From edf75479d2ff180b73daba895a528b09a7a7d6f9 Mon Sep 17 00:00:00 2001 From: Harrison Ravazzolo <38767391+harrisonravazzolo@users.noreply.github.com> Date: Wed, 13 Aug 2025 18:01:05 -0700 Subject: [PATCH] CrowdStrike Falcon Deploy Guide (#31814) Guide for deploying CS Falcon. Still needs a few links added, in draft for review --------- Co-authored-by: Brock Walters <153771548+nonpunctual@users.noreply.github.com> Co-authored-by: Mike Thomas <78363703+mike-j-thomas@users.noreply.github.com> Co-authored-by: Eric --- articles/deploying-crowdstrike-with-fleet.md | 137 ++++++++++++++++++ .../crowdstrike-full-disk-access.mobileconfig | 79 ++++++++++ .../crowdstrike-notification.mobileconfig | 58 ++++++++ ...rowdstrike-service-management.mobileconfig | 60 ++++++++ .../crowdstrike-system-extension.mobileconfig | 61 ++++++++ .../crowdstrike-web-filter.mobileconfig | 57 ++++++++ .../fleet-crowdstrike-cover-800x450@2x.png | Bin 0 -> 62095 bytes 7 files changed, 452 insertions(+) create mode 100644 articles/deploying-crowdstrike-with-fleet.md create mode 100644 assets/configuration-profiles/crowdstrike-full-disk-access.mobileconfig create mode 100644 assets/configuration-profiles/crowdstrike-notification.mobileconfig create mode 100644 assets/configuration-profiles/crowdstrike-service-management.mobileconfig create mode 100644 assets/configuration-profiles/crowdstrike-system-extension.mobileconfig create mode 100644 assets/configuration-profiles/crowdstrike-web-filter.mobileconfig create mode 100644 website/assets/images/articles/fleet-crowdstrike-cover-800x450@2x.png diff --git a/articles/deploying-crowdstrike-with-fleet.md b/articles/deploying-crowdstrike-with-fleet.md new file mode 100644 index 0000000000..bc11b59191 --- /dev/null +++ b/articles/deploying-crowdstrike-with-fleet.md @@ -0,0 +1,137 @@ +# Deploy CrowdStrike Falcon with Fleet + +This guide will show you how to deploy CrowdStrike Falcon on macOS, Linux and Windows using Fleet. It covers installing the CrowdStrike Falcon application, creating a post-install script for collecting the CrowdStrike Customer ID for activation and deploying required application configurations. + +## Upload the CrowdStrike Falcon installer to Fleet + +1. In the Falcon console, go to **Host setup and management** > **Sensor Downloads**. +2. Download the installer for the appropriate OS and architecture. +3. In Fleet, go to **Software > Add software > Custom package** to upload the installer. +4. Select **Automatic install** or **Self-service** if these options apply to your environment. + +>If needed, use [labels](https://fleetdm.com/guides/managing-labels-in-fleet) to scope installations for different hardware architectures. + +## Create a post-install script for collecting the CrowdStrike Customer ID + +Your CrowdStrike **Customer ID** can be found on the Sensor download page in the CrowdStrike console. + +The **Customer ID** _must be collected_ during the installation to activate the Falcon application. Adding the platfom-specifc scripts below as a post-install action to the uploaded CrowdStrike Falcon custom package settings in Fleet will allow the host on which the application has been installed to collect the **Customer ID** for activation in the CrowdStrike tenant. + +>For reference, Crowdstrike Falcon scripts and install documentation can be found at: https://github.com/CrowdStrike/falcon-scripts + +## macOS + +If your organization is using Fleet GitOps and you want to pass the CrowdStrike site key as a secret, follow this guide: https://fleetdm.com/guides/secrets-in-scripts-and-configuration-profiles. + +For admins using the macOS Setup Experience in Fleet, we recommend adding the Falcon application to the list of software being installed during initial provisioning. + +### Upload a macOS post-install script to Fleet for collecting the CrowdStrike Customer ID + +To use this script, copy your **Customer ID** from the CrowdStrike console, then, paste it into the value for the `CUSTOMER_ID` variable below. Next, copy the modified script to the CrowdStrike Falcon custom package settings as a post-install action in Fleet: + +``` +#!/bin/bash +CUSTOMER_ID="YOUR-CUSTOMER-ID-HERE" +FALCON_PATH="/Applications/Falcon.app/Contents/Resources/falconctl" + +sudo "$FALCON_PATH" license "$CUSTOMER_ID" + +# Check status +if [ $? -eq 0 ]; then + echo "Activation completed" +else + echo "Activation failed" + exit 1 +fi +``` + +### Upload macOS configuration files to Fleet + +CrowdStrike Falcon requires multiple `.mobileconfig` payloads on macOS. + +>These payloads can be combined into a single Configuration Profile, or, delivered in separate Configuration Profiles for modularity and easier reading. + +`crowdstrike-service-management.mobileconfig` - Configure CrowdStrike Falcon as a managed login item so its services can't be stopped by end users. + +`crowdstrike-notification.mobileconfig` - Suppress notifications to reduce end user notifcation fatigue. (This is a best practice for many fully-managed applications.) + +`crowdstrike-system-extension` - Install the CrowdStrike Falcon System Extension to allow all necessary application entitlements and access to the macOS kernel. + +`crowdstrike-web-filter.mobileconfig` - Enable web filtering to monitor network traffic at the socket level. + +`crowdstrike-full-disk-access.mobileconfig` - Grant full disk access to all CrowdStrike application processes using the CrowdStrike Apple Developer team identifier. + +## Linux + +### Upload a Linux post-install script to Fleet for collecting the CrowdStrike Customer ID + +To use this script, copy your **Customer ID** from the CrowdStrike console, then, paste it into the value for the `FalconCid` variable below. Next, copy the modified script to the CrowdStrike Falcon custom package settings as a post-install action in Fleet: + +``` +#!/bin/bash + +# Set your Customer ID here +FalconCid = "YOUR-CUSTOMER-ID-HERE + +echo "Setting CrowdStrike Falcon Customer ID: $FalconCid" + +# Set the Customer ID +sudo /opt/CrowdStrike/falconctl -s --cid="$FalconCid" + +# Check if the command was successful +if [ $? -eq 0 ]; then + echo "Customer ID set successfully!" + + # Verify the setting + echo "Verifying Customer ID..." + sudo /opt/CrowdStrike/falconctl -g --cid +else + echo "Error: Failed to set Customer ID" + exit 1 +fi +``` + +Admins can verify the installation by running the following command which searches for the falcon-sensor binary: + +``` +sudo ps -e | grep falcon-sensor +``` + +## Windows + +CrowdStrike offers `.exe` and `.msi` Falcon installers for Windows. Using the `.msi` inataller in Fleet is preferred as this installer type performs a silent, fully-automated installation when using the **Automatic install** option. + +### Upload a Windows post-install script to Fleet for collecting the CrowdStrike Customer ID + +To use this script, copy your **Customer ID** from the CrowdStrike console, then, paste it into the value for the `$FalconCid` variable below. Next, copy the modified script to the CrowdStrike Falcon custom package settings as a post-install action in Fleet: + +``` +# Set your Customer ID here +$FalconCid = "YOUR-CUSTOMER-ID-HERE" + +$logFile = "${env:TEMP}/fleet-install-software.log" +try { +$installProcess = Start-Process msiexec.exe ` + -ArgumentList "/quiet /norestart /lv ${logFile} /i `"${env:INSTALLER_PATH}`" CID=${FalconCid}" ` + -PassThru -Verb RunAs -Wait +Get-Content $logFile -Tail 500 +Exit $installProcess.ExitCode +} catch { + Write-Host "Error: $_" + Exit 1 +} +``` + +There are several other flags that can be added to this script. See: https://github.com/CrowdStrike/falcon-scripts for a list of supported options. + +## Conclusion + +Fleet offers admins a straight-forward approach to deploying the CrowdStrike Falcon application across your macOS, Linux and Windows hosts. See https://fleetdm.com/guides/deploy-software-packages for more information on installing software packages using Fleet. + + + + + + + + diff --git a/assets/configuration-profiles/crowdstrike-full-disk-access.mobileconfig b/assets/configuration-profiles/crowdstrike-full-disk-access.mobileconfig new file mode 100644 index 0000000000..a6b05c7bde --- /dev/null +++ b/assets/configuration-profiles/crowdstrike-full-disk-access.mobileconfig @@ -0,0 +1,79 @@ + + + + + PayloadContent + + + PayloadDescription + Configures Privacy Preferences Policy Control settings for CrowdStrike + PayloadDisplayName + Full Disk Access - Crowdstrike + PayloadIdentifier + com.fleet.privacy + PayloadOrganization + CrowdStrike Inc. + PayloadType + com.apple.TCC.configuration-profile-policy + PayloadUUID + C7B25543-8A46-4782-B5F1-FABF2CC07934 + PayloadVersion + 1 + Services + + SystemPolicyAllFiles + + + Allowed + + CodeRequirement + identifier "com.crowdstrike.falcon.Agent" and anchor apple generic and certificate 1[field.1.2.840.113635.100.6.2.6] /* exists */ and certificate leaf[field.1.2.840.113635.100.6.1.13] /* exists */ and certificate leaf[subject.OU] = X9E956P446 + Comment + + Identifier + com.crowdstrike.falcon.Agent + IdentifierType + bundleID + StaticCode + + + + Allowed + + CodeRequirement + identifier "com.crowdstrike.falcon.App" and anchor apple generic and certificate 1[field.1.2.840.113635.100.6.2.6] /* exists */ and certificate leaf[field.1.2.840.113635.100.6.1.13] /* exists */ and certificate leaf[subject.OU] = X9E956P446 + Comment + + Identifier + com.crowdstrike.falcon.App + IdentifierType + bundleID + StaticCode + + + + + + + PayloadDescription + CrowdStrike Falcon Full Disk Access + PayloadDisplayName + CrowdStrike - Privacy Preferences + PayloadEnabled + + PayloadIdentifier + com.fleet.privacy + PayloadOrganization + Fleet + PayloadRemovalDisallowed + + PayloadScope + System + PayloadType + Configuration + PayloadUUID + A4A2274E-370D-4641-A248-7A637ADFB169 + PayloadVersion + 1 + + \ No newline at end of file diff --git a/assets/configuration-profiles/crowdstrike-notification.mobileconfig b/assets/configuration-profiles/crowdstrike-notification.mobileconfig new file mode 100644 index 0000000000..6ab64184bf --- /dev/null +++ b/assets/configuration-profiles/crowdstrike-notification.mobileconfig @@ -0,0 +1,58 @@ + + + + + PayloadContent + + + NotificationSettings + + + AlertType + 1 + BundleIdentifier + com.crowdstrike.falcon.UserAgent + CriticalAlertEnabled + + NotificationsEnabled + + ShowInLockScreen + + ShowInNotificationCenter + + + + PayloadDisplayName + Notifications + PayloadIdentifier + com.fleet.notifications + PayloadType + com.apple.notificationsettings + PayloadUUID + F5E94A3F-6E76-4A28-AF32-068455731244 + PayloadVersion + 1 + + + PayloadDescription + CrowdStrike Falcon Notification settings + PayloadDisplayName + CrowdStrike - Notifications + PayloadEnabled + + PayloadIdentifier + com.fleet.notifications + PayloadOrganization + Fleet + PayloadRemovalDisallowed + + PayloadScope + System + PayloadType + Configuration + PayloadUUID + F749D9AF-DE8B-45B0-98F5-CACA98C67FEC + PayloadVersion + 1 + + \ No newline at end of file diff --git a/assets/configuration-profiles/crowdstrike-service-management.mobileconfig b/assets/configuration-profiles/crowdstrike-service-management.mobileconfig new file mode 100644 index 0000000000..3d440cc1ea --- /dev/null +++ b/assets/configuration-profiles/crowdstrike-service-management.mobileconfig @@ -0,0 +1,60 @@ + + + + + PayloadContent + + + PayloadDescription + Configures Service Management settings for CrowdStrike Falcon + PayloadDisplayName + Service Management + PayloadIdentifier + com.fleet.servicemanagement + PayloadOrganization + CrowdStrike Inc. + PayloadType + com.apple.servicemanagement + PayloadUUID + B2C3D4E5-F6G7-8901-2345-678901BCDEFG + PayloadVersion + 1 + Rules + + + RuleType + BundleIdentifier + RuleValue + com.crowdstrike.falcon.UserAgent + + + RuleType + TeamIdentifier + RuleValue + X9E956P446 + + + + + PayloadDescription + CrowdStrike Falcon Service Management configuration + PayloadDisplayName + CrowdStrike - Service Management + PayloadEnabled + + PayloadIdentifier + com.fleet.servicemanagement + PayloadOrganization + Fleet + PayloadRemovalDisallowed + + PayloadScope + System + PayloadType + Configuration + PayloadUUID + 5007F4E7-372B-4B90-8E64-BDC59E4C1D93 + PayloadVersion + 1 + + \ No newline at end of file diff --git a/assets/configuration-profiles/crowdstrike-system-extension.mobileconfig b/assets/configuration-profiles/crowdstrike-system-extension.mobileconfig new file mode 100644 index 0000000000..809f06cdba --- /dev/null +++ b/assets/configuration-profiles/crowdstrike-system-extension.mobileconfig @@ -0,0 +1,61 @@ + + + + + PayloadContent + + + AllowUserOverrides + + AllowedSystemExtensions + + X9E956P446 + + com.crowdstrike.falcon.Agent + + + NonRemovableFromUISystemExtensions + + X9E956P446 + + com.crowdstrike.falcon.Agent + + + PayloadDescription + Configures System Extensions Policy settings for CrowdStrike Falcon + PayloadDisplayName + System Extensions - Crowdstrike + PayloadIdentifier + com.fleet.systemextensions + PayloadOrganization + CrowdStrike Inc. + PayloadType + com.apple.system-extension-policy + PayloadUUID + 6527669C-0C1F-4B84-998F-33902DBFEB86 + PayloadVersion + 1 + + + PayloadDescription + CrowdStrike Falcon System Extensions configuration + PayloadDisplayName + CrowdStrike - System Extensions + PayloadEnabled + + PayloadIdentifier + com.fleet.systemextensions + PayloadOrganization + Fleet + PayloadRemovalDisallowed + + PayloadScope + System + PayloadType + Configuration + PayloadUUID + C84A8495-1B68-4C28-B29B-FDF3A40018D4 + PayloadVersion + 1 + + \ No newline at end of file diff --git a/assets/configuration-profiles/crowdstrike-web-filter.mobileconfig b/assets/configuration-profiles/crowdstrike-web-filter.mobileconfig new file mode 100644 index 0000000000..51b49618f8 --- /dev/null +++ b/assets/configuration-profiles/crowdstrike-web-filter.mobileconfig @@ -0,0 +1,57 @@ + + + + + PayloadContent + + + FilterDataProviderBundleIdentifier + com.crowdstrike.falcon.Agent + FilterDataProviderDesignatedRequirement + identifier "com.crowdstrike.falcon.Agent" and anchor apple generic and certificate 1[field.1.2.840.113635.100.6.2.6] and certificate leaf[field.1.2.840.113635.100.6.1.13] and certificate leaf[subject.OU] = "X9E956P446" + FilterGrade + inspector + FilterPackets + + FilterSockets + + FilterType + Plugin + Organization + CrowdStrike Inc. + PayloadDisplayName + Web Content Filter + PayloadIdentifier + com.fleet.webfilter + PayloadType + com.apple.webcontent-filter + PayloadUUID + E63C7607-408B-485F-BF2F-0900AAE6797F + PayloadVersion + 1 + PluginBundleID + com.crowdstrike.falcon.App + + + PayloadDescription + CrowdStrike Falcon Web Content Filter configuration + PayloadDisplayName + CrowdStrike - Web Filter + PayloadEnabled + + PayloadIdentifier + com.fleet.webfilter + PayloadOrganization + Fleet + PayloadRemovalDisallowed + + PayloadScope + System + PayloadType + Configuration + PayloadUUID + 141ECE18-BC29-4A0E-9743-055A4E649512 + PayloadVersion + 1 + + \ No newline at end of file diff --git a/website/assets/images/articles/fleet-crowdstrike-cover-800x450@2x.png b/website/assets/images/articles/fleet-crowdstrike-cover-800x450@2x.png new file mode 100644 index 0000000000000000000000000000000000000000..c0a0d6c361143cece3e0171af4ed4dedd99f3929 GIT binary patch literal 62095 zcmeFac{o&k{69QMG-Sz|Vn!;mXU{rzMV1g*lM30Fu`?)p3<*W{T_M@`$X2p1V;g(+ zHOts$JZIeZU46gL?|S}uuIu+#=a0-8=X1{Iy}jP+QK+W6@_8^57z6^HzpbKh4+J9j z1A$0LNzVe`;2s)^fHt~=I@&8{XHb-h|hO0LYBWF!7OLP^RzZ*7*DYuG$RobP< z`uN_1JK2SbQ7?6$U0h8!DpjciS&b6+pPhLs=fb376LQBzWhXsXQPSx3j%)yRE|X54 z(2MX)@SWLG^%6;8Ue`x$8e8&x2lo6L#yKLZq{{(uK z9YpZoXW*xb`v2%jM7;x@`Qx|HTLk~3f#F05bU%I_esgD_zfOP;U(dn*Jbgvu_vh)~ z2mfXDU*-C1PJdv+UjX?FnSY(cUw{1PRK(v1Ayokt1<;mXJ-r{O0PcPB`#`+@K{^wlY-;DTg4FL8hSpUVUzgYEu4XgeStp208 zSM~p0j{|@X)_M1PWLt+h$?W1{_)Q@xsvLIH(63b%H1VyzM@j2L@ZK^fADdj8utf3l zF0^R3jI|DppnY>_^pe;ux83u1JJA;N$;QbI^gE@(%5Gy}2VVAW)<&o*fx-=&P$iL( zlV@s4(wF)hs(3X_UcTM_(tth5{+4g~pyql)%}{fG=cSC@(Os<(7x~{76!C*uyT8Q# z3`i4B*4tK6v=JGvZ2GdLve?{ue6&t*qW?gzcW9g?Vyb;g=XkYQ|FW3Z7Ud&k#rqK1 z351W~YNg%o_yS!oY1pFqaZfZOwx#i4YF0zH85(={Qie5(c{_ywWa*ueG2835go z4mmLq@h{I{v($bdSS;Oi+k~l)%pS!m?s*`RtG5nd!N$nNu^QJ{SGr76ndJ3Lq4iZq z_eLCjyv7H|9*j}}Uv`}=<~U@N9} z+btDtvv4(v^*x`dkKG@1OL_U$`HPmV;&HDtCO89&HY5c3wO;uz4Yl+J!f*XY^4dgO z5xDNQysvucabdzy8k0M*rPS?i2oLGxB}llzGi$4`qY8LS`FpPD-galc=BXH&FoTs* zxYq|XTp0xF5&PvBB8qN+{H|#?Lnv9W3khwI?TuvVqZK!e9c2;ZWih?&{R~a+2+2|e zf3nO?mJxvF3f?W{>G9;0t_H|2#o(X>DCdq2+|MArx$GKL<%TE|`!fFE6UPkFlZ5eN z*XB{!etHQ1^6fLfv&kO-QGVBc0%V|sar*ooR;wu1I{~C~d29@QFBlZhI5|DOzHB>J z#jwnR;O6MkdPnl>aqSv_5vxvZX`3RoV~P~$6+?awpLpL|&ihCHYAmBNjDRU9)O}CB zq)vn2X7v84eDmPj)~_3YoB;WJrW+M4Wlv@vW*(`PJbWa1wJuph`PB}E;4PYBzkZzt9XCTLjR8?_@{kT89~X=({e$*NL-b9UYh|I@#w)m0k`=`_**O|tBL6&yzw*)Lk=*Z@f?a@-d-Vez^7EnRG* zm+2kmAm)euiT>tsXmM_NFP0=jt(B7b+^;222wq|2-p(M2bFLp|B;alAYxG-=7$OVy zjM40_cM$>?PqO}~NDEv51a{>zj~U3xh;4Lcs<@H14Z=H$?2cAYhJ+rF+ zy0gax9?y|~@t#h9Pjgmo+=w%qmQoA&cXjxmYt1Y@q2DYm^F0?>5ZeZgYDQnN8+7WJykpn+F3uC zwRrBv4sm1*S)=|p!D$vxcH@NdpU6Ma*3rI56jdIVU0Lt^L`QW+SWo$)a1qaf({HH> z3E+3q6jZ+4N;~MF-8Ph)J(2vgz}N^ia$#^_yzF`c=lgWEux*3ig!y^nHILK~wHorN zs`wj$N-^kOIbD?P3YV7cny7uKfK{E+@ozR<#A_clC)a&Fsa*X#XfBkV4?*T8Ze=t> zt=!lc3(B00v(>uJyy5l7i#-RVc#SQ0jk6%0YmLMx@YpO_MSQ9(bbfM|Ue%z;7;-mO zSBpOOuITUPSrig4?4_aPq+WpEuN#w4-dCQbRph{NoX;ui-iyf8T){2Y+Iqc~ZR6R9 zm@gFmy~BT$J^zC~vzyUwZ@V1;>x(8;yw85DPjs~x>f?q1$20IPVa$%F1+0Q9l=y8~ z?Y9Bp=uHu=NGJFbXWn0dkbV0|=%lwHkr4-cc!VYTPvHNe6UTiRZZE-$?Y%@%eNi@W z`TFD#oh{F;lkXfeuMG+TP`nQ_cy*Ruao_C!wf69{E+o9b+EqaW;9*-5YMf!Wr+?_O z8_NC3>>5Y<>nrMc!H9)8+Z?*`99Ovb^uIp_iU4 zU75#LUQncP9W!40R9ZbR{@Z*+vB*fDl4EkDVL9=y^-+lcZ{uJ;L>m?3Natb_>-pW{ z;9B;W6Gc6|o?INS`;k;Ud$^Zd@yIq~yL>HLmfDwg;WvYS;-UG%jeu~C&R~Y!2-rGy zySw!+vmx7aKsWc>FuMbAc!p*(#BJAAiCzkF;DFW>9krjhpyzYU_WLfcpW}DY6I6Z| zZb)dwbzjBq@Xq*XiJ-uZ8D#fleW9HybOZn&Mekx)6tfnkqW32p?hiE3WZ8I=knF<- zxJF?h@$+mPRRR)@x4prXpyR*77iL4{iXztk=$&CZ#%(t$ODYi81WqIN-RrYm% zf-l(I;gLxGlQCfT+v~#HD{N2rz3jxge79?E!mB+S*nz-lVHP=LZQY(s2sR7A?>~o-G=KpED%1h1m&OGl0o<NY?E2g9?ikp+(ZH_@+t{!NVbk zREm(AD7*ry^4@ZzR_V{zeT2N`V&)>Lp2QULg^xL0JBMVx5VepTfj#s!^Ts(lns&MR zI(SJQo1QR%F0LINq*X4|cPmOAFT~?+;BXlb@?1Q`pB}JTYYGsQxUntqob<$p5UDc| z)r=4+3Wzj)Fmk7@9veKfsan*f3^_iD^8)=s3{5`#uHz!E9J+gBG-lemSHr(3M}}Vf zm!lvM$9en%&aYuIkdKyrEdza10ay)_7eDSRc0UfanCDad9n-x|0xZZc=+nkR@JwTH zz3tksWqv{Ucr=yuowyVgrSF==cKGjAJ(hSmzMf!1N?)Xu-bt!-Fq8bXi&Sd7esUB% z+MP9(#taTuoM`^~9gGd%Y|^}g-0;25vfuaR{%=Imr$4=C7m=yA7>mbF-mf)&KjiTH zw=!a6Mv~yL(|8(w<82%bp5`n7Dlp?mRbl{*e=N+t0Rlm9ZT)tK9jD~(NFPw1T*v*o z@ZkgeuA)ZqkKS98q5buXkMHoLsH`*=`AGb)J>e$_V0VH|#pzEvCQd+l9+MvR3z*By zODcZq0&m4`msO&z#(g4$5?!jF5oX$rI#*DCPx|0y-ZD_|W;~>|%+@GyJSzXQKDT=f zxt^1}>m&Ab`f&;t-oma=K}$LYQ){r=9tIJ2}6w+ z@c#?fHnmvJyQ$!ip(Aux$7Z(YZ1%r#I9~Uh(>hUtODFHhZ=MvJ6k* zIwP>FLzx7_e|viPi7Now2m(#GAM99*h~VN*Z)%*aS-E>KUS*aj-KR|Y+r8%s-U8?- zev@KSTG6(!*4n*b`_!oyYk+)}EjN^4AUO0B_S|c6dmypSZtuM#rv3QYhy9gHs>oNZ z^d*BEB`ugjVK0rux6)UHX^(*ip7i7QFrFgrufN6f7}rD4L2K{_xrcbZK;^*h$H$!) z8IF5qlh^m1iRFe$g@=Ph=KJZ+YAw#P$MbAsCIycUklzm3D##Q4s`6`FdI% z;?j^_Z{F&EMD&=u3=zvtpe7bsLWRB10y2k`Ph}1flM_EOE}(E}`<0L1Hq?|3T+E!+ ze%esh8zl+$eaBq=5O^l&ew^{x)3+z{q7%DE;1_CZD_JzZgI!IM)5l#26lpz~EyW%# zza!2YkX0~?njG(Y^&t`}dq(EI(;9?(8+GDV5^Ya&=5}g$e7y#S61ee{^iLAX;o~Z@ za()rtv5gva=-VtA_CJ!qOa{FA$)!64H9@xf!|CY*VM_ITq&bGrpgd%<_lryvTY9rkZ z64qJ=OFu5wY=sjab#^_qZa*41e|0+pVZVpg;}Jl(eHCcfkLHm+W`Fwrq`1*^A&4)# z@ThIHoN{7sMb4~@&Opyl`1=*ICnp$^@wR9#J^Ldc;OPUw+46NFW$!IoWVG3% zmgL_5pk(F;zW?`FlE-7HAGYX=cHxoofUgg{%Xc$kWltjI!IQfMzJV|Swv$$yxiR`% za3YUcuJZj*84<4ygXbw-6iF3VHA6DYvEnP1rVDb6flW*dI~>FUJ1fuRSq2#|);&w{ z+_3@}0Q31;UNO1dZJ}{~bf)?0pEg5#1&>62GhoE)?`qt`liu6aQadBM6E1|IJjYt; zRPBiUFdkQ&s<^+qN|MX~L9-s%N3wWUYpisdZGD^bX z>?|NkyOA>6KlD-R6L3O!6Q@)=jl2*D1g(7bZzuu%!)yh~+<9tWsSb5ri$B|7RJ-G| z9o@t-xqrC5SJ!|uwXyGZ-DtvVeXi+Sx%a|rOH~V#T4Ikq5k)J1=m=EmQ~~``8g7}( zoY);tBVPelZ4AA3A8hE2(cKOb_xD~ndAiv#l4iF36_8r>R4~g6Y2da~?}H*PeQ>nE zNS#E=K}A_S2L6=`@FSB1uX)chBQMRKIF5Q}z`_Ecj*iTt-rMhQ%80-EeDM;ZgV$s) zhp4^0+hw$(VOKW*zf+YLL6NQ6Ddj==*>`0FORWVey_(p1{oWAhYm6YUq1bjgI)eS(!CPKa z=6C6!6+Cw81^fVg_IHg}z1S~W z`?DJj7JG)5&iB^1A9&H{*cvAl65;O@<-(c$%@%Fs3Q~v@_um=LM+K8t#$Ot%;URrH z6d;^Jo*hEvH?lJ=ZOB;nNY?6>pe68dVXtMEEo^h(n6Jjh#Q=W9(%wlhob_}QWo-CO z(9!1Nebd#0U8KdAHNtdQVD+=BU%P!3Kv%D`W$5v!d!X4-zaVd|~(P*r?TA5-)qKc&Pc6^%bFW3pNK*P!4G~hHbO; zLRX_qY(3k!SGsofUQW4NumI(_Ro3p0pGWHD8R!HJZels_H}dIX?73>!X0NOjnM%R8 zc79ASv|_&oJ2IhsP;J6@g%<+66hG>d5P~$B385g6&h%RGoXZJE6@bEIgGH^}R(RCC z#?>0b!lpMv=4Z1uu5ju!GS%(+&nC(s($XQBD9WW=Wq) znev(Nk$4icybvy7Z>O@G&hjU^X)zb=F8OAiL;4v<7kh-82eW{!?RqzL~S^8K6N zVM9JCZB^4_gzOz{3RenyXCxV1E$4lOitj+x@A$;*lr zzb0J+H(i4%5rpq>_TH{R!jE$J1H0L8n0T8l%!BtsO4Ii6$i8Zg6`7RR0ZXrB23Epg zS!Svh+%2hQ!RcBTjgP7;UUR+lO5}5~U1WNowbkup*au&&A3xfWF558?CN(Q)jJQ zn~t4QGoQ+~Y4BK_8R4sGaJTUzuHM%H?L8w_vzGM^+_4}eef_%ay0^DtFPEcPW}+gr zD$%^s(J)@v=BgzXNhg_GqN z`vO_NMY~W|waxJ1Yd@&{yWY%sxdE<-j@Bgf_~dP${qcMWS~n<$y&JLJKhNp~cc zw+(ca6sxuu;^vJ5iC;BgtaTRpD$r{_rBr>9E#TPJ;=~;+$4f!4Z^#AVviEHUCXnq?g?C`%>qZ%>OQX~iD_=;KVJp@s z@;Zd(V$=~iK-PtS$#Uv_rP5uKCv0xke$1IBqq4s%Mi3QpSFII=#XEc=fULf6bTjk_ zedEscdQOTOoC@lm869zGs0hL;FI7(Qpq^guwY;L5C-=+qBV$Dr5BeuqD#k=5e2=nr z#BVQ^y_%0vH4ZE_mvH`ep|b?=*>;iY^04VHYav7~3jN%>Qpx9BjTOuN1;WYsg1}xa z1~B=T^rDvej`{q`YpgGqYJOl?I&-pa30IW$6U$|qpvbE0i%vHB%AR}NXimp)8fecU zcT4I)-#$u$_V%iG*UgutbhFE1<=hmOTlegW8f2yevZh~a0))KyM}yy_s6Pdr*=%fI zMDp+&N{HeUgs7)rhwqoyE2_4?+`pmsy0!uJlf>)B+1tD&AuVY!1G(6~^n&4-0FBeqf5^-m}xKKaLdG|8l z8s1k^4w2Q}Hw&Z^nh+jxHWW$Z8+R68=y%zq^2(U>Ba?gXfSQz-`mVNAAH- zA;tJhoO;EPN12YK$nJn01Gitp&S7qdT+!h8d-*&{1owh#6)($ngffdUr|07jo*ID( z%i<2$=}x=gpQT)MgI4T&o@)weUZE!T#u?EJ-gMvz7kvi_mf!)~45nqJ49$DF*V*e5 z;&mA}$l&c}ZcB@n>o*D*gdkZ3stJXFu%*@+S8f~^zl-##c2DVDc`xS*itQaw+s!x3 zU?^gTswBkcBrk6rdeJTG-v$8%^Q&}tVdVGdsLb<}rhSzwsa*DnQ@QOkaZcnWwFXJl zKe7C2z~wqREjCtMpFN|8I`ZFEt8&IwV3qKM0|*x_c)EpAt{JFo~wY*rJ!b)c*E2$tV-B(i^%{SHq_lpNQ&B# zZfMBKEQBoUw~yj=>mPEcoqT~6%Z0p~Y26ZyKsI7{d8pi{2N0T{XK!gv z&i=4%nS;b04dGVg*w@1?yF`f&ih^r`eB|6oG_D1A$?HtCk0>+qKilMa-9vIEf2p~# zpRrA&YgvHLxeILtA%H0gLKc11^?9Y4kWBF*@zq*+)`B|4my<-PvP-hgKb>Xm9Bl(vofhQqxITMP9!zhZ;>VQK;m{bC8lbZ zB1vYwa0f>WgB!JF&KPAJMDx?-Pm9OVqmHHBa~jX?Mtj>`1t~^k55nhq;6@$t=CL z)#ZD5%$8}tG+ohC18YMht9vzx6;Az|luBCci1zcKqkiin09tDi1o?B-K}$ZmThiZz zU)*_J?>4=S;Q{c?7-a;=KJ%Y|a-xLS;&w?k&sa-lFteiDPRaFNuC>1esemP=D6-n^2ll;lC zk*8UnTivP4RZ$Qw41m1K`G0tv7X?RNeNZBD-1BWFSkxf>xK;TyS?}Ymcv8Y8N!|pM zhxDMqn^p^IYm73^mED@mNey{e5{@1XQoYQo22pCo1SUhz!g>a=1N8-sh2G$GMl(Z> zt|jnJ%aeJoUWV$<`pfn?gh?BU8uJL(w|gmLOSt**^-E|53kpol(N)ei{3dx7zIk!J zmQBjv+0~w!w64f4?>TXxi135a!J6RhH&k}MTax6d2O6mB z)5wR5lFQyfaMP_P!KM{nh?g}Md;`<&g9m$0*1PS-AF7;XP};FcS{ZubGLUx;0EN-b zWH3e$pF>dF?_+$O5=Hd0d!GH?r_^TgbyYAi>`EFeFo5pd$9;*DI(#_{R;Nj-fJ|K^ zInqAzx&b=p-?g+GEb44WGzX3=cWX27j`+#*GSc(F;KrLQk8Vs;cBT_1mI_Q(ver0p z@~oI&nngAEQc{1V_{yR$JqdGBR|O^Q=T2I1&>TmBv(KW6u;M-&KUszzIc(SHkkH-<3@(S0hWmukVN_`GHW$6EWc#An`CG0JkwG;@s~f_Z z&$+0P$8x(R`RI{Zvbh4nl(?De`>i!uRQ1V1^>@FmpjBVme|;)ZsXq0^^NG@SvV9a^RgJk8&)nldZKb+X z-1teB(zO+#TuthK)o<)Ta(+gj(^|X6bMct^W*{t}wn)fkiCpMdpDZGW!zzCLfYELF zep+s_{DActI<`aDY+++eaqw~_+|E%_Q7TB+NXn;jlIoqBbt7m%eIvtt670AUBT0dH z3=W*ZG>8BY0yFrhvO($n;VZGMcgDg_T7*Y<3t$}K4M&rS$XbdVsE+xp43No#Ku-Z| zr-h*DGw-oe$w6ba3C{b!u*`#cJo6F_R6WN}XHH!)FDQ;^R>lBGm%~H4?Dxde9k#8J z8D`4&v&e&_E^eFJR9SjlJ3fp;rd|jaWtpW8)hcu@QwlvAy&GerTqB%vnIF`s35(!` z?sgLUw_>p@K|^KZlklA2o`f;adWOa*4r+h5;HES?d_=S2Jd)e> zn2bRk&tX5$co`SyK2`e&YoheHMeg_S;Y76iEihs(!JM<_ab%olH1mJ}8Q82^V4y7B z&-XOXs~;Xf^KTY7i@NawnTTVkbyuZ!xp^HK`U-Qp$wD8NO{}UQX~;WZlZ2}D!O&N@ zs`d9JY~6%iZtA8oPG9C!`kr{{lloQLayU$r!Ex^0)$dyJi(BX+I2wC7Xm~@JrAUk+x7kKbmO0FRRur*?uhi41kY25TmprLG=cgc; z&Cu3XxAZXMv$2k1K*@_EstX0qIj+0On?xemyj5i{xjHR4n~LsD*(CQ#}~va~QJ0e6lONly#Te zJ8MdL`*w9NFt2qO4cGw{MY}$2=IV2GN_2YsQEMO?}(Ip+QlZ!eYP; zxug^sAIV~lROo0=;&t?maLBQlEs82?7*iWb-d0CeEN1BPu~ZE0|v7= z)xjs7_2Q3#@~^&BZvqst={NX1TM9?7obGBi5%aX0qSv1jRDHIJ!hiDyxgOFw!7~%S z55S$hXtCvRWuvX#E8CnSpv9I8In{UBj-wL1LGJZ;2<}m4l+b4j+n(P`G&J}Ct523Vx+R*G-es{f=gC^weO{iRV^G?$F4B9?OzauGXb7>JeCqDlp_ zWd_1U%agU41xf?uHt_(~4{Z zRC8qcYBvtcVW6~%P~N``3dq3R7G!}xsEH9Dok#9EYXG_o55`w`Sgkl8uZc<|8pGse zqf%@97f()lg03TKe8=y$<=6mjiHBGgxBiMa-!Ya4w=N@igg&v|+NLLpBdgYjEM*a{ zJ2TYJf)914AcMnN4lvX15BrRs3m8$`{SYqPWc2|}DBrQhr@qP_>rCYyS!9hbdS<`h z+{&g_-dxVyygvw8?HHZO|GC4|tJ8#0%-m|*Xi{~ZIt(f@w{F&)=x*Pny8u}p~7WFD1)K$Dzx#JscHlj zZZp9IQm0;a1}0EYP$}V;f#2GEw6O-kSe`Wp@OUJvx0c8u7cfT zU!o9$VQZ%5ZVcu&c;d8#y&H1MUu~E?C7iH#c5Tb!eIVhrtP{cF`wiWzvnMe;uHKw) zprnmRSe4wY>SP6fbCqC?>(a^ULP{}5E=OY1_#6j(U(@lVYC3!(Fz}B5^LPzJ2iDVi z;X1?Fk?J2bE+Epk^KzzbE$xfC7>)?CP6<037vCoMc_0U3;>@)bcY&5BFT}lG z+81>s73&U&`eb&`cTrqSSKcSW2)N+_?n2f@_ce;NpRSGOOXw|`vbObMn*Bdh$jzh(`{BXCJI}0(J%HABL&A{NMxUC8WFwu2S7W% zKo7mvdlQNWv{8|hql+x-XF;#nti5 zq_4WKBjf2HuCl>2J^b{7Ecf)aFL#CK%WFJ<1X{Qb-ylCFS=Y!2^%+f%6oH0(T@_8W(h%mE| zf{*-Iku&T_Pe24WWJ`PkG(gm;GRdvT&J<+QUf_fikLQyWmGMC9sy3Fg>4-WGWet_VLV_mN7Hv3rz!_P-GfP?UicrSFGKolOm@x%Fk% zeaD=8dQl8#yDIH&o{H^H{1WRCWIm4F~&8vor8zVFhQUV;A9uS`OtNR0c|mxU8X%+4O7Sy z3g$7D86UaUtY`Le$uljraNT0i^+_K*XR3NAAC|CWpaoOkNSR%K7_>undllE~{b5qTdMtn9K(FXYetMfi4oH7g9?BGd`v$LxxBA97Nj8qT#`$4DCG* zm4)f5dYPiJ%{HfH()8`L6~$Q~uc^_ZP8276@!)%Q0N>hYg!vJLUTwm4@#KTv-saW9 zBGiMHANVeow8$Bq_S{F;u%@1tlENvH>p0W3{mWOe2+xVTUdbW@N-eKF3j%y2ygzBy zil`Fj)c3EXrUn(>T?4HZcKU%$b`g2j{y2N79r!D`#@LpvWz#RmH)Z7bfC@7YX*KHV z6SW%thp_I!ct4QhVq=HxQf=AwE#pzb7%fx1!Wd;o^`RBxu2FeJ&W~8xLWzN-zOtEF z&w@DNi^r)Orra+NYdivnh->i!$?m7Ecn~NrwTmL<_)AjZHnE-F@}VZO1qUXULSbH! z5mURkiyHH#V7=|pBrgCB&z`}?p-jo@+7$xdh%ROo75^x-; z;AY0w>#NCuBHvKtE=t=}vm|OzjDu$b zh3j__HAV25O0IJCJ6dZIZ8Zf3%MNqTQ^D64Xi6`+M>V#$eBGCi%i`4|O-_st!?+e) z^rp<^F}l;ubRV@ien3Wl4LxbJUt76XIVsg15ghUL95 zI1~E@$gGIhaP?aZ{?Gq(;A^HpUBHra86SG2mB?RQE*M7St+c6o9qd$)yXkcku!3L* zJMw$SjT1d&0mi+J(YS%N^i{#SY@mzrVd>#c%OiOP12NETyrKHk=1#q3c4g!{iG_{sh=jdWbp>UhXy(U(FCPHp=`SB{hsQVAb7D5MCjKZn>SWWLUE+wAN;Jo=Lr8-ATDDJyWyv#pnL{P8sPl?_3%Z zHMAD|oQN-gZppk0+a>%q8$i(F<*SMQ5-<<8)TSlu^>NA;YiOk=?3Gf%d_FE7Tfp>< z3g0l!_v3#uHg+RK85&nDeQ*iab99AR79hq!0`JN|pbI%VQyM7bavoPJ`^jeL0NlH0 z%X_(BqklK!&ib*`VQJmwU<1H|`{~Bh8N)veSff@b?aNn?F4xLGI-9u+tf*h-d}p}Z zO3W8P!`XB{${Z*-(*XkPf`B6zC)p%9xmC3t-_Fyf)F5&zb!SI|udsL0aF*IhdyKC{ z4K^*(y^ot`fw=aVFhYu!eBI2w1SB*EoKgnhwPGwMOtQ1=-*}~V)t#dQtPF_um558N z$gVEAXS=SI1GN|P2dHJ1()s0BL*$^n$@Lww@k|WNh%z^J{@@aF|HwpRh5K|qhYMe2 z2Jl!*Clxo+EhF!b0L67ZDN4FjZ)ue}tLe^an-(Wl%kOY~(D)GuRQ44juBjF6%cEn7 zuk5WnTB~_GN{5i$Lg(hz9O$RSH-^sBv~@67j~8PHEFCF_}N!$tUApWD7|9*c?+s$zDJEJh>tAc_e?M zR{I@)Cipl3XiA;44;5Lf^+rO}1{ga~e@xn}%zNxu+Wl$Gm;N5d>-2|hb#hQ9FV5r4 zZIZt0h!2xvc3hq&qwq;(PNifCL}PxIpXw{Oo}psCdr{2cYL4TU$52mjrebew;XSa^ zpaA6HJDg|)wGtM%t7R+;{86q_ey5h~JxGX@nwKaqqv>%yXoVXvmzsb1O+A2~EJnD6XNW)gzn-GYyQjChO?MAdYGxl{Ne z{IjZ{mo`5y)o$;HY~twTijQbii|Nt9aY8rw_3L73TV>0; ztcK3J-wJ}8Af7lE9E?Y2buKYmN-A^&EizU=(c$rUzJ)+9%7}+qZ#@5EVl{;KC40@0 zav5f)vgnC136I4w`Rl=$v&5BPVpXDw`rE@yZNw&F$O=?}8}e-tdF98fZp9W5sNu%D zHS0Fuf13fN{DaF=!htgN!-?-S<@%DCnbZ|X6{eBhzPO91i)W|VfLXQ5_~TyR4%?Ma zx!;opBforIJTpT>4DY)KJ(n38);{=v?S@WNmd7MUT`u+>yZ==KMrJss<*IYb44o@~ z-nG@|E?=dFbl)LoC>?n8I^U>=zhyYP3Y4pW*)1g5{L-|S!zIuZB^;}Xx+j7kJFJxX zm#;uco~1q*2Eb)>@B5%dDqw1CJi?bhMaKOz-IStYV9IG%Fh+bQe?lA_7zvc_P{QKz*-!dNi4I zy-Z0}h0Uuott{L)30=XTUlT$B6LDQ}m0Bbx%+%X1J~aFS)vpMcKeuE6v|_0$-r)h? zFL+?YAIRxw38VR>PKdY9O(WfJ9B<97v+YF`$=CxWt+OClD4BmQmD8iX`7TOBS{+L0l3hp1It74k zkx3yN^r}c0K;ATdz!I3*mEc@Id9=|W(5%WD1(fGL)@dNRyti5`aCFniH&rVo`{K1O z$58~JkMF{&O1%yT3X|LApqz`zqbTcxnYPv>3G$7&HT`b854m5xw>*<27&?WG?O)Y? zDd3tymp0OOwN8enWe#m7k$tB_T6q*Z4d{H&D>Ajydm}_!8@~R-`Wv}(S5m`ATD5R3 zoF*S}ShAJ0;Nla4$HD_;JY60fY6&^UP-mOP`|K%w;$?9lh$fPjDaps9$4{u;c5RMD z^BQE5@-bqq`|JfEDt#~nkOcb7mPJ8CLxUpU@-mxxS?7Hyyxr*R!&lYCACh81QpW-U zeYgtXpA)rPVo%`)(1*z^*QW>x54%0zWz7HZ+FeASxmCKRs`+>3EFDIvqh}sz2~~R7 zbCU{IdjnQQ;)EG0CH}ng=GLduWD?Ef5piP@s1Gep<(ZxWpgUs!1PxOW zp1iPY(hQ6CMgoOb)FuQNOA^dyp4`Er`K6;QAN%7UwqBC`o zW0Yi>Ny@HRMgG{Ep>4eVv^BNo66n8`({^Ton-S#?esp|JhFCmO0oasFemedE%%!g* zd_y;bbCSn>#L7`h=<5TaXK=kM0s@|cfVl$oRUp2syz-SJ&#-Zz5G{hZk*p3qtmbUp zx(y7}`Q71BSMz+}{h-6$gmHI4pZ1;QaB1%=^+1FA&YRjTj)r9D3a6WH1X|PkSl33B zaDvDWqYP=6qdunKD~czTWedeSt1N{9`e?4@=t4&+paJ~^1({eK!dSiA_ItKy;6Py8 zEti^rh+(l&+F=s0{TQcr_JJOtz&fG$>KF*bm;2?*2rI%hu4V1|^}>;u8l?UJt++?w z#ZlZ)mE}+Yv`;%szg4pk#P$jE z1NAU?2SFdqOc~gX4xa^nQ&fU<2mRBHh~=GB{?-zbM=b%b;N`BqO(H-kH}Gy+KxUAP5WPzzxWGDWc9zIaZP6Kvb7CT*iLtNQ zx+#JabgR96`BLmlGHlYv*6tB|iZ*)CNVP}In$My0Sx~*<H?9Nk zG4LQ3VOy=D7d_0X!W8W#`{+iB34t(Td?VnJY|r`;=jXjxu=I-X_rSx9Bh<`(&o)V7G zh8LX+*syj9WP6a2apB;3UEJ6netaKhds=XxSb@{T_ ze3O3NITkG7L6rUp-od_FBod_k=Kah(-t~rmnMhuvo%g)MeC?IaT+zq2p{~1j6$rZG z71ZE8<@3f23qcL$415Tgn+wz7-QFYh*n*-; za?nnRt*yq5mEe0uZZ9KU$r9zDo$Mq)$(u#*GyM~SoUkXrgzbcrp+v#bLwhuB&Y~E6 zBHE5=Qkvlf@ilFZ%9&3>J;j-}ECvbo;5?>q9*eW+IyUucJ&_L|Gs-stQ_D0RG2_Or z7!2!inj-q^=D?1g|6-Pk1M?ShXo`6$V!+Iwu(jBF$k_=3c z#bMdkxC)&Cd)1W2`+bGg&VzGDC*QHpv4c$rAHBs{J6h0zzI-FDCJ6C3<$GPXAAg=h z{EV@JqT<@}C!uCN|xHpBmljVm3;|hWFHPJO&&6n>we|xI%@3PJf{sJ_5{vd|9LA?S`yX1l^^jCUWel-s>s@YeoWg z7=Z^Xm@WQo1GyY^NRCC@DguF(8DYp)T3sF2=%7G^h`%@GkK4^gn0X{jih(SiIXoeV`L!7xiv+qL>!baO^} zQ4;dTi!`c`CiapX^-F%h6q7YuASy(5w##n2b7tRtPWBQpI3trknh;WNHQp-u!abKv z1vlkC!&KkzAi+SvRUiL$6m@Co=psm!6p?DMeAtS40$|3o)7MC%>clbHUdOG8du4BL zGMvfNy+NK14UxMBiqes0IEW8`csA2DX)Xj;rhKVWQ#0bK53=C4EDUdkZJyXu(N=Q= z@+S{(S=yjq4ZxchpzVM+zXz~`8u$0EiIC?3%3x^AQtRHBJcrg~1?|ww!^3_b1KIc=v=cA2$7ewftWoCJ7qI)O zuo`e^PV#8yC`(Ax5b3B9VQySKpCAD704e{>g1=CZJr6%(e1p3UZA8X$=%hp2C%KIT zfe~4{gB0MUq-*V4&A*_l*O`zlI(>^RHP?H-AyGy}ba zpe5|G5HNc=bDo8JqW7HnGn8HUD{z;ft!?z=`wgQQ?$&W?h1payHd&!&RqF*{@F{NW z4(a1-ymNI8s16D_*eJ(w+5u_q;LPx(pgjO&|9Dc?eMBdA9Jk+!Sp!UzEHU8vp@9n# zLDW^wpO}K9U~%!>&y#I-m(m}d*f;FyVkCXi)p=zffX|*!)S#{I^_Uzhkt&abU@{i6 z7Z$Z)9PN$-AW~&qkG~ss0;s$fI&j`8beOX=^=1XCy*AJEkYmD(eux>~dXkxJ^y)%a zTZw;=IHGb>dCLS{S~8ZN$(*JN#A6Tj5DzaB=PsT3^a&VxeF5_$6$@9jopb z{XblNcUV(f^L1#7L5flZfuJZ&K$KoX69lA*f>Z$&kS>JKi9n<&V47F3$jtI~oZ z9SOYzr9}crZ{gd)``-I|zVny(XvjHd?>#eX)>^Zn_=CPBDV9;yCt#&;4+}&xHHL;- zd-7|kprkv7*M&!l!65N^!mo_Km<*uvpdl@1DDS*Y_CV)_!y%18*N|0mvb4i(jLA8( zoM^yc9dtccJWIFYkpD9#sOYnWm6#RoDy z)exECRLC_4`d$!N!BG%_p;cH~B0GkM5A8yv5A3NR={qJrZ5D}B&bYW*Aq3TG?o9Kr z`ykK!swhVpc^M_`HckZz&g(;I7pnJA;OkB`-g2)~n9pQt|C^)X^kMFXJK9$blVg!wEUEMk2d%M zqY>QPbg9hg^V;I0Rs$cfk{;b^^11W{pwYT*jbWs;-Xb$g7MUl z){ZlBOvPBPTAy)vT<)WprrgKwWMm2GEKh$s1^ZcqE1a)1j zPj;3nd)i(P&MrHkBs+MQWMG#-B`6Ix_p3Pa2~FYa72Fg9@ND_VZ&UZgLE5pJ+pe+z zv|;J7Grx-KAN=?u#PMn!`~&bly_zQ_AgIPNXNMVkD-lwPyq(_iGQvtCi$P7&W$dnB zl*244puhGUAE^)|M?e*=Vy%Iu)G;1I68t8D^0!9%~_s~?-1u#}0% zkH~dxe2UXqcE}>S(B>oz&VQGneK{Bm=nZ5(Eno|WPjmZ zI~O#3-~_+^h(uMNeRoBrMTbZjQYqi)wVV`3KTw`@;-)JK`S)Fagxn!`{wck!;#^c#EZdK89@V%ED2J5!)5a+8@P*tBZH{9J53KY^&+Gkv>NE;}%~dT|`zk|P?6LzXrUW(xONdu>G1 z-TG+JSlt!uO+oQ4doN@5#RHseoN4zr9cDHZMrUYc% zt(wIWAn*auoM`bqlefuWNrlOeR)a=>oV4k;d9sysrgBxJoIj8T9L(XvYqd`ZnN2a9QoE22z-T+Rt%vjJPgiu^ctG4o5B$DX6c83Gu*CAp zg`a5(Qwvve{P6NKW8V#&bAM)TIfiHBA@LR^41QtY24>-|xRnYM*Q_fzkoL%>3p^ok znPikTSD+7rFy)iW6Fh)&a9Bn;)(4RtEiF=}zipzt*zxoz7sBFGDM{vpp=Q-dMRzB5 zha^@At(sfM>_NUTmj>+v{V zFkPkgZnNp)(@&s*>!vmBf9cXqM>~lpm#sM11O(16Ga$rM@QPd`hvOrh1SLTzRP;fI zY=n~vPkAeU3>@gXGw~E$DYt;MG zH9c%|OR^1HKtmqSLMAI=j8E5uyn355v`{FC%p6<+tUP#9OLwvMi2$M&D9qi)LB zOPdWtN{deML~aAZ@&#@)P(LivlSBNw^;xw?J}-@r$Ahv9tUZs_zAaZW>HVe>>rTf+ z+IB4R-ulDgkjfV&+8m2Q9Q=!r)28f9=+74~&d~2cAVl&0!P`D1YBY_2vtTc@f2;R( zG&V@EDRlzp43HobZyp`KL`>S@`t#lS@Z*gIm=8_{aUxx~4X%j1uwd2?-F27ax5pQQ zM5D1kt(liB(x;r-4gslA1!vI}2rIuA^#P_mYF`${o4 z>sfbnGfPG)eB3_Dni$XXA{~5g5uoKX`#ahw8zpY~Z-9&xW0O}&2*#A*nxB&KK6dgfFx)^K^@6EXbH zVq>a>{qoZ6Zrl=mh8)i>mv;5L-=oyWvC2 zvWU{77Bi?17fo!K?Bli&xIVcvlp4Pw34!#&$cG4PgTkS+?(1bSe(^F&*pA6P9tQ|u z=vi5@?ZiNrew^TsRXcp%%L`77sQ!xXSCyaqMyiOH-^dIPXVS4r$)h0fM?V>PN_M>1 zzcH8y-u0Myu2s0x0{>Y{^WLy1U6__uM8k-IwFMmJKD=DKgpW@|Q@2DH2h$0e zYRAx$fO!^f{8@HuG5(jdtA{N!j6qkSk|@?CUSGN-Ttq3uT8))67%T9$eqr`qGN?*? zaB5tqEC#_sV_36n87Jq<@kA#~JE4gE#b<=Ng4rFWW2liKis>*#_;GMs(mBB{+ds__#Fy}3(1HR*-^VF<7*H-w#mxWLYR zwC+MDfI&_|ve*KihnNOcikW7Hoc(s<;BD;+cT9|$>c&`<9iZ%)pS@NDGDH-=(@6i# z-bquw9|I(+A{4*ah^9*A1ya02!ORn%&EoKA0+6d!$JzdFk>6X4AFVzU8B;4Ay{2K= ziWk0D=K$>j6T81vvvZM5l}CTlCe{%i08fKLgQN07T3?Zx^fE zZR|wWc@IYSNU5c(=@yoYL6$B{`{AvsQfkJR5!+AU?dTZ#hY415oS9`?Td+S)h3m{ScS~(c@I3l@Nuz8L zvUAiBIAUG>@L@FHj|00|5vrog;tayl!2D$+&(Rk2r3g>6&eiK+lB=D%iJyILHryJU z0XbT?mw(7IxtV!LZjO27s8p2x;$p3@e0!#D>G|j;Mnr5a#kwQqW*A$!aS}JLQ`$;> z^7U?mZf4!Bl)TjO#A7?0wJASu_R(vu6-4tqKWTnk@U8-~Vqf3csAr66aJL`PJA%C1 z`dN3(d0AoMtmBQ3-d3kRs2w;BecZ8fUhiwJ2W{rFxpMdT_-yY{8?2SJ-CqcLu}l~P zWHhp#iJUnA&8vnL&w8Y;mI6h*tb)?hgM)73t^?4x6G)k!Mvhjl8)6ln5@ZXT7Z(5> zfAni5r*Qilf8hq+@3mHuV6TdCDjSxjsnL&=eta>0iwj9C30&m}6*fom#UC868=t;~ zj*&Omf_7lw*X?7N+P?vh6*H1!$lWiQC7AY0LRR8gR|>gZZ8qK~S8H@T&w8Zqw9^Dc zZ;6=bZzbw+DXgFO%Zpnd{vPwA(5U&9XpssK@31u0nns#ByBB7%JY7Z4CYOb`pfak6 zceoDdoV(d@{@xS?1|7}37dW$(-G!(6>w$a@CME|!1J*r5X?GQ?tTeHr%qeMQ8 zti5fmG_7tvLn{S0qd*hc+Os-U7|lK;XfGa$nV_(FgYP zi_9!ahsV0ry?i4mGw9e4PBJ~1VD5UYu~qn}NCJItqereUs3k&-O8DI1YaA|smg#tX z8$Ypd2)JKJ#+DiDaU1-}<5qS1L3=-E1x~IeCkKv#=Qt4fpod28-OiVg z0;WPI_c$q1Z>(AL#;v#S?0lC_S6_Z~VUtoa=zvT%85`7Rj}^+7HJH1>h?X`9FP(4V z|G~adtF{(YKNx5SOKe&gP4CD7>adz~u{yEWHFZW7YR0_G+})m~a28FLIGq)HY8|z{ z(J$vTwC#zc-!XgoZZ1b(bqBA-{yAoKcK}f!ce5MoFub|Jb{wgq>jCLRGf~xSu7_Mm zNDEM3l|QeSe9~NCeq!0aq!%p?0(XYczC`)^k465Au~}McUuQ~@+K)6_%o~*_Tp@|C zCUEujVrf#}#~nK>+p?LiH045m*Q?FtZrxCBh)%9G*t279A<7 zmCd>0EKgJ9`j(;V!qc%cjv<}s=_0CT5*3kvy`^2Sf(2qpQx-GV&zRRxV2J3(_D>wz-bu?mL*qZA~+J);eNA*tuG&=|JDQXJ=@YfoBl;ac;D9 z;(e?_Rju*1{X{>J*EU6N%;AUekg0Qyzk&nY_-Dlq@-WKZD%RKWz`RS|kl@0LE%=_w z{b-V|XN&APws`6&Z;x-eta(~p1oGk;L_4U~G(Q4tFV00=3$+y-fM6y=cL-vHPx;4O zYo45|fMMGEYnj?(bgh(xg({qe%D%8}IL{543wmc37ptvdgqVKD?zy;XUd#33*c$qi zQe=~^4*SINx=_2dOL+eW;`A+TT^f^J{{~`7NdBz-0bBmqVCQ2*Z{&*_YssY(ZWA~q zp(6cD7{(f`b0OXM-uM5;Z@wgHvgLMr0SClNpa^J zm~vw#ovjxoIDe6pM(<(7If@mx#m`gyv()&(R4v-U8E($}-QY0F7UjM@{sw?&{O^@! zTy6!Ot{33|IQx9u`^lI3nq~-OKR?t6@m3I--(G8!Sqbf#wHpIku6HAH%9WkzOp%mV zbZLgHSeHBs?Tu8QL`OV4F<<3zZB?q*Ih#A*isJ&xuEY4$3~0(GK^c)tJ~kpxQ{^`h zCM6ma?ccoVasCHST9*uYrk#^q-M2O^0gt%qeMHyGP!rXjLtx4wDIjoRo6r9sP*9^E zksvwD)E0cYJB(kV%$Sk*_D$gAxWfF7HnxG~A^m36vLyjMZlnpwdR9tNHI)z}uT*KJ zT6UnYnyzVeT|ap8MD$IkR!!1E0DZ%8O;CV_CVu#K3j$I6)6KTR~Ae;T^Fmd%Jvlo=$Fm6>9$6Oj8*NMJGnQLx`tNlCKe0(N%>vg(P znxrd9#rX1t0Nai6`Hi&;-WiuO+uV&M53bANl8JXZuu03D>GRUtxn;rH<}lIu9l>aV zwzE>9gf91LS?tL_9P8$b&iorZR2rJgNfw^~ zU?xuLL3yyFaBw%^m1J0x0pJXs^zR4RE!1$5-wZH;gTErOtsj+8@)$Ec&7W5z_MD-d z7>~Ok%^J1rFma&Segn=2~=d< znwjmsPtyb~O%RF7Oj0N?`Lq4i*s2}KHZ{pdux%uArWr*+Q+B%Gui<6UC;AIQTdhBkA^Qs&G*x8wPJ^J+o}#_@H{B7#%32U+cW)KLJ&lOp$T9NCf-8Lkh(f&JZXHHUp_t? zC!(!m$d?{U?f;W;qozx+!5g}wYKU{^(D`yqX?-MNminNE#j*#Rx9VwHXVpPiT=T=2 zaH?@97*f18zP~ zGK8OQ)2hC*c(2k)9k%v-&>6tyv98KC!Exnpik}arKT}wq6cTVP7GaVqi zTxL$|yMw~(!6T+Q#MUGAY8#enbi?us9pWM&mwdtFYtEltEMEw!w`QICp2{UHLb|M& zA4|jf``g%~2R*FR+dhg$#sVy+8E4?wNXZksyYyk!wY4dJwx1uRFTAVP)|gYpY1h*T zzR+uJf2MG-IF^xhV`*Y3fTAo-0DTLXRI_{6RHv$it9}q?AtfvK&5hS<6AUVk(J$Ga2yCaJ4`*AkHC?^sL3yeD&AdWO={SlhGvqmSeg=| zCM(2Lo`=Q)=+vmaijB+s^I^r4{5NT-zdl#-{v7y9w5z;tyR2yE!{X(uL73n@uMZ$ z+vwuoGk9;`<=w`wLbzw03!^s#*d)1x|qhj2(KFM@Nw+7==Z+$e1 zkn)U+(NmwEre)`A#%MDvnQ#v<%-kG3VSi24iy5aJI6G5g$qn~qL@QJmJxc4!7c;qz z)B;cP$js3&TPo!kJLPI;Y+LzXpEC%=i1rF~7VnSCFbg~E=Y-+D4C{<+)M5BpHR z%)3tdj~?iA!w2f0c+vqMq^Cz6rR{q}-s;b2ah{H#b`s`m`W#h;GAq;@1>z`1M)e6? zL(nP;5kqkvar{;d%3kG4Q z{JZhX3Y!r(rsHO_gTmp8xws1aJ!&t zZDQc{V)o)^B=qq%+wIp13is%;zu)qeDeMlCT5E#LumS!Y=TR3m>ob~>FaA($OPTOB zWC#LtBZI9w%OzK{Ml&}#5uop)w8mT2KB3KqPPAVSZZqP-Xcw@Wo_%F&NrgkM8WPk67|F2o)I9p z5GexkoKiuE2E;4&r6(Wms`l_j0c$4d@?x3IEN1TX8V5niX$zxRpZEq~LWfNIwv?P@ z-_A>@1Sy$ED;LH_Y=3Gvxq+9)4?t^X@!mnqk}EMjt_FQWF3MLO8$9PO; zj1Q-wpA2{y^Y$W+PtW?}*TgnHr+OEE^WC<-`9fV=mGYJX#R#R5M-6;Zvqfk&f+ldErX~bffQp6)4)Ky4N+Ou;b zJaCtJWme@qOrr`OVBeAH6`vvP&xBiz?!4b-MO~nQXS)t72VWkRP@oJ3E0peHY|w)V zRPdv7L)=ZE-SvwP<#S+Z=L*eUR9+lugv(wkqL>lO-mb~w{(Q0^~gc2pW72z`R z^1pmMf-Y@4OGkNIowtS>NwUrjWkeTdw`||(^KLIz>je$RVDOq@Dp_nLR25lh?VflHYN&xDXGCq~S6@d(L>qY@$}k}gd~<)fDkCQDOSo$nZEZO7I_E{ygPV~clMP&QblTLp0QaJvAaEk&K*{?{?e^laKiyu8 z)P1KkxK%7yvbRIt5h8-=ArBzWV+Ka=?8rrBmpyys?RZf!E-GLWJShHssn>Rl^dwl#^ zq?_|}znt4pnZ)zd97wPHKxI!&C{EdXCOrLiz4FhcgB#p%HtY!$cm;n`I_d%XpDFuc zMd#ZaF9q-4Yu*!vy3H>KU$Q6}zrpLnt-`Y3b9e%xoXy0ARA*<(=>@hl$AG{ALHX5{ zE|$PIvX+g?sOoWuiT+ySUOF}Jr6$Sjj@F(#P>Es;gfpDS&bSD~ zzbFU-_PU2CcC;Wg1mify8tc9wnU1*`+V!%_w0az_0Vr44nAW0qnO;y-f3c>KIWL(>p|9Twm;LJ)|= zZt8F0t?itH^Hiv^sM_{JE}M`ErgXpnuOg(AO@l4vM{vW;3d*jL2H0I-sdi*@`-@SO zwGXH-$}$Q*p?$nf9_w|aOdTHT6vS8C>gJ2O@NQ)(T#rhN;Q_vV_tORHeHwTS0aDlR5v;NsZ6cvWt?HOiFQCIB*Ql*nJY5`_|QNhaD)dJr=p9Fya761a%_XZ$MU@nqO@i@r@)SyxzNtacpuB ze)UjU0=}JnO!)5B0V4Lrte6#c@%H19Ull$z&XR?x!ua2gecNV96c|0Az%Bi*rCiMX zQiG5HbR_JM<9*lcM`dE{XQYwJY0uK80Omd>9fHgLUodgBviCg0b(lf{5yn+{MG!7CT|{%%op|hBR@>B27oqT6JT;#b z4Jg>{M8o1rh4%!%UyPf^+IO=12yca0zB_<6u9=B9w+w4{6y-Hcn$MW)yD(>ynF|bZ z-IOrT)QGAEu@{=4grUC?@~5n|bq-;7+A%c?!MpV!C!wv%eai=d>}jL>tYdk+HSBmD zeb?T4J?Ijk9+E3skYKz94ufp$H1PTLDFMV2A(q<~mSn<4yuN3w2xtsgs(#L-ssJ7T zOg5VDV5b0Fr$}&&=_2cy#pGL#^EZtS@GaqVkLN8rZE7qB8+%JJOa(hXJ>6q9yR(7X zbgORO^3+LFj({sQC{3wZ@kE&iVR#>B70;>mh6u(f}L z?z#e;=UAz$)D~Y-WwH^Rk$vPd4)k6{pFTAov-~n`Z#4*D=l6C}K=)karZ};r2HUMW zTP^y=Dv6d`*HZKPZjG+yFRCKn(_g-om7l^?hs_ozUJY{_>vhUg%-yk`>x@t%U^If3 zwntQ9i?Ea~D%?e4o+R(W^k`rXA^~_s2%M&@uIwYUk1%e)y~5nrLIVzE<#kRe5p_~+ zg6h*3_P9YU)j=ZTR49XgR@x2h?zTLN7EK~WUxfgbej%v-pus8rU`k^=G&2Vmp@ zeOML)J5b_jOo&dof$XJ9%`s@*6=#Qr3ky9l%+SPU;bUb5QTXUpA;`&AV=P@G5_kKv z2m>c_C;Nc<9#NIX=Jni|-^1eKwH)Vsp(elHC5DM>^AuHY`T}zTUN5gbPjmPux%ZXn zEUqao*;H5Rt(&rNbe%<0uv1eIuYnt&59tQ{9kgz6Urm%{=Ghciz z1bT45fO zQ7tJ`0%5>nh<2-zg-vN`HajPLv#jVFuj168JT?7fuVr2FHjf@n6W%^wyuR@mQFD^8 z`a^FuD2FlC4(t_SvNs(_)iLrTGfR|@fQ;_gp&&;N%FwclfqoQl|I~L|SRv1WAw50B zPyu&;>Zh?pl8+-p3?;qTn8#J>kAPz1DZ;(?PDU);|965hUkm6L*21*q=B_IQyeoOs z`9ma=ZFezHO1XE*hxz{8-28l9v42oxXa_6ivMHa~vmn+pd*?9Wl#v;Fe#-kZV2&%FvbE zB)*O&{ri@Ir?55??0z54|)nHp0=j>S*b_ah5 zKsniKt|9g3sjo7W$OM$p5ex|Tjk>RU>QaR|=KwgCYb4#t`3##OC7gOo7 zRIopQa87$X*YGU`ph2?JLzphHhs%zzUw@2hqTjVW1g_$1k9`oge48qpc#vtE8z7JS z1ARLh47`tMLvGD_P4Qg3S{SC#uib%#`zV-CW@OQMH0VPRbVCl>>bTriQ14 zZTMr~dgIE}UtUJ$I689+smVHQjvTGAIkOD+Z-mt(IdfkKAM+kjzmaCTYE{Im|AO+v?hPXq0mSihY4PsG@9a+S2;bH%+Xp+GTZD z=A+L9WvxlB+4)Vguv#zf5M&49;`o3Y`aLtb+RWD9%n2S&{uFZ~L3i3e-#(+DMY5u#1^uS6|00UdX`Mixz%b z*Jft_S$)Q1dV+FH-&v10ELS)!pN5V0 z7-b%kxwcv$!Y);lk}N%U9aJU>O)zCchvceS6vnJEtyX%zre{?Jw>3vxll0bz`a~7^ zmWvci0SV2={{eM!$?Qw4x;Uwiai5hs1^A3TFi73Z^3|j{E&RK`Imzx?ssIff=u8?u zlsvVT;l={frEgHWszw{d+cYYJmi2g_z>C|{0>~gX8`FAg&-!be;_pe1+6fX_b9v5i z^jFUQT!LJ|%x;&n3AR)>PzDW|< z^Vu`CXJpV=s%}X7{kuoO78X>5!*kgz8?0CNSTfHAX0KHNR`#7tL^*g~NuwW!fm@U` zpxd*xwTZd_)WfP5aAv89&e+1TPqm@!Ye{0Y8PSX^iB1jG3SM#pxvIs}I^B)lPvs|B z!ueyOeOZ!?VUC*v8FVMmHxwFbDRIxZE{&#rST*J(yzVHw`SI20EdhPYY*L@%TmBk{ zaEVzifZ^xpx;Z;|#)dc~1K%b)(nNUnbvy#nj{*AVs<2)jHQ#RY+*i zR1tnh7XAW;deJu0Z#vywVJPd0aJ#Fp^13GppW73ocT4isy2Omy1DWE-ePVN;iW&U8 zTt)6>uUR%pnJc6kbf#>Gl|kBhmoD>1)Vlw!+j=ebKAzVK_U?9#Ob6ifN?oGsCNtzQ zo;DPr38OW`4`R#wPeHzp{qCWDrA`q%PNie(%jg7I3*M{a3wWKza?)$S^TG z8sM3tR2t>I9fwP9(Ck3_6+d?B>z{zad2^WPK;-(+v*TN_b$xU* zWm`>RQR5U+R-5JI5xZ9s&~F}eA9RZsa*(QCc7ZV)l>#5Rw8!jqa6c+--ZvIqiNxJo z-6eft46!S8zCEhW7&L_P&$!#xl-p4hDgDllon2XOWEqMJqz%PHx&wEHyseFz?s~yp zp|m$Z1ag0Q{~b;uN;B2SJ3}Z!+~W;@%)Rw-XP?w%1A0^SHhwTt|fS7*$q{g(e2T!Vs%Mirlz^}9;JCVb(yOa%F)5?*|_+7fF}>&zd^zyXx98gtWRjx?v! zgke52I_z7n^G`q*XJ$_}-iiZTxI*@aybWc-IY_8~UXvr@Oyr-4%DP@ zacq@k;{j8^#{q)`x~kFrd7#zg8gpy?WvIIQ$Lh~a9#i{%JBF@hJ7YisP3{=|^Gh$2 zm0}RcsbOG%cUw?n($?;RaQNXswn42vg_EIt+QVkv%0u4bI|G5jFK}`uTai&;|0rO# z^@``njy&@FeBvkHdd}q}9-h~E?Z9Fd^QLQ*&gOuQ3KC9cR+7zw$x~Z&pyr^2bp?Sl znbCV6SnE^(b**S+Za}W<%0bm62Ier}^VWI*tn~}@q(BnL5@J;%3o4D8`0q_a zRqS(MBmTW$U;ifhkps*MJR5m*+ELIl)(ma)(!*BW$;Mk##Z%YfLCUGcgIXz|i)|ycF&$-6!;>xZC07;ao**@FR(cA`U2tN87 zwk_m=?H%Q=tg2wi1{O2gwPax_B_)fq?+;bB>ZD!wBXKiomV%gCT$feVd|H5`O}?*k zpo##efjDEZ$iSLm)ZzX(?@%MDL*_$I%?QAB&M=jwq}?3JI8$bAxaa1_v9t%*;Hvo=AZX!X1z6b5|{Oy&=|HyZC9 z<{z%DYO9~lHGC31*ete*lQZ2qH95bH=+s2;2wTdNQsQ0kO9+Me7ulx8>;Y`E zv0?qNL?9rR1>4>jmFpFqroJG*=^1+q)q#WeHj*~E#Ax&7@_K68(CH|1u(fW_s==H` zFKwA6(J9_@DbUq28CbHLZGDVibNqo`Ow)ZkaHcgit}s4WEcAPN7 z(>ez*y}uV~uS2ip`k|$@-+W>+*SV!9P;|wMy#jy-z_{f2e#5#3wzkN8a9ET+L^~5Vl|##=vBN)=9X^gTHRt%yeV_;AZ>3u zE!T!hB;`^UqssQQ!3RX=!+`lrMlMuB0dxEMbTE5x+8Gu`DI19*UKF|IYlI-y_D9?jQ^v+eDI?&U^w258jkt{;2Rgv+yX6+j8;|9 zhhwHHMN-|-pVLT%lc((rusn4d`7{b>KbQaadLUz5WcVMV@dTpn(RUj1oS$uXvcP1! zaX%aSNw;<@MvaG=*}b-VWB1v!!|$vcgtZ)+yE;uAj2#yW)W6pYvSeP4Y(o`2u)S+BQDeJ(QA;KkMH);Q3XCe0qYRhRH4_7A^7(K6y`pZCI*bX3nzDo z`oZWErhB$7b=v_i*(!g{X{Kv=x_SSWXAFn``%B#Zu6mRV*oICuO1?yp_}B~m30c_Y zD{iLQ(4US5#sITd(UE~6u@KaD0he}j8~tG5qtB1x5Urfl)u8i9b{5g3&GELrUGMqj z4|aFF`ox>AW*`_P0waNcuDd6WRw=|fb2O}RATt*z(^@lug)^97rozX>C{$Kn=}>#& zam_2xu7!B0h*3ZKFbUkMMfJ(M;m9fy6d1ru<9F8$pdF71RlDpBoPGYe%*YP=U|}H# zmiUS?C~oI5FfR6-7C@^EJPxM}4w;v~d32pIQ&1GsQB=kc$E%ES;l za&mW_i>yn5eLGqc`_BIVjDcJ{@*RgjtRL~k7jH3BMx_{lA%EnS1Npppvi+)w7d?2- z$3FArN#LmqMFCPCj|J_$YOXls==bNOA$3@XR62(T_sx&s{J(Ux4vsQE@&n7T{^wRi zfrHb*i0N>l%0*=`m#_kXI87N9MJan7*apld)++&GKSAm%wuh1&dM|JG)Cd68fLhy@8C@ExuMg67H{-6VTPEew}7 zu#&9+esFlK8{KO)7>;)#>%UV4qi_`IA^gCNg*3#PdH!tf<<>lU-co)rKo1o10@SBZ zqeC0k_u1=~X>UHu^%z!dV}N8_1kiQiukRTI-{*jp;aR)tTL~mqQ#T@>f{|c@V04Xd zTIg~eu=xLPpTd>?F#t6(2`^$`WpO#KJAUg$p!G%_t97QXUWra-hO5;Vc9-2y$SDX+ zker5xcnJMwk^vHM%IZ?3Z6eo?9yupt_{AyUnf4frwjrBz{c|lI`@1=#vKd%~hxEEKo!6tT$YH7xHQ`9=4lMKBmUrHr%q8q zjG)!F|TOeo6m{=f!+W_KTs``~)3uG(3M&4%jjG^;&lEkr7L*Q=omPWV(s{YLZVJH8t^PK4D@*l0J zB1T=ERBl?8OX$0jVzTVZAP-UoQo<`ATo!g09KfH-l|AJdyEV^!`cCF z{7s|pFnCdQE+=Li$mZSudt(3aLm(&d_Mv-)@a zz~~g(#-+V;Vt4)Q0c zX+B6=OX>q?&0Ki)6a>D{Qr2Fy^l=tXhOLHyofA7MGNxe@G&?MS!4{3+$EBr2p)zxm z_40MIjoo;wkev5<{Zszh ztL#J=n4Jaw4oL3Pedhp1W;aLnveC^3{b?UEW-_*dth=;pV?8w4+YsBM6)wpGYyc+u zw7NspI-22}T$}=t-N2t-L7|N0Y~P&n&R0fKU%cDP*1aLd;B97St4||5{`1YpU^@V8 zbp;i}8$Zv_K|Ga!8`1%?kS3UCvUpkypn2RvUi%7M4rj9u{#$DIj>dRHQ0Hibby8I| zT1SB&msrpx<*ZBl;;b7Y^O+IQy%T{g`2!28EG&;^rXRpG?C;s(Uu$YoFe-srbCY7q zJUJZ^4&L?3qoka@Iu>E_5Z21smx5R*1hxZWdUTu^uG-GlyDV=-oe6BO(f!t3xDEh= zL8-HxW^V$*B|z4xZly<%hY6KCmLjhFn=R2E2@QaMnW|8rZHKh%?NeJr+uhN;A-|R1 z=|)D^jbov7wYS=fGsyFvtGbhvgWFj*`&+-*K=GFt!?lH29*tHdSNRauqDhDNWWlnc z>LAMx2N`tK3+GicepX#IxyUJ?JM(MY9?0@tDbGPrtU@0$R@6ymjh(>5p6SLf+7ev4bFAi4SGzz)Si9JVj-`RL~F60?2S|M>}gwinPE57be7%!>C z9QUCjf@imcLR%co0T>8A+@kor6)ivy0@Faw|0&{>X9Ojp2*YD?@&<~U=RV^9J-8#H z6?ripjSSwn4|?2e*R)*8)|?6|E}l0rSsitq?gt807Fbe{rOE9~);S?XkVo5LPyuW}&3PP>~JnW${`qmrxr|MUQ zi}b%AIQcgL20x#U1w)7SQWTJ1X2q=@eTkF>CPwjSg5k%C&L%Pgfq*hD0@_oK|NU3g z@_#5C_&c~==lAa;;vqXC9WqkGdy|LOR49e}yp|61jfWD>g29pwBJ>?2~YCiyhD}I^v zlFk~t_$WBTM}dh2*(}2L8?XFbP|AGUt^EW9IJ;~A`|l78D>wY_hoZu>sc2C;_x|{? z?;8p*AdcPHZx#Q}5}ce?At>mW=>|)gt=mI@3KFf!$Bv-9Q@2~WrKpS$?DcD}sMO*i z`+EMp1dnFZlmC3Q0WgV_FfrOcpZ7#ZOId==s{DUsWw^oC=ETQ#M{K_yd{XfM_6_>P z`?f!$rC8FnlDq%SCo}*Z#Qi?5vL97mbjOuZY2B6z^-vT4Np|;QdW68kkvho*YBK{cr6D?Cye~p|+&+Zz^k8`0oRRun29FabBtPGi9L5 zc>aVMQ1Dl|!GP}H44R>*XWnxKeVaT32=Fq-)|SZ-Fy!B`hl-m&3VYz|@t*|`GW>e# z)md>;d1oqbh2TGDLnhk5TM?WV%e!;CH9)j{7yRSDSA&zR_x!NR5s3=?O_bEttIm!4 zzltwS4%}M~ISinOgbu9i@qT&|vUz-PWvT{We5Jx;;~m<`(*>ks#Z~(JV3>Dk-i(n} z{Ep23Ywt?Kn!3_(i1?u3C@P>G(20WB(Tc`W*&GtAtuP7io#l zloW0GX>0-M53YY9h!mP2H3j8WG0PdWw6qvKu-A=tUtj(~lt2>RUU{Q^>h5B%*J43V zxQSr6H1uDrH$kBRi)vp?wm^Jj&P6UyZtR&q<}f%$)Jc=zF$?HbA5h+v8|He=J%h9A zbV6SHt;sl|r(3k+BdO%qZFY7#th(Ym9~dm&4c?J#GO%a*MAD2_R$m{>r<#=ez31zv z>P2a!ysCv`PZvmWb~9YU?j@7vV7D^C&~RScta9U2BM0l&Fzh1Utuij`V{gg%(TG9N zC|q%rL@~n(1Q|F>S+MY7&DEN0FTc=e1{^&K&~Y)1AJ!5)A^D*(5Ka~&M}Z`*@A35$ z@@Bj~gO>XGtoexqL0<5oxN`aY*eA4z{f4Q5eJfyxzU4UAna{rqr}k;sd33jZGwhr|= zWQOPZg6{J46Q3V`{G*q*V5H=hZbSv_jz)6wuYI56A{TJg@J+KhwEL`1#`O0ui1Rfy4>d`C#<_9;^8|LJ6E?{fNV5S!o z&27ga$1AKhSdftBR{L9e$M2i4rxmFH8MTW1SJz`0v**>aUdG?=H0S(tzv7^M`e4fw z;Bg3|6i*Ms_W95Y`|(%dv>5C%Jv>!@4p9pcWIyjV`qd1kKaAreUVFMQ7g6KTN>@pvKvlj{{M%wEMwCPD;P7p8Ad~5#)H{7@n zthFnU)8=9SC#Qnu`>=|Kr}0zsSI19_ZqCeffKLtq3~iFg0lFX%vlJofkgacB z(5&(Tjvz7;I%q7m-sx2kZcUQ#?{`{!CKIOmTK)B5Tb#KDCTg0hf)HkxT&Irx!gJ}b?tfQ#h-Id_c-|a zkR2#gY*bRv3qHn&s!b@gd00yo&gRR}js3PA@FN8hHnlS@KQT7ypKrOsbQw$b;V$df zONC2?Dr;{V#eDqrN&BBaO;{G)9Qk)f>ET>0`*^l`oc8vQB1NIME^In9uEJhHOQpph z6uORh7G&7$NPJM?<=Q$ibWYajx1@-xpu%U%y1k6dt?r|ZMV7C+4CvoYC&cH@Otm8t zO}D8s6glCoT}M?)ByQ*6=3VhV?#Gd=W3s_FZ9x^d(y?2lg64gFhHP8dhAK68xbiZ6 zLDF6ZOLq3u9|DOORhY4whcYLsM9H0MD{JbbALt8aTYnLlMOdN#JS0Auv@?=DASgBQ zNMKnu&6kUv-NjG(Q9u2|kcKjk__xAit3*Q&6DtCyt!Ii_TRvkbs$pNnM~!Km;mVry zi@N_ z$;_FT54Uf;9GUEGLXfM;Lm!mZ1II9nN++Twy$F`ugEyDv&BU4;oMU-YN2i-VBFix= zY^_+2UaYpoEi9i18`Ygh=}8se%r>--=7(GY&O*|v*K{cxJ=}df;JZ^U#eQ?Ps(F(Q zRm%3p#1ZZNn+NOYpC?_r&P~dvJ4&_jjy*!u5aaf?;~6tV-ks=lWNnarYV`azg4|$& z+)MpV6*k1}{B^Li@EM;4MwmhGuY(9-vlSd6e0uM^u5JyU{I=r zK!Qf2^tBR;_bx6Jkq+K2%FrSDgyK#D32d(pPg#J=b}8GLgoE-FNGK@3h=hXji{2ul#(QPfKrk;5)?~NEJ4L32p*u6B!L8FH{nRUCzddB*|)lC