoGH;TT}T;R_8U@0Y!U@<#wg)1?qIpr zG#+;Yh(_1T{Z5F_6#?=#$iSFZ?Enz%G0np)i5E}=cRr5W_H zyzany&B4XB+L^aDky5^CyNEXV_HFk)-lTg(Ph~AyJ7PA8vuyUheb{XsUS&SmUUhZa zUbW)l)l8Pn>M8%Q;KG)ZX(7*V<-EqR{Sn*#(fw~lv~TWz!>6UrBtq=9IQ4z4 zXy`JUOl*CKJu~9sJ=Lw74eu62W%3ZSWefL7I-RKIc6B@SDCg(+!M2igxA?*L+%dwh zWeH4VK7MS`F=MQvDI`nqge5>ThVG2dNbuw)=(U9I#E&fvalAEIN+qj|RGceM4CfMj z&~p=x*lyn+vv0`LNSYqssqpGvANfM@v2@V9`&um7$7uyTzn)k-MSyf?h)%f*iIT{Nd`3L0hNW0?0 zSxiKyS-sxr1tN<}ETmR1FACi^XIADKDnw-+R$v~89y(mOOJ>)qyjT$nUB-8{SrBQ& z%j``!>&Soxa`*csX19=x8?8uB!)=mWKXJjETEc!zPbzu*&SbHD1K)chPGu~jm`3u= zqVG#9OS$1keiEbuncB@1;R^~k3DPv9RWhW@M{bBC6?t{j6pGE~<}bR;cRrmX7%C^j zHFlXVQ?4LmsOauOjDdms5H2_oQ9sT_bVCCjH*xV*CX_*-uw8O*8(Cpns1$x28TR0+ z()Gw@(yF~a(7zM&5y7`E(dnfi&LA{Qy547XNj6#~>C$68YJ1UuX%wSyH(!*p#w1(c zMLS=D=Ot}Skpq$)@6qQ~1$y2p$5n+V3~1)dZKUb1Ex9GdyC1R@s5)z9+6|4B(ol@n zT6#p)*bp_-Jh_MYlq=?mi;mV{nKjyt6jh~9_S3u`P)c(}kqK*J*S=wWsdU3Y6o^k= z<_~yAUUm<5HTktlkpDC3?t&6=-00rw5^=2PcczhKie=ictHDKbE@|Xty)db@uj>s0 zAHA-hMP!qlGzx1ln237)F%3_-fD#oi?&_W zmjW;|W-l46Z3fUkYBUls$@J!+@l)gBLnlZI$(dUjNAaMQG?z7z*i(ggc3s|bgiO#! zO#fbQPzi5>v`52C>>J+jIJ&+^;S(0zU7vAFJNR2nA9|fEH$KJgKF8$n8z8V2?8;Gb zbL)QaZj{CZ8xmc`J(KN|$@jPPCCwslUgq8p<63&=XmV?y>E2H0YZW_3MIw4ytvmtg zwYOO;aBS&nPVaQWxDuTr2apnGoKive@DbHCrQ18KqlD#8hhHJWo6zrl@dad>CA8{N zc*{KlF$w0PkLkP)ARKRkyjFv!F{DVf`Em5IWP7iPAzzIza4HxXftrZ?`Qv!ypW z5HnC@?wGG49K6>&(66!Nc5#oe4mglJ<@4?p2LN`^!3!lg!~N83k^ayK2%c? z{m^u#T&Sn~4^&JSv;4#OFPnU+Q4CfYg!2x;z7xlBP`={rVPaq3!am-3m4g|XU^g-F zHi>|)I!b1X+}>f8R9|UJ0ty6MW|<@ zqwM&)Pve~LPv>VTi;tREj902XGtxb5`_h)GEPg1DzP&1FQubhMjy>BIKSwEo$mwP1 zmPEu{%wVJRUELD*f~rr3wzg<@o_h@uZK>`QzrF4%l^223zw!9?Ko09Y#Vj(=m)+h&$$PtqCB8Zoo~pNQFz?o%2GSS|SeO>%texU3*CurX5^+hs*LAV){kl(n$p|Qrg;qm_@6#$al#EE!inc8RYm5F8-xT^JW!mmBQR-7 zp&ux-SbBM=Y(;-{bmKkuNK@vv7M3~q5*H6197ft|(XF}N?}_x%{_3g@7AYZAN`7f1LPS)`)~VQdPVpi8CewJ5 zSXsi)Nd&nW3}dzKW#p3PzO#JUfmnj2%_FMdS8zj6(&VOBp^oI^cQDac>R;bXN?TdP%=+w%oqH$CSjwrsSIXS(A~^@eQ61em3nxH_F=4 zP0)2}xy9{Xb+VmP~f+?*PvA$-h1xjGMmB(MmjQ`I=nWLV<&aMXRDOKQ zj2Q$@DuvqORmBwjg>vfXLa)U(*3-@2S-ncOyS{yx!W$m(in~mDfL{Q|9I@U-G79H^QRlIn8- zV`QuN4JO5?VoTzsR9M+>6g?K?ga|GOGfIj0L4{K<(htql;D*;G)|N5xRC4GU*}Cy3 z)jx|qxKl4DzhRiWhFQ>EOGL{e(QOvQS+0%R-X}gM(S4`1G}DunIQ3>f36&#VHax@r z7Tas`cQ4YF;G+fJ^zKhUjs`51^UpUR_Qg#HQ^GBo=`uA-3rXzU6{A;yM!V7OSIFUG zv%+KdblsZ4($Z*&Aee+kgLIjY)#LVy5b<@CRcjd@hT!V!-E=TSpW@7e+ysyUN2AIn z9@C(H=}PirWE>$#erTA!N{O90U$sWRg=s%AidLOJUX)!{DlYeJAQMX(_IrK5tn`?k zCPAJ5xA$u=dv7Prt-8-I4hz?IZqs%eOC-B{9sKqvCg2SAq9r`fm20?Y$?5K`snFl1 z!G3Ic__h3Nub`wasIY>}Ek&grh!3jla6gxSt*weNH9ty&ePlT*|EdeBBR$r%u#F5V z|Jrv_{&l&)X-G8x*-=%);`kO&9chK6F;E?8oilZ$XM^0HAb{#f50{M$CLPt0KH${t zonWL-rN2#alm@$XPw8+In{LpZ>=lQ~=3>lUP#R3X{;2#bD){oR=SqWJw4E!9$sf(r z{wQh92$)jQy;81l^C}_C6%Aiov>-1#%V1}?xn(!>I=>X+7JKpj3^hSP{QK+f?c_0% z4lCcPoL5Fi(B|gr!+GiG%rS_UnI?yAVFC!&x@#+et%=)Uvk#p*rg1M zuqab%#40=!)$vmpV6|T_)SR?_x^1#-&KB zj*=Z6-RTPz;tS)3>M09)^ZolOE#TP-*1vM+2kS-KBk^+*7tmLX$ARX;>}-dGqJ_YO zfP=UMV&^r8Iw4bP1(0mTXNQ2mI8|ytzNrgZfELZnZM75~E%j|QkF>0uD$={*T2JaV}Qb)Dri^Rk-Rwl6o5nZAEVeB>YM4)AO8-vG0Fm!{@<@aKtMA> zLLi^E1oW-_#WBF~ef2irxNw`Pf#xkX1O&3~$wkqpPcKxTJZh+8t*>{-7PJ=o04##d zt7lKqK%~G2vFZBhk2|td#a@-SO*`Y;Y%q~v^0a1Dh`iz5l-yZ}1_hP;u zU%>VWu?xL%CprYg)NRP)JMB&_Ygzjh#m>xB$Xdr9)ILT!(D$?6;kA{U8U{Vx3u@!9 z?Rx_Ud4_L4weOfOVB1$2H|*sH4Z3ZQ_blKn{J#Jmw-PKMA!b(gKFC6I5GdAZJ3-&_ zE*}FP-{lCp$?BDcLah)H7>w96z-q_R7x)$F_h) zID6sgDS|rQF~V8DgB_A*@3lNdc}4KE9Vf0jwFYd@p1l?F6s(=_SCdZQepm?X`=94B zM{lRo&+Drv*8QVw)ych!XIc5PocWY zSTda-Ncb8M(D739`GE*Xfq;(X&iR2>0fCOUFq{Pf_FC(8Ad8MSKAr_Sd$rlA*OJHp zfKDztI|~HtwK&jKsGzs$KkKNS+!}U%APWj0Ag}`%*dk#{ARw^J2JUPEDj*=R%szYP z(`jd~0s{RZvnQy5Ec!!cm)`&a`a@=i+ynvw%WPn;>CylJfo1mDi*Zgno0Ap*=;WH5 z^AqwW9S{)M_tM!J#i>P*^guv=$m|I~Ah65^?(A{~AdA2<8+eF>fTSeY(SLG($l1<5 zdr8M>AL%jy0sSGf?=S-a{UNidS%84RG8@?ahk!s}nGNiu3}g#!ra51FmN2?PX|*}$Dm#RUWeHf966{{RpOEVF^VHp&fT z5m;uQtzUlXwGtj6Ah65^?xVt6KtO-UY=2$=pp#u2;SOCDHlPbmM@9aWB03cSd%>KEve@zSd3jqNA zA&oSI0dQEs5*yfQOd>!)U@baZ*7ekBmqY=8PKvyqzpr7$fPnsx*h7FoV2S;+(|(;m z7Kj5`1eVyqKz@^KZARw?I`)rBHQ?D^e0RjD%*uVA>oiq>-*pLm}M=&x# zKwy~-3^W7?1eV#rKn1b@7M+v@JU_Gj^N-zppyzGXPFJ`ehVESAh66nTe;)Z{lfQwfc}u#Y@q$4V1@rl zeT=hB10HKgdO$#6nGGCjmjHqOklBs;Ko;6&u;q_3C9=^2`smPk(PmxeoO9OZE7(Av **NOTE:** The Excel for Microsoft 365 or Excel for web is required for some of the Excel-based tools to work properly. -{.callout-info} - -The following tools are available to support the PKI maturity model: - -| Tool | Description | -|---------------------------------------------------------------------------------------------------------------------------------------------------|---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| -| [PKI maturity assessment tool](https://raw.githubusercontent.com/pkic/pkimm/main/tools/PKI_Maturity_Assessment_Tool_v240318.xlsx) | Assessment tool based on spreadsheet, which covers all steps of the assessment process and provides guidance for users to perform the assessment. This tool automatically evaluates maturity level based on the assessment results and generates report that can be shared. | -| [PKI maturity quick self-assessment tool](https://raw.githubusercontent.com/pkic/pkimm/main/tools/PKI_Maturity_Self_Assessment_Tool_v231220.xlsx) | Quick self-assessment tool based on spreadsheet assessment questions defined in categories. This tool is intended for a quick self-assessment of the PKI maturity level and as a starting point for the full assessment. | -| [PKI maturity web self-assessment tool](self-assessment/) *(under development for 2.0.0)* | A web-based self-assessment tool designed to quickly evaluate the PKI maturity level. Equipped with reporting capabilities, it allows users to track, store, and share their self-assessment progress over time. Serving as an initial step toward a full PKI maturity evaluation, this tool helps organizations identify key areas of improvement and lay the groundwork for a more in-depth analysis. The 2.0.0 version of this tool is being updated to work with the new model; the [1.0.0 version](https://pkic.org/wg/pkimm/1.0.0/tools/self-assessment/) remains available in the meantime. | diff --git a/tools/self-assessment/_index.md b/tools/self-assessment/_index.md deleted file mode 100644 index 02bac12..0000000 --- a/tools/self-assessment/_index.md +++ /dev/null @@ -1,20 +0,0 @@ ---- -title: PKI Maturity Model Self Assessment Tool -summary: Self Assessment Tool for the PKI Maturity Model of the PKI Consortium -date: 2024-09-14T20:00:00+00:00 -fullwidth: true -build: - render: never - list: never - ---- - - - -{{< self-assessment data-url="../../data/pkimm-model-2.0.0.yaml" config-url="config.yaml" >}} diff --git a/tools/self-assessment/config.yaml b/tools/self-assessment/config.yaml deleted file mode 100644 index 3ea41fa..0000000 --- a/tools/self-assessment/config.yaml +++ /dev/null @@ -1,53 +0,0 @@ -overview: - data: | - # PKI Maturity Model (PKIMM) Self-Assessment - - This self-assessment tool is intended for a quick self-assessment of the PKI maturity level and as a starting point for the full assessment. - - You can use the tool: - - to quickly evaluate the current PKI maturity level - - share progress with your team - - identify areas for improvement - - generate a report with the results - - # What is PKI Maturity Model? - - The maturity model is based on the Capability Maturity Model Integration (CMMI) developed by Carnegie Mellon University. It should provide the following: - - Quickly understand the current level of capabilities and performance of the PKI - - Support comparison of PKI maturity with similar organizations based on size or industry (anonymized) - - Guidance on how to improve the capabilities of the current PKI - - Improve overall PKI performance - - The PKI maturity model defines 5 levels of the PKI maturity based on different indicators and associated risks. - - | **Maturity level** | **Short description** | - |--------------------|--------------------------------------------------------------------------------------------------------------| - | **Initial** | Unpredictable process with poor control and always reactive | - | **Foundational** | Process is characterized by each particular case or project and controls are often reactive | - | **Advanced** | Process is characterized by organizational standards and controls are proactive | - | **Managed** | Processes are measured and controlled, proactive approach | - | **Optimized** | Continuous improvement of the processes and procedures, proactive approach for future technology improvement | - - # Resources - - | Resource | Description | - |-------------------------------------------------------------------------------------------------------------------------|---------------------------------------------------------------------------------------------------------------------------------------------------------------------------| - | [PKI maturity model](https://pkic.org/pkimm/model/) | Definition of the PKI maturity model and description of the maturity assessment process and procedures in order to rate the current maturity level and to track progress. | - | [Categories description](https://pkic.org/pkimm/categories/) | Description of PKI maturity model related categories and associated requirement, guidance, assessment tips, and references. | - | [PKI maturity assessment process](https://pkic.org/pkimm/assessment/) | Description of the assessment process. | - | [PKI maturity assessment tools](https://pkic.org/pkimm/tools/) | Available tools for the assessment of the PKI implementation and use case. | - | [Feedback form](https://forms.gle/7CgvuNoxaiTYbtK29) | PKI maturity model and assessment feedback form. | - | [PKI maturity model community discussion](https://github.com/orgs/pkic/discussions/categories/pki-maturity-model-pkimm) | Ideas, questions, or feedback that you want to share or discuss related to the PKI maturity model. | -email: - enabled: true - subject: "PKI Maturity Model (PKIMM) Self-Assessment" - body: | - Below you find a link to your PKI Maturity Model (PKIMM) Self-Assessment. This link allows you to continue the assessment at a later stage. You can also export the results to PDF. - - If you have any questions about the PKI Maturity Model, please reach out to our community at https://pkic.org/discussions. - - Assessment URL: - ${progressUrl} - - Kind regards, - The PKI Maturity Model Working Group of the PKI Consortium

TRZq|2P4~2?@}L>quapvHzKSIu2SuC$wczk3 z*R*H>PQQ#ScCD{|6nynU55(>eICYFOJD%MfcP`&dcT@05MwZsHhYam~q==u6+I+(N z-gS=94`Ab6KPO_3uYL+0!+tjl=!1v$o@jJ|${4k6eDk=Sd=`QvYvFCRf}fKf5Nhch z_WMM7;YRW0f~A0AwX&@gdcxLI%c4b7cW*UVJ9+k}ZjQ??mTeKHR)U^u+k{LrjiEhq zhmPbzGjdYD(yTChPUcHX$iilES5p@;LXc^CgWgG&)kK;*k20)BND~isfVlYnr3ayISDn%}+XihGaZTS*9 ztzKn;Js8?!q7(upI&UhT2J6zbcY0cWPMBizRf<<9{hXZjp)Tc%AIAr4uCJ#p1+;~! ztSRl04t^YGH9?J^V;|aM97Q6>aRnu-?&UCO|QmLVHL0vqy!YzVA)+V=DZ z_sn-6$93Ohl>DME4G76GY>p3@srfmbM47F2lYfCu7nJBkMJ&!+x0qIKU8pEyWHN}f zz~^fyG)0%GqS9_iz>q0T;ARrR!Od(7A@HSSSCc9A>ZJPXhi zML3+7q3SVBD@$SmxUHB(r62Xi{y7Z{sDp%9Fh^GS?uTJmgIFt_UHZi5$C?B7mJffE5oQpga$N zGFOKT0Hq29lqU+6Na3aIVJe()@+fANE`TWgS!gV|G0IJ{0ACv`%3^UDp0UOTmJrSL zUa*OF;)JmG7fmdoF1W`v#h^&1L7#`VGwM*O32)k0+M^lVxU$$_9dw95u#nt9wNI{q zJ0GcwwZzXy17`?32*^gSlEGsK=Md6uPY{hJMZ0UToA3SSlqL#)d)de2xB_9q)@eo#@%sUr*ogd{iPwW)48MY+fG8J9)4=7*>E49Lq zX5@flYA)?#58>H=d@^2s%FcQ!9(Xe?Zw1l`;LWyyH`|818C@XoW~x(Gj*)bvCaxiO zfc0P?>%jo)2?N#>c4R$aN7ge1Sr50r8uxP{U_JYu1sGsGVZeIAj;v=2SWgpOpkrwdMzB@J_8lxIeUPA=mN8n!Och;+rq$5!u*OlHF@p&`50Cs_|!Reo_&Bc%>ZdgCsZft zZ~$qVgJkJ&$FneN!$wo>dRp6*wqY{qHw!Vsxi#v7PC;9w6VLDKZUZyJ@Vx6?C1Gm| zZC1yN*v`f9-k;(-FWd1=m5S8ll&Mmf)5(D>OgFjCl(t@pkm^)YjRB$dwoQ8_q~#lp z4=41w{eh>VZvdXE86Z*^Z2py{}B3|q^Jb;8XgYdNLWM>T)wO@@FF7b);L9>Z%YXX zQ5->t;>ZnNM2Lz*cdwQm+`SJJ3|HMk5aMYLuMy&**I-C?3%JyU0a9?$Zxq}EQp7-i zv}l%dd#FZ%uYz^`rRTV9bW*i|@qz#1^gOH6o&6tOU8i~khI>i_-(t~8T^UYDALde{ zdfZyK=Pj&#&CN&ibu<42Oki}#w0^=8%DuHnnqUxywG8nn@IBrQJ)-#2O8y#?NT?x4 z9~u65NI=mP==YGA^e8Hde3gTy$OV(K0mx*pGysq(4?$*rzyL=W0{F1=v|x7N!w|rS zY5YWK;KKk)10RNfd>9O1`80&(z=?seUV*Wk0S*Eu25_(j!a?A}ve3LnA8;Lmlhd@ZV62Yqe5{5kuHhz863kZ^U!<{&t!Rra~ z?sUAnss+0zoFml{4fu@X^7x@5pFrDy$1xokc1{)qjUP?HlMvKJ5VSrlf=NNcLr)u(rT{ijI0OzJPuK!63V;SED{IJ?D3FoJWgbc8p}TW`8|?QekWd>7 z3=8awxBO{ZNigME9XNJZL+WR&2=XhieF_SY6cZ%X+kA@Fy8pszI1D-U1?-|YKtS=Q z5rw;{%+ThILYw!EFzR`&94f85N)N>>59XtK1K!!#h5>(hegFd0P$-N})u=I-2kwx) z0z|UK!1&DW!NC)WCt$vEc`#oJJv3i2&`Jl)Qv{;C2hfBf{|vcc!f*zf6j=bw7i*1B zAjpA%AP0UFbR_&@v4OgtELARoLh24Q$>?JK)?3esgXLzqx+ksmUoIDQl1>R6tU| zQ>Rq?9BkfOg8=wo$qvw_Gb0CWi#oS?Fc%E@ss({CW<@BYl7#CU_80n*+D6Ih(~Zho z({1S1e7^`v>7l))Al&+o{EXG#c|ZY~ppA`%g#7Bp-|4_jo{MEcyJJM{T=|FF5FhA# zXk4_0n^De?sSCJfjNEM8-`}*6ycD#*FmAkeXmVJ4Q17GgXiz5QYx^acrRCLt#z9=q z3kgb@{e|*~#sE+6t?z&vT$m7O8%^5^Sap1OyD7So8ch&J{^fcH8EJfWbml2ojs2U< zyskBhO6rfPXzO#|MLohL!Vi(q51`umiCG#)0{8HSB*WS^2(1?`CMz44pD-=^g%jSJT=`jou z`cgGESFi5fHOHPwM)i-c;D%1=NtrxB2^)VJL6dZqRr*?9pScvcSv3EBrD=?4ftI9p zgSJra?sAeVwu1ai;EkeurAM1l#!`KhY(-qd0+!g~-ax^{f}Df9U#M4dZhvYR*Heyg zJUbP=nh_A~u@PFFv(}JPlGDp-xM-bc@M(HJ-6Pa)WWO`qs3GQlRAo5YBb59LQ|BUa ze70!rpk@Vk$F)aa;`Ej6s=_}8qpc}Y2*UQ#6Uwca$r z_o^fM_H<*v12&-i{;#Z%c$xI-dSoTX z;>+WCHVfn-V;0O{>`%`D&$AZ#pJ{@tkrzBZ%!*U;KGJv;EMiD=Edb}M1o&9OOj}WK5H=% zTHPWE$yPJqd#Rtckx*21BR+08SFmPJtng~2Q$i|(54kE3U1AMl zP6^ljZ4&~us&9a-Y9#lx)>l2?kR~`qxh6+)E%66AU*c6~1QLS0%0a8XiU2qzhtH&@ zqoud*TYtS5Y@L9{FaF9YN`$sfNIh+z_7n=09X`|OcBxd+5u~ryFz^iLGM#q3+s`#) z!>A0Ro{`)+jk69~!XXX`uGS;s+vdVVAt)A!vnHd%7BiEZ{B~dgh^(niK?O3T6}qfg z&6acdx3Oo28XmH&nU=i=PbYq7)e>waYc6zo%O@^eD<0-VMWAgGn5<`%iX4@|=+#B% zM932X`%|3-(jRL^x)K!%z5!~Go&Rtwptq^ggM2*MITPgQ3z7*;10o=ntykvzhz(sHCz zcG24KwDk;fQ8PK-hdNpyFNo{>Dz72{3&j)Ibn2|rW>k0b5AL#g zRG5(GuDwP$y7UGN*ftrQ0pt+)6UycJPEwFexZl_#<~w=ZMn9?r@R%-)k~7F@7o)Tv zNd$&u!Je5_jjO_=Svl1jGpE5xDVSe(JonVk+Si}YAXy{sw0ePih}8?R;3ibx^~*JF z%*y_g@!?Y#)erE1-HwpPQWwEz5|$Q#UP@)L>TaZUy}#Orb6s=$x)rj=l@U5|*weJu zx}Ly#xV=7`HlHNZ?)TPf>oQX{WyXZ>!NPb#OX6i+EaPY`!i(rNVqDD>cHp_2i>6%Z zmJ!f=X@II8v_!C&yTOAl`>XkE>$pfV1aA9>Vv6Ntk-Ttqwty|^LT{ahMmP8>+6j(K zdspCl60@qAd{y=_3L$;`%=A2>;l#H3@yoe_?2L$UI#Vh5>d9|Fu&L1ZWDz{PV3$d^ ziw(TntzpnF+V$dkzh%U29==2tWv>KZy$L)s5ZuN8Nw*a2)_*W~s2xPmKLE(MJ>Ia* z%CIUGRNb^MeAUt!(eN(h;(19%Iz;;9X`v^G(ltpB){qG;$^O~WHw`mF2S4UBj7{o& z_I3y7oq_^DrD1w!YMz_-1-=qNBG0D&6l?USLNUm&p@qVngY{SWbEe(Qi^;d5dFKL$6pHqa>_vqfUWZ>>65#qmBWVNs-V}VetHkN<|#y-_# zS{c#YIWHx0k`r#SnzgW23B%e`2AHoEXQR*Zmx7;sG?`Ic6-km%t=TNeE3?ZW0Z1yV z9hpGLT&ej*#1DloxQDC zU0SW~y*v9e;2+IT27wRU>GnHt5D&Dmbf({vPf(f5qqy!X_-kS5-(eVN*m7MsiQ%PW zW!VUEqTjd$o?@NTfKo9!;+|)YLQ{PZgI$6l3tLh_*axU*DC|2*$I&1iR{;f(6rJ~( z5SRS*9zNfShw9nHLSJE<-`G(oe@21)IUYj}Nbe+Xc_V8{z$Tw(sIQy!|#7hY%kHp*lpiL)eLEn1eFTbpmn_McxAM>mmC5 zRf{X2t3WcM00?Y|;4IvQ2u=hlfR3lX*$n7-QYdB7 zfl`)o(pXhJHQo9&Kr$Hs?R)=emBr{=*8S(4OVEG{c?24>2MJaHdlV0nAIt*9nlG9k)qAhV(en9_DKOn{d{cyx`0s3JHq8|`P z^aJ`Q{h%_VN`){6^aIE%01F4`2k^ok&=061`T=`HKcE5q&~`!}y5j#tlmk-$^aCsa zq94$r6=3NGql?McE@@*eKmV2}fT|YY2-ny^qVSj~o<1E|g1WawFxQHM``Iu1$FIzR zJn?5e;}01H{U1$c5H7RwTb}*vRB_u78xAr4p&*S3HDCv63<;FR&}K1!OpKFmC7B9j zMZ_hUen!#yEY1vdk&CKW;-vP{+&!H zM)NBEo#C{6Z2~TZ3IHitki*K`R)QQh^eBhjEBHxqf^RbX1I0%f>MM3| zbxbHQsXtJh^7&RqjK$JFOlO4w`UDj!pH8=8wYcisYb{QXbJFkE0p z;35ll&t;(jSA_yx7549h!k_WQdh>q*U%(w!_*tof81Y}B3q+3qb`CB2C!*?sB^`6kf zH$#%9`e#GYcos?qA(|0{Xix?2OX2QJ(J$(6?ckdof9DirUcnE%FTOsN{$#-{a@Eg;;D}6%8{Aq3mn|v9up(R+1|#0UvqZ>bMZ$q1m*BtWGZ zc{l)R7xr^gOi&@mMJ=}cHfo~rS0PMB!S0?sYNoOl5&Jq9y*h{plzgUzvH};jdt?H5 zDXz&QhRT=pvWOpkq+k}B_8q%);V!AEHyH`l=PR_Kz}f0)qSB6o3kK1RbUH=kpzi!C z5iDrf1*%F#UwSGi$AEweYrrvqQZnS2{uWh$6@#K_fiDH0qR@jQDd21qJb&XZ|9m6v zsbbzEqyI)a{UJj6`&j;hM=72PAi94mbI*tW092wIL|vvZL*9MVG+tO7T<9T&B3}i- zm@&%(cPU>&1>7ab>a?*BHK22#CG}Dz2Iml}140uxa7e}A))#Bg04hueqQc7M0Tq@C z=QeK!pVl#}1eKs(=uH0_*)GvqXQ9(nLR7M0fp2XrrW#EGbRhf;E*8ceL?7+H zS0hIiN*n>tEp^0mdpC3b8-7xM3gl)l5JAqr@;Apcv6P{Rb~`sXtN9I-Ou_%dlK)Ip z@*l&JzpilrmvmHjy&ekg=LHV$*}p=P_-`Dfxv+rXfxMKFd@-oPO!p*J7KBTnc!mYV zGZ1(H8~z76cbUCl*OgK&wiG*Y)J4NA3G6PU2-uwwxTr>1{lfg@iFM$2O4Y4_b{!`W zPC`XAw9MOIV9FsiAhJpRR(?G!_&-Zz*9;1J=>6MLhl^9r-zxQlsef5EF;UG_OR8tq z!iF10AV3B34|V!EC~UqUuJ`RD1!CO3suh$upll`%j)kZqfQVTTB61wv#n5K(Nik3> z$f5_B0rl4Kf-sTyDfpyVDm_#y02~nvX-VIiTn0`}ucQ!7QSr;LBo2I}3PkfCW)a5f zzXz}!Fpy+1QA0yTLPIH@2m>`%6jWoyf*LFEDj=$cYODxQV}1NBSW^qC)b}emOa&|a zu^RU0u%vjicVpY2$QPpio63O?tAP?DP^)RDkCB>b&eX!59*m2J2RyX%eeQw4{W36N zrG+29*1&o@yh58_D%_2=`#sgsz|JkNf}S8+%u#wIMZlOUb?kkz29{)!DgzckaJfG0 z1hLI?64331UtEChegNi&Ixt89QB$}Jct-%G%Yb!+A+IxZCjVtm&_6|XRG`xOuTve6 zr%Hm#NqS9npNAeCwWxsoWpVNkW!A;h^$5@&$pRqW5rTL(C|rKRd>VD(>q;@m2Rl@HC$u za4dh-^z#puKhRAADt}M9;K=kE5LGGy51?28@Jo~f8j2bk>fcq?xm2LAkAepTbfC*m z)*ug5MFDNI=NcC&3SQPcNF=GhX8&N1har& zdP^YReV%%l@sOTTiL@^7da)zb~WrjH0+AyW-@0JX&fWY!>Od`Tp z8K|z@QRsUcFl`09sTvS(O=}A=qoEDip)7{-gSyz5XV4E|MuE=(3@|BRfN6Cii{VH! ztavB7@LnZYTW|fZbPCe2o{+F^2Tid&&Oq@@2s(N(XsL6ik8SC!#>+ zE7VUvafod?#d>CZNZIIr3TB{_0&oqAU_bjf{!D>@mK1B3QUFGO-C+3tVCJZS=XaP{ z`b(GrJ|1+2K_JsX+VhKugxp6a4|VLIu@x``QX#s3Z?*@K2WU_HTXU<& z*~Flt|CXrP*H-_3IB15bXwaAl=(40ZabR@p2df1R*o>*PBI;`tE7O zwps?k?>AdA+b8<6g~5FPRdXxIu9W}I*u>iYI&i+m`CkZ}|8-~Ue{0zeR8F`B^ zD6axV$zOGm1*yUg{vofLF+hPQK!{y(aA5y|)@P=F+xiRw+;~8lcK`zUT5%z|JL|Xf z>o58=!LM3@q<&pN`oANslK*#U6*&0+Al(b~#{Yuug=%tSAZGxN#wHMrLBGnSq&2Zy zVSnTBCQAQ*z~TMl8;bulGjkZ5`aBib2d?$UYhy!lsaxjQhEG` zD`eh&wyH$-t4yM}l-b!){+?93I^4MHqIQwFIFIWpCn7>%#0(K3&kUmsi$gnPRT3*> z&9g+O3L5AQxQ?UdA~g+`2{RLo-1JE?10QEAoH>W$hg@+GB1HlzR@Yz z;ScjdE%!1?Jt~ zRaeJijwPd~@UwlH%aV}<1Ld+sak~u2GB{)}v&P(ChfObA7%02vIE*Dp;{E z!;f=z1qV}|VG|85ix!!?&xbf;q40>J?8fpDIG*EuW*Ka(C9=|Kk(CbB>1uWTM zU#*9u!M>(K`)UpCt1_>ESl(8_$Em3`87w*NtgQb>0zU~zQ-GV+M6+6sCg!w<>S z0-1xSi@|6o=|r?>Z$Sf#v=pl4*3kj)63uKC;Mz0})G~b!mY$#&^>cR9QqVH~Pvg;k zx!Jzk*o<`a)bY!x76L`An5m#2S%K99wBfsv^=Ned{aFUV%-)()bf|fP=PFoC_RnK> zD6TvWEcz8>(E&4GKFDIP>c_vnp#!7zyOMyOf&;r3XZx!&R1xcYgf^oDE9D={^sPBo zI6mLUa0b=mBLYU6?}G+XkAM9^8};jvgA{)Z)BAm zmWrZqT)E#7$n-%n%Kebm2JCMhg5{@4-p1}spG8C{s$iw##lS(|&LvUCO2ywMM8rN+ z?2w8Fs38@OX8#NnI-l#yY_kj$Vzhx2ia**%Ex9)jfkN>yno{3}GJQKj{_4I=LiZ&? zavm50u;310!EQFZVD(1O>fNB#^9&N88h7;&gR(ihzS|oxN&x_nWRYmr#}hfby5VRO z0>oese_=zqC?ZHy`ye7#NGl)~%-e_qFyfDw=Ua2XV4U!hrPDF&C5-?8zzv!QbY-I) zgmg?>!P&d@_h}1Rj4R}@&c}g8SBlLP1b(c9u9(v(bXmE0g~UEU2Mz8|y=@43itw+{ z6o4Q=)1@g!RLjfXEJkuT7~J|;=+;X@1I_aYiTMB|V!8ctcOL=v)f((;swbE(CJ)-z zRIsl-eVtKi6?HN`8IkC$5kk~Fb22(Wyrf<8VDt!w!~qVm*4>Er6W5gTA3CWGKIxF@ z%N+`HA}dk4f?y>p0RxrvLbIK^C?OX12v`dVIBl^476X7oItCAOc59zO8tFhX)fa`t zN`MS11xDEiWd0hf6p!pYp}kPrq#ocmap5@EXD~$1L&##dAgdCLC$8n9K`CUn0}}@d zMFNG+mD~Xeor4tO`wUH{d{IR#{t>ViL2%k&i+ljWvN$wp9z0iu5S9f(*mb%yX_89V zxcM`P2qPd<3uO2mT7k?hNQNKC$jrXY+#O`Sg=MmanNUL4{emji`IzQG$eJJQa9HDD zQ5L&9bOAM3ejQtCg*e1$UPr8gd8Y=0d=U|p?_iXts8A#KTbKAU(+Lnx$DDe^5gGW2 zhVSpo&lqdKGEO;jpjx89W;n_ss$YMxJcEj@{Q@v>GujYxn-)rKocho~t0E$F0eC?^ z;Lm6ZKoD{!XL5XN+<#h3hO!|*)A>FKO_ia6B*8%HngQc2g|G~hN&u;Uc@uqJKlI$< zTBX&Lav#au^*^qST+PD*zgY+Q&DA{MH~(*s8Yl~KyXYtAiKJSY!_9f|-Jr3?!;z83 zpu-Gb%u;!fOwiigvKMYQqjWsrU~^0cJ%pMcRBCmS*&9si3EXLYJKtqxB56`&Oc_+k zB3(PV*u8Lpd)xgOF|K7zqN%X~9UK%ON`~7V3Y%OUdO2xg5*>Wl7%N25@Nk3Z@y54c z^*!aLd@@-~z`KdTyZpz|LzlLtKSk2zh5@hIn0>3#tZjuuCiF4cRshp1|)2y#u zC6iX%tBu|yd+e!#v8lbZ?S7mD7pH7^Ihgf_bu)3phn$4+Nrm)@VadiENh?z6Vt)k; z4-*NFO07;Xm^Ir5h&;@LL@H!Pti6JMNJmd@q8t-3J2Bzj|3M$) zR^5E>Y{B7`d0gXg(qs$Et5{NL`nyf}^5?f3dJRIU_iKAoF9%PMl|aK~Wem&9w8+Pv z^0#dbRxeS(L;#GT-tWChdmW?3`{FqPtHHr=)hX>5HrX$;6iem* z=zXwyyb2}&M5E`n-Eu|EPBbbTa9K4)sK`{s2L{KVB$1vqYs!~AzpVf;hB&YzhveKg zXYB1y!IVCirg3=mTdh37>a}_po>O2SZyAD3a)mbO!%MKL*jh(|Lqn6spskg((sBRw zxw=CFJiNn0Jm?SiXCsf!h*O1|+)Li;)G35rV~mw+H+@WEM$(pKUghOgRxY(sbz?ft zOFcRyI=o^pJKg}}@d9Teztz7Xdpp81_7t&r1d^!#|t`^!|X zZ@6b`hkQ^f8^5Y@M<|Z3?@5Jfp##lC?E5QKsWo{$(~JehqvZ&rl+ zNuLh6Bkj&2y(?XG3wMfMj$*NC$rs_exu){Y*jpt8;2hhg~*vI z&7aNJUb%cHy4%>7b>Qj!M`jA&UTpoK_YpS0>}+2~O7Th)_Ka=&>b%cEm1ai6KGxGfCc|q!$C#)( zU!dQtlp`&vf1`qBuz%nEYsUP&J2Ckl^>odxvrf3=q}ZO={)&d(Q;_8z$J4lV`~)2y zAs#WXWOlp)qUlgiB0M~5c04><@L#;`1>CLgIo$jCry#$#gZ+}eNi1_Ub&x>ss_ar- z@w18|8KSNSxZS%GL*eS4@yh9nHVZTS1W(?UQ!%Q%$Zw$IPGtz-iK~{TQ#vjp8`7{* z_x^sg*a6j9S6zc2img`jXL4I#+z(0I?RLH*yzk=ay_Yl3qcE?i(pm1PQAbZ0X`wBh zGnCCNnev!-8Sh3|`DshZb7Q7z7MQ*l8HY<^(i$W;Nbq-5StcFhxGNhDg6Q~x0nUS7AL&`<$ zX0F!3)pv0AJR%u@Z|DcJrO*C`*EvRlep)Tt%2gJ+505!G5X?o=PdW{%BL6M z30|V#@1>AmKLuMIeKj2-A6Y2%CUNxZKD}$$yQN~sIl8F+)vjllbN|oPGj)IOi4KR%PpaH?T(#emK!h)cg0gA7Sl9VM$OK8 zlS|THth8~;nv%GdK(WnXT41J`7?HfjEA?ygLY79LHp}_11*nk>DJ>8 zbe$S-Xe?{sL8(m8RNpx5_CUD0_099Xvi!Z~>CO03n+e)$jx-4;w3YF>GDmWJb7_dS zO`}sN2f1F6Wsqi`WyP$ZQ_L4{aOgbpwQR`9J&8$n`!e6Wcz@5AzpEtyUWHNT*AZJ0 zY@2VWCA#8Pw~)6tuIJ6KOgB} zmtj7C<&LjIp8j2PnMA9&Y(}Z+P9mAPm6LrvR7B60DYmq4K6h?>L7a|PJIwivBs)l- zME%k#&B{ubaxESb}Dz1nw=bcZkPT0hjtdSUH^scdXZgY{9;!X z|A!uwb+w2LVGa_ZuuuF-ESd|sOC8B+D*M*z34~2Ia}^Emc*tou1^?w(Akh; zI;X0^`SFCpgQ*-tDwk%HN8jC0ktOx6ZeIO~X7_J?DD=`wMOJRt!ZzQ_+#Z?{FnyIZ zxyFlQfB8xJ=GA)GH-EWOW#JhQ(%K69g=@CoLTFmp?$jb4h_T-A*l)k(X)U{`0d z2hrp-;Fk;{zMXHn^_?E28syGSh9Y~IXe3YefjsT@rP|yPk!+m>!HijCuYuZ@lv~El z;?A|p<1q>&H)p?F7A>thpweO%nnf(d39W~`1e;Soie^s=mLE%VQyw!AlZSE=1x z$*^c5)Rwljg!f&A18nl_nWi*9@yML|cJi^S1%p=CZu`{v(B3)w+%9@U+Db^`c;?)= zh3x5tm@1Fe9~+$JjIEYDL_X-P_R7_+3%*a)Qxe)n^^z`+JwWv{Xdj z3w=22sKR9x^7JAH705?=yCy7;cacXhj@Wvzg=Q4HoXvcek?KO_F5Y1w&82-WVvMOT z{S)hhDYsV`obCGw*5V60q|E_OKJxeS7(Q%g)Vkz|syJ>1YgUuz+nRgad}k=JqjSH` z{W5)porzA$na*}WL(ZBjn)X6HQ{jr$bIJK7l*RdXyC-|^oJ!~4IJOs}K32_&8g^r_ zNwmsqxwt#9k+2XU@r|#jQ(@rs#eB#0Cw#YFE!x+dq(S-Jte+h~Ha{>;(YZaBoX0o* z(yV)^wZLvzl;K1oSE}EBmDIWVbnl4-)^Ge)CDLqSVR<+F-DVt3Lf8APWLXqyG>il< zsBwcZ$&`EdheYRdG1DkXU8QK^iQb#Nju;!pt!z0d7Fe^VBtkKoySQS;IOlWJ%ykF4 z!Dh2Y9R5j$XStPE8kbpHUJx3d^1@mA&yUND8I6pl{;25ejt)dII<6epdCZSbG}M+R z-|`dbJGFN#TUIthY;opxPQR1RwdnC08j8K;n^wI`y5Ze&c2`(VPJ3GIbI8sUp20GO z6kN5{O|5Loq!Cp>KK0E1{0NOT9za(rYpyD3e!hRo^&-zc{wp!D@g0Gq0P~;S^k|LV zl@BXjXfqKLA5)BLAAbP z0Vbb<{L*{8_^RITV&5Lrk0AZOyBn`&%ohzU&d%Lyusob~DZkV0xiq+}J&(O7ks($8 zL!cz_g>kh6y4W(x!>_S90)_m*Q8cuo@K1 zRX=-VmOpZQ71!WlWYatJsgZAcv(o7mi}>Q0-D2Q+)%cz22>Zp(>I2N4?|S=g;-Pp| zYeejr5fV4FD`xnnk#6}@H|oH$cBsnJewA^dv$5E!Xa`4|VcFF>=Gi2(dBu<~abhcI z<=KQ^x`WAS+NZa$yR^9KCj=)a?(lsL$H;hIsgZi0RwRKd4DFGTuB#4;C|GS!*&Ol87+;a=p@YoeHTf?3c=u@ZgeG?`MBv}xUwK@9-b>;W*PYbfs*G(uW#K<(9YnEDwjHur2!mIOnl+Sk3a{ zl23Um%Amv}TiNDAo4<~0sea5g&hp`&m4c8x&GS^m*`G%v0`B?^5Jh-;i!8iNGI#8I zeWk@h=BW+CSmkQq^S~tR_xN zt_##VCPop(OfMuPf4`(#BeB11F%omrsrsC$XzNRF)zd_zhslEZ%G>QvC8=?O!N>Zo zHoLs9JSUH`ae9Z-HINXjT0T>MJ49Ba;-NJgcc~(=`=$p>x}Xwc{(Q-@=xSS*dbF&S z`}LP{C9QPNXldDdYoATouzf9gc>c*J*O;3jUuhOBvbWymd{(49tU4E+PeXre2ZGBMuH$&j{qTo3N;F)B$q;`v0ZISc`#Zg(;=_SX58{A7$oC2$dq|0o#%%k0# zng`lt#*O&qV`$n6I%l|+kGxLBq!mT9F4>f)^VQ}wm=Fdgpgxp8*>P-g6!<7~ zi`!2KVsJx^Cg(DHolcn@YE1N`D=@RFFYOQg$iuFPO5aa+C#m=Hxxp}kytVJy0nZPFg@cy`r?Fm9xPY(D} z_fSerchfo%Ltwm(KZkDhz{F`47GV+C*DU`V=Nvr*26GA1l8fvY3tBN}R9lO~7#~dr z%!ci{U*hig!Dwp#(nw>jlbW1*{eN-w&cT^JLEC7OC$_z@ZD(WKwr!hFY;BBH)xSK75L*d)cYm$ju;2pHZx3qJw;D6)t*Sx1N>xpmtJUzn{>Y*;u)8W(M^I|NJ5L5}pqq#?|O5M>oy9f)`{?R)ov+28KM^BIwJ82VP`MY~bM`4sUSm(^~@!{X2 z`!xbg`M&z=D}Xb(-X+ko;!wG{d~M<0PG5=W|EEeppkZ3 z3=C!Nc}=beIdO844Ef_7t$1_(FTCs$v27e$I? zuiK!d-PwO%92ESvFUUV57at5;&#ElA&*H#6&Li{ZJM%eMb9%WMo#l z9w5a)vUExnQbhEYni35v^^-KS zi1N}%BLWg91)EtH%wiKoIChtCmx$aVo)%zFHWV?I4PTx=Gsav>^cNO7RUTPPPTm?y zQc8}8BRDDJaHcIOgRL5;Wq3fS^q5h|b?Jlrp9j6*^GdhrqK{B>N{xkH?($q1R?fge zB2do-3vbYDHfE~CbZoEz7Wl#;D~q@Hn%;FEDh&13VWdnLsFG;n8BXDXv_c z+K5y$5wV6O*Z06At$1`nNUVTxM8yY=Ppi~5^q%A8< zFhz`(TiN^dk&DoyG#Ud`_d8oqQY=3jmU5d$GjPi(@;4iN zZ4df;WL11>Fn=ymksE$0HqdAQ6!e4ch}QJL@~<>dMFe!NWROWKtgMqrMmHvnRiLpZ zP{??^PR2?b2A6Ok1}%Y|4J4JSp5%Is2W}yWR|dtq0Y3sprOvC5Z1R`T-MSGs8f_kB z;UTNvu)pgLD+6!ISGDIFw%L0afq2c!d@(W@aeqDWL_%E>C4dLjOj2@`?*U=i1)%dX zwt(74=G_G<-tYurt5-xFN~EI9?gJ`aScrP9&n6?c>5$^xTOJ5KUg;^jDnoHiLZ$=pAV zUX!Y+X2G#^2Kh-vPeUA-$CdA0D5RT5C!KIW9Gyho7&gSc{KLXnTrg5+*=3#tN+Sz$?b^&E9!ZToV`l?EscdzEmj)IxEIzNiglUZ0bF=oc)TZcSYg@-v zZEvgHVY|)sah%Gjur~EoeVL<+QNjc@c%36w-E)Iyf+f*U=MzDIy~D{dqn>>1^!_H- z&sFQ_7jcZ+sE5i+0dgX1+MHMxDvH3YU2R{@fC}8r+lrW&$@Toy6eDcz*?``cqMi%$ zHLuc{fee>Mboaquqn6xR%G1z zbH0V4-69ma69wUI9OIqsbXbjZnCMKf!6kyNU5?Fc#L1|F2hytCoP2`La{PTDEBtD4 z?XN!O$XeT;W@i&kdzg_L4sv@b{4CjA*i+l4vd5mZ9I4j8wn4II^>VCMO%dWQUn7(M zyO(UOUn5PnnkW+C&YNQ(pm}Bs4i-omc&sxhf`{ZwZlGi`Vp@CBHbZkt@{w|2lz2{;Q(9X3A~-z8hN)^M%y0z?FIHHh)c?^ z8?%m-;(D(Nq$!bm&Akjdo0MNUtr@(#P-DC}2oj1|uX7}BuHCTGTo*Ygnv(dY!y-*M z`yxDuYmd)2b;KGrFH0+Aj-S*qsc(DnrxbF9Q@iq1qnwxz7TRC ziCrE^vg4A^jES5#eas0JFOZg ze^+}1#8p_$4C($TA{8-=g*8h6rmG)6nLNgGOB6OgL$^T?)ZH3-zy`4b2hzJ(SVNnY zK!8=J#t&Q2_00M~E-Nz5Jn-GH+svgkp;d5gq}Wtntb;_IQctDH9>-fFWy&E0&lVTB z{7Tn#$HcIq=L!yQf2|cd(QYtwSlH--3x$8eEC@L|dlhNvN-@YVWvH%eR}mgxY`JyH zZnAHO{pPtZ<2CY#^%_(8y{ob6vyw&cRz@?erG=G+u1d%QqEb*u6RsYv9Mec&0-XWj znF)p{TgW5^hiH)#U%@3DdhE&;;apj1Q%=Lit1@EOT;PLY@;lq{2A=0g*2iOR-dyfw zYdBfl-t#d}WS00Zy}fY=CrFxNpB58+%#RW3B^DSnBvss=(+MY})}OE!xK90wp)hrY z{}NLWm(tVcE6Wo3p^!fqWS#dIkw{8jCN;|J_!h~+FDjhnqwM$HZT~WOL?HvZ~Z9vbe=B^~y^~$-~dqRc?=gUSSmFn?m5~*Ix%b}I2iAhG)Fyry0kUR{! za(anhBwSYy_9zsa!&7&|sU2>PsEwnfpDzXd1!qm4NcN8alLu!A{K9e0MAhD2JG-Aa z*QB<5SU*h|A|6pRk(~@b7&6_HB0oiVPFMQtZEii8pcGULEEu!SAv5C)4o@Erl=zs5>SVQ`VipEdCD^ge9Mmi;-=52IKPWdSn4%!SFzqHD5lLY`cr% zxgI*}13^jsg$_g*;6;PMLO{X+u6W=rO&P+vZYKGyI|9y`l3x{-yAjIF#3@8<%=~N< zrfM5o2k_l13jDvf-S}2ip5&$VS=+ z%upS*Ef})lRMeWdG%}tcChJ^?8Ey%!oEUmV_Q)`aW@LxJWGfQ({}fnOiDdsm#_|*% z;!2OKLOT)8)^fIw=-{*9Z4Gic>X$RkhSq2CGmeyA5TRg{+9?g*@PyPzQKFJQDcwEx zR!Pf<3eq2^OCqUdfv7EJh}9vB9`MuVl0Fo<+BY4{OPwOAKB#qdZXk9bpO=j8lIEnu zyHmf5`#o0a?)o2yAoUN__z!HbY#OU{b^i}6PeXV{eexJuLpa>dyoeI{<7%?w3x5!^ z7Pi7fYJv~vY@I(mg2*RuuNW<3<0SWI$;PoM{IUhjg3XJ4^T;)bvsR<_!PlrUn?dOS zxW!y#Jm&1^c6d+-r}mCA!i;AunNi0w$GmPB!B4g2rlkAtrph zbrMHeiepwPUATNveGs`JGX@fY;q#aJ=ZV$0knUt1Dd3ewGE!|kEh()83R0Kge6>|^8Ih&M11J$P$iW|BHCwJSD9P31RHWaCJFaga*u)p&)Ck^Qe* zag7NYDL0k~r<*87hf7O}96Tw{9a@M;)93E}oP@1sX$TT6Z*}R{vHhyKMJ_+Q*DjaY zJ-!RGcd^!6K749+?q<3s3 zOi~=$mTXn!L`ZRw>~a02Hf52XYcewCA!;^9m5xmH{?qBw&vxVtIrhMQ< zZ6%(L=ly=rO{aM9P~+{$&W&?t+rFi8{kmiN$>Zs+;lo~((;RC#K6b(K+N4?$02L(@ z;_URNm>p$pL$Q_ES`L2M#EQW4r_Rb3xYFM!yx!|t_y0~4n-PWXmP+$yuebjVrQUP% zrVDOumgC_OmO7J0%(bZNRs^5aJ{%y_{**5B^!OBPK@vwo?w+$e$w#db)no@E;-QE|2C%VO{_1ObNiQo-`e+Y z>9Qw0A&FF$21<(6XJ#5LXwx(fGKiroEmJjQTGO~nmX&~;#IEvb=?oFf$rVO?xc9CN zj6F83!Y`LPZisMESU8Py)|-*jhG}u|%f*U|B&MkR*>I!~l7+BT=)DgL)PTq9s0%`( zi|>Zut;6Poq1IdY_T9WZ?zKOOkA8Lm9|cZV#fhz{SPR4e5~y?4uB_k1T*0Ev;0<3BUb?VZ5PrYh_uR8dY+u>ZOK&$$@Syq`&Rl49EDI$Xy^I4eCX=9*%a|)` zmXb>yt?qrc+U_Ke62fp)(L=@HQmDiCp5f}5gHWCE7Yw`%tL9$Q%?Pct@ed46RqVXh zYD3P7O$Hqe{@t_}RzxvW;5l-u`;Naip>4wm4F+$}V*<|PXuO65FgBi4Q$wrML}pc) zsR4>YvgArQjw+9Gcb$>g&Bb?C1?kXz;90)XAwCR5T7xf;NmfqiiJsj)f@-pE;R`Sy ziV4x^R4H3KnNfYvWPW2 zYYj$*o}v(8L^$??l$gSgNCe&~AcR!ZtUR7*(3ZmAZ z!R_SNZNSk2RBh*gZyCDvLmW~GQ)7)E@?NNfV|A?}z^(2y1sIBi_Hu_`h~tVLQyH3m zfIS`!HXuf?7a6KivKuAHrgqO2Yy<|9E5UU7f_ZX^z#pFOBc3D!K_=O@!LydlP3T6i zK|;CHRf2cK#IQ8{O9RK#kQ{c*Xm_thohZzff$*K6nPgfKt&BLFG3G8@(tM$L_nqa7 z_r^u8y5D&Gdd^6{qmxz_>%oJc7vxG3@kL3TR>7GxP#roGuyKA@u*cHoo*tjwh?tP5 zvizE#ub^Ih7)3x6Z5n1obt^GW^UG=11{Nm*UsnjgY>&l;?Dh+BF77Z{S_UB0)DS6( zP4A@xzQDoQQ*0j%vVqv3LY2V&Payld!$M$A?=2}87+B3I_!b8>JVH>`0u^cXw`2{8Spedjx7L?^{8%$nB|}wbNCTa6lRY(Rk=)v@FtrE95h`Cn47P`7 zWb(uwzPhd{kTIBvO_XX%^6j&ffhx9J&4t3W3e?20>ZnhlA`Mzj^iohNisF|N#6~GV zFo+BZFDgZ3n`*1Z-)`F=+IM>_k~-)8{Qm?fRYY3HX_%!Hq&&p>Bu!jHayJO8*?MJR zqizQ%5Tn!;)kpR_Hykd=ahpp!Cv?!0nEm`#ZthwHd8rIWN5~qnKI-{xE2Q{GNd<-7 z3%(b0ICS2)qr@~-1u{+wQXVQhF$bpZI|1?ti@0Go-jAA3J6KF+TWBLXAO0_bP{tDE zmMTUH?&$PDdD}*oic}EGao&K0mZcnlf4kM$%(ZW@fdm$A;IRl!SST<#N(4n5enUz+{XT(oH) z5c1dt@H5qrFXhC#R>ni%glOvW+bj3WgFFW%2KjDQ_O5y?D&st`#B&EP*!{(nx5jxL zB_1G8Vix4+(UBmTI#{^IkQqNi;Qykkt->Etry-Cb9X()Ks6$u}pu9jXh0+G#DWb`5 zlq;c4xU(g2bZLbdI7f4`%zBlmcta;;cyI>lmIq=7I_925SVHlb2(o=-Gl%xnU@N^jR`I(H`?70W~j6^ z{Us!2R^~(Kf)UCH3?-RAQyAhW^zX&)H2Fv_UfcsHw;xB1Nx%Pwh3+A%lkdOyS1}rQ za8}aNk$P1?VQ|V=;T-Kw1P|F@vV}*u+)5GcU$zC;D3FYq%)MlV;eeu?7>a`op-)3g zF5pi=M{q&0f{{?zh)1Asja0mj`~-dZW1N?8hr{(PeBeOg9*)Yq?idEktj8-NbwFpF zS3hjYM+71=Kv+_y)`++hg;7*^{@X^K_Mf}?G()CS*5p#-nak2crqkBs z#vSwRDT67xF4fXgrieO&rt}R{wC9$)=!mQ`wP3gHUYZGaUd0-FN7~$?&cyrpr~@EQ zn9Jk|Bc=#k#1{aR6Gbvul;mki=%}nu&$zwE@mxOg{SQlggXqnZCQuER*98gK7)YIsHJUt+L$Br`%r|GpdplFSMb7CFzDWYznDA5}yjjy#C{hpZ}kJYQf>Wjf6;(n7xR>J(W@dRCR>j_eeVQxU+ z5=xBU2?~exTnZF(c?OTLASp=k;QQuFKGb|u!n7w6)gIOPT@-R$iA473lVqY@3UeAm zhiu(Opb(pIw#9)JQyGzSG};UUxx}zg#$LX>_@q|X;32;jVT9A}{6sL0PeXw!D09Ru zymLOYAbvlYYn7}rEM4RXn?3AFIv=ql^@CFsT4CE87YSO9zAvuggx{e{XZ$|0<#{B9 z9Kka-mC=)Azp4~UMb@81)iK3&(^wBdQ8E=ZjHCnM5dDT%VZdrARd=|kTBWaqpJ_eu z&~P7ktrE-o8iRB7K;De@NI&CdS^aV7?yka#0rvq^P6N)Jz~#gAfwf4n9najZ0wo3L zFIK)1kN}EN)iXTF5j&n95SS6j~z6RO0W!U&*h3 z1^V)MzfB9%LqUkB=x-9~cQi;Sbb1(xAl*E)OdUb?p*;*pEgZd*uz#bNpC26lVrD_r zUC6DRKGgmgb{>aY({4;pKYGqfi!Ob%?qRUmu&*&6HPD&Oy4qK8hZ~LY^X&BW-fljE z?-sKHfU~E~atIzZmDW(%e9A2V#g97>kVo9ke#0eLdL8NM%dILnD;K;u=oU5zUBW zEOuXy8w-Ry+yw#V4eS~S8RPEHx0MhV^win~E*MjhBN8PAnr^92@>D;%*;17@km~p1 zu!n!bAxnmR%&~1&yL;3%% z!_+BUpSTIo#dimfMKvt;MS!dh8HjnNfy z@52dTH*XJU52T!@fi~+;f-Io%1@5@F0>_#(meXZQD95xsNvmR(2<7z9&F3!S{e=2w1&_I#C zy_%DD(A-k-3+nL_TnZAG7zT_0t8?V8uuu8EbBYE?Goq&I-@)t=;L?zfGep<>puiPTC_bKqVvlIkLq!^Z#%1vxvO|1L{`N1Ot*Fp^Ai>wQ7#X# zK`5s-@%ZCbkj!RIU{5ue>>b|64Z1)o=3d4Bq}i$)P(@(=a3nB@=m^?mf;nZ)9u)TM zkFEKI9h~;l5t2PA>k>K;cFz{qSu-R@q z8y!1ce@nvrbzW?2_;sdhH@}}g!>qX6Y446VcfMG@^(*3vWUsh)04ED~#?_I*p^7e5)rk4lb56&>6 zu0y-Q-zTRrZXmnbJ50(js~vQOZU|en>|3g@7Ps8qpPp3Gzf~C8zFkW{N}et{Pq<5C zU*z<~9bFz-Hm{C1+0*qd=N0nMkpP4jm%TIs+Jf}G{g-yF-1@5BquYVIp{>Il(RL5R zyUsj0vhTyDYqa9YU-_Hg&hxZqhTvB{zKmAO*JjKa@)8GUj$HT%or4T`#3M)9{6Cka zf1WPgWT*L0#jo8+KRff8Z4Pjlviw4P8xDjRnmJ5<0oZ~qK7U0s&29vsq*>h>4BeUr zxoD2!`4n9pN6CnaPdMijy>qfguYd2@xpz)SeL6Pnt;e6Vw`Jdr)GJH5bPX`A*}Y1_|&`WF!oYj0Q2Dp4du= zJ)29b=n;_+sbrheuKh!62D*GQocXVMxRIGk!SuDB&^>F{guqsz z&^>DazP7nG!1HRf4YY9eYtV{W=}?=7o0}eUiqT({5u#n?T?E>k6kJYDT%eUP!XWm5 z-iNl72M7U`=^;vv&vxUe93osDx%<|p40eN{rE0cx^N*G?Zn~5u`=sR4*v5&r?A(Qi zQ_&Z_Q~=v0^`oM%l0Y%2-{DZi*y})OK>%uo-|j%HJFqpvgP=iUaoZxz1O+V3n^F4f zxIgvHD5^1(*o?C4*D#9wcs#kL{)?k}z}!9*J>nz4a$>CQuEhlJJlssjPzW zv5tGeJ+z9^y>3@;rlwvW_!DoRa(D}- zg1+R9@8$07K%u3|M2*c2d96y?_H8^<>WI{?7^rzo~q}ey?<} zzJF4UoC}rl3wq}MqChc9jX(IF?`4cf+`X~$2)`wU$r0&(bbZtL`SF3UcJn0f+wZH+ zQ>R`&aj?{1?_b_(g1qKGwBz5&j#1Qr6UvJ2vts?O?yhhvj!_@IUuDpjH%kNm;kA_K z`|7Iyy!Pzm&g7X|HGFV-}mk1_5P}9^TPklVP&g9yT(AE3oGQ}>E8bN zu3*ut+ai{{admQe-@nsqi|?A@Ml0xFmv|>9ft#)#+mlA%>dC8btG2uM)^!u>Rh79} zEV|C&;6;+3wa;2Epgn;1`>KQfqk+=1Tnon*g}2u4!%EYY(f)mF-vrE= z^WkSaBw;VS0}$+~0Pm@AlRAp^We>Pz%x=K2B5}=gm-3=9qJFs=o_>n&QK*8M@Hs;5 zcK^S%Z2y0%@r!9lvs^X^h%`SK2>Sm+HMTTzHZxUmb+)p%_#ejclHWxf{%Z4f0KorW z%u6N`!jF~IKqt1}Z%H)~BbG=(O&jQFxa7Jzm9oCYURse=#QY#~lkfrKj7lVwfF+eH zs*rS}V{;{Q)m>>JDHRwGx|w}_uJ_(>eW7C$@TRa+o3^}JLbzf7xt>$>ImoNlnClVk z?)SBxvK<@-S+&kP~ZLHxRG~t+VLch;PZ(y4{@+$z+rXJ!h?Y$Yf=FbG5l4m zu>$yc-Jo@l)mUS&jQ6pgM+l$pr@|N>U9w)42K9`D6cA8XvH6%|y=}LeHGBQ>^#%0& z>%R3h*}^>^A4lNt`#n>n0DPJ+&61#eEaAR+yHG&li2upIYw`BlD(B;0FD2l&LfMHyJCyTf4b((yY;XCCfX6 zzA8N0zEfAV)c3<~Q?VA4UH0%DV;W~ZwJvD9|xG%w_8U{R>W)dx;?|4l! zSoiehJ#N&q-v_n;dbVA!?N~-Pr?gL;S2)+c9zQZC7uO}wxT?9i)W#dGi4qWg#PR)9*d>G<+om;kS-%B=jLx$_}uAkF4-IYvA z7iZ&vpzi~*lD%G$QZ&ubAFkGu?U|oF_4kT=yZMJM8PTJgUvLlsW^lN3E zSLHg~;yzboS3LM0-WPP}u3R+dvT}GWIzZVo2XujPH|39H=`ZK1UD&J8XL@y8 zLgM^(xHWW9NYls*&gNXz74ze9{VdOx=`LgB>}Y_*hZ)gpx{u|jt?Y+8{=sQz<5Opu zwidFDHhQ+>c==+wTcMEU)w&--3yV^9@BQ7{>$RR^yumDy^Y~cNAJ<*ZkaI%@aM0FCV~yds_J zQSb|-%}@o_A8hLH%Zmu(b^3@TSg}V;`g|Oct`JwOz|2Iuwhqg&Ibmqi0yW-HJv6U5 z#6is8A??Wnn1A9fZQCt9tc6=MpbUiMM!4k^apX--`}Sq%v>;F*SWP#DkGpI!Pk1Kx z5TF&q`xQL3$yn<~jA>1$Uq#*w+%F0+)S;?xGz{okG5~5Ay`19e^{)B{&$}5eY9O3l zXdk*JBowIwUKO|LgJ~LpR;fMvE`KWok9w~kA#xp6)e6h5&Kh#y3_`fxy+L-S%S8nZ z43>x<>YRk&F8E0N{ML<-o%z!lz1@R|sR(a99y(R#aMPSGaxgHM@;tgvtIsR8bUoXd z|IX-Q&*k<_Inp)J^wfsiKzk6-h9;nZ_UZ?diAf-BwEznYVKo#)5fC#q5<(Tx-!V+# z)0D;s-8;+$)@IAISB#e3mmPE+=NPCEps>b0Xkjvw$j}Ld~xStRKejFJ`cSnn_-T!vgAe^hl*rfA{|7DFMirE}ECGii<15TQ6=PL08*$I_76zp{gADbAtTT{PycxP(4 zU0`--Jiwn3*dpQuTu<>G#M^Fidv@E-t~NL;Eb^&F**X#p|H6(D%VC>4j;lI~+0RpU zHnuZgnaGVuy_^x)m(=4}TVQKQkGjW=f=Y{F__)$yWn+^9G?#ZtA!BtbF*y z#5Q3r?)t?fX)9Z$#g@b((h@20zMRg7>a1YSOn7y0p>dt>neU*(<5T|X(-c6MM1mPN zbA;S5Nf=OPkfSKueDtsAv|WUe!X(z0PQKyc>~p^qDJt(Lo&THB-^Cq^JmbH!q6MkG zaCDE{n&NV?uDP10GL$t7H`gxr-{2yy-k0xxo|7Sue>r+K-Ydx-o=HAl`Qozj7OC=+b?=wjgooR1J6i`LLOKpuV(IqNE7C12TGjR&=bg+NhmUT`K|Lzx zj{$|-Rh7baejc`b!W^M6-OJpW#-BAway`C8$CK zJfOle<*h}VytBlM^?_EG^!mYSA<$>YpWJ&}o}2+kqgxMq#opRcb)Wva(77&u@dpsh zqgVr7GinXb7+E!bEjnzk$YAfhN*WO2pH#_;Q~7Bd-@d<-L-zI>{J(=d))y3U`sqDT zXzIN6kbQgt^po3sE+Et}cS6a1Yhs2>UfR>1krN_Pw2P-^20(!%4IrI{%bN$_H7g-Gtb+gQwO68k zb-Z=X*x2`W3%PCyRq8*ZyaGY%TQ2dYrTYv+Xs7Ec%T^vv80MV@P2f8&2~OQw$LXQJ zlgXF8?XUYtO+z`dcnYt7d^n41lP?K;PAagxlf7Df^&tYz%~VKH(-3jQ-Wq@P7-pl@ zoIN7mPdv3bdK$=TdSyU4>%c|2U2VHl{DL)CH8mY+FEamZx#D%INfu*iei{d9#iZs8 z-368eZ2s{Y@(k_Fa65{vb|h2mc|S$j8HhyEI-ts^wBQV71SP zjALL+j(CtvQx~$Ako&y#gvuMVtBmCoH0dmf?6=7p!{zTvPR$)kxHx#2)WKdfo5Ye3 zNY-Tn`5W0lcuI72JP5}qgEPjHWOG1(tO#g8*IL;u<1j|YsgYxMUy&(gS?Q2QWB`*w z++ohFDHr0(vN;dH)Y^?BZh3iiJ96RirAIIz3_l5Fo9nec#yxL?~|_KVz4!=6`&IP0y8W!G_*5 z3!LQA0!E}eJ-v;G2;8ztolbZQbcUeIuig&=yzY+^ zC$pUyIC6fdB#wVdt5DxdvuAyF-cJVv3S3BK%)fDc#f^PBPo5UeCyQ5-9g~maVfk8Q zrb1aUAZ38RI*f}-MCb8De|go|KD8&3NM zY`F58v*V#br-S3;M+xP@F+ArHBtwXjIHt1PVs9-96zh<11410e>8OtixJ zu|!1~TDp~iT%GJ&f(sw#eA(edUq<8Ns1>q*o3a7~hJw*(knUE;h!X}R2O(P6De)#B zLjPW5Z%B9~h?Ccuxwi#;?~M`$Jj|nf-_H~N^uM)<3beX7A$&6x`<@)<*@EGSZ92H6 z&1G4{{#N9}Ia}62rdB4F!5*LL;QWS6Q6`JGdZFG94o8Epl95y;8>aGAfJm8Ftu%L; zr_U${41rLA3?4~xBr&L7%?mCE!%U%wTaf{Fec31JMlk0@pDJW29nSxXsK z*pt#5&(#|Fvc%#+#UZeexj%5Ve12p9V?}D-HOg@UmVhOsY0`hvN75p_g|yFEp2J++U4rkKjSXK60#RD=C{~&YaFiAlGdCRkBXGf5Z1+nIf!bxtRld z%HCQWu16Sv{^Iz^bF!LbE>T2C=G}X-Xk}qYLP$8EhHz4<3|C_@oO=ANMEuGzHtIzo z2vbI-d3I-JsJ7sOsUTugSZD{`CB+5ExDYylG7v|ARx5~b@}{xmde4LFoEbp~M~=$ApLBk-33#4%{u?}X6i!Y}4Or)+%*!*cgIav#l7f=Le&dED zrD&m(BqFApVOu}LoR}%qT;as(jcuO*KT)K$p z<5#~Skzo!DJxG@Mmfb8P$!5AFM z$@6wzLLIpVK#XYzRvTGgKp28~lVJmNhuNgsc>s=z7@q-WKlujvSZ(BlW~L7M*&3fX zPPLEwCBhbN?BJtN3|+PemSzShR%e$Z|#2(8H!cFNWo8*)1u zYZBO2;UhHBAIFtkTtJ{*?*^d8V@;ToO98XN1A*8*^2h7h=y&oucxwT4SV6@a1f}rD zye|#&pxLbCk7~SZMka!A>1LQ2j4`IdpJ=hFhBJ->Bilvg^HI5Mv6w**AJK9F68NVx zrtq1HWH{U4swEoc6MrIq4!l|p%@Q&c35ya0^ALT))HH4NTFVD9VGwl=o*IAX%Mw7v zh1i1m2mO|38BD5?%A?3)!40Tz1L$ikY=fkP_UY&J{s5 zDI%kAM$&X#L#-=11J^;8F*(M>K-i_|={Fe@RR^PuU#o{XISqqS^edW^iBy65<&2&1 z9$+410HdB9+LohQ@`qNu7$aRyuPm3xV4G94-=fxYpRQi13e#Fn(G}X51AOjPFxIw* z6+K5W z8GUD+69fmzG)fZA@b{VnXt=@L@aX5k(@qpKWN%&)#LL@Slcd(4`VloBS z(pkG8QtY88nGki@ZX-b|HnrCFh#(Ea6wNOBGZ0YR){79c|CJ41fbAnXM0Ijy#O6E& zF1FalZ5J`0R-C}DSyb?+_})VYOA{zCVMz=Q>`KJ)BSWO5M@tb!N$ea4{V;yF<_;|^ zo30BiA0oq}WWN)YQ^p}eV>RfL$aXMH$ykcaR-X35HW9hW4RKIZQbKcO2%p4cAyns% z&KEsyqfa2joPIEM*W88hN1!@{n0A5pi8>4iqh@9kF2>t9x47cw$Bc5swTU{_H}*uREOUZ-09<#BwXRt69HB5x*{O{8Rab^2I$e%QC-T7)PHuQY>x>_Yb88azYZI z1aA~S+j*bSpurusGf)%$lW+tv@c!rO#gg zcjXY&R2JjkqlrW>0}z6@j&!Ct$UPG{^ep!sWuOtlDQxE_7sA?~*yE^6c&SXe`)g71 zqhxh5;?9Mga>}?yP6q<<5>ipvEX~-J0}9tWGg)GSQiRTa z3A?Ry{}!|@M;0SL?HhCHsH@AO`O9+%E|{5r93>v9Ke&{9dxZyQ?e&*~b6i9#z?p5Q zaY;q%`&^hbtHQzxEE1|rMIjV^mT`zWiLsz?52i1{b-s^(w5KRaX75GxLowT@n>?5- zw*X^j7*{a@+|t|yrXfsGlmNTVVkKg~*r4L=A}QwT z7-deo53U~}D0JF?=o~U5^-R+MYs6#39i~b&e28|zh@g(na34cq*M#KlYxL{;Yj*Mb zdB=U@XG1i(|BWt2%^iNxA9Z2-uImFX^++pi_jpX@SO&|q_6Liht7Xr8}W?9l}%T!Q?l)(X=sPM!P> zvMi<6>YrYlGdq1alKYkNdOmskX|LGzs#8l*4=vo}{tBU4(ZNKQ3xN%w)gJ6H4H~tb zkIkxR5p7)Jy3iMt0&u>QWWm3Pyic7l$1SJn5h^s73R00ea9OG05Zg;qmOhPAX)(%3 zlagEieGuPhiU>DgO*Krr4O9Q`@Ms{d1CAMvpy#d(T-}71K$#M_MMl)ZLhWyJ4|U_B~+y zL41&?VN5l`@wVOm^^-Na2j&W{j!>Rw97o^%*c{ZB>by-~f8HX6#Ei+2!nK+dss*pz zdPGo3IFbkVxLkDDrkmHtComH^S;cHz9-5^~?bGTB0iyi2Xy-&t>Hy(tYN05>z)Fb* z?(v6awJ;5(`alIA1u;8Lx!7O4mxrE}huCCitTYII}jD0IjGF6X`O*S&)uF{%X^k?48CG)$q1 z>-2R#kbraH{haqgbsnggJmr4P%}BC9M@E`pcQR~it21sLp{^jv>OVZc|26+0&zV($ zhzJg!I{-7e{no8Sfoy992rVR5VfCh35ECPwL6RKSHraj344n*dU}i$ZbWCM?tes6! zrL~Z?K;cT=`^lmY(%l?$`XXul(Z&wU5W8bmCH(|h10hva7(fP!n#7VOV8p0t=8r~I z?ycBFgKHJGASfNSk7miR`5`_EcPEh{Bo9eaNTVlS-C}4gtduM27#$t^sbU1qi?CtSMa~KA{0WIy z(V9?=@Wp{YwQmpHQs0AqQb!@)?1k~{;%Hh|2zJbD1 z+m2b>aeV1^Pl5Ck%u&DEeL`W=B7<+=Un(@wzd#IRF~WU9q0=Ee!2%;Li4KTF#Qh=; z7je*(%H+H3xgAZCY)uB4uTshX7Go72$?JDHJ2GV4O+N?T{nZiioaer!=PTsEN;uL- zD?SXu(Ui#^zAVhjijz=bx8Qa8aD)y;s%fd*wK8k5xV;W+6{?B)IhrY1ZpqF=VB5zo zi@0(h)N~x zVM_VL*$}Rq)B;<`{L=vBdXL=yM*6#KdhO<1IXW}pIrw8)0p}fsfPUMESJl4jM(fZs zV~rqIF)k-dPsfGz6TD$0Xp^@+#X+m*NZko_Y|S{Q$#L#qOSn)0t|zi=p#U;S{0%nw z>qzXP1zy@hl6XRt46+R-7+Y*e%fJ#ZZL%3^YwZ0~#>b3YXJIud^VT(; z!8u{#WC=Kz+b2SSf@Kld;sPSb_-w@jS~x~pi*rz7uXxC4lF2QD37-f+ELCceHPc_= zb@gc7A0p!8aNs_chVP5uz*z*2lwPTYYTMN7Jy%J2&_lXJ$Nzh1@IWNT)AEE*f0ZAV zVR$#-0b|4OsknzFkMz7#9Xr;%xdb#F#EgD@yXpt3trvC6UJ^!qbyjY!59G39vF|9F zpBi-~F#(iw1g|)FrVxn#87bZJH&vsa!iG#qRXBaV^X>luML@d05fjOQM3w7a=Hq*$ z3pSdom*|8DS967*@o#CLN#MQ<4YDI2kV~ zJSt#36yE4HM4Urtkn2(ag7gIT3-JL((o@(-HlOd>4hD+%p{96yCw?{NFxwAKD&_jLZxK!_#v+)WR{Y}U$lF4`Y{S`GaBPk;l1Q zJ~N$#&vWjmLDg0QAXg{cX2oZ)yiBvutZR zyH~=oAs{12fiee}C1?yVb;^0h$wgsy zP=59!hR?M(TY6LsaHpRkvRwEmkAP}FO++kMC6I9&d%jeA5e6)yO4qoP;}lx4XfKwe z`nEKP6e%F}Wl5H7C_lcMOu50 zp)82$O6_k#j3zA(UvCvpCOhvh44IY=32Rde`l@ThoEa}wAP+*fKmGWxqwv>jocm8d z{&#Kol8%%2a(ZGl4{<;^G*0&~QpMu%Pxa_E+(ELp09%Ovzw-T*-GDg;KKeb~BWr>W7dQVF z@Aggu3sz8K1K9>k3V=siiW#IZcb=rZ4{vH1nR7(M%5)T9;CwbZ8jjQKfv(><&1{Qe zPZhuY?Qf9KRlLGkKw#>-4d(B5*WY#kn@%ca9TfOIcHX_f+}CUgVy_ZyNhssbHd(E6 zHjm>SY}drZV41}GSe$A#yD41$vi9d=_7G=F8|ga61y1XLyh&c(h%xu>vzu`KlrsJc zyL({z&5x1wNA0D?-Xo}$Iv+y$>P-Cf<9~LAYfsSMfJRD&>7i#IjR7;uYT<}2@NXFv z(CvE9pLV@xJj!};Fn%|0>A;rj++8}#@C9sK7tqdzdWhEdRkf#;df5X1kY@*7!IuDy z$`xNwr+)9AR(oS}C40xm1ppm#BiF`g*ZpYB|5)vP&2O`zjt+A}4-!EO7o?O? zEB~R0DdM=Lkdr6|Spaz?(W0o@14&%D{6Y$c5mJE|*1{Jp2#^YN0V&BvE(BR{%&1_? zB(8r;vzh198@ZreuX90k3IGSxx3AwwdAO7!AP~a4I&kbEx=q-qYiB_r?~4Z)D5%6O zM^VcOk1p9=ESS%5!BSGBu?fczETy-?{M*K~v?RVYUALC0ckJ^W zwO@E5xD-tK4_Xz30w9x?J=)X*-e%>jUUtE~kIY4xQoUlAmTRKS9`-8UtTInyrBaKd+zMk5_(Yqt9hnZ7p!%2_797$d^bmjh!ddBs7N5UAwrE_RLJPfG}>-J z73;-k0a%pR<=S2eBV;dmDL15cS)UJx;#;>hV>+DWIY2vV<)u~d zvOYP4^+w!j!8>--EF4S3g;qWbWp;=97y{4Huax1AHbeESLycnJQLlQP+jeYMg6Ho$H`!_F_V$u4p<$ur<_v)f#rFl-C2z=5DI8MJk8%ad_&7D+WQEl3R+Wj% zA>C`;tvp1f+~!Kg2={M|ui~^5FNNuN#T6NnUB{$Bk=^SUZlrPz{Q@c1XE8K>XeJOy{Af=PH{!ug}rISR!C3t9TP+ z+)W5vY&iDpt%Xeq^)i`Ll{NStS-BH5|J>iam~U}(4_p>%enoqtaAhiz7`y=`vjuBh z_nB!ssZ`D%_L+w%MsothloWKmmFrr0?zXxL9$$x*ZZ+^p##|I>L|GIEr zG}ZV%TnCiT;_kAR2oVXf>j@Pz^KVI~P2--;l0~&yKP+Btm~VpJZz|3*aQ<>BuXbGu zZbz7P`ukIO9B&qst5{*=Pi!a$Few{7o-^{((vfr5^wZa{g-gBQRZ)V%@)3mS1yCP$ z-fHsu6D+x_G0A{rR}SQQCA9D#P0lAVmMPKWgn1U_m%3mZC;Q zPvAC;fQ{4sgXv}{1V}ng;<$W$6PoApUI?}NfUL5MjP-6}y*An3Wk=6(28|~lhY**M zcDx0CoCuJL2nJkCg2#DHO>|`;t+00eb75pN|ZNOj;d5QK~w9-(uo_kc1Iz_O)&O+*ue1N9ev4(3GlL^0D8k#wGuG*oUm* zC4czwFIWFkBGq508s=7&5AS$LVg%h#^}v&u<<&;{o8GG?N6j!M!mOArA2&Fe;^^F5 zvQyx$pIN|@kGQ*>=hl@X`M@{Ujof@@0(d`gnqToB!@*zKfBO6VRc258P#sl2RKNS( zcNWz8=e-Z?`i0qejJv=49dEqH!#|@(iHz`0|MNq-Nk3Hgb;4reV7lzsJD-@WPFQL} zk!boAI-%riDNOi*PT1AAV$O!MT@vL)Cqed5>xKnz0rk9|A01TrFNyiPA8ar!XZR@;NlfC*!nY#SL|X| zzhB=Sag9;UPQ9E-fTQbWC~G!y7aQ|@^b`UIj0PZO$TYJx+VaExp#K8J=9~Q8eY}!B zCSHZWGD;X2jbY6|7BPfkqR5iH8|>%_LM}OXpyArzTw>u$+|rno>=MjzGz;0LORHd(@SPDI;uz!4Lw&pS>p?h(m{PX%F^aWlH4Y8|Li7dKz&m0M z*m&0FEjy`hmq-k&;L#cMbc^oz8#JG7SQgEo`L@NKAbe!hUI$|q5hbErNWR+@eF1b@8cOm4W zkqJ;sspyTw6gqwojU%OwNh5m;{qopgZg+` zNw_e;F@lbxJDsb5j}o}Z@njSu7;%aD`F<{W%ra_TeAa^KxdHF?-g_0L zzDv^O!Nbsu#i27Z6HA$^MDn*#GNrRsFjJ6c(E&=aZQNIoNmK8m8dFPARfzpM2aQp1 zNCq#iUCKF}g(>Ewm6v`O?iYQ3L@t(BwXKngBaz=g=G5UzCsM`s#laPw?4E$!22 zu`IO-hd8&0y3g4Oj*7}@cqSPHKH|w+(lnxgJh{1MHzjFTR0n!)r2TBNCc0d8DMdYX zm)c8m>40JJ9jYMKsimw{N;glT4qb|w)fVh&2le7Ff?@U%3aZE)$pR&FhDG4#hUv6B z9jM`)3h|Aq&2-_a$GX3`MJPm}#;uX$B^Efe-3#iShzVyOG2O#HZtNKfuLv@h$}os2 z&HkAMkjs!+^&Mp;+7Yg+FL~2BOzZs0zGEkr@TJq>?yd*V4*qz!9{0#2;;`OVi)fZn^4~{;r z9*XVsrM9lE1g>~JM!<92*X*AH0GhPvVkm={@qQR{Ub7imVLG(mr{i|O5B}P$5AdFc zhlhXV|9$+i{&jS4cz^%!!T#aVUw?mi(5&Ul!=tx{_YWT&9$oHVE^@AA2Qs^|G~8n` z_Cs5Uw?y$TrakySx>HGzNu(CDxPE9#awG$-2uk$&0pa-Kxjdo zC^lSmn&(~iL(90e77r8Lxf!W$-1)G#5OzLQQr_dRMzQxOJ1?yTCd43w6OinpCP*1H zVc5~PVm7Y2Iitvsp9U_==lnGqGf>|EuGa%Lj@x{sL!j!={PEXO?_g`;kUtdnbI)ur z=?cM1dU5sa@r$Q9N^RzDl@*Lq{QCmIumLRl+3bGoG1|3s*D8F(EzZIbkiNKviG;1Y z4lqOBR0Ma71g$qAVe>f_NMTw(l{ZsC-J{Ov6uDwfb!+cuWE@Jte#?1AAwGv()@YHf zSbDGAD$>U|kwp6#Ued@HVoiR~c5wNb(fGIm2O%&C;W*ay2x?f5&ST)|L@whf9DA#H zocux}gHiHSXLmj0-24g4^e(po^3vJG4QEZ8aB2}vV0Qi&NvPOnhsbYw#y?cwF-REZ z1FIH|j1^uqW2uAa&D+n8R`Cl5N(Wu*@8ufisk!c&UA&O*7*gbgv4C7Lpm^)qJ@&tm z;tjO~Zo7LnJB0c3y&G@ycOPPYfq*f?7{r9YuY#E5Y^^AObT=wxD8rs&t8o0z=@>L^ z@pmNYbb;dLmVy9`XRu7tZbtSFt)P`cRL%rrjG5!z+Ob~__r|lDH@u=En6mK|$8e-Z zTBDS)>;J74IkP6rIZWjj~uNyPJ}JDIFK)yLa;9E`^edp7I7Wk+u>vlOkly&`}CoMp8c$ zaDw2uo@vGCoonnl4&Moq8X*XO39Tbz-xA{nuA)PO?g?&oF7UwEx?WIAzZa9?Expc_ zyppL)OdVDgI&esg$AHCTR~EBdI2O><;4!6P7-lK#%17As4u%QDBk zwdGwgeu}%G+d9`PMi8Fb!qXO7lePp)9KFm@rHI~?Alz=DEFYO48NF~ZeU-X@Vvp3= zqLy8*Iv#bYb#xlaGd^)O`v?tp%*{ZQ#Euk0QCn;|qTh3yFgNB*1LCkhSxV>dVYm+G zHAQEOE&&MJM(tv7D#fd&X&P$PYrNq)g4J5WmeO01oJ|9;U(j2UdEF(98Nhkx9~AxUN^^5T0~)Sr7Lf%t@L^ipVXj` zNhw1Ln_ZYCA9oxJIXap#lVo2#GL5{<5)JIVi~&x9?7CSm{TbrVNn*P0>cp&9$`C0 zPDD3OGdUT0K5KGyZ zt)U>q27$zm#wrN;sMS0527U`d583J%hYeDTir%$g&KZsQ$j9gbA@1}&(U^1sUc4%u zYoy)l>aoynl)3>TV?BU5kOY&a5XpYR#NcfdmX?;#Q-pR%Enad9256%O@xs5yFk;0j zb)yrZl4#9h+WOrb^gBw*JHH8U~>~}D$Ap-Xmck4a{qlAe=4*V;+y$QCkJp7#6SUWBI4Pw zY{3AdBM(RwQ$8}9c553(Ltoi6-^~g8Rrge9gu8w8Lb0IY@`CJ{n8;Lw@4waV*Z)vE zpep=!TM+2cjx^RDR?%sT1YVby2h#ubVf*6KCD8)8NhHD&oz3%Z54d0kL6UQk3O+bu zdXc1f!#!}gkOej*O1w3O5=6ATO-Ie=^a6;a8hSzFKBYOIAsA<0i;A8v>vmO0vn02R z5q1H~c%<>lOsWbCYVv)!+>GcQWY3?HJt!i}V9EKKS|q{T0&e z@2ir2_KpRU5T@J9uM|4;{N&XO2EnE7yTA&x9jT9EA3T4|DM9HEEC+A>POMF8fyJST zMaSXh4v2@s*2U2>xl1D-#NxvBg7<`JqsIKgcBE06Fpw@3h1Y1zJ3dNj_RKDksa`H< z$FZF!u^Sf}n=qu}Wi8t?w9mdq{OBE$&`;{QBot!IIA0uJwd11Mg#-02>?@bdo_;uT z3xecSD=;)QEbOU15-wK7?9}K%%@jQI>=%~O(ma1kSIcg za$gHGY$xb3Yq zkWDAFC4Bg^s4->YDcS}a65y0E1V<7G#&5*a^T!#cPdHUG zctIFS(^lSe^tlq>iIATlILXWAIWa9E5`Xs^HvG!6jSS&NOZN#%YkqAvLJ^{jt|2h| zx9ezJ8`7b*CL5LqsUj7yu6h51TZdl4+Yn?oe6|aDFDdJu)x4lnwzvRJm=FDYpC;r!j^Y5I+`obFh674T=nVJEGWh*x zs_ay{AB(7s2rU4x!<(YWvfxu#Sg2JX(bEE2;1w3(;))Mk z#GIokylp!rNv1}8a~(yVNd8-WAg_Xza+RuueTk-Ekl|jXC@8sM4|0nYiKO(z!6@+_ zWSH4T^hYpB51FYe(PmMbZ7jzpnk}Eo;+L>C{=lk!aBm$d9$9Bg9$~NDu<*DapYbeJ zm$gjAB3$1sZkM!wl2m!sz_{$L8_1e%zh;K1C``r&D|Mt4Zw?8hJ}D1x%TOu$iYL5Z0kh7!N{)YqJ67YzqA5pN!pQd4 z^hk%p%5*JF^cLp7prcToX(WZlk*4s9zoNFocA_;F+hXE`q~V-ptpSa9eI%(!?J8#q z%7|jSQ>KOr+5Zu~*7sL~m}Kj1!Tunm+M)TC%&&IwhD%*m}dY5X&zclZoOoa8+9c&JO^Yc?;?O13g{EN{ox;)CTXGWLu<=>XkE_o zC$>{0lo>W`+Co&UJT)0%rqJLRd5))zFobntVM>-&X2j+&m)ON^{=^#>7#>3Wv{T}I ze=IXb=4=qhnY3_}#2JikU%dk(mhIaKs6vO%$t6v!reQjg22`_#^pacS(J*q0r1`0a z7(|75%U0slao0AYf$gq(853b_mA> zG>RpNWKOkA*jeKN0*sX(eXYIkH?Gpo<>yRs(OvFymQLbrQM4|`J$at z(`kxl?zC!3?PQ~0&f`o+2gu4`4+%`wtUlfz+mWiFwRpjh@>cS!L-mpp+!dNP`NY`) zd<9!qIy73ID*)s~malPYTAf-O&yaXdyG4YLLR}~t5})c?)!K9OT2MYV; z{v2-f*i@2z(2GwvC@M#5U@vvW8V<}iCtE#=2c&g?(hn?KiXs?Xv53dT)b9Rig+vDb zD-ML==tuZU?|XSY;G;SthabBTX0e6U8p2gziE$&=00$aR>0b3O_#LI-DTv^LH*Q!Y zNq2%_8k}qG&r(lO3ZnT>3AlT8L~@ec9ub6M@QDgh39Sa6y^bv5JOi4EJ_I_(bWj?v z(KAmD1iqz13q&1AaohA8G0Kq=XNwx<2O&PfmeIv`RKMVr$Y@P0xLi zvoog=Ac{*|eG^eg(qWQNp)iNzCLfW!lA^y%ILQmcG$|as+e_mSqB{l+VPWVZOA@mx zSZtxF4|mfzFEKGkT=3gkga)jYTuv?*iQ`l#QCBSMgbrqWA8|p6>?{E|U#EBCuhlBl<=g2S+YJ%^#1tMt( z0X5zB!W9%fNVSzXKUzqB=N!{`0@QuGEf4G;@oKUzV({A>T`DwZMxMv*mXgX)NtSc? z06C+xn!M@RXo*p%C5nhUuzQ1tNwjnFuOmjhHI)owK>(3ZuKahP44l^x{31Zjs*ExK zw@8)XZI9NcSDDE=HS|y>S{}_L9N&etfv$qER9Y*I zzvzmQ!jvwSfy+Y>i8Tr<K#l&$fuy+OqiuoI0o$M=e{KYuJ}63^2 zSbp?eey^(hRAuGFBG%kZ7FW)F-=XS8eC~8rFXK1U%)7_h?!vW5kIZ2sI|SF8C9?55 z-H{4D$h8P?73OX!D0|9oSY@E*~snH7al@42srPVZeeWgerz5wx=^OF5&H z*Urxi#fq#MowLJPwgBS`Np7$Z48IjVYb16?QhAp<;FFJIUwquh4X+ON@aKVLy=unjkhsxn_@Zy@vFV{Efy^Q&%VBqCFpwD6iW*1=&7`8WYWda zW~PNTuP4g`IP^+$3p70?P!^OQ4G>$T)`iuO5qJEQ77A&Acr1l7T4mC(o0u>zHia}7 z%dz3$hsce`;VDIJ^Zz1Yck_<_0f^`t*bM&@_oJw4YDrmK(lE4Y!s%?99pS=8 zvSsx-`X$-I#rLtC;~>}_e*0)Jk^j8BMlMWr8PyEV`bUJNT*)kq&Cc$QK0#g&AC-V6AQwFhIaV}Wxj(p5 zv~z|E7}-ZahWSgGdCxzOf|45mG!P;}wsiKeDPXmD)Jp#7(~~MyRz%pOTxlfra3F@> zkeUPq4yLMj7tIqBp)seFlp0ncYTg{-0R51}4$^f-pT*8I1lUjVQTFPm z?Qfv`BBmR5f#PvEa7VeOmv@bWMxSKz5HBw~45>zD8rIqjI9Ez?7YEk1xR$|faeykw zOIS9pIK{={+xn9WDqY1Yh@!W_j7ryjZ+JfYV>#o-T*)QN#LOr z${^{E@K}Q{vHkt$u7-=kUaJV^`}@pZC#OMZ7gkVa9`!eQwmO4?{z`q;r@1Q2axGR24Ua_tRR(K`*WCuUJ&AYHHg zW|e2-^#di35sca5ne&}7?AL;VXNHfy2Wad5hu*+%ai^E?Z!qew;p1l61?kiMbZfRv zj!o+d!ZK0Pko8R}Zwl}-A#ORzb@q`NM+E&*c#$eKVFl%zMdGSPxWg)vP+z@TPN}A=@QAso31E5}00|Oga1s`p^%&Fn>V(@r z&^tK1lF)m#ZC={UAeLnaX0xGQ(csFUl*E$RTm@aZfYm~TPAgnKZM{RI1fII8;QyYk zkCy7tvJBw(GQn5VjaL51iPvtm9qv^KJK7yVg$nV`ic3&CsZx}~IvaeYf4x0D0*Zwx zq8=fZqI2wJVYy9MeTyO%aA&YAawWm)>;%FMn`o!+=^4>zXe}}>92|hzH}QoR zdEE^n!Hym$83vKMrt!%b;Nq~R0Rcqh`$XuJo*HC%fH}(XW<^1gkI*+u`V{9YiJ>!5 z)eV+swW=I4iLk2b63}FNW7L{M5+i?>FGVkcH-B>T4h10_u!_j@6upRz2kc9Nu`MP2 zJgv})LPiaGTqJIsuQ8FJJ2{?f8%gmIASv1v+oV#1|8fED<;nV*rWM%K#qBw&n)oHb znPjjM*D9%+z@_n73cqvCWR8pWqI`!2fXD(k{NRLTn z^2Y<{=RErA;qnRBCV&z4zj>Cpr*N7$7E=~9`3Li06a^*wbFomyL9)*qlwFZGNN3(( z1M;hCI*)e~sZ@=8a{eTBVV5nC?pC(O8{h&a@l81njGkG?j4z>ufB@@AnLdh2?`O?nD zYdeIrUn-N+j4P3?rCo;5&)J#vkUD-rMZ0)rUa27O@xU zP9^6`1_0FuxV7KjS~C~8`K5wUsa@k$R1TtBZ*pT@#XEB9d7Nm|Df5zB0VTCn5XO}? z#hWEfadX!YPpz&_kF8=pg$w4pC*VBImgB+D>8~wJovP_mbcbGkvM}jy4zL92oEi>F zb%B&{ZSOt@6@`>-0gMpbBE!cOCBL_nvAg(@%oX_f#yhM+r~K<&Gm@oT4Mx+-$$bAlth=!)Jc>ydk@wOu8Lb`_ z9#mp4%63_m5PN4SWT%ucD4poqJP6-v?KL^l2`cPkJwjp0YN>1aNR9KaD#Ap+gsUs` zZN3?GFs8PLdP8L#rkR@l(NA+_L~7KxU2!cWGp7;W{!xe4$oaw`MSAB1`m3qoBychy zNYG#Zk4gYAzghm$mdSmOVzPl8+A9+$BzA1V0*=WJ5C$C$ zKEE>Pse45K?|)Avar?lEuFq8+w~x@*0^ZzGXLMt4YEZa`JkK~;=-Ybgs33_RgLUzf zLtTS^ip$)@oVi7;xTu~l5A^Q))h91+SG-{N{wXi7fq}#2#QExq6Ej4Byl=|Z1r~;M zfU1&5H}|3xP3YvRcn)?Xs;kX`$XbuXKzeqXxF6flVD^FrjZ0^1%29+cq};c^VR*!2w~OCe&P=50umiS z$g#-hpYf#o`$_|48D#%4M*XbKKu?+_h?~ZEd(-779Z7`ZY(S z9b4IsVZD%=P-3!C=6id$KvmsU{12)79517`Za=mvE>2W78U~tE$0xT| z>vW(kkBfsBE}6OxrTRkaHD{PS(-{a^to|NBPnYNYBJ?>@(U_V{QWi|;Nm-CifHWLG z%lM=bw{P{u!ubOwF`~-s+c(Te36{jL;J8q?0&#%_SR4Omh?kJtpkxmJ5zwdQ6qv?I zsDx!?lP1dB)AiXPR*##0pvo>9I=Fh_(~c=`~^Ohz%0{% zO`X|LzqC1pL@QFoXScl<`USfbL0#=wSyQ!&u~-HH6YwLwZAz#2Q;g#S!MtoxZ>4hT=xAfb?XZF8t>nQG8L?G0^Q zp<&g@EvgIpAq@8l*F;3V;H#A(S^nA-UvEC&;f`6H3rzJUy12*Pn3%wF=0Z@q08K!@ ze*E1-rL7qQSV5S4g+^elA2L#hHg()k_|T$Lq%WNk`dS6;a>wFuB}h}U!M|f?ov%I- zj!7#?we6}hQn5z+{GZtYZ1l+&XaQk1!{603%+l*F_`cRdZ1w5%{1zf`>=zT%YW5a~ zEU)rnE1A2_%xH#873R$v8>fR`zOV+Xde{@vqcGf|0D>Ev=>U43_S!&i0@leX7U2{$Y8D;PU6y)&BFtgMBp% zTpps@3gQ0}m$L-sy2otrUV7}4N8c~MVmHG7`<(;ZAw2#gLwLOZ@bRd5;o}bvA5S+g z#1MW(+2_IE7Kgw7aQOT+aA`Ow?{03cHvhc8PtF7wP@(42WRL(^gNLyH_~GNn%SVs) zp`Eq<^zgeUzb}8s`3QYz-sSfXj~+hUyE=ZmwR`WJvp+EMu)|bhv2gwm9}QJf!;dhszrCHf~`+nbRCgB484ioYF`eMwIffq#y<=+lTZC?CP?uVm# zvv+}dVG1Unt}KhY-pBFF_5~aK)iG#_Oa;@2+Uy_Ux5l;JJ9>LQFcNxBt}`!R0_N!# zlr3ZJmxrIPk55;7@Gs#Vtu+EJ)&0Zu)&9e8v23v)zJ2uFldtxdkNE!{?ms(x`a5s) zJ8tv))1UtK;?=?HzyEyr``*jH{x~vN8jSOw9zXmJ!qo!`6m;Tl)@b&%`1@+}Zux_% z+lVup+jNNh82rY2q>k{wnVeBP7`BJ1?UFl4$1l@@(Y1C~ay;)`4+eR8_Qhlj#eyM+ zK1|sUiu33YOt7l_wQ*XK*Ui{~N`d*$sv2|rooT>IeJ}PNWm8>bcUc3gfM;Y2*Z;hD1^qCc%1=9=@Ns?fJi+{V z$}@N_Tb0}wz&_6i=2A8e@B~G|@YBn;Z}o@vgFUHl{|cPQk0e37TC?0mm;MZmVwCs}AB}v~zHM>}n`xOD_P>$nQjLuhpRoXx+3=HS64;#kx-(`llfB)WElwTZ3fW8C$P)6H@ASlM&v_zyA!`KI>m zx3sDIW>37*H8@weE!T14AhqxCEt1+){=tuq(8MDkOS=y}-hj&exCy0^ogkceghCn= zl`H2ex{970!7Q;a8v)Z_FYFgs^!h!i)wnkooz-K!fs;b*7!a=;EeqR~gP0~n>mHd102;4cL2(vYL?t)FHcT)O zi7kLy+Jj;C5nvwBM5`GO(~d-rSSJENoEDorSu!)wTieXHb5+CBk<-iuJqcF{quFtZ zeG!|ICT&jQK``aPTytL+{jZGO?fj6Z`S5R=PQbUe_5uC#vQnt)t={8d(OmjmZ}}b( zqarKjKGWEmfA!6PZ@{e-a7Eisb(5f-A9sL~1PJmQ|zz{IaWOByH%rPzMi|z}LJ%ojMA?hzjVRx%pF{Tkr0TmzTy*s!kl+#sC@pkl)dg~Z%}@S z6=W}HDHKDKwP{reSWO8qPCp(JYJH^znPB)D+`aGLE%+ z`a03+jl|As!cck_?^(*xzO<+}C5nO{7w%gX&sk7JiYMZIqXF7V(Ghr z=-(%jP&*e!$edH9R$o26`uK@2g`cb263UHe%1qNN6yI&DxU0g$RPT|iUbyFtC(e3J$PI|BNiiQ^;*l5di14oN8Z#cKY5FR?ya{0?4yn@A zAe^jI!%IG8Vfn{&cBbfi&H$%eWk8iQ_i{M6VM000KkE)v_<}|$${e9kS#k?0ej!H} zH$V{8{}O(HRomd1sW99=fp{rHOIGffJj|-bzP4gUuq9969}{s3$M$Y6SG1BAD5!sXXuHUcs4@MsF}|fVM-y@hT%)6QcepYtZb%@ zCQ3ePZ*idJGyyzLZEfQ!xGUof<5+#TJUw2VtdLmKNBw`TaAxB5|I`AS$xzq|i&A~p z#88r*^m`in@o zdH!iThkV+L{p%_GKvjA&ftPFhcp@@OwlhLZ+6zNKp$8wP+B7y2J1~4C&{PyH;FJCU6JlT699Oaiad%(X3{!IU4 zkstfum%kqV<-aX}7$ZB!7WK*=6fgY2(;ovK;tZfCCs$Wu00Crpe{*@|4XVtYO$kr; zZqpzCx<>P@v(4UWbM@(eR9)E)jvqh%{>h-U3%S4?>7PR71k?gD0lh1`^$bhiTBxZF zu3Eczm+(BvNn$s$gRKjRhy?6Zn+3xnjmZstHIT~H2cmro8VNq}7QZG`chr%_ z-3vTa)8Vta!~i)!#=m4CIu)XL$-6p0<*OVpDpv)4J25F!p?u`L&lP(}Lo-cWtPhI1sGPG9 zz-Z{Td}Er!>JCknz>N0R&gCffT3+~3eb$s;US5ii&P|W5OTgpdy>ku^s#TEF(TnnP ziB|CEqk4g@qMkl7c3El`T+^azSZgsDVQ3>DsiRzJEj9?jVQjB{9S($389&@(k+;@? zU}`d4&0a~RJZ@j5pksp|0e=+0KsKXEvE@@H z$)Xv#iCH4W^c8w$8=^$p24PnIK7_e96R&6lW&F*;q&4Hh1wv?+(V;D&&41$Gcu_xrhnf5_Te{ACWOOq|G%N-xOf91z%zpi_QthS#L^#8 zaz2+wsAIbRuy=I?HB2ia&V!TJlOFP4A3sdlxP8_z*t77r_)_@a z`LFQb)f4e&J##U^dO@~PxhVvN)+R_}bBm#4nHXjrjhq{zhsQz9qq06T2+>k5}(LZxD+>27+MGiT=}sC5zHk zXV6e5VLFODQkzuB2_hDTwvTTm@!0WxSmmA~ej+GR ztyFbTU6+Q&e!+|#;)$^Uzl0gthY5Bf*IfmCmLU&_AcDMfCFYuuikNoHiS^qF44=c-yJBY5SHIfQer$DE5P zwKoEe^`MD7nK~CTn@494Ldc@3>&4XPjgVBddkAT^c9G#@gIs_AMe)D47K(Cq{R#4{%36<~LW+{6~-t{>+Y` zYD0La6KC<@**^{s1C+rE8z_owZgiv{eb{WKcpR1UnWBS{yWhSmJWUA^!umLFmGuDI zld9+egJ+xzL$TZ%X-X^my(SaKB62$ql)5o1Ui-?p1Gispv<8z(qy#BAdZnY62~ua) zK0xPN=V=qi=V_dEZs`x6UZ5Do^1DcuAmInBKR-kM*7`(TM~x|@6(__nC*1y!iz-r! zoCx05bcbVOA?H+K)w}o|WCoqDVAIfFLfh(Yjl;nBQ{Op>!9+F2MDK;UKZ5*?^hMQv zT;voTwMNhWl;#Ou3<3y zVXU#pAyxFJ=1OeuiI&Aveb;!cW{XszU+Apnd=Wc}Ecr5!F;XYZ?CxlfV+Ep0-O|~h zC?bK-!+Jlij>xu3>2|U&9_(2eF+~W*`5_k-TGhioG2~kd4Cv2^qLnQI^X6##L7o!m$#}QvijC4W}cmg>WlTi zJhW!Jwc{vSra|{4+_8QdRI_}JY`G=blSu$y*M!&5>k9~(NVqxqQp+?yFyl7IC=4-i z*~{zE`byqHdL0-x3&cL7buxU6p;zyen?Mxx}J9J?-b-1nQKrI&V#72hd3C_HW}N& z{)A^jNefdb*2V&s&6W}AuP}zzsWuPD9Pr_+|H@W_$)KP%m=!%IRT=%XUAgYTV+p9!Rc z=PJ<3%o-;;x|8@!K9)8ixGfE+^q<#p#<693<)G1C5-VhOh?H5Dw}ye`O9$=gvd$qh zL|YSpoVI?h{FoUGET9w|8|Tdl3WLpC;2kiV~-#9YmTp zSeK&qnZBPyhWxOrGif=gwpGE;B;Mwh?4-Jy)ZVr&uyF@Djc4n^N3IF6ORq1pzNT)5ncpa-9*3B8S>>FZaao^Ix&avp#oe7+(=%?|FsaU7=& zi909EHX7Q>V;H#Nn)IYT;piIW;#xelhX;ociZ$~6j0P5HeUlX=;-ZgcU~Hdq&t^#3 zv&=<;6Kb2nNK?&+u<9{(uhUNeaWsIO(ZP`87Yq5GGn0gt%im0z8&!UbDnV3rj_&(I zu@ztX-b@0|tj)Y~IOd!^jkKRZCiS;xFMc?94UExv0*e=!I-th_CCZ#34*ivvB)wjj z;G}^j0iPYM1Wn>?E^n`aMeiS7zB#=a^PFMqKtDIc3ob;m_${Pi0-siwa`yr^JOUTwz%$0D{nIkmxLEuM+ zS?Ig%y09N?m^S>)>irs&J~Go-KyZ16tXQ{32U9HJ0JC&3By9Y!LOV4JbNO#8RR{@M z>~~)r_0IL|67WeWIQ4EjE1f|1^a)1GYxY*M{4{bN z>rS5niM?imnt63WY~vD;xOH8@$~l!Fa&lk_vs6d~GJV*J{*0JmL0*YM1jq)a;|?Dy zkx=y4_zbFNgzisZ@eJ+S^b3y;S=IYFNS2-yl&|rho>7SCz1eZ=!EX75jrze*dZgPa zsrT3I8|29n%1)|{Nx%49@!6)o;OMB@GGJDOQWsBvIbvf8x&~2W7?U_iNQM)b z>XjimYSe^Q9zRb^^xXMV3O*t^;|fJ^L%`YT<~qHmub(h#O2mblKm*fovWhlfbdkM9 ztQt%MIbWmwjG4>qpaW+?Wk2`kURQjmq78 z`uy!8~K!7ohJsmzCa9)21x2J=!IN(NF+d&BTI?5{%sO; z>h`HiAh~VZdSQ@ul%JPuL4V<(0iO+`|0!q~SB*c_|LB2gDpDPR3i*qkt#eUzQw$`HWy#zH=eVU`8y@hn3{^z%TEA>3C_hf$3Z8 zuy3=0{WxZK-K1wY81v2gs>CKKzjTKiNXMm45Ddfgfms<~E|H5^<2Qpv&gNISxXb5n z>t2ZGZ#d+)UKfwnsUOGFWIH6j4Fi|ap3MV?@)*oH0B~BKSqNOfph{uLFI`$ZLMtn3 za^n23lmid}{%&;!zNV@p)Xt^+-cCUhJjtcA-{bG>_YRLb0Qt@0f438+f3bEZpV1k7 znfSLY4xc*CFPYS0u2Pt2bxC`Ir%RLvQ+l(&+rx$-s&C0}Uf53gnN}_2v?r*}7=wo+ z`60c3;7FyB+SlvIQa&eNPt3`vuw)@XyYzNkTGLN+-+fL3Fyt*k<=pdNoBE%-RMZ%X z4XXsDXe=?!NN@p`8+6uAUnl=cGZ22I=I^5s-L1CA8kHC+ZFPq4LE~d1I%mu!AYbbw z{f45I_>GOH{AMsQ)2Rl!p?BE=?TW`ih3F#p=}z%(4iX(*xXo3J%4=sS-qM#5XFkY0 zzTq5zE~O@DM9jdlMw%Y`pQ(_hVudAx>ZyoB z;|fP{f?@MuTBFd0ky)4!gUn)1`RW80WbKKD!qkP4)v;}BN=$acjWsjhK72^wnOx%{ebNh2)T^@8Ql-jUM`D_g#rNRgK^jzKrVm)41}%YXX<5Ym9+G`{sX-!md9uv-%wG2o$=XD%+|Mc z64EghgB393wXi5xugb%&b#m*Z)_~O zV>f<-;4Z)}jvQp3Re5n255mCU#PiBO$|tM)ck6CVgQld^D)#~EEkJ(Fr(u@kX?f|D zxdLv`HkWo-Qj(i$)S8AtfOh!2ND*#qmeYT)jb1{GO}0_Y9+PTCT^OOu?p^gJGj~pA z1V)c%kQIesdQmY44erG$nBq5!kDw2)7H?6h!;VI)>+@~~r`Nc$;^}?!wED^~U<<17 zCGWJkMa2dlH_3BSrY&g{WTzPPW;la5s2&`?c=nf66Oq&dcuoGa_%Nkrp?s9yHy*M0 z6VDW~*Owc_YEYqk_K)Z4utJ7sZD)=?td%f(%HweV1;BM4=c9a?H4&hG5g>pdzO|s{ z);H4lLfcH3*T+;LgQr3cV$n><>*?=!Q)n}sm|eU_LxFD|&32-O0X}^C%c0$#XjCRl zW;C-g?;8M`ngq-jd6WC-qjkJq-dq;nxqQTN!Nc9X)%II*vyAEjw)ng>c(hPb&mY-n zFSIhbM?bU)y_7d{KL4D*4ck%9ax?(9XXYve>8giP?gy`4zkpw(6`cgK*l0P{e>`~g z62FQ0W!Vc{sSEM1a*T$L9eM=jyv5fYW&y>t?0bc*vdVWEzL>r zR2mUxJ3B9^B6I5jxBgh2d9&x?iXe*ze?R>BFDPn5>Xem~$RO6}l-k)?xv=J}{lt@{ z8QC^-TeOEox=KRrxjHYv$9SUH5SE?272TW@n5tH~>2|*y2?H}jx^tmzq@pmb-(314 zq?lk{Ae}=wMnL*`@zU`Dx2W8*KOz%>N~VfGVI^bt=@5g? zHi#n8*#?$nHKs~T$Kb6U^>!#qM#VS7#qrpEumWF_JeXPP-qJyPHmIS+3_J zTBKt~qmMjvF58TiYeMPo{dvBf&^&``IeI!()=mdke}dta5=rxW!Plt9Lqu_2D*R+B3Z1$t7H@ zX($m2y4AiY>CTdSoY)ZD4FCS`<+yf_$f36~W7`5HM10@P1WH>mly*hM^hm5grZvh; z1WEMKp4e%cFoXnGTfYi?OF-!#828^Q7^IX&00~B_%_&1-T~;nxhv-N$f_6A8h{@DY zlRD&X`P^{5!%+u906u;AdsMZ%2R)~RwX7x4Xx4-QW0mOxJFCsHek_ppSTlwuFl;(o zAA?a-W@qHkZYIf;}fq&^Ok8IPbCS2K=T+usb(n9?_QDUT9viAqZF zBX*|rEGnS~e5w+@CiPZ+Jnjn@W2oN3*Sb^s6x$6Bsqjkm8zf)oTpb}u}q=PIef^S&8oSq9?tuUGGT%OPCiIL_w)wmEa45U8pKInan4hYMPH4f2%`Ao z&!*vT<@!THh#ffW$TbEO2cgf@fwo~pf-~$1+JQd#3jhDxFBe~Z^X1~}CtohU`)Zef zV-Ws~I<5!E&k?nLlmR(wAxFa z9QUu=m-r~Pu**XxpoG~e?XMwn0ry9^W`F6=m+1RvRq@O|3MeZAga!=tR}E5k`J#Xb z+^k0>msR?A=lG-_#8U=@Srw|QF7GdRnIuHAI$!^rx*pVA^Zr+f2HHrzL`z}TV7KKT zl0Y;teW5(9?Vw<%0-NQE53#19=+YZ|=$*yfH}u z4~!B5Vd{AdeG>du2V2=faiLTFL z6cV^S8tJZlgL?2a3>0tM$Z*6MYg93%&?nQAG0`19VjxFCWD-%!Ae(^mTp)r(2oD_` zG+o8I(11&Y7*0c+UOfs5uzh;E3O-VxO+dewN4I1S4T}jnoJr_&RV=bXs0-B9TMeT_ zucb1BOVL3MHJq8Kma$+gW5Ov=4e^iL#_)Z+2XMh{*)!cr^ZK}Kp8APQ>!My0swr%V z(kU)Cwn*Hw_>}M;CFzHmbMggOn#;mzedOLH=zB#Nfpqnfq!Wn*Wd(VXywt6%uGTs+A<& zW0i3c>~6l=*FgdgE=t~~^Z~6m7ckEvC|G`=f+5jsOdpVm0L)vMMnXQ8YLGk+oR)NT z63=*p?xjR~2G7p8EcpSKwRx zsTIO{!^hrktbhrM0IDBht5cyqsfK5`44Q*M_19G^x!!}8{32$SDaM@C2wb_<$pxS) z)D#M}#;lr!>LTCH3Oe!S}B~YX19RVvr5@8HZeU?gWafu zihJ1sqVol(%ZSyaMR=GuKq;K4G4Yej4|})o_wj$$*W&r_+cpstu-UIY3UD0>iLn3V z^uLS<0SC`t{|MNm)T%M0#i7Nnmp?vhOLNyZZqbsdeY@cZ4_{2(rloXkrrBJtf1SL^&FvmO?*95>|KRnn%h&sj@#wh%csqkF z(>JVNE;l>Nvow0G=dTYBriQe>*_>{j7|)SeI|i_48n?L*6@Hc2Y->VT);eA807UoL zk`vm{z0;;_NOtYd2H`OaidPpvI7WA(I$90S}G@3=uS~{hR4OYbF z^5Ox)6wDc{50qX*_mF@v-(mb7j@A)1KTyA<{E2kky3etFl^+D*w=Pn7c@2~ZD+CF* zkw#KDzJh}?zeD2lq6q(Z*7IUC$+P}P!MToiuDs0||8A#momxFrx>V*KyNfl_wev6N z$LeTs{loo9HS@)8G(SIVa?hTL^q*2I9Od@7Dkk@2m^@134UTp(kxK1aKL|DIw2T)m zN#c&W!K#htJvY|2UA65Y0dK`2PJAl=@G5=NQzsC~1sK%8D(ia<_C!k6!W!5xRKOe6QzNqs&yFxEx-t+G7$v z{czhOhyVVkyqDosTmegfYo}*Runm@P)~em{od}y zmZ-<7%o57@EHMz$?!x*DH%GXoo6Gp8n^PXtZZ2Vi2@3h$YLZ6FKy^x9orI588xnL& zLNAh#wc;Nb3$Bk%k}Rni)@B2~5YCI3?8=wzxDw|@!9pJS{`P7F@RS9tZ!xrhV}bHu z2fYmX*~>2%&t4viHPkBkxb=1BOXVO<=un9e=W?nl_hu{Wl$MgDy5dC(!OK1B2Df#S z5C?Ejz@se`>QaWGdNoS*f6G9IOQZ}qS3j!!KC7R~alE=lCM*R^GR_ZRnDHN9F8=4? zi(kH6{QJ*8Vd|d$xI-JCZy$dDJ@_fcp%-(z7J}SH^Ze%P?`JB3b~-;s>qx6|aPUM5 zpPy5P_|(Xu*QZ8BkEp3>!epMBrjfupdWMq@G}6=mfF(@J7MrkjB7UqKhcTdw{e3vT1k@pjS7Al zw9Nr>g2_j6T!~H3`iC>Ly9Yt%2ytlml=kf5=dsV8Gbh$ma&wz>f~xw!w!%`^&dY(B zzzcdiV3sb}h!y^Usf%Iih)|*!!1`=t?Ft#*R4mX32?ic{Ng);0Wf5J&-ah_u8!Y!V3gqeJNk9)TbW;& z)_PeYQNUq9qclhH4(=qebtCBJCz@JL!M1IC;^T0|@%PyHAWj=|Ca>bWKnt0Yzt6@c z@C0fZ0;GpDS2AGbMYp!v2tIMSs;{*ibhG+$ftnKG(LB2BoJB3_nt$qdL{a3dIoy>4 zsBX3hPI!U{d#;Ow-+n<4falt*8X+ItFR zG-LX*IY>IHNsFdadP`hdrih%?^sj)vKcK1V3AjH?v+B%$*{CpE#|~g>SEhNBI90x- z)hM&I43|uSMZk?>b5OtgDBMQ~&7)6aVQ;C+t1Ho~$=62T*npLl@8932S<8QTRkTkK zO`u{xX7(cZpxYyy_I@>+a@)Ojwgv;CH8>J}dzJ!ku#H*0=?H-KFjslrwPBH?p=J4{ z1x6I!;wtSF*E9t#OlayvvhuJUP_cxwOQOFWGmQMQ;IUN+1kZi^rm{mZB^xDtir`Tz zbo=b-my1{U|1X{$!k84L^bk=WiG7#VrIBif zXK3kjkw&q7ivx=qa#XGNHnuF7E~%hL%Tz-ms{%~o5}I5UqfcL+wlhA_-e%hGHq3+` zj%2SGBvDI|6j)TX;G24;+?Bbp$!H9((Y7X-%CzXMKO3&kjW3gVa+NU5fj9ocJYUiv zl4J{4=~k8Ww8d7kjA?)6Z7IC`BZdl)q9S<1$`kqo>~(@aS*nR5)gRxX$qzmx4nN(G zs-5}4-bC(=>2Sm3Q-vF*Q$@T;S)Gp~Hy;LkISV&OK}^AiD%gk{T@I8@F)Ao`gErtE zR+J(idAZmK!G3~`AvcQ#M@kX>Yc5k*hOdlVtQ*4-nKk#G;MrF8ZogABS9ZG$RgdS#yddeoznjl&iM7B79#C`1gU;g3}vwkV|VoXpT9s6H_CvMhb|j9_}cE8!w2>D;}eUq#)$+rOm^UEZ24~r;Z zft6A5@U?)fF)FgdH*>F%YEuPloV%`0gO&_4SB{6ycUT9e(Yii*FFVy$fZYdo>Yq+b zhaVcEoh<9qO0%9mY$|pMS1EZ&CYQ0rlKR1{9??lcM!DE!b_mK!XCvM@88FTJTipuI-z;X0c+ zmy8v0A>_xIM^1r0OH(rRPrXbY@=ZRR1~3By1ivl1p!4oS^rsIiW5PH^I>Qj|A5LU!Dc*D4#4Uc3Twla|m1 z8}d!ZQ8BEjwhB$oBIdJl+5~5;Y8d*}!0%G0n#`oGz}+*E!m@N?uudkmQGX0jDuG|o z_`$7N!3r66c%Mlx3E^X^7|mRFGC1LU#+BKR%dzyZl6?Y)`J8w!9-W@zjS?HRJjt*~ zrSZgP7jU}@UIS9>S2^BdVmYW84bWah*MT{HygEmIo5FVIr-+rYB1A_;mmO1Oh7yc~ zpQbRlde*{rgNbI36lnXvBg6VYvE~G@&X@%YWap&L+)9WjSk4erM%;oZy-mzeS7hsX(7yaH zC_*gdBJR`RtLR-^5)zx{`ZEP$PP7k6%(K8yx;K={w^uia8#pj^mlVe^wf+%AVx_Dk z!Qx91eWA4}v&=VEfPT24o1Mi#i6dv3IFH^bV|S)r_*LkC0!m!WJ9(L@2p~z}{Yo6=Dt&JC^5q zM;u3f(@`%yMSPj1+GELC`x0M0-w38SERhI&N-nOM_z%)Kcb(kq>nj#*oEqkVbLE$c5>DH*FTxL)sqKUzXa;Eyj&s`U|F9iFugu zWj1z0x2k{4^X%sK|CYcUelr7*hpGzPicLnYB}vT>I(?&Y(6KeRik|A_N3^oqdPQ9& z+yC5~z7NBW|HIq0?bdZ9*Y^SD9}Wa$Kodh!l5ZIgl0c^Hu`uIEBPLb?BM^8wrih^q z1zuzc(1U*?K=P7L^Ot0;x^?ws?{jF4{A7z~UwU^}S68j7S~Uinr{UeO0ewL>U+Re- zK~gU=!rE=vx>OYYlf$bQLIt4-(sS@TD=SiQPG6XVXvtur&R*WI#aY0!o%y)NmkD)X zT3&)5+9yVOBiG?{CXkFiye7o4F@)~whuxA=&0HFkPodz}?1m%>b9-x(`8MiN_UeQB zvNN+hlq(!3bo-GBE)ZgtH8mI7d&Ft-n{Ld53JR3hX_HjtN-f=(>toCtSg+};VJ)`p zky_UP5`s(Qp<5b&W?$!bB2|wUzzNjijN+Vco+GXW2`SN%$b_fRDPKmHh3R7$LLtLW zCcM&`U*|8Z(#$=$+J9#iAB-3*pE*y^vEd3eax=Dx%CnRKNW5Zm!pAH(QX@Vk6^z*W zG|r@nFfm8E!-_5Hhq@F9)`m;ej+<)>UYCWG7V|{L&H=p_?BRtNyf7l}JiLH?ECh{+ z|H1@{73ZJ%g}h0>%Sl82<<2O&Z*8=^-XDsmJZekKCv81tCcbiMRt*SCBo7uj{T}=$ zHz{tnwe&lw_Fl6O+8aDThmR^_8zM-h#>pC2J5=C(tTnKfQjV#tkpUUq#{329@BAVV z1*z>q!Tg2CUxOf&kc0a7vL@GuXte=f?*g^wiYUdAMZWSOU!k0*Uu4*bl-feT%Qa8) z-X9rXBd~~?6d{>3*-c|Sx&dqHH3(S&jnO`}D+Wh>q}P_^_`;1;bN#YRNDmjnBR5F6 z9Yu^DOEfW-w*5MC?xS_7WeU!jVcxr<)vNJncNviosZ8dE_6z`#pMUyq_((vDkT|J_ z6kDE3X1zL$8k}pfah@G&NYcF(SO`kq`H4}S$qXrt7b7S0Qs}eV#xEs5x@YbyRgJPOlq|79cIxf40ajfk{k_#e%jXvhwqAD(&zAN!*VW0F8=pxz ztq!YnjK!j9Xhp0F6X!lWww#g3iK>pTBk#r5(Q;`TrNi{a^W~c}x{Q-g4FJ&5WE4%WUAb0nL;>L z;!i-INe>{_3(jNd*&x-kGc4_VCID@xh?Bk(9O0l)qSU)+RwBDBrTzPmmpoM6zGdE9>586HQfuh)T!(>0Pv-F(z5~e2+>C z^2GgHT5~*bH6^B7d=WAx>JDSaSC_}7;;47Pb5x!2_u`x8Dc?lDJ|8#hu zU&^ih*?=<`trfQ5w6IZOT0^V~et6hUAel5BD+Wx(TM|N8J!lx{s^Wgm7~3Z@Sod}f z7OS8%RA)fwAV2s9HoAl?02{DaoAU9Zjf}Z|H|Kx@a=3BwwUR=$-f(HRN9f67;}jDF zvVo<#Se>Gq9E$p)c!URfD28$)B!l{hu3}S7{1OSp2$`e3O0<)a+e|`nHgm~&mf;z! z2ITuV1?4Req_7p_S7I6Nw+&9eMLE!Mc%!!X73Uba&qCtqXFLNjcuc(J8mB#*L|F$? z6%?Gy{AnDT@A$6 z=OjiJT6~FTh3O|y45JUL76{NuV`e-3c1&*YmWl1+f%;CmA9m-u0ksxk(=;d1Cj${# z*M8~yC;OmUJlJQ8Hm=JPLmxCt?vXRDiZpJ7!Y@XLXm@TR)(;As%h$WFj?a7oBk5o0 z9lf9NKit3TuKk{`J^mI4H2&Y7zK2hF{_x=7`FHnr?>^_(Jddw=jx~Iqzvj6=>v=p0 zSIcf15&^)RczOtKJnWKU8$b-IBfI7`X^-a0I)L`$!*+^4grH7!L=R8oV*l4}%SKCs z@58=WG!BpOkyyh??ALbd#+hVfz$CQsW6t(+-H9#sg9BNHd`HrxSk&TCcoVV0dd_`u z1_f;0*xZxPH zSCBhkM&LK859QxWvHnD`h}>X(Q_5OVxxz5FnF@KG7d1T#lFQW{f`n)`*zxD5`FSmVHKHu&dcfE1UjK|6hN zGa|Z;O9=A-5ax%Qo7&@kEq)s}d&3y@m?w$@<7#ob4WTSj)4%SKG4x$rqH^gZT!#Ka z;mP8rr!D-(6u^(mBLv+>q@eq@P5K8NEYE+~0qQ&Zw#O?pk*3cx8Kyh%oyP$&(fJZ7 zW%0*Zh`gGl{>pj|aYE=mVj<)P7YD|#Th6)7)#a*e(hVL~^Y_m8bR>r{n?f?ICw&E7 zU8mkNlYqMK>f$r@V9*vVShe~8&?0zkw&MA9pJ5)SUD{hsQ^W~=t|WAdD$9dQf1 zbviGT_oQt!v2~t;Ip;O((+E(-E#^qhtk(u!?WRIU&L>d#2u$3+@rm{@mx;wy>}Ot5 z&_j(24$|Muc63lY;0Ib6bJz6#4Nn7MG^P%}w#fJ865z$jV4maqDEDER^n>{7&7trO z3|tv==tfGa4^rU>4?bw2HACsYxE%>xX}y_Y%7F>hU_9$(X6~l^?B+9jhQ(D_B+F=&8&aIUJaTg94o@7UHbBu2 z=RhuCbPRZtU|ti&!~E<-kFVn6(Ily3dLl&L;wu3=xNw7z(3pl=<9(_2foRp=uNQ$~ z1sCzOwu`EP%+*jzppUF~$ilQnHx}u`8-u?NG{DvO|C`+4opJOAzP%9M<)F|!?QL<% zXV$V6;DRBDmHJDfa}Ie+782T<90~y(Q72dbG_}I9wX*XDLLWrSd~17aC<}L0ji7lA z+~O->*pt1vlsPn|GL z!AbMTOqB*kAs9tz>h4o6rU_EFp$G&&l42&v646dEx`e3&DX-M!=+?Kg91&es>qs(z z066qraDZPbxM+o4!b<=D@@tVM> zNW5Hh#vV270c4C3I}R=FBhJ5A}ctuQycsfUf!1+MNJ5gtRwox& zgKCwSL_R~H0wPLzuiH!8IT~qqTzdHW;*2>NB&A^@!4i=i;L_B%HZJ{C)eWK;suL3z zIR|u*@i1jECcZ%9#*^Dg0{uBStWs3SB2(sDO2WR}DxAD10jU>CA3wlZlV@KaRgk=z6tDbzmv$XXn}BV}Wx zr<#f5v7HZf9QGp$Q07PutAXH_X0h39MD@FRW4dVF+359!=~x=m%I-K#QOt9C4RJBG z#`@CCZx4}v&kSrKF6)35xPQq1Tx@TDe*hDmeYs^%y+#1{V)b8JySwO$sDGCfVEy~v zN88&&Z~7f`#UrcA4F)QQl;uth>koy4wK_h(K}9!2w?bR8rgWsl@aB^Kg6bpkp5zoJ zG2GdygmsCCziT7bvG4z$e|^`A0VWfvt(?q?E3&HnmpOHpqblnZRh*{wow5re%Oy8n zi3*C+fkoNeql!w3_AIMiX3XpMSlz)0)p=eGT1ltqMXS9(y&WG;tU z&uI3}$rQ-^jHx9ud6G;e|D2S=eu(H`b;9aH=BH>P0J6IPbSrMDUD&BzlnSAshZU@v z1)6du1yIs)niT}QrK_h2DjPfNqs-tML7ogbvz7{E8dfSMqzN~d(x=-0cDq?0NhS(o zMKYBhp(}J#x%3}JFpGw1COSyUx~JqU#%9|~iH1x}#T&0#V3IR!j&bONE8`AU($5)z-B;iBU0ibidSvlW4lVKb@YjZ9!;=w$RCKJ`voJ_(c zxm^d;C0dyP9Q6(!8%XH81)q|ufK+=m2t>lRII(r}WV}=*ndv3uI+s2wRIW7HFUZXU z^s(x<%v&I_rJm2L`PhpEcIA?EKon|@4t~caO5iyp{>(f`Axwi`Sz2dqB%-6q{LHp_ z0-BmhO?K}5w&QEziKKmhy+9izOVv~6kAcjAn^@L7(DPR?y9K}KThSKta zZUBx{p-&~NkgHtDPoyo1ms>KEP?xH^_k-?*Z1C?6b>`&blx*JYS#0lr z#E&NP54O#vK}%AbGS&yD@>P1k%N1!N4NcVxp9J7@9F^g{I82B(A zWF1x?NTzu}5uVn$j6{gdr;<7oCK{@oq;#N^(?v{CLTIW2yFe0cbc;X3E{dCtV~Um) znYgUjQ(9IT&xYs)HQ1%s&95+x`ihaxG!F=P4-Rf_8<|b)7W?O|eDlBFoE`rSpRJos ztJex==ruAcVD2$DdSz&*nm`G)_A>qwa&(6&PM%+1J&rN5Rx(po4x86YHVKh99F5DX z>GT}uI)T3WaS8me>+L}gbpYyB(A`{<>h0}m6iXjscMmDIwzmsxGe!&NGH>wi37o>8 zHAgYFyv|cxFZ%^0@ar^vtmjm*b$XY1jNmyHU^2ErC3Y>lSVAg*A>Hi8~t}0Ed z7=HU3{$yZnqCfG&x6QfM>r-@9;&BEcX1u+fdA=syR%`;{z*&Pk58s*sUx85Tg_Zxy zK}jynlB8Y|UUry!G{(O`F-o11V*?$+Dsd694H>l;jQFj@{PpD#m#C{A3znQLpEZ+Y zu4Cu?*mMvp1K5~i^u&i8!2IoREV(oNu3=(0;A>t?=xrTNsDoI8`)w=*0?iblE6l{v zTM~LUe11PK)mff_c76Oe42o6PP-xhNir^zTzZUEpeYN*_Y- zsdZnkDl|{D9!2^@V|X=W!LWlatj2xy-OV|ea6M37o~O_Gl1*aaLuc@Y>5^Br_ixCW zML+{UV_$y8=kuIFfwV}Pm)qJHBNkL6Ye>L?Q6a1)@Xv3q*rtF^s>5$SnN58;jZxsp zJ@B@{I-?GXo|-;+Ut7M@XvS-!+luv7ccB{gzZ<=(D19yX(g%=Y5N|M@Q(T_nbdH|I zau#){TiwcVkvcD8lF!VM!WVu4gFlx8kRuX0vuKZoR5|-TfdceNTiOgWNE)Np!Vjk^ z+ziT?%}x26)&~FecS!a5e0m; zrUeSXEtIv$9z&H%`<_pxpK}EA{EL?xK4_dddQYDIC$Q7p9QkPW!OMc~WJkY8Vb$pi z#GhYi?jPx@mH_6@N&5@om!_4>h-2o<3eZ(M^oy1GY{;@=yEM-v(PW}mtzsXK@Z&T> zfEb4$MJcTcls@`C6reUB!=Z^$Ew;|jK!pJAq=!pjZs#D(#i%*#c7zgj@caq>1N%7w z8=Qt)4fWH!R5DV1*l*&OhB*?CkvR^!ksBJ9idaEAVPCSArapEH~`x&Lo_uK}bu1(E1bslgRW+ zW(gz;fLZ}VkwjWq?R{xLj&YLHnh}}@*U(|0733#;vU}H3r$zB%t+)2~7hnD-fB0yS za9x}r?jYf_NGHoYDLWgA&ak>`9v&)EInY-~$$}l#PGu$lj3Sn*LL8#X2CYp;A@i(- zMnl)2Cb;U~BmUY6&MY>mF}^n~iX?n@BALJZAd*F+-wcRcaU~>pb+Ot>lVojEORw$Q zyeVZJ5lRrY6Z;acre-NAT9k}B_x062N_}ik@GOdcK!KCtlM*8>m}sQ|A`)ASCDSV3 z#|t&6HuAWZZ`2M-ss;#A@5lB4CB1LK%%NGE3duWnq9M|f5COjfRbL?@h4eX?2?MB3 z#r2}n*AXZlt`bL~=$Qx&0_YNkl*JZ3o28|i{`}Mbn0BJU`SVZzD=cr;+NzKQzn!i$ zCA=wSoM5>TXd}r%KSkYW+DmF~x`~wT(M`9i#OVk2jU7MLvU>`CT|$60S)YPANa`NH zRNAiE{G~m0(qH`y#rDFnQD=Px^K9hIy#-X1Tl+SSB7%s7l(fJA(n>ed3`0muOE*aO zASKc`bW2Njm$W0&-8FP~!+-D`&(Zfi@B90IYklkczGuN2o?$V2?|a{QUH5)yJFaS> zL|h`aY=)mVVMD0s0aOTl7@_ldum8*f<*M$SFuKOvRtN;d*xLF0=yHuu1W!yvu4D@6v%Ic&~88N*0UKO4s z(=rAX_F{S0ke9dNdF_dSfN*nzi0}%8cn=5RJ^~8-o*cm+bY?yU|49N70f7?!>TJPm zV5{q7YGrK4tYd3vVfXWvoypnKg6a01`ho7imgksX;HL$5Fqf?ca_hiv*2V4>1zjMB z@LYZ2co6q&W0D9{7in$A6&3i^6YOu{)Z{@^h*RyLBErOqX%IrMp<#Z?O_D{AN!%Yj z#tkC0YAdD}pq{i|f1V{VRh}%C`+B6WZIx51#PqX7bWel~XVgRfj`Bwp`zAfFBjOFm zV^BSbUe&X;mkeQsE)ln_Ef2zOCJS@bMcj;;_{UF;d|4j7kM(|H7D$-kp17;8*5!+I zH1mR}w}j9Zw#XeV656{*>>_YaEf@uwjCr(w6~z0G!dYybBN~MNChQIZ0@)wJ(Kpex zwf`xaA2*zT2_`?h*{t0`2i75@g&mwKH7ELcY@OaMwNyPtnpPTb_Aet z8wud$>`D6K8eaW*8bfIM`$AJ8`EtH$F4NQM#;s%_;0v4Q$&{wACFh0&1&EnpGCAaN zT91`!<=MVxX5fpKup&`Dq6s`=u|>}sdLb7Ze8q-6-)M;u>&g0Q_W7_&UwCgT>5v0( z*u4|I#|V!Uq|f~{EWM1rVxv;2ybQV&#lLb=>YU3KK|@ElSsRg^g?I0Aa{9{uLYCe< zh>YH9X3P_=4*#w!CCqO(&hH^096domfPej_EPravi(6@Is%=RA7`4)-U>PoSAAYrkl-=V+_|h*Vme^{ynz`XN594dLnhg3 zLMz!xUT_ipctGOyWVYB+VZQOS1Ie->fzo)PRieA1y-=M!`Q3x9Vx!5S3$TMq483jT zbMm;<3Ird{$*n+B?`+zGkR;3Xji~S|N+Uk7DW0=;;9{^xi+Xb9#(HmM(zvS0W=Zq+ zxo@?2Xe3f z+2cFe-ui`twL!z(>bt<9CIHdvqq{b zGiYUCCc7;oYb(CK%h9OX&*BQ5U>oF+Se%noYPvr|D&4GbV>J1tK*r;1j2)sMd7|zD z&yFri37y<)WQ*}6G(42*W^bEO=$i+)q$AGuHf#6dSoF2xa>|M(kC`7Ij7{pJlU$FhhnyFHz!Z7@DjM2f_f> z=Z=d@v3CF*EX1esbOi4PNM0_GVhLls6GaHAh9DYUW4>!MMu4{JJtcEGLrrCMwkK0_ zc_O1nN*>tr-tVIX#k~T_4-4#b3ZF(%+kNv#6MZMJ z_YOKT&pOVVh8uyY&yc3?ybX9EO(4I3&SWZ0>!n&~Im@*dx$U->gY7=BHAy)J;S|w$ zM*~LG4S15wAu{yRsHVxLe0q6Q67ZUDW5X9rZ>@|2 zUdc*4LM6QYn@2!NQ3V8qyYCSY?r@^qg}+lBjjs=XxnrjwA&gMiL%asRxo0dSBZPoZ z687*?7YTm<;H{*Z9RdP+>+ScQPV3JG2ndESps0|Nv-VblP@X|&$xdC_tZ;sC-HQ)%X1H&Fma?a}oad;>) zMt(p0`_?4w<|`C10Tw~r$D62{k=$=u=3DuJa}s5Asz%}l`QJ`Qb0@SMmX?3JR3?y9 zE}KFZPaWS98{=o3iu%}v+Qt2EzccQ2+o^XrIU{Rt*ST7)Q6+2OT(g^WK2Sz?^nKOo zr??4mUv4Wf*g6~CZaR2i&x_O;l!SNr{gsd1N_RpL^^2b4sSOa(e$r_5qPey3g}D1d zf(s&7I}_AcRtz$}-RQ$_9iQsB*MqyWFlUk1Tw_Nq(EGjc)N+hQu=WVDX>mtKF9ya+ zv%YX(ZHnYYTAQFoSqqfV8eV(x~myCof~OP1_L-LY1$Zom;Bq zo4*0SD^k?(lmTdveN! zs7_G>bb-XlXo{}p-Y#~$_Wb_h=R;FL-S`wiEAH>&G|yW`IrBsuY^pPLneY2H_NLmx64`rkoV=1XgXD-q*-NPecVxN#71|7f{hZH#MFnmvhO$&^OxTM?w!>MzSca zmd{q4&IkCT?=8J8?{Fm%9Y6}{iNmUbd^MPmGOg>jE`%;OJOwU`Gc(XoEGwb)Br(&~ z){3AmC_c|46toZ&T4dF}pj@Dzw!3-O#EBGox7Gzc5*EGj)$PpsC7vtK-IZ@tXWs)f zfI%;ny2~Y&IY$i+lEon!M8_yVZQfzqcE$SQ#JfG&go(WR_80vrw7GN#p5CavYlk=) zG;!ckZ@E_&I7(hsiVfH5m+oTcliks;?u>Y?=9S8q*fcwEg>!z-W^ak}Qe66BI2kOa zPS||;7EIIimrgxK%$?(h4KE0SjBU(E9nbSmd;n)(a=w*R1g`ikMZV=3o|{rjce~HP zmpyn*%g`V>w8E+89#8GX%pkC6>B(`9kToTl$zG*aVAJC;1sWNkOXLQq^{pln*wDi} zl%ka{Y8zb!$CdRR@LNT69pA%0y*TF;BpbK)VHa%x0WRETL+h1-%`ti_-8&NnY0vtn zon{t{4ZuBXv-Gyq-t@RXZkea)#dOoHy0A<74)W4}-T{CQO9n+UOc;Y3g9DZ*yx}+YdZV(-Cxr7jgdJS0P1z5INWI)p~45> zD?pYqS`YWtSCt1uPb>R8OID)G?<7tlYmv{Q_mH>o%G2+L+Hq;R4b3GE%DEo}8VLqE zT9Md({M2t_^cLu7b+3@$>}^lYgVUl8J#U{|M>VJ;&Q*m|qtv&`#aa#E<-9ve%FeaI z6%$~M+-c(|6e!2`>s?sFZx_*%DIs3|;N*e+#U0(Eik+oVo1XXmoFCiB9`$hlpLjnZ zNCyneI;hfvb?xCdeK-_%-*VhK-rwLdZe2}~TnM|rQu}FE^@E_V?a`$<{%KTCsl7?Q z9lagZ{7e0(SACP~I+7JEF69P2lD6j8i%W4GBsC;lve!{qvO~Hvyq7%m0fO$4n+7^> z-7W`v*Sw0>cl|iwDxHkz`ARYOGVY2C!azi5{&j@ik++drRnMz~VghOnWv|AH+l+$w zBwyO=E=~7{e5dk(rq{#v7aOa>dqiulj=GuFSvceM75n4j z=faf6VYZ>Bi3e7Oj{#++UnU}a-E65E62QD3F4y*&E}`9mk5;F!CR6v9UnSc;V!2D0 zL_{UH7lLc$G#_$*B~(N^Xn1Bga^>@jT$SOKZyDKqW$XbR z2Ilhs3nNy*LwVrz&~64>%0d)ncO6saycB5V%`w5NuJ7wn;$_3l@#VebSKq{wCD^j0 z7g2Wx7uWC7q>2N1_2ARDW4mDcgxqO~9Iuib0lVs38QudYRVXD(y2erWHgsS|S)RN5 z_#am%dL=tB>I^y-t5n5PmZ-!284rCSyrM?*{nr!@IJNd31YiHF%twxfKNU_4zhkZ7&OL{+-N=; z@AXMS!V>woxsEaW>zA!E3Vg#8)YWT;%)ovi)Mour29e*|i%$4Mvq`>xGQ#NM=jVw7tSLaj5*zR6B0~9tM&OjFmT)&D2ncaX1_s|Nt`Le18s-Op5G?vL3 z{KUlF-^F2*ZR1Tx1P|3P*_hs5pjxwWIWg?>eL~vJLjzipv!>+xTI1q z^IT6xyK#42{VdV%J*HRf3FU)>U#h8!FL@bWh7jZvM6;y zg`;-)I>!8BLLbBwlUoZcAE#K@3^v4&4yd_=u0>?qN`*em7PSNQ@R@c4y65LiOdn#F zADL~X3)7P}{jgQ+lvO`5AX9;J;fFnnMeh)KxoxB55dxr;=?kog?k_N+c*KJW(l}DW z>>)d`?B@@b_hVG@%gdc}ljT0#3kTPTG3o3r$Y(`OF}YR+nK2ii0k~bk+{pr+A4UdW zP7JgTzYR~MaKzVwpSx`8afJokOQXWrd%%4%r6FLL0-j?_s^B2OO)19(YNOz)sD7u$ zt3+rbp&|n)b|FcX9 z2#4X6qD}&zgcHY|IF4gEPfC31ICm9mPQ>&~LFE-9iDmx|!bm)@u9%9u%^fQ8ij^wj zWmU5q>Y79|NUvIkj;qPcXQ(8l^)kUuB@+&NTIH9K2;UXvn@D@p>j72gCmwM$B8#R^ zLn;kPVDeH#hFOtk?8F^_GUA7w)>syVJTUkAWweo}=blM{- z8KDJm!8<-|yWnO~6n`(FaxaA4%HdYIt%&MfRjNMgOfxMlI*PT>;2y|*TWMoMiCWsM_9*)9d#V*)|uzTGrPTL zCKjw2fU4yCL)D#*V_ijdC``~Q!Wof2e8Gr(IJ@J0gT9z3RF;$|ZQX*1lOiib5JtMP6g zSi0~h=aK`UtFsUa-spHtnWO0m6CpS?GwKoYrCOoBhsgy_x z$PC~1dcuEAYOqz@Tcyj~6l%xeD|3(6^=b9-XRps({E|}S(}*vAOhY%t8ZJ1J6$_LE z6vxAtZ@1(TV6w{Lgp^iR+|Ml*m>?6_kH6aDmHPR38Y(r=S{eo||pJ?cMApPc@g` z42~#InsQP5w>=DMwFo26%)GXrP1$qLI46?gF}0La&&%vETB%Ut8`r5h(I6-^1cr+F zP2c6MjgXtEuXR0Wb$53-iog(%F>bn?Yqzf?i{~f!5IE?Qfiu953Ev8ze3E1C(GPB; zMM~^Pd+erLi%-)YwQFr+z5oLuipC0lB5>xtPriD^K1~t!*EnwiJGw$ZPEKj zuPBF%lm^koSZGRwR@%o$0J`g1nj7Pn#3)nW>H}ByD4v1m(PeoY=>jkI`k=(NeUI)LUMS^(RRK z&IWfHuZHCcwcT$t%zmG!+YC(2)?zr8#gn6W><$&T8mU?Jk=|mVYLdNin%^ltyv)$OgH&PEgt_1jyK-NQv3jyCz;L4i|@I1NlFFKfYsR4v} z{W><+8nSxB>sLUY0KlYvu1V#ltbB88vMcWZLlQRdzQl%BHXbjKRNGM_8Bes|UbdN& z#+32c1X$=|DrTsm;6GJ^HMw9>fc_*|+h&7*Knm196KxPH^EzgIWVc48;=+m`ET}Z{CV|tTseCKpPQzCG+;6pH9|TSU6UZ_EQi4?q;;}!4BcA_ zV_5zg!8Xa9%D-E7@dcN9;>dbtKrTunJCNYeLEiNeA=Oh1}7{?_1y-K?|Mrl=57`{Z4guOiAl!kI}Zeck^QD*>9r^FTs=v75wG->X$JTpuol0q``PNL9O;2W z`^Cf>=9P~A9k{($gPHjP$bsR65aK$+ypSZ|Q9rjP@Ycj4DgmC|o-0cbzPtZ7oGwq# zI3@?y=Bn4+MEd=-g~O+Ri^<8(&Tew>4`=^sC&ZQ4 zxpacCQiSjL;SQkYRKdj2o>E~QQZG8jSe(x5wNs65)U-U|nP`LdTTHCMnW;;@z)I*8 z65W7UG>W8D)Z`R(FavGlx3X|nEuM%#f@`e66tWj?l3 zPt*5^^CG7LCF(dXGwFmlX$2`${ZrIY)8sW@XW9b`zShm9V(UQZEwo$ibyD*?X2NVHiNy_eQ<*NXZcABc7hB0mz+Jb#MS4ioIZr8Z!9CS-55tN>VJZ zi5oX-UwzAHGX&q0G(t6{K4sZ-fS`5!7*TiuE^dV=*iPfkuERAia}4aoFHUmPDc(qX}?L-EgWT%O@awAMnVXJEs_)_+$~j%0rz)HCl|^GC0{|z zTSu#zsJI>TWKlwBO&NE*hWyoNpcOglg-Q2slf3N=a;T2y$=Ow2-o;KG0OJ>JgJ(59 zEOB|<$$seW!BO@+A|Ob?mv=F=LtgaY7fojtj}IA;?%RrC41aWIs+*~Rv>IjaJt1b4 zBeTB|fb|!$(WEFT`mslbe(dEQYs>D`cLpJCIOJy^w zVij#6;D3MDvceacI^wRS7K~fwjTnjC)``G3$Q!Na6bJ@uNwA|rN(O%eW`5VV(|zsd z<BwUkMVS z&I~MFwb{fLpJp27qlJ)4I?+7UBDxH7FiG5<-%w?4yf!MDO|OWsfdhAF)uxW(fZKqJ z*jype{S0;5sd0A$nV|t2NS%7s%q&=GJNeH3YJD9aqnLkYG;r-QZMLNBvp~wiF+SKM z$=a_w>7-XcHc4#95@s;v_3;gaac1^}T=wa7(kDR5wP(Hv<^GvRZF**v)jmDq$XEQ? zo9JuekBrwl4UW8p^hLrmIC?>8yp{ow`sW4qie>#O;j({J0O+h964L}>KMRct0L^8V z{VT5YAaM(dc9OR~8A)QC7XqwO)*y&aPWApS*St?k{~f7PM~+bE$KaJIM*(u!84TjS ze^Y`U@-on3 zOq?}G)gOQip+k=7aj%LOP>t@*Sevg0&`2!39UPY|b-eCowtoyJ)5c3<<}%pKK?(H{ zs^z^Cf>o0yj`u`?kbkn*_Hx(kX%Mk#h6_#H%+#_~!SQ>?eb476Gd;^12e^aruTtf3 z)#~8j=VUUqdJ7A6paV99;q!B3+HOLIY)D%VsI>8dvGriGzvdtxZ~)kh_IS0fWzEWk~2NFpx3lXkR0#e}UD;oiNqTg#@oB-`jSc}jk7&{@5zpa7mC zwrZ7Ha-TB6OKdzf^nWV%{Fo+s4Ur;YKxDYMlJY~BDQCFere)bOoNGnE2CNs$U;%)# zaO>2z0QfR8>LRiLG+tBE5FkkqkxZj!H=&w)HIcQW#?~X?^2PL}?8{XPKwK?jb(x|( zSwtaHi+%H(e<%P=rEG0Fq2jJ;9}SYo)xlLYvCU`!Qqu9~34pYxP%l1BJ&kCCN6Z9m zE(afoei(#b$5*#94Pa@AC~)UV#C4pYmuyuwTsKscxtr!KtlY=J`^`n#y^za=iCyFg(48f0-%*NQ_0r3xmon&R$89H-|9A)Pz$eDd-7TDi-7mzLE>U?1Zw%|ClM|3t6mdVKTKVdIyb5p7n5dX;NPsqB1Wso>1&@_z z>>CNkH|v^BplHZtLwsxf|n^`bikz*i~zFhk!t z93%$b_>VB+SYS}{lK+s^Vu}qL4OGnS#U3m#-7``29ybMo_u;F12`vcj}oy+9kp`V801k9-jq*>Fm7nDtS z=+fgq8lV_8m>UbWD8GXzFUpWXCxU+~{i00E11;`-?qgPkDQJ2``}fC2>BW&kz~KrL`dblU z8%f-x4pQ4nBpVTtot1)=WlQMq_2%2ZR(qsP1-+9Xm*k~w z{5kWpdZ_J1Ls;ox0Hqd=c7=gmVUh<5{vAhq8cU$SFeib;KLT0F_a5iwZ-kcpcSvnk z@zsH!UkZf)WURfpRi;1)R&ln=cD;M_J zd9<&pJiXV{%`IqNZ&kv&b`*}Svo_xifWyO|%yTlN`(1*=mG9epo*yyRKIipX7}*b;yn? zsA*|IvR_2X`6zRn%CK0f1|hE9%|xGvbKZ(7E6i5(tX0vN&wjX8!P9VXguI3(r1Rz9 zc&Qab6ohm4_`nwZ`TC#)@ zL;Mq7%Y;|g{S7e#*k8&=ktpv#1eTHCTptHzK9v8Fp-f%oKipBa9qk5=)-D&~6*hyYWlC(Cm~M!q;2Suy^1 zylxngM?e!Y+S^wRs?>W)^;nudCpkBmLg5JqsfK}F4fABwQQ;${!!jUWW_p|{rQsJ- zXS+AtH;MV{-}|gaw1bmA%Ue1y0%gyUyRb%DPsknOSplXbmm~-H=MlJmBuD9>zYb- ziUuI%ck0A{*Ma-x@VSt8dp!})dF?2vPe;k;vdKn%G#p31WV5M=;pQM~7Ez9G5-!$$ zu^2v3ygR4FTXkQ!4*I=->VHP^UQydsw3iK|mz40swa4-ZnOX5OBL0cq_3=gG+R>e7 z1pG=8`>AWLqk&kAwuE8L{kf)t)5&U*=1;#{JABN}g|#tMehnbu1xk82I7-^&KP+Jk zIO3jHEW)w&XuV5>=o7>{YCVO;to!wd=;Udo3QJyGO@;51A8sGEBbeEAfVvEEzxeno zePC=co~B=5qEwl0LpDj?A5Z?cW4&aHpqMHFUL-yS?tg*Fec7;~U1*%lk@|9l}yt(g%^D`+8@jN^-dRG!JqL3ZE#{ zhFaUlnB${=h1x>~Kz2_h^2QhQD!=Jd{xmo^&C7n16a(5v`311}gZ;4Pq=5EuQ7?B) zaAW;fre$`r`%IE$ij6n>>3?;-Zgt#5z~n~Wttq~rpJ(;^WwJYxcS~8!L_R?YxJkLW zxM_T8u(fM7_LpD&6#wWqMhF1z%YArDsQm5QUv=OA&9^@mG#U20g-~w+wm;&-XQSIn z^so4U5~yS9si9O5?(+qsKxw2F3q!n6K;x} zjyP2l`%jE%uM0?4q{c-5HsFV-9oB<$TdyrRhux*u%55!lRWT z(w*H!%-Yc~T-~Q-q?G38#Qs`!cCx&ldW^(lk9D)DW_ zr+9~dNAdm~c-qRg0V#u};VINk@TiP$>J%6FH5)|%J+Z!?KZ=ZF|}j`AlG3<|VX4Qt(i* zD8YRoOJg!-@C?yT_gTzE>;rSJ0(G~nsPYL&(j;(<@l`iZj$|p@%++uV6Eyt?TK!X- z9Q-E-q&r#TrIf*iZ<*0B*e(fQGy7z^yo8*IKUV`m7Debmexj){w(nc1YVd|pYqW-q zwGCAZJh)Anpo^GHp-^qD7gyEt(ALDU@3JPw4?%CUhGBD`gpe&lnCQJ3Uj&`GCHm79aC63t$P!ZB}6M5Z39}C*wlDJI({?=yW z&(f-ZI5St%AuFC@QME;&g})?MW~ckelSd_?17G%KjPP(>PUm>?x{~~R2c``oQ^wR* zXsM(alQZAo9p<2J-n&1y;WibVT9IdG4d4$Dutx5_In@9Mbk^9+yanI9nVLM1w z^+d40j0vj$n{jt}FtsRtH6S?`$~aYg=U~M9q$#s#A?Cwsq`Hce9VOF&zt#NHD-?)> zdXg7mcNq23bwpgjQ+A1{H07}IME++(eFr_Q68k~QLtG)nFN$$3^Z1h$x;~Bq2-3|$ zWSZh}rFFU)oa3k!Q-~hnJ4>C*QRIu-uC`kqr_vO#OONKD6#h?6b+|aQ_)Zl0=U}Qb zl3<;UAoDyGHjO0O=O4{-3x)%UL4crW`)5Y2j$0`WN=6-lngn1T#0@FjiFmB#{0zx!wdmRrg$hGRV|q^J$b6J|o79rP%%! ziLEnn|5O6$pshH=*2tbx&syf9@4>h=3+>0I?ZjmFjf4x((U7xl*jhwJxvGxM5c~w< z$}p8JHxJpz>6l&i8B(^q0&)QO0aCHS?95iOqk#fO!n|)0;XDf5_53T3@~1)+@=mD` z^CV*_Hk_pHrdJ|z%dIG_I0XC2&CzH```ku+OtkT(z`!Ei@!}IbzR?ZKqWKa9mx>6-sQl!y{cKR@wm1Z&)Wdl znex+vx};1UlcEtFDyMgFwej}A)3@?dCmMsmaLDDHzYwlWfupy75ipZsf4OGMMbHEtMs{b?ZC1uw zd3V5ufk$aVD*af5=h=KPsfNxS4QZD*rAl`q+PQNQ&J_jL))!%~>I}Sve=e(6>)_2k0dPAeno}M@iSiEIvzZ9}@TFg_=1iiWBGpX;1 zL*zoxJ|~bYUDTwwb(uuJ^=sW`D(1xyX%_CQ=dlI~fWavdR(OH{n|}o47$iNHt$u3$ z4{@!)E8|66zrI4J1v1Fi(isF9?SDj;c-jR4N0#N z>1A-OXr}x523cRa4&SqjDHMEi=x&2m^QLND(gHH@W#0X}R`D3ZKguYpp`z=~zDG@6 zeKw9Xd`qeDf@|k>g|L#Oz2~m5a#c&tvpo4q&tsc$a(%#A&<6g%UbkHUBRK*;rO}o{7A_)T%dJRR5f06Q7H6-kyi4k;2(giR65FrBz~@<=KOCh_~$r z9eNL1;u6P%T0HY}G>IQ+^Z2#)vv_$N$N)b0>WzFAtfR^!JrO_v=j(@u4k6L@F2$DsSmPwHZ_HXu45l zNR1u0>#$a`dvK|C*iKl}l8b*fN|Hw1f$sRFMcGv-2Nk#&k=?%XdC= z-lPICRIF&cts%;C>Y~j^xuUR7AFuZDHO66cGScCrfx5h?Q6sGAWM4P`cnsKoi$b>Y?xJk9S{rN+`|?-Atu^=F-*~+%YnM@r=v3nXeWy|1j7 z`Ot)mDKSf|`Ewc*KFd4S=Y-PVf%KJ9wALtJ3~()hvKU=Co8uO0nOsAiqq=WCL?_Bd zC(4LNk+a{fsq6;eHjJ04$!nBT@tS1d+i|==vntw{cF?4>5rcJs7+H7RdPGek7As`>$Sw*0180BZbAcw#qypVu#FVeZkN=CMry#nSk~AJP?) z{N%Acq^P*QtDF$^0o6;CJ9LKiko4vXRjARfOZ3d4>JKxf!1wv}~&qFI8?t zxr=A+nlp=-F^pss;!Xw%%)g1BnUwjlJrjN>ND|`zUv0|mgDl|O*P1=?H^cPE$?HS4!5$X=#+)jFb9pi=kXtDfTpP^y2GeJ*yEruQrN}ZSRsbXgVoUP z;CMh~V+VzU;lBB;3s_O49ntPm;7hHdY@$H*a<^AXmo^o-*zd+rx7ChoP**Uy!TpVbaVKZ8CTl;W)LOG*FPz@pFM z0UEEd33QsaZX!h%PJ}~@!ux;ooVVZ!DoT83Q<|iiF*sbljaiEFMlwzEO(N%?jYGS;d83{>Hr-(k#b3#qWBc_@ z9vC*baCXyPp4EG&&%l@w>W79O&p9mVGG=BC+J|XJTYE=T09;rKT_3PyQ0QC`A9VjfZ${D^pRlIlCIUGFSDiA9 zOR_j((*VLGR zX~$d@WV>ZG?40;@Yv>|g07n-sp!F@VZ~@}Zm%VqPqvL*gTGk{?xfe6b55BAu6w(h_ zM)ThrH4YQJUYz~3H&Vs}>M4NZ{y(K{OIe&uh0UM$P&=mrS*rBxTS0s$5d^+TBk0O4 zv2XrFrV19}T_sWni=A>!=gcM;ms@$+_Mw*IwMIsm!8!^;<^}RFSE1)BKo%0tqx}&e zOTH_|skTLQ;-uV|=qEee>)paDohO1GCm62l7;@T;t``AoXRsAj=BA4i>*Q4$EBN!v z4A-gIvagoAQaZ&;TKve9@et+LBw&g&3LFcZb{G@%&_`jMv{19CF@}K$@csR}wq1ga z8(hw13-FIRL7Xs^Lpe>h<}s^)Br|JB4wWhBwWYKR8-ba(`&CTe39HJ?=U6 z6Zqc#j;;rPdMuPoCU~_#7IEyr`s7!Doe>FB#=lF+^PGWWWjB9pY;mA#3hh2ou!}ro z(dE2d6$pRQvszAaM;K$2a!jsTh=I+6R1p)+uLDAB4vuhAyszf*V=W~K1;v^rcz^y% zb^{3{zgF_NOeX_FPa`chGPWmvmX#?s2KK&_s20Q#Q3hP$89@A7G;k7jCPIEsD;)NT zsiF=R1)rV5>H)3yAp#Ba4*tzyT!Rkhc}#})5{Ilp3@k84@4dneMJ1NzhO1gR9w6=< zc0Kf33oC!Zb>)>Mz=kmh^o)nCv^;Uf%r=n`Ui8`*ek#n7n+Xl+l-h48uM&gw1}+RE zHsZYGN@s$KP?*CpArKDktQyeD{x!eP9=)Fc0YzGVw$8xT+GFn}1uO8fRM_B>H<*-1t z05^b(k@_iv%LMD=-XQpCAgW^yb?a3vNH3P!Z7=QHHD~cxIgYB|_U^F4QF_S-Uk3nB zW!>Fk^0Np49DBN25X9BYMBQATiPJ{DcKNk#l*-{O}Eg1a5e&+dgIrDM|2O9CR; zyFZmgT{HplTvIX>vjlcX4(Q?g*@;E3H#78XTEOd;Pj*yi zJ?s&JhwWj$H`m);s(AvSoQWX`TVVU;+_+iJss7bFRc$ZxTUfVlSqfi`+*rbkP@Y@t%Bfa_Qf@P&yZ=z=e8amIa)rmJqDz*3?9QT zIX>?tz^yil0U0^paA?t+TEmIAdtT|{?}7&|KVe%;pgWp<^Jg3@$Px_lSKOc$lOo#;OCLK zzx>+&Qv@lTDQNq7bgpnYowKlT#+i?w)c3~u^xN_4O;e=r3I z!-IKwF{D?><;dWhRdfuBJY~n+)A0#0?nLR%1=+0`iL6ONlT)GLDWw~q&S*XTFu6`F zp-LN|09lI_9Px$HSZixFoaqWQ)}BL=Q?kl*z`J@plNjB}Xg`nZ{eR58WmH_*wkTXA zK@!|ug1bxbKyV4}n&9qk!68_1cXxLW?(P;`3wQmBba&3_n?Cp5@xAxsGDg+dRIR;g z?m5?*wx;~+^l5v|@#r=>f%xgBU0jt-B{BE3zGh9WHQkjAMNsx)ZevSt|aKaAEiStd$&`t_jgQ7B1cYy>bVS@x$52SW#G5jAzFWb&?(%!4gMa%lPueMa{wj&f@vHHITJ%-ANJ1>nn`xJ z`)5;}WQ+y)CfjQ`q7)@dy*j^9h)1bTEwtWA=DSs}4+ouu^_Wi*=m_OGw#NMmSn6(l z@weQGKM$~;?P$^J&5HidkaF!N%B|`1Ir({~`tjx8V<=gokMh8b0#Hok32#D+^IJCDpQjQa%Xgm-(cjwwcxPMCn4D z^ekH`6sX0nC6=`~HfI^S^%|AO;-tD@Aa}BY=;PrXyw-N>ne|_}jDJ$BgfmI^rCEk7 z7-dwoy-&YkrMX}IMEUg9v)!r)j|7qhZ&er5m+~y|f==aX;xJFYoxZ!w_ven@Fv8Da z6?O51P?2x?1iOcUhL`k_Q+Tz?VO3I8$RS~5G8YI!h#_4P=>!}TbgMSM7s!<`{%xbQ z_3r+0YU<%iBf|e@T-LufhC!ZCp~QIk8+iO}S=tRa{N`|$xUbd+Mg{>OVi^cV1YuBT zH_h#7aWEEq_^>7~dt&!mzi1aZ^aCVO-{cTpA+!rlGvolx>wx;|DnP1pwqpk-+AIc! z`XVR_IMng=hmw^#r63>uA3Qk4@il~fg80%W;0{!u&DEoRG$Y#Utj3D>Vm@2c5%&+d z=MI|fARiy^&m5pX6)RAJhz?a+{y>&&wv0>W2ilb!Z=~Veb?FxDsTfGoAY?BPaQGua z17Nc*bS;oma$U2FWG!WBm8PIvjBn;(z;EMru9*wnIog9E*@zROVst~EIK|6ir@ncD z{2kTYff;615jb}Ol{f0vwUk@&K@rrPX0-R8UmJY^oua5kv~K+*AK2dyP@b8wi>gSx ze0EYM`B9f>%EMNj;6MA2e}%4aQ*0Ke+rUgLn8a?N{hRUmXX^8>$9?uBUqwl*B-@9k zIeO1uIQo6V2L-&motgPt{`C;-fyYDY)9xb3zv|(BHk9^9?sQ$+f6blN{`9xx>i;DJ zEU{XjF1mWcc<-o~kvwje)_Yp-keR0qhb>>;U(BtCJzcXI+M44RrqXaC|H>AGw)tBQ zH#n@csPp~xuF?}Y(6iO;B5F9C`)**Ph`_C&1G$?nKdpNDeS&?ubV-CRhq>4~eFRtI z*WRze#R=QvWg{^Q62Ia|sR#d--Hjd> z6rw457^0dTSfchhb;K3`kd><(_wSk7%}r^4MB2#KTf7-OwOp?)@nZI<%GJ8}z9kM~ zdRh<5_lJwk-_Zk8!@w}86r9G3)!fqW#aWxNbq5&&a-wiAKWsA}&uKYQ*6b1YWoigc zxg_`(C6{+OiIFm)6yR&xY+QXbOxej^V@ulf`PPSkZJD4;nq~a73tn7B{>g7tHoocG zhS)I`QuXVI(nzp*(%^;7=NpfTlCroDgHs(6Hi9sP_-dfwxfd-D7`gQUXr z+B;E=2rA95m|w?nR4$|F=mRxc?1?3 zNKIr90u@>_4A^fl><^}4@|QiF`AnpUv*VIT$5Ql9y=kwee}x~nfB#!n|Bdn1t)O6T zNxm&vC##a*dovNRikZ%L8+7OjyKjzkovH6W;rnP?sw;T*L zn)0F*r9OXUhW;QGV~ugj8z%@PB|KC=-n#*<)IPh?#*$z$;E5Q+?)M?$n(5Se$*0*$ z)4r%kwiKFpocp(d93=k2PKFoe@YBXt^TMSWO-G{o6TI)M19~~xRhWhYiVofQIKsQ)G6HRqp8OHJmTnq zL;9K>{)X9rD)UsYYwpc7New@{M{{;k)2(SfWNTDj@vmrSZ(sI*FR8HV#VBtpFSq+n zF;6Zd*&<_E*(^4u*|_Va(0A^5h@aEVod zDqHB0fir8a;#f23Z6R3A@*haVsV?0e!&Rc5V_ev!s%W1kYZ5|Mj!W2Gnj9JICru$Q z{!(yCexpvHzk_#=TP1GqrvVbIA4eDjuJjyRv{h)!s^#4{(3-kvoMuc6uz)%cj7f&a|P~(i`xZf3G|LjT;}G{tC~1Co0Sgj z`vR!^IT@6`w`;b9q93(v2Nhj0t%s4^l212seP9Zw`6DNhUEX}Pn9{^dw=wyBOO*57 z^F?^vo(?D}@jl6_nO74}%2-b?&ke%Htg_xEO zD@dd_d(&4!ReJ`{m4%Mn<6jQ6!1zMU`Rt4O{i#GFR@_c~1lYw)DQZ2^W*20nB zGCG$~7OiRhoCUmY6jBgn4T;z|#};6KK~^4Q;CWc1x(Ue~#klpsJfOqMmLYwL zqvEttU;26=v(9X7fc`7v@s~1Tioh#=ivM`y@8IElaT>`h9Tcvss6{p9%+x%fQL)S_ zvzZ*NOW9wEi?-~|;-1@LXdR_2ixM}~jbO3DcNx)EHh*&5&*h6EGtws>GWu57P}A7* zE;XmV0(lxs5O_*lZ(|j^sQiKsM^_fV-)b;LMcmz`gZ5jfWD>@wE;~+Z1Dk(>$s;t8j`u4SOn$fRekBw_?~G&2Wj;d$y-5A%404UD26(8}aBDX#>BT6#q_ z%A8SR#G>s|=;B<`uT+^|n+Urzl{g+XHneh)=QX7nNxXT&iaUQ#qIgAdja=+eQ-J+C!eGk|RzSAFEK*lyRN8%3m}mpZt3XbB!--=)U+np$PU~ z-JG$`dO{aqZ}QNuyxw2T0<q8v+gju#(j8 z&Xe4r{p0$C7X9eafVydas>0Y>3EM;FwVr1VNfjw%!Jj?-X4pYPwptRBy_?aDQvej4 zCf-TFTV#ZNVW2>uH=aVpBVHodbruCS2{oa}8E20z!D1R*Ol#`fTOBh>(ud*~ts99J zP`1^8TVKikJKtvwXpPdXXBuXtKGGMi#G+oRc?>e~q%3_CTs-WGL$hR?04IMdo@vkd zq4T=h27>BPuTo?-enP%z#nehZ-L~lR2UhH3BD( zW)(^l?Z_15*mKkW>#Z&vo`1`CCU`fy@)^^j0Irj9!j{)42#;H<9FZ zEv~mV6Camp&D&NRi7kfyUJr?>Fk?h~gZFOcD1zv;yx)s>BKKW-*iP-uDEY|X)#6D9 z*)C~nXPk?bOAPPDYf|?K8pkq}f{;`go=>s^;^O!e+3+DbG>~sW#XDlZ?PPGA;^Ups z9F0YA@q#>qj1~63n;GK~83A6F9})Z1rKw}g_J}G4AN0{>C^l#N>0et)uUwNM>4Vyo z#ms*Gh$h1x>fzPCbg=Iyux;T!QrtCbr@BLPW%-OmXM=zmD)f6+Lh zsAtiHl|-eSEz_<7$Ist4?R3KyhZN+=*Xp3y6MBHAker^BFJl)qzpQOJ;I5h-9|*+) z8MY4X-+@IdBu9Ql{~%*E!+PnJ<)Q^^*Fr3O^X9U<=GI^t0= z`$3o!Q~JlOddfaQHdZDZ!3ebn68V~UH&vVT&(wWm`;-7f64S+kwP&an5qSBZXa7?> zE!Vq0M>ptsis;<<;IO%4qzAO*s|6)+>|W?y!1L@(?G-2`4Pkz4-^(+HzkQ==@iGbb zA9yFDdqnfD@C@YV>c~)_@YaASS>L_A_=6nGSxdNECVAy7AHDm~9kXe%l$7BXIG7qq zpY5W2ln$|z{de|{lzk={s^Q~E&i)pM6?jAK;q*Nr9RDg__Dg0K1*JZIy91_PJ*uva z&G(s-^rauT-yc-oh7on)tH0@iWmkEw=QUICLsImVx<}-6EJ;3M#xj@~|6)xCF?NIK z9~2Qv_ZttD^Zc5Jry)KfE%#H%TNmbJ2ZfNa!K1DO=tw*Brtw74MLa@O&u*T~Vxn>Gv=lC^$N!^A&vbfp z?1E=Mt%6#CL#1A5fw2_ix>CO_kD&C4pvw5{#-|qC+)GDlJ&t}i^{Hc@`m#!?8%hJ0=(8di5 zCeh!!;DS%6^f)jf--oAtWZSoR&NlHa`y<;#4!i&yVoeD%g@}5KnkX=xk=;7GoSC!I zObc0oDjUd7^*X#e<7p5EQV2;zPO`aJ}&Hd@BzvGMhf_@$|m06Hx*+ih!r+*-B+* zA!2%M>U*saJ&v=V)GZHA6q21Ty=hLBVJxERGVIKs6EcK3EhJlC$1-zqP3QN!S|ffE ziQu)HI9R+et>~f_u}V8vgX0>j{*fh!T9}SR!KupVLGs(zFQ!q0_Vn%pj3K%zG<&5q zw;Lj%p9)Cc4ieKz4#j5WD`PKWI;AoN!G*?W3ud3N z962XHM^imQBO;mNr#FzgQ)*9n(J%qtO0alc#fE9g*g}MHbHVV)ZzZN(!nbg5=1xDl5yv4D2C&B`yv+|m$i(hVb57D z-G<#hi#96v-@%-TwSOEeAWf#%Fq_ZxVT+p!fKv=HZ<`YPXeJvThm1t5=h=n(T=sV* zI~#R*Q2g%4hznc!nisLm5VN4@+#6#qr3R!Ct+9BQh^*7=Mp@YViu!_$FoQ z{qoA;$S^8R@;G+U67U+Kd)X@88X2;7uC(#qL1J-JC!-97vB5kR89p)C3($f>w8gU- zD`YAPAQ##h!6Ybn?stm*QKS+*$^+)doWTX1TX1U|a_DxJxw#+IZT1ShNUO4CK#iGl%)P+ALKP?LvFkWQT7(<+MhU*e#e=4x-e}qDk z9M<>G>ejx2ARm%5wxMad|L|eAkgCw8B+x(){|q-?g*b~lWXOa%hCT#MEkc-4qsVMf zMGPm-ekbyS8K@IWs{2XweZura?!+-xtabz}C%a~k_3LPfaXGg5-F(Fm#TW~8HObzB zLV7pK0+N|YWj8qG->ttt=wktz4vRwOJ9XTg(5B4QsBS~ zwXHqiWpjUEqqSfN{sYbDxG)1Vd{n%s4S8Q+!{7UFp%?OSr42s%to`NjeMpo#1E4sHv3^s1&uAYUXH?aah46n6`#%8#2@26X zYr#Bd%GcOx#X?01o)q^GF~sbmN-|3k{cFe461khfl%^%=2(755Z%YM5Y)S&Qk9j7| z1@flNrx`=0KNHfa*H%WoqXr@vCzQoExW4x3_eD5`88WTvu8Gm^LF+Ne)QCj*uunM) zmH6KPV&5E9^JerUI1M7NUmKG{8)7{+eI9f;|7rexNBf$oehPC<96e*Pv$DZN9_k6s za?h(#V>T0pkk>7QeV;dc_w8el{IhZSC9z^Sq4F2Jh-YF(2O)wbt74>yVMCP!)dr_U zMC@K;7+c})|MyVHe;GCQC16Ax^VX+#kH`L|t2WQ5j|Wr)26tI;7$_$T)a5YaFZM(& z>9d>1o>p`TXx5njeOWonK1_r%+z-+oWnx8L{&x%x+eS6cE9sOhA6APbhl5ESbTisLw6 zpz14EW2O0|kLTqVTks80gIGLVS|&8cWG%r_u{&wY<1$v=KB&9~2i+uIU;wKv?AdDV z^R=fc5v&kR=cNaZ_Z0DSAWThq_I`4#CSk5*P*KgQ_W4}IO*$>mNcy(0#4C_q+79H! z_)mMk1AGZoxMO~A*H(_wzmn#6WBiYzzCXR37Ea!4wrdehWdGf$zN3v0xm@Vj4es9s z$X`tHzt|F1pt_L%_7`Mtck%R+l&e6G)^^(o)C2|~D)>>LgkRh1xw+fF`p=B9m64*L z007Ug-}}!n{)hfEpax%nW+({I`=GMka~qofQU96mp#C%8!BEM?zJPu!|Ihw2OBTUI zo1c14Qf0uM5FIBrUcqLh8{liZB9im7&++?+IT$*~%p!dDi8Ag=ovj+3CsbG4siDh2 zmFIp}JoQ0ONqv-(?xPhH17hQ}mFxt$Y7qI?Jg>^v23qMmQ3T^HJA6?utLsLX&Vsp@ zFAjl+R{P}-59*}*PWO%n8cb*RDF)qPIuWY+p!RJ<2ZUE36a<%nYSCf}fqLIz$fPDE zUAi;!gB}nH^vGY{gDzlRfQAwvfUce|=zo3we9`vn^Pd;q&*Og$_v?)}$z-%?%(fOaRt^E0Dx-c1|%x}M5O>os- zAwPUtfn0tW%or;8-hfxz2Q&x)gs8SWNU!bR(Se|VQ`7LWS z@KfsXcDH(NR zEJ|(9g-h%0cCTwwX9`^;>(#VYOq_cUT(!6^v1?mIcOmUAbES4xset{gwG8qHF2{bF z*C&dP5cf;;u7`APBaNe@v?Ey>pXfAt5VXq#_oCW0?ykh?9tC=ut7p!=(T76od7Id7 zL!>yHSFS2P?y_-MuLOrCxM*?TmuaElbwiWcmENmxpJ%z3e72}8%A9c%FWu|>Dzo;(WQ)O|;mlRj5Uw{)rAsrNXo7CthTmwC870!qje@3CP>R%<#B$~^2d8=G5}*mA3-9*^s1;^KRj?9NaRm#aTM zY%gp*N$tSVwcj=CQ_T+30hcs;PiiYQA0C-jcRU|BZq*&&J6(7$b6E8Kg-WZ^+i{MU zoqJlDbeCE?@U`^d@<#TZOGMiMhN+B}xWN~f>t)A0Ycp47O{H3y`-3HjTQh9QZ|Rs5 zKaT3K30*sSenKjL|0Ci$h^e82^ms(`u-`2=^r2Gp$K6AeDRMPcD?v$i) z?r|U+N64z*qKVBw>yi!}M#+h(e^LqXJP#jym-9SI!lDY)>2_%<5M2vHOo9A)uuzMimqIe zIWCJrlWKDHP01~N+uC-T@%??T!jG*C3hx@Up3GPlcLV)XTxr&Npkab~!Mz9quf%>d z9^Di;gm|)EI2uaPE#%ahKA1;I=ro*K#=Ja5pcxGG%v(VlWBX7jIl++x-rrPnbB2 zv05v`lJ6S4`E*wNcUmFae3{<$5dQf7`qFzR1VJFs;Y9i<-3kEkd+n)BWaRP|2S5BJ z0H!rg#r{4D#2y3Co|*ZV&omuN%M9glxN+ZZk0+tZk6s>u31RjSrd8t8|DQNK0f%Rr zN8!dW@&e#-u1SuqzK0MKDfAPm*LrK(EXxuhzWEg`hZ+I;5@09eu@!oE`2 zWFm={kXji|(~WhVTGF$1zF>tRmM@x;mxyyNk##6tF&!}L&}!%awbBeYh2ksDv#wZ` zq?k7zEZ~u29C|XgLXE*rkj!OSpugDaR(G0>+d5$N$_`g>DwwGO$tMj&9=&f9w)6-1 zE1B|Ug0LQD`vo_{P<$DA2~;5A+~V2fr!Ag9qSu|BeF@cGG=4}60Q|sye6O7yDOQ&_ z)Wt{y5?V!!uRIA#0*e}GDG!k74Bx6Leotl;DawknaR4Dtt4ObB%puM!u9%05h5z8L z&E<-N0Hpn3_C8&{>7g+Kmyv*f`kb2@ML8wRiRkAPriHUPn;Dv2DY8oFp(&T z$6rEutwdgV3zRGF-`=k0u=$i_3*PBr?bf{+fJMd`PcVx+ zt!GejLOq*}7WLTpM8Q^i()l$9XpdDXdm=p|6X5u1&Z8tdDQejGyNea6`m3;u7{3a= zJB~%Sb-O3KxI3)AhAlG&0N|ze7h1|eqXup-`kX#>Nh;V{XWCsATw9g5;Sz~c-ulo& zu3_Kfb&7Mum~z6k$ge+TJIU6><6DFwTxTLL@8>BprzR>MBdz-yoqYuZV8Db!y|Us& zk>)i@SSic-I6Waox@e5gEG|cBfIc76)Z-H*^b ztqgj4LhF8Q37cXPBQA`uVHBUR*1IdP3$8YzR7J0^$i9lv4Bd1*=5z}vYM`UK<0J&> zO-YD|*3GP2%r^}SDeB#+moz<`^g8lEFOw17pHfJgu$mo#R@3cg8qTfe4pVO{SP-nk~Q2YATT{}QS9<=LeqgsLy?)x%9p2+~OC&#_IM(|(| zJNPo}uKncEbLCUmYSp&HkJ5B=PIZU|(3Zcj^ZAlu+Wdx92q8`O(-Ao6;N?!Km`Iw69#HsbTFZMiT%9(u}_zyb6)e`KlABM#K7ap<>AobX#e4AdBVlu zQ8?^rY30t2{|UsHJl_KrzPpImrF$H=w;sP}k7qJy+Du$=&2US7&~gC-z<|F1YZ7vo z{9qB&`nb^39Pa6HpPSpz?|r+h^9MYa`CgVE@b438xRF(Dp1f{1K49J_XJ;dcM?;cSkVD(mIMgF^etvc0E8d=VZzeKSG5N-_^F_R z$r#?07@KSRVGR9V4`1HXdwusLXmjzD5g-8Yd$v(?wveemguHY<+f`b`0swYuTS5?; z?5=%yZg+^3y!hzzvYfmRR@(tvaa6``a#@GeOfx2#*st~{ALRZ3^5dSB>n~^RT(92I4Sx8-ryuqK z?F>OX3jD6UEtL_(a<{{t880CUR1JG-n;#R}3&0o2z)2`R-+Wk6lOD2g^8xW?km@lR^tzM}f2OMGqeqwuRALZSe}fa`R`-36 zlLUR7=q(Y91`{S|UYoBQ6yDRiT^i_R_GsT7SJRlQ?NQQH^Qk!bKuFZ)By{R07enPL-e8Kew4o}oSfUJj@ z+1ATEpUFyO@#-1;R#eGsFRqWI9s2VqS!_UVG|dj z_`PLEw%DXcaX!9gQJ?+DJ<<@5b+JQ>bDtl$#RC&9y?RczFi-LMW~ySxqQ!pIK|}Mv z`60FzQ;-tgWURH;e#wlc#f-{>E65IP6#@5B-}_ASc>i+B{jmipf1s)2+>>`a#p5CR zbJ&9zs)n%`k97Uv3vYCS;k?UXi)i|*1&;VzG8W)>0oNJ-gbF>rHu|@#KN>BZFFyNw z6skHtaE`aXj6HYc0d00IpBL?V2~CeksBdx{G_OB&m9|dqm*?7xlC7MW49={axzD$y zY2=)+Ud;hkLr@%>?@g**O}1~nb6}yj41i1U%@+iguf`i`74N4D9}vA7AG%v-&cFcl z2N}pvrWQ~BCAD~aQ!^{km+FT~ec9?^56Mg%_4{%O%NObWIVT_S>*UGA+t)c@AC2wR zkW=?xL13d4teoH*#CB5QpSwSUsIL2>eQ(*taz5>{-$UHtuK7t6ocj`9-u>z`$ug`E zU?YsW2=+LQt~14V0@wb*eJlLkFPEp>8sZfIJ8N5!$lF;2Q zgH!#J{-quMQfGTL%vNfPJxJ~+c`bGvLNT(7rNx+Z^fu9$VsZoYNh3bB*@E> zA(FQ%%A;H=O2u)_#W<=qr*dTE zIYcx-o3>64e-gSrWhX&p&)XpBAQ`j+NJOq@FND2n)eAmHIIv1n`eVGhb0&$V)6>TK(+<>sTIcVgh^)c&Bf zAsRa6&!6hgaD(L|%-3#6zo}@#e62=Gi~`RhudFFcTbng)ebs}!--Rlf;A|iBT|jRf z+sts}^G@*4O(uePeNxOp53Gc=_B1~TdqMUDhDCXYpaUPL*WILSNpA^QT%<3NeV02w zL_Qiob5>&b#UV(?C!Osvn!E*QPYRMEbdpsRg!#8V))m}4YN)Vjth$bN)vkQOsG3~R zuhED%9T99R@&$a6K~F|}ahEL+lBMrub61W@f}L#g#=4*muZbCmN*YzvXaaRlnTXQx z*k(S$lcE9*1|Tx0Cnc>we`y>#2Tl|a7)alHVAZ?V@d+UySeti8jiBxLhxS)KK>`3F z64dPLJCO3y1c{-C69iID5P(vc&uoy707Rl!pcVf9`2xZd^!Dt<0X$z|Tz2@o0?+|p z5PP6NLV`%@)}={j(DhY#TJ+ho4QXDWX-S zK>z%YoQNI&*2EfNl>vKrXxs)iE!!MD^f%YK zQjL(MW^HqAvyV8XjBsDAimS!tN|U3!@#RmKCQs-L3By;Uj26=)le=YE_w%?{%9p2% zPL|l630~p3Oppcr#~D9firIRIC-ZAqtO*=>v{-gUB*jC5)x+M~Y|t=!#%wJn_Zs8( zzwS>h*->&Iu3tAToZ_hVAg)o`;=bec?Iq&;+*pyczwdz)8yT|1K=S;%WCQjTi5ubG zmdP(&o%f1~9D2+pt?%wE_wrX?mNzpV;dPg|S-P0A4NkfrPI!0705@z71+>*2)=->V zTb(spq~5!X=8p8opwzZXeNro~4eb=K6rV0G%MjPj7n7_g=giR+Yt_HMws?|Z?UOMk zPsMSyNw^MV4z-ym{5;Zq{hb-d(b$k21fs@=)b|_Sbe;Ac_QqtXHa$nyG3mwIqXXja z_L0Nk37gmxRP@A@1xlnMn#zZ_?a;Xq=|WUP$rbWNS?znGp3#O+<0LvqEDYaf_xR&F zd6;qb4lGVp?hb;xmh^_JMMe_GVVmb*9x^2i=m(s{yW_Hk!By=M3ihI;d`R^Pl*te6)F3Mtv#1xDp{z8_2&||S_gvDs%`6X`4N&QvZG?qt)3Kj`2 z8_PR{1*)^q_8^3tHk z%l)&OL?-MR^4X+wv$%54L@aq2fbJ)~*>kTOX0oum=`J>CL&I#WNr_M3WBR-`7*qUU z|GK`$qw8Am;GIwY2|YoDM^_u>_7CB-^&E)XQjNR4M@-|OT_`>FHbhqc_@J_RmM>$M z78h==ImTLdXhN1kBmS|f28z8AdXyjEuOmRR>E2xznj;i#88^OgaeEb+qA>ODr4C;& zWDYs?A-D&}{6eC`tA)&KStEWz5IyThYKJPnmI#Z%>V-tP4_&vvT!@mi*2O5jF858b zTGhN2sdI>}rrw^>-#Xt~4&QW>F)6j=MbuW6HUwG64DYm*W>p*@V_FXs4pvpJomb42F#T+t5e z>7CBgLM(?KIN8>ZR5WH6&8SJejw(&V;!lkWS?UdPHHLz;alY`uts$U!p*h;s29R{r z*&|P^eCNsaV@Pe1o_mML?Jw|Fp1RaNEc1HVxW4A|NeX%-+$pgjKQny;Ww1cFn!d$p zfGMe3EN+)!Y=$g9nmd}S;hYM|!h|uoNfrpyDUZbr(}+9&V{89+oYl4=XDS>JInX1H zF`5GXo($#*KM8m=HHvho zu`aWST=KOLc~#kuNQxiv1=Bo(tv@-S$qpTYxqBRET-XvJQYc0SD9V8!8goh)g3M9G z5e$A7)guhi#gsr8R4wSAd!qGCcVkFt3MhG#b-*qh@Nhp-XxY!U9Wj}cjT83;+@QLg zyHr+B@_CCKa!XMrZUCCa{msi`qWzD(YDr@P^zKMq)ee~3N&KxkHdeu~H)4|Uz4cav zQpOR%5m`U}xJ+JfBNC>6h6nBwmWsZy)acc!+?xDC05ZE}QW#tDpldn8yFnlyak*NDbpuW93mdL#x@j=@d*8DgZ-$L~e zhhNrbx>1~KedydP9%_MgmDj2_tZY?7Ic2eah|T(y3H89+;dsoPaJ`I67$SUH)~_m9 zWcKt^A+pR;4V#&>)$kVs@}X3tXuYQpJR-7F(7wS}IZ;w`Hlgnm#!va#(emYQUBjtA z?iHN^H+LzhWI!Tk!QoMSj#w+*VK)T4<)klC+os!)($)TCp!AzBVbw?4%NW)*@ntMm zS!!s_N2u-013Di4#?DmN8O_Y|t6LQ*geTyPcp!Xp=w8TSMGR|IHII6o%oOMMeijDYHxaTtMkAarM2D;9{UVZrdsvS! zkv2Wqz!3W@?j3V{-htHd0!1Kf{IcVPFZ`?@&(S~mWY5w#kg>n^UjuMa$#ki&9a z=j}v6YtKax)}%Z#F43Ttzb;A(;5jAiS>*0@^_H7v-Dy{F9~?4Nyd-k zOSpB%4F({@Is|A#BCXRFxqJh~H8V?q*bC#+RExaeENu2jT=R*tJUuB6uf7$CcfTe# zM{Lr_9zj2+cvooYqM6;FKn`LMLko={y{6~1U?DY!w}WS~?472pCj0Yt=q~n90x3BI zkiy5MFOEVM5$2+mkU)~J#r=#jTXwGe{%rsHA)q;|$9@x45G2w|X_V7JdQha6Mwt#g zEAWZ?n~JQa%=1ipM==zCX+kH_*m(a^r3PA6ia?rF|Hm8XK4u}8MUu}FrxJ7?>8I%;Cp|{ zSO6vjC*UGkGi1M*lNgpz6=944n%Q=wU)Dk@0>WGZi~yJ?$|ABi-#GK*x&`sw{f=As z2jPlCH6M7#M_0$*_(pn@u$Dt_gyRM4fSwz)ikH;ArPX}vlrRZ8Dpa*R0CooJdfxXQNHU^tn z3;~x7l{aSFN^#dilGSzPVgQ&XvbX^d6ogRuqU#sQ^(62QiZEYHH#>id*RO+y1XXb> z9D(XWEKbZ#t>rfqqWY>wP?Pg1yUP1LX~~|URGmS*otdT;v7yLlbB1~ z*-4UYeDOE23;0adx0IkJ6nV+(4YMSO@TqJm-(LV%HNX2@p5spqp~BS3E4n;4)aewfo+=q$9RNSWDu_BNMa)8+#H{ zs;p6y)8)a?U{X}@ysM=ho&hr*+I{(jNLL;<3d^96UZwHC3T1CiVIw*wkByv5)d8UM z*@8vH&~G+DNHNa`p+wfiHt6-!93TsqB_Cqf!R(e5%5~Ac`JHmKVrXg)uarh2UP)LI z`g@_dg$<#2mhBG#IbSCEE&y-BWoYOFWfL-FGbA`EzY!jPDtna@#%FU2_@Rxd@CtR! z8v4z~L9ss*J6ma$K=W7uj9Vo^c`eotddPB?kRs{VZ`HG>F=&NAM0&>zA`;_;%EHBG z19q|0igK$vjYOR5m)GhKaH7|yMy#!kVXZzMa~liW>lK>3Fa!Tn)!*0SML{JW7CKYsk&JgsP3ck`D9VN7IFat`+9 zCkB?cn55dFkIWHx#Z5v`Ou40i+rR`a=W>;!LGHd~=56A}13UnG7F@wg1X-c#wwNud zt$tJCuUTQfQHKk?lTkc?0LsigdLtx>1mYKux(Ea#D=1KMg~5>l4nFer;pg#>feA2NaC^VO&}7$CV#AErs1O%jxegj$v%P%%x8D{c9XORIt`z|N{|Ll6VBY!UeBdYO2gDf0iv^&-Lkr|Tto zq0nN+Zsn?VoXoTBd&IZ$d-aQUi)nAEE-(duxzq+1ymWLE~r;AKB@e~-V7+8 ze2C}+n8A2o@iLoOefw}}ab!2Q(hh0#xRnsg zKxg7QbDR92w!e4OdjAs8_VLE0^!}wKy5Te~4h%U1fHNm>=0_g$J{%lG6vh|a$c}Tm zPdzN;CmQdguh*ZBQvrZG{;0Y>$e#Cqyq}|s!L)^XBH?3`pOhm$_#(Y5(@E>>fe>>w z74S&!1RP+1K7amtOzU~}=g&c33;pwLY@KW^xA9aJJz9@K4m+%UV)sY9kIVVYz%OQm zw=Q5L?m$oleJ$74z9u);HKCDdoP`4cPo~*WB=p_ScY`(-HNw1)TLWRynMz@97mdI% zU^xrPV;7xAJr4PaCc*=3^mQXVo|FO1LagS*JqR#n>9q?H&YMy1rBI}^7Nq@GgSbl_ zUrj#-N-_Mr0T}%boNms;!rjQ8E(L!s|Dsmk711%PmU&>+s+I%53=;KzPscaw} z$J<1?wI1HcL$^e*mM8UoS8A;_3o}8&nw(DFryIJMmn6&38Li1kxpd)Pbg|v<19Lr* zv@99J+RCG^gO0@c;ZPO!;oR1TVpCnzTP9kZ4}u6?ZcNw{vX6MKKT~Ljew3H6GeKps z+Deo!-;lW*sXyv#y-V2LuMVL&8F9Zn+k78*<+WqsA(d332^rpyBw~77Y==D8!RXd< zqeN08bXQ--2{~J+N~)zr#-vw-?I{k;H5iOzbK`we{)9n_YICHzGy|I`8Sm}~NrXy% zR$eMgZUu}AGbJlR-%jGWndgkh4p6P^_bGh0TQe|nW;DP?^c7CV`36Ns)Q%@ao;RVz zdeztr+Br`#kc@bql|2%R0w2;;I&dNzB7RWlW`-6kA!gOJGPbinT{gSgM3Fj_Jra|3 z-*7M)ii$w&ej@eJm0fzRncx=tp3@2zjTQ>2Np8SiYPUgn;a&!FZoTLLaAQFfq6Ub_!G~mXa*l8 zWu)qUmky&4XY&{>SCWN}7R^Ld>Qz|`wM19Hz|M_!+y{f4gw4EktNRl=?kh(c_T%`( zY8f4_aqvp3;yw%BkHr-xKJm6jVgiuOwYze;Jvsa-mdXq zEn1#_1l_DecO@a+4WP4gl*ExnP8c~SBgKAb&aNg0?l(j=*mo3plAo+RY~+3~eYjnS z*LrZUcu4fPD=fY5Zv_>JU(=d@@smiL(rdw{CStM4#>LPanT(PlU7=+`<=q4BK9{wH(R8bgvhId@BV2r`tnNMSB037;b)<~o+*Z5($7Z7c1rtaFxNy?JvYhY0{&Ch>ZZp9mDUZ}(>Z?gd08J>TBi%&xkEXUL%Q@RITIyQ zH19hG3?A%!wCW=%k>c+f!k@J#4%Zz~Lc7ab&>F)>?!j{UUk}&mv*&PKkv_1wL?EA* zXYcBL&Kl5PzX!o;O;5SPx^t*yM`1p9XW3+zZ!aDb>>QeXJ@+SX@!AS0y{pqj;nYGrNh1B!= z4)jAdcFaF`V^myC#hj~AY@*Ev_^}$=gm%6DY5eGun@QifLu4y5H+WjB&l}Q zD(ga_FR~TcWem8^ZA0Uo2*xQi?qqe<+0Ah2eStl@`nx+iT1DZ69KR@Tu{HVfI+YyTfu~5E4d}eD?U%L&Ui@Mj* z?Y|(nRiJF9#F{F0lqx}}fn%e?$iow+_Ic-qTWMW+FcqV#iA5l-QXpas(?Rb-zcEC> z@i@%PZ{^&yuQn+3eR}Gr3c5>{L;D&lLD{z4r@fVZR>4gB z45l9E2ebH*tLPEoA9%&gZY27cEY)E~#+N?Qau?f1iL;4^*)*r7uCTg` zRA`FAZVyXtt^cCuQ!r}7BS^9jNV`|S#p0$fMVA8d$Ln^h`!D_gN_Y~iu#6Esc{DdM zyB{LdK2$WDgE5*I6j6TD8SdHmcgBCIaS8vQ94yQty>9ff76wUyH~FB4NX`MYtUDj6 zA<1U3q{Qg=i~;@U;%i~pKCS{3$r%G>!waL~Au3pqGr!~F>e&m7YL?8`x=N)~)2X*7 zEajlMq0)y58!XW;P-kjHVBuDpus*cOGMPI<;I}*T3=wXnu>3ITUq7IbA)86-K;yh4 z4;a-p@8SikMPS&L87&IX7nTd0k4IAl>)npcq|T@%=ni%ogk)TmRV`U3iwL97zfoTn zK>k$RUN0acHLNg#@wI8o6qd&s8SE-H7GDJ3yoDi8aydYfMUUqsE=2lOM z5i?}XSA_#{hji!-x_%(C7x%>F${0}B30V;)YHAE+obXWl#KY1VPTB*Xzm&%Ye-5Wc zYlg-nF|zX#TB;2Yrhm>bmvkf&;QP(x0}Bt?uqo+ixjxA$DNgY`370inMJo}MCg`#G zQ$2JWS`yv2ZYNfX-Vd3(4c*&7PDA#*aJO1xDphOg52Y|0wDE(WJ0gub^k_mb@um~Uf%r%Qk(0A2l^#Fy-rXRVPo<*-F zj%yp(*IT)`6`+$M7!VHwQLi`#);Y247tiVKV7SzhK1`Iniu*84ypX{YGiHM-5iRmu zpqN)b!z_W;#IW<(+}E){MdblTYnqG7`L)b)CX1fnkZBc;>*>fhbIucQoVNJSQPVrR z|6Y-9e#a_)(1;J{DPht#>U0$PpPQNmXpV8>N=4f#hM2ao)|3tv&YKO%*?5@0!sCOi za~uY(w8_8s_|^C4u6R;mTe%PL`pHBjt_jN|g)0lXh^khutCF!i~!&Xk)@{Y+W zy>#f0;HI>#J@9!KT}ujio}+TxplnJ zRVpjmSQ}(lyUyA-4aoKhf+mJy!K6*MtCuuBKfPq7drTJ2Lk}k~o)BC?jwJNrUc52t zx`tT%kx-?p*xb83S|s`mx|cceW3GA{)J1Mb0VZi1J z?xg}i1Mg22k}%Cc&94Q)HS!sV#m?4-s_NuHx7vRG-4#|b=j{Z2372EqUaztlypAu~)zya@kFGhr>hUL^ zEqHAoU1?{AlOhIAez#M5p?Ms>{ly7q$tiq08~D1ULo;Xwy$bAGnqN>Q?~-*TkV0IK9n^}5b7ox*4=JaC13$Ro$aMkqA za|aqpxi*T{DWC67Lz4GlbnhNbpfizJKZ<7%4&s8sK?`kr{-6a=MoXqmPSoCMu&fr* z91Z~@+!xaz`aFst#dZDU(nvg(H`DdRa=oAcx)QY67ir1j*=8hDG(x`GcrJG%=f73m zWLuBVa59z+ty_J9DSDJcXksH&=s)@l|D#3UFPYKKvx}W)IJZ|}N^9fo6Bfo+v%1)I zK3U0cFQ~l_$;>r4ir4T>J-Z-`)Nhky_QSw5ULs78~rGKHYPM{(C~r}Xq4AKk@tJa5-7OFX_k(jCY_N19z-c8X8%D}>`i8n8wbJ0h>8;1 zjGn!e@??&mJJfo>vO2FTv}SrOxn?BLN;deV<6}b!YGvs})kWj>3h^e061-2rxQ3Wa zfEZ9V*cFK16^pC_tZ3+BuRZejFP{lP#q)mK!ej zJy8jd<173a3A)lVH`ZaDRw?q9eX|FJSeg6OfW^n5)lUVrX2$-MX4)1Pr+2j4hupwl zI6q5LTK>qutg!4!B?6lez5{cul`;$*KX9Q>!^sC^Qmo~ewuiB@& z(OVx_1U=G!1(0n1nXJ@A5&EiB9^Eq~-*nQmJv1inyXp-ho8<*NH*ie{Is0|;y`Ggk zh<(Tf+t^=ZsYa^Rq@|smtxB|-70<|iv0LLZG@3j*EC&3~Og^Xva6@?CQGr6_Imb)w zZ_>+zLek{BB<)H<=^dp+fRX->mIZtY|E7)q^ARHY<5pSBDNKvYs%C0p_^&FugRUfW zFg1ne@y4+5!}N};f5Ve5NdMbEba`nwBCcsbqePB{H&@+q4sz96EF>Rm#()=uC@U>^ zzOuNauPcrEx8c%3CKPgRw9E0LZ=@&-KH$x3^%rE1tz=MZ60%EGYb8#Pk|s7An7jbU zN#IR2gmLKQYc7MZM`TGu2kBR|J8w?8f<@_^?XxjTt;5htx z;=Swd$8qUh5)hs2GAS74Psa#3)gP~tr|jia`ivsYNXo~wHJ&<`!;3oBE=aW(Ul{&s z3%qdy3+`Wcz_9iI{Moh<_zbd1I+FWBB;X$_#JiH1ED$skPR=fnh!+0(A=r7u)Y{D5 zNrv!`*;yo1*1yVYjDD9Pe@rXyKAcrN09Y4k?{KhBVq;M)}xxICc(D z9SinUUB>M^DSo~CHM5DnR*rB1_H&Beb8SnUWX9s@3<_SsPqA$K9O&+_K}3) zG4YipvuG9L@_$qvBSd@Iq^{eU^KwyW!MyZlqqy3@)O$~z^EJWM+La6T1E|$RB@2>Y zHazT15(=z`;F06-#%ZzAf^Br8(UrZdygUb!n!p>Z=y+;Mm09l8Q;|eM+Jm30_2VU( zjLfO1&Ls{^0zyeavW7PrPPF=|t1`t#(@T!b#!k{~vRZ^?MP{sim-x;=M~^I++N|Zr zFUp+(Wc8VJIavj_y9P&!;tgNfke5xcZ0oLbsl4Q6{NI7`1(>K)HOZo;S~Bb*J!Brp zy=4+tkcR##io?_Zk2|#I4-y-AwhF#w(c4mOf$5>rcUs zG)Y_4-rLMuZPBa^TJo*~#7+dmDSYnY#}f>!MFp&SL@B-ebd6e2{^xGFl#p4n2T5t# z9rkRm*!Q`zoAg3h%<^KB?KyRA{pVha*@jaS?;NPMD#e4w8RnOu)tWC0DRpxTJ`@Kl zF_I;GqF{|am(x^(YFBT_Z8HTc*%NIHV)$H>Gk$FxAI`s>rryqA2S7X$ zn9#s_n12nNFKv#nDZone`cvY?-%Nvg_18z+4ES#EOtAm!5#R~1nQy4CuRlv#RW4s} zJ*iMvPyKY_(%U`5cKGX*Pay2y2wZlDToBMT0Cr{!7&_e>xpk zFQ7G6H7-Dj)Elvjn_MxLVM-nSU^8rr?SiG4w8auJr4cqd`I}T{kT07?y#Z77bw;CcUax&W36l@J ztJ=%w_;_nK_GUG{rZ_A`Fju|o5?A<>SXoi_(4Y4;eH?NOc0U&>J0kOzY3T~$Xz(2p zrrMyT4u5qL8brpB5_jUYejD1%$Wzx+R32w{yK!(qJp=Y0;I=6+nUbWBp)b#H3@*m2 z3+h#BaebxC8zZ_g6N24N568A2OE1r{K8{D_VQO;Jt$05jJgkyuG@6)zTT_Xsa*Pjq z36@)U;dQDP+mQ|jMZ6=gLqihar+?B8jy{#Vg`fe@q7i9bwe?I@h`8hudE zW`5wSONF&J82KGfk+oN`U}F3%Luu8=*;j+kEKDvgTK5$!!UjiB2CF+JSry7Gg`e`c zy7dz8?PQgZex;p5@3U-_xIA4+rWI|l>`F4oK}i`LwHhINo7@|nN*^ocoUEDUu7KfO z|JUG7>rgh|qLOYE{YtLkjTy1R2UCd6ZS}>s+Nd&DLn#n6t5B1dGTMu0QPlhNYW zGWo!T1eB!R6w7u7KbYH!EgfkV#6=uBLCk%lA$}u3GXFq)zuZa+QXJMwp39GQn(z>;o+$S z8@W|90Xd=fOzPf~Lj}HBY8cYX)3}uPnF|wt3zPrH0MsBQNed^>l_93bM&ZC_Mbci4 zy8ImL;8`Kl}@Kz&z4a-H+TE)`6?<|LSb3?uld^ql5b2s?^h@AlQkrjfNa-pm^8Gn zTYhc3FcD^6?@FCxJ>12jE88lL{{YtQN8_QR8s8PXDR@A~GW*+Z(@V zw>6gN{=&kV;d0A_-My_8w+2F`VjFU0`cy}fp&3eyBNs*W*!sWs5AeWLc?@eu4%5UL zbCj_)vX_^yw3~4^NEFVeVt13g$D26tl?4j+D{ZF5#!7x-GIMoq-H^GDV0Q4&k2Jd1 zx}Mf$u(t5eC-<0!sBRCB~PIJ4wDq!iw#DE?I>c~>Q|oiZV3 zXQl^R@zh-Ua_c*f-QmV2@NC_LMCF$Umya{*t6e=mR)yuP#{92;dT33gl4ccH2&h#8 zK1ob@&~Wq>BB1&`U6^6UDy=~%aw@jzBT84kv(>!iS>r_y^7 zk>)KjK+f}b6~Ap-R!z_fR2)fD^k~6w%2KW8a4LUC#`h*CHr%vCH64uRRp#_BPy#$T zejen{sIkBZs^^oBaC^lv1YLcMyzT3?g=?a7=vXJJ2#pgn*jfebHoV)gYMA)WWSmA% z8bL$H+gb)~J|X;@tj%^#&&TFnmD$oAR_O^%sG~m`WFSgO{(`O>7!mCFp16XWIZODp zUEsqY!fqCUN1UiEvYZ9TP*n^SgL0%tUe_E-e7!7c1!LidBhU%sMen!T1@1VdE<-yq zbM{Z8xi{2x!R#&t2?pe$G|CT$w@&BUsn&yy$g(hQoivIcgPY&|eL{CoVSrN#;)+Bi zlv9UJru<_R8T1Lm*8eL8@jpHHlGe`ceEi(*N2*{x*;Ti4TlI%~h?$`;<5v|X^HxaU zj!ylinws{AQ`!wRn0a*fkNC!NlML5KIhQ>cnZ-Mr=@9l+O){hS_h8T1LP()HR7szz zBb*e**v@HkKh$>2i+vhF?nWi~9)=(j(LRCoL&9XL(5U+{80ZcX*ez4Z#bsy@8d6dB zA5*_S8JBpgthE2tP@DbUE+zTIH$cG`_Iv>6=Ch*U_hMg6ndqQhi_^qRB ziNX|{`OUYN+OaJzN>OG?$fA>$lvoXu(GhQ(6PLBjQgWiXo6;#@#j4A4ful=_C^ND5 zTY6s@wu!O-q3Vk_^JC)-dV}}4iiIPT5X)DZ;Gd>Un>tFt`z$X=ZY16#$24ZRLt?EtD`7ft9W(+shGk?cJGzr-(B<<`VQBB4p zR(&JY0xqlaA9b%*e>1%y!?TMN%?SKFgTYAC{*=2e4$PpMugH|BFTnb8?o9A%uiY*=ji|ma zFdyL)c(iib4gbljnWrOLsjA?O7~K>LQmMUYcGH8AHOtlHBQ$)1U?Zk6lAeRg%Lc%7 zAy7G(!&~YPaxjz2m}4e7JGr=)dA0=^hwA70x9HV)|Ih(C4vY`n3+Q%xD5fw)v>9on4bcGJq5$PGQb!&A!?&puh{hHm!-J6W^7e!;$W*%fgrJ zkZ2cCL|imajIk|GUKCS?5jL{0(VSyD#*VMcp?5)!I|CnK`#z){ z87-5Tk@gwxDD4jt%9TtvU~ZzRrmTZVSWLf4+KqrB{nxmZ=x=k2Th)2Na{hc^IheD0 zH1qf4-Ois2MwGy@E0#fUt%Szs z=yk2+v&@;Mx9;v7OquU+RI7XFuo`j#lR0D>TGzN{HfMiTre141APtHF7T&?sKFt@T z{m)a2k`Zz#{7$?FD@1X2@Ol$lahIB%rJ&>zDXyXpF7)UZvz+%HSuALiCbT;)bLACpt|i_0hqbSf(qDyol_DLN~ds8`PwZ zM{Igkk(_-+Wg+dc=!w3#SfqU8q5^qxpL(kEfEdeJWax0_p&>HaEK$cy-d=y@_cU`c z_V<4D>Flk)M7huK!@|OPVd9$}9Qn)Bmc-Scq@IGKAiZYARnzDk-)VJNsOJXEnO_TS z<*mlk3w?}mR`+~uj%1BCyr2NPidtBdOF^CcX^@2RAOQgf&7?`O%E`PVO3<|foR=qQ zEJWov&J$wIQ>d;uyag_DF@rNbd%k87#15tkVCOH>6cthLH)xJN4^Q>vZR4qxS!o4` z&09WYR&EGfO9xq^tM_NkXfpMO19wDu)hxT7z${=DEfaOo8OZDb-bpCqQtfD3x);y= zs9KneIH|JOfCy}1m^7p?mRTAbPFQ5$>DxS=w&TcrSai^Ru?TB~?+lX2vZqN5q>IGR zndAn^$bs#L-ms068`9(yt7~+cFrvYc}{BX>DtUqZu>{MswYdU_8V}B~%zEn}^tm3iN(E5Rh zRHvRhQDr#Iv~8+&WG_HjUoseLUk&VY@R=eod+Mk7(3bBW24rnQT-f)=8b6tl5sXU0 zv9d{Y3VEXW9?rC)u@PlK+#Ipf3v~2fSx)F$GeV4;smcu1tMPCB!%kHhRVV5VFAyU0 z@1a&myG_~suszzM#E9y8kIH~As=OwU9!pnIQ~~-u_-kIh!W+Ck5xfP2gT|1ffP5#z z6|ij?QiN}Eqb&OxNUsa=@k8BeiR~_;6LS1Xs-wta;uJscH=!BHD#(etpu6xRkPsj@w_O3Z^%~)yO#=;COVYB|lK+JZGDjNm8><@$IEX=! zsg%O9kv*s0^+_7DbsbMF+fYvBupy$}LpIWyC3oSlRd8P9E;bV;XgAv2QcWpOD}y%` zHDMu#nHf!I{AIQ&l4n4whho%Ix@(L}xb;VJ`+?)jb>$vQCvvL`V^nIAinc|#V`qPF zBG+MJtXR;ctMy#wXSq#)AW&^-FWR;|nLB+P@UmW)+^Yi-=bjJ0z}%#nLR__tY2}Ft z#9~^?eT(XTj1{;6Fa)!>N-mkofRVv?h2=E-NnGk@rjDi0)t)FA(6qM#Vx1QPxTuegkH)+h0046ge4I)HvFv%os5;fdDpn%(f;02JQ~ z6~o8LxVaHZ!zG2g;B0MmtNlpC=O^-JvJBJo%dgcpe_C*0SF6z(%!d8oY!5S@PMG@Y z9I4AoucMC4B8^HV>h%ts!qa0!<>sqp@cswks`Q@QxV-JGV^_p?e|s1qr^lG120T1+ z>iU@tw#$M+N9HdJBvngV8Bx9GV`&=CZp^hVV?_BW4ed<_m(m&rUHObhd=Lsc#b>pu*6%txI`GqlQP z);7vlQ_M`9-_;v(z9Yr$>Wgdzk|jzyaN(f`sLKOOE+MpK#9B&EEq%H7a!x=MW!}30 z=Nb;AwkY!I!c&Q>w>)8M`H-lM*0%ZC`qfJO*4MXHL3S33->L*RW*jmjozEcp!=FDG zfBDHxEF0%CFE6d%Y-YRjLPU1ef!$H*Yvx{PV)6C_wdEg6Jtw^+V(lSw#T#F9 z;@pej37DH-Hb)GX_`lAQ%OiAyN4p<~1^o4@Dp-p05mFyc_W|u1Ywhmv#UPf7p{(J} zrZpKd(&E~`;R}#M(nod;^u0hrn#H=yI|07@KOkv_{vZdt7n`^F_ow61ag=@=-WZ=nio9uMHtye>^@aR>}9*GJm@$ z(p7-jz_TG9=*$gzNIQ7L3#~PyS$T%>q^l-CK>6eV@@Mfn+RU%8;UrJZKBT|#cEh2h zQT^#g(;NLDJRFg&nN5dBTN%VX%?YR$ET1Mgat~Q25|7wPZHiX4sMIZr#QAGi>9 z*bLxn_p(n+DenBau+`lm;JfwaC|LZ+7UNg__c_oX^R+FelR8QY{IT$%|w)=?5MCJ;etaW=% zW~_>6B01F#Q8eBUA~5~r5V`@6We~p!&O1EO4M=dv{MvI+p`tNaRbcV-6{!-N5-vlWDDM#=7LsR-!dcoNW}%_&*YOhEj8pYEp~r zcA|?*3OZg^MB7d1vhuZCl^G={`ur^Wczceb`{T;sA(AcfT{IZjJmZSI2N`ez>)9zS z1BOX&%HZq-+&)65R}T{G6tzd#3s`nB986v6=4JidXm_SjdU=Fa4idElca(&0XL07L zbAI;6HGQI5lUdS(@E+6jC%;4?v7%PioUb}-)V*v~T!~kTW!tM~z~6u8XJ+!1CwKLW zLGR={YY~EDQX8PXl=p^>gS^aDxdzZ70Bs$fAMm|bbAn_G05g&2rG>Z&UCKdkrp~cd zxecq_C5zQJ!@&t9E8xG2znF@2iTXPpqT2 zwFu9zF`5Yo{VMSBCZg+lKJ~SOH7+mvA-J@>)`IE6zh)sW?^#>sa{TFAwYc(qw|tG8 zNh_kk&6tv&9Sf#up+}etj2pnS;YW&lckFV$%Yj5L;#1pFSlL$nU~T)67aBIRd@V9k zEz&(WP^VwzyV00vXu{^;I*X*W#0RKIix2)w;__b`Jbm&jnfm29>u--+YKO8?RTt0p ziMj-S`dL**GfiA~hVegLeh_W)rttD<2K#I4QMxaqkC24_BkU_r#(ywBGep&4nL6rZ z_YPv2V*0#%xLc>c4il+17zmd(!>v=#IO9^i{@k!ee?+USH%)m?aj|On`NJQXhic1b z=5nghtyk8v7Ll877*A@GoO+1`gdxqP&r7yWMC6j3mmlPv)w#^7ee~WX3hW-IG5*$I zWwJ6xfc+2&%YS2kV`j5e;F(y0FpSPQ>ri1?U@>O0S2af9C#V5AHzXpX99cYpGC9$C zdX(U+$%_-1b<4{L#MW|FR*}5~%12W}WNp@W5@IQI@UZIfE5~@VIcww0q;^jb5)zu& zv5SX%A#&%s3#2dt1=5I?3_5ztN7edUN%pJ3aUy|{+rhJoGQL-|&rIdbN{@blAdE!Z zgzoe^1+O42)tAQ_mI#L#Ec(OO@t8>8SOIQITNX|NN$bG9f{-(O`3+bf;FQ`*dQo52 zB1-hBx9pI@pj-m4O$D!1^BSX#aTsJabk3lFNZm#YmN|ulL=3u9ed|rB8s7vCNPoX2 zV&Vw)2~uEu(cV9uXx3pNuk9Tc1fhFnHY{xznw7Vq^z>vwxez3QGK2g)zDXhJ+6dh$PbM=5jqhN1%l7T<>6thG2#I)3K z4gIX+z!GQy0dvgE5Z92kmHqSlf-{^0*A3xORh#qrqOGf(U@-?sIF)uw?j6> zjWhW#--qgJ=!P7{T4pcAAltsb+tDc>g$`T;zMYc0empifwwPo0o!i1rtJMSxMi8Z9 z>Iu5`PV(w_g#fd?_?OOWr`a98c+HKSW9}3BwLJmb{P1%p+K`2yzB*n(dW)A43(D%B zJpM0jW|L|Di$z^1hY*?5$u!7@gW;syRr3<}XlRDidZbzDCzd#PXxft=+p@K{=EKk` zu*F&k(KOwV1CU0;tf>O$uVnEF!=G+YnL#tK3A_RP_N4nZyz;zt@Ddcx2c1>89cDco zA127-qs8B5p%;P&?3CMGdK_IO#ogDm0y!fyB--hxYY%uREoqLsYc$zq6B7xYvYK>k zIos%+mp<2Z=^`*hbl!m7xwgKr*0RzssWkK}G3c?;Nx=-b5o(Jdqz2J@aiH-tvIQA` zsrsh&gPVD&zq5)k?^9_()s|u$&ySP~d>spvd@$m9V*%*WGQrHmO;keTeXwYf!NHg~-%^4IL+Z+4S8P%gJ9doD~B3S7{=btx}_-2dO7$;K_nF%8T+VJqIN_%2Bk!X%uq zrrjNBwp<=np!hVKB~>o|S$~Sm=ab3x-ctDd#p}_qwk%nnL)MK|`-^Bf1ke#gvGv&3&u&v_Y^H%Fj~=c+GFhn71b>j;fKyIxEZD$S-4i>~;vDXBoB z=t$=t->qMU@cz#&%PZ2Rn94uRZm5@aBC za{K>}CaHLO40{xNtl@q0Lx!moZ+_jRG`^eq7md|PICG-E+MmWM!G`5Jovm*E=|R)S zab#MqdfjqfA)iwfkzf05l&CM)abbF0F2c^{J)1GP0AaLFTRiU|=wEr^+9P<@aiTUL zuwdt|qX)y};&YBXU9{7Zu0vmtGsgic#4vz(qD{{A!}TYQ{x^%CF89ydQXgJ_@nc(D zJWuh8UdarX?T`Udjz`x;#P<`kgYqIgq~VN0E~Pd;_Wj$&7M+TH2$8FhE}iBNQ9Yd6 zH}pD&Kf>_YH*?{`lO?Q`2J@0%g6q(DnH@b_>$z!CZ!7VCP-KPo*h?r|{nT<`Uua>Q zvI+k#pE4QwW=}n*zVkdqbOr3$$ty?sIY|)@;y_(II_k|@cdJIC&K zgvlPvBso=^Ku%*^zA9JNDnEndjTJkVV!gUH#>4R)2c$chFQ^b!bT{2^a{<} z3Shs@G(VMnhiTbWpae1BsOc07Kc9n&%uSD43wpgVJrcvlX)Q%oxK~#5Ei|=>Q}TW zcjC0ED-LpokPRH}lBH@xA2^~OHmg~@m7?F5dr>N8PAfwpPgUL%-L|VJK3YcT&y<|i zL1@zOqBp?Y)r#HxgBEu2-2H@1DHm(RGK?-ai4bC!Uoo|6>Ijqh^+z*Qhok4QkFS`1 zy*A?8bwHYYmeHaIi)%FFuBBPqoj3Buq)h(`0;O9bU=_QHaiqD5W4_q%QF}27?cL`x zd@7b(&I)jOaFsBnwS+{vD(bERFJZ%gke#UxBK5)t#Nz1btV=t}G43Wf5n-YHqF=*5 zKb~c`Aq*-cn`D&`=sDtR_Q-$;@XMWbc;tUzaF3IJ*s?DMTYaY6L%5RpH(6R*A@eux z_b<%ZjHx{4Bh=38@!Boao7!muY3ZC#E;+5vBJ*PCNFv}T^g0yg-HroZ!W`paFW)kK z?Xo_UC)MIOD*K$g^T$;8dzqHNG5^l@s-B!W4Q+-*SL?=4M&%2nnXa^)ccHTa3q`@m zRV^e-?BRu_no*=#L2>ul-8E$H-#_r*vnU`TDL_kQcXkI`t&OnwE3<`R$hQ9`->Tr7 zik9=cYSjO>^P z9|hk=v~y4TsZfHYHe`h)h7s7PJQ4*la8*lQWaPgcc42xHpHKxn&3TdgUqO{2qg z7R}-WSH>n!0^LVFvA*P)hL2_fenqk43A!@OG?7|ERKrB!*(u~KoB;t=hJahH_bnZ- z6ruE-(~sv4*Z71O6hm(=POVPn$x1q$B~Vg0NKgg_apM)CCrrd^v%hNbk&x0vjwk3@ zQCdN&K~-h2m549tsI&)IFU;QQU3z@CNROU4fydF(sE1g2X%(PCh~4e2z-z`8Qx+)t z)Xy>4o#~u`^|*<80TEWHuR9bAp^IqkkSJ9}RHg^X7W!uiuT>9uAZrs@p#T@Gt!gz#~wi+|s2Dv>ddB@K=J z-%-&3d?yiZc5pshM%kc6S~R}T3*p1?a#b$6E_e)-2>tyN@azBNvHfpRMk=tJ(C*i6 zg2xN_@;uy|&n7{C(kjijh1~qBWsfH@I|aqxx6IDc_CJ~@uV|VLBSInugiRPG?e84pQ5NXy()C&l_;54LYVP0!80T)N) z^D}og(NyM_#t!3Lm8~R6i+b(+=Zi_L{eDX+sWVK@=ZzM#_o?CvmccW+ImXeRQ$ulK}KD*w%nP(Z7YaFSr=F7 zlX(jj>1#}r|7pB(7*htC;HdJ*bBFRK#t|X?0JLvT2l4X}De3h(R>AsTU#)No!_ix1 zxtR+j)G|yiMAfWucuG(Ax8D@7Fm*50MpG7?!I^!B{?I8be&{hlZ9Y+@?G6f!pMAnY zG)T_wJQDgg2zIj?p8Z5KPmBPqv)ty0DT?UC{)2)Z?fabACK_Ivnq!bD(jG@f%R?|~ zS|{pMQJK-g9`7MuV9PVWeuuU803XfC28WA1pnW9x?iDdV#s16C=zrK)Kw|sfScy0! z+0*HVVDLA7^E9Cj409i*0};0o`|1j>sh77Oz6%=pR`-6S(K#ZJAh>BA$to~`=G?Vw zy>n}O9A3e2?3hZKV!u!BtPrfle2g5AIqynk0XQfUqsTp`X9X;#UV1KHXc;_x#DQDW=jhz0QMESY+rZo^h94s5`W+>x&b2S>kNJ;0zl!)&WQ7US9m zbwhR3QI~|MF`)LF#MK#P5~n*Fq{uD_$-4n4WzX!u%~29f`k@k}w%h)mVC+HCx5w}F zIy}%oOSmL4lEn-n zR(>2t}4gy~S#-?zp)aT?a*Jt~rw&+AtQT%6QA z8yh300B|29i&Zk2t&MWX16ATk8Z6!l!>+~NkxXRO2+|}6)uHdqJVKhq6ZI+rDSxJa zo~hx^)n0}Obp%}T1FwUwT%R9NP^lCKS2Z?dkBYBFbHATS9ZUaBdSD3-yXJb>Xa-J6 z{njjt^i5afnCm>4iMqC7)nMAl%~rnA39;;n2P)}MC6LnXXM$hYS8jc zexNT%dv&HIs9hX(f4lVo%@kL`HEn2eD4h-J|BmJ&2jgkZ`u(BhL*K9jmh2eN?hL2Y zJ}`or8nZxc|FQHP*dO~>9qof+9mj5xu@2UrD_ixYrru1Wt%idhPerjbQ72@bb$+>- z=+_dS-Rami$Hq^pl9}-3izMm zeYo0>ZXjPP0evnV``GpQ$r8FjRD4YS&_TTa&!z>8hsWvyIb+bo9K&Q47xbJ<96RL} zO$0R;@L zscya;oxW>Qu|P$8nw?H&i)($>+V3N(J}zQ88W}@8`%hb0jr_H$KefEAJ9^Mq=Okq> zk`Y8x)4}cqIWUn2S?v0(#=_Kq9D^W zVsTotiH=LG?mhVt2q~Y#nvH>C2U78O8}yfo7=5?%6MF)>kIGw`W$@-~X>;~mPZVfG zN27L!&W#DPB8|Qnc}E6rKR~Ju-niTD$QGui@q+DE7!Qa(8YSGk8}9-UN)eD zW9lZvW(h+Y@oL!)`F;*n=o6e(VrJt9kS}dPPXkFVnTRJT)p$T^Bd7`aIO$!Vd7ncJ zzMy1Y8t|5PTJoNZ=-z5#w^KOcRSnd7FkiHOB7BPXansL~=4fL+tzpEp(MO!xoKG3J z9Q?u8F^nc=@Pv;#KsSYn1BSD>wU@Zjxg8rpxsOrq6FY*(5txX5rPkezddHI*D@_W$#WzU?L(b zK1=q>(_Z{;!hzS|jHmvlq)15GfR7Onq9<9SNy~|>f?C+w8w!P@Xn9~vUs;2g%(h@~ zY?xA*qF^SDGttInFKQ_Zc6F6xeNeVL-`wjPc&pO<$#+4QIPdv(gU2BS8`BtlIsJ`3 zQ-%)u+7VMY0~JSRBg2fcl|tJ|{qcjP0%S(?%fLIvEOGCO>K>NjiJp2xn`if$>(P*Q z9^Hk-CpjID2xe2}U3Yd_*3i5^-RIW=X#fAnn)$!02J&G+=~n*KrL1=b(!c#i#`;V2 zO;O@X;9iGaCl|sgUvzaxay|sUH_SP*j-xS{?Rw8Fm-r57aSY^Ioc}t*k#DMhVfo|= zH!!Q$rZwkOn302^YEl=zI|EqMamB zjv|&WOMyd{-gvJQ9tqP+sX91qqJ&J~+6mJnbnfQ}-{Q1=?*V~xIw+}sQMGkTym@g$ zH=Fp=P?;6Q*&t#!C%oq{D_c6jG8h5={S3)A?mh_WD_uvhnW-0QK}f7kdx;@NXz6oG zDrXHey1F#cD$A`EbGgi!(0fC|k0)KlSsxyqS!mUh%IID^2{@?C6F<>DR5`Ou3@~Pw zUaB0AlAfD>SzaCP9D`LOh2@~;n-{&m{l^kVI?YREB9 zt4*2l6f=vnn;#!jnZlZNWdU;=;=0&4s2?1W2qz~U-kjqnW&U3(g+)tOaEl{Dtgt3WnoOslD!;m~dP?zL;0=ytUFYj9=C@GWutiw>h ziy;*iX;x9x3osm3B*W-%`GR78PzUVPIA1&!F9O1k`s{fLSDcE^V_%kOdB5S)?q!X9 zuijGlaq{gn2panMq&$mfR%^km^FtS}Ni?@@Op_K+dZ}|$)k|mMsU=SO0BMi$o&w!b z7TN#tb_No_|7L}RMso{%PWKA(<)6Rb*B<2ICU!&qf}!VmxTkgam1JFfOTPlNWUBF3 zNXzXg25sL={_Au{UQEbuGOWf-7X0dsc2Buks)h+D?fmkOXjzXw7a70Iq?ft{i6 z;HAUlvYUVAI~G$@|BMsPwVr(=^Z#WGQI5w&GJv{UUlHqD&rT9JxjJ;Kqu`Bl~a z;X^XxE6j<$>SVpHmTWKEHN?SUxnxOZ2!(x8uLuBT>WLHxAh)uz$L3ngy^7Q zV@Re~%KLka8B?yb#P+GOM+{6rO5&<4p8f#oAs6Zs0g2tY-R%EE>8qGgbZ zN)~RnS_3ElKl;hn9BoE(058|N`~06x&EEXqo0=hy0OK{>H#O4>3zPs3{!>4BbX!SH zhr8bK|JFaAdFr1gW=}ujjaQv>y~PWjETFs@M)LXf7-~;@2 zDjkJiCuYy4kA1~ad<}Ai18M09FnvFhqhmfMO!DSmZlU0pX`{-r7aMD#1#7*&tvX9d zU|;WF>Hj6O*7(!o=o7K=Pd)eD1wBoZfkYnn$E}#?~ylh?Kzx4}xQD3lsdWP~y@jbZ0{@E?yb=zflY7MFfDK1OE%WCFYARRkQ-? z{lQCQjE2~BQL+1TRF7Wo5T<`-qYzKCn`=C0KAPuQVcY4wP$=yys>DK3<<8GlMErkdE(aKtwmtFg`m3%`*miN9kYzS!dCW~P~{nniNLZ-Uq(1#`DaibvX4(fbz zdZ!+UTjxeS^6(>wN9V?6!b45pW>%?oScrYFZ_uyQbzc)tnA+y&^#}KS6!nJ`-(I#` zKf8Ik_|*~J!`6UL3ZlVF>z_QUO)bFfx&&9`H*)xiKX@%Bx%v@A({dhTXmu%TmB3j|<<-u0pP}>42l)Hq zuN_6UdEfpQWp4o;N6>VKiWx0tW@ct)vY2HtGc(#^mMyfHnYChOW@cttOmFQk$xBZD zyqvd3TFuPPYNl(tZr!e~s_rHF3>6Af+kxkU|CHAlJkof0x}ScPu(OyXBI}5tbXP&m zzp;EC?V}f{IM#X8Q~=p@HRfALqT3^3Rn(R#LdT4Q{l>DC6?fMC_;FHTOeWWyR1pb3 zMtHHKZMS{hUt{C>p~6fJGYu!!rP39CJiRcZTfsIRvVSAe5IFs9yshxDK4ErRMmo*D z1D414quuuU$cDr^dD3iQ9F{#e(~f)YfGZ!uj=qBGtq58L4RHOqoAgHS%6{UckZ0g( z{7FCKkkBjCcYXH}p^xdw<`{P0VeyWYgH%2Lf}?~0c<`ZlIOYS3IosS+9Ih2oKqWgI zNfEWTS)@$Gh3A_X=>3BBGE*jzfWG)k(u0Lj>vd&5#JKzXA*K~J<%ejK2>6A&c&dq>__Q~sF zewed_ggo9=#6*205aIZIF5oLbK?l@Sr%uBmQ zd6!bBx2JLKkIcO}is%h%9XwRPdT==q7^I-OaUhEWk3%n~qnCP+4>@}*;dJ!eRpst< zRy|*$18YH#)qI-AU28^1;xA`@EO7jsxHW!?5Y>Yl5;_E}{HL4DU|OcaQozk_1F%2P zsOKv6${Wn*;iuz!EeRlBu2F%iCkPg|K?+KaQU=t#|GytxAAQN?y#p1r7y4`!zf)TB z=QsSbcjQz3Sq>`Q{O;9^cSY#^ZHdLs-twq<`{K1V)C*#%+VHdBo4zSebO-7U5TDqpW6#QFjC_!>9GC48oQ|Za-D3dd)|t*VVX>w{l$_8n)bhVQhv?oW=}<5D)G8of02t8XHNQ3xN*@RnlN zD3%{5TU$haol-|gEM4*~?@g0-YfT{pg8gr|LD^XWAMZ1e#3=mvcJB##uO~V^QqLE> z>yFiZPBufaTs4S--1xCM8?)wnQfDH+?<;Fspb-F=;1X^mirYhXd{>qMjTW9n6wutB zQm;isxKU#G38gzkRpoEF6J3{`ul8ni+)v*!$|FwcealN|=5!dNjhhe7Ybd@be|fs; zh28)>%#wl^f4n~n?we-{-?u7#PU(ACjr5g%I}+rmnouHVIe!@u|BWLey8Ysjv*CSq zp%d~vP}ywwxjF8`77{8u7I8E6>Cq_`fuwW6x9&Xl=}*^zTz$~7y#A%HYNERq5KlRc zkne!hu2b+isqJ#7B&7dnc*joPSA*xM77q2w5!6I*)#3YW!+^H)buAXDi!d+;$73qM zwZr)!GF8R#^l}Z%frbqM;D2alsThdXQadJgG?_Dt3z7M8UUnX%HSD_O0yXaLyu*E}^@pI(>BuofFOqhsrU)bX{RW z==1GvDn(&?J7$7wNOBfS5PC7(n5*UxzVhA!%+CI4h2h(fo{6HBCfYiL{Pp%IX)zv?hot^a&dzq&e>#`M|G`2_O${`fed^ybbA^OV#P zZreiyjn^A0`XLDtfN%R8y&V_AAYS&lX9Rqnd6Mc6sMmKjHbgLI-nU0JHXGD-vjs%% zcC26kk-xU?|22Gq#Kh=0=@}<3>n$Wf!X(p0h;I6Sbm5QS<4KjuJx^b$1V@Z8EapQX zz%oDvf$O6p_f^@I)RO(Pn-qb@Snq%TnQWjT)}A>yPzyPQ2O0kvR7Egs_Zd9k=5L6a zCYuZ*qvb|K4)@T%*0y_<@#U}0B?YaxSUrRnMSU-qU}?!3A}-trYOO`<{NnE5p>+$PAZn*F959m z1%QXQz2k&H>A&B34%S(&qqv`ZYVMEbSbmkbYmp-PZUB_+l1~@z`&B& zi8Owk_r7#Q^*F+d>)vQ=&s&5CkKq#@w`|-UFW?p5eu4-#+pO)k2sFdr{CTo~6&N|3 zbGW~HUg+ymZU&#-nMgAUSSohiR=5N^M;97~fT8xy4kgHTwLlh4fzRpsV6}4FBPqr{ zes-VSoht|^ZjNQ0h#iwD?~-}mm;l!DvO=l?ekLaD+i(E# zXH{Qr7eS7i$K16bf%G01pbIKXA%`PzS+KcIYh~GjbS&8-6qT0p&(osH?PMM{OS+-g zhv#dbJO z39lh|d&ym3@$kdcUC3W>MT9!advn`IQS3iy3e_NMHZ6S!pE7n0O!;p>cwOpdXt$g5 zFn#|4>wIKfmpg~8ARWhNPq{y8f#UAq;2k67wZ!^8V>w$bp4bCdq>F!Bx8RKV;?g!h z`ae&e9E<@LFv)ERv47EA6q+D5#8e$*iS532y%xqvkB8x&ViJ~qC~zefmWx)~ zRw&I%#A7fepZp697?{>tqum$8Q2iEZ4<8MZx;uE|_$q%%rZ=+;e*7_3Ljwy--w$e% zEQiqZl=V%*FFVbOUY@F=(4ghcmiDMwyeQ6ASac%iUY~D-)qr|C)|$V{AQ}{?yIdGY zz24)XOCW%lc85DfHT~t9@4cG8OQ&t$0_#3OKNo4N9J->-+W~6K&Z{S=D6?Z(pl$7n zKCBI5Zp!`fx^lozOHYfw^$#_*kYbDILgi4m&(;YOI!h|BWLZVwMp*BkJ?w-)@xPs# z2fRwy9MAfESQhMwJS2r(C2avhUSPz??WhD9mN*E6B(PC`jdE1jZi!R(-wnnK!=QAN ziowV`Gb5o!AuLW>PkHrKs$>6IRb*PLWRrX+4MB0Q<{(7&mgnv^BAsTeKt_OmUo7Ks ztMDA8RVT?Sc7G`6C0lp|vKf+H@*Ylk1i<1XH8S7@C$muis*1CP)sy6srv5<*8=Zus zr^Y6gaP$=thzN^{A?WVapLd~+=^^sEYd(3N%YL@&(tBb)K4*$v%LBUBgEP70e<`>y z`SiMc^i|a|aFsl~e;O{2#!ToeGHcgYQyvNM_14n(aq^=ZO1c{&sO`QK_6$#+U05Z6 z6h!EhtrG_Z@LKoVk<%|{5aoWVPLg8k0Ti(&%3z_!TK=@Ge(=|?6t1cjSsC7Oi?K%b z)11axr1^z(2!1H36>-251Fx`+V$_wJ?yn0~LmC2|%rZgR_j=I`Kka-)^K4swB;-f> z5*U}v1YDYze#vPrW z&~|o0>apVD1ywSO`}uMnwlC*x-ejeqY&@09T9w9?!RQ)$OEM zmhUxkFbco$3dPi8-H7fG>AUsOC}T>telIv-u! zs=i|duUg)8zLT%KJRPYRT*g2$-Agm);VeflM!|{Zc-Tf?>F56OR#a4;*7g2y+ni>o ze^a)m&DYC#2HyD=hs7rr4TUCcUXMS(zxK|}rl?M#$-_GAIaN4cbx!k17Mi?pq>i#;!Da z4tx!8eYe%6y~P5hRDr4mk(nuCsk@x?d-wSTg?rtupPF=2)rCWt9%4>$1mb4afRZS? ziKN^;*>NpqWsWS^RODH-C5$5U=^A<{sh3|OEU4s6GsATim5sGxiaaraO_(Hq0TOX; zS3&3~-fW_8ZZy|+g1y;?7+}~#nY)bwQ57NPNb-B;(%}bI^MJjjz06SyC`D{11^0&f0sAP+j-KQ84V1?@g zy%xQf(+)RI&S=VyA9xsxDY^Qq$Bu)Z7FsCfQCq`xjiRP)AK~u<&aIS0~P@4 zDaWvFfd~zxRKne8(=u)Xv50+DQsUJATqHG#fpLBI?}v~fT!uBy!i&dc>8OBk!HnY0 zlbpsuu=!x%w`#s9!vipEfGC_VYBzk2zLB%8UHxNU^fF04{9-Ww^zz*4qQ1PL;WP(v z@#Kb`QMiM+Sw(780tClWIIV3s0z7K445`I>@TDeQOg97R zfRPMu)~$a2PYN;AYi}nH+X7ijUc}BX-3-=m4bo>hh^x=Fu13St@R=Q{9YcCA9Wvy_ z(yy}8g%Kb_2CS7aE*a*>b}ZBVKYwH0p-wAo^i@?w^;h_RGld|qPuuS|7z`(1^QJH5 z85)IAEviV61)$?+_KI>+3Bl)t+3F0(9*lg~bpn9{Q$1y%2yc*$r=xZ9r<2YyC;Ez$ zb*jA}(u&8#BrBa$ZqDDzhSj-W;$>8CRP5^X8#{m29Q%IUYoYk?J=@TiTI!Tim>ot= zlM`1fdcw6tnuDG2JJMeHeR*qYB;6^WJF#PwuF9A{oGu{GJ2b&Fy}ik+^3~)sh*@#X z)>hl@QB-E7v~vUC*;MCb@z7)tNA5}z!v{TO9e*2^uKkiWsLn>dBgQm|;BryyWZ|vN zFW1(LnLxpAsewM>LT@_4agOsR!e^4fywTCuW^UB}?t^+ka`Z5ZKmEt_yFn7Qd3SrF2a-*Hdh!Iw!Rgh@9ZOp4=3MzHf!h$uek&iSH>=#2?b!@&1^Xw0}=-mhEWG& zvA`^shsSG+HyM^XlQf)|g?I&57*-=Y7Sc5FOE#y|4r;zN)qdsmH+pHJpttzCl4-S9 z!MbwNPiin7*z{IXG57t)URa1K_(FYI$SlX^LTCT@k3Z#ftnFAkj=fO)UpAE2q`wYI z>(bh~s~5AVa!{ww?c~DK=`jkseV2gJ-jIiEsiGV8qyJ6)b<(|t`;5ExyLoNG)Yoe_ zBX@}@gVDY7*_9cEg6V9D9WjY^%F73I1L zj@4RKdw`ozj2{0Lc8gexQ5r``152?ks*>kc2K%tJul-9qZgK|WBa1id1|UJls+CF( z{H2jMkJEj8F=e4{?RLW88J&+9V?RpT}f$7c6Wp#qE#b8DLcg(jcWTF zleZeUyiJ>?&@NjfzKKLId0QINKGZO;0@Yrc1OT`A?|sq^4pkIknDRcjeyO$ynJ+ep z#x2?2qy&d-o}ZVZMRO#m_;JE~DAU78vFQFSZGL>DaLLiS`(6(fHzQEJ;biVYgEMG77++;x?CD0d}+{zX+T`Y`CE8BkChILP-`dpSe@D&2U^+nf&T}CCJM^`s2xPji#o%%`#{l&$ zjZ-J55WvyqY1ynoEo&dHp|pvOt?3LfX|f4r8~t}aJz1df5^Hh^%>UJG4aRi7SgE9- zwPj>#OC9p}!q;M8*2W%&nCsygok{~bFkX(47p3Ksr-;S-+Kh|E8$W{=U+su54py9n z`XebJv4XUgW8QfdKjmsG)bun0q_V{gzt_^SE8c^h~T24_s!bH^d;4DhFE3zOhOpKCr$8vWR z$0oCg7rt3boCgoa6gGgJS1h@A3a9bT(GsDrk0s;TK^;?Bu4HXfzKg%H5W}r|y;}r3 zpvsP)s4n=cl5;T8vNNjG_4yBwZ-=&Xmxm@RSy&9%f_-E(%8pm7t08Fjh*+Mb{{UDz z9$qQRg=TL28u)f;n_>Z^=WO>WKoaHZTE<8<71dLCa;S=__GCcpn5V*JW*2F*p0dca zH7N!ATvLBTsKCjHJ6Z3P)NrW8E4P@Uh3QIjj-@X>jE&AS*pRnRCfO{* zA-NAL z%rxqzmlS{|DOpw#jzmRgkt4lhBdGx=SD>bTTR6Sb70MWmydL9o)t+YjeD0vgW42RkD(#i54ie5c>1PNVf8du7y}DJNI0cpI z(z8w@5dR3^DsRDWSt+u*=ndsx@~eQ`f``HWvw(`?2HU?;%3s4PMkh3iG}9sn{ESb1 zB9Ad;_eW&|E-(HUU|>+?6K#UMT<+Wg`BKd9>bjr$+Fp4Y9o2!`Mc)cqYv^bqGc#EZ zq))2qtmTU?v{QF+fYeXJ|^k#THN^M6_Zh%5$wsmIfrQ4ev{d)D)+2y(*; z17~nD7W89_yTv@F9h_pe@r<+zxQBO(u|3qGK%LUiFX>mbrM2b{%7xl0!tEXRcgN_H zuV7e9x~~StL-ncUWD1p@Hp3A(^z3}u^%?LfWJJ9{1;yw$8zf7trVVNAYb=DSx2OsZdJ8CSNU!Th9JIaz^o$bAdv?bo9ZO z-thqqgvnzJz`+ghNsqr8U1aiLbSGS)YrE}#K;u81Rj}i59fq8J1c{$x0j}){ zCLBZLmW+AbKLpe|BE5HYZW2I0Ai&)qT-;-QY~!dV9JI zzVZ%S0c+uo)0lsRecn`B!^xpmS(p;$9zy+n#|m$o1;HLR03nvJl)&t~hkJ@LU)=Ev ziVeURI3P;t6omM||Ej0>5Nh@X-K+Gcui8uYR(+mInmYCq#B9;LRM0Kxe*)appFY_JDEN?@9CB-S>0D~X|u$Rpl+D8g7Ty9(k zL{Pn;aoku|h8D12A_afnl>dXd*H~cY)&Tc41W48cGH!Rgp!a`ni3*DCDdVNpggj0l z6vqb|qI7dXzYehfMm2}srlX(uaz`CkUGwMrcX;3)Vz4O7zq7i4?w63RafsC*AXEO1 z(p`f`iWbu+4xG|3gfUvaPx~dz2LxLfRG{Bfmvcs)&1C7^UR%vU_qoQ#K>>OBLD2Xz zNijvOf3Y4l)fIiRj)I_3L%^X!1}Twa5;Pv@;?x3f{$cUea<_b|U08D)NV@lg1FwK= z-Lk_=ctX0H7YyZauyLxYPSF^}%2^u}8Z&ra_n!QF_=b*{6EXl$Kh*f?Xf&gB@qz16 zls3RLhiarSr)h7;3-OO@yODa@Aj031f+j(naygXZWN=%qi4f`c|72g%xM?X>8)$UM z-AXJBL(}+v#*D2urbi=*apOj^GJ2$XiT`GkS#ApGV{7I#8?>A{30oJ^;J@7>TRDA^ zZ2CF#O=f~e+LHv*fSD|#Xhig5%-On=Z?EodJ9u5PEXQKe6>Ap7i*|zPE=4N3Au-y5 zC$x*dhmGeNA`uLb&33j_28p}|#^?azbX{P=dlW5`8r2sC7r72;E!J()Oju*Mz zIN6LDU%?qaq>Hp{K{*#(>WgXA8f&tj5z#*Rn{}g)NSL7twxAx%rN^pY-06TFWZmlc5$_H5t7aJ41r2c$%cgv&2kdT#}5j zdbJgsiED+^%Uyl7;Jxgl~^STcnI2QDNRx5dFE!XT2k(jKxA~ z`z?*WBODuW8hV`wM<;pFYST(ENjQpNCkT(d=@6qHoDZ&^7FBVl8WMif*|)&L|_q}!^K1gLC7mv5O^uC;8r!|QR9Tq0tjOC>Sfc%JyUqUa$_@yN$H6ckJpWsGNpT3wylL_SI_N}0Sf^U2eNmU*J zTAbfCv7ZL%V8v5-p7sN!q_qVZAY67*pW?353V#yB{CHp}-fx`15M|-=s=P~bM47C! zyUTiWuGQkGwr#+rL0`zI{*` z9mJ@?tS|;kf(1zg^7$F9oF6TEqe+R@RDRe3C)hA?M5m1%hk;(9r$k^piQ()}CvZ+1 zMg(XG#2jaxhNZj7L7jLcn-srg*?)UB*}q$#`BM&49e@Fdo za}Y}m2-Pva2o;Su(xN2}CMy0R#5osgE>5}p{o68P6VAX5F{m7DciuNsiAr>VlR8+Z z-Z4t8QCOSg`k2B-M^oScl4q?a$%KZgkf=x@L=$voPxO?2zb81_g~auUFErTw?*&ua zsA_t#!A*u8PY0M9ZqE`nMUpQ z_7)xg>B~XgeoB?GiwP>j>Zp=T&OI{ifa&cuDywmBcJ8re2OrTmo*|r6Ov)T~N%HX% zl{rB0C+GPWSO_Fg&q@e%r~>FOrv`o|oT#dL*y6x}Uixk?z&|sJtI5%}PCm^V=8$5F z<-BQHss`t;#a4E!)K?J*-r}~|qs}B&^4rT(;unb%rQRIYJP30Rah02ZAc1K+8|KZ$ z@)lzJnZ`dv8Ui~dtnx_`C;>HgB$_|`doHdH$*5K3qXY#w&(BR~iS}$%WT+$b97;_9(j;& zRYNObR|Rs0)(fEgO_&hu)&Q(2e=+IeWoUI({o+IDK7Tnzf)^CVDWOkS_~(mhp8_>3 zfYiZ4w-U2z4k0q?MJURopnx;AiL1fHvD6hAQDrU$LZQ|@o|Ix75g4MOXBAqjgRr-b zRI2vY1N+=VugiXxDGm1`XXL74SHqPk6bu5W&*q3}dZSM3%5nS zSQ*z3LXw~J5vJlAM*u8yr?)Puoys8-ToD5_|EinDr3-+TkyRFHDM@==kD)(O1<79uv`Ao`QXUFoUo1GCQ%{(Vk1gWP^h6WP+(!_x<;_F^) zT2cNsJIQ7if?N!{o0CBR0@cu)gfQNd zy=>6s+hX$OSmyb2Bi6#B_?lb{M819N=kY`mg1xcFV=ro>nq@;_(A7K3P?LOAJhIE@ zddA$ygKuJ;MQB0|U0hd@<&32|mW1L4VABdD^!0$_9r-@XxcM=oZe0PpuZru>pH&@T zY(*sj>s5WHDVd53Gk}a3uXQ5}Ox2foiZ+1b9%SX3LNpwY#dMsw5HcjqP<;$?USUHh z4a%N|2C5lK?O4!*iyg@R{OtrBWRz+{ZW)~Wx$7JU{CAY!GsbK%CkUwE0;O2hU5Rcf z^*bW~C*xcL2AG#ANVF7IS0;BEWRm;Ydz{1L`KyxqoiyKjAd9B+qbBTcFFWos-@A8% zM6om`s86jR!R}uphx^#fh43@Fq^|Krw=)cW?wV}or_bSfNc<9=vBEGYp0%Pw(9kz? zajCcS3-grHY1F^&1@9o$SJhW5;1rU)GqI@h=Jha`X+iF6hchgWrx%mQ=O=x)RDtd1 z^E@Qr_n$!+NYRfoJ=*F%Nqih>ArT-)3uiJeJN|Ir8ep?pH`V>voyz_OJ;x<980BQ0 zSnQ&iqcs}6BA9@nlgw8S=;dGiGyV2>B_N6DPb!p^DqFQkq(|$ERx%2BB)o~xAHp0E zE#0^7ux=ehS4Ov22V3v)mV7g|e>v3W2Vd^EuEpi`Ff@4I-b|l3kN?-O;@%e~?G2fM zsIROFfYyjcO@ubNX=97~1M=kjQt6gtbZcV5Ow$#VK~RuxeNavrpYGj}I! zS}}z~9U;SLQ!`yj+1ConE)NZ>jz8P$Jf;eidy!!R!Q)v*{wP9uP7bCW-_LFCPSm1& zFLl}|7NBZL0^YD2@JUPv!7V6W?9LU%C_6Wl_f20&QJe?k2|)ZR9gTrx`$=lSsH>VZ zS+y00Xs_{|hITACLP=Y6ld0UpyIr;8nybcVYVeQoEuUvRCH;BER3m}js^Ji$`bc)H zL9d7KXeq^6*qYzvp%-q2wwKb&b^8^}`J}Gr_HnO&MFB{&9de+qH8z{?GTNVtIja~z zUYX<{(yfU$WFL2AfO3a7Ox0Xv3-zU-ouU8yTZGn3lg}=<*XI%cT0Z=C-`D<_hD15HNq9Q9gPp<&hVF5I@1c7CJDhUyMNf1C+ zz^(We?8R2fR?dI8I|P5~#6}j^6xkF*B*s)5Po2w(vqi4(w|uZ|#EcnGWY0rJZWEw~a=P}qDYI^8>P zyw@MGByXhAW@b^C>`LO;Eid^(P%`w@X!A@0@gKs2L-=N1;MSl>#0SCwW5O6bqO!AA zb2{fuTUV#Q9uKY9TPniD;sPUNrYVU{0X|B;1grRte?TRTEaxwbSY9f_=Afh#iq-k= z-_bOQ>m%7t|DiiJDbRh6LWvFxLsJ3)Mx@zAvYfAmC2AC`EC&vp1%d*B0Ujd(xhGTnItSc}1E!!50sng1 zGJUf&c6N1PGITbxb@|T@H>0PWE#u$)iufMuK4ygQtB{V6nGTg%F`9fu= zu+x(}UgqQ|UhONClKj&DqE4g2K3-UWC0@%031n!I_pHuHMe{65KcnB-(RMoRkbefS z{oZ0;Fq@8N>LZ-DlUaD{Mw&FoB$WHcLmZc1PuF|teZ z;lku@XDj}nZ5Br0_W3V;hc!<0@GIzZA(T-G`*W>i`Z05QaI465JMcv?0Cl8js$~?c z1l*Sk>i2uTH%HQHh1J0s5OAb;<-;M=shNB%rYtXAXNaymlC}P|`CxW!k+BAxRQhr= zGEM8BBZ;eLF+F-!OvhP|5gG7nt^tDuOsnk^Bn!9aU|B+r3vPX@m3Vw7kjCAJ@ z>9m+(g#3O3#WKWtT{r`d#c2>a{ZwfSJswYc^_;aOr)aW)Z>&c2oxHO)6(JhkGvmbN zV&nSv_4(Ds>6n}eb2fea5-Rn=@m%&3$&sPpGv#X(5{+vG=8zCZ-g%z1M|YiFSQ_dV z_JJId%eoOx4oGUfS|XyE0Ky1^yFVxx%B{%^&I=1Nhw?(eb$gf(B99reZLm?(k8A-M zB}+Zry6|~X{+&PLjONEP;+p!y8gq1=CpgHig6#e*-D2hiu$#Wor0gM1=-x)G&j$RY zt)e-KQPA=T0M^-?^P{K}1y1x);}hc}PD7;ES`A)XaSHD}mr!i{Lb-zb(iWu3WUsoZ z%x1jwt=@KI>((Fj4ArmptQ~4qwzj)%OaF}I?uJF+b&+>8hXUVVv6*W9kuMb5-*yWW z+KatD{*2&C7+BUXo`_^W_8wac8A_UK=ZuDnNm?m6!cRH&(UqT2=;R6MhG5g!karVf zBkAWOJkZW!T(q2*T7ANLxGAk|V?Rg5ff00HiQhdz9Y?(4tuNC27w z;{QP3|85FcnEz*i$o4a%gkJ?;p&Z&5uY`QJZG#qBF0VpHnYF^>90`?2d3`9Ny4aoB z8@~?Nn!;ByWGPXi-Q~fV)<=#^+?y$0=^i=&rpG6L&5*?7P6$eYQ0#l(xQPj_WFU{4 z%EP7j5mdPN7ENuRYgxD_U#d^ZIJ3x^ic{~V$%jVx@_{<$0ENI;#2W`S>ct<}R?+&) zVR;77+pBhgFST!VYoBl3QJkl1Tgrsr(!Ru@oWH`V#O|N_8GtBX;yxd zKd?a-0W9MAUkC(#W`*egE)bUggFxoaMZ`HbLWs}Rm!M%z8W1x~d;fQV(3B~e!X`8P ztbz_(nZv%d-PyZ+xrUG}8_SPMp6QJQE8h9Idx-?s zxT~1Ze{7xM*3RHhX)!$6Q4P9Qk{ov(9187o8LU{pS>9hJ^l|-{0zs_4?*3bzqY~Id z$o|tq{)ch=4_)|gyKMhMChhT4aJ|e35x`EO?A)BCCT^OAh3bys7dUMe;AkVKCb6{{ z3`z3~)a-6pIzvFb}9?B6*bsTv7ES z;#iNI#DIGJxj*6VlX{YMH*%q@1mQmev2`MG3w#xyv{P9}f?qCKK68e44{`;w^#uP* zA-rQ`pfUj~jl4koe=!8szYHPzYftPdGfIc%sgTyCF;gM=c^x{F2+yCI6z|hQseJ|f zT@xR@HRC>izagXsVR$fDG@s3OFPtvp85@af8~!!S2AA;XGK}=sgwzypWCd*X-zyq) zFCQC(uuJjN>~&vkpPn=3w&KZNWU1TwdEt#Z4>YJdLm1;3(EO-NO3b8pu+th3AIL?m z2|Y#ba0sYkZ(v89YYDjfCgDiWf~#H-gvyySR8>J+R>!zhre!{Uni0*(!m4UjM5BBS z<2w^4%M>#fu}8(HuH|olTsRQpQE%Dz;vq`4VxqPxPz8(PNPgNjV&j+cBZrff+NYA< z>r*7jO%-X`fh7G6TFf`#Co2st{>BQKf~Ye4ohh~p*Tjrzo@@Oh-px{`Nl7U9RWXT` z?72`&l2!Ha^H3X_gNEuScPn~3RjGQ&ck*q@eV{4h)cYE#!!*NhpvDFeQLr9761Wzc zz%_UYJt-vz zWrkpeTsWM+U)L4qW+$IKAjH8SAC(3!r7&{8l>@Cwq!2h|fxMELn7bK~-};@CAll2K zM~>bYJK*Mb8*w(fhmDn_EPIeygg!`A#*(FY>d|8kr5axLs_Tj^D^XLzy&bs%gLmo{ zfw_ovC#F+qEhx8~(dO;{ ztZZ<=KKJ)U0ummvAb^Dk0`m744R{2|%-*nma(J+KiRW)!rosLL-Mw2eXzVMC%d7YgA)gR;I+h!P0_ zdpYTUm*Z2PwXue_x));bDrew+IB|Y{v6->L)%1fM=~bcA|9w=oKw5-l@Zn-@2$$WG zxYyc=$*|M(7n?qKxjy3w4*@@Gw%r|+TxNxeirQvCpPB|E={i*l|7@|cyd&T?o{cCQ8QWJG9Km`bcr$g?*~g2&aSij`y} zCPUfLNCFwO6#<)3H;7nkywBsMN?8K1wRpD!Zkd}RH@gFfTmZK-4OtfF>ur%VWYdqg z=kU5Vk1Iu*Y^e@K`9h6Kov-Pr_rLZ>Q=%FcE41qel_^ahFE^5{m4;#o?tNtv$w}eI zw^Q#m$oLm*Y-#Nn1Onc9)~@7C9v5qPEXIO$$2d`LkscLc$m9bu;L&o-@@*FJP zy+p5q`D())Rs21-!Lam7K?wDi$1A0kJRCOjXfp$gI=@$UUcPiviAb%(u-_Oz5UsU= zX@nG&Hq*f)chfXAy##x*sr0|Hp%Vps+-03&n{hNvHraL`O_YAInl0}RMA4XsG)vm9 zHdvv5i~e*ni9Q>OBl7Hk^Ll^b*z1HU*QzBwFsbmmJB)q|r8eIK3Lm}h2$;!+{?fc7 zDV}RNnnE|^8TZqKGh5J4HrEsC4aC0&jqMnBtRbDlCUKD`j!&l7+vAE+0ER-b!_|(@)N#ZE#J8kwr9z*UkFj z`Od;$iSuwGV<O6Ow924^wzuAV!h}pR8pYUShX8Dlz#TQ4)eH`g&%FW$Tu4aB z{q4yql4THZX*-iAfgXi}-I8KDk)Fa~xB7LQ_F9*s5_Nwly01tf1N-qYl+kIoKiWe> zT&qz0$Cq>9h0t9lpYM)vxCA3xp(^=w{JLZ0+EI7enHlZ1ykkgG6g@p#s*WT@bbO{+ zwvn?;9c}VOBmAVTHVetvknLij;7~Sx@hXr znC?3}I}2EDZ}y}FkP94ldXr7!#=(cQ!g)zh`lwlH^)Ih@`ejFE!cuGC2^k;P%0es4^k$(K?qL*2xgzAKT> zZt8Y z;oxK00swAVQc}|XTHR**T}#Mts`0OtIw_(L*U${HJ`d-pQooUO^;#T*M6-A1ij~k` zK824&C}?RT8?ENTO>Ur#^^ghqQBXGvqVmNbG|Ik~lE!Le3i_psa<**sVA5*|v-p&$ zms7^Zrf&25KE;bVrR|R-)dTNSWgN;ouij#+Nb5})8_Q!<>z4VF zO(nXPOe$7+7*~67t=VBI1@TEEV{}kpB}AVP}}+*Ha)fV{6&`dM2=NT^yOH zm>5mJmb5fXSVe-FvF$`85ZhFS+1_66qeQbs7~%jJ=ygS!)dtb8zUcKqEL~Je*~;VJ zb+U^C9=C+C)Ba@OcO;H0wBy_xSLy>&MHi)WA|F`?W};J&vGB&#SZXC0u7J0K?kumR z^%FZ(qla!5uF+OA9FHncQ^@bdwIeNW_v(tt72Dpie=>{j-lcMsne5K-GlV_e{o!0& zf9hRmmJ($Nl|l3VbU}MC8fRcWT6U|`ZvZuEJk~cC5sy=uIvofDD#I|=wc@FWa2T}x zlnUwOyx>4ZrmzEZA}9s~T&MrJzsJ~FZM2C(#5JGy;+HAcsHD&E|HWlBTR<3~PjP*< zGu^_>_>D6@29FE4%(JfA_~7wOzIKuPFY3X5Q-?O!lYWQ>S%CY+GSH0Bn12J#mfNnk zIHAjRp9MOV{^a^t1en_L?Ex(&YQQIjRt4TkMtW38qGxky#JXSx^1cC1bFk!o(@n)wF zI)p{|aQqjUhQ!aF#Zr+FD4bhNYUM!H{8p#E@a3{_SEakd3A_tn^GtB!Q;dQMGvwM4 z>F;{(^ct-(tfGl0R>JX=OdhKZI=oXv7k_ej%Jw*;Sy7uiEzs^vJ&?1RkJr2rm^(GS zkW>Y$x3_RfWqhk~8nkxk&*?sBCS^XhGEf+C2)sX;i^$^lN@QPjJzq|!)T$M={nYG% zQ*f(Wo%^kMy0_O?q?9x186~Gfw#%}ux$FaKX4;ypwhxF*ua|&1EZF`uU zR(am+noKqUd#6cRsZ<={t{_mgs*!cJI(#%;TWUnHh=t4*#-k9G4{N^-Y4rp{YG1Cm zO1#aNs)aj*Y8iW)Gc!uDJ8bIB2W!`xCkzsvbBOc4v2kCPuy}Uxf~_5>9M+kQN$+_n z`vaAq=8*7|5VZc!*;1Udl}T8cIw6gUib}HDoF`<%IQY(>WUDQ)eG2jybae4n_LS*vYZ$JEaJyJdStwPL z%Gn#Z_bS8yMC{+&ER+o(5ebg>_Vo<}gCEy=Lsr5MVwsICbo%)$7RaE@IDf0ClZe9H z^?jq%lVdFI4G8`mw1v{r3KX$h7xG~H!|e|&@Zn_F5a?-ciIYaJO{ydOW{#lrBZaeF zx!4GYsVkKc*bmVF-s@ppl_nO^I)gduqsWek^rtRqzy$dpE}Zu3(&?7_vBa>P&1Fs) z$3UW^z@m!}&!|t*)fiOD&gKlK*c&sob01{eIzRA}R=Q6>W*^Fo?HEO5DrO92s8b!| zxJF16@>MannFmaG^&;5v(y7y>LIl7wA~U_g31Gqd{je4k*}X zbFtDRCME_cvRk$fkLs>5GWwa(Z&PAAk{JE^)%JS3#}-HlljoWg;N+Z?!&BzYDvbo2 zfUT@>+8Z?S!GlPt(yBGF1zw&}Go#;aos|*xfvs2A{bF^17dUI$fSJn$mf!CCTvy_E zDt`YNv|w*3HJlE;)e~L5nZP!k5&ju=)c9=(i6n!|VbP=Rn+LC>`}@|tlbQB)#Cp&A zsr3KD-a7?n+O=!D9oy^}oup&iNyoNr+eXK>ZQD-AR>!v0vDVZ5e*e_>%{g~g)%vT} zyO-_MUE{fqa~#(>_H67DF3?>?22smtTScGJhqLgV4{b#j<*&GdF=(|zUYl(;(Vw31 ziC!T*hk*Mu^xI!zJGCftE|=@c1}yC$ol!>^01woZP%TSHvRI-R@2j zMP)KM8o$DH@^8rHD6ZO+sZ`?)S~iXIo+_er8~w&C*WiXmi@(d1Nw;mm4Myn zz2lL}S3L_=QwA)mUWsSJ9*f83Q@`)VXI0ALq+D-rAiFz3TEKB%{|XBPnh6ogw6fhF z96t!|crY3N8c72or{!0KhmR%K%a_(3Wdgi0X7i+}%w+L1LMoF(DUe<~qBb40U)+~| z@Es%-cC59sN1_kFE&t68M;y%+R~CTRaiBhZ`dvi?;HZBKE&lNb!|%A_4A5SaPKW4| z-EisqD&0GX$md5vPN$UC#$$=!!%&n16cw>rQ1-lT5@A-CWUkT3t+*m#-*x+T{dVC! z^87m8_!AdJu>S?LhY>@yqPWBIIUUsVMSY2|23+hpuA##Os>K9^O@`N76<-|bGFVcT zf{*vdNs6!fsMZ-9NTr%c5M!4?XPvU97CUkNdkV)zj$tPdlO-tO(OhFm<9M(X z*FCryj@e%X3yCA#-MUuo$7T})1!bU@q@gz~-z`i$d%v1Pka(7sp$b=B@}vq!HbHmE z5W;1Ygr6-C_6r=60oWarnhW%nzHUlMIeeqz~(JpeWUgU%(A!eJ|sE5F0R zRf#!a!XQ5gTwkQWBHZ(eTV>xb_xwpnZ@1D#&!*YUP_UZM8z>gvuv}!Tz(PcY*XLA4 z@-Z5LWlOWu6e?7P^D%YqvL90dVRCF$y?bp@kYxTWR+W2*;|m}4^4nvn|8W}?2l;Wu zLas5HLci-`$mdwYlMj3woXXG`Xap>akx%@aHC75=P_~+re1I8ue>E9&W?=HwC{O*6 zWo-viCBh4q(M+1oalX-y+)!Y2442-f|JoE8#?4|XZ0-l`Jpym)CKekkFjdh;7(vYK zI(W>^&Bv=bk#RGZL~|QJn0ojlF!r!B4XZlo3CN%$<%#wx;DhFoaO{=Nc6*e@o~aIH zV+orVA+Z6<9y0&yP2I< zzs{h5wf=_;ib!5^kn#4w?KMcK8m)KHwTasF5cXDylIek%ni2vpjjoKZzEb(uTf5g6 z&G5jY*hJm_sm+Y{AeN4a(0t1~JyF0i_v)!$Qk2CJ`}Fl-`Q=U3$gs9? zZlLYMd;O5d1T|!}coG!8OJpTS_cNS>kwhwr>(&M#m1#MstE#$Tid_s=YQij8vjU3A%a<%LCRLv5ChHgjbpRAi-<` zEu(Z36V>qR<$-M>;lvzo*}p17!4Y9VEZs4r+MKgn6A8F77S{RGH;{`o6w z|5~yQ1~@h002jl6m*)P%-SD4#fj`0bnVOW%?l4j(#ITQUNGsTL&eza5x*LI_q43@n zi~cN2-_FM2q#rE<2Q2AL%;9gBZVT%LDIOSB9%qtB_)M85yada}6ztmr>7|mO0TXodKoW2-!?uMtc~eY+Chn=><@a-MDwU zkGZ$18$t2Li#6`IHpzdbNeKcQl~PW)vlgRM4#42FuKzY7U**UeyPCCLp$wf4mam<^ z02PtIFcDzpbF|J#|M21+%>g#H*hEauc|FynFhU^%XwpsGWmCUx9R?QbEHF(cl{~B4y}gG=Cwxtaa&#tqFGN_bFu<7;DW2?I%Nl?f&`ct%UU$ zZmm^d8L;tqCv96UJB=UH)OpY;9Oyv$BaXzyF#YGA@yQ$;wWl?#y3tw)o?{VMF$7dG zx@EJ;LtTq9+2t}-@?k1sOu)pquEm*hk4N(X6fZgRICS~c#HII{i<*Sv3w1Yfa}LF7 zs<>N80PZI~r;$I}ZK0I?Li1J@;2HO#0rjK|aFOG!pja^3^pLGcdD*8$Q&@XY&C07#C;%~nuUz{yj<3r4blc`khl)i*V@4> z)8ztD+$Z@7NkVl*NEq?5pLVGtfkY;@vR>ZRvSnw)XR$b%Nfiu1RGEAtL}{gzh{+dQGH(n;na-m=NX}rz<=;mDNEqIxwP3f+l zxppOxML+R=fAPFdK#)2937*H8jXzEC2$L%x7ps!s`~4M*$JNN$`(E6!xZfA9-pkgj zz0q)fZi`X|?b)J-K}|5!FNRF%t3gPEs&k@;r)=1d`-E}k%u9@-)hbLd)6bhELM2jZ zBEBeuZr!Jhp4A)7)SlW7YV{vNmVOhVuB8@UBoU3UtfT1^@ZZ4gctFz9Sn?h2^UDJ z+V1WHA&8GdhCn=JTc>6Y$hpIv6?1$;s}p9(W@~sxFAlbif3aUke7vQ9X4`)FYsdzf zD3PW_RiJR*WDe(%`(leGN=>O+a+~b@x16CQgtUFV#c-t2P}mt@UKVc4B7|!e5)|#E z3n#F~S?Ju2+5y34S3ZjO9+wT0v1KeEzN%dF3@*Y)ilqF) z9=2Tbe6)=+6yw!LlhBdiR%Dk>1VzxTrf3EZuZ6Fr*)F~GJqqT>7tx}wJ+sDY*vRlv zaT1-CPUl2I+;xOj&rhd4AzzlszVDq#SXjt>j#CeZ0Ig-mIiH~S2O+oSsFT*VLJ(o- zIdQ@+Pg(lG$kG^LG%C|IG=_!(K1;gI)JdzKW#H-!*AlRp8q2_Q zBgEwv;&=F7ZHFoSY{zvLF*%6O(f`hLk>L#qk%=&~Wl0y=CxP#TUVEr{{5?k*_~A=Z}$LPXzZqh*#TM$`*Xa7JA<;s=gZg)IOLs zYC?Oj2G+2Y@p~1ZM{@rZhv@x^1)k5()W~`n9&2hSoU`d&2gae6l5zB?jjHH3E$R2^ zSh5N(zHN{3dnDrIB%bl#_`=2a>spcn#Mm|i5}ed3j_3npI(TSbYloofMLBqsCs1W29(D) zG=2H$5x{=hZ;#?f!QmXN69}jYYAfbEeMU+lhHkir#?~iC7d_FUh|Ei??4ki1RUoMj zC-~`R$38qJess2@{Yi_uCBOvBxK|@uR+4zjCrdvtag}cHfkL8G(&X5)x=nw!_d`7} z{R}RlrFaWJRmsO?{ZZ!r8J`Lt-?*AIiGJQWrE`3md=Vjob5MOHC|nfleg|aFs2P(iTES^KKv;7H0M*L%>*LF7bKHyfG ziCqxM5>ZHQ&1PtX;`Kz7{p7CSxu!zkxnppW;A__}O|%0TZ8~AwU|JVU!H;N5IV=+O z2Z1R#d`;+GzV=SGm7oa|)RNgloF5@mG{J34I{4$sJegFB5M#?tJnzonHUlo3=zN{~ z0ddsTK5uVYISsistwni3t;H-jg=$VTBxNKA&@{5r0&DG)H*sA`ckMG@uy$6>m@-zn zYcFRGXRY@#16a&UCBH2Q07QeU-RWkY;J^T$VglIN^Nf)K6$TH`whZsq4yL^67i zM5Gi~wd?5>JUJJVFnK^-fD`60c{Oe;+}wrt%$PUMTEBIY%gHxk(RV{4XkH09RzJKbHq z8=B@J-yofA)LB|$E?=W*gt8xy&ArAJfp1RBlG&IXiRNwygF1EV9NzNqVt(j9H!LhV zWOk6?+3BxLP(c>eCFzMgp<^CNjlS8VdjcD~6clU8Oi6)o^C@40iBAgYhJLaa>JzDR zATZ{1LaSR-Yf(wa5e2tRfjqRoR#SKAdd(BB_4RMHwjKwaI6(H{jSqHV7@}-56IOxB zXzZs?ZCdZH;vdHC56~`t0EcRVHhYqsWS}>cBt_LkS=(IzJ#O3B@ybBG^Alt=rkj_LpKAThKYh$t--tfQvJRb)mL}#SHqt%+`K{ zl3NXaODD@CplhZFCS*`{6PPBP)|%9hFqZGEm|EWC{}N1wNu7{r{pKKzIuP2vp3pvme3+Zd z_?Y6AoRN(^0?urSamefq9^+Gc?TQ~U(wStCLZlH4o;I)ny6?JSsb6L=@zV^6E)e#Y zc4}>clE>P3=yb;+M6>K_v_vT*Mg?ObbEZ*5U4l%AIPE_nKgGi?VZX~AwjkeUVz2J7 z6ptUVb%3PNhhnuYojkey>7tFa#BHI{jxJKspHvfA9>|p+$3(JRZY7yJ-$%&k_2nbW z!Ju05A=F$i>4GBXDT2BvtC{E~jI6Bdo`J1qMOA=p$YF5s#s>}JzQXdHSjC8n9IC_} zq1G0c!+-aNndvwoY|HAw@^N%9WlZV&BNg*@(UHoE7|T*^PeS87{7IJ8s%jgC6k7gs zXRi|wTorR!+;+P)o(SvWG?Puq!urLk^W~35Y-n5?Cc?Cp2Cnn%)dmxzCOJgbvpEAL zAsJHhM1K>H=@X;3a}aU6#H47D5>N^FS^Vh`uDfI;=BCMA334^&d!*av9iLK8T>Jj= zyDGGtE1>ZVZFj|u_X*+UaWJOFspK*i644QwGd&$INvDT@34J)I#U*b5*s}&WVrc&v z`fMz1>>d6bUj^~})_rt{Le+Fr_T@NA3w$3vE3zWK9JLk$X8` zPP?CczR=F7h^DQP;xvlF3$H$IS^NyDDQA0Ff(GGXhQ@V^BNSrDC{Xj3xHX?z5+>40+BQ<7Zm79=l8I$wV3`at zPlLpLjsTL78!(D94LyxI!!eehQ7Tr(4^LXW!n>bT&I=j7O3nopj;?Ich`+O-9z%DU>F` zK~gQvqz$u^8+>b-G1%p%QPcS;hEb@p>U*be2SGYREHDUkYWbw=^1O9A4!pXwO`x=H z3P#OxBhdUA@_In*(-Z5osjr9h9|ywRk|1fG)bCKT5XSZIigf9Hm`t6Wz@^1Q^WNuS zGDZ3hst)06;$!sIOFtA-mhfy zkTC}99>)aX9F9QCjN)GxT(n3lp)8$NuMzKt8oL~arp&sq`A*!@C+K9Ds%b1xMoF|l zjRd%(2rrRmy{a{SHM@`>Bxqs?p*e%7w!dC>$^s=nta?>M;@1jBg>vkN`YOk&4`zk$ z1)e146kRnRiR^LaE#KA!0(dArh2y>_E0Kj@u1U$E`O^_mgwXvbM4HD=Z~IILNQx9F zzCe|b0xH1}4@3+@QuZ-<$9QXkEVJ=IyW*86clh!fi>$P+>)`;Sh)gB#dhPU!oD1+N zbLAeToJs#u63U)t@6iRB$ZT)^X3uf!}#335W`($pamg9`$HYX8ndv>Sx0Ukv)z#RTWwW8WY%mL~I1F!)ZH;mXECB zIp0O0=K>jSY&18WWU695S8=Jf{ppjxEeB4kv_BAS*slQsVliMz6Sl3d>P$*RblrTE z;FKAlXb-EuM$~G>*J2$nqKJGz>9dTHV;~$Yv3x7!AmzfhWtPBma{M52-d&2C9yH|f zrU_WeNnh_M!ASxWHS~cHRX^!krXR2L4dSeuyA}#kl2SEH-9Lp13J+Sw8WQQvXT*;4 zXh7qx!k@0ef#UR`ww4$*0UZeg2jt4I%#yR)whuUCOg0uX&xV>4oO|3Q^-NKhfP}KD zLM*N5rsYvmzqg5Q4mUxGLfSC)FWSt{&oW$2(>8yxl9yb61KW3mn;Gje74z7gGpn~* zzDH^6x7QhqF}*Q?2ii@W1KI$)fRH!ulOqk3gIrt5y(3Rg_->mP^+}2r={F+#I>Hl( zhmh*%7Ng9&zSF>(Ty8PCrxNtffgV3(B9zcVi!L=tgbmjONg?@(CiizaNI}>6fvT4r zk|Lb%gX+hpuVkcPQZp3ttiou>`dO6DJ+0AV_)8UTm1ftx9>aOD$U)W=&s;nnmUj|;Yl z2{g8&o@)#luits%2cz{H!-9ckJCE)thvs0#k;HhX6G+WpSj3uV;W{8uB@UO;c=e3D zfiQCtf0EHIe$8IAr`_yuw_Tp`@hQf}GzIkn3YhYt(RFQQU_DUL>DgjH07GxBS;UtD zW8OK(Y+UMpS*})GS{hP5)b3Zd1ghHzGiy;u-x&+*Jy)E4hBws5um|d{N*S%f`|Ml( z-B~v^NQFQw<4a0_S2ZzaVE4Mtgkd!)j&W1&({8}9d`APe@ug;S1J7&qKzot{UrZ+4 zdnWrmtxD|scHKv>{wz5S=P=fULvgDlLZ-sqx6=LUL^D;lS;QF~YBS*JmG4xZ?z@FBD=T8LT9udy@sG+%LrthrH4BAc_YX)1N~pa z^s6gVgszMyaNs&}sMCdf8=dPw1#{0l6i)2Bc)<%Hj65*|-m`}VPNW*@e)Pa+d!l84 zw4Z)8C(cR!s#eKbq%4s=abt7wB z0thY7qbx@@a6j3wsZh2IDLF$hQJQQI`C^d3pH+>p*7p1^UktSmfn1J_*~eh9cT@T~ z_LOf#`eUf>rPR&X4hL2farY6oXvPyIMLtnj9WON~wChRi^b7$oME&#F@V`LfUt`1H zkoY$w{tbzLL*oB+km!nGW(j!N_7m2B1Bri*uY&lA-;fxnL$U%9BIw%?2AP~yj_2yX zFi4tYNn59-zJW*f+K^j_TxxS~+Lg-gDwIpga>jbCYj|%KDS?pdM>D8J{VhjY9kz90 zkG&?0y%wz^fs|Z58h^z~NNrr4ANQF}b}OP6A9X`4nF!S*oPO`D86$`}R9>+!&pAfz zb36DEpRhpDD!4I8g^DVI)gIuY7EcO9^otf1|Jnk&kEv31;giQNtbAh^hx6Qn^)7o4 z@$xW7_vlA!EMjZ!DU2y!cZHKcafRZ1ypV2XydhfBAGBnyS>8Il9|$LYcZ;LDcMnOw z_NuFEcmS92|9r^*Z!FFH+dKK2rT=XixuvYBE%$#`b^dG?ohh$cXV4*fRnPnId6VhV zB@4kIdE|znlDL`j_Arp<0BbKxJLiA>&^C~Co}1Q~7q6U8UcZhw++k-ladGoLQa{bI zpQ+&iyBY^WKZl}Be`f*9=0SIcr6RP`*-5%%0z**ry*+zt-_P9}(Y9ATf2*zoL8i1Eeu0ceVRAiO@P+;t-sFdN9|4lW$w~($*h z7&8dToy80v_a#NP&R}Q2bBDm+@1=5Fk1pE{$#wXLf)FmF%#$_y#sVBUKy_Tu>r;c4 z40wJ)AREM8~u3^h2o7b}Qu5DyJ&wuoXbKkq4MME*)aM26C?Dx*7!SvT>1X zXmu(Y4K*-R(aqY572Ld@SRHyPh+s{M4$gAY1pQZN<68Nns1a|$> zfJ<^c`=GVKDWy+_Mu;;7s5%=pRt5l7r#Q(6)S-V^OT>en;Zt#C7L*(-ClFN@Z2u6g zxT!3sTdnYA>*qG1;wwzlRp9|VEG9x`K`>rJ2pey)H(jKcATU@xoa0_rX`Q(M_1RE) zZK`7~Zk+t?t-?!V;cYJN9>~1q`EEb_X&CRT4|(sU3N6TRQ>(*R{8dPz%_tS5206@q zH_XTF(TDfj{$tvk?mmQ#>>Y>+%6|OxGnjul>rtv0ko@l(V@&_Bb?kp{jJXtj$tPtng25!tVx}Khsw8Axqu1z$OkIGuQ@2zKjhxZ^3d>hE%|`oiM&u^u0yILH8_Z zcZK>(-?US`WGIWr^ywP~=1{Et(RH9X9%w|4%*%xQaAl`SL*Lj zBj?w!a9|a{2H()~6ktxSj@J=;P!-b+79DJmwx?s*l06I+W4;m(;2)ALez;<3deH&# zWN%6rC&1qE;EoG59P5r_!)WV6^*@F~EP!2?v}#B&%I85*d2E8!w75kI8@lnlF{CbE zEftL!#|P_St8EI;&I6ujpLn4XomeD_qGS040WfMePq@n97=A3v)&$Lj?<^SaGpn4) ztKbAKA>ky>B~f7*y!LCn0~Wmg`RC?*H-!k~zxQ?iIy%)>?RQy_y*A6XqCAL`8S7h%i4jREq6yJ}`ZnO|XjOj`teA7(`&OGjhqF;&-`y zb3x!lTC*!;Or7d4S%(A3B4e1inc#XIDz5+e1-3!YZ8UKFiEGUP*W2Z0vHMRHN$#Lf z69}>NWwG86&pMLaI5SGR$#ck2K>y?SL;mq*MP;V7-Ca9l{mTFqC0mh1G)Vz-X&7Ws}A*$;qavB9@Rk{hcd;A z52w&Zg#%JqJbE()%kRGS^J zuu|kw4sPrOK`INYq4?_8lA+W1n>*%$nQVHe`R`nmlzhfUl!tooN5~OM&M=UNH-kLi zd#N*^8G*i0>7|875Nv$csYy-x?dmlBadjp$4hZWUzO}Z;l%8V4wJ!~hs9n%3S}d+t zx9O>kK{voiKJS5nc5~6a_*eIm-CkX`caTJ^M%9ynWVHHytO}gVI z4k2hv^s9Fe?S=r_GL+HTL;@iZp>}pyW?t347w#d=9T7ty?fcF+kUOn}eWGEJ>ZqdR zylV4VF1rIFdaJ!}w}Cmn1R+8XyvlCP?;J81WHXUsf8$mA)9uz(Ue!}t)=#pe_aw=31kK5Bb1WP6w4~-IF5+Rb0Qa}f^aRASgx}K>?r$7<&jo=X%!%q`}zQlxB zX^`2<-DE?<9+d_% zOEyr_D_U^x!URhvf^weXB2{K^za3LxdT}cFW6y9EkS!d9t){>y6zrT{eT0^G6XPaU z4P`E10V`!@;4@?hRMIf&Tg)R5*q8?Ew!|9rp(b;4c3t$t&p(Y{*2Q<^i(rUH6p30m zNi)6fsW@(MH(IbCaR?KSN(h_!kAwq$43lExq9Xsg*!BuJ8l6Qy8=o(UYD*NaaR52r zy2iTTt9mFVPn`w4+;@h(j_Sv@eflHhEG$e5Ylr*(lv?6cqv*tYkR#ZC$x0`&p!CsE z{j@S2pz63jTR<{od5#buR`KA<(jMV=D7NQI|5kNIa~8W1c@U(z?B$>% z61x{8Y<-?x8C3u;__>3}ZwW8r;SjOKAC?|f5ueC*4j?~khk25@z@tL?gZj|Z=Fm^Gt#8o<}h);Qj#FB^Fx zJjOO0*YNLmADe|ow#s3^1B9!%(h}Y7B}RCk6?auIOq|;*d+iy_;DW|VoZNrnH{~5K z+qdG-dh8DDuwvV(rCNPcGvmK*86%m!P2~F&bg#UTeG3;yn0IF^<}d86&vWt%3jB`n z<|FppQ*+^{d;4VIo$|M=)AV50st)C?5L`p^Th>92|HnX%;x3F^F_U+jkBy>`{)%h*1Fx!pcBUdD=BlDT z6AJIx6wjSUU`Gmde5(F6X@@<1QnuuVwv@+c}EFrJY2U?-5&?y zT@0@X6ao!C3@v{n#U3Z!y)xEn*G`2GE7K+|b*kC$eYjkE^p(tJ>@}LqzFI|F{j2j* zH?KSxIFvti&(^~fFf5vi=D^tm7$)kitnLDg&ij?+7X2jz(y01P9`M9eNDr4>j+5*X zB4sU~{H1~!>VoE-6NzlrYzKuu+u^`I0j;=R9Y8g7WZr_$Doq8m;TE88^!;!PLz1>0 z!`v*VDrCsazYRDElY;oLK(el9mEH04_c2s{TX)*!T|V`x@qA_QSg4ICY)W1pgU_^g zm})htNVIqiDJaU?d_e;dwfI?e{8TKdbI>Oe$iv59*uW-K`KnCIwQ8-popMyj=Ela6 z=^c`9RL=XENID8U{$~SrX5(NyNtkZuwJVNGx?SCgk5d8Hh2zVFuG-!4EtZCWtmknn z)fq;IY2X&T&IMi2JN~kO1_{=Kzz{-r3+kYsGlX3OOnUM^Y#kYz;Ibth+~2lN1q*Fb zy_VPOIqXKrWf!%t`xpd?iuT9zOFN%g|C+6!5S)jM6}x!-iKMuq#2K1qPDWshOZ#TmN?vANwNQVe&RU6Dv3W5hk>af z-lzvI)p%kY#;toDd35j5DYr<2{0z3lN>!uhCf8l9ecPo;bDNMo(y(&X$42>^kwM%u zliReZBZbR87Q)iGl;p<>*~RyZPSML*zYpZ;H7_sFXC%<~=bO>OU!ML%S{YIA!|#Rr(A*C@bxRSx{t0%ifjf=uLbl$;t76F#X0pNsb-{vq_uQ~*eXC{B z$Bv@kJIi?^Wns_g#3@aC!5Oeor}qtkl+}MO;F~PWeZ#JcmUj8>gQfEDttRABuW{be z@zGCi&(^)t*6E;%?@ISlR3Asms>5f;>VH9U^08Z0L#ytJCgXRuKakv4T^NIK8w2CF zG>W7(k5DasM*@q7N_m+3u1ODoWHj>Mkh~E20|3cWx~VM9djLo-9l9jj9m7`5@76sj zf$%{8>ASX~Jkbw4O@dke3Xe#$SLp>EzzK?G3>@P6-HgWG-xa~G*H}G_i(5lm1m!yD%ETckj-}9BS~&w$rTO%XP&Gt+y~Yv`erN`fK5HLq7zDQ+ zJcc;}sS)*Evf>jM443b-POI8xm0GJ%fI4;BRdY340-an{Dnw5Yh_C*tR5Lou!IE-6 zC1=AKY8yt z-fFvT6}MIFq$J33iHZ%Bw>3ZRmknLqn!8>m5*7E?b0V+8RZ>L4j){ojE;$8>u@0+l z?fMEadZ!1KgnEk*t$QJf73^&3bg$E<>|xxj7xkbBvhG7fOu#yeE5;haZ&#;S(iYVE zeEK;-Ym|shDwuCh;@jIt0Ab7|`Zx0WJs4*WzR2Rs9oKvK?jc$fL(dd~{QNEA<8WZ8 z^vgIR`U(RD0fHH$kFPC;U>bye=m)JMUc7F$sG5nI?7v+dzib?Q{zfyk(qC}%XI>!w zgtuYl4s0GhLc@d_7<&5gf*BbyhJ(?(_90576=ape&7Ci92cKE*bsX2jFWg6jSfDNn zD$a!w8Sd`MtJ#CEM3BAqu(-fP18%Pt4e3&T#eKPeof5|9u(L^Xl;(wf&P3RKSM%Y( z12hQVXq^7MI^YysiyO;VQ`*a>d=F5;?ryW3J9Q#0_VV;XjOL6t^H~XvJXYFs`@bjL_Y%*+_3K?i1vxL4=Vyh8gm&HI$aF*rOmeu!61Z|dAP9&Ne1-1v`e zjws)XdI5`fvqn`&@6|61Lsl(B3q`duD`Bf4S9cM>jmR%jkS ze!TX?0;(}`ND9irvDQ31+eYp^Mmad)W6x>y!;SjkW}-Y`Eb8rvalI!8=?o0E`=iZw zW`A@&MaK)M-v|#3-D{_sHwoJO#|!;Mt;j>YPRmWLOl77=q-qGtusdy$U9s~(^7o!| z#oK52J$;N;K5gZ`J&Xt7E%RJls<|uZxF7uf%PS8Y{)CS&Zwr$5=6y)k*h#!RWnB3Z z?FRRmr%4OJAC0cf_VA#s^}W1|L+{%ZvpSmhysDBMKa4cg4BRg0l9zK8tnt_$UK?%U zXl1a7p7TkhK2>TB=N)D{cqu_v!*#0j?-y_hZJ$YJyIyG3&LYha4shXQO7ni1Q8S_Y zEKo0eUBGxQbeMU)2b;X}?#d!4R&w@#-+?aFR&;p-~aeGdRuf^;oYZ0uaZ`>Q3!as|*5bHO;+U?$O6wNfCpB4zIx zH5EPOGMQW)xCQpO)lk8L0Qcn)Ip3$5R+19Fxp>Pi($c4mOT^8w96tr!c_j?0R z0@p@(1~vm9t-hNiA2)3KQXOciS?~bV>WsEJ-f@rF*pcfa$PCBYF9M}RIFF`6KuZjuvZA1j?UXdM2G9~?0ceS#fFRdYR)SV(vf)h= zj;yn9lF7x83c9AV7{ca94BW^Udn#Fyfr7YCaBa+3Lddo0PGrAIW~}xcn!7fXlL6Gk zEaF_A1QA4WnmeZ0CVg7ZdA}cvy%v86(OlEE%O^+K0?tp?hKgCF=#STCD+=D$gjHv- zc8&M-2+SC#jWHo2PtD47Ggfw`L}9m9WFuVRu)d;m?LS3`5lu9Q9cE@WuUVr${fldx=+km`+Y6ova;dRqjcM|?4< z%==xrI^_xj&t*bGSEc~>WDpOViMWvujMoUl#7%4+a>a(Gv^-OL7Np^A z*o&9fG|o*-63?-(Ih9=X00NW!UjJm14{?Lh-}Xb^|4NJ31!j|V2712;gYavqK1vE$ z*jhzR{o2MmS%?Ym$Okk(n@<=4YHh@a69(BP2tQWq=y7%Nu@g5ZRisQdWS^dCLNvWsO2p8x16evvo--BY~Pg;Y7O z51~b%LGu!$pjH~wM_)xjyb=$n9YAC^a^R50*+q%l*XOhi(xMD4v;WIFu@o1B+M=l5 zFq9@cqaWibN<=O&tz{69MY~WZvpB|qhA{_NCt{QW@d^rDs0xuV1_Pd|MV$o&%IXqS z$_hIH0TWj^cd=i;;>Kp@R3LCh1`2~62VsQxVr3jRT#*yvB0h~BC@y@Xr0iz9HWw>* zFYVsG4=xiB1Xw3XYc4^kpY@XUKaYs^zE4=-Di);Z?(E55W&LHHq{mFjSEk#_k(+mZ zyLFYCI0I)c{ha;K^TA}{dW=$3Zm#A$2(V7H{@psM?&WAb`kbfW z0I*JUA-AwbCrVGh|Fd=CMchyk?3xWPCQmU0Sf5C3wdSM{)3iifMQp{^sLx2|oSD6*Q+|KKieOJ_2Y zFqpE$V;OnoH`Y;8(mHfhx_)zs*4SQmP%>u7e&KJv^x%>)Oxr(g{fL%1%nZFuOxq_% zVK{W~8It&DkMDlp_hOJ>kvv}YCt2$!bz_$}co#m^|9P4?5@e&coCr2W-xOy)#*}8h zE`jFJbD%K;^YSJ)Wx3N1x5R2$W2B~Ctzx4_t5Qz2ZNgC6#I>jlJpeXW!`C_zR<}V7 zB~0O2yUQYxK(#OKg3@}vJYf#dPUy~<|7a(3Tq*Yu8{8-k-Iou)wG%7OxH^;%OU}fK zn}p(8MRvdjoKN~Vx`0EXLAmMymOQ72)u!P!peaLX#;*k|LDQIMjx)c>=LXMX2ph`7 zmGw25LZKt$MU2jsp?AvyZW{lAv~xO>G64>}Uj7oa85-;@rs16Vl9?!jkuZs>m3Xy* zlvN>n&}`emV47lA_*V`iH5<1mTcd6}cYE?cBZu3RaVytUpf8Rk=}l*p_IkexW!6!+ ze0)R9XvL5FXy@QUNteY@1^KyLcca)0ld^e?iupy!-e{0)*~03pdgL3u3kSk2jn5t7 z&w5IwJTDso`U7jUKBXx;T|+mZ>uf-kC&Cpo@WaM274yx8;&TA+|6IJsZxcGJnp_B&Ej?GvYA@OQ=c?lmq%RTDR6fa_z7{$6)5 zAMKY)Ty|b4X|-v(G{mAjY3|XezI;(~5o82MIZZ=%T#teHYAyvAp5+TO=b* z%Yn24#EyVyr)-8A-=(2YRopnLL~2+lR(cXUlLdSqkqY|NgXFnB`5xZVwmHtdn6cV( z%VE2G;ach@R1QA%??`QC?qn|r<0iuFzS(8*vd`C%0fg-_WgFB?KG)zX!r8RJA9baF z^{khy{v}?bh!QOB3bgyMFP@SX{H~&K)Kx5f1KR;jHYR4q(i&SB(?E(ild*f4TbBS! zvOo8dWbc+jM(2((=?ekp?%NdZU=4}hEtu|zjvc1vy7erC4LOBV|7&wv&`#(y0+_lJ@3mE6_w`>N^t^?j?=g9nN2|0HHnj17ft zCt04G#BE%grDxf+N<%_p)J7L4N#eh1Kv6#xB_vYS|JemDo45cOxA8|4rdBcmecedg zFK8%tm#YmCM=LWB=OS!Hh&OeTrPlAxSFRu~1dC5|36jSIEeQ8c%jkc^6UgzfG%fWV z?z?2{B$j5t2AsdsJsACJ7loL{^>M>YyX9)=`1VmX$*}7UNdRBVfg@jMj?b0+Zj@0U zXz=b&@JgBG4Rz4sV??NMi6U{X$VK!GK8$tOJk+NWtPYV zylq>EC|F9-i}ovNVb_=$b)Yf5dbK>l3&R5C1`ow+$2mlF68nWY0_{fNaBEnPy5(+S>^kAmfjyP69=GlPqj(E%M`fPyvTvp%A8x0hc8ZNAA} zCOZ9iI@3I_{bY%-h9Hw=fbCRs!W9FEUqre>$PnnS);^e{^2B(fATqa?j|5Govj;Qh z5agDg=-{XNj@ht;?Orv?4X+l!0{AIa@FvQ*UJ7^cwaTu`BN<=bCYd6JGWnU{Ip+`p zN*uh~Aju#ngWhbP(?eS##!2%k8gpFN4v>!rH>`%|TP=AC`%!pJ z@<%+L*_VXB-Sv7N&yCo7)nr(m?%J4KDSJLx0nKahd|keIUfkRS6UTl|vY;?e@i6a~ zOH%?Qit74RTfqBYesrEv(H?6kb#rD#Ks-8g;7Oiu4nG_@n7N$&r;Zrm|2I2g{u-M8 zjuiin6#tGC|Be*@uZt7~WG(T506Cd0AbI#N9WlS(j{NJ5FaY!Y=S>4br+P)=VoUdo zv@qQEvt>)A4Fcr2mLR}mHC7h#PY)U3d}(!swPee|hOD<+NL6Rnzu1qgJ3bEVi2XgP z9BIPcFr8lXdcqZr-D=Zo*r7qJRAcE0VR#UlHG?;CKHh9D=hWJaN7s_5_JLT) ze*ye!3xiR$>f$-(O}h0&5?Z>Z1oM8_H1mZqQ~>i~&xF6c*-cp^Kf^8AEa~>&GOa6GyIa?*lUt%kx<@Jx z(a8_OMi;&5*-ri7It%7LL9I}2jZ$=p!`CW~Q;NN&iY@E0YdEl(T@IzwL|dYW{q8rv zp`FgE=Gi~5rQ}Rt4Ml>{Iy~{S?6*a+0kA0W02W2*DB9vJU1X39DW-QN&~yBT9PRxf zv{C-HWP0V6bZ!ZLJfIh}UHNw}sDI&q=>=U6@lIKT1l-dBRt?Uh)}7ocqc-c+2&WwW ztQzPS=c_zi?Z*`#2>hQ_gPHT1nC1I_vMBzsYS5Scmqh`zIl2w7D9Xj}*#BWslsz1fwa?oBf3;6luBch_imowxjP8E=eE}sO53|Wj$@dOW@>wChP!z8v z-wQ>t@j_9gtU&*RqNvz9gQeTTU^>J*DPQS9*fWH%J%#Lo9M2smUd7n>u?tEe?OV|l zAZv2nmpG&ZMU3#)dsG-dQ2=;fT|C}FI%QeYA^x@GJH}K&w~(evW9uLX{_uf5wKs=e zY+y(EbKAZNwX}fq^nC``MU&T}q8?zDyqx)Hqb%_ViNief{x|5P?3}!yMfiz>-+IEfTIxQpRmyS#Ze%I zDj46Q9oB~6R4n(L9WG6^bl$*XbIi-e$g}N(H;RQ}G_Z4Oz2gA;(E=(Sc+ej|CN_!T zv|()gX9JPTDfO=271@w(f6h2nITi3W<4RW#qj znTnviR!dKD+xPivLnFau!EC%+9Pr#D*wXwQ4}7 zoDd+W3IQnjn0DXyA^lSpv|0AAHL^MF+CfDklnTKvScgX1jrtJnm7St9X3)*Sn%f+7MH_b`+8pe)O4T3mRw6c8>H*@62YaTGs#_4V;|lcQW7qGTE5mdMC+ zGvWpXA3QyTk1U{5o=-eD?Z@1Wpvi0oDWK*HXuQxv%;=dI_`oa{qpLv@P(h0hquKPL z`Eo0Z^1Q1UnW3FJcjB@RS72v?F1iEI1vQ)(zcW~Tn%HFK#d^{wqNS>dB)6a;$8~8E za;}1Z`*lobFa)~&J)=Q9304h&BpFzV5;;86xI-NN1_?RJx$lAhOuj(>iagy?y9e-f?aC*c19n*Qcq^-XX%Rk{AvHZV-M z8+qkE(toTPM8B>Y)G5xwL)-c1E*FfG7dP!6ywBv$bJGU38;KYc_=6|eHSfgXo}h3CH0ygDO#-yWa76n#FUGPTMtMc>2e@@vr-mZSYz^zrQAi+DP7O!hq8eQ3XQtX4as zF=@HG$w=wU=!k0D8vd?)+QBPCF3-czuqe0GtrKJswO_%RhzN$^F_>7WMo_D>6_meI z=?$PpFxK6i8B?2mHs~|a=8lPBPN6zKTcwN=5=+!?Dn`-LHt5HK<1vt`H)~Fl4o+YDqPYizBg zSdN^Xnzz9wM61_HdJ_~-hBAv(mZYjgsdYlFJ7%z)jtH}KeILWYpb`>?@Aqj=2Dcbx zZ?*EBIwdzs<+SKQ;C7vK_KfS8F^itqs8HRCa}y*T;=X4epjxoLlBY{kkgw#aINdwk zFJFRQ$lo>#tmbk|DLFXSI6oWWWS=xV& zSma)?3L(R*a;{D|6}27gm~2{iN6nXSwG(*Ifw=5l+OS^9pkl@9QM5`2bHNIC_nNnA zc+|1@2KGXpdYlhWZ#wTAr|K-afVUZSh2lzCgBC!9WuhLs^_?^~%ah^F)yAPU!B+-I z3pY*tuyVh#A5e5Cf>nnuIZRP|8Ylz2nJyxs;+P!^{mRE9w9Fg^YMb<+?689ZDIFrC z^FBq_{406N0)vZEVx0A)zyu&q<6p^BmOsf;7XW!$SolhwY68ep{eP0Dqu&r;$x~c- z+O0GIdFt^Wv@^z>00K6IyVVVFH+r!4Zj6?i zyb#i0HLFb%^P#5I;QKUpc-8mGiakjnmo=pnO5;WP7>bbc1`E|8+lwz!>TjO>igtvc znn0WbF++UD&C+>}y33U?u8*(5zmSEXISnRW)^ay(#iufLJzWvp!o!)$Is-vu(5K={ z7fS)BGvG#!eEJT0!|HOnce%D1o}}SN4BUy=_;!==E5(ezg~nOuUGcZ$x2Q+o%k^lg z%4_r8Rw5XIfWXgk`CtO#fOX>MN(6exk)?LnKhSAVDK>3iW`1*t4@;{y|mYz(P&Swggp<3N6sA5ZeDV!bx z`LOzizv?Jo6I#>3vSceBN5f7}&+AHynwXK%D1uqFX!ZD`5A|4xWWo|klgNyP%2&W;jTCf#1moktY&cC-~#)jKi8(Xun!H*(y25MPQ)(kyTqzc#33Uftiko6Fd z<0!2ayO^h@tC)?w-kk0p3h%&S=uNlI?Z~D{4GYbU_y&q)I`lpo_N@){kHOYfGKmKL z^x1tr1+S5bdn&Q_4UO@8Dnh7kx96|ysf9q;#1r*ju&3GnEX`V05gEEU4+LfJD4sVO zD4rAR77y4e-qCVhom@MD1c+3k(R)6*y~!DjZ(-=T1r8qMhN8Zk)b*i8VGg}ESTu+} zHsQ11GRV;2y2h-6FZlFRM`}anD4Y)3Z=q;=7^lC7*50qRIB0+l5AgKkF-Zob1vnYDtJ$NXVzQTZ|zM2I!vM-hm~{r znht#`zc_{tvR3z=FY3|O2%0Q%+aKQo9t}F_wL+JglF2~x&IA$ZKK(zPC|X%B&B5Yh z_hEu+JiPXsTzV))g+h=oY#muSWV78&Y`FvVqt-V@a?!LMd;1);!tXcE*!Qfcj9FY8 zjB#B&0<7jr!Idmb9MHq7Pn?VfZ-2a%fHU&^nDy-8Tzo`YUoA8Phv$hh(s}HRT!%E~ z5L2qO5cFYD5=DBeg5!&BaSpA@blVEDpjF#pwDjtI-gyIZrMB?NqkEPD`THfi01aei z*YUmN9L!wWTp@z7?FXnCo83cY9rNPI>!{wo4fKwwj~ik4SV3}R2Y!)^1{f6jp2Xkb!Mo6TV`Y<|M9V1`&*RSH z`M$OM1S}MMoL_vm!qu8!gf)3YS+ZT3*gZS+k!NF+Y5Q)eY8I=ZsQjYXQQAI8nusRW zJSCB>{PxHq&~lUvy@XWmwNh-KknK zqOraBof%|~dR|1MpQx9Cm6In#aYUOiLxPIem|1I?i`jhOV<^XNL`GIw=*75}3zNlh zG5*p?8{?dE^T~Hd<;$|%`HI`Rsq#!KXW+4$R3i(Lu#H8yI-aG%^5bd4U7H01lY3wz zR)V&-FiwPN`vW?P(#`|^dZKc6^RzW5@uP=`Unp^Ehhd_(tsOmQx5RTd2wB3}f5cn7 zJEpK%;X{95bS1xaycfp0on|RAi^JbaKGiUW{}iseS9Pn#COCLg?lAL!Av}qe5}NZ? zBh(;+$fpYj*-w#GN%)P?xhj?PCZ(SoTje0HWgk4!t>~u+?0j`qb%%JRAY~)<^xTbn zKN`WtDX^xL&CyVZAyvO<@_LkPtV&!F348>(zO(qtBzy0q>AU%TW4$LdSBfDCcwxjR-=5{h$oW{^UBUwJ9xHx0FP~>TRjhX;EWUrf=u2ssuO7S zX;gEmB*AYTvM2TgZAhzLz~@bSX@cIml+?XXeL=#Bt05D6i;(G~z9wi;+=;+c84AeY zLYbd#S!1vlLaTf!^c>b0?vhtCw5&R)PY*kQWrHbi?F3|l2qnW3WQ^`htLv+X3J#yy zHt{BpYDxlq?>q+>Q!3MEF6kFy^G82zY{9sBXZ2Ib>eJ!lLgClt;K#B0BW4g$=M{W` zQ1;qvBlIEYzladRJ>Ec2@@2dFrE+TUP1)XMN&a z^dE9!n+_@2_@~I8JhOqHK`Ip~b<{iHr+Xx;mY41q=)w+G{<5VLIL*lq4j6;^0>)r} zA^p$xtEFRQvmk=_(Xo$;Ej7r919mJHyI*GvVSZeU3=m4LxK)tpFqwT| zwO?>ZnUc_}v7NQ3<@EckVC>2c3;qH=@|}82QmC~%1}ydybQsn!pXK3{$&XE%N!4rQ%M$WKsdj)$q=wg4954)>wUaiw9kK<_S_2zmzeIs~I8c^!iFz2^W7!Nx`qwyq@d0jtC?m65SE zi|x8)S}sa1UDXLFrf6R-=K!n3O(xD@x_+|TPaXAcqUa4cCZjK_#9`j7pG*(5EVp6w z`4p2vcPRdH2o^8mo%u2ZJC&G#>JIv3oW<_oyF3u1MUq63z=(px!b;;|I)WW2T#mhZ zk~H6=(9cuZHN}1yJ5+sXH|mln;b!zC0d%o@nr(d(?p-Eh?Mg8EMeo@YsbeqX-vzg% zf<(x~^te3%9_WlMd`*#RgYxNV)9P3|CmHbUcRZ zTZ0Ff<6*9X5Ve4RWx@Vx2l+;-)DJv@XZ3Dp$kLjv)D<{TgANOHmgF6|6f%~I9)2;v z9Its#1z?W1@M?~iYNGaU=6J_n9IuM>f5=bC{}X%!Ou;N(reI|+=6F=DCq&KlwP0LK zu*F@O|6-0;_FyKFU-|+*)>%jJr=B|L2RaK6)6$%!-~Ie$j_1?MdHtQSpy=Fy+G)lKnyj-9u(E~mb4=%t zqaW<}Pyll1dY8YF(Z=D06sgns3O+h_{a5fY>J@y{YgqYNZr4QmL9vCl?7cjeAFk%I zO@gR4od`J@qY(7N>}6pR@7I|)smAH49VqiWlJ{)}09C_v-l7|x6*pCC6AMtFCXV`- zG1x(@GXroci~y_DMR;D0F$J?nVg<53xiV>^zfO(&Vrg)8qw|H6M||ChzLnszLAGo$ z4&nG!u!WQexZ`B?gfSNRtt(q%kkVeOQhj}-(Z)%}1PZ>}cX+B&YGMn46Ib4-7ua1F zl3$NHK!^;+UK1buZEiC#r?-EUk$ok}d zNmZxHy8v?C6}!_Yf>Wx3+mA=FL8RMF_b2%X-xn})YU#L)0Xos>;Ewx~Yv*;BIx1Km z`+1rY!_%qr!`SzD(Hh24-h>D3c=Lz-^&$LSn9%@XlS=jo&WIk@F^ujXJ)l0LIku-M zk&UH8tiQm=EyTU8e}Ip-{{$baDECW$dEFFL@RJv9G#-HR1oD#RIR{-{6$KQ?F>pfe_ffHFIz0`X~Zvv=Gy z{)^EqibpB+T=JLsAsbnoD_5G5yP@&0w++p+m?vQo+up(={mo%Mw?+VSJbDucjBv## znyCKUY#hSGbwg zT#TlC)TJO0d1DTvS4u)lIr8AYTcQtHdlioP;*Pgl!i)*VqUxp%6_?Lk0gXT6V#m;5 zqVVPLTn9*trZ&I`Q>RlE4sj^f^V!QELB?_rZKa4h4=T;zyzN`~Fz9pjO??>FTRU06 zGIhbzTFlwX;!i#`4&H8US-p>2bzO@_Au>&FtF7xLc^0)_pNSNDQ9I;O>hp8>?uz}| z=Ibo)9u@OfcCy3aOTK``Ppl)?U2wG(qPq@5k*#Glz6fun_pPauCBq=Fg#?J3US#Z2`~t6o$1(~KxA zSTV(R0#pF%@Z&Rwa~%=^~@zVs$*a58PI6mi{uu@EpFSGb6YIB$o@1O>$*q3TN!izZYWO^AEtq>L=5X@lkc-&ozkE0S%|7+7chm2#*6*&?@2=MG zuGas$uGZg4ZoQ_j-;!H@N^X_9y)y#(@4*N5KP9&sQM~BJo-?5?RM-v>f)QDW0e2k0Aa595(MM<1 z0$T+UWY_|MO&$c+Ymkl#E({9QdZPHYO|k_FS8Zcv$wqQJ>@)!Pz-15~4&WYIl`7|N zU%3ZD+=F6>SMH%k%WAm(aUxocOWon7tEE79UrUbTdV+qw3E#Z}#J`bm4{otZzebNa z)_kyVNe&(6()#|$B@$9KunJ5Zug-=ucA==n?r}Yf=~9#Q<7EKAcJ0oOs1RfB_*PrR zW&M&UDgJ@d1jhLj2Gup^oiv;_tyyt--uU!4$_vtjm01*2?uBJYS=&6gsaR$Ac<7?? zFeMiu{3t=)9Eqj%nV7SkCRq$Y%dJq_B{+aV-qdwESkZR-g94I(S9IJ9_aMO>DFk54 zGCCQHaBHcgbH;hB`7pGXyD)E26#L#Bs-uJ08)))eOY*CBsclC4+793i#h&mG7Sbc} zcT))|Bv^z(ghDgMrfwxU$C{aPPXt09$kag&W2>OCao2cl$om?Vra9TQXw4t%O~8&~ zs*II<&4a)jJEh{OE89i%WW0XXiQ~yX1o-2@$mv5UxY2)-Kmz#V;pp>jXbBBU;eB+D z6~Xgd#D~lOn)tFFc$XDMpg{Gc&PGd~6W*N039tIGgh?O_>@s17Q)xU29|IvQzqj7# z-Egy@!DlGw8#2OrNE1)E!?!F@&$%_+3x_?lXc$h%F5rccJrRusl8?3AZ3QSD_~8#n zg69O7`#ebi$*uRc{_YBSh^HUzO>2XdzIV+Wb{5nWOkic3zlk|T_sSmHkc2DHVxs&R zF59b$;#{Ejqudg!7jZ+vAo+raiU;Tex-)`wv#RFXhti*+D+N1(APs{$+l`5*-#A9ysX^z=OIX;85-)J-Co(I|4RJ{mqv z$?wiOvA>WHnEA;OoW`2I<;3Vx_l6{G;Q3_R{|#AKD3w0p!D;HNZmtnx@5j{MdGJhJiT! zAx7|nmIvpmwk@An5v*tuq6k7`q+p6-J%wbK87FYE4$-eF*%@CVi~yiZjbP6G3@=;* zcZ1U*^XZ43Ka6avtcGr!*sNm)GE0{R>(tvxM-KKgYcX*ZvCKSov-7XgxaqD9C@3l) z+nL>VNkz%ztYT&ey&zb)R(wCyx*2I>kK)=Q*!PbJf0^Ber`kbE|1lwptRGLmAx?BI zeWI7{))^U~s(oGDqT}#c+~0%3q5&aLs>UmArc`iOB!c${liN)!z~OnvkUbSt9Py_J z+Qy&`vQ+Hy?UwCW%SQ;b05fiE*w{_JG|jG-6Bv0>+Gvv(@?q~<#_GYcMjHNd-IVc2 zc*Au*MMorddCG{n?PFh;DShuunN-j)X$5o3nEKrJutWDw{w~vs+Y1(L0l3Ei+(Lto z4`N!!c9?>rGNE^V$Whu{k8n!ZM;$qD`$?%Bw=-rUz;fWM2x}IDsT2$_=a^G)h1SS% zg>ydltaS1tOAiA%H&oQaFPMlRw>8FWD=+d6g9&U_j^huT)wH$}VC@WybPt7g@Gyw5 zx-4q{K%Ev68duJ0#bMrV?*eFU`2heiUULaHeVv-Aj;5Q`f@ro+fzEbB6Op0R=jU4j zL5ZsX^LNC8$E1@I|2C{B8MHP0X~w?73X(}y+z6=Ye)}mDz7COFK@A+mr`SKa2V7dN z?VVTdfgX+i;pqZ6pHB6v_hB0vo%VvfvY*N2kwIw;e>qYYe*`FOJarusu;n#BB~pXDJT+G$F1(ZgNX8!a3_d8nZy5W_A(&vm~nLXY`m?E@Rz zmSp>7DR?bfmT>ekZ;A1K*=caMi;sFaG8IJN*y{9psH&qW{E{s35e_vr%5F|(8aklj$5xF6P&3)##74B!7z=`Vu*nQ$-%0v1$*2CD>0eY&e5n1JRvCuEr zgO$1f+!aX??K6OYAPxPbffH$gC?iyuHC_=wSAW? zve@Vp=ME!!s348XzcM-WxLaW&t2)V|G=19t{#51WY{$cXnRWe>%`)c^QL2clLXJVs6jpFD-Tdrat`jV)$Jj{;m&y*N4CB!~b>l;ongYuj%VI^`PxRiPsDmo^sOu z<(=ne8eMslwf=$ZSwk%1Ii9cWKM<`B0#TL2CDv)L zI!@Sfb7#xra~FWy^5BZxriN_W*I-O^o*g?-M`%>lsbj+qSQg5=V&z2as#6;~v@=+P z%VW(FgrxcdWfx&b7c-)s9xGe7Q$elMqcJzhMJe1?zKh6GBL)Zu zk$MX}?vZT)@qyf_l25eJD5Ip-ySH$Jr+g|vM*wYIwGwciU79>=OsQ@zE=>prC5G@0xLak>xphH*y*0pVCu z$D~E6%ypqbCSd{V3u^M(A@L`EC|$?mXaB6aop`XwU-VKJA|}`&AayT{L9>qJ zh7uvhn!%^L;m4sAv|kTlf36rcGQ7WQW38`p+&*ZC2s%1WSo&021@J2pYQBEsue-i0 z{T;264C%V#AeW$a=@p1S*)lG*8fxdf}BQxsse%viyNOm6sS`eKp=kXrOpcEh+1M)Sd{bh?#L)c|RYjZzF z7^#8n)Lrg^d<2MB&2Ryz(VZ7L5&mm8qAC3>Ncl6`!PHcE9-Ob-pj!}7O*e2*m}3tV zj3YD*e4TT1RwZFyE#*YDfqJPidXm+&LzrX|?MHf*tktV8)i+*x!uP_W1dAk&QJ*BX zO(QHLei(rhi7=`g%TVeqL%W_3HpkVz;hI1xZgU<$+-wbUo;`y)=C{t0B|5M*2i$!pl>7;FF2^SyP;b{5#bO>ndI9WB7=U(@2LA z#QH#xPrJ<|xgp)!A&tIPMe zTbab(tui7nwZkzIYdW{!flyy_60YL>fC;wKUKD@qo>EP1j~hb+G2SK8FWiaZrFJQV zZ}Hobw&h{4noG5{ie(xgaSKkx;iY);&GO1`M1+mXzx6rODfblQ+>?BEspNzwly@$J z*W#(KpG3}>O09y+VL`8KUkH-`-`C397-?SA~bg^BD*Z@{2s|ns{n4=;2!d z%S_z+jVcE0j3|CBOOp$4aehy+b_`JcL)39Xl7OG`&i*zKOJA5GNAWZv@svwC1Komb zT;Uuop=)6hr_n?Pvj_*5Y=D(lqhX5QQ4kvKh|qz3^A+iOG!xJ}2>5DqY5W))yn+iB zxe;q!V8^&S#F-<|Fazt~QJ)UOd)N7OB|QFqgF9?x>p>d9{K4#T$hn0f?dJll&vpY= zPVB~n$hD)Z{o&|cjhW45;#niiaBmKE6TZ)4FXBBx&{-h@AzvV}@TdVn&*4Qd^68rW zneaN~eQ70{Z+kb=77;}1_$Z1j{1<{9IviPS{0-T8a5D2Q+=}oZK0$6hod{>#j*cnUZ}+vX zgq$hR+`Hclv<6z3+J)?c(!=T%Q<=}XsC23#0>OR~#GX=VqMg)gKB{Wr9CoaR+XLYp zdZmu;`0Famu3yC?-%iIcJL`hWr_W%yFJ+y;9ZD`g^?$`nMp(RV8NlL}m6DFi^QLpp z?EwiBXD8%|F}+|^+;m^xOkG0joSW|MCysSy*S|)q7P}px`8-xSQRj@C&PHl|*6t^S zoAkjOm5l9@S1Zuk;>xF}eB*Q*n}W2ZN&G%3cal?PAA$u{z#Ih(61d-@DMf#F;LG?z z%?yUzNO!J1YX9=u4ks9kdiCN+?nA5;;W={%V_4UY5#j+zQvp*GEV1lxM+HSrL|}mU z?)r)3`^1hzK-zE+xysMd5st-m;3V4-0^E^U8^Vw)e5cu(=uoxJhY`VXb+ zq2o`}sV9aO((ZdH!i{0e9}r#8ACk-V$!4-z)hbRZv9~gRx}O?-G~=>t8yaJnaY;o( zwXnw0+zttP8)1h@)+|5uaBcU87 z^t$I6StiX66^5EYXW`ppC~mi|HnSV0Q#Y5lCEu7hz>Agvwwd02=h1)T`c%na?oklg zX&Y=GHS&S}?fe1;-qho6>S*TFv2}r$QX-V_986%g@tKvmxqKV%sz0U@V3R?Wbr=ST z%eAfxA`#ek)tZdR5TqU>NKENV=&s=?4aMNJ1mMyKW!J@}9;%MlS*bs%)ZMvF-Ivsi zxH=m#3+Dv#>S0j^LMOBAk?+fu$rCd3JEK#a)WI**>=hRYN;}&AzP(`?ipJZfKZU4xP5j<3&liBYd zRy1Q)$F*#Zl1eK`S&7{4P zA=`ZsEzdlHhgG*g%~=OUf{j*2@vcvI`FENWDzOMi3Z0VuV@cw8jqf|&;^|#ju1E)a z;_`gQPdd2Ppt%-ddnAF0-LqyrLQ!dI`T1c(@0_-w&o@{%19_Z|h}+j_46eBQcR~NV zp#NRa|F0|P|8C&>n!bJyeE%Hy{%ia8-_?N}9NjF9{!j<{-M{^v?tiEI-|7B;b-G6d z@QbdNbOtY~W)5@)HkLN_4!`o(?|lDfzBg6cNdt!h0urVFYc)8AU#(nqn+;P zy@>+4hX!S(mI?p4PjRqij}h`97JM5_HgBKR_yH5Kf7&h?W%ApHOin!c#qO+_B&~g8 zayA;t(pltCut$}q5|FnP`pFO*&Z8~H`uh!!sIX88rGRcC%XY_{0LcaM`VXyQ(2N{L zA0!!LfCRYjq!uZr7MGh|GPzwcXQ>bw1$x!`cz)U8Ou4I2#%j(I6+L`5k zh`@;sXxk1{CXZ#L2F|s1)m$dqz-8L1v!FnWV2f4!2@5qg69Fo9E8(0HX`6*m zy)nuh5yvb8n#QKaybj8DGY}PXh6Fh+4qFsOdql44n7DnE6J*pAJ5mBCz!|0d8Ec~o z{V7GGLB6!zW8jz}$hmi`9&F)xihLd!Og&!FBm}_(3}xXdO}$?H9)?Jt_ax_=o5anC zc~mdy)(4?&W4*pk3Sd1@!+=z+(PZ2~N<|LI^r+G|3F#zLt+eWPK5)_D zJBV|8C7zQU`s_b@#4-ogZ?Z4AeNFO$H|B!-HbgE+01){mBP1dNBluj#|1Bu3GK`nq zh*MQgU-s03mQj|L$C3(-y9+I>mE+KmM0towUlXesKg7Z_KqU*QaZE&*xV_?oizaw7 z2Q8vFV%>WQvC1u=LP(}>iITYcu~M-bf?mTC*;af%Bi1n_Z`_fi$q)#D=XRp@Y zXei{~uu{*Q<1As@b+WjSZjbSzD2yVTpx&Ms$`k{$7$PV-oM&yN2|$;Gg3fEHkJ=7T zE@?qEZJ}hEV{72ZtnWHYy5xm7)_C;!PC0xX0Mi{0-|7UD-9nf+)U6oN{n?z`u>B@~ z2;*ZqX`cJLkX#%~O%a8oH7iuRZv#K02x4$ltfGzK_u`~J`L^L(+rTj8p`fCYA;PUL z97S?@tw2LsDkJhh*;2!-p}-y<6UN(>7^dK1P*afdf~zJT?DlGgYH3%R?q7!p;N4*M zV94Q>FDwI1-SYspF6fY`zE-~RVvl?7b@ysA-s3?mnaU2-sp%$UM%qi}I6dM#C9yto z?9v;EYNE;|tBQSzu5zG@sBWZ;+K<5# z9r?ACd{HB)?f%SiIGYihBACzKW#J=wb+o<0(v7RuF;~g=u!8nTy99o|P3H$+ zce(~UNfP$I1WDPFTN8|}Q(>*LY%?EsCF4RPw&P&|?=E7=_rp9Li}uy1wk>Z?&6Pau zLZZ*Dz{LnKnYxFrl2bM@z4`7WHHRwS3L)k%4qa{-c}Z;QoV?7D-3yTvgpd)lMl&Lbl8;k*(R(l>uGg5fxIl zVgs*Da!0cUz;QOr{azP?lQ>Z|(IB>fT&>q*`J{Y*2Km|rW_6>CRU?WKt{3w=qK?-8 zuv_eGm&Lh6dc`g%N93iHAh4_9&7Yo`{_&sNkg$Z0th}qRCS+Pf40^_K_#x%U~$pLueuu=|}ODSV*Qj z`5{G<(P#|o9fpb0G&!+ZA;bI1EO>*X!1307SMraA3GdCwqLT%d0u|2iRL@0OnpBho zvRdk}ASJxYyd)#pvqG^3eiS|5w=Uq+?Of>O_%ORp?AG;N z^sc2?7n~W-a_oN$S@L$_ea^A3zdVf1)7g?Uq92I8@fulaR@!jEGO1sP{J`415WVsd zbE6YW3l=V<@8Z~U60h!=9wBjUPAIO2w*SzDxw-S7+yaK&29M4O)-MFkz`JUhG&tW%_Rsvw#Hj%F9 z1|@m*#xoKkD>T2@^C3!R!lgD@gXuR6M5$Vi1iPSgb`GNkTBZ`Ik5VLN7F>r{TFt$_K}HB>`)48^ z*CtqsD>&Afo>Di1vg@1S??SYf>-C;v_W{l(Y1!?DVJZ4GMPgR#xldWWgrTLI_ySiq zGS)L__22W9`XD(4DZhN-96@9;(6UyrjU_2D$JnZvtdP&0Q|-XzDf8CO=;6`nwaPTK z@ovxM1y;h6!g}-6UW*`?H=VGOp*1WF4LR>#om7&Ch#ZG{lD?+42!w{>;nQVSE(p13 zg(BYben<}A(TKw_cs3y;h(B7mH^RSoN*kMbU_xv6W>e#9BjxnFI0`#3n)6M>bbp7=1y^^J}1ZSnh=HNL5bYb0fb#u(vfHy-y z{j#PYd^PIEtny*p8pmeymwg*lHq)fWiY5@qU>b`PzJx-eNWo`8Q*mtdMmsW_d}gtwyVbd}A&r zlu>2Z+Gm^)HNL1AF?H?eEplOt%pE|w-J5#VnbXQ`>2}DL{uSD>$(_{ z>X$mo1^RKi0(1(l!6ECR%xmU{-9%uekKM6tSytXnw9wq`#wHKKA!kXiVM0~e(Be}G&Q5jW@}91qp<1~ zN+HX}r*B{YCSX)?d;hyp@Vim)|6ZfuHGlnX6#UsJ;9#ixya4E^i~*=$qFKzBvg-pJB{?)AfK;Ameymwp~L@1lqCJqc(J_|fJ(-i4kcLuW8{Fwf&_LKUV? zh$X2x(~#jpPMuddXniM;!JBn-Y>_@mh8h({UEBO7Xj3tiS$rz*w208&%}JJ2P;?7_P$# z*y$Xy#UNBj7jLjtF!9QU(0dagirnXbE5g@5_bI|^$TAOTKx59_rN<2Ou8uxi+~+eu zspxoV+TMOc^Rx(2j^ks;F8)6I9yN}k9InYxfezzJ!8@raIhI0bgRvW~AERj;^suyd zbUoY)AhA%Lic~EKz5YS#IfU)*^Vs1Sz)z^2ZQ7oMsg@U0>|yqPo8|7hx{D&MwRtjx z!!5pH16HcRO)3E<+FlDQ1KaKq`mbIa%vq2z-vFoX{okEFravPb7~Kgteegmjeh&e& z9>iop3jSMK@9}3?AAyv01_`euOdIlU@AuVG-bZ&CEYlzDd8ALGy&SzmClIKC0$zp6 zQ}32T9l+7sUy6H6!~JP((u(bfN=C*!tnZ7uGIUjtJTYFR9^d+*TER!9fluELb9)h` zoS%+?lLaTZQ_dIOEPX2~ZwsI)pOXzq|bB0x&bB==k#L;O_;1QQT){zoBrbvk`LWd9k0xc|pPaH)KX`l9AD{dcF} zRh;aP9MlQ;oxud3h_woCa@oyv1&)ntljdscar28Uv1)7xg<%{XL9SQJ#5UU2KHprJ z7}Y#N)o{ww@>cuBTk|8d%zEI$w&JAY;R>KsEiP~{Vz4XvS-JQ$xMj^r;84cO3M)gQ zfy9crzo)j&{tyur)<`Ni)G0x85jxPEg9EvcuWrz8$lvgx*vkh0E9y91@m%-#pjqW$ z)t?$29#5aUdu$y4TGJ?hqI2*R5FbN;74H8v552Cr{*j0NJwD>T{}CT?bU=LcL!2nr zt8*Uvo}cHwn?G)e*kyhxH35TG_rqsxuUn*YUEo>a@fTBfC=ngaT@{0z9zGi04-!cm zl*6dPF~xejzvUNYdm_BCFos4w$xv`WNx z?vsmozP{2nfwgMAwe5Bz1%|U;6na!opepCQibD|#JF=lm+mlpZ1|DIWnla=I8U;z~ z)<|G_60T_^l@3i{>QVjPq(vcJNXy(>h_~6Yg(sH!5V;Ld?*6Y5o%3%c!Os3C0ej`X z{~}=G4Ft?tc`Z_6E#F*yKQ&tk0S;6{RRdWl&U8`eVAK`f^Ro$6$xz48TXUf1W9pr7aD41)O!*8(x7e?Bhlqd;^Skzdmq%WIKa>?Up0D9l~$N+%Ey zqU6C2V9^@wD=}Y9I2LXz|I8iFgP0_et+HaywWR@IW;|HL9zl)R$TK89!H25p{f<}I1;aKk*NuGMef+hJCi?wb_# zA_9xaV4+I{ahuO=UJLWV)9o)uj1c(RT21uV5p#YyV%rUgGM8L{BPPQ%OgG>NlL5{d z-cX%-MwdKCV)ni^m7-m4WJ|(K$SHqK{gHfy`k8i zQUs+bSaM>1&V$=L&pWg0jx(}U=6C2xm@Fn|rSxXZyweYlor0HjhRpU3I(*1DO37z) zJl$rEk>sO}i@fO{W<)fQ6c31-h$_&daWIrqE^4P#`D=$+p~>LqmupM#Z~y&&ySl@_ z(IX3AgFFekdc;l#!3Zj{5jHCCfau@NgD)h0x<-EVsKGY+y0v9Hy2YAu&s~IN{O&XL zWHWHkrU9C1<*CO!O@{#B=3YdG1l-(u6SVEgATlx%VSS&}P+o8DNAxc5?zyTc$f8fY z+jHV!ZuA4U5m;lT#pYJ$x)1=5gSr#yO)u2|P96pIr^6^OJZ|fp4#3Sl8Ys^3=>u=J z7)QVG(fP~G?Q)fVAdvy$XNGlQ-{u9#y#F=Lv^LBo;Q+qTf&aTB@Xxz@NUhU)fgYv} zZk7+UeIdN1Y$2Sp$r8kU*63g)h>(F5AqYMwy+hn~ez04+GEKyJng5#H9p z)=2Uk>U$wkX?fKPeem2=5%ZMwnWKhtMTQ9Rn1o&g<{qFbHQMF&rl&U|q`b&nmv+7K z5?;ae3qMH(_$EV%CkVKF%K#r*SQiHXGye8uCw9x6W z?bGLcz(RSmu4Lmk&O{;9_t{@y-c}AnLkv!jsKX(m=s-2zUgZY1__0f)iqV>+R0vUm z)Kr^46xa;MP%2Bc2u@Bz{NwJY^LOH1<<;(cuz2SCd~WSr!|?6Lh@dg~@S_H0D_amM zR|5>Pw%@- zGoE>MO1~@esu@#13g))G<(yYPTsEAH-7wF)HzD!cdk(ca2QXFE{YzM5G}xRJF3Pz~ zx}JJ1Yh2RS{zmI+g`N}sRSI4iYoI%&Y~*A>*BpYjX~d}8XXDrOEp@S%X`F(rIR^oE zqvuE_K47RFfFIF+Jzm~bq)m%}pBVo?%MU|)Jr^@;lYbOue|-FBY1TR}{qi^lTlFGv zfv<_~b&gSZziBB!ug+RYK^l`zG^Dp+mn z8xb8at2TsFZ#T^jph01Gnu1mFukno7_fr#VQnA!O$)j0~RTMo@=@SsIL)9ZU4Yvtm zDpClD$t1l<1LTY0%-*)-yY*hOf!wu7IgbO6i`)2WmshbqXW#^PQo6(LPkg3>qa16V z*9I|SR06e)imHw0yMT>e2I4h#j9_Ty5NScrNi#S^H8|WxU+6(!&;?(9ynh1!tKg_% z9o)79f5pPPP&x=bS-u&OwkMIY^Ks5+vuWpyZrU0m**V z{?6QU=ggV!&V8Qw=iWI!+uggWR;}8-Yt_5nT2<_RG@B&zoU=EWRzSlvWy8DVmw&W2xO2Y@%Oi|FyllPortW95cggy);60I=MUOzLu;< zH_ftEDk@hRP*{HzptIi@UkXnz6msH-*OQFwRXJ68?I3nX?0y>sulR%M4hlA`22_{k zP1~EC>IPQ@41p) zpriskfxofBe|Q3aOa9&ee25#p-N}3B)nEQ+-j$H3#Sr>M>ljrg^}3^i>oM7{)4NbL z!Vey|VST?Y`zo7N^BdKdI&|@xhNR*iR#I3OEqjZW3(^bc+1NX$2n=>(GDkee^NI2;Bh7rxir9WMTW4vQ#`{*#c_6>ZM4_~=rvCQf9X83dJX?X_W_GEp z7dZ)jwT55uLr+HxAT{5WgZacm)BNv=Mo<=b!_RbYrz50&e)av{jBk51)tfj7CQtw5 zA^c~|fd9Xx8TeCu3zz`UCKi|h9r*nF)|kJ7H-GlY{2d|6<2sbOcnL#+2@r1BPVPxV z1?Pk4_q0A^VQ<&rWgcst%kQ|X5E`628b7Kr z`&PZ|l6QLatbVB>JFSuoTxG#bWR-VSG})3VR_tt$Q-Gh$H5X2P?&UFTK^>k zP3cp(S*uDGdWz_VE~Jh;3--(Avizsrtvh0GMWb*1u-uc*{;WCdwzp*cV!1>hC1}Ia z(KX+7{&neoVAF?pn^(Hps>z`qZ_V0m#kMo`2#*&J4kW+1>CNh0>6{!ye-iqq0|fC? zfDy^l{=*2%pVwLc4J7~P2+P=i@$kZb1|tOiTVli;_r72M;h^|CPX`!*4Df~?2DO3! zulhtM2=EdFNmm*ELg`T_<_Cj#!ebU zrN=iT+Y2Fw93y!=wtJ1IqP@dYu45FgE!u6 z{;F{=6-b0|Q0_G+%4*=E-RvLSeDWzuuJ4W|6SCX;=gi8{PQK+od>()2?EmmQo(%kV zdmi7SNNxU)sKno&$^T3xvIAwiMk29|o=Zq=)krqh7nZCnECgcTMz?z{L;T}fqUNh) zsL?le`_1yu!ar1E$2x!c2`xDlA@#WS7cpf@d9yF%KW7hA!~vDC+5AH#Z2nM*lv{tO zM2X=&KqUkKl`xaFN`BsSJLeAD$FvnqOY9;m%sgrzrJG?_mw5_NVJE7-o^b5vdUqb6 zJ`f;%sCb@nRJO*~ADD5fb2Iwv`c%zWmHYKSMausSOg#K=2@{?3$2R}ru=u;5_{U+f z_1|q+Xxw=+{2xA#e;1SfH`qk3i#bflQv3y*FaHN@CQuB1{rvA>bNh-W=tAbMYQGeK zO~=B87u@pUwWjO|{7F&U*lx5|O1z%(ph4{D_=cc@d>eIgqyV zoH^$GR6HcR;!!=B^iG_M+i86Ln$cHK0&l7a2nN~2^z&DufhoBVv zxUI)-r-kq0n%2@uFzibTFS9;HykkB!@yIww!514)801fJ=zS8_{(KG{@$!p@p)ucJ zeLhL&4*fZVv`p@}zw8mo0$)|q-6I@x-|n>~;gKKr&ZSy}Y*l6bp}~iS@-}po7;U+^ zIltU?UmYgt?9*NndJoa(EM7^aJk(?Kz9)}C>^@K}xZ(GG=rKVtUFO{te4_6u;P2D( zpK*A>j@#^7J-)qsINga7o7tbiXH09`TE7IItj0vkgLnrK=!50kyc<-Mk{@d;O?wF= z#wyi)4w$0QS<-)@sak)z*`X9(yG$B{T@>qIm~%FKEsV>1;*CGueZr#YeST7^7Z##7 zl_$}5H?qxw@m9U(LvL})8^Q;BX%F=(4&Kt=whPI?Bfvo@@5+$7F>bHE5S%bM6mc6? zH&Z_fa3V$U9j%Ay(8JrZ(k8A!6yblJMDD)+Vw(rL6om~11@c#y+B;g>IzM;Rc<$`{ zC)Dr{=?C0qmbQCo50pPik@o&hg=S8?;Xc3*G`ubMjHuxWCk-_QkwJ(vVML&-eU#U& z%>!TJw$NO(m^8s690UbcYGXGvbOjvPw%aIT!YS4F(bZJ>1mz{=Bu&ccsQfA5Ydwi_C*62Pt8dH&~Gbx|v zLzStmRuM=$#&dnT{E~ICcQz11(f{v94dK$x=3;E>49~5+%%iu>t%~e#idbk2cv!N zUXSIg6)9UH1J$Gb?g)5$3wwic8;=uDVzrr>Y%YJR=ZG8Qit_~S;i%#ZLpU{ z9{cP-VDPBQ&bY!bZIOoDUiTB2;oM0}7C)lol~vI-H3~+5aPBODeWoK&helJ;{;&a! zeIe3#{3Yk^-PVChSw{j>&P@I^Smd7c6!DRtN5C&Vaa9QcVZPJleUf>PhI!m?cJ00f z7=n*G`55naCTWshswb=pV|8gMSyFg}Y_5;v?FpIu)P5<&o>?`HCShCQZyxJveq4OZ zl=P4=*xRGI&K%t)<;hSd%a8KXaz+QjRX!YlGqPUcNZDMScN~wgpP7!>k}k$?7AqA{ z31qMCL>-p}M*SpP=x)}B-iMef)(U@O=*K=ySGC`hBZ?{I{qbRnz#?Ta?3&!H_TJ*L zi=Ug{ui`Q14Ky7Oveju5Gp}xOnl7;i(X$Uo8?Pm07$Q@`QqLLGexa#Y7@0{9p=VWR zEf+-LQg%t}X!UcEF5rZS(_tVqADGWk9O>Z3gyaR7*;#fPKsjS^Qwr3>b>UKt&nkx; zbRB#FO&sWqFr^v>&I50*df1Tcc%pU88A0+xFeanB!-EzdYF5f=z@(h z-jyFmW~TTSun6-+pRKatk@Bg1z!p<%d?>9@{GCydb>Q9G>%6*d!bBEAS-p*NdI_~b z{yQac{#_qPNj4^h?^{U2+=I^e8H}p#{k;A@SNqlP{}KZ8{|kZt>ml%e-q8yDtDFB{ z=;nw2>gNA?-HdPk+-VEUjxsTjdN+wMt4IFy#k&jo9bJ+8NZJj);qVwctrsy+5kTDVJ2*EOO4 z>NVLD;`?`oC%9@eUr_XO%}C|bXXa|od~P@07D}(+U~w>Auay5ZtMz&j(P%Efl9GC0 zk>(mR8T$KkT^-+#@xhBFG<$}FtVt!bR~mPXla5oYyZf(=^6u&ylLpv^IBt^BMHnEi z3w2;)!UR2Xm>Ft_qF{Hau+;Y$>m`JEs#HnVJ~BJzjql3@&Tj=1nWqRYk=?`Bc~`Dq z_s+HJqq}AoRy<~feuHUSIb9j-!RtCQ2GOc0d>Sa>$oH9uhZ7q07^CQQt1!BT!YvcA z+)**D!1(1WNYArl($Et1vuA1su-#4;JS#V-A}Q80wU2gEhjX{^{f47V;m?BF@@jp* ztkw03$>Ac@CzXC4~>JiEt*k6rQ_9Yu`p}I{1zf=KmMNHZmOV3 zlf4)A?6`Qy&C_+aQRpN7smGJ@_e<~Y*ewg6^#;3R^Y6O|q}z2^S9@1@aCVuWO z_&&_mHu4E~cOB|_QAYaDDa~&M%k=#JRO~?He+z=LMC9!Cg+W2|fn{;{GU{XaF%Gdy z-{$RB6$p>>&$ul!G+$aM%0}PtG_5(}92)w%9nQBN|P(}(@tWFZ9$m$ zp^NHmH8HZ1`d)VLj4DpJ5KHPSspM=qG)clQ9AQzqw^s-(l*GjNQVj;n`37b;#(sIe zhB&_74zqO1kVWw?}AygjP)KDYOuxv;$>w#k20SFYpbmV!b+QH9W3#Tue$_oGV(i9Dri~H)2FW|J#24SB&Vt zQH)6VU)}s)kJJ47843vcB4b4V5aIpDGwYhh|>i=3l)XV2SFH#v4MqObYsoQdnkUeSDeJSH36Q{n10MftMl z$5*qeM6ZDB#xI5#{eC%<MJnv+H+#w0AH$-S)xfbe_)d=4{v4@9Mn4xb5a>&#&#~`<~>@ zb28V{H~50s@ks3dfRSJW2@SB`u%QB zFL@+yO8oqOR~`O7>pcWIcj^2tFHT0m&D^Y<|NOl8JCFR)<*&A@-on zhQ{A7X5A!rM{5sv6Uk#$Dd&`PTfvVG{W_YNJMEt2c_?reO@2hhvm|8HZudd&{P1Jo zq7P=<zdp!GpQGPss=>79$+^>h;gD=lgJ|A(}NiQ@U zQQ0jEEp!OA1=;yxU4QVz=P?j}Rb?dpYSgGAm*6SqS?=_0dAs@_#*0RcU%uk5{5+if z==`oB*HK@siL3bYDVg^m6}iV{56i;G06ULW*=nCv*|reVg^wrFvmZkw+_4V5HnZD& zuxeU^e0|N^y!=chy?%FkuHS^X3|!+T{=NyhUc1Kq-A#TIX_xi#B9S+QR|+;n~z_Xj9e?tjIEh@#Gan=yhTgRF8fVx9M3JL zQ~2?Wkwqe>$5>l1x_eXOa&SOX-&^Rfi0yxi_5Cn7jOtN31BEpy!k2O3-(DO6S(tF-vh@^~*Jc z3Dv;YS9I2FcC^h6g^#dj)r=(XSjvhtad34nTum%o{V=Vt(#tkz2zC6<8^yK$hM#Hx z=At+7V|abb%H26ytl5#qFgB)=Pa&;RAuU58EmR@RQ6bGpAx%jkO;90?Q6UXqAqRgQ z+sYRsSt9U))=+D3TAto_)L-7n;BmMysSMOJ*o>;eg%ce!9QNOU6I;^8K3u` zWLq;=ek&xj+ljQW8Ng25eZ^x%_hbSti$`lkTGfYhU5eZu}w&U)e-dS7I z`Ymn7V{EK#N4s!RBVSjhLFz2;sbi@(F^EN>Khgin8dh{;1%q(eC_?BO-(&?=hC2S3 zr5a$Tw`Sv^y8t=bbD@ru6}5I(e*E)lt_RR>Q)kBhG96^+xdGX=idu<tapAQ>+X+xt%4LrQw#-g;V*?Vfs zRjFN6+6B?oZi zE6hFj-XWMn>~uvs0;!`$G#xlp zqqc0CUB(KshT|j7B(74&pKy+^uOsmurPfxO<$Wdb)3Q|Mwhb#6z5Y1@k$yjU&#fZ< z3CHB|UAhl7FW&5#EN>$ZYB4EwF`X#USHG07IK~2QIp?C#+<%n)%=-c_M|hsS(&k|U zI&T{|g1U>r;k6&Bzqw_$4L91GZTN8FG2eP(Igjf3Rm79i&r@WLu_+G2DFaqDt8q&KhPrI-dH|J_U zI_(n;3&;uZe@B+~>n}F-lML6H`)r=0j4ufpsTri%?&Z(_P(4t2v=b<0G2C zI}GI~;wO@@Sa&kcI(Rn(^@QN_i z*z(+b*W&n6Tab8^~&h*&1WyS-p{R{?S>2BW_ z$4q&RrmTvZsBS_`nudYNDjiT*(VpP8T4Q8TT@k_EL8AeY=IP_jV+0T{WMra&zv-XbI|-4% zc8ha~(Q2DSV9@$3PN4-W`1Bi2CC>8V_s(*1#VG0{lF(<+ld9OGr6#^ClP=8ojd-u1 zi<4B7*!J`+5!f!uS8@mpV;0R};$A%0t+EPLGB zCF_ZlEwhP5w0e)40uEcl7rjW@e%+nf#jy}-tdwkWh^%S}VY5ScU73Cku1v{jL~8dAL2&6mEh)Ef#zK}A+#8yQ5d6P zio~donBa#lz#P-YSD3?1B!D5JxxZj`mxm@`8^|~$K$nOkCO;_w0giX$Bg*{ZOdb4; zfipy)8b=mtn_8Bpn=GaRQa>49z%vozM@)<`jH4)E)c)pOFyeqV4tOa6TC7%n3XI`JZEV(v$xzKb3Lk`v5V_e z|I+tJFt~nP}DOq=Yr;VP*;Q1<`$0@MfrMA|d|6 zq5!5ASWB@MmQpLo$R&LU(PD0CVr;>=*Q?kQWlfO|ZbP0=6yemj7T3)XBzqbU>%6N-k^OKp)>x;?P%m_qrM`68(Ue$iT#&2MF3-2N9 zJ9MRTM(<0SpQ{q%Kb*P>uMhW8bD5v(k|_T8=Xx`}9>zAPws}I9|p4al>qsZAd3)R^<^Tltz(<{jzi#EQqD85-TpVyx+(HAs=C z4b~dqMVG`UxfiK3tUJ;thJQrJ^^qc*e{@NLkEaFME_tt z$sBd9J{8Q$uwRkKEr4TZM^^tP9IaJr>J{t2v9>x>MugQ%t$ZUt(&W67ccX&7i#cObV*_G0pifBYt@wOU@_ zhV7R;W(rd3wt+|4H!8AwKasLY<`p%vvnXB*9KYmG*)wIh{Y;I7YV>DOa&9`mQ9Yb_ zuRU9D@O-g`z2GPLhE`qYZKNP3*9R>lIZo!4iXR*q*+XxS#*NbEhu&6C=&z?gdB9|s zY_23%@Ih-PTF>38qNZgQ0so-&njQQmGoQ#!XE_yF`%i6MA&y5|6*abq-dc8p_v9}= z*Rn^QB6CM}K&~d~XZ`2%#rNLT4{%!~o*#pP8uB@W*>wnz5Iz7BQz|tL5zXU>($tEK zXsjEyPg)Prmny(tbftUPB{P&|bR20@)RiV<&Xm5;yiz|N%2dL#OCE2@Ao`(A(Kbl` zLSuHBXQ=f%9`#Qusf~uXp>nEOavP54d#klPbJj^fXtZ2J7WqYj1*%Z3KgO&&({yYQ z#Nku>yGC1nDzKo-#WzQpdpNz@h1N_E7YDM3!w1!*exdSZppR9G{7hfiIS=iCeU3|3 z960KzB@0TFaKACLpTHWmxC6gfqWIDQqkGigrj-(z_O;D@d&v75d{0dzz$0 zz*$eRA@y-!0ti(rs`hzgP+MUO9CP3kOoz@#d3nNrI|t4nHNbXFfQHli5sG?P)5OS@ zJ#hf=NrNKGsNDBv$Yw#(BLpP3I?*^HG@KH`4&*Fy(~G>Mr?Psm2kyU*#Y)L8V zHv0tEAz?=PaW+t#`xc(XOhjsLZ8@43R^Xzh0fA457NZbBqKWo&Ng32xDVGv?hkTZ+80TBUG-Ey{C@Wt6n&85)iuTZ3 zpN|Wn+gBZD$WSYDD|inpouK&l*M#r%U!~s$-N&N9uc1N+_F0*zz@)K5E46ovmIy3J zna!@2ZP;bHx@mn_y%ulD^gIrJB}ha&*QM9>xa&xesPiin!%pMU2{qP+(YGPIJ}fhA z!BD2npvQNdy>P4+-U21bXn#P{h;8RG$I`t|L_OKzd!$`tSVKg>J42@P3vY~j7FW^E z<;%;}0%eE|iLmRsbZ-wVl`w-j?qc9N!4q+?E;@)yjn9z2C+#$RZo~V5b`&Ac=6Wvf*N-85G5$eo@wr?{%9LG#_ zey46(>n~HQcxMIw32adGO8K*K!c6=q%F_eVheZ#7sg3Bq&P)V3QVsaKF{(8R)wSB7 z{WX5VxVIbs{u3o`ro)4jM&wR)Km(H->PX&JpRRw9jF=-C%G7S(RpJR`RrP(2ilnYD z%8_WzILeX>;?45etC&50>YK567uHpk_vtG9x-a;K5UKro3GbNoVQ&-evrs72BqCV* zl@j8asbH)L_n9daYhn?!{h|pD%wqB{qRQ`4Jiw>H8_3mnB1;mc3yHQswP=D$TAfqv zdI{m=iPwu`RUfZyr|!W}=%!dvXm&3#D!2P5i9cLrV^o$rMk$%ek?t8)mv4mV@udys zHRMr!;vJ{7Et%0De!WwHc$Q-kx!^BWbE3^}?8%v4H`Qw|+pu7DQPPkwA~Bw_Xf@;K zb67CC#Ke64UBCbHuMN5i$)Ld`=V?1xVwy zwIAIkX#B03e};4WpsCqxIETv}$KD-pQ-@wKH;ZFS)t`Sh^pbO4Z$VdkJiHu;4tOHg z^ag-G10F`WF%k3_hYO(RNBJ%=n)Bw(Jjs#p3q0LmY&G$2sAQ>f0Ldedwjq! z3e711*osm*JS@$KGW`M`2h^vNFr%qG&T#yKLU&ryKN;AB)}%?%=Co$@>Oh)m(_9-(4*rU;C&kz5|wpTVFr7D}3L z7Fv+`ofBH1MsmRY`-TEPcR@6xl)?_lTP zq&}LDXAf4+KUnH{FUIGA$nF!4w_%)wri9-inPuTqMkM#K#Xoi=gb8_cvUP+Qx*=lw zl;Yy)siZ&acCuKw)$L7|szypwoY$>QMyTRSRQ#&@Hfg0ADPD0>H#Ir@#<`nqUQS6n z@UFAosHI3z2vrchW8niqUMcy7`bm2Rc>=t-gcBF#B2LHhippO&_Mw%05vot@E2t`; zWMX4%OVoT}4Pb13!d=&dNnw{Cl|$b(In6(#Y;XH}k1^Qp4CAhfTW7m|{{&0AWB|@o z1@Dn|-Oum(hU6}Wbn4I(U=O@hNU$^jsD{D45+ikw$TF&3 zjube%#;}#+6FGpXQuiDJp?@g`I7uiEa58`wiIc%Z0Pg~L#n4QFBWD5yxh@!;VI*}x zi$mu|6}Z6_AqlY2++<LBaP`R1G?X-uu2IB&{0vz?S%pcc_lKeOWdyRjL zYeKBqP7g}S^n)U|2G$0bK<`ijNY0cKU|aaq37KsYnfo!(`&M9b7Yqrhjr=Az3`oDe zbkTi+k5WuiVB@;Ri=tK!K+?aIMg$kdXunVEXyEM$e$7L%A0+foYngZg${(TViPd~Z zte}p~#Rotx;TzfIViayQ`-r*z8ZWIWPX*Sj`@$6VHH#>5`}9>cKb1;OVxo9vjcT$H zqWz8u%NYLF3NI4NSt%aZq$BwH%@R78y5YpWT_Ie z1cx4S6B(NQ-J@sOJ2aO@Ze?)faq6kIXCr;|GLmVEBdwD&5Xn4aLAo915T}tOz6aZ1 z40LP&2{+t$6=@4NH=Wd8NS!ZvkWAsA8}ek~>F@Wd}Lb&;fxmGJ~3d;#7k zjS=@aYbu8j(ANtRnUL3|MbLtq;6ACWf__4*utWh0MpTC}lE*Kp_ zN3ihrDk=*J#OF~iLi`PaaiTXdfHg^F7{MY}C{Zqg< z^4jvN^Vp21ek(edHq&RvS2Yw$GzQ+ZMO^=;HM5`*w_?J^@~c>fhTM1%NH@YSf*TS- zR9C;#=DE{!;MlQLiAMkS@<(;P!}=k4;|qz+gSUq?vSkV`;sBr@)ts{hl z$@^r$5NrQnCvu+R|EDg%vLt0>xMnYM@-sP*wLk5~AtoBo!d@o^fCt#O?g z0OlJ5q()$ne@m?Z>;y8r^1+Vbz`z)jWY|)Hxe*qGfmA0ca#oYe2&@rX>-HN1DD|g z+?aAfM3(H85gxHJZbN3x&=#h^>_uOtJrnRyL?n(oC&~vhl!e6%oK zS(Ac1C0Cojiz^H!u99(07-B~82#I2zRpg6Dtn_uF-h0~jF`kP-L*}jjeN+mx8g#_1 zzS}5l+I_d;aOiQRZu!sn>D^eK6m`>~l*!D)@mXKbo<`?6f2rK*Z_yyCsicT+rW}r82Mbw5G}8n zXMrcL&{tRXtYnfuRlH0nZa3wl7oMO-uU@BqKXIY2UeNfoN8*vTBQ1$kT`0C*uUMx( zY!qC(`WN#*`PJQ|G|^Pwawj`+=D^nluGcd8Rm2jHWC-@s7%s|Wn0@DD&^&fY$Ibbv zs(@FU#p(0Bbd@|^yRZ!(UuUcavF1T8%BxTaTNhT_vagSu^H(;?zKwvVZpXRm0%sBp z^D9AzPC0MInh%*Mqh4J;SqZXpFs>34jbqHPjI=mvsn*CB3v`ksd85w|zzr8_{{kw=0t|L;B#Svd=sl9& z{#8Af3m#i%&ZtZAgJ!9^5ro{=-drHnR!bn&Rz^;)o*>mSOE^vJ9qD*)6wEFY)eDOk zybfn3($x`8e>@Brr3|CMmDZTMY!*@PD>eZ(=x06loPH?D3KC1X$*EM-t757oaVV%U}50x^0 zu8}&y$q5xseoQ*j!Z9@Xt`OH^ou^n*DIs+fg`8{M(PXpgpaj-~TO|EWSd^Z& zK3bG1YkU*0z``Y|hFJpaR(llABBv)6ua-e_ucx6Ie_K<-os%MGDiJG8)a4fYhvd44 zDB1HJKpA3Gn^&+JFnJeSgIbdk_HS&n6k}0!w^w0TOwENuhBS(s7lqP=0A=pUCYD z3-H4^8D~=XpZUKBP**-*K^HOT?ZR?w44n@O48OIyyu%`KkKify_YU_)E98qpL%_xqMTStQ~1I~v+H&RpVM=)=jp?Ud@%2hR}_SOM2pL4Q-CM;M3@BWq_jm!en1c>~P%bCXo5hNvfVG{PvM^=!P$#yRA zdI!a)en~Qwr+qqh$${MUN;l44!4<9592JsE%i%_8D{oG*jr^7;$1d}~Q9VGji6uNG z-&jzr7o!}w7xG?#{;OTLaGki>tp56fqJIAdkIHvYvE-@lgx@tH@<}Hi->d?p?fwTOXQ#m zBw$xxgij2D#gvZM^e2#{Bk*9P)#E?|eYnU#$xu78GK^6XKa4~G;{Y#lFOH571Q728 z01-tV)g+_4AVnI4Og#!C(dPX^!aU3Hiyq9kXR#j3W+=oN-GvM@^(loVdeZ&?LB+%1 zp)M%w8Bxh5g9rnB$3sySSwc*@g5d=%G}0sMU{pI#1KQYNB;c#|6M_zl!w2gu(7OQ% zUu&=n7!a{+O%)r**$6y#@L8aYh-7aPSD(!V&*=P)W?eCu_Iup7|4{c<(7%p^Wk{|- zS4HC99zR&5GgiQH0_q55!xNoxh&M=>hafcvalAQw?`7A&KvQU}G$A#+asD}drHSgV zFs`7iG`D+L`M{4W_h%(Oggk@4&r%U#K8NtFA$t3xWE1=tnc#w1D#E(IK zyN`P^t%cHU*(lTc>=Wl%YaeT8MhVVZJAQbxWWqQJPszR`HtWK-t7gv|uMWwCvu58H zrEspMpyI_TX0vbS$h;B;OkJm6{8=%f)k7|d%=|gW{8=DT(0N}%8zLU=sn$yN zlH?@UQ|8YaN)2*>WT%7ctES)RYoO|5K|K(;)_}UklX9$AU#`_cip4Hjyf?$@2Xal~=NEsA z(@vepvdno$y8_ueqV)r<@rk*3eOtz9&Z|s~J9PPFzUbJ7PCth<>UqB*n7-V1>Bf`t z-a*G@SYoAWeK+w3R zCxwn4QB6)0c+eN{=I_GJn_5q*4Ic}=@k*w!_9w}SuClnh6LG6;H!kW-MSHw_6bZ;p>A8ED>sAQsi|$K+;$DyRjUFF*pFc zGE9pXsLTB-)t|p7sR00TxEXcXk8LRE)+|ena^^a(cU0<^OrH-Q#`T)l-a#Jo)t{8xvwkGUQag-vb%smQmZU{o-mS1>SMSVU~qOlm#P4#O$4A_= z<=)pwwEYkwxE&AUF9b@{0Us1r-F)D!La*fIP~amEo%tHc-l`=t zG#AO!3Rd!(@x8#JA(4q4&qW=%d{}F%;uLa)j`MxPK(qQ&JG*3;{K~aK?P1S@Sg;7E zAN4`YKNge`7J? zJ0!%S61@`c@AVIp&02dV)x`k1i!mmE5ua#2p9DA@kj+d4rAGGO3Nnt-orf+*4Wgce z4q=H`QenbfFkgC5>?{ekcl@m)j1ielEd7@*&;$^+pyJ=}2wm)W+;GHMw|+N*1dGj# zIv2&!U#1`Rwk(z&bFQ#!E=!;`_JrdT#|a1QQmhI43AHC`nsRfK@a_xr>>#1B8&o2g zrKN_b4H3oG5Q50EKA>hMz;!Q7QJGNlS45&O_KsIKOqoUVEF$sF?Wr>*6+Lc656j+| z42@A)(@J3+##~*6S1R~*1PV|+9Sd2B{ZHynJF24i{-?{uAZYiBXiS2doy!uNCPYdh zuuO!jEpBw?Q69tFS_TV9RE7r6c*os368YgbsTOiYg*nz36eKmGh}V5F@f|_gyy)p_ zeC>$I{;WeE2LFh*^5!32P1bsuym82tSe?If)L~l*U7yY}Kgx2(RQ6>*N z7qN?(padrU0Y}PTDEQjB;{xtr&f@TqAXxeoQvV>%g?`l^YsX)= z3th*=qm#+7oq6SU3{gNb4!bi7rA%WFr24MKqW?`NEfxdfJ1jc&Q14N>t|}a^tb2Z1_#K+{VCp0$Q=T;ZnLZhHCwCP zksm9WPTz+uPdyw!`heXWq!0M44SWDSDBq3v=&cXxK7DCw!?>i+6%R_|YBe5+On>He zIu`>i^)nl3HQPIoVwSl`F<34o(fv01B7dto)wd4jyITgQ%)uz@vjwUB4{rvcKj2#YXWRKhqIh z?bvbs=e-XOMyJgYpC25I?NjxAl3?>)CBDdT6tTN@V;$>f!NjB;^VZL)y7*z zHT%w*BWo{Yw%)ol`-7IA+@fsXnZ&_q)2+Q0tU0fqKG|wFJl+=8tdN>Rq8QZ#!%ri$ zT&hRfopl-yIv>)%;d^qVjpm>c=Dq(#>agG?+o8 zussdWUyusLO%TP?rdTR%C#d96T4_)TWpadi$=zfn^%CM_E9Q65gpnVRM!(v;+ADUK zg1MJZ(TRMf3UI~bJf-%L1`N*9^A zlv)-2a4StL3iK@fP(@RC65CUK|!bG505O_o?d+g9O9I z;KXx|GF}?F1_;>}Lks;o`#Eo-1?!lw26P4EmgnNcnVjTjqM|5f`S_kA`upOfLto1N zwRl%!is+<&_P*oN!NjJE%FU#rSIoOT>qmvu2KTNKW9~S|q3t`tPwx6hIWvmN_95@3 zJM`zNNqIe4ZmF>_LRiosEGw)mv~YDst0ybtq%0fXl!8^19;N0%+Y6u{3N%wKh&obA z+Xf*-_t_t8YBOp+F&nAq%F+)PhJ`~ilfx2{+-r2hMH+}15{R8_S{*~i}p0NhiTwGbFAMg0Lu9LOA?G{z5%GUdp_SM zff#Ap2Af)HsM4Km3p+3$SMI?C8}orvjnD3X8@yngX0CJ!$y62w<1OFdc`D!Lw*d~Z zWIX)+oOl?$CjKbM9j1i=1u~hd01`m!uLQ-|kehXC zIOnJ_>b*^YmV2B#@(Y($+79!5UcaX~D)WZrqHeyw6UtDg0GpknHv;8fCi{$U)W{>Z zEnVgfpG4nu3TtGPQMYQE;w&gV$FMwa42HgA zgt~LGCQUYY;^zrl;-yE_Q5$&P$`{_A*cFOMzQhcJ2TKQ$gC&Epn_`)X%iC)6o zWN@vJPfwSlw1o%A;NBrYrps44RRT?~CM}l7^n?%Z#&m~FIxWW;3P+O1?41NAdkLf5 z8^H-(4PKry70$Xh!W)_&vkXND3sa0dJ>>w!6%_a`p|v^7VHUzLO8l%)r;=9E6IyuF zY3Ga=k6#nkCmdIjAy%EoyctGkjs&bE_gU|$RC}2GXkQ6%K)=M;z$quW2dRE+lF`l= zV9MBnF(^{L@gfP|wg?|*WCi@|oC>HvDG(!Qy3q=g`vTy2Ta11|dJ6@2A@*TL}2jMd&z1~GA*rKH!vEc&W} z9%G3pMmwEWf@d*$u0Tb*b98EAEN0zM^C{CMesG#k@vT)fki@{9(3D`N2M_aJNk0eB; zqf=nAtaSbO!OtQHC_709L`G3p^6zD(5|di13>4)M7=c-{s!alI7b0hlSv;&nq8{c+ zNaACacufEH{B0zH?Sy%|L+(fJ6f5{Eprew<6G3T<8kq%H4_bt}gIZ6(9?J;4Y0y{% z{+~0!pEDuy%)yh`W@hSdv2hxC%eOpVV1=JtUEnA4I(p_O_KcQ7mB?MAxp4YL_R8xL zYw(Tcaw2;EKgQkys*a%98cl!z0fGdAyB{2a1b4UK?hqhYg1b8ew-8)|y9IZ5hoA|; z-Tlpw-0$B1{%gJW*6K`kSMT1{GgDJt(}$BYMHya`18pOaZyaN+RR1q zI&A?)b~5q(p5a5wPm`>G7IY_d+B5P?0<-x1ufNCrR5`=*xitkR*Z0iXRT%Gkt9!+p zaZAh#ho)xz0^c=J^NpdxVFM56Ch*owT}-AK2PqA$I8!x3bzmzEJr*+Y$@r%v>!#U z_0`ZHmg6g}|COA2Ca4Fsun$?|{kegl*5WGVOscpufKAawPczZ>UDn($bOENQ?(*&& z25Ys0x8YMN!_OaxiKiU|Eol?WZc=VgibzzGx_J=TSmuQAOyf}U%TJxm+WttF6rD8# zpKdERm#Ii|RY-lGp+N_u3J5*B&_yi2)bz$9eIe}`yBhJ$-*K;bLLX(;q_bq<(>43g z@%?T%^yrBnc$vAubfWr@H;M9Ss#4!42oLCjiiX!${c)sVGS) z>n^;-W_l&RTv<71y2E?^Y_wwUJVfeoK_J8;A223#Z^ z)PP;3Z>%b>eetb{fjy}DhBv@^*`oz$8=-*xpPxnJmC&~Ji>w`?&k&)C;Rs(u5Yk2v zDnt-EMG&S&5OzioZbuNJL=v(^5^6;f`a}}uM-mQ45}rmzAcaQ|g-5W2M-+r3_k<(Q zha>NWBR_^Czy5+u@df$a7i8%#5j9_sC%zzWd_lhYf{Yk}Oc)WN8i8yVQBB$=0#&s) z39kyRj-*fTo%>7`N*!LGz}w`R>T`7%{a4-;&s3isg|*Q`mBFWw9)+|~Kt=WmZ=l_g zdEJYI5^(G zBDXAQo(FeoC61DpG0%zHlRl!)`oUz>sdX{7EF`YCC$5t`7~gfn%%dE{Bfl)RDP_}j zcYxXrf|)^iSxofPl;E|@iuPgCT^j4~YZ-p>Bu@#Z`zZaJ_U1*B=V!uDTS3)_1`>;e zfpNn4ipUiW<8I>~2XH75w|6;vYf+U!!V6nWIUdNu1EMI8y|WE;k`Zs!Zd7_6sNN^! zbkkMqMVbzjwtkmfA?Z7+7Q)|h~@QsX|>FbBu@ zvxUPTIJ6H&^~?0-NzvhkT5_&xXp)9`spkKCf#_T3Hhla)$~QIIeMhy0{nF~iX#yK~ zSrz0x$9QOLHBRr-|0$S~T z@wH2|-F+q1*SZif>s;)Hc=i=qs}?l?@=ry7C8c!~U%N_c)vmVSTUPx-4-)Q_%d{NN zzD{e^rM3`U=7~{#Gk-K7jSX{LT<^Vh6EKKXs$1{8wh$nVRjOV8Y3)bAAZDp%z1doF zfHY>QdcFRd>xTIIB5^DptI_jn{jd21^nCQ*Tb-BId7GW*b1ye0k*U)O9gokxhvmcR z@bLaw@7&ps+`IYJ^zglmA9gPip7BEO&@>cv2b+FoIVv^%jw4crTOHB6Xs;RO&5?4%bSmYO-h+^)S?8 z+y^u^skbW%n)w8tm?gHUj#tVV!0}yGl|9s1+>Ch;kz|oJ(DypaHud4i89)B?;b^YD z+vpc&l{(03j%xjX=ZWy<#a9VwTiPQxbD}EnPSBiWnnz1d|S{3S3)ul zMaG;+x46;HQsHmp{x3CWHuw1Uq)5}j|NrtkY*j?xg|wUpO+5{sP97$K3ThDjGdH>d zH+lu$|0=O%Iq1i@|GT_+BhzL5ze{ROudp>1N`ns1Z^z>R!{eyMZm=z-4z~X_{&xOr zu>Fso^eHU%1}@fR|0dj56wLgtejWj!zY&$O4;qcC-*2-!)HaKk*N(61fTAO4R9 zQucdf{BJaH5fSmwy?FyZ*+v^}6$Q3ta_vkA{cYnFwyV!R^e`c8WW1sd7XrgbHW)@a zsL7$ldj|yZ-eY%%8(;vHG0r$30@=T&z^Q(oDk=$tq->?>MbrO7Za#s|OR1 zB3>+*O2hU-?N?Lyc?!7g<8)HT0hL9o{tTkAKrNOnIE?qiIA_ocuA?J5BRtl9CR=-s zJ%WBlut7)>*l-VTBQWr(-^qPSTBXiZTEyuMwn6)VkN1xClksX>+h?E7jyklr$Z+_t z-eG^DTYcXa?G4?|f&VsI{(qG!8>tUjssCLN3cntUNhjw$RN>QYzCDbJ$!krHk^d?z zr77@HDum=^=*g6FY+72i%Y>S|=3DsSok20m4<+U07kIXds7hRB z!gfk%({w+c=9HyX|Cy(EG~_Bk=s8yWM&)sy!!{bN;GwCO?JB*XeN;rn%MwxigAhlc zC#PC7FsCW1o4lxtj8V5DuHlM|QK&+BlL-A?Nbb-Eq02UW?nxF}?CXqBtLhxBG>nJr z@HwqCOCiOya3jS^5s3k530c?CdVb2>3Z2*i({3Y0mduZL^7T?LmHQhb)n^J7S0555 z=qOSX!X*oW7$x&7r6)9g0soq%6(h>}Rp__w6=~q={1rJBDabdVqRo4tkvtXYz?0GRCwPXcD0XnyvVp-r`KiE8oc6()_R{c7K2sslhLq2 zugkVIc*7HI@SZf`R+R2COh{U{%b_)R*As2_p0xB87~ZOB)A2w?btchjVpH^P0{a;>>G9dU^%-=RbDx7WUc?K3 zm#a4n=ED2}IYHWW0FHQ0xb*f7RAt#WHsHZTJtCQk}O@^5HNa=Qi>Riyn;#y==Fd$ zkXm@79=~EH1uQ-KVZSt3$6FTxj3c&g72)F|0*L-7qE*0-@ac1KGQZ)jL|3qY8mE8! zaac%c$IcUfh|eJH@G#AIGSYu&o-V7#G$yMOk19gAx%p1t}x$XW(o5V<>{ zcb~65R+M$3jPbkIxG8j^n9UzeLzx8;jR}vABtr3+OE^*0H1=VfzGv*yRrncYZJ|5R z5sbIooJaJ2l4OaZd5Z!uM=Lq8(s zwo67k8N!+95uj*m5hxoKC0fhvw{n?Ey*9CU~ttZP1e@qF&3EpWIsd)fQq z!TfCS(Wu$SD>Y8si)*z}<*X6MIB4Wna`E_ZhMs%sfvTcwr3BrPX~xNJkKpcxiiINk z@>(L5uapm?Z?|VUr~`HeU(KSgUQk->vJ7Gazi4opuW`bmej-m4w*7O|KKZ4mFx;a# z?3L`kQyEUbm6+2+bd$Zk8g74L&&a1EjZLcYqRwIZB>3zZ-_Bu$mGJMQL%es-+)(uH zHE%OU@h|xa*nSqf1%Cb1n;rpw=xJqo_3?py%0`Bb`1sGOZxsd~7Tsk#EpLO=)}hX_K0b1kR9) zrdLZUEi45IC9rICrhey1g%NF-L=?`n|A053F4Yo&H;{w+Gs%`TC;6o6)YpGvXhez@ zZ^yDQ-P1_6dk-x*-E-EeGMV>2CWjEN5)SW-D{6c8R6upfbdxhWUr*KbhF9j^!T`@! z_`Gb!Sr8YGN4_=x=8Qw;3?-HQDjWL-4i8tp_2TA?N&(Q^I1&c$@Puc3vFYEReXEi8 zau9u7*oM=4GsUr7=BaSG9a+CcWNE0d;>>SPcrxDV+Ipk2n%|0^?Nw7C|G48Z=|Up` zi2d0w=?@rR9%?2TykT$OmT)L)v z4qj|WqW*5Aa#%0h;u^K(K(xW{G?li4ZuJT2LKI_JxrQ{nZfqymESr_{C~9Az#9&r ztuh`%p+^3ECzwAv@L$;XOj&>yoDGmmL{S5#xI75GP#1IX0i#m?ZIl%KuaRFUTpp^( zH_rp8{@XN3=zmP>C#_Qp!IXIWga%vK)WZ5ng`4wWRI*{K z8LI!vjPmfyq!445BJq_DhI$Q0Wl9 zMlc5x_DPgsOK1lPa3vtvs4fzjHu@63Ndit`VMV1vE2slS!PD)@!p3o-Hin8cBtwDZ z9Z_?g=##BEU-TKS=+oV7pfjAJvz(%{pQ3Y}qVt`i3&mDY!%9W0DWnN4j$B>7eYg$x z;v+*&LxcU5&GRdq7@KG_8tK&-4%$)pGiR|oZnC@7ZI;ns#&hbRqv7x|C$Zn$WT{+a z2dQWmBNF-Rjl5)hKeO?1qps{Djm>O3dfmwVJiYB{TGq*|SQ*#2`N;TwX9EtouI*l^ zya3<7YLpw3IggW03%p-Hdv5JqQO()W79=h1-k{961qTrR%AE*g7vOrM#~jbDS$s?| ziAKbtf;<9tY2{4>8a>}ucArvS7(+oFT5rrFRQKFIyJEzDzj1zz?FNgICzUoT74{X<*~?chJ@RB=VHbb*Z1bdOlN`ZnJYSSsU=N z$sj~<$ze)DdanP0IxyCmQ+rxppx?eQ$2o^74=Meya^P*DF;_g12=78bEcIl8>v5`w zUj@Zvfnr~a4*;9vz}9C;r3tWn#Z#I7RZaynOD0c=qI*U^10caTp$i2uxZ&)_2lXkh zA`j!c$pX-*o<_H4#BM7?fG6R=m`g=rY!45K7dROqT_tP}kgzF_>6r@Df6bd0;9OR&{Kt&N(6^@+ZCdp* zSd(tzp?SaKf3LLFUsgl5U)kp{Fx~K`rG--!*k~(PMLtUbf|-9ZkSP%l(E;x~B!3od zLiyh#FL86X+Y$i6l7BSV1rJ6j|46Xf4qLYZ69I;| zF?BF(nS!rCzTH3&B7X0FD@y_kL^om)Fl=V&gLpF#@V{lTG6rr=?~fJ$5r zSPk}VzRwF*-N+z9y@>~6t$`j8Gf`jA0xTWP0CijN%%V-W8E@s-n&C?O<>4<|p?kZ7XgSrPG(C{_(@L=4)&?XiI=)uqyEP|kl zfFouovP%M7YVr__JuqCglPi`72@yiVsiJ-3g~Z}ODj>Qj1F+1f%~w6~fC6;I>aJi_ zi18<26baxg#}s1KPwK8Gb<{ugXUc!-sjlD|VUkD;v2POXQY61*bM#Rlgb*aoXkT88 z6A6QG2~?R*bh4~$A1rq@r38(771 zQm0^F-pWtQ0tgpTLM!0Wa3GX=PB>JO7PuGP>KG89Uef*~Nlu+afYTaUMSI}}Tp=dR zC;l+frhAv2cjevG~4Ons-~vj~UfiUIB!=U#-v;8dp^eJ7C-Zm3NH z$Q*&eX~cIIaRf*4p(Zlpso!=2)A^ zu%C#48To@mUF{$$Yn4Fo2qZ#v7KeEvdRRhxH~?ql>D1K%LP%E#d=5cKxsxe^s)h&` zO_+CDr5Sn#oiF=_j(Q;#TH^DUVGj?u zt)U)%Xyi)e;De6}T(%L6;z}UwNEl)i<9lZU9Wm?C9cD2Qb>IO8V%J{)5Wc<}12=ab zH=On>;BU3C!qR#API>y^)9)OjP<}!Uni4N!dq=${Szn}e(Y>HtPD#tFjUyEt%q z7EBl>2#(;DF?*G#PZ7}4j!~TRX;~j&_^Yr$P%7tEDj(=@fzH;qi4j@>yXrewUI3w9 z^sDdEvBGl|!p`S$PZ11YuC#IgKRim6R$VuIsr&<;s%59Em3qmmkeOG{PXe!;g|i%l z?VCu(e~_>*qvF~~R9nM`b98m%y)FTZ@A@m|<3N$!z+h)#fhQFHGU_W31p)&&L^?p! z`YK4La1==VL)*osf2H%4g&?Cd=l0&)ihxxKC7z0(g#x)V`xEKACI90-ChDLK>#Dz>+#g$K>Z1N z6*GCuvTH2h8=VrAnj8@hDwwyh!jhDlxltwUW-%c^7_wl>FwSx?%6eLa;$^Cz79k4s z63`dT`v1;p4i|~>s~PBGWHNup632$jd0p08$0NoFdTT7Kck8)zmKVB+t6l z|8-@uC7H!ztiPhv1f5ExC!M(+r+@VLk$u_HExed%IKkqd zgGf37qK>zGKRuzCeh_1VC=eLT5G)L$L^2V5$3PUxmM{Dh3ZT1cAijA*xiP@=f+(0Y z#PuhO08nt#H^~k(+SNe3`h>D(2xk8;qsfS*!yw(~KfX*)DBwG_!%w9{8&#h{!j1u+ z5lbWyaUuoLaPURuMh9ztCACPQgq5_f#+b{2KGtHKtOU9MGcf91nlg~^1b&sV1AQ%;axw+< zweo(}%_mb9Osjvv;hcYYJLU2?u_CBIzsaQf3qJcd8E=;12BzTxAjbN=kDvk_^w&Qr ztPnw^lk`U!Q`65}PLkxtFj+}4xFzXN9L9eXb_U5x8h>>+u#+hym* zWbf{|dY}V~9;-}$1J_K<`wsOu^O4I1s(?TEG*Zas%DK-iSoH&7k)C6t;-UnH!{w;M zb#+5`tUrg$JQqCnPI49qbpVS14>2KOlpz7?D-`%Z5ar(iO}Yl6fMRguP5lH!;vt54 zLOnwX_5x8rfoX*{Tmezhhu&>YAlDo>@eTpN1=5`$2RlC*ZG`Sv0#WS;-s(>%0GPo| zJo1FvK!&${GFlH!`tzUBwSDg`N082vo4EQ3HHRE*0iyEM<3-0rHDG?niI%Hs!07xH zzvBYl`9M@9(TWL@41t>gZ2$%xcncsE7Eq@Jmo`mcnFHno_TIuO7RMN_fE^dF{A*%J zqsoAr)G3jt4i`cGHwZ4s}?SPy~aQ zyDfPE=+$2Tq%TW1*C+A<(5rNO7=iNCDY}sef!zG*YW`i!fEWaLkVz;Q3)4}P!$qSF30l>5KX5tR zX*4qBypd-xAC+sU$v)g>J$N^b%y@Ho9tFxymm5T zaaOLOadGux8RB$Wy>=*fZ>`&!skFH!zp(qN_0CE=w_QL5c}R2Md9O0^kj8+|OJLuW zn|z}U70@mZ_-spYGV#R&ADcEu1BtvyHMntmo3)08whw;HktYFs2tv95Cf|6Z;5LM# z*_CJ`37BV(GXTl;!b?dY1-}pkv-d0=AW^S|!}UZPF9r4=7M_7!!H(dlKjL85IgaP} zh&b>H30k@LcH{*&9(W_c^xZ5GNZR+E0`)|yY2og@*}4Cla6B65va$=*s~%JUwl2{2 z!BGSez$h~>GGGc%v-1|YJwgn*AVbu79&#a!kot67dO8w7g*Zx%Q;|f_oxQx{nI{R* z^+~7V&KYAoIyDZ$aE0|u+lw+>0cNjQ-M|S%zF;$c@KsNcblmfAhM%PaWcWZ!0&o*a zL%P$y8Ga875tzcKb*X=V7>k66+=3~*AjRu_U}J&I&S0sly$75W170OT%oZMal+jQa>m}*VdGo?U z0(h+is4%qro}|#9Lp~BHoG^grSnr(;@i+sdC+o_%lO&+(FYMQUb}MjX$rnWDF!cug zFOTRm7NUZkFYtb8m_&O)!srU=aIFSN!)U_9zEzr0s$za&2lO6BJVkU1*TBNy;|yjn z#*$$0-~ofj`n-)ZhkT2_Hu&uIC4kG*6QrvOOma+bz8r%oG3uxkaAjWS1NpEo(9NUx zS22;lf;|dmKF7ttJ&Y2L$GC-E*O08RAx^swbUI~KjFJQcR)aDSpuiFTWnQ_JIZXvK z5(6*-5LSa*0>o+Y!0QvB05Xbyr(@%OF1)zrwmEj;w%O*iALn+srNv#TB<{Eq*Qj!p zV9=wdONUQ1tGJrw^`i$89rJixM%Rq9-k<+aGnA72Udj69gFD34`eo}>+@VANu-8Sb z>e`_LOhP3qbt{~4ETY$Co+rwb(|CyeRWpNr!%=hTG(`aeFGayf4n+Y}Zp?39mojw0 zX_dV1G0KB$q#iWf~i z;-;Z;_=ZE}++^pwii7kNTY2GSp=y`vv|H6Ki-OfkLE&uC`o88g%P(ae-LlYBDF_kK zW$0OvYnfUAR?Q@r3Vp2C^u~E1b>5Dxo63+*$%47#*C7iOmu4Eel7yqenbnw&DwiFh zKR@m-+3oOU@0_@*c&j_OH19a(X-@B|Fe}&i&lZtBe0;f^Ida2n!mz$Fh)OSMAU5*5 zlVW>sQF_8WRC;1Q3;0*Z3@M>V%$d{xKDJBOj*+XdBHIb=xN$bNf;AEo1IawMo8X#Q_htVe>@AWpi^PXUK-C z>?U?%DX(cuR2-&o!{{S?L|nmv#;C_h_4Qf9t?7oZZ2=_6LK(lv{FGHw_GaEEv94=z zdVrUJk&jkdX-CEBwx+NadFWcEP<4I#)7rMhK+1b(ft~)liU9LMc*z1bHWOL$a_wJU z*#*5rY6U0^I7-Ng@G6ePclH@4?x&-XvLW5C&L!Pw%jDO0iuwBARV=;4>&ju}4v^x` z@KS{;eka#EviUw@xX#mqt2V|CCnxE3(d*>&o$X=y(iL_uI`<};aeL+U_M!_RvpSRX z793~QEG9f*+42OrKaTP%NIbNOnD#iKDX(=fZsxur9LY zxa3JcLwP*j=0#h*Q#Y?oOqzsciWnTZ;!^Wdrxp$IzaW>dxcH6uj!)*q{b#7m%bRXy z=Tgm7=A^``8LX4Fh!9J5{T{02+ zdJKfQxMpm0AZ_NkarId8n4;;kjp=4K&E>M&XHt`*TQRJJO|43zO|7SVt& z^P8*q+v<%*BfY_&qbP|nr6^eFa&i_iDrC4d6K-q?iNiZ zDsZ@DKc-&8eArrobF6QiIx|PsXbvBp5%0l=>;}^^TUWd+VC+Pd6v^Nq>5jia?WaO4 z>7$4Hqr3ABD|AoJj*A&(vfoUsVIJ1Vk=j%Giuo?}@ZD?WP!mh1uTkRkZ>dN*)JMwK zQX;-FSlbsyz#i5|XV)2z%Mtxvwx(*Ac~M8&iBgwqBVonQrD0_Ka^Xeio1D1DlLTaW zBb>z-c~_qn!b)Sw^35`qIbVbCW`(mA&Zg>(nsAOzL5-Hx#!NNY){usWDSFa7S!}M&Z*Cfz zAN@8aU4+z|q@>=C=XQ=#TObMeqF2Z)R&@pee?|u5s}9w|oGbda>dS@J!mj{M(*0>) zm2jfuNk{esbDfL2Sx$QG%)ov@qX7t}($M(iXFrRd}?a@ zzTM1V*4aPP)#99=abu}9mtC6t`spUvg{7SRtCk#RWg)x0cCnUyp#UY<^ku34IcIx3ae{!B1apBqgWez# z0~+Q zn`Q$EE+|>7(j8#@`Ge>?-+j}?c5nMAuC=E9b@b(ABu1KN;A8Pxj!NQNBSP5Y;>@}l zK}Y<%v(=bU3s=o%)8BQ!AhGh$s@b0 zb+4~9vMD}lww>sm9E&s3_j&fSg>2Yr(j`W^x|$2tYF~z&50bYKY_|BMa(PcYd z*jz2GgHXuWxh1_(F07gCpViW2sJ-JZw-ky%T}c7O_Fxksvzy!f*vD*Fp)J>V7qpn$ zHK@CjlIN$p(4CiRi*w#_>RyhrJv{r^(6L z*OirYcly%kWpmwdE>my+hhMAwQHwTKj>&KU@R!FKAnt~7G@e%ERn4lq)m79zCjakD|EN`gOi=u}-@12H~L+xaKzg&7A1``%r z9UsSh|AcXGVJyL^oac~5(2rPx9XZGE+#32P#;m`7vt~2W6Ps0eE7)krC4BR+x)$5 zJ{x^zCagqyG)&umzBnUD zj-!+QsKr7gZE}b=Sz5&_H`Wmi_qrNx@C5{X<%?})91#8%rTt(Nq--4&YGs!?y_ zB2J1ifMviS>6jF=vKE%R_x?tUP`_r%P3T>Xc~NdSXLXL9h*qtR8XljFWXGrHFm-D* zyI)bczqhv;AtH$jr@#`(O9!-C$=0R4JhwT_kN6~eahI6PRL7R8$*8^1LvI?Qe^u>= zI9%f6@Dn-t>G(q%dpybPx&gr`}9jzJpZ_AvF;ynSHCY%Ml?tZxtBIb zQ)V;8-jy^e)LSjMh2V|&J@S^UB=UPJq(!s~k5@ipSAnc;nM6PkjkLDyf_tSJUk&Y1 zsOGX}!xYcN%}B4HCm}q>w<%jH=teJKriw*UoU$w?RNo{vVszuaKxM0ZX&H!1S&pM* z%j#)WFwgXS@%nL^T3kg5^{>BEP8Vf1=6xYS$+4sSAu5JFMG`%D6FJ> zOD6Jw8+Ct`2DO^yiLGy5^}0r*ae|UAPV!qhwF$fYw{rC!_m(b}I8R2W?2n=667w`{ zwNkxznbWB8C%U9^Qu6J?S(nw4U$_jyb4u)}HEKO%c_%M;)hR28m~&IfR)G4>=wg^^ z>z6$Ljx0Lo4;_Y?#`C^)j}sSH>a~BYB=I~pxJ0!kZhly9EXMrFg}6gz@b{FmyrmBl ziAVnEP2dPkNjg@UKvK~H_+&XI3`1+`#^_~b2jcrfKN*NnMX=sU8(RE&Tri_o6B(?R z-tM-xlOkI<1(KU|lq=bXEIcHCq<3apEGFU%N4up|Tip z%r;FNo_ZHh5V25&*Mu(H--){R5yB!(bR4dCVo>iQEyUQaMJM{PU+YAp>EU9>KTuY! zH}9HEkDw|pJ4Mxs`<54}w=}}?bUgV{f$uFx750`2jMB=6wcbf)I$owjgO+D&O-V>x z++?Oj>@3V2!-4(I`5$A7<-wA~LdvgQ^$+PEZISIy``NC?aw$D1$Y@;1BMYRIV^2}I z*?l0^Y!tTREw87^Ar;FN9=)9x1d-(UVnMm#*Me)c4=9US#R;Tq55XRD)*sIAWj*8O z9vfctSggkzt;FwE3}e%(*_?!4mGh2vUa-6VDM8@^rloUR3$3ce5))HF%{*Gm8~-up z`go@56dk@a=S75~P&O~W!8nb^r1onW8L26JO}Po}*FoY9f`-EoxVGUq1F7F1SWSMz z@i%eG&GQ)Pj$s|23ij#wGKoozq$3^OI$j*@r))VR zahv z>}R;hHGbbNr4iRJdidhQ;GM;7UF}giHAcAtIp%?5>#cPn!+|5&vGpkG&;1WeOQm){ z_vIFr80ePvamSVzVpjIol{_<;)jO?if9?kkEa{^6%fE)@bu8JpzT`P{96hy8oH=xS zbDqY&z1F&?I=po7Woh3hyfOO1$!&Vm8YP7%oKBP8WaxMzBKhRS3%uQ)cO?m=HU3{t zzrYg3)pF%iu*f-YyI)KHp!^z_^Y4VBlTLHGgkv2C?t*OQK7_;N)xh_$O^5Hk=VT6Ivz(;29+mCm=m zOK^6_rnr^x#Qf2zICXe7%gHqR_~U$H8fWP)DOp~RjlFf-gv^adY^PN2^pBbgmlsTi zg9Ge4ua)oFFo8Rrz^oZ`fpb1wxh0w|f9Rp>;Vc8r*&{~bcIdV2e4*97sVurw%Cz(| zMeggVXQQh7=4Y$6BSD)s?;XOQY59vcM5G)~?a|smPNLIv3;~EKRNVF6xgwdm`%wR47I1qQA@h zstHaclnja;UjnaOqu0L_J~%36ZIa$%9~y`g+!VWdt*e)Ouf7Q5+p8DRycMvPWqueJ zUEMDUdZV-7W?XDD$^KwT1)*7>k~rabVHhvfX7RReetx90@T}a+GcKQ^u(Q2lp%dB3 zxc>p(b*^A^M?w8Mo1Y!c-wm~7ZNZ}%$%)b-ZtNy`>oQEzU{;}p*3^1`&Gec#TTV83 zl=&Oa>qFeO&!NX*e&tO_lSmyW`#j%jCj@&$C0DFXY}SIPKh$YGu$nCzLo(wh_7e1l zOP(v#Rqu7j*;)3+RXGVu3Gpy*z=$(%SlY`l51SvN4dfi7D#_R_ko2bmsaf0f8Y^Z( ziwD@9H?Wp{yD!<;ki$wbX)bh?C}gK2?HO=(2c`L4h1u*>&m0rEhZZ8+4^t&vGJ%Va zruhMSk-;(H$ey?ENAqv4*;#Bncgu)(dEHf9>t@LGKWZA1V~Fy?6-$I8*;9Iq^NHi} zDRXi(c=M`-t*f8&Q_>N!rFW9#~2XDyuimwUh%XDVVo5l`>0sa7dKNjkQIb|SC3&2HdLyn zS-8(D;cNJV*Mjq@^UR6JIKg@Yz1sW1gGPC<`;m?sQtkUVO;{Wiw}RPA**N=oJ!Tx4 zl~qBlb$HB1YgPlTi_-72mueJp7ipQZo6jzXkx>Kh%zt3MYD#qK)xu!Q+n}s&Kal!z z0b}gAKx}duA?9XkQN0L|r41-4jqS-NY#&cIT@I;E7qz{#oOvl^9^X2_vywUM{&0CvX;N56-t$o&&72nWs==ldbM&#p&wwz7O+h z`TW$Uds9WH&h@PX55TXl(?4#lpl>yyoE5J`m8i(3i0pTnQW6Tsw9Y=B9XS7?{jD&| z$?HFA#=ASKR}@RmO2E@^{p*WknKhlw+M6;6Ro)xdDeRhe?YGiwG>JQ|(e$6$&-w3q zTA}g~MzIDcCUr3rDsA955EKX|ULU$d%bqvpobMz?xEpeRY;`KZyu(j*)NKG#g zw=inDIgvQPkw9V1k*ce(A(GIW?7Xs)~>cVxSE`~ZAIdGo$*B<4HEu4PE8 z!;bB)JAwA$Bo4;dt$pcX^C{ob5>^cGi4NyyhJ9|gbMngxn^XvMIxn0}S#Rg`+Lr#+ z1x4BIIL=)+A*ZnEtA51gZX5)Ygh!9>K~XhA=QfMz8P)-o2zXq2`~(l5!e~3VRjApS zvZK|H@A_}08%Ci1$n$UWbA=gi&VLn$hEd7@x)A*s*1^{nDqL)V6g7qwn9 zvd5d?m36Yz{5L^Ti;3;pd_h)WpZg#d#{9zx@9q^EHx#ujQqyx+@+1|avV z@*^+FolyPrr)}4WPLk1RVp<(u=cT%T$UqO#jy`k|a+us;9E5|$NKLH{d&T9=Srqo+ zFef+XJH1yF+Z_Z^m#B}2s-jRPwqoCrb=JXAAeH|M{ z;Bx9mCihn*SbL+UwE_0c3Tf? zNJPqBx!CR@)XD5ri_1RD>r}F0&^C3jn?Qn!{!x@wdh>WX4r3E3i1vE1Q9WX`Jp z{efuecFtD#^3L1nRVCBO*h$0Q)b1=%ofFmShTq-!6R<27HlHW|&`~Y<)Hfj|>A^-? zNymN0mxOE^&ZJ;QtEoD*-v-86JCqhrnwm>Ap4b;&Q4nNlN9oIj9n44$t{uk+}#eMNwGdKL?9yrP!vDMOj@a6X6_auoxxwKSB{D@?`!l~}T1pDsMYbRF? zL~ayJEQiE`k^6jmqupQE+1a1}$YNoX{W)Cqp~HK;t*RdJQoc0_-iCxCG2?4KRtii8 z&lFdN&N63D<@8Y7w2W-U4b>|x?VnU*JfQW4$&RQT8AjVFG{|_ST7BmF(cl=7=_PAV zFvF6s!!@)R<#hSka`ne_`?`xM{%kYr8$9iPj`OVS&0d*bbkUEL3{smS7?d?xbaT^s zV)RZFjDAIJjg?Hswr!M4?z1O~o0u>&ULo>~r<`!)5N9rStL8WhUZs}P zzO{R}Dt;k9x1U``u~B%AmxE%18b+t@zTT|95o4@miEi+@N?JotdO!up>q~IeD)DJz zxKAw_N~Wt3CLD4WQ3|J`t>=H$e5ga2@F-dNZt;-7(siC1vE^gps3rM|f6z5QEmnuE zZ`M|)xTI<+b^`eOb>iuoy?c6QTa|soHJmz*$24=iF?KSzon7tXcDiI0xl4OEY zt;KA}ugcyE#hj%GvU(Ku5%EB`z`A+7=K4l1?n)@BXHskvbv|OR#rPpJibXM3S&T-d zkm;*qvt?DwqpNm06nS4SrxrYEdj|TmRIi@aKss&){Bk!h+N_o@bKSY+!nI|6ikfJN z2&^vVUB@Y&*iKu7eydh4EQ^P&F<<)53X3bo-C1;TTOPZmTZ-s{O7|_z-_pL+DCJ;? z8&%TLWnuirDa?V@hKSzm1c7rn-DI?JV@*$g%XZ4{oou1%a{VC1>GX3(E8$}2eS2rI zCaZw}B#SUfB-0kV6!=*t&4G)o4=26tO4ik8lqbjT(vx;6%*SZr*FEDi3MoR@@l31gE2-z-Qdj;iudu2;D3xmVIbGgh8^Uq{la}c_x#DVUi`wbZqC4;3TYW%w&fm9}DE;;WN@WttLD}!HdMRGA&MiCU zy^fhnulcApU+EA^{9E17oZT!RcdWGnn?lcEnbKmM8G<;;sl({^hPP0jsh)Cu3BHk| z1_kn@34+NNyipb#J)3EVbG*DHlX{^!x7N@NG`GH>+NV#(fUPYbZR_^Vom5k%<*^DWLh)F~dV%w}$DioStf_6bbi_LE6@$7{GTM7CbZj52ydZ-SeHNhn?_zz zQ~vB_AsN+x1^%2zpj6?H5%3?JKiJXWy+lhPqB`?Cl_z>fqDa^-!)f+gNniUY=0cI& zqZ-#F$wc0B7XCH7@PqeeH>u4Fl9NE%2>UA%RAnC6JoZ8T52wIwfNxHDeqH>^;(GT) znTUZ-6PB*a|AJ0*g8O3JjIr;)z+bvJE)*p%+y)ydIrIjB|I@P_=w4sGPjfpS+0PZZ zzJy)yIeS3q*b)&g4>JF#y*_0Rl6bQ|G}#qa+Cj3}=A9y!Gohb6veiAib8f?*bm9E` zL+dc15b>PDfW*^7> z(I~!dr7A{3$IE4k5bj2D`CLu%=*PoJNV@LGf#1p{HTk|6mSj;BAC3}9OQ%ZkXm(9m zBTC7N%9N~}A)+1;v@-m+x4|1+eyh+S2nKer*G0*{@+E0<^jH+^+=Zy5?_dN1&XkH= zQ*v37k{2sV1y8>Ja97P2y1Ex{m@2bMI=$_*vhd{;>R3JapfTaJuBi5I;0CYxQc+`K z?1m66p9^N)?eWUO{8s6U zaGp^`k*t1wJYM@SS@4q&CnmTD_`b||7{~U-4i_qu!HfotB_gVF#c<)kiQ2lIdUh^K zD%a_V$O|mZmPd8<*VCEoMBys#@4s7-oENLt;!Oo35Z0&7nF>D!5WvzHizvJ*-BS5g zLFq)7?}{7dR(CJ=Q41ZKAB#6x$p~>P?tVI@4bu2HL85Ng=jgRg65PyrT#-JELt_`H zx!F>S66=g$ls@92Fq$GbsZnk-1wOTdB{6YI6i>PDT*>c5Q6^3Mx?Et*3>y~JkRs)ckeT2+Z_hF^E?#Fw3P0NJSl4O%zZxtuuOam%2_tX zS5Y*X%Jzc$*g8ePkpAZk8QF&}zM=U9zIccQ(v3ABI!ESK&M- zx!JwXQiZnZm9N$$%If`$^Bj6n&D_d%ON`hU&ygP8FIws=Chni1``kDqUu@ykldn81 zzwOiVO4bKi;BZF%jFDis0aw&~s+tchEEV9Y`_UusDd0>m*w6?~zh>tJwU%5W>2pAN2^u4=VYS9T+z*e8}QMoAGSFbOnQ5YO_#@k0CuYfwWUm>6B zz>S$Byd(HAk;0xK_uXPax5}!*RpN4J>+Ji_!Jd_R`XO0k;kduV%Jw?!L<$**)io7! z4R)%tXD%qM^ga7{@GAUdZx}X~7YPZdRcnVI;H{B<3}8?rXs}{C6am?zF$|ccz;R$& zcsHr^7w0DwcxzUTS#|$h0<~jR@{JnYCc1Vq*+30%hn$+f^SigbSMG77&O{F8pIbU3 z-b(&W{l1G^p+JZt8#cZjInJQf|KPCnY#QJ86yN_NOrTS5b8TS9q&b}?MYHsNpJG2L zTh{ymzv>w+Yz{@HI`C1`i^UzafkfDiX=u-#g9`=W2j^T7O&S@R$6#4JIPEQ{j+o26 zulx(P(^!SoypPlM{n7)C;3WF-`{e8aLg2rPt=tYD*UJUe$wq(BfL4cyN_=#Q3-?)cGcF*G9bCsSGfbN&;`E}FebXART`IYq@j#(z0nO+_q z3;m_-9n6S_W!|h_-YsXzBSBq)IdOpL+YGzap~vsO#ci&1+PXh|HE%ok?S6{F5fi}vEC#aEeVYteLVNLH zWEExvfx{$4!tlN{J8sXXfOjvS7cYNdbZLbu8wpqcXY;=A=Z7}S>!R==u~L3#npC?d zGLSlQ`m9P5Wd4G_MN{RTli88Qz}V$S$z;^kkL}T{CQya_bdZK#h=znyGH(f*A=XU_ zm&RMe-@1-{OhadNh%jT;w3-+~L;kHsLF^kN1U@ieKg24IuoGhy0w9@=#ljxm@K ztaL+|k@=s_qUx00(FVU6l|Df#$Yf;HQxT#$#*f{vs}`^Otst6lbvdUj92;C(EnUPg z{i12yiMPDJ+e9u*a`EgXDQIp3$Q1*~D}P7A8OR4CpqqEv9*iccEuExZd|tVw{WhV@ z*M_I$ML7`8NR!t_Es8-VE_I$PG+o_1sYlF`k3p>9>6jy8XAgA(o*iZow8g{l=$VOk zZ5CP;0@5uHsjZ82%m?wgo6H4?(Wa*seNyh|^~f_urkK!+w_87pe=>vLzsq=6G5)vr?2D1U&k3ZI$_iO6_{9_ zRfI<@Kj$?VtRdfjbOs3J&E zDJLS}B#vHxwD&IN7DvgWJXVkN_Uq<{0TP*QTl3U&Rsk>clUK!SSfbidmXPh&_9YKY zJq$j#o*aL2@nTGjfA=B?yZ+WY-H8$9EcSY*okQ8#Qq6S%+vbCOO1`j(WnLz!DX@C( zEt0C2d&~A4lkwx_(S%x}BXOc*!1j*F1qz1}jKY!YetVl(d=Di2W%6ch;z|*gZNpU zOSZc;n$-9eR>70suMgm+`*OT<>b`smm)>K;;1^L(Np#1uZgnSwAa~x1uYMTt{ORWs zw0-h*`@=}p*X?)dBrqcc9Kvwv{<)s`;C+~PDnul^;ZUrqrkkuQob(;?y2}mz?bXGe?Q=ZAutA>#Kb8j9L}PQh{uhk_K!O#k1n2-<&Oq0IXzJP2e1v} zGkk6#Aj2x#p1?8E&sO-hU;lm(q*YtYzTZ6lQkeRAM~z)QIqvQ5HRQmyNQ2*4%JX7( z)IuK~jrcp$RVcfJ8}7HR4#{eT{jw{auGcx`kNs01mS=E%@H3~kUvV8xP5DeJ7J9`@ zu0X}UgCz9OC2ROYf`+x$%5a0F68qIs#l3lJv4+EG#fKPO&v?}7-{lI@=CV25PvGXS zft~X*mG9o}r$ucpEVNYHW4+b+BtoI_W4Wv(BZ;CvLmJqJY>NRouX-#Ms4ot4)J5Cj1p>p zNyJ9h9^YloQ8}!tVteZ3p-+7B7p{*mrrG|2@*6p%?vzheCfBSUw%t_jg`rQIqxV&GD8Cd6C6i4ANHE9!tIx!i zj=91!Y}JGNqqbVgacZa=S$%{~DkldE*DAy{h8XHBj=l^AQma8t#Mn{rrbvc8q66?^ zm~~I$uPJbg(XHx9!>qIkV#)SniC(;s^(b5E$&otw zW~kD8B6{`zWCth$21bVj4!>+TnImP4ikDJ;qXjM=UxYWv5dENB@vMmN6uI#HvK=Ju zAcOZTT8aSOPchj~(H`wOtBY#Q|FsGOTD^_FY{*U#8opj-^qkJ15_ELfZk?gsA>!*K zyXELOkDp9$I)P zd51S9Ew@kLbx%`N@(5+tvsR$TX7B5nPM~mYv_<9&Y3eq6W{zh@{QTvC_@|kixS>$J zhML5l)2eXE9Y@I>$`53E*hGrK2g1Z#7zLulRc3K3g37n32|?u6s?wt%kq72j@X06_ zjP-Tn=XI~IT_h9%2eM&)Z>14>`hAhY|3(as!i-RqEb?$?J#=^`Dj1?lD8-oxfpu*a zOMiCYMvK6%CQ7@$ywY^UN|L`2M$T)Ld2PTimcTyA8kb2xiyw~xsrb~YsWK)R|1NUG z-l$h~GnCY8xD}|pUwNGTxy$%KK z@^VXDEbEh2r>PB&R9LoNicj7x3tt`oye8QTxhCms*g~IC@!#E_Q-t3jd7dKiDl-__ z66V6)4H^A$6qsk(EWFzsk>UF{rs7^(x}CD*z9nEWK+#9%AR!+lX$UM5X;H=oeW{o? zG*fQ;3k!Rt*?ir6$iE)pZ-|*it3!Lop|k1UNz12lDLbB)-!vi^H%rqodiC;xC44=* zH+YVuda|=Y!Pm7`O;30J!8b#@)_SmhewBTNZP+YZFC1g*G3e z6h4aStAcq`UA!*5uUGuXiQ{oxHp5SUtyePce?CJ&PeZwwCB4d+$JA)(M6h3ljiR*oIT~|gERiZU ziF3Kg87b27*UL$S2EJy)*R&|C^C<}fNx^tOb)R2|I0tRdDqjSxTJ6mK8s%wEnBx*c z!CKBbcNDpFntEi7p59pa-s$k#afe{{BlwB< zi^W>EHqq%($>g$k*4`>XR)Gdr4*Nic(k&6Af0Q(ftnCJg7BTnNu95aw?d91MgHt$I zYaOfiSo&MjoJThz7iCqOwK#+_yY}9u7(7UO!s}?;e%rsJE=5M}v+cVx2?A|{PIA=p_?G&jzyu8B0Oz&%IU zV#@Npv92DF=+c@D;TaKz+L4EtDC+RZDvRq%Ysu{pta;Po+}hl;!z=R}HpR=a3LV!{ z@qBE=Rl{v*IVAdt0E%R9VI3fjsrv0csT^nR&*$8UKgVe5Sr7$q`w2JH_X$)XnHm|~ zk8N8{)bSwGYwlct_|i&lHVh0Ko&+_JGUk`IOKbQ8XlM4$H=8S4LN0!5CuJMo=I_2x ziY8ph>JQT~J+sRX+Xu>0HTb;+2#Xa~O!Au$x-z>)dInz1J?hG*kC`vjS|oVqd9M;W z0jWO<3KSTigY)<}+DuoNk4$i%a_tYI9!qrz?!`^oe&>x<>uIuESzc&xk9b z4f5d4+WeU$#;Q*{Y*H^{EjOvD{O%8tUCsNeK8VoTFSt$! zW$F+g7)%)AG{pBQdMC1UUYV!3lR47sJ84lVCb+4KTSfvaH7Yn6@E;ixcWvr#&N@j`= z^TO1R4qFS+-Q|Pxb~h!=w1K;R55o=)z2hC-h}kMvoDNSBpX_LL+LLdjZuWe}yuqy= zQeShO(URa)2|G<3{u9+j6+Hbs0{=v2X$)4H*sH&^Th09@x3a62$`{H}#b+N_z3i}7<+wG6bc zJ|3_Be4Xygo{5`*rO4Gk9*8m3s(NG~`Pd>H-iGYD@!5;tp0VL3F9a>$pmp_x_7_|e zWUCNf%?#v*@d{3Z_H1!UG{57+QI_f9n?^P&;trWg6>bXS^G_>YwwFH&kUyo|)aVKZ z!tG)4{e0rS*89$ij`L^Vnq%BrPPp#ls{)durqeULxP_W?mSrz77afv_b$xMc>`UqA z7|+Wd%nO{kBtP&7{v&G;g|y0ENJGgu%9fGAMf3W#F$Y_=Gp%T+M{ASWTq3rGmG;7J z3LUYn2xt<;79=e!?`Vb_4xB_X$}e^BG3@Oe*Sj9~aYBbW?G2`F=c2mTNtF{)_Xy!3 zpDn9RAt%CjX5l-X^7hdsgd?^QIAGtcI$J9Qo^*mI47%xFm%Ew%Hg?E<;vl| z>bizkB$UOK-g5RhrQdx2tt4oYBPN_53U7sTH;z2QY?(vmEvXC|&e+SCcpYp7ikOW| z*uv9IBzI`Qry)?~(Fp%3%7-z9x?H9~5~`xGbZ@l%rMkZGeJ^L1jflq@QuZwU8&L(& zpa9(a*BL%U^;MM~+e@-MzQXa2i#GDtSq^s!dy$9$+%dKC^sniBG)&70n*Q&+cYq&9`=S z<&0^ZUPaH=_^O?^Akyc?6kg`vS8l_b?q?;U^h_GdHK94|ic*vn>EE!dM|{XD z7f1Up0_?5ro0HBq&5r4=MfC_1BX(xP3Lcvo0~YsWNF z;Mz*t?jNc+Eh2nTcmZc>(?Lg z4r$o9e=$|b%19c1h(FIV_mmAJalY`H+$fb5tz!2Q8w3MEs zX)rV>jW6to<~PHS%8xJHYn&cccqaa$3j}IagtIa(jcFEE53fwr2zy4I2Sdi4KV4cu zpQ+$W0SysUW_XnLb zeHbd52kAN4FfX>?I64P`z2Pa~uECp_+EpXAZ}@oC8;~zeLUaj&-QJ!g^>6M(p^Xy6Vh#HQiU3QIe^Gzh|1lvy) zy8DX|q+*Yz(uv@BKmC5P_cm-*IXm0y%tjufanAI9=W=*p5EHG$0+RVtDU-x9 zhnlFj8^}ST2`5j?j`ev{Sh3q;=&#IQpLKY4aM{MSEYUmK9TekvkA3Xggr|e zw;tymReuz6*K#WF-(*wSe>3`ZFTm4K6JyW#74^i+DL>8?XP>2X3*nFvMjuO!{r#v= zsSUhwzO&Se$?{zPl)05AFQSdyAK)06j*O~H=T*cAxAlHfo{VsG1OHOMPJTG)q=?B3 z!z4&ez;gEQ1)3xQLj+#bv_(U+O!-f$W%};FY_?Sd<2trR_zCeX#cbn(XIwc$+h?|k zjjR{E1cwJhZ@+E6j5t#qFcr(#_5+O1n19FAE81cg+OZM}k^ z4d!G7SqD5~sub7`j%CFF0X|drL`Wen@|dF-mxEit8SAp}H+Y^eh)aWZ&MxKV=%$