aum-1:4.0.8-19.suse12.3.art$>G29G(?Gd   8 8>C?? b? ? ? ? <?8???z(89:.F==>=B=G=?H>?I??X@Y@Z@H[@L\@P?]AL?^E bF~dFeGfGlGCaum4.0.819.suse12.3.artAtomic Updater ModifiedAtomic Updater Modified (AUM) is utility that can check for and automatically download and install updates from Atomicorp.THflatbackAtomic Corporate IndustriesCommercialSupport System/Servershttp://www.atomicorp.com/linuxi386# suse12 wwwrun, 2.2.22, /usr/sbin/httpd2 (symlink) # # debian www-data, 2.2.22, /usr/sbin/apache2 (symlink) # ubuntu www-data, 2.2.22, /usr/sbin/apache2 (symlink) # Normal if ! grep -q ^tortix:x /etc/passwd ; then /usr/sbin/useradd -r -M -d /var/asl tortix -s /sbin/nologin || : fi if ! grep -q ^tortix /etc/group; then /usr/sbin/groupadd tortix || : filn -s -f /var/asl/bin/aum /usr/bin/aum # Hmmm #chown apache.apache /var/asl/data/audit chmod 770 /var/asl/data/audit #chown -R apache.apache /var/asl/data/msa #chown -R apache.apache /var/asl/data/suspicious chown -R root.root /var/asl/rules chmod 750 /var/asl/data/templates/template-cpanel* # Upgrade events if [ $1 = 2 ]; then # Upgrade config files /var/asl/bin/update_config.pl > /etc/asl/config.post cat /etc/asl/config.post > /etc/asl/config rm -f /etc/asl/config.post if [ -f /etc/asl/config ]; then chmod 0600 /etc/asl/config fi fi,;<* S' AB3E O (PEK((2n-V-2 IQ$*;8 &0o  RŌ V(((A큤AA큤AA큤큤AAATHTHTHTHTHTHTHTHTHTHTHTHTHTHTHTHTHTHTHTHTHTHTHTHTHTHTHTHTHTHTHTHTHTHTHTHTHTHTHTHTHTHTHTHTHTHTHTHTHTHTHTHTHTHTHTHTHTHTHTHTHTHTHd41d8cd98f00b204e9800998ecf8427e802d8823064cf10a8de66543c0f033eb8d60a830f3a455d52f466d03a9fc95a5d41d8cd98f00b204e9800998ecf8427e8f291dbd8c580593f7bdb8669181b85f84e2a4e90f78a251e06aac9e05ee047ceb9e9210f6110e45a99302b7560c7f99e90d2578a8bfe8d3f68652c3b7d2c7b5d41d8cd98f00b204e9800998ecf8427eeb3e237929bec5a2df4a513c6eb5a104e3fd827c20c940951d8a772180310fff94b0d88287b828da002c00c2753213438bb7d184d0cee5b46980b2ff3838925d1127c372b4e083943880b5961790a3b755c296a0ba4619b1c08334afb0e8981c604d7a8ca5bd532a6f7ee33dad9d9bc9e79c7db84eab1d4f11b77267ed2e43976e4d8404707364db75192c60ae9e76bdfb08f2c789793fcb5eb8225f4057bbc0c378ab562f832664dd9b7d1ce5292ea01647585fe8af6bc6f917f99bad9dc46a0af566683ec3a5250e820df9deb759280c7f6bf05b1c595fc950ed071c0ac394b34bac38d142fa7707bfbe3c1db0837da784bc10a844c63078afd63faa99106940bc89d571c3fed7658243726b1185d41de46e0f4127754bdbcc00bc34a3962c0af566683ec3a5250e820df9deb75928d0b001cb8ce9e352ac112979e8571485a01c85acc90e4ea2e5292a5af0c091f233edd89cc7633f85cd99154ad0fe8a0e62fca74af18c48b0c27cce4710372deaa412d68af3dcc89e229ef150e11bc3654e723a4b7828315c078f1ad62cf8f67a1e8e6dd9748893fff2a21a91574ff457cb8d8d815a8d9cbe152bac722cd8e19a5e089046729ecddecef35c388414141b238ebdac0639f269f562d547fc5645a28c0739962aea538a95b877de10d44e7b43ade103da424dd227e917984168efcc6239c3c4c9efbdff4ba3f7a69293203d19baf379223a506c8c9c92b67483139afebcef313925c24b48eda73cdaa68d8687e0b5207d1df46c423990ac923b5ed6984ee159c1ad694710d248a8b90cbd8970b804763f2be560e5d655780f4d70082e64bf2bd19f3f60f65017c33b8a58b3dff1a30d52e285f3229e9871628f7e47bc527d1efa6d7ffe388f6b8c81fe8c4524c207be39dae509b80ef63f7e3d395fb723574227b2f35756ef64b131bbab7c40cd9cc6c2ba15ed6665624a9154bf9aa5a17d255fb4943e6147a9f6c1b4290650e8c926a15ae7807286143844dfb10c6d25c82719ae0cdd3cd59f329659400dtortixtortixtortixtortixtortixtortixtortixtortixtortixtortixtortixrootrootrootrootrootrootrootrootwwwrunrootrootrootwwwrunwwwrunrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootroottortixtortixrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootaum-4.0.8-19.suse12.3.art.src.rpmaumaum(x86-32)   curl/bin/sh/bin/shrpmlib(PayloadFilesHavePrefix)rpmlib(CompressedFileNames)rpmlib(PayloadIsLzma)4.0-13.0.4-14.4.6-14.10.2TG@T>aT+SSDS@SS(5@R@RRa@RʚQ@Q@Q@QvwQkQdQb@QHS@Q=@Q@PP@P~@PO@PP @PN@PYPmz@Pj@PM@P;a@P@P@P@P@O@OOROiOĺ@OOr@OgOKp@OKp@O/O"OKN'@N=@Nk@N@Nx@Ns:@Nm@N[@NJ[NI @NBrN?N?N6@N-ZN(N%qN +N7@N N|@M,F@M%M$]@M @LNLΫLΫLeLLLL@L@L_LXLV@LT@LRLRLF@L;L4l@LT@LT@L @K/K@KK@K@KKKC)J@JJ@J:J@JzJx"Jv@Jn@Ji@J`gJT@JMJ8J7@J/@JB@I@IX@I@I@IIzIV@II@I@Support - 4.0.8-19Support - 4.0.7-18Support - 4.0.6-17Support - 4.0.4-15Support - 4.0.3-14Support - 4.0.3-13Support - 4.0.2-12Support - 4.0Support - 3.2.18-37Support - 3.2.17-36Support - 3.2.16-33Support - 3.2.15-32Support - 3.2.14-31Support - 3.2.13-30Support - 3.2.13-30Support - 3.2.12-29Support - 3.2.11-28Support - 3.2.10-27Support - 3.2.10-26Support - 3.2.9-25Support - 3.2.8-24Support - 3.2.7-23Support - 3.2.6-21Support - 3.2.5-19Support - 3.2.4-18Support - 3.2.3-17Support - 3.2.3-16Support - 3.2.2-15Support - 3.2.1-14Support - 3.2.0-12Support - 3.0.35-5Support - 3.0.35-4Support - 3.0.34-1Support - 3.0.33-1Support - 3.0.32-1Support - 3.0.31-1Support - 3.0.30-1Support - 3.0.29-1Support - 3.0.28-1Support - 3.0.27-1Support - 3.0.26-1Support - 3.0.25-1Support - 3.0.24-1Support - 3.0.23-1Support - 3.0.22-1Support - 3.0.21-1Support - 3.0.20-2Support - 3.0.20-1Support - 3.0.19-1Support - 3.0.18-1Support - 3.0.17-1Support - 3.0.16-1Support - 3.0.15-1Support - 3.0.14-1Support - 3.0.13-1Support - 3.0.12-1Support - 3.0.11-1Support - 3.0.10-1Support - 3.0.9-1Support - 3.0.8-1Support - 3.0.7-1Support - 3.0.6-1Support - 3.0.5-1Support - 3.0.4-1Support - 3.0.3-1Support - 3.0.2-1Support - 3.0.1-1Support - 3.0.0-1Support - 3.0.0-0.rc4Support - 3.0.0-0.rc3Support - 3.0.0-0.rc2Support - 3.0.0-0.rc1Support - 2.9.0-0.11Support - 2.9.0-0.10Support - 2.9.0-0.9Support - 2.9.0-0.8Support - 2.9.0-0.7Support - 2.9.0-0.6Support - 2.9.0-0.5Support - 2.9.0-0.4Support - 2.9.0-0.1Support - 2.2.11-1Support - 2.2.11-0.2Support - 2.2.11-0.1Support - 2.2.10-1Support - 2.2.10-0.6Support - 2.2.10-0.5Support - 2.2.10-0.4Support - 2.2.10-0.3Support - 2.2.10-0.2Support - 2.2.10-0.1Support - 2.2.9-1Support - 2.2.9-0.1Support - 2.2.8-4Support - 2.2.8-3Support - 2.2.7-1Support - 2.2.7-0.1Support - 2.2.6-1Support - 2.2.5-2Support - 2.2.5-1Support - 2.2.4-1Support - 2.2.3-1Support - 2.2.2-1Scott R. Shinn - 2.2.1-2Scott R. Shinn - 2.2.1-1Scott R. Shinn - 2.2-1Scott R. Shinn - 2.2-0.beta3.13Scott R. Shinn - 2.2-0.beta3.11Scott R. Shinn - 2.2-0.beta3.9Scott R. Shinn - 2.2-0.beta3.6Scott R. Shinn - 2.2-0.beta3.5Scott R. Shinn - 2.2-0.beta3.2Scott R. Shinn - 2.2.0-0.beta2.1Scott R. Shinn - 2.2.0-svn090717.1Scott R. Shinn - 2.2.0-svn090708.3Scott R. Shinn - 2.2.0-svn090703.1Scott R. Shinn - 2.2.0-svn090617.1Scott R. Shinn - 2.2-0.svn090615.1Scott R. Shinn - 2.2-0.svn090610.1Scott R. Shinn - 2.2-0.svn090521.1Scott R. Shinn - 2.2-0.beta1Scott R. Shinn - 2.1.0-0.svn090423-1Scott R. Shinn - 2.1.0-0.svn090421-2Scott R. Shinn - 2.1.0-0.svn090421-1Scott R. Shinn - 2.1.0-0.svn090416-1Scott R. Shinn - 2.1.0-0.svn090414-1Scott R. Shinn - 2.1.0-0.svn090310-1Scott R. Shinn - 2.1.0-0.svn090309-1Scott R. Shinn - 2.1.0-0.svn090306-1Scott R. Shinn - 2.1.0-0.svn090302-1- Update Aum, Add new update servers - Feature Request #1637, Suppress firewall errors on systems that dont support them - Feature Request #1638, Suppress ip_set loading messages - Bugfix #1631 - Permissions wrong on clamav signatures files - Bugfix #XXX, fix for validation behind proxy with no port - Bugfix #XXX, for validation behind proxy with no l/p- Add SSL Protocol management for apache SSL - Add Ciphersuite management for apache SSL - Add SSL Protocol management for Courier POP/IMAP - Add remote syslog/secure syslog server management - Add support to archive logs to Amazon glacier - Update Core, adds ip address to debug / completed with errors output from cli - Update Core, skips sig reload during whitelist add/remove events - Bugfix #XXX, suppress ipset delet message output - Bugfix #XXX, ASL Web, correct issue with adding/removing vhost settings in asl web corrects wildcards when running malware scans from web - Bugfix #XXX, ASL Web, fix condition with scan results not being handled correctly in ASL Web- Add Threat Intelligence Engine - Add ipset support to the ASL Firewall - Add Apache 2.4 support for cpanel - Update, ASL Web, Adds confirmation to geoblocking from report windows; - Update, ASL Web, Updates to reporting engine - Update, ASL Web, adds fallback to tld trigger; cleaned up mysql during web validate - Update, AUM, Add all blacklists to update event - Update, AUM, Add Timestamp checking to download event for files - Update, Core, Add TSA dir for dynamic data tracking to tortixd - Update, Firewall, Added in logic to prevent 127/localhost from ever being shunned to the active-response table - Update, Firewall, Changed active-response asl-firewall init script to use its own chain - Update, Firewall, Updates to Firewall Intrusion Protection System - Update, Firewall, Move whitelist to load before other firewall elements - Update, Firewall, IP's on the whitelist will always be excluded from the blacklist rules - Update, Firewall, Move service acl's ahead of blacklists - Update, Firewall, Move blacklist to load ahead of RBL lists - Update, Firewall, Added in logic to check for firewall comment support and to not use comments on systems that dont have the module loaded - Update, Firewall, Added in legacy ip tracking modules to asl-kernel startup script for really really old kernels - Update, FIM, Ignore /usr/src by default - Update, hids_check, add option to enable/disable tcpwrappers active response - Update, installer, Add logging to uninstaller - Update, mod_evasive, Add more MSN/Bing ranges to mod_Evasive - Update, mysql_check, Add detection for wait_timeout, skip-networking, skip-name-resolve - Update, psa_check, add support for new proftpd.d/ structure. - Update, psa_check, use the new plesk 12 API to manage ssl settings. Move TLS files under /etc/proftpd.d/ structure. Retire the proftpd-tls.conf file and the fixed includes used in proftpd.conf - Update, T-WAF, Add ACL support - Update, waf_check, add vulnerability checks for disabled rules by domain and globally - Feature Request #115, malware blacklist using ipset - Feature Request #900, add mod_qos support - Feature Request #1208, ASL Web: Add in firewall whitelisting - Feature Request #1532, use swap in ipsets to eliminate outage window caused by loading the - Feature Request #1570, Add in "this may make several minutes" warning to "Checking versions ... " - Feature Request #1589, Flush all firewall rules on uninstall of ASL - Bugfix #1594, fixes force mode when enabling a rule - Bugfix #1600, lint whitelist entries in asl-firewall - Bugfix #XXX, ASL Web, corrects check against archive tables when searching the last week - Bugfix #XXX, ASL Web, fixes bug in geo lookup in report windows - Bugfix #XXX, ASL Web, corrects handling of garbage results when fetching scan/aum log updates - Bugfix #XXX, ASL Web, fix parent tags in asl-web for non string types - Bugfix #XXX, Core, handling for 0 byte rules file - Bugfix #XXX, hids_check, fix ossec-execd check is still made if ACTIVE_RESPONSE is disabled - Bugfix #XXX, psa_check, Minor fix to exclude plesk 9 configs from plesk 12 and up - Bugfix #XXX, rblcheck, fix email reporting for rbl check subsystem - Bugfix #XXX, T-WAF, remove t-waf configs if waf is disabled- Add suport for Plesk 12 - Removed support for asl -u and asl -uf, this is now exclusively handled by aum - Update genera_checks, Add abrt to service disable configuration - Update database-setup, Add warning on skip-name-resolve - Update ASL web to handle long report names in menus - Update Firewall, Changed advanced port scan so it wont alarm on loopback - Update Firewall, add IP validation to blocklist event - Update asl_db_rotate, aslw_archive_tmp cleanup when db archiving is disabled - added force_archive option to db rotate - added force_clean option to db rotate - Update cpanel templates to detect if the module directory has been deleted - Feature Request #1576, add syslog & rsyslog to watchdog - Bugfix #1580, ASL Web, omits ASL-ACTIVE-RESPONSE from running.fw - Bugfix #XXX, ASL Web, fixes web display issue when rules are disabled/enabled from cli - Bugfix #XXX, ASL Web, fallback data on waf event detail to be full_log rather than [msg ..] - Bugfix #XXX, ASL Web, suppresses netstat error in web - Bugfix #XXX, ASL, Fixes ALLOW_escapeshellarg typo in config.template- Aum update for uncommon segfault condition through cron.- Add debian jessie detection to AUM - Update cpanel build events, add rpmbuild dependency into templates - Update AUM, RULES_PATH support to the fixed vhost & global file creation (this is needed for planned apache 2.4 support) - Feature Request #1519, ASL Web, Add snat,dnat,masquerade,redirect handling to ASL Web firewall interface - Feature Request #1568, generate vhost php.ini files from master file (PSA_PHP_DOMAIN_POLICY) - Bugfix #1571, waf_check, waf_check error on asl -s -f when MODSEC_ENABLED=no - Bugfix #1573, AUM, fix validate_asl Nothing from request condition - Bugfix #XXX, ASL Web, Fixes event detail viewing on blocked ips- Add reputation system - Add AUM channel support (-testing) - Add domain blocking tab to blocking window in ASL Web - Update, ASL Web, allows modification of default asl web user group - Update, ASL Web, Adds alert in web if invalid config settings detected - Feature Request #1304, ASL Web, makes unapplied updates vuln open a window with contents of updates_pending.log - Bugfix #XXX, firewall, load whitelist before RBLs - Bugfix #XXX, aum, fix condition where a null waf_engine_versin would be detected creating a condition where rules from un-allowed versions would be copied in on an -u event.- Update to ASL 4.0 (Pineapple) - Full changelog /var/asl/Changelog- Revoke monitoring exim rejectlog - Bugfix #XXXX, Update for WAF rule manager - Retire 71000 dynamic waf rule range- Add detection for exim log files - Bugfix #1433, Rule manager, correct complex rule editing condition- Feature Request #XXX, Add suport to allow NFS (ALLOW_NFS=yes/no) - Bugfix #XXX HIDS, retire use of if_sid in rule exceptions - Bugfix #XXX, HIDS, templates installed before they are re-generated in aum update event- Add support for new ossec platform - update ignored files for integrity checks - Bugfix #XXX, ASL Web fix for stat reporting - Bugfix #1195, T-WAF, fix nat rule creation for Plesk type- Feature Request#1149, php_check, add check for php display_errors - Bugfix #1161, php_check, register_globals set to "no" instead of "off" - Bugfix #1162, php_check, allow_url_fopen set to "no" instead of "off" - Bugfix #1163, php_check, allow_url_include set to "no" instead of "off" - Bugfix #1164, php_check, change safe_mode behavior from yes/no to on/off. While yes/no is valid, other tools test for on/off - Bugfix #1179, ASL Web, Rule configuration for WAF-HIDS bridge rule id's 300000-399999.- ASL Web, performance improvements on blocklist - ASL Web, performance improvements on validation- ASL Web, performance improvements on blocklist - ASL Web, performance improvements on validation- Update asl-firewall, use internal sqlite database for active-response tracking - Update ASL Web, support socket level access to internal sqlite active-response database - Update Requires to tortixd 2.2.24 - Update to cpanel template to create /var/log/httpd symlink from build template and waf_check - Update asl-kernel, add tcp_diag to default load (rkhunter dependency) - Update asl_db_rotate to use smaller mysql packets - Bugifx #XXX, change LASSO fw to use FW_LASSO_LOG - Bugfix #XXX, asl-firewall, improve TOR ruleset checking on clear events- Update ASL Web, safari styling fix - Update asl-firewall, change behavior of asl_flush to ignore when the chain or table is not defined. - Feature Request #122, add rbl monitoring function for hostnames & IP's (/etc/asl/rbl-monitor) - Feature Request #929, Adds detection for audit_log for the t-waf in /var/log/tortixd - Bugfix #1052, When adding a new T-WAF for a local service is added before ASL-firewall-input, but after blacklists, portscan, etc rules. Additionally change behavior of t-waf add / delete event to reload the whole firewall policy. - Bugfix #XXX, changed rules-only setting to not include kernel updates. - Bugfix #XXX, for tor-blacklist, CHAIN2 was not defined - Bugfix #XXX, improve version checking for mysql regex- Fix for asl-config.xml- Update, asl-module, Add inet_diag (rkunter->unhide requirement) to boot - Update, asl-firewall, New advanced portscan detection system added, including grab, syn scan, stealth and multi port slow port scan detection - Update, asl-firewall, Updates to state tracking settings - Update to source-build apache-hook for directadmin, moves routines in from installer - Update, asl_cli_c, use method GET when POST is empty - Update, asl-firewall, additional logging options added for firewall - Update, asl-firewall, Enhancements to UID/GID logging on outbound connections - Feature Request #980, HIDS, add GeoIP support - Bugfix #XXX, AUM, move kernel update check outside of ASL core updates check - Bugfix #XXX, fix for firewall ACL system cant handle names in the same group, and multiple acl files in /etc/asl/firewall/ - Bugfix #1132, add protocol dimension (tcp, or udp)to service checks telnet/rsh/rlogin - Bugfix #1128, run ACL test on /var/asl/tmp/- Update, firewall, Updates to invalid packet tracking - Update, firewall, add UID and GID tracking on outbound MTA connections - Feature Request #1117, ssh_check, allow root / password authentication override for ADMIN_USERS - Feature Request #1118, general_check, add vulnerability check for POSIX ACL support- Add dedicated kernel channel support (beta) - Add vulnerability dialog for the waf not being installed - Update, firewall, to tortixd ACL system - Update, mysql checks, add vulnerability check for symbolic links - Update, mysql checks, add check/fix for query caching - Update, cpanel easyapache hook, will only run fix mode if configuration is complete - Update, configuration dialog, improved tty detection - Update, ASL Web, performance improvements - Update, Installation, Add in old_password detection routine - Update, Configuration, stdin flush event to cover for multiple enter conditions when testing db connection - Update, Configuration, Add test when client IP is not detected - Update, ASL-firstboot, improved network interface detection (post install reliability check) - Update, asl core, Adds better dupe/non-numeric rule checking when enabling/disabling rule from CLI and Web - Feature Request #843, Add basic firewall dynamic ACL rule support (alpha feature) - Feature Request #1080, ask in configuration if the system is a VPS - Feature Request #1083, add vulnerability checks for KERNEXEC and UDEREF - Bugfix #XXX, asl_db_rotate, fix for max_packet_size causing a memory exhaustion error - Bugfix #XXX, fix condition where max email per hour set to 0 would not insert invalid setting in config - Bugfix #1063, safer T-WAF/WAF permissions management on audit directory in mixed cpanel environment - Bugfix #1077, SSH password is not being returned to proper auth condition on update with previously defined admin users - Bugfix #1078, remove references to fixed tty from configuration - Bugfix #1082, improved locking for asl and aum to handle cron conditions. - Bugfix #1085, default value PHP_EXPOSE_PHP - Bugfix #1085, Add description field on HIDS rule customization - Bugfix #1089, enable FW_TCP_TIMESTAMPS by default - Bugfix #1094, add flush event for known named tables - Bugfix #1098, correct typo in Safebrowing setting - Bugfix #1102, incorrect rule id determination for waf rule 340162 in asl web - Bugfix #1113, Installer bug: value 'off' not accepted for Active Response (changed to yes/no)- Feature Request #244, Local DNS check when MODSEC_RBL is enabled - Feature Request #639, Add all clamd switches/options into ASL Web - Feature Request #947, add vulnerability checks for mysql version - Feature Request #995, Report if mysql is not configured with log-warnings=2 - Feature Request #997, monitor plesk httpsd_log - Feature Request #1018, New T-WAFs will default to SecDisableBackendCompression - Feature Request #1023, add firewall policy output group for Spamassassin modules: dcc, razor, pyzor - Feature Request #1039, add feedback to uninstaller - Feature Request #1044, add lint code to test the database connection during configuration. Failure will fall back on localhost, and set the "root" username to reserved. - Feature Request #1047, Firewall: refresh policy on a geo firewall rule update - Bugfix #XXX, ssh_check, default USEDNS to "yes" - Bugfix #XXX, ASL Web, corrects ordering of web attacks report - Bugfix #1002, psa_check, only test for psa-proftpd if it is instaled - Bugfix #1003, AUM, add tortix-waf to the update list - Bugfix #1014, Blacklisting, Change blacklist policy to use the update module instead of a full reload - Bugfix #1058, fix condition where /etc/sysconfig/asl-firstboot is /etc/init.d/asl-firstboot- Add firewall group policy for plesk key updates on port 5224 - Add int/min/max linting to ASL Web configuration for integer based fields - Update ASL Web, to add more debug information to false positive mailings - Update ASL Web, to call aum directly - Update HIDS, automatically exclude high volume portsentry files from reporting - Update to the cpanel include removal regular expressions - Feature Request #534, Add into ASL Web the internals.conf settings for ossec-syscheckd - Bugfix #1045, Configuration: Upate Frequency reported default value of [all] - Bugfix #XXX, reverted bugfix 768 which escaped @ in mail operations - Bugfix #XXX, disable/enable WAF (embedded) through aum- Update to firewall, Enhanced logging features added to invalid packet tracking system - Update to ssh_check, if the banner is not set or file does not exist default to /etc/asl/banner - Feature Request #818, automatically apply (restart) SH rules on -u event if new SH are detected - Feature Request #1011, mask mysql password during setup - Bugfix #1030, mysql_check, incorrectly reporting LOAD DATA vulnerability - Bugfix #XXXX, aum, duplicate cpanel events for -uf mode - Bugfix #XXXX, cpanel exclude mail.local/main.default Include settings - Bugfix #XXXX, asl_db_rotate, fixes for database locking - Bugfix #XXXX, ASL Web, restrict full scan from HIDS false positive reporting - Bugfix #XXXX, ssh_check, if Banner is set to null, or does not exist it can kill sshd (Case #20810) - Bugfix #XXXX, clamav_check, remove reference to proxy settings in the safebrowsing setting - Bugfix #XXXX, psa_check, insert newline after Scoreboard setting for proftpd- Add Self-Healing for tortix db corruption cases - Update to add more correct database locking in asl_db_rotate - Update to mysql_check to detect other implementations of local-infile - Bugfix #1015, Increased timeout on updates - Bugfix #1021, duplicate directives when editing firewall rules - Bugfix #1024, incorrectly reporting Notifications to address failure - Bugfix #1025, if the latest waf_rule_version cannot be determined, assume 0 - Bugfix #1027, restrict umask enforcement to just new-file creation & management- Alpacalypse release! The end draws nigh! - Minor change to handle # in asl-update fw script- Added relro linker build flags to ASL core modules - Update firewall, rapid brute force detection system - Update AUM, increase downloader timeouts from 60 to 300 - Update to cpanel pre/post event detection - Update to file operations, working filenames are random generated with more secure umask to mitigate potential race conditions - Update ssh_check, elimate duplicate file operations that are now handled by verify functions. - Update to ASL db rotate, handle small max-packet mysql conditions more gracefully - Bugfix #XXX, for vrfy_function to enable settings if so set by user. Condition will fix to user setting, then test for compliance. Missing configuration tokens are now added if not detected. - Bugfix #XXX, firewall, Fixes extraneous -m entries when editing firewall rules - Bugfix #XXX, firewall, Fixes incorrect handling of options with multiple space separated parameters when editing firewall rules - Bugfix #XXX against condition where FP report file does not exist. This will now return an error 1 - Bugfix #XXX, Fixes HIDS rule id and description displaying in WAF false positive emails- Add automated allow rules for updates added to firewall - Updates to firewall portscan detection system - Updates to firewall shunning system - Updates to firewall broadcast ignore option - Updates to firewall tortixd ACL system - Updates for Directadmin specific WAF configurations - Updated cpanel/directadmin build hooks to detect pre & post event event implementation more effectively. - Updated cpanel/directadmin build event to run mod_evasive_check - Updated cpanel/directadmin build hooks to clear the configurations before building to prevent Control Panel induced lint errors from stopping the build process. - Updated cpanel/directadmin build hook to validate permissions against the apache hooks - Bugfix #XXX, for setting the standard/nonstandard shun period correctly - Bugfix #XXX, add nat flush & duplicate detection to fw_waf_policy in T-WAF- Removed internal dependencies on perl - Feature Request #XXX, add update frequency dialog to configuration - Feature Request #XXX, add dialog to database-setup to indicate the hostname connections are being attempted. Preventing Motopet conditions when someone says "yes" when they really mean the hostname of the server. - Bugfix #XXX, increase downloader timeouts from 10 to 60 - Bugfix #XXX, fix double restart condition in waf_check on cpanel - Bugfix #XXX, add pre/post easyapache verification hooks to handle conditions where 3rd party cpanel extensions manipulate the file without checking to see if it was there first. - Bugfix #XXX, check to see if mod_sed is installed before installing config on cpanel systems- Add advanced firewall module - New logging capabilities for fast mode - New advanced portscan detection added - Updates to bad packet detection - Updates to Stateful Packet Inspection options - New firewall capabilities to block invalid packets - Added WAF inline documentation - Update to asl, update list modules help dialog - Update to aum, add error messages to detect host resolution & timeouts w/ distributed update checks - Update to aum, install firewall extensions for ASL kernel environments - Update to hids_check, if ossec.conf is not detected, create it (hids_temlate_generate) - Update to hids_check, only run whitelist check if config exists - Update to kernel_check, add GID setup for grsec groups - Update to cpanel build hook, link against /opt xml and pcre libraries - Feature Request #117, ASL Web, add notes field to report false positives - Feature Request #614, ASL Web, Auto-clear the cache, or use versioning to prevent caching when code changes - Feature Request #708, automatically enable mod_uniqueid for cpanel - Feature Request #712, add mod_evasive and mod_sed for source environments - Feature Request #824, enable safebrowsing configuration in freshclam - Feature Request #850, ASL Web, Create individual WAF rule score for reports - and not roll up into 60118 - Feature Request #861, ASL Web, Add "interface" columb to firewall rules manager - Feature Request #882, ASL Web, Add the autocomplete=off flag to the web login form on port 30000 as an option - Feature Request #911, Add initial feedback on asl -u for yum events - Feature Request #916, Add proxy support for FreshClam configuration - Feature Request #924, ASL Web, Set timezone in ASL web console to system timezone - Feature Request #927, AUM, replace wget with internal function - Feature Request #937, mysql checks for load-infile - Feature Request #938, added support to ssh_check to manage UseDNS - Feature Request #939, add checks for telnet, rsh, rlogin. New function, check_open_port to test for open services - Feature Request #946, check for cron scripts belonging to web server users - Feature Request #948, Non-root UID 0 accounts check - Feature Request #950, add checks for running syslog/rsyslog/klog daemons - Feature Request #971, monitor tortixd in psmon. - Feature Request #972, add support for generating Modsec 2.7 compatible rules - Feature Request #964: If cpanel does not have mod_security2.so installed fix mode will restore it - Feature Request #974: firewall, add drop & log for invalid packets - Feature Request #976: enable syncookies in firewall by default - Feature Request #XXX, Add service checks for: anacron, avahi-dnsconfd, canna, cups-config-daemon, FreeWnn, iiim, mDNSResponder, and sbadm (independent SSH daemon used by server beach) - Bugfix #807, make vhost domain excludes case insensitive - Bugfix #905, Duplicates Include conf.d/*.conf in httpd.conf - Bugfix #915, fix for username/password support on yum w/ authenticated proxies - Bugfix #926, ASL Web, FP reports on HIDS events not sending full event - Bugfix #932, disabling local t-waf redirect does not clear rules - Bugfix #933, FW_OUTPUT_MTA off will not clear rules - Bugfix #940, asl -u does not generate tortix_waf.conf. - Bugfix #953, add database drop event to uninstall. Convert mysqladmin in database setup to batch process. Mysqladmin cant handle the TTY (or lack thereof) from the wget method - Bugfix #961: add ability to clear the firewall policy - Bugfix #969: ASL Web, Report False Positive popup does not correctly display URL - Bugfix #XXX, add full path to ifconfig - Bugfix #XXX: fix for monitoring plesk maillog. Retire monitoring /var/log/psa/maillog - Bugfix #XXX, reset disable_functions if set to warn-only (undo basically) - Bugfix #XXX, disable proxy settings if they were first enabled then disabled - Bugfix #XXX, add redundancy for setting permissions on cpanel & directadmin script build hooks - Bugfix #XXX, add Safebrowsing token to clamav template- Added self healing for /dev/null - Bugfix #895: ASL Web now aware of level and options settings from source rule xml files - Bugfix #XXX, change behavior of HostnameLookups to only disable if both set to no, and in fixmode - Bugfix #XXX, handle condition where config tokens contain = in the value- Feature Request #161: Auto-whitelist installation IP prompt during configuration - Feature Request #594: Extended version update checks to support the distributed update system - Feature Request #899: Add support to WAF for Auto-Whitelisting search engines - Feature Request #908: Add reset button to Rule manager in ASL Web - Bugfix #899, support exclude-kernel when initiated during installation to both it & configurtion update type. - Bugfix #XXX, correct NULL condition for managing rules without config tokens in /var/asl/rules/modsec/waf_rule_config - Bugfix #XXX, add reporting to -u event. This updates security modules data- Add distributed updates support to AUM - Add flush function to asl-firewall, this will clear all rules (ASL or otherwise) - Add status support to asl-firewall, this will display the current firewall policy - Update, hids_check, change from /var/log/psa/maillog to /usr/local/psa/var/log/maillog - Bugfix #XXX, eliminate benign GC warnings - Bugfix #XXX, If HTTP_PROXY is a white space, treat it like it is disabled- Update to firewall blacklisting, convert from Add to Insert event - Increased memory limit of asl_db_rotate to 256m - Update to T-WAF, changed local proxy mode from Redirect to DNAT - Added multiple IP detecton to local proxy T-WAF - Updated configuration setup, this moves ASL Web installation into configuration and reorganizes the configuration layout for better integration in ASLe. - Add proxy support to AUM, HTTP_PROXY, HTTP_PROXY_PORT, HTTP_PROXY_USERNAME, HTTP_PROXY_PASSWORD - Add basic HTTP Proxy tokens. This is only going to be implemented in AUM at this time- Bugfix #XXX, remove unimplemented exclude element from asl.repo template temporarily. - Bugfix #884, update to support legacy function type.- Added aum, the Atomic Updater Modified - Added permissions check to /var/asl/data - Removed IP fowarding requirement in the T-WAF - Bugfix #884, add phase: element to vhost WAF rule management- Add support for dynamic /etc/asl/config updates - Add support for dymamic template updates - Merge Anti-Evasion WAF groups into a single group - Deprecated ip_forward requirement in T-WAF - Deprecate WAF_ENABLE setting, this is no longer necessary - Deprecate recursive setfacl, this could take a very very long time. New behavior is just to do the top level audit - Feature Request #721, Add ossec signatures as asl -u updates - Feature request #864, catch the tortix database already exists error database-setup will now prompt to re-install the database if it detects that it exists - Feature Request #877, disable SafeBrowsing in freshclam by default - Add function to create waf-config if it does not exist directory, and subdirectories in that dir - Bugfix #XXX, check for existance of /proc/sys/net/ipv6/conf/all/accept_source_route (needed for older kernels) - Bugfix #XXX, Fixes for removing old asl_waf.conf files, updates for newlines in proxy statements - Bugfix #XXX, add Listen directive and trailing slash on proxy directives - Bugfix #XXX, correct order of asl_waf output for plesk configs- Add asl-port-check to dynamic updates - Add dynamic updates for base config - Add dynamic updates for firewall modules - Add dynamic updates for templates - Deprecate PSA_WAF_ENABLE (now part of T-WAF) - Deprecate internally distributed asl-port-check - Feature Request #721, add ossec signatures to update event - Bugfix #XXX, ASL Web, Fixes disabling a rule for multiple vhosts - Bugfix #XXX, add output rule to accept all from localhost- Update to ASL Web, add HIDS rules to fp handling - Bugfix #XXX, change permissions-check to not do a generic chmod in the /var/asl/data directory - Bugfix #XXX, only reload firewall rules via fix mode - Bugfix #XXX, correct condition where clamav would not be disabled in psa-proftpd when clamav was set to no - Bugfix #XXX, add reject to output policy - Bugfix #867, suppress output from HIDS cleanup event- Updates will now track the release field and in the -v output - Update to open port tracking system - Bugfix #XXX, ASL Web, Fixes scrollbar in connections window; removes presence check for stateful rule in firewall rules - Bugfix #XXX, disable --noflush on the running.fw settings - Feature request #853, return error if DAZUKO use is detected, and ASL kernel / modules are not present - Feature Request #857: Extend --permissions-check to all ASL config files and session dirs- Add rkhunter update routine for recommended ALLOWHIDDEN, ALLOWDEV, ALLOWPROCDELFILE, ALLOWHIDDENDIR, and SCRIPTWHITELIST - Add in "requested" option to the FW_TCP_ECN setting - Update to T-WAF embedded reporting - Update to HIDS suspicous process detector - Update ASL Web to automatically determine the time-zone - Update default for TCP_WINDOW_SCALING to yes/enable - Feature Request #545, adds x-frame denial to ASL-Web - Feature Request #547, Add secure session to cookies to ASL-Web - Feature Request #548, Add httponly to session cookie to ASL-Web - Feature Request #625, protect ASL session, temporary and log directories from change of ownership/perms - Feature Request #705, enforce alpha-numeric passwords during configuration - Feature Request #779, provide option to configure the SSH port - Feature Request #848, make permissions checks more efficient- Add Fast-Mode firewall system - Add New monitoring capabilities added: load, diskspace and listeners - Update, T-WAF, force fix mode if tortix_waf.conf is not detected - Update, ASL Web, firewall rule changes are saved across reboots - Update, Configuration, mysql administrator username defaults to "root" - Update, File integrity, add aqueduct directories to ignores - Feature Request #628, Add MTA firewall rule group (/etc/asl/firewall/mta-output-acl) - Bugfix #XXX, ASL Web, Fixes issues with rule edit in firewall window - Bugfix #XXX, firewall, detect /proc based controls more accurately - Bugfix #XXX, add more redundancy to waf/tortix proxy configs. This will now purge old versions when configs are blank, in addition to linting configs when they are not blank - Bugfix #XXX, only write to file if $waf_redirect has something in it - Bugfix #XXX, ssh_check, fix for enabling password auth when ADMIN users are not defined - Bugfix #XXX, asl-firstboot, fix path for asl-firstboot's network info file, and add in a post-success cleanup event- Add firewall settings for /proc based controls - Add Compliance mode checks - Add disableexcludes to asl -u events - Add asl-waf-module dependency - Update, move firewall rule event to only trigger if there is a geomap update download - Bugfix #XXX, add "" around PHP_* functions.- Add Tortix WAF (T-WAF) - Retire plesk-waf-setup (replaced by T-WAF) - Update, Add UNSUPPORTED to version info when distribution cannot be identified - Update, support for status to the asl-firewall init script - Update, ASL Web Corrects corrupt serialized data error - Update to asl_db_rotate, TODO what is token here for archive on/off? - Update, Changed default behavior of database setup to yes when selecting database installs - Update, create a common asl firewall rule clearing function, used by the global asl-firewall init script - Update, ASL Web, categories are now sorted alphabetically - Update, Add check for /etc/asl/waf-config on permissions check - Update, Ignore /usr/local/psa/var/cgitory by default in integrity checks - Feature Request #425, add support for the Spamhaus lasso blacklist - Feature Request #442, add blacklit support for TOR exit nodes. Adds new config token, FW_TOR - Feature Request #785, add support for the Dshield blacklist of top attacking networks. - Feature Request #792, add syn-flood protection. New config token: FW_SYN_COOKIES - Feature request #814, HIDS limit email notifications to alrts greater than level X - Feature Request #820, WAF deny & redirect management subsystem. Adds the config tokens WAF_DEFAULT_ACTION, and WAF_REDIRECT_URL - Feature Request #XXX, add port tracking field for "embedded" waf type - Bugfix #XXX, change from reload to graceful restarts with tortixd. This should fix blank asl -u windows in ASL Web - Bugfix #XXX, installer will now store network info to / instead of /tmp. - Bugfix #XXX, Fix for remote database support - Bugfix #XXX, Fix for continue y/n prompt in database setup - Bugfix #XXX, Remove a mod_security binary if its already there before installing a new one. This corrects a really wierd condition when it already exists on source/anarchy installs.- Add clock to ASL Web - Add new update display fields to WAF updates, Rootkit Protection, and Shell protection - Update to configuration verification engine, FIXED is only reported if a setting is the secure state. Otherwise the true vulnerablity level is displayed. - Update to integrity checks, /etc/webmin is now ignored by default - Feature Request #XXX, hids_check will now maintain the localtime file in chroot in accordance with /etc/localtime - Feature Request #500, Add in the -warn flag to only show warnings / failures in scan and/or fix mode - Feature request #532, add support for SecRequestBodyNoFilesLimit and SecRequestBodyInMemoryLimit - Feature Request #709, add checks for suexec logs - Feature Request #768, add support to rkhunter check to modify /etc/sysconfig/rkhunter - Bugfix #XXX, php_check can now make insecure settings. - Bugfix #XXX, update to asl_db_rotate to handle rotating larger database sizes (1+ million rows) - Bugfix #XXX, tortixd rule reloading is moved out from the ASL Web interface, and into a queue system. This prevents the thread from dying in an interactive session. - Bugfix #289, correct SMTP_AUTH password checks to map to valid mailboxes. Correct output of FTP check to show pass word column in order - Bugfix #496, detect /var/log/snort/alert - Bugfix #735, hids/waf checks for whitelists under 255 would always report 255 or greater- Add Vulnerability check for out of date WAF - Feature Request #757, Add top 10 attacked domain(24h/72h/1 week) report to ASL Web - Add EOL check for EL4 Platforms (CentOS, RHEL) - Feature Request #699, Update to ASL Web, will create the HIDS databse if it is not detected - Update to Rule Manager, WAF rules now cover HIDS rule 60121 - Update to ASL Web, password fields are now masked - Update to database-setup, will report a failed codition on loading the HIDS db - Update to rule manager, ossec.conf is restored if it is removed - Update to update module, self healing rules are automatically added after an update. asl -s -f is no longer required - Update to update module, detail view for HIDS and WAF update event to list rule subgroups being updated - Update to update module, source environment will now check for and update WAF modules - Update to ASL Web, warnings are now displayed when changing PTRACE_HARDEN for plesk environments - Update to update module, tortixd waf is now reloaded on a rule update - Update to plesk-waf-setup to manage ACL's on directories using the audit dir - Update to plesk-waf-setup, IP can now be passed in from the command line - Update to database-setup to support the resetting the database the command line - Feature Request #XXX, add support for multiple users of posteasyapache - Bugfix #XXX, template correction for accesslog formating on plesk 9 - Bugfix #XXX, for people with bad profiles and /sbin is not in their path. - Bugfix #XXX, deprecate EXECVE_LIMITING in ASL. Upstream merged this into vanilla- Update to kernel_check to deprecate eventve() checks - Bugfix #XXX, add full path info to plesk-waf-setup for environments with no default path - Bugfix #XXX, update for plesk 9 waf template- Add Plesk WAF module for 8.6 thru 10.x - Add vulnerability check for Plesk CVE-2011-4734 - Update to default audit log retention policy, lowered from 30 to 14 days - Update to RBL configuration, this will now warn the user about performance considerations - Update ASL Web to include debug messages if the mysql db has become corrupted - Feature Request #XXX, add support for multiple users of posteasyapache - Feature Request #XXX, Add support for CPANEL_DISABLE_POSTEASYAPACHE, this disables modification of posteasyapache - Bugfix #XXX, rkhunter has been disabled test - Bugfix #XXX, asl.repo will be generated if it does not exist - BugFix #741, Add detection for ossec-hids-server- Add support for Oracle Linux 6 - Update to ASL Web, Moved false pos/neg alert messages to html and made urls in message texts linked - Update to hids_check, update function has been externalized in preperation for a dedicated update module - Feature Request #XXX, regenerate asl.repo if it has been removed - Bugfix #XXX - Update to cpanel-easyapache to support direct install - Bugfix #728 - change skip-networking exit event to a force enable, and restart mysqld event- Update ASL Web, Adds stateful handling to firewall rules - Feature Request #724, Update ASL Web, Forces refresh of vulnerability detail window when updating ASL config - Bugfix #XXX, ASL Web Corrects display issue with manual parameter entries in firewall rules - Bugfix #XXX, fix for vhost level rule disable. Add pass parameter- Add support for Cloudlinux 6.2 - Add support for CentOS 6.2 - Add basic self healing management system - Update psa_check, this now supports reinstall for psa-proftpd - Update to cpanel build hook, fix for conditions where cpanel gets lost and misplaces its build directories - Update to ssh_check, implement password enable/disable in fail-safe mode - Update to ADMIN_USERS, "root" will automatically be excluded - Update to ASL Web, Added request complete check in server monitor swf - Feature Request #XXX, ADMIN_USERS, this now supports , and ; as delimiters- Add support for Cloudlinux 6.1 - Add support for CentOS 6.1 - Update ASL Web, remove validation debug code - Bugfix #XXX, ASL Web, fix for junk html generation fo event detail buttons - Bugfix #XXX, only create HIDS exclusion rules if the system is a server.- Update to cpanel easyapache update, retire internal pcre support and use standard pcre library - Bugfix #XXX, exclude invalid 0.0.0.0 whitelists - Bugfix #XXX, add el6 detection logic to easyapache hook - Bugfix #XXX, correct condition where updates-data is processed before it is updated- Add blacklist option to Detail window - Update to cpanel/directadmin hooks to build mod_security 2.6.2 - Update to ASL Web to include timeout/bad connection detection to mysql - Bugfix #XXX, corrects a vulnerability reporting alignment issue when php53 is installed - Bugfix #691, lint whitelist for invalid entries like 0.0.0.0- Renamed asl-web-setup to asl-web-useradd - Update to ASL Web that adds in error messages for non-existant tortix dbs - Update to rule manager, deprecated level,active response,email and logging fields from waf per vhost rule settings - Update to rule manager, add hids_check event for waf changes - Update to integrity manager to handle missing global row conditions - Update to ASL Web to show the defaults for the integrity manager as "yes" - Bugfix #593, execstack -c update for normalizing input from config files containing ". - Bugfix #671, update configuration to set escapeshellcmd variable - Bugfix #XXX, fix to correctly disable logging for a waf event - Bugfix #XXX, corrects a vulnerability reporting alignment issue when php53 is installed- Update to waf module, vhost rules are no longer anchored - Bugfix #672, configuration, add in configuration checks for curl & ftp exec functions - Bugfix #673, configuration, correct email adding issue during configuration - Bugfix #678, installer, suppress app inventory logs - Bugfix #XXX, hids module, scan_on_start needs to load last in the syscheck config - Bugfix #XXX, ASL Web update to firewall module - Bugfix #XXX, ASL Web update to use yes for defaults on global ptions - Bugfix #XXX, ASL Web update to waf rule manager- Add detection for php53 re-packaging - Add clamav-db and clamav to uninstall script - Update to shun multiplier tracking to be able to handle fractions - Dropped monitoring /usr and /var/www/vhosts by default - Bugfix #XXX, detect plesk during new install and disable HARDEN_PTRACE- Add ASL Web warning pop up in gui config window for high load changes; - Add ASL Web line break handling for event text in event and event detail window - Add to configuration, x3 mysql admin credentials check - Add ASL Web updater event for waf_rule_reporting, the config used to manage FP reporting behavior - Add ASL Web version and exclusion check to false positive and false negative reporting - Update to configuration, minor update for horde detection - Update to hids_check to manage the expiration time for the asl-purge event based on the repeat offender timeout. - Update to version checking routine for ASL updates. This evaluates major, minor, and subminor - Bugfix #XXX, ASL Web, Fixed forced waf checks; Fixed overwriting window state in session - Bugfix #XXX, Corrects newline handling in hids event detail view - Bugfix #XXX, fix for reporting status correctly with the newer named firewall table format - Bugfix #XXX, changes to SHUN_TIME will now restart execd- Add in root login check enable/disable - Add time to blocklist display in ASL Web - Update to asl-firewall, repositions blacklists and add support to clear the active response tables - Update to ASL Web, database errors are now reported directly in the Event viewer. - Update to ASL Web, Increases line size limit on waf rule import to 20kb - Update to ASL Web, logic for forced waf handling in security event detailed view - Bugfix #XXX, calculation adjustment for the repeat-offenders system. This is tracked in minutes, whereas SHUN_TIME is tracked in seconds.- Updated ASL Web to display waf rule id when hids rule 60118 is encountered - Updated Rule Manager, all HIDS rules are now distributed through the ASL updater, and loaded from rules.d/ - Bugfix #XXX, updated default config to use "on" for active response- Added new WAF protection rule classes - Updated waf vhost exclude filename from 00_vhost_exclude.conf to 000_vhost_exclude.conf - Feature request #647, in support of adding the full ASL version to the ASL Web header - Bugfix #653, strip ' from Includes on the web app inventory event- Added basic support for the WAF chroot token - Update to Integrity Checks, add /etc/mail/spamassassin/.razor to ignore list - Update Requires to ossec 2.6-4 - Bugfix #XXX, update events will not run report generation on new installs - Bugfix #XXX, ASL Web Corrects row colors in blocklist display - Bugfix #XXX, for asl-firewall blacklist loading - Bugfix #XXX, Corrects parameter issue in asl_stats - Bugfix #XXX, clean up remote database support in database-setup- Bugfix #XXX, on asl-firewall blacklist order loading- Added the first version of the ASL Stats package, a command line statistics generator for external applications - Added debug output to rule validation routines - Added whitelist suppor to mod_evasive - Added paging t the Rule Manager - Updated Blacklist ruleset to load before INPUT - Updated psa_check to allow clamav to be disabled in psa-proftpd - Updated configuration to retain settings from the last time it was run. - Updated rule update events to force a reload of the dashboard - Feature Request #317 , add remote database support to database-setup - Bugfix #460 , correctly detect when safe_mode is enabled even if it is disabled in config - Bugfix #635, delete update file if it already exists on a -uf force upgrade event - Bugfix #XXX, ASL Web Rule Manager, fixed a conditionwhere the rule manager would not update the policy - Bugfix #XXX, ASL Web Blocklist retrevial fix- Added dependency for asl-stream-client - Added location comments to all template files - Added more default file check excludes - Added kernel version to false pos/false neg reporting - Updated uninstaller to do a more thourough job - Bugfix #637, corrected waf whitelist_1 error - Bugfix #XXX, added checks for curl_exec, curl_multi_exec, leak, and ftp_exec - Bugfix #XXX, correct issue unblocking from blocklist window - Bugfix #XXX, added "no results" to reports when there are none - Bugfix #XXX, added more redundancy to the database-setup routine to drop existing users on a reinstall - Bugfix #XXX, hids 60138 are now parsed by the WAF reader - Bugfix #XXX, If all settings are No in integrity checks, default to disable monitoring the directory- Bugfix #629, rule update events will report a clear username/password failure message instead of raw debug output - Bugfix #XXX, add EOL check for centos 6 - Bugfix #XXX, corrected a locking condition in the rule manager that would prevent writing new config files- Bugfix #607, prevent downstream updates from atomic in the asl channel on -u - Bugfix #612, If MODSEC_99_MALWARE_OUTPUT is "yes" copy malware-blacklist.txt - Bugfix #618, Add in detection for psa-atmail, and roundcubemail to autoallow fsockopen on configuration - Bugfix #XXX, disable updates from the atomic repo if it is enabled on an asl -u update - Bugfix #XXX, visibility permissions correction - Bugfix #XXX, fixed a condition where WAF false positives can be prevented from sending due to locking- Final 3.0 release, see /var/asl/Changelog for extended changelog & release notes- Release Candidate 4- Release Candidate 3- Release Candidate 2- Release Candidate 1- New vulnerability scanner report system.- Bugfix on WAF_DELAYED_VERSION management - Bugfix on ASLe Makefile - Bugfix added psa_clamav_ftp vulnerability data- Added new externalized WAF rule management function. - ASL will now validate the version of the WAF engine to ensure rule compatiblity - ASL Web: Rule ID's are now linked to documentation - ASL Web: Switched to unified heartbeat polling - Add clamav disabled vulnerability data- Added more 2.6.32.x kernel checks - Doubled the size of the common passwords to the dictionary file - Updates to mod_security_check to support new tokens SecReadStateLimit - ASL WAF can now be set to "DetectOnly" mode via the WAF_ENGINE token - KEEPFILES defaults to off now - Feature Request #512, Add support for disabling ftp_exec, curl_exec, and curl_multi_exec PHP functions - Add support for updating the database tables on a HIDS upgrade event - ASL WAF configs are now generated from templates - Add template generation for tortix_waf.conf - Modified the proftpd check to look for the clamav module using the -V flag instead of a straight version check - Bugfix for adding client keys in "agent" mode. - Minor bugfix removing the old stty supression code. This does not work in a php context anyway - Bugfix #XXX, this will properly evaluate an asl.lock file as numeric. If detected as non-numeric, it will assume it is stale and remove the lock. - Add FEED_TYPE token to default configs - Bugfix to change the value of the WAF version token. This was expanded into 2 lines, breaking modsec updates. - Add basic real-time/delayed feed support. - Added in forced path for users that dont run the diag tool with roots environment - Minor change to catch conditions where rpm is not present. - HIDS client template is now in sync with the HIDS server template - ASL Web: Consolidated signatures, security modules, security bulletins, and vulnerability windows into a single window - ASL Web: Partially standardized window size to 700x500 - ASL Web: Changed positioning of default visible windows to auto (cascaded) - ASL Web: Added category to security bulletins - ASL Web: Fixed file/db sourcing for event details - ASL Web: Fixed issue with y position when cascading windows- Added vulnerability checks for psa-proftp SA42052 Vulnerability - ASL Web format update- Feature Request #342, view non-WAF events in ASL Web - Feature Request #380, Track clamav events in ASL Web - Feature Request #415, Add support for SSL settings in Plesk 9.0 and above - Feature Request #455, Add enable rule support to the --vhost modifier - Bugfix #314, /etc/alternatives/mta-sendmail will be linked to /etc/alternatives/mta if it does not exist (false positive reporting) - Bugfix #405, Remove duplicate instances of ASL_WEB_CONFIGURED - Bugfix #453, OSSEC_SHUN_ENABLE_TIMEOUT is set to NO ossec will now restart properly - Bugfix #457, enabling rules will not leave blank lines in /etc/asl/disabled_rules- Add in Basic agent event source tracking to ASL Web- Add new /proc controls for grsecurity - Add /etc/init.d/asl-kernel - Add in support for monitoring clamv virus, update and other events.- Alpha build of new interface code- GA release of 2.2.11- Feature request #410, basic ability to manage ossec alert level and email response - Add support for /etc/asl/rules, this allows for configuring the level and reporting for events- Feature request #402, purge old rule/sig update files after 7 days - Updated routines to detect ASL kernels, this is no longer completely dependent on the KERNELS database - Bugfix #XXX, fixed condition where ossec_check would rewrite config when -f was not invoked. - Bugfix #449, fixed issue in ASL Web that would sometime cause the geo-block list to be dropped. - Bugfix #450, Updated sendmail detection routine to handle more sendmail locations for false positive reporting- Rebuild for final release- Bugfix for geo-block removal on an empty list- Bugfix for Blocklist blacklist/whitelist/unblock multi-taging- Fix for RSS / configuration interface in ASL Web- Add support for 2.6.32.16-4 kernels - Updated ossec_database_setup routine to start mysql on a new install event - Updated configuation to reorder ossec configuration after notification configuration - Feature Request #393, Add local hostname information to ASL Web - Bugfix #XXX, correct condition where ASL Web counld not consistently add/remove whitelist entries- Added category column to security bulletins in asl-web - Add mysql start routine to ossec_database_setup.sh - Minor change to web_app_inventory to improve performance. (about 10-15%) - Feature Request #XXX, added support for Cloudlinux 5 - Bugfix #XXX, fixed case where proftp clamav was not working for anonymous ftp - Bugfix #XXX, case #3466 entries were not showing in the blocklist- Deprecate denyhosts support - Updated security bulletins source and output for asl-web - Bugfix #386, rules disabled by vhost will be set to nolog/noauditlog by default- Updated default ossec server template to monitor /opt, /usr/lib, /usr/local/- Added realtime tokens to the ossec configs by default. - Improved lint check for whitelist/blacklist checks to clean out duplicate/invalid entries - Removed denyhosts dependency from package - Bugfix #383, single entry geo-blacklists could not be removed- Minor change, this inverts the order for the per-vhost exclude config file- Add Fedora 11 EOL check - Removed ipv6 modules from asl-mod - Feature Request #338, Change repo credentials when /etc/asl/config changes USERNAME/PASSWORD settings - Feature Request #355, add new configuration token "UPDATE_TYPE" to control -u. All, or Rules-Only currently supported - Feature Request #356, allow per-vhost rule disabling. New command line parameter to -dr, --vhost - Bugfix #XXX for detecting & symlinking /usr/lib/sendmail correctly - Bugfix #343, rename ossec-hids-active-response to ossec-hids_active-response - Bugfix #354, Blacklist array error - Bugfix #362, Preserve server type custom between upgrades- Added reboot event if the network cards arent detected during asl-firstboot - Add TLS token to proftp config by default - Webapp inventory is now ionice/nice by default - Add detection & configuration for asterisk logs - Fixed the enable/disable notifications code in psmon. - Updates to support module disabling, and grsecurity sysctl features - updates to exclude apache log files from malware sigs - Extended debug info collected by asl-diag - lowered default syscheck frequency to once per day - Added check for blank mysql passwords and event for setting it - Bugfix #XXX, added a match condition to detect if the database user is "root" so the script will not delete the root account. - enhancements to malware ruleset generator and addition of more sources- Add token for newer kernel - Added redundancy to database setup event - migrated system calls to array functions in rkhunter_check- Added support for the dazuko anti-spam kernel module - Added detection for different userid environments for clamd (qscand, clamav, root) - Added new template files, template-clamd.conf, and template-freshclam.conf - Added init script for the asl-av (dazuko) module - Added support to the OSSEC updater to manage decoder.xml - Added support to manage the psa-proftpd user - Added some feedback to the user that clamav is restarting when it takes a long time - Added requires on vixie-cron for el4/el5 environments - Added diagnostic utility for support - Added WAF output redactor (MODSEC_99_REDACTOR) - Added vulnerability check for Active Response mode being disabled - Added requires on denyhosts 2.4-24+, ossec 2.4.1-4+, and conflicts on psa-proftp older than 1.3.3 - Added sysctl disabling fuctionality to asl-mod, this is tied to the ALLOW_kmod_loading token. - core ASL package upgrades will now force asl -s -f at the next available monitor event (hourly normally) - duplicate entries in whitelists will now be ignored. - Extended mysql 5.1 detection for plesk environments - Expanded deprecation module for denyhosts - Enabled safebrowsing by default in freshclam template - general_check services are now sorted by default, removed a duplicate gpm check - rkhunter_check will now disable app scan checks by default - Feature Request #144, fix events that effect OSSEC will no longer reload/purge the active response list - Feature Request #327, RKHUNTER_SSH_ROOT_LOGIN has been deprecated, this check is always enabled - Bugfix #XXX, removed a duplicate ASL kernel detection message - Bugfix #XXX, for asl_user creation events - Bugfix #XXX, fix for detecting the mysql version in a non-psa environment - Bugfix #XXX, corrected a condition where disabled_modules would be attempted when the device did not exist. - Bugfix #XXX, other half of the "too many files" error from psa-proftpd. - Bugfix #311, psa_check will now correct a deprecated setting in psa-proftpd (Scoreboard) that would break session tracking - Bugfix #324, corrects a condition where non-modsecurity 403 errors are defined as "undefined" - Bugfix #344, detect proftp-tls/proftp-asl file contents and replace them if they are 0 length.- Rebuilt to link against the native mysql libraries- Added new templating engine to ossec_check - Added new templating engine to psmon_check - Added new config setting PSMON_NOTIFY, this allows you do disable email reporting from psmon - Added new templating engine to denyhosts - Added in renice and ionice to make the web app scanner less intense on a system - Added locking into update and ck events, now only one instance will be permitted at a time - Add support for status parameter to asl-firewall - Add support for detecting /proc/sys/kernel/modules_disabled in newer kernels - Added support for the status command to asl-mod - Deprecated active response in denyhosts, this is now handled by ossec - Deprecated configuration setting DENYHOSTS_SHUN_TIME - Deprecated the old psmon template system - Bugfix #XXX, psmon_check will no longer always report "fixed" when operating in fix mode - Bugfix #XXX, ossec_check now counts only valid whitelist entries for the exessive whitelist check - Bugfix #260, GUI not correctly disabling modsecurity - Bugfix #305, Retire active response from denyhosts - Bugfix #306, automatically add local IP's to the whitelist - Bugfix #309, fix for 100% cpu utilization if asl -u/-ck cannot connect - Bugfix #312, ASL Web now supports the custom layout upgrades when new interface features are added. - Bugfix #314 - if /usr/lib/sendmail doesnt exist, it will now be created (/etc/alternatives/sendmail-mta - Bugfix #315, resolved condition where ossec_database_setup.sh incorrectly reports success- Added Update button to Signatures window in ASL Web - Added Fix button to Vulnerability report in ASL Web - Added distribution information to the -v flag - Added browser check for old/vulnerable browsers when accessing ASL Web - Added basic clamav configuration module - Feature Request #261, Added Pause function to Events viewer in ASL Web - Feature Request #297, Add support for SecRequestBodyLimit to ASL - Feature Request #XXX, Application inventory will now run in the background on a first time install - MODSEC_40_APACHE rule class has now been deprecated - Back end changes to support ASL-Lite - Started added link fields into the Vulnerability report to the documentation site. - Added new configuration settings, APACHE_RESTART_COMMAND which is used by ASL Lite, and MODSEC_RULES_PATH to define the storage location for mod_security rules - Bugfix #236, corrects condition where only the first page of events could be viewed. - Bugfix #262, restored the whois lookup link for attacker IP field - Bugfix #310, corrects condition where a blank /etc/asl/VERSION is reported as an error connecting to the update server - Bugfix #XXX, ASL Web Event Viewer will now parse mod_security events containing the data field correctly - Bugfix #XXX, ASL Web Event Viewer fix for condition where if not in DB mode the OSSEC event would be displayed over the mod_security ID - Bugfix #XXX, added conditional logic for ResponseBodyLimitAction- Support for Fedora 12 - Support for Fedora 11 - Support for Mysql 5.1 - Bugfix #XXX, correct an imaging rendering issue in ASL-Web for IE8 - Bugfix #XXX, detects and corrects the condition where the VERSION would sometimes be created as a directory - Bugfix #XXX, added mod_evasive vulnerability date- Feature Request #285, Added vulnerability check for php function pcntl_exec() - Feature Request #XXX, added vulnerability check for Plesk XSS vulnerability - Feature Request #XXX, added db rotate event for storing alert events in mysql - Feature #XXX, ossec_database_setup.sh is now safe to run multiple times. It will reset passwords to the default in /etc/asl/config - Feature #XXX, add SSL checks for courier imap - Changed support link in GUI to https://www.atomicorp.com/portal (was http://support.prometheus-group.com) - Added more debug routines for update events. - Bugfix #XXX, Corrected js errors in IE, corrected tag mismatch in /etc/asl-config.xml - Bugfix #XXX, to set the mod_security debug log to on / off. The default is to disable the debug log unless we're actually debugging. This is also a performance change. - Bugfix #XXX, mod_security check will automatically populate the config file with the configuration token if it does not otherwise exist. - Bugfix #XXX, added vulnerability details for the Plesk @Mail exploit - Bugfix #XXX, fixed incorrect mod_security vulnerability detail references - BugFix #XXX, corrected the filename for mod_security_serversignature - Bugfix #XXX, Added missing data for Case #1537, vulnerability info for SA33842 - Bugfix #XXX, Fix to identify fc11 - Bugfix #XXX, corrects XSS issue in ASL Web with False Positive feedback - forced LANG=C for password generation events - Bugfix #XXX, Case #1258, fix for adding rules for non-localhost database cases - Bugfix #XXX, corrected issue with single alert log entry display - Bugfix #XXX, adding in more redundancy for other ASL-Web configuration scenarios. This adds in a basic alpha/numeric check. - Bugfix #XXX, asl-web-setup will now check for the asl_user table, and will inform the user to run asl -c and/or ossec_database_setup.sh - Bugfix #XXX, asl -u 'full debug' mode wasnt working - Bugfix #XXX, Added kernel_randshlib to vulnerability report- added a minor database check to asl-web-setup - Added --no-cache to wget events - Updated text for escapeshellcmd vulnerability report - Bugfix #248, missing plesk button- Added routine to remove legacy psaadm from sudoers - OSSEC-HIDS 2.2 is now a requirment - Lowered Denyhosts disabled check from critical to high - Added asl-web-passwd utility, a command line tool to reset the ASL Web password for users. - Added asl-web-setup, a utility for configuring ASL Web - Corrected circumstantial js error in security events when changing filter options on a display page other than 1 - Added routine to test for ASL Web being configured, the web interface will now report this case - Bugfix #XXX, on Denyhosts being disabled check, would report "enabled" when it was failing - Bugfix #XXX, Fixed typo in psa_check to show correct path to password.report - Bugfix #XXX, Fixed typo in asl-config.xml, that was assigning $EMAIL to a boolean - Bugfix #XXX, Fixed condition with Geoblocking where the interface would not display if there was a blank line in the database - Bugfix #XXX, Fixed typo on OSSEC_NOTIFY in asl-config.xml - Bugfix #XXX, Fix for typo in ssh_check banner test - Bugfix #217, passwords in the web gui are now limited to a-z, A-Z, 0-9, _, ! and - - Bugfix #219, password auth check now reports pass if password auth is disabled. - Bugfix #221, Configuration updates now lint from 2.0 -> 2.2 configuration values correctly. - Bugfix #228, Added detection & upgrade event for ASL-Web-Gui -> ASL Web to force the yum upgrade - Bugfix #229, Changed mode on /etc/cron.d/asl to 644 - Bugfix #230, ADMIN_USERS changed from "" to "undefined". This is condition is now properly ignored. - Bugfix #237, added a field to the gui config interface for the HOSTNAME variable, as well as an upgrade event to populate it - Bugfix #238, fixed updater issue for modsecurity rules, where an update would appear to have been applied when it was not. - Bugfix #240, resolved issue with php_checks reporting vulnerabilities that were corrected by "fix" mode - Bugfix #241, Corrects display issue in blacklist and whitelist windows when removing all entries- Update to 2.2 official release - Bugfix on remove-blacklist- Bugfix #XXX, fix for vulnerability scanner to show details if there was only 1 entry - Bugfix #XXX, fix for ossec excessive whitelists check to show correct vuln level based on total # of whitelists - Bugfix #XXX, correctly install the asl-button for plesk environments- Added migration routine for plesk environments from the old asl-web-gui to the new asl-web - update to KERNELS file to support the new 2.6.29.6 kernels - Bugfix #XXX, on ossec_database_setup - Bugfix #XXX, on asl-mod (adds more modules) - Bugfix #XXX, on white/black/geoblock/blocking .js files- Bugfix #XXX, ssh_check, added missing message for GSSAPICleanup test - Bugfix #XXX, rkhunter_check, added missing message for SSH protocol 1 test - Updated configuration_setup to detect & start mysql if its not running - Updated datase_setup to warn the user on blank passwords - Added routine to kill stale ossec-dbd processes in ossec_check - Added support tab to ASL Web - Added php_url_include vulnerability data - Removed restrictions on the max length of a message field in the Events Display- Activated the update button in ASL Configuration - Added updated turtle graphix, now with lensflare!(tm) - Update mode now launches into a new window, with feedback- Bugfix on multi-arguement/value events - Corrected visuals on Event viewer to show the enable/disable buttons successfully - Added in vulnerability stub data for ET_EXEC - Cleaned up %post installation routines, added checks for asl-mod- Added default layout to gui - Bugfix for missing graphics error - Set default size for events view, resizing for bulletins window, and new interface buttons for event view- Added alternating background colors to rows in bulletin, module and signature windows - Corrected log display in event detail window - Made event detail window slightly less ugly- Moved ASL Web configs to the asl-web rpm - Corrected log display in event detail window - Made event detail window slightly less ugly - Changed file integrity window: removed file name search added result limiter (50,100,250 results or all within last 1/3/7 days) default display is most recent 50 results - Changed event log window: removed time filter fields added result limiter (50,100,250 results) added filters by event type (blocked or info) addes signature id field reversed sorting to date descending - Improved performance of window fade in/out - Fixed js error from empty blacklist - Fixed interface module display for non-admin UI user - Added Layout window to interface module Allows admin to set initial visibility and position of windows, and control access to windows Menu visibility for a window may be set to on, off or admin only X/Y positions may be set to an integer or 'auto', which will leave the window in its normal cascaded position Visibility and menu presence may not be altered for detail windows, but they may be set to open in a fixed position- Bugfix, ssh_check banner test (bareword found issue) - Bugfix, Added a condition to detect /var/asl/tmp/VERSION on new installs - Added additional Dependencies to ASL Web - Added zero entry checks to inventory and events windows - Bugfixes on configuration_setup and ossec_database_setup.- Added new kernels detection - Requires updates to pull the new asl-httpd subsystem.- Updates for the new asl-httpd system- Bugfix #XXX, --whitelist typo on the asl-shun command - Added asl-config.xml for lint'ing config files - Updates to License Manager- Bugfix #XXX, ssh_check, Added more logic around allowed root logins, this will skip the fixed check now and just report it as allowed/vulnerable if it is fact allowed. - Bugfix #xxx, mod_security, cleaned up path checking on SecTmpDir - Bugfix #xxx, php_check, Changed execute flag string to be more clear on exentions check - Bugfix #xxx, php_check, disable_functions check will now create the line if it doesnt exist rather than rewrite it - Added in new License Manager system- Added new License Management code - Added simple FTP account password checks - Deprecated old RSS caching system- Added vulnerabilty check on disabled signatures - Added in stale lockfile check/removal - Added basic check to mod_security_check for "SecResponseBodyLimitAction" - Added purge active-response purge event, to improve active response block management- Modified the audit dir to be apache group writable (fix for the tortix user) - Bugfix for pending updates check - Bugfix for denyhosts bitmask whitelist - Added locking, so only one instance of ASL will run at a time - ASL Web 2.1 fixes follow - fixed security events from file - removed pgui.conf, UI now uses the db info supplied in the OSSEC_DATABASE* - fields in /etc/asl/config for locating its user table - removed UI Options window from interface module - Added Interface module - UI database info configuration window - UI user create/modify/delete window - Added vulnerability detail flash chart - Added server monitor flash graphs - Remaining doc element stylings moved to css - Fixed empty lines in vulnerability detail - Fixed menu tab mouse overs - Fixed missing mouse pointer- Internal cleanup on the web interface code- Added excessive whitelist vulnerability check - Updated whitelist code to handle bitmasks correctly- Disabled monitoring ossec's syscheck daemon - Bugfix to detect spamassassin before checking its permissions - Bugfix for ossec_check and web.conf, deprecated dhtml.conf files - Bugfix for mod_security_check to correctly parse Dir directives - Bugfix for mod_security_check SecAuditLogStorageDir - Bugfix, mod_security_check now supports both "on/off" and "yes/no" values - Bugfix, mod_security_check copies rulegroups over correctly now - Bugfix, mod_security_check copies over tertiary configs now (spam.conf, sql.txt, etc) - Bugfix, mod_security_check, when the whitelist is enabled, it is now flagged as a vulnerability - Added vulnerability check for whitelisting IP's in mod_security - Bugfix, php_check updated to support yes/no, and on/off conditions- Added support to --report-false positive to use both the full and relative paths. - Added additional firewall modules to asl-mod - Added support for clamav scanning to proftpd (note: this requires psa-proftpd 1.3.2-9 or above.) - Merged in new DHTML web tree- Added test to psa_check for SSLv2 o in qmail - Add expose_php = Off check to psa_check - First round of pre-QA cleanup (asl, psa_checks, ossec_checks)- Update to SVN 090309 - Added asl, C rewrite of /var/asl/bin/asl - command line arguements now support multiple entries, for example: asl --whitelist 10.10.10.1 10.10.10.2 10.10.10.3 - Deprecated bin/asl- Update to SVN 090306 - Added ssh_check module, C rewrite of ssh_check - Deprecated SSH_PROTOCOL setting - Bugfix #XXX, corrected condition where ssh vulnerability checks were not being reported for SSH password authentication being enabled. - Setting SSH_BANNER to "no" or "off" will disable adding the banner to the system (For Breun at lemonbit.nl) - Extended APACHE_RESTART setting to support the modes: yes/restart (/etc/init.d/httpd stop and start), no/off (do nothing), graceful (/etc/init.d/httpd graceful) - Added mod_security_check module, C rewrite of mod_security_check.sh - Bugfix #XXX, where config value MODSEC_40_APACHE was not being assigned correctly in mod_security_check - Added web_check module, C rewrite of web_check.sh - Added mod_evasive modue, C rewrite of mod_evasive_check.sh - Added php_check module, C rewrite of php_check.sh - Lowered vulnerability level for safe_mode to moderate. - Lowered vulnerability level for escapeshellcmd to low.- Update to SVN 090302 - Added ossec_check module, C rewrite of ossec_check.sh - Bugfix #XXX, OSSEC_NOTIFY was not previously being populated in the config correctly. This was preventing email notification from being disable-able. - Bugfix #XXX, added a wrapper to lint the config file for the CONFIGURED flag - Added rkhunter_check module, C rewrite of rkhunter_check.sh - Added configuration checks for the Plesk 9 /etc/xinet.d/ excludes in rkhunter - Added denyhosts_check module, C rewrite of denyhosts_check.sh/bin/sh/bin/shasl-lite  !"#$%&'()*+,-./0123456789:;<=>?1:4.0.8-19.suse12.3.art1:4.0.8-19.suse12.3.art  blacklistconfigfirewallmta-output-aclgeo-blacklistintegrity-checksmalware-detectionrulestld_country.txtwaf-configwhitelistaslaslaslaslLICENSEasl_cli_caumupdate_config.plauditlangerror_en.msgerror_en_new.msgmsasuspiciousconfig.templateproftp.conf-asl-templatepure-ftpd.clamscan.templatepure-ftpd.init-templatetemplate-00_mod_security.conftemplate-01_mod_security.conftemplate-02_mod_security.conftemplate-50-clamav.conftemplate-50-plesk.conftemplate-asl.repotemplate-asl_waf.conftemplate-clamd.conftemplate-cpanel-apache-hooktemplate-cpanel-posteasyapachetemplate-cpanel-preeasyapachetemplate-cpanel-preeasyapache-hooktemplate-freshclam.conftemplate-glacier-archivetemplate-mod_evasive.conftemplate-mod_evasive24.conftemplate-mod_qos.conftemplate-ossec-client.conftemplate-ossec-internal_options.conftemplate-ossec-server.conftemplate-plesk-10-socket.shtemplate-plesk-9.conftemplate-plesk-waf.conftemplate-plesk.initemplate-proftpd.conftemplate-psmon.conftemplate-tortix_waf.conffunctionsasl-installerconfiguration_setup.shuninstallrulestmpupdates/etc/asl//etc/asl/firewall//etc/cron.daily//etc/cron.hourly//etc/cron.monthly//etc/cron.weekly//var/asl//var/asl/bin//var/asl/data//var/asl/data/lang//var/asl/data/templates//var/asl/lib//var/asl/lib/modules/-O2 -g -m32 -march=i486 -fmessage-length=0 -D_FORTIFY_SOURCE=2 -fstack-protector -funwind-tables -fasynchronous-unwind-tablesdrpmlzma5i386-suse-linux?p]"k%{=t]RS#nJz&a5Rv"< aim/^4őGn ]c7KM+PT Uj T$䱰{8no^}i20I׾V7fJ`i^nYo`MCLtvǕKR&I@++(si _ƌ(Mg8}獀3!y<1=Y;Pqb\ju2 `:~M`z@gD;Gm+jvYtD8,;=O;8j[]:{I<0&ŧ]T[aJRMxG=ݖY! oɅbA6-.HBϐTwΑv h䚊mճMLZpyL~-hGL6Y5z9z~Wv ϔ",(T9L*AT$E,6Q*@A{3%P*!Aȩ ~:~H`iXﱁ<;SbO;acf <%3cBh^| 6VL)qB2:T%!yP[9CVnѲunfD [:B}}糆Z=}*os)i} 4hoCfpZ@Yw0UZ:zMb>-xn"ίq͸qDTkLD-vU_׉N. !eœԞ%89RqٻI(_p]IWd z\ W8#ʜs):!8]"xee/~E t@MUpov /q^Q(šDvCwv^P!Ίܹ**Xm5썍NY&X8`UPpxp,כp Ҁ“AM+řgozDh}NHoE| u˛>M \Mc\b,PD1?wJm@(CTۓ̯:``h&7@9hegZSG G%n;@WFA>lO'J;b(懝>Ń\ǓkIj(9L܇&@@./Eo/Ƥd{~ j+i|$y &r.󎥧]I/J.@psg1\.ePNI[uȐS.RR [^#~NxyR;V `c4RdbD?Ӥ^Jő@3[4^!ĻjLx ۭQ}|􇘂[nӌr_KKxǾw8xGWQƊG#'J8lIi֟G$<s_F ѷ'e#K ,&Y;^54*8u)An+0*;ur iV֧9̡x]6 H@L;ӠlMfi^{&%ٵd]qau{^޸|ș!ۥې?8|l*X9Tv(S*^JKVCf-TI~]6=>-dzxCKj|Ρmt6>ocN/ ZJ^f'y}% VUڽSh~*8jYjyJH?aqElEDݷ( !:SD>$?g>@7ul\JoZ"E,eci.؀l/X&-ԥ w {$8t!4 oTpo y`οJO>\6gP&{q  0X SD1ti#=Mu-298VR~RL! OS2n [\ }fSYĸP w̘<W1&qoyYIH47AIaG?qS޿ʱOc]GGCLy4LK@e'ű`mUC_3"/ǤNlf3>9*'FzDe"_cT݂@"waJjhѡ; Sbt IgLmWߥ8|&F /9f5(ӧvPp`K XX͞XH $!al<_?xkھ2 0GfFCzyjXXcC ąic*C@p)6?dM>Ѳ#}(DLH,.YYJ@<#]'4E5rk̋XҜeXGWIU#H tu rJRP]&]2+ A14ꦱ= Ey $Z K [1*'&V g rS J6ХwQ>f5wt=TRgv jsɥH^vVffWxOPB&.DurϢy'ࡋř̏IzZmW ^ߪF"̀KcDG](UOhZ}TlWU.h+Gܘ2ZnꋥBA@`p(Yz:!v4j aFŨAo' -#]}v;dXLMMq|C#Ĺ@/- އs\aԈf]ցF'ARu_AK7 6ePuaц-Sl}23nfN 3u^&̵2Efz"/QLljǙtn׉U?2oƽ'~sT0wlԵgJ%pHD6сi ͉b`F$2A8$(oDwj?% Uʋʼn 8Vl@FJAA!qÏ+Eugٍ! bE lj\,|7p=-0].k -s6ڼN"5$S^9O#ADeğ/U*u>Py ]ڬ2>ӠY:UܶuJx]U/G|%jĻ$nU>uub/'7p̧{'iQ;bp_Sl蟼f52N '&,H _Ia!T V!@*rkXYS$HIriQrV]tirx5. \0v{ۗoi<8ziWfs!67H Ja( ?Ⴃ2WQoY&z ]:LX~ٰEoqeV HW0K&I5 @*=F&(%JO/0eիûQ)߮j HZ 1v鲖ah&JQ"YTQD=Vy.Q.{t@՟:ӿ@,{gf&1vNMq 06&B}vn=UtmtCnr[-|:.duV fVD"g\(Kqnr P$hU08g`1]0cB ZX{ӡbTֵ֊ɨEX*ȕ qUR+v ´h^1op6-)z+4 , Y{ŭgrmY꜍Ce}(] )-[ю&@mx 8TCj _N"u a+*͔yum%rc"NZ/5@ gidl8=o|u4;T 9kV>$&  \&Reu|5e𛬿'jE{ngvYRRˇvҍ\mo]Xb]z-H+)F.Wj` yfݴ6&]lsC@ltOC&?Ɋ- zX( {JAyKsZiF=Qʌ%.`wH׎%57J jݚ^R6tL]Ieq`zߧOOl`Ÿ %i['Z=.Ff\%_!l>~KMVv6Ud  $/+/A՞}JgE ezOT{TM)1?sW65$CX݄ɽKDKs#a;C뵊;IBLH}A:=`3appWJ>p)LejafCN(o?v5R v\s*)&kưl ?!Uى%t6G~+Y2!/"LGa3oM.gD2S/}eGIp=Z{eI0 1e\zQv@i 466$\*o-9 E7ji]6CR 4:%gˉ` !@-N4A:b[-kXoHǖ@~ Ք-y 90yDl+}oC xfq7 'ty`+z0\~+ȟqPpY$l.h+fıξAooHh cV=QT#FYwA3Ti7+aIdY&L^}/'C Ի|zOiLAB6"]-1#ISG< V쿁/I*JXT3A)[DI{Irӑa p-3q-7dżL -wHazTO'LojCg9XP)Z+F FgV!ֳ$v/ ȃ/;8< P=L)ck, pӶ4c7oqCнT ԛh?OJX 50/a#_}mZ2 me%hHvi\46nr"Ɣ.C;'B;SB 韁{ə'ŕIO+U`N4G\x6}d $Y6%-ΟȳCk&'4]ESsLEo(r=j|l9T:93+KE(3x?$9\(u}כI= fOVP8D/Ϧ%ƥRVMܞ+Nƣ9"%$[d 3FvF"Ì XUhT_Q j H,v?3$3ƼJ~B,x\Y|;q X[طX>H#G>fu>Ӥ/Y3S87,z3Fg|g(V/ɝŹ77T@#RW%! @dtD-Qn.+P3wqtM0cFZ$/Sxѡfa6*H|'meo*U>vm]B] M ۜM05My=Y m_{2Imv2 au!DL+ :AJ֯&%P6;Eh]2 {˜Ye0Y BozԊ߳6T5˖ 1y ;ټn&(VC<_U;mIwJI֬ɟSMcIؿٿw}5L"3"drl^sDcs Zc)*۽V=\N[ `x| NnϽ!11 zEyIfJ1PFHX 5 E ŇDs լ<7ѴK@(mש;E$@;ޕ]kYnn|01ۂ#5c=ۣVy$  LҵICsMP5<<[$v7Toxa~.cU96` Z]ϏEɫȉ˄\>Y4{Ih6l+?1YP1"q4CAF"G%7dzŹ.LfOGD-foNJɗѓk5ｬYlUcA{|jŖE_zi*l9@X$FS$:l})e.PoJOW^YNVEOX6PE:~ !:%ǘؔfu ,4^k䓜8 BYKq#*`89fkz"0C> ur?%n*O7²^4Aۿ̵cŎ{iNI]8DVK;BO0^gnJĮ KϭREi:!I!-ibLme5z/gܩsjiyai[(AĘw1cG:ek?0v\e?,%p6pΗ_/V܌LWS}lJ`'89و>[=@i"(n7~¢V+νS+{h+9wWt)@m<,I:7EziN}uʸ|}sMDyY|&ߎO֠ OzӺM?@jeK;4&k —; Nb$eOrʵyq IW?-٧E6a]Adɮ/0B[:BP$2p_FCTrmɾzӲG8Yfr!В8_}Dʘ|LS;w' H⽑Ҝ8ꄑYRԼٗSMv|za@igT Xmyynֵ:xv.1 ,^pl#l Nh ?*syfVkdFg}+4Bzu֎dh_^Ø-?(ߝo^W{ ijp+fg䏇PA x428v p4G%wF|P?l%wOi*~W >QWfI!vrs[>[9a.OW2ڣ ,jjwO36!g ЏC#v|*/ShH..>%]jXrS=/n& I1xٹ{>t>9ilPB)ܰ[UΰK~4O{ (2Guq$>̹1]BK^^͟qV ?BN^ W+ PdƟˑB rW)~;+J Ihȗ7OFGs|o/L7,!71dzɩ!,iz-;gvZ[zwىVuUÂm$~+.F("sp2="uUO+iPà$ yi\Y3fbS5ftWS3D]0߬uz&άG͑]'sH[+SOE3 99! ;b"馰$_WJ7C9GW83Z'LlP6 gl>Esm[ۋX*$P^rhr>C<Վ⌯EH$d 0@dΜ̯2xD {Z+jtFYC~>ǯ^!ui'1v" meD.1ҏ_|>Ҿ&5n@K{g="khb$)Dodz2k7 G걑ux2` ƛx0)Cr , 0@ ƙv%J}Xu\ΘR.\:h6BV.֘ǣ8}"n?jb)j#d2y}"h K"EPץۋ,Sj* _%L`~ڜOC(GkEf| ҹ+g(+2ƥlnh\_a8u9(^Qes%cU8ԬrqgV `"*3V5eokÐ- Br hTנF.2-%*.U(aR(U,[nU WƇo|ty% l=:s,#_Is en:B/.=p 4`VP9bW11"´J)]l]kQJ[m ތa\h~Wýv3׈8I?\˸kpǮK6>Y ]йmrʏI Z4bzv ](u<6'~E |P ]JZt-fL' 0790zuB΍*vaBu{yW] /N 0GTMdgkFijښQ{Prm1@gJ"=J ݤ<1j SP'6j< ;Ѵ J t'e(Ȭm&yd(9݅`>BBr* Ĕ\=Zo䰵m&gga2]tUJW2kN͖cNOI cd,ri F8)Lwbb2a5)QMNO]5۸"-d~KmB.EB<β5I4E`q|N_mQf/'ҹD뺒dz:,UJk]]}{BOZ(B?E/kۓk\̌/s+ͮEP̄v>젩UV|1u</]9na"l dn6ztK{Zt()cE,m],$nڥ؅zD*'VuDY٘2.ҞOi6 S4e}3Fv 鏎{ޱ mΥwT%j7q,K{>ͷ}K?QB37_J:Y ^=cwvo$w#; M ʧ21 K#h]f[\*va\#gTl`R~4Tf;)ď)/v$36F;d/Y+o;= GN`6 Y -%*@ ].| X @G5!o׶K$SU>fۼ;("hɑ,%緎PfxPl˕z"xFL 9ݑ4tZ\`T星ex#&M`BV{M5`]ԡ"|R)GUc^dPrlIf&d*dgj"\.ėY$"B @*85.It]KVJb^I:bF6%bj Ǭx{g΁Q|n*G.DZEit7?NFVW4'T2)$huGIk=PYqQ L,Xc+Nh ӭ [0hr%deז"Hvz'Tɓ3?dEV~?x ?xԘ-p=WFBN8Gռ&B֌2|5ҕ8Q/ (\NrIV5k<p Ș^v@oN#/Ag H3)N=P࿖dYij $.)\"|^A9J;?؈{!e U  ճ亚a?##hJ2a/ҳ3TXN <@v ^xj|!0hރ⠇K*GMȱPR2YwB;"GktBAs]d"+bøa,}# P.Z GK*\tl:>\5dJǯ& }3K5u{J+){U<ב+Jgbƌ²ē S~(HwpxhiT_=ɧy|AݼmpͿ@ C3ϲ>U`y"Y%B}w R0W0iܡb6L>-5دvqie;=xbRqQ\f Ed붏U_?s (IolvHDJ&bڶehAk%GHst}XLU+u[+ա#זZ؊4d?je#pmMDfO[%X7]rs0a/VM:i1Z\%- {Wo*V-6?!Soﴎ{mG2M/gW@5 z4އ|&-?( vBxvŇ}2 9(nƦW0ox (.`eNqda}弩BŁj.Bl>R~'UkZ6ݠUk|d6wx&mi?"vԳQ 6寱jhdFFHJd?C^~ki 4jx6۲^pk&5b)2A)X\{sRhc[xtB4}e4f= |VJLA?5ff`YӟG5&_ݛa0aUpJ^c;`Qd6u<uNs!/|W$=#j7?X6V,OB%dYK3TqԵEg l™`V݋1Ny=r /Erdፁh |9BY!nDK L8QӭBJp,%K OK1Ik#ENL1cN7P_Dfk* E{UH^h+hQ(He -4놾$ d_#**iE@E$z;CPuwp䫛z̝m 59{2a -#V*`wΊrI1c%e٩au)՝t7 ʍ9Ebyr ,w0nN2lwbFe]v3hxz#?)߽1䒟pMb{[O{b*VR;wR\jTɶ~$ 2]|蓢25K`bױb5w5ɲ;!u9HGnn%ju.ND ϒ(UcB6>ԁٝN\5ה??b>$צ3YH'$,@ҦΝDzN#]5eN|Ķ2PuZ˶֑i4[2nvRYuUePk5,$ݔ ݿ%L٧yv-qOx`ˀO1^#dRf/!E^;7Π: *{oN_j݇ o-ݙJ"+u==ۑ=+?>JtRoO:~d$pWUsЄof;'s-Q`ye&?McC\f_вdD/u [є=Mj v$ WM71icϭ [T#ŕδֺ-ԝ4@LA@WӺ4(U;Q%BE;F7tCÔP}$G,Э'55?Q]i.tObMy|{M [Rs(;I:4S6 /g, +:v9;K ̋4Jɬbh%715y?pxrr&mNNk8)j0f+vwAtA2ɨӵf([8 M0i fmq'V44ݔ0R"e0[/=O #򂮗W{yקl/菆U.,K~Cr[Lrt V+tj3~T<laSU'HBsPQ5=E;,AVC|kUPm c{{(׀e憶L"(~[/m_tqJ^y'3?rTB@#=߉ f=B q7_ԙ&Mb%3x VbEh w/uI6p./K}5g4{!2Š4]KD3)K:S~4 Of#E slۛɽFG+fQత|wP#KLU v0Z;/6aZK [SU98ta'R1,>UʁP/u3iσ{Au~~u{rNQ_G gtÉPW҄)܍ 淴]  6`MVM]dx+:mhDLr-#s)3Ik!}Ϛ=;)94Ct mi3&wʑNQ%$˽^V68;7N E'Pwº/MGyӽ(*'t1ւa D_1S>n }R٪fS/z#HYVV#\U7p] #)T`Ms~}Ո.GySs#MiJ<{u}#Y:Z$I?<ć&}p>$ ~$*-wh3Yo".5/$cu2uS5$[HCӒWnRӲ#\qFa6V:.>5 a{Y"Jn.EֺAD $hm&5~[A8Sf)=NܞlJ}-}0M?y`7q-fs3E"Sf8&UƓ6G7T5Q#> }pA f[ ,5zR!pTܠpcDqMqA%x_-pnp)a\pC^<5Bt~Za0ڞA@r2}lFueKYH4,DtНJD<\Qk~~e#ssc,bLοvoR_ 2|lf{f5bݡ׈ǎezR͞ KOM⿜'y j7hK 5ғCt~]OEKc6ێP:Ayȁ`+O|fbh6-fnʘ.urFK_K$j4%?tV} //ӒZ@ן8T.iH)=jŖ#R+'XUO`t:26⼤Bʢ˨ ڝZ RlҞ7ȰK"2p FS/P3U RH4HJ2t %R},~7FBէ5.Y,Z?y! rK~HWpDFFuo:]FTCD,^ϿBV@xmhxKr f z[-rI%q0:haCG* D tq ͧa6\[ÇP.ivyؔřw'ddw!$yRj`fNJO2{nVo",mnIѯtD z0oS08| BH`@?%xFS/[9,s”s ^\c׳sZy25NIx.HQRyv S7IuGXZW H+*7RuGZ9l z""2=||KS{0Q~81ݝN$M ]\#>ﻎ왮W H=V>cXu 5;Kneي~4)e\>d<_(n1R[&k2>Oe^-(e*%.ϧQ2` h2s907S<|dЊӎ*fPo*r8u/CRgۯN[~Rb.˧:0Ӣ$@{q*Zb@=%d{>حʶ d%Od+9A)T[m 8\PI jbܥG;&1ƟǬ@A8(lWF|qs |[luBz}gmZlBiPݛ1#ns*NGZ0dbkr!Qj2Tm9GG{$\# o-82Ia@<'d4/},Y]-xĞ~ދ3.TTJW(r3g)=O"};K/s6Euak2 3?nN^Ama9dw'Np&]-,!_p*Wr9Pk1O&El' ,oGI\#\^pH3 f K78 OXV]rfgp#bˏz3\4Ŕqv{X^1I*c-wJFAmZF}rQ}RIτڲy[fn8.IU@r= -變Z#*Y9èt h"L. O7qᏦ忰,RS9a<[SĂsYO۲i3,#BMuULùz 1`1~X  :/#6ַW,ou@3]yʢLepC[ i ARJ{w!hd8!?jI((b4ܰir:TlӖ E p!W)&/Ak+AcB|T-2 \C?CO"{ {)r,R2Է׼o犇CkaӶW7 CLr43F;jX_NZ5c$=OR:k+:տ+]g\pfBM1c.+czgD"[w}^VCenJ)}! 4S[8XC&LV%j@H (ݍn8muGHSDM> :X*UmGP}i[+[b02[`wT!1Vm Fp˰-I7,a[pAL[hCԴ+{Z,ց y ;z]ŰO6bPFmVZ! ,]8yg-ڽ8:$l6dZgV/iDg) a5Ya.!}7;V93)0)GSx4c/F`rx^P'$~>to݋5V8n'PQ'nVc6U+9ۗ?e$^[jE2rGy s|?=Pۦl9"|'J`cuICNzؔM( {\8 >; 4׍ac6B!QcM.0'wzjtq =MiJ:͆SˇI&br)q.l 4'VɸHsQ'EDK$#j1|yѓ>:5N){=Y53ЎSE>]3#KF"jϚ,_}3 ~n0Zdf"duX*# rK!e$qD.Ց aTsQ=ncı\GcЏY緌\[Xh ަ0~!B4A%Z 14N,Ft 佽{nOFAud{4vRElgn}_ T[af'= +zsux>4J`=7rЇ-3C}MPfӶQ[CZ4FZKwJV.5flۚKE4+ ^ a}TAujә's$gb"Х oIH?CRȀc^1OO~9eBj;^4P[Uho}ŧSA#1[kUJ^T@c1 pL =54L&}Xrxaj͡\ k}cBEe$? <8v&®%+F?1{Sr ]Ѩ9&p Z/UPxq2c 0B3DDUCVXz@vD_ ߥiTޟ8e|J>C<>|ŒF?}+!1. {+6| ɥWc5.d2>~1,z`]HB;|HGhK.!ݛ֚%8?,Wc?"ۯGR-_f+еX" PjiDC 챽WgX mݦ%E ,Q}Y}*؊b ~e ,G`WV\Hk\T) X)ݕe_ pU :S],s-8 | z5Q/sLqKIt测|SSв ) /9:w9od5\{>Y~-m-i,H)J0KDG*Ovm`'HX̏O8_Q ">%u4'I֐j |A=t2RJ-ariZ7!ةHV)q 57fߪ6/4mb6uO,=@p'2ʹ5dă9XF!Qӹ%.=Qg L zDd| A,. W‘61%-&bCY>ڰWoqR`&X>=-}kS{)g/a+aDy ۱'Y4Ӡ}GelUo::$\iCظXYEԌ?LUv(wQhFsY$t)clB|/$Ά)vJYP,#I] W\q[=xtV8I 46өfN;lO߭dp7a:~W2ȶAEQ&wx\$֥Q4po PA1Nr<ЂSly[zWK$>L])k`$s~)},߽=(_vwU;ȡļufIrUbb𐛪dR ZͻDǁ^2I@=zP8 ::ñ rV\h^<\VC [o2g= eDfA [aȩ'0p9Ҏq{@WϊqxS_=)hxɭ~Ћr7DӒ A׽>`<4 FzW~οTޔ5* Og)s[]6 ţp $w+ލ__%Q_áylbsYaW8'RqUֱNTZv%{BB,Ӥ2$R}sxZ=v0% LS6ŗF7AG"dxBʗ[*s!, G"<2 - ߂yebJΟ2LTʧJN8 8'&f,B5"R͖,\[n'^-U/S1-@&Ea\^gZZn]{<~.AZn`ںK;r?d-ȱXUаڅJwC X;؏/PC*L(/͑XƔ;Ƣ#:KMV ;^8O"e>F2^]b~u{ODݨ7 f*zDy%yB|>xwGQ-V0ej Oh_/립B*׈Sw0\Uڤ'}/{a=!uvwW'rv҅V# wN [TPHkhW C f h~&h5oc~k؃iR{ l;<Ue5WNYyE` uB-潴#i  UO6[K6~aw%Zp; td,GDKGǶYcXEum6scIrA '\GL,.X|oz'y<<6XnpY@,$8"(.\7]tӖ_+X1?3{'}a^#4w83uUgdcVeqq9&BI+]qi04Lnm+0f0n\L I7BoXAOUTD+D"Tђ q4Zwm&R4~!ڡ@u`E&6iU0JfTsfN? 6c2pױʀC.UG ǿC ԍqAv”ec{3s ӹNFI2iRLjÂ7"!BCȶbTEbVwwSu~n 蓧O=!펇 VmQPou;1?Hίtk)waVȑz])ZaWX',&vqD n :Ԥ+ GA: ,(k)Ecg5Y0rv|{x1G1]1ʧ pm8cu=%cN\x"X.)d{^Iή^uX%Ӽjq T7pͣ-)q7" 6VxEWwr1=Inxp6 xBs 8l C@4qDE#HM=]vV.?VzZρ1aẉMCj[$ GX:\3{{hBd `$O `Xz]W71/wYﺙ|ɀQlmVop~*%? )n54N6=u F O' 1|l;R '@C<샑)2fvkzC9C*H'B.u=cwgԻU+$O 'ޢ.kߋ?@6#MDlk1JxIgpR,Wx)c6?B~/AKT,6* *DR#%09:Xu x40-'Jj-\E_(!1U۸'7طc Uv1Gg4N  <93!Z϶EsɌ /6S\]6>Z|_*}\GizZ1-SӍvfzPҫެ15Q2CI"5!mCоY =PƜ}o1;J3xH^qPIFĭJ,$x=Jj% Xw1-L_HvU3ATCk{f3bȧe;毠~虃A꧸{ z&1ߨ$9|(t4JslA"IFK] azr#)hS&Ҡ'>B_iؠI%LufYQO%+Ufw=b8'U[1u|DŜFr F6>jKBw+30)\]*=L@u]ۣu f)XJٚc$\Ӫ3c0t0.BIؤUq"eg޲%MQ{!mO#}C\c lZ 4YQIq߭ G D'NwR#QHg?`=ۮ Mԋޤ4HP%Rrҵ$(з<"jh&.XBWmLG+6E0~թ]TYz!s@ zo5:No\#yD4SfjNZOOOE33UUC;f(*vX䈕Ki }Z6FK2Mԗ}LyI#/MO3m"Y= Q+XG5KzH{Je!6Hm I`f;UA'˺B>6Q&q˂@"ĸSC]y* 8*X@W>Px4,;Ca5Mb5?Z~tYo塷dOr,O^8[DVRsmĝ0)K@e !m`7W8 zPg)9py(LG$*y|?""rD;HH\FYF59r+|׫SpXneDb[Ҧ_JـB84˂t F[ v&j~wes҈)ʮz@~4dm(S222 &^fgyE!`܏-mdTDMs }uH 1b2R*-TXJp-xI)[T/6wBT]ߊ49jZ-yسxiֳk wyZhCT 9!Řx'xز6qK5Y9?N׿I(sM};[{5Ǒ6-#fl&۲ A.!#`~BcG=}:R▒UL6|[(g/ݼ..Uf}! K! Tw?x4Wʇ'p7}2Z_A*w+|H gXBtkB nI{{[<1``pXFxPJZx\t;vYhi*;BSGĂ3tF./jq9/(a-[uj(S .nÓwrCohUKwrY{}0J@#+bֹŁ(aQ ѥD#P]<eГ+2YI"8y:A ȁDŽ|˸Z rcө,;W*C.[$HdeS1Vp(ae.64$ZZʈڞZxWhao+g Qa.]ED U,~pV̉C}W :䣊_עNRt82e3WNiJɅt`[<~R04S2zkhtDqQ(۽H^.9tuqj,rST=%ٕb5xOג?^6eߥ* eaBښ NM6=1S\G2E-Uc֮mGdXA^CY|_k§r FDM6_|FBK"Nt`$. 2e*%%GI`N:ߚV)Z}k6|Q?c n3T~6cp;06YB~2I ܬA42 I.>/nq؜Zo}|{+aŚmFi8,ԨJ#a0}iAgϨoi§s[mtS\'Kg)t-aC+?d*{Q?[13$ip:NurK*:Ukyp D@͕u/>|,&2؄4B&X=rX( IJ |0[\@ЬF>\wyqzPĸWM h!~{RѤ/|]kFذB.>X^Z @1IHAa|]SPf>AпNNF{2a[=gxR6Ye/aZwHЖ'+Vx8Bރ2 %SkdHF"+6s^2V߁T5P/+9['-81>2ůɷgCQR.Fs(ڊHKJD0qԉGoQ-f(K?>QW"#%a=껌A9*ul&$ztJ*]d^./ryq_|#*2_~g1Q2"]߄ ua3I,nOzJ򈜶LkplW͝0_Wȧ c / "^PWA#[yH !21~ WmAb:̚C)b]1F‹զz/8r vng `uwxYS1y:*h$'.ErST:|l)'&a.^9W$bnKI'5Fɜ*V+j^ ř^pa  c<Ii2̛Ђ48UyM^ސ^UJ˵%VTW _BJi`a=V8qͿ 8EiEO^K;w h'& 7NsA"=vb]zR#3cBALZP,*pnl  Z,qجHO:+L6ҷK4bcz gd2%OcdP$dErҪ`303Ѩa|1D$j2Gl ;YpLAut(E&.kr>afZnx rz7ԙ1dX|1R_Ոn<Λ=]V&3i S_HkMy Tnn&1 *^;9rR@LJZ@|l^(yׂ@. \A#h䍸Mx&@UlwՀwa5 Y"68+#ɬu)fdq6;?\ee(k^)RXjWϏʕ'pWT}& T)) D1AY/Ȩ3\q(b-|5/)y4)q|9EiН$oD@8OwqwƣԎV8^nZ.LCWp KN sDIOKj~gMfҭAVe 32XXC0!]wGHԮ_zf$ək.N}D Q38w\-hm2N_qUuW]1}CnD&6YˆQ0hZMӰB!E2I6+aڰ*.=syN뇊X6X"G?Ctw"+oR]w\άwy#,C~U)d:KKIP>EC?U:d!Efn !L] CSRojgKֲC`(aʊ 'j2|IVZU<7{gb-I(DͦM_& e@DfJ el޹a4sX"?lb#r^?.[}H8_V)m| cL@!/,nQt=*v#Nu<\ b!h뒇l. ,LxKBT*hF#Nl-yhGê. QϤbP_{k\'8soe}p``e1hE< W%dOQ|O ۸dCTg*@"tBՂ"[1бΩ[UdIz}iȍ6\CmԼt0ﭥCl0D- On&]P|\S %3P^NT{iPo5(d(+ zpclS& g% Ŷi!\-\+޼ջgd"z"/a^BbXl4r~ppAC׿dR|x\GCpo%= e/b_̝9A \ lPFDCY [ڽЫA]`dLZF/EĞBu}М]?ie9䂵:@: LgZk9N$.-D+[Ar( qe;nA?5#$Q6gRN*y +畭J#r7 *"׳ipVC1T3-<,n0CcqJU^N9)p~R<3)##ג4@ EJgVAf3— O*oRw,?ϐprihZ$ݟ{?yVׅ2RwEtl]2CߴȠ.{-[NVٵ_/YT$ͬl8L`4w@7oզE2NjEc>w4jxzd4#2`bWF/ؙ~Հ2’ Qkf565cJ䙋}zp)lQ5۟b{h)1rJf;5VS8@Ҭ7@ rrwU!ӌLL~ܷQz,mTẀ ?:p$ KYH[/Æ\x#j\ief%cZPyPH4Byq}O$- Pi'kQ@%Q/X6KV_u*?iQL֙as Z[C0KsxđܳC )ݑQM%X[2I*qYB/}wIhxX xD̀3 ^!(r{Ym4p}?Y [ι9*q0 ņkySDtsώ$’FtTJZz~xK!܁;b~jy=vm؝CԺaaOM(qrMb/«$tzҒV*Ѿ5K?oCߧfRZ & yL~ThD%)5X~4[{:^,׬r5N=H)yK Nvg޷z-[TTpe '`qTWQ_lm?t-A RgM]Ϻ_"8A>qx쎋FD]Z=ȱVdeUH2D6hD%֮ (5#E[ؿ^eJd$qp[09܎%éR)=N:,LEQ]`S͈s]KtF]$7#ոF@_Ȫ{Yb0B>=4>])V"LL+co3Y+MasIlOAtUġꗔ BĚuS\"'D.K9iŚ?j'ygvv<$kDհ%e';ZT^GOYE`8q{&崝n&b|4 *]"|s쓭퉆x<E Qg c]=tYsrs"JigyOXJ,x|Ɩ574p^bf/Chf@&꺄O^Lk1 }ZEjzZ) Ժ5_< F p3p*V,)l!A/W"K|<ﺑWIx_^08h\zlmN>5@d_?ZLq9$/4va/sN!A i! vz %aӳ #oBB\ČU+\1ּ\ݣN/P*/ 1GJ\DDn@JU}E! 4:x-'C_ӎ%}ehoL վ)XyY~bw'x+&,%- o 22Oƾ?pq;'J1'LsUuxcsk uW& Lv巟oL P֏E]Xqe]apG9Kr;HbB g&QE4;Z3 bG?N3BN a9H dhIG ZV$|$JdFnZ?4AW9)L\Y&2X7b$(?W 3)P \*J@a9GY+Ψ)xiu^?Д#Y3"(HaX=:_~BJyݞ;lN< `&:r @YfR0LpS^v/; d<٤h*<ɜ;,=ūC`B r|PǑb1(ouPt! O 퓠Kw+v7d麝M3t]bmp\!@djy+F5O#\')Y' $hUo7R@QS]>C?Ë!RCbGJ+:A'HUa 8DG*r;da髡ue:7,7o̦]Ss6~Oq#8;:S~}V)ޑ9=|?+Ͱ܏r3?hǵ|5 cogR0IW7ub\>jXۑ<&5 Ь *J:WxB:IS.cDaNlS^6^w͍yr28IZz0#^Ϸj1>gAԾ% 5Hf}w 5S?17EtRY1ls@d)& /ϯD=m =AQ5m'nQl 9l!`kパQ,1&& >H;KџSU68=#eeoNȞ@5jaڳ,O#<o5h@&i@[eQb&n|`ɹޫn )X] <1_Zz4WS:\ 4)Q:G4D[a1/<;*Oaz{?Z6݌r׵Z2H > q;~kV̲mS5/ 2-tV)'hv /1Ɍ/rHteXF4ؖ.!-]Ԛ8M&w5^S;!ȢF޳fjt{V!n0K1t#S"1ym Ɯ9>x%Y90% ; 7 n3v.|r-`n5g|wt [bm%`?Zs+Sb4?*1E3Y%'F@V?OiZYQ$Ew/ބ/k^(CiH`@T'j1#,@)*E#(mp|{*,XXtz`FR%/UYP] oÈ Iq3!T otZjHWT$hKtY w5rdi_/1lr +TSYYP?jҳ"ZݴE~}98?tGN&1þգɶV`Nj.BO^c:q iy ~R"4] >A#dIi(1(vO۲ݭ3ץ7ײe@!$eE^!ƺ 56}Ox(niZQzQBo- !rpl5@i@p")(<{ŭʶڮLx!XҾZ+yBᣃ>]oGk_kzPKALؙ|w)b+%0[7GhvmcGƃ3pgDt)=!fNiMīôe=)Ƽ!W\;, {b'i@ 'cQlv ^"ցU ϫ?HfM/-[V%)kn@? ip+0ܹcy› No ];cVt.(eZflsa[CkD&]bi]ό$!&)K }'?]E \Lc8Ĵ-Dza2݋RwV*egaMMJs>0T~ [ +IaFfߑ*]JMڝ1 ;p zG:6z.9N:s\mK_|1 XhRÈ8!|NpAB*0& {? {ݔEG=d"f`}c-Ե|˃aS\uc #  oAz4ZBN6- PzQ/@#P)k^Ag(K,è$];OR)A];Y(w@ՆUG§sM JnB#~Y2ۿA@! '#)0_~RA[DDN5xo D?NM?Oj;NUPfZʕvdW,d^!~ ꊵZ"i}ѶG9^&&I$IMJp,ڙ5s( %n M X,1bm0N:hk7#?7&p|| daq&yx.hg(ISSboOlE8xaG0gWIIS`o3"6 oa4-zyaY+2Bn*zap^F\t=\4e;CsR!;pUOO=|Z;maAͶT~y.O)KuMS 4k [OǶ dE/k1Ϛt9t0 ASUt^[ڦX, v@b>iJ# "MD٪ó6>=t 7ƣ-r7?kq.*f;mϐ ϊHhq5iFA)Ja< VWo`skgiTHCr ?ib$Fmݻg#ԥ&%6PF,jT/:r$ *(EE- ϋg;H+a5'Ep/ \ۊj7Ftn1{ ]pV-mlhli*-G+mf "0\pOV2^H>IćQ2Mm{hk3\K?QRvXmѮ*pm n^!O(+8B{n-.k%Bs*!,I*&sY #!d;qۦ=rlm]wQU$k $PXQo2/^Ow*A[wX>5UCJ.G,/gAPhFyҾiCu)o GG. |EݸN> <~eXc̃SMYFwh譚$MaV*Wo{YsѾ~i@Ҋ(*%IyH/B(WB%KLa:<=2MI% Ռ#qe/< K"iʄjK\GӨj,V nc#W&{aCk B5bp Qenz`(+|20q=)CPEl X쌞s 2k[ =S݆FnM7Y>&)U4͛tŦQ ~, _ G8zx68Jʼn冹}H Dy6\hނzE ^'"~/{ѭ )yE&k8ЙN\oٗ+>{ʎUe%, O6Mpo2q Is4iBY8h>"N 3@tySJ0niaW爡 v$:U =k=j.ƒ&\wõTofgPIWh),9NC+bO.2M Y_r"s[pb=#a&Zͩ-9 eCKZKZUqpK_YOAiUbmJn "߸2&@хƳ$IH@$Knf\ k#u=,a-"/Oy~|ރ>>FF8Je76áJ,2\&#2钲ա+@Zw 쫍$ R]6S0LzZJ=}PZGg[`0o Z:)=Qr/{TRlzO'G pR YNxBG9wq em,f٘-+i{O6l{:-WcD]2"sSĆ^aخZiT]o|w[1w(1zʁ׆ 7VAöD\8HۿޮH҄; A:KppD܂/=W^U-r@PFתmB\ &e 7Fcp6ݛN?{r5S_-hU ~y/uq86/6f/=`e_GӇaпዄrb !admyt%Xat᭹IR}|=bfAZFۮ Qf@vCTES1f.}'֏WzD6F3⧮!"ⓢL"~5?|_Q&t;/ V,Uוe&S5!&GÛ=$P8b3e'-5&|8|f_eٌ}TGXDayW*cᙞuJz=w0V;cr,ER")dO>k3V>"Ke|`)-<ǕnL"()(slp)ml?^-JXpA1hۖp'֪845;&ʋOZo1q>SvF^}2e8ŚCoKQKZ*Rqdva3=+ak=n~?dwbld㭦R6>C![ATӷsO^-3' !P櫬]o 5Y[xR8-״~J_yПgYb'Z\E5[)A7=~ˆBW!J?uOykΥK N##cLD+NQv&zJގyTˈyUOFA,|ܸf5.Qo5-CCA/7 nDaӯNtLԏTH, `?[jy/({򡕐_v=犘@/NwYZhg+])jqt:7xM(CjXBL$sVup){7.5`;6Ȓ*)6 v{pW>&[A}q"IW`ntRPg=:MvdQ6/7D¹i*UKvB="|;3yEb}e_7yU`j ~4"r0g?e͝*~W 38B\;}a2 1-1"(_=‹]#{i΋NäIqF  XrSKnuR+"k3 qZiz.IC0+CHޢR(z̺̅dr,/xSX0"m R\;<;@1HRGZ "s_Ȥ^y3juW:9|~%X((" ޶9OȆJm88>+w(a? BP()RL7׷`ucw z6̅zDY}$ž(fK,pћ^ ^%/r%ԕ]b2~ϋ\td*#4#JHtv'śA/ m$FRNjhl#UX丮C+]ʽNz.يab׃PGnm!j'n@zF1 2VYu&gYv \X!x+mpA"j;<(20Զ"VQL: g,#$) uW|?@.$?eW; ڢ)6t#IxeAvCJ!f7` ;ˁ zX~DQ^Y_m6ƛk1ht yw \! QrՓ/ G`Γe?d+oVԷm[#w+#A45|lU.~d;v4ҬM9#oY'RxؽVi. BGBDĩ=me-J8LB f'|f">*3M?#i< , lW0C/',AGKpmmI'0F'@]{8H5\MͽSڞxZ~So'ֈ3qϾ$qJ+NΏ$%}:˲ܩ6 $.)5y)ԩY{WX!6us o?8ús)i 3Z'Kˣ+Eb[Qz8 kD%1jVqyz9Y8c62#M HMVAcq1Zf4pngv`ܵSj@ 9{'~Rӭd"9]쩥G6} WFe y*ŗ7nYe2^JMmYI1Co,ĸhS>k[- tu?]؜fd[Mҝޭ<^e CX`z ,F e.om~68P*+Q (4hSW)oa8F79ԈI "0I# c43Uue~nWxpZndRNV=E(1VFN!aO˗3$yFE˱ 3Us4#ulx@_ѫjZ(dՐMsF Aܧ.de&" _y*@mD7R3qڬLXw8 ܼDZ{mXn(Q Ǔ; Qk߬±!3*} (Hx^1k7<Q ohߔ7 }ۮ'ϧHgʧ%ػ"@Z$]a#]a;gB>W=C#OeQH<" 1i B8ࠍA\)N'ȳ gaa-GghSigXFJ}WH*]`&,c@uDсZeQXt0AEtat:C˷Y~.`͘`{ݬҡTk2Myk/309T\?KEu%i 20{f+Rb ҅lC-!%uU, [>(65_c pLkVm#s~ѼdlgЃN-^B{'`4x9jN~lfVũMg4!Lg5 v&XܞƑ8T*#\n/mY<#Ied1нk[dA99d(C_[2\rc8-:׉y 7cG48[ඪLUk6Pޓ-l]gdd]KF\ܒ1pݰbM(J=0k6Rv+ay+KgV4Y\b [Ll57#qD2%^kAA(irs\r4> hiMT6Lv`1!1EZvWBD M@-dNMZvzm6&>PmR+ pP|=Wͣc4h ;D^{Qo'c"ܫPV9=F1*5[h%~ W';- :8Pq+PYY CTgo.vXWOuh@c=Cσ%fZt,3OP\`$IƵΜ``9b=]`cϦ1] \Nd#%ïA {mG 8ʳc _? xIz}|`#}лR O/ /J1 Vg1̊,*LJW{v#@=_^` Y5>^Rl.鞂|M̒ogcfeR"#`~qT$|˺t?xO >穃U @2ӟ+qܓd<S-WMoĬ# =h,);2Dv 'hm 'x@$>6t Pg!g+D$ٶk *F Ip{'YHq`_p6M &P&qrc\qtY"(?&4ׇKxvʒI$t!`)xƎ. '$/Ysg TH #8ֺjl%P8DA~Wxp?>G荏AL>}8s..=P Тa|Uω*=W.H'Wp[Ҋf@I!;Ov p.?x/C.>0/K t^~Fhԑ ww/vkb(]E"Qc_JRvF=WYO_씀ϥ*t~/"X)>q{ڦ6`^YdjiS9]/LQW#+wa'c@YO :[c>;'dks㪼@吇 ^i_{. E׮ QX8!p~Thwe&Dm1W! ݿSj:!5*M'<h ; Mwkzfə{aIKKۂ|ݙ]wc+\IhFkQ ms)q+`H; ݴq>lmmm̐~QBԙZQ9i`mo:i򖡚(?A]ӞmSԍ(Zkx@$L;˖ZG=r¥Z,` pB@5 ^) mZ GgN6F٧tJ$ aWL=i$Eu4D&f^;6i{-GZ=<h/K֨.X:LL|X}w~r/cO.n$a_ 6SmrUzJ޷ޑm AFsܳb,X9u *dyE$-f%[v ?']qaCM~n(ЏF IV3dW. ##!U;˪l?F/AӇtFKmЌ'D?w( ϴ dƗNpc8afKȉF镫uoREËf?ltMKLηh{a<rIdR^cMs+1Iejm)2*ߋے"!"lfOpW>skPϵlQ\* mÎSSu\#IpP_MCKjm ؁{_dN-ިyU̔,xđ5Y{@ci-dA <@ad\u`^̤gLik,u^0;p4k-ZS ǩ!1WTB EMhMKm{#V %[dEAZ1hVXIb"v2,j}A3j֠g{H$6dod٥ԖNYEuI+AJ[;g`"! _('Q(6=cxjܲФˇ7zaf:#mbYū ( {ʞUr F5ʔKʈ[&Қu G5劐s+HҟZ^EvS} -XGh:y?c.n zCގ/Tc#qUt,yʻsKJ}U=&@E]׆446XXY5^^B0eȀcVR b@P`V9<2*_ړQ.?`Y8ZR.IPKL3BbBx%#LQPOP6LFM@cf?*l";c|WVN qw8-&ef_MvXJq߸]1HDNZteS_ :;Q? }Hp%tiKуPL!u}a˂M#ryT$ٴ#P.\_!q/pĘ$a4XY5?Gp9-Z|19H3p3%'lp(s줔WRJa0Ь#;8Xó5&*b˨sSJ4J֕ozlȩv&hۣM.na"mUX򞲳! b܊Y6zKۆ3y]*{#/qSLt>\!^QQg{՗8+{xid/@-#|5EP\l#֫O ~Ʌ$`~6_Ϝ8LH`IqNr )%SMAΰԒwXiόvz |PZA۫%p ge{ Z7b+~!dhaP-{yJiӠweJ 3, Chi7fDg-:ߍlpk:ĸ$G}:I F2:5 б#4P;r%%!/|j?]e}H0iiQX<6PFtyiB(*LF_ !L fur!Ȝ\v32JmQ9S- :%Դsم>Q^y)Zup@Y`_n7  RbO-y6f>|j*WI,\L MБ34&GKzGO@KJ8.U@F̮g#! Ji\#ȗI9b$(IvY' UIkmQn‘c"+_qo5]Z4i}馝*X\[RcLR+1c OM$z8l~ߊ+u4wJ%mC9uFPpZD݈%b eq!.Lr;𺰿L06C,o `Yj%'- [-{a-e2JjMDx_bZFUz˓ k3?-?qcr a~\B;4`^RxU͑?:T}vj 2> ]4.bckFnD8~,>il c%]yK;=o:[:Kݸ'i<.{^O,{E+ {DIk]s <\:GƥHC}EӦ 0\C I[ZҊk(uO FCp,>1VAF"7+y2x~ .ΑE"<)| 5AM  <`57Op@&{ΘM{Ө=X­NtJ@_nԗK$,6A^!8&QMZG8?#F K`̜ֈt Tc|^\&ꐲ >NӦ{~jKjz7ht =Q}q Tj(\6|SUj#~'ܩ^eCG?YrD?XK"t3T_!k0JNLS,%A e^>U ^8|!0!b`a h3pVN\Ūϣ1{.,1x6tJӗ+bkD{x֛ *AX1;u7] nz;LnVdn-QuT%8z̔溟\^r:@ژN4F촽 е#&:Noy0?TB-kJ"\:W+yQ0UgXBJqDžh6skL^Vt72ϔܚ֭-Uףo$٭ޙp-I/Ayi0_{Pv-maJT"mݗ._Sl d'U沂n;ku#D;4& X@! s˕q-z:s~ .Uw#J>p' T"FBȃ]Vч0:ʧYT:K tU\(zp˪Ą"U 5 ~X6Lgӿ2SӮYƞ]4>B53( 9 W/F1SMn3/P$1$wr Rͥl 0Z3q(X4Cݭޢ4hҲf`\no?T!S0Ĕ٬&xV1?*odN#nUcnU#RfE¯~F?q.!g8lUs[/˵{$cBa{LO|Wṡ}K>$l4x|i"ЕЅ))C޾TMLwXjrhsWWбMK G6}:נY N,Of($4Tg1K駵QiĤ:rd*H1t\nWJPr6p -#)!uzFjq@2b3]"A/6) P,ikۅ;22R˙=n7ۂH l`JIRX֧CJ!U7ZWGXnx?v?]bEGKt=Uo$Q#*f78BM NǤU2ђ0&"gwaJsŕ+3O rVSy_X.#vah)U: [c6tD_*`KMޭ8Q}zlc ZOW~XlX#[bAB!7xp-CSv EW}$.7o6TCW8=2B)zcih8j{IЌ "B{>AWfIlҒj .rB4B%55)x:#ߺ2< \0m@9 4qeg2ba35OV\;#pMX}^›ս:,@Su*E,τ 5)zt >U+o:u+^3- SWw5Z\W=vDT&Y@r-ffbbȢ%|D&`CXH׶jMk#n0xFjħx)SW8! 9Z#Ǭaɗj7.O5 ܜ~'3;`VVI - ᭼ėKݚv3ְgui蝢Zx&R/<͔իAs%/qwv +'~[ Mpu$&ʆ|D[j(˭TqK^O ud,mIo,P)`Y)⑀ 4P{4ySn-1‚E:bܑxOG9^ٙw)֊%}g ˰H3a>a+.8:NMߨb>-L\HW  Y "|7ݺ?|oK`0]0` $rCQ%S!{"T) ;'dw*u>?M5u DOt@4-b\!MbшtT=. lBFapy:/&of̶U&3*RQ*!% ^d/f!}_|/C!()Ncώ@z+$(֗`Θ4B,Dd_& )Wm XۤmҼKH]WZTV4񴁎lеN6Ĭ=Ce@{X_}WtāʭE/_VNi/c +cF-:}PZAsA<߸1ş'W9 6Aerxj/cVCu-6Q:+ri*TJ]qELg: @᳐GW1.W'Ol-OIdQM~,GЙIwsG6/GFK{# Yi7ls 3Qtd)e#԰`SVӾCۍ&;謰b{-O]ՈPMIQ{r5w EdװG OefV /.W4ލxd]֠s^Ϳ%jG)R˳n& fFˌ*J^%RVP}Ru;W)!cd.Var|P[8<|\ ə 65"5NDݛ/:V`&@c([7.~vegжFΓE#[LRl?6jӔU-l5@+$IG&FWmID]rcUL#Bb税cIs.:r糪sJUjxSuW!hCdv:,@>-"_Agrg|a+ȍѭ 8 nMc ;lОVuTƫ^}HÏUB7ɇK} CNfEs]Oq;{zD,!uΒmq44,)32#0J0JYA}b}\I?A(V`Yw֩$*m,}^ma gL#: # Ճv/8T9kCF;4_aoqt7'B4g[s/$9洜a_t\%haW##HDp`Kwb˯R)o9K&KG ?cO-Mol~D))]1IGCz ei<`ia E[E/q]W>&r§΄ >Z!rHr͑x6[?-^y#.W?T dC{s6%wJ"rÏH?DToZߏL6}$cT&nT&nOTR0Z6Y1ezIp-H]aO 3GZ"7%fBmfy2b -3'²~'`섔7.$$8-H: C3%p",>JWq#Mͅ/+0#᝴dg)$zz=bm#z6%^)ꏰ uֈWŤ`TKj4un L}zEs!^TX͖M +lV/Sb=v~ˤ q||\ͧP !XXNra㧼TI̙rj?OJuׂo`==rbK-neX|ޯ׹ZaV؞4&81Xp,??#HJ`NcC0)kh=ISvsLJ7m|1NpGMqz"";pNqI|m)^nc G֒z9N23GkRk۩Vr92K1pUNmh$I9OݨQ+V Q{n".糚B`9o#zXN3wfx`1R2. p ,d#|$Ȉ ,5Ro+`ϡhD1) 6NGJ?v $m'\RTK{hx-6fTyL:5<9w;&dmMʼn+V<؁;y5&¶BZ{~9sz żz7x䶺[ƨ3 :okb$= VÕե9+K쥷uB-{[gQ؎ɽp D{ |^reV. &0u( kN7`m`%Gӗ)ʫNeBzE ߒtU`^qr}3tx =<º!OQBfERĝz2 ~UC 74@O9"u &%ңڐyHoD1?DL/]s]HYt~4<~z0 ($?2:qn۫^֌q}P}#ă::W3羬[ R•n1S׭ ϲ?bSk\WhB:?PIΏVnTpqh(gka!#7Bul Wd=XUI >)ZZS-`/J5|-؊)ά/zgKn&BBQB+YֈYd_WּJf9?Ul/XhDMԃ = 㟖RHV?..]`S'N ]^wO0nAR xճx ~-+Ԡ} 4:"Ki3!#z:J2`saE+g@*B-2+5\註7kk" WXl3W r6Yldɂ}DQEa:rqi"K;˓h=MHpc ~68poSP.k-xP [œHG툖Ic)綔^.Y G#'ğUc%߼V хK#r/!&ǵ5 s<h) zdVŤ`8Ƞıͥ[+˺+R}HVc' 9@z QD+W)VN.@?~4Zɛ@I!úivp5%-[B辶t3ٻU;sy`9PZc@K#.6mx]Y_8e)jwP?՚]be#od&#@e/ +oJ;iaexÿ%b*]>[(1ң'LdTx{N/Z?`A< :/D/WX vms6bJhEI)onxUkۏjbRЋH:1L(rYaeRbq$_?G/ Bl5]i{yA+1'1B?֠YVpߛc͂-هKeo~  :teַ'8o̱`\J!B1.7?RH$.PKx^A.mʣy~nClnM )/9?-*4TzIv(L̵@`F#fmT.P߹໊K%d&f@./D^ˎ0Yz7,\J9٩B׈pV%~8iIZK@FyL\?qgW;'}KI2l4A#87x,j.,>Voz {, wUC MnLސ+ZV1^T1&<٠ZϿ $o/ytJ<)c!rBo0Gس)acÞϗC}lFps~' Ml`] \R$FaCnh!STsP'1VT\(>BCp2/XD;f_AXE2-kЪtԈ`Ԭ\2v:v t\\رZI\)mQ,` z25n 0%nN<̺򎉡U")}@蒈x o :">tyW@^v]Vq̐ >N Y/>p9/Rɜۅ^XPXKP\&:ER!&͖ Mm{AڬuBjaO,::ÛZ30|8EkqW:_yvMa lhӜԆYfQJwy2jX[OR'L]5md)D٤i! Шr,ݕb=Uꋜ*R5>0SUg-uBiLB~rXN`)"E\U%o~]\~i b2x\dبF%1y$e'?y1 OXbUU$k”6J=71croSSQ^UTȵR|%֌̋rmb:@))a&"pAޮjN6hTiJ,pJ[6PNR]^bJ (mlx@I?5/ߣi]w9@tWe*/qp.^Y*mp7a"$5 <]+S3 z?noK82y&whຽcSbyţ _e=-7dJGw,] > RĴ7ս{PR&Gn0:&_ŭ#x]:3i~J/cgM_nJ!@\x.{Edyyȭ 䪆 a>P HAB*Twr^h4\Sx{[,#O[$e]'I@ :Az7oJ.Eetگ{\#]EnW fXp+S0<"#Kn'{9Q g P-ί)4f((P;4vh7"1 *̝XL1BIqKCPUFi`+H x8ק,_RZ>WىۤK$<"PL8W 4,=Q$Ƴߙ.s=CV̳4:t{s~WϔY__1gҗ9 F 1%ẏf=v^=XJ,~Nanum0i6*/O=j`9Ӷ}S'>v)ң{! uţa}š/Y!IOR7_'ƣk*ou?xA÷Ls7u7}?Tڳ׋=/ԫIB5Ϲ'/iEP:bW 0N7_5 -69 ]5=5 &;њꚯou?\:ЋG}'>ig4.ᣍ+&<`r.R으Y+C&1وmZG~֣p^JhwR>v7SjtPP!N6A"v9M{Pk]u-MW;rSD$vX!B{\n $Qi\H(9Ca€{YT#&"a#7PKӎ3#rDwP9sv !eETNI 2Mz,! 4,ɼvInq݁q:2AAUj^E_z }YQb?h(^%Qa ?AvM8w@ڏ H!ĭ1!KC;[>aW:£x[--gޱ5( Qa BcK԰K,?M ̈́}[YMDbH&UE.-ꓗ߮@G|ke(0Zp,敛nl)+d wX$hf[d|,a$~CuHy{g;'#;/%gdT:7m5lӮwKpY@e"JbwdTuQaW,I.['@͟v|3,. -٬.}),(n} Dp06Z$:> O\#SqK p\V헡j}[ل`RO٭Е?3nvA> *Х fX&qu{4 . l賠Znv.yO7@OFq v diGo Or Dn'4C0gYgp w%٪x#G\=.@PJ݇C*ǏE.l# J7g>z5}̆ųi9MT@e!>˗4mYJ,ֳGm'l 7̑nL̵Ț'k&Um|znq.n0> -o7IؐvS#߇:i 9{EiFU(ZyBOʄ|V~Y1a<6yJ%#yq4ڣ v+HZJ[*T=K]G1Q%3-5 q"Q' Fiq t4%}sEuVxgrFrUꐬhir&y$t|>)Md9CAekf /'NY s:vȎGkq0f'X RA/׉;~dlj#̧E~#MkHYC~ |٨NK(]Z7!2ayt/mqH9IGGSLD4n,HZG["d^~Bx_H *}|v\cMcjp\v_ezɑlƒs(iWDnQs2%(SB!btm?ة n/JƦD{2^(NͯUL=߸=狺/g~+y Ҩ+9VIUئ\1̵n{o$o!>EKDÉ},Q}^ ^ȲTLo %ϟ4X`IZs9P+3>Yߔ`-̽+ ю]Zt@3&X_8( ~@Grq=u[Y;(|wI 0A bϒ"whϬXG;Y\ZQYanΟ㻃3I-Ѳ{uUߧ5о‹}꿰C~G3[&GyUXKnSf|7Q&/aڌ *͙D}AV"ou7KP }5/ڽ,A_w1 v#KtIn_Tbllqz@<)v [筵\]O+ ?xrwkD󨘵Sy[lq-ZWvᙡSy aGjATfS(ekc0u:&v~' %]Q_ ؊r܍md/ Ճo! -{lvE+ dM+ U.ѕ[8M6];t:?]G^񩻁(O>m|!4ÌE '|& &mEr~YW_6fo~q+b(Gm)o+ky2ne)N:݂B̈L}e H5Lvb綒^؀%*rzbSnCAB$7 cy^tV:TG7쮗 \%h"go+m}zU$)fdx,h]lO04g0X3_p=єI >slj\@Vu% >QЊvQ@'~TCh+݅05w6Dؘ7dQsԼMbܔ)e)13Tyq,j:IdH\Bqgcu*u-\i#lPl%{/c^A\Gڮƾpl.: )a pC#OFRNYqY#la];崙#g~&PռS'+ iydE2-{9}&H`FO4a"}Y8zg9I=Kc "M9$- %4*ȥȍ"<.֌590Q|"lgͽh%:Cy" o.&b ,#yv+(;ikZBS`L|1`+<#rTWy[^:sV]ԗt~zw󧁱05?kKTt݇D_ݒ=C#G?Bp>Խ.:^G}VAK'g:rg#Z ѿӸx!"oImߤx3y ]|oi @ro fPsstU:ΟS"sX΂ƴ|@;$L7hcxwwR(C߁<Pɿ]C]pgitКo~⛥r1-3Re<Ѱ7ۑ9SLCgr\<خ{A=)R^{PYljXjl1[q\جXP&ٴ?ca Oߋ{C{>@+lzOuU묟׬@=HV^JG69SסT젎yYMI@ kح̔[T>_11VGT\)(VgIW DSOD]&2{ *ﱅk/zL#cn5(7!$Z0 +F8hOTk=%"nl,:LËqqo0'HpQԨ}ֿ7d!{3L_^,~r8 \GU@77U`&\F50֘$NR8ռg܅x1[|/T=Td˛z.ޕB)kh.DY@AN/#X ϶nQWZ0@мE f1) Gx~)`@:M@ذ,-&[x2c&z~oj>ݥG YG('ue,d9*lT߆ Wj+KU[34&WET{r 6 "Il=֨%ֿz@.;HʝϗL ͇Ãml5R+gn߀U{h X]Zk޲Bjg HIIh{Z 3&fgdu>[ ug(auOYxݟ'7\Ƴ^/83Q|p<j&a_[{c%7ː$*O(" -O@fu9Jd'[Լw@}^ ƷkK1#I  y@=ba0F'U6wrj2^2 _DZ~ R)e+ 60o&9Q /JZzj/?rL52&Sݶ&qulp* ;mudHY _1 ;jՐ?ioiOj(HOՒGw=Eh6L[;r SDoPZe}Y6`c 㓵47ɯuW-ׯ$)< B;֠.&;__! SzUDL0٪]:EvGQ/E$GP.7w#5J~maum$6#Rh@dbE7)FMnHDRW!#RBoaލ启q<Vl}a[@>wi@^c ( #Fq14O`ך8` z~h b_Rpkk3*;`mFZ t&6ע/FXi#^1􀌉8Ë!L^_6c*7CBC7ek)_((F]q@-5>q$@YR~lûF#F MY?[Oҿ jφh'qBFBTN8lQNv{1I.sRI[%ͥwU<d  c,I?f YZJW m(1GRHJ}wX6$D8hg3c݆ZI(AA^B =G2|Xѯ H6$ڭ:/NmE|moUeD?-+gjmWdZ4Ӄ&.ƙ*-D'|AZ+BW IoPˆ?Ts?eQe0{G0i.E!n-AfQ޿I}Wuh/}RgȲ1җ᧜T-AOuZ\U\?| ėڥa) :@- b{7'a"2zL֗RX |'< =X/{ddeSOiMA h*5o0&ez"F|@yq$oAo1U$TH؛}$\gCЍj\=kLVg@dX#eDhd, Ȍ(l1 [`R W2د `_6B\F + 0F_9a?V[gר}P5jZwf̿!%8鳻jTz}yk8A~NCvx@ډq{%57a2-Q5@j`tY ^ta]q:_8(.âjJ]dh{4f`SbҌU|PU {FeP` Xq<*p,/6ǙYRCùbAmqy쌨҇e`0opuÌm/FyI4i-}]{İ9ǹpRd*=oq{ԡ+WHv뻢rϷQCBf<;v .lar8%yEox0<埲LVǶ ~[喚 ]_q˫fG_WFP+,u8fcNzy펬2r1Ȝy2a;'$ 0Z!PlB!<|5Ħё3wGz"wݸk\aaA qGHs$x`كl?DΕ=Ν.+"?Ta]`x<Ҭ$Ÿ~כXwE:OؗSxENϒۃThp.8X9TNĐcyfIZJ$3  I?trvIݧ q'ٙ35ngo`Gh%bWA3YSzG x N[1}?^|"pQL*<Yk::8yrviiFS[xe<gv|b@mDˮ(rfwa+J$Z WAJ B[,[/'$ St?+ز9eP  (;>JؕHz܈p{zזpeiDFL/Jc o³r~y$MJR:6f< Z5Dp),kUAҍWhVNm]}O\ܖ^q==%+TMj1&/T}ӆDϸPOI~<p7(hu2s45; j_=fSsX*k}Er[@ViIQ)*K_b,r*!d~8LKDMّyKODpK%6cFd"!z"aF_ JʩC1ꯅ/اF>;,ma7Y ƜB.˳X )kOG۟"]X1z Qh)ءYH 2÷/.O,'h+qBĸX&Ҋ_xk`VN!A88oa%hcBLmw&Pxĩ*&E#X[?=WDe5|B2i=8p2 Ui! ɆZ~[ #?s;ỴS2wGbJqm c5=5=~.a zQ:9DOiMJj|Q}_r 'eߊ׫V^w䣘YxP" UeVnUVn7duOc1:zb(/9,S#Uǽ˯ L#c˩s.b_įQ68 3paciW{p)d<$׫.Z f}y^a/‰g8 38A5W╷tM‱hָePE25 h@qWe!ZX%^1zG>7q1Ayj$ 4t0aR.NPkc& bATvnޔv, п?)a sg.ʴiLF~l6->g~L1r[ ^V THi;@<+޺W-oK tچLOJ*?<-aS/JY2̫]0F+t ɼ~[x0Hgf!;GV(܍Ҋ kw-Z$ Ɠ(h؏:2Fvv*ӕ,sD?J{&NjųSc}ugOXo^=JIYApo B%_#r>;3n@R+)m5מS9fgdJ]Uۢ3GMDt2۩!*`Ij6d|73|[_'1@y՛d{F׵@Lx۩@lcGY΅JfI [v NH_x< t-Q[mqcJl_t[(9&Zh6MܸB|[9JC0  AԽ.(Gt zQsUq]t/Jq!UmF؞w+fCtݢ-bcS7vR]ҵ3LYuon OM/)sRϳnku9^7PLO_ߥBa woxL^vV" ~xo %*L0A2iZztJġNcEIȝ?v}`_W1\*:^!wD+?Ekrs^ZyBmx%2jLym1-j 0[ڎvxFzJD;_6ܯ~WP+PJh b')7 /`OxщTc_9 g=ωD63x |vni@ {EOwm׳$B^`F22s7Lčr.#1dR[oÒW{项rxhv$jzJk`cWK_x"p;{w?%3 t,̞NT9e (Pۮ;ˤ;D~/)l2pv[-!jmVX*sA6O!;kKE&?=T-b\Ǵ8#މLeX>fMr'llgog%T{(K8=-|ׇ6{D qsm%!- \2I15CGh gᄠHe`>%l +v1wr؆}dpYdOswM"n Z5eNPg` y85)1UHxM8Լ+YR6[6-3>U2IcSZ$do8/7AG[YRdIm\8Z?BPcV/PTt".{Go,Ċ.[_ej5 Ob3GS]8H}߲8' %G} 薇 r¡0^#.ei2a6200mWFyڶ2>%[eq,Rk|\4_}*چϖ(9?-6goxľ5`SwX. KC, \0 7Ccla#%,%( 8U?m1IS] ŗSX_i+nHya={QÈb }7W5QI>6|MDmƒ p& i[.~lgy S;0K'C5}Nu;$Kt'60'g-f#i=.YkeWo:c-ē -gquonBZ(d~QAඬiX.&\nX'5g32btȧ*3w&#W_I:}rsZvQWHǂ4i+O4=]ZJTLrO GURo`x9 xs ,:t5|Tj4lPk3͈Q(lj[2\Bށ5zѴ.J@s6@~liir*RKZlDlvZS4o % 2-gꜝ?=ûh)HsshƓTURf!FM$/wq dRU UJ7Ԛ=Eo>kz&A '8Ϡ%gښ.uZ%Ht<4Ʋҟ*:zᬉ4zć,98b2%A@=Yao%#ݐ~15Zߗ{Įw& /ůD,Ϳ1hdUGKH"В0bi$E&-SXs\f' +u!§)w,EkI20sC)VJ!6"w,15>I\8nȖpX*`W +çe ^^ $yTp]O]x3),ba<r/$xcy[$nY׺Oc*1 {G/-4s:_*@ `s-9H_6='Q L/î؞m]xLaڅ:3Ǎ6*6-[݂nKWuKq[dRMa^B75 R&qT[2Pc+ydY+EhG>OէP!>R7S91PpJX*{3j-)on },[h0(^'(|t:Qk"_ mڙqgZ87w2v\_b5>:8|!<[#IG`xƍtmoWk #:ZyD~Xq#b3q,c ; ܂f*–L_حw"?qZkVypQ{yH|:Pg_0v'`с!h؛-d,((8sh/4Xr}9<0 Yy“uByW;5{ r,pA&pv|m_І㈷ -NX 'o.O^,ٝI[Y/{5uKAoΣސ^C{|lj{Y{fsuv;_ނ67@$jJ %R5m2n=dq+qq3M 4tKg?Chʻ3<ݝ_9t6v.1ds-ctX6wХ zVnp\[[$oM S$o5Haz0{cr"Rw;j-}9ec3F8;N8O]*98huaPU9\9/,ӵfB|%a N(>"z[b扪X~b_3GBZxյETtd|Ӷht Ws)ϰ愎=?ɨ󬧙h˽'f~i*lDlڼoϫ^F&&HUmoW~p]gV& p"Iӌwr .z+ ˊ+2"W'V"[ok3.r:m96uY;ȟl+yaD͹DTe|#hIBDĖ vW4i߀_^8mhtiipúiikb.nzM JZ]P\ Jh/bU7]MieFq%V $C`,٥1V<`\B-.{ZVDqEcO/6Z"Yܩ17R*^y/B@1qŽRUs%S긑@ey.r0[uTc|y0ѾL%67g ƣa\buh UhBRb.Xc*?#Xy:{z&T8Y .ǒbDgC̜d2eYcpTX''F3ͻY P_91[T0G/ʊ-lvc)>"/@/Ŀ-fZwH5{nѲ,R -u1ݩ=P.U2bt=]Q~b軏t1Q`M 2aTSM) pMݚr7b{>vQW.wD߽`\T{PWT_351 w;CZ])$MTFnhVzMp8 ިsHVX `^Y |JtNLKN!yԔ)8sr?RYU@x]St{x]_ zް,ӟEDC5q/{$>$]N]U`j%{%ͥ8pQHGU3X%!" .8eF=(nSwZ[MXୱsO[=ݮq3)A$HթAGlٍi 3 7 Rۆ W:˾"Vn7dmQӑP*&U jnTMɕ`Jȸ܉'ubw#?(EN I F\gZ||O/w6.:R/ZND!I boiޑ܀渇A!hmC2[9`cbetGY[ՑowlA3>|'257ғ(wk V#EzM9E̔ӽ'/ޤz:] Q~#h)=S[ +Gw }!_Ajk|Ek lo<Ӝr9_/Qڡ:ؽE!!J} ))Pm+5it3a _ˀoHwkc_CxqK9oF.jc*S#ϟp+Ml4Y5S` uЫ0ȪzH^l57ܐ1e?2wϘ Bl:F߸dO]kR8kPZ.:Yb]!tQ0i+ZE}H 5c Q^i>MEiXd,ͯn1XeĢ-jJclUƜj?UTu졐I}?m7eRpN \_v6.S]"꛿? |Olyf"D\ c4 Ly B-E.ijbӰg:j :5'AmaOo(VH:RH0$F+k5rֿav sq;.(\PaQHjx$6inLf\ ۃ˟4(@@̶u#h4jK-/ yz $xޣI/*{ؒa+5D ]/7n§ Zw2+4h3yotä4Lm#m (IYGkY> jl>YlfY0KH""E*| e{S޳tgP<@u jU|c'n.?T&c2~sAIN6~:zKt\Ȫn"x$7%٪)ɋ$r!:.P|q3K?3Z`){K3? 4<T>֓Ju%m ?4 fԡ*HRܝO&IP_"8HKC\B 'To@6mP?PLM ,:L>k4Yjۍo\KPB6bV:Uur0^d s%^=únΔzh_4d=rF(oL\6}qw@͕"7iWs_xt9<Ñ1 cSӄE+ʻD5oE)pO!`R[E}2a rg?CLoG$Dr%%5, ra"t2 jīTEڠz :qY(k.H!& )/ȇMjF _3dPx=9TO|Qzk쬀v@A?[jN!텋ՕQ#CZ:%0YS9Ӌ\<đ chCa kA2ۧlO7K(s| (ekS˩͟(L+ꌪͫ[ T` G m`mI iʱD $X<ۙ!Y͹`-YEI|#~ب7%oZ&queaMR[UU]n7>Ƅ"ࠐ|$I^϶w-ٚp e2?SeII%c=WFpEps(uIhMXu['ºla(Viӌdi,3NKw77Oq%cĵ\^l ,AUPo*G4>'ޜYj6&|CY!;NrDJ%y-12Ԟ3?ʹf݉;p٢D[Vu<(Г,BVvEճ{rpPu4 vk*UktaZ$oF$. vTL)&uZ! %K- D]=^Cx30*2f`A:wK.d?즙w= L>|M|)id%euTj`$U6.J갓ǰQpoyO2+$}3vR[q̔V̆1v(떨V?wsSUCxPJ˸+ݴa! XZ "D h{ie BUyUJF4JK?unH6jؔN&DT'*F (\W5O>+-ڕ|v_2rvjrHm"4B#_޸k kivM[jmTiGDc0;ᣬkܓ_PeEg%G2r >pCL;ہvOEM/tW=c )ȉkfd#?hPdR&5"$$qԴ7 grpq01ia \RJhGt7m~:z*EĸnvU^k2O~вFyƤQZbsjvg6<=[Ҧ {DZT̯#0kFt>yu5n3- s^#+@lc_ovVn|Γ~ڇ'tybA'v!gj 0%V`5C+dB j4(7qˏ*>?ju⤒R&i8aWuj%K;S"Yk|IeƸu;X΢닢E}m}zNH!3$0q4sx58["VSK9UA T`kC6/$秢^L^ k-5K0WzW;L%j€cmW0NX>hm r h[ss4.Fw$fGh_R-6*L+ -Sw5GOT̻4,?y/uqeu][k`H+WKV(TMal\@ gRP:B(&u?L ifPz {}Cn IY U=5F`)3Ne6g[<11xKdTwǒh-t3 d"{Lz*"Aoлcjΐ'ѥ~~L/N4)&KU\On8NAVZͼ{\R>i9MJ2ش\*Բ"Xzٯvro]-`}.-ThQu:JҗcQT +Uc&\RM{Ωi 5zN!A;}.}$މ[̈́qB)UG&Rq}:rc@f0"T;\)YVm?c jis#[R8 V-$qu;}" v=ր)8DGڒs|#|g`$} u*``c떃>Idp<4Gw$G`qSP4H9?/4}9;T(TTH-]d}+苟ic&/g4aڲec _4O|ngi$D|spv戳%Go`]-r6R`d*s&ՒfaC=Td6-#qV@b/s1 "0_9 S9cA,Y2G):8x'5ȖvO 1r u|5C(-kHPv\-=R 6ӒΑ2SLOpWC_O˛+P1Qǽ՚]\LdL$Onk" ^>߼q*-M<$sF [Ӄ3C!~rVV]Cg/.*)^Ll@ f m)o=L&1gtmb hч'x~ZaH?;vxҡ:(;{sҹ8$cbKc^i#9FN.PǸ{e%=#9aoDX O>Խǿ&aHzy ·<]C/SS`{Jh+j\P'(Nٔ{ZVՁ[V2GH(؋n'xC 3G=GF)ʎLxg ÅޭAaI!條q 2 zVݏsNht:`己)T]9sLl`>o1z"7reje<{zSYwC1N剿)<䊊Ay{ĖR+2;7p9F F"aZ0ڬ@k*^ JX_j]Qz~ޯns\50,Z5̋WޙֻS4DXKֿX^<@-i"rQDs5l %9|3c/(BA2} Aq8qig`/a41c>͇`0JC^8V]簧@=U&]u-BEܧ\=+S4g0g dqC\md jd+vLKO<%"B$a%ls| ҆B/ʣ֛"8<(9^=c+%ƩVSN[% LklX'ʪNĐ{OwPoQ;;B_x1d."9Ԗ!d]DJ@RQu)ƂDT;i~- !Os!I|l&WVC9ڻ]cK7R5{t ߥ@žr.'ra];0n* ,Wk *_:%[?ߴ7mԶ?)ʱ`o D:Qr̸ۙ}|?Ϛ\_GqeP*fꁒl{D^|[HaeF &CڔTN O|[{4.'ڥ=|{翜7D6&Y[4P`OEc_^hX#s W+ D]̐bs߇ &/dG_!js"aݖj0Um"K/"Y3hqB}͉LR#f(ŏ"^z 6W?bGCJsVX x 7K,B"18X 7`>ҵ~N&JD%Ѵ;c=:":Ǔ3U2SJ(fԡa =Q݃ Dr ?5㆏d|TBAj*cӲfR S_;p!VZҞPSutoөZn 9vPfVD'6料_#UKt)\.8z"w p)ݑR8E+N 9جK}g#* kc5{d!z#(n7v ˱Xvly7-aqZ2hYO!2#wyf3 %iO5NSc~RCaDM[EReSr֫8$c،+Kޙόaebl_K6\+bVL(owxH] \ki, t/n*ΎV9%fmc-t@:Z$F@S% *kBv%NIs$+of݃\jF"VX8y4rGw^9r(`"%S[xt,HIA0|Z3Δ7J}Q8d|UQ04 3!`<^)c$f(U={bD1M/5;F%DkF=p"y|{6M`n]O6F:*"ѾnKa9uR ]1+%) YɿwR(g Stqw;zT{,$0 Op~D .[-X#SUJX)) `)룎7VP_Hl wlgǥ־*凔ږz""s P [k"Ȫ>0\i 9TȎ3=„(i),Qu0/,1w Nxacwdx 6Dji&?|hyy6eZ=fFG7U^ {̚^FȘo]CGTvH9))bsnE28s*֪4O[2 ^ZەCbUhNY[vEc@KV *6)NPe0Flh4mix?=$8H^-M`,sa׃=ۤ(ZC5S $! Q5˜?%Ct;u;|Y H0\Jv3>IsǟZ-q-5ݭҫDj&sTҕ )\@Q\bV6=KuCt=]?w[9UT;Y)!谶B e3tO1DTd[nOl;^n\S׀٧ kn9#m$:@mE+R~aLRj@H/OުLN1wRPP>AVߴoPXז"2~/bEh,PfS^E2"V SxUlO4PeM:r%A#oB -G!t*ïIn.hCgV힫ʔ$.,AYFp@?|=D|n`4[ Xr _εd",_QRY]J8MVǃ@28@zQD7O~!jɝxZp.ϖE;]wHTE~H ەmbdA]?}|7glocs#Mp>9K>ԸzYo3RHwP+{%F`Ӂմ>bώ;$7_K[0K+\м ;(&~x/$Oid7 GlKJ/~F9L6ł$ƇUm3 xXW?QN\BYY/0.sC IӶ0NJGKU+z%[9vR4\]hImD,AX$ʏTs/;FY,J$7Dn٦J9Ka},po1a":/ {R}~bn+1<./h%n1Ypf7dg┴OvԶQN5͐|n|Cdrhaa+/<\{Z>k]ᖑvG _C^ <Ǵ})q @G2?7| Dp#5QA0W'@8 zSbþhs$ +ŰOZ3t8Pf?t c-S^vZ;% Kn 6]vOEt>rٍ;ej` E6!X:i 0JZ^B*pGgPi8UABS~ 'jf5 y8Lh7~ŻS㡅euM& `Lb,  mӚk&c` AKHOW*pn9LND1נ{]D1̅f7+:2YAa+S { H^)$8fGtBѷ 'EnXH6NN F!4([.(._f8Al 'u.beꞀ5e h kek rTG9iQk |?#`D)WHڿh#y.GnROb0bP\[*SB )),}D qV4RW! ̘ +`CBգ05{a]Wrr>;WY#^t r7fC,/DcqTݩ\c.5a>+vWVBalBH㏀?`e!x{0) 1xui0ٴ [D fe3 ']JR"V!wft7zVIN>:* ׾ݧb)fXR.=Ssch!c}t:U/C %v%/NimWu߱QbRF-2@ڰ_+D UE$3z&Us:ֆ PGb$:UTgiLe2m=$JNւzJtmSՆEކu-GԶւ7㶅 >#=CHWp({jX`;ҺˡoLiXZ;O* V MiCf%=X`p\S^ 2_03%&VxaO{S۬!lgD(O$l0uT] MfEvEsS*2; Y9bϒ J@OZh p+(H/41ܐZ.쐄 F> ) ωC2p]#CG{XG,J2d]YTpp!+J(M֕a=ƺU7(HrUHTiW\ȑUJuѹ`V5Y7)cu@w%$TG9腺F7#+fDs͖(ԴiXUd$zC_y c@XG  hps@j[މ;'G=^PzbS(4^wx7k`Fhw5wZp1u2H:J\ ڙ xQ\zQRĩJu'4 ucu;-$buka`6Tpq>>G[reP 5ZT#+=01|G5QRDN j;vTV L1*>=0?ALS]S҉weּO?)"'9IK鮺VFzџK9]c9iYФn͂Lj3 lf5x 0PduNiB)/QrDZ(Pu5t3LQ.=2bk /X鞆l8)״^PZiߤtV/̨'E"[Nb.cDo3LAʖBZd9r9qʏ@pXӜI^mj9 iVEzZR2%{Wd. %HTTgWWᕮwEXPKԺv jw\hk5tQ3 XWgW[S'QG}ZVs/g¨R羳!@;Xn&qX0^\}6>cBg +7k/a _ilϯ#'pG>/;u7 b#tKty%a0u?^|0!6` 1= 1bktP.(Ċ5"(, TM}< isRryە|ʟ2ݥ @e@Wԟ"ߐw&SІq9k!舯}QǰC 0:"}EZ:V^OFAL)⟬>˯_^ﻰFnJH7"7{}՟Iti\F߼=\3ܰ~x<0)+wyB+Uf),#GSC!QY hյi+lгWl|[MFș1Wfk$ɩVj!2&&=_3 {PܥE3e@*_gWl>/+oL*23n80 .Ƅű.A:/d? =PAD i@5]'phKBŸY:qi$n?*]I`~Hl iϘJˡfKW~)\&V͏#̢YṔ@ 4%C5cVF0a8#;D4 }+ <ˀ%<bU҂}SLn [&*ϭE;%M8j]P`-pcy~̕=VO ρԟ~Գ;헟Bpv,1 o57^ӯwֳ[D -G1HQT(!C4LE}z^;^ф_ C& ^"_~<ʬB\yOnNA)^Ȳx۞p,b1LPx q`M.:yW]hn6V/D;*%"\pG HcB@_RgLdbZ oo$TꃼѡSst]xdA ֔k{vS1u|Y԰` ԣfJ ֦kx-ޔj N(6PV1?kAE,0P|! ?N9zs85X=P5(U&<x>՗ۢI2oĀk{CQApRJ(wuYvoeLπg]sgNm19HBXHˍU9JխcXϜz,f.YsB $o6EmҸ >mޱ<(!ukxsMPړ-NޝӃH1UTFt;ij,32ʢDRo569d0' _m$; D[3ٱK*w>Kr 47cfcSI\SzJpKVO C<&h 7&;Bn pJ㄰[/ty$ [u@GVQŸ$5ϐX 2lbo32uV˟Z$vLo,!/Io\\X-tҔCFAzM^yܘ Kҋf5ȠvB yJ!͊=QPwX{̎ K|".O\^b'4v*_GE nO ݲ V7MMHژNmhT ЕqЬjcŷxbKv¨: FhQe5AHCմTzQtDa/7:d㔊0xi-y43F@ S M$t2IqIv$,<^1tf~#va5<;;)S5<^eb䀝 qGyXXM.Dž 8vS a.]Ȥ+GcR<׋^ LbSjοT.-cV2f[J=տTqK\W刈XX4 N*;1lb&!ނM[[%9R u*v2?>c5YO[ͤ[ ÅATcٌw,fQ1IsWA.g| WRc"0.1g`Fm(WQAndiIYkQ$ƷڿR`ҧD6sRM~DU (vRߟi,N/%+Hq_)+h\xz{-Xh FjNs3`bcj8|Q{4יT6F,U.)f^fhRzgrm{:b+'ž%UKRd s㶗,EM2b=w19Pe++ Ƥ >`Et`7V,UuClT[kmp|0c7,˴[  b=k.Q7.E[FN< HHzWxpʣkDi  !/ rJfI{[e*̨du 1)7\$=&[?Kᒞ*/u2P#-4FK4]~ڣtm p+A1*mڔURq@,r.[b$pFv>ZK l.&]+hz)ȱB0x7PɘP:q$2A)sNj8lCMG~ <&q8iϸ R;٭#*v[XRAMZt o4s_(xAH!Kyie3Ua,V'ؿ8 Rhbaw `%O;*`̛QkӬiЃ܆_h,^< EGUoR0Ɯqwxbs8h'xV4b ,CW{f탯;8,U^ ']:A[ ^Ō `I}tV;ֳU<3v"/}ay-;gAqSD9bRDUPqCggGO͹Vzk_qBfѻ *1`+:y~x4D;?9 Ѯ|/\ꖸSP5Uߗec+W:TFͰ#L:Ji9̣\B=ē]:.sPR0cm| 3R% \듧8|i1,6u+{Zz.},Wl 'F80u견M =}7Z'@RGuI~ `3WZ"2!O+B'gֵq@Y)'E+d{XPN1#)ko~諆bH1xYz~aoI B9]۩/Ӱ=0zeqž}X55^ !t7B%B,MüޑԃTYkshzCdr Ex}/8=|ߕ4G6kf#l_Oeȶ(2o9ր~mӧFid->׎3ob[ j1*7]sft8S(I]Q?,ra}\n ʡj#_ 0a~I5Gg G-kO(bP9k/'y@ EWs 0+QO; s;3p.|3Z`W Fsm(;, Ǚ,rĂ^:]Qⲿ$ؘQ,SNsY]C0F%G4R`4?mcD9F:9/)te%?'Ԗ?Y'O<[D+ZM/~؂$<jwJ 6F;hOch\iSݫ (eȇ' Z=.R@.Xf '=S- H ;ğM)'0aOѥF!}$a[NMecYBo1 r >*pd3UO4GH28_! >RZoL:cd<ݴbVS\|~2G^Q-JVm7㶼.U~?c&5$l-c'ӧԫ1Ren 汒՟j.=HaOB%ÕvW-ZW2@(%.¡ںP|eV\`o\ 4.jc%(y_/5ឯ7Tn n9@Jw7~x\c$SB.=8E{uV4x2dusQ$Kƶ&g)mJQOnɽIL+-]]c^b֘$u=cO[!Ӽ w~NNVγRFZsH@}av#A'@^T8}?{^b&_Oz_Ti"jUӧnDՃE;pPMC0JMϢc'rb.qw`Hn9EW7/;CaZb 84[ 0F8*m$p%ء- 5GI9u]K!Br=w\/t2-&gK(ЂT|KU g"pi1am+ X3Aon͔F\VQ.aSGt(=xՊ/ E!4?G{w^+jQ03-zt4ioo(ESi"0$/ħ̍#L_Q'([M `Yb_Z G,E|c'[{c#adv{扖ЊB .Z vӼ~IlkMS,2vH6Czr)}mkrX~:?NTh8.>YvO|PtI wθP9ަ.kVS~QIt)f҉Xt uyl?.smQIֹ]${`jH0豹d wMy6#;0o,kpJZB[N ێs~]8a'SA\9lLG*ŤG(S`"Q=19m$(r;(K4}f}D?P)r.7#_PvvzkcVvBuR3_ǩN|r)&(nڴ(HVܥ z܂̭L裬 _=YdP..O8\QSje iȃ-:dr8u*w}>STUq G{I΍C(yѩ\6nK^zh@?Qh8j[E<^5q<luUEZO`r^4L|pXZ8Cmb0 aŇ0v)=9XMݗgӌϤ Tn YhݳmJ謻hƭ]i"]߈vP}s,$uA%UwM4r:jmj$r '#hv}c&jC8r")|/p{ 74m!;-Ҥ^+=B$ң5#X(z갌?NpȏaX&H7U]p*U]\?4m1WK DM~ɢgw-Y5g z.ciTd_^Ske77UB}=2\;?&U(+)or)0! >f ߷"*T9Z}c1 2!.6<$i2S:"|4"_ *I̪蕖ˁR!N7p6.OςaAL8.撩x;F>HlxU'70}-jؽ:rD/2U \C߱qZRDJx#ޖ Kjz!S8`CT:Oś%=(2 `/~q]U nWH Jr-u\i5/*wp"ǔ%IqImD>lBV 2A w0\ ƖtQ$Ln%c><'pA7:tYkv$ĠNr#7T(F3_qdi'A^FU T"N9ǗYY,+b Byۤ 7*H07Qe!#聚'4.+c>u0Jt$L TSزib>z5qsxB_v do"7 hHh#66:т5}wՆ.K@mˮ>;&e,i:z8rKC SWN=S;+9 x)4-ZMlN(رKt#rԒH}w1ɪֿ`'[\tv %)jlX#f)NxRXه eXjgOy\&!T'145}; om5ߓ?x?DP:j߯V1[,> N;1w hjNY#w}ňF(utA2܀mNR@jKu҈²E/$'Kr.q\;z1 ;- Y蓵"ii 0ۧbג+)*h?$ ZٓoC2U)I xyuK)Wk@, 7RYX$$!?F;oQ#YfAՒcBTP [\ߝ)B1]1䠚gLj$IkE(*}xCC>Җ&hz$RU;]9 qts2bq[$(Ca)f阙m>ș94\Ŕ l0"[Dd != 9yNDZw<R@«̴ihaNt#:?Z̟TEi@v'VHezK} [RPaRl -wU+.k,GD~eȊBL6Km&zo_"iMՒ}Wec.a*f*5hBթi2O%2tuۿoKW9z3(ܯo˛:k?7WC7?/E<٬z"i'eO۔I>sxm򍆌yE/ddA 9m+""~q"HG> 4S$̱IDg  @EiU%b Pd|bS} ٹT P,)r7ODb\{EX/E}GD)wl1m.Xkrmʖv`c=\7[SDR|BjOa M06q:"Ԅlʮf`R5v@`2IpĘVR9 T<,lR'}#_hYaED7}~lu5ua7\U5rCj7ϯE|&$me LW6~fXI8))<1b^I3O`ֿJ;`R7͵ r2f e@`?`d@"wzDOgr1.Ƕ=p 0& ' _`+f@V6V_efi6 W aZ[D:q A3u'b&(1%ɯΤf/{oX+$}ӐU$ vf_El%} wK #H~}NW,Ns(]=W̕.n$"Ktnh0.DZ`v (r_brˀ! SȖ#UjY`ׂLXf=^T0_yKȽPޢ`G 68G;'˫y?hÐY_cD\aw׬vfPꗾ,ly@*(]&="N3}$ziWŐLZhgHh5fR)aFC?Iٰ0s/MLVZ+O`bm%0s/4L8mY?ܡ o~3#ٙ6,As^;"G:?=n 'AV ͭ%r8 gXfpT'}bUC|ޮ(OͺF\&bh&ި&/ 3J)9n GL]&A5#'w f΋5BoYͱy? Hm "J톚m* ^p] =j'5؈D KeqQG~b^!yy:yk.m_ Q()j-\5kJ+K^&]!$]NE"osCP] &szN Lo QʣBe!Nk[ 4D>[oovPh+Ojlf¯%gM{=8ۅVGǍ#LA4&+>4|#s ! dY7Sp!3P ʱF<2lTp\|_\ K\RU2zMchJѠCO*b2X25Z(o1ـM>L+>Ng;]EhEH)fUT}-8)t:~MB1Jx0n1[^N dSAK~zzD~[ުD&ń0ֶ,Dj(ڳq.sdf @!N`{KZx^ݾ;ܙZ$]IBٹq읈"tt.h  o=ri23 tFכR߿0@*ψ ;7a9?䩽2@9\&WU Fr lm [g2L[=|õ{O&ִsݡ!| ahN#MV # ȈKq#z#+H&ʪ Ahmڱ83VΛa nv?EߕD,1, ' ޡtwTJ)r>Y2hp^}:$t$sx$zҩ8Ѡ(g{o4o=@xu$Ueh:bw3/уGqq蛚j&y3GgkǘdqGE^)>ץdgrZ^.h XjT˗͚s!5\%&_aF==T&i@:<&."BepbML|BCAPz42&JMD2])/~k>3yOX& r9Ipښ!\SF}~y;-s(]ӱ n39잿nbH ƾ~OV%Hܹ3[*D̵'=1?'M!p{Sf>3].'@S"\wM;*d"+æ}5߫,be;IZq ׫7gI\f휸(jfy:UXE42V2nUsκg*+!FrI6\7B̪o4%<rKƨLe$`ֈvҫ57bPLSZ'z^#VYn.N4S@"Z=H6 녧 ʽ}iVhS%k* R^LRҩv{I9T:BsZ'O~ ]vx'/|.>%BWĜН$%S;FK>awKI`dʏir޾Gj>/h~F=buv £WqFk{~WM'thXu=O+Ll>|5aIv ?ǰ6pD1B)ڤRX7bGmX6]em[7b~wLXo\֪[Kz5%OWXAdA&vǠX^b:ȊcAÐ=H0- 턒- yM*Oա C޻ '+ oZUϑwX?&^boOn-9/Hd&# B$j'3':4ډGZ3]|s A B?b}Q\#\Mnà]$9seO!))LҔ.[ft =!cZBl:jCԒSq`ǔ]k衂 + К5ȀU D{ xQZBcs cn4T ]xI|1-]um  r\*Q"s u(P+Ts7?v@ + Zix7V܄z'iAwp9;8-)ghni+3I6_υR~0f?Jܫ`yZ"0we(b'}_t4c>A_Iȵ!O.tJi_At)vj)ĪZ!Rw:hC>~'v@H03]FLL=ތЁ!рۋzEٔ`{A;; b"UBTLG{l9A )Ffidfb`up -qpg ߼^Fw]7Jx+>&^ϼO{HtphhIu 00J:Y?ϔHj"!YAe>iBi,Db8z5,:c]+uyRf²h.G*֎4rE[, :HHnb jKfȫSL;E*0XlNvDk 1xIr|x햲&s^9Iy&@7x:,${s pJD#PkXIp U렮[a$PGQ"dTC lH 9g2لʛZDyL45*UPPDEazq2V%7n[L8t(ݣ0E# /2VPqYNZ0y TbPʠeBn87Ek_?NN|yڼOv-Lf¶b09h~OS"=ޥ(X A .3$gv{>C!"W4ūD6<2Px]>k sڹG\{gGqp/ /*-'׀g.RV@ɝ~R<|{ kb?DZT34MkC4Lשi13V_h;RWMñEبeYgR.G948:1RQl[N q)3qcD4Rʰ;B@[%1q͎VCu?T[{Enl(dú{A-\d,pHLcs#!_Y1yzlީVX54?.yb)o=^f&bPS/V l=\|,RJK$TJ^/3Q!$jJh4i=% i[ u.5 ?9S0`isj 5{ZtyBeŰ,zaw,bUR*K/vP8ksix'W=l􇂽%LI2<˘59㰙z Y"0%aWAP ZnZz YʘʠGCl *[V0r tnㄎ.y]?Vu.}@p1"{Lԩ7;~aLWȜؽ}mAN.\C2 w/sx!iE2Ya}YasKzQoFTgV2"{s/L`^s#i˹ğK{(O9 _ IyEY 8.n.A8$d$GqĴl]024 t'yy#vT|20nvT_)x Eس-s^_م޷ܢfcyH c?P!?㎣O@-G.MĞDB]8| [5"nèv*L_ )rudpL_8 h'Hu JukE^˱cJosRAF=!Թn*jZ'b)h\Jg\%Uf.1Y #H0^2גWZNe}yH( 9YAätYTu;V$jYHܧnݢPO\i=zgw3^SVCQ ܺ I(V P2rqV GKF=I}\Ksf3wTGl[w5 af6NveuSغJJk( TԄÊDݛ;VNaB۩jYXHSDM&{dxi$ NjF.SZPDZsz!B|Ĝl9ˈ& 떁Lc2ap ,B{-{^nW7l7&gC(`0GֶpYxJ'Q#i-K)@G; :)|WDAFJ1@j$ii Uɟ5#R:$ȈAFRkI#o|oiSO4Q-r Tfp ^@1 rn~@J7>!4/JT|RZjvXђrmqa4߄^X2xHΫ7f)3R,xHu ӰI}}Xzs\NE|ʼn$ ҫNcu-MM-T"L}`t8lO%U:p4g/>yI p-(G(F½8bfdKs}EqHDt54.up#sL<$D}! d}J;Ķ97B2hHALݎ'YJ|Jہ@ԉǡͦdGd^I+lNZz^K%HQqo*5~>D5S#(@՟~-ڇhFBȝjҐF)h-]@$.dϕ[6kv|l@L6&uxU-mO9Q 0^Thz},ꛝaM0]T2c_0! I?x̓b| BGV#'+#uH ":MQ0}W"a˵h5r#OQ؆щ KQ|dBvF#Bp;(Tw>d*@@Yc,8}JZɨsBx͂z~qO+ vH s1a)p[$t E0kVd. ! .Y8G!3;=z䛆pxwn8+jeFSǹGc*A,k/mke֞حՔg~e'lGO0;?k0նg[ì2vp+JUlH`X.4s@.g:9t(Ft5רT$%;kpS,&ϡo)ZҞ9VxChX*o?/6.JW̜)N@^ @|DZ`΢\/QUrLm+=ͤSg:>8) S"=4YtY@`=2( A*rG[Mą9ͺBH{"$ƙXX@Z &gĀƏq6jOx}aR)anAJLwmrqP?o},<{-Y~ P/^PWw]F:AO/8+.|]*]&Qj^ev y}RءqZ S QU^`B'ؖ= 0ѕKT3$BQ:Ձoa9?ZI0TȾD>3= 9L OTfn!f [$#+B}b2#t/N.C*5_)Aux&?r wl{' >ʌHu5 [υ-*a>Ngp+a;@. NL@8#+ܼhVfOMQp 0|QW02KcBWL~Fk\S ŠBbK Qޘ=b΅װmL$Dg9W †ЪBzH_< \>mDZFr}5U^R5a&M&Npi S_deYW̒餂sC~`s# Hjl|jZ;T5/&r*C.I*Xdc0-[i$*JSx†x=^I(bz.b6B@l}7 KbCJs{t(} sDhrQ`TA62= gg ZX sUc +*~Äb:M50yf6(k*؟}"SuX`t +y@+?#s@/cTyʙoOw6c-.G.QFA)P4IcVċNVT|mb-)6on 1g(HRm0gkw\J1>*E#Cs}&폈x8 RK"}M ^KXvoqUucQ;Ӧ.-Bz-`35g#`lid65/ BGV0XgAcj*gSbQsF F!yurQ_E"nkAbֹBP-{4{WK"[-$tq&w鼉k7)t?_g/weFuTY-IAsBA(m~'6؄bZ.8ߥnEV@Xi!4K5[xevٌ կJ#$X1$MJ[?ȆG`d% "EBlA"]LJE@^L'V`n1ߛ~mR #$h#"ia_])#c]f:V؉䭶3ǹzx_*FLxJ^.a$#@4܌܀a z!FG E0ylg77%`5XYUǍU/皻VWir5WRw2Z&݌1 dGcnuJ-4P}~Öc1` NzYm}>3 ,D,8\IwIL'p0R 4H4k+7f,p,ɏFΉY*5{:>܄. XAt ,kiZT|k:rZu$ڛƥX,cg  >$E^gQ5w2!gš}TE{CMƤGSIaWMZS4mrw}C.U3RO4ەns2'tUQ"H2̖0χ#R!w@Hr[Tw\asZv sA}:3ީ)q\RyzLJW>5+E5Ʈ!x"X`;<;jEiD'gv+-h5 ؆'/Hߖf̕{-7V,R*yy)PB q$5ͺ|MQulEԍCN` wHr*^X/tHbSN %RvmJ Va>R&hIDX#qd#(s X8Ss'āu _Is䎰HR/zbω^4;v Dg&]W\T~@KSҲ0& )V &FkjQRa,q$du]NcJptM?1tq7&2AuE&!G ]&h;Whs |WΪq y]0ܚ Fca /i# ]Oj'U7#ɊRs~%K.`UnR*G&i QMZj0\g;P yVf20iN0}?0Y^Han)GQ[2tjVMl㝈JݩOX]tnn6VF7慠lk$By."՗! %A5 T"y2: _D]`ùt .K<Ul͚|k'N!{4ih>PN?0;|T,2x<y'EK65{8, KwO=:<+3Lmn+#>ғPPŰR HـZҎ`~_?7Zmԕ]֫\3Y&1b{tiK0vIkҰ_2wpHD['iￇ䁤mW͑#Eŏ\ !i$mbR4riaꊸ>+32ec/M ) UP`UF9_5na_m|d{/;M&hA{ZWr>h:c!e<^dΞ:uxͬpQqiBXRg :ڍJE@R7rApѪrn p<[,b+]ͩ q c̅/x* YɇM3KJT&Qˀ|ha8׹B!u5;F6,?NxQE:S^1M0aCN y7DAGunxޜr Cךn\ďO:ŝ(8&ջ>,ǘ ͂l}zג":%CN<┠ ftw| Zr!9ޤ[h!m5ҋh<1$3Xޟ~a PE-[n]5(˼IgrjX!~TϷ}g ބJA(`/ܷ~9qxX2|݀Bo(nU\{; Մ裫):tU'He2|d!.rx@VA)W2z, " Bde N\s!<gd 2El RSFLA7EC?jfr4SȂm%X =;wmĪGWՅC^5v`*6x>3J`.RV wXH"M>MTZB|GAu #I$`&dA7s jp\O\5Q&dwV ?KY ڌ'ճ[eb)$[آf貘O<+hZxjkK#U /y˳ש׹ ʙ8SYR`L v|cڬ^,,t0%3?;_h'yy<ݴkxNZʢ$żl2{y@Pg8eƻ0+%\jž3|+NԞSqhXyA1^0G!\jzUkghsޅBtđCU98Ď}2O>j+@vG~C5D|"@D" /ܪqNDMؔO\PxR[{HkyloRGn4Qn H.r!JY?Hgoì-6y}Y6#FjN`3 2H'ߺ2Mܹ"v@'F蘄ѬZw$o%hleA){gOPI]- U-TT֗Ăk6 'E (aП@t*"= E!{7ɩ zBVc0hU4ZgƥY`ȮpN}O9X95ƱB%K&R㵊iܳg;y{˘͋x!.K5~1F.\Mh_1'X Y_a![/0l=K:Ɉ,<89֥1V[nkluU:@z/ӴaE *6[}Cwd"!"貁k?8$S柷slC'Io~GYTcCw7kV|Qr0e]+SY=ߗ)2Ka[u6xd>amV$j]Y/ IC>oV2,K2-%«ɧB/e#ƲFZ+akn;r*W1޴_Mo?Š8WCH)3"]OOH۠udut.rjn۷<{5/ Kr[K\S^HdeInwKJtEqNBS9|Ս+ޗUtX\It;L, sN]$b 0]c'4s04d E%lp-i]߻Ggbَ \\ރ"+lA5\#K sQyD N|d럁ƙ ~451ghV=״$?mL:CiRo\a9F1tx}tb[Tl/\vQC](݆x A*(ce%M]ɒ*NwQe.YgBv/lPc"$%0I:+ow}[ 9\޿З#&SAjM/]ܸLW|P`BJYWۑうpsn4cß5Qo+Sh J$+127QpJ ^` :iLFht1Ib4gGFI͆Gz tݍ$s횺|zvRTMN*%fFѸ/1*4r9\ '*A+,`4w>ꝗr{V`_}jTzybDI9@sjj Z'Fxݲ tG?,.RkQǒZhN bF73<}y5VR v ,ó DC?Dg~~>bBș@o7ѵ7 >Rl^L AȓRN 쁝t`myrzKxq>WkH+n7wZ/+$1/;Vȗr5Tp!5`KDƖ$T\P$^@ߠNkϙр0n녫k*A@F†RG":Ip^: e z9m7 x]wmN!I+%# YXFL⍈UV~F3µ i2HƑY?wgS@XgliT;rzJ<_x٦0j{]tmՊgIya'_lQN5i:lUC/idz,ɮ8JzRg&Z&LЁ!Yy68  cW=:7@o7|5Nkmh?#7n BQ"Yۇc>bp W a!1x}GYHXó V/h?4򅣸5q wi-zxI*N6m]MT|!UW&B9݉WWԹ1̤xl  zsϋ$++~.4@XP!d@o4!zx8~FD9\:mDN8ѡˊ R]3~[![ $w _ 2-q@d٭:"?5dǢ~JQ,qAriE?5s?^7. Hg*X#Üm4eׇqeҩT/1m /a RV 2HSᝊ(tܘv u3-p, fHS[գN<~A]VGf}V^MNRVc"Ld 4,Җ|OnجSR?*DLcW7rءS{ QHJ%Zk-1 wm6PYuIDAGly;cMz9OgBj"lrUx2m@h u`濆HH>\7u>LU)7J5.! Myl*'0nW 9CXa A]!Fp&qIˣ8< .\av $i:7$Gaj';CO6: \'$)`44?q?Y$K.~"T[뀚<%p8,ux}}]… f5Qz9b.-M1{4ov88~R@t_f 1k!iL"\FKcQ j WIjW)H'V1S~0'(Anx7a;lB9.UdG5b_!Gꑅ¯jow$бtZ[}1KeQ SI1P V2%\.4dl-mޝ: ڻxVVY#ɲK^O Joyij̋{r䘡ERqJjd_: OJa_AmScִ=zK._ Tw9;8cfGJQOMdY0E* ueSI݁0%3ccc/8k-@TpeϬĸ-`OȪ[c K׺Ga)OVk, Y%^ 'X ~Jq4NXD.KCY%{/ Ia,El 0sF{ބSY=bkb9mS4Jx ?(g jB׀%[ + :~Vt%/W1xR e[qo1fK1/b:+6:ގ$:H$ھd >nA< 7 `nYVMf%YX*{K!Iu7c݌|dAu].&XI78BLedوD)mgfXZsKΊOG:cmu=l;>g{8Π^6`%+9 w(@oXmK)4,mS̵#[>ԿetPf.nPt[Ldi[|AޘjJEx<2٬: ܨ~!T{|Ln^G{zR>>m&έd9؂v3)kCk8(ʰ f)1S+IЮ5َNŻ[g`909eNy]Uaj.샍 h0^0y}_(${/ndeDnVd΢>Q'vNUTYgyWt\%#pVKodXP#s&_qwMUC sw߱itu٥;( [1էtG g- H=m^㦤- uRȟht1 TM}V55sA< xHw:vHI<}NN޷a#zp\G~=B@N]ʒq_a4%&.iPMa2S :TԽz5LsRGrH}-TN#0E^M_s%6m-25#mC_,|UϟЇMumpU[c}=uOb!0|ceyG` cN .9$цtݗ?D YX" VeI61L읲V*! ԛ.۞Ry-ࢎB26>J̙r|[G O'D)On#rby3F df%K$cǠg( j-L*]b%׸yvsRi rpM+" l|#MSA/tjSnQp=bjs;D4VIjFo[VH$K (jZ\\ ['4a_52N1VQAT<^pY+ F)](EF\P%3*h1/N23WY{= D<[g!t޸=F uYڒo,T[5(q-HitCobnI穄Bȑׅۤ 2/ȈU)(N35eAς?ܣeU#j( ̒K;6Ytb^۽|/dF>-pm[L//eOAT,&$.vEg-mK`x,dTPN]Ê 8Tݓ/F7W)ѕu<2F||;0 , ےx OVk-lsӬ[Ds3-GZGGNܾ L2^v'&8rĬxG-,tꯖ \*ԭ0=)ti8:GyÔO[w:EB~źIfaVm;:v8+]`DQ8A t~z5T\5S\%_McjDG)yqtyg1K̗F\ٺ!*Y0_CrKw@ilKT4~?9#8eq`d݆cA.s`P*]q9ye8}\J0}>\b&M"t^ZG-J^[Eϧ+^-B:䱔Mfic{?P?tB8 gꊞPkCir1]fTM^Ol*;྾#HwckGjf*xU4 T4h e>cEMt2cWUD?dLhKߋ+g8] . azAQ(x)WWݫ7jQ)1l@d5#zKa 1߾v'&r@Jg߀.hMLe|nLO<5D[ މ4⠠1[Ws0Zh DhU2GV2sZZX6MapX, )}*Jw̋` ]K~>5@W7ݚ4θۣN F7x:BMI'S!7ݣQI룲c5m9pYv ,;BFǨm@VӳF!׎B)q?FAWk\>u33&敩[sQ\b+%t#9ȧՓWMZёM /7ݹ@RLY=_me'Y]$#M-K}s/oWX]v 8 ݴ#4,ƣ*;D?< e~3@!f Vp Ct'{/0!Af9-m',X<xvhqPC%ujq%ٲs>NAV#0<і0H&iCPۺq2 _Eʅ9K+4W}<\@)-.b_d澍Hh֓Y8d{dnlOt YapKnPo$pk"0Pt!f^RmU%cX)wX de׺>:Ӄ7SRIQ4Ŕ5+1$B)= ]=10gZKo:1 ?U4\ VL:٬˜>k{pnxG&ğ ˘- M l 6C@Fs<Bwhbݪ̘ס(fl7hwW{)ocތRE'2khlH_~ E HS,&!mqMݴM@Ux-:IEi"VNqk5u&{d7R(FmX9][lKG%Ekْ Ʈq)JecoǴ86]oJo5wL}/iN >~gb*ź~.W}i).O?F_IE+<״ڝo$&%L-K9J05 -|,'|Ս&钖ܯ @bG8" ӵA}#aSH '\kQmiAv)9V b 1^NGJ4P"Ud2Lppo [>8yvf>t 1Z!wBQZtlΐ,'1ӨZiXc/,b%諾 z!?=+ELY }t+0ȝYŹX8N*8TsL{[xl>rs[/RTD|`#"a>[Abْ=GD˜{hRU8i@OCDK }r.%< Ec㎒moY e V82E՞I]xKZʒK@c8h1Y#d߻ |۫M!R_igixLs0bщ֮A7/|i5%9Tf<$zuRJCX"O KP{ȇX= 6⛤Dʘr{o6-5C#-О3_n yS%gA$%-p{)3t"U)cxeeR!N&g׺M)#䏋4rr8`L c v[]}%t:!4EW=5$TRdARQW!Ndl*AD'pob%]yܙP:#i`GR{w-Џ 䟓TpL{[`[Rb)| :L\q0$QdolM@Yha%/2= 2zl#}DYZoQ5jLGMoeK/TH} dB$ԶY(sN2wuLF"҈w:q^:! )<3,xo$Zoq`<Ln|X\/^c7͌.{g=hOȣcB%fg`P 0*!M flz&v.dfU6/ I`G^6JN^[&$$4_=+Tp^]@ɕq7ROwgGUO| i55]@ydIaH-nbtK r zczSp?EeT OQZF~w1 Up|1K-P}yrgS3deadӁ̒O[DžABrW<SPƎqy\L"l 2s 0508)tt\ŐVUџG*2p?7l/tiRN7eCb^jSn -1gHMΑ: G LtߋB cڠd5"UJh&1E-b {IyiiLAƤm̓ wPqP ٙVE@#dMIz1Zu19yH=cFۘ,菴5~9UѵlIii?ujϭ7" *v4PONwh6aWA%%p6)^ثP)@9m>u$Ð$zVCaM;2w5%s7b qT t87Tnu; ׏bm&wчJ@W :?:{>LT3w2|b^&֚lndt X{|8O[i=&Kr~Bk VP\x]U1~-Kah[8[a^*un{u{ HFơ5 # pKβ˓~X' dz[*o^Ť\'džq+U2OQ*}hУ5BPPy1~<^EXuoLes64_8Yޤ ͋‡URpj-!>e!] LJ ُȏ536saXxo>ӤbLPh\Z LfA#<[J `0v[w uŲў).oWVoc[ c>.551`ԨGҍm[ 3ԥDBnI` TҴElr M s 31$ {q`27?Xl, jbN8Tn5 +qG'A&|K (zk[e^ %=S~Q^[UWZb/^!3 {~xbcjs܀buw4lq Z8 vqEyoKE?"|I*K]<ٽnǿLX ۇLYo?7xӼƍͳUɭWF~>3y4$&$<gמ"C!U"' (FFuhKM$̿ԏ$|B2qOJmb0E# 6*._y BOCVu?wfщy,)UǜT?Ȉxq)M\ 'yUA!`= /Cn[ nBo[7A|yO|pmU~ -CAbZb27Cz:/OEeI,K&ރ1|ڳyyhT(Iy]ϯ2<orTVW@9 *ɬUqq1 l )i|D=V ww_U9"/doV(Kׯ)ou>*f|4*Y `l-n$ȸrwy'xi龶's cVQ3f-w܊&YqVz̰y,V֪>hq#?fZ#hi- u] FB߫'5Sj k{tfZ0b\%S0ECԝPQ2 ovhWЯ45@zXs9mklq#pR)l…"[t]M9KA:05% $ 3Gn~H՚aZ?[Dms^Ig5np֌r jC oEHQubx̝b|}&k(Rn1+**A,`eIQUCZA!4dʭ%,aԌY$l:9eP {›a#">`+w sbQr\/+WajtѦ UllE!5l1W's+ ^>&@"|7Kt~suǁO9MX%sY߼nrٞt&g׊s%Trʆ/nFME SͯjƤ@#K4wգWO(ğy"V"="E³YV93S;b6*RzdtmB2@82onZ/^zm{rHApՄ 2ƅl<蘘devhHA+V9N A0FX;'6=N'`FyG0!j[/4Zv3:ExC&^AD 6jQ ͤe nyd"}fmn4.~/REP A@24xk-Ccp W!|nv+—H,U\+r0zA37)ucڻ2ƮA#@Bl2-KT{eM0(٢?aM;C>@U֯Zɶ$u5Y&,Y$U!߄f(UBl27}*> S޿:55raG#l ̣|l$b!4g;{dN^!,#B^:}(0g$U"[Տ͹sn 6|ptEFi3c[&"+]=!U7h_5'&*(_5@|>y%x z8g_Np=cɟ8'^mV#V`YDz``\gq`g!cEK~ԍ E7dFqkR#"ܟ)}JX3L%Vt'GgE!Mh zXkK\cH6ZAB瞝!mf|/.8.xÌaTӺIoO륇3 dzurp$lh.W4gF.ߺ{4']MT) wCi=F@+~0bM_sy(3zVV՞3X b b6zf]]gPc;c+.q-ǩ%hb95H;WqzHO܅;hL.V2Y*H Z G\#C^gN͜V*@*̉|i4ٲ$%1 >Mort@2gV0yjG?@UWr-dr&]- _w _e (*FD[Rq̜_ +yp5#qOfչ .P6`pԚ-xKdA5SC^0D}e}Nd!s I{=$*Ӷv]s~e =bi'2F߉տ-_%B 0 Mifvul c Ҡ 9ʅ |l,R\eVknE 1B̝Sl'uz7Ы rdR]b "w~:3{dI:6aZ$Rف; bh,MNN*Ebhְ)SG1:>XBX+_a~|~'LjbJ_ȟdm!kyuck34t k\}%.eݡ=?60NDD'AV1ҮKXXV%8$yd[g)E.Aa7a=νG@[ؑ%a>hw'Y#XW e4Euœ7M> uӭu!JGeAvz:7 Mrq5%^@ G&7`94~jQ{~/qgU&G0?v5Q '?wHP&xUJ`>y=%CzF '2vܯT>ԄT[Ut?IU,jp e40k 8O Jtߢ0POi 5Roa-ޫQ2D0n~пf;V6O\9uaNnW)sI%Q؛KׁCڵYOD ġ%wc Qov­D?j@!!AV0w6OdqRU qbe 2a"/# +l>c;gIeuq5n(>[ɸ}+!ZU.d\~ Q[Y%K9) l3{ dbZfJ7&K)$% BED.CEs'|4M($6SbPŬWk/GsL&\h|=?}K~]6[]3K{Kd9-Ezx' iV֪^Ynu"r "4)^eoajGh :{7D+ے]r!}ڌQ-vyK$Yo/,ĊόV6pe"P| }YS():D"4R9n( g_7φټ=Ï8LJA[aLbVHO&X籓9"*ssY "@)Hv))F.+2TT/}kόX<յz`d.ӪX.pߜ* kvv&-PJa39*Amd/k #7ϫYWn ga67 T0 wsnXt,8qꌤ,mE3ijP rNO%*>@$f|7TE򰧰W߻y݆֘ZwRicbldv9S\C_,aף8s=Uqgdzx$[ly⩏fI\/Wzo%L|]iA$˂">B bGָcu# e\q?*/X/4ńzʵGPৃ0'G Wvgl&ȥ&~#jm?s{j@{76un$4=;g+av+Wd^g]@}Q[%Mhbp~bEݏ<-fni bʟl ^¨]wo|r*=.I8QD Fw<ӥej6f,č5K;.'5{=AJc;ٯeX>gV}Bz(!l#%# ᑬab.!3/ jݱ61Q4bF-qh:!Hm-mOM|weOP F]O򊸸$Yv3 ]UGև'1,+b-ՠdMTXGw rKː4sH1yba^bkSJhb4&c^쭾ⰋtՁZxg^;-sϖ}5" >=]c a*eUdGĹ'"kE7*{==@xՇ}o79?zĈr:o.L侁)Aѳ/H=~AE(xt|C+֦c}_3rP`APBk Q0$kjn_b M iԑ׆^cuD;`UP,*R `+Fݸjrx\jG`]<;H >FEXXF |5jfe^*$Uɲ[<5 )rj85FOm^~)FՊ Mqpw9dݶ jpH7lʹdQ`5ʼn96t`kuZ3wO|=t '` mSRmySROiEOUM<)DGɚ7#Y_:3֡l)}6vqaIvZ33gV6=^*ϷUb.# \,,4f$^ e,dΠY 󖰗#_W?بZf_23PSiʆYEnMa9HV8(c| D(8nd$kZt1 5YX'xߍ}6 GS13mUjRgyčdmɎu~SFkH0DCH8mZ8r0cW:~*tGݩj .{ E[ =tNIu=g6 x--3$e藹mo, :I<a4Z4;ogx^G8QG+ڱdݠ򫖶q5. maT3>oM}w [y 7p[|R6\(K>/bhߟ(kχt2uV^v՟*%7eڰ=񚰨/k 1QR ^(ym\j~ٰ8,Br̍ea!/o뮵4jP)4= 2^IQ6X M۰<"}U!Kw3P7V1): 4YwȚYkƮV_n^)SAQsDRY}߻' AVHI0:;@Y@{K5-1C&bh؜oxaLƒ*b~TUDV]GxU9+cyfLS|$nPvA382옪XQn9fdkцЂ'H,("%t_C2h..e0`.` UKm1y f.o'g dۊIW]dQaoSgB li!MyE\R1 ݡ\ A.tϱ6fNG&Yp~ϑtʛ Ԡ[a0 :gxw\$h7w3gK$z# 9$\U`|B̿arp;42L E}hRw,R3Gf SF cƶ>@Δ(utNm{Otj/P0k=*bJ1 ,s3 w]ӅnWʃ]::Y_.&yITgR_"i7-%"q~SE5'%u[NN0  2b7Cơ&i9X?$wk%)=2?y+k!%"Ĝw  H硻AJƓgŞufҒ*؄2WH Cź |OaS΋#k۸iTThsך*ps ]0})Y: AI x)0NSZ*~^s_= *(M}u@_&Fw$j9dzE(©VkBNI"Qv@g"FН;q>_+յشBnj蘀4OsB[fUl:KlsO_d7ʃ x6MP5tw/jxR^*]v!-? ֝?<[̈aI=ZMpEP(. .w@;IoTJ>lkJ09iњd.v㶐f:T3چ.?x9 Ko3qd]Yh,6"7”R]~Ըa'(ua6n={n#f$'D(qbvV>umroÚN~E./ YNt_&5H O?%G΁ }=\{kj ?M_Lz6݁p-S`[%\+X7m+8hIQgʙewm#ʰ|eN^JnGW 3[evY46\4wlvk dr3(9tQ^(WU+l ŋ2NC#P: XSS^'M 'ex=s4:0r^eJ[IxeN'hх A|O|<'}G[N^P.ҐޒzZ%/Q8S!` 1 QU3ڨv;;#0Z.'/V~OQ |t@|:3 :l$fSa Z!›lknVIZJ45z|u&'{lY^= YNJY~~ M]S ڼc 5ctwB8\Zw](T9-\( P A(ĕe?sxDvNoN )Asdrt= O#1SIDNxCu9@u+8p+4wmM[UG'I)>F)e|s4GZ7` Gfb%43lTVbfB .ZoZ*Z]5As%fu19Kg? aSStXUӺate~PZZڍL6E)O(į5:3xB&Ӱԫ⻽ajnpLݔZDڧMK$_Zy0{LZ~8e q2? *0ٜkB >iy.0㿐]ZP%K `NJD"?x8vu lؐ}bI9m{20SISݵkAwWVN%\GǡhxvFjJw*i!8Zg.Th?(ZcW`};a}a hpPސ^yd1jlW)O-!#v0[m@6Z=ET9EF\B\6$sIgzjp:/"oLTy kb܊NtҜ BAR`W EDc] _<>*szUj.{p9Ȉ{7G!̾<<~9-cKc^QkiPW@'-Q/يۮaw͚ ø=s毷4~nekI(|6VSTV!z̖%J/m5D0966>4X!2PUN\/iX1+(cJjA8+Dq8LzEAOm'FiK Ɵη`;Բ |BL9,bB] }8EҸ~ŵ%F^I68zsQ cxJfJRێV*٘J%"OP(%"UPbo-?8;A/[ Fl3'&č u`@aVB.ȷޠ@!d{-\lծf$o3r)loM f?c\Yl@HosYP l/#BqØuP4rSy-YI3E'a!V?1|E8R\ pE񣽀sЂbH`Q1fٿ+&5jad9t4 s;)DZ0|9^a4e~'WXryͰFn#&67OG x-A {h Z2X(8ըq#LQyR(uZŅv%`!0'?j5k̬tfL"umH= V8Z7L+02C pU;Miݒ`bһ.ꤪw@)·p!3 A7$YWMx m)ܴG 0"1H.c&>"P#ԟ$ } }ɜf[NKwx$(w^S@JLaUr8Y{rdCFR-ʉlrMOivc6Taktcva܊e}`[8aLDb5ej K/l!Ty{{Byfi.<' 4ڵ62ߊsLnWsPo-**V: <_SxEߓJtaseܘ>@p͠ V4ekD\~([g斢i"ڎ,BTc8Ab*km{\Rl/Ҕt'iv_+!D}klTAPxROB?0pĒ? ؤ䛳}lta ['SlKgJZTtv?=ާʎ"113/jhe@_{f~O1hb;٩Z !vkvs$<٩#|=ֿ"ǎu!,Uw8wXdA7Bſ'Wh|"8ʑ8XF$(7Ze0_CM202 *oOWRv$sK<{MCd"[U^ CH6%i07b{rL+yH?j5olAa8a͇ڂbÜ>-h187ftEϩӔ$Pu -{@xg!5'2m$Ipɗ/~߻8l"ണ3l([ *YqjZ5kDt7VXfkaֶLv35tϛ޽3`gkAtf9oچ#'(qs PYKppA9sH |ë">om qgN7ic$}6BrꉍvPtNVFs 3vfJ4fRVc5k9`ކ$צFqߞf+p3Ѕw҂n7i/SldҮwJ-n!$ sXy7$6AveY}v \jo܌>x^e=J)fJgEt|%HT_[ </mϠ5"TI61(ڢ¯m֟da(8 ^QIL/ȼ>X9  ʇm{ Hω(Ldfea?&;9ņ+)$ Op덳U59!Ծ&.pъP'Zߓ?ǣ*&Zx{ڮ< ![ʚvUr'6ФX[>)L+-yV7*?նCV..LF1." dѹjx8ީTKd?:3'ZEiN\Nr~15-WKȝqG,Fbk! dIK[T6 \Pc qA;Tgi[jSōPQSx:"LL`Ř?s%H1}!ౡ@p6Q0^2C]msSy#|la H%w]W-U\nRݐA'WŪ=^ӡEgce4v{?>ڄHIJYpgBk&m=ũIqdgE'U'D-MoLy0PBs -ܼ:q#f ά̈́ N œ!a|8_,#,+uu'y]\qv8<*3l牮qIгIz36jJx5J,Ҡ Tp`Kutjˁ[!٘~Ze77OZ`8c߱}t&I3,'ð#-JsnVYm\DR Jq frOeRMrQւ;c2߭]@Wt_ZؾnM:[&._wJX~ -j?~˜+k?:һ~ pFK}!8,YVE Vx0&כ?{^bN.[Б/E@)Fyg _].V@H8ntک,e(l?ve 1Y9A޶~O.Hod \S`cÐXK6Z~X^i-Xu[ʥ2_Dv?Yr3`2u2 _."M$E3>D y?#|i@_y%̍þ+eOD^MJ ILid֩2|m(Rf@;VW *Y +DA~?WDOU3'&72E@ϨjhB>F76(ڒuG\ oQ`KS MtEbWa`Ko F縓%W a. ڵiv'*6(^isd-}VJR(ny`9ĵ' 2JC^<_|{@$J^% ԑ1pJadw'?S*r-MkdYQ |r`')ye0!=dž<1xgְX$JE9K*f}j)%ؿu ^Fϭ應|D \q6!ca&Kؼ1uD-8e/8f8,2-X@w0h wP3'?W$n v2@ZmGZZfp`mKƺ9S㼗jc. O=h$ʏ:F`S4MJ~(jzȊ þ\E]D`ZDSﷵP9 ݧ(B%NMqbG6Lr6O"U DF$6·sd]NWK>*&`L8Eaߡ 쯟* &GϜqQ9sM4 f a b@ґ8Ɔc|)}]ϦaSi?=K-EgD}/1Sǃb/⍄Ҋ^Ftx1K૸rub|UN]0[g;k['%vڀ)@a4Z(";]b DOs4o6Nfy".wqzNȞ) @ >J%=ޏJrRdD1݋~c\ f̴{S{ӛSIgLß?.e /3A[g3Ecgp79y&%D t;FL8&}2Mx$m`.L9`@c! +( `ONϘSjM o?i`' ::P2 #}K*韺BͦQRrP@C<6a}FG7%cduz<Ƶ`;`m{Bͥ Y&14ɑ~+]#=$mz/fdUGOs˿Ĝ 2.OQ `BO\83 ԽPל-u`SJ[ԟB2Tp? ¥6-Rvk9H$k/P,FaoaKbi{S9ط|e䷥T`jPl=S vJ\@5٠ۀ*U '}½{R%ʭRDLtߏi ^pyBc!x+{p04ҝbgN[; `ox? ]Ҧn%ޏE~XO[jK?1sv^J8)CBx*_dsCLy:O`y`T3z;(}RJ)U׶tO2 ^sF Fl#䓫ˮi QW[vK? _>P~ZSUk؀8NJ)`ҩI(- >+pn;Ӎ8;_J.DRSTeO.Z MmvUsANO褝34;&Z't{(<>&}/>ﰣ<ZeGqkm?'d$N"HD`,=Q[J2-"l#*qT 75ű}?{),5a]rA96>Vun'Y 9)Q*joo! X^Gz}N$0WݺCO1ljMv6Rmx\>e9)7LovqK'܅\qio Q>?o5Km+&+қ]r mwS3\*Հ25c0g2쉨P1y / ͮ&f_ˬt`.y ݛxnjλ?97aFl+=Ʌ0<;Ǹ[ HE?E}@DGnbJv+,V"~PeAXzhcyѾvù$)}_C'*'/dC# b9;0bɠ4. G6TmCÏh^یGtr?Դ$B-0~O*=*sEi '.|ꝡJ_Nn@) Rg%abAY`_? I8 mtعv7[eD|kvx _AUQ$*_Dta7‘'. >z>ˠ$_xtkaVyA -CucVK095*iqk[e0ňc2~32:9s@x?>и k[ $>e"Kvskk2|2`NƳ{Smsl9i Q;pGa(cښ=?D[Iw^E{-u,`mDd,t\c(rFF%*# ^*\ꤢ hDW?ʿ]/OOL*'N—Oj ^vD8cy *ΤYR+wS6$qlE3_DY*=+0зOh5n 2`*19lW=<$>fz=l$M+k | ]dnay px(xA/Z(˦ rc-*b~m&̐@sYve M)@X4uR1T oVzX&fGXpKREWԵ}< F2*ٱW;Zq6-Q8Q XxE}s$$iB ?t {aNMؓ0WU\SK]oxL‹_ᦋō |v-Rʞ,d!O>&(D2L+܋v.*p!IN@OW0pB,z~Śd3 \fb{,xh%]fQ I5ŝUd2Px%m\Vqދ$VgS}#!S) $~xY^n8.<Һ54N rP Ͽ -aIZB^۞rr9;^Gsw^  K:;*1 [je'_O4 NCo.cy_O\88x1-xP$bky\F֨ziomX{T7` vr<&Mf^P DNYCrς#daoXqML}0 ,K@*":l-yC : ҋ7W?}u謁b\2$zr淼'~Gs.ĜqiD^B:'U$gfZ6r*6O'y.R ߜ#9Djkhύ! \[Hڤ͌a=GfٳSGuRTԥ0}V.SΖaZJ$ g A6gPLyX/ b7͝l<&dgjlIſ-(%@̷x 96;hFj\blx6Y 8qbD{ҽ$pSi%a_DU`Q`-/JS*q(rMLi8%ǵhlf}]O젩aGp&uecDv]| d9*hL L+b3e{6J?&6FG=n'-U0 5`_q\NGˆi a *29z*~{:Wz -elh |i=Lb }2+c(]!S-KנRx_Q_Y7!QkKZ KDVxA]9'%W G#wGԡGZC$F:{yX E4BppOf<{sZkziy$Poh#gy=?>G}b2xG+Mr f! %x $*P>!c'H.GǍ{9:S3>6Pfp0wwVma?Qg` Zof>(ifwƎwzZ3n*4o2i&Q)2 rz`,}1_è,jODe^hU\JPU9kq|V1kU"F?.Ξu sQпl  r2kIk82aR󫢏RxDBō钗7輜jV[sl$~e9>F/O ʛ^R&Am !ԣva}w64#KߥY/]+<+,l~1[A~_Jl/y9gڕ&bbQ|4_vS(3fǏK021l.zI^+A%Ex"NxB .DɟfEM2U143fD:[H(.n0Χ8找wгl-~cc>Y2Zsb T"B$ 79Ԓ&k<%mA\dßZRG㗥ش7cdQP4V D')& wؠHB4T8Ҿ[LK@C"biyNI*T\0$ ?2gmo#JY;hyz490ޭ68Ðw6&Í^V};Bm NmV5as(3sLۗϭOgT,q{ǻ$Y t--#+]ںcS>#4*% V01TǗhãTiJ6J6 B{e⡭2f`냾JX dJ GM8q)ΚʝE]2OjLf_1m=aw׽ԸR*sp;#Lo!yj#z{^sj7)L<i&r!>K# DJ[|*Ml:"~լir@s£'拮5,Wу 0e(%Y;tv};ұR`w J̚u&un7oB*ЪBnilв[ؤ2T(TPQ a?^ΝYCM\_Zll_xyh5Rry'k2omI ]"tފ_r/s;U{8XOu Z[P5gtK3` ЄT?!ݴ716{= :lc! D@`t}˸@=0%Cmsk)Vp-;144j7XQ=U݄kWHG$`*޵&\5oy(7Ų D5F8F8M>\l<"H|?']3LE9f P΍4M.8=?IJ2eVCr% Q#6$"58*?eB3@1[NƔw 3 ]ڹSRIzNJY]3ʈzir Tҫ)%BiQþtYhhZ >MϪ?!?_,~5VI;O~K1Sc#妏45t Mೄ ]䆅{ZQCBƤN''͊|z #c IA0ĒM:&6hy&|(r&ψ\?7o20m\1~ ٪NaBۺNiJJWPrpwP$h;OK@ m،F_1'sծ.v኱$Nk6PeU2U<ֆTmTDx @85yqs_h2,A{!g 5<?MuP9}d(1:WQQ?3pxfVG5Wz4{9#a? GuV%o~B8МBw\7 q FB!V~$T(\ew8WkΑz.zХ24p9 BXE:d5:7Lz; k<הeF91buTY|hT.%q+t)\3{),|+bz@\=q$e8ãuΑg8d/ax^֖%GT f kf8{XuKBĶ]J3ÃeJhD$QA?FeQY=# -q@.F6۶v])H!r""]w܇7a+3oف x,8I(o1ZԸgz`\`S*K|Y6&dݝ0+t/Ow푺&~3uiHTs_j1&($ bq9MU&}!ԑ5Pe:OT nͻkssa ,֛I *~ŜAOZ{zl7=Qyn1й ] r2n?FLhDH gi[Ŭ`[i45

9 V,#0}ajhY9fi4+߭]BV '#k>cPx{ zxBF[}oq2~c{ctV :-#g a9#6w6&ٕOg6+J`4G Z#dW_AJ_!9%*) s#!U%kє8aTd4-l?fi`[t2S6Hؔ yb$h_,{La`ޗlǜR#`.ubYSj>mr/%z$iҡ)w 2p6@q0-Hx7YKYfTvҸļۀT@IS|G;V ?қ=JQ,c"O~R;"2 ЎT7ft+WE~Zo=Kv}%q.AT9R#e+y$aBe̿G!|oSKRΜ/0<=gM'$ fbiJqCs&F_$g/ +=$D-+.ކՇv:.&<]d?!)iK",/ޱ^?(s;Qq 3JL<迵h2W%@6!myY8(ȏ}E+-70nCC Z.㒄BqW0օwRt9X-9~v,}PcɲR oRקR<3_bZD|4F,3)rW4%X&olq fu덉h(%M4VōȅmEoAK(ǭNg6is2#W)DX=?+ZH4([Jfl6`j ):(T,¶[#& GrS#H̹BaB~i ^Z'9A VR˫;i:.ӆ$\q LjRvoN^/V Y[5lo=JcBL+Ϩn- j@zXxT at)ȴl;FZؖl9/>}~HŴQ*hQn 0)8Y"x?AH'ӧ0(|s+i!>Qr*uHzC,17(}MU-B8$-τ^_Qǭ}<Ѭ#ʜʈiW q74ksbzB bAY= Uܹ Rv]hqoCT#-fX/[2'Y[;%D հ冬b.jd?11*y!s nhg\ֽPWel̆K9 مøH5.ԤwǯLi-<;Xh†O~ꉳD;iH-2sAi8Ҩ|=2D¤,70Ky[wbOZ$Ȃ8-wLѡoP2>("c(p{5O y d D1݅ qI4,-y^nw@(K\NܳέY?ň|.WϜ~dC:ny8սKEC#y4/I!rJiCouU* kWYZrRd3.ջnuqjDNXؚO`¨GE_M6*sR`f!PX, 5yI0x GGSOxѺΫ9s6g*/:ƻn|h{}љ9F$(D|)L\j F$\-3N~;M2uYP%j蕸'i?c%ڹkK UHr"yɑɼ]V_Ԏ^Sө:9Z_(G6FL~ *}*YCw^{BaEE+uZaUk 3b0Z:*lo"SO (uv=Ħзȥfp @ IaSp6 U|50j{Q3dmS4Ya%^VƺmvenEuOB3SU[\@ת6+V'`LQ00>J7薧kLL8"m-u.NE0mRj KJosJeq gOGGn#&X뚩HNqH#s;+[dybNF=bIT>m&=LPi^4Ұ8S:b7fha{'1- 0N Om*D4ձ . ckPϿpұ}"&n؂wдWk!`}*PHg*TӉ}hUEnM GJRt lڳ΂";ӨFn[7Q{n11`>]4 wU z›1ߴUhKKg_p(S?ZVCFՄWXTSa_ kl>F ,$KVUYV Q <ͯE&@ Ksgy.xzMCl%aWK^hpP8jI%mz`YPC꿌7r# (Wڲ@ɇ#@lP{'O,AԻߛhk%ۤ7å4fz8ٗcFC[}"S(IY-P`ukL}Ǩ$>u;E\+b\/V &O_*-xw*u%IF_%ÿszcHc/"ӹ|i_q~B$ݖZ:Ey&C7Q[/}ɒ$0J ogjlEcbbEytoW0HsۛQ8kwVp\LCp1OM!E-V6"%cbzsɳK u7f=ش؆vz1ځxB AA+.7vrp*۫%o;dBSbT2ZFD'{e|_;an\2Ϟe_pnَe\pȭjU ' [߮:^nĆ ƕ\^dz2P)[h)0c]4ٖI^HjDIkރ+Ÿi _9ZY |dZb \iM.XS٦ggd^?y⽦R0m]uI`@Fsr8qZ!W=B7…M'|Z6p?v&+dDخ] ݥ_{Ӂ`Q*IGѤAjA=-7te{4hD+UbUxEeib[I=4P4sc&뷅["fødIeA Lf0(.Sf?]C1h'f>yĸJPCK ]BCHVE^9.,>:`AMqBSl ՇMu[a{G0 }WW(_TU<5R^kw2IB= =yEirQ,τw`xfhv'O0z} ТbKEa'?f|0I% bgʫ ҄ ruP!l8xv+&ub؛Bۂoe?mNR6?{Z_\Ez$M%>7q7go<ʡ6Ώz\ٝ{]j^W)! h9 ݎCSlVUES6yp_?^hjR7ۄ^"ěR5p]ٮ1t$+jhiNv{if8 Uxs,9DaA567pz3Âmfd8ϴtBb~6RrO*KϘN~׫03ȊRjIhGT6O5+qϏHE:7mi_r,=D?><^>HՕeYK_zԖJ>}]:"3!Q:*OīQ`]s|˾SF,`H߱.0D|[j vGk]ZQr{X><%dU 5:*39xN6Ob#&h]8RLHHjZ<ku t-jxH@3fA@̎kb `; 9 d돨n: y*{˵S=buoZ&EUPէ>\X;(r߱:3m'-# 4V8BetW^oȁnE ħµFO7\MOž/TRa7iҧ&z@sQMEEb?0P\4kÃ8,|ic%"*[8{s)KrL}w T6o wߥXP@"LΩAQ#!Y'd筗4 Ђľ~]Csݻ&GQa:F֡`|:m~ٱ<ҌkQ6FHfUp3a1xQpvyw_FNTD^m ,@;HҶe5Jc\> ~qWr@\A,?ǒܜh\Pf0EG// k=V;Mz9tDaeΣ\Zk*x- F9iaBx$XIAC>Ȩ\/:Wf=!/;3Gea"DuߣY?;وtpߑ[ĨUK{e%[B ; TO{PeWJ҉8 "d<dp ZZ)߮Z0Mdoa[h^?5f'TSX6dk.}[w#ɹP#.J{}lsvؚl/ 0ݕ*cd3?FêHK!i=; .4Wq0("oi"z7}|\ q 6syp5e͖Udoއ0  g8B=[K~cS ӵ8ǞOٍ{l{ip37cB ZH_̫Z/dPVw4.= wC̀D]?nRZ䞉NDrAxJ-tjеǸ$hx](ܑw.s "St] *iYRg{ҶӖC??HsdCMr+0HOJ2ېʻcǸ-ƍW2(AX7/'tIvȧ`(z:Ot28Xks@~LYj5bcUzs(%E\ (:/ a`7;W3H@7fT& eLt~3OU3o7z VæWKASC ;@ V{}?!=xKk.Py3|ٯIo~ K0idrM"lGԾ$`^' .~xϱw7_]C5"'E#*G ]t|zD OEԮ8[k m)mv }~6oc!ڌjo!+tS}& 4<-dI {i:% Z!z+W.LZ/z{ĵ)0aVeJف4EZ3ơN໒sS6y2>PWo;X+Nި_ҭ2I{q;aTLbY̜蜾&!⧝a }Ū"O$ ^ " #&UUpb9Q*z]nQ 6_<"BYz9UatO g]*m:LjVs.ż۠Yuyz%5D ȁ&O׳@ A5@8uH&|d2!/#D4.A3} }/:}"+CdkGo]&?Ÿ VUw#c Z-57r@iʓ췟2:gTe63UvHFj-Hs]Uf> #S'<ʔGL>t]İs;9?Ǎ7t8`# IKdBcw,74hxpf3+iVC&T(*ʻ\ ^ә!J >:$5k"rvǓbm"w3C{:DֵҲp'gՉ GwHrd~ɓNT&8ϲ-9s;+qŽבL@wQ ~$9Mׂ߼%|AQM-SVF fq~ؼW0A)OA̎\s [P"^oqx\$qx[$ i`Q%I{7=7^>X4׺& ce,#A% COY]ECBAՌ\ Kćv9!ᛷ̸{1iw :{/ NAfē|8,'op;D3J(giJ*XL,OsYw$/Z\Vah䮅ºWјޞ|J-<+N$5qo+[fU8x; o\lTi\JlTyK;k/.&R.Ae;ƾ򘕎>F&T޽͊~d|; %t(ֱk 62*B$NlLvŹΗ&ՄLfuf>ZlY;#0b䰯 uv/Y-)VsEROQe[ e24mj8 c >e_Gq"'͍oDJD:nR y88Ѝ<2V0x-cp_mN$hÓEZ/aH^3P3,Cw_A;qj?UnKwg}h}B?_,G UQ3!2̀[^5Ԟ 1٠0W;vfWW׻>&g$;1&=JCt1zRQ*62ocJIIk0 Vw3h8ݯs_lxF)v Ʒ#8l_X,͑7^n 쫤Ǒ0$! 4^V}it7&yTuk=*_rGU–81R;$AѱWrcԚhC_9]l&hMFW)=')Pi15%! , V2҈B.(Cyt勩Q|!)ږU5{~YQFBpi pzON*x)h$ZyYmP-zϠ^+[ \k e%sI WeZ7#QJv;s|'mms!я֐JdAW+AړBGkF-|6szelMͭ !6]Ct4I:FVصO`o.C5϶LaTD&F`*V/-5\TC Nn ^Ϲ$٘f(Ր-u)u]0R\*Џ:% N%.qzm lHd6 /OCOnݼ:0O 7 uAMɳ 8HdLr'>o} r)JfИӂoD߇1weqPԩմ: Baˎ3~~2@RÄ́FDkŌEi2BM hw"|2ՐC%+8eRvZC gmYvdFw+,+#qߧ p_r "ST]Λ¥zT4zL?/&ŵj~<_hx}tG^(5D7CG>PtHdž:yA T!<;t:ytHW] %0m -XQ@8~4px>',I`xC͇Qkz?2tpjE׵j3Lg . Tփ^_Xm 䈨[efy)c Ffuu(d@'`s9AC>@D-=&oKU;v)*lXB=G]A6A+E`#)URc39%N%A f˾囃)( #Mb#Jc lgMygqM'3j&Saw8d bFwEHN|!{'8ߍѵ愬*8gA^*ֻʪTwVY*ҏ\#ҶK1X|`쎽%Bv̜( kcCV [`e~+Kj|7ȍQ Fq'FlA%!P@m{!a^j6+*D$v 58,^o~egܚ$,i(e7$oH6*IV`CǖCSv6^/f ghhd îdE#>M2HF0+3kEp^xu~clc֥fs,'i*;t΂O `6cť8IxUBw뤄JIXx%+]~c)A;(/lfBCUc4wylB:*u"UVݝOfN5GR?:ekμy,lܶ9l )6+;U.lgmcfSWw?h}]\gu+4?;Q9=*ݮW(QX!u#E1O0jx0pJG3 ,XҮ]P`?pb xJ@myQ.Pv DЅb.9qH_u/$fĨ9G!1Dfsw<90z$ YƳ"\T$p {-QNz#IU9@6:-WV"J2U~uic> ^o#bJ~SNI.̨α饜+V:u͑WXp|D 12ܽoWafA]뾆\T] PW4^]qK?d5ȩy]{xᜨ`S_+ؼ -|(Z;תPp؏<0͓R۽p”KvxO8æygr=E%Os=3>&8D0L+#˙̓× ~_D ĐݞLLchmj.ڛ✾3ho3?P_SÅLG2y~xL7#>#\ FS<"J-k$i㢏oKXm%a $HWوfD+:&g$ <8,PHl+hOKEmx ·"qn슜aC.ѮIrGgaܟc q"rl+} b`̮5BR3AݸO/N6^aPmߣeM-H 0Kir2PDu^1,ob(Yᅈ KK]U CS@E 2Y׫FypDһOP:hl evu0～@:H) D?\бK> lSWZ$cx%=E 'ϏFke_!B Q`Pk=4!cAn[K:3^ςL_˪FtoSj}:Y.lw.++g<ر y{xC_tGDI T*TI9pP{mBMϯ>٦Fw|e?bs-ުᓸ^&;D5EL֊iCr+>{ql|si(3V"NǩA#X?f9{p'%Z)O8~T3ɭT>޴Id ?`5OgW[?;Kws1DfMd-gnQMO I6P/N2Dʡ6=.Ixn&!i4HK PCzi@'!vC8xg!=_χui̺6*uCu IL$ _qTs:wb%ñMgjH]'v1mc0N{' ;\[ -iwAiŵoqy[)Ib.ɤҸY}jNJ L YCcgПyi!*Tpu#F?҃E7% A0qJwRoN˛2) =FO1btWT$Bwc00'v90_ǹ],*iQzթtMcàr(s`6 lޛE 0 F#w]\*HhgfzI K^NnFƦDP\dZ,HI jg떧ǯo;逕oK8Uh~F&8' ޕ5}S0v!bD1 `VВgV k_<Ңvq2 g+gP \y]󯲙k|r鐁#Kh㮉JmGTb !01/?L'Bj;% !Ԅ .%̣!j0tER,3IRj%o-7". Uz*!,]`9j${T5ܖ}"hz 3 /Cxk+AԨ>e7"W4RV>,&Jrcq\H=xݙƌܷ]2Q4oꮬn:eT 6-VpL:Ww3|+j`l941mg~;H]12;'b<|dYתY$#h{Fm11܌ak0e RbfDvS9=W,S)D{]{6 qEF?.iT@,RߤcV͎ihY2ab=G_J1H/lmSch)#eW2W?\$)RV2Hr =jGDtxR䊸d|Msgj[zUyׅǤF;&)6=Ͳ3| L*J _U(R/%< ~@LWt:L&(BaG&yAǴ: _/n_ˡo:L<f  rڃM: k3ۍ'Z`"9KZ4"i.".7Qz%2?l F&?ν0 Q@wcVZNJơ"z<VPAD`YqÝ]豺\ 騂Zv2 p FᲿemHȊhOeFP F!]i9! C._)X8/:ݙle1_K0^3J2(Jȉ*A+0"GP =4[9ABd#s*g^v^(4U%J\.iA25;Z B<߻3Dȓz,п: e6TJi%7(g5Uٻct R&4{-|WXc~5p $@,OL!8ܷ!v%@.^v*,x#2\y1.\X a;R-g s\{.Jd9)]> 'b:o;ՋQ:o4\Pa;>r# 5P<[,1b\TKn+$^KAG˂}2kUˠ!@mH *%9"_"E]\ɥvE^>KHb3i'҃$TjT 54`ZrRTq xY|@ Y#h(mݜJ,EOe Ipu3W\-= `)*L ?;,mNS`T}у2p}Q%6VΌ?bwIơH.昫ShoPQ /u\*r^iBMsu o<=P-SR}0P( 3`G4BAHv .ma6펒Zܳbko9.?-S!Ec?5w;V0 b@$zoe-i7TZCwɰ+ڋ a_fRX+OHkY`" ]8˧ЭW )\«d_(+xQ~AWUdfFQۏ\y.L|xm/5xEf!vB]z'Εp@QguqstDc.I&upV,8bOsAyK/#΂!U35s ܭw-m}XQ,Z8f ΅G8L+ բ΢yGrŞ SPĥ Z.D?:f"9hTj%GBG>D{%<\K92"!c?ȫ)Ek9Cn#)T@`QC*Warwj{$gw@0#CUlf%jT ,K֊ʺ` s[:?͕s'WKM:}:jͿ[ݚU1&Л?<w#ܷ='?(>ǜge pirԬҟـ.TVRʺoU]^u5a\~( 7]K?ikG6-$v F.6LΛ6W+[a:be%ۧ~$%2*snl ?[sՕ@l] @;{C-Rohu?~1o~ CVſ=o,<zF )?839IсtDjrtVfG-,`D7d;ɠ7@Aae>f ঱O+ [ke9dSkwf">.{w?4z|c퍧{[ s/}90C".۶Fi-mD^NЎs!mS dnHK ~ŷ憅KJt%{kӕ%[KT jfYZDGax6%Ikj0U )Yre iF+6fke}}v$ձjh!~_bS2_VLog#S2fs'4iO )RU?qϩo{nSC20#K4<1~)n#K-`c|GݲaLXbSiidᧉdK¦6]o3R%(M&v.B/c681HY#4 a\ᠫsnt|OL*..V +_{@aY8 fQ4z~XmAph)$$0 N9DnS 1!ߕa$w|L$q$.RwJMeNrHpC?K.P~@BmzMK?R.|f jcM(p3\7{)6\8~Zs o9d6,!{~ip[ m *eJ5JD FRZ7a̱,oi.{ef?v^b,[Ρz95M*1Xٝx3BM;-|TZ2mڈZ:(0 ~6b}YjQio*tN(;-Q;V!zMM{?B$M˜%& *J_8GEcގ5"y{趽 ;c#o#)p.L8鿩,ɋ5|,ycƘ}d 8ռ~c˼Oi浗̷@ΊJ=4y=vRysO?O!?:Eb%j/ 뗄btm FFK̩h}|ӊ;QeV'ɭ?Fȡ@- mI6PX? TͿEA|$kx1#9K=P eK*b{bo%t_()1V{qP8{X}JOEE*9;t;7HoUt&Pc†IH}\n{rinVxquÜGWNbd'o9`Tp+"Iƃ1^@.Wjlz!XuFSx( ēdii:/6Nnݤr]@b.(X^FDbve XBw` 0I8ڣf"݂BFPrhYD~sceC {?tD@TE||<5^UʋbBp\>V qz\` 쬍IN=msa_Y-@ ED/{e9hye Z5Q:ʭvu١ѹKWQLӢ#nY Uu6^f(kPp#󳩨aWED^,oRYNOL,uw `EV}"ERdtjyIL@l61]mvPMёiylK)k2/zIKh  FC}r_c/éVj~=; U> ͞;b^b=AvQ~9r36ZPOnui)8.GziB>+=qTD1xr92I%jθ7L,m~iJעC_܇ٵ3zva/@pzC)Ug9bQ p { I+F͐iُUx5Y VmN4၀qDȔOLΈR=C=e64\C H1$ {}:mjnnekBw23:;oɤ $vSƁ}E鰚YЌ61*^U\k޿U\z^03&`[!ˀ֖hx=6ĥp(qJFbN[yC>C0@0(Z._6 _q3,^06oOҊ %p BTg|f9jµ.;!/9>Xh<ӻ# ? :i{=|anۊܪ-ҶȎy8;rppJN5C=S 3>uшh@T%99yUa{&q-!HڦJֵri5Du&ҡΡFe[P k&;wST6ka_P2~B cqO )?ipcSQfi GOr&&d(i.{W&ߤV,2i FAuڕW3ulãǁi֙]n&Y iu߫" I$ čD1Ab]|pA(l65۲]>$8&jj RJ6vp;Wj܉2_k@k,l?N4Twd'!틢 _\傐 #9/׌r-\0`dd [+##{lu( :1)Fvhfh'DO! -YOBG /ġ_pZ~_Є/&9I^'f,#OKC2Ec ")!@4up1u:]$PRfR^ᥣhQk>lOk%Y%4l ŚѬ bח F q)zW/D0$c#TFZS1yv˕ȯSȉ:L+Ėm!su#ԧwiɫ#;ϐٵH׌=]0X$,®t/1*Z[QӊߓA-2N%^kէtb6ҕmQv)˷]4UqBa~QLX൨(IzCQ'-1"~|@LqH?j1C=k/9/ `KNڎnTGL > id( R@@_AaLHDjijV98n;/д.@vwqGZZ$rq>[aD8i}UJ%$nE-;eѨ[6DL$:/۲{4` U e/n+K g(W T2ba)'_O|Cg6 4wyh8b4[v<ʁ!mPY aizU3HP`uz%:zMk4p(qN_#JȬߝBiyZ"uC` 1 nQ"+IDDX q!'5N/wG˭F{Bxv*dQY meGUA@P&|M.M$fblUfrW934ysPl? dO/S1j].}E;UDTGY{/U066_jpEM*}嘩aoTQBni3;e jx%f Q,5~ ~"IۺL7&}f=묢n*ЕZ :WAЛ1jH;7ELa% [5rSmtlt(qMwYj>\ 2ڎp6B޽@JLnSQpC8HQ)䢒V) )m `kDv|9> *XKЍҰNxzmPHu7\kwt- Gf`5 7ɻ}չ&nSg(ܘ`K^SGϝ1!Joc}q{D}Y*̺l@>k(wcb@\%0{U-1叓jM\6'&w6>lReTҤqb9݊[ӐBLu|X{Xĩkj+uC-S4RR&[D C ?FUPZqC>]i7q̭"YjLGVw%;sTV ֜W('G5'y{\g@Hl=N6Oy*1R ߄۫⚐Vy6$L/ɻp g@tNy:4{`wX=UQ%aL&![ ÊzJֹoaIx6{.Q@o^˳jyŷK6L3\!:=T;OgH_ ƎXmzHxsDp bTfYxYrw{,Gt+/ ?Xyd&5:OHU+$_>5#? X6.q-r WDK^Tc>.[u9dMݜm!֭\ޣrpz(:i$]Ki khg[＊Q*]iW}?O:h-9'\ Xb+Rp>J%?-ÙI%9Ζђyt6Eh3?uF>Y/h/dFEfezH$ u< i'nz+0. cC:su: D^'r-B~-egIr_Mo ~-B-:nβ 2HOjřޮ0#Z|wZ:$1[Rc7u01[ C kٸoUDprwĠE-2hs i,|I4笺sBꅥ>@y1·Q!4Sȕ[췿+?"lAY BgSǦC}3KX(✭%- _ahx[!aI,C=ecf]JyL1cI{[Bdj (}<-rVr/Ñvc0RJmKcTw@#g ZOPpV#)ZLkݙbuꎟ9oV GIȫKp|leT3&/fHHDZ,r3)D~Nʼn0")ڈ[n?$#R]'Р̢xi = *#[KIDcGJt o9ɄʈiV=CR@a%)/i\1碨bߤ,6.)7Hp"2" Z۸dC{J Pvf PSaoZb 43@Kt{K'*SAa@7o^E~G(d;:*\Cy0B"D> {}EyyEEKw7odLs@>[ 4ی(-۸Vvxyʫ9R#ɐבu[o'MY&qS\FC)cQb}~]e ')'*6= q0ӵ=Ry<tPv# nx<'^}#%<+X#K)H_ZK_+# Q|^5}$@jQ)Mw"eY0b|GBk\.;\Y(o $B*~ ablǏpϳPج ;Ί&jVn,S2i)ĿGczeng$x$Qrrbb&U:=Dr)r` pXȂCn| wbwS ^H.NZvRO }?|\'æ!Ua{C%*$ 0\OMF.m>|#@~ۤ#u;KJG^^ab,@p )/ j!EL90I+FkMȈ:%1_&2ItK(k`1%0KY<3*N=a% Enm;|d'OjZr 71SџI U1vik:8M[ Ƕ`A]2W7y22+I.@ fX\X\$;(x_`XQ,ڞV7Ӑm mJʀs4y8#n=:-~,a-!$>eKfdc1r ^ ?ZgUo`imdֆ U$,݊H4=.7u.j J= IHpZN6ܰuRUnq.]ZWiwC7%{ݣ7IE2pN~"RsMJoZqpiz W.ŚCĬ7izl{ݵ;(SRBkYyc4raBn! :[22 ]lKVwm $Qj8O'? 6Хд4IAMls!Ab/W~wm ]KMRcۂvț V(=ֱuOvi5ЏnV mP5yCA#@[=fl%p5Ejg(گڨk.M ;'+AT}~9vq[-\ySqGnTtF(AfkCv.t"+BzFОhΝ9mݥY |Xxl'ۊ*;\Dъ_Ĩa\=֔q=Vi%ނqѱFic$l8.N|="XT.@x#N?d~ܼ/0[3u~e|]$DU1Su/HoTϓѵoNCT@7S1}FV}(pxMZRТÀY6J[4qN[urhHV mDu;fi.jD?fۊ> ăF SI&?N<dM,ڇCRU(`s:iMTpb5[]˧E,Lk)$]n BY-15t/g`6difUU6"@$;10k_(su#{;H#1g<0s! 'I}jP,nٝnlEmT@DitfIC[kC;UYzh==fNUĆV /(fO-86 _kٛZJk7f_;$}Oq.6 PgSLKqF9ǣ61(2^h$c+ eWD"89Px깿RzVye+|VFb)KZ`R]"l^Gkv-A4YUkU-k`Ge@cJ'EZ4UշcMfp0QL0 _%;'{p'Ax0Ub+>1n|sqsI"dpT8\~ꠀj`@0A5l iH_݀%*B ?WONݏ_te6v<'J};.Y E+X$aaھ] HM`8' C: Nw5EDhLDMC F-&Л(C'65 e2 1EWeٌxhN%=]^g]UF2([tAlh XB#mb..ڇؐio0m >>HA\]y$Sh9븝̖<;j&cɚ*Y9$&Qȩ/^(Cn@F9ztsb_kecSETO1f@Br%Zɺ_GK1- iy7wxJ*xw O;{j xX=ק5 Lwuѳ7 P:fFEy 7ł$6J6@YggWd \ۏO#{ftHR0ރ"UW{i+{(UqdG4m-=l~L}?A1- @=zM~ΔD/У ݓQT 7,yeژ"le49b,:QXpdfB1C_H2Ee Ce P8?O}vKޜBI$SJE.(8 (IXW9dL2z9wE3#eī\3(c #}y–Ɲ ũt_17M ̍"%(l״>݈ZJڪ(ϷE81켽15E3>=(֝r݃| wtˣ25ga@Q'VxT 9dUVLXGL_f*1bXrBHڳJFpdBl!J f+S{m<\WWtl4>:8ZsRBy5^ Q *`\{Q.H=C6 _*vn*/w>eڔcːwМS0|hSg SեFw!2%[ueV_?SPJ捕 - h[nf2նDJ ":<ΓB[UA"nƍKݬWeŀsNQn4uQ1'JdrZ[*Ts8c(y sl]`>:`z:; uf7w;ؕyo *+u1RQɾ'm"羷&d%q, 2 1P(q\>Ȳ£8!#d8 f9BNQ@ɣݧhiѨ-jY;.wp(N]crMRt6w4`mWy\%(.neWEzHCGgmvNj ^i3-x _h.*{|m4nNĵcf?f Ob6lF=3{dd$G*q|͔Gr|F+dfFy!ɢeq~'p8e4j*fy*VȃQno٫1Y7-Y%ɑɝ9|}̓2Ojtv?&R'%M_Yخ@dh9!0ϕyӉ:I%4jbRq4Oj=VS}Zܫh|&ָ`CyЊgXYg\|?3F7<_}`5BOR W0xV"VA.ywG#ne,UONY {tfy)'j|%2?lSy۴ {aqӢD[FGh^:o:C *q| ?.53"2MwUc:gD8{}SҒ q9>bPOj`Q$0AI!KٜDTr ɳSz]ĉ:MqU,;S*]YzߊA"w'BUTQS?-F^I5eZe^db5G%dԪ=GgeBY&sx|Bl7|*ENDfoRY$-{yDTX犌s>J'OM=N":ꟙ\O(V{e%WzfΝ(K+J6VG+~5Pcp7J^H*&Sg2_Pɮ%?aJ#J \h:uG{F`D{D1bklH+žR!.)ա Wl7ǐ<H 8GuIqP/\=&՗E?!_l_n,Пh(6;\Z']c`csf8Nk.p{>"gAs\.J UB " x[3Q6FD7#cz~RLss$\^OH SQBM@8n[:Ʌן #)E{`mZ; w8¶4RyN nԀ GqŒ0yU(])PvRp5}`P{}_hb Z7JdQpg; 6\;&Bw;C8/1tqurx%&SQiW[@+K'<1ߐ*))s~>f[ڭ?DJߙbz ̟SMv{r'\>WOU Љ˻%!ViMXUXEyqn2MghDH4[UmUgI ݾYN*~o;" 䂹4Iih5!6xa##m =rڰK2{f,FR!  !QIV2>n$ $)iM u&Zz=ѣ]M l5CF<Q?C4z7~2 }.Gxێ'tpnKE_{4:Β}[ @` l*,Voo cUy+d Dh )L!+-p:7{*4d&GeͪN'G~gS8XZܙgboH 1c4~n}9y]t04|tӸ}WiE l>i^5)-qc)?˄'A5?U1q6tXMʖn+GCoci -PNBE|~$wm>_ꉓyFK [^ܚ?a$ΟQ=QNLQg"/u?8@UO"}ڪEwRUX'-uW!.'BwF&?vDZ *N+-:eY?dU6\!쉪EVȫAJ}~}[Av&!)a-qP9!ςkO.V/-'J6YGԧ5bZK[ÜLR>tLye:M<:|LNY]޳ցZ/q%)(Mvz4ksY&$[(療r2L `yA._.1I8wSfws1h5X`r)JsKX_ $A'9r9g?=)KH'}#tPi׹p6|ȱMCC]Uwj;ʘU'? i?.)w!pq F%%. 6TxBpVAp;J"NQ_@AF`1ĭ?#Q E)eh3>Gt7`8~H]39V ,p&QX~xR}?* 5֩{՗acumS~S*Ye4)^E,>3*[e^Mp&1pa"I`X_V!(G84#,ɚ(?]YDIBL(!c !I3hd9a w 4)VԭϦ&Fk{q 0,iO|C%:;> Wõ)X0/V<߂Dz_X=䚑{Kj-*aV"D:vۅ/$t!HϞn4e^zZEZ~DSf+wJtW&t;Cewq2h?"a_aU$D}˩S0oֲob<ybT3W^yf'Ͳ9y( I!@[pkئ2E͢ԌrlXe6RҪ6P(j6EDS< gYEG'ݵ={ #(QFh_Gݵ}^WM ډXFHO%??(û~xmeVUF 4RL=(i=śO* wd|O/Δ`L_UA"~zs ^Ct0,%\䷠̞(5_,V c{`3A1l2xNXt `0a2mTPLMH3ds[zʛ im>+-]Yo .tQ}C!.;[;'ΡD>s+ѥ`HT煠0|y8c܏ɾ%xݼ7E阰bt@Bdi?dm9k.7͎\4N?#qVŎd&K!])^NctMгéR;Ty/+B@X{kVO 4c28Nl_s3qkxao2q2B!~&=/_ m}<U_7MlSDIեIbxٞv)o9a=$Ȏ}1Zx՛ eF s6CruC{T8ZM DzＺtTZ04Z-oHͥ q@~e[eĕŚXs~p)V 1bڒs]Д9&51CAp( qng bzD %ֹqs OnΓ]nC״=SڿThWB(<扂Uٺߞ-ʹʥZZV?5[] Gɞ(eS$4Y۲K0H#{9hi3rzP3认) vaH*J9=6_.i9 ܹ_QFi(Auo%F/y#xuUePۆFh6*"w%N7nP$ pFئ$ " `컧^*ǝ" o DT<47 ck{ĭONkJڛ~7nO2ʗPC/bѱЕ|,l_nDzƒ䔍޺—uj~1t~}gz7bd@juB{q9<^oN܂|m9O2K&3(Oe`BN֯c׵:/_FEꀁ4ԮlfXqHta /ӈeOg+O"Z2Vw@17na2mχ}! %n%xOC-7Nx..M#2SI<~(GEyXjIhݓK׃wiJc?ZծG3ܝj׼i!Z)OZ{s/I #晞n . !l6)mye;f@2St)KI%_J'9[Ze6p4VκHeYtt lci'LmHH|ЉĜŭßL>2Ž;:gJnp&B/E&HwAP]eW.CvļwQ0d38j CKp)X %N]Fx=٥{JCW2.\rK×I]Cy& b =O烆.b=eYSTw&AgC/c$@5J1i@6Upu`N9]fq^ib Q_n,@9sf*)cC#q!Z?C9$1(P#wIH5.,O Ktu8 nK6bpκy1ߓqgq-d]7ĖxbZjܩ5&3VP$07%;mq7\&hOlzsӼGo/Uu/az**ք+b4 c8@ָвĠ $$wT+6ʡ]wJXkLR--ϗi 䕽mݡ=OLJ':QW  0ʠߙUԚ|EF|tŒr3h~TT$~{R~CS^Qp4nQ>VS&ĈY .y74+բIYmj2⣭)ZY=H8-!ӗ*bqv[fezs4/ܳH0@l1уp>c bIņ`#xd_iDNLμ*hsډ@9>I/`-=+>lre[@#hW 2X\>qƖ$x5Tܽǀpl~MM1 |t(!4L;"d\Hk_;J,ZpElxSt*I|vORL:"ͣP9biml^Q'Ni|DpG}I!;u>U[jmVڤN[Mji5FLo9mWt^WP3{& 0I9 U< 2D , hZiggfGoc,B]gm|:w VbLޟ?˴k O\v7Zy]nDS7mE^ۙ"p"ޚʷz"}[0$x!`7+6nE11 {B/IBZ} _x_Z0{GgbCۣ2dD0)vډ߉]w29j@t^V?enݙCT t&@]~YnJ@(gffj%0"o?Y* \WDrJ-'iOB3PiɘF`>_y2Ɓuء<]z. -ʧ7e/utSP|ǒ^>wL3u,]>_WQ K-;JO50u αTW2k+6|]sȅM&BR6ޤ15IQ誨.YKDJ'ץLIZ.nu" M?/FvҖ>OC~ Rwr 4^ "6HIaC5=C8P!4$ _'Ձ3P= HH6^i[7tX% U!I OtAؽ#µNި8s@0Yĥ?iK44&("-_=ej ^@lX[gnmPͺ7;j[>/`J-rJh&o]-Z4F,G]6e~ԆW \%);DoBL765qkA(jp\`)~>_.??>#p7+43PY+b Va2IwA`I~Z,dڭ8-0跽>V \vJ`N` G~Ӱ\8+ K6{۱Mni(G%?j| R  DZ !NI&XBrL -5SdFpy ?E0-YADjhd%tNH5PM6.B$_gn\k$p(+6?A8@CC1)X5h,U[c)6M'X' Mcz2_h]\?6WvƯ3"+ӿ*f\Hm}vqx`yG@QN56Z)wMpM]XQ0uƼ=RUyZ|csnmT jՇFwAH< IX"$:©ޙ ԭ"RnrZ)SĻ0uR$ c 2)ki 0![ a)'ǽ}wHO}Zi'0s̒8 X{`錄(~f+IɫCC쌽{+ыXb"r.dЯLGzhtCƦ҇I>Lq.7 u#Q3rˀ'9d9QnpKu(;dEm)+F[ۦq^tOwa#3go52X~Eqm6yr^\@Re${3^M˧ XV*eə%c6Dsq2u ^uWkWU'+dҕOv!>v)QH{ipHm0#xsJ|Jk#S }]>(}  "'Iys4(撙!={rOF٥{텍DO0itO6R 8<Nʵ] Gv8\C]*On\RD"1}4 8\WƦv-"HuzmW^ f 4[*z%I5Ɂ#K>W@}ľ\?v*.)hvcX߿r 6︔Te/xJ8YkS#ͿjI"}}y(̓d/ӭLxk %y+:s ,QR ]W՞Uݍ&Z7:G,ʹR>sD|t(K"jJRI^f\xfHp]EN)8*>xٗ ֧ *%Q0̮p0E#^ez+bBwI])TR!98#6RUCm4jQ|izX|`ee>Hjl:f)RCMt_o&ToF#[ow58ˀqL1BQ'K dήkm*+.Yd;y{Xv}~9CMNVrt)f uEe}Bqu [̸BOxwIyu/2`˓D[qWY1ۜF;}HkZgR%Ջ@I/Qh"/ qX")S %>\Įe'PB"' W3/S4򩼔2ĤU]VȪ\l:j 2$!~A 0>oTAf>;}L %:$ 3Oc(V'pQy-=Ġ15ǣ8g {f! bӼd}ժ ex.D.s%>HHsF܂ںq0۵wSΑXЃRα}J#ҋB9ĝ"3A<{ufF){g V3vKE"uLCoy-<0^m]EsVQkodӈGk"euTE^32Mcwiv+b?^j $e0}}VʗIa.VSL #@[j FcsiYWBAʦr U3TaS \xegРY&{:"?DG( 2Tڔ ᢔB ңnR~0e!â/a mG !kz8"W lrf~=+ t6!WWi b evfF1%yg,Juq k7`6gzz&!3iNً>s5(Kƞ3P(K5){c֟i` Pu8}m+EPn<@Z6IK 8wS$U]Jb`bgu.+\J"Br8Z~0퇈O+_ƾo%_6 qguJ*2{ϵ/ԁ!A/Y3gDk_TZzg!zM\[_-BR{,I{9 %gj W_*F3|{/.:m,^v-,GS`8!QN#yLKV6n}ݏDm؊V$ 4hmU7 `jg:|Fx\ӳG R_G$2vW&B֯P_D! ~WN#~5}r[+ db< P65o2_G`SKVq3x`x7I:h zb1y]05q:g6wRQuni4 e)-oUG5p*#Qm;BGQg]+U[ !į~> l`ܔJw149Xn DR-aҤТչ| n&4t菫kD[tYI 7Z#,Db% NJ>'?j˞WNVv^@T=w0*@U?W:oNI C yRnUQ|dP,ac`l@i+=ې4V~ %̤+ <oFpsVг1on mu1R_<䎮B.G1},RZ/ز-.tϾd:v Һ9fLCR2'XV)v}zzԥZ4A[;$&fב``uZ +p /x[j>BɆ.ƛgVa8] h^2h/ߖ }B:[,t{2⺾nZQ*V;l!3^"R@¾J:V-l"bUYڮ2hh/>v?hɳ \~d9KIIU[ ^Êu‡d`R@TV.~0(6 DR:nRY3PK85TkFs8^tT#3[[ <~(r7yfUj=˱Hxu8>&lhKkشO_yဢAD~yJ?L!^Bҗ_jȿ䰨`@&k$Tb,VK,=^212IK/1!ifbȤQ+E˹۔ɾ/WͦbVGP< rt_{*A'SP<m֧UkLh]1 U:%ʱw))mqڑ{qs ?H|7\7٨`tbJ(Ki%HXʯO?lkX7 Ek|+FeݺFV1!DF4KkvG1%&4To1o:DY F*;Og,C^^JA xUG,7$\H´h>Md60F{l!2Zu@_k쵉Jz h/lqqj{IdsSX)2ZsWqW\U[FvJjFA-ؼKPk oqP Ro(ž`-׽7(aUay1*Xqisj~MnMKÎW'jHe %%M0C'iawo= NT+[ #mAهe*g$CFw`ޮ_]lh ߥ#ͱ ; :,"PSL2x`hF.j^ 4kZzdyL?ۭٯLDזv֙>F9\8_ġf 0ݛ K`nN$~ qj4aT?q &s*߯ﭸ6iuق @z3rVh-2s d8̳0M% W?ӰfL{(GOu{T ZX6'dl@JqId@+V@(`4@ڕ)X >b҃Ԝ]/6TD|UD؈MHb‘QOR gxA@[M-` 6Lӫ<3% !&O)qqkV\$La=0\G T胼&JT6c#[J8EH2;^cpa LB;/(tfF8 1/H櫌<|YI @be]e bO1pjTΣIeV+cWCv@}^?uIaf3*}qYPlck=pJQ"AʮXU !.^kG6I)&N 3Sm88A˱ vfge`-ck{d)m`~wshPǙt)8N|LMT#`+1ҿAo2e(\2_5$7ԛ"mlx9((Eh3ƀbFe$K`WBg7-;㮯t/H|>LZ;HJ>X˅d!'sbAo2؆Aۮ!/(PE^%j?"Rw;J`-fG6KK7UJ̀u\guW*͒\}ikCZMTbqW7V+ =BkYIǡl@aAꮮzf-xF"c2'>%n(DGl%Qu[crL ;<[ eTˎ(౷pp)S;Hh92Y9QD_xQU8gV3f-mՕ ia_Gh=j,~TOk|rn^5rM67U6>U`9AtqD Z^p*q}ɣK z¯!d̈9~uCtRNpEAdgs2e8;,Uѵ[zEy'f0lz[Mxb"=˔.ٷ$Uɜ܏NKIrC)!-غ9XHv,XV kh짝s#.ǚkO^7C=VڭH5"Le-f؉b[7VeD$1:]WmZ$”oضWYYަ4PDi܄UW5j )FK=uT X51/*gme{9p@D+Sk6o@둵Py B4Q݁6kӉx{aF)B8.m·m Aĩ.>r/k#*Dgy!VtgI2h QYZe"!# +r{vK w:-eFENAfpx ƌy%sߎnX 0J "X8+!?;?H9D?1|Ѡw'}ls\`9=c@1ׯ{6c\]NHU\ 3>Lqz Mٛģo.s!*IH55_ru1nHᩃ(3&ba8=-|^R4#/߭2'+ ~a}C-VGft|(:m`ġ/1f/R@,Oku{VzBBPGy(,d*)>x?2rd8B/e\c@$[99GA& oH %{.?TxWGX|R @z}m @U7 ,7@۱;w/as&['' .[LaFmdT.1NMJ6ń3(8,twf!)d"$yV͞s̚5nGw{ /Ņ i*t`CUԲӓDb v{8wo~aJaXd%,D w4,Vk]"Ҽ:G:T@;#8+JlGH˷ڞ"v#ݨcE߂.@YtbE ljgxQ\B|T9{mߠz^㈉O\(3[ey}םhwO:-x/ πV(-]vҊg ٱz߆%c>%TfÏ~eԍr)1#Wn4P4D>?#?b$OU˘uviTޠH_A"?)SƊw"uvs@)%0T c~v {HE7l;H۱GOmݚE>Yl{:4JL‹B۱}r.eKB@)w Q" ^A.J"V+0=NcKV(3&< /AgRj봉SeN~i\J,őCGעW&E](T?~v(r),G<*!Tݗ; l{>D' W ZPS_"MDC>3$0scu/:[ZZE^Ԧ@7!"pXįD.\+\<:V_M9aeL=I=c]vStjlنDuqS[Zr7̆ P>fgDÌ,dk_XA2=Pins3¦ }dFT]ATdJ %(wOJfQjxzD픠wwٲ10MPw2ۛs]'0>-Iպwwx޽tt: ܃; ŷ ȧac5Őʇ!Xڼ1K|dP^58!X&bsΘ & I 0KiIz$n]#~^x=mQ;a0QBh"'~I}lÀJmiOvG;%e]/aHKpTw/tץl]F_xgC#O#融8!ۙ~eP/q":& paϔj*À:m&IBBllf%vO +03} , UShs;%]͸_1lxFdKMgDh!o?) [8x00VZoHj C+P#O]2`ڤW.I좾x֖K :R>ե{4UK,JG de)G[3GƧPL "Kf8T&R>TҚ +Fv+.Tn_J+k8w*-ڇg$1'ݱi5Ft)IqdP`prWWH 6 -I3$o>ВN*"Yi-Ȇ_#aI<1iyfr+d%z1~~R|'I5TqȃK2Sr(%j.QrX o_P`'X$CDG)i4!!f$}).'֚7#وfURyp?+ m(9IKNʕx%"}x-[4 š?K .o}~72`0ǻ' [e:/ yfڸzđkL('cT I|5MơX)hU6X/hE?vtf־z199a<"e:tXrү'](=bgLN8 uW{a'+5 ~s~у)%24bI 6Θ2[@"+b[uIyY$j0 M7VPP3w?6!6ZI ",fK:b)#֕'׮YƋ/[&5OdAC Se9NlBVI9 :asK2 iPaDw6)⯯*e:,\M)Ic(3@' O >o̻"~c k'+3aw$ŌݫS-OO#1bopߧ r/Wpsr·-cQ +XKqmlCs̈p0 jb~< ȖG8EI=~̅M;kd,f76CSn]w`L(5<{t"Q`|dX8,mH*X@.aJhvy@FGָR iT*§~M))g7Ъ8Dvܿ27Ocyr{[T oԭj}{YWhtO'U)6I0Vg|x2e +j~]P, sK瘿mKYOS#-3j@j(zyo2@,FP#uBgm̳F9 n!o4|O8GiT Qwj H?;u"FV1ؽoj(&~=h5KQkH XE/[DHq:P|iګ,mh|6)5:)[ܒr9()ԊM 7̯b( ҬdYAFNZW"7QKP~`r|zUqpyӨYؤ?lc4`%e1_xX Ӯ =`ZH%pޟLn-8y]3)$g=HQAEi5>\+8 ɜidlԎ =F>GUPy?sHx O,bKi"uf+g@-ev[ p.rJ6ݙg<_A({wzFDF8._Kt< C\0SFdf_Zpߚmt IN֝xc"(^M V+EKtI787vYrZս F">L&k9s{sY7-qf@V5LfMjy2PDM?Q!=:u3 ڠ ݕ%H*Bd_d@yJ5Ap6-.de*#ѓ#6=([ ;?]f_#됷{s] D+6@kak2y/RGsNb `:(4;;% ,SQz#賥kpbuk`ΊPPuEC6FVݵnˣ5}||f1o;K^=14}׀d$&3h=dx5zn!ޱ2ַAv_SJ!><@O@UG_tԠ|b J @#ä1R1{Jߩ0pq=AcP!gUۅ[oԅH :I+P?!P, $vȅp@mLҢz`b4gK̜6!}VKܿ 06M4vDY$6i+cٷp]*FR}aBD#+X4HÌ!BgGTZt>(^8VZoJ@>d3ڪ{K?1GZ82ҽ2m)@sqsbe$J#NQ##+A-׷qk8ZGů_2l{sB߃UpxS]?=^,8@B`;b\I̓0gܼ^]~ȅ'?ȺH:'_kKFq~tU!εr8{,;<|f^a{1{mt6¨{eOe;wC#0+ْPQD2D !,V7pހ[U2G?)ثr/^hA*D8*}{eϋl搄0u\DAVޞ͋oq)F"IBn ?\%Bbh r8C :3Lޛ6dz'\Ug@Ku)KhuEfFQOZj`[U6ݦf1=^۠OsT Z$PC$Ŗ [,fn4sD+ ?yp>gSrI&vH?_͎pw^S5u0[LUgw,bDܲ%:,PeHĚuSUDD8]턶.s;S^)W1Q@5˹0hU %TŋugX2&a^O(Ke;Ǫ2$+ 2"&8vgCȟR΂%RpǗk],ex)N QJ)H煬sI43AH]Q$OEּopG`mu8$l ^ [z]*eG ϐ25 ftiaeū\~u/.O^2524"'uDPs'm @07ɠ4=nvj,v1W*/pPX{Z$zpj#k.+6y&gChzDw;HU$j:%7Y+.>e/ *hsG&"pD{,N? m4,o{qLKK(H"{ bPM8jԥNGh(~}4Nx^,XTQ~w՝7ī^Saz=CG%p4m5`\80b͌n053W6\GSc՛VXsP7z{os7`ZAz-t[}9A*H 4p(ωKv~rG˞o(mI/uӁv[8,C/(qT=adle;u$w7f4VbO2B96B?F* N =Κfa-s|N??la%I9nh8;t99:Q|OrpՀޯ}CvZ.^`fr| m/` d[p)$=k7ݡgZƝŬ OT 89wݪQ{#6D VZ& "֩v,k hD3"'̛\)6zoq.3"z?Оf_x|ϲg~ lzÞ:J(&jtM$nqۦ&pLL^&6O[/R?2fͮZ w ^t ڠ^tu& Y^En37Hu=7Iwob3 %6c5ŢfY6S廡ύ'E'n5~ۍXl\D?s_Z> RryCԼ+:D<[Pul+RW c|$kHHD+rIv.كCӅwbY]zL)$bZ%f`8mft4 pOh:u^C@52Z[a)jm Tor @s҂\Pԧ?;d9۰P( T#oEk V"ޯ82gA9`7Is* R&\\ăn?0P#d*Iq4H Um64V]mRŴ&"zV Rc*?u . o "iL|&C9r,J#&X{ <4Y^QY QVU=l;"P臕pX?`Z )~ȕZoY,wpr.#ٝH:kM~ D@qgwgX&p`3[Q3|*:F<8s u 492 |^fl3_3hýPn 3vZ6;@KW(.Gnl=˪T\4󀚪}o2=ЈF*l0ӄ.0ÇW(Cv۽ό5MFNkߦ*3ZP7n+_jiF#i`F  XJNv !,iFkgut|V}Vyf,%!ё:x`5m ]U Dex+I '"9֡PM= Hwn %PDUӋ/ozԽz0^/R'̆gl ȀpI!drN=SJTgMi(`hK~>ɻ8b9L蔨wP;~<ȾYA|V\GaDwVbih8 H@f\aj4tRBދy.ZWm#`n=o.n!Ŧ)#heBVߥ%⼺ ͌:Sn+hG Sf}wvg{hȆO {b: Q1;ʹS>C5j!A8+1cَOOƗEet]E{ӷ̚Ăn:x"SNKi ssXg$i[71IDmJ揯R92URQE}k]uL_6SQ.LTZ|K7S& ]Ŋq 譻"ʹ7'E%. !NDɮACv@Օ@JoMPr^KEC_̞F\s6%ILݜ?9LP!K?q>y4d?ykeY (dIdF"[2HJ{J6|cb +?anJw`MVjC#%du ")aq1Xeʐ1-I*ol }&3U uxIy70J*ʿCWc-NK&}:\g?6Wk)Ƈwm" X#qqH*4}9hpS5+n|k OM=ok=kL~?!;ɦ >8b*osd"N2lWd@؟LUYuv3ηt89gliG69 _5s"ߏ% mڈaqR-2~Zif/F aQVJ< ݀؃_9239  /rֵcOVh) K G7=oٰAv\3=ˉEc"c^[zaee+=#gܪ[\QFm6@w*IsuXwaid #NР(DhMdm ZkaxX-$ G֥ZeUH1N rc@$INuVmi˽g=DY3+Td!xת#ir=F{ qՅG=r4S˜X!ѷQ"C!zWs-%ꓶ4;گY7F j&WbX(۝y˾ R})HL<$K$kRC*OP6hf㫸ˢv j6>je@}<ݓCr宻N/  tfe'.=BQ& ,( ޿{(bk]uTs}AGMZh`:["v-㋸vj7 &tH%QC9eZ&Ft͙X+E7#B1|OLÜP#ظҦZ~wb{R{` SAyεҶeyiR3T)4gPc qq7e  *@PX UjD|U 69\SxdEX#yMV wJ0t?K-VN65wyhlVKEU Թ֚h@@MGGwpWb%w4*YZ֓2R87,wJb׀>iwk{;J&Q'zWcHo?8Gs N@'pY)־QnfoAsbEN-~B|=/!humf/[ȭJS2ZeO }g ?(~n7_ƁaE5B{ʆ[ny|%!F8@ :0 b~#w$ xAN8Xw4a^`0 d RŁ{@O-cK 8{s ʸ(YےoϒQ#}y:^]Bsk~ue(6 S^0uf d=^G !Tp'w<3阓XU'-Fk'%8H)D.{6?]RPCMjaccF- Wy:l+FQٔNȦI|\l@IBևgT9 hF-ty=|6 4Έ7VܢKîBH]dbxd3{]}u kV$xhBRl έsh`-XN6Vx%!G ~KA˰I d`B=q}PN8S%+c)&=T%HZk˵÷Y gՁ`4KwsBl.< #.iĝ66qDA^yŵ)vQ{h@쉗i u3RKM>k? 휸hӺL|7&&L/bgIÆ>۹ qmm,V\d/L@Q ))PJQŤp:{v&g t, 0 b IcH*1o@9堿^NcQSrAfÀ4 9:+GH/]~)2A})QZ1&ƺNatbt`ށ*#͹R{t7N2Tbq1uf,w< YNX|7O oWGdYs~\$RU`wI+F 7NhYjYh}aD_`fXX-ݠ|ɽ䊴Qp]?j2+êNzݲ8]oPuB6Ȃս|Ǜ/rk:yȪa4V:DAC&=Jj;`$rCԫD%kN +]4Vn]ϐ\Q׆E[nG]ma%<~{Byfnd[Ytr)A0vJ*v͎%s) q%4*]>!=Q6DXg :Yt xiY2/ם9V]%^m@{{m:Ty*L!eٚS[eH;C'=bOE^S?CkԚ*g`ZDcx1E$$z+`6+@jtGƔBd4`0 (7нb%i+CEb~2$6k_KF [.ak\ATrٸK"G 3.]=T)m3@:L1*;N|V''lO<6a߉7 ,'Q="*>ң||kOْ%XXZHA7(E솠Ccm~X22I#J]qOog/_ɒA {ھő/8:e]׀Fs_MHY:Dh 5Pt'dX;2 瀯m4:D }A uS,s>T-~Km0lTG3>q`UƵ1iHvY, :9w $Hh'n;zs30> r co!H}6["W C\]}uJ_ݕ֛d4~tD0ҷ'Qzd?FŪ_`.\bm|d1\B"wh#!桰$kP ;nf^rђ Du+Kiq>س] tPe'E:|J+]71¼g0Ӂzê0OdBcpMގ)+uvqNߋxŧTEߢr>Sy2[:u࣑u+ľe}&PsF'=^VxNfDUW> D:M3ۇ7EpԼ+[sJ vO_}m6` |2﮾EQEqRؒ6{Xi*$:rJGZ*#" +E-M͔:?|Ѱ~` ;+OH]҃?ɚ4S桸O-ަJBF {ngcx% >j >Я.*HL-]EtNU8$pjME/jV u̿ͣY!s~E8H717M]82 4\uPi~):F0>_֎uNkޔhj0؉^m_-4GJPUs[,XV K+!gזierIMrkh8g1.;? ]_UI^AϠXt ϧ u v6oR//R6ʦ_73, /peq B7bܦCDYukwmf@l]WV#H FmKrMVLN؍\V})Jn&;+M'q_}9]e1Kk;xlt@Պx&@ '2"JLfFkҋ=р˽g?) n}^ ڜ$0`Bl!ˣ,̟^rxVXMtg`&5#Ut1NjmQ&;X|m}9,'iLoTrFa"_ymocmj|3kj<M'kY [J;`8|?$5ϼg\k@Yh(qՐ(`U<hg+K4s#A* hY1yVjD&5S=KNUyᆢ3E{`y o>(ò\|2HG(;-J5ew:W!=t[3~Njf\DKbE±LfB "~JGu:'؄H(ū)2%N g`I ~̚8 1" .;I;= 7[| UxG22vMA27  XAF!ǫ.[T#iN 7͹owDT~gvUY}ڭ̇Q|(U_%B 0)NA"vwNZd_HPd|]Ju\f[7IZr˃rah"h0FBR'/DbN\3F- :@2 _`xf;su7a=DgT]FG}ZXgMpҀ#5lأ2+C7OfDεP=GJ =<@jKїQ%ƭH vJ-EK4L +Cc5EȖlI'OYƿ/#AePLf {0/L*>?y) ۰+Knhˇ`殊f~FR/{[Fm $FtZ7/]y:PYT +dPU`}Ǝo< e@(YWNƠHCUA8J G-y4Qb]S{<s)aap"*y}/ġ'&,|:O;> 4H2XF)N #V+AY.Q]''&7WH&)KB[H#6 A=Jzxxc2Pԙ{zu{+,ͺ+Dg ]cRegPUunW8&i{iM Awz 0 *`I&L=E*[eT^r=e)BO[ g|p^veS;D<~żZµK`{rgh;T͎͗L4~/_b(dz%e/D :[|$=yF5G)5-U;K="hOŁS MADw]0ZJհ,g,̄\:\14!IwLsVO9Gaӣ`p>Wqߑbp"-B=HE֘3e lODz{9-|%-5[7t_WY4T`! g&mEo8]vh#fxNnj*ԔLn8A y6/R+z-r28$Nü|WSfi'Li~%/ @&|u79cgRed^FUUᩆGί3G_eA=5/&OYjb{1._:=B#m^`)L5 0W5Ŷdʉv3ܥ#g.J+-bdPԑ[CBR"jH;z}me[/3ɾbGs0,Al[p#_W9 sRCx\Y5%&WLK`hmX/Һٵo]P:ٍyLgJ5e>mSy\! kH v/0~?d/-7O4e/ȨE͠y^LlzI ,:%4<$3Q#rKg-|7xHzaخutf˰l{ȵB_F&T+`^.bKOÖNȥmu2r(/6xX ipUolۋCz]wA,EI# smvճ@9~\XzO] e}MVlbo(և=DREۈPMayr'AjB#NF͖%SK *cΑ_;$ѷo=/:ҢUBw}ڞť$Q&ٖap8=^&<뺋A?J4zȨe5o :gQuo\ɠ V {=pl\s0g&'\Օ_KvsD!#o$آ徴?c)ޯu:'h71R2,=;aȬoTGdТS*"3_ؽRBO-=w433=C3Eӥ '~ol5(*~ݷh9$ Y UNwf@EVmOQwCt. MZ1D/Xॸ{'MQ K"qStz49;kXϊ M*٤}<>숽:i?j3x?Zҋއ/G>&"BU;ޕ_v;f^;I=jQvpk;!qV/Όw@lZJd2P5*ٛ$?OwUPZU;ɾ9އx{AzO7N`!l&rA2".j7Nu(=Rļ,sگ2oޜ'b-KȄ~S:qJsxw:Sl ٪*u7GrU 1豙+Mu`#'2)飓vˠC9PH3YFΊ IyJL].ңazs_@ͮMԒO+z^礇^<lgwsUn<Ԟ':Bv k}9Ar2R FRи=_G{[z=%= r9+{'1sSD=myO} jGuh4ow"+CFADsz1;@QI-@`!k V/`YDã1-fjRoDrwSeCO®= ܍k\`۟s3 *Sv5%h=SeNW ^ GP~`΀ qh"}7#VP>ބe>όG/>P2tOߟ(A)2imF햜OhF%;4( Y*NV[(Ik\?-P<{`~kȥ6nRI)2&7!zg{_}/?"f.yG/Ou&5̾t̄ Dv"f7BWQp SMڀ.܁_8n0%1q5d^Q{@!,E h8ЋuxnDq"[c>}Q;qb|bM늈s.B2V#-C#Ŏc84 |T˷$h/AQTQBacȫbj(U5~Op%9Wئ@Jk  4acH$UA8F*}6tkAN^3kH!.h\{u"rydzԒI$U rTŌ7U8:܆TXS/dezdd}:sv€a{5tp׬W#(E W5mHP+eOֈm-nBhUESz-\_QTd?`8pTlx)J{w8(ksos'RᣮS* dwwldD8'G<7'PDx,֘tb$}!x̥'_; )k?lɵr Rts}N7zD52<S 8'infQXpD) h syU_A7Ykn5Nj]|X<Rf:6Kvkrz;ڪsK|/o Ӆ%t噒0" uNK}khL8'U{^`+eDz>} z1EH@ 'u54ݿǿf$OC(+ZjJ:jNQ80aٜ;]^x`˖OvNu(!-?Fg9 a%+&0iu.x*p5=!k'FXr.'qohmIqj/!c8=%0Ś]~O<`HV*6'jJdc&]SGh5D,Uwgӆ+9w655v@ݽʇ7˪ͱ a=tRkU8Zd;ӝ+RZTrX~U/mY| ͇r_S{̆;]f!M 3P礭)kt6[4:$b#my,p س(yx_0cj{0*0 7̏l̿!Ρ;vcn̍TaeDmzirhn~꬏UHA~9 PMyM5'C2"eKe PwW3QBx K(E Bkh q B nܢu:}'^Uٚorg&m2U,f͕EG@θ j7TKTMcbR9h߳Qv 8g;m–§xs>1P^?k)?9SR r" Im=/sT DCw:BeԒH(lQzH]r:<5T#tH.-᜼)A{r!}Z[ʄh;_BMT,jDDNժ˕mY nSM/#Jlsp3'se`p0 sk9^1%aޏ,OR#V&Q2-|ӧ+!8\}5`v`:mot.XPŽ 15mJgHLGj; b;rP\7}yo_bHF i߶rty^%_ 3_,Ww+ b)fzr[+oT1QD0"m[r=CRε,!ܠn6[qqݡ Z2ڄ]CwȝxN,h k[存@wrTp sNekw' \||Qn}^#&JNsk{zQz P}fՂSۻUx[.mdP5>'{{KnZʶ(w(NJxBn+1xll^TQIc΀} T_?^SBg+6?bheH0_+@ :: 4 2>99a0ӗQf ã@kBSd2oRNA 쀛Z.1ѡE$'4OuKYy5M8iwHw}؏' ;kA9+p AC&fN|J8W3g8}dzx7gQb X? lJ> Ag]k3x+PjP>EWzS1$:GxNqQR+tud$ Uژ`xpQx2I<2/ԍIø^>93Pz-0zT>X&ghu5xꝖ n>xw —q\ȏah ;=&G_R=tҷĉDs3KRQ ?ή$x~l3u Vt{g}Ζo_)Q Cn[&]F Is\ 3U`z_gc eO:BɒԨ_"/`~O;ebLal:5{]"ꘁ@wnlTD} j%e?MRyt%[r 2}?!Ad1>LNZ=&Iyi< o7E@㤁[.YAggi!KZIe+O,"qڭ(KLAH25U!ndFtK vitAgtA!2Hp5؜(b ]I29 o4o׻gюkɤuTs͙xa(FuQHU| |1=bIj? Ǣً/>Xof3]XJDKOD8<ÄNҋii=6럃*yĭfv&5I[+eܨtˇzdh6vyEN\w%T$)Ԃaӏ*9 g^HthOy8 枩FoGk7WF~K7zoVDƾzsWrգލ7~gk= x PId?(`6$㳨OR[Kn9Z3QeC~#HH;i%#b;Lkd.0Ns ׆7ݟ:X`N# k] څWb;,ɶ'QN@$W5^A%5EUUbqH .wI<k__b 0]]A|hnͰZ`k۬36{w0 :ӵNY,zշ@J9h%%6= qV&9f$4AiXT{#|)p_>X퀂 پZnX\/xIsŗAZB I;RV Uó}4]wER=%9ON@~"D4}Ovw=iY z|IVΤ`voaq1*z\z7ͽ;>:if(Z_MQՄU䋚:} kGgхY ?i^ީ"C.]q-DZp*2γTUq3Z[3E=Z޴mWW7&q?:`H$+tniq* ̍9m ʇ" HDUΜUC1~ˢBH?Íhԡ'"൉bHX΀m5=+t `N5RbLKEhO$N':>($!~m6̸.T> D47Nt]~B "%Bj!1 mbkD?Do`!n$:q`wmү|[ f +eFWX%"dNN6jZ'kjux΋SmXvi^1UkwђǤ%} 9?֘줵tcFA3^g .=zKۚY%JdY!cU{5CBg.MN#MLi&ۗ0ײqzz@%3+WYTluo)|\>%}ѡr%Y`}@K'H3Ņ9Ad|NHGtBp\D7<Ɩ.l]]8dvZJNlzġ0]j1H&]Nb+XS6WM/)rw'ŗ ^>*c.^D^b3a “A$DBrĥ0(Ѿ\H%d 'ark@ (b!8`cO{*ϮS`i !׾s& ^g@mᓊE`eVGYg9b:MQ]xFSbvV#'Kzʅԩ(_?Z0pAd8)Ipyxuő!#pQi?J I&jÇ:+%s,YBGmʁ[ݻYO^) (i53IG KU4u1``yR78hخGL=dE3Q=j1 z%C}yˬj8{ UbƄ :nkVH̢.8x֝w f| |Dmnfo8'aE,Njd_ٙvtGὣ̓41 C䤶C\2%Q3/35]H]}3JDv\ߒ SYq}&RY oAԥ/E흀N?~=eg贯 "vr[KÞ;Cx]TdF` _]1pF J،@-@D?zKw;qe_×G?pT5ԚZLEl|'c /E?wӋ$܈z~QӃxV=s[ !Ɲ0S!2<2 NйwL$`:Z80e#lHk8qacų Ai{:qm2ƫSjTAg!r9?+7:Z&.oXOXumΖL ?͊qgYlϦ`Y{N=a^XWAh _<0(/hfW.AZݠ/MDx[q \N@GUNBLI&C5lGfrxChv̭ÆUB<=aO$dJF!\XiPEruOF/a\P@vaȨ1 j܀պ&'P'l0aٔs9'":Th!'x"/(9tP^R:"5eTNt{jDA +rKuU1V #$e`q) i=Ԗ/[S۰~<lu1PC2}{(wDsTv UnؒMD=QqLh_o$P[WV!IlhWphW(X~kfR3Bsbq%}s tƀhvJ3U9}J(?CsK\i`E'ROLK 2"K I a~ OKû"u\PWRhԬM#IfzL/dw)XGʖf*0r ba.Kfb1M{ 8EG*U;ܐv^^;O+nu9>;4I}*4XT\EZ9g7mW@o0Rlf+ 30ծJVh W 9+,)s4(B$L۹D![44|*;566-nI|.y+`}^oW.V9`0bHe-gLi񑥖7ͱ "OoBt[w&O<>A!:-%*裙]!O>x}6/E:Q/X?&?…mULtR7ĆJR6Si[g_{q;ʃv!uRr~+|M8˅#36i )Ŷݎޛ4qcOԑ]zPp2Cq(|}_:`KomE$SՇэ: XNݥ 6m5IФZyMe-J[Z HR[ 0~(ZO hr#4x9ĖeyoBHn\bq `Zә^ PQD֖MAD63#R֜)2-SƏc#n{i;Ic;h4ӸR1`?8RV#G_\`E(%Pqn]uYN %xrI -"I?&>f]aᾹkU̓WwK:@:H9Zz B>EdhlL="׀ǭ±< >QFBOsfM_eJY5͓VarQ)NuDr[}%3pc}iP {Zw܁D(PH`0KAQkO^9pJU>X<CiC ltQ~h%lϢDǂ>m?Q*%S:,#EEfuGZĄfKJUh&|gHHԫ1y-Ke(iam6WvYKPEydơb|vٺ%*}т&-5Pڒr\;ʶ} yN՜|cƷ/ @@`Zgᇜ2 2?s-lECXC+ ۷I|>fqZ8`W:'*[$ }r2=i~}]a+ w>MS1 !{6Ys&AwFkYM LZԧ~ 9:ᣊ<_SUy` #4Wgelc{"l nvX ,F̶TɭkĩRl E抄|nd}y%l"c˥It:s >&3!AZH6h 8=1D~I9o@ؖ@AFPAa>-ΞJvm7^vN5KQ7̯@@Q G3.Q?GWoP|̆} d.sա3 G: N+{!-/o< [U&ղ\$B@Pfm+-4eo31E RsxQJi Trcaj7t=/.Dؐ_A'DY t%X5 Sv՟|O`=Cy pP>ӊp>y̥9KiYD4Vk$¼M;Lb&$4Z6p3Ȋj57rw BĎTO 0v=tr"6u܎rrlZsmaʼn`a\`Qm#y<ܭFC-{&dƫV' 5pu^7[~ nY3Zp*'>|0uePؼ4GҰO Z>eop"˴&Wlӛ%Y$bio8^4t"rPnxAP Z}vP.\hX9x 5e4Hnj '/vT*vG8_ ؜UU?&flLbI .H-~okH']Wr;6Ǘ70O:GY\ cй?w'Ȟ3A?{ +XjrݓԨ 5J:@AapO@oKa+Fcyƌ-]yO1IX՞ΩV^CN)>h̯*/8frF_#ۺ*w 81E]?V^0#)iYX2ovf>!:Yni5p vmΥhwt;Z|w;q^1Ȫ{0V Vn43uShTZ{6#^2"c_w@r2\߁-+^MƇ4Q[a/$*\}(0zGec%؉_曑LGn2lBľ}eWI ̝Zx+O>Գ?"<#9-l2VI ]6Z﹀֝{_vqog"TX}Y7JkH𒵞<Han}"OEA =oj H*Y]O@5͚Y(H*J`RˎZIwA㷔ԚNf `ν*vQkd6&@ؒ՚ /N3a0i##"Ph~kw:%5{%<䨇(Y4]<+XEo# rLzЎFYL`T7nϡ1bm;^afwE)DzX2Y⮢ltΫfl8"̋p vzN~q2v&inYw:!K$66YNx__!N=γ)~_*`#dc#+K{= ӍRk˸qnsh I/ow#i6:t(N ` V4衑 Y-=XdgJb%1f:=G1ӐG U J+7jdCd>§c>6h.e_[u̺7 ,%s=T?;0!BP)zhYd;kBh+:c8Wu>NeќT~4 ,\Ok| 9@;"9t yڔ6n->|@'u]hGȝ1MM; `Kl.,[xlO P*|)Oy5nq3*GSͰ +#_l^y/o}%Go*/zG :G%gcّEJt7f e-yaЀ{6d8#sŻ i.zTB`#PP n=4yS],Ve$x挷V>_eEXTke] `> S( /̵I[4O%@%)& ^6~;\{UI/&"3w/CM֋3ҙƋ98Im]ƍ {. 0l'qF[ceva/0@#PDuJ" 7-KAo:0Z)#$=KS( 3h]wm@9A!nƪS: ,]rM(_`u.hȻeܸtm b q&Z+ ''Ze5rmښG ;SK:e?\S j8x*)UPwC*Jߒ;,` {j`nrQ},jL}5п@ '~03սjty6bČ(:{h.on.s@!qHEaomXYgc}c}QǟW3gw%} $;o NfX 4šmG B+`g9k4]mn}c8K-;B jEi׆x!~΂cI|]"7`&*vf{e~$#:PiP0M&~ إowD7Q zU) w6L>GNR9Jډurh5HfeQ5W# bs8xIH):}Ͻ,Iۅ\sݫٲR'I,R Ŀ`U>ѡG o(?Wc#$ G_5j̓8_ݥsڀ|?dP7سH"_x`?*@`0KߢҌ~d YGZ"eZu{3&Wbi X~ ^AiM9`$6h:I>*~dk5gH4FӅ`YdfT2,}E ak 3I Wִ!җn ztF^FuA)̕ˬ@X~It k[u 񀛆6buE{,K4ٚnr_p5z9tX᪎LRA\'65!,đl>aK<| ѿ P%>U"j[G\xdAfQ5)$L;Yx=Z1rLQ);+B`dGz`V}>a+s7 >6343\=+햝,;4ݍUpg9hN6+uj%!ɛ,r@$Y=yV=uLSt;:q=3;wjm9;t=}> s2T@HQa~ZK'RUm"Tެ ?|η3v뛿F])"/^e>tB+Ix/0Xq9$bEixA$$m~0 2ŶV%&d:нmuPlv Ȩ&q`yI9燾ؓr1˭)B^-!f ɘ`w'JN)cq?3V*o/ɾ_'yf8Gw!O3<;SVA0%OQ9OPFE7zu9C\X5&,?NΥ\`A bXe˱{6̢x?Sy%ŔDbj^cgQԥʰy"aIiDd|'žti[lȞWF6+|g뚠noQE}[BxM;O#ʏθnaVlKNUTJX2@ȑXi 1$JP(~ڤk37z8 LYOܞ Q>[Ć`(V*pjgI5W,r'Ae<ì z9d(ss@dsc&y)!ty1W x4?@нED) cN $kGb.Q ̒1ɀ9wq`|ߦO&D![*s)gO\uwRݕuS1 چ30@qR|g+Nw(/Q=CHsa’X--H18q*5gOfh1Ko4_[S(FLˬ}]NX EQSb,"5Nf200ngR7J>C加Xrh㇂oIOĔ"2zŌB 8Y0 z.ƕ%qݢTI樭.b[;WJ3Ź?UJ9+]@|r;$'^*t%T b~ Jwa?{*Ejo%"oF=7®nmt'֟US-(L",x[iy/5羱nv<@WR*FZwš}iYMj֎5Ct~RO_>6oB3Bl܎>%7 E hzsaֈN]u(v( *ʲ`v˛hQI@:h}M  +2;bZYKN?>"E_K%8X'*c%F4PmIx>9At-dK6R$vwN@ůI\}޿DIoāP.u<󍳢@N$w68K6q@0ʸʫ ȣ AV|"(35B hԳP3;"BG`ؙoڎDa=}dc>t2:/!l1|*Ф9QA 99*" C?@&*C4¤VѦ9uEdK;_>RƬ0Ց3CCpQ2ՇByMh s*J ~ͪ#]hUjk_*Jo =NP=B{ǔXfk\h\iJ/ |?5*7q׸sJ^6h[>"#钨BcB\u^Q3*[+͕bMl T;|R3G>DŽ^V0 sxФ3F1t@Jru<#}=pW둜L:oFTORLcet#c?sMC~6;Q|-)8ݜ]v|;B 9EL?˘ѭdI~S>7Zm OQ;VA~蘹sY@.O*MV>\u޲4Gb]m_}!*hY>mG<^Gv.>z̵t0**)aL~EtkpAF4 @޵J'h֑qrRڦ<D[ 1c~ =[P jXr8HO?7j سGMkqw/ 2;LHhb v. tA5ȍƒ\y8c BH/E:Eb-H3cyJZ 7x ;(_z~jŰX?͢9^G%2P.x/L]nՖx)vilB+jlZg~ϻcRUv-m!.nrR^.oߑ0A~ Pf%lT\VE6d @A8C&P =vn``eOuH̕b \z`p 5,En#L <$Ci,O@%|P.0PbZ*N<}ܢ ^ ,X JiM.?~mi:a:XR|8u68 u9S{P 7(_{/Hz/Llo3CܐV{ñ񎂹)%CS- >irKܝr#̯3~8&hUxi0P.t?;Wp9FM6⯗'#ace3`S6UbKDLf_h] iU2- ws` 2WwNquOir F:pUY50CUړ>}Pf7,.#Wzǣ>D؉{e!Ty:t-Nl>/':[9FRݽS G=kr%B#O4O9OMU!K.agJw^&u{,Y#!8/T@O\|ӥr#g9P#eǫ0Pm`IJn,XCul^_]wE\$Ҋ\4CԞaUXY w[J u <-QcU7mTZF0eW*9ːqJMam$F"x/,O8zǴUV\$3QUPڣ<tR6eF'_]LSFY'a"`78˖uQWa}B?$!W%wC7IخdfoGb1".)ʔ͊Sٛ_iq;wvke$g:Ы$ZbNb3_p$l0ׅpஈу9;$v|V84:%xT"'hVdvT$>]ElBFwa$E}6NBܟk \{Q$\2q58ykI "J9Ka".yاku9# 2Ù0%BWa8oO [uq}8#ɋs 1nqB6GW?4Xĭ!JygE7)gDJHQY\n|hn·Lӭ IZJj/mO8&MMW/Eʿݘ_ l0BfGygc8'TJFZ*q1n!'6'1^T"!ᕊH(B-߂T'5#ߵ9 hI+zΎ4@@BL\ +ڽy eߓB 7@u_u3MtÈ(_+΍nّb GӇD5(A'"㮘gF5 U?ev~IʢnK+p{[u$W.P.kůz=% Ëy1>é6Vgš"iSRWv2m_ڈEWyǟg}vc8S C-!lm)[3n#uZ:]Mv/mؤPvlya|UbvWN&V~KqV]1@OiV="[,K +s1TL@`~0ŁKBT֗<9{(IMFOZ bv1"wᘄgMFս9?A9"bR;4h"v}VRRpMmаT /dj~/6U_o#x%AGIDS'}AQK@QTGQ՗ŜôΫ =((ON(k1@Y:s)t%RSSbНzO\ I}AwkcjT縨˦ i)K_SI ^Ғg=7j)8`7[p& L<#ѱ Ed.K& t٥H 2Z0*ĕT}v0bR#M@vhPp`!z$EIus@6V_gpb\ _y_Nn'>3w~I tkd>+cu1IY4.[sCX*w9潟D@k6Is /kЋ(dɚI^)SԔ {4}`Й~m*CDB=c3n~Pw}}/u{3[zj7%oH kH5DUTh՚P$gqgZ\AɹWhoNX0ޕa-ClYYhاȅ/s6-w{m StU/t8 +7=Èj͂Y$A$4mQ=ԭﻐeU_Y泇6: l9 Y\%ue& m.r/ Q+E%MlYUZ!q 8!k ҟ #z[Ah/L9vaܭ֔Ls"h@4ighEg5o[-&?6C~^R'Lg?y.oB-<bj5JGj<޹xˠxxx JEIM%v¨nQ$ˮQl: Җ:Z)w"V߁1|n Wz/cƌAmtU@c#[ĊtSWͫ6b|6jWb i#i]/"~ݠ=N龰[tm_۩81l).:mHݪGp^¦aw8eJ*I c Z㯎rv,O=5ipp\Ԡ}G~&#m,0#};` fۣﵣ /E5_\))Mʠ.e-v¬v%huSxӘKrI-hʴ0)~WY_8YAyX 1x$QK8_:) YG^DFcl(.J JNy>a )_VO&Yl|~Kɗ=1+ Y',6l=C~V:C:>?rƕEoFJ?$\!2f:(2s:-.7uƀ[@ɛ@q .ꪟXv3X;h h߁K5k(H TzAi`lU'@UVj`[ZCvaV[$' hzL&;/@gPH$caS $idוdždrqCShC1r$Zs"a4ZʙS JO0]T|è:՘!R/258Xx2] nVѡŹ0,622O Ol)laM]2,1U7$.isX<g^FwKYW#=:ܥQXO{ ȋm6bwiM&ٳʣGXۂz K> s)+z[PDů푨 p(k-)P.+x)'dW'tT&5ܨ9))#{r8[ ;kb+$) "K1C Cw׹f*rө@ _қM#A ,o<ᜳ*.0խ6'Bޣ*ٷ'!;f|W2IoU$ k:Q43H㞮L\xzJJ<4 ,-TMMXUQy&Gd&AW7feiY'v@ g)=`G♘ 򉃡r+$gan Y!Ƶ`g6aL=i#j%s[.ҮJ6 tY=CR"\;8!GpuF2?͆PGu5ݎ{r9Si9"G[`SB'V7q}~|C3,)z{z. 9ef;~@8ʋis!u*A$MFr>z|FQZcCͥTH;)?l;d{SC CVwVϢ"40$\-]hV}$]iWTXgoU;Y|IE;ӧ"Te~F[O!1g[DE?[/õ@lFJߋs#8RްIk*fp" 3(;Sb(lo'(,S;&9VSLb)i K&Mr#Xum#\7^& ] 5ҮcqdS\U?\\qC RQC]~$EFf^6yR+9Q3ГG<WAxh]\lKK¾Wd7p=䶫H-P`eOTyժ]=`ZoH(,hnLcDzLeBd3MHhHj#M;oK-$և<p\.{U%ޏ8?9n2P܊`/4,D{W~ڹ cWLWUl~Ѷ38=n:ܳ{\?tT$ 5/GIXl0ZFjs ڕjc"[Z m@B.޳x-FFs,#0WT]9yLݕ_٤DY 8e>Dql*BċU \sDjh?+h(vX}šm1lw8Aμ(_zUxg}oRO$К91u5 +4Aj!PTdt;KCHi)4Z3L 9oset{CU k_ NL(./@tLݧ s^H"шNfaԁtKeUX 9X ^]h5!Rai9bV40|k{c0647wr =UH`H(r hLd7Ʈ>aaj搜n!VL6ZyXL@)U}uHZvu;u1Zc 9غOI?w?Riu;u'B5})k ,#lpxj&E3Q:=ͻx u8iz"U)vC>LQ5㙺z0E8sxyQ3n!'8Kj '!Lm͎aXJ@ȋΠQsQ2mE:{j7U1CgnIV&Ew۽M*Sh3-?_;k8jÒh}~#31 o( N BXKXo*3[˰3T~,'22&Fqkrxٖ$!gt( x4jK31=>c(hP5+niHOxrA ڙ/' ˯HKp-?hQpt`#VKM)L9NU(;,˓I }&,Hq2%x?mk@6CkO (+/} &։F}11] b ;~lG2%$س=\H|hs)K 6wt2{cojWFuʛȏ~xDh(V{7',iQs_!NF5V_JuTi}Pٟ2\Dśo&3u gSLh0rLP?S>uD(*7R9삵as SBM#Rq$@@ ُ)b\M'6>(|.Mpary{z>5/v9LsAQtl$ r@nMOqozfKE#Bn2@um4 #Bn.EPl^j%ցw+[4cw Z弃X[^yV\!=J$-y?·<􂽤!sz`EwO댥(LS,nHҞ-B:mwnK[L^nQRˆD x .}8[̽وV.VWhW-A|-- \.[.<۟"ƆK}N"(: Vܫmd8&%|~N5]a*XevF-vV~=YuqrZk'f_̘B}X}c{ %GX_ygsbP?[3C=PN qj[u É5}9*c}8w̪3W11m^aUΛcO*ח\"")=Rw+Q+Qkߨ.)df&6: Ѝ GWFC2(5Cu9 /Eǎ"& 9tl2>}}"DC‰qZ"73]% l@= V`AW:9aPT2&/CAiq3t.& W>1qM/sVj@ӗؼIKtoP4͗c3O{Go8ļOٹ;_Ff՝i$L|IH`8J2ʋ`ph8KTJ!;7-F(L?E&:(9zo(L||Tʃ+:1l/x~>gc[츴KgFU#("X^f2ժz/S-9~pkxάm5^eɨ TH:R%"fɊ/N^/ }% 4JAk.ca+Xu%C\R Ry%I[HjX;ubTޫcldǹY[vWڳ$񗿄؉BY,KCw[f9 %t֟>镗a7tzCj; ɰgG3ޑ2$qh\VP*L |q/Dj:,_Dr0?CSfI+jH?%jxdDh,Po, |*T܂˟&3:КF%zQjw=t ԘsyG 8b|(^N;Wިxvr| gIk b>2 l#ԁEZn<۹qVyhi%M@O&sV)Y*Byynoe%l1"74mda;=w<}n y)',P7MUK&~iH;DqJe!6/{*-]}V!jءӽ]ެI 6>U^ZWvwTDJ#ay;ltϼ,26.M9ƈ?Ib6_̨_