From 18ed1aac15afa87af4dc9d4bad35db7ea88126e8 Mon Sep 17 00:00:00 2001
From: Varun Sharma
-## 3,000+ open source projects use Harden-Runner
+## 3,500+ open source projects use Harden-Runner
+
+Harden-Runner is trusted by leading open source projects and enterprises to secure their CI/CD pipelines.
+
+### Trusted by
+
| [](https://app.stepsecurity.io/github/cisagov/skeleton-generic/actions/runs/7588528684) | [](https://app.stepsecurity.io/github/microsoft/ebpf-for-windows/actions/runs/7587031851) | [](https://app.stepsecurity.io/github/GoogleCloudPlatform/functions-framework-ruby/actions/runs/7576989995) | [](https://app.stepsecurity.io/github/DataDog/stratus-red-team/actions/runs/7446169664) | [](https://app.stepsecurity.io/github/intel/cve-bin-tool/actions/runs/7590975903) | [](https://app.stepsecurity.io/github/kubernetes-sigs/cluster-api-provider-azure/actions/runs/7591172950) | [](https://app.stepsecurity.io/github/nodejs/node/actions/runs/7591405720) | [](https://app.stepsecurity.io/github/aws/aperf/actions/runs/7631366761) |
-| --------------------------------------------------------------------------------------------------------------------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | ---------------------------------------------------------------------------------------------------------------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------- |
+| --------------------------------------------------------------------------------------------------------------------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | ---------------------------------------------------------------------------------------------------------------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------- |
| **CISA**
[Explore](https://app.stepsecurity.io/github/cisagov/skeleton-generic/actions/runs/7588528684) | **Microsoft**
[Explore](https://app.stepsecurity.io/github/microsoft/ebpf-for-windows/actions/runs/7587031851) | **Google**
[Explore](https://app.stepsecurity.io/github/GoogleCloudPlatform/functions-framework-ruby/actions/runs/7576989995) | **DataDog**
[Explore](https://app.stepsecurity.io/github/DataDog/stratus-red-team/actions/runs/7446169664) | **Intel**
[Explore](https://app.stepsecurity.io/github/intel/cve-bin-tool/actions/runs/7590975903) | **Kubernetes**
[Explore](https://app.stepsecurity.io/github/kubernetes-sigs/cluster-api-provider-azure/actions/runs/7591172950) | **Node.js**
[Explore](https://app.stepsecurity.io/github/nodejs/node/actions/runs/7591405720) | **AWS**
[Explore](https://app.stepsecurity.io/github/aws/aperf/actions/runs/7631366761) |
-## Why
+### Case Studies
+
+- [Harden-Runner Detects CI/CD Supply Chain Attack in Google’s Open-Source Project Flank](https://www.stepsecurity.io/case-studies/flank)
+- [Kapiche secures their GitHub Actions software supply chain with Harden-Runner](https://www.stepsecurity.io/case-studies/kapiche)
+- [Arcjet Enhances CI/CD Security with Harden-Runner](https://www.stepsecurity.io/case-studies/arcjet)
+
+
+## Why use Harden-Runner
There are two main threats from compromised workflows, dependencies, and build tools in a CI/CD environment:
+
1. Exfiltration of CI/CD credentials and source code
2. Tampering of source code, dependencies, or artifacts during the build to inject a backdoor
Harden-Runner monitors process, file, and network activity to:
-| | Countermeasure | Prevent Security Breach |
-| --- | ----------------------------------------------------------------------------------------------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
-| 1. | Monitor and block outbound network traffic at the DNS, HTTPS (Layer 7), and network layers (Layers 3 and 4) to prevent exfiltration of code and CI/CD credentials | To prevent the [Codecov breach](https://github.com/step-security/github-actions-goat/blob/main/docs/Vulnerabilities/ExfiltratingCICDSecrets.md) scenario |
-| 2. | Detect if source code is being tampered during the build process to inject a backdoor | To detect the [XZ Utils](https://www.stepsecurity.io/blog/analysis-of-backdoored-xz-utils-build-process-with-harden-runner) and [SolarWinds incident](https://github.com/step-security/github-actions-goat/blob/main/docs/Vulnerabilities/TamperingDuringBuild.md) scenario |
-| 3. | Detect poisoned workflows and compromised dependencies | To detect [Dependency confusion](https://github.com/step-security/github-actions-goat/blob/main/docs/Vulnerabilities/ExfiltratingCICDSecrets.md#dependency-confusion-attacks) and [Malicious dependencies](https://github.com/step-security/github-actions-goat/blob/main/docs/Vulnerabilities/ExfiltratingCICDSecrets.md#compromised-dependencies) |
+| | Countermeasure | Prevent Security Breach |
+| --- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| 1. | Monitor and block outbound network traffic at the DNS, HTTPS (Layer 7), and network layers (Layers 3 and 4) to prevent exfiltration of code and CI/CD credentials | To prevent the [Codecov breach](https://github.com/step-security/github-actions-goat/blob/main/docs/Vulnerabilities/ExfiltratingCICDSecrets.md) scenario |
+| 2. | Detect if source code is being tampered during the build process to inject a backdoor | To detect the [XZ Utils](https://www.stepsecurity.io/blog/analysis-of-backdoored-xz-utils-build-process-with-harden-runner) and [SolarWinds incident](https://github.com/step-security/github-actions-goat/blob/main/docs/Vulnerabilities/TamperingDuringBuild.md) scenarios |
+| 3. | Detect poisoned workflows and compromised dependencies that exhibit suspicious behavior | To detect [Dependency confusion](https://github.com/step-security/github-actions-goat/blob/main/docs/Vulnerabilities/ExfiltratingCICDSecrets.md#dependency-confusion-attacks) and [Malicious dependencies](https://github.com/step-security/github-actions-goat/blob/main/docs/Vulnerabilities/ExfiltratingCICDSecrets.md#compromised-dependencies) scenarios |
+| 4. | Determine minimum GITHUB_TOKEN permissions by monitoring HTTPS calls to GitHub APIs | To set [minimum GITHUB_TOKEN permissions]() to reduce the impact of exfiltration |
-## How
+## Getting Started
### GitHub-Hosted Runners
-1. Add the `step-security/harden-runner` GitHub Action to your GitHub Actions workflow file as the first step in each job.
+1. Add the `step-security/harden-runner` GitHub Action to your GitHub Actions workflow file as the first step in each job. You can automate this step by pasting your workflow in the [StepSecurity online tool](https://app.stepsecurity.io/secureworkflow).
```yaml
steps:
@@ -72,7 +121,7 @@ Harden-Runner monitors process, file, and network activity to:
-### 📋 View the name and path of every file written during the build process
+### View recommendation for minimum GITHUB_TOKEN permissions
+
+> Applies to GitHub-hosted runners
+
+Harden-Runner monitors outbound HTTPS requests using eBPF and uses the PATHs and VERBs of these HTTPS calls to recommend the minimum GITHUB_TOKEN permissions for each job in your workflow. This feature is supported with a commercial license.
+
+- GITHUB_TOKEN is an automatically generated secret used to authenticate to GitHub APIs from GitHub Actions workflows.
+- Harden-Runner can monitor the VERBs (e.g., `GET`, `POST`) and PATHs (e.g., `/repos/owner/repo/issues`) for calls made to the GitHub APIs from the runner.
+- Each GitHub Actions API call requires a corresponding GITHUB_TOKEN permission. For instance, a GET request to the `/repos/org/repo/info/refs?service=git-upload-pack` endpoint requires the `contents: read` permission.
+- The recommendation for the minimum GITHUB_TOKEN permissions are show in the `Recommendations` tab.
+
+
+
+
-### 🔄 View process names and arguments
+### View process names and arguments
> Applies to both GitHub-hosted and self-hosted runners
View process names, PIDs, and process arguments. This feature is supported with a commercial license.
- Harden-Runner tracks every process that is run during the build process.
-- Clicking on any file reveals a list of processes that wrote to it.
-- You can walk up the process tree and view process arguments to understand the build process and detect suspicious activity.
+- Clicking on any process ID (PID) in the network events, file events, or HTTPS events shows the process that caused the event, along with the process arguments.
+- You can walk up the process tree by clicking `View Parent Process` to understand the build process and detect suspicious activity.
-### 🚫 Run your job without sudo access
+### Run your job without sudo access
> Applies to GitHub-hosted runners
@@ -215,7 +278,7 @@ GitHub-hosted runner uses passwordless sudo for running jobs.
recommendation to disable sudo in the insights page
- When you set `disable-sudo` to `true`, the job steps run without sudo access to the GitHub-hosted Ubuntu VM
-### 🔔 Get security alerts
+### Get security alerts
> Applies to both GitHub-hosted and self-hosted runners
diff --git a/images/token-perms-recommendation.png b/images/token-perms-recommendation.png
new file mode 100644
index 0000000000000000000000000000000000000000..fedf206b413db50895986a1ff7e749d0bc9be00e
GIT binary patch
literal 48612
zcmce;bwE^I*EdW_Hz*(t5`wgpbazQ9DcxOzGz_IfNQg=aDAFJ?bPe6z-Q6-YyodX`
zuIIV9zwi6=dxv4>%sxBT-fNwG_Fli=I+5zCayXbzF%b|Da1`XFUn3wO6CfZUendwF
zQmP(N+X7!GRuU=_2nfGpu&zxW0l#U?lki!3KnJ`o@IOWE3RY%@_*M=Jzw9leGKhU^DA!Zy*>9Iun6Uw%h>*i^+hB z(vFKM=0{Uq>vskB*I{6(zCP}$M-0*kUyjnvkO)DA&v`A7r6uPS)NJRWCYwbIGS*bV zydXH(&mnwuYG&;aE^H!KY0~F-unUP7V!?9HFT*tw^L#sbnkR$FPtgu^1fV9=xzn)s zl7XDI@3?J8nVnX-5u1RU)rQ=OQY7_FbA 0Fie~lXL6YpuxQ#%@_a2>{JmK?Z!I4?cBwP?xi zg<|nruk=uD6Cd) );2;7_o@xtYRy~tJhy&j+0V({@+BNtdF@e5 zy>Hf?o+_EI(_avoaX;LfzudZ==d2kfLu9QqYJHEFW*c5O%>8>vw4d|5n@mQ&IK6$E zssBr4kBwa=G%b1sHRi@_Mp&eY^;*c?Y5ik!-WuIW)$ez|!%hnvM!W^_3TKafD)-*q zUA-?abPq62ercAb@$wG;96mH3pQ7Pj&m-AD!8ewqWF=k_qZ}h*!SMI8F_tZ;E-GR% z^xbMBFbx^K%{Ojrz+?Ep5}#oL-v8bd7E1#AF8Kz>2wQebBQV{2oviprDJ3R|+eD0( z7=6WLvc#l4;hVg=Bp3H|xy_1M*MRVeawBeAoHH5t6A1jtop@|f 3=6(;>J`Ldd26*rO){c7TF?v9A+hb8EbNulP!gj>*bk(-|bK5znBT`9xgf;x$jO6`PgKxX;y?D(_(*|ic+r=w1T;0)&GQX{NX1p zI^t|95xu=QC_kn@IyzlCdv3>OVpTNq>S*F!Lqo0KS=(;5Q^(}M-K|w)^zA^}epypb zD^%@Tbl&L3Cyu&pp^c0*K)|U@|Aukq1qq+~#+jMDP^HMae1|1YL8Q{M<6eTzw%%G$ z17DLj2R;Ou*j{!r*NMog B9$1%6B=Akb0SgZK_ad)%nMD^j{7r !8O;IhzXD9%jsYOAwkm L; zBhm{CE?1V+F4bGfL(to-yUE7>tDx|e8G;e}Uq3g<2#!jJ7W9QUIuF?Ewu`9Sr@w5K z?Ohgcc(X36hJB6Rda*IyR7Oz8G4y_Ufky;>wD(8`eyhHr7i(laucA8&izhgNCbX zQ8GiO<}a~~u%tK)j7$lb5c<6DiHaC^UxbSm>~gd8kWz+{fs!GfAOJjzaQr+oI5=uq z^$YgW3km<*3#+@+-yKvux0!L>pyo;OWlWH}egjdvOazHHstbl6Y(?A=MHc0P4*bL< zHe;7Qk;`WIM X z1qLu7fzgx1O+kD^ss=ZE3@4wR!b;!tH>%NCeu@l3(05h%u+S9$%dN+JOXr_48wWwc z`kg-%;$fM=zWc{8@nk-`d2~yi_Pd%171jPM z7nI?C@ T$s3cd*7)i_PGAxJYNreu9gppr=?~;g#g6bgXvfeF1w4{g|94yQO zUJHI+?i$?(%(GYfwZ&(mv80e;Iag=&9fb;7T9uC+4OM4!1_3vx4R3^JAFYH9c@vvM zsALC2-k~r0HSrLnhoqydnoGvLBorp>>MntJ=`|s=9sEo(I&R0IzaAp+v2=wAH8Tq? ziOU~Kns 8CcmFL9`rmF{2mFCK`HcqLQj#?u~UBV`@`r1^$VobB57ESy>W3~S9(VmECR$U@GDVHGTHIpG_+Yp<0M?GRgGd5`Uj zc*e1+RAPv(9jq&2wX42h*3arXF}~*~qIRb-k4&^3;cqlimO9|mL?hK1V$CH6#^6BW zkz$BHNFgACWSH-`8Oj J^O`@5h(8KTSUas`V6ZX^n0S6ThKDB1~a3hJkVX~(!DRI%JQJPyF zEuUQ!%dxtW4K1m$Q%p5e<;?wy+(Qis8l)Sf`1yJFjQSTrcK%3wn&0BC>pt{YS#M{% zigc{GUa!N7Z^_bMF@bOD_}`UMHnuO1!`A#3y=lFD$VqCzbz<*6aP_f-_3?b-WOrqh zXO8Jv{pw~&s%d!OvbB^Q%MkF46nFKF{d8`w6S;|DZ7s?P%^#DwpHEJ^=A361PU#aN zsiGaB`r5NzrN =-437E51*=U%HTPMTCvc+(?PMZhOg_KXb DfywqQ9tU#NZQOe8}{`*>6!@O z%(&ha?}C#-(Bm3M6x8Q6v~1`VkHksVL#3slz%FP2!NKgQ+A|_XQkhi^d_s@KAhgRf z9sDPuV1rQ3S^`0`9`@RT;-qT=;b+PN-#+5Aw{e9%qBuIH@SHShV40@2Y=mh_AHRR4 zpey>`UNe;Yr=8NF>eA0 FiAGUbcjMd2ExMKT<=Px(ed}_7T^8=OX-%)H*DNY#ZF4o`jmhla?bG7m z&A%)*%ytkk>pI@Ch9Ep*mC5s@+kQb8b&7$!qGE}u=v_VDrlW4n;IE*Q6NcrhW^s_y zg5!8csA!Z&TFfGC)m6uDcy>?Q`SBtZ-(baKj<)Clyu+*L34$BHgk+Jtc&y5&pzC9J zO!5(W)^m`Yyg@tYym?JgdS;}DL4vx<^umB{`&kmA&Wftx(EL h6IhAFZW`r276cjN6ilE?ex`%Z?uD0HS2oP6A9?MNUN# zT0#C<=a6*2Nbr_<*5Ihb@C#ZMvyNz$-frS;+$FZ_Xx1B2NmA_H12B>5p+XfHi2$|L zhvdr;)7KIzv(TgxE=t?H$y?yEpJAOO)mJ80y84=ya2;jrf5D)^`@!?$6Sle}I#S|- zUNFW7VJcJz6|qGfR$VgUEgGeJ>;l?VTVNoQ@Zo$3<&q|?GV{ D$ePE;RCsXRuN{nr-ms*i>h-4!d0H9DTho$XNMP6+V7H~Arr6~=SV+4uus1Yo zuTEo`==9<{cEaP&9}G?JtyQJ}NMx+=xyWlS*p2JA>21;{)n>!J=7xDJ2@sJWPCEA2 z?Fp*2xY!lgpB!bsZfn7;bqV>*`N2LtFhO7k;tFl&RsYrC>AvVZIj2c`umiAk*uV-< zdFlFC{Rfjw_v?i%YV1lk14&+mKG37!l6-6Gtc5Pa#T(L5{yA?(d4uR~!hU2THO7VW zBY%ZoIyWPIU>WMKeYU1Q97g3DJ^lT^FANZqv_GDSIx@n==F1*Pm7FowAN*kL!zJ+9 zqwLKRZ*zQ{ssQ{SA9fB4lE>_(*TpYO?Y-w8-*cgU y{d$OtoG{_DU(Lit$-)H(!#OW0EoC#QAdlyh@GUL#3ii!+cuayN2O!cV zN(>;JPK;*pE}1WwNz!|OlVQ?Fl(bJRQAkps^X1VY_^{CZN?9kZjub)zC$AI8h_;`G z@lha4{sKuDaX|mYm>XG` Z7Jef v zNE2piApNL~ml`>^hTDV?)|`129q_9#l<+dKJMbMfh;+CxrjlMS?YSLSyJV^NVP0z` zMkA{o*4i+Ge_6wqiz9AHVSSKKCt0^FyJv>vK+TrgMr(K@PtIzln(Wl4eFjINT4A(o z@ijx-L~kta9KK(4#Wgm%-n0fD=uTlqJ@wK~14*c#QxGLg1s?b#nWG}?U-iy>#b7mM zq>}B(*F2QnE$v|!br0txN_Z#fh@SLmRW8uW5?q-OKjYH;h-6jQB+^L*M2T_qtjB6c zMlah!N~~v)i~UwipO)i$QV;)ParRm-o}89GQJR-5Nx)C$UgkEgq`$EYacx58Zs%;E zN%C9_DOwIX?JtUarxyC33Ebw*@TZ$T9^011w)TydJqxrVgeS6M%_m7vVPvSUIz8(V z$}NJfPKTS%tW8@&wBBf~t0+JRN+4BN?iU0ZDWXbA2u`!2PB-2MgwN-Ua@PJ@So{?K zz8V$rI 9^R>%h?>l70i XQs2R=eZ_q5y_31GK!fTDuj0S) z9Fz}9;{8qq?DOoo7Jsjf{y}WC?+a)TYtKDMSI5HWjK~Q^(>5ghH#8EI_l$- 3A&te zdVQ)7c$GN#tOvhi3fT^2hC0+8wLkuB7xbS&5w{`uBH{xTIh%DGuk|{RZqYSxkr6uX zq<0vSAyIiTLPEgIheUlXIOYG8yN^F#d*l+jvCZc2Tc$gvYyPCm+UKNF0XnDHSD?^x zyz`+@%r*vnRq-C{GT<-D+oST?<+|D}8(`5|_^Cu9bWnG~@?rvsfcX(pE@VZ^!D+6h z;vUq|DK@Itk|{SpQT*IQq$X^V?t2{RP(CCJJ?>`paccEBsJEJ{^{O0E6RS7B`WZH1 zgk+5K#df1kp!fFHOSW3o^jXSaSw(8;MI7Hmu2zSrVC($3M<&Mz)En7nYtnJNTD!${ zW-}ap6ctHkD>4V?-544{1mQX0OW*ryl@`g~z3J2Ff3q8ijN6%0fEg*Ci%%-@zMP-N zbIwC|#<6zKw@g>xfp=##H~w^ctjGWE#;b*umLSNK_V8`vbLheivP1vuhm|5ttNx0e z1xkx7rU7War(yTLP)YpU`E4T{en7Ohwo=nWr11hxV~<$?@nRA)TI=zXZ%wn+ZajJ1 zBd%oHI*XDm;dleN?ad)*8|A5dd4?$5B9%OBx+CtLLE__Y%y90=ZcXGz3-u=ePiA_F ze0oKoc=m=x_F5i!*Ppj;dp~}KJ>#XxbnxEn`3;{E)4a|kO0`-Zrc63UZ7mRdj1#lz zdC89SQxUi(A}Ok=1FnaReD-)*VVh+v43m{k#`mrV?&%Hyy0DcB$L-6pS9!7xU}1Yz zE78yI(D!m!mS`ze-tCS2iV-W$R!cY1uI qhi_*! z0N_Xpkp~;w|88?FIyh*&g94V($E4TJYGQsDM($YhnN5GXjl_6Yx43q{#(%1MBh3x~ zKt4LXe%UC9CWxE6dXKdL*ck8Fc6rYMfUvG)P?9h{n*@-A-L)iRIOf)vuCc?t>)__7 zgBpGhcmUN}N0IYKJAH=p3sRje1T^jeT7ovClAo6v`<*6=T&%`>j%vtV2zWhdI33r& zJ?P~b__M@vq*#qAXi3p1g)7)v%-+hY6F-4~c>} W+gadIiF?*yLPoc zrS|*tNsOsfrF6aOY;&kZRrsjYy2A73bixPun_Ig1{yh{ld%1}RE8w(dVJ!myF8%9o zS@pu?q|7ui9G!ss#Om6m@93KLEJR(VsKuPHm_OmIWA)nZ`AQ6)SpKeCXDsb)T9aU6 z{ ^G2s7WV z6{T`e^XKV5l%1{dT6@)!S}!-#N8QUKJ!vz+@O1h~4{zC?VKAI!udG(iYIala^`ViK zbh*<|6Wp-YLRRFdhy^t2+smHMj&q$)Y&e~i{nD>cCrK->^W8r8 1*=&|*GOQ`IoPVYUHK0A>6BWAiM!NTlB!%nHJ*jsVIx`EB_k z^3zDR3i*uZj6)AErbSlXBPRsBT|f9#2dHzM4)UdiEF>I1Jf~#;lN=S7EKe3D>W3Hf zJI~hB0U(f!On>No{?65a*qwdKOzyMo=knT&W3K&X(SEZu>jvVSPt@(X8jcf-3~Mj# z@&fK|G3b$Q4b%bvrywlioyY_=rW5y4O*<%}h~qyt(FDL(`#4Ylr(oV_4&yRwp9H|i z?Zl<;o%Mji;9I}a-_sMXorK_t9)`gab&a+TVgQRtH}n|Oh66a}{ml3o+bfEFWx5ps zGg$Jga#iE8+>|}j$YK>!ZF*UXm^pw^SKNb{0Zi_g*~}%(aCvoGp65i3>zp)PPpZ(; z0MH-W%iVK+jhAMjoZx)ejOOD+(19DW{(-fK*^BxF$N6sgG;FOenIF$M{|}Lcf1 i`5>S>+KXa#S zXOwm6xiH7fQ8E;|Ro1-=VN2@G!Gz$zy-Jma_xG{UiRY36zFCu!3{Z`YjUVt0)PB;i zU`hDgq}g9p3s2R6H|L7jUwD2zFWqpO7|*uyt{d6^@wxZ~3w r`=@L()<&e^kPkGbg}nKC|nbMBe}nmF?WRHD7TL=Y-T;>=)4coQ-n zDZLD^%>gY3k+8LRkus3?Ey=2aP#o~^lw_}SlQe`^0XNvOg*rm@?-S0w$=_MV9W9T{ zz;8o9Z@9OiH}ILO@HOBXU3yH7IqXCn)PgJ23&5Z&kJEsOZ9bd@A1jJB$(DG(hokXj z9Znb3J7M44n47Q?^aai{ryjP-KX{h1uLRq%@}CLqmn_z;p2wGe+kR@=PSO3nHPfC; z4?r(QFqx0I*{WCL{B=@G;@rNObzcyH&%I>LTP}dRdNIf>Y-o`UItfchW3Epjq8Krs zAl x#@G!d4PVRwgyk)7 z_?4VC`dN8SB_TbM1vP^h%hv>qwX6vWOwM-1Gp=o%0p5Nuh!gngIWi{pQ)x6QNxvl? zJ*PLH4@9nkYXW|@emY^iu(09Ho-w)dn}W*}42WlVOV#7;(Z!GiVo3K}A?OfauPP`X zR-8YCk;*f6?Jq6(UlsCW!{>dR#5zOHARFWZa{anszIWD#5ZHHS)Geqq{guDErAe^I z&KGK&7^sjYGF?rdWzWkBkJ|oP|B21=oIQWF0H4NzA7Fwb@5bEul5>;8mpen*pA1(B zYjpK&gMKZK88c27_GfWf&noLTKkwAtFVzxMYe!Cxsn}?sc0!)JtPtX`)vZ2FT_2$F z*xI4r?YY%-I2+TSyh)GxJ=I?#XuHB-A5Wz+x2x6SuzCI!x?{^WYp+#Us2%TZyV~z{ z$|EqAZ^xeD8^^Z)xlB#=(&@&z{9yWar~D-(k4CCvpww=j%7*$*q%E;{!>ZCWy%S4J zwItcVdeTP!g$;;QRxQoKr*LXm)vf)_%7sx#% o~o~qI&oA z6Z|$kzQE+B271EMw^ya|xx_MRXR4Y5r)+|PeswV%?Q*ID*D%1v=kSD!&*su# AWk0b>_ZwHw3I1M} z@q$zGbFW+A$JAslO?p&%8hi2^^HH4aCA>4P;QVxGSS%8iX>S;zY;cPd*t5xQw#sFG zCzv1{{8c*#`KMh|AYubvfxhi?uPoOrU35Gps+Z{4#-OD~VwcjjTO4I2KM1L64uc)E zCYiFzAXPASc2Z+>RGr_L?R{icDW8t )27)SDWQSTwF$tqag{H%gRE^8DUCD5YfT_b zJeFl?7YjxU2h1oJeJdFIc3wK~PdR8<8qK=zu@pc@(r4cqJ zDEgJ-jEmO7T2q(ZP&{N4 AMI@49`lpk$`W|R1zuvspD7Mh yegV9IoO;6^jAw$zz)>gGL)(tjp7nhR5b L z)cg~I?c(4)PR6iGv|Fc$wUFIHMYbw;S*hpGWjFfHh%x~3WrC!RExbw;p9Q+{lLh zd3i)?cP8irQlU_khG=FfK>rTxQ0`8&vx%J|l)@hdrLzy1%<4B294C8O6xE2EzF*Im zA>x~Mbj|5A>rD eHY@esYBERYlw|`py`V7mAq_rqKh9&kM_KR;>__?)wrg^M%d`fhB&6E2 zldL@s-$iJR17CT+;mQLugn;36f)wLJv75zT{JKpjXqADl-Q{l!xGl;u6(@TR-Bj zL&8My>Dogg!;$dh{j-!qKZzu~r=k&lNyf&If@&7(5Ko3o%1O%GEF@J60ukT_nLdHx zzM*=IElm|%-5*9=n4i~R=FHulqIgW{7pm!==0|D@wxTQlc(PJHqI%LMXbJKcprZZ3 zsE4 _k;$Q2ARhtZDlHhHx2_MZ-%275i~T6-G7IF*IcQJmzwCryUhl57{)@Hk$& zcw>;gXo7dbU}OW)B_%7az}MX`@8D>Ks(URy>+!byX_rUfJBVv~_TC??C4uFk7O6kL z{? v?&mO}iz3BOt+>dtE_-D@3a%qIuWDrv%tRm$7Dd8E;KT~R;eiuJ_VXvx6 zw_6_kw#C<+mVQAOcfdu(l@0Re9&GoAod~CNnD{^ 0YjznJ!k7e?;}cBc%f=G}TLUw@gQ= zcBX!_C{6QvL9jYJ0D~$GVwR#2#2-p 0|Y8$9`R!4Hv4M?S-J eO zyULnzsdw_{D67M=FzSX{-%>e(V>yqdg*3KXm|tK|^5YRaV`d&2qN5UCLZp_ABUMm+ zOeZBzn(-1G(}ar5@-
yKwIDX(=JjL9q zX>y4y#p!rH$5+sz)XpXAg1#a80ReVwE-TH6D{!VUD^Of5`$kos2$lXSCR`Y$IH_1T zB%s EhEigymT#FNC$oD_n {xT$odyE$% _ZNo3_5P~ALOF}XoQg_qwjJm(|OlD5$3N<>lc>?@mzC7(N8a6jb8P2Jsb10Ah zA(WF`2i@%$YgSAcKfU(M2R}__A*|{!*Z!HNjt8YYHu{g2Yyag8aX#Q4_W59}Oe*zL zWd)Bl`ot@r9ll3rIv1&9O^qL(y5PJFJ~x-W3^_~|la=e_0sR@0tM{TQuzLBek=@WW zAcU8v+ra-~4Gy>#!fkJ?&~uyKp&!A8W6zZ=q)TYS5Hbir%!iK7Wzt(Rf=i4aVZrK5 z{0G+9_BEfF8#Pv`70Iq>>ON@PxCdvpM%ZyLA+{n1!IvTzgYbz7h)JLQNk14RqI!AV zuQQpZ!9n$XRps!QcR3_7N`;YBID@i4?)OSY4|3=UV)J0jj)by6m<)(!c;6hecp(S< zHbeQDPY?xFv1F*p&*g7LS1G#am>L3b&b3LGc?O~cv2JYlb}mc}PCbmurjc+L6$9@- zzG^yZ7Co-@?5wq@r1Fc`9f5dhRR#iD E=S^!*} zMjDo_BA_yXkqi6W9dlnIlddxrgUsI`4Z;Bx+*vD|b3(_EL zG ;&QqoX?7#N_$KVD z7^b0cTXxr}e^qdNDb(rd2+xi_NxXUMsMVm*;;rcLhFX+qV1aR!yCg+DYx{|%xTL&k zySgNwyNS}?2069A#J7MfgJ^J>ML~6slRSf*m}sYu8?HN5LcO8rBh4n ~QZB`Uk zVR@(Yx^ga+!~90&5?%ka#d-;fg{mPUxV~b#jEVFp3MVnSLD$igL{%;=q#I2J`zNLa zukdbMMN&9|B2g9xbA*ZXXZ2Y2{z(i)(o;?9ENB&&py6Z?%P7M9G~9wz8?uOR+*cqo zn)-1t;5G+MhJjgqR7L;=mEZ=w8)H7f*KrdZp+Qo182h8|PiX7Pe%(p`W2&lh#1Mwo z{1b9KHO|)asKZ6vfRoR?tR2WgB{)4Fw}?1UPz?-*qmbHrblRN0m>p)~OA}3xQ2Ly& zc+f~B;8$@TcQd823zKOS%NOnSpVlZ>iY4$s&|N*MM5S(3*(rwim a?&po`kBAs2x-ptNbFT9wEdlMH)AL7h8o-{kR1i5BUsF+yH%C6RO$#A?ow9*l zBNOWO<%ECgf{;yjZUMvlZRJj|dh+J26rsEOTiS+`;hK&HDl7gveijpHPP>sx_Lo~V zbJH_~CsL;98zwKQww5i!VERF>(Ik)X+E$99MP`{nUi_&xe!u*P@~KyAFTBx76}MU` zOA8pr_~s0RVs8v`CZYWZQki~-Si{#lo5B>UWY?Q<-$KrqF8N%rU% `A04|v6mVUqf995PT#<#c_w34)B )a$_8P*Z z5uYqZu| LJpXVjGI%KOdz0&n&gKYA z`T($*Ow!5sbphfmq{q`nV@t{=VpIO6;<4&o^7LuqfLp|pw4+!0vwis|zjxC3 ;eacwi!$k8c^v4b#aGoM*P8Uq>iNPQ%1 2@-=V|{9tB4`XU0CRC bc6fXt*ILLrv-~xrKMZnp+1s@&O6xq@-ih zxQHCu3vPZ7A)GKOR|ctuTC^Q@ZIK%>k~paeB_*qWC8Szlj9+m0##@4%lG!&?vfy=r z@C==L*OK58)|ci!8y~XAoD?rk_vbFf^|E!z(4p<;lcNm9Re_Z2UUh2Gk)Abq-xcgo zdVYi1zSmkE#R0=>s0N4K&h*C1vXyLU7~4hcQyt!@U!ZVT{#wGWNwB@)0jvzy%fTF; z*$tlhGI{HJMki+Jd^yeVqJ_4Xv*HWZ+4lCasK2W$>TGA@IV_ZK%uDuhJ1Xs4B@RIj z4ax)Y6;$>gGl?;Zv~NBUNxZ&%v*A6}9m?~mDysYo^)2z7@pFIUoG5gIexKdn;Q=(^ zAsy&LE*+E`EkD&$2p}J%@I*!fHmK?InN?anGT*p`FoeYuJh_FbB$B?C{U#}jGLuQF zF2-Y0B9cMFyf@Xm6+JBODqtc~?s7Kg^=lgwW{qoNtU)U%Je$&jj2 P*6%@bDazDYm(uYvoT9FV>NRVyJBMy|H%pJ zu2FtA#j7*r@wH%Hxd?HZ^t4q&jh!O%%E~ ^y zB8;u-p+2LOyb#z3;WR ZEH+1xnDR@l&YvBi0e5(62%th44(J3Br$j1Sa&W z8nwqnQlR**p+imf!OGgbfrM%3Fj%MEqIZ)UbJ_v%<)>|`egukk-kFovijve>!TcXK z)UI#Dhq!r9=c1yfPS}I^zH-8hwOyAj3;ke6II3N;Lsogi8u8N?&($L z%&Z AZO@N3zGS!W`Ca4Q z0d>Tj((pW#LcVz={6smbr$C1kTlwur0*@=XtU14NNXqA`)gDZGJT(*^r6X0$X}_)L zJ$sePg=rd(S(UuyL3Q3Uh{k}ms`R8^UP?qs8o|E3u{1HXZ#7;+i#QMD%Q_PrMer4W zKVHG_h#Qib^&RaIZ9@a8e|%CPQi>9}H|cj}SrLZSMEs{uV70@ipDtRS%PpH^2M@Iz znZol;2_>I!QfvieBe@+Ly%zbwQ^=I$nsP=OSp8J2dY7j`CC~1~oCjGk{ldb9>mpUN zxWu2!u0Kx~FKK;0J$GA4Q!JvbOB $2r%4PJp9vIRG6WOb1>rLWu!)f^EI%*Ab@v6e)Mvinr)dT1NcoS9q+IVEjhf5A=s zv1^dsp1Su+a7@J^nVmoQawO_HCi&G&Vex_6i`OolNsl{%DL%UIDOVhr8W|C%q04H= z^=%WmqI|&!CK##$pB}A+UZy(!dHj 5s}7(z@ElQoPNicHVmcHvbTb@cRVB!O1*~K}!S1TCVQV>Qd58ACDBL zMK^cDW73V~6hD@|C(gF10r2k;byjFYXw?W0Sz>qjtR$Wmf?_lPC3|MCDdGk`H5dkf zXAS^(9_Abc5#-3+b3Zaea*O_Ey!^!g5%<7==GV*)4|t9Ti&{$aQL zMY 8mI!fNlviH+ zDJ?pobI&;FGfPx79R3=T|M~nWF21Dv(>Y;O_F;GF04;ske3$e5e{$X*sAB?JN`Ps+ zCV$9wi2$O*nKMH&vL6cf{GR-TDW~8-{D4J72ZViRM&O2h`zMO^uQmWtWTl@|FjQzf zFo6$1=yn9%D^lAJ5BipX1en18b-~re7N7} Par?#@AB;B*60Zym zQ=b?qewoz(Gz^DaFZGp&ZQjjv@q@955a%W8eD(Vkn8QSzhMOkuBErV&K|Sg%D5ZRK z)*NBdhmxbtR~0@Fl#L%`%LowHCD_4r_+!51 5GYRDFjM%LW-mN{Q&p`4)CSc>sg6&0a*B@g9zXP zgWd<1^UZ_I^nLa!96}%KlmJwcd07bQC(l{~-Oq`MQvg}SQBCADK`h|gOB+)lLLREE z^R~?&;A0r%vz>dcbi`ENhwB>D-$$!Zdd<45ebyes!!C>@Vp=y8*_-pf+KV4Q0YcX= z&6)(&AHU8ysVaps2 s|v$4>rYh#~;RujVCqtfC%=N#H&{ajSJ*27Om&&s(%MShD<-P z7FEISDNwE-nA3 y6EVUURr1=GNRz_z1+5Ak$6c1g5gcNA(?)FTK+SK`^kN+xMc#nR9=4r#H9nalL z<3|55epDG#Acl)C;W!8X_PCWuZ4!rncCjTCoi#&Q_~5&4u~8b{k~H`ULk}K}@CpDb zRBG!QjsXM~etNBEERf(dfV~18*R#8*=?rfgiB%Q7yLKDE#FN$n7*axZBiT^^-M}fb zO*32hH*0a-Fm&3MRo^PrWA{hAYUxmx9Md=+8FwoH1Cd`Xf8@A+^@Za7W(FLH6ld(_ zj0+eLIXhoSV6ex$0Brmk8iIxgZ@lObbO(Yo7-2HN#+_&e2u$DGt6YFvyi=n*Itd)Q zvP$!APihv(#GY|BTJn$(VB)CRq-(T~SK<2&kgdjH4QSY;i (xEg+w}c3S0@5Mf-Hmh!N`r!mGzdr?x}-$u z?(UHM?Ro3xc^;p?e*gSte&3nz%o)cy_hIk7cVD~r?sdJcYyCf%%4B^^ujHCP7D{%B zyg^p-D3K=jbe3@0U-XxpQ-8|#Exf?|hu?Yw9WoD jq`=(uWMs6e7= zho5om!(Ru69gFP|5!%-Adie>>e?}I^1LQ4IQ+3UaNGwADtNI;ln1HeV^bX&&keo44 zXw_v lni z#$QeqX=H#fitg1FfDW|0g*9w`c<0Ty1V$F#JH66rf{4f8FubIMTkGgcf_3lc#{9lN z9G?IQY^x+1b@;U)l;%Sj{7;f35|ab(g$A91vBLc8conYjuef;4Q5iX(ov7iN--;?F z1y;@2n{XWlz4?w{*7fbxev~N*r@{>oTfE;V>*w|6IXY0Kav9(?B-on%TDA+)$uUCE zR-?}FLt5a8Xr?jJ$}e~v@v#Liql`k0uo+TJU$iaZ_i3fMEW`8H`Us50ArI-*11oKb zw$3OU0;urfaHRG6jCgE;lgI6~vG7h0Ngg+Awr4)@447f4&Z^}EsU*J|+-&Z|Js*eT zQg6vr_)48S45ae{QBTBVxpDiolkiG{%=KZ>kdze?Dw6(&=r#|6FkTXdJi`?$l_Qv_ z&*z2b6IDw?%-k%hIH)PNlsZ$G)_jMSRR{B|UXD_;_rY%FeD+VfpqK*DXCP@Qt(YO% zMo6 BYi(0#y}zLsrM1_exuh*%+!k6=tD-Xz`zfuy{7ogu=ouMbmw((pQ*1p6 zM&FAy8Z+}`md8i$gx~*qa|PO+=%*MUWzD&;KMmYB^v~eu>zmo|BHzVYO4;NqO1T2Q zNM!@eJZZuO3?*m%vpvokl$+`t1-M1N%>Li>Tz#q4?s2%_9d|evoumq{K0Fj1-_106 zzLvz+pGo+xczdHDp35a%dFd-<1@| }mCQ=AxQqE3CC=n2dR zlaqAU8mY|H>Q$~SL +lpj-y>~1#ga}H}wRw&MkTy#P?eUych|movtUj*g$q`#mhBf|CWi^ zh0FO9_DGe6vwpZqNeeVHWbl|E`eMjDP4C0N{ps6p$B4h}^35}sblopEi{1#!NmNj; z-(N4}e@@t+sj0I@XhGESdrAIHf96OcsIk0x=F7nY6^`Y%xdDUd$Nkcj`ByGVb>?b| zs`{)^v5YS>1-}e<`4g(}HQ^Fc4%{sf2KDRcJ9Y9|rf6R*>%af9=>0wP@rHVeb>85z z>QJ61Z89~x<;mq$^syLIbk%@Y6=4g1eK=9rdVo{7CHXkxx#q19_v}L0`UWZ|VP_Vv z?wVL`)V!}Sa5?GE^cdvshX;*Q@7?VT+`NG3$~gq7S)5DZJGYAa0AU#1ZV2vRl*gz+ zEKCsNEoTl~HfqOT28bs SU2N6>;C$Xd;O* rv!RbR5%&0 z3AGpwk97WN0>aEE?a$8oetEy|mgu!d+z$6oNcNE#m!*W<)r`M_q&5+bqnv8?NG%N< z+> @ zUPG_RR{cV^Kt7gGPMF)8Q9l!wu1mAJl;Ry==zKjPLDah@5;-1$_F8kRPQwy?*~CD= zHeVIXjV9tuPH)v4SCgze$%YPnX5RPs`@s*|JJr&~4%Fk8h1uw{9G~yzZw%734Aoiu z9zR cGAX6!N!5~391tTRz#Q_(i5s|QUtlzAfbEfE`Jr#W-EvQqb~z x7}zb2YGyyw24{_C MpU$L}SlQJK-**y*BQx;!A=lPV`=NV;B*1Sv-&1x0l*0Gno;a98@C(nyJ z7gwIG9w&8@E<3(@oORQgI_ 5XFRFaE+DfZ&&gv_uHj+;_cy` zgu$=}6N@`yZ#P8z{%k9CJux^U 1AXs5+%ItXNBVkzYz zBy m%eKVsqw_tP0?^)p|iZ*!AwxhQnFHfMk?K$)E6vNIBbT{lNN zBl-_+!#DgFBIv`1Ntq~~cPO$m?rtLE5oA-fdFBUu1T$?dOd6%6Cb|)JhU9V(xy$zG z=7njn$ZHmKnY+q!o{>$F+KJx0pWh4>Se9$OA{or`M6{h~=3~a^Iy_EFwBBNk;d~jj z*CJ9HVml#wr2{(uxn=EqK?&b%Ek0-kkz@)UJ!uEQkmvY=LmQ`UM;mU`eXCbWv_k8` zcwjJ0k?i69-jkXBtBT`7%&`9Wb7K8~$Gk&CHENR(!!MFZ7+19_s;!TMt0VSXq3pcK z9Kvgc9&E+|_x6x<4I+y| mV-#@mqz|@w{@8yRT$nK$r)3?Ql#|ZF;5JVH8qMQ=BcReTx zBeh7Ay2mh>+01i{V<#;gfWF#>)#+M#P=q~4M10}e_9C2M!kB}AF`f)3ih>AId_v-& zG81?hHv4Ewc7sH#<4DPGAW0@0sY+^ ~}BV3c(A z3+zBJLx}3f%Kq*^U(p8T^D{`QDxx#~SiHf8W<%dYAW%=J4zO0LJDfu$)<6ykj^N(M zqiaEYpJ^`U8gdZGbW0PKich&ztJeZ7mBJZ*-YWH^y(8$1_|3yA7B%E)u%RLl93+=c zxKFVFi|3W{(}d|RWntRu(7r@n#>PWI)y2Pn5u;?*@|@n!Bi%&iM%UWod&nH#2X}fS z@xVqGe4R8@W#l6-r1?wpgRz<@#w0AAk?GU0v=Gsi!u<#wRHANb40?r3txSbbmxD@f zF)S#|SY+&}U7Jtq6&DX~`t6&|m&Pi7R4sJS@Rg~Al57sDcxULDD*fe@P1$dzS0CP+ zKg~X8&edIKguH>^i&NXgh!%b-3sIfC=<2v7*%FJ>em63t8mC HtqSip(5_65* zSd1 ^0Z5Y(o$@bg}I+G0*vR5jKr8eXD0d)D~jRwhVE*b-PckL_CS^s6;V;I z-DM<>AXs >mfJz~BGUt=b2Dj2LCdcHQ zL*NC$H209;Og)E}MLJSn*Km?Gn|rAz#26%oO$3Or*meuIx~1AtChhWbEPHpFlBx5R z#ck6O3FKvs3`u8okBIQ!WN%g|>%62dT{Jr-Z0o3bYn}bHQiRW-%L`VcLF8qUQLDN7 zSEQFM*-K9FFkY1tN`eS2_blaVzA$;TjZ;q$s?IyAVy~zuz@2(qob|skDGd(fXcPAj zCP8`bV_b-yZ+qAmVkctu_#38x_~DM!g&e wh3%N#y8IIJhW`|0?_+ z)F=fL4lX(uj;Z|vYe5O&sOXAhG5P vGROKqdQPCu%Jd1x( z(T{Lclubc-_aAgDh=CrUqKdeoZ|VQR4c|)x0P7>w{hI%AvHJ4_|4*nm9V=tLT9!z2 zfXn(IXR80F|D*pwtI;8%FaZ1z*38SqqMogvYf((`Ph;Z;J)sBJgYId9^(3XBeI|fP zi=JM7a*zI(3m^`Z9F&*6xjg*>yx`7&nq+!7PsUu8c)_R`^Pd8Ns?e=3(`;HpfS%R_ zKz4JKBP{^|l%nn>VC&oOT+B5+`?>L-Fo=}IA?)dm%x!`tz(tVX(|Ki3WpQX^cc1@* zgnmi}H9(H-NQk@*GygexZ&&4?%d)xN7-K`09>$->4>HsZrgZ+Vs}Imu%w>n=$noDh z<^ELux5~spnHH98V}si9|5wE}0c5J_-L1;`FH}jv41!4h&}RML0QH6k=p3)s>wg1O z9*mY^&FiW9e+o~bfd{|Gz?jKDbt%>a!T*Z5#hvTl_*9_VKbIvg?Eg{p*6%K3QjqrD z&CR>X)@F<4?)1l5wgN5|Qto-mf1>tNqGWrx#bZ)_oBB|_H|7K0C1$mQA1rL_&3@G> zJrt1r_6P1N#)S9OQ@Kv^pT9S!Ex0Aj&S0M{_;35Ih)DkY0&0vHOUgTKVp%nd$3N{k zO}H2N_P=^z3Bnz=GHnyi4Ig}4=KFj+UWO&;cWMZ4b5avT^Zrs3_oYsY7rV{)S{mc< z=E!}30ovb4Qua hrU*>^qg|4#6COZyQ!s_qm4XGhBBpYDa!q*x1?r^7E>4 z&syvJA>im#^T+cbXq17cf3+%cT)?DUuSLRQ-tX1fq^N}qD$~A#)|*F8olO?g`|o_4 z(*A@zF-cHnOr(+IK(_caMZ-$Hh}%}-{un3O+gU&DPQJm5a=UXr(G8}mpMu48hJS5M zUy%jTw($7uxL1A6;TOczu5jo!Fmm5YC3*ALdsR}Cpl2!)eNhD%9v)F!j}>cP;u^R& zP9}Ri GC?zkKZlZ5y?u4pT_CD3=|GgX?E~&O3 z)tZ2A7+Eb2Ln08QOV3!2HnhNNVnt%$6#D|7^ManM2Hs=JMiRsG ~&$n|K#lLT;Ts}l#AZ;(pe5)T-`orVDp%_F#uc6Dh z^yBOI+iNc=1y4NWA9a66mMonXqL`qkKk{OI+p*jqVol=#GNz4e W3KR9u! z%eMR}osF^eq^vRW0o&oaifdN$pD2GS8q`Kk03XH&uYTiFd7Av5|J&Gfh#B}oJx!5Z zY+^4x2mjVEI#_ZsCUXA~|GUHaU^O=o=a;Bh{@d^V&Lw8bf$Iw0rC7?xzKg<)1ph69 zpqPkZ{0z;%>wF^wrW&ptZvG5r{2*I&+v>-^M-SIkf7krIr$#I?rlsul&5Pd_Wvhl1 zOn*wi57Niz$YBIOEIoboho=f^#2_AwgiL((HErO2dHdD>@2g)@0C{OB@xq1WUBlBq zQ*Lf9yvP_@t!Cq0k<_~{FMp~n00YGu0C6(z-^>9x^b9Nr- np c%l+@|qLwtD#aaF&PbL|LM zFf51WAANvGiTl~Ji$gf&;|*TV9ykC>Prg0BI9!%V>|i~$1vb1<^JBEL+`DtORo{2I zC>^TrZeOdWBuwOAzae0hPnni@{_J8 (;)kbodXX``h|1=oQMGm z@aFkF@VB^~pKg+un=ZFLPb1-pX_WgtlgsjY$aPB<^~mz*lRo92xL%RT^_QT0Gc9oI zXg^#&v*r3|5ZETZ@R)VGL84hDT-^ecNR7vwS2yX45@%B;gW2cLPLVYbHA_f!G5{sC z3+SwHGQ?GPxL6hLJG|F&=kK7{cze113(QiOo&u9*M8Jn;ov^>GVT( CWP2Y~!d_oTiUG`Lor?M_b #+j*e?_#sZ <_ z8&3Nyz&*QtKnD6QpiR~44YW%q00D++=%+oVcOd^s`tQ8Ts!`|o0nt6|077#Sf{LR& zMj>zIbGBnmX _`i{?Bxl#9hi`J<%Pz~087np|7^Jp5ch*Fqn zk>739_BIpkRS$}6Ghs(+p!)OZnkCA$ 7>lQ|QBu3n8 z))hnUKET^O0V4nUcil$*YZi8$%}O}GI&lVqyR_Pt1qHIR0jx0OWZtrUQ+MJt?V$>| zK9o4w1+-)ZFt4~eJ^|F@@i>cEUDv$lGR}UUFbJonqBI|^2Vw*?ne!vQ?~U8T$ z^=^6zW`*(J_{ng=y+6 Dfe>hR3XSi2wib*P zsN!!0Av$%EJe$x`7uPO*3~lZRD6nc@1v1GRhvwfbn&C|5m$HB*!av*@(ICgX1>I@r zCI8XfhnUS%J~bCkb-R4XVa;?5#`|g1vKe|!A|D;%3z%lZ%@-i}nxsQUx+|oEBKyFc zXCK; $%GI{6ppb=H=KYZFU>*+7f2QYJa^Eyr8Z&N z3AK-2KZLkEwb3cr3i0DQerKunFdO^n*PZdc!tjx%w;wMxXjJTKc~NT%bg_%iXH zBI{YVJDg9tTA%4!J_Q`@loD%}8RRiGq9Zlh;> mpdFs@3jP&%^Y|rtW^oLh zH0w=@M+edF^;W+YaHQgqSdv$>`YiEhs}lWA^2Wr9hVf~KEI;O1FKf;P8ZD+# p#^o{{If6UG_uz~!H zW)Gb)A7Tb2%fO7ry~?9OHcycNOxKq=1Z*#^@(v;blQoRhdLVV*1$GT5QN0;EWt9?( zD2p=-GYs;yAq4N4LygS)9%;WQepC1g`@<(v`4V35<+l2)vK;{3Nu)$CKXBd9pdFPZ z^vpxXBOBNFG!rCXH+4bag?f+T;j5GhPGwfcb!hhDlzK^wuM}@Q -si150xC}BHU zp8`S`>I)0Bc>sa=cU}j~BpVI5b$P`*+9iI2iKj^+?Uh0B^##$#1wtVDE;A}ie9kL9 zG5hZ}_cX^|7ey`i+~Ox)9AYkFtkAIkT@P}?UpN#34~lBIH*Pr2#j}aO8rju595VF+ zJBdj}d7M6$Xj)~8!*TfG1@md4T0ot5b#^M>0f?S0gWC~Z>n&!p2 *yuV-d99LB%3RZc?oaF{A_A!zLy!1EOb;gVl zE|DNJ2NRfvk~<$D8+FKrX<%K@g&J1i#RRt|tcqQP Mar;CW-=n|$>V9vpeyWo0uKKWS?z )*8lf>CTyErq z<)-`Hy4)x{!`&bm`T?HuR#@FU83{x|&Qv6g8okIe@3s+^D=Rw=H_oty9C1d~23;Ca zLYc$1nUk-GPo2KYm93V?TM>$%lf}##VSzBuR4E3lGf&P4{+KN&&hg{dZDSqSFn#~y;W1Sd<`DV+>{{@lnFO$>zWm)> z8^l_NHM$888jR#R9YWc26&Yi?@^s}DIJ~R~1zLOb_1iM9W7@(-jy1x)gO_?0DS_~? zyf}d)inleAQrV7gagmxfO8o iRs`8rVq~S9o@qj3ZxOd{xsK z<8If;6)Q-&mSZmeKm!Rwp0>(RZ9ywwmZ*fZ=|Wa E^qs11oC0t5zN9X-->VI*(jj##&8 o@d2PPl^=9%W1x>;52XmY;LW5=5;y#z<>`B{Nm_vXVD)No}Ut7Re z%o;+B`KyE$%Z&0J=z@H2^9W$*CK_iLf=kA+Pl#u>p>zNxZlfei5h7M4rju{g!Z_>* z736KBK855)9v#H8A${C}o;cG~#-!z6^E`f~AKXUxlID(@7`Y7*vD-6a;V1njU#Trh zXQ;PPN3lEGGP9w>wV)wZsHxP1e8R$RWF_8q8*83ajIIj@x!fvumf0w4tpb63knmV% zE>Sq4bOvT8Z2`S!*aYo5TY#b%cPDqrQUJXyTDwptrSThxsIi}J+D@{j2l4lXk4ic$ z)8;W^MHF(~7pkQBGGdRynHkrq1c^=NrW5)K60P6yFdS4TJWAQDQI9m@sZQE00*zZ~ zhuIX9QM%AxhzQRH%dtqOVwTP|>Y|+^x>Q#qF^mKzVHNu5Ppcn?H99z#waY{h1Zk?% zkQovlX+0TC>vUma6SMs56D%i{YY%%qVxDoNefl|_Nv~P*=w)aQPa7EynsF!v3OQ0B zn&yQJhAd1n4cPc&7F5*j#*1u0X&DGi3YNJax9jHlV@JKkzf@*mGFHiZ={x#0cjnnI zE@Bt#xC>R4k&L(o*Ucr-}&04YU_w1OZdQxvt2@)!Cj~swn1xm&=*fl$hAjX87_O z1&i$Tnqts}JpE5Ys+S$Ljrut6qcb65>Y6ei@UMB@!L;uKmihZn9@ad6 ^>y9B<&SS6_YZ!7>dC4}Im#!LxSAlaTqni66T>VMG0vY@DIdp?;NgNFakX#gBBW zIqERF0&t3hSg7>j^yg{ShSe7?Ot+c6$T59?(Cw!faP&Z&6dKX|e%|k`R)}UM28z@q zy+0{D6# @P73R`^7kcc^NmP)%k;ulB-%uK}_&~5$ z$x5E~CWt_}BjoFc(EHXHFP84TmL{^WW{6?blA>qeB^8K~SW@zw=u9GVppwq^bR=48 zMW@3UN}&&bCp*X^&VG0X{T;f{8kzAD^6|ZGaZ#nf2&ud =dDzKz z+lC`(weClRPCs>X*@4uvya}>lX4Ai_esmi_kg2>u>veC1#@yS#=+o=fjG3ZQyPSQI zHr{$Pp3(Tl)~3({?$UbvN<}D9GSrcFK|;yvL)dDA3QJgn!_w|zI>BHlJxp9o)dEJ@ zqosT;Oc*d&IHSS-7jJzlx!9KR%LyaCsZ?)xZfMTnK)l~!;H@klGh;WCFJY3@5kG%) z=q4t47>g`3(^~!mf=}%aLZH1d1N<@=(bo7W=7je(P0+IzVM< 06?2R9MO1X4Gey0DXh6xzajUdp2%ThIP#efgs6BlS zy_P(Ly*g;p$qEk>xng}_ikRdwZlp&7I;6;jifuRWly8&BEpNqCx68Bz3zl={ytgQB znvx0epCBNVk5f1AbNb--{R7pyx)mN{vtyT}tkY{&IxTKY3F&W|^1_CpBo;0lz9`nW zBdALU^=s*mF;-LWzrc858k%{UicxU_!3-5Q2}BMG;QJlmvwn|O?(pm|Ld`1gd=7b2 zt|9jU0kJ3po5{128g};*BdJ?=Vo_3jDSTOi1O~ZH1Mhw26MVv?nX7A-!AcMPJuVby zC4ame#}^ismd#b7Af6EjwBw26bh~k!+1&v>)-2YZ1 z&~_Qj*C~lpf}mYP6L$34JS{o-q*%~NUCgJrh{pp*nQ{vXEonY3Y8>TdwWjM84tEci zMr4viWWpy!cD6F7xtz*+Yla*#FG4}beYcQqWnidqqiw35)jLsK&+vFEb5cFx%f^OP z0fO!->}3jMGD4V^njruY1(E$q_s%cCm~RPE!sv+N% YA(1Q$~+Zn?gT>HC(S= zx{Qj2s9$2c&Zr?$9*kWg)~ph|BmsSGB(V-sE$TnK7nAPQ$`xDC_dZY%bIb}3PD^u^ z72BkTM0FQ)b2xj}K4Elxt+XfOxKY03`wF@7#}5Oxht@*R#zUW|XMOfzG^~5DIQw{y zyu&4Ez1pmIcpXystSRc8T4mY0hW6HoBa3zPYT%W3k~-P*^Z*Se2DkpB%Wo+0i3k`8 z2pEOgl9%@h6x$0L!fzZ3h6>lB-^tGXUL274T1j=UF1Qs3(_ZPqiiCNapf&pW2JsaU zG_pDQ>rL1)FQFoDP ?e$$_43uImx z*Jk*+ZDz&db?hR8P)g+J7PyLZ{4D7O!}-iiRz(s5hM6AXyYXoKyyKnQE8N$;>+1~~ zt(~)#wrLr>gmm`^du)+MpG8UTmA&Gq6xb{ TH*?yma&tWR#M&!~j=Vc@7j~wA%PIy^#K{0grzAUE7TBi%I=bq)# zL&RsUAm^3H_ew-U UGr&q=I9o$85E*>h;#%u9 z8Q6Z}d;RPV+Z+xmBw&eop!w&TVk==eDS9=Ly_9J1S?J%Gc1IqJB@D84-{*9`bD1Nr zjYeKq^mJLIf!D(98KM>5Lfgt`$=n-BQE7N<-6KR-L0q>`3l;s$eGazi{sSYrHJf30 zb=RNYk$hDGb)fr(-^y27b~`_rT%33(asC?nTIgGXk;H%3v CPIGvG6lVsgOIEpF&z2nT+Aqs94!%Aaxg0eLW< zFlgZJ!%G^!MVdsS?wf+*rv`;trCVeA-=`jKMW=k`c%s4jbG3K-kyt#48SpHj+(AE_ z7)GAY?@w}7TF3S<800w&(lUtFUa0f4Xqw_88>C+!FKYhxg#3u>>QRzi9=1=2YTkaF z?QaPu$7hLvH?QJ?7!i0n-LR z(_IltiUyt`>>`px?p#svtb=JJBdPUwjjSjAQRINmkF%kdQP;vSA3Mh~$C*Fv+rx)^ za5$nSE?3%Qu(D*Y$MRwT{lCr-L?kbkt<&h1ea(^0SZS2j6RyqhV*E9gMEZ(4CD}S= z&*MLhrz%BPHfY)2SZl&8_vshuN9~t|a%hPbyRr$S8E(~oP$Evvh*OfjDjVMK7enYAMdf~rPKtYpl5mF;<4Xy{o{`q-f zCipsqf0^XZ?f(9o@CB67^Q&{{?-+pJ5qu>7|EFk4-TMR;6&3e~q)5LpaB*?HUWMLN z64BD;a3#KfCbpRbk#{!4fb#*BuYP`dI(rP@_#==*+?&X#FxcP^j<`Dlm`k>sSOIP! zbB^`n<4j=}Gho?e9m}F+_{d{VpIp#hKfKTn@ZCqiiqx#9>4&pct(SFPw~Z2=DTY}c zq0`O;uh&jRcOl@?N6U?6Hpk0yu1|ib8$N}nfx;0o;WJ>tsRHQs O;(LCK# ouqB$R}D0zX*)0HF@u0-$CEhS+1YX*|74G$Nufz)Q*%@(kEEIA-uNuZmc>zrod zs~7C|uP-n9fxU6#l3tx-UOktH$kcY-EF4j3T538ORau?1%n@g&p}f_<28Nfv$|t{h zIJ_-z`1vVSHB*T9`yo&8fC56+Hb_Gj)W%RSKw(B~X(o(QmVI@+`R=RH6*%rK2^j8* z!rGLgB>gH}*40?;*1eIuhJcImYE~v8f%3aZ=aX^&2~*&UTN*lbJ7sh5x)!o~4&ddr zFj}_*z$|gbQat1{hAV=Ey-$jtrN_)k<=oR3Zp|2BhFwLl2hEUYl>aDFSJ|IydJj6( zf*4P^10>7FJV|^M;4igKg4jvN!qR2?2$(M)f!yi0yWm!8A5=3K80BMlt}eLMv&DiF zEnEj~FyabK0vB$JK(+-tgbh2s+ca*OY+N!?3XL{(2C%8BtLMO~u?L*- z)IhZAoA>FfdXNQX4rr?<)mEA=C1$-z&PyE_n;^$tIK0sSkTop+t~$e$-4F439G{t4 zmC$&t5O@L5e-%Kz?rjgOh9%)=T2?vSv1{Z8y7+_h9FM@2x7QQL3yD ~Z1KLN+}C3HJ_1Zg*Ml#hV5C~J2Et;2d+N_I z0_%8AKhq2F iQ8;wxEI+i;wwtd*e zet*+>Gpr^(Tx*nz84_mo$f04Ag ~|TPOa^v39 RY0mdxK2&EKMWb$Kl`@I*K~r>iWF-`bb6Lu>IkJ zHy~0J0U `%nyowL3pUxGRTVWrwg}z^!ln+FM}xhiJV8+(RWX zoce+NF!#8DM;18BP6_~>oMoDN9zwS5ZDUP79zk+g%8c^mUji}aP*%FxY=i2iws#y} zm3H6I`W{GGPgQ?3jw4WEuRC9Wh2Sg$81ugqOH=fGB;K1}fPyL2G$di4%=^=hTJCPt zd7j63U^1q8%FmdSK=1NWzE4z`KE8xenulD>1XqTi5*6fuV5_p7Z=My7EeA5aw+mUo zXjDbI(okw7>`6TETb$kBKU(dNC8+}OxOS5z=#cHgZHw$3hv?K=13QZ1vHuOox9={o z)eGXVg < @pqkQtw)BFZ&CL&Rc! 2Y^-r6@usgflxUQ;QhjL76yT+Hr+?r+B)FNYxfd@k2YT{d@VlAGevy7)3 z3nomor>tAhI{x=^&g+A_V~54tBWVrO(>* ;PkJ&?*g@%aR-- zo4db#FUS&cmxM`o+Vn^3OTr#pWWJ|SlI@|GEDm#xh9!&6%cVU{Y8Jz|B?yp2g(55* zyb|;c-S^tVc@d`wSpi>j^FveHo@wgUJHIzR2GnGFSEt`&=rjQV!H3FlLdT8aJPocx z$}V@dlHlMjM?f>lS4goUGY0BtN|{EeA@z}``jqO|5A+bRnLizc1O;oO$1;mlSa}-% zmh6VPL!D@Lh=_ asO6@ur7|~U^9s-f zMO^K9pM=K|AdgFHQUEXaO X7NITDucR4Z+%Lv2B@bNWM@G-K@MjTou= z8sN^5l0vV`WzaCDOF3fP0CHqiC)-UT;sizV%bQ`CmdqNrA*nbbZ;(*2d7_!J6~y+9 z%tX&Tza|9e5*=o?=7; t@wS6Mnw zG$Xf87gRw7Y|_?;$kbGdUD8S;!3D#v4K73*p7oJsKKt0aNuj4tyuHwXJa;Ho$=D`LeTm6+N|OBEy`C~{|oxb zI>c1^qd?gGx;}<1_rT7E{Cujs2X*TX3*-uulEFW5ZnqwKOu?{!z0&pf+x7@;cR?go zWSx8HTK 3-Bux~7k?f;RG^MpCmUizjn*jBWyZ8a7RsNY{}ZFAxVd#w z!*eE%XoSVPy!S3>G0a#IpX JV80#z}g)d2_`mJ=PuWQ&|K?{DF3Lk8ev!;q8TR; zkB^(1GFX2mDv=Eq3L;nTGVG@D0{XqTA2WU;|Lp55IHue&ALJe_%o3_9E1>mX9!a!k z^@UPS4ZrgotKK8g7fqr0qSzE?jFy>*w(I%UWeVeLqbEf{0atu#^U#X*yu=2->t(a{ zJ?Ew2!TQNxan0?93X$L4K2>Luu;Lb*w-#i*1l@YQET!u>K3J 3z$fmOuxPDoW8rpS7E9<>5q-_K|^au%Ga;R%^F3cJYf%>wvqjqb?bo86y_ zO_hrnyLAi}P=o5aJQmw3U8yjJ>5KBy?2e@$Pt|!=Gn&`d9G kuq8~L@J}b+8smB+nl|xlq!wiRY@>0Oh^JV{ zLyXy4iscQkmrWnC{I&K!rp~S?ed%K13b@PLaZBhB4!hJK@v4gV7&W+C&K2b@zH^$Z zH5ZEaRzO=Q_eu+$Vrk%(QqMv`KoGG|l9hV;bo_aI!{-J(FFUkX0h(ob{_V6|_}ZST z-m`Ydqj4VCZqaP}hHeGpv94(5!RK;lLYZ1qz2_5WQY3!yxDx3uo&jz~gN>%Jxh$ih zH~UquDUo0KWOg`(AXj35rRGN- xDKLn>g Afg=Cx$k`!-W`r~e|jTlT7nI6 za>J7E UrWFMVS%9B~|@5a~+s-6L3}AP1GB7fg{;e%9C+7TNIlTg}db zx9&%}pt`pRrFT!9#aXc1V$puxXD?Tj
K3D@lIXAt@s2Qv#dkE #w_~&2Ay@l5s-3DZFIF11;%< zVaEvld>j=JrEZt?E8BYErP=a=-8!_6EQKpy7LS$_d!poTcyR@WRYSVXzP}5>CZuZ$ zO{I*an!X&`dKprStz$TFthG9g>f{f@a4UDe%rc!o;76aM9f<7^A5qH_Z}sEtCL}Dz zb>eq_^x3odS}C`-`=uuhV^E3ef~rmSy?R+RDrF=QO{>O5=io g#YXjgrK1u-p>s0H6uY$i)9VEp|m zgczwV2!?`SfA65EvrqH@4;ATwvLkKVaTqG9M7ty9fn8x F(^q)u_+rs7mOcYF6??@c~##eTJ) {D zE0x{k|IAh%ml|uuHrL|E0z-QTn@zE}qNCeuxVIbEi(V=pk=bMdoQ#K2L$K4;kvi`k z^DelfkdfC}N?BK9`n}plg+kNU5uORT#*74=u@=V<$F&;Z9
L`FwBYxgK%l(5qUKsse8XkA5a{Gby?A|ct{Pma_N@0 zUTmW( qP+@AA1&q!Xs|qOACU;wMF_2!=cN_{4>$5=h05MkqWjCvt~tRk z`XL5*^A0I3cEe6DSJ0x7L`KtRFx<=SrE(8)3!*eHkLh8fv>Z5|>SN-g?CHDJ%XA_h zp63VHzlpG^7QC &s5bXx0xc`-vJ4Vx$+Y;u1{;P%5HP{Ou+rhctO`VMm*4>>`#u zWZ7Oe=0PSwnjWqeLp2Mxp3Mh4lU|Rk>n+RqPRIm_g~!Su-xd7AaD}t)xk@+ AJ($mk3D0znn3!a{Op!7O(9J>?Eh7oU2wLJHJoJ)a9vV z6sY>B*1UCtQW39SxN$|65e9i6U^1>v|JD*1@h{lPjg(9*zlk#1k8AQMZh=i@Yb+ZJ z5%#blCxyrILj^Y^+r`mH(Dd0gFxqV6Fz3V(y-SlK2&A4WI^G4nAYr3bbq#Y4R37An zq_%w`Ku0^~S3TnC{-8Y^3By4xfJPGOkn0K!lXq@-J0pHYim{kBKeiQm5UE&ng-6XC z5FCy}l(oyWG$tTj{vnscm>d>rQ+ThB{K%0Dd9zDaDQ1P UCR%zr(7=#@zgY^N<_mRerJ6q zVZBPR v|JHQUpHx)0@`e39$5{;3?0lNaTPEYmz~Vz3UWsK%B+hr1MsJ9 zRGXmAsz49w)BH!8v;q8q;k77z2rNge&&Vze h#dT0Pk6B>bJzi;5 &Skyy486|^``J70aC zcFkK3b+J0& ytEI(lYbD?P7A z{YKM=;Coi_9DfwoUn4SCUnW;F*R+UeC{`45p+_4Ku=#l36pZd2e@7?D>;;CXbt=a1 zkowwS-zBO(N*&3%#zj5p2ns|}NNm^DJ)4-8_3o~)mtr9s_=~gcq7jxogRr(!2#=IF z;wpBQikM*S4wAS6ObEHZNHlgL90g&BZjPWNG{Ta!pY+@Mj|)R0D_ZtlNrLuow9&d) zZ2H{?xJC#l`>015PcU@C-x#=OXwD7S>aOA=(Ln0uvm8()PK4HKB|p^Iw_1syzUN6t zwE0$Mgn<4Fe@xWsE`dyp45ElBmz!y%hJae7vCb^$NuaF1E{d&_*~X9e?CF@e1{)7L z5_9XkPj~~S8$Yp&SXKITa6|8N;{^W{`n4B9VX0smz 9F2QpSU3 z3)gwa-d$5-ih{{o3dwn!1dA9Qlc(%YmEdnvQ(214>n5K%QtQ)odHh$GKPb3#FOfRq zmA*l9R<64>&x(CYjut4%)9@zT0yx zbf?@W+xo7tEi hu{JSVSkij_6jR`%Hk&&dk8yCWjOf7xbvN zN9|3^$pPeF-T^HLJ4-i (1 zI$*0%9vJ@NIsd2ECNlsnwWEJIAo@?Y6$XQ^|9@CCvE-HenKyY}!1|Nh$vSn^I6Y4; z2Uy)d4@mbIxmdOkVLpiy&FtfCmdd36L8z)>?Xvz{u+zVf_7;8Rptz6;6*)dW{ta*+ zQ#La*Q|1z9w^dag(Cha6Kbj2Qd~}T%E4bq;UuOMu?eEM!h)p%+Vc(j6q>745owIw@ zXVdgtu{2XS(=0&HvdNdnE7exqQ=h9uLp6M6^!ZzD_SMXs7N-`mvt51ik(Ok!!&$N4 zFV1aJ?=vjtY_Keo+NZXR@27UYGU&--FA{T-WAwW1Mj5S_k|TF^vALh}C_c(^!-3tb zE&q$fH=Fk8qn)3Rvo0!}_yi1p)XB1N&l`_wR;d;$DNIk9XF0YPl_gdj3%>J7<$Nwl zv-L}IZ&P<%_>tc!mzVjDN!3dhK52j7y4Nnalu@4=n}m%sd>?s)P>DDxKOci~?$7?x z`IN$8+ZJn3uGeLCE&fhB^(zZka^u?^1)m2gb6;#k4nvdFkelr$TqoXb`+0Gw*VM!Dx&}U*aL+~h@z+2jSR4v*`nq772=O*?Op2~Y8~&Dt*eW} z0J}}}_B+QF(f5l9kCs#S^3OG+c1K1Tw!MrrWSjjf;#jm@hTOU=m&Mf?&5_@=8@1FY z=(dYp2TNV(VSB^LmDb}g7>mqSt8b2P34?lTrMm~?Tn--iU+bMMG!JSa*r{#6_8jMH zOWOS$!i%Q;MywwTJurCWNFu#OM)}8ZHU!ItWUS8{W%G(KetdDUqTmTsKiyJh!CeTf zmmN>FTmE9zKO|gfs^D7m4s$AsB{6!_ZlWS^(C;*Xg)qD48yT`CBePH^cxhBoe%-*T zkH(&|V%erp17p37M7c=rKK~~z7WJ+SSHB37K1Nb)PWF|Sleq7ru`W@r6=2R;PIxug zC9UtstIl1g1Cx-_+u;4|qz+3W8(k?MJC(9NyJFqr_y)V|04&A)ySW!NWyUf+B&^g> zemL>pq4WP(i5>a}2MSoi%Q`6q&=*I){rgu=J|{hy05chg4-f2*SB*_jyPl5NCfC0% zP9zM7Gai-h&XhtZOGZCc<;anuzW1SZpHXWS%JJOyX$Hrg59zU<9z6<~0yVjkyMY5p zF|BN{ysnWQ@2j*HN*oSZr$kmpGahoaz}kXaSR86PYlY@&)TT}o)!PL*Qd%S4k^yfK z>Rx$8P@G Lfn3;pDMsPdd8 zM;^B)&7(qpiH#iJ43PZnx1x-iNyFoLMv~^mz@FIY%@> )yL^Sa@HoJLU7g7>9_(y6-oZ{%&wuDFv@-o>bqsS& zBi_`EzXgG4BLI8Ex|9gLUpy!eef)F|gA}^#-nPH+Y`ohFkM-`7bN#Kj>g{!(>{EfP z#-`EynijF{nO3im{h9aL*$$RB^{ZF=P?bqXK6;F)hP^@C{N0;(6dB9fPjP*U+r% innM*j;@i9;q;k{eWgPm9i3?HMplHD^ZeWQo~o| zE_x_K(zuo_78%p~nzmmKxz+$YhEI4Gh7B=UNmKP3n;|S4J+-mb9!<5k=e$0_@n20! z?N$(*rKrS#^3b8t >fbUw3TGG@RcG(s>A0^gh)>^3tH+}W)=Ry}+9 zsdXBwi^(|ZZsl4jc@(|bQ0%5_CnGOZYTjqfI)Q1EgUMbeo+scpyhfPj^u1TU-0ZYa z2dz-9UxzuW8`!YVc5mue;b5h50{%3{A+u{I>CzDwo|oH{0qVE5vQ>})6^Fk?EJ9OJ zDJE1D)qh5rZuRmDNYR>6PdE-18FGF0h>-Z{=WxFmr^eg1Y2&=UJh}Xp5u-*UBWt7E zP28`LGx?m0S8hGnty0@FAvsWkLQr1ZcIs_C>RQ=!E>=+z4}E5z_FGdSP|UfomRwtr z5Za&oTYIfTtM_{yuMb^W>J4@RIX;=0-NZD+=-qFm@ti5st9z~#dt4a(9dGxuAb$Cv zQjA-4> J3+{^X0e*~-e#VIIFh9U(GuDlQ7uH$-}HivWk8pMRWCA6|V? z8$=>cFP)iU#c_<@@`Wun-O;1p10S96h=Z4}{!ET~n5b(=;j8u8(Ec#(Ma-?#14SjH zz>z^KvpXi^M#9HFNboKM6V i?@bOg(UDiqp zJ6XB2cYEK7hV!F7TjOtUA} g~A^g~^LV@$wtbJO#Fl=xF`?4IbBT@uEFZRh2K6F_;aT-iuDy#1pfq z87&YkSZ?$QTD8K7=!BO-M@q+3oVL#)#LRj + z&lN~YH>SaxwctmGZiF5ViG1b5#)O0m^!XgaivMV|{+8bnc2QteR*PuH`^A^KB*dcj zEM_d1aK)hZ?Fz2@B5_vzW$h}fC4=SiUT+*fp%2;$LK?cB;H|gX bD4t}6x6PFQP7t&pMUn9J%jML+f@@leR?;IZ0Y_*b>5SAmv;Q93KeMpYEFUa zSeH++dax4nhRmf@Xt5NL58+>oPuz}s;Z^HZyD7VYTJK!oI-bkYa9K{9xrCgs@3ldl zn>6Kf-$w&qDeo1b^bX%Iz1{`3t?Z9jwEPBdgu0#KsQhdc9*fE7FG@L!aTCO8o^-St zn-tRk;AGiLjSe3X%redMT#rp2jWWHP%*J$WbF0xGz@lM8xd&FR;NlbIqXzA%lsVs! z+ODPq3&h xCGa|AK@>!ogZkeR3(dld;sn<0zK{Z@w}% z&M18*$J-w?BNU`_9QcYM2uTFiP?XmRgU8WKr$*IGg-mA^$JFNwQwu2C(#U@~O;*%S zIW)nFJWrwV{TIYa*cocCq|WN>1KO4E`0Z;#BITcPpF8`uXP>7+U6XO6Faj`z+<;vr zk+JctL~k$tQ3(IzdIgIGu$4+R73#d7_b-c~sjG%S_!SjtJVe$CfWs-Hu%Sfx;nJ1? zKFcLpugbAD<(}JCVDw6hr(-@K%^Yd1?ZmY^E aS`V4EG)iM&o3)!x zf4n^?XVQEQ@|JHnTk47#*2D9m6{V!I5k3prPKD;XzD^&=tjn6Xc(pMj+&N$UdrMTU z2;ykAq%3;Y-GQ-=iRGjW-XrFkI)MAYG@bcByX+)hnf!m95_Ao@f%3{{>3yfhANE>xo{u+=Wb@5eb&PZcD&MkAy0?Up+O}A3^w6I*(h1%4 z70AMx8AnT^9VNWL#j5rJsqyy5@9##TNij#w=Q9rHiIj`HdJ{@);{$#Ua|_2b E)pYyk5!89(LsVTt>WdBP40%S010oJSid2#2M4*(c>R#I?m`` zJ&M{5eU9PZX@&-?beo#OWG8j-r(<_lxOvc-s&vOA1YQrEuDZCvLIJ$u0xvRtjL_lt z<_^r&s}_m<{sN;o=`Z&FPP<|R|J3AfC<5N -}BA2)y5MH8e)+zk rPA)_wu2`dN4ff@mCT=SE`Qdf}b2GcEDVozSLJ zBvOOgKlf_^p?ay2#p;jxkFf7GiK6s#7rTLdMyS%t-(8N0@Kq)XY_(b`JlKBaGt}7# zsmIn=Lu<62{~qTM|6pX~l@3U4d>5exKjB?Ze*b_!u(PwXw>yrJo`;7gm^BukkjTw? z;T0--$nSPs(Vz=w(so}O=A0h)%{QqkZwHFqNVqP38FdjDd+tXYfQle2Y|Rg2)VA*6 zemy84(ooPfVKJa~W=c$};?l!8*!eu8Q7xyRzO9ZZIiV1(d>&51%m{Nm9@l&UYx!z_ zct|@C9(?C2Y-o#>s8s{C#flPLC(V-MB_J6@G4j2^-3 n5L0s;6}myEch_#Khr6MAt9v8faVg=?!)=gD1jdrGIN54i*Lh<9bCtM; zD9Ue9Wo+dTq>?VaS7WnGCwR5IfY6&@2OfF>Za|~!@tRAyjuN2&3VS%=@x*|GNmt7R z{`sAIf#K}*xn7?w__Pts ?PF06 zQXM9S=T5fl{YCV?NB2!zxAx{Uc?!I6!QejgI2E72w&$Jj=s?a+La$HbjnD_%$0RFs z$n3d_)ukt(%!6r?fkV!`(n)61K0Q|6iy3 ^b67s68g) zYZ4H+aqj|o(U(}9WAUM@1UgsTI7kD_YmXbM=`ddEndtTBGyNp~$}&}pO ePWq&!LenIuP5aWYu zmCO?<0nr6*oh)!(vLV2vWm@(_Wxvu 4tQMrHj$hME z;YyCkRDi>I8?$HCk`RR)dP9Pknpj6nX8U)2^E#1xtgWzfYlCDeClX^fiG``cPL#*I zES@RebZbjb7qs8*THm>w^kkK1MHjr4lBbdH!%ZX>e^1Uw^3$*0iL*&l>L4w7;i8_w z%oH6{09-X;24N-fYcPA`J3`V=#^uV4z=)!QkBajc9mpSp#tgOky?)VDc}>*1#-~X} zdZk}Zp(ops8?@U`E2o21f78i*NP{7^GPV_WK}f5`0cq6!w(4qP6D?vW&sUkk!ulQr zx_%KYZfrWp>AxJ$&3hZl18urGnfx+(aEbGe#bhmiKTSpOZoWOVHSFCfE`5l>dK9~# zYc+)c=%}t5Qf=N4eA&)!+#J#_Ltg{=>{EHu`VTrt3 8Zl9OI}fEtX_e<=HZ6=dZ)^283doz%cI1C z?eR}4A+H?Ro!ab|)Fyh$)D@tkS)2CRoJ)iC+euTiC_&{o(0!4GUg`CrKa`d>S1~AD zLm8fu{&2$ob*j(rU=~7g)7-~`_Mz@}ej)D8XK%xr?dn=l+hanN=6m;SHHwQ70|~lY zE8JgU9?1)%mgsL!M|rrXm Q_vi0Wxrcrvr#Pn1>=2g;FE`lfJ5_;)ui {kDd5&H=(Qf$QjX4LQ=%G>al{|OJ8&P}!g%o`yS#{UhgSF#RXD|m z4+-gy#%+ejy8uo|D6wUd%Vk%Glm3(AX5|3dz$&6^Hivt_uL4g`Iz@+_IT0^|PHbdh zsL)Tkrb&w%?PWSuWKBkP@mlaOTg!30+@)I|N9uPWt?SB9j^ySQ`^6 #r`)uqY8`m)(3sU=O?U&LSheg3^Xdp-Fb(7o)n=CsWh^xF`QQ zDX%f~4Z=dTNpq)#zte!W$;Lr~s3&6h%tv#lcN`4YgT!nGE^K02Y6(U~vwVU m#I-?cEkI|1|pNAucDy(Ih4JxW5(+(=73Q;%1ROKpb z5&h|N8;fusFs|_bm+Jy;fgwE->(U7enPp!WT^5rr3WIv|Tcc67!kh-PVL!LNjJ+=m zFkd~Utk-5vl1?+V8nrKPGE>Cp-d~*#*N`4?kK9DZpDyWmF=I~`pUSIfi 7Sx=D AzH}zM!a{}HMsLNF8w?l?sd#(y{rKHV-F0-c7T(3m3@Eoe zIB%!G)T3-pZG2|Fus}a(CH-1LWZikaM+MF?V;%p9i5y =vRBjI?UBgPM3K?A67Ej La03)>jcqfrN2y~5x=Z{#C4v}OYf zkvOqe70051gs!G=p@IyQ@Ev06obq|p?A=3nvm+8sMJhKM(#*@swn;XoyO%KDH&}lb zN7m4$)uc~W gIE$6ptENTbZZ){nxPF8dO#Hk(?qR>E4t)c Z zbKK}FBpe2jR-Zo&!|L%BTxCb@Rw)oO1li=aU<8n);UG9cuhdZ_N*OXqZMO#M4bbny zhP0D$WQY?^(}?CH-k<#ODWkKoDx(Nvvg5&Sf0!j;KIoFfs{EZ6%BH2#hjT6d6^wV2 zh2VuIvC`j5&Hh^+%lkkylSfvFJK;~-0PFQY;F6 #<0`#h a z);G>cP~&~s-do2WYvaxiFWNvq5}YqMJ{rxc0Wle~vgGW;H{J`bmtG;`hZn;-y>JnH z#g7cy2)ro!C 8w^swR8W(J}PcMdj#B z$c6pjG<}{Y=Jk%aFHyD(Y*YE$&REmQPIDOMwAPcpWD=LTN&|L%XYFoKjeaXCV%JB!4%toKfw zZueMFC$bHv!?KIL6sljNu`~@i>&*S=2lH0jet7J$-SHkc8)Ymeq>-Nsj6+`@%A^Ma z^_B29Dx26Pu(O!XWqu{=4C-#B6+z4lo*^ctzR3spNH+yii8g4?p6v>NYq!52(|nOj zZrH)Sq~G`&vr;23)+uxD@fG?ePy6?Cxy=;yS6xzfeV&%tLnyg&=d_~_nUS%A@OApI z46KPlmw0yd=cpx>H(Mqvg6b%w^6}36(u|@NVkFV>q i9VZS#J7y4tG9MRhwlR)uQWWIiGiiTBzxVO73D@qIT4eaW~76 z=QhH-hrYXseI|{v$6lqJx-UEZCu*4{N=!4h)C8IH{sxZbi(-V7`7iEI8t*l3%SEn^ z42%omf0-JI)h#xqa~s?AXyYq1(3ow8Cb(D~`)%D`ej>2*Zv8Sqvv@qZ$r0q2uv})# z;?YCO`=W$rFw6BW+4(ZuMB!^9@3_J~kF=x?_1LC3DBU!Z=`yr8yD{98yZzbu0s^py z3PB1TP><3|*Aqrw%h7@78gO$LH~&}q1>v&2kD&eMg8rp(H))r9Z)me{l 3g)V8StV~}5;X73C4CVU!_;Ix!k}#n+gvbZ @KO>~_mVR9-N!sf)-X-{0uGfO6fWd+uDYw^kw$wj_U+t;0K z8fljL(87?F<5m;z3wdlhJ`T7zNIV0u!XZ*?<1TnJHN(|0gc0h~P4|x7IpdUJV=IUp zF lbVlcKPyg*S!UIEG?@>fcr#+DiTybUqrEMtG}Z|F1> z@w>GM;8yOVkzq~@f3b1oYZsybhk8kiRhff~#}+0(^}}!~$xLqf+ZS2H9c{bYhfd5S z5v1_~MRJkp@CkKL1s*OIF=bcQt|DSq#RECGh1c)5$l^GHQ!Q&ovN~H|DfIqgYfVq~ zjX<&8!HXHa27dWfVBEF#j7k+_yR9pef*-HszpP_?%U9`@wEf*kAVS{HI>zb>bl0Z zDR#0)JRWrc>uUMOB%`rv(yj o0G{Y;yUophi#x1M9qL7&kx zD%lAtkaTlKd1zf2VH>5HG5;mxoO7?K3>G;!;EOiDg;>CiB~A#ic-RdDACAB9|BUpj zFJ{wS?}lJ@Lf4+pk#S&CkY^U?1p3H?wVdM#n=S@D)k*Pg0dWDrlg|owh!fL`s(l4~ zqkP2dDFev^YF;cXl$t0=0m6e#TkY`hf5Cc`8PcxYS-UEdB~)G^UhLtTbEyJ*WZT=F zMQeBtheeD`*jsz`;y1e9(wezu@-_GPc7!1&B2x!tv6vxsJweacZIf5p3kl2J7;&VD z^9f^2qRH_8V`?SB?*d&FgU=eTNdX` &ew(#j#_^=M6~>hw(NYm+}$NZhSF z^hSk$bN$$Wi;lw(&c`6k$7%OX=ZFt!ppPn;sz~vbErS)Li0+=veN$ffwfmPg4 bt}j83cgRk%<+5DykjG{(?1~9@mlw)!?a_um zWT9mQ2m*kgv7E{v8LFG2F7IW9l-Z+xd2pqB0s)uYJ!!8VWa-vnICs8*;^l(Uf4|Y{ zSd~qLF`6O;x`O3)=VsuS=+p1t7~$CiG;gQyPm!wMzA27c8kuml;X}>FQpCQc%$H~3 z*oM5WQ>m}5wCugvm|O;jY0n2pbuz&C(K3F<5q79t&mDLgOl28N5naB$zJe8C|L`2+ zE~-J59it+Nj*%XBIZ=_5t(-$S6%lRl*sOyonsb$##jyG<@rN#ZqgITL7^CT}#a7g# z0wYIJd-o5WOdh(dMEVlPUh)&C0c&f4!C~L4AZOHg_U`e3KVa3<_MP5lz)0hByuVf7 ztRNIF zbA#_i**=2NBk0&jx2o+Fm&-6KZouDgDV?gGFG?Sf%B+X$2v!%ZdVIW7U3FfoqH^J} zDv;yzg5w+KT2Jt3h6X4A^{B*X(^p`{2SNkqNF)%R5P`;;E=y=}_+~2^@4)zqCc2pj zHJAMJ_Q+Gnq(RW#TR54Vs=;Q+JQ!=|Usm+o+})po>>FyE49^FJ$c9P%X_G{5M)ZF( zj<8yN&m8axA#`OH$p>Z;`h`#yEInmx$ZaJG4#VoKdoWlOZ}%fh_#pJ@_V{Qbpa%*h z9_? fKP|#X;E^c*BopIG{qxn!;5Nh83X!Q)7@5G)#c^%IvcHkp61zm$Pu`O9 zJZ4)B-ZnEKoj%!$xRy{F9BFK(eTRf_x$WQ~pGNeJr60;T{R)oWuvKtW-Bi?!sQ z6=Uwy4b{~mr6aZJ{)R~Vn_~VN37-|{ak}fyzUxUl{4|4iBl+W9@g90HEpu}&BsFkp zGkFBCIP88ZDo`mpuqI&3U=(*?zVmU5E8X7*|I^$$vY+0|7+qFv|Fai%TH8Aptv+nR z?M9U)<#RkD6V|1xx2A2+`6Pti1fGfd#2hCIL& V1~&V-VS(22!TglQ^2ifPGgr~c*O$@GsGR?^VW+;`OvB}!`K_p$cHdJUr$uj4 z{FTbuRCjr8f7^TX>}I#^aZ3aMGsd$gBMBRzy!|kgz2P2*URyu&7y1!bDd98|~2f1$gj3WmN(SXWv{EK1A5-EZ^*6Ijl;ssgb_E?A=grfUlP zL*N3`tR!_bbS7D{%O7$V1Ag%_uO#-vaX?*S+2Q$zXOM0>-m5x4V5gp!Vb~GoW}s`F zF7+Nji52r&Wtf{OT$3jN|HvYY0r!M6U-e}H5}O)etJ%T>!mctZ)B%0Z0pDebnKdu| zS`OPTMT8Yhw;8TyoChE9t&;Ogk~IEwav(iyTnw_~^ibea@wP?kzb@B57r`ok)bWQt zH{E|s$3I%sw}e@Qt)2g??~}gN4PujGUX7pt$*6_>;{ET``_Dx*2=M1Lf+GU1mHsX8 z{0`Z*BHkpFBLH&E+}6?ZXZrp-4K2{oz5mH 5OCbS7OVhDn?ML`;Bo&s2RC;N*8fyaC0T$LGl3bF^a8Ng$HYC- zs_VKdx@Z=93>+z7Wi$df^&&PpS|a>^N-_~DQIrr09L1_AB^AtO(xm6PH7#!iA{XQ9 zW4Tff5(f;??K!a;SoK(YGz$w0k^JU+OZ|i-B=q^JnGh|h#GxtP>wBz3OWeN9dBAT2 zX^^ JUnHPKQ*`WxDA{`rr@>Jf(*Bd{ePxf+*u=3_zZ$F-R zps(EP_?~*Lvq~&ohK2SL$TY7vA(;Y@$oqxm{%cJ_y?5E(=$=UCYpob?j~+ ^PiC^*~ vrpeqL*I$`^nFy2L>{X!|paY@`xVUq#N9e`PcvFfSz(-zMMXF5FEb#vTOrO4M literal 0 HcmV?d00001