From 4594245de7c94e423a04de343d907f630c83d6fc Mon Sep 17 00:00:00 2001
From: Paolo Matarazzo <74918781+paolomatarazzo@users.noreply.github.com>
Date: Mon, 8 Apr 2024 13:28:24 -0400
Subject: [PATCH] Update Windows 11 Security Book title and add section on
mission-critical application safeguards
---
windows/security/book/hardware-security.md | 104 ++++++++++++++-------
windows/security/book/image.png | Bin 0 -> 74870 bytes
windows/security/book/image1.png | Bin 0 -> 276757 bytes
windows/security/book/image2.png | Bin 0 -> 242270 bytes
windows/security/book/index.md | 11 ++-
windows/security/book/toc.yml | 2 +-
6 files changed, 82 insertions(+), 35 deletions(-)
create mode 100644 windows/security/book/image.png
create mode 100644 windows/security/book/image1.png
create mode 100644 windows/security/book/image2.png
diff --git a/windows/security/book/hardware-security.md b/windows/security/book/hardware-security.md
index 6ca00fd04f..2b8ed45ef5 100644
--- a/windows/security/book/hardware-security.md
+++ b/windows/security/book/hardware-security.md
@@ -7,36 +7,23 @@ ms.date: 03/12/2024
# Hardware security
-Today's ever-evolving threats require strong alignment between hardware and software
-technologies to keep users, data, and devices protected. The operating system alone cannot
-defend against the wide range of tools and techniques cybercriminals use to compromise a
-computer. Once they gain a foothold, intruders can be difficult to detect as they engage in
-multiple nefarious activities ranging from stealing important data and credentials to implanting
-malware into low-level device firmware. Once malware is installed in firmware, it becomes
-difficult to identify and remove.
-These new threats call for computing hardware that is secure down to the very core, including
-the hardware chips and processors that store sensitive business information. With hardware-based protection, we can enable strong mitigation against entire classes of vulnerabilities that
-are difficult to thwart with software alone. Hardware-based protection can also improve the
-system's overall security without measurably slowing performance, compared to implementing
-the same capability in software.
-With Windows 11, Microsoft has raised the hardware security bar to design the most
-secure version of Windows ever from chip to cloud. We have carefully chosen the hardware
-requirements and default security features based on threat intelligence, global regulatory
-requirements, and our own Microsoft Security team's expertise. We have worked with our chip
-and device manufacturing partners to integrate advanced security capabilities across software,
-firmware, and hardware.
-Through a powerful combination of hardware root-of-trust and silicon-assisted security,
-Windows 11 delivers built-in hardware protection out of the box.
+
+
+Today's ever-evolving threats require strong alignment between hardware and software technologies to keep users, data, and devices protected. The operating system alone cannot defend against the wide range of tools and techniques cybercriminals use to compromise a computer. Once they gain a foothold, intruders can be difficult to detect as they engage in multiple nefarious activities ranging from stealing important data and credentials to implanting malware into low-level device firmware. Once malware is installed in firmware, it becomes difficult to identify and remove. These new threats call for computing hardware that is secure down to the very core, including the hardware chips and processors that store sensitive business information. With hardware-based protection, we can enable strong mitigation against entire classes of vulnerabilities that are difficult to thwart with software alone. Hardware-based protection can also improve the system's overall security without measurably slowing performance, compared to implementing the same capability in software.
+
+With Windows 11, Microsoft has raised the hardware security bar to design the most secure version of Windows ever from chip to cloud. We have carefully chosen the hardware requirements and default security features based on threat intelligence, global regulatory requirements, and our own Microsoft Security team's expertise. We have worked with our chip and device manufacturing partners to integrate advanced security capabilities across software, firmware, and hardware. Through a powerful combination of hardware root-of-trust and silicon-assisted security, Windows 11 delivers built-in hardware protection out of the box.
## Hardware root-of-trust
### Trusted Platform Module (TPM)
-TPMs provide security and privacy benefits for system hardware, platform owners, and users. Windows Hello, BitLocker, Windows Defender System Guard, and other Windows features rely on the TPM for capabilities such as key generation, secure storage, encryption, boot integrity measurements, and attestation. The 2.0 version of the specification includes support for newer algorithms, which can improve driver signing and key generation performance.
Starting with Windows 10, Microsoft's hardware certification requires all new Windows PCs to include TPM 2.0 built in and enabled by default. With Windows 11, both new and upgraded devices must have TPM 2.0.
+Trusted Platform Module (TPM) technology is designed to provide hardware-based, security-related functions. TPMs provide security and privacy benefits for system hardware, platform owners, and users. Windows Hello, BitLocker, System Guard (previously called Windows Defender System Guard), and other Windows features rely on the TPM for capabilities such as key generation, secure storage, encryption, boot integrity measurements, and attestation. These capabilities in turn help organizations strengthen the protection of their identities and data. The 2.0 version of TPM includes support for newer algorithms, which provides improvements like support for stronger cryptography. To upgrade to Windows 11, existing Windows 10 devices much meet minimum system requirements for CPU, RAM, storage, firmware, TPM, and more. All new Windows 11 devices come with TPM 2.0 built in. With Windows 11, both new and upgraded devices must have TPM 2.0. The requirement strengthens the security posture across all Windows 11 devices and helps ensure that these devices can benefit from future security capabilities that depend on a hardware root-of-trust.
Learn more:
-- [Trusted Platform Module (TPM)](/windows/security/hardware-security/tpm/trusted-platform-module-overview)
+- Windows 11 TPM specifications
+- Enabling TPM 2.0 on your PC
+- Trusted Platform Module technology overview
### [Windows Defender System Guard](/windows/security/hardware-security/how-hardware-based-root-of-trust-helps-protect-windows)
@@ -44,20 +31,71 @@ In Secured-core PCs, Windows Defender System Guard Secure Launch protects bootup
### [Microsoft Pluton](/windows/security/hardware-security/pluton/microsoft-pluton-security-processor)
-Microsoft Pluton security processors are designed by Microsoft in partnership with silicon partners. Pluton enhances the protection of Windows devices with a hardware root-of-trust that provides additional protection for cryptographic keys and other secrets. Pluton is designed to reduce the attack surface as it integrates the security chip directly into the processor. It can be used with a discreet TPM 2.0, or as a standalone security processor. When root of trust is located on a separate, discrete chip on the motherboard, the communication path between the root-of-trust and the CPU can be vulnerable to physical attack. Pluton supports the TPM 2.0 industry standard, allowing customers to immediately benefit from the enhanced security in Windows features that rely on TPMs including BitLocker, Windows Hello, and Windows Defender System Guard.
In addition to providing root-of trust, Pluton also supports other security functionality beyond what is possible with the TPM 2.0 specification, and this extensibility allows for additional Pluton firmware and OS features to be delivered over time via Windows Update. Pluton-enabled Windows 11 devices are available and the selection of options with Pluton is growing.
+The Microsoft Pluton security processor is the result of Microsoft's close partnership with silicon partners. Pluton enhances the protection of Windows 11 devices, including Secured-core PCs, with a hardware security processor that provides additional protection for cryptographic keys and other secrets. Pluton is designed to reduce the attack surface by integrating the security chip directly into the processor. It can be used as a TPM 2.0 or as a standalone security processor. When a security processor is located on a separate, discrete chip on the motherboard, the communication path between the hardware root-of-trust and the CPU can be vulnerable to physical attack. Embedding Pluton into the CPU makes it harder to exploit the communication path.
+
+Pluton supports the TPM 2.0 industry standard, allowing customers to immediately benefit from enhanced security for Windows features that rely on TPMs, including BitLocker, Windows Hello, and System Guard. Pluton can also support other security functionality beyond what is possible with the TPM 2.0 specification. This extensibility allows for additional Pluton firmware and OS features to be delivered over time via Windows Update.
+
+As with other TPMs, credentials, encryption keys, and other sensitive information cannot be easily extracted from Pluton even if an attacker has installed malware or has complete physical possession of the PC. Storing sensitive data like encryption keys securely within the Pluton processor, which is isolated from the rest of the system, helps ensure that attackers cannot access sensitive data—even if attackers use emerging techniques like speculative execution.
+
+Pluton also solves the major security challenge of keeping its own security processor firmware up to date across the entire PC ecosystem. Today customers receive updates to their security firmware from a variety of different sources, which may make it difficult for customers to get alerts about security updates, keeping systems in a vulnerable state. Pluton provides a flexible, updateable platform for its firmware that implements end-to-end security functionality authored, maintained, and updated by Microsoft. Pluton is integrated with the Windows Update service, benefiting from over a decade of operational experience in reliably delivering updates across over a billion endpoint systems. Microsoft Pluton is available with select new Windows PCs.
+
+Learn more:
+
+- Meet the Microsoft Pluton processor - The security chip designed for the future of Windows PCs
+- Microsoft Pluton security processor
## Silicon assisted security
-| Feature name | Description |
-|:---|:---|
-| **[Virtualization-based security (VBS)](/windows-hardware/design/device-experiences/oem-vbs)** | In addition to a modern hardware root-of-trust, there are numerous other capabilities in the latest chips that harden the operating system against threats, such as by protecting the boot process, safeguarding the integrity of memory, isolating security sensitive compute logic, and more. Two examples include Virtualization-based security (VBS) and Hypervisor-protected code integrity (HVCI). Virtualization-based security (VBS), also known as core isolation, is a critical building block in a secure system. VBS uses hardware virtualization features to host a secure kernel separated from the operating system. This means that even if the operating system is compromised, the secure kernel remains protected.
Starting with Windows 10, all new devices are required to ship with firmware support for VBS and HCVI enabled by default in the BIOS. Customers can then enable the OS support in Windows.
With new installs of Windows 11, OS support for VBS and HVCI is turned on by default for all devices that meet prerequisites. |
-| **[Hypervisor-protected Code Integrity (HVCI)](/windows/security/hardware-security/enable-virtualization-based-protection-of-code-integrity)** | Hypervisor-protected code integrity (HVCI), also called memory integrity, uses VBS to run Kernel Mode Code Integrity (KMCI) inside the secure VBS environment instead of the main Windows kernel. This helps to prevent attacks that attempt to modify kernel mode code, such as drivers. The KMCI role is to check that all kernel code is properly signed and hasn't been tampered with before it is allowed to run. HVCI helps to ensure that only validated code can be executed in kernel-mode.
Starting with Windows 10, all new devices are required to ship with firmware support for VBS and HCVI enabled by default in the BIOS. Customers can then enable the OS support in Windows.
With new installs of Windows 11, OS support for VBS and HVCI is turned on by default for all devices that meet prerequisites. |
-| **[Hardware-enforced stack protection](https://techcommunity.microsoft.com/t5/windows-os-platform-blog/understanding-hardware-enforced-stack-protection/ba-p/1247815)** | Hardware-enforced stack protection integrates software and hardware for a modern defense against cyberthreats such as memory corruption and zero-day exploits. Based on Control-flow Enforcement Technology (CET) from Intel and AMD Shadow Stacks, hardware-enforced stack protection is designed to protect against exploit techniques that try to hijack return addresses on the stack. |
-| **[Kernel Direct Memory Access (DMA) protection](/windows/security/hardware-security/kernel-dma-protection-for-thunderbolt)** | Kernel DMA Protection protects against external peripherals from gaining unauthorized access to memory. Physical threats such as drive-by Direct Memory Access (DMA) attacks typically happen quickly while the system owner isn't present. PCIe hot plug devices such as Thunderbolt, USB4, and CFexpress allow users to attach new classes of external peripherals, including graphics cards or other PCI devices, to their PCs with the plug-and-play ease of USB. Because PCI hot plug ports are external and easily accessible, devices are susceptible to drive-by DMA attacks. |
+In addition to a modern hardware root-of-trust, there are numerous other capabilities in the latest chips that harden the operating system against threats by protecting the boot process, safeguarding the integrity of memory, isolating security-sensitive compute logic, and more.
+
+### Secured kernel
+
+To secure the kernel we have two key features: virtualization-based security (VBS) and hypervisor-protected code integrity (HVCI). All Windows 11 devices will support HVCI and most new devices will come with VBS and HVCI protection turned on by default.
+
+Virtualization-based security (VBS), also known as core isolation, is a critical building block in a secure system. VBS uses hardware virtualization features to host a secure kernel separated from the operating system. This means that even if the operating system is compromised, the secure kernel is still protected. The isolated VBS environment protects processes, such as security solutions and credential managers, from other processes running in memory. Even if malware gains access to the main OS kernel, the hypervisor and virtualization hardware help prevent the malware from executing unauthorized code or accessing platform secrets in the VBS environment. VBS
+implements virtual trust level 1 (VTL1), which has higher privilege than the virtual trust level 0 (VTL0) implemented in the main kernel.
+
+Since more privileged VTLs can enforce their own memory protections, higher VTLs can effectively protect areas of memory from lower VTLs. In practice, this allows a lower VTL to protect isolated memory regions by securing them with a higher VTL. For example, VTL0 could store a secret in VTL1, at which point only VTL1 could access it. Even if VTL0 is compromised, the secret would be safe.
+
+Learn more: Virtualization-based security (VBS)
+
+Hypervisor-protected code integrity (HVCI), also called memory integrity, uses VBS to run Kernel Mode Code Integrity (KMCI) inside the secure VBS environment instead of the main Windows kernel. This helps prevent attacks that attempt to modify kernel-mode code for things like drivers. The KMCI checks that all kernel code is properly signed and hasn't been tampered with before it is allowed to run. HVCI ensures that only validated code can be executed in kernel mode. The hypervisor leverages processor virtualization extensions to enforce memory protections that prevent kernel-mode software from executing code that has not been first validated by the code integrity subsystem. HVCI protects against common attacks like WannaCry that rely on the ability to inject malicious code into the kernel. HVCI can prevent injection of malicious kernel-mode code even when drivers and other kernel-mode software have bugs.
+
+All Windows 11 devices will support HVCI, and most new devices will come with VBS and HVCI protection turned on by default.
+Learn more: Enable memory integrity
+
+### Hardware-enforced stack protection
+
+Hardware-enforced stack protection integrates software and hardware for a modern defense against cyberthreats like memory corruption and zero-day exploits. Based on Control- flow Enforcement Technology (CET) from Intel and AMD Shadow Stacks, hardware-enforced stack protection is designed to protect against exploit techniques that try to hijack return addresses on the stack.
+
+Application code includes a program processing stack that hackers seek to corrupt or disrupt in a type of attack called stack smashing. When defenses like executable space protection began thwarting such attacks, hackers turned to new methods like return-oriented programming. Return-oriented programming, a form of advanced stack smashing, can bypass defenses, hijack the data stack, and ultimately force a device to perform harmful operations. To guard against these control-flow hijacking attacks, the Windows kernel creates a separate "shadow stack" for return addresses. Windows 11 extends stack protection capabilities to provide both user mode and kernel mode support.
+
+### Kernel Direct Memory Access (DMA) Protection
+
+Windows 11 also provides protection against physical threats such as drive-by Direct Memory Access (DMA) attacks. Peripheral Component Interconnect Express (PCIe) hot-pluggable devices such as Thunderbolt, USB4, and CFexpress allow users to attach new classes of external peripherals, including graphics cards or other PCI devices, to their PCs with the plug-and-play ease of USB. Because PCI hot-plug ports are external and easily accessible, PCs are susceptible to drive-by DMA attacks. Memory access protection (also known as Kernel DMA Protection) protects against these attacks by preventing external peripherals from gaining unauthorized access to memory. Drive-by DMA attacks typically happen quickly while the system owner isn't present. The attacks are performed using simple to moderate attacking tools created with affordable, offthe-shelf hardware and software that do not require the disassembly of the PC. For example, a PC owner might leave a device for a quick coffee break. Meanwhile, an
+attacker plugs an external tool into a port to steal information or inject code that gives the attacker remote control over the PCs, including the ability to bypass the lock screen. With memory access protection built in and enabled, Windows 11 is protected against physical attack wherever people work.
## Secured-core PC
-| Feature name | Description |
-|:---|:---|
-| **[Secured-core PC firmware protection](/windows-hardware/design/device-experiences/oem-highly-secure-11)** | Microsoft has worked with OEM partners to offer a special category of devices called Secured-core PCs. The devices ship with additional security measures enabled at the firmware layer, or device core, that underpins Windows. Secured-core PCs help prevent malware attacks and minimize firmware vulnerabilities by launching into a clean and trusted state at startup with a hardware-enforced root of trust. Virtualization-based security comes enabled by default. And with built-in hypervisor protected code integrity (HVCI) shielding system memory, Secured-core PCs ensure that all executables are signed by known and approved authorities only. Secured-core PCs also protect against physical threats such as drive-by Direct Memory Access (DMA) attacks. |
-| **[Secured-core configuration lock](/windows/client-management/config-lock)** | Secured-core configuration lock is a Secured-core PC (SCPC) feature that prevents users from making unwanted changes to security settings. With config lock, the OS monitors the registry keys that configure each feature and when it detects a drift, reverts to the IT-desired SCPC state in seconds. |
+The March 2021 Security Signals report found that more than 80% of enterprises have experienced at least one firmware attack in the past two years. For customers in data-sensitive industries like financial services, government, and healthcare, Microsoft has worked with OEM partners to offer a special category of devices called Secured-core PCs (SCPCs). The devices ship with additional security measures enabled at the firmware layer, or device core, that underpins Windows.
+
+Secured-core PCs help prevent malware attacks and minimize firmware vulnerabilities by launching into a clean and trusted state at startup with a hardware-enforced root-of-trust. Virtualization-based security comes enabled by default. With built-in hypervisor-protected code integrity (HVCI) shielding system memory, Secured-core PCs ensure that all kernel executable code is signed only by known and approved authorities. Secured-core PCs also protect against physical threats such as drive-by Direct Memory Access (DMA) attacks with kernel DMA protection.
+
+Secured-core PCs provide multiple layers of robust protection against hardware and firmware attacks. Sophisticated malware attacks may commonly attempt to install "bootkits" or "rootkits" on the system to evade detection and achieve persistence. This malicious software may run at the firmware level prior to Windows being loaded or during the Windows boot process itself, enabling the system to start with the highest level of privilege. Because critical subsystems in Windows leverage virtualization-based security, protecting the hypervisor becomes increasingly important. To ensure that no unauthorized firmware or software can start before the Windows bootloader, Windows PCs rely on the Unified Extensible Firmware Interface (UEFI) Secure Boot standard, a baseline security feature of all Windows 11 PCs. Secure Boot helps ensure that only authorized firmware and software with trusted digital signatures can execute. In addition, measurements of all boot components are securely stored in the TPM to help establish a non-repudiable audit log of the boot called the Static Root of Trust for Measurement (SRTM).
+
+Thousands of PC vendors produce numerous device models with diverse UEFI firmware components, which in turn creates an incredibly large number of SRTM signatures and measurements at bootup. Because these signatures and measurements are inherently trusted by Secure Boot, it can be challenging to constrain trust to only what is needed to boot on any specific device. Traditionally, blocklists and allowlists were the two main techniques used to constrain trust, and they continue to expand if devices rely only on SRTM measurements.
+
+In Secured-core PCs, System Guard Secure Launch protects bootup with a technology known as the Dynamic Root of Trust for Measurement (DRTM). With DRTM, the system initially follows the normal UEFI Secure Boot process. However, before launching, the system enters a hardware-controlled trusted state that forces the CPU(s) down a hardware-secured code path. If a malware rootkit or bootkit has bypassed UEFI Secure Boot and resides in memory, DRTM will prevent it from accessing secrets and critical code protected by the virtualization-based security environment. Firmware Attack Surface Reduction (FASR) technology can be used instead of DRTM on supported devices such as Microsoft Surface.
+
+System Management Mode (SMM) isolation is an execution mode in x86-based processors that runs at a higher effective privilege than the hypervisor. SMM complements the protections provided by DRTM by helping to reduce the attack surface. Relying on capabilities provided by silicon providers like Intel and AMD, SMM isolation enforces policies
+that implement restrictions such as preventing SMM code from accessing OS memory. The SMM isolation policy is included as part of the DRTM measurements that can be sent to a verifier like Microsoft Azure Remote Attestation.
+
+
+
+Learn more: Dynamic Root of Trust measure and SMM isolation
+
+## Secured-core configuration lock (config lock)
+
+In enterprise organizations, IT administrators enforce policies on their corporate devices to protect the OS and keep devices in a compliant state by preventing users from changing configurations and creating configuration drift. Configuration drift occurs when users with local admin rights change settings and put the device out of sync with security policies. Devices in a non-compliant state can be vulnerable until the next sync, when configuration is reset with the modern device management (MDM) solution. Secured-core configuration lock (config lock) is a Secured-core PC feature that prevents users from making unwanted changes to security settings. With config lock, the OS monitors the registry keys that are supported and reverts to the IT-desired SCPC state in seconds after detecting a drift.
+
+Learn more: Windows 11 with config lock
diff --git a/windows/security/book/image.png b/windows/security/book/image.png
new file mode 100644
index 0000000000000000000000000000000000000000..8f3f376b361af6b78d1bd75ec9c8c6faa7217a47
GIT binary patch
literal 74870
zcmd42^;4uv&?St!ySux)I}9>7gS)%CyUQ@Ry9_Rkd!vKf;537~4Gtgo-hID~{R?(~
z=%}c!C!(INtjs)lPIk;!Wm#kd0t7HHFl2c-DK#)KNF6XR@E|yt&u=uUtWiG)a5pts
z39!0pqT|mAl$E%WI2c%C65^`~^yeJjS?-$~7#PaXKOgW>r%H1$u#Yl%DRB*N!?QeS
z<0T;JXy5ql!^y>0>$t8-AWRs1Co&Mob8s=WxtacUXy%9n!-=Qp(k_8mwz#?PbMs+f
zh@fd*#LT=AwVB;TmGQ;UwZrMcs}Iv0f(RvQXxEwVpMl>}>YnxgpY1v)qO&yoyYTON
zMfwgz-2Xhf>#Pg^e`8UcW^rF8hSV>sbNGL~^yiQ}G~oCD+Kc|5hl6G=Vc_`vu`#3S
z%YWystYN9dkF7l=g2a7nQdl{m({p5O!0uB7i^3hl^PM*pmP0c#rn_S889PuJJXy
z&i^*^f`W6%$p1dPpHR5}&o1Ucp!b@fN5>^d>1Tj>!`r$NLwQGp`?bYfM@cLF46~Mz
z($*y<49Nr&J~stkb+qqQuom>ce!*N!&?OxR!peU-vUzRVffwTLolEtQxQiy{gy&Vh
z4C$8%LLJ15ylyVv9SjkQ
zmo&wo-r1e$5SB0;ujoA=j))(-WBxLtIC3D0aA#s(V!Mbx(ydcYA|mX|P2__-#77?g
zf0hz}MzLQ5;HG0R+fuNX_IW|3P{`Z?$5;p~zRgORt%6~ERj7pl-+k+(OmzTF53eOq
zC+EpOzQ3HyDX5GVY`^XOj$eSH%9c?cep3-mOhxkmw>Y(H}tsTezYI%7G9Sekon=
z%Pe+n7>zC01>lKEQQ<05m=f{#^s}C`viqZ7=w}>SLk1s^EC>CBuHU^>AsvoVF^aOf
z>>^+l_Mq*3yK&TCX>BH);tJh~%TnnHU5Yarcscaaaw!(KmJp366$BgV$~?J;appUZ
z)6b4x8n0Dl9jx#|y(4G$fWwqQPM{Xw2Zpo=0jvqPMTBSD|MGNR;H^!HJv4@gI&>u;
zsV(RQPn(C-SMjSf!!@@<{}8aShbblz3Ea9eWoQsC+$J3vIIaninDW_Rp2z;%94=JHi(+SVd*gXgn%8UH{Nf=+~I{eAH@t-8@>L4?jBXaF|t(id&J?*Xp2)1#q@Sn`TAWOUmne4cbT
ztiqepa)YV+;Yo0{?Tpy|@!a6`_OHI;WwCmDT?9Quno~EVD60>tUQht6-n%zppO7Dm
zvIC!76%NfE-=2T>`vu}E;6~V9_Zf$$-W#L!MR3`fdFG9%*z%1*?jwWnLVCeVA#RYN;qvy|MzXbQcALGhh;Dy?{u>CWyjLkwE
z+Ic@jeS0yW{eUdXXV6UZzGUY#p(_BCQ~D#+)v(?CKwp$hQI
z6%hf4^phS)&rpJwLF&3N^!HuC=WEU3-SDwl1^A$PS_-1i3PX^0dra}mJTm{2QqM!-
zNS$WHtn`#o)Ex2`!}xwy)>_FFqn?M{vSdZbUUnj(8VbXwftX+k)jZfDOs4*f18&itmN0jKpo`hFxl;B
zIlN^=69RZmL5#*2spV`bT66KZUPw$0uXA6dixp@A@kmY|-sKd`hx_%MjX#`7O@Q$^&J$CDZ1zA*Z%{o1Ul!wCGb>QI!bdV0;rbGY
z1h5u0kU&LZUopoFW|yQW^6044r!ak{A*!Y2YJ|tzVU_Sa8|@=x0IMGWyl&uSLi4KO
z_C<2C_#?SF2H+h2>OeNDe9GRsBu^Ts51tl__#{=Q5_iu@$Fkd7*0xvqIa4<2=KteEO*ja3xJ~!M!~0638N8*
zc`<}eoe1rTWg8=8xdCq;-uI1+F5e2)cvuCHggz7$`cS-*P;a{7+&5j019*3qWG(k%
zJ9t5HRxHEZhk1!^&)(S<+0iN9&u{JxB8FUnqx
z#M2t}r{dNFg)@|g&&KzhuXD4!5AJENuFLF&Vqn?b`7Q#(C%m_*78~FBb^d)=F|Fwj+l@8ch4}gL2vw
zKz6fI>`!0OPng;2fUtUO{W1T?IXfhPRm-71Qc8uD&}<}ER}5(&bHHSFLfL*DK$z~z
zzih9dJ{+lCkbg9qkME$3bUY$*2S{o1!EMUfv|%Z7-uLnbt=MZcS9akA`M>je0&KqB
zN%*&m{ZN=R$@JG^^^T+3QTym0s;?gk+&4>&zv&4A4YaS27o4jTt{raRL!$TpmDdY-
zF?xmVViX!wVc1TZDfoct!%`KOHi{SZV}pQ(ud?&n4US7?+GMY-sDQxm_cL=>AwG-g
zYW%IRB%u!x$*`0WoE+#9z4Z0n&kM8-k>y^6ZdrzsV!~K2buXSLzppqcPQpvGLqw@>
z?7~N++(l;gk+co!8D-S*=Z5p72=Lry^DytG|%O=2B
z+98Mpyz?sx9NOLy1Yufsx1e`4L5Hyl5MpL)70XHya^m2Q+K*E5ZYITOcSj^){+zfk
z;J4zkjjZGP5U@q_o6b7wIcL;&J?`PVyiPAXE2O>lc`6lqm)LKiS{pFXe5GsR-m9%Rh9lh&_Bxsfm+t)MR0x8}sA{#gyyZU6vPN!DpTFgjGiiXk2VW1>BDy#*~I^3cr}wZUqx_
zYsGPEob`(ep1bovAT=7Ki1|)*cnNA9He%im6^86i@G;#M_TrhlQ@Y&GJaT5`>q%-O
zX^Jr6vjap=TiwhqBhSYQ_a^t{b<+M63bh{bAF{k&-9-S*-J$#+y)cv+2ex590p^0C
z&I2gHXJ&Um`sM4+GDXV_-p2bPrp_}6DPEW_SuCmXFiBRFliM06FqHO(Rq@8T#8zYh
z+ebZz+>g)nQcLPkF?99K%8aWOuC@zj_Zb$)bo{Tqxp}GC`K9P?GxCJj!4FF7Y=N#QCjl=ff{SrUAAro=hJomp|(wsjTOE{HVB>_;UYB$c&d8tnO3&E{XvrgBxBE
z&lA4gLu?%THPDPMQ15LOL?c6&(sAwL@z8+p$uA@T^lZY<_!u
z%tE~$nRZ>9Mid^+OOP!HLSPi_Kwm++A*UbRB_jOKC;imY6EBT?5v&aEQMPnaA~D)g
z=1MG$-x=N5egudtNf{fnI$4|B!norn_&Mf86)A+-c#8(DO~)kk
zy(g3|6L9XZjI6cN^KnTjN`X5VTK@!d(8=sPpQDi6BTdTE
zHVEN03V`bK|G;T`^B1&)Zr1*e5^3hVbT+Lt^0!!$SwPkk+_kEVCNsXF!CudunA+TF
zJpmGSy^M!wjHwtV2P|y7->5RzQ+i@MqP5mfVYbBRBOgzgE9Alk9(vu&L?uDN2
zA$>wNcni|k%>6?r6AE8b(9^{1&86^XFq3@p;^;5ySza`TP*qgvpd|@Uf!(hUjhP7v
zLb4D{cm9o=R5`>`POzLETP>cb3e+A%Kb*AV@plmU{czv;ccdl`%>MwmkJebhQw)5K
z$(E=uUZr01{I7N+IL(Mj`gTbadoB_EU%eO*aw+_~lKMAiwj)nLIt6%9Zg*D?;Qt^@
zL5>Oa<-K3Bq$B)ZEF(V<@PVt>fZJC(Ybi|sDH4-8hsEPew+krl_|fl%hR%Wpv(_FO
zetrYnIc;g@bPR3FFHQbPV@q`O+PZ8E6ikNsGD+m+qL!pgGf?_mjfDQxxcb>!nvzBl8HnTfgkP
z`kCGnrV=UV>`f0;Ge;P^89Y6Z#JR!hkSQ#!0$ln=?>j?@33<*XTbcS7&G@Fz&!JU4
zO%D%*>9pIemHy0A{GmgTld`XOtQ6&%i<>{O!|k9#d|Aa~vTT9VMZoL)`G3e?7Q&JyRY&aK-O@gvu3R%1@*(a$fMX
zulWF%ZlkbR;t;ys+2gzYQPA*;j`%Oo`;rPD2xj{
zJDXfOU6pY{f-RFDNal|Jt=e~&AouS)idglPJuMzO$?|vkIH-Bta2$aVs0tW#7)f;)
z2aXst4^?rAZylpT6`;!x6P>Ud{fJ&p(R+Je4eME_XLCh39B1R*noQTd9Pgck2=B`Z
z;W7TZ#@~=JlrzWHg*9(~F+A8veg+se*HK0-pu3nI0)_KC>L~n7%<<&W)w2N7
z|327^r7xlZ(8@@q**jaAo|mUm`YZA&5RL1!=ACd>n{~@74LFqeqw;W#1iu6JCW@?g
z+!wOqse^olFtTA)2Ex*Y?0itU3s-8h0ELL@IVZrN!0qtR>`?8CoA_VzkETc8$)j;6
z8y$ZN)Mqfm+j-7;uz8O7Sb0Vm)(t-2k4O0)DD57tYZCL8la-i$fR{3Cu|Qe3QaF*h
zCBg@OaD_^-+C|ZWE%mZj!d*l(HN4Xyl19&8iQi>Fj7)x3>TC6kX9r|}Rub5%f3gD?
z1tLX-^(v1ezJVb}H0^!9=S0F4=`LJ$(|+uE|V4I4}A>V>lG$Qb%%
z)^xU|nZ5e&k^NjKndq7-gRDtMDZobgC}51R0F4c8@8u|)o`&jdyRm@41)>`!VbFYO
z04RPZ0(U2X^Q~CiyOQ;-VA#@ecK{~2YDFxbYEF}|suYRZ@c^6&;mwc46_J?Bk_?6*
zu?gu{M`0>-E{~=>8WIfNv6jchWfrjImi
zO}~>-ZNH(f(pQR8gM;I;tAQZX1
z)k9n_;!3&Y_rdS)W=8sm$nxj)joVPi&{Ga?V*k7-vN`f#XZ&Z(Tn)SFh8Co_B%3>K*V<<
zZqH>0A+WAm@r+~by>mU9y{0%z&{Bq#S^Rr))kcc5y>243U^V!MxcA-9uItr}Yrcmm
zb?0O3jJ*<-%Gb^8TZXy9!?Uid(~Ozjhp=6nZa;B46mzUWX$vC07ljSMQ>>}ZBem|2
zF`e+`wsXoqO~Rj8C%hJUB;sK^6qY3`yr!-PoOE*$H!?efl(`&#C1vQiQsWX>oi{~D
z64qg;Vt?ejnHRRSo=HzGDY4roH4LyZMyp^-
zrT4F7lg$oDyJ{i3?;bf1#s%~HN~fOZU~bXAXja@4M3%!zcwt{yvm$d?@`Iawy$4cy
zATLGVVYb$mB5|YL)X2udJ2&XA%~;hl1Voz(RiQLBjfH9h=bQ=NjuD6^Ggc@|8nyd1
zet>_u7D0F+?>v2C+W(}6;R%p>P6E4qRlULqvh3ine@DzO{(Ss%KEobl5MvrU>T4k(
zlN)zRvYxNdpWBT~_|^UZ>eAc|4xd
z?bXT}4H0768L(Qgq6^pgV~HC6hW?v=X}m~zYR3`N$k5A%=K0ebi)6LMi>8^XP-!>q
z8tgU58*CHMZL4zTrR**~_oQ6AS7M)FleouFTTmD&|bj9`_NdO~quw
z#9htRx})D^xJv8__}p(jDePtpsjx{85Ss=_d!C2M^oivFSO3fA
zB!GTf2p*nlCQ~*B313np)g`Q^(rBi>++PZ)xKRuGQnmzMWkm15;*ocY;qsDRNav+!t*30!fVJX;T4ejRQU6K4FGF>~*XTu2~Z_%9vMuO0<
ztl`*foV7x6Wq_G%T=U@}=rWlnQ~EycfDI1MgWnD03$ge3TCdsqF-#anvSCF+gyb(j
z2EL}(mpdzKbQ_PFQ|;PQQQ|Gxp6sFrgc+alFJk&4h49oOwuqz8K1R`np2*29VNF}&1@ju
z5zi+MpnW_CRSey2ZDr1_!&bO+OHRImx3iz!I8L>gTwk~{t!aiBJb75@h*G2yg5%rm
z6!gMOQL`ToOQ7PGoAFwj&@z1zNHm$<#`rEc-O5=g3&HAzl;TS`Y`Y`jT1zJds!uZ%
ze9h{M+)B*^bB|DADbPmT5ktG~JpZXgsI=+*pL{_wX%I~{WM>V%Y-HA7c5#o}O0f7-
zOI7tGQbAV-Z#yM+k!`hDTdP~>v?2~%a{0dguLhOn&H|iMSk4e?&hTv%a8Z^S^-0#(
z5f6`u#{3>IQ<5}di|uD65_ZPheVFMVEHWdcMnfr`>Pil9Zjc{>pet&a;_w_4SH3)y
z|8-~ODH~RWw4Sc5Bi)M^Mx9he5z?cy5y09nmr
zax73~@5p^;O12OcoTtbBq2fwpKiwtXGKP`0Ct8*k%IstF+S^sl
zItoi0Ni+@SRvBJmzT3N7n3;&23N9(SQrhGJevGn+9x)G8v9~CJ$a`SQX*gJ~6w5eS
zIUen6M%@|M1{ug%cli|*YeM49K#~89(zs13*1rKup4q*`9mO^nQPTj=y2C3~sIT;y
z_Wn`K`1y}!f4av&NjuKi&|UZX57R4j?>W-;1q8hY&g|MzdEq-?gYG}TM#%BvdqWP}B!ZJK(Qe=Q=Zp@A%On#A)P^-b;&!;6YUmS&x~oNn
zMDQL8a5h*-z}GQ(L{1aSI_TO-w+z~jTF6ZgdD*l`_H*TPc_bm>d5wvufri{=IH7PK
zh?i13+$tovqu378OW85k%4LVEY(p{OLI#~TYf@GzX(b$=7YJ;Zn|=H0cNy6(1=
zbcwBr(r3SYDXeD+@Av~2p%Fblr(`i;WAKRgUkn;d7_hAaoDiG#Kj(Dr?!uGP<^oLh
z`4>qAosx!*H&L8m#(-rO4|zZR=?~nA{Edeebhau1rafA7m#=X=_c!PxYYn-p7^zmfd?pLPdYC}IU;Zf$*~^W%tCUZAP*aLhS^z?w?b
zzP85*a|y)aci=8XjTySK1V|GD<88JA#AKUZ#e3tcB>9|Nqe?O#
z*>Nr{$v1bfzK;dRkCv>oNh4XQ6UJ
zep+-=7{s)MD=4V_q}pB)1&zlA@iDczB8Nji_tLsaP;G}b-(teJ0|!2R8`{6Z@Mn3h
z&{4^rFp7{&Zdo}I2&VRsq6V}7#EM5#2Dme6;zT>Q#|2B_)<5!3xKCYWuUPx{0$0!r
zg!fM*394Vmu3#zZ2XN97WFXzBt1BxjC$ti&ns>zajvaG{&7>_&b5Ymb8TgVPyxp^*
z@<}W4Kh1hSQQSn7UFG=HWV^z#GzqZOqL>``9*5O`EuSzh_diD%MlXNu#YT{ATH&uklREDVCYhr6Gbs6gLIHOJEIO3^>+-;xkqGU35e>!yxYX7qP!
z`v>K;Oxtp&FJu!X;0~x8erOngoOOYH?ZgHzsoQS3C1unP8;!o`LUj-|YxRgtFVkwh
z8ayz#+Db!G%fqOsg~MwtV+d>QM1hNByDh}JfNQ27^l2x{ue7a7#Qs49O4-n6PJRut{H
zO4QN}WTc_~QDZv^ro-?B-%7Ur&1_4j4cS_5A?HcUMMHcB!I-YtF+Mw61oeZLyKPe!
zon^x4%cwaeX_llzyRJTt)nWe+eD0BIVypG0fOrLkJ&H;3vJPA;a(sWJ-Rt0cly3ng
z*jAXaX)!o_b;fBWGsI^#iwk?E%&~<67#Q$%OUFx(^org9K@@zvPLj{<+h$KS^}9J0`6GP=0THQ-
z?rWKwTm;ls-^g~&XKO}MOlVCky;6xxXUcv^;s5k%GE=Qo-ypCpRmUDGmLy!@InQrs#oRINFLjjXrP-7YU>5
z3zW_>x!TRc*kK7J#Oq6;xYO_@Z5Z0aMivw;%;g98eY=Isc&7=j|j
z&gmXh*Ut=6LFv2!rS+M;qqs#od^CbVt04#K@B_#=&AqJVz
zSlkEVd!(^r+JW_EIAgw6`V%Euw}8fXA{?qDxT0-Y3i7=|V~fy8h|`YHek!yV0jG-l
zPy9Dq?4d{mPrwXC3{T07DW)Y?XF6|MhE{_}PIWGJ&1+J^wS7WV
z%cW*ITtobU6N^2a=Z|e^d{)$5kv8K!TMikZY_A6B)olFYuz5W^j0TmN1`04{Ib*61c;d%<)&52+xDe&&6%a!gLsXtC+J$oFs}oR+
zbs2spz#cOG50p^WbJkacs)6Wa+`7mH#q%Ks_H<9e^M^R=IqwzQPZ?~Wh@(=Zee^Ep)gRX?68)|n}RU(N>rhL
zRP@DiYu|I6j=ClryU-tmV9?_xR90-d*OtIL;;t8j(n->UQ0q(v2l%CQxnR2TI7rIh
zfRFL;7K1R*I4qgm-(UyPFrfn)NQq=@zo#N$$g3S6(J8);DYv`YC*)5^Jay6qr5etr
z0@QpP^;wSOoo%3&2@lcL&W<&FD;B@>GZB9ikYqQhg-5b5n=wUB9ZH_
zeeF%?QBQt2##Zka<%Y9J&|p}eK^tXqvD4|_AyAQi;^czqa+ssC)kCvmF
z%1&g_Hi{3f!ra;H6XY5&bdJWLigCqmp{lJET8y-i)PcfKRupO^;b>!8xTPI;#Bibl
zQDwDRxhCJYR8@$VsX^$K7s4^(=muBv(xsu>g_SH~p&lBu!jS7FxClV(Zs`hf(nI-O
z#yY9HjAYJF>K*^`wbRAxgmuO}{|6o)`?qxUGhA@sIQC=^)F9dw1PF0ryq6#R2DQ`5
zLwouIil9#CYh1#W`#hs!=2Tdt!=+cG5VaSJ8(#2j!`*826MscZbr9U{cnuI=30GXR
zQpUQ$A>m!|wMO_15hy_KTi3mmB5%~2|(FlmbL=F{Y2g}^h125e1B2mIQnUbN}a8mPc7CDNf
zAXH3ytlSj^5I8?DrDEeWP-1S%3vuPb8$t4lA*uw7WD#p#B6?a=;KCJOZ$}qOG@Hq(
z8`P_ge^)2*uqmQ{t9_{FX-^C0_7n1UPNWQwMAo2{-RT#;27KHZKenoG+AqfeY&6JH
zFXKlaaAnQRxeC^k{y}|tQJ&a3C?%v5gD{niksDkLV))vNbC1?$@V>oGsM@Skz_F()
zz{84=htg<~UN8x3E^#@K!1VsKI9_sxh%g`}&gTBWVczRBYKJhJrwZL7=@dcQgRN*_
z5eA;dnE&jEf;I>^n<#OR3^#s3alP2>ao
zIH(SS$qN@fZgw?Al6=cu?7g2ri#fO(&`|5rCuD&7hkYN!UxKIur-w3~cO
zVj?r(+&$jb`lrS0yb*E?(T|IAvbpzof}g|hB#TOCi)Wi=*G#*N?K==7U$UV`-Fg-L^A-umjo#}8yyiiYMM<`L03t!Uyal0vXn
zupL=xYAY2(mlw>+G9Md-P&C;-AsC+r?9^2Bm+lN3{|xO0%^9%$#jgSivB6SoXfy=i;W-Wm
z?1f%Ev>K@1Ijg)n%Og#n%r)^htYxzs{Cc$a#JV9l3-RCuf*Rom6lQR2*ghR{*I5AT
z{NPWhPum0$mv#cT`TmlDp!uaHKDY53N&ULnfKEUFlMJ!t#=OC-%1Rg
zWqFr_Y2A3mbUa%trY26^RgPrgMNuG-_kTnk>yy$3!!^OYbjtyu4H
zM8lEsA+~oVjnC#Vv-`!woJ#XhI&!Uu?6;e$!>hP0gx@R<%Pc6Dg!bpyIERLIxwl)@W+2bJLVi>
z$A!BEN&zSF?$;}fEEhS&fK&R#e#iELx9|Z7Se9WF?t=j|-p{UlQVp}Hu=@w^?%T$l
z$SY
z@}g1hi~+j?^Hsmm!Tm$%Z?d46n?=CpXLryDe5B&OXBa{D_n&ml*ZL$YM2b7da{kBE
zj2qu<=zcfg_=qyg420HyZSuws^(q}~azW(~HHwdC#VN5rbp$ZTJ+d*&g=9f4Ls2V*
zxLU3yJF;d?s~o47aD6LA)|d6{sY{X<`z*|>*-;zmMjn0ZuK1a)MjbX)@4Z>gMQ0&D
z3`yfuETuu8wKc#w*r@_X8|i@Ny}MUr0p
z&@`SKRIa}n4J?I46oZrL)O`InsH7AWcIDRMK>I%3Hj&VER=150eJzsPW>{2wo^R2m&;?|)C1@R_+cB*w0l|Zkd8-a_
zW|XOxzb*GhAfs-E{c-rozw4v7UqgXiXguDvdV4I0bznAgNNVzN!(CZf
z?N_#rBZ$zK8`U}!PzL;@OuM>WCMjTQz94tlHx%65IH{~^zmt0Y*qgX)zFM4s_^zwh
zeyw$$e09?o0XSP%?CxsIB*?5qUkhYojsN6=YJmi5ICJdJvsshx(_&=RY{XqlnXtDF
z@(oCK`BpORii3)-3?vX9u|8yOKH?!#(X~^YBNw6=T8Xx+ZX92gO&K1#q*wnQ_@BK$
zc|Cq(I`RY_ANlN;!DR|!;?2h)?0=b%hed9=TJQxHt;*~FHW$=~fM=o!H$R|HZga6a
zMspX!(BdGLtfLEcyL9~iafivV?T`6X5QMz&Ln>Tbps=DCr^DPFUw;1XI3)VEqHw0H
z89iVc>PQk2D+;gHYl8D?0`vP815LGc7XO)Za&&WAp?f0@V)_?ZWP`k3pB^fRJoQ-*
zl^S-`fl6SD?@C|E4)XiRkA+V6AHI!Gv$vODTE&6Bf8JXWuv-P2%UrSE9tdw9G{nDn
zWP5!y!V!z0{peJdwj&>Cd%-<>Iivkf(xKiR5j_h;5+7?&M?>>L>I=~b2Vo;7w=ktB
zOj?)u=SbAaXo7sPsP_A%J-WNxNpFIDaMuk#FsRR|H9jo{xu$R2(F&sh^`K?uVUk!y
zB1$Qh(28mwKmT22f&DfP$-lb_3zc6vRB-r`$l?#^!;-^R?IAA^
z)L2nS^8I&QVWFlU2^Gb!nYZu^q;6J4EBIu#NXc^g<5L^SiQrwB66x4$u?S>>gi9Yk
zB`zuoDE4Yt$uC#oKW-TCYCYw2g(s$H{zO5E6Nuo=xgC-nJl7bL2qHMfWrY)3$cFHX
z)w&oK@iiE`c;=t|`My(rI4&PotF8P^l92nuu6pH@Fh63~NbuoH3WPi`FD+q*$l@a$
z|EvM{Jzf2jDy&Y%g!l5`*?plxU!o-G)?zGcrvB=4UFhly_(Qh5*9+v97h6n5SDv^8+d3~_6k>Oo)#bzvv^IegYMai
z8i8{Hg`{TOze>?@6#ay|P3g^yD-=x#Vw1HGI>0dysRtM#KD`}ZeAhV*AYiVKJuCGR
zGpj+-mU&i9)Coj6q$=}i9b^AWvQ|Klkr31)(w>A`{I)jp{;^VufaJ>w-AAQaO;5sO
zzIJ7#d+NS<$=qUgoZtD>+#S{1N{YynQBCiVq)H1~+kLmKB`=FQ*0g8c@a6n0`onX4
zx=su6c7~F?JL})qN}%{pm?cz8ka~dkti7p|`p6kViw-#mc!~mF{|0
z62`3Per56%eS^D8Q;s6~gZkS#*qBWcC##4g&D9-_rkZXsnsGU+EZrPWZZV4**&hm0
zu_21FMOi=kX9yugIf@3x
zFf4K~9s(dJnTgr5jM8h4~}qKCz_+0rYsM!;i;-3u<}mpclj1
zj#J&*jt7BS9}sov`OlZcx&gN-tK_zA@b&8UhU@XJ#v)JegMdHUoyObO+@3-Klv|DEYens7(f+E&`F
z!fg!F>-9BQJiU6>9y5Fw;MwwG*4lQ%g+16KY2xwOwh78Xj=m?GhGl%)f4oqWn2w
z3S=hIPwDB9>t6jG-sqk}uViW>{soIZ2rXq6Y(81&!j4RXmWm;ZJ%p>X)-^JcLGqO`
zx)>S)d10hP6CVAf}<(CGjVBRf*Bxoy5=uvxx5>9PR(s)%$F7hLlyx
z;chy6>RJ-Fov|`vo|f5>9}H9s&AMe0+_IHzy_yk2FY`Wuy~}W|T|y!p4wo}j!p5$)
z(9j|gz?lr8W6}336vuKQEaC1`wWaR-C5+zjw#1|xGRTLuQ|(YQm}pbeL42Te@__NT
z+K4Bq7#-qprU=c-%EOE7UznDVD)>64DcykmgKk<^m~WSEBC1utm7t0t5=#UfzFjDS
z+)F=3j2#{Sis+T1#7U9l+~e96uwb-(6G@YAB*>_@&8
z`_ABi*o_Kb0|RcT2#ok%}^@>d@o_uWnbJ`E}4|RE9>*N
zGqeQrOUnI|zqw^&+SmG_kiL|h1o3lvF(rSgD?m
zWcGi{;84wx!8*oo)XL@FEb$p2r)3KK3Wj!aSY)lk6SwF*zq9y2j-T4Ybzh+)b=)#Q
z320O9=U`Wsla8i8a{p!8g7Rv|Kk~R0a*vx4zwZ69a!WKFqnLxhbg(gKW7~~uA(jbV
z(K57SMpKuWwN(;?^_6>p?^FCWvuEtkSApX(w%jiNwY6oS9eOJ|V~v|K(jCTrshcq1
zi(LcRS=G1~wA7GBu3(+n21Y07qm830^&
z0!Sh%+f}Y%&+_IL`|u1zi9qmhkDRaf$A_!8XNY5u2ZB(z*hLuyqOYworE||33BiTU
zGs9!Bm(ocum!WLtXyIeda00exa8#?Am8NE+ax%x#-{>I`r${M&^5JFfA%)!k_-*|%
z$Y89^ko+CIC{#iEkjb{C8o~}g@Nlz~#ix*l7NlAU6u`l;T@+5lzM{sT+HHX;o1;`E
zSyM^K1GA<;<0@nf5B*6;K|U}AiKtG*_LmTTyS(>)9HLvf2f`oaz|9P&)cHbgQX>m3gK|VU<}{6l{TDgQH2o@|D5dmu#dix%&|AkCnX((g-iQS|j^YUN_ziFxD*L^HckrHzqVC(qVXxkWzkx|
z1JFbOh^3Hvs=BHPsmO#TEBBI9XY_EfmkB%a+7t}EZ?!3Wxzl1f2({Jy-X2xtyls+~
z*lw0Cw<`SJP6095^U3^>{@1tri^&#-5V|olRSzxm2D}|3u%8_Af@RsPBc5d
z2@N`Bs!k)+<4~6#7gy0;7k)e%l&}pZPiO2fGAA^Z33RL=@pn>g5w68~DlG={~{#WwnX#{tV}p8V-eg>{Ysm(H__k=Ee!?x*wj
zPqWVb4P)iI1Acg}5Joyr=WiV^t;s8qJ&EXEaoee(MU=I;5jbgV5}?t>9(l#mSW-^7
z?KU3w@^5q#0xqO2Qx*l!(xK1mmRAHvM6}{ADRmV}zxWVMQEfxTm)1MlHhO5X9!i?r
z#fd%Tt9-q>MpSBw^?F6_I=MIJG0pYZkjPVoLH(s*@Od3+#~dJBy95Lv(0V~#4s-#
zSHK!KfQu_Lu-;!?w;a|18))at_uf;-h!INg!8IziT()gVPtm}Pzc3O{C$Ivnyt#}_
z9DPRg2T3;GrWW3*!D*JY-U4xXj5X-Zgzpn
z7azfZr*8ie8R-b!tc)lO&v-7}n5YX;!OCbsr2N!O}VkNoFeD4PE$BD|1E=wNs~a3kSnZ
zfRi}MFqvRNM|QN#j8pptg3!L+?1ZUMKy#_-Z%tKB<2^Bx`r@
zjS&vzpMJ+oOkRrpw1?ye;AwK-6V8qHHvLL5b+j+!KT0rAC|<%h%H2~{k`-$QrM9@N
zEufB{7QPs!qsOw}#P$U>^*jWP4NKfWT7&jIs@6e1St5#pul)KU4YmveamlQ0+OPJlh7z^mk~JQ*1OB=--fX
zXkA3@PRX*J<-g2XP4jW>s#K#_;q%!UrL;lkE(}clCg)ZP!5LSG8gkFS<9A%ii
zTk4hMzIt!cC-U^5-GA;;X9K
z$iziG?4Qj4A6f6<99bJa+D>dt$L1uNSRLEW#I|kQwkLKbwrx#p+jb_p{r&Dew@#h&
zCv??Yd-r~xwbonk;lk@xzztVk7Ioa~Hmr;th73t6M4~03&V+R)BeVEkxGkuPEFk_%
z1QW{iY$SD4&fHpMMp?NxAvqetc`~M^CnEZ~JIvvk{w3vrY(=vi(&wLUa*cK@M6P$>
z=C$7-{F))?d=%1qFwTeI_-g}~m~g@%S|PO-LH>oc1Q!_y(eN{DwZnq=&dLZTH03uc
z>(I}m&(W#*;FEMlY3g`EEudoh6aP^4Brq^9p+TY1m;FK|gi5Cle`pa%#DO1=-*{o1
z1joH2@rtw>QK`zqeAQSip<9pU*fNibs~mWjY@A$d+HcUHL#hm={3PT{j
zDH(8P0ibkLfTo`K6Ky@CNY}_4*1xSC(QmSyPh5&$eTRNP|AChB+q|8P$vIR!0*GSL
z(VS;KAywr2K{Nh?=;cw?|HQhz({Ygx{c=258V$aOgly+h`kKTFXe?~^GJ>nW{X|ob
zqFjG%Wsh|waMes}$?o1q89S~~2Zz&RC+gw>N4?||WxW^x17i1POu;M87#aG$EL*Gx<-9cA~|MxF7Jy
zpp}@+EQ&x322uozU`9(+1Yc<;?$265dzCrqCiJ~-^kjxtsMBko;Js@sp$;SNXwkMA
zZfgCxhKLZGnQ?%(C|#%IiN$;aaS=f_jDU|Z`$@+lL0G?M9Tyjt0n9L&Xp95LNa(~t
zT-MgH3sqE5VbEFI=fG}7L*M09V4k1?9Xh(E`y&Bt0|h}w&30%E|5aegbVhjeV!q=L
zg8Eml&q^j5I1v$0jR{|{@J%?a1(BPu6%(&}(!Z{v#%yyp{w}`39gg}!dHPB#dXPP5
z*cEf@9b7ck0QUS6;(UAB=yKDIgp&qxYpZEW2rtOL+W@uRclasndgSwyx
zHW3LtQKBgRTU39XsTg&75P2y2{y+~e_A)7rx|bCC;C5v2*m+)iRU8+u*INlAqAu5k
ztpj){d*4^F_I#1M(7Z)?a^T2@666bv(R^Q-SSU_SST};F7RJr}qJGSAcYd_X
z3`@wK${;E>cN=l9Wr)5{+0R6O!TnU;7I?TQDhexc0
z413*aWln-&(Ku}^nu#>RS=n7+BiqEnG<1*lK66hju8^=k!4FpF)(mqY|17jq<6{Me
zs%_B+|M;pL*388_k{e3T_pu+Vn*Q@s{3v;O{p*7y#iXEq1x`l-Q3ey~hw?ybHWDQq
zgmgLsuSZkD4*i&jN*nZWxJ2>5XL`cLc+m~AEGoft&DJe8GKb@wfs^L|I?i}yHQruz
zFpv^UZcOGdGVi(P_ZB98NvER=SUJKt@#(t(JW_D8tHuw!i?)o~RhJnU@!kWKx4qTf
z(Gr)NQXUBO^Sji$Ya8+9Zk`R^=UG&j0H-;}LkgGt@0yO&9}l-lFQ#L9FNVADz+#ie
zj9w``PheKeO3X9toY8c)&9Qbs2DIE)rGYTVnp)H%yR%h7t6^hmuOVZ?5Cy?j#mUj#VfWUvMIACX~_tI6^irip;VvgLw
z5JOZs9`%lZ7v6wnD!^8NVHE6Brd)s&OswN4S$tz9R`h2*F;_M!KDo&Koq@buKvfxR
zN#3`Uj=^tWlbc*D5UfA-dQ6_UlX?xepjQj014BQ@01?C;2;f~hI?Bii`~;)1#`b^d@&qbU8_5`IP>l!p{@rTF7d>fVnYqE(=c_yD^TM4-}_ve9J_iuDWpHfWiZP(vGJ@*)CU61wV!$;6}!
z&Or}rkwfWH2^E|ZN_MH`lw6pxvvcF##Uz*DqN^m&IoQ#EiN^l6%_277HwfE%B7Tl&
zKhtc@Cw_DmxcRfvO(K31l^l*9potrH!9<2G8Br%62_8X307tW=ZzRuUGws>6(y0nE
zuX6sRh_+?}vXn7-53lED*c5??At6-K8!_cyY`t|BFp)`fB#G_w=}qyHz*8Abby`!<
zaFuI<=4X65Y5q}p^Up)(#L>iy#dsT4_k`ZNajtek+TqW8!<}*dal*lU8H!B>w>@is
zR!rQGH62Kh$SQ$UHKTBz2DoEgs2WwlV5x(E76e*3tr-Q#B?ad*LYxjY^}@YKCfe~L
z`X;_@TLwF2?dgOztNHtzsikLt|69b3^
z^*7Ww&scF*&2;E!6*6%!IMgat1c(TH3IXyX@BT}Hy5Sf_J%~tf+S(zp{zWp(sdU)U
z&+gi^6f&npP5c)JxbaV2B;x}?s+!OxS&vzx^V@^c6UrZqZ-NClxLcI&{U>JBg!y2vdAde?&pw!&F9
z@QF-FRW!sH>yFURbt^o0bfnYH<y$5RwCaRD^a{nvqEYoOvx_x
zR$;mPpaZ9~!s9@irFxpe@;Tmq>MYm^!CKwM
zdZ?$>?F$Z)P6C#48^-dbO+c<>P-}0q1MS>VJoc}nKqi=SI2-8?LRzC5gR{BWewmx}
z0oc63vtZs{tl@;9@4QyJVgeU#NbBu-Mub|rDroh&$5d_GjwuJE%n%TYOY5ueM1
zdAj2jzo7kT@{0l5i(f`nalM1CWLfdxg-|Qnlt-@}kC<_9Pe$+V|Fwv+mP%zIQ#;_W
z)@Qr9($TL?s-~CMkvYlB1Z%$Ej0VRtmMRL{;$q~OsK=t5_D34in$luqjsC9UBmi)Q}fTYjsbkTe{TI;<0_RTZLU2q2?GQvq%LZndsS&LfT$?mhtS
zhlfgkcS08$5caBj5Wl-^!G9bykhnzz8Z!%FHljj7u%a8AOU@+3&zqCrA;x=0&pbtk
zEDtJ?K>iaLp^zyF?UA)TStN*EF7m4pbK*(0
zTsn-SD--9_T3ZrEM10RqvnF)E|8q@m(UgMs`Y?(!*jL_oN@pAR5H=wK3^UolwH&MWpT(H>5``9%Jz{Y^~ks-I1Ie=r%
zgkN={iv^e#jL87GxhrwJu|BQzL)UP_tA|CcRol*sFg3w
zJKXtPyPsg$ct5_e_56cZbW5gs6!RiU`v}^M+YXG;vn981s+6d;dBybN^C^{+_(xXf
z(UhqiS#V7_FnpXdJmm(O5v<*21O|gz3Me*YwTLkYl{aj6@o8GSgHIcwF;PExxkHVj
zO48TDd&^zN)swbn7V3bo&lZ{I+c}I37O!x}jjPgJs7RDPOCclW(&7@~qb%r6Q{2=)0z`P)Hrh%Cs(5i~)0H@wrc;H{AFJuD9rzrlw
z6j-5wwtulu!Y%>r%2*VEZbvy;xf2Z&*;JKRjGI_CV*j}WBCfD=q~h%5<~o%oU4m#`-@Rzg-%nktsMbv1$H
zdaJO1^I6}&Yk>hVCL<{_@DefyPj&>__Rtc7ucBt#fr`+ntsoU)6A1=%H%{mp-?04d
zUVt;Sxp$nyg_;V6NCQsa!YJsQ3(Eaf5FjH?GQWDIzgma3v}mPJZ~fyg^)qrZ7nAHT%r2qL
z_$R#TXUrY&Tz{>HXm@DnMAJsxE{UBq+VlVe!>DIHK$pc#h~*iOXQc)R)wO47;GxJ%
zcllFV=JH3fP^>dl%64Y9f#EE#;f1)&ik%B55pAL0?B0ifW-SkG#7gsgjb6$
zgoxf^Ypi2msM!Y>KRV3LOd
zubHpZx8xbSvu|vO5f92^{qAOMK6g0LRaVB=Ns2baQ9UGXKW!*2V
zXabsQ%JShPTD}pq|8u)w5*Nz`jiu=xb#qD%EG>f+NFEKIbB^c?uCc
z@W3^8h2~T_9)U4Zz<;Jq5ADz#2_Yf~YN$Ys0pTcCWx*Jw!J}O%qscG4E2zKk)sie+
z2Io#dR~3RIV*%-nX$a=QkO;N~O)4I4g?lxU@_G(PVH23_rEo`a$yfuCG300}>(N{V
z3wSpk_FU(&MUKIz@vEGJa|icP2p6~Vu=F#WL&}^%~atloAk_pi~ck)
zulzhwkI%YMi~s+Q{dXLa?FyQo$liU6K1P+%IXi=7VAdB5Ah#Q(V;TKVj0e`ZuLm?<
zuAV<>bA=Pa6R#giGo5ziN6l8`B1(7EJ2mh!&A653ePMp2tdJ%pqCBv1!YJPY=-W
zG)L4eE2tWZ*T#*7jA?tEm-+6He^RlFeNHv-&oUWr_f4r)Sblixt5F!8=#q5jlt*AwZp*I+)Yz
zIS&c1tXT3#UA8|sZC(s~QS#W3EJ0nN+MRA;rde#WF6s?UR-Y-91Yy}Q2$!3Um7WGP
z(*dfcB}tht>=|?0Wt{y6X>~wOQ^Fgua6Ttk+cw%U1BVcmvgigpC0l6MREkc6|A@-!jHhlmR$bcRcDS?=c%$IpJML
z$j;Yx0WSM)qZ|AF*lgGd!W|&IuB2|nT_lGYmEzd8sQZh)-YF2(VXW)KZvX?f=|X(z
z_&yL%+ixP;$gQPk#;SxS^32+E8iL
z!FmkI7!Z82C)yO(Vipm*$x?WiZpZQ+qlD1=0g)>uf+-xaNugax0;&T3Op}Y$Iq}y0
zCd8L(F!u=%#gI@kUl-F$AhuZ9pYKY7t-Jz5n#h_`4v3JI?T~1LoF3uU>cR2vJ
zLM6jaGVfiZ2KQ~`(}<0EvL__;?~t-K(((uIk*)<6k!BTzD*ON*gfkWct6v!^*r)Q
zrH`fia62v^3$0&UizI~4LO%$;?9j&}TZ>wRVEp*{5Pj5=cW!%k6nVIW+txKI>yvX)
zYRL2A@g&`&j1$%G32sO7@<9g|NA{1FNYVah^{>;eH83E@;
zBgEduL?=m~LcRfnpU2uk>3v-Xr+nUeh@DWQRMrx!9jusYwF-n@gK@DTNKMT~3Y
z3PT4FA3FUZ4Yg4q5xF7yzT>vKeMNMFvw+Lxr;*Q=jB}H^7r9K{q!aO!E(y{YWcwN~1m#kn^$7i5xV-&lx#%jv8`rp$M
z*Ag|?T!I`IzC-?((MW6#xs;8Fk}%p7rm&rql0I>8-ZudK170{Y2)ia{`(DHR%3#y0
zot>2Dn1Jd?gZUw&A2Bm;NtRipKGQF-CvBgo3@FH$F+%ONG5_pNL%0ijNVIS4U=my`lGAa^_reGC`nF
zRFZUza$b5>s#t0|)agyGHR*W{NmGhOBMz_1C<&d#$S(~|NCji#&mXFPmu?rYPuv%J
zEzr0v81$>iV;&boNRUSB9Vh&{+99&!S8)ToH}Iks3l6THB%Xa{4<;vHHw`CFstm9&siYROVjR>61}&2IwpnqHC|iLp=*_g7
z2pZLa4F&j11ya2|G@T!@B_5;#;*a|GF+d4OMC_<=g{9O9X3aKuZwIJrP&S(@V7@fXV|
z|1v-Q_?EDkeGy6%Epi*07s;aS*%VKHWy#>-5_4a%0qY3;f{q+kASo&F84}DjUWp43on#C$0Ww}7%)}2E*}-c{MWyr`0#^-#
z)j3uZz*Nb8p2y91M4$bU#pS6J3PbYH>6AybhGOE$RuEN%dE(&|Z%)=m5t*DO;-Qoi
zh=@1VYT1Q+XiD^ggbQ}
ziDQH;p4>cOGOV0bO2e(!XMx*K3Ww5Kvz6i8aVlV^F9zBQ7d4T$5mAi`SdUKPAZPGX*U~4L*9BB1ACG>m1aih
zKLhqz`@>db_DHs@5m88DyP2&HJ-_aMFas)X^4|Z!3=)E);vB2tm5G*V8{%Ye6+#;t
zTemVJ?^rU*d{IPJT(0rkOVGtOnFvyUOV3S)Mmc7c_!iz^>gvg{*pr<`9W%N9v%zNB
zca`z55hweM=FI-@Z&Sa4OhDG8o;_ZkSr_=DIUQ5qFx}9C6S6^GWNFi|`zqc~GoykE
zpuUl%92GfxKbl|g){-aE$Uik*^N=x{jBComnwGsaZJY)Xeh8<3y@7H%hNeE?4Orv^
z{ezhJ$SW-K3XP^1<4aWm>Dj`D!}C@LC0=6Eeof<9%H%`NnlFf_QN6Rmc~Qt=>t&Q5
z`++jk1tRCG{I1d#$!7CN6;%0i#{Mf!c;L_|LCse9z`$tq2WM+`I9@m|RWX3*YXv*;
z{hMgn=e~S+W^-@5Eie907=QTk&x$I0v!cR_8vcaWOLmE`CvNo0moVH{)j`)NapUXm
z8Ou`+XJ5Ia*>iP^knIApdUW0!G|xYEMxf{#5jfoW@QbhbD;)2stxY=Tff;2+US&Yc
zK-9`31n-CqOKJ$#p^-o$8&9u`y@4fr8Y$|z9c{pP1gU+NGS>%O8-0aE2|
zWvbL00UI_N@uDp6Fb@IEo@jHvF9?UlD)tAq!dFX(u-*BL*yPIBFDS)7QfhyE1zrrM
zdTtc|OQjZWqk>2|EVi!&69qlf2PM)Ymq=V(a1kL!`nPvh+a0JCn(p}zsz1cxJhYzv
zP`J|xuRBq_|4pIN7JD?6k$RMVRMG!AtZISgp0>c633%rX>a=}d)9v*8uUd7C@zs@j$AY60~nD7MXh)%Rs~SOyFYK-
z1YIqx)~2$Tgpkb4ap}!h#U#%UBF{mit7fZjK9hL)1^wYsifKZY>0c;uxQ|UWSRA*H
z|CM%{YOr5vobjmc;aR=HL9-M$L?Lgg>-Ym8Z%s(+CHTEw?K8@U$TwsXYCGS3C|5v^
z&1A=4W-sbd$^x|2#a~cImAt_FdxJBBwL1VaaC#g@ojwZrC3w7nL2AIhYis
z>#NGZ;vM!7ROe?m>PbM(rYc>kB$A=!n6N|&r=}i#(eo*ITAh8u?*+=f!MD--_BjFe1SCuiw&%NClz@tm;O~nU#$c
z{7d*e!?8}RNzI@hw?Z1~1D5}aTFr=(?W;(2U*Pl>4SNKk?^5KYI%I|`*6CcPvEXi7
zzV3VxrtUODy!O7s#a=u+w)I{h=nr+$BfCb4=R62H1k!qpz}6oMT-gHSE1j70-2;`$rx7c~-NgP}lEA
zCxwi^weh`%+c6_Vjn63FGdE=7pz>(Y0K&K!3dq$b#%I?!sz-y(XfC%JWi=DWK
zB7nRDVJ+|13kq&9DtvdB*E|Y3?E0CDgvYxDBsy0AVLe$pqi`Fcxb))@e}c!kJ8F*zEPaGxDh%
zj_x?LO^M0WoJia8+{to0f%EWDezDlIwOoH{W=eu7VTBR`Mn?N)D(>*KgU`TBjb2IKGQHiEKXR*HPo&R{2tH8iAgI|@Y_>+=nn
z-TV-L+EVOsd{F1RtV(Yu|F$|Nwa>uPwH^EZdy({RIAHLuyEzHXZ}bHA6OvXH-r9Px
zRrqQ#a@0RX`+)Qv!Z-ihwHI6YG5@*khM<(iA3swOPlK<)i
zLb0S*!reOa%5yQ*7K|vnlK_cujTx^#`H~17+z-p%8NPPiF5(xc{(N}O>^uXmsrk&I
zW+3)1+B(M8?dCVME+5e&nZl>?G>E9U*VGS90h;GyL;J4w({SA$N5+QBa!jz}~Elj{whY|NB;=NLRq2q%8
z!MMj1ZRg@J#F$bnY-QD1YAGs(!8{>%k&{gwR+KKBV+~pI=_9jOzBsEX0XfvyVuh7{
z9z_#s9!wIrG~#N}xJ$1ov`er~pbImEAsozBi{RakU)5@Ol8+J>Bp*#(UH0Tc@fEwl
zN(Me0ZQ&Q^hRcv%pzfjRD5rT6XtX;IEQxJ3gbn?s4r+r?o?#DR?8ElV8qB^baPIAH
z2Dk2&Dcg?7S4f=_T!qaKqYUGqL6at5^^O0vy4BL{s#Y)ql7||doD+w1AuMb2l@bisiWwaRdr%dmi!E6ma-scQ+vgq}T
zbBfQ(dL_>&-3K>Y?w~|ja&YhzPKNMI4`LEvE_t*vRpj^LuKhO~pbYF~PBtSW
zKRsrvsFgnB#I?sT{qH=a2?ziBB}K>IK^lpEGL~d@)CZ7IpT)6I{}3e&`x{pr2QM_(
z7;)meC>qXn&k8v-m`7XlEo96~vQmN1Hc`sbXT*9>2c6t>?|46IW_KVU-kyV;;FLTg
zM?7s0C+81)X{ybBSZ@w5Nf@*ePWnCq8*>00t*bnIWVhk^838%`#6(`xx&e8g@!WZe
zM;$eSG;xyseZ+OZNyc%($R#`R$@^G5nXsfiQ%#g}EIl51DTZxT5;#H7;AY(%ZjY#V
zubkQ&96$}qJTu_oLdxs-`cCAmFVujquE0Uo4**T*gud~5Xb!{U0?mYM
zboAe&@J2%;z-O8ZO)Z-p9|9a`pGMS+HQgPBqIh<_*m-%$jkTX@mTDxNfDBif8`NRj
zf&HxQK~eIAAh7QJ#9wED7OXe^zze5cbJr-KM>H({C>*1CSV)x
zH%M%>YM{i|us;aHkQyI3KeRftwP*QKUswaMv@o1VVPndum;nsQxrvlXlBC}MPy(B!
z@yYGq;e47z%Tl7dXxg#IJ7(38eKm7xtt
zqPH$LQdrvdc6S`3glGy1CYv9id}g^c(krNR;d+phelL9Zi{QC`+eNlo-dW}c3~Hxc
z2B>ufD@zV8&k3_x?T#2k&ka@5o-K$kw@#X3@Or01l_n~Z%LOi+?t~!>UXq0i&So(Y
zn_`uRj8+*IydmVb@qSeJvfbrmzulR6^SGX-pM}!ZSoQP8b2i@qnecZ*S8%i}cfwxY
z2&pN4j;AqObtVvQS(_84rqhAFTkXRo3K1Ikh7!e{H6Lj-=(?ges0f`SN&=Z9KbiSaxcDDTwjK&
zDEU)j_80H)AnN%d2?<#{)i}@REYpgE#D=+Ku>?Ipn2p`oj$h*ApOD|Dvvb#{6l5+l
zcs&suPM>6q3k?+BMq^ECDkMOuK6RW3H88$UI4>eHRA*XDb!@z~+)_}eO%g#ZO(IW=
zmO!g8oVu8&5vc*W2p!I@p-0bnojr)s0>dRFQoDxC1aZSAw}e}0y#I4Gq$V>hj$9g|!cw_uv
z&nvC}Ht)?RjRHGP%ESgiC(~hl5p-$ayhnU|yCGdOD-6!#Fg?`@ci?ARd
z#HPoK&#Eq~cfY8}aPT5tUxlc1E5DVkKy{g33%i-ucR{q0z4C6%@F{ItpF@i*-!0+R
z+w8B}!pfv(f;bk?dYwA+lWT2liqf*xwY8_+8P=5Wad#L1T&hzSios)(tK^%UH`JO@
z?QiCV-Fk+ZEQSHu2K}D3XC0Pq_!7!#v4A*s1dfIV61DnBnF6C3ewA?Zj1vRA+JXAD
zSi#2(W2XU?OaBB_b%_jbI`nca6J;l?KgGrJe-3lK|iFeX~ykAsdQw|1*}G-)yNRD
zv+qxcbD>$@J;tz9Z^Jv4x=sk5^iwsGCHrfd&~<)p;8ccb*xs%fIa_)87q0d3apZQF
zZl8&57_p5NVxq^J2ut^#(0BZhw4#``bFa$3yZl#1Tp<%%b3!jyaRtuD0PYm>%hYcG
z#|oq{0W90r(W45ImytIj=@IgiicyucmdGf_-=7M?s-eL8XS
zAUd--t%(sH^CUyEFcGWRf=4hzMV+A+8}KcL0ghl?QFvrV%KEnvK%g>BW>egQc||Xh
z`Jz%h<|+QK>7Xor97&os;zVx%s<$_B1UcjnIuWeHebX%j9KfX7|DAAbP;T4^o-u0M=0ynXh
zcU_w27U#LuDQWY&nn?d6PXc>ZyHqOKB$Cr-pVT^2a$Y
zatsv>-E(J;RXlZ_nO?$OzA_f(nPi1%Lkl~k(Z$8Y&23uE?lV@2VQbAd@h7gyFD8{u
z|9S1TgP7^x0kRoz)f2VUS9w}^O9EXc&UqkS(lY~1{$sTcn%A$n7}2kk&0C+IXb+}_
zjSg|7podK!3eKL5E9fgS3+z=?>sFpdlI~0AQL-mIpXL
z(AMe_vt3CB&!2_{#SA3kmyJ)0oqmeIE>7;_T^1HQ19WWxmh>=iINWdynaH|w1P^SU
zIV<9jF^Dj{v$h07Ki7N9e!aZH2#JrFzOqnaB$Af%>`AExr-)P3eKq7oj~Vi6feZ^w
zq7w)q65Os+8)BjJnclq_!Q+C*$aq7>y3ulTRX*w<#X@&SG~+Jj92w*OE9~4?qfew*
zG&VqEoFNaj%K5)1F*AlBJ=gi9z>PO6LN+&hGXZf>X(*t=kHce7OkmCLhJK}L7}TIU
z9*9Niu@m8%SNk5sXg01dgUwxL%i%>jWeibw0RP_Pjd13h=tgF-O7v2C5N}+*@ygx3
zGDw?(h|NQ*kSzXNf(2fjdH#-TAuS8qdMbV2QXId?
z*fu$H)cvXey}35>Ns33gxl$%%jFP`#A!V0He-vbFW(4E7&>SqIsHgxDuGEAkD9$mI
zCp;slq0i``LRL#9nM}nW*${^z2XJ&v)B0}2Oq1IOE?Bf*_Lb~N&0RhrrJEyaYN+0j
zlKPnSlhSNaeo0%8R9|XMt4YjV=uq}<~xb8P3yUrI1
zUA^m~O&>-_kxEJ$xdscC0269iHP9T~Ty34oph0)AYah3r-*fk)+k8+wrThqd+NE7B!R6#?mVB9FErX_Yv)=q7euzCOz7nUOo(T
z`K#ILh#-kAIa6PwM$RX~b`+5#5~HdNiJZAIE)qDIo)fikoksdLFrDzRMTy#c<*%**
zRo9*fZxY7bmO@C?pwbJC^>M$U7FpFK2Ejy*t*Fje-uX~gV6#ce!btvI6kP7RdC{Oq
zi{%w1(^mj^N|{Q!V*>vkD2@W
zWiFM}J`5Ao;w^Q4#C_M8+$t2rcC)P9YpWr_eZXdib(k#snaGM?EurNs;9pWC*v0yZDS
zuE&??fzc~&1W=w5cog81AG7k=WN5gSdapx(ytIAK+fC|VF9932^~U!<#-`?|Pn^MG
znjT3!WE3~Yw>q~?==&8WfBA35bocmWwj-bQ9)IxZIp&dxpYIvs+w4ieU7$H+Oi#Qh
zdaVZaMGy&~2Oo?6rCI78IR%QuRW1wa+b;ik&;*zV9{B55i5*eq=08l>>5nmh;XxmU
zM~dx)U=be_AP{H9ND+>|FcjnJ-#aqJ1wz7+{@DB}+?>QnLqD`-mLt{|+H~T3m;&3O
zPq8zNUq7>Ctp{*%R*xJTcV|&n?rYzZC+C0X=$FnY#NigIkDEfsGp-UEKOi2p-ZM&J
zX9UoIT22J~!(>n`hE=%SgKj5542-`{IgRyx#<9z2njxh_WXczTH1OkT_#xgH@4T}z
z@1`bnr*4aX17S;=fn{{Lg2}isir1TI!V&m~Kmk)t+xLg)2!(jAv)L;sh6!>^LY
zk(GM;zq>EHB7+&hr3@a(xyEqVp7ZxF@1#Tr*Q-%F9?0tb9ftZs0-F)0n(e$@Rn$%_
zwN`#$k*6+JcPN52x=gT_#tn#itBoq&QCDsM$1M|VUiS@KFiw*DL3=A$^Uc3c5+h3G
z%|!dlY^Vylw{&Brd;VIxO>2aqsYO3e#h9}=s93leiAwDU^{nDk51)aHj^fA7^x8*P
zE1l&0U{pDxI*-GeoE>5d{=jsb;UZ|QQz!TeThSpzWksSufD|DK}9eg}^t7sWGw&j<8
z04E3IEC?_q%mo()^q&G#g9-2+i(3t_ezXFeZ8Q=j1b!OTCyR%;8X9$+tfFSi4Qc->
z;92EQO%a$z%S2zD=N=l?`V+9!z!JauLeDl8m4QZG5}UKdEV!CutQLb6Q=q}Un)7gh1Wq9@dDZH&(wl{N!bK@`!P1`dXm$q5IH&M1;c0kB1=Qt
z#{H{uq~{WQXZ3x)=}R4#!{)VZz1G#k(~tH&)3?Noj|}b@ZqdwDqMJEQXEA+Yv2Xnyj#!;E#&9afVCKEEm6(|`X^K`wQ()xrq6Lm8Q$?m(R~niHhJN^1)7BfcTw^_LGK
zbWir?yvN#v4pUU*ergOGP@*GmwIGIq8Z{dyWqIu+v<|Zl4b1<=!KY?to57=isV2ou
z%l>ifDS6|wFYQY^%}fCtrQ-YhMBSSTu}Yt5Yez^C)|Rj`udH2?4vSId?vR>kGsx8u3%+_Oc355vsx|!f+-oU}he62cJ(ZeP5g*e29qK<2Ju+V7X!H&P
z6R$nPB&uo~f>zq&_w6k*S<(=9h|&$u`;PlM%c2R6B;TCg%9DrXf7+E4Hf+!pp%;9|
zgy
zMEqoRJgfxXAkY@jMJ@P^^@y*;<%O~det*l#J5bkje%oZ<%d+t8C4SM4t*AE>puWAYxD!$BU~H9Rdgh^ALjhk3Iito}B%4BLQk!~UAryDOq1LENs*i`9)L
zA0#kApRJ4IMv~~B@I#Ub1F%8fO)aI+#DJ86=Qd!?O5!P@$5BC@(7Z>Ke7zQ1-qk_8
zZUcL@MDSTC7m~k?>h2a5L{E!4GiLwM4BkfM8+lgL1-iwrEILB0H%lYD+aA-nQ1_ON
zDxzE?mt0_C5=U^vb&bTtB>!Z(=U1~O!MH1Vzp{mBieOy&d9}bwr4z|dqgoJnkdrGX
z{Q67R7Av^iP`O4YjLwZenBGJcw$V;m5_-K%RJlqow$dYMAw3L_5$W^>)PqQ4sYP+q
z2bSjzWOLx*5EN;L1$`)U`j{$qZTwA|f&IRv`R-$*HV8#P^n4f7*O|}kkm8<>V)SpE
zN5tks8`yN7RTSNweFo0^&b&l&(z|VG`8M<0sFrI_J$)eNZy6GU*ZG|C>MM37=HB?=
zGJ{XlVF)RpL_45E{+`#HK~lPfUyx&WM1OH7vrAORa&$fHRL24-n(KQMeN11*Ehey-
zep2)n^lfc$!2Om2Hb25e!j!pve$0!J{-A(M|H^h=yLUEiwWg}gguLu^nAvdH8d-ts
ztP%pd-c>dbK_m8&lQ`ak)vuCVF|6s|hnG?SrWymL;>t~1j}W@&t^Cym{*=8gA(A3&
z&w+l78EDxcjtfm+*Wkw8CZ^n4FDJ^|zb@Z($B&Y3A|-r%;6~99hSyd2kXMVV9oRE#
zny%qVCicX(ZQHh;oUv_8G_h@KVmq1ejBVSt^X0mq_xl6;=
zdfDgg>)nWGHJH-&B9_PsY}ybhC>wLf!Eb_C&Q(fXk1bxG=h=(a7B1uR;x%XOWcHrT
z!-S6rj?$s!cynNllr4|vO1vmK0FWYgBaU|G!;G(&6YCq|R-C`ATR)oR@v&a3pWbm;$SH
zR(8M2Sv%Z!WpEj!Hf$6W(t3K4IUhO_rr(ba)9vj6P0adNBrFS4E|0?L{Fy1
z6vaF{{#H;aqz^3QZwuY0Ju|6J95}R5C5t9S4k#;e?XMF*Yi&TyVM(n*F}9|&z+3%G
z_yIs*O1javkr-e`&c%Uzm-DX*)-6R_AsTsrRTE53f
z&|e4s%c{~jkBF&n=n*Q^^O1Q>%B0Kv2c&e&)ty#RL`C*}w*|76@NrJ@^vdXb@ML5i
zaVXgJRFgISf0Vs0%-^|SU23p_{9Kpj(?^PgZPQ_7dSO6#W$xk7_RdXj&WU#hVa;qb
zg*rOn=YcPj7c;cEpUV$Ky0QMHwb9yd-tv^IDpjwt?lq-96dL=0)l$na4{~UwDKZ*9
zqj8?yomP`P26a7xwZq+rn}78_R#6r4ULF{v%0JJZW9y*gwGcLpx(f*Gr45Hpy}C4u
zNo!3sU^n;`IDZz}w?oIXln@Hc6JXiMrqpo2(PPy6ef@lq@eeu^Dxh-)k4i%QG5x!;k}G=G#Q;cb*|s@M_DTUgk
za}5-3j))fEw`2(6f1yb`lpRA8?rI%R&X3BJVREXa`9njZOML(ZMWps|$nF?z{khSu
ziK@B1&c+@s=d%F`!#6v;9Cj9MPGC{QwKp~0V?P#@c10yTD}tm4N`w~s-9w6%KNBzH
zhx1x1pl0GV$_hC^4i;nUeByNWCd60l>X=qc!F434gAx+W|08cGBh+S55T670(3+v|
zH>7>g$@pBH2TnLQbl^dTOAhRe>%@&I|JCjC@7H
z^-$PaCOOMg{!&a=08m*oXB)1QGSa_k{V)_C>UQLnsF{K(p&79SHIiA-jRa?UfIG99
zddy?Q++QNo7q_rP3b|k}jYf@*ck$=yNpv5I(VovZb(9joTP&TK-qAT_SyL=1fxuyI
z#nXW>_eUCnwADm8Ep<3=Yk}r{+>#taJ`E|E9ksMdau+{tk*@z_kh1#c=s{&f;KkVw
zOR4bnQ))PiED-;Qr`NuuT(-U?{p)`;YeH{$dox_Zb4;5lz0j>&I?6G)n=k$z!&fmZ
zqgDiDk<`I{Yl9z-?;s5l2;_UTSkv1vAZvPg&5MHQ@5xK_bv+qfU$hjCahVs+uHkrs
zhb*_)aNVN&A$o4%m(Z8(90%_^QGUqT*wHEhaU~VaD&52A;{N@L5=Z7E#ucYCv1e&Y
zaTWBz5S_@5X2EaAC^X9s-41i`z=CJ2|M;E)Nj;^-nJQ%PazO@HTKq?7#S5s_{6vLI
z61WQma+ftGg-Z5?+j=W%DxrV(smW^fIRcV0BK2@M_@-=l>`@Gv1PeZNgioIAg{f=!
zocU^ta+VJo5yoZoJa&blLQmL?_N1mhIpJ$QG@dvtX_nKLRW{|+#!)kaFK4EU47T+I
zr{Mm(&zyK+Zof3)zM`6tvZMXe0cMm8pL2fBDU6A|-`X7_t6k6$D}-l8R&uo5ARJNG
zz{$0ay|c)IU-ROLP#i;uJYzTRRw#+#%0Z-z$%t8YR00du%RIAgh3~1c3(N6!DM^$|
z_{8Bhq4?L(;FFvv{4JYdWtr9D1J8A}+!xD_V^@*}tx%Hd<+4!LgfAw+MfdazKCshu
z5-E+5L9DWE71(ae7I-0&;-*T6y~YLMpZ4zDiu!uc7&zX=|CG~f3;LA}brvU;M1%oox^MZrkG1FWLvRvDizjKT$GV^$4`I4*_ipy7~q#SY!y-ZNjvb^pB~r<65q`|Xv6r?
z4d%ndgIoxZtxVi0JNcHOI#cP3dk{qIWFZ0dUG;=H50u8R(@d%w!rskpxf@9HX~@I^(OY(aK(}D+CvvbJddQa
z)&Q*VToKXnNCm`1ERhSvpmOZE6He70i)
z$cet^{a_agZPT{Km;O-^F~E$G~*8Xzl$
za0YNI)dkVrL5V}Q)m<`#5L-qDVlv%lin?9k9iBdKDd}PXuRr|?AxwY*ayL+S?02Vj
z%;pTCi-6%q{|*k>tq*17jto`-4+{OQ*8vi4N0&MUCd%5DK_&Kz0qM>?ldJk
zPH+C2jxvCb3qGa*S+bE2N2Pc@Ssr5@6~WDf$*73m$>trcqetu&IAj(enlJgngE!9i
z2fz5fB_lX_04yc4*>T#l6%3{^c6Cu5j1a|xR)t#u13Ww(o&9bM{0>)BeTwZ3Lev;?
z)lJwg2J(meWEA+}JK|^?$X*JmMAk5!Yes
z)#CJii$UB3ns1NGs{uj-M58hXA~T^0$=xKaYeziA;)7GgAyY?S7yS5L
zUJk-8<`6A;+;(%pbBSJ-42U?hk)&m$EYzs)wBpr+z6UeaK@!x0`%hH|5+~&fhRq}n
zQt&9ZI`PD%IjrubuM&n4D({(<6vdJS4-6w^e=s5b9#4pmW&jW)L6DF(fU6Zih&6UE
zkAZq~LgRh?;BL)%G!>5eoRLq+49<)kmF!@e7y^CE6+KJVuQyv{eW_W8OHZf#TPxoa
z%e0KL(+K-r?zUPxl9R7d`iVop_PC)sh*J4MDF=}*wJr07YCN4u6`H*lk?*KVd!>#*u}Opud`
z1C$e66PNo!iG@!K4Iy<|F-TNJAK#YIr$xHl0UZa}>OztFoq^<{+H0il-%{wCq$f+;AFe3X)jn2;|Fm?Ov+aA^R4{LmzP#k-)
zW12gpCQ}gE11&3<|BGU&Zr`xXY?p}LD6o$|c=DAPg-Q(1`F15nJbfa%Jh!B9esKW9
zV>a5}s|5bKD~FgB$x*02cJ_Py#eEoHkrEoN#1%
zRv@0M5Q(i;J8F8!U2Nb4@JrwTcOVuUo&YoM_K5oZ=5cNLaj>*(wH3l?RX>jr(pZej
zBh1Mpn%tGRS)s13Qhs_@g&kZuEX%Q`Z%l;GiF&kP*Hk5JWM=4e@%3*K!z`A
zpc!rBP(_sQ#9vb{2bI|x2p(CiNuB&pk@Uh{jwhv^j;H?k&3j&6`Ng3AU^H+A3PdSf
z^!W$b^ICbv^m!O(7$PWcWP0ska@hB8c_$t_UgXL2h=08zgjNBSbk=oeW8lkApB=+r
z$0SK~&v1je^n$Bjn=)o`;BYeA4YE<
z_THK^PR_1l+Vuw+dOsPv)huNLwXlDUYTrNuTea_Z3!`+jXB?ioi2yIGvg=+Ccp~~a
zeKoYKTUlXhl7ED^tCCir_@W?%b$?yU+kaFm^EKxn6K;
zCZ1)kQC^HS0Sh=O-vxSWr0C@1>LE@b&Q|Be=raX7!l`6!U8Af?-Dag#sDx&NJ{^0g
z`qz?5Mviy^`uK?W@}(Hmux8=^b9|nhcA$~J65eqdo7)YltnXx$$>=}-L{<)Ycxd74
z>!^LJMf71)=6j=y#Cb9pS~tXCf6+|KMSD6F*+@(#rm}P6M@o^AvuLU$J`mO!6uJ2$
z;2bM_36&%>>*OWdROS*|@yRo}5R)c?82=Wa{dgrYdVRt4_zooL+*s|wc9a|zWkl8?
zsg!-G%uDL3!bdK`GP}UT`aZhW`~~YIW~iK%06s`FV3C*<(@x>2Aev_-+&QfYo)oJ9
z!LS+1I%&18Hs0sdrrr;6tuIGh|E-O74nr4~_KuDYAt7NfFfviaBqUK`QE*i-CFKK!
zGD)ZiR!NS+4r{=M`;&jp8q4w!1dh%5@2j&f|NWN_`p0v(8=p%Jrc-Q<(}$!Ert&Ge
zY$<4M=`@WPjSaX_I=Til?aS{jO=8});Ba&D^8{XDvN5=pu#H+3X=MoaC)HH1C+8MV
z)dH!49*4f|1oiEK*4TM%aY=4NWjhgV%&O*k|at
zvOkU*ad*^lqm>j^C$?%;UV@iNaZ1R&xW^t7bdBdfR7_vvv@X`nUn78rrRE`fT>q5LYFvOl;oQ|yb}WX{ZmE@Z+kL^hTkt(dRRt4T14YL>^`
zU@5Fn%3S{m5qGumx!htYuDatRN@+x?3(a+EJvg+9paZFMU|tpp5lSPVg%?`fx!p8z
zJ4g3{ocvV*BD2C&9*IUHH6{=3=Em-JoGfU%h{c$Zv|Oapmz?mIwno);)$>79mT45d
zYCT}}K?z!W^kap;^(%CKy2LJAEJwf$x;P~$>3B+F79C(
zr9YW?uGp6IEq6(pm@n8E=y8f-XPN6Y>^~zK`1vA6GpKwUS*#{;ftfZhGif*tu(nq0
zOGfTXI?I^PGqsNFDkNba?K#!tdGPjUOB*bk>sng{)T@DpnVYTuUC6W8YN1@dbG5Nn
zBd=EkA+Gn>D7BWhKX2rE#_+5HP`0xpc1#@i{JkWQQW~`5DSMHCmYB#KN3Pzlb
z)A!V(HkwL+SXiXeJ4e=7HB+{$Xzo67WyehVQL^MW21(m->Tj&E7{M^~#l9q96V1hI
z)G|tzR4*IOP?>qQk+{#rh)B`ntUb}-2-Rt3*>v0LNjbwJ21OL?abx1~Pq|!As57S)
zsv5gqo3>L{@VR2;Kn|~e`sxWs0ZxOy#rLMOS%N0~zDS;cKRP3P)nI#ZKp)IryE++l
z6{`??&?YH0s~w9rUSwt7QTp`Yv}7M8D8UfUDwjtln>#!hzL~vQ8YstEBJ?_+qs?Zp@Ku+{B7O~^Qa7Y5>m{t&JyMU9lX-Raf_VKxD*m*S%ArMvNfw
zz6f2RfMqc5q>tPQ{{w9;>_?UQf5%i;e#Ecddv`cAWRQHR
zZ^OVA=_g=da^Kp+_*7lO81r)LQb(TZx4Y%#PHtuTleuT$k6AyTlpg}$6fFU-QD@6-
zHL+J-Wnh)c(*!QPF+Z{h_$pGsNp1af@}nt98}mhDKjl
z1oVB@B0Ul
zA$zO@N}F(fU7?69rh6-;#63&_%%;54aXZk2itQO{FJ|}5Hpp(l9t*(<*6-YYUL@j-IIvNzqIrWzphc+3`K>!
zM*m}}a59h|wY^BzSu-kh{?{uHt-Cr^YjZj^FRZ4kA>it*9gpGD_UiUP+P@%~;Q)DX
z6p4{D*2S{F@>OX1@mGSJff?(jwOOIfhyJo9hJWr(>U%%6X6k6Qs;8mVEy(rjxk&X%
z@4Xs4@03pyo{##zx9!vn39z3^^V#0vM%MNy_$W&@@vKccF~Jp4rEc|a5gD<6Xb*~R
zFURxOGiEWI$M=G6$EZz!R@L`4;`hS;hwoS_peF0k`FL0+G=_WS7tew6AX@}Z;qd{=l;
zI>M3-F@#`aGI{d=YUATpK@@qNf_#ey6*IM
zu~WByz`BIr5IOjk-zF>zvnVvBSaM$dzQb?R4?^pwt2QKRfA@guuZ|(lFA8@e6^y5G
zM;ok54n#|~zSVDJLZ6%_&sKoaHDG+Hcl3H~mO>v?QX5>w%@CRA{{<|*B!k*$)2{He
z;Aq2?XR+J+yYRhbB;iioN`Axg^S<|CUyon(?#Kvn3X|YuWu4vk+%Kg$Mze<<>+s<-
z^mPdNO61*J7YZXaQ!~eEx$(Xt9EpHXxVJeyNPj$D{q*N)^^O2m-Rgn!J
zLpD>!_z_3K-7&Ha34s83eJwr3@TfPd#^*%A0xzob8}m{q+u`ctP#=r
z+YJi68@=Rk3YzwX2$6K&YnC=`QD?EM!hcKJHGS*@tK>|v{Eax-ul2%FOq{IP^sGn-
z@82HvG@#;Q;1!Jq1ceTl-5Mb(FqVDyB@YInv5&L9#ro^#ACL9*f`XZTTYi8SSe^Jb
z4a#eW8>cddk;Dz&#(ij!gUpERj-?uMp$|OJH*I69!iE9rf=m
zO(PL*lKEE3K!BM2V=E>5{-2?sZkWAxKvPD^xuec0G_*@7THx>ItW*yDTEh(xAZJgO
ztUdg^BAi&J=AK&4##i>H0?u|ssq>F5%l5kD*JBK4dVfGvwM#W=VO(SSN0i(#uy{}T
z+JTi;XBH4q2h*B=ksrkym_Ame{$6#u!y&^Gm6=SCs)z>K5L;{r)4Nd(Ox$ch3v}yr
z{Ch29A$q0DFo9Ng@Akt0{KLCQ2<@vif>?MC{`0(3v;gzJd-d*O)^xQBc%DBmztEz1
z7+|B+p?bet94Mntd5xM^FOZdosP9;f>zCWGp)SGiCtk@s$}aF-yxMHf?i?=+q{XKlfHf10Ri7`@47>~~wO~_Fw;mF70+dOm&pUMjYw!p}{{Wg{tX_=VqrH?n0elI~CV+j8wAt^NT&*R~tDPxnN7z~z0_
zaHt9eX)o$Pv%k`xJc$|d_VBU4R`ZUp;V#wc6`r1yx{81eh*NlqkYzn2}uWrCU#DN`l3^b8a#~3;fd0vT5a(R{t}bMKvGq
zKo*R2Bf8l$u>#A{`s>!E%Or;fKq^F}G)$c-%$tqDZ#by*Gkj@bV}I+7Z?kmCn7~J+
zW1xNI&zlZ;?Qn}Zx)!}n9}-@*9*|EH{-l^#
zu%rNk4@NIA++jrAFy=PcPl>eb4WX&Z
zQw3al{hneGDErE-aUvJ6U#@&N4Lo`HYYWY+5mJ{;EPSWJKeRZ0EhWydIK5r$8=sDESXy
znl;@H<*60_aruS1xa;Zm%cuOOI&OoL6V_pTsv?<1h#7SfIiN{dh5#iX@e4fbV{*4L
zn7WJUrH*5F!K}~+b7_~Ej!R7G(z0n$NN?_p0H!X5_Wvbq5MWC_=GsgCE)rYNt
zL$1CIFQk&jPz>)S#4PA*2c{aeMk$8b&gl7)JGiErvx!%s_Cnui)2|1m>h6rQ#Rz;4
z<7M|qFV|Dxsc5KhjGI3mjMj+G1Wp}$E?q7~anJXXKt`ieHxwiBWLG`wDrbnC*mp6R
zSu}(?;FLEf)jeTvS^4(rGvzyqZ+l%e2GiVVGGQ*uf^3#@by-Z=P&=mCq^K80If%R<
zeMav_uKzock^EhOMvaY?KN3@wmc@S$I^K
z?lE;HvCHNQ5rfXqiwrkGSv?yF`u}nnb$cgdADP;;B2hg^HyZMV&n(W&W;2db!7@G4
zr=VA3y3RdLc;Q@R+)(Dr!7H&V5iN^C=#;2wJYDp?*CKX@*e2a;qFauINK!jwBd_N(
z`t9%WH;;yzYIjrxm$H~N+q{j8pz$`!d}G}57V|0H?JJ<@aHN5{&Yv8}
zQ=%lev2{~itSd=Xfnv4K-?>~*p8E9SPnT%Z`kbBYKsFn~O*Nzr!x;G&t{5E8Gn#0$
zXG=LG85Mxzc{7-qnL_#f!Z`wa?XkA`|E=TX_u=)V|n$ox?G
zslvfMv!Q%i`Cda~n>33vx{0LCobxIzSTV#b?HHE@M$;<;MU+FpGul)wB_)FSWy|?*
z0>cE|IZJxBAOoj_WlgJ=L$$(Zm|lUeJ8M4vn@dV}y)z*_^U4TMCFkshS|^G4kD{9`
zSKw9
zk*LUO(Eq~?Cb(U&A)_fJZa0J}3VM^PW7;|jvg7@h166TE-lm%b3%OHo8btQY(L9e_
zV=N}SV2?J>IbZ6sI}NMqwI)%U(ai9tcV1_=sBW{T2}T;VR08xL8PNu;`P*~jGxP&A
z(xCq#ZX)L2;ohY_E6$6#ifk%_>wqtT%#}*;%4@lX@)=K}%qlzbZi$c!oqnM6BNE4q
zzU(*mUI2TH$w*4bxB?XGlmRIZ#@9e&G)E(&HK{Z?Eb4B$)Ia3!?}|b&IvRa|dOiBZ
zMoj#f^?BZU#*SX+b&f!BCrOf#3*JH`9{6q!OAezB-}q8+mE)F@;cRkGi5*29A@EbTzzhG?hPngu=&xn`J4c59woZf
zhP#$fhFeQT4ArA(E!!mA$w_Jm{cSd4k!AByxh9AQtZR7!GdVjUPaO(uIP6{ylGT~=
zA|8l6yidK>u>7m&V)+L5C|A)_p*-wQCvMr_C5wH#kiqcWd1c==j>BSd9FM*{4?tujb>P9s>SW
znP^#l0fM0`C^172b4hT!(akLLXL-!?l{dUPH(I`599&p3
zT0yKG`45l(y725u;E1XJQHE4b4D#)Ef|0QP37%{MR(dY2)hp;!?NcafdV{~xH^$SM
zGF$w)g+zlH3=m!ei417XFHb*kJ1yzv#6_JRw%N_(a{F~Y1oC=QfnhKLz?!X(-U4`v
zR%0!1%}|vTUe&5nu++~g%Zz?$`8MLqdhZEp{*QYaZdbfs3hx4Fp62io0b9d|PoBEO
zh~x8-LzOHuTW#h}b26tf)C=LF2r%0JxeLs$L=3S7^uIBtNxu&ygAjWTxBrg3ua80U
zbdl)G8)YqjA{zMdN6u7KTeplFvV&u?9`QU{)2RkodjlB3cRGyda-(x6qdt^^uMC8q
zjJBBECJkuUoKmcJR&80*CdWI?8Cewwl
z>R{6z&(J^l-BKAZnuWuXX427C{Sthv9_Jr}Jp!Bh%gc6Hh>H`ac
zdXGD0?#x1WO~Rj&L%4R4bH5sS2A4j3d+jDoBRa;TR!m5FX@hlACmXD