From ac6f14115afcc19329a4005b8864873411ef948e Mon Sep 17 00:00:00 2001 From: Frank Brehm Date: Sun, 18 Apr 2021 10:57:07 +0200 Subject: [PATCH] committing changes in /etc made by "apt install -y openjdk-11-jdk fonts-dejavu-extra fonts-ipafont-gothic fonts-ipafont-mincho fonts-wqy-microhei fonts-indic" Package changes: +ca-certificates-java 20190405 all +fonts-beng 2:1.2 all +fonts-beng-extra 1.0-6 all +fonts-dejavu-extra 2.37-1 all +fonts-deva 2:1.2 all +fonts-deva-extra 3.0-4 all +fonts-gubbi 1.3-3 all +fonts-gujr 2:1.3 all +fonts-gujr-extra 1.0-7 all +fonts-guru 2:1.2 all +fonts-guru-extra 2.0-4 all +fonts-indic 2:1.3 all +fonts-ipafont-gothic 00303-18 all +fonts-ipafont-mincho 00303-18 all +fonts-kalapi 1.0-3 all +fonts-knda 2:1.2 all +fonts-lohit-beng-assamese 2.91.5-1 all +fonts-lohit-beng-bengali 2.91.5-1 all +fonts-lohit-deva 2.95.4-3 all +fonts-lohit-gujr 2.92.4-3 all +fonts-lohit-guru 2.91.2-1 all +fonts-lohit-knda 2.5.4-2 all +fonts-lohit-mlym 2.92.2-1 all +fonts-lohit-orya 2.91.2-1 all +fonts-lohit-taml 2.91.3-1 all +fonts-lohit-taml-classical 2.5.4-1 all +fonts-lohit-telu 2.5.5-1 all +fonts-mlym 2:1.2 all +fonts-nakula 1.0-3 all +fonts-navilu 1.2-2 all +fonts-orya 2:1.2 all +fonts-orya-extra 2.0-5 all +fonts-pagul 1.0-7 all +fonts-sahadeva 1.0-4 all +fonts-samyak-deva 1.2.2-4 all +fonts-samyak-gujr 1.2.2-4 all +fonts-samyak-mlym 1.2.2-4 all +fonts-samyak-taml 1.2.2-4 all +fonts-smc 1:7.0 all +fonts-smc-anjalioldlipi 7.1.1-1 all +fonts-smc-chilanka 1.3.1-1 all +fonts-smc-dyuthi 3.0.1-1 all +fonts-smc-karumbi 1.1.1-1 all +fonts-smc-keraleeyam 3.0.1-1 all +fonts-smc-manjari 1.710-1 all +fonts-smc-meera 7.0.1-1 all +fonts-smc-rachana 7.0.1-1 all +fonts-smc-raghumalayalamsans 2.1.2-1 all +fonts-smc-suruma 3.2.2-1 all +fonts-smc-uroob 2.0.1-1 all +fonts-taml 2:1.3 all +fonts-telu 2:1.2 all +fonts-telu-extra 2.0-4 all +fonts-wqy-microhei 0.2.0-beta-3 all +fonts-yrsa-rasa 1.002-2 all +java-common 0.71 all +libasound2 1.1.8-1 amd64 +libasound2-data 1.1.8-1 all +libavahi-client3 0.7-4+deb10u1 amd64 +libavahi-common-data 0.7-4+deb10u1 amd64 +libavahi-common3 0.7-4+deb10u1 amd64 +libcups2 2.2.10-6+deb10u4 amd64 +libdrm-amdgpu1 2.4.97-1 amd64 +libdrm-common 2.4.97-1 all +libdrm-intel1 2.4.97-1 amd64 +libdrm-nouveau2 2.4.97-1 amd64 +libdrm-radeon1 2.4.97-1 amd64 +libdrm2 2.4.97-1 amd64 +libgif7 5.1.4-3 amd64 +libgl1 1.1.0-1 amd64 +libgl1-mesa-dri 18.3.6-2+deb10u1 amd64 +libglapi-mesa 18.3.6-2+deb10u1 amd64 +libglvnd0 1.1.0-1 amd64 +libglx-mesa0 18.3.6-2+deb10u1 amd64 +libglx0 1.1.0-1 amd64 +liblcms2-2 2.9-3 amd64 +libllvm7 1:7.0.1-8+deb10u2 amd64 +libpciaccess0 0.14-1 amd64 +libpcsclite1 1.8.24-1 amd64 +libx11-xcb1 2:1.6.7-1+deb10u1 amd64 +libxcb-dri2-0 1.13.1-2 amd64 +libxcb-dri3-0 1.13.1-2 amd64 +libxcb-glx0 1.13.1-2 amd64 +libxcb-present0 1.13.1-2 amd64 +libxcb-sync1 1.13.1-2 amd64 +libxdamage1 1:1.1.4-3+b3 amd64 +libxext6 2:1.3.3-1+b2 amd64 +libxfixes3 1:5.0.3-1 amd64 +libxi6 2:1.7.9-1 amd64 +libxrender1 1:0.9.10-1 amd64 +libxshmfence1 1.3-1 amd64 +libxtst6 2:1.2.3-1 amd64 +libxxf86vm1 1:1.1.4-1+b2 amd64 +openjdk-11-jdk 11.0.9.1+1-1~deb10u2 amd64 +openjdk-11-jdk-headless 11.0.9.1+1-1~deb10u2 amd64 +openjdk-11-jre 11.0.9.1+1-1~deb10u2 amd64 +openjdk-11-jre-headless 11.0.9.1+1-1~deb10u2 amd64 +x11-common 1:7.7+19 all --- .etckeeper | 88 +- .java/.systemPrefs/.system.lock | 0 .java/.systemPrefs/.systemRootModFile | 0 X11/Xreset | 34 + X11/Xreset.d/README | 4 + X11/Xresources/x11-common | 10 + X11/Xsession | 113 ++ X11/Xsession.d/20x11-common_process-args | 70 + X11/Xsession.d/30x11-common_xresources | 26 + X11/Xsession.d/35x11-common_xhost-local | 10 + X11/Xsession.d/40x11-common_xsessionrc | 6 + X11/Xsession.d/50x11-common_determine-startup | 47 + X11/Xsession.d/90x11-common_ssh-agent | 24 + X11/Xsession.d/99x11-common_start | 7 + X11/Xsession.options | 9 + X11/rgb.txt | 754 ++++++++++ alternatives/fonts-japanese-gothic.ttf | 1 + alternatives/fonts-japanese-mincho.ttf | 1 + alternatives/jaotc | 1 + alternatives/jar | 1 + alternatives/jar.1.gz | 1 + alternatives/jarsigner | 1 + alternatives/jarsigner.1.gz | 1 + alternatives/java | 1 + alternatives/java.1.gz | 1 + alternatives/javac | 1 + alternatives/javac.1.gz | 1 + alternatives/javadoc | 1 + alternatives/javadoc.1.gz | 1 + alternatives/javap | 1 + alternatives/javap.1.gz | 1 + alternatives/jcmd | 1 + alternatives/jcmd.1.gz | 1 + alternatives/jconsole | 1 + alternatives/jconsole.1.gz | 1 + alternatives/jdb | 1 + alternatives/jdb.1.gz | 1 + alternatives/jdeprscan | 1 + alternatives/jdeps | 1 + alternatives/jdeps.1.gz | 1 + alternatives/jexec | 1 + alternatives/jexec-binfmt | 1 + alternatives/jfr | 1 + alternatives/jhsdb | 1 + alternatives/jimage | 1 + alternatives/jinfo | 1 + alternatives/jinfo.1.gz | 1 + alternatives/jjs | 1 + alternatives/jjs.1.gz | 1 + alternatives/jlink | 1 + alternatives/jmap | 1 + alternatives/jmap.1.gz | 1 + alternatives/jmod | 1 + alternatives/jps | 1 + alternatives/jps.1.gz | 1 + alternatives/jrunscript | 1 + alternatives/jrunscript.1.gz | 1 + alternatives/jshell | 1 + alternatives/jstack | 1 + alternatives/jstack.1.gz | 1 + alternatives/jstat | 1 + alternatives/jstat.1.gz | 1 + alternatives/jstatd | 1 + alternatives/jstatd.1.gz | 1 + alternatives/keytool | 1 + alternatives/keytool.1.gz | 1 + alternatives/pack200 | 1 + alternatives/pack200.1.gz | 1 + alternatives/rmic | 1 + alternatives/rmic.1.gz | 1 + alternatives/rmid | 1 + alternatives/rmid.1.gz | 1 + alternatives/rmiregistry | 1 + alternatives/rmiregistry.1.gz | 1 + alternatives/serialver | 1 + alternatives/serialver.1.gz | 1 + alternatives/unpack200 | 1 + alternatives/unpack200.1.gz | 1 + ca-certificates/update.d/jks-keystore | 89 ++ default/cacerts | 10 + fonts/conf.avail/59-lohit-devanagari.conf | 18 + fonts/conf.avail/65-0-fonts-beng-extra.conf | 44 + fonts/conf.avail/65-0-fonts-deva-extra.conf | 217 +++ fonts/conf.avail/65-0-fonts-gubbi.conf | 29 + fonts/conf.avail/65-0-fonts-gujr-extra.conf | 30 + fonts/conf.avail/65-0-fonts-guru-extra.conf | 30 + fonts/conf.avail/65-0-fonts-orya-extra.conf | 30 + fonts/conf.avail/65-0-fonts-pagul.conf | 29 + fonts/conf.avail/65-0-fonts-telu-extra.conf | 30 + fonts/conf.avail/65-0-smc-meera.conf | 21 + fonts/conf.avail/65-0-smc-rachana.conf | 21 + fonts/conf.avail/65-wqy-microhei.conf | 64 + fonts/conf.avail/66-lohit-assamese.conf | 32 + fonts/conf.avail/66-lohit-bengali.conf | 32 + fonts/conf.avail/66-lohit-devanagari.conf | 143 ++ fonts/conf.avail/66-lohit-gujarati.conf | 33 + fonts/conf.avail/66-lohit-gurmukhi.conf | 30 + fonts/conf.avail/66-lohit-kannada.conf | 29 + fonts/conf.avail/66-lohit-odia.conf | 33 + .../conf.avail/66-lohit-tamil-classical.conf | 32 + fonts/conf.avail/66-lohit-tamil.conf | 32 + fonts/conf.avail/66-lohit-telugu.conf | 21 + fonts/conf.avail/67-fonts-smc-manjari.conf | 21 + fonts/conf.avail/67-lohit-malayalam.conf | 30 + fonts/conf.avail/67-smc-anjalioldlipi.conf | 21 + fonts/conf.avail/67-smc-chilanka.conf | 21 + fonts/conf.avail/67-smc-dyuthi.conf | 21 + fonts/conf.avail/67-smc-karumbi.conf | 21 + fonts/conf.avail/67-smc-keraleeyam.conf | 21 + .../conf.avail/67-smc-raghumalayalamsans.conf | 21 + fonts/conf.avail/67-smc-suruma.conf | 21 + fonts/conf.avail/67-smc-uroob.conf | 21 + fonts/conf.d/59-lohit-devanagari.conf | 1 + fonts/conf.d/65-0-fonts-beng-extra.conf | 1 + fonts/conf.d/65-0-fonts-deva-extra.conf | 1 + fonts/conf.d/65-0-fonts-gubbi.conf | 1 + fonts/conf.d/65-0-fonts-gujr-extra.conf | 1 + fonts/conf.d/65-0-fonts-guru-extra.conf | 1 + fonts/conf.d/65-0-fonts-orya-extra.conf | 1 + fonts/conf.d/65-0-fonts-pagul.conf | 1 + fonts/conf.d/65-0-fonts-telu-extra.conf | 1 + fonts/conf.d/65-0-smc-meera.conf | 1 + fonts/conf.d/65-0-smc-rachana.conf | 1 + fonts/conf.d/65-wqy-microhei.conf | 1 + fonts/conf.d/66-lohit-assamese.conf | 1 + fonts/conf.d/66-lohit-bengali.conf | 1 + fonts/conf.d/66-lohit-devanagari.conf | 1 + fonts/conf.d/66-lohit-gujarati.conf | 1 + fonts/conf.d/66-lohit-gurmukhi.conf | 1 + fonts/conf.d/66-lohit-kannada.conf | 1 + fonts/conf.d/66-lohit-odia.conf | 1 + fonts/conf.d/66-lohit-tamil-classical.conf | 1 + fonts/conf.d/66-lohit-tamil.conf | 1 + fonts/conf.d/66-lohit-telugu.conf | 1 + fonts/conf.d/67-fonts-smc-manjari.conf | 1 + fonts/conf.d/67-smc-anjalioldlipi.conf | 1 + fonts/conf.d/67-smc-chilanka.conf | 1 + fonts/conf.d/67-smc-dyuthi.conf | 1 + fonts/conf.d/67-smc-karumbi.conf | 1 + fonts/conf.d/67-smc-keraleeyam.conf | 1 + fonts/conf.d/67-smc-raghumalayalamsans.conf | 1 + fonts/conf.d/67-smc-suruma.conf | 1 + fonts/conf.d/67-smc-uroob.conf | 1 + init.d/x11-common | 122 ++ java-11-openjdk/accessibility.properties | 10 + java-11-openjdk/jfr/default.jfc | 889 ++++++++++++ java-11-openjdk/jfr/profile.jfc | 890 ++++++++++++ java-11-openjdk/jvm-amd64.cfg | 4 + java-11-openjdk/logging.properties | 63 + java-11-openjdk/management/jmxremote.access | 79 ++ .../management/management.properties | 302 ++++ java-11-openjdk/net.properties | 121 ++ java-11-openjdk/psfont.properties.ja | 119 ++ java-11-openjdk/psfontj2d.properties | 323 +++++ java-11-openjdk/security/blacklisted.certs | 39 + java-11-openjdk/security/default.policy | 217 +++ java-11-openjdk/security/java.policy | 44 + java-11-openjdk/security/java.security | 1258 +++++++++++++++++ java-11-openjdk/security/nss.cfg | 4 + java-11-openjdk/security/policy/README.txt | 54 + .../policy/limited/default_US_export.policy | 6 + .../policy/limited/default_local.policy | 14 + .../policy/limited/exempt_local.policy | 13 + .../policy/unlimited/default_US_export.policy | 6 + .../policy/unlimited/default_local.policy | 6 + .../security/public_suffix_list.dat | Bin 0 -> 232578 bytes java-11-openjdk/sound.properties | 39 + java-11-openjdk/swing.properties | 2 + rcS.d/S01x11-common | 1 + ssl/certs/java/cacerts | Bin 0 -> 161854 bytes 170 files changed, 7217 insertions(+), 1 deletion(-) create mode 100644 .java/.systemPrefs/.system.lock create mode 100644 .java/.systemPrefs/.systemRootModFile create mode 100755 X11/Xreset create mode 100644 X11/Xreset.d/README create mode 100644 X11/Xresources/x11-common create mode 100755 X11/Xsession create mode 100644 X11/Xsession.d/20x11-common_process-args create mode 100644 X11/Xsession.d/30x11-common_xresources create mode 100644 X11/Xsession.d/35x11-common_xhost-local create mode 100644 X11/Xsession.d/40x11-common_xsessionrc create mode 100644 X11/Xsession.d/50x11-common_determine-startup create mode 100644 X11/Xsession.d/90x11-common_ssh-agent create mode 100644 X11/Xsession.d/99x11-common_start create mode 100644 X11/Xsession.options create mode 100644 X11/rgb.txt create mode 120000 alternatives/fonts-japanese-gothic.ttf create mode 120000 alternatives/fonts-japanese-mincho.ttf create mode 120000 alternatives/jaotc create mode 120000 alternatives/jar create mode 120000 alternatives/jar.1.gz create mode 120000 alternatives/jarsigner create mode 120000 alternatives/jarsigner.1.gz create mode 120000 alternatives/java create mode 120000 alternatives/java.1.gz create mode 120000 alternatives/javac create mode 120000 alternatives/javac.1.gz create mode 120000 alternatives/javadoc create mode 120000 alternatives/javadoc.1.gz create mode 120000 alternatives/javap create mode 120000 alternatives/javap.1.gz create mode 120000 alternatives/jcmd create mode 120000 alternatives/jcmd.1.gz create mode 120000 alternatives/jconsole create mode 120000 alternatives/jconsole.1.gz create mode 120000 alternatives/jdb create mode 120000 alternatives/jdb.1.gz create mode 120000 alternatives/jdeprscan create mode 120000 alternatives/jdeps create mode 120000 alternatives/jdeps.1.gz create mode 120000 alternatives/jexec create mode 120000 alternatives/jexec-binfmt create mode 120000 alternatives/jfr create mode 120000 alternatives/jhsdb create mode 120000 alternatives/jimage create mode 120000 alternatives/jinfo create mode 120000 alternatives/jinfo.1.gz create mode 120000 alternatives/jjs create mode 120000 alternatives/jjs.1.gz create mode 120000 alternatives/jlink create mode 120000 alternatives/jmap create mode 120000 alternatives/jmap.1.gz create mode 120000 alternatives/jmod create mode 120000 alternatives/jps create mode 120000 alternatives/jps.1.gz create mode 120000 alternatives/jrunscript create mode 120000 alternatives/jrunscript.1.gz create mode 120000 alternatives/jshell create mode 120000 alternatives/jstack create mode 120000 alternatives/jstack.1.gz create mode 120000 alternatives/jstat create mode 120000 alternatives/jstat.1.gz create mode 120000 alternatives/jstatd create mode 120000 alternatives/jstatd.1.gz create mode 120000 alternatives/keytool create mode 120000 alternatives/keytool.1.gz create mode 120000 alternatives/pack200 create mode 120000 alternatives/pack200.1.gz create mode 120000 alternatives/rmic create mode 120000 alternatives/rmic.1.gz create mode 120000 alternatives/rmid create mode 120000 alternatives/rmid.1.gz create mode 120000 alternatives/rmiregistry create mode 120000 alternatives/rmiregistry.1.gz create mode 120000 alternatives/serialver create mode 120000 alternatives/serialver.1.gz create mode 120000 alternatives/unpack200 create mode 120000 alternatives/unpack200.1.gz create mode 100755 ca-certificates/update.d/jks-keystore create mode 100644 default/cacerts create mode 100644 fonts/conf.avail/59-lohit-devanagari.conf create mode 100644 fonts/conf.avail/65-0-fonts-beng-extra.conf create mode 100644 fonts/conf.avail/65-0-fonts-deva-extra.conf create mode 100644 fonts/conf.avail/65-0-fonts-gubbi.conf create mode 100644 fonts/conf.avail/65-0-fonts-gujr-extra.conf create mode 100644 fonts/conf.avail/65-0-fonts-guru-extra.conf create mode 100644 fonts/conf.avail/65-0-fonts-orya-extra.conf create mode 100644 fonts/conf.avail/65-0-fonts-pagul.conf create mode 100644 fonts/conf.avail/65-0-fonts-telu-extra.conf create mode 100644 fonts/conf.avail/65-0-smc-meera.conf create mode 100644 fonts/conf.avail/65-0-smc-rachana.conf create mode 100644 fonts/conf.avail/65-wqy-microhei.conf create mode 100644 fonts/conf.avail/66-lohit-assamese.conf create mode 100644 fonts/conf.avail/66-lohit-bengali.conf create mode 100644 fonts/conf.avail/66-lohit-devanagari.conf create mode 100644 fonts/conf.avail/66-lohit-gujarati.conf create mode 100644 fonts/conf.avail/66-lohit-gurmukhi.conf create mode 100644 fonts/conf.avail/66-lohit-kannada.conf create mode 100644 fonts/conf.avail/66-lohit-odia.conf create mode 100644 fonts/conf.avail/66-lohit-tamil-classical.conf create mode 100644 fonts/conf.avail/66-lohit-tamil.conf create mode 100644 fonts/conf.avail/66-lohit-telugu.conf create mode 100644 fonts/conf.avail/67-fonts-smc-manjari.conf create mode 100644 fonts/conf.avail/67-lohit-malayalam.conf create mode 100644 fonts/conf.avail/67-smc-anjalioldlipi.conf create mode 100644 fonts/conf.avail/67-smc-chilanka.conf create mode 100644 fonts/conf.avail/67-smc-dyuthi.conf create mode 100644 fonts/conf.avail/67-smc-karumbi.conf create mode 100644 fonts/conf.avail/67-smc-keraleeyam.conf create mode 100644 fonts/conf.avail/67-smc-raghumalayalamsans.conf create mode 100644 fonts/conf.avail/67-smc-suruma.conf create mode 100644 fonts/conf.avail/67-smc-uroob.conf create mode 120000 fonts/conf.d/59-lohit-devanagari.conf create mode 120000 fonts/conf.d/65-0-fonts-beng-extra.conf create mode 120000 fonts/conf.d/65-0-fonts-deva-extra.conf create mode 120000 fonts/conf.d/65-0-fonts-gubbi.conf create mode 120000 fonts/conf.d/65-0-fonts-gujr-extra.conf create mode 120000 fonts/conf.d/65-0-fonts-guru-extra.conf create mode 120000 fonts/conf.d/65-0-fonts-orya-extra.conf create mode 120000 fonts/conf.d/65-0-fonts-pagul.conf create mode 120000 fonts/conf.d/65-0-fonts-telu-extra.conf create mode 120000 fonts/conf.d/65-0-smc-meera.conf create mode 120000 fonts/conf.d/65-0-smc-rachana.conf create mode 120000 fonts/conf.d/65-wqy-microhei.conf create mode 120000 fonts/conf.d/66-lohit-assamese.conf create mode 120000 fonts/conf.d/66-lohit-bengali.conf create mode 120000 fonts/conf.d/66-lohit-devanagari.conf create mode 120000 fonts/conf.d/66-lohit-gujarati.conf create mode 120000 fonts/conf.d/66-lohit-gurmukhi.conf create mode 120000 fonts/conf.d/66-lohit-kannada.conf create mode 120000 fonts/conf.d/66-lohit-odia.conf create mode 120000 fonts/conf.d/66-lohit-tamil-classical.conf create mode 120000 fonts/conf.d/66-lohit-tamil.conf create mode 120000 fonts/conf.d/66-lohit-telugu.conf create mode 120000 fonts/conf.d/67-fonts-smc-manjari.conf create mode 120000 fonts/conf.d/67-smc-anjalioldlipi.conf create mode 120000 fonts/conf.d/67-smc-chilanka.conf create mode 120000 fonts/conf.d/67-smc-dyuthi.conf create mode 120000 fonts/conf.d/67-smc-karumbi.conf create mode 120000 fonts/conf.d/67-smc-keraleeyam.conf create mode 120000 fonts/conf.d/67-smc-raghumalayalamsans.conf create mode 120000 fonts/conf.d/67-smc-suruma.conf create mode 120000 fonts/conf.d/67-smc-uroob.conf create mode 100755 init.d/x11-common create mode 100644 java-11-openjdk/accessibility.properties create mode 100644 java-11-openjdk/jfr/default.jfc create mode 100644 java-11-openjdk/jfr/profile.jfc create mode 100644 java-11-openjdk/jvm-amd64.cfg create mode 100644 java-11-openjdk/logging.properties create mode 100644 java-11-openjdk/management/jmxremote.access create mode 100644 java-11-openjdk/management/management.properties create mode 100644 java-11-openjdk/net.properties create mode 100644 java-11-openjdk/psfont.properties.ja create mode 100644 java-11-openjdk/psfontj2d.properties create mode 100644 java-11-openjdk/security/blacklisted.certs create mode 100644 java-11-openjdk/security/default.policy create mode 100644 java-11-openjdk/security/java.policy create mode 100644 java-11-openjdk/security/java.security create mode 100644 java-11-openjdk/security/nss.cfg create mode 100644 java-11-openjdk/security/policy/README.txt create mode 100644 java-11-openjdk/security/policy/limited/default_US_export.policy create mode 100644 java-11-openjdk/security/policy/limited/default_local.policy create mode 100644 java-11-openjdk/security/policy/limited/exempt_local.policy create mode 100644 java-11-openjdk/security/policy/unlimited/default_US_export.policy create mode 100644 java-11-openjdk/security/policy/unlimited/default_local.policy create mode 100644 java-11-openjdk/security/public_suffix_list.dat create mode 100644 java-11-openjdk/sound.properties create mode 100644 java-11-openjdk/swing.properties create mode 120000 rcS.d/S01x11-common create mode 100644 ssl/certs/java/cacerts diff --git a/.etckeeper b/.etckeeper index e1d8343..72e548a 100755 --- a/.etckeeper +++ b/.etckeeper @@ -6,7 +6,6 @@ mkdir -p './apparmor.d/force-complain' mkdir -p './apt/auth.conf.d' mkdir -p './apt/preferences.d' mkdir -p './binfmt.d' -mkdir -p './ca-certificates/update.d' mkdir -p './clamav/onerrorexecute.d' mkdir -p './clamav/onupdateexecute.d' mkdir -p './clamav/virusevent.d' @@ -49,13 +48,32 @@ maybe chmod 0755 '.' maybe chmod 0644 '.ackrc' maybe chmod 0700 '.etckeeper' maybe chmod 0600 '.gitignore' +maybe chmod 0755 '.java' +maybe chmod 0755 '.java/.systemPrefs' +maybe chmod 0644 '.java/.systemPrefs/.system.lock' +maybe chmod 0644 '.java/.systemPrefs/.systemRootModFile' maybe chmod 0755 'NetworkManager' maybe chmod 0755 'NetworkManager/dispatcher.d' maybe chmod 0755 'NetworkManager/dispatcher.d/20-chrony' maybe chmod 0755 'NetworkManager/dispatcher.d/cloud-init-hook-network-manager' maybe chmod 0755 'X11' +maybe chmod 0755 'X11/Xreset' +maybe chmod 0755 'X11/Xreset.d' +maybe chmod 0644 'X11/Xreset.d/README' +maybe chmod 0755 'X11/Xresources' +maybe chmod 0644 'X11/Xresources/x11-common' +maybe chmod 0755 'X11/Xsession' maybe chmod 0755 'X11/Xsession.d' +maybe chmod 0644 'X11/Xsession.d/20x11-common_process-args' +maybe chmod 0644 'X11/Xsession.d/30x11-common_xresources' +maybe chmod 0644 'X11/Xsession.d/35x11-common_xhost-local' +maybe chmod 0644 'X11/Xsession.d/40x11-common_xsessionrc' +maybe chmod 0644 'X11/Xsession.d/50x11-common_determine-startup' maybe chmod 0644 'X11/Xsession.d/90gpg-agent' +maybe chmod 0644 'X11/Xsession.d/90x11-common_ssh-agent' +maybe chmod 0644 'X11/Xsession.d/99x11-common_start' +maybe chmod 0644 'X11/Xsession.options' +maybe chmod 0644 'X11/rgb.txt' maybe chmod 0755 'X11/xkb' maybe chmod 0755 'acpi' maybe chmod 0755 'acpi/events' @@ -186,6 +204,7 @@ maybe chmod 0644 'byobu/socketdir' maybe chmod 0755 'ca-certificates' maybe chmod 0644 'ca-certificates.conf' maybe chmod 0755 'ca-certificates/update.d' +maybe chmod 0755 'ca-certificates/update.d/jks-keystore' maybe chmod 0755 'calendar' maybe chmod 0644 'calendar/default' maybe chmod 0644 'cczerc' @@ -314,6 +333,7 @@ maybe chmod 0644 'default/acpid' maybe chmod 0644 'default/amavisd-snmp-subagent' maybe chmod 0644 'default/bind9' maybe chmod 0644 'default/bsdmainutils' +maybe chmod 0600 'default/cacerts' maybe chmod 0644 'default/chrony' maybe chmod 0644 'default/console-setup' maybe chmod 0644 'default/cron' @@ -472,6 +492,38 @@ maybe chmod 0644 'fonts/conf.avail/57-dejavu-serif.conf' maybe chmod 0644 'fonts/conf.avail/58-dejavu-lgc-sans-mono.conf' maybe chmod 0644 'fonts/conf.avail/58-dejavu-lgc-sans.conf' maybe chmod 0644 'fonts/conf.avail/58-dejavu-lgc-serif.conf' +maybe chmod 0644 'fonts/conf.avail/59-lohit-devanagari.conf' +maybe chmod 0644 'fonts/conf.avail/65-0-fonts-beng-extra.conf' +maybe chmod 0644 'fonts/conf.avail/65-0-fonts-deva-extra.conf' +maybe chmod 0644 'fonts/conf.avail/65-0-fonts-gubbi.conf' +maybe chmod 0644 'fonts/conf.avail/65-0-fonts-gujr-extra.conf' +maybe chmod 0644 'fonts/conf.avail/65-0-fonts-guru-extra.conf' +maybe chmod 0644 'fonts/conf.avail/65-0-fonts-orya-extra.conf' +maybe chmod 0644 'fonts/conf.avail/65-0-fonts-pagul.conf' +maybe chmod 0644 'fonts/conf.avail/65-0-fonts-telu-extra.conf' +maybe chmod 0644 'fonts/conf.avail/65-0-smc-meera.conf' +maybe chmod 0644 'fonts/conf.avail/65-0-smc-rachana.conf' +maybe chmod 0644 'fonts/conf.avail/65-wqy-microhei.conf' +maybe chmod 0644 'fonts/conf.avail/66-lohit-assamese.conf' +maybe chmod 0644 'fonts/conf.avail/66-lohit-bengali.conf' +maybe chmod 0644 'fonts/conf.avail/66-lohit-devanagari.conf' +maybe chmod 0644 'fonts/conf.avail/66-lohit-gujarati.conf' +maybe chmod 0644 'fonts/conf.avail/66-lohit-gurmukhi.conf' +maybe chmod 0644 'fonts/conf.avail/66-lohit-kannada.conf' +maybe chmod 0644 'fonts/conf.avail/66-lohit-odia.conf' +maybe chmod 0644 'fonts/conf.avail/66-lohit-tamil-classical.conf' +maybe chmod 0644 'fonts/conf.avail/66-lohit-tamil.conf' +maybe chmod 0644 'fonts/conf.avail/66-lohit-telugu.conf' +maybe chmod 0644 'fonts/conf.avail/67-fonts-smc-manjari.conf' +maybe chmod 0644 'fonts/conf.avail/67-lohit-malayalam.conf' +maybe chmod 0644 'fonts/conf.avail/67-smc-anjalioldlipi.conf' +maybe chmod 0644 'fonts/conf.avail/67-smc-chilanka.conf' +maybe chmod 0644 'fonts/conf.avail/67-smc-dyuthi.conf' +maybe chmod 0644 'fonts/conf.avail/67-smc-karumbi.conf' +maybe chmod 0644 'fonts/conf.avail/67-smc-keraleeyam.conf' +maybe chmod 0644 'fonts/conf.avail/67-smc-raghumalayalamsans.conf' +maybe chmod 0644 'fonts/conf.avail/67-smc-suruma.conf' +maybe chmod 0644 'fonts/conf.avail/67-smc-uroob.conf' maybe chmod 0755 'fonts/conf.d' maybe chmod 0644 'fonts/conf.d/README' maybe chmod 0644 'fonts/fonts.conf' @@ -600,6 +652,7 @@ maybe chmod 0755 'init.d/sudo' maybe chmod 0755 'init.d/udev' maybe chmod 0755 'init.d/ulogd2' maybe chmod 0755 'init.d/uwsgi' +maybe chmod 0755 'init.d/x11-common' maybe chmod 0644 'init/php7.3-fpm.conf' maybe chmod 0755 'initramfs-tools' maybe chmod 0755 'initramfs-tools/conf.d' @@ -644,6 +697,37 @@ maybe chmod 0640 'iptables/rules.v6' maybe chmod 0644 'iredmail-release' maybe chmod 0644 'issue' maybe chmod 0644 'issue.net' +maybe chmod 0755 'java-11-openjdk' +maybe chmod 0644 'java-11-openjdk/accessibility.properties' +maybe chmod 0755 'java-11-openjdk/jfr' +maybe chmod 0644 'java-11-openjdk/jfr/default.jfc' +maybe chmod 0644 'java-11-openjdk/jfr/profile.jfc' +maybe chmod 0644 'java-11-openjdk/jvm-amd64.cfg' +maybe chmod 0644 'java-11-openjdk/logging.properties' +maybe chmod 0755 'java-11-openjdk/management' +maybe chmod 0644 'java-11-openjdk/management/jmxremote.access' +maybe chmod 0644 'java-11-openjdk/management/management.properties' +maybe chmod 0644 'java-11-openjdk/net.properties' +maybe chmod 0644 'java-11-openjdk/psfont.properties.ja' +maybe chmod 0644 'java-11-openjdk/psfontj2d.properties' +maybe chmod 0755 'java-11-openjdk/security' +maybe chmod 0644 'java-11-openjdk/security/blacklisted.certs' +maybe chmod 0644 'java-11-openjdk/security/default.policy' +maybe chmod 0644 'java-11-openjdk/security/java.policy' +maybe chmod 0644 'java-11-openjdk/security/java.security' +maybe chmod 0644 'java-11-openjdk/security/nss.cfg' +maybe chmod 0755 'java-11-openjdk/security/policy' +maybe chmod 0644 'java-11-openjdk/security/policy/README.txt' +maybe chmod 0755 'java-11-openjdk/security/policy/limited' +maybe chmod 0644 'java-11-openjdk/security/policy/limited/default_US_export.policy' +maybe chmod 0644 'java-11-openjdk/security/policy/limited/default_local.policy' +maybe chmod 0644 'java-11-openjdk/security/policy/limited/exempt_local.policy' +maybe chmod 0755 'java-11-openjdk/security/policy/unlimited' +maybe chmod 0644 'java-11-openjdk/security/policy/unlimited/default_US_export.policy' +maybe chmod 0644 'java-11-openjdk/security/policy/unlimited/default_local.policy' +maybe chmod 0644 'java-11-openjdk/security/public_suffix_list.dat' +maybe chmod 0644 'java-11-openjdk/sound.properties' +maybe chmod 0644 'java-11-openjdk/swing.properties' maybe chmod 0755 'kernel' maybe chmod 0644 'kernel-img.conf' maybe chmod 0755 'kernel/install.d' @@ -1195,6 +1279,8 @@ maybe chmod 0755 'ssl' maybe chmod 0755 'ssl/certs' maybe chmod 0644 'ssl/certs/ca-certificates.crt' maybe chmod 0644 'ssl/certs/iRedMail.crt.bak' +maybe chmod 0755 'ssl/certs/java' +maybe chmod 0644 'ssl/certs/java/cacerts' maybe chmod 0644 'ssl/certs/ssl-cert-snakeoil.pem' maybe chmod 0644 'ssl/dh2048_param.pem' maybe chmod 0644 'ssl/dh512_param.pem' diff --git a/.java/.systemPrefs/.system.lock b/.java/.systemPrefs/.system.lock new file mode 100644 index 0000000..e69de29 diff --git a/.java/.systemPrefs/.systemRootModFile b/.java/.systemPrefs/.systemRootModFile new file mode 100644 index 0000000..e69de29 diff --git a/X11/Xreset b/X11/Xreset new file mode 100755 index 0000000..7a0974c --- /dev/null +++ b/X11/Xreset @@ -0,0 +1,34 @@ +#!/bin/sh +# +# /etc/X11/Xreset +# +# global Xreset file -- for use by display managers + +# $Id: Xsession 967 2005-12-27 07:20:55Z dnusinow $ + +set -e + +PROGNAME=Xreset +SYSSESSIONDIR=/etc/X11/Xreset.d + +if [ ! -d "$SYSSESSIONDIR" ]; then + # Nothing to do, exiting + exit 0 +fi + +# use run-parts to source every file in the session directory; we source +# instead of executing so that the variables and functions defined above +# are available to the scripts, and so that they can pass variables to each +# other +SESSIONFILES=$(run-parts --list $SYSSESSIONDIR) +if [ -n "$SESSIONFILES" ]; then + set +e + for SESSIONFILE in $SESSIONFILES; do + . $SESSIONFILE + done + set -e +fi + +exit 0 + +# vim:set ai et sts=2 sw=2 tw=80: diff --git a/X11/Xreset.d/README b/X11/Xreset.d/README new file mode 100644 index 0000000..3c03f42 --- /dev/null +++ b/X11/Xreset.d/README @@ -0,0 +1,4 @@ +# Scripts in this directory are executed as root when a user log out from +# a display manager using /etc/X11/Xreset. +# The username of the user logging out is provided in the $USER environment +# variable. diff --git a/X11/Xresources/x11-common b/X11/Xresources/x11-common new file mode 100644 index 0000000..7641207 --- /dev/null +++ b/X11/Xresources/x11-common @@ -0,0 +1,10 @@ +! $Id$ + +! load color-specific resources for clients that have them +#ifdef COLOR +*customization: -color +#endif + +! make Xaw (Athena widget set) clients understand the delete key +! this causes problems with some non-Xaw apps, use with care +! *Text.translations: #override ~Shift ~Meta Delete: delete-next-character() diff --git a/X11/Xsession b/X11/Xsession new file mode 100755 index 0000000..6ad7d6e --- /dev/null +++ b/X11/Xsession @@ -0,0 +1,113 @@ +#!/bin/sh +# +# /etc/X11/Xsession +# +# global Xsession file -- used by display managers and xinit (startx) + +# $Id: Xsession 967 2005-12-27 07:20:55Z dnusinow $ + +set -e + +PROGNAME=Xsession + +message () { + # pretty-print messages of arbitrary length; use xmessage if it + # is available and $DISPLAY is set + MESSAGE="$PROGNAME: $*" + echo "$MESSAGE" | fold -s -w ${COLUMNS:-80} >&2 + if [ -n "$DISPLAY" ] && which xmessage > /dev/null 2>&1; then + echo "$MESSAGE" | fold -s -w ${COLUMNS:-80} | xmessage -center -file - + fi +} + +message_nonl () { + # pretty-print messages of arbitrary length (no trailing newline); use + # xmessage if it is available and $DISPLAY is set + MESSAGE="$PROGNAME: $*" + echo -n "$MESSAGE" | fold -s -w ${COLUMNS:-80} >&2; + if [ -n "$DISPLAY" ] && which xmessage > /dev/null 2>&1; then + echo -n "$MESSAGE" | fold -s -w ${COLUMNS:-80} | xmessage -center -file - + fi +} + +errormsg () { + # exit script with error + message "$*" + exit 1 +} + +internal_errormsg () { + # exit script with error; essentially a "THIS SHOULD NEVER HAPPEN" message + # One big call to message() for the sake of xmessage; if we had two then + # the user would have dismissed the error we want reported before seeing the + # request to report it. + errormsg "$*" \ + "Please report the installed version of the \"x11-common\"" \ + "package and the complete text of this error message to" \ + "." +} + +# initialize variables for use by all session scripts + +OPTIONFILE=/etc/X11/Xsession.options + +SYSRESOURCES=/etc/X11/Xresources +USRRESOURCES=$HOME/.Xresources + +SYSSESSIONDIR=/etc/X11/Xsession.d +USERXSESSION=$HOME/.xsession +USERXSESSIONRC=$HOME/.xsessionrc +ALTUSERXSESSION=$HOME/.Xsession +ERRFILE=$HOME/.xsession-errors + +# attempt to create an error file; abort if we cannot +if (umask 077 && touch "$ERRFILE") 2> /dev/null && [ -w "$ERRFILE" ] && + [ ! -L "$ERRFILE" ]; then + chmod 600 "$ERRFILE" +elif ERRFILE=$(tempfile 2> /dev/null); then + if ! ln -sf "$ERRFILE" "${TMPDIR:=/tmp}/xsession-$USER"; then + message "warning: unable to symlink \"$TMPDIR/xsession-$USER\" to" \ + "\"$ERRFILE\"; look for session log/errors in" \ + "\"$TMPDIR/xsession-$USER\"." + fi +else + errormsg "unable to create X session log/error file; aborting." +fi + +exec >>"$ERRFILE" 2>&1 + +echo "$PROGNAME: X session started for $LOGNAME at $(date)" + +# sanity check; is our session script directory present? +if [ ! -d "$SYSSESSIONDIR" ]; then + errormsg "no \"$SYSSESSIONDIR\" directory found; aborting." +fi + +# Attempt to create a file of non-zero length in /tmp; a full filesystem can +# cause mysterious X session failures. We do not use touch, :, or test -w +# because they won't actually create a file with contents. We also let standard +# error from tempfile and echo go to the error file to aid the user in +# determining what went wrong. +WRITE_TEST=$(tempfile) +if ! echo "*" >>"$WRITE_TEST"; then + message "warning: unable to write to ${WRITE_TEST%/*}; X session may exit" \ + "with an error" +fi +rm -f "$WRITE_TEST" + +# use run-parts to source every file in the session directory; we source +# instead of executing so that the variables and functions defined above +# are available to the scripts, and so that they can pass variables to each +# other +SESSIONFILES=$(run-parts --list $SYSSESSIONDIR) +if [ -n "$SESSIONFILES" ]; then + set +e + for SESSIONFILE in $SESSIONFILES; do + . $SESSIONFILE + done + set -e +fi + +exit 0 + +# vim:set ai et sts=2 sw=2 tw=80: diff --git a/X11/Xsession.d/20x11-common_process-args b/X11/Xsession.d/20x11-common_process-args new file mode 100644 index 0000000..93e4653 --- /dev/null +++ b/X11/Xsession.d/20x11-common_process-args @@ -0,0 +1,70 @@ +# $Id: 20x11-common_process-args 305 2005-07-03 18:51:43Z dnusinow $ + +# This file is sourced by Xsession(5), not executed. + +# read OPTIONFILE +OPTIONS=$(cat "$OPTIONFILE") || true + +has_option() { + if [ "${OPTIONS#* +$1}" != "$OPTIONS" ]; then + return 0 + else + return 1 + fi +} + +# Determine how many arguments were provided. +case $# in + 0) + # No arguments given; use default behavior. + ;; + 1) + # One argument given; see what it was. + case "$1" in + failsafe) + # Failsafe session was requested. + if has_option allow-failsafe; then + if [ -e /usr/bin/x-terminal-emulator ]; then + if [ -x /usr/bin/x-terminal-emulator ]; then + exec x-terminal-emulator -geometry +1+1 + else + # fatal error + errormsg "unable to launch failsafe X session ---" \ + "x-terminal-emulator not executable; aborting." + fi + else + # fatal error + errormsg "unable to launch failsafe X session ---" \ + "x-terminal-emulator not found; aborting." + fi + fi + ;; + default) + # Default behavior was requested. + ;; + *) + # Specific program was requested. + STARTUP_FULL_PATH=$(/usr/bin/which "$1" || true) + if [ -n "$STARTUP_FULL_PATH" ] && [ -e "$STARTUP_FULL_PATH" ]; then + if [ -x "$STARTUP_FULL_PATH" ]; then + STARTUP="$1" + else + message "unable to launch \"$1\" X session ---" \ + "\"$1\" not executable; falling back to default session." + fi + else + message "unable to launch \"$1\" X session ---" \ + "\"$1\" not found; falling back to default session." + fi + ;; + esac + ;; + *) + # More than one argument given; we don't know what to do. + message "unsupported number of arguments ($#); falling back to default" \ + "session." + ;; +esac + +# vim:set ai et sts=2 sw=2 tw=80: diff --git a/X11/Xsession.d/30x11-common_xresources b/X11/Xsession.d/30x11-common_xresources new file mode 100644 index 0000000..c3f53a8 --- /dev/null +++ b/X11/Xsession.d/30x11-common_xresources @@ -0,0 +1,26 @@ +# $Id: 30x11-common_xresources 305 2005-07-03 18:51:43Z dnusinow $ + +# This file is sourced by Xsession(5), not executed. + +# If xrdb (from xbase-clients) is installed, merge system-wide X resources. +# Then merge the user's X resources, if the options file is so configured. +if [ -d "$SYSRESOURCES" ] && type xrdb >/dev/null 2>&1; then + RESOURCEFILES=$(run-parts --list $SYSRESOURCES) + if [ -n "$RESOURCEFILES" ]; then + for RESOURCEFILE in $RESOURCEFILES; do + xrdb -merge $RESOURCEFILE + done + fi +fi + +if has_option allow-user-resources && [ -f "$USRRESOURCES" ]; then + if type xrdb >/dev/null 2>&1; then + xrdb -merge $USRRESOURCES + else + # Comment out this command if you desire a legacy-free X environment, and find + # the warning spurious. + message "warning: xrdb command not found; X resources not merged." + fi +fi + +# vim:set ai et sts=2 sw=2 tw=80: diff --git a/X11/Xsession.d/35x11-common_xhost-local b/X11/Xsession.d/35x11-common_xhost-local new file mode 100644 index 0000000..d127a6c --- /dev/null +++ b/X11/Xsession.d/35x11-common_xhost-local @@ -0,0 +1,10 @@ +# This file is sourced by Xsession(5), not executed. + +# If xhost (from x11-xserver-utils) is installed, use it to give access +# to the X server to any process from the same user on the local host. +# Unlike other uses of xhost, this is safe since the kernel can check +# the actual owner of the calling process. + +if type xhost >/dev/null 2>&1; then + xhost +si:localuser:$(id -un) || : +fi diff --git a/X11/Xsession.d/40x11-common_xsessionrc b/X11/Xsession.d/40x11-common_xsessionrc new file mode 100644 index 0000000..305f363 --- /dev/null +++ b/X11/Xsession.d/40x11-common_xsessionrc @@ -0,0 +1,6 @@ +# This file is sourced by Xsession(5), not executed. + +#Source user defined xsessionrc (locales and other environment variables) +if [ -r "$USERXSESSIONRC" ]; then + . "$USERXSESSIONRC" +fi diff --git a/X11/Xsession.d/50x11-common_determine-startup b/X11/Xsession.d/50x11-common_determine-startup new file mode 100644 index 0000000..4e13505 --- /dev/null +++ b/X11/Xsession.d/50x11-common_determine-startup @@ -0,0 +1,47 @@ +# $Id: 50x11-common_determine-startup 305 2005-07-03 18:51:43Z dnusinow $ + +# This file is sourced by Xsession(5), not executed. + +# If no X session startup program was passed to the Xsession script as an +# argument (e.g., by the display manager), or if that program was not +# executable, fall back to looking for a user's custom X session script, if +# allowed by the options file. +if [ -z "$STARTUP" ]; then + if has_option allow-user-xsession; then + for STARTUPFILE in "$USERXSESSION" "$ALTUSERXSESSION"; do + if [ -e "$STARTUPFILE" ]; then + if [ -x "$STARTUPFILE" ]; then + STARTUP="$STARTUPFILE" + else + shell=${SHELL:-sh} + STARTUP="$shell $STARTUPFILE" + fi + break + fi + done + fi +fi + +# If there is still nothing to use for a startup program, try the system +# default session manager, window manager, and terminal emulator. +if [ -z "$STARTUP" ]; then + if [ -x /usr/bin/x-session-manager ]; then + STARTUP=x-session-manager + elif [ -x /usr/bin/x-window-manager ]; then + STARTUP=x-window-manager + elif [ -x /usr/bin/x-terminal-emulator ]; then + STARTUP=x-terminal-emulator + fi +fi + +# If we still have not found a startup program, give up. +if [ -z "$STARTUP" ]; then + ERRMSG="unable to start X session ---" + if has_option allow-user-xsession; then + ERRMSG="$ERRMSG no \"$USERXSESSION\" file, no \"$ALTUSERXSESSION\" file," + fi + errormsg "$ERRMSG no session managers, no window managers, and no terminal" \ + "emulators found; aborting." +fi + +# vim:set ai et sts=2 sw=2 tw=80: diff --git a/X11/Xsession.d/90x11-common_ssh-agent b/X11/Xsession.d/90x11-common_ssh-agent new file mode 100644 index 0000000..5397434 --- /dev/null +++ b/X11/Xsession.d/90x11-common_ssh-agent @@ -0,0 +1,24 @@ +# $Id: 90x11-common_ssh-agent 305 2005-07-03 18:51:43Z dnusinow $ + +# This file is sourced by Xsession(5), not executed. + +STARTSSH= +SSHAGENT=/usr/bin/ssh-agent +SSHAGENTARGS= + +if has_option use-ssh-agent; then + if [ -x "$SSHAGENT" ] && [ -z "$SSH_AUTH_SOCK" ] \ + && [ -z "$SSH2_AUTH_SOCK" ]; then + STARTSSH=yes + if [ -f /usr/bin/ssh-add1 ] && cmp -s $SSHAGENT /usr/bin/ssh-agent2; then + # use ssh-agent2's ssh-agent1 compatibility mode + SSHAGENTARGS=-1 + fi + fi +fi + +if [ -n "$STARTSSH" ]; then + STARTUP="$SSHAGENT $SSHAGENTARGS ${TMPDIR:+env TMPDIR=$TMPDIR} $STARTUP" +fi + +# vim:set ai et sts=2 sw=2 tw=80: diff --git a/X11/Xsession.d/99x11-common_start b/X11/Xsession.d/99x11-common_start new file mode 100644 index 0000000..36a9652 --- /dev/null +++ b/X11/Xsession.d/99x11-common_start @@ -0,0 +1,7 @@ +# $Id: 99x11-common_start 305 2005-07-03 18:51:43Z dnusinow $ + +# This file is sourced by Xsession(5), not executed. + +exec $STARTUP + +# vim:set ai et sts=2 sw=2 tw=80: diff --git a/X11/Xsession.options b/X11/Xsession.options new file mode 100644 index 0000000..fc45bf9 --- /dev/null +++ b/X11/Xsession.options @@ -0,0 +1,9 @@ +# $Id: Xsession.options 189 2005-06-11 00:04:27Z branden $ +# +# configuration options for /etc/X11/Xsession +# See Xsession.options(5) for an explanation of the available options. +allow-failsafe +allow-user-resources +allow-user-xsession +use-ssh-agent +use-session-dbus diff --git a/X11/rgb.txt b/X11/rgb.txt new file mode 100644 index 0000000..b9e56c6 --- /dev/null +++ b/X11/rgb.txt @@ -0,0 +1,754 @@ +! $Xorg: rgb.txt,v 1.3 2000/08/17 19:54:00 cpqbld Exp $ +255 250 250 snow +248 248 255 ghost white +248 248 255 GhostWhite +245 245 245 white smoke +245 245 245 WhiteSmoke +220 220 220 gainsboro +255 250 240 floral white +255 250 240 FloralWhite +253 245 230 old lace +253 245 230 OldLace +250 240 230 linen +250 235 215 antique white +250 235 215 AntiqueWhite +255 239 213 papaya whip +255 239 213 PapayaWhip +255 235 205 blanched almond +255 235 205 BlanchedAlmond +255 228 196 bisque +255 218 185 peach puff +255 218 185 PeachPuff +255 222 173 navajo white +255 222 173 NavajoWhite +255 228 181 moccasin +255 248 220 cornsilk +255 255 240 ivory +255 250 205 lemon chiffon +255 250 205 LemonChiffon +255 245 238 seashell +240 255 240 honeydew +245 255 250 mint cream +245 255 250 MintCream +240 255 255 azure +240 248 255 alice blue +240 248 255 AliceBlue +230 230 250 lavender +255 240 245 lavender blush +255 240 245 LavenderBlush +255 228 225 misty rose +255 228 225 MistyRose +255 255 255 white + 0 0 0 black + 47 79 79 dark slate gray + 47 79 79 DarkSlateGray + 47 79 79 dark slate grey + 47 79 79 DarkSlateGrey +105 105 105 dim gray +105 105 105 DimGray +105 105 105 dim grey +105 105 105 DimGrey +112 128 144 slate gray +112 128 144 SlateGray +112 128 144 slate grey +112 128 144 SlateGrey +119 136 153 light slate gray +119 136 153 LightSlateGray +119 136 153 light slate grey +119 136 153 LightSlateGrey +190 190 190 gray +190 190 190 grey +211 211 211 light grey +211 211 211 LightGrey +211 211 211 light gray +211 211 211 LightGray + 25 25 112 midnight blue + 25 25 112 MidnightBlue + 0 0 128 navy + 0 0 128 navy blue + 0 0 128 NavyBlue +100 149 237 cornflower blue +100 149 237 CornflowerBlue + 72 61 139 dark slate blue + 72 61 139 DarkSlateBlue +106 90 205 slate blue +106 90 205 SlateBlue +123 104 238 medium slate blue +123 104 238 MediumSlateBlue +132 112 255 light slate blue +132 112 255 LightSlateBlue + 0 0 205 medium blue + 0 0 205 MediumBlue + 65 105 225 royal blue + 65 105 225 RoyalBlue + 0 0 255 blue + 30 144 255 dodger blue + 30 144 255 DodgerBlue + 0 191 255 deep sky blue + 0 191 255 DeepSkyBlue +135 206 235 sky blue +135 206 235 SkyBlue +135 206 250 light sky blue +135 206 250 LightSkyBlue + 70 130 180 steel blue + 70 130 180 SteelBlue +176 196 222 light steel blue +176 196 222 LightSteelBlue +173 216 230 light blue +173 216 230 LightBlue +176 224 230 powder blue +176 224 230 PowderBlue +175 238 238 pale turquoise +175 238 238 PaleTurquoise + 0 206 209 dark turquoise + 0 206 209 DarkTurquoise + 72 209 204 medium turquoise + 72 209 204 MediumTurquoise + 64 224 208 turquoise + 0 255 255 cyan +224 255 255 light cyan +224 255 255 LightCyan + 95 158 160 cadet blue + 95 158 160 CadetBlue +102 205 170 medium aquamarine +102 205 170 MediumAquamarine +127 255 212 aquamarine + 0 100 0 dark green + 0 100 0 DarkGreen + 85 107 47 dark olive green + 85 107 47 DarkOliveGreen +143 188 143 dark sea green +143 188 143 DarkSeaGreen + 46 139 87 sea green + 46 139 87 SeaGreen + 60 179 113 medium sea green + 60 179 113 MediumSeaGreen + 32 178 170 light sea green + 32 178 170 LightSeaGreen +152 251 152 pale green +152 251 152 PaleGreen + 0 255 127 spring green + 0 255 127 SpringGreen +124 252 0 lawn green +124 252 0 LawnGreen + 0 255 0 green +127 255 0 chartreuse + 0 250 154 medium spring green + 0 250 154 MediumSpringGreen +173 255 47 green yellow +173 255 47 GreenYellow + 50 205 50 lime green + 50 205 50 LimeGreen +154 205 50 yellow green +154 205 50 YellowGreen + 34 139 34 forest green + 34 139 34 ForestGreen +107 142 35 olive drab +107 142 35 OliveDrab +189 183 107 dark khaki +189 183 107 DarkKhaki +240 230 140 khaki +238 232 170 pale goldenrod +238 232 170 PaleGoldenrod +250 250 210 light goldenrod yellow +250 250 210 LightGoldenrodYellow +255 255 224 light yellow +255 255 224 LightYellow +255 255 0 yellow +255 215 0 gold +238 221 130 light goldenrod +238 221 130 LightGoldenrod +218 165 32 goldenrod +184 134 11 dark goldenrod +184 134 11 DarkGoldenrod +188 143 143 rosy brown +188 143 143 RosyBrown +205 92 92 indian red +205 92 92 IndianRed +139 69 19 saddle brown +139 69 19 SaddleBrown +160 82 45 sienna +205 133 63 peru +222 184 135 burlywood +245 245 220 beige +245 222 179 wheat +244 164 96 sandy brown +244 164 96 SandyBrown +210 180 140 tan +210 105 30 chocolate +178 34 34 firebrick +165 42 42 brown +233 150 122 dark salmon +233 150 122 DarkSalmon +250 128 114 salmon +255 160 122 light salmon +255 160 122 LightSalmon +255 165 0 orange +255 140 0 dark orange +255 140 0 DarkOrange +255 127 80 coral +240 128 128 light coral +240 128 128 LightCoral +255 99 71 tomato +255 69 0 orange red +255 69 0 OrangeRed +255 0 0 red +255 105 180 hot pink +255 105 180 HotPink +255 20 147 deep pink +255 20 147 DeepPink +255 192 203 pink +255 182 193 light pink +255 182 193 LightPink +219 112 147 pale violet red +219 112 147 PaleVioletRed +176 48 96 maroon +199 21 133 medium violet red +199 21 133 MediumVioletRed +208 32 144 violet red +208 32 144 VioletRed +255 0 255 magenta +238 130 238 violet +221 160 221 plum +218 112 214 orchid +186 85 211 medium orchid +186 85 211 MediumOrchid +153 50 204 dark orchid +153 50 204 DarkOrchid +148 0 211 dark violet +148 0 211 DarkViolet +138 43 226 blue violet +138 43 226 BlueViolet +160 32 240 purple +147 112 219 medium purple +147 112 219 MediumPurple +216 191 216 thistle +255 250 250 snow1 +238 233 233 snow2 +205 201 201 snow3 +139 137 137 snow4 +255 245 238 seashell1 +238 229 222 seashell2 +205 197 191 seashell3 +139 134 130 seashell4 +255 239 219 AntiqueWhite1 +238 223 204 AntiqueWhite2 +205 192 176 AntiqueWhite3 +139 131 120 AntiqueWhite4 +255 228 196 bisque1 +238 213 183 bisque2 +205 183 158 bisque3 +139 125 107 bisque4 +255 218 185 PeachPuff1 +238 203 173 PeachPuff2 +205 175 149 PeachPuff3 +139 119 101 PeachPuff4 +255 222 173 NavajoWhite1 +238 207 161 NavajoWhite2 +205 179 139 NavajoWhite3 +139 121 94 NavajoWhite4 +255 250 205 LemonChiffon1 +238 233 191 LemonChiffon2 +205 201 165 LemonChiffon3 +139 137 112 LemonChiffon4 +255 248 220 cornsilk1 +238 232 205 cornsilk2 +205 200 177 cornsilk3 +139 136 120 cornsilk4 +255 255 240 ivory1 +238 238 224 ivory2 +205 205 193 ivory3 +139 139 131 ivory4 +240 255 240 honeydew1 +224 238 224 honeydew2 +193 205 193 honeydew3 +131 139 131 honeydew4 +255 240 245 LavenderBlush1 +238 224 229 LavenderBlush2 +205 193 197 LavenderBlush3 +139 131 134 LavenderBlush4 +255 228 225 MistyRose1 +238 213 210 MistyRose2 +205 183 181 MistyRose3 +139 125 123 MistyRose4 +240 255 255 azure1 +224 238 238 azure2 +193 205 205 azure3 +131 139 139 azure4 +131 111 255 SlateBlue1 +122 103 238 SlateBlue2 +105 89 205 SlateBlue3 + 71 60 139 SlateBlue4 + 72 118 255 RoyalBlue1 + 67 110 238 RoyalBlue2 + 58 95 205 RoyalBlue3 + 39 64 139 RoyalBlue4 + 0 0 255 blue1 + 0 0 238 blue2 + 0 0 205 blue3 + 0 0 139 blue4 + 30 144 255 DodgerBlue1 + 28 134 238 DodgerBlue2 + 24 116 205 DodgerBlue3 + 16 78 139 DodgerBlue4 + 99 184 255 SteelBlue1 + 92 172 238 SteelBlue2 + 79 148 205 SteelBlue3 + 54 100 139 SteelBlue4 + 0 191 255 DeepSkyBlue1 + 0 178 238 DeepSkyBlue2 + 0 154 205 DeepSkyBlue3 + 0 104 139 DeepSkyBlue4 +135 206 255 SkyBlue1 +126 192 238 SkyBlue2 +108 166 205 SkyBlue3 + 74 112 139 SkyBlue4 +176 226 255 LightSkyBlue1 +164 211 238 LightSkyBlue2 +141 182 205 LightSkyBlue3 + 96 123 139 LightSkyBlue4 +198 226 255 SlateGray1 +185 211 238 SlateGray2 +159 182 205 SlateGray3 +108 123 139 SlateGray4 +202 225 255 LightSteelBlue1 +188 210 238 LightSteelBlue2 +162 181 205 LightSteelBlue3 +110 123 139 LightSteelBlue4 +191 239 255 LightBlue1 +178 223 238 LightBlue2 +154 192 205 LightBlue3 +104 131 139 LightBlue4 +224 255 255 LightCyan1 +209 238 238 LightCyan2 +180 205 205 LightCyan3 +122 139 139 LightCyan4 +187 255 255 PaleTurquoise1 +174 238 238 PaleTurquoise2 +150 205 205 PaleTurquoise3 +102 139 139 PaleTurquoise4 +152 245 255 CadetBlue1 +142 229 238 CadetBlue2 +122 197 205 CadetBlue3 + 83 134 139 CadetBlue4 + 0 245 255 turquoise1 + 0 229 238 turquoise2 + 0 197 205 turquoise3 + 0 134 139 turquoise4 + 0 255 255 cyan1 + 0 238 238 cyan2 + 0 205 205 cyan3 + 0 139 139 cyan4 +151 255 255 DarkSlateGray1 +141 238 238 DarkSlateGray2 +121 205 205 DarkSlateGray3 + 82 139 139 DarkSlateGray4 +127 255 212 aquamarine1 +118 238 198 aquamarine2 +102 205 170 aquamarine3 + 69 139 116 aquamarine4 +193 255 193 DarkSeaGreen1 +180 238 180 DarkSeaGreen2 +155 205 155 DarkSeaGreen3 +105 139 105 DarkSeaGreen4 + 84 255 159 SeaGreen1 + 78 238 148 SeaGreen2 + 67 205 128 SeaGreen3 + 46 139 87 SeaGreen4 +154 255 154 PaleGreen1 +144 238 144 PaleGreen2 +124 205 124 PaleGreen3 + 84 139 84 PaleGreen4 + 0 255 127 SpringGreen1 + 0 238 118 SpringGreen2 + 0 205 102 SpringGreen3 + 0 139 69 SpringGreen4 + 0 255 0 green1 + 0 238 0 green2 + 0 205 0 green3 + 0 139 0 green4 +127 255 0 chartreuse1 +118 238 0 chartreuse2 +102 205 0 chartreuse3 + 69 139 0 chartreuse4 +192 255 62 OliveDrab1 +179 238 58 OliveDrab2 +154 205 50 OliveDrab3 +105 139 34 OliveDrab4 +202 255 112 DarkOliveGreen1 +188 238 104 DarkOliveGreen2 +162 205 90 DarkOliveGreen3 +110 139 61 DarkOliveGreen4 +255 246 143 khaki1 +238 230 133 khaki2 +205 198 115 khaki3 +139 134 78 khaki4 +255 236 139 LightGoldenrod1 +238 220 130 LightGoldenrod2 +205 190 112 LightGoldenrod3 +139 129 76 LightGoldenrod4 +255 255 224 LightYellow1 +238 238 209 LightYellow2 +205 205 180 LightYellow3 +139 139 122 LightYellow4 +255 255 0 yellow1 +238 238 0 yellow2 +205 205 0 yellow3 +139 139 0 yellow4 +255 215 0 gold1 +238 201 0 gold2 +205 173 0 gold3 +139 117 0 gold4 +255 193 37 goldenrod1 +238 180 34 goldenrod2 +205 155 29 goldenrod3 +139 105 20 goldenrod4 +255 185 15 DarkGoldenrod1 +238 173 14 DarkGoldenrod2 +205 149 12 DarkGoldenrod3 +139 101 8 DarkGoldenrod4 +255 193 193 RosyBrown1 +238 180 180 RosyBrown2 +205 155 155 RosyBrown3 +139 105 105 RosyBrown4 +255 106 106 IndianRed1 +238 99 99 IndianRed2 +205 85 85 IndianRed3 +139 58 58 IndianRed4 +255 130 71 sienna1 +238 121 66 sienna2 +205 104 57 sienna3 +139 71 38 sienna4 +255 211 155 burlywood1 +238 197 145 burlywood2 +205 170 125 burlywood3 +139 115 85 burlywood4 +255 231 186 wheat1 +238 216 174 wheat2 +205 186 150 wheat3 +139 126 102 wheat4 +255 165 79 tan1 +238 154 73 tan2 +205 133 63 tan3 +139 90 43 tan4 +255 127 36 chocolate1 +238 118 33 chocolate2 +205 102 29 chocolate3 +139 69 19 chocolate4 +255 48 48 firebrick1 +238 44 44 firebrick2 +205 38 38 firebrick3 +139 26 26 firebrick4 +255 64 64 brown1 +238 59 59 brown2 +205 51 51 brown3 +139 35 35 brown4 +255 140 105 salmon1 +238 130 98 salmon2 +205 112 84 salmon3 +139 76 57 salmon4 +255 160 122 LightSalmon1 +238 149 114 LightSalmon2 +205 129 98 LightSalmon3 +139 87 66 LightSalmon4 +255 165 0 orange1 +238 154 0 orange2 +205 133 0 orange3 +139 90 0 orange4 +255 127 0 DarkOrange1 +238 118 0 DarkOrange2 +205 102 0 DarkOrange3 +139 69 0 DarkOrange4 +255 114 86 coral1 +238 106 80 coral2 +205 91 69 coral3 +139 62 47 coral4 +255 99 71 tomato1 +238 92 66 tomato2 +205 79 57 tomato3 +139 54 38 tomato4 +255 69 0 OrangeRed1 +238 64 0 OrangeRed2 +205 55 0 OrangeRed3 +139 37 0 OrangeRed4 +255 0 0 red1 +238 0 0 red2 +205 0 0 red3 +139 0 0 red4 +215 7 81 DebianRed +255 20 147 DeepPink1 +238 18 137 DeepPink2 +205 16 118 DeepPink3 +139 10 80 DeepPink4 +255 110 180 HotPink1 +238 106 167 HotPink2 +205 96 144 HotPink3 +139 58 98 HotPink4 +255 181 197 pink1 +238 169 184 pink2 +205 145 158 pink3 +139 99 108 pink4 +255 174 185 LightPink1 +238 162 173 LightPink2 +205 140 149 LightPink3 +139 95 101 LightPink4 +255 130 171 PaleVioletRed1 +238 121 159 PaleVioletRed2 +205 104 137 PaleVioletRed3 +139 71 93 PaleVioletRed4 +255 52 179 maroon1 +238 48 167 maroon2 +205 41 144 maroon3 +139 28 98 maroon4 +255 62 150 VioletRed1 +238 58 140 VioletRed2 +205 50 120 VioletRed3 +139 34 82 VioletRed4 +255 0 255 magenta1 +238 0 238 magenta2 +205 0 205 magenta3 +139 0 139 magenta4 +255 131 250 orchid1 +238 122 233 orchid2 +205 105 201 orchid3 +139 71 137 orchid4 +255 187 255 plum1 +238 174 238 plum2 +205 150 205 plum3 +139 102 139 plum4 +224 102 255 MediumOrchid1 +209 95 238 MediumOrchid2 +180 82 205 MediumOrchid3 +122 55 139 MediumOrchid4 +191 62 255 DarkOrchid1 +178 58 238 DarkOrchid2 +154 50 205 DarkOrchid3 +104 34 139 DarkOrchid4 +155 48 255 purple1 +145 44 238 purple2 +125 38 205 purple3 + 85 26 139 purple4 +171 130 255 MediumPurple1 +159 121 238 MediumPurple2 +137 104 205 MediumPurple3 + 93 71 139 MediumPurple4 +255 225 255 thistle1 +238 210 238 thistle2 +205 181 205 thistle3 +139 123 139 thistle4 + 0 0 0 gray0 + 0 0 0 grey0 + 3 3 3 gray1 + 3 3 3 grey1 + 5 5 5 gray2 + 5 5 5 grey2 + 8 8 8 gray3 + 8 8 8 grey3 + 10 10 10 gray4 + 10 10 10 grey4 + 13 13 13 gray5 + 13 13 13 grey5 + 15 15 15 gray6 + 15 15 15 grey6 + 18 18 18 gray7 + 18 18 18 grey7 + 20 20 20 gray8 + 20 20 20 grey8 + 23 23 23 gray9 + 23 23 23 grey9 + 26 26 26 gray10 + 26 26 26 grey10 + 28 28 28 gray11 + 28 28 28 grey11 + 31 31 31 gray12 + 31 31 31 grey12 + 33 33 33 gray13 + 33 33 33 grey13 + 36 36 36 gray14 + 36 36 36 grey14 + 38 38 38 gray15 + 38 38 38 grey15 + 41 41 41 gray16 + 41 41 41 grey16 + 43 43 43 gray17 + 43 43 43 grey17 + 46 46 46 gray18 + 46 46 46 grey18 + 48 48 48 gray19 + 48 48 48 grey19 + 51 51 51 gray20 + 51 51 51 grey20 + 54 54 54 gray21 + 54 54 54 grey21 + 56 56 56 gray22 + 56 56 56 grey22 + 59 59 59 gray23 + 59 59 59 grey23 + 61 61 61 gray24 + 61 61 61 grey24 + 64 64 64 gray25 + 64 64 64 grey25 + 66 66 66 gray26 + 66 66 66 grey26 + 69 69 69 gray27 + 69 69 69 grey27 + 71 71 71 gray28 + 71 71 71 grey28 + 74 74 74 gray29 + 74 74 74 grey29 + 77 77 77 gray30 + 77 77 77 grey30 + 79 79 79 gray31 + 79 79 79 grey31 + 82 82 82 gray32 + 82 82 82 grey32 + 84 84 84 gray33 + 84 84 84 grey33 + 87 87 87 gray34 + 87 87 87 grey34 + 89 89 89 gray35 + 89 89 89 grey35 + 92 92 92 gray36 + 92 92 92 grey36 + 94 94 94 gray37 + 94 94 94 grey37 + 97 97 97 gray38 + 97 97 97 grey38 + 99 99 99 gray39 + 99 99 99 grey39 +102 102 102 gray40 +102 102 102 grey40 +105 105 105 gray41 +105 105 105 grey41 +107 107 107 gray42 +107 107 107 grey42 +110 110 110 gray43 +110 110 110 grey43 +112 112 112 gray44 +112 112 112 grey44 +115 115 115 gray45 +115 115 115 grey45 +117 117 117 gray46 +117 117 117 grey46 +120 120 120 gray47 +120 120 120 grey47 +122 122 122 gray48 +122 122 122 grey48 +125 125 125 gray49 +125 125 125 grey49 +127 127 127 gray50 +127 127 127 grey50 +130 130 130 gray51 +130 130 130 grey51 +133 133 133 gray52 +133 133 133 grey52 +135 135 135 gray53 +135 135 135 grey53 +138 138 138 gray54 +138 138 138 grey54 +140 140 140 gray55 +140 140 140 grey55 +143 143 143 gray56 +143 143 143 grey56 +145 145 145 gray57 +145 145 145 grey57 +148 148 148 gray58 +148 148 148 grey58 +150 150 150 gray59 +150 150 150 grey59 +153 153 153 gray60 +153 153 153 grey60 +156 156 156 gray61 +156 156 156 grey61 +158 158 158 gray62 +158 158 158 grey62 +161 161 161 gray63 +161 161 161 grey63 +163 163 163 gray64 +163 163 163 grey64 +166 166 166 gray65 +166 166 166 grey65 +168 168 168 gray66 +168 168 168 grey66 +171 171 171 gray67 +171 171 171 grey67 +173 173 173 gray68 +173 173 173 grey68 +176 176 176 gray69 +176 176 176 grey69 +179 179 179 gray70 +179 179 179 grey70 +181 181 181 gray71 +181 181 181 grey71 +184 184 184 gray72 +184 184 184 grey72 +186 186 186 gray73 +186 186 186 grey73 +189 189 189 gray74 +189 189 189 grey74 +191 191 191 gray75 +191 191 191 grey75 +194 194 194 gray76 +194 194 194 grey76 +196 196 196 gray77 +196 196 196 grey77 +199 199 199 gray78 +199 199 199 grey78 +201 201 201 gray79 +201 201 201 grey79 +204 204 204 gray80 +204 204 204 grey80 +207 207 207 gray81 +207 207 207 grey81 +209 209 209 gray82 +209 209 209 grey82 +212 212 212 gray83 +212 212 212 grey83 +214 214 214 gray84 +214 214 214 grey84 +217 217 217 gray85 +217 217 217 grey85 +219 219 219 gray86 +219 219 219 grey86 +222 222 222 gray87 +222 222 222 grey87 +224 224 224 gray88 +224 224 224 grey88 +227 227 227 gray89 +227 227 227 grey89 +229 229 229 gray90 +229 229 229 grey90 +232 232 232 gray91 +232 232 232 grey91 +235 235 235 gray92 +235 235 235 grey92 +237 237 237 gray93 +237 237 237 grey93 +240 240 240 gray94 +240 240 240 grey94 +242 242 242 gray95 +242 242 242 grey95 +245 245 245 gray96 +245 245 245 grey96 +247 247 247 gray97 +247 247 247 grey97 +250 250 250 gray98 +250 250 250 grey98 +252 252 252 gray99 +252 252 252 grey99 +255 255 255 gray100 +255 255 255 grey100 +169 169 169 dark grey +169 169 169 DarkGrey +169 169 169 dark gray +169 169 169 DarkGray +0 0 139 dark blue +0 0 139 DarkBlue +0 139 139 dark cyan +0 139 139 DarkCyan +139 0 139 dark magenta +139 0 139 DarkMagenta +139 0 0 dark red +139 0 0 DarkRed +144 238 144 light green +144 238 144 LightGreen diff --git a/alternatives/fonts-japanese-gothic.ttf b/alternatives/fonts-japanese-gothic.ttf new file mode 120000 index 0000000..bafdbae --- /dev/null +++ b/alternatives/fonts-japanese-gothic.ttf @@ -0,0 +1 @@ +/usr/share/fonts/opentype/ipafont-gothic/ipag.ttf \ No newline at end of file diff --git a/alternatives/fonts-japanese-mincho.ttf b/alternatives/fonts-japanese-mincho.ttf new file mode 120000 index 0000000..2a53f1b --- /dev/null +++ b/alternatives/fonts-japanese-mincho.ttf @@ -0,0 +1 @@ +/usr/share/fonts/opentype/ipafont-mincho/ipam.ttf \ No newline at end of file diff --git a/alternatives/jaotc b/alternatives/jaotc new file mode 120000 index 0000000..c6dd731 --- /dev/null +++ b/alternatives/jaotc @@ -0,0 +1 @@ +/usr/lib/jvm/java-11-openjdk-amd64/bin/jaotc \ No newline at end of file diff --git a/alternatives/jar b/alternatives/jar new file mode 120000 index 0000000..ae7d620 --- /dev/null +++ b/alternatives/jar @@ -0,0 +1 @@ +/usr/lib/jvm/java-11-openjdk-amd64/bin/jar \ No newline at end of file diff --git a/alternatives/jar.1.gz b/alternatives/jar.1.gz new file mode 120000 index 0000000..5c1422d --- /dev/null +++ b/alternatives/jar.1.gz @@ -0,0 +1 @@ +/usr/lib/jvm/java-11-openjdk-amd64/man/man1/jar.1.gz \ No newline at end of file diff --git a/alternatives/jarsigner b/alternatives/jarsigner new file mode 120000 index 0000000..d897a23 --- /dev/null +++ b/alternatives/jarsigner @@ -0,0 +1 @@ +/usr/lib/jvm/java-11-openjdk-amd64/bin/jarsigner \ No newline at end of file diff --git a/alternatives/jarsigner.1.gz b/alternatives/jarsigner.1.gz new file mode 120000 index 0000000..bcaf0f6 --- /dev/null +++ b/alternatives/jarsigner.1.gz @@ -0,0 +1 @@ +/usr/lib/jvm/java-11-openjdk-amd64/man/man1/jarsigner.1.gz \ No newline at end of file diff --git a/alternatives/java b/alternatives/java new file mode 120000 index 0000000..cd6559d --- /dev/null +++ b/alternatives/java @@ -0,0 +1 @@ +/usr/lib/jvm/java-11-openjdk-amd64/bin/java \ No newline at end of file diff --git a/alternatives/java.1.gz b/alternatives/java.1.gz new file mode 120000 index 0000000..e8791d8 --- /dev/null +++ b/alternatives/java.1.gz @@ -0,0 +1 @@ +/usr/lib/jvm/java-11-openjdk-amd64/man/man1/java.1.gz \ No newline at end of file diff --git a/alternatives/javac b/alternatives/javac new file mode 120000 index 0000000..1d062b0 --- /dev/null +++ b/alternatives/javac @@ -0,0 +1 @@ +/usr/lib/jvm/java-11-openjdk-amd64/bin/javac \ No newline at end of file diff --git a/alternatives/javac.1.gz b/alternatives/javac.1.gz new file mode 120000 index 0000000..e8b3ddc --- /dev/null +++ b/alternatives/javac.1.gz @@ -0,0 +1 @@ +/usr/lib/jvm/java-11-openjdk-amd64/man/man1/javac.1.gz \ No newline at end of file diff --git a/alternatives/javadoc b/alternatives/javadoc new file mode 120000 index 0000000..de7373b --- /dev/null +++ b/alternatives/javadoc @@ -0,0 +1 @@ +/usr/lib/jvm/java-11-openjdk-amd64/bin/javadoc \ No newline at end of file diff --git a/alternatives/javadoc.1.gz b/alternatives/javadoc.1.gz new file mode 120000 index 0000000..b3b6ae3 --- /dev/null +++ b/alternatives/javadoc.1.gz @@ -0,0 +1 @@ +/usr/lib/jvm/java-11-openjdk-amd64/man/man1/javadoc.1.gz \ No newline at end of file diff --git a/alternatives/javap b/alternatives/javap new file mode 120000 index 0000000..47f386f --- /dev/null +++ b/alternatives/javap @@ -0,0 +1 @@ +/usr/lib/jvm/java-11-openjdk-amd64/bin/javap \ No newline at end of file diff --git a/alternatives/javap.1.gz b/alternatives/javap.1.gz new file mode 120000 index 0000000..04f3944 --- /dev/null +++ b/alternatives/javap.1.gz @@ -0,0 +1 @@ +/usr/lib/jvm/java-11-openjdk-amd64/man/man1/javap.1.gz \ No newline at end of file diff --git a/alternatives/jcmd b/alternatives/jcmd new file mode 120000 index 0000000..1e55c79 --- /dev/null +++ b/alternatives/jcmd @@ -0,0 +1 @@ +/usr/lib/jvm/java-11-openjdk-amd64/bin/jcmd \ No newline at end of file diff --git a/alternatives/jcmd.1.gz b/alternatives/jcmd.1.gz new file mode 120000 index 0000000..e9c2c33 --- /dev/null +++ b/alternatives/jcmd.1.gz @@ -0,0 +1 @@ +/usr/lib/jvm/java-11-openjdk-amd64/man/man1/jcmd.1.gz \ No newline at end of file diff --git a/alternatives/jconsole b/alternatives/jconsole new file mode 120000 index 0000000..272404e --- /dev/null +++ b/alternatives/jconsole @@ -0,0 +1 @@ +/usr/lib/jvm/java-11-openjdk-amd64/bin/jconsole \ No newline at end of file diff --git a/alternatives/jconsole.1.gz b/alternatives/jconsole.1.gz new file mode 120000 index 0000000..1ccbf21 --- /dev/null +++ b/alternatives/jconsole.1.gz @@ -0,0 +1 @@ +/usr/lib/jvm/java-11-openjdk-amd64/man/man1/jconsole.1.gz \ No newline at end of file diff --git a/alternatives/jdb b/alternatives/jdb new file mode 120000 index 0000000..f89c672 --- /dev/null +++ b/alternatives/jdb @@ -0,0 +1 @@ +/usr/lib/jvm/java-11-openjdk-amd64/bin/jdb \ No newline at end of file diff --git a/alternatives/jdb.1.gz b/alternatives/jdb.1.gz new file mode 120000 index 0000000..57217ef --- /dev/null +++ b/alternatives/jdb.1.gz @@ -0,0 +1 @@ +/usr/lib/jvm/java-11-openjdk-amd64/man/man1/jdb.1.gz \ No newline at end of file diff --git a/alternatives/jdeprscan b/alternatives/jdeprscan new file mode 120000 index 0000000..42e6bd9 --- /dev/null +++ b/alternatives/jdeprscan @@ -0,0 +1 @@ +/usr/lib/jvm/java-11-openjdk-amd64/bin/jdeprscan \ No newline at end of file diff --git a/alternatives/jdeps b/alternatives/jdeps new file mode 120000 index 0000000..8bf590e --- /dev/null +++ b/alternatives/jdeps @@ -0,0 +1 @@ +/usr/lib/jvm/java-11-openjdk-amd64/bin/jdeps \ No newline at end of file diff --git a/alternatives/jdeps.1.gz b/alternatives/jdeps.1.gz new file mode 120000 index 0000000..0f01e83 --- /dev/null +++ b/alternatives/jdeps.1.gz @@ -0,0 +1 @@ +/usr/lib/jvm/java-11-openjdk-amd64/man/man1/jdeps.1.gz \ No newline at end of file diff --git a/alternatives/jexec b/alternatives/jexec new file mode 120000 index 0000000..eac05c3 --- /dev/null +++ b/alternatives/jexec @@ -0,0 +1 @@ +/usr/lib/jvm/java-11-openjdk-amd64/lib/jexec \ No newline at end of file diff --git a/alternatives/jexec-binfmt b/alternatives/jexec-binfmt new file mode 120000 index 0000000..a1525e5 --- /dev/null +++ b/alternatives/jexec-binfmt @@ -0,0 +1 @@ +/usr/lib/jvm/java-11-openjdk-amd64/lib/jar.binfmt \ No newline at end of file diff --git a/alternatives/jfr b/alternatives/jfr new file mode 120000 index 0000000..d5fda24 --- /dev/null +++ b/alternatives/jfr @@ -0,0 +1 @@ +/usr/lib/jvm/java-11-openjdk-amd64/bin/jfr \ No newline at end of file diff --git a/alternatives/jhsdb b/alternatives/jhsdb new file mode 120000 index 0000000..0ab2fd6 --- /dev/null +++ b/alternatives/jhsdb @@ -0,0 +1 @@ +/usr/lib/jvm/java-11-openjdk-amd64/bin/jhsdb \ No newline at end of file diff --git a/alternatives/jimage b/alternatives/jimage new file mode 120000 index 0000000..ca1bfcf --- /dev/null +++ b/alternatives/jimage @@ -0,0 +1 @@ +/usr/lib/jvm/java-11-openjdk-amd64/bin/jimage \ No newline at end of file diff --git a/alternatives/jinfo b/alternatives/jinfo new file mode 120000 index 0000000..1171ba9 --- /dev/null +++ b/alternatives/jinfo @@ -0,0 +1 @@ +/usr/lib/jvm/java-11-openjdk-amd64/bin/jinfo \ No newline at end of file diff --git a/alternatives/jinfo.1.gz b/alternatives/jinfo.1.gz new file mode 120000 index 0000000..2e5934c --- /dev/null +++ b/alternatives/jinfo.1.gz @@ -0,0 +1 @@ +/usr/lib/jvm/java-11-openjdk-amd64/man/man1/jinfo.1.gz \ No newline at end of file diff --git a/alternatives/jjs b/alternatives/jjs new file mode 120000 index 0000000..7a8627a --- /dev/null +++ b/alternatives/jjs @@ -0,0 +1 @@ +/usr/lib/jvm/java-11-openjdk-amd64/bin/jjs \ No newline at end of file diff --git a/alternatives/jjs.1.gz b/alternatives/jjs.1.gz new file mode 120000 index 0000000..82e0394 --- /dev/null +++ b/alternatives/jjs.1.gz @@ -0,0 +1 @@ +/usr/lib/jvm/java-11-openjdk-amd64/man/man1/jjs.1.gz \ No newline at end of file diff --git a/alternatives/jlink b/alternatives/jlink new file mode 120000 index 0000000..80e6b20 --- /dev/null +++ b/alternatives/jlink @@ -0,0 +1 @@ +/usr/lib/jvm/java-11-openjdk-amd64/bin/jlink \ No newline at end of file diff --git a/alternatives/jmap b/alternatives/jmap new file mode 120000 index 0000000..adb75b4 --- /dev/null +++ b/alternatives/jmap @@ -0,0 +1 @@ +/usr/lib/jvm/java-11-openjdk-amd64/bin/jmap \ No newline at end of file diff --git a/alternatives/jmap.1.gz b/alternatives/jmap.1.gz new file mode 120000 index 0000000..d4e9cc1 --- /dev/null +++ b/alternatives/jmap.1.gz @@ -0,0 +1 @@ +/usr/lib/jvm/java-11-openjdk-amd64/man/man1/jmap.1.gz \ No newline at end of file diff --git a/alternatives/jmod b/alternatives/jmod new file mode 120000 index 0000000..71c0087 --- /dev/null +++ b/alternatives/jmod @@ -0,0 +1 @@ +/usr/lib/jvm/java-11-openjdk-amd64/bin/jmod \ No newline at end of file diff --git a/alternatives/jps b/alternatives/jps new file mode 120000 index 0000000..3f8036f --- /dev/null +++ b/alternatives/jps @@ -0,0 +1 @@ +/usr/lib/jvm/java-11-openjdk-amd64/bin/jps \ No newline at end of file diff --git a/alternatives/jps.1.gz b/alternatives/jps.1.gz new file mode 120000 index 0000000..7f5b888 --- /dev/null +++ b/alternatives/jps.1.gz @@ -0,0 +1 @@ +/usr/lib/jvm/java-11-openjdk-amd64/man/man1/jps.1.gz \ No newline at end of file diff --git a/alternatives/jrunscript b/alternatives/jrunscript new file mode 120000 index 0000000..5365619 --- /dev/null +++ b/alternatives/jrunscript @@ -0,0 +1 @@ +/usr/lib/jvm/java-11-openjdk-amd64/bin/jrunscript \ No newline at end of file diff --git a/alternatives/jrunscript.1.gz b/alternatives/jrunscript.1.gz new file mode 120000 index 0000000..691c736 --- /dev/null +++ b/alternatives/jrunscript.1.gz @@ -0,0 +1 @@ +/usr/lib/jvm/java-11-openjdk-amd64/man/man1/jrunscript.1.gz \ No newline at end of file diff --git a/alternatives/jshell b/alternatives/jshell new file mode 120000 index 0000000..af9ad66 --- /dev/null +++ b/alternatives/jshell @@ -0,0 +1 @@ +/usr/lib/jvm/java-11-openjdk-amd64/bin/jshell \ No newline at end of file diff --git a/alternatives/jstack b/alternatives/jstack new file mode 120000 index 0000000..1c3aea2 --- /dev/null +++ b/alternatives/jstack @@ -0,0 +1 @@ +/usr/lib/jvm/java-11-openjdk-amd64/bin/jstack \ No newline at end of file diff --git a/alternatives/jstack.1.gz b/alternatives/jstack.1.gz new file mode 120000 index 0000000..960386d --- /dev/null +++ b/alternatives/jstack.1.gz @@ -0,0 +1 @@ +/usr/lib/jvm/java-11-openjdk-amd64/man/man1/jstack.1.gz \ No newline at end of file diff --git a/alternatives/jstat b/alternatives/jstat new file mode 120000 index 0000000..13d6b89 --- /dev/null +++ b/alternatives/jstat @@ -0,0 +1 @@ +/usr/lib/jvm/java-11-openjdk-amd64/bin/jstat \ No newline at end of file diff --git a/alternatives/jstat.1.gz b/alternatives/jstat.1.gz new file mode 120000 index 0000000..7f85cc1 --- /dev/null +++ b/alternatives/jstat.1.gz @@ -0,0 +1 @@ +/usr/lib/jvm/java-11-openjdk-amd64/man/man1/jstat.1.gz \ No newline at end of file diff --git a/alternatives/jstatd b/alternatives/jstatd new file mode 120000 index 0000000..a178635 --- /dev/null +++ b/alternatives/jstatd @@ -0,0 +1 @@ +/usr/lib/jvm/java-11-openjdk-amd64/bin/jstatd \ No newline at end of file diff --git a/alternatives/jstatd.1.gz b/alternatives/jstatd.1.gz new file mode 120000 index 0000000..7a09cf9 --- /dev/null +++ b/alternatives/jstatd.1.gz @@ -0,0 +1 @@ +/usr/lib/jvm/java-11-openjdk-amd64/man/man1/jstatd.1.gz \ No newline at end of file diff --git a/alternatives/keytool b/alternatives/keytool new file mode 120000 index 0000000..dcb93a7 --- /dev/null +++ b/alternatives/keytool @@ -0,0 +1 @@ +/usr/lib/jvm/java-11-openjdk-amd64/bin/keytool \ No newline at end of file diff --git a/alternatives/keytool.1.gz b/alternatives/keytool.1.gz new file mode 120000 index 0000000..17c81fb --- /dev/null +++ b/alternatives/keytool.1.gz @@ -0,0 +1 @@ +/usr/lib/jvm/java-11-openjdk-amd64/man/man1/keytool.1.gz \ No newline at end of file diff --git a/alternatives/pack200 b/alternatives/pack200 new file mode 120000 index 0000000..ab57b5f --- /dev/null +++ b/alternatives/pack200 @@ -0,0 +1 @@ +/usr/lib/jvm/java-11-openjdk-amd64/bin/pack200 \ No newline at end of file diff --git a/alternatives/pack200.1.gz b/alternatives/pack200.1.gz new file mode 120000 index 0000000..3ad0474 --- /dev/null +++ b/alternatives/pack200.1.gz @@ -0,0 +1 @@ +/usr/lib/jvm/java-11-openjdk-amd64/man/man1/pack200.1.gz \ No newline at end of file diff --git a/alternatives/rmic b/alternatives/rmic new file mode 120000 index 0000000..05390b0 --- /dev/null +++ b/alternatives/rmic @@ -0,0 +1 @@ +/usr/lib/jvm/java-11-openjdk-amd64/bin/rmic \ No newline at end of file diff --git a/alternatives/rmic.1.gz b/alternatives/rmic.1.gz new file mode 120000 index 0000000..f907189 --- /dev/null +++ b/alternatives/rmic.1.gz @@ -0,0 +1 @@ +/usr/lib/jvm/java-11-openjdk-amd64/man/man1/rmic.1.gz \ No newline at end of file diff --git a/alternatives/rmid b/alternatives/rmid new file mode 120000 index 0000000..7a2111b --- /dev/null +++ b/alternatives/rmid @@ -0,0 +1 @@ +/usr/lib/jvm/java-11-openjdk-amd64/bin/rmid \ No newline at end of file diff --git a/alternatives/rmid.1.gz b/alternatives/rmid.1.gz new file mode 120000 index 0000000..8646691 --- /dev/null +++ b/alternatives/rmid.1.gz @@ -0,0 +1 @@ +/usr/lib/jvm/java-11-openjdk-amd64/man/man1/rmid.1.gz \ No newline at end of file diff --git a/alternatives/rmiregistry b/alternatives/rmiregistry new file mode 120000 index 0000000..d522e14 --- /dev/null +++ b/alternatives/rmiregistry @@ -0,0 +1 @@ +/usr/lib/jvm/java-11-openjdk-amd64/bin/rmiregistry \ No newline at end of file diff --git a/alternatives/rmiregistry.1.gz b/alternatives/rmiregistry.1.gz new file mode 120000 index 0000000..75f34b5 --- /dev/null +++ b/alternatives/rmiregistry.1.gz @@ -0,0 +1 @@ +/usr/lib/jvm/java-11-openjdk-amd64/man/man1/rmiregistry.1.gz \ No newline at end of file diff --git a/alternatives/serialver b/alternatives/serialver new file mode 120000 index 0000000..b07b17e --- /dev/null +++ b/alternatives/serialver @@ -0,0 +1 @@ +/usr/lib/jvm/java-11-openjdk-amd64/bin/serialver \ No newline at end of file diff --git a/alternatives/serialver.1.gz b/alternatives/serialver.1.gz new file mode 120000 index 0000000..70738e2 --- /dev/null +++ b/alternatives/serialver.1.gz @@ -0,0 +1 @@ +/usr/lib/jvm/java-11-openjdk-amd64/man/man1/serialver.1.gz \ No newline at end of file diff --git a/alternatives/unpack200 b/alternatives/unpack200 new file mode 120000 index 0000000..b93a54c --- /dev/null +++ b/alternatives/unpack200 @@ -0,0 +1 @@ +/usr/lib/jvm/java-11-openjdk-amd64/bin/unpack200 \ No newline at end of file diff --git a/alternatives/unpack200.1.gz b/alternatives/unpack200.1.gz new file mode 120000 index 0000000..618b9cb --- /dev/null +++ b/alternatives/unpack200.1.gz @@ -0,0 +1 @@ +/usr/lib/jvm/java-11-openjdk-amd64/man/man1/unpack200.1.gz \ No newline at end of file diff --git a/ca-certificates/update.d/jks-keystore b/ca-certificates/update.d/jks-keystore new file mode 100755 index 0000000..e0c3445 --- /dev/null +++ b/ca-certificates/update.d/jks-keystore @@ -0,0 +1,89 @@ +#!/bin/sh + +set -e + +# use the locale C.UTF-8 +unset LC_ALL +LC_CTYPE=C.UTF-8 +export LC_CTYPE + +storepass='changeit' +if [ -f /etc/default/cacerts ]; then + . /etc/default/cacerts +fi + +arch=`dpkg --print-architecture` +JAR=/usr/share/ca-certificates-java/ca-certificates-java.jar + +nsslib_name() +{ + if dpkg --assert-multi-arch 2>/dev/null; then + echo "libnss3:${arch}" + else + echo "libnss3" + fi +} + +echo "" +if [ "$cacerts_updates" != yes ] || [ "$CACERT_UPDATES" = disabled ] || [ ! -e $JAR ]; then + echo "updates of cacerts keystore disabled." + exit 0 +fi + +if ! mountpoint -q /proc; then + echo >&2 "the keytool command requires a mounted proc fs (/proc)." + exit 1 +fi + +for jvm in java-7-openjdk-$arch java-7-openjdk \ + oracle-java7-jre-$arch oracle-java7-server-jre-$arch oracle-java7-jdk-$arch \ + java-8-openjdk-$arch java-8-openjdk \ + oracle-java8-jre-$arch oracle-java8-server-jre-$arch oracle-java8-jdk-$arch \ + java-9-openjdk-$arch java-9-openjdk \ + oracle-java9-jre-$arch oracle-java9-server-jre-$arch oracle-java9-jdk-$arch \ + java-10-openjdk-$arch java-10-openjdk \ + oracle-java10-jre-$arch oracle-java10-server-jre-$arch oracle-java10-jdk-$arch \ + java-11-openjdk-$arch java-11-openjdk \ + oracle-java11-jre-$arch oracle-java11-server-jre-$arch oracle-java11-jdk-$arch; do + if [ -x /usr/lib/jvm/$jvm/bin/java ]; then + export JAVA_HOME=/usr/lib/jvm/$jvm + PATH=$JAVA_HOME/bin:$PATH + break + fi +done + +if dpkg-query --version >/dev/null; then + nsspkg=$(dpkg-query -L "$(nsslib_name)" | sed -n 's,\(.*\)/libnss3\.so$,\1,p'|head -n 1) + nsscfg=/etc/${jvm%-$arch}/security/nss.cfg + nssjdk=$(test ! -f $nsscfg || sed -n '/nssLibraryDirectory/s/.*= *\(.*\)/\1/p' $nsscfg) + if [ -n "$nsspkg" ] && [ -n "$nssjdk" ] && [ "$nsspkg" != "$nssjdk" ]; then + ln -sf $nsspkg/libnss3.so $nssjdk/libnss3.so + fi + softokn3pkg=$(dpkg-query -L "$(nsslib_name)" | sed -n 's,\(.*\)/libsoftokn3\.so$,\1,p'|head -n 1) + if [ -n "$softokn3pkg" ] && [ -n "$nssjdk" ] && [ "$softokn3pkg" != "$nssjdk" ]; then + ln -sf $softokn3pkg/libsoftokn3.so $nssjdk/libsoftokn3.so + fi +fi + +do_cleanup() +{ + [ -z "$temp_jvm_cfg" ] || rm -f $temp_jvm_cfg + if [ -n "$nsspkg" ] && [ -n "$nssjdk" ] && [ "$nsspkg" != "$nssjdk" ] + then + rm -f $nssjdk/libnss3.so + fi + if [ -n "$softokn3pkg" ] && [ -n "$nssjdk" ] \ + && [ "$softokn3pkg" != "$nssjdk" ] + then + rm -f $nssjdk/libsoftokn3.so + fi +} + +if java -Xmx64m -jar $JAR -storepass "$storepass"; then + do_cleanup +else + do_cleanup + exit 1 +fi + +echo "done." diff --git a/default/cacerts b/default/cacerts new file mode 100644 index 0000000..d03ec9d --- /dev/null +++ b/default/cacerts @@ -0,0 +1,10 @@ +# defaults for ca-certificates-java + +# The password which is used to protect the integrity of the keystore. +# storepass must be at least 6 characters long. It must be provided to +# all commands that access the keystore contents. +# Only change this if adding private certificates. +#storepass='' + +# enable/disable updates of the keystore /etc/ssl/certs/java/cacerts +cacerts_updates=yes diff --git a/fonts/conf.avail/59-lohit-devanagari.conf b/fonts/conf.avail/59-lohit-devanagari.conf new file mode 100644 index 0000000..153b6fc --- /dev/null +++ b/fonts/conf.avail/59-lohit-devanagari.conf @@ -0,0 +1,18 @@ + + + + + + mangal + + Lohit Devanagari + + + + Lohit Devanagari + + managl + + + + diff --git a/fonts/conf.avail/65-0-fonts-beng-extra.conf b/fonts/conf.avail/65-0-fonts-beng-extra.conf new file mode 100644 index 0000000..175d409 --- /dev/null +++ b/fonts/conf.avail/65-0-fonts-beng-extra.conf @@ -0,0 +1,44 @@ + + + + + + + bn + + + sans-serif + + + Lohit Bengali + + + + + + bn + + + serif + + + MuktiNarrow + + + + + + + + as + + + sans-serif + + + Lohit Assamese + Lohit Bengali + + + + diff --git a/fonts/conf.avail/65-0-fonts-deva-extra.conf b/fonts/conf.avail/65-0-fonts-deva-extra.conf new file mode 100644 index 0000000..4250a3d --- /dev/null +++ b/fonts/conf.avail/65-0-fonts-deva-extra.conf @@ -0,0 +1,217 @@ + + + + + + + hi + + + sans-serif + + + gargi + + + + + + hi + + + serif + + + Lohit Hindi + + + + + + + + mr + + + sans-serif + + + gargi + + + + + + mr + + + serif + + + Lohit Marathi + Lohit Hindi + + + + + + + + mai + + + sans-serif + + + gargi + + + + + + mai + + + serif + + + Lohit Maithili + Lohit Hindi + + + + + + + + ne + + + sans-serif + + + gargi + + + + + + ne + + + serif + + + Lohit Nepali + Lohit Hindi + + + + + + + + kok + + + sans-serif + + + gargi + + + + + + kok + + + serif + + + Lohit Konkani + Lohit Hindi + + + + + + + + ks + + + sans-serif + + + gargi + + + + + + ks + + + serif + + + Lohit Kashmiri + Lohit Hindi + + + + + + + + sn + + + sans-serif + + + gargi + + + + + + sn + + + serif + + + Lohit Hindi + + + + + + + + sd + + + sans-serif + + + gargi + + + + + + sd + + + serif + + + Lohit Sindhi + Lohit Hindi + + + + diff --git a/fonts/conf.avail/65-0-fonts-gubbi.conf b/fonts/conf.avail/65-0-fonts-gubbi.conf new file mode 100644 index 0000000..4faa7e0 --- /dev/null +++ b/fonts/conf.avail/65-0-fonts-gubbi.conf @@ -0,0 +1,29 @@ + + + + + + + + kn + + + serif + + + Gubbi + + + + + kn + + + sans-serif + + + Lohit Kannada + + + + \ No newline at end of file diff --git a/fonts/conf.avail/65-0-fonts-gujr-extra.conf b/fonts/conf.avail/65-0-fonts-gujr-extra.conf new file mode 100644 index 0000000..489c3cb --- /dev/null +++ b/fonts/conf.avail/65-0-fonts-gujr-extra.conf @@ -0,0 +1,30 @@ + + + + + + + gu + + + sans-serif + + + Rekha + + + + + + gu + + + serif + + + Lohit Gujarati + + + + + diff --git a/fonts/conf.avail/65-0-fonts-guru-extra.conf b/fonts/conf.avail/65-0-fonts-guru-extra.conf new file mode 100644 index 0000000..4142e56 --- /dev/null +++ b/fonts/conf.avail/65-0-fonts-guru-extra.conf @@ -0,0 +1,30 @@ + + + + + + + pa + + + sans-serif + + + Saab + + + + + + pa + + + serif + + + Lohit Punjabi + + + + + diff --git a/fonts/conf.avail/65-0-fonts-orya-extra.conf b/fonts/conf.avail/65-0-fonts-orya-extra.conf new file mode 100644 index 0000000..7f9049c --- /dev/null +++ b/fonts/conf.avail/65-0-fonts-orya-extra.conf @@ -0,0 +1,30 @@ + + + + + + + or + + + sans-serif + + + utkal + + + + + + or + + + serif + + + utkal + + + + + diff --git a/fonts/conf.avail/65-0-fonts-pagul.conf b/fonts/conf.avail/65-0-fonts-pagul.conf new file mode 100644 index 0000000..eec2b1c --- /dev/null +++ b/fonts/conf.avail/65-0-fonts-pagul.conf @@ -0,0 +1,29 @@ + + + + + + + saz + + + sans-serif + + + Pagul + + + + + + saz + + + serif + + + Pagul + + + + diff --git a/fonts/conf.avail/65-0-fonts-telu-extra.conf b/fonts/conf.avail/65-0-fonts-telu-extra.conf new file mode 100644 index 0000000..f1a3610 --- /dev/null +++ b/fonts/conf.avail/65-0-fonts-telu-extra.conf @@ -0,0 +1,30 @@ + + + + + + + te + + + sans-serif + + + lohit_te + + + + + + te + + + serif + + + Vemana + + + + + diff --git a/fonts/conf.avail/65-0-smc-meera.conf b/fonts/conf.avail/65-0-smc-meera.conf new file mode 100644 index 0000000..e91e866 --- /dev/null +++ b/fonts/conf.avail/65-0-smc-meera.conf @@ -0,0 +1,21 @@ + + + + + + ml + + + sans-serif + + + Meera + + + + Meera + + sans-serif + + + diff --git a/fonts/conf.avail/65-0-smc-rachana.conf b/fonts/conf.avail/65-0-smc-rachana.conf new file mode 100644 index 0000000..9cd98fa --- /dev/null +++ b/fonts/conf.avail/65-0-smc-rachana.conf @@ -0,0 +1,21 @@ + + + + + + ml + + + serif + + + Rachana + + + + Rachana + + serif + + + diff --git a/fonts/conf.avail/65-wqy-microhei.conf b/fonts/conf.avail/65-wqy-microhei.conf new file mode 100644 index 0000000..105430b --- /dev/null +++ b/fonts/conf.avail/65-wqy-microhei.conf @@ -0,0 +1,64 @@ + + + + + + WenQuanYi Micro Hei + + + false + + + + + + zh + + + monospace + + + WenQuanYi Micro Hei Mono + + + + + WenQuanYi Micro Hei Mono + + monospace + + + + + monospace + + WenQuanYi Micro Hei Mono + + + + + + zh + + + sans-serif + + + WenQuanYi Micro Hei + + + + + WenQuanYi Micro Hei + + sans-serif + + + + + sans-serif + + WenQuanYi Micro Hei + + + diff --git a/fonts/conf.avail/66-lohit-assamese.conf b/fonts/conf.avail/66-lohit-assamese.conf new file mode 100644 index 0000000..ca3686c --- /dev/null +++ b/fonts/conf.avail/66-lohit-assamese.conf @@ -0,0 +1,32 @@ + + + + + + as + + + sans-serif + + + Lohit Assamese + + + + + + Lohit Assamese + + + true + + + + + Lohit Assamese + + sans-serif + + + + diff --git a/fonts/conf.avail/66-lohit-bengali.conf b/fonts/conf.avail/66-lohit-bengali.conf new file mode 100644 index 0000000..fb6bffe --- /dev/null +++ b/fonts/conf.avail/66-lohit-bengali.conf @@ -0,0 +1,32 @@ + + + + + + bn + + + sans-serif + + + Lohit Bengali + + + + + + Lohit Bengali + + + true + + + + + Lohit Bengali + + sans-serif + + + + diff --git a/fonts/conf.avail/66-lohit-devanagari.conf b/fonts/conf.avail/66-lohit-devanagari.conf new file mode 100644 index 0000000..2571969 --- /dev/null +++ b/fonts/conf.avail/66-lohit-devanagari.conf @@ -0,0 +1,143 @@ + + + + + + hi + + + sans-serif + + + Lohit Devanagari + + + + + + mr + + + sans-serif + + + Lohit Devanagari + + + + + + kok + + + sans-serif + + + Lohit Devanagari + + + + + + ks@devanagari + + + sans-serif + + + Lohit Devanagari + + + + + + sd@devanagari + + + sans-serif + + + Lohit Devanagari + + + + + + mai + + + sans-serif + + + Lohit Devanagari + + + + + + ne + + + sans-serif + + + Lohit Devanagari + + + + + + brx + + + sans-serif + + + Lohit Devanagari + + + + + + doi + + + sans-serif + + + Lohit Devanagari + + + + + + sa + + + sans-serif + + + Lohit Devanagari + + + + + + sat + + + sans-serif + + + Lohit Devanagari + + + + + Lohit Devanagari + + sans-serif + + + + diff --git a/fonts/conf.avail/66-lohit-gujarati.conf b/fonts/conf.avail/66-lohit-gujarati.conf new file mode 100644 index 0000000..ddf4721 --- /dev/null +++ b/fonts/conf.avail/66-lohit-gujarati.conf @@ -0,0 +1,33 @@ + + + + + + gu + + + sans-serif + + + Lohit Gujarati + + + + + + Lohit Gujarati + + + true + + + + + + Lohit Gujarati + + sans-serif + + + + diff --git a/fonts/conf.avail/66-lohit-gurmukhi.conf b/fonts/conf.avail/66-lohit-gurmukhi.conf new file mode 100644 index 0000000..ddae760 --- /dev/null +++ b/fonts/conf.avail/66-lohit-gurmukhi.conf @@ -0,0 +1,30 @@ + + + + + + pa + + + sans-serif + + + Lohit Gurmukhi + + + + + Lohit Gurmukhi + + + true + + + + Lohit Gurmukhi + + sans-serif + + + + diff --git a/fonts/conf.avail/66-lohit-kannada.conf b/fonts/conf.avail/66-lohit-kannada.conf new file mode 100644 index 0000000..89294ba --- /dev/null +++ b/fonts/conf.avail/66-lohit-kannada.conf @@ -0,0 +1,29 @@ + + + + + + kn + + + sans-serif + + + Lohit Kannada + + + + + Lohit Kannada + + + true + + + + Lohit Kannada + + sans-serif + + + diff --git a/fonts/conf.avail/66-lohit-odia.conf b/fonts/conf.avail/66-lohit-odia.conf new file mode 100644 index 0000000..b5189ea --- /dev/null +++ b/fonts/conf.avail/66-lohit-odia.conf @@ -0,0 +1,33 @@ + + + + + + or + + + sans-serif + + + Lohit Odia + + + + + + Lohit Odia + + + true + + + + + + Lohit Odia + + sans-serif + + + + diff --git a/fonts/conf.avail/66-lohit-tamil-classical.conf b/fonts/conf.avail/66-lohit-tamil-classical.conf new file mode 100644 index 0000000..13a9033 --- /dev/null +++ b/fonts/conf.avail/66-lohit-tamil-classical.conf @@ -0,0 +1,32 @@ + + + + + + ta + + + sans-serif + + + Lohit Tamil Classical + + + + + + Lohit Tamil Classical + + + true + + + + + Lohit Tamil Classical + + sans-serif + + + + diff --git a/fonts/conf.avail/66-lohit-tamil.conf b/fonts/conf.avail/66-lohit-tamil.conf new file mode 100644 index 0000000..3f66577 --- /dev/null +++ b/fonts/conf.avail/66-lohit-tamil.conf @@ -0,0 +1,32 @@ + + + + + + ta + + + sans-serif + + + Lohit Tamil + + + + + + Lohit Tamil + + + true + + + + + Lohit Tamil + + sans-serif + + + + diff --git a/fonts/conf.avail/66-lohit-telugu.conf b/fonts/conf.avail/66-lohit-telugu.conf new file mode 100644 index 0000000..0260b62 --- /dev/null +++ b/fonts/conf.avail/66-lohit-telugu.conf @@ -0,0 +1,21 @@ + + + + + + te + + + sans-serif + + + Lohit Telugu + + + + Lohit Telugu + + sans-serif + + + diff --git a/fonts/conf.avail/67-fonts-smc-manjari.conf b/fonts/conf.avail/67-fonts-smc-manjari.conf new file mode 100644 index 0000000..d94efc6 --- /dev/null +++ b/fonts/conf.avail/67-fonts-smc-manjari.conf @@ -0,0 +1,21 @@ + + + + + + ml + + + sans-serif + + + Manjari + + + + Manjari + + sans-serif + + + diff --git a/fonts/conf.avail/67-lohit-malayalam.conf b/fonts/conf.avail/67-lohit-malayalam.conf new file mode 100644 index 0000000..329297c --- /dev/null +++ b/fonts/conf.avail/67-lohit-malayalam.conf @@ -0,0 +1,30 @@ + + + + + + ml + + + sans-serif + + + Lohit Malayalam + + + + + Lohit Malayalam + + + true + + + + Lohit Malayalam + + sans-serif + + + + diff --git a/fonts/conf.avail/67-smc-anjalioldlipi.conf b/fonts/conf.avail/67-smc-anjalioldlipi.conf new file mode 100644 index 0000000..9cec6fe --- /dev/null +++ b/fonts/conf.avail/67-smc-anjalioldlipi.conf @@ -0,0 +1,21 @@ + + + + + + ml-in + + + sans-serif + + + AnjaliOldLipi + + + + AnjaliOldLipi + + sans-serif + + + diff --git a/fonts/conf.avail/67-smc-chilanka.conf b/fonts/conf.avail/67-smc-chilanka.conf new file mode 100644 index 0000000..4cbe06f --- /dev/null +++ b/fonts/conf.avail/67-smc-chilanka.conf @@ -0,0 +1,21 @@ + + + + + + ml-in + + + cursive + + + Chilanka + + + + Chilanka + + cursive + + + diff --git a/fonts/conf.avail/67-smc-dyuthi.conf b/fonts/conf.avail/67-smc-dyuthi.conf new file mode 100644 index 0000000..8f7a5eb --- /dev/null +++ b/fonts/conf.avail/67-smc-dyuthi.conf @@ -0,0 +1,21 @@ + + + + + + ml-in + + + sans-serif + + + Dyuthi + + + + Dyuthi + + sans-serif + + + diff --git a/fonts/conf.avail/67-smc-karumbi.conf b/fonts/conf.avail/67-smc-karumbi.conf new file mode 100644 index 0000000..049c0dd --- /dev/null +++ b/fonts/conf.avail/67-smc-karumbi.conf @@ -0,0 +1,21 @@ + + + + + + ml-in + + + cursive + + + Karumbi + + + + Karumbi + + cursive + + + diff --git a/fonts/conf.avail/67-smc-keraleeyam.conf b/fonts/conf.avail/67-smc-keraleeyam.conf new file mode 100644 index 0000000..1eb6701 --- /dev/null +++ b/fonts/conf.avail/67-smc-keraleeyam.conf @@ -0,0 +1,21 @@ + + + + + + ml-in + + + sans-serif + + + Keraleeyam + + + + Keraleeyam + + sans-serif + + + diff --git a/fonts/conf.avail/67-smc-raghumalayalamsans.conf b/fonts/conf.avail/67-smc-raghumalayalamsans.conf new file mode 100644 index 0000000..cb8bbb4 --- /dev/null +++ b/fonts/conf.avail/67-smc-raghumalayalamsans.conf @@ -0,0 +1,21 @@ + + + + + + ml-in + + + sans-serif + + + RaghuMalayalam + + + + RaghuMalayalam + + sans-serif + + + diff --git a/fonts/conf.avail/67-smc-suruma.conf b/fonts/conf.avail/67-smc-suruma.conf new file mode 100644 index 0000000..ec75240 --- /dev/null +++ b/fonts/conf.avail/67-smc-suruma.conf @@ -0,0 +1,21 @@ + + + + + + ml-in + + + sans-serif + + + suruma + + + + suruma + + sans-serif + + + diff --git a/fonts/conf.avail/67-smc-uroob.conf b/fonts/conf.avail/67-smc-uroob.conf new file mode 100644 index 0000000..59dc8d5 --- /dev/null +++ b/fonts/conf.avail/67-smc-uroob.conf @@ -0,0 +1,21 @@ + + + + + + ml-in + + + fantasy + + + Uroob + + + + Uroob + + fantasy + + + diff --git a/fonts/conf.d/59-lohit-devanagari.conf b/fonts/conf.d/59-lohit-devanagari.conf new file mode 120000 index 0000000..c45af31 --- /dev/null +++ b/fonts/conf.d/59-lohit-devanagari.conf @@ -0,0 +1 @@ +../conf.avail/59-lohit-devanagari.conf \ No newline at end of file diff --git a/fonts/conf.d/65-0-fonts-beng-extra.conf b/fonts/conf.d/65-0-fonts-beng-extra.conf new file mode 120000 index 0000000..b5bb68f --- /dev/null +++ b/fonts/conf.d/65-0-fonts-beng-extra.conf @@ -0,0 +1 @@ +../conf.avail/65-0-fonts-beng-extra.conf \ No newline at end of file diff --git a/fonts/conf.d/65-0-fonts-deva-extra.conf b/fonts/conf.d/65-0-fonts-deva-extra.conf new file mode 120000 index 0000000..cdc22e5 --- /dev/null +++ b/fonts/conf.d/65-0-fonts-deva-extra.conf @@ -0,0 +1 @@ +../conf.avail/65-0-fonts-deva-extra.conf \ No newline at end of file diff --git a/fonts/conf.d/65-0-fonts-gubbi.conf b/fonts/conf.d/65-0-fonts-gubbi.conf new file mode 120000 index 0000000..4b7f688 --- /dev/null +++ b/fonts/conf.d/65-0-fonts-gubbi.conf @@ -0,0 +1 @@ +../conf.avail/65-0-fonts-gubbi.conf \ No newline at end of file diff --git a/fonts/conf.d/65-0-fonts-gujr-extra.conf b/fonts/conf.d/65-0-fonts-gujr-extra.conf new file mode 120000 index 0000000..ee93241 --- /dev/null +++ b/fonts/conf.d/65-0-fonts-gujr-extra.conf @@ -0,0 +1 @@ +../conf.avail/65-0-fonts-gujr-extra.conf \ No newline at end of file diff --git a/fonts/conf.d/65-0-fonts-guru-extra.conf b/fonts/conf.d/65-0-fonts-guru-extra.conf new file mode 120000 index 0000000..1f4b2fa --- /dev/null +++ b/fonts/conf.d/65-0-fonts-guru-extra.conf @@ -0,0 +1 @@ +../conf.avail/65-0-fonts-guru-extra.conf \ No newline at end of file diff --git a/fonts/conf.d/65-0-fonts-orya-extra.conf b/fonts/conf.d/65-0-fonts-orya-extra.conf new file mode 120000 index 0000000..ca7dc3c --- /dev/null +++ b/fonts/conf.d/65-0-fonts-orya-extra.conf @@ -0,0 +1 @@ +../conf.avail/65-0-fonts-orya-extra.conf \ No newline at end of file diff --git a/fonts/conf.d/65-0-fonts-pagul.conf b/fonts/conf.d/65-0-fonts-pagul.conf new file mode 120000 index 0000000..f161e94 --- /dev/null +++ b/fonts/conf.d/65-0-fonts-pagul.conf @@ -0,0 +1 @@ +../conf.avail/65-0-fonts-pagul.conf \ No newline at end of file diff --git a/fonts/conf.d/65-0-fonts-telu-extra.conf b/fonts/conf.d/65-0-fonts-telu-extra.conf new file mode 120000 index 0000000..f855d54 --- /dev/null +++ b/fonts/conf.d/65-0-fonts-telu-extra.conf @@ -0,0 +1 @@ +../conf.avail/65-0-fonts-telu-extra.conf \ No newline at end of file diff --git a/fonts/conf.d/65-0-smc-meera.conf b/fonts/conf.d/65-0-smc-meera.conf new file mode 120000 index 0000000..3fda3fb --- /dev/null +++ b/fonts/conf.d/65-0-smc-meera.conf @@ -0,0 +1 @@ +../conf.avail/65-0-smc-meera.conf \ No newline at end of file diff --git a/fonts/conf.d/65-0-smc-rachana.conf b/fonts/conf.d/65-0-smc-rachana.conf new file mode 120000 index 0000000..eb275a4 --- /dev/null +++ b/fonts/conf.d/65-0-smc-rachana.conf @@ -0,0 +1 @@ +../conf.avail/65-0-smc-rachana.conf \ No newline at end of file diff --git a/fonts/conf.d/65-wqy-microhei.conf b/fonts/conf.d/65-wqy-microhei.conf new file mode 120000 index 0000000..4981881 --- /dev/null +++ b/fonts/conf.d/65-wqy-microhei.conf @@ -0,0 +1 @@ +../conf.avail/65-wqy-microhei.conf \ No newline at end of file diff --git a/fonts/conf.d/66-lohit-assamese.conf b/fonts/conf.d/66-lohit-assamese.conf new file mode 120000 index 0000000..a442dc6 --- /dev/null +++ b/fonts/conf.d/66-lohit-assamese.conf @@ -0,0 +1 @@ +../conf.avail/66-lohit-assamese.conf \ No newline at end of file diff --git a/fonts/conf.d/66-lohit-bengali.conf b/fonts/conf.d/66-lohit-bengali.conf new file mode 120000 index 0000000..bec1470 --- /dev/null +++ b/fonts/conf.d/66-lohit-bengali.conf @@ -0,0 +1 @@ +../conf.avail/66-lohit-bengali.conf \ No newline at end of file diff --git a/fonts/conf.d/66-lohit-devanagari.conf b/fonts/conf.d/66-lohit-devanagari.conf new file mode 120000 index 0000000..dc9c41b --- /dev/null +++ b/fonts/conf.d/66-lohit-devanagari.conf @@ -0,0 +1 @@ +../conf.avail/66-lohit-devanagari.conf \ No newline at end of file diff --git a/fonts/conf.d/66-lohit-gujarati.conf b/fonts/conf.d/66-lohit-gujarati.conf new file mode 120000 index 0000000..8e07fbd --- /dev/null +++ b/fonts/conf.d/66-lohit-gujarati.conf @@ -0,0 +1 @@ +../conf.avail/66-lohit-gujarati.conf \ No newline at end of file diff --git a/fonts/conf.d/66-lohit-gurmukhi.conf b/fonts/conf.d/66-lohit-gurmukhi.conf new file mode 120000 index 0000000..2e1ad9d --- /dev/null +++ b/fonts/conf.d/66-lohit-gurmukhi.conf @@ -0,0 +1 @@ +../conf.avail/66-lohit-gurmukhi.conf \ No newline at end of file diff --git a/fonts/conf.d/66-lohit-kannada.conf b/fonts/conf.d/66-lohit-kannada.conf new file mode 120000 index 0000000..55d315a --- /dev/null +++ b/fonts/conf.d/66-lohit-kannada.conf @@ -0,0 +1 @@ +../conf.avail/66-lohit-kannada.conf \ No newline at end of file diff --git a/fonts/conf.d/66-lohit-odia.conf b/fonts/conf.d/66-lohit-odia.conf new file mode 120000 index 0000000..7f1ff8c --- /dev/null +++ b/fonts/conf.d/66-lohit-odia.conf @@ -0,0 +1 @@ +../conf.avail/66-lohit-odia.conf \ No newline at end of file diff --git a/fonts/conf.d/66-lohit-tamil-classical.conf b/fonts/conf.d/66-lohit-tamil-classical.conf new file mode 120000 index 0000000..575eeeb --- /dev/null +++ b/fonts/conf.d/66-lohit-tamil-classical.conf @@ -0,0 +1 @@ +../conf.avail/66-lohit-tamil-classical.conf \ No newline at end of file diff --git a/fonts/conf.d/66-lohit-tamil.conf b/fonts/conf.d/66-lohit-tamil.conf new file mode 120000 index 0000000..1d6e1e2 --- /dev/null +++ b/fonts/conf.d/66-lohit-tamil.conf @@ -0,0 +1 @@ +../conf.avail/66-lohit-tamil.conf \ No newline at end of file diff --git a/fonts/conf.d/66-lohit-telugu.conf b/fonts/conf.d/66-lohit-telugu.conf new file mode 120000 index 0000000..8d1f919 --- /dev/null +++ b/fonts/conf.d/66-lohit-telugu.conf @@ -0,0 +1 @@ +../conf.avail/66-lohit-telugu.conf \ No newline at end of file diff --git a/fonts/conf.d/67-fonts-smc-manjari.conf b/fonts/conf.d/67-fonts-smc-manjari.conf new file mode 120000 index 0000000..8a392c4 --- /dev/null +++ b/fonts/conf.d/67-fonts-smc-manjari.conf @@ -0,0 +1 @@ +../conf.avail/67-fonts-smc-manjari.conf \ No newline at end of file diff --git a/fonts/conf.d/67-smc-anjalioldlipi.conf b/fonts/conf.d/67-smc-anjalioldlipi.conf new file mode 120000 index 0000000..36d4ad9 --- /dev/null +++ b/fonts/conf.d/67-smc-anjalioldlipi.conf @@ -0,0 +1 @@ +../conf.avail/67-smc-anjalioldlipi.conf \ No newline at end of file diff --git a/fonts/conf.d/67-smc-chilanka.conf b/fonts/conf.d/67-smc-chilanka.conf new file mode 120000 index 0000000..76ace17 --- /dev/null +++ b/fonts/conf.d/67-smc-chilanka.conf @@ -0,0 +1 @@ +../conf.avail/67-smc-chilanka.conf \ No newline at end of file diff --git a/fonts/conf.d/67-smc-dyuthi.conf b/fonts/conf.d/67-smc-dyuthi.conf new file mode 120000 index 0000000..5c39d0b --- /dev/null +++ b/fonts/conf.d/67-smc-dyuthi.conf @@ -0,0 +1 @@ +../conf.avail/67-smc-dyuthi.conf \ No newline at end of file diff --git a/fonts/conf.d/67-smc-karumbi.conf b/fonts/conf.d/67-smc-karumbi.conf new file mode 120000 index 0000000..f8dde44 --- /dev/null +++ b/fonts/conf.d/67-smc-karumbi.conf @@ -0,0 +1 @@ +../conf.avail/67-smc-karumbi.conf \ No newline at end of file diff --git a/fonts/conf.d/67-smc-keraleeyam.conf b/fonts/conf.d/67-smc-keraleeyam.conf new file mode 120000 index 0000000..4418006 --- /dev/null +++ b/fonts/conf.d/67-smc-keraleeyam.conf @@ -0,0 +1 @@ +../conf.avail/67-smc-keraleeyam.conf \ No newline at end of file diff --git a/fonts/conf.d/67-smc-raghumalayalamsans.conf b/fonts/conf.d/67-smc-raghumalayalamsans.conf new file mode 120000 index 0000000..75b2c5f --- /dev/null +++ b/fonts/conf.d/67-smc-raghumalayalamsans.conf @@ -0,0 +1 @@ +../conf.avail/67-smc-raghumalayalamsans.conf \ No newline at end of file diff --git a/fonts/conf.d/67-smc-suruma.conf b/fonts/conf.d/67-smc-suruma.conf new file mode 120000 index 0000000..aa09db9 --- /dev/null +++ b/fonts/conf.d/67-smc-suruma.conf @@ -0,0 +1 @@ +../conf.avail/67-smc-suruma.conf \ No newline at end of file diff --git a/fonts/conf.d/67-smc-uroob.conf b/fonts/conf.d/67-smc-uroob.conf new file mode 120000 index 0000000..13faac7 --- /dev/null +++ b/fonts/conf.d/67-smc-uroob.conf @@ -0,0 +1 @@ +../conf.avail/67-smc-uroob.conf \ No newline at end of file diff --git a/init.d/x11-common b/init.d/x11-common new file mode 100755 index 0000000..63c3c30 --- /dev/null +++ b/init.d/x11-common @@ -0,0 +1,122 @@ +#!/bin/sh +# /etc/init.d/x11-common: set up the X server and ICE socket directories +### BEGIN INIT INFO +# Provides: x11-common +# Required-Start: $remote_fs +# Required-Stop: $remote_fs +# Default-Start: S +# Default-Stop: +# Short-Description: set up the X server and ICE socket directories +### END INIT INFO + +set -e + +PATH=/usr/bin:/usr/sbin:/bin:/sbin +SOCKET_DIR=.X11-unix +ICE_DIR=.ICE-unix + +. /lib/lsb/init-functions +if [ -f /etc/default/rcS ]; then + . /etc/default/rcS +fi + +do_restorecon () { + # Restore file security context (SELinux). + if which restorecon >/dev/null 2>&1; then + restorecon "$1" + fi +} + +# create a directory in /tmp. +# assumes /tmp has a sticky bit set (or is only writeable by root) +set_up_dir () { + DIR="/tmp/$1" + + if [ "$VERBOSE" != no ]; then + log_progress_msg "$DIR" + fi + # if $DIR exists and isn't a directory, move it aside + if [ -e $DIR ] && ! [ -d $DIR ] || [ -h $DIR ]; then + mv "$DIR" "$(mktemp -d $DIR.XXXXXX)" + fi + + error=0 + while :; do + if [ $error -ne 0 ] ; then + # an error means the file-system is readonly or an attacker + # is doing evil things, distinguish by creating a temporary file, + # but give up after a while. + if [ $error -gt 5 ]; then + log_failure_msg "failed to set up $DIR" + return 1 + fi + fn="$(mktemp /tmp/testwriteable.XXXXXXXXXX)" || return 1 + rm "$fn" + fi + mkdir -p -m 01777 "$DIR" || { rm "$DIR" || error=$((error + 1)) ; continue ; } + case "$(LC_ALL=C stat -c '%u %g %a %F' "$DIR")" in + "0 0 1777 directory") + # everything as it is supposed to be + break + ;; + "0 0 "*" directory") + # as it is owned by root, cannot be replaced with a symlink: + chmod 01777 "$DIR" + break + ;; + *" directory") + # if the chown succeeds, the next step can change it savely + chown -h root:root "$DIR" || error=$((error + 1)) + continue + ;; + *) + log_failure_msg "failed to set up $DIR" + return 1 + ;; + esac + done + do_restorecon "$DIR" + + return 0 +} + +do_status () { + if [ -d "/tmp/$ICE_DIR" ] && [ -d "/tmp/$SOCKET_DIR" ]; then + return 0 + else + return 4 + fi +} + +case "$1" in + start) + if [ "$VERBOSE" != no ]; then + log_begin_msg "Setting up X socket directories..." + fi + set_up_dir "$SOCKET_DIR" + set_up_dir "$ICE_DIR" + if [ "$VERBOSE" != no ]; then + log_end_msg 0 + fi + ;; + + restart|reload|force-reload) + /etc/init.d/x11-common start + ;; + + stop) + : + ;; + + status) + do_status + ;; + *) + log_success_msg "Usage: /etc/init.d/x11-common {start|stop|status|restart|reload|force-reload}" + exit 1 + ;; +esac + +exit 0 + +# vim:set ai et sts=2 sw=2 tw=0: diff --git a/java-11-openjdk/accessibility.properties b/java-11-openjdk/accessibility.properties new file mode 100644 index 0000000..c1bdc48 --- /dev/null +++ b/java-11-openjdk/accessibility.properties @@ -0,0 +1,10 @@ +# +# The following line specifies the assistive technology classes +# that should be loaded into the Java VM when the AWT is initailized. +# Specify multiple classes by separating them with commas. +# Note: the line below cannot end the file (there must be at +# a minimum a blank line following it). +# +# Doesn't work, see LP: #935296 +#assistive_technologies=org.GNOME.Accessibility.AtkWrapper + diff --git a/java-11-openjdk/jfr/default.jfc b/java-11-openjdk/jfr/default.jfc new file mode 100644 index 0000000..e76140c --- /dev/null +++ b/java-11-openjdk/jfr/default.jfc @@ -0,0 +1,889 @@ + + + + + + + + true + everyChunk + + + + true + 1000 ms + + + + true + everyChunk + + + + true + 1000 ms + + + + true + + + + true + + + + true + true + 20 ms + + + + true + true + 20 ms + + + + true + true + 20 ms + + + + true + true + 20 ms + + + + false + true + 20 ms + + + + true + true + 0 ms + + + + true + true + 0 ms + + + + true + true + 0 ms + + + + true + true + + + + false + true + 0 ms + + + + false + true + + + + false + + + + true + beginChunk + + + + true + beginChunk + + + + true + 20 ms + + + + true + 20 ms + + + + true + 10 ms + + + + false + 10 ms + + + + false + 10 ms + + + + false + 10 ms + + + + false + 10 ms + + + + false + 10 ms + + + + true + 10 ms + + + + true + true + + + + true + everyChunk + + + + true + beginChunk + + + + true + beginChunk + + + + true + beginChunk + + + + true + beginChunk + + + + true + beginChunk + + + + true + beginChunk + + + + true + beginChunk + + + + true + + + + true + + + + true + + + + true + + + + true + + + + true + + + + true + + + + false + everyChunk + + + + true + everyChunk + + + + true + beginChunk + + + + true + beginChunk + + + + true + beginChunk + + + + true + beginChunk + + + + false + + + + true + + + + true + + + + true + + + + true + + + + true + + + + true + true + + + + true + true + + + + true + + + + true + 0 ms + + + + true + 0 ms + + + + true + 0 ms + + + + true + 0 ms + + + + true + 0 ms + + + + true + 0 ms + + + + true + 0 ms + + + + true + 0 ms + + + + false + 0 ms + + + + false + 0 ms + + + + true + 0 ms + + + + true + + + + true + + + + true + + + + true + + + + true + + + + true + + + + true + + + + true + + + + true + + + + false + + + + false + + + + true + + + + false + true + + + + true + + + + false + everyChunk + + + + false + + + + false + everyChunk + + + + false + + + + true + false + 0 ns + + + + true + beginChunk + + + + true + 1000 ms + + + + true + 1000 ms + + + + true + 60 s + + + + false + + + + false + + + + true + beginChunk + + + + true + everyChunk + + + + true + 100 ms + + + + true + beginChunk + + + + true + everyChunk + + + + true + + + + true + beginChunk + + + + true + beginChunk + + + + true + beginChunk + + + + true + 10 s + + + + true + 1000 ms + + + + true + 10 s + + + + true + beginChunk + + + + true + endChunk + + + + true + 5 s + + + + true + beginChunk + + + + true + everyChunk + + + + false + true + + + + false + true + + + + true + everyChunk + + + + true + endChunk + + + + true + endChunk + + + + true + true + 20 ms + + + + true + true + 20 ms + + + + true + true + 20 ms + + + + true + true + 20 ms + + + + true + true + 20 ms + + + + false + true + + + + false + true + + + + false + true + + + + false + true + + + + false + true + + + + true + true + + + + true + 1000 ms + + + + true + + + + true + + + + true + + + + true + + + + true + 10 ms + + + + true + 0 ms + + + + true + 10 ms + + + + true + 10 ms + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + 20 ms + + 20 ms + + 20 ms + + false + + + + diff --git a/java-11-openjdk/jfr/profile.jfc b/java-11-openjdk/jfr/profile.jfc new file mode 100644 index 0000000..11ad365 --- /dev/null +++ b/java-11-openjdk/jfr/profile.jfc @@ -0,0 +1,890 @@ + + + + + + + + true + everyChunk + + + + true + 1000 ms + + + + true + everyChunk + + + + true + 1000 ms + + + + true + + + + true + + + + true + true + 10 ms + + + + true + true + 10 ms + + + + true + true + 10 ms + + + + true + true + 10 ms + + + + true + true + 10 ms + + + + true + true + 0 ms + + + + true + true + 0 ms + + + + true + true + 0 ms + + + + true + true + + + + false + true + 0 ms + + + + false + true + + + + false + + + + true + beginChunk + + + + true + beginChunk + + + + true + 10 ms + + + + true + 20 ms + + + + true + 0 ms + + + + false + 0 ms + + + + false + 0 ms + + + + false + 0 ms + + + + false + 0 ms + + + + false + 0 ms + + + + true + 0 ms + + + + true + true + + + + true + 60 s + + + + true + beginChunk + + + + true + beginChunk + + + + true + beginChunk + + + + true + beginChunk + + + + true + beginChunk + + + + true + beginChunk + + + + true + beginChunk + + + + true + + + + true + + + + true + + + + true + + + + true + + + + true + + + + true + + + + false + everyChunk + + + + true + everyChunk + + + + true + beginChunk + + + + true + beginChunk + + + + true + beginChunk + + + + true + beginChunk + + + + false + + + + true + + + + true + + + + true + + + + true + + + + true + + + + true + true + + + + true + true + + + + true + + + + true + 0 ms + + + + true + 0 ms + + + + true + 0 ms + + + + true + 0 ms + + + + true + 0 ms + + + + true + 0 ms + + + + true + 0 ms + + + + true + 0 ms + + + + false + 0 ms + + + + false + 0 ms + + + + true + 0 ms + + + + true + + + + true + + + + true + + + + true + + + + true + + + + true + + + + true + + + + true + + + + true + + + + true + + + + true + + + + true + + + + false + true + + + + true + + + + false + everyChunk + + + + false + + + + false + everyChunk + + + + false + + + + true + true + 0 ns + + + + true + beginChunk + + + + true + 1000 ms + + + + true + 100 ms + + + + true + 10 s + + + + true + + + + false + + + + true + beginChunk + + + + true + everyChunk + + + + true + 100 ms + + + + true + beginChunk + + + + true + everyChunk + + + + true + + + + true + beginChunk + + + + true + beginChunk + + + + true + beginChunk + + + + true + 10 s + + + + true + 1000 ms + + + + true + 10 s + + + + true + beginChunk + + + + true + endChunk + + + + true + 5 s + + + + true + beginChunk + + + + true + everyChunk + + + + true + true + + + + true + true + + + + true + everyChunk + + + + true + endChunk + + + + true + endChunk + + + + true + true + 10 ms + + + + true + true + 10 ms + + + + true + true + 10 ms + + + + true + true + 10 ms + + + + true + true + 10 ms + + + + false + true + + + + false + true + + + + false + true + + + + false + true + + + + false + true + + + + true + true + + + + true + 1000 ms + + + + true + + + + true + + + + true + + + + true + + + + true + 10 ms + + + + true + 0 ms + + + + 10 ms + true + + + + true + 10 ms + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + 10 ms + + 10 ms + + 10 ms + + false + + + + diff --git a/java-11-openjdk/jvm-amd64.cfg b/java-11-openjdk/jvm-amd64.cfg new file mode 100644 index 0000000..cf721fd --- /dev/null +++ b/java-11-openjdk/jvm-amd64.cfg @@ -0,0 +1,4 @@ +-server KNOWN +-client IGNORE +-zero KNOWN +-dcevm KNOWN diff --git a/java-11-openjdk/logging.properties b/java-11-openjdk/logging.properties new file mode 100644 index 0000000..58997e5 --- /dev/null +++ b/java-11-openjdk/logging.properties @@ -0,0 +1,63 @@ +############################################################ +# Default Logging Configuration File +# +# You can use a different file by specifying a filename +# with the java.util.logging.config.file system property. +# For example java -Djava.util.logging.config.file=myfile +############################################################ + +############################################################ +# Global properties +############################################################ + +# "handlers" specifies a comma separated list of log Handler +# classes. These handlers will be installed during VM startup. +# Note that these classes must be on the system classpath. +# By default we only configure a ConsoleHandler, which will only +# show messages at the INFO and above levels. +handlers= java.util.logging.ConsoleHandler + +# To also add the FileHandler, use the following line instead. +#handlers= java.util.logging.FileHandler, java.util.logging.ConsoleHandler + +# Default global logging level. +# This specifies which kinds of events are logged across +# all loggers. For any given facility this global level +# can be overriden by a facility specific level +# Note that the ConsoleHandler also has a separate level +# setting to limit messages printed to the console. +.level= INFO + +############################################################ +# Handler specific properties. +# Describes specific configuration info for Handlers. +############################################################ + +# default file output is in user's home directory. +java.util.logging.FileHandler.pattern = %h/java%u.log +java.util.logging.FileHandler.limit = 50000 +java.util.logging.FileHandler.count = 1 +# Default number of locks FileHandler can obtain synchronously. +# This specifies maximum number of attempts to obtain lock file by FileHandler +# implemented by incrementing the unique field %u as per FileHandler API documentation. +java.util.logging.FileHandler.maxLocks = 100 +java.util.logging.FileHandler.formatter = java.util.logging.XMLFormatter + +# Limit the message that are printed on the console to INFO and above. +java.util.logging.ConsoleHandler.level = INFO +java.util.logging.ConsoleHandler.formatter = java.util.logging.SimpleFormatter + +# Example to customize the SimpleFormatter output format +# to print one-line log message like this: +# : [] +# +# java.util.logging.SimpleFormatter.format=%4$s: %5$s [%1$tc]%n + +############################################################ +# Facility specific properties. +# Provides extra control for each logger. +############################################################ + +# For example, set the com.xyz.foo logger to only log SEVERE +# messages: +com.xyz.foo.level = SEVERE diff --git a/java-11-openjdk/management/jmxremote.access b/java-11-openjdk/management/jmxremote.access new file mode 100644 index 0000000..a09e008 --- /dev/null +++ b/java-11-openjdk/management/jmxremote.access @@ -0,0 +1,79 @@ +###################################################################### +# Default Access Control File for Remote JMX(TM) Monitoring +###################################################################### +# +# Access control file for Remote JMX API access to monitoring. +# This file defines the allowed access for different roles. The +# password file (jmxremote.password by default) defines the roles and their +# passwords. To be functional, a role must have an entry in +# both the password and the access files. +# +# The default location of this file is $JRE/conf/management/jmxremote.access +# You can specify an alternate location by specifying a property in +# the management config file $JRE/conf/management/management.properties +# (See that file for details) +# +# The file format for password and access files is syntactically the same +# as the Properties file format. The syntax is described in the Javadoc +# for java.util.Properties.load. +# A typical access file has multiple lines, where each line is blank, +# a comment (like this one), or an access control entry. +# +# An access control entry consists of a role name, and an +# associated access level. The role name is any string that does not +# itself contain spaces or tabs. It corresponds to an entry in the +# password file (jmxremote.password). The access level is one of the +# following: +# "readonly" grants access to read attributes of MBeans. +# For monitoring, this means that a remote client in this +# role can read measurements but cannot perform any action +# that changes the environment of the running program. +# "readwrite" grants access to read and write attributes of MBeans, +# to invoke operations on them, and optionally +# to create or remove them. This access should be granted +# only to trusted clients, since they can potentially +# interfere with the smooth operation of a running program. +# +# The "readwrite" access level can optionally be followed by the "create" and/or +# "unregister" keywords. The "unregister" keyword grants access to unregister +# (delete) MBeans. The "create" keyword grants access to create MBeans of a +# particular class or of any class matching a particular pattern. Access +# should only be granted to create MBeans of known and trusted classes. +# +# For example, the following entry would grant readwrite access +# to "controlRole", as well as access to create MBeans of the class +# javax.management.monitor.CounterMonitor and to unregister any MBean: +# controlRole readwrite \ +# create javax.management.monitor.CounterMonitorMBean \ +# unregister +# or equivalently: +# controlRole readwrite unregister create javax.management.monitor.CounterMBean +# +# The following entry would grant readwrite access as well as access to create +# MBeans of any class in the packages javax.management.monitor and +# javax.management.timer: +# controlRole readwrite \ +# create javax.management.monitor.*,javax.management.timer.* \ +# unregister +# +# The \ character is defined in the Properties file syntax to allow continuation +# lines as shown here. A * in a class pattern matches a sequence of characters +# other than dot (.), so javax.management.monitor.* matches +# javax.management.monitor.CounterMonitor but not +# javax.management.monitor.foo.Bar. +# +# A given role should have at most one entry in this file. If a role +# has no entry, it has no access. +# If multiple entries are found for the same role name, then the last +# access entry is used. +# +# +# Default access control entries: +# o The "monitorRole" role has readonly access. +# o The "controlRole" role has readwrite access and can create the standard +# Timer and Monitor MBeans defined by the JMX API. + +monitorRole readonly +controlRole readwrite \ + create javax.management.monitor.*,javax.management.timer.* \ + unregister diff --git a/java-11-openjdk/management/management.properties b/java-11-openjdk/management/management.properties new file mode 100644 index 0000000..0c14bd6 --- /dev/null +++ b/java-11-openjdk/management/management.properties @@ -0,0 +1,302 @@ +##################################################################### +# Default Configuration File for Java Platform Management +##################################################################### +# +# The Management Configuration file (in java.util.Properties format) +# will be read if one of the following system properties is set: +# -Dcom.sun.management.jmxremote.port= +# or -Dcom.sun.management.config.file= +# +# The default Management Configuration file is: +# +# $JRE/conf/management/management.properties +# +# Another location for the Management Configuration File can be specified +# by the following property on the Java command line: +# +# -Dcom.sun.management.config.file= +# +# If -Dcom.sun.management.config.file= is set, the port +# number for the management agent can be specified in the config file +# using the following lines: +# +# ################ Management Agent Port ######################### +# +# For setting the JMX RMI agent port use the following line +# com.sun.management.jmxremote.port= +# + +##################################################################### +# Optional Instrumentation +##################################################################### +# +# By default only the basic instrumentation with low overhead is on. +# The following properties allow to selectively turn on optional +# instrumentation which are off by default and may have some +# additional overhead. +# +# com.sun.management.enableThreadContentionMonitoring +# +# This option enables thread contention monitoring if the +# Java virtual machine supports such instrumentation. +# Refer to the specification for the java.lang.management.ThreadMBean +# interface - see isThreadContentionMonitoringSupported() method. +# + +# To enable thread contention monitoring, uncomment the following line +# com.sun.management.enableThreadContentionMonitoring + +##################################################################### +# RMI Management Properties +##################################################################### +# +# If system property -Dcom.sun.management.jmxremote.port= +# is set then +# - A MBean server is started +# - JRE Platform MBeans are registered in the MBean server +# - RMI connector is published in a private readonly registry at +# specified port using a well known name, "jmxrmi" +# - the following properties are read for JMX remote management. +# +# The configuration can be specified only at startup time. +# Later changes to above system property (e.g. via setProperty method), +# this config file, the password file, or the access file have no effect to the +# running MBean server, the connector, or the registry. +# + +# +# ########## RMI connector settings for local management ########## +# +# com.sun.management.jmxremote.local.only=true|false +# Default for this property is true. (Case for true/false ignored) +# If this property is specified as true then the local JMX RMI connector +# server will only accept connection requests from clients running on +# the host where the out-of-the-box JMX management agent is running. +# In order to ensure backwards compatibility this property could be +# set to false. However, deploying the local management agent in this +# way is discouraged because the local JMX RMI connector server will +# accept connection requests from any client either local or remote. +# For remote management the remote JMX RMI connector server should +# be used instead with authentication and SSL/TLS encryption enabled. +# + +# For allowing the local management agent accept local +# and remote connection requests use the following line +# com.sun.management.jmxremote.local.only=false + +# +# ###################### RMI SSL ############################# +# +# com.sun.management.jmxremote.ssl=true|false +# Default for this property is true. (Case for true/false ignored) +# If this property is specified as false then SSL is not used. +# + +# For RMI monitoring without SSL use the following line +# com.sun.management.jmxremote.ssl=false + +# com.sun.management.jmxremote.ssl.config.file=filepath +# Specifies the location of the SSL configuration file. A properties +# file can be used to supply the keystore and truststore location and +# password settings thus avoiding to pass them as cleartext in the +# command-line. +# +# The current implementation of the out-of-the-box management agent will +# look up and use the properties specified below to configure the SSL +# keystore and truststore, if present: +# javax.net.ssl.keyStore= +# javax.net.ssl.keyStorePassword= +# javax.net.ssl.trustStore= +# javax.net.ssl.trustStorePassword= +# Any other properties in the file will be ignored. This will allow us +# to extend the property set in the future if required by the default +# SSL implementation. +# +# If the property "com.sun.management.jmxremote.ssl" is set to false, +# then this property is ignored. +# + +# For supplying the keystore settings in a file use the following line +# com.sun.management.jmxremote.ssl.config.file=filepath + +# com.sun.management.jmxremote.ssl.enabled.cipher.suites= +# The value of this property is a string that is a comma-separated list +# of SSL/TLS cipher suites to enable. This property can be specified in +# conjunction with the previous property "com.sun.management.jmxremote.ssl" +# in order to control which particular SSL/TLS cipher suites are enabled +# for use by accepted connections. If this property is not specified then +# the SSL/TLS RMI Server Socket Factory uses the SSL/TLS cipher suites that +# are enabled by default. +# + +# com.sun.management.jmxremote.ssl.enabled.protocols= +# The value of this property is a string that is a comma-separated list +# of SSL/TLS protocol versions to enable. This property can be specified in +# conjunction with the previous property "com.sun.management.jmxremote.ssl" +# in order to control which particular SSL/TLS protocol versions are +# enabled for use by accepted connections. If this property is not +# specified then the SSL/TLS RMI Server Socket Factory uses the SSL/TLS +# protocol versions that are enabled by default. +# + +# com.sun.management.jmxremote.ssl.need.client.auth=true|false +# Default for this property is false. (Case for true/false ignored) +# If this property is specified as true in conjunction with the previous +# property "com.sun.management.jmxremote.ssl" then the SSL/TLS RMI Server +# Socket Factory will require client authentication. +# + +# For RMI monitoring with SSL client authentication use the following line +# com.sun.management.jmxremote.ssl.need.client.auth=true + +# com.sun.management.jmxremote.registry.ssl=true|false +# Default for this property is false. (Case for true/false ignored) +# If this property is specified as true then the RMI registry used +# to bind the RMIServer remote object is protected with SSL/TLS +# RMI Socket Factories that can be configured with the properties: +# com.sun.management.jmxremote.ssl.config.file +# com.sun.management.jmxremote.ssl.enabled.cipher.suites +# com.sun.management.jmxremote.ssl.enabled.protocols +# com.sun.management.jmxremote.ssl.need.client.auth +# If the two properties below are true at the same time, i.e. +# com.sun.management.jmxremote.ssl=true +# com.sun.management.jmxremote.registry.ssl=true +# then the RMIServer remote object and the RMI registry are +# both exported with the same SSL/TLS RMI Socket Factories. +# + +# For using an SSL/TLS protected RMI registry use the following line +# com.sun.management.jmxremote.registry.ssl=true + +# +# ################ RMI User authentication ################ +# +# com.sun.management.jmxremote.authenticate=true|false +# Default for this property is true. (Case for true/false ignored) +# If this property is specified as false then no authentication is +# performed and all users are allowed all access. +# + +# For RMI monitoring without any checking use the following line +# com.sun.management.jmxremote.authenticate=false + +# +# ################ RMI Login configuration ################### +# +# com.sun.management.jmxremote.login.config= +# Specifies the name of a JAAS login configuration entry to use when +# authenticating users of RMI monitoring. +# +# Setting this property is optional - the default login configuration +# specifies a file-based authentication that uses the password file. +# +# When using this property to override the default login configuration +# then the named configuration entry must be in a file that gets loaded +# by JAAS. In addition, the login module(s) specified in the configuration +# should use the name and/or password callbacks to acquire the user's +# credentials. See the NameCallback and PasswordCallback classes in the +# javax.security.auth.callback package for more details. +# +# If the property "com.sun.management.jmxremote.authenticate" is set to +# false, then this property and the password & access files are ignored. +# + +# For a non-default login configuration use the following line +# com.sun.management.jmxremote.login.config= + +# +# ################ RMI Password file location ################## +# +# com.sun.management.jmxremote.password.file=filepath +# Specifies location for password file +# This is optional - default location is +# $JRE/conf/management/jmxremote.password +# +# If the property "com.sun.management.jmxremote.authenticate" is set to +# false, then this property and the password & access files are ignored. +# Otherwise the password file must exist and be in the valid format. +# If the password file is empty or non-existent then no access is allowed. +# + +# For a non-default password file location use the following line +# com.sun.management.jmxremote.password.file=filepath + +# +# ################# Hash passwords in password file ############## +# com.sun.management.jmxremote.password.toHashes = true|false +# Default for this property is true. +# Specifies if passwords in the password file should be hashed or not. +# If this property is true, and if the password file is writable, and if the +# system security policy allows writing into the password file, +# all the clear passwords in the password file will be replaced by +# their SHA3-512 hash when the file is read by the server +# + +# +# ################ RMI Access file location ##################### +# +# com.sun.management.jmxremote.access.file=filepath +# Specifies location for access file +# This is optional - default location is +# $JRE/conf/management/jmxremote.access +# +# If the property "com.sun.management.jmxremote.authenticate" is set to +# false, then this property and the password & access files are ignored. +# Otherwise, the access file must exist and be in the valid format. +# If the access file is empty or non-existent then no access is allowed. +# + +# For a non-default password file location use the following line +# com.sun.management.jmxremote.access.file=filepath +# + +# ################ Management agent listen interface ######################### +# +# com.sun.management.jmxremote.host= +# Specifies the local interface on which the JMX RMI agent will bind. +# This is useful when running on machines which have several +# interfaces defined. It makes it possible to listen to a specific +# subnet accessible through that interface. +# +# The format of the value for that property is any string accepted +# by java.net.InetAddress.getByName(String). +# + +# ################ Filter for ObjectInputStream ############################# +# com.sun.management.jmxremote.serial.filter.pattern= +# A filter, if configured, is used by java.io.ObjectInputStream during +# deserialization of parameters sent to the JMX default agent to validate the +# contents of the stream. +# A filter is configured as a sequence of patterns, each pattern is either +# matched against the name of a class in the stream or defines a limit. +# Patterns are separated by ";" (semicolon). +# Whitespace is significant and is considered part of the pattern. +# +# If a pattern includes a "=", it sets a limit. +# If a limit appears more than once the last value is used. +# Limits are checked before classes regardless of the order in the sequence of patterns. +# If any of the limits are exceeded, the filter status is REJECTED. +# +# maxdepth=value - the maximum depth of a graph +# maxrefs=value - the maximum number of internal references +# maxbytes=value - the maximum number of bytes in the input stream +# maxarray=value - the maximum array length allowed +# +# Other patterns, from left to right, match the class or package name as +# returned from Class.getName. +# If the class is an array type, the class or package to be matched is the element type. +# Arrays of any number of dimensions are treated the same as the element type. +# For example, a pattern of "!example.Foo", rejects creation of any instance or +# array of example.Foo. +# +# If the pattern starts with "!", the status is REJECTED if the remaining pattern +# is matched; otherwise the status is ALLOWED if the pattern matches. +# If the pattern contains "/", the non-empty prefix up to the "/" is the module name; +# if the module name matches the module name of the class then +# the remaining pattern is matched with the class name. +# If there is no "/", the module name is not compared. +# If the pattern ends with ".**" it matches any class in the package and all subpackages. +# If the pattern ends with ".*" it matches any class in the package. +# If the pattern ends with "*", it matches any class with the pattern as a prefix. +# If the pattern is equal to the class name, it matches. +# Otherwise, the status is UNDECIDED. diff --git a/java-11-openjdk/net.properties b/java-11-openjdk/net.properties new file mode 100644 index 0000000..d95715d --- /dev/null +++ b/java-11-openjdk/net.properties @@ -0,0 +1,121 @@ +############################################################ +# Default Networking Configuration File +# +# This file may contain default values for the networking system properties. +# These values are only used when the system properties are not specified +# on the command line or set programmatically. +# For now, only the various proxy settings can be configured here. +############################################################ + +# Whether or not the DefaultProxySelector will default to System Proxy +# settings when they do exist. +# Set it to 'true' to enable this feature and check for platform +# specific proxy settings +# Note that the system properties that do explicitly set proxies +# (like http.proxyHost) do take precedence over the system settings +# even if java.net.useSystemProxies is set to true. + +java.net.useSystemProxies=false + +#------------------------------------------------------------------------ +# Proxy configuration for the various protocol handlers. +# DO NOT uncomment these lines if you have set java.net.useSystemProxies +# to true as the protocol specific properties will take precedence over +# system settings. +#------------------------------------------------------------------------ + +# HTTP Proxy settings. proxyHost is the name of the proxy server +# (e.g. proxy.mydomain.com), proxyPort is the port number to use (default +# value is 80) and nonProxyHosts is a '|' separated list of hostnames which +# should be accessed directly, ignoring the proxy server (default value is +# localhost & 127.0.0.1). +# +# http.proxyHost= +# http.proxyPort=80 +http.nonProxyHosts=localhost|127.*|[::1] +# +# HTTPS Proxy Settings. proxyHost is the name of the proxy server +# (e.g. proxy.mydomain.com), proxyPort is the port number to use (default +# value is 443). The HTTPS protocol handlers uses the http nonProxyHosts list. +# +# https.proxyHost= +# https.proxyPort=443 +# +# FTP Proxy settings. proxyHost is the name of the proxy server +# (e.g. proxy.mydomain.com), proxyPort is the port number to use (default +# value is 80) and nonProxyHosts is a '|' separated list of hostnames which +# should be accessed directly, ignoring the proxy server (default value is +# localhost & 127.0.0.1). +# +# ftp.proxyHost= +# ftp.proxyPort=80 +ftp.nonProxyHosts=localhost|127.*|[::1] +# +# Gopher Proxy settings. proxyHost is the name of the proxy server +# (e.g. proxy.mydomain.com), proxyPort is the port number to use (default +# value is 80) +# +# gopher.proxyHost= +# gopher.proxyPort=80 +# +# Socks proxy settings. socksProxyHost is the name of the proxy server +# (e.g. socks.domain.com), socksProxyPort is the port number to use +# (default value is 1080) +# +# socksProxyHost= +# socksProxyPort=1080 +# +# HTTP Keep Alive settings. remainingData is the maximum amount of data +# in kilobytes that will be cleaned off the underlying socket so that it +# can be reused (default value is 512K), queuedConnections is the maximum +# number of Keep Alive connections to be on the queue for clean up (default +# value is 10). +# http.KeepAlive.remainingData=512 +# http.KeepAlive.queuedConnections=10 + +# Authentication Scheme restrictions for HTTP and HTTPS. +# +# In some environments certain authentication schemes may be undesirable +# when proxying HTTP or HTTPS. For example, "Basic" results in effectively the +# cleartext transmission of the user's password over the physical network. +# This section describes the mechanism for disabling authentication schemes +# based on the scheme name. Disabled schemes will be treated as if they are not +# supported by the implementation. +# +# The 'jdk.http.auth.tunneling.disabledSchemes' property lists the authentication +# schemes that will be disabled when tunneling HTTPS over a proxy, HTTP CONNECT. +# The 'jdk.http.auth.proxying.disabledSchemes' property lists the authentication +# schemes that will be disabled when proxying HTTP. +# +# In both cases the property is a comma-separated list of, case-insensitive, +# authentication scheme names, as defined by their relevant RFCs. An +# implementation may, but is not required to, support common schemes whose names +# include: 'Basic', 'Digest', 'NTLM', 'Kerberos', 'Negotiate'. A scheme that +# is not known, or not supported, by the implementation is ignored. +# +# Note: This property is currently used by the JDK Reference implementation. It +# is not guaranteed to be examined and used by other implementations. +# +#jdk.http.auth.proxying.disabledSchemes= +jdk.http.auth.tunneling.disabledSchemes=Basic + +# +# Transparent NTLM HTTP authentication mode on Windows. Transparent authentication +# can be used for the NTLM scheme, where the security credentials based on the +# currently logged in user's name and password can be obtained directly from the +# operating system, without prompting the user. This property has three possible +# values which regulate the behavior as shown below. Other unrecognized values +# are handled the same as 'disabled'. Note, that NTLM is not considered to be a +# strongly secure authentication scheme and care should be taken before enabling +# this mechanism. +# +# Transparent authentication never used. +#jdk.http.ntlm.transparentAuth=disabled +# +# Enabled for all hosts. +#jdk.http.ntlm.transparentAuth=allHosts +# +# Enabled for hosts that are trusted in Windows Internet settings +#jdk.http.ntlm.transparentAuth=trustedHosts +# +jdk.http.ntlm.transparentAuth=disabled diff --git a/java-11-openjdk/psfont.properties.ja b/java-11-openjdk/psfont.properties.ja new file mode 100644 index 0000000..d17cf40 --- /dev/null +++ b/java-11-openjdk/psfont.properties.ja @@ -0,0 +1,119 @@ +# +# +# Copyright (c) 1996, 2000, Oracle and/or its affiliates. All rights reserved. +# DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER. +# +# This code is free software; you can redistribute it and/or modify it +# under the terms of the GNU General Public License version 2 only, as +# published by the Free Software Foundation. Oracle designates this +# particular file as subject to the "Classpath" exception as provided +# by Oracle in the LICENSE file that accompanied this code. +# +# This code is distributed in the hope that it will be useful, but WITHOUT +# ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or +# FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License +# version 2 for more details (a copy is included in the LICENSE file that +# accompanied this code). +# +# You should have received a copy of the GNU General Public License version +# 2 along with this work; if not, write to the Free Software Foundation, +# Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. +# +# Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA +# or visit www.oracle.com if you need additional information or have any +# questions. +# + +# +# Japanese PostScript printer property file +# +font.num=16 +# +serif=serif +timesroman=serif +sansserif=sansserif +helvetica=sansserif +monospaced=monospaced +courier=monospaced +dialog=sansserif +dialoginput=monospaced +# +serif.latin1.plain=Times-Roman +serif.latin1.italic=Times-Italic +serif.latin1.bolditalic=Times-BoldItalic +serif.latin1.bold=Times-Bold +# +sansserif.latin1.plain=Helvetica +sansserif.latin1.italic=Helvetica-Oblique +sansserif.latin1.bolditalic=Helvetica-BoldOblique +sansserif.latin1.bold=Helvetica-Bold +# +monospaced.latin1.plain=Courier +monospaced.latin1.italic=Courier-Oblique +monospaced.latin1.bolditalic=Courier-BoldOblique +monospaced.latin1.bold=Courier-Bold +# +serif.x11jis0208.plain=Ryumin-Light-H +serif.x11jis0208.italic=Ryumin-Light-H +serif.x11jis0208.bolditalic=Ryumin-Light-H +serif.x11jis0208.bold=Ryumin-Light-H +# +sansserif.x11jis0208.plain=GothicBBB-Medium-H +sansserif.x11jis0208.italic=GothicBBB-Medium-H +sansserif.x11jis0208.bolditalic=GothicBBB-Medium-H +sansserif.x11jis0208.bold=GothicBBB-Medium-H +# +monospaced.x11jis0208.plain=GothicBBB-Medium-H +monospaced.x11jis0208.italic=GothicBBB-Medium-H +monospaced.x11jis0208.bolditalic=GothicBBB-Medium-H +monospaced.x11jis0208.bold=GothicBBB-Medium-H +# +serif.x11jis0201.plain=Ryumin-Light.Hankaku +serif.x11jis0201.italic=Ryumin-Light.Hankaku +serif.x11jis0201.bolditalic=Ryumin-Light.Hankaku +serif.x11jis0201.bold=Ryumin-Light.Hankaku +# +sansserif.x11jis0201.plain=GothicBBB-Medium.Hankaku +sansserif.x11jis0201.italic=GothicBBB-Medium.Hankaku +sansserif.x11jis0201.bolditalic=GothicBBB-Medium.Hankaku +sansserif.x11jis0201.bold=GothicBBB-Medium.Hankaku +# +monospaced.x11jis0201.plain=GothicBBB-Medium.Hankaku +monospaced.x11jis0201.italic=GothicBBB-Medium.Hankaku +monospaced.x11jis0201.bolditalic=GothicBBB-Medium.Hankaku +monospaced.x11jis0201.bold=GothicBBB-Medium.Hankaku +# +Helvetica=0 +Helvetica-Bold=1 +Helvetica-Oblique=2 +Helvetica-BoldOblique=3 +Times-Roman=4 +Times-Bold=5 +Times-Italic=6 +Times-BoldItalic=7 +Courier=8 +Courier-Bold=9 +Courier-Oblique=10 +Courier-BoldOblique=11 +GothicBBB-Medium-H=12 +Ryumin-Light-H=13 +GothicBBB-Medium.Hankaku=14 +Ryumin-Light.Hankaku=15 +# +font.0=Helvetica ISOF +font.1=Helvetica-Bold ISOF +font.2=Helvetica-Oblique ISOF +font.3=Helvetica-BoldOblique ISOF +font.4=Times-Roman ISOF +font.5=Times-Bold ISOF +font.6=Times-Italic ISOF +font.7=Times-BoldItalic ISOF +font.8=Courier ISOF +font.9=Courier-Bold ISOF +font.10=Courier-Oblique ISOF +font.11=Courier-BoldOblique ISOF +font.12=GothicBBB-Medium-H findfont +font.13=Ryumin-Light-H findfont +font.14=GothicBBB-Medium.Hankaku findfont +font.15=Ryumin-Light.Hankaku findfont +# diff --git a/java-11-openjdk/psfontj2d.properties b/java-11-openjdk/psfontj2d.properties new file mode 100644 index 0000000..5eb2c4b --- /dev/null +++ b/java-11-openjdk/psfontj2d.properties @@ -0,0 +1,323 @@ +# +# +# Copyright (c) 1999, Oracle and/or its affiliates. All rights reserved. +# DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER. +# +# This code is free software; you can redistribute it and/or modify it +# under the terms of the GNU General Public License version 2 only, as +# published by the Free Software Foundation. Oracle designates this +# particular file as subject to the "Classpath" exception as provided +# by Oracle in the LICENSE file that accompanied this code. +# +# This code is distributed in the hope that it will be useful, but WITHOUT +# ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or +# FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License +# version 2 for more details (a copy is included in the LICENSE file that +# accompanied this code). +# +# You should have received a copy of the GNU General Public License version +# 2 along with this work; if not, write to the Free Software Foundation, +# Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. +# +# Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA +# or visit www.oracle.com if you need additional information or have any +# questions. + +# +# PostScript printer property file for Java 2D printing. +# +# WARNING: This is an internal implementation file, not a public file. +# Any customisation or reliance on the existence of this file and its +# contents or syntax is discouraged and unsupported. +# It may be incompatibly changed or removed without any notice. +# +# +font.num=35 +# +# Legacy logical font family names and logical font aliases should all +# map to the primary logical font names. +# +serif=serif +times=serif +timesroman=serif +sansserif=sansserif +helvetica=sansserif +dialog=sansserif +dialoginput=monospaced +monospaced=monospaced +courier=monospaced +# +# Next, physical fonts which can be safely mapped to standard postscript fonts +# These keys generally map to a value which is the same as the key, so +# the key/value is just a way to say the font has a mapping. +# Sometimes however we map more than one screen font to the same PS font. +# +avantgarde=avantgarde_book +avantgarde_book=avantgarde_book +avantgarde_demi=avantgarde_demi +avantgarde_book_oblique=avantgarde_book_oblique +avantgarde_demi_oblique=avantgarde_demi_oblique +# +itcavantgarde=avantgarde_book +itcavantgarde=avantgarde_book +itcavantgarde_demi=avantgarde_demi +itcavantgarde_oblique=avantgarde_book_oblique +itcavantgarde_demi_oblique=avantgarde_demi_oblique +# +bookman=bookman_light +bookman_light=bookman_light +bookman_demi=bookman_demi +bookman_light_italic=bookman_light_italic +bookman_demi_italic=bookman_demi_italic +# +# Exclude "helvetica" on its own as that's a legacy name for a logical font +helvetica_bold=helvetica_bold +helvetica_oblique=helvetica_oblique +helvetica_bold_oblique=helvetica_bold_oblique +# +itcbookman_light=bookman_light +itcbookman_demi=bookman_demi +itcbookman_light_italic=bookman_light_italic +itcbookman_demi_italic=bookman_demi_italic +# +# Exclude "courier" on its own as that's a legacy name for a logical font +courier_bold=courier_bold +courier_oblique=courier_oblique +courier_bold_oblique=courier_bold_oblique +# +courier_new=courier +courier_new_bold=courier_bold +# +monotype_century_schoolbook=newcenturyschoolbook +monotype_century_schoolbook_bold=newcenturyschoolbook_bold +monotype_century_schoolbook_italic=newcenturyschoolbook_italic +monotype_century_schoolbook_bold_italic=newcenturyschoolbook_bold_italic +# +newcenturyschoolbook=newcenturyschoolbook +newcenturyschoolbook_bold=newcenturyschoolbook_bold +newcenturyschoolbook_italic=newcenturyschoolbook_italic +newcenturyschoolbook_bold_italic=newcenturyschoolbook_bold_italic +# +palatino=palatino +palatino_bold=palatino_bold +palatino_italic=palatino_italic +palatino_bold_italic=palatino_bold_italic +# +# Exclude "times" on its own as that's a legacy name for a logical font +times_bold=times_roman_bold +times_italic=times_roman_italic +times_bold_italic=times_roman_bold_italic +# +times_roman=times_roman +times_roman_bold=times_roman_bold +times_roman_italic=times_roman_italic +times_roman_bold_italic=times_roman_bold_italic +# +times_new_roman=times_roman +times_new_roman_bold=times_roman_bold +times_new_roman_italic=times_roman_italic +times_new_roman_bold_italic=times_roman_bold_italic +# +zapfchancery_italic=zapfchancery_italic +itczapfchancery_italic=zapfchancery_italic +# +# Next the mapping of the font name + charset + style to Postscript font name +# for the logical fonts. +# +serif.latin1.plain=Times-Roman +serif.latin1.bold=Times-Bold +serif.latin1.italic=Times-Italic +serif.latin1.bolditalic=Times-BoldItalic +serif.symbol.plain=Symbol +serif.dingbats.plain=ZapfDingbats +serif.symbol.bold=Symbol +serif.dingbats.bold=ZapfDingbats +serif.symbol.italic=Symbol +serif.dingbats.italic=ZapfDingbats +serif.symbol.bolditalic=Symbol +serif.dingbats.bolditalic=ZapfDingbats +# +sansserif.latin1.plain=Helvetica +sansserif.latin1.bold=Helvetica-Bold +sansserif.latin1.italic=Helvetica-Oblique +sansserif.latin1.bolditalic=Helvetica-BoldOblique +sansserif.symbol.plain=Symbol +sansserif.dingbats.plain=ZapfDingbats +sansserif.symbol.bold=Symbol +sansserif.dingbats.bold=ZapfDingbats +sansserif.symbol.italic=Symbol +sansserif.dingbats.italic=ZapfDingbats +sansserif.symbol.bolditalic=Symbol +sansserif.dingbats.bolditalic=ZapfDingbats +# +monospaced.latin1.plain=Courier +monospaced.latin1.bold=Courier-Bold +monospaced.latin1.italic=Courier-Oblique +monospaced.latin1.bolditalic=Courier-BoldOblique +monospaced.symbol.plain=Symbol +monospaced.dingbats.plain=ZapfDingbats +monospaced.symbol.bold=Symbol +monospaced.dingbats.bold=ZapfDingbats +monospaced.symbol.italic=Symbol +monospaced.dingbats.italic=ZapfDingbats +monospaced.symbol.bolditalic=Symbol +monospaced.dingbats.bolditalic=ZapfDingbats +# +# Next the mapping of the font name + charset + style to Postscript font name +# for the physical fonts. Since these always report style as plain, the +# style key is always plain. So we map using the face name to the correct +# style for the postscript font. This is possible since the face names can +# be replied upon to be different for each style. +# However an application may try to create a Font applying a style to an +# physical name. We want to map to the correct Postscript font there too +# if possible but we do not map cases where the application tries to +# augment a style (eg ask for a bold version of a bold font) +# Defer to the 2D package to attempt create an artificially styled version +# +avantgarde_book.latin1.plain=AvantGarde-Book +avantgarde_demi.latin1.plain=AvantGarde-Demi +avantgarde_book_oblique.latin1.plain=AvantGarde-BookOblique +avantgarde_demi_oblique.latin1.plain=AvantGarde-DemiOblique +# +avantgarde_book.latin1.bold=AvantGarde-Demi +avantgarde_book.latin1.italic=AvantGarde-BookOblique +avantgarde_book.latin1.bolditalic=AvantGarde-DemiOblique +avantgarde_demi.latin1.italic=AvantGarde-DemiOblique +avantgarde_book_oblique.latin1.bold=AvantGarde-DemiOblique +# +bookman_light.latin1.plain=Bookman-Light +bookman_demi.latin1.plain=Bookman-Demi +bookman_light_italic.latin1.plain=Bookman-LightItalic +bookman_demi_italic.latin1.plain=Bookman-DemiItalic +# +bookman_light.latin1.bold=Bookman-Demi +bookman_light.latin1.italic=Bookman-LightItalic +bookman_light.latin1.bolditalic=Bookman-DemiItalic +bookman_light_bold.latin1.italic=Bookman-DemiItalic +bookman_light_italic.latin1.bold=Bookman-DemiItalic +# +courier.latin1.plain=Courier +courier_bold.latin1.plain=Courier-Bold +courier_oblique.latin1.plain=Courier-Oblique +courier_bold_oblique.latin1.plain=Courier-BoldOblique +courier.latin1.bold=Courier-Bold +courier.latin1.italic=Courier-Oblique +courier.latin1.bolditalic=Courier-BoldOblique +courier_bold.latin1.italic=Courier-BoldOblique +courier_italic.latin1.bold=Courier-BoldOblique +# +helvetica_bold.latin1.plain=Helvetica-Bold +helvetica_oblique.latin1.plain=Helvetica-Oblique +helvetica_bold_oblique.latin1.plain=Helvetica-BoldOblique +helvetica.latin1.bold=Helvetica-Bold +helvetica.latin1.italic=Helvetica-Oblique +helvetica.latin1.bolditalic=Helvetica-BoldOblique +helvetica_bold.latin1.italic=Helvetica-BoldOblique +helvetica_italic.latin1.bold=Helvetica-BoldOblique +# +newcenturyschoolbook.latin1.plain=NewCenturySchlbk-Roman +newcenturyschoolbook_bold.latin1.plain=NewCenturySchlbk-Bold +newcenturyschoolbook_italic.latin1.plain=NewCenturySchlbk-Italic +newcenturyschoolbook_bold_italic.latin1.plain=NewCenturySchlbk-BoldItalic +newcenturyschoolbook.latin1.bold=NewCenturySchlbk-Bold +newcenturyschoolbook.latin1.italic=NewCenturySchlbk-Italic +newcenturyschoolbook.latin1.bolditalic=NewCenturySchlbk-BoldItalic +newcenturyschoolbook_bold.latin1.italic=NewCenturySchlbk-BoldItalic +newcenturyschoolbook_italic.latin1.bold=NewCenturySchlbk-BoldItalic +# +palatino.latin1.plain=Palatino-Roman +palatino_bold.latin1.plain=Palatino-Bold +palatino_italic.latin1.plain=Palatino-Italic +palatino_bold_italic.latin1.plain=Palatino-BoldItalic +palatino.latin1.bold=Palatino-Bold +palatino.latin1.italic=Palatino-Italic +palatino.latin1.bolditalic=Palatino-BoldItalic +palatino_bold.latin1.italic=Palatino-BoldItalic +palatino_italic.latin1.bold=Palatino-BoldItalic +# +times_roman.latin1.plain=Times-Roman +times_roman_bold.latin1.plain=Times-Bold +times_roman_italic.latin1.plain=Times-Italic +times_roman_bold_italic.latin1.plain=Times-BoldItalic +times_roman.latin1.bold=Times-Bold +times_roman.latin1.italic=Times-Italic +times_roman.latin1.bolditalic=Times-BoldItalic +times_roman_bold.latin1.italic=Times-BoldItalic +times_roman_italic.latin1.bold=Times-BoldItalic +# +zapfchancery_italic.latin1.plain=ZapfChancery-MediumItalic +# +# Finally the mappings of PS font names to indexes. +# +AvantGarde-Book=0 +AvantGarde-BookOblique=1 +AvantGarde-Demi=2 +AvantGarde-DemiOblique=3 +Bookman-Demi=4 +Bookman-DemiItalic=5 +Bookman-Light=6 +Bookman-LightItalic=7 +Courier=8 +Courier-Bold=9 +Courier-BoldOblique=10 +Courier-Oblique=11 +Helvetica=12 +Helvetica-Bold=13 +Helvetica-BoldOblique=14 +Helvetica-Narrow=15 +Helvetica-Narrow-Bold=16 +Helvetica-Narrow-BoldOblique=17 +Helvetica-Narrow-Oblique=18 +Helvetica-Oblique=19 +NewCenturySchlbk-Bold=20 +NewCenturySchlbk-BoldItalic=21 +NewCenturySchlbk-Italic=22 +NewCenturySchlbk-Roman=23 +Palatino-Bold=24 +Palatino-BoldItalic=25 +Palatino-Italic=26 +Palatino-Roman=27 +Symbol=28 +Times-Bold=29 +Times-BoldItalic=30 +Times-Italic=31 +Times-Roman=32 +ZapfDingbats=33 +ZapfChancery-MediumItalic=34 +# +font.0=AvantGarde-Book ISOF +font.1=AvantGarde-BookOblique ISOF +font.2=AvantGarde-Demi ISOF +font.3=AvantGarde-DemiOblique ISOF +font.4=Bookman-Demi ISOF +font.5=Bookman-DemiItalic ISOF +font.6=Bookman-Light ISOF +font.7=Bookman-LightItalic ISOF +font.8=Courier ISOF +font.9=Courier-Bold ISOF +font.10=Courier-BoldOblique ISOF +font.11=Courier-Oblique ISOF +font.12=Helvetica ISOF +font.13=Helvetica-Bold ISOF +font.14=Helvetica-BoldOblique ISOF +font.15=Helvetica-Narrow ISOF +font.16=Helvetica-Narrow-Bold ISOF +font.17=Helvetica-Narrow-BoldOblique ISOF +font.18=Helvetica-Narrow-Oblique ISOF +font.19=Helvetica-Oblique ISOF +font.20=NewCenturySchlbk-Bold ISOF +font.21=NewCenturySchlbk-BoldItalic ISOF +font.22=NewCenturySchlbk-Italic ISOF +font.23=NewCenturySchlbk-Roman ISOF +font.24=Palatino-Bold ISOF +font.25=Palatino-BoldItalic ISOF +font.26=Palatino-Italic ISOF +font.27=Palatino-Roman ISOF +font.28=Symbol findfont +font.29=Times-Bold ISOF +font.30=Times-BoldItalic ISOF +font.31=Times-Italic ISOF +font.32=Times-Roman ISOF +font.33=ZapfDingbats findfont +font.34=ZapfChancery-MediumItalic ISOF +# diff --git a/java-11-openjdk/security/blacklisted.certs b/java-11-openjdk/security/blacklisted.certs new file mode 100644 index 0000000..beded9e --- /dev/null +++ b/java-11-openjdk/security/blacklisted.certs @@ -0,0 +1,39 @@ +Algorithm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diff --git a/java-11-openjdk/security/default.policy b/java-11-openjdk/security/default.policy new file mode 100644 index 0000000..694e403 --- /dev/null +++ b/java-11-openjdk/security/default.policy @@ -0,0 +1,217 @@ +// +// Permissions required by modules stored in a run-time image and loaded +// by the platform class loader. +// +// NOTE that this file is not intended to be modified. If additional +// permissions need to be granted to the modules in this file, it is +// recommended that they be configured in a separate policy file or +// ${java.home}/conf/security/java.policy. +// + + +grant codeBase "jrt:/java.compiler" { + permission java.security.AllPermission; +}; + + +grant codeBase "jrt:/java.net.http" { + permission java.lang.RuntimePermission "accessClassInPackage.sun.net"; + permission java.lang.RuntimePermission "accessClassInPackage.sun.net.util"; + permission java.lang.RuntimePermission "accessClassInPackage.sun.net.www"; + permission java.lang.RuntimePermission "accessClassInPackage.jdk.internal.misc"; + permission java.net.SocketPermission "*","connect,resolve"; + permission java.net.URLPermission "http:*","*:*"; + permission java.net.URLPermission "https:*","*:*"; + permission java.net.URLPermission "ws:*","*:*"; + permission java.net.URLPermission "wss:*","*:*"; + permission java.net.URLPermission "socket:*","CONNECT"; // proxy + // For request/response body processors, fromFile, asFile + permission java.io.FilePermission "<>","read,write,delete"; + permission java.util.PropertyPermission "*","read"; + permission java.net.NetPermission "getProxySelector"; +}; + +grant codeBase "jrt:/java.scripting" { + permission java.security.AllPermission; +}; + +grant codeBase "jrt:/java.security.jgss" { + permission java.security.AllPermission; +}; + +grant codeBase "jrt:/java.smartcardio" { + permission javax.smartcardio.CardPermission "*", "*"; + permission java.lang.RuntimePermission "loadLibrary.j2pcsc"; + permission java.lang.RuntimePermission + "accessClassInPackage.sun.security.jca"; + permission java.lang.RuntimePermission + "accessClassInPackage.sun.security.util"; + permission java.util.PropertyPermission + "javax.smartcardio.TerminalFactory.DefaultType", "read"; + permission java.util.PropertyPermission "os.name", "read"; + permission java.util.PropertyPermission "os.arch", "read"; + permission java.util.PropertyPermission "sun.arch.data.model", "read"; + permission java.util.PropertyPermission + "sun.security.smartcardio.library", "read"; + permission java.util.PropertyPermission + "sun.security.smartcardio.t0GetResponse", "read"; + permission java.util.PropertyPermission + "sun.security.smartcardio.t1GetResponse", "read"; + permission java.util.PropertyPermission + "sun.security.smartcardio.t1StripLe", "read"; + // needed for looking up native PC/SC library + permission java.io.FilePermission "<>","read"; + permission java.security.SecurityPermission "putProviderProperty.SunPCSC"; + permission java.security.SecurityPermission + "clearProviderProperties.SunPCSC"; + permission java.security.SecurityPermission + "removeProviderProperty.SunPCSC"; +}; + +grant codeBase "jrt:/java.sql" { + permission java.security.AllPermission; +}; + +grant codeBase "jrt:/java.sql.rowset" { + permission java.security.AllPermission; +}; + + +grant codeBase "jrt:/java.xml.crypto" { + permission java.lang.RuntimePermission + "accessClassInPackage.sun.security.util"; + permission java.util.PropertyPermission "*", "read"; + permission java.security.SecurityPermission "putProviderProperty.XMLDSig"; + permission java.security.SecurityPermission + "clearProviderProperties.XMLDSig"; + permission java.security.SecurityPermission + "removeProviderProperty.XMLDSig"; + permission java.security.SecurityPermission + "com.sun.org.apache.xml.internal.security.register"; + permission java.security.SecurityPermission + "getProperty.jdk.xml.dsig.secureValidationPolicy"; + permission java.lang.RuntimePermission + "accessClassInPackage.com.sun.org.apache.xml.internal.*"; + permission java.lang.RuntimePermission + "accessClassInPackage.com.sun.org.apache.xpath.internal"; + permission java.lang.RuntimePermission + "accessClassInPackage.com.sun.org.apache.xpath.internal.*"; +}; + + +grant codeBase "jrt:/jdk.accessibility" { + permission java.lang.RuntimePermission "accessClassInPackage.sun.awt"; +}; + +grant codeBase "jrt:/jdk.charsets" { + permission java.util.PropertyPermission "os.name", "read"; + permission java.util.PropertyPermission "sun.nio.cs.map", "read"; + permission java.lang.RuntimePermission "charsetProvider"; + permission java.lang.RuntimePermission + "accessClassInPackage.jdk.internal.misc"; + permission java.lang.RuntimePermission "accessClassInPackage.sun.nio.cs"; +}; + +grant codeBase "jrt:/jdk.crypto.ec" { + permission java.lang.RuntimePermission + "accessClassInPackage.sun.security.*"; + permission java.lang.RuntimePermission "loadLibrary.sunec"; + permission java.security.SecurityPermission "putProviderProperty.SunEC"; + permission java.security.SecurityPermission "clearProviderProperties.SunEC"; + permission java.security.SecurityPermission "removeProviderProperty.SunEC"; +}; + +grant codeBase "jrt:/jdk.crypto.cryptoki" { + permission java.lang.RuntimePermission + "accessClassInPackage.sun.security.*"; + permission java.lang.RuntimePermission "accessClassInPackage.sun.nio.ch"; + permission java.lang.RuntimePermission "loadLibrary.j2pkcs11"; + permission java.util.PropertyPermission "sun.security.pkcs11.allowSingleThreadedModules", "read"; + permission java.util.PropertyPermission "sun.security.pkcs11.disableKeyExtraction", "read"; + permission java.util.PropertyPermission "os.name", "read"; + permission java.util.PropertyPermission "os.arch", "read"; + permission java.util.PropertyPermission "jdk.crypto.KeyAgreement.legacyKDF", "read"; + permission java.security.SecurityPermission "putProviderProperty.*"; + permission java.security.SecurityPermission "clearProviderProperties.*"; + permission java.security.SecurityPermission "removeProviderProperty.*"; + permission java.security.SecurityPermission + "getProperty.auth.login.defaultCallbackHandler"; + permission java.security.SecurityPermission "authProvider.*"; + // Needed for reading PKCS11 config file and NSS library check + permission java.io.FilePermission "<>", "read"; +}; + +grant codeBase "jrt:/jdk.desktop" { + permission java.lang.RuntimePermission "accessClassInPackage.com.sun.awt"; +}; + +grant codeBase "jrt:/jdk.dynalink" { + permission java.security.AllPermission; +}; + +grant codeBase "jrt:/jdk.httpserver" { + permission java.security.AllPermission; +}; + +grant codeBase "jrt:/jdk.internal.le" { + permission java.security.AllPermission; +}; + +grant codeBase "jrt:/jdk.internal.vm.compiler" { + permission java.security.AllPermission; +}; + +grant codeBase "jrt:/jdk.internal.vm.compiler.management" { + permission java.lang.RuntimePermission "accessClassInPackage.jdk.internal.vm.compiler.collections"; + permission java.lang.RuntimePermission "accessClassInPackage.jdk.vm.ci.runtime"; + permission java.lang.RuntimePermission "accessClassInPackage.org.graalvm.compiler.core.common"; + permission java.lang.RuntimePermission "accessClassInPackage.org.graalvm.compiler.debug"; + permission java.lang.RuntimePermission "accessClassInPackage.org.graalvm.compiler.hotspot"; + permission java.lang.RuntimePermission "accessClassInPackage.org.graalvm.compiler.options"; + permission java.lang.RuntimePermission "accessClassInPackage.org.graalvm.compiler.phases.common.jmx"; + permission java.lang.RuntimePermission "accessClassInPackage.org.graalvm.compiler.serviceprovider"; +}; + +grant codeBase "jrt:/jdk.jsobject" { + permission java.security.AllPermission; +}; + +grant codeBase "jrt:/jdk.localedata" { + permission java.lang.RuntimePermission "accessClassInPackage.sun.text.*"; + permission java.lang.RuntimePermission "accessClassInPackage.sun.util.*"; +}; + +grant codeBase "jrt:/jdk.naming.dns" { + permission java.security.AllPermission; +}; + +grant codeBase "jrt:/jdk.scripting.nashorn" { + permission java.security.AllPermission; +}; + +grant codeBase "jrt:/jdk.scripting.nashorn.shell" { + permission java.security.AllPermission; +}; + +grant codeBase "jrt:/jdk.security.auth" { + permission java.security.AllPermission; +}; + +grant codeBase "jrt:/jdk.security.jgss" { + permission java.security.AllPermission; +}; + +grant codeBase "jrt:/jdk.zipfs" { + permission java.io.FilePermission "<>", "read,write,delete"; + permission java.lang.RuntimePermission "fileSystemProvider"; + permission java.lang.RuntimePermission "accessUserInformation"; + permission java.util.PropertyPermission "os.name", "read"; +}; + +// permissions needed by applications using java.desktop module +grant { + permission java.lang.RuntimePermission "accessClassInPackage.com.sun.beans"; + permission java.lang.RuntimePermission "accessClassInPackage.com.sun.beans.*"; + permission java.lang.RuntimePermission "accessClassInPackage.com.sun.java.swing.plaf.*"; + permission java.lang.RuntimePermission "accessClassInPackage.com.apple.*"; +}; diff --git a/java-11-openjdk/security/java.policy b/java-11-openjdk/security/java.policy new file mode 100644 index 0000000..1554541 --- /dev/null +++ b/java-11-openjdk/security/java.policy @@ -0,0 +1,44 @@ +// +// This system policy file grants a set of default permissions to all domains +// and can be configured to grant additional permissions to modules and other +// code sources. The code source URL scheme for modules linked into a +// run-time image is "jrt". +// +// For example, to grant permission to read the "foo" property to the module +// "com.greetings", the grant entry is: +// +// grant codeBase "jrt:/com.greetings" { +// permission java.util.PropertyPermission "foo", "read"; +// }; +// + +// default permissions granted to all domains +grant { + // allows anyone to listen on dynamic ports + permission java.net.SocketPermission "localhost:0", "listen"; + + // "standard" properies that can be read by anyone + permission java.util.PropertyPermission "java.version", "read"; + permission java.util.PropertyPermission "java.vendor", "read"; + permission java.util.PropertyPermission "java.vendor.url", "read"; + permission java.util.PropertyPermission "java.class.version", "read"; + permission java.util.PropertyPermission "os.name", "read"; + permission java.util.PropertyPermission "os.version", "read"; + permission java.util.PropertyPermission "os.arch", "read"; + permission java.util.PropertyPermission "file.separator", "read"; + permission java.util.PropertyPermission "path.separator", "read"; + permission java.util.PropertyPermission "line.separator", "read"; + permission java.util.PropertyPermission + "java.specification.version", "read"; + permission java.util.PropertyPermission "java.specification.vendor", "read"; + permission java.util.PropertyPermission "java.specification.name", "read"; + permission java.util.PropertyPermission + "java.vm.specification.version", "read"; + permission java.util.PropertyPermission + "java.vm.specification.vendor", "read"; + permission java.util.PropertyPermission + "java.vm.specification.name", "read"; + permission java.util.PropertyPermission "java.vm.version", "read"; + permission java.util.PropertyPermission "java.vm.vendor", "read"; + permission java.util.PropertyPermission "java.vm.name", "read"; +}; diff --git a/java-11-openjdk/security/java.security b/java-11-openjdk/security/java.security new file mode 100644 index 0000000..0c0a901 --- /dev/null +++ b/java-11-openjdk/security/java.security @@ -0,0 +1,1258 @@ +# +# This is the "master security properties file". +# +# An alternate java.security properties file may be specified +# from the command line via the system property +# +# -Djava.security.properties= +# +# This properties file appends to the master security properties file. +# If both properties files specify values for the same key, the value +# from the command-line properties file is selected, as it is the last +# one loaded. +# +# Also, if you specify +# +# -Djava.security.properties== (2 equals), +# +# then that properties file completely overrides the master security +# properties file. +# +# To disable the ability to specify an additional properties file from +# the command line, set the key security.overridePropertiesFile +# to false in the master security properties file. It is set to true +# by default. + +# In this file, various security properties are set for use by +# java.security classes. This is where users can statically register +# Cryptography Package Providers ("providers" for short). The term +# "provider" refers to a package or set of packages that supply a +# concrete implementation of a subset of the cryptography aspects of +# the Java Security API. A provider may, for example, implement one or +# more digital signature algorithms or message digest algorithms. +# +# Each provider must implement a subclass of the Provider class. +# To register a provider in this master security properties file, +# specify the provider and priority in the format +# +# security.provider.= +# +# This declares a provider, and specifies its preference +# order n. The preference order is the order in which providers are +# searched for requested algorithms (when no specific provider is +# requested). The order is 1-based; 1 is the most preferred, followed +# by 2, and so on. +# +# must specify the name of the Provider as passed to its super +# class java.security.Provider constructor. This is for providers loaded +# through the ServiceLoader mechanism. +# +# must specify the subclass of the Provider class whose +# constructor sets the values of various properties that are required +# for the Java Security API to look up the algorithms or other +# facilities implemented by the provider. This is for providers loaded +# through classpath. +# +# Note: Providers can be dynamically registered instead by calls to +# either the addProvider or insertProviderAt method in the Security +# class. + +# +# List of providers and their preference orders (see above): +# +security.provider.1=SUN +security.provider.2=SunRsaSign +security.provider.3=SunEC +security.provider.4=SunJSSE +security.provider.5=SunJCE +security.provider.6=SunJGSS +security.provider.7=SunSASL +security.provider.8=XMLDSig +security.provider.9=SunPCSC +security.provider.10=JdkLDAP +security.provider.11=JdkSASL +security.provider.12=SunPKCS11 + +# +# A list of preferred providers for specific algorithms. These providers will +# be searched for matching algorithms before the list of registered providers. +# Entries containing errors (parsing, etc) will be ignored. Use the +# -Djava.security.debug=jca property to debug these errors. +# +# The property is a comma-separated list of serviceType.algorithm:provider +# entries. The serviceType (example: "MessageDigest") is optional, and if +# not specified, the algorithm applies to all service types that support it. +# The algorithm is the standard algorithm name or transformation. +# Transformations can be specified in their full standard name +# (ex: AES/CBC/PKCS5Padding), or as partial matches (ex: AES, AES/CBC). +# The provider is the name of the provider. Any provider that does not +# also appear in the registered list will be ignored. +# +# There is a special serviceType for this property only to group a set of +# algorithms together. The type is "Group" and is followed by an algorithm +# keyword. Groups are to simplify and lessen the entries on the property +# line. Current groups are: +# Group.SHA2 = SHA-224, SHA-256, SHA-384, SHA-512, SHA-512/224, SHA-512/256 +# Group.HmacSHA2 = HmacSHA224, HmacSHA256, HmacSHA384, HmacSHA512 +# Group.SHA2RSA = SHA224withRSA, SHA256withRSA, SHA384withRSA, SHA512withRSA +# Group.SHA2DSA = SHA224withDSA, SHA256withDSA, SHA384withDSA, SHA512withDSA +# Group.SHA2ECDSA = SHA224withECDSA, SHA256withECDSA, SHA384withECDSA, \ +# SHA512withECDSA +# Group.SHA3 = SHA3-224, SHA3-256, SHA3-384, SHA3-512 +# Group.HmacSHA3 = HmacSHA3-224, HmacSHA3-256, HmacSHA3-384, HmacSHA3-512 +# +# Example: +# jdk.security.provider.preferred=AES/GCM/NoPadding:SunJCE, \ +# MessageDigest.SHA-256:SUN, Group.HmacSHA2:SunJCE +# +#jdk.security.provider.preferred= + + +# +# Sun Provider SecureRandom seed source. +# +# Select the primary source of seed data for the "NativePRNG", "SHA1PRNG" +# and "DRBG" SecureRandom implementations in the "Sun" provider. +# (Other SecureRandom implementations might also use this property.) +# +# On Unix-like systems (for example, Solaris/Linux/MacOS), the +# "NativePRNG", "SHA1PRNG" and "DRBG" implementations obtains seed data from +# special device files such as file:/dev/random. +# +# On Windows systems, specifying the URLs "file:/dev/random" or +# "file:/dev/urandom" will enable the native Microsoft CryptoAPI seeding +# mechanism for SHA1PRNG and DRBG. +# +# By default, an attempt is made to use the entropy gathering device +# specified by the "securerandom.source" Security property. If an +# exception occurs while accessing the specified URL: +# +# NativePRNG: +# a default value of /dev/random will be used. If neither +# are available, the implementation will be disabled. +# "file" is the only currently supported protocol type. +# +# SHA1PRNG and DRBG: +# the traditional system/thread activity algorithm will be used. +# +# The entropy gathering device can also be specified with the System +# property "java.security.egd". For example: +# +# % java -Djava.security.egd=file:/dev/random MainClass +# +# Specifying this System property will override the +# "securerandom.source" Security property. +# +# In addition, if "file:/dev/random" or "file:/dev/urandom" is +# specified, the "NativePRNG" implementation will be more preferred than +# DRBG and SHA1PRNG in the Sun provider. +# +securerandom.source=file:/dev/random + +# +# A list of known strong SecureRandom implementations. +# +# To help guide applications in selecting a suitable strong +# java.security.SecureRandom implementation, Java distributions should +# indicate a list of known strong implementations using the property. +# +# This is a comma-separated list of algorithm and/or algorithm:provider +# entries. +# +securerandom.strongAlgorithms=NativePRNGBlocking:SUN,DRBG:SUN + +# +# Sun provider DRBG configuration and default instantiation request. +# +# NIST SP 800-90Ar1 lists several DRBG mechanisms. Each can be configured +# with a DRBG algorithm name, and can be instantiated with a security strength, +# prediction resistance support, etc. This property defines the configuration +# and the default instantiation request of "DRBG" SecureRandom implementations +# in the SUN provider. (Other DRBG implementations can also use this property.) +# Applications can request different instantiation parameters like security +# strength, capability, personalization string using one of the +# getInstance(...,SecureRandomParameters,...) methods with a +# DrbgParameters.Instantiation argument, but other settings such as the +# mechanism and DRBG algorithm names are not currently configurable by any API. +# +# Please note that the SUN implementation of DRBG always supports reseeding. +# +# The value of this property is a comma-separated list of all configurable +# aspects. The aspects can appear in any order but the same aspect can only +# appear at most once. Its BNF-style definition is: +# +# Value: +# aspect { "," aspect } +# +# aspect: +# mech_name | algorithm_name | strength | capability | df +# +# // The DRBG mechanism to use. Default "Hash_DRBG" +# mech_name: +# "Hash_DRBG" | "HMAC_DRBG" | "CTR_DRBG" +# +# // The DRBG algorithm name. The "SHA-***" names are for Hash_DRBG and +# // HMAC_DRBG, default "SHA-256". The "AES-***" names are for CTR_DRBG, +# // default "AES-128" when using the limited cryptographic or "AES-256" +# // when using the unlimited. +# algorithm_name: +# "SHA-224" | "SHA-512/224" | "SHA-256" | +# "SHA-512/256" | "SHA-384" | "SHA-512" | +# "AES-128" | "AES-192" | "AES-256" +# +# // Security strength requested. Default "128" +# strength: +# "112" | "128" | "192" | "256" +# +# // Prediction resistance and reseeding request. Default "none" +# // "pr_and_reseed" - Both prediction resistance and reseeding +# // support requested +# // "reseed_only" - Only reseeding support requested +# // "none" - Neither prediction resistance not reseeding +# // support requested +# pr: +# "pr_and_reseed" | "reseed_only" | "none" +# +# // Whether a derivation function should be used. only applicable +# // to CTR_DRBG. Default "use_df" +# df: +# "use_df" | "no_df" +# +# Examples, +# securerandom.drbg.config=Hash_DRBG,SHA-224,112,none +# securerandom.drbg.config=CTR_DRBG,AES-256,192,pr_and_reseed,use_df +# +# The default value is an empty string, which is equivalent to +# securerandom.drbg.config=Hash_DRBG,SHA-256,128,none +# +securerandom.drbg.config= + +# +# Class to instantiate as the javax.security.auth.login.Configuration +# provider. +# +login.configuration.provider=sun.security.provider.ConfigFile + +# +# Default login configuration file +# +#login.config.url.1=file:${user.home}/.java.login.config + +# +# Class to instantiate as the system Policy. This is the name of the class +# that will be used as the Policy object. The system class loader is used to +# locate this class. +# +policy.provider=sun.security.provider.PolicyFile + +# The default is to have a single system-wide policy file, +# and a policy file in the user's home directory. +# +policy.url.1=file:${java.home}/conf/security/java.policy +policy.url.2=file:${user.home}/.java.policy + +# whether or not we expand properties in the policy file +# if this is set to false, properties (${...}) will not be expanded in policy +# files. +# +policy.expandProperties=true + +# whether or not we allow an extra policy to be passed on the command line +# with -Djava.security.policy=somefile. Comment out this line to disable +# this feature. +# +policy.allowSystemProperty=true + +# whether or not we look into the IdentityScope for trusted Identities +# when encountering a 1.1 signed JAR file. If the identity is found +# and is trusted, we grant it AllPermission. Note: the default policy +# provider (sun.security.provider.PolicyFile) does not support this property. +# +policy.ignoreIdentityScope=false + +# +# Default keystore type. +# +keystore.type=pkcs12 + +# +# Controls compatibility mode for JKS and PKCS12 keystore types. +# +# When set to 'true', both JKS and PKCS12 keystore types support loading +# keystore files in either JKS or PKCS12 format. When set to 'false' the +# JKS keystore type supports loading only JKS keystore files and the PKCS12 +# keystore type supports loading only PKCS12 keystore files. +# +keystore.type.compat=true + +# +# List of comma-separated packages that start with or equal this string +# will cause a security exception to be thrown when passed to the +# SecurityManager::checkPackageAccess method unless the corresponding +# RuntimePermission("accessClassInPackage."+package) has been granted. +# +package.access=sun.misc.,\ + sun.reflect.,\ + org.GNOME.Accessibility. + +# +# List of comma-separated packages that start with or equal this string +# will cause a security exception to be thrown when passed to the +# SecurityManager::checkPackageDefinition method unless the corresponding +# RuntimePermission("defineClassInPackage."+package) has been granted. +# +# By default, none of the class loaders supplied with the JDK call +# checkPackageDefinition. +# +package.definition=sun.misc.,\ + sun.reflect. + +# +# Determines whether this properties file can be appended to +# or overridden on the command line via -Djava.security.properties +# +security.overridePropertiesFile=true + +# +# Determines the default key and trust manager factory algorithms for +# the javax.net.ssl package. +# +ssl.KeyManagerFactory.algorithm=SunX509 +ssl.TrustManagerFactory.algorithm=PKIX + +# +# The Java-level namelookup cache policy for successful lookups: +# +# any negative value: caching forever +# any positive value: the number of seconds to cache an address for +# zero: do not cache +# +# default value is forever (FOREVER). For security reasons, this +# caching is made forever when a security manager is set. When a security +# manager is not set, the default behavior in this implementation +# is to cache for 30 seconds. +# +# NOTE: setting this to anything other than the default value can have +# serious security implications. Do not set it unless +# you are sure you are not exposed to DNS spoofing attack. +# +#networkaddress.cache.ttl=-1 + +# The Java-level namelookup cache policy for failed lookups: +# +# any negative value: cache forever +# any positive value: the number of seconds to cache negative lookup results +# zero: do not cache +# +# In some Microsoft Windows networking environments that employ +# the WINS name service in addition to DNS, name service lookups +# that fail may take a noticeably long time to return (approx. 5 seconds). +# For this reason the default caching policy is to maintain these +# results for 10 seconds. +# +networkaddress.cache.negative.ttl=10 + +# +# Properties to configure OCSP for certificate revocation checking +# + +# Enable OCSP +# +# By default, OCSP is not used for certificate revocation checking. +# This property enables the use of OCSP when set to the value "true". +# +# NOTE: SocketPermission is required to connect to an OCSP responder. +# +# Example, +# ocsp.enable=true + +# +# Location of the OCSP responder +# +# By default, the location of the OCSP responder is determined implicitly +# from the certificate being validated. This property explicitly specifies +# the location of the OCSP responder. The property is used when the +# Authority Information Access extension (defined in RFC 5280) is absent +# from the certificate or when it requires overriding. +# +# Example, +# ocsp.responderURL=http://ocsp.example.net:80 + +# +# Subject name of the OCSP responder's certificate +# +# By default, the certificate of the OCSP responder is that of the issuer +# of the certificate being validated. This property identifies the certificate +# of the OCSP responder when the default does not apply. Its value is a string +# distinguished name (defined in RFC 2253) which identifies a certificate in +# the set of certificates supplied during cert path validation. In cases where +# the subject name alone is not sufficient to uniquely identify the certificate +# then both the "ocsp.responderCertIssuerName" and +# "ocsp.responderCertSerialNumber" properties must be used instead. When this +# property is set then those two properties are ignored. +# +# Example, +# ocsp.responderCertSubjectName=CN=OCSP Responder, O=XYZ Corp + +# +# Issuer name of the OCSP responder's certificate +# +# By default, the certificate of the OCSP responder is that of the issuer +# of the certificate being validated. This property identifies the certificate +# of the OCSP responder when the default does not apply. Its value is a string +# distinguished name (defined in RFC 2253) which identifies a certificate in +# the set of certificates supplied during cert path validation. When this +# property is set then the "ocsp.responderCertSerialNumber" property must also +# be set. When the "ocsp.responderCertSubjectName" property is set then this +# property is ignored. +# +# Example, +# ocsp.responderCertIssuerName=CN=Enterprise CA, O=XYZ Corp + +# +# Serial number of the OCSP responder's certificate +# +# By default, the certificate of the OCSP responder is that of the issuer +# of the certificate being validated. This property identifies the certificate +# of the OCSP responder when the default does not apply. Its value is a string +# of hexadecimal digits (colon or space separators may be present) which +# identifies a certificate in the set of certificates supplied during cert path +# validation. When this property is set then the "ocsp.responderCertIssuerName" +# property must also be set. When the "ocsp.responderCertSubjectName" property +# is set then this property is ignored. +# +# Example, +# ocsp.responderCertSerialNumber=2A:FF:00 + +# +# Policy for failed Kerberos KDC lookups: +# +# When a KDC is unavailable (network error, service failure, etc), it is +# put inside a blacklist and accessed less often for future requests. The +# value (case-insensitive) for this policy can be: +# +# tryLast +# KDCs in the blacklist are always tried after those not on the list. +# +# tryLess[:max_retries,timeout] +# KDCs in the blacklist are still tried by their order in the configuration, +# but with smaller max_retries and timeout values. max_retries and timeout +# are optional numerical parameters (default 1 and 5000, which means once +# and 5 seconds). Please notes that if any of the values defined here is +# more than what is defined in krb5.conf, it will be ignored. +# +# Whenever a KDC is detected as available, it is removed from the blacklist. +# The blacklist is reset when krb5.conf is reloaded. You can add +# refreshKrb5Config=true to a JAAS configuration file so that krb5.conf is +# reloaded whenever a JAAS authentication is attempted. +# +# Example, +# krb5.kdc.bad.policy = tryLast +# krb5.kdc.bad.policy = tryLess:2,2000 +# +krb5.kdc.bad.policy = tryLast + +# +# Kerberos cross-realm referrals (RFC 6806) +# +# OpenJDK's Kerberos client supports cross-realm referrals as defined in +# RFC 6806. This allows to setup more dynamic environments in which clients +# do not need to know in advance how to reach the realm of a target principal +# (either a user or service). +# +# When a client issues an AS or a TGS request, the "canonicalize" option +# is set to announce support of this feature. A KDC server may fulfill the +# request or reply referring the client to a different one. If referred, +# the client will issue a new request and the cycle repeats. +# +# In addition to referrals, the "canonicalize" option allows the KDC server +# to change the client name in response to an AS request. For security reasons, +# RFC 6806 (section 11) FAST scheme is enforced. +# +# Disable Kerberos cross-realm referrals. Value may be overwritten with a +# System property (-Dsun.security.krb5.disableReferrals). +sun.security.krb5.disableReferrals=false + +# Maximum number of AS or TGS referrals to avoid infinite loops. Value may +# be overwritten with a System property (-Dsun.security.krb5.maxReferrals). +sun.security.krb5.maxReferrals=5 + +# +# This property contains a list of disabled EC Named Curves that can be included +# in the jdk.[tls|certpath|jar].disabledAlgorithms properties. To include this +# list in any of the disabledAlgorithms properties, add the property name as +# an entry. +jdk.disabled.namedCurves = secp112r1, secp112r2, secp128r1, secp128r2, \ + secp160k1, secp160r1, secp160r2, secp192k1, secp192r1, secp224k1, \ + secp224r1, secp256k1, sect113r1, sect113r2, sect131r1, sect131r2, \ + sect163k1, sect163r1, sect163r2, sect193r1, sect193r2, sect233k1, \ + sect233r1, sect239k1, sect283k1, sect283r1, sect409k1, sect409r1, \ + sect571k1, sect571r1, X9.62 c2tnb191v1, X9.62 c2tnb191v2, \ + X9.62 c2tnb191v3, X9.62 c2tnb239v1, X9.62 c2tnb239v2, X9.62 c2tnb239v3, \ + X9.62 c2tnb359v1, X9.62 c2tnb431r1, X9.62 prime192v2, X9.62 prime192v3, \ + X9.62 prime239v1, X9.62 prime239v2, X9.62 prime239v3, brainpoolP256r1, \ + brainpoolP320r1, brainpoolP384r1, brainpoolP512r1 + +# +# Algorithm restrictions for certification path (CertPath) processing +# +# In some environments, certain algorithms or key lengths may be undesirable +# for certification path building and validation. For example, "MD2" is +# generally no longer considered to be a secure hash algorithm. This section +# describes the mechanism for disabling algorithms based on algorithm name +# and/or key length. This includes algorithms used in certificates, as well +# as revocation information such as CRLs and signed OCSP Responses. +# The syntax of the disabled algorithm string is described as follows: +# DisabledAlgorithms: +# " DisabledAlgorithm { , DisabledAlgorithm } " +# +# DisabledAlgorithm: +# AlgorithmName [Constraint] { '&' Constraint } | IncludeProperty +# +# AlgorithmName: +# (see below) +# +# Constraint: +# KeySizeConstraint | CAConstraint | DenyAfterConstraint | +# UsageConstraint +# +# KeySizeConstraint: +# keySize Operator KeyLength +# +# Operator: +# <= | < | == | != | >= | > +# +# KeyLength: +# Integer value of the algorithm's key length in bits +# +# CAConstraint: +# jdkCA +# +# DenyAfterConstraint: +# denyAfter YYYY-MM-DD +# +# UsageConstraint: +# usage [TLSServer] [TLSClient] [SignedJAR] +# +# IncludeProperty: +# include +# +# The "AlgorithmName" is the standard algorithm name of the disabled +# algorithm. See "Java Cryptography Architecture Standard Algorithm Name +# Documentation" for information about Standard Algorithm Names. Matching +# is performed using a case-insensitive sub-element matching rule. (For +# example, in "SHA1withECDSA" the sub-elements are "SHA1" for hashing and +# "ECDSA" for signatures.) If the assertion "AlgorithmName" is a +# sub-element of the certificate algorithm name, the algorithm will be +# rejected during certification path building and validation. For example, +# the assertion algorithm name "DSA" will disable all certificate algorithms +# that rely on DSA, such as NONEwithDSA, SHA1withDSA. However, the assertion +# will not disable algorithms related to "ECDSA". +# +# The "IncludeProperty" allows a implementation-defined security property that +# can be included in the disabledAlgorithms properties. These properties are +# to help manage common actions easier across multiple disabledAlgorithm +# properties. +# There is one defined security property: jdk.disabled.NamedCurves +# See the property for more specific details. +# +# +# A "Constraint" defines restrictions on the keys and/or certificates for +# a specified AlgorithmName: +# +# KeySizeConstraint: +# keySize Operator KeyLength +# The constraint requires a key of a valid size range if the +# "AlgorithmName" is of a key algorithm. The "KeyLength" indicates +# the key size specified in number of bits. For example, +# "RSA keySize <= 1024" indicates that any RSA key with key size less +# than or equal to 1024 bits should be disabled, and +# "RSA keySize < 1024, RSA keySize > 2048" indicates that any RSA key +# with key size less than 1024 or greater than 2048 should be disabled. +# This constraint is only used on algorithms that have a key size. +# +# CAConstraint: +# jdkCA +# This constraint prohibits the specified algorithm only if the +# algorithm is used in a certificate chain that terminates at a marked +# trust anchor in the lib/security/cacerts keystore. If the jdkCA +# constraint is not set, then all chains using the specified algorithm +# are restricted. jdkCA may only be used once in a DisabledAlgorithm +# expression. +# Example: To apply this constraint to SHA-1 certificates, include +# the following: "SHA1 jdkCA" +# +# DenyAfterConstraint: +# denyAfter YYYY-MM-DD +# This constraint prohibits a certificate with the specified algorithm +# from being used after the date regardless of the certificate's +# validity. JAR files that are signed and timestamped before the +# constraint date with certificates containing the disabled algorithm +# will not be restricted. The date is processed in the UTC timezone. +# This constraint can only be used once in a DisabledAlgorithm +# expression. +# Example: To deny usage of RSA 2048 bit certificates after Feb 3 2020, +# use the following: "RSA keySize == 2048 & denyAfter 2020-02-03" +# +# UsageConstraint: +# usage [TLSServer] [TLSClient] [SignedJAR] +# This constraint prohibits the specified algorithm for +# a specified usage. This should be used when disabling an algorithm +# for all usages is not practical. 'TLSServer' restricts the algorithm +# in TLS server certificate chains when server authentication is +# performed. 'TLSClient' restricts the algorithm in TLS client +# certificate chains when client authentication is performed. +# 'SignedJAR' constrains use of certificates in signed jar files. +# The usage type follows the keyword and more than one usage type can +# be specified with a whitespace delimiter. +# Example: "SHA1 usage TLSServer TLSClient" +# +# When an algorithm must satisfy more than one constraint, it must be +# delimited by an ampersand '&'. For example, to restrict certificates in a +# chain that terminate at a distribution provided trust anchor and contain +# RSA keys that are less than or equal to 1024 bits, add the following +# constraint: "RSA keySize <= 1024 & jdkCA". +# +# All DisabledAlgorithms expressions are processed in the order defined in the +# property. This requires lower keysize constraints to be specified +# before larger keysize constraints of the same algorithm. For example: +# "RSA keySize < 1024 & jdkCA, RSA keySize < 2048". +# +# Note: The algorithm restrictions do not apply to trust anchors or +# self-signed certificates. +# +# Note: This property is currently used by Oracle's PKIX implementation. It +# is not guaranteed to be examined and used by other implementations. +# +# Example: +# jdk.certpath.disabledAlgorithms=MD2, DSA, RSA keySize < 2048 +# +# +jdk.certpath.disabledAlgorithms=MD2, MD5, SHA1 jdkCA & usage TLSServer, \ + RSA keySize < 1024, DSA keySize < 1024, EC keySize < 224, \ + include jdk.disabled.namedCurves + +# +# Legacy algorithms for certification path (CertPath) processing and +# signed JAR files. +# +# In some environments, a certain algorithm or key length may be undesirable +# but is not yet disabled. +# +# Tools such as keytool and jarsigner may emit warnings when these legacy +# algorithms are used. See the man pages for those tools for more information. +# +# The syntax is the same as the "jdk.certpath.disabledAlgorithms" and +# "jdk.jar.disabledAlgorithms" security properties. +# +# Note: This property is currently used by the JDK Reference +# implementation. It is not guaranteed to be examined and used by other +# implementations. + +jdk.security.legacyAlgorithms=SHA1, \ + RSA keySize < 2048, DSA keySize < 2048 + +# +# Algorithm restrictions for signed JAR files +# +# In some environments, certain algorithms or key lengths may be undesirable +# for signed JAR validation. For example, "MD2" is generally no longer +# considered to be a secure hash algorithm. This section describes the +# mechanism for disabling algorithms based on algorithm name and/or key length. +# JARs signed with any of the disabled algorithms or key sizes will be treated +# as unsigned. +# +# The syntax of the disabled algorithm string is described as follows: +# DisabledAlgorithms: +# " DisabledAlgorithm { , DisabledAlgorithm } " +# +# DisabledAlgorithm: +# AlgorithmName [Constraint] { '&' Constraint } +# +# AlgorithmName: +# (see below) +# +# Constraint: +# KeySizeConstraint | DenyAfterConstraint +# +# KeySizeConstraint: +# keySize Operator KeyLength +# +# DenyAfterConstraint: +# denyAfter YYYY-MM-DD +# +# Operator: +# <= | < | == | != | >= | > +# +# KeyLength: +# Integer value of the algorithm's key length in bits +# +# Note: This property is currently used by the JDK Reference +# implementation. It is not guaranteed to be examined and used by other +# implementations. +# +# See "jdk.certpath.disabledAlgorithms" for syntax descriptions. +# +jdk.jar.disabledAlgorithms=MD2, MD5, RSA keySize < 1024, \ + DSA keySize < 1024, include jdk.disabled.namedCurves + +# +# Algorithm restrictions for Secure Socket Layer/Transport Layer Security +# (SSL/TLS/DTLS) processing +# +# In some environments, certain algorithms or key lengths may be undesirable +# when using SSL/TLS/DTLS. This section describes the mechanism for disabling +# algorithms during SSL/TLS/DTLS security parameters negotiation, including +# protocol version negotiation, cipher suites selection, peer authentication +# and key exchange mechanisms. +# +# Disabled algorithms will not be negotiated for SSL/TLS connections, even +# if they are enabled explicitly in an application. +# +# For PKI-based peer authentication and key exchange mechanisms, this list +# of disabled algorithms will also be checked during certification path +# building and validation, including algorithms used in certificates, as +# well as revocation information such as CRLs and signed OCSP Responses. +# This is in addition to the jdk.certpath.disabledAlgorithms property above. +# +# See the specification of "jdk.certpath.disabledAlgorithms" for the +# syntax of the disabled algorithm string. +# +# Note: The algorithm restrictions do not apply to trust anchors or +# self-signed certificates. +# +# Note: This property is currently used by the JDK Reference implementation. +# It is not guaranteed to be examined and used by other implementations. +# +# Example: +# jdk.tls.disabledAlgorithms=MD5, SSLv3, DSA, RSA keySize < 2048 +jdk.tls.disabledAlgorithms=SSLv3, RC4, DES, MD5withRSA, DH keySize < 1024, \ + EC keySize < 224, 3DES_EDE_CBC, anon, NULL, \ + include jdk.disabled.namedCurves + +# +# Legacy algorithms for Secure Socket Layer/Transport Layer Security (SSL/TLS) +# processing in JSSE implementation. +# +# In some environments, a certain algorithm may be undesirable but it +# cannot be disabled because of its use in legacy applications. Legacy +# algorithms may still be supported, but applications should not use them +# as the security strength of legacy algorithms are usually not strong enough +# in practice. +# +# During SSL/TLS security parameters negotiation, legacy algorithms will +# not be negotiated unless there are no other candidates. +# +# The syntax of the legacy algorithms string is described as this Java +# BNF-style: +# LegacyAlgorithms: +# " LegacyAlgorithm { , LegacyAlgorithm } " +# +# LegacyAlgorithm: +# AlgorithmName (standard JSSE algorithm name) +# +# See the specification of security property "jdk.certpath.disabledAlgorithms" +# for the syntax and description of the "AlgorithmName" notation. +# +# Per SSL/TLS specifications, cipher suites have the form: +# SSL_KeyExchangeAlg_WITH_CipherAlg_MacAlg +# or +# TLS_KeyExchangeAlg_WITH_CipherAlg_MacAlg +# +# For example, the cipher suite TLS_RSA_WITH_AES_128_CBC_SHA uses RSA as the +# key exchange algorithm, AES_128_CBC (128 bits AES cipher algorithm in CBC +# mode) as the cipher (encryption) algorithm, and SHA-1 as the message digest +# algorithm for HMAC. +# +# The LegacyAlgorithm can be one of the following standard algorithm names: +# 1. JSSE cipher suite name, e.g., TLS_RSA_WITH_AES_128_CBC_SHA +# 2. JSSE key exchange algorithm name, e.g., RSA +# 3. JSSE cipher (encryption) algorithm name, e.g., AES_128_CBC +# 4. JSSE message digest algorithm name, e.g., SHA +# +# See SSL/TLS specifications and "Java Cryptography Architecture Standard +# Algorithm Name Documentation" for information about the algorithm names. +# +# Note: If a legacy algorithm is also restricted through the +# jdk.tls.disabledAlgorithms property or the +# java.security.AlgorithmConstraints API (See +# javax.net.ssl.SSLParameters.setAlgorithmConstraints()), +# then the algorithm is completely disabled and will not be negotiated. +# +# Note: This property is currently used by the JDK Reference implementation. +# It is not guaranteed to be examined and used by other implementations. +# There is no guarantee the property will continue to exist or be of the +# same syntax in future releases. +# +# Example: +# jdk.tls.legacyAlgorithms=DH_anon, DES_CBC, SSL_RSA_WITH_RC4_128_MD5 +# +jdk.tls.legacyAlgorithms= \ + K_NULL, C_NULL, M_NULL, \ + DH_anon, ECDH_anon, \ + RC4_128, RC4_40, DES_CBC, DES40_CBC, \ + 3DES_EDE_CBC + +# +# The pre-defined default finite field Diffie-Hellman ephemeral (DHE) +# parameters for Transport Layer Security (SSL/TLS/DTLS) processing. +# +# In traditional SSL/TLS/DTLS connections where finite field DHE parameters +# negotiation mechanism is not used, the server offers the client group +# parameters, base generator g and prime modulus p, for DHE key exchange. +# It is recommended to use dynamic group parameters. This property defines +# a mechanism that allows you to specify custom group parameters. +# +# The syntax of this property string is described as this Java BNF-style: +# DefaultDHEParameters: +# DefinedDHEParameters { , DefinedDHEParameters } +# +# DefinedDHEParameters: +# "{" DHEPrimeModulus , DHEBaseGenerator "}" +# +# DHEPrimeModulus: +# HexadecimalDigits +# +# DHEBaseGenerator: +# HexadecimalDigits +# +# HexadecimalDigits: +# HexadecimalDigit { HexadecimalDigit } +# +# HexadecimalDigit: one of +# 0 1 2 3 4 5 6 7 8 9 A B C D E F a b c d e f +# +# Whitespace characters are ignored. +# +# The "DefinedDHEParameters" defines the custom group parameters, prime +# modulus p and base generator g, for a particular size of prime modulus p. +# The "DHEPrimeModulus" defines the hexadecimal prime modulus p, and the +# "DHEBaseGenerator" defines the hexadecimal base generator g of a group +# parameter. It is recommended to use safe primes for the custom group +# parameters. +# +# If this property is not defined or the value is empty, the underlying JSSE +# provider's default group parameter is used for each connection. +# +# If the property value does not follow the grammar, or a particular group +# parameter is not valid, the connection will fall back and use the +# underlying JSSE provider's default group parameter. +# +# Note: This property is currently used by OpenJDK's JSSE implementation. It +# is not guaranteed to be examined and used by other implementations. +# +# Example: +# jdk.tls.server.defaultDHEParameters= +# { \ +# FFFFFFFF FFFFFFFF C90FDAA2 2168C234 C4C6628B 80DC1CD1 \ +# 29024E08 8A67CC74 020BBEA6 3B139B22 514A0879 8E3404DD \ +# EF9519B3 CD3A431B 302B0A6D F25F1437 4FE1356D 6D51C245 \ +# E485B576 625E7EC6 F44C42E9 A637ED6B 0BFF5CB6 F406B7ED \ +# EE386BFB 5A899FA5 AE9F2411 7C4B1FE6 49286651 ECE65381 \ +# FFFFFFFF FFFFFFFF, 2} + +# +# TLS key limits on symmetric cryptographic algorithms +# +# This security property sets limits on algorithms key usage in TLS 1.3. +# When the amount of data encrypted exceeds the algorithm value listed below, +# a KeyUpdate message will trigger a key change. This is for symmetric ciphers +# with TLS 1.3 only. +# +# The syntax for the property is described below: +# KeyLimits: +# " KeyLimit { , KeyLimit } " +# +# WeakKeyLimit: +# AlgorithmName Action Length +# +# AlgorithmName: +# A full algorithm transformation. +# +# Action: +# KeyUpdate +# +# Length: +# The amount of encrypted data in a session before the Action occurs +# This value may be an integer value in bytes, or as a power of two, 2^29. +# +# KeyUpdate: +# The TLS 1.3 KeyUpdate handshake process begins when the Length amount +# is fulfilled. +# +# Note: This property is currently used by OpenJDK's JSSE implementation. It +# is not guaranteed to be examined and used by other implementations. +# +jdk.tls.keyLimits=AES/GCM/NoPadding KeyUpdate 2^37 + +# +# Cryptographic Jurisdiction Policy defaults +# +# Import and export control rules on cryptographic software vary from +# country to country. By default, Java provides two different sets of +# cryptographic policy files[1]: +# +# unlimited: These policy files contain no restrictions on cryptographic +# strengths or algorithms +# +# limited: These policy files contain more restricted cryptographic +# strengths +# +# The default setting is determined by the value of the "crypto.policy" +# Security property below. If your country or usage requires the +# traditional restrictive policy, the "limited" Java cryptographic +# policy is still available and may be appropriate for your environment. +# +# If you have restrictions that do not fit either use case mentioned +# above, Java provides the capability to customize these policy files. +# The "crypto.policy" security property points to a subdirectory +# within /conf/security/policy/ which can be customized. +# Please see the /conf/security/policy/README.txt file or consult +# the Java Security Guide/JCA documentation for more information. +# +# YOU ARE ADVISED TO CONSULT YOUR EXPORT/IMPORT CONTROL COUNSEL OR ATTORNEY +# TO DETERMINE THE EXACT REQUIREMENTS. +# +# [1] Please note that the JCE for Java SE, including the JCE framework, +# cryptographic policy files, and standard JCE providers provided with +# the Java SE, have been reviewed and approved for export as mass market +# encryption item by the US Bureau of Industry and Security. +# +# Note: This property is currently used by the JDK Reference implementation. +# It is not guaranteed to be examined and used by other implementations. +# +crypto.policy=unlimited + +# +# The policy for the XML Signature secure validation mode. The mode is +# enabled by setting the property "org.jcp.xml.dsig.secureValidation" to +# true with the javax.xml.crypto.XMLCryptoContext.setProperty() method, +# or by running the code with a SecurityManager. +# +# Policy: +# Constraint {"," Constraint } +# Constraint: +# AlgConstraint | MaxTransformsConstraint | MaxReferencesConstraint | +# ReferenceUriSchemeConstraint | KeySizeConstraint | OtherConstraint +# AlgConstraint +# "disallowAlg" Uri +# MaxTransformsConstraint: +# "maxTransforms" Integer +# MaxReferencesConstraint: +# "maxReferences" Integer +# ReferenceUriSchemeConstraint: +# "disallowReferenceUriSchemes" String { String } +# KeySizeConstraint: +# "minKeySize" KeyAlg Integer +# OtherConstraint: +# "noDuplicateIds" | "noRetrievalMethodLoops" +# +# For AlgConstraint, Uri is the algorithm URI String that is not allowed. +# See the XML Signature Recommendation for more information on algorithm +# URI Identifiers. For KeySizeConstraint, KeyAlg is the standard algorithm +# name of the key type (ex: "RSA"). If the MaxTransformsConstraint, +# MaxReferencesConstraint or KeySizeConstraint (for the same key type) is +# specified more than once, only the last entry is enforced. +# +# Note: This property is currently used by the JDK Reference implementation. It +# is not guaranteed to be examined and used by other implementations. +# +jdk.xml.dsig.secureValidationPolicy=\ + disallowAlg http://www.w3.org/TR/1999/REC-xslt-19991116,\ + disallowAlg http://www.w3.org/2001/04/xmldsig-more#rsa-md5,\ + disallowAlg http://www.w3.org/2001/04/xmldsig-more#hmac-md5,\ + disallowAlg http://www.w3.org/2001/04/xmldsig-more#md5,\ + maxTransforms 5,\ + maxReferences 30,\ + disallowReferenceUriSchemes file http https,\ + minKeySize RSA 1024,\ + minKeySize DSA 1024,\ + minKeySize EC 224,\ + noDuplicateIds,\ + noRetrievalMethodLoops + +# +# Serialization process-wide filter +# +# A filter, if configured, is used by java.io.ObjectInputStream during +# deserialization to check the contents of the stream. +# A filter is configured as a sequence of patterns, each pattern is either +# matched against the name of a class in the stream or defines a limit. +# Patterns are separated by ";" (semicolon). +# Whitespace is significant and is considered part of the pattern. +# +# If the system property jdk.serialFilter is also specified on the command +# line, it supersedes the security property value defined here. +# +# If a pattern includes a "=", it sets a limit. +# If a limit appears more than once the last value is used. +# Limits are checked before classes regardless of the order in the +# sequence of patterns. +# If any of the limits are exceeded, the filter status is REJECTED. +# +# maxdepth=value - the maximum depth of a graph +# maxrefs=value - the maximum number of internal references +# maxbytes=value - the maximum number of bytes in the input stream +# maxarray=value - the maximum array length allowed +# +# Other patterns, from left to right, match the class or package name as +# returned from Class.getName. +# If the class is an array type, the class or package to be matched is the +# element type. +# Arrays of any number of dimensions are treated the same as the element type. +# For example, a pattern of "!example.Foo", rejects creation of any instance or +# array of example.Foo. +# +# If the pattern starts with "!", the status is REJECTED if the remaining +# pattern is matched; otherwise the status is ALLOWED if the pattern matches. +# If the pattern contains "/", the non-empty prefix up to the "/" is the +# module name; +# if the module name matches the module name of the class then +# the remaining pattern is matched with the class name. +# If there is no "/", the module name is not compared. +# If the pattern ends with ".**" it matches any class in the package and all +# subpackages. +# If the pattern ends with ".*" it matches any class in the package. +# If the pattern ends with "*", it matches any class with the pattern as a +# prefix. +# If the pattern is equal to the class name, it matches. +# Otherwise, the status is UNDECIDED. +# +#jdk.serialFilter=pattern;pattern + +# +# RMI Registry Serial Filter +# +# The filter pattern uses the same format as jdk.serialFilter. +# This filter can override the builtin filter if additional types need to be +# allowed or rejected from the RMI Registry or to decrease limits but not +# to increase limits. +# If the limits (maxdepth, maxrefs, or maxbytes) are exceeded, the object is rejected. +# +# Each non-array type is allowed or rejected if it matches one of the patterns, +# evaluated from left to right, and is otherwise allowed. Arrays of any +# component type, including subarrays and arrays of primitives, are allowed. +# +# Array construction of any component type, including subarrays and arrays of +# primitives, are allowed unless the length is greater than the maxarray limit. +# The filter is applied to each array element. +# +# Note: This property is currently used by the JDK Reference implementation. +# It is not guaranteed to be examined and used by other implementations. +# +# The built-in filter allows subclasses of allowed classes and +# can approximately be represented as the pattern: +# +#sun.rmi.registry.registryFilter=\ +# maxarray=1000000;\ +# maxdepth=20;\ +# java.lang.String;\ +# java.lang.Number;\ +# java.lang.reflect.Proxy;\ +# java.rmi.Remote;\ +# sun.rmi.server.UnicastRef;\ +# sun.rmi.server.RMIClientSocketFactory;\ +# sun.rmi.server.RMIServerSocketFactory;\ +# java.rmi.activation.ActivationID;\ +# java.rmi.server.UID +# +# RMI Distributed Garbage Collector (DGC) Serial Filter +# +# The filter pattern uses the same format as jdk.serialFilter. +# This filter can override the builtin filter if additional types need to be +# allowed or rejected from the RMI DGC. +# +# Note: This property is currently used by the JDK Reference implementation. +# It is not guaranteed to be examined and used by other implementations. +# +# The builtin DGC filter can approximately be represented as the filter pattern: +# +#sun.rmi.transport.dgcFilter=\ +# java.rmi.server.ObjID;\ +# java.rmi.server.UID;\ +# java.rmi.dgc.VMID;\ +# java.rmi.dgc.Lease;\ +# maxdepth=5;maxarray=10000 + +# CORBA ORBIorTypeCheckRegistryFilter +# Type check enhancement for ORB::string_to_object processing +# +# An IOR type check filter, if configured, is used by an ORB during +# an ORB::string_to_object invocation to check the veracity of the type encoded +# in the ior string. +# +# The filter pattern consists of a semi-colon separated list of class names. +# The configured list contains the binary class names of the IDL interface types +# corresponding to the IDL stub class to be instantiated. +# As such, a filter specifies a list of IDL stub classes that will be +# allowed by an ORB when an ORB::string_to_object is invoked. +# It is used to specify a white list configuration of acceptable +# IDL stub types which may be contained in a stringified IOR +# parameter passed as input to an ORB::string_to_object method. +# +# Note: This property is currently used by the JDK Reference implementation. +# It is not guaranteed to be examined and used by other implementations. +# +#com.sun.CORBA.ORBIorTypeCheckRegistryFilter=binary_class_name;binary_class_name + +# The iteration count used for password-based encryption (PBE) in JCEKS +# keystores. Values in the range 10000 to 5000000 are considered valid. +# If the value is out of this range, or is not a number, or is unspecified; +# a default of 200000 is used. +# +# If the system property jdk.jceks.iterationCount is also specified, it +# supersedes the security property value defined here. +# +#jdk.jceks.iterationCount = 200000 + +# +# JCEKS Encrypted Key Serial Filter +# +# This filter, if configured, is used by the JCEKS KeyStore during the +# deserialization of the encrypted Key object stored inside a key entry. +# If not configured or the filter result is UNDECIDED (i.e. none of the patterns +# matches), the filter configured by jdk.serialFilter will be consulted. +# +# If the system property jceks.key.serialFilter is also specified, it supersedes +# the security property value defined here. +# +# The filter pattern uses the same format as jdk.serialFilter. The default +# pattern allows java.lang.Enum, java.security.KeyRep, java.security.KeyRep$Type, +# and javax.crypto.spec.SecretKeySpec and rejects all the others. +jceks.key.serialFilter = java.base/java.lang.Enum;java.base/java.security.KeyRep;\ + java.base/java.security.KeyRep$Type;java.base/javax.crypto.spec.SecretKeySpec;!* + +# +# Enhanced exception message information +# +# By default, exception messages should not include potentially sensitive +# information such as file names, host names, or port numbers. This property +# accepts one or more comma separated values, each of which represents a +# category of enhanced exception message information to enable. Values are +# case-insensitive. Leading and trailing whitespaces, surrounding each value, +# are ignored. Unknown values are ignored. +# +# NOTE: Use caution before setting this property. Setting this property +# exposes sensitive information in Exceptions, which could, for example, +# propagate to untrusted code or be emitted in stack traces that are +# inadvertently disclosed and made accessible over a public network. +# +# The categories are: +# +# hostInfo - IOExceptions thrown by java.net.Socket and the socket types in the +# java.nio.channels package will contain enhanced exception +# message information +# +# The property setting in this file can be overridden by a system property of +# the same name, with the same syntax and possible values. +# +#jdk.includeInExceptions=hostInfo + +# +# Disabled mechanisms for the Simple Authentication and Security Layer (SASL) +# +# Disabled mechanisms will not be negotiated by both SASL clients and servers. +# These mechanisms will be ignored if they are specified in the "mechanisms" +# argument of "Sasl.createSaslClient" or the "mechanism" argument of +# "Sasl.createSaslServer". +# +# The value of this property is a comma-separated list of SASL mechanisms. +# The mechanisms are case-sensitive. Whitespaces around the commas are ignored. +# +# Note: This property is currently used by the JDK Reference implementation. +# It is not guaranteed to be examined and used by other implementations. +# +# Example: +# jdk.sasl.disabledMechanisms=PLAIN, CRAM-MD5, DIGEST-MD5 +jdk.sasl.disabledMechanisms= + +# +# Policies for distrusting Certificate Authorities (CAs). +# +# This is a comma separated value of one or more case-sensitive strings, each +# of which represents a policy for determining if a CA should be distrusted. +# The supported values are: +# +# SYMANTEC_TLS : Distrust TLS Server certificates anchored by a Symantec +# root CA and issued after April 16, 2019 unless issued by one of the +# following subordinate CAs which have a later distrust date: +# 1. Apple IST CA 2 - G1, SHA-256 fingerprint: +# AC2B922ECFD5E01711772FEA8ED372DE9D1E2245FCE3F57A9CDBEC77296A424B +# Distrust after December 31, 2019. +# 2. Apple IST CA 8 - G1, SHA-256 fingerprint: +# A4FE7C7F15155F3F0AEF7AAA83CF6E06DEB97CA3F909DF920AC1490882D488ED +# Distrust after December 31, 2019. +# +# Leading and trailing whitespace surrounding each value are ignored. +# Unknown values are ignored. If the property is commented out or set to the +# empty String, no policies are enforced. +# +# Note: This property is currently used by the JDK Reference implementation. +# It is not guaranteed to be supported by other SE implementations. Also, this +# property does not override other security properties which can restrict +# certificates such as jdk.tls.disabledAlgorithms or +# jdk.certpath.disabledAlgorithms; those restrictions are still enforced even +# if this property is not enabled. +# +jdk.security.caDistrustPolicies=SYMANTEC_TLS + +# +# FilePermission path canonicalization +# +# This security property dictates how the path argument is processed and stored +# while constructing a FilePermission object. If the value is set to true, the +# path argument is canonicalized and FilePermission methods (such as implies, +# equals, and hashCode) are implemented based on this canonicalized result. +# Otherwise, the path argument is not canonicalized and FilePermission methods are +# implemented based on the original input. See the implementation note of the +# FilePermission class for more details. +# +# If a system property of the same name is also specified, it supersedes the +# security property value defined here. +# +# The default value for this property is false. +# +jdk.io.permissionsUseCanonicalPath=false + + +# +# Policies for the proxy_impersonator Kerberos ccache configuration entry +# +# The proxy_impersonator ccache configuration entry indicates that the ccache +# is a synthetic delegated credential for use with S4U2Proxy by an intermediate +# server. The ccache file should also contain the TGT of this server and +# an evidence ticket from the default principal of the ccache to this server. +# +# This security property determines how Java uses this configuration entry. +# There are 3 possible values: +# +# no-impersonate - Ignore this configuration entry, and always act as +# the owner of the TGT (if it exists). +# +# try-impersonate - Try impersonation when this configuration entry exists. +# If no matching TGT or evidence ticket is found, +# fallback to no-impersonate. +# +# always-impersonate - Always impersonate when this configuration entry exists. +# If no matching TGT or evidence ticket is found, +# no initial credential is read from the ccache. +# +# The default value is "always-impersonate". +# +# If a system property of the same name is also specified, it supersedes the +# security property value defined here. +# +#jdk.security.krb5.default.initiate.credential=always-impersonate + +# +# Trust Anchor Certificates - CA Basic Constraint check +# +# X.509 v3 certificates used as Trust Anchors (to validate signed code or TLS +# connections) must have the cA Basic Constraint field set to 'true'. Also, if +# they include a Key Usage extension, the keyCertSign bit must be set. These +# checks, enabled by default, can be disabled for backward-compatibility +# purposes with the jdk.security.allowNonCaAnchor System and Security +# properties. In the case that both properties are simultaneously set, the +# System value prevails. The default value of the property is "false". +# +#jdk.security.allowNonCaAnchor=true diff --git a/java-11-openjdk/security/nss.cfg b/java-11-openjdk/security/nss.cfg new file mode 100644 index 0000000..3535a40 --- /dev/null +++ b/java-11-openjdk/security/nss.cfg @@ -0,0 +1,4 @@ +name = NSS +nssDbMode = noDb +attributes = compatibility +handleStartupErrors = ignoreMultipleInitialisation diff --git a/java-11-openjdk/security/policy/README.txt b/java-11-openjdk/security/policy/README.txt new file mode 100644 index 0000000..fdf77d3 --- /dev/null +++ b/java-11-openjdk/security/policy/README.txt @@ -0,0 +1,54 @@ + + Java(TM) Cryptography Extension Policy Files + for the Java(TM) Platform, Standard Edition Runtime Environment + + README +------------------------------------------------------------------------ + +Import and export control rules on cryptographic software vary from +country to country. The Java Cryptography Extension (JCE) architecture +allows flexible cryptographic key strength to be configured via the +jurisdiction policy files which are referenced by the "crypto.policy" +security property in the /conf/security/java.security file. + +By default, Java provides two different sets of cryptographic policy +files: + + unlimited: These policy files contain no restrictions on cryptographic + strengths or algorithms + + limited: These policy files contain more restricted cryptographic + strengths + +These files reside in /conf/security/policy in the "unlimited" +or "limited" subdirectories respectively. + +Each subdirectory contains a complete policy configuration, +and subdirectories can be added/edited/removed to reflect your +import or export control product requirements. + +Within a subdirectory, the effective policy is the combined minimum +permissions of the grant statements in the file(s) matching the filename +pattern "default_*.policy". At least one grant is required. For example: + + limited = Export (all) + Import (limited) = Limited + unlimited = Export (all) + Import (all) = Unlimited + +The effective exemption policy is the combined minimum permissions +of the grant statements in the file(s) matching the filename pattern +"exempt_*.policy". Exemption grants are optional. For example: + + limited = grants exemption permissions, by which the + effective policy can be circumvented. + e.g. KeyRecovery/KeyEscrow/KeyWeakening. + +Please see the Java Cryptography Architecture (JCA) documentation for +additional information on these files and formats. + +YOU ARE ADVISED TO CONSULT YOUR EXPORT/IMPORT CONTROL COUNSEL OR ATTORNEY +TO DETERMINE THE EXACT REQUIREMENTS. + +Please note that the JCE for Java SE, including the JCE framework, +cryptographic policy files, and standard JCE providers provided with +the Java SE, have been reviewed and approved for export as mass market +encryption item by the US Bureau of Industry and Security. diff --git a/java-11-openjdk/security/policy/limited/default_US_export.policy b/java-11-openjdk/security/policy/limited/default_US_export.policy new file mode 100644 index 0000000..1f38934 --- /dev/null +++ b/java-11-openjdk/security/policy/limited/default_US_export.policy @@ -0,0 +1,6 @@ +// Default US Export policy file. + +grant { + // There is no restriction to any algorithms. + permission javax.crypto.CryptoAllPermission; +}; diff --git a/java-11-openjdk/security/policy/limited/default_local.policy b/java-11-openjdk/security/policy/limited/default_local.policy new file mode 100644 index 0000000..2a6d513 --- /dev/null +++ b/java-11-openjdk/security/policy/limited/default_local.policy @@ -0,0 +1,14 @@ +// Some countries have import limits on crypto strength. This policy file +// is worldwide importable. + +grant { + permission javax.crypto.CryptoPermission "DES", 64; + permission javax.crypto.CryptoPermission "DESede", *; + permission javax.crypto.CryptoPermission "RC2", 128, + "javax.crypto.spec.RC2ParameterSpec", 128; + permission javax.crypto.CryptoPermission "RC4", 128; + permission javax.crypto.CryptoPermission "RC5", 128, + "javax.crypto.spec.RC5ParameterSpec", *, 12, *; + permission javax.crypto.CryptoPermission "RSA", *; + permission javax.crypto.CryptoPermission *, 128; +}; diff --git a/java-11-openjdk/security/policy/limited/exempt_local.policy b/java-11-openjdk/security/policy/limited/exempt_local.policy new file mode 100644 index 0000000..9dd5b91 --- /dev/null +++ b/java-11-openjdk/security/policy/limited/exempt_local.policy @@ -0,0 +1,13 @@ +// Some countries have import limits on crypto strength, but may allow for +// these exemptions if the exemption mechanism is used. + +grant { + // There is no restriction to any algorithms if KeyRecovery is enforced. + permission javax.crypto.CryptoPermission *, "KeyRecovery"; + + // There is no restriction to any algorithms if KeyEscrow is enforced. + permission javax.crypto.CryptoPermission *, "KeyEscrow"; + + // There is no restriction to any algorithms if KeyWeakening is enforced. + permission javax.crypto.CryptoPermission *, "KeyWeakening"; +}; diff --git a/java-11-openjdk/security/policy/unlimited/default_US_export.policy b/java-11-openjdk/security/policy/unlimited/default_US_export.policy new file mode 100644 index 0000000..1f38934 --- /dev/null +++ b/java-11-openjdk/security/policy/unlimited/default_US_export.policy @@ -0,0 +1,6 @@ +// Default US Export policy file. + +grant { + // There is no restriction to any algorithms. + permission javax.crypto.CryptoAllPermission; +}; diff --git a/java-11-openjdk/security/policy/unlimited/default_local.policy b/java-11-openjdk/security/policy/unlimited/default_local.policy new file mode 100644 index 0000000..2b907e2 --- /dev/null +++ b/java-11-openjdk/security/policy/unlimited/default_local.policy @@ -0,0 +1,6 @@ +// Country-specific policy file for countries with no limits on crypto strength. + +grant { + // There is no restriction to any algorithms. + permission javax.crypto.CryptoAllPermission; +}; diff --git a/java-11-openjdk/security/public_suffix_list.dat b/java-11-openjdk/security/public_suffix_list.dat new file mode 100644 index 0000000000000000000000000000000000000000..029aa3c58da4345799290f0bba24883f309f9bc9 GIT binary patch literal 232578 zcma$(c{o(x`wFSFN~;zv!k97ION*2=JEFbBFqkaEj3rt>mi9#=Ds75VXxFOJYQ~tc zw6BzscBE+ioqOh9?(O@_na}ggAD^Dbd*Ac!+j);OS69zir)}G|IyyQ7!LRv0U7dD1 zo}QjF-Sl-@VgKsI;_)h5>o{`_+9rnWi8lcMqz``1{{)~10Z4<%5a_gW4Tz6ZlR9DF zY||o$HW&z@r!>@$41`0c$#F233r>c&2Ouy||HcF!MJS}ec%i|gQ%e1L^iec;2qmGR z6c`GoWrYSzh)0hwG#)sZaIuI2hE~XXr2#YB-*f;PjOI9A6d12H0Gu*E?n563az+?H z!9u~taR`cKOhj|W0CGm+>**~aoKtxI`wHeK!PrY1ble+Co5K-hQ4!F&Pq# zFK6)-xWHW(wjI;~fWc_F z5<8`}!i2f?rp0Xr1GpnwgbmN@<>@U7j3i?z;IWIcD}_oYZXr*_Q_TL7`z%3Nr+PA}dP<2j@t9_xz}i01!sZf1kd+2ACu)DAY5EBBufs zv&f3Aw8CX|S7F(#P5=}}(0_w7q=1uA4voXJ#D&gk;r^qY0Wb{5e*=V4>qU_k6)q{E z8+UX>ORYY{C{!XP<65~ky7wS25lu7DIGAn zv`ibQKi*VPWAkuo_Q#@ub#weNsVU7 z>sM&sNvBH(y~#QKUpkGPVU%V1jQO-I^;Wu3s%f873)W|UVWqRzz9=cVP%T@tN58+_ zFlA?qY7D>P9+>(#wMcq+WRWkK_Iz9bR8d9w=p#e2i=@pWByy|R`O>uQljq;8^CAXu zI?NtC_fF_irF@@$dRp1D$V_2Du5cHW`h4QTyXc<-jFxuN1!d zl$M@f5&z?bhw-zL;L@jeb=Y0zJdWMbUJ!cx+>`9^aa*OUjTX3+b$U0!{oS*z^UF(P zPl>*!FUtLx_af))umx5I7vet#dPT{t8<^~n?HMd z#{6=gGsf13_2@m%Tr`&1Q}&&9ySu(QqvM@DCLP>At-5$?+V-n?dVN@*Yup{P65roQ ziSByiK~jG4G&AGf;w62o#j4LH9js}&938jR_YDuLKR0k2lSkSv%Y1pHx6jSBFOuer zNH5CG>9=XR!r1)f4fFMOBiEhW93@cZaAHQs-0z+S8jb4yws`00Iv#2r~Yy&d?@^LW3w_3PaAt{YLtZVWYIv0w1zm zz7(?5%re~)dEF0)st+ zDDH!+EK+9jRB8rGd6aN<%Y=qTK##hhb;&1yjB_Dw-WT*+X^Pe*7>f8v#a*2P^x4V_CI$H0Wu4J^lSW zgUH8oQmR#b|j%a%iHg6c#vf3F%;- z(c@M1Opo!qRa!g4W;Y=ncX^TNXz73^QB0PvTwG!bR*ZPMDZ4TiP((HkSX6hS+2I`Zv?VL;;9ElNEM1p|CMrIJ7qg_~?HU7_X| z;Vk9kKIniB1)&NBh=m|^BB_v4&g1Ynxa^1B$+p%~g#yIEo@5nL%IT~uLWTV5_o6wW zIb48`ILI?7ih>clP{~yu#Ur@P#)jqS!$Cm{2#|$(hEfDgZfVV?6G=>TNN)vN(4d3_ z1W*r`i62cTCvH4iLZGY$$ULb+ZzyHKl z<&^^B6_D5aG0x|0Y|oBlc2}ynj8yprN0t1ym zfD;7P^LlVa;Z6*aSxJ6zlJx zl@S69@(hR!6?;*5$W><2rLrx-Qis51L&+o>^5) zX7mu7q`9rrpc1+at2x^b2)K2NLJrZAP`r{FCr{bX93~nqSSbhwRkc7+c_4F*&H|M+ zJ}5olO4n^?tp&PL0PzVXm-*-x zEgMlM9bPwM;FC*t5>l0?Ic*OO8D&1ovYT)aq{Qw|_a{yUR1mgE38)Xj!IVN4-J*bS z0*ehUhN1NVGAV?lmUP@Uq&?qv87oifwTJ`M03d2oQ2-SWI-kxdk`uUy*0~%+YXHQB zT;HI-pu`(??KsK*RVy!nXk*t7-TmARBer$RS6*^k>$bwhHpSYK(YjRzG$s?i=C!LP+*KockRB-cpk93JkNMfb94XcGsWgVZySQsbd>lzgJh^DJky z69*hxNkW?lP;*rpfJ$NBoMKy2j^i+4*m$ z#kPKvI`nbVjlcR#KT$t!_oLS@4{leCGHIJ0aq73_M!UuSo7;Px9^Y-`_p@8MiRV2Q z9Nsm5)9h|nKHS{KSU1Q1Q-kq}9y1&pS4=3fW~YR7-!ridBQtKWsolJ#P^GVCkAJ-! z5CCh;{JS;+-D#*_fGCtgRCxiLL9k}i;Bh<9?i5Dcp`h>@BqE2(bW1r?!6lUHyltr% z9dScShBX=6nep~UF@TaEa@SM{ENR21Zp*b#sjfC$=W-!xk@APV`GZf}4jp=T!_2U{ zTWsMaL*4EJZQ8%gx|)>w{oIj;yW@^cESQp+2ql&$t;h?_hAXhK;2L@dBeOy#gt%}&bO8;iD-DyyCDzIKkKK> zKr0VqH2^{F>CpLdUQ=6Vy59?bG%nEi0zl-T1%OfF>E|h--X65^)nFqFmdKiQ#*0N~ zSQjv@ar4&mc-tH_HqfJlh5AuS{&a@CfT;ODd%0^7+M{R)97;J8gXmJVuNl`1O<)aO zLM0Si!jLoZKG#Jso{Z+RhpH2=dg+VljOKk`3O`NN* zX#<)LTN*tcD7^^${%upC97IvOby>8gPF;*=V1Kk6V1%PoW;h_K_^VIp^Z!?spbsnw zzB7yg(8Qv;f1`>?J*WVYEjEXD1gEgUz>-+)q+aML_HH)VUM!B1XNd=UJqb$TN!|}s*^=J^7E`TuyG6Xsv zd%xLr<0V=buq*@s@Dc?`D7_F4og*lctBHO{&1zvUbQXfOelcJHo{?UjQVMB6AkNO> z3FsW0LcgBI?nAeJu>b-GNVYcsIRK50Q)=$?@LuQu0tY4Xkx0nS1%Togs+l-eWzk1Q zXbsBOQylacR!&N#6^>Qqf+L5t1tk*+Jp;&jIfpLbbChx%tHc%0VP6?@SpQaAEOZrm z%KSy4{{u`VV6dCPwNHDYMd+&0zA!&eN_n3{F9QA;KjN@#dol&=; zG(R+iy~2f-GPCupc2K#$Sbgq*b)09mNK2?zLW-H-;D_GdX8uXET4?}K1dT}0#za3j ziv|E~gD{-z+9PO&U`14j{fc%e2hwNH zNKBc%U|ymwZUoP@{bYs}#YVTtZp=9gMV^$B7KcwKs##@y%=6Ih3d*_2Gc1(iIQeu2 z(H9ur=#q$*bI5p+h+@+D4E#9#BinvJQw^#vsL%yavMx@Mm7Gl^UC$B*p43uxMbZE< zMFtoOIZ+P1dT#j^ZI48W=|O!SH*WJrbQIR zWZ;;bOib27v!O_md;T1}=dTH&3z)M9qeEy2q**h~lx(B?$vTru9@uUi-uX7$q))qk z)m>8EUp>5ZfRpJQM z`SJv-obwgiFXp=(c2)A<{&vZI*kFK7M3@hG8#f;)KwXPU0C6IZODf9A!6nhI#%yet zj?k9s?rm2$0KlZT2p8&wA1E4=^Hc>^Fvdely{nJ@poIvcM*)GwzF3FK!**1Pe|+5E@zpQRV>v3}PVQ^PvL|w50_(TUHSH zKQH5=5t#YsRZohnsLL&Qd ztO6Fpf+o65nFl1~c#Bd3i|`@k13bORS%8AgQ{mx8r+ z<77oCshu@V$Z37Yj>9IGMzkpJFii;x23JxTAf4>ly6)CFl0|M7KBZo2jT7lvtgs z>uNl1x#jHiHcNjO^h`STrYLbsRKt=Tg9d*}rN`8z7KCSwaol2jJg3}W?PD)?-F3Hk z`{B=Lj>)EtKQr@{{igKy-*;Y6ZEmP56}$Voq~{l1I&S~Agvp4ibuiSF3URe)`NHV>AvhqL)bg0b|IfSglqy`T50@ zB8t)BuSQN}UX(bGDNx}B*mf@;Xq)MP8oiiuBqr!z;D;JKZov<9L4ZzzSyVS4UCzUnGH_ybfeZ;-E&Ogq!NuIfN`R8+olb#ve{M|H%VW=r*E)DrxQv)_@9l-h*RI?2z8ClMNw&Pw#W;(8X>Y zACF}?e>IMuD_p{xcJ0fWPP_}_%L4ZIJw8U(c}8)von&s+VE>p`o1bi$K4{wbi)$Aj z$e8L}&9Ys7#&k)x%e#!BMVW)#^FBWRUJ}18{=V*(DiQ6|Ime0*YcyTOg?yo${?hwmBNX8DU=U)ITUH`y=p%LV^7>r}s(%f)Hne=Q7e z?_>T&!ymPu2VhCz&`e?U?AAIuJ%LdEyQm0tLkey$$tc4aG!Bo=5D?=TmG)=%qjdv@ zlps9y6=5n*4!md}Jau9Kz31Zb*XSYR`k+Hf4Q>)o?+8l7OH(-UES-pO*DZ8DyqAO7 zk$)c(nj)#hpW^js3blanc+S(jm!eG(G}BT^sNY|3m~s{Y=umdTS+tqf94$;H69te% zBpQgj1w}+z%H(1PEld)$C=?*X-8R_l!tN*#rPD4&bM~~?#B!m2Te8uy9E44_ytMzF za>nk>HAld+ORRsRBVc&^FmKObASxt(N8_{Utfs=z$<43w(NYIl66Wg}N-00k_#ieS z>JPk^OHw0HeNg`FT2?p9bst>27rj96qW!uYz7VYp8bb8-9{fw z14?fc<$jC|=Aq?vtO9KM6}wjWZxw*9i&9-{s;q5c4=_QyE*NTs zMKx#dUMyPn5xj7DWAaHMI?RFc6i((iUT&W7?NA-MF%18loc7SL?)H6M7i@0152Qs# zr|gqhUk{rI{x>ZkAabGc2&gr|dp+lOjPtM^XV;Tgb?85fTL)8ret8l7(`e%1v0m`9;(E#|C2cqF8$h0~_=|TUcmPu_hYE2cr>uC8S;Wv2S3x-*NZ%l3R7?7n= z{lySH7uJ%J55BmLzeQc7E^DK1d#&#on z)#kj^eNa!c+mO)R#rjp71(P?G7k7U++0}^it~zn`NZY8Y22+E3zORQQ4GT1M^8Zi` zFKpduc&Ty)2icE2j2C6hP(Vx>KKXc|EBY{)e0q8MkR6YJ*W_`2spp{O6CS4S*7dQbmzoKxY%;IO1&NX0%Vk z5`G*IH6jy0Sj_?1%*y8<&7An1|FjB{8~O0Esz@3kW$-u07z3qucXg! zQ?zQ}bOB)gIuO4pXb64qY$BTB_>rhkh`574b;%<1ku)G=6kVqaDuwi-JB3^x?JhoU zd-wE17xcI-4vb=x=|uA*J9W?$G(H*<%S2*|uG0lYO5Aijv&lS&CNYi)6$oJ_%3o~! zrZpzwAabopKvyXX@#5={&LLW0qR}F9+$*5tPR4NlAT8D%V3DC07+=Q9c%)cLKxZ?W z+d^AknO7FeLaIK~2z?HnJJSWtVhs)y^&zw;NoF<~eFzv)HP4lpDHmc9m9EF~dh4h| zKD;3nzMfOBf9Ux6-ZB1#uKmW}EM0KVzw)u3Ll(FHI;U6PrMm?S_XtIsINb*g{9*aS zXv%^C1#LcTtuWd08g_aI9GkJ12f`?y7DFkB1UZipfV8c7a(|V@gS!|%vERRAWJn4T zc_2r?$Af(x$5UFAMWNz?DFsTd4Az%4HI^zdz z4t*L8019)7a`*E^$EKhGz_U>725!AfE??TOT@FSGyHwytmo**4T%+#mp1?0TbFZeR zDlffP+(V1vD(E)KV`IBuH?t|N!WFG zSL)mu?Otelt50@+>hA`q8Qh|bLJKb0+0XNY*mG@$)2m8UO=# zHI{2!WN5+H;34uP2kj~rpN_lUg2QYZG#(nNh{5(D@_2`;KnYe4;Ugli*GWF3se(0# zy+HR$78*$DEUGLNbZa@EXe>tEDms8}5Nl)yyH!u}p#YMa=m@y3c;bbY9SxW;YAT|# zU^Jy5jw`Mx(O{rfHj{@@nBVcLY1=r@r5|jb%1uZ0*VBEp+je?Se?7tTy`Nddsv9$y z_jNw*|4$U>*d``;=iTXZN4;1YXRu+B$@!_y-5E>QU8#RR_M_utSPDK&J4WLGMOxRQ zGQn6t94rOb5SkJ3VyWmB3ZAl%U=(Za3(Rj|C;GSVfJ704IbjNIv7uf(x{h3u_!3PN zD1BmTWm-jVDoYo-#^q`$eIS+crWy%48!YI;b>V7fUwgFlK|dmf{`EF4wj1sMN%Rr&7X;r}$J*B)*tzQB^b@aPU=5X+-=`9`}N@#$mm@nqJJw?h+Sj3V1`0a}!%1XhspL&_LJm3E zW@y>a97`NTl`y%okcj20YZKaNdn^Ek+A&oDK+PS~+J8K%#Ab-qmIxCu)6xwULcn0ae5fkmePLeh{%| zCOZtVZUWXJ`nLgr@S5|rVoV0(_^MsAl@QUTj&q=I>qt6D) zp5{*&u&d0S_d(BP{a0DOp8JG0y$=7!DIeLTRS%YqGJFWDBK=K5+JvbagFD)%diA`O zxv~1mdJ7NlHuO1XuKHLVywl~W@s`gP7K`3|y<7L+sX=qnWeb;Jn(fo$JtIZB(YjHjY(xN#@nWnOD zuM7J66*~gAl-|sW+P~4q!MR&nS?S}Ri(+#w+qH_BAAj3%^!H(dS#fS$ zBy`ukx4^?|@8b)m+xLa68Zhb5Qqxm!&MfOcoVC?=>z$de%@#Z~bamrAS^nMk*J8)h z_k+!z{k}D)CLMbD{>69tV&U?m7MTXkjKq@~!aMPZO31lmi5t;oMgs&ijme>tQ`6n) zv^O<9&_JNAlKA+DC_#b~mrDd-yFAlU(6$PyhXkxx@TI^}%h`M@g zITznJa`HP{wsmOb#2ULNZ~y#CK9k#(=a=*T&ONIy2ZC$F5k;4?Jx|#& z-0alcZO8QLDkAMIt|oYOeyQtvwxh^Plw~;e`)g*(<=?BT?=KxHIb^dS@XYXKw(9&Z zA19>FT#!LY%5<(>WJ-|uSO?028O zHnh4lZq2Sg^&8y|`Te;1xqjzBgW?}It!hRF@9DjMU!=Qr>({TO!z+KBnSHUpeXa0A z*Vqw~(eEqY94)=6=1pHa@!0b3U)vr__MiPcuPpa><;(Ai+x2JGy!G#Vx2OAI<|XGv z5B3L{XT*2>IcsJ6PZ3!I(l3v>J>v26z!f{%#MZ~0?|iHCYG$wJaYcqX@5&aQe_wuq zrE{%5H{^0f3Jn zHh%J7>GRz=f5hW89KnN0=gVnrBlev2^y=85zxRO~j_=|cONSwyJ zlAG}jek8{4Dg63V@GeW1aOm5ly)^l<$>&32$6Yp0?$ls%A))J%{@keLuX^k`#aY+W zv@*~mxNv>MdeOsPyAA}N2~K)7-0R&t?y_YuKYA`HoN`lKZ=iF3Rldf$`q@1=>Lfz&$>32xzl8{rd-NxZhK{t+1&a(^;U_75+(>~Pi(rRwT zoTbxC%hKJ~nwYt`W!nBqG^yfrQl9Z=Sba4aYCO2Th0i?o!zHb&()GLtFUT=AFiP1L z$5!_*+m?LEdsv6Z=S#c!NcTJny3yd$zgyK*eed>liFC%;PNN?@I}u{x`Q>KoU}0*X zIQ##C-qWvmzRy_p%<)~a{p;&@gxd$Rx@=4~S^Z$ZVWX5WAxEZkaU7;%EV!y{$B6dO zPyKv()t;CE`wYz;Qu?CvxT(^vkpJij3dn z$||cAWlq1d!E0OB>tXu4&QH9N`=<7;P-eKhpCY64XS?1x&U5A7`frah?4p*9*rk-WqehqC$GGhj*sTV&1k%#Xsh#)}<^9 z9DHiTc;&K=b;7;h58MnHaU_fRhW9o2#f1pz)Lt1r(G5!?AN=}p;P-UD<$Xg>|A;w#LcP+76H|3;HO~;nRGbU zE@ry^0#bW0s~7(aPH!I^}&h8g;(Poz4{>Rodlo$K7eWo9!cwm(& z;DxO{-n#uwgVK_T^$i>P>^uE%@464;4LY2>lv`w5HkvcRY)_nJFUQY)6MpA@iSC!V zYJGXn0kK~zSFYRLktSc5yEL-;;*ve%w>jN5v1RY8y2sXaW>7FR9tINWdH zv4x#FcktSM`p5UZXHqjFz9wB7^fAf(cdyY2+w#xoE?vEM)qqjLU}KKooI$ho73B^m5$>uAAL$0}d zDRv&Q*^;%~FT{>@U9a_N+Z9WeC%XD^yXPmber?}a-YD(gMeL~b zyZ2xH(l(u{M~--BJJN1z=e%DXc9!k$pCRwD_ww85Be{zf>&?#+Ui|e3E-}fTV1H@@ zs8zUuIjw&O_nK%Z(94rDp`}vu1$5$OpU0-FCFp1fCV-N_KyX2ylG>_^zzt~PGW^L! zbCb{sAguoZP+>uT6ng1jjkPgH7d)5??L(mUPIU^-y6TuG2DRQf-g za#U(7YfBn=U5D(=YJI&0Kg(kc~iMz>kh6tdfGw5Lr}H$ zqEyh;R%{-j0rZ|Hwb+sbCwe47p;7=zLh0~>lUj0kU{gKOWZWT$^*~SbXfXTxwt$L! zTj0y2r+v}V1?Oor*ABe?xBmg*Ie~Uca~s66@8NLtJPj;`NGOX40df^W9{Vm{p`3lc zUW~3#;&3R<2Q?G#J?xnsx(Z!!)sRXmqprqOF=?u%<(THT*JPtfr2zz

@mzui*Uz zOJa4(=cpCk(SS7i6BbOFHc~Me1;mU{@`Jh|X#K(Q0bnReI0lEXmNw5sSMc(K^8>P=n7e!}= zuJu^aHH9Y7bAe`kic#PBrobqSYSA!2l1oM2VzMGzbNF(i8CKJ4RXm#H(7r%0e=R?O zpxA<@-6vNqb9~YE1)2p24)`;QG(dQkMTJf4!v5QIKU7Pz09NOM4I!kujI{z>5M|(n z!e<=?&SUYRN%DpPqU4Rw`4cEfNlqRS(t*EIB z+G~bzGMZ~pzNHu#vZ6pZgnU~}YV#aT6?h;S*?C$EaL*ZYSQooyfq3=^)(FWPldLKC zNt<31AeNkH)=zmTdSA!tu-H-)gzp1~1mofX0p!^&>mo3q#0Bd{@dlphmiYZ>*@UQ) z2eqyLci`dVp#x9Q0}l`qd1l+1cn1JJy+dpr(A1s3eeHE0dk0`hi)V!($#<}Fz#;=U z-m-C>S#Pl4i^&*p10$9}+fN}gcl83mu-&=;CLRRXY}Oe?_HYb(@}=*+{vX+L%rUyDs*m^lSlP$OeDy*VmA>B}@hn^PQ&EUdZl*LK&OgjWF`eA9+RXpA5!?!MW&dFE`->p%YMp7D6P+5AIq+YPpN|5}sl_Gj3SGku)4TMCbOgodOU zpFcEU;Kk)bey(|S;`+7cJ89gHtGJ6RcG)Z2sN678e9_}}W~-k0$?u#4vivqn)8Gv&PBY`*~!RYy!Js~U~GX-U$6 z-JEq(hID7mXtgtP#2;vI4R(I_T@QM8S9Du4{ZNcVlsS9QyT@%ro{7#0v=~8+03axH zjsQqgdcO6>DlGzfXlei$a+Cs~5E9wOkQ<3MH5y!e!9Y6MVDXt8qNiq<6sN^&5m?m$ z%*%+wMU-rZT_mS-8AQ5s{oNfJy6T`IFy%%J0D}|wX*NHQkb! zC`#!qG)7~iA#woK78h9(#`vmBc?Fut8hipJUQ)_z9lNN=$(lo?6pwm-PekLR;TNbe zkf&bQ*qeMfg+^Q)RgSi%Sd8lpMs2}l9GUN6Ay`wfu2PZo5gp@dxFsXcf3X=VV)iTL zt`=5Rb0nGAm*OB8DxMmIkTmOiF(={L3-@94$5=_nxWy;{nrIO@5M?u73h$H_vQ;H9 z!#8kC2P$iSroF$DCTwed{`BDv*A#R?+%VE30@0~A5)$qVdU_+eb&4mpQ*Pa~E|D+{ z@iG?ZP6r_NVbd)v?!_3ss;o+{tg7}@Xaeb8=6n@a zKW%x>9^}1PDxy@(! zSUHohMr%@cK0yzCYPbO=3PB-ReD!#N>ENPQ+8wc`PfmoWfX!yar2-5BrzhTi8{*v2bs4 zFeV2#l=1DI9yG=&i=Ijg4&R{crdi{(OpjT_M#r_fP#0GPy;EBODZth&|639uisbnv zIgvmA?@f2j0=xD9d96m@Mu)TuB3BvZR(O$dL&eQMTGFn0_{WPS2RSaCR)Rkhh;6Ss zRAp{o4R)7;$2l^<<0fx4t4js#Q>>lzk7}L`<={ApfQpJ{oSZmq#$x4 z!Ld}(iF?THfAsJ|M;P!xp=7sbX^E#-M?I|1p$`PH2m>3s$yk7X8}7+p%zJkVjRh37 zFv>uxC0~V$+J;U~w0I^Didq<;D_OfhWm8U6@wen2+KG;DG+;ojo6KWNtkjL0>=Szf zhHDE(3ObQwvM@Lt;_~U+%(Jb~U?5$>J;`@yEV;z%j0U!Iv`|6F;Bd13Sz6)tHb3On zb2NjYEhHCcGKuv9`16{2z~q1(_uyqxo85C3q;~c(uB@7@xBhB-7=7i`&nu?`J2S0C zTZ2gvxMfXwW1SE7dX|F-jH`(gWZRA$agK#XyuDFb4OVNjY!N1QaxigDVgR2AneXed zEwnp1rG?2S_MPmA6gPS}x-V{*A}CbqmOWhU=wUks^bL9%+uwNw9^%vxW6z>C>Dx@- zj*v|r33fU>(6om?Th>pS0`Lw*<4)O=)AWMTV3QxwXxt$|y+!`y0xh3iM7;4}q?5B8 zt(K62l+F8m%U41W!j&*sJSWCID+Rqox1Hu1l~1|#HjF3O@83QJ3$aArVcD+%!B__nTfh2mh?sbia!^L$_)b^BVhI;NS+9?J`6p(zdMKS# zwPj9vR2k3cVZxU~^tnvE>Q-}KkLEGYUi^6-&fzXwIN;S} z@KN;DN6Jgmd{Vi&%Y~7hHEIDLdQVQ-)!y@ zIT$SBGC0R@L<(!g!7rq*TW@%6LO03rW^Wt1iy!$L)LWOX(%`l0y; zwJ0P^9E?4lN3w4WdJ(+OLrr#NzEj~pH3LH>beAb9JF z?Clr|p0#z;!Ri}!Yf&`8{2jPIOO7QN3gSYT>&Lh;Xl&qd$dxSyVYDNi;WOGGK8DT; zJfoesZLj-+_(f?3cQFeCo*B2>{|ECam>T}u;y|k?Bfr+iu*L;`kRK6zCDwNZ1;X$^dtBm#QMPX7&IB1Jfm4KmO7J{}Y zq2DK6l6RwfqENypk7Y1`6w?_3MyVCZ_A>A2*1*_GWk)}SRkgaeNN6Z-;lNT*w1Nx9 zNi?gyhC^7>mt2{KnXi`DSwW^P!6tYpcObG^*i~ra5`@=U_x@<6L9~_xizsgoW?Qfr z#OoGEC+f{Wdk-wN1Ml}rWRyEg*%k#%0dZ%^du>l&bZUnK`s*QJ$^*cY*G^1E1A@Y^ z1k7N`f~ik3XIofu=+-PA(bHQLuA7J!2FxbGeU&o}LdiX5co348u2{ z;GoSa=5hcCX@rNbWvevXF=!HwkdbCZ~aEUS@#cg`P$8!6@ zXf%m6Af)876L@$171((I-Z(7P)x4y-(sPDBR?KdhDwr&TcicgUN7i`&t$E8&$!@_k zv@B}?$^58RjY|ht>OriobSj&AyskU|TFRbLPYp5Sfz@vR%`eR%Da`{=t;GYDA{ zXgWdZ5qVRd^5XK@#6w<7&n@|c4xunZ2JVA-3#se!xqLpG({vM7zJBx!v>}5u0(-*1 z8gf!B#sv$)=n6b8=y&ILfR@C@7LG~D6+R3QLxErLRaV|Qg9e28Lmx6Sg<$ER5=;}6 z=$`E5O3Qa6ilQmoLYA<@!M2RW{Zo>6>~5!-1FGC9%%KA=jzx14ylqN4b0LrL+Y=-m zb*b{VsA3x3VFo)ihQ5XS!irDAOgtxSE!WZ z^A`~_@5ZA+K+zO~x5&vv0k6#A@|~zc(4saB-_6X^=as2TSFqsq&LFOKsyqR z07(PAK~J1aa$xA#N}^xeuP%6}wgN=yjDWxmFV3%=_TW4EXd1==V@bK851g^+GxSzyVyr+WgrM+xs+2h0&*b8-JRw;Gf}|Jv+YNSAZLVpmPw zfoHn&H5w&oQpio4LVRMDytEl0&Ba=KEx(!uKSyfvfTWbT!0|5afis#HFfPD$9FQ_wRv}n&V2u|)Kh*BlVkH!$ zUx3)xj}klsIBE+b1oNJ;n$ncz|wtYmA<-J%qo;piL> zDw2deXk2&AM2go@N`TmrXnr8i7FIQZtCH$1=XYT*3LRxSy_uNzLZGT)W; z*F$+HdQZJRdqh=ikPn@;;Po#-mTcBj z_K0*@WBfN=gT9Jav`b&QnH^@SC*E)9BpmbX;N-+BH{xAyCI`&&y_ooU(}SAl_phJ# zpGkZ91@4wGzxyNpERe`eV4w~mmDJfYtES1bppiF=(V7PX5p20{keE_xu>yO2!4*GZ zVt=BNm4*&PAOof3u+K_?+X1%qnhZ1pp-q-bd_5^Cq?N+SsVR#zd;V-0+9qp`1^SoX z5=z(IN&&8u$<@TG<%_bScA}33jfoTh6H`j_7%VUkgnQD{F1A|CpFs+RHjAhi%gPc5 zFeH#0t|f)S7K=k=AkQMJ8~~NYVl=(7vT~)+6HOs_ zEXstk6)~PHnD=`t`dHAu0z*RbLRLjwTy`Q#7ih6d9I`wNl+8n_kAho)+Bw~_>0$6! z9(UfL4+I0Juuvi8PMsBltx)4Qy=#4Spq2%dNOBH(lo$#4Fe+V(7h^Gt=1cBgI^mIp z{fSSX(V+px7hg)&<3wa(`fl@e(0suZ5&!_Rw&eK6NhxPHjiv6fI~#!(H_YE)fXHzM z07K-aZ{|(W;<Lg)vQu1-_>3O=(eze)t z94C-+#R zx`??scm-?Xl@8!>RWKf*X^Mk)wG9dc9J=1oVt5%|k4vhmg1x?BH0hH!DF1eQswY;M1E0Rbl<$b3jCWk2S zkL$9dFItWv-N{>no$wj1)#f=@&|(PxoIGUYguiw|OglP^@G&3SBc``JX`ROf(_zd} z21*W_S5%}fivb1@laI^H=?OM~Z_``k9VERkXW-zAK3-rdNk=FuH^YuHRWw# zvWVeNWzO!o_ZoUM6T&6?D>e2gF!luJI5SIpYu)Rq4N#6jMZ-ZePFmCBq6&Rw5*}OZ zLr&Y(JfchA&Uw&y^s%AY1t7@vd;o(eLOgIUI)gU58X(~m+pPxoEbs(V=c-Ku8VEGK zV(@4PSzy%k<|UMavfM6dDYE2%8Qj{ZJi<)8_5|AWbM-UoOy5E|tEkm$#O`diJiiMM z8UPltlDvZ&tYO7HUG5);a`ZuQATkQc*>s|AmiXt)D>M*jttiDwHG#!|W%gR!{DR~T zkbrcad=|MAhX`kqO0Hf;lUs8b3F&=PFBaH0NAwl)`ZoSX9|r0OId4|u1m*vpw*YNs zAP#@cE~%Smm-_ymq=&`<>QbPPVgdNXTSU)?PnwC=CCHONay+Ic_PnS44j6>?`WgV_ z+(AtgGe$;z(sKU*<<<&lrs4Ys@Hfa|H5EK|1|}@#wbry{20mjv8U#cio811l3x=*q z0Pnm-yJ$Tv#CPfZm3l(aVk(TvCPVP8e7fN0(2W8%x~Y-}|I2X(-UEmM(Q#l$}K(K^-uOZyfr02ERwxa&ZDd6~&klHOfz z{q>6;T1atF!G2)6kEFj$4!xj&M>xV^i-%~@C5J)^t}%-L0wizRr9Z#tX0(t(9|8)0 zZIVIA*-?dj~pnZr2h&Y%W9)KN{(3Hxn9KsRX|T`EDWlMJ8$M+CP`1*Y0lwmh)`c+ed>43XfGoh^5fM3$xQpSOJPhW@ znDqVIu|hV5d3lj@1SVfVTv?sIYx-ui(LJfqrEbe1oGY% zCf>!{t{3rMOKBym;4v(5yC36Bj-&_yO2Zz$)MOI7V&A!%0gktvNnq#m19NZ9#4cbd z2~WSV^VNaq^I^31^9%$FMo7*cK;hFE9Q>rY76;tXwAKI$@&yl!Q_$h6nZ(`P*imI# zy!oOz6uIkBz-nrEJoK(&pbv%ldOvbDQNSW{33;Y#2-;Oc9K3xb^$|jG%en_@&XSWp1M8YWKOWBc|;qA|fT96vC_9!PCV0Z0O6QFCKTxOY}K zI>Ukb4Q#TPADLC)DNdfM01q_B@xs2K4FyzAF)5A)_~3E0&8Ie6l-Dtn>_-|#C@3H< zQ8d+YeKRJ%A*^b~-rStXM^|)}%SMO2-jKm}_8E{mPV}d2q0Dr#$%Vb|AL;u{dU&G! zt!0;U`l+7eRyPK%eN?s7{MwF-^Y?s8Z9V&V*uVv?Hnwv+ezD)RC+nRrb|0$1?`Cuk zABSC?TeA@s;YKif<8`+`w+@7D2FCk$i!K||!Jlj_3y4wECv#70*@W^V6+8+GaQzKF z-)6RUuE~!ScN7$WG#}O!i83Ou3M+HLa`>LTdcZrGzJ=3WHe;EU=HP5Czx)irr0F1IAnRp;nhna?Oxz?#_wG0nZ6lxvgC`!nJt-)u z<-De)ORfhJTc~G{usx+F}G|QAkli zftpLKnyGk^w-}9)=2&1iCm9HsuE7O$^Lpz7#LM+V8w`n<)7eVg=k5F zHeNy=b;H0An?ra40Rt>}S$nX1dPWc5?FXlvKc6ICchk&foaw17os5$@S-llf7xlK{yEdlqn$RT7xa;R$|;NW&u zykLPAPqjlNo9!TDBOANrtUK=8uwUJxkF!>}th#(<@sqMSy~pRgFVz3?<0UPn$Bdco zZ&}C7Uy2`>c9GILjx@RGFgj^c`O48H7WZCEc`@vWvv=wmzRN6ktgx`oaLGymILY=F zWf`K;oU~6Xo^N!`w1a-}_jkh7&Eq*@&S1-Gy~B#PcMpzO@$|Y?tJP-~t}#8k$l1Mb zT8VVFZ3j`$?2HR@pWF@^IoZv*Y{>iht&J7#7S78}oYQBly0UHQz^~C8{AAM}98Z~* zSx{9p$Zd5%%o+!arzu0OboQ3qioe=9XzaH8>V_|tH*b`8Y=3#e?1%j}$xGDfv^=F> zK=pzmsz#WvA4SD1_-Ynm)(ifq8_}u( zB|6eGw3$<01&4WbOMG;u=I)2DXo-gU6^YFjlEc8mbTC**jL@7(-p@ko7p59wAvt{E zDR6Uco%K)))xd19*oz{#ye7eQ9As9FjSTR#neW|{K>g-84l zlihWepaEbqD{dZ;FjK;ns}3$tqI!LF;KmGLwKE$Q6?Hwd{&&F8JIhwz2$@{NN6&ZSu) z%O2NQeN(^D%tPQVvIccIOb=&#JCus~6Z9=Av54G9FW~WsKKc&j{JmN-#)l#tg*aVn z^@@L@>59p^*x!@?N@|8_{NOYav zX|Y!ts$rlvY0L-!VdLGV)x83Y(cIR6Aon~Alto0-(_vw^95e{5wjmA-lnBKEVsiN% z1LUMo%6UW$e(TBcS?JmZdn8j^IpxHF9`w5#{a_fh;MuH z01q%{b&Cvw#wCdCn3Y5c>c*1E0ca(FL<#Z^1CL9HDZT?-iDg(@DtLtdct{YXJiD=1Vk-&n;_X%IkE@21e9eR#+qavab(mpQHE`5& z6Yry5!J>$^+oF>DbSaE=PpMfl$guBYD?Y_3LcoYmV;4S zVzk3=&h-iCybTBT_tFLo7&4hkB+slLVkp~(b&LlDR`NXaC4gS!ZigTgMdd!l_qM@Vb1dnE{7vLFw@01~ko z3NCifqUmyF487}H>^e)!6N(x#g@V=x1vSeeI*wbiVSYWDOxU#@aS)iK3dL5ikn<^} z6}Va_2TNFpq$+er+t=u8JJ1}Gly%1ZpeHsRcq^AC>R9Q`)q4|m&glM7`nDsi$d?nB zi?})6OcxDWqwf7SuJYT4*t+gjG2t_-^BWI7-{cKeXM z-_r6%7fu~!^`zup@7mJ`L{YLaeYQWX>Dp6yX6whGIpdCBaBj7|_<~-R-zn(;qt61K zY`)>#lx6Q`-SNKl{<4Se!#P1~dhg%iGRRCk(y=(9LV7$Z>{Q#MYt~K-Gu?b+cQ@~a zOZ!jYIx+*C4@4S77L@uO$zK)Z)#~9q-W2io;iLMud*GOLz2I~CpOC=)^r0KGYmfbT zKR9e=#1g|H@bwmfoJAgbH)ySS7UZ(+P-D){f*M^n|&Tze^S`FQgGp(!;uf{25;B;KPx-` z@>_4>c&Wb4pDn=nWk1MCvF#m&ypY6pwK?iKRDIw&U7!R{4eY(4DpGd9|4 zLopyt7!=S!GYg9rOJKziyI5&nRTW)LoeVnN)BPNJ3K7C4C%SafqbHhJYgJ}bNq57x z5m&!#dUbYbP{5@VKYdIRm!2}r*M~Nsaf{+RHYhQ>MN@b*hJ7vMV_|%l$?S0H&RUYcuvogjEqWmm-AP0N7 zh2J8|Smq^`VTBEH=0#V5!Uo}dm5F`NYMFUaYFABHG((gVm!rKE6e+MGC`cGawxM)u zaEYHrn9=0m_@P>gRI{}Uo3l`rZqen#irslO@}CF4#VCBY*@sN#egAlPoBOp(%T0D& zvyI#Lon9+8N5YF|UYn#I@T1!=EWC&>@=)6c#*_T2;Z!VzbFSgb>-SYF7uxcFoygmt@uy8)-}gzgqE4PVzjdPO!{zbY8#?vdYu)AH z%c$WEV{998x?DaMyK->c$^+BN-c*-veYJ_U+$Cyf=#XlwTF3aD{>#TbJ6zKJz`Lo> z);X?(POb zx)DK2X(^?Vlnwy}B&7rir9vy8Ty#Me1IvOE|sljSGVT+<{~m^U&pgr3$6x7V9lQl~5b zo|Fr5p5iEyuj`z2=JkL2xKzyB{y@?DtSI#~-1CE*Ki>p74a_+24?$z!mhcDL9<7}) z-63hpzK1N0!AOm5COVh~t#Z67-OO2E7(Nj&s`pW*_CGuHvtK?if`PS-O9B8g-gku| z4y)|9xvv(&;@+z@{PS~{^|sw(xeC>gqu(y(8zvG8-OH^~y==8CymBT}O3-?UWsGZrMx87w$RLWr619Fu(y^gieIiKOk)VGcw#yv?&W z9w!M2O(mCu`{MNTK_MTk2>0_W*nR#z+wQPts?6V#W1BE;BiF}ni_c6JJCL6QzEr!l%Sg=rlK~k%dm}OE-AN5>^tqn8 zyt%Sy=shxXBS!6e6P-D#=r8WV`SE_EI=_PpFLvBcZ6#T!KgwP9aO7PFs|tl9=lodA z=Udd@RS-V(-0@)#GIYWua!6ZMwvGAojys%{+wr5K9J>pCkt~*`OQM#=ZwE%lp~(M-`=U%$^^&BPH0Y zI??h`4RL!KwQp^|cvcuLz9p?bxDeRJbTDr(dVj}{u40qXnMl@1{5hBA?59{1!4DIy zt6BcXzJ=&cG-WnkS~|??b;ul@t#dv<2}A~C&V-bWa0L`)o}3>QC~mi$?K4E#`L&1N z`#j>2{M`?96|E#UMz%$SfvE>Vb^Y&~1^9;UYy_F;0v6+3#_n5>_=KR}(800$wO4W0 zt4DFyT8SF~(}9m{R{$jLXg90eU*ypy_i2CVVLK?owlp#a7F|I^*s}5*f9qqbYF%Za zN7$hCurzXoeA5ClZeCu2d5)8ASfgTT0+}|ERlLla+;!o%gMJEw7Sz%Nviw4p{jxmZ z2V&a|dAKYglYg?HA~ztp(ci|Ji#C#X$GBS{5I2&4h9}@90RXOzN8zdgP+wVb8@h>r zG;9fQ_WUm%FzJ?ME4+eSn+>*hg05jum}CiX16V^=J_5xk4g4i2JRjMEy;+!KY4P8! z$E3Tr|MKl7HyZl}@AF^fdJr+TFhan!&bbXABvN_bOeL3i|EG-5`Mob_{m^rwk4# z4N0AzhaZ~3KP>5{rL1YH2wX#P{VOQvqs z#$A_>3w(3b<%PY+it978GnOW6i8dN3r%Z(l{6@9G2ylp|wU{`R)AR_brrjwEFL+jU zP4!K^{-pG`mu>D>l{O?N=K=O#+j5+*s4c98{1)zOdCht*l*G=g|LFKIE%LWq=I=f< zaqs#^P3w!Kd(7A#>e2#AXbo1RdjqSVQfl>=#jL;Ji{^f!6C-S5EX=VY-97ujcjyyt zt}yS?!&i9gt2F9}m1jM+n~&IRd&$V*LgmAH-UkO%X}TT*nomMGm$cirQ}!*x_5ZX4 z%T2RWSZ$C#?)|!4y{lp(&1LYAt)h{DEU61GbYG}|PcUuvOK}8TG2x!7Pa?O&WLcRO^)^AEc_P9Hbb3QlcyzXRP^b`cFXQb!@beI zA>Y-3Q;L$5a^EwuI`93uxt5dfgpS86yXSi+4K0a%O0%bv#fL39*o}vF<$mX3@6V4o zn0<~jmCla!n|_~om7ni6X}0_+m9}g76{dN&vZEa_KVp#oVD?f*T3j~T01W;KYQBn`zY+k z@(&8jo~Dx-zee9fx&0k0yO#YK&*LDrVC?hL{loLT6pAMCc!RU!_Whmx?dIc^n5^-> z^W#tHdjb@{h4Y;T_A;`(_cfAKsZhEKKed2-@NauWUa@sO8QNCV&a%@(bU|J zxnn$%>YcHyh~&0*U2HP^PH(LuniQg#6xlylki^f0BeA0M>PMqIz$uh#=0uCDjr+u= z>%i<|ZhCT$9kJDV&W}C8=e$ic=5#%}EI<``rya?CQ!9&BPTE4*jxE+maP3l$S@Dp#zt(9~-3CwMB2Ibg zR)Bcp6b@btDKRWA$y2dOUeoaaB)xVN>^&h)BFEPyYCIud3T)qv^d9kv+X@on#{_q; zz=ZII6(jrDPrlq`S|>8pCVbFnigW7!zV1yJ)^NP|b`PK7G53!OK`z-d(KiCj$XU~L z{bR~Dukr9r1ti{7siyGF*G<1kaHO*P9&eYn`!>L8zBv^TRh5|dpyIwTHs&fI@Jp4m zb1WhH82#k37)Hg=7#Hbcz}NV+&>2_?&qP!474#Lv17d#pC9^&;iPPEC~rb9Kn4 z1|;_s$NNZ8QrbxP?TkAiHj@5%YmSKzr-)P72;Wgjp6p`bjSr@&6PX37dBMjsS>P}E z7jd=H&?IFIt=v)#D*Kf!Qp@CIH;1|wMGo8P9y;A$Qu6WJu$GxS^NTk=EfeN&MfzZHP>H47QiP@OVCNy+$9n3Xw@v`>7p8YBhXr?kQ_V%5ms2$GIj17v zts_S$cjH6G286vA)>0iv$ec-V78^ACs@?iZ3N}lybJ?sW(Xh*p5?C?3902$1P0e*{ z;Rh<`Glc?mKG1pf;x{HMX_bB2qe%67N&Fo1I{`-4Yx!w09`4VuNU_aa#s#-39--yT zVA!R@SlnX1jc&%u|2UhhSBpf19Z)$$nj7)dl~xKt4K{XYhOYK44}!2sDo>%7rWWth zs*`u~y}iT+eHuTu!;SUfs^5f+ui#|IhOixolK133gQ;tO33o{QRG9Zo!U7AvTP{uq z`wSt97KH>&)$Lm)BFc6Y3#hWA>=imK6@`X4&q>vLkcLZ|hf)T+guhp}!pYk7zLbvG zjv{H1qZ-&OKT`Icn6SvPuWF6240^4oYTQKV-jwRMxFW@@BPzX-v@gs zlo^nOvp2-4HTc}fm*w`}U>qgByB9|A_ziiTqhW_lSF2Q98pDV9DOp43UxQEj&=rZq;r+~=%kHlB~(Pzf6lMvedeNlhqekWt$l%P zwk86>hJ7hbK;o&$Q^Ah2X;fQzW)c#+-$AfsP3-$Rt0zI$kyI1(*g7akIew#DY_x4 zN`?d_l(f~nUNTesCK>;6qvU8SJ~(TWXAZV%EG$2SOk4y$E5L_sTM_a^^&O4u7|^d* zC^#vFP8R5~Hix|$h$_)0H!*lAR9Zhe-CJz?);dbcA^8^aIcv;BuH9{Mks=M^9+G7C z=DU)w9dd=g4UDFhau0=yxNRmV@U7MjEKBJB`1H77;)g=4Wd((3rf%}r+Gis>W=?bx z+CqEIcb{3VynK@Gnb|OQT(8qs$jcVPQoptn>3UEAc$;p)V#b7=hO$Oi{DtsqnO;g8 zdv{3OMCx3pd_nW%Km)PN-lXBf_@sy)G29`0UEWp$m9LrZp8}pD8)w@Z4>8A(#}zie zV$!j&+)~m|x#Nt@yR+f=!bQNE2A;%&@>j`Re43{8^WTidDI39|+9a=2Z>hCnm=W&^ z#AzHR*<@!rHzjx*xsN`i zqt35l8?Nv7t~F};nwfjSJN)RU#vzq+R6kS;+(Y|?GUjB49C9|chU$N!Zw%(9!B%FN zEOA?iPj%x6=~r^USxlm&`OzDRXw0vZ_qAWA0!cMz(!GiiQv{wruRFUch!s8^5$9=W zn1|<+>R(#?OSk?wSq#E(H}dwGVyv6mxgcR0eenFI@~0z`Ksj_8p@Og58?XQiPh^)h zNhpV`6mIbhwt|0{389`k)J**X;s(1TNM&o|# zk!xhcZT~X2`O=q7C?YIkisUH?*hwb}tHarmh2-m7u&Qfc!nw;U-VrD7AKEBJK<=nM=mv16SLb*z`MtgAr+p#2aWXz>ij_!p!3%-hoO9=taft1pL4?_gv z-4M%CA#YKPl%4za;}sDYs2|m>;DkHX!pU7QJy!PNK2Avsx>a^zCiebb?sJUYVt7fT zNcJ!-0A>x#U^A2^HHV|ZmUduySi&rdK><^w{BhRnaZgA0M1v(Q3#-#RiVB7L;#pty zo^&qBAy1lq?fLR(oUBPF?c;lIvs#POykY6KMP2ySmDct|fI)z4^8+r$#tu|f)96z6KBfID7cDcKMMEa%te^hb>AS?qz)gPs{hl z0#wg^Y@fUi^-}JzPD#gYo4b>)EG>!r#H%uV=%BEjE?L-h39~2J)elErNtQ&N#h+4w?*y{98WInSZ zG1-XeYUCm(!nwT@jBF<#;HBN(>tq4<(w!*H2c2%62A?EQXc1NvCGpO44zqwdOc#_& z>)H87L*33fo5l(C_w&6IqdLk;G4rRMV&JzT_mG$rd%UK(?Nze0I_!KqZ6Ps~41-zT zqH6=qam%^;0Goo&a!_*)$ILZ0_g)sWi;#o0g+VeV-cTj$lt48XGoz1G#1ipjz6w%) z*&}zY->0RUD(i{U`D==gorH(yCcp2`q*rP;qSh`=@P^>j4OpM8ywc1V_P5SAa{0qA zpJI!V+J80DiFI;UM zd?#|{?JVPMtyqtk;lNWNs;?9N9-kb(5{5OZ&p44bnK1pL{=lyAjRT#VLtjT(K$1;| z5@qJg!&v-nBe;zDeCjOxjr(81VfR`iHolJD|6;H114E>E6n(-&^stFvyf(5Q`MK6W zb!P2qRq<0>jsqSHm&3~7_lev%GZfoDE1c%Z;N&`d)Z$H;8d}8a7?~3!L*dJwFMscf za&JOP4os=pg}tRjM%ma0ztlypM(};Q^;J*H=Pv-Kk7ykBRY*vK4XXqgyZ{G7*ZZzf zFnpbV-Pc#)@yI43!n_q+-&izqM5tJbX=v`-rliJ<2cc{0 zCrY^=wz74O$GNM=Pa-|hi3`v+j&v79%+}(K{&^?Re18;PYI_|%O8s>@iVNEd7E%i| z@(P(nX;t(ODio=D!s^}?Z<%g+KN}b5kyMs&$ehU?PeY$@S|~mKGs^E`x7s!p>)s?g zH-$^wTt9{#h5V7sTC9z{r#U|0ke;<^YMEpJ#qI#s^MfaM8XT19*7#zrr){?GUI7_^E?L zeJlH)2uluCuaG_;w?r-~J11XHwEFh@#4vOs_(g}Mc=h0be|%Y^0PM>5<({Mw+GY)# zS&xTvE7BNrge%nT3#2+i4YeJSO-!CHvA=%ZtM1dHM(>)4uC244OL`(yT824>NrEmh zvi`#6BQEVeKfJ$jiDE2L&p3NIVttTa%NhThs82ltv4JJTI>SE*nj|A;CfF8i#dZZS zli7}6=-<)DvvQgNkdZ~P8uSRiX^uj=r9EF^*oNlNW9*=xQhn>&zKgi$x>@^@9rGZ+ z`e*U7>ikH@v4d<_Pg-Ga!Jp1a)mqNl&iGhEtn*mjx1=b>BS;sRVaV2R5mG6{YZ+0= zt@lrSO68!dqg;9#{4LeGM21+~`zODjI;n` zz3lu&0jqGin9V}{?jN{5Q}ehb!^qG)x7~J9dlhwn{_vAuH0|u{M8H$-8a;mgIzwq( zaa{hi+mS=EPGkuDu3r%A$;L$JO%GveUPYSx(56-~p2@RlS<@?(DLYJzW1%`?jk z8`U^!eM$b!=Qs*yD==*^#$sul(vu}$){~oMOc)5hBh?nTKd?$7oJ4Zx9`9@>;qFc4 zF|_m}Z#!tJuhS+h;&TzshvPV+hxFiP4Yei4nMa+(wv_MvC&)W85eni6`411Pe^C zE@%(u8s6Ifgp2VaW-fJ_=TECz6E>5R%Njvx>v6~HTCMq@_=HIqjAl1L$?l8Eig-`1i_US{=HwO&H0gWRFt zP4Zw#Q;zu6cb>=zr-#WJI0R$ZRmEZ7>i1`AdTmboDo!@hl*_T*eY0>!gx_nSTM38C zi&ntse>SL#EA}>;Ct_--^0M80Ej-VWLO=-MaC*K}Smr2DNc>s+k-sgR@*hKrk>SRS zWnPy1_~o^ah6=WpvVMFUzvnuxM)5Ex;Uw#*_KkiAeM$x!Ms=RlI1&jScF5+NE;)i_ z<$NoKIe~4*%(m6SXxpSJVQyVRq@~vIZ?rV#s8k9X%eMEU43O8eYpG^s#DzV$kNI>^x8b)Q3VzjXM5&FepQK=$ zuL;#R4I#*~ULSw*mPxrRDZ__{VK-i@%mbm#DNV?%tVB-KG}zw<*)bU7Kfy1#CWQ|XC`Ts-Tph}01x8sUjZInWs&tyy$Om9&UF z6Xu8Wc%^4F3H2|1gpN=Z*YMX>pO)AFErG9gf$!)+Sj?uVj)oYNg5d<=p%*TUih@N~FCl{_7`E-YqrXVDQLGbp+_~OAtWN+=? zcK+Y7a5P~)$Oxglb${kqkMV)qd0H#>xl7ZWYGt^$VyI3BQiV}8b>IPOJBKsT=Bjth2v!`ERgA%dD(C!&dRL zQWr(n*>brNoHZ#2?FhoRu zQ!AZ3tZ>v%t@yHsOM8t2)4KknxTrZR8p9dC*F89WJ+hQ+ifH6ol?|sFE^BTM{!X6q z<;{)W*J_VY&We2Jk)9&=vA^5D`>fJ;etLT9pk^~u<%_IawWs=js<;Ty)ht{t@-DTcqZzWL=TL`9Z(W%Xd1H_lE1}#c6Im#_sg&o6cFq zvd}*hC^3wv=;{~6OFlFy&dOgL@^)9WBXexW)noOG(NkmzuM(~EOCTRaB z0i~uCf%M}nmrO6@NX15h?9Z44_upZUA->mVr|j)yw`ou#`Gzl7!khkac_~$)NUaC` zmj0V8?a8?qWl77PgpHz1v=8+olKg_(29-lGkadwV)@##%z>!B|dDB7-ac2|xhe&W^p5Hp@Sm}A_xNGnp z0W!r%yJTC+B7a~*WzL9N~XAcP~xi36+3!a0gupvCR4wWOu zW^~@ca&T+2`Xwe(tR=ck^U>b&N-67)p!+BM)-&Wt+{l{FG%OXt;re{~@H*vjzn*Rn zi?~JehU6mU(Bwwlg&|R9AJG_np})O6`YPQqHlJ%UM~}}mIv$OqP;6UsH3c# z@M`T=k75R2EoBksqK9WB_I1U75mXV^@BEo9$7S8p<+Kn|t*?hEc1p1iF!o28IHvXrS=u+8%|eJ(xSj#KD{q(1Rx!2Vpcn394XK0XNd&L@j4+_KxD z)j~zW>@6Gqu~Tv%$>U+lz3x@T4hg?0?VB%Uql(cfL<(=G%vqs3Bf~Mc^+0~0xPkXL zadFeTr^i59%1kNJ$8>|&8^`jcHzMYz`f`N`X^S_7SX!dUKF&XW<)ZNTeP#a~-T4VV z9mjp2k;qQWZG^unqNf()Le4t<4XQ0HPlW$jVxxXbGb9~BrBq%00xW4eis0oQa zj9#nFN{2`s_ao|vDFKJ$r!2btK84?W_qDMfs{75gwrcZ4F%W+|*gVlFgKMmrt#v-@ zYOPw&{{Bi4mXwV!hJTeZ<|Fs1p8W5DXz$F0T2j$Iid%dwS?;OAFTM5^e!UdOtUFtw zws=+XRA$Q*-B!}0CJM87_bBs)?6*F$lCXT8_$>79&gS9q{oc&)aY>I~(tACTZ_zyn zPAOr#Q{7;l?fbAOY)`;D_6ZF!*6bS!L#>yM?pvg_NZ}&A1W9qLCyNh+*R9$&Hock- zvh?-br_5n)y9B3t9`0$dMzofpz zGT;TDachwNM-0Z%Cx!8z$h|E>)5OEiQyp!4il5DBJu$-&7O(0SJ0-R>UN_UX=L{$G z7LjS?vo+gUyoZ$3SMZdd*RVpiwV_#{&mbs?s?{k0@t2pkk)J~i!7|p}XH%}2{W)xG zsZI{qzxE6tN<2Fb{$+zTM9`~x_*s5qsCB&tu)S5B~A8hV7sqOs0(J+ zCW`@CZKjA%*=+vNW8Hy3oivhKfEZpYo_3yBoBd>^pi8oJU$j*XiHI_~okjf4*H-G5 zU1RCwp>~Ya;vN4ci<$(CqLxEb?dH3a<{pD*WX!S-^)-wpt>XzW7^pOE@JC#R4?Y#b zJlSEQ8Ofd1uAurXsr#{O8mVwU{5!eyID8ROxQTc2{T-P({S}-amhVi)WnHU1)2RT9 zgK-~WEu6Y_X^|I_+5?NT^abgy;6B6`6|H|oeNQji&|Ae-O{F&4C>gU13hdTYH(IPftWeBJL12N)IBcQN zs(V*f^8P@sV=o)0%jhqa0Wz;O>RubF?q0`(5$lKI%NWLab&5l=$ze3!&guS}3?s|k zjA47J#>kVbQnW2EU;GaGt)E@SKxIz0nzrS2R|^w2ILBmtQtT|c7LS@XDD7T~J?EF8 z4bfyfF`VQCKQAV+eQv(ElL=qdvlm}xYpYg2iKaB?zi&#ZK2r5#EpKWlYo8}`6%a%z zBlmc2FZ#Hm$fR)+IqQ>esYm2dc6Mlz+-mk<#JQOF%JSH34+BN$nR|ztTCn9EPyTgW zX{gRAiJ|0bpcGl3L^Zmxepn9*W`}NRL-yV15&vQ^=m2&!*cP>C=SM{KO z6;^>tX)Wz-fEc@w5K!IB-5`|RD+nlY9Ml^yV}gqy>>(kOx|tcTiXggh2kN2Mi-3zD zTma^Fkd+k7Kp286oCR1$(+ALtAiyO!F1A1jGsr3{=7By|=_^=%PdAktupWZOV`b!G zcCDjJkySzNs+;S!=dK3y@qkvw%G4CHY+6y~s%HB2jPg(DD+8*ku==l73e=|wgM$Nq zzl?lQ359wB?Tn&ARKe@1!q8yw(mhmJIt8@$euN4O99Qe*@1MH@JPFEHBX0L^!-Fh? zW1Cx25LnalW=0zP1(2yZAf@PL?Fv>9V*{3EUD0uQ8MEC0C=F~-kQO-z?4?j(0(LTi zIjcBo5H7&T!GlXnNyav#1-4c^1s6rpC}7Dl0oM;Y6R?#9WQpRS{ADGPbO+}z=<5eo zfCWVTS@&T7Wyz;RWQaa=0pRTmq~yHj1_t}(WUjn`Xy4X1=-c;73?zama42#;R}F2n z&W+!pivf8hD+_0nr`Np6Agj!v^p!i|NYA+e`U}{dSh!tN9_!HM(y9^ZklxUp{I{}v z(Q-h<1QZGVL(V4r2gWkRM1HGwi1nTUX#uEiVu97pwgf%Bv~t?I>R7sJFM9i9@H{nh zJ}T#(1s=h!XR=Df#YUbJf5N8M`~!KrnZ**ri7ABJ|-wOn(bOK z42@&HPufmWwX|Wy1I&6#a*X>1o|Yq^Z9SVQAqh=-L>y2ehH8{}f{&Kb%LDUF32|bF z2n9PUM(r8krw@Izq*>~DhZRq0Pam4z*Q!~!)r|#M)&l{HFP-lvh&~RMGl5B$LUm%g z{eXtX1hog(3X%z|n_U(J$nyn$6r`970E4$2aI>IOhv1)f3s!?8BxN&D))im#%T`4$ z=xP9U&sw?IS(!UtgHG*c9~e>u!>3+g=2r650(k&nU_jRUzxNSXC6FL8>{ms!z?tC) z37~>^=30N_EifQ=0T}TVd{T^Ip&K#)W&azg3oIY9x?vk}2 zsp=albk+j!{`atRhOGZB>*u&4mpLGb6@=`>10}0^^NlZw+}&$}AZJTX=z8d>(~3LOdL76c?z>ptY!{tU>wP;|PL5 zMkX+qM@sNWGSmjI_w5MsR8VNA`%is>P9kd~6C(@vYoC=@>@ShNJVr7OAKZZV5)>m^ z1Hn6i*9Rc4C**-7)34CWAv@IF-*+ickmAS-dW;Ct7*OCf7YP(~bzaY;2a7=07|8am zfdsKePQdnPh&Bsgcc3D$NAOBmbeTvqblV4cZIG~QfecX6-&iK@@U9qiuMOJLKr#Oz zt(bHJg#c+w*@1j`@}Gn3RaN`;lo6is$f-uE1cP;X)@9{Q4%DN-KXrLISyM+l*Z(_N zrd|%YtI3M0e)t7_vKNM7>kfdVbpQ^uSo$v^stA`BD)h7NLJ*LS@LJ3y!>R~mh`J2n z()-X#p$h^XC)U>xLS(Lb(e>pXXh1(sF7yXPErWCdAP&O5%VTXOmv|n!{w^lu>}Y5F z-z5yFLRO|;r7P6Z#6;7Wn@$MQnaZ$Uj^rhgweL+QA zkljBr*WlK{VZ;@j3?|qf5u44Vq5E90Tu96inJaKi;HAeCM=TZS7LdUwq7d*K5B9oF_lN(qd9YDj!zz@y!V_?y=p%)`hF~`XFuI1VCZoW5g{}5$ z;^ZZCHv={afC-QT?b>t|24&c;;LFC9*0P|R1lU9YW{yUX_!}|`EVBKV_tj`O{|M+N zdNHYMv~Jxp3V(^+Jmr45K%W%YPXQA!kZx1qiUtDHZ}U95u(mJ* z0MS{T4d<2lyxf3UzY!xaPKj0@>IL{}RdS3w^18ew2U`i(qQ# zYg9m5XxBQDmb^8V7~=@!(UA38r~F8%H=6wA{loBwFvrHE>;GZBZ1iQKrvURv|2389q21_F(F$>{{=i?SB&M$`hg^9 zoK7t0s_5C)Y)y$fW3)gtB2ZG`%{}fxP;|rm&)s%0I(sL`%Rvt-W7(zNG_@u)ZaO;G zYcpiM+HdX)nDEf;2kfH%53N^s4+O2(#F5$!d8Vu_+%2woj}joP+r@1R?d{Wd(5D0T zYyT}ZU7re;KPL+Ou#Xqfc3u=GO*A0eU{0&qAmN?lP=2`Rk8-u3On7opx`u3p0KM($ zh~*)a=0@@7Xaa}PlujSaTGMZngRi-DCNgHAHb>uoY6N`tT0@?AJu;WaRI1(`E$CW3#*VT+#FQsUrQ;=`?h8g3Ssj0`i#wD1+s4B6*Um)6n$* zwh0ivG~^wl2Z%3y6?4n9Evnq`*tRpdc3k!-v0ojR&8?5kppWHZO&~e+x_gwa7^FJH z(k!5_30N_zjdH*8`;Q>hB*7;@TZGln3wqvEPPA zp!_>%|Nrl-!-bNZuOW%`a4=nYCU=Ln8*G*zLP{>sZ0N9Bpf78{y?m#%M97tZX z8T}1c*B)};Gj(6CuK1niUg)cf0Xk3Zt%2xw;LGTBNislwLC}@-%8@L;q~immzJ@l=BqMWqUQtfJoq}#FV7)*>T`(;}2Ch5IP7f~fOA3Mpd7w-p@jurI z9Ekw|bBzHe|D75p-Aq8lTv>&|OP4pY)5Q-x5(Doh7kdlH^ez)y_tiV`lK;ul4R@1^ zJLGZ9RC>iOr9rEQ4}FEeuExdP5S6Y!2vbh*$qsGVidT`zc{A&DTEt}zh&O{IfV zdueb5VB}L{hnM6MUIurH+*U$UvqLM8yN*Pz65+g1$z$ zL>sg=mZ-|9|KbH~fs>lr1<>jsf)f}F(nHODmIL?=IjG;UflTZvfWC7DtMPYI9j2Tb z%85F97{;*RO~=+iG6H%|;r*v@kOkNnnRq~MZw2`>)=M)Y*PtYUZUG?m*%+BRLI4k& zbSuaM0YNXfnlL4s6m<20wi*zQ41)8pTcKb6^0A>%Gy3Dr3<)U0>Drm4(9b$JbSdTw zp~(%9tuH2I1%PBJ1CB+J?F#MUxds&v^a+8SkIl8fM&W8}Eq)%p!Gk9Va1|)P$Q%Fy zUWAC~75e4ml?H&gi@=N{kUUL>?UOj(Ma=nvJ+2J|(+_g%|NE%8P&<%Z>AK9T#K4k4 z2r+cEUrY}&@>96tH5XZni-7K1FP7QS3UF;|ti6hCmv$pqA<+eWnL+nl8zYdI>vvNH zkfi@Er*Q8XZor-ax`L2?8tTYoVU>fEc%Z$R{U_Z-Wo*7eg-a6=u10ED);GqC~ zJ?!mK0t$!BTHnyUC%M z07q5XY2Y0>*K#TuDHGrGpVKzkQfu9nZsbw|dGQ?su{LK4RatKr1wd(psb@BiCV{K5 z2K8+g$d&_XzE>HWnq>ZL=oSO^e*hp);x!RHSM@9%MEN&>>;<1!fa}gn;mUQ%$iN9g zKd-<$8(?j0=i+GlpN4^l=YR~*t@mEtNwDs|cYwaLFUDhYUCtFw{(^9~DfIDx?H>Rv zAGEjzK&&t@z|s5nHsY)~bpxjb-qqJiV}QJ+#`1j}pWwN`#((f(Zy7YHe_v`YCS?m5 zJ_CJ}!Bc20KJ@)`s3?7bX=f0G;B3c=dYO&x4p*V1kSS9j&f<$WXQ4ghRc z*Pplt{=RKvxNQ1E-z%3QAY&I`p8nE|aEJr^po_Se#x)77mje8KwicmJ0~{cN*!YZr z(8Jf%1FU9J0OAi{QRy|zl0AZs$Pczg$V=tG)nngvbhW>CeWiW{L@uHP$DPqg^qtls zAfsCW=p;i%8I|#v1wC}DLbprE;9&rG<^PW|PPC;OqZim;Sx9Fn)WS#x+6e@NuLD!T zUl0llUSa}DzyHrKfLHk1yXe3bmqa64(=qfFz7PNzb^RrfDq%7$f-V5OrvH`ZnE)$0 z2QFPi)cO~+8yd;A3*dml<<67lQ60VE2q3TcKtButvkhEX(6cSQ_?q5jHI4x@01cGO zWBupSf+q%fff%@|BKoVat8&;&xx@r)M$pqu;C%%o-hgyAO1;3hKCs6RdaL#>e?BiTYxh3>S^>kAe>UOujG{N1JO&1YiI(aFs+z{h4J7eNy0X!_Lv!9C&?)v}F!v z86|n8OP$l@m{mXzH!eoxWMT(dXEMN{ICw?=29Hch4Shrx=6kJtZs2eA+|Od0Z_v#b zR3T;qtiW?L@c>pzTyu*YJsh%S^1y0|%iNJBm+=iM#4gMkGHEx!aha=mYoaj@-JCCM z$MqWP)Bs1H{N)0>=vcHvw;ixAgUn=HC3?aLUzI@*kidV3Br;&TwA?QG`u8{dJ7nUX z4VbvUp82N40((1(!>aF~9r^DJF?cwTx?#II#=#|y;FRH2Ezm$}LMp;VP4Ro`wr=Pd zL$JcG1<-$EXE&M5TIdP`j}9{CVY_zdUv(-x?aF)cd+%G|Z#>aA55bd{Jn5vO2TmT8 zn*HCmW$^f%A&)z@s~2?l_o7nJ$9Ey%nmU*+F>2}7WnV!T0G=S^g@p}-gZwu!42opH z6{a1gqT$?cSi>(8cN)R*cR&^0g8!Ty*b@LrBwhaV-!3|G(bK)S-d1yx&1!sUv`+P6 z>OK=QPS_k66TbAuKc1vCB zb3Agt-yy3d;=45f!Mg*$Pp9?BvD+FV(W4#e@GuB_qSD&&d9aC-+M(7 zI?5cB>2y}0_X{`oRwhkCP)Bb<#t%kuV^$Lqy>V0WjLgG$kKZ~N9}LA^@vG=+E#;XJ z@7+=2K-Ne!y0hmkH^4-HP>UAxrh2+m{W+4^YLeX>ro1AOfzPhwD`jE(gaY;N_Y~a? z9tq$XP{VRy6on?H^#mPBYf!E023w*yX2B zRdGkhV(yqz?=~wsSduBTsSrQ%qMRFu^$E+DcYkfTLc8!zT{D#DOt&<(H>PNqwaZP0zNwCt9b><%k z?CX>~7VSAy>dwd|7QdSjvTJeo(?l#|H;k-HY@E#9aV(2GL3v-^awYq(t?B-}h?=_s zjDghUQ%WB@H@d11JgBKWQHvN_onjw8)rVIM!aW7@>$bN~MX~tc$YGyY+fF|@+T5Ny z>-0^V4>t<=wK5yTTbA_==_6gED{|&!km}Y@rWn2XhEutq*_q_@%?EcKwAvPUF|MO3qZyX#c7k=aVxD9lrQ{T{lt%nv;}=a9pZwtDSQ zQ$C6i)Q;xIMY4adEY2;T<0)Oij~f`HP~V0P!TUVKA_u23=uDif^d{wWu-q%J(2$7T zEtX|teH)(q4Wcut#@hHBrvtN5dA8Jx+^%YjZYG!?F8%O zsW;|+d-(JDR8^)8M+4iezAFD4E^qPtc@%MrzBb%SAS90T{MR|6Iz9J%?=1H`L8bVp z$1ngF)8C4Qi@v+4Ln=Wlt;d?&(IVXIxy`t(uCL$y(#)57vS*^`Lz3;~3_rDCh#zFP z-AIVbxc}|21cNFqO%H{A)+ZzqPB|oZAD)nY3!zd)&yW#DW(PSg)txA1CL-T~_|AOC zASFRt^cL1?gJ z<$WN&n)&Pd0sAItO|oz0Y9vKng_Z&9?=i{Kq-47{9W?B#S;{j$l9+>xwwY=zgGACp zl9wo&Q&@6t>h@vArEeM;xE)cvPu>Ynq%ULLkY$=$j#-GaaB`$4O za!#4yH6vC&=QAuv4&53!8{6Q9-81}dw_LeD5^^CA5jtkE57{W_PakP?#Z)cDer*8I zQ(-(WKI$d0aB_oRmESy+J)%Q-*Y%!LcxXcbIdO7s4MJl?e8B5R-{DQL z1`8K!184Kzi*ckV3J$+rmiG(jCyMzq?`J-dvf9VPlD3P_8jHzv^h)KNx~7fBJz-U* z!Ux?h3U=8iGO<8s*f3F%!v zop)h``nS6{5gVV+={sKB-P$nt_~J7u&XL}8BdL%=}@_TXU-r283rF&<`iyTLrFSOuD`@g#* z+rTB;@n`Zb;a878b#NoFp)1+FsPyz3kx6(?2UycOpV-S6wtm(X+iuaCt)tZM{$}m= z2^;xhx&k$=?J&B{uT5}EJqgbfj7Pvg-0PpgIQa9BS8_IB1`MJwN_P3-+HW{cnyX${ zU`HJuklI)0g$|lZMhY4(sCD9kX!321oFyn-Y5@Iv?hv_z(yLZcaC%ns9v`7TOAo^wQNfgTGUK>rG4T}$b;x|YA!7f@XbsLfp^B{c)hn3MjJ zg3jgQTc0@7@xSj%@#X=40yza>)a$Yd^d=P5mA5iA^_(59*SOH?^@!up&y5;1D%C8j#Nd79l zN`JOA4E_1xVye!-4hYCm0-0v7$^m594sOs@GQKw4pu7`oc910ra=;V}D?6}ki)&}+s@~7H<1rN|#|k1t`rio+u&8T#yG(8M zDye2bPcDI{0=PC5h06@xi}JQV(9;-A#eDq$$6YBR)HUfd7Nb9_cJ?APhSdQX8CcBIh8$STq(^|AG&NECKjh7J z6xu4&J_RRtKahSfFnc;!pNHXu;W^S6K|C&ZT>hYI2%dGfqHI&k&j!fSSEC=Dq>3G} z@jfOdM$O-lEjcGxE-R}b(f)%-Q~0P+UOmOIN#RrJKl-0$ZuM*SueUs;vl?_e7oKdi zOTw3`M5Ze&BAs~noymjCvLo$&d#I(E^q^L_t`ZRk``WnEN@Pb)MCMn6$F_*$%pWOn zys196)MIyXH#?~^Hma@JE3FP8j3?!;+)gl2auh=!3pR~LB4;o>M(|{NLTQ0VSn}jd zGn_t%hQB1n`($??;d?c9;?y7XcM^vNR%)8wbn+3#A0}@9L1houzq1_0ZpvZ2Eorjd zle6$83Av`i%U)I4I@G4!8f{$B=qIl!QQH^zCva)2jt>`ITn219OWdaI4ZQG3WpkJg zUIxPD1gazgfn&2gN7>+9V2dZqV(~)1l@$%~H>r@zVtNgSK6|Us!XrlWSvm2~ZsNN0 z6nDei8@ivYC%%hDp6@2p(&mW%94JkNiRLHC_3vcUTb4s%ybUT4di;4)B|) zu6ar`q#x6{Vq%1d8ukK_fNr@Jb7^1N zBN_a;{_j@J`DL^bZo?=;DI|mFd1A7r&dN-wUG|dOBUraaaIF_N9&h>R4)dqAH%Rzv zOD2DwKm9Hv5<30vL-u=lP1MBzmWOXxdQ7-!BYoWE*xq8J3s4W?JxYH2?R%2BR5zn= zt2AnUvA12ikLg}g%S%$f&kR-}%l-%!i!l>XREYa?If#;j7wJ z{@J6i-e$_aduIA<1>c#jmvrO3c;4Fva?+2C+=UIeg>C`LJ1;VlT~h*r4@b`{)d%0s z@0lr6HIa}@1)L#+{9(=*HqS3O7??ode)->974!sQ3vf0zy4E@)$M*j?d+&f6-~WFc ziAbTM$Oy%04=E~?*{M#GNTSoyJ~^GHA{uB|84aP(AWbtxnVrsRswg80WtK8u{H}Y| zeS3d&pYQLF-tX5x9_PBA_w#!0K{W&2Gf0>(Gdfp;JOzOQd4T2;yeL$sa@hH3>i*(| z4w}$FAq*xyt!u8XEYPg!a%rqL=Ta@zA4Q8RzMj{zf3vNrL#dR@ZhOZ@SL zy5?A=HI(~>ry9tfpCA1e^oMC>Y+PqM!Q-6!R1=n4*ZI!qY2THmS<~(-eP5lYFcmg7 z@|jwBhJek6pK<_mhX=k|z?_5Le7wYrP;x~EE7GA_8+9;qD@p;(+`92Y?zdu5fnw33 zs9Vph%UNl&%2Gc#uIjg=PF!EEyU<6&JZ4dgjr){oGBmG)&5g06-s{KxIp{Q6vn}<> z^mU2H59cap!yQ+bZ8R2Jf_oeoR-eQ7AXMI(V|BN`b^C0|?*RjN;@>l;8kH^&uijls z4geDZpF!pT3!mV(?18J+GftfzoxQN{%(_j>j@pcZR_Rr;wy4CM9@}(!>ru&Uj$PFc z*yp=aQ!yHv9mO2>-tbfKBCOlwSn$#JJ&O8yiO2twy5XRveBaL+d@TFaR(gk{YNRx z{Jp56aEY>xbWJ0ibk!HQ3y|W#E31%N$^5@Jm*9*4~E(}c{s~=-FFSjH}5WJP~ z=7F2}jTZ}VoYlMeSY6i6am~;2U6GrcBTMy9`RTk&O3Yi{_us;IL3a#(ZC;zE>c}0q zlGflKl*anwdxc}46MyiBU99%r(CB-r;h*kw3+Q*8ZJk!<*&Q`_W7EuP{9QXv^GL1Q zz7yl`T@>vQm9}ktT{7qSvE&O^3=3ydy3g4-_OFggHY*+A{`m6He7CIAnmUJxk<)gX zyiCsEZITVG2=}<7c-E;<%Sm(oe7~ThbKbW!Zr9!YmThQs?z-P+uBY41ifiw~_1P&M z&PI28)LSg|yiV^`m)M(2fvck^2Ec?=R5Sv~koa)2Z6iv3P3Q+3_yDtE3!v8aZsxUimsPIn_1y>XCvI9f=$6hx*N* z@`ly=M7yx=;ZgPFG8W1+#`FdjSILJh@BP&p=Nvmz@3WTZg$Fmgrv1sUIrHgROla|d zo@lomzxznba!;^L&&bpGsvwT1+kL#){Z2&crYjSxr&qnY&-FN+a;!|GIfT-z&*A#= zuD`3VwUd_IKB{!g!Ow4;J&)!+BeYENQt7X#MHYArnzZCRh zgFviQ#n!hdojU2}h}y}~S2@g*=1w;oN}O%`hazciO?vUqdvy_3_E82>T4PS#at`@3 z$?2oz@dQ7gk>=gGZqyQ8V}~ck>1Osi<0W{jDi=?dXesHrxldPr$29J*zMLfk8x`}N zp4~R*8WgRzi@GGQ-y&&{?Djx(q&C}lrglN{&CfqPTpG?9ANRAX-Dtc2o>bbDE)S27 z;RlowD)W>lM1Gk*b)$IC#|IZG@6V5keAHX?PFi#B0hhX2{w!_}qK8{l=DK zAJ00q%!zvwHmSrm$b&C_dP!zUpzS<4%V$SY^yOD|6<4Qoi49_NYH~3Y8OYKv$@~b#kXyj+@if0KElg?yQuEKf`WS zzH#f%gV`?<{ww=$sb6p9UDl16x8C=BIyiHC``Rjv9R(uquLn%DG@O|8Xr(o)Kfs+X z2v^%TW|aEvpYu}e=S3a$ICRjt;u<#FgT1sc()q zaXUE5R(>@9r2DM2&tTu}d970_5#ntNqZhWesXM!^w$Zs1pmXuut8pI_e!Vkl-r16K zd)a7@iTTToX9hFrms@w~u+JqYzfYffv&K*)$7Vvpz6&$YNtCa0nqGgqW727>yrbuT z$9l_bT)o%MYlA3_eaUY{Oj=n|wfUQceaxltrw>?qZ7VXLte39sxGX}h{IaP?&#ZoJ zpPn_ohf1f}>s|Q%!@tF7LrzDWvfR17ogEpuBNw?yy}4OXJ*h%$`_3tfhes5xzdb)e zCFz+<%h_g~2Y>$CpqXNGtNnN8{TS*>i&(+7+~`eSx(x$*M@2o7#`R^KXio7zXtkZ^ zB);VB_|jk3t~v%eZ9b)R@vF{;mT}t_ht=g2|G3ihHgHCZOO&;hR>Y^m087;oK3f-B zYv(UoJo$n|?DD}E@?dfdE;<}#Z1$zs9EYjHR@(Bwn zl-3%1_vCFfPcrlOTITv6|@>t>#}I`9<`$&+G1CXYG0H?QgvM)2oD7 z=P`$!ZjZk6)p5q{X)EG#Wk!zF3Qpn3pWdv&_nppPUvyF7z>W5;3Mu8w7Y}Ux*-;tW zc7$8C$R=yL#GW2U#W%Nf0vr<#-n+WfdV}xOgA3*xR1|l=d&6J(`})pBdP@vtRm>9` zmEM$JsiamImi14WP!j$yV)@!#Z_*Nb%IFC@;@{0Zteo;;#M;sO&vkf?DPW74(Wa{T zrU`bPT_Tx2v&Pe(*`9ZT-{QB#w5Oi!vo6L;|68hb)$+i(5h0UVtkUa}0UIYsp4uW3 z{?dEJ?vqvtqg=90mRyXz-utmnStb3nVAJyFE%ilmvX%4u-gmq*Ex7RId#8O_qS>X)sjqd`C$OR(v*W@9qufX8z4`UYXy&XBKWwEAhu-kt zIPXA*nY9<^!3bGJ!wY$=J1x&XC7x7$B)4Xo>NVHLDks*BpjnNa!k&}XEjE+!!ZTO( z`sbf^MXAR$HYkS5-BjFmUg=@}p#ko`pYm>N&&9PD)PE0mDts1OWlX#A(LJ~E#OTY5 za&BjaK3bC#ZX+Q%)q3iT)b$pd6gs!H&XJnHT4(x`GHSoYSM`lIr8vi5-n*4)o08~! z?mYXlWmB5o3CEG8H*BZx{x2f+cst{OcZ84HfZx)AxYGKW7s}kVJ|5rmG&Jyvpk`)H zwVTYGBOZ~jG_nTH(i{vVJeA9;g6^l(oo{*c324L6s|RL8-h39OpXjW((8j&sM3sKs zljkYr1KwYkij9tUt=~7IxFhA*3hr2-mu!1 z)DczU=PSds5mRI&Sa+ri-kRuSx^&2ytuLtCL`jY8)VO*xbWH236}=CnQdH|&Hz}W_ zjIEXq@#|bXU5Yc^#KvU5^356R^+;!bek!8SfSBrF zvB1Od;e<2xSv6tPZu?3ZM})03eI2-IznkpTc?R{)={DbYMX;RTz1pyxdVSlHS3WUY zeGS~+>(@2C+<$Mjr%G4!*fMs(H&NwN^rNZ^)Z7}*tZbgObfKwS{ijQE<1!X(db{T4 z9f|wSIUjj$UdH$5Y3b!@w|bAgzuopWr!Hh;_Wn(BU7;IxWG$Gn@yVUjuRRw@z53a; z%6Y@fxhV#VwmwhNt;ye6HQ9D~yH>(ej;D5H>%i)mZ!Ojf{NnfLwv~yj4ACpJzQ3T* z=Y&4P{rGX`5wz8Y-7A&$2H704&;0)7_k_LPz8z(=w9V+7-QC4hMs45n!7eo0Ds1+s zH<_x6l&;7CT_30I`g(EM-#%}CciOa|v_YZkGoI9{4YR=^DiO1+?rcTvb zGf(@9S%>*H1E#Idy?RIxXFYQ4$URb{#>d`kQ8?Yt;O?hRj(L(h`{a0~oI3WKZC!ub ztaW+EgSRH|le_5E&t@9FYuT!Q%ucWLWV+0`&Ud#|6F*R{txU|?Bv!LG;mqw-{*}=T z#c^3bT-$x$OP;G-EdONtiuO$h3XZNAVYfZ0LP4+Z&t9#0K8Gi%e$GkV^>`qoch{fu zA7^Jg*VYgQYLe6Cwub)?@i`CQH2WhF+Qr&0?wCUW9T6zbOQ zq~~rhG+RwObgKJs6!V#dgWWPik@ySacG(B2d37p{lU#UzKr8a5w2zV6+=H9q-b}k) zerfFbjl44+wGAu*-85eT|c2l z{o$JlVb2V}6ManpiPaHL>h%aE_sn2-pHTVB!ODJT|M&ALxx0^?BZL`*Pqc9~HB~O5 z(K)Mz-V5aCKu8|K8p^l2Rs$4ev|4xKGV6WhB!^u)T%j%KhEPQVn(W2@eI@tbVE}w_ zrYgu7*5ucV)TM@beRp0HzH?fNB~4irob(r`3Ybm;VV!%EuTEq~-GifYs_G||bO5zh4(qGK zXAQ%rmo8eM!Ki)xzuyRX)*;SZbN~rFyy$lQW~U@E>C7Ty-S9rfGHz|R*ZlPM?6`va zQ6bW&rl^k-arqr{w0z>>eb#GaXnT+MX-@g}qtTmA z!Rj-9Jh=PT?l|Az`zT1pxZRTTr-N%1l3tD2hXUGAkofU{-qSMjt3e$A3>VO9O&sNE zr2?kd4^HxIbjch?-T?rSnc;ztxLTQ`53h5Nl>zx#ARzz%yj<~_L@RTS1vYr?uHH*U zav=c4`hnQ>r-$HUUji^aUCj!mjU6jv4tcB}K94Uwj1c`2Q1dOY=-0ty?Y-pZf%*{` zFwEbRkzp)z+-zhizt?xjC)UCj^mX&66Y|FbDtjn}>~}Hp3Hb$~SS83q427{=K?VYw zQ*`ybdWvwejxki|4FI4*^5$r3&>1>dQ_|KbBjyB`lpHy+X%sZ8xr${nxkU_q!fzK!rnX*BGE(yuRXA(!khhZ35Y1?E8N2vp5zps^^yT&iJVUw!|f z7|>#*keK+Zt??wc+*fNNd`y`ex&;()M1x_EiTuJ)03Xo99F?mxI@YR_zX3>tG5oy< z`dGl>V(NIO)}775-g78Y3QmEgA({lAoGpptlIEd>AX?E=0E;3gb^`ztS}0nq$pZh6bCC zl8YFaBFrJSi?n}I@{b#+wyemnO%WE>T zZ*76+e@iRE==r^KJJ&UU-%?Htco^}6z2mgX~ygoh8b)Lk50 zO-^6_lsrFnL++|)AJ6aRQI<>S*GexM@pDzkK@U!HK!%%g-s?uCF^89z&;M~sly?7O z)w_Kgm8df+&Bxvgbhy8F#Ms9n_a{ZRgdY7=u=)G5^WQxTYbs{xT=6utI8t5^Vp|d4 z7#)6P^`x2%fsx;p5%#WfE!oLt<)=!ipQD0k((;;N#oPG0X$g-wAE%Fea?~(iev#|? z(#){QwkynRuiFRQX7H2=x83+|K)QnA%HX(&U0zgVYUPG5EM!0Z;IqT9E{mv42`JS;f< z?c9EmQ{QS+=UH!5FAuzBSeIZQokgkbp%l=yFOH4!_R(7FbjS@?{ZxKu^&8N?MUnWDf|Jmjz+m1;(=d`eeUmRjA=St z?NH5Yn!~%>+N%4>^FXj3i z3`On@I6c2IbE;t0)%;aEZl@e~y`*>2qP@;@{i)+mU(Irniz)Fi4CmRN9T7r*|Lv>1 z)$VP6%%I15S+Og3Tv!&mUb|)P3C>ra;{U`Owk+SHGfy*a-KWedb-Gn5gULc{kO(}wJfxw$_sBfLMy5`nDuCq<10(9Wf35+ZD3*x zURKmt2nMG={+bvOKn?`!hCsRxUI%JgaxGD#ruff^-Q>CfmN=jrpNOKY!NXt-KGRBs zlsE+Ye{f(BC3cz+bE9C96^tMFpvige!ZlYnQ?3?(S;_F1D(L%2hX&6;D(2r`3UVa^ za73Y)qPgO?->INP6IU^~D;hgZzKFoT7d?06 ze^8C<@L7IHeFP9XW+|qiTh>L5qGCQc@8fQM&MoqJAJD{!05ClZOasHS8O0PBt9-#A zqd9qROe3E-0r5uwo#};RGm5EN4K^sPuDQpWoIjAu;a92w3~Z&^?1IIiaAF#OVS9wx;UtLecO zHmyP)vT1Rl9AuM1(>MPuI3QUV;NcaH@5ZN?a`Mg8(WsL%Z7+*l7Q&|*GQPn03{_L~ zBPi)Sct!qTU;vybq*P-?^Fw1QUZ2oU7|MXZ5%9QB6TB#Os}OZ!uyg=D^7fBPGa1 z4CLd3ldu@unDhWo0)+vTm8O|mbuLQesx5|($$fm7H6cJEiNF8@ltMDoPc0&6O#~(^ z(2H=pTs1xyWl(3j^m%d^SSb*;CsL{hcP3u5@;pP%$Y4?w7x1jy8X6-Is% zn2!NW5EDPy0XhvR!3Q%0banOgnxm1~rJtUh>V;-L4?l?jW@r3ZPymLqbMo`8;^gd% z0N}d$DTC8#r->B_v2+lju0KwK00b;-P%J(RYIqm{Rnh-jlA#c|f;#}gL0P3@)kPI@ z2>4Zkz=JzM8dh@!=7YPC3`c*|74lVjg@@xUvg-T`Sb$oz^`?;1E&>SG!RAB2A`uEL z!TY%`ui6)3>oFxo!-_Vl0j#UCp8h}(S083wHo{Cc8ZpI3g7JdV;dT=)u*;| zi+1V`(VKnVQaThhu`8b*c>JvBu6TNJiSLLtsjL0I-OU=iQBb);Lyh&Oef*KT&OsNt zlg4_uhpj!C5HIUHwS|}RP9Sk)Od)k!-3o^dk9LJcy1G3tpBj_e{GqmVtmqMXLT~k+ zMGj%Bsh{R;GN*0R$VuKd_vVPtJB%;R=T6L*E}Pe-{Gnr4{w3f0>NhXPFa74(urKw~ z#xqU>NluoOv}6m@Vv7{>yKl!?Tz}VzxI!=GJ_h}QKN4I39 zu6l(i@jAkD-X(vzt6`ORRh=oF{^eQK>9H@R>dNEmH<+AMEEl1<8Fq zR2CYPGiT? zGc2oKd#`au5v-SyKd=AV9p|-g*X3rqMD=SE$#R~P^R=-_hksu=J2B_oc`@&kIkrDr z1Qq@wb}f7LE!S#yv#2lo`7bS{SJq#5TEpKya;blw&qAi!{<4zyMM=spy(d@9n){?b z{O+sKwk#R351-g2jEQ2DIiEwn?5^Ir^JrnZ+?OWmxrv_+dfbt#+eWP$In(h&_@p#1 zojB!t-Mc$LCbHz=;t`@IV*;bsh1kpSxg$mF8?tUGy8Ekp<6)@`t?}r&^OmpJ|Z8#nV(2+KfPz(ieuj_|J&@ zD`rfz{mVnuOH@)X?>#>tzDQ|#%(7!?6`DEWeX}I=+4FA{JN?%;^|+*=r0s{Z@zXz@ zP0Kz#Y4^I+WB+;1I(Awtt;MI=u%LB*V)z;(#@pjB>u5G*3pKdLlXNZmw^eS=J=hiM zm$plBi-yVZ@>_3;`ko0A9v{x0pn7B9ww^-Mz!%dOs@;F_n$vxtGr_<8;^*LVA4}$} zU;C9k>SEa}X0&C_%;yQK z$ms*~B7?BR17Hm9@QAv>sVBEMVRg;$^#aSM@ti1NgWZ0p{d=wc+Fo*Xja-OHAhl)< znz+-tlCX{ZLI^}4uJMCXt%KH<%5XTDEao92(;5Bt z99L!Esx8x3DQIfzPsuueeRQ^t1lQDJj1A0bp|2mmfZQU+uq*-l^h{_2q?aq+W}%pY zd~}Tk78mmxIpa6EPY-`vCOs6_x9hr2kx#dB7 zI{#dOS?bKmVWK!D1Ic1i3;|7w=dBBxRZg z8)O1eSunRZXCb-RMbCr}NB|`C={Q6^ndV+TTbKN^LkYY8Yqvc>BCfU9=^V9yJYff`Cnh7noyo$hO#}>E zh!zua*`7T3fS!y6+RTWW6M#|SPl%G=s9{Me`Nuu?xyzhR>$>gnRM>b6G*pQMU7d&qc;mMAv>7bzTDv%eE9~iZt9vUE&Ovfk7TE zvTVMf>}S>jaJb>iz##nXc$H;=jlmciq6h_V%kQ%wU(fugWSP#Ae`l*Mx&WwP5)7Q z_12Mxf*?r;UiY0HF9I67nZlS*prJ|$bg36z@S(h8=BF$%4|(E{4e?8h!CqaVGe+R@Gl+0 z!8F_3$Wu?rIRH72t5*OaunE>>shMK#*Oiy+#*-WL5KA-hnt0Vv>^GTlMLJAu%^IaM*^v9a0I>vgR>g)?uM z?wkbAUL^w%^n2|r%B?4V7|8eX^#WV^2;YkbtPgYSQpNi=i<5sZgm;KHLa#Hh zI!KV!NSh{P%%X7b8YMSNpf=f{3qxAQxZYW)di@PNCJX zEe3n4*D>sw@(2HF8AOJ%V2Uh@q<|-RLXRQzx0N1}ksZo0lqP$dYgGe## zv#1rQUxnBiy3N1eEBw8|=50Jp1_krslo`SrQ$tr#=fHgft87}r!P?}}hgKP$^IK6~ zK@aHPTJL4;`@;HKaD&KUZvj6_hN~wbsaIpgH^oXEbmOlHQQ`n=Ot5$u{}=&^Mwbisk_DBm z`Y5`WsS_w2l)TVfg+8h?k9uEpKReHQ8BFh!rm3SBfK%!Xds5^l+}wxg1wOqM6$@Nc zxlLG1&d-v__}rwLJ^>rPf={jT=KUL8`5}ksQ^zN z8ejs2uLmpRxkg&YfE%AR4c$*;UU{;9mDaHnkk74ZECZ7-Qg6ajSu;hb}92kt} zdle0=Z;6%4Z4~mzL$MI|L+1V~=S*1L;B~yd>PhnVeXmF9m4unP_4`e*l?q}N6#lx+ z4*D}{m(k?A?iNOgrtKSx<#sf>8>c8+YP~lWBp&fo=>W%3l=We^4Y1;bDq`@uD zcH7hY-@~&<6l5xxZl@lvbX~BXmr!~(Z7${az0UeA6|^@g8-q*qw#^V76m?811Sp}U0%KmPxa(e{V^dF&!p3ei(U{LA^C^YbIX$c=c1g}6;uoCup zC;AJ>#WwtM!-9Omh8WP5azTw(poTuXOWxLF$X_mW%Rs!JVTpxAh@ zqYc1dPS#~_&Bf%b1Cb7bAUL1^L>+TL>vF8s$VrF5_z*^0QY^U|gQG2FYOO|*!yp&J z_eB5@Dm=xrUZfP3Xl}bk!%^emV|~!e45a%KLQR(3!OqmkV;hBt?;u~wFVNMO5Pr1e zs$24vY3K_r^k&JEe<{e445a%71`#TC0Fnj|E7p1cg0D|*Ng_c0Zoyvo0vAiJxiW`~ z#uu+@G_{ZeO@vPb1GzGo46ue5Z>=DJU;$5!fHr8#Updl6hiamR&v7HH;Lq^DTd9^@ zjui(Li-unR%_nCCNGJr-@hZs@+rE2nNcjU2GY8xlZ9AQiU1Jkie z&601y1Hm;UvVlaxGgfxohve$;&5%$KAkfvD;ptCU0S``ABdAs#obspgn8zg#0>F|5 z$bOuY3IslSz4;me%;k&)rHVc$H(jTFkd&QZHG4+)cf<-KV?QrEU3nk4fYq@62K-Xo=}bZ($&#jKhJ})3Do^hr z=Wh6`xzh<>jfRDdgR7ssAlFLBNnAlCHJ*EDz}`bG?uRq(2$8vhEi88c<3+ST0Z@$^ zW`SOp?tMaTVIh}tCs;)^9%>Tl`tK8>#sj&OFJTHT#gYd~15m5ssoqr^a`M8qr#on1 z!jpzKI1r&?p0+Z1Fan_rGZ+jsAm~SR6)@5O)T(pYRst^6RNWMvfV=_QFQfKB)#^|k z+rI@QtaAT?M2U1zCvXb6%0+G$OvqeVs+(hpi$f!OHj&>BIR)OKw8SPMCw!f~o%|FC z0B(3R#qtswyj<0@cYquKVV6+6=WclkYqPkgv1cv$8-UN?LHNq5sPsHhp&?0r23Q{9 zEB7t`cf%~&x})WEXw&GyNKaKftP*d@i+zFoP4ayg`2D36KA}Mf-j)bz2i~@EXMoiH z;f*H`A59rM)vd8!wHl;FIhvz-+|{gTRP}0h;po8LUXBS;GO~TiX(l9YorYyMSYdh6 z{kJi_2pK#+Xj0S!>uFJ!K;ys-M{Y8Un#UifeWzZ%dDs zd{dOL(YJbLky|Oqg%|{}z^}H#Qpc3yF#*C}h(Y)`)tVrBj^AXjc_&5`vIK_jl!S$! zCnF$$SQ){u*2FcpT)TF`lUyypGToCAWYzXNP+)3;hS_3KC%k7uf^|7pfveM zhSi=Afob^Y_u0}}SxBz-V6ysn;ltH@J~kF~(Ep4^A2jFlEXbn|@ZrD!9lUA42c{k> zZlVIF?jaY)@ZkvJ0lnLc{-CwwOaq_64>aQA*^Z`$l`S}UPnIM<0|G+WN>AbQKtLDC zJ+ytiCq!Wyd=Ub(fMyOgl{%3+_V=MdQO9>rgW9;kYKGj!v$-lf&S-OOY-Ja)ETG3G z>QV9-N+UuK?%xJ7%$@$O__}Pqxg}c1QqyyRM$Vn^iSYqDK4#Yq#oMy?F zX$i>-(L&s9^WC>m!1;zxn7~Sn;p$3oG5A)NgKZ$Y$5e@uD>W2`SbNO3;t$pxcWu|b zK@I~eHipMvYhfsSD^=WH81Lz8XOk;731*z|n@|1*U<;Vx8}xVE0AHZ2j%ymYFYPBmZUG~g zA_|7VAz>97O+w5IKp_aSQ-Ey`bD4Zpi=4k<>B}G>6r$3%VXJrtxdwm%2vb)yFoX5s zJns;40Qk!U5IgcTOrefEP*Py7rcno#6!euWH1F*TjHk~%Pt9Ac6}-Bb>S8H*bSx|k zjwn%Is)2_#yzhkk4zYSmW2kt`!SYrxIS0TL4`ARWDZoITg}N1c63Hnp0mc0Spc+^g zcNUAN88kqNrUlhZU3o}DBz$?Q3k4I0FH(WU6rQ&=P{!W%Q!}1iL%<)AkY3TivMaCl z8&{EkMELjd!3|Imf{Z%F3-;a6x<^D#!cMQ>BDHDI9(kw)|KCy^#vY=$I?o1bJrc40 z)vxu`YkZYb(PX&?FMSMdZFzD!j=tmimw;~D2Wm2rwC!d6iaV91Ha!|^uVH<}P_Q8K``@Q0lRq^CB#e+f(#RV$ zSc_=trQ{&6>>08(NVsrDQnuU2@{@Gd`FOkYhus7k zcYZ{;EV-Vyp?;O^G1kMClh&#@>Tij=XWRD2$h6dB<=0+I^JeDqC1U#O+h%2(XLy|I zymDq{WU=eR<|BzOU!TwaF!xct0#ZTili z+VUC}r%4j}=jVXj#|f~5@ZVA${yag%N@c$bDc zrJ8Mlg}j`WdZm)TbC`7@C<4;~AdKteYgcQKvo8F?0nA@^2EYMj;%NLVdOQ3wr70`p zp$w?purCv~ID(jX9|mM*P#;FR*Ivj%`oJJ2sD>oo&CE(2D{u4cequ{5br2eb2N5C$ z8kbafSkPdzQT7aS8o`eWH=3QIflcp1d@8UT8g5X_YLr2JZFBBtdvaeJK3)i&MM$Y> zSgBF5l-fq4?ziN}gVXgPULGu024NUBMMGerO66+~W`8742c05M*Tak+0+y%YwW2@` zV{~`z;6idnhe?J{kraTyKa`lQPYgSTbu(t_#wS9-*x@VcVJJK!6oAUO!PZiw|Ih<8 z3u3LMSunG5KKJh@H`U-T5a#CZPQbTdn_ohGijfANgebd(pLG~i#zbfhEZ~CrB`OV- z5H>ZsN64Qw{2sx84R=30{R_Zw4IY$v<8wfHI~X*{RjrF2he#g(q_~&RI_cqaZ!i_{ z1qB6A9S&$f-Oq-nQlRtaWS7@OL!Scz{I@KG>>U=Nm5GWqGX2=iY9lwlA-c2Zpk)jn z%A<1COnE5X7ctj3l5;*JYe2gVKE6mDjQReWB`-uDJ8}|+3mqRbp>nOvu;TqEva5HI zp9FycB5TO*cLi+-Kw_c3*2(6^o#ZgkQwA0;-46^1DTLYa-o?KG7?;{>dPD41_T~kWk%0<NsHk;TXu!`Te+BSA z$EOFVXl~$xc++(u|2e+*iw!ITtiNRD3iqzvd2JS;lLX$kU@YUhbBm?N7L^o-lZUsC zaDkN4STX-~Rrj>OXE!7N^n`JrY;4?T-^@R;LVkKrP^&};b+b)rYJ&xki(|{%$v-{J zLl6+b{e^&(vADA1W&0{}Ao$~Z(eWRjZGq+OYiKD#EX{_`;^pe&P8dzhw%}W;E2I3( ztq2t-KMSlDKye`8rhTzEIX@%k@$jJgCBI#V90Y!2 zLs?f4LL48ZH9@5Idk?+5L64K$GSy@Kr!OU}t(ucekIeR|36huj?R;gw@nc4dZ?Cca z-a88#)ns;OSs!rdkuY$wDPI?t@StiU^mZ1%%KW|-yqoA@-wyn7z5VE+czw;Tq2=eI z^)7$LM*EO|Tv$ta6EH5I0F_54IFmm?m=1U?hbg&^Rn9WxvIf3}&)?VJ4_#wZYlWQ|SR7TwF%Ln8J@of)n;8bdN2}P-!WltRbS*L!?)CZO#-6z>XvY>v zQ;uu^t|dD3rG0MU^92BV<*@iL-}%uAg+Xi@7b^_9V{vV-kbF0k?_9(OQ?o$Lfpzn& z2ZoD|>nTp1pnhs=XK8q86x%mp;Qg!ZzedqY=cH!Lmd=aoDKU1x@x0{AVo%=}V^U8| zz4$!w_l56s6sLLQb{W?!IWOK789Q)Eq;TCxd8F>NadO^WXl6^ru=j%LHe{U7tTvIX zR1jNbbMrmD+%EdwA(dRw~&c3LPby}3TPIyW@ z+AyO43c$`3f<86|4Xlpp?vopw=`&L7Exr49Yy;Fos+KAcO|) zATDmf)}&%x+?!QBkC2}R0Rj7d2q1%9xCgd=5W-`ERS_d(=pBJCu8EBrlCP^2a!n75 z5yoHsk$?`;ld3rEsT5;1 zZXM02qS$qFMXN>5n#Z2U8*VLbo}(n^AJm!ePs@C7y>v=-?%tBpxEZwv8z$skaA$)h z^UOYPcbQl6$7juv-1^Ge@z2tGRZ0UDB`qKC!=v>M+paPN#@+}%Isbv-L-=&PvY7=H zZEisJBXs?azXs(Zhp+mBxe%ITM96Ogu%X1Jm&B(=axR2IK`b!K$p3F7E|)V{MH4U( zXGR_hg0&Zu9!zjwl+D!4F%M>Ahv!vt9)R+<;6wlhwDkD<|1TO96vT1{L0!fcc#-FC zp)3;uN^Dt&k4GJRFK^Z?b|KF)LAyc+!N9f|XsiceA`FJg=cBjW@?fP23UA9@j+l^71V8tGcS85q$x8L9a86^@8}Uwt-I~_ zOpY_Azj&KuXV1`i`!LV{L#4l4{8X>W=jT-D9^;JhxvRob&(diV%a}7yag5*28rSwW zI`5)S1Z93xn=m=KX30*tq;Kx0Y#kdwj}yZ_8(1g=xe#6r4Rb__o<`b|3k8@OLHJ0B zG8VbZuq#v~rw05@g8T`lwle5bKwXdrR|GWjZ-RgX66$P})%jSVjg928Vsa2zz7f9b zOBahgt~pSNBHGEe=4Q4DEOQ;HzRF*}j1&ylUo%=Xj;k)vRI!ZZAo14`l@eJRfZ$7q zB|1#8V7wq!#%6ZTmc4hJoMP}f@s;Dsps;Hw46eU$EWC|%uwo&5p`Ai^y>y^mRbnGF zZT7&)dPS|5->=d%uNLmrx^~s**%DE1gu#{ft@T$F=DYg4`@48pdLN$EDD|LzZqa#c zSBkUzv_6%pBd}HQ_Sfgo0C3CfVQ&f_6d!5M1CeH&ga7KpxvnS&uu*nWCYbJbY}{l4 z&#Gqh!d``r@2j0J$hmByPTPl2Rx#602^t{bO!|94Lu%6fNFDQ@g4pWx=HKQ&t$gpy zPaHEtm!DEtsOlE-WLd@zs-2d#Hbiy^@n1QKL<;F3qo2$ZBN*oH@5u$mQ z)tUa}O?%Ukx9;a11rx^HWZI8?FE;=Eq1c%z>!hY0ON-w7W~*tiOPbSHy@Jq^fe&%x z)wYI+O0wMJcq6Bm|H|yF&vj_&KX5qjH0`~5ZTK07oZYnzxy|!0-f?-9J*%;z*S+Q{BnQ*YJ=*ScMoPL(=_GEC-%CcdSY&vlrQ@*;0@w&$UZXEvGU>7*U0 zajCJa(HD8DAp4f;-=pa>v&;3G%@o!bnyK5L89AFerQTv6Z5{A=2dWgs7FFEX4z13kW=zbY|sRT#6)b_!7_3cZRT7yPTBVG-^}J2os5?o|Zg zgHbf7+!3TT057R%PqUb^G8c^1+;U;oDtC=_UIzPyh5!ckDj;0lINP=piYD2SbJ>t5 z>VCjMGDcz2s?LxDI{VwGQ+Kzpq>YmTf9y}<{^-9jzRdP+Sz8>HBb_F9KyUuKyNSnl zU)B3@=iIxLagT%Mij_rHaI*f(i}`Fjv+04dW=T_m`tQ|glQa)A6XJPK972*NpUOHP z_B&DLkm`PK#`YqEuuD?Q%gPhem`i?)lV2g`d3&z?n}>m`cNtG#+3j&{M9mo1#PHK) zOXWn`m%%|>*PV^p>EJ$_z-RooO9~knL12FuVO|W6W5LHJ#(WLbT0m}KK!IBT19Fdn z#8x^UM-A-F;tw{{Jvg75K%TUKdBPv>F7Y^Mgz@7ugU94N0Rs@?FFY*zBHz{YNk{-f zBuO3H?^8XYUxge15`nl$^t7W+N6u=MZD57uuI)v>HF`zK4VtDUX$vA3 z+h2@bb?a(xkI%l}KjRw~2Yk7|ee*ACIhXx2+UL$Ot(JOq;Ag-ar7KoaDtj|eXqio; zp6=`_-yXVORCDi^q-vUGldSUPUjbswWL?uyR8cAIBSuo1ifBCDi%OR-$( zP>j=_qco-xJKeN*yuEgDjotC?)haT1*7wc-dq|g-zS-8+PhBS|(fedh)5N@6zkc^! zTIoEYa)Mgr!A!|G?U5HVCHHUFJ!$O{w@32*ii36;)92Mc{$jcLxv$B}k>gn__f3BH z#%)@rx#vFXJ++Rj7?WKL{2%BaiZYzEQ@UQtf>YuFXPO=?$BzA^ezVXa5 zb4S~xkRbCPx769It0?kQ&RU%vcroC&RO3PtYl+5md0MuSV}Zs4>JO9CuikHPI+UQc zq50*x`Bs9xLf2Q<>VllOJ_a9>%OoSX@tukuJd=ZOmQDV7xH>;^WXf*QZ`zGcbc;&w z+#cqO(e2Z`$`;6WXKjA7-DE@T3U}7%<(_p%QPL3?T>0moHxXe*twFMzXUy6)`@ZNY#|_tW`8p0Y*q%aF(S zUu}q6^nIg`lw`ppZO+7B+C?333`93qq~QoCdGQ7|(!XT{%*y!C>?Le24P5(Bp$lps zpzQl#q2%C1s4r)xPwP`a8urvbu4!8cElOBR9Gs*AhT%3j$;Kh%lO<4I7OwPuQ7!mE5(2zA9mOusJrnVyNXE>iz_Mnegh# ztZ5BZcM_Gut>a8oQfi{*kkv$MoM!BWzACxq#7!Yl=hlH(wpi>7r>|Nj6*lVnF?v<4 z;s3pP)AaSCbK2!|EB*3!xs98C&M%~J>{R>Z>z3RdcSCl+R?D}zjEJe1td;N5vtmkG z%41HzwOdD4ITf3MBODr*5g=P780_FCd_|fS76_T<)-|2nQGm%0#-;zY!ONVd3UBa2 zOx8Mf`&)AIBT!)BrPnrmkjPxUMvZTQ1&Uls9Y>KvO@^<=^t*c%+U)4!&ipG~1u&PE zt1n$txLElLrC9OGK5^KTXKbxCo&snlJuKZI#~i42JUDTP5E1>Hu4V=T?^g0IoZK;o z=6S$Y12pFEZ(tQZ7%r)>bQv3N#L}Q0r78f1?m1^LJ@{JR)G<|?wy}-syi5O zP@2C6AyPpTx&tOrCGiyWQJ}wnp8|efc<-142~A|V{F7QS3lQsvH&de3Vw)JAa?rv@ z)nP#)Yc1G|?oIHSITqZ({M4b>fv3r>HTW%nZRU6bi(@f3t}vvbU5)%Lz-0EqlZj)2 z+GvUIriqf18MzE-#3NvEL8BxJj}KS;YlO;br1l2`!NR_7&YB9Z3H<0auFujwTzSO95pimc8+apHOt8_0&5vB!W=n{ znk5=WzwGrxh$JX-60mrYcoP2LW+!|1neM`#grI$aH-MgG>qTuLTG^1x1QQrl4RZzR z;z}CGRVL(`1pCtI{%-C}!qf;36^xjss+(b>BdYH1iXeAQ;CDSl7j-T?7j?98`4722 z>x!mId5)Vqb}M6}5zj;al6=`s=gt(B5Ko%I>4`G(T5lgKk2wAG_ATFbJ9^Ax`^l-y zgA4tarMESGdJd08Jtv*_i3$Y3@O%E?*UNCjFTtj8tk~EmwwoWNPyTvgsxW+g0z;s6 zz<7oeur)NSz&>C!vMD~1(?w1dzSLxCYAE@c;E&C~^*g&#IGR|q=G)Ga ziR2#}=3K^K9ZDR~;Eu@@r3AM+Avu@0RuzDtV#!s)sbAQWgb}+YIE5C2O%uV(a)dYu z%x*)){H_#LBxNj82ix96lX!a8o^epsrXsl#33B%(tY=lF@dnqkmO04lk<$qJT z103^MaR*z1GMDLmA^+r1&IN${)#z)*We>Ib&gP$)K%R4fK0E*-*6CPrl?Tgorrew! zLw+fU1w(*+O}G=rJC=XqKa+oW58kmdJpdkba&cNbSeH;@(0%o6Jc8gpQN4mktBLH60|U6=YL{5Y}N>(NHJPa?X*{zc^v0>3VI!b$@x9#)CGFGb3N{B=R{ zFa%$?Xoc#jftY<~$^Chl9-fTA5KsI?1l5{jTr^;(==Y-i@XBoHGXG{a_#&Y24JRf9 z7MR8y7oGQ({2~Yhp({ne#Y&0qEe_5nhkyp)hj{sdhs9Y4qu*ymy()TeRo25O znqfH+B3l^U)e~PRo@-&jr(jiw*VnE#B_|ui3t@CHVRuMWHx@%Z45H_7_$rSu@MlKXBDE&C0$}zfNGg zo^3znYC%3#x&2;VR`KJPBR2-MxOaWJ89V-iY}_@?Wsq`NKgnvzM(~`oNuP8$9W;C6 zbX%^O8tC;#Rm}0|g-^)2AJP!vbmq{_TmcAHtn2q6!i=2XUO`jtz)tm z_SGwlXD$q^WNiT&ov&#&w&6Z|8d{+*^K3~FRH)=QEcM|#6IK)E)_}Eyps9_mNz-1~ z5dBFfK68S4#gQ!TkzYm>{RIp4C*K(j+YXg&JHF2c;Lwl!+lYrAPIwTs4jk8Cm8$|R z1IJqNA`j&MA=j8N1eJ=b40}B2{`@Qan?v7x z@wNUof5i7X?t7}3{F@^Xf>;7XgsLn|q_&xtVLVhbKHd9+xTLg}CtM+E?_1ZE#SkIj}aHs*N zmPq=;SSQrA^m{W7N+6O4X8`W4+HxY^E%6=KVQQ^EaZiz)S}@Ve0nlYU%Bt0amWM zb_sHzhRq0PfQFYOEyKxt72`K*VG7q^SBiTWSISCM#0+<*gNGy^wUT|TT5L^m9 z8bEYFpt?PHm{9uN*bLcpgcV+-)vO>lRNzbP2DB+A02RNuvqmFM{HLbgo2n&0qrP}3 zeuzz?l*nGKTq2up6XburNc;ivG%uYNnW+Lk>+l{O{4>$DWpz>bpNXJ1-yef~NqNg- zn}z!X_37Z^*KjbpKkvkeKS3B*_IFf-a4=0pO_@zsa4=;ry6;?cL|_i8e5n);ra7ni zSaSvr=GLztjXi+~OtaM+DRLNyR@R zz9sMP^YZkApT4_Z{M(~B=@^1Nb++pPsK{ja)|>yuZr%HDY+f+J4H6OAG5_z_PZIxq z?qC6S?hDe@b^m{`pG5!b+`)qPsD<%_-dRqLJ@_4Ow8j8h=lm~sWavBk2aj~{LnwVZ zp}$60E(VCPEoCjmExCW4miI{hroV4_@g9WZUM`hVBj-3MmkhnM)_CwT{^ns`LHZ^A zCx}d*Wxd6KJeQ0={Dt4?O7YOJ9;~~7i57?ZPWL$zi zu)a^LYau&p_{tsx4Y1Mwq5=L%(m(#p7mW$^*0n8$PB%Orq|RD$;oA}fRmX!~d3i=Y zI_qNJGsQjRHXwX92n%}pgoh8IrALLLx>`0sb|v{uk&^-DyUkja~*XySvQvUes z|D4DbEpo8OxBic7KDq^DC*Zkwgy)>+n(Y>nXct=dwZ^sJ&G_POkB7Xg^61f|6el?f zd9+eUr2Wku-#s2C_2a(h*DK#+$&UtK6~Zfqo-O`?L3l~}H~q1759wcxxBNfi5kxMA zhjrUdd3?8$91s4gmw~E{CJMq%plo^i_Dn=6I*W{xA?G(3>jwN1@TORC-vdY?>Y)nO z{q6=nITmCjwLn+|p#&kRBI2VfcycSbJ%Jnv$hW_qdLJx0P)X!(nv+b<8IUAu-3_a} zYe2Z+MO$lVY3GA3`6rCvcI>rF^&0;s7naa1TlchFBfQR5mg`SU8-I%^DkQ%pq#eKq z%xSp@-T)+d@ei~$!u5MnlfI$<)wXwKtz5(+x&O_QO0MPM;{ofY73W`HZ;dE@>4AFK zkH4y!lOGR;i3J82UIw*>yY^tW>@2{dT)F^^ zc~y*SVt039cXxL#u)s>~2IXM8&*zfEd^)f^|(qj9>lFnGbZo-E&6v zdA|Gb|Bvs?nVBV|09ZVcixS;P(X2aYPURe z;?E`qb=)*fD0TeidB0N5RLJVpPvRfs!XR>wEbF`CBP;Ub)cAPo?;JMIWd+xz23G2> zSnrFT#~Wj+C_i7jO3D%On*!oD1;=k%7r)75G=LU67g(uhzGXe8ggKlHtduq`B;*ge znZcB|?26wK6~84QeoHv~@vBPgeZyR@1ZttOUB-vG7F?J%iHqx8W(}&UTx8LNTXu_t z!{WE7n$Y#NNcG;kF?Z6Mu-^~c9)E5^lQg$7X+HX$W@@dmGc%axw%zgDqT;uO#cxx| zY4k$p#IFwGsi<99^G?+A%f7K=G}K=ZlrmZOn@s^zq0MufC$|VH)A_p({jILGgQjhYHfVp2a^9 zIqcZbck-XRUO7>c5K(~i971=9tl+-^@u6Yxx2a;g-wHH-E3<3mmobyx1{(X9*)=?y zqt%5if4#D`x}%IoEprudD+k4rpQI8!Gi-N!SX6viSbW%~_`RxZG_M2md@Jn=8gzQ` zUnM3ebAzB2;a&gSGljB;?~V_TiVqKq4_7s~?sZ^KNEVbRHm$+udAQd5bAt7WC-S;=hK6C>H8auB4e6l=k4U_=5rQ2SefyEikQX zx3__AJ@XyBGCu6sTE#1|z24RH&(ex9C1P59#P0Zr^`;4KOguUNKtAu9X{)cc`yTZE z^Oz!1I}E7>$46}VmD<30^>PLFDU@}$XVGiRr>^UmYvmZb?KyJVX%^P~Y3sRk;^f4g zMI62FT)c6(kapFWqRn{Ld|_q`4;{aC<_)mW06BCZ)Z<|HruGi|2Y? zD&5#8ZL+oaRdqG;Xqmm8mBx#hkvwnaj~zJ$Pa zs+7KrOU|scMefMb%`(^)0f!R;XF(;ZQc51@c`ji~N5#rCy;-aCpW8w-Y`_sLqgesJ zjZ0p0?#fQZuuLqq-T%*tp*2nj3`z)CpAZ0aN^(xW-xwNNy2;Oc~cO^_^<-?Z>8Qpd$EK6hnhnZ`b8t9YBHP2T_K zM#e^Y8nNtI&_5=rh1=gv-riEF$LtmSzyG;Wlw@{4J#K1F!tGx#`EIS$;FeX5YGyc@ z#FZvXWxkM1?42|VzoAQH&x|LtYObnKuVb4&Pzu%W+KZEaP6n0ZX~gcNWiy{0Tcl2D zpYHXw)bt}TT~G9@moYQ>G&1DH_FXTgnyfnbhP&Ll6y!3>)+=q2(Q#v7n?I)}D*UMb z(})mL!M47?Fn_30#2ksvbN*aJk<77`iF-{Z&c5M3pJL~gP}(g|QNJA-Oy>CdB>z38 z(oA{0?`(=9%~aRpZ!(rlqW|W^NRtI8-@6eXUxdC^l6f1lt$7BMnZ7e|-WC&S?nZvq zy{)epn$-tCx@9z(U5N`!mdbtaMkeWg=2enu;h#T8hLd@=(zMYbnJ@pPtul=*(s@7z zlUWd!bojRqY43aY_~ScQCnGSAM$$TyxCKgcCm?<4 zrtal08BAvR>=!dlZDF&G$=V6|6f^y`R&d)tCxgCVqDUrj)7BT$7n_w1)4LX1>C)(f zy~annG*eQ}_x)l0Kl_5%TN77pdlq@zw7Q)BO&8;E2tSkLz0dX7w(ViX+PTG6y z`7zU866x?|Nz2%^Zuh_0rFWL3(Xp>GHjY4=Npnp_gVgrD`L48N_teW7cvu2WZsMlx zPa}>b1+6eCWTZpll2S+3_FR2Ii7qy}`h9uEjAY`ry-yD>G)>AbVae)(io=#`>41!y zrO<;fR+?_c)hgowns%e<*{=%w751f4ONDwfxpGA-9rD{oVnSGMLQL_xC?*RXXved$G7*Vwc`J2rz=6nro-%v7gsC*6z9vrp+7Yx~!~ znZaaMMm$r63T!8wOP+U3sp&n|v-V{$nN^WVYfQU_t<&v&ezlZjW*jI#|If*Ynm)81 z9loWeHGOc>V|4g>4Lz^evXiw=ikXvq)+oA0L`2do(+I#p`*Zu|Pga!i+SaK{{w$P8 zCTib{WhPsLd=KiAFX{3qWh6|D}`#eVMX{O@n2f(W?Zk*8Q9E>{S17v=iBByTRH35R?``J z(+R0_3y-|!PWj&`TpF`u=QSST$4C!d(r_@zxc54!`S&j*ACWBTf3`w ztjOMswcd-3YZI6Fn<&Cz-yg9T<|(bWvgo9Q4A$4Cg^BY`7Rh}NJDiG*8l))r&2Evo z|D24duPrN*)*XczPSRY{7~x^pqS&-rMJjzvo(8uhw@CSYMqKdt7)d8f(OUG8!x3z`PLrJoDOS1n5OU%=7-rkRFOV)sAmd8w1qLaDyVZ8Db3>!4LH59~J4m*&Q+ zJ9oP%cC}qXg-5@W$&|SeL=1D}z}R&;tEI*@3)4@a;6WAjPh;|gOP}s)@=g1oyy=_u zaliEMUt9Q7qcQwG@nVifoe%d;7YHli_iq}ab{d11^RKd)!+Dpd9Hu3{Bw#z195<$j zkO(WoWp+0(59V(|5O>4O{+@`3pgM)YudN$+Jb~(zY@BhGk4!?g+f;KuhYwUC^ zo_XHb?6_3d5I#Jm^ZOT$IA7qiH}Y#RsEyBM;W?q-zr1kGFWhqIpmqCw&7*ml7ZyG_ zK0V})R{8hOUeNZ+y?CtHD=){Sfc)iix3!YD86R0tA{Z8EGq6lG{z)w{I zzYn&V7s2bF6?te~>5~;JfN!#Ook!fo92MF$??r-yr}|jA^;?$b#zNz#Zm(O&I)1hnd}*_0 zT~?Crwwo1_H#4Ow#GR&#`dpv}JCiG=&D*wH{HGoCuu=#9Z;j62s5h8AsbP+X&A8=6 z=RID*y-c1BF^7ZOpZawtgt{A^MA*fFZ{GcWFXz?+jp}NlRawE(n>^)Xo@cj%ak=RM z$z6bs8iU@=>o-gskoZKzez3Dv{l5y8W2L?-VMnbY~4Q-0mFsqRTxVU*Lj>O4%| zL^6lBfB8I#7QMTGUE$6Pjr(}EO9YH7c9Cvs48p?$V4m>gD{pSCLZ>&UH54O^fb;z+ zaa8iJ>8-lhm0@hwxO!?NDpqk$>aQt)8g^4)FOzHN&Fd_xS>&`T&|EkbQCpw=2)nVB zwdAnhuj?GtxfX&GUvSyMc$0fB&2#A_`u!U&U_5E9ao75Kz>|Uepj!N% zeRJCC?>9+BG5%~hcAicSqFc=x=7kzJllv^pOVPGt#1NESF=(cx=p|6dna$RC_2sX} zzVRZD-@he-m5ms$F3u4bPbuBZl*P-0G;Z+5wZTD>_xB?GhtmC|5>zK#rS0nHrL*Vj zJ-F81k8~F|2;RY<*YW;Wg67??wNAC-91-+5)9Yl+tGvONkM-&CBQxletaJCR_x=!` zq^}L1TG87h$&Vhfl|$>$S*{Qu?-mpc`A`*lKH;0+MbZOijc(xH^A)}N?d_IrAOVaK zs2#X!u!;)TO|a@U_OByGS~WK+q+}Yl;nBJ%@bbX%Gq0)V$c|$()z0p_iPozsa4=5; z4QtT4N;00DE%8fR$kf>)V=v_Sxq$Z8?&@?Oej`AW2i46L>S3sD4SIa82j>#tDh@Zv z{AFi%mn6EDeFbc9as!Qd#w(xt&!J^LCRoXwv8b_mU{$E2F7T<{0^COnaSYzs+&;fM z6N|7HC_f8nS}xNRTHZ|x$q$TGho9_)<0^jYuJ;U4UjM6>O+8NMSrcwd(|DS^kZWGO z1AbJQiem$4tXUoD1*+rgsPSNJ7rNUX6{x4)UI%^vFZPMu&66fUzE&`UQkT~nb|P!| zI-Xad=?dDgo)n<7tJdV%Lh~XYZgyQqyDzz5exZSP<_+#z-UrE37_e<>Y*J&UGRW}ToN_{l_P=O-?7#=Fu`JBhW~ zXP0#i-FZ{eXnstv3Cj^m=iCf-vuli=a1jvS%nuV*j;3u+prE~+C2@~j@0%8-`@}^B z=A}Me=-ICu=+!<)9vB%lMlX}wi_Dv;gH7gSy2SmEh3oU(C3DZlQ|;9`!$Vs)%e+)zI|gZ`_RtbMd_iXdwDFj!5&iJ`(kXsjs`To zOu@B|dOdG1pN`nEmBt?{xD&hz%jdpy@}o2t9M32L=Bf;N@-`$Q$JdG(g|%ketBsOpw!RRtwBxqaCjeYm(>IIaBt z0(JLtmH4D5A|@@MrM@U=gR9B4vF2G1%k*U50BwX zgPG2=TF`tKIA3RQ1=>$~h$O!NQl;X{>BB*vk}Y(qLNx$+{m-&CXEF@;Ry8faLkRM# z+F4KB{Yf`XzUl}(!;+6)*Kf+Yff1c^Aqe15&SvBb6=a))*M`uI|dV3dGA2NLc#k`>g z4J^NdZsWpW=j~keeD}MackV$&bX+kp6@Q3=>fPYg44yaS-#nYndb8k-yk;&Rvak`| z^PeNihpw;m|M%BT?`jQc15Iz|#``iCmTeEFwbEaZ{5-H@$tF#4!Lb2+YTY`8BtJ@L zso9}IUVzZ5;@uy=f2Hdp=mAk!Sd!vp9)74-+*P1%XEM*(4HMuyk|A?&Dy`LC^$?Ve z*41`)C`U_uSg=}W13d618Fu$NmV8X>MUMKIxg$S|ofu*D>zR3V^L7^~uNXZ}`!1$4 z{YQ}QyoLR7*R}|)8P^2LSM&Y@b~Ei5tNsoH$QEAXuZb=cFL5L{)7b5s zV%d$Jo?2JlXnHv>*iD=3`H1u2;F#J!=t1cvg1mNy&rifX5#lmuwRW~^2B6VF;~{hS zdn8O)PS@5vfjdF?ocBuOWB<*k7!fNgbzt?Dpmip%u9(+!>3Y4-(SnzNSfZT~Sku>b z%<=f-F6UvNb z7CBaG2_Rp_4Yfkr(-k{gfc(Vj#^;2q{UN*c7Fk{dQW9jp|0Xg&o#mib2=dV$+wa$g z&}|tkNJrj_?03590y@*X0_9i7x1SDS;?E^oqqrtdZ<#B-�Wqv}GQppx!!n7gwz$ zHc;?G`DL`&dqfJnlau)7d?am@-zg+K6wNB|>5p~n>56XL2FvWmujp?ZT*s#Xs08Z2 zI`TbUpziis1MHU3LM)coEw|A#8`6dP>%1hp(gr?#^qO{vcl@ShL-D--`3|QW9Jd@m@SAP3cd0*^RmNuR1gU|i<5~Jp z!*LJj8V^)x2YxUN`4r!t)|T@M%XiC|;y=pLT51iZ42mm@*?Gl1Y)Lm&zh5vfbUbge)Nz)F0yTMl+1w=TURAywookH_SYS`St{&FizKO0Y_cT<; z_o(t$fP$uFTA3ups$9=rwd;Us^Yo3sSPW z8su524K40Hf%3XsW>3GhJwT5g;Zyr6B|Aew`301zRpV}A1>>g%*CWW!p{+XYW9HCF z2x|H9KdQjpPjnBc(gjI(S@f%ClTsV$DsmSvufy3Ryz9{IvPY1Tg{@uHvs_2F7e93+ zeL$2Cl!xq$YfVerqAP;@*!^hqo^~`jNsxTQl!!XIK064S)k4@PB>Cvx{nc+v4*|T4Kkm&Ft$*tJ5}xM1HNwf9utU*eJHx;=q z^ncg_2*rlJI2z$@lH)mOiWSuvwpVPC89Kewl{z^hD8( zGGB6A^*z-=AFO7>r|yCS5ax@V)Me-sG;T`HrWJNufF1_eOvK}UzDpBmq09Hed|@vF zU*b#sryo=r%6z7-6R<2EbRwTqTe_h`1?vUzB)(T&dhJ@9*3MLg=1aV7y~i9{=w`jK z#IRYLZQ`ym7xbuKI9*cvCsP!bpZj*(eT>=kaV`yo_s01FP_scBoHs3JwSE-n15)$x z&7EKCZik?+RcH9r;7|nlDlXalM-r_WX9TFxN!BLzjL4NtYo&Ex%vB3IDRGNBgzm0H zx6vSh>m&t!@nLaxTJDt!>n>^FNjV#et#y{Y=}9^)3(M-X<>u1GuGJ5Vt@i>0#*a`| z^+UGWK|Ae-PaXO4Rd6FeEJpl0EDH9;iGy!y)hq(>4|`W5@31WFVW>`bMSU9TX7awf z`5^PK#0t3lNx7L zzJTEjfD=#G_*wQCP2W~%y_3ls=H_j?yG7f5bHUCIC}X~SU3M@Qns3}O^G?Lj`6iAQ zBupZC4*@W)gB{gH|gfUOD;Qo%Yky#gHOE7kfnQ=)tt`cNJcG z^0jcam78d~f<_1ri==#m)qC1L2VHd6G}Tpfzp6 znJxd%lmxsq_Po}u=rwH&j_f$XTdPV?*Itys%K*6Ez<2bItsa!5o8Difpm&i;U#;Xe zZw%NdwP;#{7k|?@-H^=~2H#H6(Jo3k2P}l1AMw`=_L@pNRXPRb-S#TyX6~j7zDuA6 zPuUT?cjG4)rs)(x!=(!b-m?mhOaApPr+WFfl@?2E^pM113)a(aptGL-3+CJVfVTBj zn!c*g22aVbFvQEV3Oxt5fjEb~asO1Z=xJs|X z^cenF(6WeoVsw@fbYoR^M%j5KDcaAj4PEC>f;8$R)9|XTvOl5=9Qq69vku&r1=sn( znKU22Q<3)Mhk`K|i=D0jR6`35YoY^^Kao&&!NT>lk}MUV4%bj!UHQmR_|}d0^Fyxq zslB@dOn_g{O#M{!c5#3zT7b320?4mtz8yDkWl@0O42)ThQxW9%QY712RqPAUYzr_3 zLEdEf-5z@>CqPQu;9u##;VuZe8TblbzH{8H9PrPx!>4xi*9q3-Nqcj@rcjk8o4W!w z5k9l3MU-EEUAA-aQd(ZEtCf|5#?Hu_oP=?W@6tNBL$LgmW_)kg({!${1PP0DtjpbE zNx4OIE!A~Hi6tlhnhfg6oJ#RjP(Igir#dC*u6|HKWyAlXD$NpU_`3po8u>ZV&r-uH z(Y4&c9m~t>VoKW&v2;yMN7CMvk1eceJmn6Z>3KvYi*bL2e07?W$;#?@7IRI^sRxp; z;bSGNe!ai0*8a;dC3MhARy`M;nacPH`Nk=zWCKuk>+XKEE)GhAc`IxkG@ZFpVx?f6 zVEvF)Mn4IA@g4F(~CiG=n;2u8Vo^X zwz-m)-(-5zJwbc&fyq(zYTiTFzYu(CKen_N7TQzi#P@&uLcOwd1`rIR*+z300rSJA z!->|V=uZ3}lFoch#V?=rh;F4?Mj&+>H@&;W225RgW-_gsz5)fMD4O&l@3X~sVVsDMi zuXrow#{MRf{85If?ys)Zfa--UaAy8WAzuLbfoYDv{R{|M5$AAx5#+;Gb07cvlP+X5 zg6{kbxO>l%%NszJ11x0C?*}BmZdR;ngU_MM;VCdD>w1w;sBR>;YzVKi9V+ z_Vj>MY62A400Sw@?i^D)f)?5iSuftaJ{k6EAD!z)B#m&so6U7@-uujrWzPjGSp`{e zaBB!X1l9oW-@yn~#q09kwXXGP*dSmCsPL`ya{Hl7G<;aV1_<4*7PsYOWcdnyS1qMgJIE0x1!h)pGLrn9zCwv_0d$sM1jyT{0#>1uXeDko1+sL| zy72RP$N1Vyu#)gopMaSnSbnCvc>PNcjE5G3PaVdOQApUBB?}f!99br@4X_ZLGOMTx zQ$cFJw-+qe@pMaoMp=NX5acbR&FD{E>3S;Q4zIOvrzED>sZoS@`Q6f^vk3%toKfe27mKkrYsY~#7t#lC zbyURxdEV}%d|u5=ur>=2ZjF=4-T%$>#_9R0r^4?9F4^@lt@Zk!XtYqt)gm{T1|suQ z*?(rP>PDN8AOZ5%nYq`Pam@y@D-NGpLvIOEdKqN={>jWHm+I3|UZVjn%;EcU>EM`a zwISb57R5Cp&Npqrtylc$o^fA*I!}$O#8N*k&{JG1W@$&N%z%7(%NO1^cy(S7R>>O` zJN>s!fCjxc#8D+WeYJJXeT9H244>NQriujk7VhkOyd(C-g7B%^spCwL*;{(Wp8c#* zrRn-wgs?9zUP%_Kcec#hk2Zn#1@56W@NMNV%f^ZJN-NC5yx|fl$u5RAvswnzw5vi( z@6H_UonX3bCi`Fp$3W}ve`B|}c`^3jp> zTy~Cv8hmuJ8T^4kllq{p;2^E`e{L(h#Q(YDJl&RV>+*B3#CXRvTjnQyW9HCiNGD+4 z!K}7yQvh9CI~0=d8B;XtI1p}tieroD$Qp618eM# z<=|6CJNyOh=`1q^SL&9yLznovLi1f}LWJ+zoFY^6_AUGmhz))pzczAVj%`2M6buur z*1=A86G5pPKV0b=+bnQ{0Zy8;`f>T`*#k8FCXLogE?s{bVi#HyiroZ0_2}4m9u%9; zwuL@V7P_ie2~aXrv@W#MGdJXy3qJM9!$$&zNUdzAZ%@Z}yXc&&&qt9Z@duxQHy6^V zn?PN8wGO_x*p=3gFoD9|w`>!g{i{iSx`|TKSlNjF-8x%!dTP*W0hSkTriN=J`P{Sh z-QSBY^g_W)Ht0Ba{ZN%Qnz3o9{1|hoWRDQKrOPfv(G6}68p)p9DIMd!(vrIf+>?*s zg&Z52m9Fy8G*srK>wBc;M)Q{+J~Nj>(7YMxQ8pxr&bRF%EU}mLQ0=>~--lwHcOZP~ z-Z%$oK6?0SLtLNqno@&b5agqWuRpA24sbME3?LlHap9f%ncVk+RHE0Qp$P_MQV)(6WvaAWt62*UXV_oV5zc#~w?Z zC~_P0 z*;j0fjHa#pSp}7N0YUZ&%>9(s%TQ_qOrUtz_WSE<-{_nND72B+kI~Dm>gR>JQcSIB zjjs@_(H%Ac$o!_(7jCbj_2juofOmbW-2Ari5M(_slexvJ77T^vyRdu1f1_yyE4Ca# zNyw_@dH z6Z|Pt>@;+-2d2@!;Gyy=)@#_0MYP--1kX=^e6EjRZYM}kNZt@6j=Axi7P|6EEV2PM zRm(2deUkVTsa}$X@)PSJIcp}-${Z(HUf{1;$IqclTWk%M*5IJ!dqV#3 zH;w6R#|W5rS^}P&x<_l&dL;RiHb;*A&yTL)cmYc81GM@(S4|wt@KbxU71lzYe6QVa z-6R?ZLUcdWe!H^(`3kCgzT(XqKy|RlG7L$6++G^+KjzBLLhBIZyIjtwXUw|@0|hAw z!yi0q&1@oHo`%Y1H%Vb;^3#&IQCAMoW+m4~%+paam$Euh_cP7*7Ob~qoumA&0Y_>z9g9 zNzE-P>K?-UuyOEbhj?1zCYun1BeCoRZt2ehi8MP&VI@yLm6_O<*~fWGuzapTF(;zv zddjjHCDy}T-mJ*SN`Co4i`*>@=Eu37KZcEDMnHFxwoO< zuDmI}T>W`Dx`BENly9J@MKwH>S*H2Se4#=*_`y~XR_0G3pPFM_4a1r0kk35@=SP8p z6Bgd0dtc@4SX{l6WOCiFV)%b_f!zemdtHMbKb%FAp@QVw=SJZ3NSb^rNPZjD+WWCV zm7#`gEp)l=4k#)w?B5$}MP?UOYd+j9K#*UsE}jw~o;Pc2k>gba`3BAW>0?$}9~$jM z5O&AOE}N}4wj#4|GF8DnoMq3+jUR3^pVo;>3ht%jJ@FqOPV~zOQlzhy7@4ppaQFN4J3{9?Pv8=vmlQsyrK>DjLER+NFrUp$z36;x_Ji0?l6}{E z)~)xW^Bsn$&cj)<0orcuAn!cTR7$rpZL0MG_Jr*zvhZ%x9!BO(*EfQPYX~HdS=N1< zor#AvK7gY0UeeFA8;$cp?jP`}2PI!5`PHTSL-#Y$)z$|QS+O=LzEhikh7N;IJv;lR;C#>6{;lkyqJWizPrYr+JrYaoDZR?X>iw~3dU!k| zXg=RkTlNLeI-2bW=If<(m6+T{(SH7P@9LFK^GfpV)Qf3!)^gD0iH&XmvzPE;cMv% zDtZz@$r8ectkM6Yi#Z%o$*!F_b&9N|HE9)+E*i-t%>l(u%t2G!-=d_Ck>%sem%H~r z-4LLW7GS?q0P-$Mmfo+Jn_G?xP~#@q(K(~2EAy02_S2ZF1HVkzVPwHjx@o!!)Qt~D zE(&kHi=JfslZM*qTy>H#PS0lH8+$-S&9JDfdzb+4mYwl!<4P;Vm@^3S*6?ND*+XcV z*9+1C9t<<+B=%`(yIJ1!82?Tr0Q*7VT2IzQm0j3(+EOU)piJgteDi-%a>-`06US=i zpbMSrETa6pyGMsr#ZhMTsnpA|-37_}>dr$>x1c?-MS=vs!VB(*V~bnr{*8ZW{-MJE z;WSP5i0)bGp`^w+EHj+O;WKaV6zxwJ+aO?mATb{4YD1fj2!)hf7aLeJ|I7SP(fLG$ zV=C#t?`f>TUF-&vtX2hEpG={P-S0dW+si1qI?HQCjwB^>^Q+}n2pHBPz3`A3?^;!A zQQi;;3feu3`2g_}Q{XLv@!rF(bm!P|5kL4!pd~(d{Ib^yPc6A+QLiQ{pAk1Miw$}oeo!^ zynMcIIyGuW4>7NXu5!CW|KAh(2Nw-a3fqISSmFZ{9$4s=3zf7<`T35;P&Bpop znAp=Jq$Q?pZkZQf>9#3*3rNY`Mmhht{MYN)YOAI}l6MIoR~^CJma{>CdQl3zgS6LR~Y5%x6=2sF2Z%aG*TrTyPInX|7zR*c8-ww1q1FhbV8^-Yy8qO*>Gdz9MKa_=(7t zq{6ON%vAug#l05lC%^WjrvPsY!xiWAmecu*@1Qch|)RD~oElms$gC5T*%jPRB znuIb}DUHTd9Qi$XPTJrdv^Ta6Nq)L9!LHV?6 z@=e|4OkL)I@U;Tu!@V8mP9I4dfp|gk*16@SH&1A_F83XUb%)m=Ce+y|bi8^)EWCB;BJv3)+XTX3xz3EgS}Iv%{i&n!_rP3tv|$H!996 z4p2o4@G64*M8D~mGu`@u>Zg$|} zz{4cGk$Dg@tp#0Mu}TV(em6g~MHHb zZ8wHby?nPzf%)#xvfqjKwA|UU3%MQO78Z%zE$R))Nt?QU3hyg>N;u?FF6Ki0m4b$I zlakSBWcRiMX}j}O(7XfwU}Ld(y0$C*g{6iyOTJ?)UFxuaF0!iv8}xR(i?^nz>ttH! z1A^wQfIiO(CL;MsA^jxnlr74!3vEJL=719O^ZTan-c70jdezRNHwPie$GgXsxm1!a z=obVf3;6HjzOJGBVY8e-YGn^|-t7HiE!{X%1PhNc8F-oJ`%Ilp>&1CNI~p{6#Cm-9 z_eNUme7R6;*-^SYQ=*wU>;Q%3)zLrakDYY3!2`qIKs<@LL4DTcBBzZi&V4JLc zN`X#Pv(Sq&)`0R>woWa#D|DVl0Xpz;z#Q#rl%dfGflA(-w(Va&jE;?eOG8CSUwXmT z$Y!_q(zdcsZY;7Rgtz@9_A0L5k{@&wbhY5&&IH+7%J7(E8@lw*1umIawjAI#gw~N7 zc~Ej!$t^^>xY~v29_1le*dr$Kne00*Viu?mD>Sdz-}lzsL1+9wfx6r4B|dong;vGs zB6rM-MTSWd>!@vOUH>YMr`6$8kEe4KmNx=}hr|t}vrQ1FhbQl?`99_@)~T8gMV8#$ z8uz(Bb3(~QL1l`SE6kaB;4oakzLHhv!}eVrF=98_!VIJ$%U9I$5ygkl!-Mf}03`!U zu2LyYY4V^Tc?Ue?`nUUZ4@yN+FA0Ec>R9tW-LB2@D<~h6>3S-mFFmSE5iD%w<7YZi zCkHvw8J|^PiFrTMYK4w2uXOY?~gMN=t}M-P~J%2_}`e%7(Bubq`q2jfgs^| zEq+4iJMI*tijM>=yNdtAidsGBnyOe3OY0?>>}-m1tW4LGPOy@$*S>hvMY^VTA?m@` zRN|USjg&YYZkI;U(|@lO^3OLsP0M-f2<_IjDFm7GYGv;_qjqh`t{Z&nx#)5Pd1YR8 zOlwyXpmG-APXu|NJGhB^HoBe$6h@Grqm;cLc9(9PAcf>-Mm?L3+JrHJViwZIA<8fR z#e6txOOMr6iXiCjV5gPbRQq)5*Qc~D8U*ek*K;13CJqYpxUacb~VlXh*&;qn6n#szI zZ`RTS%a)+4*Gqu*e!K!VFI%fKT}Oun3s^Yi|7-DL(QMjagb9`(=bP^BaF(vE_kuLYo=?kss0y=vy-5iyGr}@& zDk#Sb=2-FcUp%j!noS8~XuES&p$$41$XL&H{_2U$)8NHQ3gJDSA*8}*->vK!=G_iQ z!Fy`qMH+r?mvg1|G+ps~1rEbEKO7pp^2X8a{TX39-W=#tg0tY{u8@TtX<7auF^kgW_t;^+_^AictBCVv#*wSW8rcr zvpes0ggkZHM=RtQfx_+hZk~K2e|2xrjh-^^6u1`#DOlt2rMACqEs(hzd}?+6h%~GB4-YF4gtwJ=TT{R1w4t;oM0~(a>F~ zMg`29H&nTeubJnCTm>mvV)(n5KXdcX9tGu1`_xHq5@>lp2$Uy}JS^3T-g(@hB9;^u zBkf?jAz#(8UHu;7+Co1I#R$Lz_(^`VnbV$D1E`G!_yIw_ijU?x_JuC&fJzAR@#1o?q$RCR4GoF~_`sGlK7@+PKO zky;vh-nR!q-l@v|s_ku@43&jXZJYk8f}kC*1&@OFjHL(n;c2KO_L;ZR`7!C0tIl_W zfFvbn>iCXufUWQyYILLGsE_?|kd?bS>=@ zq`OA4vA2c)cIN5cuL>-2MuIozu%>N)>uOk7c$r)hW?KGktphFgEI}I}0e0Z1w83#N zJ!)N3U@s@x-TqnrDqEh;yLfe!9A10lSH<4#bbCT8mPWvmpwHlXcFc=ps?K2XQ6|CXx^vSKJhZN{G= z$q$phhgx=~v+Pt0L5cpq?6#gJX9|+9pMldB7su^7O)Z2yk0kFXUY(rnJ6;MoqLO)( zwPI}qJ++csgIg8~eoA+^S4|N1GD`g75)DS@?gZjaun@U^Q-FDu4?EC(EP4^6EWo`8 z@?Csho%uu1FKuf9mTLwee>K=Qt1ZJC0MyL_oQWVGnDQ>zvmyE|mW$rW2=aShri`n% zurq+OEOH#!Jd>3>?+IkGjb^;Nn*!t=o=nR-f1n$)NDIu;N$oAZFp^30myqWtM;7wPFt2i z0_3yYa3f!X_nED%@GU&G2NNtv-VUx0+*X@*Bu=$OVc`mPci!dSx#LMsnzn8yXn0wG z@3ChJ$9zWPjZ2E^+XMzEwDk7)sI70Ad)Olc4JRxm$7e41x-xEjruHZ~Z=jxidA^mN zV6{_7XT2+I0prK4HrLzMrnPyIk^nzYMrIi?mPT&~)R%AQ-OsBOq{X)BfCcvT`ok;1 zbGF$g(bIQFB>~CWIAK&=VFu5O{w3)i7sQ z0C{CvZTBRQuH%{m5pQEOGD`cTC77RBs_BtL_hmGa{`o#g=p{dm{LA*!gm2C~~@k>w{Oc|G`K z`;fVqb>YxVRTzT=-v1Yho{5x(-LkwC*7lk zpDt2xaMwtj{DYfoEl=;Z>WR%&LA&y1cDHroR=Ax3T?KW=%|8M}=R<#*h}Lnmneh`K z>;Ps%XoU_p46OY(zzC`TV+Qg$-6a^>z*1x%c~Kj?A@T-&G%iU zbKN3Xe)uc0Gd36}Q8*f@_lG@GNO*^tt)>zUCIrzgtL-Q(tRJi`-PnEv(~B^#Afr^q}d6_DJjCxomz;v-fAPKdqRP zkoMF_9%66yzGpaHU8j(RwJr%== zSbZ)N+QgUcM^6-%M~63bm_(1ll^n6e26$spauWT+v%(!{sXfwgKI_Ug`xe0Q4BJljcy7SMnXj=z#n&{V^+T7Q0$=Pgnu42YI84BP@I*b^br1D+UYD+1 zYBw|$Vc8`N>l;61u6AzbDo`&;S9*7E%?I3sj|+C{cQpOeV7R`FFY}W4(blwz#R{BP zv0^#GnEMb4xuMkjBHCW-(lh9)8mN$bPdwIPXLTA~uAqFlx_Q>O4QWT^oUDZbf%2?fCKh@O`tXOSV?fJVyA`c1MRSFLJ#Xp9-x5pYA7&Woj@ULEiJWv8lWg zooDn@)MMCT1A-dKR8kZ8z@4t*ES`epdtcwkJD=(P+bIo&u)Oq<(mhLdGP~k}MG8hY zJK2uh&SOd~pk;re;Cx5eRk+3?G}ZX2>$;K`6q}z5e)!hs8t&|=VF8XsknaXDWBRtG zyWU9w@;-N=_qjXJ#msDkEcMR3W=uVN={oHhbrh)VfYPDshi1|}XpUgvMR&wANef@F(c{lv^w=orT{h5ggTOVfPz52F1`+wr30 zm;i6DTf{b9LFezU;9go$^{mrVU_lBq1Bez0@G;>~?_taxx%nrcq~&StY+Z!KH1Zoa%Ewpjjx(%Y z@Ttd^sYvouv)Z4xFw2pz1;`H(p^@J2GJ&FqJqMvOYjN#yz{hA-Su>JRV3Gkc;+rh6~spt|a8`%*2=;+i2a|Bxt_Q-dcwQ&{jQBAw9ih zGw^{8dppx(THOFFvjaHM1}$t;VY^h%{fujcD4ZdtL@be+u+2}sO+>kB!S(s^G=Lp69;JTH92{ox@v{NvsV z^@>)>87MsL<(3TQ>#8$rw7Op~Z%)R3cyOL>?{Go;8uXI4+Irqz^Xs}yb#&?*(mH!S zhI!vm#+{xBwVJ7*@KB@V7N84}J)LQTFjwLAeBQ(NRCq+2vS`7=JvtgMd?$)EWq)s2 zprfsDxmhSZKU0o z^YmJA`39Y5hycBLrReY@a>-H1Z@tA4;s=QGbF5L%S}{lRum6LflN~<|=u^GgOAqTQK7zb`*gdvS zc3P2!A?asy@#8Ca%-yGd<8g%!@TvRUdVoE72TSX-vK;Mj{IvimZsP3Xqy zCveHh-ic) z>U;Op2UPaep1F{-BAscnASIVOb;#|@7--uiSW;hpFj{BK zW=$W_^+S}OE5$s_&)o44BS5}ga#d{cH(f;qmSUEC6~)Hvn??)UA4xvq@upQS#*^A9 zK;GKba;w64QvV5(ub}B3qw>-Yd#xZ8)>)%Zs+>!83! ziP7|_*SIcS^qmUqqcQLsXjiv?@-NyQ+@+yDp7T-A@Z_3gMqK^wmCN*;p?xrxdaT~r zU3Ljl025;D$&D-1s^*syI)_S_Yd2(TIZq+^8AtH3+Ii_rqY-uFTPLbSj*sYuTb>%u zzZyt>H_5oBYYo`hN5ZG}-+d6|;}W&!A0AHIw~qpZ7w90gAQ=(MuHHa5Yuh!LvBtnV zR?h8LG0y)Ch2`6Iq(j{YbhZ}+3PEAE3;ea!hS_o>D1; z^(YcR8=7jH5tMcJ$0^3nbc?zp%XgWfWAo>wGu%$fS+Vh)joGNRbszQFay+EDk3q<(|wtx1M*=S?h zZ7YKI_7dMMXPrhT^|-YO?TZh z3hJem-sw_e`UfM;=MNQvdubiv&#CA zvE`+}_4Y1sH488J*Y+iu_YNEH!GgolP01;{u|tLi;GO`yIZbT`rl!%nkvHyhX0|9r z3l=&gFLtx$G0Yo}Heo2XQMQ%r^^djrX$v$e4d!iTSkGGfXm+DuWv}DR%hPysIS7>n z!=**)zWf|neo)))(P|r=X}fR)?Io+tBU|cL&_nS|!FqVO%APna5#6yi?L}Nq$N9=C zShf8e3;^Q=>*`=?v3)4FhlkAA7yK}Y*(5Yp&<5V)a(;QQA8m(rD=4g!^J0%^v85zk z=1+niZUMPn#QMFQU7dTuoBf0g_ruD@@tS3xC zU00b7f#m$c#8-c>`?L$u3qUW)&csHBPQz)%S|CW+&B;%L|5v&MbH?D7fF%)%do~@X z(D@dNK#BEs8h+}t>h_JvG(1MY1}Dkcz^)(djdX9=Dqt^-8yu;W>{@xUqu3X^H+)J< zfOkbQEnQ(lOWyo278@Sv;fq~v!cbSbl>-FK_oeGTnVA{HX@%t5_~q5Z_i48_dn8EA z`!1vZ$=ZUJwxa;~EZ5J;+6}#N{M6lG29o@e(~!@Tm~)%a0^~zM);St&z@CS3B=zhp z{}ISi=4}jIo#Pr>S^_@x`yw0DPoH?!7Gz|b(OuAeFCk<0fKgi%fr|aVP@wlljsV&AYgAk?7gSi)%CP8 z<~{~e^JD%S>zffY*d0MWWbHoS*5>)`9U|i)X(X3(n@pD9@ty#99`xW0(NxNxbvN8)W=!fX?=VmXvszfyDEQwpofA=C$P-2 zL*~_YJ*ZE!V-;4i2cpT-^6_z-IrZ{**88qb#ihK2NkCG!9SmjTF5#Iev(y+2exMOU`IKj4c_80fkcVsrS)l z{TF5C*DjYXJ~)-mb)X;(lF}B6ADo>wFd>44m0roc$s=kwFQ#)&5VV)%y7Bp=-!RT* z)w5V$xbKUt=Mpg|m@B*71na}=RNJYq?$iA)OrU;xFMcG*v#`E~HmIoz%!|CJUxzMs z(6m=Abh+6%C@w$jCH{)ageQYd3>7Djh->; z6k6vl!-qU^K1kQ}eg*fIycuTqSE!DTTYvin!+t<_cS#!0J2kPRqnmv$h|+@qvV#LI z9d5iuw;3H-_0_7YP5D2+FWvK9sXBBw`JYG#uCHcQeMa}l|LCEq?L{mEA6Y5?ZcF{X zAbK!->Omp^Nj}T4hm-ozTAuq7fJQq$y1Balo{F@zy#>lojm{pp)|0NIg@SaK?EC1O zx7A*ny(w5v$;z44i98!>Lk+dGsHNhUp|E`Qma#drj4rCb0C`jJ;(zabJs`U+7FnJ` zlHcu7alKn5JdQHP0(7|oARk33@vP^BRuF<6l*L>X?g41z4PKdUlbJ>Ge%An$E-u`f zFt`z2LBWFME9gd2FcaI3)Qwjs4^s^;QBj49coj`L@vj^4?ggXWc5attuP? zAY7RzIVE&<^NP82++~CU!ws^YvOSV-A2qv6*VImt0Pk>=NV@rsCjUcH;%J}Gol>19 zYh4FYGBs$pElccTh~~{t@XCk{RYrFJuRBG=}iFnc}$D5QzFncs$cF=`0e%$&rIX<1rFC$>YR9AP(M1l4LVi>f7W1S;-~J{)$T$mc&j^1?_3nGcC29mx+BPs`3s+UuBEN+X#r}+ zO4{Bh_CZZr?Q-42TxI7;|M{<2HoB5}3zjddi}SohTI7X-gbi{$T<(T{M;g8@V7R1# z?<)TezITI`x%7Q3FR$jsokL*B2A8VMXO^P{$e}H9$n;H3hNAIl1Y*`y8V2Rm}nGqgKo9+Dy%8$e+PfwXhI{~SP zx@zF`pBAooV5@6W!R_z5LJL`58`$X~B*26HD^G1qcZBl@>K!EaB3tLXltfFN=Ml25 zF0cX%CXkgnf5EQ4bmk+J1ibkwdyyEPkFM?Yf|YEktu)smhE|ZL3M%V{_IXC8(D~Mg z$3ja2OWv)vGWog-)K9i;r1*w_oVWlA&x4p5*aHaj8zCZxmawHuo8vKpT30=9H`ceR z|B-H?-T?c+L0q0Kb9G&AI)1QJVd2$uen2UFr1&&i><0=h8&iAzob#S;q>4{aY>An* zt~RIwEwxh`>ZIo@`^%?_m+ATn6SQnULfuu3n0t6r(pgDu$MuaYLCf7L0g4Q(BeJ_0 zc4)5G!x)j`KVS*ce=~p6e+rpopI><^-DD3%B6jwY-AM%>dVi*CuF_MKAKWO`j$FTa za{*oUu?h%{CXDEkcM=EW{G z=F}}(J2VREp!eaeXN3bfveSj$q0qcSHyD;Rh0gf3f=chhKh!p47Tq0epF@Eq_vge< zoHd*dyZRuhcLkH}>Edeik#yyq_5XcDPs%QfH1rPAhdkC5N{vGiaQB>g!-CBV6v4np zaUACjdrx;q`!tkqEMu8v47*KXU3nvtEAeGAUEi+-%SZJ3U->oySGY#Nr=D}wehG!; z#l1SY@fAAD?FdSCugsm(CX6Ou3X-=TaT`;2)B0TFRVFK6J3YTlnr%?qP`YK@5!D(b zY_AFrJn6o$4_QZ8g^-*-J}{|$eR@RuAJRH!qvZ0jPi3<t2i-#B1?()@ zzICcd3Nv^g7c8u08~LhgS+gMX(qE1@C^pQSc*UyfQtnQ=PO3XlZ-jXZTX*f!wseGV zA%c1b*rx}JpX`WMc*mR6^o-SJ>Ve=TPePUMd9W^RAj`hRtX=fZ8aF;Bf8<@3aG(QiRS!&t}THuE70F?RC_fK3soJJQS3U-cFs13J!bfar2 z7Ev7^r785NsS%fjhFjE9p$|avn>tS1pYWwJKnSaKcp8GTTSq6&-}RF=%87^?@wRk+ z3)!i}9}97xLv;&@YbOKEkC)3_*X*V1cN&0K4_rOM*6;mNE0_u8Ie}iA&Z2#8^=wV& zn(JdGtLVMa`*_s5{ViG%dn)LGXkO$&>pVW8jZzXYb$yp2yg&LtOh9x5oA-SCZ1-rf z;}Jg)GoM9|xINE_QE|)3WQ7z!BcsD0=cwo-(Gk&+Y$5}L&oECMPEZnwiayH1HoD3O z=!!dq@KKOqKMUvVIO7!!=lmq#sOV!X+`hx1-ROW?2I2dp!7=`jdw6shn?#oQFJtK> zHenKwJ5*g*^kIn(oqEF;im#WBgg+tL&J_;&B-1!%Yrz_+*F4!XUX zg*W^6O~k!HmZ};IaNO3oZFgqHMZkaOut~V>thfeM)v~9*P?FdYcOY)-ooSHR4mOdG z4eIG>eQ*6$$gvlan0_bl&MY>GpFe-}p_5o5k`NN?joWi)2Af1!>tGk!Xgy0$Vpm)^ z6l6;ruSP}6*w4o`K_!%CYI9qE!=iv3`{E8mweGnyCvH0{OP+~arqRi)v`FU8Og5Pv z1<%LO$)uVkbMGICH1{-#N9knx|4&`0d;i=EWTja$D1vPU4W;J_3K@WD^;gxAj`ELGn`Tt+o`3FUHU2%K^MS+Nj zRfCC=D0C*%Y9{{7Bx<70IEW_F7~43uHAzPkYb2A7Gfq-9!|npRfJhXU1s3`FSe9jf zJeD8(16Typ{t9J79`O9YE9M)`Pgfk$VE| zFc-)$UOal~A}-*$Uw}?Bug4}V!XqI5A?`va9|LWatZ?|!tJiRRAK+dk{^->@cp_y4 zU%Be<;q(-KXJ<s>sFtc{6Lji{9@?H(zLGXHL$5}mmD1t6gr zc1MZ*Ki}Syg)cQ%0oL-+ZR7FBb77PjFgm$vH*UetVnKup(0h{0dA+GPd<@`xzG~A` z*JnBYCPd!sx}igXl_cH~HF$06RfYJSm$;um`+WL9^jl#VqY9mPL0pPQ!l7v)J{Deb z63tJx*W#1N3Am2;1f)@ViQRrJ<1D_Y{Rjd)3-RIXh&V!8abS}-8;^%y#YIF$TOTMg zaduk)J|FE|WHk2y`LK7wV1ogTY|HOok)}A#1Osa>WP*eA;nKpVFXMdX9N;aiS;vGr zl7DK8`yxIk4GM2(f}aT@69iJ?#n^@{c$?Vl8`t6gli-f9<`Poq6C2aqbXo)Hz_+I`UE}=@`R#@!J;%63-S!gSU z-~a31aEW~&VYM@>pIJp_r6ra>mtKcUSU|#NXEr~xiOfbz9MU(tAGCn z35Sk3EX-NL90GInGl!Eo=%KMTzWf0mwTBX?wOq_mrN|kWlimYuNnDb%f*S<)TvyC6 z>Mx2=wPMRXA%|5_=>$CS$G`3@Gv(}v@_AqM3IRCYo}F8-aWPk@AWEB zaoL&6&s-vN(Y@|Y4C-)0CP1Ro&N}_9Q)Hb2>!b^hjh|*6#|_Dx$5p!fSht3CS2K4h z*&`b}Ze-)R&IA&kJm#@8PXoz6`BBO5;VFg4e-dVlR2XwpHT&w{$+|HI0(CR?_$-EnPgH z9|*MK5;=;5Q_{9d8ndJ=B)$0b%ce2#Vs;HOph$?4wpY^d&o)wGo-ge=ycbiF!I2J0 zTTjBz4z13_dvU)4dnK)&_XWwHTHdP0`DTUh0sEsEpLJ=^50HIeKFs{@qFcag4U(oo z(rP7*Thg{f8w(-tgHC)b_AUUS3zA0QJa>omWlp;K4&ISwE)nolgbZg$*j%%L_>PGQ z1-1wJ>50_1)AthI^7<5L*)E&tC$)P&2@l}#$!WNzm^3@<;@&lQ3K)#Q!3tfd?;OeR zXwq)Q`2`EP<-Y20t1X;MKX{9mj}+m?9|XQv9q?3>jVGnPZ^hwefcs2xJ6-+f9_#-K zhsOc#ZwRWLWXoSyTQ=eFx}V0VWOcLbqo0&s=>9ebhyMg{ew$okCR^UDPKn3i0R^_n zrSw_I(IuJ0cTUDHf|hL|6FpRAS!GA?ma_pa6@y;7IvD)dCgN?D6%jb3ZX$i2TX2Rr z1-JpQp+K&q4{;W?C5pJ&8H*#Z&q%hM^z@Y}9DX|j2kYrQ)%UB7+i=(gaAjdwN9U8| zJD;z`i-f8F!m`j3&Oa|lvA;5@J`FeFl_lJS8cWF6PdXob?fOkTrB(whv;=yM!S=qf zJ~~==PhKJ3YxPw`B3Mkfzv0@QN<6o0cm&#S4S0HjhAPtj#PWT_4A%m0X%BcmB;hT~ z?ry+)?qh%*-C+}bWckkLRqJs$C6&Y8{(z^3Z26S?fCq>71MGLmC3H$W{7o;BTk1F* z%-72md1TA&kNut4I|l*Qp9|^R1ATNcQT*PsvAE^ymvX+aI9NlUlUfoQ+&FwP0*^J& zyUVrNn$tKu2yn4!OkGL3{rr{N#1p85M>$;HFBj2E_kuT05{d1X)3A>o>OFTiNO*)B z0j?0`qI&rP-MCPC_$cnS9O1)8I!NnYSv!Qos~+Qx8@pwZjx*=O`VJgE4zS4+in50) z=vsLehkXFo_=2@`kPfUKP^#tGb^k-lIP7kKildzFvrk%b%kajtf%kZVdV0t7#N@6Y zaJT|se@D22K3?rxH$+@3zcCFP=?K3XUq}pf#_||dNaGDfsq(frR{b0|`)ztzRh zysC1h6Vt;5a7&L|M4P?C5XiyTkSTzB@63zsBK}k1J+}dg#Ou|Mm0vIQ$0=kEzSUx%Aw; zmXth*!y>>sU$k1Q^!4ylcuJZC*y)q&e7vkDlW8#R5n}b)@dW2ZchF83Jvl`;-o!0G z18}E3R7jr#UH2{DjKkMC%sXt%MZ6zPys1nCeYMUYV7EK2ct z-tT?BbN=^y=l>5}i_Khnt~KXgdyIRGagQE`Js2n2!#j);p_Tr+bMYhwpKOIH^| zXGcd@LuWQ-Cv$rc2+CuLEglmDr_Ia>;RS)<3?Kn;I*5Hxrs`Vi@m12iZoR5%bsiWLQd1P`MD3y%e@p~gxM0iQRJu?VCb9WCw5 z!RpQrTwK9w=FV=`rsghSd3kYGY{>2NJ}_7)QtE18RbVz?RW=AI9vUkbgo}+0a`B^s zhsJ)h`JWpo0Gj;fhk$|u!302KfFJ?T$j|}MP@ut?lNUcWHn2Ga5a4y}?i~kwE3`mc3$KA57339(7v0$@Rsh=`3)e?@{~6ploF{Tt=i!+-$q< zI|qXuW(ae@&*P>lJY?zRu++DywlihDRWLh~dynhP%?|YBi&uRt43a<8y%y?zhm~Hu zwIt~su5l1SW}+H&yYjV2;$j4u)RPykIwObWrnI-}Dv|0m-9>V!lRP_5XQ{S?ma}}v zj4@Q?1caj|=bc<9URz}!wWF?OFZecU2)My-*(mlu4TC78G%KMmujpzg_%{x$})1LLs=8Q$}m;sm!Vyt~0A8!!w_V+^%>{@>Ux;AE-MO6l}9g zDH8VgboKW^S;VQG9*NP9&r-V!t4c9dcnv=Ouq+ie3jGJC2|ua0peZ@6E!W`QA@HnN z2}gNg);s>H38@`F`)o`-J6PZZn-ZoXbTqFP8U_jkl`94jfuI9oN`e6ebp{IyC<8nM zxUkrbXT32LnM%pMQwvrvp5xHqk$yzKDP@4F08$18sLpyx>F>e9igaYkwUKlrma8ODsq;a>v)G_CbsrdiPzx5(dW@ z>B!%6e?u)VvnLiR(xt=Q?NeaRKB^4iOShS)sb+_jjBja15!w*_@{*n|LOp{ngx-qf ze>-fC%not!s8>?QZAC%I&eL1z>(L8}#hAl!XY`@=ne338%Exs_C>waN>MZs?At*g0 zaChnP0Fu;LB#hIfPA81m-X?d>4w16D9Qs7i3;}Jjzf=hlk+Age8^?t*BfR}B3h3vP zAYJ>%ueNg5i1^pKBxodKY%}-sf|}fqY!i!wR3vjSU-SoWAzSSVDf4(ynvmjwx$SKf zYLQZVe&%WK*ZfFR#BWT1{+wN$im=6HOF6Vb zCPO08d~Ct(Z5i|C6E?XoR)Zt?5Dii=-hF$BWO#>>jV z24Uj>u$TjAv9n$^|5L-bL2kh#T+AKNE;t5%SP(gk2?!PqVnBqG4)ZSCle3mj;Hg(H z4)K7=w=`-!1i@wXykcRNUMa#C_b7VD{ieBMfN@1?fpEpNPLP?! zqeE$G4L^=-IP)~uQp6hPHGhh=#9;($au+n zfxoNzU$NlEQ-`qxLCl~bcu3zu!<2POyW7NCr40A&Y(nNbXk3?g)IPxZ5^*ecvQ+jW z32>)>_*{4Q>q+*)eQ1c-y-@KnmDz?-BsQJFFdr?!G($1leFUcJoq)KbdyXY$$J)!0 zq>H94)&2vH&{3X$2#=McgQYES7&UIRbuM*mH=6(R z6Z$7lp)%~lmq84$V#~^V82hbzKVNIj(phB(q6=AdS!t&c8_9)>qt=h%RBW{?K3J>H z-(FthOkV0I{w!x0%?<&xt9^XYI4*=0vqlywQ>@IS+>74=rJaN2^sF&FOw&*Au$fU{ zUS2D#akM^RyRYl}B&#d!ixu_oeNoolWop8KfH|j0e!9kSnEm7ijeWCWBlOB}nYsuT zxRD@9+J~`L%C|j!qExH(y-p$y%FQTip~##3)XhLT=^#lOo-}y`VuoKs<#!rarV2~$ z8*ni?7(e5*e4E{5@M=J|PIA55iWChE`|j<<5i^qrv81M|PDI4Rlb7;lX>L%>ECqJ# z7!$&@bpqBR67RDYSh9ztMGiR!Dt`OZWU)x9xBH6cKW5JR><#|NDmam;3BWzwv$h;50E>GL|r((3zG{ z1mn_EFohWZGhC3JdkPe=_z+w_Y`pXV(#ZF`3{InZV_9`%WuTvLjc>RT|MKk{UN@kd z7p{cnxVOU!In;<)D*ib72MY?l#nY^=rz30e#d0~F8@C_2j!Tc+!%l8nuOD9DlZNOP z=WDqn7mO~~4m01Q)c$0}%xp4Yv*d)r1Xc#;u_X+Hk{U-(4%l{ON;qH6$BxC?G3DL$pZ>5p)0S9X_s=NJN-l0GfU@Z0ArY7rC)-nSsA|Bw`}5IB zsK2KT8au`@%OQ5XU!}f6VdDJJ68_u6ah@n@fsq4qsUW^=k8)t*-+l7RR-JK(i^iuu(I{$;O&u93{T#yBM~38>>sSyp=F+N=?MkFb zVYJ(iUg(>bCQtRU!h)aY>|;FSyK_*BmBuZMP8UX8>o|nda>>oc91WYY$!b|>Dw^OA zwY4Dg$%fZedu$vi_sQ7k)1mckEiXK2tUf&cOjq2kl4cLC2H42~$D zCVw7c$^7g#Y)t>-P9y8P!c3{W3i4iDK4q;AU2)5|<|Z&QQ0w9!Ck``;hssUSCHJy) z7*mhsj#C5-$ z|B*2Qp#C1mL7m5OP(U091qGVy$2WzX?BP)mYWnET3fS>1-LLg{GS-wmA%FN%yar}X z;SK^~*rYa#1utDQoJV9j&njH4jnDnOl@6m9W!rvB;j|bTRPQ$fzZJiD(v{RBhR=ze zUYvCIDYH`V*HH0x+ypHqDdNI#s6N`f0J!7n8?J0IE%Z=6!;K ze#*lR-%+3vzk$xJxG%y#U8D zzvw}IU6Cva>KepUAt#@E{-p*-8p-U7fs*S1oKRPUD(VzYRkMBSa%Z`^Rl%b5J` z7=1U&3!ddh^AF$te_@z^@|{YTwtONf(Qi8xC^O+o@IQU3 z*ITC_^i&LszR6rGKtxE3azHtfioVwI=XTD!HZo{RS*&NV6j&>?+MryiF8KT)3Wmn! zXAHg?{gLfjWauX57}J895iXM@KK2d%#6DtCV9t-?3PHy~Q>u*L&}rOJY+Er|oINs` zCxlk;xpnBBk0wnXKTYT*OIxcHVCee>h1IGv)LxBj)I43CY^GM1^{moyf!h5^)SSsJ z=u8fbyz!^(Dl;w74MAQ;0ya~b3>z~uP{Ixh%gP~rRi&E}B5!+jq9#We9=_aad9jRK zi2i&QPPJB}i(H@0CNa?zYpQ3;lgm4pPxh^9_z~sjboYXQGY#VB_pKR*p(%GOsmE+5 zVKtW9k-O|6+>hy(GO*bVaPc(W>Q?u0gg^b7P92+#FxFY&p*)3(it-R8O7uhh+H_Rd zL9RjtTmJ;!(3E>&U@#DM$P!#UOj=8w zv8~acFT4)XA zdRt)Hd{4hfWt-Bkq);=_@u>LGq_J?4yTJ1&HN;WWljb={_U#Mmi}k(o@_w=I-bN{; zvo*WYr05Nb>h?)<^Ere$?#e?QrcXDd2-4SAYzNyf(aFCE;$QH8hiB2H@_v?QuHsY2 z`>oBx!eEu}^Ul^Ec=azk+&%Zcz_7v)K?pxQl2NcL)IBI@C@2Usgb^N*0Uint4gnep z7i{I~>cq#w;%p9tRMxJJ&YsM_6q(u7(Vpcm8hPP`(KIZ^Km1zKHiNgaJTbnnUKY65 zIA8$ht(5t|qEuj2)90tN2M^3g1`{Gs{o$I?K>wghM3*wF!@R5yK8y9e8bLFEhQ+|3 z74p!SM{`@y$;Nf0dvy$9w{e4Bv&Qi}V|`K2uO|G4GEP(1`sv2o_C_Ai;s#zp-KVaH zP=T3jQVpu)93*UBNSgT%skjOR=b&b;Sv1Oc_$!s(xgS_=?>r z5sgz&+uA(yf^e&Z>4&sC-f81TDgHja$_{T(VuGCm(Hn*iS0hiVGGvrEFgFyu#eoViK&iiTs@}_{!8)GJj$&0kZM^h8>t~?6wL(nzQL3! zo2nNTQ=*6=H0}pBSz>l5JcAz|D6>6%J<9+gmwq=c%0s1}x2B)j8UNs&S$z*yu^?^>-gOpR5p$|Uu2prl`O1<+<+4Q0n%Sz0+zx7V?@;?76^w>}x{D)YQ${*xHNrxAPTG_zUV0 zK0pEx&Li>0D+%T%d2bDdVQt%u2IqKMRI9Y=pFd`ZJlE~_%;Od@)U32#9KA4s$ zAuLePtgLj~B02Kv8h1Xvd^r*tg{Cj8!biLy{O8@1BJnQkgXmfUF#de$$k|%r)1Yn&hKtv-5NF8=w`bhUrT-OJKXxp1sS#*;hllPkbhc6|_Qaa5xu6jQkU~=A{dK z-HvGxbXKR%#%I@Ar;^-2sxR-m5<}ziJ0l|46OFiU2_*_S(BZt##uyG`yq)P-nAa(` zE}FBLAU+BeY#-Ce|BZsH>y&>kn+ietRZqC<8DgwoYuhvPZ(AF3R?X>QZ&)iuzOD{^ z=V?q^8ulGq)=qtRJoXJe^}&;+232MPpW*!h9fF??@ZW!^zLZObojyFOid4>3Gzs4c zr92K4YY#mhXQHFmx$k9W^MS_56m4oyWS3nMd3c|V)Aj9c1lS{?Rg1ISG;tc=HNW^T zbM;4&3OE1VN51I<|H~@^pj08US?* zBno-}as@epoI%zgGmtTGfPupt_$vUI&-x9dq;o_R}_b%_L4xBRu&N_nZfWs2F$N77n!13=!lLUI7U*`(U z=Y0Ij*)U#QB?Gz(ysCgWKwKaQh!yzd1pbo*(SevR-d6^x0k7vX0fVf7JGg?JKztw; z;Me`)m-*sznS$Ja{^lST2;|o@g2JWz7eZiXZfWgeXKZTi=wN8dY~^YX(KvtTWUz`5 zd5CP5bk^MviGOj~e_M78&CHzv`LX+(4}y0-3??i9y8fu=QYLaGmVd$O3m+hn6*}|t ziMXY-1ojeL=%zfa#k*L}Nd@Ct*+hlvsmF70%;=q-?{*WdF`8keKDJC%(@my+EGbAH z9~FSa?MG+7{0Sc|vDb^6@R0qJN#slJLz)RBCZg?bY#MNZnZz0M`v-+~3PvIXGUDo{ zlMDR~7RyQ!Ub-J`{24^XeUG4Mv>CfMrJp<$egPWlpmV|Gnh7BgO5Y-gAQ~^*j1f$u zZ$q09v{)2CYaWl+TUf~FB!UHf7uJdXBHnBmPEycb)}Oqf079PZq0#+}^;mCdpFKyz z{?i*Sy3WYhvzotgnF(PB(dwDz1b3ezuMCnu*~W~BYoaQ-GMCSwM{i>-N$`L-`ZXhBPO zwK)%;&uCD=Z}qo@>WNJDCkSiIady=OwN&X3cm+Z^Z-uTHl9W^jcT&%;w5P0*LQ7@R zzqBvV9omp|_f4WnVbiBy4BC2|WWn+bOfo(3hUP=r(doxW1Mf0pQLwdDGFc+u@G#A+ z#=egZ&D+-$$4zG3%hRmls59p7d9Ce7l$DtM^Ir5C=J#O?ISr1x^pPR_f5d(lG>oaE z^93b;4p>0=$8gR#BwbxIup73J~-Slrsxla&%ee%=ikmFR-E5qES3t9iP(n%ld8)tJF% z=3rH3d1h7`2-SHn6jah*y~M9^*3}#=`oPu7(fRy#*P$gU?yrvL$@}xpKy=A;ox*2> zZ~(a?Ha7NipX2;rR#t8{E_Pm>|5HB3Ke;veV29WAIVO||kKMX?eEddUwWpfH#qYHv z-x`N5+RTjW3hgeVVGu(VL>3a&$#^gw-8+}MVa1kb{nRQ7#UEWWONelqkqSG2C2`d3 z?w)$VCq8v1R)*w&-H-Giw(o=LSo2!EC=uR>fp;Uup28BDYs%Y={ire4k)o)Yu&%1* zd*>>E`XD<>(JgyzivBtO@nG4Rj}7e!4RLq*8r@ed2eYbo?Kt-6EzIb5yAAeKPPfrb z`S|ZQ3_0HGMO{qQm#LFq&?--g5YtL?+um*-wt6|Tht%lK*+Lb7*n!I^0oE*#z;xf% zuOcZluoa4A`;Ne(1^cvj|1|ye+G=Htyc{&^$0Y&j0Gb2*05@sA`{h{KyyMJoIbM^P z1kb{pD(saC&g$t#A3M!I_o3+uVYZ3A-5F#cuA-bqkm|AW^ZTZhkGG)3HWpTxp+L6j zkE5bc&dhHC8F|9UX{^?f$$4S2F%A|A+qfMVp0sz2(1LLveNgB5`c(6znq5Bd(}!D` zawnaKV$BT?U7+XA9u4Tuj};kvYmLi#>y8C$)9AMzG8h$QQI}xfq3Lu_VfPa-xGQ|{ zraU)rz7t)7#y@NRoB^aH=Fb;=(&g-e#c4(`Hxun{Z|y%+I}cczgFz}+oKdGCBA z-c&$jc?t_Q@KX>17^dpd@QWws?&1{<>HntvfAeS`Pw$90#Ah_63Z^|u0uwApK};(C zh)e%vhrbmR{F!A8`3nwQ7@G{q3{?J_?RmcLhr=Mjp@lE-)fIe=@N!mO?jN=mbSf+)g3-_()H|>Fx8QSIfEK;nPsZ8`DQ?PZOug?uvaIH7QIuWwpe%)_#m! zh_b~^(WR_XweOR$=zXx%FUH0sgW7i{gPKapapK_cEW#6}#&HU%@5Im?n|q#T|C=$c z_ENPy8VW3turiZxWtSHruAk9i1lbx9edkdF6rpwNh<2B{7Gmr?uaUc4(Y+wTu&>j7 zN**6R&$BcA+!8$om$mdA@Wi*xzYE4_++=ilwR!r~jnK?j7mXbWf!!Nk7&A}LNg%jw zXz}sOK=E>7;h5RvnD}X2q}(o}C+@AW zIFzv1?1>QUyHBK2X(_k0R2B8a(h3h`HfUBwNGo52lRKyFqp??M=R)|W$86N&S_l=s z#l;`|3_=kO0_$!XWo%$60Yd`@h(^Rq zV{?l`aa;>LzPTZ@$1=!0#bAF^*v|6+{slLT4v+}=O*pz?Cc{J_N=?C4*Vo8zJZGsFfpm>a%m5Ys?lb7?{^86q4S^g=nQIxgw z!|&c$T36msdiFgRq+61xXp9b4U+r|Itz_8C z3%WLZjM5OktzRNOJ{sD@ab0H`GnzI&j6sp}ItJG_SKth}@+d0nir2pZ4XX3YQmg{UMJx}%GCxhEkTh$&hAniq^ zKOsxBQSF;S;>vTM@D5d$7zaXO>mR%_)TBty{k%n()>mnQdrpl{d{!PNl8mQc!tZ%~ z)<3`}{Ee8;TUTsr#ve-ZeLG=?W;n_T6Snx8vsmSboRk}Vpm zaU+8;!kd#+Wh7dCq>wdg z@B(T>!-T}WPA^7U=3yGY7G_bg3wI2Qhu&i=sgFiRD?bqg$-#IX2e@k;6V6B7E)QpM zS#S!3PHbpuve$JQlE}sv70i&+vAT^L_IZgz8|s?9$$h_{7KwN+7u|9cj3x4Pi|pX8 zyn`RK%mrFE1t-_9owCC=igvd{A4!;kGyDg|M&AoFx{aEq-J6bmF^`_bEPBA4AT`u< z!v5_$im{K+69#{&*EEo={9F3mv3k4=ORziM(V9_K7wAHNMQ1r$1J0r$kX=APFjr6^bgN-}Edk^o3Na4<7=J;xYH2Qx=!7jrY#D-eRgBD?H! zbuIWRBY9C{DkTPZsTaH$;FLmGSvesPcD8e*;Js|JLfBb#{->w&Ps%=lS4%8QN&h~v zymx{0$0MHYr2PusBt@D!OnvVWs`#(~9BLaP*2b5*ckVDuU?^tld@a{m@_f%m!7#7Z zpDd~8tyJ998Y+t-m#FjdyY$8*Z?u6s@Us~>C!!J3wcx#MFCwimedV(T%L$5PvTotU znKMUS_i|f@x*oHG`Ciex=ydnr)l>ZJ@i$aFaGY%oDt0kztQCu~{yyeL;**|Vrxl@M z>HJ~rWnF^0hzrd3FMI2!v|{eU=@dj2HG+QF2=dHI2jj@NXw4Sl+&&cIo^M1#_T}j& zV^WIIp2LQQkp?fWsg0+0N5YtTtj`h1IyAD_vYTng6yG3PkCG>LkIq zsKgBUyXOD)#5gg!xl9cfayO3nEpP@^R2QG52m+-`NC3?b3l+eP19e`@3Hpl^Ug*Av z{EyIzWdFxL>2J%*s0YHl8Q7v7>h9dvPJC3tja@4A`5-nz@5<01A0&s76? zM%hxqVmSZonD zz@fl`U|#wI$maGJ=}UmuzK&#(u~5tv9++7<8=rd_ti%w)^R6&hSXW&yG+O*Tr76yO zq0>ANHdY>1Afut{Q|bp|-)4(jrYUdR{80 z_pR05T*XD-T|NzbAc+Wk{)6E$4!12awbUnmI?Xtn%61#Rbiw`hL>_IpNMg*zrK&pp zV3NR74?`45D}3qacU?I6PcgdP8oThn!3~Fe3*P)(|BALYcg=f`o&NaD$xi zqWHd-R;i^C<}?H0Thme1wscP7S=J~^^;h*#=a%}ndY)#_Ig!%C@T%&Fwdg$w_QEez zsQw%I_BX?Rqu}78{0S&HcrB}WjC04EHfL>_kKgap zr1yB5t8|-{i)&%#6x5Mxgh5lBRTfdr<)xb4OtS~3F{10sKANcXeb4xjr(eV_2>NY$$Q5q$#nr#$}h=8ZDE2`Z!wM>_xIy@&H9el!7Gcc)yMAmS`T+c3KwtjF{{L@B>${gI{omYh8!Q=vT)hW1d{a)@h+CpMk?n393qms{!UfO2=M2LU< z4F$gg>G=WrpqMlnT1fvcpSfIwHDCUp6lYW8v^u;tGuA}Z-B;il~QAg+~-=Yb>Bj!S{JEcoA#yWBuk$K*7ok1 zyH|VZ>O@m<&3Pp<^R#Ih1t!4+C7i2 z9_z1fw&B#gGc)mK{YPJ(k$jm(R+hI`#RX_^T$^}@3$FV7@%~zV0FbvlhA!r&51h?` z7iTwf=RX|%_?BO=0m}^V3G@JT+`fbjSRT`v!`~ugd1pbuyV4p0d&IunIG$)0IgU-uHbe^#g|+#0uHVjJ%ikED~hZ_%%-2)bIV!} zkv12xZmYH_HHK+}I=3XwxJbhEhgf{*WV*GaL(7!dq~-nv(U0o-ZRKFTLZg0q^<0D! zYlDKu=K{~gN@m%VC;|t-9$EJN5Sp}3)ID*&2=*EZs9TnCv7jA z!*eZJIy0N@6ByMotugjIcC+w~Unuo>Z?2{<@II|#hz{n6B~Q6xOnMNGO(Wu@!b~20 zDGA}hl<#akqJ~j0gzm^&I?p;}kyDs7MBmE`r+FI`gF~*42YO5$*Mu%(^`!MsYBW7T ztQ}op){%PX4gMVy3vs9S<827@znO(UdDwru@=IgMe;CuRWg@&DF_-lyn-U4P-svxD za1mYbr^afgLO!b{KlJj?)nICZBYp z%3G;*`UPMm9oH03>I;4yboh>g86SYUC7e)-`3mC$%M2MztQI3_Ph$$9M8Z10(hIVI zM_RX7QelyFf~p-RNciU8XAIkU8h8?8zg>JMAIEPlusJIT)TSj6zNsd7(`=yIct){p zMbLLUjz$lL$r197w1%)~M(1F-@FmTQQ&0a6&t!J3hTCNYb7FRJy_z$p_CY9!kv`F1 zJ|x}g{PtPElf@uySRN;OeuJF5KSdlR@sr=<=t|2}M`=VH&7sz>3=a)b+}7?re)}+x z6VqJf0(yw9pa;lVc>x*S>*(U}GPUNO8UF1U3ZhXuCpXEaFAUGGIgo^$v7b*$lKrdra zE}-`PA_vNTo&&vfT!9=Y4}=>q9shez|DR06Q0yFLb>>Sqx2ahS^=%hZx`1M-&RpBg zQ$zMcag{Yf_9v`(S*{&p`A{nrPlasKH_?w=lSD>^Vf^3&L{`fe@>TLl0;z3Z%^c%B zVVLMFA}!A#fErJH@dd56LxYUw;Rxcm8yOu=s0i;gk0j=UcPaTCbFBm2swDMNK4^7~ zov7bkv~YEN#GjC9@O9ctz!s(zq~*(p;{}%F!WyXhMUvj8!X)^B`sfj>gy@&4(lX+0 z|96aUQ|_b+Zi?|MQ}1pJ-ZzFfxudS=+nz4u3y$*Zqn}7L=?-Ln@~A9F2SaO>zkipi zV(cNyhC*jHACA}O8hy_F@6xhdk``kPN!nLstLIC8euuOY8Pfax_R?cna=xecC|Lp% zlT$+e$o>7x4*#gPH{93jm={inQxC@}wWrI)*wL9`>~-v}xIXk?M|^!eW}v11f~DO9 zx7J3~LaxqYsW{V5q(1Lwm`~RT*mz)kvA=^{81I$efuH|Tgr9(#dzSp{fPp4;oU)%} zx}9$>NusP{Nyxq2rNE5wJ2BKlVSUNqw&2fHu?e5>z6oR!I+XP;lF+Zon;ugdo4lX& zsUf!8hb9@LpVoN1PLC-iz--`J5kUU@ks6ug2F;U4pUH7o+pM@II=?FUNw6Kw4-b6A)=y*vtX$ZT>(#TDeDq&fDrc@6F>c>4c!3KA$}R%|XVv!7Sw)vz zX@m)6e-msjy>ce0auZ|DH#LyIUag3Ng?C9IU+`1ENhejVYxW8m3;B1C>yt1yPhL~b zSE1}hatc6)U(NsUX#Z5bkbto2(ra_HXmI~%goL^_@CL$?(8aNsx1EKr{M^-9dR#4CQw5BF8_ zFh%UXt!yu5!J<&_Nvohr7(wV)OW=?0(-F~RCVz)m-0Fj%K*ZY$i}A-PwXE=OTNdou z;9rm))vp)k*0r_-m@2>9!4IEZ!tmVxl0!y6;>7IzxhbyEUTs18Vbm=Io->OIcVnNq zFHr)8Re9gPCCJ`Jus?~a2p@WvW$fOq?OHZQ!FQm~*PAnyjx?h$!Swj6|A5xhW1l8v zSW}K!+c^9dTdoS;r6NkM+MVqhVl1t=nwg5jh2UD3oI1`z$=$hhu53s3h_B9?4$NV1 zRm3E4;;|^)M&%OL&;|}73pDV_=!tUcApCkq$+l@ghxVB+$ zp78z%+%>??hAl%`JKc(%cR;B?tTeVjvMGn>Gkx4)hw{P*2yiggUgM>TFCjl@PYV!*N$(urCQb>5ce-T z+(5AF{SN}EHdlvF5>y8=+F-MuSg+{43!3>jYVQvn6(S^K~3t`0*oCZ{c_M{U3r>lS;VH z?yAxA4d^C4)h424cxhK`VBZEe;$6G$cS^;53Y}_IB&PpnYrp@~j`D*MF6*=vZ`fG} zcmd{f z^0BvCL!Nz1)~QO?BF^h?#0ghxV1&b1>c}7{$LAQAPjA>fASW=b0)SllimXJ267vIg zv5}iygR)^Z_@6d_SA59oqDalNtXW!J($;o&K#2JN=|4g3b>VBOw z#;6Xm>oJJOF-%OaaYk75}pkSW~w57_5>K;Nv7p-e#j|%TmmjW|HnNDu8zSraaQt5AYhguHJ=HzI1J!`9Uvi61WH< zoF$VOHuSBM?$#?CwXu%6EN{1DZL*`dwt&GMmUcUcFkTvdzIPR${EhnHU{&If1LG!0je@`iZ_C)ft1tOlz$-e;^kE`oyb z^yMg`=vk){TEBA8{3%5(I6dJMfWPdEPBzpQ+WmW4PS@qA(XVW@sgk*}lJ! zdnn;XU`$FwJ7A!`P1UrB`1pwKLx~mQd^|{do0-{1O*N`U58+E#Lvo~Y{D%O)Sz{zn zTrnE<%3%90cf3cLVOnL5OI<8n9M3?sP+8rNwxROf4JIa{{*A(v%0i<6A}0PfL4sNl z&q&iA)Qv(0j1U7KkH)BfRj_E&cZCtj-3s=3P3E2kzuKOUudkZ0*)vU*VSik(najuV z?ww`M<+1Gmg!7&QQ3CSQ?UGwd5)M@N|a3B72sw%W2sGXdVJy5r6Og6oA zjQJE+#{w1JqxF_hT|BV5N}Q}349bRnFZ-s+iDVax?kDXmKi-w&52skzFE$0^WyM^_ z-nid$8Hl~xqQSF$y!wRgOQJR``3%pS{wDh#c0L;*xAX^`J&Q;^*Y|hLjR-3T;spwgd49*+yc`ftPM!bYNdFWX zzsmDpP8it#jvez_sdsF_BSAY&bRI2Pgc6VU3A@Ew%Y0y|iC*~dPfA_m$~jC-QDPE@ zow~-unSB3-7t)=XB+V@`1)@TA@tbsnV=*HzBrx0dXqLoUAK;67yZ2AgOD(9RVV|Ms z=QiNJK~x&Pdx)*K+id`qY=08gAM&!@kyXr2RmiIE8v(~`V<^6+A9csOPi>B~Gg+^n z;AWX&%1Jble*b)II%84fmUlmQgDc+3%RR6BGdhdE*Fv>($aaoxE=Ozit zv_+T7gHkOPG3xXJ*9MU4uH1myLn#!lV04QD#6(;Ut#*q8zr{@_^{%)%W?Gzkp$&~! z>7aCoe+s~OUDsP+L&L(8!UF3}ME~0r9Aa!WxW}+3r}}bUZ%z*6MM!kSOCcNp-2x>)gx-6P3st}4B38EV!dXXYhQx_M#NCExZx{vFm5M)zHc3zuL)mgXtMXovii$)cG z_qFsdqnUbhlIGrMy}Aod$`$c&*d;Pu(V_^qUE+OEDejy!-SRcMrQ^JxgkH2!?>p_~ zs6R@)cNPX`Emi<`zq_`GdX>2<%I56;r@HdlBfb4B@VNil->Gi#UkKp|@Bsv|Z}TCj&A*K(!`N`C)2j?BZg` zZs_#D#Ln9ESBdHGyfTnE`JGulU*OJpBlP}_4Y0tfM_6FhBh1yR$6NT5!x_|%RvTsS zXb<$;^2`1e8~l6!1cxitN5(?e1m<=gh+kEnUadz!!NR?M<7&6Ts|+D4AB5+eq(i}C z{Z(*!-ShGm|EAsDUji0CeqM$m~x=imq^zr$oW56ny6rmUtuLoJ`m7blJ-ci#hibQ! z_^BoS@*X_w_T%~`(9$$tHNhEl!=Av_T;w`;;5R3G=QWD&W z`-pv7M6cQvI}R(e6m2RMCSV=dcPiD);G^_5p#(jBY*@U_(q$1F(PvpW)1{6bc}QQF zBlKCsmf9*6&J{vdK>SPpUcvU)Xx#pKWgHYLtTDteTR%$|au1>f(ZEFlYM(95SuCwB zAVBQ}1OeDO4IKuW5EeUjd6Y1uC_2XW&5)nXm^414Hvuz*3ilc*?Hnx~ncc4R`vNE3 zTrSR?-|07<={stk|9X0(aR-9*O`P`_x|AJAqTUGQuVFKeQWj!pGBiP$#3K0RQ!-Pt z`}gOb;zecw-Oz6(`|NGLUPboB744x%*}?W2&r zg8-Vt#0vZq5&ZhY_RZNT(ZacB;GO|993KCk_^q5EIutC&m?_k0D(I=aNCJrwQ7<@a zS#2ewUY`IP6zD=KJl^Ul-_Jqj^a&BoAu|U4xPeT!`e#mF2GHBnlA)n=EPp1XCYayD zbi7ra@bj}69NW}jx{3j9O-Asj?)LLXk|NGAwdl6!@ITl&rSI3J(?oWd8={4{rAc^w zPtg0W&xXjJr(T0EY^Ap=CL7G79%wkc%D7vE`Tpgmsm%p!UXzh#)|SBjrodvaOIGqa ziv5j<@zlS)rAhz|O95{w@yc659FsZ~1=@301Gr7uL2Plv*bfc%jL z2Z;h(X9xK2-(7fb(FIrOMuQvcok5!LXscE_7jg1^sTV3Qyt%KeK3Nmq;j5M{+7GV2 zULMK!f~_3%DA?p$728&I>=&I{-EX!2g!&%*@ukEqZMK33_~XMlEm8|KHhU@Thcbvp zkz(ZsmU~ApoIvzz4 z8+%nN$~K8QwteV7-WaVdTurnpL!09?$qGAtP=UKEkF1FBa#L2&pxQV0@tabb|BAT# zx7DyPGs>Kr!}5(5JGl!)L~jx+1cx>LAnyKUhkv2%eQDf<(pa~VkEbQllvK<1W=mlA zJv|X~De-^GF$A?S)sJ_b?zNL?_tn{_dAWX0qI-o|z37ycJs=;J92fP(Y2g(HaZ6mm znd$fvg3)MhYq~Dd*YTJ|wY?bAW8wU%DvMbYi}%A0qS3od)nD9YGt;#f81A)+P;4^M z21p8dsz0Spn)8!>$-TYv-qQ$orf3y?z@bP2kB3EOa$Zu1zMe~Mh))^*fO)k;OUBOl z4*oc7v4;R7pPz01dMOU}+C+GJJ&)bO6T65rvwC+bEl3*?W$yf^wOOf$)m4;;aF7kA zW|UURR^|GFZ|g}=w~M>OI+HjIqmczV*TxeP>}M{to%%YV`7f8<{B@I`^81#trq0MyB!|D0FK^8joY&vgmj|0dJ?FE$a)8BYuFPDuZ%>JfSxf!hkVGMfvn zgoe-wQfWYiR%Ig36XWeTjs4Qo-ZG|emg$wTQ2sEbI6nl*C3N_6%A(ivLWds>l}>Gz zVL6;*fYW?Z{Cb=9_+|aKABde#hJVl{{C9HiHy5C!OaSZUKim2S<8MXQ3`U?HV$L_- z{MKQtK@baQR?zg}oR*Ys{tEJ&=6%12L{2oKZ~^rYciP_UJ69<;w%*c*21&Mzs3Q3mXmJRrp!mr{)A?ha2wT~Pk;rgw18xk~&g zzu1@ieg9<_+TW{*Z|*|-n|HlPn_X=}3+w`Vz8&c04koM|7tR0BDF0-2z7r`~A~0m* z?8B4ykwH}~x=6xH$S^j_P+`9xd{g_1QK?guEne&RcD^q9LM$0+2tj^fHB-GITEy$p zU`|gqrbc2D?%i@-S;5|c`-W>`E%B?}Ge_joW}VBgIvMPX;dYM4QHD~Mca-xY`K6vy z=z4h_vJ2O3Cnqj~+uzfM55@nem)u+w!NVML-9cepV4${1mDegM0t+=rdcl2bPPN7< zd87z7?cj9dLxAq#KIxL$TK(!q;)1iAm{;BH<@r&pkil2)bdXvp*TSE(RH8whlo-Nh zp1vXwXP~U;wa7Q-&`Z7W%J1>9|LoA-Fe=yiZ0({wSoDE5v@_(Bu?Ad2x@K>yWNn#|DiUr5 zUz$gE;q}EkLzsnJDySbR#TC?a(5Jk*lZahD6E*rO9B0Coa_lQ^$wZ#sn6FCACO%Yo zoN05@p|M{|M){za(?Y=`c&bM<*{6;hm86uDi*g!-Ab!p&{*NE@At(M=;k&Ql88$6D zVtT|Y^lWj$p_@#8D(+UZ7gjiqBIhVCe&=6hmUum7!BfDlDgD)+h&>uDO4x`yeYDr! zhr6+@g=zLU0LD}2}egj zCho?2G-kVUAa7aW$xkbUz7JGDBmhffzS&Ej%#}^5XYV{|Qa2ru< zRv62;f^&V&G_O}2oc)fk7Ih+*f1E+i() zxiQ-OMK*GlXLn3R?%;FI5yump<9_kB71!;jF)t!0N>K12y_!A_>@d5%lAzGIU|dyl zjcuXF+V2W0b>*X67&BR9<%eOHs8&MD&0!%|qE|%*hd4OJdSqrMYk#hjBw#2UDQ6i(q&GKaPx7Y0^@utxO1&G(y+M+e;SIJo;&wIBVln@DIvWWopp5JKZaGWV{!`PT44`t!t#>;L6101D^9j zD3P+vH9vm9#~VpD)=JH(M7rG}B)Pq(-YnzVTFi&@P*ZOlRp$OQ!>Lt+ee{Rzj)&_a z@nZ#^mg5^l5usIes?qiLqZyD?&b_zb_O$zlXZvSZO>J`!{5UG z?#v}SYBeB;Ll}u;PF;WI%F>KRh>OBx4;k@dh4Y2_qO2p4?ZRCiMQ7n&znC$E^fZl# z(B+kRsb#5h$q(}Mj`VJaH0=p{d^8?dN;R5mMuV&LY{iR*+!&E%&K$)tuXbt0C61uF8#u z&}9$Fp8@h;2sFO{%IE#_-p|XRiyS04?dMp=WDekSbAOn{RhN{^K0Vuaq3KrKLuF3K~%j4Db6>Zgs9&WbGPQ&UF9sy1Q!3Mr+sDXwP>CY)&0@}E$ zdm6rW-W^%ihHb=BN^t1z-g!`8Z{U>SQ|m7-EgNQ?wN=(T_%3!*?Ct8}ChmF`2@Q1p z*ve?ZhnYR6#4s?F4+N)>HR0Z>C^SL}XR%q`T83St{*!f_wnx-051y|2&HHEENnr4D&B z%Fgm|-s%vaF-? zb-_cCS%mqP%F55jZ^!D_Dl43TNIEAgI~yzKm9pFI!~eAF{1Y;d1tc`1C2s8N`N{GJ zohX`dBOapi2lZJ`Q`0rJh17TX34Gb@)@Zkswy*4x$R^;x5NZt(fBb2p?2OA$<_vC8 z$`-BDiZ4BFF2s;KH{h6047a+S8>A-|onY!A3Zh&_MhY?4pKV*1lP|!uP@LE8JH}xl z;%{6fmnDk%eCK_p)3(`co5fswrHZga z{o2c+LB1cD7t$z&U}@xI+1Y7u2EOoVVRj;YW=i8DeG)Ym0kLc}op1U`v`@5%4c?cR zD={(+PmNh;2+vtyGSU6JpGmf1D-p07v2^vMDVx#Fq zq=#4=H_c0`^C2Z0KkJuhFX72P%xhR34FI}DY{+GL;8NaneubbTY9d9FXf_W@sh~F! z<&>}}tS>%EblZ5SjLF(uHp#T(U2H;mX8LN}76Y_uToELE9^!d;ZxC&c#gN6IPaCtY zteLej$XQ*@Fu3rW8k3(Nii*Q9>R+x$|u86fdSC7XlPf)&%{RXQ8Ge zaK~c)|^+7Ub?m_H_mMtJ>aVGxI?{Ie&HjL@&!Vq)>by zpl<>OmcfSs92^`0#0aAQk<|qBHi<7QIQG8_ZvHSrW(&u^0RC-7whLTZrxPh?#>|of z1_Fk1#ji5%6}NJjfBW>G4k*wDY=(!qW98Dy81xa@#&hi0xeF0W{(V_rjLr8_r53gi zNgxB9X4I8M_H$S+VLKH3YBRM_uoV;18D=|V5;Fr>jGP?bao6%6U=`k4oA?N9q8|#y| zt>^;rKEd%Jt!kRCt6nx7YkrGm3k$WXdmrPLbyD}^6YQRE`9m-pM!c*U@-m+398T9P zEO_~X3KJ$}`++ADq8E|l0sHt)U#+91phjIH5i7FF_&romR5_ISj7n3Sx3Y25_y@lU z++AkWK&I$)8;tGQM_u=vA#&t8Pqg1hsY+l!Rd*;9Zh*}I)s=lg$C+8WpcE!@H5+_@ zi%=Lzv?WYDmq{!ZeJA-aY++DFB7I$4G+|Rb>1f+%1mg5C_daFeY+qgXiBOF7Np}5a zj$l&p`Gs53XT#lnHCp4b$hemn{ssQ6>wSHWG5Yuo{F@^NBuw<^ciZ2ov+YPmVWTwg zv_71T=%$b4Alwy+P1V9<{wgk=bGZORii-w14%NUrtnQS#|qZOW ztu2$>PwncG$Z~hsm*mSZvO94tWVXM-N6w`g&{0vqW>yXfFzd|s55Wh$`5?6~_x7!8 zaOj)*el@(&*Ab<#rRl5(zO5~D%(<2pcqmolp49l_kOHMHFJozoQN5^F^5MS6uk)M4 zD(?F61~XvA!LDd=>2 zt_;N`?r~)!_1-A>;1)K*n{dRcwzg2^SHne{Q8IMBcrV$g9l?!C&h$d2#`@i~>vxflt5*C#VyHC_=e-tW}1Bg}BFh+3LA!iQWInguz_THO0| z)7njNbS{bd>YDr^)Wr2Am z=aW?zl*N_i)FES|O?FsF@e9v;BCCH;;U7$ZuIrK6xhs?UUT8=e!-}$W)b{jKYklty z!RPNjBI96*0=%6iu8G{Z&~d-A0sj}?`0{H8YFm5;DVhKl1tZ42{SXXW!9Psp${Xj2 zN7xmpj3?IKOG`y$&tRDEJ|7B4AQ5rMaWC}$xN=Cm%B{ebia4lC)J)r2Ek?)b_%yNH zeWKB!DAZ)BfEAt&T*rP%(p@n>@;=R;%veUunlD#hvI&y!TK~s8*w)%8Nt(wbwjO(X zZY-XgT%!p#h*-O0nkr`OIZM(!NVOhkVF548)U-aCEzD#d8;F&xKJp_oYDW`1>XY0} zr6r-7yeKk?o8d&&+#_YwJCCX_=>4Xi8sp=9zzMw z4V^}p-~??R^iR95HGDe*M;4MSpF`_4hHOY9r?&-6HSaX4%+o4l?m%};2t^VN>N>bG09De z-Pump(&k4#1jvkB(n4?LLl}ReG86~EF8~3)IPOh8OLWx0y*DL|7%evXsb+7m&faKv-@$83+A_jq~0&q`&uoci93q1Kt;p$SM z0wAVb^93lc&${v1{{=bVs@}!{eU(%U&DI;Cvzqa_eCjP!tf(qv0m#J_X}c6|2hZS>Iu&^s2V?oM z2@$&Ga40e6>p#YLYJZR=0Hf~@pW3Il3{@1SS+!A3a3z)oFrHXIz|wjFaGnCGZZV$zvP@Z2 zCI1EI3H%QOxavlY!nz9yPGEd?pYQ}hMud}m|M z1EPJj#u}-mJIBa#LPK5Eg~~6b>LI3P)tIp~_|mXFB*(ZnwdI`9x!#bBW%@u#kY+Pl z7NmoF3eoj}#moUxU-ls(2I*@I%Y;#kLv?)~eb%f=!>dh0#F6{(m@b+WujGa%$w=gq zT+$Z$X)^Al5C$Wch8l>l)}mNMQoc;lw2i2L<4H&`W#)}a*03>^TO<6b{8>TS@?J9j zfPiVzZa!`H0)NGRIa+GJyYTAF+C7h~ao(zeutScd_aE;pz?{ST-{ISRFZ*em#$EKS zgS&4id{-qTRl^n5@Z4aH@sHs-KXmjiEBV*r8Gj);-ELJK`~^b5bUsL6Iv>R94G3Ws zS;gX&yU2(f(-geJMJ2iY8(fx1d=h^Lp?@`H=Q4b{qA-DOC`>%0KgaD{%J2Pe7))GO zoH?M|mFedze#qwi3skzS`(2G;1L#T|Ko8^9pG#=szEsHiS@-+zd+YxMSksGIda6Y1 zkMFXvpKkR8JFk&NJTXuImmRV`f2z6I!Va4pD$xZVhgDukZI~67qY1ZIm zZ3HX3&|BM#{hqKNL85J&4Ja-S)^q8^dcV=tx6r`xoD+^Eeuey&jMgUjVwBp#LI;XU zUfI)QuQ^s~wuWfNCJb6TI49-s?e6BFu!yA|50MH?8>HkTQoL_&cMwtZN}QCNwVyT# zN`os3BvL^-QK}PFPK9i`tW;O<3DwKeig>{knT59w977X%tcnIM<%~%Fa^L=vJpI$3 z`;|<6@6sKfDGy0RIBh<~su3$F1oC3~V>w?z3R4?Kzlyh;t8-&U31iaQ-sD`Y7QAWR znw81(M!P1-0+a;w+WQ9v!*}PXI6k(1koVa~g?dj}!4cn{TL_vn(X}5t2@eR_L(z(( zy-!aQaVMPFJ@7q5`Xtg*LliOO==1XmY_3x@WTNLNupwr2DqrkA&0wWIPb01nJ$ zpECzAMd;_@|L42=7o-4jVA|08TnesqZQ3xLo_KNtp=sA}qF%U)EL+O@aOpZI0?ByQ zS4?r8JLzzooitk^&lOd-^g_SyYoMC5D(H*wg?!lFt`5T+=761k(+=bHRy=OI$19&= z9)82;^hk0z`}f9R-@yQT&>APya5zNt*~-ho_hjoI{+cSgo!0u>SNv|8fwvdI&FE3< zwJkNYmpc8rrSWb%&?hVyQPVps-yWKyNk~)>l7Z>HX?nM|{sA`W1R3#(o#6XI2oOm_ zJ>nvW^32`RTNxoq&>NY3#VETX`%TWsvj}*`+$Wxk`>=2(mP78QR@!qbW`0BOpU(N#R@u|%?3KjB`Bryn=has(s{E4|?t~fR z2@uYL<|0rVB8^RujN->E1|MHN$(9r_NZBw+Zto=!s&6WP#sR^csEqgRxpkrTq->uY zBw6K z$US75xr{jbPYYC&7TB{QJRFeMUNT#W?)+guSIHA<7%iJML-tNztBF(`UIJI6 za`0nkK2t50%?tSx+INZcy0Vp&=%F5#XqaD8tGZVk(rLnF@j43{U0cSuP%H!Ntn%Bl zERRp^^}QObT;K@PLNo9~6?4bmOmHffp|ur2R;cjR`NxoJdA1&-D?Hm|G;a9LCHuLy zf3QM2ns1m6C5a&Zi*7C7dxmOfi%JUX{qx~+Ek}~1xcs8y$%Qsnx3fWsilGMMNdm~cSrNtdwkJpKMezvo~nk?2d(b>R$&;HXKq`dfoZwd zZ6nn=vKqEs>#R-dJTOw3_=}rEv*>qK@h`kld>vP7x?n9(_AYo15^dktc%fhoP?KFV# z(B75++$}5DiZAM!u+0Uc(MLMu3Coz7uqpCRE#V&LFR3~tcP>cmi+bPXY*-_Nrx?C{ z7*Lh{LJ_@JIY{@&r{s==Zlf4k?OOqdeosoyQ$kpj6an(?Jyw?IMd*!t!nEJ$j5EqH z9vD%+SH#;Oro-A>wJh~wGCn`DAaIn(Ub&C6@p26D3ZQ>bNo*ahopb?+zHvW(8w(wm z{}ZBNGJ*LMX+ZkqW~MjtQO_aA6*M2Tnr(@`l=x;%4D1r1s{A7-%TFp$zo`YP!j%!E!|gd4Rc9q zY8q=IzMb1dAigke0?$(Gw_Qc0bGj%~aS>-ANq1FR&!*!vc?tdi^(8a+9zpX`#GQP* zSE`TKlma`ujx;72C!d5{@n;K8p82lK9BP(Bvs;I9^$lRiUo_uG;*iaKN7ncdN_ng7 zP1>0_u>sbsGWc@{r>dSzAyLx?mPV6%*eW6P+`3Wcxh3)~J(z~E+%nNHdr$+Nslii- zZa%Ne1nA!z@;X=VPJ5RP4JW1Y?wYHcSA^A!^rgOS%8_BgE=xDzgRw60$oM+D-Ak93 zm`!z$W$!?ndLdZutCrQ+1f~@pyJ;Sue@M)GMP-c4N6x}uYrC>`-Rc!Y{n9aapcT~B zRPqwOr3oR>jZZ&_LcwU5je9xwEUBp|g*|w$%I7sfJGo-#amQ`~W@($dvqI;7pVdinq6k3tBU=zWJu=2supi3d^G%V)-UQlq+1Cp3rBTUDUI=ep$3MQ{ae$~))L%U@p9R1R2C9}m z6Cj^akk9Z<6I+ui7(mKx1Np@KEM7u@d;;-({6wr=u0`sN0O~DZ3%}xOLsES}h10>* z!O_9co)nlJWN71{Yo!n9*E}&>W0T!vh%OVEKQQ2$&2ZK3p>JbQcXnfq_M`vm>26z9%}0G+8OfaOCuB%`fa$QYpMZHokkwKchJK8PO~3FbyM|3G7eLyoYAKmOH)s#)DCa zG%IS#V0Fa5ka@FSj#Ln9TZ zHPlB5ISNQ}(vRY}1e&vCknRu#Cdn2a*`dWOZyu*i=0C}kt4W6_u?Op%q<~yM*~D|u z1B>k;CvA$&Q>*edYf5r)EjYYSsqn?&yk34ap9sRL4B1<(wPcurTl-CbJ3}<{x@XR_ znWTkg8f&H}g>FIL5oTn*g@2}Awz3hmV&7&>cZ+FV?lQ#}Xfc;3x7>ZDD%Ui*e;pm?XTc7f%O4=|#PcyMCWb_3rjtJYJL?0tOE|(h?*$pX1*< z=ze;}7ol5gN{cNDrDa1;NH!j^&`6=dtf)*k)Obj=TTCw=Z-pweY8S0h-o8smOkja+~}d9|(ms0r9R=-L^X8eUG+y=qQm z`@J9e?az%33Io{GP=NsY%XRGWyWaQZzGiYO<^XB{H)4_q7=(ajU0;J#$xz?K${J{p zGBvcn={N*ZVwZ6;A_m>B)2_P$+5WK9pOTW-nSKx#paRAXD9vBdm;nOw&%^)1JMjf4 zy}iAIUrlaCzMNJEcQr7(hOP7ahHWlXKrs@U!Car*UMD1OkWl8UGydF+{dbv@AIGg2 z6eG_lUkdu~r>|>ouh58nrp*;{o1LfM?|iMulHLss9zz^qM0ht(?o_?n9*W9n>#5h8 zTKoMZDomv<>W(8Xyb+L1#OqQC`itT%x}C9%La3nZk0&8H9NJU&qI|g~jQGoH>wM2s zc?Iuu^6kMG8o8$6;R;;XKH>*4Yc~lzwJ(1HWATncC7B_BI+`#KqGDMH`8Ax2Z!MR= zX6i6!MT2Sg=iapSbAvD(Z+0uK`%jX(h=VHA@LNW#FgPi+=2El;_C~)rz1suF#q-zk)&C>X0UIDB=D1lauG0l=q*Y?@EXV``WhI0 zLP0)3-k5)PPNv06v;VrE))!ddm)Rd83@B(2BsloR?ce!FzaDg&P;lB{7rt_4k?GNq z+GGlN5dMS51(`1J^iyA0%87eBw9Ll+f-)2Kq&Wqj!icEqHHWL#A{Yy8SIm$Zk#s4Y z+Vu*^3Xl7|ewyy*`X;O6GY3xi1e)-tZ;bSESYCO0PnfBO!4OIDiA+v#YCknT+o4sP zk;8t5CTPq2Hs^kc69gE@EZ~lfOb%C{h_m7FXvn$ngqew76k&Z4B-mSn!{`27T;2%o3rC}2&*EzQY#Dt%l_uw@z5>&BPn$~8~Qkf zk~GyF^29WWq1LW+c>-oe6rLk|Digw7b?8;%XHw0H@eYEf-5XWTIWP?)U|R49hcvDV z-(aM9!5mIwiY@4(OCD9e8GhVcag-mH`iWA8el#il zQ~LK7Pf^}A#5l#t8WWUA*)toVi2IDON7OU=rUkL%cjVh7;Ubd=aOCPNtoC%`(89^Q zs~TU}j}MeTeJ{SLPJL$N`J|wgON}77;XrK)NO=)8#HG&kS$W_kYhw?wU*Uy9yyMmBH79cD};PuxEd`_FFsP-=6Rf#e%<% zDFfvBsc=6=MPTek5EG#(PBMwn;k_U>XHAzwNiP=A6tRwDpv-hh`8SKQCxQ_@gmwl2QV>weJwS&1~iq+x}N(YUH@w!9S*wncQ1%30? zW189r45F(0C#rG#r#y!Yvvc2v_YO{H!c}A z5A$`zG%cAi{LrYJIw2lm_*2byv6KRA<}#iion!r)xaIn^JBa1^=R?@z5K(j3M)}oU z81b&qM&L&^;D=LjrKt@#@INB+p9%I`BK?1~5ysy8iA0b`Kst2~aBIf?&aL^ovf@n< z01g9I#Lg5@-2ItI1+uG(`qmB(_6E8ZhX1GT55VTUbblZ**nYV`ihxM?4!6sSzZCudtcdOZ4i!mlTaXEx(gjSZ1hxuALxW25Ld>FDzBQFm zFqI{g@G5DebE9FlW&vyq0D5dDl%xw&hz0l3ocM)KLbmIYP2 z9L)8|khSb{l3QiwVN??-eLjQY5^V7{L9-Aj()R+YE$rVIZ0d>>b$wKt3u5UYFQ@L! zP*XC=_|`tMqg3aV)`0V54i?cW%RdLn~h)0;+QQQGWrQC58J@A z0|x8_i|t<_rZ^&5ir0k47R7T{y%>nVl0;cr_nV10-xC3U+DlWQ7r=hV4Yz08{}g7n z6OSlZxZgv9=z_Roq3?oXs{J%fS-t>bO%hE)@Y8vt8y)qV0$n|B+G-~H<2!){T{d|` z#Wi#`E}Q(5`cxU`CN-dKn={AI8cQAHa^lXqjq!YIh-b#ga@3D)CrQ7x-hUWYMq7Uc zBrG>T@Y>HbUYCSZ!+wSK>$ogt9^_|e?}Xtw;6 zWcmHQfAOep9{&?qF7qJ2M^~4LMQ%0_8#~A4I4`!FL(a=Xkk9|TkMvJyQyo`*PxQ3i zlHOWsE>`yLW9Z#?E@&bqTszy}lfff0d1$|Vxg%l3EJuuAhA-bf*b*09+I7MDj2&{S z#?MWV)L(0-T!l98>wKNCEq7awBuWCkNeg+L9@doP#ODEq3tyS8V!>J2sYvgKLhzyf zVA~)B0o)H~=k#jH6md9=;^`z-_gpNIG!wr|<+V{rYHFQZtr1rqn}`nv`e|f^hLtVR z0g9Hk!NpAt5k(5|GKG)AmN8iI*5&0griv=eMjGxa*>=0SdPUB75P47dyiucmi}rmr zX7P*nvf&vAHwvA%jofRVK<0F>$FI|IO121lXvwsz3CGv6pvX^#C&zoP(Z;6~mWmJX!0(IYb|uy%a@qK0uA+BGpwY{NFEaPe{2MKA z#fAUkX?XfTsla0oSP`(x$>9WWD%{Mhyd2CRNC>FNKdkKv++se0O2;5c=?6~q*Q1c2 zNei^`y4~#LKbB1m#Gfgt<1r$^eJO7U$WQaKY>FaZOp|O zhZc-<5bwjKN}V=f-j`UItz=Ore%D4yGMEm=g^i~+nw&I21(t$am(pZ&THI^%4 zgXMc+i)doJ&958%MC}!x6~4)%>;G&(h#)uEP*{{fKXBpYHR-WgwgaMS^`GPz(s1@u z*-qtpN4i2`+t55Ztj?m#d zQm?FZE15)$!Sj{(Pn`ODznJUpVCe#uzje!n-ImtXSB*j4-TAJ{sGDe+UtVXE6L5%y+M}L z%UzGN&f-sc7lag_TgZB*D8eCH;G7wEzAY~M;9Z$8?F5dEwP7~)a=}@$FL30H_2`tf ziKCGA%tn?-y5lutnx#>0b(n!?6{%SopHFp!FqpASNMLQR;dd;>4XD;pZ6dKT1QwcP z36D%<$6}>GtZ8Y!gZMtwlo#9Cu1}gq=p98@+-7sC3t!U~6-5^D)Qp&LQoBxn;X67P zPZ@l3&)LfQKvc;raUZ!jVM9S{W5mpE*6a&`4(6wvq zR$8#Dq`*BkP7p2#R?JMBoyqdw=1~*`zH(AoM?pHqn4vccHINp-#|?^v$`Dnkc>u_4 zi8yiYU4S`piL<4&O9VVwq%0*~l8R4!EE%ipiYihjMtRiw9pAh;_`EfDGDb(s=YA4t zs+1946_|?>YAqv+OhdsF4IQuNK{@jZ`t(iXd;!8(--)XYh1z5$J*!+f>9Uz!6LrY5 zKY7r|Gi_En@Nb~LWJkS&)_?&%x`Hy?T!o&sAWqTJ3umQU6Y|P$iIRBr3G5mPsbIfx z=UNfSl19eFN`_t&0*+(qtJAV^Hg&2{7TeqVZ9cfHcT@`f_m~haYDu0BHRq_l&|4mp ziE<1J@lN!#>`|20dVO4;5RgzesSHy`xjWX*L#$7L&KI|!T68$)Kcbz)f~>5u$}`0* zWVay|(DQ~4BZ8Pmx$da^Jt&Dn{>h$o6Z#cMliqlsx(?R%+E>{#LxU?X^m3HyFSw57`U%&NZU9sR(;*?W zui+X_lf6feQM-ce_8PkkTKRua@F9_~M1Z%yR`D}5xGEoCzCA1QRoMzaZm7%WZ=t%F z_?12ZApZ%FdpJ0O@sF2u)l07GPrB-V?A`y#8H)?xOR%QrW9IA6J)+}m>c=e-ES&f% z_d*a~vaTU{?(loBpyax1{9DR!&QAqM-+a$4TkZ5{8aK_i)MCZK9nYBTKNw~5(aYgm*SM7uO^5H@U_5G~4io8tq;QHSJ8O6G8g zsD7um6k=tERA;iXeWnA%jJG54xFq{ZOpiZ6?Zwr-62_%+plV8>sh}b7bnTr_1ZGC zvUNM;xDu78YSCbtsy}yXD_Jusvkh+ce06eUR9zhDea+h{%)Lsq3lyxX&!4B-8@JT+ z_EpFW_zjiXvGN-O(?9sdo4DHgge)K~Y@!jE!1bD@Z>Ni-i?LC=E(Rgk3T!Q_zZ{xs z`_MkC<5hR`KrDKXz6Mt?4{rj|ql{Zbw6tD_=gq#@iAhRlTN!fIxRI2eksM(Yu$C8|&pEz$OJ|Gpql{ zFYr&MJNJ4c;US#g`v13OG0GQF-7ty zuLY%g40pc`lc5?8(NC~NJYV_pv=rT~Dy}6YyP$r@p4k-%hRrX_GZYi_0qw;CJx`qr z0_*w1MsLHpnn(J6or}S`n=-mS+Y07&S&K6Gv>8&_=}43C;et5K#51IG8twF=u1+>{VIM@zQVQ=^Fm3@VQq z_9349TUnd;d1Wu%7;R6d7GxqFFWzJ61ccoAV`*FkHre=$DL7!71;o3wM%=v3ejP$G z@8Dm=kv>_PP!k&xL>6oem3iSn(s#!<)d8Q#GZBBL2ScWURBSnFqxYLf&Xn28_to=x z`I#Cp-YOgE*M}=x5C?-0&+vL;d9|e8;}WalX%j=J?;{JcMn4fR6;*GSJsa!EOldLSG&7h+*lDw^ zn)YrpmLXy1@zZ!Sgs`WG<57rE;jmM5)d;(3zMP!ba}Iv+W&fCVc1u$t4)do4LW={@ zjR;_cbk`PmIqhsHo-;550d*zN`Kt!?n^5lC-}GgJ@xMLr?1zfPuL)V4V!J}!@vwnKZ&bsk|f$XUXCD}@W2!MkJDL5;*Y-eOJazY$xO z5&-#5W9t5T=hsN535^F!vg>3Q;vLqx?SSC zkYPR{KKy21J7|ZW@owOx(CoII@|H_>@zjiaX+2@zx7i1rPW`A~ok`5N9!b#XYHXzU z?`J7{xKo8%vsAYA`!h3~BR{%hai&esK;YR{!j}ln8hwHI_)~Iu-Q$f{d&o|M`@5g| z0`umrHY!as=S+{;+fA7hFw%2^N*~|x;qFqbc;j^(J(xOx`zhLL((gg8ev)j?nbsbe zfh(!D1)!zd!@Z%0gh-D)4bIFqDJb(fo%a|=ICd{R3NG-pNk3nmeY?luUfhX=sRCCA zo%J_mNKKNnj7G_=HEGE>MEMYMcKK{6|#VMU4qU_6VC-TMwI2P zUyyRJQeWwgSt{REM&h8&bNpyC<&-fC?PCEG4Ze8U>vDNpnGSo*Y4~y&LFM8z zj)BEqJ~@?iO!XWX&ZMg6lifCg(!oJ(vO66oNA(a0G_Y+4qaDNZXYe`}SB?+OO|as? zueEbQ*kbtlcBp~bqaU<*lIGew#hWy@`D<;kg$kAUX zmB^Kt6kY5AR-XOk99ly=pqJ1dAnN@nk4akUN&U=zBVqqK`C9tt9*~PNwEIzrgG3@! zVp0NbUC~hgMvv_(7`jm)zv2|}0QoGSftc+s=M|@j{qpcN+$uA_<5F?=bO8x_K(>^JUDvFpF6n;?7SUe_Ic{CR&9(<1H*DZP6eR#Z9Tqh;efL+sS`DqjW_4ZNK8gzOtaj4>>(HNgzhnVBK$y_RE z2N!iuVL@LRYBZ45f{;juBpBz&=ix6(f<6M1(q_pOdv^p@x2y*{$t8Pw`+?1G0(XhL z37!~VP`!NF97)O53q zr@qgmcWG61kiL3P7GTA(>GD^V(fWsmPG=w>`Qf-mL>7gvxhQI~`qLkyCbDrk_0G=l z=V$Giosk_X=+0%3j*%>uO?<~S7(&<3K2gQxY>@nr$#r7x^|6#ku$AE5bM}dG7ToW& zs1vQ#A}zidiru=1c%kJB*25bLiTWEe=WkE=eH~s|eill@+~UsulAXP)L2UCEJEL*7Wl=}HlAx`_k%?KAij3Yq zOxil+1RYIuS=HrX0Y7PR)dWsc{Cvqxm3Eg`=;Ovd{&QaN{IRRG)QqH!0u{6&U$igC z7ZdzRHVpTI=I2_Cr7NCnmBZ6-QSUf6c?dBa)lhRd5xr5&6SO(+H6(VUW(;IZt0ONG{X4{`VFXl`77;l$y5MC)+0>bLY}1Mt-<`ZmdQ`&z z3)jcI`mj9j6hWLNYya@d@-c24fU8D+ASv<7%wuJLnRyXl=J|k`M_!vbJlOZ?C2-U( zsXytHz%XA#AcYRpj$kk#BouxQkwbzPGcmPvu?CtHS#M-jA(7y&ngD=nUYRTR71bAz z>H~3JW;kvi{+sXmPuACIa?mw8TEXE+?Mu8}*|e#-K)r(|sk@Nnj_oW=wycw`-l@Ov zzAQfa0@u=%Vu3;L%giDdOB8IKR6okLOEu#fhl~vzRW^SR0p6hxEGkbV-Z0wtz{=- zEd?NAspr;b6iF??mw)-hHmk+aMCklPRHF}tJVGvV%!3WL0+G?IIa~-6Erb;1DQ1;G zEL_kRD&moH9k6X{dRi(gdO=)$94a9}F;eVf>Q1T>==+sx`iw`Xf!7I?0uTHu3Jwkh1qlHL`^WxrW!C|a z#L>3LqOTXSbqLNu^=4ZH2qp|-6r>}ggrI^?y_b4nj(SI0-;;S%&$TA530#Hd@STV5-J()mWX=<%RFX%b)bGuB)ToCgV` zji6Dyk!m3;cuC82j`g)vp5YTngX|kx6i1WDo?BXi<3&PTOS~$}<{OEzH_H>(s^xSy zc6}q!sc)idsb^>hGz8zwl4sHeiu^pktUZq8r?tb%fqY@5fgB6#4{PuGFuXD1LDBce zw+-?sy7dc-E3@7MiCo$~EC#Qfu7RDY0V%D$A<*CBXa`VQ97uHy4D1Ynxj?!Oq?c?M zeO+LXrID$frS4VB&CRoPKQIFt173uOjhlm=jfb1{rezKR16|}E>AjyXB)!rBr2$c0 zUKN;1`9n(R*N46K2$)DOKkRid0Q?K2QQ3jy>16=~m^2OuHeVn9Py0Ckls#&hQyE_7 zO>q*h#F)Bht;T!CErJ`TAi0H;Mi(5;X#vB=EU9-S4b|)+##Lt9+o%q2KQa*@b`kZM zYEFwQ+-6YI_8!s1N-o)Emy8tUe=}oOcJp8&8s?7v*Y3n%Rh*<9 zamWNu{y^g3=S_!E{t<>8<6yELHLN)5bgl@vl%QTyvU^^Z^K49 z)6!Zk2L_rSEiZk2$HP@Jn&-Is+W+2@m}n$3*jYZJMDo$1R?eyH7gQH^RZc{+mK%&l zj0*k(;?aGCD=X|o)3Az4*@eD*$=oc{GcOD_R%aSZz8M4%@#l5H%=%xLubboZw`Em` zo;`yX)P_^&(0l(8+P3+U`egzmqx~)-w{c}W!JeQH3 zGDW|57@JD!r)Iz7o_Tn1KJ!I-_@3$u75#1jffY^_wGEVR(q0Cc7`hu;voE+AK=d}c znk+zs0dzb-!GU0ae;~k-ZdIb{;JZ_ar-m(f%}aKa4m4t5IGMFT*Ij-T*Ijbqsg;Y$%w=hftKx_ z&m+Fk{+xqNTs$gvtQwL`g*Y$uA8jFk7kh0xruSr$9C)FZ)h!!%8IMxXf2zIvBypWA zZ=q2@6yG7)=Cz5%!za@H7iTC>Rv9J7e0bHss_f16Nsn2@;qIb*vhftQQ5PC87cFoQ zpk;xubhL|u50lbwZ>M-19izqB8g_#4g)vQ!@VMB0CYP1Cx~#)9fco^MS=FRIXmBrv zyWEJy1NzHajZ9)JXUhaHU29tTLw2J31?st7kb66y*7B`FD_1KTpfupx1}?)QiCY}7kO_T5LMf*i_;AfQVPEQo2#NfOmAWte?)Ov?~kG`(oM%y0NLY*M@)ypXSTkU z*jOUM&R?VG$rd@dOS)cxCRG1`yte&;))2vgwqZkSv<`J1AJt~~y+K+z*evBQ@4s;< zHYcQpD(Qz%zS{Q)bD!%-H5OF%5&c%K7G}H;?@rIUAVwS;X<&lv4gc@ zalkjDP87Q)$Xi#E&*U#2FLEZy7@_gL#6gtkdsNLNH4JI`&@Js57uh8X|A2=4+>did ztjNiQ8(A#0zUOrmKa0qldDd?7IYk6ZhS7J9&3lh# zMZ3SR$bAYaQtZj9OagS`8MR&%A&9Wnz&(F~rRr!9?6mL+Ub5RXsoc-iIrvZ~48L7a7k6MKZcVVX>L?nEk<}im)kFT;1PR{dwKRZ_c3igv7P>RC>WAR2j zHEoO*tzr=x(0I+GwO%18`hiOs3+@%-*r~xDXAn}NwdeH5yNYJQ#$@scZf`UdGEd>y z*!jT`5^=SWYzM}jPa+|(=|f87Srp;(%^#N@%5cL|en5b=>EYmWYRDNhp@a;`RUFXc zau@Pa4t^7Rr-hnBib!Z6YR67JxK8DSuQFxSCfP|NR7h?u9Aqawc`m-+QDE}LvKR_u zh7*S(PYvO{wW2_>7`y0W=Kjx}5kn3nL#?opuIC@)g37RIw8@J4^fEAICw6c@FwJ*0 zy%Q=qr4QeHIkS^+gh@m^(wv9l-yXTcMHfd|_MlO!Xt``4xNGbQ)~$PpDV7lsX;7mr zM?|i!h;0%JLA3E{&q7YwbagpDva1J3zO+TI9NDswO=H5EeU+y=KRPP(-tXZSb=#8V z4()o2xzp&e=WBoN0mZk{jkeQ|`cKJBP_Z13dyPy;Q%YYU_9LDXK5RN8i)S0)IN|~7 zfhxzivWl#=2&+98D|{ZV!fBCTu1JE{E7D^l3kxGFK(`ib05&wTym(>-1bu;A5ZKP( zv99SgHv<6LSFKn8rPc3+Y|))RS1K45V3h*;4WaR`R;s^tlY7VBSfWG~7==L>{P!?O zSX^S);~*Be9tSZn4q}DtaR9oFR~!)+tZST`cdx16n1S4|RUv z7&X}lo{%}AZO3O}@^h_h1HnPkF869MzY0B(2!6isS#0=LHYbfROD#M=_Nx4WU4A1J zsQP&6+vV}y`Q_>zw-nsNiWGLaTe%u8QBPm8mF5mI9#>H!rf_Sl%eUX3jMH9bx(79C zBfesV@-B%jY=4tgPm=P1Pio(jZPZ%^+47+2!~0a2@FPnNc=`#i)Y&{5*S3k}1vPxv zqw7tvH}zA}5;=S_Y8>c8hT4(c7&hJ^jqAiZsKkE(Wnf8e7$ICvvGh^f0mXnxD=cvSI>z-3U?KS{mLdaFkMPz-APMp&!$)qE z;3*bZf-Dswn`V9l3x;e>fC40X@!oqdfCrV%4T1$UrA+KD{}?%f;Cx`{jSR2;THBd` zV7;%-0)H;fdS9Of{$8BDfyY1k&571s1g71r_{u{A*aRhH2-xn08P}70cgbSjB58(> z51_Er9wep7x5z{-SmuG#OyunBX-#_QRfP6VhG6<=ZX8JIHIbiLd^3NG`VKBtCJaoS zYj!%nr@w^9Et9U8QqGyYoRb`dQ!VW?g#s&9V6oeC@IFPnasw*o)CPJrm?WnZD?q%J z*}gH5%OM2!5v3GPl<%2|#|LQxlcQ~D%(y3TVPz((;e3s0vQWDfhz#3Ofs?fFW8EQp zidkKoGVNXWBU-AGGH#bgFsGrela3p^`87Pkh2!Dwu5*4E(Y@5m$H+SyH2YMX;$3`I zN>ZZqEA9gch!=)m(>NsisXo_U;?WO%Sbawq8zB4ilepq46MZ8t9Y^yMZ(y~7D3v;Z zHv-pq19kJ~y>N+TZorL_F`3lFaeu;lKTQf9FVk?$p_Dfgf@{79!c%*)^S8V}cyZ3Lu(O zN3H+n=&P{2L;%JXdrb)69a{QoJT7IaRquI#54C-=3f#G*;RXsVn|RfHFN*uxro?M| zkkR%qgKxFx?6=+2BE7@G&6MX3!E*$0#hOpQSM4wcX33v)dS+OMD>@Iww~!4l7Lae3}wpy_vk;+twvgSne@-jBafO#wLvbI7{F?8S8M%CX*bx zjMq*;^orkL_#4S4El3%7p7GnkF-X}<_Q%Nbi&*e@M`)Y(`<1XgxTp6k@dZuvb)2U% zl~=02nBop|z7$@SXiuGUrE;Hl{9O2+;@hM-(%3EOXqo)<4{r2Z>X2qNsI~Cko+0da z*%y#h6M5E17PEFyaK47DJPc2!C4j)j4SVc6V3UT2@B!oTaF@Blhc=Oj@v7|+Rr`D2 zV>n=%1}E4jDiv2u2{Jv~BIfSelx$@l9`EBA8k?qx%V*AD%(Z)c`w3mn~lYGVFbp|t675x-En zDvRQi4aEbnAiQD6XX_VI?5GCC`Y%~SGVPI2cS#x?3Z<9qpvA{JbqVziI#0hwtuU|c zT2@+t9#6dcMES~5$E^~cI3dG{saD$JI)nBPD};V|mR(Psr}Uru?206B*Y8WUPSj?V zaQsmk4EKlOT>6QMx+J^xuQ(Mr9z1_#0nxSok$4?$D=zhWHX!_qb5gTgeT;pVuPC?K zP8+?0AGy51`Uaq&3McPNU9HZfC`t?>5 zziP3$y4;tn#A&OuFi00FGVF=xDQ<|;8s8+vKpJ=pNR|r`Qv(*O%m>lt|mfaR>jUB(2c4fwqR)48ttpT*0S4q`uUq&)$fe zU7eJu#R)hn>6f_tqn+UgOV*Ei09{61lN%M%vGBi8*$_ZwJph%(u2A{*6E$7>k_Y&b zvuyAz53#7L;)aZ(|Cnzeu^T}Buj%uyRS2N5u>V30#(2%jed)O|F|q;agA2g`fY20h z=B^L_jaT|Ra87TOLl6JHWx-zwlk8u|*gZ}+hfx5-eOI~Vn;M9ays~xOeV9a8hH0Of5Mt|!ZK`{Zl1aUI2h=> z?W`He3h(`b7w$+w$DlnI;wi24n$^l+?lzf!z~HvYN|)6YL66B4jv zJ@1=N<);JFvK!d|;%QsYH+{qYB0D>-Uw_oJ88WW)eVhElC6vN*l5q7139UJBQr^IK z+9zT1Je=5Tnd;#MS`+Puk)-oMk8Hn2C0e+q@$e+L>+Ch+JWkgsMJ7AZxK&8%MAwyp zPB=FxOcoiG)m-HZI0*R- zU~0xLhZ6t2FYRR^{qyKd(m;6(C$~5ev%fm(*n31rAyfNfb6by%$u=pEjx73ju`ciJ zGs9)1$&YpBU>fc2=2Fp#Yb3gU)I{D*y=V5GYkp!}wg-A`jM5);l!7Lv})}RmHkK174#6loD!ytP# znc?C@j2#GNS6iyQ(HFk_uf%jS|f;~m`zU2HJw>gC(% z!X01keA5g=Pbb1)YTSA^;%tR?usf#735f!=zzvF^ppQ!zx!IeO$8fqSk4~mRx^0A} zgA}i?z1R-Qhp&(`lan-_@hgHstK;oDJ!(45$5S{3#y({7yUU6rj4#~2*Q7`;2jTP{ zYO@E6gCbTpm+^O;?=a#?nW2F6fN8(=xPM3Yw_D5Z9TZ9um&JFBx@{T*oyrFrbUdpXMpFfv{BOk) zy)9FT;ApuqD?@I*$Ryv$4g2IeC0T74XAtZ6R^kHzJ$WFr-hAsNIN!hC#M?W7!4A5H zMs~VZM!>%oz}DHwO4rEg2U!2g^TuTV!f6Kpr)>b7R=dJ!7>IO+we?3q9NabdY79iuo1Y!p^-W*JqZ7mlq z!xx7jCU%Yg!YltBZqIglK073rJ2TrdhcG;&4Q5piDD$k=6M6B zal`$MA}Qii$hqmHGVFaV+@LoAKdEC+Uwf!L7f{e*ND20+Yc-0volMeKc#3NW9ntV2 zbU{ZkwJv4d=k@fP89M<@l9<6qY%%?lh#cDA$O@APyDjsP0{nx08U^7$ZL#~cn;f7`sXiNAqCQ=Nkc_2RREluf8;7POF7owi6is`a^gc;nYJyH?HnlcAa)=TSr~ zo|hwKNht~9VPoPojGojxSOG-`>4qZ(y2_<#T4qjhBlaeN$I@O}Yo^`y=*PhYr>PCB z?Be2qJ7~8zz6aLw<;l8ggu4ty&%J)E;8$$%eLKNM*^cS(VbOi@st?5abDXXw21Rk> zmZkA4CuvS9LG;GGn$=y|uRg=pPg5~Ozow+kjDB@@JG_yQKdX*4g4gHH9i5;hxdZhX zUlAJQSz)c|*lN>AKqWZ7)VufbdSX&z)wgM{gCi_a9H|~l1paR!Ppsv9gyr~*;ev~V z{8S`v5z_^r?GB6$xCTpp$XS%x)S;w+R3}UK9N6)+i4yR8>xr>m?rxI&dsz~VUCGtSNFAZP5Z|Ta36RfR#zN*gor%pBV?@qPvFR=d8 zsixn30Y#lR=6XJyRj}3oo!*OSM)=2k`}erI%)dF+7fc|`7xB?6r~3Nv-*~0J1LunO zXy_*4OSj|mm}rqySiK%gbyiq&lHHCv$M?$VE?%o}N^$)ja<|BwaqI|LQR-!T&K(!- zV5#%sNs0-XFFs7j!V}$Np~YENIKEuDhLTLrj&X3Lb}BeHE`z9e9Q0 zpJK~Bk@dcrX&aJ*Sm-WGzhXt%T6?sq4=+v?wMfRq(lf+Wp;}mx;DB9q(Z;*hkR<4J zrv(Gl-RK;M-B_%>$t5NH4lehh_#U1g5u17pu7P*!E53pH*vJCxz>jFe)E`?r=hAyO z!b@Af{MhygE9$llTm(_tL7-_F+Is6V{EN`diK|8M_$O%ORLXkHuR}^4MU+|0OOD>7 zbRTZX&O!IDW5?e$k8FpEj5dZMDHELtNs@S4ryNn0$vk9toWC1!|!tm>U2b4O%h9t>)3H*n2Ngo*6@3b&NrQ&Uy;dytx8 z%8Q+o%{|U!55*nb_YyFc=_XbM=x@V9c}<-WFSC5ZC?@@=$}`agvP6gW|FC%;ic{56 z&KqQ*=M^a%yT3$SFE$H!Q{{7@df`|;M{@R z_a=V{N@(jYT%z{OnX? zS>O%_taSUSe4I+qPILC zq7UJ`*6Fs@#5~nX(UU60x@x{f;=_UbMzBbCV5r~r;b!{d7o_*RDPN$&MAEi3RH^0#$kJ*fT z4~7gyDMyMyyj`Nd+DZ@A{KP!OpWLwK8CnsAs3v!>r+7o>cchNdeNQx8gh8?RKHKLT zw>Wqonh|)6Y>}3}Hr-*a%oS7azlBD*xKfQwm*>y&;Z*%yTK@-L4Vs5_JboX`jE2;s zqEsA7TAWi4U8nU@21{V@cHEbBq9YU~NNEnl?(<3q6l;3Dhf7q~8&NZg4HNF)_wuCj z@+f_}3olj8n{2C;2qSr_c9^hp=~VwDGP)?$xMooPOCUOS^Cvn(lLKxvF;F0l za2<&L4T>)sA8t0FiirOx%|OC}Q@p$iBR&ZC(s9N@zj}fAGV%!9sZwu_1~qBB5@^HQo1)#<2r?paM(`78XCNw(y?$&Tj!e;G(i(chgvg< z4huZa#)4^KK}qrxI?*CLe^#-Gi}xW)_xRcDQj?6f`(4UGN0-$FzggA!5}LLhPU>$t zZhow$6{k8*4Ow)FgOM_1)E;;Sn@U`iDNdU4g5~F>8!{_jIbvme;k>?y^S^6{ELYMn zCgeFe{LYP(>RoHI0U0t!rsV#v^dRycM4a7_QZJb7&C+oSRBV5Boh_#+0^hC5X~E8* zUA~0;yn2EuTibOtRc|?0EprDEG+*e1*6@6*Ehi=`D&M#E+v9kPmC;L%!sak~#I~w| zDcgML2au4DKxNi~DX>O5Hzsx^5mCrOWEHKUQ%U ze`%*2;}mQw+(cc$N!U~&w3ya3&WK?9DkbdGLs6#44kPmYbP0DD`v?we+)%r!2FZ7> z2X4Nt)H2D4OD25fCNOtfZ;u{)6DN=ABQ!e#bF7BK?#c)|MDnVXGKuXpmayOtqgO#n=79_<+cW_W6jEEgPD4k zY8Zs5#nF`HJ>x38Vx(Lp%7@GYcUy+M?r?@97cyCmoybz8ePQa1)37O?l)AJoj31Ry z26O<~|Ba2Q$WLp6)c`i8DnKfk_sW{k*Y5Ky50OmV&et!7+5X!0TdU!Pad~gw*rh&F zWW1)|M8aYcFagN)Ou<0SFhIKiwgLl=*DwBY15;~aY8i16VtKmDs$e!&I&qpGrAx?I zL>DcIMgU2loTEMz06r(9x}0Tuv{pk{{Qk<`8!CfAnlZ$i5H9w67}WZBgEbIwI{zPznu`=`n>j> zKN8j^P_GN3pen`)pA;MSt&oMWa1tsEFNbxGq-&u;O|Wpv7lSB2<0v19la`-$*&F$C{E_f$^G6UJ1#Q}v z*59MOdzg<&nt)P^6;my_ve6g$jp_>0yk|k)Q&;uB7%%{Pr8g$f`U}`2zXAB?y!|WY z{qv}0dTWSqAzRL)rue5C{hLoRUwqdN19@FQBr(hrkQ2z^nwMtx2_!Tm637Vj;6_R9 z-x>~x<>$MhKs0x#{)6Ur)5H6bYfl%`^nu)y7OUk@W=VePs+c&eab9N2)x&`pqw{HW zy%ADVd+^@KsfX-`bb+ad(M|7X0+QLDN2(BvFVn!zx21NnOa`NTXeSZ+UKljb(u^-? zpaG?mEr!SGZ#|y!hA$<#C9u{NjPTtV*~_NL_3M}T2Zs0jo8CCYWwg3tuAtnp@v2_ zL~iIHzz^~R9!S^7&G7V$EEJ9OmY4}9byQ$+#SKY5Kq;pC25bY}ptvCH3p_=_LQ??- zcEOQzO`}S5Ia2|k#rbjKnm0$r$idm#&YY1G#D0aujMrqTY{Wm_dG!_lLjCm-Na*6T z&{*6*K62%I5i?%{KOiP!Y6-S;`L%F3{8qwx!P@-r5{=n_&?U<+*5->&6ZW5-=Kn9< z>_1VB%u{i7R~R*Xfkvk_qEq~w=L~WIUxMd0wB(T<74a9}XQoF=9Z7gP%Cv?PaC>1A zTqWq-Mm&*0Fwdqy;EGah$UL_R_wvSWBQQij>1c#o-?I{FLiHqpvNxhn$5ZuN53{_> zK|r^`-;iOzfh>Q(1tba#7^It_ovsN|2dRRTaS(z3NfRRm6H{Xl35e)|;_p5hG}IlK z+Y$4FcLIvT!p&QIpPCJc;XQD}rw38skX={%1L7vu^iJ32a@nusWPkbE#W(#*-c;a3 zov!6t%~jEhM+83ce!4PWR&{gALq7&uprJsrh*l^F#R!qiBgR1nsJLNcs+*;*5383GDm+NE{m@A> zd6yRKX4^lp-8_%VDN#t5HxfYmmHvuWhx1Q6ceFAEZo(dHah(|W$*K-aXkD{`6K))D!epk_J5`B{6GBu{?1YA1heUsK|UPQ|BU_OTumdC zjO>$Mc+}^}1Yg$$HGKBa_Pu#S|H@3;G}dEtH=S=FUkg4rIIHMJ46w-t|~n;(2j!oBYX!R9K! z{A8MWW*hyESKx!jz1@Amnfazb{b#xml9TOU=NyHZ1UT>6TA98_b`(MA?;f}x+t+(s z$8T;Jsw#bgh2i42s-v{`Fbx568=V3US7LON(AC&HLC-k*%lZJl&*sKD;*xL|w%H7{ z74u+mnleP^9)ej+o$mM)^QNEPp(YhZ?_n!7J#62PSTFG0p}(R#Jx^XsF}w>R9S*WDSnUk1TvcMN_y8 zwv!H>m|~;KoZl2DHI~gWl5}{-s%W5@CNR zV$rk7)4FRgTQN)0Mb7d46x=PpK{w0)L`$RW>azOMezCf~u7gX(>}6z|G5>d~0^ z9Gm50!bW(Ejp4Dc^PwBVOs{+wRA(ZZ8Z!!;cnGV8*q1)P(&Cgg4rhR^=>&j+9oHxbd1?td z$?BHRzx&1zjRpEQz3&U+G4G(?Q4kAgVg|eo1S}*OBWGe@188sL!g%|#I}hlaMZS80 zSO`GjpSe~nY$ZSkPg(Jif|7zVKn?iA>7fUl=u5|i;_}?Z{SYfC3j8xS<*IfO5UanY z!MNBj{_dgt_ZjNnB>|pd8sV~{wT>ZF^cAb3I<0=78k8!L^99co5=$e}86u8_mYNxFNuKQ63GuC}8IK+{Nyfcdq zU3isIL;8keURiLPL3n17q}*@Lur>m3yY0;pg%8cicVL)^AjrQDxUIzZhWX6XBKaIA z1+PIqoFzBU_??}}7>RM&(2FO~&2pTJJsab1Ql-vb!p5->scO`me>~)=c~HHl^!430 zOit-iso)x|q{+Y>>3QBWk%Y7@+BYUBFPqZB4G8%U# zKLh1wZKy5LN+5i!;z19#yk%`p3qZ0^;4|iEfjIKy$kSlNX#Mai<6erO4}P^}eAyhg zzCfieV@k!kZ=1sw=-~MF)SApJVx{zG`V2}{tZJT5%-a`}anV6Eu_!wrijRn^-SK+P zx*-1?ZJW}AKpOW=*NPBjUz30?e}S;@PU1J!z*IRRRi%91QwIZvGC3o}1vNo>p*vEQ z8x*4IM=kK~Et*sZ8HNSi>MVBUx!ut}vN>8UpUNom{l|vi9|4WtQUtGrJ@QBBH1#1LFn4#%OI(Z3Z>XspV2*>aGAHBrGHjKo)Wlv4t zK0_{ZqPDWJ^XQDUVwoX);L9U0Y)ia#zLQ->f_O8Md7)wEa3=XA#Pcsckgcpo&>7WPUzBA#IEy-JpzmJNJ5mujL}4 zNB^9^REmxEL06~#J2dTmR?Y4y3JS=|uXo^+ogw)8#)nsUhK^qI_4t3X_9~#8tb^L$ zjZdm#8ErLr6(~_aok|vdu0>@&{YrKlehq?tNImeqf((@=9sF`$)I@foz)$WzV|8HqMBVc074lTFR4c)!lUdU$Q4w#3OrN4b17VxCuyZ=* z`jQB@Dx08EUi@Bu>XDOok*~EANp}?%)Y^%H7=_k?2tRj(a|@Xf=HX3v@ZfCfA9hFP zpI$B%Kg!Wfi~v^QiwM7x^UFn!gZb$qUlh~8S^$fK($(VdJ15#jpi=br#o(80 zh^UeE6}_3bl>z`DpRfONS}$8xfPNLgHDv}Km-|fs%b7TC9RB+*^mj;Hp`_5# z#k=)oyiDHAR?CRuM;g30>$g*fMAw$lNExS6i zEEQ@@eOk;=joFCIa!`p820`D`k^!^|9ei9-oYJkOKMK&LW5eCntr7g-7NG`yI8KXj zNZ$&XODaqt1@E(<`LPcOcn{*+Q*9I`c+tOW;yrGoLTxt!@wZn|C<~(54`f@kN#Xk9m!?ZPl&8G!Q~Por?YNQ1Lo_O|fBazV zlE34vGSlaaC@QZhXVyC=c1N3c|NWlPzQtzj0TdULiVugYW&^{syGCv7GxW zb*~Bw72oB?F&C3SBH#}qdj1v}0``3C9h5|NVL?w~Trz{&l*e@AYxr?p7&|S-hpj8R zbW=Qrk)#X#E4B1r)l0u*ur(>MjN3EGhQi!qF7FcA9MO8GEZ6n8A-|p#@ybiSpm6#N zwElu-r)}lwqiojWjWjKN+g0uzQFiqEzfm^*!#DgMZTyYA`ZAga(DfU)bdYU-nWDGS zUF9J{sEWT3x0AojrT=3;^!5PF3cGWmNvK#qs~k`BUWC_>-ZEX6ETbr$-`rw z731(eVCgV88Ao46%_{73@9FPjkf(3Etue8PKh4|GlTGuD-mef2^u$TYo;pFDeF_3q ze^AhaB(0Q(Gj#aK85Qq74w^3O^a*Vhh`e{o0L4x1&RJr;AZA(Aj{D=8cZ)9{EOmL7 zzNY0t#U6hcTaD+CZ+5G*atEtzPIDD$AUj@)c9p>b^BK=3l}(`;v;s*Qf4+&_*0u)G z&3oK{pZde>=$x4-+l>KV*wGe5)q z!dN)^X&aBlt~c;Lg8`YJwqGcpYI@K~ViYx{Y2r{syl`Xquvl3(HO(e=<@9{&*Mo>$ zYs$}v+?)g$Xt@?_`z6AG52!mw9DFMJtR+-mv(QkbhX6bQfrhNwJtH{9o#j;g&z0G! z!{n{L-ZoLRu+^gUlXldo_S91;kS;lXaW8%w^~*rKlJh7JX3f;Sbp*KLL;t|c+s@(%R7a z@7?(ry`P8;LjnXf2m!=~y>{niyy=2{jHZyG)_7TB46sNfG`8U!p% zQ9C0*#L13W8W693Yy{9-+A&@Wv%zD*D}pVIt?djM?|?42+JOishLEhZtgtMQ-u)>H z|BJ@v$GLwIm|(pqasL@F`}X9e#@%mSQ+U#lC(%jr}OJ+Kk( z9c7CZH01`h*;XiQkVt2Y)N{BKq-K$)Z296O6ymrGy};J2DFy6*NS_iJBZ z4C$y<77CgsZ@ck^U%?oFi8JnsWa-xDXEV4!PmNBCE}ZbVy;dW%Cz+3P>77 zSv6G7|K5ca2c{Gu5zK`*3^XUEa|WWjU*-#>HIJSio#!xJA2oD=d{=Ibil&97Qlb|+CVIvhrww%Fkfjkb@X zhia37x3zALUbI2MpqO*!W|c+q z0Lt1CcJ@hH^RJjaoqVFWQkiez;t)TLo$+yt2u!NYsNCY_Y9WYb`NFPHy!LK|9wZaP zQb|rE`NVW|3yQrbRv~)BhC)4=*raXkFhmu+^W4dU&o4~5W^ulFcykwDC0FA(lHg_Z z@;t$iNxU`;S|hS=F0OAK2s6E%85_0^^|%w(X?8>+?BpSCRtE`nBcRiMuk%Tx8koJ9 zYX;Kj5@Oh{0|$U|n}xN3xh_DaVdbLBb5$B*Vr^l_qiftA1?bkd*4ww1I5@RtSlx)C z#`6CH9DD$9uz^C6(<{J%6Bl?e2k{#*{AKJk?*`0>DKlPk=E0*N2s#>qZ2)-rNu7y; z0>lHPfI$&U8avQ4vH`g=0AY|(=#_pOjkzh{hzG6G(WP^&?pane4oI@ zO#&adsDB|A1#XgtSme)}yo!h2e66t`Vi#(Kju#U4zk+Fb?h4@ zEpNAG?99eTS`C06-Q!*}`C>SAC)leS)a^S<+%mhvIT)jR$6eF12_)-BwUn}K|YYmUu{tJ;U~7ptuz7JfF`quY>?WG6D90?%nGgKw*b-08Jl%m!yT zk>{^!Pe123H^&GeR}ZV_rmFOj6WO@D9OFL4sE2z$eKCuqqQF3>Jd0~FYuMP3AlRnWgWj+YHQ2GFRK+viAE)+CGen=LO zE&B&lQZRo(sb9`t&yh*=Ms;mpPV>EO#nVv5N#D*SgE%I6;z$r-PmWN1h z#z270OI)yq3<4(cW*uIMM9G;qKUoaJv7p$F zhTyHmD>-%TNKLMMR8Vh|hu6o=6yJs}5i8={L$G{334>c>4z@wYP;B64YTfp;Z65#H z+Ofu}I-0{#HdqMp7-&D?Z%smsy^bLi{X4mayU+KEV3&Em=ODA{kM_XnvW8UaFxJu@ z>+IQ13R9-GEucnK(mTdJl{b?F<-XF-h~9iL^0CdpkxyN;>=I~Lu7L*N%e#tC{tNj^ zK>pUq;HILG+)tQ+It3u+5O_Sjf*DkZ+z=NU;0h3OeNl%uGg2V$rW;TLBw>H;Nr9S_ zi!og1V6Pc{F3Vz!E(!du$9P%dVqs(gwg5Q9?JVsXe~DgRC1V+xF3MYeeHD-|1)L$` z>vWSVAbbhLV~MS;EL;F0AjYeZChhen{$+{=_@YNbSKJLi=LjP^BMTD?^CibO+tne< z#o_-0clb}zt$tWtef5?CZZj5r%gVaOPxJy&|5y5$EZDnE(JalcW zF9QCT1_jo=VK=d6KkWt@P_Tyv0d|9TWj9dJi#MU_&k&B7O|C&M8rInnXHXu>19?`WmJ3|iik@^W{VExZ;iCVo7`KU_BH4k~>RF+E;U{0zdd^2y)<+FAgx9{ey)K`j7eF z@yB$ybdk|ShPg{;0>9{Zhd?C=AcRW2868`ry6f}J?9mENh^&A5cDYT1MqGWjmF1d9 zh}Ab*`nU>w=H<$?{BpLng#7qw`f3xZp=H{z@xr3G(yTgV<^Z~{%DtsjVdHR%K}SLI9uuy{y{ zVuA~0+*`_y^FCEkF~k>HO%cxY6FeXio;hiZ%1A!`M5AaQkft~ygr@z;z{i&GsYCbP z43zm7jZ1TTaJ_OlI0Ny~D=WLXfBi?*1+jF$49^QNJU|8y%HYcI{u(;fy|GLI5~Y|R z^vj(z3ZjyLxT=5*oshtf{WdZR{54$%;{|o&MT!iCL`fCcYG1v4b69`L_p>trl(0+> zuOv(_URKv@#0fi25^=I+Y_?-~im&ijt<-P1~|`cuf*4D!YWGwGhg+?8u_tL44hr2-SepzxxkK;?VOc}am< zAgJ1VKmO4PzAD#!>p9V##7Ad@n+Ne(L4<4sS`kxD6iIRi=}PCqkxpa-OdYL7a7`!2 zP1_|N&-I}+X$D!cqLYLS^|Z^6n9jLiUP|+u9d^#HlbxEspT8Btj=F|)a&{{r4aE4> z0@zuGcsG(x6R1JgN8NpPt)TaxT$9Y$H7Ua;LNvByU6p+C@n#WNa_j$*4Ra4W^NdbD zs}Dp$P%zQEECyaT;j|@Fqqp)pf zGjeU50UkZ0p6G~N&sk^{%g>hY!+x>QUg%pNG&4@cruKJT^nob8mxpMoA~^V19U z!G9p2_KW)gDjKli2;hNzWyk1RA&Ko8G3^7kDia@`J?){q=@0yWog9B81dvDnbL$7< zX*Yvv|5uaa|7xiJ#2dU*tfWzJ_?YaQ>oB>sVu!|vWKqX(b^n6BZRywKPblEivGixq zwXnBWR6nk1^UaV{d;|z5U8b^pJ?Y~6z-^m};}lT_MP8t+N}HL^4CdtRCVDN!GTjOf zCa>U!vo0=|-r%oo9p^M+z)&y#+c+l&ai{SqAdqg5^v7cP51d6LI0QiW`y&qwH1u^X z9IHtN4#N0cJcIzDOyjfxWG`2tAckRjN(=`ShKrUP;gMn88jfH^Q}A2Fww1XuX`mMF zJ1tl=R6#;g2G3^ilkg|2UEg|3wFdGpDq>6PZJ8q8L1vsH{RJZPu{IyO^1MAdRV1Bn>uTu~=!Q?V@6LDjq z0`^naL0|+dcmX?8S8FRU<8=uLJQk9ofwhB!y&>4b=!c#W5*7i_IDa)jfR5GR@dY2N ziK&tO^)3wHF~8a%(foSbAFGFqW z7U+|`h!dzXYt1yVFDWiFnKjU06}(o_>d)OgEcDNW_A^XhOa$LK#Uf6w6nAE#Q8}$! z3H?fXWH(L)j$hl;@LRFMuY2}j+)s1Z;n-Za{aFsW!ZQ)&omxkN1+O`!Qpp2lJ5?zB z16*76<$Kid4(%yojTV(V*{`+@*<7ACuZZY)OA(CyglzDdGv)Zi1tJ0L&`asV zZ?Ii%XNHfO*gb^i*u!=l@~lODQ{PLsLe~g%kXIw^q;bzl=V9|=oJwMF#fDe*hlX(` zM)#=RDP4>M^Fnd0{=}I6%vl3XM5ihh{b@-D!nh&IAp{upz63P1g^82a6{5(^E06VJ zCHza$?a%GnFN1YQVIs==0`h9}c$}r5pYgE>UX$vN$$RO|VyGWc$UT4suP0t^C<;cGI&@5#xEjWNue&IoX2c1BFWLu4yH&n+Yc4i-B;$`=CjI%#_98vcEBT@UxQL<;RXW1q^ zUG+&*cXm@>JgmfpXvYqKuP=!#E1j^ zL=32M04+*^2g~(}$X&i8h6FKlwoJ~YqsQB7{`-oU@H=|^ipKn`1h}ja_%p@=Vk7?T z4S?l~{F4|9Ky7{nA#^`K@gFE~zk-o}S>XQPcj*6Q#l$XKJcY& zseHa_@gQyatI)GdZb`8yLb(;n$xnLp4J4N<=6}LMv2|Hg<&}>q%1fY4Paw078ZnfI zZ_bYE_=#bhdhR0PL`eOSMo`cOQPiMF{+5Ikl)Y)AB0r*vyoZb z1&N!$a}iZ>yfN(`Jz^vU5nt`@@C6iqFpN6@S|UIrhN-=|k-fR2{f|Dq3ySeaf4FrQ z8i9be@{e609tZ~x5pX*K_E8}bA#o6G%uV_2&FPJdK%{uLE?hoFAP{r)ug1j-z`+Gu z81vP>@Bh-!{%#F?N8G$J)h<~C|0H%>c0qB>U|nf61+{OoMNNF%=WKo*knTN_&3rBvL^o zvGLy{_9fb@CxVGsat>l?J71E?2$AM9xGUT$JVfEtT@&{Co`kXC2d(yG-|4pqK}jnz zS)05B558CsW=LLVP=i6uHx<|ai~fh3?e2zmreHbM#*UJ&<> z#t~?!pU)tFK7;=G4Cd!EgrCn4|CrO4iz!ey+KgI=FIpq5nsrw4y3B0&R_fTCL3?yFH|twQFm3S zrtd-F1i>L!=SmV&4^8ldl(4}nI-FVcyb;2+)j4eMxl;gM+jm0Qw%f5Q>9vDmg%|Bz z$CrDi*Ylk`_SW0?gj?25k)1t`EphEv>gt5oi>a-nwG-IT^omDX_xCcon2Mj^0Skx< z!UCd#(AT1ZP_Tdgv_OjXm(19|W(&Ml4uZzQly|gNxw!fdSOAEhFRJJOnLwt8K${lZ zbqDSBAu|vG`gdLC?`r6h@VX^qP$B4ELem6q-12@`DuwS)h>%u9BkaG;;9bIWFH)o_ zD}eIOy)#b&JWj1-JzQE&2VZ882UrQ?{c6$F!a%0yuDLZ{4H7cl>380Bq>c*o@8fSp za1XRkvq#TU#Wj)_m>0<7_W9~H?-RJPy!~WyR%9#}Vo9xcfBmywYiIPEFxIGTuY)lR zthQulrG@$u3+lcU$8>pYES+HB=i!P-p&ARU&55sjZ3oZz`W<(l zw?+*I2lYj+j9X4TduwDH7lI0Xn%ty`Q~Z2v>CDBwWclSj&ik9=|pkbz9Snm_#LoGVw5mk4o7;iXIjGMHef%Sqac>D8DvPKDC z^_P(;O$s|%t_qB_l#^B~5=^oXj%PU2GS1QM&d-m%n>wF=`We|E{hT@DR{aBP?4|gM zfy}DLtrHfH;j^eP)^O0>-aL|!Du)>; zS|2_|k^d-XhQN3jHHs2ps0H218A8lw6=uT2`RU97-aL_w_* zHPk++wCfVdfySd!e)hz}X({gEQ(WTlZ@vd%C-AkSy3+I}<$kAMgioC1ycgUnyHJts z6c3!>;RQtFP>!d3D5I4_&q#^%jNEm_6 z`M#AsnB@FK8anRxn$)`QV6KDXJ4_IFYyGmatL4)~@?8ta0GobsW1@XrZ9Mx5_4)eub4ql?wVWhj)n5{nStESXvzY~aZuy{&880iHcMN9a} zQ_J5s@fAA)-*=tE|Ha)~z*V(=YopTL-KBJQNK3aM-QC?FE!`;~4I(Nn-5@0(odVJ+ zQX-AtT!4yu|Nr0q&bjBD``ycLZ*q!znf4xQ9MYBKcvzb1&cxk&Oy37#B}DphvB1 zR3UE#Q?wAx{8q7RbMj?of4O}3b6kuHEy9B~O1$@vQK3x615mfxSq5&}Tiw3}d?O&a z;$owBUHb)w$pY*dkXjc&{@+exlIt(rhiCyXAHaU_yc?$x0`gJoU(Qr!pF6;>DErG# z#J~gi(ViyGc7Nnd{umF3fI$q({khou#aH}Afcp8vATaQ5U#J4ASp(&1fDi*(_s?D| zz&vSIP^UsJHm+;lH7J*Id-?zR`u@plTt0uA=UCsq*NYi)WCbR_Xe$I$Z$qWyd#uG! zsoAZh_a>k9r9nuwElThRGkD6$q=i}zE{~3-u}2q}#@mN1(%jx7kRvkG8>D)CFuDD5 zPM;1-6uMQ%H4Br&&JN$0k5L3`Pz}OSHNLfV3?yWB{JfC6IkM>Ng4aZw>4l{NNiZqO zQ~ZRwa|yrUTkA>*w-j5y>$5B#v61}D1N2Cx6YmuU-=nvB+t^v<48!&PaUyQA4|-#{ z?LO`GpGOm?Xb6n!%dbIE??`!I$ka=IVmfsk<@s<$GR5wA^iF7y1+3%CJQ@Rz4oR)z zur6Mq#XJlf^#{eI(?XR#m0(4&qEo5=P3GixrUce?pbzH9{qLOvI}NdoOF>-XF2{dM zZQc=%T(gk@2FuG=#pEBs_+RGzFdUN1h|qN`bAPlvOIQkbNg;XGMEkz(31k&&UKG_l zLV(fG*Lg%P4`D6xin26e?U(ioV?%Cz6r=YRtW}v7Es&6=U$>C?D^5cfy!w&EHT3#w zsq!e5K`bbIRRnI*8Jy`jY$|oLk!nmLsvb$4&}|SipRg{U<^2n4X9)HmYPk9g^(HlI){OX0gNv(GhlQvcVRFD+Pm1AFdCbH z+`8)yN!%}7cukz#~A`>N7^ujiB z1g=;B{Dd93-8g?WzCfJVMi|VGu@RbN^%+M`++R3V}#-|FH-~{6qND7K*~u z)zDY|(=iTutRqYPm>(can&8RHheA7w$KJeX49$8FI`5waM-ytuv|CXcZl;LzhNGT_ zdy&}YFpXW?n&sZg$1Ab@5ITPtCtBjUqFeGR12f(As9z!sNN{H0Ljn07Xple;hk$?i zq1>^TpNubbdIdJA=;k)zZ>iXeUZh~$G}H61b8$4v`=uy%t6mU=*1L&Kx}(i8;avnK zVf{EmOHCP#=-;%yxD=Utqtn2}t=h2D({21#k|S`n{~d)Mq(^mTYB8eh(;`{+Jcj!~ ztU**W_f?1MeU9wP2?EXO3nXtcsZCrDl*dOD_SF)T_xqc6TO#Ye6L>G1iAu~uB{Zr& zhwk2d3Ax;E$0$E?$>67#)MSfq40mMKVHRA&*31q;*MtRh2@sNSqmNB{SnPSkxkEo2 zwXPR6=d|(zN7(W0dlzxjgmrWUTIEL34pch%?hLOqYBAqMgC)lDQT3=7OMN5BLhzrQDTu*xA0nSd)kR8zF{~e3`C)?jV zi8(YXo(Y~RTo5@QjGKQ+d6HUSWM72Fir1#)bR z&v=Afd@#NJ(4Q-I3!Bwu`x&Ubw3a7X$UuhK?5$^8ziNF#O%Lu@hal};rquOd`JojypNP^$@Ti^*2cVbN+#NY zp7Bs%(>rPxZ4@3CXFc}=lMbsamB5DFCN|M?PVocJ0|@HMQogxDvx!P&|3IiZtGbO< z{Fr_I9;*EN+Cv{o*JlyYe*V5HNs1hN&zH0f?B;(6fd1tRK(kr^NCDK*{(s+1{{l~X zhmmy|$NMY21^O=de;`pOB|!GH%nW$cipK8cH}4+ol09!68`FXQ{#E1)vvv0Cq7VC} z;b(#fPL={&j6yynB`O9U+l;VWlN5)MSqy8fO1u9Bh)xJX<6BMV5l9m=i@_C*?d|1wp)P(Ja==zM}5r+v9g)}rj^$uJTZX~eSk<^Enr!HAbLi1OqK*gNPZT(C>G zAjNxPN0B-k6pcPt9E&@OUPa7Nc%yL9=4LuA4^wcJ8)ytWKj=EPbtjK~V#t0+Vgd1G zYe{h*@!{UvLuH0N!lNB)9v&w@?4HME6axzavvUt6vKu(Um!6wPG_STeejPb0*g@a9 zc#c~{={id-gGx#`>Wl5huw&>H8|EGZrIoUGSR`w^?H7Ksdpx~4=1Yo!jAguZ zhn(4OnO5u!+LhpV1R|8{8q8*9mFrwJI5R|7Nf-E8^`DU|)pWBp%waL*yT63-@)zfX z44(7g=uV>NE6c;-Sal+Kr>(I&vxREnZ}5I1A07@;h3O>s5jEYg}Mt^Xofnr%zS<94+*d^Xv^<<6|t6;;4i^LTPh`dXs5@| z%-uQUZg5MGng8#w^=~pPdodc^_bQKK(vlI!x6iy@<7{A{-}OYVy?#K0*u0``D1ZMO zBJ7X7QAG2V1SxXCM^ttVHuHg|A7Aw&T^yxBuexEzZD$C3rP2ni{mEI+Ssa!e@R>Zu?^PtLK2S3YEAMql=7p;d^B<9m>{_HwC+`&D5tlHwLp zkn4A)-9Y6o&mYLDQj9U46Nqb6D$8>4`i_PJaWE4FEj_7LJMZz<-pHbHciOQm*-G^Y zy82NcJaq=Cl;8-Jm-0}_4Y#D zRD><>Rh7?-Ook2#k+F}gg4N}4$5xP{3o^9gW?kWzhCw9CdA#FAgAnFy>s0{ z@+JiiY6=2~$ywN$xitS9p7?Kyu@Yj)$>&dXS~hux$xgBW(Tf*xJg=k%;hrH2L#rqC z6@H<1Wp#hby4aZd*|3|9Xl`qW2|GNA=iK%~ww%rkxqLg}ByQhc;-Kx}OsV*g#1KT@ zXVRuw85#+4DF)EN(*IF1JO3JuWcn7&2eL=fl=HUpBY{I%8h1a78~PHS9z>{4XRqt($Rh;4&~l~8hNC32Gz4dM7^#ZU-r`$y zhkN$QC7!QG`%-cj$(j5W?2>J#)W>eb#zF&&{bRmG+P+h|L(^EU>kamk&2DUAW&sMT z^=@|B%?`Ueh$*q>_vR7>HkTlm4_{?`CgGuw8F9w(C}_ z!0G>cvw=oGgD(Fkmhf+O-(2BzLwGI1If5_Q$X;`^(;=GxF5~P!jPs>rt9vf^>gH<%|raYFG=6QhZiubehRJZ<>Iz-(LtKJ^QuoAjAMyQW)5JG&h)r0d1W%nA#Ev&$G1W9xl3;4D<)Ndys-sI(OS+1Do%5 zayif*Tlo5kKertO2I|d?UvPIL{{b`2aE9Q~Y*A17iu@tYda&lGPm(<_IGnQI zzJ^kC3v6>8RpFgTnU~E^*12*M8D!>P1#lLuN~^AjEuLP!!#;DKd6CY+!*o_gst9fE zIpkOI^0f4e1YV3HH_U8q2#@+n{dm!-q#1Ma*F<++yRbZ^R_0*S95K^+mF>KaxKqj5 zAHy5W3{M%H?Kvhx?;mHr*RXAH3c)#G6{oHhJ*y#l{o&m~)_r6KnPUfSU5g)EN#K3l z;U$Vdy7ipFkf5`hSY^>|!K?@6MF_=&pb)7qso#4)SpmNLl+lnS)@ePjk^VQ?)IVdv zyIVU5xBnUYmqx_IL`GPR7u^-8^6;>K*$&sG^XCU#n!>R;_?@mw)TEpg$R%sk4X;lU zOC0{&l0uWGBFB#9~UPboFwqg zM`&w((0r_=Uy6AwvzvFGC6r{tqH-ZJ+AU5(Q9O+zX`eRj;_fi)D9Y|)tESNou1%>= zGf07l9UUrKFt*YMdrpBSx*-#8XGo$2p5 z7Dm5~up2PK4!{WC+!*1Xf{JUR>fM~sBQX{_W}0ijM!fO~s+GZ0MF*ZH;M24DxB znU=wJsZjW@4Ae;pepj&NlBDKF>1 zl0~4-T?>ixj@mCaJv*(792BEBxqb zJ&vvlJ9h78Nrfd%p2?{U_spzd0SH~Zh)22O-T%ihaCgdbiv}s@J&){ca;wPk1A~!T z`o4faSYbbt#4HfG1_&h18;+b^Hm7o#XXLLI{Z$7C8nU+D#Nlz5zV^nFJFL!&D)<)t z{ZUcj23bNZwsdAsD^5eNVn~W0b(5t}bm8j{l(`I*^%`fu3~6#- zQaP;glKZsT5hdA^O2e>!-ui*%w^~2xIi=;|4dqEA;Un~l1;cGXi0_?}geN1~vIN?E zhUrkmxQgjn;FB%ycA7APO}omEOHe_*OakuD3~hV$+T4wt)mtTT5mR}#^ZW6uJT#-Q zUQA&kefNY>>n0C`VtAPTfRZ1#vPjgsr{|4v402w}3xW*hPcuV!jIST=pR@V7t_&38 zDL_$0W8~PjU&Fvpag{N{buIPw0KPVVwre5{Xx7`GdE&&qUswPs0py7RUl4-s1`8nI z0>AwQaRER7H=_msgP-0XBH|;48@s+X``>yh;P!Ph!aLT?2I^)4Xnj=yW(`0$2a#)d zt{WnA1DZyVEEi}~0_u-^bNS!!#DB8W)cqiK`+BAt=IrPuZ^*%B!^YIhfRqtWc(Y_~ zxbLX)N#stcQ8QQ!>rfYXPUJPw&+j!pISvSEwA2{i<9P_6Z6^cCOm%{>6CoXx%RdkUrRaiF31*9hgL z*dn#uEd!{jQ@Qt4XST&Vr;|#@Rs}b98UO|iD*+?@dmiL>0dzDmT-FeS7LT#N)G_=i z=VTh;tl8fRp#F29^ehRa|2VV%2*AS2_7BST_Yd~91{zcVLlBHD98HXz?HoNAZ#V6= zPFz%;|90m*U}XmF9pI1a1{1)aY@ojj1K(JIf5lWme*yLpy#nYRph`S&1GEY0Mfo3z z34&rE3sVcAUA>8;i7U|H1k{t;+QP}1Sv>nuwn(thZ4Z>|DCNd#t``7wIbr%|EBZ?> zl%H6{zT>6&Fh4PL7az?9hN<%E;Tf?K<#xz-n)!wOv99}Yn{9(n2;MPIf5g9nR(gq* z&#+q|(?Ux9Kx+6UryKi*@#n|oXx&bp13a1S#gPtV2bxx;pC8IUDXj=H!3?W&>!W39 z9?Y{Dw3AF^6}MY=h|GQ&gvSMQ03ilP7wqEwSOZ>It57%7l@dG@(6J(7b5*uvERRgNF2qh*1sgUAYh=VtVY?b znSS_+6=j#h{Guu6S!N>dp=#(omcgm7mdW7LI}nlQE;j31wNJ32u+zRR=$41J8b8y< zk_+vwsb6r}EQaFG=nj)yXrS(aSY%Ex)_vTnVNcGX78<^v1Rprr$l?UXzOyUtuwVuL zio?+=CEawPkI+MJ3Lny(SOR=4Lw|`g1?=-jj`+{bX5BV!8hkMs6R}u{jUw!*Z9J#t zR02K|;VzvOrOBhY^XV(ko1ZRj`WIK*T}&d+EU=d$;k&Ib!#>|tKYI~W!&%z?`R&Lz zRA_q#j{lTjK|ii2oPrgx7sF|wC4Fu+o!ZM5|Ch~l9bRbK`_j+Vuqzw|D-}^T%hbN! zcR-po=+53^C-!thf#lerim{GuiNn4xE+8%ckq&zt;W5z#iCHeV7>mNk!!w9Nj|^qY z=@}#56TivP)Ww3u=CLOZ&pCLT6ShiiBq$bkkKXk9l!`(Zc>E2B> zOm(YHBG(Pie)Fx?{rLxOywqODO!onqx21U5PUs95?ZWl`aWmMOEH$U^9Q@EFQyrZ& zHI&-XfYU_J4e;}=Og#Qf zEdlz^J9MpNf?p;KZUdOF1#pz?-kLBOttw*44B{Ihu@<^q2Hvf^`3h#6JN7Fo$#ScT zgU5hTlTtR30eT?cQvMMz@D!w!Rm1@Kii@rBHL3$qh_M~eC)xNHJ60I?^R$|I<)ft_+zEcA-)1 z2+vq~h`SzcGKwMr2N#NE*X%TgTz+&c*IJVnOI)4`^W(pr+kX?J{66<3LonYicVx!u z^G<#U`#M@2`A*Rk(AmS$L4!ep1#n@3K|%lpkGr4it%#Gd+d^x0e7$152Qf0TW6mRz zz-YYpaiY9jfV2~FgQ3wa%m;vq6C;uu6{_D9St@tYl#vqqAus5*%3s>-G416ob{K-PXzyP9KU_IBl zc#u;A^dh(^b@BjFEiglXgOmM+DtPDej}z^`_R0Tru3WmkE+CAB;_H)5XN%Cp6w6=`=L!|12n4+;M&V#ax@DKDkSZqlwGpz&%Uky`(jRaff z5@-Woxz=Hj)O?f|c@{&y&WL}I1Xlr7^+?_=hqS5aKpy_7V(}3al9+ZO1d!AuSd)*KkgX0q$g{+lp&xL|J2dK~^ z`n^8ZpglCyhoKOl6S7V8gR`lwv~#oLfK@yP59t&L`+ctb-uhZ6ataj%!DGB5`$lQm z&2Znk9l#joDjDd z7}&Im{LWGo*5?S`rZm;*Paiy%5`81fNN4M5Uy6;q3~qfcvWA->Hua=ugKutq@f#xo zAwa`Ymp+dSRn$u&Y}t83US(4GtUeQ^ws_T(AY74`s0pdjOGOc(PNeinHm-lMN$PI% z%8Qow&)x`EsMyUu7}#-NibjlrlbSQ~(zHkhCwtZOSYz`kM_<{$}>xMzauzh@#>^j0ze; zuArcDQ~Lt!lN(TcaWP-_t^*O0Kx#11<$v3A|B0(Gsbe*ODo6sQF%BiiRgV1SIbAds z(OH5FP5_w$>f=czV|(oOCl+$iSTTJ;Qco`v@>Tp~ACEnL!zlGR zcA!?TS#Un*gB<(l$Pk{@R?v03m%48nrt`?xe;u{G$~rSM-tPreErfpGL> zUD`62v!zcq@%o@~cCa+}m6`s$U;OQRqis81PC9lc^hDp!{gj#ejyj4a8Zj1?A-b$~ z9k}6DNik)fT=SY@eBGRjyJo{YqbXWWhIo<;A%xK9&d*7uoc5qb2+FhbY6$E{LoMnw zC%C^E&OV56Z#miUsnzaHQqU`8s3Wx+w3<6Y`W8_0t-_QMmHK;%rdKj{3>Y4RwXH9Y zI<#>hSYTj>T>KnsS4ckBCichI4CbZq{wBQkZRy2wHYy)z8DyRjRQj#iiy>L*a_sr? z)xKDPv=2jnkT3(EO0I8dq%ZFZ{an5&u$V|a{K2!4ZWCgL=&sMzU5mcqkYrdi&U*qc zVlxmK_rnD=Un9a1caJ~J+ezslWdebiP;( zrC(?NDH`DvL*33nAN4V6U7Il6t|N&Vi~EmcsN2aSpq|Pkpb(n^5)d%@VJ=@WTv87q zRMl7KzHfnk4HcPi&h+;n{?EMo-Gtk}eE%H)yAE=Jh`H1_!h+ge z71)8cVjUlap+h^5zfR%TP9XRy{z!O@BNO>$=dpf8KJ=FS_BSiM%k3llg$J~0v)#g+ z$34zaK|D!369|0yRA;bL+QcW2`j645sUd#sDx2ObkY>j=^}dA5FUd5+w-ZLNg2qUX z33h;b#}pN2%0}a=l7@Cdbygu5x9|~(;E)-=xP@GYV6^1{l-y!GzHe&Q!$%1p#)PD- z{X!-oc{^Aib0Djp6wEz+AAy8MqTEMZfm3bnrnxZI*8@{>#LF1XRWk%8BTC~I$&(Tj zpn0OS8kUW_ZtklC&v>3Efz1Ds!m|skJEljs#l}yyIsAS-+g8>hD_Z9Mh=SjD0-;jw zOf*FgCv^0IHR}xeP{)VN{?KvcTN=ePc#P!jQFW0a3#N@u6nbRFMt+h<*$;8~6MH0u ziG=EPudY;ia(V`JGx3bYQD<=CYM}hyMx@3+UC*6@LExlXm-NsN@0i5UK5-QKEZsMl zdJp~{kg}ao6@v(c&oUbt_b7iAC1iut?kRM3sAnt@-v>}}G(IX^4q+*SO?}>;UUS_Y zqG;eN@~9jKrx^&#OGc6ASeF-Rbs2yeT%+Iix>0camJ>qn^1z01m%UDruKa=ze=j zcj4Fc2fMG}@1;D`e4Q~%)4Rk0vu!UYJ<(RFTAL%xoj!cd;v2J|w^%NS5{)gTKM5U$ zd-|FZ^$qRl(6Ct)fq1h7^Ejj9aHrACx{=2t9~qRPo< ziKf@7ihrbmr?hn`#;1eRHx<>fYrwYzN&onKRhhLtow@Lw;>$}bH*DHZ{l$EQ`6097 zPP%x8=3;6qu>m3tA`^QC3vGG)rg=KwaKDE3M&XFjq_VnzvwWqY?6Cr0t1=Yx<-*dW zFb^9On3tz2+Y>@;l*8$h%dI3Hg4Ue-o-nB9l6rI&jBn;%*^+$4KHIeZSar2>)x~R4 zI1Xx7$6`4NNwn@FFqtRG%i2#<0mHFt@+pnyqx#4BwBy3!aHLn{+0|OiQH^1U;|MU9CzH`#{$%DwW-$E+wL|>Xp7;p- zfMm~(Mn!asDP&FY2;ObVGm75oGXG|gd-*35SImsvBjVpzqg^f!`s;>5wECe@^&0{? zYIM!!CBCFe?&s%VT@^;f-fwCxkDD zd66&w=H}ix6aW*wmi0LlAb(uhY!T!h57T@PZg4K!iHXAyp`dJqigRHS)Qu_?JO8Ph zG9i@G&VB-1mnZu;=1p={0fx3erVX-x02)EKe3wGOoFVa}&u|*wwA>K5HX}&8PT=Jk z)d{!Rh6aQ6duPu5m@;McgWUPaj3>^8NpMltdtDrwnzZNHLj;7&kiXYW2*P0`V=~RB z5oy+`e&paS)3cY;U8dQmpmx-#e$yUlN=fKOPwC1LL0xE(ead%4G4~ABxi=O&WfYLMV0ZCe#U#1ML;CWu!l@qH&duEs8Vz@cg{tC*w_p${B2`4G2Ftp4M zit2hCYIn{18GMcwd{6>j*;UtD2a384gvaCLWNNu%^NTI9InFJben=hd?WDX!GKUl| zsh&=cY{qLY?>fL+)&~DTKV>HkGu_KEBjj@Mz7WqYQv~(7%UV)|e&bFj`egXW@#osA z$q=1i-Jm&s46b|?#4z~!X@=q1-atu41umReM|_SW&V@vEHUjf{w7n-Hg^-a#WyWf| zSdxH6Xx~UG$Ami{AG%@vObrcx(`T6yO(j<>`AOgh=CF;~sk|LpKS5s)6Ey)WQd3x_ zq=c5&5=^heQ})o8uG-=0l-69=YQ$@nkY4t`>X6lV61KLXtWCI;v1f>lP}r-7xHsSK z`myxb^59JPWiA_L@2aQKXr>|8_%oACs|>&4hMAnRR`}WuOJijRc8O` z9NIPd{1i(4`|91F1@NSZ-}u4>;0qgoF9bJUDNq1Ey!-zdlw^>*fe_j_|kr44TXV8S?VLUOrIO+Yie5Gh<{9Q#s3mrUPv5s!A7^Pl{4absq zjjC|I=zWCcr8Kedy-)g4M&IG@NN{LM@4Rq=BpZ6&gosgf?*pavdn?35&7{N`#kBn& z1$3q?`MuoPpNU9n;TR7KH_RTtNg`Pg7nsWL_@LRz;A%h<$DCQVq3A&$WfA3>B&K#yJWA0}dH5?7v6Nzw>~XGnntQnCHowh(&lV-WX9x zE$j#V%|Y@Xy)AwBG5hxbu|c*^ws)}Se@)^0KUMP<%@)oU4Cen&)x58*=HC>&eN#R$ z_k7NO@s!Nd&;BDOx< zxdeUm$&zcS(dT<{_micgT!>)PrUCSxhh{TGbz{SRn4AW!t;uw3|se^8L%^;mBQ zC_}znktLUlimd;r<@Ci^MbT#X#glW34$h9q#)r>dTESByEhIeGFY)QRpAv4M7Z+_B z4;R8Y5RuLx@Lg$4aZH1{De$15+DkduW{NV@esU{rK%nkJYpktim#(wPr1n+b(lzk> zR8*N61If&5{tc*gJ;3O{rs4c{XcGE=0S;6o5C(&0q1)d84(wC7l&d|7EziHAj^Q2D z5tRq=pl?!}G!jpQi*KvhimiHfAcV<{C4Qc(p)dRdi6j6bP( zfaXf#5s=)x4sk&*19Skt)12%;ft&NX(KrXF7WPMD`Bym?7|+*5KOYo5f5|=OzJ4xgGo*pKo}FG;Pi;`_F{uA5-FfW;BPT)D{Z+&DHC{Q0VXmqRI@!-lFXoDO#M6_%>t5 zTxM(|yk?bf9WlGV)8x&@nnK$R6>N%x^Ar<{U~K!6B<;IyibW0ngM9ePI6*zmw-H~| zUJ0!GhvTa8Jafhu>E6`B(2F^R-HdmRI+7T9!#8p6ZYt0D^mH?R6LS7i%IL!89Md7e zj7dVertSwZt&_btbBpEylSjc~6yo%0g%MXIm&r4GOKmMU$GT#phvjo87pyH@!7B~X zRsNw62~(GDO!KQLsaqQqql%KCAS7o$E+?wdj_ragK22fEmgG;Q|Zm@<41Vu>d- zKi7y~tOcL-Es(l;*1zmK@}4&=D3AC$A7C0T&&y0A=+{?FRgb7UIaIFt!Ofwf$|Xm! zNJtc?oqBrkafDWn(U^!pHk+q7<1sv`xQdUZ0?WR?kBBq3i4)b=F7Mjt$pYTV=Q%GT zQJ;){lKCPOdoWd~0Hl@4(+u_~7Fx zhhQK1QnKM?4(9iB^+&0gC9e?@EV5}HNEh_c&4ru7V7p_fIS_m~k_bA?Wa080_q|`d z(s+5o5$Tf;H{45W3>|G*h|-iS1#Tvu8UiZR~~u z9MRs4_?v44;MBOs>!0<{3kGdRakIt3J5ro+^iw*p3_DWCPis-wm{!@qh-|-P`xyVJ z^}Dr^`@jcz{;Ji->HE!mYbyF>ro?b>V6Ifc&_srh@7L?Q<3B&{MZ3gqXs5{~6gKrN ze{vsTUKDRkTAe;JoF}s-C}ba-j}vio^xX$*JmJT1IYecaEdjgsN@T3FP_B`E$HprV zilvcpW^XzVzN$~nHy^LF3|jZ{Ikb(3R+%)mZs6d+pjT;+ydh0^w-yj+&)GSU7gZeb zC9h31WKDF5y*Vj@V+V$3<`t1=7H1}U8KMb#ESCN>rO=~gRs90gG0TUS!n4Sl64kpY z1}+NISKSpvV>>!hl|`0)ra>6v+S#+8ZQY=U9b9_U>`GDGZX1~W2m2AL6rXj+tCf7< zc)^H%zEZD4I-B@MuIDFuGpA-ivG(X9^F0US4bNYPIrcnRPy4JWs+>a0|KXv;bH+t1 zul@K#gPGU|*e0!6Dmuszd|GbcFM_I(p6jvC@fo#uQ2V#Ppkbt0>gfPGVB4a7-46$Q zY+}|m@OiYFuCS?p7};L0mSVUsP9FYSkLT*N5og=j=L_2L`2kxQ(({XEY|qV^zkG?vIF;f^!>6CFOyU_Qjz4}`XTr3~ zZ^J7o3v^zmMyGCm%AvirfbD}pU^yu;nR&tBQqhJvP66>r%ML-noe624Eeg9vay>B3 zAH}OpRPG5R4!5+@xJGW6^JrExvCL$bO-<;1JN>x)fM;5&!i__Z-dJKZ57VpHptGr0 za2d^F93>J73Mm~a9P#e-bZ)m36JaNLcKe7pB-qMe)i8g4y`%O_@-30&9FN7yqKA9) zN2rz@#A81%GBYaX8={)XEqVj(eymMwEsXRGj0}uTfSxIO0DkKMR3H-rMjB&f+GGs_+AZNlm=NQXvY4uD1gApP(L(g9}Eoy<2VC*c3`4xmds{wYg? z0c2^;<|ejIERUE)uKjfkKFQmKkqX}~j1*WH>Eqjl0n*9e3%jN%F#hh+&H~JB1pO2U z46gskPq`r)0re|jWDrQj%K?xUK&=%3Iq$WL&&@?LDA9rt=`b!C!@JEuF%ctmC zV1X!gWqPTL2k3!*a?k>w-E3QDKVruUJVl-bD&;epESZK1hn`Bde{q z9Tq*SAHyV4p#&Vg+v=1?6&Q(d-`O+MG$GK6kavDc=@^5 z6YQcqleaHmP`0dQNf@CWzXXS(uP}VlgJN3QgBYb`TlZ@p5Xr$|NBA8l{H@6KXCQEw z`QU(M*3;A5rBIeqH2pX|Pd|d5x+r&VFDxiOs14t2=Jp6VmjK zQT%}A#CuDmDgpb+Yz`uN_KblKin_X!v19j!SoCbs0i|GCfB$=hGly|;qv831-OI&(HZTMbh zX>V$Y#tPrw=e|LLmjVRq10=Egbjk0;EnB1!j?-e=-r{$f9on&voH-dq?qZj{$`_|S z*+&23_-^-v&L{G5YebOBDU-nRlUK8*<>BxR6s#Laa6h@cnd*xlNaQv^ zhJhxL5l7v}YL0rQ%_mLg?}75pB1=j!MeZ0`Ri`z{vYoSoz`XZ}c2**-x#DBzgN-wY zx|vgK+qj@3Lh7Ci%Kk~hSk*#3J6_1f0rxP3XcVTr*9y4===|8QLMZ#)p90)YV?B%8i6MUk2=>2D z6L4vOW-1P(7YA-m6I6s8%`>9U*;P`HN(b&|TYtGrn`Jh+bFloU#P+|b4Zpf ze~)3F^T3*h=RYdC?;C0=T6_+rlq1KL8|d*diimb4=+kgK-zP}i_6}pUzvqBHW zvi*UJO8)5 z_A}xc)OZKoIE=!%eB1bb)`=rB({84%WFt!xvG^pgcYoA742+x&0AbVhbQ(Zg3z9qm z?#)jP{+;yW)UUk=1$0scbTWolfFkC_w_boyQXoos~M; zGPoz>nZ}TcwO%+_>*-mqkx|zBubDrT#X@*n%B*}_Y4YH zR#x$t`}AVu04ANWx=~=~na%D4w1X6U5rbptl#PgTRG2dp|B76m!Q+QNaL>E;H6t{Z zz~6es56NRHXo!7B)TP!d+Yl5R94t+@I}aLl(@e5^n;4Y&wXsz?Mmpi-5!n)pn1P}^ z>eMoaw=CYfd8n2==&YWqffbTT9B3rZBe%NSJF)Q0KK- zYo8;Qy4HP?zbkk8u`5!m@1ZL?;4s&(xf?Zpt0+#VtGHU^iPWt}AWfY23atIHtQu8= zw#gTHP~N7Kk&hrtH(h~yRF!o*UI4_w{GE_|JQd2@ljUx@6L#puZJ*c+4$e9B_k`qK z&gQ>-$6pM5*&ighJf1JiC`Jwmd+cC|{Sc2R@Fb1K zr1_g*+VtL`W(b*spIqMpce-H1*#fiNVDP93Djx1|3V1o4qlo$2>?V258Qd1D=l(;N zY0bJ=k^^X1b*(ho?>0h@1vpD;3@?cd=k4852_>~=8uPj9&32v$=&F4lgAkJS&mU1R zDufe(!@Rgx)b8h`z}PA@jpik}O^jnkaWrOw1IZ{d%!Y%ik>`4 zT;kakecqHSeyv;uw?g_Ek)*x{<P zr6ksmc9`n&D3oYzMe$1h7O>|E6&flM0_2bkgg zn^oTD))|Nei#MJ8D1K%v0bQ2UwbsSS!rB!`TmnJup99Jgi+)3Y8vy-H0Q48!R-P0H z#+XzZm}KrkKZr&naR>SVLDo;fHwL0I=yBIl7GVh%vTF)55SrrtzO8({3Xs_Q*LX32 zE6EB7yV+Q;b>3`uFaPTv^iPoeem}%_)Scy+yZ59cRkX4DxRGmJ-l1M5rof3v+xB@0 zgjxwVmnahsKS|F=bJRBX5RyYxQZOgO{0cZFQWqh?fZ?vnAqD?AN5VgMolA(>c;#zE{YsialGiaZi9`d=X&7 zS@fR8m?St5f%Y2*ynFAHLE$oqP3ElBW`kGIL3Pxgdfd|lMcie9zD{i&e3G;QC}ioi z{jWGWf(QaD1)B4dEWmif?zuxw_kK&od!y>36%ovX6_<}n569}KUzyNKTaAm5;S(iw zfGX{KIxfzH7oV3}NcpxQ^5GhCqXf*XlhVGuF%#_RI|(9Y>qlEOT+iaoO&bHbue^8| zM-}%-&UN*xi(Z~l3Gb)lIvyMaIZOANy;mubH2xepY+FXO2onQKoch9HQ+BH0SOT5I zc~~hk_^>^fLI}a>lg!I?C+Ntw?9Dcfx8i4OOecd5FT`!?-eW~^dq9Xu?!MQVg#8-A zLmpg#grY8b>`)}hc)2w}auXZ+zh(9>`dh{RZ_(m!RL994Xj>7k=GEfs6U%5KY=3?h zto{e_{$IX89B_3>dy0SCh-y{*VQngGM6Ew0t@ zPCu;~)H93eFIIUC{!U%~3sfTvC<{r^fRYOe8u7{rhOXR9owK$Xg|h0vp0B~J%CWlL!%nR zDj(dy|DJYwlEm@rl~NA5aJd7x5q?0K;Tv5wbdt|~b1vDfIv%l+1Ph95^DI}-z3lZ0 zVyB8vz^m;>_2-0S$UFIqc|Ei6@g?Fs*y;mjSuG%vZAoPI9Ilql9J9+?v?Er|Qpvl6 z>IkAJQUrG%EDV}792r3F&JkB=3X^N*Wa-dvX!Y6@AtJiJ*6&h{0n`B0qTS!}6E)p+>|wwAjKQHrOHMiFg{*L+7v z7;37NlY0+;lM;tB?fAZr1p#dXU(Y`vRk9CEeZT}Z_Zvj^2+O3V!-Q5j>gp+QhyBn15M!E$A zq&uX$yBidc5+sx^=>`D_2|1HcS@G@l{r~y)K4)`Xy4Jhqgy)^Ccho(`xbIF>FX$2) z-KeJ={c0$Pt$-&zxoZL$(`AsalQMFQETv%)f|?pWHNK4r2AqejCRt#D%9<2S>#Oql z!5EKrv3ch6paj`atK*Mb(345#L^~^R&5xzGVRbn__UlhFSl?#vhe>-w#o=sN!3B@^Qzg1I4laoWAGpzx$}8gHZG%^rHR55)x1 zw$PcpaDYL~FuAk2&!O^|1pD%PT@0s}n~H}~o?ooSSOMYMLiUFOn`7q7RY6>;oE$b# zJb`A<9?QJXS8lKj8c6=m)4zHZbd1Im?Gise>tG!ttTz(YBUicG-(%eAbs zOn?fe7ngQKv`Bp1@bSbemTS7l?<{eJB%%G+KY5&xn(l8MDyF}Ti5&Wkn*BNV{4e~X zuDdaw2x3Biko*%*h(VTu>&vS@ClR;9iR1R`9&%2@VeLCjS#2!ushMg$E-h2&Xj@^^ zl-ez{i%`YuR$;QM`+4rwPHtm;kE($erWUoC5rsCeukXQZQ4R^&c z*adH^5S#D@Vxdzfb_}x*Lm;I~%h3=M@mdA26A*EYxKGz;AbL`CxzJ*E#egPmnDiy? zYu-Lh1ZX8@EdpWg4>LM53Kyd4e1aGHd;Pr$CD>ZQ9cN+z){nbX8RLdcg8XT}Tjptr zrXm#it|ThV+1Agf^6IUaFFqeX`N2CcFaTXd`kl`GLXDK~MNV#wSd8Vi zO8>7o8viHm;h!?S_O(cR)A{BVElC~#8NiHrrz4+|p^udJFnCg(!QCsD`DXVpnb&W7|>H zR!LQ)^cf|oc1c~I^&1w8132c z2=D2-s5ktPuAMGDb(LMU<~SVSC}ESI*>e~mJp+$@`B0*4i&cCDm?mZ*>>pc4fqIZi ze{Lzm2Y1wRF`nXL6i#C1Z-<%Cl*s8=E6gyN%X!q2DaTohs*Zh1@mw^*@bsNopwk;C zUJWflr`JIVW^UqNzht4|8z(vR&r1=lBN>#fecq3b=1Sw81z8cH45~{K#-;Uo8(TA~ zXSK~d^?pGL0%X9GAg(jwl(eb}wZ8e~;aI3Goq%ppr2&p`9G;WD*NJz<#fD)X^GFc% zVr%`HP!3K*o-^noax4NVVU;osWsv16lA?l`LmO2|oq*%KTZvBC)4rBZ0;p)uR#D`) z8Q=HYVUfWuct|@wHP|85=^|0Eu&FE#2$Aa;7tu*2xy&Sb|2874(hH6%@p#4T$s0oY zyHlZA@AVM#Io<`3oS$G1qPF+>rHRU2$1FeWMH@HSF_%fXQ5>q zc2^XBXJ!^i*s`H1vg(j?neF$hB+10aK9}bR2s$fk7&NNzY!X_+246~3;&F`e$q{*7 zH?1tjmCr_b-U;!S5y~GcUPf{^zezN+=y{i4V4Cx2Hud|XGJt>MiHQssUxWrHnUe5! zuNHX!uDqM4J}I1cuf6d|2BfaeMs7`hdBLd_Yl??v@OTzS;*m?pHVK>-IA)r>Y$n^wiRvK9#X04?vKd^%)&tiuFT;flVNgd%I^r;s6-^!pVZ- zPl^c&v!TK?|3YGl8e3jwtxaacv1GXaLZCq?x9C$Rq_7+vTk_KRl1Kx&k|mUliONgS zTIr|O)S9kTqd5io38O?yyOJR-_*Y_*hzlmhURBQohPhY1aesp_*xc_>22scee%$xb zWngUUH3Uxe$8w3l@}ua)y6QDOpnb)CE~RYXPbfZGO=bbT5RNaD%tmH^jw1w`xG9T(gS_+LKhFbcX7kb38W$4J*>(-zDR0{{fm^c3M z9&P=_IducT-VA}-*qJ%F-W1~x9DK~)F9#1L2kbCQ-OQffIe1i%sam0z<%OKcz(YV( zj7rrXK7h9!=e7sQ*&le0MDFh7o_c~BKy`!6!lM%_85xn>kX+s0=`G2XrICrAC6F=F z&dMIhaVN|DtN^xJUPlb0N{Ndhn%ddi~vkFp}0=p8Dee);@<4*7Pb8Fc!5?Ci)$XFHkg<5AG&FHE6vdn%6)J1^T zT%`l;RxY0?dWYgZ3aQz^pB9kc85sbkstD_rGWy6@NzzEs{FrCG;4q~;r1cZh=g->K zuhYzVMF>Z<@V{-smFOm31l3%>p&Rlb+ypCvNFr*O4Ya1LwlqHFi9Aw!SN-JJ>hPjJ z^Nc1{G^E=6WX%M+jm`w_F|lS9pIX-^Qc?pW#VGvB#Bf)ywe2vFDb1oS`;8o5FtPX_ z&%%}UvbTZARYeH7qn!sSPw&Zr!)F5bY)F;8W*Kg#wj^icv=XyOGH7BwuK2dqB)I`d z9%_wG?+}y=H1t|~?W8wm(_g=AO%Z3)j>|@Bk6*o3w!nCBjXjIbh_Tc^waI+W6@w850&SvS8E5BOQ1# zRy&o&eku;meh`loEdr!J&NUick9TXQC!r)tIhy}4-%KD`S#fgf9;PUY93+Ws5;MGb z309d879a*sgz2F!~N@Dwbb1b*oRnl?52UYH8fuO4% z)KcKzC0=<{z4Tb#4bOb3s}!!1D$jz3T%X`>`C3wV{n%>9oBgXguC=78(^ul?m95(7 zPkIU{@TK`vIz2kG#M#e7Grf}Q(>|%%7;8hvlkCDfTo}uSpki+NNO;*)e3pMnHlbq# zhM4!wpJ);&N+6j(%4pni_Hh*^F9$4M*i@}+jClz62}V~efqTx>*L0*x@1>D6RKvnR zR4ymqRs9a{$(&caG5a1*A}g4r<1tOe6+b7!yrtM6Sgy_`MT&kKNjyZN)6dP(Q*Xs} zv?knu#Ap#1Zo8d=tymxs%ka8xJrC`@5nO?*HHfB(II zR4KS0Y2^Sg0o7kPZiZNIrk0o=T>j7A%)jVSljkBd(4!qwA5~V(ErFqVr*Y~?$fWmC zvS>K$G(!=rzqKphD0{Lfp!^!6K(cDX!*}hOdF^bq(Xnvkrx4#J2%^1C zat%6;b;23sGI4OhXqn)A4Lz}9Ms9o5zrjckEigay&jZ29J|D3O7-)!6#0>=h8O(%( zf&t2#f8>P#2M0F;0T=`6wc3vKhQLq=4db92aI6FUA)ma0!H(=F4wl|P#CNMK9rJ+| z+vhHUf$(^qSh*_(JqrAm)Fze7LdlKY-8CmrLHFJ>-Kj8z5Ebr=Q1@*k*v_-~L9qhg zLo5|%3NJL2I0(Az+lTSrV35=MBWN}H>!Acc2G+g@zz1{czWx>9wd?t2LF^;sc`!Uay20zG-{+31V9-o3oM-#HKb+t1yF?Arh%X@&!FaI%$Ie~k$3-~jE&1^1N6deTk{Qv1@{|O=cAXg2N%*!_SeMG|C0!4y&XOgz6`;5tlMkr1? z374D{Q)GU*mq0<~Sy{{m`!%h_=I5=p$8!Y=v=hdide3#idXGQaxpOxh${N8W4d$5R zz5{Kx&zm^uoEvP(38_ugYXHs4{w(tuk~gaKtOn+VVY%%AfrZyer*kTWz55D6=;9RH zVqyqnBK)ohBW!;M$jqr-Mto7+>*4U8Iz4+tC*#mr{2GHSAew~^ILLf7Gj&a;5*U^7 zMGm@xS~V00KS4M=XzmNP_4?!e2u?UgKi^4y3<(A|ftCCp%Z3B*G+s#2k>)@1{6aXw z;FH`rX?ofkk6&V2iG=|_quWRY3VByiDgfjF57dAH{@UFAZK>7ZUS(`86|N(*u~c=a zZKPFZ0kMC>mG_{z3w(la0W+!0YxvjJ)!*LP^r7?<23|Pe68np^R#+;0XY-mlmS*A-kb5RJv;j|F*M*zv@LsH&+Z?$B zV}|FOeM%wZ0?4d`%lR3rt_B!7jz`OdOa+ORP_r(;&4l^+`^1qmdQL_Ai_oG3%I9`d zFhs?&Jj*_e>EL-6Z-3APs!aQh$%EG|`DN#^6`^v0F5*ay3!7H+ephnvs}_wCjR&ds zrmI_AMp>H4TBnWxjn~KG16d}>W%I$wl2&wji<)h{M%c8h*~X^yp3gBNz>G#+sWzqA zCjI$)oSnHRi*Nca+ZNyuZ~X?=eRI>q;a(2j?m-C^JNC;*fB`iQ!GIcvpi%ce!dk4b zHzc-hqnZ2hWLDL?#D@bqf9N#=tEYQ|heO8|v#~L;G`d@k`%PspEiJ@&FJuOe4lkyx zbXVXg-jy+I05;&9%I(*UaX-BL&mHtH!p@O{eZFakZkbR6>w6!7yOc!g#XG%^YxAP5 z7GruitY!Rj_NPHn0L^WlJ%5iZekbn2?gp{R$LrBi=JuPFcAV)n=~-_+>1eA57$Il+ z89|NAhV=E=_lBB3S?wwwAq>6^JAckc{{p7`e%igI$G07>CD^jZCNFFG-kX1oB@BJ| zo4+58GM86$fa$WGO_O&Z-3W6d?UakR#vCDI)uTU$Vc)~GDxIks@PuYL*2Sf(Wtp-e z0Rw=)sBFsCg%8+Gf-#RXO<$^Bj4|}kj>%har4RF8jvXS`dNFWVAv69Xu{XBRF>Cqu z;rY3dsb_3#W@mL*q2G&3n^~Lu##&=Fe?3Rw^1xUl4SbeZ?w%tU4><@0UQ~t@T z*Z2)EV>4L9T3YBSW^88b5_XADyKVP)NgI z7lg>RRV%=My-R=Yz84C&TxcAG`$6FQoG_c-(2}!gujk3PXdkw#8I}V(uOkGk)*8&; zIN|Rn8Jc)>J!QJXI*Y%i!c87U-l40v^{;;Z&!+J=Zahe>3d^ma<7#{=Ihmy+rG^PZ zCO>Ckr!BwjOlT&G{bLOigS-kJtE`jI3zGd9XIV^JhS#0%2(4y6)IR!5r#hmj#3ejx z-`j-`X{4ziow6qo#yGRivZX;f2I@9p*kH&x*tc80D+Ml|pOFaaJ!_QBR%WCjF6S%N zYjmJSxT?Vb_tbK7t;`5q}hXsdDd$VBWzPX;uX=LnsaB`%k7t>;ygjc;WeOw0_1*g+P1k4PF% zk8`We*!GFXoTnId8O?$x0d)*pTzNo=h4N%2)ImVsN)2j zSG=R{y~WKQ*kiyidxX>m_C7R$HYs@T*X2fOBaRJwnbYK0)Q!n)bsyU04KntJc@x8y zUz-29gZ>FADujimMhB}%{9;%{B!uN=Um2C*$X9T_%mL!I6J$<;9P+**nHgL&pj$m) z?45tJTz3k;On=*+S$spO4{AJK1^*a_~`9Am+5nZ-j*Ruz=b^`MA`+w%M@!b+x>b)jr~mSWFUB;UUd zGH^ani_#;(&;)j>T@w>B;0TszN1cfo^~l+-ePODEBw; z&Y!(Dphxv<<2aX(4y=%ojQoNPl;3;TeMyt@6r;)qh0z)bOq=Lr5VQG3~ExRKL)(1WV7S+l7P6P$(MFr zfmEA`ZNyRv6RjqU(^FG@S^gF4nVz~0n>;G~WC?8?79J8Y%pe z4fxBy^G;I^Tq^)x#8b3cFHOjFB9^4nMT~#)PJg@e%odg~Ac$#5!=6kep!44%U~Rml4CSsVeX<8ZC>L z(s(i7aWj~JsYj*np9vDv)teqWmJZdPT%&q+e5J@O{dAteQ+Td5o13vOoYOYGvATjD zkL?b{$F$p1FWBOgJ!!;2%fYHZiiBjtz=F=dNNa*%B`E;FA=hM5N$kV^!ZUxe<626q zj+<3VM}`*{-WDIJC8*Z*9Rr+|mVjPC4JMy!{^?3@4Y+;BJ1XyHctPS)#BwUT>4CQD z>{sfDzVC@e6_!(Q2EvlVb|khP<;Oy)HToS`rbFRLi;1@IS9`87`QBm|U65N-iGDc$ zUTJ4xHbmwJua8_Zg$oj!<;3%uK4}*sjUGxLgOeQ+4*QOQMlw91(|{LK zQeYemn_~04la7;wMCr>`Ba*7VceGA8PU)(Zx8C{ZF2jQ%l0TwF50mbgnP1KsbQPFz zF9QF(zH`o~k2!J(;^83X1*@oY;Wt>`fIZ0lz<^3F|Bfmp%TF}ve@vC~|Kvmspxhz! zErNlut3^)r`d#CnM@Z3K0 z)JX7}=p9IvwLQ{x59umSPSMnhrv;xIKZX+ipQhT%74D@X4NLqlFW{^%+L-%zvi-&$ z{<^`%K>#9Pq#(1=nHlJLL*Nx_U8D(-=NM}A;5&OfpRD@}ES*}i=9|Gt9u@dMVog@< z&OQ_yt+&Pp1Hmpb$-|7AKabsUhd)dAyM0DDe@>a&Ti#5h{bXy_`7N;W$7YwEy`GL8 z)9;ubhx_ZXf!qhi^le~FzXus%RO@I4Sz269{v6ByAV&{OvhVi}U=Sdcja>BX8Sm$g zpb?UM9go_>@H7qIEW4*BEjix)ec1e*p~*chq%_$HtHRlvZ;CHe+57b{O~ zn9}<`a|a3(q_lo0p0RR=CC-wzi=3u~xg6qA{%C?+Fr*ca3*WVDw_Q5oN%&|#dK;zv z**16ikoVlX(RhewZeBTsJRD9r`r#Rz+FQ;;S|Az`#&mqpS=o?OsAdUU{`JW5@KU|} zi}Fnj!5>bMlgQRzCb6Rr9?GCwkdC|^AUn(yJrOob>DOb02C*5}gF)SDYB<@f)?Jlp z+)2kU?o(5r8GLPa794;EF4k_0?o{IJ$wJ}(YH*?`B@!>4l>lp=ky+BI=$Q`|er@pNFo?Uhehut+fB{k-WSm43bx2@L6$`;+j*4|X!SH;d3OD&T zvM=9hjHz}=ELcTf?7cJ<*b0H6!6LIjt^qf-hZ zH!5`{UkiM%1hz?ZINh-@g3E66kM}4AtuJ4{)gx;q5tHQO(BKkP2@cFIMI0 z+|mv(&Wk?<^Ib>LL>Poj))Xp(BDTc@JozqZ)uVl^_Pt+)0If|7neF|8dHsxIhZyC{ z#sh;hQ+gGMk;AZxoS_yTZDN=8+zb-i3W)dhr*`@CWQeWIl%k=A(NxQP3x8Hz}iBwcA)) z*(pOik)q{E->l$2;!v)>syFSO?v7C4sk(@oC0I{RU93m6i&)C(Ds=h2jZxAq1leK4 zNsR;6>06Zw*=DpGuVduEa{rRA}RZH{Orx^YGSaE(w8ige~(t0sgBisX7aR_92CMLoR zjZ>q+0@cRwnirnrxrcZa*YnA*Vi`uBE=1Qyl|ynH^<-F94(g+IM&d71eq?E}adxUi z={$wRdpln4pf8T?9Bme$mOCN+X2 zPdWDi909xU6$p$ht4wgn?pLr_V>;oNAL1UxW0%4LO6p!=YEs>;*&D^ zlJOajU@afDFr%5;u#yn=eD%)};_%0s&SA%c=1Gn%`cuq6>Aj_<~MPHR^ zWT~X%wP+J598B0Tu5#Z+;LK6kAy-fokK0-?6rROU3H^pPEQN5Bev;RCc7fLyWk(Xo z68ZWR13XK>>@+cMuJ8{RvAF3L#W}B!URG4LfsJxhm3|>*E&es@0q%1P!$RY@N5}8fSDeo(pU(xvgu9*Jf?f&eoegi(T zWXdEsacj%gYsly4jcB`2*b#pw?zx5Kbxo*aZIHwbwi)NPOmN16JbB)SNWR=`o1w*C zsL-)@e$0f<>0=`3M}8<`!nzaKeil)ohrp6kMk4LkJ#)so=rpyEC)nI03={B@&4EI5 z+7b~%gSGWgVy=$3uNqP8F>m6N=I70|pGg)Ib(BOgXH1j79s$Pq7?;BQ(w2j#r{nop z(Q|daez%pk6%#;J!pVN?}K8NqAm>#Yn6zG$aMm1(rI)~WJ?zsyd zjlb%wOcc?Ip8`H@bX5(?FQ5N?>zgTj5ZshnXLE? zui6HcT~e*+p^|SPU)C5kWZF6jsroI)R z1yytpbpAvT(bLozSZfZuZoh%bpFc9tuOCLg8UddtKUyH)NxgMkO!+!EDW0Ivq~R&T z*y(pg^d}woW45+mBi^F*Lw!hEoa$$Ga~?n2X*@6$78FMxecO>!rmg#S9wEg&Wt}%DbTE26#**Ok5E6N=8Mbb6$uJ(~D zJtd}iL;4&#k*2kqYiHd$fXgDm!GO8d6o>JvOPEvpWm>q_vI&jTSkDCji=3;+uF4=_;hzqG#p28Z=W&sKZ{Hqc*fS-b>qStml4jUHuy% zuU@tpp=Kk$1*b{$CpJUukf(9<)S&N>%qbD{%fpNkm9a=4VswUNZU@ zFXcT|E<8Gs()~>V>$V3sb!)jo0(TnFoWPMm;2!{hne)bYA6^3fn~(n|`yIyQRIF62 zZhEib+oh#g#wBFrE!A@v-!j9NFrH@^TA=-P8IIs|A%Rz_>_lsav{s;au+hsYz3n?6 z8%qZFyAwuK5r-IFHShP|gA)5!i_JgRP76e$yc-`E4C-kA#(@?mtqgg}wj%P%9m8mR z7C~lY-V33ay9=|8OEpi^#>q^v(50vU2MfmP3~#P zwn;-^(fc+fm8z&N&&CRWTqqZY89lsn|6|Fh%yq1>@GQ=S*all->Zc)>{MrVucwRlm zOSBl8*D&Y4w85GnzLG@Qmi5KrDtUyUbWl1*QDFft|BjvqYfhNu5uW44@1XlTro#Cb zIvYX0@!{e;ahAxw3^z8bvC5V!V3c;RF{9w+Qw$ zEMc00bjzBpx;l6*!jLd;u;;W$*;*IZ$6<&|A74?H1A`_=*&Ra<%>&jns=63 z%sPg3M%+O*I8H9dvsvQAxKG1lwhzv+_XcH`A<$IDS6AjP_#i!&2(`QOTN308{demQK2m57|=(o|rzGnGq4%(bdqssFGgnfwI@<6tz&OsE-GHQ=yY$qvd zUAQfh(QZrv>;!D}8}YWsRJ=;z^-l2jM6qjDP2lw7hu~+gU(iIg=G3?$wk92`k%K^! zVn3DS9D$U8&#z~qv<*@g#(rzOKUM8+qb!i=!Pxe`C;m`*F&62! z#aaNvtqCyP%H3zr_{61kB;P4Mv00q<9E4_Q{5kZBJTPD}!CznsI`VCVHM1xAIkR=I zXa|pu{__=4`TM5$ov0#!`6j3W<17o{R?+!}NftQr!pz3Xq6zp99rI5H`Ci^Vjhl6N zp(}JSJb5?!EnDI@!L58g?^noq`5LeLB1MF}K(+#0AA`5@vL^-^*RKYv2E?S8N|{20 z#>9Z}0Y=%m$n=5;{AE2O#>(AUPrRtbf*5C!Tn&j6N1rwQc&Xc7y1mZBK?CfSN5QLH z@7So1(f7?u8^4G^n1GmuUL(R;ZlwV$I44+q*7&MGK)eO-McBIjDt*=Vg2&KIv1UKx zfi&3>B>JiEcY9Zawh1YMw#1^?F*7;JQyV-VYy+Q@n=VTvd}$N@2g{m$XK7(J#~Df0~@uQ6&;W?VhS&VN#&8GHK zRkaWfwo?&2Y3ji=fredGX}=u)-iC@?S~FV+^Ukx+XiVRcIxA~;&kR6frB67khTg)D-m&L?}(N|p}a+hnJd zBppFtZ!FaZ%vXoHT$9!fa zDydc8birjuICw%CNR%)@nnDALXtb?1b)**GEI#P-hZ^?*kZuQr81FXm?H(|O#=ie; zr3OGN)d5JuU?E z@z1=KFZ$7ouzwn_EF#ey4+1MtQjH!EKn=~@Z?Wdk*aSjfmIL?c_}~CJxZU1F@>P$p zyUUkyYfBq&ns8=Lk0Gv25)}V5)F-;b5p0rdqOxr2*NH9u`6sfp+ueFbz}lTggFr$U-M~R`caNFzP-KE zH|)d?VmG8^dYDo;0=jFSVihFhC@;3{PBn?PMFx5g-H=WJ1$6S%kEcu)v7iNs>vYV- zT-=nS0sJ4i=>lB(^qyce?aipzEcop~!pgK#PuhL_q%Utov>l!BigBvCwqH#Bsm`r+ z;{R-6+^VqtlrMf5JmV~Xo8?=eS+)SpGUq;cLaUPHYvM@2-t3m+d zDI+J4ObNIh^PfEHpX{=nm0_~PQpF7F#VWcfMYY`I0IAs7fi6c-5cp>6mbR!8?CkSn z&5cu$$6(uxdJ{Cv(jR*~;Ml#8o0#4#5+;;K^vw2g#2?MzT`KIFb`M+Ucu?Jb#9&=oDpg5cOhBr3=4}q2WTq+j= z3X_1*d%pMEnpHs4zo)az?3OZ`Le|FyIRBq~n!@);O zlz0*-btSJqV!s~YCUj?)KB)koBw+9Fr^Yb`7z7j%1c(rbz`s2SS}qLHA>bwcYDSh5 zY-h*MZS7-U4uIvRm?egw2haj&G9G1629V!VK>(E&7;dXHquX@vmIXpdOh|y?MuOq5 zTFZYEkqz)*_&sy9l@OgL-O7j&;T5pJ_i;RWm&?u7V=#21s{CdHW!pG|fx8L5L0X{f z)x{J!m`Kq;nGIoWS+#S=kHq31jlc2mQ$@eA#NVS3MZm6B%$>=NiW*}7WV8MVhD#Qg zm@8lXIrfn2(~yLQu)6{8n%Uc#+(FGQ4wnohqz$ksd6O_J-Pt=Th%d@e#VG%>25@z=*}ymC zFRZU}e>8X+z@s~Z2a>n~SL%RshQI;RyDIxPzpI#?jic>P5*=`K1PLWYvAbbX^;;!q zAUi7?0Js4MU}3(odgh0hfdBY`|I{@s-Jr1lhQWT6oJOlgP4K#Hwtj&lGSr%9O)bOa z)UhM$$FaHf35Xo^%)DuUrEpALrNI>jnngSD=oVu#sn-ZIPm}oZoa;h$!!_CgX_C~t z;D8rqlE%iC5nepD?WHtiP)93o*SyP?q$27Qy<)-BKZzxHB#M(OZE%#y!P&fG021gQb zld-5ov4cLfhue-)EgAYWC|gfqzT`D@>^FlKI}A%U&))bf20dqSwRGC&j?{Nuo5@Lf zLiK(aWf5t93MCxtqW-ktv}Y9z`b`8IOx*esdpshWW7-9hT_s_13vee1a?)oGvgYx) zz-9@kQyd)f7SFM|Dim zhnlaMEzM6XnweOe&!u1;z@6r4myZVNqOr@T;DQMc9uYSD1hR_HU6Me`9un=cd+Uol zx`$AVLv_EydN?sC%rM~dvlnbN&`s|Efal`%zT9u}JavP!vT1w=np$5$;Ag!87swok zJiza$`&!@;z%5!J{y1>fDaomw*gTgPH)5OP$Z)=w77>p6`gCRqQ}8p{@FT57*B?0R zwt=OxYf~Xy-E)r=tgl-PkC}z!{;yIJ*BXsA_qx>;P zo0ng>M`C?~2F6eic4)!SPhIgTV~Mqozr^8riG-q73z!bS z9~1@ILDMDXi#U%f3xxEZeIlOa4s$xB-w1PDz-G4ORl0EhAfR(Sn>DP*u^8V_q7}kE z;W)tv+9 zG})7R4&L!E1)BtPGcKr`;id|hc0EVTuU9g(;Gcg{11d`%4|cITQ_J8)t+kISUcI2V z??BQg~1#*w~b(?wXIXjU+#S*p9=v*T)|GDmMU@`7|+(;+z;(;^V(oyn8|!x%M#(B+M098f{}p}&+m*-6Zc^haXOLl1W);WP)NIc& zx)khXEZ`4Vpl7f-CuXVLEsoQV7~aWYKSntk=-=4BvM6RqN~ia=hWM-q8bi+;aOriq zurElMXR+T%(tX;Rkso)JzZOI>IS|TXxkUbC3Js66Q66GeS<@-cKb+Kl?lD7OlV7$l~Nz88)`p6F9pBxNS;c0_%*NBiCzGgDGfn(UgC z!!T&hpKV~}6L@(4W&qRxgUkY=O)*&KkmZs`4|el;%`?3uyWp zDg{rAL@9w5kOW$%=m86{zVe@hs+zK8UC)R2EdetzjWtV(^$qglh#}wQmB}iyt!Dw)+eQtp--k*osV3 zcU!d*Y=sf)kXUCI5ww~!6kcZvFC4sQG?(_&11U@-TZ&{^gUw z-vIqFkfsRCsVMn_$JWtyu$;CSGl`j} zs5+!*Q0VG-%l3MA2$ehbqbw8FCvyJB&ei2SpmdhIiF6@TvSx3pP9p>=m|XP65p_Dx zv-qP4pJT7t^0BUG)pzJG73XkB*K)GjY=N7db19qpTa6z+5mF(FLIf`SnCHZgp!3kV z$Zv2(k7BE?vf}X*@P*OsaxMsdc_rYmkUiKDpet^=YzD6k60+iCMvCYv%L1c~(J@e2 zUpnDo8{G3?T;n&eb+L~akXErgSJ-$!iv5!B@~bl~-e0`eztcI=xIPR$e(m{!H#;5w z*~s+SrxXje*5pFH?RhLZ2i~+b$LWct{1!p%b>67$RnIxTl!Kw@5=-%c4zj0a-0$l! zpJcOkn?5E`E9cw~8)ogqL2w6AB^V6Bb(n8MM*A{cl=&2lrPB6eD$Y0zIIQTN?ia7R zE(r()Pg~uVqN;0GJGVSSUY*Bh{YzJz^x6-(3=+qG2Z;O-Ij2S)E^Pj zhpNe0y#>N7yV%`*o_J^S3;J(PafEGTDh-0Rn{8-99g4t5o|i4QryiE6@#L0OseTJF z;@`Yt^r8F42|KxGkzbQXh?)E56x3(Z-}6Y}`HR5$rU7DaFUebTroBhL3{3T`fCCfu zIyT0)onIq61EafKiyo+d0^s;PwGqes%eJAF0KU*bh8jrrJKKf@$(|PU%Bd`yerVb^ z5SUNd1KSo+VH5%g+$3Jm=v*>-hIVF#B-Hjm78+npYzJhaA<;851PZd)lK>U3Zis0N z^sJ2RZua!_Zn2L0S809@fIyV9QSHttrW6=@RRi{SuG(gmtWS<^!Uz9UoOyq+*i+H?_J=Znafx-qD;Pg38Is z`XL#axAvlbcOA{5kL6+eswb1Vat0Hw#t-6<30~a*e+rvr)M{rwl6Y29i)xrDTL!~Z zzi6d#q>9Mk;N{n0P@h^Ok(LrO@dJ>ili-@+_2i)x57J&b?R-EUCPExa1n?4ciJ+*L zjDOmgSlxOL3hg|uum=7zSUgw8)Uk21B~2Fh#W9mqij^)d{KY`3<7_+CU_^`yr>ng- zB~t(MZD%y-4~7C_b}_~Bo!hWZhAg9;^-id;h)yD1g=M_v<+YwhPh!U@$DMMb zYgJKMixRpYi=?4+MPSbj=0~E^L5YT__cnY@q~leSDU*Pl@@4bL?stm zh40^N);v>pYvaul<}%Ru3{N?aFW0&Xnl?B}GnS5x3un`g5cvsKXKFc^b--0q2A4g$ zzUy6S`8QXJq$*JO%JS#&N8U^q&w1Y*WIUCeZ!3>wm{Li?w$@EGuxv2sEAx4d!}=w% zxs6ATovhJodnnDBG>@0V=R$m%k(YKk=y z?+a=PT-q@Gn@Jjk2c5s~6eY-2wP&tx&vgUwyQXBo(y(y>KFc?NB{_u848Uj78{_ZZ zlj&2F<5T&+&USns__aTGV0dpnGzkO{ngcLFK>+_11n?L@{eZxi;2yQLwXrlaaQ%}n z`;(izW$1}SD<@;^$maaYFuz&5>Ea>Y_S91(T6=T46892|C%xvGahmyhXQNi&26E{T zIr2Oum-c{M?z>w05{glE==rQ6Ge2GC4HQK5Lh@n%)o}N`G+sM&JLcme&u#-^m~THo zUs4Rw(ka8vFVR{>cXP^NZSi=yiGCI_7cJO!^i|C-&hRirXFf>VxJ{JL)DxBUinP_n@Eb;<{CC8hPm8{_K;U8Dc;WOik5F6k-(dcq!3 z>jF*TK8w<`Pb=o=eo%ExU|ou3WTUfHq=I-8$g2#cCFwA ze`zN5jfKRsnq@0o%J7))s+!yc6A_}}EB!lI;2^gp=GR>EiB}FQs|%(;Ymc)$NT zOmwv`xS{Hf!Z;UKTz4|7Ru;87LGsTGYPp64WNeY0&Ey z+oEI^{1KFJl87j>G{(+)q>RuEloF{p zhkHk~FG6dZIH4t+FZUUuBO$}+pE$ek3$?R0Cry60&!;;aR@!sHfyztT&4_>27gUPwNMb}J~^Qs2Qoo?KaZK_p#*N@mMmn`COgWxyc`p-&{F0%A^ zS3Wkv6WpK<@q%AKmKZFy-tXC!G`IiQDk?aeJ*jdHt~2=!KmV=^Qs0{7A&^Z`9g7s_ z87ZPZniMH9_-ljw&;I)X%mFlyTL)aNCWE3c%e7Ln)j&|rMBZC1p{bDKL>=Z@q$Y|z zcC2_(FT4RG+>YZn3hzDm9_bNDkJt0fHyv%W@K0v>9J@SyGM0NemGxO00tvhHhrrj>D!X%GUuMA#di7J) zQ2nP(f)yzU&%GFosGcjyfmFG8Wg;fhhcys}XLVIv=?(*O!h0d~3%hn%=iL%^kvO!Y zpTyYa7N*$bd!iG1b;F2PYMX2;z))_kQCcX{M5T;!+QX>LCqmUcOGSZN>;NffAdm!u z!x(-i(0>uiO6uv$aagDvh07WfYh}*$zG}ERC?IAdxeu8u->o6@tBdIQCHs@rV85e< z9}rWSrWsEtmSE$c#^U-HDdM+1PGTUNckMUnM;tjP)+uHtWp#ui(uOfO+f{7E6V(`N zQuZX@fX4%fb)oj~$$$9hlH-Z#`{xeevUuB6m*6d@e{~lx9Rr;*sVlUL*`hbDt!h}| z<*C}24&B;@ZZBp{QVD3m$*V2Uu6bo?VaER{efFT!%%XA83ijJUk-QU}o2MIgrb@hE zA|vdaE@~Jgz-ujBbR-pHx(9m&GCs76q85J$1Gu>2K%#;_&a?lg&;BRx{a$0;#<7S` zDy6oeBn^J$`&56iRzxi)itj|Z!WZsE5OMRN=|w0Z)WjkTO0-h44G=4#uEK^@;vgxL zRz30ktI;pIfvb%;y40P{w51j7MeOs28jnTQR-_uw*geMB*1g}=9ep-Qj^Fq=(G90G zY#|YUlnoE*EPhJ4YFh%pAfa4->8QCXekSV<4h?bctM}UaD|c5;&+xGWU#=D&%waO+ z=t&6#6`u;1K6S2p6`=f#yrX5&|mHQqqltG@c0-Ykl87Ywxr7KIcD-!GPz5cg_dKe6IVt^9o5# zX~Xi$+V?c};BSv_@*N#XW_0PcHhJHnyJWhz@TF#uR>LK>bdlzT!O@yd^UBbrw|o$P zE-MxStSJ==-s*C*7Qc84^HZ#MngOTBFCBXA9F|vJWlOb37&B~Fu+0*Uhxq9oJ|=nH z_I@INw@NvLoQ$`~vc~SoQ+~BVZ-r`O3Y%!l1zQj*zxPUTc0Ge7Z6?gz0haL-<@oMF0$$yLo3{vjAfnnJ-x=)F4ZFV zmM6>8boR5J-#3ZTH~wD%TJZ;=mS&V>6#q%60f~$UgqrCmp}va@*t|5e2J~!9jm!+` ztt=SsIkuURJ;Pm8lI{oNrW0rWm*~(RqY-1u9E^@1`laD(IXe|=1iXiS$j;x6>Ag)T z7L+ofj`j7Ew_2W>uH)i421AFHS2&<+Cvy)8;<>1Ai-k>W{?=7S`U1)|97RsyqpJ_g zRfa^zuAs0lp_jM--kKZCQ0Xhj3bfugo5s9;&_(N%ewtY8NLDlQ{9!^^Px|XsuT_z= zAu-z#NWD+u_R?__I_545mUgVH~U;Lp;4ztFL;!UZGnr5GD(OM=X zX8cgCZnh*=1nU-sg#HfKfYd6izBz|% zcEt&2JQhyEI-xVL8IA_pP4gbr``^NE7Perh=wofSJsd3Gs(AuoX%Zk zNp{|53z`Xa>Y+=}ji@r@pQ^!Fi9O6Hk+4U?5pg1wYG=$}kb}p4IAcq;%)ljQ3*YAN$fhGI$sHfDKCQ~F_t%#bHTD6W@F*j zIYG*tz10a^F0sY_Y-wPuan(1smwvM?Brt49V?tlqF3tD7Xvp7jqpVt1+1EPZSG=!v zF~P~_!c%}ZQT4y!)P6KNf7nWsNVwq6tayXp+5nYPORQ5cnPBRDn3DNf6o!A}BkUu# z_<0{WrKG6_SP>#a3`}q^8Kp<23lpVwvT>Gvh;!-fWA(>c+RAQbu!)m%DBTf`#r0!c z1EaicWFG7KL(A=+MeS-v@T<4vd#}xqKU3j|wS(fnPik0B=IP=voaBq&hhILWs)SeV zw0%YTL@+X_Pg>D^+O~`^484%Y|M`?Us6xMt;EeaQpov{B)#3~PlFR}3YbAR-jngZFJ)uCxA@<@oNn5^%$|KE~Al*}Su8iWFu!S*PbYj8jQrl`})*i*^w)^Mj=C z_6gmQn{ih+OpUv0C@7+7j9+m=xVoS57J*E>y)Lu#A+aeySki`g0(Lc=9rM9svd2q) zB164HkaMTmkr#a?ZBWWzqia^_hNYDqD=iQSeSV*=+$pYk1~ftfx%ldoGwACaTz`8& z9;x8Mq_cJ4r$9XUrAmdcmI!{QFU>=gN4i-DRvM3>rfD$qKYF}u)kVXRh{BQCs1wJF zlo6#N+Lu_|n1_wTDxMXHh^0VL(zDmzY2WCTeZrx)Q_e+aLXRLp#upLbzBtDAjjNX>1%+ZW{A_W?cyn>6Mn55gf$;0c(%8g8NiSI#dq({6uJc z+srB*f)1<&Op-?)pGVyHr#WavV-4Cnb8~pTPKzPU?V^wgxRuvp<}y_hE2EW2AH8H6-jh!MI#LlJiT0JUXH-E&R>t5zIY-LHfn!Mdk@mIKSA2e z5XdClH=Wuz>I0!SU7%#r!P@Ru{fO?vY-Qvhz%~Z}+ZX_BxgUUy3;C(eO@$c7&J_!{T?p=r*HR9c>bCs{yJZxYE%3r+!dwM>e16M9ycjkChG8r>XII&m&MLb z0Ti#xeT5#u?5L=>x}CQfc^+k3zA6^q(sv?2*@r>?28|!#LHre8tB3fZklYVZq&c!hEZv8T!);F{8e-Vr9isQsEGS^sB+1D0)g)+m zKzh;vuxOh4A4R0~l&r5k@Bh6leb~glNgd)Ln#w%}bf6nA1Z&RY!n<(Qd z?GunuE~~AdnK_@bo5O3fY&X(92w|f(X4wB$XLQIC;gKw8CWa)8XLgy^@Ltb+WJr2O zCR(fvT_Zn7OkS?Zoi zfNS3LQD=X%Ck;Tx1>N`)XZb7q{@->Utk^DPP8SKy%-P1gjE~#t$@_qo_qStn&#A>P z=i#bRVmK>gwa?ZNla#UjB!ZR0OAS+|pWlXn_Nf=7)Q~EZHk#uTsjY$P3u2DL&N&WS zDMvfr;$->4y_ugngMF`QhrUVxYtF}VOq{xo?p2{M@d$a(Q>ZIyzbh4HLU2+Gk=V@2 zM-LIbt7)uH^0DH(4(@lK=s6)5*lq}|n|w@@`DC+)1dKk~dz`+SflGKg{gl)a=L0nv z_Do8RqMW#%QCv~(F5=&baofjh&TOJ~{Hr3kbm7*@MIs_GYm$4p`SM!o%GfuJZ zq#b5mA2<^mii=C`(iUU5x6h*bB5w<2;ujxQ%a!DDL&|aqFDhrPesVqX^FRcn%U))N zf@H|mb9fUBjDEi+X6%cLX4lVzBRf@Pi1WB}qN{EjU|$lnugwmX%=8i*UEy_9);aOw zOEg$A2W%Z&y%j=V512PG4w!THSYM(DGbP z{Ax0AzfWBNJ0HL3LRy&Pv+46^V>@pQ9Tw`*XHJxraTxHXl5CZuBWH**lxV!mqP}c1 zw#joGd=+o-^q_^^jcjQ|B0XPF~$G=8Ep&~tKJHC@U`K3VpPo2j1 z_zbXYE@1K_FzSi*zSH>O@_*ru|5PGUS9j|@Zdr4H;h|Q5VCfXbAl+$rC9@xPc>KiU z^!q;b($-dsrXfjcsx>V)g_#0m3dQFMJagOrR8NA8c@K;Ja1#?L{&U-EY|0W?gu;YQ z>2QQgm1LgjO_CgGTTa*Vq*$}MP_J!bQ>bLL#Ndy5>}{5ms+ns0U0td-%wzd8k#9(+ zB8rcv$;*>gZ8%R}bJu6^BvA2lciP>DyyqgkC14X@tNez@YSN;0(!h6dbX$HpmZ_uV1Lcta8JUE4@ie)Hs_1O zvR=EBmt`~U-pWS>TdtQglTKt*_CFx%PDS$%!_2mqOfmf&sA;s4M#Z3()y~oeE%C4! z8&Ze4w*?OF%ffLZqfb*Dd8d+Ect`R!Flnq}u(NJ|Z(UcAG` z*#LDggG&jFgJ%WsXHv;WPXUT7{?cF+Mtn!{sY`m5Y~}gHv$51CgmlB%tRw?%?%Jxd{agCTDh*^x<-HMXmz zu2eDXt;%K3NOGQ4;JeX@Qm!#}>m1FZ4wDNhB#48DTM)l<5ZY7v&hjb>NevW(VXSa} z(1rx9{ieeL9{m1%{_=Tk9j%@841w0-Uj<*xx(|gS;%9yzOGrb2LcIWvro;~lg(jlL zN~Y->n#OiC+C;;nSwwN@NcA^+z$o$HqzcJCP?S_~v{t>l@9zd<0!F+aYzqDNkABs5 zF%$iigkZia+hF2k1z)AhH{2#p2Kar=LO7dDztj}s8PsMgFs=n-y+I~s>pl3|1 zTUte_ux5pe@rlk;zFNt--G%$b7elZ#kD#$%~`lm6BP{9M6}v+~g&eiX!Fb9adML3+-c~^$Nk! zh>kXb^Fk^rvcta@!jmhKZ(x8<3^%d)BINNLE-zm{*B(hBb&6Himu}Q?8Rm@C_@D3J#92mvXCX>A1hhyr#t5mp!#+J7@;**6SafNsCwNt9; zaw6PT>MbFV!bq+2*FFkRJt$BU9(_^~UZ&F7d!-3FPfDDl4iee(-W+ugb>%UQ&u5eM zgxV1T5-aL+!B0m+XwVU1Dv$fkPMd;E8I*LYKb8`AC$BTEn5eu>vnt0fRw)#PdQZwd zw_~JDje>H>^K8iSgtgap^*hM(Z(5b4F9Pkqt|HfvS5CyXqIM%Jan06qsWp_bmD&;W z__J*=ExHj~H8I0@;xosfOX=Hx8+yhPBi4&KJ9qn*9aNt#%l; zX}x@ZJ1qC)DQ3~f*RIfcRj4u~ zPgvd6t8%D7=}`%vO*;{`UcLqAwJ`H?xA^z--LEJl%!%o5zG<2zx)UJ?3#Mv*)4&c{ zPzm8sfOpY?BghlFd7BY})OF+nMy4EB6&f5eDCL8{{oaaSkDk4i4UsbO#+a2y&(8iU zhL$*#vLuL``r~T2gTR}bCKgBYIK0Q}FLbQ&y$1e7YbSv~#$Wj%P_Y^jA zypp)r83<8km3(LeGt1bJ=SXzT`*f0&j+nt<8S~T+AAwHT_1Acqx%Zs1i@wvd(vgYp z)2ZA<)Opo;HnOyrgNVzruZ(qz)N$Yy@KSiiCV5WVvG$P$bRaq@*W}m55(=bAiMMry zB&WbY#{}^#_ZBR4>+h3jhW?Tt;Y^60a67S1yuZI~!pwK4>HoJ!em z^znDK6F-K0dff;v38pzfzWzm-^VBss9ABwcF3=r{^DXW9d9_^x`I@uh2{@iap}cMg z5u??SpKuvpQox4N6>;}7B$CviCJpLu;(XX4ben<8nY)27<~0_qgZR4=G(0YQ#=ViQ zX8sG_;rHPDs}|S685o}ZaA?|J`Xh}0K(iT+lj znNm{bV7~inpiSD)cJXuJYs(;O`z;R9l0){l??N02S}mZyr@iFI+|?_!_2|dXJ(Ju* zZ{VHG(K|&sgS5uKLFstU2>s?sHLM)P=at;z7<0lmF`^+_YspQv1?bp=9*!vQY#g4^ zrQyej+^AAz-?j#s4_s=&tAFm7b{Z%nnXyMIIC%~h`t(^QiQj&%gAz5L5~UfwMI@)FEbC?I;q<70O%%tGS{2A#7G?OwC|4VAqdjiqWi-rbd!*aHeIaBdCAwl-SUZ>gTH+3?0SeW-gs&9`2cLb^CAOrS zwvEcSu6-IB21GB)yR&ARxAj9Jd%sHiKdxAR6)>6kX2%~Z%e)nr>;;R>yWKP9W33ri z&x6eT+d;9m z`km|SWXozTZwaCuCv=}C=+SiZjI7m}>b)1EC?QrfquZf>yW>1s$lUmn4=w_U0`PTgCm

f?wW3E=j71G6>W8hzFkK+kcr+-p&Nl36m7}h~pZ#psVI6E#%&PKC zvpVNryVf0L*gR1=Df^zFcRVOyjsKw|u5~$6m1fH{ji-|&UwEfS%3ZF&mPrj;GMj9aA;IkHQ8d46ko z$n8=3YSkoxDdIm(Djy0LkM>A4r>Gn?&AsR>@oHCXNMbLV{F~vwp9L~hpc1|^AZTSq zS>%Xvz#GJF{V}88g%jT_F*nwXp3@@D6XH{7K@Af}*dXz{GK-N{c&U?}5+9k3yTiJU z8MqI+RzAf9eUM)PpR;$imf}*{TcCK`;8{f@^ubYoMT!ROt-SP-*_T8ML=j_Tk*EsD zopaanLflOb)(oXVz0zF8Dk&R`pf}tDHK;c1(_{N5aI6!WGB?oaxh*rGc3Q`>-Sdbw zc#nDwIx0@ku0nTn1rcT54X6pcw*oI6L5K`ZNwGNOWvt>{v~J7mctS*3=I|Yr#AP8# zQH8+2L751Azq0F@>H^2R9`8~J%GPn`CjB`~k8~;$RC|jtiqo(s8}|nr{Z|6P&B)5e z=njk3Ej@+;nP=B*z2Bu`v)^}J~+ps4`qQQ zpNq=Li~i_PKxIU^_ihp3B!A!jz8B$6817DS1ZXq8BT)BCV8Ox6_WZwb<$vNygX3;P zNCf3YL7Nyx<~46{MVW0AW^R!+-&JiCxPnH7_6!}V*q%9eIL9B`<|VM)plp#4pcCEYtDN!r9H|rJ&FH<_4d*TTwWNs#i?zAk+%F*;`r8xw!~#!Gt{a z3Z^$kF|bg+;?1z@YNP-Drg8p}(+c<0S-ojT?&*rJRkxV6cEplwzp_dw4hs`pjaqYF zSaQ!U4{Kk7pqZEB8(yM5y%q)WY@+D6oM`D|Igdb5<pdS}q2VigQ z=7iLXm<9MBhkkH?DtQM#`DTGKP@ZB4vuV&RSd|tBl)$0`wF0@kf$WqsCTCK5_G|0M z1@VTjZNA?$UXEcaZAG9DOAVJ;i>%=ajx7fj4ZSzdYLkh8VtJk$xE9Tpt*?b4ces*! z364`wYg?yIyWkE#hl8}UKuieb3RLT{?aQ6?h)u+WBfsdaM+qJ7Kj#CX635=2MOS zn%|laL_WAzMCYt`E>hAngz-mLQy8Wu`|bu4nIHWadVs%*4pXMkL10Or*s5t3e1Bfm_hYP!EVg zSrEw@83MAPc6NGJM%F~4z0%Lb$tz5eqOpvzjGzv7#R7vws`Gepy~N@h!%) z()Rdi9imHMT0%Z0vAB?whXnVjs7D<_q=HL%0_sBljb{^1v`kqn_}e`p&{3r6n#h_asZoTN}1jdnd3FL8WTx&@4 zQjyKoqdQhU3TdIY?`l^MUK2Xn(b*?pBuN?O_|Qvi;k(;mNwJQ%DnyhiUS005VMEI{ zS;fv;Kf-g)Tzs(N5_%OON;{k0^L==g+TBN zGmha*7jww^J|>sYUALmZ4Qt}-8i|3H-k z{4cUm0MYw@Dm}<@PvstJ4FdM!;qrg(M*o5IAmKBXV3sFgIROj9Z;90fL$_5kXru%C z@ntC6yeSmytiNPU<_*0QMH72fao`mczFXtP@V&$~11mrjLQutuW}CvhH5zn98oOmx zIZ+h0X2K#yq#^({GBx~>4+8VICCdM*9!mFDik57;%0S<-@vqd6+neA_ZrUFH=YJ{Q z`e^2Rkai^$(0=X+wI*%On>PYc)QKq{$gp$pQ-b#_5okAk(YM^B%+t+|Nj}}(4#otM z$rkGnNUm^7wri+JCSO1}w>doMw7ctPbsC7JwAr+h`lK{*+@EwX-(9cn9oVM!{o}*( zlVRBZ6ioRMQh%s5qO0fVUFZ;tk5+DD5wjcp@9msirfAszEBVgQV)5bA; zm{b0ST8thKcn9!U{dbg7m>3y;uoJ3ZN+~}=?+>?5B=~FVM1V}n&u5VtU@sgjT=%1S zfi96h%m0se_fP!i0%<;v#&h^R_3f@nVBrQmZj1Bs%4t>p?xmD=Os|^wODyM?PDeL! zt9(drFf!qddsO2yG5rHaRS%9ZZb0-;Nnn*XjWFc|o0p!6C6(e1G+F8EnAPacQGio&8wH1PneSNJa0)jdSnz3pPljb&kBg zqXTdD3jrZO6Qi0=hb5FA^9`7AUyUnW&pJ+SkoOyAZPk2enG z#D(m1C$)uN;Lnf*kU6}C;4?3I68CPWNptyDm%Nl!eW06EIRiHtrH3=!i!aEc07)Ro z1MEZ#>>1T?rEL}x_W;W+3OU>MbxYq1z8Md!iQ1BJM;CBAk|FLM!UNhh`jX2`+SdwV zH&x)1+b>MF12NcN25u2_)y?;kefFXD6|{`!A6Odn6$HuD>GbY{NzTQh6%wesu;!$c zmh(B`^A%qT@z};2ZE)05pvR-}#<8Q?0BQK(&_A`BRRJCMT8WMAnq#%+n>I!VvHe0U z+IiaP4<+3Lf>6pc2Ka!pYHE$kp78 zrNg%5vg`%_@V4&i+5SZ6=OJLBb5Gqo6_p;xChT+ikUuKa_*bU!aE|J~eaBy^$Y1K& ze#M!Huu$TkTv24;5fIqueNC{7vn8uAjZ=?guEMRe0ly}vaR`j&b1^?@epQgf(|{Gz zN>Fqmpc!+al2S#0@?HzS$atkD9vXp}t8g2)+I1Q~-9}_3Y`*s*fiR3y_$g>$fp`(0 zSZ&)HiRqbp`ZO&+9Pt1hOL=FXZwiw`x1()eN6jIr=t;)QYixszyf%n_EO_!(rBI|g zANd8*eG%`nco)Ou@o!Y~!P7QI4p)fHs5?bSdL_(>?-pA33}mocO9alcm92@kUaV;On%Q&K05mAlGQ8J|2pia4S-FKJ^OMD!q+1TXVu3q)L}# zdEycoJ~=&TgCc75aMvnK4c=!(uC^=NKrgyQ#gxOr{B`VHR!$JfYa>d;-Pc({FIG+7 z07JXsd&ght;kI28#?VZOK{v9Z4)*XV(*pwoRAbc$E{Z7jeC?+gV%Mk;<7i@%mi+(nsu{r_qv zeg^qrP@x6w%-pQ4^nOi`g+_%_GO%`Vus77RFk-@C#JcDEs3_vrB6r)n^OtFXId?$K z@-J(FN+oVhbpOMjDSdCQU(8K?DC&tRGqf^ zFkdekz}I`TlM7^AL#323`ZX>1^2ZJw$~1FB@uq8tFNDyfcszOc7&mudoRHEyv9a@ z9NO+FhKT18^I(2-3}Q?&5MgG?9*%<5I9`kQqMq{-EPQl)UJQBxj($yvcv zDM4fEd2FbkTGec(hk$x!eY%)avV4)zNxPw5)}$+TJ=%*4&I`LE$)sf_R<|VnpN>&M zJ%Cm2)Iext6ROt--`XJst%$ngXOR~EMrH0}R4H@Xt`iqY8YbX+U%hysm>lVHh$5dE z1=pVyrngORF}$C9zCY#=ZePzSGz;l|4(8Z&Q&2Ni`E6VAcX}!>{!M3wTzC)X0&XGiO(z!)^Q2uJR zqRTSm#^(;VGUTnxwf4oarOyeAWt8@iL8juYW@GeOac`QGGE|?p=L8JW7ra|9%%*ak zZ=Wz~g<%n7zZJc#PYEy@atrzLMWjRPY#ZSER2AY56se_rzMhcFr@!g^$L$bY$Pu&`S+6#Z1T_9zYlP+0+Tfu8Sf^;-!-eT zJY4>--~XRz;4(SVe#Be|i=)X%1)(RmoMpy11KP2H!!RhZImdQ@JhU{0Cakapai;me z1o-I-v#586B&&oQXXYeKjkM@TOSd5A!rz09`WtY%i)1WGY>2~{j*=WgVINcAWe&|e z&Q0K*-7@Kf$u?Y>6lxSbNILm;I@KVB4yNvztS!RlKGq|LX8FZ&>K_Qg>r>xe1ik>O^@ zcv?C{P{kOZCh<;BO_}fWaIVmNN086b@;PrF)5nrqVnxHgLX$&B zXsCEJUzL8!RnRERZgbnI4(Y3Sbx$u8mKvcmeG9C~F<4W6Z;NjPQTi1H26M1Qgd{?O z1lB2G{8JZC1>9V#3qWH(X7ItF7a)Vu)iFC2Cp@ZiOTB_dc0sXT283*o$Z;H~*YJ`B zQx=JXHxr=D;p)uAos7P5k45QYV!Ojpjo^IrCm?=H+u8A5&$Q75x79^9V$@`9wL7wr z)c8wAv?FVB2|G<#YJ79X?z^y>bMjEF=dT&U2`yd8iWE(I0@%J7M;IWI%T8d|uDfy+ zkz^<{{Qxv`M$-p)MSyVj+T>_CmI79^ONEQx`KgdpE+YbPF7QzyAQ`~{^%+JkC?i;;9xkwk%ESTG@%ActRT=ttKYnZQ}x)_bU{eCz*6ci#G6L` z+X1|fJi*raD`|l8CrCDb^=-LuA|h>|eBtoPJcU)q0z_#h>!`4X3|hpTy1yXOmsl>mS%++dX69 zi{bf2ZX3^<(Ynd5WH*MlAS^%jQF-Y2WQno}H=LWuMEIMyB^%6%AC z%WkIh=iHr-@_9pfT#Doj{2_>8Od^i_B;RY^)Qlkc2Yliu3OtkIqe;J^hJ%&e_B}`W zQ7-#yP`RFguAQElo362yr30Ov!GjbT}e?;@;TA3AKha(AQ!;QbzjzT zHx&XXlD&({{$O(dy^H@7K)2ZXxXA=rc@LmkcJ+JWfh0xIB9OKsrwWwdGzN#9r>UA> zt-D9Qij6EH*VaIpW2bLaz$7ezA%wsrQ!nL^!dhJ8`lNO<)lC}%8uNwZ6L^>UwX^tc z6u*OTOF3(VET@x6Wc7eGBa6DNR{iNqt52ZvO{iWLQhAaeh_LtDx}IPe6)oHz%)>k_!!aK?07hmSJSqsMoL-iAY~IJ0Moi{C{9ZupVc`g>ESwErKTV6C+xK-?ZYz%g_L6W*w_~R4&E3xJ*W2b4(tq&v}3gmR2&BIi*@$mf0`5&SA*#_Nz1-UIE~!)am~v0>y*?9p-Wp?n6Y32b6d}g@%pU-TVMA# za^i^v-<$&TsG_!ftbCOUEOnbCF5XQJyEz z@l(EFiQ0M4k`r$4)h=*1l*AlMt6hbLO>JSeUbJ(WjhkNL8YRSld zhv7sJfUqwk%g+X6U;_Jt24wsP4aj#I$MkoHkRIqdHncIYXZYKpx`%G)XsN|xQn|yP zbOocdbduaKgur9_Cog4hLBEtB7=U&{m=t6r>)wE(UhbyqZw1}H*8gZF6Mxm^DC%K^ za9+zXR*p0lVSRyp7PU)oWRrO~)O67J-HF3V^P5%3ag{zZN!%lD^GGyf1Ue-LH6wzF z+Ido6o&sZ1N)y}i5hDedJq7jKb*_tH@qm2vuTHJ``}sV*x(Br^iGaH>Xw-qV zoR|Ok66<2T4Kz=&EnKXcSg_UJ)YrNK?tW^O!AOoZEZ(>kQIyg%Cl-d)N)1In0A>0`sBI# zbGns_PnL)j72Q^>ZOrEgke5bzb37dWBwLf8?O1NKkBHixcu8le&Mt6wGz=#`>)Lq{ zU5|t|M4QO!yFHbw!0+L@bvvQLSQPvw;R88^q~KbPT=r=f+<4u*x`ioLNWi> zoI|Cp96zDaOz%iI#$i2s9F9yZ2c~LrRunt&lM=pWfa_t`nfSr0s6MF53>p25?_v<= zK9tJih+oc-5C34kVB8(QDR zb^jxU>_4PE{^Spse+IyO8UXXIpQK%;^kQhvzxv%1Zoz1&Ez3(WR&bE>k9p4z>6beV2(xmfLYg64J6(Obyy%sa)q;o3yl zt{nknGIZx9?f70)G9Fr)*V>BJ^>p!SEZMB^OZ_I5o9*s4i`TD?5hGGp(=5zV&RrxJ zMJFnjAMuL5xMogNplmbg8KQsva$D@}TcYe5LZbxerdp<T%VW zB*LjWGEXkGYg3c@D4o%Yd|fRgxVDGSr$d#I{;so5VYWzoEkNl{RO3%9xV6d)jPJ7W zD{nw##Xe{9?hG^Yr~gt(;jfuPa9=0H0van7S}kg21<^p_WYUM%x|GMV$s@roZmM%1 zof0MUqSBSC=2lO7p~P;{w`9_%+SRmUi&*Hf<)+qSJT`kCzC6XBkF&`Dep0E2kBm#5 z|H`fJ7P4@;YjWT=voeaNg)ilN+8$P2%&IW`WQuY;VV1++4sYCkDOWrNoKt&3(iP+h z-rLEARhmcgjONrBr`qK$3MfyHt}Fe-K*CT+xdLlxMA`~5wQ z{z1MwY)rCAI2!1PDU`VZu_L%oNSKvxf8bF`KHbJi0U5Hm|Io-ugsXZDRN4j(^-Kon zR6HO&D>ZaDw^;(pf2x`?NDwK>*SZD^q*f$j`7rzh-o4Z4U+3O?OmD_(kx+9}itp|n z)IosAEOvE;8s+FM^GaIG;1+~cz^1#WIcL7m<_kofVB3~Y%(h{=+cF7wNxGFaqR}&p z;9#9&tLzKMf;53mrCQ1ispc+c;)w6TM+UZ=P4hn`kNMe)^ z0vwFdxAdW*P-H>^C=7t^(5O&?4yHy{_Dmv-LU%8~q4G%l+!>MJ&z%tgJNu(yBKcrv z_x6DPPmt%=RlxsiR}mEk91Y;_1FX;8-*=x+WMkw2^p6Ldow7#4(p`-*E%E6K|WC$|ARkA&ENT^jXd>Qd_{i#jDA*6_Sp&h5Z zQv%rY$V#fr3p%-!16m1d8S*EaA8a)j@w**4>ZdN<-GtK3;Z&b{n8BC&z>-;bb&K8S z&;O;+`9G$~^(63qDP*9C>8-1XH=S2WL~$w95Ax?=;3go9hG2{)qZs;}x#jwzMI{Mj zT{x8K%sgFP6D=hh=Mch5f%}TY3mK>6{`{Hh(hO53sEEX1jF8KYpbMsZ)P%A!urQBy zr7H|EsWu!(MUCu;F^5S65yMfFIa8G_(}uoyY=fzj#N3~fUoP++^)@rH()$_ze3&Jd z`u*rb0rGiJnv8xB!ap8;6p*1U+|aKo;E(dw1uc753YY)J*Z(q10|WxBh^d*S ztF?ofJ<~6ZO9WJa(l8UTax$?3PvE^)9t-=gN?dRR(?(T-{^QZ6&>HT*?pK&q_M0?8Atk98lR_!+rM9P(mS@p7zX;D{`< zNZsoDXK7dQX+PIdy+=Kgkpq*=Q5MKtUxUo13mEvGZ1H|43?~4FpwX0cpLD`z)Kb9= zc|XVP%?A>uH-3R1k5ruGJ;>b#1GM1F=Y`~GHvDqQLWiSk-|v&Q7|XQk=U*s2H+1(% zzRZ)zL`tYE!a6bEr3V+SI&?Uv9&ywD&>=#>{N(G`Q;Tmw)>UB0s!r zK1QCqFe%`0g8-+3;enTZuXbk7&A~JLk zhGb*JRPYQ>Wx@mG3mtc;wkaor0tviS#PC+DHh-%YUk%mms*(!oSWYx97{0Et7%U6b z@*}b&n{i~qZ9_mORC{)#H~bmUCV{UNyrQun^dYU-t1xsv3J=KK?(w9LbZucTnNNc` za+IC1Qc=YmLBKs@TX{hNdifqD`~t;%zlyI%emqK-#g#Xx*j_X`oanWkJtk=fw9%SN z?4uUYuAOi^FZlu5rl;b;VB4Q&dc>_mv|;>*5>AsB{VW>u5M~1VflBnVTXsm0 z_A$@K_a|&V*M`FJ>nnKH9TkYw1}QXyUV-0iH=)22ZWp2?@ScB)-K5#yV47=zFb_`N z=+iy$EFw7rotC`_eUF$5sga+VJY!8WWYb~zMkViLtEwmV$>$IZvJ~D3isaXtjqgSq zIiPPSW|9NRzH5+zr|xBB6tC)Vj!r2)vi|tgvIg>{P{t2bbA0F z0EGesnEx#Qhwt`J$@0Q6GQ#GqwCWTWg+E7WbMxEj2;ZtJPb7y|YD2S&Ny9F*;9_gWmXk{(M!6_t#Js+(qn>Z_lEq&4cc}929uH*%(4hZO=)aBFs zZD?>}ut>il@Hc5uKSP)4jJ_%V>^c7NJk!2FtC`>tbeTgfXw;|DEq=xhqGx3P0f#`g ziIFB75RD8Xe}Ha(9?rXw7e7WM+A-fl;lpC3e|zBv!1rr9LW-|aFrH~rP|WU>vp=qt%b%kuc)GY|C``9C!BzG#cd_x+ z`z{}BJkc(?@Xd3&dALI9s?j=v9wp^MQz^ zs~D3P+--?p_xFP`E23WcLEQ}5G|X^>HPFFqL34Yh%L4g&D{`bO8LX2V#hFO6noSg> zg^=khe95!Yg@iF8mp3mS&yfp+n_qhgaS9kdKFjo7j-$Un_#!_K{tuG`)aU3L8vTjt z8Qi7f?{zC|?5vHA?1AOos6aDgT|IVYc3`j*`vX~xxU1jL0EGpRRx|(}u75xSjM6U8 z{#C7n?%#3YVY4ofun}SuxbxG%5x9UFOu$3}`vD5){{-gl_Cq9gr=#&;KR-(If9>Z! zjl;zVXvqQ;m6M6>K83SLOi ziw2NdTb=RN-B0|w>Sq<(}-|`lS>4` zPNnS0yVsX!{szMiD1jpZd8Th^^2>d1ETc3RuT3DRTX-*B&g znvE2h+iYϚ&?Xc1B=svL zQto{OZ`HH>HRj!!SZ?Srrl}zJ{fWa z1KR9&x>PY+@eZNIR?xW&jJ|1%zR5q?r*G81($634lm72V_y;|-v1io!%~!z~_Ln`tU-uC41upiAQr$YL?A-ID^|dFR=`)M`&U>&IPPE91F-`!0DjZr=WhTs z7=#n}WCG#%+hM;?Bw>1HU)0a{_3czhlQrakmCYA~NYx^#NYki=^Q<~fVGD2 zm-*uDhRm(s$OCdIg-(g8-=HF+j3A@82t`wW6j@HB*kO`*d_z4u2sP$FP$E4MOm*SP z8p}^FviU9QSrpq-@;a{12Gr3niFA7vAIl}tQkQ2WEl3>Y8PC1>=$}w%T$D+Uv<1%+ zV+8lSXGZz)d{vJeA|Zv&qtA5_yA!@P3m>16K^|MkoytfWM|}AH5uRL7;#MJ`U#Q9l zV(h(_q2%h(V(xB@Ocyo&MtzM@Zg1PyP;^z5|@fzyIILIAkXz9b4uxGBP3|o6PKkW6xuS zvNIzkBO`lDC?hjF5weSr6(WTY%I`kMI_mrV_FUI<{hsIl`(IbC%k7-|zCZWf=e=L= z*ZV6S%yF!X-#Ay|>#AsG6Dz}=pDcV*5~-&}KP`w9!?QD<%PSaCTwN=zd3oo4OL9sf zT%d;Em)|BY{Qir|(@TqP>fadA?>wcSQ@E+wn!J@kUJbi#Z?8h?4H8X`K^mO{)`vqx z=-y~d-eWvjv7ke9f`tX-KhOYAbM7$xcif&sOi>bmK#Kq!GJFH_eUuuOFz_LG6FH&y zIJOfX1>3nd8k6_P+#nK^NBO@!kQYD!A4ruS*c=xWeH-TU3?Web`$nB`M#r&L4t>ZL@vc}HI{ElN{d zhj%NTJ(qkiH0U*mhfDqXU$}}X__VnmEVqb((t76xW}cFdZ_`$R?oOIS z<|`_SpQSIC4V_PZcCSrX_lU14!Ldj`b@F|xPU{sfkhlq}QI#Z)x=uHVw~$NA=5Co) z)ZIXrg}5_MFwikG{9Zu(YEh6*z0JkF_xcq{oSs5E#L|Ag&$aHKg7`%sv?ws`=QhO8 z-Me7urG$S(gqQ@GIQP8#%#vkzD^dDcCfHHOw_cyut+JG)Fq9!NWv)l0WC zmJI+{Y6cIhh{|%Mu5QIwd<=6mA^FMSlJ*qs;F-`zuSMQDZg@Xr29s+r71%r9o=v1n z2HE-(=596;Y!TDi#x4h+Y$k$+KmHuR99r9__y#9 zOtYs*&z?+SO)7cLrmOu}km$)-pOM-Wr0Njb_g7t9O{`p?Hbyp3J69uTJ0qYI$;igR z2H;2qa;oN5Hc)3PBTgfL&%o6Vl_)j3=18en07}Ia@KF`^mC7+@Yb2t)7e%XRTsvUj z!yzM*g_(H5fTm3a2U94_*6P4-1(6ABxWa9$JYe94l&Opzn8w`M!+SohTI#^rT zfFl(gV%38O@c@(%&~9o2^Rzk!N9i>UU9yC_8)f>Rb#}XVze#~QQc$?jJUsre)b~K zq?u5~otn9j@8OIETp8a4rzIjOnLGkq&x!2X=C-tIZ9ZEHyOL30tGIKvXLQ-JwtG6i z>x?EcavA^l&cHD{lesaBzqAk~aV0mVI(neTm%m)*2H`oh zXqgY6=f5wi>~~26(HDx+gk5S23u+a8FRGz`Ve{hBH3C`fm%n+cztvz+^cJ!S2(Ul8MY4`}XnS6^Pp^-Gzq z&D^OZ5F7ffs_<|Y4FIayWo{B3@#&G+c)qJqjeQB3M8sn*!%(r}@tIcc$C z_q@Dc(5Wj1FRkEf#Hd9N&}W?t`x;Fsu0dEl+^#&j!o#bzVD^2XESbXmGJMsiuY^Zx zCo}T&S38D+2j-iPw~27=nK^w<joxVrW zUtsd^oA@<+>@G<(pSTYoM$xnASf9muBk^McRm`JU&($f1>MB)Da`J+t?D&J` ztL_i`JpL?jM|E&aOiO@k2WaVC#?l3mdTLgfwod-Z{fC52iH>OI@dD4 zGA2mwdYIC!PXzf;N6xc=0U=+D7M084^Nf;_eQJ7(EK#|_fl|;{{pWk|#DxTbH*M(8 zXGh!0J-} zmDNS0ioH;bE(++2;GaNW1iyj42uP%mC^b~j*M3xhNkAzniHi1uAxtH5-TN;75$G4l zEDIr$M+Z=^|LWrYWX0+vlGp4%EVu>JC`n(5tdn^efSugH_LK5lUYmK@ryC}iT3^Db z$rgArXj32l5L#bn;ni`#`DRnOP0s$LBENGGAhN&n?!?1fq1=wsHw4rQ=O3-zxERq* z^!D;(JV60>3L*N~a>_%wubktBE=p(O%Vb+-&cFE{McHPOR2R_3>?Iz?)b`?i^6Ujm zVsP@^;j!MPz@(FgbKLFwX_jA{|5OqXgLv#$oW;o}=a>Dne1N%Q&;Be{UWnk}9F_|N z4iQQfNaYXWMM*^O?RbEq5cq`~*h@$H4|cGVkXdQqyj0#G$ZuyN)7SrS9*Pk?NLJ%& z?O=RKoZHRZ8uV(t;@hRt+_H|Q)0tgfLoR2D|KE@R%a{C*mJ{jrjYGC2 z8AOljKUsd%S}9tYVi&rI=T~NPd#H|c=@NBCsp;f56Au4=YcxsKufhQ-G4lek@%BiK zBe1V=4rm8pZvWUihJY3wDWO>Kp%TIXCc0xFCc5t{AzY60NqQ7ZCt^@BArK!FMf7jd z4j@LWBJkO>Simk@M(aedZ7ig;nH$>mibZs$- zW>fo}(px1Zvi%GTYY)!-jx%ABa7TY{qWJ+n2xNn=;f;O{{ocYR1XSi{mAA10l+@U_ykCZ|i-m90>U-s-fgbg#4*L1=LnJ|{33XrbeHqt16E}=l?zIIx`5NR;EJX! z(tPm&>AiLxnPfULcuq)C*tDYjNNj&$xQ&e*sXE`|q3JrtoidPHe^w1KQXwAf6htWD z3_!^a_R7&tiP1mYDVU;w+a&~OJ@DR6!3JZWpm01k4+i0Xq4rQ+Q{g%2p(4XY+(cbY zR{3Cu08EVse*#}qQPBWgEu{Y>0Dv3$c?5w196zG?#)ESB?_K;){!azpbMKc-@{wgD z&sfjoYe&t!q3<)R>WiN1FARc8SQ~3wY6L3PSZiRM*d0$yU@J1fxhvnq>a)DfzUA?? z?eQ04b;hW0^Y+}3f+xBeX!CVdGN1LFy*N($`x%;Wq+!6G*0!*tc{lH1@@b!3n%wF# zkRB9zeWARxp(n{tK7YCtUH|M|qle8Uk4Hl2K1JdB`>sMVq-LZ1i!@o~mh^`5h=mA$ z-c{5~lv$AcR*dV?)Dyy2esjoWd^GTl6rrnd8j}R;!i^3>4ld#3JK^>eG~CSo#FJC7 z2Oz8$h8qTYo5a8rXitUhF+nsmYCYDe-Xv#n-r)GOb~Wyyu|mG5DtrD9B8vYlEI+Q? zT2aFMi93lSOma`Z-V7Qny&R0+W0U%J8a2Uu;DCtt(u8td*x7V_KkEYvS%WLKa}4n+ zufC`9kgbgr(TgThm188cA;*R<cQ z5N}Jx>&&?NW@5zb`=tksGlIxK7h5MhZ<>Y5jAtuCm+}4IQJ)0Z4hHK5#%hp+HIPK-y5?F%SBV#LW#5 zH#i_}x_jbAE*@rpv#8n2J5VuIZiN1cb98#}*qcVA98v4xs){_U5N3qm03tZ20Eb#T z0B!1Wo+b!1rYA5D3Sh3YLi|acOOop#H;G9=q^>I|BX{jUBKK%fF8~pZFhr1_j}KY3 zKt255xaA)OwMJYuSK+lpSr_zU?5k&K?+ECNx5~WS(A@9fci+kl>SR`%28-P$7}S~i zxW-1A{O(N=^XE_Mqia!vWby=2qD^b>dLvKXzc^Y_vMV&!RK;oJ`y8WIKKTsMv!=!d z3(WVUXOhI87LTFP=JLx{Cw%&ePhKk!`0gaQeoL<-j{^Ky*!VNIYx&2xr0?QCyp?h+S97U@NU3HTNl#($(y$Xru3NkpSVUJU6L(oR)Lnl6%^;^{NctAy~UrD~! zw?=y@Dio>nNc_Wlt5evX(9N0#C3{dUZ&VXph-wO3QX%@*N%}TZygGFU z9Al)y%uT`&pzMl6RG;|f+1Ytwte>xp@1`qOKJNYyMfAD|)MnsSq1xLI-5NMGGL#am zrtv9j>QnpeR3@LTg8UWWpu&a5(%)qYBFtCHYtp^HA^4r+e^NH3^(-9QBg1;{Z+M+~N9fj`5N$4Q9KWO~)f z+@mB9mXQ@caMzgg(&f&48{QWT9UPMHr^k1oNt4c{^f4q-lt#_v=d^7>Cv@mv3MgK@ znf0bS=t)S<6$~;LCuh**>lmA7$Zal z^zAlS(;e+{3Cb3?#aDk-d%uec8$L^*FJ#q*HCSWYrMJFenKa6D>S{>ZeBNe!(!}Zj z4=a?!)*?1S_+dw*G~@oP;(x&_Kvg!6ZSx-(CoN6yZi$0j*iA7v%CFb|vh|TQNotAV z7+4|R{m@q7HR72(LUVP48)I9H_o_c$Q5$ci;0G;RUr}3N#|gvqZ2EKw#Bq%xm0jvN zQ`9BLJU%8nX=+vxmhSwf^Ow(zizvR}c)z1fl~Z=UPSINRylwe%aA#umuJEiDv=5ZitgmS7 zb;6z5vwj%o8i&b-qv>1W8V8z2k5RYtPr6z-%&-hY1nhbGC8$mK1uk7cFDf)mJ?4e~ zI$`L@3x6U%T>csUoFB1M@>Ea^DrSM2m``Hz$c?Y^cekJ zCZ2~2!huXckTLx-bLby3_lP;`!aTsd3*^KLUc{l`{^5Urfq#1xG^(}8L1!UM zf2Gk<;u&++iB|r680M(8bVDYUp@YEdru5>9pZY?R*J?Je05QitjZ(1Yj@=}APJf`h5EBiF$mb}%=01}qGcJ^c4@0%)=TwiCcH;EzrMq#jNJ zKX}-9?AYj7=yf`1=n%hch+qG~JurX_&fc*OoiSt0E}SU-8$&$Wd6IaK|b-f+shZ!K?LV|;Jn zAne(kZzwjYQ>^3|9|)a0Gi60d*tIRInyS3}h4EZ%Y1cQFokec-d}l9AF&Fz;ibtQa zxSH#=SX9|fs_GPIL^bs#&ob8egJlf{u6TP=SdQOPQgghaeU^{*2gbuBg4duEDs9z~ znXX&%b|t=%cv{bssEvObGz@u;lHBMSG-#+8c+C3{^I}-129q$4pBEXuT9u4#TJ@tX zEL%Bdm%F{rpE@DwvkTYhgE!;85&l@{yq`(Ye2sE}uB+thY@pvvRbCM5ij=MaX>uX$ z+uRwDb&gMJ@cHhQP^JFGmdRPq9s!0hc^852NIP)QL;1JS2IgE5G?|8HNX(sJ=K4D|EmWLsff}Tz-zw8wk!nXnS}uDzSmB{&xdmO zzk2V#$@~4tf);r(6Q7;0pobJ;ulYSKx$G1pT+?@L>dBMuD{&X@3&;=#$3#3A)}5~& z@A>%>M^dy}(;*t0#NUjfUCv9gs zYuD%T5TvKg-KWkEM-!q7CjX`_1j^-6L+-Q#G{M1?6eCM33riz}rUbaTcBc*a#=$zaKY zC4&zOBKt{19)NxGC`18{4iEpstND|s(b_rVJiFarJ;TY#n>{|`cd7j~lU%tIThqV; zev5PvO|g+xwnRyDMd{t1_{==X>lgb*9}J3)xCmv+cPcUYZ^&nR8Z>PBn^-6F&vAT;ws(S7`XCj`q zF-j-o6xyMY>ta<@k$qAF#Y;-kE5o3{ev+!$9{QnURPx#bT(br=>Kxwjuc@&qGA*5Z z__4_J)13NrZ)%Phntc!qhG=2UkUTr@OZwGAI3yi|xAsx<;ndJ)8z-=pLZI(+o~vG+Pfd?;J}Ke4Wc*VwK47 z^3e@?c1NixO<5i&)v`{@ZEj`AdMXbE!^@A8Fbckodg?Q&VwA3=b2)xj~MMN13H}6o$ma9I1dTAjy#i*q+cmyK~UI zcRQc+>aWr-a*$mFkr7E9-U6A~;5mo%cCawXD2_fs9iO*X5kP6q`?Xi^-@5ppWOMUn zO)a^qIoa-)K95C)l?v*%$lG5@owKR(iAR#sVJ^Dv;%c|F)<+r2`6y~L#)4)&RIKf z(XN!H+W3Wx0{S<(B5#?n9+!wT0*tQDJ0I^>+L*8UTtTZhXCh~RPYgMW6MIQ%-KO$x zg%?4V(5ErkkpTnYosgW>AvTwgs={JMP5qbO*SjkvnY5caQ}moC zlFPgLc80aX>2iNxYLAxC#oY^NLur2!L5);=O4 z3*wjli*)|Q0O2F)EXVaa>DgHbRt(bOHS8|1zs>2W4Y`EyTF+qt`6&p1YDk3yaUHq8 zKnC2^1aOc!k(+O?y992_ZR!I2Lo_V^)}!~AclZnO)>;NJq-rR~#IE+)H+X+=$df90boQ;tt*d!<|8 z62tl}oC0a@zVWB^^I_$$bJH!@uMJedz6dLtrrz_2zDA_+KA<|~&D|Vz=cbNb$l^_` z%Hb>LqK%yJ=qv2S7ich*lc~YbZ9l<9!yS-x!O+Lknmwrt#);YMQ+M>vH)0!;Cv(Or z=0%@MhBl)cT^-b^)#4#lCV5FW@s#8qY~)#Xh)|a%(%SRyi#N=EPqq9%74XR*`}s^^@Ucq)E-1j(^_K}vAVs<7xt`xY6SZjp4c{QBq@0y`>P@jBmE>) zmpAU>)PGYqN)lf?%`t0LsLZQq;=WKZH&e}DLls_>r1r7GyG*@=kAB9k+fkHyYckQI zJYX#%>xqe?(u7W-89yoJW_iQ|Q^riEquR=GcjO-xo;94=vxj#1)<+R5wSL=(lqgd3 z0#qw_P+RdxIUCzr?s17eBDgOY6U*4zCV}gEs542S)SGW)yAi_dFIH+*9Pi|DFPv`1 z*Lc)_CN`c=H21MdI+|O-bt`-9v);|muSCQ@A?=5bfT(0-S3hl-Hb|V1$m*?FD@zcl z&kJ!2!P3NHPYU*-78Ld7%%UFd4>f#MTPS8bZ1-ef)s5)2NQe-9vTbxivsk_V8Q7(4 zB7^*$nbK3Q${x4Yi1h@{Envfom4tb3)QgiO;b$f%(5-$+#E0A%X&4Qb`dMR|@T#Se zroAm