wpa_supplicant-2.10-150500.3.3.1<>,Veܲp9|CLTӺ6)f&B+YޕU z6d3ÈzbKڴGY kQހ]G7Q#ކ !uEX䔕YQf=QW\2O0RV6F=-7E㸡z]|]syĿ") 3qșnrmld(hV8=N}7Ƚ{SXw8fe`py ?lv!JjYީ.,&}:DQ>F(?d # ALP\`y /{  << H< < < l< <<<!$!P<"@"$#$&$(&8'*9'*:+ *= >(?0@8F@GT<HD<I4<XpY|\Ǵ<]Ȥ<^̢bUcdχeόfϏlϑuϤ<vД w<x<y;z׸Cwpa_supplicant2.10150500.3.3.1WPA supplicant implementationwpa_supplicant is an implementation of the WPA Supplicant component, i.e., the part that runs in the client stations. It implements key negotiation with a WPA Authenticator and it controls the roaming and IEEE 802.11 authentication/association of the wlan driver.eܲs390zl31c\SUSE Linux Enterprise 15SUSE LLC BSD-3-Clause AND GPL-2.0-or-laterhttps://www.suse.com/Unspecifiedhttps://w1.fi/wpa_supplicantlinuxs390x if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : for service in wpa_supplicant.service ; do sysv_service=${service%.*} if [ ! -e /usr/lib/systemd/system/$service ] && [ ! -e /etc/init.d/$sysv_service ]; then mkdir -p /run/systemd/rpm/needs-preset touch /run/systemd/rpm/needs-preset/$service elif [ -e /etc/init.d/$sysv_service ] && [ ! -e /var/lib/systemd/migrated/$sysv_service ]; then /usr/sbin/systemd-sysv-convert --save $sysv_service || : mkdir -p /run/systemd/rpm/needs-sysv-convert touch /run/systemd/rpm/needs-sysv-convert/$service fi done fi if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$YAST_IS_RUNNING" != "instsys" ]; then /usr/bin/systemctl daemon-reload || : fi for service in wpa_supplicant.service ; do sysv_service=${service%.*} if [ -e /run/systemd/rpm/needs-preset/$service ]; then /usr/bin/systemctl preset $service || : rm "/run/systemd/rpm/needs-preset/$service" || : elif [ -e /run/systemd/rpm/needs-sysv-convert/$service ]; then /usr/sbin/systemd-sysv-convert --apply $sysv_service || : rm "/run/systemd/rpm/needs-sysv-convert/$service" || : touch /var/lib/systemd/migrated/$sysv_service || : fi done fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then # Package removal, not upgrade /usr/bin/systemctl --no-reload disable wpa_supplicant.service || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services test "$DISABLE_STOP_ON_REMOVAL" = yes -o \ "$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0 /usr/bin/systemctl stop wpa_supplicant.service ) || : fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ $1 -eq 0 ]; then # Package removal for service in wpa_supplicant.service ; do sysv_service="${service%.*}" rm -f "/var/lib/systemd/migrated/$sysv_service" || : done fi if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi if [ "$FIRST_ARG" -ge 1 ]; then # Package upgrade, not uninstall if [ -x /usr/bin/systemctl ]; then ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services test "$DISABLE_RESTART_ON_UPDATE" = yes -o \ "$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0 /usr/bin/systemctl try-restart wpa_supplicant.service ) || : fi fi?* x.u /  x OJ|2 t=J?yG BA큀AA큤A큤A큤A큤큤A큤eܲeܲeܲeܲeܲeܲeܲeܲeܲeܲeܲeܲeܲeܲeܲeܲeܲeܲaQaQaQaQaQaQaQaQaQaQaQaQaQaQaQaQaQaQaQaQaQaQaQaQaQaQaQaQaQaQaQaQaQeܲeܲaQeܲeܲeܲeܲeܲeܲ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_supplicant.servicewpa_supplicant.serviceservice@rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootwpa_supplicant-2.10-150500.3.3.1.src.rpmconfig(wpa_supplicant)wpa_supplicantwpa_supplicant(s390-64) @@@@@@@@@@@@@@@@@@@@@@@@@@    /bin/sh/bin/sh/bin/sh/bin/shconfig(wpa_supplicant)libc.so.6()(64bit)libc.so.6(GLIBC_2.15)(64bit)libc.so.6(GLIBC_2.17)(64bit)libc.so.6(GLIBC_2.2)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libc.so.6(GLIBC_2.7)(64bit)libcrypto.so.1.1()(64bit)libcrypto.so.1.1(OPENSSL_1_1_0)(64bit)libdbus-1.so.3()(64bit)libdbus-1.so.3(LIBDBUS_1_3)(64bit)libdl.so.2()(64bit)libdl.so.2(GLIBC_2.2)(64bit)libm.so.6()(64bit)libm.so.6(GLIBC_2.29)(64bit)libnl-3.so.200()(64bit)libnl-3.so.200(libnl_3)(64bit)libnl-genl-3.so.200()(64bit)libnl-genl-3.so.200(libnl_3)(64bit)libnl-route-3.so.200()(64bit)libnl-route-3.so.200(libnl_3)(64bit)libnl-route-3.so.200(libnl_3_2_28)(64bit)libssl.so.1.1()(64bit)libssl.so.1.1(OPENSSL_1_1_0)(64bit)libssl.so.1.1(OPENSSL_1_1_1)(64bit)logrotaterpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)2.10-150500.3.3.13.0.4-14.6.0-14.0-15.2-14.14.3e}@c@b@b@`lM@`?z@`:4@`_|\@_i@_i@^@^@^|@^|@^Y]]>[<@[[ā@[[;@[@[QY@X@X]W@VU@VŲ@V`V=@UKSUCjU8U'@U/@TBV@cfamullaconrad@suse.comcfamullaconrad@suse.comcfamullaconrad@suse.comcfamullaconrad@suse.comcfamullaconrad@suse.comcfamullaconrad@suse.comcfamullaconrad@suse.comcfamullaconrad@suse.comsp1ritCS@protonmail.comcfamullaconrad@suse.comsongchuan.kang@suse.comcfamullaconrad@suse.combwiedemann@suse.comcfamullaconrad@suse.comilya@ilya.pp.uatchvatal@suse.comtchvatal@suse.comilya@ilya.pp.uailya@ilya.pp.uakbabioch@suse.comro@suse.dekbabioch@suse.comkbabioch@suse.comkbabioch@suse.comro@suse.demeissner@suse.comobs@botter.ccdwaas@suse.commeissner@suse.comtchvatal@suse.comlnussel@suse.decrrodriguez@opensuse.orgcrrodriguez@opensuse.orgcrrodriguez@opensuse.orglnussel@suse.demichael@stroeder.comro@suse.dezaitor@opensuse.orgcrrodriguez@opensuse.orgstefan.bruens@rwth-aachen.destefan.bruens@rwth-aachen.destefan.bruens@rwth-aachen.de- Add CVE-2023-52160.patch - Bypassing WiFi Authentication (bsc#1219975) - Change ctrl_interface from /var/run to %_rundir (/run)- update to 2.10.0: jsc#PED-2904 * SAE changes - improved protection against side channel attacks [https://w1.fi/security/2022-1/] - added support for the hash-to-element mechanism (sae_pwe=1 or sae_pwe=2); this is currently disabled by default, but will likely get enabled by default in the future - fixed PMKSA caching with OKC - added support for SAE-PK * EAP-pwd changes - improved protection against side channel attacks [https://w1.fi/security/2022-1/] * fixed P2P provision discovery processing of a specially constructed invalid frame [https://w1.fi/security/2021-1/] * fixed P2P group information processing of a specially constructed invalid frame [https://w1.fi/security/2020-2/] * fixed PMF disconnection protection bypass in AP mode [https://w1.fi/security/2019-7/] * added support for using OpenSSL 3.0 * increased the maximum number of EAP message exchanges (mainly to support cases with very large certificates) * fixed various issues in experimental support for EAP-TEAP peer * added support for DPP release 2 (Wi-Fi Device Provisioning Protocol) * a number of MKA/MACsec fixes and extensions * added support for SAE (WPA3-Personal) AP mode configuration * added P2P support for EDMG (IEEE 802.11ay) channels * fixed EAP-FAST peer with TLS GCM/CCM ciphers * improved throughput estimation and BSS selection * dropped support for libnl 1.1 * added support for nl80211 control port for EAPOL frame TX/RX * fixed OWE key derivation with groups 20 and 21; this breaks backwards compatibility for these groups while the default group 19 remains backwards compatible * added support for Beacon protection * added support for Extended Key ID for pairwise keys * removed WEP support from the default build (CONFIG_WEP=y can be used to enable it, if really needed) * added a build option to remove TKIP support (CONFIG_NO_TKIP=y) * added support for Transition Disable mechanism to allow the AP to automatically disable transition mode to improve security * extended D-Bus interface * added support for PASN * added a file-based backend for external password storage to allow secret information to be moved away from the main configuration file without requiring external tools * added EAP-TLS peer support for TLS 1.3 (disabled by default for now) * added support for SCS, MSCS, DSCP policy * changed driver interface selection to default to automatic fallback to other compiled in options * a large number of other fixes, cleanup, and extensions - drop wpa_supplicant-p2p_iname_size.diff, CVE-2021-30004.patch, CVE-2021-27803.patch, CVE-2021-0326.patch, CVE-2019-16275.patch, CVE-2022-23303_0001.patch, CVE-2022-23303_0002.patch, CVE-2022-23303_0003.patch, CVE-2022-23303_0004.patch: upstream - drop restore-old-dbus-interface.patch, wicked has been switching to the new dbus interface in version 0.6.66 - config: * re-enable CONFIG_WEP * enable QCA vendor extensions to nl80211 * enable support for Automatic Channel Selection * enable OCV, security feature that prevents MITM multi-channel attacks * enable QCA vendor extensions to nl80211 * enable EAP-EKE * Support HT overrides * TLS v1.1 and TLS v1.2 * Fast Session Transfer (FST) * Automatic Channel Selection * Multi Band Operation * Fast Initial Link Setup * Mesh Networking (IEEE 802.11s) - Add dbus-Fix-property-DebugShowKeys-and-DebugTimestamp.patch (bsc#1201219) - Move the dbus-1 system.d file to /usr (bsc#1200342) - Added hardening to systemd service(s) (bsc#1181400). Modified: * wpa_supplicant.service - drop wpa_supplicant-getrandom.patch : glibc has been updated so the getrandom() wrapper is now there - Sync wpa_supplicant.spec with Factory- Enable WPA3-Enterprise (SuiteB-192) support.- Add CVE-2022-23303_0001.patch, CVE-2022-23303_0002.patch, CVE-2022-23303_0003.patch, CVE-2022-23303_0004.patch SAE/EAP-pwd side-channel attack update 2 (CVE-2022-23303, CVE-2022-23304, bsc#1194732, bsc#1194733)- Add CVE-2021-30004.patch -- forging attacks may occur because AlgorithmIdentifier parameters are mishandled in tls/pkcs1.c and tls/x509v3.c (bsc#1184348)- Fix systemd device ready dependencies in wpa_supplicant@.service file. (see: https://forums.opensuse.org/showthread.php/547186-wpa_supplicant-service-fails-on-boot-succeeds-on-restart?p=2982844#post2982844)- Add CVE-2021-27803.patch -- P2P provision discovery processing vulnerability (bsc#1182805)- Add CVE-2021-0326.patch -- P2P group information processing vulnerability (bsc#1181777)- Add wpa_supplicant-p2p_iname_size.diff -- Limit P2P_DEVICE name to appropriate ifname size (https://patchwork.ozlabs.org/project/hostap/patch/20200825062902.124600-1-benjamin@sipsolutions.net/)- Fix spec file for SLE12, use make %{?_smp_mflags} instead of %make_build- Enable SAE support(jsc#SLE-14992).- Add CVE-2019-16275.patch -- AP mode PMF disconnection protection bypass (bsc#1150934)- Add restore-old-dbus-interface.patch to fix wicked wlan (boo#1156920) - Restore fi.epitest.hostap.WPASupplicant.service (bsc#1167331)- With v2.9 fi.epitest.hostap.WPASupplicant.service is obsolete (bsc#1167331)- Change wpa_supplicant.service to ensure wpa_supplicant gets started before network. Fix WLAN config on boot with wicked. (boo#1166933)- Adjust the service to start after network.target wrt bsc#1165266- Update to 2.9 release: * SAE changes - disable use of groups using Brainpool curves - improved protection against side channel attacks [https://w1.fi/security/2019-6/] * EAP-pwd changes - disable use of groups using Brainpool curves - allow the set of groups to be configured (eap_pwd_groups) - improved protection against side channel attacks [https://w1.fi/security/2019-6/] * fixed FT-EAP initial mobility domain association using PMKSA caching (disabled by default for backwards compatibility; can be enabled with ft_eap_pmksa_caching=1) * fixed a regression in OpenSSL 1.1+ engine loading * added validation of RSNE in (Re)Association Response frames * fixed DPP bootstrapping URI parser of channel list * extended EAP-SIM/AKA fast re-authentication to allow use with FILS * extended ca_cert_blob to support PEM format * improved robustness of P2P Action frame scheduling * added support for EAP-SIM/AKA using anonymous@realm identity * fixed Hotspot 2.0 credential selection based on roaming consortium to ignore credentials without a specific EAP method * added experimental support for EAP-TEAP peer (RFC 7170) * added experimental support for EAP-TLS peer with TLS v1.3 * fixed a regression in WMM parameter configuration for a TDLS peer * fixed a regression in operation with drivers that offload 802.1X 4-way handshake * fixed an ECDH operation corner case with OpenSSL * SAE changes - added support for SAE Password Identifier - changed default configuration to enable only groups 19, 20, 21 (i.e., disable groups 25 and 26) and disable all unsuitable groups completely based on REVmd changes - do not regenerate PWE unnecessarily when the AP uses the anti-clogging token mechanisms - fixed some association cases where both SAE and FT-SAE were enabled on both the station and the selected AP - started to prefer FT-SAE over SAE AKM if both are enabled - started to prefer FT-SAE over FT-PSK if both are enabled - fixed FT-SAE when SAE PMKSA caching is used - reject use of unsuitable groups based on new implementation guidance in REVmd (allow only FFC groups with prime >= 3072 bits and ECC groups with prime >= 256) - minimize timing and memory use differences in PWE derivation [https://w1.fi/security/2019-1/] (CVE-2019-9494, bsc#1131868) * EAP-pwd changes - minimize timing and memory use differences in PWE derivation [https://w1.fi/security/2019-2/] (CVE-2019-9495, bsc#1131870) - verify server scalar/element [https://w1.fi/security/2019-4/] (CVE-2019-9497, CVE-2019-9498, CVE-2019-9499, bsc#1131874, bsc#1131872, bsc#1131871, bsc#1131644) - fix message reassembly issue with unexpected fragment [https://w1.fi/security/2019-5/] (CVE-2019-11555, bsc#1133640) - enforce rand,mask generation rules more strictly - fix a memory leak in PWE derivation - disallow ECC groups with a prime under 256 bits (groups 25, 26, and 27) - SAE/EAP-pwd side-channel attack update [https://w1.fi/security/2019-6/] (CVE-2019-13377, bsc#1144443) * fixed CONFIG_IEEE80211R=y (FT) build without CONFIG_FILS=y * Hotspot 2.0 changes - do not indicate release number that is higher than the one AP supports - added support for release number 3 - enable PMF automatically for network profiles created from credentials * fixed OWE network profile saving * fixed DPP network profile saving * added support for RSN operating channel validation (CONFIG_OCV=y and network profile parameter ocv=1) * added Multi-AP backhaul STA support * fixed build with LibreSSL * number of MKA/MACsec fixes and extensions * extended domain_match and domain_suffix_match to allow list of values * fixed dNSName matching in domain_match and domain_suffix_match when using wolfSSL * started to prefer FT-EAP-SHA384 over WPA-EAP-SUITE-B-192 AKM if both are enabled * extended nl80211 Connect and external authentication to support SAE, FT-SAE, FT-EAP-SHA384 * fixed KEK2 derivation for FILS+FT * extended client_cert file to allow loading of a chain of PEM encoded certificates * extended beacon reporting functionality * extended D-Bus interface with number of new properties * fixed a regression in FT-over-DS with mac80211-based drivers * OpenSSL: allow systemwide policies to be overridden * extended driver flags indication for separate 802.1X and PSK 4-way handshake offload capability * added support for random P2P Device/Interface Address use * extended PEAP to derive EMSK to enable use with ERP/FILS * extended WPS to allow SAE configuration to be added automatically for PSK (wps_cred_add_sae=1) * removed support for the old D-Bus interface (CONFIG_CTRL_IFACE_DBUS) * extended domain_match and domain_suffix_match to allow list of values * added a RSN workaround for misbehaving PMF APs that advertise IGTK/BIP KeyID using incorrect byte order * fixed PTK rekeying with FILS and FT * fixed WPA packet number reuse with replayed messages and key reinstallation [https://w1.fi/security/2017-1/] (CVE-2017-13077, CVE-2017-13078, CVE-2017-13079, CVE-2017-13080, CVE-2017-13081, CVE-2017-13082, CVE-2017-13086, CVE-2017-13087, CVE-2017-13088) * fixed unauthenticated EAPOL-Key decryption in wpa_supplicant [https://w1.fi/security/2018-1/] (CVE-2018-14526) * added support for FILS (IEEE 802.11ai) shared key authentication * added support for OWE (Opportunistic Wireless Encryption, RFC 8110; and transition mode defined by WFA) * added support for DPP (Wi-Fi Device Provisioning Protocol) * added support for RSA 3k key case with Suite B 192-bit level * fixed Suite B PMKSA caching not to update PMKID during each 4-way handshake * fixed EAP-pwd pre-processing with PasswordHashHash * added EAP-pwd client support for salted passwords * fixed a regression in TDLS prohibited bit validation * started to use estimated throughput to avoid undesired signal strength based roaming decision * MACsec/MKA: - new macsec_linux driver interface support for the Linux kernel macsec module - number of fixes and extensions * added support for external persistent storage of PMKSA cache (PMKSA_GET/PMKSA_ADD control interface commands; and MESH_PMKSA_GET/MESH_PMKSA_SET for the mesh case) * fixed mesh channel configuration pri/sec switch case * added support for beacon report * large number of other fixes, cleanup, and extensions * added support for randomizing local address for GAS queries (gas_rand_mac_addr parameter) * fixed EAP-SIM/AKA/AKA' ext auth cases within TLS tunnel * added option for using random WPS UUID (auto_uuid=1) * added SHA256-hash support for OCSP certificate matching * fixed EAP-AKA' to add AT_KDF into Synchronization-Failure * fixed a regression in RSN pre-authentication candidate selection * added option to configure allowed group management cipher suites (group_mgmt network profile parameter) * removed all PeerKey functionality * fixed nl80211 AP and mesh mode configuration regression with Linux 4.15 and newer * added ap_isolate configuration option for AP mode * added support for nl80211 to offload 4-way handshake into the driver * added support for using wolfSSL cryptographic library * SAE - added support for configuring SAE password separately of the WPA2 PSK/passphrase - fixed PTK and EAPOL-Key integrity and key-wrap algorithm selection for SAE; note: this is not backwards compatible, i.e., both the AP and station side implementations will need to be update at the same time to maintain interoperability - added support for Password Identifier - fixed FT-SAE PMKID matching * Hotspot 2.0 - added support for fetching of Operator Icon Metadata ANQP-element - added support for Roaming Consortium Selection element - added support for Terms and Conditions - added support for OSEN connection in a shared RSN BSS - added support for fetching Venue URL information * added support for using OpenSSL 1.1.1 * FT - disabled PMKSA caching with FT since it is not fully functional - added support for SHA384 based AKM - added support for BIP ciphers BIP-CMAC-256, BIP-GMAC-128, BIP-GMAC-256 in addition to previously supported BIP-CMAC-128 - fixed additional IE inclusion in Reassociation Request frame when using FT protocol - Drop merged patches: * rebased-v2.6-0001-hostapd-Avoid-key-reinstallation-in-FT-handshake.patch * rebased-v2.6-0002-Prevent-reinstallation-of-an-already-in-use-group-ke.patch * rebased-v2.6-0003-Extend-protection-of-GTK-IGTK-reinstallation-of-WNM-.patch * rebased-v2.6-0004-Prevent-installation-of-an-all-zero-TK.patch * rebased-v2.6-0005-Fix-PTK-rekeying-to-generate-a-new-ANonce.patch * rebased-v2.6-0006-TDLS-Reject-TPK-TK-reconfiguration.patch * rebased-v2.6-0007-WNM-Ignore-WNM-Sleep-Mode-Response-without-pending-r.patch * rebased-v2.6-0008-FT-Do-not-allow-multiple-Reassociation-Response-fram.patch * rebased-v2.6-0009-WPA-Ignore-unauthenticated-encrypted-EAPOL-Key-data.patch * wpa_supplicant-bnc-1099835-fix-private-key-password.patch * wpa_supplicant-bnc-1099835-clear-default_passwd_cb.patch * wpa_supplicant-log-file-permission.patch * wpa_supplicant-log-file-cloexec.patch * wpa_supplicant-git-fa67debf4c6ddbc881a212b175faa6d5d0d90c8c.patch * wpa_supplicant-git-f5b74b966c942feb95a8ddbb7d130540b15b796d.patch - Rebase patches: * wpa_supplicant-getrandom.patch- Refresh spec-file via spec-cleaner and manual optimizations. * Change URL and Source0 to actual project homepage. * Remove macro %{?systemd_requires} and rm (not needed). * Add %autopatch macro. * Add %make_build macro. - Chenged patch wpa_supplicant-flush-debug-output.patch (to -p1). - Changed service-files for start after network (systemd-networkd).- Refresh spec-file: add %license tag.- Renamed patches: - wpa-supplicant-log-file-permission.patch -> wpa_supplicant-log-file-permission.patch - wpa-supplicant-log-file-cloexec.patch -> wpa_supplicant-log-file-cloexec.patch - wpa_supplicant-log-file-permission.patch: Using O_WRONLY flag - Enabled timestamps in log files (bsc#1080798)- compile eapol_test binary to allow testing via radius proxy and server (note: this does not match CONFIG_EAPOL_TEST which sets -Werror and activates an assert call inside the code of wpa_supplicant) (bsc#1111873), (fate#326725) - add patch to fix wrong operator precedence in ieee802_11.c wpa_supplicant-git-fa67debf4c6ddbc881a212b175faa6d5d0d90c8c.patch - add patch to avoid redefinition of __bitwise macro wpa_supplicant-git-f5b74b966c942feb95a8ddbb7d130540b15b796d.patch- Added wpa-supplicant-log-file-permission.patch: Fixes the default file permissions of the debug log file to more sane values, i.e. it is no longer world-readable (bsc#1098854). - Added wpa-supplicant-log-file-cloexec.patch: Open the debug log file with O_CLOEXEC, which will prevent file descriptor leaking to child processes (bsc#1098854).- Added rebased-v2.6-0009-WPA-Ignore-unauthenticated-encrypted-EAPOL-Key-data.patch: Ignore unauthenticated encrypted EAPOL-Key data (CVE-2018-14526, bsc#1104205).- Enabled PWD as EAP method. This allows for password-based authentication, which is easier to setup than most of the other methods, and is used by the Eduroam network (bsc#1109209).- add two patches from upstream to fix reading private key passwords from the configuration file (bsc#1099835) - add patch for git 89971d8b1e328a2f79699c953625d1671fd40384 wpa_supplicant-bnc-1099835-clear-default_passwd_cb.patch - add patch for git f665c93e1d28fbab3d9127a8c3985cc32940824f wpa_supplicant-bnc-1099835-fix-private-key-password.patch- Fix KRACK attacks (bsc#1056061, CVE-2017-13078, CVE-2017-13079, CVE-2017-13080, CVE-2017-13081, CVE-2017-13087, CVE-2017-13088): - rebased-v2.6-0001-hostapd-Avoid-key-reinstallation-in-FT-handshake.patch - rebased-v2.6-0002-Prevent-reinstallation-of-an-already-in-use-group-ke.patch - rebased-v2.6-0003-Extend-protection-of-GTK-IGTK-reinstallation-of-WNM-.patch - rebased-v2.6-0004-Prevent-installation-of-an-all-zero-TK.patch - rebased-v2.6-0005-Fix-PTK-rekeying-to-generate-a-new-ANonce.patch - rebased-v2.6-0006-TDLS-Reject-TPK-TK-reconfiguration.patch - rebased-v2.6-0007-WNM-Ignore-WNM-Sleep-Mode-Response-without-pending-r.patch - rebased-v2.6-0008-FT-Do-not-allow-multiple-Reassociation-Response-fram.patch- fix wpa_supplicant-sigusr1-changes-debuglevel.patch to match eloop_signal_handler type (needed to build eapol_test via config)- Added .service files that accept interfaces as %i arguments so it's possible to call the daemon with: "systemctl start wpa_supplicant@$INTERFACE_NAME.service" (like openvpn for example)- updated to 2.6 / 2016-10-02 * fixed WNM Sleep Mode processing when PMF is not enabled [http://w1.fi/security/2015-6/] (CVE-2015-5310 bsc#952254) * fixed EAP-pwd last fragment validation [http://w1.fi/security/2015-7/] (CVE-2015-5315 bsc#953115) * fixed EAP-pwd unexpected Confirm message processing [http://w1.fi/security/2015-8/] (CVE-2015-5316 bsc#953115) * fixed WPS configuration update vulnerability with malformed passphrase [http://w1.fi/security/2016-1/] (CVE-2016-4476 bsc#978172) * fixed configuration update vulnerability with malformed parameters set over the local control interface [http://w1.fi/security/2016-1/] (CVE-2016-4477 bsc#978175) * fixed TK configuration to the driver in EAPOL-Key 3/4 retry case * extended channel switch support for P2P GO * started to throttle control interface event message bursts to avoid issues with monitor sockets running out of buffer space * mesh mode fixes/improvements - generate proper AID for peer - enable WMM by default - add VHT support - fix PMKID derivation - improve robustness on various exchanges - fix peer link counting in reconnect case - improve mesh joining behavior - allow DTIM period to be configured - allow HT to be disabled (disable_ht=1) - add MESH_PEER_ADD and MESH_PEER_REMOVE commands - add support for PMKSA caching - add minimal support for SAE group negotiation - allow pairwise/group cipher to be configured in the network profile - use ieee80211w profile parameter to enable/disable PMF and derive a separate TX IGTK if PMF is enabled instead of using MGTK incorrectly - fix AEK and MTK derivation - remove GTKdata and IGTKdata from Mesh Peering Confirm/Close - note: these changes are not fully backwards compatible for secure (RSN) mesh network * fixed PMKID derivation with SAE * added support for requesting and fetching arbitrary ANQP-elements without internal support in wpa_supplicant for the specific element (anqp[265]= in "BSS " command output) * P2P - filter control characters in group client device names to be consistent with other P2P peer cases - support VHT 80+80 MHz and 160 MHz - indicate group completion in P2P Client role after data association instead of already after the WPS provisioning step - improve group-join operation to use SSID, if known, to filter BSS entries - added optional ssid= argument to P2P_CONNECT for join case - added P2P_GROUP_MEMBER command to fetch client interface address * P2PS - fix follow-on PD Response behavior - fix PD Response generation for unknown peer - fix persistent group reporting - add channel policy to PD Request - add group SSID to the P2PS-PROV-DONE event - allow "P2P_CONNECT p2ps" to be used without specifying the default PIN * BoringSSL - support for OCSP stapling - support building of h20-osu-client * D-Bus - add ExpectDisconnect() - add global config parameters as properties - add SaveConfig() - add VendorElemAdd(), VendorElemGet(), VendorElemRem() * fixed Suite B 192-bit AKM to use proper PMK length (note: this makes old releases incompatible with the fixed behavior) * improved PMF behavior for cases where the AP and STA has different configuration by not trying to connect in some corner cases where the connection cannot succeed * added option to reopen debug log (e.g., to rotate the file) upon receipt of SIGHUP signal * EAP-pwd: added support for Brainpool Elliptic Curves (with OpenSSL 1.0.2 and newer) * fixed EAPOL reauthentication after FT protocol run * fixed FTIE generation for 4-way handshake after FT protocol run * extended INTERFACE_ADD command to allow certain type (sta/ap) interface to be created * fixed and improved various FST operations * added 80+80 MHz and 160 MHz VHT support for IBSS/mesh * fixed SIGNAL_POLL in IBSS and mesh cases * added an option to abort an ongoing scan (used to speed up connection and can also be done with the new ABORT_SCAN command) * TLS client - do not verify CA certificates when ca_cert is not specified - support validating server certificate hash - support SHA384 and SHA512 hashes - add signature_algorithms extension into ClientHello - support TLS v1.2 signature algorithm with SHA384 and SHA512 - support server certificate probing - allow specific TLS versions to be disabled with phase2 parameter - support extKeyUsage - support PKCS #5 v2.0 PBES2 - support PKCS #5 with PKCS #12 style key decryption - minimal support for PKCS #12 - support OCSP stapling (including ocsp_multi) * OpenSSL - support OpenSSL 1.1 API changes - drop support for OpenSSL 0.9.8 - drop support for OpenSSL 1.0.0 * added support for multiple schedule scan plans (sched_scan_plans) * added support for external server certificate chain validation (tls_ext_cert_check=1 in the network profile phase1 parameter) * made phase2 parser more strict about correct use of auth= and autheap= values * improved GAS offchannel operations with comeback request * added SIGNAL_MONITOR command to request signal strength monitoring events * added command for retrieving HS 2.0 icons with in-memory storage (REQ_HS20_ICON, GET_HS20_ICON, DEL_HS20_ICON commands and RX-HS20-ICON event) * enabled ACS support for AP mode operations with wpa_supplicant * EAP-PEAP: fixed interoperability issue with Windows 2012r2 server ("Invalid Compound_MAC in cryptobinding TLV") * EAP-TTLS: fixed success after fragmented final Phase 2 message * VHT: added interoperability workaround for 80+80 and 160 MHz channels * WNM: workaround for broken AP operating class behavior * added kqueue(2) support for eloop (CONFIG_ELOOP_KQUEUE) * nl80211: - add support for full station state operations - do not add NL80211_ATTR_SMPS_MODE attribute if HT is disabled - add NL80211_ATTR_PREV_BSSID with Connect command - fix IEEE 802.1X/WEP EAP reauthentication and rekeying to use unencrypted EAPOL frames * added initial MBO support; number of extensions to WNM BSS Transition Management * added support for PBSS/PCP and P2P on 60 GHz * Interworking: add credential realm to EAP-TLS identity * fixed EAPOL-Key Request Secure bit to be 1 if PTK is set * HS 2.0: add support for configuring frame filters * added POLL_STA command to check connectivity in AP mode * added initial functionality for location related operations * started to ignore pmf=1/2 parameter for non-RSN networks * added wps_disabled=1 network profile parameter to allow AP mode to be started without enabling WPS * wpa_cli: added action script support for AP-ENABLED and AP-DISABLED events * improved Public Action frame addressing - add gas_address3 configuration parameter to control Address 3 behavior * number of small fixes - wpa_supplicant-dump-certificate-as-PEM-in-debug-mode.diff: dump x509 certificates from remote radius server in debug mode in WPA-EAP.- Remove support for <12.3 as we are unresolvable there anyway - Use qt5 on 13.2 if someone pulls this package in - Convert to pkgconfig dependencies over the devel pkgs - Use the %qmake5 macro to build the qt5 gui- add After=dbus.service to prevent too early shutdown (bnc#963652)- Revert CONFIG_ELOOP_EPOLL=y, it is broken in combination with CONFIG_DBUS=yes.- spec: Compile the GUI against QT5 in 13.2 and later.- Previous update did not include version 2.5 tarball or changed the version number in spec, only the changelog and removed patches. - config: set CONFIG_NO_RANDOM_POOL=y, we have a reliable· random number generator by using /dev/urandom, no need to keep an internal random number pool which draws entropy from /dev/random. - config: prefer using epoll(7) instead of select(2) by setting CONFIG_ELOOP_EPOLL=y - wpa_supplicant-getrandom.patch: Prefer to use the getrandom(2) system call to collect entropy. if it is not present disable buffering when reading /dev/urandom, otherwise each os_get_random() call will request BUFSIZ of entropy instead of the few needed bytes.- add aliases for both provided dbus names to avoid systemd stopping the service when switching runlevels (boo#966535)- removed obsolete security patches: * 0001-P2P-Validate-SSID-element-length-before-copying-it-C.patch * 0001-WPS-Fix-HTTP-chunked-transfer-encoding-parser.patch * 0001-AP-WMM-Fix-integer-underflow-in-WMM-Action-frame-par.patch * 0001-EAP-pwd-peer-Fix-payload-length-validation-for-Commi.patch * wpa_s-D-Bus-Fix-operations-when-P2P-management-interface-is-used.patch * 0002-EAP-pwd-server-Fix-payload-length-validation-for-Com.patch * 0003-EAP-pwd-peer-Fix-Total-Length-parsing-for-fragment-r.patch * 0004-EAP-pwd-server-Fix-Total-Length-parsing-for-fragment.patch * 0005-EAP-pwd-peer-Fix-asymmetric-fragmentation-behavior.patch - Update to upstream release 2.5 * fixed P2P validation of SSID element length before copying it [http://w1.fi/security/2015-1/] (CVE-2015-1863) * fixed WPS UPnP vulnerability with HTTP chunked transfer encoding [http://w1.fi/security/2015-2/] (CVE-2015-4141) * fixed WMM Action frame parser (AP mode) [http://w1.fi/security/2015-3/] (CVE-2015-4142) * fixed EAP-pwd peer missing payload length validation [http://w1.fi/security/2015-4/] (CVE-2015-4143, CVE-2015-4144, CVE-2015-4145, CVE-2015-4146) * fixed validation of WPS and P2P NFC NDEF record payload length [http://w1.fi/security/2015-5/] (CVE-2015-8041) * nl80211: - added VHT configuration for IBSS - fixed vendor command handling to check OUI properly - allow driver-based roaming to change ESS * added AVG_BEACON_RSSI to SIGNAL_POLL output * wpa_cli: added tab completion for number of commands * removed unmaintained and not yet completed SChannel/CryptoAPI support * modified Extended Capabilities element use in Probe Request frames to include all cases if any of the values are non-zero * added support for dynamically creating/removing a virtual interface with interface_add/interface_remove * added support for hashed password (NtHash) in EAP-pwd peer * added support for memory-only PSK/passphrase (mem_only_psk=1 and CTRL-REQ/RSP-PSK_PASSPHRASE) * P2P - optimize scan frequencies list when re-joining a persistent group - fixed number of sequences with nl80211 P2P Device interface - added operating class 125 for P2P use cases (this allows 5 GHz channels 161 and 169 to be used if they are enabled in the current regulatory domain) - number of fixes to P2PS functionality - do not allow 40 MHz co-ex PRI/SEC switch to force MCC - extended support for preferred channel listing * D-Bus: - fixed WPS property of fi.w1.wpa_supplicant1.BSS interface - fixed PresenceRequest to use group interface - added new signals: FindStopped, WPS pbc-overlap, GroupFormationFailure, WPS timeout, InvitationReceived - added new methods: WPS Cancel, P2P Cancel, Reconnect, RemoveClient - added manufacturer info * added EAP-EKE peer support for deriving Session-Id * added wps_priority configuration parameter to set the default priority for all network profiles added by WPS * added support to request a scan with specific SSIDs with the SCAN command (optional "ssid " arguments) * removed support for WEP40/WEP104 as a group cipher with WPA/WPA2 * fixed SAE group selection in an error case * modified SAE routines to be more robust and PWE generation to be stronger against timing attacks * added support for Brainpool Elliptic Curves with SAE * added support for CCMP-256 and GCMP-256 as group ciphers with FT * fixed BSS selection based on estimated throughput * added option to disable TLSv1.0 with OpenSSL (phase1="tls_disable_tlsv1_0=1") * added Fast Session Transfer (FST) module * fixed OpenSSL PKCS#12 extra certificate handling * fixed key derivation for Suite B 192-bit AKM (this breaks compatibility with the earlier version) * added RSN IE to Mesh Peering Open/Confirm frames * number of small fixes- added patch for bnc#930077 CVE-2015-4141 0001-AP-WMM-Fix-integer-underflow-in-WMM-Action-frame-par.patch - added patch for bnc#930078 CVE-2015-4142 0001-WPS-Fix-HTTP-chunked-transfer-encoding-parser.patch - added patches for bnc#930079 CVE-2015-4143 0001-EAP-pwd-peer-Fix-payload-length-validation-for-Commi.patch 0002-EAP-pwd-server-Fix-payload-length-validation-for-Com.patch 0003-EAP-pwd-peer-Fix-Total-Length-parsing-for-fragment-r.patch 0004-EAP-pwd-server-Fix-Total-Length-parsing-for-fragment.patch 0005-EAP-pwd-peer-Fix-asymmetric-fragmentation-behavior.patch- Add wpa_s-D-Bus-Fix-operations-when-P2P-management-interface-is-used.patch Fix Segmentation fault in wpa_supplicant. Patch taken from upstream master git (arch#44740).- 0001-P2P-Validate-SSID-element-length-before-copying-it-C.patch Fix CVE-2015-1863, memcpy overflow. - wpa_supplicant-alloc_size.patch: annotate two wrappers with attribute alloc_size, which may help warning us of bugs such as the above.- Delete wpa_priv and eapol_test man pages, these are disabled in config - Move wpa_gui man page to gui package- Update to 2.4 * allow OpenSSL cipher configuration to be set for internal EAP server (openssl_ciphers parameter) * fixed number of small issues based on hwsim test case failures and static analyzer reports * P2P: - add new=<0/1> flag to P2P-DEVICE-FOUND events - add passive channels in invitation response from P2P Client - enable nl80211 P2P_DEVICE support by default - fix regresssion in disallow_freq preventing search on social channels - fix regressions in P2P SD query processing - try to re-invite with social operating channel if no common channels in invitation - allow cross connection on parent interface (this fixes number of use cases with nl80211) - add support for P2P services (P2PS) - add p2p_go_ctwindow configuration parameter to allow GO CTWindow to be configured * increase postponing of EAPOL-Start by one second with AP/GO that supports WPS 2.0 (this makes it less likely to trigger extra roundtrip of identity frames) * add support for PMKSA caching with SAE * add support for control mesh BSS (IEEE 802.11s) operations * fixed number of issues with D-Bus P2P commands * fixed regression in ap_scan=2 special case for WPS * fixed macsec_validate configuration * add a workaround for incorrectly behaving APs that try to use EAPOL-Key descriptor version 3 when the station supports PMF even if PMF is not enabled on the AP * allow TLS v1.1 and v1.2 to be negotiated by default; previous behavior of disabling these can be configured to work around issues with broken servers with phase1="tls_disable_tlsv1_1=1 tls_disable_tlsv1_2=1" * add support for Suite B (128-bit and 192-bit level) key management and cipher suites * add WMM-AC support (WMM_AC_ADDTS/WMM_AC_DELTS) * improved BSS Transition Management processing * add support for neighbor report * add support for link measurement * fixed expiration of BSS entry with all-zeros BSSID * add optional LAST_ID=x argument to LIST_NETWORK to allow all configured networks to be listed even with huge number of network profiles * add support for EAP Re-Authentication Protocol (ERP) * fixed EAP-IKEv2 fragmentation reassembly * improved PKCS#11 configuration for OpenSSL * set stdout to be line-buffered * add TDLS channel switch configuration * add support for MAC address randomization in scans with nl80211 * enable HT for IBSS if supported by the driver * add BSSID black and white lists (bssid_blacklist, bssid_whitelist) * add support for domain_suffix_match with GnuTLS * add OCSP stapling client support with GnuTLS * include peer certificate in EAP events even without a separate probe operation; old behavior can be restored with cert_in_cb=0 * add peer ceritficate alt subject name to EAP events (CTRL-EVENT-EAP-PEER-ALT) * add domain_match network profile parameter (similar to domain_suffix_match, but full match is required) * enable AP/GO mode HT Tx STBC automatically based on driver support * add ANQP-QUERY-DONE event to provide information on ANQP parsing status * allow passive scanning to be forced with passive_scan=1 * add a workaround for Linux packet socket behavior when interface is in bridge * increase 5 GHz band preference in BSS selection (estimate SNR, if info not available from driver; estimate maximum throughput based on common HT/VHT/specific TX rate support) * add INTERWORKING_ADD_NETWORK ctrl_iface command; this can be used to implement Interworking network selection behavior in upper layers software components * add optional reassoc_same_bss_optim=1 (disabled by default) optimization to avoid unnecessary Authentication frame exchange * extend TDLS frame padding workaround to cover all packets * allow wpa_supplicant to recover nl80211 functionality if the cfg80211 module gets removed and reloaded without restarting wpa_supplicant * allow hostapd DFS implementation to be used in wpa_supplicant AP mode- Update to 2.3 * fixed number of minor issues identified in static analyzer warnings * fixed wfd_dev_info to be more careful and not read beyond the buffer when parsing invalid information for P2P-DEVICE-FOUND * extended P2P and GAS query operations to support drivers that have maximum remain-on-channel time below 1000 ms (500 ms is the current minimum supported value) * added p2p_search_delay parameter to make the default p2p_find delay configurable * improved P2P operating channel selection for various multi-channel concurrency cases * fixed some TDLS failure cases to clean up driver state * fixed dynamic interface addition cases with nl80211 to avoid adding ifindex values to incorrect interface to skip foreign interface events properly * added TDLS workaround for some APs that may add extra data to the end of a short frame * fixed EAP-AKA' message parser with multiple AT_KDF attributes * added configuration option (p2p_passphrase_len) to allow longer passphrases to be generated for P2P groups * fixed IBSS channel configuration in some corner cases * improved HT/VHT/QoS parameter setup for TDLS * modified D-Bus interface for P2P peers/groups * started to use constant time comparison for various password and hash values to reduce possibility of any externally measurable timing differences * extended explicit clearing of freed memory and expired keys to avoid keeping private data in memory longer than necessary * added optional scan_id parameter to the SCAN command to allow manual scan requests for active scans for specific configured SSIDs * fixed CTRL-EVENT-REGDOM-CHANGE event init parameter value * added option to set Hotspot 2.0 Rel 2 update_identifier in network configuration to support external configuration * modified Android PNO functionality to send Probe Request frames only for hidden SSIDs (based on scan_ssid=1) * added generic mechanism for adding vendor elements into frames at runtime (VENDOR_ELEM_ADD, VENDOR_ELEM_GET, VENDOR_ELEM_REMOVE) * added fields to show unrecognized vendor elements in P2P_PEER * removed EAP-TTLS/MSCHAPv2 interoperability workaround so that MS-CHAP2-Success is required to be present regardless of eap_workaround configuration * modified EAP fast session resumption to allow results to be used only with the same network block that generated them * extended freq_list configuration to apply for sched_scan as well as normal scan * modified WPS to merge mixed-WPA/WPA2 credentials from a single session * fixed nl80211/RTM_DELLINK processing when a P2P GO interface is removed from a bridge * fixed number of small P2P issues to make negotiations more robust in corner cases * added experimental support for using temporary, random local MAC address (mac_addr and preassoc_mac_addr parameters); this is disabled by default (i.e., previous behavior of using permanent address is maintained if configuration is not changed) * added D-Bus interface for setting/clearing WFD IEs * fixed TDLS AID configuration for VHT * modified -m configuration file to be used only for the P2P non-netdev management device and do not load this for the default station interface or load the station interface configuration for the P2P management interface * fixed external MAC address changes while wpa_supplicant is running * started to enable HT (if supported by the driver) for IBSS * fixed wpa_cli action script execution to use more robust mechanism (CVE-2014-3686)/bin/sh/bin/sh/bin/sh/bin/shs390zl31 1708962535  !"#$%&'()*+,-./0123456789:;>?2.10-150500.3.3.12.10-150500.3.3.12.10-150500.3.3.1 wpa_supplicantwpa_supplicantwpa_supplicant.confwpa_supplicantdbus-fi.epitest.hostap.WPASupplicant.servicedbus-fi.w1.wpa_supplicant1.servicewpa_supplicant.servicewpa_supplicant@.serviceeapol_testrcwpa_supplicantwpa_cliwpa_passphrasewpa_supplicantsystem-servicesfi.epitest.hostap.WPASupplicant.servicefi.w1.wpa_supplicant1.servicewpa_supplicant.confwpa_supplicantChangeLogREADMEexamples60_wpa_supplicantdbus-listen-preq.pydpp-nfc.pydpp-qrcode.pyieee8021x.confopenCryptoki.confp2pp2p-action-udhcp.shp2p-action.shp2p-nfc.pyp2p_connect.pyp2p_disconnect.pyp2p_find.pyp2p_flush.pyp2p_group_add.pyp2p_invite.pyp2p_listen.pyp2p_stop_find.pyplaintext.confudhcpd-p2p.confwep.confwpa-psk-tkip.confwpa2-eap-ccmp.confwpas-dbus-new-getall.pywpas-dbus-new-signals.pywpas-dbus-new-wps.pywpas-dbus-new.pywps-ap-cliwps-nfc.pytodo.txtwpa_supplicant.confwpa_supplicantCOPYINGwpa_supplicant.conf.5.gzeapol_test.8.gzwpa_background.8.gzwpa_cli.8.gzwpa_passphrase.8.gzwpa_supplicant.8.gz/etc/logrotate.d//etc//etc/wpa_supplicant//run//usr/lib/systemd/system//usr/sbin//usr/share/dbus-1//usr/share/dbus-1/system-services//usr/share/dbus-1/system.d//usr/share/doc/packages//usr/share/doc/packages/wpa_supplicant//usr/share/doc/packages/wpa_supplicant/examples//usr/share/doc/packages/wpa_supplicant/examples/p2p//usr/share/licenses//usr/share/licenses/wpa_supplicant//usr/share/man/man5//usr/share/man/man8/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:32791/SUSE_SLE-15-SP5_Update/92c4c1ac4c1b5c1bddbd97dfd31e26c2-wpa_supplicant.SUSE_SLE-15-SP5_Updatedrpmxz5s390x-suse-linux    ASCII textdirectoryELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, BuildID[sha1]=8f6391950aabf0704c169e0a07737cab56fa4bba, for GNU/Linux 3.2.0, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, BuildID[sha1]=9d729aa9a88ff34ead3297d305b420e88afda887, for GNU/Linux 3.2.0, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, BuildID[sha1]=c0e723aa1998ce6c5e442ef57e529d92ba6bf5fd, for GNU/Linux 3.2.0, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, BuildID[sha1]=18007439a2375102934e4e941956dfecc9816770, for GNU/Linux 3.2.0, strippedexported SGML document, ASCII textPOSIX shell script, ASCII text executablePython script, ASCII text executabletroff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix)troff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix)!RRRRRRR R RR R RRRRRR RRR R RR RRRR R RRRR RRRRRRRRRRRR R RR R RRRRRRRRR RRa 0<8r%$TM:utf-81b21ba0f43f52c890bff8b5bb9fa1ef97f83826bd0bf8d7ada3844debc4238ad?7zXZ !t/ (]"k%[#rD~d p(DQ(&Kpڜ`W[y6ڮk1  36jĜ߸ mVpY$7OR OYNhC d_/҈%ԸVY?&KeD$I9ӁxN-㢪f1躆A7 85;G@ (MK_Nv sy$(SGͼ lo0>yb"8W^:cݲ VcA8m@ᢴaws|_6&e ӣ3^B2豠l)CθB-㱍1PBㅴ*.2l8%{\C.{sCb1a7 AƗGɀ$zڢYlUI)DF^Şf?I[!:ӎ澇geݝ,}قŪFGѷӧU7@n?\V}艹h'qXNAro ku5 _b(!;4udN[[}tDc O2PqG5l%\$dɶpܤbטC帳e] S/^Uo/]$ܣ+LYЦ]]rK|p1ϙNS"4(9yvW'X jC1ӴQh PH ^5c AG/KL?ݍ٭fYjh.ˆi0bdg `R]T̚a?arA74' )RqH Dq5؍ƍ=îب#NEҧYzv=@QnӜ 2J~#u>7[IvCs ^ %>ף&Wf+3QyVP1x&tH -W}vbk?+/J% ~<^mV?Útڨˠ`D XKX)mSx+ue^ȒTn؂.[ވ3tC+U -Q?&-~I iB;*r5_X-!U\6d\S2l|]t/iBp6?ϝ3rtO)<*,΀a|^䯭Ƥ G +j2GXxn%Ʒc`k>%*1hLse_|l7o}ףaqy'Cd?YVTcBR9pSca|F\V=^.Sdڳ6 ئc83o~+:BS`ctA_SPkc6bӹq77GS]835Fs(ȳ{*NDSgG[*,Quc:8~|%,{9ĈRJCn'hf|Pa7a9v륮W f<2gdߏaQ=WE^0[GTp7=78u8# @Gh s+84(u82ҨI^_xv5Dt 0"? zյ-\o˴%: p??ar8RH~Wr-M6N. 筺9Lg$=j Oe'Њj߬Η 슩 Qvғ[4rʻK-;= ₫xtyg0[IMȰUkNfMqrh΀WuqWC'$\9,@/r2G_^ȟލz/g UhN"28\y7^| ѩ9a+1jucu@(?*a* z}djlrrg7V4+Y4 L&%aOj@_Zl_rgJc\9RG RֈH5 6D"wK*AI(Vס.܈!t@OG O..x[4 !Mk?ОY \ntlya|{NimzόDM H ½; )y;…蓦fZn(f%d" \PG]5i/2A V%m89oyε S0Z3$ze,zz4qwHzzL9OcḞ%t$!Xx#z͗ Lz g7_+濧b MSSIEK٣Puj43$nwVKs<x#û ,Ca#;㻏>*WG52&-+ sHpc/MmQ^O̠ *Z.˼BMZk ne"|+yL6'pctϓb!ӆƸ; \1p7GWAI`kmp cRhY Xe*2kZcDž\%%U~L.hznX24J҈IU#Ѱ}coκs ^>H>ڏ8-F YH'?2G%,iZ՘zxA#ZBWk? Eu _]bzB)xs]=R}y>anv@&EMY(&:eJ. Jo}-u˝m=B{q{8JnS}u2r.)^P.!<0P)e+I(RulPռ4H8.0+S[̊y`+hXuVajɖC٩hX%nܿ{d82 =8! o^- HB&#c^<bLDM%d"Jdw@x5Xպm0*\J'hǹ1m'*D|e1b 5#B^|\LFpUȥ"bVip「,~MlbY!= 5Щ'eE+cb"/OtkxĄ4 ].iBBIք]0 Yq>W{5+0xC\5K Tsu`'*Ht@1Ū5.͗zRp74uԽ\ikwxGϲ}m 8:3cυNl}lRZg ȉ{FK|:2Q 49Qt=Ҽ\F$r|ɴ0fqhC{}I a]5o3\))]Sp0y4esIT﷕y_{L #0q#s~&*[-8Zp;bW,t'sv#]o7B}:,@y,y%i[n t˂rIdipM,wA&BE!Obt+Kd݈e>}rb{_H+׺ׅ[ؾ{|= s^In|Ni'ީ*9 $0Yp -EV5G.ҭ@ԩ$wbi@g}<R v=C(RƠ|@&;ѡ4/qI2GKc\qXlفHJ1?7hgY:%C12]M#vvqG zer @/)WO,#W .MOΠ-K j{-~;j dа8p{z%[`r ʜ^iÊxk :YHs`}( 2 ?1=k'?dMFQ :PKnQmfOp4c/(]$jztDe5; hG(Ўܝ Fk$D$4sp*nerUgw[>MP .=; YC D ZjWS ƕKN{Wp?*J2.Z&g Pem?e ɷpMޓF Z{UЛ<Ԕ9dn$Ե]a,p Kxi f96X ,k+A3$2g]TPpEuX`{:FQ67k|ӼH]N@lNG3קfWOK0__EF/`?W:qZK20؉e7˸^Y^$ "͎zۻD'rDFw7{_Tg,`: ,ݗSo5e\ǢQj+T[N㇬#9m&VDN1.<qP04Wy $1x`T 4\#Fbsd$T> i?.Kx%c.L3B 7ǽ\Y hn}, JqVTLdIFb1Wɀ\M0*4F'X aaF nyurEݣ $7<09:PZo6g*b(!2 ʳ-O[w#.d?ѣ^T6'I"mǂ{jQA|p59Lg,VEMl@:yv#;P4Uxt2!Si@QFH#Q2AtFNl>W9ѿKMy/hKE Df¶{?D6{>?կ"Rq8062SwM)&S)Fm6c9QغtK'9K]CHOVt! {:hh47[sa3l,(b\[B^Zڀg.*fdn7.,xEd1z"4O3ЉրSir&WPÜsnN3|\xp+;L'd `ZƻW7B^/aCS2rPk+cjԜ$,~bkDs> 2j3!&ЂUܒK|c__\⫛}i1AbN{P݂Csn/ YDX٨?4ꧡi7T#ZJϣ%! ͽ&#wmi~qX: uSp/<䵱>cx _FwE%ֻ䔤Q!aUgyG؏gNn&-G3MTE ^/" dzif*0ȩ@a;YL1OΈ!S^.jPjzh{ y@A5||$-{ϰ$TS3Z0ai YqԸ_iԾnr&ѠJu3/V^]"rr RN{3Ӽ_Np0<ŨK?'Xw24A7.zx f9{ij)w,(;FgV DmXnx0.2)ɍCB|uu[,<56*p3__9}8[ b0=YL$)n@4G)+T]pBqS1ʏ@hݳނ;{ZOjALG߲hLI Ë6JՖNQV벷E}x%}|@[ƯxzUĘdCy zu5W.P3@ʾ46@<8 + z l@qi|r@oXD]fkAcJw $24g8quVݓMhҚھp7_% 똢Q'UJ?b͋T(s[70Xߠ! \PXl]GPwS[|~={fmr*L :nC;13&/Sa4'76`8Ctf }HY|i%c!o%9sStG &evC/}#edDyo-K;_^K<ݶd]մ6|jHe>.80$]f9KTѭgX{k1Lܑ-؄7nF2zӨ\%\bcעp_%2(=Y-269NtH@ DOr|>Lw==:&5ldRl|3qulauƥ@1PIggnB[I\0B $U;q\n"xA9UڴY_Sz]&:DVTR:6h7`>wa&Kw?b|Vv,cnx T\ WӮomdk\y|q Cfߕ 5{V2TQ 1?!tEv>6t|i)èv2N@zhS%wn\ |B!0j˩F `0O8Iyanwoth8JE_/M{X=&KtE&ښkJ2Y\>e5ֶKȷR.!!as[$'-z&-I@ :KB?\[t|Orp_+.޴J(,!&P2XkIبHnp!E-Zk#TZbNM$bI/ ^Sܕc |LΗ=@"YL0uO=}B {84]߃LA(%zEW! *vg36kpCFW)4B9Gj}o% 4:H+{Bjۆ |ۓ!M/p KZ _=2P7lRX>5={lCܤMdxW[ fGrOJvhnqgE 74oG?uIIc8=%L żmq' 6FUl~N=>L&ϰk Mm#UԋhT~)aJO{\xyx{#p<)>ş`3xRuhv.w8kzNuh0 <ZGyD])7 ~AlۗI osS=8m}8~غ{d#*s~o8ye #lS I+yΰ猸-Qq 팥AL _m,8Ђ׏E,OxlMFE XH`A H3U<oI8=[{4dL& d*їG]u7+t/3vI2`GƈB%O N@Q$ݝĒ/p6;A5ZAy@i?v<ʓJ'R'?B66lјX:JMcWB$#J=WXl: 0֎|Hə&WeQp(VW{M! GDG8{)rcI^07Ppƌ͟h_=L^2PڊMLbH#Ĉ&R_zoK8YdedUy窈H^G=|3;}D4mo+kS P[~e, W4mLBYZt6MLc;UG> 6*> X/ Aq,ں@q^>1;ypi>n@0սD-vy+pFIKCS`q0 .:+ }0~aƾ;#?&ƇD+77gN)M2nQxt`[rEL'?ŏu텾ij9t,^!#+;|=]?F܋ix=\c%y)[,ͱ.fR*'~I}WiaC^N@cRJI59d3%VcL|SҥHTSypdm.*w;N._8YA!: |J/sֳ(̳Dy˷pI1?E^Aܬ>nE 4` 3KhtA%ku'&$"hD)<yC: ]&u#$[ȷӌ|N/[4WS[P@QU$ ,1bdx_|J WX^qdOtVaLP1j"~"MO~73/röy+H ih6Y')\J7JN>{L#`Ybf} *CwC1"'teOob4[*n9Ѡ>́@e`N>~ym(rǐMyF|^r];#efO!9t u>(Do1W{[q@͸@ Z||!S9T<7SSIQmPZ]g\a`Bo}p470ܖU/x/,θiI?T"flg*lY*H|h1f ߝV%,SO!O4~MƗ& w.ٛV@e[ wGY7:l3H(41B?GUu/Kם6Cwqѓ_XCe퇦L♱FXbZ| E*9&utAi~Sz$+lZdcI9V~nÎBaHb(5Zk穘j(K} *P]isP$Bʹ(cg-K]2leu^jUMK.,6NoB}$GqY.?~=gj>vտ29(DMeq𮛠og&W6F.p<.QM۸\9 ۂ]h'Ϯ`7\ -r7w1^xAjCaTx[>^"LJcDgWŒ)'Z]::%Q.|f/a_Ŀ۳J&EN!@} WRZP]M& % w50":(Xk[3|>z 6h;_1$LP\(ddb hɼL9 G%yBC$QH S҇ FוKlU`2֕G)w_YYh/]D[x/edLΞC?I8t1vBuNG n/{)z4 `4v%]5$ߣr/YR{Eٙ"зhS2-a>Rdp, $80Nc#"|À\#3oQ,vCbDU8L\Z$l>)8ܨҽzُnñMCi`!.XFt쿚$zuty$gpV;\3"“;hY( S ꄰ<񏞌\ j[Cj pGk}I*\0zv,=ϯǛ嬬IBFvtA̺o2x0ݛTKdWuN4 G3j;]d#P]c.Py[6 g@s|G艻{Hu1BȀj{)JA`N80`췠?AŠy?@a?ݍ̵h*D:6@49n#PEsФ2E8\|e'P DyE0d ,)|8\hjP%|??q)K2ۂ ]$,D;TChxI\9ӻxu8`+5 nþ٠G2Ϙ-R}ڸ,ah~:}_rzR=84 wҕ|'9Z?nLu[jZ=^aw=5]Y) +#^xW- |CK)bSw! !~!ʤ߆؄6'rVhb)ƻ:%\{ad/os ݎe25O3y2Z5UG jp}y 3ѐlC.7?yz-`+[GʒRm略s~-?4׼{;@MVƯWH@:\mecQ7q"^{R  Q| ،VYfIPgvނՀqLBAn"(&c*@ŷ}V:Gl'KH?߼E d^m)=0eP˲_IVhB`삽Y1EU%%Iٗح0Ѭ kA [YBt=d`}sٙSh*h_FΛpuIvR!\!m)|KKX6Ύw<336I Q#cb0T<+BQfŀsXr'5pC ׉#V,+CقߢgpR4 dMKufD (7bWM1zFH w_}HA ,m80ËRwzruP yV JwDSȶrw %Bɲp L=o;,nJ̻E=~{1K z-[&a/&)(Q[@{|H"oxj[\d5uTp_u"xɭDzἠ`0n9vnAXy5։/?' w] nr}:f)isoCsL:>(|"nf>ף^@/uMoMޛ%" 9l&`d%C /qߚ-oiy/Hu>V,x 7ؘyB|'%72AM۾:aBh KOٚ6Ӱ".)j/ٸO7I8`^@mZ]: Lg=LH,!VS鴛yiF+HA!С-uA>T/Zo]o}~_||L3;Cce 6GR-H-n zV'&e(T^sP46 {Nx%{"]kD/F*B6S:l?+k#*13rƭIU3v@v[pLuH*ʖUu|WOܨÚr Ea#F3wGƝP0[}y"#"YDTSuqT}9CX3+>jJ%4JI'´AiEE8@#)'*PG$MWx&|!" j6 OA5Evˮ2% ̸ ^5wȟC9h~t=3=o4鰗$.?E+ Aʺ)"OdݕRx&6t1 #tHټ- ](K%^!w<|2 'ү!k^J0Gco٧N,'Z$2`;u!8*,́_*q))s5'?lM- ׿+{DvIGKpLf `!!Sqjtz%y"씫?k P*u "r&YKrA"p%y ;Y"%$Q-=۴I]'o1zEɫ⢪`GC^XgsЄюicX$~39gMqs[pol>Ύ1:|w &|] T`-<5tQ!y?=cE@̥skN^YpR ^N"܊B\!22$RQFs9zBғu^W20u("wgP Li. H? w T{EiD)7FwYrJ+U-Lִ;2RR'9hve+Wwyؠ'HسsVvP}˵k";,SZn2p,Sqb#m{Jza ;\ .U) ,}"XRTU'o90y:RpDGhrBt{eO Zx-A{c\ KGee a g^~Fz:m'7|BgQ>Dfh1~(&-M&yKت9>]>8tSѵ7 w_gY4ލ,"{T#.-'8~u+I<~+C VVN;bi. J5l_A { ӣ %_Cޕ:Ej! PoTޮ=5o' 'sO$j5t_(y8\_p᪎>FT1WH.8Fxbz.ɝTmEI>t$o _#Kk++7Gn$"ZZx蕱xbjQ'%gh-y(+~=-XL"9]x%l=N:5流Xaw7T߷Mw7(m8 !JR!=+ ނT[k88qvUz׃vPN>՘ߩ4 FNdV]x\e"9oq/_w恛"s3S}uTϼ*XTut%#k⊡)L o*9'H l;m#<\r'*I!ի e)Ns{"`d+"G9U[0Q"91HH-X+y~M1"d.Ҁ'2r@2# BNE[@Y+?$p["LmWuB&=J%ǦL'Pk! AsnPGyt<%gye'^enEv (rys6}j౏ʹ`0((%uYn-lsIk)`TAa%bmU4WB7F(l=q-K^Ny yœء1>%2+ 9>]}|pw.t<^Uj۳oLvw88@,.hnU Y0K\&uȓBjt:tpA3S5 RޝΙ*MDH'?W[F3|cχei*sGݝ0> I:b02㇕ܦC/k{pINWһ_XnaL7M8M搁ʯq J|ds}A,"6c}5, beKkxӃ e#[}ܾ10=t†_%i^8`G3҃spTh2(.O543:{:zjs.onUG`\ܚ2a:A|@Y&~dP@i@ ~wZ`D jOalԓF$m,yÆiь1\.#gpJs٠S*/Q>̼ʁ)9 8~[[{౥בF.>QQa7:N<譐, G-W~Ws*8o^\.ʣjY></EC*)'IU_2&` w}@y{1]i.)f]5v1۬jMb5IU1v܂7 ba=[5P=};Eq':Kqn%~ntUuex^%ö슩' 2#"X,謰Cdk'rx<|slKuf͠gU^klon)PuB$(Is&f¿Ң՟6tua$!(s5>z-dm+$CJhp34Q2*ZI'Qv+3 o6?#GO\vDI{3Y>t 8=G۩Q`3ۦ)pȢ[``|Ԑ΀/`.nhKǁ)^1uI^J2AZ۶+Eؘz#,2ӆjp1OETOYނ˨=qPk>iח?ρaW|zC&򧠠n6XWh\[EM)&É.bSgNxRb6A~  @em+XSHBw޻"WH}g<],y8ђ{S[?Ē-̓|^N2On@FU. 2g@<=KwK 7&R]ɗȩ-gB]K$Җ}C:u#fEfE"lNEI@A9W3pw*<`pzTzB,);duaZSlϒSt=CQ1v|ZvFZvQ`{|~(@X9ㅇjv|lD7Am@5jhȤSq&3[˭֜5`Q,IK)h,Ut hSG{" jNVO?#4FEH6(m`ɘ0h+/Ab}w`8u5<#Z2lNuDNUXa}6oFeni{/LlAi64W3>zx`f=Ls.ˠu7rFE) Bwp43댵V$o8QdFI#.^!1fAs__[ݝTT =߿(Q@eZAb~/$ U⃷|빹z X~k-@tlf1ON0dL.w;(D;P]].%&*_﫷9 N;^KBf7B8Clu+w"tۀڀ9 hm >x*p٤Mc/hrϡ:|B;w,A + jރ0Pٿwl=BD zF[O=;GwGY%Ln jlAt4o Wk Ϲaa'}i)"{r gX>J,l_Ά_jH$ "f96828J^ 8#Sat  hs9^/zCXDZB[/*LsU&'OW9a3bUrq9;7)t{N^M5RR5+j1XH6x*gE7MWvmhK~@6ZFLM9VHF v`T-}3/4/p67n>,Wj;1?tmEe!m6W\612M;%r>q X#Jz4^7ppPWsuV{S@Ja6#oUl s7Fԏv,+BQNz]c(A .T >'(6k綯dvb=B_نHe<8]8I\:0&6 [FwAƉ<$@P3>|}݁&6b -y&5_[}_Wj9m,{d79H5- QH~b+kQ~~7`,Jl&p2FpbyUi[Paw}=J{8޵`\xSފ_YY$""߲Η;@Y#"aN1Z}8shs߰Bv4FUL7B"w+n4|?i' ZJkS!Wje.Y5 4 MTh]Ҝi7?{ʊ[!GWjµIlAc%DHgɹ,V īEiMws;lR܂yCQf&h@[h~ :uk;[Rt1w->IK]Z'&Q55bxƸmg7'$ar(½˄z̾MPrʬ.gM˟oOTxb רS/Ѹ:3'sT vOc7s GkO0AO:ƹZUOPNT~yK8Vvw:z=NƪcXa",& Ɇ(C˧vLTFyh\tڭam@_WP_s<=yH?m ^Ǔ^^ZSfPdBb[OŝXufq@`ڟJQUώ2(W0 3@(i9ax·f3V$:: R6c,5's >=r%-LSN yů %̪L2#=?vwP8caXO _).td2 My A[g*f,VuP#[MXSo`ȷNbz|p45>}?Xz-W%WIoY߅_>fwzz(6}Tvbֻ7)A,6{yw9gcuXcXJ { 6n$Xٗj5sj[-R-~{G'kG5u/A}ylKZ{xm:ʋCFhzHY:_y=ٱ6ُvdFhB\uܡkѓ}W %e ՎsF ٷ z8I ЁX]8Ľb(XFlKK=` LEb.->TL.m4gK8U[$*'wcOgҧp (7F=UR`뢞St46l<#LZk.5C69$SH2pJ Վ0v_6HdqW\u\a@j}90"~D5BK$I!u: *fwзUKfdˠ ,d.[T\]֙ߞm1I {"`vQV(ۄ񧗘>gIq6Xq֢?!A8d Z#3]3? uPQ^h[' q./P:@~"2kZt v8:$'eatU&sEZM ԞA3S)VB@8޻,SY[ث[w.o'VvʈA=vI|n\~Pv%|F|҂!QK ^>q1p~ ƹnkAwKF%9HK˄^\)؏0>A.;(0 ?ڕ,ci!Կ0Z#~9Bn1g+beT^ D3 wόxIgo]ffRμΝjDu^4d.eO}=.U,(n{j)f':!K}ƚ -z_e0#_0=wqDB/l 7k7Ǩ OHV';kJ‚?llV{m!qTogGҡ^Ķ*זE5 ,MygиF}(*B Ihqi率,npZ{Ύ`Y4|f#{]…"]*xrxֹv͊-[sLa8OG}i 3"\Pņi >"3%\*]+ ,/{8@}1-ULB/DZ?GƷ&;Mx_yrN [%^?S*\rQZ_L_bt Uؿ~9AsƏM I5Cyĕ0d2GN|4f6t.c dTi`'t/ds/$SC=R';Е;Zp6CSYZNiQVBԩN۶udI>OSM:h(udGL߲ZUȵr>U[xC O_|)sbLd颉 R&a؋lX#2ђLy>`J]ODO\kHdsaʚ/CҢҶa @Efd AoX'tnX 7jmV+GoF鱋Gε1nzа tk A],I՞2#Vݺ83o10WN=VP؂"Sɚ }jۦS4PX{4Z ۾L+gK`F֒i8i}YZ&y yϥElӴZ']j7QXfOWB;Jvs"Wv$%ga7 B}d ,+ ;)w(^Vb:!+|xh`5;J F8 : [wI)V!p3CdꗋSWv|_$1A~1!f9lN||t A\j8#2j!B dr&)HaAvT3$BV=GzE0] {ZOŎTA~[mtyid]ݐ0Fj>/鶭0!)wdI`K>tfVT|0<298^ٹDx DO|UH0:##}ѡo`"Tuqj !h焭%vUou#T| rnbCNOMb\,aRB`7z5(IީA a k/x)kvJڥoU -#v5x ZYzh5XFb֏cZt;ɑL+9 |4NُcꥭCCG<ƍB#lR  .xưj&2Z @#Tn$:RNMmy؊mr ݂f+ڏ\/N'>UC4ޥ9WʦV#cILO|+JMwЂ( c"$F[zFN&olC 4_úNna Nmfٻy .H.ʧ295c for{}Dt3 6ZqJu)-O3OXM#4Mٹj8kXި)i|Z=V|c܏籝 W9kc~Ӵ`@HuK X8^A5Y@Z(Rܺ];61{ffpP-Q LVHq?o0-5;OzX髩%He.2T":gQ`#)E!@<3W^<Wh]6yÞ Vș@-gPOiQ%Pc.6 Z[S2 Im K| !|(š!GLV5*'1T-S; ZYbw#i9KôP|æX(*[~ Un*k:-M_^)CW~;&i {{eoDkw}#(KdO-:[^3' /~S[L ϓ?buI-ѩV~Cj-z@]cD@ejN0x\El_NB Ru% -vD ɀYM4Bq2,3bilPC9&O|_~sT )$7cQbh'5BԍE%+<֧Qq쳴R{MZv-( l;+kHꮴ"l)ςʚ>Wlϊ[pt ce-)߂g4ǙenGpLS:Tnh#`Awu\nES% :?^1;׻E0)e^q7^k.牐}"LV;-؂fP/T.4 S 2<r W.VvV}Pz@Փ}/,x)O_ZMc9{e\k=#ZX{EQ0(IFn6Ei(M֍YSy)M D`ԩS4 WZbңܞ*nw}QTfj6|5 xzp;1<[-8Vp^x)H@s3!ꤣTBsU[T⤰ c˕\pJL/`7 zˑqMȵ%Wh4,a] Cin6 e90\e~Pm>~I; TS߼nYN>a#kJ 4T$s7#0=.5+ L> QB.P&-.v1 | VW!? yЩޥl[zcD蚪/Zd%MB%}~C]Eϻ$$6@<N 6&_UzExF@r)FE`\ʅשzv.&y SRI1gI`S{ "Iw,J+mLQC3gZ8vXJKx(ٱr2q֧KsQc `+%o}38a0ap" %PsZ\`+xO^uwWAUwMdk8wLf+.!͍*[;^{QKPG(fGT-n. :{ţ\=vA3".aJ8A^ċ$Cf)[/:b|$nXd ;'@bѫizaݎq}"!5,&gXIf $f9P`}',fb#,G Hϼ]}KU y1␐4znLg}'I1"Uq{2Fs4Z5po80 O~4@'9}6&wW4+7aWEعZB_!p8-]Q@xpH^uWJ8*J)䯻uMZ7Z<з  8Pm @PnYF(+ͿcAf[S`bHhOKNi.>aR.>l5rurj LJWy"tum_m\z8Y;$svѻ77<&ej'=Y%s?a?Bsq^oRO әרeyWRwO$N{U rZvl1xnR0_J0]VkOjH7_AXiδ S>r-Jn}!ðm xLB."KI(X3ɣaHQ֩Nj#\n+HULzA*.4R O@"W=as-/ 7^CBwGu1>eKrh4~&/~k; ^PzYqF+Fʹ@1LJ\%-`+b݉F R23tYl5Zw{[YHtwZm}YXFEeMIܩ„hR,2(щkR и9 !fBsqz|½ 𧼺n6d*4zX2n}dqT_i2أNc,ߣOcICv ^~&Oj0棗Q ʵD=T_tOjN>%qņ׀t}g=؂n}øFҳvnbd•jD߱q;TD]vzjMu}7 [l`J3fahR}Sþѿ ƚ 6{rw3^ɄfTZE-)kɁ,,0U[+ ܁?-o2\9( }?{?xlW/;Hpp\w0V`d 4S"S19$gD1ay>hwol"I" KB[wp @fA9 k38L-_R mb4od=j/,YG& QjH@oڐzJ3vat.| l`S\Z<.I djOQ M.wn4"ӊq AH#X53fY/n==N+rLE> !.fװ3zPbXǨD 6!i7i 9\lӦOG(a] MX1nJ}!sfZgT`Ԍ <3k|@; Ǘ W%ojxIGi!s&1 ~0[g.V/LK+=i'smr 簩AEwWEvlxVr#v1 _U`D0I>q=NG*9ZLR 70.&]l=9i  fv`ŢdW:s!'OtFBPϵkT 瑝/2A_L)<@X)ghA]QΑ[QeeY /dM¨r\}K%/pKo?b(!ONHA{෋ tz$ ˀVYd0Y`]h#kiRQ^j n:gT}i kS!DgmTXfcm`?'C:j+(u()faFtQd7J!*XOqoأXDdGKoI+ǀ'Xmʽ5Q߳o C N1Sʲ.O=نo"iĘk/E$K`j<J!\&+4h ͦ; '^y P .(5 9BnED~9$leĚPгE6􁅛<ؖ5] wkSqcNN _݆/{,\kϐ kFWYuqCm8;D)f+B?u+r md3fKh:'%|d PfoO}P tT*蠟sUAĔ<RQKqȹ}8f /3"8)c3{[QS W+LGn .pjMnGn!_\ ݹr&lьb;_0N^NEV F¹&.ᕱ94 aEϡgE6HRsUiJqo8BW<\\KqxΔS5IM=0Ze}HT$a[rȽ^h:GVHyw20³.nF~;yWoA[=+ncQx hNdVs/g_wF67ϓ//*k\0nōUrNڵ ?*dǻf $+3Ų:AFWd`?ehjtDt7g{jGSG"JcYڞzMhB@zr~?ǘPix,9AAa7H--c(0Rhjgv(\#f rh`?xBx`Ҷ.;ˬj)oKEFj@az_[-Mvu¼EPb"}fq)4ncGv^k+}lDP_]+{eaX&1ZU`QϞo%xrYb&BtBp6MHqϷ^.lq,JFA 5Ltnn3?mGF=A~h@ .Czh`N;j, r )UwBltnqiR/!JM o8m+\ /r^ ""u|ʊWA= ė)xWo}ɳYi&:;uSRQMpA~ʢ+b+dۇ*KɲU_ƈ!Ȗ®hƘ eΑϔ2B$I5w y$2&&+vӊ4I&hsf*^ t%(2:6AW/vagUEە!je*~\cD7=.T$~jK(qV/_9Zz vIneԎ7ɿNep汑t6"Qɠ[J.d:we 6 )@/Wz@~xC5зr5<r[df@"rLoy1~ c֩Jg-eX:/xZd@VmMITx̽BuG:\A~ʌkao GM/.2iz|~9Tϝ>wl.?՗?s 6*AM'uÑ@э$ D;JpWUXRy$ߴ Sl̂,f[ qu1XbBwgfko/ESǂ]5.mӏ~'={q0&wWB |8eN벌7hTcG(X%3Fc1) ƬQb0 @mjٓF|>|ۜi8/Jᑂ5K͵WGIRBJ/fǕ1."H}Y^gc@ebfZa}Y(JXz#͌wYJXcq__q"$ kvXtNwxZUͪ[Io2ceȌVd@s?56ȳl`p#lgz4DHe#}da * A$p z>] 1WKqGs_TL leG40+pRv$07n唴GU} JR8-abα.{$Z4{Q3e\6.^TV+dޭ`F:T,G怰;pF-<\_nzpg~,%Y %Zʩ;ޗ%19&^M^;qvTvְLBtfMc`@$Yv g\)ZtQ{ !rrl..Cbp_E]+Bnxv3փt旃uYyПo>!,hHK6″ A.^,dE&7f(M!A=dy%X?s j3? ]ɖ`d"™0҃4V6Gw z{ue" `bXDW&2TĂ+s,5Gsy&~b@t8#^'j??l $}k\C .ꎸhEoõMýQ ^ .?G =գ\/d f_", \ː( HSDn]eۤgd+|wNJR5Z:\cyZOɦ8NLa0@Xw0a]\ZoEj QdT'jޭZ-b|thg-&X0s+_)7=$ ymWY^h*_"9GvWܶ8pNVԪh& cCvmDcP%م<Ƹp9ˌ`*Ipuq%(o>eHqZ߀Y&:Ni}JH-../Tm Kz VAӐ@wS5/;q|( EL>ahڢ ,1YPxhl*N!]dHPƱˡUhg/os@Ґ҉g Uѝkǀ÷vEt{g)DRK$cqg3,~EƖr:R958_9cؔ!K>h5T3@C 4zrLL;c@B 'ޏG߅Dg4 !z|Ǭ˶ŸrWT  7&,pѹoՊml $C׈ gCb.w0fe cQX8(IֿgGjH8!4h*πb*9Zg@/I/ kƏO#yt=̊_tIV?ro..vJb2F)cb ,䲘ַʞ sh1Sr7/`eTKUۏ+z~/F$B=Jy4Cȅ}@$) tOrfLx" Ļ_\h|w۲aY7߈&#Tu1t]!s!!7 ,jwl?tԳ逋}M4)rD~𘪅نg0=P0}SND,Vl?D3|)X۪%l(PQrCWmF? vTj[p??s dw](W Lu5=Dlkzq5BvRng3)ukhQ=~*6|>x.Cn?ߛB2#߫Vgai}glo*| йKMGqeQ#>TR_N]5ia.g"Ȋ:ARJǹhDLkG6)D }a)EI~Xk5FZބyh:+Ȋ>X>ܷ]&#A|/E1aC*:ysWAG֞Y.mL˞=*>ysKU!> (j)A= J#LCBLިx O '.|xWvn`L,Ow;@ܮ&f ,Ơk!Jݦw*: uP_ƬEP iC@ +IeNAڛ&>LZgF.YH`'!2^C,(f_2V|1ϒK"ۍMnbCV,5n@k㯮z&ϜI[RYnns; 4?^4TcO#VM=+u1ps/i|JP7;kf }/摝7B!>\ۍ^Ӌ˱FU'iۮTڦt =7L" C-(W>'w\GԜ-$o}rv}N!ыZcK*nFCӡ/W#ˊaTFI'ܹb#XӫÎXMYP&(L.rd;?#+EH6<0'zh\5dӝc"TcUB39\E v+hpOCkZ@ۄ k|U"2sIv~I '~b[sIvSAé=_ wM"!jqx3R>$^T4q)-?_{H#;:'#6,6l>>x JtyE#Z[ 3@$v.G0s c9RU)f7^0I=]u\Ψ;-͸yZzGhA3*i}9{@Yi?Q9sVɑ*Np.J8936fZzIW#& `,)XBBk#%K%*8 啉/fι-N0AJ)`;{+JeTF JO)MRjQD nX)O>|8$(U;`t{BFG`޼My|alҗHavkJs;3gOzk0J~9O8 k?Lr_'¬z)P49lTS K-C"nz9r*i(2< _@sϔ]Lјtb.fG *ojbhK5ov6/֘Tk0; q1(/z0ѿⅡ*#~"2!]F_`Dnl/fC1ډn`!7Z" XZ8h]$r\ -lGrٙ;抔m)gj3OS{M5W,^ZĶ6q1c{mJJMF-S.|.S.Ar+Ih*\K:'⯁ql? Ji[cJfU4lw1B@!q{k>5" },bWOȱ!5'&)t+ʛ^7A!%|;\~ʝ0o;t'tGLkkB9|M! x:V9"ԧtb@-~2#;|5K ^JfR4PE#ul:34PEATGÙ*T$nj&ւ11`mDN|[yTfM .'DRK8sVJH!jOFU\ .,AQͳżsRrwO$ZVLkw+G#=Kgc6 ~jb=ޮ]8ׂ!xwډ.UnM 83r[s HSAՎ xyA@6<ָr UAd̽.>s[{sVbRC+FoaPw >'2`{7HcM9OKSPNE#^p {`̣\#_dl,0!|f1mNH;Iً10Fqȱa|66?voMb04 uo_>_t[B{red`(CVU=5>Kb384F 4ZGNܛ]K0ſgs[0g~MޯnyCQ: uO M;3at=aJ sS4=Bsk!V U4"#CjIx** ep15dw'S!;5.vNѮ(us-!?aE(JEqDy ֖ef)+9Q?TnLIa8""NJ%~̍Q eE(NنH+}z }$L]\$N\ym䤒ǸC4`m]" AA^ay ;q7k\@8NMzAEsl0+ qQͭ%}àuD_C@Y\DX~OL *<;D,T|>T_U\50Zi HcI)͂걎.o:VgOh^,  {PEtij>/ ٓf]F1O%ӪUҰ`uX7rL+9 /Q!`^`@bӞr_K D҂fYtIMrTbCe`n<5IdX!/!z CTҲ9]Ti3\K7LqfXd d%to94|B0-}G[g%ҽd(աbatRs?4Qy K-;A|`qNUgچ_ϥ =k\ntޡ~<+7sY׋7K>N]~Z8 xngީu)Vzb(Z~¤ FFu!M4jq[Mw8 LRøuHڗ,N-gʼ?X?бRg# PXDg%V} s_W%?% _wnL(ayUF@u{e }BzRB@ɝ b0c+U L{Փl"Of,zt]I0I=?X yh&r"Zw~tF 7|TӖj0)>G/c(P`t ;A *I8#[4dpU=(׮Rhƚ`GZv'~'IDƞ[m\kM#6=Qej(1pWJs3;o*>6RfZ&*sX\402T\/7BWM<5KMv{:)W)u›O+} TױA }UqCVހVf", t'iUK>J-€8$,:rf ER6ݭhJR8+b>8\Pw"N4RPϜTq`k>XIOg.=#QoT{ۃn =a@. )ט<@Rڠ)(rT5Nxrsʂ|&o*c*cֿ:"ޝ`(HxkEҷ"` DS+EM k"x %kR,"0 Ld)VH8kmIxxc7j[kRF9S^Jŧ!Cg|e,mܒt YlQ #Y5G9isVFXry!7f{u8ʷ-A4Oa1cOIcKY4=_n *dxQv 5܈,Kiah'ƜH91ϫ %JEc@SZ;X#sfza>#gBcW$J}z]e,-Šfl!gnjHBnifjoFQ-5* 3Zuߋ^NV^Y%g>nA)RhGN]uw`8{Ep6%`UN!tȭُqi䈲ͪ(X4+mJ{ 9yI@GRMW|Qg;5պOACI̤+Kbl6ŊRrmעc*"zG!7=ӎ)a0qΞM ݧG-=Z -(v-ƢTjH*8Qb. \<98+/qٗ9u{p5RsT @)FYHYombR%!TΨͺu/4ށHCAqk!!.U7?,xpmAUIv$, $Q]A*8'vƳ\Ng`ϸcSCt8uTBSkzia,A܈R@2m@"o|j]o^ϫ*9/4W&E(~yE)*)I8n Q0g#XUZ0y\giJlj(Tǽ Ʒmlgy8MRL(1왫rG~9G ;gM=057 :;vgQ@7<[M4kFb~iMjgӵz)B< I-қ'odQk+U`M?M}OpUTaR9soYv#R&C7L\hj?mGF7HoM??(,QpD>-Q>vI4r'/u> b[?. cMᾮ7=K4PK znZ *u,ha<biG_dEM5gfZcٗͲԝ8Dbe2G)x g]cI7aSȼ5]Bm$!W FQSu}i}|zM}"ײ <6DnB`?{!z-"1{/r ~MX낧nfBj&p*;}&E2yJ m%#YV6! q8̡"-m~RaAK"vbe݄_akrkchU(Z_ ~)!w&vb 5|nl 6z4dY\N]dWp$_n]a<[cƄy;B-Py,y`<+ t9͇7-r&F߅ y3q("W[!0ƪ@փPvJ \Sw ye4*#)[VDZդ'nvːqy?ֽ~<\W."jl7u'T 5ڥݻ:؂aD@82q4BmSҨ"YAp!{qhWM%?ﮫ4G'"GŌ.ֺzlChC&AL WIX[^j:y~/[m04J2n z't!bP[-ˇv[m D )|:j%O^}}rIHȼs b>8s`SQޒ< dP" ͧ͜:]'fC]}컾%R[ŰMUo>,PDLduqI\uެWc(H"%2\E'g/}?,;_;Jƺ !Ѯ.fo Ǹ)S81c$7]?VNȱLvZK83f)KU5 d / rN>?IЬ. ; _fuL~!:Oxjc_#` VdMelrTNuw49FϡlY2N.`fFG#ޒh hs*`E2 拚ڷmٜղ"8 0LUd"][D|}cu8VHНԤRl3y.FO 1iD3qGvJ|s@!4!ka aCgZMn-=q4 ͊f1Y'w,[qqK¼̈ !+-zF?*ׅ3mɈPd@@W:K[Ff&D:+hE_C vU? 4Exy5ņjH?ᡇl#  %/ecʽrvPP OStk0BBU_ZM|etD;AΛZZqfj:ʬt̟gn7r7n9>gdzOXgQœXS(å$d76(^ymY*b|WP:%`w˿rD331^*Si(ejM3$8NIR#e7ժp S| zoyE$; ǫsS(*W /]6V7nYNceThayPS{RΒJd ^p0",b ir >ѣ͟ "V%C\,_^:T,Y1!╵xR7du9R Z{c #_'n9Y Sm(~sV k𛎗!YS9v\@SK .QPw\ Rju"]~S >+^e u+ ݨ8[oyx] Bh&?N6o?LV* L-vO7ˏÆoq7Z+p6L$m(f>q(Va.?c&4yӘ{i6?1HO{/D;e Wo-gfI7OHˇGY u03\VIƺ~VņV SeL̡ILr#ILq6,~0 ",mDc91bltCg_JƠ9+ۨDB[$<`INx574q#f83TPZ Y3 @ PSC]%6|l}DbD՜-8N^J3]bZCRVFWqN $#$P`g) G#TܮF[G@9C[[9;~l?<Zr-\0"nXKKD*?O\v(!V/0 7-wwcNLwX_C9'ܒx3 J%S$dJ }`ZwLonJ*pUH frѠaVܗK2:z(U{NEŅތ@E.YvwJoБBǩmގAߴNAPDɊpE^7+F,t*`HhObԹ]_{,mdi;koQf EL*ՠr;UuGؗMLvToj\x(dvPnqe==ъG>љ+7 zk*yu!QԈҘ|Io{ S8:Ee5C[JK k^66^-TP[0 }dŧKoPIquOf"r= Y`Y5GBd(=%_*W0,:c3=#6򙑘[3݈|*V%0=!DfG) :RH͵.$z&t'E NkߩOZD[,vϷRR!>zM:.ǠN,PkGF!][$Dg`bu ]%H 0pcWPv|uuA HR+e/ `:#l|F;˼mp),Kb{ ?0~>+a#b>d6%IMA{]"+׶l`K-ۨ]ҷGlAu.Jo2[\Z%T 䲑PٗHC5ɭ㔯kk1e-)P p7HHk`-J/K.ʻ<^Ճ.r7HU =ώl&Yܰ7%  e%M x~6fF͙Cm gX|"R=U$]# c"KJ>\TʡGrr˒]i`4z`[ > cZ/Ji3wNlO7n:r KޔEQ^ުpEn~Ugϋ*+)Zp1O_E1Q N/nw-2NW(48`4" L~c]?2W5Sbs'j s Ty-ƚUp˼^fx@P-LZ 46P Wp0;i)J ԧ3sal]w& 0 qE#:2+@UX#8gW";MT~ ' (h[lGq&™/T=i=)GQ;K=e:ȁ[,v*hx:FQ}K-6pH#1 Nb5^iZ.\a5JGfK{pnT䈭Mm]!L56E 5>q"[05&ߘeN2T89~ W 2/ֺzJd8Pib ,G) _!p:hYi2}5y]rYUMKfA(w :8kEl'(i)E36 n7UFX)ϒD$=JD^jW>k-ě5Oh~]N[t9)ܦ7!WF ]THN: (rA g[Wy*:3K#{a%@L;zX%ݐaڙB&{X| / KB\l 2NT6MN.nG`bzBL#?}tϑ$sp@IEH j^HKD9L+8>$ UdKtmal}ZԹ2 y-(8"(N*boLB?J)4cd̷*hUUԑQ=V-CGkV{p+ ;Rvk~Ջl_ 1MDcn"x# | 贑\8'Kne4!8Y8C_FY-,"-:IrpPޱ60S&D!q:~N\e};M4E.B0]W. 6<"61U`9QLҍⰘ@ƽ%cx xV‹+Hu"'d|-0\!ۆE 뽜4"7h#ܭ1 _'4I~Vn/k̽JK;{cK]Iud?x(z%$/ h^(!60KurjAZG [2V}|#Ih:R6Kt {nevbLE.lNj9m]E+}87[c.gu?1'f y:EF0#D:\:6I"iZm@W^s[ o] vĚk>kp}e`b](+m@lې^heDrNl֟~y]|B =冴!M8dft݅ kǣZO'2c/wP#4+Ǟ='Pi$Әd\7Ë %Vqś+G/[2Nh [YȽ+%-:/wAMc*-FQBT˩HƼ93wA[[R,0te#'yJe>eqx)0Ow˨,ވT}3KZjoU@>/Z=hsZKL9-PfH&~Wf}H|^>ؼ\Eqt'r#':S72>·i6;giy<!tx. {i;+ц$$r'Hhċ?j 4ue)Y_=492BN {)IlTe=6L 2>VO?zPwhndF3>ŵKx%G EؕmU[3\HjVٟ@jD\4'Nta;L+.>0$~6Fb焰Kw=a}6w]\;1 Eҏqm,@-Dݩi#$߫zaG"sP-JͬM9ptqd7?ӋN,X#y 4,ceyTg zTXQ0|9WMv'Ӑ䂔eoVr\vrSl>NN:M|42[*Zqo ;B5*{d- cX%ثz"!ikC<}X;Cҩ|iLOv@@J;m]xͷ\}Ea2*H|a"r/,E]A2iǢ'PmJH1©qt|}?9ՌK'Oe'pV.>Ndx Esh AV*y{S3$}7?Z i:8efB;Win!-O~detu]JX&O`Ԡ2o*]{.O:Su=675&?7 6 6~pwa{ < ¨~t;RXhea=Opb%R3(zK80їn1_J %(1f&yM5A\&Qu2/&eJ)AL%?D>݉2Jwçy=p[A7 YuVmiXd.޻o~C{DZ9 >%%;'vjMZ{ܐ_ un7tsNgEES@tI^ro[ B gv?k *wg}ӧ7`4Ӌ꥕)<朏ώq9lXmFQ'jrYR,Βkz~M ~+ߊGM6=*K" S ie 7^;<\X@Zv^h{ vͥ"mgyaJEm Cd hc9` _T+1C8[P<,v4 :\w.BVej!ѥ^`Pr+Q Ym2 v%Q'ÉW?6{;53]u0 ^=#.Rb?tJiԈ˨CBYF? 6rF '-oJ䳬w v?MɲܠPʡ|nS2շ m7U *z0>拵-#Ym'5^E0H7z!w2\/x#˜mzGEcֲ/j"L0\S=)s7dMOVAl74Xoi8"8/.dMڎ)34Ds,|Pq#oa`+(I2%ZG&"q`-V_q_,_pj'N #53?%ňǎ)'SQry(ϵcڗ L`7, uAVUmIN{ v$+X*hFl[zX>m6u"tQߔ6C3uίy8B2[تgrf̩@a]6+ 5]rM/n:ItO Y%g*Uߠ 5i(4:+ -3S.(1X p\{؈EyٞBmfA.S".G~`,nH1 < kRtwڡ/} i Y'ertLCÆ˅{񹊰.5B !dlID}8ԢQ H݀nꊨN @!!J 7JbÊ=ĸ^}3_ Ʀ%6$J/:0M M2{3>yscX^c*X&1YDYYfpi@_F"zZLJ|Pي^d~B`<.2j (Q]K8JÏGQ Xuskj=LU頰bG9b=bX2~ٛ!(PnEBM\#菖`PmW2X>\=oZEP+6byf?\w(KK`Je@gp0\3[/eˍ4_Κ]rGC׃Sk O{V˫~l srd!tԭ9ŤF>cZp`vOd h\"BoE|}e޿X4ody8.Fܳϡ 7dY%B`R~P"!0Ҹ?H0 OR<)pj@&oON/:Z[ˬ&Wsb5lp9axͿOt?Յ: k߀~JzE9b 7r̚c9󃡩ΜY,qן(LAefDvYx=@*Уh|2>w1bůWۭ͒3*4; %[J @(+EVB}!k(،̍O43jrF(N VҹʭAE1e-LǙo^=?fr;YI%+(uhCn c8wGE\O_< l&jORe>7W쐔1LTOl!ɯB=Ϧ>#ڕBJUfYbu cIsd6 N[ +.TƢV]TᔄUY|algt-/P#w,w2ozeٻ I.RlA<.wX=- #;҅!3?e AY2gd1m|aש-`ꗑ /E{eW N2lcB@WSBqZ*\P=hJu}ы[_]åR&b$$\I:IFr:5Wt@_'>g7w^x@ (%>OPo idl$.?Y0v9f̷IL:*O'}gXW2 *rhXQT?}:-:tk>o~N[!W }W.gDv Y&C]6M*97}3PDf[ԐkϕZuTHA3Tf]:O7M$ wcFF8cN#Ź-.{"xOp#*|}S(@zRoQ.˅e\e,Sh+lgr.kK2-L 6U?a~&;L똨L 9ٳOECHM-q`R%awql`5cEn UT)WFy~͈?VQG^FAj}oR6DW~/wC#[yW/`7Sݶ#1:X?h{w?|^.*ߓOjP;X9H{xR1xs6vV=~MO-{faE5/?[DZh1=}ߢҳi 52؟V¯t&?pǭ`#|Ǵ~#: V?8nA5l\] h h(/͒W/P>K46+.~pCl~c>/ 'Oz뀅۸[8-jkՉ~ ^a,m?׸h= 57qY5Qz#їZi!P t2P4<{rCZ>}D ]&DKbe[g);005xOSᅣ4P;ϺT2nFjz'O}'N,OsPz?0@t^ IQoC my=`Y]m/j@u_| ;[&CLmQvڵVxO.E 6wЖ+k zx6ywck?&Avvڵ#{)A]b k+]ףBr>"߹J~ᵀG__KwѮp?ʰ]D! BXФ7S]ؼng]FPp${[ܵu^z,X4RK7v/DʼioǟIJvv9G"9Z8F~.Ypm.o=W|.`@03$k.[jlI/G0z0f;?+KwhܞNcfazU\@}D0HՍ%U /9Q/sYCOωU?_Ǟbha'ol62 ,/ wCũ;*Cc_.¸{3Q}]jK̈愭RS}|τA\5-_Q~ @g[}ﺼ,7,z?}plof43: DC]yS:"=Y=m8EM{202)d4BPj'G%*wYXs!w+joiVCI\_Ze]KمB~w:)%(~4 6_ؚ˰i)ORDrIh5dh7e#GB:zɊ(^bN{/ Tͽ_0cS $M!7:u1𬔶Lӷ'Cc$I̮3:fX @*F, #CpPQãzۼwLB6-sB?c^J we9Ud90{TPaZ7tё͜üX'mtHd ДP B%(ą_ԉEL   _ ըq5oӁJ*L0E !/5Kr2y(5ĥ"ɬ$]0 1K4PX~ȊEt_ =zbREe < "Ao>&ժ"2@Ѳ8h YιvU\sa2@@DI2g3cǍYZi02.ĉǮM&/mot0n@c<`/F(7 r"R\t@,3'܄8szIAH6]*SEjFNw!ՂB.ۧ3LY2A#f$jeQYm©|o"KuL m2 x(5Ӱav o>uqph'z?%1ʓ"cr!px6o=-چ|Wu) H;=Br7 ?1йs- $#7ePޞ=zQcOa$S  ˺!Q$&6ixu`F D%"E (S;,k{"$}$]+C?D/K+%#M/JM>G )!! (}BRsiң[Ȏyf9zHCA;{c*l*qiDJeD #Df9TMj $? )oh(CyOU< ay_ѽU!! onQUxTH??vu.Ĵ%*#rۆQ iw (~ "H*3?ah*b"aQ(5~Lr2b?3FZ Հ$@}e ,}9r(K DGP]rpQH  *PRTfau `E_qS Aei !$ H*GD;/hL f(P&Ifbd@f` E P%-+CKT$LhML(<HA;XP}t<0MZ%`G/G=5xu§p@CKJB"IH*,;/YQKH\2"Bh(zI^y"OP~<2H!'"r.ޮ꼏ܘ1Q",T *vO-d@F)B!R'( ?{GއtH$z' p**Dr`Xq @DD>qd !& Qp֥)kGNcozN63'bSyo](lzbHP)W` > kݶ-QZSLv\, B(Q$ ii)B E9ё](R.~ĜRP؎l*&"@Yy#MNX~} Ktw_İ,ㆤՒBPd% Yj '63Q]%Z͑L AL#%$մS2 t>YD DaKjØ9EMj|DJ#F2 @`^0o|Bm{cHSM4һ=q,S>qC0~&t1eeJ>p٬nmYDHfNqºe zX o*Q A\:Fe3HS LO,'6c`<(%͑QH_̂dGAX6} nZ`{R_Y& aF{SpԕC$=:6NJ2ڙG4{|וǚ<2<.~0ʌ<+ v ӳ(ccpL5 HT_>!`Df #ql_0̩N?W-a`*/ 3<G.܊3ߎy?_hCGHg %@ tGj@&".NU3 8C8ccFg?XSgABA'?`@$\cm [X:ɯSUK8LN'p S 9!ӥ> .&,~v#0Xq'D07PD!C@`riF} xEZ}a;QgϞ8  H'@?> l E_,,}0n0AWk(D!d\pjCpq.QwѠcUo+ɟltŃ3’ݜHzv۫vƲ߃ x!i0(hQyt{rTNx,-N)vu=o/d^R!"ҁ"'dBBP3?qKIAM%--t4Ư2s|{PDө %-D=֯ j฻}oS2*2"zgXjS$ Z *~`(? 6"b*jU2)i0AɪR ͏?3 AAʆiIT JX!"pICHhe(+%Ҧ|sⲅʾsD SJK LPDAQE4EA~Z jP@rdXq@*!~FMjѭ f"QEA5k ͳIKʭ-Cruy?'Pm^'ft/ﺿGSC{K >9IFѽvÿg-6Qٱ[mS,4p#TP(]2S襁eUb*~nHEGh׵[aіfji ѾFY#[&Yy&A  *A lh.#UQ,TB% IJRQE!TJW≠ʣ`BZj LCo6{ &("\(P#UDKA 4;hP4HTI6:39G' "rчFAߣ8p:DO FA"7 uiۥQJ>6@`E P~ u?!āwYT{8`a9_2*JCdU,4f'P]8SNKT/<RBrrpk{.О|w04V)Ȯ"ď84{T?]CNTy?aU Fȥ.;K Pf/aKXl2$H!1f3Z=h@nr7jBsQx6dihzsIM}I2<22mM%- IY}\h7%":3KWy2((OT}8oڿQmCG wb%OtoITЅ8y1_ǃxix臽PwމCNbyѐD򘂚2Z()8NZ%)0@dzdD%8 A<0>< /kDûN2>lSrS{ x ~9q,Ơ;9/6\s΀?#?9@jO);NvfԦz0lXszDD>m Wq֑u!ز'7~5!GJw`'~hI8CFCK= {wd*aDv,4AwCy7rP >e%sV;f*dP;fPR<Ppq@uϼ.r< SWX>uDj8BProuDcbvkJuD|Blw1xK8u`9J2N)=&6O䍧βNp7 y:#GG.(hG9ʧ'DNSb;h?݁!с*BC=w}lcz6 ~NUd\>1yй B1+DRSL]IQtF[dj No'Oq:~6 AK>HNJNR瑙`{:Ds`,\е fM0OĚ><%#ߐ{'#&ғ=t2Wְٜ5Np0EZ`6~) 5-MbBXl4Nx܉i=~dQ~FoCypY2۽yv-9! 9m*ŗ/Irwuoنf(|// ? J9B&szqH){Nz1){w4jOJw7^^xz0ǹգXsNF:=LC@p]v]KRo#zq88tff@wgs w7RtO~OGAx%ع]uy M@Aԗ헹tƠ<=!N˅<(X>&Ӽ=P&+H/I(m{RuApK8d< ORo | +CÖrϝ(鎓x)ǥSzN>_x'ݓ'zܟ4>CRr1/#3cNt;>̎>(Z=Ԟr r1]8CYs`؇CXDujyBr#s;dFxz:pds>a3[B}MhS$8dž9"~ q!~ChyX䞼:,<V΁'ϤnѬ|3` ;'(z!ߔ;l_.GG ^5(8|SsӸJpž), <ӑ30; #O8(8~U&|vtf!IOgx$: ݝ@:6>ő)x0)rO$?K'm): P <|RxaJk+|L׫=99Jycs '?$67L*zD mXi](䓻D T,A~L%==rS|7jz燾Ο6y}'O ^ܞ#ڎ:b IF 0q#PO$b@GL"v^ NVîMv| 9]C8ݔ9Ek 6sAq*.>l9Nd ɐ8C4;BurzZG2нWׂw.ǏPvG$ { KQ'Nҽr:s`ٴw<%|I#H!hνt:pBgjweRFu{\4ӐuN' }(u>uND <'Ba Tۆ/N6o{$}Xf`.M| &;+鷖a1-m٢|D>w {ɡ&TpįDJ$P&@sպ'{QO  PPs>&&ufCJ!;jPݸ|рzSCwjj5odyIKܱ%!\]jMaN ghL؍9 m'vAN7&>H{oQRQ&<ڣAby܄hZ]Aߍ>uр5p=BS&|q: OD/ODp;,<m9!ćyB2L^I2wf= N')~<8tf]'_^Lb\!X^h8ǪS xm7$C Z0:G!ʤ>Bk؞hsDBw-ASV=/G) h)N˦'$8nb!oQdzp^x:Nw hJEP+[.xJIذ7p*1Z>Gߞ0pG8;q?&_f<|{,~Nnmj 35qb3F&iYf乶[(# `9Ho=( C C|\M\nɵsmmj5I'ۄ铻"o܏ϩHB9XhߑQڐ05ŋ`58 0.e&c3Z @Xlr&-&"v9x .6,YٞHƐse E$@zz3 vj~ؕ?JG@s p?BOPEءx"4F# `a6쒝^>' '?@bTrEO;h; Tk4Xm͚,mfN;R`b KȘͫJ5;V4(ee}OVp!4Gd|Lx:OU=VR@002Ӌ i(X6玣N^h-aAݰN@}mB!Hc d$Wl }"&QI wHJ *`H 0P_b*&!"Ji F*V"jj!hBhdCLTQIJ4Ș!%b J)jVH (bB)( B **d*h !J)i(V %J&R`*JdR0"@: z$P*0Q2T)H)*Hj))T$UIQ%'WFƤYT $H%s4 DhJ&hZR*((R!(* P|_r6p.b2|w.#Er 6q%RS1k ͆,WfL+:mϖ4c58iA'bG%@h{MJB F&I,#=0Qyd Q!bhBRj %I@)JVZbJ)B H((ij ) *"f$* DV)Jii+ `!~Be h"QxxOF&-B]F\n0 J L$qJ{P/ݜv_8ET$O(d!) 2:˔'R~XdYfNj AEPH!uͰ@̌)& OM?YCX)m]6$C XYl#9s9O: DD eC!31~0` 鬀v~K ɭim! )IRDCTILHL)HTTA*' diٹ~j=l &IMDXeE=;>W䂠~8gNEJL4LKeIQ% XȂ+|QNW%>M6xS5?3&ԯܕtUPUZ `d.R66clbc9uˆedr*e ֡H6I LP>ЀU1ș~҆k&@_|݄Eg̬L@¢jJEY F5e44"6F3o> de3ѭg-,a&}aK**IٟV/dGR1E-h(&Oa2ltMN8-:^mjVuL$!t}S&YZRm(!1`A]d$ 󃖘P)qI2݊ )gkVY-ugXlէաCEHh=5"yݡ.T,l ,Mѹ2D?Q<$U4kzڴxL$U˝(TBNZthtb,-E͙O&3zXTŊ(UrmQ00GI2D^f䉢Ymw[KVuix73"#jUTa<%F!Sr uU33 TLlŴ/EH$ P&5J擴^18P87'mtڠpjw;bvg6g6Қcb(ʹ=JR̀)ݹKAJluL4xF8EKfZ iѡDFe3DI K2ŕF:*"eQ}S)kZ[$WWiX䥖AGz%`h7a $P""A(b8' gJC&ڽ7QI-:VRtus"4Aˆgv`23f` Iz‹uf*# bnسX8i$8n̜Y3٭RԲ*dlNuGL݄?Z+.FUM핢 OypL UPQ1 vpz/ ;qU %X$2zODtȬ[K#T 0}T96Jgd4E[Kϓ!IH܈iUdR& eP0U)шfW a,ne$#y&B/A@qnEu m.-\296,*rU{yEU*7X,ez |$K]щ)KwekgT"e W }"o <LɍsLHMmYD'2j(DOŋW|ԂC$4;6d-b֕Tb-i9e(dl0G.פ3P U%R\3^,:_ Yd4Yg}3MM\>l24wwsE-hjЩ Mi "yŞj,ꈴJ ,h2Jn@Pr!%f&&E D i#"S%GHT(R*aF * G(9ܫ I02Z*#<XU;(SubnƐQpD7ʉTtɡtR#:QJ B]uAd *ˡ J"m"杉TJT,edV=D1Y[fixJ*dDi7M|̜(hCXdх5u@wh*dfe%O$ѐ9 ) ӈ84Ws!p"EPK0))M%X-2(Amt"{l;i..Pg]0ij)7M9N,LҽwKSjn c(gdI氌Z[25SBoe  $P c3@:& h6 z6Mb("g,Qd@\D=HGʌhpFJC"sq xyR6|ډ}[lu{HF.ё-9Ԃ̱_/uN selQVD"ѓ0;ś*4Ga,BG1 $@!t(*IST[&M-%SKR4PR4CEQhP7:6'|s\L2I와LAER XUV"+a@2?-BECES1eQVDFI2)as8vSr$* =Z&݅Sa'EWRA23DSGhև4k4;aj"E YZ"sDmv+ 2B)fȌ6AU  ihlMN?MI$d z)* +8D#NifUsMv­Bd:rUNbGU>xZfu'#da53N rժթPL:̦Vu q|œxƪYWm&",TkbmpVfik235#-D9bٙ&h6fCNA@p ^*nH[?;=06 m9iO@}@(d̟;}6:L"D P)P *Z()bhB(B*")$Ȓ@ dON$ݩzhN7)&ם56hh-60q֒xllE)I EE$M-14EFө( f %fZbj&&"uLAqӴ4RP@QE4z ("*hhb)i]Q5K@QEMSPTDQ U3A3QDES0 IE@TE4jr(f"hB bZ9RIATKUEh=CkI@T5<4CFdHQAAHRg"*) J(*]2Z.zgi(NAE*mѶtȀ3@˙ṟɘlz{uUDITAQSD1LSUMI3UKUU14QAUQAPME15DUDQ4A5BPRQD1A4UEDQAEUUU$TD4M0TETLđETQUA DBД$KMUECT3Q0R DS@LCQ5DDREPTDDKE % !EME$5DRP1!I!%% LTTUDLEDDIQUSLLQDQUTLDAPUQ4I HUQS$LE4PDD0AC5PPMUHQDD3S  JRҴ!M%B1S2B(U4IUEST5MD4ADTUL52DSIEQAM R5AM!@D-JP#dhͧ%Jf") f)*&j*)"i ` h&"(JB*"B(*"ZJ)bh ZXF"J)b*b@>6B:}OjvW$nߥv7>?A R?X3S1ԓ()(#ZֳFD:3"3V/z>E*~-' W,pִqkZְucdVZY5j#$+#&)b'%bkj 54dfVcV֧Qdf9f:z:0=שѤNAUAU};` 2 h̉PG:`Q _r]YWߧn :IT@ f(&|~c;Q0S1P4RPDC:DP('p&)j|S 4AAEY9STSD N?cQ.-ߝ`sR}*=g^ JU(KM @R$EQTIRRDDDM STU1%p(HC SA!5EU4M3RQ15AEIT3TTTDHSPQ UD1$ABP5KATIQCUE%PIAUPIT 5$DA2DCT@RMēTIATM4TQ%QKQ0UT0ATHSCIUU SEPDMTL4UUETDTTҔSEDTRPQTDRQUUU%E@U1D TTTRTM)E4Agg~G f_Umh2(hod;AQ2TU 3EL {7a I$4ah?3ؼJ*&% 80r!`jfśfZgʤ6J6X@Wyx%FHx3w<|H|wt{J30Ɗ}Rxj&>j6"1 no%x4N'F8;׆NR_ќȸy <;3ͬmc{I v㚭89!_&Fe.V 1!7zmO#Y\ L$60cfM-xֹNQɶ6wgh &a\s"uz|10ڵf.BmdehS4OxmB+ ( &JT/~ tHB=2!MSD\ \ϼNH1D}a/<ܔ<XoC>IӃzuOy^Pkl x`mD%gܸ!j͙B>d(:csq07ѠюC00R[ 6 TU#NN8 ipD/-1ɔ 0YJZ,Jf&¡1 A'G%:󭺧XkZm9=ԞtӭGSTx޼p6*G!́(B!^pE ϯ 8Gx1SC{ܰ/vN5  'Aʀ2 NاVf]7$%>ޝ%)7}mrppၓ;i% *ռ($9@g@/猾!> #5@*Jo=¶ʋX{$L5Emѭa?ѻ63v(:hŴTW((?-f q`0\eU'KAu! jL 8gni:y=,s|05R{vمOlJ;o>Ԝl(0t\c[Ƣ"#"#kіwbx̃fBWF[kL9}bl0:Vgz8yINkǜikڹwMOA>;ch$9wlC;1b3ۀM6 iw8ňŌj C1 hmdɥJ{ki30&"pd"̪G&XG0XΑzdpf:;dxlYSsb?/XbbC'oV'o{;8M,_Wub9>XjGn"бshؕJIjX_eWe|hE5 kPtbtF}(0|=45r"CƚW%**Q5->ª00NK)9ƪP6!,&hZ\8p('^^3hj?NkֵE<#Disl1X!bV#=01A4_ww8g .Na h_3|MNHa8?ykýg9yL\sY cچdG<ΩԺA:1OBkx))ˀ\D9H\?ʍqaDߧ)5Q BIAB5H8ݑLB&)3&ѓvmI~2Z ֋W4`ŀ c!5C L(Qq>|㟌s]$9DM9e EGgŘJ9jLؼJVl~Z=qܔ@1gB.Nx9r&/Y]F"}:[y=1'W_ r =65 x1zkSb 8N=@8^U䜥:zp2Ǹ?yJ9$5o"mcFa'sC# ::_n$iU 6~!,Rz<|#cuz2z₏AAILnI@fC a채YNDhGI_9Rp[$>~&PnKgGTIGLꜝOL|v1ÆJ#w+X`Rם.O(C׬h莉9vE)Ɏ_7CHw58xC,sZpCXX\aN.֪IRA^;ђ\02чVh0CcGd<&DY'ZH៩mS38<ln2jxfo d'9mOSY.EO/6- cӜ>uGTh%ETTr'ID%2jF@{-Є}H<9F'0SOyo=s::ѝuHO4IG&?>vYXN{6@~edPVJy$v#rh_̇oCma4!ߕ'I+,蛠rs5@js /"cQpgh[2L@hbM㾓hr&(9Y/ ea- g\ ')&XՔqcAa[%LtJIn|Fq(+3hlR8V%jjPV`C:x^SkNDi8T2p3ϧuaVҟh71>|>L|+Ճ-TC/5sS v`y''Iqb8e;Q*N " ]% g7=à]P/-⃤a nDt$]$2~i@o?^Ef .렀RT3E: -X% QuƪMnbYk?]z0h%/頵ҤI4jCi(>{]S&Gv{&I1ERSJSELLH_8kq}SU%5KUE8 k?mQEQ%#?s6#hƫ?Y-jֲ2-ekYDUh2?B *, 2+6dXJ@:S L샜  $Zh""*BR@l_!،џ ;AesGHL4J@ qWC|~DSf/^8eAGTdD4PPQIRRETtNQ%]kVNE $QAVTM UQKfaU,~mp/JW;ίC|>jߝ?sVUS%CdHE oxAĄ?QAE5@UPӤW"X8%n^ v4 U!܈8{DGᅦSAM4Q -RUIMR4DQAEQ@EQ353U$5w, ( x>E4EEq9)mUD~so}ɵ|:Ql#bΏӐ)Jj4PEIIUC3UTX~U)LC~ZN--iAD3#@~b$]AGvoQ[LX;~Br 􌴌 lpThdģQE]\sm(m"kwZ(eh] bÝb$"6!6:!{HOfCUU1T%5SPQFTUI`i4EDLG ,feVpAP%Ұ@7~WpNj\_G/U IE5 $I6EJ@@IRHJѶVXfak5k25QLO۸PLH>Cb_*&!yu A" gR)1f&( ;O;]α' ( Fjn1g.uv~fؒM',? :Ŕ,Ŋduo7Ɯ&tpĂdH$H)2%aT3C1(iB/ %Tj-΍"A*EU#iZVJd)%@ 荺'h«thiti$dZC8ؔI%=9UTQ5۱khFePR)[ YŒIBTAQTQ?+NAU$Y'$ؕF0]yLΊ}#V2VH'Yj}ER͑esDbOOA^7ݞ$Ƹfќy@`"@UY(C``y A/v%%PI/i-LQVIlf}~ָƺ,~YԞ&"DB`U5M%%4EERRRE0ԑD$TE0MǔSMUؾLQ6k^L8v* (" j* T(m!_-~a\a ()(ɱmEEZH=8̒STQL&j,j*h22IbL>d_Z+Hdh33Q1ʨcYe1T K\,_r=*|~1Dgh""h[z7Jʫz]OM#)[d?" wlt ƱsR.bKV0ձU|!H&]$6&glLrUoeWm;R԰*z?(?վ7?phՅh6MVֿ18#vTKIcGOUUFjqIf&Zu+Z5FhYZhj0ʵ9j֬r-VXֵTj1kV& 5pL0يl̍DkY*v˃uAF'Gܭ ĝhN`1@:!JtM)5 dfeiFB5G͇Gr2bBuEl))%s$T؄fEРNe~ɰqe:2t"*JI$R_P7h I3>)}]}^uulHJ`1SXJ\h=$(j`e? ]~ZS]Z@UMdd J6j_[jM@ǣ$(i*"%JcYÅ> U$Ն#Iv m1 mAaKTpH fHb&j#*({mm!5TD2s%:($La9#U*2*=U ݌h8WyU@29"KWUwщaZpoVbA_ȣG9Cy}vJQ%]bHR D E ,ֳ"Ehխe f £W ZZJdhb"&(*() bh%""( &a h )BjJ)$fi *0S%(?mȽ5DUEQVh*@F$MQ1ETZ4If։a*hjjdO D={Bs;I ;Ppp pMfl)Cliqd% 7[qx I@AS(HrHB#okk&[5 58xF֫$GUQxd} "v"aTM5IQa~ EL{*Ix  V߿7!DFgNs|TTHq"IMM4DETTDPD,MQSEET]0#,)lBFcC"^5 63EQ5U3E1 |(F_}mUnFT<=08vF"Cչ!\6bSl` ]iس'YF|í>r`!O~bp/OVfYӭyѵES5eZѢl5UMpk,M, D}{H, KHB <Z5<LYf8ӝWj */?2}]5loAw.Z+7|g?Ë08"B@!},˙8?9g6"ޥz)AhoL-@W鿫TY}{j=%y&u'BY4#$a 4NhI {i~j :" ҆U.vNj#Œ0Іew}?>R.t < G(;?<ב)aE-$$xgxsCUb jQ~v}sEq/"mkkc7l7*p5 ܢW2{{\̩ԅXAѠ˰N?$$bB>kw>1i7!̌*̡ }qm>/Y%`ۂX )RGwadA"LBzKIrQkiڢ {)_*ʼnVZjZֱdE9EDHD5D&YQE1PUMQ$PQM'3*(I)")"*jI 3nV`wU~Ԝ&Xjj@?J:/ISւ0ME]w5I1 T)Ƣ *&nQE?d7XQKKs2h(c94ESMdD11PTQ<}>)zobϢɃz rqbIH.$SoK{{|}?}Oiv{O~gfG #;9->a?o:2n)Oj}U_/b=`>[L$Zz?6q텇Q†hWFCVdaE~#Cȍ) ϵ3ÝSXRIi!?J$;:n1/ylEֶǍ-6ֽi?wϽr! DSVjYm#302#{"j(m쭣Y5j"$}cI`Ƅj]tľLm#o&&(*in7ۊ$3ueȢS<|dsC1LfdWJt66~ XK+~ogWF5YU 06,38f\wֈfUYQg "2M0ĵ5DjtQk3V6tu(*& }cU2EPTRȰF# z& Syu$//$puE{e2)2/~?vUsW/qe`9xVVM܍),[zTb` *"a@7>d I|,f?f~O_omFy׍]F͇szxr? )Z| T,8Iz n0+ۅg^ڳ R<b?i%{iYKWvgʖ*̓ɀD~z02Aj-u~^h3X Rˍqr9UlQLj& aW{h FFݖ~M|.5$kPяU1˨CGP_.=OV#oU0鞭XV3CU)].Q#ûYskigN7l!FxM!pk+M`iVY7Ow.QEªeՙ#QfY9SEEZk k QVEQMf99Z& r5ja MTeQEW}&F4H`S;H)*{z7"OhtoPO0qOy̡d9B%XK(A騞ɝhS# ? gCH{z&:)ȝL-3X_^ܾmʤJ"(,?GMSIT1UOx>}2q<>$S#qCGǥWD%i-p{q "6ШJZ&YYEaFaZ511T`jәZYPhƵ,kZfk""AӭN[cL}d[KOmllcD&9ɱΡ )MFOgژN4~5hxM` I;tN+`Ϡ۳PA(HHzrumGks{>̀G>GG?,TSMbU_Qz_@%K2^OlvVmعn= |,:dxS!d)r.\ʁ5Ӌ?Qc 6-)0y-WL8N_?mjz s+VfVAgj"K[**BÆHpᵇOO?7O@tsiR nA;2oZ题=XHeWK<8û=:/z|,xr`ymQI9^iv1f`ZNdHkXPgd:KRi#9LhRq%qN\f̺x$X^z 9ԻeDl罹㹫F S*tn썋G4H;_UNzc8JfiFl G);6{/3sT,W֛$p&kO!nl3j޴jl5y2VmIxK5'~3lHҳrN~;lv~lzݼWpM}oxaz 8鳼0'TL:&ff2rhrcmlH 3/X/iKI/ @|+Q!R/Aڵ:N(L}(PaȫCZ}¶B '1`R3bLKzp+!84Kgf:`4ɫ[ZՍmmeC[[Z]M--*(U=,,Ev5qA]kU@vYݳhˋ,G)~2by݀ %պPf\K/6kI՚uV}?ёF.Z{T]r)/] 鬊}ܘSt=oRl|KgW.!B nZRP潯$-wUkN=ML+mҙ:^mO^8VK<\ ckMM [2H̕wUk5Aj`= uR^w>d0̊N4ێ&qj"JF\Go סݽv:8뛸5l.]gZ糎4m,$rIQ!CI uQfl%M0,C{y3Yg-˿пFU5*d|m̶|%|6=UAFV+_yw`WGycr#txeD$V+iNC f$-1&C)ށ>gl ֺXah-=Wb!}h7?hIQLDTE?w>lt?(& ((*&)?a%4SDU!4TU-AMJIQDESMU314!T5TT@PQRQQM3AS%U5EDAD@D54D40M %D44TTLI MQATEIEAUDUTTRԑIM4EDD1+IT %CIBR4D%%11Qr9 QM% G4 54Veof*"KC{eS5ALEDQTRSADTDUTDUS2PPLMSEEDDMq0*Hi&!J hHi(Pd ,KUmsAȯoSMsnZ6($BE& D(F("h"VdH*) Zi**HZJ()( aETUU P#CER+BTTSLPREQY1QTD!|9uoyi5Fbvbp3i}7A9kyqrr{q*.OR:trv;~w, ތ>}ə~Gc?x|o1F 6.7lJnSR7鋵]v'nOTE Bz2C{Rj*@z?7 Ґot+:> Aji* *e6v+/xUA}~!,GjI\ 8}!!l7UQjhsyS=*Ŝ;7,/؄$/2ӶԍY`i2r wֶPle)TB?GG{ I@lmCFUp5`9lf9 T{%1{'} K~?_?(`id*$ B &$VRhEi )JU"E"=ǔ}ц'7v8p&\@w%V~CtF>*?%uk]&_YaðCB+3wnNvZ?߶Ye5V6n13=JHY.핉!!a Ԑg h9*|1p#CAM%@!KICUAPSTPr.aHo5o~ ) ?m UK8sR )h* *("e Z&jhi*JBjZ%b*(̊jV (i($* i f!* (b i)i** (*"" )(hh))J*lij)!ʦ!+ ٱ'նNl}EI6,TEEL#11BSCE AE TECT5TRPSUPISD@TEAERDEQ5U-%A52 PRTQUTTDUPRCSU $IL4KHD,Q ICJTPUE%Q4QE5MTTLTUQ,DQES@PU4UDDREITLCMDQ4QPTAT4PDDTUDTPIIIHRDDEEQHDDLMT@QCTPDD4CLTPP @RSUE1TM%gWYUgjRQMU%% 4Q@UU%!TTTAJSTDTQD4-PPQRR1 R4%+TTBU4$M0TE 4F}&[Ru$;.#Fo`&5SIsڷ"t)ҵ;=/~t<<J!" 7x8Es-D&QZJ<ĿhB"uMϳY\ߥ|BPcghgvaISaP,:2i0!TVe<FdxC1o7тY"1z]ܹggk\>E4I E1M E8xtWqHɦ ޽tFvcONr@4 >;y94^#yF))xu.&$5S8SCAìnKuX164"E7D&\ hSiF~4|O"],GM;^}]i'ECAa5[QMT4\al B]t@]2iO^YDj c sHAD<_zaڞrE4=֌l2ׂl3[<6PmknZֈ$m$m~cCPy$B]jjn ıp< F7I9 v7U6c\# &h[t=뮑S=ь_Yf)IvI';?WI b"UQܥՓssҮz=NEG]/BnJ ]t/zlp,,^h܂ C" [+qbKeE(cY>c.R⹑# ZA@48ĹP=8j=fU0+4Lֵ8%t0j%ݺrPp3~cgD$X  :QiiH&Rg?ߘZ/v"1̅j aa45>\kie;'fMQ8kq}lr/0\ H=nߐ؀1 }G)m`Sxn<$EfgqnfBGXRˮow^Lc3Kb.X0ύgtzUBRrss}P}ehi5DCG.FyBSXۛՠ|"15FZx%W͸l9}.n!*/^F $tWէ ȒDp(!4nGnwM4Kti;9<؂ Î8=P{hǑFF&o;YfzXch2vh-_atm_Ƕ#NT0QTSccXXmYL" (*4EfRd0T2Bɑݐ!1C: 2bEPARdT˶5maff5a[m[neUyg/ַ[x$I +P`MI"mCQ$ T FIP eP$DBF@!)"!bIjC 7H..+R& `S>'  $ s0e`A%TPHe%H@d%R BXR!YQ` e@SƑ shRH$(`&I s0((?~|t9`IqG?]lQ h3&ѝIҁ 2  L$2)(@I!(ERJTHPLHRHF#-LTPPQE%4LPMLh*ljF0( ZƅF iJ)i2L"j ݕ}yo{}uU ؛Cm"KĊkULǷrpb+Qf=iNʟ̈2l/vֶ;9&Vj5,9F֝k0sZ)Z7.:NQ#mYEQ 8XQ (6Yܸo&lQ < Lj՜̹Ld$<_\+ IGCJj)"iU"{{^o1Q% A%PDUDBW|y\4x|S3'&]+*)Ȍ[vH&H2M8@O{ٙId>ڟTU4!zRTQ@Ez*d"J&6AA&]ӓ;Nnc` (Z !""B}Nv\7[i|x[` LUDOYIZ4Ĕ!8IMݴ5KEP$HRR3"ZJ)'$)iB*L)*%*R"((jB*BbfJ hF (Jiii)i( h R ( ** ZBh&"i bi*"qZh(7 $*(PCH;O ȃqNr{YcYexmF!o~}~h5k]foʂQE 7+hΛFշ- "}~EFLm\ _Y#u~C$pԅvo_hL#( ΗG 2%$a& :aLUj3&(g:Ɣ0 f!J6IF%hM??~TDa6~h\4X9%9֥ D%EFS`ű0t­myD[XNzҼsƑ t}3*orx(ˆc{ U;c\-[w0),qOLpA)+eފyV,,ͪiY uwU$0?)G5G[V<,jRՑ7W1+Pq/> :/y ~i(`[R֣D69,6QհHBb aκ (&aCoÝfE@yp0y/42gvzR˲xt[Q|] +ƻoF#o[Ľ~7 E2P\ 5@>i@"*i)O#%iiؚZ_c0jjJ2)yFѨiYM%% B}O׺=Yk2SO[^_l:야3C}:8P Οiԋ„ד!=XrLt7efPQ.NϱXVđmĆb")i Sk$"&4ZV@FH d͜ӔDXWx:OsMu,8gn/l{Wݞ}PcbgYlHJ+-g;v89~@mNzz5TIk+s5&9Uw0?-I7@|yǩW+-Ԛ˅^;9flKw¨nKg5}ͱ^D `_ho]k[FE{ʹ|$bj~A0; wL=e8Q4Q\v?UP3B܀=SKh kGZ >iS:o'K 'A}E^ER׮Vvv? ?B XU}b/$97Y@a-aՁ Da6^:qy!zoFx2r֩?#:]Ɓ_f(b[ r Z1 O kY){<}D5soUU 05>ζCaDlO |>(R'# |!:v{Y_l1S5QǛ' nI `?0]evw0Dl)7Px( <)㔞㽝0|X:dv%FJꢋ%?'\HߙD~w$PnD7@?C6?:Bqm_בO_NerPJ5p< =)ήIvK&>'n#PP_DHTx0<%2~qՇ?P|÷5 PxL)CQ0IctP5 #($aC !H߳_O|_O2>LBHl`\<SK}6{Uo޶NJT}aS Og##8104.ܓR.L/[~ᆲ/m|&wDŽI~RnJkFWb_c%uF-ҘR^5Oj%{k4 MhSb>5zMԇdd!he@vg2jZ̛eܸ'lެ -vq7 ~ jZBi9-4-QIER -QQ$M!A@EHPR4PT%QT4UILG|->.T6?^LTiVW*u6"$5k-ů1'\JZf0^|o.F[ܴDhf yT'!`Et"2:i0~a6c޿X?\/Ÿ(2OAއ̄`G }2-Rb'Zܶ3F"gm;`h-_bkdm~}!!R2] :ўЊzOɯّ2mJC;]?\UV˯)옫aWRۄmQ52kjTQ 28:175^31KaQ*`@Oky#We9w^|*j2.:Wh>q>er3V"8g%g)ŧ((dQF:pq+qzJ\464m6vȮXeⳆ! Č_(UTQDO|GZh?b6(u~/_yjn4&hbOWQ|F·M ]r; !LAHPQKJRQC@!M$TQIEPEP R@RHRRP!A@ @`oٯ*K҄iGϭfp%5}fӭHY.鷓1#h% (* m~wXb-PX'{۵Jjh1Qx/$(]FQ7 ^׆Cg}_Gv{$<!#@0wQU A˺̝1 cgj`Is|,0R͖$k ɉ5*- ڲE!- S^,u_\3AU#eޅ79ynR?iI[Z6<7Xrfߧ\9l|u&9vvkF՛;QɅ Q3X!\ljv`O,_.y]ME=MHgYK\3dDb* t3Vr_ =DZ-B Uw4:?Ns"eL la lvA @L1XyۄFc!Nq&(cc)Kg7TCmSZS{Jn#0I`?jxѓb˙+@XBh@ *i?dѻUto8<Eea9sV"'7x]m ߵRfZĂE[ն^zbFTBMx,\Ug( t hFԂwVJ|pֵY}CW/$#~2?NVlM0Cr5[^2fǚ77˱w?+";ăIs+i{'|Hs;VLo6尺М#bWYtAW1dd%PE߄"N< %} =V\w62pk,%LzU6~"PÇlI~J y+MUot^(2?nb5#`3ӿhJOQ؟7+}EjI3Q])1X6zTc@<>`(xׇU׵Rϣjnz~_%\a~(I PCـ<!pFDTa_gα`,A2ĨO%)[e񚲂E£ L??2"eNѢ Yl=9p,;Lt岎Yk6ɑ&颦H믽iK9>d\v܎#À w"eO- .ch@{%cۑ~7tNe+MbOרT5>MX8ϓEBzˊm-'/L}ZhB}IKӼ.;FzIBjK~*{V!$IHEbagA\wҊ]S2ڷ9H'zD)F}J~Qħ}G\1R L?Sg$l f03Qc{4|dY!*JBيv)G5C"'Ƙ:{-\0KϷ(?sFIH`͂Jh=IM <ݓ+DM$MOH(&Z%W$66ڐ&aƒ!qZdu|I0[:oNRn{)1ZA&B?rPR\N aMfI pu s5h"up_m'<=wdJMg+ ]ꚶ|sB|PgX;?Ǖ5Ї-)HO474aD]Kyw+ⶉGt,DUy(=4G/6\-k埣@ب@G{IH~^ؿ dxJn Poa#4#:}r ??뒶2C (| 7)˃aIRSeZ"CJřIa2"clt¤ {Z$$DԚ'l*uv,'g_voz ;ψ,|1|O.J/B{5ԳAVFr='A_,ҟtؖd̂_y3QʯIMtZ|߉0DTͫVP2JZ)U94CdQ0^SUReFJAA "Imb? JQOzO_[ŏٜHB@FhAuf1:^x% 僇W$ 'q'ҵuJpx~ŗUk['B)FwӟkǍ|NiOWbV,C\ bTj%Y2"ʪ^kYLyP\BK4`" H!am,XD*@= ͆w7F5>{~#$uMgok?X,DA86:+Misoڈ{ǶԻ>{ PAcb}Y#Aesww腆&4#Tٺ YKd(U޺uqO@6 WtjUMOƅ^qJ[FTy: K-n".|cz~Wy g!Q! !䇋'0ˠ$ۺzۘ'wɫ !JkV WWGMv\:q2٧4rE db8eh|{ 4!Ai%J#)06^bg}z=kѵNέ+9WyUv4avם^TVlr׸wɫW18uU`:}g?6ˮ3Tw6d#Gz=R[5d&OҸs^ը~~ J SL_s\~v(noΖ~es9 ͺoj(M&}ZӍyer wq%ldn3\Y7ĺ>+Q;)ppA_hwOM5U.O:%vv0(  pV~)1,%fח\',.2ZwV ]]/J] +WZ,NE=lі-.Y70q&95XС5օ/W^/O7kwmڳ7nmhCaMh:{ #mR~Z;PPOi& @-,DU Ǣ>]TCы Gq119rzl/y 2=y!O!2`^w㿨\PnK{7˧鹬~hŠh`0:ʦ:|u*Ty2Sȳl L@s#A[ifq=_ywhc,/mm{n/໔]`:ڠcY!7"tXCЮBuTO1\Ed (a DQxQ\kGdȺfefߣcE@'u]Do%^6W/MAu+5c&h4%G{q[sڜK?/tQm|%l>&/޳>Fw:U^*xhʞ/&WrI\I)WsyUԟVlWRx.ꦮ K,GbTƓ6\m]kg^75%'$4#&̆{oy+B3o0"QWvR=c#ő]xw>P/86:oX,}טnVJ1V#cO×Y諍}tkMDVus㥊U[ֻ^w.fӃ wʕ?htst7m{Yjf<_})n>7g@tݓ9QnWLϠmkﴯμuڶ-m%HݰPn< 0W읷qmc]d҉-9XeCw_EjNSK7 Q8Csq:d}qo8Aƒ M QOf޷IKs#IӟpjaKUA4{51&[{0a¤ {đ?>6Pk xN_?Dr6$?'ѷy'9Q}Ymյk!*1-;esr FG)*决bμv]F_OgETҴ{p3.Td1PqB4ux<u[>ݷ䘾(De6+KYwlR906w}~|x}hnIfw);Z=&U۪#с7 GuZib|Eb׈~Xn-8zgv9Дj na&X,F?oqqUs o<)`sRXTTdnc/WbdVlgu)kV@T\T'UUULuU2: ~MQʟ'O_H.z4EڨJF:1{"1/!%)#۟wOkW~6h6ˆ57ܱw-H-*Dc˵iBr۫t季ou?g/N+IuO;) C}x8,SKeQ;w=;>wW0-)-ϩrrt_5` cg'T%Eg[a]^dv^=o7.Rs~Ҷ^fux-zSS̭Hޥ=ga7i_} 0m.x}#SǓu8]YψIg:s?iW7-Zsٔ1:2"o ^;1ջL+f]o9 N>gab>{pݪ-vi=4DD)P7LJj&:>d k#" uF@pO,I"v5LO9R@@ EX)BZP)D) A`dQC"R@P AH@E(Nk0>g@;L} #$ MH#$*@*YXv$~U-ؼH۾@?U>'rsGS1'B_wJBKBt?w~9ІogmSm7;H٥ Hm.lDiQ^iDtn'3퓴*ETZn.A7V^2A"7ۼIhG0X;{X (qxt|סڋG)Q-p&XeJi/vƪ(GZlmԶkK&vֽ]o;l&dĖ_¥;J䞁wtsWU<wL+[J1-l1cMM^[ μw1}[fǣj ޜ9(ۿHBsx]_s>D[q/=o)Gbz;y|*԰kok &̔/x+~ͦȌ:]'{ۘ虘y#Y>wq#o5+q+p7gV}-}vv6'ioU?M'D=;Z~߾syO/ikjOn׻w}W4..듡fkln3uh[^>3APf G;tpz;iÖ\##KVau :t߈w;>4Ohw|ztԳbWq- xXnVR.wxA׼o].w. Ew]^H^Rw$w2piz ޣI=V98o}N*Szyw@Lm;eͅ}ͳH0ѹia{/i޳)Z\P}tkr6u)^G#9h^+u}'Zchs8Npvz;טw~Fx m|%&5!u=u ܛ^Vμx9-΍z'A{ =om.sﶲXOx̑f gS}a|.dj_.POy|5RM猦`y^YZ3hK~uOuw딽hmp[AG W~佪zS|Xi_3Sr'Z0!iZ) gr_V7$ldgލ|tpzF@OKMg)81#`p&Y(}kW\-^f~M w vR~ͧs9$A'v6lHB<d 7|e;vQU=0$kG?Z]Ҽѿt')W;JorV:-p_\`qu46z{{ *ؿ4 ʨ-A}S)fArVyR+cO7\ -`s]GFys+ҽ)1!QyB ɗ&q,̖|p+W-m(BYYFYx^0O*m)l֯H0E8pN5P8C8jR#z@X'<.5-#xXhՎ6m}u'eZoFxk*= oaK‚ؘ8e䆄ȊC]r+wcϽtZϧ{{|+߰'+ɵvL %'U0ݫQr[[p c`xG0Jsba`jAb2aؐ-mgծ=ݬ3Β" qhe :t_M¢r/[+kzsrg@WF2} {=ҍԮ\1Oe=Oih7Is)iE5+þfeQpIX,بհM̛Nw@xQBIL# WN ;ڄ-{!]3hLuelY|̲)žS ƭ$?C]Pme(R* wSDC{u߫$֘ncH87g})ǿl5mlnuvV6G{w76%}03^?+0L]-Hnߜ-% /?U;Me-_4({U<%vDw`hD(A:ig.*QT{fdmwzyd>(}X}7⻈{@1(_$bOmyů?:*f*6N7P6JjM'O$|U&"^E5:>$a->rf#79?U&4SBFIl$XD jI'hF--&{V]-jեըZ"ŦbGVHhZjsNAr-ZjVmXj5ZjvZ>-^oz= B2='iM I-$y@#:ABID!Tr̊$f,PdDUETM zز}!#Sf^KW)4/֓wѽgmo6ؘpۣ}_e ފcptK񉻾GXMq<|L4]j6Cf@^'p_ N k%BHSWi΄rĄ~e|ySZ ,P$EϣB|f{+'Ox}zߨ#RF7o|/;qk\Ae|Ֆ}P%wѹP*< m \(ܻ1Tlf,"RR`e%2[l4:jF9ײ5GҜXBG^WaƗ/J;M>FOM'D2Chzthϟ<ϝw.l^jc^*3/jHz^]ʟv.Fw?mڮ:KH{5h --Co\6*91AK`?$FAia#_8զy/h3~,os+T׊Ee?!+nzDWYZÌiM,ڍI9PgK`̑Tܣ @Ȓ) Vj 3KjMQMiڿ䮧hB gF╚*ʄVNg`vOYnT]E?_A"X#pC *PU  "qЀr@G(@UCqSikgJgpR/w^zbH Dj=Fͫ2dreN,Lfkwe廜(y1'cʝiɞ9-}N%̈YZޒ+V NT2^ j:ϫUxϧ`4έEK(&1ڲ(.ѭ٧<=4m@ C! |+VC2Z3X6i&i"O3Zj j91?,0T1TiiprRm!p91(:*]/6JFcQSN|jWW1ISw(Nk&N]!w1,%+^ilI;XYy[qF,kca.ph 3C#A=|t{=\|r*&ѫkjOif^ֶz:z,WH10d2A=)ū6KH:Hz9:g69;^aRy iɢc2KۗDt%c]E·Tj˨ [ Yuj=.45.+TԳFSRRchjV-GI\jjj\_ǻs\x:z}֥ڙFOʿȐZk H9@`c@7:^6 |.#⥛*U)0ꂘCI [pl0|IXUN* ٖ6)"gz}znST!4 wDaʶW&;5 Xn۴&Z0檛)7/Inax~S]CQx8 e-wŚt{ H](7a|HF/{ȅjn͸rԕZjR~s*T>iK5@(K1\~rj f'[sƏ*kb5ͪjB҈¥TH{(u({+D{ome~( &ݳh:%o;^dܨ0Y3/洉pDܕDҤ&74GE1ь_?lD^$'mj塯(H:NO#c,DQѡ"DT^K&V^(S&HxdHVlVlߪ=ZtYE8CZ6ƓWlJ4M,jp?zgp0Cdp`!' 2&j[6.5x`ݑ^d1G=r^iS5GtKQD |vig5| PZ46l]zTPZ=7^-{$wf3C8-@frQ@Y@Wb77DҌB/&7*d-jζҋܯ5lkf=:6>JH)s%`ࣖJ'qfSlk?HJBBBCНp5)9} \|d>>$=YJI"Ah@tC.ux>%).  Bhѵb1{|Fx/BţY|B;7S9 Ag(>2PW2YDViUuKTeTay,b7~*rP~-,gR%n9s`.zuؙP"4!bW/( Zgi{'?5&O\Q|wVt;ULZCNMJ0LuDiBgӞRMlAn4u gZ%tҁ9]nJ_ tg5p }0RX-ڄ8 nWPY2x1$a<&V9SEZt_s>{f̋՚Mkx}d?}t'kF5Ѣ#Ҵfj[sEtQ @T@]sW窵z$Xr|2rNz֪%nD(u  5X|a՘M T:GOn[Uy֯l(2]:VF︜}:\jF8_qƽh2 苔vNig*3vqLpKҳRD\z, ҡ/dWQ+C!|aq[woO*2#*vC aHl|]} #vTOdH0Ŀ83d]龆ak.Fg7e~{BY֋Q3mx!!pcEU&/߹S XQze6#PܘK۱.~x ([,xg %cKj7UYHUWkcޗc#:&pi~Ģ 6A,BbPW2-X$ubzfV"=3]vol«9Dz1VНjr5)dtsK7* lˆǬ>=w3d9@|!_^qʊL7-yl>uvKlH["@ME& 9mIZ hǖ٩&$Y<Wʀ<#(`iFg[.Z,\)؀$@[_K p_-s$$e4JCf-hJ\"Av$6`$&\Ռ2F$ʄ| UDH %Jrd4n9Y)CTeBY 4$:6CeՉXQa{b 0 PրztQr4J>( GIdB9|"aۤSNa¾AIy.~0_N"c')IÈiȢ 43&1 #JpKYCpYheUexa:VH@9.YN#TJ3:4X" TFE&JY!C,nBԕ♅4r\ PMP |w33:eI9/ABzAhp꣕h :^v`D60B*$o܅ K9r6:+.(cFUIebc)NYfD`pH2 ԉۦ'aݯRD*Niޜo¼ `5-ԑL:NX3" ;vRGj~N .ff]`CʶV!p]e Ί:Ⱥ_͹޲J!q)eIOnaMͦEEc1R:\#ͣPti!u!3#<pe xG% \"2(Q/7ld&Q0hQ!{jnݟ2(hLWc2a$ݽ)W )ш QMn4~j5C^\VGz?veĖbWb3;H;v]:Ј\\}0PO&>ʸ)h岼T%8't}/DR- Z'6NuH?"z"-^Pa#j;V*? =H+#(S'r)<ij`>fp1k9;3&Yeo}xk޹ra4>L;^ Vо'b [:=ؕxv9ϒ%}BNo O<F')|+],҄| 5?B n:A\i @"JaYۍJɦ/ )܋$i:h4k n@g->urHh36JzKg\7̧yؘ>SxƯK4_PHTojS$Śթ@ _|=*<ã"B$ͼSb @sG1pY4VFV:8,+SS !+=zR83: >W҅hc,Ok}N5z1?gYgcňbVc8ΉۣlɵؔH.0qGf>&kr#}=~-tAAmkYT7$@1Shgb'x=<,8 Qt'Mɑ1#^q4 3S&I!fqOo3Y⒜ΉM7ș 0׎Uxe«Πਉ 3RK^ɁBF9r-Ѽ0w[r9F_fN]di@ɣ'Vj\tdM:D]MLcVq*y~! syj|-МGĄZrU`Q6Kj>ժZܖ^E7Cq,yyidu0^RXrLG(f1(g-"Px5hk"ec}]r 0fcgDE27CCaD\o@o"@f*sgуdMtAS$v!GrrQʼn=d( Z] *CbV7Z_$R Us b\ 5]hg&scc aU'm:w1QlFVȝU!3]p&b&"'R0 )} d})7U@GT б3ԜւPUpL}l-ζaң\"?H`@ .Z~riN9"Gmtlȸs=ƴT.B+ x^p_Oa~D$QN{t %y87DBku?_~aT՘X1o+ff0sG[1s,2(/ i%d\dRrEŔÇ1 ##lm:XU\"( nfGnu̴Y'qfcn*%UfqsF6k80gDcit$a\g$gP@9@2;RZiq r,័K.鎊r4SX],ӽF)P9 D2蒉c)*0cMI#`[Kj01{o+CW5`*Ka2b)2"R:8tG֍%ss q71?Lp|Ї9f$khga. @7),̦lEVz#Gaȁ>3%8e\m].|}D622|_֥shi} wy\ˀ%85FB[GKdWEl'lOG~%qlW(9B@˱:orߤ%\,  Qx2yr%]$6 zgqOrY)il!1a< ÿ岏Sa]ݿҔ<6Tak~02ܮy:F( hAU\p: Ӟ ' "u굌5ÈK%|opɬ9XF9kfٵdfx8Ȇ#*(y=al-QV-h 2I:QBc@>L$ml5N 6-\(yHj\gb9ƶtrO$IpZh;_iG84,lƤ[QD;+Ǹsd̘nG~YG .Ks>vXS/ƄL+p xD԰yiV)FH#ۀ0.&|%K`ep琴LQDZo=Hn: t&X5 ]!9 DiOʘHR{‡6 885*(Ǫ@&#}9a]2wEbڣGCΐS, E.;ڷ5.7(~v(kY([ǚ LkµĤ5}N0+'݆ø~J/G ~RS1`DAR![ce홺J r*Ծʚ^ j[k:zOS=cd|km&ؾXwt ^a&Hn6gu4zbȂ.6C< HAM4 Km?bn]tCLjn3cY*dX%-8 qy ;Q5!IHp [FD2nW*{k'\daiADA713 eқϒ 6lZ_0 EfM&4[m.DBu~+>p.jt1r3> =;j +[W}[hC%Ni`GQGERAmVSjN*s)aooL95Fvv<]dvm'@&WO_3pgɜ|өS-ցՓlPW1@ʦd`\-1O Ab㡴n_j3n*!M0 b,r~'v][iJ \<~+20P%c`Q3 6@K\,,Ʉ[ewˠonֶ!2;Ez- C򨵿|;-#q=txͿUY[Li"+I=+S~/H,si~ImK<[%Z5~+l}q?9avc @A^)yZ#EȲU6< U{3@G#ki2͙#  p7Iy+bpHY "N H K̋foF5Љl]nL*QO Oe;n!/@JiN*6 Q۳t8/5]T܏좎,l{GeU.^[9<7؍kp: sSugR$E!Zy~Vh(а0BFWZ=PWvSJzY} |YʛFA<ߧ`xM^Cc|{6HYVç)k@4(G_j~z^d)7AS+k ذ?Zxٮ&eۦ y WUݪ{1%?UtQ.g + iӄ-ǔ0TdX[n E%v'әH@Nf:DJ[gķy6:}iNL:0}^\JX=4Kw%Rp;p?X ;m`J[z]&<$!\y ^,hl,D [gdHf 4jȆ[s䁋=S'&*P٠%5JNQ;~#5%Fx2ѳONY̷aYY&(B)d-dhk<<7?r6r΀KhEB޻wY qFNLQYʮtm{D->jnjꐕk#r㥷nycnww{* -?M˿f'2ޤj"p{Q+±a"쑐Ɔk<{߶K/{HG?|^:Kہ)uR ; +elQiA]GENC],rmYw6 I{61 @`L)X K]L8@ḡ~?C}EJǚ//o_{ݦ.u>,tvU`;D`BLt HUD`h답Yv+ѐr>zG7=Bpѳ(eА֖AY lY?MYޢ[`=gƫ| j_SE13Gf<QȓvhIwLkSb5i7;|%e^TUh|Fӯ4P=I w?A[GZ:4E Z , xv"= tk&, NeᜨCrݸW#rrg~ u]tjܣpguIBgaML~_ gUxxԀE;`INXoJС0DɺrA!B]u ,/}-oӷo|G<Z>8;S!s.6 f\+AT\㚡ݫԷRA.,oooH 0Tw9)Q4^ BXF<:f0df 8<Ⱥv˦H<j=vіU1֞ wQzxSſ8J\V㇟*&[s_<h&w @.yvx%=OXN(>p0J__"Zn.b%GB&k"}m쉼N7BA%%\}2t/ч%J[#/q-?v]J'?zImJt wS^7Yx%ҡ9" IUsCȀ_O uGV*eKim*/1&cU'O$(OțcL"$h ;ugת8#~xlI&E"s-ЪwĆ>|z]zb`M3ex wW*)@ڬpZgMFrh E>/T _~,|B~Zy)☻ZtiT]()ߏV8\@i4篌_-}`Icˀ v)+TsnfqkwS0~S9@> _ƕn^pOm.y}Q6oͩsÐ|[,If6m5zXVx::u%S=9Ti^6D]A0*SzH]&G#۶ \+q@\ t*R^"HS %7.G)rpcSd)ؽXI թQ:~O)uRc``m2g<8&cu_XT\!l;by Us8)oExXBס/"lcܝM'5l9)["ҭ mN $#Lqȓ)Т@bsаdN¯wd2Daz"0}*%=fvv#W8/IyL %0M4 |TyЉd*eQYϜ ?>ґPB5<{n[ LwF:o .!W|"EO8Ս-ϱ]}t$w>diwUFV׫ed6pߋSh]߄7(|܍6ѱ';UN#ٟ@ 8ikjûBi%&$2DYՓUx,&dK ILNMu4F"U[O8#f/Wl.:T@,[bz7"&)Xp^,/[7./7Mc<8,$-e FkB~;Nn >(Ѐ Z Xl#6>$?:yKεjO8d,DO{yC4WKmd#m9yvrf].>,,*kjw bQ B{Sa$<HmuܶZ?su%r? @bXŏs55)4Zo=ѡ=3}~Dۜ٨au7a>,7rD6SGzƗ-{EAų7@ZllL4JN7:xGo&*'ƻ%՗k4N.l{(՚)ߑi:v`I:EZPt?o!?ƣ%iVdWA\hTBp"6wLGg5:*ɟ!@TTդhTE]!W -'0_T Ys@)| fj_vySQx~NRƣol>t$E1lQ5I#C%d[/_6JmKClYVUJO.5|{b%&;HDtfnơzxeyt.hks<\Z фAƚ1p/T_ hE@B)<īcGf-N1Ʒ`nPdz;p&{uWhp)|&tj, M/ى /Ϊ!_} ٥ =+B 9=\G^av/A3Xlh0e| .& ^.@KV01kơ&2 OSf$S/:+Z[cΦtT?Eǰ]oM )yWkemNVږK AvFP[9C{U Yh'wh[PJ O.u؉'y]HlXˣVuZ#RSL?g`0G k}6wEJBka0`TlXiB l:\;XUPY-N⯋p"+xNuk|._;ee2Z/ғ-*>DSNi痂726⋭BP}D9p|"Yp%T ʄLmd"eR !&Je1Po5͈,b !8aX}|S (gKY}YZv.G֘+6 FgCi%婢 P.թ"؟UdPF͔uQLɑ:ab7z`?rK8Aw±98ꗧ?*J>j?\$0FA4a1=ťYt DÚmIԕ "'+L/e+QmZHMb%rchΥ}FSW<O/T/ұT(rޘhOt[ZK}Za/\[5<Vؿ]<IK;# e&Kp`UI؀׮Xvn%ksB+ .J7Q M/ 4"+Xa3P vWZV@-|=8m~9m`%!kzCRcs䀵n/ћCEa$חH]WL! y{ A ˵; lJ\C$ܑJ3^!{Jhfѫ8ZS##i&\>D J=vp:r9I(S li֏е{5Qs}XߟVA!I\69FCoqnj"_܍hQ$?׆w  i @9>Jf*[o ֦y‰ȫxў̺@"7`ȿ5Ѓkj]V%9z7S\^̣`~dQI)GHl)&# oWdf[N,'fm)$IC=1vͻ"Eo;F)]sz=|g UӹUy:Nvf\zH@e UZwf] 0+n,*dto8?J37~oUaӜ VQyd Zv?v̨NM&{q`x'f7tؒҮab./2cqY'AqW`+ң9ov[\k+s/W閁ugr'tfx72_g'~i'!߮fbA.,St-ÓyٻPyJ{4wXj-s["Y Es(2 ^qJW>7ҹq(}Se\f ^2(c.2I* Pfmmh̓Neܭ&qyxW8ʇotBߕd~?3ї؂"ʲڍ"K") V?.؅>rQ!'I5wW7LPYV>S9\+S]gG_ k]up֗#8{~1q24: $ sfE!!8JmKyy/zeHy=BgmY-HIBpJܱb^hk ML'?= QNZ<0aI\Zb*D[T ZVgC=4JΦ_\DSdQ=^=* < ~ cWhui$y#24&nZC&gy} w]̓4PŻ^W\v/ԙ`-i͍,ϑzx;7pp u8YC鱛mt av AA,P4:߈r;ۧLG!r%bʜƿ3n{/[cӸN-%} g<)ILWX6o Gn{ǑwkxHe`IDy\=QxUsŻ(a.rKc!@||I #7 72kx^ )IuPxb?;_ "xl4мh=K>vJZ*ű2EVyL"SþȌ3zxfߊ=Y Xu!58-rhJ t=IAtT|kG!c%O,3-#U<`;ܒUi;e?Z;1 yɲޕQD ~[ ^ M8O)|\xв vD]'Kkm*Cz Y5"5=bJ㦝6 4G.$HݓH ,6gwC`ECT4T*iTGx"y8jdVVxW-S.BVGl95+WjIcON87 *nC5\w&h·fP+>[jdl $.Ĉ3g\R+W"MЩЧst\HJG׸mrp O,yUV uxuńxq׫1 -`2C䨔w 58^<"Ft{PR20KW i:3-9qQ4 )*Y}l)E:Sȉã}cJVmq[p4F ˲ `<5a%I$wf&o?\oDm2f]{yZ3_޷ި5pNᆠěF3~ B5I8\ MY*_z)91~>I8 Q{"%/` ER;(5qwaTcE9JְF.Z:-M<0JͰ\T 1FjRCӃ^Nlh)0S\v^NKQ[p9i2hb05.`D@jB-uX ʕ!V+;6jQ78I=iwKI@R_4Tq$|Y4A`)WWzIajZp1-RJ~Ǻ7zqF!AI0EZ rxl#=0C{?@4Y7s+엚XhOD\=*BAK>ftɯ&eJ;oœq^GAY`)|Mٻ 'S"`ްA$FrHBHm  :E/ʝNhelAt=e6ǧsyI wMcŨk)4*0‘ku^?iBdP'kF ̦/nhM-Xd_)"pL;+O$ Hi+ŢLV%SVb[xъIu"0rٺD@k+H3n&溕ԉljkK FTL9Gims Tȉ3.iaG'K}WZ4 5<_ 1_LW{`1}2釫 #B\>p{fc}?ĊNwJQ9k<`xP"9~'E@}!/蕞#Aj?iͿγ `M46(tN˼҅h23MD=k@́;LG{,$>@L]V8_4)OTH-Tp_$IDSted%h6F;-A鿐g:yP=AB&~?*l ",y,ȑSnUYJDMc^j0G$mBˆ;ij"d RA PF@ 52?ryI57i*o*Ň"h)/#7_3嶢Vgk /d!4׹rPBH~aҫ^@Ҕ5bŬ/7K%Ԓ&䌞/oD;) x"zT;Fsՙpd|r7mגڐd^s%Q>j_uI3).3աҥ6,d"/B-6H\H1p^`Ƿz::PX ܦ)H ըj XQFHE0*6Ltn濫ŧ`\("#)N:L9:%lL5M(I{cdǀG){?|3xlfA>\u4p;-r ˰ HeAp',T-EG\\K㪚_gM/"ӶBqi:.#y!>տ; T`H%8焒0Feڒd K}~;M%i}W# l- |$;"+ R*p(q?|SYu/(L zBaR#ZywP'sIJɿ)4dP4ף?-;K˝۽j颞:R2a(['*1Ϣ60n_sPN=ud2e`JLgE?@9M'z5¯؈aA .om sK,+oɣfiȦza9K*E׬[Z Tޫ5:3 "Hf: a{%ehN~9C3&M\'vs}aɐwR}P0B ԏdBoi A6.X#(-|㎼3,8s伞%55)FTT=_ϒS4E;>^5j sZ*5L""Gg<^ߡc*v Vo?_ÿ#0H+}n~?= ?R7l !tU ߖEip߰Xz0uMMQ7Q @7<)-y7M{Pf1,|b{ЉM,hFh+Wx[ s(/%h&<с!t\wň:T3zu3}$ )ph"j(,U͎rdx@9rNrTc* (OޭoQl5TO1.øS<E&8{3 +`[ Q\{lAsgJϒD!t^lWZ R|xG^@Ծm:0trRKMDl  #lTqFdҍRȳ۸Zm_$Y :ޙ|M)sMA2k#讛_X|xj4q"U_EK> EadP5ݱaշ4n}V:@.Ҭ?ۧbbG(ҭ֜43>ȴi`}&3\f UcՙWz2nT+ve݇46B65jtdHAȬ3N{IKq?{%O(؅Tjm(Fri]1)MM@kw@yz,0ȈX4ZW8Nt#{Y\NOz\@E_~p DJ>wB]A0t3!Fu)K:"8փl=ca؍ 9E z.0(gsjVWVpON,5Hߋ4[UUt$:{U&gZ<؃I7+_Z aW`mMWo[t)Nlt%B/p 씿̔0/޵e5JgmP~m 0Dxc,&dv@f6qKoU9T 2,]`[h‚ 0P갗(0R/baN, 7Yz3oP!!dmY W&gl9,+<"\Z"$,[=8IƢā% w7x )p?3Wڿ3eY x2e J5KmPv#q7OH/3{nDyk2kseY>/qN? qSsO*YQz~V|$[ BewPLu p`dժRm|RRBXtr"֢"Oy ^\+U_Bg4!Wr^l${*WMH^c ^ LU}oǥ+Bz Xlm*(n W@0s L ^JFV{hIPߟ⑍FA@mH2F[@S`Wf,RWג`7h E:O緍[{w:ývwK蘱 71Wsfj:`}ߦuq c&w*Yk@L+aRcG7:1Q_:܆klFy?lj{Tgiqг=o#uB3k4% Y avB/S1iE )Rm~ekA #,:U*Xs3Fb "'`&Pi*0#X{|R^Z$GkqNw>%H#Z2!y>5ަ[FoK߾ÝJ= 3Q]Ϸد` ;Ahwh u$^j_?(&8_qZ-V-jƸ/Ppa/HHjoQ?63I p-(&КG |Fl'(!hO9O5`T1.JT׽KPq@7Yf;o2Q/U:{'B* l "MiC:*:N #}w6-;sv?Q擰QdǢ22eԝBa>GvdL+o +IO{@Qհ+bMa7z nQԱ! K/_TD/1 ºTn>b?éIwf\tmG9~NUbGC}9W]+6/&խJ3>]7=)-2~-tw?U J毂L";^1!"ز.NC=ROmgFkG!5_b.X::0$5LZV,)혢K>=M)R B6-M+2af׾Ԕ wgI|-r+l F-)7MX͔ěȒZpQ4XN}i\׬{?!Y*^RMƁZ%}Mam4*1FN..+c>-rc[+$!@xZ: ko҆k:МOʚZ*lXf|4H,~iO+kʽǀKdl~hu.S,z$v ĩ饢`kh@tVd,݈NcOkͺ/G?DD071mdbv(×m*040#@lGX|}Ճq SmYÔt!1Mme7Hܼ7/nF*S3ӷRE!Ʉ_~&,# V-ׯ"RaIL`YZϛ\8UGXnmhقK]TJq򯪩|'b~$Y{ko/i}X]C\~-&JLa7Oc+n+K=O> 77\ފKȈ¢ ֐zb;IVZT!3;cLYM8]*3?@k^{bd;臰 BmT+8ה [V$:H;p)IȰl`cA!My)鰩{'tbwK߄RۦQo΁%p80-\o(wkM:o\X GI0\1+Xoh[ꈲ-Өr 4t%2f\\9AΈ_eh$9[1J]c¯ֱPTph?Mn@&<)b|L̖0BMO) @Vr2LWgYALF[65bA5WYݧP MQ]/V`!f-g|o@ %X8SV[<.A fug:ⴻwWB620Kq~TmAbQw@ Mup: Oy>!z.mQb`ǔ-L0!p4:fn8.=[,D(#2Zфo[V<[d#AeqJiSQa1'k fcwLl/R@$ȸ?\Na/]as!zBC Q!B-{%B56f=qgӟé|'tt1Q9z[Xk50uRC+q vixLrPjm}!dZ42G?:M8&bjW,ihᝳ<9sBn֐XD E6PT[xxߓT=nh'䰋?_s/Z,-Լ?fs^0'|ez9)TX{K Pbxg׮2ю*k:͛TϮ7)!UU7~n_1pis5'WܧVK86GqK@6lE;.pdD1ԏ=ޠK9W [V[ ʪUq`y@ijKWjIaKE{:GFVZya 2 ,I!OH l4Dibϸ#l9>ŸQ6<%(tN1t˫AB. e"|D2\oJ}ēKU?Y&iE]y'%YΨ Bv^< n9B4w'>MEjY1( @1kCI}.f>>>]pխ!5)ÅԛGx5Y3>EoG'F!Ho.qeJ2|)lQFhv6_6\gK+oEnEax9lv_}UȚšZk.s$ɦ^J- CI"f_7`9J2#%#:~Xa =H_x6/wQ[:[3W駶KyxaE-bQf`&ljQCїgX_/_aYf[hЇw)6#z7Y B%~?EKnڮݝ)k:eXnZ9'yA+Ok$zqn̗ cLE1 5lQD@DVK!sazoiQzR*YYP4 5u UR_K[ge72 a$`0֨*^E pT\>@:Č!@α0ʭ. D } 8g&+nYs_B`$[#BN䬽'lX$N˲م *~\z,u;(/h-rW="FTifG$̿cy%C'=v`1tX$VS DCԠjj׹K.{7dr2ѻ:;ƎwsN3q GdnЗ6y{L4S}—.E=[޳.Jwy6"؉RlZ + ET;3n7r!᪫+e-]]S 7ZRJNE9P|A<| %#n͡qeֺepM38\^;)jj!9_E-8`{ ێͤ9d3Vۮ_X<0گ1dORᔹzxĕEԄp۵A "JvG|Aَd|wƩ"-TY_)*!¬Vi $6b>WWn(|S^gvNy [ZBJ)Ho26>-xa:i,gأޞ/UH֭/Ztqx;k0/IC4#ߐw$hT2\1TWr[ l+ӆ<~#ԆD GWHn]D2qQWe$|}O?(=`P#,07?Ϣ Ӛ}֮;M^3|DoZE¦EF mЁOxBBy~ƅ >AV1nf|]usΈʬEӥ';)pqhVk5OY;3uo~ehViϻ&Y/SuXacVz}U.Oޒtak<ߘ޵X`/] MS ىU)ѕo(n|41A̾)v=LxFֳP-6mPqz?X<OoCʿ##0XOi fP.ǍG~L_()# d17Wb뗗e 3+Bn'W\]=f70s:4Y$vx; 3^Bϋ[_kPݳ"9lXpeVGjЃǣ :c;@g4[aQ/,05&g%,ddxNˀkM"pD1*S7I `b'09mZ8oѥѡ\=&Y,x]ŷ jUOg mA Wksl: /z$XpʄfDiT0@+AspDz'ZђIB}1 gч ^, |fr9$ͧG^#a"0mr,#[.*0Z){l[`q\q*[vu@ ?i_SoF$!d"&>~֛j5N/G$SQ.YtZ:1> pyTy4o7F3_Ӫ ;*9JD܏k!sl$+6{3Hs*Ǭupsqq(pMIJ CcrYM _ |)(_ =q'W6DZ3vnzB=pŞ']vRO |~0Gia/ vL3A Ā4>}~tr!9dp۸Uf~趰I<ʯ2K{!M@6w4*)bd,I z(jP؞Hq=>V.9?VF3ݨW@ί~|*xC$ C3܋a7Q[m<>GsΠ(J_1ʆC%CS& {g)օ m 䛪㨇qu; 'e`"hqK.UjkO.pa@ux-R&P&je`#`$uiΤȑ 87K-KHsa2hs _Z K;Nfya +B^Getke,uuqg][(8Y4ę8"UlJ1j8^Y\kV+bbۡ:= DH g@D>I{qw9u zҨGr&UT@߅K;PBr!c=):no9p8QZH:eH쏮Fj6K|׵ O\ lV_4ڶ>~ ѳqe0!FqRAWNñޔ` .rgF/a@' whٛC \s{#UNpL GkAj28:hIlDB̎QaMN>[e}cl[0t92vgbH쵪T;%pyW&?K:#5?=WB̥8Ns4~+u/#Y8^dB8" s9/b¨3[&J$enΫ˱:u}@w=K>KV֩9=<0+aЂ@Լ+xmr.آ|}^ TFz~C}n Xŷsٷ* UQ9 bLYߖT4Qea&),7MTΊ0aUoz.P6f@{/'8lHb6ɚ, ͼx;Cb) '#q 3ߎYNOOVhEqQf;HO_vlΔ&S$c@Mz$^֕?|ׁZcfw6$fA9~tO#. H)=]Ue~pKkō,QSl Wh Cq@r(m nGP˧CqmeLqaNAf&.W*^f`%%fsͧvm(qLJ lyպʕ~.MSeP ЏN8-#6lA`[M@9=J!!!_H*IڵjO[ a*Eyd)pqΙ狡3 -3Xsh9c3rs%gzL.u/P,O )ԪdXaa%^M+`K$tNzUV3,RJT+%YX6LvHŌuZo~@8YZ-GZ*a8P:ψcYJ ';(a5\jgFRߖѪ-'`|ѡpN9 |oА&pNVkHMo cLK-]+uBp%;f$kg8 dX3YOT&;[PzVo*CZ7JQQ2?V1ؚNJEWĢEI1_Ad Y= 6 _7P!]S?WF]*}l#; F^\!J/,uo^?si:+d!(e>f2)/|$4e0D<7Z7("I JywɾP[afB6VTL^ň;׉^a)J0bRA PJ+벝D&^wƈqKjZQfoӕ`#0fsVdPUqf۩wj@k_58'Y$E`!t'z"[6!huq;ކp27_hXuIG*HJ*j /e Um2 u+W8I3)6;l%ɝ2[5^+fbô1]S g|wT4IHc8ٝX@p7/K \l/~ 1p jO* YO5v*ں[J7ScgK ;BΤyD zB6OR)˲ .DWT~c%fn|08wTvߘ $ڂlIL;:ҐmppG(kX!N*X$=ǽ/BBֹyěX>&8B;ؾ8(׭^P;@7MS$V4wIL8O*g ջ|FLN<-2c(H~>'e)i/(XFěeh-c5An!:ϡʜyYjuuW(Վ,x%ʽNb+% "/ s^]IXo "}g;+=cHLI%k>1_lh#3GHC"=2EWh Z`OR!PTkT܄Q3U\9F'9gÄ&J *R =-^ohmHɎB+OjEdE*-~NA$ 8ܙD(-3 S7[ *o)UQLDҼ px& \Ǚ {z@/faJAbṳL#s2LiQh&S"ouvC_Zɢ;n{nOxr$[nޤbD]*\^4BxP>Z5& PɺfE.yA<7/6FW|f 7]O nϪ#!֦̐iȥCKPi_uDUou0mTc@08p޲\*57в4i<6 XO}q/D'?# tna09ͰT ][h;)tThjF1Y! {hBbkg`},˫D[B)XV4bqTI(Z9& hؿ \daLop)B<3*73 9 T&,gpM68~;RAS&7.K=BqյDp}!?Ӽ=wJcA_Pxm"մMh:1߬ŵn +1}]x91E i1nݢ?/䏼ަ[J]@hq#ܻ7`xI!iBMTW_Ƌ2鹨D>tQ8O/OL=sl0cW#h{v-!)UjC>&U>W F 7g=-(Gm$ 7[u/i0|> NL {*_hꢞ-wl<bciG?}ƴ\Nfn7kͧ qٕ++lz ^"ns"XHH&ϷT95%cY4N! 6d65D@fo|Оy+Caig# )/rɭ;Qי;0nF,.<_RŜƂ{ 0Z6Q:_ sN'JZ{.=~Z('tG jsbul!3ꃅ"uC6u_x~x/h㳓,47c``@9rCq?Z/[Bk#|?9>+uТSArHrGiY*'bFj5>-y]-ceMC-J,ơiZ/zb64 K)G Nh 3D7iڻXuΙm W'F?(*޳dzgOFv"ÈmM'GioD2 _L}dX~mBl*LJRHR!ވ\K.5k><,u':fuŪ-3n04[.VFY*ǟ iW!M襁aVʓSER<0ѽ(eJ\R+qU8*#iὁzݯ}\A >v0cOԾb^^u^T*f/CHay}N(F?ޠrvƑnY =71SٞjTꂀ, + V4YhԽ'֋\:Ҳr6b+.z-;ۘ#IDvc tӮ{މ8Kh#3`9O(kWԚ|ψ46Mug9$U;j4l0r{mh]'#lSvt*U WO#/;QpXh)vQαVmF}w8r@Kwvo]RLr ^WCTlP1c_:ۭ[_N$%^uټf{jkr Mai!@y6iv8|]D HdKS +bp\mW]))ᮘ%)k F(zȳ[HE;mxLؘ筶ОNᖰ}%.}Aۢg+͜YTikX8D&5ß"`3nv%T*.Ӎ>1/\:rRA3B4 1x:PqaJUIcq>UOEhˮcQ*ssT(Lڋ.wqF]$`8Bύ6^\(~ t']qcOIDdK4oW GwՓ_ʱ`{@8*'+5w8X&/Noy.JÅa֣_R_mCEoSb2 Fak?}J;{@.Z,F4JIJ\!#2X ]f1? B*]w]Co"çpAY8D8=S?Mo21D%e.(geKC/i:mzfGʧE+=+|FŞ.Gh (ERC ʝ%C.j[qc<*iRtց@z]%&Ѷr!䲻x (u }/`{7~$ y7o_H-r<[H84kUo=T| rBOa,DŽIgbB6޽>7}>m`>doZ*Ce3=є Gj_mŘwd_86y'guv.WWפ;C3?8:$0]x"#mieUkyLK LIOs̑@nXPG:MLDy H [kҍxS-4#q~pr}"fh1|ȩ b` DF.aDPz,y%]Q jc "K`.<ЖEJ@XUdK@V_7N]B?a"4?Fa< =YWPS+Mʃ牭>?#AdGQB <u;9\{Et)O0;Moc9v{sƾl?71^Ԃ\\ cT&N ?qu8&A{#c3w߃a1sv뒴 ]VUI߿^a¬NXAhӣX([1j͓X| 3"y]q]~n1"TT^U "*siOhl *T't+/ =}-䊺 xN@pi<(#)ZM7>@ 2%ŀ%PZ Q=ߤZcPȦI45p+fjh7˙='90/ f^c%RoitpdEm"vvq!ݎMČ^q]1.".9?0\b+-Eߋ})rj;ss)TS@uDEߡ ?Gu4.Vƨum 5Erw=cQ]V_ ѫQh+ku>"SEp)oAk(i2?LhXOT9M-Q& Uȯ~-,j%eeӼ?BYWAn~>X#3ww`DPbH1qj$UU3G.s c3Ŷ*t񋥅 wm } =%AaNBsJC=flg R÷ { xXQe2\{armdi aH:6dFMWXQC[2Οj^$&a2+K:C>Jcuh48l۱1W ul.EKZL-_Pu4j2ʢ%L]`P7?k˽[V%15P7lט`O^AlP5rrW-C0hu%AUA;:1]=y~s0%|#c_d2STa6X.ܚY(1VU] Q[eP4'I>9y}[P`M9G}cwc7:Q8ڎ%e8V$#ꂲjq@S_*H0cv¾) V 7nvbpo7 =w ir^x@`/{Y/0G5MU hNS"T;v\Rsۮ4wUtlA'ut2g`צ<>Z{\@FqQf3|ƳEfoD/= q6d )QX J 5UwU)(:/l3+>s&,Ao||RI[;헋e괣l@+;;bʈ0yJlsE2 b[xH ֏WEH!|;̏4)4HGg0.4vf d/GT7Iyz4=MI1 VHtaM.q$ǓK T\q)/IRjRhpl=" :{{%0^d\LJMBg`w_<]3Ӣ #K[p*f&"Y'o+g܃!&Y:+=M腙*cd4fG kfm v48Oؒ,`Z Gwȴo=+5jIT&fJ0:l+cZ{]+=b y!>_I 6OǶ;3wixa g1ɜ3k6ye!*nsG=&erwVV`Ǥ8ˈ*HܴW&S)MFٜ0^{L,'Im ϿAӾW(kȣ]ܠh87zЉwJb׀v"fWm z8-'S4] xs{m*͏_b Ap1G&L8En-[\XPIJ0Q_,CLӣ=uƎጚ@cJy?$G5P\5n 97#|#Z 'Z*bzk \ʓJ(OFA}T!@ QlD=B/2lkBq)jH“s j$xص V9t2 !1X~O \7lQŨz!~Rfx\{'G:2Z50|\9Nd^͔P xstt +.;} Bsu8cjuXB}"+O#8Jd}ctP|,d=[ǽBm0GjĢ =-!r̷h= -%OS't||SO#SwONd+Q[3YFÜvB<oug%^&lp+BkR1p,Ξ/+LL*#͆e07QwA~ڗ5]_&Y%'AzJ l9D٭ K;O ÊkYy1 <{mUi[AxU'µůy{chE 5T͔v* +L غS43 \}˘)(Z}у2P H^R`$Y ~r1MSyvDfИr  H®G4jb +a`lfoX-%'j6V%ϝ<,-'ʌbĹ2 ' ֭ }(Vy7q=>0JdhKQkLKإZwm8gl~z2ݣf-L8=i{kp L fŁ![.&_`T1 X=>)Rr“a2Zb CWQ'1ioZ#fAu_sI$o!^qt`NxU&Bu JEu:!ɻ|:EM.81~W +~wl;xfo0Oُ\=C^l1ɮ}_ѫYn_{Ti-^VP`V:C,k K/,ݒYD%0^; 삪|r/MALEQLm 5ѾGG`/oզ ׭4MN{tv:-BOX|v5v%ΒcW̒5Ԁ<|< d)(vٚd2d-[isn@#?9 H &_6խ` dT M[=wz_a?Pr)PeP>:J]{u*O}QS#@H;)|:i,II,hae2O6J+H3LD?~J8"k]>ҝ @WaN*6aeIt5I\~(4ӄjBV(3ޘlwح졛>*N \~ϼf%ߖWI2m86# K^*9[-*ـ_AS<_>Bx8m@v{$u_ :LfyrlG $9,SGFwFQ+w @ޜD,⣪T3S~lK7 B k6( E 3 Ce8W^k[N5ȈČe=;N#ZObd»"P$I5VZ,i? cANQLF2[}7 F&#.Zc{GxR$2y5ձms=J@3?sƈIV(3/4aER.xhQ2&I &Ek[hA! 1 dktzKqM4s\U ,}HQꘃ`U z$ [H+Ґi؝{IܕQ_ʣMASCmM6pz"yI? 05ƦgaE;qZ~ lF|W=]Hٱ:vSA^c[S>(#Il1ku.Y`T|@-r(gh!R*,x恓[?sQGvD*^KˑTڿ0Gvf8ږ啲\fW\v 6 utKv#stG5Ǔk+E8/@SI$0ҽltqIlh8W7u_UiE%hEm'F%ŁmկE#ӻ]cnt&WwDwIR #+F[|޻ƫlV/鲝*]{''=%=Kj| `mѼ*o}T5}Wt)uջ&Dw5mFƪ-(d~l8+ls19`$Hۂƪh~1|E!D@ڱ6jYsSXF}80n\3RPoF6)!i#:k|=js;& e-/{/37{MK~?P@K{/}?-jh@άG?i3=~9vFE0OmkX<ֲ^9xOGh<g@]v"X_@-JZg#0S `f6qGU={ 5)NޕsӰD9|Wʿ![e'l0k'AgLXqWG lv pz5&X"kPǹ S䦝#$ .O ,Ho9sPV8I3oO2}$5^K{e/tЊ^ %!~3"?; [ YZ