From eea752c603044e9cd6b590c51414a976d0c30e8c Mon Sep 17 00:00:00 2001 From: Marty Hernandez Avedon Date: Fri, 5 Jun 2020 17:11:55 -0400 Subject: [PATCH 01/75] added page describing app guard browser extension --- .../md-app-guard-browser-extension.md | 73 +++++++++++++++++++ .../md-app-guard-overview.md | 7 +- 2 files changed, 77 insertions(+), 3 deletions(-) create mode 100644 windows/security/threat-protection/microsoft-defender-application-guard/md-app-guard-browser-extension.md diff --git a/windows/security/threat-protection/microsoft-defender-application-guard/md-app-guard-browser-extension.md b/windows/security/threat-protection/microsoft-defender-application-guard/md-app-guard-browser-extension.md new file mode 100644 index 0000000000..c4dcc0c416 --- /dev/null +++ b/windows/security/threat-protection/microsoft-defender-application-guard/md-app-guard-browser-extension.md @@ -0,0 +1,73 @@ +--- +title: Microsoft Defender Application Guard Extension +description: Learn about the Microsoft Defender Application Guard browser extension for Chrome, and how you can manage it for yourself and your users. +ms.prod: w10 +ms.mktglfcycl: manage +ms.sitesec: library +ms.pagetype: security +ms.localizationpriority: medium +author: martyav +ms.author: v-maave +ms.date: 03/28/2019 +ms.reviewer: +manager: dansimp +ms.custom: asr +--- + +# Microsoft Defender Application Guard Extension + +This article applies to: + +- Windows 10 + +Microsoft Defender Application Guard Extension is a web browser extension that protects your device from advanced attacks, by redirecting untrusted websites to an isolated version of the [Microsoft Edge](https://www.microsoft.com/en-us/edge) browser. If an untrusted website turns out to be malicious, it remains within Application Guard's secure container, keeping your device protected. + +## Supported browsers + +The Microsoft Defender Application Guard Extension is available for [Chrome](https://chrome.google.com/webstore/detail/application-guard-extensi/mfjnknhkkiafjajicegabkbimfhplplj/) and [Firefox](https://addons.mozilla.org/en-US/firefox/addon/application-guard-extension/). It can be installed individually by the user, or deployed across the enterprise by an administrator. + +> [!TIP] +> This extension broadens Microsoft Defender Application Guard support to browsers *other* than Microsoft Edge. +> +> It is not necessary to install any extension on Edge to access Application Guard's protective features, since Application Guard offers [native support](https://docs.microsoft.com/deployedge/microsoft-edge-security-windows-defender-application-guard) to that browser. + +## Prerequisites + +Microsoft Defender Application Guard Extension works with the following editions of Windows 10, version 1803 or later: + +- Windows 10 Professional +- Windows 10 Enterprise +- Windows 10 Education + +Application Guard Extension also requires that the [Application Guard companion app](https://www.microsoft.com/en-gb/p/windows-defender-application-guard-companion/9n8gnlc8z9c8?activetab=pivot:overviewtab) be installed locally. The app enables Application Guard to work with web browsers other than Microsoft Edge. + +## Known issues + +Issue | Mitigation +-|- +Extensions cannot automatically turn on for incognito mode (off by default) | Disable Incognito via policy, by setting **IncognitoModeAvailablity** to **1** +Extensions can be turned off | Use ExtensionSettings policy by setting **Installation_mode** to **force_installed**. +Chrome does not offer url to extensions on cold start | Don’t let users disable background process via policy, by setting **backgroundModeEnabled** to **1**. +If the user's network roams or the network isolation policy changes, an untrusted page may load | If a page attempts to load but is no longer trusted, Application Guard will try to redirect the page and invalidate the cache. However, this issue is only partially mitigated on the backend and leaves browsers open to drive-by attacks under certain circumstances. + + +## Troubleshooting guide + + + +Error message | Cause | Actions +-|-|- +Application Guard undetermined state | The extension was unable to communicate with the companion app during the last information request. | • Install the companion app and reboot
• If the companion app is already installed, reboot and see if that resolves the error
• If you still see the error after rebooting, uninstall and re-install the companion app
• Check for updates in both the Chrome and Microsoft stores +Launch in WDAG failed with a companion communication error | The extension couldn't talk to the companion app, but was able to at the beginning of the session. This can be caused by the companion app being uninstalled while Chrome was running. | • Make sure the companion app is installed
• If the companion app is installed, reboot and see if that resolves the error
• If you still see the error after rebooting, uninstall and re-install the companion app
• Check for updates in both the Chrome and Microsoft stores +Process trust response failed with a companion communication error | The extension couldn't talk to the companion app, but was able to at the beginning of the session. This can be caused by the companion app being uninstalled while Chrome was running.| • Make sure the companion app is installed.
• If the companion app is installed, reboot and see if that resolves the error
• If you still see the error after rebooting, uninstall and re-install the companion app
• Check for updates in both the Chrome and Microsoft stores +ExceptionThrown | An unexpected exception was thrown. | • File a bug
• Retry the operation +Unexpected response while processing trusted state | The extension was able to communicate with the companion app, but the API failed and a failure response code was sent back to the extension. | • File a bug
• Check if Edge is working
• Retry the operation +Main page navigation caught an unexpected error | An unexpected exception was thrown during the main page navigation. | • File a bug
• Retry the operation +Protocol out of sync | The extension and native app cannot communicate with each other. This is likely caused by one being updated without supporting the protocol of the other. | Check for updates in both the Chrome and Microsoft stores +Failed to determine if Application Guard is enabled | The extension was able to communicate with the companion app, but the information request failed in the app. | • Restart Chrome
• Check for updates in both the Chrome and Microsoft stores +Security patch level does not match | Microsoft determined that there was a security issue with either the extension or the companion app, and has issued a mandatory update. | Check for updates in both the Chrome and Microsoft stores + +## Related articles + +- [Microsoft Defender Application Guard overview](md-app-guard-overview.md) +- [Testing scenarios using Microsoft Defender Application Guard in your business or organization](test-scenarios-md-app-guard.md) diff --git a/windows/security/threat-protection/microsoft-defender-application-guard/md-app-guard-overview.md b/windows/security/threat-protection/microsoft-defender-application-guard/md-app-guard-overview.md index 9a278e3b9b..a3ad365834 100644 --- a/windows/security/threat-protection/microsoft-defender-application-guard/md-app-guard-overview.md +++ b/windows/security/threat-protection/microsoft-defender-application-guard/md-app-guard-overview.md @@ -18,7 +18,7 @@ ms.custom: asr **Applies to:** [Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP)](https://go.microsoft.com/fwlink/p/?linkid=2069559) -Microsoft Defender Application Guard (Application Guard) is designed to help prevent old and newly emerging attacks to help keep employees productive. Using our unique hardware isolation approach, our goal is to destroy the playbook that attackers use by making current attack methods obsolete. +Microsoft Defender Application Guard (Application Guard) is designed to help prevent old and newly emerging attacks to help keep employees productive. Using our unique hardware isolation approach, our goal is to destroy the playbook that attackers use by making current attack methods obsolete. ## What is Application Guard and how does it work? @@ -42,10 +42,11 @@ Application Guard has been created to target several types of systems: ## Related articles -|Article |Description | -|------|------------| +|Article | Description | +|--------|-------------| |[System requirements for Microsoft Defender Application Guard](reqs-md-app-guard.md) |Specifies the prerequisites necessary to install and use Application Guard.| |[Prepare and install Microsoft Defender Application Guard](install-md-app-guard.md) |Provides instructions about determining which mode to use, either Standalone or Enterprise-managed, and how to install Application Guard in your organization.| |[Configure the Group Policy settings for Microsoft Defender Application Guard](configure-md-app-guard.md) |Provides info about the available Group Policy and MDM settings.| |[Testing scenarios using Microsoft Defender Application Guard in your business or organization](test-scenarios-md-app-guard.md)|Provides a list of suggested testing scenarios that you can use to test Application Guard in your organization.| +| [Microsoft Defender Application Guard Extension for web browsers](md-app-guard-browser-extension) | Describes the Application Guard extension for Chrome and Firefox, including known issues, and a trouble-shooting guide | |[Frequently asked questions - Microsoft Defender Application Guard](faq-md-app-guard.md)|Provides answers to frequently asked questions about Application Guard features, integration with the Windows operating system, and general configuration.| From c62604fc5f0b8bc3beb469537d5a4bfa35fa7076 Mon Sep 17 00:00:00 2001 From: Marty Hernandez Avedon Date: Fri, 12 Jun 2020 15:24:11 -0400 Subject: [PATCH 02/75] copy edits, improvements --- .../md-app-guard-browser-extension.md | 53 +++++++++---------- 1 file changed, 25 insertions(+), 28 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-application-guard/md-app-guard-browser-extension.md b/windows/security/threat-protection/microsoft-defender-application-guard/md-app-guard-browser-extension.md index c4dcc0c416..1c2700fcec 100644 --- a/windows/security/threat-protection/microsoft-defender-application-guard/md-app-guard-browser-extension.md +++ b/windows/security/threat-protection/microsoft-defender-application-guard/md-app-guard-browser-extension.md @@ -8,7 +8,7 @@ ms.pagetype: security ms.localizationpriority: medium author: martyav ms.author: v-maave -ms.date: 03/28/2019 +ms.date: 06/12/2020 ms.reviewer: manager: dansimp ms.custom: asr @@ -16,56 +16,53 @@ ms.custom: asr # Microsoft Defender Application Guard Extension -This article applies to: +**Applies to:** - Windows 10 Microsoft Defender Application Guard Extension is a web browser extension that protects your device from advanced attacks, by redirecting untrusted websites to an isolated version of the [Microsoft Edge](https://www.microsoft.com/en-us/edge) browser. If an untrusted website turns out to be malicious, it remains within Application Guard's secure container, keeping your device protected. -## Supported browsers - -The Microsoft Defender Application Guard Extension is available for [Chrome](https://chrome.google.com/webstore/detail/application-guard-extensi/mfjnknhkkiafjajicegabkbimfhplplj/) and [Firefox](https://addons.mozilla.org/en-US/firefox/addon/application-guard-extension/). It can be installed individually by the user, or deployed across the enterprise by an administrator. - -> [!TIP] -> This extension broadens Microsoft Defender Application Guard support to browsers *other* than Microsoft Edge. -> -> It is not necessary to install any extension on Edge to access Application Guard's protective features, since Application Guard offers [native support](https://docs.microsoft.com/deployedge/microsoft-edge-security-windows-defender-application-guard) to that browser. - ## Prerequisites -Microsoft Defender Application Guard Extension works with the following editions of Windows 10, version 1803 or later: +Application Guard (the feature, not the browser extension) must be installed and enabled — either locally, in Standalone mode, or as part of an enterprise environment, in Enterprise-managed mode. Application Guard itself has its own set of [requirements](reqs-md-app-guard.md). + +> [!TIP] +> Application Guard offers [native support](https://docs.microsoft.com/deployedge/microsoft-edge-security-windows-defender-application-guard) to Microsoft Edge, so the extension and companion app are not necessary for users running that browser. + +The Microsoft Defender Application Guard Extension works with the following editions of Windows 10, version 1803 or later: - Windows 10 Professional - Windows 10 Enterprise - Windows 10 Education -Application Guard Extension also requires that the [Application Guard companion app](https://www.microsoft.com/en-gb/p/windows-defender-application-guard-companion/9n8gnlc8z9c8?activetab=pivot:overviewtab) be installed locally. The app enables Application Guard to work with web browsers other than Microsoft Edge. +The Microsoft Defender Application Guard Extension is available for [Chrome](https://chrome.google.com/webstore/detail/application-guard-extensi/mfjnknhkkiafjajicegabkbimfhplplj/) and [Firefox](https://addons.mozilla.org/en-US/firefox/addon/application-guard-extension/). It can be deployed across the enterprise by an administrator, or downloaded and installed manually by a user on their own device. + +The extension also requires that the [Application Guard companion app](https://www.microsoft.com/p/windows-defender-application-guard-companion/9n8gnlc8z9c8?activetab=pivot:overviewtab) be installed locally. The app enables Application Guard to work with web browsers other than Microsoft Edge. ## Known issues -Issue | Mitigation --|- -Extensions cannot automatically turn on for incognito mode (off by default) | Disable Incognito via policy, by setting **IncognitoModeAvailablity** to **1** -Extensions can be turned off | Use ExtensionSettings policy by setting **Installation_mode** to **force_installed**. -Chrome does not offer url to extensions on cold start | Don’t let users disable background process via policy, by setting **backgroundModeEnabled** to **1**. -If the user's network roams or the network isolation policy changes, an untrusted page may load | If a page attempts to load but is no longer trusted, Application Guard will try to redirect the page and invalidate the cache. However, this issue is only partially mitigated on the backend and leaves browsers open to drive-by attacks under certain circumstances. - +Issue | Mitigation | Notes +-|-|- +Extensions cannot automatically turn on for private browsing or "Incognito" mode | Disable Incognito via policy, by setting **IncognitoModeAvailablity** to **1** | Chrome and Firefox extensions are turned off by default when running those browsers in Incognito mode. +Extensions can be turned off | Use ExtensionSettings policy by setting **Installation_mode** to **force_installed**. | +Chrome does not offer url to extensions on cold start | Don’t let users disable background process via policy, by setting **backgroundModeEnabled** to **1**. | The cold start issue is caused by a user abruptly exiting Chrome, via the tray icon or task manager, then re-starting the browser. +If the user's network roams or the network isolation policy changes, an untrusted page may load | N/A | Although Application Guard will attempt to redirect the untrusted page and invalidate the cache, under certain circumstances, this issue leaves browsers open to drive-by attacks. ## Troubleshooting guide - + Error message | Cause | Actions -|-|- -Application Guard undetermined state | The extension was unable to communicate with the companion app during the last information request. | • Install the companion app and reboot
• If the companion app is already installed, reboot and see if that resolves the error
• If you still see the error after rebooting, uninstall and re-install the companion app
• Check for updates in both the Chrome and Microsoft stores -Launch in WDAG failed with a companion communication error | The extension couldn't talk to the companion app, but was able to at the beginning of the session. This can be caused by the companion app being uninstalled while Chrome was running. | • Make sure the companion app is installed
• If the companion app is installed, reboot and see if that resolves the error
• If you still see the error after rebooting, uninstall and re-install the companion app
• Check for updates in both the Chrome and Microsoft stores -Process trust response failed with a companion communication error | The extension couldn't talk to the companion app, but was able to at the beginning of the session. This can be caused by the companion app being uninstalled while Chrome was running.| • Make sure the companion app is installed.
• If the companion app is installed, reboot and see if that resolves the error
• If you still see the error after rebooting, uninstall and re-install the companion app
• Check for updates in both the Chrome and Microsoft stores +Application Guard undetermined state | The extension was unable to communicate with the companion app during the last information request. | • Install the [companion app](https://www.microsoft.com/p/windows-defender-application-guard-companion/9n8gnlc8z9c8?activetab=pivot:overviewtab) and reboot
• If the companion app is already installed, reboot and see if that resolves the error
• If you still see the error after rebooting, uninstall and re-install the companion app
• Check for updates in both the Microsoft store and the respective web store for the affected browser (Chrome or Firefox) ExceptionThrown | An unexpected exception was thrown. | • File a bug
• Retry the operation -Unexpected response while processing trusted state | The extension was able to communicate with the companion app, but the API failed and a failure response code was sent back to the extension. | • File a bug
• Check if Edge is working
• Retry the operation +Failed to determine if Application Guard is enabled | The extension was able to communicate with the companion app, but the information request failed in the app. | • Restart the browser
• Check for updates in both the Microsoft store and the respective web store for the affected browser (Chrome or Firefox) +Launch in WDAG failed with a companion communication error | The extension couldn't talk to the companion app, but was able to at the beginning of the session. This can be caused by the companion app being uninstalled while Chrome was running. | • Make sure the companion app is installed
• If the companion app is installed, reboot and see if that resolves the error
• If you still see the error after rebooting, uninstall and re-install the companion app
• Check for updates in both the Microsoft store and the respective web store for the affected browser (Chrome or Firefox) Main page navigation caught an unexpected error | An unexpected exception was thrown during the main page navigation. | • File a bug
• Retry the operation -Protocol out of sync | The extension and native app cannot communicate with each other. This is likely caused by one being updated without supporting the protocol of the other. | Check for updates in both the Chrome and Microsoft stores -Failed to determine if Application Guard is enabled | The extension was able to communicate with the companion app, but the information request failed in the app. | • Restart Chrome
• Check for updates in both the Chrome and Microsoft stores -Security patch level does not match | Microsoft determined that there was a security issue with either the extension or the companion app, and has issued a mandatory update. | Check for updates in both the Chrome and Microsoft stores +Process trust response failed with a companion communication error | The extension couldn't talk to the companion app, but was able to at the beginning of the session. This can be caused by the companion app being uninstalled while Chrome was running.| • Make sure the companion app is installed.
• If the companion app is installed, reboot and see if that resolves the error
• If you still see the error after rebooting, uninstall and re-install the companion app
• Check for updates in both the Microsoft store and the respective web store for the affected browser (Chrome or Firefox) +Protocol out of sync | The extension and native app cannot communicate with each other. This is likely caused by one being updated without supporting the protocol of the other. | Check for updates in both the Microsoft store and the respective web store for the affected browser (Chrome or Firefox) +Security patch level does not match | Microsoft determined that there was a security issue with either the extension or the companion app, and has issued a mandatory update. | Check for updates in both the Microsoft store and the respective web store for the affected browser (Chrome or Firefox) +Unexpected response while processing trusted state | The extension was able to communicate with the companion app, but the API failed and a failure response code was sent back to the extension. | • File a bug
• Check if Edge is working
• Retry the operation ## Related articles From ef1ceba5f831fdd19190d22a6fc74b4db1b19a51 Mon Sep 17 00:00:00 2001 From: Marty Hernandez Avedon Date: Fri, 12 Jun 2020 17:30:31 -0400 Subject: [PATCH 03/75] copy edits, testing scenarios, screenshots --- ...guard-chrome-extension-evaluation-page.png | Bin 0 -> 69414 bytes ...-guard-chrome-extension-launchIng-edge.png | Bin 0 -> 116788 bytes .../md-app-guard-browser-extension.md | 10 +- .../test-scenarios-md-app-guard.md | 90 +++++++++++------- 4 files changed, 59 insertions(+), 41 deletions(-) create mode 100644 windows/security/threat-protection/microsoft-defender-application-guard/images/app-guard-chrome-extension-evaluation-page.png create mode 100644 windows/security/threat-protection/microsoft-defender-application-guard/images/app-guard-chrome-extension-launchIng-edge.png diff --git a/windows/security/threat-protection/microsoft-defender-application-guard/images/app-guard-chrome-extension-evaluation-page.png b/windows/security/threat-protection/microsoft-defender-application-guard/images/app-guard-chrome-extension-evaluation-page.png new file mode 100644 index 0000000000000000000000000000000000000000..4ad77f8a0641b1d454a94e364b7a10f81aca1d6b GIT binary patch literal 69414 zcmX6^19V(n*G?KI)7Wm4#&%<;F&o>O*tXT!W@FoGY}>YzN%GJ8{WELUopsK+NB7)~ z=h-`4K~CZ;B0eGn1jJX#U!qD75Ku4>5MR{bVZkMRD$mT|3$&S#tPli5Z7dSV09*+{ zYV=D<76QV90s_J>2m<02T;z8Q0pZL90dcAi0l}RL0fA$e*`~+~u7EX^mJo&b{O_CF zS&{%QL9qL!;RpeN-2dMXa@e-i7+eVFBq=Kfw~O=@oq)q?eEJ#OBZQ==kc!*t`G%{P z_Ta+x&DMIIj!qptPAg99u8q;0@Nrz+Ejc;#EEIx2^sVrz@~j9V0;;AtLL92*F%h7N zd8p;dM!HFRq3FW%D(fkBBk2bYQxo7DzaD?zRge=&DPsU2+>zTcuKPUs!nb^vbtuEW(k+Q6$ulAT*^i(jR4XCqsnSV)NJ zm<$u3uSJn;B5CH28tQp7lODAfC&weYhmaXX*6R-*{sxi>5GY6*wit>GNK_(E7(rnp zt)W92tNT?lM+7No#-D>ygjuF?T6%`LxC6w*g-uMxR6<3T6cZ04+kaX?4ag5*ik7Ve z_xLmCzqLQr<`W@HsCRi$<9Ht?JimXOYwGCqL$amE$D?n$IewclzxTdkw$n)==JRlP z(s8|>SC+Rs((xUL%R0ZGUp*D z(1Z!u=h%)F6$7dlifdc3=Ge%|tEwm9DB|m*vB0t}>|KfF%vk1iV}FyxjGN`xw%@ ze5I9*j!rFhcglIW42CQE0fUYTZx6r}6%G;+(!M%oc{)Fw73JU6hm;~p)BO_+g zB)`>l_1f0y`RGMTf2|_|b=`69w>KFWlceO9osy+~1jQgdY|kW{Kw#SyP22V2?DH^| z!|ZXdPVBk=?Xu&|7C^{WN>+4i-sz~|M}dj>4~=1f`R7W#@2fRI_ml*0_5f2MB4ZHh zZa)F4F$$e`Hk@&F>>V<3Cg5xMy4M`Z%Y^NxASvo`^87c5vuR~! z6W7EC;(}Nw?r7i|(FV~A{4^6ldugz)A_fvYO{RFP2l-pfZ~`Asq@Yi(eHFriPIZTb z=RtBEcoSzjd8hi1p6;qCbKI7e7J*xHGhaS>MVWFNC1|p~XUVy`kFv?mo{V>k5eZqz zDk`FJzMsHmd+gfVwA@TZ;VMovcRS;$>DuEpZ`gAdTewKmB%7>txmE;pEa@aw?;n+j zo)Wh1e`fneLqiJ_wnv63Nog8@PfN$uQ|?5DB}#eMv(S3MElC-lEE8@%>2Zng=f^YX z?X)l%VPaxXJ=xhfX~%|c%#N#Xg7f1KC9!W5!KW8Nfkf=LKfkVr2|mZ2Kd&qqK3~;Z z_NqKb%m@f4hVU~ufPKfsS@ALyKi|&lHR?^j>bW z42>qyzU)&9j2up6{M?ITh1m4QY}>Rgm8hDXJMoY4wR$HG4JN$S9j=NmZXB9>y)Ma~ z$DcZjF<@vTC~iM5c9@l@twz>pazMM(CQdd%Lkw=KJoryUxiNb2Z?%7T**%S%cd}q2 z)*9b@ACgb)8MrCHBi9 zYTNF_XG_&3fB!}R*P3PuBvA5asHCWc^H3ii9`4VUV(GP-n5>tXnygp){{122(PR(i zBBs5OqQ=iyGqzsEl?Y}klMgHzMWdW`}*verm~ zs6RB8D_c$K1T|k_(b^pTpa0N-WnrZU*914FtdoS zRxK+>ke9-k&r(vZYh(5P4GY+RBk8;@2i_qTer0;lmD#vqOTmaoo zbhZLrP|Wd`R^py|uMl*~`dw^Q7j~R?Nlt$9>483=&Si*j z9nM6&x-Rd#vNJYZAL@NZq2#+{Xo0+-htHj)=E0ihce=Yc>2Rk|IqZrlu zZPYqf+gl>88TCc|V^)h4{HC3|`aZtBM-gylC&=+9rBP-%^h`yiQ8F8fvS%Opkgk;`eov5_D_8pg z1&2)jC(KoHWNPXj6EPHz-O{O9M%vQ(sBWSO==gTg?5d*hxYcraXo`r06fRznn38e_ z9?O`skK0W?2v&vZm*i(H$Vl$%k+%VaTf0WR1AR3o@_t36A1S$Og=v4H@(IDEe0TZf zi0Xc#zX|cJ4s+#s6J8p0ZE99|SowQ#(75bOogRu*iO%AmR_E=Qf1hjLHZ^-qx;xWi zk>LaCvxa>iw7QX)wrA%)*r>(`;QblNCq_R@Z8J-p(lzQs4jN78i$5=6J>L^oJ@dEBBX`WRFhy zJhEC^Sy@y++O{qnG#WqpXr9t!l$+xv6BNXv1X z?d>03BsUi^bZew)XM!_TdXtmeg>xyt+uif!2LII|am(gKG*<7_a6W78&cq*Ms!B`Q zIy#IA5i_fq-#2Uge~fV`ZN*Qj?k5EtUR3CGMzC9P{$V0p7I*RVDi*n$jHc6Qi#o`_ zA2IjCq~|eg;IuWk7|J5QTdU?{@?X|YejpkZ!|_TJW31{OQN5BB$0*FmZ(v)fu|7dO z)qHX$BiC|`o3?PN(C)2sZk%s6L19Nhnqy+Nvshb@8XXJe1X}B~#vjmfC^T~-43w_4 zg!~vwuJ?LynWef$KVNUiPVa12?=s+-xFNr3;xI&jQ^0Mgx8J~5tWm-cy2R9M=0|<4W*xn2@t%4MCh>L2O8l7-Wn%YtM}43 zZ_2Tx6?WzMZ*AF;g&W7uTq#>-Ze3C00?+}lj~1yt-?&C`DJw(UG+YxOevwHoOPAFA+Eh zA+XuD(tE?_T(=V$W-HR^DuqoHbDt8rm)#sgJOaD|Eh*F;IC9e35{Y=4m_4+ERxgzC z=7-_vt=wN8NfaF}_7VkLP#C*51kVs^&Tmq1-EQbXyYV+c$~-quW7 z#ILr8(Vu)raM=fp0-n(eg?P@lN3Ew3u}ZtG<`priv;q(1<-Js=vVu7EW)sNk{;*n` zAh=I2BgzMajMFl`gRvtxx3`sHcMFrKuf7*zgKASH@*76Hw|(MGjmrRhPqeMqS+;zu zk3o`;hUl4+#_R2O0z8jHvzN<-93wkJYTwq6*zuK1v?ze_IXqPTEHwK0N@KEFj!$rN zvh6Sq@jtV!kKb~Hn!{TRohkRhuv%y0x9@ts;UA;@&b@dU#zaF!BOJ6^+cMTOZ_uTj{-3l$#VxCwpEXOaW=)j>t1T9XR`xUv8*5U8ney zcx(SE;Ia)Q5(2C1qGhF(WnNByYjZWhiC19=4X;U>vypo|Kq1it?eu+M&ncAHBTQNDXAxPB z$4tH$8z(1}lav4aqN!ug+S-~s=w`TeCxpOG=gBV@A_+M1fP;;8oMC7$OVG<93$^#t zb=1&C57+20=0^uwTF+sb-oH&r%*_oa>D-BTJi;z9^i2mFrInT4|iO8TXfbG4yMD8m3 zEEiFcCl;6cMO&X?YI45mjG%2__^msN63{hbUo|N1)16xA;UtBLb-u6M_xXo>)-(K3 zDss3JkBGnxkM8rVr48tPj&3Ej(7OM4h?{ zgWa?NoXx(>Ae+ku`o)xpG+<$&ZRpxt)kp)pa z)WYP1Cdxy*tY+_iBwjagbT1FFZqARIu%IObb@9}V#zD~S)#pA>+HYR3J77oK2k#_f z!*nG+6Fhb(!V9marQS|;{oD1KFDPhN?#DxxEv$NjA%U!x-XThC_aM&aRe{%Ir~sM6 z(V5K0PIH+t(bH~0LoTlE@YZvG1^>F+Q{(-Y`0||XSk8^%1_3>}R<$vuPl?vcF*EeG z>z^O@Ak$R|6@~pN;-~DRyoN|%fcQ?)-T($39Z$e-RPjy`TmQ2*nJkv@#YI({t_Kb& zX{qO(r|KfT?k=tv$A9xJmzF=Td1Jdbd<6(Nt$P~iw1@L@bNx1xl6YT_3&_#KW7vg< zVo9cctLd%)$MTT=JCp)cRM#sTob-uG5zIzI#*S&7=ebjNQvx}&v$N~Ms1`IdG%XK{ zS{6W{7`52dW+x;v0KV=jwK6w^7MJVQi$eg!rX|M$9~4PV%oV;N-%^qO&K8`|C56h( zzr>VV281BVVNSOk`*xAc!dGmMZlCUYW%#ezS5T2xd>o$D2NZ7XLSbRGD!EdWVQbRpPjffh&( zZX?ALVutOm?PtY~Za_3}=#n0*7wQk?Zig@A*?&!M_k~0&*rc+CsLA+PVutEut_cBS zL*;4xee-McoAr^9V#qT<6LVE&{J5YYtFJSolm(kc3|vnnZ%P`T^Vq9vI=GF&3{1ADsdYr)4r+JJ6&VQYy+?V|6BDsrI|!_ooZxMvBQ1 z5s2DLNq+x>zTjYC`a@BM@7gG{a*d{~7=Aa`b*ASoBJ^rhA*VOojfj*AyduOmuH(jy3)lY8@fdNBr zb`kkDzmr)034*7oLDwC|T7^WFoT*qJ2mbc#59a318?N7E)utXO*KD|c1|d{eI(}2I zVa!j-dQ1WyEL)X`+Y{x17CC#aIPzDwjTvX&&)%@bCQ8-|dr>b`OL`ySa!?k0E{pAM zC#o!~eP-s`N#Bj`^IT7$I@%0Sw+LCjkl5?`I$(F5-u1GXOWvCuiU}OfVsQJeB5Eg* zUQ%0+{foi1`wHkc*|=k-fTL9uLsU)^eU;n3UqGp;G2!+OWVhbbk$_UBitRb&am6@w z{~pX?Ep6)NtVm{-trsF+UE;H5^*s5^)ms|KB8!RG&(hn3@Qlg(#=SWotMtWhY`vYN z*yI-F<>Coec+T7F?A1E16r!KO)b3wwus;W&;mF{D;h4A~p61)f4oR<* zIXu>dvU+W_y1D<=T1Nc1{kwQx-O_`FBO5^g=hlK+xD&Z7(LJ~&bsrG4(Nc<*I+7} z4?^2*C)n$4ZHppl6j`eCW{99&r4AXuR!1#5nB=1bg??^LJoS&ok4F5-Ep6>6dbe=) z+?s23BF@~36uz*)9$k_0X@ht70Z2|5n4Q32uxli+@2J3FX zedz8iKY)NIncwHS17yt^p>p=!$MXQ|9zZ~zB(}3%-*S(XQ#9*rKMDH&ZqxOr+Uv#U z8V&(Yey7{^nXOAEUfq*N5d}6Agcq{uL#EfhkEdb)KbA2X`w7yZ;}o*W2uyp6DKqAY zUIS&m1UtGtoNnDk4?|&MKjhYt3R^j1Jcl^E-utgR+#R{CoQg5c4a`gXj^M~Q{$dlg zzq4Rj9b}b_I$q;#;OPs;@eO7D`*e};fTA;0O|0?n0po4w+$|!*R!{6AL-zjMmqG7E zn_UP4Q1pxO15S;%IXwu?c=_J(Wt1v1x#SUDn&Rd+8U)C4LD)O`2$AS>!W|*ijh#6EK6_ z+kb7lWu_r>Xb#B0^Fs9Ho0wrM>^%RN#zUVWf8kQ67F@%8Anp+~qUGVJ>La0|K)=O+ z$3p!%Fam~d!T!Q^LF^wXiWgrs-;~i&U6qHk;on;y*uGs4F0l7kQ>{mt&f{}ot7~gK zO_El!ynlM?=nQLdWo2bW3lstUg4E9A!<=AW1dOFhdVjucEvacg@UgtfnmLh2rnFX# zfi>pTcp9rln-g^cg=~INQE-Z`M|gQv8{(4lN{c<2S*ATK7}?v!$a#j2<-Ps4BfCY9M7(#p-~hM4M9s5=7DBUCWuiBvRkVNA8Q{b%q+EYssaIHr|gD;v<3yzzNBa;8;th=ialzptQ zD0VacvGS2+O5AdnK7i90y$^KRLI5C zKe4;Ups(`~eV>QTIiG-5ATdh`Ju+0;;3k%+hB@2f!npG-Nz^)6&e~`)fWE~hZc}8K zC7)*E6{~z@b9>rq8db_EE*na^=GuItD-mYxOBBHxi5^=BGM2LDey9vR(q`3Qiw(Ev7&Q|*&K80MW zpeMusb4$zJ#PNC^GTxtX0@G^R?y}9$FrnzN!>xzuRxNumJf&r2I|CT<o_776tuR6nt9>-*4MCy-aZ+sJ&yl)pc4eHe!wU8~Ir z!$sY|@Y&1KUaaHDj}#_{0eHikmj5TX+=g>|Jcbv7VrvZZRho*{nE+r%2p8aRH^B)u z4iu#9XT)&+bJXK*Z*QN}{YO|{7Ok-~dB{X4pR^#XdDX^p5Ig@tYn zE=7Jxj{%PRNL;uR(f*(+nx+E4z~Wz=$W56vt9ibX)}QaI;%wUbvrH}Mw@}Rq|M^zM z_r(IoOI0Ebw-^QwWoir=iTU74dysncj>O6BK)^t8wb^EME^KgB@bmDitgKVvk z{15mHbNw6YbdM>M#hnz$s9)S(DePJr(G3kv@))N?^osk(Z+khjqr+1mWHJ5n5)$)& z@HR*P!@7tHT@RaVSqst)Ka(s}zrxjO9iv&n|2RrXg==JB=d;)1H#J8rVW-gZ7ZWXt zV)y6PPl*gna!E08A3?|Hn1l`K`Iy;9XxDE~UyH%*e1FC9bb|OviVcV#g##o!RYx`G z|2M&}h;@O;bl-P!3sDg4qbz#rWWMj{r=&H2E8)NK$K{gheLnHZN-9F~uf?OI@8T-A z3U<_x$}nyB^Bnj1f@LX~X{4sI(*XlT#~O-Y*DP@sZTB4!pyHwvd|PK2fk@`2Ip&oA z-?ZGe)N`4^#9TAN^E+lx;Img#ViYRL0D?t&ViG1g{Bzi_av_VwEH&K7E(W;0sOub2 zbR7N|6M)7uId3Ml?zRk-gsTYik3yUsQ(V@MU;hIq!9<`N_u5Z=Tv%0ppwKCiFz5{i zj^+)A8t~uToOsBZ>HaDqim38q{Wk^F-RFcWOgkMM+9WB-aIaFA?8$e(xb4U?w-m#6Y8%&hm|9JiaQ= zS1;x){#WreFC)*fik#@T7hgEK^}BIVFTC@?WRVqr?q@vZ<)2)F;g4|9Q$F@DgeV6L1HQNHV7_i$mXqwL z7Ik;4X*YG!7y=#^G~5thl_-3KFaGp-XWrdEV^gh!ILBsTVPOIWNywF{Ums6oVt^+xYR7$YiGq1)HK!*z53@IDgp%EOW(-54OkgBjOy)hhBVIad2w za>Lrx@z-xbT!)0iC#51CDclM}_Drl4{BOtQf38$YMg^Kbb0m!VhhzanEYD$E($s?i z%{Vus6-#Bd=A>D2du_x%IkCIDhWrkvl9^t!GKsI(FmM~_nETyM($ciuFYhELIxCUo zRV{>5cQGf?^q;NL$@G*7Qmh7j2+K|0GDznaV$yD&JKtT-mnFZa724+TN8xKsSd?Uo z_FS1=w0#A0u0t_+&Z1iaS@w2(S2bS(yqc4~WcwWc+|2CutM+~vi^64&GG=+nZuS424@^_MfKE7#*!-DzJw>{!Z zgmNZ2Bn*@#=acLfX#-=Ve63A+kxL#+?WMD-__Ky+#5tCkY|jCIvlOI414F!RZkuKj zIL$x{tyH2n)jfAz&g8MYnELe>d%+hfz}x^EX3U<`PtL|g+z_GfY2-;V#4qg1c&Sn( z`}Ln>!jv(xRicm2s;fNW2gzE5^J98vY*ZK`77ebL2~xDddEDJsp}(8FrirsBWqr#Y zgyt9%SrkI)ID-vn?jfHNtFAsbnyYBARq38UX}^#6~diP{rA@g(6NNT?(G=kQR`850hl5L2P2qHWl#J^ zgv$HeVtjy(1nw$ry(0zQPvo`1>b2v#52OcO`XPR|c4rsHqwHl$X2ouH47jdH63E^UVMV}Q=X{z)kCRiFJi%Psa8 ze4Z*!+Cy6?*+((50EFtCe6@Jm9IveXMQKe>REOTs}KcOQct_g@=?QEB&gec@Z zhe%Pc4gNmua4BvVqc;ri6=s4eS4b69#NFZJsgJVE9F!2DWb^HDE>`6Ygdly+%*}#+ zQ(eS`74-s8ugeO21eDzi6BL!I#JKj)La42+{ z=*er>AkFdzg4S=#=@$iIjkQS8=>tZ4s(mm^c?C<&3l-bzxZ$4!~MSJchk z@XhOaEAQj8vU#OOozqXbp@ZA8E@2Bv$>s&gyN6M;9N+L^V&8bjN$$YU*ZJU$$B)Ai z${dg{$;&?pHSTNm&CF|`t;_jE?Pa`#zt{aJa}X@uWVkSQ|C4-H zy}~XRs}qSM7s@UmM{*ZJ-^-|Ie${N}`0kR_D*@8j(phN3LnjuGs*fhw zy;D`2B8D$D1h<1QPH<%6oE$2-G+i6MyE1rI^6^pzK8o3?fs*w2YC}&?4H84JVlsg5 zH~&7uM-R{sHG6Nb<{q|QrWC2_a9Ym0d9ECzj{>TD3J=pfTi&aNQ#&pB#;_UmH??eU z7d2x~dy|3?tsA5zXcLc4V!W#%`sW+w8Md#Mw*E=45qUh4^!pj67;~?o7dDFHtt_3! zEaq8{Ir(@#IV-reWJfj$KWi>sFN>hm(Xhtgk$oA6XOOz0jXba0TQR+g5j*3}%1Tys z24X+a3FJ8uRj4tY>OJHV{SE;^H67CKKHBC zTv*Kq;73IWZ@G>;qE{}SxGfP+N%^3YFBJ9KQ;#m6Y2_#M`gV)PQr~8!E4GphdJy)g zzsZTacJUvKiaM``W{V%i&=x(eHLr?TEgW#&Yvc4I*Ia(&T)T;|D~Focelf=x1}Lw0 z#d&@>a5f8YrzjWa2uj)`fR)JpzgI7Qm&^6=v$p?YBAmG2Czq<$W%;_}@+|O0)p&b5 z>(_Ak@&r_edPPh=m0zw>-&sBP)LN^6)nfr+L^);7RVM6DgjtUlAJrSap2&N;vj>iM z)l-d!F6VdJKM80=8XB`&ppvKh{yF2DPo1%Gwa>NAp1fvxf65(654(7@REaUojuXi9 zkEQPmhTMni@3^R>-fktxnUr?EZ+UJ#{PN6df?|>t`)ffY&;LlVSc-73BpGGrcj1`5 zy)Z%C2@5Ek{uO`IX5)JFG@Uj1zJ373V?L*Shb_-v4=~zxdxhC6)J`IRUoDH`yXv{h zb*?f~BT;ub_QqNUIZEYmCk^K{0YCQ)KKK5PwWjlgHXihwuT7TA3ycljqf#JC-<r$$jq?5goIk!%S+SVS z4n0y2LOOFl`JmJ&cx5iM{ia%#qI_26ud=kK8)&i9v~;&>gi^mEkcCi0;C}l@t+bvN zZ?hVe@?;;s4*-Ik*ra!KJ0F=ylp&BFT>J^TSYZ#Mg_|uIAWyn!(;h>12X&)l0l8g$ zRiw}W&nq~g6kCy5m=P`PQKCf#xp89I^(-!dT1!2zY>76ChT{w&f7c*;{WV9u9$wj zk{lON=jZqCy$X%`n2r+CZi9!f(d%}5IU4mYM66~qM_MV~MA4H6Wn~OA4QY`Ov3~{Y zq+eWq&dSaiuP@JldHr}k&ohlCFPOcdnBJ==5@&s|O=~;po56WFan#NKfWYvv?rX5d zQI#QkgAgkGAMFBT%b1^6i_pClnipez#8c&|Uj1M6oP8?KldKniJ6RnEAkdsnoDCan z_3L_GI1fb;uiSumz;tXHFZNyQ#ra57Vb2w1z13G9*QJ}qN&if}tplYlMhwc!S8BvHW9bbtd|4++3zix? zR)oLuZ!9FAAhuB~L9%Mlhdk&-Uh8Fas%wyx=tq^e=yxGd>jqA&*hneFH`bv(PTk(u zKE8Fgc%h2QBp1qG2DOZ?U)&p-hi?-750G|Q`3Mil%uTgw@^3J!N)+7OOvB;>)`Q0p z4DmR0tJ((~N!7IlnVw$KjHA?H>Bd4$v~a1slD{WKC5)dFIOa3MKPy@5bOxGhAwY!= zsMpr{*HeT@4r(i4`+p&k;|&xzAO51vDNC0uObf+>*=rYXu2-{Hzc+(Di?09+hF-R$ zp!%P0KS2-&#bHAUE%;u4goRtT>@zWMMDbZszgZvALLvhzExw3Bu5$1VEBnUYg>U(U zM~KpHj_4hgl!$ysBl|N`vt=JANf}N_n3z|$mMUok`@ZbAh&*HdW#dJAj(C*hd*h+d zWv4AGl)$^uhm#=!ac=rjt=sRfwJvbwYN>H>X-+QPxFN9${=pcr3HDgY0;2zHU95fC z()$+lU;3ZF;!M@u?4SW-|0wc*5B`V&Hd&K2m9;f+(PC1CCb9>NRkerxg%mObQYYGz zFZ~F9)J{AgBfK}Fo?iWtB@<|1utt$A@aqqwUkOqC2pgW7Q7XT%&vjz-lnU1fmA%9c zk|_Lgt5i$E_v~?F~93nnx@=E_xESd#rB zPM80|4~y6mdv+=wQ3F!f7!Txd(TFIxkh<$oIwx@>IBP(W{j5d&2w=70I@J1Kp(GCj zE-V*uv=uhSh5Pq~U`eHLCYVYqb>*X3BQFvU(fC3`A4Eh@Dxx-}>?%9cNZfdfx!MjA zEW)!)4_TI-LhDsI0AsGLIh98Sq{4Eksk zY0bvz8AFvXwBrr-4>f}g6SbCsDSTfJ3FfFTzfx}sws?kz0U`!q<57xyKh1^gXR4JU z@D)U3LAr5ISK&>eCQ1cy&%m-~PD;+E=Xv9{u6`UNVL zKRQJcUD_j6{L#n!ML5XeVDBe2I`vWN6V-q7N-I>hP%5()?<=pKD7M|=S5F?as-7_Y zw=L9C6*^^x0S^r(k7aBWZt`g2vyXP%H$AIzkIu-ku&}hf9~Ov&1SO1$EKIf5Q|Jut zk7p`08zah;OKw4TQ&5EVr_-L*P?i9ZTBBh(-5l1G{QUfwtMvj27%UT$l|8EFiB6A) z0efxUse+oCxFy}3{&9?wnG*Rc8;gl4I2;n5Pi?xf-3Dd(kL|h8+n+U_kBg3bIkskN zkKFw3J1|~1NI3$BJpU9dyDyCv?EPfY*#0DyFVz?gGpJUm52i8~z(aqLSdgAxT^*`e zal~b>ORt~g<-%dLK^RL~*fRiJsCMM;NSeHRB8K z4ODojt~Z}Tog`Kk?y#plYhpvi<4>0QJsc6OfNfdSR29=X1JM~Gr++F)!aQ6|dR*gq zN5I?OMvR5~uT&qMRX?9Engs|_MWW5l8047hp9sR^Z~>6PVb%awv8 zAxm_f>HWLk45tBnMYl8)!v_3M}WOl^_pZ6`EI-8_3hi)anlJ$|CQK8pz)L@9{}b$@bB&p&6uA+3SZC?UipMkFgFwkr2Ux{FHMg+*mdBpKDUQeQO!z+b z-h#*I>B?ap^{nf1u^h#Er&QeB-8X9@ZIS5)Yp{Bwf|RkjDtnTuJI~)52VBj6@rnV+TEMFv5Q2TER@1a9|5f&0lF zZ*zbDw9hMmc=BIfXSl8Act(cn^yLcz&ZF6AIF$KTW4ya9u)rU{$p21}ApV<`sVTQd zjhuVSFgDiC6zWN!DLY*61MMh=4IGX<=t#s{&)83aJitPvX}MU>hn8pC%^w7em9gZs zN?}*zu1l{AlhE4W#->{njlAgB<4TpJy#Hn>boO{KPZ5a#)SH~#hLB5TNzR@`P9E18 zTzqBwh(J)G;>xYsnt?B40uqp=Oc%zGqKJDUhX@2jT$(OK$g&m7TDOPw7Qh;Nnz1+7 zXpG;kLc0jbhul{eR!mdOwFNeQrGRwBY1h(`f|WCNYn6B}9<*N05Z^(gB9M9TL-#6{ zXe&xykmaWVd1^HCi3uH$ilfjNU%fV~cdKDgUyYUiRkB9nrS)5A`_pR6xvQ_FvXUe8 z8>`jZ=o|+<_1QY?N_WIct3ZD_5e0YLZ&Wy)lfeisDT-Jj=*XkNTBpA%Rm@(9ud$NY z!icDvkr{Wb8qVYZdrghLu!%aj>HB>Z{`ht_f4*#csYN5zbmcrJ`}AM3`%|98-UIB_ z`(I5qh97HR3)zEcV40j0@S?3!X0S{1|9%ew61d5prL~vgMTa8a7kZfMML@+Z0_Q6% z`j+~Kvj^LMwQwACzA3Pme$msyShGx@F5)YrL(bEVwrZ&FQe{5vP+Y#@P~j4NAB9E# z!yk356P|Qavq41X;|O;VBW7Ta;(=8h_Lum+8r~4g{Lw~ZBDoD)n@pzL;DG$m_?WK^ z@xt;PwPEqfcqjd#;Vt5X$BC-54}0{k=AA(+xof1VH1sxw#ZDiqGZMIZX0<}dm^;2A z1T>0@st)6S51HFEhZ0SI z?e!}LPHAG>+VrvlgiYS@W~<2w#)%7hdYHheJX@2uShO?Q#YL^bi%qJk)f&S~-5*#1 z{t&)h2QD_*K{+7hrdy`@N}+`|%P8PC>#1 zXWsw)S59 zW$`EK{jxf$+E{mZ)A?_tUtHrY%mph=oiX%Umdka{TT_dbjn-vl24{=-V6-vj?*o65 zRISw$@v7#Uxs_Fcb2k`GY_k6FWs{=ACc}?bRMHIa4k{A`XFA|#w0vHnFngaG%l)(% zf<(JHoX`ThO8T=w7`PgInWv{{GPnXU5fQgf9R*5h;|AHXhVcXV`ay4)gpPxq_N^Mvl>p>OT{ zhHjnD*}7~+G@3O|nF6_(biSugf@D9~b0>I)ij~X$q znGIU0cK31>nEdGse_6cbzB>q`{!Y2u^^VI}xgzQLU2H9cLQ0NM%$)&u8o$C%tbg?7 z-0qFp>7EpE+}bjD=SLXFmBEc=N*bkF-ASqT z3fXr`GKy%r?~ZeQcyo3JK(ZP*1QUC+JvU|#!fscy{c#$C%givaOQ~mka%j4HNsP^R z1N)ddazDeP&gA>mb1k88;)}-viBQgAN$XD8Mief4$mp#pw!kB){Dg&|7~4d~Qk_RX zGU)dLfF|_7_mlNAv-7K3I~&Kj@rpF#?79(+(d&y{=D93^FYY4m)j@4$92;MGaARe zJ`1!&N^{JG~fWVcdRY{n?x0u%!n{$-8f z%fG-Eo~qY*{g7U?F<8I$2@?Jj^Ro(t$NQHj6>XRl$L%6*b*+sjLC93D%?|f`={J>u zraC(vzVOn}jLot11L~ z7kPXtUhx-g{`ON73~aLm8vk`n5Ap|k3|J*!-)4%yu=18;HWGuaKs?dTQLk@L|Hohtw_@q`x>LTk z$PLv9HpQrzceS~*w_^e;)5YP(Xl+=kES*+EMDj1ap_o(I+{%#PdR-%nj6f+$i><~G zPV9<;LBfCgJ7_M}X;ZZIR_2l(<|S#-R>?K`icnB;cp{}1oK|WTCCphvl0V9{YQvHq zA|L}_m5!xrU3RQ>GrHmQNC%6f2}-RR@Yw1QT{q~6-R;qM)-YG2Yh5qAurC3uPBOk< z9thGN*6TYuCkD+ZR~p=4oNusQY=IQ`K!f4a!3rRw+5K@g^cv^wVZcGfO4UsoION$A z%H@;!p0W0ywchw$^@N!SugtfJ3eCO^cTlMLOsg?e3nJQY=aRxEcntHLe6!$qVStb1h}Kw42)hTz*gf^Eo)a zM^>#eFR|=1N3_&E_@kCGtId?D2xZ;Gs3-r|5V!yJb-C`^Sy!(HZte;VXk~oR;cguk zg3D#e6dX;E_C9-NE!omC0zJ`KzD!tuqQRbw_JiJfwdPMWPd?WO*Nt(+*T|GP;xa=~ z6Tig}O^yY(`y8f#U2tm2Mn`a4r=(ID^hGTnorb1_L3QsvwSNt5m7>X{EaK{_`@gqoBNVQ6P z;=I*1PO2D})fBU+s3^38XP@?|$;2Ri2<^Ac+zA^vXHO=R>(Br4I@cY>=)Eqi^o%}0 zFVF8jRqdDDHf<*qhm%=j1+n~6T!e?<6k@(z%>1W#{zQ4AbRJuNEh|gzp+LM4{}Ohs zro}jW!pHNCu?h`G^%iqxFy#iVq-o{xcsf#ginb9ioLD_}x!Rbq;s_2~fTNWV9I)^_A+Vg>XH{f>tT)#k&bo$TKy8EzP4oC3GT(Q%d zesaI3jtg82@y`HVK2N6437GShcAT*~?zY-QB{p{Un`aF9T7!OZpO5;_A3mjbRSvCF+D>j3bb_l&^MYaz03^fzP}J!tL&753MZ)-NPtT)zI;D-p8=26%)C1f%A*4y!>ms z`FeVTiRgY=ptD$4)~khRZI{iJXWL3j{OEXui+l#A?3>!?^Ietu7~G^mN+zRa;tz*C zxgqbTl1w$A$eK-)C-JL}5^Ex?7e5`3V3|ueXQkof?uJaqJ!K{zsy^J)=PrU}h6KyS zZgrgXi-1ecBaoj5+hw9FQjEv*w)KpE3Ki*J$E2-qTUdyF$?hE-)$vLW^^tG#4ouDC zAHCb-wxaV)=CHot*lW!*C!d!DN9r%T897Is&E3&Pp*Im zyU`ORjvmvYSSJ%{#FZFNC4 z`wIM04?>KzLzK9=VU*27ofxIG-49REH8~xaQdUqAoMted4^Ck!f;%2cTK^bpPi=SR z&57#i691l{uZY&=7rj;&gG1t;;R9y(rhdbbqLt(|5>@kwZ`F4Vr2U40I6r<7Sm*Mj zJkoJt$@y^lKi=LlEXuHp;}j`DLZlm!?vw@zrMtUJx*G(fTe=&hJEf#Xx*O@Cd*}gX zAAR3)dkM zoTxFj!2H@N=&|yL$=4otn>AOimO_k;|7)D@cH$MXhLE!mW(Qa9Vl?EOddu^3b4Zs^ z4$T{tyQUa(#<$Ge9alZCD`lW`WhB3bEVE>I^*&OOjAC5Q=Anro7Js^9mS^}f?J-Q- zdOGv;3eGJAHX_0^J1Ja^-1QO8Tqx9W9+$ij$I2H9w_AOYc0YIKq+&?XoFWj=l2Rg$ z5vraRn%+rACK{DDNVOqbe=)XH8H4Nc3xC|)=!MC4^UT}Jd`^rUQj_!1*J;zphj>p> zl4}N_lu%_k6eJWRU$h)2;XSnL1pBq$*b~+LJe#t<#-I6+lsIqC1UpQ)--l+2oqY_K z3Y48|e9i0jF$k=Psx40kKKhPmt1GOj(wu5b}quDo^zIU1ar{(AOvA|f9_vb7&-S)>`H^yWNAxGlR>Y&dC?YKp{NQ84lr{g&6A05>zf6K(AOeZ>Nj3c_nB_eU+g_q(%A z%;_6++&u_BM-m(&hqb-gp3!s~LJ8rj_W#~JrZeJhN!7RIA1W`L8h1ng3-d~Gy*KEZ zS?)-EG$X{Ju3>|O1zM9J@%3&n^=ZRo05g~{)*rsI6~^Ee3~lDMT*8OLXNp(y%f|C<}1XaUO_%Za<^Bw`xj zT*_us;kb!qxgl%AUF<@cS82Mxt>BB%I-1=&_FZI z`G=^>ZA9f}d{%s2kZI{Mk!VxDSD^w_ik5g1lxA}VnvfssoWHp3>iUMVtHrhtVg} zUapIDRIhl;uem50Wh`+em#Na!nSj5fFdG8t8*s4OL~Q34@Mv|Py*NiMmayQ3VYpqY*eeINWhG|rdt~a&~i6%HP zVX!K&StehO!qR4M*@Q6U<692g4xpJl1Ud>vj_`LtYIuEY8%NkJFT2nX$uh7*&| z4=YxRJ`$N3PWodvp$PJsAI=xn&juA}-)&55B^tXxq`$d_U*^0g(3?~+t^c|;og;Bm za^V^zPh23E!3VdzY|RyfgQLdoy~vT#i0IQYbI8qcl(62grR~TW=?NvPG#9x0O_17K z|I#~og-VB5`o{~6Qyi7hz*N^Cx>pP?8n=`;&|{*3~$5b-obp##HP$`(VB)MYbv3l5ob2O>?7m3?fYYvOE6+c)2(GF4I# ze6f{YH;U!zfgD4u@_PI`HJ$z*xMEw~h8X=*E;X9*yaVj;#-IITAA+8cRO=}f-Ufd> zeY_QmE9O zm3k^fXEXlX+i5UBUn~waxOrZ}y?mk1f&F8qf29_>z)iEVuqUMuymbcAcA7bEQi1gi z&ad7zv;*8iZmdC64V5no8zpcv19jfhEo`3!v-6An@a5Imoy_>kQjnIbR2ZNd%8g%$ zeG1vV8A7mrm}!|uO7I72^CeA{ad=;!OBJL0ijr%5F6_knaON~rw6>Guv(|roFU4bD z+UfY#4*lm+#~ruEiEEwhD>a4P)eEE*V%5fe!;Q5n3sJ^Ik2gwS<*d;<*Oxs#hx@)pdDEVeT=c(P_-sH(xr<&rcy4KhClckp7{IoL5M5B{V0~_X2mRz9?>C8hMC9!lg zC)O_m5p<6-rIEckJ*D39Dt|bMRMi&x9^@IMfz4!y+vm+>DL}(DJ0pf!4#oReo?TKT z4O31=&}hj^?j13Eb+s=&kyA{yTtF~@6-nt&Qsv~nFjcV4N~6=`=DKD&U$odn#(t=FjiwjMnJ}|Qb1(|1CaCcKJd#SnF!7w=l8-^@HTU;M zI|l7mv6OttZ~j$u7S2$q_Psf2kh#*r>O!Vq`33m<^guM(RMgkxqB1^l&;D25W9u@B z^Ej^Mr*zpgqy#&z6v?F6@@%31vijFyZx`-9iRrS$2Pgk!`Yitce48JcXatx4p=SdF*$aSI*2H z@0@%uzDLp1g};gUyxv4@;ADm!1U{0CkO(p#NpWlJvZ?w=&@nTO{Tv~eQCjuhTL<0&ghUrJ}x|g{Emii#uXY>!}m1}6IO!@aGUQBFA z7Xy@Y?4((TTuBR)OQMlK#F*ZTGh~x)d|7#C%P8)%I>69$exGM<$$8-Us!#1M7;e=n zsfeRa4!_vew&H7Vc$lS{l73reo9_I!?GPKdB6%NIz0&iUxg6;yj>gSP*8aRQOGw@C zH}1{V#s@+H5{6gu78ox<0!HDcpihHrc8xQ?=Zkd-E-qvv`VET;U=*PWBH3LUjMAWf z{wG)O>(>QVAf-01U3vIKHh9TslMQ;>H_?(#jS;Y8j?hrtmBy$FtA8 zM%XBsjgqE$sC9Nxa)Qz$ry9{;u$kb8!#Lb_JVR4#Osp}@aVKqz5QqNc>8Aog{!dJ3 zrI5P32-+5a=!KXIoi05%`H{RXwgio*_-;^cuJfD&NnZ*)_Q4v(S;XaWjGyQ#iuO!2PcZgE_*(sY|#AsHI zrJs)|7UpX17=D}r8-KW>;V)0&^C|4PKEH$?;bKF3y%MQJP*)#J%`Vjpazuk4;c!xw zCaG7&K0F?RKj3n|=0$os`E=8mJrM64a+%70Gs`fjff&Kl9cvu4XF*G=MAuka_fnKe z(KJMUdA_5ck+p_a5UlFkv8wpgpeu=IyL7qPAlYBJd85j2GWA;6- z4BORh+8v&KK2HX0hUqrAw!(A#>w;bfBXmO9yy-r+9tJw`1G)sMSFqpMg!+?Wz1($! z(UfY_Q7^@}z0n&>(2`=Ovrv`5ipD>V<&+r~Hu7J7&}c<29E>jbO_>>1<(qU}P4%aP zkwZV65An7Tf-&6CTD-X=Zp(sDh>lR>$>+&o&nVO7 zMi9PwtG0Aa+juEOtwJ{w=gfW3h-}gPRcHb6#CZALmp#_^2E6HODaa+{e;Q-tGd+wo zbHvCwKP}5AI0#BFjP%6taWzxbJ`nFm(_lw^cP4Gb>gU2$5Pv=O2$%dCjl(*I zp>{Ij*tH6kVuMy~F$`rp%(RrWk%K_!m*OXNtgT;$8G(uUdv2WwQKPBSp6Rq#5I|Okm2urbL_z|}4^S6jd49Ac6smuq zs399ztSj_7y-!WMejw3X$Opn`XVy-weS}tzOB244>6|61=_B6`s@V}G)iUm@6AOA@ zcDaCg%E;J*7Az*f0Rhi8%PWOeRZjZ&3lM()4tpK5;v+6AC{im`qV$@#50-$(S-#~b zMAOf4r@VQwR{~$E=$Ys?W)m&yt!MCZyiPxDT}Y(<<`b#)01tBm$U9pgU2mWV4t|Xt z`D{`^w=>KR0#w`;mz6~X1-%^S+e7PuoQ$Lk+o9?t5<`uYwX`M^RIbMVL}fTCDkSXoG5tP-#YTIQkF2aO?O(iWoNrW&`!Fy%DF zOSDFBU435DYR?ur!An6IFddwBIcX5=;uTevem9>pFltbj=z6x9WXfUtg{&@AyA1oowC*c!!M`@}R-b4CegBstw4B1Y4=GT2MA z#;9EIeOgXws$W{wgjRz4138gk;=YB)o!fx&7$Q& z-9(!arw)&vZFIJx`ZY9$I~CAC6< zN1knd8wElkVAZ9h@2jr9%Mdyeft;?)ob8JcWz@*mbwnEM4hMM4-q9sB!|~4hR-cZf zWRIQgi3y6rE7`*d8jBq}Z#GU3p0njfYW zD&2Ed>#>4&)0o0}Jt{4i&Gz-BWJ2Vj-hhs!h-6z)_KQyMlscE~w;GiWy@p!R4o4$` zo!l}+5QSY9R10gbHQMx*2w2Bq?B==%o0bG;!TTPR)bHonx8&dBTNh_v{~)!x&4;MFBi~3 zf-J1Pn1g?9{o{}Pz#_XGfj|b3ti{&o@vfP);I;=VnpogFd*Nq}g7WZ>Y`q&~cs{qy zQvt^)awMFQ?1dF&42%>c)!=(cyf~Y9R^bS>9mkyreZ49~b1n$U8k_>l zK90SM?9t=`q1d0%3pB0YfZIt`cq8i_E!`@<`|44#;*%&UJKVY#@7}Wwo;!L_IbG z>trg^-VA6UrJPLHT4Kr{h=oR11ZlklFp=0mP1wXF7ovp z4DWYrmi0@V#uQC6Gb3jq_3-yDh~+}?BdI16H~a+_n1gb}#TUq^1XIKs z%)Z&^2b9B+g7d8U^70+w1_Pb@npO>#VBJ}|sQ82;^IH>*6ZVVrc2&m;rRMD&PgDo<{dKo4kGi329XD3X&QKi097@vHlOYsy}3fs$Rq%eC-Bk%2mj!KfKYwp zj=)IT@K#-o&E$?PNd*9ovYDOd-6m1`^8$H%eW4inc@&qwZh+$2H-c3Fb3zaD$HAp9 z_jwdZENR^=5pg-0(*)3$u|pXAi=y!|#acj}4Rcl1RrT>eYh59`^Ncp>iD+Sx$#UaR zmdgzx5E8SYN<=*B8(09op?(FuSm}0{3dBS|%^NW4K3v3NlUiYSJY<6g@qWrVD4J^-Z zPfc$j*^FfU3~9d+3m+!Cdn6eSOm4HrQ>$e!T8;vSJ;*;u_sgdFkJH}uOF|RAL|_x} zB-g?8Vm;;^&x0hyu!06K?7HgE=nw$#Rw%&Mfj!U15>BECU;p$quN0+8oi2vML^f>w zRy6?&He?DQ%N@^)RvCv~!nSANQ77x%3kDKfH-c!MZ_aD(F8i=hN2%;L>Ghsq*JVOR3c`NQX4(k~0UdTLlm!#U)b3SADv1Fd!9o#;dk1biD# zKHEQU-a4vbe#SVQ7)_LsqD{>6c3GpgbcT_7oS*D{PfHoZC+R5`X^&hB9j<2Sgs~A7 zJI?rMJuYh?W!=%g9HL{UkGa%S`IIb2g1eCd)VT=SQEh&tFFan-gLFcrTl&5_k#ByF z0_914AEo;oH{0R5g1)*^i`=&!6&G;C@SwZF0M9AnXKSx+5Q6*+mj&x&y}ToL*ox%w zE7}T?>)cT3@;u~9S$p6WdAO0qxsxH77l;-yi66c@;Bh0RiR(8C}Zhq2gq`MvxMz1vndajyX{g6(o z^8E^HGl3Izc_YsF79mX6N^-9xaP-F8bLzvRsmLHTx#Go!i2rYJ06G?tD~2T+vq{4r zFX|avr5_inR(9Yukw>06k)J94PvufHiD%56laoazk>wHOo0a`Gqh5EcqZo+N0=T}m z{Xg_DWfxFQ-TAjx*T;_6n~w6}&E@!R#a2^ucgBfRvD`D+%M~_{XFw{avI*yMqpL9n zd&4WgYX(GbJh{+9O1Y_N^?FA2fkGu>4Xh9PCI@V^S+1z13Wt*Xc(mrn6@x??aPXx$ zL)Ck*0do5^$^7&ZX8rM{Ts{=bITDRhNPP%DwA~49X za^WPL5L>7+)7*Svfrq3t+~d4#U0Kt|NYWdx5@%Ksp+I}Uel4a@(H*CKyZVdKBJJ`! zSu`;oO@iFU1CsNgHK*revgZ8=a}9QVFdD%^ZUNW;1fjg&3zD<>OTfN#6rYx?a(9%|lB1UGv-cM5z2~uVPAB9; zjw+USGA^gP7VkoNHGh>ukwB~fCyd&~yox`jf>W;W{hcbWS*46cmNUi$e(q*$ceBeq zwRi*q^Y`Tev{-N=dByg#CE3m`M2PYUs>0^@av+^5q6qX=RTw0Rjd^+8*|Mb-l9YsD z;eCc)qz~W0#V;5x1#t#~WVRWmWCj-qUB1sBZBNYNf*Rw<>c6MDUuYcfE1Y z`Qs+yIKs=EX>y%d$`%ZFPjypND>G^(eM61?xU1ylzmX^{Q!h`;apkkCg=*Qno+?Tt zru8U-q`2AVDE;LST@!z(_qipbQ6PvjPw%+8toRF_diB7!3O;X~Us{8_e}#Iv(DnQT zg^U(Zr24(obWTShm3^!=H22Mg&7DYY}^KPqyyE;oaUDj{+@rh^`~uP z%@KHDRV~(E>`Ur36@d^+v+mDC{=H72yYs?PKT}~H%LU`#tk~5_CX+pIzSkqElRxV( zf3!E6MC=$h9ebSCEwwBvO7>yu<6rO>SXmj4L=W%UR0LPy%v~%!d>x2(tsVfe;VirS zHq&dYuRR%uXKomo`FX&la5`wZqTw!l`knV-K(Z(kKcvrQDxe0i;bb`fpj?bFj z151;p#96Ae!Rx-n8YofUT@xonS{^ggv>Qu~u?FwLiR|2`>nAaY%$FXq%<{$tPIL!` z`QI_YcVF8L-ckuDHk;=+4r&_JU*;TXlL@CbjFTz8J88W;zef{X5HJ$)c>ZZjWJN2! zJjAk=A}MaO)EnTcKDtJ&7i_;_Ca$`-hFxIR`jAZdF=o|L9 z_B0}Ej_FClL)@R15@J2+6ua*+ihFuhIh<@+>ML}O5v9psZieqRQY>zTQ`@c^O;~pPgGNclB*Z4vv(m#JdlTi)|+=u75M{vEi`vNoI7$axkbA^cc?;7+0VqITC6h~ zo12^_I&Y_@S9_@q??}YMENEZ-DEl)g@_g}zuJ!oHFu$>}(KNKt6Z32>e0Z&zIuB|G<|j(96HYK&)pAND;zJwEZ^MY){$VFKXs%(RrD zaAR>kuU#}GOfo56l7bR<;=kpN$&8xYyeyn0ieN^=_HRK!QZ4Gskn6+T=Pe#4y~b|| zbA9(GH39x=XSuLHxsN-vB-c5k4ia<(J21annP*qX-(~3r2ECM1+_AK+5sV z$-Vjg*&8&Z`(b=m?*RgwK+;&>=zv6+8F2A?~P+xCR`PmoXY zV^-Od*FUca8bOElmOZ>h6g`A7>Y=Kn<=JCwb!d={yP-DBWzx^6=Fgs|&c{>c zcuDX+9zRnw-IJ~08AZP6+wd#y8q=-48!MZkJ<#*g84TPT6KxT>ZF65(u$<|01zqH^ zvsL+3Y!O+wPg;EtQrR1Z^tgb(ZWoNW4IlGT6%pI7yJ{h{viW<@J_mMkX;UOSb~~pX)Q}%f2CCQSmyz?DM8uSMClF4 zuCS^tu-S?T05mN2zIGTStycDW3DxEcpTPCM1hO>u8oz%@%A zpB4=4*9l2MmXfA&r_0tl`f>W#EPUe+ZwA)QXV62Yp~CC+HzF7_$4gy_t%c{vI6f`a zMnkbLO67hOP-Ihb_!!Mx3ILe&^8*CH;pA_nt`LUkx$2t-%iId)M_)Ec*&6cr@V1ZoYb@CsMt_ z1)Y28v(5+yN?4y<4p(55$Zfhk`YZkg)(PPwG+=L&e5}f1)y{3L@PwW>r$d#{&GLQ# zTbkpHLpT0S*o<;zQ-rnMc9X!~3}idk!p!T#2`e#r# zbmkug+O;jBE@l(N3|OL2;J@X1@KRRe{dMRC@$y+Bd$qD3U9y)3X*E)LR~F6q>1nNk zpDrW)c2?FlGAKfP_;6?zThU@!No0(@MRs{F;Ie6uLmsVyD3wN3xON3 zAswIu!nCwWG*|ms!5V7N3g&NMU14# zFZ^SFTxNJ(fS;I6ZLqN|pglv#<=o+?gb(&**b>EO!6wh>p;*~oq;D!MM3#3$rx<;a zVAQP6zoNPyA5QI<1gEq48UbYy>JO3zMHF`wW@KF6S-g3LJcM7?`#wP`e%OpQei}5@ zw3~e>8>X5&t%H4je-4d%O3J&xuDLPfy$PP>RAdam=>t zirCxj$jqJ07Lt8=y0Xs54~2%{ZY_&>&u3NWXhn4^P9J`f!dr45NF*`p6=-51-seYVnQ&`G&8!5Cym_VinfLgDR2qwGBW#2&j zxuVH!|5TnDIB*<*?R;%IkPpPX_iW>^@TYPv6>*6_jq|HuczF6rW0g%BjCT&bfF5JsCQPE6rx?AXm4Z)_{a!h)x{ zpB$Lh)y>oKTr-;g%J{q~@Y#MjSJxHI8yobJr)6VQfK~0iu+@Da`+Z1GQW5q)oR;5@ zfa3~}aM$oI7zwK=9MKG$6AALj)qR@(78gD4Uyv6dwIe>!edp_b z!7%}u%%MFH|L@_n?M0ZP?(u<0D5(Dq`^GyS^zwyxNz=a@0C-;(cfPSnLI1fb$VF+= z;coJH-E8;Wf6qFR*TZngT>O{T28fGXkl>i5*5Lj3+%2MkIR8L!-`>2%`Fq#E_y1Fn z5|dK;&u_lP|5t75)jQGu9xN90@;?WE`=5l=tN-2I8`!;$P6qY=WT-qf^zAv@w^}h!guQ;ZX>Pl>PVrylAN2n4~Yhs&Jqu{O2o>xsnk+di?+G1SE>nq5ti0 zIoj`3ftz?S0XY}MoZ-3<1cbU|=mGkgCt43%bS$WG-ZLl6T$?vGSOw6o0oZOpT6s=D z%Pp5YAJ*UDZ~=#e*!fcBmDmm=G}M?xNxFsUC_WAx{B=AI4nUOkK+bM*{yhe{mePjQ zO+4?oS5BBQ!R+j8t<&~r8u^U=!5Ctc5HTEl{08$8yz+{Qr4BF71gUQZ0D@><*TD&> zo>SJ<9Rb$9cL08C7?4_!v9_iM6pVHO3YY1_)d9fbSZ=aOXE#Nv(5NZ^in|L6DF5p7 zgk!x2qGteDgVTPMcM0q7P2BYmaO}nNuC-Oa?lFxM8cfzSkTx}a4|`gNjR92v!_&pG zZI{E0WmQ#RK$&GHMc3Z=_VkaQ^AL5VUfcJ*+<=^kfM*E6W36sKWU%kN)&QhI?rUHV ztRL)_`~RMRdqGcJSC@Dl_I&GgIYg`7Xoa6UZ;c_7gYRM*X?s_pOKkK$nQ!go5GY|P!QDHD>h%L-S-Uzd$FGS zX9)-ZJ$eCrOF|xd5@3_M$!5VBz&zDDZi+=lMI9{EkVAIIOb4S0kN^Bk1p=P{l#mLK zSw{jOrvqlLH0;hn!KSJ8I5T*GghoIi@SnDkBHagEZUoRxcaWdD9u6xy0OGoy(*Q2e zEZwZRJ`+N>Z%{*8@3x}AB>zZ{$apveDkNK;skv}Js;gu9Ty}w!oWFrkw<#Tu$MoE6 zI>Y>lQs~Z193Z3x>45jQgzZ7%s1v1ASoDX1=K7hH_3z4OJhG7=NzN`g5&do&a>2mH z233Mok!+Noe`sE?(ER-wvd^(nH~brnu=_t}{tFjG2h@Kp*N;5#QHN&0i6wF9h2x4{ zi_^`LrK+JJ=JAo}zWx2$S6BYAmac2&uG`Kt;GN;>-~6`~Y?R*YiWk1E+l2@l<(%km zK8ZEj&}vyNov|JlI1>aUlNzwvjsG(>hGWvuSyebBtGs!6e(yV)#vTmxN79)*3RoA= zHvvw)>y_H?kEVYIp|4VORaC0Gn$$O5GQL>&o<2;G(Nd8oYk(V#2ar>{ z>8SOeDcP3-?F6w1r{9TL1b{mNR{=h9#>U1i9W{GiW*q6UIpK0NGYJd`Kr(H=ENf>! z5X#U5;B)Lp>Hj7I&xO2?^w#M(FDVGnre|j*fR5_8L+^I)h6*4K0b}GKuQb=${WN_F zN=dBdQTg|bj!Zn;QuN{5I(tiD42+DJ?Snm=NbvXTobri42fPduc?<+3 zDV)c+7tTA+{NjLkwg1zR;r1;Q1u6Iu;NsEZpbk;|$6R^Q`Lwa`H4_u2-++pJWhUf# z{`3O|TA8Yc8TgjU?%#p_c&ORERS?BeP+$KYu>a>6qJf@3_+rpM zdi+^{-)|Rl$3osNun&U!+1gkT;%fo{ccy`XfwKpn>LU|vJRnv??a*;C2sg3PEKieo z;0b%o4Kc3+kQ8F63{P*Ai$_hvzT?$Z=Bbk4!VR7VIJwNXOf#azDztr`3>`d zE$qOu1G4{(E~vaW>NknOw&A;4)YtBI zL`P4bZ#j_zP^-fd6@}A<{T|p{cIB8x_$gw3bIGfe;Uv;30zYR5zWnm#OD$7{Y~*)y z?Z3F&7$WNJ*Z-^mcv*6Uzr4}Rzxf|Nr)^>Q2A+X{O-i$TFNgk?e~~|KAg_9?`~AhU zOHg7}x9t-BoxV>yAPRu@=+o?eQ15!at|51=f~#@^K@9_*u7ULTSb8N0pk(dl+Hn6mz89Igx_Sp- zxvP^E{I8?}?&l&fhzPI3!rU+PzK=FzMbe3P*EIpac+nFF5Z|c=Umvdue;LJRI&`H2 z-44(z7#RKE^PQFYQg;H~5h$R30r*FO9CA(zv={J5X#1YFtF6Z}8#*>6@|lBx^TOn# z$;-7#Gg zG%T3>@kO2~-n%|FV8R3Fn{+rY^J;5rO-l+MbDQl7leUH#Yl>;Ww zX<3+QV<)R>|^q-Z> z--Z(l{P;D~zCA*TZdQ3Sp!CzE+zg-{I@t}R*4zfbQZFx^Nk9n(|JI|xwA>%I1h5Oo z$YFP&*q%Iy4pO#uO2|<=;G$drcgX4Y;L4Fc3fJ)Vuhh-o6>fi+l>hNBo~{dYe*na< zqNOFpk$$W)r6~hML(}C#*E)S%7W6%wej(z!%4swF&)VcB_ZNuON6rJdnvMWTqRxlVl&yxR!Qa$mLvEO+qk-}vfAv@XEeB0vC?1sr=(XdQ3=ct8O20)jtX&{NZ$ z-w8krS!y``@3H?bAjI|?lZJ(XVe7Ad1kj&=E+K^gcUckIKUJUgh=2Iww33K#cSc9h-D_wZClyb1!OB2{)zdZq*i+`sW4iJgDST{*BT9w{HRef2_3szC=uk+AxQl zZ!YQ9cMGQ_euFKVz$m&_0-U{2-wCs&053QCjL~QQ4eE5oN({F(kA@gf|I>WP*}IVE zacJL6-m{3$9;wBr1fk=Wc4+8O0`E?i=ywF%WGW;Hv^1CTC2rbLz9W-)b#~;@G%BHx_9mXPtlCxk<w zNsBG_9?}f+`xS(1yQ&j`bagDSzsw(YB*M5h)}a^4Q*CsRA+Oeoex=@rf!a~cV)7@_ zypr+9qXWt!^Jz~;M5QqhS5~vGY5Io^g%v(UYH52*@paPP z;tgvPJxmNHh5Cl-Dd83yJNd>5}_E>AO$`dVlmuR^8_5*sx>XU%>O>|7+aKPz#YXj{-_A2zYR#zDD~v@i3!l`DMMZ>V_|daY86w=qGi50ME$* z<33r=v!<3*kUMUQ>R1OdZ15ANu3p2rKTVNNfV#WY$)?wXVeJ;J8{Std%$j+z4;2VV z!J88ts0C9$5`s1Z^j}|#G+Ad8x_DX+&i=fz83L4<^gUt)V78&hKYU+I_Xvre>$NC| zDm4e2t_aXQ9US}3>mTdio}GLStf{q!Ei#S_x|1BQt1=C|CvtoDhRQ1NMo&-i{aeMp z<~rg!K?xhdlYARoB6DK_3ASmxF#0v$etmp2NDDd;Z%*f1 zfkPH=+|#}52&%OZUdAL#o|`D^)g9@_m6o|>6Q|Sz$)RiL;w=W=qL!u9HWwxm`oB<+ zh;IU>{7D;Q7sQR1u2&4sDOsvD`-3bE!O-i($-m;Nc}e0Fi?wl)H;(!(EX>{V#AlM| z5B0CM5Kx{_BD?S-wshdc;1~_aFi$)%Y*z;BU}>U-LLT@h9SuyKo`$Q}oxrxz^{JhV z#&m4}Xq~<}{hp2BnKL>_ipr$Oh;0@o6$!&qlTlWA7e1?`M)E$Ta%w98f%!EP?Z-}f zD?vEYKu)=`BZkfcjAKhw#cA*n5Pt*IX2o-m)OP^;K0f1fZ(u-Dx~2qE6h4u zl9A)o_}MnUnUhIu39SkvP|j=~N|!#rM29 z**bg?Xyh2Sqc6BL^#)sTq0gO!X=O4H8eQ)siw6zMv-2&`hen zoezvX{Y1}y0#a*7th5+Nal>L}fh=}i{dyUjY30}Q!MlL0<90s}IS0uE#Kp46f{WT( zQk%U!LCiWkoXC$VFMj8XSJ?KBOj~6yrCqXI)YW&|9m6GsEyh zG>yZ2`DVM|-I?O{ytFRbpZo>REJSc)qC#fEnLZtbCXyCB-G*WJJZImQ9-)jYJn5bT zGSb8j=E0lmq?|J7q3vf4U`AUwm?FiSp5`axt$rBkD+FLi`r4uk=Vdr(yQwdUK`Ks=fpxVi zCgKV!6mnsg_j@FK5l-8KF1^&47gJj@wz_i=sW*)`mUoOAz9Z`n{9)o41S5-yEMTxU z_2T@Ol5D<+2K$H6b%}BzLo%I0TjZY`ng;CbZ*B84V?D?yGPlPLIig9NRpo?=K#Ps*~9oqY$ti zkA1s5cZn1T1Y+Sa__8w%9=^+CA?uihan&i|6?s017B7V`}(>M-6P3i3R^cknphRdBh@&cPDUz?PSHwo zJYH=N#%#yGw%_Y(yI*XMIh$(;i}Z_Qi{@FQg?z)fR*=5N#N$NFN@@o7w8dI{ZLWa_xs_ zl|Rb4shZd89y)E(TvyvVTIRcVy_U&yResl;3HG{KDjFTPI+1u@;tE2BI2de+ai_k5 zzK1z%+&Mv=rXB@N9^A$WIAfi*F}A)nbmhJ3xpoBdffv=7prOdsyx%Xj2c3Hk7A_BY zj+A0!-j*enS;f?oRN6tjpwEoF&tILQNdt&f*Pmk25)}%-mmpH84fMc!jrYbX*6$p- zmUK17@N%*kz z<+R@^KGRe=d^mYeX=T32`+-r|FOpG#KiX*I zdN6~jRvlw)^~cBAkZ2*!4q|CJ-(`%ND?m?H|VQ(+I}qjo%W zS00VHUIbt8irajXNepq_1;)O;1X)B*Ynsc=zapy8v`b2^5Al5%_VMk?`@Pl%Z%p%P#SFqo>FwE(p@r=ICwui^8 ze8F#oc&4`|p{3L0=RmDf`wp$%;1eXw#dw$E9 zYrdA@I{o%V^TokbAtC>vRf&HsD$o1GZ_~w(PpjffxBHBDuAS?9nXB6sBX@SYu4~W@ z$;-l~&%fNoD;=lM)_lO|cz7@S!*x(U`1LMfBe5Ue>E3;@OB-$ElCcmOJqU~2UaVNB z5ix_~Rznh}DnXL2#eGAWl_Vx3#vvV{-uiX0w+?du_-snparfpMVX!Pc}O|H3@JgPQ|O}hV(6N%&HHdBO!(U1rhoYafR z^xH$%wX~+tT*K}xQE?WNL7I2(_4-zCPj`w?-t+FK#L+p=v5bpj3F4&Knm=5d5^(I| zkUg{HDp|bM?edB&97Ny#hAdLpQ!i@buQ=wHn*fi*xf|qj=U!N%{Ux5;P-NH%`(|?# zxw}}ZjK5F=7uJ6b#WXoa@!+iCmC`8K-CMBV1Ssh>ocjnN>RoA2g@eAe#A@&u80-6t z(Jw|Gr*q-=ZHFfV5=kMw1V~7I-Q2(%Z+3XNRn>qITYp4cSdD{B%C~52GmEzHa9RW3 zG%Hq`oN!N(HM*1O1iTZU5qeBN78}S&aRChj_!Hv}m=o!hYeL1E-kHcwM7YFGb`**9 znP=N*L_|1V0<+<88GO72vL0;%PqGXZUZRzG-A;8jqv81aj!1jdg*NvY%8~#Ju@O506BkcS3* zFESDXrO3xy7!uT!D9EwG8iF2r6B2!FCwod7{i8*fJeAg}UR-ZHwc>n`<|-}sYGgy4 zEVYS}GC}4-qUZ`*Hq8oe?Y~pVAyT7MPRSmjfj1P1S)D2*)_m-DU#db!sRKGR)1md| zIfR*C!*jd?B@B6trrxpEKVSbJjJ;)4Tuab33<(5x4el-hg1bv_cL?t88r)@&!5xCz z;2zxF-Q9vaymRk;o=^V0KW5gfS##!e_vxcl5-_9`@_r zY6O$>g%hd`Q|&dpE=a$Qvu~C;@#O0g#EdFAAHwSPjL9XZGIISKT8|6+GoK4DBPNHv z(53+;;Yq`iDac7spuOlrzht?7HD$sW8P9Gy&-0#c5r^hAf%07S8qnRj3I#X28qvpi zN*y)XM&#h$Qg>`&5lTFUosW{=x+2NEl7iI;=V(e(EXGj0DAALgSiKmX-ZXk5@g)&; zTJYW$Z)XD1(>{7c3p(vG8G=B&DAgUp50RRfOsB~>Wm2-87LfDhUkdD5GG)@uHJ4lp z0PUb4_mAty@;+B%Wvyn3jTR^3+Vgj(aU7jDNo)a9Zw}FCgO3o^{#gfpG&BwM*EgtP z#JiLXbG3n41M*3IkGA&PZlC3vN)fUuYW+fy1s}KMTXGs0y_a$^F)@ARR~o{ZPdk)Y}Y+i~N;@WZ@h^u_;d4@|V(kV7z|sdn(j3Mm z5^*dR#|EI(vX|!z=%>gDiKoL)F)<@${q4w8JAg)L14h{FegV41S}J`NK6u;@8yr?F zXVP<{+xA7ZR1}$}HD$|wT<@*E#KoI9?G-LMi}xj$U|#{dsKVUTj8Iy{1avyJMyzxl zjrS9}4sblLGv6q9G2^4J4u>_K{8m`(-8+l4>#4~=niqE2OnL7GCNoK+d&%73GYm-C zs?55u&=A1qDq}8eI(nC5xB6~zCz8g4Z7KL{IgEi;8XFG8dwTw@lpv8naB~!wprK03 zUYn|lc`yRA7>ho5L9OANO-;5!Y>$wgkZA9%=BL@A6iH8x?yOhJphd+je@s`OPR6{~ z>gxMExVkD6f8jJc7Ne}JMh>tLi)>;7F5lpc{@$^8?UcKonYQiwU9NkxA+xNlPMHh{ zPqNV>i6feq9^z8X*7EExZQI9uExCpd?v8Pur}3?USrzOf<$HMELaG4xz8Umam6HRxQR(2zd{~*YgWm zvsI}dHD}N>yIa(h8e)Yj7y!OB4l>Cj$B@@n6#@3^?zA_`rBjNhc9N=^%UlW@PWX$& zD@K5*eFih&u_4Fq2aZV4e*awzy|x^!A$W&qKaB$t#DBhc(x-E8tyVSDG#buA3qM{FTG?eqtEgmm$m@b|gE+kAdjk zNsW1ANnIvXm!(cVbTxU@e!pTu>Z3p~o(v7GLp^(`DQ0T>(^FMNHX*(ab)4)3prXS* zd7q4ohpy^S+Qyt+!{y1R#fiCay$|1{BV3AMp;<|>PWgiGyELv_)fk;+A5F76GigWp z8t){hj8QiBd239g-Efn;lz;jtDRbp@n@w`KRBby;dk0r0ZH|U5XOhpT?eEMPN$D`- zoN`VxYb|;eNt)rWSM>&dv;c)kJkpvRK2W{Y;TWessriG%SqF3cCHx0>!B*^Eyk;KS zbzhIfNz!|_W~bdFB`ha z&fCq7?-WLXEiU3mwnTvOf(&Bl$EX05Aod%rB%v6`W9R-#f88gp$}h9|NDS39H@;o& z8$A$YT$KZ?ULN>WT_1c^moHq0amV6yw|$SH#7}zurdUzvq*(KQpAJDH2kx-`eMhd_v$Z9{K zE+H!rkT?ET^34c(hnE&pnh*vgX`YI9wVps>lE*Q=eSGKXlG6@TitnU#YPp##_{D9C zinJ1IAwg|yyxc_A4PEB;a*^fzBb%J5sBZ1g=0poX{UK{S9+^=J0jy)!g#()FS-?^) z{TYqF9w#Qmhtw$2X2@NN__cvpkH{y;lfF@S(?tE__WM)69#_7>m(#_{UJT*92-=KX zWWd7A&w)sTp*R8|?UJhw;*m&YHE2p2BnjT15_vke73420E(r!bcLQ`X;{b}lfi}adWf@D75!3JM1Z8Bkb^Llp8K&#P? z908~Dx5fD6EB29ClV*h-3WSGim0I>G3i)}!zR)zt{?S(2IW%)7sBF!(BE}2#FJ-A} zu$dlc>3N)up_(hEF%PS~(}A?R*Y2nCA{1&2c8Ewpa!l5G+6BMLUnlF=t5=0)VlSh_ zwS8FRW8_7Et#EPxGLkaVmyayGUN0=AD}jFr2>{dp;v-La4YXckKrE#XN_s<86Y zZ;faDD%7}AxtI<ySMx zMdU(sUco1!q-(HfgAEQ=y|ns%QY8aS zt_3;QJ zt#;yaC%!jI`q0-flk4e@!@8QD-m9po!sMm`NDY7Iw(m7nuNGWt)&e`%iSkA(_M|IK zvUzX6wr>UYphEjw9cI}L6pdHqOfYePkJ{eHBe1a(hm{$F-*)YljP9;M3^1c`Gp2@( zAEL_~GLfUl{LPfojRx2uyAL?f7Mz_*FFA`2{f#wYdyijom0guGFyX~8oEQR6;c3D> z;te_DHEo9xu7ibYen~3ejU|@pYZ?o2|NImyKG_R;6#!Z&U9AdoJrp8%xcZV2>X=Pe zEp8yDIdQ}YcoNI2+YCem*5}kg#5?_k#{Y`H0*_wCKpk49OmGMSFHT^vp>)$ByEc%p#8T>=r zt77FpsR3w$COx7vs2+L%xIOn4az|Dp#$Rvk@gwPt+K8<;Zy3Jh+(FgJw?)Qf`vY7kS1b!%fktbj)UzOxXEb4f>K2Tv8lU^@4Mvrqf;S^Td&OU+ zN`6OgWM2Itls!%oVkkSE2oMskC_`-1;?!QfqTwA6a~eOoko7o~Guz|~P|7nM^LVjl zmF((%B$!eo3h0Bt&*?}{yv&}2obB9unhmSr*X;)@IPZTOe9M}0BfBaQh+NUsD67(e zQzz*>BZGhx;faG`=FOnKzCTzd*56JNSS=n~-(<+{IKbc=wVIluvrE0Cp{CZA`&!9; z`yAHdVTcC^msnmk-C0m2k!Cz1fFMK8Cow~?5N2oyQnoAjWc70JsLe)&-QRC_dlpOh zQg0v|vhlNDHfgIA7fr)KB~c3LdzLbZsvN~ivNKUziZs87l&pPIYm$gY3fl0A{3*m% z<<5Pb{QmxsqYu}EG?mK|kx>2XU=iN{ol!$2HBt6_La*I(d@ob>>RD zUapS8;S>EpA|YmtboyG^UFXWHiW=&K+! zW*Ie1ZRE5b{zOv)gL(lK66SbVGK;7>dVwJA9kqUkUdV9q zsXVB;>&sLPmHt2PzHpy2{NEDN%6T33e9gacm4=S6qS(MvQ3Bd5vM>G6sujMiW!9U8 zFlaWVI?ZR9=moh6M}%n#2in2m|M&yfXU@nz#Sq4UZfI$QGZ44#&S_HYrZd!78LqCe zt$oh*_f`k|8ht!lh>&gB*1jO-Pmqi~k1paj(6UzbhButI$t~1Xe1tL40`|WN1h@J_n~W=$v=^ zbvvM=-#LhH5Af;wxHHkC_Aw5BHtp97U|72|xEc}sH&> zAnWk*>#Uk?vv;NDwl^%bv*ZgkCe_gr)Fe-#UN@DlS0>$t1UcyaE8*U6e<~91kPzLG!&l+{T|Q zRQW4{df0-JiHQs+k@z`%kqljq@ z^}akhB6j;9^D-2UA)WHcdfD8CM6t?Pah-^Y~Rn5{Fa0>RW* z7~$EWFS`35lHyh*-U>Xba)+rHhpgLM($S|xWDmtCo+o)PPc=q-ak}12dWm}NB_Z=( z3@GbqdHLwvo9Yu}?5Jzo;%`&d_I+3Hgx>E=zk zRDqvYMA?Z4k(x3`aj5ks@-To-*GZyZ`AZlhicTLd5*Ix@)mg}^JVIc2L{&xqpi|VM zP!sW{!d&`9w=FQ6^bFfi(NcKW{eoZ;`GL%3i8!v1IuKIqws%s8{5z*3n{&e_PV1E1 zWrZy$@+v&h4lr~?*P z>}S{j_72Gt_Ca&%k4KZ+ZIyh!=DKMn|H@XurUj52d%yP8f3gusEAE)c z;13DU7>ajh-rjqN-MdOe&O1q{<2GAU1eF87?VdlRwvmbqqK#{+V)RdL49w7{`VIH< zHE$whx}R)x-GrjmV~~0Ng=p;bAj9zIi+4s|%{Zua9edw`{=LB)v=An@`y8>Zc=X7Z z?f>keIJil#kICuHe9^uua?gE0hb&+LSxn%@_i~viTI0faBj6Ep*cr`w@chzT#5VP2 zDF0O;8K0Oh!@2H#VA}hkaBoq=<2><6Y=(E5O;`n^)V3L^-SMxgA3-~H*qLC0U1?9* zrhwtf9QEI4y+5ShoS*qVb;SK#xg%z~elFm0SUo0i9s)!YWXibgD*O3eVr4%yFfPis zMH#0**}057qI?CrP*URyzlhF~N(**<3W&H?I*uikF7T6@v9FGY7~;O1Ly$V@e|3m? z${FfwgoRnBKQ&qvb?Wp&7wP$WE&AG2CSE-ZZOkJ>LrXCXC!H`;R^UQd)0O$Kg{Y;| zaB7%AMmFz!k+Kn>4%&nnH9am*8Tz}yosbNs+2_^NAMtAa?&On{X&@$EBR*tV{(BSU zG*LnTNs&4)@f?>)qtV%@3vBmEg}9!wZ`j7-M=MQe*zBaiA)HYQBnj4$%7E*uF@=MKNFmy`;>TfYEH;YrEx!>fUJcRQsuEaRe zJC)k5w$kYBlJhuNPtv)s6hqlTTUW+~-WiC}vNe?K?4qo^cR;i-eY(lFRC<6%v)a0e zlrq3zl7Qix{_nT@sCKuTyqR*_MheOm5#`X^ul|5`F83hSsPJNb!M@+rWXcpb#hYYd zcVqGKF;L3Nl=PJyh`8XP`Ith~(*G^aC)l@p;Qx5tW?p5WuOMbJugA(79^Jk}-9?n$ z_U4PPMeTkTHf2`tV?ax$d^|Yw&^S_|Q9QEeXX%GuRG-Y`9h*p>^P~ivY*mrq9uijZ z2c}brBnC5Xw&TMvW^!DU1J@*3`0{Ww0cW% zdZ_KCfDCqUww(26=Dy2DF*%Nl8~zsma~2pC4i1rEOwN+^kM3VN-(y36A~d-)&Q2UB z+d*hnR`-2N%H;nYMZpygPc5x{LvXy{T|(eJ?tCrkHn%h*C z*fJ}NDnc3(&ioEwT>TL?M(^mGcI+WFU*_p_XGmeWMSfLN&5nNa8s8eV*`*UpG$n#= z(AL)PU`Oo5tHKY%K38g9HR|%0b_ENm(&+Kr5i;U*{H3mkuou{Y0_x8@9W`$WU|9=agKg73UoXJ^f#4LxMDo;H!C zolsMr9`X2sNT#FNNr5w;&#b3I{fw`?jvJ!GQNv=7(T^rBqK@C{dMqSSlD%fhGhBv5 zuL)W%=#9@dDVJGb*6vy9!3)&lb~&E{oSFE~mXv5~^`D~5*^CZKDYsK35jMkKJ0spiL1Ou{Y$odOsBuWoWj! z5k3{MP_SgVo%77*iL=IVieq^?18e#%f8_9MqgpANMM#Q7DmL38(R0|51LvXzI=th* z&h0T~i3VheR@>RaM*fNfxo(gxP&b&y*^R&LAGdzb zLVGgVdfykT<>xkZk?Lt+f$YZVIIvnM8c#$vs~BO$8f!edsXk?SO*8Vg`+jcuR0gkE z>%{)FkF7=MHQgb{3bgQNmky{JGapZ9x1o*Qf>s%}Tn&)t{)(h-C^o3qmT$UOr8N*5 zXq7p~;c_{fhNx5Lxvb0KF@7}79yVwAYX&7Yf1Ogg{dTvGU`CgHnaS_(ul_Y)BlQE( zGXpd;QHV;yX!Vap6(%^71}lZd*m2m}-m}&!v)Rbap<;{PtIgl-`%T=A#oH<%AhN6S z9oD@#Y(|Q8ZCEqh3x6ywP-x$MQSb0muVqhJYrn$;(gsRv)gP~AJ7G;{FrmY9cIMO~&yXq`?Ip+7`-xB->LrEc$UN;RMR_ktIs7C+k;E|1FLfVSc$NF2Q$Yv-(bm#;4@^!r)fV zVHNXRu;uDBshv>kZ7l7~`58y{eao7NyP2^W&(TfkK@X@@uoUJSzP6d8K7#H})f8IdLo*WJZrxOr^RE)?YphleA7+%`b^33TL!a{9{+@11 z`^n82!-$IgN%22_lcT-b;4$-g70BSZ7<_+Qd2TH!a(g3-OQ{_e_?@n-{g#{}fn{!* z=VpOWgxD1s#JPi(i4iT&U_nZ zQ>~2<>C1;5^P`2qIm?oU(Vv2TrfgcBy7$PI>Gdt!uccZr$f>!f&I_tZF|5Yg+udQU zu1CCWTCAU7Qg=IJHLCQkaTebg+gT$ESmJUYgT;#SS}TJ0i8sg4G<>BO--vg5-q=tl z`)jiVtMy}s??1{6zbihvnVzxF0IfK8%F723X&OfFOYDDnvV;&Wjp%T8$j|@s{VG_7 zpk+zQz%1c8EYaz)hsfk#o;l2!IiBi9k{xBr+qNwCE~Rr8YLjk(Fh3L-v(ir|zx!6> zXk2u~b0*R$bM6FuLm4iNsJA*jSamsXvDjEd8o6&9Ug2yI~XN1!I&a7`pzy%Sr z_I7c3Y~1;%;gX&2btJ?^cvnllw}dy;Kc59!D$nx*F*eH!?XU@dBK&985S`ZenJ0p# zLE`w5bFt%tYk^evjj3JXJ#q98HAmVIQ?wIFB97i6!*BmA<8QA&&!R5~Jhn{GS06L< zD+T+z^?pM8JOGfX4JHxv?hOaRa;}%Ft%n#FTm+A7CU}oLsNya~wS6$^SYY2TS(}3J zNF$W|{Uh9|J4Yqix^~J#PKOaF*zTisxGiSj2)Jsv8$H68Bo027$B_zWy{{>di8m%b zaOsUvalz4;xN6F}=_SK&XOR+|l#4qp7NbuH94mNfoRrSzo;0f*BVZm6_(UCi8MAC* z^X(NU#v;yQP89kR)cdD%U0PvpqU?qDP`L)hjM$dAD($FqGO{VfBh1}(OK@6r9wQrT8uhxZB5Q)&5$ zRIYBDH}W!T8_3fh>7!nu+dn`@$cb%&L;2Z(c0^~qbv}c}UCtUzZ1|@Q|AY}zPz6;m zc?rPok=Gx_f9QFojA#Pl8(xZ>Mc_(;SWN)(EJUVO|PW+S1Ea=zI1;`2FRT4NUFZt$RcMluO!oZI{B-!e(#VRv#W_D^2JKQcp0hqk5wIX{y<1 zdkOiD7^4zxlr=Qq-!UJc0nZvqn@@zIA{@xjudi3dVAvu}(uN>e}Vx*-m?d8S^o+3H6 zfXcz)(k8*i{(+Or0*3(x=I3f;&g0Jsp9LK6U=S~h#UudnBsDZ-00TkC@=w0WQ%1WW zJpdp{D0SFJ2lRO&6|7j2AgQB&dsxZf*A9D~hc{J6{QnF}Z1a(Wb3&uvFk#bLH#L3K zGRTLN9zMT*`GLW%?G7(?l^*7YwHR$5$Wg;*OwV2Lk8}0An6w+&a)OYh7Mk1YPXf1% zm^GgRSWt3qg9v+L+@G7N#-Np3425+kLe36wwGf`fgS4MkL>__8^4y<)pud6MVt-D)W&ea1YrRpJ*Np~nbC`@7dp7(NR&v#{ejx+qfUcG7(gH_an^4!5oBzWuKy}(W^`@8VxSy`Hd&=QP2RMBTrv1P zUg4Yh-J;_l(rjNj7dxyt3!;gi?+qGc6kF3*jF_%@Ph(E_wZxO#d4?z)j+rgQ5ns*7 zg(*GHCbmCbQ4PuV+_?Qj4UfvLiS++@(x1qEd9{z&wgb4!9fI<>?6XXfi|6z9i_as1;3FCLtn4+=pXPd`Fg zF4cb*`g{35Y$Y)Nhi4m#=AEcxaF@^TJp1bFRpVZ!8-5eh8}M`XBam4G$mZa{if!uS zy7(lUu^zSR|Ng5ytZ=?)u0oFY8TnFS=73b!WglaV&*B?Q4k--uKoRT-De$SuE=D4L!9X_sB`Tl$P`omu8h@9c!vev%bUHzSXcLY ztM$kW(a_meBLk{Ucfk)XA3>($oFju^&9HP{!y{)W*&Y zHx8SV4+19MnD&3`>4QBr`BP9HBnMDKx`F4H^W-{4ksjY7CH9p=2gJHJQl6P{$E#R{CZpNx@MBPjUOV%EeH06Du3=rJ+Y-3>?MrNO9ta);Uz5F1aKpaZ! zn^#ux0*{1==DIjjhk1t1^x8}dAI@6rnEgG6+hs{W$d9pk4}g^}ir4va)`WDq76{ZQ zC_DaaJ@KEJ`_GzgLWD&2Po1~U(Cxh(tTx8jE^{@Clh6v4(dB!1mR4gP+8dfR)C>-7 zP(%$l5fH5QfNU~zgTmw2jbXoPCEILh{@Tz2`%N`EA{4HFNa0VV-2W7|!3Xoc!Ed!_ zj*e=dO7sYvsCFbV%9h5ScWhnGR|5{@`4|W9NB1XoKH8o>Hj1lN?`;aZ@$|J8%Qda-jME(T~p&#nK5R!_IN^TVIiT=_;d@gcpwFcH? zuv(-Dc>FPc3}A%7baak$hXQ`OK63U7*fI~9JNtXWC->?{vT&FP(vMuWkndv}0m^u_ zB!(gGe@W}R^X)E!<^)Ja1ic}vg$1;uSWy07V`MNA8x}l_tnGR(tS?QA=!nU7SdlM5 z3l8*)Ykki?HKG?k4&_ct`aRRGWi~4ja6UzeYS;^s!)%71UJ-PW^|m;t-&L>2OIqKf z=n#2I5&3FTL~*s6;A-QHW%1fOCARAsD50bhKiN7TVNyRvQQx8d`VRlA%)GedF~Dqq z;lGU!7rdrE$Qm5Qbz=AS;40&BvbRF8l#&PqpER_%x}h-p$2{KII2r}ggC2%gmT45R zNu-+b!)`Al?(VE*KZNf4~Ch2P!yJQ0(u+jW{w)OlFk<7b#+qSj_G`_#Xa_IM~0~uGO)O`5+Q@{MXh5dU7 zx}1Kag@poNE z!C`#ezJ?-R?i=cQze#6LBfl6m>+M=Om;WB!1=qEvo&TE-wmm~`MSarU5C6S8UWMJl zmxFKHBVCR@aZvU6qL3rV=!jqNvYp0|_bU;6RfpZ1;))G6MO)s>$sqV9Q=$Lu(rdAi zNCFAR4J?6Z7?rADpqLg{;yhK^RZ#El|vgcaK9 z9Vgk;)f$r525)4(9%Zcg8X0`rIn2X6Izi`9w<*k(fPf*KrMTwApQlrn|-eV01#=Q8$=C&g`6&$@lw zcC&rgR=I+|nXjtFvM)u!V2ruqAVoZ`Hnc;MK?~4(y{D2B>=3C_Cqu=7mv0kov9kIi zUBJ_CfTtDR<;C;xusrZc-UflU%7GB~-$NX<68R?`RW^$U3r(1oZPfhRE1Ly#=n^Cz zugD))ew)FK7;YEgHX>kMT_uro$gi8hfnpD)?ER@FW1fS+-R}-q&&G2GSl{TuWJfTV zdZkt_|1bcb`pt^|7%oZwbTe+&-iFG`;#d!N`zN{o^WEzySb-yap?M`vU@v10=szHA z{3YN%yp;%u(N{Vu_LCbqpPz416d@P0@f_6wGaJ7bBcv{4q#Z;^0OllyX>`c~L$Dm& z=n_4YjIyse$uE5Xnq!}Nh5o4j65&fprCtiq%L3W_hff6||6%I#8gfGh%F(U>!IZ%{ zc7(wdIUKxED%|=Eslfruy(ObnOCL&bQSE?`bIrE9Oi&QiITbVd(sn*5>-Qz+zYz3q zPSFQ0+W(+Y+<#}re|GQx?(;{GM1Vhh>AzU>pHX_uVTUIe6r*JS-+z1uCjk@tzoPwB z_|Epf-ywpp5_WW~1qA-@b$`2TFzfBsSHPT}|BRjCqX7pzSQ8`$^M6|t`e9lC)*<-w z|NjYCqJ0~BN6bHUpu)M;2Noc$*Rir?%!otv_d`ALGvbHoHc zG?#$S7=wp7+!A>9gMtOo?=L+HA32scRCv&gCn)Vv@53zleIH$S)FY-EmolccDvR$w zPObij@=PT2llJ8!9rh&WDV{du>HWu%iCI-(&IPBKeA_76)KH z=X%VUnYEZCBPpI_g&Z3z0ff9Y!%LM=z>cnQ=Ek!q3IPpZbbflQWVUc!OFm1(?!_nu zq$zjj1gnt{87*tJSRzI@sS%rD~_BTwg;=ga0 ztgN11Ps*DNiZ_XReXK3h-i_+LJPa*7wcr2g^)UcQfRdC_zh&Mq^JnK(_PRc(R-||9 zHFYUCTE(Z6iFb)A92EA#0H}!aZMu9KIB}SFlNSvrInK1@Plze-LJVt?(!k}l8d)?P z=KeBlGS_*1CLZ^Q8|R-qtS?+_dGA%GBJ}(cr2T6l(3JM|$UbJ+u1%NI=M8t34tZ}u zl;>iO8BbtUF`*5Z_?^ypI=2GW`S<$Bk1p&jZDE4y$epArS*~r7*z=U|;v)SVyCwa6 zy`+6q9o|IqY@g^fE%U2CEih9Y%a^lOIOi)#3}S8JPBl(~JF%A`(iq73=IZU-;iJOr zwO&)HQewMw2-Kj|K|BAH!XWwmy}U}iu9j&(1Mi%^wqTKZ7+{R{6*lKv=ET=T$wZYq zq=)sE_%}Q5oPdbHtrSP|@|XzxVTRh$fh!7EmE9Zn%v*- zOCtu{CFw8UIsLMFO>q=*i{1{~&Ho3Lt*8FFF&_#fyx;Gm4|U3PN)=JtrbjZOsawQ}v4%(ioMC)|Bj@f5!Jy z`sZ!dXbKx@oAB}AzZ(`6C1%ABql|Kryz#!+PX|7Y>9z$@3RZ80Z}<8Z(wMhhOMn;gf8 zhJPt$J$#qv!(YmY`iK1HsQSnZ6Ozc1wD8|?6Vcu z2hWncN`}F%`AU+mA@ZI1Q)VRH2)rNl0G2YWMkIOx1Bu9v08`IZnhHyC^=80E>kn@G z>Nb(7Uy(_mhCWif&#aP88*|%GA`KW24WbI?N&26sJ(xz^!Y91bi-D$W$KlfTNJ95R zY%Q+AqRql+=}tw;UC#Xa1kn9m0)vbS)n9U6po8E04 zTc=+IujbkOQJYmU?Tfy*zTu5*9;8lvh}oT6qk-^K0AOSOkH=*Z55_Hg@4JEZ4>`od zqy%{hE2}Jg@$p8!MsWz+#D#or+U|k-V;!i(9!)!>RSui{9{B?C8wT{ua~bOj54NXd zB6KMVM*2id7)4~r!5HSWHdSm%sUcXEPDeIVBS2ENxS5QFdB3EQYRVvN(HGkFnl$)N zg=XdeASwijwi0|E$^NQLIFzzwa#nCp(RX_`tPzn@vGk@95);u18+!akOl4qKfLw-( z^st@0j8K4%c=rJrnG7I)J)xrJJVlhY&(c1JUZ0k#Wwp#8qG)#@(m9f)N4WNTiUsPeBsP`C%dv~JeY06^ z&hBCS%-u|ndNZ{mg0R$@o{&yr=?0h4s3!U?;`R(Nfx*Y$rHGcEA-A3<)U+tCmsBL# zs*NSjnr4hXcc2kf*Is@-tG()`jkCTra+9AsY^4OW<;8f{TBk@UFE z;~TEfcOxxLFG@jsw|1 zRHQRh?SS@)qR1=}fT*uVo58WK(k!RhWrko$m=4$xsu&>0t-qSTg%!uYDQ#q^r1n#Mf^rq>8>N_IUXO92MOz1k>M>yZL4FV!f{aZlB4O+ zEw#3!mT(2vONto9gCt@QNwIHWp$KjMFs}9iS&`gQ>!W3rd#EHL|MLbgi%(@6E@NlI zuG~04>g3yKU4NYvyyC#`O;gkrzMm@KdU{lHky3@dGn+|@iB+pP+D#k#*d{zkvE)(U z%c_gRl~#wKYnnJ{fXOk}kN7<%U-Z$O*kWj8AGjiV0vvMo+)XI{`}-{J-Q!D_82i`C zFy}r`72HhAg8qR>e+*X}T4sa4@BzjTMbGQ*Pim|6M?9eg3WBKu$H+H1ZNTdD_h#!w zrHywIJDxV?)2`HsI_9yWR^RY+SK(&@cLHkSsT`2jX_8mNg{Lk|8C+GQ&ORop2c8mn$S?0vQI`(<9J03jMOTQQ9r_V7J zq&W>xJewz7FUQ0wb3duZF10a2l2v>hK-(E`#TPT<4*)L>cGh!l!l6Jz>%fU+4Pu3A zm*S1SreFK<@v7x;jJr)zUwhF-DqgR=z2sWbV%r*M@)XH(1MAOMLJwN#HC3P(*~&FL zKwo`}Wea;}FF`J+0rj>9}+SivGkZbz^S5WfUzMT=XnMc-*f{NqZl5T5J4CX03wj z_@pKKbuLuR-k_HrOaOTiwgv2X^7&r=NJ4B$wWf0YGx8FCsvqt+u?&Oyc;a~RVaKnG z{kxYa%yB^cCH~wqe0Hi>m#|cb%21iVfSm`W=Ua2aBqx2+&7< zf8;Vbt?+ZYUhtwc%xdheVv>ORBc;YGH9iBod{?$awKC$$2a59T$71(V(ICU;y0I0C zr8FjMf1Mtntu6OEV3aG@6@7XJ$%p$5`uC)P!YBUa0u@?u%Qv`ONV(z2IM4fuNiD3h z0i-6Axt}=Bw*p#A^n!*bgBeF#$$+k5vmE+rBbQU5^~hAy0R7HjDWl*%re56nJIW1B z_H;nj46GLFGGEx@Z#n7(f3h*(tmV}*Oa3h=d0t0E!i3Ss>&__6nN!u33ZD#SXL@P7 z<){ei>~VptM4`cTSB5`2eNl%Ul9Pk>hB=sdMmJ;|9#8C@20G$pZ2%z5=0wPD-P0>z z_0gyNN8ucK?Y_mk+bU+@kItQ#xPv-6U^h@agX?x=bgBA8Z^D~5L(-n_SCSMO!o~+o zb$eT?McX$(gEV5xmP;(*2B4-bMB$<{U5!7M^6tg`sfA3!EN42?@14a3$+8}_8(L+y zYA^WLcERzrgYwFKbAsG(R0G9f{6N%mJLw$)bKE})TpPgrs3nDEN~=41P=BYq;i(yp z#Y$v1)$4G2uf(U*_eRgGB4TFtJtCh;1FS-lwS2qG#`oT@O_m^`?xq7${#0*a=wb~n zwXx7S_%sRA{05Z%&aBmsuOPSIb|)=X(Fn%L;0V|P-o9m$ZS?1$?ti>n22J`?TLv6k zSWH{~*3Fc2aD8EGXyY}JCeCE^ZkS~OV>>pZ?f^8!;uvF%Ycs2O$5N-V8PA^{* za$t~6L>^ep*6w&pHTb#nz=e zhCI#jOeOYPl`YRJ^?5%ksK9@KjYC!lPM5jn#G0;{7IBFy8m!QjYs0u{X% zGCx*rQ38lTMtj!PiJsWAXN$yge-hPFLFwwbFyW&kA8#>i=J&kkJ%UbVqr)F{vQ2(8 z4-edjXY~Gk-k6f094G-;>x9`3c4g4j?H}6y@x+nP-&g2&yK<=Y+rHAs=LVev$F5K> zjzG|sTFi(m*cehhRdL^_(WN!zB@P)w=lzR2|J`@N=#DU!d-t`cHJ^K~Q@5&1YzW}> zQ9sJog(W0Yd6#d{ao2B$gHeSUq}(Ipcek4t1`Gc$pC5QLmlEkqxSNpxJ$P2?wtW{J z(MI!tzU0#*{xgV`7D4A#{N=UR=lOaFnw1`Gh(Rka8k&$961p@X+W0_^Rqij1i)`Uj z`isMQHwb7Sui2Y1JYQ%@eHSd9;t!ExmSSf^ouQ9Cv+Pw4z#!4e=Us5Eh(|=EBlG z**v=7O?Exwacg8r;QS~seOV<>#T|hArOLRwi?jK=d9sDiSsb|rpysJ1b?gL+^$(Wh zdAv;iin2buia_Ofu_dj$vv;#Jb3oubMxhPCj(`cb{Y~0qZ`>~|rBf;MdMEL=HeiOi zW&1Zu>iRu{L<0gjT2v*za`RR#H8(jZ)v`%&@^JI)N6Kd(Q*9fBkl!^FIfWcwJA)a( z0KS1iuQgOTS=O!1?$#nD00TA=bItA>9ktXqOfu9j%Z+IZ<{KmA7ganRriJW0w^%^|ORtCArCR9p-WEp5XsR?(ZxX>CwzKdYlHOBH znr+8uMrvpvuSVk`QoZS_sCqo9%R-;EGP)AYu{B#um#n)l_8x}itOs_n06ylCV1b`g z(;l5fz*)esMl9ue%(l_2t0C`~G5vv)lUhWnBpyL`!r9P1s*A@kwPUt*ZH5uY1Y{BtG&&Xltkvz|8U?( z8KpPuJ+Q5)lrkF7u~#JL=uS`e=`{Il%!=?>WyQLPsPHGIpCn1B4%t>XMTy}5koT8S zaV|jvAUs$SAV_e66M{>C;0__UyX)Ws1a}A;JTORbx4|ViOb7vjThPJX9R_D7_ulu% z`+aB6o;~|-_XlUHAF8{myQ{nF>8B)G-AGR|Y$lP8h4Qn^`%=x@OS_R^mCo(Hi4GD2 zUhu+E7RfX_DX(9D{vSC*zW1-1=#iDbB1vV`dri~2kjnFyp6*r9$8LMO({Puwl<#)R z=m_!=8}dcfNu73(e>(PqbyYH&Z{7=Ns>{ojgfv^8;ZC5arG%Sn%Gl%b0o*$$VN!Ak ziv*z4vTiv+z62g@EcV^Gj$;vIlD1Iqb-%5o_6TLg#^*|Lvlkt3~iOT%!RBT1C(4$-IU|;wUzFj zVk1a-nD|zwqU=+;*1r5M42mhmVpY@PLuIZN={6roTf0?MQOPL5fjJ30R>YeOIpDDq ztroq+nfKiLy<{OXh8O#Viby?OR|5Y%V?39P8aNYs(^U^ozGw@!+y1Jqrk#2Etwa79 zacak%wyKtq6v9x)IId&hjcPM)eJh*>gaD1ReKxw!~EhJ-tma`*Mjlp8s3 z;?RseBkS@|_`T#us=4Q*m9&z`4<8TZ;1FgzbLy6J-IUCau%>0x@7k!e-b3yRj3&^%)RhW2 z&nP+>?Wp2DI!Joh$Mp zEbm~ZD5;r^|00)sK^JS@PAZi=2r0%8j$RElj@s0!X8MzZ-!O9Hr6AZ~lv3pfp0G-v4467Qf(X-2 z{5wfc?v&Ws>db!WS86nL8d{)QZa5^=(ao{txvgNhOj3)OcI|S&gY2oH;b-v~6#h>q z)f*pQ@4LRP6v;>ZeJ~r}6)m=2yS>G2y2JSK%5k;r^F!d50ff=XU;8^MnTB3ha)(fo zP6g?Y9<+Jp#4~8YmqRZUR;A4~lkF?4uw}7cjlS)#>vH{MKt~P3U~)!#%U)^VZaq4J z%(FC-ky!qIJSaCw`UiH9*J*XjpPbgKH!+%+oP$jS$SH@*(NLrsNZqqq3i8Uac`1QY z5hSk{W?Tl(&_hKUfb0Cc+QOZpRT0=Q#=Zh-Xb^K{jh5Ke;Z!=^cQg(Mi#{DBI|ZN~ zQQYC(!ytCgALP77kr%s$XEP}^wpwT?LRf{aQDF{It7wUz*3MgA6c!eJO=^w(_Ch}x z6%o}uauF@SqA!_?%${O3(eNX%xRl3H2<5uLF8(MMn zYi}%@JV|%IiUVuntF8c$M^ZaD#OswEZPW*{21W-V+<3xcF%9GP9+L~)SccbwpVriX z!l9^juB^OFNdwr2D$}`e-bd(CNa|g$-7B2|7OU{bmEgB|4_w`RUOR&wZBEkR!H_YNqHEP)}%5fQPov!-8B zH9DKt2eUFrI`Meq9IEAF{r= zN{|aEHV#@3k$*q&v+Gr=O~tbgjo(Jm2g*kM_kJ{5eI5*)L^Nf00p!aTV%M8Al)5O{ zSLaRm$fde5-w3Ibz9|MX2LUwMpT5O+8uzArlPr6;siqVRx>^4q^W~!*E=!OSDqRdn zFJPH4jI2DjL3OG{@~A=at)wR6C7LhARb%Dz%og`H7|s+OWBnvDkGsH`j|d3xuT@mV zD_vd>;dw>7yO9RnbL?tIl95^v_%nv+T`Ow!-BN=*s@sD|ItIdq$==^6IrflWcRsA4 z^CiY;(PF=Ky{B`;OPvsW=e1o%LnjpOKo+ZCk9y)sbLT{Lk{`L~kvboMxp(yiK))`E6zaFsdgM)OJ(qFf3h>Tz=z}MTek;XXX&v?OOjiio63j9R^ zOmW{AgVcy@u=03g_LgF(pwJNOgGh40Qf?Zg`OBid=|1m({(#J77NoJEjE?MK$3Q{G zj6`wD{Q<+Dp8+)q)y7#elGUQ0Lb}glNz2O`-F`%?8*Z!>|8hphbMb?hSBT&+Z12f< zt7Z-N^uc4OPAP#8tyr^jS?JYXvCEliF*`F+s)qw1Z@n<|u?|#hdh3Pnyv5ktI#J{R zd5&)TT(JW6hP1wv613?gL`Xn0SV~T3oin*s(`_y*S)bZ3+OK0RZ(E#L&3i<_Hp}#= z6~;4?`g>30x7(5NQ^l>clHMLqcpa&%3q8_?oRhEs&{AWu?l)E zRhPKZOalBP^O3B_>bzg@KKxqPFjMSYQUCJrQ-k<1tLOQF^!^1&cH>@LvrdYVyvMW8 z;`b53Io{5D&*>=rXzw=pRVOpzc*sb+kMv&3!z5O2qD-lSKrP~U9nV8=lBEQ!)$b@A zV`w~r#D7%5hCp-JL{Xs|R&?bUqPLcBp6ASmqrQ*cW~bq+CPT;8HM*Oub)j4z6^zgp z;`OSfC2_0qd|^?)_A1*)g(~h~GNXCLE8oJqmo|J4Ulp15$XE%)(3}%1_9+ zQ3=PCC7I9E?4!l|lqTeh7U8+Sg|nDLRO_XnFrtit@#pF^{HF(j<4bj+hVTKW>-z|o z5%M(2AU|Hh=Xw`==YPnrUT?#Z7`GSiO6s^A!}rpe-D=o|xwBdWETW%l3mWOupRUGu z>IvOy3euzH`ml3rTXWmE@k(f+r-W!2U?alMUMX)|zKHsz{N~&2t*E0H{coNUCA#{n zbR9W8AQt7346TNm%BJxI`U~0#gN!E5ZH~NY`h#^?KAWogH!^ zN`WX#L65~>uw^!@g=`DCXBW4}Ue?~oV0s>28$#tDU2)R0jdn~IB!kI1@xV!g`1AWa zD3^_?P=92ntT7)RL}ymm&y zIjTdC?15LdzqH=EuY<=jiJFeHwNnqLm3lv4x1YopE1if>-+Jv{72u0*Tt-{F&lo4< zf*UEWB~7a3&Pfj9@`>9F<*YtABh|sP*;ds`6HoPL;H)#?X8l}|=R1BC1#33bQ(4uW_d$t|k#2k6Hrm|j+%{_zde4R$qMPY?D4G-# z=6(3_<4Ki+G5u9$b4IEBz71N3|5o0Y-@lS0Nd5Dt5>-=Ezd81T;B_ z3<#r2bizFS6b=+Ju_My(76+<15XP`YEx6T2)54RarFpaZUW=y(czN}8hh$2NP!-9I zYLMwJ`Q&U}=Ok_W>mLYJmeBix_SR=FCP39v{9fJV!Y;4zHhS4y<*w+aWjM}}bmH`mGl#O^wKZk)6-F_GelAVXlz6eBV3?yZ zPthjf`{k0F9qu}{RrCTSmngZE5{{OL1$Y~QGtv2&ED%gl)yLYUZ@-mKBp_kAv@ zyPCRd*};ewx1tI!443=;LS66em^qH}^0v&8;65{69h*6!zKvF!{Rpv|x{dU&5PhL})%Wp8L}(@+L5*z!$56@ke%nPJu{S_)OYVh=V(>P9ffh2T@TJxLO;CE2JhN0S z#r9fPztssTL+xp@PMS{_4jnMUdEo_&S!3?_`m?0~?w&7Qgr6H5vEixcFwBE?P~nXM z2BUM{{*wRoNk~TXMhLE)vP>f5$3B3t9Wx7)hT|ecV`OKLelOqIKI1g zB13zespAS1nL=mlmq(vwQz5Q47I!3+WsSV*5CoHI3uT=Z6(ADzq~JNEtVg_lE4kXs zbue_{<)y@^-}nVf4J%uL`fYS$77UEXW^PgTH6dGC-I=F4`+;6Shf+n~8%aOHcDk4w zl#b@{x(fxfiNNHQ5kVOfC(nOVQjZ2g8~eNrlz9 z;oZ4<9(21lWVLn&PBOQkOy$LX3>Ml=1Kkc6OvfLRZAkiVyOQMuQ1;}OXkD$f{47iT z23wW=2EY#2bhTbzqb|3Phm*7kSHIx z&E6pIx%S)+J#1gQuC_T{yp%A@C$yiV#&(7_QdbY@?W^cN2dt8I)>POOOa;x&!K(Gs zbTAlB0%UnfbFWKK(^zjAX zC@pu_Gf2NdXB3EsojLPkMpf4D2G4`u^r%X*-!N^-Um7+lvcK(A;2yg{fm=aT3EIC+ zz9$V6a-zPVvz+MkHAuABbYLr^`Ie~kkw4p}M?a;4sfWP?b?{1^q zT>J$K_%%5}&OCSZd&x%=VQiFvAGKVfpi|?eghppQQ77$+S5UN5pD?Q=$>*=}NN( z&(Rwmv~HIigjHKB)*FeH7hrlHEs$RLZP~Oga(p|;=nD(&ZiMDugDfZ`Cr~8w&&AV^lp_k!Mgo)yj)H5l3 zD#|h;X^o!l#Tl4ddAg{XhMmeSXk+=Yb0s{0y_3_pjZ^1_EV`S9{E)_+Ct$*ff~d>+ z#USB__xc|Ez(xs?+^b*n&!kJCdes3pc9XAcNs^2ETd(0W%a#>M5RGRQQQzCoPo&!^ zvVMncQ_9T%yv(PV7Gg_E(wiGapz~)uB4sr0Tn;a_+HOAeHDuALd#(cql)d>C9_u%E!8v#bZczjp-J zpOlvVM%ZfTvCo75Ht%wFUtGqVC%J-B*8GAhC2a7`{Bg-Z9eQ~13I;8wFvX8XyJciV zAbtAWz4+l%*Dva7@#~F(;g%FA^H;$B$87H(FDc4=5kr;7hKq(P=kMU?pU@)njfktW zU;c`I72Og$04%WS$Vq}-AU0q4#KVs3n7E5q%LxvmxkbFG{s%spq;S-BljWt_D2;7RP2*B@9{ylWsK-FfV{0)7ca4**UYsOQCMN;gu8y}Wu2nHR-$kl-rsAK+h0p(}N<$B(DX zIghRAd{se2k09-C?W!?ss*D<4`IxbmaME^XVr`eCP0h zjj%n8_t`%V27fQKOzKb(&H`T9#5#&b7&Alb=O#_m`JXI0edSRu)e4VDJGyyZ#a`_d zmArA#JrgmhtT-W5s~kUl2hJlB*2r^=moprJA$N9zgrm@aPW}C6)(ho zVigAX?)uPB?%(DuD^q(J1X^s#RG$rM$5z=N7jGKDJgTz5;oNsvoBYo2HF=8|Pw$$)e$v zHLUUNa|&NAifbNX*u&}wu8zJ~^qtLsH3~K*&3FWojmVmWBS%7>Pd(_@n(?+|#cvdk zQ#6v{U>K_LYbPzV*rUhH5f7>(Qd^W1;$t(j3N?2Ref);qEyKea-BGU3oDL_EK5rFf z3(#TQ^PC_MM@v{!Vl~?MR0_;%kg3GomkH3u+9-UTeb}HOhH8*n7jP+gv0_o9>Bl3@ z!{!7%tZ42apnv-&!L$H=lo_72kRox{Q29Wdyzi=a_j(Fb(;xdU zgp0b=T&At?$sW9-T9KB*)!M5_6AG)%LK2s)+JDqLvFA>d6+b1+xb9t7(II>1EO)axRsX1zFPbS` z=ZF9KjLI`hca%cY1|FQ&l#u zmC4*y6+~Z7g!wiT;0V3d)?^UnLocBF?AZG z6{*T=@ZX_T1w0Dj(G8sHux$+~jFybv%Ul<8MYCb1)YI~Zmb35tsA#hqKMd#Ip+e3t z_dfhCFe?II|4qX-d)t$>a5v)8D4p0(>dmY}L9}t`o4rzghFUR4TzhrR&3_amO6PPN zY=0CO!6vOXq5pEV!C)je9?v;+ib`bEwK_n>IJmnsa=r9Qvh>y-eO}6dSG$Wt_--iL zucH==DokdM%#N(;<$pC@3I$G z;}121H?SQdFZ~)e3+BHE(Ld6w8}g&r=SoBI!I&SBerYEmkMY`!os%5T+?&;)F1VxD zq^BFd@$~eK=lPLurLFJnl4V6eNHkUX>d+l!egyO8OuXpIjZUgdH>Zg1-BCw-dmdKb z;yo^?yT;`z*lUA4TGa>7=Vo6qt25Y)!Q@w`fa$jN}q4bU6V-jVIHO&lfj@bx9IAP01ChLiPM5F%yWa>n@QzzxYyte zTSp8|=+6O*|8v~}{O${&EdnMH5>NWv3m9su4gVRoXnxq~48;Q=qe`!bwY}Rsuqe}o zqfjV|B&mt$zfvV*9A>jr2BPbTT{HGo+<@_N7yXL5FSHz}MVL4D863Y`4$#?m)dnEnr|4uXzLEgeWM+D! zm{{10_P@uw1~A0ma4ht|bNp3u9Pw>zZ9h1C(6f9goXHYbm&Pd+vR+ND6#YTkSc@}f zB*u9nIn~9b{v8sWFN%*?O=Fv#ps1nr#lnZu$8@1ihyG79M&i(yJzGWg<7JBidolQ5 zhVCPY?o39StI$I+J6BrUv^j4Fgl1WUexy*DtgqU-wj3`=RQNo-TFOctN{XN??7+9^ zzi7KI=6`O~=BtZ}Lzdwu>Tio}+^6AvFkxI8HrTI(Ywj32a1U~rl(-`IeQE7*AGCR~ zwS)f*oKSkR*}s3o?2F+kI)SOx8j54$^)1cc(LxauM}>Uo3Sr`6dOiB{uT$}db*AT* zBFCelpF^;%Z0xe9iK%}nOk)q%iq+p$&hi8pC~{$P`HwLYi${yCAP;%Sow@3}i& zdGoh5b0r@;u3^5>f>Jw?oGPV!*wXWfHgD##va*-2+xVDL5Rui?Igj5wo({{0XS!j@ zT&ncdb~U1)qVUR7Ta}Dit*DXL%ixujRgwtVQ4fQ8RdrF`LjB}=cSJ~+c)@@ESn6Yu z^d;cW<3=8=a8!}wC4$inknl9PWtCs3Hd>)0Hilp85edn!>EC{5!;e204W43Qta9{P zt3e#AucK?(oG{VGk1lqT<@j}fE;tcQR+Z?~c+60BYFik#eC~xRFe@g`pI5 zTZv<=;M$V75@|bTTNJqUs8v?!Tn$=K5dMiZBsq*@`utNZBdhM{^aN__g^kQdpC3?}9;13>(gsrg$Oo=QbzM#6^DEmAl3@g?ch!^g zuk}BFPzV3ySH>glM}$`R@Rgf>evF)%RKTp6^c z9*>RU11=`VQ&)fS9Q3n{i4K+G%qkE|q~3N@OWn{g*z$XU^`mD+6|1=(lI|P&F+T3( zKYv)mv%FCKxzwqroeOGZgPiTK2!XKKB$FV@*;L9dKqJwC*Uf<{9@8prmnq(^oLS~9 za;MQ)j3b2xBL{o&kP>~p6sG9oCzLM_eUdqdOJPJf4&=W+_sizPW+go9Hv8%D6q9D}- z(;*_iICxN2GLZM|E~2bRzhWVo3AO*u^Q3Yp_Mm%@vmV$9C})aH>b zpj>*LwDK|EOHkZhnt)>>-70cL+TsISM(C9hx}UnFt>PqY*GD~!@vrmNwAOTVXBQ!< z=YCrxBSKd%KDw0`TH4dHhN3v>~~a207^5Ks){BJPXL|BkEZ)Y~<6 zx%X=%5YA`1-<;UGcx;TG`#$%Rg_2Vm>Ik-49&O`*4!aL+434@FiG%z(IC& z1Tb1OP%o<)W#eDV5>|;C|MFv2z_V4I;!jV>lRM78-)6e~Hci)qEDgWLvf+@AE%_8B z&!jl_Gku$C)nHJ}#mY4aqx3t|3{Qj=@4w&0aio}%7;qh>s2XSC)trLqpA zUo7AjUXPQCS=!yn+Xph-Xq-r}IF1!PBIOR@GnAIV2;FzSY~v4tiO8y**)32< zYCkUvsrff}wQ^2GzZ$7Kw4OEICYa2Kw<$-`0f11pUR$0RA~Tqdj&vSt{6v&pW}^lF zQvzou^!8QUU0+5+=Y{1hw$10ZV=VIJN;BmIgf+C;idv@608PWZ-WcO|k)cu`%sm5f z<+J{NE#heTP#quZYi3$3=rd!DLtFOEdWqJ4pW_^MBWTt8RTL(nZ}yFFb++En#dFGy zQ;u}khhL30Iw9*$iCQU2jF#(Dnre85zw&fC2lDO*Vs)UA@Bc(+S z3bzVpi5hHVW@4%?+P4(16rFU>ZFY%x31#|!+sf#hT8GU4eTV&(dU~l%iY)#9&I8b z+Ew>lo0AMS$#^)is8_NzhG1ffO???Hm^*GRME4WBHz@_lrvXBT)@|jZPBTKVickuY zap>9^bD%b_x`dgYrEm5)Gc)sGSw&F59fbtkspR~Zf`M($H%b0Pnc8G2OpbZkhY8!| zyd)K4Z*YERHwj;%7>W=3)*>-wVZM_Lo;wm5k=DD@-^z5)*O3&YRR`V%-oS_Moe9%K z>Q18Ap5eUy5ROj`x-d2N-P6ye_>-dvVhc3t+Oj}R-0CPj4q@?t2;;NOWkdStKlIaqD|CPVAwoaQoB$1{W< zC6bxG1Tm!o_9aRKO*)UsWu)RDPSbh7=$SxJO?o4=~^ z{XR4f$`S4s(9$Q%Lo}J8C$E^am}JzMq8L9G0)z6<vOy7y~VdE^5pbX?YSJF(5tPy`R8n+v?Nz4u)E9f z?rPKTKJe+19O@_2I3kkN7YF@zIP7&c(Qz}i9KcymR>Gy%ndIN}WO>EVzqL50&9)`> z&=z0fw=8r%&G&Ta(6;?F@^o*HvsJfy`X0oAc$;DqJ55<^S?yi)zQ}&!cskj<0M}lAnMAIJ>rZui8a^Z z#AR}~1|6;T-wN?QhEH!TE;WXmyRBn%( zVeh^onEF*OSG}tVJFNcG#SrP>uSO|>274J^#ls;sr-RMfi0qM{XXYcU$#d=7iH42# zTx2-LIptPF=Ns#N=Vxc?yhcw|3k^;dklHeb3x;%-z{r*9jE|{!-Y-iYXD5)2QCfPsra%?oR z6w82PK4NX33qVwQAft(WL3=~67D%)=6K4i(VzF0ODBl0&39y05qY_Sd|8l#Sm0#bpvzQeZ2wuU@Z*7e zN=oB)9DF%}uVPq&gvag<46C;|mZS{aXko2X++K;D*-#SmaKBPH{{3f`@i&2-I?$!B z%HdEf`*{xRTepsJ3Q9&_o!NHLT$6?Ct(>}&)zfBbQNSLVKmcT@$jQfg=~QFJ`tEw` zpvBEVS@hF;j!b^A1n+iA&XYKMd7|Rc(8w^@`zV2dJ78skeAe?FUk6YlJMchP8F2_r zxMV%1gtXj_r3@Xk(WHXPT`$H91X^ZCV~?RMGgPxVC=pH87S-g0EwY@QZ`T!Ey-%+_ zU95ndu;tU`jgfM`66W~}`X=CV@?CuyBHijkJ*j~oE6(Wg5KjagxU9vu{o}sLb)!c^ z&rp9TmwfcIeRcmxe?Nj4Z7S7#hSI}oL4OWW5Y-{?SOP?Q;lPG#mqT%+?aKD?g$5>}lNeLGP3Aznk3VxSaR;G((2w@O?G` zalA?f?RHrA#kSDFN964|kjBfIMW{{I{GXepE3s=)jLaE3zySP;JKOVamAT+4Y{Un2 zGjlAR#XDsa*Ao_>)5^%9fBcwk0T+(*BVM-6`p@Ijj*OVyHLl^; zltE@teIxi&V!mQEb41%yV^0g`BPgqtO+5t|m9LoY^ZwQK!h-qEC;h3%X|{a_@k87cu)eLNIhqP-jVQ{|8{2mdpO0tBN)5CwfV0`0x$^M9ZW)vr|eA9+Z47@Zl zi3#5}$?|kKCKOX}@A4)L92e+3>l}6RdkSkhE`p1=9}zH>KepVlKy;u5CP}+S7b8)c z9ZT@5YgWj;03U^;splhT@c4lU z$z#BAKQSNI8ifjYfi{MA=*_YevldKf3;^T-T7N~c1Af?-Xd(juxEO%HkN$50x_x=M zj2K#oe6MlLQM8+9XLa%bfVd1B2S-T-ME)%RkXrzO$j|Lx{v{y@nb|LLfNB5pc)l^# z5jhAOl40psHgfL*PTk&D1Tk_?v(y1010S9ie!7A12Gsx+fs#n#GVehyRxKkx<-tW$ zye0vDG*Iv5{`X255|dUiHx5{duQzP9jC@uwg$&2>cet9k4eXb>J3tZ%P^|&VXm8iF zb}Z}f50gmI&WM2z46*Tf?-fmD>OnM;`wK={OLPct9-eQx94?(2w%7}cou{NNxY=+? zbG{@jG6hf*08Vb}+UGYm%)#3u6;|HgmF5eXqaAiq=h}*LJfUWS56pU%U~6OJVb_vp z-rjj5Guehi7NhLj^*A~G5y!JB(5sX*#kka9q##wmkNvKB;hzQpjuXMse#;&zh{%t2O86(%r7eKW_5ExcH_w8>(y46Eq4%ThV<@C{?12q|QIoLt& zco@YcgoxgKGpMTPx6$AO@v3OfaovQdP#El^&yI1Nb2}|%Qni^gKR|wOQwe~pg=?L8 z#Q`}4t;Ta-&fx@tn*^=kMvf!zFfFhP@{XmU5Kk87I6^`K~q zwdzk4c8#)bB7td^E@^{aB@7|wwTKk~6@=A1nN?iU9cLVFgHlyCSFUOooK0z2+_{Pl z0Q+wU{#Nm~0av^SLAXed39I#VPV^Z`%A@>FiiZVS-u*@l#fRl)jiAf?16U@WsZlAy zUzd?Q2{%Tu_sEo3 zC@bIg8l@sf^(1XH#`vIP73HLLx=?8nTP$UtxB8OoMk%9W8Z=MWQCFjm_QMAQ%@>Z% zfnaUrveG1FZj58}$Z#QM`sIUJeb@ZyU_M}L!=sBw1lg0%1_MWOU0(4dKOl{>}0j8rPYneMBLw1u^ zh@E7GN8hZ<7ObJ5M5L3h7(&LL|Lc&8}_Oc-M0@!t9)zopapWI9GK&@sC)+n>x@ zfvrO^FR(Z`WT}#XG;P4>buliZg=9*>lsKfUm6olma*VOu+zjFZ8bY5h8Z>7=6!5Wzq-vPWHB7$kt$XV*`H8?W!9Gy@8z_J=GyaymWDeJ z0ssoQCX5AKzrsXoTJ(VJ#D7WkLI{fz7mxAQii22(-E~zUjD9r7csQ+y>%p$Mq)RtB zNt(-M9x>nA`<7-6WG*oJhb3q1uIVyk-WYB2vl(Plig0B7SfuHk?;U8jS_vTry>*`| zh7``-Q=TaiX{RSiXG})B51bRdf@JU_)~!-TfR@!{ICBPX(wv}H5i3T9A##PqrU-li zY{~EUBFLTKWt8ia6KrHu(s%+HSpE4f-#r7XC${OO*Yyh6eL2Xk0PiY zkauY$x%PRc%borZz!(kU6nJ4F!WIY!ADAprDMuV)ZUO{;N3J;v=E_Kj0xv=PF~TwU ze+m^96{Y{;?9lu@6C;ojXWjq*sTzbGj_jL)1Q7T94$5$GP(bg3Ffp?e?qseZUUfBM4yRU_yDro1z z#Y9X*^p9F$1-klCBAWbfXWd|O>_{ncib4gRz9zWeRr2fLQGp2a(4s*Z$0nF2aEsJ(IEDS;C$78E9e?){|n4Q zP5x`FA9h#KGEx!4FC*1etkjL^^Ouu?yp?b=0)*rUQeY4f{Rg}x zL;hc~f*6(>0z{A9gb6g0{~htJH0~(GjAUV>!I#C_O-T?0-QE-U-NF8QdK>^h34ZvO zg6XlbG@`f45y3@o{{wuFNR8i(ll;rrb=NAI>wnDbsQriGv_cN`dZE`1;f){L;x7?d+r(f*m$=Ht%0M7qkwy<#^T0N~{} zxepSWgNW{DYA)gjp>YBJ>Tdrp00Q;$a#=V3 zt`#>%U0vP(1_$v?_rC$l;B(Uccfd;b^$8KGuA|uiN zh5ko6|Kf@x1RD^FAo2fI;87toxDllFcS%7&u%z|%b!G%i!6Pb~eYP`R@K3@0VrM)_ zCXQT=>wp(AT&-r64}lxM6OufaysZ-p88MRoE_z-2r)BT$ET-+Pt-q2kXy@q24%E|6 zMu=l8gjL}V@hiR^@)-{?8LEgzULYp!{|a!UAs~>>LoBtiO;y#I@63o6Ql+~79%pp6 zFl`>hOh@Of#0eeACX#$akfgvuL$Lp!Y{>sVUj_Suf62c_keBEvwmmzjAGLZ%^5R*| z2%&U>adm1e8K0Gli@F3L$c&M3kV^=WKLFM!iRAWUU_f3uOE9_1^s7<^ulErOVE65I zIJPaxk6S*(sLsvJWs3R>4h{~IQc>v;0CxECWAmbqpI!Jc4RRr#$|W{}2+;to3%t$O zQ=s%#Ic_^f0xgcIcv%KX*n8VV%_3nGu`$=3_EkxxNyZld=UUaVVoHKCpDDD(7obFF zrs2DnjM7>~vg%1dW+3_)p#ahB7=X~}tyQ%6!=DtYI+_4$ZMpk9e? zVFg5uxy<$c^WE8O8RAZ`QU_=OD`Xq^hK`VhYH3Cio|^LHf}4ZmCGeZ6&xW6NOrz?C z2XO*L7(5rhvH=r{ZMpnHYGu_@n4(u}m7-St8|0$6wDjme8N7!lt&J2*fdY0vn?QTx zV`2G>8gW%lFnT5K*NvJfwnRCjQi0c|#ZLni0>a}~ev=N3SG>ik9{lZPMr2!>g%#7t zlDetsT4{EZ2hQYA1H1R9)lV*>4_U^0 z2g8R{?JS;#LK!^~q6sRjhKVA}*CF?-r#(Z)508G=QZrVYzaMS}>Qy#+Cb@4$h()v3 zbspUwBXBxI4CukPH+N^%Pw}H$H=C#A0q61CQl1^08cZ(t=TLC`QyteIDS|Z zs`uaBzu5=@o$ZvIMZR%&e7FhxW^#W=HR4-6pOtZRTei?}F1~bk{-ot7B%DQT%%9fM zQbgA=M0KMndYUzO&i4d^rov4g9YjylEaa3o%c1bLoAofhO{&Mqz^^&5rldY9UuqSc z@D9@LE$v3zQDcOja3sj*$0#Qtl4V!)dm%E6;EsL*d+$9kxsH`f*N3TmP-nCH@xnc= z671k@y>v0PJnX6>0&ZEfm~$VzJF6;h0=jZ0^R=(K-t3*r)qeWQ#^}zZD(G`@5@~Z!`R%-g;7=n;TsAsLMO* zIAR&d$>h5W_m$IDcM4EA@|nS!KcB_9;#IOpl9 zEBTL5F}p6tcRi#2Tqf>LGlYX}^!XNJQpZKq>fOD&LGf}m;&MMdd2%pqfxlI$EvaWJ zS&=}i&WE01tK1=tbkuZJapXOCuC8`?A#L-bx0s8Qo)WR2ifo7De0QHv-d1Wd&Z!&? zWPlz{go*orb4HI5yw`hm+nbdCy&+0$UlD8H-(aS3zm~{#+%g zIx^kP^A+r))@EM|jr%8lnrnZ&dowk7uBU6P^nDv*2%oS%3-n*@536BmR z|2C+i90Z$m3O$`h<7}u<`BAH6S7=<&a~pSlyL;Lg7xwpI+B6k7j}D=8C)!S}Q^z@O zuS|8_+iX#EoKIHp7~a~ada^u%K7IB(S1|eAWGtNK<0pK$4h27*>WJnP4Q-D;c0-3b z9o<&KtPNu$)Ea0k7u@q*nm@y6#pD?-GNw zQ;8;*J-o4%*sW>s=USdj8!x~lC5y5*}vAhpKj&%R91Kw(2UGo+#mO3%9|K`r~%ZMrF-tx%Lg!2=w&ztSG5fw zAw*19rMgGn6Xko^{~U@`F_NCy|z)#-veA%SmDzh z9ynf1`KQ24QhLCpVOQ6n#Bmg)IL&+M{3sqymO!YLY<_tA(g_is;+cCJk(zoO{d+!l zk@*-_CWtX4Ul#U~%O*-wD=i;1StzST@4i^fDwC1;UFn(9MENuCtJOP~(e3!cOxf(f z00Eu${Sp_O#+=47jV5UyE$^k4m&e-&9~}^jfU_go*dVD4a%OHKJJt4^rpLzobgsKx zO-0JP>(P9>ii*;;wvD-bPfO&5^qfNA;XppWFV$4ovRlKhUK&IET z%wzHBBDzp1+4yG9wPhvXAI&Hi1Y0#m-51X=wz@I~8^E&zf#6~ac8U3P8O6Rzk(p6M zaM)jnx4K63k?`Pr#%Z|MTE5~g99z#95laHPtiq7}1o+_z!l#ovjfP%FA8u?ELd0d3 zDR5r^a$!V7L}xijb!_`r&a6i>2wh9hOoR|Ga`z4ixd?33&6Df~%92o2Quz5b&3E1m~Wfp6s?D1S^O?TMK)3 zCl~91s|iB{I>}#j&HrN=rMXE~RxbI;r6Av1S%F+#%wV|u|89LWHJ%_-tgJjzGt)Cl z7|cv9>qinFCc5o|yvd{8^Y9%sXbX9H>MRNr`V}ZfZ$oK`H~-RrmdKI;Vst E0Am2UM*si- literal 0 HcmV?d00001 diff --git a/windows/security/threat-protection/microsoft-defender-application-guard/images/app-guard-chrome-extension-launchIng-edge.png b/windows/security/threat-protection/microsoft-defender-application-guard/images/app-guard-chrome-extension-launchIng-edge.png new file mode 100644 index 0000000000000000000000000000000000000000..25e3ef533b6ebada91d2c5fe9099f3da36719f7a GIT binary patch literal 116788 zcmXV11ymbd)5f8=yO-kb#hn7hTU?5l;_gzkc#FFgYm2)EcL`ERaVrG303k^D)A##N z&L(HC%In~2?>Aj-+?^pR%MH5#Pn9vRL0!F!6T-n`1ser3Lz0m zO-cTp|H{d_Prmt0!QC?m{AbalXzJ~n`5a;XjzL*@bGhrRi(l3myi;Mdyw$Y)jj4K4 zY5%&K0v6E@{mwW`+GWl!)v&NN$uzY$jM&$!P{<_~lh=8E&>8s8!;|jKtRew=g(Gtm zp#m0D)ZOTwIDU*{Zob6sTPdI_2L~zBe;x2|XvhbhBQ#AG!$=oW44Y7v*Z++t++pB< zjijT#mx@|G#)gqfhme8jxFpD=FD5Npa1`di{eJ;-9JHg~{>uHYpNJ4U+H*ZVS*n*% zfp)`=?Y}v?Wn=cIFE#KZ7{}0G6CYxE{Gn=@cuskX#E9q)zKhs;LN&Qzl5GyUz5MWS z8Cu7n;E#f)^nGqn8=rfjukkIexhlxVQJQc^htIhW8e#?ssDN^?56CBlTYl_0zQQRsiFNab5 zamtKoEr;qX5U0d3t0A%b{dJO1cf=TPuq1=3_QR_tJuLdg^S zZ)k;MVCc7c0syf#NA&rFQRc9tkp0)U<=L`f^o8J(V~k&hHMUQkKKUN|IizG{H?8cn zNzkM_o&`p7yh$qFArE4FW7{Ut!|IUVV(l*jG!Y9EUsC&QMQKz*_?dyWS+eu|!B#LQ zW$1(DCKRe>|OJ=Ga@qrTK-@St@gEH(ivIr9>>K%7gX2c1;K)H>$-EG1D(c2c9JloVhj$dgUcD;!FC2BOoZd=$?d9)vW~L>x_f85Z2}eyOa2U%O!Bl{B)J7gIur(A zY(h67f3bp7Ds#aFG3yxhB5QA1a_FH z417>!g43t-OS+!$@2eQdp`n(^pM=ml`lWL*0NUXSk`w3q56CM5$8hrNjUl+j=n9&= z91F4hg7ExdvsC#%BWHgxpxP6`iG|`l_yKlh=k4ojy}I0!;Uiz`6yoP67UQ_T8%Y50 z*@T9a&awY8sIlE0@yiz2#Z^~Vch6r__?cwq*?wB zd-slZd+RTf=0bqi%rR|KYkuL@?&>C7bnat%nwCTyLZwHNXhspLez4gqOTzlLxVkzq zOx&*sj{E_T<#{3w%%l8PYm2D_-cy&BQ910l@GFo05ACL{s zkOccE%5)rdxjme?!CPip+^&Y);8QB$eZvIe108C^KORd^O($fGsy{auTh z=kQ|ieQezp`>m5h5Y)jw6CUTq+mY<{e0FN4)()449*4_9rOm=!fLAxN!17l;=MMyj zTo|FXzgNjGCK;a6djX4?o8A|-K!T0kwSxlcYL}OF&)c%u41JlHVUy=!aON6V2wsGr z8@MM$S?-~+@@^dDFpsizj}{AA$L~8{nfbZs^rzE@YnsQ!w()FpF^Lz;Q@?=6qC4uf z*T&bfe;b^Cii5p4ZAHm55(X}%4xu`a6!&*ZX-@UtY^Qr}kNpw9QRRn+`Z5B7Bv z=dQUtT;x|%G?IrWGre}JpDbvWQjXp*>B~aAT(gNM?Mz^2oDURwyk-+mQlQb3`5YSQYcJcL z?6%=6CJUbu50(>Zj-90daq0a_@x)S81Up~xv`;9#|ysLu6 zhj1C>cDKT4U%BrNQ~a%5NMzzu z=fIcKMHUJi;kEaV_^}?3p68P%X5;e()RD0S-)n1==SxxE?lHJ?Ny|ge)-{8ny{=ZU z`1c*9zFy-)YaNg~peaCGFylVl)m`3A@AtxRUFGoB_vSx||Jy^(jE%svmM<^6mXRs<4{?1MV+&2`&GV1m_POhe$!C*GcG zJ@|1i9A~l-|A)4BwH4Z~s51-tYzbC0Dve7kGrfQ(a;n`xU%rH7y7ZKy!@JP)?II(ve#Qo=+|;9%Irb3spGkmWIw zBBrGL>KTvoT62bU94_)#*JUjmLu$5yA&{mppQho0fvD@s#Mz8(t#ThQ^$qMU$Dq|^ zQ%&FLlUtP&+u_HR{(U<0EvhJm{S92<)tUY2yyb2if>REp6z{Cayfa(q8Ea=_sM{>< z0n(~buB+WihUKfZbgRP{(qa-c{6l;i;IZ}b(&@=3$Cs;VsJ6uI0L7o>83m?obAJwR z^7{`eG7@$}q7`lmqvE7BPyVzP&?Oc4qy1U0abE7sm^P(3JeVjwjPKi=uFaHo-t0^( zctJpl7RdWqUcRv_>2$TV!6it@Q4%VR0%Xm&y%ekwK65RRbcCwCKtUn3^{o%p&et9M z^x{~ev-W!)Yo}e0!+Bk5s`XD!&W_VtNux$@stT)%`;*s?@IqNZ|1CM@?Jkh3-wCNe_y&L8WOhYjT8P|V6 zHna$Mh49CJT9ayzy}iBNk89dIA5Po6PFp~p-~zv$PTm-gt@Rg%$=1~mLgaRQR-bGn zYXeX~h1+utA!Ky8HmjK!)LNWF1NLVwMdgElR z#Z2jTV4L2*F|s_&7Us$Ur-WMbiXBMqpkVsD-rmc{5&Ui)OnqM1>&?!_%;DY#;$z<6 zY#^S~&Z6bUutJ!`CM>1Nz35r?49|QxgH1x}zF_mh+JUA4?r?Q3`%FD3!XP__Sp(x$ zk=IuGG{R0J95V&c*h&;SFu9Qm3wpHMKOdWSJIM$>K6Yrh+3523zoEX{<|%uIIRrO; z}eNoC&t_4(;`H8F2~;t5!*l7I)s=>=qXX%KS`2vl852KA_%eZMbex?XcMoHmgbh0S?X0laUEGe133kr4YR`NSN8%yz}FwGe!yx zujPoiG1bXyC49ch%7$A$kIwAe{IOyC;COroX(1qa(4$IOf50XcbziOoOjZJGE1ohe zFF-0J26n~`E*xEx+Pj8+!3ibUQmQX4(0`qG7QxI1?}nx;i7X%}e(>|iDHjc5p57?S z^$;?1ud}@(huX@O86ELcY}f8Xg@_zK$VH>wiA8ThTdv#w=&mSa@?rOJOBGDyY%z3x z4u}PB99FQSr`5s?UGIPUGi%meK%Unpejln8hWLox*l6v?^O?;s4h}-SP)mh0C1)p9 z3Fp0PNDB-4^)X^xY2Ew0wQGXeNq4-&f^#Lq9)jS$&ym%}UCC|xd|SWuwe~x;Lw61^ zOc{23vZn1FSDIq`2rf{IjD+KNJK51CeNW^#cs6s9E+bH^=ia!wcOV=c)6k_le&FME zrR*Ny;q2H&?N75KiKeC|DLJ|I>aC1_f; zanfJrdAtpFgCk0(`72+3g+ohXsTdlK1tHIOm(|3z<&m*&LAg`ce2^{RNXgvruGpiPb}}G`W3W=dL7y$X zrNqH-PUOP26{TQO@mjKr(xsmvTlP``exaSE_ooZ=Fn#p>9)3!kO*F9Ba<^Lew-B?C zDfkT9;p5K*e1>ZKUu0MX@0t2t)CB=Fu2tIvT}DmUAbG2fIdF|oe?^MA=W}4d)v`S9 z{kvC}$uMVXZ#E$Y5hM5kume&qoiAyJtX-|{vEc&rRHo~Obh$x3=u2k4(5%}S7PEBO zN_mEx=idM!AY&-xAo2Nw5lm%2s&>m^Q?fwtDg-(=`=-I)MyyM+(p{#Hj6A_txPb>* zaYrKg65lHl2s!vJHuty>kqX`{GWNXn%Qm8NxM67ZggviKw5bgLdAi8zIPFhb3oKD_ z9bum3L7h${swl90_U9c0+@QjJ6nfWi_1HOQ;3#2~tr^MdTz4?1V}IWbwP4uM^A?R$ z$%DS-R=)gVGw)^u8J|)^hHEWp`xO=x=vjMatd~kvNaueZ#C% z>y61ep)e1c$chYNv<`B-)fr;mDbUXc`kY#Fy&?85!!J~;BQf>?=Oihkur<7*?bg-v zos_V9913%PSwyrjA%CvmC7qb;ST+5#-R8>|+KnGU^Vb8pr zVIhvWGdCd1(P)Z%Z9~JXW@bbrM7VRuhG}T#fiCB!(f5Vu<=uoKKmjocp_J(v86HnJ zAg_5fwh~9`mX?+doqNVzd=$AHq9g6@^uI!Gji)ELGry4!S~zZPeVguwE8SHKlvrFN z+!O&Z%|hn=iQ7JA3k=1%LV~O&OH5stbew?8*D4ssjZu`sN3=3+UawrHyW$G{@OMX& z6}=?Y+Lg`xZC=T)Eln>ER_cgDsP@I)R@C20X;G4XcN$)Gt|=P2nAcN}DNtS4fL_LK z`polx5Tq!S%&jjvuT9m)k^&7QOMw(YbZbkC?WkIP+SImwud740MKh&SmAPtn6MyP? z*X3xfzB-6XKTh4CvstL#y!c+(gr<`J1C<7=61s&CL$fS2z_N{dpKLR*^1gb*c?P270CkPG80xvkIhs3@B9 z_5^vY(u0HM`cfc#-vhr2Wi{N=WoK)7%@_i0 zuj(m7S=A0-Te98``gofOSBq(5OQkSUM`jv3zkYU}p?`xn$lzy|$DEI=Hx~=the~zRK`Gi%qL+gY&X;}oksIzz*fa@M2JgB5!>?A|Qqk+Oc z%x2@Llz~B1uq4aFntd;zaOb?-lkVWBoNb}21n#a>Ls#6sme|3V3Ua3)Gc?fABePR~ zwAvTJvzw;^3Alh!4B)5qzLwYMS_c#n7w=qQbMNLMZs1CSwIt~SiePK3JKh61x$MRx zej+(BZ(=X_gp0O_*Qqw=Mdqs)+Sy~3aF}IwawJ7|2mDT+q|?zlo6xtP`rRn{^Q{eU z1Fe)Lu;%jXALP(@UfE(&x<~F-^X6~@&1Tm^q1`Dk(8fQ2$kTGr;b1IVzR|BL3vxBNmmBR?}FPczBEV}}tZLd$~a zele3e?!k(9O69q6|1k79Q>}Vi+YiY6jiGSokHlV!u7Vs2Ub!3>c9V~tB#%7Bu8e^e zGCdIRPJNC{mzk(fBNYi-_wEj@X92R0DUfx|2Jk{Pl}w;Ab3W-&!nYzk?{3@of-=Cz z4u!OKQxkaqYKOtNdOLP`;fED&{Px#XyScP~S`nT`qzC|)U<4J^F;egBhduKV$DtKH zoH*#@F0Be?joXgdH!;9Vg%Fw)bvLG~PWSK^p+<9m{)_=bZ-qkd7m7Tg>wb_vRD$}@ z5Z8+fj>`N2p0>4tM;HY8ZeOf-eA%HWX~z* z*ZXD$T_gg*f}l46TNU~&t5A%9oF%lMT?w-g1#UzZ7 zU2PIP@zwRNq;Q6iSllrK#B0%bXiM8m6HkRe9`I9r$1nDXFidtAV&Hh><3U3P z;jdEf1GE_O!0?y}&}%2SuRZ)Kt6TUZp{|&6nuGfpB1UTF=ZCRi@R^Sl$v$gZ(CfTW zbwUL_uU2O3;T)h_1+377N$F5bVTjtu?Ke1X)ZB;(!@jXJ3COS$cm5*7b5G?UrVF~bZo0dxf;|GY-Ac;J z!smC=?$#(U^$gD-P3Mo{Y3h>3%`!8IzdTXKf5JZ?p;L%Yv^;Vtmi&eB_z(NZbVQM@HotO@gV#7P4euXPWIt2<%<&Y z=nb3%9ji#g4fw82=RT4`1#0)2TTAeGAAUNF(GK zxo5%g7B4#j$$IX>3Y`Q2Gg%Kry+GjV82Gefi2alj0i6M59=Hp^9t)acmnTiYMweAl zE$N$g^nnK@8_P)>X+#x)L+mlhg>Mvp#HBEs=*su1RSLR%l-4Dg^~U}bJ6HEJxiOXa zld6c0u6cN}{9(AsQH&u`iV9V*HJ!YAWqqeCiFQ}GcD@8wQ&nQ>_RFdtye#%nRaLYz z9YwM!pRG`58#q-EsTESp4VTjJL=~M6F$pF}hjQ++Kv+%ot(7hjDyv1`bwAM~lCZSc zfV73aqN5|ntMa{f1|a_J0X~n*11tbIQg`U$^I#Q^;H>&5$11A63*8&iSmyL=hBxND z>eebzG4StHCO@~ymu7VqimYDJu=8=3*Oo9meM%4zQEo4eK#rW?s5?*%StN|dk-8oT z)av=Gr7*mR+;vqs(@td&h`|qX2*|1r{d$Hd->pE(u7be)d24`Db(O3PP>?NBo zB7fjuwj-m-P?o=}`c>=j!8}GpNP5IVHoVGm{EH)-$3ATL3yS&q6f0G2W#AagrvzM; zd}zQ-wU}Irj+t0QsGUeU!uyN;Opa(|w@Vw*p%&oyLZ)jj9WJmNBk-Tnw@@4?hlr(nb226Ah!_aF00P9n~rx3{2D`?PE*mn>CX$ewWW^dM(Ozy zih5M_^UL=V5)Sr?#)@?RsVU8X+#=5R(edmFAKNFGNwKY>2aGa(`p8OxOghu&DJ5(P zD~m)6bl9VgJEI1zR8pwN`#z&q)z(V<1w4(v+y6om1&|M8A>O_LIm|7tPs11_3Cux3 zmRV;?|I|>NP;=o=r`B~!pAH_O2(MaXWFm?y~Gufg}!q_!6xn8{;0G7ybJCFZ(@ zSwKVNUi=z{8Z37T$yE&poCl#|{SM-DrA0gM)rvWWQFdnjDkqTZ0ac4idx02^ro>o5Why8dwR8*$o8%RPIm%+2wJ;)!nf;!M!A{Y&Wio)Es9yUXQXfpC&^KSKswjPkx9bxKV!0N&V84@NSr56})Wx^{k76up? zg+6W!FMEn~!$M}Bdm}db8;W&uV=7QQ-Ilwed}kjDLb@MIt#b8(CN&+|H%D=9L&MA$ zuJ#~j;i6cNYt_mjq19Ly!O^u3;#4VbLw#&4Pt98xFPys*lfWpsu@oOEO=@Fg#^@+7 zARM17X0a}$>Yyav<}VLklf$Ct0#VNjuMDU=OQGUi!=a;fz;}%g8Tzhs9Zy>P$*T7C#-3EX+`bio6tbampK25d$jSpE1vaYeYk;`+SDKn)7y^Mg;bv8fvB9_b)gg~gWX6hk4He}L(@3iJ7Y%Y0Ez zdib{0&9mMwIbf6Ei|Sx@1=FinLzqenq|ui~MIt0+ZxMp9F6CJ;I+m3u)f1pI2Bc^m z(N*5%y6*^?sK0gCN8J@ibEoZ;qI8mQn1PPX^O$eM^9ZL_zg1?jv`2{T&TS^cDK{t!nI%g-~E2s{YHPyP3ZJdU02s6@jM8Y5%3C$ zXlKx#IuMYc8|vfYDDt0N4-GsNZ*x_SjAMf`(o{;UOQP?j?B(Ow3;)?UqHGqr{jNNH zi0rBdY_hLnrV81{Ki^fcq7|O+b|NZ$+vqZ%`3^t-6Q8VT zT}-O3f1o}n?2WieTC~Tj*Mtn;%K9MV5{S4xVx@~dI+2J7F>=TwLH-dbYpps!okJlr z+VM>)BSNSSNu;-E!tviU6g7;fJ4^u6-{+T5WTqiFG-fy0^dL@FaGAUHJ65bhc1+aQ zklmIZoNV~hs8i~Fh^@Bp8;2%w*pM97Wy($X>oF1&Y&C=;glwZevX@_=j@dfXf}Xm1 zH|cpcp&pPL&fJQd)+)q*c>WO9X6H4vAOnOT&H6l{h82erPMgUSB8-&qMDkQ0-h|3{ z@$`Ko>#dA{`0taZ%7;Ry{&j4=CvkgHz(IaoGtlXiDaa>yQ}tink5YBn(?huBA!JuebKwoEesgmx0+oKB zL53(`hY)}5ZOe?Z$)&yKF24B8HqD?zq6L&+@;Q|jn*EM9)6|+2QoOa*gI{K)V?@ZB z*3#f&+R6Ch((m>|vJ!K(NeA&{Bc-4>d(K;xS{p>=&X+)9jZqW}QMQhY8T`01xBlxk zg)V4^eL)xsdoX$*Dv>-`yRIqx8$@Sd-5h3JZ+qyuk=y%KdV0D{hzbkEx`7gLU-<&N z!ZG-CYk9M@b-VjuuCkOp2in!YeFW`KZM|&t375;-mVSTGL(6i`DyB_8x}ASm`!mc||NVReA`XNi-PX7P60H)W#<5yf`BAHtKFb;Xu0 zB8Wna)L(3sa!(O>@-cB^GWYF~BUL*By7Vy5Qey5OiX#cQ=*R4U?dSbFV0(OF<9+}L zohtxlPw&5ltR=pUW>9A_O%Qs4N;~?xv>gZumXMHitg4eNr7UjxmGHojJ)UYed2n7u&BZ9T~BR8b-FBdm`y6}wXJS1;Hhn@P$;WJ5tE@! z?nq8RM^%-r%lCW)BE_mn8}?gM6B9DwR0kQe(N29^fk;&l8tj;BlsW#Z$sTfeT)Ta< z>^8fy5;`<4zcjOhDRV@q&``Kv&4^{x?EgX|lY1BTafGLU9V@+2 zr=b@SsI)XZZHk3phKo>pYLzp%PuX6Hus7M(Q?K~6M`%SWBUbWY1yq_ZWwfImDDquc zc$mmim0=^~TAa>AQ}Jck#?RmYx{Jc9S#NYeSl@ZIFdiB0R;VZGUQK$;l9wh2p803L zuYkWDyWbujLjVh^t!FGC5w;xltJ%R6_giBJ{!c^h^M}_=qq^!GjjbU=LX1OD0^{J2l` zlNub#K|z>)&zC@Mv*v6a_P64+tmH|adwW^@A7|wX!?x`<{2@H^hr%h+m%^;P%JWhs@eddyKwJ{D1DUF~1L8Lo z;zb{ciMJ*B{HU$;{oAg^@nX}{)s12aUNubxdr_1xMpBxPupZy{j4Nz{+g+;6qZA2dRNh{bs{tvJ?OPcjSgM>}kU!6J7u-?$F)`#W&Kc8TBnBdV2bLdpmrj{rgE z=su=hdk#XEuay$nv|F|eor2sNX&o^1-^y)oAL+)MfG_hT&-eYH(t}hB+RW5RxA;al z5#c)QLrXlS{BP4%R#p^$_Tb#7N0*>`^Mzz0D&WIomv{%s54D20f%Z}oLtb2dJvYJN zC%}2v#Iu|oq%dd`taF>65K?;>0xxiqAh^Nrx z{NCLxFcto}Wk?vj1@U0$OGs>`Gdz>9e#P#6>%Tz56z;#hI4+LF4(`V)#=nyOfB{^^wQ@5FN<(hmf)0(Y>uyPI~9pPh>f!4^W`pS|~sbqF(*sVoW&JU5DZ z30rHu#pmRjAmD(XuAUyjW9_e2j=k8qx#bo}D;zJ1HhXd|cSrQh%!X!5A|0KbZ5?)b zt>>^N4XY~vfaI9_PMf8wO-T3s`g)k{Vr~nIzS@jb$cQc*raH$`wRzBA9!zP;uhT1Q zHxIJ>PBUg0c(i@f2p@z1>*?LoZyOG{e2Ynzgf&?;DS@jRne%J&1F7YcIpS7p0>{?P zcE_UdE6@X_j5E9C^F-DGsIEfnf*@MK%wu`jc@s6=8uf0|Ndav@XRL@sUC94}Q7~r;dD7Amn+@mv;8DH3o0XwM zYJZ0E!7}dndz^q!KbqSK&HNy(SGg}-Omn}){uF5b9DK6*oKStb6C{)CTIz%>!^)&j z)Q)dFI*fBgz-UJtcf>x}_tr`LP}sN)JVIZrJZKbC7=#7G&uK=D`Rw@dt~H6EI4`Q% zOsI?^yuvg}I3;oSd!ChoJ@2r)i=>~>#zXh8pU|C26a?VOMR9vPk{tCh=ZUiSVUA!K z!YAfAUIzdAcK4X6^xK-`+Vj}yB zChYFz%K1#90OgH|xX}y2U#H71k@uF%nnVl1HaC(8#+4g}zZNg$oG>?6)DQXal(ZI) z9wcef{&@(GP^~5>`m0y;5cr+L5{-Vx-+K~))OFnUdwbV86f+=DSua4Kb0B!~%^*??EL)6LHNtnNp;3igRGquI$Feh zY0SrGeso-PWMv|(y$VOyfN zCnta-=e@a6QOdt_U6|9XqORjw9d+Qmx}c*S1=9Ixj?VWf4*nKF0rvX_3kyY+N1g|X zCubE|i7?J;BFgrGSW*O|9$w>X{U#wk3GVRR8*?$SluoJvJsIE7u3T5^kE}#JNyB_n zK;ke`Lkp=mcR#UZIV&Ubij5{b%++c1nV1sK&w2L6zt)_zwDptcUqmN9_KXZ_MNx*` zvSoisId`}Mw`h(1_99sB8}*?x&*jeZ%b>r?#Vd;2K5l8P2`!I_stzLgd zW>A^XQ8t8T_o1Vvdb2skUgV4ZFDbzSYJ2gh5)LdWS_1FA-S!RxW6gyI1&nwkzBUpx zK#Jb~iEf8^vsNj@8!aisRU;s;B0VbJA)jTqPAuiIDozU;NZY^!xSe+)JHH* zDPmY7(_^1X=nZRHc12vRqj>E@;dq1|HV}%%FTO@v$yVR{H&p`>a`y%sacf z;zoCy+u9&*&$n(5LtzZ>xDqNHxh*^5VL0T(3B!St9)02PcZP;ggAH;ray?7K(QX({ zobvZ51#)d!2<`4@GAn%w!@|TRg3Fp@%Q;L{S>UUb@rWs{oy;om#zFA$>`eA@=`s3k zE`Ooh`t?l+%Hr;_iF+~HcGM4jqekb~)6+cM=B@b%7jJF6q#IIr{vh@6sDU8cdi2A< z^L3V*ZWTBPMsE82MNnDlR_A1i-NvYP3ty+KDC7o`@8FO5)8P?2l>6<4r~g-52F zT9aqg#)g`!>}dCDZOPMPA3G3e5bv)^r>&&nx;PEljVqB(I2AL7Yy{qcL=A*lF9bMhs!BTrV~P%n8#F7& z-Zs>xY>XD^>SCNvp%&|FOf;)6qslgj8F^3h5yJS+NZsc> zy1-ybkoHS?b|phENe;5gk`mnSZGpm!{LDtDZV+EX4@YKleXRP=+;cQ&J_;|zQZ49`0& z>zRCIVxj&gVydvf+3}F&7gZDv*N?jR5~(aDRT?#rQp+hb)vsa%9Ui4EXPV}AHUqDo zd5?PGK$!8Mh>Vznyoh6Dt zb2L{|?Mu8KllNY*Sw~n>Wh45Q=az{8!cB^^G`x)r?j&JmhTFr zl05cqzB*tA}s8J{k~Zpv%1AQ&Qtj zwEE=lD<&!0^6e5Yo)cTQHH9jHNY|v6wgp#mb6Jyu^>Rlq9%q1kbQssPY&G}KT+U2} zhX?w5bO~QkMb)-g`aAI-z7kRi5v78hI~bu`X=k6<=%QXYw9cgqaQygL!JTdeY(4eH zWJOoDOIOB4p$nE(T*y2v3&xwq($_P1Gd1sln)dN)nMV)}hZxdyS#ep!ggA?NWcJxC zpfYYLDv6vEx%`SG1P$$@QN@5(YlGu4eWQKi)lchzm~T#Gzwr`_^IY<%$1yO_Un!Fg z?RFfiP5K~TiKKm5=-+o)SNi$u%G}*6?lZmMB?+DL=3LyVV)ajKu5Sul?2Mm|vN;)- zyVELag;jKUl5t|bxxF{&P-l={pNbjbO(&`-t4{YH8)N$(gc;4LIVy~s-%8iLkUxw& z`h%U1$v)85EV3%c4mhLI*(9Uh#?H=D&R$JKTlvU{Buq*p=2p>Cp7d5iQ&knywAHn| zqa%l=_wqd=#3$F5xe-QG8kAn@#>eBlh#kbG6TAyCB?;b?E$w%dZX%X`euOx$wSO~p z?LZ&(sOL_&z4bLQF}eGPG5vi1>+Ys5Y&wxj=wC`eDH|%KtgNiW{EeWw#cndQMp#5d z-@;-^GTPA;L703O?=O{H;mAV#!uNC|$uZl%FxJkvyUBw@bDC#V>a{rZMCdi**c4Nd zIUASPw*IPK-tnLvwpRng`7&&s?|Z~?;^;cE5pYp)(HYu;fFEDduN}Z-5X5oJgVt{Z z@fj-SENOQpf+@^qtqo3*(nmO}%(zniTi$@}53shR! zqUF#sN>T4OGH+zpTuov{wGaAfmq$N27CZfK z{hlW?g?dLRv_*|%A1uy{DEFtniE@EN8ebWYkbx|K$_qaQh=YvoA0yYgDiZ1`N~f;X zNKLMP;mCo;&P@79dP8zG#iKpC$X*N3@o(Btdrf^JF72@u}Z0{ zCWV8RX8&xAUnr!s(ZhtGy*B#UXCnzqkOrFGk!&8XoF0E1$!1>*|1$KOWuQQfw@}^2 zv#NbtH2+Gf(tXO_RbH)w9!M|rs_Rv{fvU%Xx$x394TD^Z4rm_i-PAz{41NX_0wHyh$P~)IYp-En3u!h^jFHoMJb)_yQr@QDh*fs=_}{(^dMmx3mlF8p8l~E zO~r-8!Sh}Ezb4z>V$<=)b&a+V`iN46`BkB}@S_Y|F_DvGmHpo4wEY<^U!Q?0N3ci# zHB(gE%uWf|mzZN-cfxk|`WO3JQ$&_U!EmO#2w8Izm+9~|m4je_k-*A|18m{f3za2P z;nPDFCvqYC39R2Ed)02|wtl7gIDFD6aj4j{ow-IL;DEwS8=c%kR=OXySLj*po>VN( zd|7Bef}w1RB`a->AC@M&=jbY#=M+kVDIF{Wi58PI0xpu!C@g$9Y<|-1Kb|s?tE#vk zePNkw^DBv6x}4y0?{{3la-s>iy?pJBwzajRq;l1vT_E4=BHd(>52Wvj_^CtT!qerL ztht{%scj`EHCSQCcX_=kie7?0e`%E;vW;H9#n+vkJvPdht=`jSxqgD5N`ax6YSfk9YE$>$uk}v}i~wqhS7|#BoKlOqw$zYblahy*{?n z0SO55iTLsIGZs1R-RcrO1H>!;}OA#cnsrL(24Q9EmQ+oh5Uww<+hF=28&*KhWb2;C?l&>te z9t6;vrB$%oevlL;P2TTJsMPt;>0M_!21x+TohZkx$^>%9IqaV;s)H`mrmG8}oLr_7 zjw^F&FttjrK~Le72dyU=Gz>e)iwtPypM0io6LUNN1>i(X0DAsJZ07w zMdEpOzMY@uE_#xn$!oOjY$UyAK%^Y`3epdL%2Cdf_WRwx`z3#H)2SuNf7jX>(8nN} z7ZR>1nBIlt>f{a#GHtjM6}|qIZaX4-loN&@dLEv^WeEA3roAi98;OBe9QKScBk9L7 z7>n0G?q|2w8uE|N_x;zeJOLY3eN%l!7UBTl!+ZCr8hU9S%*w(*PQ;5xf50ta_myEg zd|@ygq{@6x>`c44xw(EaLo<0{>b;U!`kh3f8N{n~yAt~L+G|-_mCFDdwi2DHHf~|f ze-L^QJeUt$;3Zn}b=VX_(P+DjjX=sQ09kR4x!p}xFC#JW#Va0`78j>)=_G&DovT{O z_cu6MNu=g_n}Y(J;3yWMu=k%n{X|q60b$1}4RmaN;kW0iS#Ac8y$qWZWpTS+tKx~7 z(LFEJ;+NgJ-S(6}1294`OI-2*q_Geg%m?TxMa1EB2Ac(j|4@1xzd={-`fxydjz^v>n} zaJJ#d1K{^yolS~C9RP;{=Y)6E;Sl{acBI^mdmh=xVVt*5@E^jsmeW5MSFOC$-;Y!7 z1+}KW^-kp%HW5>9KY=_gH~+QBY|+{omF%EjDyx&GBPfW@&@71QNpYR~?rEL-7hIzE(ExRJ z=tQ;1x?jjN+gtwiu<)G8O#poNNFa)Y3$_kD+Zy+wxLVv^4LBMHJJNefw}k|=%nnTY zt&Oa)(hSbOaVwY{)b{n5F4(kTnY~>~km~ivchY`Fdo@h7V)Ci|aI?-@?l;?9!N~dH zXdQQak9l`J?}x1_-9*mj*%`?=Oa>F>`)Y{+05d7Uw@+H%4Yl`1oazQW4Ip`8&sOb3huKg%=ErBQq`1)!0pvH(&?SdYRs` z{BwX*X)uaAcDl)O=Q2Q|=nh7ZLyOtDvBf5vJsq)vF;hf7!vC^t1-pGG^SQV?h=kzj zihjf22c1Ml1bOir^BBYVZ7s`OD!Y~Hc9i#tbe?giH(t;+`>RD%D#<{0dtt5WN+&g> zTq0)T6ziD2)y(31o2;ukOM3Md3`p2Du)Cu=$D?wXU;0bt^=_(LNVH&a$jo`WTf=aM z-Z}!J&Af%|*LiN?dq6J#V-@fZrBiL=QV5K%Ac~ck?`d!RRIn++Fm z?LneukaxGjE0%EB;WQy^uK}Iw$FW#sAXij*n{^@}hNkX?ktn3?5sse6B^w|uhJUoR z*DKSv!!wP0W|`de7u~{{VNk3$m>AvG=wW}dyX7O*OFrp1!NEcPn~es6L#2oth=o;y z2lex2)=2Tf%$kFR-D&9_uH-Rstz&1J>V8k8Ofb#lm2a%|5G|g$p*L^fw^7jy&pmLhtr_y4AOrVjMYpS~Be9jn@tA$b zt9^L&*aiw+q4s&IkfQ`0_e-Q~rQmFG1?N)cXfA3x6N`*hISC$9}13YBI!16l-3IxT(1{d z$lc~0%fE=a1AmOc5&9gW($Lc0->0OhsA)+9sRcpM$VLOGIhELyS8)3O>WUGDGV4zr3t!&beZaa1OaD+H%XG$GED?UL5SU>;D!+7W2 zdoF|XDYyB>FGkiIYW*40P-+2YKYrX3osfYQj;aDE&YN))NbcR6(O!?naA72e^$|~H4U_xXlsPZ>@ zEM+UCrn6(`y1N7iM=`1n>g)yyDe|1jYefUqCJSqvFy<($&9zYibL{H{c+%@jk;t;; zrZZug!g71q2+hS7A=y;1>MccBBamWFBbBl}OC^jHct>sVGR))lSW9sCr)Q#9?>U;^ zwh5u+bNZrzIiK_s63j#VhL7TqEnR)*$_ozqZy#@|g7; zz6>w*nk+|TIVYNb>vAgf)5H<8$NBv|2!2YInOPpgYBr4 zV>KLY{1|P>B_~HlBknjAjN|-UnQWHXW!z|NP<>8tMY>*Hynp)hJljw6MM4}~D_^wN z4~)~WrdgWZj_9ZP^;{L}C8i44UUCGOU2#}>69dh8o4JB+h91-$?pXtgIjvf;HlYov zh4d%N;@{wWd`c7}7~E`Z$^HK9$;MJHH?EX^_oAb`^G>oGLX<;HKGGnzcnLUtEgQ#`F7v zc4~WUtNQZs)i^8}imSL1b@e=@f{I$HSUIdYRjNwgKV8uX{p|1G;*G<(@6-*J_HqSK zNTm!8mN)E?G*GOT`En9G(n6zOeng*eWqe2u!?Q9_HBB|a;%UcS{%MuLWC^1s0q-5H z426IrJ34gI;Nmu;pmJCXmdzwfYFk!=3&pz5P+TCC;3_--XKbMv*CSJJCV@L{Z?vES z+6s|XZpX8%19xk5n{9GLwa(N*ApL@gyfu%C%JFw9AKPXpq^x;Mw9n;TODsjM&1*0a zalrC?#NENdYtZ+Q#@r*5BvmG9%Fib##*1RPDx5`Nz{#+AbU=pyDrx5*JiW25c?yx# zyot8_Ueb3|N~$B#U5Ar}&XD4s%JagJ@U}>0VQP3H{jjdT8`pf`t<+((j-8Hn)Xm*9c4+3bOe;m|4+LT-@i{ z#tW?OnV`Ny$N^ud!`EeQhOD_Ks1O2LT(U38mZI%wCZt%6u6vcY;C}}=ezOXcuSI#> zKA^N6Ct4}Ym{fmW>HgO6b$le0=f|oYkMPT(I;y$vZ2z4PK4xL@hR0BdZC#VN<(rc1 zUwyHJqr~}0s+dnEJowLlSjIwQOFXC0CtM<@S8zum#58gz|NK0`h~o=kX3m?cf+&q- zGP2-~p~ushF-oHUVXor}xqQlj_V}R`@u$IBtd47*H8h6Wo$>UcRvQm%a!Q(#dPf-2 z@DQX+=Ql&jn1Q1ygYQ(Ne~jsxl3Fl~f)O*ZyCBs(Eq4Efs3)Rwh0 z1N#!TsAK@(BO1%OTv>ia?dK=UsXJlQdm$!;sV7*ih?LgEqPo5;)yxecI-!dXNJBd> zG_YuCqYp$y;jnyby9z=~8A*cG>rM7BerbN0^S?xs8s!y{w)2rS0#V z1rp~2im*R_to+V{h!oY-#DQ5{0L#K(7`aqL)wAw2olKG;4U889*DCTx=bHhdeTD$i zr-D~#r%IPjuP*uY6k^Mv#T~24IOX|fAT7cK4Rj?%ku>aPGq&{_SZaCSrQrG%Q~zNW zyX9qSqt^Dx4MF#y?+V0QY*`Z9;2=9^via@x>>+nDt9jFtFu@_c)>vFcRnGf&HAMnHV?gg=WA3; zrNH-qaLj3AaJBIB`v;l|8erH1I3<9bGC?x^O3)2Sg;Ifnn9Cv%91fF<%gjG?fn2lO z7W~L{F#BRp`q?6|t&N69eaci`jQS$dYD^ZJv;EA53=Vl%KH<`}kHTe{ql)NHPEfPC z8%l|Fi)NUKHK*10CWW%7&I1kRy$}HoW|~Oj;10|Quky&TZKqIufzYSC)xnwp9<&{K z(o-DK(40Q80vyJ!u5UR}dRv2TL98Hr>433KD1OelTuYhG)h`Rt;vIctH;-tmf4r>5 zXeGTEOifD;OW|WhzI&mN;)*N&466QQkr`^Y`anX^<@1c zjSR_2pqarBh@;9dWv|oyilff8EH-d7`ZW(XKJ|(s>g#Q^NS7eDMGCxQ&~8K!juMhC zgUOtxPl+Lp))`wyKs74TijBsKq*8I>WiKW~hMlSp6RZ56{YLfmEo0K5J?S1-M_Y$v z;l&Y!=A%2alCGrB$6#uw9qPGZXGB!yll-r2auSQT@`yMPU}Mp<+;5h-8Qlb5bz;k1 z5a<`lVO7 z#voKN(y3U*sbH88rq@=ZwGX`o1+}!I?Up=Z6*@WsMt_NvD{E?{#8y2Wdf9!1fSE?j zv5-Q|T#$=*q&^Z141I)x#C1DOj?&2Te%YY= zis_9zH9`}GJb5JV7$uy{h{{ms42{oDUzR+|b+% z9XKYeVJqCE`e8uWF{DPRyg_sAVT@*_9c_MTb>_bhq=*n6Q z;bmokik;pz`3GCS38}#4_DWxGeThsDEtUm98_zGjFd;B_U_koPMx>$z4Zs$wid4i| z7@?SJk@$3d)Fw}ouseXRU~tlgSgF?;>cJOKP~`Jom_Z)B^{$n zWBpJYa(mhjuKKnd?64$Oh8(lk>zZwOIsMML

nATMxAO2}Js!w#P27jJfc&@vkT zNtSwIL!*VvkWEce$R09Q5SZjWv+29@v9hv?UGBP0{&lmcJAUtIj3a3Gw-)aV4}a_1 zZZ1SYl|JIe{qMBVBBS2vf-!ySbJJSb8L1i`|f z?Xut@Jg>)#}I$5tKe zC*Bfs-mAl(^W|hdqD1L?1<6cxAiTm~F)_t{u3euG$;&M#)BKO!qQd#9YWgoK5$zI#);a zRJ~>kZ*;qIjCbdtUsXr>_;r4$h$*;nUA587=DD)Erp&LQ5*|kFplS5^0B9^+rLpm` zY4(s9cMsS=5>6RaA@Z-7SoVyX{kzOTpLDcjpCU1B%Bx9Bk2>oQQNBNanCv_#EIrt_ zyz`CGC?;y`)k$U00u{$07U8D3uj|P~34Dv(CON!)vWZ%4t-fBjlx3F#L3^T#FG^@G zC=ZmY%NFM!9365O*AbQ^DVWPD*r0k8qrrx%g)EhSb)14M%YSJ7HZ#s;v4s(p=apdF zNa@_$gV}L={qc{0Hw$F>g3h=Fl{|I+4W4916H=KK+JRifh~S71A6uQawxX9n#^KMC zIcAp;6OLMsl+h#BDMP1YuhXZMsE$rcw4^=?8q`fsDC0-$^FQ018iHFi6c{3W&ODSZSDjk?tu+ETL5 zfl7!?lMuwpsi^}v7wgEm6AUp2McdTs9AvQl-afG6mKLrWj+WB@5d;?W&Qmb1C(i(--_hd`vG`Gby15x$WE$Y_SPCvG--CvcOf9v7XX9Po%2c( zE7=QVqtA2rvDynVM`{Jlv5io0)_QnSCfPr8m5CZW8D&j6^VIMM!Ge!_?mu`|rn9B9 zTJ78)5mah)f!p4@h>LQtx-XJ&G&Zo*mL@7b66CHdL|~tJ=I&OX__&*-R6Cv=RV6)5 z{b&~dvUvNdw|TEB%at@UM3d{ikII7W8^{XH#YP))+J0X`j)Cdf(don)aS>Eb4O{;Z zg88@B7Plrml!l3S!(@loo9iN2TC$^mXlTvlyHGlfI)uCt9>7A|iq?`m)f&ExSxc6+ z&JWiy4Ozb;_!uX9CC3FJo~X zD_$Q2d5zIDqu@ppux8S0H`hAunDr$vi9jLq?LRG4H--8&vJbmt0XRf_%Ys`nm=`N+ z0140q$WEOpoj0<>N-bCK8yOE6)^`lv&>Ii98>}X^nogF4_^^!o?j0r8jHVawYmK=M z{?2*sH7*~vO*N|P3w<>;Ju`^MtWdjnhOeHUSsqR6b^!nN>#M~4narYVa_M>JUG9{s zC2rF(vtge{)7g@gxj84LY?ky}D9^`yVnXx&p%~zNamO1RkSqsHV|vEX2)NRx7nV(? zIx^7!Qcq4>o7Mgx@s2nSYcW3WN=Rg2lI(8jA%qUE7)j0>K4d@+MGm_|Jt6s={U$oE zA4uWtO0eddRUPQ^0xIuR6mA9Hi#9RaCDDZ@LY*bNo>3r< zGWUs|lRgq14%x&?3T7OB#Kd>(DQBc4>1_ANgvd1X83 znIoXO297QBfYD%bfvrfsVtCwTCKt&G`TS60Xqa$k-F)#PwU^R$?t!77h_yQDUE zP?}TWb3X27X>SUjDkWj)KEkEQ699x$FP}ENXhb7UckX#U^Fq!udl`X`=RL4)=(I=J z``rj{3x$gE$SiP_XSfljaq{<)ZoInZ;-Gwwl`}z^05LDtEef5XExZ?!us{WP1zQ!oc*#0YR8^9c z^MN5>J8|*A?Wc@0I7J7Y=e==6eOHrjU6jq#iTRNvmB99_bNMT$*x~U;r|H;^@TJ>- zFF+A&>oP%>3RE|I>%9nZxF#t0?N;ph&jRN22K}3`kPujvH=Khazv;)XsMx&LN%F_{53W#rKw2?5XIwX&L%rqfgIx+HI>>ajDDHfm zcfC~gN{ah)sGLB;Tp41|=_y&sWxZ|zlU!8jXxZG^=ChvoC3q)H9UVflyT+q{A0Bbxgy5~lXr?6f=^(Em=I1gD z_|sPvqZX5TFugkpH|0ssAfsYd%Rt%CKEpDH#|1Mz&u2olL1~zBn6K<&E>H}bo$)hs zrE}NYHm@FwNLF-t79wD^+rn%h(jLkz`Jlz5=BL(jwx4v=k=%QMwX6PbMbBOZ0hUnr zX4y&ydczr^G88#NH?qwYAG2jM87<$nP_;&Dx_?V{th|0o0`;66Tb^V#?Iil<(ts zw?0!wMTfEkh6gwT0T0H;-8(B6@*$wHdBcwvSccgQ!Pe_xn_N$)!Hv1>JoAl%MW^^X zm$c(C`xwot+j4G;MXx!Q-D=NlbnhS@i?guudxjNDhaFz}jWgG=d8#@4(G9Iq&;rM*seOdhK-P z7Yw`S-)Vy1FcX8G0}+px>Rj=FX)P)AVHFJxj|sJc;{@rl*1Ilf4`6gtO-)0O5p$N) z(aegSlGj<>dlxExVwLCpah5Y>QmcFCdyJl; zvA8csYO{&a5Xz3n6b7-?T1r53P(VVGV+`Xf`(@9D2SolcaX&Ls*CttfCa5-a&`q`( z6Vrq%t4NYnBURN37W0ztAJZn}|{y`mHNm)7TfJJmr5j9G>f#)l>6r^!#WNaN24lSLJtlTs%Uku8h9dC&!~yBBcFZISUD$v+K9%fQkS zb-QbXkj(v(WkDPEHs`1oSnC_8)|2)CG2nNGKZ2!*x*%?>O;+Y@$lpP}^)*d#tEN$%y$uUdyeIY-$2dVMOiW%ZevMB=SAZ@oKVq&I9%kPYog%4a+ zGCw*A1l7d(iVLXYRMi7*43sp`#9E(j{gvB7_T1}Tok=ZA4zvuSg{`c|A~L{oOLrRo z8cBGgRicz&em&G(JKVz@keXfX2x|%sD*QHE_pOJnfUGh>-X(q(uAGX=`Da)Gm04Q| zLA#b@n*qkcEXto!5yn!oA9oAqkW?;=a@rEmC%T_-asMzQ80UqM!Nb9&^Luk7NCs1@ zl*UVvA!+o+XLYX+fL!KgGqYlq;4u|7(ZG3y(tfI_;s_ONnX8boFcfHfR!VFj=Ock+ zrlVI!{9%o|9BY<|-b(SL=m?1k`T1P;*(NbIx-g$9vLFGT*ftzXoH^*5OJP)HBubpt zVJ1>JhgDn-x;0Bv4WGF>l5&{*`BwrUCJ}7*c8N25;x3n6v^JE}SO-oB!+RhcA&_)|! zEgmi*+d$kiPIl;o5D8Duk^>vKE&Lmse|S75CEIzb93i~8#y93G=sAM?;;LoqFD{E) zyf$7>jiP*FY!i}lRU9EhiRmsDUWme*HaW7V!`3T4x(rk)aX@jtFf`y^XmPl;GYUq;U^9svL zf|8T6e$;=jOf(w*jGi9+G3$0gt&N2t9a0tJ%NRQ~4a^p=C7M*8gHkq1eg{I16do%s zsnLT=bIJ5Jq^KO?q`OpEqRH3bZQ&pjiI3{Ys4?OZ_fl?+F5B86$;04nXaZY(!rP$| zG&54#=D0*bfzwF2J|3()0`8x7=)upA>}(5JPqxA$so|``D`{R+9mIy#M_eOp`#r>@0CCXCyQW3QBh}RdXG_xI*L)J zuF3T+L|_ih)Wf#12-JEYj4RCLUWa20*2W6079aBf;P<_$Vh$A4NLchsk+y8{5c zL8Yd%$M%tV%k?&V>)*sEB+q^qu!FWNFtVNH~lB&`dWi0eDlVQcazPU_*YZ%ISPgC-6Z+^0)PI`g;cdt+1#ZpM?yxKw4a-en)S;- znqb5!*~`-+t79LRJokfWWK?9V*Hi96(wGTSd4}v98v-fkPGrtmTv>7-Q?$=`Y??O8 zL5)@zo9y@p`!iuquvXhY_e)djVr6V|!dEsrg54vjm(J|65L9aeimi@FT>zzvug)n- z+A}xmpkkE^l5ylGCI;ZnK)=X2?>=I3^%Dh*s{hNP(~Dw|&!+hwf!LE91{V{}R;M2K zTHAvU1RNM`riNBOngzcfFSUv_H27c#5Z~1x9hj>rJ%lvj508^0(Tt>+zjltnq0f4Y zv)yyW#++CN%OY-EonQJ|u=fkYap$4Zl*?$DlI7M+T z+u0T50}E!)zQ@s*d&U-UAWwG*%#yHh37z$fJ2H@9%4YT%AcPE%Q=?wBv5U_cBGh}i zs6Oo49@gQU>A7`cpXwaeVy(F*?%qrZH9WeHO*$s6JWBse%Zb8x?qo`I7%XDurwc)} zarODUMpuyYuG!Mif^fM~BtIja=1vPlVxhJq3V+#{tV!8z5iiUsr~2vx9%8nu1)($S z?JoBP1;s+#PS7i1ng-WIJIbPGd z`OR+9oJ`TV0Y?vzqih5!@V8YXKP(S3$8zEh(|KCI{s`(kp>H!ZvTD^k3pm)^ZC5Nf zYJGjS1G%Q2(H!1G(6~=pdwA%9q?^tBdg(70Tf>eYp>r&RjwsB|Zj!Vs>8F9koF2E1 z^{4Ri0ApSVU_mM!ho(C{89FpY+o$Sa#UnN*Dp$K<^3DnV5UkBG-v@b-vN=9q`9W+@ z2OlKCDa-b}dXpmPF5JmVw}&Nk6{sWVzczif@+Sjpxo6r3e;Axpyr3(_oG34Bg(-%$ z?AHz@fdOmWn;|!;fID?j(5Ft5#nVTMDCwg|5Sa=)upHF3QM>Zu>f50H&)E~aQP z?yT5lb~U8fy0**Q`5)~C>8 zT9@bN!f2j0q^>NyY`pKQBtETD;25Fh2iSDSPdWVfoL@L&R_R=F^Ryu*=V5)YhrvbE z@2j%fU)d3L=a@u3nQgce!FOKxocxipc);9qofB4X^$tBg82;kv_xkveC`U(OybC_- z#M_RFzqv;TR2U?*xrco|Q7!QE`k5rOH9<6YXOk9OWSpJ?+d>@R*Yo+f(1~nuGrTf~ zX90_>>)KZU&V@RO5(v`X*kW_ZMr)ynHorSU&`ae3L?Fa4_x&!c5DH2i-8z@vo&;B`UNZbKm$f8x=E)3KQLxGBKoE<_Xuk~ObeiuIPHCxRZ!-mvC= z66umeZkXqPLK0qY_M{+&x%KtkSjfs(5R^*s|8o6vdBff4x39bRn=R2{ePGb@>Fb7J zUi%an^a@mO!1~oGXw~1F-}I%*nHk1OmwElh`@xCp(EaG@;mLjn1@zVfO^eiy)jd(c z=;A!qEGXt*hOT{cee{(|%VVc$BZ=#6qs2iZUfWi+bGUZ3TJ!YF!AiT`wePL(hVyM_ zcQ?;HEM!)T>Nr;sPh zknOVH8w;3vy3>-_@1g(Ud+Xo*;@6F}eZ3g)s5-)Cg zpB}vq=YXfJd|p#Qx^90sp)Gl=97f-Kid@g=0w+>HR+(@N!KF8%iuCd_T3L|BR4xN^W+~v$@)_He4wt*~=tvN* zPBUv#yP3skX}Uj_=t&;??Xsf!>hW)@i<`@}{A1xUk7-GXj>Btfw$o)q`h(i`4rUQy zMdbZ@@Xm~cQXJo+cr#MGzHR{})drJz~=v z!&$EdnhRg*=qzH1{O9!?%|k=IT7rRq zy#3A-(-R;6q&9(tzro2XZxPl>*YdR&Jt+6Mt*R=ut?jq_%k$aADqP?P5kheyxwcYN z#4ssymX<`~@FEb`#uEj3MDIo~0p2e0OSgw**Igs!-Rq9h?ps{S5wwT>VYzN>u&~Cg zk;8OVgFonCNlDI>CRR{RMU>RAt|@4zt+O%mvIelQV(CT~4oBWwpJw&zXG5TyyYIm! zP71yX+Ii|~z<=h?cG!v!vBYTs-T@vwy7IF0D$O^uFp~ZO(7v*K=u8?1G87W@pFvD6 z<@wM4*$19DPVsL7hi#!%+7Lo^U$ko8CV2k=)`k^9*QLKVmTg40Ew<$dj1Q)Al+pan zv8_PY#{Uu6@M(G7Pem(!{!B@HFCQRi6Y1F6(rfV%rv0BA_y~tbOjtS|FDphW-_3de za@(`9vNSNo%_KXwJ5dix#!LjzSHM5+q34sJ`7Q>~N6ww!cZ2y1@r?}nze8Z8kp686 zMoGl~R|d@I|K;i>Ea~)ax&>^F|6i6}pGW@@-+--&;Qy5r{Qnp9|KuLMF;YNhQat?6 z-Au%>uqZc?mj16v!u=gaRnaD|e5qmoyT`A+p1E;YvB4!||5bGljSVX??PK}B-PZsF zfQ2;m|G7JLi3yF$f5(c({=e8jVW4;t6eGq(S0%vFtnbd3O^y`i|(yKK@$NaUTDkKLe1XJ0j`+Z@D?Xh? z$R5Y+JKwcCU!RRL-?b*&4_I^>J(guTLjbwDN2p?}a_+_i^$|rGkHcOy_lHShl$Zf0=kU%Q0c0 z{&!99LFJz60WgdjQc>WCoaS9Syx4pa_yC}bw?Y1|tiY#fLLWBJ_5)$^ZJ4k#!-0_S zUe*`hZ664b`PX7g<+9$nvZgE_-uti*ndJLr%4V`f0Gu?$djl;bx0Bz44VH5nZ7x7Y z&U+sMLe_TC?vIKpBTz2?FhBR<%>4X7Ntzze9I5}eiaZZ;B!K30uu(%ev;2IxoC-WS znF~*6LP1cDuMY>~xc|c9y=46R#kBzFk65W@l8w8IcT$sA5?G1qnMP19JBr)s>L_`d zjLC{&fQi;M}DAgOl3A#-~VKMb^92H>=&|MYwDy#+F4LnF{Bo%&!Y6}7c#BmPB||2ZS=X1fzxNG??& zlz3T+<$81En3$M%Q#uJk&tT1Zvn@};QcJW5QLmu43|4a%?^~Oyj!Wrxw<929_=}<8 z=a7&Ppo?cLsJ@>hFhpD^{d<6nhhs&&>=iikZ;ltQPVD`&03~~q-I_Fz=VGr6G_?@Q z^(!I@QkbQk-Tv*0{Xv2RVF8eL38V)B+-IPx(DsKRQ^I_dLVJ&B7Xe9r2*THnW7K6e z7BeK9FVJLn9bMjccDcT{nppH&qQ=Ig($s)Mo~v#kvB#pDm!DlG1;BKt(`ktZx#^7 z<*)faPnQ5_!p$7_^(}k>z79Dfr6{L_k+smI2~sHmwwV?}k+a>E3E>+9=VPf7asf+2ulwNDxcp|0l` zGEu=W0Fac-fT{g=ySU~xH*Nd0qAnoV=6atN0HF`CHbWk-tFe93U1`7Hj`F-5rQFl{ z=im^AHph24Qp7^68QulB(dC#mnCk!>;m#doFTZ_Hy)zJE|K@fSBL!|up(SpCBFr3H zEgih>;`{x^O!O|LJ9$8d3jvr409=7Qtyae9zepJYwAr;`rrFsy!#Or@Y_{W1E~{6p z0OooF-T|PlU5+aFB?5snOBAqkI`Hg-l>m7_3_E(g0eQR}S$lo(j3xkU-RZ-7CwYJQ z@vnZIV!JM3^o{5Zf;I;Hbn4LwuD9pd_&`O##cA7jy5@a~{Wwdjkq#aL45tU2~6=UFZ%6zzH?M6-Ha&q!3nNUDY^!=d(`-CfPfFfx0b z8zhlU8vNUz83`fut$Y-Nm%`-;$iTQ9XG}^?R<%P=bz^bUO^c33Sogitof3TW(OG2g zWBpfyK{R;KmVZPY-KduJ6yKFBg>3ql~*bAm?FiBAF zdrd=JOgOI+h!EfOI=z_PPj&1%F2oxa1_lS2fmufixlGY!yR~U8qST$bf4f8V=Y@>M z+b}%`3=9un0amrOelK2`oc8k7dYxnLu(B@yQ>;IGw3`vrb1z`{aJ4^)nh?Z8jrV>R zfGT%-4DR2UM(HZ}=v%qPP5v);$2q#c_P<(;@&CJ`_kaF>?e9?kPeQz?BudcCeM~rh z2S+82eW-<18M<$IGxEujOF~(O229V?_t7v2q0(*Pc;wrM{VlT;DAxsw8eJa(Hm+q3 z&|L9rp6`8!1UR2FjW9m{!1U`Tl6kops=|xeZV4oS*?ig|@~}t_VZ`}f8jFfwdjak9 z){DsygC0?sg513!{sK81YY|hS+prLx95LUgjFoC@T>cizZSe365#0nd8{jk<-ed5+ zIBLl+uy@n&xz^YngVq19G2i(t<=^=aVYO|h%lF_y#yB`gD$H;w2={LoV)BYhuOE6_ zi2Xyhs3Bz@?iZjv9EUg*2o^t5+4#qA=9%DxyE)=FXL{Oh!9&14lOux1pvM%Z^c`HG z!>D$&fAkX+$U7N5W$Z*_v>5g-t9sfMJMDbt-#>F6>tew{@FyO^;>4k;_1=eHJ)foX zX^PpTCK*$vLT&JPWBlEVjnhj|jZ{*g-4h5p-Rs@!|KzbQX*JYpaq+ccBmyhB1mL(BOc)R+G<5CptssFx zYn5Ba?fyH~VzF6&X+{W0`56*%!AF>to!FgAJy!=Ev7WWDVD-HHl|s_i+aFtOviCvQ z2z1_pB2p+AKTI%*1TOGp=E58&Q+!9!gpwaYAmf=9nADB9l-Dn`vraZu zskxO9@VvGxlqZ_v>w>(1A$b<_&qsU{T7yxghF|v%$2MyyxjD*pB=-NNO!ixBMWB)Z znEU1hF`1nb`tdn&`P%b@-oNF;(7`53<9p9;e{jH5Y|FhU(%;XBAx9AOr$R)x5rw#c zmdl^L5oEDjm$xEhPBcD-t-_*{5jvs~@VYmpV3Xa6rhQ7hNyA}fs9IWDQ0wx#lqd9c z#AjXnOB#>*C4{bFK~$KLQ1~*ycqrXt>2Q> zbw}b|YEIyojU>f~H-2+}ME@qU_jV1q{s(_ZwdV{&(IE`XFrwPZt z4$fibyIEr{o;^Woh!~Mzi@&mQ3J_@Rm%udDHX3D)_$Rjs;x=eAD)m`y;;?=v~$4^aHwSz2k zlf(n{3v#GRLcBHkUIF!C^j;PT zQ$wJtT5;SY&Ye?|kv5$Wu>Pp*_k0xnh5X~|ZIASKp(Hi-A8+K(d8}xDapEuj0>TDK zTFsCruhR^(EltQ#G0_hexGVMcyL(rQ&b=XTyOU@3yN4=PFQ$(YpTjXF-1-+x-l$1A zrKMi&NVZDJ20ZgpS3bLua8IthvJcf;;G6Ck(-LiXF)zlswHzfu@^KY%zk=s3#_!we z?Tbn%V)f{oFB-gM{&@Kb5!8ELX23^+7)sMEpKBk$a3$aZp&o?p=x8L^rPD(e1w(dS5b zcq$sCosk0n*tKwXTSFyg)PqgI-==Sop+-0G5}lwmpp-=LB0ee4B8NV53@i*~{K!n-+!?HI?-6|OY}*I8Kapxa zI!7FiMZwb25d%CDyoSC#SP(ofx?l(sH^?>iFU>5+uKZE3q7Ti9V}tD zzQ^7O1t)F`M@IJVRs0RBR&Tqfk0&?&#B0qfLHH}JtAA>%<^IE&A74UWkV`Z=k`h{M zq4A5#`f$n2Wz*>EU2>{2E<+Y}AUbec^5YZZou^+br@n-zrYd4Y;@2e7eKpaQH539P zFR-{Vjg)B_XfJJH)B3fg5#Yw&mLHBb48HzG@LZtH?!R9)k{x8moHZ zz9&Z|Ob&^Gk(yG%^a}Z37<dxcB_VYXd z6Th()`x$MLSkLQtnzT{JUFu-X`RB#>#Tmgmd!js!k!;%+?2E?}V~5WgQ>?{CaKk*E zl^I*X;teCKxxQ?~28dXQEf!vJVE*_qe(Az!=r0yrS?3rgsrPiDIK`+G;*sY9zfYqJ zCoYIuYrwhDjgx*i37XOHyq3T+F+)n+3fI<4f8t7ILGfe0ab%fC*=oPG8Rb%F;)f64 zK1hiQsb0;pQ_j>%=_=RPeP6MqLiTNqWM@4sQ8z*}7wk^9sN^U42uEhmsxRP2DA8Oc zb26_rZ#Nr~;NCTS$)77t?IdZ7tMt(>eQ%?4;%k4~T%{k)QHG{T^WU-aZvOGOimUN) z)QjZAJi?!HW+zt}YGgJ!&lLW=jmY%4rHM*KU~3AUQH)q;)Ie%{MUZk!tM$WnxeRxc zn6FhyiE^_Nr})|fYSb;ap0*LL{rVm9G=D9Dy4-S@4GyRi8!2Dq1(&RBq3~&>J)?#~ zS+8w?Eidt>;6e7C&-a{oceP zL-r0#F&ulE#&c3?V!-Y9JwPs2>BO&7Q7K<(V1HqFioYQ@T`;27rtIwhd2m-|on;2_ z{Y%W&77*IE^aW6Pe^RSQuY*|+JIfE7{2h>u?bxDUNcljwQ=6SR&;3Rk zX?#`OL3k>#@Bf04hIA@kkE=O9B3WXXb(-yWRUx~9e=CbW!)5plt&3@*Cj@v&bkL^4eq8l!<6CQ%;Z62|3 zs6o(pyxGDW)cfmO|KcJW3BM^<-WgS%@8S2m%inyrBwFMP`;Q8oX>s7+EY@kdJpOoz z-&#r?i)R#@na&kI!4Q6G{+$GC%3BE;-Cj#xt}9+cg>aR}8|5Z-G2q&kaMmntM4=L# zQ@_4B2BvGF!sxE^{t@De7e@Wn8pl2q<{VHw5bVYdN%n)cH>(apw;b_D*MzlS_@> z%;UE$%%m)Zr9{j=igf*m4+ zYqR2}y3@1H-cWh+#$SpAH*?I-@>MSIbl9)iPVutfQ$z3^r=@!{-MQO$m~~#KlrwYh z-Pa#CeP11w5r_C4k<|G(Gkm+)J{FFDD+1cbkGi67Yq}pTpN-h>YOA!Xfm2q zF?Spoy<@R1I}p|C49K6U60QxYZN4cu?&-dG=z7fdJIM0kc|<(rFG9=`>?*Bx17alOHP7b&qkxBc<;;kP%RVVNxgL=#JBXl~R|Hr$|7p%Cv zl_&!J_2C*nb=KMs$!;hzpDP3oE(3g9E{i(xefO?9p0@D#Sn9wR>M(7_d7~ShKr}zM zYZwZZdby-i{rcz+)_SqY30n6?kv&dtU&-V>Q=KJp#;nJC>)56W5Fmc`B4bSKyx3Es zb5$|EXnAb;KV~~pmv?b@@Y-RfgxR;26LT!BJp2i8ZavQvOyoXP(|f$PC2VOSKhEt8 zEP~b>8J1xi`^aggp_v+kxjgdZo;y4kM^`$!e0MqI&FC~Y>Z)-*@9Dy`WmanM>Ngnn z#k01PW?Y0i8Lsxcg!bsy9!72^>2>EH!}Z5=emj8@?&I~0p+Fr4So-CANY1(yT6{)5BP z5fOzMWu`_UqfV`AL4T&_$H%YGkwDaE+j31*ef1hu~YFQ~D>YyTSu3IkQ~l&UUsRp{-0?N-5(WESN27U(}EQn1WoZQY4*?0A|- zyoQ%QXiAFRsbX9xP}-9YmH9S5fM(WtL%hg$4`~<0!DgqDG_bU_A9MB^bIQ-KTSRcf zeN@WnaeOoUNzEL~{r_O>EyLnyqOH+{gkT9SA!r77cNt`Gcgf%yB)DsEcL~8QxCHmX z9R_!Im%;s#_k8EO_viiB)6Z0QJyl)1YVWo7+PW?{3ZwI30Mz`*+1EqytA34HW@t#r zjP|R)5bR900_1EX6+Hy_pZucuih(hUaV+=QP7IW@xV=fRh(fwt?kScO2m*CtI)OmA zL#y93@ShqpJo3h6iAPY|iLm9KyeN%k-2#*l+|_~UPs`UJn0$QZ(l z*YzXpa-v&Y#uk|2xsr%==7{APF9=Kkgr!dLl9FbvXS=D4nGr`uV`l%Hzzz3q6J}{{0cKso3*pkja3y}F}aE$5antj={f%HU>*R&PPzvt zwm+`V*!A1{LrFK|33of%P`ll{ZxrdEeXmV&I}k{MkY{dj*@<84a%l{%vHFK%+`j=5W znx_F^jsvQsGs+WbjX9IBUam8&a4_t^b~(C4Gd|8`?C|?n{f;yd)6n_H&x^W&dkU+&#e>rdZ;sMe1sPip0k%n=4YZsF5pAy_mS=YbD_yVqeKW(*`2x1j&ylTM z1T-rMwI6JsP4FgZKj)KMWt02;VIZq84}i&;T+E1`PHH*7KYl;oX2-RX;Yay}M$FIq z5vfCO`OW2>2=;^@TLph)6pvlQI-)i>hp~Ga7)$WuaAbyJ^=w4sElB_w{^gg6^bZ_Z zLcw$OPFNSFa$AcwW|fRbieUEObPAy{aj1Kwi_ePiDgw!R4KC-xxjGYBK1ShcGF?T3 z-_8+W^~y~NoY1Lr#S-m>Wzdg>)llq!E+I;)zZvkg5n2mgsQ&8E>(f{Fs^_QWq_oge z>($Px>+$f-*|8xxxZ+6eO>p5RAO|U!{b!K>-C}J47SQRV9&|-q%M;#?44pn_*W|{| zQ!ZJt8%1D0As~DH`;z-L2D!ph8q#4a8F{{C@A(D-#Yf1+r}F(IS?=QVho=y_ZW1Rt z7w3|Zv>U1_7IlF|)M_-~J7{x&gNNDI{I6j6@}NImYc?(8HeWewhMJuj-=E9;Q5E)WsZZyD!V4DfRKFDHlOs<(6C^Mx*>Qfqj#%DwVQhiW z5y~3^Li%3lG{pmU`tiQK9SBL{yq(QV5%{Kj6Z4a$q}71kJ0^02 zW6T}vtCdelsy=&z%5Zt;A1U3~vM0oT>{}5Nu?Ap80W-c*rS*?t1+gA&1mBr@B^-E? zdVBS$lC^Ok+z^UX{9Z|;Td0kt06w+5tokSz=mtzMG|yuc&AErDV1Q=-?2mVGmpReq zQ{;nM9bzA01HhCM_Vqd{rUHCa3=KtTY6grd1n_WT>%u#Dkd?z+hyLv*8VFHvh&6sh z|2Fwm2;5F;Kq}V^>r{g6GooRix78$D^Cq`mWpyQt=H{Kkhg$w~tx?bK%+YC%^xu9o z#Kd;Vug{HslI#?=9Le4-3Z$j~DW3j)p(^8s5JHlfZzyd*cy-`H`N}6Moohqko$5vw zavf3de4I)3l;DY8>o>QQTdF^TbPWi~4`#+xo~;*A7WZz-L!hwO zSIL+uGMjyV+(Pu9QfT%!w5cIgm4;FA&r`~{WeXi`m*DGw?Ce#(?`jlB@$go<0};o~ z-#z5b8-;j0F}S+fXl5Hh=W3VApF9!{52(`QV~ z*InXI+-ofy1_J49r8yE#UOMLw* zug3D+n#+ScMDRGLe)Uy`fwaW~X($QFi}6^>2)H)4ji119Jkle6{4k!qr-fTO4=0f7 z!6lKi$9vo_h1&a3k$_@FWnv<}P=c{BHQcxKUF5s%r_AkWDnUCgu{#gyx0t12C8f95 zVAy%^rG|H0JXxvhroj(wKw;jS7j0_NK;^Krwnop($3xGnF8(@P?7s>H@qe8ES{e~M zhEk!+5QZuTNOz9aeD#kiK?ykT=`pZ`Khod6J)YyRS(~Huy&dcmYgZSFpTgWEfu$anL9|5)7^mwbHJ$`jTBm;$F_o!FYd-YjsfZM}m z4p<(izNT^T2jj{ujJ5rYM*DFJ#cJ-{mbO&V4M3NZ9638Sn{f3xEL>CM2>tfGCPs*S zcqRqwmVPwwSB^j2xFF`C%Ua>JoRrFfN(pTy36splcG6ltKR%#*{&GphS?6Ir^X-7om}P$o*nN>GZJFj= zkI?Z82FXvMH!p9O%lP4Sc5~>0gOt@~n_5ekP>0OqO$U)<^6vP(Zj94tftZ4R+*X;_ ztnoLfCgwrqF|}{bIfYAj{WUfu$g~T#6}Nm@_jmFu^9A> z5PhKTmup`o3&w6=wkfAB+1Pp*wBxda!JncZv&Ugjy;hYx{>^UfKrRPcDL5UdR{SIiRUBVw8 zaWahSXYcqIJgn+|{aZG~K5c+k3p*)f`!g+<+Z4>y%zBP9-h4<@f`Jzqncda` z^kF)IWvWN=9iM_j_efLDix=t;eG`3ge4XIoSpwD6_<8W4M zBW*p6UXmebg=L~(z%o@VIx>}43}p;0d!zA1Tz591vYA@8P#%>d{_)5Lm00zoFY^8Q zT^GpomKLi(X54li;92C)Yjep1Sld)v}@$Pdx|>gsD^rX zf7|R(<&El^=i--Vs%yn%C>pD$p2ar^(`dG9Q=>7bMGIu;^Ef^*vnm|10+KJJD1;M;j9c+jyR5f%q6!mu)PUZ><%xY z@!4*+*ew|-y+>UB@Rv^3R~>VY0enJkOvov>~u)hD)*BG zjyi&Ynr#xD6IvB(G77mq^&iJ5KmY>~PQ|KUrw%UJPjBI-Yh~3q4LKAulllGMG zFAey;6d-HCX#%YmZXlz{-zg^qLSNJoFsr6RBSJTTwYCF`|euX|5{ zm$@p^XW0Jk72xzNRF~Rz=xpdbKPiI^gzX_g4jz;;vq?%=0@q z1Uf`?u|*oq6N#mV_FyY}!)#`2lBDKvCX&V|svY*-76*wjO4Oyw`c=clFxwM?CC9$q zqpr>g#wZ-pEUvR1ITsdFIl3Q$6~J20;PI%znFe4m#_Wpp=? z9Qp!CG>OBqEI9Iz#EuAov9&^JWr&oNio7>&CteR`&To+flVOoUbU%OdFzDY9&m7yo zdHEUStp(&3lI9Wz+X~he2=#gFIqWe%O3Pa!{gBE(j(^g? zQ=P_el2n?*Eq`~e1Kn;b7|kD_;@bmm8LnhBqm|Gb7r`we#Pszt5OkdO&8%R7vyL&S zHutWUUSRJ5)ZOE^{xJ_1DE#*wv)GFMAVUYjaBU|K^Z^F_4TVPio}cMLaW)8<0%zn{ zxHuyA;8*_hK@+{{>>Jyol;m*`!)`fWhQ5@f0bL}Spx=ycFYuO|L}BRzc@`LJaO(9y zph}#n+>6Qe8MR5e04GOylbBs8vD+|OBb8rO0^^)efllyZG(aPvNb_1m&)qXs`c#-| zqQdS2pSr?!s|y5RzjXZQU@SxbezuC1D7`2mGO^kJ(V48F@Ytf9U@Yi}44R{`3BdI^ zr?HX!CgcA#`h07|>%2Li+ZoWOV<-4T1s-MaZ(_MBRU%AIgeL2a;0---!X7g9?44u6#XNF(cM5bQj>I6G?KBf*N2d8M+IVuyJj-sS(262% zC+m!a^2d8Hd9@6%x#e>-EjRQZ5Z&^CB2U$x87lg$85Y!*msFym33$H z`}^kQ4zB|CvjvY3lP|}}BGb3mIjzIJO-;+>Upd=Q?T2Ntli*ryP)`N;0x#uf*>YTX zB?E*=eRU`@;j)zX1&=%r_+JzR-JbYHy{}za6(u`#FV`R}BCWlDm-Vt=+Sh9&=lUZQ z1Pz9BFr)4kzb(02IK)sJKD6Q({FUNaKm9lvJzlu%kj7^C<|=Lak$K0VP3r>{KYtQk zbXlZ^$51mu_QCrwubl%{Juo=S`GxOxZ~p3I>%C`_=L6dPNAA#!5#>4NE1ng6V9ZS& ziCl?xYvX0?TTk0V>q~z74`!cEq$Yl!^Rt!UCa1H-Q66ScK)81tvfk2#a=xm_?zXzv zF7p&rc`NE{q-ONrk=;+S>uiRQD%lV(CWVu65<%U3lkqBcTY?eB9w&401s$2KE%2&g zB~Z8HK8~q<7p~1`yAL#=&^d3bPF+L3zA_6cnVzP$aPhI=N1l2wzrzJb?h7%&>MHKj zumT>)Lo;}}5?(-is&{uX;M&^Ys#ETWkrt2-MgMX)G>a$s#g*db$~|&1gFE&^wZbke zK8lp}MS$|OL==h@Rd9|4jQ^%>nn%45*%BU}K{6a)P-nDXD8v273xh4wE!b~8+17NI zf)|q*XFo0bvY*j-!;(aCY*%)4Z#9vs z_cXto-t5aqA5?`l?u9KL=Fg}}yZRRd_Ugfo_*Z8w?_h+kKBuua71m^t_j&-CTwSn- zghu!Jir^0BK=GpDk5n)@0E3D6DF|iR6sNo6aP?m=c~ zi+!MUSvU%E{XM1jTb}t&*~Hs#@*cD^#IrPLqQoP5G$hLoNtafuptv~YJf+k+)}z6P z?P@mg!C&iM5Btgar#vT%V&kb&28oZ{8pK{UNmj2hdAK)FRbQ%wbkP@!`i-$OOL>jq~`cT$#AljSOx$h zbNQ01ywCTkhNwL9>Gojn}lw_2LL3T0~DLJ4@ zZAGxizdPDpTRo8Oek^i3aqeoU&wkd;KTqt*N~(BLHHv@xi`dDz@G++r78v@3$EjMIV>eDv{iUE0_e8aS*isZ%^9@8b|L@(1*@B? zLeccoDQiik$jJ{YPb(6S=F6;H@RNF}F2+qv^&cx@&^2R%-AjvB(A6RN{`aD|xD(EwPfV_y@+AA0t@gWF;AdJO_+-?&1BTp|g_7-IVr2yWff< z!sDD)2bRqUDIzUQCDU6*#ufoYxr#w1P^!%WakC2GCZak+!*FBFgjLT<{T zx!Ywn`)6NuWvaHIDNBzQ@XdtrJQYTYlN)egUG`4jYwq9TeO}{7U}}Ly6LJ-V_gQV1ZX;SDIDuW9ptr3D*L7jP9$l;r0|9-0iX6saj~#uRPkg zTRxfIB?L}kmkp9hKQ9O%OyLAB0Lxnud3Uzl^_5Im%g7-<)i$lX$9mDC(K6#dN>PJR zeM)M5aU6a>C$doR?gT4YqoddiC)O6Z&#MBt2DeL9Yhk73=?GEdqLGR3h8P`G%NP1g ztSiw^8l)4Fm<_< zm#|LHe%@~oZ5z~_2-WBFYjuB_xvCxtKE6<)ED;(Q0{vz0sq01V=~{rt{xU1hn7NGF zc_cTz*ttgPWyN5hh*mJf!B*2rEm-+aN$fskzJ7Xke{55kXmm7EIT$hWn@+P;f_d=` zlA31H)8f4rkvu5kV9`wy{(^Z+r`2w!cD?@c4)QI!i(&WdVc&M)jwzzvKk81;C-{-r z;V=fq^7$hKVy9oX_$lbcn_lk?+_OJ7{Y#0t<5VZ=k>L_N7b{x<$~*C^0*}St?@^qq zt!C<5E+5}{Hr|86DBYu8E6P1@Rv~`y+MymNv0`6*esk*;T=1B*jP()oa#4Kz zmG~Y6sj|}ty;7!=mD?VO^ZRLn{Lo>|JM5~|GQNaS$H^lP(E|PXB)}*jg`~1MS7Tnx z3^kFXnPjma$$g3hlcb0m-m^^NTVrHD5-$lL{^ z93$`Fr~ArXXMP-|-lj+cgqH8FKo{S|?PY9xnY=J|z+)$&p##foyo2m=%k}SI+w`jq zXgJA2t?KD}b5#`cG@RvoFA-SwICicIHV!)_Ez?D)%kgi#gURHAq($lsjmkN@PF#Ol zHS^T^ZFilci&F{-h_~H-VW?`3i}*YL3gfRcJrw(xU3%DGYnlBr7kj-y8nTQ2txTc% zno!)DAl`EMwTG`+0~31pgX3Wl+^?5ErH-4p;p$GK6({HbjfCha-Bp!GkR&bAg^p?D zMYGYmmss=Jj-F1JISk|X#|`G&%SQhm0ipbt7JzCkt$}oPry(}a`3$^#i!3w$$Yq5_ zJroShk^VdY5nq*}->kgPWY(r%ydeno?}XhAqyD$R|1tbeIX*tehoyB#9Z?VQMsQ!6 zaP4cRojr-95VLZ=yjaXW34XdVtRn%hmvM4Fb(C{_!~ZWk;2)uP)$%iUHovpgynHM$ z-koQj{5h0OoTh~T7HZJ9#G`rSnvc5LeoG=mgSdNYI5gv>NuxDYmKq9adT$a;G2z43 z>uyCa7Vcc-W%es?fybD9&NK@Dzu^m=U+4H-Jie_M)^df_-~rNm-38=I+I)~m2t+rED^ag_W&^*CX(260BmU0IMIa$Q4@zwmy)+kH`C zEE4m?6N$v<5{@i&p+OrpMQtKef0HUDi?#W~|D9C599{R_zWQO$R4P+5`xUAR+s#+f zdd_cOVBPq&86i~38w9WD4IE7i^#mR|-cQ>E2QpR|1ri?u-jY}m_4T35#vsgb_$5Xl zrViJ=Yk2BaJ-Gh9VWRY`7lDh#=W#Xk4UL&+>ZbN{Cyo+xAFMnihOG% z^n^srYxS#0O_I!*cGalhfj-xBlMfrM}=dU0I+d86&r+W}H@HD(g^vo4% z>m4JXd#`4vi(khFnmnA{S#^h^JK;S0z6jwb3G_t{Fi~1Avg$(r??gWsP;8W>qmGx& zN$syql2fadr-eF?-Bx#OZ#@-n1#BYH75qE6ChTrXJh7tGIh0Wk#_1cPu3=<^HM+=j z=%kw0{6i9?dy5M7PGf_wcIYqKn1K$VwHlB8rjE_#1qtt)5_7x};lb%I8mf(~rJkH& z^cIx&=qMA_)*FrhKbiMg>Ypa!zQ!cUfeByn9|NLNWkj*9@50Tf@{QE+N}O$j;$eH5 zQGr$W>bHa;GYH>v#lv}pa2Mc*P|+`mWEltJ!z%_6yT=J(uKyXpkHM<`|MGW`MZ#CM z=T`b`2Lx7y29SGo7NU)soz||CA%-NrpbnS;-(d>u-XCn&%W`?Z;cHN^+D?a+RLNv$ zpw$#su^+@_v)iqN$6O+r?eaK$kxUGY2`4t1=v9;*kGH^4hA8OQ=giZXu~zP@XWW}( zHXG5wl>Z=GppaBKnDO z))jSR{5-eYaFX_u(Bp{ZlJ7~H_(h*GRmRFQNtLhw<9LAC1u3)5mcWd7G1chd(^k%6 zhRH^bj-)Il;7dZJ^|9&mE|dKb{1f-io)NxnXFmUP2bvXqO(jDl!BxU3&Z*wO*|SdL zeK4tDY>ZK{Bzk9aXTnDUf&I5u06C0C)S z3W!^$#>1OHI@tLqq%o7fi^D9lKeq4F&QkNLu^YyFIANhvGj6wRi)BAK&x_9VGy$tO z0#U%gRNWN$B6t*C!Bhj$Qv>lIfsw&8<|alG&a8*=2#sgmn|oeUQsBq6#o>h$e1qQE z`F{rD-yZ3Wkbsr1t}e&AvDr}-Dg({?QMNGG=9+_=^>~zVi|D`LWVS}3!0My{7_pzA z(dCFrmH)0Vt8!`vqZFp0{zg6ejVIK`?0GmWaPscqT*7{uZu8D`SQXcrnqC9Fq$1)| ztY=!UDECDkDt5~=Czg6(YXwM%eWRMRDPi_i{OAm$3xB2rscmB7-6Np0u_T4{&SNK8 zK*iE#o2Myuw&GBDH#d5>91S$R2M7KVngs40-XR~KD&Qvh`7NEs>BB6Dk7r%r^1b{p#QNns6pA;mEF>)u9t29!+U&43P=B_Lob1k1E7hMm zl8Z+oll&I%tT)Zj3IdOqAIr`o{IInnPg5Cv$n z(smiCb+#fmQ}>q%9uTPiMui4yy(_;(V?;4 zcU5p7#wzAxTmbWITjt zZ^%ZzyWwIip$a0WUEk|i@z7p+9dBN@Y~iH2_vCC;5(iU7WKIWDiT9r@q^lrhVA!oA z4LU|>)4#C87bTelNbM4qV0fs%J~d~J%|h<^v&(8`B?c{mCL0HJWF`a z#iz59(yY*#pO4A-NlNL&-fg!jBMv`W)2?7}jtBsVqDuCv-m3F{o4tP?-cI+_xKL_(*;S{2?PP)^O`Bw+M_$Z&Iy%R=bLos*l=Cj!) z@l}uCo@BEAW<3#_VIY}Gue|Z3>5W33j!JgAvrllZczMF-*`TlI7W;OQ0tg%gtd8^h zyrk6h4`%&1rjPTVsVG%{mlUanJVh{2>rcS^@Qio&BXd`XR1m%@{jW{iNUyVK<7GgQ z(A#n+{YJo-WaMC@4XYf7jP;;;ys@2f=-q8o+mx&VV6;M!eB6HT{NtCY*h|S$$~rmY z1&!NLpQvEyp7=4ZQ=wKa>NzOo;XtMZSR&xk`apsQ{KAjexoxmL&QHQjPlVZk1sR0`(W?ydm{s7JZN6^dw2g)@k?0 zT|B8w)Dz$5T9D*^b7b39_p<+(NiZ!th>88-(M%^8zNcVgdpz5`_uS6M&)Py0ie&d5 z4mYU+RRG!=xEOsJ5e?`p9>!lX*$-AY-})2uc-)A`(=5Y#>;Hb^vAdvV>xe32chHmu zo%RZqEHo0n)cr+FH)AgB+p2qPxcgM^1a2Kr$bNZc>H79nHkf#*neFZ=F@W zeDJ+n^&TyMG-^DGD9^Yk4RKjnMd84HfO^PL0}#nRdwU90sFjBwzDtYr6ma=K(Tc#* zV#K+&L47Jn@ujk8^#&wgUK_iOgXjVp=nE!*=sm<}8B`IcqVs}>?ITx~I#><`qqnw^U!o6*O2 z#Xy{OtQdEu2Y_drQzUnG2WYZ)-nSJIF1xf7FiRB*PQJ%gpyPsb zg%~bI&NwUd+H>cLJ1W7Q%Awa+)i(E)8X?_kH~aHMf(retaRq||zA~K#B5S6Xic6@} z)weQYsabDFMle%hHaWv^bZs(Dt=yTWr|uz80B=P6UrPDEH2l+uIU!+Uht99OT;($M zvJjQO)lY*}c5n5Z>69n4DoN{?uBN8_aPYE>L`l{Rwbbvtf=!5BhnC2RyjZxL%Q|i~ zR`eU+V6)zA-rUh#P>*s~$K$!n&O&D%{Skv`sbxYa;AjZHvom zrI&d38BqPis<|1qXv44)nydO6=DeT+ai0FGbdAllWu8yf#5dnEN=cJVRQm>uVxrd8 z)nV7uTu{0w4WpSxrGNV6&@`Q6nyX&(V?1qVy10@$LNP>n@r=R*TiC51dnnUryqZR9Je`_ZYwG?k_Se3J zIZw4L11=;9J(9Z{9&g#EMW-Z+8VZ#XQ*spx*z8u=K=V2>%~MEM``f;yF~NNujb&L@LeQkzZP zYRVWdURE_hrEMB)tY%E7z$-?e*9``iNIJgLF}fcp%K^ zyvA@LXx}7g7-%SJP4vpWPq21IzVvPLguC5$Jlr~Sp-X0ed!o--WzwIQ$3ssm)c8TZ zL9{u}msD-QF=aEAq54LHNY(D7PIOT#2XGTus^05sJ9tKN;RavXR*9r2bc3-LaWT`hcnlL&s;J2zx zYQql|+j51NLl?elB}npeG&%jb@qK%F>_hnU;WGRQzaNR}(?+2@4@)Kv(|pG2=l?g3 z@F0gJlOsemD%ea{gp#qo5}o9~-A96AwjZt_#AEsSY3Z{%CvUilJJ;>>SrNOAz2Gs$f*B7(8_c?x0!BXWnA&7)L8|=Ks6}v?qt7aT)Xt(EDxOJ=16*V!P zEdmL1YEy@_L4MnaiqY$$@;S@*F1NcLDm0x6;IZB+`p1qpG0+<(Nc+~2E}_pg#+!tM z0Ca1tO!U)j;G3fb3HuedbeiSr^c*C6a~Xv0(AczoWk~`?lr_D9&(c0{Z-Ih~Yze%m zf|0y4(z+h!Ue1PCm-E!vcA?$?h-be{Zb6&^?Rir2_~&Ly2~>ffV+S^_o11P8&Tw|P z)btx040S%Yh*0?jQPmz+2NWUPzDpv|WKSk+N8%#Xa8o4_X2FdCQ)e>vveR02VcUGV zxpRcMcdi9OIItG}edWRJgmkQ*i&dzsf$!nAC4SN`ilEfA9O0k*TF(47deXN-Qod6& z8I^1Kp;U_{7OLy|vmS4HE9s^p-^aS;f=t?AUeNF78wkhuvTYQhtclpzxx2We+>@PK z50CSiKYy0a_Qa+{HmUXQVzC!VUMt*Rg|u#WDP)21)nloPdum&3q00Aq4m3~qa+`yb z61I-JJKe{rgNHZrU)Q@28#n*Z3mM(Ld;ggDgpZwcY(ib`u;BFgl)MjiU9^q*=1GH> z?!+%}U|MB1Lf+f<_@P2!VSoqP(wWH64v$&qIgqHJ(DB2QknBS}U~*w7?(eDHX?3_c z+bzXC``b`+iwsAEny_3yuAMbt&oyRp^ z&Ag~yS z4xwwf@H=hTDqg?Tb;p=RJ(Ni0{eHB}oNm+S*;{k>snPO2oE;8%*Q*nYOLyRxxR05| zBEnv}^;d00O8@^9U{Hew9Q2u0!>pMAfUhYpQ|BU;Wnc~-=mYsdlGrNVd@D$>Wf#1! z%_jwiB)y?BL7pvdwC}x<2)jok$XE5SyBRW_^6P638?*xCa)pF|T4HVy%0#p>{Hl%`o8(yFpOgT*Il z%B-tu7)MSq6K8526|-L7M&aNr*6M9*w2f<>G{Ce%{gi4d1?I=hOd$WMeU*1Sp1ZXU z#qD3Iq_WhoJl8e2gYAS$VaoFBw#|LJPJhk2c&5&HssqpS=wOEc3yQ#x9W$Cxl9+SA zE9{>5m}~G!iIf@##URj^;h7XpXR9uH*0r7+pj;&_=(Z=audagho;=?fW#4vbAGVcH z%etE%tDH>Ucv50*BAhP<%5xoZblZq~o?u22&X-b;=bX3*u-uNPSlmjrbRb{xY4L0- zqelzo!p(V5A1Jtqh?%K_b7=_N#AXREij z!EN@RiqAT_8|oBa?rMBBl=mIRog9YhE7YJ9uyIV6()c%l(wcXSdw!9l5?gn{Xb6rF zR##>+(ll}uc`H>mAEF*~$RF)j&L z%JFF%e;7I)r=}jY#ZaQDzu}f2BbFPwXVKLsvgw?&4_YFG64$L7po6Qx@#hsErXBGF@r0?Fz zFQJht6`c%9nG4>owSKkpK`$=96^2n=&!@-#6Kg8Nl57q!(b%jcV=7HTnsBV6g-Wml%hHT?XPTvGl= zUYDFIu-F+)=o+1+6KGVyxV-W zHiW9*Ka_kC)6?RV9!!`-4peznjL@1+%I^t>R(MZ>u1>0pn-$paNs*u+OLpXDn9Bw} zqvium`Cz9y3%nX_fw22c7nA7bw0nFnkAy@r^JH+8;HHyw0+4; zg}a-(Qgp#t z-PawDEc|~3lDCE)#u{7TabV(kEoCN5P6{iDL*dhbT{2N-|9rv!GlWtIV!8Rp)wN z(6)$ZO-Fn(F__=x<)iLj1|#Iub@`oKOj%T|np-5z*XcU-+| z!Uu-``}WsmTOpPcFn8PO=IDKlx^TlA7xn3Ji!t?8t2ov6U8}2Y=VIE*FhZ}!E5`Xh z!Ohn%LCMg)4QNJsQ}$bW7p<4sUrqDWF|AGq_kC<+sB)ZI=*#?q4^F9cPe`e;QNL^e>m{8BZ*J z`MC*6;z)VDSo0d;!W!V=B8h1+F`}Adn#94X;>R@$iAqo0p_Nwu{h|WagFME(^{gIo zt>O)Bj2g+tz#l#ADOZ~$+vlCJEw0)Q;IhAl20;|gWy-kI;>5VZgD-AtwSWZ`Z?Qoj z-gtt>TQwyhQ9e6%XDy~=ST%YJRO}FDrdk$Es!i)v@FsZT5nWvwApA{<0&HJeo(RMm zM^u;1UWBwrACJK$Ztc~oCDs>|MkbmR>vUA%ct>hYBVF;saL&e^I`YTwvL|MD4 zITli-=qBTOSS>ZSugrK9Cq#a*aiO(sw5D&5!Jtb-dlfuma)l1cYsp08^`5igr&c>( zs&W>(`?U;7v*_!sh!`loaWl%xDe}XOtg=!am#1v=KqF{^v{R&GM}5$f?ad*>#si&G z^qoL7K`i| z_xb>*5355d*48F5d7y)USti5VRZ1)ROper1K~e^!?0=_Cv{vo~I9dz=d+w%=Int^}`NAnVkDks2Pdu$YYDK5Z`Jbux z^51<1=6~8b8P`zhfk(rXlS zRJGcvJZl!|hN`N|UX;d|mg*Tv|Ei)Tra)lNxj!@lNhvOSzG$h^&mv`GN+U{Psn{&D6bfsLq%Wf3f=WUW6NuRcTE*}Qgu9Qg=MQMx9v|{ zjhGDm>N^+I*7F)Q0UAGC1(^j&1{U&JJ2-^p&oWW1wFnJ4Cb8(MOSU_aY zKKvyPbu)qN^Ley|UA`-0TdGQXrTjUbkyz1Z7IyhNuB`v|lWCbTudMy%O_hmKK3i)#zK=g@g>nu7xXE zp0^!4y(#V6*CiM$TNUhJ)vA?jD^>&>bf9CyRN^b^Z$QbOU4)|nf>tqWmaQZ=m`#U{ zEyzp^RA>b;Wu$25PQt|Fi{`Rs)mjRIwdmBP1!-{>+9@G#+h&}&B-Sn4LVEMIw5XFv z$@b+pwHEG?h2KgK2vBfGNf7;I^H*ZD9=9!>1%Cd;$Ze(ZJPmQcP z#M_?ITexR2>q;BYp?(S~l*i^3i&$4|flj1(`JwL49kmp0#3d32>{2q1xq{=~9ZylDkTu`G&G&L9 zFJ5^BZq&iGER;0in68x--2KK!(N1>cm5^Mk5h*^PWCttv_-L3@gP^S`*}H=cg>kfO zn1Lk)Y+AXB^*f5O0uAWWu^|cZ9584kn1VmDhur0BnY}Zf#_ihEBs0P5YNv!vbLO(q zRao&^G-}?GoRmT~ttcj;P9`-{{9ZBPLN=|)BfCRA5-DN(x)rS2REP@X(4k!uQj;qi zt}(+)h1k7m1vmlVA+bj zi+*8cZV@_|ME%ZPs2_lE?sf`AkW$T-l`AMrtVi1pP05J!lzycn>{>d9<$GPMjCwR} z(U{sn7p-ip@Mh*M*hrxhBq=$aK!WmiNMeItV_`>gS-EIAxw4Igzx<5b=}6iM_!Ddh zIjo&Bk&VF|TDEFNo%A@sVeh&Xgfd%^lWHTSg{+-FkF8n}U!y)Pnl~iXSIPJmP2t`x z?DEy7X3-*MuPh)?s|n4U)h9dPBG{B{Siqt!`9vj-^z4?jYmti93d;(!dE+Y9uib@C zYsnGKU`t67O|nw4Ero=NSTlbvTOEt!dQE82B!{H^cBdp-$c~Mh@ik~omfp+80-FRW zB!A0lHWnw*sBH%tr3cF`52XPsn+9=(Y~Hw(T{I#aSUGndZMwB%?YhluaywDq4zq6E z4)RL7a$+`6u$@)8Hg)UNCfV7^iakj*46bALvVGWTb!gDC8Fk~zjIlzNFJ8f}eWk?3 z)h8jrj|!I=vkGVT4py#M$v#Vgsz=vO-Z;1s z+pwM$YnC#7{Fm%(cnqCu$3u84)4zO=FD5T%=e~7Jn7WX9&Dv2nJ&xSfKQg1VEhn_g zVEgPby!wx?*r38}Ub2wY^JnqX&P-ag%^}(6DRx>blm(lne!#0QOk%4pX8qE|te*EX zv-Z`deTP~kl&<5mhwotgwgh&rT#c^RhL#D7dGDD|_-W-zW?$e8U2_e=_d7Wn# z*5$-5nXLKYb3XWT3afYSVaD^CdqZ?|IC>?-b`)(==*KDUaoKHb&D|*x_W!{u& ztlH_aZ^Ke%P5zpncPW~*Z$-MVgdd-{p1GOB=#ryZH+wW6eYBWOdzZ0vhef@Ht*Mz* zcJxkxa#%I)VebB76Uil;n73p(vwm4XKH0QuQWKjEeD%i1{IqNxYgR1a$8T4XJ*XFT z{SLc-nZ^fWC$ebsW_IlA(u!+TR^v2p8GwlCYnsy$mN&g{mZ*6Fwf zEBNm1cll=KdiI5OvHaVatVpRthsIfK9d|cRu5ZclZ8Bl^Y+ktkaefT9qhGrku=xw_ z`e-YyT4l3g%m;kFbQPNytz&my0`ch%>DM@LZ~V9xVAzH}ok>$k^WY4<&t9FK(jekh4Ys8+rC`FEMp# zBTny>RmGTzPmRYd^3$;Ui5z!MGO(I|T=6BfsF|-(>+jdmBN%(d_IPFa~ zuU^FwwVPw*E@aBye*A4jYWxe8yPhj`rU-S0x%~6dWo&C&m&P^xy_QW)8k5#Ip?oKY+=YBM{yUP6ev}&r1p%8)Z{ER+KhCE~lcULuk0U;y zv09$W?We>+$sFE#?rX+P?#>ncb9v*9<#f5`DlTtS1B&vP`|8U~$nVOav_y1q5>1X6 z#7W&!VDo$2^6)HH_v=h&dnpq>+{7_YKTJ=6EmQbx`XZ(jbfovZ=NY@}7;d?40JRgL zWb3!w|HP__BW23MM$m~ZIpeZX>|L^e0au<(iyA?kecK4-yCiozf^#n$4h55V;{I98 zU$U3RT~moq&LBB42nFkzHEk;Pl^<|xOP8X&C;@*22vj=OVi61miTB&o9e4>tGl3Of z@X(m=__kSVPN*NH={YxWLXAWMP9BRtxSvmEx^z2gA)ic`PFnYCxV~RHkjKPl=aOs( z2rAgKbQ)vkXK?+q=aUAMPW^(f*3DsErvWs!1udRosw_W=X_?;cnm?ITiix!7$*CuF zBFIKwxbab@tvZ$_ozu#H&|M&*O$P!$PG{YkVvcCJm?^3j*T>f-bVP_xH@OV(?_h84 zPFl2Y=ruEtNJg?EU;(}a(&9C#-7n?5Gazs2SYG?!GbZMBV?gORUiu-IQ!cudBb)lc zUB_E@J;@gF0a4~p_?91wT5NBBecgyT!E&h zy_B7_Ah2v3-HsYcJ!>)df0e*BV{WD{QA(X+N`b@n#x@uXzbnQ#Fc=PM8wlDD=oQR~ zHsYvGt*He>A}+q9_6+RwHoq)(=+@QtR;XjQMT^6<9om7~X#f%88}uM2Qb?E*_Uzrp zyv4=H%TH30r^rxSn6f*Qk$u`=S8@Uf6)5U=ZAaG*X;4&1G^qh69bL-g!cxLOu>49* zNuEv9qdL&BMKTl@5lw8y@M8*?nHwfjOB0`H)23sFclq|^tV(G>ryiY2!6g(Hg4xG# zY}$h?-3%=<9QNfEq0(}JY*@dNU6RX&&);Xo_ZB*;$t~D~nz4lDzCDEM45nW)gi1pA zGHQ~6g<>;>5+-4ngVeRl{U>a3fHY2Oqj_+{8oC|PoUA3^U=O;2T9mMK$3EPagBh3z zrG-TVlCv3nq~_i2+sV`QQR3j}vcAzcQ3p464l7&|rgf)!-fqW=~$5n%JvbA zPaq&gH0*mhCwI=k7v4#HY6<&_DO<;{FbrcmLAVZL`O1w2?+8Z*&64xTE80v1&FY#* zGqQ0$pKjejpTJI*Zf(iQ>9BLfKK3qH#4cWDd1)S2hQ+oYcC&cI(KN2%uNZ65V#2jL z(71IE5(p8cHb*p6%ne700)d*X2*39L59~-Mv1m1$6PnU=52(I_Nx5SadyWoKCt*30 zf+ulT4cNDQ4?E_qqEKGp$uav-*?zW6+(t&P?zCx~fE_b~_HNrj*lopegA$;$km5ix z^#>hE$><&I&ex`3 zM|NsNdLn2I@tGYN*6|A#M)y11Zz%{B5^)OI>qdbfPRJpxUIujsOhP&yGXHP9UwzFgj;y3PTpjEj!XM zJB;kw4vm`8e#cup`_2x+5n*?}MM8rT*sz6QMlzj`OowP8rT#Sf9ovLY=UTXqL&4f* ztSW}l&pt+RIEmEIQl`|FJ4EZPF-l&zz=R1Q4Q$duK{y%ec*0oeW{{O-+|OcQ(PJ) zF{u~*YJJJNEyZ+hTZi`Y5t}1Np+iE$L8lN(kFa`AF0vt=hP_is&g#I(vsd!^-ybBs zX#)mba2Cxac68DF5*ZACzHuNTMhXVQ!8Z@U@)PH{xKYPjQ?wM8@{yJaLBEgvT?&<@ zD9v^8uJ)tDMMNxb#Zyu;sN1{|o!g|7pC3i6R@|1=f|>~yJ6x&cxC?~EE5o+%1Cb&J zC$pOQY5^gtUR&tm#Pkg9LTPE)mP7#C6`V*ENWijO6iK9J#gi8RY(KVL$pO?-xH(N} zQ>P&fl3j`;E)v&=*6nLh{IidEC*-Z;SBc!@j~&hN%8^QPae&~FJ@J3DmOaPqV%>MC z47{Nx;9^@gzK~a5SqRaj6h)%)q0op95cG++a&P;wl7rw%*@7~q#Tu;vo3ETLURHY}$m0^EPuv%X;Xj1Gb7eY{!l>*uF|_Qz**?Y#OzS=aYH) z%p9|gn$0^>v(-tY-Z78OXKEJJX~RXpW}QlQz2;B$+)T(XrJ-+zh|cM3-}NQgN~S91B)VIa24f=h9Q+U+Wc7NNr-APzraio@)8+(x043#8DbwXoWn!4F^7r1#Jql5B7r zH>LGUGx)h<6V_&QU?fx+7M047XaV`6s0C=(B^(x%g1EQQt ziIqBw4Lepc>B+I!R}7;`&_#=lWi}8DhCdZ65C|A47z_vgBBLw|%K>OZuUea!FnuQL zBjEE{gf~s$jUU_7qeI0)X2q=v%V(GW@LHCQ?M4ZaNQ0~tY9&O-JgPrKh792NK?6Cu zYeV9#SY(=5ISFwkEMC8gU$y}8iLm2q-d@?5rVX+e8+9$S1j7=u``ETwE>a_++p62Ayb= zx0BRH&FS5LFhh&X*va|SP0J=d*n-}5R`KnRKhUmoGXUx} z%)(bQkwE5A^dB;WLB|hbz|mc)n`Bq>Hny?K4I3+__<~cqo?pHxq|F(F8F1XubZ^{* z!1gFAHW1n#*O(tS%wp;%84T>;$s@B?O;Q@f5sB|f{~<#dFnBNnkL^LDv;dVg?6kTK zNmLsd_wGjUCy-#nqPM;xE3GEkX%;FPqIB(8X6>;E#zS<~4Cd|FL~8pcklc!vd$*9< zvIBhw4CeUbk7r2VBWRuoQ5S66u84@GV$qkBMKGr|9eo>!b{xR*Lk2N;@DK(b+nRI| zXwL<~v*Z{Yz%2BwiD$2G}3ZGvQD&EEX zX1eWb1qiG9TY~M)DK7%=N;6Mf* zKZpTc8j}`OWv`C%cL-JLZdZx~Hit!HyAG;U0wRib`bR(ZYyr7UdQn=`>Cb=Wv{5zE$>fbv1fJjQ;Xi>;$TJz8bJ zj`3qz6ovSNAZ!`Shg<5?s7^B2$+Ya;mJL5mV(IRtw6o&q)Hs#xOFtzXmq49baj@w- zCT~xo%W*?Ep=VzbwtT~?LT_i(EMFQ7|AC!@DN}!7*hxc;Bn*biXxCd^w>?#)?M2rx z;?<{k=Bh6U2ja1#Z5VOSCA0!07KXCyM@&0m9LKE`=iS9|qLc!4j~YOaZEy1Oi1Ufm zPsPpMN2l{1=91nyC^telc5bG`Nv2(@X4Uv7x%`)9M00D?_vR}&s$l|E&M@Ip?4;5; zZ69+#dz{Y}t-{Hx$H2R;qFW6MT@b~IM7&jUS#i@dz%x zZYVhb$@S^pvH`R1JDqz+UBU%t4(7CrkL1ZmpWx!>BKUj|Oli-#_gq2ejwf)=DMh?{ z-?>bQPomIi#YH!tOM~=A95ck>&Kv*6cRerQ&htCri>=6(DKM=Ebl~+{zN7VxwMg=N z+FnBQ{+xSG0dGHi4p%0nYdp_iaetzS5Y? zBSb67yz<76!b?o&xIvWdDdDzMglmke*`1s3u^IE>vz&doO?G^g{9QFT_R>o^CLxz8 z-}uSuX;n4;91XrEbg}j@yG}FWGBZ7;yk&?5A2sK$Ykc5p$T^Y|dTi#^mqzfpQ=cR! zm!gj6^TdV6kQS)4=Oh{@8ZF-m0dSo#5l0hIbs`Mh&@ z_pOIH_sT?4-5q3hIfsjeb|wWVRq@1Swq)C9S8~O?DEaZV={xdbhP48RI-Gx5Pab>x z0X{EvPzVWG-MIXri>T>Fh(x34iU~zD93|>#RIoWiPH)dM7oX3#oD|%=J=E%TIv1XE z0`-r7fQ$0(;h(ooBxGlj(cxHzcbLuIP$i>4Sy)M8rU_CVnq8E zq=alrT}W+oG{bwX;Gr`vB~a5x@ot;0XI#SB$G0V^Ec|dRZ-*NR$J(NaI#FC*>Gc$i z5Ow8%1r0Qi*_h1SFsZGx$g1HPi&ij&M(ta({%e;ru1fjWs$%{lGz zv*{W;I+vE!gpO(|xh=0G2n1V1SUEb2oW8ZG6$ApBY4_g9r%nh-&gQ7oA7pS1(Bi}7 zSTh*@1IwfDjDAgtV5b>vxks9aeIpPutg;2pn&*3?C zrddjhDJUr=3RuB((v$28d&7xRoS#cLkW6Y)Jhp;xVLrv-C>n)j1xQLyCZGT}LTOPU zMNu#7a9VPL7n5B|$;~YRe==#wfl6`ST^wcO+ctq~UdiW@Yfq+ay1zn;*HJ=61r$aE zrQ%3QNhIK}ST8Qg+edL!5f_(4LZU?^s)!HT2gv*YTQ3?Ws=*fwa=@B>EF^3+Qba+1 z1Z4}Z>nAxgmAI{6^5lY6Tr#LBiT-NFNu-o8J^}&1mk%HsqB!g)v9dggP+C|>aTt^m zB#=Z#Qe4&DCUFTzqF@IJ#+)#nP%*9@Ptb26x|qD&Qe5#72nGlySXjj2k2S_EEF_$m zNJ5q56;VRP1r(Kfc{E&qA{oi?)hJt)I3D z7e&P-keHlEoGQy{0il9CiX)B}=iUyIoSuZw2@`PyUobBAJeN?hgD*bdB_`9FP<}2& zTA{?n4knV6l;HWFx<%yWhj7HgPD~@sS4x;f;;QqIa|_AKkD%jH$%uz=D1sH2fH!0` zky0-^aKL8~EiFa|5((OxXlXtL#V#5@iHXT1#9RA!EK9%o2d_D&^W@-Ew&!aSk`qZv zh{qNIB^2i86OOuAR*;0`09yPc1ia%%k#H%c#bK}t++%&VN_fKejGv(2g?^nAlBbbs2JCmP(D`nAJEZIDXtYH7^oPB z+KEyU)+8ndE3GX=D2d`_NR|l2VMTnrHYeLbo zHdlJD38+8{X~~tcE{i4_E=7Wg-g`r$l$L1hV1R&60h-dhJc=ES^7%5t ztM|n0fEQnT7hgg`f{}>9u)o!8`3c7R%U9$SKp=_KjHCmXrT4=QCR9;CmF*|K@)7eu z9Lbq+B=2{h<&P(^>_#_AX+-cVNX^PZTd^c;2i6pv2qlqtf(lY=)Tnx`vI$gvcr0D3 zicci9^5>P?;`5W3nN8&?2a{6?CRg)#J3xGDCh-SUE1vX>_ygAP-B1KKxSes&kEd;~ zYiX7q+cqdq{^lnxC6lSfLWvJLKc9IL7b5%33+$;{gCyShWT zw%);=B2^&1qOO4Q$9X#;RR|EDoJoB0p$42yFj%z(zPQBlh!M(4Bt0|nptsw}$sG75 z_Ys$vNnGNuj&=fZDP&d>dRfGO(Gg0+5&XV1QfpK`KUZnzB_*wj47^7N306_&ZQ>H` z$`g#Z^vnbAL%>cVt@1o0v6}138%|nArEwZx`Jonp_=;ZlmydS~e|$Qb@rV4G#Epar zy9(km$O=e#X69ISIFeJ-517Mni%giqE7$tz^`p?cv|CYJZjGVvG2+TGVv|hgU1nxXQxT`>dmk$wvr^>bBMQZu$H%z0oMwDFP*$aI zoreF0{`&tKEk?!i6#Vx4Y|km*U@#brabPg~Z=l_1Y~{}j_bAHpVzwWyk|Y|})o4-p z{Pyp3oIr3L{X4Eg3a;aNVLgAZWlhmII+hSkdF3nH_dC^B<2v#Ot-=c0b#S$cg^?7L zWqZls{=ji2+Qr4HaCEJvf3$$@`}bs6wvugCD?35EE*i^guV@@s4sz|EjA$Ik^$Zl> zugs&^wW1VC1W^jxs+=3(aOG|=7z_rJA=zNq56kv@Ny92D6s|@qRjsmdfU>15EZ@Jj z>UeMzw(s{VQBc^v1G78-dsVb5g<35u|6f-OT>-0nSH!~pLzXfG?dod#{EtRi_CZ%? z%KFFty`EzoysItSSK)N6EPQ{FB_mN5KEGAbPg;A4^wdGdp5OYnOQ~9^~nFzGdR1$xQwJOFo~uo2>e+sGI3S>q9v1i^j#mc2@D$ zi_h}L=*=|h)0Qm%zjMYw(4tUkJzqRKlSt!w)T}Px{%mou~HC~CO{EdKZo9(wx+W=@;T*I$0gCaFoYX0-{T|1f9L?X%zK&D9xnZt+3QCzIpK(UU_#G30;n$exmg+bc{Ui&X ze2*h-2JqOu)yUEOiOAT<=jYQonF*~Tr9bHeN}ZyVBmA7-%4|*~&{Q2+kw{whKBxRz zG2-r4)C>J>bF{93Btw3hM%Lbs+1RE9^{XV{Cu!)Kj3k32`2gR{{DyP=YvBNhXv*LL z8j)d^KeD2K1BLvwa5h?(ySb%x4Qdsi;k&gPD5^Vx8=Cmy*7S02LH3*!PM?aV|I~rR zN>7CnXRd*hx|Dc9HN}dRmK&EPJ!o>S(2YKgfm*DccC}^C^wQj4v_u>zl%*R93f|t^qQVN18^g z6-kyc778fI;aqAu_3fqC>y{8|)(@%BR9cyECzVU@qB^K_!?w-1X405_Jq=K zL?dd4%aD7Hw6tW3s<;5(i-mgGhtTkNn#I;8w3>$Qv0p@z%JL=2$a-mjumDN+?3n0U znS$%ZSf=Zx<(FkitgZ_Lg8znc;C8!3EeHe#QmJ*_?X&|nK*g!UVcSmU)Nh8k$u> z$@`g~st3`dN=F8_Uc&1~FVHO^3?CVak~Z?q@-6r@?n26UbJ&{UrpchkxMz49!WB68 z!|S|$zCCvau4Vf2Q#hg;GUTSa8QCfVR28jk12?3z;-%+t-0&_#>jK5+`0k_Ge6&52 zP&JdxHluQH~m#FG0z zBIfz=bdQFd6Kh#G;{y&#;gF@#{N@L_eLzEkfYkMGFy&NBM(B%~yQv6k^=1sc`w9Bj z)=@PmJuFFrjEyYc(1zjf*TY{g6%I>9Lm7Wdsp8|8$@w4o`jeGZ zyYmIQMyi}#^#SviY$VO*hby-!|M%Vlv>Hn&WEm^J~rDL`ul8Tj`cM8BVovFC6cRXf(g1{7zd zlAIXC&_N00uFpUP$lJyXbI#J^hHL3oD*%cU`QnwASe2qttcKI}hR1lQ-Em%9c7%X} z98&kE(&*6_7|}40V_!_-rIo4p=|#AsnsNP|57WDz6ZZ_KZC)n7e2OX8gtoqRppG|i$<>Wow zHR@`rprYxedk`daT<$#5+$G4l#i%~M1o-)3wa7?k*74jsUvMVVO@x0NT6EQrd`c_F zA{TM!^M!o))lVe*#4+@iR-9N?LZ8Xk(<0bLaq@OPn)VL63S@G_nse7(chjdqsXLN5 zidP^I{Ld-}7cN{7wIC2&q$Ef{nMG6ulo;aub4kxE!A%nLpZbKFFTBq^H6${3uV>X) zA93XATe$I|F*sA#6ES=+16#-7*g2c0zpBm~bLSF44x7LGj^$q-SA-|k-TLodmnh21t0oSu=jJ` zTRw;Ht35@(00~w5#mcR^oVX-_^Q`>fV|E7Iz~XsLkqY;*>p~2=tC$nTU3lZ2NAb7h zvG?=$Sp4Z8y4~B2yT=rfvO0_I{cfULO&K_j)2Sl)f|k6MId6YU(3rW*ZQ&1&eZ2nE za+XJja8uiA$c_TCcYHy?v+uKDOdeb3zsZu%m(k|QYl)WJra-BsC6gFmgP5}RmfR&| zXQYttvSITNBr-A-Nq6CNtH1OMUBm5kqFMm$IH^(HxMRxQ)Qf?GvmfTOA5PG2ctiY@ zB95da6W#DdzP>pa@_*#z7q$_9;{={=9R)c*GUdsi(0l!&l`681>WZf4U5}ujdynj^ zuV-ktc&v^jK6+sWC;Gg?+-s@==UMvlCoK9jjK^+li6Uu~Y}-q~bJLg^=VPW!Aoln)4pjfss-9f*}Il);XN4}e3E6Vu@X^w>W`|+KqjBRJdKn-uQI!H z7zL>*q~?@>H2~@7-4ynFoae^YMFGxz^DM7#YQc+ho+lPa-t++<&3Ts^uRetT$M2F- zZ#b_!eH9U$;>1ZCsF|$)U^;8uw=i#RTYS;j^WHNo`#g#}?(WXLuRcWJ-Ak!4cB6XlPxx#g3L8ce{?67qFm&<-MIPgJ85rO!;`Nbru(>; zd9h9qYVvBHd1fc_b)}2u`$@2zw5hG zKSTn8=-9U_dPX*o!O3Jht}fTo&;kx8)ERUwt!q}r;&kG^aDd$x;;F^~_Ut`Eu3O_& zp~~JPfTH7ScMa`pmb&2Ry6NwMDl5QQHg3-0_%W5Vq+=XPc2n)hMm8oD0pKbwCbCI$ zhK%Y;v|fxx4F>iNA~Wj(c`ndxeuQ81Ah)*k#i>J3i}uv29?jXKx!~u6Z2EghNRooD zKNKI`$N5~DVYf9!!i5^poHh+23AFmteqaKLhxT*$$O%%5f(c2c_1V%?wr(rF~&BETaGc6m{DLYLmgMHg` z={I&TvFNBkwU%v(r~|tWl@Q&i8IJQO*}r{1N7HLkuP)d#6S zN3!fGoK4mNxpWmu`(-F=K%*#M$CbQ^&yG4!B?;A4LQIQ61OS?><8)}4@{iMn zq*y?AVb@gxLW2MoPSuJJPVzOaRE)J3k?EJhPm4dL(4iya!tK|9`eA?z6u0vt8A{i6 zEHY?GN6EFGCi#NO^7-3vYE~=>aB$fnZfe+}Z1b&ztOG7L4jTl82BD-{N@G6&k|F_a z+)fKNA3yv8{U~v}D(u?T(RB$)2B$+sb4L)Y01h{9i-M%c$nIPYuKtR7n~vdc)hW!> z2&xWvNl0!Lr^8N3SQs|It~#+`qgqX0+~h6qhX3#rGokG#uuDQkFjMJi4e&~;>A1<9>}O-4}y@mDl7 z3D9%cw{a=oZazVt8iCDm9<`xjmS5FWoMn3`ii%wL`vl@=1ymQBV#8(6tF#A79)H!M zLh{372?1QH3(0CBqKZGZ(?t{&0g8<7a-vnXxmJ>qaZo}KLr2(|y74rP8~wy_|KZ#q zL7FNfveY@iIPH^{EmX#ki-hC(v{m*Kn6v>1|dEid<^_tlv1A2*<-bH7vwD zLQ-`}C={d0KG-ZC8z&VD3MxopL`Y6H?b(Xss(u9dfota;lJatCW3{4Gtw)`@AzE{z%N8WX!e-h3f|}5? z*Al*Z?*{_!>P1~e#|bDFH^uf6>~_H4O3|qzw6YDX`R8}AFW-l2!=PZ@9M+{oaNVRg zNl>70)l{Cipqd-c6|2RJE?l!#C`q55+;23Ox zZc$Jyy18;-u~?8a6>Gz$gwFb&&DS-jTd)<13vf7fd=wj2#WTQI4eB>N&sSfcq5J4M z_yU|fLr!u5wYyfOFsq2bPIvHhKM8f!Jq-D@0pE_UN@&C}Hmq{csE-eRfMd%(@T)?V zC_g|&_Uy+lCoW{Pzz{=Ms8C1+A8Rm?fW^nhRCeOxgE_qXC|T`05FV|dmn5_0rwjOA z1NemzQjk0s0@VNjfB;EEK~zTKk$vbb+Y{gmh3mF)vQR>`*|5gcqeGm9!B5{z4YhQW zv!OU;AK$@QOKqCOM`95=fhw@{+GP@F~BV@EQqeH%gm zB06we^b{sNn@-)DGL9mRsQT@=x_?`$;3PjgADgq(bRX0HHiBNA!o;-N)X<$25KiOv z{pr)%pOWkx3W{B(6;yK+kd;%23qP87Y|fF-w(#2PslKcCQg?dUbID^*>2WaQg$d#)Vl8j>PI!7kSBKaJFGAkpYJoEoy?MzO@v zqUi}f`RpvuU+sfc&F9FLWqh(D8)rrmN7N47)~OY~fGWwj^G>p6(LD0q#iX81r%Ho? z45<&K7Lb!)gu|@^D#dx3loSCqTGO?CBAzc*ySoSo zQpr4do_wuJsaO|Rp9ZVGW8=H8qTPHq-5N*~XJ(UE0>O3#novyq6d+H%U(oQLCM7{2W9Ww#ku4cmXxhf)ueCpRPNt4h|g-2O0}xJh=Lq< zXc7R_f*Vjh0gLMSR|!_7V8z(0b{SNCDT*Do?HHGwKxDybKA zy7lQt-9P{rg_*gO7z-K^RjC~;^Ud7Je0S4uI=4PII7(c~Ap(TLqygVR|zP;P<{*o_v?#*M=36Su$IH)QG zfm_1AT4UPQS;L!;yg`Fz0Tk!t5z)98L;AGjEEh%Yh{vR^3G zYt|sPN)W!`b*U9s1-&2>ml96%UVUiSvLSKRg9-Gp5ml=V)zu90eS--0^C2uIj<_0C z@be8OIwp=fF`@Vv__>@ooe}{xIx=iX3*us`6C37>gj9C?XX&a#Kx8!4>&6lhc|jH=b*h>s2`jf8CW<!*;}K8RVc491}}I%cfKf@F6^^ zCiSXE66_;^4wleZnzslhFU^50`%$w+2YU2rfiDu#p%M;VL$~@9S-(5iwXKRINd(5m zQ!ma!ZiXAH5=4`}ed*YwI#x{w$%l}b>crNmN|2(16hO7`Dg-#QaaXBLe6=ual5V!8 z;u}bKOdwV)_y+poV-2Bd&1zJMtU~=(RgsGvxHTK0wK{X%;AYf_tVWG68-7*m5K|=p zcVRA?RGn*j*Jk$#l@=ZA5$zK|)wmW!yVEK34<*>oMtF@n#8wL@ylOo46B<$@%wKFu z76=6YJ0eh75HxAovSs>^Aw$r0T_^_vfmbwCO-GUpmzlCCwpS9HO4raNnO_^mN-qn3 zR+-?TsUR!Atuz-0y)D}xAVKlz4Scy|Bk}i6q;s$fRkxxTQGz9jbE{wB<;-h&XH)|; z9b`%WCDwpcX<^XOp<>{;U(OEoo=NZ?gsaRaT=Mk!RyFkBat^(&p{g=U#WhsTh9SFfb=8feSUCR1lgzLVwkNdcb>g7YVl_fxw%f^NWi{sZcA+N;#i(S=P&+Rw7Adfv!pgIY}-%233-g zG!@muiQG|h#xxEQw^&{b5ojAW6`JZjEj3Y{)M$L&^85lgsr7Nh;lFF3C!1TWcDsUbazN0v);ZzItiEGRZgvNGfX^ zv(J<&mzrlj%L%Kc%1&v$OUMf4%Uf1|Udww?e=bw*%KC&{;d))y%9O3r{;O&_vQ%2n zvPa#N25(c4rLwYl1V58XGw9LJOIN0hz;BwzDOO6Ek|Rk9y7?O&B*mi)`Y-KW)BOOY2 zm$Y}&0{{;~F+!48^7N*Xhf{Oj7`q5X;+w*tkeTqa_= ze$<99>?l|UJ4_b6dVdn#;~QzlU94prA2qExs=}U#H^hDnO_VkQ2t4BdrtT13B#k$LQj1$0mWH|4mS~8AHqk~ zXi-JXfT-O3DD?Einff%*E=~d0*KX(Y?ei!Prbsk+8UE{CuS>J@BEm%(%{TdJq>nDc z0Woixqc&$f=d{~-9@m@{@=b92+hOz4J`&P8c&M_2UEB9GdiLKuYeb~mUP?sybl{@S zTN_;;r*oMmnphwWFXW-G+zCfs-Ppms;ukzNp3KX9N?>-!b51aWMCI4r+0$v|XPGCJ z<-Py&W;Cw^{n_ro#tCzwW(2DB-H+;GCpdH%F-rIHMWr%do870o{okXadDST?^c%J9 z?{`GrmN)vR6yQ56m`;K*WT{%LFg*o!(yit*QhsSc3q-m_GobY{klGwC}d$gWbxeqI*tlT|3!i)%I2Ne)y zlXtz#qtO5N^JH`dE_V-FbPfE3qK$CHga_G4urUIXlc)n|>Rs|_RhEoZZ0Cy=uti&| zCEJ{X63t{)zqYG0Nz6gx6@|8FS$lx|GqceCM1 zI5{~<$~Le3VD`ydLGc-LC~P=#`xv9na=EvOei~k<`>B)SS>FnXsgXeOwHGJ2Vx7%Zs&}$r%JJaYo zStUY9DFp-)*-UyAQpB+a1_o|pVKvX$B$*N2xN*bK$mqeNM?UrS^(&75J@1vxY5MbP zG>eM21bOt)4U2WxWruTFBn0SMz1MD}8gDdG4S$kcv|pR@lD&&g#cG;~sGX72RfIjAg@#m*Gw6Y@Bu7vuDpfQYF6s<5tIx_jMqptfPt{ zTSlx{9rEsRHhOVTYSv1)_j6q{j1k2t+Hn2ULlc$UPZN3iBe4_)MbwfpoiS_T!xZ$< zGclan%Khx2Om4k0sXwc1QuGj>GiYg*Q!B;Z&(|xoiT1W>)%H6h^Tm$I zoC6OHHFZU5&A;vK>v9)*0=vFn?ahF)^_U zEylIsoYr^cQ{sk(3u4|$6m$zD+RajK6j*OcUl8<3881_{X0g`r+P-W^Xb-M6QOFie zvK(*9GFM}%(Bylm?6SjnZ!OlB!lcB0H)O2pIN4=bkjwbh_~sMt&+6RUyx2S>Tzk@) z1NK~;2UcRZv_#T=-3&b0FMhU(ZK&_F{IJ@eA91rz5-Y`7;kgL7VWyQBQ4v>rt`dv= zP9in`r_5fIW~1X1itm&BWQ8hEnzY}gcqxmSX8Yzw+AK_9EsU7Ue|BA^Pb~Ucm13Qu zy%0rrCp=d#%u(eDE=`0iX5F(ACmeLAJjd@xbwT>G(F*iL5~E%{qdA`GO=>Ml*38FK zeZjZa$-sNKlgj?fqckw|*(aO7B*QuuKDK%B)*r{>A#>Q5;x)fJgB@rSh%DppbG0RXVY;@O$ zzEl6Oq2&4^2G2X-k5{t?hFZ9|t83NwPubb@Z%V(=D5o>K9+*09{%xMHuJ6Xzb^o1> z$f;P0wRnHJ7^6|=e#&IFLW}ZtS(W+iG`=Obu9J^<9-rs-eVrL4g);$XCK>$N_Hb0E z$VtO+Hkm#Y61hn$eC*GtpBw!(_wS=?V@n69JPpJ7;Tqc;5}B4(Y5VsH7l~6mBPWp& zBS-e!d^wP0SY!W%=Ri1#gmQ9B_yXwM; zO)hQHe3>d@34ctR&{Bg31+qE~QYcgYgR4z%%jaz>q}QcJZFu7=w0ic;l2V@CSaz9T zT_zCRGLqv09#>9W-l_ej)rnWG{7B{rw{~VWamG||<7(6D&9=AA2mW2!9weW|$jMjv zD&bjlAv?NC! z+i!4@UUnugN=<9>VZg12YIU75OzsWAk?wZIY$sN0#Fkwhw{}eJ`&2mdi(P4BT8kYV zWt%st^Gsqi&(rFoG8=@AL)>DmdvnsSs3C283+hB?DW%;lGapWtOW+yG(;Rgl&ex8M z<*!T&8k0vFRp@@4+Bf7n_)1a;I=fUb=OnU^?yj^AC zxMlr%BAz^TcGu3i^Kg6ptxhi&1;npO2g)Zc6)(xjQDZudXz$_(oII5myktj3zo*yr zjb+kdP*%%v7!gFuA1mN-R_JzYwN-npgN{S0m7Yh-h4LeD^g*#9IibIqLdsn~!FNwn zdpSsEBGA-0$@fL?3P<1Oaga{ZxNbGg)lfijcP~Wwv@Dfn5Uyi>uY7FhFzSYv$UDRx z8hcyCBE5Z%SRJuJghH-5^&@Hy!oZNABKoH^cOTc5R*$*YI1`p}eKXG6UYH(d8hmK; z&fPD1v}Z1m^hw2aHnWOs%hJ3uttgMoy7O|np?>vL_Xg*7YQW$}8H}8QZ6+sMS&U}y zw5~6DW$K+xcArJ>GcN+=9T5@ud)8>PwHYwg%^!U*DK;;Ce4+iQln|+Ja`+S7$wekpmS3) z?JBs6)}ZWEsYkLvy@Ff%ubd>E!-z2(%U_yG%3~>R%Ps&XBy7Z z+g0>b6m<-x7dWAPcwh3HJcqZRNf_YmnB;6)tMY0k7okx{T(RH!r*2d{jiDO-lr4qd zuBS5g2=4xwGH5|zKKc91z1p3-zrSB=FayU29eZK?&Lf-Zsr2P$GMWjO4vVN}&ih(j zUY_08<=7+!_aUi7B_%yY0UY=C?OVRxrbj_U9Cttb`=<~2tmsXi7L<3s^No_s?10Z} z0nJ!#vV>N$&lV>M;~Ua@j|LY;ev2|qO1=p7d>S>0T4suOH}1#xwh6M$RxzT$ZTFAc zf*w)7-o5EFThXQ$xDo#1napXf=kkN9p`iKn-j|9hxk-^x9M=aAt<0vv(`DnB?O?~w z2;6~s($;wEk%%jL`_la1Q4?{bTWOeuZm$b&%KKD-%Db>Gy)#73IP2Y1DC7gm& zZ2Xp?nUD_4h?P96i_Ob(r|sv&g_(joLK#a#d4qnuRGyt-jU_JUUzyZvRuK7a?gA2b zJqo3(->2)E5Di-k_x>bPekwzvyU+cDpC>A7kTl6E?`-mF8l6?!NPD!-A7g@ZK3mgD z??~Y5?J2ouA1J?z&08mH*H*Dx?LQZs;E4C*{m#F3C(+a49y!_7Cq9%6Vg#L|;NPA8 z2Rt~dq9Ji^w(k9|@gJU#kMFm;3wT%vlw=5sw~p~lUhR5HQ}hKoGdmy1Hl&X?==nl*dRB@l6>dXy-DS}jrzH6E204|x(DTr%Vg7?vg%IEL zgi5P+#mRBH_lH|C>h^YosOLcjQg3+9Giuv{{Hm#i#KWAJ>t+z8rUQ{V)&z}z`7nzk zdzWyQirhPLf}U^&px^0sdB4h{W#nD`>0V^vTw`}UR?R2gPh#Fv!RRNYYp-j52yWHn z)wm2AzQjl2;x1g^pZ<10X(rS%io;T9uTAuFRj8i(JdCo9t1fuFT;Pw-@pSjM_6Y?F zUftIfUypVjD>q9#RqDiOLCkI;-F>|9>%MiC~ROy(yeKn(f{wBsi{!gz6YzK>9J}JQ@ z!H*N?O*1UMq=urN|0-Nor=_L5s5!$EcYpi#th3iHuQ(*5l~FimZuWqsrjj~g-MC<3 z`VRwrH=l&95Xzh1wCUKcH?0yoskQ}#qMqpPHer7D&wuhe*V@^R>j~H1t!*ovj&sc^ zh440c;`+IZRsNc?E#|Wi_@|a57Fsj;M2nj{JZ*PX33nJ6bWLBsbQzaZ8TdAQ&LGm- zGq;YDnCjLR;;z#d9QV0AUFwg*R^>Yatj6Bmxdt_xBd=f_LD#@*i;}WR<2C-1$8rzm1>;^<+vm6(wiopKH_1Dvtg*6w-_R(J z7R|sbF5lZTa4s%5R9UJ&yz7j!F3x^`Y)dD-=OWalB){=+3^TW1lf|-&gZ-XaFKUQj zTZ8&oxd*CSu<>){h6|n1qJk@R;~M^`2Sx3#NiG;^&{E}R-G;AI>>Cw=sh!`VTNIwJW1V-LkwR?EX>x+Tf8B zxZi)K`l9aY8RpVg5f`hwGx#603Zqa791!#M5&1Y~Nxt zYKY?DgW|||PyWMriOHjf4@Dwg$Y$!+dseD7e!}t(3NqXnD-v35(fgf-M?^>^DQH1NE3*4Sz85T?AFkm)^>e+QNCc+y^_KpcVzYDGxIT*4x|JB|Jiu3_H?*B<;k!@jpW|^y=JAuH zKsrC7cSJYGPu~2wU3~KN*&G$e;#R-29il+N{4Cyh|A{8Il$TRHc1nMnri+8ZE4_O@ zF9ZTZI_0+dQ7xGW8iFL=3`UOdc^=cec&F2p^(MtEiY;bR3j?EmTw?o<5BJXS-JW5e zpi9+!w_m8|)>S_oDGv#++dN83vrS!_FB?BKx@PsPQs+x-ehNdw+nS5J%o)FW{V>Op zo1_QFM0DM)vPi>zO{Q#hfC6npuy}2SM|I=sJK1w1rQ!goOjq6zQQyJ*=KJCy<}$Jt zxXwKUji-(66-1=^35VD^3GcCF85rGrtmgYP87b~^e=Cjh10;Ml^+Qi;N=Cmv$0enf z3DH>Hx4xBQ_HaXdSSG=ao;5Q^fHFHoW_M3z zcMdeo5*gDIirQyj4%4RGQ0?SS7vTLqMa85L4trb85V$&-N+eKzu1r_syGng#_8aXS zeXdciZhSO0PH`pgw;eJ<%l?MI79Bck7Wf?^{nDN-lTse{ zyda_E-c79%a=!IYHwA;7%v1tl#<@)rn9<6AY$soz-es^pUuKjYBiDg zb$wJZ?+wS?Kk`VQYpi?M6&R%NKg8&``U9c}i;fnzw4{&Yv~F2-c!-bRnk4MAGFC*6 zM4(w&Srn9%wu7>q2nFp$rAnTkc-;dyd-H1uhfNPE;b(7$YS(Cw1P}2X|0NUJ34XxT zU{!tL;L!bJ?28g+9zBh(BrA~>`wyXu3-1oA`yyYO1H3~v01d^4`IOqOz^+}h++dGmIp^fBd1 z8};L~(pMTDAG&iVS6&&`6P=vJH|OCPwX~F1yc`Qq#-!jI`i(=3sh}NMSwB{Ue>huN zpljr?Piso~Qsfoo5rc1LQbX~e1BD3v-BYVREm|cTT;Ud-+x7RoLqly9LRDkJnBe8dIe!(u8|I7c_HU4I4v$e3Q7M5oSsrW| ze{qEhL180SE8{BEVM$xV@H9ZP?qput zT3InoPD$|^w!ShmI>|s2iZJ?qapCTIRP`y0T>RTPj-9>z>d3tL%Un&F!?oe-=tog# z(+~1?hyjg)3iG$jqVjm!joa;rzVS0ohDmRt`{m(iQ*-l;+4XgcDx&75rb72qJK*7} zp0m=d0h+gDtha)+|3t9K-^Y7^A}K2F_p>1J_hc7#DP6?j6t2OjicsTEe1%!+2`!(5 z=Mvbbz5@a_OmUBE8kaL>CkF_-U_or_KY2-!cWc!G##ehc1<(+pO2-^t__GPMp z0lW5gxeOG}aKnrSgm1~~4u+8c8r$m7=dt~3ZK5q+??2@>F}UycYkBVU+dLAkURt%( zJmTlYUY@0wrsAFn4i0>ncfVTN>^>?&Z2v~Edz)KuevKP-#73lHxH4P2^qW79SKDk< zSmsTJ#p@Ym7lqX*qyFXUg+(}1)lCmcW}gar@yZAadXw8f>a3IdP3S_NNAn`5?W3~V z4ZP3M@*gLDRP-d6KIRC?+7F3Ha1DxBrKO-M;Z*wL9dLPK>^YY3Ss68_`_r5EpBgjR zg~Vbu#-21+n960C&lDN{e#@9jviP~T-q2&<+BWazxF7c2DW^#z{!~eZKN`jy;fn+F zhMF_%@va?rNj+8`9pM{A#QyTxAKNKAon6M4_j$~#QT77o@uUA)Hx>u5O7jtj~3=hpXKQGs{)YPzV{Kj|}DJv%4vcdxuq4H{n>$sw|UFU`2`$uf7tQG0b)(~7R5%O0LZy!Z#TFq77 z>9uhzu#kNHnw?V-6AY1pmNB6clU`DN0|Rc`e`pYL|(lCvkdJORjeQ;|;VpVMv2c>?NadPLq$(tDmEJc(P1xm(`e_4J@o;-}} z^IiLxcDl1$ASW`x4)+gJ zhpsGheu*bl4S(GzWS_g*^$rh*QqVm}up(!aFgC@}rRM3NQWhV~7UMsYJv15$B^^3Q z8KT8P6CZx6GSj;7HZN1{P~6Gc(@(=XBsqNz{V$8-`T3B#E6$UN^0e-TIG3Xghqb2B z6yrmJiyK2#d^M*AJY@0G1xIV=DR}yA(VwG!^v+FT808jpY?x{(&g{$ zF_{=J>$2A}nRMRc1EpVGS47T;)B^>h77q)^rNTygCHbr~ly z>DBd!Lngx9d-O*AH&q7$R}Ly{k|rZF@tlU|b%_FBz8TN^Cmh`$9mW!(8@O}$PJApZ zBkRFvNSey>b-Fgz!ULW9JG=ciB+(Rd6dyfz#G^?k>wO(3G&et$Ia9}Gpc~(uWlsK` zx71f&!a2G5gzbP}*q0eEyL3bTST3i+ZO2rgDrunNt--(Sv-#(-t-lza@63mlTKx^Y zBZ$UoJGFVDBr4R6wl*5X$e-tr^6w#$GDD{2TLslnM?4c7suu+b5?+qj+C-&4?Q`5D zFX~MQr?_$3|9*)hBkVqQ9!_uJFDMdRAW97C=bE2M_}-Z7el0{r#P8~zBVL-6&7^*j ztymz;|A*njmi)CDo9Tn%Pjg>W2(~vmBQ~p)1|?qafy6x%IEU$#H9F&8UoUv;)-4hq zhc6LS@^%*|w!vhAJ^qiVxLgmY+uPgIZTGg@a*8QXV!Y{90dNs&-V!T1lPBX9R37+WC@DN&R#OHDkqM~VK@Geo!u43 z83M=Zb8g?n@b%$iZ-_xc>~P~2Hfc5{{A*&EdwKdj2KyIj)oSqoRl zm3vu#Kuty}IlC%P`c%j9XZzh^iusP~PZ*B`l9tv>n+-{^AY2HPU@g zR}$=*mY1=fwiZG$&p@oR?dq4Xbv#=6A6wDlLa{g_f1Pi?i|rmED;oGj`>8ZJ!vV?E zi#o;haZJ6(cu{rNe@SnrFc^CjN^WqUkniw$%Zxgbx~@Dk)G+Q#5?)wZD)u;cy12Ob z#%WDj>vmk{pdT9`Lno`uxE_-|;m4?180nD&HbuC1@`p90-}=H~(jJ3|@?c8_EWY$A z?abKVRO+_aV8f!PG7rPk|JlW$SA-j3b}-$zVN=ac(d_*^2E9rN@nqawSX{!fT9M;P zsABHjfDGzPiwbQk=&q$S6cbjw_Y)!VvX1GAZQ3p>I~F2Ffu8l@LqJP00qHT)sm0CS z-k-8R>MKe|-760O%c9sfH;Zd3E$lI+hWLOmWA#={jd!YgVMkIG2SrX=4K$a_>?ggC z7MDN>7p-v}kg)FUQ={8(+iG4G(IhFqj^T6+#S} zB*cVS&*Q$4{m0qCU14mUVOSs%SGSg^mkxJm-@fIAlT3Lf6f}5a(uxzQfOf}mF0U8V zx9Ar!8+Q?~S)Ne#?sEjAUQ!}(WlkgR8;0CSRc9bQjyYW%7?}C)yjPJ%L8tz1dhe;h zZbc;pT|L^voNv=&elbN_w8cNmxAD?MFzCI!$mbJXcIbJFy}K>AYnBm39XiEEyR5e< z=vD6&Dr7X;h$BLtqc^nTTZ~iWjK#A4`^hqdb;GjmWcKH6#9x8C(E+CjdUZVO)AGx3 zufWBaYZ=zZIo&elMUmIFWyL?WU3jI7ZxzU{FoZ0gy%~24+!(h+x^*X*3&CDIF@bM) zBwD!cgFR2itAK}eWUHJurAPC%ySJ}agvh)F^YA*8QR$j=Js5VETI+Kesq4NH2o#06 z)G~+ukFnnIF-hsxZ!QcC1VZ`k{ea)~II@l@X5p&>^SfA983C3h0os?yGv2@LYxlIm zyQ56q7iX%TM5Ac-QdEvGP&V^_eC(@MLo&tx^|avw|JMfpfB!v6i2@oC{@2RCiTeNj z{i{8=z8>+PQT8@hggSn3JAQ6coL$bHNq)y#VQS} zFB084i!FaG3qHshJ`3rJ>0A^UEbR>bUXKcL2JT{V-GRJ?iAMCbqrn>lf?f92U}<1W z7JVoF@Oi!8_3$YIz?A(1It;IrP!Rd-HRcwj^9LQDkdcvDzKk;q(<;)x#Z-U6`u+R& zB@VC0E-o&U&NCjlZ^}B{C9j$E_#$g-EngC==HUH@i!P#t3yQFWQuqU)Vm0c(wW>W- z)$u$v+S}W^I{0tl^Vv6b|##klB-Tx|=6WJ#0mU|MA!oQZ+CX9WEs^s?3iDIN`^OJ5GOr634vUeRRJ$FJ zymse4lMUo)mP<$ZEG!rg5ax^e z`T6l(U+jbZ4XrBTKIm9&ot@_r!v)FIXz1ulN=kb%RfXDj9=&)CVRTD&@B}vJyT)xk z8PzZS-v234bpt-Nw^7nNP-(v$n19VSUgN?x$&H72K&~bgFt+?wWD#iyTIvp{Kw^CAfI%Ak5Mjd}yj{kY$JUKVKsCRy} z3B4^gGakp^j|tdK@57C;;`!H$jGgFeZeicPErdXb2NC=ZWU7-?RD2MSte~ReJ7u-p zr@w#yj*N^{(9-H! z9n3gg%PF{0B(C%N8usVpT&*(h4pa&S?5h{a$;lO~>2b)b%#ce!TC4bXqNJpxNCZ7e zKA>V?D<~)kDJX=V>an9G8g)iP?t2BOwBrtby;$1`gUC>ty9-myw4j)2btJRNLa%w5 ze#!XG;o+?$h#QCP=>*WPBIB&8{EG})_f|80fU@P>%qTwHVO`;N5#f=_6jNSbrTz5` z`fae`(brs^t=}Wz3Y8Z)^{w8j!YrS-j8ns5L`2V=O$mxsD&sb9^x~cJ)9HB`SAP9< zb-Mhc^7`uh4mP$iJi8%q_$M795N2of^!4>u`hGUfFlt@@t<$f$F5irTN_Oo;QS|JT zslX0LxJ0wu3ew;wez&7=Ys(Br$QW0b2)?~cSTL-RF(9IzwDf#r}%Mo1T zO()**@o{_&+LDqI8d_S`TQl+TB+wny*53Ym(@FQ}r;d`6h^s4)nVH$b^0Kbdon80Y z$|cEH#aUmevDg^Yjpp9UH#$Q)+UGDf~0YG zY%>g56S8q83uV)(y1lE5f`cP!a#D+3mhH0hr$dCbr>6iM)HK$3iGzWm+mcNlj7WGP zH6tV9$B%8qNxx%4O$}d39=j|#6H`cODSL5Ai7gjN3<3o(orZ=+YFb)YRFu)LiL|o- z#r%y8OC@FH_Kpr#XdbGCOAU>P@X5|L_8c4-fF1+2Nyf*4enCO^URsVd^!*w+l;T%8U%e}H!3SDm)xqStVYa)g+Gperdz74s2H<+)%%ON#V?WH9tFKye;v#Zk%z7gFKA+1Zfzbl6FQ>Xfv!-1{$RAwIk~pw)+% zne^ooUMDoY!E{+2zx3_8^I#A!?9MmK=N)*uBVNICAfx__{p7iz;1AEsv+p-wG(eK} z|MEp|d%D*6Z+7;>2M>N%*n<4K`T864N0?F2GWIHp7D4dRk^rjJ(HS!%4b59Uwn-zHKy}tYAUpsHUmry*XIv_bH$8jPv%ssf=>V zbmCWD<;{OI?5OS+yRE*TKkv_n2*w`j4K4O0@ZQ0}G3kltUa}5>O2be-DH8aYAycQ8 z2kdPJFs_lK<8odWpxqo3)_Qe$KA0?q>3K4TVb7Lo;s)6>YCXR?80Icgs9qb&YV^So zkW^9%ry;QXTk0PgdLL4o45X<*e5RI}nI9DuT##|T+P&MmJf0aWF_DKVlBrSh;wv$y z@gLti={r`F6ISJexf*Qf*d(_bWSDA2p+;sQavnc;@Zex$JVLwL36VYa4(joQRrObx zaF1ZD5_lXdc3X(KJukQ(2QEJU-CnUBMlM0X@5+uv{4(`TnK?+8EapShM;qhzVLMz< zRgryHkYT=Y+rP+rQ}+DDi}d)M?lfPClqZ7M7xn{#gM{366cDzP(3iF`T^r|de)P6v zyylnl4*?Hk)l+blY=9>COwDpeM79dD_P&l~2VW{EaPI;nr~YCi85r8urS7=O!x2rm z{^;>~XcX)QNs1}!8$rCFS0XJUduOK+Cr+e1<6n*Kym)^7l`Cw`B=!3Bz1`hicI)YQ zsCKbt7O^b=LC^hcbbbc{iH zL}?8nqk^_X=xfp%LI;ha>xbYE=o$QGl&_qDeR+0h0Db&`c1!Alig+E@RGyQQOUcWd zz(4L0zYK!s`QXVDS$B6nz$&br9$CMfs;8hFCW{3k6aO~!u~gzg%^6abVp~hnPjFKX zhx5sch}?t?AgD)su}S&b#)=G9!H?iDA4-BJ0R1;H5~MD^kOWKaiM#MPu8ATERQI{# z+R!sb#-7O)$X$?hkeB)L-Cu<=bA0=koFeKq@MDqI!Pr1Aci zTmJ_Jb#{_dP&8?=%FD?auaD%t{vnX?<;!iNmzHhNvG-wM(R02j061yNIuG>a?3nu> zJEZkFK8foVH#etEkqB8D%2KY``GX121m53L4ZUPwq^Q?>@&4-k$QE5ln8vJA)S(#r&uVY#0fplL99ctfRz9aJY_g_Mn{{ZcYEYQYQ z<+$FWXylwKg)GSxM$Qw@ifQ(EY9MsdT>TM*71?-*zbqyK207Lp}TD_wwshwR6e)UHw0ejoo|@QeiPMt-g02AsaYx1TUD2 zii*IL_4&?bGEnd31t>`bf~m7?3LgwakiX=>ab+{^N)rD{1WmEKM-$d;rhQNU{Q0x9 zzt1)?wWFb1?Zn`Nfs+nz0A1`mOFg3jfY{uB&duS*U%J?FMTg@p%{5@g+nPS{)U z92FGq%Vq2rv!DdI>eRePg4yXlp;a0XI)R`kAM%2a zr<}9rxhK_-Ol-3?I>2yIfAmJ#q9ReLGG3|ej#D9=J zvb3v@D1Dk;0%`Pyx`7)YGdMCc;P4;ZKU^QpC@c&`LYbi+qNu2~*R|$~QJJ!u!qmy3G1bx6|bk0-E*T!kkA28;qY?_9S!*|Nil(*r?M%d(=^O z@ZegEU3QQ|c5uq7e9NxVA!9IWV$-R%qC%aCo_=V5Z|?v=4L>ihro6oTD3ex264i?r zYgBUaeUN$zCN_@*8Fax{V5&Pwwkmsb2&1bw>Zt9^lK?NC0UJp^KR;iGGCbg@J=*$} zI0InCD$E-AZ&l+QtY#W5s5>*~r>F07x4wXal8wCrrJ%$`uzVs9T4_+vzOfjsss;h?COODZmU4po@C+CyNLwDW9|p#9mqM{lTO*lbs#An0Jrd3weh(E+HBi)XMQ#1fX73 zVXpu~NpR@}biVR9P^=#4VfVRPI@yyad4i`45sL%7URO1w1O%p6Emq}mr`Iqy9dm}W zL&Qx{d$Xq^&c*;<(xMpr2*|I^C+bysomPt#B= zJpgF#2x1SPbXhy&;pXZ*M(g5)$%8^EB1ACo4;~9C$hp zHGP2dt$moz)8zC3kbqy-57|3MCOowsO75cPG1TGJ4?6Xp9v+a07CW-mtLh*lYll-@ zUY&0)fdK*V01hFPM9Rl4&l+(Awan`GNyvyf zt=K!4$5mkYuC{?kjr?z{4zUAv+j!Kq(&ogl{ooc5%?rRnL>VkrTI#}Rg_ij2>>JdLX zyUO-RUL3a?0RCSIiWx2O%inubQz>d81@I)*Umi^?CO&{Y5Ncj?cwW4}%=qCsaJ)5@ zL&j|3OuFarws&)79KOJ25Qmr-_NlIv{pePtQ6Xb@j}c$jEQ@FfU&&|Gq|i zKapM-&>*89@Po4K`}Wov)O*I5KuFXvCElJ#<0haY04FB;Hk!a~-%`_~epm4Q&QqvA z)ycPWK1Ef(ZT!@g$Uot*$a2$V%C3_E2pMqYlRu?rX{o6@XX^#<4J|fXHT!Z}j4@_W z_LW+q5)y14XAXnK#<`Y|%yTtLOvehJfecWwN@{o##Y=*HcC^_^9>Vtrs$VmBB`Bu- z$+w_lBbOH}PJZ<~TcuJ#AjJ(RRgL$y(9;A?q5g49m7?6m#LQC7i*>n|)Hp|t&wX5A zswowYtgHY$p_|tSq#tQ%X^;{OO-u$Mk>}SQy+Nkx!6$9h_RR*6rR^Kz)G= zaoKC9+TGu8oU{4%jJ zYfS*tEzxKvdep(QhK7?^xah$%w=_mqWc>t2vlu*m4-<1fn0HHW;@7(iDDQ2cHpOOV z|C^t0gjj_t{|>GxeRy=v1}SUw!>S-1k3&QOogIiXNp8nmW1CLEXD0IDrY3=a=Fy-~_KA>q8em%P}tiPD70)05C83`4fOh zmUM}0ngcJLB8ZFXegY~&4NP5R!?dPV<*kfCv*=NR3>>~46hQrpDIo$NE3$cs*SkVT zzS%(P9dO39M`;)tUp#;A4VFV9sAS)jGvp9!Zw%d|6B1-$`~iJZn_P0%ajL2!F%6&z zmOPyy%1QSsU(&@?B*+09=E`D+pp!iMZW#Qkxspnfuhl@g;v#vdS z{4%cFQZTUj51{h@z(J^ojNuZ&||I-OLKJ8{6LzY?G=H3NwsD-62h@0VN`$% z-udeQFCp$=%mH0@Irt!>666-k@#0%3aotFO4}w^V^-P_bgZ%s)$XoXNwaxm!^^20$ zc|Lyp2$yEJw;;9uI~w#WDB*-W4wH)n9f{+Fl-sKSV z@|e%DL%+!8U(+4AL_VY+iJ_N{cmKW~tuQ=4N*0#>1CMBmJ29PNz-=>ugr1|PIb{dfAwqnaA7A`J= z4;J~ApMYh;3C*rr7VRDo5VU=HK#sDry9=YIbyQ07s-KRUS`XHSlv>Xu0uhOt=<*mw zsQomHT|HARy3}UGhY79)4O$SJumG;xj!1f;Y*a@EBnF6ah75Or@54dl`nT5-|Lnj& zIzin7^NIn5ptlb|gF`PeNjOmg4qkti~hy+c!xNrGWae3?Ae11swo! zlQA_#iX_SMKLk+jkqN{DSt+s@WrWly0TU38ZU94rWRW{NHun3J4IqNN?##;0238s& zFVGJBxAJ_eS_2qB2>%fQJa6)+Pm|)A_Q=MgTco5uG1=^I<@C3Di<>P2BRBUVXQQq6q>Z#fujMaIa6A8}KzvpaV8y#SaZyP?`NLR8ZWy~{!qEKE>f)>WY7mS0d$o~hd5UH z5hNFdSgYCVpu0!F`~frv=C^;)K0*IQ^>aeCTsmk@NH-(ldml=~Vg5}dUl9Z8rJ-*J zpaC@mo&_>^ex@9UEIBVPv99in-74W07K}R*@PIzAi$L!^0yP5^TU}Ph51b#73qsd< zK*LRss?x7MKRIF6Yd{$cFi%}{sp^c1kJxtkTEu=j4=|*PI`H#=a{$`cKs@5W^7pq_kE;=|qu3vEcBvfZP&I*iP0OX@~{^QA4kViq) z%K#q>*|#_8x}H~mUK-b_k^hy4`K1+cj#^Cix=gq5^qS%zJ5o#p$qCpXv(IFdTc!p* zvNbgjBL!CM%Fcb#9FC$D|77R3(DuNp?$nrF7C8+|P5b|l>;v9~)SMmvv-!lLA_uX7 z3DYaxEnETZKTZMKl1~z-5#a9>!!!mpuMI@2mB~srKx2#f)>Bm+px|yyRz`qUVYk#p znCQOOuKQ$i)oyuE&0VOY*j-A{!+Mnv$5MXA*&1gWx))j5*vy8rqfWKozvp_w5sxIht7%!rW2 zDlm#_$qJT8as;B=O?Oq}eERQ_U45SECf4oSup62^4EsI+GV;znvAaR}>!4H@T&|AZ zmTWO^0nCq-mykvyfcC}URCe5Q5IZ18w?MM1-264cn7!UP#RSXBW|N<4CXSd`=ja1` zg2m{xf%WJqm-iMglfhP*Q0I(b7VU_Fa=6-dKouJ?UPOD{ZiAGYiuh-IEsiM7lgtQh7v5I3+$xfeJys88c!E^N3mVv1vx_Q;jfAcjtm-x&M*bL-57K0@Z zb4OvaC$IBh;E=LMWd(dZ4nkB2opn`c>78)kVTKu1b@dgT?{m!f~$mAG$iKEth z)G7!{cJ@g4upPYonBk2m5Z=y8lZ$>Ap8;isdz}`|7?HN!AU3IO{kANhFayT}mcQ$@ z1QAkDQRz~A7_)o{{7D1WSF33|4vVR_06uKF_e(`Z#n8&oSE>9Xgi5i~<{PAW3VRxW z3Bw$-%%A6y=q(IMaPw~&(gB0q9(XfK+brSzl_M7k-_^-{4Nx%Ty1j$-(SrDpE6{y= zVGVvG)VUh*U=Fk?85){T&847RvYQR~!m{-YEtQ!7$8$IOpxAVzkPa%$38aH=6f-=( zeDK?m1sg#0>u3Gc+ptGMm)@JGsrloje)BRVb@euYbzi=I<=`AAja!3(=~|@T-rmSU-5h|Y-$t^4~MOfO7oa4k+6(3c+42}LG_SU=uR;J;uz{=xsj^d}$6_>J zHil7Ky-@E4*p85&V%&tF?!c;-AXw=9t=_I3|YsK5XQvn6$sW@JPe@lOgM7M!ZU|=AUO(7d7Ko?&s`VJe6WYZ$InLs*mkQ*(hYsM|@KR14yvN8eZ z(fwrZ^I|Y=ZFqzoEv*m=(o}#Tn*=ihz+UTmN1$Rp-2PylhZ|Cv2BFU-0r=~p-EIe6 z!462kvv!rR=mjVi(i!UJoO$iwzz)P-sL}xozX-}8(hrDhbzQ6K0bhksz?}=+1ir%| z<;AnGa;MDPTChQpr2{q`e*!62CbZ&TR+;7UQWP#HX{sbMiLd(Gzmc$~W0JrQ8$S@T_D%h$!x9Umcw^(W)QxODY zm#tRN11i+}aXYni8(ldmmZKA-{=;I>!VFz6U|cmpOG#TtM{;K7?eYm(sKcOJxP#aQ zw#N7T;FhZ}$m?P8@m-NL%GA`<%u$zcIe<0^;G766dQb`nAi;xbY#?qn>X>kF;DE%s zb(cq)kP*6EkM32dDi(4EU*~}>$~kF+3To*hwCbcmoNARx%g7i&`_q!Y#lO<$&@83) zY%<{LS%)z23Zxea1wRAckN-}TJ>OzD8xOpJcz(BNSn#GZ!qGCAF{1vF`6aKaaa4C_ zC!NUyq(9Q$(_=i4Dn+mPD+ucCqsNb1pp@Lcb7v03)D*G6$LV6-_i-mm%^E>$d;ia$ z3dsXO9tX=5U3PG+-b)ZrpZh_-1emjf^gfEg;9w!GIT)jr@sbP|9{(ac7MO-`Yzck+ zKqc(ju8@);2M zaDcdg*o<3K$VL(O!(p{a5DbC6e1f=}Uta#4zrHb19s=3vTeNTr_Ptw8arcKI^C8tM zq&o*4(o*GCQy@tJ7IWI3mW56PZo2aR#KZ>?bm2f0&ZLRojsAM438b*C_IO$b6ps~X zU4UIxK;H@l-Q|%y-*2#MtVx9}QzVrr2}wkmicp4REFn@`A(bhi5|Jd8RFb5qq@pNEn$GLC_iwFp z*7~2b&iS9c_V>H?-s*Wi!+l@Fd${hmG27H=^dek$Myx#O9FuP=KRWy3?qN_08|_Y8Q{f0KVXOKLJIoLSmK`W}3bw<{&>LB<8eQC4cruPj1sYFYksEx&53F0U)e;^}u=E z_McyLdGz2C^pqk-pBr}8m?Dp7Ec|1j5TKiawdYgRk(LmRR(*c#=vNN^2Fd*qVDlqU zEz$bscR_LUiRehc`tCFi2vZ@b+d!}D{P_~R6G&o9+3WqlG9adJsrJ;>A+|nxem;K7 zPbE4u=+j#7y2i!@H6aldz`y6%Qr~%!B3Of{tbG-@r~m1O;^dR`umsnBIxdd)$MMb+ zkxluJTib)!6Uq)7en`}Z{U>czr7^ROZ5RAa!L_(M#n~JX3c;O%9DOAszj`%)O4HAU z+v_TKne>lMy?VjtUpV$l@Ge!uiDE|6GFp@v| zZa8~t@Im$i=^Ab5d$*RR&zlZjNRoYVYmSqX2AsUm{e4#1$I^Wlm2xL&yL^#dV@u&< z51MIrp%j_@?NHDwrpIvi2H;T`3WVG&-#O>UhaFWYtDdkv`i-%2FViDMz8dFE-R$t7 zY$(}&CSOoiRt7i{9{u43;OJbil{rcY=OQ29$ z4MZnZ*+SGD1jX4vFF+ti2240g8Q;Bs|7DebUc3XG-$y=Ny=f|f5^SK7(BrG!mTa$jcedxt}l;13MF%fd1I3M zIB{Y+@8a6EYEqR3Y_r)NyOoul##A5k_n*lpP59svyjJr4&4*{dnYlP*LjIPX@Ja%a z0C8ob2%!PukLa?I1+*Zvj-G>O0v&b)PX>BTf{q?Odh}=Zk*H(nAI_EtT_@LutZ8$3 z)(AQ#){X>tnY0X8Y#{U)4>XpH5yAfX@j<9r2Ggjpq{p^9s4lNlcV*EMhj}U60hl0N z3*W7a9Pd*b`@ZJ+mjYro$_9r(mH-{mLUZ#us3k!|gnCBMy-5mg?{yBm*=$ik^59Ji zu`rQZMoumjAyOIyzZOW>p`bCVpUZG(#yJlO>OFyS!I9S}C zIa)j0m;DD>czv`l?_ZSYvUsOuu5Qnk-h*da*QK{VMn@IWt-nTbw}MxH<}K{lxxy#3 zN8wfJe#b`u7BkXk@nU}rC~TV8pf0vo-1L|4_!aOXqG421#jNT@n<5hmavz#H zm7lq35_jwEXj8K)zw*4^4UZJmhc#tBJ3Q_CJm1<2uAlp}j`v1JsOOe~o>ui=@n!Jvfk^_55~eY3~W0cZ}3aEb2G8X7xamFUIts@rUYS&$sMK z++(eOA$*3x?5CHnddowv0~uXep_l-MD4`MK>C^LkfgEY+n( zEZL_VEbsl`>X`@=i$Q0vmzI8bvCiD|W~4>3i~7-#aj%Q!tr%^3|4Yh+R`Dhm4R;JE ziCy&0aM}5}YqVy&*mS=Tce-}Lw{PL$aV4pa?Z-X~{o#MJ)knvPv1ua>8)Svz?R4=~ zYqyB&yCVPb9&h{v++%BH%>fg`qLL9m2h?Bt`sMwhrmTA(tZ$xa`f%H=|Eh#DJ9P5$ z-rk;nGi~&Q<|8||ubUd|?d|Shz3>(Q`AF2lQ>DYQw;Lp7uSg#M%;U1M-}1KiPbHWv zJL@+)M@D=1D8B~+#UT*cDwL3)X`Wxv@m zrpoV|`sBn}=7k<9TCJ8{usf{Nr3r0+%}UvR|JTFUcO%xv!qp`|e|lPO(;uVavRQe* z7r4g0zS}gasA)mdom==a*PKrEFxB>Kd?V}u(#hbzuH{R z1>H?9*&Md(K~RAh^~U5%-LJy<(X#AF@Z^ylTl@w=#UZ~k+4J{%F6v#!VY0V{5n*$i z4;2UrF)PyOzyBETJm}_IcU69UZ_DDROfwf>Dt=E)HvgZ090}<~0++omrjdOCG5jXv)t82-t{$9z+oLj^r)dq1|8N~k65&bD(88oqD;{-#U2 z?rC)F*b)AzPCLGTeaiFaf&cu|#=rz=R`9)h{fslEJ9i#Tp}_Sq$SyWS+&EvMqH@jL zwe8*%r6qzTI`{>}5`&EniQxptj!gqhS(_6fN5i}(_3Zf1ZORxmxj1UUY%2B7br*7W z?2cS3dp5-Xh3D~Z8*{?0&0^FWIs?12pKG@VcfL?}wYau-02c? zF}gsuWbAH;nQPa4XQ$`IF?v!02_cVq?fM;^57le#bbIt6Zif(ELeg2@*KrB6Oix#{ ziK~uHyEo53H+x3j?Z(~}X}8a-#r^DoR_mC*LhyyylBDI$2)3ylpOiSchA$7^pc3MG zRbz*5#*DG3rkJkiPv$;T^5e~$-UXJ|(k9oGgkKn)(?Us-Ys!kzIW{Q^mbLs`a`D2dgl}8NLQJ34-0*@Gu0f$lv%_S?;T7E6#P!eyo(N>FMZl+vZ-s#`<<?x!{$o8SRo;8DKJ(CK_h_w@n~qoy`~Z!P93 z(zDvinX9bWSnEP907{9BZ`u7j-VaTexoNyuzRc2GNFLuib&}A~j20X`1yJ8wlk}ZS z-e`996m}67utYFalvb;O>1-7uCPupMc;Qx{bZ=BXlPLl9sXRr6H+lQdLY~Wn znuRwVMt;b=JH3C4C3o|_NksmGz0X}I@9kQ`?_H+a-17D9agfi52jwb4tqaaD zbMD;FXtqC7FO(eV(GHfQh@Tx*mw);t!!?&`{f@bFOCxL+_1H2fBUI?9{Ei_w71Ri} zC@q)C;U}Nzg$A{qc4F}AWrmBh4@dY7PTuLtz+h(>*)<eA2ywWYI8jWsZN zk$reg^W>Bw*Q!Hn2UG!)roT8nQtib;gHC5nCVY7PYsr%I3QS$TC9^7$YN9U`xQ4U< zlq@pa_@Vsyz4#1;lP6CK5M;-%uRs2LuYIH0J7s~%w4bWM$3q6sB>bGIubGp1rS+iv z*|lY}PiJB$$oO52WC8uc+o*MZ{@c;23-~K_v1s4W`C+gp^D-f8dRDW3F?p+Z(`Qqe? zJJxvvYR;C{617jKjW?XUn|v1%B#&YiJ$tSuoa>Wausy(!ez=~G(7b9#8aOSn8ibnsP5)K5=FXWjm|R0%KWD>`Q{h^G z0F|uB$-S|XuN?^e`#REcDzxWnv!0omnNULam-!eS9f+V}K59CC(FnNaEk6zP^L|s3 zT;Iv6!g&V~jQTr}t&7d>OdqvnzFKb0Iw%!;6Xu;=Q5g`;?fA6%SF??cOOP)KlN!o2 zwzp^u4+S|EK9Ul8nS6&(R2QA)w0klB_U?uOz$Dc24);s?C@U+!h`M?_2}tc+wZmaqr0V?XY%y%u17BWLP z)@Z;F!|C_v*>lwgzKV9p=FLiin#f=vJt3%hK`Ao;;9<=+P8mLArt+v!-Xz$r11E~` z4Utgzpdw-r4O3Noi#+_}fv$41cmb)NpXpvZO|!C6BmgR+bYJwUmw}SHI=;_YNG&Af zoI%5edGa!)#5`Y#>^M7-!RmpgnNKN@091}=M^1tOvVl+&W&{8mLHQ6;v=}o0uTSFj z#0E24MH+_rXH|iCsC`tIK7zepdvqmDHhz=-6CBRx`T-am;OVmN?9Srjv_Wi&o{d?U z!lr`|s#mXGg^m*i9xb3&dTwQP_2a-r^QkzvoBrz7`&=XG{e@B*Xd8Kz6?`z11QisR zo)Uln;Q}WK?^z2|R51p(Qoj9Vz$8Cl1ypW5@R~eX7a3;=X~CDqTs=P^!B;7Z0!ArC zL-SmhbEyYZQ;<;n0Q00?ng_vog)yEY{Omu+;=cvA2dpF}voiLJzP3mI{s-xNq00%& zJ(l^FsOGmwL1U>@;$4$xe$hzW9FuTguHU2BR^Y< zKTv<^(ta%VmF!iBa6uVE2fdsUy(+0I+>s&gk^B;j@df9Tcwxc>M)RFa&BO{3LNdwu ziJSJqoI;T#{3uFFZLCCV__Yp1$X34YYwi=+EpiM}P+?}t0N%;GoM`8H>QpbFBSC0U zl5(F5;E+pe)nq;4+!SF0)y({IO<%ACL{&nH&z?l) zG1ld~)#k*JH8?Z5b@yE;kywnhwQLo1+LAy(w#JIjWqLf z>{dV&;u8&eF*?wfI2F6fX}_ZB79aty!^_KSnn|y_8w=9t(l==b2nJx$+3K1aYKq6? z4;X|Ku)kn;FV_U_`Is;XLjsse>MEbfwhuZ!$ah%1OtZp`a0+I>Aat(WLf3p^2@&ln zzs$FOr`3myAi)Y@267)z&)leWec8;b08WJoO0akge}Tn20x@(q&tYWfjKv3pDs@Nj zg@C!CS_K68lm7k~AZJe`2<4b>_RiHDHt)heY-DIf32v!&z?B|I(tm&dxF~FivGht2 z%zOU06WGsJ<;gXdKR?$x#5ZltblXh)WSW*bCT1sJ21Md3D`u+;7+we{sh@9>r!H(S z9{~XMlq(aGEaVqS);C|>TxGPo@rRN8j<4#dexy5gv_>%2SkTg>An;PQGfSlvrfrl| zU$UhxAy(hVKt!v6bLEm9o7h$WfK=E_<8ijvy|9H~k1fANO-EC;66en^I@5Mn%I-{{Xo`>A$Aq32;U+*MnyS)tTzY zN$oHnLf@x%pz})Zk!>XTj!)?a32h7rp>5jvWF%WNg;R;|7lTT`LJ0uEHAUEbL16Qr zvP+vhjK&w9TkvZ{xf0cDuxvO7(DD|XaqZlt%VlD@-Pvd4+NF2w=ySRY3IKgxCfKx~ z$*53&V;dGL0J#%*GP&-mS(J+C7#==+C}^ z(^#l4;SPLKZAFH-xckpR+`axwbiwLap|6|+h!d^HY^yX!hO}B`F6s5twXldFFj_I2 zngaV6kr3dGj!(!K#YI!HVe5Iq-3mvmuUP7f)Tm}kx?iD2(C5uC2ggprN{Jczar;m-Zx>87uy8s#pbqfBM~9Krt zMG*#A+Zr;EC4`Ww5bW^@EgrKAuocr)4@2#YM>7D4%>0iZO2>-Q(ZJ+4{%03Zc}OczJE5uNdMMI0_b*)4o0e*W5Hp%u?mA5!B5;2( zl>}ITRB7`uVL!tMb4`92)!`dXKX3iLVEkJugP#VGmVXHc)b+%qPgOM_8V*4ncQZ>t`uA^&@nDO@kMM_ zAubmnx~KehFUmaXYUE}@9gb!?ah$cQS@Xh$3-1dji)+eepFKC7z5_^SK={eyxZ5Ho zbvWg1h^A8NN^BLiDzxYjz$wHR*3o%v@XmxSflmwlJq1lU3RF0gbe)tkAXQ8o!p+BY7Qt)Ayr;$n221)#y zb=xD`%#a>D?)ZnpQp&FfNgq;{)75ROJI!+b4J%y}sorI=7lXXK_Ny%TXWKtBy6x*R zYsL(6LWJ_F4n-p;sSg~Zw%?5s!LKnv5Y>E zwaH*TKb81d_8EGzOrgLiEL&xtj5SH%6Z)3EIOC>EE5R8mA)He3OL_642gtpQ<<1}b z&F4*afNAb4d5W!ZxZgz$n?r&b)?c~u5>MI#?MiPlS)b|Bo624f5e1Gqo{eR5VGU%A z&uR9i@as8UT7AR2aX-ik9hCOLQ}hwGEhs{T;$NZ0=Z1#N@mJm_^XasyMR#;#eWy#W z)I7I8-+_PFgf2)h_Xk4y7#B*Mr%)sNWu{Y3%tRDwPX4)nzCiPwv9yx-69aPsu_ zgJSd-DzFtFrVbjU2Ol$sojcuO2e5~Ab7TGJ((5wQ+4^%4o-CN+#vNva&Qsu)6DhEu z;72{hf>o@IXywe8oXCr4VLq{?m2tvF#Nfwt-HGsM$j~`w6nTA6`O2D_OR%bURND9U z;jS1=;WruKNq{_vghBdnqH@YoX(c)_efFsN(cqejFw@9B@C?1E19>l-=)pdglnn9l zmYL4U8;jS!zh}ZDL7O&s>Shj1=tm3i_THx8G3Qc)2*#g~!YQk%%_A^#r%&-nCZf7j zX3LLYatRA6h^f8S#Hs}Qs6!;O=S8uIRWndP@WilH_zt&x7^@SXeqL)3)}4w4pHV|! z5=lFvetp`-Dn8x%`7tGH!n`$&hBft{lRts%AYsA)w~DdQtW}%uAWH6&nNIFDrem7M zLU>%Vvyo+NK-Zjz1+w_A_O?n@fk@T2P?{r@8BC+8Oc6Vp4pJ4Wv*Ol9ve(}QN{+9- z7l$y|n%a;}fTX9wX+>VVTf7VM`jXxETDl^K>KL3cyj|yhicpG!Kvy=ocEM+PtlyNK z_sl2omc_F}Lb-T%w54lF@B85>i4MaB-=y#~S-Nz%;n9I3D8zt*AOx`#9X8WxeS-e&Fp8%Cr&<9G@bUy2>q%pIu&W&ezv358UmUUGWIYQV7rzsq2a>F7B*8=z@5JefaY1 z_}MzY-mc;*1cXyRg%s4CgxQNOZo-xox0k9aj~%=4XJ!6!c|WR9FJ|IcARk^Rt)wq@ z2xV090|t%sKq=mfLcbR;F~~acQ1y;s`(%W{veEcX-nZ%bXZ^SOr2y zwKYbL=yTFoNM}tVEhaPLpeN-JUzdOleWixKBd@KWw_&|}+J-~fLuL5weh3Cg%2pcw ztHbwfFRh_zutV|Gxm{~I(T`PCK3sW1Ufuv&3o&zv!g?Q=HN}h&4kw}5-Sp#=0b1`? zElpK!QW8{UVoAP2!G?}2xw}0DnkRQLZo|7?pc1^xTkm#}xr7(|$D`KW0!aa)d)eJo zYwGvw+H`4po_1hOBD2h=sTE?LiP)xLfzYHJVV^2v=>R00->WUHu0HxV4u9xAV8CH_ zcZqN~iP?E*9Y$82*YaCPr$yG?gMvmf4Up*UgpEg;VNiq~@X2G3_UbhEx&P>|hz|@D zsQl=F?0~B4B*1n6I1-7Pnwt1>r1rOUY^mQ!{_>JQ60c||WhXcsL2&wFl4F|jbvitB zFc{DdP#ir@N@@>aoQN#x5UV_xy)$FR4EMRA*vDE?Y-dEQn1nCKyt0lMp8-HfLy=&6 z`y(&?EhZ@KtzW&6@rr2z!aU70S4ET!eyMG76dVSAelX7Htoo{U;vLZ3 zTmSf!IC1Ci8?)CeDYYF*K_xzd()=K@{-D6XX}e9&`!bCW z*pVbuzj`RJh$z?%0FDk3eG8eBK`0spBDEi6B9NTwQgYhVvA)_ya?H3YYjYf6-9*Pi z_r~~l$H(C|VT{GGs34eIl)jG{ z>xtC95%1g2lM6EqH`|XWOd=6ml{aHW^sjz@jm{V+U-1Kefv0q8Pzk-JJnPQ$$w&9x z^@j1gn{Kc|*8NGCc(DR|{ms~g;TI|x3{vDgYSbv>H@=^Xiwh|&oeIL2jAS3ujCp~K z6+LdRz%)Fd77wNW?C_-}HQt&+~%WQO{;Ky|fQqvzSLzo)hUq zUK7gW>i3(fOgTyqEL^5nuYG{UtI)q+p<$xU^dy|>hGi!>L_cBu66@MYND4jCwD!|j z?X|vDHjn~y+RUTJ)++#ZPXozse97E9dLDtzmHe0=sSYkH2J+l=u2_=0@sL;Qp~`9Y z?JY_#4b;=qGg+`eIm~FX_e864vMa~*V>s3kB)G1dMlQd5J*B!lQJ2>6S_(oSt@USX zY6ukMQacoSG#$m#ay&b~#Z~q-9X%c^s=08>X5qiirp+%e6)hGE-IG#8b?FU>km3H^ zKADkxpbQephYue{@9L3tICe+-S*5FIN-Kp~+u#E&%fU)V6h$}ggiH^bi;m-ajoy0MEBG@6xrP>uI z=PYHaA#K^m*XFY)m!{f|1)?~_MEq%Y3w9MBH(H%3J5O%QVp(r7?ZyQMwJ1`6g=K~J z8PwhfU)BPn59nQe3r3Xcw$D;DA9WE%+qL;hj-uSX{F*Z z!R4=f>=iHXo)8f4V_zUud*(q^H0zmRdc^3DuUF>SM~Sw$ME3I07eNmzsh#U|Cno_j zT*|gDdF96nHGsn>%)M8%va%|XHXt#&;z5m*MbjeCMbVs-Kas7UED6ml<210y4&$<`Zf;&< zGT!daQq|Fedb*aM-yLUrg%nFNa4z%O7-d#cmmD|qEyJ9I_DvMbM~iO*f}I+*ybscK zPj>2kr;>=WS7E=#&UagwmG+jZfPPS;OeK|0WVO~++mrK?=JxH~TQ@T2i9_@th7m-p8`CdhMBk`b*7mUr7mk9T08nFQ59F?|m`2Kj zua5!fT+nlra|^lq2aUY&95N1S#_ZWo=vPZNElyXfy{ENp!IJoHpi^#Zmo9Ujv9PW{ zd)~$SkmXnAUurd_zPKlDFexIc{)`#Yo)d=*ZNKd-dzDH(Aw7NGZdc}t&%ZRiZT*vQ zi}k$>j&JkLvY8j4y&rIafmnkmnA=G|%07D0{`)Gny5>1v-c8J!o#l0w9$i{I@cfm4 ztSt9safJa>-Q>ZIo~Nf9O`G;;{IBgiMZn2~OCKxKV!oISF={n&1t zDBipdAJ*f#P+6=FKVa5}r-`N_cBta!(u#_a)9mhkkVp*9&(zmll;;t>A#cgu3QAEm zP|0@TOAfOqdC#ZcB}ZcG7sU+5$fIj6xIQZ}`e1we5_52bxkME7ehS)g7CwYXk%z0> zXEr5VZ?{rB5*DCs`h_kM`Uru04{|ftba?N@Y|80JrA0}MO1uwY=gh=S%JRE@n&fuR zTdyg=c6lFBISc*Qj+3Q17dSYm;3G2f4Ok@RgFY?l7XHT^YMOCfB|di> zZg`bz4dAd%IshwB@6o!Ks3`(E(MKF4Qv{PnXUv@|Xs7P7vWJlSDr;#i+q&J@*w}!C zgD9KWb9vp-lQlOV$Vc4{$#?Md^Xn^|UFZQH#6}EFDX$ecCNJ`2!!6euTgDDTSt=?i zNd-*W_G@Ct1#3GDlL(QofW9l^TXr9jn?yptbF9ftqKH*p5X8Iw+}XL&+t35_KY4D$ z(33MQre;;7a7*Is!9~{=b)cZA9_aM&Xi0Ig`B>F!p*49;XTQq7YTKsGBc?x4{QnyN zA~|_a^6EcNR$UtYVthfjc@2RU%WYqt*#q$2pRaSzwrA|qKi4mJpZI`~q9kDWrdbu5zG;J_x@8LMF_@Q>Iw>8m!HUV&TPf?)$B5J96KHl&a6G z_HFj3+U;U{JGbb|+RBpEQDz@2Dnv6Y<`=-qcu<68+n=6!?Lh!eG1s2P#z!FV4}*I* z{>+?r%OlckdEACPO+aO|3-<;#@CSl1oU|>iWCG(M7P?*i9C&B*%cikm6IP>&olmR8 z3eRcKRci^}Z2}EZCc#Z&; zlD~o948&C>L=SWXLyewnYVJ&0hec={Z|r`)PH1SwY&k}Amh70Y{;kZ=lO34;?z`=x z#rCox$h^>qNkO$dW*^?f=p`|ov`ZLvM(geky`-GoX)PW041^YPJE`UmVAp2g#*zn&HAOJ<7#~jnVl3lcY8EAe*t`cxb%9;(#lMryr zq|=xgp`%lVN~O^p6_%8gI870TSZ-cSN&#f|ARi?wjljykuwJi^jErK+H&(TPE@Dq! zJ{liBWox(LB&yiBxZ`Kfia7+jCcW@>^`IT2%^V}^Ee*8=dT)N#`QF8(%Jlm!1;lw( z)y^;;$8?i`qxVzJEd7w^EU)(v)CoaKU*MHaP~u$t033l&nax-1H5eZ-b3ac9{JhA( zl-$nGb{%N~-B`)PIWuY7X!o$xwgM-|ht!|cg&pjK@qzO>3n$GAE6pL)LdPv7C@Kvd z`phQQx%T$86z*S^1t4bbt+*TZVdj#QOx8b~Bx4lMtUqxV=o`SO3kYv#_>sYN;R`O$ zs-76~&p%cqGD?g6b7mC)@rmHYlna{O(H9f>07}W6!Cfx5EwxYWCDDP!Sc)(Txr0Q4 zyd()z%n3Sy%c7wXgUQgBw;_bnT^B)@Jq1f^6`bM4Cl=AR8bK^Eqe7ioOd!3u zwDc_Wp7|)K)rqGjC@`>?$osyoXD>c#(*6>=o*4^55(7PG1uj_q=M^ae^dM%=uacd+ zuh=YjH&882H%Qj1w4~%C6TK3t0tE+$l~Rm&5FPeQ+p(ZZ!o92d~y6E z8pScdy1A!%2)~{WO{GOmeL&qht_tJNFvx{Z)ys5N z5ssiIRG~u2zwX&RHDD0haxzle;0!Sk1y#?|xm*6pEQ|18=>#o@e`-&3^aO}OK{Qk1 zPy3K7+BGywLPCSuq!U?rU-Ig`kFBO*XBS*8fzYU3CAs8)_)R^%jJO@!khBLomAnA) z1yn!1!6LxO8zAQ%lDuQbj=8f|o=^IR!kFP6Q((LHz_s-2+>U;y5OUVHf*ENtVjLZ> z>c-m4p@PXGOG_d&hd4$o-qgGjUP-(vn&SO{LLx^2tUVnW8LRABw*zkLJ20$3Eg)9K z{7Dtl2-S1jo<4hqwsij84%R2Ns* zkIY7RgztBl$DEBDH`Z(MN#^#N=g*yCB_SW1anyD^pr#0-`hty1EOvf-4X#%OgkZE5ACU4nm%fuyG3LYSkaHPNmb&PcpI4F;s>rB$`s%t zJNfcble%~)h%3u(hjjKujth`F`(($cvRTyZf)Nh{u7x5r;%jcO#z`N^>gm~vb;7^E zuI}EqZ+logp@m}M9`Nz$#vWI9ct4R_eL{E=lZhyxW%~3vKug{o0hhkNh7AHaQQWl> ztjhborMBBaJf@@Do{y+R4B{Rwb!Gc*v_6W;%B{E#4?gyS%clF{^+}ZtZ%wZMj_~Sw7q42AVNsn~SV~B51#eF#zToQ5g z>|JQ~`z?UH2{1i}fM}4H-80`2Wfnd=b4u;Ng^{Ic6Na6SZ%-$XD0=!ENvob6(WNa} zakgS&`qaQ?O}lZj{*p;8TPIHFw#cUlIQ0i)bV}1gj~1$b0=`gsiGm)ITVV6&j1PEv zrp#=nPZh>AYyMQ^J^E2*0GivoX4frIz~;|}Z7HCnW&7hsC$647A=((H*62oP4hOXM0sV##9tBqgDBJ;G8X8p_bHA(Swp3EH&FCAI?EvJ)yj?u+?>+%A$(!W+r>3Oy0NI-c&UkJpoVc@uj zc?$(^PI_KR`o^jeZyH#)WMW$MB`JbYq-j5Z$Gyg_vMaQGRx)6dzz`8n@Rzjfne*T20X zCG-nZnBbfHzPiArfJS~L9!VDn+7+LF&yP&Uik&3tJPblBq7}Mkgg<;Hs&tkf@8ZNR zwd~zKX>Rr{{cDGw`SW(y-s~OUbWG#(#+Ht9cc`u2_^LKzn2T+G+xAg+u728>({s$o zk)0^m&!ANi@}HsYCOoEV0_1yTH||zy1K_3rCH*u)&c!aT-r;{*%~Bp8<;rEv`>VDw zeHPHNU7STX-i#ozgqXl#nRTJg*iA4m>$_HO{GheC?y*C35w+~ZZIuIi8R(KJgx--m zXc>8MPfaPtd6sS6+ov-3%rXOy&iQ4ko!%oOKyQuLhDQtTbz+pxi?lt_4Q=1M1_gy) z*xr%HsTQ?xxNFzZ^r2&5L72{xuv$ZjxP|0I1PF)vfLD|L?ESr?W*_0&rFX;in zFoeEO?tZ3907g2!%h$o?Q)o_w33kcc__8GfEuH&RKvODF1i}TlFqS%^ziU~+a8U$} zWA2rv!6t`Wtt8-}Tm0P*dsXg!QNDQOQ;%*@t8NEPy0a`Jzt8+v7elw&*^EiK6&sLp z`d~%v#`E9L5BjrNz0JAaO_Mjhed*dMaHOhc&GiSfyI#{?_A=n7-j%KjrtfYXU-ak4 zR)z5fkvU^;{606vy{Q7BcgmRivfd$CuIdhn53fo+4iB1Z_(f;u_wajNuNf~OY$RFD zh}-jQ-MEZ6z0i#B4&U;pnVg!WqCVfF?VA^k^+l<-g7f|)C9ds}n766GVSJp0+w#G) z%ZJaKbL!xXXKPej{TX!OS@@ANBSi3MOM8$2RE2F%-=SPg|Z0iuO zn7Qk&-aNf;u4nuI*sdEkDJs)Dw7*V3H0F)HXtb=*rb#01W{=tsFraDuga_#p%=%2Y z_07#`dCtgr;=?DYXgQAYy&pcY?o{1Rx4P1n;rB;=tEHm;i2P|^&~WnO<%bsmzro|# z`(z0mMRDinm2&%$t9n%) zo6+lmLCWrgCnExu^@*O3k)0*R{}V|>c%XNpJ}n|Z5&VWP3_0?3oGpjV!5r;s@bBz?Rn%cM81aU^8`=xd}Qo$FSq5^WiZ6#|>3(gR{6J;e7 z9G{K!)jic#Z~gk~vrE?;q-GL#%sf3JK!|C|5ZEu{${v znB2dgw2~u2I$BZ^i=v83M+q=*XOGA3&nn;XpsQ6M6ZVTbn#oKDDT_WLcsN}Vz9Oa%sa=m0 zMM3E-axAAYi;5F1P0_7y#PC)8xyEm%j|jd=9l4VbnFwJG*7YvjB7p2AXmFvjMawm+ zU|vA$RuUmK1kIB$nzW51mO-ClboG38DF#?M+uO??`rYOp{*q1jIq1ASgzW5hLBO_b zy5RW?;u1is81hR^P*Qpg978~?m-IYgHYAU-{r8gY7K?8XKZ9C^Sr01FIhXX>L(2{j zcf|jgd~ifapz-|}Q4)xMrKWw+#+KYDkP*S7kj$+33W>W&27?TbJYqW2cd7{?cynR6 zBiNfdhFDRsibkBU$7C~=o^t?AgEMpNh(9s^oS*$#4SbH!8&s5td5WcH77@+ACLL-KJD$o-e@zdW?vP_T6 zDS{WLU3p3asE)OD_#x%itH#e1)1QE`iQnm~s5pcP44COsW|{e3yQsUtlraMLMEW5J zV$mwFukP)v*AQw~N&txj55*v)4qeDS6P?R@`Km74ONAk(zWinXfMwf(a_KQIL%>j? zbYw>u!ovz}6wQ8n`cSlI2_nmKyJ9aP?Mgr_C`*VKSD8e-NkL3t$ZkpI1)=pWNOw5OHk@m^vzBQaxW z>Z#kiIx4+l+#CZ`K600P`4*s3009p)HTSbL&{-f~4RmX1Ce8@>%+N>P8yAyhyF9@X zz|*396ocLyQO$}U88Jd^9?@B@r27%0EdWy(J*qnFhj4KdTZIA;IUf$Mwm1t6QFVR> zkV2$hNQcj&@>miEr{4i-N>`3VhT=jdB6aWG&a13#G1m$41Vl-RW8~LUbGWu`>zx7} z&%9WkcE4vh9oA^ehex1|>(A3f!aYMZN=e`~wD^#=h4!~)PbRm)u}@EVi56=qHYp5` z0_cN&lya0ix+pkf8of{{@Xt+$d~E@RvHIvaCvN@P4>GU4QX8sA0l*5d9dHG{(VbzJ z{Kw)Q9h3w=2Il!(v$4E%L9e#Z%87VUjxcIR6t1i}r?U1R&HLC}v%?XpLFt(fZR8c| zAzLJIf9+&-JGb~3RK6#sOo?Ne+ohoj0RE=)b_aB&m=bK~EcB2pE` zizjRqp-2|+phUoqxo@V@5rLT|Qf&qf?*53*B%mGsYfw~r`eU3@R8_s6^-p_=a8+_tlohDCAc`Tw1yRv|Y0T~1^`rOPZIIRn z+&UCQMteRt)!wNGeFXLVC4f~)#IHEVs$O5;ADKC7%V3XZEThikS@l#VY*-WHNm5xMMHN=hegLWuRj2_zDM50GSsb$NZlA3E@IjCUUC~Y6zhVNkyMpSQPKf^J)WEBQqWC zickZK6(Dr4!ZC%6d&Gy`4I8K$#7vqi=Jz#(&7M`bqw_Bg^4!bn5yu_;CbJ1$iFvHc zkFz!$bFse1Kf8ZHO(D>%H)sD7OQj^F!D*s%@7vdtPBM_!CopDY6~kNaEOl*^A(beGkE8nT-W?QB4Y(f<56~8%71nDT*Y(G}^c5Y{02T#+Ql{@-deoN)9 zg}vI6aF7^O&&9)$gnkgYVtLsP&p$}SK(3_+=(qvMT~Y7!kP50c7W^D3gs_g}vb zuwx~Pl%-HsL>AOINPB)$IzXt(bnm_gZ;-1|i{N>@ypA<>r%XgcdxTT*Bob62gl~`* z(Y5h(kUVi)kI)#AxS*zvHT3|tvl&()o&C~Stf2JpG zhsZNPfDelGudpC6r^2S9b?v+jCV_Vc&R2+;=e|9%X?K`<%5_)ETj`HSrM}!f^#^dG z`2~n!jfw3dG{NoQf4wVwQwC*I$>I|CxBDA@EoH{EG|c zRWqE@&)H+|-qj~sn}3^t$K%_AH(g}M-Lq{8$T6wQb)8Dv0AhrPIAVEMGLnAu*rDyC zXWsoRKj%S#^HvMP@Urt-2$wF2=v<;c@55lefhk4`}|no7dYtzXPFi^rxNe zIV8r*>x=Ep&xNBCV%~_W{%LySv%C1OUS|f19~A+H+@Y*&?Zivtublb+{Xs_6|IJU# z>H7Egy^=*#78eS>#$Q9*|NZ@^#s7~VFMhdFrb_C|Vj?-sT1YNM1S?kNV3-bS?w|J-Tk!*ANng+&3acDE}mJ^847(I&m*$L|)lO7Usk+|KIR=smOB=5&kAuAP!M z#POlz`Dm$-s>Y_cW-Eowa~@^MwVJZss%foN$tIqs>A9paXhn#Ld$Hzz3ZJFG5 zkD=7L)-Ja`XI~!gcFgDZfQZVXXwSCx`YLvEE$thwn1?%G>EAZ?)zZfg#_d`1qvNN& z5%E6y`r@^IxnMfB$Cdt9UFOKonyvCvHgK~|;O3G6ouaZYPv7OfX26G?F1sz;I9fjS z{uW%bZf0-ye>%=-|L>#D=wf0d_jDTLISz}^>HO&n+-;m>$*|%zH_w^$?2AVd%pJLzqbc+3WcVEvl zUSHDwtg!C>zg)=wzn7_4<^St7{#_WA@6S0Vv- z-4it2g##8P5^4he2)(7STuKUAtDZr_zvRbE;LKEsgi@7E{F|0QO46y1DpNK@@kasK zT7s|+?B-5N?y$R8rJ?<_D>)S{+a71Gh$~(jW#(torJaYl z#jaG>{t#9MCdC@E-p_1ylxv>1tohlzrHD=eebPP|(Rd05mo8VRj=?b*372#IBwd@3 zs+rx97BvS5=MPS?38YeGI^Btx2evacTs*}5K{Ivr_1k;~0tWh9bbV=e$#)b0c-}f7 zAlNU{s-1@r=%A6FAUadYG&%xtXE0VGjY@W85_sLWn)j9+qQ9pqBG3k#D+&-Ta>4uV;%%f0aXfb6c7Y?dt0F zr7~9On4g~~ihO}32^_#Z%y@Cu)-NixTF#S|o?4n2?ix)84}hD12%f_ji*9W!_NP5D z41P=(BUEDl3N9^tqcd5iB!|}_KHje-EXI^XO?|O1tEHCu~US1bc(dTzJrUw z;Gmcjc>4cS+$w8p|0!=7aw62{@*L{=2S$J{WYRkGRx6n;p(~P`j_p=EQpuU*&$38QV z#v30@SE16gwpOMXEU`0`h~qKQTzuqSpE6ogM{~e}20zFZ;Z_$a5wI^-nAWvkf0N>a zFf|8lISSw%DIW@~#t7U*N5%~u8G<@7?@#ViVY)Li0}=Jucm0dw0^@BZVUjUk+SKo-T&O!#JuZix_O8GJf+o8Hv5w_4n_ z2VVN~7U?AS1!5vF8%z;NZFIvI3k#OOul-LEC@bDxr{03-Pyez21E_ z$PanvyQ0YrJWb456vK;82A*E9yL`-LaUn9TScGR7zDKjCoT4&nR2M4RXQ)nutwiX* za=r};Y*$Yyu19E}6=1R~e61+TalIbI{Hi(X-->eEfZC&uR#t%nk3VaQil5#^BR}bl zsmH9^xy~HgXTfo)@l8!teade{@QjmC$k8XLGk=z;I3~V7M4QXunF0hPKB6o*USSb= z@J#M{K@bxeS1W%Sp{3rhGu;|u^)YmMXZp!>-;;XC>&xiH^fTa~;xGhy#gXG@#QIw; zky~yF%+2%$-ukWN*C=!xfmgJSglHFk{`Pv2LH@QFA?7|VclE1LVjT`fi9@W?1qP8lPWU)Bw zxH!ki9b_VS`u>h*upbLw>f3L>)(zE-`LH#s(Bdx|1v!6-FQTh@irhxHQRrS3daEp& z##n8cfdhr1Aqc%AXTC^Dv^3*`hO=>_um39CI^f#E$z6eJlY|T(Ff;jRf<&D1a2)_1 z_JHn?JdRtZ8!*DGfbPp|Zs&^6Lq`5$W>$n>AQH8%W?MS% z=~%1X&#ikC+^*&tgojX`gXup3aomS^9hAXL(;zuDHIZ$9<3FKxj{_9H{5B}|6np$T)QU}WtTM{r&;9~uEey}T~16w9!d(7t0 zx3G{GNT+D7Y1TU2?6aYd?fcZ)v4IF**uywt~In>!PndSMv!HtvL_(Vg5TtddnWCD8V)i;{q2v>|vIE6+r$uK}=`0zrn1^W8boL?MlL28*hyQA~0 zNTYAVu|Jv|8K~8xubKrVkp?Yrt$dYXn9l~ybL)5W@U-u%L5mO~b+>G}v(v||);cm% zY0Q}KckMM`(OV+}@jHHj23-tsc8$$);#B#Nx_sAPB^4%~x_EuJ&KMdLb40dt2qGHD zWg#vAT2^k|axV9%w&@;=NYA;U9)EeX>dCX#U1Pj?@toN0aTc2M9-Iz1xiPwH^607h zbM?GYZ}esr$fsm~bbOyx;Qgl6d%GUGtYRy%icbRzpk(b(Xz#Y?_1^l|6VsO!o|kz) z$LXWagYKs-($bP_Srfpd_sWV4{yqnWnj*WcxXi<2X7+^=|A(*#xnE}+x5Ra)da_;KHma$UQE zlZ@%9^>4`=eakF-;-*gm;ia_dzylV75Yq^A!NAbRD(-s(&%t}@-n(~OR8RMJW7ub8 z4rMSh^)EdNLHvZMWc28{N6mXFD0Blw;%t<4C!`QDgYg5yHGPx%qA)~0t!dEtyf>B` zsw8}i8!_?DlHPmO{i*~dFcE-p;>4VL+&7CujZOLS58aj!}h`(scP2a)VE zQl%RdZ+i(+^nNH6D7p9kt)vTf)^x!&!lCa{=5Zd^(^O({urRKrCqmsJU%-ikTMyyY zcT}xPC=A8KJ67t5b8!=gwf!IdM_4Z1mKTOs7I9AN9`Mq+?V2l7_ajt7h$H6Ph!`le z=ux*L-Z(6s4V5Fb=9jLRUv<{cci@<)7RREyxkNWD8Qk99+nAye z;_CndbRK*aOb``3|1L)FFfE}S)9h}{wyFZ8jWWBGVORW*b9oUAk~Q;b#GH-YoNdVT zWZejOZxLAs(L;q46sY29{kBQ_rIb&|Y$!?`dX}1S4ibI_4AdFI-A8cHl zWLi7A(Re4aV*0aAckfbCO=6OvExjP>9ONfT)vL zE&#b=91UG#`}oG{P9kL?ihi--)?H99dczE31nD$+u%1TrU@K1SncC55gXRF@iWuE+ zi3)%)&@y9rUCi3y3&-y%V;&B+!<)E`eJ&bMoWQyY!jl6e(KDhV?DTIRMSlT~&fhSZ z*z8g^un(#8a|few5HMZ-q8nx~+dCN=!#wu}1x-DZb4lpXt(bnm42^G7efzziq39Oc z#pYUN4nFL?0)4-7<;&SAJ<6}Yp;%>wh)6+s6A@$VJYY^oFRuun){}a6&!2YV9m5U8 zC*K;iW3AL(ECaMHQyRbP5tzO!7D;^*0OAusE@RS;eT{@Xi=5fxd`s5c z(#q5;S^K6LcXTiaU8fwBcQHYLQHC_c=*8P%@So0xD!F24A0#}ff~6vWMBl0Tkw0B} z50s$bjK!((TeJht%Pj*h)_=V4M93TED>brLp1io0dWg3(%lJEmvQ6w|1N|)?S(4i% zt>38P#PA!f@>Ee-ksujkYT4Cq`=pGD+HK~e4xHUN-r;>ezCVFBk(Fdw2t@0&yMshS zYW}${SLKf8uWOHLQAiGiq?*}BCsq6YTNnTI>(Pccd&fR|)|3Klrj&zu8tRgWt~by6 z`E5%YA8L}4mxOaF?w71+GB-Y~Z-?H2ZfBS<7xAI%3{Si++ai>6blxURwPdvq$x@Z*L7!%i73XnZ5+-u-Et6kP@>=JHhpc+g6`daBzcRCGWjvx3yP%OKL-P1 zU>#iNpyNI3pP?J=LsuJ^SdHoD(t~9!`3nZS$AlM!??~+e95{Jmn*9GJ>`biti-G-b zVb=erUv3(-MRjkU2X;|{m&~W~JsD+z+4e0r>u5!yQ`evZr6mMa*}eNTMLHCt-MG;< z|76%vQmnWOz_P-(y<+s$%rfv7J^&OYQphB`pY+HZtqxadwQb@+ndyyX`j2-(8E#%a zq#eCKHL$Gr=LZ)vJ~}d$%x{-z&SDR@fXebR)qS*Thl1{{U&w#n$5di3FY_P2%0?k# zB6{Ay?}k9Xk5EZc$={&2@Bgypv}~KYS~1t3<<}9#OuLNeL$JKWVHVg;W^IUc34|x; zod4cpPt+~q0M9@^lPw|k9sXH72mJumBoIU*&r#TJ4jIAlWaXf+rJEfO_k<5Uj9PCMhK(Mmqhdpg@5eNNkLoI< zK%(8irg4~kBow7Wt0ADfqWG33wRT+xdhwj_$O#ANBW_l7Gn7W+IM9o`e)WgsY%9UU zZ3s#HSGW_P-CMG{OKb7+)V1ziCOrTzKKxTY5~uRV75tcss$%VLEc zv-)J+t^e0Y1`6pxD+^PHE1S`MmA7JLrr*uk7I}HTWoyNAEscxQr0OBoUR_@{mPe8} zq`v!fE2OSMX+rHPcSloq`a<690BM^fr4 z$v1)k9x~fkc(5m&b`)2i|LyJdFPZ{A;_*vN8{|-KNFJf18-p!XOgNx4{LQ&DQsU59 zfotL;`@!iL$!Yf}Odm0X%bhU$5l&l76FZD-VHFy$D~qo7V8qQ{BqSd>h*cs{1>_Kb z+lQSs#&~#zu$%LCk0rB$G59DU`9?VGL2bgkiVKfuf4fPX?oa(c8oLsxrmijeaA2?$ zP;3=t5S77!NsJ~DWmd5=O4Vva5CQ}Y#3YECicF$ZYqZ$nz@Tkyq>2<2KPc9K{zj^z z2#9__hN85Jp@jk}MgBg~zn1_1_1F3?T)GyQm&<$i-FwbHd+(EF3jC22uF#G^-E;C& z-GaNoMagwHjyCk8r>d9&%zN6_D z<*+^7gCnMQ8>&VYhc*D#2WCpdZdx@pHyB>VLiGG3>j{EFkuwvs4bBNlBzTC+-+P2! z(P&#b35j|yXVB84VemGJ+<=_PmY*T<2eHn;+lMoy1z{ZMoTI^?i4+H-ed?`Sx2{@o z$m;+ZYi+c&JS`t_DzXMr{4>+`SSJ{EfYfUGReze{5;x@ZBpd_R_5>0YB8H>$Y%=nP zUy%QnyoBF_5sJ=;bZ=%67vP58)b*_fI_?U{^T{kN6a8YQ5`KyMOcTsr^az+el$<}| z8~ea`(1V7X#GBORTGx^`5MZb`l_trXn|ccB3LyjBX;h!Y09Gscj(#JoFg#kZYyHbn zuhH;#H0gGVr&L(DY%>CRQ~V$h)eHFN`x>8sQRPEd&z5CC7lAFbk=F$x-emNH@(i2^ z)d@xKfMYxKmI3e#9(Uig*+8d#uze|X@lffLu~!G|sN8&fs#%_g{PLHWfrm%y?+3J> zL=y@M!jE&TvOxNda!gltgYN&jL!2v(?B`U>5W&H z%nm-C3?*tCdS6^e++Pcp)wZQ|j<2kqrLh{i~m zf%kOOi;a8Q5e}1a2Oc6+Dk=~}$pja=gDRZ2fTU4fA)6DDfI-CgNygKy^#>k73h0K* z5Gkzt7M_;ZAa{3lW#K6U{w3scQgyQl9F5%(nihvvjv{^{4sj~80Y|(G3pc{i5T_Ea z9-N_cVy*+)#rA+;m}DAgMX&#tnSl=N-B9(OM3PL_VPKPqfbN3Lsf^x{*+N|npy-L@!TfG$I*FL|=TMPVCe@dr92wZl04U=tkEsz@>hb`EI@mn<>I zOGVURnl_G}4-hzLi%K~`Q0v}&tqF97Oq>7F-95PIKEeyos238s@%%&0F;^5~#sm~^ z@+L52oIRcg!-6pGBb3ITVsQTXS=gHCDZ(z8VX(4c zQEY*YmhcH^d4V-$5(bI&a1E*urp@8@5??GDY2)7&3G)7&5r=OJ0geWMBU;vQ9)@OqXkd z$C^@q#jCZ#aXYW1@YDnIf+voZjKo{U8pLIf{`z9!8XMhJX(8T$yhz*CBSq$3_=&0N z=R*yT8~Pibtc)q?tf-I#%>((6ny`@o496X{ZzqV0o2x#iUu&_5#i&)fc1vZIWen z$%?tiWKh3^oEJb!lT{`0Aii!&Ga40n-UO`B$4iUwIkN&o?Wz_ZF)eE}VB6?E)ocIj zLHUzu=+*~fbo$b7%GGmao5gf9{_GJMs&^Y9QQi|$l<1@1oRxm>*ffqRMJk^^r*~q- z<;0*ZadF>*s0*`Ks1TsdAUg{I3lIP8bc?QQv=FX z!jz#Aj>lt6rFo_H)8>%(nYkbCQ(bq{)xwc)nf{TA|AwS70s`}b{?+TZqV$e(I8Hqz z3E4?HjmNDXu6nN35?)=|pHUpN%r@wJ0OL4WA1fZ`fO+iu^~PV!m_ln|csM7V<-gMl zQP9nBmXmGafU?d}k+;dqT4!+irnZ6^C4HG)F8d4m_Ie}vJl8YJDYTFnTD7hDlgm__ z)mm32ebf6lc6BQ2Zg{JE+FhDwwahU4VzJe@nxgVX^D;yJ_p8GSiVEZn>&D*KaKnbr zyIAR}s7A`_UJaG2;u~W_ zIv)j=U+_9{;m|&p#gSr>JR(P(bz=Jt-nxvZIm=J`X4bFFA}-4KT33sk~ONoN|UkOMN4XPmdzFW zG0lxz{3g61stsSxOi_%fe97tZ5ssYZj5kh`IdW_Z^$sca*S;K69&$TH7Npd?c)#AC zsTE6 zkC`6+P$^qsniA7hgCudgCrM9M)+vw-T=r?C4Y&`Jhjud`m(EQ7S8osi#EyI8IpxdKW zcBwL($M+`eb^U&)=1tgT?f(137pUmFCBHN-?dE-)fX?R zZ05Ly$BY~^=CmwsJ$w3s-_NJ4wCQb-${^pH^1}IIxLD+Aqq49Xw{o)P?a!H+qE~r) zXje9G(zxNmEq)BctdV-Jm4?R)h5R@vvsAE|KTQ&!AP(nqr$tMpA_>>QAzl)dD2Nr< zV~_*=$ALz1*F=Oxc}9!lg?#UAQhuC75FfX3WmrO7c(hL(ea~JL7v;avWFbDniasJD zOv>kmi~0D6ndj)lwsUf_b8-%LVsq!=%XyBYBiGS!+L_pM|MmmI_y|Gd_W%6@fdh5$ zm||woCrIKWrHNr;K0_17yb}`>?FGWHC_erQ!ei~@#Zf;G+~Z;RWEvhEogm!A<$A@3 zC(!TCcQ;>s$Fne@(e-i}!#h>%7zY?fo* zPxBQRV)D)qUxAP>-7exYnprvE2Dz53rf2Z(b$o*{ig9AipXcQ4ywK5k_FA)A44LrG fbyf*>@EK>;0yfLTVvIJx0fzDM_VYUD5t{l>Hu5pc literal 0 HcmV?d00001 diff --git a/windows/security/threat-protection/microsoft-defender-application-guard/md-app-guard-browser-extension.md b/windows/security/threat-protection/microsoft-defender-application-guard/md-app-guard-browser-extension.md index 1c2700fcec..9ca68f3126 100644 --- a/windows/security/threat-protection/microsoft-defender-application-guard/md-app-guard-browser-extension.md +++ b/windows/security/threat-protection/microsoft-defender-application-guard/md-app-guard-browser-extension.md @@ -20,14 +20,14 @@ ms.custom: asr - Windows 10 -Microsoft Defender Application Guard Extension is a web browser extension that protects your device from advanced attacks, by redirecting untrusted websites to an isolated version of the [Microsoft Edge](https://www.microsoft.com/en-us/edge) browser. If an untrusted website turns out to be malicious, it remains within Application Guard's secure container, keeping your device protected. +Microsoft Defender Application Guard Extension is a web browser extension that protects your device from advanced attacks, by redirecting untrusted websites to an isolated version of the [Microsoft Edge](https://www.microsoft.com/edge) browser. If an untrusted website turns out to be malicious, it remains within Application Guard's secure container, keeping your device protected. ## Prerequisites Application Guard (the feature, not the browser extension) must be installed and enabled — either locally, in Standalone mode, or as part of an enterprise environment, in Enterprise-managed mode. Application Guard itself has its own set of [requirements](reqs-md-app-guard.md). > [!TIP] -> Application Guard offers [native support](https://docs.microsoft.com/deployedge/microsoft-edge-security-windows-defender-application-guard) to Microsoft Edge, so the extension and companion app are not necessary for users running that browser. +> Application Guard offers [native support](https://docs.microsoft.com/deployedge/microsoft-edge-security-windows-defender-application-guard) to Microsoft Edge and Internet Explorer, so the extension and companion app are not necessary for users running those browsers. The Microsoft Defender Application Guard Extension works with the following editions of Windows 10, version 1803 or later: @@ -56,12 +56,12 @@ Error message | Cause | Actions -|-|- Application Guard undetermined state | The extension was unable to communicate with the companion app during the last information request. | • Install the [companion app](https://www.microsoft.com/p/windows-defender-application-guard-companion/9n8gnlc8z9c8?activetab=pivot:overviewtab) and reboot
• If the companion app is already installed, reboot and see if that resolves the error
• If you still see the error after rebooting, uninstall and re-install the companion app
• Check for updates in both the Microsoft store and the respective web store for the affected browser (Chrome or Firefox) ExceptionThrown | An unexpected exception was thrown. | • File a bug
• Retry the operation -Failed to determine if Application Guard is enabled | The extension was able to communicate with the companion app, but the information request failed in the app. | • Restart the browser
• Check for updates in both the Microsoft store and the respective web store for the affected browser (Chrome or Firefox) +Failed to determine if Application Guard is enabled | The extension was able to communicate with the companion app, but the information request failed in the app. | • Restart the browser
• Check for updates in both the Microsoft store and the respective web store for the affected browser (Chrome or Firefox) Launch in WDAG failed with a companion communication error | The extension couldn't talk to the companion app, but was able to at the beginning of the session. This can be caused by the companion app being uninstalled while Chrome was running. | • Make sure the companion app is installed
• If the companion app is installed, reboot and see if that resolves the error
• If you still see the error after rebooting, uninstall and re-install the companion app
• Check for updates in both the Microsoft store and the respective web store for the affected browser (Chrome or Firefox) -Main page navigation caught an unexpected error | An unexpected exception was thrown during the main page navigation. | • File a bug
• Retry the operation +Main page navigation caught an unexpected error | An unexpected exception was thrown during the main page navigation. | • File a bug
• Retry the operation Process trust response failed with a companion communication error | The extension couldn't talk to the companion app, but was able to at the beginning of the session. This can be caused by the companion app being uninstalled while Chrome was running.| • Make sure the companion app is installed.
• If the companion app is installed, reboot and see if that resolves the error
• If you still see the error after rebooting, uninstall and re-install the companion app
• Check for updates in both the Microsoft store and the respective web store for the affected browser (Chrome or Firefox) Protocol out of sync | The extension and native app cannot communicate with each other. This is likely caused by one being updated without supporting the protocol of the other. | Check for updates in both the Microsoft store and the respective web store for the affected browser (Chrome or Firefox) -Security patch level does not match | Microsoft determined that there was a security issue with either the extension or the companion app, and has issued a mandatory update. | Check for updates in both the Microsoft store and the respective web store for the affected browser (Chrome or Firefox) +Security patch level does not match | Microsoft determined that there was a security issue with either the extension or the companion app, and has issued a mandatory update. | Check for updates in both the Microsoft store and the respective web store for the affected browser (Chrome or Firefox) Unexpected response while processing trusted state | The extension was able to communicate with the companion app, but the API failed and a failure response code was sent back to the extension. | • File a bug
• Check if Edge is working
• Retry the operation ## Related articles diff --git a/windows/security/threat-protection/microsoft-defender-application-guard/test-scenarios-md-app-guard.md b/windows/security/threat-protection/microsoft-defender-application-guard/test-scenarios-md-app-guard.md index e2a6d3e0ec..9e5e334ce1 100644 --- a/windows/security/threat-protection/microsoft-defender-application-guard/test-scenarios-md-app-guard.md +++ b/windows/security/threat-protection/microsoft-defender-application-guard/test-scenarios-md-app-guard.md @@ -15,36 +15,34 @@ ms.custom: asr # Application Guard testing scenarios +**Applies to:** -**Applies to:** - [Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP)](https://go.microsoft.com/fwlink/p/?linkid=2069559) - We've come up with a list of scenarios that you can use to test hardware-based isolation in your organization. - ## Application Guard in standalone mode You can see how an employee would use standalone mode with Application Guard. ### To test Application Guard in Standalone mode -1. [Install Application Guard](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-application-guard/install-md-app-guard). +1. [Install Application Guard](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-application-guard/install-md-app-guard). 2. Restart the device, start Microsoft Edge, and then click **New Application Guard window** from the menu. ![New Application Guard window setting option](images/appguard-new-window.png) - + 3. Wait for Application Guard to set up the isolated environment. >[!NOTE] - >Starting Application Guard too quickly after restarting the device might cause it to take a bit longer to load. However, subsequent starts should occur without any perceivable delays. - + >Starting Application Guard too quickly after restarting the device might cause it to take a bit longer to load. However, subsequent starts should occur without any perceivable delays. + 4. Go to an untrusted, but safe URL (for this example, we used msn.com) and view the new Microsoft Edge window, making sure you see the Application Guard visual cues. ![Untrusted website running in Application Guard](images/appguard-visual-cues.png) -## Application Guard in Enterprise-managed mode +## Application Guard in Enterprise-managed mode How to install, set up, turn on, and configure Application Guard for Enterprise-managed mode. @@ -59,7 +57,7 @@ Before you can use Application Guard in enterprise mode, you must install Window 3. Set up the Network Isolation settings in Group Policy: a. Click on the **Windows** icon, type _Group Policy_, and then click **Edit Group Policy**. - + b. Go to the **Administrative Templates\Network\Network Isolation\Enterprise resource domains hosted in the cloud** setting. c. For the purposes of this scenario, type _.microsoft.com_ into the **Enterprise cloud resources** box. @@ -81,14 +79,14 @@ Before you can use Application Guard in enterprise mode, you must install Window >[!NOTE] >Enabling this setting verifies that all the necessary settings are properly configured on your employee devices, including the network isolation settings set earlier in this scenario. -6. Start Microsoft Edge and type www.microsoft.com. - +6. Start Microsoft Edge and type *www.microsoft.com*. + After you submit the URL, Application Guard determines the URL is trusted because it uses the domain you've marked as trusted and shows the site directly on the host PC instead of in Application Guard. ![Trusted website running on Microsoft Edge](images/appguard-turned-on-with-trusted-site.png) 7. In the same Microsoft Edge browser, type any URL that isn't part of your trusted or neutral site lists. - + After you submit the URL, Application Guard determines the URL is untrusted and redirects the request to the hardware-isolated environment. ![Untrusted website running in Application Guard](images/appguard-visual-cues.png) @@ -108,6 +106,7 @@ Application Guard provides the following default behavior for your employees: You have the option to change each of these settings to work with your enterprise from within Group Policy. **Applies to:** + - Windows 10 Enterprise edition, version 1709 or higher - Windows 10 Professional edition, version 1803 @@ -116,24 +115,24 @@ You have the option to change each of these settings to work with your enterpris 1. Go to the **Computer Configuration\Administrative Templates\Windows Components\Microsoft Defender Application Guard\Configure Microsoft Defender Application Guard clipboard settings**. 2. Click **Enabled** and click **OK**. - + ![Group Policy editor clipboard options](images/appguard-gp-clipboard.png) 3. Choose how the clipboard works: - + - Copy and paste from the isolated session to the host PC - + - Copy and paste from the host PC to the isolated session - + - Copy and paste both directions 4. Choose what can be copied: - - - **1.** Only text can be copied between the host PC and the isolated container. - - **2.** Only images can be copied between the host PC and the isolated container. + - Only text can be copied between the host PC and the isolated container. - - **3.** Both text and images can be copied between the host PC and the isolated container. + - Only images can be copied between the host PC and the isolated container. + + - Both text and images can be copied between the host PC and the isolated container. 5. Click **OK**. @@ -156,21 +155,26 @@ You have the option to change each of these settings to work with your enterpris 2. Click **Enabled** and click **OK**. ![Group Policy editor Data Persistence options](images/appguard-gp-persistence.png) - + 3. Open Microsoft Edge and browse to an untrusted, but safe URL. - The website opens in the isolated session. + The website opens in the isolated session. 4. Add the site to your **Favorites** list and then close the isolated session. -5. Log out and back on to your device, opening Microsoft Edge in Application Guard again. +5. Log out and back on to your device, opening Microsoft Edge in Application Guard again. The previously added site should still appear in your **Favorites** list. - >[!NOTE] - >If you don't allow or turn off data persistence, restarting a device or logging in and out of the isolated container triggers a recycle event that discards all generated data, including session cookies, Favorites, and so on, removing the data from Application Guard. If you turn on data persistence, all employee-generated artifacts are preserved across container recycle events. However, these artifacts only exist in the isolated container and aren't shared with the host PC. This data persists after restarts and even through build-to-build upgrades of Windows 10.

If you turn on data persistence, but later decide to stop supporting it for your employees, you can use our Windows-provided utility to reset the container and to discard any personal data.

**To reset the container, follow these steps:**
1. Open a command-line program and navigate to Windows/System32.
2. Type `wdagtool.exe cleanup`. The container environment is reset, retaining only the employee-generated data.
3. Type `wdagtool.exe cleanup RESET_PERSISTENCE_LAYER`. The container environment is reset, including discarding all employee-generated data. - + > [!NOTE] + > If you don't allow or turn off data persistence, restarting a device or logging in and out of the isolated container triggers a recycle event that discards all generated data, including session cookies, Favorites, and so on, removing the data from Application Guard. If you turn on data persistence, all employee-generated artifacts are preserved across container recycle events. However, these artifacts only exist in the isolated container and aren't shared with the host PC. This data persists after restarts and even through build-to-build upgrades of Windows 10. + > + > If you turn on data persistence, but later decide to stop supporting it for your employees, you can use our Windows-provided utility to reset the container and to discard any personal data. + > + > **To reset the container, follow these steps:**
1. Open a command-line program and navigate to Windows/System32.
2. Type `wdagtool.exe cleanup`. The container environment is reset, retaining only the employee-generated data.
3. Type `wdagtool.exe cleanup RESET_PERSISTENCE_LAYER`. The container environment is reset, including discarding all employee-generated data. + **Applies to:** + - Windows 10 Enterprise edition, version 1803 - Windows 10 Professional edition, version 1803 @@ -181,10 +185,10 @@ You have the option to change each of these settings to work with your enterpris 2. Click **Enabled** and click **OK**. ![Group Policy editor Download options](images/appguard-gp-download.png) - + 3. Log out and back on to your device, opening Microsoft Edge in Application Guard again. -4. Download a file from Microsoft Defender Application Guard. +4. Download a file from Microsoft Defender Application Guard. 5. Check to see the file has been downloaded into This PC > Downloads > Untrusted files. @@ -195,12 +199,13 @@ You have the option to change each of these settings to work with your enterpris 2. Click **Enabled** and click **OK**. ![Group Policy editor hardware acceleration options](images/appguard-gp-vgpu.png) - -3. Once you have enabled this feature, open Microsoft Edge and browse to an untrusted, but safe URL with video, 3D, or other graphics-intensive content. The website opens in an isolated session. -4. Assess the visual experience and battery performance. +3. Once you have enabled this feature, open Microsoft Edge and browse to an untrusted, but safe URL with video, 3D, or other graphics-intensive content. The website opens in an isolated session. + +4. Assess the visual experience and battery performance. **Applies to:** + - Windows 10 Enterprise edition, version 1809 - Windows 10 Professional edition, version 1809 @@ -211,10 +216,10 @@ You have the option to change each of these settings to work with your enterpris 2. Click **Enabled**, set **Options** to 2, and click **OK**. ![Group Policy editor Download options](images/appguard-gp-allow-users-to-trust-files-that-open-in-appguard.png) - + 3. Log out and back on to your device, opening Microsoft Edge in Application Guard again. -4. Open a file in Edge, such an Office 365 file. +4. Open a file in Edge, such an Office 365 file. 5. Check to see that an antivirus scan completed before the file was opened. @@ -225,10 +230,10 @@ You have the option to change each of these settings to work with your enterpris 2. Click **Enabled** and click **OK**. ![Group Policy editor Download options](images/appguard-gp-allow-camera-and-mic.png) - + 3. Log out and back on to your device, opening Microsoft Edge in Application Guard again. -4. Open an application with video or audio capability in Edge. +4. Open an application with video or audio capability in Edge. 5. Check that the camera and microphone work as expected. @@ -239,6 +244,19 @@ You have the option to change each of these settings to work with your enterpris 2. Click **Enabled**, copy the thumbprint of each certificate to share, separated by a comma, and click **OK**. ![Group Policy editor Download options](images/appguard-gp-allow-root-certificates.png) - + 3. Log out and back on to your device, opening Microsoft Edge in Application Guard again. +## Application Guard Extension for Chrome and Firefox + +The [Application Guard Extension](md-app-guard-browser-extension.md) available for Chrome and Firefox allows Application Guard to protect users even when they are running a web browser other than Microsoft Edge or Internet Explorer. + +Once a user has the extension and its companion app installed on their enterprise device, you can run through the following scenarios. + +1. Open either Firefox or Chrome — whichever browser you have the extension installed on. +1. Navigate to an enterprise website, i.e. an internal website maintained by your organization. You might see this evaluation page for an instant before the site is fully loaded. + ![The evaluation text displayed while the page is being loaded](images/app-guard-chrome-extension-evaluation-page.png) +1. Navigate to a non-enterprise, external website site, such as [www.bing.com](https://www.bing.com). The site should be redirected to Microsoft Defender Application Guard Edge. + ![A non-enterprise website being redirected to an Application Guard container](images/app-guard-chrome-extension-launchIng-edge.png) +1. Open a new Application Guard window, by select the Microsoft Defender Application Guard icon, then **New Application Guard Window** + ![The "New Application Guard Window" option is highlighted in red]() From aae111448d042779b94e7d1fdaf4de3ac69a67e5 Mon Sep 17 00:00:00 2001 From: Marty Hernandez Avedon Date: Mon, 15 Jun 2020 14:31:49 -0400 Subject: [PATCH 04/75] links and language updated --- .../md-app-guard-browser-extension.md | 49 ++++++++----------- .../test-scenarios-md-app-guard.md | 6 +-- 2 files changed, 24 insertions(+), 31 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-application-guard/md-app-guard-browser-extension.md b/windows/security/threat-protection/microsoft-defender-application-guard/md-app-guard-browser-extension.md index 9ca68f3126..02aea574e1 100644 --- a/windows/security/threat-protection/microsoft-defender-application-guard/md-app-guard-browser-extension.md +++ b/windows/security/threat-protection/microsoft-defender-application-guard/md-app-guard-browser-extension.md @@ -1,6 +1,6 @@ --- title: Microsoft Defender Application Guard Extension -description: Learn about the Microsoft Defender Application Guard browser extension for Chrome, and how you can manage it for yourself and your users. +description: Learn about the Microsoft Defender Application Guard browser extension , which extends Application Guard's protection to third-party web browsers. ms.prod: w10 ms.mktglfcycl: manage ms.sitesec: library @@ -20,33 +20,26 @@ ms.custom: asr - Windows 10 -Microsoft Defender Application Guard Extension is a web browser extension that protects your device from advanced attacks, by redirecting untrusted websites to an isolated version of the [Microsoft Edge](https://www.microsoft.com/edge) browser. If an untrusted website turns out to be malicious, it remains within Application Guard's secure container, keeping your device protected. +Microsoft Defender Application Guard Extension is a web browser add-on available for [Chrome](https://chrome.google.com/webstore/detail/application-guard-extensi/mfjnknhkkiafjajicegabkbimfhplplj/) and [Firefox](https://addons.mozilla.org/en-US/firefox/addon/application-guard-extension/). + +[Microsoft Defender Application Guard](md-app-guard-overview.md) provides Hyper-V isolation on Windows 10, to protect users from potentially harmful content on the web. The extension helps Application Guard protect users running other web browsers. + +> [!TIP] +> Application Guard, by default, offers [native support](https://docs.microsoft.com/deployedge/microsoft-edge-security-windows-defender-application-guard) to both Microsoft Edge and Internet Explorer. These browsers do not need the extension described here for Application Guard to protect them. + +Microsoft Defender Application Guard Extension defends devices in your organization from advanced attacks, by redirecting untrusted websites to an isolated version of [Microsoft Edge](https://www.microsoft.com/edge). If an untrusted website turns out to be malicious, it remains within Application Guard's secure container, keeping the device protected. ## Prerequisites -Application Guard (the feature, not the browser extension) must be installed and enabled — either locally, in Standalone mode, or as part of an enterprise environment, in Enterprise-managed mode. Application Guard itself has its own set of [requirements](reqs-md-app-guard.md). - -> [!TIP] -> Application Guard offers [native support](https://docs.microsoft.com/deployedge/microsoft-edge-security-windows-defender-application-guard) to Microsoft Edge and Internet Explorer, so the extension and companion app are not necessary for users running those browsers. - -The Microsoft Defender Application Guard Extension works with the following editions of Windows 10, version 1803 or later: +Microsoft Defender Application Guard Extension works with the following editions of Windows 10, version 1803 or later: - Windows 10 Professional - Windows 10 Enterprise - Windows 10 Education -The Microsoft Defender Application Guard Extension is available for [Chrome](https://chrome.google.com/webstore/detail/application-guard-extensi/mfjnknhkkiafjajicegabkbimfhplplj/) and [Firefox](https://addons.mozilla.org/en-US/firefox/addon/application-guard-extension/). It can be deployed across the enterprise by an administrator, or downloaded and installed manually by a user on their own device. +Application Guard itself must be installed and enabled. It has its own set of [requirements](reqs-md-app-guard.md). -The extension also requires that the [Application Guard companion app](https://www.microsoft.com/p/windows-defender-application-guard-companion/9n8gnlc8z9c8?activetab=pivot:overviewtab) be installed locally. The app enables Application Guard to work with web browsers other than Microsoft Edge. - -## Known issues - -Issue | Mitigation | Notes --|-|- -Extensions cannot automatically turn on for private browsing or "Incognito" mode | Disable Incognito via policy, by setting **IncognitoModeAvailablity** to **1** | Chrome and Firefox extensions are turned off by default when running those browsers in Incognito mode. -Extensions can be turned off | Use ExtensionSettings policy by setting **Installation_mode** to **force_installed**. | -Chrome does not offer url to extensions on cold start | Don’t let users disable background process via policy, by setting **backgroundModeEnabled** to **1**. | The cold start issue is caused by a user abruptly exiting Chrome, via the tray icon or task manager, then re-starting the browser. -If the user's network roams or the network isolation policy changes, an untrusted page may load | N/A | Although Application Guard will attempt to redirect the untrusted page and invalidate the cache, under certain circumstances, this issue leaves browsers open to drive-by attacks. +The extension also requires the [Application Guard companion app](https://www.microsoft.com/p/windows-defender-application-guard-companion/9n8gnlc8z9c8?activetab=pivot:overviewtab). This companion app enables Application Guard to work with web browsers other than Microsoft Edge or Internet Explorer. ## Troubleshooting guide @@ -54,15 +47,15 @@ If the user's network roams or the network isolation policy changes, an untruste Error message | Cause | Actions -|-|- -Application Guard undetermined state | The extension was unable to communicate with the companion app during the last information request. | • Install the [companion app](https://www.microsoft.com/p/windows-defender-application-guard-companion/9n8gnlc8z9c8?activetab=pivot:overviewtab) and reboot
• If the companion app is already installed, reboot and see if that resolves the error
• If you still see the error after rebooting, uninstall and re-install the companion app
• Check for updates in both the Microsoft store and the respective web store for the affected browser (Chrome or Firefox) -ExceptionThrown | An unexpected exception was thrown. | • File a bug
• Retry the operation -Failed to determine if Application Guard is enabled | The extension was able to communicate with the companion app, but the information request failed in the app. | • Restart the browser
• Check for updates in both the Microsoft store and the respective web store for the affected browser (Chrome or Firefox) -Launch in WDAG failed with a companion communication error | The extension couldn't talk to the companion app, but was able to at the beginning of the session. This can be caused by the companion app being uninstalled while Chrome was running. | • Make sure the companion app is installed
• If the companion app is installed, reboot and see if that resolves the error
• If you still see the error after rebooting, uninstall and re-install the companion app
• Check for updates in both the Microsoft store and the respective web store for the affected browser (Chrome or Firefox) -Main page navigation caught an unexpected error | An unexpected exception was thrown during the main page navigation. | • File a bug
• Retry the operation -Process trust response failed with a companion communication error | The extension couldn't talk to the companion app, but was able to at the beginning of the session. This can be caused by the companion app being uninstalled while Chrome was running.| • Make sure the companion app is installed.
• If the companion app is installed, reboot and see if that resolves the error
• If you still see the error after rebooting, uninstall and re-install the companion app
• Check for updates in both the Microsoft store and the respective web store for the affected browser (Chrome or Firefox) -Protocol out of sync | The extension and native app cannot communicate with each other. This is likely caused by one being updated without supporting the protocol of the other. | Check for updates in both the Microsoft store and the respective web store for the affected browser (Chrome or Firefox) -Security patch level does not match | Microsoft determined that there was a security issue with either the extension or the companion app, and has issued a mandatory update. | Check for updates in both the Microsoft store and the respective web store for the affected browser (Chrome or Firefox) -Unexpected response while processing trusted state | The extension was able to communicate with the companion app, but the API failed and a failure response code was sent back to the extension. | • File a bug
• Check if Edge is working
• Retry the operation +Application Guard undetermined state | The extension was unable to communicate with the companion app during the last information request. | • Install the [companion app](https://www.microsoft.com/p/windows-defender-application-guard-companion/9n8gnlc8z9c8?activetab=pivot:overviewtab) and reboot
• If the companion app is already installed, reboot and see if that resolves the error
• If you still see the error after rebooting, uninstall and re-install the companion app
• Check for updates in both the Microsoft store and the respective web store for the affected browser +ExceptionThrown | An unexpected exception was thrown. | • [File a bug](feedback-hub:?contextid=713)
• Retry the operation +Failed to determine if Application Guard is enabled | The extension was able to communicate with the companion app, but the information request failed in the app. | • Restart the browser
• Check for updates in both the Microsoft store and the respective web store for the affected browser +Launch in WDAG failed with a companion communication error | The extension couldn't talk to the companion app, but was able to at the beginning of the session. This can be caused by the companion app being uninstalled while Chrome was running. | • Make sure the companion app is installed
• If the companion app is installed, reboot and see if that resolves the error
• If you still see the error after rebooting, uninstall and re-install the companion app
• Check for updates in both the Microsoft store and the respective web store for the affected browser +Main page navigation caught an unexpected error | An unexpected exception was thrown during the main page navigation. | • [File a bug](feedback-hub:?contextid=713)
• Retry the operation +Process trust response failed with a companion communication error | The extension couldn't talk to the companion app, but was able to at the beginning of the session. This can be caused by the companion app being uninstalled while Chrome was running.| • Make sure the companion app is installed.
• If the companion app is installed, reboot and see if that resolves the error
• If you still see the error after rebooting, uninstall and re-install the companion app
• Check for updates in both the Microsoft store and the respective web store for the affected browser +Protocol out of sync | The extension and native app cannot communicate with each other. This is likely caused by one being updated without supporting the protocol of the other. | Check for updates in both the Microsoft store and the respective web store for the affected browser +Security patch level does not match | Microsoft determined that there was a security issue with either the extension or the companion app, and has issued a mandatory update. | Check for updates in both the Microsoft store and the respective web store for the affected browser +Unexpected response while processing trusted state | The extension was able to communicate with the companion app, but the API failed and a failure response code was sent back to the extension. | • [File a bug](feedback-hub:?contextid=713)
• Check if Edge is working
• Retry the operation ## Related articles diff --git a/windows/security/threat-protection/microsoft-defender-application-guard/test-scenarios-md-app-guard.md b/windows/security/threat-protection/microsoft-defender-application-guard/test-scenarios-md-app-guard.md index 9e5e334ce1..7a3ff735c4 100644 --- a/windows/security/threat-protection/microsoft-defender-application-guard/test-scenarios-md-app-guard.md +++ b/windows/security/threat-protection/microsoft-defender-application-guard/test-scenarios-md-app-guard.md @@ -247,7 +247,7 @@ You have the option to change each of these settings to work with your enterpris 3. Log out and back on to your device, opening Microsoft Edge in Application Guard again. -## Application Guard Extension for Chrome and Firefox +## Application Guard Extension for third-party web browsers The [Application Guard Extension](md-app-guard-browser-extension.md) available for Chrome and Firefox allows Application Guard to protect users even when they are running a web browser other than Microsoft Edge or Internet Explorer. @@ -255,8 +255,8 @@ Once a user has the extension and its companion app installed on their enterpris 1. Open either Firefox or Chrome — whichever browser you have the extension installed on. 1. Navigate to an enterprise website, i.e. an internal website maintained by your organization. You might see this evaluation page for an instant before the site is fully loaded. - ![The evaluation text displayed while the page is being loaded](images/app-guard-chrome-extension-evaluation-page.png) + ![The evaluation page displayed while the page is being loaded, explaining that the user must wait](images/app-guard-chrome-extension-evaluation-page.png) 1. Navigate to a non-enterprise, external website site, such as [www.bing.com](https://www.bing.com). The site should be redirected to Microsoft Defender Application Guard Edge. - ![A non-enterprise website being redirected to an Application Guard container](images/app-guard-chrome-extension-launchIng-edge.png) + ![A non-enterprise website being redirected to an Application Guard container -- the text displayed explains that the page is being opened in Application Guard for Microsoft Edge](images/app-guard-chrome-extension-launchIng-edge.png) 1. Open a new Application Guard window, by select the Microsoft Defender Application Guard icon, then **New Application Guard Window** ![The "New Application Guard Window" option is highlighted in red]() From 47d1523a8cc5e2309ccd4dfcbc82d6d57b470412 Mon Sep 17 00:00:00 2001 From: Marty Hernandez Avedon Date: Wed, 17 Jun 2020 17:41:40 -0400 Subject: [PATCH 05/75] corrected link --- .../md-app-guard-browser-extension.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-application-guard/md-app-guard-browser-extension.md b/windows/security/threat-protection/microsoft-defender-application-guard/md-app-guard-browser-extension.md index 02aea574e1..ef05ddfc1c 100644 --- a/windows/security/threat-protection/microsoft-defender-application-guard/md-app-guard-browser-extension.md +++ b/windows/security/threat-protection/microsoft-defender-application-guard/md-app-guard-browser-extension.md @@ -48,14 +48,14 @@ The extension also requires the [Application Guard companion app](https://www.mi Error message | Cause | Actions -|-|- Application Guard undetermined state | The extension was unable to communicate with the companion app during the last information request. | • Install the [companion app](https://www.microsoft.com/p/windows-defender-application-guard-companion/9n8gnlc8z9c8?activetab=pivot:overviewtab) and reboot
• If the companion app is already installed, reboot and see if that resolves the error
• If you still see the error after rebooting, uninstall and re-install the companion app
• Check for updates in both the Microsoft store and the respective web store for the affected browser -ExceptionThrown | An unexpected exception was thrown. | • [File a bug](feedback-hub:?contextid=713)
• Retry the operation +ExceptionThrown | An unexpected exception was thrown. | • [File a bug](aka.ms\wdag-fb)
• Retry the operation Failed to determine if Application Guard is enabled | The extension was able to communicate with the companion app, but the information request failed in the app. | • Restart the browser
• Check for updates in both the Microsoft store and the respective web store for the affected browser Launch in WDAG failed with a companion communication error | The extension couldn't talk to the companion app, but was able to at the beginning of the session. This can be caused by the companion app being uninstalled while Chrome was running. | • Make sure the companion app is installed
• If the companion app is installed, reboot and see if that resolves the error
• If you still see the error after rebooting, uninstall and re-install the companion app
• Check for updates in both the Microsoft store and the respective web store for the affected browser -Main page navigation caught an unexpected error | An unexpected exception was thrown during the main page navigation. | • [File a bug](feedback-hub:?contextid=713)
• Retry the operation +Main page navigation caught an unexpected error | An unexpected exception was thrown during the main page navigation. | • [File a bug](aka.ms\wdag-fb)
• Retry the operation Process trust response failed with a companion communication error | The extension couldn't talk to the companion app, but was able to at the beginning of the session. This can be caused by the companion app being uninstalled while Chrome was running.| • Make sure the companion app is installed.
• If the companion app is installed, reboot and see if that resolves the error
• If you still see the error after rebooting, uninstall and re-install the companion app
• Check for updates in both the Microsoft store and the respective web store for the affected browser Protocol out of sync | The extension and native app cannot communicate with each other. This is likely caused by one being updated without supporting the protocol of the other. | Check for updates in both the Microsoft store and the respective web store for the affected browser Security patch level does not match | Microsoft determined that there was a security issue with either the extension or the companion app, and has issued a mandatory update. | Check for updates in both the Microsoft store and the respective web store for the affected browser -Unexpected response while processing trusted state | The extension was able to communicate with the companion app, but the API failed and a failure response code was sent back to the extension. | • [File a bug](feedback-hub:?contextid=713)
• Check if Edge is working
• Retry the operation +Unexpected response while processing trusted state | The extension was able to communicate with the companion app, but the API failed and a failure response code was sent back to the extension. | • [File a bug](aka.ms\wdag-fb)
• Check if Edge is working
• Retry the operation ## Related articles From d68fc600314f98422e3fc450c9d39f318d9fa295 Mon Sep 17 00:00:00 2001 From: Marty Hernandez Avedon Date: Wed, 17 Jun 2020 18:08:39 -0400 Subject: [PATCH 06/75] updated badly formatted link --- .../md-app-guard-browser-extension.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-application-guard/md-app-guard-browser-extension.md b/windows/security/threat-protection/microsoft-defender-application-guard/md-app-guard-browser-extension.md index ef05ddfc1c..1dc2fde6ae 100644 --- a/windows/security/threat-protection/microsoft-defender-application-guard/md-app-guard-browser-extension.md +++ b/windows/security/threat-protection/microsoft-defender-application-guard/md-app-guard-browser-extension.md @@ -48,14 +48,14 @@ The extension also requires the [Application Guard companion app](https://www.mi Error message | Cause | Actions -|-|- Application Guard undetermined state | The extension was unable to communicate with the companion app during the last information request. | • Install the [companion app](https://www.microsoft.com/p/windows-defender-application-guard-companion/9n8gnlc8z9c8?activetab=pivot:overviewtab) and reboot
• If the companion app is already installed, reboot and see if that resolves the error
• If you still see the error after rebooting, uninstall and re-install the companion app
• Check for updates in both the Microsoft store and the respective web store for the affected browser -ExceptionThrown | An unexpected exception was thrown. | • [File a bug](aka.ms\wdag-fb)
• Retry the operation +ExceptionThrown | An unexpected exception was thrown. | • [File a bug](https://aka.ms/wdag-fb)
• Retry the operation Failed to determine if Application Guard is enabled | The extension was able to communicate with the companion app, but the information request failed in the app. | • Restart the browser
• Check for updates in both the Microsoft store and the respective web store for the affected browser Launch in WDAG failed with a companion communication error | The extension couldn't talk to the companion app, but was able to at the beginning of the session. This can be caused by the companion app being uninstalled while Chrome was running. | • Make sure the companion app is installed
• If the companion app is installed, reboot and see if that resolves the error
• If you still see the error after rebooting, uninstall and re-install the companion app
• Check for updates in both the Microsoft store and the respective web store for the affected browser -Main page navigation caught an unexpected error | An unexpected exception was thrown during the main page navigation. | • [File a bug](aka.ms\wdag-fb)
• Retry the operation +Main page navigation caught an unexpected error | An unexpected exception was thrown during the main page navigation. | • [File a bug](https://aka.ms/wdag-fb)
• Retry the operation Process trust response failed with a companion communication error | The extension couldn't talk to the companion app, but was able to at the beginning of the session. This can be caused by the companion app being uninstalled while Chrome was running.| • Make sure the companion app is installed.
• If the companion app is installed, reboot and see if that resolves the error
• If you still see the error after rebooting, uninstall and re-install the companion app
• Check for updates in both the Microsoft store and the respective web store for the affected browser Protocol out of sync | The extension and native app cannot communicate with each other. This is likely caused by one being updated without supporting the protocol of the other. | Check for updates in both the Microsoft store and the respective web store for the affected browser Security patch level does not match | Microsoft determined that there was a security issue with either the extension or the companion app, and has issued a mandatory update. | Check for updates in both the Microsoft store and the respective web store for the affected browser -Unexpected response while processing trusted state | The extension was able to communicate with the companion app, but the API failed and a failure response code was sent back to the extension. | • [File a bug](aka.ms\wdag-fb)
• Check if Edge is working
• Retry the operation +Unexpected response while processing trusted state | The extension was able to communicate with the companion app, but the API failed and a failure response code was sent back to the extension. | • [File a bug](https://aka.ms/wdag-fb)
• Check if Edge is working
• Retry the operation ## Related articles From 50fb52a0da960bbf36b64cb524cb3092bd7aabfa Mon Sep 17 00:00:00 2001 From: Marty Hernandez Avedon Date: Thu, 18 Jun 2020 11:10:31 -0400 Subject: [PATCH 07/75] addressing build warnings --- .../md-app-guard-overview.md | 2 +- .../test-scenarios-md-app-guard.md | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-application-guard/md-app-guard-overview.md b/windows/security/threat-protection/microsoft-defender-application-guard/md-app-guard-overview.md index a3ad365834..67723aa1a3 100644 --- a/windows/security/threat-protection/microsoft-defender-application-guard/md-app-guard-overview.md +++ b/windows/security/threat-protection/microsoft-defender-application-guard/md-app-guard-overview.md @@ -48,5 +48,5 @@ Application Guard has been created to target several types of systems: |[Prepare and install Microsoft Defender Application Guard](install-md-app-guard.md) |Provides instructions about determining which mode to use, either Standalone or Enterprise-managed, and how to install Application Guard in your organization.| |[Configure the Group Policy settings for Microsoft Defender Application Guard](configure-md-app-guard.md) |Provides info about the available Group Policy and MDM settings.| |[Testing scenarios using Microsoft Defender Application Guard in your business or organization](test-scenarios-md-app-guard.md)|Provides a list of suggested testing scenarios that you can use to test Application Guard in your organization.| -| [Microsoft Defender Application Guard Extension for web browsers](md-app-guard-browser-extension) | Describes the Application Guard extension for Chrome and Firefox, including known issues, and a trouble-shooting guide | +| [Microsoft Defender Application Guard Extension for web browsers](md-app-guard-browser-extension.md) | Describes the Application Guard extension for Chrome and Firefox, including known issues, and a trouble-shooting guide | |[Frequently asked questions - Microsoft Defender Application Guard](faq-md-app-guard.md)|Provides answers to frequently asked questions about Application Guard features, integration with the Windows operating system, and general configuration.| diff --git a/windows/security/threat-protection/microsoft-defender-application-guard/test-scenarios-md-app-guard.md b/windows/security/threat-protection/microsoft-defender-application-guard/test-scenarios-md-app-guard.md index 7a3ff735c4..4aba70860a 100644 --- a/windows/security/threat-protection/microsoft-defender-application-guard/test-scenarios-md-app-guard.md +++ b/windows/security/threat-protection/microsoft-defender-application-guard/test-scenarios-md-app-guard.md @@ -79,7 +79,7 @@ Before you can use Application Guard in enterprise mode, you must install Window >[!NOTE] >Enabling this setting verifies that all the necessary settings are properly configured on your employee devices, including the network isolation settings set earlier in this scenario. -6. Start Microsoft Edge and type *www.microsoft.com*. +6. Start Microsoft Edge and type *www.microsoft.com*. After you submit the URL, Application Guard determines the URL is trusted because it uses the domain you've marked as trusted and shows the site directly on the host PC instead of in Application Guard. From ae44655d7725626155eba52a544c2da2bc4a9286 Mon Sep 17 00:00:00 2001 From: Marty Hernandez Avedon Date: Tue, 30 Jun 2020 10:15:59 -0400 Subject: [PATCH 08/75] installing steps --- .../md-app-guard-browser-extension.md | 15 +++++++++++---- 1 file changed, 11 insertions(+), 4 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-application-guard/md-app-guard-browser-extension.md b/windows/security/threat-protection/microsoft-defender-application-guard/md-app-guard-browser-extension.md index 1dc2fde6ae..3abbd67bc3 100644 --- a/windows/security/threat-protection/microsoft-defender-application-guard/md-app-guard-browser-extension.md +++ b/windows/security/threat-protection/microsoft-defender-application-guard/md-app-guard-browser-extension.md @@ -1,6 +1,6 @@ --- title: Microsoft Defender Application Guard Extension -description: Learn about the Microsoft Defender Application Guard browser extension , which extends Application Guard's protection to third-party web browsers. +description: Learn about the Microsoft Defender Application Guard browser extension, which extends Application Guard's protection to more web browsers. ms.prod: w10 ms.mktglfcycl: manage ms.sitesec: library @@ -20,7 +20,7 @@ ms.custom: asr - Windows 10 -Microsoft Defender Application Guard Extension is a web browser add-on available for [Chrome](https://chrome.google.com/webstore/detail/application-guard-extensi/mfjnknhkkiafjajicegabkbimfhplplj/) and [Firefox](https://addons.mozilla.org/en-US/firefox/addon/application-guard-extension/). +[Microsoft Defender Application Guard Extension](https://www.microsoft.com/security/blog/2019/05/23/new-browser-extensions-for-integrating-microsofts-hardware-based-isolation/) is a web browser add-on available for [Chrome](https://chrome.google.com/webstore/detail/application-guard-extensi/mfjnknhkkiafjajicegabkbimfhplplj/) and [Firefox](https://addons.mozilla.org/en-US/firefox/addon/application-guard-extension/). [Microsoft Defender Application Guard](md-app-guard-overview.md) provides Hyper-V isolation on Windows 10, to protect users from potentially harmful content on the web. The extension helps Application Guard protect users running other web browsers. @@ -37,9 +37,16 @@ Microsoft Defender Application Guard Extension works with the following editions - Windows 10 Enterprise - Windows 10 Education -Application Guard itself must be installed and enabled. It has its own set of [requirements](reqs-md-app-guard.md). +Application Guard itself is required for the extension to work. It has its own set of [requirements](reqs-md-app-guard.md). Check the Application Guard [installation guide](install-md-app-guard.md) for further steps, if you don't have it installed already. -The extension also requires the [Application Guard companion app](https://www.microsoft.com/p/windows-defender-application-guard-companion/9n8gnlc8z9c8?activetab=pivot:overviewtab). This companion app enables Application Guard to work with web browsers other than Microsoft Edge or Internet Explorer. +## Installing the extension + +Enterprise administrators running Application Guard under [managed mode](install-md-app-guard#enterprise-managed-mode) can follow these recommended steps: + +1. Define Application Guard's [network isolation settings](configure-md-app-guard#network-isolation-settings.md), so a set of enterprise sites is already in place. +1. On the local device, download and install the Application Guard extension for Google [Chrome](https://chrome.google.com/webstore/detail/application-guard-extensi/mfjnknhkkiafjajicegabkbimfhplplj/) and/or Mozilla [Firefox](https://addons.mozilla.org/en-US/firefox/addon/application-guard-extension/). +1. Install the [Windows Defender Application Guard companion app](https://www.microsoft.com/p/windows-defender-application-guard-companion/9n8gnlc8z9c8#activetab=pivot:overviewtab) from the Microsoft Store. This companion app enables Application Guard to work with web browsers other than Microsoft Edge or Internet Explorer. +1. Restart the device. ## Troubleshooting guide From e861c306f0373c382b0e090c6f833fe628d6e105 Mon Sep 17 00:00:00 2001 From: Marty Hernandez Avedon Date: Tue, 30 Jun 2020 10:47:29 -0400 Subject: [PATCH 09/75] fixed bad links --- .../md-app-guard-browser-extension.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-application-guard/md-app-guard-browser-extension.md b/windows/security/threat-protection/microsoft-defender-application-guard/md-app-guard-browser-extension.md index 3abbd67bc3..8032c33be3 100644 --- a/windows/security/threat-protection/microsoft-defender-application-guard/md-app-guard-browser-extension.md +++ b/windows/security/threat-protection/microsoft-defender-application-guard/md-app-guard-browser-extension.md @@ -41,9 +41,9 @@ Application Guard itself is required for the extension to work. It has its own s ## Installing the extension -Enterprise administrators running Application Guard under [managed mode](install-md-app-guard#enterprise-managed-mode) can follow these recommended steps: +Enterprise administrators running Application Guard under [managed mode](install-md-app-guard.md#enterprise-managed-mode) can follow these recommended steps: -1. Define Application Guard's [network isolation settings](configure-md-app-guard#network-isolation-settings.md), so a set of enterprise sites is already in place. +1. Define Application Guard's [network isolation settings](configure-md-app-guard.md#network-isolation-settings), so a set of enterprise sites is already in place. 1. On the local device, download and install the Application Guard extension for Google [Chrome](https://chrome.google.com/webstore/detail/application-guard-extensi/mfjnknhkkiafjajicegabkbimfhplplj/) and/or Mozilla [Firefox](https://addons.mozilla.org/en-US/firefox/addon/application-guard-extension/). 1. Install the [Windows Defender Application Guard companion app](https://www.microsoft.com/p/windows-defender-application-guard-companion/9n8gnlc8z9c8#activetab=pivot:overviewtab) from the Microsoft Store. This companion app enables Application Guard to work with web browsers other than Microsoft Edge or Internet Explorer. 1. Restart the device. From c6f56e7ed933c737a8ec1098e9908838b9639913 Mon Sep 17 00:00:00 2001 From: VLG17 <41186174+VLG17@users.noreply.github.com> Date: Thu, 2 Jul 2020 14:08:12 +0300 Subject: [PATCH 10/75] add missing URLs Added missing URLs according to https://docs.microsoft.com/en-us/windows/privacy/manage-windows-1809-endpoints#windows-update In my opinion some of them can be excluded (for example *.dl.delivery.mp.microsoft.com is already included in *.delivery.mp.microsoft.com), but i guess someone else should make that call. I have added all of them, just to be sure. https://github.com/MicrosoftDocs/windows-itpro-docs/issues/6904 --- .../deployment/update/windows-update-troubleshooting.md | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/windows/deployment/update/windows-update-troubleshooting.md b/windows/deployment/update/windows-update-troubleshooting.md index 967245b7d0..8ed1fd70ea 100644 --- a/windows/deployment/update/windows-update-troubleshooting.md +++ b/windows/deployment/update/windows-update-troubleshooting.md @@ -110,7 +110,8 @@ If downloads through a proxy server fail with a 0x80d05001 DO_E_HTTP_BLOCKSIZE_M You may choose to apply a rule to permit HTTP RANGE requests for the following URLs: *.download.windowsupdate.com -*.dl.delivery.mp.microsoft.com +*.dl.delivery.mp.microsoft.com +*.delivery.mp.microsoft.com *.emdl.ws.microsoft.com If you cannot permit RANGE requests, keep in mind that this means you are downloading more content than needed in updates (as delta patching will not work). @@ -161,6 +162,10 @@ Check that your device can access these Windows Update endpoints: - `http://*.download.windowsupdate.com` - `http://wustat.windows.com` - `http://ntservicepack.microsoft.com` +- `https://*.prod.do.dsp.mp.microsoft.com` +- `http://*.dl.delivery.mp.microsoft.com` +- `https://*.delivery.mp.microsoft.com` +- `https://tsfe.trafficshaping.dsp.mp.microsoft.com` Allow these endpoints for future use. From 0811cf051be804015fd8e1145f626a9a2c215387 Mon Sep 17 00:00:00 2001 From: Marty Hernandez Avedon Date: Fri, 10 Jul 2020 12:45:10 -0400 Subject: [PATCH 11/75] standalone mode --- .../md-app-guard-browser-extension.md | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-application-guard/md-app-guard-browser-extension.md b/windows/security/threat-protection/microsoft-defender-application-guard/md-app-guard-browser-extension.md index 8032c33be3..bd2a584438 100644 --- a/windows/security/threat-protection/microsoft-defender-application-guard/md-app-guard-browser-extension.md +++ b/windows/security/threat-protection/microsoft-defender-application-guard/md-app-guard-browser-extension.md @@ -41,9 +41,12 @@ Application Guard itself is required for the extension to work. It has its own s ## Installing the extension -Enterprise administrators running Application Guard under [managed mode](install-md-app-guard.md#enterprise-managed-mode) can follow these recommended steps: +Application Guard can be run under [managed mode](install-md-app-guard.md#enterprise-managed-mode) or [standalone mode](install-md-app-guard.md#atandalone-mode). The main difference between the two modes is whether policies have been set to define the organization's boundaries. + +Enterprise administrators running Application Guard under managed mode should first define Application Guard's [network isolation settings](configure-md-app-guard.md#network-isolation-settings), so a set of enterprise sites is already in place. + +From there, the steps for installing the extension are similar whether Application Guard is running in managed or standalone mode. -1. Define Application Guard's [network isolation settings](configure-md-app-guard.md#network-isolation-settings), so a set of enterprise sites is already in place. 1. On the local device, download and install the Application Guard extension for Google [Chrome](https://chrome.google.com/webstore/detail/application-guard-extensi/mfjnknhkkiafjajicegabkbimfhplplj/) and/or Mozilla [Firefox](https://addons.mozilla.org/en-US/firefox/addon/application-guard-extension/). 1. Install the [Windows Defender Application Guard companion app](https://www.microsoft.com/p/windows-defender-application-guard-companion/9n8gnlc8z9c8#activetab=pivot:overviewtab) from the Microsoft Store. This companion app enables Application Guard to work with web browsers other than Microsoft Edge or Internet Explorer. 1. Restart the device. From 5144652097c59b2c0fb41ee5e9b428b2c27f1a67 Mon Sep 17 00:00:00 2001 From: Marty Hernandez Avedon Date: Mon, 17 Aug 2020 17:57:26 -0400 Subject: [PATCH 12/75] group policies specific to each browser --- .../md-app-guard-browser-extension.md | 43 +++++++++++++++---- 1 file changed, 34 insertions(+), 9 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-application-guard/md-app-guard-browser-extension.md b/windows/security/threat-protection/microsoft-defender-application-guard/md-app-guard-browser-extension.md index bd2a584438..78bfdd1a17 100644 --- a/windows/security/threat-protection/microsoft-defender-application-guard/md-app-guard-browser-extension.md +++ b/windows/security/threat-protection/microsoft-defender-application-guard/md-app-guard-browser-extension.md @@ -51,21 +51,46 @@ From there, the steps for installing the extension are similar whether Applicati 1. Install the [Windows Defender Application Guard companion app](https://www.microsoft.com/p/windows-defender-application-guard-companion/9n8gnlc8z9c8#activetab=pivot:overviewtab) from the Microsoft Store. This companion app enables Application Guard to work with web browsers other than Microsoft Edge or Internet Explorer. 1. Restart the device. +### Recommended browser group policies + +Both Chrome and Firefox have their own browser-specific group policies. We recommend that admins use the following policy settings. + +#### Chrome policies + +These policies can be found along the filepath, `Software\Policies\Google\Chrome\`, followed by the policy name. + +Policy name | Possible values | Recommended setting | Reason +-|-|-|- +[IncognitoModeAvailability](https://cloud.google.com/docs/chrome-enterprise/policies/?policy=IncognitoModeAvailability) | `0` = Enabled
`1` = Disabled
`2` = Forced (i.e. forces pages to only open in Incognito mode) | Disabled | This policy allows users to start Chrome in Incognito mode. In this mode, all extensions are turned off by default. +[BrowserGuestModeEnabled](https://cloud.google.com/docs/chrome-enterprise/policies/?policy=BrowserGuestModeEnabled) | `false` or `0` = Disabled
`true`, `1`, or not configured = Enabled | Disabled | This policy allows users to login as Guest. Guest logins are run in Incognito mode, with all extensions turned off by default. +[BackgroundModeEnabled](https://cloud.google.com/docs/chrome-enterprise/policies/?policy=BackgroundModeEnabled) | `false` or `0` = Disabled
`true` or `1` = Enabled

**Note:** If this policy is not set, the user can enable or disable background mode through local browser settings. | Enabled | This policy keeps Chrome running in the background, ensuring that all navigation is passed to the extension, even on first navigation. +[ExtensionSettings](https://cloud.google.com/docs/chrome-enterprise/policies/?policy=ExtensionSettings) | This setting accepts a dictionary that configures multiple other management settings for Chrome. See the [Google Cloud documentation](https://cloud.google.com/docs/chrome-enterprise/policies/?policy=ExtensionSettings) for complete schema. | Include an entry for `force_installed` | This setting prevents users from manually removing the extension. + +#### Firefox policies + +These policies can be found along the filepath, `Software\Policies\Mozilla\Firefox\`, followed by the policy name. + +Policy name | Possible values | Recommended setting | Reason +-|-|-|-|- +[DisableSafeMode](https://github.com/mozilla/policy-templates/blob/master/README.md#DisableSafeMode) | `false` or `0` = Safe mode is enabled
`true` or `1` = Safe mode is disabled | True (i.e. the policy is enabled and Safe mode is *not* allowed to run) | Safe mode can allow users to circumvent Application Guard +[BlockAboutConfig](https://github.com/mozilla/policy-templates/blob/master/README.md#BlockAboutConfig) | `false` or `0` = User access to about:config is allowed
`true` or `1` = User access to about:config is *not* allowed | True (i.e. the policy is enabled and access to about:config is *not* allowed) | About:config is a special page within Firefox that offers control over many settings that may compromise security +[Extensions - Locked](https://github.com/mozilla/policy-templates/blob/master/README.md#Extensions) | This setting accepts a list of UUIDs for extensions (these can be found by searching `extensions.webextensions.uuids` within the about:config page) | Software\Policies\Mozilla\Firefox\Extensions\Locked\1 = "ApplicationGuardRel@microsoft.com" | This setting allows you to lock the extension, so the user cannot disable or uninstall it. + ## Troubleshooting guide Error message | Cause | Actions -|-|- -Application Guard undetermined state | The extension was unable to communicate with the companion app during the last information request. | • Install the [companion app](https://www.microsoft.com/p/windows-defender-application-guard-companion/9n8gnlc8z9c8?activetab=pivot:overviewtab) and reboot
• If the companion app is already installed, reboot and see if that resolves the error
• If you still see the error after rebooting, uninstall and re-install the companion app
• Check for updates in both the Microsoft store and the respective web store for the affected browser -ExceptionThrown | An unexpected exception was thrown. | • [File a bug](https://aka.ms/wdag-fb)
• Retry the operation -Failed to determine if Application Guard is enabled | The extension was able to communicate with the companion app, but the information request failed in the app. | • Restart the browser
• Check for updates in both the Microsoft store and the respective web store for the affected browser -Launch in WDAG failed with a companion communication error | The extension couldn't talk to the companion app, but was able to at the beginning of the session. This can be caused by the companion app being uninstalled while Chrome was running. | • Make sure the companion app is installed
• If the companion app is installed, reboot and see if that resolves the error
• If you still see the error after rebooting, uninstall and re-install the companion app
• Check for updates in both the Microsoft store and the respective web store for the affected browser -Main page navigation caught an unexpected error | An unexpected exception was thrown during the main page navigation. | • [File a bug](https://aka.ms/wdag-fb)
• Retry the operation -Process trust response failed with a companion communication error | The extension couldn't talk to the companion app, but was able to at the beginning of the session. This can be caused by the companion app being uninstalled while Chrome was running.| • Make sure the companion app is installed.
• If the companion app is installed, reboot and see if that resolves the error
• If you still see the error after rebooting, uninstall and re-install the companion app
• Check for updates in both the Microsoft store and the respective web store for the affected browser -Protocol out of sync | The extension and native app cannot communicate with each other. This is likely caused by one being updated without supporting the protocol of the other. | Check for updates in both the Microsoft store and the respective web store for the affected browser -Security patch level does not match | Microsoft determined that there was a security issue with either the extension or the companion app, and has issued a mandatory update. | Check for updates in both the Microsoft store and the respective web store for the affected browser -Unexpected response while processing trusted state | The extension was able to communicate with the companion app, but the API failed and a failure response code was sent back to the extension. | • [File a bug](https://aka.ms/wdag-fb)
• Check if Edge is working
• Retry the operation +Application Guard undetermined state | The extension was unable to communicate with the companion app during the last information request. | 1. Install the [companion app](https://www.microsoft.com/p/windows-defender-application-guard-companion/9n8gnlc8z9c8?activetab=pivot:overviewtab) and reboot
2. If the companion app is already installed, reboot and see if that resolves the error
3. If you still see the error after rebooting, uninstall and re-install the companion app
4. Check for updates in both the Microsoft store and the respective web store for the affected browser +ExceptionThrown | An unexpected exception was thrown. | 1. [File a bug](https://aka.ms/wdag-fb)
2. Retry the operation +Failed to determine if Application Guard is enabled | The extension was able to communicate with the companion app, but the information request failed in the app. | 1. Restart the browser
2. Check for updates in both the Microsoft store and the respective web store for the affected browser +Launch in WDAG failed with a companion communication error | The extension couldn't talk to the companion app, but was able to at the beginning of the session. This can be caused by the companion app being uninstalled while Chrome was running. | 1. Make sure the companion app is installed
2. If the companion app is installed, reboot and see if that resolves the error
3. If you still see the error after rebooting, uninstall and re-install the companion app
4. Check for updates in both the Microsoft store and the respective web store for the affected browser +Main page navigation caught an unexpected error | An unexpected exception was thrown during the main page navigation. | 1. [File a bug](https://aka.ms/wdag-fb)
2. Retry the operation +Process trust response failed with a companion communication error | The extension couldn't talk to the companion app, but was able to at the beginning of the session. This can be caused by the companion app being uninstalled while Chrome was running.| 1. Make sure the companion app is installed.
2. If the companion app is installed, reboot and see if that resolves the error
3. If you still see the error after rebooting, uninstall and re-install the companion app
4. Check for updates in both the Microsoft store and the respective web store for the affected browser +Protocol out of sync | The extension and native app cannot communicate with each other. This is likely caused by one being updated without supporting the protocol of the other. | Check for updates in both the Microsoft store, and the web store for the affected browser +Security patch level does not match | Microsoft determined that there was a security issue with either the extension or the companion app, and has issued a mandatory update. | Check for updates in both the Microsoft store, and the web store for the affected browser +Unexpected response while processing trusted state | The extension was able to communicate with the companion app, but the API failed and a failure response code was sent back to the extension. | 1. [File a bug](https://aka.ms/wdag-fb)
2. Check if Edge is working
3. Retry the operation ## Related articles From 6b0bb0fdb60770dca650982148c913fb9ec35259 Mon Sep 17 00:00:00 2001 From: andreiztm Date: Fri, 21 Aug 2020 12:47:47 +0300 Subject: [PATCH 13/75] Documenting MBSA issue with latest cab file --- .../security/threat-protection/mbsa-removal-and-guidance.md | 3 +++ 1 file changed, 3 insertions(+) diff --git a/windows/security/threat-protection/mbsa-removal-and-guidance.md b/windows/security/threat-protection/mbsa-removal-and-guidance.md index 771169d40b..59f32f84e6 100644 --- a/windows/security/threat-protection/mbsa-removal-and-guidance.md +++ b/windows/security/threat-protection/mbsa-removal-and-guidance.md @@ -17,6 +17,9 @@ manager: dansimp Microsoft Baseline Security Analyzer (MBSA) is used to verify patch compliance. MBSA also performed several other security checks for Windows, IIS, and SQL Server. Unfortunately, the logic behind these additional checks had not been actively maintained since Windows XP and Windows Server 2003. Changes in the products since then rendered many of these security checks obsolete and some of their recommendations counterproductive. MBSA was largely used in situations where neither Microsoft Update nor a local WSUS or Configuration Manager server was available, or as a compliance tool to ensure that all security updates were deployed to a managed environment. While MBSA version 2.3 introduced support for Windows Server 2012 R2 and Windows 8.1, it has since been deprecated and no longer developed. MBSA 2.3 is not updated to fully support Windows 10 and Windows Server 2016. + +> [!NOTE] +> In accordance with our [SHA-1 deprecation initiative](https://aka.ms/sha1deprecation), the Wsusscn2.cab file is no longer dual-signed using both SHA-1 and the SHA-2 suite of hash algorithms (specifically SHA-256). This file is now signed using only SHA-256. Administrators who verify digital signatures on this file should now expect only single SHA-256 signatures. Starting with the August 2020 Wsusscn2.cab file, MBSA will return the following error "The catalog file is damaged or an invalid catalog." when attempting to scan using the offline scan file. ## The Solution A script can help you with an alternative to MBSA’s patch-compliance checking: From 1c40be4b56ab78bd5c34bd90b4be276fcbb3523d Mon Sep 17 00:00:00 2001 From: Baard Hermansen Date: Fri, 21 Aug 2020 23:58:45 +0200 Subject: [PATCH 14/75] Update bitlocker-how-to-enable-network-unlock.md Corrected erroneous href links, which made almost all the text on the page into a clickable URL. Updated a couple of the code markdown. --- .../bitlocker-how-to-enable-network-unlock.md | 24 ++++++++++--------- 1 file changed, 13 insertions(+), 11 deletions(-) diff --git a/windows/security/information-protection/bitlocker/bitlocker-how-to-enable-network-unlock.md b/windows/security/information-protection/bitlocker/bitlocker-how-to-enable-network-unlock.md index a7a7e7fce7..f17eb6f51b 100644 --- a/windows/security/information-protection/bitlocker/bitlocker-how-to-enable-network-unlock.md +++ b/windows/security/information-protection/bitlocker/bitlocker-how-to-enable-network-unlock.md @@ -94,7 +94,7 @@ The server side configuration to enable Network Unlock also requires provisionin The following steps allow an administrator to configure Network Unlock in a domain where the Domain Functional Level is at least Windows Server 2012. -### Install the WDS Server role +### Install the WDS Server role The BitLocker Network Unlock feature will install the WDS role if it is not already installed. If you want to install it separately before you install BitLocker Network Unlock you can use Server Manager or Windows PowerShell. To install the role using Server Manager, select the **Windows Deployment Services** role in Server Manager. @@ -106,7 +106,7 @@ Install-WindowsFeature WDS-Deployment You must configure the WDS server so that it can communicate with DHCP (and optionally Active Directory Domain Services) and the client computer. You can do using the WDS management tool, wdsmgmt.msc, which starts the Windows Deployment Services Configuration Wizard. -### Confirm the WDS Service is running +### Confirm the WDS Service is running To confirm the WDS service is running, use the Services Management Console or Windows PowerShell. To confirm the service is running in Services Management Console, open the console using **services.msc** and check the status of the Windows Deployment Services service. @@ -115,7 +115,7 @@ To confirm the service is running using Windows PowerShell, use the following co ```powershell Get-Service WDSServer ``` -### Install the Network Unlock feature +### Install the Network Unlock feature To install the Network Unlock feature, use Server Manager or Windows PowerShell. To install the feature using Server Manager, select the **BitLocker Network Unlock** feature in the Server Manager console. @@ -124,7 +124,7 @@ To install the feature using Windows PowerShell, use the following command: ```powershell Install-WindowsFeature BitLocker-NetworkUnlock ``` -### Create the certificate template for Network Unlock +### Create the certificate template for Network Unlock A properly configured Active Directory Services Certification Authority can use this certificate template to create and issue Network Unlock certificates. @@ -154,7 +154,7 @@ To add the Network Unlock template to the Certification Authority, open the Cert After adding the Network Unlock template to the Certification Authority, this certificate can be used to configure BitLocker Network Unlock. -### Create the Network Unlock certificate +### Create the Network Unlock certificate Network Unlock can use imported certificates from an existing PKI infrastructure, or you can use a self-signed certificate. @@ -217,7 +217,7 @@ Certreq example: 3. Open an elevated command prompt and use the certreq tool to create a new certificate using the following command, specifying the full path to the file created previously, along with the file name: - ``` syntax + ```cmd certreq -new BitLocker-NetworkUnlock.inf BitLocker-NetworkUnlock.cer ``` @@ -225,7 +225,7 @@ Certreq example: 5. Launch Certificates - Local Machine by running **certlm.msc**. 6. Create a .pfx file by opening the **Certificates – Local Computer\\Personal\\Certificates** path in the navigation pane, right-clicking the previously imported certificate, selecting **All Tasks**, then **Export**. Follow through the wizard to create the .pfx file. -### Deploy the private key and certificate to the WDS server +### Deploy the private key and certificate to the WDS server With the certificate and key created, deploy them to the infrastructure to properly unlock systems. To deploy the certificates, do the following: @@ -280,6 +280,7 @@ SUBNET2=10.185.252.200/28 SUBNET3= 2001:4898:a:2::/64 ; an IPv6 subnet SUBNET4=2001:4898:a:3::/64; in production, the admin would likely give more useful names, like BUILDING9-EXCEPT-RECEP. ``` + Following the \[SUBNETS\] section, there can be sections for each Network Unlock certificate, identified by the certificate thumbprint formatted without any spaces, which define subnets clients can be unlocked from with that certificate. > [!NOTE] @@ -287,8 +288,9 @@ Following the \[SUBNETS\] section, there can be sections for each Network Unlock Subnet restrictions are defined within each certificate section by denoting the allowed list of permitted subnets. If any subnet is listed in a certificate section, then only those subnets listed are permitted for that certificate. If no subnet is listed in a certificate section, then all subnets are permitted for that certificate. If a certificate does not have a section in the subnet policy configuration file, then no subnet restrictions are applied for unlocking with that certificate. This means for restrictions to apply to every certificate, there must be a certificate section for every Network Unlock certificate on the server, and an explicit allowed list set for each certificate section. Subnet lists are created by putting the name of a subnet from the \[SUBNETS\] section on its own line below the certificate section header. Then, the server will only unlock clients with this certificate on the subnet(s) specified as in the list. For troubleshooting, a subnet can be quickly excluded without deleting it from the section by simply commenting it out with a prepended semi-colon. + ```ini -[‎2158a767e1c14e88e27a4c0aee111d2de2eafe60] +[2158a767e1c14e88e27a4c0aee111d2de2eafe60] ;Comments could be added here to indicate when the cert was issued, which Group Policy should get it, and so on. ;This list shows this cert is only allowed to unlock clients on SUBNET1 and SUBNET3 subnets. In this example, SUBNET2 is commented out. SUBNET1 @@ -298,14 +300,14 @@ SUBNET3 To disallow the use of a certificate altogether, its subnet list may contain the line “DISABLED". -## Turning off Network Unlock +## Turning off Network Unlock To turn off the unlock server, the PXE provider can be unregistered from the WDS server or uninstalled altogether. However, to stop clients from creating Network Unlock protectors the **Allow Network Unlock at startup** Group Policy setting should be disabled. When this policy setting is updated to disabled on client computers any Network Unlock key protectors on the computer will be deleted. Alternatively, the BitLocker Network Unlock certificate policy can be deleted on the domain controller to accomplish the same task for an entire domain. > [!NOTE] > Removing the FVE_NKP certificate store that contains the Network Unlock certificate and key on the WDS server will also effectively disable the server’s ability to respond to unlock requests for that certificate. However, this is seen as an error condition and is not a supported or recommended method for turning off the Network Unlock server. -## Update Network Unlock certificates +## Update Network Unlock certificates To update the certificates used by Network Unlock, administrators need to import or generate the new certificate for the server and then update the Network Unlock certificate Group Policy setting on the domain controller. @@ -335,7 +337,7 @@ Files to gather when troubleshooting BitLocker Network Unlock include: 1. Start an elevated command prompt and run the following command: - ``` syntax + ```cmd wevtutil sl Microsoft-Windows-Deployment-Services-Diagnostics/Debug /e:true ``` 2. Open Event Viewer on the WDS server. From d142d0d9ce781bee4f86b16465c0188b4dc9a0b0 Mon Sep 17 00:00:00 2001 From: Baard Hermansen Date: Sat, 22 Aug 2020 01:54:53 +0200 Subject: [PATCH 15/75] Update bitlocker-group-policy-settings.md Converted all HTML tables to markdown style. Updated several URLs. --- .../bitlocker-group-policy-settings.md | 2212 ++++------------- 1 file changed, 533 insertions(+), 1679 deletions(-) diff --git a/windows/security/information-protection/bitlocker/bitlocker-group-policy-settings.md b/windows/security/information-protection/bitlocker/bitlocker-group-policy-settings.md index be8ab9ed7b..ad390ad5c3 100644 --- a/windows/security/information-protection/bitlocker/bitlocker-group-policy-settings.md +++ b/windows/security/information-protection/bitlocker/bitlocker-group-policy-settings.md @@ -20,19 +20,21 @@ ms.date: 04/17/2019 # BitLocker Group Policy settings **Applies to** -- Windows 10 + +- Windows 10 This topic for IT professionals describes the function, location, and effect of each Group Policy setting that is used to manage BitLocker Drive Encryption. To control what drive encryption tasks the user can perform from the Windows Control Panel or to modify other configuration options, you can use Group Policy administrative templates or local computer policy settings. How you configure these policy settings depends on how you implement BitLocker and what level of user interaction will be allowed. ->**Note:** A separate set of Group Policy settings supports the use of the Trusted Platform Module (TPM). For details about those settings, see [Trusted Platform Module Group Policy settings](/windows/device-security/tpm/trusted-platform-module-services-group-policy-settings). +> [!NOTE] +> A separate set of Group Policy settings supports the use of the Trusted Platform Module (TPM). For details about those settings, see [Trusted Platform Module Group Policy settings](/windows/security/information-protection/tpm/trusted-platform-module-services-group-policy-settings). BitLocker Group Policy settings can be accessed using the Local Group Policy Editor and the Group Policy Management Console (GPMC) under **Computer Configuration\\Administrative Templates\\Windows Components\\BitLocker Drive Encryption**. Most of the BitLocker Group Policy settings are applied when BitLocker is initially turned on for a drive. If a computer is not compliant with existing Group Policy settings, BitLocker may not be turned on or modified until the computer is in a compliant state. When a drive is out of compliance with Group Policy settings (for example, if a Group Policy setting was changed after the initial BitLocker deployment in your organization, and then the setting was applied to previously encrypted drives), no change can be made to the BitLocker configuration of that drive except a change that will bring it into compliance. If multiple changes are necessary to bring the drive into compliance, you must suspend BitLocker protection, make the necessary changes, and then resume protection. This situation could occur, for example, if a removable drive was initially configured to be unlocked with a password and then Group -Policy settings are changed to disallow passwords and require smart cards. In this situation, you need to suspend BitLocker protection by using the [Manage-bde](https://technet.microsoft.com/library/ff829849.aspx) command-line tool, delete the password unlock method, and add the smart card method. After this is complete, BitLocker is compliant with the Group Policy setting and BitLocker protection on the drive can be resumed. +Policy settings are changed to disallow passwords and require smart cards. In this situation, you need to suspend BitLocker protection by using the [Manage-bde](/windows-server/administration/windows-commands/manage-bde) command-line tool, delete the password unlock method, and add the smart card method. After this is complete, BitLocker is compliant with the Group Policy setting and BitLocker protection on the drive can be resumed. ## BitLocker Group Policy settings @@ -99,98 +101,43 @@ The following policies are used to support customized deployment scenarios in yo This policy setting allows users on devices that are compliant with Modern Standby or the Microsoft Hardware Security Test Interface (HSTI) to not have a PIN for preboot authentication. - ---- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Policy description

With this policy setting, you can allow TPM-only protection for newer, more secure devices, such as devices that support Modern Standby or HSTI, while requiring PIN on older devices.

Introduced

Windows 10, version 1703

Drive type

Operating system drives

Policy path

Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Operating System Drives

Conflicts

This setting overrides the Require startup PIN with TPM option of the Require additional authentication at startup policy on compliant hardware. +||| +|--- |--- | +|Policy description|With this policy setting, you can allow TPM-only protection for newer, more secure devices, such as devices that support Modern Standby or HSTI, while requiring PIN on older devices.| +|Introduced|Windows 10, version 1703| +|Drive type|Operating system drives| +|Policy path|Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Operating System Drives| +|Conflicts|This setting overrides the **Require startup PIN with TPM** option of the [Require additional authentication at startup](#bkmk-unlockpol1) policy on compliant hardware.| +|When enabled|Users on Modern Standby and HSTI compliant devices will have the choice to turn on BitLocker without preboot authentication.| +|When disabled or not configured|The options of the [Require additional authentication at startup](#bkmk-unlockpol1) policy apply.| -

When enabled

Users on Modern Standby and HSTI compliant devices will have the choice to turn on BitLocker without preboot authentication.

When disabled or not configured

The options of the Require additional authentication at startup policy apply.

+**Reference** -Reference - -The preboot authentication option Require startup PIN with TPM of the [Require additional authentication at startup](#bkmk-unlockpol1) policy is often enabled to help ensure security for older devices that do not support Modern Standby. -But visually impaired users have no audible way to know when to enter a PIN. +The preboot authentication option **Require startup PIN with TPM** of the [Require additional authentication at startup](#bkmk-unlockpol1) policy is often enabled to help ensure security for older devices that do not support Modern Standby. But visually impaired users have no audible way to know when to enter a PIN. This setting enables an exception to the PIN-required policy on secure hardware. ### Allow network unlock at startup This policy controls a portion of the behavior of the Network Unlock feature in BitLocker. This policy is required to enable BitLocker Network Unlock on a network because it allows clients running BitLocker to create the necessary network key protector during encryption. + This policy is used in addition to the BitLocker Drive Encryption Network Unlock Certificate security policy (located in the **Public Key Policies** folder of Local Computer Policy) to allow systems that are connected to a trusted network to properly utilize the Network Unlock feature. - ---- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Policy description

With this policy setting, you can control whether a BitLocker-protected computer that is connected to a trusted local area network and joined to a domain can create and use network key protectors on TPM-enabled computers to automatically unlock the operating system drive when the computer is started.

Introduced

Windows Server 2012 and Windows 8

Drive type

Operating system drives

Policy path

Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Operating System Drives

Conflicts

None

When enabled

Clients configured with a BitLocker Network Unlock certificate can create and use Network Key Protectors.

When disabled or not configured

Clients cannot create and use Network Key Protectors

+||| +|--- |--- | +|Policy description|With this policy setting, you can control whether a BitLocker-protected computer that is connected to a trusted local area network and joined to a domain can create and use network key protectors on TPM-enabled computers to automatically unlock the operating system drive when the computer is started.| +|Introduced|Windows Server 2012 and Windows 8| +|Drive type|Operating system drives| +|Policy path|Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Operating System Drives| +|Conflicts|None| +|When enabled|Clients configured with a BitLocker Network Unlock certificate can create and use Network Key Protectors.| +|When disabled or not configured|Clients cannot create and use Network Key Protectors| -Reference +**Reference** To use a network key protector to unlock the computer, the computer and the server that hosts BitLocker Drive Encryption Network Unlock must be provisioned with a Network Unlock certificate. The Network Unlock certificate is used to create a network key protector and to protect the information exchange with the server to unlock the computer. You can use the Group Policy setting **Computer Configuration\\Windows Settings\\Security Settings\\Public Key Policies\\BitLocker Drive Encryption Network Unlock Certificate** on the domain controller to distribute this certificate to computers in your organization. This unlock method uses the TPM on the computer, so computers that do not have a TPM cannot create network key protectors to automatically unlock by using Network Unlock. ->**Note:** For reliability and security, computers should also have a TPM startup PIN that can be used when the computer is disconnected from the wired network or cannot connect to the domain controller at startup. +> [!NOTE] +> For reliability and security, computers should also have a TPM startup PIN that can be used when the computer is disconnected from the wired network or cannot connect to the domain controller at startup. For more information about Network Unlock, see [BitLocker: How to enable Network Unlock](bitlocker-how-to-enable-network-unlock.md). @@ -198,46 +145,17 @@ For more information about Network Unlock, see [BitLocker: How to enable Network This policy setting is used to control which unlock options are available for operating system drives. - ---- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Policy description

With this policy setting, you can configure whether BitLocker requires additional authentication each time the computer starts and whether you are using BitLocker with a Trusted Platform Module (TPM). This policy setting is applied when you turn on BitLocker.

Introduced

Windows Server 2008 R2 and Windows 7

Drive type

Operating system drives

Policy path

Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Operating System Drives

Conflicts

If one authentication method is required, the other methods cannot be allowed.

-

Use of BitLocker with a TPM startup key or with a TPM startup key and a PIN must be disallowed if the Deny write access to removable drives not protected by BitLocker policy setting is enabled.

When enabled

Users can configure advanced startup options in the BitLocker Setup Wizard.

When disabled or not configured

Users can configure only basic options on computers with a TPM.

-

Only one of the additional authentication options can be required at startup; otherwise, a policy error occurs.

+||| +|--- |--- | +|Policy description|With this policy setting, you can configure whether BitLocker requires additional authentication each time the computer starts and whether you are using BitLocker with a Trusted Platform Module (TPM). This policy setting is applied when you turn on BitLocker.| +|Introduced|Windows Server 2008 R2 and Windows 7| +|Drive type|Operating system drives| +|Policy path|Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Operating System Drives| +|Conflicts|If one authentication method is required, the other methods cannot be allowed. Use of BitLocker with a TPM startup key or with a TPM startup key and a PIN must be disallowed if the **Deny write access to removable drives not protected by BitLocker** policy setting is enabled.| +|When enabled|Users can configure advanced startup options in the BitLocker Setup Wizard.| +|When disabled or not configured|Users can configure only basic options on computers with a TPM.

Only one of the additional authentication options can be required at startup; otherwise, a policy error occurs.| -Reference +**Reference** If you want to use BitLocker on a computer without a TPM, select **Allow BitLocker without a compatible TPM**. In this mode, a password or USB drive is required for startup. The USB drive stores the startup key that is used to encrypt the drive. When the USB drive is inserted, the startup key is authenticated and the operating system drive is accessible. If the USB drive is lost or unavailable, BitLocker recovery is required to access the drive. @@ -275,101 +193,46 @@ There are four options for TPM-enabled computers or devices: This policy setting permits the use of enhanced PINs when you use an unlock method that includes a PIN. - ---- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Policy description

With this policy setting, you can configure whether enhanced startup PINs are used with BitLocker.

Introduced

Windows Server 2008 R2 and Windows 7

Drive type

Operating system drives

Policy path

Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Operating System Drives

Conflicts

None

When enabled

All new BitLocker startup PINs that are set will be enhanced PINs. Existing drives that were protected by using standard startup PINs are not affected.

When disabled or not configured

Enhanced PINs will not be used.

- +||| +|--- |--- | +|Policy description|With this policy setting, you can configure whether enhanced startup PINs are used with BitLocker.| +|Introduced|Windows Server 2008 R2 and Windows 7| +|Drive type|Operating system drives| +|Policy path|Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Operating System Drives| +|Conflicts|None| +|When enabled|All new BitLocker startup PINs that are set will be enhanced PINs. Existing drives that were protected by using standard startup PINs are not affected.| +|When disabled or not configured|Enhanced PINs will not be used.| **Reference** Enhanced startup PINs permit the use of characters (including uppercase and lowercase letters, symbols, numbers, and spaces). This policy setting is applied when you turn on BitLocker. ->**Important:** Not all computers support enhanced PIN characters in the preboot environment. It is strongly recommended that users perform a system check during the BitLocker setup to verify that enhanced PIN characters can be used. +> [!IMPORANT] +> Not all computers support enhanced PIN characters in the preboot environment. It is strongly recommended that users perform a system check during the BitLocker setup to verify that enhanced PIN characters can be used. ### Configure minimum PIN length for startup This policy setting is used to set a minimum PIN length when you use an unlock method that includes a PIN. - ---- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Policy description

With this policy setting, you can configure a minimum length for a TPM startup PIN. This policy setting is applied when you turn on BitLocker. The startup PIN must have a minimum length of 4 digits, and it can have a maximum length of 20 digits. By default, the minimum PIN length is 6.

Introduced

Windows Server 2008 R2 and Windows 7

Drive type

Operating system drives

Policy path

Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Operating System Drives

Conflicts

None

When enabled

You can require that startup PINs set by users must have a minimum length you choose that is between 4 and 20 digits.

When disabled or not configured

Users can configure a startup PIN of any length between 6 and 20 digits.

+||| +|--- |--- | +|Policy description|With this policy setting, you can configure a minimum length for a TPM startup PIN. This policy setting is applied when you turn on BitLocker. The startup PIN must have a minimum length of 4 digits, and it can have a maximum length of 20 digits. By default, the minimum PIN length is 6.| +|Introduced|Windows Server 2008 R2 and Windows 7| +|Drive type|Operating system drives| +|Policy path|Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Operating System Drives| +|Conflicts|None| +|When enabled|You can require that startup PINs set by users must have a minimum length you choose that is between 4 and 20 digits.| +|When disabled or not configured|Users can configure a startup PIN of any length between 6 and 20 digits.| -Reference +**Reference** -This policy setting is applied when you turn on BitLocker. -The startup PIN must have a minimum length of 4 digits and can have a maximum length of 20 digits. +This policy setting is applied when you turn on BitLocker. The startup PIN must have a minimum length of 4 digits and can have a maximum length of 20 digits. Originally, BitLocker allowed from 4 to 20 characters for a PIN. Windows Hello has its own PIN for logon, which can be 4 to 127 characters. Both BitLocker and Windows Hello use the TPM to prevent PIN brute-force attacks. -The TPM can be configured to use Dictionary Attack Prevention parameters ([lockout threshold and lockout duration](/windows/device-security/tpm/trusted-platform-module-services-group-policy-settings)) to control how many failed authorizations attempts are allowed before the TPM is locked out, and how much time must elapse before another attempt can be made. +The TPM can be configured to use Dictionary Attack Prevention parameters ([lockout threshold and lockout duration](/windows/security/information-protection/tpm/trusted-platform-module-services-group-policy-settings)) to control how many failed authorizations attempts are allowed before the TPM is locked out, and how much time must elapse before another attempt can be made. The Dictionary Attack Prevention Parameters provide a way to balance security needs with usability. For example, when BitLocker is used with a TPM + PIN configuration, the number of PIN guesses is limited over time. @@ -388,61 +251,33 @@ If the minimum PIN length is reduced from the default of six characters, then th This policy setting allows you to block direct memory access (DMA) for all hot pluggable PCI ports until a user signs in to Windows. -| | | -| - | - | -| **Policy description** | This setting helps prevent attacks that use external PCI-based devices to access BitLocker keys. | -| **Introduced** | Windows 10, version 1703 | -| **Drive type** | Operating system drives | -| **Policy path** | Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption| -| **Conflicts** | None | -| **When enabled** | Every time the user locks the screen, DMA will be blocked on hot pluggable PCI ports until the user signs in again. | -| **When disabled or not configured** | DMA is available on hot pluggable PCI devices if the device is turned on, regardless of whether a user is signed in.| +| | | +|---------|---------| +|Policy description|This setting helps prevent attacks that use external PCI-based devices to access BitLocker keys.| +|Introduced|Windows 10, version 1703| +|Drive type|Operating system drives| +|Policy path|Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption| +|Conflicts|None| +|When enabled|Every time the user locks the scree, DMA will be blocked on hot pluggable PCI ports until the user signs in again.| +|When disabled or not configured|DMA is available on hot pluggable PCI devices if the device is turned on, regardless of whether a user is signed in.| **Reference** -This policy setting is only enforced when BitLocker or device encryption is enabled. As explained in the [Microsoft Security Guidance blog](https://blogs.technet.microsoft.com/secguide/2018/01/18/issue-with-bitlockerdma-setting-in-windows-10-fall-creators-update-v1709/), in some cases when this setting is enabled, internal, PCI-based peripherals can fail, including wireless network drivers and input and audio peripherals. This problem is fixed in the [April 2018 quality update](https://support.microsoft.com/help/4093105/windows-10-update-kb4093105). +This policy setting is only enforced when BitLocker or device encryption is enabled. As explained in the [Microsoft Security Guidance blog](https://blogs.technet.microsoft.com/secguide/2018/01/18/issue-with-bitlockerdma-setting-in-windows-10-fall-creators-update-v1709/), in some cases when this setting is enabled, internal, PCI-based peripherals can fail, including wireless network drivers and input and audio peripherals. This problem is fixed in the [April 2018 quality update](https://support.microsoft.com/help/4093105). ### Disallow standard users from changing the PIN or password This policy setting allows you to configure whether standard users are allowed to change the PIN or password that is used to protect the operating system drive. - ---- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Policy description

With this policy setting, you can configure whether standard users are allowed to change the PIN or password used to protect the operating system drive.

Introduced

Windows Server 2012 and Windows 8

Drive type

Operating system drives

Policy path

Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Operating System Drives

Conflicts

None

When enabled

Standard users are not allowed to change BitLocker PINs or passwords.

When disabled or not configured

Standard users are permitted to change BitLocker PINs or passwords.

- +||| +|--- |--- | +|Policy description|With this policy setting, you can configure whether standard users are allowed to change the PIN or password used to protect the operating system drive.| +|Introduced|Windows Server 2012 and Windows 8| +|Drive type|Operating system drives| +|Policy path|Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Operating System Drives| +|Conflicts|None| +|When enabled|Standard users are not allowed to change BitLocker PINs or passwords.| +|When disabled or not configured|Standard users are permitted to change BitLocker PINs or passwords.| **Reference** @@ -452,55 +287,22 @@ To change the PIN or password, the user must be able to provide the current PIN This policy controls how non-TPM based systems utilize the password protector. Used in conjunction with the **Password must meet complexity requirements** policy, this policy allows administrators to require password length and complexity for using the password protector. By default, passwords must be eight characters in length. Complexity configuration options determine how important domain connectivity is for the client. For the strongest password security, administrators should choose **Require password complexity** because it requires domain connectivity, and it requires that the BitLocker password meets the same password complexity requirements as domain sign-in passwords. - ---- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Policy description

With this policy setting, you can specify the constraints for passwords that are used to unlock operating system drives that are protected with BitLocker.

Introduced

Windows Server 2012 and Windows 8

Drive type

Operating system drives

Policy path

Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Operating System Drives

Conflicts

Passwords cannot be used if FIPS-compliance is enabled.

-
-Note

The System cryptography: Use FIPS-compliant algorithms for encryption, hashing, and signing policy setting, which is located at Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Options specifies whether FIPS-compliance is enabled.

-
-
- -

When enabled

Users can configure a password that meets the requirements you define. To enforce complexity requirements for the password, select Require complexity.

When disabled or not configured

The default length constraint of 8 characters will apply to operating system drive passwords and no complexity checks will occur.

- +||| +|--- |--- | +|Policy description|With this policy setting, you can specify the constraints for passwords that are used to unlock operating system drives that are protected with BitLocker.| +|Introduced|Windows Server 2012 and Windows 8| +|Drive type|Operating system drives| +|Policy path|Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Operating System Drives| +|Conflicts|Passwords cannot be used if FIPS-compliance is enabled.


**NOTE:** The **System cryptography: Use FIPS-compliant algorithms for encryption, hashing, and signing** policy setting, which is located at **Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Options** specifies whether FIPS-compliance is enabled.| +|When enabled|Users can configure a password that meets the requirements you define. To enforce complexity requirements for the password, select **Require complexity**.| +|When disabled or not configured|The default length constraint of 8 characters will apply to operating system drive passwords and no complexity checks will occur.| **Reference** If non-TPM protectors are allowed on operating system drives, you can provision a password, enforce complexity requirements on the password, and configure a minimum length for the password. For the complexity requirement setting to be effective, the Group Policy setting **Password must meet complexity requirements**, which is located at **Computer Configuration\\Windows Settings\\Security Settings\\Account Policies\\Password Policy\\** must be also enabled. ->**Note:** These settings are enforced when turning on BitLocker, not when unlocking a volume. BitLocker allows unlocking a drive with any of the protectors that are available on the drive. +> [!NOTE] +> These settings are enforced when turning on BitLocker, not when unlocking a volume. BitLocker allows unlocking a drive with any of the protectors that are available on the drive. When set to **Require complexity**, a connection to a domain controller is necessary when BitLocker is enabled to validate the complexity the password. When set to **Allow complexity**, a connection to a domain controller is attempted to validate that the complexity adheres to the rules set by the policy. If no domain controllers are found, the password will be accepted regardless of actual password complexity, and the drive will be encrypted by using that password as a protector. When set to **Do not allow complexity**, there is no password complexity validation. Passwords must be at least 8 characters. To configure a greater minimum length for the password, enter the desired number of characters in the **Minimum password length** box. @@ -515,44 +317,17 @@ When this policy setting is enabled, you can set the option **Configure password This policy setting is used to control what unlock options are available for computers running Windows Server 2008 or Windows Vista. - ---- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Policy description

With this policy setting, you can control whether the BitLocker Setup Wizard on computers running Windows Vista or Windows Server 2008 can set up an additional authentication method that is required each time the computer starts.

Introduced

Windows Server 2008 and Windows Vista

Drive type

Operating system drives (Windows Server 2008 and Windows Vista)

Policy path

Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Operating System Drives

Conflicts

If you choose to require an additional authentication method, other authentication methods cannot be allowed.

When enabled

The BitLocker Setup Wizard displays the page that allows the user to configure advanced startup options for BitLocker. You can further configure setting options for computers with or without a TPM.

When disabled or not configured

The BitLocker Setup Wizard displays basic steps that allow users to enable BitLocker on computers with a TPM. In this basic wizard, no additional startup key or startup PIN can be configured.

+||| +|--- |--- | +|Policy description|With this policy setting, you can control whether the BitLocker Setup Wizard on computers running Windows Vista or Windows Server 2008 can set up an additional authentication method that is required each time the computer starts.| +|Introduced|Windows Server 2008 and Windows Vista| +|Drive type|Operating system drives (Windows Server 2008 and Windows Vista)| +|Policy path|Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Operating System Drives| +|Conflicts|If you choose to require an additional authentication method, other authentication methods cannot be allowed.| +|When enabled|The BitLocker Setup Wizard displays the page that allows the user to configure advanced startup options for BitLocker. You can further configure setting options for computers with or without a TPM.| +|When disabled or not configured|The BitLocker Setup Wizard displays basic steps that allow users to enable BitLocker on computers with a TPM. In this basic wizard, no additional startup key or startup PIN can be configured.| -Reference +**Reference** On a computer with a compatible TPM, two authentication methods can be used at startup to provide added protection for encrypted data. When the computer starts, it can require users to insert a USB drive that contains a startup key. It can also require users to enter a 6-digit to 20-digit startup PIN. @@ -579,97 +354,38 @@ To hide the advanced page on a TPM-enabled computer or device, set these options This policy setting is used to require, allow, or deny the use of smart cards with fixed data drives. - ---- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Policy description

With this policy setting, you can specify whether smart cards can be used to authenticate user access to the BitLocker-protected fixed data drives on a computer.

Introduced

Windows Server 2008 R2 and Windows 7

Drive type

Fixed data drives

Policy path

Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Fixed Data Drives

Conflicts

To use smart cards with BitLocker, you may also need to modify the object identifier setting in the Computer Configuration\Administrative Templates\BitLocker Drive Encryption\Validate smart card certificate usage rule compliance policy setting to match the object identifier of your smart card certificates.

When enabled

Smart cards can be used to authenticate user access to the drive. You can require smart card authentication by selecting the Require use of smart cards on fixed data drives check box.

When disabled

Users cannot use smart cards to authenticate their access to BitLocker-protected fixed data drives.

When not configured

Smart cards can be used to authenticate user access to a BitLocker-protected drive.

+||| +|--- |--- | +|Policy description|With this policy setting, you can specify whether smart cards can be used to authenticate user access to the BitLocker-protected fixed data drives on a computer.| +|Introduced|Windows Server 2008 R2 and Windows 7| +|Drive type|Fixed data drives| +|Policy path|Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Fixed Data Drives| +|Conflicts|To use smart cards with BitLocker, you may also need to modify the object identifier setting in the **Computer Configuration\Administrative Templates\BitLocker Drive Encryption\Validate smart card certificate usage rule compliance** policy setting to match the object identifier of your smart card certificates.| +|When enabled|Smart cards can be used to authenticate user access to the drive. You can require smart card authentication by selecting the **Require use of smart cards on fixed data drives** check box.| +|When disabled|Users cannot use smart cards to authenticate their access to BitLocker-protected fixed data drives.| +|When not configured|Smart cards can be used to authenticate user access to a BitLocker-protected drive.| -Reference +**Reference** ->**Note:** These settings are enforced when turning on BitLocker, not when unlocking a drive. BitLocker allows unlocking a drive by using any of the protectors that are available on the drive. +> [!NOTE] +> These settings are enforced when turning on BitLocker, not when unlocking a drive. BitLocker allows unlocking a drive by using any of the protectors that are available on the drive. ### Configure use of passwords on fixed data drives This policy setting is used to require, allow, or deny the use of passwords with fixed data drives. - ---- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Policy description

With this policy setting, you can specify whether a password is required to unlock BitLocker-protected fixed data drives.

Introduced

Windows Server 2008 R2 and Windows 7

Drive type

Fixed data drives

Policy path

Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Fixed Data Drives

Conflicts

To use password complexity, the Computer Configuration\Windows Settings\Security Settings\Account Policies\Password Policy\Password must meet complexity requirements policy setting must also be enabled.

When enabled

Users can configure a password that meets the requirements you define. To require the use of a password, select Require password for fixed data drive. To enforce complexity requirements on the password, select Require complexity.

When disabled

The user is not allowed to use a password.

When not configured

Passwords are supported with the default settings, which do not include password complexity requirements and require only 8 characters.

+||| +|--- |--- | +|Policy description|With this policy setting, you can specify whether a password is required to unlock BitLocker-protected fixed data drives.| +|Introduced|Windows Server 2008 R2 and Windows 7| +|Drive type|Fixed data drives| +|Policy path|Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Fixed Data Drives| +|Conflicts|To use password complexity, the **Computer Configuration\Windows Settings\Security Settings\Account Policies\Password Policy\Password must meet complexity requirements** policy setting must also be enabled.| +|When enabled|Users can configure a password that meets the requirements you define. To require the use of a password, select **Require password for fixed data drive**. To enforce complexity requirements on the password, select **Require complexity**.| +|When disabled|The user is not allowed to use a password.| +|When not configured|Passwords are supported with the default settings, which do not include password complexity requirements and require only 8 characters.| -Reference +**Reference** When set to **Require complexity**, a connection to a domain controller is necessary to validate the complexity of the password when BitLocker is enabled. @@ -679,115 +395,58 @@ When set to **Do not allow complexity**, no password complexity validation is pe Passwords must be at least 8 characters. To configure a greater minimum length for the password, enter the desired number of characters in the **Minimum password length** box. ->**Note:** These settings are enforced when turning on BitLocker, not when unlocking a drive. BitLocker allows unlocking a drive with any of the protectors that are available on the drive. +> [!NOTE] +> These settings are enforced when turning on BitLocker, not when unlocking a drive. BitLocker allows unlocking a drive with any of the protectors that are available on the drive. For the complexity requirement setting to be effective, the Group Policy setting **Computer Configuration\\Windows Settings\\Security Settings\\Account Policies\\Password Policy\\Password must meet complexity requirements** must also be enabled. This policy setting is configured on a per-computer basis. This means that it applies to local user accounts and domain user accounts. Because the password filter that is used to validate password complexity is located on the domain controllers, local user accounts cannot access the password filter because they are not authenticated for domain access. When this policy setting is enabled, if you sign in with a local user account, and you attempt to encrypt a drive or change a password on an existing BitLocker-protected drive, an "Access denied" error message is displayed. In this situation, the password key protector cannot be added to the drive. Enabling this policy setting requires that connectivity to a domain be established before adding a password key protector to a BitLocker-protected drive. Users who work remotely and have periods of time in which they cannot connect to the domain should be made aware of this requirement so that they can schedule a time when they will be connected to the domain to turn on BitLocker or to change a password on a BitLocker-protected data drive. ->**Important:** Passwords cannot be used if FIPS compliance is enabled. The **System cryptography: Use FIPS-compliant algorithms for encryption, hashing, and signing** policy setting in **Computer Configuration\\Windows Settings\\Security Settings\\Local Policies\\Security Options** specifies whether FIPS compliance is enabled. +> [!IMPORTANT] +> Passwords cannot be used if FIPS compliance is enabled. The **System cryptography: Use FIPS-compliant algorithms for encryption, hashing, and signing** policy setting in **Computer Configuration\\Windows Settings\\Security Settings\\Local Policies\\Security Options** specifies whether FIPS compliance is enabled. ### Configure use of smart cards on removable data drives This policy setting is used to require, allow, or deny the use of smart cards with removable data drives. - ---- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Policy description

With this policy setting, you can specify whether smart cards can be used to authenticate user access to BitLocker-protected removable data drives on a computer.

Introduced

Windows Server 2008 R2 and Windows 7

Drive type

Removable data drives

Policy path

Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Removable Data Drives

Conflicts

To use smart cards with BitLocker, you may also need to modify the object identifier setting in the Computer Configuration\Administrative Templates\BitLocker Drive Encryption\Validate smart card certificate usage rule compliance policy setting to match the object identifier of your smart card certificates.

When enabled

Smart cards can be used to authenticate user access to the drive. You can require smart card authentication by selecting the Require use of smart cards on removable data drives check box.

When disabled or not configured

Users are not allowed to use smart cards to authenticate their access to BitLocker-protected removable data drives.

When not configured

Smart cards are available to authenticate user access to a BitLocker-protected removable data drive.

+||| +|--- |--- | +|Policy description|With this policy setting, you can specify whether smart cards can be used to authenticate user access to BitLocker-protected removable data drives on a computer.| +|Introduced|Windows Server 2008 R2 and Windows 7| +|Drive type|Removable data drives| +|Policy path|Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Removable Data Drives| +|Conflicts|To use smart cards with BitLocker, you may also need to modify the object identifier setting in the **Computer Configuration\Administrative Templates\BitLocker Drive Encryption\Validate smart card certificate usage rule compliance** policy setting to match the object identifier of your smart card certificates.| +|When enabled|Smart cards can be used to authenticate user access to the drive. You can require smart card authentication by selecting the **Require use of smart cards on removable data drives** check box.| +|When disabled or not configured|Users are not allowed to use smart cards to authenticate their access to BitLocker-protected removable data drives.| +|When not configured|Smart cards are available to authenticate user access to a BitLocker-protected removable data drive.| -Reference +**Reference** ->**Note:** These settings are enforced when turning on BitLocker, not when unlocking a drive. BitLocker allows unlocking a drive with any of the protectors that are available on the drive. +> [!NOTE] +> These settings are enforced when turning on BitLocker, not when unlocking a drive. BitLocker allows unlocking a drive with any of the protectors that are available on the drive. ### Configure use of passwords on removable data drives This policy setting is used to require, allow, or deny the use of passwords with removable data drives. - ---- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Policy description

With this policy setting, you can specify whether a password is required to unlock BitLocker-protected removable data drives.

Introduced

Windows Server 2008 R2 and Windows 7

Drive type

Removable data drives

Policy path

Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Removable Data Drives

Conflicts

To use password complexity, the Password must meet complexity requirements policy setting, which is located at Computer Configuration\Windows Settings\Security Settings\Account Policies\Password Policy must also be enabled.

When enabled

Users can configure a password that meets the requirements you define. To require the use of a password, select Require password for removable data drive. To enforce complexity requirements on the password, select Require complexity.

When disabled

The user is not allowed to use a password.

When not configured

Passwords are supported with the default settings, which do not include password complexity requirements and require only 8 characters.

- -Reference +||| +|--- |--- | +|Policy description|With this policy setting, you can specify whether a password is required to unlock BitLocker-protected removable data drives.| +|Introduced|Windows Server 2008 R2 and Windows 7| +|Drive type|Removable data drives| +|Policy path|Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Removable Data Drives| +|Conflicts|To use password complexity, the **Password must meet complexity requirements** policy setting, which is located at **Computer Configuration\Windows Settings\Security Settings\Account Policies\Password Policy** must also be enabled.| +|When enabled|Users can configure a password that meets the requirements you define. To require the use of a password, select **Require password for removable data drive**. To enforce complexity requirements on the password, select **Require complexity**.| +|When disabled|The user is not allowed to use a password.| +|When not configured|Passwords are supported with the default settings, which do not include password complexity requirements and require only 8 characters.| +**Reference** If you choose to allow the use of a password, you can require a password to be used, enforce complexity requirements, and configure a minimum length. For the complexity requirement setting to be effective, the Group Policy setting **Password must meet complexity requirements**, which is located at **Computer Configuration\\Windows Settings\\Security Settings\\Account Policies\\Password Policy** must also be enabled. ->**Note:** These settings are enforced when turning on BitLocker, not when unlocking a drive. BitLocker allows unlocking a drive with any of the protectors that are available on the drive. +> [!NOTE] +> These settings are enforced when turning on BitLocker, not when unlocking a drive. BitLocker allows unlocking a drive with any of the protectors that are available on the drive. Passwords must be at least 8 characters. To configure a greater minimum length for the password, enter the desired number of characters in the **Minimum password length** box. @@ -797,52 +456,26 @@ When set to **Allow complexity**, a connection to a domain controller will be at When set to **Do not allow complexity**, no password complexity validation will be done. ->**Note:** Passwords cannot be used if FIPS compliance is enabled. The **System cryptography: Use FIPS-compliant algorithms for encryption, hashing, and signing** policy setting in **Computer Configuration\\Windows Settings\\Security Settings\\Local Policies\\Security Options** specifies whether FIPS compliance is enabled. +> [!NOTE] +> Passwords cannot be used if FIPS compliance is enabled. The **System cryptography: Use FIPS-compliant algorithms for encryption, hashing, and signing** policy setting in **Computer Configuration\\Windows Settings\\Security Settings\\Local Policies\\Security Options** specifies whether FIPS compliance is enabled. -For information about this setting, see [System cryptography: Use FIPS-compliant algorithms for encryption, hashing, and signing](https://technet.microsoft.com/library/jj852211.aspx). +For information about this setting, see [System cryptography: Use FIPS-compliant algorithms for encryption, hashing, and signing](/windows/security/threat-protection/security-policy-settings/system-cryptography-use-fips-compliant-algorithms-for-encryption-hashing-and-signing). ### Validate smart card certificate usage rule compliance This policy setting is used to determine what certificate to use with BitLocker. - ---- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Policy description

With this policy setting, you can associate an object identifier from a smart card certificate to a BitLocker-protected drive.

Introduced

Windows Server 2008 R2 and Windows 7

Drive type

Fixed and removable data drives

Policy path

Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption

Conflicts

None

When enabled

The object identifier that is specified in the Object identifier setting must match the object identifier in the smart card certificate.

When disabled or not configured

The default object identifier is used.

+||| +|--- |--- | +|Policy description|With this policy setting, you can associate an object identifier from a smart card certificate to a BitLocker-protected drive.| +|Introduced|Windows Server 2008 R2 and Windows 7| +|Drive type|Fixed and removable data drives| +|Policy path|Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption| +|Conflicts|None| +|When enabled|The object identifier that is specified in the **Object identifier** setting must match the object identifier in the smart card certificate.| +|When disabled or not configured|The default object identifier is used.| -Reference +**Reference** This policy setting is applied when you turn on BitLocker. @@ -850,50 +483,24 @@ The object identifier is specified in the enhanced key usage (EKU) of a certific The default object identifier is 1.3.6.1.4.1.311.67.1.1. ->**Note:** BitLocker does not require that a certificate have an EKU attribute; however, if one is configured for the certificate, it must be set to an object identifier that matches the object identifier configured for BitLocker. +> [!NOTE] +> BitLocker does not require that a certificate have an EKU attribute; however, if one is configured for the certificate, it must be set to an object identifier that matches the object identifier configured for BitLocker. ### Enable use of BitLocker authentication requiring preboot keyboard input on slates This policy setting allows users to enable authentication options that require user input from the preboot environment even if the platform indicates a lack of preboot input capability. - ---- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Policy description

With this policy setting, you can allow users to enable authentication options that require user input from the preboot environment, even if the platform indicates a lack of preboot input capability.

Introduced

Windows Server 2012 and Windows 8

Drive type

Operating system drive

Policy path

Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Operating System Drive

Conflicts

None

When enabled

Devices must have an alternative means of preboot input (such as an attached USB keyboard).

When disabled or not configured

The Windows Recovery Environment must be enabled on tablets to support entering the BitLocker recovery password.

+||| +|--- |--- | +|Policy description|With this policy setting, you can allow users to enable authentication options that require user input from the preboot environment, even if the platform indicates a lack of preboot input capability.| +|Introduced|Windows Server 2012 and Windows 8| +|Drive type|Operating system drive| +|Policy path|Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Operating System Drive| +|Conflicts|None| +|When enabled|Devices must have an alternative means of preboot input (such as an attached USB keyboard).| +|When disabled or not configured|The Windows Recovery Environment must be enabled on tablets to support entering the BitLocker recovery password.| -Reference +**Reference** The Windows touch keyboard (such as used by tablets) is not available in the preboot environment where BitLocker requires additional information, such as a PIN or password. @@ -911,44 +518,17 @@ If you do not enable this policy setting, the following options in the **Require This policy setting is used to require encryption of fixed drives prior to granting Write access. - ---- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Policy description

With this policy setting, you can set whether BitLocker protection is required for fixed data drives to be writable on a computer.

Introduced

Windows Server 2008 R2 and Windows 7

Drive type

Fixed data drives

Policy path

Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Fixed Data Drives

Conflicts

See the Reference section for a description of conflicts.

When enabled

All fixed data drives that are not BitLocker-protected are mounted as Read-only. If the drive is protected by BitLocker, it is mounted with Read and Write access.

When disabled or not configured

All fixed data drives on the computer are mounted with Read and Write access.

+||| +|--- |--- | +|Policy description|With this policy setting, you can set whether BitLocker protection is required for fixed data drives to be writable on a computer.| +|Introduced|Windows Server 2008 R2 and Windows 7| +|Drive type|Fixed data drives| +|Policy path|Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Fixed Data Drives| +|Conflicts|See the Reference section for a description of conflicts.| +|When enabled|All fixed data drives that are not BitLocker-protected are mounted as Read-only. If the drive is protected by BitLocker, it is mounted with Read and Write access.| +|When disabled or not configured|All fixed data drives on the computer are mounted with Read and Write access.| -Reference +**Reference** This policy setting is applied when you turn on BitLocker. @@ -966,48 +546,22 @@ Conflict considerations include: This policy setting is used to require that removable drives are encrypted prior to granting Write access, and to control whether BitLocker-protected removable drives that were configured in another organization can be opened with Write access. - ---- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Policy description

With this policy setting, you can configure whether BitLocker protection is required for a computer to be able to write data to a removable data drive.

Introduced

Windows Server 2008 R2 and Windows 7

Drive type

Removable data drives

Policy path

Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Removable Data Drives

Conflicts

See the Reference section for a description of conflicts.

When enabled

All removable data drives that are not BitLocker-protected are mounted as Read-only. If the drive is protected by BitLocker, it is mounted with Read and Write access.

When disabled or not configured

All removable data drives on the computer are mounted with Read and Write access.

+||| +|--- |--- | +|Policy description|With this policy setting, you can configure whether BitLocker protection is required for a computer to be able to write data to a removable data drive.| +|Introduced|Windows Server 2008 R2 and Windows 7| +|Drive type|Removable data drives| +|Policy path|Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Removable Data Drives| +|Conflicts|See the Reference section for a description of conflicts.| +|When enabled|All removable data drives that are not BitLocker-protected are mounted as Read-only. If the drive is protected by BitLocker, it is mounted with Read and Write access.| +|When disabled or not configured|All removable data drives on the computer are mounted with Read and Write access.| -Reference +**Reference** If the **Deny write access to devices configured in another organization** option is selected, only drives with identification fields that match the computer's identification fields are given Write access. When a removable data drive is accessed, it is checked for a valid identification field and allowed identification fields. These fields are defined by the **Provide the unique identifiers for your organization** policy setting. ->**Note:** You can override this policy setting with the policy settings under **User Configuration\\Administrative Templates\\System\\Removable Storage Access**. If the **Removable Disks: Deny write access** policy setting is enabled, this policy setting will be ignored. +> [!NOTE] +> You can override this policy setting with the policy settings under **User Configuration\\Administrative Templates\\System\\Removable Storage Access**. If the **Removable Disks: Deny write access** policy setting is enabled, this policy setting will be ignored. Conflict considerations include: @@ -1019,52 +573,22 @@ Conflict considerations include: This policy setting is used to prevent users from turning BitLocker on or off on removable data drives. - ---- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Policy description

With this policy setting, you can control the use of BitLocker on removable data drives.

Introduced

Windows Server 2008 R2 and Windows 7

Drive type

Removable data drives

Policy path

Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Removable Data Drives

Conflicts

None

When enabled

You can select property settings that control how users can configure BitLocker.

When disabled

Users cannot use BitLocker on removable data drives.

When not configured

Users can use BitLocker on removable data drives.

+||| +|--- |--- | +|Policy description|With this policy setting, you can control the use of BitLocker on removable data drives.| +|Introduced|Windows Server 2008 R2 and Windows 7| +|Drive type|Removable data drives| +|Policy path|Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Removable Data Drives| +|Conflicts|None| +|When enabled|You can select property settings that control how users can configure BitLocker.| +|When disabled|Users cannot use BitLocker on removable data drives.| +|When not configured|Users can use BitLocker on removable data drives.| -Reference +**Reference** This policy setting is applied when you turn on BitLocker. -For information about suspending BitLocker protection, see [BitLocker Basic Deployment](https://technet.microsoft.com/library/dn383581.aspx). +For information about suspending BitLocker protection, see [BitLocker Basic Deployment](bitlocker-basic-deployment.md). The options for choosing property settings that control how users can configure BitLocker are: @@ -1075,44 +599,17 @@ The options for choosing property settings that control how users can configure This policy setting is used to control the encryption method and cipher strength. - ---- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Policy description

With this policy setting, you can control the encryption method and strength for drives.

Introduced

Windows Server 2012 and Windows 8

Drive type

All drives

Policy path

Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption

Conflicts

None

When enabled

You can choose an encryption algorithm and key cipher strength for BitLocker to use to encrypt drives.

When disabled or not configured

Beginning with Windows 10, version 1511, BitLocker uses the default encryption method of XTS-AES 128-bit or the encryption method that is specified by the setup script. Windows Phone does not support XTS; it uses AES-CBC 128-bit by default and supports AES-CBC 256-bit by policy.

+||| +|--- |--- | +|Policy description|With this policy setting, you can control the encryption method and strength for drives.| +|Introduced|Windows Server 2012 and Windows 8| +|Drive type|All drives| +|Policy path|Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption| +|Conflicts|None| +|When enabled|You can choose an encryption algorithm and key cipher strength for BitLocker to use to encrypt drives.| +|When disabled or not configured|Beginning with Windows 10, version 1511, BitLocker uses the default encryption method of XTS-AES 128-bit or the encryption method that is specified by the setup script. Windows Phone does not support XTS; it uses AES-CBC 128-bit by default and supports AES-CBC 256-bit by policy.| -Reference +**Reference** The values of this policy determine the strength of the cipher that BitLocker uses for encryption. Enterprises may want to control the encryption level for increased security (AES-256 is stronger than AES-128). @@ -1123,7 +620,8 @@ For removable drives, you should use AES-CBC 128-bit or AES-CBC 256-bit if the d Changing the encryption method has no effect if the drive is already encrypted or if encryption is in progress. In these cases, this policy setting is ignored. ->**Warning:** This policy does not apply to encrypted drives. Encrypted drives utilize their own algorithm, which is set by the drive during partitioning. +> [!WARNING] +> This policy does not apply to encrypted drives. Encrypted drives utilize their own algorithm, which is set by the drive during partitioning. When this policy setting is disabled or not configured, BitLocker will use the default encryption method of XTS-AES 128-bit or the encryption method that is specified in the setup script. @@ -1131,51 +629,21 @@ When this policy setting is disabled or not configured, BitLocker will use the d This policy controls how BitLocker reacts to systems that are equipped with encrypted drives when they are used as fixed data volumes. Using hardware-based encryption can improve the performance of drive operations that involve frequent reading or writing of data to the drive. - ---- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Policy description

With this policy setting, you can manage BitLocker’s use of hardware-based encryption on fixed data drives and to specify which encryption algorithms BitLocker can use with hardware-based encryption.

Introduced

Windows Server 2012 and Windows 8

Drive type

Fixed data drives

Policy path

Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Fixed Data Drives

Conflicts

None

When enabled

You can specify additional options that control whether BitLocker software-based encryption is used instead of hardware-based encryption on computers that do not support hardware-based encryption. You can also specify whether you want to restrict the encryption algorithms and cipher suites that are used with hardware-based encryption.

When disabled

BitLocker cannot use hardware-based encryption with fixed data drives, and BitLocker software-based encryption is used by default when the drive in encrypted.

When not configured

BitLocker software-based encryption is used irrespective of hardware-based encryption ability. -

+||| +|--- |--- | +|Policy description|With this policy setting, you can manage BitLocker’s use of hardware-based encryption on fixed data drives and to specify which encryption algorithms BitLocker can use with hardware-based encryption.| +|Introduced|Windows Server 2012 and Windows 8| +|Drive type|Fixed data drives| +|Policy path|Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Fixed Data Drives| +|Conflicts|None| +|When enabled|You can specify additional options that control whether BitLocker software-based encryption is used instead of hardware-based encryption on computers that do not support hardware-based encryption. You can also specify whether you want to restrict the encryption algorithms and cipher suites that are used with hardware-based encryption.| +|When disabled|BitLocker cannot use hardware-based encryption with fixed data drives, and BitLocker software-based encryption is used by default when the drive in encrypted.| +|When not configured|BitLocker software-based encryption is used irrespective of hardware-based encryption ability.| -Reference +**Reference** ->**Note:** The **Choose drive encryption method and cipher strength** policy setting does not apply to hardware-based encryption. +> [!NOTE] +> The **Choose drive encryption method and cipher strength** policy setting does not apply to hardware-based encryption. The encryption algorithm that is used by hardware-based encryption is set when the drive is partitioned. By default, BitLocker uses the algorithm that is configured on the drive to encrypt the drive. The **Restrict encryption algorithms and cipher suites allowed for hardware-based encryption** option of this setting enables you to restrict the encryption algorithms that BitLocker can use with hardware encryption. If the algorithm that is set for the drive is not available, BitLocker disables the use of hardware-based encryption. Encryption algorithms are specified by object identifiers (OID), for example: @@ -1186,52 +654,23 @@ The encryption algorithm that is used by hardware-based encryption is set when t This policy controls how BitLocker reacts when encrypted drives are used as operating system drives. Using hardware-based encryption can improve the performance of drive operations that involve frequent reading or writing of data to the drive. - ---- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Policy description

With this policy setting, you can manage BitLocker’s use of hardware-based encryption on operating system drives and specify which encryption algorithms it can use with hardware-based encryption.

Introduced

Windows Server 2012 and Windows 8

Drive type

Operating system drives

Policy path

Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Operating System Drives

Conflicts

None

When enabled

You can specify additional options that control whether BitLocker software-based encryption is used instead of hardware-based encryption on computers that do not support hardware-based encryption. You can also specify whether you want to restrict the encryption algorithms and cipher suites that are used with hardware-based encryption.

When disabled

BitLocker cannot use hardware-based encryption with operating system drives, and BitLocker software-based encryption is used by default when the drive in encrypted.

When not configured

BitLocker software-based encryption is used irrespective of hardware-based encryption ability.

+||| +|--- |--- | +|Policy description|With this policy setting, you can manage BitLocker’s use of hardware-based encryption on operating system drives and specify which encryption algorithms it can use with hardware-based encryption.| +|Introduced|Windows Server 2012 and Windows 8| +|Drive type|Operating system drives| +|Policy path|Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Operating System Drives| +|Conflicts|None| +|When enabled|You can specify additional options that control whether BitLocker software-based encryption is used instead of hardware-based encryption on computers that do not support hardware-based encryption. You can also specify whether you want to restrict the encryption algorithms and cipher suites that are used with hardware-based encryption.| +|When disabled|BitLocker cannot use hardware-based encryption with operating system drives, and BitLocker software-based encryption is used by default when the drive in encrypted.| +|When not configured|BitLocker software-based encryption is used irrespective of hardware-based encryption ability.| -Reference +**Reference** If hardware-based encryption is not available, BitLocker software-based encryption is used instead. ->**Note:** The **Choose drive encryption method and cipher strength** policy setting does not apply to hardware-based encryption. +> [!NOTE] +> The **Choose drive encryption method and cipher strength** policy setting does not apply to hardware-based encryption. The encryption algorithm that is used by hardware-based encryption is set when the drive is partitioned. By default, BitLocker uses the algorithm that is configured on the drive to encrypt the drive. The **Restrict encryption algorithms and cipher suites allowed for hardware-based encryption** option of this setting enables you to restrict the encryption algorithms that BitLocker can use with hardware encryption. If the algorithm that is set for the drive is not available, BitLocker disables the use of hardware-based encryption. Encryption algorithms are specified by object identifiers (OID), for example: @@ -1242,52 +681,23 @@ The encryption algorithm that is used by hardware-based encryption is set when t This policy controls how BitLocker reacts to encrypted drives when they are used as removable data drives. Using hardware-based encryption can improve the performance of drive operations that involve frequent reading or writing of data to the drive. - ---- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Policy description

With this policy setting, you can manage BitLocker’s use of hardware-based encryption on removable data drives and specify which encryption algorithms it can use with hardware-based encryption.

Introduced

Windows Server 2012 and Windows 8

Drive type

Removable data drive

Policy path

Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Removable Data Drives

Conflicts

None

When enabled

You can specify additional options that control whether BitLocker software-based encryption is used instead of hardware-based encryption on computers that do not support hardware-based encryption. You can also specify whether you want to restrict the encryption algorithms and cipher suites that are used with hardware-based encryption.

When disabled

BitLocker cannot use hardware-based encryption with removable data drives, and BitLocker software-based encryption is used by default when the drive in encrypted.

When not configured

BitLocker software-based encryption is used irrespective of hardware-based encryption ability.

+||| +|--- |--- | +|Policy description|With this policy setting, you can manage BitLocker’s use of hardware-based encryption on removable data drives and specify which encryption algorithms it can use with hardware-based encryption.| +|Introduced|Windows Server 2012 and Windows 8| +|Drive type|Removable data drive| +|Policy path|Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Removable Data Drives| +|Conflicts|None| +|When enabled|You can specify additional options that control whether BitLocker software-based encryption is used instead of hardware-based encryption on computers that do not support hardware-based encryption. You can also specify whether you want to restrict the encryption algorithms and cipher suites that are used with hardware-based encryption.| +|When disabled|BitLocker cannot use hardware-based encryption with removable data drives, and BitLocker software-based encryption is used by default when the drive in encrypted.| +|When not configured|BitLocker software-based encryption is used irrespective of hardware-based encryption ability.| -Reference +**Reference** If hardware-based encryption is not available, BitLocker software-based encryption is used instead. ->**Note:** The **Choose drive encryption method and cipher strength** policy setting does not apply to hardware-based encryption. +> [!NOTE] +> The **Choose drive encryption method and cipher strength** policy setting does not apply to hardware-based encryption. The encryption algorithm that is used by hardware-based encryption is set when the drive is partitioned. By default, BitLocker uses the algorithm that is configured on the drive to encrypt the drive. The **Restrict encryption algorithms and cipher suites allowed for hardware-based encryption** option of this setting enables you to restrict the encryption algorithms that BitLocker can use with hardware encryption. If the algorithm that is set for the drive is not available, BitLocker disables the use of hardware-based encryption. Encryption algorithms are specified by object identifiers (OID), for example: @@ -1298,192 +708,86 @@ The encryption algorithm that is used by hardware-based encryption is set when t This policy controls whether fixed data drives utilize Used Space Only encryption or Full encryption. Setting this policy also causes the BitLocker Setup Wizard to skip the encryption options page so no encryption selection displays to the user. - ---- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Policy description

With this policy setting, you can configure the encryption type that is used by BitLocker.

Introduced

Windows Server 2012 and Windows 8

Drive type

Fixed data drive

Policy path

Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Fixed Data Drives

Conflicts

None

When enabled

This policy defines the encryption type that BitLocker uses to encrypt drives, and the encryption type option is not presented in the BitLocker Setup Wizard.

When disabled or not configured

The BitLocker Setup Wizard asks the user to select the encryption type before turning on BitLocker.

+||| +|--- |--- | +|Policy description|With this policy setting, you can configure the encryption type that is used by BitLocker.| +|Introduced|Windows Server 2012 and Windows 8| +|Drive type|Fixed data drive| +|Policy path|Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Fixed Data Drives| +|Conflicts|None| +|When enabled|This policy defines the encryption type that BitLocker uses to encrypt drives, and the encryption type option is not presented in the BitLocker Setup Wizard.| +|When disabled or not configured|The BitLocker Setup Wizard asks the user to select the encryption type before turning on BitLocker.| -Reference +**Reference** This policy setting is applied when you turn on BitLocker. Changing the encryption type has no effect if the drive is already encrypted or if encryption is in progress. Choose Full encryption to require that the entire drive be encrypted when BitLocker is turned on. Choose Used Space Only encryption to require that only the portion of the drive that is used to store data is encrypted when BitLocker is turned on. ->**Note:** This policy is ignored when you are shrinking or expanding a volume and the BitLocker driver uses the current encryption method. For example, when a drive that is using Used Space Only encryption is expanded, the new free space is not wiped as it would be for a drive that is using Full encryption. The user could wipe the free space on a Used Space Only drive by using the following command: **manage-bde -w**. If the volume is shrunk, no action is taken for the new free space. +> [!NOTE] +> This policy is ignored when you are shrinking or expanding a volume and the BitLocker driver uses the current encryption method. For example, when a drive that is using Used Space Only encryption is expanded, the new free space is not wiped as it would be for a drive that is using Full encryption. The user could wipe the free space on a Used Space Only drive by using the following command: **manage-bde -w**. If the volume is shrunk, no action is taken for the new free space. -For more information about the tool to manage BitLocker, see [Manage-bde](https://technet.microsoft.com/library/ff829849.aspx). +For more information about the tool to manage BitLocker, see [Manage-bde](/windows-server/administration/windows-commands/manage-bde). ### Enforce drive encryption type on operating system drives This policy controls whether operating system drives utilize Full encryption or Used Space Only encryption. Setting this policy also causes the BitLocker Setup Wizard to skip the encryption options page, so no encryption selection displays to the user. - ---- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Policy description

With this policy setting, you can configure the encryption type that is used by BitLocker.

Introduced

Windows Server 2012 and Windows 8

Drive type

Operating system drive

Policy path

Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Operating System Drives

Conflicts

None

When enabled

The encryption type that BitLocker uses to encrypt drives is defined by this policy, and the encryption type option is not presented in the BitLocker Setup Wizard.

When disabled or not configured

The BitLocker Setup Wizard asks the user to select the encryption type before turning on BitLocker.

+||| +|--- |--- | +|Policy description|With this policy setting, you can configure the encryption type that is used by BitLocker.| +|Introduced|Windows Server 2012 and Windows 8| +|Drive type|Operating system drive| +|Policy path|Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Operating System Drives| +|Conflicts|None| +|When enabled|The encryption type that BitLocker uses to encrypt drives is defined by this policy, and the encryption type option is not presented in the BitLocker Setup Wizard.| +|When disabled or not configured|The BitLocker Setup Wizard asks the user to select the encryption type before turning on BitLocker.| -Reference +**Reference** This policy setting is applied when you turn on BitLocker. Changing the encryption type has no effect if the drive is already encrypted or if encryption is in progress. Choose Full encryption to require that the entire drive be encrypted when BitLocker is turned on. Choose Used Space Only encryption to require that only the portion of the drive that is used to store data is encrypted when BitLocker is turned on. ->**Note:** This policy is ignored when shrinking or expanding a volume, and the BitLocker driver uses the current encryption method. For example, when a drive that is using Used Space Only encryption is expanded, the new free space is not wiped as it would be for a drive that uses Full encryption. The user could wipe the free space on a Used Space Only drive by using the following command: **manage-bde -w**. If the volume is shrunk, no action is taken for the new free space. +> [!NOTE] +> This policy is ignored when shrinking or expanding a volume, and the BitLocker driver uses the current encryption method. For example, when a drive that is using Used Space Only encryption is expanded, the new free space is not wiped as it would be for a drive that uses Full encryption. The user could wipe the free space on a Used Space Only drive by using the following command: **manage-bde -w**. If the volume is shrunk, no action is taken for the new free space. -For more information about the tool to manage BitLocker, see [Manage-bde](https://technet.microsoft.com/library/ff829849.aspx). +For more information about the tool to manage BitLocker, see [Manage-bde](/windows-server/administration/windows-commands/manage-bde). ### Enforce drive encryption type on removable data drives This policy controls whether fixed data drives utilize Full encryption or Used Space Only encryption. Setting this policy also causes the BitLocker Setup Wizard to skip the encryption options page, so no encryption selection displays to the user. - ---- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Policy description

With this policy setting, you can configure the encryption type that is used by BitLocker.

Introduced

Windows Server 2012 and Windows 8

Drive type

Removable data drive

Policy path

Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Removable Data Drives

Conflicts

None

When enabled

The encryption type that BitLocker uses to encrypt drives is defined by this policy, and the encryption type option is not presented in the BitLocker Setup Wizard.

When disabled or not configured

The BitLocker Setup Wizard asks the user to select the encryption type before turning on BitLocker.

+||| +|--- |--- | +|Policy description|With this policy setting, you can configure the encryption type that is used by BitLocker.| +|Introduced|Windows Server 2012 and Windows 8| +|Drive type|Removable data drive| +|Policy path|Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Removable Data Drives| +|Conflicts|None| +|When enabled|The encryption type that BitLocker uses to encrypt drives is defined by this policy, and the encryption type option is not presented in the BitLocker Setup Wizard.| +|When disabled or not configured|The BitLocker Setup Wizard asks the user to select the encryption type before turning on BitLocker.| -Reference +**Reference** This policy setting is applied when you turn on BitLocker. Changing the encryption type has no effect if the drive is already encrypted or if encryption is in progress. Choose Full encryption to require that the entire drive be encrypted when BitLocker is turned on. Choose Used Space Only encryption to require that only the portion of the drive that is used to store data is encrypted when BitLocker is turned on. ->**Note:** This policy is ignored when shrinking or expanding a volume, and the BitLocker driver uses the current encryption method. For example, when a drive that is using Used Space Only encryption is expanded, the new free space is not wiped as it would be for a drive that is using Full Encryption. The user could wipe the free space on a Used Space Only drive by using the following command: **manage-bde -w**. If the volume is shrunk, no action is taken for the new free space. +> [!NOTE] +> This policy is ignored when shrinking or expanding a volume, and the BitLocker driver uses the current encryption method. For example, when a drive that is using Used Space Only encryption is expanded, the new free space is not wiped as it would be for a drive that is using Full Encryption. The user could wipe the free space on a Used Space Only drive by using the following command: **manage-bde -w**. If the volume is shrunk, no action is taken for the new free space. -For more information about the tool to manage BitLocker, see [Manage-bde](https://technet.microsoft.com/library/ff829849.aspx). +For more information about the tool to manage BitLocker, see [Manage-bde](/windows-server/administration/windows-commands/manage-bde). ### Choose how BitLocker-protected operating system drives can be recovered This policy setting is used to configure recovery methods for operating system drives. - ---- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Policy description

With this policy setting, you can control how BitLocker-protected operating system drives are recovered in the absence of the required startup key information.

Introduced

Windows Server 2008 R2 and Windows 7

Drive type

Operating system drives

Policy path

Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Operating System Drives

Conflicts

You must disallow the use of recovery keys if the Deny write access to removable drives not protected by BitLocker policy setting is enabled.

-

When using data recovery agents, you must enable the Provide the unique identifiers for your organization policy setting.

When enabled

You can control the methods that are available to users to recover data from BitLocker-protected operating system drives.

When disabled or not configured

The default recovery options are supported for BitLocker recovery. By default, a data recovery agent is allowed, the recovery options can be specified by the user (including the recovery password and recovery key), and recovery information is not backed up to AD DS.

+||| +|--- |--- | +|Policy description|With this policy setting, you can control how BitLocker-protected operating system drives are recovered in the absence of the required startup key information.| +|Introduced|Windows Server 2008 R2 and Windows 7| +|Drive type|Operating system drives| +|Policy path|Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Operating System Drives| +|Conflicts|You must disallow the use of recovery keys if the **Deny write access to removable drives not protected by BitLocker** policy setting is enabled.

When using data recovery agents, you must enable the **Provide the unique identifiers for your organization** policy setting.| +|When enabled|You can control the methods that are available to users to recover data from BitLocker-protected operating system drives.| +|When disabled or not configured|The default recovery options are supported for BitLocker recovery. By default, a data recovery agent is allowed, the recovery options can be specified by the user (including the recovery password and recovery key), and recovery information is not backed up to AD DS.| -Reference +**Reference** This policy setting is applied when you turn on BitLocker. @@ -1500,50 +804,24 @@ In **Save BitLocker recovery information to Active Directory Domain Services**, Select the **Do not enable BitLocker until recovery information is stored in AD DS for operating system drives** check box if you want to prevent users from enabling BitLocker unless the computer is connected to the domain and the backup of BitLocker recovery information to AD DS succeeds. ->**Note:** If the **Do not enable BitLocker until recovery information is stored in AD DS for operating system drives** check box is selected, a recovery password is automatically generated. +> [!NOTE] +> If the **Do not enable BitLocker until recovery information is stored in AD DS for operating system drives** check box is selected, a recovery password is automatically generated. ### Choose how users can recover BitLocker-protected drives (Windows Server 2008 and Windows Vista) This policy setting is used to configure recovery methods for BitLocker-protected drives on computers running Windows Server 2008 or Windows Vista. - ---- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Policy description

With this policy setting, you can control whether the BitLocker Setup Wizard can display and specify BitLocker recovery options.

Introduced

Windows Server 2008 and Windows Vista

Drive type

Operating system drives and fixed data drives on computers running Windows Server 2008 and Windows Vista

Policy path

Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption

Conflicts

This policy setting provides an administrative method of recovering data that is encrypted by BitLocker to prevent data loss due to lack of key information. If you choose the Do not allow option for both user recovery options, you must enable the Store BitLocker recovery information in Active Directory Domain Services (Windows Server 2008 and Windows Vista) policy setting to prevent a policy error.

When enabled

You can configure the options that the Bitlocker Setup Wizard displays to users for recovering BitLocker encrypted data.

When disabled or not configured

The BitLocker Setup Wizard presents users with ways to store recovery options.

+||| +|--- |--- | +|Policy description|With this policy setting, you can control whether the BitLocker Setup Wizard can display and specify BitLocker recovery options.| +|Introduced|Windows Server 2008 and Windows Vista| +|Drive type|Operating system drives and fixed data drives on computers running Windows Server 2008 and Windows Vista| +|Policy path|Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption| +|Conflicts|This policy setting provides an administrative method of recovering data that is encrypted by BitLocker to prevent data loss due to lack of key information. If you choose the **Do not allow** option for both user recovery options, you must enable the **Store BitLocker recovery information in Active Directory Domain Services (Windows Server 2008 and Windows Vista)** policy setting to prevent a policy error.| +|When enabled|You can configure the options that the Bitlocker Setup Wizard displays to users for recovering BitLocker encrypted data.| +|When disabled or not configured|The BitLocker Setup Wizard presents users with ways to store recovery options.| -Reference +**Reference** This policy is only applicable to computers running Windows Server 2008 or Windows Vista. This policy setting is applied when you turn on BitLocker. @@ -1551,53 +829,28 @@ Two recovery options can be used to unlock BitLocker-encrypted data in the absen Saving the recovery password to a USB drive stores the 48-digit recovery password as a text file and the 256-bit recovery key as a hidden file. Saving it to a folder stores the 48-digit recovery password as a text file. Printing it sends the 48-digit recovery password to the default printer. For example, not allowing the 48-digit recovery password prevents users from printing or saving recovery information to a folder. -> **Important:** If TPM initialization is performed during the BitLocker setup, TPM owner information is saved or printed with the BitLocker recovery information. +> [!IMPORTANT] +> If TPM initialization is performed during the BitLocker setup, TPM owner information is saved or printed with the BitLocker recovery information. > The 48-digit recovery password is not available in FIPS-compliance mode. -> -> **Important:** To prevent data loss, you must have a way to recover BitLocker encryption keys. If you do not allow both recovery options, you must enable the backup of BitLocker recovery information to AD DS. Otherwise, a policy error occurs. + +> [!IMPORTANT] +> To prevent data loss, you must have a way to recover BitLocker encryption keys. If you do not allow both recovery options, you must enable the backup of BitLocker recovery information to AD DS. Otherwise, a policy error occurs. ### Store BitLocker recovery information in Active Directory Domain Services (Windows Server 2008 and Windows Vista) This policy setting is used to configure the storage of BitLocker recovery information in AD DS. This provides an administrative method of recovering data that is encrypted by BitLocker to prevent data loss due to lack of key information. - ---- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Policy description

With this policy setting, you can manage the AD DS backup of BitLocker Drive Encryption recovery information.

Introduced

Windows Server 2008 and Windows Vista

Drive type

Operating system drives and fixed data drives on computers running Windows Server 2008 and Windows Vista.

Policy path

Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption

Conflicts

None

When enabled

BitLocker recovery information is automatically and silently backed up to AD DS when BitLocker is turned on for a computer.

When disabled or not configured

BitLocker recovery information is not backed up to AD DS.

+||| +|--- |--- | +|Policy description|With this policy setting, you can manage the AD DS backup of BitLocker Drive Encryption recovery information.| +|Introduced|Windows Server 2008 and Windows Vista| +|Drive type|Operating system drives and fixed data drives on computers running Windows Server 2008 and Windows Vista.| +|Policy path|Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption| +|Conflicts|None| +|When enabled|BitLocker recovery information is automatically and silently backed up to AD DS when BitLocker is turned on for a computer.| +|When disabled or not configured|BitLocker recovery information is not backed up to AD DS.| -Reference +**Reference** This policy is only applicable to computers running Windows Server 2008 or Windows Vista. @@ -1618,92 +871,38 @@ For more information about this setting, see [TPM Group Policy settings](/window This policy setting is used to configure the default folder for recovery passwords. - ---- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Policy description

With this policy setting, you can specify the default path that is displayed when the BitLocker Setup Wizard prompts the user to enter the location of a folder in which to save the recovery password.

Introduced

Windows Vista

Drive type

All drives

Policy path

Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption

Conflicts

None

When enabled

You can specify the path that will be used as the default folder location when the user chooses the option to save the recovery password in a folder. You can specify a fully qualified path or include the target computer's environment variables in the path. If the path is not valid, the BitLocker Setup Wizard displays the computer's top-level folder view.

When disabled or not configured

The BitLocker Setup Wizard displays the computer's top-level folder view when the user chooses the option to save the recovery password in a folder.

+||| +|--- |--- | +|Policy description|With this policy setting, you can specify the default path that is displayed when the BitLocker Setup Wizard prompts the user to enter the location of a folder in which to save the recovery password.| +|Introduced|Windows Vista| +|Drive type|All drives| +|Policy path|Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption| +|Conflicts|None| +|When enabled|You can specify the path that will be used as the default folder location when the user chooses the option to save the recovery password in a folder. You can specify a fully qualified path or include the target computer's environment variables in the path. If the path is not valid, the BitLocker Setup Wizard displays the computer's top-level folder view.| +|When disabled or not configured|The BitLocker Setup Wizard displays the computer's top-level folder view when the user chooses the option to save the recovery password in a folder.| -Reference +**Reference** This policy setting is applied when you turn on BitLocker. ->**Note:** This policy setting does not prevent the user from saving the recovery password in another folder. +> [!NOTE] +> This policy setting does not prevent the user from saving the recovery password in another folder. ### Choose how BitLocker-protected fixed drives can be recovered This policy setting is used to configure recovery methods for fixed data drives. - ---- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Policy description

With this policy setting, you can control how BitLocker-protected fixed data drives are recovered in the absence of the required credentials.

Introduced

Windows Server 2008 R2 and Windows 7

Drive type

Fixed data drives

Policy path

Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Fixed Data Drives

Conflicts

You must disallow the use of recovery keys if the Deny write access to removable drives not protected by BitLocker policy setting is enabled.

-

When using data recovery agents, you must enable and configure the Provide the unique identifiers for your organization policy setting.

When enabled

You can control the methods that are available to users to recover data from BitLocker-protected fixed data drives.

When disabled or not configured

The default recovery options are supported for BitLocker recovery. By default, a data recovery agent is allowed, the recovery options can be specified by the user (including the recovery password and recovery key), and recovery information is not backed up to AD DS.

+||| +|--- |--- | +|Policy description|With this policy setting, you can control how BitLocker-protected fixed data drives are recovered in the absence of the required credentials.| +|Introduced|Windows Server 2008 R2 and Windows 7| +|Drive type|Fixed data drives| +|Policy path|Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Fixed Data Drives| +|Conflicts|You must disallow the use of recovery keys if the **Deny write access to removable drives not protected by BitLocker** policy setting is enabled.

When using data recovery agents, you must enable and configure the **Provide the unique identifiers for your organization** policy setting.| +|When enabled|You can control the methods that are available to users to recover data from BitLocker-protected fixed data drives.| +|When disabled or not configured|The default recovery options are supported for BitLocker recovery. By default, a data recovery agent is allowed, the recovery options can be specified by the user (including the recovery password and recovery key), and recovery information is not backed up to AD DS.| -Reference +**Reference** This policy setting is applied when you turn on BitLocker. @@ -1716,55 +915,29 @@ Select **Omit recovery options from the BitLocker setup wizard** to prevent user In **Save BitLocker recovery information to Active Directory Domain Services**, choose which BitLocker recovery information to store in AD DS for fixed data drives. If you select **Backup recovery password and key package**, the BitLocker recovery password and the key package are stored in AD DS. Storing the key package supports recovering data from a drive that has been physically corrupted. To recover this data, you can use the **Repair-bde** command-line tool. If you select **Backup recovery password only**, only the recovery password is stored in AD DS. -For more information about the BitLocker repair tool, see [Repair-bde](https://technet.microsoft.com/library/ff829851.aspx). +For more information about the BitLocker repair tool, see [Repair-bde](/windows-server/administration/windows-commands/repair-bde). Select the **Do not enable BitLocker until recovery information is stored in AD DS for fixed data drives** check box if you want to prevent users from enabling BitLocker unless the computer is connected to the domain and the backup of BitLocker recovery information to AD DS succeeds. ->**Note:** If the **Do not enable BitLocker until recovery information is stored in AD DS for fixed data drives** check box is selected, a recovery password is automatically generated. +> [!NOTE] +> If the **Do not enable BitLocker until recovery information is stored in AD DS for fixed data drives** check box is selected, a recovery password is automatically generated. ### Choose how BitLocker-protected removable drives can be recovered This policy setting is used to configure recovery methods for removable data drives. - ---- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Policy description

With this policy setting, you can control how BitLocker-protected removable data drives are recovered in the absence of the required credentials.

Introduced

Windows Server 2008 R2 and Windows 7

Drive type

Removable data drives

Policy path

Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Removable Data Drives

Conflicts

You must disallow the use of recovery keys if the Deny write access to removable drives not protected by BitLocker policy setting is enabled.

-

When using data recovery agents, you must enable and configure the Provide the unique identifiers for your organization policy setting.

When enabled

You can control the methods that are available to users to recover data from BitLocker-protected removable data drives.

When disabled or not configured

The default recovery options are supported for BitLocker recovery. By default, a data recovery agent is allowed, the recovery options can be specified by the user (including the recovery password and recovery key), and recovery information is not backed up to AD DS.

+||| +|--- |--- | +|Policy description|With this policy setting, you can control how BitLocker-protected removable data drives are recovered in the absence of the required credentials.| +|Introduced|Windows Server 2008 R2 and Windows 7| +|Drive type|Removable data drives| +|Policy path|Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Removable Data Drives| +|Conflicts|You must disallow the use of recovery keys if the **Deny write access to removable drives not protected by BitLocker** policy setting is enabled. +When using data recovery agents, you must enable and configure the **Provide the unique identifiers for your organization** policy setting.| +|When enabled|You can control the methods that are available to users to recover data from BitLocker-protected removable data drives.| +|When disabled or not configured|The default recovery options are supported for BitLocker recovery. By default, a data recovery agent is allowed, the recovery options can be specified by the user (including the recovery password and recovery key), and recovery information is not backed up to AD DS.| -Reference +**Reference** This policy setting is applied when you turn on BitLocker. @@ -1778,50 +951,24 @@ In **Save BitLocker recovery information to Active Directory Domain Services**, Select the **Do not enable BitLocker until recovery information is stored in AD DS for removable data drives** check box if you want to prevent users from enabling BitLocker unless the computer is connected to the domain and the backup of BitLocker recovery information to AD DS succeeds. ->**Note:** If the **Do not enable BitLocker until recovery information is stored in AD DS for fixed data drives** check box is selected, a recovery password is automatically generated. +> [!NOTE] +> If the **Do not enable BitLocker until recovery information is stored in AD DS for fixed data drives** check box is selected, a recovery password is automatically generated. ### Configure the pre-boot recovery message and URL This policy setting is used to configure the entire recovery message and to replace the existing URL that is displayed on the pre-boot recovery screen when the operating system drive is locked. - ---- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Policy description

With this policy setting, you can configure the BitLocker recovery screen to display a customized message and URL.

Introduced

Windows 10

Drive type

Operating system drives

Policy path

Computer Configuration \ Administrative Templates \ Windows Components \ BitLocker Drive Encryption \ Operating System Drives \ Configure pre-boot recovery message and URL

Conflicts

None

When enabled

The customized message and URL are displayed on the pre-boot recovery screen. If you have previously enabled a custom recovery message and URL and want to revert to the default message and URL, you must keep the policy setting enabled and select the Use default recovery message and URL option.

When disabled or not configured

If the setting has not been previously enabled the default pre-boot recovery screen is displayed for BitLocker recovery. If the setting previously was enabled and is subsequently disabled the last message in Boot Configuration Data (BCD) is displayed whether it was the default recovery message or the custom message.

+||| +|--- |--- | +|Policy description|With this policy setting, you can configure the BitLocker recovery screen to display a customized message and URL.| +|Introduced|Windows 10| +|Drive type|Operating system drives| +|Policy path|Computer Configuration \ Administrative Templates \ Windows Components \ BitLocker Drive Encryption \ Operating System Drives \ Configure pre-boot recovery message and URL| +|Conflicts|None| +|When enabled|The customized message and URL are displayed on the pre-boot recovery screen. If you have previously enabled a custom recovery message and URL and want to revert to the default message and URL, you must keep the policy setting enabled and select the **Use default recovery message and URL** option.| +|When disabled or not configured|If the setting has not been previously enabled the default pre-boot recovery screen is displayed for BitLocker recovery. If the setting previously was enabled and is subsequently disabled the last message in Boot Configuration Data (BCD) is displayed whether it was the default recovery message or the custom message.| -Reference +**Reference** Enabling the **Configure the pre-boot recovery message and URL** policy setting allows you to customize the default recovery screen message and URL to assist customers in recovering their key. @@ -1831,111 +978,59 @@ Once you enable the setting you have three options: - If you select the **Use custom recovery message** option, type the custom message in the **Custom recovery message option** text box. The message that you type in the **Custom recovery message option** text box will be displayed on the pre-boot recovery screen. If a recovery URL is available, include it in the message. - If you select the **Use custom recovery URL** option, type the custom message URL in the **Custom recovery URL option** text box. The URL that you type in the **Custom recovery URL option** text box replaces the default URL in the default recovery message, which will be displayed on the pre-boot recovery screen. -> **Important:** Not all characters and languages are supported in the pre-boot environment. We strongly recommended that you verify the correct appearance of the characters that you use for the custom message and URL on the pre-boot recovery screen. -> -> **Important:** Because you can alter the BCDEdit commands manually before you have set Group Policy settings, you cannot return the policy setting to the default setting by selecting the **Not Configured** option after you have configured this policy setting. To return to the default pre-boot recovery screen leave the policy setting enabled and select the **Use default message** options from the **Choose an option for the pre-boot recovery message** drop-down list box. +> [!IMPORTANT] +> Not all characters and languages are supported in the pre-boot environment. We strongly recommended that you verify the correct appearance of the characters that you use for the custom message and URL on the pre-boot recovery screen. + +> [!IMPORTANT] +> Because you can alter the BCDEdit commands manually before you have set Group Policy settings, you cannot return the policy setting to the default setting by selecting the **Not Configured** option after you have configured this policy setting. To return to the default pre-boot recovery screen leave the policy setting enabled and select the **Use default message** options from the **Choose an option for the pre-boot recovery message** drop-down list box. ### Allow Secure Boot for integrity validation This policy controls how BitLocker-enabled system volumes are handled in conjunction with the Secure Boot feature. Enabling this feature forces Secure Boot validation during the boot process and verifies Boot Configuration Data (BCD) settings according to the Secure Boot policy. - ---- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Policy description

With this policy setting, you can configure whether Secure Boot will be allowed as the platform integrity provider for BitLocker operating system drives.

Introduced

Windows Server 2012 and Windows 8

Drive type

All drives

Policy path

Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Operating System Drives

Conflicts

If you enable Allow Secure Boot for integrity validation, make sure the Configure TPM platform validation profile for native UEFI firmware configurations Group Policy setting is not enabled or include PCR 7 to allow BitLocker to use Secure Boot for platform or BCD integrity validation.

-

For more information about PCR 7, see Platform Configuration Register (PCR) in this topic.

When enabled or not configured

BitLocker uses Secure Boot for platform integrity if the platform is capable of Secure Boot-based integrity validation.

When disabled

BitLocker uses legacy platform integrity validation, even on systems that are capable of Secure Boot-based integrity validation.

+||| +|--- |--- | +|Policy description|With this policy setting, you can configure whether Secure Boot will be allowed as the platform integrity provider for BitLocker operating system drives.| +|Introduced|Windows Server 2012 and Windows 8| +|Drive type|All drives| +|Policy path|Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Operating System Drives| +|Conflicts|If you enable **Allow Secure Boot for integrity validation**, make sure the **Configure TPM platform validation profile for native UEFI firmware configurations** Group Policy setting is not enabled or include PCR 7 to allow BitLocker to use Secure Boot for platform or BCD integrity validation.

For more information about PCR 7, see [Platform Configuration Register (PCR)](#bkmk-pcr) in this topic.| +|When enabled or not configured|BitLocker uses Secure Boot for platform integrity if the platform is capable of Secure Boot-based integrity validation.| +|When disabled|BitLocker uses legacy platform integrity validation, even on systems that are capable of Secure Boot-based integrity validation.| -Reference +**Reference** Secure Boot ensures that the computer's preboot environment loads only firmware that is digitally signed by authorized software publishers. Secure Boot also provides more flexibility for managing preboot configurations than BitLocker integrity checks prior to Windows Server 2012 and Windows 8. When this policy is enabled and the hardware is capable of using Secure Boot for BitLocker scenarios, the **Use enhanced Boot Configuration Data validation profile** Group Policy setting is ignored, and Secure Boot verifies BCD settings according to the Secure Boot policy setting, which is configured separately from BitLocker. ->**Warning:** Disabling this policy might result in BitLocker recovery when manufacturer-specific firmware is updated. If you disable this policy, suspend BitLocker prior to applying firmware updates. +> [!WARNING] +> Disabling this policy might result in BitLocker recovery when manufacturer-specific firmware is updated. If you disable this policy, suspend BitLocker prior to applying firmware updates. ### Provide the unique identifiers for your organization This policy setting is used to establish an identifier that is applied to all drives that are encrypted in your organization. - ---- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Policy description

With this policy setting, you can associate unique organizational identifiers to a new drive that is enabled with BitLocker.

Introduced

Windows Server 2008 R2 and Windows 7

Drive type

All drives

Policy path

Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption

Conflicts

Identification fields are required to manage certificate-based data recovery agents on BitLocker-protected drives. BitLocker manages and updates certificate-based data recovery agents only when the identification field is present on a drive and it is identical to the value that is configured on the computer.

When enabled

You can configure the identification field on the BitLocker-protected drive and any allowed identification field that is used by your organization.

When disabled or not configured

The identification field is not required.

+||| +|--- |--- | +|Policy description|With this policy setting, you can associate unique organizational identifiers to a new drive that is enabled with BitLocker.| +|Introduced|Windows Server 2008 R2 and Windows 7| +|Drive type|All drives| +|Policy path|Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption| +|Conflicts|Identification fields are required to manage certificate-based data recovery agents on BitLocker-protected drives. BitLocker manages and updates certificate-based data recovery agents only when the identification field is present on a drive and it is identical to the value that is configured on the computer.| +|When enabled|You can configure the identification field on the BitLocker-protected drive and any allowed identification field that is used by your organization.| +|When disabled or not configured|The identification field is not required.| -Reference +**Reference** -These identifiers are stored as the identification field and the allowed identification field. The identification field allows you to associate a unique organizational identifier to BitLocker-protected drives. This identifier is automatically added to new BitLocker-protected drives, and it can be updated on existing BitLocker-protected drives by using the [Manage-bde](https://technet.microsoft.com/library/ff829849.aspx) command-line tool. +These identifiers are stored as the identification field and the allowed identification field. The identification field allows you to associate a unique organizational identifier to BitLocker-protected drives. This identifier is automatically added to new BitLocker-protected drives, and it can be updated on existing BitLocker-protected drives by using the [Manage-bde](/windows-server/administration/windows-commands/manage-bde) command-line tool. An identification field is required to manage certificate-based data recovery agents on BitLocker-protected drives and for potential updates to the BitLocker To Go Reader. BitLocker manages and updates data recovery agents only when the identification field on the drive matches the value that is configured in the identification field. In a similar manner, BitLocker updates the BitLocker To Go Reader only when the identification field on the drive matches the value that is configured for the identification field. -For more information about the tool to manage BitLocker, see [Manage-bde](https://technet.microsoft.com/library/ff829849.aspx). +For more information about the tool to manage BitLocker, see [Manage-bde](/windows-server/administration/windows-commands/manage-bde). The allowed identification field is used in combination with the **Deny write access to removable drives not protected by BitLocker** policy setting to help control the use of removable drives in your organization. It is a comma-separated list of identification fields from your organization or external organizations. -You can configure the identification fields on existing drives by using the [Manage-bde](https://technet.microsoft.com/library/ff829849.aspx) command-line tool. +You can configure the identification fields on existing drives by using the [Manage-bde](/windows-server/administration/windows-commands/manage-bde) command-line tool. When a BitLocker-protected drive is mounted on another BitLocker-enabled computer, the identification field and the allowed identification field are used to determine whether the drive is from an outside organization. @@ -1945,44 +1040,17 @@ Multiple values separated by commas can be entered in the identification and all This policy setting is used to control whether the computer's memory will be overwritten the next time the computer is restarted. - ---- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Policy description

With this policy setting, you can control computer restart performance at the risk of exposing BitLocker secrets.

Introduced

Windows Vista

Drive type

All drives

Policy path

Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption

Conflicts

None

When enabled

The computer will not overwrite memory when it restarts. Preventing memory overwrite may improve restart performance, but it increases the risk of exposing BitLocker secrets.

When disabled or not configured

BitLocker secrets are removed from memory when the computer restarts.

+||| +|--- |--- | +|Policy description|With this policy setting, you can control computer restart performance at the risk of exposing BitLocker secrets.| +|Introduced|Windows Vista| +|Drive type|All drives| +|Policy path|Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption| +|Conflicts|None| +|When enabled|The computer will not overwrite memory when it restarts. Preventing memory overwrite may improve restart performance, but it increases the risk of exposing BitLocker secrets.| +|When disabled or not configured|BitLocker secrets are removed from memory when the computer restarts.| -Reference +**Reference** This policy setting is applied when you turn on BitLocker. BitLocker secrets include key material that is used to encrypt data. This policy setting applies only when BitLocker protection is enabled. @@ -1990,48 +1058,22 @@ This policy setting is applied when you turn on BitLocker. BitLocker secrets inc This policy setting determines what values the TPM measures when it validates early boot components before it unlocks an operating system drive on a computer with a BIOS configuration or with UEFI firmware that has the Compatibility Support Module (CSM) enabled. - ---- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Policy description

With this policy setting, you can configure how the computer's TPM security hardware secures the BitLocker encryption key.

Introduced

Windows Server 2012 and Windows 8

Drive type

Operating system drives

Policy path

Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Operating System Drives

Conflicts

None

When enabled

You can configure the boot components that the TPM validates before unlocking access to the BitLocker-encrypted operating system drive. If any of these components change while BitLocker protection is in effect, the TPM does not release the encryption key to unlock the drive. Instead, the computer displays the BitLocker Recovery console and requires that the recovery password or the recovery key is provided to unlock the drive.

When disabled or not configured

The TPM uses the default platform validation profile or the platform validation profile that is specified by the setup script.

+||| +|--- |--- | +|Policy description|With this policy setting, you can configure how the computer's TPM security hardware secures the BitLocker encryption key.| +|Introduced|Windows Server 2012 and Windows 8| +|Drive type|Operating system drives| +|Policy path|Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Operating System Drives| +|Conflicts|None| +|When enabled|You can configure the boot components that the TPM validates before unlocking access to the BitLocker-encrypted operating system drive. If any of these components change while BitLocker protection is in effect, the TPM does not release the encryption key to unlock the drive. Instead, the computer displays the BitLocker Recovery console and requires that the recovery password or the recovery key is provided to unlock the drive.| +|When disabled or not configured|The TPM uses the default platform validation profile or the platform validation profile that is specified by the setup script.| -Reference +**Reference** This policy setting does not apply if the computer does not have a compatible TPM or if BitLocker has already been turned on with TPM protection. ->**Important:** This Group Policy setting only applies to computers with BIOS configurations or to computers with UEFI firmware with the CSM enabled. Computers that use a native UEFI firmware configuration store different values in the Platform Configuration Registers (PCRs). Use the **Configure TPM platform validation profile for native UEFI firmware configurations** Group Policy setting to configure the TPM PCR profile for computers that use native UEFI firmware. +> [!IMPORTANT] +> This Group Policy setting only applies to computers with BIOS configurations or to computers with UEFI firmware with the CSM enabled. Computers that use a native UEFI firmware configuration store different values in the Platform Configuration Registers (PCRs). Use the **Configure TPM platform validation profile for native UEFI firmware configurations** Group Policy setting to configure the TPM PCR profile for computers that use native UEFI firmware. A platform validation profile consists of a set of PCR indices that range from 0 to 23. The default platform validation profile secures the encryption key against changes to the following: @@ -2043,7 +1085,8 @@ A platform validation profile consists of a set of PCR indices that range from 0 - Boot Manager (PCR 10) - BitLocker Access Control (PCR 11) ->**Note:** Changing from the default platform validation profile affects the security and manageability of your computer. BitLocker’s sensitivity to platform modifications (malicious or authorized) is increased or decreased depending on inclusion or exclusion (respectively) of the PCRs. +> [!NOTE] +> Changing from the default platform validation profile affects the security and manageability of your computer. BitLocker’s sensitivity to platform modifications (malicious or authorized) is increased or decreased depending on inclusion or exclusion (respectively) of the PCRs. The following list identifies all of the PCRs available: @@ -2065,44 +1108,17 @@ The following list identifies all of the PCRs available: This policy setting determines what values the TPM measures when it validates early boot components before unlocking a drive on a computer running Windows Vista, Windows Server 2008, or Windows 7. - ---- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Policy description

With this policy setting, you can configure how the computer's TPM security hardware secures the BitLocker encryption key.

Introduced

Windows Server 2008 and Windows Vista

Drive type

Operating system drives

Policy path

Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Operating System Drives

Conflicts

None

When enabled

You can configure the boot components that the TPM validates before unlocking access to the BitLocker-encrypted operating system drive. If any of these components change while BitLocker protection is in effect, the TPM does not release the encryption key to unlock the drive. Instead, the computer displays the BitLocker Recovery console and requires that the recovery password or the recovery key is provided to unlock the drive.

When disabled or not configured

The TPM uses the default platform validation profile or the platform validation profile that is specified by the setup script.

+||| +|--- |--- | +|Policy description|With this policy setting, you can configure how the computer's TPM security hardware secures the BitLocker encryption key.| +|Introduced|Windows Server 2008 and Windows Vista| +|Drive type|Operating system drives| +|Policy path|Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Operating System Drives| +|Conflicts|None| +|When enabled|You can configure the boot components that the TPM validates before unlocking access to the BitLocker-encrypted operating system drive. If any of these components change while BitLocker protection is in effect, the TPM does not release the encryption key to unlock the drive. Instead, the computer displays the BitLocker Recovery console and requires that the recovery password or the recovery key is provided to unlock the drive.| +|When disabled or not configured|The TPM uses the default platform validation profile or the platform validation profile that is specified by the setup script.| -Reference +**Reference** This policy setting does not apply if the computer does not have a compatible TPM or if BitLocker is already turned on with TPM protection. @@ -2116,7 +1132,8 @@ A platform validation profile consists of a set of PCR indices that range from 0 - Boot Manager (PCR 10) - BitLocker Access Control (PCR 11) ->**Note:** The default TPM validation profile PCR settings for computers that use an Extensible Firmware Interface (EFI) are the PCRs 0, 2, 4, and 11 only. +> [!NOTE] +> The default TPM validation profile PCR settings for computers that use an Extensible Firmware Interface (EFI) are the PCRs 0, 2, 4, and 11 only. The following list identifies all of the PCRs available: @@ -2134,56 +1151,29 @@ The following list identifies all of the PCRs available: - PCR 11: BitLocker access control - PCR 12 - 23: Reserved for future use ->**Warning:** Changing from the default platform validation profile affects the security and manageability of your computer. BitLocker's sensitivity to platform modifications (malicious or authorized) is increased or decreased depending on inclusion or exclusion (respectively) of the PCRs. +> [!WARNING] +> Changing from the default platform validation profile affects the security and manageability of your computer. BitLocker's sensitivity to platform modifications (malicious or authorized) is increased or decreased depending on inclusion or exclusion (respectively) of the PCRs. ### Configure TPM platform validation profile for native UEFI firmware configurations This policy setting determines what values the TPM measures when it validates early boot components before unlocking an operating system drive on a computer with native UEFI firmware configurations. - ---- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Policy description

With this policy setting, you can configure how the computer's Trusted Platform Module (TPM) security hardware secures the BitLocker encryption key.

Introduced

Windows Server 2012 and Windows 8

Drive type

Operating system drives

Policy path

Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Operating System Drives

Conflicts

Setting this policy with PCR 7 omitted, overrides the Allow Secure Boot for integrity validation Group Policy setting, and it prevents BitLocker from using Secure Boot for platform or Boot Configuration Data (BCD) integrity validation.

-

If your environments use TPM and Secure Boot for platform integrity checks, this policy should not be configured.

-

For more information about PCR 7, see Platform Configuration Register (PCR) in this topic.

When enabled

Before you turn on BitLocker, you can configure the boot components that the TPM validates before it unlocks access to the BitLocker-encrypted operating system drive. If any of these components change while BitLocker protection is in effect, the TPM does not release the encryption key to unlock the drive. Instead, the computer displays the BitLocker Recovery console and requires that the recovery password or the recovery key is provided to unlock the drive.

When disabled or not configured

BitLocker uses the default platform validation profile or the platform validation profile that is specified by the setup script.

+||| +|--- |--- | +|Policy description|With this policy setting, you can configure how the computer's Trusted Platform Module (TPM) security hardware secures the BitLocker encryption key.| +|Introduced|Windows Server 2012 and Windows 8| +|Drive type|Operating system drives| +|Policy path|Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Operating System Drives| +|Conflicts|Setting this policy with PCR 7 omitted, overrides the **Allow Secure Boot for integrity validation** Group Policy setting, and it prevents BitLocker from using Secure Boot for platform or Boot Configuration Data (BCD) integrity validation,

If your environments use TPM and Secure Boot for platform integrity checks, this policy should not be configured.

For more information about PCR 7, see [Platform Configuration Register (PCR)](#bkmk-pcr) in this topic.| +|When enabled|Before you turn on BitLocker, you can configure the boot components that the TPM validates before it unlocks access to the BitLocker-encrypted operating system drive. If any of these components change while BitLocker protection is in effect, the TPM does not release the encryption key to unlock the drive. Instead, the computer displays the BitLocker Recovery console and requires that the recovery password or the recovery key is provided to unlock the drive.| +|When disabled or not configured|BitLocker uses the default platform validation profile or the platform validation profile that is specified by the setup script.| -Reference +**Reference** This policy setting does not apply if the computer does not have a compatible TPM or if BitLocker is already turned on with TPM protection. ->**Important:** This Group Policy setting only applies to computers with a native UEFI firmware configuration. Computers with BIOS or UEFI firmware with a Compatibility Support Module (CSM) enabled store different values in the Platform Configuration Registers (PCRs). Use the **Configure TPM platform validation profile for BIOS-based firmware configurations** Group Policy setting to configure the TPM PCR profile for computers with BIOS configurations or for computers with UEFI firmware with a CSM enabled. +> [!IMPORTANT] +> This Group Policy setting only applies to computers with a native UEFI firmware configuration. Computers with BIOS or UEFI firmware with a Compatibility Support Module (CSM) enabled store different values in the Platform Configuration Registers (PCRs). Use the **Configure TPM platform validation profile for BIOS-based firmware configurations** Group Policy setting to configure the TPM PCR profile for computers with BIOS configurations or for computers with UEFI firmware with a CSM enabled. A platform validation profile consists of a set of Platform Configuration Register (PCR) indices ranging from 0 to 23. The default platform validation profile secures the encryption key against changes to the core system firmware executable code (PCR 0), extended or pluggable executable code (PCR 2), boot manager (PCR 4), and the BitLocker access control (PCR 11). @@ -2209,54 +1199,25 @@ The following list identifies all of the PCRs available: - PCR 14: Boot Authorities - PCR 15 – 23: Reserved for future use ->**Warning:** Changing from the default platform validation profile affects the security and manageability of your computer. BitLocker's sensitivity to platform modifications (malicious or authorized) is increased or decreased depending on inclusion or exclusion (respectively) of the PCRs. +> [!WARNING] +> Changing from the default platform validation profile affects the security and manageability of your computer. BitLocker's sensitivity to platform modifications (malicious or authorized) is increased or decreased depending on inclusion or exclusion (respectively) of the PCRs. ### Reset platform validation data after BitLocker recovery This policy setting determines if you want platform validation data to refresh when Windows is started following a BitLocker recovery. A platform validation data profile consists of the values in a set of Platform Configuration Register (PCR) indices that range from 0 to 23. - ---- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Policy description

With this policy setting, you can control whether platform validation data is refreshed when Windows is started following a BitLocker recovery.

Introduced

Windows Server 2012 and Windows 8

Drive type

Operating system drives

Policy path

Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Operating System Drives

Conflicts

None

When enabled

Platform validation data is refreshed when Windows is started following a BitLocker recovery.

When disabled

Platform validation data is not refreshed when Windows is started following a BitLocker recovery.

When not configured

Platform validation data is refreshed when Windows is started following a BitLocker recovery.

+||| +|--- |--- | +|Policy description|With this policy setting, you can control whether platform validation data is refreshed when Windows is started following a BitLocker recovery.| +|Introduced|Windows Server 2012 and Windows 8| +|Drive type|Operating system drives| +|Policy path|Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Operating System Drives| +|Conflicts|None| +|When enabled|Platform validation data is refreshed when Windows is started following a BitLocker recovery.| +|When disabled|Platform validation data is not refreshed when Windows is started following a BitLocker recovery.| +|When not configured|Platform validation data is refreshed when Windows is started following a BitLocker recovery.| -Reference +**Reference** For more information about the recovery process, see the [BitLocker recovery guide](bitlocker-recovery-guide-plan.md). @@ -2264,95 +1225,40 @@ For more information about the recovery process, see the [BitLocker recovery gui This policy setting determines specific Boot Configuration Data (BCD) settings to verify during platform validation. A platform validation uses the data in the platform validation profile, which consists of a set of Platform Configuration Register (PCR) indices that range from 0 to 23. - ---- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Policy description

With this policy setting, you can specify Boot Configuration Data (BCD) settings to verify during platform validation.

Introduced

Windows Server 2012 and Windows 8

Drive type

Operating system drives

Policy path

Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Operating System Drives

Conflicts

When BitLocker is using Secure Boot for platform and Boot Configuration Data integrity validation, the Use enhanced Boot Configuration Data validation profile Group Policy setting is ignored (as defined by the Allow Secure Boot for integrity validation Group Policy setting).

When enabled

You can add additional BCD settings, exclude the BCD settings you specify, or combine inclusion and exclusion lists to create a customized BCD validation profile, which gives you the ability to verify those BCD settings.

When disabled

The computer reverts to a BCD profile validation similar to the default BCD profile that is used by Windows 7.

When not configured

The computer verifies the default BCD settings in Windows.

+||| +|--- |--- | +|Policy description|With this policy setting, you can specify Boot Configuration Data (BCD) settings to verify during platform validation.| +|Introduced|Windows Server 2012 and Windows 8| +|Drive type|Operating system drives| +|Policy path|Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Operating System Drives| +|Conflicts|When BitLocker is using Secure Boot for platform and Boot Configuration Data integrity validation, the **Use enhanced Boot Configuration Data validation profile** Group Policy setting is ignored (as defined by the **Allow Secure Boot for integrity validation** Group Policy setting).| +|When enabled|You can add additional BCD settings, exclude the BCD settings you specify, or combine inclusion and exclusion lists to create a customized BCD validation profile, which gives you the ability to verify those BCD settings.| +|When disabled|The computer reverts to a BCD profile validation similar to the default BCD profile that is used by Windows 7.| +|When not configured|The computer verifies the default BCD settings in Windows.| -Reference +**Reference** ->**Note:** The setting that controls boot debugging (0x16000010) is always validated, and it has no effect if it is included in the inclusion or the exclusion list. +> [!NOTE] +> The setting that controls boot debugging (0x16000010) is always validated, and it has no effect if it is included in the inclusion or the exclusion list. ### Allow access to BitLocker-protected fixed data drives from earlier versions of Windows This policy setting is used to control whether access to drives is allowed by using the BitLocker To Go Reader, and if the application is installed on the drive. - ---- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Policy description

With this policy setting, you can configure whether fixed data drives that are formatted with the FAT file system can be unlocked and viewed on computers running Windows Vista, Windows XP with Service Pack 3 (SP3), or Windows XP with Service Pack 2 (SP2).

Introduced

Windows Server 2008 R2 and Windows 7

Drive type

Fixed data drives

Policy path

Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Fixed Data Drives

Conflicts

None

When enabled and When not configured

Fixed data drives that are formatted with the FAT file system can be unlocked on computers running Windows Server 2008, Windows Vista, Windows XP with SP3, or Windows XP with SP2, and their content can be viewed. These operating systems have Read-only access to BitLocker-protected drives.

When disabled

Fixed data drives that are formatted with the FAT file system and are BitLocker-protected cannot be unlocked on computers running Windows Vista, Windows XP with SP3, or Windows XP with SP2. BitLocker To Go Reader (bitlockertogo.exe) is not installed.

+||| +|--- |--- | +|Policy description|With this policy setting, you can configure whether fixed data drives that are formatted with the FAT file system can be unlocked and viewed on computers running Windows Vista, Windows XP with Service Pack 3 (SP3), or Windows XP with Service Pack 2 (SP2).| +|Introduced|Windows Server 2008 R2 and Windows 7| +|Drive type|Fixed data drives| +|Policy path|Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Fixed Data Drives| +|Conflicts|None| +|When enabled and When not configured|Fixed data drives that are formatted with the FAT file system can be unlocked on computers running Windows Server 2008, Windows Vista, Windows XP with SP3, or Windows XP with SP2, and their content can be viewed. These operating systems have Read-only access to BitLocker-protected drives.| +|When disabled|Fixed data drives that are formatted with the FAT file system and are BitLocker-protected cannot be unlocked on computers running Windows Vista, Windows XP with SP3, or Windows XP with SP2. BitLocker To Go Reader (bitlockertogo.exe) is not installed.| -Reference +**Reference** ->**Note:** This policy setting does not apply to drives that are formatted with the NTFS file system. +> [!NOTE] +> This policy setting does not apply to drives that are formatted with the NTFS file system. When this policy setting is enabled, select the **Do not install BitLocker To Go Reader on FAT formatted fixed drives** check box to help prevent users from running BitLocker To Go Reader from their fixed drives. If BitLocker To Go Reader (bitlockertogo.exe) is present on a drive that does not have an identification field specified, or if the drive has the same identification field as specified in the **Provide unique identifiers for your organization** policy setting, the user is prompted to update BitLocker, and BitLocker To Go Reader is deleted from the drive. In this situation, for the fixed drive to be unlocked on computers running Windows Vista, Windows XP with SP3, or Windows XP with SP2, BitLocker To Go Reader must be installed on the computer. If this check box is not selected, BitLocker To Go Reader will be installed on the fixed drive to enable users to unlock the drive on computers running Windows Vista, Windows XP with SP3, or Windows XP with SP2. @@ -2360,46 +1266,20 @@ When this policy setting is enabled, select the **Do not install BitLocker To Go This policy setting controls access to removable data drives that are using the BitLocker To Go Reader and whether the BitLocker To Go Reader can be installed on the drive. - ---- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Policy description

With this policy setting, you can configure whether removable data drives that are formatted with the FAT file system can be unlocked and viewed on computers running Windows Vista, Windows XP with SP3, or Windows XP with SP2.

Introduced

Windows Server 2008 R2 and Windows 7

Drive type

Removable data drives

Policy path

Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Removable Data Drives

Conflicts

None

When enabled and When not configured

Removable data drives that are formatted with the FAT file system can be unlocked on computers running Windows Vista, Windows XP with SP3, or Windows XP with SP2, and their content can be viewed. These operating systems have Read-only access to BitLocker-protected drives.

When disabled

Removable data drives that are formatted with the FAT file system that are BitLocker-protected cannot be unlocked on computers running Windows Vista, Windows XP with SP3, or Windows XP with SP2. BitLocker To Go Reader (bitlockertogo.exe) is not installed.

+||| +|--- |--- | +|Policy description|With this policy setting, you can configure whether removable data drives that are formatted with the FAT file system can be unlocked and viewed on computers running Windows Vista, Windows XP with SP3, or Windows XP with SP2.| +|Introduced|Windows Server 2008 R2 and Windows 7| +|Drive type|Removable data drives| +|Policy path|Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Removable Data Drives| +|Conflicts|None| +|When enabled and When not configured|Removable data drives that are formatted with the FAT file system can be unlocked on computers running Windows Vista, Windows XP with SP3, or Windows XP with SP2, and their content can be viewed. These operating systems have Read-only access to BitLocker-protected drives.| +|When disabled|Removable data drives that are formatted with the FAT file system that are BitLocker-protected cannot be unlocked on computers running Windows Vista, Windows XP with SP3, or Windows XP with SP2. BitLocker To Go Reader (bitlockertogo.exe) is not installed.| -Reference +**Reference** ->**Note:** This policy setting does not apply to drives that are formatted with the NTFS file system. +> [!NOTE] +> This policy setting does not apply to drives that are formatted with the NTFS file system. When this policy setting is enabled, select the **Do not install BitLocker To Go Reader on FAT formatted removable drives** check box to help prevent users from running BitLocker To Go Reader from their removable drives. If BitLocker To Go Reader (bitlockertogo.exe) is present on a drive that does not have an identification field specified, or if the drive has the same identification field as specified in the **Provide unique identifiers for your organization** policy setting, the user will be prompted to update BitLocker, and BitLocker To Go Reader is deleted from the drive. In this situation, for the removable drive to be unlocked on computers running Windows Vista, Windows XP with SP3, or Windows XP with SP2, BitLocker To Go Reader must be installed on the computer. If this check box is not selected, BitLocker To Go Reader will be installed on the removable drive to enable users to unlock the drive on computers running Windows Vista, Windows XP with SP3, or Windows XP with SP2 that do not have BitLocker To Go Reader installed. @@ -2407,44 +1287,17 @@ When this policy setting is enabled, select the **Do not install BitLocker To Go You can configure the Federal Information Processing Standard (FIPS) setting for FIPS compliance. As an effect of FIPS compliance, users cannot create or save a BitLocker password for recovery or as a key protector. The use of a recovery key is permitted. - ---- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Policy description

Notes

Introduced

Windows Server 2003 with SP1

Drive type

System-wide

Policy path

Local Policies\Security Options\System cryptography: Use FIPS compliant algorithms for encryption, hashing, and signing

Conflicts

Some applications, such as Terminal Services, do not support FIPS-140 on all operating systems.

When enabled

Users will be unable to save a recovery password to any location. This includes AD DS and network folders. In addition, you cannot use WMI or the BitLocker Drive Encryption Setup wizard to create a recovery password.

When disabled or not configured

No BitLocker encryption key is generated

+||| +|--- |--- | +|Policy description|Notes| +|Introduced|Windows Server 2003 with SP1| +|Drive type|System-wide| +|Policy path|Local Policies\Security Options\System cryptography: **Use FIPS compliant algorithms for encryption, hashing, and signing**| +|Conflicts|Some applications, such as Terminal Services, do not support FIPS-140 on all operating systems.| +|When enabled|Users will be unable to save a recovery password to any location. This includes AD DS and network folders. In addition, you cannot use WMI or the BitLocker Drive Encryption Setup wizard to create a recovery password.| +|When disabled or not configured|No BitLocker encryption key is generated| -Reference +**Reference** This policy needs to be enabled before any encryption key is generated for BitLocker. Note that when this policy is enabled, BitLocker prevents creating or using recovery passwords, so recovery keys should be used instead. @@ -2452,7 +1305,7 @@ You can save the optional recovery key to a USB drive. Because recovery password You can edit the FIPS setting by using the Security Policy Editor (Secpol.msc) or by editing the Windows registry. You must be an administrator to perform these procedures. -For more information about setting this policy, see [System cryptography: Use FIPS compliant algorithms for encryption, hashing, and signing](https://technet.microsoft.com/library/jj852197.aspx). +For more information about setting this policy, see [System cryptography: Use FIPS compliant algorithms for encryption, hashing, and signing](/windows/security/threat-protection/security-policy-settings/system-cryptography-use-fips-compliant-algorithms-for-encryption-hashing-and-signing). ## Power management Group Policy settings: Sleep and Hibernate @@ -2476,11 +1329,12 @@ Changing from the default platform validation profile affects the security and m PCR 7 measures the state of Secure Boot. With PCR 7, BitLocker can leverage Secure Boot for integrity validation. Secure Boot ensures that the computer's preboot environment loads only firmware that is digitally signed by authorized software publishers. PCR 7 measurements indicate whether Secure Boot is on and which keys are trusted on the platform. If Secure Boot is on and the firmware measures PCR 7 correctly per the UEFI specification, BitLocker can bind to this information rather than to PCRs 0, 2, and 4 which have the measurements of the exact firmware and Bootmgr images loaded. This reduces the likelihood of BitLocker starting in recovery mode as a result of firmware and image updates, and it provides you with greater flexibility to manage the preboot configuration. -PCR 7 measurements must follow the guidance that is described in [Appendix A Trusted Execution Environment EFI Protocol](https://msdn.microsoft.com/library/windows/hardware/jj923068.aspx). +PCR 7 measurements must follow the guidance that is described in [Appendix A Trusted Execution Environment EFI Protocol](/windows-hardware/test/hlk/testref/trusted-execution-environment-efi-protocol). PCR 7 measurements are a mandatory logo requirement for systems that support Modern Standby (also known as Always On, Always Connected PCs), such as the Microsoft Surface RT. On such systems, if the TPM with PCR 7 measurement and Secure Boot are correctly configured, BitLocker binds to PCR 7 and PCR 11 by default. ## See also + - [Trusted Platform Module](/windows/device-security/tpm/trusted-platform-module-overview) - [TPM Group Policy settings](/windows/device-security/tpm/trusted-platform-module-services-group-policy-settings) - [BitLocker frequently asked questions (FAQ)](bitlocker-frequently-asked-questions.md) From 67e0b9b0f59003a540cfd60ca430fd5ff42d8df1 Mon Sep 17 00:00:00 2001 From: Baard Hermansen Date: Sat, 22 Aug 2020 02:34:25 +0200 Subject: [PATCH 16/75] Update bitlocker-recovery-guide-plan.md Minor edits: Updated URLs, corrected spelling error, corrected outdated product name. --- .../bitlocker-recovery-guide-plan.md | 50 ++++++++----------- 1 file changed, 21 insertions(+), 29 deletions(-) diff --git a/windows/security/information-protection/bitlocker/bitlocker-recovery-guide-plan.md b/windows/security/information-protection/bitlocker/bitlocker-recovery-guide-plan.md index 822f7a9985..62b9b1864d 100644 --- a/windows/security/information-protection/bitlocker/bitlocker-recovery-guide-plan.md +++ b/windows/security/information-protection/bitlocker/bitlocker-recovery-guide-plan.md @@ -20,6 +20,7 @@ ms.date: 02/28/2019 # BitLocker recovery guide **Applies to** + - Windows 10 This topic for IT professionals describes how to recover BitLocker keys from AD DS. @@ -42,7 +43,7 @@ BitLocker recovery is the process by which you can restore access to a BitLocker The following list provides examples of specific events that will cause BitLocker to enter recovery mode when attempting to start the operating system drive: -- On PCs that use BitLocker Drive Encryption, or on devices such as tablets or phones that use [BitLocker Device Encryption](bitlocker-device-encryption-overview-windows-10.md) only, when an attack is detected, the device will immediately reboot and enter into BitLocker recovery mode. To take advantage of this functionality Administrators can set the **Interactive logon: Machine account lockout threshold** Group Policy setting located in **\\Computer Configuration\\Windows Settings\\Security Settings\\Local Policies\\Security Options** in the Local Group Policy Editor, or use the **MaxFailedPasswordAttempts** policy of [Exchange ActiveSync](https://technet.microsoft.com/library/aa998357.aspx) (also configurable through [Windows Intune](https://technet.microsoft.com/library/jj733621.aspx)), to limit the number of failed password attempts before the device goes into Device Lockout. +- On PCs that use BitLocker Drive Encryption, or on devices such as tablets or phones that use [BitLocker Device Encryption](bitlocker-device-encryption-overview-windows-10.md) only, when an attack is detected, the device will immediately reboot and enter into BitLocker recovery mode. To take advantage of this functionality Administrators can set the **Interactive logon: Machine account lockout threshold** Group Policy setting located in **\\Computer Configuration\\Windows Settings\\Security Settings\\Local Policies\\Security Options** in the Local Group Policy Editor, or use the **MaxFailedPasswordAttempts** policy of [Exchange ActiveSync](/Exchange/clients/exchange-activesync/exchange-activesync) (also configurable through [Microsoft Intune](https://www.microsoft.com/microsoft-365/enterprise-mobility-security/microsoft-intune)), to limit the number of failed password attempts before the device goes into Device Lockout. - On devices with TPM 1.2, changing the BIOS or firmware boot device order causes BitLocker recovery. However, devices with TPM 2.0 do not start BitLocker recovery in this case. TPM 2.0 does not consider a firmware change of boot device order as a security threat because the OS Boot Loader is not compromised. - Having the CD or DVD drive before the hard drive in the BIOS boot order and then inserting or removing a CD or DVD. - Failing to boot from a network drive before booting from the hard drive. @@ -83,14 +84,14 @@ The following list provides examples of specific events that will cause BitLocke > [!NOTE] > Before you begin recovery, we recommend that you determine what caused recovery. This might help prevent the problem from occurring again in the future. For instance, if you determine that an attacker has modified your computer by obtaining physical access, you can create new security policies for tracking who has physical presence. After the recovery password has been used to recover access to the PC, BitLocker will reseal the encryption key to the current values of the measured components. - + For planned scenarios, such as a known hardware or firmware upgrades, you can avoid initiating recovery by temporarily suspending BitLocker protection. Because suspending BitLocker leaves the drive fully encrypted, the administrator can quickly resume BitLocker protection after the planned task has been completed. Using suspend and resume also reseals the encryption key without requiring the entry of the recovery key. > [!NOTE] > If suspended BitLocker will automatically resume protection when the PC is rebooted, unless a reboot count is specified using the manage-bde command line tool. If software maintenance requires the computer be restarted and you are using two-factor authentication, you can enable BitLocker Network Unlock to provide the secondary authentication factor when the computers do not have an on-premises user to provide the additional authentication method. - + Recovery has been described within the context of unplanned or undesired behavior, but you can also cause recovery as an intended production scenario, in order to manage access control. For example, when you redeploy desktop or laptop computers to other departments or employees in your enterprise, you can force BitLocker into recovery before the computer is given to a new user. ## Testing recovery @@ -108,17 +109,16 @@ Before you create a thorough BitLocker recovery process, we recommend that you t 1. On the Start screen, type **cmd.exe**, and then click **Run as administrator**. 2. At the command prompt, type the following command and then press ENTER: - `manage-bde. -ComputerName -forcerecovery ` + `manage-bde -ComputerName -forcerecovery ` > [!NOTE] > Recovery triggered by `-forcerecovery` persists for multiple restarts until a TPM protector is added or protection is suspended by the user. When using Modern Standby devices (such as Surface devices), the `-forcerecovery` option is not recommended because BitLocker will have to be unlocked and disabled manually from the WinRE environment before the OS can boot up again. For more information, see [BitLocker Troubleshooting: Continuous reboot loop with BitLocker recovery on a slate device](https://social.technet.microsoft.com/wiki/contents/articles/18671.bitlocker-troubleshooting-continuous-reboot-loop-with-bitlocker-recovery-on-a-slate-device.aspx). - + ## Planning your recovery process When planning the BitLocker recovery process, first consult your organization's current best practices for recovering sensitive information. For example: How does your enterprise handle lost Windows passwords? How does your organization perform smart card PIN resets? You can use these best practices and related resources (people and tools) to help formulate a BitLocker recovery model. -Organizations that rely on BitLocker Drive Encryption and BitLocker To Go to protect data on a large number of computers and removable drives running the Windows 10, Windows 8, or Windows 7 operating systems and Windows to Go should consider using the Microsoft BitLocker Administration and Monitoring (MBAM) Tool version 2.0, which is included in the Microsoft Desktop Optimization Pack (MDOP) for Microsoft Software Assurance. MBAM makes BitLocker implementations easier to deploy and manage and allows administrators to provision and monitor encryption for operating system and fixed drives. MBAM prompts the user before encrypting fixed drives. MBAM also manages recovery keys for fixed and removable drives, making recovery easier to manage. MBAM can be used as part of a Microsoft System Center deployment or as a stand-alone solution. For more info, see [Microsoft BitLocker -Administration and Monitoring](https://technet.microsoft.com/windows/hh826072.aspx). +Organizations that rely on BitLocker Drive Encryption and BitLocker To Go to protect data on a large number of computers and removable drives running the Windows 10, Windows 8, or Windows 7 operating systems and Windows to Go should consider using the Microsoft BitLocker Administration and Monitoring (MBAM) Tool version 2.0, which is included in the Microsoft Desktop Optimization Pack (MDOP) for Microsoft Software Assurance. MBAM makes BitLocker implementations easier to deploy and manage and allows administrators to provision and monitor encryption for operating system and fixed drives. MBAM prompts the user before encrypting fixed drives. MBAM also manages recovery keys for fixed and removable drives, making recovery easier to manage. MBAM can be used as part of a Microsoft System Center deployment or as a stand-alone solution. For more info, see [Microsoft BitLocker Administration and Monitoring](/microsoft-desktop-optimization-pack/mbam-v25/). After a BitLocker recovery has been initiated, users can use a recovery password to unlock access to encrypted data. You must consider both self-recovery and recovery password retrieval methods for your organization. @@ -149,7 +149,7 @@ DS** check box if you want to prevent users from enabling BitLocker unless the c > [!NOTE] > If the PCs are part of a workgroup, users should be advised to save their BitLocker recovery password with their Microsoft Account online. Having an online copy of your BitLocker recovery password is recommended to help ensure that you do not lose access to your data in the event that recovery is required. - + The BitLocker Recovery Password Viewer for Active Directory Users and Computers tool allows domain administrators to view BitLocker recovery passwords for specific computer objects in Active Directory. You can use the following list as a template for creating your own recovery process for recovery password retrieval. This sample process uses the BitLocker Recovery Password Viewer for Active Directory Users and Computers tool. @@ -190,7 +190,7 @@ Because the recovery password is 48 digits long the user may need to record the > [!NOTE] > Because the 48-digit recovery password is long and contains a combination of digits, the user might mishear or mistype the password. The boot-time recovery console uses built-in checksum numbers to detect input errors in each 6-digit block of the 48-digit recovery password, and offers the user the opportunity to correct such errors. - + ### Post-recovery analysis When a volume is unlocked using a recovery password, an event is written to the event log and the platform validation measurements are reset in the TPM to match the current configuration. Unlocking the volume means that the encryption key has been released and is ready for on-the-fly encryption @@ -226,7 +226,7 @@ The details of this reset can vary according to the root cause of the recovery. > [!NOTE] > You can perform a BitLocker validation profile reset by suspending and resuming BitLocker. - + - [Unknown PIN](#bkmk-unknownpin) - [Lost startup key](#bkmk-loststartup) - [Changes to boot files](#bkmk-changebootknown) @@ -261,19 +261,18 @@ This error might occur if you updated the firmware. As a best practice you shoul Windows Recovery Environment (RE) can be used to recover access to a drive protected by [BitLocker Device Encryption](bitlocker-device-encryption-overview-windows-10.md). If a PC is unable to boot after two failures, Startup Repair will automatically start. When Startup Repair is launched automatically due to boot failures, it will only execute operating system and driver file repairs, provided that the boot logs or any available crash dump point to a specific corrupted file. In Windows 8.1 and later, devices that include firmware to support specific TPM measurements for PCR\[7\] the TPM can validate that Windows RE is a trusted operating environment and will unlock any BitLocker-protected drives if Windows RE has not been modified. If the Windows RE environment has been modified, for example the TPM has been disabled, the drives will stay locked until the BitLocker recovery key is provided. If Startup Repair is not able to be run automatically from the PC and instead Windows RE is manually started from a repair disk, the BitLocker recovery key must be provided to unlock the BitLocker–protected drives. - ## BitLocker recovery screen During BitLocker recovery, Windows can display a custom recovery message and hints that identify where a key can be retrieved from. These improvements can help a user during BitLocker recovery. ### Custom recovery message -BitLocker Group Policy settings in Windows 10, version 1511, let you confiure a custom recovery message and URL on the BitLocker recovery screen, which can include the address of the BitLocker self-service recovery portal, the IT internal website, or a phone number for support. +BitLocker Group Policy settings in Windows 10, version 1511, let you configure a custom recovery message and URL on the BitLocker recovery screen, which can include the address of the BitLocker self-service recovery portal, the IT internal website, or a phone number for support. This policy can be configured using GPO under **Computer Configuration** > **Administrative Templates** > **Windows Components** > **BitLocker Drive Encryption** > **Operating System Drives** > **Configure pre-boot recovery message and URL**. It can also be configured using Intune mobile device management (MDM) in the BitLocker CSP: -*./Device/Vendor/MSFT/BitLocker/SystemDrivesRecoveryMessage* +*\./Device/Vendor/MSFT/BitLocker/SystemDrivesRecoveryMessage\* ![Custom URL](./images/bl-intune-custom-url.png) @@ -281,30 +280,26 @@ Example of customized recovery screen: ![Customized BitLocker Recovery Screen](./images/bl-password-hint1.png) - - ### BitLocker recovery key hints -BitLocker metadata has been enhanced in Windows 10, version 1903 to include information about when and where the BitLocker recovery key was backed up. This information is not exposed through the UI or any public API. It is used solely by the BitLocker recovery screen in the form of hints to help a user locate a volume’s recovery key. Hints are displayed on the recovery screen and refer to the location where key has been saved. Hints are displayed in both the modern (blue) and legacy (black) recovery screen. This applies to both the bootmanager recovery screen and the WinRE unlock screen. +BitLocker metadata has been enhanced in Windows 10, version 1903 to include information about when and where the BitLocker recovery key was backed up. This information is not exposed through the UI or any public API. It is used solely by the BitLocker recovery screen in the form of hints to help a user locate a volume's recovery key. Hints are displayed on the recovery screen and refer to the location where key has been saved. Hints are displayed in both the modern (blue) and legacy (black) recovery screen. This applies to both the bootmanager recovery screen and the WinRE unlock screen. ![Customized BitLocker recovery screen](./images/bl-password-hint2.png) > [!IMPORTANT] > We don't recommend printing recovery keys or saving them to a file. Instead, use Active Directory backup or a cloud-based backup. Cloud-based backup includes Azure Active Directory (Azure AD) and Microsoft Account. - There are rules governing which hint is shown during the recovery (in order of processing): 1. Always display custom recovery message if it has been configured (using GPO or MDM). -2. Always display generic hint: "For more information, go to https://aka.ms/recoverykeyfaq." +2. Always display generic hint: "For more information, go to ". 3. If multiple recovery keys exist on the volume, prioritize the last created (and successfully backed up) recovery key. 4. Prioritize keys with successful backup over keys that have never been backed up. -5. Prioritize backup hints in the following order for remote backup locations: **Microsoft Account > Azure AD > Active Directory**. -6. If a key has been printed and saved to file, display a combined hint, “Look for a printout or a text file with the key,” instead of two separate hints. +5. Prioritize backup hints in the following order for remote backup locations: **Microsoft Account > Azure AD > Active Directory**. +6. If a key has been printed and saved to file, display a combined hint, "Look for a printout or a text file with the key," instead of two separate hints. 7. If multiple backups of the same type (remove vs. local) have been performed for the same recovery key, prioritize backup info with latest backed up date. -8. There is no specific hint for keys saved to an on-premises Active Directory. In this case, a custom message (if configured) or a generic message, “Contact your organization’s help desk,” will be displayed. -9. If two recovery keys are present on the disk, but only one has been successfully backed up, the system will ask for a key that has been backed up, even if another key is newer. - +8. There is no specific hint for keys saved to an on-premises Active Directory. In this case, a custom message (if configured) or a generic message, "Contact your organization's help desk," will be displayed. +9. If two recovery keys are present on the disk, but only one has been successfully backed up, the system will ask for a key that has been backed up, even if another key is newer. #### Example 1 (single recovery key with single backup) @@ -377,7 +372,6 @@ There are rules governing which hint is shown during the recovery (in order of p ![Example 4 of customized BitLocker recovery screen](./images/rp-example4.PNG) - #### Example 5 (multiple recovery passwords) | Custom URL | No | @@ -407,7 +401,6 @@ There are rules governing which hint is shown during the recovery (in order of p ![Example 5 of customized BitLocker recovery screen](./images/rp-example5.PNG) - ## Using additional recovery information Besides the 48-digit BitLocker recovery password, other types of recovery information are stored in Active Directory. This section describes how this additional information can be used. @@ -418,7 +411,7 @@ If the recovery methods discussed earlier in this document do not unlock the vol > [!NOTE] > You must use the BitLocker Repair tool **repair-bde** to use the BitLocker key package. - + The BitLocker key package is not saved by default. To save the package along with the recovery password in AD DS you must select the **Backup recovery password and key package** option in the Group Policy settings that control the recovery method. You can also export the key package from a working volume. For more details on how to export key packages, see [Retrieving the BitLocker Key Package](#bkmk-appendixc). ## Resetting recovery passwords @@ -455,6 +448,7 @@ You can reset the recovery password in two ways: ```powershell Manage-bde –protectors –adbackup C: -id {EXAMPLE6-5507-4924-AA9E-AFB2EB003692} ``` + > [!WARNING] > You must include the braces in the ID string. @@ -470,7 +464,7 @@ You can reset the recovery password in two ways: > [!NOTE] > To manage a remote computer, you can specify the remote computer name rather than the local computer name. - + You can use the following sample script to create a VBScript file to reset the recovery passwords. ```vb @@ -890,5 +884,3 @@ End Function ## See also - [BitLocker overview](bitlocker-overview.md) - - From 5734628c708cecb084340af5f85b49ac8fcbc996 Mon Sep 17 00:00:00 2001 From: Baard Hermansen Date: Sat, 22 Aug 2020 03:04:04 +0200 Subject: [PATCH 17/75] Update bitlocker-basic-deployment.md Converted HTML tables to markdown style. Updated markdown for Notes and Warning. --- .../bitlocker/bitlocker-basic-deployment.md | 216 +++++++----------- 1 file changed, 88 insertions(+), 128 deletions(-) diff --git a/windows/security/information-protection/bitlocker/bitlocker-basic-deployment.md b/windows/security/information-protection/bitlocker/bitlocker-basic-deployment.md index 405ffb126f..72f95894be 100644 --- a/windows/security/information-protection/bitlocker/bitlocker-basic-deployment.md +++ b/windows/security/information-protection/bitlocker/bitlocker-basic-deployment.md @@ -20,6 +20,7 @@ ms.date: 02/28/2019 # BitLocker basic deployment **Applies to** + - Windows 10 This topic for the IT professional explains how BitLocker features can be used to protect your data through drive encryption. @@ -30,8 +31,9 @@ BitLocker provides full volume encryption (FVE) for operating system volumes, as In the event that the drive was prepared as a single contiguous space, BitLocker requires a new volume to hold the boot files. BdeHdCfg.exe can create these volumes. -> **Note:**  For more info about using this tool, see [Bdehdcfg](https://technet.microsoft.com/library/ee732026.aspx) in the Command-Line Reference. - +> [!NOTE] +> For more info about using this tool, see [Bdehdcfg](/windows-server/administration/windows-commands/bdehdcfg) in the Command-Line Reference. + BitLocker encryption can be done using the following methods: - BitLocker control panel @@ -47,52 +49,16 @@ To start encryption for a volume, select **Turn on BitLocker** for the appropria ### Operating system volume Upon launch, the BitLocker Drive Encryption Wizard verifies the computer meets the BitLocker system requirements for encrypting an operating system volume. By default, the system requirements are: - ---- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
RequirementDescription

Hardware configuration

The computer must meet the minimum requirements for the supported Windows versions.

Operating system

BitLocker is an optional feature which can be installed by Server Manager on Windows Server 2012 and later.

Hardware TPM

TPM version 1.2 or 2.0

-

A TPM is not required for BitLocker; however, only a computer with a TPM can provide the additional security of pre-startup system integrity verification and multifactor authentication.

BIOS configuration

    -

  • A Trusted Computing Group (TCG)-compliant BIOS or UEFI firmware.

    • -

  • The boot order must be set to start first from the hard disk, and not the USB or CD drives.

    • -

  • The firmware must be able to read from a USB flash drive during startup.

    • -

File system

For computers that boot natively with UEFI firmware, at least one FAT32 partition for the system drive and one NTFS partition for the operating system drive.

-

For computers with legacy BIOS firmware, at least two NTFS disk partitions, one for the system drive and one for the operating system drive.

-

For either firmware, the system drive partition must be at least 350 megabytes (MB) and set as the active partition.

Hardware encrypted drive prerequisites (optional)

To use a hardware encrypted drive as the boot drive, the drive must be in the uninitialized state and in the security inactive state. In addition, the system must always boot with native UEFI version 2.3.1 or higher and the CSM (if any) disabled.

- + +|Requirement|Description| +|--- |--- | +|Hardware configuration|The computer must meet the minimum requirements for the supported Windows versions.| +|Operating system|BitLocker is an optional feature which can be installed by Server Manager on Windows Server 2012 and later.| +|Hardware TPM|TPM version 1.2 or 2.0.

A TPM is not required for BitLocker; however, only a computer with a TPM can provide the additional security of pre-startup system integrity verification and multifactor authentication.| +|BIOS configuration|

  • A Trusted Computing Group (TCG)-compliant BIOS or UEFI firmware.
  • The boot order must be set to start first from the hard disk, and not the USB or CD drives.
  • The firmware must be able to read from a USB flash drive during startup.
    • | +|File system|For computers that boot natively with UEFI firmware, at least one FAT32 partition for the system drive and one NTFS partition for the operating system drive.
    For computers with legacy BIOS firmware, at least two NTFS disk partitions, one for the system drive and one for the operating system drive.
    For either firmware, the system drive partition must be at least 350 megabytes (MB) and set as the active partition.| +|Hardware encrypted drive prerequisites (optional)|To use a hardware encrypted drive as the boot drive, the drive must be in the uninitialized state and in the security inactive state. In addition, the system must always boot with native UEFI version 2.3.1 or higher and the CSM (if any) disabled.| + Upon passing the initial configuration, users are required to enter a password for the volume. If the volume does not pass the initial configuration for BitLocker, the user is presented with an error dialog describing the appropriate actions to be taken. Once a strong password has been created for the volume, a recovery key will be generated. The BitLocker Drive Encryption Wizard will prompt for a location to save this key. A BitLocker recovery key is a special key that you can create when you turn on BitLocker Drive Encryption for the first time on each drive that you encrypt. You can use the recovery key to gain access to your computer if the drive that Windows is installed on (the operating system drive) is encrypted using BitLocker Drive Encryption and BitLocker detects a condition that prevents it from unlocking the drive when the computer is starting up. A recovery key can also be used to gain access to your files and folders on a removable data drive (such as an external hard drive or USB flash drive) that is encrypted using BitLocker To Go, if for some reason you forget the password or your computer cannot access the drive. @@ -105,8 +71,9 @@ When the recovery key has been properly stored, the BitLocker Drive Encryption W It is recommended that drives with little to no data utilize the **used disk space only** encryption option and that drives with data or an operating system utilize the **encrypt entire drive** option. -> **Note:**  Deleted files appear as free space to the file system, which is not encrypted by **used disk space only**. Until they are wiped or overwritten, deleted files hold information that could be recovered with common data forensic tools. - +> [!NOTE] +> Deleted files appear as free space to the file system, which is not encrypted by **used disk space only**. Until they are wiped or overwritten, deleted files hold information that could be recovered with common data forensic tools. + Selecting an encryption type and choosing **Next** will give the user the option of running a BitLocker system check (selected by default) which will ensure that BitLocker can properly access the recovery and encryption keys before the volume encryption begins. It is recommended to run this system check before starting the encryption process. If the system check is not run and a problem is encountered when the operating system attempts to start, the user will need to provide the recovery key to start Windows. After completing the system check (if selected), the BitLocker Drive Encryption Wizard will restart the computer to begin encryption. Upon reboot, users are required to enter the password chosen to boot into the operating system volume. Users can check encryption status by checking the system notification area or the BitLocker control panel. @@ -142,52 +109,20 @@ The following table shows the compatibility matrix for systems that have been Bi Table 1: Cross compatibility for Windows 10, Windows 8.1, Windows 8, and Windows 7 encrypted volumes - ------ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

    Encryption Type

    Windows 10 and Windows 8.1

    Windows 8

    Windows 7

    Fully encrypted on Windows 8

    Presents as fully encrypted

    N/A

    Presented as fully encrypted

    Used Disk Space Only encrypted on Windows 8

    Presents as encrypt on write

    N/A

    Presented as fully encrypted

    Fully encrypted volume from Windows 7

    Presents as fully encrypted

    Presented as fully encrypted

    N/A

    Partially encrypted volume from Windows 7

    Windows 10 and Windows 8.1 will complete encryption regardless of policy

    Windows 8 will complete encryption regardless of policy

    N/A

    - +||||| +|--- |--- |--- |--- | +|Encryption Type|Windows 10 and Windows 8.1|Windows 8|Windows 7| +|Fully encrypted on Windows 8|Presents as fully encrypted|N/A|Presented as fully encrypted| +|Used Disk Space Only encrypted on Windows 8|Presents as encrypt on write|N/A|Presented as fully encrypted| +|Fully encrypted volume from Windows 7|Presents as fully encrypted|Presented as fully encrypted|N/A| +|Partially encrypted volume from Windows 7|Windows 10 and Windows 8.1 will complete encryption regardless of policy|Windows 8 will complete encryption regardless of policy|N/A| ## Encrypting volumes using the manage-bde command line interface -Manage-bde is a command-line utility that can be used for scripting BitLocker operations. Manage-bde offers additional options not displayed in the BitLocker control panel. For a complete list of the options, see [Manage-bde](https://technet.microsoft.com/library/ff829849.aspx). +Manage-bde is a command-line utility that can be used for scripting BitLocker operations. Manage-bde offers additional options not displayed in the BitLocker control panel. For a complete list of the options, see [Manage-bde](/windows-server/administration/windows-commands/manage-bde). + Manage-bde offers a multitude of wider options for configuring BitLocker. This means that using the command syntax may require care and possibly later customization by the user. For example, using just the `manage-bde -on` command on a data volume will fully encrypt the volume without any authenticating protectors. A volume encrypted in this manner still requires user interaction to turn on BitLocker protection, even though the command successfully completed because an authentication method needs to be added to the volume for it to be fully protected. + Command line users need to determine the appropriate syntax for a given situation. The following section covers general encryption for operating system volumes and data volumes. ### Operating system volume @@ -245,6 +180,7 @@ manage-bde -on C: ## Encrypting volumes using the BitLocker Windows PowerShell cmdlets Windows PowerShell cmdlets provide an alternative way to work with BitLocker. Using Windows PowerShell's scripting capabilities, administrators can integrate BitLocker options into existing scripts with ease. The list below displays the available BitLocker cmdlets. + @@ -252,11 +188,11 @@ Windows PowerShell cmdlets provide an alternative way to work with BitLocker. Us - - + + - + - + - + - + - + - + - + - + - + - + - + - +

    Name

    Parameters

    Name

    Parameters

    Add-BitLockerKeyProtector

    Add-BitLockerKeyProtector

    -ADAccountOrGroup

    -ADAccountOrGroupProtector

    -Confirm

    @@ -278,26 +214,26 @@ Windows PowerShell cmdlets provide an alternative way to work with BitLocker. Us

    -WhatIf

    Backup-BitLockerKeyProtector

    Backup-BitLockerKeyProtector

    -Confirm

    -KeyProtectorId

    -MountPoint

    -WhatIf

    Disable-BitLocker

    Disable-BitLocker

    -Confirm

    -MountPoint

    -WhatIf

    Disable-BitLockerAutoUnlock

    Disable-BitLockerAutoUnlock

    -Confirm

    -MountPoint

    -WhatIf

    Enable-BitLocker

    Enable-BitLocker

    -AdAccountOrGroup

    -AdAccountOrGroupProtector

    -Confirm

    @@ -322,44 +258,44 @@ Windows PowerShell cmdlets provide an alternative way to work with BitLocker. Us

    -WhatIf

    Enable-BitLockerAutoUnlock

    Enable-BitLockerAutoUnlock

    -Confirm

    -MountPoint

    -WhatIf

    Get-BitLockerVolume

    Get-BitLockerVolume

    -MountPoint

    Lock-BitLocker

    Lock-BitLocker

    -Confirm

    -ForceDismount

    -MountPoint

    -WhatIf

    Remove-BitLockerKeyProtector

    Remove-BitLockerKeyProtector

    -Confirm

    -KeyProtectorId

    -MountPoint

    -WhatIf

    Resume-BitLocker

    Resume-BitLocker

    -Confirm

    -MountPoint

    -WhatIf

    Suspend-BitLocker

    Suspend-BitLocker

    -Confirm

    -MountPoint

    -RebootCount

    -WhatIf

    Unlock-BitLocker

    Unlock-BitLocker

    -AdAccountOrGroup

    -Confirm

    -MountPoint

    @@ -371,28 +307,38 @@ Windows PowerShell cmdlets provide an alternative way to work with BitLocker. Us
    - -Similar to manage-bde, the Windows PowerShell cmdlets allow configuration beyond the options offered in the control panel. As with manage-bde, users need to consider the specific needs of the volume they are encrypting prior to running Windows PowerShell cmdlets. -A good initial step is to determine the current state of the volume(s) on the computer. You can do this using the Get-BitLocker volume cmdlet. The output from this cmdlet displays information on the volume type, protectors, protection status, and other useful information. -Occasionally, all protectors may not be shown when using Get-BitLockerVolume due to lack of space in the output display. If you do not see all of the protectors for a volume, you can use the Windows PowerShell pipe command (|) to format a listing of the protectors. -> **Note:**  In the event that there are more than four protectors for a volume, the pipe command may run out of display space. For volumes with more than four protectors, use the method described in the section below to generate a listing of all protectors with protector ID. - -`Get-BitLockerVolume C: | fl` +Similar to manage-bde, the Windows PowerShell cmdlets allow configuration beyond the options offered in the control panel. As with manage-bde, users need to consider the specific needs of the volume they are encrypting prior to running Windows PowerShell cmdlets. + +A good initial step is to determine the current state of the volume(s) on the computer. You can do this using the `Get-BitLocker` volume cmdlet. The output from this cmdlet displays information on the volume type, protectors, protection status, and other useful information. + +Occasionally, all protectors may not be shown when using **Get-BitLockerVolume** due to lack of space in the output display. If you do not see all of the protectors for a volume, you can use the Windows PowerShell pipe command (|) to format a listing of the protectors. + +> [!NOTE] +> In the event that there are more than four protectors for a volume, the pipe command may run out of display space. For volumes with more than four protectors, use the method described in the section below to generate a listing of all protectors with protector ID. + +```powershell +Get-BitLockerVolume C: | fl +``` If you wanted to remove the existing protectors prior to provisioning BitLocker on the volume, you can utilize the `Remove-BitLockerKeyProtector` cmdlet. Accomplishing this requires the GUID associated with the protector to be removed. A simple script can pipe the values of each **Get-BitLockerVolume** return out to another variable as seen below: + ```powershell $vol = Get-BitLockerVolume $keyprotectors = $vol.KeyProtector ``` + Using this, we can display the information in the **$keyprotectors** variable to determine the GUID for each protector. Using this information, we can then remove the key protector for a specific volume using the command: + ```powershell Remove-BitLockerKeyProtector : -KeyProtectorID "{GUID}" ``` -> **Note:**  The BitLocker cmdlet requires the key protector GUID enclosed in quotation marks to execute. Ensure the entire GUID, with braces, is included in the command. - + +> [!NOTE] +> The BitLocker cmdlet requires the key protector GUID enclosed in quotation marks to execute. Ensure the entire GUID, with braces, is included in the command. + ### Operating system volume Using the BitLocker Windows PowerShell cmdlets is similar to working with the manage-bde tool for encrypting operating system volumes. Windows PowerShell offers users a lot of flexibility. For example, users can add the desired protector as part command for encrypting the volume. Below are examples of common user scenarios and steps to accomplish them using the BitLocker cmdlets for Windows PowerShell. @@ -401,11 +347,13 @@ To enable BitLocker with just the TPM protector. This can be done using the comm ```powershell Enable-BitLocker C: ``` + The example below adds one additional protector, the StartupKey protectors, and chooses to skip the BitLocker hardware test. In this example, encryption starts immediately without the need for a reboot. ```powershell Enable-BitLocker C: -StartupKeyProtector -StartupKeyPath -SkipHardwareTest ``` + ### Data volume Data volume encryption using Windows PowerShell is the same as for operating system volumes. You should add the desired protectors prior to encrypting the volume. The following example adds a password protector to the E: volume using the variable $pw as the password. The $pw variable is held as a SecureString value to store the user defined password. Last, encryption begins. @@ -415,33 +363,40 @@ $pw = Read-Host -AsSecureString Enable-BitLockerKeyProtector E: -PasswordProtector -Password $pw ``` + ### Using a SID based protector in Windows PowerShell The ADAccountOrGroup protector is an Active Directory SID-based protector. This protector can be added to both operating system and data volumes, although it does not unlock operating system volumes in the pre-boot environment. The protector requires the SID for the domain account or group to link with the protector. BitLocker can protect a cluster-aware disk by adding a SID-based protector for the Cluster Name Object (CNO) that lets the disk properly failover and be unlocked to any member computer of the cluster. ->**Warning:**  The SID-based protector requires the use of an additional protector (such as TPM, PIN, recovery key, etc.) when used on operating system volumes. - +> [!WARNING] +> The SID-based protector requires the use of an additional protector (such as TPM, PIN, recovery key, etc.) when used on operating system volumes. + To add an ADAccountOrGroup protector to a volume requires either the actual domain SID or the group name preceded by the domain and a backslash. In the example below, the CONTOSO\\Administrator account is added as a protector to the data volume G. ```powershell Enable-BitLocker G: -AdAccountOrGroupProtector -AdAccountOrGroup CONTOSO\Administrator ``` + For users who wish to use the SID for the account or group, the first step is to determine the SID associated with the account. To get the specific SID for a user account in Windows PowerShell, use the following command: ```powershell -get-aduser -filter {samaccountname -eq "administrator"} +Get-ADUser -filter {samaccountname -eq "administrator"} ``` -> **Note:**  Use of this command requires the RSAT-AD-PowerShell feature. -> + +> [!NOTE] +> Use of this command requires the RSAT-AD-PowerShell feature. +> > **Tip:**  In addition to the Windows PowerShell command above, information about the locally logged on user and group membership can be found using: WHOAMI /ALL. This does not require the use of additional features. - + In the example below, the user wishes to add a domain SID based protector to the previously encrypted operating system volume. The user knows the SID for the user account or group they wish to add and uses the following command: ```powershell Add-BitLockerKeyProtector C: -ADAccountOrGroupProtector -ADAccountOrGroup "" ``` -> **Note:**  Active Directory-based protectors are normally used to unlock Failover Cluster enabled volumes. - + +> [!NOTE] +> Active Directory-based protectors are normally used to unlock Failover Cluster enabled volumes. + ## Checking BitLocker status To check the BitLocker status of a particular volume, administrators can look at the status of the drive in the BitLocker control panel applet, Windows Explorer, manage-bde command line tool, or Windows PowerShell cmdlets. Each option offers different levels of detail and ease of use. We will look at each of the available methods in the following section. @@ -456,7 +411,7 @@ Checking BitLocker status with the control panel is the most common method used | **Off**| BitLocker is not enabled for the volume | | **Suspended** | BitLocker is suspended and not actively protecting the volume | | **Waiting for Activation**| BitLocker is enabled with a clear protector key and requires further action to be fully protected| - + If a drive is pre-provisioned with BitLocker, a status of "Waiting for Activation" displays with a yellow exclamation icon on the volume. This status means that there was only a clear protector used when encrypting the volume. In this case, the volume is not in a protected state and needs to have a secure key added to the volume before the drive is fully protected. Administrators can use the control panel, manage-bde tool, or WMI APIs to add an appropriate key protector. Once complete, the control panel will update to reflect the new status. Using the control panel, administrators can choose **Turn on BitLocker** to start the BitLocker Drive Encryption wizard and add a protector, like PIN for an operating system volume (or password if no TPM exists), or a password or smart card protector to a data volume. The drive security window displays prior to changing the volume status. Selecting **Activate BitLocker** will complete the encryption process. @@ -472,8 +427,10 @@ To check the status of a volume using manage-bde, use the following command: ```powershell manage-bde -status ``` -> **Note:**  If no volume letter is associated with the -status command, all volumes on the computer display their status. - + +> [!NOTE] +> If no volume letter is associated with the -status command, all volumes on the computer display their status. + ### Checking BitLocker status with Windows PowerShell Windows PowerShell commands offer another way to query BitLocker status for volumes. Like manage-bde, Windows PowerShell includes the advantage of being able to check the status of a volume on a remote computer. @@ -483,6 +440,7 @@ Using the Get-BitLockerVolume cmdlet, each volume on the system will display its ```powershell Get-BitLockerVolume -Verbose | fl ``` + This command will display information about the encryption method, volume type, key protectors, etc. ### Provisioning BitLocker during operating system deployment @@ -509,11 +467,13 @@ Decrypting volumes using manage-bde is very straightforward. Decryption with man ```powershell manage-bde -off C: ``` + This command disables protectors while it decrypts the volume and removes all protectors when decryption is complete. If a user wishes to check the status of the decryption, they can use the following command: ```powershell manage-bde -status C: ``` + ### Decrypting volumes using the BitLocker Windows PowerShell cmdlets Decryption with Windows PowerShell cmdlets is straightforward, similar to manage-bde. The additional advantage Windows PowerShell offers is the ability to decrypt multiple drives in one pass. In the example below, the user has three encrypted volumes, which they wish to decrypt. @@ -523,16 +483,16 @@ Using the Disable-BitLocker command, they can remove all protectors and encrypti ```powershell Disable-BitLocker ``` + If a user did not want to input each mount point individually, using the `-MountPoint` parameter in an array can sequence the same command into one line without requiring additional user input. An example command is: ```powershell Disable-BitLocker -MountPoint E:,F:,G: ``` + ## See also - [Prepare your organization for BitLocker: Planning and policies](prepare-your-organization-for-bitlocker-planning-and-policies.md) - [BitLocker recovery guide](bitlocker-recovery-guide-plan.md) - [BitLocker: How to enable Network Unlock](bitlocker-how-to-enable-network-unlock.md) - [BitLocker overview](bitlocker-overview.md) - - From 5af7ab5c8c6121a11ae2e8fba5a144d6fabe962c Mon Sep 17 00:00:00 2001 From: "Trond B. Krokli" <38162891+illfated@users.noreply.github.com> Date: Sun, 23 Aug 2020 01:31:21 +0200 Subject: [PATCH 18/75] Windows/Troubleshooting: Link URL & format update As pointed out in issue ticket #8119, the last link of the page returns a 404 error. The parent page https://docs.microsoft.com/windows-server/ has been changed since that incorrectly formatted link was added. Old 404 URL: https://docs.microsoft.com/en-us/windows-server/troubleshoot/windows-server-support-solutions Proposed new URL: https://docs.microsoft.com/windows-server/troubleshoot/windows-server-troubleshooting Thanks to rossmpersonal for pointing out the 404 error. Resolves #8119 --- windows/client-management/windows-10-support-solutions.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/client-management/windows-10-support-solutions.md b/windows/client-management/windows-10-support-solutions.md index 671e14612b..9274477150 100644 --- a/windows/client-management/windows-10-support-solutions.md +++ b/windows/client-management/windows-10-support-solutions.md @@ -131,4 +131,4 @@ This section contains advanced troubleshooting topics and links to help you reso ## Other Resources -### [Troubleshooting Windows Server components](https://docs.microsoft.com/windows-server/troubleshoot/windows-server-support-solutions) +- [Troubleshooting Windows Server components](https://docs.microsoft.com/windows-server/troubleshoot/windows-server-troubleshooting) From 9233d1f57e86e4442938095cc3c5d72d2de9dd21 Mon Sep 17 00:00:00 2001 From: Steve Burkett Date: Tue, 25 Aug 2020 09:46:40 +1200 Subject: [PATCH 19/75] Update troubleshoot-bitlocker.md : Correct Event Source names Correct the event source names from TCM -> TPM (typo?) Minor formatting correction --- .../bitlocker/troubleshoot-bitlocker.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/information-protection/bitlocker/troubleshoot-bitlocker.md b/windows/security/information-protection/bitlocker/troubleshoot-bitlocker.md index 88e28e59eb..bf97db1389 100644 --- a/windows/security/information-protection/bitlocker/troubleshoot-bitlocker.md +++ b/windows/security/information-protection/bitlocker/troubleshoot-bitlocker.md @@ -27,11 +27,11 @@ Open Event Viewer and review the following logs under Applications and Services - Microsoft-Windows-BitLocker/BitLocker Operational - Microsoft-Windows-BitLocker/BitLocker Management -- **BitLocker-DrivePreparationTool**. Review the Admin log, the **Operational log, and any other logs that are generated in this folder. The default logs have the following unique names: +- **BitLocker-DrivePreparationTool**. Review the Admin log, the Operational log, and any other logs that are generated in this folder. The default logs have the following unique names: - Microsoft-Windows-BitLocker-DrivePreparationTool/Operational - Microsoft-Windows-BitLocker-DrivePreparationTool/Admin -Additionally, review the Windows logs\\System log for events that were produced by the TCM and TCM-WMI event sources. +Additionally, review the Windows logs\\System log for events that were produced by the TPM and TPM-WMI event sources. To filter and display or export logs, you can use the [wevtutil.exe](https://docs.microsoft.com/windows-server/administration/windows-commands/wevtutil) command-line tool or the [Get-WinEvent](https://docs.microsoft.com/powershell/module/microsoft.powershell.diagnostics/get-winevent?view=powershell-6) cmdlet. From 0577a01a43ff7f633364df53246a8119af50f930 Mon Sep 17 00:00:00 2001 From: MaratMussabekov <48041687+MaratMussabekov@users.noreply.github.com> Date: Tue, 25 Aug 2020 17:00:41 +0500 Subject: [PATCH 20/75] Update changes-to-windows-diagnostic-data-collection.md --- .../privacy/changes-to-windows-diagnostic-data-collection.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/privacy/changes-to-windows-diagnostic-data-collection.md b/windows/privacy/changes-to-windows-diagnostic-data-collection.md index 61f9a5cf61..fe1e8ae442 100644 --- a/windows/privacy/changes-to-windows-diagnostic-data-collection.md +++ b/windows/privacy/changes-to-windows-diagnostic-data-collection.md @@ -64,10 +64,10 @@ A final set of changes includes two new policies that can help you fine-tune dia - The **Limit dump collection** policy is a new policy that can be used to limit the types of [crash dumps](https://docs.microsoft.com/windows/win32/dxtecharts/crash-dump-analysis) that can be sent back to Microsoft. If this policy is enabled, Windows Error Reporting will send only kernel mini dumps and user mode triage dumps. - Group Policy: Computer Configuration > Administrative Templates > Windows Components > Data Collection and Preview Builds > **Limit Dump Collection** - - MDM policy: System/ LimitDiagnosticLogCollection + - MDM policy: System/LimitDumpCollection - The **Limit diagnostic log collection** policy is another new policy that limits the number of diagnostic logs that are sent back to Microsoft. If this policy is enabled, diagnostic logs are not sent back to Microsoft. - Group Policy: Computer Configuration > Administrative Templates > Windows Components > Data Collection and Preview Builds > **Limit Diagnostic Log Collection** - - MDM policy: System/LimitDumpCollection + - MDM policy: System/LimitDiagnosticLogCollection >[!Important] >All of the changes mentioned in this section will not be released on versions of Windows, version 1809 and earlier as well as Windows Server 2019 and earlier. From 06adbf4f95b00819b720cb9c71074e1b29d70c46 Mon Sep 17 00:00:00 2001 From: MaratMussabekov <48041687+MaratMussabekov@users.noreply.github.com> Date: Tue, 25 Aug 2020 17:11:18 +0500 Subject: [PATCH 21/75] Update hello-cert-trust-validate-ad-prereq.md --- .../hello-cert-trust-validate-ad-prereq.md | 11 ++++++----- 1 file changed, 6 insertions(+), 5 deletions(-) diff --git a/windows/security/identity-protection/hello-for-business/hello-cert-trust-validate-ad-prereq.md b/windows/security/identity-protection/hello-for-business/hello-cert-trust-validate-ad-prereq.md index 6e1445768e..f380bd2aa3 100644 --- a/windows/security/identity-protection/hello-for-business/hello-cert-trust-validate-ad-prereq.md +++ b/windows/security/identity-protection/hello-for-business/hello-cert-trust-validate-ad-prereq.md @@ -44,11 +44,12 @@ Windows Hello for Business uses asymmetric keys as user credentials (rather than Sign-in to the domain controller hosting the schema master operational role using enterprise administrator equivalent credentials. -1. Open an elevated command prompt. -2. Type ```cd /d x:\support\adprep``` where *x* is the drive letter of the DVD or mounted ISO. -3. To update the schema, type ```adprep /forestprep```. -4. Read the Adprep Warning. Type the letter **C** and press **Enter** to update the schema. -5. Close the Command Prompt and sign-out. +1. Mount ISO file (or enter the DVD) of Windows Server 2016 or later installation media. +2. Open an elevated command prompt. +3. Type ```cd /d x:\support\adprep``` where *x* is the drive letter of the DVD or mounted ISO. +4. To update the schema, type ```adprep /forestprep```. +5. Read the Adprep Warning. Type the letter **C** and press **Enter** to update the schema. +6. Close the Command Prompt and sign-out. ## Create the KeyCredential Admins Security Global Group From e07085d01338a988a1b68b769a2be2aef8a1a777 Mon Sep 17 00:00:00 2001 From: Marty Hernandez Avedon Date: Tue, 25 Aug 2020 15:34:35 -0400 Subject: [PATCH 22/75] wording --- .../md-app-guard-browser-extension.md | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-application-guard/md-app-guard-browser-extension.md b/windows/security/threat-protection/microsoft-defender-application-guard/md-app-guard-browser-extension.md index 78bfdd1a17..51e168d369 100644 --- a/windows/security/threat-protection/microsoft-defender-application-guard/md-app-guard-browser-extension.md +++ b/windows/security/threat-protection/microsoft-defender-application-guard/md-app-guard-browser-extension.md @@ -57,24 +57,24 @@ Both Chrome and Firefox have their own browser-specific group policies. We recom #### Chrome policies -These policies can be found along the filepath, `Software\Policies\Google\Chrome\`, followed by the policy name. +These policies can be found along the filepath, *Software\Policies\Google\Chrome\\*, followed by the policy name (e.g., *Software\Policies\Google\Chrome\IncognitoModeEnabled*). Policy name | Possible values | Recommended setting | Reason -|-|-|- [IncognitoModeAvailability](https://cloud.google.com/docs/chrome-enterprise/policies/?policy=IncognitoModeAvailability) | `0` = Enabled
    `1` = Disabled
    `2` = Forced (i.e. forces pages to only open in Incognito mode) | Disabled | This policy allows users to start Chrome in Incognito mode. In this mode, all extensions are turned off by default. -[BrowserGuestModeEnabled](https://cloud.google.com/docs/chrome-enterprise/policies/?policy=BrowserGuestModeEnabled) | `false` or `0` = Disabled
    `true`, `1`, or not configured = Enabled | Disabled | This policy allows users to login as Guest. Guest logins are run in Incognito mode, with all extensions turned off by default. -[BackgroundModeEnabled](https://cloud.google.com/docs/chrome-enterprise/policies/?policy=BackgroundModeEnabled) | `false` or `0` = Disabled
    `true` or `1` = Enabled

    **Note:** If this policy is not set, the user can enable or disable background mode through local browser settings. | Enabled | This policy keeps Chrome running in the background, ensuring that all navigation is passed to the extension, even on first navigation. -[ExtensionSettings](https://cloud.google.com/docs/chrome-enterprise/policies/?policy=ExtensionSettings) | This setting accepts a dictionary that configures multiple other management settings for Chrome. See the [Google Cloud documentation](https://cloud.google.com/docs/chrome-enterprise/policies/?policy=ExtensionSettings) for complete schema. | Include an entry for `force_installed` | This setting prevents users from manually removing the extension. +[BrowserGuestModeEnabled](https://cloud.google.com/docs/chrome-enterprise/policies/?policy=BrowserGuestModeEnabled) | `false` or `0` = Disabled
    `true`, `1`, or not configured = Enabled | Disabled | This policy allows users to login as *Guest*, which opens a session in Incognito mode. In this mode, all extensions are turned off by default. +[BackgroundModeEnabled](https://cloud.google.com/docs/chrome-enterprise/policies/?policy=BackgroundModeEnabled) | `false` or `0` = Disabled
    `true` or `1` = Enabled

    **Note:** If this policy is not set, the user can enable or disable background mode through local browser settings. | Enabled | This policy keeps Chrome running in the background, ensuring that all navigation is passed to the extension. +[ExtensionSettings](https://cloud.google.com/docs/chrome-enterprise/policies/?policy=ExtensionSettings) | This policy accepts a dictionary that configures multiple other management settings for Chrome. See the [Google Cloud documentation](https://cloud.google.com/docs/chrome-enterprise/policies/?policy=ExtensionSettings) for complete schema. | Include an entry for `force_installed` | This policy prevents users from manually removing the extension. #### Firefox policies -These policies can be found along the filepath, `Software\Policies\Mozilla\Firefox\`, followed by the policy name. +These policies can be found along the filepath, *Software\Policies\Mozilla\Firefox\\*, followed by the policy name (e.g., *Software\Policies\Mozilla\Firefox\DisableSafeMode*). Policy name | Possible values | Recommended setting | Reason -|-|-|-|- [DisableSafeMode](https://github.com/mozilla/policy-templates/blob/master/README.md#DisableSafeMode) | `false` or `0` = Safe mode is enabled
    `true` or `1` = Safe mode is disabled | True (i.e. the policy is enabled and Safe mode is *not* allowed to run) | Safe mode can allow users to circumvent Application Guard [BlockAboutConfig](https://github.com/mozilla/policy-templates/blob/master/README.md#BlockAboutConfig) | `false` or `0` = User access to about:config is allowed
    `true` or `1` = User access to about:config is *not* allowed | True (i.e. the policy is enabled and access to about:config is *not* allowed) | About:config is a special page within Firefox that offers control over many settings that may compromise security -[Extensions - Locked](https://github.com/mozilla/policy-templates/blob/master/README.md#Extensions) | This setting accepts a list of UUIDs for extensions (these can be found by searching `extensions.webextensions.uuids` within the about:config page) | Software\Policies\Mozilla\Firefox\Extensions\Locked\1 = "ApplicationGuardRel@microsoft.com" | This setting allows you to lock the extension, so the user cannot disable or uninstall it. +[Extensions - Locked](https://github.com/mozilla/policy-templates/blob/master/README.md#Extensions) | This setting accepts a list of UUIDs for extensions (these can be found by searching `extensions.webextensions.uuids` within the about:config page) | Software\Policies\Mozilla\Firefox\Extensions\Locked\1 = "`ApplicationGuardRel@microsoft.com`" | This setting allows you to lock the extension, so the user cannot disable or uninstall it. ## Troubleshooting guide From 123be5b78ed2f40d05883bb33b18aceb33ffdf46 Mon Sep 17 00:00:00 2001 From: Marty Hernandez Avedon Date: Tue, 25 Aug 2020 16:23:41 -0400 Subject: [PATCH 23/75] typo --- .../md-app-guard-browser-extension.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-application-guard/md-app-guard-browser-extension.md b/windows/security/threat-protection/microsoft-defender-application-guard/md-app-guard-browser-extension.md index 51e168d369..12b24bcf69 100644 --- a/windows/security/threat-protection/microsoft-defender-application-guard/md-app-guard-browser-extension.md +++ b/windows/security/threat-protection/microsoft-defender-application-guard/md-app-guard-browser-extension.md @@ -41,7 +41,7 @@ Application Guard itself is required for the extension to work. It has its own s ## Installing the extension -Application Guard can be run under [managed mode](install-md-app-guard.md#enterprise-managed-mode) or [standalone mode](install-md-app-guard.md#atandalone-mode). The main difference between the two modes is whether policies have been set to define the organization's boundaries. +Application Guard can be run under [managed mode](install-md-app-guard.md#enterprise-managed-mode) or [standalone mode](install-md-app-guard.md#standalone-mode). The main difference between the two modes is whether policies have been set to define the organization's boundaries. Enterprise administrators running Application Guard under managed mode should first define Application Guard's [network isolation settings](configure-md-app-guard.md#network-isolation-settings), so a set of enterprise sites is already in place. From cb77a7f0125154355dfddf6cb967b752dfd0a38b Mon Sep 17 00:00:00 2001 From: Rei Ikei <47890550+reiikei@users.noreply.github.com> Date: Wed, 26 Aug 2020 09:31:33 +0900 Subject: [PATCH 24/75] Not need beta URLs for Intune In my understanding, following URLs are for CTIP environments. So customers should not be use following URLs. enrollment.manage-beta.microsoft.com portal.manage-beta.microsoft.com --- .../identity-protection/hello-for-business/hello-faq.md | 2 -- 1 file changed, 2 deletions(-) diff --git a/windows/security/identity-protection/hello-for-business/hello-faq.md b/windows/security/identity-protection/hello-for-business/hello-faq.md index babc49afc3..390355cb33 100644 --- a/windows/security/identity-protection/hello-for-business/hello-faq.md +++ b/windows/security/identity-protection/hello-for-business/hello-faq.md @@ -77,9 +77,7 @@ Communicating with Azure Active Directory uses the following URLs: - login.windows.net If your environment uses Microsoft Intune, you need these additional URLs: -- enrollment.manage-beta.microsoft.com - enrollment.manage.microsoft.com -- portal.manage-beta.microsoft.com - portal.manage.microsoft.com ## What is the difference between non-destructive and destructive PIN reset? From dcdf4c3e2c04cae79890b85a1950da1117a6b183 Mon Sep 17 00:00:00 2001 From: MaratMussabekov <48041687+MaratMussabekov@users.noreply.github.com> Date: Wed, 26 Aug 2020 12:12:49 +0500 Subject: [PATCH 25/75] Update windows/security/identity-protection/hello-for-business/hello-cert-trust-validate-ad-prereq.md Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- .../hello-for-business/hello-cert-trust-validate-ad-prereq.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/identity-protection/hello-for-business/hello-cert-trust-validate-ad-prereq.md b/windows/security/identity-protection/hello-for-business/hello-cert-trust-validate-ad-prereq.md index f380bd2aa3..0686de8a9a 100644 --- a/windows/security/identity-protection/hello-for-business/hello-cert-trust-validate-ad-prereq.md +++ b/windows/security/identity-protection/hello-for-business/hello-cert-trust-validate-ad-prereq.md @@ -44,7 +44,7 @@ Windows Hello for Business uses asymmetric keys as user credentials (rather than Sign-in to the domain controller hosting the schema master operational role using enterprise administrator equivalent credentials. -1. Mount ISO file (or enter the DVD) of Windows Server 2016 or later installation media. +1. Mount the ISO file (or insert the DVD) containing the Windows Server 2016 or later installation media. 2. Open an elevated command prompt. 3. Type ```cd /d x:\support\adprep``` where *x* is the drive letter of the DVD or mounted ISO. 4. To update the schema, type ```adprep /forestprep```. From 3109454831afd7dc3e8add96a368f9550bb6d14f Mon Sep 17 00:00:00 2001 From: "MisterMik [MSFT]" <15340423+mistermik@users.noreply.github.com> Date: Thu, 27 Aug 2020 17:50:11 -0700 Subject: [PATCH 26/75] Update hello-hybrid-cert-whfb-settings-adfs.md MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Documentation is missing the ClientRoleIdentifier : 38aa3b87-a06d-4817-b275-7a316988d93b This is misleading as customer doesn't know which ObjectIdentifier make the change to. --- .../hello-for-business/hello-hybrid-cert-whfb-settings-adfs.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/identity-protection/hello-for-business/hello-hybrid-cert-whfb-settings-adfs.md b/windows/security/identity-protection/hello-for-business/hello-hybrid-cert-whfb-settings-adfs.md index 00c8e2e6f2..8a9763ebcd 100644 --- a/windows/security/identity-protection/hello-for-business/hello-hybrid-cert-whfb-settings-adfs.md +++ b/windows/security/identity-protection/hello-for-business/hello-hybrid-cert-whfb-settings-adfs.md @@ -71,7 +71,7 @@ Sign-in a domain controller or management workstation with _Domain Admin_ equiva > 2. Right click "Scope Descriptions" and select "Add Scope Description". > 3. Under name type "ugs" and Click Apply > OK. > 4. Launch Powershell as Administrator. -> 5. Execute the command "Get-AdfsApplicationPermission". Look for the ScopeNames :{openid, aza} that has the ClientRoleIdentifier Make a note of the ObjectIdentifier. +> 5. Execute the command "Get-AdfsApplicationPermission". Look for the ScopeNames :{openid, aza} that has the ClientRoleIdentifier is equal to 38aa3b87-a06d-4817-b275-7a316988d93b and make a note of the ObjectIdentifier. > 6. Execute the command "Set-AdfsApplicationPermission -TargetIdentifier -AddScope 'ugs'. > 7. Restart the ADFS service. > 8. On the client: Restart the client. User should be prompted to provision WHFB. From 843e498b9beda5485a700b0a056642c40c30da3f Mon Sep 17 00:00:00 2001 From: MaratMussabekov <48041687+MaratMussabekov@users.noreply.github.com> Date: Fri, 28 Aug 2020 16:13:55 +0500 Subject: [PATCH 27/75] Update hello-feature-dual-enrollment.md --- .../hello-for-business/hello-feature-dual-enrollment.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/identity-protection/hello-for-business/hello-feature-dual-enrollment.md b/windows/security/identity-protection/hello-for-business/hello-feature-dual-enrollment.md index 0a52de0945..028fdd4868 100644 --- a/windows/security/identity-protection/hello-for-business/hello-feature-dual-enrollment.md +++ b/windows/security/identity-protection/hello-for-business/hello-feature-dual-enrollment.md @@ -49,7 +49,7 @@ In this task you will ### Configure Active Directory to support Domain Administrator enrollment -The designed Windows for Business configuration has you give the **Key Admins** (or **KeyCredential Admins** when using domain controllers prior to Windows Server 2016) group read and write permissions to the msDS-KeyCredentialsLink attribute. You provided these permissions at root of the domain and use object inheritance to ensure the permissions apply to all users in the domain regardless of their location within the domain hierarchy. +The designed Windows Hello for Business configuration gives the **Key Admins** (or **KeyCredential Admins** when using domain controllers prior to Windows Server 2016) group read and write permissions to the msDS-KeyCredentialsLink attribute. You provided these permissions at root of the domain and use object inheritance to ensure the permissions apply to all users in the domain regardless of their location within the domain hierarchy. Active Directory Domain Services uses AdminSDHolder to secure privileged users and groups from unintentional modification by comparing and replacing the security on privileged users and groups to match those defined on the AdminSDHolder object on an hourly cycle. For Windows Hello for Business, your domain administrator account may receive the permissions but they will disappear from the user object unless you give the AdminSDHolder read and write permissions to the msDS-KeyCredential attribute. From e49dd9860883154ce2aeb4fba9a0b78e745aef60 Mon Sep 17 00:00:00 2001 From: MaratMussabekov <48041687+MaratMussabekov@users.noreply.github.com> Date: Sat, 29 Aug 2020 18:18:20 +0500 Subject: [PATCH 28/75] Update hello-hybrid-aadj-sso-base.md --- .../hello-hybrid-aadj-sso-base.md | 24 +++++++++---------- 1 file changed, 11 insertions(+), 13 deletions(-) diff --git a/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-base.md b/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-base.md index 8df0ef33bb..e9c5fe59e6 100644 --- a/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-base.md +++ b/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-base.md @@ -301,23 +301,21 @@ A **Trusted Certificate** device configuration profile is how you deploy trusted Sign-in a workstation with access equivalent to a _domain user_. -1. Sign-in to the [Azure Portal](https://portal.azure.com/). -2. Select **All Services**. Type **Intune** to filter the list of services. Click **Microsoft Intune**. -3. Click **device enrollment**. +1. Sign-in to the [Microsoft Endpoint Manager admin center](https://endpoint.microsoft.com/). +2. Select **Devices**. +3. Click **Enroll devices**. 4. Click **Windows enrollment** 5. Under **Windows enrollment**, click **Windows Hello for Business**. ![Create Intune Windows Hello for Business Policy](images/aadj/IntuneWHFBPolicy-00.png) -6. Under **Priority**, click **Default**. -7. Under **All users and all devices**, click **Settings**. -8. Select **Enabled** from the **Configure Windows Hello for Business** list. -9. Select **Required** next to **Use a Trusted Platform Module (TPM)**. By default, Windows Hello for Business prefers TPM 2.0 or falls backs to software. Choosing **Required** forces Windows Hello for Business to only use TPM 2.0 or TPM 1.2 and does not allow fall back to software based keys. -10. Type the desired **Minimum PIN length** and **Maximum PIN length**. +6. Select **Enabled** from the **Configure Windows Hello for Business** list. +7. Select **Required** next to **Use a Trusted Platform Module (TPM)**. By default, Windows Hello for Business prefers TPM 2.0 or falls backs to software. Choosing **Required** forces Windows Hello for Business to only use TPM 2.0 or TPM 1.2 and does not allow fall back to software based keys. +8. Type the desired **Minimum PIN length** and **Maximum PIN length**. > [!IMPORTANT] > The default minimum PIN length for Windows Hello for Business on Windows 10 is 6. Microsoft Intune defaults the minimum PIN length to 4, which reduces the security of the user's PIN. If you do not have a desired PIN length, set the minimum PIN length to 6. ![Intune Windows Hello for Business policy settings](images/aadj/IntuneWHFBPolicy-01.png) -11. Select the appropriate configuration for the following settings. +9. Select the appropriate configuration for the following settings. * **Lowercase letters in PIN** * **Uppercase letters in PIN** * **Special characters in PIN** @@ -326,10 +324,10 @@ Sign-in a workstation with access equivalent to a _domain user_. > [!NOTE] > The Windows Hello for Business PIN is not a symmetric key (a password). A copy of the current PIN is not stored locally or on a server like in the case of passwords. Making the PIN as complex and changed frequently as a password increases the likelihood of forgotten PINs. Additionally, enabling PIN history is the only scenario that requires Windows 10 to store older PIN combinations (protected to the current PIN). Windows Hello for Business combined with a TPM provides anti-hammering functionality that prevents brute force attacks of the user's PIN. If you are concerned with user-to-user shoulder surfacing, rather that forcing complex PIN that change frequently, consider using the [Multifactor Unlock](feature-multifactor-unlock.md) feature. -12. Select **Yes** next to **Allow biometric authentication** if you want to allow users to use biometrics (fingerprint and/or facial recognition) to unlock the device. To further secure the use of biometrics, select **Yes** to **Use enhanced anti-spoofing, when available**. -13. Select **No** to **Allow phone sign-in**. This feature has been deprecated. -14. Click **Save** -15. Sign-out of the Azure portal. +10. Select **Yes** next to **Allow biometric authentication** if you want to allow users to use biometrics (fingerprint and/or facial recognition) to unlock the device. To further secure the use of biometrics, select **Yes** to **Use enhanced anti-spoofing, when available**. +11. Select **No** to **Allow phone sign-in**. This feature has been deprecated. +12. Click **Save** +13. Sign-out of the Microsoft Endpoint Manager admin center. > [!IMPORTANT] > For more details about the actual experience after everything has been configured, please see [Windows Hello for Business and Authentication](https://docs.microsoft.com/windows/security/identity-protection/hello-for-business/hello-how-it-works-authentication). From f7d344e677b5cc08595db7e28807cf422baa8e86 Mon Sep 17 00:00:00 2001 From: MaratMussabekov <48041687+MaratMussabekov@users.noreply.github.com> Date: Sat, 29 Aug 2020 18:23:37 +0500 Subject: [PATCH 29/75] Add files via upload added for the article https://docs.microsoft.com/en-us/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-base#configure-windows-hello-for-business-device-enrollment --- .../hello-for-business/images/aadj/MEM.png | Bin 0 -> 53116 bytes 1 file changed, 0 insertions(+), 0 deletions(-) create mode 100644 windows/security/identity-protection/hello-for-business/images/aadj/MEM.png diff --git a/windows/security/identity-protection/hello-for-business/images/aadj/MEM.png b/windows/security/identity-protection/hello-for-business/images/aadj/MEM.png new file mode 100644 index 0000000000000000000000000000000000000000..d98d871f21c168d773975cd48eb74fed63566890 GIT binary patch literal 53116 zcmd431yt1U^FK=W!isddfV6Ze-O>^g(v9RQ(p?J@f;7^hh;&Hz(p^f&0us{Q@PG69 z`1!{FoEztN&%NiKBS%=?`|LdP%)DmiHS_TPg{nLVhXMx)2??a|Tt)*433UVs2_+f} z1$YI={5uQqAF{KCycAN&5Y;B|1Dds@iX;+Jc{J{|DLU{oHuSlkGZGR${Qe8M+v%$X z64LMk1sO>#ccbka?6jA^zVAk@EmZE+tv7gOdhLp?&+V-?toKiw?j27Hzu(gq`j(QJz|LJR3(^O4X4we}v*4T6N(7-WfhfyLQHT8EmScjr7hx>b$ z(w$3Q+5JfCH0V6K6Ky%6bRIbPaF*`eRCF?7rrx-&zj*$MK_T|9f9MJ@{lCA9#fitO z`SUU{Gr8lR2UuV5%>8*lE6bwx@!u~ONc2LL{(e~_AQqAM_xtit9>bsfv#{d->B4zg zntpFJoSlzu!v``%*(iR1j{A+%xNRq%8_c}v_I?;z+Q{QFH&t$(d17a*8N=1@{E*Rp zt`=Dedh6kn6G(Twvd~21;l6+Eaa3JhErkUWd$zjz(2pwN*W*8;=Vc+HL0*Upma=&+ zznhYJLdiU@-R43Y`26}@B|`W$8k5?mF!2CS3iG`vf$Z$x}zq3Ga>7De)C#f6kUxi zkSWuhN|1_jX|ct}o-gm{AI0EM2)b@Bh0@5BInLKF-tBt(g$I(dPe2zvx_6*yWsTzE zH`e=sI@iC3%Wj{`Szi3UKDvyg;3t$Uedt?e)*1ezQ0J)9h-}>M@~pCA4&4qnn$qXP z?Ur#mw%~Qso^LnP5#ih^pouKnvt8o!z?ih7wbXNN`mYa19Tl z4Oe|)SdVt0ddeC7yLOh>dSI&Fg-yUBKI#6@Z4UF^b2XIBa2bVmK+m3@*|Q^Q&oY&h zF=&#Gd)#XlI=eqTI5;@Uf`yM`UH)y>sp;{vgosNc@6qGU@f?QZLnY2-rYPo=h<$oA zj&FgPF#7JJtK)Gs*$Y)xS~&F++|U6pIH+{Ru3nihtF~@fCD~tk>P7M^cROS0QRqqz zSFqxf!mMZPCJaTO@K^;?2d)q5vCAhY1{K3AdM3AAf^$>hfM_~X?tr;!D4@j&t`7<# zPEC67-y>i;n{Gc6)CudaE0l~qEN$br8+|V#c(sdk?+vkbM=L0TK{bk8)U$WFQ`Wl@ zT@+E5%Ydfuedlu~*E@tOUcWunEP7Juz?mp3e)>-1DVd{COAkGVVSO;|m-g$6Ylyl< z|Assp+3rwL-4U!o@nv!tX&4iF^sN)kzBQTAL)3uBl&^>#rLbR`uH3uLFZEDkmH^Cj zk=JJN14{b(`d;b#LCn~Y_nPVzM}a?@f32l%@7J0)W2fTc;se&tb$7xLQV83rhUf76 zTvkociacX6i1(3;WXYjT^TzO6>Sdy-(M;FDho!2vi}9~A6_mM&geY5BTu>AEuA?>Y ze`6~(X&WHtor?K_=27qJFM|JcZv8>tX_b>^S!5RW6=e~(CAs5=_Qvx%6y(VP&D$&1 zYTpbgf9ay&1=8}UKrY-P-O9|531VGCW%zs}VIVevY|2CLW4|MRMqO5pHrPJzxvs=y(!D(QSlRS2?e!1mi`-$udB@3pRP3{iM9P|%B^;hRXfZqw#CjN zk)t9PRdR=deI?K8Ef_03d7R!&1&{_ND*%cr=#S@{W6C@?zl&y6k-e6~^@@J}t-YY0 zA2?dm+`(nIL(BD8g!t|}F8N$&b~L`}E#{&)jgxYxPYLZN;9J14QOC($4B;k0M`?YB zYwPMffD?9Q?Mpiy*VJe+*Q|NVHTQ1HO2&kGiP(fOCT}Y|lD!FQ0GuHb*{(-|#4A_E zVk1T04)f2*@Hox~Nn!lNK|b7o;crJ*3WW@b$oOY~RmeQ);C0Fdu;THK{*F8w)qES( zu>6sS<0Wm;XceVw)$mv9&#<$K9Tia zrFws7RrRO_)JCawaYo2B=XJIl6`QUu21}*EQ&Pg>@#6@-T9so_x)&9r_wXU9sRrZ``Zx8s6!y{NYgPFgFMP zc0`S+w|+Fcy=-}?m4`06vKbo(N)ig3zsbU+OsGx7Bf4L+1;Km@3Vu80F?XI`Xz@w&O^SI){O_Jl7Zi(d#t|?raXb zo4gPXLwC=910lz2tGMRyM&3m$q{g3af!fH!@;C0V8aKgZ4?M`U=tAK%-EGd1)^ZvD z5v>n0z1z)IO?0QvnkeUU_qWAxS0XkD+K)L0?U|#E^+RdzG!Z^X$~6Ox!W?Ev__CWh>%B7mHUS;htx1&A zr)S&q4Q@wUEiKobuJ1+C`JYu`jx5?tb?AG@81T7?{gT;Weh|6~@ zY-p|UYOi7PHpNQv*+mDflY_(O;VxN3!8YJOO{(X}!EC=cB|2D$;twWKc)qBiywh1Y zJ}2u!7eft&s`ea>lD^o6DeB5$A>-k6j{S-g)(=s5G{eZ)kbB^FwNyC-ZZ!xudQs1$h`?M zdcGWQD3)Yl`LkmemGywESj5FBb;6P7NJu8KUtZ0CMgJh&UFkxEu1jy>)aIj+yVNwu zLA}edsK~ptz$TUl-H6U*B-%UvZI{R$~ z^0S{}D^(8p0c(Qw${`)-yjVH8n8>WUdB`Yo3Gu*A7iORs^AP2-S>nIBO7}C$oG|VS zs9_Qsjkw*vqVrWSX1Gp+)4JdgXBc1aw-W4ewrr10S6a8}OFuuPcw^fYIeAdxApKU| z5k?tUDg`SS6#a-Cn47bLw$CjTiNnnBx(w;JY1`AEu~-}G$!DSnljP7G+4gi^)CMbs z@c#Y%w*aPq3zs3HpT#>7wak}N_Ig+GL;>WQc*mqe>b*kGIvUBs@JeQInBPe+?BcC; z$_RXS3glk`TWjhJP0`L2!zZra_w;S^l+(<4qn#e%;qS0Wi;|K&;UWA9cht=;-QIWP zT|2UI`{A~K?`+5I-}fEOUp5y%e)D50;JNlj%AEU;cYooIZvM@2yvuuIr9eDY2=fHg zt5~-jg@g9to8LJhb?1m(f@Z(#*v<&<1|PgRbnOPVlf6YT5>l*8YM;ztDMCleq|8gu z-q2S~nEtm%*8#yE;jy7XHqZ-H;2dHZTqqIqJ3!=r7lmlvAZQ8wfsu4u?)2^();ti# z%ChfMZy=Q?S_U$FU!dwp_8dxeBDvv@E+HM@<8THN{UBOTu(&Y-4CFoxZ&=-GK)q1X z&+u;O;^=KBnf(i2{^hb81?l@UUudVK+C+iRpIqMT4P^qU+<1G)bv=5~DFB)ZH-3}2 z8k63iJC2XW{Z3aOMgxejx6tGTd;vb?AIGvRI1ChAve zH@DH<=ZLWk{|_rK28I7|N%vcHw#FeLZ_Ks@EQJM;38IHTNqA+Ni314+OYyPu%xM%5 zpBDV}D>&W%>%Y?3x?qW$EHVnoa#89}=FYt-$ZHoP2ILC1(Y2`k%t1VN3RG}({9rK69$uo>Hnq^Jvd)+Tl66f z1Z_>G``um`n%72?m7P~13gME%LL#n970{8#+p{%$w^w^kwzfFk#C2Y;`n@>PRzj48 zbZ~2-%v7s=C58=-jR#$q9P3Rw99T@xBp2Uo?Tn3-!LKw`RM1?Xb12;l9fnsk;qndc z9P0Cm(~@g0%X3&Ilmh>BFSGF-CVqo&TSCEtvwTt8?%Nx6ObQ}H<)4gYBjk{&An0~> z3boJ3_!$m1`Ws!OX&Lp#AwS%AwL-(+Z?l4-8i}JHX8U%y>XnUfEwuSv4hAHA?MZ+K zCi*1_>BwroFkDVJR@?qxM?+uOr=Q8a;fg_FsWsGu8xN!$s~+($^7lX21$Yo7RM@q-??;XlDU~aq zawmp+-?9m8pEZ z;toovs%HN3xe_UBp^;Qv+{#`6|B(}Z5f2;&^4j@6*)B=Z`x057*Qz`OS=%gZ@PmJ0 z1!O^(q9Ecdv7BNb4mWh0f7$&@MnSo69ZTt?hPz(30qiI1+Juowe_JL~#Aw^Yf4)AE z;g*VmdJ~KF+d-qj%Qy4h`X2o4IIo*pQAY>J*JR?1`qDDVIhUg11+B5@xQzqw=LK57 z#TMI(>Xv0b$f=Z}LA@cKwtThp{*%OjIbFx7gTiNu8juDjQ~i-HjgE~#(tb{R0Oha# z9Ezn(dNY13_j1Ms(FG&%kuPD1GTxZs9tI)eM8J{Y0TwcWb5&)ul(>-%;?3eR{V14o zaEScXr1tgXw>)6Y*uukPxMN)WWt zW*^m41?KHVcR~x2Crfd*4$OC0y~!^bMEQm)AQC2mTwA-y6DINB4>gzK=TmHVjebAI zg#-%?0N$cl47dt)@zF=*xGKNB}z|C;kYD!L7{Asf4w8Mo&P~Q zmTGyAcrRlwt)2lm)llC5kMZ#T7WT#lA#PX7>R!ah=NS>>}qzh1+DPrY&|*@?A>&Ss~*7MqVX@-KcRG-vP<5MHaKs8e^w)r zdA`CXB(fa6BIw{4#rn9wF~o-zKqIWtvI+BA(}KH;$}H zQwqpSGZcvZ`%(Maq*8}~&$lh<*Go*C>9=q%0olue1gGVRJCEJx@v^8*o~PSStp;o| zH%D_r#p4-R|0S;g97GA?1u5M)=`?#>&r@oKX!<$#nZyqoG;&Zl0+if000!^F1Q?_Q zf_Zf(cP|R;oD*ncA$eT(!hf&KC4y6B_RD@PmgJ}Wh0g|XG z9aFbArPWgyJg7Nq8Y{pDk3Pk~tG(!<7eiM`;YlG!8(1RZuZe&JOWe?k?(+Pc%Of{VGsz$=BN&c;u+dzLQzTRe^De6b|sZg6(e z z@-b5>uaJg2EDCU2)HZ~+i#agwFW{X#L!dRH%k_;a{XnCJ1oLwR`KMeeJ1~U`k~Dg` zZpDtggmZ+Nht7L!hsL~ZHCiEpg|0Lr#uc{`#CX9f2fz_&oVDzB&IzN&xSCXM>|hqxGvc_va9`NauXL(8*xD z8gLF4u#zT;{q4G4qPnP)k?Y-2Ax2XfA&@Kzhg8^P>7c`@eL_ZRcz$VmRoyxL#d zI$}%h|A^Sd`$6V-_X~`QPpPmS3@8M%jdwT_hiOKVJ2vDN{z6RU^Gx_Jrq`u$DH?6R zUM^%xg-NRp!o0?=2WcBUS$^1!RPf_d&9K~WfR)U#$5#ovFS(!#%F8J5!uDN=&&-RZ z!BXiY_}TO32zcnh!xvaX?3eKqI_(#a@6Z>@vZaeLq^PFFMik&t#4|*?toUqr-P^8D z@9hI;JI?S@mH9$}tHr={vCo8@@mF?$2jYbu9+0oFJ)?&=pndkO;rHl{<)>L_>f^u7 z6sJ%&6AH2^P$13NHX(oawM-$b^gvB>;vpYDziiFHZ{M41%>C_$gYAW_+lX4~iF1Ze zSqUz3nX8VB(<3cF(vAc5Agx(;fR<%FY$1Lrme2Mku>(^;wOh$>)N%nB~dfUg8Pd3lQuwJ)%|HfvlWycVu{+1{-STGTXE-1ZSAJY1+4;gLGE ziu6xe74|`!BVcP{-wd@b?j}JkZN)1Ik;YO<9X{f!4|OH}*uIJSfs18TI)wMeD8UJ3 zy?EOk8emWSVHRQ7{-bS)&c75m%xvmowTJk*N>&&(=$*QCbrw`P*37n{&X8eGu?Na> zqB|Vf80a>3q7Ewu<7XSyWt2o8W=$VAG2YEH;g6ErwKf_MuvM0woF~YWhG{;3dw0&m zD6KBczVz+u20_F;-Dxn?kV+|;;2uqcWC&5;Z0*|=b8&KZ57Bi+-s)jA#`RpS6ZPZf z&zcVRCD{w6z#m8#+!|rM=_#0oMrSr0v=~>%JX_m++-6r3^taJ6{Kzg-qr_=uVGKEI ze}S;)TVOY}Tf%Ot?Bl@|V zpg^D-!43QkMx!^cG}4h&WF29HL=h)Uwx z>)Gh|BAs%$;_40EQyn22rj#}a#wF#DI7_2=?U6Fdhm!~epNiVX)mB@MlmzNsHAqMH zXDhg<>rhwA&5HMLHa89&qXz1~o$he~K9JUuK4es`&ExRByIRbQ>+1PPFTEAMG|2hV z-58G;bAcY>qF z%0h0Mw_c~`TnVE`VsxVM>+0aamo%t`aSER+hEvu&xfsjG?A3~<$?l2M4q57N0b2?S zvo@}-9~?;~2yrlXxK=oU5*>U>jH7-1Wys5RI&4zs6VxVut)%E!Uy-3e@m@16*S|RZ zjD+(ueJ^!dE`M--Irv`c^Q5W-Yw^Ls!uuKt&b!lrv**m7i{HJ4TvImY(~VeDFi%IV zEcPC;2LaKPVQ~~x6veNgmPzHf_1@l?kH46}0`=(dA{}rOV+RG++gantO>FZB|iQ! z-e2m8#hA6oTD{iU;DU#jrjDnAsXh*QRdzDp_e0d zOP=BhW!+MasdJ;)U8Oi?_f01!>?bjTGQX+wOFN(fD%wXWrOjhYsn0C%gJ7r?Zoe#4 zVsZF;HLEk&rzfuW$CN3f43AT2L$jC&;2a@~ z#yYW7Jm^mq!4WtwW>R|$rxAh@9uWYq`F|H+^>?O9==dF1>e ztSg@JMe5a%tQgT$_%g-S&b*a+%BWWf)3| z2~o0d3T=8*iwRH>LDQej#zm{RM|*9_+;R6NP)0u+)-(a-;;HgKiY?N09`%;p+>RM zMR2mIC;D7&mN5m=BOQ66^~F~yVC#VTx)n>`NJwlyZF%7ke?R5dFrknoas)l}=j|?C z-k1cksE_4&{v#@(+b88;;M>szI;vZ}#3!Br##_0eDgBnu4lgY$cG( z2QyRtsWA=F8VtW9ZpRXay=n~K!X0S%HmlApF~Vpes1*1B3SD#&Sk{51I8pT2%nBuA&nQ@79fHkM`8*J5J#I_++X|%wy4!w-2xlDn57vE7ydB9O9BHBho(BP`drhY)}{A7vU}8>*XGUH|DSK-G|7Vq1bHWx{{$PqM7xQHZDl zugK|vNbEBRC(Q)XQ?$Mb&iU&ElWTg-JgIo>5p$M=7fasGh*)ZsAKln=pyEhWi`(-r zl)$*ycsm986tNovggdedOh^7BU%5Fozp&)Vt+)qdfha{Hmu&dT>u%@(dyq3c#m#K!^NR@qhf@990ZWFU zcUzz1=xRVNUC{i#1)_@*>;nM6Dp`>i@(^0?0)z`eK-y3h8PlXTjwz9_n6H`dFVF3^ z6`Ja!!1@W@!RNCZO|XZ7myjbZO0=1Dqg2S%DuP3VL+e7CBDj@yr zyEi=&3&uRpt*}yqQP22*h9phk`1gF4-~JK5pm^nGG>n;8X_n=8A{n$lq(}KHl0_k6 zoe6?uWnN~ebu{8&1&jM5zndsi6M`~0J?NGitsM6LI~K+mGZ!qAu79YAfY5 z$W(GQ5xU{?bQh2DP$#OAPZ0d`edVZip@REak%Hwwq#Q2&T9ifugx2sakMtA+RaKC1 zq#fe3teR#8>Y?@kiikX7u5F}ZMF3cDpXGzxg*E1&W{nvub7cT{d1Lp$UI@yy=foHq z8Wi;Yw#-8G3IN!Y3BA||WIZ)xftSbK0u;$<@p(gmj@|-q)Twu^AsrCO|1fy2xzUyc zz8}`LvVysce{p>b{}3F2IzHf?k(MMAUf9Rs)gS?79Tw!-`#(e%X`7=C-(0uR-54eZ z8Rh@+6L*LC??3jQ#v({0VEO>j%k&@1+rw{8Za43=#~9#G08S6!B31uzy+38kW~X6S z=A<8@sazSz9g!{WsmgbR|2EGdt~t@W*bAq}Du2lpydm;$Sn_FwdV$Dl&SSgR+Ld+a z$sK_LUFsdizu$a&F|2k2ck$W%wB$0zPv7jbY5wvzFH;)jcJ;j&SPgiJw4jnp;*M(&~K^#3Ln|0};DG z2Zum@OjIWk?+lS!mU&N)0MAKV)pkdcJB04f@lWfK@51Fx#qU{4fLRB)0pk`Sj6>Kg zt=yyG%dgnP&1-@| zL%NV8Y2mv0{&n|*Blh(A3;T{V6l({ep-)ZK49}oMG!8_;iX7Nd3%@^?5DBKsOJE@yp`uq?cWBSnGxaSSY#rbWR=3A0wO7F6 zKW%#&!t?31_{Txj>^i(N$bo+!zLj6#EWEsjR#|1%Y0sh}lak=0QB^1_ARB03q865@g)f(3I z8L*d1Y&EGPeSETA{(d$pIuoCX;BY)a6#*0ma;^`JJnWo?PW&*+1Y$A7DXmrN@F|S4 zl4+-b`hF3ne=XuOwvj#3IJounZQr*woKP%XTK?=t#FyDG0jG?V7=k==r`*no2szqn zOEsXS2>uW_VC{t(rAH=TGNau&l^I*FJf{k%Ef^dH5K;}3<3ZUEBGw1zYwP+Fu~AO`G$})fe(&ICm!Qxko(^vrSw2^rN7#^E!@UW zSpKWGQP2kU^Xd_GVYa1H;Ai<4Plf>(eS=8LUvO_?jLN)|n~;gM)%Xu$Oh2~X=wBS) z{~xK$KdAFRYd-z#ocV5tA%5P)}C3n8F+qyeyL_5R4Vwy((W zgPD^*D+$X@QbO{uAXK}oxcZ24%JHo%&3bjkfxJ+94Uvl|g*M3#7JlP!2_q!{6u=Jo@ zJRxbM+HKEBU4yk4KqK5b+R;v%egFxc-`nfhb-o|>My4b6U25WBYDOlH<#NaRvx#L{ z74?Ul?u!|sUUDfppqdHY|Lx;vn&C|amWJ`0k)FpJqkltIRU}>w5eu->jgcGnnX0RE z%p||dpO5d}t>lQ&Pda*dISD~z411se{5}6H0B@?}7leZ{K}u2bcj(c5Ft35+(fthu zHaLtdVqh~rbI6g1=W7j%?wnW^$O;-BTK#R6NJEDeSpVy`@0U{Vt*^pK%_EI*p=v|( z80$?HE(8Q2Us3-8`hp3Q+WaTfZ*F_k=CAsmK1mgfq7**eWK9-#GMebH$aH}B41IbU z)Y}J})sYH&66E>H!qdhTrc+&7^vEherA;xzQk15crjtE_F`-`9H1nsdCWt;$2xVFezm>nBcK~N z`yvQIBX%=mEOMMJE^_<%C7aHi&)K}2R@^Jr0+j_TTd zK&1qNR;vEbsMM!62j8aEoAEuwLBe(*CrU0)>ZrC%6- zMs)Q#9AH%_*Y)IR!+kbCC#ino!){A_qW?ks)}8VGB*lS~R2ypC6^!=D+xwcUQ=;n& z2MGq>&3>U9{y_eaKfuKHHB{yF;te`{kira(z?S+ZPwo^pl+R)~}R=(vf{Cr(cliIVm(P zJ{D5C3vZ1M-{w?t6?%SUGff}~o_<5mGxw8$;zM1dx8NeO2j$~$dD`%sA>q9=m!En^ z>%;Qb?YNxBJF`h1K)jld1W>I?*4+1GiD@_UEg~^-u(aiN#%?^{Scl&IBeA)!6Lp>@1c>Bms|K+iqsC98G^jobqpsWFs(=(@Q>OWxJFO zVL`(bI}$){gpns~Xa)V?gpUXkAfSZ*le5qF-n4>9FFl+sHgYqOWfK0zV_-hvua0Vj z)+gUn?}3Dz5PL#;Raj=@16TBCmW(5tAZ{8+46ZXFM>1|y#e z2t18TXzPm>K23%~ks?(X`~Ou~ycN%hc%Ahmw1(NUp@fN)Hj>dwLDc>1yWpMy<8Q^X znGJ>ajStK$+9iFLRL3sk(dL4C9xRWPjx@eHA+oK#;PaU5!AtP&D{~j7B;KDX2qYQ! z9ug!SD*8U1Z;o1H{Iu()R7BRt?$JNN7teP;0Eo)Ls1O{C)SWi7<|9osp1H?pg;5zq zcc;c_YOJXU3|~LG){v`w%Fu;8ZPZUhRpcWig;56d+C3*LU5qy=iz#6{uVpdsh*sj~ zgQ-3uN{}4gf3W~2;aCU&x7n}01TKk51D^y2mw>YAM1H~0K^@QijE~-&@`QUGF-_u# zrf_nv=r(=&Sog|RF9Dj-Q2qiKj3&?wV^ICI$DL7sb+eG?-AaXz+MTv-VaN*-l~pz$ zz30@e9GGS>j1Z{-=?s*OVch7xn1V7SRD}%L#~mk+Bo{<{HKt8SN`i4!o1(%zh+{ItpwDds z_|-n3_;PggWMLO%w9SZls6ctxYfEQK(hR)7%4o1 zw3W>)vUQg*&K1j4!x&FD+CK>4 zzs?&?sliiMbga{$DP}e#q5f(i%bS2FlqyA2K>BO!n%G`Gt9sksgIzSEmZo2NkomK_5e%lR-1(Cx+Kgk z`N)i#il=Rg!9UMn?=*qR3c2^SHMzsir1`1>E_WJgux zb-&Vk%%rm5k@j6%Y`9>$!!csMegb`o{fhTBI!2$aKf)%%KBO`Y>s*AitHJuwYjmt@ z;&SZYK9~{6W(|B>_N0ND_qP3`IwAz@VZI0IXo*0&Baz)U1R*a-C8OO^J;~|*6oanzwt{2tt@gY3viYUv-v6I3PV(+IGG5vWm-!m?ME2^BY>9g!uWFwsC z*2hDMl=YWx@Q(bhznT=~UzwF!oc-k_D|Xxi+Q$KkSe=NR9lj&pin9-kY)R3Zk|2ol z@0UOXM92F!C5k~e4A&g^H+?qt^mRkm7db~{ECbGab< z7GPb!Lo=`AdUs@39pH=XivunOowHT+BMU?r2XSI(J0)S*za-wD*}wS z^;iReC~2KMwE|tPKLzExE+35>5iSmdSzr=0NMb>I__GEa!wm6N^#~uy!A>A9CPFA) zePL0*WHyG`ei{4>I2#`(3@E={yJ8s$uIX&eHmp54rmm3i38UIDnRlmrg4A0r^y_Mh zdf(?!gKHq;Eqkz-K;k30E=>QkIBp4Av20g;`;cCA6P!iyXAD0_PEip!50;AN{qU?~ z8Js?}(4keoP31D;9=skq=-hOQ}wblEL(k>}% zPl!LZQ1-?qY4|a>T!7ytR{e!tsjuiL58k^$(gUD}1&)d>TScRK~tBHJsa zM3&8U#US)vl|Y!->(0@`TC1+F-FjHu>lIfDP@B#N8?QSBNF`@Ce&?VN8p^WvY8TXu zE~>R~1!^*5VLEcVS7|G}Slgp~|1&a~njMKOq&yOt1b$-jY|SC00C!(0>I*$te~7Hx z563`b2|n2>fu;O?9n;FJeByI5-6lhdvX`c{_tEoBKMv%uvn2^^k#k1l6^$&^KgA^Z ztH#x<5*dq({=Iry`rgfHvrYPFH^!@S+6`f^>%$z1)SgdT7)gVoHAruHl%Pv~N{aKVi~w&0|OB(*X~3{Wiib-BJCaDIt(pYlZL zYh!)nbmwfF4SL^;L*6+3w;QQWdzJZ_^V-v;eHWxb10S6xVz9s7^YGuZ06#mgkzm}3 zirU`+OQkgZc)(DnRTyv$T+pbnlVnqp1Kn)*RurMTL)EF;ui%B!twTap#BUuU135St1M1RdyPJ}DN z7!tb%9ko+XUXg#5@2<@7Qck?_OGQhVzfAF@It3QZLKjG zpp^vf!5frJs{;qEu%mo>n{g7lmOqM|uwh(?ICc08)BGcld(+a(roGw|Zx8vUl^5lH zcMniWc(J*8JvQ-w>i#N6O)5u1wgdPZ289d7-U=7}56yNDjHL^P=c{di2K86=msO3y ziJ#=i7m^kkOj9oGYfbB+d#MmMIT~a{0X|6Zpb~X@7vtr>KP`mXm!fTc{1tedgV#}f zaV>99I#a;=#H-Z6-yb%+K8=>un(6{nK^ez;&`dFQZyU*%cMXbkf_NU?cJ}P!H7;iC- z9~e_pyXgJ;QSC|@JA`;S2dtcV+V@f3yDu{qzqnlq&_f9IZk<%5KRJqclnAJXn75bA zQJ?lLE<}c86PCKjdeISu3qia4HRkd1mO$v^uc&6(sN^r?fl6JFB?xB4STv8g!)_x! zaJf?2_R+mSH&kgSvtn*4&wm%qcKfVXAQqdCxi^#+uZKum&O2@F8IsNS@*a%CG}aXD zV(|onZ)*wEHNMFq9yb~_I;nPn#m5Ao?q^jbtLk8lolc{Ba{r@jIKub!C}ZQh+qHvV zl=`o-oihyr;G<63C*n&oiAjril4G>(w{%|uhu-J(u$Q*Q24%u}f4lU?s}vt})_S#j(hTOFV-jH| zK(zSXH5~2OC&VIP7PVX2?%1WIjo);*=J1jsw-0w?o}E9uZ!8c$=bjT(F}mp}IuS#y z@##EI5TjQx%#WMavQ+~HBl9&FXxkq#UrP|^4c--kcDG*8VXetVufqvTt4;efe<__&Ct|}Glk*5ktZuC=g zt+6G#{ajuDWbGe}ia5EtsM(Qrs)htK4j?fC(`N#0(^_x`>zkRPR^yK<0sh6_gwgho ze|-B}21k>Y&mGN1K-Xr;FRm9be<^J&NJraW)g*8n8s8AN1D0_E4wDwOrgE?84zNh= zFo??aT8Hq7DOO0yVrIy;b`Ny2_zzzERY2VDJP&cZ_MP(veqp}FJI57Km9b`n zAVQFCw&(?E9*-1YB%LVFWPj(^dpM&VUyczSsRyf!88kCn(3*xGu?Lf<@R_o&NoDj) zM@EV#5Lb>V!5XkalA!lw`(G33_vZf?bjHMyvNZ3i0^FiG;j6)Es^s zq5I(R&lwToopBD|?pU5hhj29QP4iw7+-$y-j=k)wd3Gy0M>Gd9$Q7&=I?niBfq=b; zgiwX#eU}<&bjv)h)ef5StROqAOf90+G8O%ZfN=@Smm{_B1Kf#4G5hAQnUV8qkut@* zf{H%@0_YFkhdlMT-R7$j;PTAJ`Y(QW{TxkvN`eM{hJ4zwiY5PjpwDAv{#*V35##=1 zWBxNtKDtl(|1;1b-xDnV6)^wo`QIVyk3|0wg#SK;|A<9@Z0rA0lz&$XTA#3qkRV(@w0I=vc0;qP_VBQeLd&^3wDyVqUVI$O-Vjn^A+% zmPT8(#3AbDUtVrb%B;3hk3oXUygU4jJcfrwDZES32Vv4z*Oc7DuQ1biG6(T{bVZ+K zMHVN2q)-Bg{eBpTQtWthICErgLCfdd*sDaZk}>|TCJ>Rd1MDg!Vb5Yy5U$_sJPFGK z#<#x#BOx%}(@Y6^Y=WH~o}uL!WZ{wcBlcfS{GeyTGL{(3ckHBtFYNi#2lI z*R}|gqssoUL3PP5nxD)T3x}=%3Mttg`Qz7 z@}6tjUG;*Y-C<=UW12AV`!oqLkYGau;Xa2;3A9^_Xp>1Wij~g~)hMb0< zFffY(?fddP%7Go>a-rx?MviuDs~j$eoQf=rLun4&W`g{{$G_oV1xCUE0T=)Qe$%sg z8GJ{(?4$0#Js+UxqHS<}{f{sQu&XIZrI?pa>W`9PXsR{(f*ajt6JwFY7!^Hm_28(1 zEHE-jaBhP(UFEdO;|2wM-Z}N`=_GH1pB@-aBSN?OFqr>oQC0#o4F|*1 z*zP=|048i3;W4<#YutpWE~hcZ2Ga*2-Q1{ve_>uB&$3+F3*(CPm#xj6HmM2)s6CU! zxI&v9!vQy*&e$Q|2@6GRo~saVrvMj|In!+Jkcky0c*_ifDXw05{EkFO0HqY#9}3@S z2Jh@m6DP$YQJuqAMmROOiU~<#SBS!t9-DM5I?}DbYWp<@I~LA>D3c^DQD_kAImBit zg9JR0EL_f5J@XqRxL+J5jtj1A{a>`bbySq!8$C*Q3eqVEDBUQffFJ@Qq5{(0B`sY; zDgr7E3J5A7CBx7$beD7uARyf!1H(O|e(L*McinZ@UH3m1Grn{Bea?RN-p^@_GUid` zy{Tx~(2O86oN4(0b2bROa%BPXQ1Mb+&kkQuN}Ha;W$#t%O!{#D5UeRccG9y;zjNtL zGFgrgQ&~ow_Tw+$*4P#Lmt1XUSOs-bsMaR9A#S0}$q9zqJM=h@CfPi1?v8r+@Fuiz z&q}#>8%v5LGyEZGSVlPCFc5+?^K^5}GdN%-%YL&!j#ruuW#LA~-!^$8L;W3J^X;63 zp2K(vrj_LBGGV4y`H0^vBG-ptwaSs(q~ZN+;Omz~kyutPG{VrUnv}^77xXt$bK2x+ zRnkva?trF&MDlNO-_9^A^7QyV%nR$FKqb#W+UjOl5PkaRAr~FCy&61+;1qNAF1#b_ zug?qC6jnhfNpBc`h7yNwip9w-F^a{ib0er2J#)w=2Jw%dfZi zk!{_4(WyWF$(l~Xb3JJSg*E?e{cM-@ zhLiA|=BB2BtHTt-E*$rxTUC)U+IOGB{ek_<1W)3{Jyj&EL7{yPoH7GA3p)2UH0jMi z9!Lq!{+IUkS@_&#VcPXz#WvTUmM~P%j|i#@PzTq z1l;E*auIp0Dzevq+T)aR&QSo-5JfiPZ{WUF$YJ$?=)?n{UkYM>S+5wvu%w5s+rIC{Y^7plnV&&431TJdl7*m+%zWU@ej-Qw!R|J^r`+>)tISzmvKhwJ;{ zMch4A7n6CICFc($Y4lgGcK+Q%z?qOWTeceBCx-Gpomm6Ij3Mi6MEpMljM%*di+@K( ztp42$!#CoJeC^t-{xttMqIa;NLT+9C{K}%-J*X#9&&qEDO?@yC- zuHS@C^{q!rZ`Zo5Ke^!xVh;uCJ0KXN8WWJrINe!$KP-7lLKc6JVgn;2o2nH_|9WvS z8EBJndJQJIezq6o;3bL9RJsDPLv8WRKAHU=;Nq<3;2xHj(O zUzuBjrlT}Mf1Yro0>)w5*NMeHl9=Dbx-a&PRELYUc$$<%@>DZLC8*u@-Py;_4?YXTQ_;wpom#7kmAI-?1Mv zI3;UU8_~7Dx;d{AA50sOnwpv%QEsseGmjH4?lH4C5xx!we(EK0lB zk=z!(o+38qpej*`)iKFMDoG13SWMlu5iY%>(Bneg!l@yFe=33wCxzZiz|V~Z9YvUZ zo%b6*t^Zm2wZMi;MU~*oWc|Y{%ump?qlcuD{zn@9fr!0b<0|)Q9Y}-go&I7SdsuH= zvq)-bUQup-Znx4cRtGY=QhGi4Q9P^@t!-CI3-MiD{Pb)>tEQNoyh-)bADQBv3y&Z0N8LxEClJR=^=WXIKn4=OGcw>zfukLL9 z-AX^R7=rwEB>9q7XqOOIXh$p7{%dcsc3Vq=c@cy-|I1iD;W09ySK^~L3ZiZcc4J|` z3HY>J&X2LtHZJ)I4sZ%cu|;58XBK_SdtC67M;nCbpKOf5HoDRryejtRy>6&$}t~)ae{Y09&bb_%Wjt1yF7-Ih%NRGU_4q;b?p)K6y-_m4s1Uq6$L8n zpeGUodsdN-8G~jI&F7+314kL13YOkWE!FP#Njo>3d!l)J_(n_zk|sC)qAG`@?7i5p zms|H|GD~{`7D1Q`@Eo9$PmI7GwEgP^ri6*sw<3==(Sae;iLC)dTIHY58eN>Hp#11_ zLJ=Zu{LkOf^o+7sh&~XI{C=Nnp-I@0d={|%zi|X=G;#V0G5r?W#sMu%52wHdSVvfg z!v9~78nH$j0eVb1R%T2PK0n@?;SKE;Z15Y*zGKP-#BJy@82cZ7<9^&eVV!k;f+G9S>TD`*7c6xk)ihcWT_+6xAoLJlG8&OO)w>T zCkH=I%sLAjtx^<#&4-v&vIf=$UZB(i_S5D_`fjF?GD?JXg56F4#tU#+FA$&jv#Kn= zwSO@_@=EH9_?8!ffUt}|Tbq|SKON*ByrueC|F7q2%=s}w$|_;Hx49g%NL3x@ zh}wOV#M3}d8w%3+16JH5o?!mS~sQvY0;c}TxShATJ=2%tO@md)Q6 zRYG{KrJw^e>RYsoTjngQ^NWrjo#1sg!%nqV{Skd1T!z@+kUCt6CKj14d2ho)_Bj+q zCojYnbn_xgig6DM{5f3#Qp3mr&k)QIpPsAsH_SB(mAHeQ7}8z1$YBk5><@nTjF;4_ zSjC#jqkp8si2HFRVoTZy;P(cNny-6HhIB34>5`> zR7z>x~Rq-ncqfoBU)< zDK$9rWsVZFr4*c=9p0<4lqR!BiLy3jgV7O<$H7vs2B^42Uy0+~oxD<%DU8(@j#XgG zI85e508sqT+tvwN`M);uz#CwgK&}y2>+yL_VtVJDSRpVD95xe?(3S?ND&!vF+0_jW zby4N_^QqSuO~q_A_4;L)`OS}%f*91p*jF1Nt9b8Yag!r83X=tBB0f6n4`b@K9Wtgz zviiDViVcg^pQYaW-ntlnsD28e3pe{(vCMD(c zjN$Eob(a|Pl^v?UbVYUl1*{AK)$=1g9e2@Biz9bKM}7I3&#z|$y8^o6!TMOS*Y>QR zHh07MrZXIaolLZP$R%)hR_BUy#&y)ELV!-urb>rVhDlpweu)>B<s7Gur``Cbv)WBbc!`80+WDG*4e>%IgaATTJ@T1l4 zlkFJoG|?a7Bt(1|qc3v!1glwpA7q)6Bd0(0b^Om#Esf4Ze+D+}^covT9!%-HsGVJl`7TNqnFfPeYMUZke@s<@|bb&pHnca)APtYI$+U+V4I*@`^4I-Sb21OFV4g(&WT zpWVjGE7Lp#+MX?Q=e8^|l6-8q_#~{cGR&Ov!-shBJ{A-@`|PE0m}c(t?Q0}{m}fj@ zPo8GB+VuJ1bi*VURYkG9}T^H&!Y}-N{MnF zn0w9<(@(l43U;SX3gGO`GGK12e?MgU6Zsxj;%Th=oPQKF*cCc#t@i?==O5ikg5>69 z!Bt_dxu3;SFY`>gK2LR~*Q#k7+d|isumq-crS>Whb%Rb24k0pW0EVr!U3( zWa*?f7USeIozlXt@m@-~e@l{ZE{YQ?;2B9;WHR1h&y}95UGrn-WAAK7^+MZu@R+(e zvDHm+)0vABKn97|FJej#VI_+^!CLO!3$dedKCCyjbMsUbHtVRz2rd6;ycO?0;P(aw0hIZL5^MGELrFQoY99#|j_C;4cn^Qm!A|ev#D?Rx95A*=5ukcr}aw z03!TBGI9P!!UqtaU$KR0(uw4(%xL?bFBE2_|4fS!XjsU+O>XFMt}%CFR9wvJWk#l%C z@pDjwcz_g0oqynG^N(S;8iiUK-OYP$)-t;nLIw_?debLv?u(KZ<1cWfmJYGxYi9IW zqMab<FZ(1q#<4rAxWW-*GnBy!z?{!f$h+}@}XgDeCwn1xN&}yczW|BoZFpxk1 z?o{>;6&r23A%ONw>X)K0FFzGjaii4fv)AWk7%<{1&vOza&` zqU?zz88a_0Pf){!K2293H7B4#@L|=6MXJv8a;qnslp01>1*TD&K?=&$%HMDbK3Ted z8-g7D)IF;UT|OK$4lMN^GsFGl;P%l70iY%!JK{s*L@Td+U^rX!%WkSH{k^x5NV(UjShTCi~th@STG zN;qD)guVwSBjgsNRh(t_()w#J;QjR%q29HJi7Lk4b8ceO)-MgG>EVuel%+ovIBms( z`-k5QJ%1|sC>sy6r$9c24%3{*MJkaeZ{j=8FN}U4h9{kzb9m^0HDO1XdP35*G1TKy z&Y!Q?gOLKw_S`7UqJ&SR!2Nk~J{~hG-ClBnX)?F9KGFEh;u=BdWG|Rcc)lp;ue6gE=Nww*KK8n-0!fjji52eV15s z2&pe)q(z>nDau-@%#WEUQB7o+LR{hlCNP9WI;MEEn0_*BX%UYK=#{Ra#&qh-%m6t5 zLUI-sIMFc=&5{ndXe8g5sK*pfOmdDYlsKy$N`Dl9%YT*xTy%w#FoE2PKsO`&rc0qms5D1^#Z;9@42S)dJ~eM6O0q2z=t zTzQ*31;FTqSLk5(ka6o#k$%n5(Uh|>%;fg#q})^VvP=gcRtav>kpt2@ZL-2Nv~?`Q zYm?rb=CUJlR>?a2WsmxZp_sI8>tYeA??+ey`a6 zNm0;L+l2HM%)G0sC>|kqK5+-k&1-ycZ|a86G5 zV!xeSEk~!C2XM!}%ih~I=myrmL4XDlB^2P+W0=@6G6o-(UkX01K@ADflymHih2PgmY#v9(2kYYPq9U(!w7M9JTkcL@?Y8c*e~xISHO+Ib`cCuJ@_S9O z;p8&3ow+=4d{Al{NP)qT7MHq`>Fab9a%VrOh)K*EoAkK2jrG7EaAerYZh+nW2UYNV zc|-H1|5BoHNIwfQjnMYWrQE zB&TJ6dL?Nx3YGK=229j=IoBrnDr8VZP-Or*6l!aa)p&&bX_?v8LQ&ZR{>te~(T&TJ z@MG1?pIxYH`CF{6XDHdJ`1;*8M!i_AZpn&f$1G{rA5r)lT4`KY5Ta{m9e zk(4$Hl^TraV7o_9&3}{M%$nwI*?c!%zcW+mJSRC;q1+HK<$f0=4L2JqBN}eB2VC^C zFU1aPme1jiuz%bLG5!%My%&h>x$|qTvIh12>^*UD0Ku&iT+vA=N zT{=H?)MkcE1-!BFS8ln;>&|Xc3J^e<^}0MLPEvqhV%TD8`sOh~^*WaX!sx})T>`83 zHO5=}wT50?YAotS&belJZqLQZ5Wg)pl(#@BuV$|#sQ^$j z5wR@jl+TK_bHzh9o#};E#E#;D%Ya;kvHTg60rMh&Km@2kN>243U~I`A#;uvDE>Fth zx6=f@7(2&UA1zue7G?+SUuj5IM}ZD#K&E;gTuQ#w#mBeFCquC>rrDu;mCPR)Qr(-( z=n&8sE~2}BgEoPQpn{eKCt=xOunAC4b}{e2$1s!BPt#~3kzih7F6!LM_ zd`5_fYNAZ|t&b=48`k7)nbX|E(wYcJ&-n9=Xf~_JhAR>+=C7mX8F;?XTk6JDlxfB8 zb`bBnP0U1QT5?78m&lvX@)|IRbd&-@4<_nZtJVZJE-&0WOTgHJLc0Dt zZ+@hb7qp$-0yP_x_QfAcmHoQ;E9c`QbPQZ^&8hipCsIz=D>c3`I(d`nM!UEOxyZ~C z4!&kHH^M2E3|v<0F=V%Wg2${It1UsKEBt~i@j%gC!Y0k&y+->XvH;MgUCuu$4VgVT zy(TnGbaqELF7;!>Wwy2)jn^$+iy~4v4Wf6m<*z#uwaBasHl6CWt+__4u4lD8$1q*FX-&5-va=mWR zLT+>Uq^xEj@UdwXnO`LP?=Azu0s!Y^z&0-`D)LU;8Y^bifCl&EswSq=@GEQVuT|(Y zRIl}X1)J*gtV`NVRM5Ab+2)>mOE-Fs-x1c4-MYFNlYu*mncs7a!K+ff(<$B#(TLj&1lT2#}xVcwWPvH^5zXT=5<(1?b(*2Dhgo*3AlvOl;ak-r6@E_S*RxCN{6mBQN|!9wqm&N8b5}f z7x~Ynat9acXf1e!aND(Y44^@{Jw&6-o>C!$9pPzC=|+wCoP4m?PmETl#u3N9OPc9P~??=zgI5xE=b-5f?JG>!1`%5onf7Oag7Uhs%%0dXaCR~k#!6-38tkgJYm;<+${kER?fY8Choi}$67D9M;_3`w>AKiBQX=yk zpL|b*$O?A)KE(V3ANRJp$@{M-2+qwIe0Xr?6_`pZ9-o_v=D1~JM2k*;LPz4`n~C>t z9*vua=Jzd2&;7hlH$k~0Fq_e6G|=0akt`X4FcIk<^)?R+UjEXP!zNJ^s>OFpGUkWv zWPfE5`?phXA!dfBfs@zdyBM;El1d@kF1xXMu`2rc#(38UDHho63VRy)JPE^MzJeMf ztTl!#)brH#K@B)*so26vhL0|(+i4J->PDv@8%{23a?IUO^gb|k{(?BeV<3u4x8V7ZhG}Git}4; zNn#iU?m#P~rlR5yr zszz;i%L^s)E=RUE|k;+w~!Z+X9jhJr-)+m#i z#?~I1wuN%`oAF&QdjBGXFDkR1&`kgG{nBwFP^QDTLoLT4gC)~UQRb=Z=ePs?5K*&8 zW5zuLC@$yW7Q#$B%M!cw?eQ_aj-&9+d1~{9069v%?){yY?=z3DTaX()UfXY8dFcw2 zuq$dA5MM!5&-QqYJ+hjL9;Mqk<_YKNy zW}x;exb~TrFp&6~Si}GljOf1Q55nfkv||Qq46Yo6?9sO%HHs&aC$FcWHcBTNnIpwb zkI-iiuoUI++>p1NLCJ1rSu~Vy&ji*xZaH&(Q9MJgBx&lEprR)11NMeewYU6ShiWSv zXUa(>r-jVD7XX|#{)y=-e1>!c+8;*I`gdvxJTh_44jJaFJw>a0m7DIERRY||IxG#aLY57^c7w5+j!wO7C ze`WrXo|AY1D>y;bAitK|Q@?$;fQDqQhOdqpCBE{U~YEi7!0k z5v}}xfXrSebA$U^EHpg*sP2C;f@g8wH&!2Y@g#@q#Cdbm3qTl2>F}sFyjQ*|D?3MSB$^ zJNMC3G=6Ud3k0FQrn2~VGnnbNI=crCNX;tNI6R0zKsxUqZms4RM^CF(zd*FLeJLqE zVSP7pDm_Sab)9=CBr@Qk_}a-#&s7{vf68J9!!xEg6o1ZE8<&0BEnVs#9qU&93u|NV zGz~>LZsKMf+;tlX1MWrjVj=1lIqU%uX{`st-bx$(<^G1?mOn8;Olk>ZL}$*!>9<5P z4M9yIRe0~QgKv8?<2but&S&JzhseqgsU4u;7b-_zio)Z)CQOY06+~TKdY;vEoz&}K zO-JnHb~QZf!+y0I%+Db8T6-4a+~4T|8kfL>XMBz`+*$Iy{~Y7gctwUL<1-r={c+1w zlSz9s`tS|DS%8zF#GEm6hWMufcAiShmiACm`YN;3GSai%VwPu1V_Cy z?!?j>a3W|aIYPN9;h9mcCg zalPGl6grO`jBw5C^%Ym6a_b276bqI#prG2-E6ZBHB}cw6PJHO`UA@bFW)Cf-D9Q9p zcyBm>Fq(b*?Gbl2!NBwdy*dh^5h8L{S|)!I-YnmT(saM>GjsLg9xlb=8+Imlvafar zI&@$veiR~5&emk_5vZwQJeB-sl%!s-Uz4$-=Ur%eMZ-bvdkR!A5m+NEevn`9g;>25 zwmX@85qs?RHOT$TT{D9HyOU`|34SZ^oc^gaOdu`P58=m9^veXYVJ3JH+YKV?%_3Ui z{sro!7qN$kYZh!)53Go}jwF<0dbrYK;OET_!UQn7tR+UFM8E>b!{C|6dZ-g#K8k6* zDRRf_^d8|cU8CCz#g0sO2kf?K`RRyPj+e>pv$32cP`9lhocj`QeaUqd3o#F;1DHCn z^o1m3_F{b^%e|N08V&9SIx zhnqn`NkLdllepQ~#8)2N(vu8PWVF#>6N?xpjesg}ZbEcRWv?l(DfNtBJ6gdSpA%pe zcQl`Da)0|3D^gKv+8V=bHl0{NiZxC>Wa%>*8p0d81`LxtMQ0=qTX;3JZm(R0`zQah z2|}P+%VXkvZH^)W<+nca<~I=1U$ ze#JtJcp^*vswgyR*#yC_rgO`pbX?~& z2^YH+gfvgD-{PviGM}$#;y4(siE~S2g7h5*u%-+$W~7Z%NfYo0kJL*!&7}*Nz_Hx0 z$`@k7p1@(VReZHF1Lu_;oxCy9nymqx5y+&eOD64j_y- zPooE=E?@Ri7MYHyLVJ0zW*o&NDhq@Gdbs1T2_LwM{`8b4aDn+FJ!@Y(%v5{K)%$}K zjIZ7S+qQAxrpA@eDh|c9L4tYSgiuzD=dD+2W6xhKG!{Po3B{Sgim(AS`cG)SbamOGa6L|V~LF^%>e z;d2o#Da&DYD_;3@;z+AqVzz*ZmelcU2gkHdNq7&ifBKNdRva!C8aMF6=a|y^GFKH} zqTjC0FqH-<=i{FYPCtZn09?HLVmsghzcTKu?J&m#W*m5a*v=YwR^>@CzccH*ZCLI8 z!(+^FY-k9W!sB)7_yvvKyRdT-e0_v>i(-mb(1h3GjJU3%EXi=*c-3Fiw>6IDRZGJF z$9!XDpUDtPQKAIhtg4paaA&{ePxiSw@ygL&L$#&?QO8x9QRGj1v8h?V=*a; zu}H1j%dxIq#!_}0pZ$4jbT!@E9|V=Txa?$^1>Omu#wxfiOQvCv)?SPs^R<=@3<>#}09l39p@Ds!l89-~LA)f2S|OLP;S_QpLBeCe&VY=6b*%I4$Cf;sA^U^R`;3Oz8%9~dw?FCr(} zsF*swJ&!+m&o7bF#xjQ@C)st4r+#?+VX#J6DfGG#$94K#Go9ef(J*1bVM#HeilVNY zCWZV{?I`65uu*?P@wyV;L@=I)O`&!!F`YU_1)nW0q6egCoQhPb$1uskMt`gr^Y&K- z6ODv<5v_i9*h8Gc1KKU$(qoYAoPvnpkgRRZp>lvHTV@E!sSIp|O6*neIX5*r7!>@Fw-xaky-co> zRXK3^2eT#{ypgw0ywch8Yi|+koK51j9nF(9mG|dQZL1no z*THEnAUHumpSf4e5}C+&8Cx#}2b+DC=(TBKRy8OXgOG#PER~YAoU+-*aCV$r<5O-t z#OS&FV()~Q8!CfCk=Uc;)oCWsV@yCZFUXEHQz+V~Yj2sK9nQYYAd^gK8SB{l1k!l( zUC-MUXR^j?v1RuH)yUB&{a@+MjdN2K$K#ng=4jx>6+6znQs;&74ir7;>J#BXD`fy8~;Kqfsd~_}eWe zOOr1=i_G~mJhPG}8f?B_Fi%gAiQw=ZtT@4)r(TIZ#Xcxy_w;ycN)?#px++*(R}1{W z*v##Bk^=97B-$En3FKqNquHHi#BwmqSqy|YwL`pPg6KqVcF+l9_ zhmj`T)Ya=ebFz_5cKLG*2dRfH>DFA>NcLZ1e`gPSm- zimpe(^Y;%tY(Qj|nCkaeNxw`lA3i8{^OCFZ^aVnhjNkmYznkm9u=Q9U8sIhy<(M50 zXxVVg)9jsmKEkMRIIv40oWP*SbYUwnE(ZS&oDxhO9BPuZ1! zwLKpZ@YQFrJyRdg-(6u}rCm`?{wCSez4+3YZ6lb#_4}Vy;#h!7KnWaNO^-JwhX2U^ zvN8S|ad6YFu{H1JZWHrANeO3Vsd%Tsu@dOraz_3l`FN0Wf6k!t+V%UuN8$6Y(lGx_ z!iX*G{nV_%&!+adlldJv)g6rv1yVhv?EKz^A|(6U*xKxFIzK zT~{P@9+0c~Lse+rCEz}+{GTBP*|#5QP{XsfRF16V8S@>nRjRn&GkEN`80e$J0+{Jb zZBj{xuT^$L^!p1^choc@dO1a`dOx5kTI*(eOPym@1H~C=xZ@!^ncCl7l!f^2j~0#b z&7pqWkgk{VTG_}z<~dA=+rg(qJvYuL&oZ*I%FV}9U&?x+D|%Go%raQhbG&1gTp?vQ zdARoWS1J>IJsmnh9XDLGVuQni{SmS2NvU-|OKrZ>G|UyaN~wiYnEe=9US0-eot-DY z+OG6vh)myjSdIXhpTjVpqO4SUF`Jn$KGMeuaZcloo%L!9TJiIr%j+LvVUtQbMG&~y zBqJc=)|f5M?>jubev$CGvs{-a;?!dg(jvHzs@+D&omdI|4}24mcC-AbHez_sQ1B}M;5T( ze0wC?Uhkdbuj#E$|Jb%j%pk3K z#$Q8mayF=~Q#>=oKq}d!Ib}UgvCwgAs#4`)gD_w~$HybK0?>1m06}gLs@-R(+TkYG zK=mpvzT3`1t*4Sy9_Q`62D(g6CNTz)>5y9FR?W_|xBg6pJ?*SfUPk!|CsCN^~sEk#!Hc2bx zyJLTI_>~~Y+Nj=qxncK-ciaKTHFFumeHCLyHGq%(V1`oFnMmK39(k6Q<%cxG5ql>` zSl)MvRy}}P2)O~9IF3Fv8p*fmQ*~KAAup7B%)Yb`v86hgl=2gnPf^n~%f(Kqd<~{g zIk0czsqwUMcqhp5QK@Y-l!T0*>uqW2$M)K{m1=jNVA=QC6HXkhe|Wf^U|fDEU)boo zCI@)X9d;}Cfpp^_DQzm?`%%;BP*|(6kCW@`u)g$azTaAz;p!dGfztg8F~4VX@2R$` zw(FCOo=4$=6vv&z3!9-SODtdf8VE*aoIuJbX`DM8@ciW7SQla6PtmZzw`4 zbF^zO2$dj=byLk5cCNR?Z-oibANrDn=K422^?_m37_B?#v>->H zOxBk?AApsB`=+Z{s+Xmp5<5c5>Nv&ySnz&Cj}A&z(#x@%rlCGtWmxUxIyK*j!im zmZn=`m@NI2`$yq!n_=OSWeM?M))zD;YR%Wuu82c{*9ck4*LyhXSb;Ynf*sMMv-+$U zJ>B-ly1|CT2nL5wIKm>GH5NK(i3;^?;0@cm%zv@7bCCMg`+WH~7^}Iyz};~2IEzyB zqjfPeg`T6$$Xww3*6|^%&Jb{S;dTXq2m#1g^8fTg3e*SLUxZD*`Kl zXiZG4x0IO*u2R5akp0;Qs3xpGRp|KqxZ%+Yl=7FB`u_x+fOda?`uvZaIOr4OE0M6)A^vINHKwVR2P!(Z5LiHtBWB z@q`CfNv{~t5(Om_+|jv3;)mwteHhGiNY1xiY8{`yW=3wxu|+z#yC;#5#9arLK9PWk z_KUGE-TS$nrP4Ve7P-o;?0@v}_QjD;KuYdu@$1G9DGEmzpYl!S=g)wA@GbK%4Rqj8 zQM2}>-l>|*q^{d5RbJI~)$rG%Eg(}guP^+gAC$BZIZ?-WUSJpyY9^KqvhcdG=CHdkuQVbqe+TjrM{;6OSAw! z|5X(8w>SaqG4$8B(f{@T^GB^aTQ%E|yFga)+_mFhX?t%);HK`3)@!tbvwo?{?N2!l zKu^b*eE{MTDxf=W4yMJgRSE-2jWx+>MyQjo&my!cZLyZ~`^R4d>>c1%S_=~OzhoQU zt^;#H-|uEXkeQFCmGQ`9;{&k7U%+uAfIKze=mC&@LqNz(S5^`_;&O4dFDjlb2(0xOP zyWlB-{yx3!#=7UbD>@anU0rdSpay~}@0QI|^2+l};*|#~a}_)cZytem`!c=L%#s__ zQw798Fiii1mF+GUHfvpRFAdQ_p8Vd%0`NvTh#%A#2>Z@>q0{gaP!?@okAcFere(V} z=!i>?Pc`qqQj|5}X+ZQk8PIl! zf}mKC5Dp;%jO0@X8qpH6ha6}rrxNDhSbQq!aRFnczgN>sj@fBp=wZenqi6k4^~%uW z8aYvGmAMK2i_QN1fYb5M@%xpA2OHHF&wkYU8W~Z&_%I*W`*2v6O1g!kzgd0wmNxLA zyG&A9Vaa0N>!U{cOE&qBY6tDM;b3#VWY0fxwO4v&YZ|%yvQDL+tn=dH)#VH1Wnv@4 z()}!FJET+RoPo^o;j)GnJ^_~$fCOaRE%HEe$aa}ABx?)EK|p7$6MbZ|XUXFk03;6X zOMl;I0Lxvn0?H!kKOAVv1*){iU!ZP z@pf)GiKP4osG_dj^VN@B-&|CTsZ?In>kmbuHKYG1lK@06>)m-8ci-lyI`HRcRw>Pnx;^z2onU<8|LVs9?J6Yt$gd-t~pC#C?^*p)yHzztZHqb1g@oMEh*HT)7HOA>Y>gVYt4i%k^9`Wa zVJ0KHri(`dhvhv+B*?os4zpLidb$neVgJt!n2i=*XEh~o;*e}bMV90+OMl;b*tyG0 zo~Rnt`T=3U&m?TJ3mEZ6Qc@~f&(MG}NB`EWEt$atSsH})dIxUgEJKFr zd-NLk85ABbj&RIxnh^C;?upKr;|naZ&)6})q{?BKanW(orx&$t1(dXvG)@ z?~iM{Hl9qX7A69~xH_(}kRMA-2`^5n71R^wGYd$KAuGuz8Nl~pc`oHFWz$YW_$8%m zaCt$Ka zgmy5N1B7-^K?&~y5%09J7LXtQ8<>y+#Z7{Tn}3k7WY*neP>_|Cmw5RNBM=WBf#Gx+ zMG{wH68)NwZ!kZG zE@_d>7U3z7y$Xb?&hpG&;S|P6iXyA^Bx#SW{nAybMg0Q6zyF{lfXaB`s-SI=`d&Vk zlvT)DI1qkhL*PCltF7bYFa2l)ie zofpB`v1S7$IH6WGM9Yp+qs}a;t+gw6Ck@^>=kPH6?{Y9|F!wrOKi1g_^yq~eBHSg$ z8ek)FA$awf3um7(pOE*F$Xyzx5Fn-ZzO5@Mb%Vjxgoc9c-6r<(J^xGNrmriXpBUmK zGsGpoW?h(ccPXWdR4lK;TXQ99<%+e`%-n097WR#-oAtD6T5E0dmR=W#Vl8D{)+W`*UMnTxdNJ~5<%FSOU6^4}$uJ#IxvlO_J^)Iq*{-bNXdc4w8btyv{1lfgJJ#Sy}`)=>e}FX`R4xa_~{6^Quh8!+n-G|{B_9Foc! zaDGRcvn54fp>#tybvo{OLdC6t3k7%gXdKq`O;6>7e)I2BJkkFpZMk!!MYXj5S&n~` zA^u?|{uM0zD-Z>|M?f^Yp)(!z#H#WHW!N*OiFG_sMb4J|1b$EZwd9KLoIXfAe zhLZpcyvke_!7F)D7}N!^{vGiFX&_2Is`khC@&4|46%`yD@`VEQ~?*Z4B z1ho3ooJ+scjBxe$qOr;i8%KGW!$GL=PLxWfVTCI(w(45!Z{emt#CN;itHFJn7sPb! z%S$_RPR>5a3|7*N6kmOICI4Sc2#D`6)G?_jaOFfC`DuS_v(BM;4Q(e%=Olv)7>RbC zYglp?$dm>)qG$!}A2sThCagjFM0`6ouG)GnrW=0Y@Q_t#w}Jjf`*B#C;QgQd24NJ2 zq3CRsIc$5pWPMI&6M6i`_tSQv_sWzxJaBjI+W@2ngoglHj7<2nHk_{sV&?2zLJeSo zA#ByN$}^{WxE(0|gzjn$@bgEjP-h@W#6$sy+u0kWaYhBSuQ+sjwq|=_mpBJ97r1m- zd9*&aRo+Sa*>P!TA{ z3-R>}m|1{W7mhCx`C71ltli$F=^gA)JmpS1pwIuJziOOl+h%xuOZm-{-<&tm3mXyJ zcyzZL$8@%4j-5V!e0ep^3!DO;Wshf$3<=_i!QB1R z@`{iP1@<~$zm{P@k;DUXUg%jG&Y=JSyXB-m{Vb*w7n`4=khp|t0!#dWLe(Ft4$=e&%mJ1i=+UXary`EhXP--R9Vxx zE}t_vfGSQ18PiIUey1^Nyy#q=QRXWY z!~6#A)Z`w9AX77SWU2RZio@@~FQ|{ssl;mPi#ba&jgRFT(6ITLZB-WG4rXq_$vPzFoB z`x?h5Q5+TI8h(#SQi3^{H9VFdPj$IUL7=CYrf57kM~d0ZI0{2x;#6DeyXYvB z0@e1|4a(=wuC&$SFnDq4^#t2kVsA1qYW-ddi4ew~xsvlRcF`;C8;3JZ#Z7+3G69Io zi8SY?8zEV;yUK6-AuqvFftTw66UWhTLMV+)R^Cme4+IHWUmUi003;3`UrH5a& zb2onG!0A$URM@r{c^4;hZYNRM^>UKR&U9V~@?PN!W{QDktJYbU^2=eRwK&AJqIoV| zbC~HB%SICM4R-)fGWf}&Ab0hR7eICg%mxO0;H0yY<;SVCZulCM5DysE;^dJ(_ z-KkPi(jXF&(hiNJw8VfQDGft6(j_5+Gzde3bcY~aLw8Eo-JJ6~M>yZ_z3X>#t$Ww~ zZ`RE0z2A8D`@TWv+IpTWr?NJw#_RFj;VV< zirc95w8PrO^mV=M&av9I+vS!c(T=<0RiWdDBJ*<{TE~LP)8S1F5AwQw4{dfTFj=_P zYtDv73<(FkHk_~_AEQP5$gBt1&a})OUqdc(9!O&%zc184_kZPJ=FZF1X5*sG`5n70 zqYR5WY1n+gm)*Bk502Hp^^-SDGJ%D$YZ4;G`=#X1)zg-J%1Gv58I?*$eFStYS7-1e zLtfz6SGRlt1L|n|a)N#qu;pzMq2om_C->M42`J5Y8wQyL#EcIk36i)-BJ!}cpcnTg zV}?J^k}Z>I`(-sFUP@ewUW8*&?9$-GWC(8r4L(T<90T8bvKIjBI3Wv$X(!QU`rSux zCbZZ+_L_c*6P-K}M1xuM6he?maOP_%(6Ni}dlkcm@pvUP0M*rF#=P;fQiXoUh#z&= z;~f!_n`AeDRKt>20ljpOa+ofC<2Y34h6UX$>4|h?f$>V`2-vjEU}zhhXnlSSF!d z^5Yox5$JsSIcLip-Z-0l10e+5MnKq<4~uof0idl6dgv-^ew$!|)>FJ5M(YV0$JcmB z%6LXOL9Icuh%-O~D=zpp{r26b&?ZLAbX9XE^Brq34L@`QJ(Gd%(lWNENdcbhlm(n~ ziOnwrG>FeXp?|TABscDc%P~?k%8znRx_9V6Mf|vAS)2dELlZ&DaS~Yx-uoe-&UM#mg<2ksC@0o zA)K69N!cBDqhA2zhyL;5v+{(buvDC1&Ahy9Q>T3i2U;w4zk)ZeH_}$7&o0)3Q#JR5 zixP#w+kQDd>PEaU#z%&z5(<&A!}K^$6$-@l!DHQ1Pk?gql0Qa##-7E`_6Av@&Jr3r z^ApBLz{Cd`lWmN2p~7@mR#FkW;>&av3`O4weFY@fz{DW`0|v zO@oT(y&9XIRsVBheZpV;iT9+F4RBxVXI$ufb$y$AU~7eMuvlV={wCB*d8Ai3-M0W6 zI3h{&qj4_XtT8|+rz6|MzyX9n_n5^xlq0U8`Wa~q?Li9NiRg)hC~tysCi_6w6Eg4_ zNZ=RZeF{DzUrf2CJ_FRG;G6ey*Bl+%@XVr#gdf$5j_W{MOt~y&8xU%@jO`}Kq0tp!Co&@-(YS4E==k$r22>?%%zF+ME`+@IcwXfuT#SIZKxve?hq%r!Cy5v>}ES(+#B_dhC8a|%)G zz|3V5UcA{KG5pTS`g=}W7RmsW)gZ&)M?xsqlu3Fm6^9L>G~rO;;DZFIZ|F=UnKb?P zCKxTEP@j{a5>L8d#~+Bz=}^BU<=*fFGc3Q)*$dudHy``1c>k4Q3Xar4hSf*-%|;MI zBSXH|mxz^++7EJP#6Wu&$Gg~~l%FCo6t5K{#Tv_dH5T|WBo{y$>0X3Vfu-BD z>7f{?)c5&X;l?%_O@0*s_(I^As9(90H0?USIv&Gqc2sKi@oxr<7AaVt4t*PS+rJdO zPgKr@OdJ83)9BDC%kG|>D05~}MwHqE!vZY)(ya|6B*b_e60HYG`hw4W`Ece`pPG0T zplS%RVegWXAT+25EXA$V;9!;{HG73@NdnmqJ>4#JUPUyu2`VosH29yegWh9}la#tb z7&RWyM7y%WSqoT!A+iXa&e6M_#+HXKC$O&{@6YUmwctk)-tcjD3cN!4GmMl)TBqpG z{nH8v@om&e=w`&+=@gHHpPWEc+=kus@V8zb0b>P-HDXQgw!1kq4uHwJ9ka0Q9Rb_s z*tOi>Ac@#^2ClmGt7r27z!3U+*F^I_s-yfHb%%V}PhfVI*4FQw4a)+to3GIIdMA*t z=dK>?pAPe*uejDMKJX)>o4o38di{O)jN2ij=T1|B*a#r};vcx9X@FZ(HF523KyvOa zrL2s1a3w7LBFb+vs-u{aa-u8#4R3&S;wC^eY>P_|*L1#rg%iwtkjXGJGr;72^tOQEaar}7 z!YrWLr#t@EcTEcbW`FM2xMEx>L3EQf{5z7R8VIz8|Ez8z#~DQZ^WmeneFP<%x|~xp z$Ydt2FSyfeJ`AA`jMGVI1J^IX=anqO{q^*?XBfvz-4&PSgGbUEPzmQD3by_Rvz`zJ z#y>fR0JDe;NPWkLH;jL6UFv4ZGum!ac`4G2&K`gcJ=G81>rnH&>@_OmH=G?Z5Eh`H z_g`{eK?IRm`!Q84B)N6(xv#Y4Y=TiolYPP4dCJAn2ikOD3!cF zl^5u#%mZ?kTE_d6=9KvC(ND9TjH1E_y(1;yG1w25qhMy52!qHU>^3o=st=D+<2gk) z-x}wzAM^@gW4d_=3ov0p@Z0pQJNZst$ zVJMkA{~3O#BLV)UElKWI%gRhyF`$MP_Z$xUZVYzY8JZEUOr5zyGd8Y54M^h8&G4_a z=!V`fTy1YLlsy83V(FQ8p>#3@Fg1eshiCV~#mo?9H|zvv-RjzfM!jYe#zM5tleEvDbfAR@Ss zbrBk5R2F~Xy~RvvwRe>#|I<#?e>^C>H#zp z`iu2_>|*}t5o{9trw`t#@*o0F2B zkJALe*na-BWhLPkJVc1g8*o13IBB3O29D7|Vz}bo2EX{>C@D7?CTy zSn}j?opUJWqf>!s{KU*J7^WU=6+pwTVxb=--ZA%0sESm$lS$C5wG#q3#M_WLz;v>~ zTkdM#=zD!p)1H%*mUevjAXtdcKcDTL{$C2y)JTk zAG3^?HWAXiKx^8xG~3y*+f=gev>jHK%c-X^oW2s~ zTI{Ti+SYf$fS#5jD)J@3rBbXd=i5Eufn;c?462*P&U6-wALZ}`lfmnr{H0Sm!pz1X z8Vj=xQ#s|NCmVV%;)93YumVPH!{-yVwe~2~?<>mRz-x<*s4g(qfQaMm)$LU7P8$$> z;IzS}$9v=oki%k=cqtKsZ zS4%MU>#KUATz2`q3(Z__eWSX#ULCF}5H66~1PzP&{HGH5ckCb#D$|-b;_)lv%hmF) z?;gk9Gz+E_ixs)K-6QTN+tNEVm;9?;M9UJUpH=oa*F-~$Zdipk_<=uwg}J8!Q@c}C z^>dy6**)R=*`4xC!XI{8GPl!yo$YfEGIj>fwo^;g=-xzS-tZCrOie0-#by=$V~Brm zg@480-98}wPX=}VzLh6X8evY*exWUtNxe|}i7&Qn91kyVk#3y}kjx51@qUE$0i{O& zLNz+^x}9%9fyKGn`C!>z6a}C$oE>gxy?$L`JzEbT0|76k9}(JZM&y4kV(oWlXWWi; zoWQjO+Y{wzJ4K=>@Vnlgafr2ibF>d@H3AeK{l$((McBzbzX=G)O9299ZvsAYfv^aG zF8z0$D-f{3#r*%oPZ`9(s7zx6Ojj{B%v)zPxc?fW6j)&!$!@@jO zxKwcg2+jO^#D9C@Zy)pjPXsCdmgm32k^h^m0$80u5e~<$1GeV^4wm%X>j{I+R37(S zE&}P35(y#Oq5-zlcaEa~h67;A5c98-tPX+&qGM2ys3dUr9~Uc!8JtVY~B7>ay@hE)3`Q4Cu#mUnC*hhxhW% zAOdksF`^#FU!0$&yxia2e#?>%FTH~56Wjwh;{6sb&q4iOqjKZKN?XNIePiYfbQt;f zEl`lRJ_&cxu}$NIVYLCJv7bKG97%_@g+#PcRaOL+VB6nS4S=~AA}a8$^FsMH|B~@>GwZLYwHu2!ll>*X;nuHbRi2*rn(|pc>$FI(3NNh1?{J57Z zDWNUXZ44bbT*j^~{{?TVytnkA7klETc&chc>SSI_enb!4;tF?X4J?xu8ihBPJ(&dV z=yNuURVI{5tJc$Sa>8F^XYS`CO9!Cg0hRP_hbI8dS+RECm?w%I&Ejllx!TKt5d4bE z{f;&QFFX?_WJuT1?6QAgLMZM>X7Vwc#OoB4_}0C~C+#DGlb*?{F^~)Ubcn$u#ET&t zDj9M}Z4!0a`*3pqMESlNB(Tzb`CS0%82CQJoawGMdNBJyH7qJ}rF}O!3~iaYXQnUpBj&Ec=Gpy{*qI;1#f)~DvG?6hn;wwt*e4xkhtpkbz2kyI*K zbc6&-jx2bfHx6G-GWua~1zUCpy9aslo6Hzy!u7qjbk3h;Mb*dXOlm~?{s;^5^zOrm zh_}m9H^!{Q0HV(o!X`>ty3Nnx)TfCv7W*GabuUJMgUT~o@}?b8K8P5P5r*(%ztxFH z`XlU!NyVIvG?M8LqOeU~{9rC+=`X??qmdIfz+bS9fHBM&ZkWJJTlM|BM-KX(1C+K$ zhHmpYkT1eDt1AnHQtQX-UkBjL42&9m$Latr2%7-8aiWUAUIQ&idrEUVaknh^0yZj zr~`d2r;Yl7f@J%Eo~6ooKE%JRPJCMU>=Zsc+-KXxr74)L{+rp}{0$mgP8scegiXS3 z?rzxA#0&5@XgUBe`<2*f?OxUigx=I8WbZ8z$-)`%7=^kuVU#rbEa#*bVC5cRKCRC= z*83`{Si#NIllE{fydcW?>~8^|FPbK9$3MLsFENx?3@669bZ`9J+xsSw)Qi(k5aQ^Iy~{)%&>MBHQX^i) zMZQwEY|!_LIQApuM>S&ofYy-+Ze8YpMtr^{E5VUKKkNe6SQt`%3(du|K8|p;&CbVC zrv~^Z&$kga_RQ2_rT{DcCYk;B7U1cPe!N5XrP2z;@BI5aHdUUfGSdc}Y#dQ?rMtp| z<9F`O*!y%O@@KXJdHL=>qkMRX8*HtlU&8OhoR5#c@KsAoU^EcpPw;Op-u64k>SsIe zTzwCfPvNLu1Mp`T?p>uFHnRe*M*q4IQ0p~gKrw_V_%~Hj4yKfVqo2%;PXBwO1iTP> zzb;DC1Zx;LMl=Bu)J^${+r7F#cf(T__x+gQVx?Tu47L4aOddUw49yg?1b z>PeGAYY7l_g=DGb%i*E#HdwAUyIR(D1av@L>#f8lKnr@61_PU)=D~!@B%v6WE=^HV zZS^9}mnV3NKWxN+Qy~@}3XP2CoyOnnr{l-lo+K8m9?q?;{cOT3RiC-nrdDESp3=J3 zVqj1l#glCNBMED_8vu}vyGcvHdY-cQIZh8a!FNQ^+@K=$Tp95J_B8k1t#kw97&vV9 zT8UvjKZ)R-0;;)NX)zG|%dC!)fv@+DI5XRwpz>>C+kG}bN(U;){qHIXm{_RQM!&>Y zY+exo6_lKUf}LWO?^@FUCdTRB(bzk~HhEWEQht*TvG5slmpNFCe&xnV#5q8%%0y#V zwYGRQE{&z~#Ab`;+50(nNyV0rjM34Gs8jTthJ0fU9suAqXOASYyFN}EHw>#03?%fg zlp3Y$x2=jk!P7CJ|E|^^ii+HNcdn|(Y#L7HgP%@C>(yDkKIl(pl%I8W=!?uAa142TA2!9qIh1spVh`ah4%ertr1`yC{T+d}pP-{$Q=Lqr zByEW>g=hPs{NMa0S!*qR=eym+`{}%`R4;tpY8_SkeCHwQcHlw7JOC`-T~Hsgv!1Et zN6$;l0y1gR4G*$0xO>pap5g2EqDBcJwS|4@`7y4M6rhHS8RDG(-Q|bLAoqk!Er~G_ z2ZFzvS|_7ZM;Y}`y@?QQ$&TtP9!A!L>{w@`O;Sy`&3v6q`7W44NoV+LO>9i^TG>HO zqn^P1s)afOq+M*~$xC=M2p#r4^6VLGA5)N}Rh4Z(GrXx+G2E~n>nx!&q5kDd4!;2} z^_ItHa|3p+*moL!WEwbHof^4={Fib8$AX_uqSZNC@ZmD@SSj;JwfmX`3<~e_lq=W zd$RTxdw`NXT&jgxvgaPF4|_2kL+0`RMi$f}&mw%htA>jTF9}6owG#%1SW9SR31K$j zZDH2$X^ah$5}q0fXPj6kC&pz7r|vY^cn|?oMM%1bSYcVi>HhHJJ97mi1m*9VHIkkn z%dkJP(Z4M0=d(~Iu-llC%wTI37u-jz#BRIduo}<#)mkgU>WQ#5F)4c$WDi$i>-k(A zB9*oSfF^J02A{gop>DN;&S&!PCyQ7GS!^dG-14%*u&Q7RX4)vp$Sf#cXx}q=pFMu^ z=$pVz1$TaZ_~g(f<%JG@8f-n2kMj8opc63fd%_!Alc6J%QARqPkr9~8QHFN4EF z=YE+uiT9xmJfB6TYl#jd%^N6g_ac?#sKg~7gPYFiIiJOJ#s_cWgw>!|SnPAO3z1%L zxZ#?sQc-GjJ*k}&29-1sTxSX=3@L27*m?>vEe_O&0T|k?8UP}3Bw+X2=_9wOQzD?K z$G4OA$jR(YE!uMT4vYo^R^-O8c&yBLe~K5DCavf6&6~lIJ)a(!h|kc;hdv@&vZ%yG zbvCjIf^Ym<`Ld>P`19Gar+*|_8Ml*%Ce3mbHBU**35Vys_n63ACx;&{RJHJo_@>ej zM@C|;5CQg;r@WDcY-`%#s6;vf>R7~BI#s~Wj4{m1h*dwE?;mv{b?6M`g2V)5nZvzk zen!HMy5U}ye$jJY`Nuk9Sh=-eW!7}ylN)Kc0>fo?iX>C{oTAF{DEh<06mOGO#}(!H;&1MK!X8 zY_kk#%9e2Il;M8V?k&Rp2jzs>ns-BnKglExQ9x z)@-Q{Sdq+~f)u(7}@C4AGnpE(vJC|2QyV(j)xpQ%6S zk^%GEjr@=T-LU!8mZ*=yan*-CgN-gV_W>8*klI@3WjVdovl`H*;rx3^z?~LRdZ-^@ z{0fWaEyC98{Fy|3_(6;kgOGBU!U%t-Z!5fcoQ9s>tG1pyb8PnFo?|i% zGR5(5_}mRx|AXX25+;#G^pVD~S@`=7G$^h;_w?0`JUBgxr{h~RjV!4bukXDe7rHBR z-~$Sbl*D;;`P4!`KP(D1vLZb4hkCc{AKZ0C4 z9bb}pmDI<1qjN*J`K?^MK&TOyp+^BMNxZyS>CL%aV##~e(=qaql_t3ed z&?30#yU<_!qqy*#OX(KfUEtNRl{L(wh|E*2+)z@)9#_Ure<5poUoWCqR_(u|o4 zhW2@t51o47HF(%BTtfbB6=A`8B|ohjXv%NpV;}{c*Ye>Meagd6B!@x->|54fzf0&V zd}I$E90_4dOoCq$;mkGz8zTY5f_JC?xGjbytG+xRn>UcxYHfTX!*x8``j~LpI-8ID zA2QZy(@fFC?cx(Gwxh{J2KF>ShcP@ZATU_2TgYlJCv6#tZjDHrE(X7X90Dq~zC)M+ ze4`C(VDKB<7e9=oO3F*Kgn^Qbk!8648u1OT@A&Roma3zHH2%flJM;UuG5Rm_P!@Y^Z~=SQ}aOU4V<25Q?X(fDdqf2*o;K3xBq#A7v4W%mXB?|M%+ z#?+d%N$Z9>AmzF@iMI$(G{Amiq)2b}#}Dr~hz^hhK3&6m*EkKglU?JuA(jES6o3oB|Zx3 zV}yf)Yn<@5!PAlA{{no5vp{Q-e^0TLd=L1X&w|1`X#dd;75Mz$d4ZMF@w8(%3LIRb z*MHo50B-y!l#I6v5l&=2#c>8kv>)_W6SzdKA=PDN%B*m3xM%)8S2!S6ePe8J#sgY z0Tf4_zXz^3*+%$e&c|cM6MzcrD7phBXd4>--M@%l=!Q~l+n(&c2~|veemZ5>Pa)`{ z66Ll!kPeU#fU-MXeLAtOv!~_#Lf5%cY-Tp?2-lx&aOc!fZx11#2+SeRus!T8^TEgo zz_*WhBYd`+N!oC>o_CH5K7AJ!r326XmSu|SbU!%AHu9wFSnqP~a?(8l%N0hiV9v>& zy4XonWS%y2VCy8|&vVrD8QO($qKXJB{7WQ75T2d-p6|6&%}z|bUcv+OXFOK@y3R08 z@Tz&FseraEWvTZ_N4TT?8kT?XRb^&DT7~?BE~fmkK<$bak;moCwdJqjVoB;L`xljg zg_+69aAuA0sE*43s;XQ!oKbcrtfcm}i16iDH`Pg#BG*ZZ;Yx~n!Z(hKLx`-kwE0rp zNU!xp&IPAb90H7zS7q;0RSjUAp!^_l`HQ~2@Lf(B6GXj}1XhK)C8Nap==d}EEm9OjfH{QXo6+q3TXwReCu$@2Cj(4|&E)-?7$X*NqG<=Le8Bp1~;=W;L^X1MWTT zN1xR`tG}~jS@#MmC+YoReecNt(#K)^&^iy8)QE_qY7scGMhd2;we|RH!*uGWhDBA? zXrimDh935I_1|x?K0oYgOUnIIrPF7aqpOF*X)hMlSy+blEasYy_>tk{7c^!_HIuWw z5@l{Jtx|`${ad2`!>aThll1p^1Rta#9>L{B8kD4X*k0|@QU zdtcK)`kFlt`EqbTJca$OK7p(b9RBp?b7~KZC=sJ`l2Tu~GhhDv{6uv}OG%4cMba@d zP(2)i6zoz+=fWHl-izEN<-1{F|F+tcaf%bEEza(rkNSqU?Vskn<`^z)cXhb2scmHoNat`h9TFjw2OWUHTSE;E8$G)o}Yf^Tt`r5m0V0E>0VWL?KCo0vqH>mx^OC| zuV_=f3%koA%8$Ebo?OVkBg*k!1=!hPgedHCbuPACTDKjb#&;S}$T^KlOoG*P>{;sD4Sief(<%)H^{@!r$GUH-&_B3|~iEtHhZvd+= z=Eo%(FFC%F)tddqHhj|k+k&Nnv+Z%cBYSnPvy4se>c?7H>7ua9rgH*x2Py4&MLA#n zRdZU5l5dT*P~G`80Yhi3m50so2figFOTyc$@~aJjDO=;tJ!_#~I+qtMj}-N)E0n>^ zXid|c`#?ohJ&JLs+b`9p`3A1j@P3^Ls#*J!Uk5~Nal@$8Q*g+bcbbL|-upacdcD?u zt<0*107K%lxpR*~8`GJwsuH)ir`DwZaxoyq{mIYmMqxw!^|gzmve;lx1mxR`E+A>m z{k4zPuj;IypSSgeMorM8@HTq+*o-2==&HkP72rR?tNNaAT3B}!3lh$HtXmc?20fzaCfNi zz_LfcvloRqombbi*2&R@`YDmqY!Kcf-tPYJ874IO9C!^<2~NYW58D@nIji*kr5jJK zWTX4*T{ZhII}Nppbc%Lo2lCL4kB*K~99?s?EwNn+XU|UByCi70Pp4LX6#}Ivthp-B zkA**nwAa@V%Rhg2;Z&95MY>MHJ)m$j#$SN}Y$Lb&6x760!CLFS9OLGgWYo}PRp&5< zkFzakyFMJf;P-)O`!b^pNzhu+o}Z2h7~X{9!q^*{&0ii}u4Wn~xLX=U*| z0cRqda}P;QrOhwXb|2@p=WVG-qL~s!HQ+^M=2dX9yo^eQ$jD@EvXU}z6~|UJdOMY| z;@H`DD_a_lmuxDHWF~#C;YNG?wh+obQ>L{fxUoG3CETP5x-_G#X=4*FGq8S5OWDP= ztm#blLYL_Y_mRo)xQ__M!%WrZyhXSehTBG(+nFWMf}S~NqD_`p#yzMRx-H5U*b58; zxK(@=1*z+sS)c^YlK!#N$6xoZAQO_GOlB7mHkwXm3Vx;Ij%$YU1vObo=GJe)eYd-dzB|i~AVD9~Bob28-#){-h z%oq^qjL##bKO9nwGnHqh_%Kwk+Z|un2PQ_Zz!6U)Zdov$2LsJjAN;sk3F54Ria>`e zv}@b>9u2e1sN$Om11(O`s~_Mi%BxAt>CxvT88!QqMk?@@4ysP^&x6AC)|Qt>f2;NL zU(;S9J4`}$`*NDL{V(7q%w2#IuFw`%8ejIMrZuTh1*!c%>gFN5GUG`3Ha61v_# zoe?7%_hh$GZrj=B?NKSRefN1F<7-i9a!BAib?81_yDZb%N|(jbB|{M@l%UH(A{?^w zY>FPq{bKrSVCfWnMFGbwH@`5@fr6=8?FL86kma+&hc{hl)lPhmU4!Yc<+22;*&7PJjnA7>Cgoo39pWYF^9QJCVpt) z0JE^DXL(U`p{h+No@7!ld4U;7&rL6qo!?QK7=!aY{f8fnLYJK2QDy!)-{K}nk zBy-ao^eIbySOd=xL?C`po6|XI=l?>fC6zm1jTCE2mU+yFRj|*QZP7)z@&IrXQKzan zws#w6DC#n0BUgtU@6d|Rh=mwphYM@Qp11JrIBW}s924f)$@K@foexsCfvCBv2i5N|>4peK(q| zxhTz|_rxV$h9k1_M9|7XlhI|n&0=?4KJ|DD)+nXR%~WU>`#U{MuNtJ^muWj1Zc$tD zQ)p9WaOKU+itDy${WYehJucndIlV+v}U^m0Aal!)dhs7;v|{h`qfeQpt&OobCOOC9AkL;9&nUk-tq#!jj-Sfpncyh4Z~n~ zo@a#jdJyqzPg4qXQPx_-N$0Ysa}}@QY0HmjJpqzmRHg>iqT$)yIm5>8ve8(Wf_L`q zB$laCLFv@!wuvuZsGHt|Q@fzhW@F@+v|`fb;%d_L63kXi_8g;T*x7j{ypO~%kjoof z$XmdW(D9@mEn8kyNv2RYUWd85q#+M3}L`^b(8dcDD~z`i57ZJ2&k#9YVKd_CJ!NeU7T=3_%15cOSCa zb@5fbpAj4Bo#L6|qPKhZ34BWAnM0+Hs_JrxJv$a6KP}DKCznxh_EWwv9wHFFz=A<( zzMmrIe_Nay+fbk_eF}`7(UXu(Qnb8s>$y0)eO?|=45Y}yG6p|dHjnx!!k*Kb+E>d5 z*wsPgIn1#`e2HdiV^)%g)dXm*CMx7;tv~i&p$)u`lP}DX;{q95s2daewXZ`}aW$fFFWX Date: Sat, 29 Aug 2020 18:25:44 +0500 Subject: [PATCH 30/75] Update hello-hybrid-aadj-sso-base.md --- .../hello-for-business/hello-hybrid-aadj-sso-base.md | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) diff --git a/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-base.md b/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-base.md index e9c5fe59e6..4fa728cea5 100644 --- a/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-base.md +++ b/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-base.md @@ -306,15 +306,13 @@ Sign-in a workstation with access equivalent to a _domain user_. 3. Click **Enroll devices**. 4. Click **Windows enrollment** 5. Under **Windows enrollment**, click **Windows Hello for Business**. - ![Create Intune Windows Hello for Business Policy](images/aadj/IntuneWHFBPolicy-00.png) + ![Create Windows Hello for Business Policy](images/aadj/MEM.png) 6. Select **Enabled** from the **Configure Windows Hello for Business** list. 7. Select **Required** next to **Use a Trusted Platform Module (TPM)**. By default, Windows Hello for Business prefers TPM 2.0 or falls backs to software. Choosing **Required** forces Windows Hello for Business to only use TPM 2.0 or TPM 1.2 and does not allow fall back to software based keys. 8. Type the desired **Minimum PIN length** and **Maximum PIN length**. > [!IMPORTANT] > The default minimum PIN length for Windows Hello for Business on Windows 10 is 6. Microsoft Intune defaults the minimum PIN length to 4, which reduces the security of the user's PIN. If you do not have a desired PIN length, set the minimum PIN length to 6. -![Intune Windows Hello for Business policy settings](images/aadj/IntuneWHFBPolicy-01.png) - 9. Select the appropriate configuration for the following settings. * **Lowercase letters in PIN** * **Uppercase letters in PIN** From c5ac249e84634a21a2b8ca5b52d161ac7a9012f4 Mon Sep 17 00:00:00 2001 From: MaratMussabekov <48041687+MaratMussabekov@users.noreply.github.com> Date: Sun, 30 Aug 2020 16:38:57 +0500 Subject: [PATCH 31/75] Update windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-base.md Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- .../hello-for-business/hello-hybrid-aadj-sso-base.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-base.md b/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-base.md index 4fa728cea5..41ea919388 100644 --- a/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-base.md +++ b/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-base.md @@ -304,7 +304,7 @@ Sign-in a workstation with access equivalent to a _domain user_. 1. Sign-in to the [Microsoft Endpoint Manager admin center](https://endpoint.microsoft.com/). 2. Select **Devices**. 3. Click **Enroll devices**. -4. Click **Windows enrollment** +4. Select **Windows enrollment**. 5. Under **Windows enrollment**, click **Windows Hello for Business**. ![Create Windows Hello for Business Policy](images/aadj/MEM.png) 6. Select **Enabled** from the **Configure Windows Hello for Business** list. From 37040d327f2fe45e2f78b0677836f47e5ab66803 Mon Sep 17 00:00:00 2001 From: MaratMussabekov <48041687+MaratMussabekov@users.noreply.github.com> Date: Sun, 30 Aug 2020 16:39:12 +0500 Subject: [PATCH 32/75] Update windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-base.md Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- .../hello-for-business/hello-hybrid-aadj-sso-base.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-base.md b/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-base.md index 41ea919388..3e9d7ffd7c 100644 --- a/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-base.md +++ b/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-base.md @@ -308,7 +308,7 @@ Sign-in a workstation with access equivalent to a _domain user_. 5. Under **Windows enrollment**, click **Windows Hello for Business**. ![Create Windows Hello for Business Policy](images/aadj/MEM.png) 6. Select **Enabled** from the **Configure Windows Hello for Business** list. -7. Select **Required** next to **Use a Trusted Platform Module (TPM)**. By default, Windows Hello for Business prefers TPM 2.0 or falls backs to software. Choosing **Required** forces Windows Hello for Business to only use TPM 2.0 or TPM 1.2 and does not allow fall back to software based keys. +7. Select **Required** next to **Use a Trusted Platform Module (TPM)**. By default, Windows Hello for Business prefers TPM 2.0 or falls backs to software. Choosing **Required** forces Windows Hello for Business to only use TPM 2.0 or TPM 1.2 and does not allow fall back to software-based keys. 8. Type the desired **Minimum PIN length** and **Maximum PIN length**. > [!IMPORTANT] > The default minimum PIN length for Windows Hello for Business on Windows 10 is 6. Microsoft Intune defaults the minimum PIN length to 4, which reduces the security of the user's PIN. If you do not have a desired PIN length, set the minimum PIN length to 6. From 53e85fe9885103e67539fcebafb87839fe9726ab Mon Sep 17 00:00:00 2001 From: MaratMussabekov <48041687+MaratMussabekov@users.noreply.github.com> Date: Sun, 30 Aug 2020 16:39:20 +0500 Subject: [PATCH 33/75] Update windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-base.md Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- .../hello-for-business/hello-hybrid-aadj-sso-base.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-base.md b/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-base.md index 3e9d7ffd7c..1691111db2 100644 --- a/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-base.md +++ b/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-base.md @@ -309,7 +309,7 @@ Sign-in a workstation with access equivalent to a _domain user_. ![Create Windows Hello for Business Policy](images/aadj/MEM.png) 6. Select **Enabled** from the **Configure Windows Hello for Business** list. 7. Select **Required** next to **Use a Trusted Platform Module (TPM)**. By default, Windows Hello for Business prefers TPM 2.0 or falls backs to software. Choosing **Required** forces Windows Hello for Business to only use TPM 2.0 or TPM 1.2 and does not allow fall back to software-based keys. -8. Type the desired **Minimum PIN length** and **Maximum PIN length**. +8. Enter the desired **Minimum PIN length** and **Maximum PIN length**. > [!IMPORTANT] > The default minimum PIN length for Windows Hello for Business on Windows 10 is 6. Microsoft Intune defaults the minimum PIN length to 4, which reduces the security of the user's PIN. If you do not have a desired PIN length, set the minimum PIN length to 6. From 2b94e6fc22a0d0a323605a50bfb4bf8b4ca99139 Mon Sep 17 00:00:00 2001 From: MaratMussabekov <48041687+MaratMussabekov@users.noreply.github.com> Date: Sun, 30 Aug 2020 16:39:28 +0500 Subject: [PATCH 34/75] Update windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-base.md Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- .../hello-for-business/hello-hybrid-aadj-sso-base.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-base.md b/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-base.md index 1691111db2..7713dff6d3 100644 --- a/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-base.md +++ b/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-base.md @@ -313,7 +313,7 @@ Sign-in a workstation with access equivalent to a _domain user_. > [!IMPORTANT] > The default minimum PIN length for Windows Hello for Business on Windows 10 is 6. Microsoft Intune defaults the minimum PIN length to 4, which reduces the security of the user's PIN. If you do not have a desired PIN length, set the minimum PIN length to 6. -9. Select the appropriate configuration for the following settings. +9. Select the appropriate configuration for the following settings: * **Lowercase letters in PIN** * **Uppercase letters in PIN** * **Special characters in PIN** From be5b9a2a0bef98d61b7abc8da8d274943bc4eed9 Mon Sep 17 00:00:00 2001 From: MaratMussabekov <48041687+MaratMussabekov@users.noreply.github.com> Date: Sun, 30 Aug 2020 16:39:37 +0500 Subject: [PATCH 35/75] Update windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-base.md Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- .../hello-for-business/hello-hybrid-aadj-sso-base.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-base.md b/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-base.md index 7713dff6d3..3f505dd143 100644 --- a/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-base.md +++ b/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-base.md @@ -323,7 +323,7 @@ Sign-in a workstation with access equivalent to a _domain user_. > The Windows Hello for Business PIN is not a symmetric key (a password). A copy of the current PIN is not stored locally or on a server like in the case of passwords. Making the PIN as complex and changed frequently as a password increases the likelihood of forgotten PINs. Additionally, enabling PIN history is the only scenario that requires Windows 10 to store older PIN combinations (protected to the current PIN). Windows Hello for Business combined with a TPM provides anti-hammering functionality that prevents brute force attacks of the user's PIN. If you are concerned with user-to-user shoulder surfacing, rather that forcing complex PIN that change frequently, consider using the [Multifactor Unlock](feature-multifactor-unlock.md) feature. 10. Select **Yes** next to **Allow biometric authentication** if you want to allow users to use biometrics (fingerprint and/or facial recognition) to unlock the device. To further secure the use of biometrics, select **Yes** to **Use enhanced anti-spoofing, when available**. -11. Select **No** to **Allow phone sign-in**. This feature has been deprecated. +11. Select **No** to **Allow phone sign-in**. This feature has been deprecated. 12. Click **Save** 13. Sign-out of the Microsoft Endpoint Manager admin center. From 63084c6f3f25497963a17efc6dc4e762d6e0f39c Mon Sep 17 00:00:00 2001 From: MaratMussabekov <48041687+MaratMussabekov@users.noreply.github.com> Date: Sun, 30 Aug 2020 16:39:47 +0500 Subject: [PATCH 36/75] Update windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-base.md Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- .../hello-for-business/hello-hybrid-aadj-sso-base.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-base.md b/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-base.md index 3f505dd143..b91cf9dba8 100644 --- a/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-base.md +++ b/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-base.md @@ -324,7 +324,7 @@ Sign-in a workstation with access equivalent to a _domain user_. 10. Select **Yes** next to **Allow biometric authentication** if you want to allow users to use biometrics (fingerprint and/or facial recognition) to unlock the device. To further secure the use of biometrics, select **Yes** to **Use enhanced anti-spoofing, when available**. 11. Select **No** to **Allow phone sign-in**. This feature has been deprecated. -12. Click **Save** +12. Choose **Save**. 13. Sign-out of the Microsoft Endpoint Manager admin center. > [!IMPORTANT] From 34dc21c2ebd8861c804f908d9f7d811824c0f8ec Mon Sep 17 00:00:00 2001 From: MaratMussabekov <48041687+MaratMussabekov@users.noreply.github.com> Date: Sun, 30 Aug 2020 16:41:28 +0500 Subject: [PATCH 37/75] Update windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-base.md Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- .../hello-for-business/hello-hybrid-aadj-sso-base.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-base.md b/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-base.md index b91cf9dba8..f933e513ee 100644 --- a/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-base.md +++ b/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-base.md @@ -325,7 +325,7 @@ Sign-in a workstation with access equivalent to a _domain user_. 10. Select **Yes** next to **Allow biometric authentication** if you want to allow users to use biometrics (fingerprint and/or facial recognition) to unlock the device. To further secure the use of biometrics, select **Yes** to **Use enhanced anti-spoofing, when available**. 11. Select **No** to **Allow phone sign-in**. This feature has been deprecated. 12. Choose **Save**. -13. Sign-out of the Microsoft Endpoint Manager admin center. +13. Sign out of the Microsoft Endpoint Manager admin center. > [!IMPORTANT] > For more details about the actual experience after everything has been configured, please see [Windows Hello for Business and Authentication](https://docs.microsoft.com/windows/security/identity-protection/hello-for-business/hello-how-it-works-authentication). From fa6a13733977975fe585cad1868df1bde8750e53 Mon Sep 17 00:00:00 2001 From: MaratMussabekov <48041687+MaratMussabekov@users.noreply.github.com> Date: Sun, 30 Aug 2020 16:41:36 +0500 Subject: [PATCH 38/75] Update windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-base.md Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- .../hello-for-business/hello-hybrid-aadj-sso-base.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-base.md b/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-base.md index f933e513ee..8e614d8c3a 100644 --- a/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-base.md +++ b/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-base.md @@ -301,7 +301,7 @@ A **Trusted Certificate** device configuration profile is how you deploy trusted Sign-in a workstation with access equivalent to a _domain user_. -1. Sign-in to the [Microsoft Endpoint Manager admin center](https://endpoint.microsoft.com/). +1. Sign in to the [Microsoft Endpoint Manager admin center](https://endpoint.microsoft.com/). 2. Select **Devices**. 3. Click **Enroll devices**. 4. Select **Windows enrollment**. From 25a16d7b5be9be62ef41ef08c35fc74a72a39ca0 Mon Sep 17 00:00:00 2001 From: MaratMussabekov <48041687+MaratMussabekov@users.noreply.github.com> Date: Sun, 30 Aug 2020 16:41:44 +0500 Subject: [PATCH 39/75] Update windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-base.md Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- .../hello-for-business/hello-hybrid-aadj-sso-base.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-base.md b/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-base.md index 8e614d8c3a..5fb3572002 100644 --- a/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-base.md +++ b/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-base.md @@ -303,7 +303,7 @@ Sign-in a workstation with access equivalent to a _domain user_. 1. Sign in to the [Microsoft Endpoint Manager admin center](https://endpoint.microsoft.com/). 2. Select **Devices**. -3. Click **Enroll devices**. +3. Choose **Enroll devices**. 4. Select **Windows enrollment**. 5. Under **Windows enrollment**, click **Windows Hello for Business**. ![Create Windows Hello for Business Policy](images/aadj/MEM.png) From f2b37bb9293663329836bcefff6140946c74224c Mon Sep 17 00:00:00 2001 From: MaratMussabekov <48041687+MaratMussabekov@users.noreply.github.com> Date: Sun, 30 Aug 2020 16:41:51 +0500 Subject: [PATCH 40/75] Update windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-base.md Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- .../hello-for-business/hello-hybrid-aadj-sso-base.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-base.md b/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-base.md index 5fb3572002..062527d00d 100644 --- a/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-base.md +++ b/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-base.md @@ -305,7 +305,7 @@ Sign-in a workstation with access equivalent to a _domain user_. 2. Select **Devices**. 3. Choose **Enroll devices**. 4. Select **Windows enrollment**. -5. Under **Windows enrollment**, click **Windows Hello for Business**. +5. Under **Windows enrollment**, select **Windows Hello for Business**. ![Create Windows Hello for Business Policy](images/aadj/MEM.png) 6. Select **Enabled** from the **Configure Windows Hello for Business** list. 7. Select **Required** next to **Use a Trusted Platform Module (TPM)**. By default, Windows Hello for Business prefers TPM 2.0 or falls backs to software. Choosing **Required** forces Windows Hello for Business to only use TPM 2.0 or TPM 1.2 and does not allow fall back to software-based keys. From cb07d7456c71403de562ce66db7340e4ee25af0e Mon Sep 17 00:00:00 2001 From: MaratMussabekov <48041687+MaratMussabekov@users.noreply.github.com> Date: Sun, 30 Aug 2020 16:41:59 +0500 Subject: [PATCH 41/75] Update windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-base.md Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- .../hello-for-business/hello-hybrid-aadj-sso-base.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-base.md b/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-base.md index 062527d00d..1702d87fb2 100644 --- a/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-base.md +++ b/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-base.md @@ -311,7 +311,7 @@ Sign-in a workstation with access equivalent to a _domain user_. 7. Select **Required** next to **Use a Trusted Platform Module (TPM)**. By default, Windows Hello for Business prefers TPM 2.0 or falls backs to software. Choosing **Required** forces Windows Hello for Business to only use TPM 2.0 or TPM 1.2 and does not allow fall back to software-based keys. 8. Enter the desired **Minimum PIN length** and **Maximum PIN length**. > [!IMPORTANT] - > The default minimum PIN length for Windows Hello for Business on Windows 10 is 6. Microsoft Intune defaults the minimum PIN length to 4, which reduces the security of the user's PIN. If you do not have a desired PIN length, set the minimum PIN length to 6. + > The default minimum PIN length for Windows Hello for Business on Windows 10 is six. Microsoft Intune defaults the minimum PIN length to four, which reduces the security of the user's PIN. If you do not have a desired PIN length, set the minimum PIN length to six. 9. Select the appropriate configuration for the following settings: * **Lowercase letters in PIN** From 065409eaa060c680ba5fd0bf633ad806ac82731f Mon Sep 17 00:00:00 2001 From: MaratMussabekov <48041687+MaratMussabekov@users.noreply.github.com> Date: Sun, 30 Aug 2020 16:42:10 +0500 Subject: [PATCH 42/75] Update windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-base.md Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- .../hello-for-business/hello-hybrid-aadj-sso-base.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-base.md b/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-base.md index 1702d87fb2..ea9a52eb2d 100644 --- a/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-base.md +++ b/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-base.md @@ -322,7 +322,7 @@ Sign-in a workstation with access equivalent to a _domain user_. > [!NOTE] > The Windows Hello for Business PIN is not a symmetric key (a password). A copy of the current PIN is not stored locally or on a server like in the case of passwords. Making the PIN as complex and changed frequently as a password increases the likelihood of forgotten PINs. Additionally, enabling PIN history is the only scenario that requires Windows 10 to store older PIN combinations (protected to the current PIN). Windows Hello for Business combined with a TPM provides anti-hammering functionality that prevents brute force attacks of the user's PIN. If you are concerned with user-to-user shoulder surfacing, rather that forcing complex PIN that change frequently, consider using the [Multifactor Unlock](feature-multifactor-unlock.md) feature. -10. Select **Yes** next to **Allow biometric authentication** if you want to allow users to use biometrics (fingerprint and/or facial recognition) to unlock the device. To further secure the use of biometrics, select **Yes** to **Use enhanced anti-spoofing, when available**. +10. Select **Yes** next to **Allow biometric authentication** if you want to allow users to use biometrics (fingerprint and/or facial recognition) to unlock the device. To further secure the use of biometrics, select **Yes** to **Use enhanced anti-spoofing, when available**. 11. Select **No** to **Allow phone sign-in**. This feature has been deprecated. 12. Choose **Save**. 13. Sign out of the Microsoft Endpoint Manager admin center. From a4a57bab3cf2bdda2740a0e7d8d511e1f1f97968 Mon Sep 17 00:00:00 2001 From: MaratMussabekov <48041687+MaratMussabekov@users.noreply.github.com> Date: Sun, 30 Aug 2020 16:42:18 +0500 Subject: [PATCH 43/75] Update windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-base.md Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- .../hello-for-business/hello-hybrid-aadj-sso-base.md | 1 + 1 file changed, 1 insertion(+) diff --git a/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-base.md b/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-base.md index ea9a52eb2d..d95d915f91 100644 --- a/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-base.md +++ b/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-base.md @@ -319,6 +319,7 @@ Sign-in a workstation with access equivalent to a _domain user_. * **Special characters in PIN** * **PIN expiration (days)** * **Remember PIN history** + > [!NOTE] > The Windows Hello for Business PIN is not a symmetric key (a password). A copy of the current PIN is not stored locally or on a server like in the case of passwords. Making the PIN as complex and changed frequently as a password increases the likelihood of forgotten PINs. Additionally, enabling PIN history is the only scenario that requires Windows 10 to store older PIN combinations (protected to the current PIN). Windows Hello for Business combined with a TPM provides anti-hammering functionality that prevents brute force attacks of the user's PIN. If you are concerned with user-to-user shoulder surfacing, rather that forcing complex PIN that change frequently, consider using the [Multifactor Unlock](feature-multifactor-unlock.md) feature. From 5572c846651a2b228c69be407ca95bcf67b388fd Mon Sep 17 00:00:00 2001 From: Marty Hernandez Avedon Date: Tue, 1 Sep 2020 17:00:21 -0400 Subject: [PATCH 44/75] copy edits --- .../md-app-guard-browser-extension.md | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-application-guard/md-app-guard-browser-extension.md b/windows/security/threat-protection/microsoft-defender-application-guard/md-app-guard-browser-extension.md index 12b24bcf69..d01a2ef115 100644 --- a/windows/security/threat-protection/microsoft-defender-application-guard/md-app-guard-browser-extension.md +++ b/windows/security/threat-protection/microsoft-defender-application-guard/md-app-guard-browser-extension.md @@ -57,23 +57,23 @@ Both Chrome and Firefox have their own browser-specific group policies. We recom #### Chrome policies -These policies can be found along the filepath, *Software\Policies\Google\Chrome\\*, followed by the policy name (e.g., *Software\Policies\Google\Chrome\IncognitoModeEnabled*). +These policies can be found along the filepath, *Software\Policies\Google\Chrome\\*, with each policy name corresponding to the file name (e.g., IncognitoModeAvailability is located at *Software\Policies\Google\Chrome\IncognitoModeAvailability*). -Policy name | Possible values | Recommended setting | Reason +Policy name | Values | Recommended setting | Reason -|-|-|- [IncognitoModeAvailability](https://cloud.google.com/docs/chrome-enterprise/policies/?policy=IncognitoModeAvailability) | `0` = Enabled
    `1` = Disabled
    `2` = Forced (i.e. forces pages to only open in Incognito mode) | Disabled | This policy allows users to start Chrome in Incognito mode. In this mode, all extensions are turned off by default. [BrowserGuestModeEnabled](https://cloud.google.com/docs/chrome-enterprise/policies/?policy=BrowserGuestModeEnabled) | `false` or `0` = Disabled
    `true`, `1`, or not configured = Enabled | Disabled | This policy allows users to login as *Guest*, which opens a session in Incognito mode. In this mode, all extensions are turned off by default. -[BackgroundModeEnabled](https://cloud.google.com/docs/chrome-enterprise/policies/?policy=BackgroundModeEnabled) | `false` or `0` = Disabled
    `true` or `1` = Enabled

    **Note:** If this policy is not set, the user can enable or disable background mode through local browser settings. | Enabled | This policy keeps Chrome running in the background, ensuring that all navigation is passed to the extension. +[BackgroundModeEnabled](https://cloud.google.com/docs/chrome-enterprise/policies/?policy=BackgroundModeEnabled) | `false` or `0` = Disabled
    `true` or `1` = Enabled

    **Note:** If this policy is not set, the user can enable or disable background mode through local browser settings. | Enabled | This policy keeps Chrome running in the background, ensuring that navigation is always passed to the extension. [ExtensionSettings](https://cloud.google.com/docs/chrome-enterprise/policies/?policy=ExtensionSettings) | This policy accepts a dictionary that configures multiple other management settings for Chrome. See the [Google Cloud documentation](https://cloud.google.com/docs/chrome-enterprise/policies/?policy=ExtensionSettings) for complete schema. | Include an entry for `force_installed` | This policy prevents users from manually removing the extension. #### Firefox policies -These policies can be found along the filepath, *Software\Policies\Mozilla\Firefox\\*, followed by the policy name (e.g., *Software\Policies\Mozilla\Firefox\DisableSafeMode*). +These policies can be found along the filepath, *Software\Policies\Mozilla\Firefox\\*, with each policy name corresponding to the file name (e.g., DisableSafeMode is located at *Software\Policies\Mozilla\Firefox\DisableSafeMode*). -Policy name | Possible values | Recommended setting | Reason --|-|-|-|- +Policy name | Values | Recommended setting | Reason +-|-|-|- [DisableSafeMode](https://github.com/mozilla/policy-templates/blob/master/README.md#DisableSafeMode) | `false` or `0` = Safe mode is enabled
    `true` or `1` = Safe mode is disabled | True (i.e. the policy is enabled and Safe mode is *not* allowed to run) | Safe mode can allow users to circumvent Application Guard -[BlockAboutConfig](https://github.com/mozilla/policy-templates/blob/master/README.md#BlockAboutConfig) | `false` or `0` = User access to about:config is allowed
    `true` or `1` = User access to about:config is *not* allowed | True (i.e. the policy is enabled and access to about:config is *not* allowed) | About:config is a special page within Firefox that offers control over many settings that may compromise security +[BlockAboutConfig](https://github.com/mozilla/policy-templates/blob/master/README.md#BlockAboutConfig) | `false` or `0` = User access to *about:config* is allowed
    `true` or `1` = User access to *about:config* is not allowed | True (i.e. the policy is enabled and access to about:config is *not* allowed) | *About:config* is a special page within Firefox that offers control over many settings that may compromise security [Extensions - Locked](https://github.com/mozilla/policy-templates/blob/master/README.md#Extensions) | This setting accepts a list of UUIDs for extensions (these can be found by searching `extensions.webextensions.uuids` within the about:config page) | Software\Policies\Mozilla\Firefox\Extensions\Locked\1 = "`ApplicationGuardRel@microsoft.com`" | This setting allows you to lock the extension, so the user cannot disable or uninstall it. ## Troubleshooting guide From d2eb87c523f167020476fb2b5cbc5268bdb38ff9 Mon Sep 17 00:00:00 2001 From: Marty Hernandez Avedon Date: Tue, 1 Sep 2020 17:16:19 -0400 Subject: [PATCH 45/75] corrections to alt text, added new file to toc --- .../microsoft-defender-application-guard/TOC.md | 1 + .../test-scenarios-md-app-guard.md | 8 ++++---- 2 files changed, 5 insertions(+), 4 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-application-guard/TOC.md b/windows/security/threat-protection/microsoft-defender-application-guard/TOC.md index 35f40da2a5..52b3bb034e 100644 --- a/windows/security/threat-protection/microsoft-defender-application-guard/TOC.md +++ b/windows/security/threat-protection/microsoft-defender-application-guard/TOC.md @@ -4,4 +4,5 @@ ## [Install WDAG](install-md-app-guard.md) ## [Configure WDAG policies](configure-md-app-guard.md) ## [Test scenarios](test-scenarios-md-app-guard.md) +## [Microsoft Defender Application Guard Extension](md-app-guard-browser-extension.md) ## [FAQ](faq-md-app-guard.md) \ No newline at end of file diff --git a/windows/security/threat-protection/microsoft-defender-application-guard/test-scenarios-md-app-guard.md b/windows/security/threat-protection/microsoft-defender-application-guard/test-scenarios-md-app-guard.md index 4aba70860a..6f9ad9ecec 100644 --- a/windows/security/threat-protection/microsoft-defender-application-guard/test-scenarios-md-app-guard.md +++ b/windows/security/threat-protection/microsoft-defender-application-guard/test-scenarios-md-app-guard.md @@ -79,7 +79,7 @@ Before you can use Application Guard in enterprise mode, you must install Window >[!NOTE] >Enabling this setting verifies that all the necessary settings are properly configured on your employee devices, including the network isolation settings set earlier in this scenario. -6. Start Microsoft Edge and type *www.microsoft.com*. +6. Start Microsoft Edge and type *https://www.microsoft.com*. After you submit the URL, Application Guard determines the URL is trusted because it uses the domain you've marked as trusted and shows the site directly on the host PC instead of in Application Guard. @@ -215,7 +215,7 @@ You have the option to change each of these settings to work with your enterpris 2. Click **Enabled**, set **Options** to 2, and click **OK**. - ![Group Policy editor Download options](images/appguard-gp-allow-users-to-trust-files-that-open-in-appguard.png) + ![Group Policy editor File trust options](images/appguard-gp-allow-users-to-trust-files-that-open-in-appguard.png) 3. Log out and back on to your device, opening Microsoft Edge in Application Guard again. @@ -229,7 +229,7 @@ You have the option to change each of these settings to work with your enterpris 2. Click **Enabled** and click **OK**. - ![Group Policy editor Download options](images/appguard-gp-allow-camera-and-mic.png) + ![Group Policy editor Camera and microphone options](images/appguard-gp-allow-camera-and-mic.png) 3. Log out and back on to your device, opening Microsoft Edge in Application Guard again. @@ -243,7 +243,7 @@ You have the option to change each of these settings to work with your enterpris 2. Click **Enabled**, copy the thumbprint of each certificate to share, separated by a comma, and click **OK**. - ![Group Policy editor Download options](images/appguard-gp-allow-root-certificates.png) + ![Group Policy editor Root certificate options](images/appguard-gp-allow-root-certificates.png) 3. Log out and back on to your device, opening Microsoft Edge in Application Guard again. From 990ac88be6590939ac9025e466e53662e3d4f6a5 Mon Sep 17 00:00:00 2001 From: Marty Hernandez Avedon Date: Tue, 1 Sep 2020 17:19:51 -0400 Subject: [PATCH 46/75] added new page to containing dir's TOC; windows defender -> microsoft defender --- windows/security/threat-protection/TOC.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/windows/security/threat-protection/TOC.md b/windows/security/threat-protection/TOC.md index 24e94ee4c1..3fca00caa6 100644 --- a/windows/security/threat-protection/TOC.md +++ b/windows/security/threat-protection/TOC.md @@ -66,7 +66,8 @@ ##### [Application isolation]() ###### [Application guard overview](microsoft-defender-application-guard/md-app-guard-overview.md) ###### [System requirements](microsoft-defender-application-guard/reqs-md-app-guard.md) -###### [Install Windows Defender Application Guard](microsoft-defender-application-guard/install-md-app-guard.md) +###### [Install Microsoft Defender Application Guard](microsoft-defender-application-guard/install-md-app-guard.md) +###### [Install Microsoft Defender Application Guard Extension](microsoft-defender-application-guard/md-app-guard-browser-extension.md) ##### [Application control](windows-defender-application-control/windows-defender-application-control.md) ###### [Audit Application control policies](windows-defender-application-control/audit-windows-defender-application-control-policies.md) From ad30ebf012b1c4479f2ad7527bd7705da9f43aa4 Mon Sep 17 00:00:00 2001 From: Marty Hernandez Avedon Date: Wed, 2 Sep 2020 15:43:28 -0400 Subject: [PATCH 47/75] added missing image --- ...ard-chrome-extension-new-app-guard-page.png | Bin 0 -> 519412 bytes .../test-scenarios-md-app-guard.md | 2 +- 2 files changed, 1 insertion(+), 1 deletion(-) create mode 100644 windows/security/threat-protection/microsoft-defender-application-guard/images/app-guard-chrome-extension-new-app-guard-page.png diff --git a/windows/security/threat-protection/microsoft-defender-application-guard/images/app-guard-chrome-extension-new-app-guard-page.png b/windows/security/threat-protection/microsoft-defender-application-guard/images/app-guard-chrome-extension-new-app-guard-page.png new file mode 100644 index 0000000000000000000000000000000000000000..779f647b33010bd48f47f849c3d5e3e4fef9e649 GIT binary patch literal 519412 zcmZs?1yCICmOhNT1qtr%5Q4jFaCZ&C-95Owdw}51;OZj3h$C9vx zB}DEMYXWLKp*P{!;=qW0l3;p;?Iu7x&$T5Jbxm6ZJAI$FI6`?URS-O1kR;1yTmfo- z73itML+hT4$mgPPrEwd{%F9)_xqfONDLvavID7c$7M8w?+CAB^!5~>=?jRFj5ddh` zVLKpuoMawE-6Y-=FvDYaYqlQ&qxYIdNTV(#e4$<|EO`tDbWzXo`56VsHnKURy$=P> zXvitKxfua^-_g;WOeGMDRLpUbp~O{Pl2*67WmdVx4F%d?nV0H^5@{&6L{*~a789~C zHxp*e4G!P=m1sG?T)3f27QU~#ZG*{LkxPh|--O&Z=MZ7?cD`sm98;IpE6sXT=w6dI z+4nzdXv{zEm?F26R2Szm$wOwot0Qeq7g#{9ITTurO;j{YpF&e{9Yoq2e?Yug1f1WZ zzj6IQ^uDT;`}+hC9c6S}ARy39{`G<^6E3xafFOgAl@L|;G`#3S%sJH3xbCQIukeRURhDu&VTxLos+|N{2Jc1Z0K{n z?NAL^&hxx)+YZ=inpbo{M!vJNvMQgNv~_^r+kV~9&(6uQRa2XP$=fb1EnOcRG|!IS zrlFy^&or~QZ?;?K!l|`m+zP*b_H%M#H$-k}pP8Ig(BrEsw!9U{;};g*MkC_EILwR$ zJuwSyp9uliC0_TRQ=)Gd+88%W&-(nHa`{w#pSo=wFCFUq@k68TV3=vWkUGqax>Z0u z)VcOsnuD{kny>~1uixI-vEeu5=WYsH2QTCYuN#-!ZFh@1i(M5pH(d;`7mRzCHS1TS zYPKtld3B;DWZtv5b)3ccvp7u5rI(aQp6=c@6D@CxKLi7s`pDOv0sa`?!n|$FYk~ed z{yKI#7H%IxzIvJgYZqMF)yypp+uaq4RV}1dCCuq9eR6Nkf^Sv;cDoX;m79!a(*S2Z z`}d3^r_LA1w@9;+XXBzbtH$-6rMvkHHV4V~q0Ck<4*w^_3DWl2n1gu+yw_OdWow<#LU|r4Pw#g8Qact-YE;O6^+_Hw?yn zXE~*3j1Y7$#E%EUd|FyRietx^4=#U}p2cVBeIZ6cv+Be07tPG{Wv^F`<2jSWfm=)a zB|o%fxQPiDpC7?an|%6uTT5#Npwi%xgopc50<$;?TD0YSYXw4Khm!h&c&nB?^rf}5 zaGT(LH-+^ouPd2*kY|q8OUBYj6JW3MVe&GZz>K?+)ON}5CByyXdFMydq4&Bm=Y@YO zmNa*o*Ma0nK6YlwQL@7ELB(u&I9T244X%itM zD;D>QX3{C8o@%EYOL)<2{=%xjDgkJfAB(wmuJT&)Ur7Hy7YKpbTNdTS3GtJy|6Rru zPGyCiqpKtYa?g1Hm7A{eYC4yHeT+7rDapAiF598I%@4f3orW^nJQ{5Vy4qy?T;8C1 zz1n!3aX?ovHR_4b_A_D2b3Zm|o4z#X*G1ji3IU=5v836+(n7(un>ePncA(4@V5km) zI2Ky4aT)ns6XZvXnhCP}=LT$aQ?WUb9VtV$m~q65G1zaltTcyeeP5m?&c3Su2_a&r z$ah-oe$2o9oWVshc=B>y>i`B_8+q`yhT(?XD0;LfciKpw_o~4K?ZKV~>yyvd`d!+@ ze%($fCCz4pY*s@MbGzSY$<}-IZ;6$I_~JGJ2Nw}56n~!MpJ5R9x)sk7^gnQu6PZ7* zCs*629>VjPpK58!{iMpp3Ex0z6ARg$BUd-)IL2>DMn02@vk6swzln<6sc3`Pa

    c8+!P2{TSBP?e7L^CVH=>mf+qryC`v^IOoMc! zp~lY8_^kdm4Y5yT_p^=OfL<=bAWEJXB(&{8!4`FHUBowRyqY|WK`Fyol*&6keOvp& zeGj+Ke`%@x;{%H-MtjiV@Cn_+hrW1R&l9-vlhfA?eb@NvQAw-yb$TJu5L4W^*UY-2 zd2&9^O_Y?}DI3S)C9AClQZ{5MuAA$3UJGIpw4b?!Vx1NVygOFhQF3NsbU>Jvje#oW zKBC6}Gxdw*J&9x@7~)kR>5&d*_x@wXMz&vLfNSA?x^`ExbHqiFr~*fLq&SA9 z?LBq#)6pp$8v2QYVK5;2oN>|M4z|&+lv%$tP9gf=E3x>jaFl?d7T?zE}v zsq-=CxgKb@y9zfcpyKOEJveBvDP_PtGu^OLLJdLzza%uXgN`4M*#p=7*bCdzkBvKL z+ymnt827-}uLt7bB27r^KMOWyH}-;~A>H9+c6XeKIEJ0K#J)tC5i@15#jz*Dpcy)S zy=%sf#17VRrVPUJz13Awz;%i_rE{e4ElSvOj$;XfT5Jz!f5oIVSj(R7h?LkM`}VD? zPV6Dm`qow+R{DkZ6~ru1CRBUZIX*!FnHMf$a~9z!>ZoczomVRbyd-3x0>B5`{J|q_ z2atvnU3=OFWj@q~{gnUdcx0EzQO68ZvX87htTHl(7Um7MmQ2^f&QHGojwRa_jFF9o zV8zmk6mJ!!axRvo_+pTI&&6ix=`Iy)uuB*w4j>h3C22u8v$Z#4M+5u-xd&C}5~IgH zQXNMkXxznkl!J{-!l^v-7?-}OQT&US8?Q72AdRtHp^Z>}M?IvQfZZqs%?_m->!$b6 zroIIA$VP)c2XNTkTva6DWZPIiCF5el^ea@GXc>~fB)Q`y2hd?`$LI^^62orVUi8qv zI4`Oqj(XtYc3v=4Y%j7ICwN(^}eh{tdNP(M#-@*xV7`8&c2r2+Fx3}$Mh{qcWpL4i~$bgzV zB~JYU=hnc}ml5xR!7wxGfcl+39R@cQy2?e05n(@)7Z zdmI_v*jBd@@9}S#?0+?T0`%x#=z(_R82kjX^oXvnJhcoGkYU24{!{*!zOeuZ`G6e9 z#dG0%3ASjAGIkP@${cYk^iraf9GHlga(q}Uh!}>CSZlP;1Awvj%Rlgn<^4#FCc5OB zQH+aD&C8mQBvS(>wP!(U%@!_M&D70H7k*V$jO<`S%{F({(snhC*gSg1!d6Uy6V=?kcKm zffSG3M3}kWk~+_PrOs5wcjZcbrDN0_AB~b5TRYMhhmY@7cgzIPu9M7MM5XzFfxIG9`=BxaptRBK)A%lsmHa8@DtUUn;I^F_9l%44*6|_=GJcGE zVB7=a9vJt)H=_s4QeuB+AM5sHjD*yww8IdiUwaif*Ac3q4y2rq)QQ63X}bQvYR|r< zW9^3t!;V2sChRfo3+y%Q#q0&p?g0bjCZ9zy&nk7&7En&mS@M*KUSUg^nuqgKfJCVf zVRc|H&@$dbAWI@%9q64!C{6p@uE5izqCsqP)O6w+vDdMeu)AG!SFgFqu&C~KR1+M* z!H8|cHS6a=*%{xLLsSapgoLwP!pgxv1 z1^v0MNLos&M6?4N3QVvf00_vl5S*R%Jv9fXv0ifxTOA+DUzlN(M3Q4uPnV$S#=QYm z(d~vmv)OmyFKyTXGlnPzR8f_39TXcTc-+fi1ZTyFFfEHy+t`VrX~Vvw^2i%UY8$ld z;-R|A2Tp#mef%RIYWLmqIps#ID@3SV6RC|^TtE>3ZkP+#(iuHU7DX!!7@c=UV1(!t z#y*mZ$Q4_)j+0O%7|IbhjzV4?G{yg(>(0gJ=_nZg>>1bDY}DnGHq7)h1;Y5S`BDC2 z88D-{LfF4H{Afe}SJ4I68z53aw8e%p##W3`b7$Rl9b0|Nz*t^d_Mc9?S0cXa2Jjt3 z43tF3-Llf5-iK<1@mlqJoEL+4gn{4XqybSD7oZItU{$UXMyA#MbbO37jPFcj?q|Rl zlabnGzROG^!p=QfS5lKjr7VNCz*-r$mCr)=+ovyVa8vu7>mG_-@##Is?$Lntl z6l2?ck7q_v4gd!IwV_DQ#+hY%QnvQ)Yajc|54SsSyG_@nNxi<*9u`e+O9B!K6zX1f z$xIV-b1g;hEGhedP!leFPMiiri0rNCFG8B3mvE(o27;`lM{fpHIv zdtlrH-}oLdQ%Uv+Du0t&qsfE9u4b{e8xi}s8|nxlUZ&yyWk8{PlwnHv zJB{w(mE&^ljKR?{SNE_R%Z^fMtjr0VY^qO|#gkppw*D&H(SwuBw0f&&)QQ z4t&rvCS%orpT%cayyG>U3hJ4P)d4s>1O^ zGgGTA(KAzAG3reXWNamWFJspNtv2G#FYd$Hkyt>z94HQZv#1KVaqklas(NkE&7l3Q zddwv}p5$5193{C{S5afq zHw_H^Iocauxg$WH-zj=%?zk7gRa#_UlAt3xEtFq+v56*Vm$kxRlJ$(Jsy;W4P<{DYJ$_}}1LGbT_rN!*2Pz#RqH08sFp}eV z#U^mdj2*WD5Qr))2q;t<0q-j=V`saa`s_o_{Q6pg*=E#5ZLPz(&m9N>dg7Xk~2 zneB6~Q=HSJ>0q8uLPz(0OFq3KG-{9Ys$@$oNws)Zc~nyZZ3kumg~~lw$&Ymz%92hp zvjy80NpA01wufR6bmMMjQ2>{F>&ZXA@k95W? zDFHgxszk(as3UpK-ih+}&Ssp3GYg93sea`gI_ga&fdmw%b#MX@*r@AL{4+zP=V`m| ziG;bg^K^=Vo!r>l-OIGp#vZ6P(Y@~=O-HkIyoVloNa6r@N#5{GThI-h zC2WWVhfca04YIYD7d>{);+&9f80whN zx=48iM!njdrc=rAbkBB=@`P&Ti?!i0_~|Z-VFfTsTjK4fU!X@huY%9XHYWFm2}JiA z+?X~L8WIH1dXk=%j==WSV+n1?*sGa`Q1RBfjBl#0xM& z1FG9y`6INWy!rGe#wZQPlVG#o9{+%eh!_MUmBE<_9N~(9RlE$LSMjLG6vr6|Wc0pE z&Q_uUmVxG8vsl^CYO;Y=#)bCjGYwd z?EuGgz^>>BjZjfE6cP7B5zzNJKY$7wX^Ss8G`_o{xJ2i|= z<7hG6({#ZIeAuyo5}-GgA^54Bq~u|S3S7}r0Ac~giuR4ZU*ovuPR4wkGoy6DK_nQu zt@}&Yr#`RtP&7Lg>(!tAyWV&_ZsGuO^wU5;>nkf2&K(LtI>%D&hto~8kK=7`M|BYj zCa<$m6s5vcW$x#g@;7?x#=nnyVB7=a9{7g#K(VSI|0L?c=9wpUvb7Dc4`5MfQ$QXa z${Eor)BMTr!I5XDTt0{TwfAOLeLI3VT-hHsBSUMKlNraXs5=&pn2=}$EFkO;8?%a> zVNsd3uZ;+)D=TGL$v5C;eQnt`=i(7q5gc1iKXUzLn=i@!P|8x%uCC}-a(Abp4ziQ? zGzru5V0}RsWZzaB78F%tUnkgsiBH{5V-y5DVuJO^nrsoZ{b9-raSrxFog05DS_Yf5 zN`bIqu$V8pK4Jrym0bHgH7y0SO!-3@5F0~zR-`m-!ge7yy<>_nT_Ra;HEYu&*~f7r z%eifF3+?UxelP6nI!Q)Y{n_!8`TRnPMwM*%7>yJZwJ{Z7gz+C^qQF$>IT*qW0zi`~ zIv7P5gB|X9Ygd%Wm`MR_tHp$;VvDM|UDaeFcb zq8$NHrlEQA$4E29%f_rng|7$jGU~N2$`oyN{#oy^GDM4JRgs|xO#}#%v`_fi>jtz! z?jEZ~A7i{sIGd!#Emgdx%}&(UgmjfL+Cx&MfB_)ntbR_Se23S?25o^{+McLV0cPiP zjkMKtSGv&=6~?iQTYskCW9QbXk1bqM(VUtuG46dhfSE6cP&ypqPRZ1979{gdPT(|) znEEkv%S0zA1P)L(N1DkD0Kr&h;p*cw6f{p*gHFa6eMGGzL`*!j{S4sEy^OdCDmbj^ zQ}QO!=NuwpDbP@fl%e$4BcTE;fH>yZ)YO{C4>QYANx%fP#8mVbuNwE9atM}2*Z2Zl z@Tl=q;w9;+4rqxGGnW8-BllnjCkcJh9SDq(8oT8*DEeC|QF2TQ{zf%#IL~YB^7$oE zY8ij?^8p~E0ue({S2I0rOdY61y>mTT98DS3^;ZrRLNFx&lW1y^i&=tQWnN!r)8sx2 zhK3TY<3RCqR8BXZ`Hr7pSspqn+w-O5IdTs+24i7eN~x7lY=?}zb6K9pl)oBZBhA?IN{Gwn;bAluCSs= zt__PrQNn7rFH zgl%Z0V$%!hrUY9mScGjhWsn9qLv|j=G9T6yS1+mM8{%Tm%w7#cDr z@uC}G=mJcuA@XPA7o|E(El?x{yG$@MFml42MggiMOOkt}vuLmUx@{MLMlO-UjZp*F z=V=U}rALiI{pt|`k3a@S2TmS~SzXrut!Mh z-#9u*!O)600zmP0?C2c>oX~_Q%4^9=0F|Z?7&$*b07{nD(s_2scHgHBkPk?4` z-R)0UJ4!RW$1#1_e$7xe9i7niSe-CQL>V8Nz(gJBFY|^09gM@i81cE}8>PVVjyisd zx(gZ?iOvxDA)>)$*kX0~I`yuIjuHioK!fk4jo^%RF2<1o0;OC#hwC#X{Y#Y0xGJEC zVbs49>z{EP;OY88dX0#v)iYTbaZ>1SUoW%7eP?K|VsZ!L#L&4>bwjv<_n6RtWv_{v zAC6*mP{`}4m&Vf<>_y3$N1PYXp(4oJESOf*i7a~V10itk4bdenW?JF)$iV>=b6rq1 z&3o3^)0_fOQH}twj}_z$CVjho&F*^o9cP%|;2v#DnG)v)H7gVW?PGVCw-m99TFBhF z?sV3aJFHSbJs{V4 zlx(O_Cy1Vs`-wM^jY{6bwN(`!rt&;}AP~HvXB7n}a&6Kr{n1o=4F?DX9m^9oXyy2q zaSx1pVB7=a9{5J}0Ht!saf(^pSs3gUJtc*;-S#0sM6Yi``zC^d;~YD~!GLTb$Q;93 z80PHrx{a%D{}GMR{=i;tr(e$Ka}kvA9*V7i{SiRnJZ1JAn<){S+S(U|TfmSh__mMb z7Q!OS zhcyIahrJJb0R`S=m>oLir0f&yfGvqlU<*&`z1VCpTL4oO5T0)5A60pg!-w0dgvZu4 zR%ORv$KqH|8j7iv*xD5FwVe?*Ol%E+X>7o$xqz%m+4F3n*ihJ7lttlTZq?+z95`lv zP^--ZgC<>&3xe{1I@E3DSOc9R6`p1uy$Slxu6S(ZPB`?)jRFNZk`=c;#k_nBftmwS zTU&YXOYQT2^O3e71Kiw8y!t4(iS|dpaUb*}qB?5CSs`F*uh^k$#WF!RQR<66y}f9V%A$@@sI~dyY|NU`V7QbV`d;$Ox*aPXGJMZpQ4n)o8ub$#*&V6103t$EodsK5;j(5M zC%DtNI|K{RxVvkDYjAgH+%32UmtYC*?j9^a2#vctG!Da@ne)t@A5nXMRrS_dPh$Z3 zvn8vmc6efbv3XuVex_;eARRlLQ(0UiPMo=`#pltD@WlKxFsCr_!&tX?Nw*n+&+yce1FAmfih;E;%M zd2uNzaiUA72(OS5K&_%-2W+3X6bw|y0UO|@%Z$m^$X4r%g<|o3q;V~jE1z#;#L2c$ zK%`a>fc+yShA&Oco>Yzlhza-YCog8jxPePsJamiMr!E}#W`3sdHOpaObzJ!&d99|H zmITMojxPPR(YUX)-+j8F@q5xc<)QWy!ctgW7I?}m5lQ^;*p ztkHFbLsIO`{fq;{6(n9hjE11ILVHA;HJHp68QP_8hE zDUQ;s&jgFuNLkTsVw&F8hA{T4x`}(jPOsC-KVUvt4%xEHIlwT%k>ppsdb#n*v-3P( zs!?wSALx}Af9Yh0gYt{nS`aNBq|4m9qQA2v&? zwdTAk`8I+i6XR|%lP$sTk9X3XzDCu)ie}~qkCQvyCFJ8R#I1kf0{hM7%1t97ShamG zn(GKAWKzsz3L-7?i*cX`gVgHaaDJ(e4_FiFs=Yn zX`U?($pwD2wg7AJufnM$$)fD4p4?)^a5c` zV)&r4m^~Aa)7Y1-_spAy#`}>vE`f)^eJ!910i9QKegkfH`v}A+bMs--6z!|UL5pD{ z59Dz!=d)1)KT&GR6{~$~o-%EQ@F==LVuI4E{BD~`qpWjbWG?3l7%Rk1*^o5VM1utl z&teQLi+R-*W4jr4sdkbov3OT+YcPly6QCQEKRu_q_xuRX0lBL_qUk2@)L7eJ8{J)j zAiZHct*YIMfV9;Y|1VZlKjjQ}5p?pt$ZuvlTZ;|-8Fd~75`}D%_wTP|``X~m1a7G@ zz9FUX+^zb265blS|JP(dzJEy06d1mgGg?aN){6mFwV}$o7w7Mw$Hdk zQllSF4G*~ ze-fVoeB<;`JI~)=Xh-M{gOmpyvYBoOS@Rp8q#YcPoR5tQ|dem}>NH+?O_D*(PX_5q>!d6f`yPJ&K1^A5K;v-jlQ( zbl8mdF=i=W3vLm^gIWHIWV52f1U&0z=dxt<;!PkBf2jk@>mL=eB-o}oOUK964=M*~ zp$UcWLpf>`xA)- zcD-if1!^SvK)H!V&EX*iS*a8J4!`P1kU_CnLO>8Q;@9LAq#kgyO>A85Sxa{ZE9;=H+ zU&F)d-8iq=Hi)KI#37~|wWnf1miw&?OADs>7eXvT22T4MeBQwVn3w3A#;H68Z0(f0%= zp3~*UHujvE5?y4Kz+8X*vRHR~KF)(S#1X5yw~K`gZ!(lJ@C@_Q;XVHX3H}@*q!DxA zVu)Pp4Jy{idS)O+s2KTsEPTPwm<8}z1uNr|k*Ii-XaBGm^#F0n#I{C~WuDlcLFG5J zdBoC7G^R3KNNxUBV~zRJ90%(4GY7R7-93P5*2g5)gSBB;_k;^#uMheQrhNQotaRPG zKFp}ZDrseM_=HcfolrVs*_;4c&je2`$qJ|b{<%s~VS zCjR!-?YD=!*neln{I)!0bt*ot9f812gBN_n0xmj@kM}+)7=UoLCJih@qdfDb*0y*c zo5{40H>}cLg2*4cT4W=!-u>fhB8_5GOa6FQxf%{EyMA^Qd4wIizr---x$F%|ebyvQ zkK9p2n_uHk^nxJ2{;{dx2Ok;5j1D{XeV8KqJFUz)$=gB~9B*h#hgMCun7fTDoMISD zOw@B8^Zwy$kRC_Sh%c>qZtU4ha>U$oD`X&-~>NaOu-}0I5SK*w{`9gq` ztB86r9_b_kE;A}7=bpsNnp2ZtJwPjY{fW_gzBR1ge0hNHeT1`bS2sCAV#i&g35d2f z=`;y5ElE?xk)%Cnj{6F3I23z#2uk-|JKmyqZj_r1A$!Qq*ajs}O<=mwv4tN@G>U&y z--c)bevSKVcC51Gb;F{KexZ?=(cbsuys&Uv>b+@s5Dcx{P!mfy*c4n=bb?BQB_x{2W%FufSP|`k-wi*Qf-t_f%FVc4ZdFHjdbI<*oi#_f}71Wiq4&5ON zK@m$Q`v4$_fzi_&QKusOo2yf|`oXm#%1_NYD4Z3WF=(f;NHHh0S5Df>KWn9Xe-Rp}gj_l=B0eS+T(^YdT0qMGjfmnK#@r8^J}P95Sp=4Uv; z$d!yVyNpqHHp>-hLG=Q5TXA~XQ3Y?Qsn&hkMccS3<;e%&fVEZ-8KFTztdCMpT^7O& zs@#!4773nk7$gd36Y}`I+|7-=c%_Uf#vE?PpoMySwW-ltm4u8W@z~e-&9MAbeBB;^R;FT2)PdVG6 zSsRLF!6DAtwgKu?wC~#()OWXPw8S-^`P<;u70OJBA9l0uk$GQGa7?S}gD5<;z3HKcZHo#^)lP4JVRJjJ znv4arg~Xkpqlf*+t9Fz*&<{q&p?p+~v31Ke_p&Q2HJ=RCeMHa#A-ecY9Cosmh!+OT zy7A%pt(xxZ$3{X9d1t3R%8r1*_O??pbZ8M ztBsi9(<||p9pE>TT#41b%%57mYN6=!d3V+o81FW;&SBu zB;r~PoUx@@160=pX;}x29Ty#B!XOUUPHp+BQ745|I|M<*;+>@sEF>`};E1u+gU7FH z$0;bK)*_2|m%K^5e_so;9N(6Idm0$QGEO}{#$BY0s;#G|X`|7(nOmPI60C|fw_^f_ ziUPESc9ihwX>A>W4bRmTrys0hN*`e{gQpXMW5wh!Dds#8L4T&A^`g%OL@C-c(B0$g z`X_>7Bu#5Ru&vyYI_;d6ngEBdjtYgJ(^8XzQI!lkm-T4stEz$_= zxY9+A4(TE2p%!Qeuc#|CW>>1ql*Dp!|BTu6PDjgo@00nA96rQGa>*O-J{jULKWSs& zXma8OHP#$7#Q!@W?xY=u(Y(v)5T?t!w{B#f&Bc3WJ5T1Hv!(c?Yh3jRBR0eqi3pg{ z)4^ex3JpctBYP-)!v;|GH`wv(J~ele*Ud6+HYn?%h~)h&8gZSPKSJ@YW^{o3DQ;MC zhio>>40k=ow@HF4b30W#fTB-Ldz*%zeA-;wMoCh{CIx(aY{%h~1dTKHu%v^)dEYTX z|FiNMk?ea+i*;2xa~wDYC&VWnRm70Sh01#sS|PDz>b1j;SL8V_`1Crw$Xcc@;mHH! z`pKuGLw-MR;)>a4cK_X(`fJrviK7BPzSm=_MYD3W$qoZ=Az2pi>W@5f@o<&;Yw}fM zT1$9ti#Ub|rFz>+M|JGjVJ)D&YW4I)nOdQ~Vt*e8&&8-`Ej!&i{py!eX#UW%H~L=fzAo%QGWg??%ChZoV?0^f#Y(8G zXpD^+K}NAJj8^fKylZD`+A4rC&|kXT%&+9Hir7dH1ZQr3Z*XHJVK&O-C$Lm4KBTro zBjft}4PSvgSqS{*UMY&l7~?dhJdZUvfj{voH*P>_5pKbJXH2c{U%hF_FY11{_jLKh zO^c(@Pnf9(NwMD3Uk7Ry%*rcumy0zMa5Ge}Em^_lfu8_TB(~cbQ7AGBz2eexpmro0 zL`rP+HYccmn+WM5oDqn`10(L?KmmZWLi9HW+k3t@E|VMAkR@5s?P zG7k>kk=KaL==*@kA|WCz@oerijeb~PLiuqA7o}N?LO}L*EVPs(*0(WfSzwgmxKLdd zOIlR2FWj1DQE8SBzu4`5;WkskG$&j2Bjh;*)Zf@Nchkz-$^BKy>>}Mo5AOSu*em)- zA(j)-D9krut189}K(XV>UU~z^!u|H5R53MAUMK%&1grj=^MxI{KXSlMYKI60#N=qL z!GV+|kS)kcJT};{2MlwRGK>2MRfCZ4U<;e~k1+Xhhp>HK;W1dMii$bJ$#K-1z&USL zLa>GywLxP5=0eZa2%9CglVeJ~U-JpeQ@$FXUu{LFn$jnJY~PVP{J&X%nxolb*zg`QpvKkz^SsUG zk!Ul)`((=xDC7H(a~uY+ZX-7~EbsMHut;+a+!c^(FpDcS9!~gwQ&#$0KwGn3qbbkH zqESi|4vU*T8>uO{e)(kFE1GcrW)EJV;DhBGwHHc|bn3)Y7@4h^HFj2^CEn4W`lOWN zoGyIZ9*4|s^Nqhv$&H~Tb=pdYk!fL7gKNj9yd7lyil&l>Uo6Q@6B>|I%TJ~vj*1j+ zY?z@8;<5fJ(m@3D?RjJcAIfj+*$A;L^XsWwwGlM0tTmeVb!Q2eB3pilbye8ux72FK ztSm?1JOA@s^FC4<+GH+739hV=zs<;Gp3_`DZ46`NrAx14&K}^YhOaG9OTHTTaei<; zI&ALrHDNf9)+LTsC z#lw2xs}F$HFQ)jprhFzTkq3;Y?C_r&>J_8cOD`%!gU@rn(PbI(u*HxgbK;VTGHMYo zH!tu*S{RCGLj2QAP1P-r5j#BLkYirl9%LRToj`{(Oj$NeIcO(KG5BS(1oq zmq4ja-yYq#eji_=iMEkTy+KA5_df_xyKBy-9eE7x`wVb2EN4BvD{XH+&V7EF@*}%gnQ8 z6j=0j9Pi~TsX)6Pwor-eq3DOqFBrMue}l5>lB4YZ6emwK{XjrZ`;6wHSPA#Labxxg z;5nRst}D|)QCe~sz&$Om^zA@Sow!Bn{Z12}dV@Pdk6N*c&iIz2E8%JG9e@~rEOBWu z^}!j$AeUdks1l4-S)Ks9tancjKa5IRA2E{vB2&rr9XvHo?W_zY+(5>1P_Sjo@fX=( zHL>@!nhnxBh;kIu<`)AJg5+bMWA|=d97R!Ek_FvzTpzQ|7kVd}tWG(BM{WrZM%ebU zZBbf>#^vQO-w}_3q<2H8_!`YIEsVF(!ip6h?rtwH*Wawchtb!|Ry941hVOgvmDXb@ zRP^<+0vgGpdD`OG+TL~5Su>fI16~6!3kE()b?j$!uM}ano-=N&_g8`VO=yfhg6o94d?b!iKFLE65xS10=u6nU1#67sIr?G)ZdO8Q57PCK<2P@J1n?hHH1XAO59t(Vl;>p41Nr;;NWMt>jtX4FtD3KNuXX2d% zCw7%7joyBUV%=*^nGbl7MHgvJUv3XBf5LxpP$X-P^=qX;x?p}-LM?{CQGER<3u@iu z0#;dD3aDQBP+R3eWWiuA17L3#WqH@q4i9nx$A?kF{(r`}4s|ofj6m}x>+AXIT92O|)VYP;Jf>VkBdKx%X@n_MDl2a*K4#p`KU;mWh z9B%s;kr>b*(%$qqe;EtZpb!WaHoqu~Kwe()a#AZ0nMN}>iG zG`U?#-asO>fXAH%n6V*!wLigki4ET%Gbm&te@_YlmjotaxCGkVQ#|E7Qe<>5xpHs{ z!G#fjGFWLly9=W*)^Mq5TN%;Zqod06kJr8?RSL0N@Fvl(dvbmi8E~;LnM*@F0(QgT z7V~r5-t`uo_402k-KC80wi8gh3E9|bc}j3Lz^n%QOK$_{^p6&mVJen%ao89dzszJD zLlsWtqcP4W;wsJA8ATmkqet_pIW(S4{Z2F~Xu?HfBV`I53GiG)i}DyTr-@CZUWz<9 z=y?$QRV(^NhYElSw@IMJ3*OK07Ov>ym0^Iz64KX6U zdkd^+6S-tz_({IYYI8G7yEW8m4-Q@16#OEr2%KoXvsRhif{lqt%8Lomp)DK!>$5+` zwU~)C^C;|Ki8nwd6$h9X-jb44w@>WeNC%Tw_|NZB=F1bF*7ZFOnyZ*cZsW;Kw`p3! zAV`yv&4IAnQ$o*mu+Q7~UGUHkd+|L=^P&@i`Q{2(QSv_7gTEfxOZyuf?-_8XV&N?4$P8&pBO*<}n z*AGp$+5a0MD!l=K(>&Q^Gfp~Fgd6D@D4V}IU=c;l)qmA#iZsFfEyuPLq!>6*DW^Q7 zwp_P#3barSS+F1pmBZ*oYz~3qF4_HaVqAnYtvE34%orL)3Qww6g3`^`DP7af3t)oG zNtd%JhvUlqpP0_6D%ax&DSAJv-Spy~#Ez-9efjKBzpn>UeLShwlmc&l}uBN)EHvOJk1|D zOBi-NFi6k4DP9f4(x+DsgF+kbis$)$2Q~sj1j0xr?{02C^zCz;c;eFwt*Yb)s1;aG z!cE-J(AaF-79SVMEqyVG0$L0;Orq0c4&Mk;OA!Ng0*+^snb3s44;%5@`oz~2NUi18<@liMM(jd+HP6suWr*rjT|>!T*u0j&pu zK*^O0@$PUMM0evWrWM5A7`@zf!NO~pJcaZu>Yr1W2ff8O5Gx+J%Lp1JlZ|3=-Dqg& zXb$?{wfrEL^>Vdp06J6#O-7>UofeS_rb&RkpbkOdk4F+v;6f}EhX#Eg4mR^s=Pt63_ZlLnA}+xlZo{7E6j^MM^(d|kAwqR?w0>0pB`g=kpIa*XrUTb$pkTInxW@7sG41f(mNQ zu61`ILCJRPyit4NtU0v@{g)C)2#$9VCLtjvz5Vpc%oZP=hm2w-^SYyCY=s>?t;soQ zry2;RztG*4HSYS9?Wngfs^aw!TZKSeiiu+dy%y$Hi-qBDwWstr$_{?{ObhfeKHe}-a=p0 zAsE)Yso-z>kd+O0tUqsYP&op!tP`yLSa%mKZ3nEpT6FZ!B;Ki8mX9BE@ z^jXih9l-2rab$*^$-;1Ao&{M!24n_6e7nRO~-)fMRCf>Z?=7(p{QsaPv)#vBp)0Q?e0>+{o}}&l8fC92dbtbZx-~;IdN=(oxVQ!aIR{ScjWL#&f82 z5TsVT2AJ9Wk)|BKy6q|nV7CuAfm`Ci0@hvj!PHWeN%7|#Ye|-@_YuwSgy=SvKDMek zS!$PLeE-!^gtrA+^@wkvL6_8zf9c{*ThaeZ5oM@{mW=ZKLIgs>OW*+NU^!m$^4>@o z2q-Qnpn-j-@d8EK)ei|7rT*fMCo10MDu%9c<{~ zqo^E+Oyc;sH?c?yz~L(kR1Gt4Xd>=3*rEe_p+zN7?8h(!Jt1YZd^PwKieQ(6oLI*h zbH>fpb$oO*U6o^# zS+ahK!eP=5^K}#9MTK0)_1gja?9R>*W4rNv?SSloEDW{B94C2h%a0t~uvsstj_*zQ zV2>{0!Vuiq`wrt9Os|p#fTVLB!3AdbdsY9yv`6pVpoo_f>)6$7ZC z$)p?yZ=U-KdUnrmoR-wBVIoutnRIN%N&GIsA$!0mh_njMmJ)|?N;Gdc`<|4R4+?2{84O9tXdE_?#6l4$C$|Dnr#-= z@k5OduG||TyjyAOH}^hI#VQPD)eRmm`Ex`X`5zDL-i~xowy$Yd|~DNo&9pu zqWjM2)Xv58%B=r@hq@EzXQ_#;RMhR=q*O!09Eyw_%aLEGi0;Vf2JmMa3aRkntZ{Ld zGxdBlH;m{cBZW2NM%sfUjY;n_amu>X0!!ZQ(o;BJRoL2SArS#YwQxgIpxFcf8gKfJ z^lWs{Bo6Op<_uNTE6|(704lZI{lLN7_8A~to#7I~Wj%Yu%XXCvZ_;CF(zSb>l{W>X zSN+!PTL4u0s-)l5(6Vq>D{E_adi|x;iOd5H$iSX}eQp--zXrF*4Er5AJZsLNlD}x= zm8pM&TVrQmza(vq_%1}Az+a$j;3{~$>@1eOUHavrdUQFo0L^nyKMB~W_nbuVb1UpR z!6!t=EHpc5c^-2(We}-dJ)2qRypmS6>v>jXcZ@v>Q9Hz&^gUDP2)=6)d)qqx=p_1Z zf)PdD+41gM5MFW=T7rC?7Wreu*3)Y)LjG$1MCcSy-j%@T^uJNQbA3>&9_Z@n_p~Pn zIN(JJyl>dv`)-M`GIG-ezg$0wcSFFcJDtl`kf(s_DQJYMEnK&C;me=5i`CP1)J&## z#(2PawdVi>@AAm5wTR~w*!StC>z$@|F$5(q@+r#fe&tzTUGrQx&_2Ay45;tANzem7 zWmntQ+;EQkr=#Ck{((daKQp}HPVjTVbX)$+!2N~)YNS>qcV~u_>3>KEe@PsOyWRWecoOE#4%gU+O z)vN`@2>Bh+jZelzWCu8&_dd!A5B(E&p>BWREJ5_-eqsiE*rz((A}(!2G_RY@DwV(q zn>|L>uy;^T{nGX?Q@=z$ZX?STI@bcX+=V$~=7J8u->XMAXYm_+A`7j`d*KN!mGv*} zxH12Pfu0`R$UiS|gJZZI1Cv552W0M^#g{&sC7a;?e3q_{Gk_d4#A)~x2@jg@1$^ng zA7#?Ngzq({6a#S`1-WmEOyuxxUdo2vGCCCxaBGeE|T^o>z)io`P7W&UbDd2d|gZup%i(Qze96S2d@SaJphF z_%YW)b%v&k%JKc#Z^|2cwPZleH!U_!++!U_Bji$V_CV-4Xqwgc4VVuM(BYbUk~vs~ z+Y+H#tSt5v8L)!sQ)4LH@p-=~)!EH<7G+7bMai8qg(I$!LlO!VH`qUU;T~l_MBHP< zA6IZkqycUz9f<6iJ^8BFmw1(l@%QgI!LMNjQxhf}D8?KgLN0+Wxl;+zMHqpLeo#ZG zFJXh6FW_ftw&Cs~D8I{3Y7i<@OlKa9m_bhnhrn^1klu!{4zlr)Y9Ha`yVe)XXX0P|ox>urh`)!3f zy5YW|NA^Q0z_kC(3ccA`X}$^A*ggqh2^OI3dQycLzrgJR#2N~ZgLrGt^5xFAZOq8g zui-Tl1%iSZ@!f*+JB{2x)IeP!pKo`6>AuDHGpdRh-_=x8ZHP|MRQ{gBn0ONuh)JR1 zIz(8zAIr21SRiHL(27qgBFEvk%)Qk;-f^<=GKiPF!zm-} zAVHEygws8NLq5P=im%YIHTZh-6ncH$-uAM&`ZMA2$f#pC!O4OBF|c%bdClDeyuqew zL+Jl31wPFe<$7LOwSuq_3jcgr(*J1Fb3cCyZRl}JunBcg6+8N@(wt2Y-~8r2fPeb( z=5E~a&|EW9Pcvb%C0;$imXwA5>T zEkJhT_sFa5xp44xz=|y*c=~<5mBg5CGc3F>f^0DE495QR)x(hdY!HVmhOe1F_%V1xghFz z%cZW9D*ql{nNL4OelbC!R(~5QiFn))CCk8tRyC|U4452~3XSId=7Ghaa}WMTDeHv% zQJ%fh;CwSLkCe|#za?S9R0LkjMd1m6sC`QcsEkoUcY5USMJ?G!oaatTYtQ@?FNiz+ z$N?boRwuK6{PR2Hc5`eS=zITDY+vmgOB;xGxg$yN=FK0|1zT7D<)s9A;8mgXpW z7ZYHj1Z2g&B41-!@7B_9KI}f5g~4JUH5UN_cPd{ zC@cu~)B`Y&jD}bPibW3?CKi91kgd@iX%xEh3oG{-06Zmj5c#BhJ zs)O)F8_IE)uvK*_GsA`BLx0;qYAfm_Q!&OZ;APav6!P%QF_Tb_gnuzj|2k6#aJ6|! z0>-|>s9nMSv?5R$<||;vx!|`V;4I2ZGmp3lkiKRe?)4R;tq`<1>E)PFDH;FJX^0kj z#+z0&M+cD5cFvUZ3sEpE7)+XnO&!ZGVl)XRI+I>itxjnBFbdnMb>p3i!2v%N%}aRE zz+E6HYAX_+2Tas)D+Lf-hXt@Vjinlm?xU5QMB(JGJs3Vospr_qPR|K|7#JeYTz7wb zg#m{o5W!^S2YP~^ID;#_)*v4PkE>4o8Bl3+>;oVBx}f#P@l3un0IxN=)7_YN&0AF& zVE_p@I;xqW z|8_nE=W2A>ythG}DjFDA`7)15VMmBEW9)tUaQc;tR>ZxmU~;?r?tb5Y>Q1z{>oHln zjEQQb=I>QaY#PZjh^P5lLZV{Pr1PL#$z06J9EHb(_ zdC$K8Eu(6O#^GX&qCY-tm9=>F+}qK4U&5bn-<$uZ$ytvj@AVwMPcRJU7FH33GK|j+ za-shqT_=LFo-jbIwEWo45V$A!N1`210XX*4BfKM}R&O7z_;`s_7H4y=cI3ldqa5&T zP5C965<<;2f|Q@KD=q}?;8|HuXOBVqjp!T82D-)cX;-=Ml{iB&@AS3GC?$S$y?rEu zA79vQD9si?t~_7U@tS>e(wU#?;%J&QFPs~fDNk-xw{l8UpZ>Xh+FL#_#ii5?)x zc@BRNrT)!hmPi{o_o)jKRh7zt-A_4k1a#Rhnzu9SCz!v{@zA{AdIzuCJmH8WI+;pX z`&<<>~VxP^UR8rwtzG6>PMkkX$Vx5j;DSdD`52xTOS98^6D9|O+vVh+m< z{-^`G$KYAjs)8%$&wsk;I@^HsaIi=;Mh8K4cyVskx_2>@TtV0$hETB%#8JM46{2O`0GT(MHi+lLd5161MFiVQbMi6uu6?{#h4o#0dk_B zcaVq~Q`ifrdq0{}<~Pu`4kJ;yY5qCEc4?(i&lfSex0il*lMM)tVg4+tM`T+quj;NA z;tfoEQcbOM`}Xi^ebYz5h$P9E>F@6^Q92nt6K52fuzVhdfOdH;m@rmeend$!pxLtlPTppn~YfcC`B(J}CyW z(yVUMg|#|s#EZMIe_w=UYnBcG$pRx`5Z|>e_1M~to2<0!7@iw>Q4FCUT~`cKPH*oL zs^<0kQ}*V-%X3GE^RCTG&sC^xhjf`=zKu7HY!~e|1d}bRqDVWT%JVt3+?9b3zTFby zhIk@Q5W%ok|8&0nw0zp+^lA-09bGgk)eKy?%iHiF+?ORbm(>i6+VUP5Idkl}++6S+ zVS;I;>k5!x>)3B4)gjDZ|M-N`PC@Y$WF5QgcG@NCcUk^9x?wv{qh?7a7YeM8$&r5IIac@3B_sbDCWPGjw=M zoGc^9D7KramGkF$xr4q`&5aNA2A(cicBuR4ig^$IYSkm!&7?i*L1IUtf_X!DQLCit zB)8nle9@%(dlTHuEQKT54QVYcUR$`qbKnbCy6$+xkg4Msr2UY{ch z|MFSBk`+#(RlOYu^B36bUK^8|G>4Z2NZd&;mqhY&t8fXEqDJBr`ZLY1)i$4Fh*cJ_ zNuNt69*+u*DnUmmU%@3yyXz#P_yEVbs0dcL&bvOJ>kXPh@{f;2W@CmUgBxM?UyU;5 zkk(kaqnS-`REl)XBqd+BSuP>6$0tK2`?y|)0~LxsLIe3vh1O_xQM2c*pv2Y7fscb| zmkYBGVU*mFBs*9RZm}ih-u1F6N~a5V^tZz0iBrX#UuFiAlN@^^83t40UoG6hpGs@6 zI!p>k<~frJy3Sg>LbvgLMECusYlxab(!ORy^wfe!dKU_f3z{&gSt1D02PXK%VSrs* zBc7M$xkC01)W_vHM;nB8jT7+x1nz9O2y3%K#y#E*Brsvs3`3a1+&k@PH^F^m1+`+T z>fNwH52`M{2%4HLR^C1 zX{0QP^u3!BfwwFB+yL`Iu|(>{94$13hbpa$A|L% zOv5`lBjoBV78=;6lwngsUw<$Cln%7nawB`k2O5ozQMl70JMT%ShI3&Mgj$nw8h)|- z?Bfh`Aa{6YT`;`kc-QH(>g?*on;3I7^Km+fTo_fkasR0q54`G zl`NhZo`Lw-83rQUavBFYPRxagfh*V9{1c=g9miXaE1=lt45iLp^%_2bf~ zbOW*AR^?gJ3)a##tv&6(p})Chq1M@FXtoM7Z=jD_NC{M~rzI)hFUg5KugEcNg?`Hi z+em8Z5SZ>g2ChkNJcU>_F24O<@_a_WYZ7gJQ0h1va?^PfeBS=tXzX8D1WNEFePd>5 zzYq$_?M*8Z8Jp~HdKlFA+zjt+{7`{zv|!|UpuYa}`?Jq^GlRELLY5G3s{SZkPw%DZ z+cGo+Q>p3h^?1K2@F_Li^H_N&de@CmSlaC{^yewL>rZk?zHLZ`Xjj*>lZxEqOT+2( z>%x!If5^ndrPo=hPkstla15~aGMjh7Xr=w+b8m#Xu2Rf7 zKTTR!{n$|SalW>(-Prz)0H$8U zn{XZ8PkrTDris5R*)&0QTRG`Dk(A1aGCD1;>MTAb6O8F^JJFZlH^Edqdy80jGGqTe zwY5Rl1aH+^?mZv-J%emm#OlzKcWs_|6^|Rq02`(7o1L)>^ntaq!Y=%g5?b-^-?7>B zs7@AvhpVahct2#Z><4YI2|~;UffqOU2h{E)G5+(vQst+FZ=8?Zvz&vRAdl%tVwo%y z4$~8Sb*HFdL~C=7@0@4de%44)F2y*rF5*Tol#x3e{|rsD+Cd6~bJD9`TdlFS#oDcFN!e^`O z@D4o?o4*C3VdWy3h{a1)6o6b6e#_Iq(RQ`d7AIaO7Ay|Lfgj^5BGfR&XMn$ykZ_Q1 zpGxCLzBSkVU=Y&6S!<2=PNoW{B&GG3}%j z#MrVBL4;T&{2FGBFPteeB8uXCgCB~!$kV10PkDG9US7A=1pA7fo& z4L6-?IJ!Y^)}ymbI=VTbJqu&HTD_jaN;Uy(*Nh8) zf&rzz0JM2lB$=6PLqH>arOv_ntD(_a6aF)MzS~FKS&<+BzaXHR+yPCkw9;#sc*8_? zU$+Shc>>TYTj(Bd$`N6!58xlm&e?u5KVLPoSgybMm6nx6l+k(GrRuRz;aWWG*tQ&` zwv0>!6T*vgm2w%&ULUrL^f8@%14(gj@+vlI1KpGdGblV!Ov2=Y3wA#;?Xv|{aF`xf zV+S#0!NX-i#A^MD9NTB}?KLni3RLEqTX}RQAS=V7@^yDA3g2#$XWzgrJ}@ru87|tt z2z~0EUB5fNEmJkX1|$%NwGPp!X)~{8DRRw;uDTm@is20K^V_nULzF@*ecE}padAaeA?hz#Ps>_$@AUh^wGk{*jE|^VOebW2n;v?e1~T z&{oGr;vjYhANye~WuLX5gZP*jGvV87-Up?6l&x#dTTTDpMHSVq=pDlR=6l41Qsnn8 zg_3&&W6g0i_`3_QG`AD6`fd5x3a?*&@P_)M;K%T8>X{Oc&?ICW*^;qG2!G?A zdsHLyF23E;jryx#@lbju3rr5Zz&Ze9aemp1L@H%P^)0I8*g=@P-~E3m*uI zzR)zEc?pxeUPWJ}y~fsHieAfh^F9yE?Ou4jE%FWAV7{DOpyuB$C3vsCK?7g+E<|67 zWd}rgqV(?h93yL<%_%T?%DKJw2^24cENnNS5^UvbGNCHE<5@ zWc%biW4vcDFXixOAPqFgG3d%)%OF4%{Py6(f8nveBLauDSD!*&a^UOYf<26(Ce5$` zrp_6qrM!|d5@q@*P-bsGj#G#cHR+sCoa>L&A(j2GX#h@m`979A{Lz&eD-M&@fvmOh zF$`)h#mpS|AxN5t=tT6Ni35W`nUR)&IhVai7`;XI)b0vhmkC8#9%)o;_;~GT0NvY> zk-NA(Vx}Tr3#{*aJvBNa(BSn-UyuiT zsVpotY>AYqlhkHWHw3#MsUAoazhieqM6+_*$!T4!Map0tHRCJ4c>J#oKoUz49#prb z>zC_>h#zdFkZ&5l)_>;-5}5uzWamtonp1hKcyQiE&;rP%jcwm3z?Fre*W>=8*jY;t zyF(GwL*GKD@JuO5L&a?s< zc+f5^!b(LqCvT@W6}bIM#w8Sx5VB!nNNl2-O7HJ|Rqj}!Csn^8v%_-7fU_kf{JBY% zT}d5|3d0bd6b?GHx{@VK?-l*)Hr+nR9T!3+7Wev8XQVNm{gRt8(DNwjw`hhV`qt-u zj~e)ThZgu~1)A8rczU}(Cx2}q2`&s&HAB6kdwyPwj|_a8entKaddS+Wc@5W>wtHVl z@iX1OoAsb}13j;*Mwo%9>d_RtJTHfv>@P#R7w=g!@B8A%*E6c}%NHGW?A8LwCDm_7HZj6Fvbv)QYA zm;s*mKYH#N#nQl!DC41T?=M0hKGEBbNaIKDiA~HG9_h+dtJ}plvBElv-MkU=VR9gN zgW{h2iw!1aksA%A3;c2P%jXHMW&{NZoE zFs~hgjlDU9s?wj>Lo|faR3Cdx;u6#O$2B&#r10m(Pd`@Uot7$40IXvkf4!=;Nn&_e ze~82hPkJ6giaFfvjU)ND{G78(c>~OQQc%L`3#!G1D;aY4)x=`lNNq4n;um42oKIF| z?d4`aETC&HF^r(-{PL&{52CX%(BwbAbRi!rjBCNS3M>=+vep$!aRmR==pcAJ6ZnAn z{8|=xC;FDK;sc}EAu4QjYW&8@;C!H!AjKYKHUlEkiUcn0d>>`$9u)h$pTpSM;&pi! z`F14wU^lS-Ao>ce)!5kz>dz-8EtgU|DEAinT&RYK6DW+x8^LXBAI1-(w&PY{N#Ltx zZO6ChrGv2DO)tQphQltL8^Bn@H}0B)JFsuWb(r)bbE`O{P&j3iXmBU(p9v3&Npf_H zMvhiVBRz=1mvLH%vhmg5C-tb7+IPF)$4y-~lpXv25eRlqcQeE)p!`F{W3u`rA(|7& zbk3E6`bacvJ2560Qo=jq*@?iwbruC%2!(Dvw~_ao)7X{@c+?yaqMcMLE~Ga8U5b?0 zBQ%ksQWyG=5zovydy#|NBwtE37VXG8w63NXd{y?rL7S@=DOGL~iCRi330@5E1*z}A^e$(|!?(mX&frr2nkJ#1=N^*S@Nvx|?kb7vT-ccL0Otqrzs;qdRI z_=|5$0Ce}_U2iwm3QWet!iS)oGW0Wm2*h+(4vs5K1#oLf!&pS3+~n?P0K-Ft5cn4r zH5OHsch)8#$oS5852)IZjvD6mO1k*JIE7x29s#7gi7S;cO9jM*bsf zmHPO_@ zo*$QKfNH7k z^$K_@?3hyWM}i7dfCQ#)&$xT~@4^DcE5%fPUz%@s2hBFhg(~~D?`g^PcP*~tS5Pd! zK>t;^-_tI6d7PTGn`>=rSb6QeCQd-q{%>ArfYM@;1F^G&sw-%HNMjLR^uza8=l*W`=IG^)37 zF-Of9;Y$lWrK53|2X#5lrd|GXnF4pKGqF1dbY%~Z7dtj^cQjehsid9vm00!ud+&%w z5dt_+a&eW2;Umdr=|IFiyDY6>8zC^Y!%G=toZYFjRS%OUxF*BV@?#ojfN_}g+>T!Zu$Au1aG`&E zy~|qSr6eBQ83PbB_oewL3K?P`tJ(SLsuRZOGR>OC{1!>$+j8$E36)P~iuwI&|CJXu zi7>7>{E>@vBt7HrMCZ{F;ZkU!EH{#Ql4_(!!!Le?5+B|yE^a~1cEBf|FC_Ogbm0#q z=g788kQisF)f~kBgt3Q&pq$-8V{l$YB@^Q|1%IUMW*3n%0)@2`=|{ZRh2dLeis zR29|=qpm5BW3`+Zk&wM6T55`BBQF|>3(?I6Ko9utD~kWSluny( zq&z?V>3gr>wq3>3=+iwJ96Q{ZANeE@NQqxig5Nytbt1Za+jAVZfv8_38Lq5CGotF0 zEgtMt9TVl?V}@*^0{ZmT|5Qk%r&T>SMw?Cbhb?~HDYW~gJ+BKvo{o+VPaOqw{k?ZC zcE5dXSWtV$jejM>Q2BVH>vHg_{EE!DooRIGX7R1>(!b?V*(dI2_wQJMy1j=B`zKV% zf@>ZxO_VwPI+#y{o_>WUmlJ;`CIkMSp3S_S&pd-)&st|;#U4_gu6q8aY`uKuA9!4> zM;s=5M65<+#w_kSEA4g@%-$uTj#J`rSlcS{{m7)jNextP30^4lCJyrCoEqH9R0)v5aK-^`iZEqXo%?F*IB~ zd3saT05YbqYT<-p9NEsV*=KaW0~VQFBPFtaEEuH9Lyf%MBtkheUdA&!gof4EF?S&zF~i6@Bx?9*Fk+6SuyK? z5|=p{Xo>5KzNcLN1agfX{JkN6Gk(nr&~f5(j2~0DAiU>&d0E^!m`GE}Z~2Ia5LU#K zP%(To{49~`#VB>qEv`(@H>z5pydKWL0m1pTwOmMSHb8#bHcpN_oRz1P3Iib zoLXP!%$9niR!LH^MO|)Shz?UNupOz4+EP`;d-an*f!m$D$!JbyZZ8t|FzVvD{z(Pa zZT8)&FOfQ!i@PL(tjRKDan*%}W*^kGYzJCs?gchcc(NxbCOj{@qez4>=<>hE3sX1| zckPliHBwMze#zWHY3<>IxBx<^nu_36)%NAYZjF#86;jy=5bi_ZmvY?wI9o! zdzGvHC7a<_`q1}%Ey@NU#Saq9DfcF(=8rB9&*iRJ_# z{HG%9B^YKt9w1;2A}yPeP*nZrJBDt%OHUf^FkYI)uls;#1-XWV}}eyzE`cIVi5 zuafw_grJHpK!Tzcx|@E(eYLA`p1(3l;AqoME~3k14{~16+Brcuv%%oT{;i&S|JiG` zbNH38Hu~>&-aAJu83yTp?a+TySVaa2^>!_ecRG7u0{4{2veu3u1 z;@<4SY1o&M%OajInwQ01b=a8FcIV>d7@Bqlf&GYcm}#@yEC_}5y}A0%kAC{bQzV!kNzI9|A&P09tTd;dq6nplQuoKxJuColDJZI*G_6^=AiokAc}^|n zaVQ5v{5PQva2(M+C~d(Q^%E++BI87*1MJMG@h~=0Ta1cq0XOoPz4IIgv2z*PE>@|5 z`-yZP8oUW$hSa{XFVDEeRCChF32T2x-COxFbSToc>(@yBMLWRIYQxc zAR81HD0#~_3^hnXFlL41f9HmxY0vS5dmZQICvwm7X|W@cwleYsEO&%s;5%DZ~Yes_b+#qffr8sm}Wo{Bqy?a*@6`tsn$;F6P`muGx$K7gWyK+vw`h zFx#gZOJKD`1xlXLTN0PvmfgzwKn*lz$?Ws}q^~6-u++2IITF|>nJV|OO}wC%lr8yl zi8O}VHT}2V;22kk7Rph5-AN%1uZTxG z`Mc$uB}bzLbDJ+eD0||c-4~BWY6m*bVe2k}RbNu70#eFiKTVkGw;j6_%g3f%M7_qD98$V4`{Rz0C&GPz5>f zDTz%sYcz#=M#UC8f6X36!8|Ne z$ao!-Q*phg4T~%oH4J!$vy?Q5k4>moBm(%lh3oF(OUwA)ah2;h<_u*ZM{O;rLb!@V#l z^z&Oje8pfLN(6+E&{u!sMFbR>=Nq0f`UPpuo7sYDM^%H$DPfWCSO35WkyFuD4D@1Cf7!O?00q-E*r_6AQUR42{mfl=p)u4NEJam>W>_E{+H%z zY5|7__y-&P)`Um4t0lsx;X&x=Z@EEmvsCpYl_SLyKX4p;oH%VoFZ2C~J!D^DMtzMF zOhetZPtvPvIJVsmrqjAOh6%FdlqUUfYqKb@q^e-VfXb7#x1L^YSNAcAQ)3sO4063I z2eU1e%!y`}jMutQcdIEr*X2!FVz_O__*brpEQZJ>_;I~J3HNrq_t+|MpiZH9fN*ae z!V+U%WaD+50l?7VEhaDn(AnU8LM7G$1-Ka(02Sb5jLR7d9DBsunP z1=7F=W%Gq#XVd1y(8E&6Do}nq{%Gt?{uSR?nEKwo>~i*rE!hMmB~Wq(;aUH0o0Dyq zwLEy93-2Jv^W-QTkaIC~Vh6&zg#hy-#AV2Yv?RI_mq$TUl~kI9?TsIGSI^f=U@{Qw zpC|Rjg>UiQt-gr^F1urVmxj#31Xl5I)=Wlw@!dzNoq$P&t}`S<>Oy`3Ih4|0sfbnM zw!5q|?jYpRN~s**4LgSy7V3p1I8x1V=~PixFsGH#sHgMfQe`_1Sn8)VK(}JTA(J>Y%Zc1o|j*A+avAQQd4B^CF%ED;XA{r>{vq8 z=eF9cHbZsunHiRie5ZXUs*k+y0q0c;4H*nLf_ip4yae|FHfunOte8Wo+$# zT%`Z`v1BVol;f%6Y_@{~^lHr!l7x>$-FEu;<^zIM zuVb|JbYB2U@XHjlool%<0m8j7FD5c*3TYw|mEw6Ou>Gs_sWOc`9_JgD%Cq{*Fw3Ya zObHwHt>Jz_!KvH?*O|+@ZK(1{)=C-f3~rFY!`KmXqT#e zoeI?;O3n{AM_Ar&51@2U^=J(i3r!v?*!AwJ<%_kVE2sJlhZbbqDDU{??eg_vm7(77 z`R;f|l!s1UZzR5oc(n8`hm*p7`?TvbP3e}g(Z`5EFnzq*ReLnte2xT1-9|lSzna7tZ&HA&9BsEvzb*gjN(4 z?4SK|VrG=cjik$<4U1tfl1wOs;DW`^?76BHKEYZI|^reW7e`t=jM9D-VM4cISene>?{u= zJIr({L2YrC+~iq0(v1ce8o!#=F`56-0tDF@YR*?A3Wnm{8XdBlz;BQHkw!;%(X{q~q&#imSVGs36IlabW=S zC_h4eTA(P=40qN@`e<&s8|Z*nYf_Eu<;jIwueZAE3uzn2w3)LMK3Q#|>ybC9nV~ul zsvaHX8g3`(82fxc{TJRoFvB&F;o`5(8+=GTi3oDb_`~YL&H(c6l`(yZeuU;=Eg#_w z6sCo=4<%1{hI48t zpV@J%yV(;bj{GKLYHpe$=fQyZTm$(z-HP6xWw_-+ z>S-esO?*r(w&^Xt461*RNGbGN|7+;AgJTt}_Sj6&FTT<^&W7(*2;uiwd9RDC6LL;= zee+rV47xJ0oAa_X2Pz2dh@rm$I+mebYMQOLT$D7p>-GAxgTl!|d$p zl%jo3!@;qXANiDAUJehQX6GXJS;VFLAx*n_(nawx7A~JYIK;I@yTQ=L>`T`6S5C(< zu%YNvF4oAGS>^RX7*y3@7BdJHtD6>c5FJy{hfN$|ZI>#iJo!=pFXW#~jxrHvLxF0)S zowg(=KDTWLmDWqsdVKER5q}vYvT(8<9)6_>YXOqMP~znvkww`Zb|sR$wRE9HqJNqt zYID}Igz;9Y?!S^ApZ|t|H-ix`OW#{Mgz}uhc@TGxpTp*t(}sS|lDCNQrisu_m5$^H zkdtd-&R@js0fQK8qY$;fxyc!Qh^W^#Duu@gYA&iF*h#pJyGa0?B4p^Zzk;(ICW;bf zd8Cb--A+FyU>$s5lDFI2kRVD36ad+L84nCuLtYXZXArEhWy9S44WnG}1^fY2uuj*G z&L{=0iqHAxKs4GRXD^a8d1-(tWY&@OcOOhzov*NKNwuxbd zaYWa@9nPce;1fis0tli8KmZahL7hR6*6YJ`(g| z8i#XaX)O4F&e+J;`-kVg_rLDYE9qPDwMxDy&=g)^J6#;(g*7loL_VU@avz1pX3;5RWDyNZFHV?ydPP>#$bDmL>r$ zT|rlu{+Kb72FPT0$Z!k?6Yw}`nr>?Aq-u&c6g9k(C8)m~S3WeBJNyu*@?+pnxt(gH z=@t1M{+*bR=Q*xS21W;#P`?DyWXiZ$+JK-P^%*NflVglO>6{rB88H&f^HQEuZ%;RT z7yT8xvhr{dy>7R#JLREAiOFYcVuy$Km9`_)WvE%hmj0ISXHi^@7@oIIuZ|TjqQdyV zfWjc6Ih=UV&pvNF3}!6McbVq1mE(+KopRpqJRmsP;V`si@GuY`z<5LFC};5@E_u)w zT*aiB?83#+L|lYIHFlYnuq0#TQ=Jh*?JJbArB$jHZh#E`VM~U5(_U8Qnsb((38^Cs z#>&rOL0&kNJ+&|UUIr;b0vg2RlhcVo9EpT@B>MU5bmA&$0<6;U>a@Iu7-i2?+ne!r zymhc4;%X9IwJq}Y3M-9Rq5enmn{OMfAZp1;CDT_%I#az*&^^lk~f1(Xw?#+c!Bvivp=3>aOW96}{E?-qf`e)4bkvS8Z z*fk*8C+nkHuxkKK3_Fh?JeHFsAahK;e00LaL5>i39rjLl5y>?W&8V&70?a}0Ee)1v zq0-pxAL@#cnEKe#q8W(}7jhy`2Q*Pm1^=4hAI{eCs@*u#u*Am*oCTciSLAc1)M}(G z(T#(x2+Pe*VP)m_)bgX^0%{1)3RtJIky~~XCDYEJ=|oNDx>+6=n(W49Lp+Xqtw1IU3-+y2#{+@|IWr48|T9C zx)*9#;5_N_P!P$;zeDE6N7q+!xSIq2Z?*DjlWh@jR=FE9F% zH^L^a0Gf5&NlJ9+9Xn5a){a(OgypwnIYxUbNVmfm_kXU@d_*0CV8;|&5Y|KJnF&eH znf#e1*SV@AtL}g-o8z6Qjqr36bmL^%=U*i7v{YN1QL!KKi_F?)LZL3#fvyPu9mO#n zg5v5;l|qar<_jbn`rMc29Z}eL)`fVmm1v&ZnZJK|A-MH&xd92H;$L;m(WSY%?Yl|Z zu_f=uY{uxt2`@2f;k1fp)Rk$j&2dA1i>G4ALM*KerNAwr!g!S6sQ`SjmClF{_%`EB zQ8KVyrPZ_|>+HK0qD;#A-uwH@3HVpURQ#tq*{vc=y19l@mq$sne@}|RyEMs_T~34# z_Z^vdnnlhs-oNMLOGGcOTSFUuogNnBEJNM}pnN)iXItfm*H-Zw2czg42ZA{}Fc{+UeeJAl|w?EH%?6}*K}ZKNUVDuzu(T5Y|#g|iA7v+zeoQw7JWO5JKx{>R6*}v50_({JXw%30&dWrIpM%rf* zymGyENu=H^3wG=2B!}wPaeK{^9^jUPsL%+j*SW~NDEaZ(oc#DjTwy4fh0&um(^Cx` z7lJUA<0BT8qH{u(Z;kLpXvcDUskWT=;r_LOZa?5WT&T$V6Wxp{#Co8>>)rQv3PGze z^>Zm!mFUIdwEEAdH7!Wm!d?Q`hak#>To=+*+Zl#(H93Y-#-5%Ey(uRcX(iZ#BQWFB zGc%J3KR6&-xw^S8p_HyHSzAjE06dx=wMVOo;rjkCwHbQXtQ)?v)k6b!Zl2T7q7`Aj zJ72fka_eQ1dB)I{Wln3Db*j!?Bwij-H)a)_G~4`Pgjjq4CDmsv;ogP9lP&kWxSs!I z97VUtdQ@E~`++<Mon!X+p(;$r`9w z;YT}IrZEe_A)^o0)7tN1kLfoEG!EA=K5@!qOFdF8-@1EWMt|RoBUWq1;r3ur0iTc9 z%p1(no~Vn8)-NT_CUr8}$;MK_xRr9s@Fz|gG3_OYkd<;fGjK)n*X9%z>?CYTl4aQQ zNS9oE4bOK;pRqex`5mf!D3~pXd2^*QB6=Kt%}A@4Kv{@!7`3lItFY}>O`p--V!fpR z38%+D83g9>KbbqyywSWkY7|J?7w0)C2z?fad`uTzH~M=vd+D!+d%|`2g=!c{gBsJa zq+6W)@A7;#aeJ6YFiZ}yUMGlWIm!@1Bp!l*jKMKiVNL`$QrLxMpRqALn5VTbDYFwO znFYZH=YuoUMWL-|_&Huv6cS#Xv(c~3R17>|H>Dd{Pc#aG0sCG61=Bz~5I0OaT%He$ zMHZAUEV+je!SjbWo+Hx!NE2F~I5)+lXyuBdP9@m4wXbwcg5b@nWhn5OGZ+2ttp*3a z(<`yn5B3$c3{?}Y3RUOLWDE(uu7XY7U;vW_I3ttwJnC{oXbRCQy52W$tAWsAoueO2 zZbQN|xrz!4U1hU@YGH|=g^wieIf{>cC@I4YxJg!+7?XhUbi=%H=zFX$U z5I;Ie!OIEb?0>m~!uJNOPLvd>D*?l99?|3;eEGKUgO_ z;Y;xMM`9{s8ZmNJ6gm|II1xB+W}b>r1d{`^G5;UC*1H{wQ}Vbxz&l(4+V-JU)Mfyt zq+9eiECKcYYfl)ha2H=`QWSPTR4vXkNuRJ;lDtS`0T-2zq9vbzR7m`$Sa0 zO8zC!Fh$;b`Te~Q;Lc$1}TvUv>!@ETD#k^PVPZ|&*-({**;w2f8j8?7S~AV6P2mO^b6v& zdg^~c{T)3&^LVvo;MlP_Tr1JzBvV`F#loW>yU1@js71HlH#q&(@tLN@fO+9o>fUl< z8+r&J>=4lE=p8qDCAv9#%WFgPoksv`UAj<{SjD1zp(pP< z!@r6)3yVaw)8YMe~xGA&oAYdpFU=t`ZU=79OLQR<}vw{O;{8aPK{v@ zqi7rw_(UM{tBaeXTu5B^<59VLDmmh>T_=ntP4D^Uo)Ekb7yTM`Q{C*Y5ux}h zE~rqz5gx{~^pk(}u`4d@LyR{WNnv=15?u0BEzMj~tTVT=J!_l4j|pQv){H!*1Bc1W zrUz9dnz*oHWuB{@5B;yd%FRk}IPImnG z4cXW4st?g-$l&%?=zyoOHB3Fw*_jUUn@gSZXsCi?M-%{IlDzcuC_eR9ai|B&FvER1 z3_grjgi;^b%0PxLFvY{bn4}|e7nvMZ$jif$Ump6>Gt$rl?yY^`7 ze3l*4>S&~-`P#{Lct|V>+ghZWeObWQ^(D*KZm&g|`BJgQK)cw2;K*Kh@_v5k-?~zZ z1(Yg7AyX0>5r|AY8(TQ~q8uEZ-SVkOLc@}WlMnKzHA^&_9lpjBU7`79&&7ufV6tXQQksPFzufGnQD)?Ko)|FQFA5zUVYz) zqz^wO10EKN17P69zLxdb9Wwfr|1nbXZaUJ z6M^ts_yNhB-;P}0b90Z2cys>=*iz{SDtqJ`?vY?pZ^=ZQbd>$W9S0l5o|_Rj*6M1Z zvqkgw{N!X9vLhFb`WA|PAXx#SzrrkcdAZ$+g3}WgTM&~{$7z_pFg{>fqAZ9JQ)hm4pB^wpP$EP%urAdpBij5 zrieFBkABtn>dm}OhQ^54YWQ59t(Uo%&0v(7OM32CNT@ri`Ax@;@(#^V3u zaNTr6$(ME?V^!u@9qp>bZUei(k(e4C!Dy4`^9TrNgYtb>vkB>J>|OeHBLV-(82$%j zVk<> zk)4|C7kEt@S?U6-n9rJ`_EY9*vpW^%@PJyD_59Z$|3A6cH>^a&>H@o|KRv-;N+yv)}8RMgk4{A6w4)_JvIw&4`cmg3#3->q>MA zpLR%wJdlDX*UEa#*<2XD6iEYrDzn3t(m!bjvOCBUMJ+QgbJxVt`XcCVYZ+T4vH|7p7I0pM?-Vg47nxu!- zPZg8P=pPixxcaB@0^mhcn9U|>?vF){0wbYFoPZL@1K|i3Yy=i7zavFHd2dAQ!#4zX zn6ebd{t(%Q+_fwljbD+m_m=PyzLDxXCogkP`yv9$eA>cgjz-bc6zzHWC1W#JVLrO5FS6pAO8iN<$4aNv zQG^=`-CH0CM=+g*D<`XQEx<0C(4_YECp@<41?H~`81Wn)QZT^`z~VZ8$ZcT3{1IGe zKuBSiNt2)Y)Z4aR7^U|Ewu@aRJ2+_4*$}*`1xFp~u4vf-30cG*gJ*`#x?xv67OVU% zahiFw1D}9%=Q7%HjhHdw@iZGgi%_5-1ru_m8epY)Rj-qJZvm3HYHr{it??&Br-p%Zd#8D#;3x#}CxAq38$%G&S_N_>x z3zEKA3*AabfvBz%jv8zoj-_D93QOdYC9Ns?BSNZH&Eb_9@OHa6X_o{F8geQnpBtg2 ziDueOO2(Bwp?`rZzUU(vokGLS@S6EK({6E-K*c{y*zP03`Fi=?vKAF7BKmQoUo5Ch zSg$%k`><>}a2nvvNI21BvL6~YK_1q#RlL}LV(mJI`y{E9U(oOt4L)wZ0usC|iK5kL zTG?`)S2JHZPvUStY(}=y^GB_M<5xd2UmGuJIS#Cg@p6;5N*(*ptcrC1e>4{73~0w- zCqtxX_T%eTs4_&o=zNWHS0VCIj`PSz)%M^e7sC;rgx(q(k!->B9&tRJzQ4pzLWQJ`-7M==K?prc!&8C`)Jm|PAK8czu@C%MGiG2%ia%e>=G|H zrOp>=t3F`y*w*Z$alh_)G8M6*uwRa6;KI+V-^dNJQ9Uv>#hcQ0t(JQ1mDOz%U+GD{ zpE%jfU`IG5EwYl#@HaS%4yzQgVW|$>qnk%GIiDTT8;*4EEu!n{(rs+z5y0#vsjB9q z2k_88z9au$NZe4hGsMqd_4)N9Zn#@z8h00gF6x=2qMjVt`HTOn#vF4f&DZTqTNky6 zL~2e-O0^hT0AnCaRQ#0m(*PlFzDqIUG{aV400XQVRJhj6JPx}vei3>!I9DLNt>(V1 zxO?mw^bh48=T=aW^a^pLb_)c46|h8ghmOI85E<$jq2?EXB=MN25@IbL*4CJa)m#J7 z!Y$l|6@2Z*d5-$lhkJ843qs2>Vr2S4n5?;WVO+Gg1=u$x!tll8;k>067Friv&EhkT zUI2(L<%HskA0w`fn-1;`DfG_^0GD0Z*G8_M!L zu)StMroJc}QqgYj5ru|^Vq@Wgo6CWS49z9m-8B}EF07L6vs!dfmXJZrICgQJES=b& z$AVz}*KM?cHUQ=bHDw{?EH#Os0Z7~7u4h%Q1~qzEq=o>(VCp)>hpGri4o)YHtV0ZX z51mfkZG)g77P)6rVYItP(XAypV#tx<%VIKKdx+yI-Hco>;msBI5Nfu5h(mmX)40o4 zot_V&2VxV*~%b<=g!qy%ZSYG2= zG%F(CO5zxZcK2Zhp%$0HvfHV)@aOUROl}XRy?a3>v2FoJ)IDI7A19wuu$yUxLjkN5o&U?TvP+qh%d&I6wEoP{QzMjE;Y+7C2t}%Pn=JFX zx82$Q-7ejFAQ&4NO6o`f9cBNO2EtG2tZ4JaNYP|F#O8t%WF9A*MQSvySKp1;ZnKOX zLEc{%m+g_Nl}<=9Ama}K%*ZB{YvJ*zxabJ9m(_czF@Sj;%7z%Q0_RT8c6?Z2udGhjIVi3OXN16YXZbDwe=}>#OKLNW3{z(Kuhfw1I)(pUg_pnoBc?MgjKNGAA$CPFxaH99|K^Cc{P=&$|dWGU?} z8EZiYSqQD9Cn$N>Y4D!AjFOkCK)B%msH{R>q4lBiN7f1q0#fu~>|mJ3Ad0b`mtz;Fu_J~c6CV< zY>`e-RrPHyX`a>vLB?Y>ZoWBy1B!S0hX8CD3y3m-)NhhSJ_r)5k(+>#P@671wRp*F z+3iC$N@!?oFtn$?1d@TGS0ak5-dYwK(vQn<&fA;SkRlpoI{j3wg%FC?OfS7U7Kz*G7qQ$4AJ{xt_0iEBG0UByIm*qP}Eqz)FcxZ7Yz zs%4J$svDZ3Ytm9*F|Eds8|-NP@3I2WT>kQ0cN@S4g_7yHtkBb;_&M1>TJRGF7q?_) z){D#6({@#Vp}dfH&xPphwg?-&Rgzw+z0z}3!|F8pH5*bfrC3Y)*TeN8|a zCP74SZM4eeH_4~NR?o8TOcxRsnii;Pt{Gx+f>UZfX2Dax75sWNVd>7-`MACQ=H{m? zA%_zzvJ@$L@B4V0DDp1yzieyLB@l|sfC4KQ6)al*F%{ZkC8_1Be|@=c<@(P+$tj?; zLbb&ZexwsSI`n7VM{L^T3=V?w?%wE5zb2WCLSZHp2h-jl?F2CkT^mjyT}C&AA#2Il z5L}6JMjr?=c~DV6eknf#oX-JB=CA6rEHq7)23RGGUpEtIuU8_~j@J;_`vqV`mzEt7 zT_C5M&PbHL+O)S}9uX{3@7(OBl$f`0n(!~1O`XNG{05=0xFelv3pvwY6Ik3ox*U1( zDZpY1!4eNA@X|#O?Zi!8QxxO+BztIMO8iJn2|)gFw48BW+2%(mh+%^YIX^$M-@EYAnfa%`=dbpdb4~eRzNxy@(?Cdw2Z&7*tQomwgBQ7T z$`lg^zWyUFL?D466SXFj^Wm-)3ZRsolWn;Du*-7x5*qghn);}g7>S@YUO z&4a|B>h47ZMeK1V1@*3E%A#zl+;7G?I2NmF(z9SO2M> z>>4Ma%LMODhIh27jIyD1a_CCDSy0vX$Sk7vF#G`A!fgm;HDR##Ti)9(3+s*Bj&jW$ zrBSSjL-m<~PLjt3G*?1hpe`j=EXJJ3CPz>?sMIbVI|ltu2ETwns|{2^EVou$G*C{% z<=m!gyUlJJ`VAovN#p_W4UYGAP25I-nttz}(l}2du<2)54UpwlevUQK5se*Q@34ye zd5UA~NpewjmmnozxPSCjNGEv_MFQN03XqyJhc&Bt;OF0!%Ukk25|*Sq$XVO>D)d6Z z++R&~cK=>BdtsPjv~;3ygVjW@o@@}Xhe&TweVK;j{hJv&rJZX5>x*9sI*I%d-qHug zHsYHKE?a&tUkajG+;)#swCDC?TU!x*xBU+%*?&4oZ%%-P6lZ;|0)v)Of_=qiah*7F z{bZ(WCS9`CnLHZ@erK3CpA}#5^Acd=lt~dl3gK{%7LJZ|*`e)qJ5KaVFX_ElQz-29 zORXctnLF?PCfgk?yYMIHXd_ zzmmr*Q7D~+aC=IV(w}buST7yfZBe^tc`zrGu1{ZH%)Cd3o%|R*q~K+LxUO&t_Jwex zBiipOHSN}Cm%!2O$EAr#8jHC3kQ|O9&l{^Uj-JU)e+4dS;=vA+b*pW#?FxBBYZ}uZ z&7yzqT?<~_{n*+ID)i--t*^D?3QO2W!mC9cd@){`44|-lo?Owz6<|Hm3=x%MA=4N4 z)|Ba`Lf%`7m6-~m-ZJjICz9AMgQJ!#Doef*mh9-DaqQ2Z1n35nqP=r@m67A348;%r zv{GwQmHc?6IXbT3eUS*_;HS&Ah!MrCEV8%RLtVr)0uI%H^MWNaaC4$9rTLm+Z#x&n zn-eyAvhaUzo>uRhHE+Bs3y*;M`wL3qgykR=l0Jti&s(p9b#ByAqE1EF?@eXl?_Iwv zMwSnX0p&E@bfoZB@YVm4eb^8Y@`}FVlg9VSfTr!2Ke`{zwbLc$g%nIr%8tRa*6tO< z)kVCgL>DmW&N~FtKd;V}JE?va4!!}78|ME@_u8ZSOJaU6Zj#lu8*U7BH0hVBz5}V_ z_jh^!1g0Wz=_~PaKHR2I`rUGF?8{LI>k+jHV-gmGI6t8$uua2I)Qf|&yuv^pSvVCgvi7%1}yYH(yJ;gJ-OIZ9@R%A6NZ(Dt()^RVHVGl8-@IqF8#xa zg~y4fX+L{+>?3;*XEFLYODTdfGL6OSj?Zy(h^rWi=LA>!k}UVV&{&bhY$A%A1^iml zTWjxWE2m{zLwM*`I7i6Q@rjSEwa6Kt`y{nAI1C5#%A8 zbaGH0Kns8_uCzvWMify#-7r!L)+qbyd+CO-7yMY_sy%f$@-siN-1ExPPR$arof>Az ze5-g9`>AFtL~;z7OM{QRlY>7!%Q$}lz@dzcJa6U<@9OXlROciV!xwzWM_O&RLn^V- zE1nRquxl76RrK3fhDi-*lx?SE>B+&d`7mdP{IN(wU<|eHZ(#i`uPHE&j8htc-MGu*%rTZ?En|qO)RY0fPI1$LQXJdc#@m~ z!;qK8s`w4z8X*UHgUuVHmlQiR=+H{GxWveIG&pm*vDS#xp9=Er66`hGfg$v9QAXhM zL7=T_aWU#57(4CzSK*xn(Zcu&1h*3UTqg034;=ld@P1!99~Z|RJ;zh@7~D|6ZlCn# zXY=uB4d7+d>SPoPZaTh8PzvnleJyUmN|)4x|5sc<`8xRkhPeNUvIChq7XkE!Suxg& zh7*SR9}eMUft=!@H7gDClSq}o)#$j)JUdk~-{C~7@ar9L=x*^iRS8^j9DWADFGe)FM)D^2o58Af zPxzGG0b$gKsS*E31dy{OEB-Ty`SN8Ya3Qi_x{FE=;og^OycSKLlTe6}7vy@!QXTff zph|0y!#t|Nwf`38PYrpG%=HvjFD)&-)|m?P)c8>1_}Hd%8y>XfdA&U+s``9lBK7g=qBU&pU)+binSw2%DIlTI@O6AUE$r~>Ek9v z@cnz)meOr=+VJ5MM`^VZr6lk7{{K?_a0;A%syiQVQyB04*G|&_Ygycldrq>-i_*}w zRVV9)9H$73YT;QsR^pHH!-YZvT{82B^#4WYa-GqHsTO|*Sl+6hsnGj-D4X|KKwG&) zYHUan8RoI!P0!F4WxD+NI+LXE7zKFD)ZaF?bT{+_U@u3_`&sd=B<`}3VI->HgbfJf zFFV%JeyI&v{kcQtFSAe6ZPlPv@~bJ&E}@pE8b_$ymtO{I;>bUaVZ};az%r8aW~@qV zwqFp7%b*~aMAgBL?G;LRdRjv%b~;-wA1_#7$eUCV*$TK%D7ns0r%4)=M?|n6%Wu)y zQ_=Y_s?kOsW~#3J-ytH8;k)dWu_-!2Qj}UpD)E7@ceQ`N4Aj1@{{60eaWs4&M3Y*% zmnSCnU}8qm<$bfNPF<+_WAbr3{f$?H*+T+OA=i*d27)AbsxF|G%Fn!K!Ezh(t%qgf z-a(ALk3x02~f>5PO-0xKcvzk1y1hz30_a&s+?2K2oLItjSCpN7sQ^-pjV()kbDvFs zaRDEfWGbW!6-W=C*#8pF{_pdVhyVae&pUMS@5(&mdwwT`vy6Y@G+%;%ZE2L7p*+=z z)g&-~@j|2w-OBi9-%HqJ_~e-Y4j)xN0 z&I<*m3!BV>Cy7-|9Gprd+DPZJESeGK)t`?$rCSozhD^hkra`LeEfoilu3qtkm&J>Q z&fC?sW^9C`Pep`dPTYK{0^g4J?{-yUdnC!3N%^F7C|aj8v)OI&$7V)q1D7H4Ris6Z zV-ze5!vu_Bd@ra6y8K4yw^oO$w*7BV1Vs+~BDHr?rtoa*(V;Q(UypviclWz@J;v@r z7X1jDj79zH<5o#vpcy;O3SyO34E;Cx^Duw?x0WnL2oI5>Gdx_%m|*AFm^)`YzyI&a z2|6ZqkHj~Hn6K35)`Sey#iPZAVev$Gtnu{dJ{>Z7#vMZwxneo%OT&p9)*5(|8vbQ* zL(x^4M7}yq^jI*d1FAxRSDs}iVog!eK@@KG4e^;L)I$UitOrOH-ALRf#Ba+|9-B+_ zk6Yg{J4+@81fZ%37t*#(--(>O-k1{bbC@MuyV=Kob?!$VZ{613pTTr=l5a|}AQr&y zu}F=vwPa>0E(v$p(D5u!7^*{;A&UPJL%CKnk!sLJrvxLWFxS=tqDM%AX&(qTu+T{Z_g3?Iv1_r(`*Q;tgmY)1v2RM!K6|n)880rZ83C5(( zhp&=*7|Ut>HEN=4%Oz1RPN{TvSe>3gf3H%ACBu7) zun0DFD6t__@$cDU)nxiZy8FXVs(7v>eA*pcb#gvAKy=jXtUv8`yz9(|-sAb5`w?6n zv||A}Ynj8V$5To_WzaVd9$)^0Yo~!5F0^MR-O0Xb-y2`!oChva=l?j9ECRxvrDAY= zJStGAL5($Lf;{tRi2)^G=Z1oD;$G3Y4I~`iK?0H8H7cYXzrZaB|B2w0A(kP zoH3bK_Bh3Ae|k9x4&7(St`KxgL*zyz_{?lZ4EgRbrr$CDY?d33Yzp@MLWm4-RwvBNwFm%dIW^D&nUR|T)pLt0pJDMx%B$ORfQgryG)FZ6L->~AA!ZILtSdJmqllA3$3Y>t7 zflAKiti=8Xfz=nTByfnS7dCwMJ3?IcW3%5Xu4}1#Ihb56aEEW^N4$T4XNCnIDM7iP zW?p&Ww8GG&RtuefR3~Y$=%Cq2XPHplY2ksvI(PErJeWkx6lM1SXh?BVa{bR{8!-eE zM9&)=#J+9HVLQ2|MwM^5NtuGB@EQVS%P);-WQ{vCtoY*RgdTc?gc`MoVFgKNuEfM! zQh2w^nHL4bg>#9Su-HX_39?k6G6_1*XSsRotQH_&91=PXL>@dI)LBP@@-(FH82}bE-P`5}BFUsHgTD#4?HrWt>VM1VS zQZ+Z2e`SGUtq-vq5f?Hwg8R^YpT(J-!;~#1-h~SIRNkT{vG|VK_gx)gJfUU8fuw>+ zj`24T(!p@Y>E^d#N>$0hF{zFpE%UfK%@ne@$j^<}MdUGXbT2ZOHn+<=A9{zsrNUQ*NiasT~2 zPCp!c0KNr1lIJIUHJMw%2+}@E1i01 z(m@HQ7;&0~?HwwiXZ|wlpLOH_^VgrH5}TgES3+cgg$JjfJ6T+d$cBvmL@tf^Cr_W#ja;jvx#>k9nN3{_(hNPey|O1riP9Q2?C8P~Z$! zpwzafS)0a?vDq-BKn0QFvnm71JfXS0%YmknA5S>mHpv$15Gt7dE8GEy!Wm5uQ20+r zur&3{(7J7YRMl~7N*7^+EH&4}GRa`k4vbPcmpIj~MA1k@Ms$R0;Hn35qq}hN;G{%_ z1JtO&kiDl37ht}UirvnAx(&EGZ=<4wQv%BzRF%uPIRU=|i@f*}Vucl*ZB`6@GFq@a?QGsq=IlcZ&|6kPphS%Jz9v-GQ=GH(HfVua?<6x?9I_oRy!9@` zaU!kDAD_e`XChg~=!)i|;LbZW6IW=Y5jtM$5+*vF*=}X){o$x*?2mv-#df2%%aeelD$02|^P7gsVLEyLD? z!q4_tJqYG2t=V6Z_x*E1D430{Z{glH`C0GWI0;9MP$7TU16`i229=o8Bgxbk0&S`R zcoP^O9tAG@7;g5YCw|mqwq9oKB4kSD8`c6J4D4k0ZUujiTIXC<>Ry;nekJ1@rX4EC9FJZ;TkaY{^!wgNn%W-ZW)j z9#g&aY_fX)8}~mF_jC)4w677P{%8d+P5|i~TAB4F%Nj#=maZ)p{_rhhK=Zh@r6HEO zzKS#*W!N7Xf+Mjf9Jyw4T`+}gMsz9}iJ|JC=sz`t#h4Ah&~`H;Mv3}7eIq z6q-Zhx?nW2$J{wyNTIdUI5N^RKX7Z6PjV+$C*I{;7;l7KS{|H)%pY%hva28&y~S4A zmx+}GZu?XBhRrLAtzu`rO-TO6v~e7J7Wg%VD6t^=1{+3Osd(YmcWB_{TvV68#)mnW zI*oLzN(>gWrm@dzJ{D=?21l^8@gLqpAe6_k^+OFQc}i^DhyvO6i1G~X%!sJ-mcU2W zlmrVT3a_lOcn`WVy0zJWY%7|1Oim-IYK)m{x)lefxu}kFu0+8j)7I)oU%;%N6uvYF z1DHAK!j-A^gX@RL6vrwbZ;Oo!b!7^$@Kj6}=21jAirRCno*=fza0~^5yN%uG^QN>A z29$AUXzHZ3MObg<>13|d@qil-db-s^WOAhvW}oFzrjCS{@tQ+nIPTK{=8qSmM-rup z5JM2Or2666uKs&9CH5i_!u@jafV<}vmtax=gHvT8x9p_`*;6vv3cE)9Aoe282QNxG zR$4wtk97$2sCy@>C;cfjTbwvpYKL3E=&-}gTVNbTxnENb1D?glBg?N-ki)Z~XK2Q? zx3bfKbU|!jypH!vyj1&%D3gGcJ?2kL0$7uXv)A;oDKhrW7|&$6Gr{|HCJYswcb9Nc z^{WmPI+vQ*D`CLIJL}e1r%M*wv}VV`kEj*ERUR;i0;lF`T^U~u0xX)L%NoNUL#yLY zM{4GDEapDbq;u|+;=?;#I2;((p&XC<>F3z=lG>RQKrJo~M|j{HaK;<>O&^V85r$?@ zxeWY}DA$G%ipdQr{_$0g2WoLO-aYaW?8c=qf=R!W8xb>h=_OCd`x|eeQ(1F)!5)ly zU@Q6Y44S%ABrbK~Wa$`qexwh}^Oy*#)gAESx4uvv;kc$9`HB{XH@S&`VQ>b~t$@c8 z!@>-L1L_C@)y=Ud$RxC(sfpAD_NxCuc4+dx72B7OlU3>OW)Ot}{S-d_cSE7P1v`^q zaou2>=|!emIUNVfdJxdxhU?4bo;2?3zYBf;>O#6+JZ@Bn|89D#tkYfStk&)IjQgc9OY$8R&f(zmyAdUG%`q4j8M?3b%GfvHsW3aCi}cqH z3CcQp^K_UQh+Vr2D6fdY#+@3s-ee6Ha5gJ=`Bdjez<;1u%t@wwEKV8e>7Z3&9I`7= z(m6T{+qYwewESXBw(#}(Lv1Z|3htxymK}iBroLb}_zfi`ck){K32c^*@HQHXU7(ZR zd}z&$&U3-hoGf0_tp{Ca4B3SM7KF-V4i+))U4oR2(qFYaHrP1E;wr{6^V|P1R8_J5 zSUFmQL@gh%z9R*x*4_4k)t`55++zRUy-@*e#F|ZC@UAAo{^Oirl*vHCQ*NlY0KObkRTPc$ zLmE~_jn8jL9oqUE!pgxY+D_~vfu*nnxZ}9ElyhL3BB;#5%pY>UF_1`Y_Tj4yedy!aGX* zf@eEY?F6(s$i$Td+n=ZI&lR413(CK5+tSN@rib#xy8hk0SfauqXpRUmJ8!i4QIYyk zxd523!LsU=+@0|=amd~}JX8qal9ray1%D|SuKvbP$Kg;+YXY1gQuOFFRBJYHuqwEP zVFyhlad|)SL1Mt(`g{tzSN>fdw$_4XbA9NIhV&i+b7UjbvM&zBg9r6(M-pO+4Gid% z39cbt0G1fvNBlbj_KUAe-bJ4(MbL?1& zw?UF1#u@k@p7-EGfR+Z;1O=~&5ffoZ^`ciDmR{0lLiU;7Y||FG;AFncL6~nr_C9CU z9=qGix9o$%3;QyMv*;*vCTgyz1}3gOn<2k%hh(1bL^*Swwo6jbo2~gz-If-rakNjw zr+@_{*H`8qvEeq@`YoGX4weT70wJvRLtr6>RHMx5`0sGGiWg#{+GJzWHPT+(3;D|r z+XC(ba@;a!V+6Q=>$>Lj90hzqv7@e`1>SevWvr|-z3Mr1fE)?-+b zwiGQU$rzkeKTAoAw~KHq1+WfXk2|r4VQXSD)kdpsSy)#he$S+eYl;fkXlGOAApIAG z^|J?>;a+Qq>MoB03x8$ASr~HyE!e>gBTRuQF%W5%rh@@I6Xn$tb8;NIfecVB3gbmu zYs$YZ%bBAH@Bn&RR;QL(t?75r?`GSH@>{rN~FJ!fpX+ z9_SL4m|(WL)JWG$EoFL#M@gIf27zG>u?nv^vpltuV11#DW#IfM#M2J(nRFs_(W4EX z4|#hhS{s3wLcq5}z{CBE9!W_O*+sq<`5R%s(y{Oe>OPs|Dok1q@RP=l9|j0w{s=DMSFY!JV#Ip^P8qL`w3sL#C*`Vi&yp}X4wEzdvSxXMH?2@CL$fQNT^Y| zY>TL#nflnhv|;pM0|Sf2GI=h~L_Hv4Y(^KWW9!!GxzK>>s}L~yj@w8f?m-wzH&)7( z^3Z@IsfwQkjW!&4KV*GxDSXIs%a1ey27FxMx>01L1v9*@5yL?ub#GREHWw~>5~6jV z1dJ%A9f-YhlLbzEW(F&uDVnmGi0hnk<&IW=bNtloRQr;&O0bArr-nZUAB8SEV_T9U zYvp$)kahlJ{2vpZDS?1VBMY*@Gcg09!sLjjdIBDX>FJ_ZcaL(FZz)Y1-oAXdD^gxU zCm)d}nL%60PEYvRxl9?#@Q$;HBMnnfODK=bHF%c*QQ3}ShPdpiH6ehQ9@lKG>#^!! z0|I&VsmEt7#X{LUb4>M0OjILC0uuaaO#bOrR~SD3uGmX8?q7xUqqB~cgsbu29-J8% z64T?lrL{N47UHm}PLMxvfZmPOIZe~4MvZNn58nzs#w9#oO9dj_HAbsK_k)*h?HQ6{5`+6pYuegsx$dp=kMs| zFqaP>yLhB9i2Wp84O3DFhnnx2t55y?>+}+GWK_agER}6PUZCnQ#3f%LGVn zajdi}wMj~Gyzw#u!1Ei8jba0p-C|V+M2sEEP*mnebBO@thMHe!ZKR^GJ5Rn4I{*_9 zsz!2g0OYfx{a%U_{w=z4oOP+iL}->4ZiNsSH>Gx|GY|t=(L)ye#08Q6Ue;tQ$`iS> z{Yk|M6)m1cFWID8mKxPVjzW=R9lMgFL_JZr3abz0%tn?$-bIlHJ{yN6mTwkHqY#7l zuKWr3nm@c?5^Pd(heV(@Z%{BmMFK|+7g-j-0zq}+$M22xt)!kiw*e&h+@u7#i45gj z39%DN@o)RCxIb^>`H5ON26Vg@Gb{DE*XEX zAejhR4~g?#t|$C7(_QUDDqRaZ#D^^x5TvD+y3ad`gT28p zM6|v;+$3t4xM|Mr86~W^4Lqgh1j-WY&$pF3EJ*REmIo5OIW=AhjDCtW5>Yceu@+-H z6|@}pd1%4G=H!eC4v_{y9lZ_8$cI#0_f;xc4$F&T$gMAxo6=(mSNcY@M|u<$(Rxkr z)C)PbMk_|VGLt!3Z+-J+ycyzYPzG4RIBnFz;?fMcxmJ+IoNbcv|0*-7RskWAdV>=P zc>Z1KMElw!dpKndy|XAncvYJP3UcI-ZN+b-ksM?F759UU-(GX&JOS>%|!3%4V^2f5I{hxNBE#13Uur&EVm`ft^@`S7f=NO`nn2r?jlIw^J|I$ zQVl-}dBlxyGsK9z8P&fBleZWdG?Qm>o98-qTJGq`Lk@t9h9~*plPnXE)DbC>dSna4 z_X&NkGbqyPu;82%6w4i7r-p9KzyT`kaJ=DBc$wLWf6sXmRAT@V2O|LH?CiYrqr>Qw ze6Z*EXI@#;xZg4IwM{?+-sjMJM_&Qv@VkKQ(GlNgWDfC#VQ@fP$OM{i{ex+s=!InB zbNOKZbl30BNaDep@sY%f5$_mFr<6o`NNL!TC`<6I;D0U%HoGAqv*q%^cgO48czI(5 z@u>JcGedh}oP}qGW&oq|{6nvL-)(LGbT)d4)}(H=}5l`;$7eg2F8 zKODTV*N(=Xc5u4(3Rql(<|rqb60B57N@z+}2Ra*!n>6J39%)li8=;$9Uz#%x-~JVo zYaSK4NANDjI_%f#q$cZ04;`jFQR*{WvMSQ)LGqabtr?kN2 zLfQa|qCT5j)44+9uOuf3dPwu6&n2o@0a;iv#99>W`wBvUKiIyYdYJNfZA3KntA5edjHl0-Z zEJ~Mt?CdE{{dhf&7|D>Y^3M4yId|s1cD~)whMC{jI%{VszmleBJ?e;rs|Fj+9aw4$ zDQpQsI8;hT{}-9@F#`}0VQP*B*cV|6xxhO)a+sIO1is%AqbD5njyPyu&{n^k5%kx6 z<@wuacD;=dedR~G()^i#u%_PF-AeFCDt{J0qPF;sh{*4NU;m>{pMZPUQC$hq;@%me zN`Tgj|14ZomkZ~v+=iL?LgP#`9-#kfA_GL<)v~$^+^i3s2wxDE-_f1Z!Yu+>mzXDq zGO}0vyht22%oGbe^X$-%F*V>wZJ`?>fh_V0Sp7|Ux^?P;khJ~hSx1^gS!jSuPJDHAO)KH z#=6Lm(dTD;sU4Zy#BYnwy?~c4IqOw&N`6vg9ye&i^(`ZaBiZ#V(`g)9wgBsFvB|mM zI3G3_u7Jc(o%83!QK>7?XY5K(M$COm%IQH3Y7aTQF`%rWWAP)eD$aoatC3jkFe2j0 z)4QT_*X!iF+Cc1!XL&Y$)zB$enaZ#A{96gX4IZ-?f>8U#GBpAvL7fwS&Uy~NV^u5= zRUuh$p7mizD!8M#go02AblA1natlC2f}79!mUJheEVAp2#)6CsOsv3F9dj-)2A=3V z?;y^R$lC;7T&G3(%MCF3?H>FTB(L18c#n0+?YFS+p>sfgx5uCMD{Kue(lN=s1S-n1 zk`S80Zm+>><}X7_0Bar9v~q};S5}MSN3o!Y07&XnGPe>Th2tN4=$pp#*84K*P^~MK zYXc?9P~*iM8AUq%O{SQOi^NQE+_6s-C!T=?KE_Y)WZdAhF&j10+pDw;K4o45U8#Uk z6b8DO;SiUH4k(I@_n=rTTUHr7xc5dn$lG&(UPp-VOF-HSJEvZ@k^ZqHmw@no1EZu3 zQ{rzRF9t>P-Na6yiQ|IkI6v6PcC>!)tFWVP@%C=8cY}owR)+Su)-jv!YJ#o7dYikN zJ~g%KaZne-=W~WVK6V;kyX1&dxs_+`#H))|Q(kd5d4mJ~bpu3s768tWz}Bw z3p?jXW%=eWp-O&a#aX$_@e!I!tMB@wUFoAn(xWL5A)Hrc!F~D4Z}EoR{dkdu-)c2^ z2$btf4C;RYVg1o*$gc5sqfQeRdh;N088u4;P{Xolg5_xb7Gms8bn3~i0y&4*<)Ad^ z7LCZVUZ>FLctYVsGup7rTH6f&SR8ZzU{^i?)5(0#gqBCjga@MKLbUji?A)~_lHU`T zOB4_5>moZ{K_)k=kR*J2?)>TJ`**7DD+<11?@|I;861i=X5>13O!K#{5rdQ?f(ev^ z$RueoVWi4s+S>4EAR=)*dxtdtIKKD+3X5?(kmACFS=kQ|a~=qb*6XkZ4WZ8d?VkEYL)n-2nSuvlw4@J~t0q3;2PJMH z1Gw=JAor9wazlI(-%IItrDA6Ia+Lf(5he1bz&0Wpx8OFk@E`NeBl@6g^F}fHBF9wEb8AbC;(r zg2p8Fn~VlAn8Je(UDmNMm-*rPYh{%3qde8F1f#i%@`5&)K}ESr&p+kj*zTRD7p$Tx za|2PJTL2YFlsWVmGM;xoe*ciNVotUB#2rXYt2hlgeYY#N_P(^USM5;JqDYDu^F$8~ ze6lt|_hosp^oWU=XiP6z$x+{v&F}S8<*x%xR2q0lx+oTk>GR*fT7mp-RMC04RSRjX z-L#F~`DgOZqBF4B02n+VH%Zi&Br%iGJp_&bPHRDV%BUXk0$3)}Cs_m@%of!{K^3_^ zry5>zPfZ`ih3FYUL-6>Wa$+7Q2J=@T%RcBD&>ezD0$+tmq?gk+2t5+r_D1#NESoLv z7r)|bVbL(SPFh-GFpeP^Z`gf7ch<%<4KUXlW8Xt6#>Tdje~%&X$ck6Iyc9dQpy2BH z9omwlG4iwx;vi{z^kcX8yul>qCM2}Gc2dIbwk@T3Jk){I=Y3X+F3j&#^u*$3OhzLc!)Q zlF+&19&ZuNZH5p7p%~ULE|STf%NkD=%}^x1J&$32mP-#O$R1F*!Gl^}8dgN>{YGHs z{JE>sFgIK~rDTyunf|TIHkx_LwTx&@M$K!iIYydrGx_{(Y|vq0#O4Ir(9nZu2U1HQ z1l9{zqv=rCqlg6R@VJc{cqMOknNDLtYhskJdPAiy@m;|Tu6u^0mk>O`@UN@x{^jApb$880%qZd*}`nM zCU9)O=NB9_^>O>b#mojofQ3(Kpb5w1DUHn(W848O-L_e?f)S=Y0Vzn3P$eh=uSg#{ zaWVwIeB*Xw-M3{v!6@1tuy!=zZLs++2~qsiO{jMkuM-5b5j zC-|rNP?8}bJNEZKewd;)j_FFy1`J)&U#zirm*#plf6N?dfB1cEHVe+D`XaB%B7d7j zN~9r|Q2Jsu7uNv?M2F#n@{76(&<}DW?=tAZ)!L4dD+(Bfz^T4t-m(A-TmrTXY>>Aq z99-`I6!h;33&(?J;!Awh*1*#!awcn;&P%Kp#T_-7s6vCO5z2kQ76x%uei=%^1i?E! z0s128F6o`bofuk}`BAGcL30wCA%23~WUNq=tmkMZW1V8kmSurOGTcZWwKj-rB0U@= z#4i3CL@EcGXcm62tH!Z_Y^@xpoWDo z_J#F{SP{mkU<~MpI!>FTZK`=30x<+UD9EyV80UU+Y9D z?nIHoZ1+MpFaaI}5n_#CO9tW>YjVD-_ZN`Cu@COHP0~)CarukUs-ZB!a$37{8Vfoa zpxWrgYgI@HQ6Mif9F)*ko#{-TnQhZL~ky zxU(5fbUVwz683_ewD?@>-Evto?J^~XdBc3LxlH?dD*nknkk;@3Ktab?WgmidGd!U- zkdT^@8tfnZ4GBagD={eIg{`663QdmVLbf_^{m zL;h>B^EYh$nutDZ09?e&zZxTduU3H5_Cct!A(jY=r|W`ZF7-bZpQ*2x>5rsK^Sg2lS$TgD%@f^gbNvd4qZUU z|8)y;8c{jJ3DeXsjLDr$_>f1S> z0GI3G-u#VJObR)>Z3fJ{H0@7rR)-Fgn*0FDV3Ca-tCzl3Jju@vk^CO=m4iocP%F;E z-O!5<_J0|su5DI6`3>P&p0EAV%#AsSR~D2sI+*P`Nry7yZ1?`Z>gvlQfHTPsJzaJUp|rMuViUjvLJP3Y zBDWDd^L7L^l59we^>8`{5)$5DhL}t{zMx+lG*+}5);}3kJ*^FeY9)Tec2J~K&774T z&N$mMb2`J>NuW8rnGh7;^%k@@l$c~OskfS32izN{6@OBu5(TLW6J!jTU#F))-;47Y z8zs@;mkHbl`eyPQgE2aR_9qrUO9WX+gRMfv^q$R~W#1^D;A{!kB8u)sIGLV;5fGi# zO0I?dyQMhrIMIB?U!&~Eub{nk+liv)v8l$eZ=l#TAUX!{CW7eP~emp?yP@Y6=U%a-xy{F>YcI4$M&WXqZxl3&MR-G9GEi z>Gv3u07Xao*9^gl6Nx^V2s4_&?PbcPK>MOYKavP|psbTs5EC8EBHE>+qIhF2`paS0w986Jl zNo#DBZ9ct5yd`%7Av^I+qdG{50eb&G+&MWEZhR90XR_fH7mw17(uxZ;%wi*DO|WH7 zYUDRu7iDiG^$o?B(H2YpF)Kl`O7(?L)@?AE4l)3mRCa}9a(v)j?L9eAg!rcm2uc(+ zdQK3>qOA+jt}{SwouuNl&1}kJ`mWWC!s3|p@!Kkj5rPp++fzlY4M4nJ*bOp35|TY9 z8W7@l{w05z#&%orWWNxMMrkr1#v9k@ZvBIcKD$P)#=E-YrfZ&UB8G2`I84gB;c4|DX;yun%YIJQ_Zy6)?we%;Lmtpuj_TEpJox&b&It1T=&q!09MJ}{{ z3O!xbjMg%=BRlWq;^rl3_qbqJ zs~9pgeM_nzcw(HI%6@e|@osL{>e~ckYw_UjAhgWesc_!>YijJ}&CMSn-N|Qpj+Fh& z9CHRn5M{AH2nZGT?}sMnA=&u7zIJ+pHH@0}$_I_{)(ZSgkfx0UJA_XQTR4;v5hCF$ zkE-FNdf1c3*Y6FIqep+I4HN`%2c0}+Z0=OG(i03_R?XvFaQ`;_( z;56a)UF#BZ#K6n*rTEY2NRSJ@KbQ*m7w2ON&zZ$orbCGu+b?0yCQ+)*jW6>GbX|in z3N1_PikhZh7(`+7=dV86)y$nodH3KqzNzi0x(8wF_nc$XjG9vaQ+S2aCnu5`58>UVjcA3>|s4kBys0Iy^ zeI+2-q^`SVOdo48=Lz^`*vNxf*TyoqG~DZ1`u+>?e1Cxdn{#lF7&Hyx0gY)b&Og1_ z`n7EzIQ1oW9^B@hC1WjGrqykwFPR% zG)e^DjGkVX3T;f#jrVzFRR0Lv?y5hjl3v^HIl?ZG01!?CZJ+=E}v>%-;!K`!Sn^6yhq_THuV-P3zj~aB#r~Bh6XJVe4yM|pZ|IBUJ~&A3WLQfjZEzMU#)@SvkaGJ zU}{vxQ;u@Wh>}`}fil^z+Hr|CI4g!yBN>o}SxCKPcCGp7;(BF2fZ7nD*%meotUJX& zpfG?fWPg@$!Blg2=mFV1memBKZS|70z{5U&WxQz*at0PmW&W<|5vM!4+Jt>0C%Yhw$hi1_bE?|Bm5)lbK~frk>-PNpWD zHF}lV7wmx+IkybVo?mv@>`AG~WA5G=4HpwEP^WQhX{A3FeU^0NB!G6)3q?rv?AN7T z@bP~X0xdIAA%9t$WEPyhEpCDN2q*NU2M)Q-;(4CNJUjgz2LpqNThwoU3f2Oe)iO~m zOL^ecu*Y-yvJRhX;E>*b14UAMrv5(Q*{7F@?$~zC%oFCWmvL(Eb*gJmoB>1DpQij7 zeC(Ttu;8S3z1R1HDg(hhG!r7|u^B-86GC_t|Dn7uJ-ut+kn7P|FuJDd<i{e6k>iF?lt9aCBTvn&wY2rN_ zO{!O7YunMT&#=e-xJi6eRPU(#oRV_ogKI(U1s~z*AByfzM7_%))3{RUeDUJ zn*nd0&@q=Jna&!IKy4o=DcoGsx+p8w%+~1##4+c&SxkbX%)jEJ99MVA@6PUA@~coD zzjerTgW0;})%zP)+`#`nzuhCS5ikSft@!6`fXAcBbyhXLR%4_q0wBI)K0yR#phL=ktI5e>ObSD_(wF>3G+1OOvZ$ij*J=70**v{k3p3_AV|CO z_cUwsSNTsjhK?jpz9(nD%gb^z1;K02nCV<8q^EbSS2=aK162<^@iz4O2YoF>xUbHK zNqC;S_rdY83xfW{8n#{xo1qTbYRIupi)qkr;jmj)OJ8+adqIQL*By%YcP&C!jOWgm z+u@bGV_eJcOr2ItK0@Z^Pd=Py|5PR7_yg*tzXMv_$9rpW_nuf66r8@ve`@ZT)e*09 zheOV}hq1?1iW)!QAO&pB``BJD2c0@gLl4t+A+}t{xl65 z2DAEQbu-9`Rv2P0WVYuhu!>V{Zix6Dy?Q~*{!DTsdrjzX^%54M4mnLK4|61>Ks(Ek z;1+VJcJ#or2OD^cdiI~3xp>cR!%{H+PsJ>{^nQRs>R0O{N*=me5p^C_xbQ;;RpyFbCBPpaVCz->wB9R3#N)ZFjBsBS-r$RNdJ%RS9P^f8 zkE9Nl@j-WF_%O*8dwO#O8Y}2CzK(ouwDTGsX>Cqm zSe3f=ADL%wvUOjt)|n2bid_6*@xN;6z4k&8;Ja=oBkuINtsKH4@UYJaQ*UhX@?;D+ z>I6M<#*UBDaOJP71TCQ)d099UQj7H@V}0Qsh(8GzW>v56XP#*ek0>to$5!pVlpOT2 zKR`>8{N6sm4Hs0)`TCy^boT(P!&l9`&CPuKMJSGAdgl^OV;FFi(U@*2c1$z`Q|!eD1Dvg z`K+tNSB>23qBw=VGpApjOuE-W)a#~EJO)%(WsleHbN$OvzD` zb6_x3VCc>Qk2u~xeu-DP@@Fff%XhSSEl*dAM-`VPnYa{z*DAK^zc$9`VvNQOwQ7QW z)SBTH#f}}KFW9-2rjkXkR=C(ej7rqlqh*X*qmM8z@6r!rL%vxX5ZJ=*h(Borhrng( zNauY^(<|47C)L_nVtGwjjtRX>`xEypvV7d2X)fdI^&RhB-gFT!XnPDc%ZLPSrKXTS z<6=qCZZ%^(6Y;b5`UFzjm5NWUJK;4)TrnSU^t-!IU=x9^p954iD=mdekd;WDywtfN zdyaFgmg(zSHi7VNueeb;l6C6v3K%}z7QGp}8*T?=rk%CCUrPWq1-a#w?cg25lO6!AEPeXC|}OGMY_^LHp8ZNdf}(&1u_)LZmNs|Hz(0Yu9G{FcWo@ouR)k8H{-@w8P#7 z9k~rVXQyf#T3@puY1}w>bhCaMcd>(OpGqb{1J~x(`qoT@-GQ-wA;3 z-OIK8!{$Qr+x(x}3UZDtseUFjW4$cxRz|Rkyh#Bcqfqxmo0T1~{fAwKV+5(qugUTw zwpI+o^G$HK*pe=N>sn-ka5V0i9wSI(@|*G4o>b5C^${vv!uCm$0nGbn=nw_r)Z%(~ zS}a-~W{!mb*i+v{G@dDST$%<6jN_DB1ueNnOp47%YKcx$ zw%0}yUxEKa)i*H40R`*sh7H=Jv2AZ`G-<3xjcwabW81cEH|EA>gN@VJ$?LuEy^H^F z=FH5ek?#Bse)riU3KwYjpvd1YDmt`#zki`H8Ja>Xk+N<9vZ!jH#XY@dQt%d!w9i6` zsphF318+_E4aG=Z$uX^kW=(`21|enTSR=5q;c}9I@|!IR*RS(RA1lkzt7f{0D&N+~ zf|I0J7Snd<1Z=lQHtoZp$Bg$l9tT=iP*^x>YV|&5UhFaXp7-Fx6*P0$q^UrO0*^lo zvrMFCN&t95V+1!Dyw@g zpyc-k$e$tDRIiRV?NQx735MLc9_XJaId0RzGHNwdl`YOYv|IQjdgjB_KH2V?1V|ss z9%Av3qLSgbz7a_)F+7{v#AV8@lSDe^)=x^!uhbbbB#5I#-rqedEfT-N(wG!+CKzxF$3 zC9=Rtp(C#D_QxwTic-enOsuQ)=h@ZeD}^nZ7~H>vtxxyksEErSGqcq7aV#)fXQ{F7 z5K?_PTg{hBsf*(or$S|cD40^HH{p}eZ#PK97Al*P(gW}7v;U0knv(Y~x0biSNEfdp zkmfqQr!(_VgIA2704l;#dKDNKzLJ+67~3t;BB9>xw;0@p0cl}Tr}4qgjl6s!`jcE~ zn;dd(dx})9IUczXUS_84&uJ|dk|b%3PaZm97z?J~3}*=Dhg)%H-WZ-5(FSI2@tdX^ zxt2~kKQcVLuUX_HkY<2mCo|shf?6fpI$6Zs;Wb-to&<0o?};pN7dN}7|FI4KXBqp( ze>LYzsS|0?aBm9SaQQn6eB7B|Ed`o7q{t&J=y=O#@NDH$5QugQdp^T$RJDs|w zf+w@Pyt&&@EyPH@CjPpduSP>G;mlC_qJ?qKA`bN9RbKE?gf6%tVHZ7e@|42&yjQ53 zhq>?Za9#2qt#R8|aw2IMY(0e8vH$9Ho{RoTX0G??xHMeZGw0qg`jnC#(y=IbY(q)J zP3og3T>|#l42{iy$N=~(JX->P=roJeL4AAi0vO>@VUr({ST@xr7Qe-Ti>$p~?F}zO zuUPGcv@hXQ!-x_1s*do8#pKZ|SU){7 zB<)xPLJK4_5r@{dP1B?GZL%QhQ-*J%#U(lxlUG4;1SDjZz=`Uw!u3*_r)5gd)}fWj zpnq8#!SIG9>RDk%2?F&m8Sl~SO!l@8+RnlewtgPBtl7y>!XN+=8in`v z3kP|qFF{XiQspwP^yc;eI|G;`+7*BY4S0J>q1~ApkXWd!8bXfRu=0#UYDM6&Hs@!(>u z1-FcHS58OZO?}PB=GFQQ_;K=%0bwtL4_4ds8ynU<{p2z`ON-)>11AH@-wP(Asx94K zzGsY(%l-MAoDXMpV*99UuM9ERzn{C*|3bKdYn8fkXhl*16qH#5QUGcnP~XkT;sn$W zqztHacqtg|5X_ndwm%T!Eo~DAUcD;AhHs#>@&RIeKclp8efe=b%(F}(&VU*zCk4J( z-sMT~tgn~(ZNicJ?e+wmfNk6w(n3R5)R7_L4RdtF$eJM5F&gTrM{W9`<)^bATg?wE zD$8D1wx$7D(@z%2s%6+I zdghQE`3HtqALMnK`cx7t>3ggg8Wd*1NOKfC&D0t1u{;~IooAp}aJv3?AFT2}qF-7J zYqjx{2j>T?h?8NBx9PDY87i475EHx?p#)g_JB%RyE^iZCQLA$b(i-xPt&E8ll1Vt1 z&jM#8wzIAle>g(dO$dHGHqY8qzMX_;bw29f9pZ`7%n6t(p=F>A|G42V{x?!e^l2Hy zwHcSIMMji}J0~ zIL@1g5%i}CcudACW93KSRAxt+O%M>^Ceq(IM;GI1tmk%(>PTg5WrBm7kI!J+G!B;Q z;^Q=h{bnNLo!UW}pFy(HOy9B07Jd#=j@Z0B7HND&aCAD;>~|6z6XQh)6ARSYF5)c6 z6@V;0lL7Otv;=BkS}YCHIJDhK#>x$)KD%(S+~oQS^GsVneJEuKYcNpQ-70F56hlrL zrH#MPaJF1T@XcLZ4Pdnz*%F2}&D*iII7)Ubxrx;d%U0C%d83H$fuD}a z{$$;O;+oruAY3C}7=4Dm<~qaXyPk{I&AUzz-JUUew$@u}mXR7Gdr}#Lcg(u|;HGXP zmj1&GMt3Mh2z1%TSR=plN^ZGozvN@qx>nMaYOz{kDh_$90k4U6nz_0&L(Z^0g|(&s zJ;CbUS~~@*?p|lWn`yE+RA5?x_UQ?Xxvodk>A~JIFTP7bT%k{(7caUvrPfEu}*pw5t%*G(rs4KN^ z=5X|Y(=7sE7s|9F@qqY%r}EOq3F5R;%KSaAY24Ik+tHr3?>CYRf4z@2se` zH6bZac^@fj9Xf>^XBJDyQE>+@NgkW1#za0L%eKcS@+vFHNJndd2EZ1mA>gtvr#Plm zVA;s{8`~G>vvUWN#c?MWyiy9=f4>bQ-?5#SiHjMxH{t(te zNT1-0>Tp=G*;?%Pbj_ltAIIK(hear>lr6{3XyBl&zsmbN%cKl?)i_4gQxskUbzIx( zePsm+cGP|yy^`7qGx>6?rQ9|{uNZ-1Gt zo*@gI#hkP+A99k=AOazO>Tn?@G%LrJW@@#L(qEzk31X)-!M7fS5Un?=^Jw3YVzgS$ z<6MVpy!!R-N7}GzfFuYTcCLvJZy*{C-P2c12hyEzvgb>I_d3!K+&Q4nRz+2wtgIuhnY(LqEVqte# zim+v%i70tm&OC75wCn-#k;Qu@$P_`R-LW+#Vi}FpU{w(Arc^<%Yl4s3saY@(y>6%d z>^L$t$)VcPc#`UxEu)ufb?3CBzg~h*g`5Shsb=GeGZZ-_M14Ta!_$XW&HmJYQO$b- z0&?pgm!wB;);aTF)JXLnNCmbpMVtHr^wV?eVZer!+x7j=UNq_2H($%meaq?9-yWRZ^=jOmHvUZvL2`$}88s zhnIVMy%rFMC)e+)fXg}zQKB_mtqu2A9-{aF%{E@N`O!;*G%ck76r=_DVN*-Q37msf zYeEdJE(%V9(A94T(PJn7?kA03X%EzQkRz!=jK$S@Ly{#|35U~r?eRSE@-CeaH~2~$ z>VVG4iiYWjx&qP(yFh*TJ`VJfudK9Zb%~`s!;M*qYRH_(g&ECVQ8hyk+_nW7uUnu< z8N+t2P@8*zB9JSSlodMjO3S|j;UDGp`0TO$P#GTZ`g4g6qLbIlzEl#KYbU9NvoSfX*%1W$CoK(DMJcbYSW z1FU8){)I`VfAQn_zpJV}PJqzTr?YOIvsv{raXECewGlc#hDorE*46iQOw~#TU6~Q18!y!)M!u)|ZJoRn-@;xC=Jdnu2k6 zr`z4X!Q0Kq(%V5O{0L>W_nXQ-Wc!_NyzatH${cbRMUE$G()*rwj)*W%$5uv0Wkh<9 z-KgDq9{;Fhl@cXk@;9LcmloaQ5c?u~#*h56)#Ns*Y4+ui!n zE6sSZU?iLlT3nabalT(-(bMGRp$eWozPjdBZv*Bv5DURrdr9J-XHRS+k4IhK`mOq( zJV4kX`|n#neYGR?sI@VtO`Xt^1P31yX#njA7(QFWy) z;Lkf3bT&Tdy7Rlumk!J7k?v6>%vq!(4JN!+EudxODcp|!JdBzN<27QHztaNa8il^H z&O9*2a?7lt=FE>fVd>lFl{5!ipqHN@%8!GeNJ)3RtggxXHJX{{aEHwbMvU)F&4ea? zP|{tl#6~9y{>Z`CqU2mM7g!hvM$vHG1}e-c)&E}$P~jRUbYsSft!Hde<8;w#b~dds z+iZeCS2*5%tB5?49)2#GY4d|2UHI9cCf=a`mL%huX4xm6N71Y+!;l;ICdoNgYV0T& zf710!^t!gr+qE4UOYXeGlwWs_bgUAg9s{dSlqpJeY4n>Rh zUe>&pj}IvkFS@ZRIy7M+nqfNVgx_*{Mi%9e15!6B-_ljv*MPiV!DS@Ss~*g|QU#m; zkk9T>)3`vy>5xW!_bW|%=ZJTCucw`v%VW4^`};jM=TMh-rq|mb+b!K^xWrKsXp;VH zs*U-}aTla}Fl(rPj5G{?sV93GPZasVbOCPXy*C+inXy`dVHRWSDLK_h!PCXLv}Dq1 z_F(@)!O$NLFou*ZDYiaceVy+7OX9M0iv2C$=T4WYAES_ijoNmq@8ez(@zL35#wq*Y z`^KpBjCZT~U+zT#E{|v38dZ+DH+RV62O zQMlKGLSjY!$8^gv*69o-gMmr-;{p3(K;aAdzry`b_J`OHreS+UIZ@j>67}v>Zd~4) z8pKs?93oqmjVYD;hQmUtuv{P(sQiu3>&#+76J@?Lp3iPQqUx>mB|WLlrFTbC3(Y1x zhd?KI%u-w0XXq@tX~vhP<^@r4HP_Obv;}jd8BS*dRL}Dum@jEW^rGoYEm#L37~1mg zlZnacI07H%@2fOv@0w~0b5d(1t0t?dCYp=!!&#ji*^yVZe}f{o3+bdE#fBP;^w{M)Bx9!BG2%_5tI)zy$m(jB|-i}!>~Wb zw5eKj+$^?BAy2453h#$-pi?-=p;5u5mI~geqhIGs1UTp~DOXLmr?76yfv`$bzHiCA z%c(0}@xRv3MQ7NxKKu4CieYE)>XMV#c8Xk%h*UjQdk0z}pp zHN}PZy_SOQ%furKMpNj`BReZNYBg4<*cI8x!lR5Js{A*`Nv7$Egy*u{v#BlBO7&NG zR|fwkwWIvd+yfE2d2an}4k~jybS>)9xPjo$YRBFn{XQiT(w`mDssZ0>hgR&%V8~d= z)MxzoXnk67JLJUKy(wsr{ssbHw{l?YSd6DT+p>+F=hSIrGpyfxC3Y3dln?!(N5p?rpH8Q^q6_8-f4jB{8bAP@%z&DnB&ib{do}s2#pK z#$K3B3qGR8=_4=)W(!(-R(n*maT!_&!pUxy=uQMaGdvtw$o}Nk^qsqX7;p~UW)0zk zTk!Byx@)O~BXgYjmz{;Tm5Fr7$dY@*CZ6e2#iqY3-a06N=jHR%p}92Y3-J}4{oF(1 zmBF@FMNn8HoFL>GmBwsE?!dT@oYvg?Ub#*1cE0V?OAwp0uy`YaXqE2Rbiv>V*?tY} z9m`0EVE5@r;of;^X#5!*{YyTUH3^%mFPd+L!o=61V#lcwHL(02fbxG9`zsW=@YhA| z!mEeT5nK$_!(|`EGLB;0ciJr*o~W#Ryn@kH*hv>g+eucXM+uO-7dZRpT$-1)jNahL zs@X)r3IP#;KxEYUVq|0Cgj-?O?!{}Ek#%FUa;i>7|A*(RR1Ozs<7GHfN9^R5CT6mq zsZiIn?!!6PL+tyjg5GzLf?eAM17h-g>M@y(pDbZVfRwTbngGeWB{N@HvN-&|=;3!~ zg|TNt$rs_>zfmb$(5T6AB*_$-FqJq9CWSXr2d{l>L;esd_23mgbxRr!Yo&`$kh;VD zB8ca%KK?F5ez4A{{jI*JO(h^TbDBKKp?gmj2ne{W? zeiKa)3MkL3VP(U8G_~YN(FO{7O2<_QDOY7%;i1AI#CgQ|`Bj*>Ue6<7Sz7nYdw{TF zH0X`{<;rtqDc)ReGp~94zxnd>|AJ}tyW7JHYaX+Pb3;6tDMHT*GHCW6ta107E|=3- zXL0M3h|LUY2&6)JN$Wrt9xuA)5e;%w51*`468O;#u=Lzm2dLerToh_?Z;+N%k6QcPSim8e8`QMtfuD7Kzi zRjUkG2YTodfI{TQ7Z}NZ0>YwOAJ!tvB@i1#e9)2fImknYP5IoPp+IF36-D=#Dje_j zk=7wGw^(jaQo|G;)#)OF7plcu|N;7GQ>k{4J}uZG%jdDYHSSNltLPSNA{rre*DV<2n3w#)zy z{+tFuX8A5}z~u8%nF?F2kULVy`LIi81ZTfFv9_C|mk@PyF5;H^!Q{w@4WcYx9sl3h zbKK)UkLJr!>1v_WD&^4F6vHNkJ6fhPZ$XI1+8uuc(tY8ex_`=4wTAhBEme)H_KY@d*?0W)9LDnr~gYlQKSPJUaK&Bi1|U zGW@bx-kp{?HFKpWR9EteQ>!xgcj2J`mGVL9%95C~6y+9ferg#+8Ul2)@CS)*_BolC zSC{GhtL}Qa$ys0Bs@c7=_0h<2ggo{yJi`kX%*qkh)P4YN4)c%n?GNjcMv-@9*8wK# zitq|NS`lZ)sj(^;awc&n1`c^_4pI{ME|01UOD2X!@;>^x9N8M;UWJ?KIxMI}&Vfl) z;t?BUK6|Fo{$XQ)f8+~Kk9buKsW~*p@ZW$h&Kol@5F0f(#N^$yHQEb}Y8y?JJP~`p zapO-aiFbsi`;k0BJgc5zQ#)}qxI*=H`bq#QEygx&p~{K0x=?Exu9R6gV}?&1%kNMW zmeBh!s~p!>c>>OV;o^w=c_|O`H=0$e$u&L;AvG1N0#&vP*WNDH; zXUr!#aYx}+t`|>`Y z_C946+V#HOALYIt=n=g=>AiY%MrHCP504GHSQ9O?ADnbk{hrnv_$>+ZTiiFQa5{5z zg$a7$LdbI|x`cH$O2NyxA3DRK^IaPZTJDl0tmELsb-Iq{L`*(T&qSk9Mi&=s9XX`h zSvI^lUK^%p^?+k)khEeGPJnpeBMeJgpVp16P~hWOFj|lv@AE&faRL_Et%z1lO_E@@ z(<(u&ikYrLXwm6fd%q=8tP^*jBsn$Vcycdw`RU3~j54jR(}nLKg{c;EI8V+iT?!1w z&|Fs6vktn$_^?R{@bR)E{-FzP4?MsPOMQnQPl*)`;87vQ)ZKISAR6DH*YlVvnI|g3}@%? z49~S&yBn$_9CH99-y;R)ev*~IwhVGFe*6kXq<0%`V?6h}C4)69QVo2u1jU*m9RxLbolFIdng zH>$^>F0B_ErHErN=j&@a^Bt|wLvwlG_M4CBowl6U@CK}dc#idn6rO&Mb-;_8&?{B? z(JxrAIGA?FA}>Yg-)suBu_SK`Y6=rvns{#Lk`WlcX~doq)6;%mSO#c9;-loQ9?}rn znEH$Iy6$klpW-Gh@iI_o$yrQ@z}c9RjVHABr^x~dOP|R|D4S?Cvch*On-QPREJ3Nr z6UFj!^Ld^DS47?A4jO%QLU!kqh%+Zg&1r3+1OwL(D8-ILy~uQj?@dA~wFWcIiFSPg zey2Jxu5``Nvg5w-BV)d0yJ<)+jBK-qyGO=@=I%P-gBg74ZAeqm8HkRIAHVEX&(h2b<*9EGBq^-?UUo3%w3;+0$w))+f{B6459K{4n+()W9$9cmD}$)j{eFP-}^LWxAY2~My5B> zc(Mww&dj8%(vTN({r1w{qd8nDpM7$}*X>c6?5? zaTA8VVqzqG?TVrr8GnsiXkJdJ<>bG&W-je(SZi;IchWzKY2>WvOp*;tms(-!^?PRL z^>X=f;Xu4@z_cxK;{Nd-ISubP38l>{ai&?b&YcSp)Gp4=WP-tZKmYRBX?4H5{ok^V z5nLeJbBYN&0wIS)68*jZp6Z9MBi*iSJ_!+_a_g$!U?zI0esLXDY$KQQ1HW(9vm*lU z-Eo4$pZv2RSUvwhKLtgPpX73;G$997I)S8KBMYOEJe*}2I8GyxZqti~-kq~B#);Yr zSuR5LgNcCtioB$TsuYgpKBKL_e+|&03`VpQxv>KrWwYnza#XR2l4!+KcCfIw6tM;J zpc-;@C_;>^OYb5CRMI8L;}dX=dYW;X&phskCn0OG$vX?5nEH^-d8ctIam}D0+Leak zi100YQH(h?#hq`rv_DV6s~4>z2S$?Jhf8wi7VT|mp81@{Xty|?pM7qs)*7}y7I&C? zmAK~LS#WQcXb*-F2#C^Q1k&3BsL}v{8?gvjIj+$u(5Rl^M#(9w*VU5AemCnZ98=Jn zpoRwUYu!>{*AhK|85uDFfd!a@wh?+h47nI#CBO! z#gw9#Qfm!)hm*C;*#Xwp_L^D*Yw!z!F$+eSkk7kepx@UPO~k#rBN^BP8|2J-Q={p? z_kiK*(eGhIX<9>p>xUX7wyz*fH#zg!HVQoihRsA)yKMJ#Gxh8ZbPcGp7}bEhq%{S`=6ZHKPNVR0Em>! zih?7a7d%1XXhJ{4f1g2qm$~=2rna>HYln$1s9Py@0W2&EnI7%gf2--|0Z6+nS)`N& z>5N%XO#%!*rtdzlbA8SmJJg;4VRH$wVFN03!T+Lr^48@E5NjAXa(U!jLH{Du90gbC zmKzXN*4+&1sf^nc|5CefX#$E;YT?LEY+w0HJupLPCZrPxb0X`BbOsz#DLaYnx5RrP z^*G?b4{X18hy+-#3r9H9&F^8;O~7n23gT*p6U9sday@H|88!W}AJ6XoWrC$%9E?K@ z@s72abo!i{c0}+YM<58&?0r7ez#49p#vR3~C2!9npO)qlN3&cnsU32is>1LO(dwqk zRHH&Q?lDe>rS+#@TKZN+>!#kxu zmOZ>Q(R@q_+s-j}!d5({9=HW&+6vYCe|Cp|T$Iq-Cq+<})k~v@yepN#&wSoL#g&Y)>V7H$GbG2j*nzEk|UET22yaYmKV0Hdl-H5=bY4M*I*0E-3 zC}l1&ljdY96+@Iiq$C$z^89Z@I$*xEybaf>TtYGWOq$Pr=d1B^ z+k&TU;{kxo$FytF^pG&kuEGUzrLL<0s3Wth`u*o{lJa29peb)3uNi9p+_~peI4gbvEMlPY= zF6jZSVCyYtR58xMB~bsB+qREhcTwK?J@03kd7Gzr00vVe=a*!mR$`Rl>QTFCjLZGuwh)6 zbr*!Nx{&4``*;uhDbV=}Q_e)?T5Lu|CXqV~2oH ze1gWhu$*S#%VmQ=i~LKirFd~Wh7xe*$k%2u6Yok2PNh1>>ih7EEm;M5FCUZX6MZiQi)fs{o5UDTJi7gwT;pXu_Bwkx`XZ zyQ!oA!;h@dcQqPiHSO*rIGI8^s3C;GMm0D5`L*%qXt+iTtPMlb2mI7XT}y#} z0rF#!;~Q9IupNpJWo^EsP9f%bK6#rsr+N)%(rfES{^^9Hn;$exr9vH+R5&Lz>1ncW znj>+8sRyUhF!~g=P)&Nh9(+;miA2Jm%Yz1k9uC#hNFTa#X@ThCvW~(zrMR8(zgSV) zQ+brEoVhGn>_)u#E~2ewS;C*)o3`w2A~@(Y!j#ea+-*$fL5MBmJBB2b5h1uYT}`p- zr{@&Z&Rt;B6YbO2CQgC|3H+(q`8Iq@m7K$|>TpD_RJ?|2HdJq9~ER-yM`D z3$`F<6B&MeI=JLZv8k#cAnB#g8STlGu`;}MYI+h*?w)(eWr?#oj=kskk)kL^q23XDmg_-xC64ce)YmWv9#Ck^_= za3u7a&_2FUkHh#1{S@UOYwZ14%*CpE?2Epg%sP5R&-%FKO(0n{mlZEoBp>@thCq}V zJrz8LN3CfA%o*lQS3~e0-ikjvGN8)n%UB;t9Bso>0V&g*vg(i17@(Rujy|GfuL8%s z+T#e}`T6G+WdS(p2@G{4Qo=`8GS4#=G;?bdhx{NlltQb`LlnN3tt}|1-^uZ6Y|8dO ztu7J5a+3lSg=2lx(-AZHM6~;p5m*v|Gv+KW=0!T^prA!{jn8{w9w4^o7nlMUjHs06 zJ}}IvMmx8V|GvQlhelH3D>RG=G+a3~*9bw$S4{$>Z>X)$tg4CtjAo?N3z zKH!Zw=j=2>9B8@}*UW#s&7jsFbUC1}q&B_BPSSq$VF|aiXEkyjtvpHDj1O znfT-W%TAe&+kvv)(XoeqLtNf0UwsL4@-L`kGWQ^+Sk~GMO(Tf}7wp$VN>-mK@w!G=dd`yv>8R#B z9p-?e#!*Cfh>q0{lWBPJQiHz~ve&Y=Taz4V3ZC}gu@&_r5PI}XosM2M|31*wR{98t z2H|Ng6cpjIme3Hc^Xuhc=k=Rqvgz$N6@KSr-Z0ujQEW!A@$EUVOZn#_9IArGyXukc zZQ5H9HCPrrNaG0x5{wyw=w}6MeOOs*sw}(_-EBK^_tt2X zQ{wSz9ko+p4q6rAe(*{BGlo1nP(I4d}NwI(!wi5J5BWd*;W>1M^d8F42GKJcLd@y)J+L6Pn!M_Jd5tpw4jkwA!-l zmPxU!7_hco)GTh8QYmxyQ+e6?rRIm`l4o=8WIJA?t($H!OZX5I&(mV?Phn@>vNj?MVFI)HYXOYueDehJ44*1M0=o5X?lb4;mtFULJCl6hoeii51P z`VUPZzY{Q}v0JZJTS<3C!JjlD^>7zM&t3lEHhCqrDh5~L)`RkLyh6S&Ba?qAYDxI3fjS@CCmMDYi}v( zE6)cvKo8VeKOr9ufMtr+ayaJjT0g_K9dPP>v_oIPHU6gL8W2si!-}@WvdE9>dy}l7 zI0>#+=H@m9m=cO@4?aMBG1AueFsSWD&FCk6qo$TZY;p1#6}Q1gB#Z(44inLyB?b{&HH(JVwWdF#|h;^SO(R z@=Yy>WI6bhoxX8WHYOVFKe`lX>*+O$yyQ&15gWno9TBuBXM?Q%YMGXbU1w#EZPo(E zGD+_eZ3OfrayXc+OaVu2U#w9%ozksk6aNhP))anuL1dUF*Fx=$X-%IT>qAE0beeX{ zgqWz~1-nN)`V>PZZLkk8gv{olhGyRc#8{uaxRQG z7c4|#Sipo^@IDDl=husEP38#{_ho4f*_!!C*NEI$NVnd5#1s8G5Y4( z%rY4b+9;>AyYb`yYXO3@>r;mw?D}E`b&M>o@Kr-`R2-*#O;MKX7r^IN;lW*k23SLZ zZ$D+(n_JNAVuW6{7c7sL*-UNFU#!y~&vfpf&C4eN<;U=A3$AGC53#!4o+&>3;eXcM z7$5BUW0n~s;}%qjvSE(NUDS+yE%VR>`w)NU@IEZXiAFCB?&m7s80U7Trm+9XBs6Nu z`b8mhWz1qx+h{`ibn;Z&RvEt4>F%iw6p1Jjh-JDkQBatAPo!R*K$i&9S)YjDfeT?F zIn94#fALA&Rp)Z-kK#)Bo!f(0hDPQG8_5}$AyhALvsUZ3rTF*43|hVC)vKVG*1shH z3607*?P3!D2@&q-8OX?0j2x9mRoffZB}*a~$W{Wi=X^(6h3RZdCYU&88_yeUeu9X$ z(j|5N%N{}Ch;31eN4GlW=HIgd1%y0f04Guoy1`)RBK$TRk5m$80BU z@w`XQM*g%tWzeqciQ4{r6cb@;a2-wH!Y=b*4KU5^OZdy^zU%J2yWGe8aIG2R7NKRN zzPJDkS7uE$uw>B7O-V&VIbno5{p-(eC`{H$SXb$p7S$Kp;+eVt4PZ6E*7J+UXvUD; z<}?mW(}xI^YG%}-8OPNp7jJa`z-)KSfARK>JiVNHGWQ!}K-KBhmocGwIp<2>O8l1Z zMJ_*K9gog7@Lh8@favy!HL&B%dL;m2a@=L^fIp%`S;+vVG0ML3clt|@r)v*fl=mGY zv~P$!$e6g8f5yHk$EjpMkofj;&NVA+63>Zj4=uM(H3+&KhHappL0|v|9?egzQeC-R zHicf~(S(qL?W%sOj=8h3$*)ykN{V=QVMi-28QB)3W|uQnEa!L+u+o(6+VI)AdQy_g zdYmzfp51_l#-)lUSVk^k$4?!=72*!#GaJSgEknY{P#s|h(LaqQZR*eqoL`3bH% z5CA59UvGi|Mo~8oSds!1@(HuhN?S!sWp@@elqd{v<7FGBOh;{796<6637KxvXqPpe z+ozSNtD4o@D1!w=&Pq zQ4qslS>BfbZ{oX?nSZng4RnOCOd9}J9of`>tpdoI0M zV)tZ9njb>bVTKf`H|$qqZAA)!$(UZD`>nk_a1!XovGd!2U}n8uc**KzcN05NPS3Jc ze*^fnbvW|8dTJg8Z9clYiSI(gGovS1{Kf;Nda`i?*ML65?iH-!sYfEh?oWB186^gG z+iw`ul`vYklD0a=E`bh^ZbmYRL|)f;XiavNgMJ0R3S9~z%pLZL^M^#BUH2DFPT)`6 z3hjB$B>OMs-#}Y%(u;lfcvR{)s)|bham8M!Ll`9-43X65P~QA~r&h0(1v3Q8dXasJ z$l~!A$S#?bwhK>pxTr%0ln{RtGe6m~WH zTMl%(h_`DAqukpn8B2?BX#1Kp9a#UFxP<3~C6;Kg5oT^Aomk=JuWlFgzhF7Ej@PM7 zF45(R)_4R%OybroP$Eu<<+6;A4s{mPdG(_~I-g|fg8*H?1p8@jNZWg`%MX=yw7wRNWkIR*r=poBHnSQj@fz6Q( zoTG50b$rEoJ(l^FZ%9pjQ90IDJB<@exOfQ_XE#}N{Dl!c9$-QK2f>t`Hqjl5&*iT8A82N~cT|7YXFrzJr47`WcOX>j??adG?Yepozi3r5Q5^um zfFRuOk!xed*Lqgj$ef%qdG&q$3pjGZS06s&=CT7<+I#1#b>_Af)&Az+B-J& zPA0NckIZeO+epuj{Cx+!t8Wdo!de%we<{#G!{mh)uw9a6{Ol*)IQm&7sZb;pZF4@@ zafo8DQ`4swX`tLO#k@I2S=6`@!fIpy{-s4Amk-{gP^~`8P5?9Aka5R1WNOpn${8CevOL)Bxr&1Z| zhsxv6yfR_0sc=4AG8PlteF9FBvx5Vd8kfFz?A0SU1wi@X%*ljt#VFf9V)w5HD~DzJ z!Ss@k=TREs0?gm$31e9ro<%&P1U-RMEMWXwt; zZ;%60>M$Ft==Ss3YQKqw<@D1%!0qUWnM8Gulbhez&sxUi^1X2Fi)J z(1U5c1ki3)InKV)YYS*@32N)-c2+Zl13xLzvD_?}+0@WP^KCB9+Xy@0alD(&4*C2$ zMw~2>=qJw5chmEZiKHBHZLA%I7b(m-jy^UDd>^0wTRKG^+xO)h=4Mj{e_7Ezik_iW z_wHl9)0x71R^GW64SpSZ&5}~DB~|)lNFxwe7y7<-AviJ@$f%|zkU%lCkZCJ7|krE#S#dC95+3Ns;m?kJV!MfGdb*JP+ zZl1`~)~A+iRd_oe7XqY@Lj~ZD-|yv83~LUgb%0CZcs)86gUx+WQ2R=el5@N8>b`ug zap<g0wEKHg;&wjf30Tp?iAugPvw4nJWNCPfM91w2w*=houd z^er(Q*85TIoncZdRFCXK*0@xNU1Y>5as#RWgRYN>mGb={e%`KAi_bNj+MXtt&!8J<2>al!7^m-oORlVP6}d(_g8iS#i0X;}CDIQI~L;Am;`aBo>p7tP$5>)_mAF zY>P>6%)d+GRXE{YDe-;tqqVY{JEAw+^K}|nuzSuvjEyM9x%+I!;&m7fwvkSIs(rZl z)=I6c86J3b2(9rf(*$o&+?naM<*-Z4Otuq5Nngb`)mhiI@F~pgpqJ|5?0{sO`vn

    W{m^m`Pf3vmbT4>v$A z>*e}-`qjSU>z~_Q(#qTOP`rDv?(rzx;*f*`nvo?h>Ar1EkTo)DZteZ`?=z^!x7&Co zYrrgQmn<7~-;2TLDe90f%0f$3KR=8A)~3FiYmfJOWP-fSZ~GEI5tZ*sB2_-P);ii! z1NCeF(79(g8QR})3Z(hE`}|;RnHqHesoSo;?~x**`v5ximn+=UT|IWLrly|J=>h8v z7oK84`l!63e9(BccqhWc30ijS8$uaR&hgltTpCxshFr3dJ?VbdsZlwQ)(62R4*vBp zA*2*>w9T;5%L>JnCEGc(*azz|ZZ>ONvZ35z zy5`af4hq&Xn3!sJafxfSf__A%>#x+ePN^dt|N4x)iu%@;+#(wk0k($D7h%K( z{YCNf1n8?^G=HkahUFgj*REptPtc&1NNjM7Jkf{^U&i0{v!Hu^uUG-&guMHP@aDCP z612AX-*PLbZhQ{(F*w`5sElfj@{0TxB1DtMBrPL{l#UYxH0>rGScfy>Hx;Z!^M_H% zUc9=#a^DaY-+teKF*jH~1OIWOYiV5gBlEpyp4xR0hmWUTY^oORXY87h;epqWfoQ=n zP3p0i4uwdOwiEHigq3hGC+E7%M$n=UOMsjsF+9Zj+8ccrJRT-$?Hb1vrd?)^?bt~;D z_RO+@!*mwtEAsfh3g3sUwc zxyGV5C6H5mUaKF~y=Av}=RD`je4J17pP6;9d;M1NI8CENwr-UpMQTebc|Le8a|QPI zcjiH??88RBOKpZA9@INjp*Jm!X|KDFhINNS^N~W7AH^_IvMrGAxUreAW(C`mn6Esj z-}`+Sr-KKeinP@dSg{~Y*O)faxlncEB1P7b7A>?}7+aikOy)DFJ(Gm(B4NFRXoHwu zXON9nr)!5D@U1v7U{0a;W+*?Um|*QR$vQ)BSsR?{S1(`ri_ieSSv=( z#jvE0)*QjXL5=5Vs%T)=G<$T^UGhYJjfM2#EAyhH+5t1ZhhpBS@+}enL#Uia-{_3> z1`b!Bc$H!pj&bk!m8S>(9?*O3R9&B^PuqQug)0eX8Ef?Oh9!TMjTvf#$hM$=bIqOz zCPS@Zui(qcKU`}zlG03x!}Km(O0VC`+p+dxA?rsc@gJi1y9c&22#dA*xR~3g@iqR} zXWoZeZNV&6Ok~>_c8$y7Q6vmV?5t3B+ilh$ZIcpE5OG}j&sWJ&WIsL>{O4s*HDf6} zOk{$)($u6jH``INn^Ts6Qgv~YmZ|TV8*L@`I8xROB$EO$^KJGfQTGcKK4U8P%F!FI z2HP}i8o$(~lD^DZozP-DYF2UEqa0ZQwbv8h|0a#r;bNk1%4Dlf`jFr8ihurz)*l_7 zNqR7M%zUY=>Y9pRua1P$T;HnmT!gFYhJU_qND_A3<%(PxjVz>;lz_arFQTp*8L-K4 zVLEc0A?ICOxc7g2;-lj(BH*^C7>`qjF;YO{*q%wer5Zo)SfL8@lo0$@|8~dZ&cb=Q z%7FtPlxzhXu-J^6wb*g@!`DY%_D7WV5R$uZO+SX_*|}%k54Io*w(@V;tvXKiXfC2L zZ9>>#%C%f{yzyQKfDgOTDWq1dV1?6R zgRY1Ux)q(UQ`8VjmBT;`G0JoTs-jSPQMk-XkKHluh8n)X;mD|7efI5V&ok#F?{_Dn z6C8U}7`@s16B)KPT&?e&8>XSOZN%P_M@X|0t4K^nT3HVP<>L~T#=WvwbQB=ZlV15c zn5mGzJ!59*b#M_Q$W^0>?=?S=#LV#&-cf}A>h5%ej(@||gYgTkX700`F`c5rN^S;( zDj2z?{ zgk7=iZNX4sKSTCtYC}1l*kIh=+TGionuv_GZ(hH5=S8&s*?AQhG3<>sKxLCZIu*Iz zpY*-tLR4#3)`guo=tZaWsC`UzZVxwngJ9wC;ISe6&~pQFm4L;Xb35Hk_2QF!yV)w9 zeH*8jXPeFBSsS0Zm9rmbEM}OGi%EEt|hlVcYsl~WF`PdNQyjAGyW&y>9s0q``=^K?AREv3oU zX&y&pGQZ=ZWrn6cQs*T-(0XDH=pPs5KTWpOZ%WkjRSCpnfV6!e?Cl#zQp1R)tlHI3!3M*KGoPA#v4DovmY zJcL&6-#v}NNmVE~Fk>+EW!pXcve$e_>K9|5vnzB3FV8v^-hs}O6uzy6ChTp{UmPNY zBZ^A0Ekf{iD5(RoM=JisLD+EfM>>jzcUOnujg*rUpJRVIE0^R)yU7{it$&A1_;g@r zUEK21f~Epr)pWt zwIv~P3&64sw>}xiT;JvLY3iUzT&JspF~%x2=cR0ebCEl;2RVducX~tuC;6p6-rVZF zY9@FADR#9AG0?fQ`FRA?$%;-?x}^Ca*gY-)0*i+jPR^nbx}@w=u)nq%cHFJ4ykHp2l-8=ZVGy9 z5_?r5Esc;6K7--=*I?60_OKLGhkOiF zdF-gGWn4hO5XCpMndA3;gB;2o4P7Y+-)D`$dY(5o^m-PM=#h8v;X-QPJN2-eqt<4t zbIUiYn@2CF7ogW|m@c9#niYOsk%oPpOZi2Qr$w(2*wT+-k(gccU-yFkDOC@ry=(;dKjT$bQAPQ z+HJPTdC6}+vIIsU6BS=AG=?kb)?719)NN2y4jOaTNLg@n(V_wFhKA*!llNlRen9>0 zUSta7dzl_Tm}{*~()yxDS@)%L`wu8LTgSZK88Zio4euL?TFF&aW~nnoOtung#fWI( zd;(8zn|PHUKVPEqw0G*sB(DBHq*d}v5&-(#=c4lC6)bl1iNnh|PJgqtJ) zZZ-&bJu@2snMQxK^b;e14bn+(aWz)2aOwAz0Atf+3o5>>BVT8jlUZ=L`3!*=JAGV1gHxtB%?Fmcq^OaCF921LMMy z;YA#Jj8aFtVTBWO=J2fZZ}4T51fFEBS!5EAx7fA1;b(nEB(Uvv2F2#WrQgTC)EXW& z|DuOT3)$T~v;0jl-V)&Vx*%N*NP)_3WhilttLuvN$P9n8?)iC(y7)!?wy6Iqoo~z! zoA~Gm@D(y{1F8k-xH@^{$(Rq?~FLqFV+yS46;H;#Eq{pLaQFgpbRih)4C6>mp%M@n|_6qM0B2QL2ndUP912kIl#3vTDx z>=>Z4zIWm|I{-XA2aD=;RQ!SJox_X#1wO3a3|F^mFFhtCqt}RfvKYaml|A5{S$pyWm8o) zK_%0j8*3Re>&1;WO&I0v%J4O1mw;uhECt)0Ci@8QiN(Z&{OZ9WG{`rZkfsNwBcwL! zxx1m45cQdOGqy9o6juQhD?Ze{yDd~_3qJ2PUR;i>ql=5VGj1Wm_XDA4_kSkmrI2l4 ztkCnrh8>)glw-h40L9J!kSYJ6qa`H!az%Z%JBl5?17#kZSfLLg-<3wNvn%a};$;I9`?#xGiro)Mh5b>v1zhQv;WxqGiCUM|*yW#M|#q0e4p)d5g~$ zSG+2x{E)&OuW8-Y@imNlIT_KGvBPj`nm+HxY|Ge z==NQ|md0A=2p+yXYabca>9?{@5#D8h*F=hJJ9pj<0>?ZjOW8aW>ew`>^XF=D`PN_r zOIb(V8{fTKZ?c2^hqmY9Y)kLO zUrl_mOE7OFqJn;q7f!<*FFy=#Ke3+i_62i==JmDK=!U=_b8#oa3MPj_A-_O&e^YX; z_JbK$*!m30Ldq1q*M-}#G)pkMg-#6Nz`zIkBFC2V(RYNl-l{Yaclk;9j() zEPdw-g2%y@L6KkNQ!#1h5N@eL*Lngi>KQs$oTJFfDtzz zjQZo$dJlI@nnXCD&w^WOvrAm?J1(1vIW*SBa{oh(v8Ya(^!JoJBV3(Ka+jZ7U)Wsm z&AJjvz+^A0N3}_`W3P)eUuSc><&6ldtF(Cb)&<4s@xQ~iEGuX1Fj;iy;zOE733vtm z(!s{)maT(2@qzmX<|`GNb`F#!4%YF7*ge~my&wf41F5fV|gY zJH7}N2d`L3Gdfmq$hM)r*o8m&W@dYCxuo$8~l9oL`FZ?Lqb0qrs8J=&fYK_11ik%@f z`upHn<@u6IfA-=n>6M%vzVbaygcO7Hxj3&`U?E?JY;?+*U$js;yI?7GS~~N&@ZQmb zraD$?LvkbLtM)F8Gsm*xo3RphXN1Hsx71irS^0Xc#}|@cxOjsjOUY=Ox%th~>PEXp z_MxJ799XJ&Dc#(EPv!<`G|}j1AjfwzFP?kAGS(j(L4Q#LmmdB7x85&M!jb#%>Onyj z(CwN2J)TPW$V)lI{-2tkhsXDZpN7^<-T`+X;emO<2D0MiEzvk2<>7Ra$G)`p}4R+XrH+QwnbD(U4(Vtx44Le7WV;YvK)8G zq-1w8v<8Ub;RTMRV`sA|v&6~s*!0Hm5yI=}!yxjPj>d-LEv<)>kv#Dvzb#d!O|Ms~ z`ecs3zR(5htNa~1wt?D7H`WV?slJCiC($+>3AUS+wkGf;YN1uJ$L%vP4E06r=Vvk3 zL>yUpe@J-z;}njsF?a8)%xap)8baX0f@Dmut#8UvL4BD{K|_hI2SdJr;dVI0PmMeQ zS+)+A&Hm%d0lY&=@Kjj(*kTZcY-;f@^=>~pISP_>HQwBzKq}!*0>L^=O6~6*`N8nZ zlb!|j3p!4-#NK_q^iTLHVo~DCft&A4x0zZLB{gk{Tu1G_)5AsI0<@TE-I;%L{u6{3 zNwCr#geyN@L%9)<`5TvzT4j$&h&{US&{tF2r=sj!2aqjsuDS3Jxdm%J#Pg_H`9x zhHl;%Iu;I>S(i`xjY&(>7NHuX?Y%`O8~$pp z`E~+J1)H2j9Ymc;=xffk1{=}9qn?$YwHA~k@+L!m8NSU&!#JgW8T9(7%i#8-OxqLR z$*w?Wgd770s{W8Hb8hl*VU#3FD5z}U~Mz-R!FC@SXWP^ALFS0BT3pC3XW3x&NOEB~tYR9Pv# z(yLB8R~S=Y?|6yctQWOesCaha^9EX?l~bA(VA97Hq;nBWkXnSD#UnyOVYK_?LrCpZ z1zrg2=b3`L@UmzXF`G<^M-D(i`}j|2JLsziu5=fedR#lWw5cZd2>7n6%j{_Z6?s1z(W>{q=_!(wJAdT`8w}EQHimy;``4%PaMX+ks0c_B1 zsg8p)=r<7vO;(mB-UyG zi1Q*MH}r~T6O>7-PY|r ziy9B@qJ28)O4MB4YCeb zgtf-r&K8A%L=1+{-5j`8%{~=oVzL%3E z2Y-gCEkOMF0USAzBW{5C{5NLxvr2LmV`;FOPB{$_0HXvP0 zQn{nT{}}3(TY}c4u~&D#9Y7jM3((T35d!EK44#P8K=e;NeS&`jr$v( zux}3?^!>R7dJ9e*9GR&Kmg{BC83Fd-$)N*bb&nsVSbC*fw^Wbqofx&K%UaiL5~ zK=9uCAV^<-?`>;&i2M3!{;9;jmH7Zs8z~`KkPCJ!aMtG6ET24l^ zFhb3_;J!0?FHIHoNzt025}EiH%07feeJz<9z2Z&GH#t(j402fD7b8{>N@|2;pozNB zVa9B30x<-nieShS? z*cG>r8Z<*T*B{;BLgD~$ZT!c<=i4^n`+e`rkyPFcrZ}~i|Ar`gvK0DrTa&uYFOf9P zz}qJVY&74!whLoCDkJ#&)KK~{U+G6$9TDUfJf?XD5!svus_QbR2)(MKxMDoDcErbT zyc7KL{XH?=few`>`En)ecIa+O7ou@{?$x+^r9#06P+1iG zdFA0v20-@|d$4~w%IP28g$+(3VQyJv&h3pzVxBhPB%0yAzT@C@4cgHj*{PZ~2O;#; z)I{lIMdEtnCdh|zXC!lZF(ESns1q|${t!VhtE7p^R(O3j>M#Q7>(Ub;_X!F`P8%-m zJPJm4LvZYGEf{4TL7`o^5t-ksoS(OP)P1KOc>Mg|2w7e?E$nP6Snae}&?Y_@ zGS|H!K9fmx9z{K(v0UF{7_G~1h_237P-ynzq)n%9lsqc13Zl_*mu;7#n&encr zY36Qhm73tB3WSG0%r} zwo~2@^iG6HYX{to294;ymAEnoRlEV_xrbvE$~HoIuMA&J(0ODSRnxizZ2{4s-I=tT zKB&VrK6pR|RsRWI-ZOjz!1i(tJSA~dXYQj)GuiG&F}y_*R1RT#!~!4bkg1?J#j`c3 z<-rK#wVRcRwAHXDaV)Pm3>%0_PnGCMbZlPG$7~H1RsDsn%NEZlP#AOXQ!vd+Po+hF&K9p#-|Yv6 z-0JzqjXLoD`elq!;gGAwxnVE9@Y(eTtTEMQRk9^>C`Piqxm7|)(^;zx<}sI4l30j1 zjG9^=;(!6XV(CWXIBi*8N12}%%-6y?U{DrsKYWqlq_Gp!dfF24ynO%_4x|Az3t*wZ zA{Npn0a3=*|0Qq`LEe94k%`kc2pZ?qW((&bc3g5BSPpbEH&_NuaBwPT;nW+v1mxA@ zm+ModB0U1iv%n%U%jHP4rvC&=gPDz`Y1B{|ErTC*K2HQFb z3LO}s%tyzU9ljg7INve#mjZHw2kv&G?keSF`Yg5cfe9DiQM|sg6qdu@#e6)(W#+)z z1^-6wc{{h&KFlS5Rl2H0!7*(n%5QgMFXl6V=C{|>H&PC(ltfdt|W1L#U81hH6enmj79KW=R_1Q$DH##`@+EMKi?3)^z;@~mDnKvYfU2~LNl z`0j%mIj*xP7O_)R4r8K^15k3xI$75`pYd9p7%b>jQ>qe#wc&{XwvI-JMD1r;O$4(n zUKKl7~JH)ndN0Azo> z)W6F_C~A->_pf+$HFuXuCx@j70cR}QD_~KNw9Rz{&7RnnK!eP0` z5K>NvKo{X;__bQr40e(bwlv)`3XfiN_J3UHq${fn--S9LD+Ph#;)G~J>;JKvU<*o1 zOvb_k$K-XCjiLPvD~jue{0-4LT~^djkKu7w;xBjIQJehp~BAe$+I}&DcU0V`oG_ zUTR!#K4y#|VQP#J=B!q${Mi>%#F41I$Pums@dP^>fl5eCE`kwCX4mC zzbTLK4?BBD%ytv;;9d~+DdZFW$a&;fklbUyMd*`ZVIseDmB%`VgiYtBHF0D_4-=WK zSuQw4KQG%_0$oJz_1kaB_mJLat(pi)Bc}*!r|wK=wc1}wdffAIey8wjpapDNjsTa+ z1^IlQZWKCO z3<>w{Xz!HiM5#BPpWTq>Y>dL&BzXn{FqXs!Q>;}rS8{b9okk8tx!?~EnRvavrvNy) zg%>_>myw0=@1te1ISIZ72vGD-ZIVxZ@bK=`b-sHHgr`I)#Xqkk?(nkwS)(xC??EP) z*R^obr-!;eAy?76ny*++!JD14ML~d0Nkpf5p^Lp54nB z!PnayA&E*zVvYjw41&Cl-S#+8eLDMd?yFI`inDg?Ak^_xEAlYLB$Y{%$O3v^?79$C z!}2L%u5ucsFk49j{x&cy#A_Ix(C_67hZFzD1 zP50UyLW_%T*l`V-`m;|WpAW+&oziz9T(u91@ca7t4|uE5d2qGxwLwJ zsN%Dx@xje$sm{!KnCrDw%vEE1EHt9-4pEYVNCa$)gWM4odwo2A_1PZ4j`Za5j9w`h zcbV^k`Y<-c%-Z&kRH@?;2$qdn49>s(euTleJGiLm|8}!Y?EmQa>8(}qnE=H$%D`c~ z`UC0sEMLe1SPS(WKePTyW9$th1rX9v2KKv$xXXu@WPp0#OE7~Q^AM}5y=UOkN$}a~ z7jv4@nS)!6#+>sP;G=}(6H+1%csLEwvaK01SDFK)`|?C=^_6B;jNpwGpqw+$uI5DUrDxc&D92YNy+Lz6kRpdQ)q^FKJ}sIw-A z4C`Pj)3Q26QbHRSA~p%n&=e^R4v{LEhLe4v*ZVxe_tOnS#*DeqLhjl?hSk>v$Il{- z0~(`SGJwc+0CdFcW{=-mOpp$j(B2yvLG4$M<`UKOE0a4)KDi*B2kMroQC{k9XR{f@ zk)mBt!24N9`PJuTr))XYed+WY?8Q-ctwHx`s2h5pLW}sWcfd!D$7yLPD6D?sXiN)W zFSe~n&dN)Ahw^oD=>W z(e2jf(z7qKeHB&-iw5W(Y684|q04F?d5hy5zd|s&b&dWDBc1gdjUw5#{Df4!N?pLh zacQF|Ui64lYMjxKkas5)zlGJ~aHUR6c!~m3(Bk)kxt~245|~|zSuiM zf(PmiOgMS3T6BuhTE%+g$||X5!Bo=wYM`Hff*z=Sr#$;@+_;VZB${dM3U4y@vD7f< zard*=mA%#=NNPK<*5Q`Q=tc8a*gQ$A)Fy;=->XC)aw+JFU5WXRA;J5+-4@*zticW&QNZ^l*F? z_dy2gX}@JcBCgwfnWyA^3uk-_*Zf~Ve&8i~Lf2RJ6@Gf(LDT!s(_a?{Nh^VA%Tx-o zH9GlK_a{Go>z0s=o;|EbyGP{&NW!0hkIjYCSp;oX-pyJXw7 z3&bhxTT8|MRK>ifuZ`Hwts9b75r`9LW0x{hq;#IW%o#XFg)&_}mNGrVP4-`5Lh>zC z9}b7ui1*rbtqmXd%Si)>I6X{L8w1Ae*P)aPgp&FdeYt{QuzjZ3A)(x!W@xtxmA(pi!0ppCO)!ez1TDG zGzl51OmU2<5Iodt-nO>ei)rkY`{?z0**`9g=BDq_s2mxx*FXF2_XbH3_|3%5p#6Ly zsO~v%O-;J6Aqi<@kA>keZ^&u)_4DZX^NILlqwo_P_--kcCKRw8q=nXR*@ICh?Zd)> zH_#B`<>aVLSA7uL76jJ>z_$Bog@t&-VH6=2{(?{y0UB~MQp&&4se_G$)PRt?QG~?r zmx?3h8DLtxsUeYD_GaswejOBluEFicE5rXsmL7j*Y510W$^cB@V_b1g6mIDLVZ{+U zF+t=TzXKgxCRwIvTIuycHND_+C9B&KVHi)6x%L(5g@9UhB6YE0m=;Nj5Qgmci^KZn$eXL-Z;6>2nIEDxaym^ul_nxJy!6|S2ajUO*d zlhNVYWLkz;$ah)O>Ggl5TA?yES+faxauQS}SM8MVYd)WaI@s{GY?OfBU?UV>N&?%bb#I|{Y9oTU(ON<*Kw+Ri z_ksZMhyTgnO%@^7+Ot2)nO)8VRggJ7h!_4%cwnIJlD5+F=v#WOqoLlX50P1A?qY)q z_=t-ZmmK<@D|?`sTKGBs?N+g7+0ti<;KkK+58Sa6@0PR=AQ?qTv@%iV+&A6gQ%rs) z$SCg`d4pJFbjxdGDR=dQEIMoks$7FTzc4v1~#V`o_Z*6~UJpzZ9V-hvuwzw|^ zRw!=f_*#t9ILX`$xC*E=6ldHVC)tyJ2AZc!)N&$=JjB-#-&wf{J2W<~zpDXEdf&#*>uEooxQubVzuM``=Vtqc`s za&@sj!LJ2|Zy#^(gL}AhIRe!igroCB7n%xcwT94Gh8)#Q@cTM42d)vk`Ojhe6kHQS zU*H3AC7-TieT9G%hszduW{SP{br3eZ>2&sac`HyN>2h>UC_}L;n(vscn(cfvFNCi_ zAq58wTX|R6TJOve_vZ*>hS6?JhX%DnZ(2ve#6kOCjbKWul%2-WwaKJ(djcMm!I!uf zo9`(F6}Q7OE-&kLitv%e^Em8?k;mu8K(mKx*vO4VY1Y|Q8I?Txa#`rX7=*g#Y=I2# zReQkJ;Ls9t()DLb`a@|@1qMR1woV^f!)mhG#jrv*X}e6RyMDBtbW6J46l{sfCkH_8eQHCxRh|!9Ksclbrs2q1$juPE z6r%9G&@UH9WruRLGKNk>>8yh4#IIC+OZpZ4#9$`Uush~@Ym=MI zM_iT`FK@YzuND?*a+mhvd^ZF(9F6QpZ=c(rojsse!7DJCut-gOfn&vxq*-x^CDH7a zPm#_*cMkh-pP5)CfV<3*cLM}NZU9`AOOGh4U7h8AS+Rt-J}~pD#J^S9kgMuaX46v^ zF+BRTiiH+^`tMzU5Z3w#h+PzFghgeZr2<6pA(nHX_e+rkeiZ>u0W|3ZX{drE5qg(; zAB%rMKum;!R-|$iO~qk0>Qg=2COkA`LP%1CX4p9Mo_?4q1vSh{8XSTFB$8_vhJ>V_ z8xj!tXH}X7!8qy3pFVLwPT4?+i_tMi?5rY^OnT z?l0s>I0XrN_aAIWvc_W&K7Bs=yiy>*PwG{O9y=pT7Cpe%UiNg%9h68gK$+4<-K_1z zF!~(R1*Q+p-QB)fIg3Iw7J0IQ-$w&-IUDm!0YT!nxysirQ9FZNW;-{ACk4s@h@^ZY zz9d`WpDwuti3RX#lqSMA#t594!EPl*Tm;!jtEWys#>>eDhC1-HFfSZgxZcBZLt`V_ zN1h(C*y&$N{zyG_Nn!rv+-uGkq&27y0A7?>6(L3=rpi-ixGBSiatDx!Wo~qiK(9CT zx`m*fU=w1Av;MC8N>@Y+V?-YMmBQ5B%gRx!kv-VCI841v8SAuoC7ZVG9J$zmup(?< zUBdrc&6r?6``q>)F)p&%`tZ7$@-$r&q)ROlci7L_wc|yo8-~Gw&Y>!kQ-st$?sO>CU#YvthIA^Kj^J@`%Z;Z#Ze36 zia}~^cwgN0DWabL*QM*502+$67~O`o2GQ*EWQIdWE{d~MncFRwvrQpn!czV><=w%s zUyKo|DKwKoGfwAOsZqxbql0a5#X4ld-H`+)cCqS^IM6Ik9CV_?H!W0DN^l9Zmhi8G z_mr*znsamIq(8N?R0W&_&$tQN|Gve8kpZFpNJg}7UMTe6g3%+L`XGhBDoWq9oNr3O z=eD+?+DSn=eaXO6%R*NkNDYlF4#h3y-9ctBDmD_}CNAzZqBNewgsMlcRjjLyPbO*> zu8ZnUFZ!=kfG$wyr+)Y;CkPZus#D)kvuSqD{!Zj;Ro;U$6L^1+DF^;h!9Dd08NG%+ zLl(bD7#|~x`E{Iq$x&ae*I_A3$C0_Hd?kQ^CGZQ z!T02T!wo-OJ;6dii7^O;Zd8z7NzZZSy6;OuFY|#0xxVu4)M*F8SSVa6QWiSBzJe55 zkX?T=_nN>z>J0h&4vUH_x0TL(mG4e1>)-3}cq>d|Qg$^IJSdt|lN9PB&y`E|I!7=m< zaD_YR<`C+gz`sl+df_#E$q;8YND<)`Z*~gf~%)_`pJ!eEav#G;?Xt6pf*!d?ErC5x=2=m6SG; zC|UX3*Dh8JS7JcJ&Jq`%9M&3uMkT9CYO%HdG-618zgby2v)-)mCKJ}LjQ+Rl&oS9q zioyh&2pnakX-R&6y{8GE_(H99cdxMNbva;#-51Cr*Cw;GD_N+YmQ4N!(l9E~oAHbi zlW4_G)6`N}i<12GQ$U!;{5QSPDSyW(fNo(A8vsgKn*gG46Dts%J~BHeAwB*DB`&*Q zX0Kc^m>)=&jmZN~Q&MeNU;r%u>D8h}Ljt2*Zp)obOc_+h#UZPP;D`gjr4+8N{*`?; zd}XzQ04sVkaQwo=3xHb!xl1UPl$LJhs?1r*(CD{zl?#6%!LP*u2S3HXlxIzx9pXP0 zvoADy0NU!Dm}UsG0)n*Y(XHdIH}@l;p8!^{IIX4wVA6txsc%jjBR;ozbv@`Zd$&}+0*k-lgYc$t>Y)s9@V0&OZkazj~Cwh zfZC1u3&AYlTphA#!0q@ryN>})>h)paHS6cEN5i_`h6_R;_R($?$IZEDh*{MD1q;mzMgNFfe5T-lJ>F?^8d?;*j#V;H04 zT%xLpndi5&(H1geSwUyU%tJI<|nHCUUY0QbK6AQ zddD+|2CRR0iWHV&X(M%DcB+NJ0+0zZMRNBdwcF-JGga>D3!kBC6Aax7A3CMB!E7*1 z*KjNV`Taf4UT1o;iP+t)7NZI@1LEs2f>I(vZzrZ`PTqrTMlptUkD({uFp8^~oOvyH zbz37D9Rle^(V&KP^aAK!@RMtmB+-mV%VOjiY02y%l$E{i{uQPtQuq8iFB2M@9B$!b>QXv!$uWhf#<-p@#7k*MxTn5P##YOD&`p8xp^4tqpRsLTK| z?&fP^;utTfXF*8oMmtWvXJUbyf7gS!)0Dr&->M)aiQy0j^`gAN#y@i!?PXSa zJ$AB~`L5z`8f1_F8?%)aP7qdp*!o_`6PyCl>^T8{0i!szJrb-w#uY*k^Klu51ZnBC z3R$Evi-&f^fEqn27Q!#_wFw)zudVaU#d+C?X(INl**TvOfYNOM1pxf^vm%S!%%pyDLsH`&P>Z9J|kW0y#(($_XRK=j!T zKcH(~YCrRDIZ$~?{Hs_-(l=x}q1Z7y1%%)@pSlqMQijfCdj0B?;=YYK|A}HZc7l}+ zEk-rXy|WkE7MY`ry&VVigYtuMY$A2BlqCU!zhYhjWVoeFyF`xv1xGpBo8%(PH|%uS zDuu8S5*hmldra+>Cx3=VeSX^a^ zwf-mH7|WYQb5QJ2vvr;iy|-Fc(ly+Xc%qBoRo8(0H%e^IvQQD3ozw&E=ogAFI)^Jw zG|jQ8WG9GXf;1buse65{TXksk9haJy6RRsuGj##ZJO|w~3-hjv`a}kz@k&n?TZV$y zIJMK;&prXNF~Qd+4t`v{X&@g^+p$kEqaO2NpS#fE4D|nh3m9$q0ZoCblS8M ztQ)htOn2pBswd^J7Wvr+skt)Ic>5RJ$422UBnYg0S1u7t&o@M>31Dq2Yy7$QOAP-o z!8+PTGwb6Ps8|ts4u68-w9L6AM8LOS0L%@sAXeOP$Vo1mNQjy*1vg39K(vW^gfDzC z^J6{|D`{r>sXvE~{k40r##&~)LsdnnJ+hE-mbARkJWQ+3{TTnJObtMp6^&%h2+u8B) zgp8zeUsh=pxl<99$+OhILeldcE;d%l)+XBbh|bVQ%593OINv1mpw1ISZs!ZI)1u?7c6 z4V2c1nSDt+aVPN$%@_+`ORyY$a??t(l_FIV?ULs(_`M2K5yz?M0F61uAs~=;#s{zG zF6*+Og6J;-Z9`8A`da5|phhxrOivc4{0IPIP4%%1>@;$lsM2NjJksMAXCP;fqEsT_ zKC!@Qx+@8SOhzO7+@l%Zn7n6HNZAP${LP^yvG_&FGppc|y!u7w7QkZYXFny|4tya}x_3cN;xy=Rvl=7g_LP3qp4z$1T{^_C!%|HSqE?%*3%5)jL_9qDl2n z5qWnL!A`r0KqZk#hD1a_qS!r&wNCb69-z@A0ZjUbScOpsQonzeDjfQM~-KtB5ur`Gv4CMPanvO?oTCM3U$izjDph5539)^;5Zz zkw%tn26Ne13gO?&Bs*cxB7f8(^;owFILS{`x1!(>g;!x34;>dF7Qk!tKl$lwB=!%j z{UXB39V35KvoS9+SD6Z9Mz)HHLF`n~zbKw96EPWL*41+U4y+aX`(@R^=HEI6Xw22Z zU9zPzpL!_Rh;r<_3r>QJY(-=bsl#b8+6AiW&LQ`4*jK9{0e`WdpL!QSYbfGQvqDSM zNz+BBnA8XSd&17SbjEeKNP=$FN3OQUs6xN|%{Lm@gc$-BJYCaA(3Ikc5e(r%WW*gN zTbJD8T1=EYc}Z&33ibE$1AzsHvNlbR7KWSe3<+fm@2lr zxwsNxpeY_7_V7`-+7ej(<*@AQ%So(s=2?5%XgAyyuh$Enyl~sqqra&3C=E3gANn?* z67YD7G{AFq5|{P5mF7Bu`a1rcs#eIiK-%r74Exw#yu`s;88ADr4pd*^occ!m=Oj3X zXmy0B4@E}>Z^|YM5`I~gh89v*^zs`)(iX-KCs`>$C7#gVy`E>AY_C6DsFRTL()2fJ zeJ38mg4AfyMT?;SlDSMjV~Xl4k2*&bSiz2+sv3Mwu-Wve5D@tWjVY-gp&gis@^BjnL%IU$u6$jdvUT_KzOfK zUAa=(fTO7zYy$#J(u~4QsppkWKReFH)LAP<)idt$c)oQk8UCKaX%U~LMZfIB(wKn5 z+6vpNF^ZRyPiGMubZYE2DrA-mC}fbV2|tC)@qhnyH_*5(BWG!_bfpXoO{Lf)_Cd~@ zaf#-L7!N+hhB^1qja>Z>7L_6b1f?`1YY5m$S4y$*hBJ)7^o3a@Brm2&_mlCmC4c6X?IooJ z4=Ny3%L_xW@*(A5J}5%#cOzsGa2CU#>ga+H7gx6Yn?dK#_OTTH{-qip?`D9EZE&UR z)(J`N`cJwPevZXXf5_M)(92_7mHZns7IzB&!16;`xG)SL{v)!^O&Lj{cuLY)I#4yp zQ}wx+;d|~{A{C^h%QX~93^!1jccKqm-*4XIfOEbt`tukdJS<`2+KcgfwF$)(I{awc z0T@pT`pZG3Kgz-0S9O^5E1(G;*{YF(O(Kbks4V@P%238`0I-PkSD02fIVFF13>alZ z#j#KBD?0j?E^MfE(k1o?i%a=ACFIzw5D(zaprCs?7cI=$p>RE%WC#ykZ4Q+Xefj?Z zP(ZK0wW`_+hUFn^G#2zO`W{6-?!o$2exx?IOYQBfI%NfrtL!0@4~6WiVAhQb6B`B>Ak= zoD9k;fE&;jxmIyMBDmx$#y;zWSoquqheTr~x?&msh+GFPk;K^mvFtA)jDlkb2aJ>= zHCFY;T9h6Lrf@irQ8?2fG_#`-<(bl|Ld9b8-INy{oP+2O;sJz z|MV|r(|`Z3rqYc9SpVX;4tVeXXa8m{{oe7Z^lKj+O85QJuC%AxmHzp6=h6dTpVC3t z;p?%-e&xpt>31GKlRovn!Sp|VYTUr;tNPu4_y3+xvwFs_>3a0`H(y>(_x#_d(=XoC zpT79ZyVLu|d(t1ju#|rHU!6B_+c@jC>%n)fv(p1RJ+RXQ*VqG5-x7uf(USmA*bM*{ z=bB?HD2h@Hdd}{)*$Ht*u;>6Zf++i9>v6hu+^SCkIJ8HGJyh8AUz05~#_ z1S3P)STqJa!}7wxzbugsicBNpYcv@#DmxfF3_Mg%^duy+xmavQ>>J8mpb8jk`VXBts7Mvjo$zQQ)3~P3F|n6& zVNqndiN*EnXTB2Og-Bx7?4hbPE)kSTRw?PvXPrQrw65UZBk$YlbslGspoWi+8r5d6P zVdP?P@=WIM$`I|;L?Q=@ex?X2Q4@eAc`~bNOP?e*2}MWW2nb49uahsmlgUJ~8gpbt zleR6Rn&f{L9+MIkKMP67Gg6~gktT6X0wNTo0~nds)}sX_Z@`MgOq|%LK0?xx1*_>M z@DXZvPzigwRNPMENDZw9Dt($KYyiku1N1sjdSi1^+lEBFT&c)2-4w`S!e?GE(G>FD z@ZJL!0Md>k=^+5`9cqUSY(SUp*)Mt*;C60dF?DJ@F^XL?!QP?_A_18IU2R_d+MKN1 z<^)c_1JMR@))cj|=!Tw6pq*L`5hYUF2utT0MtGm>K+xwbtB#Z>;K=kh=y^zdQW#oc zb1i7RFujgIDRghpPedzdS45?VKv7+sd1fh6=i21jP!x&P8lIE#qv@Es4!LShPW46{ z68y_np`~YiII*qW>@e9{+;|$0Yz&J~wplgj&h+AKrJ;f2kXZffdXZpPz zZu(_SeEk@Oh|F4ugfg23*6v{xY@s;|J61UCJ?kzvu@aO0G9aS-l%RXV=EJV8tt>bX9%o}+btqTF zd_XE5n?nads;RzcXIHQ>LJ?VZ089@(Z?hqXypFvUoQl}HGNij?v-k|sv#pTBg$S9P znFHFCAf!1~nQ0hgJu*k~Z_EFp`(yFXDxk;o-uY?gc#SYBf167(f_K zj`|dpu8265+y^VUp;YJO5}s2N8Sv+pg(PyRS;g;&D4{kO6gXW|1}6RC$P-nj$t6-K z5XCZN-kWub7T3VIk(llfDbcLW!{515;okN=LH#TSdlzJwV$fobc9CZyK?V{JSwJk1 zFd_i3PP@z0t_YK2ERyp@h=y864uC2g<8Uw@Zii+xq0AOygyEd(`SWBpO%B6`oE+#; zG62_9Cx9Y!cvW1|7SEBjxG2Uj9v2)KuE4G9L_#OO*L_TNjsE5t zSeMKzyfu+f8Z=ZQrYQFTytsx{_#Cm7hsIHlkbI}GafRrxB34c69}%T=`?a=EjwAAD zPmSiju1_sAd)4T#OyjjE1M3IytFc-UtuH`iDD#;D>H}g^4wVhh)Mc&@NM$x^P5>Hq zjozTmeIV78Guc+bK{juqNQ@D4sgnd!&AWcCsm8SM_UWspxvN#@sBT;RfCIuRiTbaJ zD@oJ_95M!5>_r&e`tAs)!6+*tloR6>pvaWo430Q#HuLA=T^5zW=yybnB-aqFD0IxC z7D!adP98>=I+Z8e-f>}M9#&>pa=Jrpp;9)(+rHCrg8cp{lso+q9o8W*)6k0n&O zb?RZU2enn7qygyG`!ojhf$PU@(~G_Jq-c5%9-sCe@bqh<6RHco`HIvE9W`E0KRC^E zs1BJtnZNgqDd+z^H>vzPt);(sy^;R#TQgP${lRG^Uz6XdHhxi&E~Yj#KCbrzz5jpH z`-onhIM+0Q;yV9}qFl@ysDfPYCsVETrKe}pXn&`vf-|CIyc5x>`+n!IrH5`|4K~sv zfB16x!sYDT@jdCO|7v%-Lqjw7SIRK1rbqwI{&e^FdOCAzDIH(#N&BvOE((19fxzd* zpU2SD88C5rF&)!>bs%hKo3Hs{cRu*>pG7>1e7?z4l$=iZNRw=tsh6(n#BW1+mQ_- z1T`pH-q;8ZOad8Ez6jf{u*R?(T_#88aUY0Fxl2|pgl%zh23Un zx9CK|cTOc*S4s}i!xi1viiG(|f3osQ4&KN};w)x)}3K*P5P{ddQteAL) z^`QYr2%xZjA!3B_j4g`?AFpEMCWM?h8jW2V?3O&;s(;k2u$elJBQ`6^0X zOim{Sn!>bc1Z_$zhgboIj)e&_fD2HTliRaljFIgm>vp0<5@buI>?as3PyfN^yV-tz2@#2$S-h zLOC+($XNMBV*|h-hN^}qq{w)ex?;48 z`d~zBT*+E}k1-wf1JH>v1j_kLkxK@}3c4A9Boq&Wo@Oa>=Wj7?ITX))<{2@B^Lz== z7HWwhI1zbh{0tZeKr<^mUjRa&Ean^$4Dx-{PRrC=Z7}{`jChMsunvkrpZmO9;r2xD7Jbgv9bB(^q{aNxSq3-h8E=5f{L~U@ z{q%^z)SF&EJDooGKb*d%TmM_}p(Eqz=(t)sIh#KA$Yh$>(&(di9ZY|8WFR$u@f$4 z7(^F%&`8eTls5KrdXk2Bxqu}P21wSZw&XEHgs6O`D6?(d4IEB&6o#lm&V?w07VzHD z4I3D`E(VniLKmRbfY8S_hNIwWxi@XI{=K4mA!q^BNumz9@F<>e`WDXtuQ0?{WcVT* zKHzAAqn-IW7?XfOK95RC5j?PArq7bULw9%51}26L!6;Ph&>JAf5i>1*(Hof`u8W|M zZX^wc6gm+e3@Jxhpzm3jL(=Ie#)#@j*RHLJwn<{6g%9KnQ2rDP1BDk?Vjw}XOEf_B z8#z0zMgWA3HoIFzZ_`{rI^7g2d2{;Z!RS%aB8!lm8kFUzfrQa%ut=1MsG>e^@CRta z)x#VCFy-h8;EMtC+|Ygb3>y^`&{D^VzTkP8_;_Y)fD_YTp=MrhQMiEu37}z9LNvhi zS%de85|pC3em>pLbIx;uJT_D&$rp@8>dyc`a{I`YA$%Q*d;ygFUm$t|0*j{@+!H0D zvbQ#FJ%0LD84dW`(YlkQw z>w`^oNfB5COg4l>{LDG(T_VVQ=LXCpqI;Sfiz}iA=zbN}Flt8zR5Jd%nNK9HYD3*3 zRc~RC%pot4sRFplK4X!Lye2n*m7*v`sH8k!*^@SbSsb9WXH^yCIUE5`)OrJB@oemE zomPVi&l`Q`{fE6kzk_=1njY-U>_IpX>|Km~jJ3&T-_~9$#)bj(cD#*ZqXj1`O$!z`d8^SNDUf9L|ShGI7e=*q(l1qiL338`Nj0Xe|Rwn?M-*zbz^$? z7YEa!5ARD)e6}T!wsf^uj`zP!o3HJHJD>Wi-UAl83h&*<{?EC~*+^k|a*A+5M;%b? z!Elu7g!MVV*}&e8kOV;s(m3iJqT|aRvQtk$i_@R;273us5n#x|Q!3lTeOGlJV%y-P zr$1f^Yx0Kk>d=D;5&{W_bn&PBJkoZOs)20TUFOuVj6iRf$xjM6#5S<8aEcJ3V;a*Q8}2NGrm9*S(6CSx3cN4n}%FBN^y$r_Vd5n%S}1N68O#76D?qAm08`EtVy?*Bf#KZQAumh@;gY!Zw?S_J64!#hxbEDZXa@s_5l<8&HeP6(A-Lh9!D>63XeUKzX^Y01FADxr z2MnX!lrW-BDC!{8VrroH(BfUIL83p-%83Fvj&?Fe0Fe+^fdU-)lExrjS8%^c{>*a& zc~k09IHE^LJ=bbey9PA&u1`mQ>N9|ELkXTi<3Wy7sW%rO5SqjB$&{z;6>QQIKCrK zjB-f)yS@}6c?6ZfAr{L5d~r4tp^8H$5K|Zo7-aDVQ?%@*4VmQ7m*WpIa0uTi6xrD+ zqh$8=R2QJ?Qr)ROd%S}i8h|BeP%9)B%Zttc5;|Lx0fpy#T}Y280u_;mhliqOl|B73 z&Sd z!v>(j>+Ddl3||*m#h}BBA7Nfhq~#?=@%SBphdT!6%WdkHpC<5kIa8aYa{25RCkDG z6a&~1qZ|c|7KAX0BNlp2jMj*92E{Juez8du5J3Mr#LGM&AFqrL;u%olP@se!2mMoP zMuFX!ql~)0hqJ>{sy3Eg`OjW1zKHl)V%?}fpM_e8_y%)@t1zdS16hp_Djbds=d|f_ zu6?AR8G5{4%zc1ZM7=}aJG@-l6Z{;Kq&J`*ar+UI0b~5#f7!G6LGWpClO7x3$V|oInb$tAr~t2F2M$w zlX_W)&=L_x8Iq6)`G=?=0>FCk__>HuM1Y+q>A4>uIF>G7}N4099LS zlNBdUSxe>LOg|1DXsV7{>x)A!_K2Vxd)+d(GL_gsiE-gOO#o1<4VJH0-{IuofXbc` zkF^iJ46gie+w@|N4k5my1|xs|ZoX*CfRdq67p&-fd8b=5dty0F>=&KyBL~vawNb8Y5n%TbmE!k)BVc_)0aM`=uG!&I{vkvq)$B+_c?UizVxL}3DAv)AOx?5 z_RA-qI+K3=_(c(%!@JX0e`P$~nZ+X*;JL-+^w2+eHGOeQv#;!$7v($MvM;Uw0ohZ{ zbnJ9%?HEi+Q1Q8I=ppidDptGzU0e01}8$Gz79%an^GNYtKeL-GUN2FDk18 zVQ)%?tkZV5&UXQfUPa7k8;)y=>T*rQy%38ds?(!Aw?lbS9TecjfvzKWaY<=CXer1R z3mt*5*_PzYtSv{r|L{m}y79(wiKvY#on^t#fgQuq8g&`NUZPKWIUChsq%y4PZ(sup zJn3(dZBG9XWeVFEqbD>F#8%2+&FmopH#ln5Sd?&tHA&>jL0@o z96$?2L@^ZA5%ZcDB&Y!Zx}baId=fmfyoxtCl(=$zDgC~9j<-&EqGzFy61hkPkl2{k z-~y^65j*rlM+pfLbK41f^%8uJT}&Cti?p| zzcZbY=cb001qsy3(A;M-hFtR2C>+LEh*%)sjv`*DlhD8RQ)jxS!6j;DJh#S)evU|k zfRGdTJ?H#?p0F5lpn1k-BWed75h?4KlvPC?2T&mtfC+k;D1AzXWYU%-K?4X~-IPZC z)T|N7fWk-t0w!(HCs*_wHC69kSim!}Cdo||?^UF!TM5j78bZm8L0u8Qc>yduApkYR zF9;c;k?-4I+LfgfclP=4&@EYQ80i_RpW#(MHHiE zv({%dK#qu@hDfxDTraf)&^0;=JyQTlpQ9*mP4pe-7V7UvkPcOc9qpq1v>l-Y8iQy8 zG(PH9@SNV;GKh3IUgO7Ftf7Y4E1H4x)OZdKkKmc}S>_?XXY(YPl$YtZc;i?fZ1$ex zinu|qWdk)(q;_3MloNG=;y|=+K*o2M+D&wd2u{e}$NDTaqoS@Ij*sB5$18vpK#UG^ z@nf&eh!~f=E8bbaRmsUJId+~4cDf+EsXV>x#DN}M-s^qBdqf7&+?hR9O{!4x!IPwj z+?2zF=Hg{5`w9m(1L9_H+l%9lI#WoaGZNpwC?9IuZgd3~V$LIw@#qicEw7Fk1`)G& z^i@BXo}3&>pI4OXK7oSc&s=o(+i!3VQRC!7`obQ)Pk)}ff(9P?#Cy|IpROihsWf+f zIX!+#>;vT~906Qq!+hg1m7CI+ZWov;zsSJp=%){*uO3z1J{#r|ggC$I8h#(Uxi5X@ z(>JFVcD=Sqi$iVjZV5gpv18)3rS$adTH1HxK>FC;p3Up(`d5C)d86v-sQ9Hbm+jaz*|Q;^V)op#!39`3i{@9Z~5YhTDt$>VA?;Xuwcp| zs>3&m1{lwGLSymlyxMlKKizT5csll5ooVh5Pp2nk=e%W`ebe4_-|rl>7)fIufGkJe zNX7km_pct*SiO=y_2(A~VpPTsrbmxd(yaRQv7e@NSoG8*W11^}>%Hm3iB~siqT}P~ z8~?>VM=~3Wy7o)u+5%Z)kuP>(=AppyCl03Le^bCzd)%`x&ZiTt?sP;E(8EXer{g0X z=_67EoY>k~Z!u3U*PlCozy2P;wpm{jQ^t$~NZKLHM9CT=OQ_&s)3|(#&r+T1D#DA? z3_FtZZUrWZ_I(Q-W#=i;Dr^G4K^rA!L?ColaLyq@fqhU@&Jto@1In%MRa6PPhTwz_ zL7nSSn#7D1{f+Yu$72&a9>5`Iy3^%H2-SvMx}#BH7=ZTd+cP4gBeAXV)DoRiIB#VpojLi#^vwVFwX}HVmDJgo zQVtHvAYo`>;CjiEG!A+Ms6`5ZJ?Zcv0TtLnbY^vA)W4tCK%;QBBw85{SQo8}W{DMO zH53NE=}3W;-JopQQ!Y=wj4U+eov#ItV8bEAwPX5S_7(IwT6Aji<{zO*gsk#b4$23X|QH(@g!;;T|<|0Z1 z1=b-}#wb9uDPNu_np7-Ys9ZTzO5b5%v!HCSkyoSp^s9}0*6L##D;64`U)E&qlLS5O zugCzHQvo{D!!mgABEcI%zK-$SaVR+gMYv0EsR{F<@#$&{up8AmA{!+rgZO z{2JQR(uTx%@eD+G;3#v?mH?rJE9{vGDlUL4JUi4Y!ow1Za$ezTzh$}AFIbZ3N7CZG z99ry=tXmvTruBlQ7*jT?Z3I+oZ4~XL&Q#og8!zr&xbhdbenAR=C9v{k+h3bZ$4=$Hj_*qkeL`SLj-_LdDeAK|8gh7l`u=~qD;>Fge|q$} zpQU?#CZP2152nMKh7-@el5Y9()~L?NrmEgmU2`@)@MQ^zd|Z;>04hlw-}B`y{5#zf zr9`4(v&zT5=W0YLE;n8RHIo7whldK)bu2ycw*;n?$Nj*uiS)(NM+Qi@2q2B62k#P~ zdgATdeCV#5(t`q16VIMXpZfCrCRjOqAieS%BkAbJrDpi&ucpVgwC~U@m5au(n!ftq zzBheFplT~k^xnG!yalFEfV=<*0kr49L!;8>@eNz_FON1h_b0y407ngUQb>|uA{ z5Dw*89CiRGIDNrH7|{Cx2%$wl6bbPP0vWIx;@?<3|(_=NyRDkF4_DYnIZ?w z0vDmm%?peWK3E*JILae;Dg>lBi*YD}O>n{ovxr>%s3VD;4cm$HH1d=qI1<;+eyc)R zLETHFn+HfUoMHg&3CB~dWVY&%J=z#^7?$-FG;lyiqnw?pPR zCVBCqV~j(0s_A`!#sf5(?uhYeK?4-R3bn{qr>_-~&OxUlx&Xb4`_nEAXt$qmD(_RDkncpju>s}F0W1+-0MHZV;ESGO16Y)zBS4AC zTTv8b5S2oVV1=0R6p%|t5op9D82fqAP-f@m9i1ZDLKgKR#-v2C3uTxQ zEA-%U?c$v(zc&!hvgTVOoyCJzuHi^rcHG1~2|9x*kB&5Mib-%U-b>CW>&jrvPN|4c z0X&2D5fQ|QT1SMEXsx;P*`o$94Jt_-X4~~*8uhFE!l7L~=@xyB_HW;{ueOb}Wl+(^ zo5YWLpW3odQ7ZC2%nTCMwg;A@e^vJ0wguYLLD)HK#?tPyIt5r)6T^v;sGv>FS zyEryg#zKJmJ6pjN*Aj3&!TY6pcEo5)QG{h3a(6`{1&cR@pz?y>k7xX`?29qw59cXdZ0W9R`gNiQO3$jp4k)|a% zHxYfqe(6I13TLl_B1Cc|eJ)#kL;;U|`}Q0BaK`(L^$E=RMSeDb3Q$CT{gP}BG1zqd z!GTVl^#c}Q3(bIdKa%7FvI$V1j?yY&%WmX_(H7ZwTXU)6SxB>p9I8lV$coiDf)$SJ zaQ+))q1bF^XGFhvHu{15dw>(*l<1V{@cIwhUrVZg)Kw+I$KT98F$R*I=JP$GWt(op zQ2A#4;!3x|Uxxrx7dbPixG|DWLf2tU;?|n0OXVKKp2MEkb)M-?~Fy9Dic(=k|1tc)D}7)6HHny0000W07*naRIC^^9stm( z+E?$iHj|IvJF3CN7f3Nn3RQST@PIB*j0g>ek*7l)W19wgFhIgY zv_kTko+HXhy&&>J4Aj~Z&S3Iua+3r{!Bf;%thxr6B*Bh|1&N3Hj?u-!=+s2<1b39e zZs{CxApePp2JKQ*ML>WH7L(IN?imG*V{v=7e+<4I%=L(-vR^$*lTq}9oh0rV+e=o~Q%h7jV_^#P9tj%o*) zMOF3v@bIvJgk;y%-yuv8Dv6FTsS(WIB4y9sZ#6t}g4m?80nFkz=*)98C|!WZs8!_Z z+T@M_rl7~Fzk*!LSSezs&jO$rA3!Q}w~8Vs)c2y(=r2dbO#xH;7)yO|71mFis8IpB zp7)_Z$lPIF0+0Yr1$39ZpAcJ6Kjr!54UjcQe<}ibc3R4Nj-(O23R)yR)X>4-w31|> zmHj9#+msABnLDQ3R<8A6zu)VMQ;H*T66d(?16GWL3I!{ zSTq4PJff9r=3$fb#AYHutn1*_T2tb!CF$|@vDs$FLQi*;bg-9C?*)+iZ>sshbDCDC zdw0VZ&t50`C<-D+@+z;0crecaXmKCUV{^JUCGJa9>f$KXR)-GHR@5S)-}ZC_s4v`b zoFq7Lm=i?)pd@Y_Eb3Pr6eKG{>GZXrG~&>}x#Xxl&x%J=^HFEWX2Ig^v0RuNx4);7 z{>5({aKHSX>OwvIuV=RB;#YYU+VUUWGLZhkuk4Z9Ur&1c`Nj12{`9AG^_s1@jP`~#-91_KBJw5&73+2Ku*Q$GWM;);jetMxq{9Ao)PIS6s7ya?hJzPWb z;xArW&i(jnD{1bw-gM{&XmQKw__NFD#Npm__(M0R$yNzwSPuy-ME?-+pV()w;x;H=&9r52c4L`L?dKk0M#$ z+Wh0>^qUEu$8+)Ov5`zklyv+dhHJ8ZL9SZ4%7i51FTP5Qg@Dyv%0Ij7(rwz-hiL=P~COwu-@u&q8wBCBU#6Os%jtV7A~ign@ulPWFJP@n-*E zLt;=9u_A>7+PPRicA!#6a*#7aXSP9Er-B%AP~&Jf3oIB#SZ7Y*a1AC>BV-pU|H&9g z?OBq|QLCYjE9G5kfa<(QT^Rd*UCEfx{^w>Fbj^0!vs)lf=Ww5*EYuBLZORrf-9Ln` z(8D4p3$e9Ay(^t#wpF&@i(+s1egR|%LIisYpCEfW{e|6*%AbK0>?FOneAbRe10p<^ z5hTFb3sC4nQCOG*@K&wT-;q~OA572-Oeg;0&(hSXiL{~)<{}-P@|r{Iv#}E4 zHcKy(S7c%eN%R=^+$RhUgf7t6hl(>ZtLTC_rTs#~7y!$nS=Ft!2AERKDj8>RK)YqI zwJ_r8S_~;u-E?)L0o>e<`#3qbCWd3sYz0|v<%X9!Kt?AC%o+7=r3{*)rQaK97&%97 z1Ym)jF66zDosJx}cpp4f2A=Dd{F4%yE3~hOKHz~4Iz`mQ3Xd}P^nEB8M%!}&oF^5D z^EuQDsN#MUJac}CJPxBoe=-HAL`tk!LULi&@8_D18ai^gDUty*O6kZ;Afv0yu7 zh^}g^nXD{W9+esgD6(PXA=w^^c)^XO?L<@RjRn^Uf@Uah% zY$nt+P?U*czNpIRIcX#FU{FTmuvF$qf~4PTc=VBXcb}nF6Vb4UD&Y}P!~}Y!rUf9P zg*3R@OicsN2S7DyHky|tX)fvSgGl|8q^Ly&0O-*36izbV`66ml#3)?X34_&ODhk(P z)Il|4ylD>}kwPUbIb;B$7z@>FP+t*}_k7IJ5f(U$8QLKp92X)sFpn`afFMUs_jc|Z z^F5EJx!7?!%unIjv*Wvv*N0=+k zya{?<1Ja;CAmpJrNYv0J95NuqkwSzD#{-_W4F`q#fVE~ZhO7ojiH2_JgtMvRfdXXn z)eX2O%mbiPUkr~7EB_Db1XPER6fb)~Q2hb`1FY;w$Wbu3*d>ZZSGoWiq{maE05)gd8}?PlfScv#jNq7PaQ_r7~Cj-0ywua1JO6`bCkwoH6&AwB)kO1k3% zyVHFFC=U~LIHdV1s@t*SSJ$R}{mhqkn#jTum;3bO?3<UulU2vVJM2q`X zQO4M(d7U_&?)u7F`lDajm5wU6>32UnobLOTMtc1C>*=2F#F=%~*SuWAe_nt81p!4} z`^-#$$^Cuw=eoe9a;L;fzT|8E!WwFCevgbUx=N0{$6kuu>o>nv)Axx~ZFw~)wtl(S zhD`fgUH8owh_Ps=rv-#3-s1YRXD$T9mzpP+Yue7=x2Ff7-w{1D)o(#UTWAUN2U{h? z7L*e$Z2-<|a%+i7v6V%BPuQ8^;MX3PSr^!eK7(+~+tH0pfuo-w1wbHjmj`qX_sh}A zzCEL}8(V65dBNuP5S9dM z7K9gMqaQkWKy*IQ7U!mv3$OQR&Kvj)a=uFCPiuyv^;{F12kKy-#vh%BS|DgA60xF_@rbg<2#fiz$>l`zm>+!{zJuWIO{kkZ&6Clfg zDce3C5AcSQ+QYFLx&m>IZ$_wm*pU1lITkMVsSfJuC1N33n{uOC>XepLIR=OKrN+`+ zI{DnU)5K4Hs3c595ro**kx=Z6x;*9;danx9W-l=}brIl*%D4`Zb?)`E8n?WJ2X@g$ z!N|y%z(SvlTf&eUWJL<<3Lmy8f+i1nuO`Bh5dAtxJ^u$g(_UmJyomzmNf#6>*T~VU zgaJ$5RH5D#YG8PugGR@Tp9}Sm-xXSqQMV>sp#zfJMDz%-2coikI?wH?9~3&Lb+}$v z7{mONNx`JGG`x&l8@)382tzjX%ucw+sM3E;B?HLHj_Qvd zwQKkIZW~2JDT#hA$xDw!IejxL@GUc0&n>X+c0^Qx_ptEsEMVyB4XLdKyKI$70T@Lz z*u46h+A#DCP~8x2p+8W(TUOsJb}g&!QOp_Bsi3&hmjH^G*fyv=Pw)saCXBJCGT?*= zBEwDYS^z=I(PysU>N5Jlj}v<8>G*&Xf*yrE4ozl zfUrJMr!r@wiCGy)tqNtwOnHL7iLeE2q|maXrL>3qH2qDgcdd?=0Wv@kx+J0#JV#4W zXh2|pzrbjY)B(CN=$TiHOU)5dje$e=>Qf2?3X}pu#zYlBuw+U3b0mdQHi0kK!r*$E zV?$L*mP-EK!W!DdiO%&PZ*M08IcT9aM1rZ6K&==k@MKD<+HYq~c%Yy>tU_^PZK?7( zwXKM-_iAtkG!N_g{EBkYi0H5hO zk6hcf5MPn~(dBwek!y{UnsWoS zYXp-x$6;Wwf17Cp(88$?drD^A3g4*#s(&aoD-8|l%;apA{cL-d0`@*4QKN&c0<#8Z zn=F3W_YDFXI4Mo`2%u1uk#R>3$ky!_7=nF*ZPi#7wNEw`vh6sgIbR2;391q|M6fVh z_#D@>JcI0jiiDJW@PZ{TX)cy6n_twSh-K z5fGGA{b_D$ zD!ua4=jF|oF}T9#v{Cf{DrBH4d96eIw*qeHLzCG|nE_)(qwN(|FB6gI)TF{|zS@dp zJR({&KD_stE++$}U+<%H8x$y`A2QX?F_av^h~#Udg8(Smcqx3!f@+ILzksaGu;OOT zARGDF^Iv$F#hVPZjtL64v?@t(=!ku&hLPw&4g&^_z1cB9#dt9t%Z=XzZ;{ghS{4n< z5tl&NB?p7PEA996^vGr9IzR@|I!%6nUdUEQ*wax$4LabQS~WKNJozFYr>Kg#H7p)a zD&+2?UJGLpk-m_Zw6RF^BImep4iH?kfXN8;= zz_xj-QM<@epH^9kqN^2Mb3jzTc??IjiO?|jtJTP}3gZ!@mojJeNI-)$MXuuL8Gwoh zLc-s=8Lls+Ts;}mo?a-9aA(P}(7N3X=GH#og0%K;kd0Sb8)YAI`zNNwp;8e~eN=2WOA z2A?=oeuDm5a&lbrN?-O!<#F-61Bjp)goj4Y&Ugb7ynlLrgv!tol-C?JVj~T~2P95M zf^Mj{^IY_KQN28O_KcMi=e0qu3y=U{*{#@6*@TJOElOwvpa?*qUKuKTI2GWHk0?qs zthvI)>mAEducNNofW2gvG^Zqk>8aGE+RQU!ZlaL5o`pA}egwq{bN-*kjFJsR-?=z} zVU{);5&%phk&JD7b)OM z%D&`5^*W3EJkz83@_Yl(MNw~F_Ea*boR}=&ru!7xDiX9PVG9|q0D(Y$zejIP=@E%)Y}@Nw ziWW*n{;(7n@6|;wrf=T+{yt00Z>9Z}u{b0(!}Qd(&5>mtAaE35iSbVBDWXB2e|2dRO|-jCgY z!_7Hb!4iV%Mg)jW66boKB1HVo&fA=$)uDEXK;tutsMU%QMeV()cbh zQj`lt{VD`B_&jM9CW_BFM(zNGP}jP2aSl1a5&;nG#vXw!>;bD1%T|Oj zWhXR}8a|uDMvoFR#qL4SgB`m*HRS6b&I=-}F< zVPm5l82MV=Vmk=1VsDbq?Z{A$RKz3r-?pQOAVKZ2Yy^ccI~5ISig*6WZ^{k{UZ}BQRO)jJD&Tcq%5HOWv+lT32MB{1;6!r0nUtUdJicl_`7)**0>J!m zoB#2c#V`(+8S z(EPRlsi6L3Wikvk4*q;yj6?3@z9DzY;mt6JZ0rI;oZm!&+^9PRUpBB$c*AK&fSSmW za<%CUuq*`Oh)YmmFxKKe5&)55iP%P65dfkk7>0mG67k$eL}`k59Y85s7f}rUW@SH& zK;64Kq>9;k27cG0Xh2m01l{ty1AdT|CQmLD))X=pmDAB5!qa{Pz@ey*YENArn_5=w z^K60&roW?L$O1BO$;x)LbyWQG(a~XfW(F;Suxo5Yq3LmnAB?44qf(O*7#JEFvJe8v zoSqjr5uBrja7Tb(7lpHPA(o{hQrR06@5!>*>SHf_11LNlk$=VPmb{seN>zRvKsAFW#7IglH2}C(DK%f>J)0qIJ1iUx#pv9OitsG- z7db{mnOwI^{m7W`T+B05=$PlaKGoHyW~S5Yr{74Y&rGVSd3bjLet-&O*6B-t(C!;< z5N~?7sDe7o0nB<20E+qJC@y`b&-D55fUB)}4294f@+C*WLb+1lmPlMohTu)pw-&P@ z4=C!h@#Qhf^Tsu<1ep0^^LKqJua7KkYR3RkBKiww4Pq`R141n%F;`OiO3w9Wnt@H} z_d@wKB`-S*>;Yq*06KLao;8#%1?o-zWaDAIY|?X4K*Axxd~pOakE_>@_BHmEy1tXE zxTroMkI(c!cDvO(LV7o=8|vDzpQzS{uEkeFYdWIbAp~R~zKyTl ziU$3i+eg!H92rg@+Pi&4gG&>APU(v!`Qd$i>5iM_E!7;lb-XwI@~zsVaG+&m#hM0$ zL-#8ME#DwaC$rgzN5E|Bm!bvUr(xNG4aPn7C5@vYhJG1j|iCas;G$j zb-$?L^gFkvuc|IrMUJvZo;bZ(6YM+7Nh<9U4cV2x@rjH2Q=fbEKflRx_HX~1w{$&1 z9(Vrgjp@#d-hAZf!SuwhUG5rh_4lcCd{TeYS$5xNmG5%FSlyWJL$Kna*JIB&LQF$r z`KIwbuseO@Kihw;joJC!&!Go6zi_<5`WV6KJUFcVTy~NI3>#%{Ors8)+0N1&NZ|b7 zjCF||=w5eUUrL71w(?I z_v+w?KCj$*SZiR0j16#J8zW$g;6TJ?f?)&;1;?o)Lx7p=K-N#3d-Rtby=GitzlFmd zyWQ*{+tHAsXbTQ{`csiPoe|gwHAU#Ar)PybpgkgF0Yd~Fz?lkj1YLs&OoV+Ev`c)R z&TGrbnT}97iexGp#3#A^+Y+6ad@;TH{I}Ee$>&oKdxj+U=FXq73W*cc1gI)XnnT0_ zpiAfr8kSvx+!HUQIu4ZT$c)2wK`+B2-a!P2R_mdiZ=(UPTP_?KX(?{W=%Ju1|MuYz z&{K~96x?YRS|H*>iX2K{L>urb=O_?Kb@srANCFc9gU1uXUSJF>IxfBt$6$83z${;Y z90r5VWAf6K{2k*}---J0Uh=zIE|SI=JB!PqO{jZBQ6i15{AUwBM-f7_!S!+UdD;Xb zhZ%{1&t$-Z;r=pgETvc|UDE(Hd&7gori+lB;JA*`V3l~7#IE8QTEa0!-?EqF+sl@5<1$+%&midNYm=B*{tMV*<2gpknwjK132$ zh-y(YNg-|emC0V0;o2!jg`FTQRL!4;!oC*HpdU105g}PsKhy-K+DO1Fx->sc%>=Hm z#7C(dQo~>nd24-sXiyQYo~A?0>#LCiL#g&j(_YT6GwID@+6%2OrTvl|?ZuJ%03}fMZIXwek6p_Wj0N`a= zI1p&W7DhNKHv@weMQsFB02|~|S?Mq&$-SYt;y4SR4F!<~=1;W4*UI7S0Dz9M2UU?( zM?bTjIjRWFmZ`)#iXzM2RP?=ql1lc}bZfle5OXQ6KQF`HxjLnM0Kza1z7v(y971JM zn_Qo+yGP)#rMc%kB`e|ZByxg40o3?K5nKzKJ{@yL;0k1Bi^hA37 z`H;8m)jE^ria}P?g<{B~2s+VAWdDOQ2*8WOgTGgL!_nh$&G}ngub*5m-7g|>SRzwW!$V*eCyk zoBGpdKRlHFJpn4N|Drsl)R_9>FYgwRYo(`Nt*1YGX;~8P;i zuW|2hd@$X0TEY_>b*NN0R`r;U|I63Y{Tc8b`5OXRpWCk*RCU#$(mtE(D^=vFed4>} zTuE1X&C3qQ#7a7&_8pS!_)~XFxphxZn*4_o>9;TUK{?Z2_^;o;`7U|%4-G}(;)Wt_ z4^uREYXoWfOnTrs$(8F~NB`#g)8t2@KP#@urM{4A@%JxxPyPMa6H^knkc9be$*}+Z z!SuA|-~_dwZdUCl)qOf~6-tg5-cHi{U!P4!sRMTVd(-SKYTrq1;JJN`vyC*jKUWbh zAADvqJ#^cl^w6!0?_WztJ#M*n*lsa6WH9c${_^wypri%OM!^WgmYk+y)!IV2#ij^A z)u_pKlC>VCXf&1rF-`5|t2k79TViu4#R7F**(GbToja5cz}}AzQLoNfI}Wv1y4ERY z5IMv+8?m9ONuIqf}xN7jNK!K;WUr7$gZgvSt+n*K z>%8KKlrvc80j4o-L2Ud66o2dl+Q{j~Gv=U0q&x)6$#w%z4MRu2<@o}w2Ky_RVX(V& zE=wq;sYddf)fMuYqh2W1RZ;PFEX?P895zlrMc4r>Br=KGE4jnkxitCHXVT2Xk5!ab zg?6<;tSTDiX35xS%J_6H5I_aUU~ojjJYLi&%0;xu;XN9u4sd~9jB(wML3Q2-Mznt4 ztB_`A170Jt$m;YOz=nqm`RfYCvOb5$+=c+ajMmV(0#Se&I(1bK&+joPI%U*BePO}^ zYKWv@u)4^rj6wr4z!%X2>`;Bi^3gK>Xf(7Z=y_0Sh_W$E{9Hn()V@J#nRX)U&Nzki zIW{^`2q=RLQh4U+Hwv8(YVzG?#S`!QP(sit4=gvREdtGBPjVP zUrVAih)Xm?B5n)pEG*6m3}X08P(;rM6_b(xsJsv!r^qa-H1sU*lIz?TJ)7$=XeiHN>B*u_}z3gagOh~v z5jG{}9s2@NB~uHSyHSvkNVGwiC*Q0Y3m6nQit;ZZD} zqq<}26DX&B;$_dNsCc_W^}PDD9(4`YL;rT$kO}|*AOJ~3K~w;IXKn7Ynp>TUPEr^e z`mj7itCUP5XUr;i`ivt)0+PdOyLoeYpY)MqJZ-9?)&A7iPRZhVsWwmV+Q|@9OcH`w z_ofAUkJLJ3=+*Y{qyd=28DT)BxykR#*xSM2sB}>NJg*$h;tP=!_7Dz?kau@YGVMWa z_!&MlbbY;d0Oy2doq`tad^Pq1D6{zh@C~l>MgR2b9($@m@2=`Vyw;b2rk~kQ?w^rj z|E-UVI1+VON@f&^eq(_{xFgMqDoaG{!~6TvFR3W&C#CTBe|&#Fef?+4UL)oz6kN>C z{%(M*XB2JtWHsI0T1pRG2QBQ$ue_8#cKSd%_K9jbvUf0jW^bGwbBp!# zuW|TBwdp{<#`IEp_#2W=e{NGS;n|b*bVBzzEHHTJ;6?A-Qp4(Mu6fycAyDw(`)*DT z-lizzhgG9X6v>A#`ynQv=#ZjBZoEj4pRc7SpPfnfe|<}Rs4dqj?SAy=us*w`KXYGP z(S0Rh{;7Z3P7i%%Pr6q?><-Z;@6bIO@^U}>?D=%>_0-bZ5Cs`cN5=-zolbDmb)TC| zzkYf+eg92Lev*9u=M$m|-k2Wzs8j;WxM`0&b9z2K_{XQOq$hXY^A7cZnHX$H-kZZN z_6rBM83dWVB%{Bf8n1SgX+OuA)-T6rQ;y^o0w*}y$eqf;05gNEz9%M#t_}0UW~6Ng z*(z&MYGy@t75V=iZP`Pz?{VIeUeO1zfeof>V{72h$F9UFkF%c?pN9TDGqq&Nb)3D} zwpH0-)xLpLhwY)WbeD3H+X{3L<$_sYUBz1{gt#w0jDVajn|>|4@7f)Ro};&d2&o?wP; zD4dQ6@o4~h<;dsk4Pi9er}I)EswI#{)UYLhg^(A|9?;jaR>yzWb;Dr}C$sQ*>fc-s1t?SjI5$Nl3aO0~M*qKB#&!QY!*d zp{C|pVFQk-K|@0YE#w(Nnl==a8!@1|Q(cnfZpf&i&d`FcH$6QguINCTk#a~)#xN~4 zea)VG8CUW|Tb%6r&5C=eo{LK4M<3nI6JqCoJu&7=bdgMP*tH`uJeJ?&ueWB=DPLebv>1AFB5{dIRWk z+tn{baOjs@Bz0h*>H$MV4v)2!ykvOsIl9hmlVvtGuDV^4bOppQm@{e3b&g4hT5ng;5v61$*}FQojzW zzd~x#o&rFR+D#O#UzEVnv0d_JXgm}#a7`@tbwpo0M|9nZ*I!F#&PWXg&ph)*&)AaJ z#6eERNQ)1}zBO}LC5!-=(ck(toO^VovY}`-QQrj+Mg6R983csoH)=5e>RF(G zHRr%ZgoaJi#pLv=>2NjBrY{{)3B%i9jtG?3T+GAB2ZVPVvhQ{3Tj*!ngW?ZT^+d|5 z8nZD`CE0}eHyic%uCa8(4HA`*(8%oUl#@_VceGOkP=PZ*8$1AvXV}G!#FP}M5uYmI$@0gV#|Hj^fyF4C`b*>(#4Kuau@IGvc>}8XzyAw9 zl<|Gwh?$k=^rWIx6!(2`s+qp>qs2727>+mQ<<4uT2X=a3rw88c9{8Uo?o2Pev6%J< zEK?E%08r|T`hb*!3{X_^p|L4oSwW%aMS2Fc6D_nR`;{6|oC`R~5q{vBW@VY;7UeYT zAeTKt9`c$%5djETLd&w*04&w2^5UyH!^q*n4n;W2aS_s8U_UAMxiaW{rRkYD+ta+r z!5WpY#HehsT5Zwt>Q!9_)BsNeK!w>t4ib(?sP9C{>T;ylmqSQ`GYjYZ=q}lFHz*ZC z?}v&{TQFmmm&lXabPlfw=(v162DK@DI1VF7fo)8G2Axs;!?}$!+yM=W4~HUc=qQBK zyhnDSQ)Faw;NXNg7Wv1K@&dqf$VSI*Nd=133cCPP|6l){9j$WIN}WkYMjwVsb2goS z?Wbu*c@v#7cDjXT{S10yqulH@H1!1fEz}R(P@5Y z8z1qRpi9L7gm)l-P^ffmdb$iKXrr!)nqA3j389EUyKqc--j;wBXqi5+;mpwCAO_^< z-;N+{KtZBvnh@08qFo;7@KTg|S$NawBmRwX&OQ5N{K8qqD2CcZ)Wms2jzZAyk-Oyn zA=#g2$E$$B?ZqQ-0zDIB+Ek)2!s!Fu0PqMEtB7;Zq0r*!D-`?4p<=R< z#E)^fril{C`?(Geu)&d^$U8E()gvFz%MbniQZ5sHk1+R?1Wy1u-SU9oS+C0g1mIDW z7r9OVJ;q~GMshEck=YBaGSkzbva$GzGj;W>?&!I6U)J~og-Xdy4 zEJ}R{=R#AUN1+!-YEkN=tz8;JJa&MLWzTznO4N{|>+v?xCW;h8>l+cpa!?K&LYz7- zQV(c~2&(&IQ;3D;}x+UCfo-xpkOKoAN{WzF=F$LM{CdSD2kK-&#r3=RM|@a;CW_W0eFJr3ZP zH+`-ZVn5;e+^!cRPo1X+zCPuCX#Z$w-zJBK*Dyiaeo_EK%<&p0*! zU3~2u>P{b(A{}1U|K=0pYSUW!$Ui=rrrt^-d%HSg=Q=w*u+sxOJ#Ym*P^7?NvS2Ux z2(>exoOi&7E&i~nYy^aTSZq`~^v#-xTq?i~4#1us9DCu24|#QL(lCDGS~L#345usR zO%%ArKMMN+^Or~wW~0i`npVeoR)nvXm2b2pW$uR9BT(DIIUmAhM34Y{(9k(Uand7a zj(tZ8OyuEXyW*gXHk7h6*bUfdw41zUtVJAP6*+66BChE8r~ahNFX zWQJXF6Pt7xA($V&c^L6lCs8O3s!>BmFR#c?A@3%rY=f$SG*lf*U3C=xK&XmbWd%CV zKd!~oWH8ljea0|6LG<0^3^@t}+7H17C^E=xGs)_|t*utQmjr1EU&0-TJPG4Mk5gaWPhDr5t# zV=(%9S;!u>J3^Ok3ZKKU)5OJ#O@s5K$xw#6s=YGj?@pv#=aGHF?-%WJoHqp;(8arsCUb4q{}kDw2t3zAb9V zk_;&d#o=A(($D1mSja^4rUo5Q{pE-ua-@hlI430lE9!pKu^JM1BZ@*|Vg*@p7QLG6 zNGrpe$D9p;z>&ojs9S_xo`H8+bo3{iB=gSMb<7p!DeH$J1H@<5KIW_=SvVkgA7Ot& z_}Fqgamxe3fq^(XYt>|9{p06wBJ zy4DN^y1s~z6bXJJj}4^6%~56iqxdXRt+WoRE_0i9kSoWW>eBB3#0L6$hF(RoYb#5t zRk37&5omfaq9AwYF-jDWVZ-jO0K?0l${%1?m?W;zUG= zNVn8CO9Fp=qDVU0Pk++yRHSE}=+ivE#YnP13HuVXK*LRH;nzLZRWv+hJ*(I?q|Ja4k9CZJV) zVMo$7zGx4%z5qWwPozm--HY`?DU!X)eKBa|<33BS{$=MC(Jp=U$v9|eZSeEXYo`Zx zdSIsq{xbAHNR5ZeoYj>9J6H;+?&7>w-cC5<0uL1tqhf!SJs-OUXJt$0b5j!O=(|DV#l&4I=Er<5q7H0XBn_)DMU^^R6Jc#`#I<9Dq?ds&tY*X1w#yrMb(=s z^f>aPV7S19g0X=U)Iwi4bY=Il>xQ~tINGtvO08B??$mk$4%kJ#QfLN*8E~04A2yH! z646g10COj5*}qAU&lm>Fl; z30Z1d6)_6VUZ3q?ApXHPznCJG61c!G;Ox{Hh& znsBS|Lc5+0JWqfLIb8P67o$XjCo~#>D$~uJ*CMSVP%D5+pSBdEo~@wH0<7qy0;Y=Q zKTqL;n$VGG4>=16Nib+zLXS)q#3^V~hYWo~FuVk`8Bc_Bjxfv!hlck%+JT4zUWIHR zXU_!p#VDh&ZL3YuLA(`E`*?l|GKcq`&auB6!x#Yz76pJnW{yIAVO(!SjF^GZhZTXZ zL4hfrmwdI2_F#k}0)f#iqqS3paledMCTLw?1|UU<6>owgN~VpC`JQ-RDl95I>ZT^j zup$47$x0+cp<@hr-akAvCF-YY8yMiCI)m(|B5neLfUCi=s&i@9M0Z>xfnRfmx>HTH zp{C7*bwfc~HjiPofuG6qfu{>NVYA^)RrLn|0VTC1r0P9RAv}OFjVetO9C zBJGXJO?YG&NBa`=A9++n@}N|CIk0AQEqjOT72>v$L$?Vk5fcd28s>v3tCoYuu!bfV z1)Y7(oU;aqwUQ(&(SHNLvJ%vJVCpON)c7GSIBkX^i0~+d(;=q zt7TCFs5RHETtJ?YdDlg;X22OV1kX*LC+0u-S<8r;XuJXO{n}7TSPeOL@+;c{Rq|@B zAZh%MN!ZhucD z{mE}0aIWL;e{(whqo-!#0JzE*=bNMY+t5DFHebdO#qEvCUFBo#ynUw!c6wl^2QKJ= zP@jvO*R@Qa_aS8GS~&U0a}K5F!t9FkxPU4f@i?8CWDeJwfKI2&yLs67UwW{B`~ zMCmZDGDFHHPT1{M`m^nuL8{p#?&82NxxLZX5$G|K$M#$PEDloGYm^~TfQEaThsS$u z(}i6Jj|VQ80Z%tBWK~LDeEnoLmaUC&y8bNXC?t-Sv=jNVd~S z_F{)PdwF<}YfwcZq1#1OiTLPeCKsRsPkQu1%rxE`K_wJZfwM zGNkcdv`rHuUy1ryJ?VxqNr%c)LJ?>H9LD6TCNtoINECTqL@@Az;7y?x1I9mdqhE$T zVP(SDv^zXQ7`H~k4u|s$E*h;lfGXt*HIJOG6mtiE55vK#FxfH#t5BMW1x_TDYl()Bvi z`d6*<&8)iDNs7Q?+;1u3G1{=3Gaf=N;d-)~edIx65{A z?}|O=_HwPmod5s*-*LQSyyG2l{&HWxPoSjOBqdv2hnKldQA*}~v^0|E;PRr3F`RA;e0jvb_O0ezQ3dS6ue(BvD%FlAR70O)=-6A?klBS)$3)O3l+?{18J&Hr@V$d4} zGWlN`jn|iklzX%&RlL3pX?o`%(%4NV+tWV1{&c+W*KjKRdA-+~CxPPW3#mR%V2v8D zAs`Bevv~=6Zb}CqowFLrVxuyxeo*JShE|xolS0(JE>!Y~Vjz`497QzLLNt`89T<5y1>) zCFHphWO-Zye6W)Fke44<|c#-e5yG2e8b50Ox@z@gqha6-hST1(*H$qKy9Qd3O zfO=JumtL9?Q6)WJ~ccrMqIoleJPn5}dDvgX>!P+cq4sh` z)Ww=mLAG~o>!n=I>zo1&J$}dxmE?3iQLLBcD|&)I~~oMU8p{;oh66K zP0MK4UR3XD6OQU+id93?;{FTf(&<=W{H(d;{7UVtP&|)`PPtxO6GTt}j-s#WS*|Al zBJyNW!HAF;tjuL|~Y8MQ-88mar4z%I4ZvW~CF zb9*3UFR}iZAien7wb|CLDE@JevF?}ANL@kxJ<+&0WnAyY1aPiJaa1aZIbQBd0A7KX zfT{#;q;!48ZP`~~O%_hL(oEGixWs4C~UPE^xHRDd-{i1QQHMnzo8 zSr$>Y7PYGA)D_Aa7dS?k8_vcR;r%zbw2mVz(6qH@1w$dqmEJyPN)K(ZX~<#qJ` zINyYe*l2M)dJoR@!527v@qhMLlCq+2FtqmHb!}jtZbEI(m*5ZLc;* zF6^#mJ5_(yb!_tj_TW5YWSjN@i9VnC>l(@Td+;K+s8tYJ9XD3e z`Vh};5H4>_sL^^d45(F@Ey`)Aun@8xtvq)j+Z2ptvUqcWfqL&grh}q~)IwTQc%U_` zM&rFEPEm9pCy6L{je@WO01y{|2s#a3_EayHcE!XIAcfNyOSU3SMhK)*X>gS!aY-o8 z&MYVT;CsvwQo%031j8*+GmCr$oG{BMQe(cB_tLNuee|3ILAH^lP;(qurHCg6B1V{0Ze$wbaV2qPvWDb(;G}+z03_vqk9%Ik&CX+|Q%|2Sj5SB(Xh9+l} z>ZO-oN+jd{gL_1>wos{ikO^pn%V%FAdgV1k*MchLcr23#=ga)AeZZ7p%QjngU>$Xu zeI-13=IYY|zTRB$HZ^rLy!_(x!@FL5Zg~B*??ee~i6VGQD9-Ey#OJ9;WkKH^09wPz z$thDo(Rn&vvT!TWFwlm;Pjwqz z+%%kvg2Y6p7(>U`5d1YZe4~;^y-ETdIvI0F1-;M++t~H?WesG`6%A6v=Ru%KkYLY< zkBW#YECyU~E$57T!N$hTB(i$lMM@?}-|TyCfC2vr$j?r3!Ysc$tgo_90kZ6u4d#Ix z@zL>vqAa=z(-(r65!c^mPAh4g{3N;G$pNhPFA%|XZ%7Ram5CyJQHND`e59JY3W(hQ z6zYSydQrYiB#%9lHiRn6xakN8T_Wd2DT)dnjgC6s^d|bR@9%}M9n(aA`H(X5O8d_V z3SAfJ$8sWhPn`<8^nd870N-V5t}PR(v&}~N40^eyBShgn95cq*_UkcxS}!rs9{{5M zt^d)oqB)1Y?^gn-lh>pNCOt6efgkc7&_0n$zibY0a?G_OIR~eqw_|^5O3RoEh~mAG z0gr>SQ_qWqQ0WsTiqz|?nuZ}*GdF(ZIi(HBd*d|3-Vg}I*=Cs?Y2v|CI`wd>1DdpP z5B3Rqa5hfi^fuKej3-*jInDq8AOJ~3K~&gQVP|P)LVr`0&+}48;Wg4v$}TBJkNLeP zq}J%X*MF-ZTI^y@FYON5J)!W$e7|(`=@i#7mpts0XYm}Xd+lTI9B_UbEeln@rRjtf z*X)o|MJ`}A58G%B^+6eL+6ZDB*+;fnXMWKcONlumUx|uUv`l-?_Nho%5vVijp;D~4 ziCC${&{{?okr>%E0koCr*r|u=OsJ$;+#2_Xv#I z``a^yLes*OcD~=Icxn)M?E)zP*7_rnFpcW=xfojfr)RnDQ(lG!iyNp+b(==-i}jtw z^@PzFzxN?&AWvFx2&6OE1ji;hq}p<^{E=Qq|~U0bo784B*6a{GQ4&~wPO zGY-7PLUa|1K94c0pvBS2W)@5+pQ?Omz+2Rg?=>*FDA5ZSx#dTcTD zUCbC8<-l-FJuBwQ2?oCNsRTt_7u~qLVkPRG>GOg2IfqNiyhK_8h7x^%hDe*u;pur% z{yl4lO--6xd3Z`GFdJ~A4hATzjOlz%xZHVDd3w&#DV!&6C{peYiQGi2fxZnrm1n=n z7?>laIEN8H!Sg)oc&@QU4RY?e4nU6ldE3M;iV6EXp$>FrFq@E3C!@qhew2Q7{>E`- zsRfjM2>mbcbA%s=1{xt2(3k_aLDaf7%aVe3k2p^9Edn*8o#8u5<=>!QP1`&z!C;YJ zODr4!(hqp_1x0L_i^iq1FR+mt-E!}m_E2jFR3hoEp9*`{I(JbENX+39NZIrq90I-6 zK-G22CXsgZ$g_i!`WJ1EWrFf@oNS*?s3d`LE{`>J!rB%c}g*m3`t+v+~U{d?K+j!Yr0;|x`!X8p~UABTgS{&zy zIGs{oN~f&0h)fNs>|S>tTOp!y{hXHd5}-krJtZ~HiH>Re&s;;i>)f-ZD2P+kd6o9& znW%jk#~u54>>&Z4Odg49p~>4;&lsay2EytLOMa4esSt|&IJIDt`cP4+a)`HciudW< zmI*X#poBjw6Ti>dS$YeVKB8cm_D!Wxl?Fl5BCJ;_8x9BRI8IEQq?UW3zYa+$&~}r- zWjl2MTW{0ggJn^4kY1!jgr-K@O(JmtihBJTWFsq7A0^7MPSnZkCTE3OKF>dYGxIHER>oMr{-`u8f9Mg4y=!-Sb_Ap}icLCWA zRCmz^3*BlY3#7Vyr(ktnuRfbwghQA$z@J3E1U=3f7pNP_JTl()i_fY7SW^3yujDIW zysf1Ga={P(32dgb>B#jpf>G zj<4RRGd9T-du{;TsH0KE6#&g5@43#HudrtJQMA($VUg^`b>-3#@Bkb|x?g2R$H`4T z&s6G@j;U+3S0uNu+}srpIaQ@`nZFV3@|p9cQXl^!z#h8i4iU$SYS+5ZQ?vw_6NHo} z$>?f5kD%n+-~Lk$p)qx)sLh5q%K2uymT1Qw1y7AeRZ+lFA3bsHaBU;s^H!Cow#6v` zD_$}BOpn|&(cp?E*H`-8F^-T;m>*1i)w zOXzZiK_EF%@LDf&1ImFQ+YX7@1<7MfAEo;$s_#R|M0=^d-uk}Uk70QoBzUka=m`#Yum$DZ;yxP zmZyiG|7*`duRR-n`D;7FE3eW2ZC&^jU;Mwfhu`=Exc97W=l&vdMKGi>;rx!|EwuRdr^Vq*HT0FpK|WlQ|Y|PMJ7Ek>46`~9_V|q=X`9kF#EK{ zP{5@~x*AQ%?+sq*={2n+P;+9JDxFa)83*Q2SwI(CF3!EOYfCw>z>No3e$&!$Vgu`B zG#8i+_)Jb`$?fzKS&58N;M$=kGc=E5RY*2ED6R~Mxb=r>sNR`TB^HOJ()QavT zPQXKuDAwR?RM}74aI6TJ;V93j*hdAdWRj#GPy`oHML0?jgk2(5h$GSdkrzSy%l zYwN3WsO-_hd&A*tw}+j(e?~2#acF$gh(%Z^Q;V=9pEc|}h^5LTMpcHk0Dzw(I-t>~ z0u`O&&7@VuI3lshyapAvIt@;PGRC6QAch{E*FC+gL?Y}c5WC1v+KbdMBMC{y&b`eQ z;K30hu>B^~g&HMTS+;mD%5#D0&A4&G@YM|pjlJBtaZ+t}IochJLZitWYKkJhRU^N5 zTv4b*(-p5XENT0s^8`_IT_Z2iyw}sJq-8jtEsv)0RzvTz8OgN~1XYx*q?5bg1J9dC zP(`aWgii^r&SCV0Ud6{s8oP`xqcR#W24y2az{C#<=XbMEJJ0a=I@tphxof8@I?mQ; zGFoJG%4=(MN)OU-ypF;867)8W$IZE)yKYXTl=SaDB~OI>uZ2qB7a@)JbB~2yK)MCdbKC zxkSs9O2)8M=pzY=ZQk|TJ%R`4ZR#g6M^al#Pe;u&)FAM>#R0L=aGQdIi~!$5y$gv5ORC1imu`$b5jay`d{G-`pNI(<*ED~BV2;Q za&piz9?EBw4(3KD=h{B9EbSCtvt0nzh}_1d7heo5@J#F3{xac|@tB1-?OJvtw6>BF z(BwXvSENCosHnm+O7KH(lwx{dvT5}}DMK3NRm4IyNWE^B(zDm3M!L}(^;9x_k$W5v zbvDNfdc!>ZG%vunShig7IzIfo`Edf96nYMrT7sUsmg^swSgT`#M{z?xT2!c_YFyb4 z+g%aDR$jp3(;j}V9qEdUlTou3yjvDN&XFYuGWr-$+#OBjJUU@xFGmyoWu9fZ9J4n$ z&PL^yRTRw8=PpTm1zGk0Yok;^dv0b$wgsKe*Cg6{h&Y!#nU|e<7jV6)@@_#(&GZEvoo0hB~BHagY(tgrlboPrIF&NU{aH5Z&oztQ`zvTBWn(} zL5}vHedO;#6KoFrVwPO0-&Lf{z)G>RyjP-93Zfd z?OXrfaBLL7Yni7+XIJu;SMovS|JiYPKlx9}pCBfZ_J$rk&{gsyMA!jU8A7EzC&ecS zJOTkcbQf8O0c`?NsfYxLHhg^wuMqcbC-QAU^)BXea^ z5K^NGL#sz_y63ygQdZ(P*Ki=4+g78cQ{no;>k^E1@YQ0hMlPHb8p}}-3FyQGwNIR^ zQp8jx2_DtZ2jOBgIpIdMvj(n5$0}E*yxW(#8(s1}pu4QqMqDeG%Jm&%&X8QD;F&i^jZ9s2$*PxbUuLnb5zY< zA(w_2U~;OI%9h?4wZKGfoa}n?^+pTa-H`0RS`cwFrNzu9h{xY7eOI7VCL!4f%9I7mlcozyFq`p-d z+ZVuHk4*Ej2+ZRFF@I1gdfL<@x*6R>JzSI4AFHTV)tf3+9KQtd=6Yo+@_)&9Y!dcz zq6N!iqku#Qjl`MTvyL(E#&j4tdOa`-3~*3+}Uh$-49=Nq%*cu`dLc z&PUoNP&1*_wiGSW&AWssvMFQuuR%2&0kDnw3CLzCgg1-h;DAI>DQ#9;m(p4ZuYlWQ zLCg|SBJu?pheH6-@&e<}gceRGPl$=)c*VmeO_=)|MU#7OpTzSdU}lY~tZ9Em79BK_ zNRxo7t;rCcbzCTAnJ}4v8c;{Sc;E zGe$G*^C&g-l-$0s8-4npzP_92(JOaLsA3O~=l}4^ zE}-r_e}4$$I39fchaY)vc>hfg>Bl1~`{B2~buj!lU)d%~bw2!^fBB^tCQB+Dw#Uf& z&gox*RsS`SumA0vKZI3%Km6Wd^P>yHSAOmHhmU-jht1E+!=2xGW%!9-{r<=FyMFR# z-anlGuqJZj@y;2a=nM$SL zTDGFVN$0bmsbs^;>8tHC2m9tSRi)(3&lOOTV$PWr01{tl?Un&eWdzpmb<(ksn`+bZ zZ?!m2d7o!YcZm1=-)c@T@gr+Ur?Bh-&shR9h|eXZA?YNQN7eJ4V)t=Y3B*eEm{w>j zYu0<+*c4^ML>oZH0;QE?gB6&$j7YirYf}a|XTRuK%>9rlp>jY$O1T_`e@i%kgP> zwo=O5NCif9=x7ynGW2HmrSLAl3yRb*2^FtuRn0=}iQ->6zM>%Jdnl^9UrDRD%P z3cvvr=oh0-dh<8P$B|}u%vhF`DZN~Qn1IW8G%V8W+>1(EDW@eE-tt%6=#1bbGN4mH zI<0`iv32|chK+Jm{+$Zj1u9Jtbz7*&Y9e}iW%##?u~a0ZisdEejrA3P&(DUx1MV&2 z%o>Qqx%qOu-`6a)AQT5NDmcdJQ4!kO9Fo_Us0C|JFHH*eR`k@mQX(01oTdRUYeXYE zfxvORE&Sk1%d2QD1wfIE*}papJ{i8YVi!qJnb@R^cwVFX$*oS-{}Drk6(+H z7M0K_yMI#@!#-n=(J2w+?+{lXxi1BrBw5qB@+e7P2-jJj5=aFK|)lxe4t)aITb+@kgY(`_$t&l89` zPdbg&{m4jp(LVwW^Zuvt^7;Sh!SV3#|Hi$nvpqnL^YMTE#=-E9{c^iyJ$mo=kS+r%@2R|y^AFa|Hw-mYhd)w4*Na*f5)XR;pGGIYgV*@N&wgzryP=$_jsKAMgq5JfwArnp@P(z-RD3xCJtyK|Y?Qnr?3eRd2WK44Y^2`H zvoYdezO;ARIhed(?h)}fzkE#4W24l3ZJtHf(z1VU7tm80XC^_xbKg!Ifsm*qZz@5w)>}~PFJob;Q9s@hq zIKM-)52nCIXlyn=AFvdsb)6qQcP)-jY{@Q2SIm#H)qDjL_|56|=5V~T3EfY@hXP5* z*5ToT(zeRzt0c1+U4o_<1tySVwB#^r2C~2Jkt_h2ot;9KdZ!&Fqgoaj#kkNcw1Y%; zDURy6XwXSJ#CRXhS2AD@c|};tkd2Yo9>xcZvC1FjMZ3p_PL)ZA>LSHRWKGA97|@?Csz(Dhd_`W;7Y4nCU7`~$BBQyS zXdA%g7+|7T+a&!Y`=x$Y4NTRy5o8u1(123JLt8GBQe)2Ug$9YW&;IkyJF= z0iL4Cx1mDQ(TECHsVGQ-#Z_|FW(Xa77SMUOtvm%lx17^(X6 ze*NkFc-S+5f!zc5?k6i5~F$K9=EP zF1Y8Axj?C%*y@OCgGP4SI76|iWMat%;xFnw z5BGP6c^?YnV2#L#xk;PUtnno})&rXf!rxOT2t#IpNwBuMFl?(*h%uOicm9iHxVZxY zK2=WW2o=%5-DY-EkwH7_Y$T8BR zS2zVHkM-%IpB<2+rW!`sLlc}8b#pi|6^HtX&7I!*w?!qU+M zfC>bh5gwk^XjNdsND2cxp9K; zJh%27<48eQ6xQ|-kuZ3oxWIv-Yr!L`Z_2K#lyfAn)j4QHPVc|o59R`0GHl$uiRi&7 z0M2|F(bgH8!UBJnezm~0mRP9gr#uHn^8wE#y=!i1ozJ0q7`iLlf`Ffu!~T@Hs6Yrp zb>u8D$CXV_{*23)Hn@)Xoe7=_sYp!{M4T}94i#8%gQERWBr`(Qa&HPzRTRqh#&N+$ zdCjC#+GpaaV9ESM?fa@H<+LkGT90J8*`{uh(F(@>_II`d5{+7=qPd1Xsy-U-_Jx4b zDD(3A%5bQn9rs_If_8}<`5N-%Q>^(V9yU}qqj1dY#if-v0yY5^ha|8H9#WuH&sd@? zg#HEo2xdqF*xVu?3-BZ5cMec&NdJhwcyNCw1)7)4k-N@3r>|bU^V+bmIt`#lCZ9E~ z%HTBx8EA`2kY~pLT;|{bpmLLO5wMNPXS#tD|1AA*W20)`1;nxWUSscBM0qkQazf&) z!HW18+Sm=^P1tQ%*dN4kPG`2yJ+%s2phSUD9tE!{xSr>~OthBJrv9#bG3fu6#T4=G+6F zTSS_T{22vJy}8i&Dp7bAVHEGTz<#YWVWa{S`=~%_n|Zy`yq?dJ<>CSALH`fFu|NFA zAMOwT;s=-q4K&qpS+DLJ=s)XhiG!{kdj0n;jQ-oN z4u5y`#o^=cd6~CA3z41g*6L^c?-!K1SBl#B(Chy2k-v2nU_Il{GHKqV2RvQapmsU0 z))udGwnJOTrc?D+HnvL0h68l^&5~*%72e#RC~LEyduHe)m41KiOyyhy8{|B5)^DC{ z57$@M@;>clsc$JuL%#W#GiMovu@c71@b!88uvJAc(A-d!llssPyh7)V75=7wC z4z=BUtAL~y=x~xGh@r4k%VRe+pq%yQc9%0WXo{D3BPBuTBcoEL*CZmxd0UF&3P~Jd ze^(t#ui^72wS>>jFSNqR+AU%q&lURFl#bv6`eGjE?m{HoTQOpe6>V^tKw+oZ_&@%W zSA*cfzvoa`$aw((03ZNKL_t)>>;M;+HoIP7>UtHmDRd+QRQ_HYL$9FdwhK$N#9t#g zUc=;V8a$o)NFIcRpwEapr~sD&V>BX#Db3ly=t!+4ey6wj{M15XdL%1p+#G-;x&w+d zAf%be=@cMYe@66pkKZM)h|aW|dz7gtK3CeobM=I?hKJyw{(KM_%;GtCa0DY^(uLHFqwrVWh1T`~ngUpSFn;FvetDLEhU*rE;Fp z1mk)c2f3o=M8tDJG(|%z34km{y!!?{&ZJ{1BhL3mR5ZMnnN)hJ1;mohG|U7W)1v~v ziKs~VgR- z9ZD0G;%H4K`p1QGYHm!pvKZ=s#hKX^03mcsbF>s?07Mu)Q59}JQ3S@gDeLHM(dlj! zO38k~UP944LqgPo5OZ_n=&}*aOIu{IO(~|p=ThUSML$zLTo1h5UKa8mo9CGCBe|Zn zRME)Fw<Km6BcWN_91Z<73JOTS`4q z+;mNF51)I+&j=pOKhhy!c;Be7GU-N8HNevuUdTKq0F9fD(MaZo-&=Dk;{X7VK56}^ zRVD7-*tq9Dk;-kNP}=~tL;Bf6VNW?zE-R4tXV=~gfZpe}X4wJVzQA=Ht2t;9*7j1e zU&q4~ee?p6(^LALuu|6FKJ!Xh*z-+f^Pv?Q*|r{=^EY`!0jy3r>AFw>R0MQ>GUida zGudke=schFML?Y(&2vjo+{;sRdS!sUvw`bMvp6$+moKAG^URs6 zFPFh|#MO%KkuD?Ih`@Kd)=hp+th{oxbC>hQ6TE)8FxVV}6#xPSu`4L`j( z{H3e(wTEbHMQ!^Kz-(i4BaxZ@`ubbtM?IQT)jss8PyXfMGw-{SH+S!n!WT;4tt$=e ze{1tz6^snSOD&b)`M0-z67|&wa2WQ*Q)QkIv#N z{dP5q^_YHn(zXT|+dpsGXXD|Ezw<1vrb(Ng9*p(~DBWwI4WCTe^eixH;gZXjhDdYj}fo2z#!FQrL2Z zqi!5g2JK+aIvuVuI~2>X%t=$8)e_y3<#{_tep`E^4?Nz_I4$x5n8@S)h>uF4-u4D zIRRa!G4Gf563SHxI228$g#u#@7A?&S7dO)ZFr4Y+phK7_zCYA54PzTZGW}emY4o~3 zf{jcN6~Y>IP4DVOj#H>_C2c66$^-D=N!rKjY}7?hv__G&ry?rQ2DkE245>P29h?fA z`WY>m7?DQ55XVThb^bveEOe{CjHs z&_6w7*ss+oa{jGHxe`)L|69PViUkL;^IU?+L!dU{qxFmQr^q;~ zs?wgren>=*elXd-Orn zpzKj(?dHNQA^{xqEKYM+oa9on1h0l{&C5DgRj&bR`*L&hKJ5W`OR*yAmi0uhnBSu} z$SF_}feJgv^U%OxDap9_ifQ#CSMvpxiMPz)xso=j(&8S#><}QPl9Hdd?-~Bk6RId;t-D3{ z9ldVx&=jT7O}Y1L)udPrt<||^ugcZ7khA3*4v0wWiL`(0<0bYB>3SYe_ye=Xy@q*Z z*^``O&N=QmYw3ef65MkNG-Q8uen}53 z2G8Eh^Jfn*^k4j+o5Rok)f>Z)ty?OiAXJaUUWG>jTAd0S68$BZ`d^S=|CO)p4tI%8 zy6DtJ~rR% z!>hxG5S#hR*Pmh(>Mfu9%6;hnj{$0@KG%QO+KX5H=RV!q+kj^d;K^&!15elk+PzA2 zAGkkp&aJ>IkolqwVQPo3$_Kg>Doakd!3|x_+9z=q8^OUAGu1gxK{razUTchUcHwN2 zBA41to)uF0q~?`Qd+eRi3OOUjw8LVm6`Q1@#RvgNYl}%T=4h8_CKoDEE z%8B&;(k}Iy(&o!1_aVh3+DKvtBU8yh(g7I(vua<&ngmchw*`@7LEGQ_JuIWxTRx+9 zo2tXuS~{<(XSJh^zLG9lcU@|$p3aXZpR$ViOl?IP_QW#RUzbB}r z)45IoM7;+k0MVmmHE?yE>XXY?k%~PG?TTWaS(`=*Cigl3AepPSXAxH0oyAm19fqH+ zRplZuGGreK#szyWyo8VK!$f~vkgnG3Jc%SkMNo%`d2do0SvuBBT7;50g||Z>VEEpg z9~BB0*(~+I_<3odMs2#VN*TK;LbW-}Zp$it9zS&0WBbfJimKeL&I{ zRNIjS0FA@}7@U(vowuNezWVCj;r{FQBS{*O7$dz#n55hq8P*X(6vzH`H7MwC{W`U< zT4XB4ak;ONFY^NZIY1|LFDWIkM+SJo3Lx}$Ve z*NMU_zGMOT4A1OKrv&5k-+pyx_|N{2&EfWLImYVv@jxvHNPp=d=rZsQ>j8Vfm;Pvf z_>X_<{_y+vst()R^SU|wjhD$qy}jFj!TsUaZ&SbT<<;R+Z)m{uaOah#%$L7GTl-DU zu$Fh#-;VC(@N-wiAjn<%B6ZV0@Ie5`lROjv?BhhtzVvHXBT3xr^9?|mbM=te#O>jW z-+Z$+zxfRVBykRW@sVr&#INy8x7LQ=B){q6MU?9oF90TOd4)O5`Y{LUv9A}Yjfdy{ zTTe4T>It9Q{=aN1t^1h`1TlEdtDu)_{UUufc};rYd+CAD@;U$9pi-j5R07Tb9f+}i z*`vF|wCB<5SoH64*f+Z}5f{NmvkSCIw3B3dN>=?sqL6g06J^o7$(tlGq+ME`=yn3>y zK$^Z{&^LqF0hz;a(-_;vSdbp1!Fe_E<1=Wqr8samJ_UFU$@)#GjyZ8lemkJ5o!ENu zD{-*yU#fm3OyT>i$s}#jdR={@b^|NwaptbDD5OXAf$hMnFTAc0(y!k^YzKl}qSEMz z*NaRv?U3^1NeUWdyfyjvKDp+_H z`g8)Ick=I&bLAd!45xQ~5t(fOn$*P|z=6Y@`cBPYcb+PSpnOT!rYd9|e2Q!N?*iVTx*GA3er;~yYSeVd|qu(2qaiJUGStc6j-f|!f zmNm3QK2t!BQuO8k>9o-S!Do%u_;o_gn|)}H2$HAB{nngy+ z1Na#Ssj+U+?$_HPbU{%;#$hhGL%Z9rrB zH$H^oBe`_W1OIjvBe{;VkJ2BzeCD^lbr>M_l|QRu*KgbFF_Dzdetk6j{QC+lJS>=S zI^3b&)&BZB+v+(g+pW7$22NU(R10 z$YB~*t*2JX3fYT0(Qx99iMw4Tfyrbx6 z#Vc<8AdL3hy3|9WfM*Mmm|uge@PJ^&WNMW$G63Oeiu{b+C~jdis1!WXNs$uwy+xVR z*a$Vn@yLDnYG^hZ_58k!3nD-*vSi1HV#urHh0XfX@PNW!eRS{d?~vIPqB%y>pW3N#Ng+&u5-bB4>rZDedu(o zNTkaxb->FKZ1bsp?v$SbjlD2u8Mqa-b4=7vE(MZA5e2Y%DfpYo=}KLz`WAWm>4$f^@%8_c8fB^b2bdf1~>mPO{GP<@d_gVLId#z|R*qlP!R zR|pU&3ZP-?Kp2r(u$|45u#eYV@3~Uj8umt~^xBUT;lc2;m?@IidLbNFy&qLTmS+ja zmx98~FFhdU!a5K$#j)>y8CuCzb;+v=t zpVzw<@FtMaGaNs|6fh?#vCIf zT4U9V0B+8mU0RPOYt~Sy5Jg&5O!~GHKX#R7DA!dXXD&14ueS ztmma5iZboiS?hF)zD^vktNTUH4@bWNu5tub@~r(HFw5Vv$vf|q%9WllqnA&QKq;Sg zne~g!=NbIQXH^mKzx>Br)SEgR{O&8h|Uh;rH}< z!smYMGrd)Reou{q~k@M zPvF64OcC+#-ml8UR7!&-P0n$yYFlVSXshW!)hU`%N-7xgpE|kyeI`YWTE6e-AP+ERIU^8ss<7Tysgwx^1TA+#87$ysnoo_WNjxqqXZ9n4JWuYq;~~0G+@yInjeTFM<_exfwmJP z8o_`kvcz>l`9Zy^66`Vhq5WyBt4VL$L+eSwmNG)McQhc9)aOLd5RHi|m@MThmEL@J zK%QL7Q2Y#+mSSHIQRclVQYsZqK?zVa&+HYW?&oC5WGjlD07%-7z@gLZE{df!P}n00 zezxaQc?~CkQtTR`LHia-VqlK zK5yhtL)2of0G=|W8)r3>ydpIV41}O@L`32UkTS>pQ^1sQUnUYJXcLH=^uL6Fg(`v? za`QAG#<<2jVve_j#VWPKAM0 zN{pHu5d-NRtCw9V;{kU@zG8enxL}h-&Ew$_1&a8*&Gt8)@dN8 zR-h_S#?!+ua%};gi&9~ZRj7V~X2(dSn*!W`Y5F|TT!FaJ2^|gmE2uhR!?HG8Y8|zD z3sMZ-Xi~J-4M1LVi%50ZPV=6!3Glv>cJJi`h{%}l*49+dtGY^+y`XirF?9TkMpoXY zD#q>HNB*AiTwz1Be{G>-d`zz8={Z1LYFr#cQ^V`XoCkoJ1H}9Y)yzCLX|T))nSF`&>kS_!PaIxK_@B~(vb4P^}@{NUL6ki?%o}q+gOE0N3rQCa^8$K zA;4jNl%NL*p8(yNX%z*zlhHt_m|EJ+Nn>;8R47G}Pynwq``Ouc)`FDgQ=hFlj;!sK z98lF<7)u2zLUllfT`-${N5Kj`Z~P|n#zVlp!_Z{4+0>;81`0{T*n5zw))6;g|XP>g~5V zGL?oXMlnPEj5x&`x}PWwd-ol3Jk2e7vsaHgJsKtX-beFN?BUTifA7~C zSl5@r8JC~0XZnF&4@J42MjqAEeeNIV*(M+Uk?ny59ylWxu@mNI*HYSNN71Hj9D(fF zD==!@-<2SjVPW3o3=Zr#+i)zNAUJfUm{Q9DN|aukEBHiXz8EZ;!F9$G;NYC`ReNi3 zRs6eRO#%@aB{NIdbpR{H<4#WMoGm+}YSNaSTlQ&K5iK3UbEwWP^Sfm%dA=#~q@%FF zSLHF4g0;3$?2mFcmwlMV)$ZP%zy>io)5^b<^m)0|>N)DZ7fww)h_YGysyyY&<4#0R zXcRk7mP;{N>QxTvV$=Dv0vHu>_V;0+_~FWBKpmAwJL$Gy-64A?^`b z^oC$NxbbHV#y#>Sst8y$s7JDF+93wL(U3Vj_qU#Z4*B8@q9TYH;1Q2EpYKcR5U-+1 z+!!s^aEjC~hrg1~l{ci9Uym@rKo7QZ+)bg&eu<1B*U$*jW9-lC)Gu1a16_&yWhmN4 z?_0Dk<;IyLJ_zkMKcweUIJtWMLZ{dCoR%I%>O4s&Qcr?^@L&@U`+l1V^-Q+KUudA( zK523q+sR96)ViKS)hUcl(on1tjZj&|wwA|20M&V~J!EO5Cbej|t^oHw_b`vlh(l^R z$;rj&FQE=|PYzpDqH@~2ju9g786%$i`a7Rd18|q9kK-ga*3l9~Iq4ITYULzmJ+^7@>)*C~c^n@szzl@ys3%AJsGHh-5m3FSLuM>?zLR1jLbD2{mh+AZ_ z8?p0RN{tHArE(d$xsGC_;6U$6A~kLhe3`fzSINL3=e?wJmWRbT;u!ZlD(9em+m$E% z-f=b`$XDo_EkV=qtU2k1Va^`FRDliDY*rW-*LTn3%N$|tEhBO7znjn|M=JBtb{!J} z+T`vr=Zt7}$AijA%_;iNFi{>X&IWQ;M|vcfPLgwsc`BrsvN+cD;f$Z zE!gFddq8fc`BY;;mCA&QOt3zj&-VMSYL%=%f1jw9N_y;Bo9qn_?r#RX*|&llbIR_% zb~l^3ZFe0@a7aYEIb>{Ocb3#4P(Sy5sP7$B>{)88{ciMBr&r10o7ih~e}PD`3Y8U+ za}O-GL0pM{QC>X9>qMXa-YdJqzx(TVhrjbX+ryu33;b(7T0HoZfA7xlpZ=o*8%R2>(7AP z$!pRB-$M_CNr4Sxy}fzPFKrTQJ$gRA{`wAQ$5y~a7xqe74)b|qR~9hol>g3l3fo89 zgtJA*pl4?s%>*4RC9;MyQzv;+Qn2j~IKTFAChl-{?eo2Cvg8!=>Y`|#-`W}$>b1QQ zbuir|`9_v4DK?sRiSOBb&+DzfKpg)vH2?)piLBeUdns)8Y=IpY?z8dB~_p~L$xP6(out^(UcWQDx&t)-+Hul!%xMVKFNT#dC0d?`mODuVAfE5$ z&9-6bay_Dz7vtxWeAbM~C{{H?uw)HO+E-&+LsD?Dv2mk}7=GTj7S#i45?N7e;saa& z03ZNKL_t&;C1u(yN}s!OI#^g3hk__Q=S4TH@paPsH*>iT`TKp0%-gqb5BC`}J>vCzWuzu)zvUP? zkBlA_y|ZX#si|dN(S?vli7dq10hP*#s4_RsM?D7S!swysQ8dA??OQU>hJ|N+qz&pO zsYoZ#iBJU3C0)^6Ji(O4dWoY5Ak3}WO*`Baj)-=Q4)?PeEG>5d2_p{5W|u5zg?o8M z=S4#7m17lw75d#;T%(csc6x}4hE=&qMw$#a3tmo5-Z|T3%f7U zoO1(ofosA2_T~e?#RE2VK(_uO zy+aMKR)T94>vn^3a|=byeig9N79&fxr>_EV)Y8ey5N>By`7U`SF{JX~_ zI$z&Mn!c$rT}+f`{F@%B+Cp{dx4$zQ{*&K&F#K1)4ah~w&qMg%`JZ2-cGbb~9YNMR z6nU%Mnm5T+GB=7q>IYJj>hkr0pM3unfB{_C9+CzppW^3H3GA;=eexEf2#8Gl z_7m2&`qjB`$a`}v*W>$LSVKYR5V zc_#9whHu_`0=e_Io`j$M{O=>i!E^i)3WpB?Q$82acKIq0c~uCb_3g!5p6t0F*P=Wp z;P~TLpA-7vLz48*_&^ zA)>SnI9k#vEVnwMTjBw08UKkt+XUgA%A88w7 ze6^^Q#?QIdj}pTg%z`6YB;XTL>PXK(HRILi3c&Fr0z75XGhEiZs=swWW#`%#@z6J; zse`rdadvq8zAKY-qxdqqR&DN)qi$r!(9Y=AM3Nh8+obyloK&_{IV_Wa-_1m3G6A_5 zwHl!sl2Q8O{*mF#SQluBtUDAoBRh!#@}8*l5&aTWYvM*-jD?znM+Hlmr2E{nA}|Hw z%y-k+u^*gp0-&BBRtvwp9gedv7iL9Wy768S0}Wsoiy% zJB+6wb^{?P}yvYMSyo_0Rk3VonKCkq?2qkB~D_XT?1S&V&P@CEu95is6-y% zC%Z}6mee;&jfRS}hQ4Q?x_Da-VnxlWpj@9@ol<6>b)eCW^d9A^$fU}AfJ&&od$ikP zcr$aQG&eh6lw8|v1kmSpqjTePbKPSe9PBplPuqxHKhCW!=zG#Foi`_dREra;)M$R$ zsopC+TC~kRHL4X+8|kWUWES*Gy$b*(l+5!0bJq~-AFrAPuAPUt3Q}Bep3gYGdkB!2 zPi3@c$r=%9tGRP*_N-*;A!d$N-X9w-w9RZ+){jdBSem4?g_h4~PMU%t9u!iT>4#J1 zYE*@&)t0EJjvIwiLUC|zG9TE7?DrDaVa-VO!^x2dwDTl$siI{@WX<7Yz$t!cy{V%_ zMr%#fJ{4z=8Ho>8wpW=?Td5(S4 znk9cxU*=W$im!}+zj42mJIkzi2VNgWdOUQ$uI~3}8&tBhmXt>R?cpQ&GfHv4b~1bn zfbjA5cIkpskI)7Eopq4Tf2k`rD1ZKN?WebX;wpNp_`+wn*JrNW%WpsNxy|9H$UnOH z8@W_J_szA3a;O9mAMfvZs8-h1JKr9D;?v_uzo%YRdnpvL@vBc~Op-H2UvHYDMjfw* zUbOq-J}M!;hkm`tWwWpMhnGHji4>pYxgXzZpL0mg*2Qz$C)A<(3_>B3*Q5uYv{gEN!!*h%$Wh$f?eVHU|>Sk;Y01}&)%;cG3TIhF6M`c1Zr7 z_LWU;k5`Q<`|VN_A%%T)>LmCKBC@^IY*Hi z_xE-}9)$%PY}AvMezy~=BJdf}rUXUF4G zB%+?LgDF3kf}%~1UiGdysyj=^TUud35^Zo=x*(k3X*=KN9{eXA(02Ajc_*EQoMILl zVun2h8jjl%eVzhwDI8qj={j_)89=}`<2E&W7W$RLp63d;RD(`K6C?GMuqy`e5#yYE zqIl#ly%F&WFs3o^S#W|1^QK&Ydhd-4oiY!O$iXqhy1&0W%q72wjewtf?#fvT{F*D` zM#OwQHNr_>EEKm_U?L6FBF9rxmnKDPXbk=8QJF-^2;Rb4nj@-nxdavp0xxl}w+*$ub{dkt)nwlsRa$s3oS9ycgM6mJPf1{@Q4pm`KaZ@;Qx8r3fMi zX^%o?Um+@Z4O(AnUh!EYZbuw=sWGS12W2OLq`**mhwEXs(IlSq;D6TM_h=C6sy*?J zwDrqXujwsc82M8jSo8?XlYEYgUWzX~<_?cu<4vyl=GPD)JR0q~{fM&QW8QQ1c`lk& z;O)&{Z}Rsi?1xmekai2xS@hJhvcVrGvZu++OfYyL{*g73O zL$sGfES^ovIFmg?bn@2zul=O6u4rgIZ>I!?%C;yWHuKoE&$Ufd#x)96N_3~31<7p} zbZHAW+qBc*FnUs^rlL2VdBqfpJ;1p+bxj%`X$a@V2-EKIo?{*3oGUkoVm*KBxhUuD zU|R`Tv^nGG=NettK!xxEHYHDfZe6FGb)_~g10+s#&dia~IY-9mTr7(AYQhy&FSpWU z1Ty|t3@`=7>K>l=QD$zoz5*1S?2WppeOow1`zrZTQTNlF@prO~3<^|4t5gxI2(vbR z0!J<4m1g>X8kFXhL{-dWYrV*P*jhbOdzLW*3`dGCMb4NE@n(xeD_N`yN3=Rkh9!kD z&48}LSlmjbK2^N%isNL)u%mvIv?J~zDpzewgH8&R-dl~qIZ?YFckaEvzZF`V(GG!6 z<*Af`q|qK`S3|iy+}HcR+G(Gc0a;lr8nNXK*4PSF%nulHY+o@ra}f)U3CIf3D&Oe$ zJxQ-en?jFk08OmeWFETy2UvKAZl_7E}UZr)*a%#3Pq%*lt5U(poheb!~7Wl z<2etiqM=a@$HEC)g2Mg z)9-j2=8P_qk7ZQ$z}iYaqfw1EhvNB&7sIHNQ4iXxN5@H{QO#fVl(<$_i0B$-Pa!#l zL>veC&yGFHRYni`2I<&W#IkC>RV8j69FDmWg#svODV2X06?9dvAfcwH3 zbKZh_MuGKO9iBiT<+e|T$x480xtL} z^6ke^1?`VcW8DDUFBADG@ZIx`N--$PlzOys#R}q_b#)+1o2yU>UDIfyjv{v{4+=k* z5)$k;ohmr56s>z(qDXb{7+sY%=(?PCpL0LdVUPpEw&)yiT~}m9L7f!M=I;V~g-^~y zjkr|#^ZMqDxoJ%5%OpO|CR&OitQ5IN~JLHcPIO!4U10 zupUaRA;AdFYH5G5H!RJ=S$7V&5S$5|WIjz}<4A?qmMqp*MWTGAG!9MIcA6o;;#p<{ zOWP_8w?u+Gp9@Qva~-;)c4$3l+28s3^7~Hj_skU^#MT$+wAmDEKQ^d_eF3kc+j9*a zrp6Rv8&=+aVhl-{(TQI{CqF0i#UBJ!{wgAO>HGQ$pwbxWMp=NGc~jOd;lp;62YD&{ zQRkx}Pm{$2VqLN^V6HW~>cUh7;uQBS^P*%D`Pa@3mtQZg5en`zK1L~S5w7MMsiU-1 z16$A(6rJ%dL%$c86-?>n6~!k~6>3WvEE-J8IQFoloe}wSDMdbb>|V{pYP3d^hH#gu z?wxZr_vC7BiVaF+k5TAUs-72Brc_-w6RfrQ(K zpN1tOk118ox<}1G4>AWB00bg63BBo}ww4o6pc_RtBS2h_&og(LVO$=9UT;czUobF> z!aSOI5E@_AXHWen^QSPR6?0IjCiKb{5zMG%4k*Q+A&v2OZJfcWg(i5Tk0NaycfSU5 ziB&9cO_k3|=}s_JeLZ8;hR)JJkA%63f#LERfe_!xOO}>rAv!k*ekavVkQ*;a^F@k(U;rSBO!$2g4|pc|Nrl$MNGKelTY?~}Ph zRX|wb0h|#Sy5_V1y+qP{d9iEPD+g2wX+qP}nHc#vhI<~FpcW2!< zYkown!rt|5O#YL5+Cx|fuI5GF1xU4rvj^R*WGuz}5Po;*{Bu$e!Sfo-VH@QFjQ}+W zj+gHDE1p;V72|S>m5unQV{hsAG4Vg`*243ulf)oAKQRZ~_oFmJLOm(^AdLX#6GcJ4 zEs~voS@0*``TB~G!uEC!?fYl9sNL^`Bfy=xHfpZ>TqCT%Mj=)@M@37X-=+JVuGANb zlIS-pk@=R43XSC6PR$_&%Itshn+zrV0Vjjcvs& zW~%CzK>(%^Rl(Fz5qh8`R5)Nx2p(_NHqnLUBr<4~h6upu`1ptgXy|`iQP6G!jvHJe zqHrJ)J#0`bf-*zAda8xdz9!*KyvHRxzhDJBo-&?nVPYbWO90y; zzA3_AykxH+M?S|}YfQo=sYz2~LqAhew&j7msn=>{3zyQB#9+rB_3zyt`q<%+12cr# z+>IYz(58rxIA8tOlwJ^3<3Xfcvo3*)Oze#`HliE~ zS&00^C79R*B`RfGHt0-x@a0C(W_0d%vFl^=i0Eeyy8rv|{uK}uamK@L-oH7|{ej}{ zpoAk?k%J(5?tl@6HXgoG1jhtFe+i1s6H`vD4*zlD83lvW?FV!Vm7h|bx1Kom%XR~b zqh-ELy>&1x1W8ZXS(uvBT(B!-TwoamR_0E?7@5E9Z&kJa?KC_K({iQcY;XO|CmIbw zF;cyuhNp@SrPwl;VrQOkb(aGgXyeUq0yot^Q}>WI5Ej&%rQZ{WGE^u;fYPDZO2-y1OIZxB(e^dZW(riVK4c zWKgsUPfhn*9Xp`Eo$o-R__tO^3Z1S9+L#i*`F?Jld}KS9R3dKd+K3aX`Z~oDD$!5L zjc^)@PZ3H?C^DSj^n^j16ffX*VU`?}d}R%FCi)0Hq*;3(}sC6 zLI9=SWxU=^V5Z4%=nKpfm*PfxCR;2v#gy`)k)u28_E(JFLM5OZ044oOxHuqcfRx3l z;f=krJK|K+K&O7R_XAizAnKAjgs(C5?|em!9USv=FDly6{2;S^4*;Ji9(75 zA@gZESfv%kM49jnKt7w9)1q>Bn{=LhHRHZr!@do~=*p})@g!52+`0s-KQ!~?9wz$n zAf?(?>70qK?cQgl(r0pu&&p?iHkSqoc=r33ms7SfcM)$p9|=6~rX=w_JsC@93>xfX z4?uV7{kYe4oGPc^3POjDnyEQP{6spmXOX`tVX>CtlS-6sjvmD!k2m$n2hCOR##MOU zfn4}I`Lzm!di85|cDugC>XYFL`~+igUA?Gy=G)B)MYcEN|3a<)6>(bw^je!+{V5AP zBa=Me2to6A^pl4?wqa$zgo|REYr14Cb)~XDnf&W6^aVIUmQ$*J)rYc(N*e4l11lI; z&_!q1#%Z%#jy5l;L@U{a;!`b>6wm`1fpGT-C5x()J5*|sXLeRnF?IbkS z&Au@v;^4%}9AQ-6hU3~0Y7Jxqw@;Ai$o0a>qs9YO20Og~_swPR$oQ5*=VQ4RXQ9X` zB`9NUyNLH#zpxU#~>JIco$cKzB_84T34`o!F$4f|30z|qF z+q=A@k~cdG9Iql6>6~{g@HCxAICs@l z@64>E)yoGLi@Yh#nmNjL*CRaKtd=8 zq$i3LkjGsz%+)161~Q>!g^Hv}?8&r1Ld2JfQ@|Aeiri==pQ*y^CBuN^4ez?tFfW8* zIR}}HXM-3z=Ol!f$vseW+n74-0q&P98A)Ufq%4Z-G@^}-4B;}j5W3rdrQ8(KymQT} z?=JSQLKfe*r?O|{QYo1!*3^IKd7Y0;Pxol0ypNN>87>z?2(-)S+yP>2*K~~uazR}5 zf%Ud}P`rz`?!a~0g=U}&=6I_S}+Vpi8F@=~*$Bt1*GgMYqUD|Sq_1j<3FnWuO%=8-~{=K@E zN%}r&rKHDcQ{=y|DZ`5wxkgr_JhExrrSrPbV5Ymn+}YK^d3V7W3J52gPrcV89govz zrV6Fg;3+McrI4&9Mw$LNL%|^=WT{I;%&_46?R(`r$a8|DXgA^Aw&eTwhKDM$HnRA$ z9ww!!JmWB>p}yJQ%Zj!(d+D?h<&G6tS9l`y={5@`^fP%%D8?|#btl`ZB_r)cd^xZ2 zBH(#G>qOrroPAJN^>E7zQQ)}V>*{afUlGbm7a~ZNBXApsk@9^!%$VdlJI|B?M7CdJ zSYx@}+ZjY2wqNr_aCqO)-IRiv) zL(9ohd#U%XtO(x_$#1F1Y1kwT_HXktBsTv+p^eNb$q#UxOFE&3vQG^+`Q{H<0!&s6thSq?;sS2xlS895~mPt``oB^71I7CAJI> zE;8A9afm>}ptHLIS+;l_Vw_Qmn=IDh&EUnuq4KmI z-RHpIy!_#Hzynn;$tbCrj#9FQMQL#IM#?DD)xeZI4qjTEhd~7iFdN2{MpUxi;T!E7 zBno?=ji-$owwM>rrG`}zQwKq#^#n~x=H>RM0ox!N(T*-xHyt=oUfx$;Tk||%XPdRh zU4;O}8>yyWW^aNHZqt2W?~x3YJhnOeu2Of*ZaOs2KM>eqw3sN`iYJ0&vHxayy@z zpZq4+cV$sGB}5quR{r@>`^Ck~1Hc;tr-ZFpNXHd9cFSgBQWztjr|+>*rkn0)LRwg= z2M^y?vqSUko_}t*$MtWL?zQetOc^>MYDUWEBvy2rl>ElGFZ#28aVX)F)BPXB?*FXvyE&(z&tJHAMZo6E z;t+gnNg_qsso&f1T+;z^Uq9R>56?A-{AdaB1z8=+3;8xMjT)L0xs6nBzn1Fm1dg(w zWYNd<$`44dFiH8GtGdnEl3NnJKK|)HP=v93sVh|5 z5HxZRz9iEL><_n-eYeaSz|xCtm3l8~5JHfKfS4Q(C)NEm+m@{cHUz_Xs+fv(id%Yn z(1k|2fK~fpD3Wq^&`XzjXfdgTn^}z7r`tJP$1xg3q*-XNkzKaN;$}A^2p!@cl!}qh z(jSi|+gO6bE>m^Fk(1)1`pb@kFR4%mlyRPb3i?~EoMj%9NS(PorxaUNq9OzaLN{uF zEpDExYgd^6VoP4kPwtT?F->m5%U)Nx!xPG)siO6Pd zZR~fQjIHowS^>99y`>l0M~v&mt>Zs`vuV!_ru9V*6&o9zS@{DTGy5M!LW3f2-d)%d zxY)$&{`))Lq~pgY87^plbpOY1b z*I?@}ou|+-GDV2W7Y}GSY63}Mrtc6tT8?UYXMsm04PF$L4lN1Qav*(fK8SPD`Xjsm zvq(CVgBnHPM0Pyx7&F>pV1FUONPU^j!viq>zTkPNS22-2r8&kDHgmz=xsv5C6a+CA zOFkxVLZlh-hz(gxa)Z*!>#igFCAaincBpQa9S&=i?zCt6k(}FphXa!3cyFa76! z#k#vKjr+4nRbC={wyKdB)5%s9JzKHeLN?0uts44k_G9 zg&c{@k1m~nEBT@r+nxlLw=G24=00+6g^J)34(z&!e+ovuvVb>@sK67%d|x_i1;U4I>_!|uqi0t(4< z0o+y^sE;jpATo3BLoE+PcHjN%ul^JtA!@f;yVj=yZaI$RlSDWPb!UxmlLXI`H#t&0 zvv(B^#bXrCTnLnvibDI$tXtGwdnRK9H=KXM>9cc^n=eZrz+=!g)O69UNc1AAVV;GKeDNQ8OCQ<>RV!tkMgG)oo6dE3 zJ70I&a9upV)bjyYK)qwx7(I_2-NjywGeKj^LCxzcI)CP=&Fw(!T{hTkdT2nHBv4iTJGi5`mRFG zfK~o2X9z3sr+cFO)>li(EkR0sP7VDPsN6If9*DEy_mdiC(1}@Q3Br=&wj7L->*rH) zG#ue!H!*buLyj`RQY`D;$YUmWyY#@?V{TbWp~}t7xH9Yd8~vawV3(}1R8gWWZ4&Cd zwF6tA(Ll$*Qe}9L0Kd27&I2pcmlS5v#&*ipS3|rAq`+Xqp09jFl#l19%1|k#dt%Ux zRvu02EyV)?M$F$&E2lvx_bfoF!KpXC+K8rF-GbrrNp49}EK6Y$G}>IqZFwes*at&G z1q2D5SiYuo;p|)ihvh>%{wYle%b0M{7OZJAJpkl+WeyWkr&vYdhW1r-zkwG6FhG~x zj_zq##L{UOZ&E98ifZ(SiOiFASv ztTHf5DmXuG(1OvP8=%`dSF60EN!De=dzG99V+nf~u zym%|uqnQuQRN>sVm>_P31%#ZxVzxL2bygB&5CFc%Egp0|^J;%5bxPZp2dW-PQ2Z$w zninW?rsrWL!x{YG=czZx*jLEa#PE4Zi?d7X`{`|6#x7$x6HHrWY%H`%+uuJ}2keU?28 zf~7LK)T1pKa5A{)vS3IE?F>^id7_KQmS&fPNtU#DN?){E}% z!XqXD*{@S)7?M$ou?g1YcIhI#mU3^qj2%a>NwezTR`$pNEdkj%n^T)1K=htt$oOz#)> zLWlBsgF17ywNcIlH`QMfiUOz!KrefflMB!0HO$LiTR=>;q7g<`dkwB}o<6qX>^)$X zU~k0VvSM1^9XdWl~I!InJJC zZN%@hU~q&a-QcQs`yS2xyy77bA)}oi;+G^)kzlZm6LYrI=`0prCT&=ncHn$}@;vE% zW}`~7)mv(*^Ops4mB~U%1?dbj;*TZ)eSmi>;HskN0B|c-hxbQ+3JbXU%X7Q`Se6zcL zW(So3yy$)xAYiqh&CB#e|9+T^AQ@>v8uD(vlzIJMp#A^c{(7K|^^XWDb!?1ND;wTj z*ZU?!(jZOgz%3*fSpU}BS@*6{{R1szU(>GX51;~Tk;*5bnE30!>3Z|$>tpJI1!y0>II4{s97!oYB{G~O)Be$m{5eIz$I-O%T$uy47{mhs47o=%>dvE*d=WcmO^L{9>1{svvvS=Dex#0!uyt`PZctC)Y;gjcZ;XV~O20@B1#bXxZqt}uT%lU9 zxY3Zt9VD3HH;o!rfH?v(ORk=2)ufGc9xLk5J_!tHeKL8CEhe5k*&&X zGqSrckIh$qvqYtLWYR*AXNE?^)?`@dML+S&2n4LUD$<0>UumL|d*(={95z*qp|ETd zfL!j}Wc0Kmg+D}KD3O<7-o|)D_Uu~VyZyrnDxb^xw)|=SF=D>2Ti#6|wt0l(&N+$B zy%^l)lN;&V&Kmj`n-#NgS-QScJeefsZjQ4bF_$*i3zc$M`34_E4C8NaC>>!!0bzMh z*)IcNx5^)6!9q@F)qzDI`2ZDUy@{F5NT(k56Z zfAcgoP)Wk@=y+Pe7y?2bwb+pRjn{j_OjlCv+ykgu@`7{U;;izW82l zm;C0}zJyou(jzgICrCb|_cIIVRX5${E(yCNrqinT zzhQn-$lc_EDEP`UssRymO@caf3UrP7yk0uZ5<4^&V!Stq_82@c=dl{7HB2?D_T&$l zA%PH=^p_b?Xg?4cbW4kORa=5lEkcibz??V8M#52-aBeHTjbj)p9vjX(xN9A<^Zxoz zor4$Ho*-y580C);Vdzw+?>6bcxoh2Bgt>C8Af^=G8aAJy>3=eWiE89mZoo zP-+&4;dE^PpYnR7>(KE5|0Jj6Oi(}NFCC7$Z4HdRS*peKh0v^d`68^!ywy+^4KGAi zu5^oR@Ntzkm9i z?g52x8DLLc$z@n6^Wp4u6VSH~PVu8S3=f1wbMIC-@itB<`|YCXpq4SeTbkRmCsHy6 zw%)J)yi4j3BXO6%CK~ux6N2yq{m_rtnI(bE-ty;go`R_5*Q@Wu^7^I5LP^{l;u|q* zb2WbtemTt7TSyQR#=)vTc=A|DMKoOPfzjFdM)Gu>XIsc*3d~Y4~#`31xKno zuXll9&bu6%TaJ_Z)Qa=wdd#~ay!hwI#I>%r=>;+)b_^Zd#sdeQk$QQZ0@2^+j`@d+ zu8&oA(_ zGv};iT;^9eunS^yQBd&mShV8a?wuJsjAEzGL>CU^BXUR@$+O|Pm!KGGN%Q?91}gqc zuiBG0Q_w9t^ms?c3-z_ZvIB_^l}tdbeu0)?#k%HN?YAs0Y3wM}x`vKMEWC}cZ7!e^ zYVQMiR)pL7lOk`lvOL+(lImlG1_keRW&l7J`ltZ*iQv~j<1_X}Sg)D9x`%7afGeDl zLZ&NqO}L(f6a+WqUmeRGIRHyZ+1N7+v=7mMIM;gX3R%Kr3mN%uGa)Lzg@G<(^7Wxc z5Nn@zg)`4(&2sYc0wzom;r%x~i1_KI(@g%uCz9*VZf#7trq~fMkVGq;kciVHy%bEX zuCN8_oOig`8-4PrF8^h>ByC8)X_b5OGEk#q4!}U>=cgW-awY7WV<7d?Ppy4aumWUR zB)30VCWqz@;#^^}gHn|=ry0h!9kZl`ltZ`}#uR6N?$tHIRcmOE5D3N; zQ{r-%;da}p5MS_ryIk1x%A{zL{WWXuo}@`XUngI&lfO>FmJqkM^6fzy1euCNd;6Zq zS?Vx@*zy?=HPb(Yt4Gq?@X=OxiLORyU*rs%3r7B&dwF&xNE{T?q&{P) z+$=7z;)(m4^UogLBXjbTySY}-6W;8eCyo)_mGnD1wbZ1Ks2{4xCN~YrWqN81>R~&LG8)2rSs?{(&bHver=huWSgM4P zmMYD=4y2Qy}Q!(;sqzjMfgNZOl? zVbntIJo$noz6INY<{J@k+u}LQw`3}FYOgt)7s;Yqb0PmwJApQl5oO)@=24lNg3Ha~ zP8iE*SzI}kD@zF8iD(Lr^~Ttgg^t^|@9&F0Q|{&y36$o;kT4(t?PgRHWL2s9!pM~c zspgrMwG~8SDlr_EjA~V#ol&OdqnNAV!j^uUTc8wG(0H8Ca1-MWC7UEQAv0tG8FV&eeAF5K}~S=_VZ(6>VLm>RKIz zPREN?xH0VbBhh|JGM9osi$kBWSjZwAh`p>#138dm8ZzJWgcOiTTj&w?Z~{x*W*w!; z5+oyXMH|hJ4NR*Z+NGUxEn)UKpZ~rP5kaeu@y?vvK~3>o;sp@sKeRM?eBE>z6dRjV z|27Rh4V!c9jY?Y92SKoV07kfvd&HsQtMj-_WsD%KCg1Yhtz6sxNtJE!VE=Y^cvLx< z?z7X?syu(bmj0uFv}`O_>V&6cK-D=wYyI=uzI#HMvoU}-MC9M5$s6y6x0ZK!oSXz{ zyw1_9uiHq{Sa(-#<4a_Y_8~`Mfp9|UXVat*cAHS+w3aHiYCB33lyH5j0s*n6>X9lU`~$4FM`{Hd@eG#aSat_)^&Hi@Q#~Wta;qYBqB(vx4vnN<&gM<+p;jH?{=B z`q9KpGa-oSp%{9TO%=O`p83KkZisswbqYqRs zu>TqNMF`xl4cF3vI(qCv@l6XrF@HV~N5O+Yly~ow9c*;a6O@=X@GHHJG>6KCW5ACK zC#&=WvTAxz%$~Z^REHOtn`6$V1-KqAmrXIAQ<-u6CdfsF3laXrbyk_Z$XmzETt@4l zL}a0WtluMz_~E2Y-=YhFezoRQ;+d9hb%Tl#fB7SWEB>R^k=7{{3|%T35s_ely91mO zq&l6Aut_O0E_*wxXQDMu9Z)q9eW}=xkeXwYyB4#}+;2;ie}d*74;jJdMT>C1P{ zo#5&9mD0if8vA26mhh;SosdZq=9N+JF(~L?hK(8)I-&8~3AcpFl86I=B(Bkr(Hc0^ zVpQTl6c#Z(WIRBFEC8-?zi5m9Q90_l>qi2d*kY-h+I1V z2oq@wDb_<6V`5rf#ezzdiCLZ+lm@?Dk{U`oWtBzd1IAqpZ)dz&*j&H~-C-L?v)#v_ zH5zLgr06JsQ!``DaR+a#_7tPv@Tf+j^5`G-Y7^`y$+gwAUMgVmdZS^QVWQj^Y|d0_ zAlzgzHBfDl-RJN#*y+Rwcj2aZb!`UBNI6OcG)Zn8ijg(MR_1D=oqEfusq<9)ZMncv z+0DnjXT{`@+GNq9dO)J~UBJx}c=!3G#|D1A({?S-L9#s_< z_AMd7as>#leG2#Nnj2d)GRN|w4kB|==#O4V2Qowk?T#)`EX(ezB>c z#cHUf6bOgK3Dw|uO14$a>XFVtryc1qk;<&1=0WqC)vIJL)L-g7unBgCNLzO3O24Kb z$@#(zxaeqzTTo(%#KW>vWTBS|{VirhfwR2tK1UA^60qCJ^p=CuGS zW21Nz&=nnaQnK7fMD>Fo-`?+gKIiJW=B)L@Ml>fKy)ntWyeQ2&(f%xJKl9e^N)*0${ZK`Cvl zoh23C;6VfcaIpY{B;FL3ip2YKhZ|U*a}C_1!oDAPLhHAcJK6#VXXiKifqyAb3q(W&S0mpj z!rBsnS4BhvF=9ybSzZ~#0-cEtB4{_U4r$N4j{A-Q1Yj>6ggfnGz&E6Q+Ii}NUTR@N zNd-E?1=o+TTG!rA=qom@rXB5j>YyQ7aAE|`a=Q;OB{A!}deTWQA)jPhvoq{GA!z{3 z{&G2v{ToHB9nKQ9T-*qYvka}u&7UcxC|zW)ylf_(fFYB&1qpSYPs>Go2pqnJ8K&Qk z`M{CYAZ${r3_QO1N+*`*Ee_!Ym<0$CJkyEpZdm^Pdmfh2m-6>tZ*q?}v=`1u(dUC0 z7Ir-M77^oC*a4P*Nivi~a-ovWsw)%t?8ptjZCF`;c9evXdF1yZ^|Hvpp&j<4Jj91^ z`qpc>nVmAQ_H?Q5mVjo|Iz4DL=C3&A!-yqBl?v&#qY=t*X+W)rkg}*)Sd-Ku;TVj> z!)rgLNsAt~vP`@6leX|e>Ad`Z{X7j9r+<}#4(?PedjyIh+s77Jgmq`OfQa8#x7BJk zNjZal@t?GjYUCwv6Dy^z3$-^gTJbrFMUQ4250C#34nD9sp7xsN8@la<-*qW);Gp14 zB$8Jj!t7%13ul|d$hrj)&j6b`*6@-}@*y>=0JoE2I2pNDc|zGYdT9@}5xxJn=6}5a$8T#SHKL4;nRVSF$XP?$5V-KrS(dhF4O-O!F!(mIPK9Qt%49_p11UB;wX&18Se`TF%`&BmEy?zabiJwa1`0~6fK%wiVwPWm0Ik~`|F~#2FJu-m z_>m~*mf+b=ut7b&UpG#Do)YoTH2_^ zO+(>)4XyAs)xt8sb_pyD${%mvms0+iA1@d6MDBe*%4DyMgJC!qS$gLA!v9_t zjB0WwD1(0;4|}+7WR@pa7@J3I>)-~9Re5-Qm8#__BS!N_%~(*lw4u4W)Y78RBEiOX zMYX*(L&A^QH-(O+CY`q899`I;Zc@!Np`BQxGhOWzaVe>pr+Im-ca(&SV-=tYUVz?7%yq1-Aq;uPd^vtK-T z)$$!<^4!i3gPO0vo!-L8P3S<8!{1mbupcp9ABs!jil{q0L5vudI+I)$TEEtCs&?N$ zf$HQiVlwwWvcGv+)J-UyN0$#)LfKPc8(xLw=+5`=_4COKxMsik&osYd0abnub$`^w z6^tNj2ZU|p=Ux+v=Pdyky!ixrS7D-fnLwWWBGGR&WNNxZ;wQkEVCXI0Nb zmy$Rhd4TF3YE+S^RD8fHyG#e%dMaxwFE+iT#-)}_a`K_j6=wvwHXGI6JfO=+KXIoq z5ebzrN2<#GJd888ZzEK4a=e_K zDWY<~aU@CrKjTLwWL<$EOVv|-M3Vc1>zmgE)}P>+Y9wjspKW^P1s&1H|-saA{V$I8q52Omtcu7R(!6s5NjD^{%VXdX`J+3;4Ozvf@hfRCz z!GCs7f1+q}z{SgoMlhWfRGZtavy^iWDAe`kPnxGs&Be?MKBQ&8E6J-7IYtzhGi zcllER z9iz|He^oWHyA*#s*ItKUo(+4i3rW2h#HxZtSC=5{JS2aL*gSc+d;zH}IboQ7p zmaC(_7brqDbn`3oRoK$#k3K}SPXhEnBi1CGut~`~b zM<$fHA74XpGwGX?f$-xjJif$Y=e}Ky`bm(n-Fz4j1$g~hGbv4;5}UCihWjw^*hUy+ z?+4;sZDEHVq04S7?eQ{7&7u(0=WD#0BIz^IRt|!EImQQ5C;g%%JfS|{OBru?dej~X z{$eY}-!t!!o~9P8^h`T8c?LUvzW=YD{ibjoSDrkGjt5qEJ4d;y_3EdT2bsF2emJ6F z^b`}FNP$hje>MWAM3^o>z8?;PLGBiL8{g$G8I}Qj(RLN`9%s%9&aJ|X%koJO^Vb~5 z$X+nXWg^|?zQUX6{w>UIPnLPvH8V=4D;!9@ z6Qt%!PXw1I?>t7_K$pO)?R9+JZ@ zKn~qqpSxRD8N$uOPA+otyAMPND}j#$#tbZ9sXs?oOnTDOF1I>E{S%;|(PZ8J@_7|zpLMKB+R)l)Ly|G{ zyvd}($!dSDb1Z-_67+kI@Tt{Rk;fC;V=3whI}jXD_HPUjK6k_z*FHbK`y^}ev^M5J zH3h+&AN9ihDY7zrpK|BDJSykcu)cQGHBX==MQh<^a7rW(uPc;-dVA1R#>2hCQ=gn& z4Mkm2VS3XC3+C_a){AqNU37&#`^4eNwNoQ^V5+KBYu;pNOw-G&ksVR3Qc#->K=Q_v z=e#feD3Y{S!9U=`kjCB7et#*)HGXs;n5&vQ?NjjMWr(njizUh<6o_%TrI;0j{*==s z_IulN!>~N*yZ@*gjQ^FfQ4aQW$HyyB-F?`R5aif?-cCgD@vxs2lvd}5kn+2c!9Y}H zHsdcsYr&O$hmE&qz(Php-9P%(%Ek^qhoaD@4<$EOkhWb#692#9{^`e2;1(-y$*U z!gdVaau=fxS77*&uGiJ!l+P*YdliK6jJ90D<#XMCJNLge{e7mN;C!lH^LYEuwQVro zy9*H+qDdPP>d=xcJeUxYwu$A4i_r0hBY-r-CH2pGR$y7fOtuOB*KtJ|<3cw59I1kG z5k1dLo#BwBb{An-7)*F0P7}X+sf;0!!?4x`M2$f1sJd-U?VIa5mpe0mSL+RgOxwVZ z^%mCZQm%GHJu1oWMnyZNC4q_lPn)3Qt(5*PwtF=krXNQMWe|rehfA4yJA7j*~op}y? zy6-E^JI1Kuf-&nu074(-FXN&WVxl>8hMf&H<<6%mHvE_;Kq%SdBx z#d8S?aro=3ZYl`!qX=S7tC%l@)lU4HoYM69Dw^Ap^%DBCT7p&?`CD0g#sR$ov8cs3 zg8QjQ2Z-$bbKG4&6z9#C*pHI{s_*@v%H?HWkxGxkL^ z<{}-`$f3As&R7v_lv{G8HriuMMEVmsO}g0xcwrH0n|M%nC4cmNx^RtzRlgR+{|x>p zdbn8>$7Q&nn3KQ%gvhR0?>2QY4tMd01-}FvNZJF(!N_1H-(b6X;5o6p2! zH97@2w8CI822-wQYmCFN09yY+gm@B?wvJ(%bP>Ec4G3yHXtl)XNbteYx3FV#$;6TP z8X+p~aT-`>c~$CEOqy(DaK=KcLk|&2Czlv2t|ywH$U+MVw}74L_(*-#l_W!^simPI zjrH?gpaav9U7W-Rbxzq`<3HJ>v~=9KLoO<`F3hJb_DP&!0J996Jo#$8GN*4@yU@!6 zB5UpYbW&d2&->FU7Zi89E>xqCFv%iIX)^GyWi%%a9lc+lSy zi#(GFr$w%1ecidC69?k;rwqUS894dUkD0g7as^}2%g%!WH5&oGzw^r-vhru+Wk@t4 z7KsUdBj*tzkZ&gYK0XizIuzRZuFe`eUWsjp^brwC_zsD-S5}*U{eOeH-zIK;+s~=z zkFD7_mr6!Y_hg1^8cL6#5|c&wIj6wud^;id$HC}4pzG|)t{kqTncrWc^5t;_RG)LagjhebQ=34{T3xpXdPjxL8)A1 z5gfn38tOF%riYkLkKg+I6R%SRbZ9l8pC~$x_3m@pb^;Vx=Xa1B7S3p#Sw3qxGQpfk zYTfO4gOcdRyCr}_6S9$G-fkJ0?Z8`Mbu`Z(Q3J13j|kH^A=}tCPJaLH6)|tv%)a3+ zp`qEJ6zmBje?hN{kx5xz8GX|My&6#D>}9hg4;uuPbxw0ayf>YwznAlf%YcxQCPB}c4T{; z;=I9U<#2vFp>`QkEIqepS~-osGMJCZ>i&=o$MY*?fmfoR02Q0qO?cRp6SW>j1|Jy# z4Be&r5HmL{U*sf>2G+k#fAua^9EP6;p$BmQ%IRYZc<))GX@{a5a#5iPB4o?ODpXh= zZFiGuz9$8oK;pgmhxR`jI4dW{TK_m_r|jzbG}njM2BRK>-^zZ&rx3$x{DEpTy>L=Tm~ zk1Aq}!l|{DUa5oezPRcz%7S7O0C}Y@$wuYp%QzY6ceYQ??D7;^);)-7-Mi6dV0h1s z=js-bDifdwTPu=d5K>I0CaHHN_iqNH8PyAFYwy*s_ojbhb;3Qj08=D>V-qmj!Dk;T ze3e;iCdFu|45o;UKUTGnqr*!?V^m6}JW*R$1jxH0*xsq4qSuu_mGpm8@sMwb@3ro_ z92oyrIB-##JxeBlG**+&kyB_jNI zyo83g;$8;rmIucCnn?U&m8m4&*xcZBuKOj)ZZO;Z*JFFZX?&#P;L|J>)j|1 zvhxT+kQ=6`&N+*fBz78T@9qI4o|N!w1e*ocjs}j&{|9hDkH4M9>0nPnd1dU^Im;lB zzJ1MkoT0ZoKZu)W*AO7CJLM|1duqWp_cXTn3g|jBIV)_GLGWk%kQkCMZAZiQVxOzK zV%n@eR4&&q2G}6Y_!gYIlbp+tDgv{^jF|H}&rxPV$PpzOY$MNHqCC)h0cwF=&pIf) zwol6aF!BnlLWJ!4>p`;(%y1H6D?^2xpo^MGzYHz#yTEWhCX$QM?IziYlQ>8*>kt0$ z`$Y9~AYUd^q=ux?^ZfpW2O5Wlje?w_o?{#z3(}Mw*c3J_u$X3wQrwlnzy0tr(6X!c zn|b}}WvQy+FcrDW1Taz?{kN499ip z92s>oDxAhR4GcPtVkVOjSH>)cUj}xl5o~L6rbkR04s&ecD6n9L9Dor#40D$nsO zwL`a@9;rX~$rw3CjNQ*Mm`;y|u~78-hOru=4W4w#H)7;@?J`-T$1s^Ol+Rx1yKR1rOX`H4W{x;)GId{WF^XhfY$Dm4EQER+n}Yd8uud|@E6!#|o?4lM z;Bg-z9Z&B`>>>7jzFAj$ZPFCUh(T|C|Cwd;|rjDPq zbH>Ez<2-!{GaxTt7DuL17DoR8&0L#Jw2AUN@&gfrk00K}I1TJj-C5@F)w8gvq({*C zZ8Bwg_T=G?bl$e1ML)78SIHuLcoz!vEQ@G}hOZnDby%gY&N$8c8S3rK)ssBupHeIH zIpaG{Rv|N)&oEx&IK?n+*3qUzdXe>c6*_Q^g?oOANA>5xO|N9E;#f8-RmI{n_6G+i z_sh?h*-wHJ*Qn(YjAXs7F=y>r9FMP405nc;jqrwGdL7s8zCwSWIlZ|2IMBi>Kx8ca zSRH~oP%>n7vKZgipsX8JI@S^2LmTtuIb^gbWlkFhx@s9lI@dqH$~@=4k00N6jn7Us zr5y*>+TNsg>Y5zBNX9sh;8p45r*=&3(@|3VCz185XPnzlO`l)iSZDO7fn3H3QH%BA z*SERer#Mg11$s>6UQaSt&%iM=_t%0TdBEp^Y?8-|z%{`ykFqZ|*#c)6{kSLiOFnB) z$XXqN!$vlqHv=7qI&-6T=_rH_94`S5&h&9So6p$YUp$M`mf%h9@h(o(r#ORuNLzrH zr=f<;zd`z*Wgj5q`Q>ezi6@iw>P<4vftqSsd>Gm1T;4{}g8_V&xyqcL#{vJ>KfjNY z7CAe4*#OfQS@{#>6zRF9oj_QPzD6bxd4Q*0HVE;qQAXL*W}&QU*6cF9_YNC%L@TdB zVfKFJwd>=Knl8qvYJKE_PC8~B7^l&DyEvJ1c^%!3K!)@8?SJ_1{~mV4_j`Vyf$uZ$ zeFpx2KLh{g|M9=)%+LnsYmI%V6aiayk${>!)o16tvyxpW=q_Mh)W;5nV%25a$n0=j zrUt5|5Q4FV%;P1%Happ=o16jHX~GL-g1OE)*#L1~luS_XSc!GHNtQMGY&(c$i1OcU%KYw4OOmzrZr!roifTP3)k9Eii7j`~;73mWFEqDrfORD9K4_ae}R>DTDfG-L(L2 z&}F&*xiTF+K{IaGDueXOe5s|D(JQ(wc8>hT=OApbkaJKaLrPYbucs#X2!mc0;bV-- zk1<|9#p(D^LI8FsLops-7MO$eq0M&H1`RCfFb3#f%Xxas;?RV?#Fb zBpZ&CX4A{;=~D!LhT)9Bl9_LaJ7TzF;X6A?v)?>tvkm$0w3*aSOgA1F)$1?~niGbt zC`kJysm*#7=w2xy;deRZ9Qw#%qdbc9!{8RefhWn#9>+j0n@eQn*qkJ~@i>cl6`48K zQ!DTJ948iIU3(yT77iZLgZ#}H4eK@z)lJ^VX$NToW&O&jl`^L2$bDqiT5ScRr&se^ zkv~p>X9MZ1oMhdHp$75E!1b)H_g8-Ws}9xF?t#|%Zn8pJE(ZQE(CPOy*$Tmf<2XJ; zBRZK5*;_S=oaax8E?K+d5NC++$Vz)YQ7QYA%*vw5q>v}6Zl9AGJJ!HCJ;$z6PlZNQ zFu?r`xv;{>>D#w)8g3}Nyq{b|%UP2WN{C*eh2;cNUW>`mwLmZtGN_e&YBS`1f&d_> zo}(lh8TVNnAY*HRY3CATP%Tub*P|O`s$K-*`Z>?}Idd%g4c>fl^(9Wzhd9wMqQ71o zoJ0p9@Zi)|M@IIpt~j{o2WMGxlkC82PrAx|<|lLWE)IS!m33B^mY!33xl#VsLG-Um zX<8;Uds-MKl8PKuuU>V21xMPtArmJkb(yh(WDfihjB{$z+Npj;BAW@kgNAZ~2L{2B z_HTEd77}8f-wxjY^4Ej^^?&{!mpo0u?%>B4c?)OXLNxF+82jo!vfdhap%9_E8_ z=e)OA*fUaO?&dna=B2%$>Pz4jV#VN;(|388bBC5 zC|KYc8^%KK)ev#mWlq6%8<}07pJ!Z`bHz2j$sA5S-M~!d5gvX`QS^jK2O6^ql?}R5 zxj!`5m@m(~{$;#tzBkE<=ees@=-Vgz+T!O2H@^$cuD`8e%xxYFwov^CU)HVXPJga3 z@AcUuT%YfG=OFs+Q?Er_x0*+~ADe5ganB0*zrP*r{bw2os!-S#o9*lV{deQvf9ib9 zl^@Q3=Vy)E?dGyGVrUyC!7XFBd$HGmvvzbiE; z>u>bKAR~s{ruEwSKv5@x;H`V#aI$G9v*ms7;n_#4hIg%HS>2j7zkmOp>w%O*c5#V*KSC-{#YJGzS2noLvl z1jgW;*|RpQBqeh)ww|z>b7AzV_d!2(t*c+6537O&+pAD(C*L5n$XLtX-Demyge_kg zYz8ShGxOE*60M1py{urtsO8x{Uqg#p>&x zjW83n&};9ptvFscAy(UR*1l4?E`1I$1VvSnG^H*XbW42}j9=}Rua~jy=z9qx=Pvuf zTz-kYXg-i;9cu@ptx>i|DjKM=MrM&L8V4FsnOdx;OpQEZl3U ztz0*4H71kxje$R9!1OSkGh`Z$V!h+#$0*OH(QLL2z&NNV7{SN-m?O+|f^j#ikiRq& zk}O#1#N&iAD9R+5_YHpbp0Uhzdk}~mU?QyW&O&ddLxqBb7?cZKOB92V*4h_+1G2u4 zLJ0{s${;(6(R>)kMomyNKrybx;ahJb5>a|hjyEIGicttMW)Z?TyX~x=hx<>&AC`dUWt9P7cVGrmP&Q%VY{Tt}mXyY|p66WEe#I zZOrE~KvKiWM}n{EceD?d8g4d0H$#l*%;#YY`X@D3=QVO+9L6-YSDA;*|3!igC+eX@ zLO3Rwe-Joy+#1F*C<|j;24Wq%WFusy?18<;vIK|8^pO|W7yV%98LN3K6QAoxrn`Pw zJIY_cU^Dqm|AjGbTl*)flIu+%U{cmo*g3{T0|4X#><g+4&qp$FA3Y3hse`{j$*&5nLSm7Zs}zU}Q+rwwd)#zv_b*VD+PjL|*02!}lL zgv~Ba64`y4v7P3AYL48)=LBc;z@T``0-6Zbi`0Rg=f0QUQ2cYw=(LdDBm?;=S@N?N zaX43v5{FR$z+SLESJ@wb`u#s9%LM8gCy$X2YGA)*5339On(Wq-99EpZ(X*hDGN=re z>Hkzc)4e$cZd(_`>GQQ&g-(-M?HXrY!5@8XBY3HbWjK!h7{hVbSPgTf@wL%2U%kx~ zr#bS6pa1j0|MtK9Pt8s$Zl{wkccJ9^|B)Ut+eWcUmNtAJ7G76dmzg8XN` zN=uuy>><^8lQkbs7 zXh2oYQgmAMh1MG~+3myD`;OCPZbV|wvOcGH@$8arE>i4B2PH7}yIBGCO%bEW&C}XS`F(AXp)wlYNj(W(%dULpq~4nH)&> zTn5@h1AoRaI)BdTW#p|rUmei%ZVbLVcrbm{y|+cJ zX!pFkb1r>&ojZH1e%*f6gO}I6wt+ZxklTs6*W35Q6I^o2Ri5f-%o^OeU=MDx*KGPu zPN6z0ZW})johT3cuxFolwoanu3HN8M%kRDB?-LlEGj{LWA*z|PuS~A_+D=7(U+|~y z`&H*VY-Mz{d(FCRHdazNXSzsyWCZz8o$)zu_H(-IwB48>&>rVD^qtvl>?){+$u@HK z%P+sAZaU{@-hUMRBf#gH0<1ni1V1wQ^pAax?RM&FOQK{?=Uj)*xg$5A4+Y5bzP5x| z|27lTGG-Z|HU4MbMz5_v^^)hFb8WSwR%d!HHPGVhUCx4e-e{2#`Mr*0%3S9D(m+d2 zzs43hOAR$WU7IS;Zf%CVXNag~J!efjhtAZR`y)Gpl%TE_GGwjqp68BYK0Z2(51h|v zL39z@`tAGov3-I(i7x)fe|VFCe7FNn-jtZixz_-H_4(30k%#IR(7DR|!{CGcxNXj{ zb?Urz&IfU2Fm&>?XpwmuVk@>fXQy+&Q!MNJ7-x4#F-me~%~F@e#>8~(mJJfFVBym^ zB@!hc-?LfR!&6tpZh02_jT0zCQ)c4YiE96s^G5b09dZUX=oKB-igW~CL2pd3i9kpG zIZU}WWR{kr&Df2it=^daSobyO{?3MQW=R-8^PI$YQRdV#gPaA2L4Q3x?gPcXoxWZ+ zVs%!_D+Z#7gQ0$hGq4%A*{|fHeu+z%nTw>%I8|>$MDPijfXJs0`ACe$QVmM=W%4Y- zMLf0JM55sd2?4gfUlW;q9}iCtCFwJ1xz;aOAUC%Gr79z|BF>kAYndDb7l&BgWMg7* zaX5^r(da^0;?c+OW$;`0DX5=lhQH1=119X;Rel=$(^FL=ZSU1?&>i^E&G>mJuBEO%+nfx_WF3kb?jf-pZ_V{;gpFau zF>^0#{yZ?bHwY*|L?fr4yK`)HS+SZ22;p$?)309FN`p!QNL-d1gErH+YEW zb)W0DXpk`)+WzNp=ok$g66=F}r@Ajr+Oq^$ki2}(c5j_l;kH?~z<>v1J_v)IX=}R( z@}GOBcXY1Du+t`kvjZESL$9(pICr&;f>q~QV$r%wuyMntqVd zMiUY6EbBd=sieorXNU`qsFx)})wA8ZOaAFeN2k44e?XvMIS)Hib>|c~+{Z!KS-j20 zRaM>y@;1trq1Z_3c8uuh=!gbfR*yXq+3xl114Jb;xXKi}GXo8fjNvqq@^M1O@R|%? z)mrQMMwji#?tExvM3z3OvA&F0>vI2P5&SmKK6-O>=(aP*PiBNo{l!Dt=8kP=>+XV! zD|^I9+YZ3K#u^u0MMm0Ga~VgYt7c^5T#b=zzcORSsl9*GcCgk*`WSbtsP@?`n zAe{CU)^cFqb*5Iv#<(gEdmTGJGDT!}$wB9SJ&$`kp_l$>z-9^QUOW9l3oFy6Mj%Q} z>Q#QGjsx4OZ2W2V7hU~1kTHhr%LFtz{g?UO_}LJ1HqCwM=EDTv1e1Ek2&Sw66XSc< zuI)~{hHW|HTw_Bp_N!}*dx+6ymciS`A=?K3*TBbaf{LmhT<6#HK!VO0q>-S?w3L~8 zWREZ43n|rcnye<#AXbR>(SJN8#AbtcYqBGTlE2kkx4b`;tWzOzG`l@s0 z92mQ9^!_-NbH3AUALD#ZP;~;?909gfiIRvsxygHH%~Ut%TB}xj=)}iCvB@hx`M0(9 zy^{_sJFn=^>hx;E-kjHrv66b_3>2JZTS9ge7RY|s87y*Sd|mf(&}5JxR?1k&;nQBk zo)GH7hmbj33aY=$hE-Fo@zy4{$8v3rjp-;h3SB;AA3-u@)sMmM`3-Dfvn0sHmdL*m zg$cGff9Sf;IrnO(xpT`iB40S(Ph)Uj*-&`sHLSG(5{WmtFH_u3APn@fQA&n9Xql#}H^~Ap zl;+@Q#we5Ez~>y8a+7`D`j%{f8jkTcHOtK3!Tf5lg7M||%_qMjAC0CoiZ@u$q4=K6 zmHY8>iQ_!`babWw>d5uQ;o~=<8;aB8oYR!T^QOuP@P;f|Wlj=PhoK%L1mS{?)`Wu7 zQkYNPr`D>@5hIwuXPi%Ch;Ctb5Y&*WqDaOrM%}k4iQ}-BF}k*cXL5H}?LGcc2xB00 z?`Muc5lc5&-%m|VloHzJM4cIxx13#gRhy}BA&?|A)G`&LObX|dNm=RJ;(Sx{BuiwC zn}LzN%lt9SupQQL#L(DHI*LO5i}7D1>jWJq%FF?zC5?+xSt%n(^Cz0IoflmR*~nmM$$=TqlY3( zqT88+$Z(_L9IA|M9LvaEG?bOLh9@Ts${6Q4q^4iP$kA9}v-x(~d}MMy?>WXm8OLUn zUH;Z{Y!t+Ne&lr*p^E34Q?lW;(ri;8bu1=xva^S>u_8o*74XMoO(23JOlgV+f_8$J zy?pT^aLU)Ez5fy-l5eu94Hj5i&R`szI0fLgkD?$LBOsmVQ#Y-+ePm3HcE&Mw*uDy^ z4SC4P@$)*S&yd6QZq;>AK zEU3O42mE26#J(@9Q}^)bf$ebZ$hZdJ6P=!@bq%!@MJ=_i+BHV9j&1J z?pv-aYU%Z>Fhez%lJQz&4-(TRIuT`mWG=OO7Z+;9VgyAt)iu_05IsK;4;&ceX|kQi z1gJB}ffO>~&oWVjpePDWJ5eKT6sD5_}Jtf=8N*93! ze|L$R;p$Paf;r;{EMvU)cCHG%Oj`+h#kkBzqqC8r+hkeaM7Ik#(T@UG)8u*}Ja=C; zu7KW)E^S+t&*}#Nk zX?F&Ed7^h2lb)-~z;W3-`r)OUn`P-WC!6y$>-4!ywG&k6*Z#TwDd0EGs;_Y@AAZf5 zeGeVv6wu$zx-N(IF56a>yg#2=AcoF?bxmzn$T6qr4hmP`|RGR2Ya$PV~Ve9zsA}#nZZ3UEq2E&-53!3Kq z&wFk-l;+L(*lb$DEY-^9 z%{&4WjE-F-V?8scUCx}-1DR~dQwy2|@2#^lecK{x=zo*7bavZE%Z>xBpA7HZa~$Vc zbk5l9n}yU_a#Wo<1y6Z>vM)#L+q3sNA<6-K^bqsE;VYzW!xfzb=>-e#U;gk+c+@Mi~lK6*UpeTdyY6%J%{Wo^F*g*4Ip*E(!a(=wDwmi9Vz@g^XYYG`sdgbxkzo)D2~xy z*+0&*xg6xnVAmSBj~-x4PvC%~))g4dP+NRZH~z#J0^GU}`KJvbpIOicXzF zofZ)mj39|FN6G&jm<%RBtbnpFYN32q7VBJLm7LeLxqvMGTsS;WVY1=*l!bje`cx)-#fk(RAsgHBDwAUmOYt zre|xR+lnak7PDDwkfso00NA;fVLBvF1jZ`0u%Ba@zn65uWBR`;vwSRLZ-1qXv(5#_ zF#oO-lIHxZ zV~oNgXdnVUTjL32feay@NVI~0YeM`qjfF)vK7GjNlks{9a+Ui(j}dnp!}$u`d7o|i z^Vn2p$)KFcO0axmAU}Q~YM}p7GN#s)Qw8dy4k^n~h(HF%K`!e}WI|>WJ0#ShWgD2n zWN5~R9%_8zo1x_Qp&&I`qf8PMaJ{VOag2ApoHXsNV&ZVrPThyy7zulmQ&d$X6b6U3 z;~V2!X0i?)`B*9JM)j|?pM~fSuqAKQFV}1 z3FX<1MfNFmM6bfQ*=D|3qqFSCo2x+3^p=WwdzLjlPByScCPiJg%>*5CEzsSkF?Jn5 z0xIO$J**+eT95&3rQ|T}1h0=-?hPK9wS1OLqzo-6=ezf?*8_8CR2rFy2yvXZ)5ywo z_UBciUz+)Pi^HOglm&BA%ybpfn>otTjQI7Nf$vH2$3apIOa&gLrVKR1HLn6o_>fxA zX~O`5;Goaqi>#ITpTh!HmR19)8LKiBDQx62@P;^c&qBX{4K z`;nfZn$5F;jqYgwIMb6!qie10G;$t;l-id0`<8hmf1cIf=o5y+5SzHy7z&N5GBolg zQMOwFtZ&ogcLSy9gwAdq2hLP}cX)yaHqxlpGWs~{*S>Wchv(WDLQ5+z_~vkAKxLeQ zJY%ZLvQ0lMb+=#Rpkh*rHB+2?4|ovKjF%$}*Nz>vS^Z48=>KW<(zTn4`M6RYPL4a&vv1O#C=fra1P z+yBm3-8CFz;_W|AR}l~24G}HAF>+Pjb3VuJsJ7yWP#rYA|zua zYPxmE-8eed$P0bdkB%d2-F(#qTKd0dl6BeVoE35|athY_DonKv2j;So8!KK|yKrio zos}!Y*K5xCI!J^2FKnk1s+@83vjRoSX&Ga2GF_to+koB<)%FQ?hU#f?`;)2q+plTE zGDws?Ph^e}%YY&_JEPa}Ea%Xr%8G0JYp#0vhBUN?9?5^rIw#^h=&-;1^<5#=Z$ivP58vcmLv}Wj zG%~TBs@{9;A2!y&UZ;nn*DqDlo>2BoaQRKW0lV=&jj^lQ|by%ouJmMrVZm*z8^JeIIbECcVlbSIX@i zR-u0zx^#vV+RTbSb>YL7#IgOV~^m#c`2|fAQ)?Hx;On>;%I&vtQ_* zNftS8bV@WGlm-)8&fqt1ekg3?afv6ACCN37p_@e1DG!3Rqb5h5wFProTs-sF`S$Zv z)HoAoV>~VlWk+A8o@m1YC|w1D_2g^$j?;0MUQLE!(uaegY|3^CU5%s~+dTU;W=*7< zR7^wHmdQ10O_|`qe;(tf>@AI&j=))1)b8Ls>ccoSX<<_Vm1S$@MK&Rec^PBlsv%yR zdxU*A?%a6&!iVxLx?askkk$dP4>=B%>|9l~sBVm;Hbjmwa*=Tk3*3FQ1HB~YhvUjw zzDRuy#l;xH_$EumSOMd5kD=L|$d>ysa*kv4QnYRUtf&uUDzYOpWIf)z33FujWydJY)l% zmTH>=7CBiI?%KDF4E z!>_>AoVZ>?vy+(}R>J8Y(MMa#A2f9%l-lno0hSi>E;UseZ_h3L&LGWvsfm((sH301 zwoWlK@$}5PsC$a+WUY~ZI4H=y`N5Lo*~mOxyeOHX&-ORVeQMlA58Y&t;GRvPWxkP0 zJbU>vY@lZ`3J^ye#o#;*%i}MR-Cr6paxlI~W=$U~eYDWGzYj~|1*+JL@gM(*+^Nyy z6izl7^o;JC(@0I%$N|ca1{PPu*PI}Spk!|XN2P=dJ+cn6d@W9uzn=&`q8CwC*@v?{ zzwf7cy^MTIPgG_cdg((auuxJKPD|NQ#}apcj<n#{5NDbOS9 z=Cd^v>82P1Py+FA>Qp!4$mp=j%Q_uX9#UZ$1`VhL+LzC%Rct0)P)zEF0hQ~@(mgv& zb8bDw8gT@Z-B|wwZXC{{)#(f8*>2)o598|`&V}nlHm=edL3T;zkxXEyYz<}dl06G2Xu+^*_N!TfIK-iweDn=tB*xW9U1VwZ zL9yPaVZT*hdilfU!GHO;f2&+?onJ$uhV>XrkG|I8oZpvGz5KZ`ygTA?UW&w6KN;BD z8LFLDTVh~~kFeJEY#c{yUSGypg@3%pkyFOmoU!wn-tEr#Bd+t>TxaIcKA&}H)656{ z*l(RFpLU+lxVEvokr-ZWRNwM1Vkq~o;ir~R1ig;T1pIon+_%P~^{AtG51+fskmY@X zu=c<{bH^qb!}SgcWB%_xKL+na_!(Q{e5`yS8*#{jdX32-&)6rsHpcuw=q5m-4k>3x z-g1?I7X3c;TC&DFvonTwlg%|aXa4(amMCL(#t0Td7uauVcur%RHN$A`V=M}8fX04{ z%mPlA1V^xjBZcIu4wW-=uK74hPOFNqxli9`?{@EueiaZdus#kMy$Fp1YV}wf2+Xq! z?oT%j>~d^}#|h+$_R3sL{pEx#w*1xA@SOQaGgQ{60mXI3IfDhOvi6DSEkk|a`h_BA zq8h-=H3T&{bcKKSOf~;g*SI!AgWZLr`LBbRoi+Pn>GaNXrF`a}E-_avL72n>I3Im@ z7$gn7?)>?`{`vnt`18-d96WykVe={hI0!76G?P5RgRXAXlX;r8ok=e@X3cM78=f65K^E~EvxCO>;omxVlAHCZ8tYtetO8HMS!L6ar zcr(2AKa8NWN3GxCH8ewHSzUa7*O#=}EpxTt?@gNIxyMG&y~FbNjZW!<`#C6%{@TDJ zWZ9fma}-yRR7f_G!#*Q(UsAhl|3dGySF2=0UgL{=3ahvT&{YU22AV!jx?p^3j>$}J zTfPPB-(cYE346u*T9Pa0ul2|9cOF;_qp?kB8N~76D0qVN(@#GXf~DyzhCPm#NyU!g za6@0M!7KKxNAdVBvteK4Ab1f<>~B$Izy9^#4nDnqSBTD!p(R#~&gT7kdsRmWt2KJ# zrh-LXv&m$eZUXOl6DZfqpU&Dm_)`wmC%I1zlBOT^Z(<}RLj?brneaKvfD|@Tw3vL`X2WP-W1j(wg#3^j?=xhRT zzhY}!T*(Wc2EoQRN@5N(##^%@jM&^)(Cnx|MdH20x08~V7N;u zo;jlMQAeL-@tUcjFbdylxUrvMXm%+wH`ftX^VPyg43ZIGhI-k#BG_kvBJ6sI9=0MJ zG0J5rY{VL=nY$VD)N+wQHD*tqgzEp@$H3E!YZ)ea?d-=NYBZs9XKXUMjp4^1f7kv} z8Wz6~)1M3o+G!i|LJzi^^gGK3U&lCyH~wpg6wXt_gECzX3Cye+If}u-lPFOQI*M8} zC+j_h$qJ~aP`Czwj00J1WNb25hf$uKRSJ|s5`nZy1qBKTR0GrvJ&p1nGnCgsEB$;V zYSL&Nhi?oDYkr0{UkbjNvT>3tFNNTWJR*yTV<7#G0WgX~mcaX7ym(m$r%eGxRPBwd z2}A!pwCdLE)t5LmDem2JMd^=0GDgZA_=pUQ8Ei6ZpTG%>ZC1Ysg$zyJM@mAMvHN6-A4X5cTQAO4j6^2^WvHir)7ntgSu zmQy`k*5FZ|#ewyala=}SC0X_BtlQHV<+6(4#{w4TanAK*L)_s|`j%{!`Fj;zCKIHl zWkUe!_+&qdqTOnTko~L;0^P}(v=ndRD5F64c?T5;fsEfAQX;zc`_x7mcl(Ng7?O{r zx5(09xtF8u5gn8Q7BWsbEY$tgX)Owifx1|NPH^rT)3+TV;R~mV0s-O7zr>$V84uPYi^# z*%HR0XEfMaeq#YLW@|{Qp;-I3eP>o}^WQpDH6YEO^Q3xzhzD*04OTN*7+k(KLZZJs z_}WmSol&pR&j4ON?I0`|%cIZg$Zqc{_ifH%>Ab0Xo8T|m^6XQ`vEZ{c(ENL9{5Cvs z2T~`C1Z@ERJBIOwPu)YPwga}Dlslt3@(v@tzBV#sY>Z(xYoAJ)^%{xJV6eG?J+ZA$ zVhdprx1Ax|7t<=DX?;xe!v!nlHcD5W6lS1j5Asg9K ze=DeD?1E`E_VWzyKMMNJTu)unpgN4Vx_miQcg|?XHZU|9JL4(3rRV!Rch{&05{7tP zk#*i@zU?pi!de(T@*(XuN{x@1;04b ze5VAN1q$ziF{48Vt>HQ7UVTRWL{Xj~K;C;2bkY?8vw&S`L2-;V^~?Bas2`AzIx1 z;ZqscjvS_8^s2$Az_=;ZR_QewBJRM6D~k;5NQHkErZAa)P9!f;WSXSTakUHb z9fdvJWAsYD&H({aJ{x8i@lAALd9-ux*J&D7ofTc=6LE#t;Zm=+ifR=5MDIt54GpnK zbPO6oguWS7ab7#q`>I~?u%Spr`euMt%~)^JYZgrDH(n{dMrrQyV7%&D_07rtzoW z{Z!^G4>^4eCc;HQ`MX2i9LxdkV7J+(sJ$>SP|^He=ujL7DbqTy5%itqEBrBs#8!;c zb7yx1SNJUonzHZp#WB_oR>_#6n$(=hyT z#6P|d;X)vjxy`#@yel_y)eC}ue z)U2ZbDjTCTWuMznxl#Ga6xWo@MraR)>@)lEFJbNc8iNnyL$lmltcRkUn%&Z7uHA!s zvYe$%Pe!qjt7b+TL#mM~y;aj4}bVWl_?|Je3$G-os{HV6trlRj1D*ycp*5l z`l-_B=UOEci8Jvp|MH*uUJCnnKgM}U7VG`HfhkNqS!(67<~%mpbGf8{Kn&=Wi2uSrqvza%jkmSg%dwee~O1#v%84 znDz7;qd@lfMqdo~Z!pL!lQAOCW24a{L!MHo*6Bc^+{IqmIHN(j+^jcizjFF&YZF7Kx{qdpu@-I5J-nl*Lj*1q*KsEa4I)jbC>IKRuIcrgZwOlArCt>2bqEBgEn#&ITys? zyyv>D^<~U6p1`szLu1@^)}te840hr~zWc|nu6@Dea?!vZxiIvlTd)94vF(=94HXd{%vKZy=Oa7ML=}lj)U%f51qFj zkL#Q(QHp2i^+tzoCbtIk=>6@$_37rb-ctu?MDgE!^_}ZJo4{flfjx7{-@fmfv&lrQ zbKB24Qgcpjop|rGj1jsGT_3b>$V@Ym>-@gU0_SgJrC($||262*sQjGO_sA93xp%q* zB6c>Y4a;She7;RN$6&34z`&D%S!Z;|za03v<9a6NwyXo&B_G`k#a$z7cEub7^SjSL z{dS&b(g#;FYfTu<>16^JPouPYURT#;j(P@65N8JfTw&{vJ%ZA()`LoWz+AZdL$v%kRcCxnZ*81%9OI;gkWUVq~ z94oNF{&4@uFg@=%oQZu-Q_@V&n#bzDfeCgTmTXIHr_Vl_Ys_o+|83i1)?>;4c4|!V z+7whnfYj{SWE49XfsC9b zhH!!)N>BhyJ-u|)TVKR+F@Md((w%fwBV{Hv7ChXd`gO_MFPU*=p<|K`zes*!XNY=ottnEr|pN zlc`RSk4?#pl>jKibKd7XydX!j`J$u~sYSs&OgJ(Of$Amt??6Hotk}$A)HwQ9RHmF^G8DATO5}9~ZWgcbP0hX&`x@X_9sIp%9)|=y)wM zjB73?s%wt1tvyCkkZEC<&c@>@CUXE=EV@R}D{TX7FolhRE+b@9pbiYfjAS9#V)pRs zYT7hDH+4=uaC#_CMy!Qs3ku?WsIS{Ox`*0gWy>OpDp|m@Wa$`KyxymWaW;COE~m;S z%V(Ra&fJ3qa>klI72T?GUYW8QZTGbiGnV-tT{7d}haGm@;!}02gcAymB>i$C39egKAn%__RIn1vr?*o zePKjX*gsL+X+%7b%5g+Epsg`cUy^Hz%s&o3+i0u}Sj_Wh4UC@oub=7@+MsAaX_@_6ZUNeVfsf(PS zzKFag1NQ6NWW4pZiyq^A_dOh_9QdB)X`-dZt#0q;Iz71(p*jnk@e$hdeBTC_|L6&l z9kUQQh@!Rb7ngw+WH8MpRzZs}M_;M^LAH(F_-c?xZPBfE zqC@61=pnHp`K&j=>`>5qRbG@0y!jGr&~Y@HnjqczIEcYWpE zIl(Aj`e{23o2Bp0(BFd^o)<3rneEf_%L`5AO`a@vhz6Vp8FZ14gM)WLZlRR)N*TnR` zUEj5C+rO&Vk-^*)8ABb2%E>}4M1Sp-2x=*u~}lT|WYRdFX{ zYkS{L!W)H0_o9me?b>hg>zP&m4OMdF-`tCGjA!G&lI3iMbNYXS3zK&g{*|UA@=f&#Y`4`mVrEC$wi8dF3pz zy-pVs^gMe>>Y}>^<{*n8;D#oC7yviSatLq)P&j?$X!j4DXYV;GsGr~1aKqsTvB0+& z`}>=MuAKj0Vm~?u)p|dRuhX_e>UkdpsRS0-oMT-%aPAO&g+AZ=U^oD3g(eR6r^wZxPVwqK_KJNd3+rM{yY#L4q0ic z;TAKl*3{%*r>K`>(7^Pbe|SHX-W7kwn`o~hhEaHB-C7&4DcySH)AX#K_S$HTX4#xe z0g2`eThc`OwkHq%#z5Q={w{zt=({qt`QjG6z4i{ zp6O+k&G|9d)mkO_taVd}&4_Ask_afsxx7rn>JQ0&WK%FcTXTp094#xjfi)bRIvadJq#7j@{mtvUxmyjk$T_IQ^m5Pu zcN&F?GJg}z$sAN(L{b{{(=RFXotgJd7~+s*{M(?K1t+{SBm`MU1|dTfG)Wet{SB7G zXJ#64@7|c;##ePa93xSg*4_>FdK}k@tUA0KY3u*2-%AIo#V9B4d`Jkrh3D z{VKG%f#^oKIb|Z!N0EubEwfj_GFmKMSrk>x`pd%Q9_qsypQwdB(d8XI8l5v47juU` zR(+*<9qV7iK8E#SiVAg0Kl}nx3vQ}WU?NH}BHw>_S4X*ez_|YBq)m7drxKLdXC#Z(6b(XcOVKYtzL-xftH9f-^r2#U61lhX=cSK*| zwHrv8LSLi~)lE^%4QiA?{=mm-%TsXmjM&Cgkw|qFP8ZaVT(@$ph65ZtB94DZ`g!X4qIGtL>$T8U^+k#l& zG?gdDlh0e5%%#t4SeI)}gX(ek25T>96L!xyCdfG+#W_6*g&&qH{SAjcc@9qFcaP)9 z6MB4wkl(n`@Mx-Em{7JbL)IuhU`G%at{V-_ufRz8zkuaJj;ECtbx4l&so2Dy@&tkT|xk3 zK%Bqf3|YqO1V$!1gZ-=yRR7!A`Xz%65-jK$N57w+_tD>Nwc%RJS#$fX##$v?9$T5V|1^eE1LyneCJ>}p-WZ^#jMjZ=gzGC$k<-1k&2m{siB$d zXBpmV_}ZUC?C_|W{Lwv+R?Sjvv1TC0*rqd^K^8QuV>!;xMs4gs`R-4Ic%+{-f6Jzu zEaZaW3+ClHrZ#Z`U|ZKV_>DP(}y6#IBn_{p^i#qPIge`{X{ry=SNdB7#zr`21G|!Se&z<}pI)j%613A*KMX|XF6Zz!)40*#8zD@5X*x#_4J$s%*RUaZw zjJl>6G>jtftW^i}S@BtnB5W~(`<zytq#Re45rC59IDHSrffrDsla92Rsm8_H7+?Sx>DbV7X~6YMT#z0&pBVils3Y% zyN6G$)I^#H1Gc=zB=EwXH2;`IOkHZioAUyDXPJp^UOg6r)t8q(J zlO2r%8NtVy1JCMEQNsp?wh08_%7v~A)l|4jfrGsuFyJ(a#Mmb_UZ;kDQBGDkIo7wE z+(BMB99b3}Bg|#Jsx!L|9e-ZR%E4vtPGi-f&o5yMMV@QQTpxi5YS@~+$dUA1C68zp zcoZ^1hSGrNTSiY7izCgbrO_OV82suSh;}guWF){a^WNh)smG6Gv_m}}=gRqQ&K@7$ z9{l7%T58Yaqq8*td6m?jTY;92bo;X)qZV^kAd?d_V|!JH$~Y)yWL`8 z43CRSAFlo88Ha21#}2z##~Nk+tIiu;I2r9R^k!{x&|d~OpMV#Ksu>)6BA-VbvRS%1 zKJt+9-Dg$i(42;;%c;(1Io>y)L+}wt>S>x>lcBQ|WWNxs5lvOhoX>sKWIo1)F)Fe? z3LKEGdKZ`C zD-&h!w9Ytx<4nmGySMlHEJuKYJVB1p6%6w`=fZ&dZAf$e?z+x<191$VDMY`A2sPqw z=9WX@5)-goS-D<%8NutUxfAmLkN?=?eCT9VP49{JOP!hf3*JTLx1-ayj7;y(&EAr6 zx&K=)wf2^O?=0{(wD-?SSJr*6+28)`*}Cqv@7ML<%+F26kR~T<+#X?=2q){Ysq7~R znv6wssdIqs^|#MKW+Yiho<^n~I#hFu*;DQRNx$0z*(0T^UW7>7*(x(GWI>?(zil-$ z9>CT&cTllfz!Mnw+qoa6!8sEeY+sJ`(^|VLt3n?%IJ%tFyY<~?n_%rYC%*Q6+biy# zb=ES+Wn8;+r0(Zo8|{VKMxWQ2h(3gla9IYp_t0+*Dm~D*o!JNS^DtP@76E_r+?ya` zufblAItbRbI-shg>ou&GvUlz?M!cY0xaNbzcv&RLFK<5_{3T7y&(dZ{#(pO_FypG{ zymuNW2(zKhyEVt&hXR!s3Glvr31%M#;(XB`n<%0sA8c9UL!80Z-HvS?l*!Ob>F_#)tKT47!#-v!j{dq&wDg=1WUStY&=`V^@kNFxjGu=T2@=Nh zp2p@tvEPQid9DWXHMh6ltMfT!c|K16Iu{}%qh#8 z*}{3wB^tOqTT=xTr>Jk{Z?Z~(>4BoR92lRSsP5mUXy2X81GG3M#XGk zhh?MO5ti$(G0Z{~!0Fiy;Ko>{kdi_8^zPv8uYc_ZfBX->&zigmJQEZqYv0wGXlPlv zD7;liq~R#1TvW=Jv2n)KQk{3BBxBf(+Xd;`*3*v=H&e9=oXwYFMh4JheOmGvMl>Ef z3W6aoGlHI7W<>^bobhGs`}c~rb3_#;F3ng6g!3p;jRy285nou@Nc&_<%0v_=A?xu| z6yD=FR97jsyv`W08)WTUm55`eb@8jR8*=U=wYVVF&eW@W}1Q&egNq zFw{jBTdywu+(hfNzfGI>|jY>Kxh+jE`nB%cJ*U3JkQ@p(5g%$W$&7 zdAUlRWFm}-Tvac~*u*(5V_YMva~RFxI>u&=t~wqI_LNr|{OAEYhuVfFJMed=Y8%!M z5Bt8i^=gP_KrLKjAZ*3l=i8jg^b}T-{|XPKyJ~QAL>@MEoiR8txBlqiZw~Y9dweuQ zNnT_vS7e>B@;JrEWx-4&_1;Mvow^M@hZ)Fhv_;+zyCfixHV9{G1;FY87fJT#Q(&1N z(x2sX*5UcdSq|gC#)DG$<(FR@bmKrF=s62<%riLs5X{I@X+9+YLtm7stAUEixK!_Q zD#oP`z#yS=41^7fwGgfQ?b@{ zG8H4QH8w?UR~;#NFYP=TY8~-!4aprrFHzHSsHQeIhku>1$tw7&qnIJ@fYdJNuiWi# zM$;(dj;D~x>Y#D(>S)za-F3KA)3qb>bEkWUayvLZPYPe%*{r)^{a5~Rf42UuVSbkt z+g9m=PtP9uTgP^!Ydbrw$$9X#<#yMZJiMPx+CY~8(cK*0J1P&a`(Jam_ESu7~6^l_-&Tw-#J%Hp7uCuTdz4HuPr|i_^JF((7=A& z_UIbo1Q!_cZ8W^eN;dPM;K9h-$m0Z?CMdKZoxSfogKM@=XKJChF5ZEx?YP~~@gxuS z{BJt_E$epiAuilgH=)D)9&^GLg<7f=vBw3`asXFCXIXf@X%aK0&`R8AQ z?9muEnV(fhY20-h@^b>^gP?e9Z5}Xl?|seoLu3V6!ajjM+4_IxWn>l6!eh2%ktb~b zIR~~ZH2X!juYfVzs2QPnibZwuk|_WHAOJ~3K~xh(wxG{I!XX`=%0vq8wJgK>s{3be z=044WWftmm0Z+`n*+D%vd$W_yjhxrx#J;&Mr zM3n3|Yr<|hMNbdft|daCiWhkc+wm-Z$I&6*MoCF*%h;7AQpo^6r*9kL9kzQLPqQQQ z3?)9nd}~knKNBUoNnwL+9Rwx?a<(H3deT(Tdl(HY>E-hKz>HIsRB+Dhm zDKqC;rgOSO9jjK1(HQ3p;3Fwg@?-8CSh=71DQ*0U)>}MAEysyt;B_?NlZu|qiUZun zv^nMxMyZyHlaZ8hjB&OM%zOqrS|OHsA7kM-0^><*1XDl+CG&iq!n|wO4`x)eP8k$* z=n|+GAAfBhlop8d{xko8O=bVd^H@uAGxX`$u?DZocqzOm&Ql398sVI1G3cHw$fm)c z2s~1YY#`2Y7REDA<4Ws{wiL0!)bcgmY~Dqe>JTVa9HA~|w|3A_h+8)@dx9k}O5p5y z=Mhga(E_VrM{0-qsi<=h&R4~KXpyOF=bk0Y~ygcCnX1Z zDw|qIdnx#3r0l3#4}oTmI7t)rXhNeI(1Bo01p1yBquHoBKFN60OW|yfAv?^M=1Qh? z)iRNj1_(AROOS!=OcZcr-?~l~Vd@5_pObrowmnW%<`5GVV@WMbwI51qJtZibX%^i; zikd6|4kQ!Fpgehk3Di1zA7;Nq-n)F%4NOU%DdgQ#eJt zJ($6b)R}h9hxMznCW2OHDD|f$csTCAchF=TBID!?^sv<7$;i>YsnqTMD|3_e(QhM8 z2c03ZIpiDnBqoJ&*Epja$6(oqEV-z$Q^ywUdRR_d-$0-E6z8B$*&M>#;PDJQLta?6 zy}yijFyTU7!`{f5leMR#$d;(!ZMN{`r!->*G0YmA9)~Lbb=V!l>@l&LqpPpEo=wO)G#u;mr7z1jNHX($` zd3KF>rbg{{fF>h5{ZZV5u|O8LJ6W@Jf|ky?I(2m3oUI!!HoAQovc|a$Hj9-9l7SWE z6s-IZnO1w_k&L&|*PMU7M!ubUzlriU_%dIGALUI&jbu%S)pPV8nRHGM`<;y2D&}8? zX${JJrhIMouW>pL*4H+~?*33I+oKvM=5LMg{rer_;^BvvuBsuk9I72a`rGWl4oJ+} zP3CpZj74?;i37svXQyDV&sYI>^09vFbsjv|z0Evl@j$-@u~K8SPKV!}A^x}a)xMrN zcO#jz#S>4jIX8}+1q{LJ{?W%9-q(86?)`zfZ<}S$TV-Y$IpaPo$4%glY-EhqcIzO4 z*|s~-PN3(()au>Io1oA-JNC~_JW;_mg7x|+-FsWAHA!oa36R$K@A=12o!YI!hnGWN z;w=G>=-$ih{cXn#@sbO#;8}i7o##0CW2?=6nRvlWz}OSRc-eZ#3~r#)$eb`W-y=SD zHu!HdbaTxKjFE}E45PWKb2&PYO*|o)*>i4pXH)L^+pE=~>~)Gg9G%y?9p_rs0krvd zKm3sMW=LnW@oPP<4E%CBjosNdNQI%E?=wHJWBp#%=**XM*)yC31!8UWhs9ouk-MA- zf=$}f-~)&}cl_Ne^DqNP9oe8%1)Q<%O;C`$Phz3HT?I6|x0N`M@nz%mq8@(atZjzK zvwc!sc@Lj7y=*#fQ;XY1-)pYBx0*=c4{%7Kp~4oJIk?v5Cvwz`9b0hihnh4kYp|at zyE$ZcVW7<%y$XC9664oje$JRL58i~?TG`Qc&iSJR|Df;?rL{B$aaKue`aEU>wP zILXE)k{bm*smqD{)Ua|8=ihF6a*_s?1V0ON2A;D>7QO|pAw4@VK5#$Z@l>-3u)Iuv zlo&H2eV^W^%YBO0WI3!0szE>rP^O%K3=vg)H;UG{qaEO0-D`06D>Oe6d;OPw!($D!M;AOMe4G zr1wPTl;Lor$tI^lVSZB1U^dgGJ5k}|kS~ZRGTF_tp=BH;@n{Xi z^idFTZ`1*0|AH@(uNoLJ$V3(}B@%p+ylZJN_$4`d@Fw*@U$MD_V*N1B_BhOKR~)UZ zZyDn*Qe#KUM6NDEcJM5)KK<6NjWPG3=tRXYbB&Yye!*~a2r$vISI9w||8d504G!^5 z6!)V}$plxCIG&+_;!l3L?fvSY8~UW6ZjUn`WX4=a5An1 zNnVByTs2b!J^Lbkf}(iLJ6-Yod7iVdU5tFeRil2D#ge(s^)4fimtiydlzA%rZAG-N zVrVO_XXIc3G#b}APA2^HMY0!{VPpKnaefqe3KT5z=JQ|@pTo!pMgVr$eL$8|%Xf2= zEYv&DvNv73k~%~$9fq+lsoy%<%L=HYO|O`f>#)u}(R4bHX1(w(c~6;5OhRXI%C9KV z8pf%m%6*=`gOLyPkJIg%oTYl5toi&e`)CLewh1(u@v>GrTp0!n(%Hz|3LF)lk$Fez z!=V2ZopPOw*)Xpnx`}a+jLwscv6Sg;Lm;zhbTXzgf3MrSsD@Jx0Z?o%MGXy6X8I;F zS@uGdvYG$SWG+E9tg3XJ8rC;)YOpN2R-1RamYOA0%gq$dxJ8WJy^X3{3pIuAH`!;h zh>zo;dhJO(Co+5!+2KV!jpMDBRA2_=PbU5J`RLozWUuJH>tv8+!32W9FwM34iMoS5 ztS8V?gK;@}W%H8hER-sGB(mHZVDi9_uuJS^XT0lm9V}fahNA=Q4+nIk!Woy(p2sQo zvwI4bzeeapQRjP{^~bAcOU)Cy)pOI&c@J7=QBe2c5Vc-C-_3NX2kZM7Yh#?%5QrT0 z{K|VS17Fo&O&bpej{OD>jdTZ7V4V#bCD-pcQpos{_guRMzW|P)7RJOJk17$(UtvU? zOTEzwf$c0!U%e%pZLAs@w+Aq#cAaHH3UQkN%^)CVKFbVezI(1s({QU(37p~f9@B%at>HbHMzy!~VwTi~aL)Y(M>8(T*FCM)rrX_c&u4 zX;nGrJe0ATu9UC{{5^J)))vpgjy(3j*r(R%EOrQ;aUSA1NdrNcOT=KNEn{IvT?xEe zck^AHtc_ykOkg2zylpM{1hFP_Hs~`p5CRHyTpS;|MUA!f;1d|9GfxSKawWE^5~3a0 zf>}R+xX$AbfPV%%Bz~AKw3(J&^K-jQ>@9mBYidw6OPb4>l{OO`x@6 z-}Q7Z4gCJ#cac|yOAFAqR~HyxH#@~wm`o-;hd7$uMk#BkRX0?KS_Ii}%Pg*}%7w+v z;rL47TwY?BHN8uqGr>(gXY=YCU_vSWUAv&Z$R<Vef4~dqxY^trW%7hIJXpBgSF+{cy0%4=7BLPhc-_><^qih82C<{pFw zjIEoGb7VuVXrsB*T(?o=;)nLTlS9JnSs?l6j8B>p^3 z--k5pm7(fEc7#yCL7Hc3ljn(k7E>BXPK&cC?uTAiqN-N zY1e$5e9?285R^~PwA)avqCro*Y!o2lubEE-A(36#tQ!Bar+F7hQy9v~mW`;VQtOS( ze>QG)A!m>5w61WV2o7uH9G6KC%QinlwxRatn(;i$O%ApixA;@lVs$UsT-cY4i5!hn z->&AI$k8;FtvXIUNr(Qv-=g+?m-?wW?V1%?2RH*^Fwbibi!Ap#OK9v2k4_C?KHnS!a5}ByK_R2>v?{) zV5fynPqcat*Re2)H)pKmk02m5^qUEtNc}g5nC$P0oVJ*|j@&>iWP#}-^6bE@amlD( zGEPVBLzJwxjza|4zjG}Ok9!C-U^LO$W|hpD$h93&N_x=26?n?%>0y!1tE_jKH$@Hg zJR&QMY57v)@6{(_H;xs-<3U=}(OoqX&7FN}zd6{nxrk195}DJ~o2^Jhr~U!F&RS3J z5)Ku|jAIk+(KDlluQP=4#c^#^c6w{IP9^Jm5}EuOJ=yth0BWGG?eA5ibJvjVOc8^3 z4$<=%5Y|BtJoCTT<1oQQdb0rZQJ2W)y@oeaMvN zHDjlPd%owVXRPDjYmP4TCua~N%$Pcd`8R#OYZw|F@CpZx;W`pBXpzE|XPyK&Xo-Es zje#-Wjs5d9m;K(}ehqd`_QcoTLk|gCHk8ZHX74#mAZ4}F))+GEW*_UU4(g+KY)~%G zCa4m_>suh1du|AE$!}ye1*<@s65y$$x12`zW6-_Q8xCu4zDxfs`&^j&z&@=f{WXy5 z?8!i2IW-ODGCAu2vrpz(n`z8nT)#`Vb^QA2Z#A0N8qW0Wy}artZLW~9(DMQ*6}URT z0(Q>Oafqj)a56M^z016JId=v!(%>@_IGXcm92EONU}ORaQ@_@LAQ{O0_1olV?620% z^!oO3&dX)jb&o!|Dv48>W7#+v6A1qQ+t%53N0sGR+F-Da0YheGR`>LLng9Q*W>)uf zR~1br7$;!!Hv4(D6cJf#oXZK=5jXBVM@QO{wj?se=%McQkt(aaA-@C=F^ObJ_$)v> ztb>u84PI5As&BgHqsOSR#g=m42oBHeIbct!BlsW7k9`xzjtup0oVWak>~gymijVFm z$$*_CaD#n>p7%6?u8Uwl&bi@Pvx{wx;>tauy*^a?t=U{uB zc+Ly@0mp|1K=%BB#nsPJ|Dek$VKAs(-ABLEAF=fh>6(iip@VE>2d-dC-Q&Cup(XJF zYXSMUJ}USzI+270XW?^dfWe43E#mZi7Ji%hD7IfGE;gLAhr`COYn~T7%?KKGUOw+K z>+~_@9FeioGNT|g_YM5_+9*|bYe8+5Q47~KMJku4&U|S^7eKd4 zvb3<$A^kj^vQoql?$c%zMv3W;h{4Ui#y61aN1e}yj{uxp2L}p+Mhx>2792^SZ%b(V8a!eFM`mTR8cUsHz3y{gcGEj!NMZpavdrLCKne9P0<2t~Oc4<{y6ACVtRK!`8=kan zy-~Eo0VaC|_#zV2^sayvV+@^PvN;bpKDh%TDt9zTpc|PqvC=}wYdlS4(2NxZfinOA z(Kz&gqr}>Pq`;CUDy5V_0|7WT3eU6Id?L>zuEbeUl!)ja4b_4>&Wym9^B{;SkS~Bb zt~nrY*Pj4`9qCv%!6`iHI9VS9027fxCp-^5^&4}L1{k7{*e5zU{*fqpIot)rw;2vg zV+aB&IJV}*bZ7yE7e*I3hc?K-I6!O6-*4Z(&1XUZq)SuvgliNzy-OsMhBr0hopnKT zgD($p#v<4E$x<=Y_5n_`&Rqiz?e5iqmpHa&JF^VV9zqf^+D5e!y@#rpU9wz!(l>nyVBrADl$10?cquw`{i&oiJ-K*_N0yngE-c^2qZuae<X>fc3?ki^o-7Le#V(wr$)Po6NSSjuq}m2(1U`& z5zc)*%ei@Z^V;=;)>=?F&p)p@{EVNUoc+W3&x4dEHO?Tq&5Tn2ts^or%xk1|Cg6ah zCsmNR>Ns--QuaFPre=gJR<#udHoXp8JQOde)T>Xc@!pTT?pPZGR0dsruvv$pk~s#c!E^8ken z+!)!4)57NwpnJ%mWStpsT%N&vc3zHq((EdBhpR?{dObsAPMXy-Z zK_C5fSXbAm0l>b<$C)5f0(0L}4~}dlFs@z?lZw$St@VS#&EFdgSW4(RhHW5{a~Vgx zj&g%*>>D)t+c1f~!XQg24)^P@VjJ+3!o9VI=)0?A%?xOaY(7bL?-`UgbgcAI&IW;Q z@NenT4EklI2*xP~(&rhUlfY~241wt;0Gg!uBiXWJx6RsMma9SK25W4%wO9q`D$i%b zI&e5nRx*#>V}t;<8W}hmVRf9x=X4%~ZY~Xyj?j#|v2!(O1LMbB} zyx=eT_y4poCF3k=Qz;cJHXy&Yyhtp9)V$d6Zv^pHphxI$VEpw#KVpXKRgn z0cn+BqmZMNCjxBSdD6~#%~QScDk)oX2Vgqv*vL0Zds4TOs8ktK7mzg*SOjcE!2p5* z1Jp!30f5HZ@tIQX9;GcQvv7=#C(;`x@S20}-vg!`O4~jF2PC zWH}KrvJO+ITLW1@YY-6!k<($M+fY!!)o6a4na9w0@;VhiN)hFgy&=2xkZjU#0oKs= zkh7n|^*%qRdr%#t%S-5e4Io$(rjyg?RE=`azJPL^DE1cgYqui?mm*iGQR6wOxx}a< zXB;oHvViI_`phc&m@Mg&m+icxLjbr;Hs-_a?}zh(6K;WNhRKp$F(Oa!1%R6Uhr013 zXQPquc24rRB}1>l&!3MH!MY#=&TElXvd)R1QDBS0<{a{DpF@pc&yAV_sm3S^ir5bY zwCKt8ks5>3)9zEJJpKjWopr`pX|!@3E%iYjh783z1*KGUEv)%6$W*<2h~TqU1gD6| z3S=rf7}gzRD_}(qa=p74Bj_gp8(yPBsm`m6R4=i&&^B5J2Pn1+<`gZrqu{)bjIOiR z2r$Hv4t)1m_uu1X5pC=abib{DVdjtP}T88CFX;bE*Lw?1!M;CK8;#`i`u> z-J0f1Zb0Ga_*B1X4|uJ?GXM;Fd%$C!k9stMCF}ellVqqiILBUocXDTcru{K$T*?!6 zwe_YQiY}O%&!Y?2sUv1og)=|48JU4fxNWaFhsejv1TU#adz&Um?la=c*_&WVwS47n zgDI7nX0*CS>l)6cx?hu-8kyz7W>Ep8*l;7*1S6_TN~I$sflk8Vn2uXglUl2$6Tcal zk(<7~nE?LWJ=;4GwD*a1#P(VHdat0OIrPK0z= zXwe8Hhr-G{3gy?@e#{x#pNY>`w$Nv2Cmsg<^y_C-Q2;73hpS9yWf@7e4 zm&V3Arkuh+Q`R=0K{n;Ikp}nsH98F1Eo)tBYXfdJ5I{Hbe|7EgYvufqk>OnWnu6$m zUh6--*~L9NNUfbY22pD#1Y`g7w*FfueEvK*u6d8OW&{+`>jYNmB>=7@u#k1ICf@mo zb=aY-LG#0Af-iXw<4jJ2giaO0IhbG)H(spOAd?Ibomw&!rCt)Cto(bxx~>KQ@>FDa zCJ11bMj`cSY9qC?ec#cM^4H^p9JJ%Cg)34F=Nhz*Xbxq6o@;^kU`Jg4h*K5z&^or< z-e%&~u3{5eGvuOmX#GrXb?qegW3B68cHRp+348)W<*VKC8o=lJ29)zpgH$nd2J9oV z=w}BstNXhzo*V1fa?dwml|^PBKIZg9ueJLuB|8~+^r212Xh0=>7n?&+BA<7kWCL|_ z)~hRQoJaI5r33`jX1opd(!Cs}0ndYggepikX4Kiip|U%31E1ho*i{ed(SROtwiZKs z9h1U&j#HExT|%k1@4luk8rotLJ$6Bjox)au7bsiW*?js4xgbm}gLSWPsB#B@Kf01} zN6^EJ)-xrU41=As+GK!D;0B3OvTtkHnepQM8jO9wi|r8eS~`T`P{B>Voxg|lcpM) z4f)RnFSd49=*O9ytN;aWn}OnWL}_`(ddXD|hs=qQwnkyNj{;`u3YsG1i!99*iV`48 ziV|892b#}Enh;8Ps&IX?or2eZXgcE|>;PFPZxnPwr__;Q-C9Jvij4!vXOX6F4M~j# z3KnH8pcaf{2+P}UXU0-vY`2{KxkyU$`ZC`*5_F)#jtD+cR1D;-apheJCDfGdtG4+#XW3XZa;Mga!2bT=(MrO&-VKa12vkr=O11LYB z_hx@DE)tEtz?k9O6`#m$r0t9>u%F!8 zG9tc5mKvCAHm{C$qx?218tUeP6$;f^KF%DpDes@qAG%_6pn=WYCyiIE7aHfiXZ;9t z{hL1;&^Q2&mz4cgfUSJ_S&sHrF8fyVGzZ$=C)fh{Z-ZTRD4TI${~b=xp9BrZUa3#5 z+cc#qRTEuTN>ue3&*!J=oOpVb-O@lCtgueWb=)jq0pITL0!y6@&t$PjovsE#J%2h# zeabo}T>t1mmjzLWOq;8X%{9o1=fCT85Jh8rO5iSH8C$?C!gk}m`@jHr#y`A>tR)~q zW>z4bZv$O*yr2U@apRy^51ZesQw+3{wP_HE02})9%QUjsfUf(aV)CRwnQp!p3|)uFOHa~GxZql!QV z%JA@hT!S_N*>yQ|x8u2UUZEMYz66##yG!X*&Rv69`5I7HZ`QT1+jVh|ycF+h*36(P z*PMMT-LB51U4y^Uyy+O^S>54I50#cJLO+seX$yGDH^`dAt}@O8`lJp{vs*Tt;vNiA zkZlqTc(zOq@UxKt?gM;QJH==RGCpxmE<47ErV;3TdIrFFLgx`QF{n$a2R49bwpmvK z&dd=^-7Jpeh$Bo^iD!nHV(`<9#mH)& zi+U`&12fLZn!(_XS1&W_CRmSJ|4#{uCUTs$Vk}An#?F0(xiXn?JAxbR=A72vUtu$X zGdfBsHa_Q;oyJc9Qx9o2AHQtBPzaThoC-z{9GFdI(iG1{|KnZ4glxo_ltBaw|T z58pO_9=OXJ!KKLpEp$~(jbe6SY%^!v492z@n4O3|N}uRxeny(Hu)f!Dh%yca-Q{x6 z9sub~P^Vg>5t!&<E|zQK5W%U1qJ^+hS7bC{jru4BzqStW^wL8#i(*DxWw@!q7G2Gd3}@TVlXUJ%ufj(+?~C6MFBDQT<7p( z4jSN_Y1hxLQyiL%+XJ#l=S9-QMDCd!J_jFJu~uyUw7qrq^p45qc`b8~D1@b^h;_%| zqG1M3y|oro+E62Lb`0EdKsPlQQeGLe7PxR$e7kOfU- z@C22izR5=?OPt@UG8af@?Q|;hi_PM)w`5+(sNt|^OpMk5WN8+_{S^9STx>KzRQ@-oiEeV+9hO>v+l=DQT2#x6^L9h$LOs~Y>I1Uk29 zKnU;Qxp544?nnW8^}sq-8@V)UXA^-&_SMT|5Qyv|PwG^%|FjyP`EzCo@>(7ou)$g( zmpDav7K{YnjlPv~L&k@_xkzC%YxIM~7+u;xN~6dZT2L-luncGb6yRJv&sy4rF7=Ga zJhe&G6_KddoK5E=1zD%^u@NZMt5>Xtywm3w$5PI6OcW@M*s;sv^J-7s_rcm^KaiWV+~M4 zb0b~}Z5}-@K%GV#SiS+)>rk)|+M?d%SekC1ftq#V=69=C=nve&|2ox1ZL#}#=K`YI zmOeB3nXd*cnKy`Su7j(yL!uPKn{Ts}(i#ioJI8FYF#jLN;7>GDfbWUpT<5vEWS_mj zwn1X?%iLR?wF#_nKlxlcx9VWqlac(vNhn``%}S;g8}db zlksfhP;?k~upo7>*k^SX1>a<>sG)=%&{|sPWLbQ2&rE?NG0YTitbAREh2@!>Y7DUWbON zPOL+Povx#6^EIw`;)pF?1lxf-3_9>xMyC2jP>*YLFPf#~i=YAlA6X4_(v3q!Q0PcA z9_lcTjvTDuA{f(7zHyE|#hxPL*Y~LSNY%f|&$0O<=Ht&=2#RH)+a7M)WSYgJ1=Xx{!|zlvB@(9=Hmw`I_2)%9=W7bh~4+ zzpynzg~!>-=G7U4jZs^`-a@Q20|XF;4T&@L8K=ic0MWpQG*)<4fQk{y#(g3>kPm;A z*)i=PRE3Ihf@)>-oY^NfRgHm_`qGYpsXO-XMx`;Hbmz#m0Nm86=m8@LfOt6eTq{?h ztvW&hSk{P+v9={ILdpT>XY+4cSL?KuqiT!AT)V=Fv3utz+w8M>R(6Nh*r_`-{vA;MQba(?LasV(A)Z;XZ z*rByME6Y6{Dw^Ph;|%?X%ts2^?G7}GUWGz;v>0=>d~4-OR$A>F^S4j-~^Q%>yOk}}^Km?!CM_wwbdW)>%sC=HYQ zhT5CYL^h0&(b+JDfLV65oj;wag8`7vm~#nuw~!X_rDO42XBFOeom}X9MAo+6q!ck` z7kx>G#?Nt>9dn>T?Kc!jXjYFN6Um2C$jAn=Tcu_>cra%JS{q#h&+{H?hsb23?8BEU(e5{?!llC)Ks#r0;5JT4@RFeiqWu39&H^8-q_2Hxa$N> z6noT+jtwo+PqXIg9sytP6CJQ)1az#(^dmf7Xk&SXc59=(FZynP8oJMH82WF5WAfzCl}DF&b+bEE zBg8h_8Qaif#h$UR(c5vXkazCk?gQN;(G6{}ei|`u?dH~wlz!MCM|W_ukz{k1N_ZIV zt4xIAJ{hyp@+NCCptG&=OH1T;G=383VlT$=ke-X&doRtL)wvtWr2w#C&Mz|`IHuT~ z6F_Zdb?C3EoMVPVnwfwkV2#E;Y0M%GnKMh4m+LB44Iq?tFm2wwy=lRGIeon-lfWIyT)^K1rNzzggv`^^0yqa(+sYw&2+=btf(TQYlS$3?&TCzmFw zf2wbKmMhEZmT`_YtExW9YiRr+GX?NU@PgQ%89s~<7`DNScEhZ5D{Yw1%L{C`&vWJ_ zh@YR6ze8nvoQ6=2ipgh@?{EYUr;-dwYyfquSKyhfxj{VeD^8Y8z$UB4IiK}2=*8=x z75ZQ6q}an|b>@8&3^B-Iwgq5K*@jVHwX6?{zU~p4uVOk^RtKOS)Y_o#lbX-9ucNz8 zZyh3=+hCV@fBx*Oxn_shzp|w`mo$8<)3UTf^e{fzbo@P64Nos~Z5I*|IXW+*2yF!UqGN4XbDS5h z*}6tp6ErY0>mMZyuH(}PCMZ9K%JBk7=+Gc7w)z^!ntKN`#J)oxjHA3Pr#jiC27+e)gZ>F<6?QnK(Sp4NjGY>e|o?q8JJL@DS|i%us>$ z)CaN&7zm<~I#4(*fC>Qt?G#Jh;E>?V&{|uH37&eC<5%bp2p1m)4NRa%@m8rVM$t$) zlFkD>V+@I!F*q@wYbsEOinfnQ(^kx84DDpcKsQB^!#9F%7(G^&7i{tK^IK!W1r(5+EhM{0pvg|JirzNGFX*RzVx zqFn@&8$dW%3!EGyYNb>fEtSUDds1l?NefT`JJb#U{?S=d?{uQ(-*oHaDF%!YZ6>>e zgF)Jo_YifyWL=5y16l(%jWy$;)5<;VCGpHTH~?H`Lb0|8_0~|aC(MZgEF&-6_w#VY zpT|+VOvYfdd-892C$f}%$C-MRqF8H`$VQD*=>8|muT1friL9t(N#&}1prAE+$Uza{ z&_bEa30>MgLVKaZ=XcARy^fDTmPOaJMfPM=71LE(!*Brj2fJ=RB*0h6n;q60fje=u1bDF&7N35gLJ_cvo>9>}lEqS3CvPVSlwg!yXJB!TdcLBQ% zEvhL!9vW0Z?#SD!&itGjrH>hqixc!J;|$D*=DCzp0|ng!DPE)@9HB&+(9M_BB1oP^0JtDe%L%oRW-q}UTlD7fCV}bv>-2OFP z7U^u6d%4P_L|e+zK!;@tPd&(WTw*~Sp@6@ zf07lB0|yxA%*63}P9qGcp9_Kjofrlq{6h3nx(rOzQFpj&qMn!N!|b6AU^HfYUT3Aa zqqA=q)zZz{_<*%%ZNEl#?{%1HCEP&Fz6M&~8UTLIx=NRdG)W;PqMPS?o>_x5;9z_M zat7#U|706z^yh4nA*3ONKo{Bus-~HCzW~8r6ItVjb*$7QWT{w0&oT1Db7Ochu-Kt= zO^gAr6j1B43tyd@G4xBLm8FRBehjgViE>@^1V<9{vzb`*+__+Zx%)(X&6yZ$tovbD25FI+yGklVD4$;(GG+2ch;G%qP8I)o7@4($oc3L2QBj+A!uiM z%|Exk1B`)u7O9bZx&XA!-P)pqUKA33iN zXaD-wpVPYfl{G**ot#~}>$R4d#H82@{eQB~-IG6Oh}N;`zHP>0o!@28)OkJqDk!cV z;>)_Xk%49f8$|W+_^&rG`Hzgbv%%mD>vi(Dd#N1X(Ox1H1?SH!ThLP zq9=JV_Z!_t@EiPsQ%gH(Y*s#ifDDw|A6a)ChP!lsrNI=oiSEB(AcNxE6VGS#yiS|? zhclAjVRy8V0%Zcn)MZhpTRmn8gbrbB1c5%z5a58b=JT9%fE$5b)#&453b-0qZet7&ZCH* zvo6~p~0Qzz2;@w&l zY|VO&VTaQ)+!bDFjJ*e8C$j#hzTEbDkddqD|tU8!~vB!uNU*_zuZB(gPkTFYsKA%_$v`8+MJ ziEL0bc%OS`xbIB>Cq>wCoMKqGrjD@+zf?aypKRp|W}rkiP)2qM%kOZqp#nBz*tXBy zDh~NGoHPs)?X3rp$o!Q-q zE)p$c4h#`-fZfM9ZtT06G8=`^g8NPY&rBo1N-hDQyoeLWy6CiVX0rDNHH`jf@|0sE ztXbbq4sTW!83EYN3;bi1r_Z1BwCCWsMm5&!0C;T!4V_uV{*a;hPS7JV`!df(R#V56 zOeP)BSW6sW_L%!JyIM!BL7HY$_;N0c(Y=9GfQSL~SYB%h^SiH+GYqs;0UF!`-jQpm zc#(4rRP;;~Ae?G4+8Y1-$J*cAuqaKNedrDtZ(+$m5! zMDq!<<%Jss?`ygr(lr75JjZ}&9V)KP3L5}i`ci4-1}4U~>C9mZ(F3^ti6y zz1)mf*P84fEE0e*_5-7ie&0Q({^=n!a`XqfkJ)g@=w%RVB>3zq%>wQdu{ZOYV8P%2 z{zh6f^~67gB|(sC10K}t{D4j3-e=W4x4UOY8QaX?%F*7-M6y_1-`DT1*N9yI&YE&4 zv?T@5#YUCs&1N*PQ2ZwTvP5E>D*l-D5|7Lo=Q`b|>LW4&*e9LC!8)$-I4{joE$t8A zBhLw-<{mk%o^Pmuu?bmg2CG7?Hkb-lM4y}&a9?E2`C08_Wv@ApV50}>g4*1w^w6?uO6RK$HtVKD*GBVy)gn5z5yn~H>JeVJ!Sc=c ztjK$2aRTEIftPC!dTyk>>1gx*I%#|cy3#JBq)Kyf*5K)rG=a!0y`=<-+xTeL8>g>& z#z2S;Cc9Azq3fqZ<&H+Lc3;tv=-8^fUWYn3MuxC<(DQknb@eo)2)5%qHvmFCSN00~ zY!ivr5dNGwZdbG<&#YRoszK0vHfITW08f*Zx(;0&HrG`Grvz7aMizBgm>h8J_fYM> zL16?tvFc#s+~bZRB2f7#**)iTLfwvY_$;;8jv>JgMAs8^<^B$R3q)E8@}(ig)2FHT z4cmfe2mjdVIDU<%;_p~~4RHq+9@1Jf=+@3nE@HXT7ZIH6fGi5Yp@RWxi5A0$1TZ+a zXCftJTks?e2<78``O7b7uM!Qsd-t{g7|$2coI~p%*F=rKr_VdrZG;dnHm@=g2*u%1 z25T0?0oL?}vr*2O$iktt@J>ex6qbz?NW;O=A(gCFtye8AhQmEdXq8EYZf8MsV@&h@KSrHR&!Y0MCTOOLoePf)unGe*{qa4h{pLCI4C{f|jJ8iByDUgV@0F zcGlMbJk|vV;VBO2fI5T8nQzwFN2#r#xx_dX0O|{X zI+P2eOel<`<56N9;CLZBsMLB0Q5*C)3KVHyP|%5^1K8wS>Rl)@0QVO8W2DQqH5-8g zj)M;n<}>I5!w~D-Q^7)K++0S<-81Ja-Nwl9*+o$*cms_(kV&0VgIz?KhLB=YiZ)pxN(GQRL<`2jI^EJ+EDp^&7%^gxa{rB(#-VcF3RB9P z{U90y#j-UMtR(=s^-|p4ItBzAkXdIPpaD;T>mPDzd~vdqO1bx3{->J~F?h(=kN&Ym_}o|07N%N?pZQJ~;H99!_XJtU=HG z(&RdqrvP_{$XZLFW8z8jcl?ZVc5GTfEkPn|tUHbp>!71r>ZH-@(QU}3PO5;VQCK7D z>MH6Gc#dQeskzMWXeflf>Kv$?Cmbb$XI#TTPb2=;Gmc}=YwRYPb@Z;s@dtnyY0Y;# zm`-F~@P-mCxbaNVuG)dP8xWg1hUgC+Dr!y`tnTc)oIlTH-cL=xAKGYn|K~zWtK_Q< zN)o^T0j-PZ1959EaT8M}8I*jd28!KVHF zGBjA<4ajLP0MO|9*^fFK1y6RK9B^E_Rsh8BONC}uVD+=}dr~KeBPb;}Q8m_UiKDU6s5mU|vpmER4I#UP0@2ieq1?}!u zF^TI~=fz9f?QNp51a77EFnBaL2Zl^^*+tk5=nk?~JSVleVuY;yH-?8o1C8A$^T@ql zAHX$#8f?xl1#$Mz#$OZKF$Dyi&6;1;U8@ynx z(I=&*^)<>R@&vwOX~*W6AxD4kZ5?BSVCtrPGqBg-1euI+sy6AenM)4LX8XT~zBHQF z^J6lAeUD>8DFdCqkpb4ihAX%xIET@luqVhw{Sli=1D2bN&-nf=nMZ=oUoyiJY(PVa z?D>T)&awS4T)>4>Q;aSq%Wnp(31pJeIV#E&X{nP88&MspM97)8wxf&jhwz=hd zj@U#hV)P8KoHIesH1y`T%B>>NNvKQOtnNQ9`3J#;F1b zcUW%Q03Vf^0%7Z;d{2}Ru9@xRjgItQ*NA(VIUv>@)X^k6aG&*5QO1ZN1Z?+BQw)%-;Bv14U6`n>hd|YrE;bjN&4j@se&XImAD{rSU+rbsS^? z66tIL2O291IkTs^7n~_-1nEkM^8J{)G@>Cta#5S0nJ#Ah}$7h`4bElAR6y7nqH7iw2bGK7C~XZG@_p4Mww=295T*ze4ZAS zZ(CWNDSkDyJORy|(KR}(Cc%_PG~F-|(r6}K_jHt_yv$aarRik%I<_+$afDw7EBmc+ zNS7?+g?pmjfQA$GJ*v=f4sLJX3kqLE0bVDgKzoY!nVS{r=tWc8P;O4NU+C2mzo0MVk*aip^QL%^a~GX{7PX@9$Dj zexp8;7ENX;_aqlP&r8;q-vM#}Dy-+DM5SGS_Q!qBzqcl`h@p}EY6V}1BO{PPHpT(q z^T@K)X|404BRgFGjqowJQ1!w-=bmUzVUR_gP(w?G2(Y$8rTG)RtKrDr^E?LCaGLUO zbS&!t-GQt!K%%st0s8EX0BeA*-4RQgHu#}p=Na3nbfeQezMV*|9OKL`rK>E04#uq> z*)QHpQxfz%K=2%A7YbSQq3e^&(b8V{sdzU#7K0-FkLN@N3HT9EIb=;~O&r}->Ru^z zHu7LiU_Ru1*ML79E9sUrrGS=MdKEQFtFr|vbKlzpU;#+i4Uk^SI5K8eDI(>r=TJb6 z+IMi}?&ti?&)d#v?Cs&a`re(HH@XT?=JF9xL~oWwVB;S43}9aO^B`NN_tAHDf4M>5 zYsT*QjO!%v5^3jC`(?y-#&$^8A;>C~Yi;UeT-~Dqc5|=0-`4kWehB_}|J9599q_}m z?e%!=&SBfK_NvXWuwD0-3?*Zp_dQRP`xC){I99)<+bMONH?g6={``~oW!Ay$ z?(t0TJsX(t9=F4A9fq!K?SX++>?X2>4>34wmVab)oT1|pbH^9woZ_B!nmp@6HC^1X z@?JgAGv;g{oI~wXyYz|~36Q2ktHXV5$blB`T5YCfx6AI1llke-Y>2MB=+NFjN&}W# z2mM+u!QD^5(10-xDy13uJlPxA%)xk1Q~S#Bd7LMLer3GSl&f@XM*tyjIJVOm1PZvR z9j>KLg*nkiKiCdyfyQZ3j^?}KR_A6Ns#D$8fW>5-u*beZFs@uupN7+Us$<$+6sHIF zK+j_Xqa8uf8pESqQFca_EM>`SIhRfLR^AIMj>6EIs5$@rb+LkV%lS9h4B5{6Wm347 zFtEm%z=?v*q&?|+0k)*O$L5;BjPAY)O%sReF7_Rnz77lI_3K~tDc-($d-m@4TOA(k zw2qSYjYbr?Zv)U^xF&=6+Muyrmt9-dvCY$zqWpQ2j4(PDyUpD?Do1_UeQ2Yc) Date: Fri, 4 Sep 2020 17:53:13 -0700 Subject: [PATCH 48/75] Update symantec-to-microsoft-defender-atp-migration.md --- .../symantec-to-microsoft-defender-atp-migration.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-migration.md b/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-migration.md index 121b141f1d..73d8f278b2 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-migration.md +++ b/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-migration.md @@ -42,7 +42,7 @@ In this migration guide, we focus on [next-generation protection](https://docs.m | Feature/Capability | Description | |---|---| -| [Threat & Vulnerability Management](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/next-gen-threat-and-vuln-mgt) | Threat & Vulnerability Management capabilities helps identify, assess, and remediate weaknesses across your endpoints (such as devices). | +| [Threat & vulnerability management](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/next-gen-threat-and-vuln-mgt) | Threat & vulnerability management capabilities help identify, assess, and remediate weaknesses across your endpoints (such as devices). | | [Attack surface reduction](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/overview-attack-surface-reduction) | Attack surface reduction rules help protect your organization's devices and applications from cyberthreats and attacks. | | [Next-generation protection](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-antivirus/windows-defender-antivirus-in-windows-10) | Next-generation protection includes Microsoft Defender Antivirus to help block threats and malware. | | [Endpoint detection and response](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/overview-endpoint-detection-response) | Endpoint detection and response capabilities detect, investigate, and respond to intrusion attempts and active breaches. | From 33f122e17158a9827bd8c9dc1c5e4f032623885c Mon Sep 17 00:00:00 2001 From: Sunayana Singh Date: Sun, 6 Sep 2020 21:55:10 +0530 Subject: [PATCH 49/75] Adding license terms for Microsoft Defender ATP for iOS --- .../microsoft-defender-atp/ios-terms.md | 226 ++++++++++++++++++ 1 file changed, 226 insertions(+) create mode 100644 windows/security/threat-protection/microsoft-defender-atp/ios-terms.md diff --git a/windows/security/threat-protection/microsoft-defender-atp/ios-terms.md b/windows/security/threat-protection/microsoft-defender-atp/ios-terms.md new file mode 100644 index 0000000000..660d37fc0a --- /dev/null +++ b/windows/security/threat-protection/microsoft-defender-atp/ios-terms.md @@ -0,0 +1,226 @@ +--- +title: Microsoft Defender ATP for iOS Application license terms +ms.reviewer: +description: Describes the Microsoft Defender ATP for iOS license terms +keywords: microsoft, defender, atp, iOS, license, terms, application, use, installation, service, feedback, scope, +search.product: eADQiWindows 10XVcnh +search.appverid: met150 +ms.prod: w10 +ms.mktglfcycl: deploy +ms.sitesec: library +ms.pagetype: security +ms.author: sunasing +author: sunasing +ms.localizationpriority: medium +manager: dansimp +audience: ITPro +ms.collection: M365-security-compliance +ms.topic: conceptual +hideEdit: true +--- + +# Microsoft Defender ATP for iOS application license terms + +## MICROSOFT APPLICATION LICENSE TERMS: MICROSOFT DEFENDER ATP + +These license terms ("Terms") are an agreement between Microsoft Corporation (or +based on where you live, one of its affiliates) and you. Please read them. They +apply to the application named above. These Terms also apply to any Microsoft + +- updates, + +- supplements, + +- Internet-based services, and + +- support services + +for this application, unless other terms accompany those items. If so, those +terms apply. + +**BY USING THE APPLICATION, YOU ACCEPT THESE TERMS. IF YOU DO NOT ACCEPT THEM, +DO NOT USE THE APPLICATION.** + +**If you comply with these Terms, you have the perpetual rights below.** + +1. **INSTALLATION AND USE RIGHTS.** + + 1. **Installation and Use.** You may install and use any number of copies + of this application on iOS enabled device or devices which you own + or control. You may use this application with your company's valid + subscription of Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP) or + an online service that includes MDATP functionalities. + + 2. **Updates.** Updates or upgrades to MDATP may be required for full + functionality. Some functionality may not be available in all countries. + + 3. **Third Party Programs.** The application may include third party + programs that Microsoft, not the third party, licenses to you under this + agreement. Notices, if any, for the third-party program are included for + your information only. + +2. **INTERNET ACCESS MAY BE REQUIRED.** You may incur charges related to + Internet access, data transfer and other services per the terms of the data + service plan and any other agreement you have with your network operator due + to use of the application. You are solely responsible for any network + operator charges. + +3. **INTERNET-BASED SERVICES.** Microsoft provides Internet-based services with + the application. It may change or cancel them at any time. + + 1. Consent for Internet-Based or Wireless Services. The application may + connect to Internet-based wireless services. Your use of the application + operates as your consent to the transmission of standard device + information (including but not limited to technical information about + your device, system and application software, and peripherals) for + Internet-based or wireless services. If other terms are provided in + connection with your use of the services, those terms also apply. + + - Data. Some online services require, or may be enhanced by, the + installation of local software like this one. At your, or your + admin's direction, this software may send data from a device to or + from an online service. + + - Usage Data. Microsoft automatically collects usage and performance + data over the internet. This data will be used to provide and + improve Microsoft products and services and enhance your experience. + You may limit or control collection of some usage and performance + data through your device settings. Doing so may disrupt your use of + certain features of the application. For additional information on + Microsoft's data collection and use, see the [Online Services + Terms](https://go.microsoft.com/fwlink/?linkid=2106777). + + 2. Misuse of Internet-based Services. You may not use any Internet-based + service in any way that could harm it or impair anyone else's use of it + or the wireless network. You may not use the service to try to gain + unauthorized access to any service, data, account or network by any + means. + +4. **FEEDBACK.** If you give feedback about the application to Microsoft, you + give to Microsoft, without charge, the right to use, share and commercialize + your feedback in any way and for any purpose. You also give to third + parties, without charge, any patent rights needed for their products, + technologies and services to use or interface with any specific parts of a + Microsoft software or service that includes the feedback. You will not give + feedback that is subject to a license that requires Microsoft to license its + software or documentation to third parties because we include your feedback + in them. These rights survive this agreement. + +5. **SCOPE OF LICENSE.** The application is licensed, not sold. This agreement + only gives you some rights to use the application. Microsoft reserves all + other rights. Unless applicable law gives you more rights despite this + limitation, you may use the application only as expressly permitted in this + agreement. In doing so, you must comply with any technical limitations in + the application that only allow you to use it in certain ways. You may not + + - work around any technical limitations in the application; + + - reverse engineer, decompile or disassemble the application, except and + only to the extent that applicable law expressly permits, despite this + limitation; + + - make more copies of the application than specified in this agreement or + allowed by applicable law, despite this limitation; + + - publish the application for others to copy; + + - rent, lease or lend the application; or + + - transfer the application or this agreement to any third party. + +6. **EXPORT RESTRICTIONS.** The application is subject to United States export + laws and regulations. You must comply with all domestic and international + export laws and regulations that apply to the application. These laws + include restrictions on destinations, end users and end use. For additional + information, + see�[www.microsoft.com/exporting](https://www.microsoft.com/exporting). + +7. **SUPPORT SERVICES.** Because this application is "as is," we may not + provide support services for it. If you have any issues or questions about + your use of this application, including questions about your company's + privacy policy, please contact your company's admin. Do not contact the + application store, your network operator, device manufacturer, or Microsoft. + The application store provider has no obligation to furnish support or + maintenance with respect to the application. + +8. **APPLICATION STORE.** + + 1. If you obtain the application through an application store (e.g., App + Store), please review the applicable application store terms to ensure + your download and use of the application complies with such terms. + Please note that these Terms are between you and Microsoft and not with + the application store. + + 2. The respective application store provider and its subsidiaries are third + party beneficiaries of these Terms, and upon your acceptance of these + Terms, the application store provider(s) will have the right to directly + enforce and rely upon any provision of these Terms that grants them a + benefit or rights. + +9. **TRADEMARK NOTICES.** Microsoft, Microsoft Defender ATP, MDATP, and + Microsoft 365 are registered or common-law trademarks of Microsoft + Corporation in the United States and/or other countries. + +10. **ENTIRE AGREEMENT.** This agreement and the terms for supplements, updates, + Internet-based services, and support services that you use are the entire + agreement for the application and support services. + +11. **APPLICABLE LAW.** + + 1. **United States.** If you acquired the application in the United States, + Washington state law governs the interpretation of this agreement and + applies to claims for breach of it, regardless of conflict of laws + principles. The laws of the state where you live govern all other + claims, including claims under state consumer protection laws, unfair + competition laws, and in tort. + + 2. **Outside the United States.** If you acquired the application in any + other country, the laws of that country apply. + +12. **LEGAL EFFECT.** This agreement describes certain legal rights. You may + have other rights under the laws of your country. You may also have rights + with respect to the party from whom you acquired the application. This + agreement does not change your rights under the laws of your country if the + laws of your country do not permit it to do so. + +13. **DISCLAIMER OF WARRANTY. THE APPLICATION IS LICENSED "AS-IS." "WITH ALL + FAULTS," AND "AS AVAILABLE." YOU BEAR THE RISK OF USING IT. MICROSOFT AND + WIRELESS CARRIERS OVER WHOSE NETWORK THE APPLICATION IS DISTRIBUTED, AND + EACH OF OUR RESPECTIVE AFFILIATES, AND SUPPLIERS ("COVERED PARTIES") GIVE NO + EXPRESS WARRANTIES, GUARANTEES OR CONDITIONS UNDER OR IN RELATION TO THE + APPLICATION. THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE + APPLICATION IS WITH YOU. SHOULD THE APPLICATION BE DEFECTIVE, YOU ASSUME THE + ENTIRE COST OF ALL NECESSARY SERVICING OR REPAIR. YOU MAY HAVE ADDITIONAL + CONSUMER RIGHTS UNDER YOUR LOCAL LAWS WHICH THIS AGREEMENT CANNOT CHANGE. TO + THE EXTENT PERMITTED UNDER YOUR LOCAL LAWS, COVERED PARTIES EXCLUDE THE + IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND + NON-INFRINGEMENT.** + + **FOR AUSTRALIA - YOU HAVE STATUTORY GUARANTEES UNDER THE AUSTRALIAN CONSUMER LAW AND NOTHING IN THESE TERMS IS INTENDED TO AFFECT THOSE RIGHTS.** + +14. **LIMITATION ON AND EXCLUSION OF REMEDIES AND DAMAGES. TO THE EXTENT NOT + PROHIBITED BY LAW, YOU CAN RECOVER FROM MICROSOFT ONLY DIRECT DAMAGES UP TO + ONE U.S. DOLLAR (\$1.00). YOU AGREE NOT TO SEEK TO RECOVER ANY OTHER + DAMAGES, INCLUDING CONSEQUENTIAL, LOST PROFITS, SPECIAL, INDIRECT OR + INCIDENTAL DAMAGES FROM ANY COVERED PARTIES.** + +This limitation applies to: + +- anything related to the application, services, content (including code) on + third party Internet sites, or third party programs; and + +- claims for breach of contract, warranty, guarantee or condition; consumer + protection; deception; unfair competition; strict liability, negligence, + misrepresentation, omission, trespass or other tort; violation of statute or + regulation; or unjust enrichment; all to the extent permitted by applicable + law. + +It also applies even if: + +a. Repair, replacement or refund for the application does not fully compensate + you for any losses; or + +b. Covered Parties knew or should have known about the possibility of the + damages. + +The above limitation or exclusion may not apply to you because your country may not allow the exclusion or limitation of incidental, consequential or other damages. From 1447245ec84e96c81f6ce4748ce8e3c6f74aed66 Mon Sep 17 00:00:00 2001 From: Sunayana Singh <57405155+sunasing@users.noreply.github.com> Date: Mon, 7 Sep 2020 07:34:27 +0530 Subject: [PATCH 50/75] Updating minor change --- .../threat-protection/microsoft-defender-atp/ios-terms.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/ios-terms.md b/windows/security/threat-protection/microsoft-defender-atp/ios-terms.md index 660d37fc0a..1a7490d88e 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/ios-terms.md +++ b/windows/security/threat-protection/microsoft-defender-atp/ios-terms.md @@ -133,7 +133,7 @@ DO NOT USE THE APPLICATION.** export laws and regulations that apply to the application. These laws include restrictions on destinations, end users and end use. For additional information, - see�[www.microsoft.com/exporting](https://www.microsoft.com/exporting). + see [www.microsoft.com/exporting](https://www.microsoft.com/exporting). 7. **SUPPORT SERVICES.** Because this application is "as is," we may not provide support services for it. If you have any issues or questions about From f2ddc0853746d0d09617af02ac444b9a5c6643cb Mon Sep 17 00:00:00 2001 From: Paul Huijbregts <30799281+pahuijbr@users.noreply.github.com> Date: Mon, 7 Sep 2020 08:54:29 +0200 Subject: [PATCH 51/75] Update manage-updates-baselines-microsoft-defender-antivirus.md --- .../manage-updates-baselines-microsoft-defender-antivirus.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-baselines-microsoft-defender-antivirus.md b/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-baselines-microsoft-defender-antivirus.md index c8bcc9a9ad..fcabcac930 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-baselines-microsoft-defender-antivirus.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-baselines-microsoft-defender-antivirus.md @@ -63,7 +63,7 @@ All our updates contain:  Security intelligence update version: **1.323.9.0**  Released: **August 27, 2020** - Platform: **4.18.2008.3** + Platform: **4.18.2008.9**  Engine: **1.1.17400.5**  Support phase: **Security and Critical Updates** From b0d7b39c16a2ab7bf8c40758c43f972dbb40fe42 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Mon, 7 Sep 2020 11:16:14 -0700 Subject: [PATCH 52/75] Update manage-updates-baselines-microsoft-defender-antivirus.md --- .../manage-updates-baselines-microsoft-defender-antivirus.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-baselines-microsoft-defender-antivirus.md b/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-baselines-microsoft-defender-antivirus.md index fcabcac930..4c02e69f31 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-baselines-microsoft-defender-antivirus.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-baselines-microsoft-defender-antivirus.md @@ -13,7 +13,7 @@ ms.author: deniseb ms.custom: nextgen ms.reviewer: manager: dansimp -ms.date: 09/04/2020 +ms.date: 09/07/2020 --- # Manage Microsoft Defender Antivirus updates and apply baselines From 1d2e4c3ee8b89a2fce43c1e0c2754b10cc009d55 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Tue, 8 Sep 2020 12:04:16 -0700 Subject: [PATCH 53/75] Create migration-guides.md --- migration-guides.md | 0 1 file changed, 0 insertions(+), 0 deletions(-) create mode 100644 migration-guides.md diff --git a/migration-guides.md b/migration-guides.md new file mode 100644 index 0000000000..e69de29bb2 From 3c4a78c41b0ea80c708c3716de3b070295b72bc9 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Tue, 8 Sep 2020 12:32:00 -0700 Subject: [PATCH 54/75] landing page for migration guides --- migration-guides.md | 0 .../migration-guides.md | 42 +++++++++++++++++++ 2 files changed, 42 insertions(+) delete mode 100644 migration-guides.md create mode 100644 windows/security/threat-protection/microsoft-defender-atp/migration-guides.md diff --git a/migration-guides.md b/migration-guides.md deleted file mode 100644 index e69de29bb2..0000000000 diff --git a/windows/security/threat-protection/microsoft-defender-atp/migration-guides.md b/windows/security/threat-protection/microsoft-defender-atp/migration-guides.md new file mode 100644 index 0000000000..44b58512e2 --- /dev/null +++ b/windows/security/threat-protection/microsoft-defender-atp/migration-guides.md @@ -0,0 +1,42 @@ +--- +title: Make the switch to Microsoft Defender ATP +description: Learn how to make the switch from a non-Microsoft threat protection solution to Microsoft Defender ATP +search.appverid: MET150 +author: denisebmsft +ms.author: deniseb +manager: dansimp +audience: ITPro +ms.topic: conceptual +ms.date: 09/08/2020 +ms.prod: w10 +ms.localizationpriority: medium +ms.collection: +- m365solution-overview +- M365-security-compliance +ms.custom: migrationguides +ms.reviewer: +f1.keywords: NOCSH +--- + +# Make the switch to Microsoft Defender ATP and Microsoft Defender Antivirus + +If you're considering switching from a non-Microsoft threat protection solution to Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP) with Microsoft Defender Antivirus, check out our migration guidance. + +|Scenario |Guidance | +|:---------|:---------| +|Migrate from McAfee Endpoint Security (McAfee) to Microsoft Defender ATP |[Migrate from McAfee to Microsoft Defender Advanced Threat Protection](mcafee-to-microsoft-defender-migration.md) | +|Migrate from Symantec Endpoint Protection (Symantec) to Microsoft Defender ATP |[Migrate from Symantec to Microsoft Defender Advanced Threat Protection](symantec-to-microsoft-defender-atp-migration.md) | +|After you've migrated to Microsoft Defender ATP with Microsoft Defender Antivirus, manage and fine tune your threat protection settings |[Manage Microsoft Defender Advanced Threat Protection, post migration](manage-atp-post-migration.md) | + + +## Got feedback? + +Let us know what you think! Submit your feedback at the bottom of the page. We'll take your feedback into account as we continue to improve and add to our migration guidance. + +## See also + +- [Microsoft Defender ATP](https://docs.microsoft.com/windows/security/threat-protection) + +- [Office 365 Advanced Threat Protection](https://docs.microsoft.com/microsoft-365/security/office-365-security/office-365-atp?view=o365-worldwide) + +- [Microsoft Threat Protection](https://docs.microsoft.com/microsoft-365/security/mtp/microsoft-threat-protection?view=o365-worldwide) \ No newline at end of file From 9438eb39a4548f9ea41f63d98114689e470bc9a8 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Tue, 8 Sep 2020 12:34:32 -0700 Subject: [PATCH 55/75] Update TOC.md --- windows/security/threat-protection/TOC.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/TOC.md b/windows/security/threat-protection/TOC.md index c0ca6d3de3..0ec64812e8 100644 --- a/windows/security/threat-protection/TOC.md +++ b/windows/security/threat-protection/TOC.md @@ -20,7 +20,7 @@ ### [Phase 2: Set up](microsoft-defender-atp/production-deployment.md) ### [Phase 3: Onboard](microsoft-defender-atp/onboarding.md) -## [Migration guides]() +## [Migration guides](microsoft-defender-atp/migration-guides.md) ### [Switch from McAfee to Microsoft Defender ATP]() #### [Get an overview of migration](microsoft-defender-atp/mcafee-to-microsoft-defender-migration.md) #### [Prepare for your migration](microsoft-defender-atp/mcafee-to-microsoft-defender-prepare.md) From d6899bcaf2442428ca2cd0d943272e19458987b0 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Tue, 8 Sep 2020 12:36:59 -0700 Subject: [PATCH 56/75] Update migration-guides.md --- .../microsoft-defender-atp/migration-guides.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/migration-guides.md b/windows/security/threat-protection/microsoft-defender-atp/migration-guides.md index 44b58512e2..338d7f2229 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/migration-guides.md +++ b/windows/security/threat-protection/microsoft-defender-atp/migration-guides.md @@ -22,7 +22,7 @@ f1.keywords: NOCSH If you're considering switching from a non-Microsoft threat protection solution to Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP) with Microsoft Defender Antivirus, check out our migration guidance. -|Scenario |Guidance | +|For this scenario... |See this guide... | |:---------|:---------| |Migrate from McAfee Endpoint Security (McAfee) to Microsoft Defender ATP |[Migrate from McAfee to Microsoft Defender Advanced Threat Protection](mcafee-to-microsoft-defender-migration.md) | |Migrate from Symantec Endpoint Protection (Symantec) to Microsoft Defender ATP |[Migrate from Symantec to Microsoft Defender Advanced Threat Protection](symantec-to-microsoft-defender-atp-migration.md) | From f178eecff88279bf15c3b9d4bbc58aa5b9a64bde Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Tue, 8 Sep 2020 12:38:07 -0700 Subject: [PATCH 57/75] Update migration-guides.md --- .../microsoft-defender-atp/migration-guides.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/migration-guides.md b/windows/security/threat-protection/microsoft-defender-atp/migration-guides.md index 338d7f2229..af6b272a31 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/migration-guides.md +++ b/windows/security/threat-protection/microsoft-defender-atp/migration-guides.md @@ -24,9 +24,9 @@ If you're considering switching from a non-Microsoft threat protection solution |For this scenario... |See this guide... | |:---------|:---------| -|Migrate from McAfee Endpoint Security (McAfee) to Microsoft Defender ATP |[Migrate from McAfee to Microsoft Defender Advanced Threat Protection](mcafee-to-microsoft-defender-migration.md) | -|Migrate from Symantec Endpoint Protection (Symantec) to Microsoft Defender ATP |[Migrate from Symantec to Microsoft Defender Advanced Threat Protection](symantec-to-microsoft-defender-atp-migration.md) | -|After you've migrated to Microsoft Defender ATP with Microsoft Defender Antivirus, manage and fine tune your threat protection settings |[Manage Microsoft Defender Advanced Threat Protection, post migration](manage-atp-post-migration.md) | +|Make the switch from McAfee Endpoint Security (McAfee) to Microsoft Defender ATP |[Migrate from McAfee to Microsoft Defender Advanced Threat Protection](mcafee-to-microsoft-defender-migration.md) | +|Make the switch from Symantec Endpoint Protection (Symantec) to Microsoft Defender ATP |[Migrate from Symantec to Microsoft Defender Advanced Threat Protection](symantec-to-microsoft-defender-atp-migration.md) | +|Manage and fine-tune your threat protection settings after you have made the switch to Microsoft Defender ATP with Microsoft Defender Antivirus |[Manage Microsoft Defender Advanced Threat Protection, post migration](manage-atp-post-migration.md) | ## Got feedback? From c252596d6d31e84b10fa5dd7303a7f764e9b73d7 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Tue, 8 Sep 2020 12:55:18 -0700 Subject: [PATCH 58/75] Update migration-guides.md --- .../microsoft-defender-atp/migration-guides.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/migration-guides.md b/windows/security/threat-protection/microsoft-defender-atp/migration-guides.md index af6b272a31..1e53126cba 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/migration-guides.md +++ b/windows/security/threat-protection/microsoft-defender-atp/migration-guides.md @@ -22,10 +22,10 @@ f1.keywords: NOCSH If you're considering switching from a non-Microsoft threat protection solution to Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP) with Microsoft Defender Antivirus, check out our migration guidance. -|For this scenario... |See this guide... | +|For this scenario |See this guide | |:---------|:---------| -|Make the switch from McAfee Endpoint Security (McAfee) to Microsoft Defender ATP |[Migrate from McAfee to Microsoft Defender Advanced Threat Protection](mcafee-to-microsoft-defender-migration.md) | -|Make the switch from Symantec Endpoint Protection (Symantec) to Microsoft Defender ATP |[Migrate from Symantec to Microsoft Defender Advanced Threat Protection](symantec-to-microsoft-defender-atp-migration.md) | +|Make the switch from McAfee Endpoint Security (McAfee) to Microsoft Defender ATP |[Migrate from McAfee to Microsoft Defender ATP](mcafee-to-microsoft-defender-migration.md) | +|Make the switch from Symantec Endpoint Protection (Symantec) to Microsoft Defender ATP |[Migrate from Symantec to Microsoft Defender ATP](symantec-to-microsoft-defender-atp-migration.md) | |Manage and fine-tune your threat protection settings after you have made the switch to Microsoft Defender ATP with Microsoft Defender Antivirus |[Manage Microsoft Defender Advanced Threat Protection, post migration](manage-atp-post-migration.md) | From d0aec0d973bf30768808ed625237663305159e69 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Tue, 8 Sep 2020 12:58:52 -0700 Subject: [PATCH 59/75] Update migration-guides.md --- .../microsoft-defender-atp/migration-guides.md | 14 ++++++++------ 1 file changed, 8 insertions(+), 6 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/migration-guides.md b/windows/security/threat-protection/microsoft-defender-atp/migration-guides.md index 1e53126cba..d9ccf5b0e5 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/migration-guides.md +++ b/windows/security/threat-protection/microsoft-defender-atp/migration-guides.md @@ -20,13 +20,15 @@ f1.keywords: NOCSH # Make the switch to Microsoft Defender ATP and Microsoft Defender Antivirus -If you're considering switching from a non-Microsoft threat protection solution to Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP) with Microsoft Defender Antivirus, check out our migration guidance. +## Migration guides -|For this scenario |See this guide | -|:---------|:---------| -|Make the switch from McAfee Endpoint Security (McAfee) to Microsoft Defender ATP |[Migrate from McAfee to Microsoft Defender ATP](mcafee-to-microsoft-defender-migration.md) | -|Make the switch from Symantec Endpoint Protection (Symantec) to Microsoft Defender ATP |[Migrate from Symantec to Microsoft Defender ATP](symantec-to-microsoft-defender-atp-migration.md) | -|Manage and fine-tune your threat protection settings after you have made the switch to Microsoft Defender ATP with Microsoft Defender Antivirus |[Manage Microsoft Defender Advanced Threat Protection, post migration](manage-atp-post-migration.md) | +If you're considering switching from a non-Microsoft threat protection solution to Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP) with Microsoft Defender Antivirus, check out our migration guidance. + +- [Migrate from McAfee to Microsoft Defender ATP](mcafee-to-microsoft-defender-migration.md) + +- [Migrate from Symantec to Microsoft Defender ATP](symantec-to-microsoft-defender-atp-migration.md) + +- [Manage Microsoft Defender Advanced Threat Protection, post migration](manage-atp-post-migration.md) ## Got feedback? From 8f26bfff7ed2b529ec9797c346e8886bff0b31fd Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Tue, 8 Sep 2020 13:01:52 -0700 Subject: [PATCH 60/75] Update migration-guides.md --- .../microsoft-defender-atp/migration-guides.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/migration-guides.md b/windows/security/threat-protection/microsoft-defender-atp/migration-guides.md index d9ccf5b0e5..4c04b3d316 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/migration-guides.md +++ b/windows/security/threat-protection/microsoft-defender-atp/migration-guides.md @@ -24,9 +24,9 @@ f1.keywords: NOCSH If you're considering switching from a non-Microsoft threat protection solution to Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP) with Microsoft Defender Antivirus, check out our migration guidance. -- [Migrate from McAfee to Microsoft Defender ATP](mcafee-to-microsoft-defender-migration.md) +- [Make the switch from McAfee Endpoint Security (McAfee) to Microsoft Defender ATP](mcafee-to-microsoft-defender-migration.md) -- [Migrate from Symantec to Microsoft Defender ATP](symantec-to-microsoft-defender-atp-migration.md) +- [Make the switch from Symantec Endpoint Protection (Symantec) to Microsoft Defender ATP](symantec-to-microsoft-defender-atp-migration.md) - [Manage Microsoft Defender Advanced Threat Protection, post migration](manage-atp-post-migration.md) From 58bba1cc8d13c9e7278af70333127e453aa961f9 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Tue, 8 Sep 2020 13:05:13 -0700 Subject: [PATCH 61/75] Update migration-guides.md --- .../microsoft-defender-atp/migration-guides.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/migration-guides.md b/windows/security/threat-protection/microsoft-defender-atp/migration-guides.md index 4c04b3d316..412d736b92 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/migration-guides.md +++ b/windows/security/threat-protection/microsoft-defender-atp/migration-guides.md @@ -39,6 +39,6 @@ Let us know what you think! Submit your feedback at the bottom of the page. We'l - [Microsoft Defender ATP](https://docs.microsoft.com/windows/security/threat-protection) -- [Office 365 Advanced Threat Protection](https://docs.microsoft.com/microsoft-365/security/office-365-security/office-365-atp?view=o365-worldwide) +- [Office 365 Advanced Threat Protection](https://docs.microsoft.com/microsoft-365/security/office-365-security/office-365-atp) -- [Microsoft Threat Protection](https://docs.microsoft.com/microsoft-365/security/mtp/microsoft-threat-protection?view=o365-worldwide) \ No newline at end of file +- [Microsoft Threat Protection](https://docs.microsoft.com/microsoft-365/security/mtp/microsoft-threat-protection?) \ No newline at end of file From f764b07c100410e2b74c44dd8c946a8f4a345a0d Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Tue, 8 Sep 2020 13:08:13 -0700 Subject: [PATCH 62/75] Update migration-guides.md --- .../microsoft-defender-atp/migration-guides.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/migration-guides.md b/windows/security/threat-protection/microsoft-defender-atp/migration-guides.md index 412d736b92..40267dfcd6 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/migration-guides.md +++ b/windows/security/threat-protection/microsoft-defender-atp/migration-guides.md @@ -24,11 +24,11 @@ f1.keywords: NOCSH If you're considering switching from a non-Microsoft threat protection solution to Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP) with Microsoft Defender Antivirus, check out our migration guidance. -- [Make the switch from McAfee Endpoint Security (McAfee) to Microsoft Defender ATP](mcafee-to-microsoft-defender-migration.md) +- [McAfee Endpoint Security (McAfee) to Microsoft Defender ATP](mcafee-to-microsoft-defender-migration.md) -- [Make the switch from Symantec Endpoint Protection (Symantec) to Microsoft Defender ATP](symantec-to-microsoft-defender-atp-migration.md) +- [Symantec Endpoint Protection (Symantec) to Microsoft Defender ATP](symantec-to-microsoft-defender-atp-migration.md) -- [Manage Microsoft Defender Advanced Threat Protection, post migration](manage-atp-post-migration.md) +- [Manage Microsoft Defender Advanced Threat Protection, after you've migrated](manage-atp-post-migration.md) ## Got feedback? From 4eb46690e39cefd91c63b2f55610e017c03ddbbe Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Tue, 8 Sep 2020 13:11:31 -0700 Subject: [PATCH 63/75] ms.custom: migrationguides --- .../mcafee-to-microsoft-defender-migration.md | 1 + .../mcafee-to-microsoft-defender-onboard.md | 1 + .../mcafee-to-microsoft-defender-prepare.md | 1 + .../microsoft-defender-atp/mcafee-to-microsoft-defender-setup.md | 1 + .../threat-protection/microsoft-defender-atp/migration-guides.md | 1 - .../symantec-to-microsoft-defender-atp-migration.md | 1 + .../symantec-to-microsoft-defender-atp-onboard.md | 1 + .../symantec-to-microsoft-defender-atp-prepare.md | 1 + .../symantec-to-microsoft-defender-atp-setup.md | 1 + 9 files changed, 8 insertions(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-migration.md b/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-migration.md index d5419822d8..9676eaf9e7 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-migration.md +++ b/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-migration.md @@ -18,6 +18,7 @@ ms.collection: - m365solution-mcafeemigrate - m365solution-overview ms.topic: conceptual +ms.custom: migrationguides ms.date: 09/03/2020 ms.reviewer: jesquive, chventou, jonix, chriggs, owtho --- diff --git a/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-onboard.md b/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-onboard.md index 4b65da3b72..fcd726467f 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-onboard.md +++ b/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-onboard.md @@ -16,6 +16,7 @@ audience: ITPro ms.collection: - M365-security-compliance - m365solution-McAfeemigrate +ms.custom: migrationguides ms.topic: article ms.date: 09/03/2020 ms.reviewer: jesquive, chventou, jonix, chriggs, owtho diff --git a/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-prepare.md b/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-prepare.md index f0d4ddd065..257ff56b22 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-prepare.md +++ b/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-prepare.md @@ -17,6 +17,7 @@ ms.collection: - M365-security-compliance - m365solution-mcafeemigrate ms.topic: article +ms.custom: migrationguides ms.date: 09/03/2020 ms.reviewer: jesquive, chventou, jonix, chriggs, owtho --- diff --git a/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-setup.md b/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-setup.md index e2a9c56a95..035c8a87b0 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-setup.md +++ b/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-setup.md @@ -17,6 +17,7 @@ ms.collection: - M365-security-compliance - m365solution-mcafeemigrate ms.topic: article +ms.custom: migrationguides ms.date: 09/03/2020 ms.reviewer: jesquive, chventou, jonix, chriggs, owtho --- diff --git a/windows/security/threat-protection/microsoft-defender-atp/migration-guides.md b/windows/security/threat-protection/microsoft-defender-atp/migration-guides.md index 40267dfcd6..d3a7ef19e7 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/migration-guides.md +++ b/windows/security/threat-protection/microsoft-defender-atp/migration-guides.md @@ -11,7 +11,6 @@ ms.date: 09/08/2020 ms.prod: w10 ms.localizationpriority: medium ms.collection: -- m365solution-overview - M365-security-compliance ms.custom: migrationguides ms.reviewer: diff --git a/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-migration.md b/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-migration.md index 73d8f278b2..2a73defc07 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-migration.md +++ b/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-migration.md @@ -19,6 +19,7 @@ ms.collection: - m365solution-overview ms.topic: conceptual ms.date: 09/04/2020 +ms.custom: migrationguides ms.reviewer: depicker, yongrhee, chriggs --- diff --git a/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-onboard.md b/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-onboard.md index 87f80f841f..a9c3ab2815 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-onboard.md +++ b/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-onboard.md @@ -18,6 +18,7 @@ ms.collection: - m365solution-symantecmigrate ms.topic: article ms.date: 09/04/2020 +ms.custom: migrationguides ms.reviewer: depicker, yongrhee, chriggs --- diff --git a/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-prepare.md b/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-prepare.md index a983531f0c..96a50c8c54 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-prepare.md +++ b/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-prepare.md @@ -18,6 +18,7 @@ ms.collection: - m365solution-symantecmigrate ms.topic: article ms.date: 09/04/2020 +ms.custom: migrationguides ms.reviewer: depicker, yongrhee, chriggs --- diff --git a/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-setup.md b/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-setup.md index e3dd61e48d..56c0eb3220 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-setup.md +++ b/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-setup.md @@ -18,6 +18,7 @@ ms.collection: - m365solution-symantecmigrate ms.topic: article ms.date: 09/04/2020 +ms.custom: migrationguides ms.reviewer: depicker, yongrhee, chriggs --- From f46506a7d60619e88ccdc45d26de75ad47717982 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Tue, 8 Sep 2020 13:12:39 -0700 Subject: [PATCH 64/75] Update migration-guides.md --- .../microsoft-defender-atp/migration-guides.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/migration-guides.md b/windows/security/threat-protection/microsoft-defender-atp/migration-guides.md index d3a7ef19e7..86914d9a44 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/migration-guides.md +++ b/windows/security/threat-protection/microsoft-defender-atp/migration-guides.md @@ -13,7 +13,7 @@ ms.localizationpriority: medium ms.collection: - M365-security-compliance ms.custom: migrationguides -ms.reviewer: +ms.reviewer: chriggs, depicker, yongrhee f1.keywords: NOCSH --- From a1834bd065a8b67d6615fcad0a6985b89659aae3 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Tue, 8 Sep 2020 13:20:01 -0700 Subject: [PATCH 65/75] Update mcafee-to-microsoft-defender-setup.md --- .../mcafee-to-microsoft-defender-setup.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-setup.md b/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-setup.md index 035c8a87b0..9d3017e042 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-setup.md +++ b/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-setup.md @@ -130,7 +130,7 @@ Microsoft Defender Antivirus can run alongside McAfee if you set Microsoft Defen |Method |What to do | |---------|---------| |Command Prompt |1. On a Windows device, open Command Prompt as an administrator.

    2. Type `sc query windefend`, and then press Enter.

    3. Review the results to confirm that Microsoft Defender Antivirus is running in passive mode. | -|PowerShell |1. On a Windows device, open Windows PowerShell as an administrator.

    2. Run the [Get-MpComputerStatus](https://docs.microsoft.com/powershell/module/defender/Get-MpComputerStatus?view=win10-ps) cmdlet.

    3. In the list of results, look for **AntivirusEnabled: True**. | +|PowerShell |1. On a Windows device, open Windows PowerShell as an administrator.

    2. Run the [Get-MpComputerStatus](https://docs.microsoft.com/powershell/module/defender/Get-MpComputerStatus) cmdlet.

    3. In the list of results, look for **AntivirusEnabled: True**. | > [!NOTE] > You might see *Windows Defender Antivirus* instead of *Microsoft Defender Antivirus* in some versions of Windows. From 77814ab6320724c2de76c21cbdd1d5718dba47cc Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Tue, 8 Sep 2020 13:20:41 -0700 Subject: [PATCH 66/75] Update symantec-to-microsoft-defender-atp-migration.md --- .../symantec-to-microsoft-defender-atp-migration.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-migration.md b/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-migration.md index 2a73defc07..119fa1005e 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-migration.md +++ b/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-migration.md @@ -1,6 +1,6 @@ --- title: Migrate from Symantec to Microsoft Defender ATP -description: Make the switch from Symantec to Microsoft Defender ATP +description: Get an overview of how to make the switch from Symantec to Microsoft Defender ATP keywords: migration, windows defender advanced threat protection, atp, edr search.product: eADQiWindows 10XVcnh search.appverid: met150 From 0b866f7db812056d51e21afd3124c23e6b15a311 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Tue, 8 Sep 2020 13:22:17 -0700 Subject: [PATCH 67/75] fixing suggestions --- .../symantec-to-microsoft-defender-atp-onboard.md | 2 +- .../symantec-to-microsoft-defender-atp-setup.md | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-onboard.md b/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-onboard.md index a9c3ab2815..ef82adfcff 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-onboard.md +++ b/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-onboard.md @@ -1,6 +1,6 @@ --- title: Phase 3 - Onboard to Microsoft Defender ATP -description: Make the switch from Symantec to Microsoft Defender ATP +description: This is Phase 3, Onboarding, of making the switch from Symantec to Microsoft Defender ATP keywords: migration, windows defender advanced threat protection, atp, edr search.product: eADQiWindows 10XVcnh search.appverid: met150 diff --git a/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-setup.md b/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-setup.md index 56c0eb3220..b1bd74a897 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-setup.md +++ b/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-setup.md @@ -1,6 +1,6 @@ --- title: Phase 2 - Set up Microsoft Defender ATP -description: Phase 2 - Set up Microsoft Defender ATP +description: This is Phase 2, Setup, of switching from Symantec to Microsoft Defender ATP keywords: migration, windows defender advanced threat protection, atp, edr search.product: eADQiWindows 10XVcnh search.appverid: met150 From fa5427b097e4099ffb7a4c5db44728a17482e061 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Tue, 8 Sep 2020 13:28:10 -0700 Subject: [PATCH 68/75] title and description fixes --- .../symantec-to-microsoft-defender-atp-prepare.md | 2 +- .../symantec-to-microsoft-defender-atp-setup.md | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-prepare.md b/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-prepare.md index 96a50c8c54..e110562968 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-prepare.md +++ b/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-prepare.md @@ -1,6 +1,6 @@ --- title: Phase 1 - Prepare for your migration to Microsoft Defender ATP -description: Phase 1 of "Make the switch from Symantec to Microsoft Defender ATP". Prepare for your migration. +description: This is Phase 1, Prepare, of migrating from Symantec to Microsoft Defender ATP. keywords: migration, windows defender advanced threat protection, atp, edr search.product: eADQiWindows 10XVcnh search.appverid: met150 diff --git a/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-setup.md b/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-setup.md index b1bd74a897..7444d73778 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-setup.md +++ b/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-setup.md @@ -1,6 +1,6 @@ --- -title: Phase 2 - Set up Microsoft Defender ATP -description: This is Phase 2, Setup, of switching from Symantec to Microsoft Defender ATP +title: Symantec to Microsoft Defender ATP - Phase 2, Setting Up +description: This is Phase 2, Setup, of migrating from Symantec to Microsoft Defender ATP keywords: migration, windows defender advanced threat protection, atp, edr search.product: eADQiWindows 10XVcnh search.appverid: met150 From 9205cf83456697e6dc077a0c587c25c2c480f346 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Tue, 8 Sep 2020 13:28:40 -0700 Subject: [PATCH 69/75] Update symantec-to-microsoft-defender-atp-setup.md --- .../symantec-to-microsoft-defender-atp-setup.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-setup.md b/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-setup.md index 7444d73778..2c6253d565 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-setup.md +++ b/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-setup.md @@ -105,7 +105,7 @@ Microsoft Defender Antivirus can run alongside Symantec if you set Microsoft Def |Method |What to do | |---------|---------| |Command Prompt |1. On a Windows device, open Command Prompt as an administrator.

    2. Type `sc query windefend`, and then press Enter.

    3. Review the results to confirm that Microsoft Defender Antivirus is running in passive mode. | -|PowerShell |1. On a Windows device, open Windows PowerShell as an administrator.

    2. Run the [Get-MpComputerStatus](https://docs.microsoft.com/powershell/module/defender/Get-MpComputerStatus?view=win10-ps) cmdlet.

    3. In the list of results, look for **AntivirusEnabled: True**. | +|PowerShell |1. On a Windows device, open Windows PowerShell as an administrator.

    2. Run the [Get-MpComputerStatus](https://docs.microsoft.com/powershell/module/defender/Get-MpComputerStatus) cmdlet.

    3. In the list of results, look for **AntivirusEnabled: True**. | > [!NOTE] > You might see *Windows Defender Antivirus* instead of *Microsoft Defender Antivirus* in some versions of Windows. From 71e40ab9c12a1d15882e2a847f739859c2a0f5a9 Mon Sep 17 00:00:00 2001 From: Charles Inglis <32555877+cinglis-msft@users.noreply.github.com> Date: Wed, 9 Sep 2020 10:29:39 -0500 Subject: [PATCH 70/75] Update manual config to include full census sync Incidents have been popping up wherein customers are experiencing issues with missing fields. This is partially due to Census not fully syncing those fields on every run, only once per week. The config script has always invoked a full Census sync. This is being added as it has been observed many customers simply manually configure devices for Update Compliance. --- .../update-compliance-configuration-manual.md | 14 +++++++++++++- 1 file changed, 13 insertions(+), 1 deletion(-) diff --git a/windows/deployment/update/update-compliance-configuration-manual.md b/windows/deployment/update/update-compliance-configuration-manual.md index de0fe72583..97c7d7d78b 100644 --- a/windows/deployment/update/update-compliance-configuration-manual.md +++ b/windows/deployment/update/update-compliance-configuration-manual.md @@ -17,13 +17,14 @@ ms.topic: article # Manually Configuring Devices for Update Compliance -There are a number of requirements to consider when manually configuring Update Compliance. These can potentially change with newer versions of Windows 10. The [Update Compliance Configuration Script](update-compliance-configuration-script.md) will be updated when any configuration requirements change so only a redeployment of the script will be required. +There are a number of requirements to consider when manually configuring devices for Update Compliance. These can potentially change with newer versions of Windows 10. The [Update Compliance Configuration Script](update-compliance-configuration-script.md) will be updated when any configuration requirements change so only a redeployment of the script will be required. The requirements are separated into different categories: 1. Ensuring the [**required policies**](#required-policies) for Update Compliance are correctly configured. 2. Devices in every network topography needs to send data to the [**required endpoints**](#required-endpoints) for Update Compliance, for example both devices in main and satellite offices, which may have different network configurations. 3. Ensure [**Required Windows services**](#required-services) are running or are scheduled to run. It is recommended all Microsoft and Windows services are set to their out-of-box defaults to ensure proper functionality. +4. [**Run a full Census sync**](#run-a-full-census-sync) on new devices to ensure that all necessary data points are collected. ## Required policies @@ -75,3 +76,14 @@ To enable data sharing between devices, your network, and Microsoft's Diagnostic ## Required services Many Windows and Microsoft services are required to ensure that not only the device can function, but Update Compliance can see device data. It is recommended that you allow all default services from the out-of-box experience to remain running. The [Update Compliance Configuration Script](update-compliance-configuration-script.md) checks whether the majority of these services are running or are allowed to run automatically. + + +## Run a full Census sync + +Census is a service that runs on a regular cadence on Windows machines. A number of key device attributes, like what OS Edition is installed on the device, are included in the Census payload. However, to save network load and system resources, data that tends to be more static (like OS Edition) is sent around once per week rather than on every daily run. Because of this, these attributes can take longer to appear in Update Compliance unless a full Census sync is initiated. The Update Compliance Configuration Script does this. + +A full Census sync is accomplished by adding a new registry value to Census's path. When this registry value is added, Census's configuration is overridden to force a full sync. It is recommended that this registry value is enabled, Census is manually invoked, and then the registry value is disabled to allow Census to operate normally. The steps to accomplish this are below: + +1. For every device you are manually configuring for Update Compliance, add or modify the registry key located at **HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Census** to include a new **DWORD value** named **FullSync** and set to 1. +2. Run devicecensus.exe with administrator priviledges on every device. devicecensus.exe is located in the System32 folder. No additional parameters are required. +3. After devicecensus.exe has run, the FullSync value can be removed or set back to 0. From 8eac590c24c363ab78f9a0607df2972cbef1116c Mon Sep 17 00:00:00 2001 From: Charles Inglis <32555877+cinglis-msft@users.noreply.github.com> Date: Wed, 9 Sep 2020 10:36:11 -0500 Subject: [PATCH 71/75] Update update-compliance-configuration-manual.md Grammar --- .../update/update-compliance-configuration-manual.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/deployment/update/update-compliance-configuration-manual.md b/windows/deployment/update/update-compliance-configuration-manual.md index 97c7d7d78b..b332aeafee 100644 --- a/windows/deployment/update/update-compliance-configuration-manual.md +++ b/windows/deployment/update/update-compliance-configuration-manual.md @@ -85,5 +85,5 @@ Census is a service that runs on a regular cadence on Windows machines. A number A full Census sync is accomplished by adding a new registry value to Census's path. When this registry value is added, Census's configuration is overridden to force a full sync. It is recommended that this registry value is enabled, Census is manually invoked, and then the registry value is disabled to allow Census to operate normally. The steps to accomplish this are below: 1. For every device you are manually configuring for Update Compliance, add or modify the registry key located at **HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Census** to include a new **DWORD value** named **FullSync** and set to 1. -2. Run devicecensus.exe with administrator priviledges on every device. devicecensus.exe is located in the System32 folder. No additional parameters are required. -3. After devicecensus.exe has run, the FullSync value can be removed or set back to 0. +2. Run devicecensus.exe with administrator privileges on every device. devicecensus.exe is located in the System32 folder. No additional run parameters are required. +3. After devicecensus.exe has run, the FullSync value can be removed or set to 0. From 76e516c71281951325988a9e9523d4162cc7b843 Mon Sep 17 00:00:00 2001 From: Jaime Ondrusek Date: Wed, 9 Sep 2020 08:42:35 -0700 Subject: [PATCH 72/75] Update update-compliance-configuration-manual.md Pencil edits. --- .../update/update-compliance-configuration-manual.md | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/windows/deployment/update/update-compliance-configuration-manual.md b/windows/deployment/update/update-compliance-configuration-manual.md index b332aeafee..f66d415017 100644 --- a/windows/deployment/update/update-compliance-configuration-manual.md +++ b/windows/deployment/update/update-compliance-configuration-manual.md @@ -80,10 +80,10 @@ Many Windows and Microsoft services are required to ensure that not only the dev ## Run a full Census sync -Census is a service that runs on a regular cadence on Windows machines. A number of key device attributes, like what OS Edition is installed on the device, are included in the Census payload. However, to save network load and system resources, data that tends to be more static (like OS Edition) is sent around once per week rather than on every daily run. Because of this, these attributes can take longer to appear in Update Compliance unless a full Census sync is initiated. The Update Compliance Configuration Script does this. +Census is a service that runs on a regular schedule on Windows devices. A number of key device attributes, like what opearting system edition is installed on the device, are included in the Census payload. However, to save network load and system resources, data that tends to be more static (like edition) is sent approximately once per week rather than on every daily run. Because of this, these attributes can take longer to appear in Update Compliance unless you start a full Census sync. The Update Compliance Configuration Script does this. -A full Census sync is accomplished by adding a new registry value to Census's path. When this registry value is added, Census's configuration is overridden to force a full sync. It is recommended that this registry value is enabled, Census is manually invoked, and then the registry value is disabled to allow Census to operate normally. The steps to accomplish this are below: +A full Census sync adds a new registry value to Census's path. When this registry value is added, Census's configuration is overridden to force a full sync. For Census to work normally, this registry value should be enabled, Census should be started manually, and then the registry value should be disabled. Follow these steps: -1. For every device you are manually configuring for Update Compliance, add or modify the registry key located at **HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Census** to include a new **DWORD value** named **FullSync** and set to 1. -2. Run devicecensus.exe with administrator privileges on every device. devicecensus.exe is located in the System32 folder. No additional run parameters are required. -3. After devicecensus.exe has run, the FullSync value can be removed or set to 0. +1. For every device you are manually configuring for Update Compliance, add or modify the registry key located at **HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Census** to include a new **DWORD value** named **FullSync** and set to **1**. +2. Run Devicecensus.exe with administrator privileges on every device. Devicecensus.exe is in the System32 folder. No additional run parameters are required. +3. After Devicecensus.exe has run, the **FullSync** registry value can be removed or set to **0**. From 6916af04a01700021a9a82874eebf6881d5eb001 Mon Sep 17 00:00:00 2001 From: Charles Inglis <32555877+cinglis-msft@users.noreply.github.com> Date: Wed, 9 Sep 2020 10:50:50 -0500 Subject: [PATCH 73/75] Remove product removal blurbs It's been 6 months since they were removed. @jaimeo --- windows/deployment/update/update-compliance-monitor.md | 5 ----- 1 file changed, 5 deletions(-) diff --git a/windows/deployment/update/update-compliance-monitor.md b/windows/deployment/update/update-compliance-monitor.md index 92d589105d..58bd854855 100644 --- a/windows/deployment/update/update-compliance-monitor.md +++ b/windows/deployment/update/update-compliance-monitor.md @@ -17,11 +17,6 @@ ms.topic: article # Monitor Windows Updates with Update Compliance -> [!IMPORTANT] -> While [Windows Analytics was retired on January 31, 2020](https://docs.microsoft.com/windows/deployment/update/update-compliance-monitor), support for Update Compliance has continued through the Azure Portal. Two planned feature removals for Update Compliance – Microsoft Defender Antivirus reporting and Perspectives – are now scheduled to be removed beginning Monday, May 11, 2020. -> * The retirement of Microsoft Defender Antivirus reporting will begin Monday, May 11, 2020. You can continue to for threats with [Microsoft Endpoint Manager](https://www.microsoft.com/microsoft-365/microsoft-endpoint-manager) and [Defender Advanced Threat Protection](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-advanced-threat-protection). -> * The Perspectives feature of Update Compliance will be retired Monday, May 11, 2020. The Perspectives feature is part of the Log Search portal of Log Analytics, which was deprecated on February 15, 2019 in favor of [Azure Monitor Logs](https://docs.microsoft.com/azure/azure-monitor/log-query/log-search-transition). Your Update Compliance solution will be automatically upgraded to Azure Monitor Logs, and the data available in Perspectives will be migrated to a set of queries in the [Needs Attention section](update-compliance-need-attention.md) of Update Compliance. - ## Introduction Update Compliance enables organizations to: From 747500935e078b408769a3a8d16ab521a7754758 Mon Sep 17 00:00:00 2001 From: Tina Burden Date: Wed, 9 Sep 2020 09:05:07 -0700 Subject: [PATCH 74/75] pencil edit --- .../deployment/update/update-compliance-configuration-manual.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/update/update-compliance-configuration-manual.md b/windows/deployment/update/update-compliance-configuration-manual.md index f66d415017..8aaf66d309 100644 --- a/windows/deployment/update/update-compliance-configuration-manual.md +++ b/windows/deployment/update/update-compliance-configuration-manual.md @@ -80,7 +80,7 @@ Many Windows and Microsoft services are required to ensure that not only the dev ## Run a full Census sync -Census is a service that runs on a regular schedule on Windows devices. A number of key device attributes, like what opearting system edition is installed on the device, are included in the Census payload. However, to save network load and system resources, data that tends to be more static (like edition) is sent approximately once per week rather than on every daily run. Because of this, these attributes can take longer to appear in Update Compliance unless you start a full Census sync. The Update Compliance Configuration Script does this. +Census is a service that runs on a regular schedule on Windows devices. A number of key device attributes, like what operating system edition is installed on the device, are included in the Census payload. However, to save network load and system resources, data that tends to be more static (like edition) is sent approximately once per week rather than on every daily run. Because of this, these attributes can take longer to appear in Update Compliance unless you start a full Census sync. The Update Compliance Configuration Script does this. A full Census sync adds a new registry value to Census's path. When this registry value is added, Census's configuration is overridden to force a full sync. For Census to work normally, this registry value should be enabled, Census should be started manually, and then the registry value should be disabled. Follow these steps: From f2640ab730886a5edc652fb1610a4d8b5aab05ea Mon Sep 17 00:00:00 2001 From: Beth Levin Date: Wed, 9 Sep 2020 13:03:42 -0700 Subject: [PATCH 75/75] updated link --- .../microsoft-defender-atp/tvm-dashboard-insights.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/tvm-dashboard-insights.md b/windows/security/threat-protection/microsoft-defender-atp/tvm-dashboard-insights.md index 11aa392b29..af31192f3b 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/tvm-dashboard-insights.md +++ b/windows/security/threat-protection/microsoft-defender-atp/tvm-dashboard-insights.md @@ -55,7 +55,7 @@ You can navigate through the portal using the menu options available in all sect Area | Description :---|:--- **Dashboard** | Get a high-level view of the organization exposure score, Microsoft Secure Score for Devices, device exposure distribution, top security recommendations, top vulnerable software, top remediation activities, and top exposed device data. -[**Security recommendations**](tvm-remediation.md) | See the list of security recommendations, their related components, whether software or software versions in your network have reached end-of-support, insights, number or exposed devices, impact, and request for remediation. When you select an item from the list, a flyout panel opens with vulnerability details, a link to open the software page, and remediation and exception options. You can also open a ticket in Intune if your devices are joined through Azure Active Directory and you've enabled your Intune connections in Microsoft Defender ATP. +[**Security recommendations**](tvm-security-recommendation.md) | See the list of security recommendations, their related components, whether software or software versions in your network have reached end-of-support, insights, number or exposed devices, impact, and request for remediation. When you select an item from the list, a flyout panel opens with vulnerability details, a link to open the software page, and remediation and exception options. You can also open a ticket in Intune if your devices are joined through Azure Active Directory and you've enabled your Intune connections in Microsoft Defender ATP. [**Remediation**](tvm-remediation.md) | See the remediation activity, related component, remediation type, status, due date, option to export the remediation and process data to CSV, and active exceptions. [**Software inventory**](tvm-software-inventory.md) | See the list of software, versions, weaknesses, whether there's an exploit found on the software, whether the software or software version has reached end-of-support, prevalence in the organization, how many were installed, how many exposed devices there are, and the numerical value of the impact. You can select each item in the list and opt to open the software page that shows the associated vulnerabilities, misconfigurations, affected device, version distribution details, and missing KBs (security updates). [**Weaknesses**](tvm-weaknesses.md) | See the list of common vulnerabilities and exposures, the severity, the common vulnerability scoring system (CVSS) V3 score, related software, age, when it was published, related threat alerts, and how many exposed devices there are. You can select each item in the list to see a flyout panel with the vulnerability description and other details.

    4#bQY5_>kpeOe9pmCFmMjLB^A6{3phC6#4`wYQ3hs3&6_)*NhlACL zTKX><+skk9_ge`ZG6Y-PNs>gB&<#;7NKnxm+>BM2P!H2R{z~8l;ed97yCGI$^)59^ z*E=85_dk!~@j~2dPb*w4mSaS46FQqE~ocW913iC zyrxc7rG2eim~G!KTlnLUSBC{P0s&NYNbl)o|MZAz_Z=LQq+$D=t4o)I(-3Zn3}`#v z*LcGPG~B9m5^H%Snx+;vA$~xxt%GIWv%%$0TH(`-=$~jH53SCg+|O6j@O~iZ zI9adv-2qY+{C~X@=LO98Y;?W-c|HaN_$~Dibc0E+!C?1v$5^4ANieAs@39#f-(1j9 z1oEuI|8Ag;`m#G5`ER!1om5iWc;AJhHIL0}e`)pRA?kF(@u1Nw5nHF zH!=M}ZTp$aWq|)pK=Ye9B#PKikHcvX-s;T;2bPE_|HLd}{^l0`twHLjq*8idMQaa#Xdc7pwaE+zyAj!Qa0iX5#sN-%% z*y#B6KJ0o>2B(#Ca7`yVfn*A^1Xxc-Ov*Zo_X&ch&1d;hQ)ZE zM@z93luj%^-1XboM-;woeayI<(U1}qgZP*~f2Zn4?&00YyWW8l26g5e%usT>vJ^&0 z?&LkhluDoM4sf~V4;X}8Ip7!mO4Nu{e!ru%zxCva(A&hf5~_Vm4^VN6qbV1A_P^%* z5FHv%Wrm`?S76!-QAD@wzYk zUUUE|!}A2s{;$d9xSrMvU)!mQv-2i{hy#Ljs0vjUW$Tr!41IB8?NrqY)jAO;eW^ph z4%_v5>_=jP&!bFuj`Dtn71^dxZC(5xc^QL0sblSrj)C%5Qzd{(()8!*WM|LA0L__}! zVdpl0Kwk-u?i)&tqxSqPCSMrkcIcm&X^#_LHS{rxV zLN{C69Xg$1y%+f1o8>ClmBfI%I$+xW3yKPe#zcpnS9kfPpcmibIkJmuNBHb5OlK~C zb#0-)X<8vkHs*6T@kW z8Eh|WYOde0RDxD%w}Cw7y)r=Z8$)PZ^HA-~z0*Q=5J`I3o7M5iQs@rL_OEC zLx}pWlMcEfk&$78ZuTFv^VQBL;&2&}dPadT8^JR8ht+Xt^i_wqVaD~X=m0DET>j+5 z9S3U;M(57t@(P>8ilW`}pATltfw`pPa)GK{tV^19kM*stHkA|J`M^W%K(CQHghikr zx_{kVz+=(>Vuw3VX}#&)_lFRZ;I9r?7X82}2meaH*L_k4P}lVv_Spz{`~7m8p{+mH zlo)e_*vuelndZ{gqX)dXq(25LAR8`=iiW@1XgL!F3h|v}Wnu_%FkLs#js)FJgM-{b z9h>4d{t&gV+3^w(jfn;cO_xNku^we{02%|m*p;2amqA*gS^w9O0AGYVMh9$*gLi>z zSXR%VC9=2InUBs+Umwtw-EodfT$HF+`MKQb@^fCo&;!vq>Z#sD7f^YZUH@E^C2%ng zU6PKJq#PLhg%zZ@c#Y95Zn6(ZJ5@gB)c`O3wxK<6ofmtzXEd(}@o$pB`P;wfv?$G^ zIMwu=h!8xUq|o7ZJ-YXa+g}^FdnC_GdGI25>re!b>f<+0F8wy$(p!#me4IMONT>OD zIvsSh3&bF{-&Y>5j$d8)uglY4UK&Bo9!9rMTqK{K>a_%`1epWuaXY)a3I)3iZUcMl z)2lvndn)7at6HklOS-CzQ6d8@zftW|*b|mGpdcQ)QR)XIXrvi`Iv(UD#Ql z=Hr`iYd)`gnqyvQdHjca6RAQuM9N^r6uF5MO!Ms9U*?cL`TGrleLju?=)8JU+iIe& zuic07FUN!*)XtNxbRDHjNR5EQLCn8POR>2S%E?y;@m1msI^4(iU3PklN3qS}X0Su# z4y3l2Vn*fLFLlMx(KXof-15O2(qlAdJN*3zTknr8Ey5pn!djZbNlF4-br>*+sxMWR zg7W8;B!8z_b9(0i^$W?Il;3dVBG0p4dLZ}n0Y#Wi8#8%0`0>){L7fPp!{d4`PmL%w z#~y&JNvUf?KcPDVX+{}<*+Xn4b8bDep^lEDBQTDN$g7Pk+RG`k7kX&xUMCXgO+qmN6k<1&X2zATarlQ<)}J+rXs`9<=U;@VY&nWwbIKXl_lKTm$xV*&>k$Btq%xQbgo=)1;({E#n}~!7 zo49uky{CGvH{PJ?E_?+wOJ)L%|H=R<8TyH$h`VzaH3|2jb%6M);10;+$F-DuX9~S} zEd23IVa!NONUn}6@EqB{CZVn2-Xjip!!>I|MBH1^_TUt&*L~(%t9-wR4Vd+;FLa;| z;aTX4IMA()s|MKaqeWLz>TEUU0|ROv=G<~=(Ni~2vKDSeC*#fGycy}y<2bODF zjij4f@7?EXSejE}pGbc7`P?Tw#%Sd%PJ`7k$fnW1xQvx}whdok6ZdwGtyU@VU;alxX;4GJ1rc=}GCL%~BT=5Zj-)u(GBn5UoI2l zy$`~Y)rsh@5-gF#aBO^1T1~BW$=UbM6VPB>Q@eN!3$!!i9yW(#M<+r@x)4?=nZ1eK z0=|4K1}&dOCst>IkVuQG%x}%!a0s96msHRYmf#FrrqVT0ODc~=yKfkPYbav%d2dBa zV!!EV(GsRsD1K1m$ESM;S{OO_%x+~jheZ`5A;i0hY&^lve5`UNRy=(6W~0+6o6GYegO#OmJxN!{Y*Qj-qX7;xXhOJ|6?aRX z=fR44HVutP`IXV(=QIQ79Cql73K#U8I3x@RpGV|E5S?MOvm%6-+U>17d-WT2p^!1T ze3w1^((|IF5go7({b!>M7lb~ZXOM*(`mTe`?05+wKjv89lI*7hpJSDWVm*H?QFstx zo+D=J*}W~w;iGB!ycgy`^QdWWIoE27YrsS%2)9B`7-{RLhf)Jn9Xd1W`QWrptvfrK)Eb_F7DN&l=VmY{uUD354>nrP{o-~3&FdpW=K zUir)9wY2lU7%op5R)rjYT!)paO{qJAxb-IX#~irWgGfcRn1(`h$kFzXxTMUkoJqg} zH2S=a;a%3_-w~-&7!F`LcZ&DP@ejTS5`%d}yYn8KN>PvN+>xM$!Ez(ssvWF7B)@KV z^^1DanoUs!c7HMwhwINYUqJOgrIDVXJq1vkhDgWaK7rEo@>W=4m3x6Owg9dGX1A45 z-jf+k%yI@SU7ogS<@tf7@Sn-=gi_iaSfr1?ihTQLDb&=FRYL@n3&bs?cJ=uXkY9|S zvqgWm(pEh;yR0xanP9pMXI@r;y1FC>cUE?NYJ78Mrv<=Bp?F&_b+l)5ACL7G!o(){ z4*apR@@xN=0FL}Az3H_NwvYoD+0oYs~C?^jnL(AkLv2R&!U<*=eVJpKU%k~4Ve+P{H}erAAfUq$%6a?E}~(9 zFX`GYAN{!9%Jhq}0>A=z!Lqk|rH`fty4&ZD9&pFQrjBK9$weUir#|*V`@wAYQ^M^9 z7XRm3>!J-nu@ddTJ?Y0T^<`23h`;iPv3DR$VA(nFTVL5eJRzuNXhQwq`|AsUhhRyy z#>_9SLCD^)>9mY*grl4<%e;c>rv}95cc0p4^vm4JgKOGu9H?=x?6Kdpl!qrkABivF zTCoTdZs`UaEcQO@99&tb*9(nnX2E0zuWJ^dNd=!Y=tw4#C4aTjLGSWo{XaFWCwuOz zz2!1;yXU00lUVnXTmd-XPfYH4y{)QoSy zqGc@~1--2v^i`m8by^LPW4quN@YL{&dnX|}(oZo}r2giW!Sr*P>*;Q_7PLh@;R=Ip zQcVq#>p5EC=ds6|aAAF_tJk|3t*5PkXVwo%9~YtLF{Lzkq$H1*(^AGsbklyztLMMQ zk)aM0ITIuC`M1nzL2Yh;z$rm-q@N=DmcxNDdc}k1g#V9KsXnc6Xp3riJD#h)jfxOk z4U&GM0H7qR-OO80z;2ylEMUo`co>}8 zbI@<}qX(Q7P&-L`9TV$6)~dRj;8}A*mOwwfK3Nsc5p`{_y6MZqyLEXLZU{eUEb_S^ zmNap4H^4{Q=ZE>(ov7Sxuv$Uw^_FM?%k%jXg~79Ua!M`^BJGxAUy;@~xmglt6YxoX zlEICM=#j7E6xI_Zrh@)$UaP_D;~$1mB&)S$tzm!n|LK19i4ePffQLxcU&7a3Yi3b) zs#|!O=c7;vCcH_2jd`j>p2?u&(=bAN3{jmti?|t3#N=ov&pUX#le_=Co96nDSh0Mm z?FBEu2P6wzt40YpY$MnX1UXuiZTFcj8wI>oE0)@#M_#BIy(A$*o5$^220U6mblQk( z7Rw$Jo5HK?5RBgh3qJ*4Uaa_Le5q}cLZoQcto>7XCfd3wZ}@}^pWBcp_^od!C6OuA zMvzSOUv`UJ{fwyQ^=2aLj^h^1=+reV8jIM|O}L=>x4ddVnoY^w=&jZm`xg1dTODQF zX2r6#Wz)#p4LY&sx?b1vA5EfGT2j1KndS=2bLKnY_j%fN!J=e)NvNoS)KJktxVOLV zguk*xO^{4|!Zmxmki)##+wg?53rbvc^j7-rAb?2#12ngT;{SxcyLHu|8bz^e>Nsg@bDmmalLTGX|D->s0}b6A>l$7 zS^(BWT&(s4G;b2EW|NzE{{C(WvN79HQ)~-HK!G#7dgz7UFp{OZ`CM&D$}m?{+Z1=E zyc<|7X&GN}3`_r3PYSMo1owP^4Wz}r1Sdlo&NhhCoR z=&K%#xHtr3^00TRKS~)0bbqf1 zKiPx>0C3y>y+C%F>4K7%+wy56i4c@y?}s?XZZK?b-qHroI3mS9#&@J zAKb9w*Z*%?(feI~r}!qKira;lgeXvuBnc4GySwLzDXbZe#5x)DumdvvE|El<5t z5FS&DgrsI@9kABt6;2tSt&uOj2~Q#4fFj^yBkK~-`ehfNk_b3Js*{JmswGxT;_}`$ zGIg6juxQ!U(?f@#ahRij4S0K9&w!yZs|_>Qjp{jsL4E6p<oriQ~;f; zn(U+a8Z@mai(Txh9iJNMaAoPp0!P6z{ghfh1cO%0KB~msO)b?N33kPb+ZBVSEzBl4 zbR`x$>o})!@h^$|IiwHAkMQpQQOvH0wvjM53MOTObHT;ffxdyKTHUv)8Usg7LDrs0 zp4$ws<5^`7m~j-|jDOujYpSi4n6IaVi5wRFjFLQ*UyAI*<)9i8Eptwmi6V%9bK9%( z%$9f%)_g21a9!fpvG#wY#eJTQOc1~R@!!GBz9Q5Iy|7E+`S*5iuM%DO+^7W0SN>N(1kq){0 z+gvhCG7XlcaUd$2&97}HW7nS%4O)%zJ0ZysU(w>Rx6-m*iq@+!pkU7Q5=n?1aLkqz zB$h>#$sDD#^*_D9)02}A>-Iy?Qw|;$Co5tWntanF#<`UyF2f43;W&qm+zXwoAljq^ z;1GD<2(mjWxaD*_{1nQ|XTu7ns11!MKOBPVg*UyySmDb<-kMnY%l7K*5&zUe!g9kE zQf%JL1|fQ{d#MHm@d+|%2-d4qiT7~jI@lSU;##ZmUp3NONDUGBGMC;>B?b$* zuAsVT5r9I~yVgDB%1IK;a4-GOYN}F!!e9^+9lc%nPX=d33;7H7#*>(_cD=sx`SNBg zS9ueS@Nbg&Uk%GR6UMp=TLMXJsFL)bx)_my!fQbQ2P?ZlFV|ZIPx)Jel*AulfQ?y^pskoE?U;KzdUL+8W#Oqb3n=#EGbP* zO$~>oZd>2EfY<%5T=H3R|4}4nWI=CW%XQqEch&3_u6g&XjgqQJKjKC99}(Yt53sQ= zN#Cv<%uy^a?AZFktR7$-a)$k(6OTfzyfSjaVW)LZa<-F0sT-tXElqd*iBcIEQC2I6mEYQjFv#+Ai}* zrEOd~$*Kn{+3))<8!ZKw42^o@I!E52C46G^uXJ`IKg`aKM)7i9XVKQgf=^+OuOo2& zF$Uo8!6sasYHnNA?y187#oV$CF+OT4dJUNZd9)fLu2a8-Hw?YetFidRd3w-qcI^%2f zD0JZ$I)0;=*({m+n-cYW;VbIcb$z!uZHWC~*QOX;D8t=XWFC6=1#a_8xM+g1&bDnF zi}4td6U$RJ=YvdS6_&L$dFlzzc+FW(8ECv2ZDF}ESez+$-ZyCw=X5AEL0c4uxTJq|WTH7)( z=C6<2DYlh?ZXb)MU!}ZchJSUbmjPVW1ZOWp&tyq1zaH`2w*5TVyApp$b_E}e5c zo~xlx(;(}d&pEfBh2Cg(xA3P!=}_8I3d-b{(ua`S!hm~?cz%_d$={~g%iaXUl zD&cm;1<%oiav{s1&ciZ#BgXa(} zixt%X?>LtKYx8kuJg1&))Dp*Vo{$$#}%*Lm!nHNr%l&M=J_D#jLZz0O!Q3T z+*k}-{A0K{v$(xC5p0N@@y@H58AHp7S8{#zC#vq_=i9paOT`doxZ9fxJP^dh+49rwCr za!BCwVX14-v^pA(_^T4=yO3mDKew?W7528u^(FhZ5_}MB4}%`%iiC4qRkTWT+fXmZ z0!K|2DzCDA;VaKb>*ig9i&BUHw56(QT`w>C7M9gKESUnfRDse^)J!1XNA(9XQF#-z zCr*X}=HOs$(>k{5PTDxct?%X&Kbd6yzCnRNUwWW;5COrr6!ZI63f#rk=)ejp5@;Pl zO2t4mMp%$4_3H+OIzu`lzKB|ZBre{cCCEO)^hIS->kJX;1csWR7=%{%-5u^LjYD_7 zZ+uc>UsE*9dzCN|BZiCWk(Ga$OV*)DOh9L)L*Zp2KN~_&yGd-ap6Sy6ku0ErZoTa+ zk@-7?=+=w!822(^**rOSAtw<%#XigZp2O-^Qaw|ZhBx01hFBFX{#-<)K1$q**rfaW zL?FsOx2USIaBw49v5lFnHL{t1UIJpIJo3bxz?M!rX|+}Ofs z$cplzO*niIJvCB1)xz*kHK=9)`kU`fIp2`LJ&T%r@NP7i7 zsWld0Sx^~id+Hdp`o~umD$o4PumTE8xZR=N{WQW>KX$mhwz4r_G-Y2>Gn*W&5V_t> ziRk7BvWdW=!otf9$W?a8`9R!ltpL3OyM698JwJ*N>bZW@J&LsyTxflK=BM2AuRq!{x6A$tg0Q{PO*+ew8{E(Xi97 z;fQ>dcAFKErz~c-fa*IU@0#nKFcw@2r*(!{dcuT?YX_ngnnD#hmEmfQ(qPV%psHU} ziJn;#NDE|o6^{aW*9i9}TH52^>3A~|*av+u>*~LYU4{$nH|7-?g}2`e|Mxg*hly)| zF}(?EML;%*fe*NC`BaDq&m%3~DQ#DmdThGSwl8=DKjW8$?o479L259u%=IJPDTmkg zlk?}=lFwipr;k=+Ay8cf@3zY(f)ONI-`FJ3oo~>um$5%|k~c^YYPn5+*tb7C2uP;> zUxlN(D(#&DGU*jyJF=-3%s z;C!mQ>`6ZVEISG@6LTDdwJ!=}j~P@MCR2Ce`D~g8FdOkybb0Evq0=@Ef#!lkrX1;^ z*Kyk)&a!21ik4tMU1#Ih7K3ce+9+2D8u!IDW->P4Ie?E5P=M86EQ2DGC4pE6dJ(4G zNi>f!S1He7B-6;Mrd?2Zu+&XwPr4k+{yjDaHs@{fz89#6*@_5BuVT73k1@Gs-CHx< zh>4CO*yADEtDs@(AyXr61yPGt$TMn3A;S8lPrTRThKYcY-RLLpwj<0MDg)MlW!Gir zCmCFsYQ^t!B3_4Hi7^mEPMAq1sWvFeo0|`Pyg0g?^B>4f_SF>RgC`X@k5fp9_IW!msuBXp`RZ z3w!5nBb~@7vCh0oW$?4F@Vv!?<=B*U8mI#F>3Pn$y!p{fJIJ@Y?_S^ayH9{v6#r+* zG@t^rGU=!Bgjxg*0@S^iayymgCq-|%uHNKOElMV#+Xw}?HbA&dc3!YyhHqrC{IxAl zq5%HWuWI%vWgc_^S*|2l5tScG-%yia&0x)~sgwwX<_JlO2oLv&7Wv@;C4Ukr1Q(rX zemYj7oY1{gyN7O+Op-4yIs#ebGp6r&_T0yX;&a*zu?9xPOOCDGG3T8)G&^JiHnztZ zf4fZVO9{)d7Oc>^e#`sIfoGPVLK8#AehauRee%)&7WNdAXhwekwQANo*D6TkaqjoX z`?4sqr4V&GayxGMHXQN3axuvXdi-RbcV-!=e>NH_+)|7m}1+ zY3R)>>{r@Nl&H*434Cw{A=9vcE}l%Qvf5=c7ik_Nekd~dH_#!9j}CKq_@%&}9o9^r zHY%D>@3ZsILDIuX`p#j8s9sZl2~7znlO6pmtimJ}ZDYClh69Mc29Jct9n~H}mN_^s z8C5Nrx;54-*t|WA!acS!g&QtkE*(fu!h>jgDr1I*0de?5mlEchig3{hM;SO8LIiCp zWcAe4u!Gi9G`Q;5D`zU@iETIHV_MH&A(CjYJgPWwM{;j4-jE51aOre5f#O%_E*hK$ zGksCnhuwhiC}&MNa%#js2(91X4sJxlFP+L_Z|F)Sbtg4rQ`5{jvkuDxpyc2HXwPyD z5dtu4Wb|n@)8dd`>fUA$N>G#D9<2q3=W!ZTn(A2bKRZ$A$RSn=vJ)n)LRX$!C@>e} z&VINqCG0Z=%sMMJw0?@16m0q4R8Ycb?;}@~Gm`C2)xwa@E_JdGN`96S zj59U)Bl8>aKS)89d{q_ud20*se%Tfp!Y&=i=IEOvFWN5`KHfX7OU=-BJ&Ku#Z=l}E zyWc>C!R4fSCYgj~1o(m+%y9T6D|3=yGP`dk7edmsbjZQTAVo8Yv$9y^UtgBw0hMD& zl6N~tH=&WnEoo;@g; zWG=w3R+Q6m=K=B1PtE4kl9{3>l9OZ9S1;}@V#AxL-coO47UvIt2lxo68zm=621JYP z6cP=$zo_fMhNP&jKCrQ>$O5%4=!9w4a7D1_>T|M2u-W$Wt}DoT@<$jUKow z>nrgSY2yhD<%U>+s)KnS&(z%zfp#p+KIh9n$FBs@~K5=-%`e;cW& zzTn=4D{R09MF!~11H)D*{!=|jLk?Qt(;ybCa6a4E-f;&p z>OGnX-&u@`d>W`W5)=VmrR8F28$NTH);v@DMH3DtxoDw?0XO(xew?yMQ9C86x>ZdU}>&Bo_){#=_ z9RGfoi8p^172e1r;NhWO>sgw^F5mo2g3{L$PgrunP=AS#BEcg#YCz)V)5khQ6vCbLl~-zncH8VNVt;}7_6 zUmlgqx6$|YlJ=;+d1BG0Gdp;ZxQW!n5GHVpC+=h65cB+ajq4LLJbURnTiO0+FHzht z7^xK>yopeyB<&~pzD9zYSW7_%#CW`6v>pz0c3}>A3>;+KsP?WHV#W_X5&Iy+aq8$U(WY^nrK3-f9NOjW8IvU=LGvS{m^)gs_*B^aUOzAx z+XdW!+je?YelTbwXJjsDb_(1hj? zhCVB?L3^9uUP#oVEqu_G-PkkCkrXNBYB|=U+ z8fo#}RFdwZV95(UK;>Y4*A~y9;X0zIHP@zU*Z1S{k#iQ^FTMx3z`W}u9#DRlfm~2 zyfGbjCa(GM&VlfS!BuTx4ZCeW)p^gRhIR0BuoyB>bi-h)kZsEIOhdCeAC9hXQ=Oe6 z`)GKi71nwOqc-~bFqZAm#c!u`cXPA!BW{&Jy`mh+cJ{+6R=O=jZt6SvH0$>XF)|8a zrZ{-Sz1_IMPU@`%!1X?ooOTCt1jsllBN|InSia7ciM*fIL^@Ub+!-d2-;rtaun1H? zdzh&OBOzw?Ox)(67*?snKDta4sjTva4Fej70;y7K1qf(tHA$)k2}Dqg2s0`SF;GRA zkzXOdTFK_Y-NRwHWh5?F#2lmpK1VPoT$QG}2_dINX>8xwGJ)xp_#_!Jeib+iCJ#K@ zp4Lg`#+~7<+?tLhQ#+p=5P8yDlNT?`;D@A|Mc>G88eMAVahQp zRf=pq02=o1*+cGM`2HNjAOH2qYZWI|fToYj}qv^uJLX$_8L19(Jg+zf^8 zj7s0n(!`r1$RD$6O7N-_%Bqg%nqgYtZfFcF{>U!kji#`Bpi;xGsZ7u zyh3dIJEskZN7!O8W9{`?!c8XNnkN;L)ITMG>Ge_k&>Dn4 zv0UihoP|&sf@m+Xb&#J2c@yYq&5frBL62m-?0sSjf3hj?c|9{box8^pyGrvAu=nuW zxrlW>T(PDn5sPEEOGwiMONj;i%SL`1^6nSIQDv4c1SAJi%KM0Xo0QU#Xw1X3jg!to zopY)3#{>M7kjx~nEVGp@yTVcq;s8BAn?H z6Gi5$s_l2SG8>l9W%ZL$D(mOou*8d3c#QhWzoGNSKf;RJ@ISOj4~pU|g*paFI8fsk z4ZL0KjkO6vnU}VuH4501%?gn5HGnCO$TL7VI9}(q=gTE{vneP*x<+r5zC-_^5r0NM;evfVoaG; zu^jGO?A)7rN?Bz8=p0AL$?XRD8+ZjEP7&M`qxPNsR0d61r1@5DW!@aw%Q_;pR^<0= zQ{HjwjH<_Zxo}6^p#i2#nC+imQ1xx@(ld~@)MUlRtAzb9<3Z4YKi)i-qqh2 zDgroBAOLmnwl!*0WNK@I2yggCPw+<79}=blv5QX;q`AO?iBVUz2nfQMo1`(3K z)>MsqmWxzEi22={%JE_>W#sd>XEV_58mCpYuEKHMzJCW}s9G~-54^VyhoO{8{MA~b z%p_Gh!#(GQ7}oc!v9z9p3qANNk_>D##g>&R%2059#Fu-v`R|GF*Gme5A+m$MV&hVM62gW@9W zq_(w`8$=|mCR|f$?s*EsNyyE+neo_1YkMJdWjr1M#j5cJK}j3D0*M0$aT0`vihCB+ zleNxx!brwc>?mgAPP;z~&6iSW z@Q{Kx4PI`n$A-m zZHxnQ1-FR$I5J8)8x?|=^$i0w2SJBH2aphYztSL%@PBEb79NQxzS3Y0x%B#X&Xc4? zBj7p5&F@Nc?0%kN7bR9ti&MpIo8#HGv10HY-<3l_Vd()LBedRL*8Qf(sTr+Q6`xQ` z^sd_e_MM(MxEG_l1e~E9DS=ExnNDRQkb8|6_?51Vx5U6z=rqEh-w|bB}hiI)+A_$rYx*STr>a$%CIt9?V=k zg4mU`HS|WbYS~r1E$M|{g}^IvZDj!`vP5UHD#m#%F{cu_0?!CX6xg+7E9sR(Mh&-k zBLgJ7o+~7BoM_#D1k|jS?K#uwE1N(H5nUbiwU62-RyJrau29Y3kq~rlQ#dyNh@5mH z<&GZxR#La<*-w`1e6&0+RKb+1Qnogua7YFc-caAi`kB0U*gN%XZP1c)pb2dgMq2?Y zaHvV=i>t8=U^Jq%DH7vv>l&*V;pI*lW{fcSYxR_G{sBK#*_O9Y{pb|Zo_Q(#C#kDW zgV=97Hkz|r=b0uNQCB$WYEa}@3O@g;f1K0nh94wStc)M*@^Z_GuOo(#M=59O59fjT zYsUB2bLw5^(Z& zWt3QU2MTXoT*`pmmVtqO+?0(BTIjr9`;OUnRA8zB;?Zj`7>>l;{xcLXr<&QJ*YV4* zbSJ^sS}W|OuQl|m+S7@&!~BZFzd0GBV$9HIa(9W>75iBnJp`;+9@Pz^yzPymx~gdQ zaHI|{FLv=K^z63+q7iYDYaqTMs-rJX8U^UIEVRBiihV~yc=irpl~gG~p@KtKPWs%E zE8a28{1{4se6k{!8=E4R5IX19Zdk>^+{BWVUn*7R*!OA0ZTC}|pwa#TlEt4alFgZ& zu9RO5NzdTF&Drr)-2eN+^qMNZq9Y+e*)3O9fNY>W?{5(=>z`6?2+^aV-yDS!^y(9V z*KOzp2|sBgCX(7F+KXPi?bFlHM^kz$`da6+!zZ+&aOALa6TUF^N$YdLKH(0_&!~@E z9f+D08GA{&6c!1xbo?Bf3DavKj)>hPlXcCZt8GZdX~V>qS3ZZE3Vk85V9;oHW2l{g zl*y%i_*Q-Z%NKg07Dh96=4xIm>Ypp(r;fi>SPS0$Sr4 z`74l2gVmjB%lLVm^Xz~Fng_Pe>0_%|#IwnxsxBC<<9(EI%2CfM5aS^AFAV=5QRmp6 zS=46R*tTukwko!5J9%Q;X2nUxwo|bxMukso8>dcpzujNOuXIu-?y zvge4=#(vt}JaR>O?7WOZ6uwY9iH-{$sU>GGdOONH3>elPBs?K~ zutJwt=9A~o-}}vYprVI&%YE%asOKkE?s=W%$Zu(y4PrOgs+2)UmI4~ha%5@NuXGb6 zeqjPO`S&;fH=P2MsJh(PBnFuhs)rVzg&J(=5QBi2Si}U+sB8|Ea~*1yoK)pJV_p05 zQb#FDb>a2SJ%dDcy0@bZ2gbrlnUyLEPCXg9+55 z8O&lzn!tx4Ya3XZHxbBn9>-DipFVJTn#`R@g#e0_@tI6a`pH1Hyk_Y%@xru22ohW- z9Rc_yBdmD!lixN2U4taH9E`?}ln=AJP`OkkS2*i&w?be+WQ1U`NrJ2ECTR&(kGmq- zCzU!*trgsV7PpaPP362|UjT7UeVxSK^Z%e)Or6@0TRUIXGWY<6GfA5k+5E})bVSledxZ&qBB?|l;HzvBRtwBmNqg; z_Bc1%hGov86>w$dcLb*eSFxDC=r>SSf7lq50Ao4-ZT8cg}Bo+;_}DI zV`alZkVaCV?ed%hbz!)5;yF`d1=N8B4#Ld>(VSUy?ka3nd-R9QuNBZKW0fvah0Ad3 z6_==5CawziI7ck~c*m{;^KK354qE+xMkuzB9pW0GhL~;8la=4fN|U7+9+eykcPe{n zl*`4&RL9M!fT;ee8~>JzkaVv^!SdYJEK}PsbtFTw49j!v*}JlZ*16Mv<0E4-U_*2Y zp?kM$SohSZKj7e3m++elfn9=xrKkoxDn?5^oUU@-8xI@il2V8~*g)zIsp_g9Lmbe@ zpN|Mi5AZlVZbW~2WJ-}srS#l)6`N9neC$bw-otuZWb4sYt>sBX!&%K-1tKg?G4c(_ zOS(EUEtv3)zZP{VfR;yE8Ho1q*GuYQ&`pLm(h^O|Z{aK-von{8N&Vq%PFzowF>=$* z?w}#!Vl=C|$knai3Q-xGG${xK2bZQ~u^zLlFd)Di&%VUPLAJ@K3K}dY2R8Oz@+)yL z79b+!vFSf`km9Erjt*KH=u*Y9t^!wb&bCCkf~mOsx}0HPi)9C9+PjJN%N|8@V5*n?v~^P ze$N~ZTqpt7@LNc?x?TT4_N2b^U*QMK-~_x3yyW?oFE@i$%8Znznsfevwhhcbn;|75 zI4LEYA_d$~49VnE8eKYX)LVDP8afMU*5niMqBdQz@`*1Dsuo&O9;zd1j0Y`OQ0+nt zF0BV&TUK_jRa0!iD1Yv2lY`4^N#0vt(IC-n#@ zOTqrXa6Z-fu8KsTgP_>)QF~Uy&?=oRQ=DRo8^mXm4N0`rhu+C(A6og8gp4#v&{V8{ zWFXS8F&%jCM-TX(&Ok4Y2bIxr&(Pzpr%3ZyN3gS0-cPbtjv}^VGMkPq!cYK1ZEXe9 z{CIxM-FHC6a^T|Ov5pl}tUl@`u%~6Sp`{E+c#<#}q0mk4)s*7=z?sX_QR|g|%f2L7 zMQ>*6tjg^w)C9!-RDqtP4~?2ATJimp+lt23Dv4fy$lqh7w>GTxu9MC3{J*%zn#=(1 znSi$)F5G=FH4AX!MQrc+)hUcWjxuuIV~>@|?2Ec|OKPZh5>uK2w|5+nb-|AnP&4w!i5P`IEiC6I&;Og^JWNj+KqwU#1N9bIoip4 zdSGnGXZm%pgDyE`lJWx>CT~~(G{r@b-uGa!R1>+5k zq$83Ow~J355aFs50M8!crbEO?t44%ps3N$fqI?CJl8L(exyz)Fgaz^&vUpTR{LGWH z>nx`LL`PpuSwI?orG#KRE*;$B0kPC{!WTYlnfCCI?mCqvGAL!;jS#8bW&DrzWei>U zHAY_szgRW>$t@N1Y#p|y@3snDme67RyOLyybuH|n{I1^aszXYv?2Ul;c2ht)Si${Y zT9?8MuUbAWpUMSrvfo4weX%mjSFpZ^wwUW|Ys~eD9+xTXWUd8ptcch@nG{t}j$}aZ>BZ%?F{VVKsiS-uDuYE&x60G!(GGz24FvCB2k? zC{n3PSDx?wMw7&p>RqSzx-tL?pF`yBqM`I6Qzp&Q!o&?Yu4?1>l777ee2JhWF3GZi z*s`gRGTNkiaL%j? z6`7*=LH0~^)1+4>w5CN{yHuLP(G(&5nEQWpAU&*gU6RUH(SFVmhtWC+f7WQ&wjE>o z*u4vnYKO@EFHp&$-60*nY;CHmVSx*OK|!Nidzs|8CSCADX8}0iA&QjEbXpRQQkA|E z1*DXB$pOb4oyszb1L;q!XN|@Xh(=tev^kv@ZB;Z6t1IZ=6EZUU)R8r6#I^A`@eDz% z%-8T@ocIN-Pq+qA5~v55PdO~1;M9)r*J=)ig-tb2k6-cThxgkm+rlxjtb{~M1n}f#hXkNtOXyKBix%{75-Mp;T+n*I zc4p*yk%nn2o&41&ubLDR#~w=va$IXXl; zM1M|&{9cO`{Q;U2tZtDEIqQ-CPh>i-Je?F*IS6@2R~%&|d@B*GDy`8J&>P7AfdGj{ zj>Kns=;41bp&IowUHcGddm01!w%ds!PXr!4Qb(1|=( z&SPQ@D#W;g9ZBOe2B6ue!J!}2J&VPXp+iTw#x<;X>wFRMtTj??BvGUag*vbEO2z;e zotl-&Y4h?X_Xv^KuKVKeZ>u|lL&xthYkF&3kB$Z%dwmj!;N1ecZu_^DB_Iqx{{U?v_<_Q9et}FxuYn>@rA<+% zoedP+gA^XcBXw1Z?S5OsasGt>b+ii{xoEa$uPClnFLonuZF>YRHQi-1g*g)AMtHW=LqX}SzZ<0R^`H+$pNPd9l7Ba~mf zD+Lqdg*?*NGE;VigS$h>WWwYL;`u#>lcP%rhN%*V#!;Kb3ly;7i>=aB!pZEPKi|PiR-?fXu%_4$I@q+8BTyJ6>LWadGoesi&7DoOYo_sF z$!v)+(ET;6C%hMxuV85unjj5Jgqj}Yk}LnNkpV!6!f`2Z z3n4?;E+V94r}sTPsyIe9e*FxiM}b-VU3@L+AU^3b$rQeeXGO_giA*mrAOnj7vJACK zM(onN@`AE2u^!I3h|O@jnG@7Qfz2AlBh06G2!w{Io+g7>8rHmuHpTZI)sCXh2DZh! z{Xus$`k^P=Mx_B=2kVkrV_om6H$l|a@4j<=Do7v9q;Ct}O z2rp>T|K0miF;i^T-}3iw;@xd`O6-W8km;{i#ZarXBC$&X#avhQVU_rYld5;XzR1^| zyIHo`Od%A&i74UaJfKN&-HQXoXd*~7TW~WA!<^84C(cHiLe>m_$Ffb3zKValL5g_{ zd}Gaoz>vl+whXuso0X6Pof9`XZXD2hfdv2b!DY-lYT^y-nGrv|;2UXIC zCywAM8F?hnku{_%I`N`9**q$6%R5lYgx%Y}$O!NSdwd8%(KB)Noqb1yD}1b0V;@XC zGkcu!@}fCyzjf_GQOf5k`TvqldM(a0i9sAUJ#rSBG zMw4pQU!$!}ykZRE-6!9K;9@APw6Nec#m)UCziOpVQL!%^WSJ&#WUKsCAJ(3AljayQ zUvy;@OBZ8Tp7htZrV3A{gh_t%JMgJ&;GjmnaY8~TM_^_gROgaBcBa)rOFEtzw8miO zS@o#dfpRR>jqbqHe7 zH1Cx3CIn#95*!#ZR$7WhupAph>rJmHBIwVYIYopXRUvd5Fl%VaTjUKw2U2nh7DtTY z#9gu$FOxKQo^)6}-}nYY!a2-XBHB8|K?rdux7prY^;_@|tf5I!VmuS4CvE)+nMj%j zCx5<9Gn5mRwJupKoK2i6wMV(Hi3|ZArKAD#jK-&23z_bKih336F!HJdK+ha+eCwxPJBb{Q1*vc*BRDtjhTc>&#uHh8jN z3c+~PqFk+p)74?|IYMg4ou4J#3&hX^w3BkaAvL_?+IXUWI9+qRNJlk;@nx&Tmnli= zdLl*veRaBM%X@MyKN8l>a|)a*{?H#gwYO9puwvYilJ>Je)Yan+%J$&*@FA3YcJK}; zt2cy8#yM2v#=YN~3>&3lv^LP~vbdR(?SDcub5!P57CygHsPG?W1HGjVSia_mqqyxHI8S@}bHL&bnmz>F2r z@VzcA@?AmuYd-JL=w|k~!ZCzl0iaiCizn0=b%i+?mz35VFYJOPkRgJ4+%4m_r-J$G z7-4qTE`=+taSn|f4m`BVrS~W=EH8l~w8Mus@;P$S*LF5;3h0F}u?w^JTFL$lyv{XE z{M9)C(VTpm3D_*PiHwc!!2EGIV(kgHCM$AjA+NPk&X!{8$N9C6%eK*KR_>7KEY$Qe zh_oi+J$Gf03_*V6@wCV=%xKQkwFPZGdU@Hg-a*Hk`8kOEL)0#%J$Kr!_Ctq4ZjT>yySOMF6XB+8A2%s3 zGz=^RjC=!o(j|UV48`IVQsKNO&JB!2%*?w0E!Zklo!iwLC&RlR+nd{3G^TTuw9gq2 zbgad9uyZ--x@U#1FuspQ|5t%&Y=?PJMWQeA$jr~oH~3`Nguk)4Oj+$LGOpCg{9Ic( zANC9TQW8F`O$x@d9P}m`3^#XK63l}d{Dg9ldffH2@F8mY-SH_jmM?_|bpfn!foR@8 ze7ebbpH@PiL`3g!%Pv;7p{R1x$0Zbu2><-lGgmWSeP+zAT09btbW0cqovUKuN9NMz z@5vZF;S(*VI2axUIZM6FP}Qv?Sr~Q~I|*1m!b7;QajA;#Sr@xv^#$`ZNCb1)~P{Tgc9k1ntlkPE4BWZm#8eh30gm0;bj zqYPJRcaL;YQ>spsGNeAFvY^qVu}`FLkV5^fTJytB?Bo_N7oGGD>PRUq%Dj`X$ZCBM z0FJADwQ?yRF1#eE$(~kijMJ&UD=$N+QT$qA)PxAu;F7NLn`4^)zoA|+#FfWfce_#N z$&lw!wpE)!H`vHnffP{QNRxhYG4N<-d<}|Y@o%-ysN0A7%#Ja?05c~xwPU3EWp3}p zfwYthK0~?;SWUUd_VgxFzuE)jy}ncutx5JxY(AI-=uG1+lQ)P6I=3g6g>=$w`#9dc zuj7x@Hh(u5xS0`3@-D_;!>`>iZTpXNh4s-N;m__4ewOrwY#kxY1gt9|6u5zs)-p`O ztWcSQYz3X<0UOPB<@tUKil__=4WTNY*K6CJ*9pC4Bjlz^Go9cLfyTikke4E9lDJ=D zia)I;%MiALn<}ixx}7A-Fqly~w4(IuWR)RP@-dB3Uu2b4N9>})8JweU;Ax`Oc|Ih5 zVjGjpgwXb!7zBOrw z5=;sJWd^$ow7fzSD}A+H6kba7%188HMYumjHGO}_u+8g0G^H;)&_r!O{-oJWJXd3F zDC+6Fs$FTsbiqq>fNVM1a+mKG{G3TT>f4YxU_@6I5-C;!!ouuxxhTY|}nv56TxD^f;wh zTtgu7wjRg5Yjpoe(JXjJ{9JjX;x(OFaJ!rnBw0wxzF-5A!Hdxn`OoD3*kp@HKslvm zE4$#fA(&|U<(h_Y5O3N*oEpovQ3OiSMM}Unu_$ua#LQFU;JzfW8{VmC<4a=LszZF2 zPLP^ZrB|A4p2Yac9KDs~9PSMNLqLIrBK`K@kOGw|)$lz6jK8F8A!G5s-U51*Vl6q* z<)qV0WToJ#Fd~t#RWhHGp-A%U?75Z$YcIW@v&I$*1>(BDM$HUyjVPQ}x6!r!*PU>5 zLu)Wud>5WnE8+LVy7%ZSd1+S{fNvMnsnLUt4SorIJ&lvxsmSbjO6mBhyU!^Bm# zxCG$s1G^Wz?X-Yu)QTXn=gn#~Rh^0x!izIpIrMqZpd6Qd#53820=0=7j>~tNMV@#u z0fx`Mise+fbj$W;MiH(zLNGDfy(F0|a!Y29D%Ro;z!5*ZW$7E(l}$IbQRlaLSKsV) z>lS-Y8c=nnY9hLZ5tCe_P|kiwhdz2Zz4#%iUxbH7Mv=-e z&l;o<6jotM*{+7wSSdI$6pO>7V9Rl8H`t9A>m`!YY>T-#U1hKXzX->_mMVhfpzk?B z2NllUD0h>!3xWbqZyrmIng_yyX{(7shUyiONm*s~1Em0-^`nFRC-k1=u!4jsD1Yff zmwg7AJ-w2+7|sMZ#<_i@;lXU=DRpjtpILa4@SyO z)T(_&MVtXP(SdwX0WeJ!Lf}!_QxPH^HxYb^R6FQgtlLQCveUw6jO&^pMRoAdWHD*} z<%o$Ln0*?*0m*R0@1~Rky!wkE$&lV`W;xsEN&#uO)n?-|YT3$**^J`#-WZ}k5~?JC z4-E2i%Vs}yCYztKVWeeK^;?5J5yQe7p%iM8m2$I^O>`G6TwVB03zRs70`6dsip6Aw zMs2uGSll36Y>&+}EGKIg$GoAGus*RChlv<+6a%h=6WeJERCcGHZ7t~jvLi% z%@+eWt!M_M@LcetQSvRZ1mGV9rEn!z6ejOH)Fc=T7BRF~DITgF6^gLe7{~U=re&9Y z8AIO078s7viGL%7si;DXCDmtU%LrMo$9jlLrvc+l<%3zqOnuZgP@7(GN{hy=-%6K@ z;-6}*wr~@)L=U2>Ymt_;9WwIvIvGysDM~$dVtZR1` z@Kc&n%XI1TMY7&1bFBFYhwV(()vIUAx>p*sjgAIiN2HL3B>v+)|w@| zIlf3Aw;qboa)KuPQmWGdcZUO&8~pf4!|$U5bd6YAWNYcD)5WT}f^&eeseJ+8GC4;1 zC`7XDl)Whq^5^c9@$y#$W3<=NtrLr9fdq{hfR%^3eSnA>dN&lGQm7sp`MKgKg1p5g zBWJV{8VWX#opnTD(IPEi(OOtbXcGe1B=B1p3JpN#$C%5STSL96@_E55>MBH@7pkXxuzEgF*TUME>FiUHpYb zjm(rvTK3J5EjwaD7+$3j<)6JiTr8b;>Gcq2DETi67Q48o*o>0Tu#> zV}_eT?{Czti|ud0W5b`qFK2DXe|uF@#@bf{&K90ZyB%7TjU1eO-#$0kcL-MdAGR(> zu?1~Ixx1Qredm1Q(Od++JPI8$g>F3;&~mBH5o6knRwx@pVJ~v?9SZy3a-Le9wvtS| zWGh{_u||y@$&^I#z*_}Ed3pPGunY-jWO1Y+t@2px9~>__r;YAsl% zk5!NXW(x>JZaDXMJuAYv@N{+IK8#-l@C*&YXi^uO+}IPP+VDsIEQcb06s%p#&M|1Y zrWM$rY@7877+r+UJ6_U9aAvdeM>U@+VqRnUnmex*P{?Y_M$IHJlEet&3(b8a{BA#P zVi+Zd=qT%kL5O!m%b&ua&q}vki1$(jAu^Hv!vfs!>`lbH6QR($ONj!WdI%yZ5$tuy zE_l(mJ9TDV$b=k%A^OCyOe7?2*#MJ#d6**HPz__y!Qy&Fw7lW@O6ns=EnT#$)U-e} zVU~)o7KqK9X~qj3+ViF%(8FX=94MH(za(FS6m~b&Sg0}+UZi0SI8*HwnN<9WsUpEr zFjut7JVYy{{9_))`f$u~n{*>Hh$lZ1KyBJ^w4V4#-zfm92oQO@>mpl+u5`AO^BX>M zek$GHGvB?R-SWb_3V~oUkKLg7b4knjY!>OASm`ZjIeoMUXsAEKyvvoxTax5CqAN+H zo8Nl}Sp7M`1{{euCSsvav$UD9uqsSRg&lP~<7P)NTD;Px_VR|jko3@K(;mtMR58BO z0~ZA{jLOWPEz1s*Rlv`LeJq=Ru+vD-v!cP&HYj@qRG8}@KCv!>&e?Q!#MGK=w2vsD z>f)=q+^MBs$HZ^>ShM2J>_ z=%NXxjm+wzW@eV%=a6HZM=C(I6vRjHZ;&gZk9$B5Yr@3CQS| z)C9BguvsSx07|vJv?y*+OorF-l5I1cJBU`mI0^Zb*ZsN+`dFuFBqE)B`!Itg4 z@0T+p{rRisxG61O7s@+l3jniu3~(m1^*P{GR$7D!$*2!_7)QUOwsd&sxsGY%ptM2b z^Lhu^v`C^&(CTY9zzwtAN;{i!vc(qI&30(jZ)iu&=_{0Y-LqENLvd7_j$in*s!KB2mTsC77qiQV%++p8X*vT zdS)DTuWHC0iQYZtsUzo&Hjm|1=v!01Xavl}eVCKN@#E>z@+@f7pP`SM z?TMV}g6B=L*Aa#3*KW_tC{8u%-~QU0j%w@&3VuP@TpuH!wg?4-#MAY-q%DH`kl17d zNcM*?IL-he7g9{CDFFl6yM;W(Vu&fpLV@?`*gtfD0 zeY|j*AFl`UX|UuLhx#3!V_*Z(Fp=Vb%Ba;&d(TuWn+Y&Y;Mzb$iyOt94zxMW=O%_8!t4i znYiT%RV1U4I0+Uev#14WOpjqc5(1Lu$C*BrI7h4W7bA-tH91=P`+k6j(xOPQ=eAM) zhKWnaOOQV1YX0;)G;Rmnn;6|93`@#!Wk5QO;}Dj+g09>11UlaEylX*BiEnTSr#3sc!^DiEm|L$)lERB5I7d zy~8W6iL+kL3-P78iHmkAM7gA#thcBX9~64MhpFI(pLUq(3BeE~X1Ux7-=i0xL+aB6 zLrAwMCZO(7VGjnyLM8#O@J-G@yxp?x_fZQT_`F>rbh?OGYk9!Q#V({AIi!+INF`HA zovi_JvVoD&^C6%t;ZV0J^4E@Uuc`&SJC!0p)GjS05^?U2LOg6h#91|`5>l#2rDVhs z^v#iI0?AJoZY%6ZUfs3o-pYAOR;sWk zJYUttm;3`Y3oHEv`&^TD1OhXOHDule;N8bHs&pt8Vu1=Ty`%2N?Al-TOoDWHB_Q>gIU!l-w@DOkbaqX2(1 zJn=7|j{RePyZVZr!Arn5Q}7`gis8dwpvN9tiJjq16QWr`OcttUn#)oax3TWDm3jSB z=?QD0^7}x+aKAuCkmUlwWk8SBmos`S;1%1qjKAj$3xH&hT!nj&8dXRi_Lmv?(2Szwl7(?1_8*?+UesvDIX+Pj6{%mk%us~fe06&!;n_mjc}T58Kz)p z8)@%M5;b;{=>zR33N-Ijl1TJvt0BImDv>6Whj4sTj%{3>kMXrJc-1y?p-{Cfr-?Iq z)l#h>;{#;TRM4f;T&OCLhJc0|2$oF? zQN)!tSStut1m=V!4~}nb(w&@Q1Qr{x{O{zGTd&MDCLr~DM0e4Rr8uh9rW%BVkERzzSG*3Cq5Qikr;k;f{< zFueO};h~KAsfWTRUTbP)t0M%cW8U2X)&}yH=0JQ}q2l7Lw9c?MZSD@H;@p=(La=<% zJxX}>pi($Y#Z#ocv`eNuuJ`m~3P$V&e3_JVRex2I<Pr8&H? zQbWHLpD&8+QjO7m_4lNr@K0?0#K98D~7{`Uy)^ihL=6{6SmV_%OCP zgqul_$IvNdiT z)5R&R9YWf^5O?4Qy5)9HM zmFKLo=zD)8W_XNZHQcF+YPOcgMUHu3b}2trG6dpbraZ`MjZJ83H_)9dL_2jDUA1F| zHV&J(kv;YRO_DWd8VnK1*BuSd(?`QT3Kpw-PZz>u$L~vB))T+qv0c*M@bZ+2@`u7w!DGixyq4? zo2iC@W`G6Mzo%z&=}u?2mxfjZgYgNsWqQo#X8MC)FX)P36?v|%{LgvK8>e1^!*-P{ zBete=`-2@$`s!{R{r!8)+guX1Fs4(q1GLGef{KNv@od^DE=Hq2iZVw+7{^^Pg6`@E(b@mlD0lk~gFR zvGZ_2!#%==ct@qKP{)gkZL>E`s#n+}3)@A)2&+&3A>|E13F3SU2q9EKL=Aa}Q?~A8 zzk$KA$DLMgOP1`Yd58KNF%r%Dpon8+fzNT|R$|Ml&m&;_T~sAAOu9f4FITB(Uy9dS znKx)(Y)uOlHl~A2D?~BwAszH#6npt9s2{DSeROE+f|EAK*^${)VhvaIw)d3Ri)_yw zaI)dKdfltEiF$nXJ=DG7^!2CevJ=qXp8xCJX!UEac(tWH3UTx^VE^@UmDuGMKl-uJ zv^K9EQa(&VV^<02&_le81CNIj|>i3@3MxZzTWtyDPxF#0rSt#`|p_Bw&K)pKU zBvqz)s4a~?N+RVYng_E5dQt`XNjf3dEGh-IcbnqR@jGLvU1mrcYW)1A19ORTReuWT z>SECPD8X-Qr*Sb5-OIw#8~HJ+%t-SaEGi;G48@qapXqk*F+G(vvP_Qx%s8$0KWjKv zNW%#&J1TqBx+14+mGE6Tvx}zX#z~3~BIVsWE8d9SrUXg;D7IdPbf(gF zxl;@WLk*EDRq#iu$XiL$Ac#wvFu zmL8iZV)GTt8)h0~3 zoJ^dz4q+!TUVlSD|FHRZ85mY5sC#X}Y%K|)zO_}&ecG{^x=~hWTQc9I_2mdyR7*6! zoTo~!-YNgDIHp~m^Z~+9<$SN%=URS;xAX5ihf&Nhcw56s3;x?JKfFg+51=t=VZa}fTb>Xu8<<3lVjrH?xmbUseXdw?#7bqzNC`?`F|Tp&x$pT$Ev3_w2|Br; zGTKEG(q!b46F{ixn%yeMsxidL&fV(LE7M|zhu$6xmvxgt$17){sv!*_q0o0HbQv{e zK8hFdQZhDo!tt5u`pFIXT@LpWV*A^nMfdpGoGy?|F8)Rm3d zCx`uw`e}0Ni3H$+Aoqc~_LI&)+IG=EIweH4rAhsp+cUf%eh%`e%atYc06xDWF(!XKo`G%rp=iE?xGzy$eWoZ%SxAWI$jrrRe*1W>N9gqCH}K1P*KUOectqPUxF#<# zq@1KGT`LXeZEc|+2xN>fE88-N0p5HK{p@XpF-c-F5qIAOOa^V2e7|; zrUE=wc3$dK;yDn#%PK5F-TM5iUT}DyT}u@!0^{HB_D-B*zkODSlU0m%Qq>F7BpVK* zFlhgv+eeKkf0a4tF>7@5z1_H@n7bM2SKh)d9y?FPx={W)JfYh8R?o@Qdz|FS z1{|e3$0e}QpmiG@!Uj=Xk)ME+dMXc4!ht4{o?vK@;hJST8wjZvgI&TYe&gSbg_GY* zNypeVXlx^W%w!Z`TZ66&U>+KDphfe4=w^=`R{u`lHuQ|dmjkMR#TVK0wf!Wj&wmxEuY_s6v z;hB@)ZCGo-A+?a4s#KhZ`1Kx*BZUH#of2qU3mH6*nJ0IIdcjDz$SKcej{CwWEJC*7 z!!v+P?nj^FCLUj@kPFHJl@}*bR&8BnR&6-saQkRJoqRU32f)b5w53hLqe<7DWE3kR=_ORMdG6t-UUQkLKpmWDv!TCun!Tvg(t_E2`rV2D#sn0Km5@ez4ij!A5$EIg_yWSlxH~S4ED- zvZ>BT_BLqTp`dd9AwagFzvKAIKRkAxfa`x8-M#`+m{$pwH|X!3F<&Q8M=x~{Jogm9 z?PMIr*ke3IMe++pL{s+R!+S+t=iQ7F@o)WbB7*;1FZdu+dJ4$NlaHVsOCNgvrD*Z+ z>t^Cjz;E`9ig9q4n+7-;y}C#J&`ILh1tzwO((8iXi4{;F||Kw1>J9F90)OSvVB z2=}?xZ8|Ek5x72Ftk{2pef&3ojm%LdFZJl%{a2eD#^ zu_io4EvVEyr@&mG-E1&=T0Ns<63QJ0M$Jpo;>0t7#$;Bt6k?%?b-OuVc(q3}df-J) zClZ)R3zBtZ1{6TI#+6C0B+HB)$H{{wNxO(1M}{$l3GS`Kh(_fea%&?At$U91Fl7Z) zu#l-qQU2K_6iC$c__qixk&m_^@8s#r%=ikO{*|zobY_w zzy@yLctvk3dq9t8dZWzih-TLzDEFj^`!`)0PQI^~=B`Hs41>s`;o_Z-9~R3;K=a~6 z;R*dphc*U!o{}vYhgZYib^m&^-O>JX)X9L=TU&vllNyd_j{m)4v%bgH3Gi5Lv>x!@ zPV`4n9@0pkr+SMP>f0&s{+bO2^|^9W-ho)|xsw0F5xQ-sI{%x#|L;@ZesSBg7PD<) zuhO^&GH8%i%j)L_|7NS#XHnbpA+sHG;1}@lQF*My4P@;A_fCF9dX9^yK0!*5vHcDQ zrOD!Te>pW%v4BQwIwWb{XHi@m*RIFpnS02G9g~_ngik7OYUlW=Ewfj=G>=n z|ISw$11D}5cUbV}<@si;VMqJtCia);yBlL=jka;5EtA31*ky6%w<2KOskhTWWrX&z zyXkP3G#7SmIAQ(|;ikBj*Hy~7_iA0fgOYg^@8Ln}=7hXDj#tak4-1y{8>`f1GPNWU)Uua;Y+1hZd_l`1;8`NBZ-vV^#Wd{@ zyWc$6lAu2^U`$TWov4(0A{@%(@p7S@j2VeO=~*lHwmgz89^Y2!QXEwZ;SJlLUJ5@F zv#W5o(cFNzpPoNSK&!d!qXFKBz&j>M5EwRw^w!)Q7lTs_j~hUXru3za7;D6TI30Ebc=j{{VC39b!w#WC~eA${@x|akk%j$mBz4_at zm<{2MG^lMM+bt=*VUmUK-;e0&XI#@*d?EH+pz?=Il$iiv~q@?PGx_i+n`+Sw%rXl4%NP$rp6oQJ2~ zF5kzH+eYP)$D6xq02aIavx{=o5W7f&oK~gvAFhfF40Z*1I z=%bWphqyjBgy1iRVO8!BeJk_LdS6yQ>|yR=9?|ulXLc;_KO#Ayi|)g&g!~T{6>34G zq;m0{V*1rMV{ce{_BWy82~FC*@h)QO5Shl1ZB|z&^fqY&=W|*S`keCgrD*w0jLLTI zaJQ$L@zl9ffx}LRiP5_+$oY9)f2aRvgx&_XV~)elM&#RF1o04w>tUxB7>VE84htiWgpy zw2GF=jG~&ixTq9f2KObg65{J7L-gH1nkZ8QJ z5V#_#wEp=3;JOS-lkJuT|I?CL77W;@TSDLvujDLi1`Pi+8P&&4!kSVKg&u}3(6|N- zW0TZ;Gbs=sMGJM~L$r_5OV??d9cFWu-*?{()*pi?xQ)v@A(+xZqC~e_=Il67klR)t zJd(4zr*BwerT9VR*Lx*2!aOv7Le`pZCcl z{{>Y|ruMy0oX2+MGn_l>v^QGmUCI49d9U6cq+^J$_%4*3mYA3hbzeQou9WP=0Iu)R zbKWm3Fe`Yt-T2t02h7Qw#J2|@AB*81>koW4XdBn}Ue6s9{$9rf9tS=?)9*<_wsb#T zW%*j3ZB*^as_e*u>X(q|p_V(jb=$XssAIFs@;vCLw{ zXrp{AWU?a$j%p}OS3ZHeI=Gnais&-L3f*u@w!G&srh@fr9-Q0}(8y=YJ~gUV*rFq+ zF6}sU%?hyi#NrLpHr|px9YeVJUTFL*KUN9;q^iImS~MDE+$q^Jxnto{$k{(zU1?5g zY}*eH<7`B*Gv?X9$0s&fg~3%SjSUeWC}+*CK4nhdm`rO>dWo7S#V+4n60 zjmh3J!{Zi@=Vy~Bwz==vO>kZ2|0%f=%jTHTVY2UAL0lnT{{<|c)gRv{ICp_5W|YII zW<44%PJfJQ+%}KyoEHwODxq6OLs_OrS=hy0HrXFgiU{TR zmr@|s_eveJankzQAJ+Rg6nc0(t&ycPF57H75%Pa4I0d%(Uon(>O_w=IA9#_TLNwpSR`)944bCU{ zwS#auIBpaPm=uB)9X34j(x9|LKceoi9KJE;xJ(&M|64UgEYMV}87(CTvC zX$6J=JI)@b`dhP2j{ss2M659etp+8j6V@T{ipiC}YcOOoMc?W=GJW7;=zux^mPbQU z$CIV-B)jn;6s`jhdfW$)A-^&?8a_47G$u+6(xEeyFMsb>v@sTV{D)_bjrxAKpMS^r zlP~_S<8Pm(n5qLG8y`@IuM`1$&a-s;m)x7<(ck^z_|iXn!T8x%d}#cu4@gdYY#uQLiBwBf0S-_8zrm3`JfK*2&p!?bVA5vq3RzA(ZpZc|3 z=SZcW0Ds7@fot`1+?J{jOs*g_0mBaTOL3WG1u#3AM7sxad*&?v@@AnvbO zbQlXE0~sGINwy5@Z`aq&h~<^48G}2yLB~Snv&fNg&8Ss*CP=ja)xG@9vnKM<#LEu} z>565?4w0FQEVEuSP~HC({~!Cpe57@FKOeLZr^ zJz4PcY+hN<%1u=tu{njwYn@@qEwa;_4E`7^QP!|-c)_JVrAbrJYKC8F21(fBj!H)+ zKo_~z+Q$g;<`UwTDd4FpZp&*87Hg6rE;-Vy=mSG{B0BvNNk%}Z8|4a7_x)m`ifRNxh7{*^3JPvA*U z{iRP?-9I(%m&NexZ~Mj=3s1cumrGohKqO%6jy8TDrYq%IdmHdK)+Z<8)^hC_p|V~@ zDa^hf(qm{kR;@#_L>cdzOraEwvBGfL z?;&>CS$G8}7|9u*5yK4bLAhDV>)L~Txh~6gT409l2crc08JlAr-s^4LB(L_~y1aDF zQQMk_U`0D5-1E_YYK~7T7-tidO=An z78l8jFVmZX)tqiz_gFRsdbys1Hw|vm#|AAyn-*694`hh|dvK(le}KW}n*d;d@xU26 z-C)hRyi4};ld zENLgnH+OX%rbj(V!BQ3F0SYW&uOl^e&uo{u#0Sj(4 zJ-jggo7`5C6_>);aGTR^&nYivW?==UqqXwCp!iHacSn(5#+wNgMoaSV9)cB zU%S()_*J;D6`8WTcP|Di+1HkTHglUr%SwTA?Zf?VuUt7zC=1lb@^#1wX>g|`;ltX6 zlciBwXA7TK2gjTx7K`>^X?kSO9xseud$1JJ|6J$avmP{&qSdivWjwZa3X4uiRpi|S zE3Shf;E+4Y_F|qh5^R0Lf=c^h4a{P0tsZk-{|?{+2&t}qbf!OKQ>5N~=@ptatWwEB z;8T5o)xL3EQ}7Y0R7xPeZ#N*h84f;0Xa(( zrEZK1_I~japCdqmH{veG(!U=Z$Nt9-Ypf6@8zhW9i4dW3;?tIsSgq`nmGeNqSsx9w zXdG^s5u-)pjd5Mp*7jeCCr&ol57 z%Z0g@-JgI4CDzc#>O?=t!d)p#79iDWx@}6F^VQ_;A^|35bTk91z>BcHgWd}|Rd9J} zj?KPedGK>RqG~{bzZwq3B$evu`uF_e&l#8nx4nP-;uXJ>-)l6z=NGT8)Z0ng@Sktk zI&M$p^txmGt2b^hQZm;Mg?<5(?@>m(_cDm|8J2?|ReaH&-G5=9Q&-}@{JXJrd&VK> zTXCz;pIZ5c<2~Cx8LNk5aU^HQokgxDD7Hj`zN3ji`>-E!$uOEU{Jy-}#Ka*pU4g+O z%{<%|I^D=XO;_pNU@!N!d!CvNeD7sK7jVu+SQ?qmmLtrMxTo0u!uVd+b}a~)eMV+Bfb1(X1Fu2e0mZj=6Hv7$4o9p+HfK8sHGi?vp^u!dM=Y$hdptTsis zoRYp5gjl4!hydViAqkJQJ0J_Lv^p$8TB2$UMe>I55Hu`zx|eb0dZF1mAV2W^s~ua& z7~l+xL)MmInrEGa^peF>@oA@?YL~y0^qdTmFz+UJ)p0)L&l)Kcvp#1di(aocmKWCJ zA~EeQNO?Xd%&Ao4<~O-h_9n)L@SMAAPV>>2Nq#JN5s+Na$61ZBR@Mv&z?V<3OGg)4)!JUvtP zQ}H??!ND~jz4CDnp`Ez}D(>jV&(725T+s5t#_?=om24f_I<9-)mP!mTAN%tpD*nRF zj;q?LpIcvj^SJ9(UC+D5&2|ms6*73&FJCQ+MtXv8o z_u%3=cef+X=^B#VwsGatd*JR9ki(OZ@(JH^Vq@XR;+~kSZ@&AYNw#;rEAD>o<#QQ( zN3)=waP^ljT$aFJNdg>H`!~=0_VHc+(|1a#xZas$Cwy>>l0m{rVxj%0&Vyw8u$#Q@ zbIiK-6mSZP?|sBI>t~US)P>^+gh>cS@Bm&&;A8LtIAoP@tFEZz4Z#Vx3-U6Kn(%jF zIzBIa%rz4(^qqB&zo6Q>#}|O_lK8A0><`CtQMXU8;vxMU|EY3pRcoBs^(ZXf3S)1N z24Ud_PHI=!E?!fGH&a1oacsVHxO!#tv7pHXnON+vK69WZeq()S*8#|cM@glchVf2 znXZ;qOJFIP=`vX2XIk!e1&XNZl(4|yjFY27jL0Zrw@70e29AClY@b6{!8o>*=*Mv~ zShDyZ&v2Uq1RLxUY#xB=|LP~e-bn=x#xmDdIiDwE`PMLMq+XwQ!T~=4(8|DIP+fHS zc;UC~9skcC+#%q~gF^baF78`7c$NcSfnbgSVN!yUE7f-!oebWn6a8zej@+q;c`-2p zsMTQXp00i*#2lc2D1Yml%ntw*Z0kBS?-zmrEz&InJ zmL-p+o?smdM)&u)PfQkrrs}PCEI)3C-S5&@@vh7`=1RZoHfNvXD-3J8kKrBpb)WPo zBhJTzGZs3}pLVCLMGcFq`?B2rtR2&LkddG1#nM{$wl*N6O7IYF&AbYMS;RH!&o}ok^B&Ttzb98S-a6|r8E+oqfq^2T%(FfO5 zOjG6vb+h~#H%-cMf$$=jSD!aVmY=a=U1Z|N+t#aLIeI8QO9E-GWft_PMKV>;_f*e4H*^=w9_lKA8#+*31J zGVd)5-f&JRH$N|f`MlT9NjOj97qaO=OpbgJ*nj0QtT#zqk+>#OjbHLO&z_HWx%Jg& zjSa7U5|w<+EoYA_m2hCIiBYop9r3yBJ9KM?MI?=K4SCREm$Ehr%#~Pzw%{DKWy)1#2!2MtN;&{t1 z{>pg9X{R~q+M3mCb7TyA9uUlX65b!dDN+8#6Je!~Nr^I?SBK6x##sMIJVBN_l$fLk z->3a|QJzcwo#Ya1Hl+-87M)`UoduHxy#k|Vlk%a=LNf_ zyxu40l#NyfXM;?3!_*~sAS4irT_4TDkvkm^77x0ILZ~K^L&p?Y?brgopV#!-XhF1Z?AkYMYbCTrVre}$I`gtpK;g6yWe{0v5M0OUGRrIYmQ}&uZ?? zCLzyZfpA6Q6Z>c-NbsUSIXObaNy^-y1)i7GkJukXp7G(JQ+mh?C=0pzVs#b~M!3!BDxqBfoq8*9A{0L`kq7!^!$hPylqE5k7N-KJ-%hlPdcKF8(;PA@sZDO7_;-J zj#VF#7-hTLtTVC>zy88;=J8UTKZ#}@_m;nk9FAM~30`obV?o6|HL{jvs?*}1U=^1y zTb96AO9IxD72vmV~=L+L|e~m8p`+>c1_4SJT2XHvA4A%)Em7_M$I2V<%^tVKJ#O<#){1 zaqY4t5V=*SSleTnhKxJjN_{|Deo~LFRTiC9ilOqt;Wj1^lJ+m{C(ZXhpGie*SSt?N zs?uZ9C z?N;P5TSU+*bf0AW_%J(Lack^S2d8d*)CU?*E`VyktwaRHN-nDv8;G1(%xC8~K~5w; zx#P7qt%+9mB}9}1@#q86q5JS$(xU5-!Nf?(x@-~`IbkhK8hw-k97WLMP-Ir)!}GyI zEo*@_L=G~=oiOrV!&z1w_-)f#4jp#Cn3RM}c}*@wPTIsz5@gsvoyD`Pe@D7wG)c+2 zlm0THs=4HOU}EhFYwML$|lC+??^@ zBr;Z#WZuLQ##mM#EGaGQU;d^4{$I{Jucy;D%sU6cHW^z6$KNpBwp`I=2`o$C2nqb@ zfBnL^;!XczoOasjbxct9LWd(%C_vk0Y$-AMiozT?!9ljhaP|m^wP&vmuidTm;s2jf zdXr9^SfivG=MY~KMI~0>YEqPr-lHHO;NIS^$`h#wNLy_TpIVvgJuk29#B4UTANPH| zpVc#_eX-?G1+0oYP7xFKy(kxZ8$H^<;h7k6jDRL=+@L!o$)vR8Wv=0Rq`mBsb~`lw z%H|s`QaduZxd=sDxhQX??xhdF6u~-p=OirR?C)6OgsO=RlwWH6HF>fwnjV1DL|g`Ek}21>J-LZ1C{zs*B5AP5b0r1?p`JQxI4+x zW^Ft!ZFx?JPe^1E0f+$V!&RD9n1frsj-7!#NET~ky*jB*ccl(Vt(l1fv$qwp+V8Fi z%k%(GP^3P@4XaF9Nnsz-ILqotLyI)%bFSeWBVM))SuT*IxxZ`TSVn+NKdB~TP0pU= zmM86@%{4iE7@lWhWKXuZewoN1x>FWZwoVdqJ2S@ZU#v26ZW$IA;($6yN)|F-n`tri zxwH4#vQmAa-^iSYl_+h-J{;#KOk>h%&;PjJrMZX~LV8E^CO_I~Q2@ss33H zJgaIxq@0>I)A;}T`$h3mTkaoQ=B-|eH=4I>J#ONQufN7D*JxP+%Mw_Yz+n<-vc!j0 z@R=}W|8DpE3E{Bs7|#eV_>fv|(&4@A_hkWSPc!z6RcqzeE>9d1Z{c0#?M?fytzYby z?5w!Q@y{L@c&?y$Esq)R-PtI-R~d+LSFlT>6l$Z))|0PwPbUqt65Kcr&yjeXQIROA z8^8Gp*}=L@W0mZevwe=TYu{qe*R==jX;e3IZ*Ako1pZ#Qro4y1ORYpVZ{YIU_Zvr= z9{|0qSf*apcJ|xa*X^wZ=iod}-1zsG;e)G%8>70l90F!1_mChs%dB0(_lo(vAxx93dNhHrfum+Fy zJxMow-W0XNEvto0O-jyu>Cdf6rhR#422tFM4590@h_(BuMo-m~ViMz(@~5=j^Mfps zO1b*Mx)Ccz2x|ZM>>@J2=`t(^7Mb0K=*y6d2FfYkQZ;CHegVh+oZ_AH znHYOcO&Yth-3(*ur~E7gCU~|#XWVh2(~Emi%QFv4u;7nlU15x6UPo4(Jx2P}nC$|( zLkKfh@)Od6Y_QyLdiXkJ)8t@5>OW~_IAB|rsnzoT?gf@j0TSqtD;BlYWKE3a35#!M z;pyZqd|vUcS!^v;+5;(PUMhJAn@ADS)yht2tD@cD((zV)c#dX1VdYz^O$F;sFOE~< zhbrH(lbp{{_oeMtC09`ZS+LcGCQ%0n>B7Zhs+x!-k_pSrMyr z9QVAh+eR%{Y*_-!5?Gc%)_bqQ-UlF2NmP`-QM3lH#VVD3$q9y?JOW~r&<>V*XVsM# z$37{0*?ZS;xUUY3w5zBie&k7-B~^;s>Kq_w)w znsyT=y;qj8Xt)JV9dA<>JlwTp;aMZ$`lM&#wCqaAedS9^U9c7q#?PR0OjrhvHS`6% zLSB(;rPMCaoWu~gHYM&QLy(CWR5rN?ah;0oL)o~m;^GT@rQiD10r{L)-~=DGPE_!I zjbYE{>Yt9;2--_b4hbxxk(iOIu1`Sw;WHst%veJ*o-&yIe?YlblKo1A;0faK(UT@~ z%I0qa=#UFz*&=3{+?Ab%vMs2P)mUL;8KO#^kN{IIng?RcoOw^r!|jp&CpAB=qLI7Y zDgm`f-etsW?gT1Sg?_U|umo3&KbzWoek!tTWzu>1}m5Pn*dqrWAcT2sNUB& zNkua9FfLZDlr~1>YK`UxDdDk9<=n53DJP2X648reNZP{MvY1eR=elnVSz;q0S#4>G za)J29jB#7GNLlX1x?;=RrBSl1U7-W~+7e{zH12mHU8ZR&q{)%jI?bV&?X?J0Ia!X& zVmLQey;x(=WBp=7D~(mGU$IhKfnaw;h!Ny2^U_OuZAvygSv|-VI$YReC<$ZShu)hq z#!RNTf$wOqpBZ@~ODy?b&yb>IV)9(X*eiklUhOhV`9L{7bh?x|ZuK|VO9=%YnhyH? z2CMsWb(bZuEP-VSv;@4rDiMX<%kkJq+`eOurMM%kz#byxG&g?4BBdl+a%E?~Sdu#* zie9jS35hqHU=tEjL7LbPh^uDnI4B%t4-4amvQ}xYf0VTAPC9l_Zt{vz_WqT9nZ1VC zWb+;NjyX~kBo{o=Sd047hSgjvmwpT+2aKOmmi3VA#$XNhL_EZlxXQRUXeoG|GQQv1 z001BWNkl(Kf-+p-VA_^eg*(@RF6w+-6_;a-j$3*h8mY#utSri(Roh zR=9TdSzv?VZOGLsDUU;a%IE=iXm?4lkwwCXkO_mXGPk*NW&vvv#^GR?dz1K~&n>E$ zj1oY=dTCDU)-YU16VJgUn8rC}0RY1OG2IBhh;aQJ{w(Heq0uOP*3m?T$tO*Hz+7v1 zXM`%+-2m8bQI~tjAO`ookb}4s(oVpx-sJ*#P}xrGV&wRW8YIC?Vf-Hd3}l2}L4>%O zRf@}^fVP~tO?^^yxg}=wmS#J>8MmQw>2Zewz(r(FhP9yFyHsEK0vTIL}W z{Xzz9g>p;~ZfCYq^!;(IYBx*UGK!QiA)_J4K&NlhKcz9?Q@-v8_j`TlX8P;CK43B$ zn#4I7YMt>&871P`PrT)Z$l9E!f^J7;6U5B8XV#B&5UJ~@!QK@^g7JO13bm4y?Sp+JS*GJ{6FgcNi+zf{7`%?vLVF*s z@>aU@timEI^qG~MshXcfF+S4AapqB+I>DN;d1A=ypH}trZU%m!2m`i!=l$Fmy_Jx8 zNKp>gHTOm4eBqStjYO@q4Svj?+{(_#aPmlMjG($tS^ff)V-Yd3QiI~tpGF$u%rQ2e zpYv`i%`veh9BS&0$>#1lOz$%@UJmOrN+}=9!06cx1%~p-#lbP6>3`grQ?W(^I ze;&_m>u3X4W4~G;sG#-t5Cr`@pyULMyJ#>FPP#cAT@%QbnQFCJT3qJlrjg+!TANse zGHIQe&XxvT+EgzmGAJt>55hWuD;}0978CuC{_Z3ICg;xJ7jiOX?{T^512j(>EO9@i z?`eX$hwj7LuKVCwXqF(5_AaY2JPlKm?pPyd=cdujJOgVE%OUf{B!}8~++=*)GHT+H zl>3LI9I&r3@x`&iXPrIjE?~QJ|`bgHwTL214+m+={BV1A)?#jiQs7Cvcic0GN;c0rEs5C&hMyJEYun zxVg8_D9ct?VhZ+N_K_9B8LM%V*AE^(D}|j_YjavhxQvx+GbLu)91GBXj`{H(8ociP z5IiWW3q5wNkt@gOm$9Q3ZC2XW{5;(#Qgd++^#;Ya!WFHw6MPT-G z_DkbEduSw(2bmEg9<-~6ICLZ1Ugt=dVwoKq7HniZNxS&xeYA`$ZclL^H!YjBJz-Gl z*M40^SYaCPAw3IaJy>hB^{ZFPvC_}5zY2zB=AOlc4agAoIbO2AMow|4yqrI19E zsKcyW26@c~>nYXfP|cJduv)?}3rL?%q+#mg1o#^|*^&i#3*$^ivk(R+3SiLL4w`b! z#0z3kwn4M|VAlFR#5Jyr0jw(pP;8lkOxV>dmYG=J5}2MEh2Xi++~DWig62sBK&n8& zVmh|8c;GicV?b3oMXcKD;6roy$Kd0c9v@81X)O8SCS9(_OpYy2x4Q<`A+iJl5}8a) z2D_xC-g#0N5kWQC?m^z9x&r_YW0Tc?mIrQ2<_87Pi$EB1cjZ04u}GnjK?4);-xfI9 z;=ZL{EZFqB`?~&LoW_rImNi{7pY1RQwz6Vk#M&&?>XWNKn(8Yb0jueZ^F#r4ts=F8(Q5Q{a0r^b8FlUnogIf|6I!EM>c z5{~b>$x*p!`jByNN7>kH>Ehm+4~#V@lrVR~%`h{|i+C$5YM)>k_i*?Bm`hT?G0F=IKHE{G-C}mCiWwzQkU!7N@s6| zbj34_J@cRvsd-=59zn)G_8O_4499P*Vd$qC@tCz~XJEA64iMwR{4c+X{& z(y@t;>o^OunehNWuJ+EtpSAUN+;E5Q5TW4eac$x%8nhzPr{E zv;R_b^Ag&xubritTbzZu2;ED0y`nYEGtRja^szlHv=P=7hszhrIdc=)#16oZ{{mAQTOHY*86F3@~GR+BMa?+^O7wk#qHBH2I!5sFG91XudrhTr$CK z{a0U?J_x|GuPhnV+&)G^-VOGv%n5H%k}Hr`%P}LS23yG~Bp9m{AXoJ&x1tO(ux=(z zzdQ&{9%i857g7m>^O=UApPQr!1$te6pFfsKXyrV81;};(hzQ^U&ms?U~Z;a_4zo3n%t0uCa@tv-GK5Hp7PqP&h7tw&E0Ex11nSSn}fCmuJ}a z!+frFtmN%xp~0EJeSm)4?b>Y?&~F=EfWI^Nlm)2fW!iw;S)AQqlh!Cp7%yndO4G%4 zY#=0zVezMbYtr>%-|JP}9phH&AKhy*<~9x|_F`7Dx}Iv2sUP>@H` z%txLf$6n8tU&|6$mcX(EmL>4Dk$_2qJXdOOJwR5zI>*qC3i@&tfJ7vS^_r~AQ8-dv z_5m;n;WkS?@@KV@KdnJYE6k!(N4-a{Q8K9&igR8e>lWv%F6~!pb>SIqclf$p>QMG& zFUB_m7eV$I@K1Xq*)zo0iX(^c(#XEs*_)}6@k)8h*pmp$k+;KO)7}@^x1tO+xHBrq zUK}N7D^6V|dp({syqAZW>kFyrt<*3#SjE`OI4j5S*kJ>uDR|x2kASld=x*R)s|sVv?{!^{(={k@{(EbtyFDRQHhThK(7fv@dDP6E zDk&tXbX$%9sg(kn&M&a&_PT_+-oT0u13-r=bkzEqQ z`^s=re{_e`P)wh8zePU0T0C<>j5}TP$m|d9%5_aikJ8pvNG}vpV?GW&b(kUo5EVISS1cr zfM{Z$bQM}3li;>`Q~_zuw0PL;UH#*)syj1@sYm)UM5IYc;$)KQJ^d8$A9Cd68;)zM z#exTnhX$4WAZ2zL^q7YXXWZsorjX#o8h>UQ0{=NqgH0r zI_uG;`7JkL*S|=g%P%E>$C^8a3-r0~XRhmFt*KrW?cP{xE$fjtwu~QpqkG;`cw4(> z;{rERtcY138EGL~9?Q$GWeF@xU|9mo68M@)fTbT7JS)4jB!lbvn2+o~+W%1QN@->? zRiq$s(s;74w#$`HL}}F;y=!k?r}ciFTqV{xSrlYy!3xd2I_P)b{ykd$RhI8l@n%)* z#}G9vNAZrah01$!$O|v;pC&#te44#5c%B#g4B-<-QAK2eK}vzD&l!qMP1+7|gbPNI91#No!9|iETi41+LYot| z6OtJtOCxdi=2Bpny1wf*KX`O>4Y5gRU}u5OBvLS)095h-gVJV>W!@@=*nwwB8H_>{ zAR0Iwpcqic|BR)BPW;|62w{TJq?UKmM53r{3(DZi){3Ce#C$O-0-6ju%7PFen9stH z`7+;!frT{8|Cm6UL>5^xnyGTYKn8%(ga_dHiHynsQrb_91i(iBAT>U;mqA#-(vYT7 zWoHmlmyV4p=3SO08Wy0O!IA880j5rwS#4zCtv-}g^3-v!Voo4d`oD@7=$(^6V0zoT zCXDDl3TY?|TzJc%)+fP5ZsjrCwg!LZ2}LK+k6Z?h_7KXT_dqZJPrpwLqJ&8QV?l8L zdYn{1BV)KMp6+i8yh%pnMsZF#UhmO3WZXeulQl5|uSrL=Eg7Fld5&cVl7tH<>883hKISwzjt8`RE^{c>3&yuk|JL6asxeuw(wS>1 zE7|9eCC_IpA5t7nI+%sGg1nHYV~_M>i-_893k+gsz2E`LglQMFns>FnMA}N69`JY!M9VLxc;@MtM)}gm{v$-^|X@(%*b;A`{P?-gTz)X=@)( zZiMVj%`>7aj#8S<%x-qIm&G^|{59d?QZibJ?3!m^#A7IJ5Xocj7Z~6y(35qp<|>6+ z_?${ToVJj1o+EKM9NB6|bDtPvN|&0%Q)#U6jp>#>g@U(~JAq%&#D^jCeK2q?1W?-y zSxhwDnD4kAOyyL~fEB$*SYno{oWU)fp!=Pepa3=GtEyC>tB6fdxGRj1Lq^mX%#mg? zyy-5`&mG+F*4-MEMHAcI7*HDm1^ce*#HTC`2T1!FMV@%9r5BB^0g&5G@9THF zfiWclc9;}1@NV;8k;&O$vIs0^27d-^EEOg1s<$mFfLZ=cT68``qzQlv39Vp4XJ%8e znp6vlZ`ofK5;xRm_~=V>BI;f~qBSTDUKyNd#Cy=z1o0TC#0fmST@9IalU2lh;ikCn z%whOD`NX5yDDK#X$P%pUWpMy1s~KFRnT8+>~ONqbh8d!-jCyJ3>H8>>*N(Jz;&KOj#g_5f#Z=FW90bJY zOXM>wbdDKg9LWt1>yzc-VNbnlarK|{17leS<4}7HgR` zWxg+q{*)Yp(LsHc^$;I;lF{%0%e{69TVRWzXI{6PgD$K^*|J2gr7>(vBpCrSL~|Zi z>I-S~WN>yUPp-1q`TlZUpt_yTy*J(ilFuqOP0zLE*RlkbC9o`kWeI#OB!Kd8AD$dq zz8!U={p%nJ(G0-Zv&&81`y$F-VG(TxWRC_>`ZyCTEo8~l=icH}#v1LvkO*R|d~A>I zThd1H$kM*CC}lgy$lvMt&H!j^sC@!=#-p??NA!TfxklKk-R@e;+8{jxEYeNt-vCGpqKFZ{uM+68UKo%ASSU9v zF7#&4eFY*C+#VrXcmPLZ*6ziCJ8P}$TAw2%u;6DqkCyJ2P$o^h%i*4K?=oO(O?b#2 z?nqAB=2F_CkmrPN)j3amOMClLw=>`>_tmruRty-mW}0s^2zcf9J~TM&0+8)*d9Thf zS@h>+p{qfKmOrwLCB+cW??ntG8&YU?K>r~I1}WYJ&gD6pcom)BlbVoPS~8T(+#LeI zP5@AHsAd$2X5d09tvAW_Xw&J7Rw3|Fk)zDROb!!FcVlT1GV9X5Zg7z`TXa0^BWT}e znbs$KUjsFocP8yjewKUnk*8oDoafm>H7mczb1Y~{$YA2ENeO^wQqGb{NZy<(UOkzt zYdx8Yv;$@>AI4P?AtwxoR>$|2#VqqAqrr(m`JMW?Z$p$jt0eQF&&l$PvND0PYS1x; zDv?TCYH5o5s}?367oTd{ka)n(dL!>QFQl9T9vx22GMI3c;CXH*whN98Zf_%`LB>F!6-tGl#V0H^-akeZWaw17S z^f&KzQLGu|$J0mEpB_Jud)3qa*IAN^Jl1&dYEHG&{}~mfq+zTh65OmS9?Kg~*AY3} z(wBJx8I2`AXNkmsobNp~sc3&je|QPvSqMAic=@#~fn^CSOJG?7Ut0;V=Rs^bDVaS~ zoP$hc%Q00VOg2_zad)O%?L}Bu7WA`zVbxe`?-kmi?|fEN_Q_z=90nYMP>1<~(QDs` z*&(Ea$aCVOJ|tfoQiy0C{3O_ZLFf56fbG#Jp+ zP&XU1Uq^y)i%bD^0_#aI5%XKXGJwpGa|W6ay3chge}9v(T#tYfs}w-xLtKkcIlCCv z2F`IZScWABP&h|Doo!XSC8xp3`z+NrjcSWWcSvUiBb{UWi3WoNm?5hOtYKq!bwC>p z59v!iW121CoiSu|Y%)Pvu4BGP997C|c|~I%An#6Ma01dYic9=6vf;5TpIQgb7hvbT z6NJ$I1lVh$t-`-nKWO@OpN@?4M2Kr++R@<8&!cT+i7MFbI+@s2KRZj^T)q1Kmf5`Q z+`oB30lvfEr^FT%Dbk0Pulpjtt&w9}rXuJ3IPnK^L#{=pVl|8VUc2OlRE13Sp{!UQ zx)0VUU~`JgvpG5C+J(|%F$;(jN)$;lY2v?{`guwr zngQtP%H(B1w5uM(#pER}d7MWJ!LchH<+?stev;`fZebmxruy?NE!N3mSCkgHu?VuT z)rjYNo^?QHuC37gMj>&40(C8i4Z5zLx4Msmc0FmRANTEdqK|_I@ZZ)Vs7m4@*Jm)b zvLx=hSzbKOYN58(jjW1#jt@BGa6=D`1e!LvZ-s-idb)dJiJaUCELYq3U0>>CbG@vS z+)H2L60u@`xg%H(*?1_!iAY?R3Iz7|%uCOPsqfg_T%O9FB{!*=Q}s$Y@g47ZojH;f z#@6rZ2R`!(Q5v+!E$ac_xP4ZxWc`Rnimzhz_jRr0K$#R(q3>n>TUD~0kixQBel1I2 zSpv%v_*zPUePLx`4VGqy30PT{jli+VD1Gg9Vbg`JMR&Ft00`6i)+VU4fDGl?x2!km$#`^}ICi$&i zrK5`0glr;{DOL=8fI^i-9T3#A{#o^m(ijD<`eI3#17|&Bd-nMNsp1B-Cn(7}^T68R zJNSsbKk9QfVQ2C(D4c*vL422ct}NTLb~2%w;&JF7^Om#~>?B#^W$JT)#1PWrQC4dFRt6stD5 zDu9>(%rs@^R}%cZO~ zlxPbA8f?HYosXPcFJO2q9B8$z<%U=tRJu$}m^C_`mb97kfrrj+QUf{@r!0Z4P>q@b zrXDX121EZN?YScl4xf@of=)EI_)ytp?qB>4Vn& z=l9&>+a~fAkQ{9XK%3t^hFL6F)Tn|dV4gG8wZ>dzome{)nUdXnprl7Jiz6+v!l2zx z>7&F1<$N{1iw4LPs?M^CTVS#)GJE4{ief>1s__qiX91A^tDj*EZSfezXHj-6Bd!8u zXjIvrKXC=LZ?P_SI#f?D+#^Gh4&Z~phx=Gr^taB4N<%Q+6C|2-fcmcTLDvMk>YNNT zWiq?7Nvv9}zB?cyCPI(3s@*G1sL+(v8Z(hiNIn`TD^yCUqib1ov+h)^5aTOcHtSSb zM$^T#J?ocAxP7w|gBJ1;iuudQ@KkNJPOSIYXbJiXk#f3y?w|RwGjNl8-@ZF6!q zj0%JYRFXWLi>N#G1xN9-PfTh*9$Y-%IDviKK3~EIJPoXqcsEDrPM;ME%CcH0W+D)3ST^)*uhhMD~QTT=WMm_{J=9DimDM8I@9GnMomkTdQ# zrfk#TOsKg&<;6XYLqc1VT(JfX!gbxe_XCgC2DvW(C6pJ&!KLaW9E#l*`RBfHfx9+WRV)+%3neVfimOqnl zB2!b(=9l^MyRUNYlb*x*N==enSC!RP+#*3vAo=21|e}6IK?*CT%Ba zaYX(}j=@@$`bO~(@Xevhll!7&!b0L@G714-kF`RJh(U6Jb|d8gW{(?lj#!1GNFX+m z^zJNTcE&4rvBVUyxLb*$n?1g2ewxL24CIJ`CXp-1^0zlm|NPYO96Os6# z`L12(e4YnZZD^VaYvutqH%kpt1z9eu6y(bBSMJ`NG1Vm5>0H^ka1*Hc?l>-IK%7~a z=ZPESsAIk6pU3U{*`zARhplN&`x=XWlA|zAlGZ-cyc7nicVen4h|cSl7ap_hxER(1 zsEs0WncL`&m>(Z8?h~GHENqVW=;L3A_g>(L7xrtsQ)<6r z58f{l!21D|Wau8P=!GQY2oWpXM5g%5BuV?m(*7lskSEkaA(eeZQeY+K=YpVW!FT!OxB|(JkI1C1B1!9@9 z-1;!HcK-o{+42UhA~kj$*2@HyHvXVB4v9g5V4)bna^illXyP)IbHy^-j{xY!AhM>^&rw=Q3 zqJ^{}WHk4-3v7=?2Z*{?W)?96ZTF#W0kqOQe)mjd;fm1OQbK)`#y(1eSSBF5)KBu1 zR%D8&!jd7Pak-Yjkdxv_WfRVOgV%fOtKR zTb+>sflC(0S_jfSA@W$Qw8+^a?F!P|SlHSUL><~SvyT?&`P$hXO;X*_uG&OAdRb>Hw2V$}`(qL74{5xD>*qoLB%I`_}@An3iA5 z5?GeNvILeT@N`O`^j=%wYoL?uZ{DpZB^LOhQGh-)*8Zu(bpdb&7$H%Z<&x1X=0(FggXWN_ z1kwTiXYmIiM`6yk$V@R3(YTjxx4=t;)NW=aHA~On#^pCyg2)w%wyAao=qy!$sq4*P zN}zj!-Dd&siNUEXdW`9ApG}LUnYTRJ1v2h@#zh9Z4YqOy6$8x{sEVKBS+se-Vuv_8 z2!C0sX={ZhCV+3XG!cMGvZdg@#W@Cfmx&oGmk-3%HTs+QleLOH;##NYgs7PeB%_?q zOyYg&R|a3jp!9q7P4}Bgi6>u1Bkv(EGg2IRHjwY@XP@;ML6)b%I&-@yNq_#-2y^jD1T>UK1P_rfVPVWDNLlLvmEN>HIG;?D03(dEIEI)|%fe(pGBB z7QxK3T-z3>j)k%%((A?nE!<0E&z?Q1mzrK>$hAy zw%xJ&sc-nxQQ}it|087cbku+O86^SEfVJ9HIA2Op;VELG9BZq6n{|JU+}0NC=9g@K zosHI*5qMx&+F%uh1KI! zk<8Q9ts5IeG}p-jw+7M$2J$~|pvD*bl+|#b1ag4z1s{zAsRA$Q0gaE06ZkWj9*o=G zT@!xj#8fCdz2~+Yf1PJq3jZRK0jP9RD=ufQDy8a$L=_6<;RbdF=>cFNRLMzifNEm3 zufQs44r9i1z&SvGe-p_FKy8p}ZN9-~yVcZpfTRM~@!yPT(seL-5S1>J8-mepEdfPM zDslq!;g&1+L0cUdRtEcV8?=U*tS1l;d|b^&Lz?1x0~0??C9KjaaL)iaVBI9DNKv=l z=30YP$fv-L-Hk#bkQIQtvy9QW1ilC8&C6_-%9*|i(6Z^3e!TyYJ1RfC|0RI2i68sa9|-?#E7!)@+)wt{Ef*e_Ww z?q3vf#ZTgGjlf0D&~Rd2g_y!WF=QoY5o{X@V07y`Ka zfgR({Pux3pKUr~nHQTZKwz2j6tH<_D*Nl&S?t$^z7xJ*3B|p}9iO;!-20`k$4-B2i*|nCigEF|*Uyv^U(5RM78(7S z9~zf^;K=#)q-YWI zcNewq?U6$EAS6KqW4|^J+gP-*dua*;&utVUVCZw?gDGp4pVkq*W0b! z*h@c&ISST@VjCd9u^z-;$ty+p=VVBbel~~*Jwwds^pn?)Q%#uGjJ1_|T?em-P@SaD z*Nne*+J>WhRq}YE6}obwEdA~D^^iu6WYK5x>?w0yX-e6=Q&cpv4b);em}yRZUjfVYvmTf@_<{_1zH&gjL2ifN zyOjl>?bwr>^;-_qojtor#LP02`nL8Ox?=Y&cL~pRBT~BloCZk|Kc5p+Z6E;OZf~^L zX3X4I?7{DLr=s7`ekj%^N#s1dB5${GMs8dS|DC=_y+Smp90bhniI4%lN2X0|+^@l@ z9h=qepPdDAayz9zXdv$ysJXEvS-BqjNRufMa+IRqWJI0VD69DgV z;j-Ie=?YBlr!+Y2Y47H=k3XaNn7TUsg=LB5&~o9=T!6g%82t%XVEj1?5DSDpx5>Z2 zJG9lQ9XJQdR!B>2@n)Xt-qvTeUhIv-oMkcSr( z!nJJPo|g5RD;BIPZc<fLmF(_oYBkD?t2@YXR^u%sAZ-n_cdec@vmk5AHILw`L69_ocpwj;D5-6d5u@g zq6{aYQxtc`f9%VJQ-XuRRUu!ttazVgPh&qS4;C<#8GuMud7tc;Wrp9a6fWEZmWUf( zc8hi=H@>OAlX$A!-n{1o`#5CSKp^D85eM4WWk8b!NrZ-sgT@;A4w4}yA%qW)l|>Pp zeM`h@uMqKpG!Z{Fq`cR@juKS=R;_+i)+iE%B`rD%&r(ynZJfq}A|T;8_eBqJy$> z*?@%3(s%=G8$O_rjsVj6Yj*X4lD_-fiU zkNe7XiR&nH-o2^a23>ZUL4CHA>SpVXs@ZOSsd@e2M`}4##*uQTYnQrcqwDZhx3k>N zih#5w&VrrOG|wz_5wL%Xl-QjI@P?(!?c{IVpcnv=gXLuuAKzG89D z-fM{sT;??cyaw{+-e-5a%#$2R&EGuYu=iTLxK8!zvFnq>ksCC^<>)#{Qs!qUv7Zy) zTQ7`uzsoz{^?NKwmU7i6@6_8FC0!?cmLbJh7$M{&3eh}~rGa#&q%1!m3xwU`)c5T& zx+KfPqTK8D?BQM782#-tlvw>*o#YPSX>pH>MJZY*##vjVSfKqGzRZlnay=wybIFUd z7OT1*^S|8_ar3M3PC^t&4`ZL}aAV{!!M*Z}-m3+b_dTlP!+Z9Q-EskZNS3RI^n0{N znK!Nr;~Rf*Enc?Fv3al&=yzLr)e_R1E@BC@RZ9ytgsiOOnJaE^+~lxCNn6F7GwG@M zv9Pcpjo>;j((&I`z^>#+927F_^)bXs?yu4sdin7@DWwqaMSA$&?tkr$J2&2AO^@}s z=L4VF5~sS`J-W`m>P5XtSYO|+ggvL&1#sbmB>4wxmCx={-LX!2!O7vs{O!*)rV>f^ z#9zBVaof20`4^4N&p&f)`g@zk_J8xivEzvp^T>VU)?dDCoVN+ryA9)c=Uz6h|ATV9 z`uxq~hxFOiA8pIQj&c2q4|grxajo3nj^b)KUxk;y>hiJa_8Z3s@0oqN>!a@-H=lp$ zxbXWAuk4X7ihR544p~9YeO}xLH~q-C`A_(?+}7SItK1uZNUnqJ*0?zC``vAG*Pk~o zll5rkOtyRM__g`=ZXLJvm&cNY+!HrE=aO-&o_y=8aru+m9^*Ui=al{b(3`tmQ`HEw+UkBsj< zi+((7eD6h9k6S+b1S~$f|N5UfZ#>U3mdt)_$C$r+_n+J{uAZyw)wl1q`{-G(wnWAy z&pEowX{x7due&65Q#&vDwL8a`=bLF6Z5S87udFPGwMAp{l~<43zA$$Kb$xZ@cGfwU zj2nOV#>4OL^4_y!Z2#pSahrVIJ##HOR$sfyJI0MIj}6Zo=e^}NwIc3#=e?B+wvO}K zZSu(abNf-`b@ZM+j%<+KuU#>Iq})sy|5tx_XNr2vn5;Q)Jo!D5_2HZ7+BRl@6L9x~ zB(OC&yhujlAG(U_4y(aKZbQQ`e0%p0$3Qar*kP z@tF&HUpF?Mws!orQ`d}VZjg)KDXYiHvMQaT_YL|vs2>BS8YcIT#vkz0zW`HuVSP{rc5BvnwmUy;97x!Qh|naL0ALk z?T(}SO&SE$X;45{#e@`*TG9re*by~a17?X>5r|n43Y|`^-(R>l(*0D~8MM z4^|o=WU^B(fmGERdu#49NZR6-gc~6tkOzaL`k71ytrZ4XmlnBQ^B_Kybx;Gj$x_~t z9dbdt5X%maYX4KSZ%C*o&74NQ+>y|hN9$g)w46gqU5BoR-4x5>QY4{)TR>@II3T^w zq)0n$>YSx=cK&>b6QHr&9FvVKrsiZ=nUQYGvnE%|5vex7jD@MJUlw>r-Rq$zZIYeLh6Hvc|nFF+a0IW)lZQ8g$5P z#}az%L$<8ga1`kz&URgGqHJOXxiiU+Doe75QS&SB`Fn4rQ-9Mb-b;c8TUPIT7fXREVqkeCCZq;)`@?- zCTIOgTf8IPcU9@>@(v6#5 zdePW)&n;v79C0~zc{|4~uYcLN__l@dkKXyo@wv}@WL)(<_l~R2|KYLij|D!zQg^o2{no8x z%TK&~Jm)wK-t~b?#*1He{n+)gUlM%p?6@{`GOsh3_7pd+6QcqHj}; z-gnt}*^m9lvGD2}#wS1b>G6>(Uoh@{^LgWkuMI)i{o$?SC0FhkFZ!iVj|U$3^tj<= z8mkYdEyt9_-+k?P;LaNcc9aVxs|Ox!}!th-f_v_KS5W#y8rrv|7g5hu8g1Fwt3up zp7 zF}JFUNo-#jN0{?8^#X|DT&m&3*Y&``0Xor(v{=4)!z@i=IqBj_wnR)v=$#< zHusND?c6l3dfy+72R`?)al<*E8rNU+ro==(W=#I;aiQkGIHvrLGvU68zcwb+GMsoF z07UP_g$GON$zHafy%hrGAAZMsNJ>Crr{pe(>!19yM4U8#v?uPt;{%L67iMDRFnFsi zVvhSwI7^i274vPyd~mY8T8xLw7-3ax9Q_w$S=wN?y;H^+&pcIxN+jsClgG0}d`{m0 z=^*KZtWj$qEpp+L^=V;21WYb|r|7$Na`WR%S;*9CxxlPfy7QC8OimW5I$0!Yg9r=6 z>RVOzx1N6L*!Zkd$G7P3XP&x#Y)}Tjbqge`kY!3ow^&_nyc>(0{!@j?PAHd24(tSz zDL!o_RzSN^Vi`M0b&#vzf?N_6%XNx=PFBp?DRNOfSuTX9tkb)m!?PfIr|3ujsh%QO zGOe8kxjJP*#EMw3wf4>{m%q7eYZI281GRPfvID|vb1&zfm?5hJ46^O!6yRX&${?W= zabvO>QD02pndj0qXiTMvw%be0n@tkjk?j3umV6qER2;G@wu+$ZvYf0G!?aeH6d#3k z84XTtSO~MTlf_Mo`o!G~DJKg_-04glT-_NnKdk;$eo_|4&8o90iv zO@gc`kH)-7tDTXmUaq_AmKYn?$wB7<=M(41S8k_WCtaWJFEk1Qd8(#{lLOdIdUQ?t z(^aq~&y&2nzV63LVvW9&gViMK`W7LY4izqWnPj#$-mZmJzkV;0b>ieHC3L?xU_Jaj z@^EjpJj~UiH0XAkR84=+)y#~h{x+aSPKlji+~xVmtprvh(T{U`x<9f2WxhzpR$7$1 zV?FmU&S;bIY@7j@+wGCQN@5s*dE8zNn2Y#w9Yl(k6BCr>1nm*^CT(a=@n$|Im8#9% zy7-`o5tc9}s>i1qfE!@4JJ!5r4EMAZkwJ^)!|qB3 zU@USFww2l;ti-6eK&PW;{Izwd$K_-}jU{M>7T>loIqP4M0~8Y;$F8s^UEBjCgIPAx z5RyKGx7}+!=XyK|4Z+efQ;fLNfwg{Z_+Oq8($vOu8^))vxG-*z-*M%*>HoNYeEW~xIBxr=7s_q(2)W$z-tqSL>>8K;&b!8y=cgWL zzAlp3b^EW6t#@BAZrE|rRcqF*g43?c@5pH)hPf z(4~zlf9aaB{lkwf?TlAnHLiRqZ9jATqo2BPY`gT%ai56Drd`Jy_lJ#=aq4$$9#_7l z>Z3+V*-wX$(`hrm9%gRaJ+>c1UWYgNL}asRT>6VOzoj4%OE_=_`vGdPV(zh|T z=Er1>zhlYo@npXIxxoTkT#l%%r5cQ(&rdpOtu|Bp*Lk1D<=*?Z74?uDJJ%=n+E%B; zI9o|yo=k?}fIc7tgaRcj1j+ktB{b7lIWma-JBR+VSNo_U@POkt$}_3l=}3XW{z=@^ z>8Gq8&l16b0Ik8=W8B^QmQl-C1b^Y9g;h)Cb1&|BIp{Ze0oLl=D9&JHZ;jG7oBzoR z>r4U@+aD!n!T_Qmb&@w5P|Bl=Z`?)_Y~-|GyX%8<1N5CZ<0Rn%h-|Kl0R*`jgA~fL z9^AMqL;#$@(J4S-hq0*s#DyJH24l)Nbm-v_s(CQTy$v#K0>r98r6}7NYX%O3;EUW? zXayQ+6o9nQtuX+-+kn7e4D_l09Mi*~vP0FRJ&t#2fE(G;0C+R&5k97g@xXnBS3oZV zjiLdFanW&Ni3ZnI2R{jrTQ_#Sr?Z|^HrBEvyNE@@LxMILe0KFij65tDfDMA&4W)75 z{%Sq~45%+FNm-ba*Av;Ob{Q}QC~-TnBi(5C3q-C&>dv=?C>jSp&TftsyXN?q zq6n0SC8gwJQ?f02^I(oaR^(uc<(QGGV7Hl7uj}qqm2)J~#L#t&mCWQ|&K)ofI@T+T zPU}uQ4n5uuCo`6B43`-@b4q|JU?KzgyXBGbHnX1Pc|QNl@+(VPj>(%qYh%|gCK{)- z({=UYG7a~Mbfw<;+*FOf8DI7JA(9GEpB|?)%SkWtGKs)~$l`!|p_h;N`#L!f9dpr}f1-an!B8{HL%u@&nN4x9I zyR-KEXad%jrdXhgID6p5sJxC~TT?DUpi> zgJZ3de>{rT?g_qj{Jy}q^!B%%yCH68{o3^($M)BqJvJBCdc0zH?YviapEI8Gx8^TA zW1R7~bjKHV*-dWK_rH8>eDiJN&M&@voT|hDFaNQ3j~6|3*?7a9JH~4tx^vtjcf-qN z#X8>W)bGDwY}xgOvHh;A#yVxnd+>^z#`yy8$IR=tOBOI$#4h|NF9x=;5FkTZ+*k~+1EaATrYZX(f@wac*j59G!{=l z7RM3i@kB89{e$B^h~!T_XBJbYKTkd5+4}#@uID&{Q0@BD9ik=|j?16>*jhX&Vm-!B zkLS$a^Q<$5OWTEAhxR}IYv*T0LiM`%**714(JQcj-9PU6UF!OR!-?#PwpM-k*gjbh z0Xs$kyXA)Zo}0&QAKo!`K6vlgZWqtIjyh&_#KO^vJM(XxG2JJ8dF(RA{J1}LT=3?P zjJI9+v*WVoUO&eFe9^c{1ohJIK31i>_$MH*6OzqtxvyE~EtTa5&^8TJSoZgg?`L(nsG zpf$l}@Nr4ZD`cr-7~1WJ6yu3=iW?Q>w&uOv@dCmDzU4k;!IpcDMH=u*=NmMe96FS5 z0!Zm_NM7n=nr2G_7NqKI02RL%xpg;}94$|iKit%s@Wo}T)7dl8NFmv=YIbL{QKngIgQiIohD;Rjh!*jpShlo z)1IjvUMiWy8V8;joy8K%VZgTaQhZKd(|?YWBGXRK;F_Pch}d111*j}W^m(%1VHKgy zvHZfb9ZOZ&IDMo5iUr*8NImM9tYrLKl*`_d-1ipc#^=9r*VEs)>pGQdj9!V|!(ytx z?FQ&ffy8Ge?#gb!XoOe?7|+#0$4hFmwEOUs=9Hxx(r@yBB)lTpDm;bpaj)kEUqu5| z11M{nl`L6DdhGEx#|5kvVKQkVJ72wbJe0?BjprVZhmo@C+rwS;X4(Jxp0?b!3u0oT zGH0{SvX<1iW9=%}-`V`?%%iO}n915{^cg;0&-lSok6Q;BI~T@krK#oTB)K`VsXnon ztV4?qjzq^WJUaj^FsvarWOCb)Wx6JC^yu1k9XfLx6L=tuH1NrON)i3Uux@o>Bp{nta2#&OQYO1VJCn@uv4)rzUVIS092ku*|=dP2|f;90Y znRECFm=vtgI9zS^Sz9U#BE>tFJUQg+eYHMQwql;EX9}J;^k9!N9g_KvY{DEJbU?9I zhnxYI<3y76ntFiy4=8IcnQ#vrP&_rsoJ=W`hZ)Sp!New0`i374U9QAyR(tAINYfh6 z_Rlw*7DI(Nk$@nDMcbVi4ZG)=97Pi!cfTS-yz@CF8Zk8U3!{tMTUkJg+{8^S)65;t z-_3L(7}UsMwTOeUX8@H4Qjv@{eR7Tu=h*c5IS!Q9XiPqR1g_s3--tyOYaPLuJt)QXbKqA09Vy9u}@vsfJ16{n0)5k07EJx&yciOzowos*e~*7 zOF+_819<(z0CW7xj7at1bNdB?A%w_-Htr>epH!QqtM>04mKJkyVn%S=0*qI`x_+%i zx4NP6p9zx3%*0k=C2^|sO7U*fV%Fbj zL&#?<1-d_}hgynAvHI|iA6JG;X-JBA+On6q!8>N|eLjXD=6>qI*;YQVPS;51WX%>o zOZp7|>RFr;DakqGDv2jdy!AU{BS|J|o~T^r3NcEYXOUo6e&@8c6Zf@(9Xw9 zby5)%aN27nMs$x(g>PaSauw^QPhjIfzyoSRsC;bB~t{oH#s=fk1iDff*G zqZ5DKvwhrh&&ILk6-r3)Qn}{!&rkg5_-T=l>wkCqv8_Km>ATM#m%nh=*!GsIm8tE% zvFi(RnS09{#?|)-O#WcG3@)652iW-FTept){^U!?3uGWU_4((F3qNr4c;|n5aBTU$ z6EIJ?RSRSD4=Xu^QoG->@$zxLQ;r|+C3nJqa`xDD?PcSV>(J0ETi)&0k6Zru@$T#E zw~njdwSC-&h3kD=#~a?fW1Rg@&X?1oEF8ak{kZY&onyC>Kb$5&JJ~Q!L>5PVtN;ki z^D}=q?)vQZao3zRWp??I*K8b{Um@aq`_^&AwbiaWZX9oT{mmlCTgC+@en-5zey_bm zeJjh&uKUJq*WKcnppA;1yL6*cy8qK{7tmmtB~oZ#vk4- zrGkDAe;r3&hh2Pp*?f7|r+mkP0PT?F>E?g;>xVy1@^=sHkUQf&ca0spjw8P(BByV% zYuj+aIiTKWjC_J|jf1UZXFUgZ=|k@iQGObQG+Bbwm^1}j^!^6siUJ%(WZu2Q@R@N? zen`xKlgk>#6y=ckoYS;I>DP%v%09;KtKN`@; z?-6);SmlC^iT_UQxUh-p?u1)lqcT?5E5(>IoJsp^gxsJQK$8IH3UV$O8K=JxD{I7q z_UL+pAID1ZI|P&tGq?${ishw1W&vj#L6|`LUlTZk2Hz7in!C|_uLgl9Tu7J)mw&>@ z`|woYspBvpJ_Qa*co6|&#X%F#cL`*N5J4;edJc#$f&^J|uzi)MuO|}afIu}8(1^ys zAQY`TK-L=hkRtxhsNc3?5L$PiOrLF{?xuF{nzuFmbs~iGkB5 zvvZfFzc~rJCSmN2p1L(4)Lt^bsN#ETz(B4TI8JQ|!K#dFAy=s%FWkTE!c}7=q&7bx zHSM<9ZgHdrCulHuQumkfjHm;PY(js?t@ z$~;?|gc>E&bL|VOi+J}TsBxH`jp|y2?0f4mn)fUnA(zfRi4~!e1SDpxl@aOFwy4f5 zBYkdB`!K6eT%}!b5hu4h6N$rmu^RGj6E}zN*=$bsJ4k$jRj2HmCMpyuvaNR~aL@oD zP}PeO zjVI47D<7ysNSW3^lPZ!&IO!^LS55Z$Xc}7wbR@fNRrCh~f&M@-p|ScXE1AkbQ?;fv zTTUk7!=}j?#KNB*bX-{VQ7v+|l;(JZ3?ejd5T>QYo#w7=cR_uARpTm_9HFX~MO=md0|N60Gqt2c>`$!isx%&N-0H0EMAOCRNP2=(p zd~)3M{X3I2?YXZUZ~v1QjhpU#|C}4&!g#@pFCDvNVYuMj7sa*e+s@JN+Z8|cqeprE zG3xFZuQ4w8nU|lKRZB%}dd>UC$A0yKvGkj77%zG5S>u(zBmjHb<3EGzKlyK8G(zyLK=Z$aw_HS3_w)@8BfBT_vmE*@wL>5PT?xu0k zJ1-xbKXLUq@9$qR{_v<)jK^Mc>JMH!KK`N0$Hou6$?f{y*S>cwy!Q9T$G2T@RQI*i zPe}>RT^cvP{w3piXQ{95Em1t{f^qG~e{Wp=tp7OP^y24@v%crD@!pdzAHVl;#kmm^ zb-b4nXWa1nH;otVyng)HbH81(dD(d5N7s!ri;Gd$kNnP0k2CLl`}m>nIcuEvnp?+i zxdZXqc>d+%+E;v82lL9R^qWVcH6qeierVkEy3@xkuYSom?^Pl{7yPqvIc}v#eMMFm z?6_jQd=lKk)OvAjj3X4xQNRczrDw z!o}Oi&z_4clmO$io5xMRf7RqdyXjRojLTno=eYXZmyIj#d~AmwOJ0Z9@A$Iuvy{-~ ziWi?XUi|v)I_|B`jJdE&yb$=UU`fIBx*ELsEFVT$HzyhZD-QqHC1Nt=iAB^pD-Fsd3TD#--JkOZ# z{MKIkcyAkQBi?n++TZ%V?|tVx=a`rAJY$SG=JN4ZDgo6ic!Ye|?_H8k)L!1(l}O^S zvicQ@RdmP!1itF5?AE0#+c5$x!axkZ#*ho~d7%y{{@6?RmXB9Lt9zB*7{jj404;ft zAzjJs@HBzTWT8e*$vT}wdmr8?FBSX-AnAW|=t)%O()#)YNt6@++&L|EV*uzS_x z3~X0&Aqj|_E8u$wnj(pUdEfe{{@BBB`kF5b(6Eq&>j55s0~jAS1vGZJ6QGR?l^R?C zj?0sQE(F0I7sL5$e>8@C{|Fg0%ku!B^A)D!17W>^-C;Wot_^rnIv^vM)X$`&z4t(W zCtOY`wKbSJtPRp&@0$Mo*cD|u)AvK+jZWc}%L2HJxsk^sm``@62Ts(Uhb zd(;Z9YjT`+x5d0CC0*cydOf*kGDLs*+=Eqa9%pvp^3zuS`PGRvT9&&bX!Z&Wf%Q03 z(un?b*YlR@QH`+&W_<4UAs1z9d<@#06AbLimvTMMRZPfPk1vl!1No~ze3Bz$2YA=o zDo()M~I%t>BK85!w^lc3zZck8qj(QJO zhpu*bYhUMuw8N8o5n6lLp8H;K%MzIEe{<^d-Er^zdL5eBfAdOx=jZD_tpz>jxX&K? zUfZ+>mi07Y(tLOSB;N+*jcX`8~{YT3W z{Ihp0-`B}3K0|fc9{YP&0>Aq14=(@JU-_Sx+pl}Q41B#ELRy^&17WYiv_wisPqDu! z5iCx5(@IfJKAS20JU6=sjL010Hx?=H$nGW0Gr>)(xa;unl*(f#j8g&={0D(5RHo-z(%9f^7 zn;wu@?@b?6L0i$Meryktz%%j==np0fnQ3CWf@OovWH{)GQO^;+n7tp=D+w)BK8wL1 zt#KDi-jQ3#lq$`zlAKL)S2E!ZnOC_@6SZ*|U9%+F?!5qMRJxni@sa26kR6TFkcvSr zO^m1Jx*Ud2Uw`#AJnB+8x?iyVsb#A8@U%Q{(9*u*H zU;cI`IFs|vdefh`+||m_zaH~sD@no_%kq-5Oj6sqCn@*9fv-Wi#a^8{>$tcMSUK!4gAWXoS_zwnbbjacMvq@l+z^hB3!tws<-&>YH`PSu|zU+AU@IU{F z<$w4~KUSFue`I;vMy9sG^C?Jx71(={@b=(&GS(7al)l1f>WCI}n$oMsm*9kHBwD~& zi3bIwZXBq?exVUD$Qp2KEI>xet5k-}XX`wu zySLcmRGuczUn;{W5hN8T$+VeHA&< zu|ePzaB#w}6bV!^-LHLLgdHm19SK3;BSZ*sP8Y^b92@c~*7rDFZVd%M}48XZs= zvgR7Evhbynhr_@^j%cw8a!8;EmE5$uo`Ml$mjT+}Ga>B4WSG}r>jV`dQCKHjNl}XS z>>!uOO%5(1VfC41H|isx=Xwf=r+z*Oy7xadSlsnAQIf_GVh)J!tawd&Ba$8PN*(OY z=)ETHe_XfvVZw#Ut{y3#?GZInKTib6{m?)>!!#b3b??kdqAZ0KT(+04>pO-LqbX!V z@(h{JMDYNRJXez6@|{bY{x&O7e|m!C`n>iyZXnzW5OmX0c&r$d1?1}Qd$SiAMy*dQZ z7BLxqy3-{8)$`S|=GIPf;U&-BefNjG*(4n~D`mI;Q2* z4)+UlR=I~nOw{uac!nY(>L6U|UV5DEH5`sh1j^l;6_Q`N_qbA@->S2oq~j~W!^6w7 zO5%W*EZbth0o6E+rL>Uncl5n753)a?p2Kz-JXCDsVUHJ)CJ!r{??r{^u~C5S2}08t zUCR&)xfE6|UC(3jOmS}2as5utzyJUs07*naRK4Pz<3F5OH%K%mhmPfc6X!&2L7*&1 zr=w|{r~_SkUh#qAy^6kp0{~OwQ7g}!qJZ1u6jbLiB4FejL<9rOt*F`C5pW&LKMx>` zkTis{KD_P7bm;b0Blk@8X0y2R*>2r z5K3l`n6RvYiY)EaUtld3{(w}%&b%|w((%|dfL+0t>#i{y&zGtrq84!mJ6j(1D8!ed z3;J9EeQr#*(;eL(`W*7(4@UdsxpLs8tQroW<1Q#>v7`V@YuWh!dMi9(Qd#D9et*Ni)YEkt^*O6{5Tp z(v!n8T{0Qrq>Pv}NIffYI13S$DXd@TRhh#ICtz=@BNdXSysT5ijFV+h=R92lV;xYJ zjMdn-jV29V>@>EWyx3`y7o)LltFdj{W@Fpl?tZ)bAMTkuckY}S0V#F;9-=F~rE+q@ zF;p=pq$11djb%VhNf}D%qo!M_UzAjkiUV(_O5RiIT;inA-)v+wJ?Rf#iS*DL>4Z!V z-Bny8Wr-F2n96dK>Z38)wnI<8_3iVW(-~1oRCnTE+(v>SqN(lrYwbyhaT@ElBc>|? zE0i_Txs=!Ex3=3~ZYeo0pK`eW<^@RQ$D805UgJjoeT)o@TjSS~A>t0wj@({^JOmIY z$RA}H!OhqZ=quPQql@j$ca4`Gxfd84%RjNn1R z*!{>u;;^K;n6Qs|UJ?&1K1HT7eu5b#dn^}jW=P^)dAa16W}M#WRM9V^0M2>}?MwYW z54>GX7x{!h{2eUa$G*0%_g3SWdA{QhsWQ?E5l8OZqrdp44+{Q*A>w@UR$B?!p&1&1 z#6nrxQi`P35c2_S9`_sJmpo90#1SfMs4Qve8Ku*Duj@}8z-t@cM@BD|T^uPV6$L`j z%;$-a-2@%TDij&p_iT%bhd1?lfu**P2!OtqzSi}*~S8{pa}v*^xaF+ z5>HIjVn112Dz2M-lzW~K`qbL+7mS=f3ooNG<>W6M+3}A3@nWlh0>QF_cgtpFYzp@# z)}z-#W*fI&jP!EBZV@uZXpQ{(Fph*UK|#lksZSS!ae}{%(pQd&i~1o8#u9Xfy^YNK ztP#OK(t?c+ZMo$!=&{FFak0O^{N~-}iGL~I`2b4X(JMRYk zfZwAq&g9Q_$&}D4?C=Z!z8JD*zd{U=R?^5=CRlaQDFf$wAhvUi6R`< z{+0ZNTbtfnZnRXWD(DUdO)LiUAX>eO;(@WNEeMHLl*Y(B(kSyd4~#W|wOMSn>?cjOS)cxq z*gkO~W&C2cqyHQzI>{NbQPvpI!%thpBu_?2h^=VgB73O`?sjv{7c!)eDwrZGi(}q? zwoWG(j}7W-`E-{tQ{`_fLv}tP%o7?Sh`R*Ozlp$&2p>y zj;kRmKr?E?BBuf_AjgE53*Pdqd8kfE|4Xr}w=yt+onQ{uihwfz)K)=CsAWhY0R@G6 z?I0?`Xa`IJSp#eJR>)GcdR)ZWp~gU{Sy%*NUY6hH)db3zuhD0rbcNI}<5;7p`f@OdS;1X>%3<0CgfA8k8WeH{Iw=oXmJ(%_KWRXTHKwRykhCa|HuXg{SZoIqxp2M{f~PA*iheWYKv235Wa z^{ru!>6baBY}2CPMbO|uu-L~Q<~(wfAz=+U2=5@jMCmH=l6O+mGiJ-%DPcF%Rpb$t zCQQYg$pYNlPl+q!rdojUbI#d7;>%?bdGoP3`U&7~GU|6bYW2%k=38Vz z2%G6+mpcI@0dQ=PEG7amKBzqokPi@XHwhi;cMcquhzq=hQxp3ZmV7E`wmAP%&5-TD z9ywPHq>+DC%%*WUo+QAk!nxgdHX0ufl9XQA00JDR7B~5@=-uCv*c+$CToFAme3Jomc4{RR_Y)$RdU{$1IgOGqbi( z*>{LtsGKm;oTR$y;J<0$jq))xI^uK(8R1WGr7rzj6$ICMZ}M*uY9J#&Y>EjD&OQ$>Rcp{sL`%NmfcdD&3nKRC1}|8;{5$s)wip`~ ztP4v#GKqrdDyAw0{($itMmAoE2E8`E9@0vh2*Kq$*JlS^Tob3ZIebJ;O|WiR>cHO6 zKL%o;jY#>K8LTUQ`#%KXPJhebM~$ zn{<-zjV5*rVoMe_Azsqak?kWOA%(-fXvJa})66Eu)^6c)>A!8wG2HuA&2QtkE}D${ zf)qviNwslLn#m$|hfo;KG#=+wAK%C{B{#>S5^V|(wyPHe^{3+Q{gu80B5n+a-q<#= zci8PX^7_rzX${>v*Z=&^x-9M__v1V)o60Pb$j&AZFTD4*%`^i~9AwO{8jo6C3SDBiJbgK*kUdk~E$-Qg8EPjD#Ho(*-FsK>RTu>eCxc zbL#5|%yGaZCgYJi7shxF+BpdkSZT1nE_#wD422{@E-p}A!bEnC8p@9XR12Kq=zNlW z5n3iPAjIm1{ja~Q7%3&>u%oP+y8Ni%)(~K1n2)Pc?q|f2sulhauA_hFtQpU|!b4zQ z5uY)s)j9W78xIT?p*Gjfb_-EI>f=X}EbyXF@xhr>{zN@nHj}yvEh98d&V_W`hf)KX z1ADFQ<}cvKv3PW)vvcfUD*moCJ~~VGLp(yhs&#Wp{2HOlZtL29_Zv+F(Gh<~bv=)B zG0$p=ePQ3yR?wAKKIp648{Q&XQh8i7ozruV1r z+k4LBqXqhSINzyy9Sg8y64x0ut1kuh<-%pPRj1UZ)%z|xgz8wI7Z<3Bn~?7oS`2d^ zS{~dNCq@9rmh*SEPm6oHdxG=j29o`%z0?Mll0%lk?R@NY+2dzUZU!_S7Didp-YVXc zq=H3nYK0{}aU{+y)YwPuj(%7`Z3~LhWto`3M`dSQXY)!v{Y=-TjG?6I%>LGcSjiz& zw!jILOSu)OePtU3jG?{aE){CQB1P9@k&t68uCub8+2d9|&y2O7i(C0V+l7Dnp@A&P z{agUw_4Ng|_1FSr*i7m9>%W#s$FBKjN3NkUWC`5Ivijo`ZZ+}kmUTA1cK@LIfA~s? zFvJ{uUqYh*Msx_9P8(E=8uaKQFMnjtEFY1X8DU<*W#eUa9N_pNlPuyh#wvlgsay;c z)Tux&7aObW9j+hiFYpZgjtYUDWL>9$lOx@k?3hrfsLUfEo5De3+tOT{$f5bW6WaYJ zTFAX7jtW_*G?l)xGX0fnn^vBO`@jf-yRJSJz}U)qaWW0*jB_+&#nU^1mH*w7mw;<4 z|5lTK!9!)s?O&-2Re5H7{ThKMxfXWJXpLr$KflWm4Kari?^XX{qy~`8rSO|r9ECy8 zH^Nc?x`Ub^H8Ev)Gq@@gg&sgkSt3YmZNL%aOn+60rD+@0qt9~W?K8)Mnc3U+rBJv~BfP5` zkHMTfpJnCbK6vV|-U(SKG76+b+3IOgIno4|(%&)mX{wkYgH zi%0f{ak4S|%dZgsa?*!6vv|0Zn=7G*7iY9|qFVND3;+=>^vVALgga=(m63~L$-w22 zL(Oa*Q6F{u0h)oU!Lij-hnLE@;u>Q8$Pqq3?JRu59EWiQ)R9+ibjkYjPKgOkBx7 zrIwr9asN({nQMWuuekn=a-2KLE>k#j=6#W5MUTzy+wEVq2vI)<6-Iz~7Gy z=ZZmNT5I^G+Oz>pkV;4!d_5<}8}O7eHo3!o25O>gJTRtPS^G#=S(h!n6+*y30bU4+ zv)P0$wo@XbkemJMqNi}EJ!BMFq3$02f}dkZRTxUzG%;U@C#cuj)=byrJFg%#G<}aM zu|-oLbf<3lFRS(8b1e(MlU}0vHw1uQl=KvFbiYYSukmyqy5e`OeGmGoQF(yQrcaMa zi=IwT#(u?)IrBhvsULeB9i-7m&;(iT*4@63qo)SSe$|0#Y&J1Bo&4abM6>77=ZIXP z0?`o(N+sX3O zmc?nNPh?T?+v;BZdX7XPk@e$ngGP+~-f!tU+%5izlG6;c3WM|b=`E8+1iKMysrL3Q z$R0l*&`fkkn}JtWCzrNX5iZ#MVSYaS)^V6F08Iv-b^6@$u}{LB>`?kQLE?F>ZrpDv zyf5~n(r-T-e%zXKRENeq;Rv@d$A|huqZ&(q)UVP^l~j>cG59dy^$Ft*G4tkxeO!q= z(_a<0R_6S=U+CUQmN)DRcPE-c)A|GCAK z9VI6VAmo1ih=s?@N`_n=!`fsmBVhpJtJ;A^vY-wpYN#?s}aw*a{SoLmV!#VVvM|H?*8e-zp^ zN>GXjE%hk+fSLviqV*WAZdz<;TRVV*!Ey9H%iMu~48v(X=V+nCAh!D?gs>$uH8%2OK(k zr))OPCxd0_i6xqJKVXC4rHP%;gNRhvqFxH%62W9{Q25buX?ZzTdfu z5#(|3pLHrgafBaure(t#fjh!g#;O)ER!=`;a=fyv?(6w;K!7ukU(QH*D0T%16%X3w z+c?$LT@zQFd`y?K6+SuY2U@nedA)4I=l5P3U_9=OH}&y!8ai|mSZ={eewYCL^Y34p zZ8A!RWb4&eFI2+6$zB)x zV?DmqFzSa9lcuS##_A(N|dpG?|@$~xLT1J=Mjgg3G@n}lD@|zJfZ@l=to+SB1$whIFLR! zu1{`_m&pC8_$SU)Lh!MsI^oC8tJW|X%OzV{!G+A2e3mgPGz{vY{3g|p5u-&(+kg(^ z8P!uzv>G^MtV1AN?ixYyn=IgI^q1z_8Z!MJ*-kv1WC)g8vWXO-D}x9$t#By}*N{jt z!9Pe7ZqlxToRUp4!79e!^UQ)QcF7U)^>O*whaVrl@TjHQlJ$bEJ88NntmbfVi4qOR zf9KF#>eNOOdT{R{o*wK(7_qo!Mj?WbfAJVO)%f|=_e`W-dgy+Qthkos>=EU2bovzR zyPe!=ERsY_NFB-~G~|?`uz4mZMe9VhXntC7G;Fe5U9jox3xIaoWv_)=qPn>`-%%=s zH&jR&&08Y}FOqgz*1o*(u#8bkh)YTolfdH&M7?(pm7L5bmZqG0;&%98JTr2%L|<|` zb>tjcmOUlLW9KJbw5!kenauvKCHVdT@R@`B0|dxxho=XnHQf1z_?&PO%Z+g$Ewgh* zg2$U2DvZZHd0h_DEx%PY>fec3{^Cq1S{R>9l{$#kcvasd7{{)D5m2b#7?ypE?5g6U z(Dbc#BFwlLY}4)qm~7E;5ap(`QEv2{vRZls6a5j5Z#vaD}@dz8bjINlgXPH zy#3ilM2)W5X{YG^=f-WM^RwP479{GE=dwyRo-dX;g~#T$!>{x0 z+o*1(_^WxA8l{q(KG+i-mUq5B%xY03&7jfu(y*sO;E|>~IeJuM)KTQYh9D&TMx{9M zXiQ_3K=;eVK*NEj(M~~sfv6~~C}{i44Hu~7sETEpHW6HAx;TS~;lap5w>l?cPI4|d zZxSDft>jmgqCmy%El0H%;z;ILxsCD6;;!M0z&Z7hx6k# z^etPEQl}k;FR7#B8{j{Vtv#p$xTXBKzW9@=01Eb6@Xy;e z7V8ZiF#&TkH>AHlBq5!=12g;=IUJ6j>Q+k3tpvZMsbLE1T*`gIa?Gx8RT&X(4YY~* zvN7nne;52|7b$+u#Ef;8aSas3F?AUJ+fZ^EJcW0AR5w+g7Hj|XMGAfrnI;ys6YxBL z1({Idqy61ozUTdP`hK%51{luW(k*s-`|CbpKuoaE$2I0DvM95aoq09j?DHF4)7!?y zg3m-1a471k>{q?iU%MrSeSisvv(y#}Qbf!3cZN-cvzF^^xnyRsGR^pRUa)qnRVKC* zyUT`f&O+oDL&x1k2vz=HRl})5jizEVxjNGAsjxYGX8*u-yxc6K&SWzl(-U9p(`3V# z4ZmFUHQub*&X_5Y<~tJpF#dvZMLthWjOvM+xyOoH;0Lc;z^1Y?s(bYctoRazBR!lN zlT{E5{r&XCp3fj?d`x4y!U1y1vQ3G)o|=-VfGN&W_l|X}YPs!lcjr%qar2ojVuj@g z2cv!+_G=1s4hc{(JVeO|zSGW$5{hk`7NI(YcEY=Arz2LA*xSN+iD7i*$byHn66N|3 z&r5#95arBhX5=q-<+)7V!0!b<3^G`<>g4n1Q0#vmn(xv*(y2X7$LLv%%4fXz zLwqizMAYy@2+HZNI=!c+kYdfy-TnRNhS#mqeTh-aVqS3m4E>~HqHDw0S~)+>IwFzj z1rxXQv3vc6PDm-oDy-Qw1xUXe#F52joJ%9j_%Vi^J04fLL{U_dI`(15qV|$I|((``yRd%e|m+bpTY+ajC-Ar*{ZK7r-(n zg($4z@dp^|F2vD^7JU06O7c=o4*JXG^tfc5-CFsfl7f}*uD=@WKai3HCJLiBVw9Ce zB|-&O1;Puu^yBicc*KUID^+Rb~mfOkIW4hDt{_ftTX6d)x}o)rBYDb!sJJ8c1?#t=kI| zd!`RG#Hg;t2?n`o5~~09`=W;C7YhMSTX+Ft`p%=F!TP6=@S)3KSxeGnREp(*L*2|$ zbOjv9rbWyAbcL-D4>43C7;*%}Sys;3Hm6Z-zH*c2!WAU`W=|;IolQXK52TgXSI6qh z=0Pz*;p6^3R#Zg(tiaxh+%NjaloGm8xM2$Sf%Qa8?myWgkrBP$gW`> z7G1j*>4ev2j{zjMk&)UH~118l$0d~K@BF%QH~Ql&)wr6QS}quY~Xs#SzEVm z56izs4z?;{TJzQ0^b52eLKs>0k_2t?YRlCzWFJgwZ(9shT-v)$B1^3wt!FJPn}A|K zNyQ2&zxsWPm^llBjE?t)2&5=?dfgqlsk zN(cWs@;I_m{Gl|Z%(du);|}b7nPMw;a(zwL-2s>V3EW4?_z?5RkS4Ps&hOFQDxBS# zv8%YAXG=Ry1ZD#-IE&~TpE7JQ-;mH%pW?z4GqiuIBim9ots(Txr*PEbCaFPoB&)%P zA|a`XAURem!yL^1+uK(qr@^-E_^DPUMeBCV*P+F@Pq|$>s5c8it>GPwW!t88p(s&Y z_RaL_e79rjgqw*Wb9!LS=RfLrjr8An7Vtco-wll#rH^2F3^VY@gM?G-Q()>}8SpCB zvi{jv@XGEP((~dcNJ}75&ydM~MGv_ zt>sk&mw5A#OE=l=^!u}}5y+5ZD}j8&e*OQv03R*kA=nKhUS!u4SNAhZI z51=W?DW8hzRbRQ5Z=QAXRs=oLC%1QVfhcTM^x;qeV;*X6GB-ZT-EUYB?nlTsY!8HW zy8-~ZP2UnzZ`B+^wf!*iTF3#48p=u42}!zAmp?`Xlwl3X+e0yvSGH0((2}qMnpy>f!sS=c&=i}Tsj6P zbia8q@TV4jZ^6KdQAv{Bvm?B}(V|8sdBlqgCb23~D7VO|8ci&VlOL7!@;cNX=St#V zMs?>f=}^V*iG1|@_}Kv zUy*?Q=VxmHLk)KBr&xzxbp7$~!WwQ%r)pF2Nh?u7_C#wFRa)pu{x#F~;qJ2^kRUZ* ztjKWB#%}<5mHvqowfM)DG{7^b@3nSBI1)aive9qyB3q$QOc3KS+kMX2aMzr0{r-p6 zo7!EZ!B~JMt6gYB)pQ5#;UdM)LU49=?D+evWFjrJb0oD9h<<})vZWOA8XJ%qDg(5Q z@qi`qp3s?ycZ@Qema+G27ynS)VGzjCKQj5py6|ZkLq=>EAEPd z0P_ew7r;gRUQl9`KVK9ggcz>mu!9OuwW!B*zn|NqnALU5q^O}8At#K*+7`t?*zE-% zb6y~@j1WkxME2UVUxobb*OGpDerM*H*rPC!(j1yWn4yRUMl6*w4A{Q})B3-`Q(^4p z;2M|yECo+Y35LY}CZ0>NBB7POmI!g4X;N(GYS3i2Kj^SqcOs_C!Q|Vw~k%z|j z+Ri%Y-M>CRILC8(!j-xu^mCK9V`A3h?Ti|Ml=Qq&GJ!}}%2TRaP*xcmQdy@>kFi?4 z_#IWG4*aH=e~sg32%cTCX5#o(xrfCng!B8CCX)9c#yLA&_->$}J4!Oun6br{3l7AP z-vuf-8;P>xhSoJooPVz7R1?Q`8T^^J%fgVx&6SeS?1g{&qrg4U@Fa&+hv87>zzc>` z+mKFsxkqiLGOYc}`ltjBdm6HEbuZe2b^(Q(TQmlK(;8&A(UhrM1esyV_UP|1S5+}WJtN{IC;x;=L~$-{_^zXEUB96 z+K_Q?>*>$=ulKW<_s3he&u$b(!MCmP15uW4BafGg$3{y*!iO-}s>T^j)mI+=HT zAxaNkhFJ{FR`=mWbO}meNFUF2bA7WIKaC zN&gmQ*R*qwQGt?xQg8DgGM_ZABW#}SdM81}isEQubZ!sACTQM6S1WsDLo$+DSzOZB zkKwT>y&MHIF#dI?2o(oB+T@!lJm!A@;o^;MA=-XGvJ%b-xA|nuZ2n>p$T!Y_3$_ zLE!Rd2PS&#Z?2xDZm<1&w5H-0C$JA$T|U$%UA|q@OYkxI<+~F!Ov7Od{7#}zqC;70 zRkym^X%#NcbBHl9|AKA~O#jMq-UX!{3?6JT9F6~KnZ#YP{A*#CbYA{P&8s9!UgXfy7&`l z>2OUFrU7Cc>x=iuEv`{qA}Ok=0c6FQcO=Fd50R;A>oUN+1weB-g}Y#p(&M#8bxv7E ziPe55n*${_%0Nw+u#KPKrj+3-|9#W#_l%@LW^0f{R7jtnqFAQfHH81;7SCctbPv8f zdiQ!CbefX$R(W9Gb=P_T+^%o-+D~dF#i->+bLZRf}kEwZ9Jv-u_Fh4P0NwY4>jXkAY{}2_7{77GCKYng!i|M{_hVr$aH))1P zybcz{!ocAKiKtZP2`x=zNx)@R07_oJj+d}`F3i~{kv9F2cG|D-vrs&Ll0M2w5Gns(#cdG(@H{n2$`jog>wX!*bf9~7*5a1wzaq+4 z;ZtS?$~w3tRpuVCx0v%AOGM7n8K{7D4zni%#uq>hxb(<3OdM$YU$lw48maC=Ia7l9 z{ewgS*kZP1WL;a73zt6^O9W=Nie7JCq`fX@@F2gV2=V`H)@I8{Jm}i-(8d6JcF;-a z@TvM|d5990>q~d9s&d2TNCgq!jofoaM`TKPdTAwmOAxpcKbyP@^e*2*-op!lEf2sL zQU8MSI|ocp6PbofD<(uq)1&?7bnoZ&vxgC~{y1#YrxNVH!$fZkzT>Ru5(%h^Ey;T0 zU^WkZfD3C2_NuHPH_flzq@6Y$I+)u3^JYf=!8GI;2*o?#nS{izt)CF@y5b3Vc)q-? zqTrW1ZR=v=-M`6}nCDLFcg+ep3u>kBb=3rE)1@wCrrpd^(%&s)14mRV=yl+(HB4upTDe7q#;=A&;f*{a!J{<31`$JHz~@=Gp=lP~g$FA?w7+ZIuH30qSp(`xO78(t&;D9lAB zl~QC^HAhJSO#mw=pig^_G{zOL`(^;CWoC^cP@owt6seVRDEB8SPPL43-ZZyozdi?= z)YO|u)rd?T+o-5zQ%TwKj3jo&u$RN_U(*-9?&screzwP?r^K!d%^?8*{^4ZnQWbk>O(B$53_n#Z6+Y{aJ zz$8jkfqR1~8^=Wf(JwrX^fW(NC)tI_&OlQy47&{M9@V;Y${szhuN2O)79uv=Tp{tA zfg}$zvdC79s-ngvB=UC1MnG*eHTf8!Z=X!LR<2VZZ3qCOy0A0S^P&;_i%LWNhJIR<6GQI&?6RQc8ifBudqhl6b4(` zC8eSrw86AOnxz-5#9Evstz2zGB1)*I2|a5MU3%~gl@=jz8CrMz%gqRv_)T0R>cPRU zYbetTVU=_HFh^wF!1RC}ng{req% z|4l&99kKMLDP+n5_&WcXmZbV;8w7PHRI7b@G~8;^j>S*Bv|NQ#9ba}BWxpJ-XJl?4 zI^+ak-2|vK)^d&cEM*0mkw=BJ%qqU<$njA!UlM27-(g}r z0uh%M!_HxjpR(>D@`MY{C@0XI;h*vng1^C6AOY0vyd#Cm`G0FQ%QVgDa_-ozY~2;7 z{d8wzo~EVB<%Wn{x?LhUIO6>B z1?2k>d=IZ7JXZ1ACk%||&6LIu4a^vwf_q`>Ow~;&_e{magO&56pUg3C=HK5p-UJ)o z6Wk1#Nm|{?PaTqEJGG@vZoT@3iLm2d^MN^9pIIydnq7x?#LUxMAc@*15}%u*gDjGk z&iC=7sg#(_b_4ABf`d&G-N#73^#_em8Zu^(CuaCE6`;I&K@;bf$b)Igk!Q;;JDv2eK;mv5KyL!PQ z_O0q`iU0fez1P>ji0Tu?m`)sxMY3WoBxtN|s&{dNN(ay#!`|!lZHvXh<%nXSwNeg; z7f8f!D_n-p&oMnoKL@#$-J=+JptAR&CY@BnA@2N(;&oZ6!VSYH2^)$1Uf`1d=qbD! z?+`ZOQ!14cqp9_2HH}TT*x9`rr`3RUg|$U~6*A}Q zs_t7f?q6l6^!vf(*X=_^WK!ffC4l)O$PttJ+6I>gm%=gj(GTp)UoRY-5fKw=We}m# zFxbwVO0DGf!qFp0*(vA0A=#LZ{NX*!K|Z_7Mw8Yf;zf7zJ2RDjLb@F_6DggP5C;vt zhf7)<-TC?IuN*InDPE|1Z|ZwK#u5aUAEfTyc`G3J3+1^r&l?5blqzMz0KuwFabgxo z3r3@9Mqhx`nE7Y5=I~3WO6hw|7zx6+7NRO7bvOfBxEN8uP?ugQ1(Z z!s+{aJ$c!fyc6A`8r2AJE)l3;apt^LodyyY({xJRVRH6T6qIz%M>f0E6fe4+9I-X6 z*N=ZF5%0|iVgK+Lh@T*j zwEtqm_)|{W9&T`Nk%V-GT(ovR$sNTSC6>;WP2NcOp^R8t7;Yz(X>ZQkd*-bO4TIP?X=fXepin3bN?{q7L zz*f}Z^VEw=L5L{m*i!hs!}z*|91k)0d=Gl*T=VXP5wKkCA|5}}5jZ-$)ibDP+`hqb zOR4ti|Jf)xrr#LT;pP0&_C&P2RatP5(|uGY@_ETpok_yneZP@)K-B&EdBEa(CR?hn zxph-uZy?|O1xzOS+Ol5=-Z_ZcZhC(q`Dh;>ZT335UH)utX8QW;x%FO{v|jbU0>V{1 zRHoP;Z&7#69(XZ=5h;x`fN6iwz*hM~jRyux-KH=CC?=Lw`=pM8NdHQab4UNgEmq2` zww*K*xlVb&)wE0_K?eFWYknVVAM&&2G-7T@peg;r(NlGD|r z!L5p0brhU%xdHL#-_|2_<)x_m5)k44;)p_fG1;v;3{5HrD7U~RB4MLE$+Tp=l!E2^ zR1wiL{Y2NXBR!HJx)62}%dnu1&eW*5aDRB<{mE_(9GmHpu)}jw-hj79cRxC@wPp)kK6^6`e&e+(5^0&_w0{BSn z&}*3I)X2rNi?0(LRjCqxI%doM!n>kKBlE4ej3e_;M6{{Hy>J#F1jz|KT?SPv0c-Q& z#zfh3>sz76wX#Ci8C6_Hkz2n@$R^|}P46J#@u3~3^bFczh_KS z94aOMqSI!a{g4p;z8g8XliI6CJWwiZQ1BJl=^Y;bna>FZmlp3sG+++UuK9s}9 zmamMYUMuID=GCw=Kb=;dnYd+Ql*qTa{#P#^OZ4{cyl3>;z8~5<{wMFOzh{c}ug$qF z&FR;T?d6dtrFAnf(H9*B>F{01N! z0qN1Reb2{d_ZPRXzx@Z(-X9U-75WCQ-dPBw8M`!+ z?DYZs+CH}$0;)k)pruh3#;f<6AI#e?^<*l0<<)v!7wuau9UosWiwD2SRl6TG{@t4k zEME%a+pn)V`v3OtzJ|v~N!}vHW8RNZSnR#$6Baz%&Hq=~NQcs-YfK46Y&10EA(|1z z!b{`;RG(4K3W%)))oLe%Jby6xXAR3x={(o}76~a_0}kPQj1p{gibEudYL0uUxZOFRWsE{Uq$!z2XD2P6`#bFLwiyD9M&H zt~F^sSb#+_B3tuCHE{z!uZ5g@7S&0o5rXnRu4 z-H-|Du7FL=|5b`n_MBVt&yUv5p}Aei{=+sg!2`;jq%4L9NiCFn7O}s4}yq> z!D~KxUeqQZy!nIO#;sqf_ROlX5492!v)~;Y0Z1kv=ilv5yH^9h?;pY5XLWTSJSHAQ zdE`A%?+apSqx`z0k*#KnzBa{kq^y3lyY~tuL|jxEFE-%va`7!)I}Ya}Ekv&CU}HY1 zYFORzZ+cgx&&FaDAA2s~QMux|vkC&s@G@d5Z}jG=T3Aa@@)|G>HhL5G&Mt2Qub zqDlrbw^oJ$Hc~uE6s2mY7rv_Eeaf^FCefUl*HR}xM=)Ogz|xu8)kPV2i=>LQ$<&5D zr2y!ZabyH#(Mjb6m_F|TqG@x|q#7ILBD^@37gn>GO$Q`&s;dQBmc@Qro9pdx$ZVL$ z@g9a`zwHZ7cfMD^nM>So{t&3@sAcay<+lf2R3bch+QyYM+>I@|Azv~2?lO^Re{Q4r zc)b*%2o^MDE^hg`d7r0kG6=qI+-@CYBwxJ;NRm9g*uNH=y$s@oHqH}=^hyMx@ywW^3;*sULX8+D zpe;G(JlL)^Ttv`PyyPM7l3NZ*Vz&T8E3SwdAYV&AZ?qQ$TbXQI2)wFAOodwByC9Fl z2;ns*r0f+7OdZuxBSbn>Q$kO=&f{V==}=wa87Qyne{(6g&v7wIl649npUVTp^Z%r5 z5dsFVGh=aC@ONe}YHusDu!2wFIXJp7@-jKhy2}qt82Nh_#y`_NKo|H~TUK9JK9s1I zJNTYB;|Ww25Yf%W$-ymj%Ru2k($wAMjgqOtEfXU{;`qzN;pAn2Y_Ec?Y6AfD!YFW} zdrGx)zl@=)IKWh=JT}5((b>#+8}?!Omi)OMv0HD!sLNJhXWAsF7r-sS5uB1wIiz#Q zFda7hCW+As&CZ&3N=LK#&G9858^{M9dVYT6Wft94gKnt$1cTC;u~szSDbro~-mIw3 ztF$AINUqE}#(OzKiY|{JYZ=ee5BFELRfU{{pQu$C#tGwCe|`N=WwkzVI(js>AAip= z^3R&#WT4#yyFYMQkH!0fF@Vbz1wHAE>hj^UCC^tpjc~mgKL_^9#;3tvFx$5 z!~MISQRh`k*77GWg!ZUvg1bhQTWO8~p2Jzo65)i7M`9ywnh$TO zkj8QI5&7U+#DxOjbr;XPwK!F`vaI=u@@|T9M&B$h_?1|88X`&!N#nhjZHaZR;PAYF zUeU+_mF%T~=#`pk0Ah55z5qF*slxbnqfW7zCLPGL5INbbS$dtH6L(RqnJ&^FHa~=~ zmWTA_s#$A1`6r>m;6ZgQ>F&A#9=l7``Kl0E0#GSeiCR}5!J*f#5q^~Vkx}GD>Lx$D zwhG2X^eW1>b6d6kJbM;zKvcKmAS9-~O>@DVlkfol5-YC`%Vl-ZZpU&pm6r9s5Ci}tp z`>S6U|0B9bLY-UGq#$I4v&DGJQd+45Bv2r7E!Yp~qJtqUdJ0?~1Asfq+t-%}RAeg15mUO^--_(3C@J-D(t1d-j z)*^a}`~~Wu9u}Jgo9sl@kC%2AfpZbQ2EO2^W03wTpZsSi0%hKy06a@(X9x44s_`k( zXrF^7Z!5XDSTSY!`TXfIRWGqYIbvYaSAidU5yK@_tK~3oin-V8 zCIw|PO02TOPKs?{{lgUo-(6iZqvoWCd-MeYS)B*sR^l*$;xNG7< z5MWpV?fuSVdHKZ0APL=->>+D-x_q-6l)vz{X|(6BLENC?`1E!9VsqONU;2m&zf$rE zc@YC6UPXLeZ(8RdcRS{;U2f^&YpkHkdp5RUXq4Q1o=b;8v+CI+N)_RWM?5FO=|-;1~;J*OmVXf5|>LLBaRSPx^=f zRCgC%lh_fg3ruNpVJOqGNTNn{w8x%e?ce@;2MkdTT3h9J<6{m3!8(hfby?`@tMEl& zWo>FhbVeBNf8Y{?&~m+`d>uW)!Aum_knXI%Wh@I#lZ4TIR1tCTnf{*_;5*j6MrU)` z1O5bzt_VdNip96>oyxx0`8w|;;krAuyLXySA8k(6qv5Fjy(w?S5?NhAdLi;qI4 zC|(zjqodVo&92Aw937wY5+9!z`_F64N4ML%afPq`qvWsiYOky(HNB@hCC_Ruk%#@x z4!zd@7UF4Wz?U2&kJ%&Yy8211F3f+TuSkI)z3IMNwv_S}+V8!WvSWIq)uiZPkY72t zU6uMHwLtl@RyO{9%u|RoIH>4x&|K!>vso+;kHtnq{*ksDLW>sL5^s*0{4XdUIr`h% z-NDNrkpssvN@x`qpSa37-y>W!hN{mNcBpVT^}HZ5eJ5^K&w|;4W3Kyx$B02NZ7e=M z*CBqhCk*7;t%OUaO;|QndH>t=tUMr^V;wp9{t-ZlWR$pj3V z6iZVXk5J%SY97bgk9KkiNC_)@_?|%N=0C(RL8nIaRhkQ<|AMf+iZrV1QPTa>!8468 z11_&qsa1@tjB1HRJ}p_-j|5#Ki-QcnBB}Rm|?U|T@fF#Y*o&I2v2CMc+cr8$$F^n~C?yRxBn8*R>B z0iP%-vngaS{#K{!)EMY^v#PZR!yHqeQ>V|-;R_vHp!h7rpaem!h{8h@7z&~JgY`k- zGUvrL#~g7l=BrLVZHz8dL9rL*Tf^FxcOT3G!OUL8?qStxFtqviXKTpO50COza!-Bd zFp)}9ZPHiA3`6bN?hMb|N&ME4dBD7Z?c|l~IH8*^>T&DjI+4N9gn=4fFko+Rh$kAN zDZ>1sh~5Rk`oi-LM06D$G1c)~Q1oCL`p)OI4{P7e^LDz4Z^=BHzw39re~&jSNWI|I zyCvZBXhU@Dz|cicnd-TO%j3yBJXoTlqd)TNUDlgZxu4Vm8mZS!;S*xT-7{C;Rx zG_5aR_jBj#U(XaW!N={r|L1uuBfk-}UApam3c6j?paAJp2MH$2H_6)FZfHchL&90b zrC>%h&X|GuEZI^1&}KR@WXM5p8RR(08;D&Rx!$L)+iVu48%0V|(L`TXizJZ2VWisp zy)fWb;RW;=#p)6;{~?cOGGx4J!_cR}-AyJx;tf6xbDsJ`Un5?TZ z+&ih|Y9i_YinlscC4fNPEQh#cf}~f>7lm5`O4W3ZAv3L3ZI);aXN!8;guk}rho(!m zmF<*;XgP)whZ&mwYtOeHvhGP*DvY!#qRSA6LUN2F*mv;>gP$u zte#61-Nw@ftB9xuDs}TWNxkp$aIPsA+?^wWk7RVeykHcBnJ`#4^?6b?^&Yy#4mm@r zj7P2{CX&v0N(n{!VOAZR-8(3z^#Np5a(IQ1)!jTu3^A|1KdjB;bX>Rhr5=Id zYEQaet3#>aXutP@pvvka)}Z??kjOjt6m`GU(5>2|z`2xPk_Vm4sH*0*GEFr_G~w2O zW{x;mj!a)7%n?W=7WJj(w*h5YqZ_AHQAHoIWTf2}H$m>ACXGGbtBG03>wZlgjPe#! z@pGNc(5oZj@BGC5AioGWEqI=YXHVHY`_E-UecKTARSzLLLLM3TsSK5}mE%*MpOdzG za&d2|H3y%Tq4xwgOzyMs(J*S`8-HcO4JK$CE(jV4DMRF==tEFbCC-9QFjpO8nM_X(}kcYE!oV7ekj$h9|!VkrsDoDBb4eDN5}KRA^&csaPQi|^}| zT0XSPqTJ6=>N44O=giES>S*l#di9~i_=(9 zezsC%0o9NO-ZpgWwAm48T0*l@f5%}Dl=Q+k(4|#w0O|(h;~J>xCP>hfnGjrwe>8i3 zq$YUBcvr$~Y)R-Xs}$bnAgV_)&A^b*c=ik5#z4mFr#wA2(VjublOGZvErdzCkgf;i z2K6LQ7Rpw34S@`-r-zc2*rS^sQ1d(_PKcVC#sSI57aN8M@rEkS%~!Ht*Y5uHxKlU2 zH$mXlc=M5W8Nj5v+I1m<7e3lx{|q_`dI$45GGIH@&=9agK3C-#PspePT)?tK+hC2B{ ziSM!NG#(lq^G=xuK}?J&vTVRi@(e<_5PwbgNAjk`h9!vt7xNf(_q?0_VA=H-P%2s> zYPAARS5psbjKaa*wu>?$j>C}HF5eCd;2;)N$%h8+mkZ^J>V~ha{jaJu;&(1+HYhY% zF(c@;2u=2=-q}9yo?h)LKd<~QR-fFG#gHZA!TC?4x=)Du=eC&!PByxsM3m0k7F|B7S)> z(D!p*r2{a{icr1J3a(njCM`!E)%{hQPb=Q?z*eKX zEw0xWT_(Y14Q9P4ICIpRCSg4MoIOuKqH*8`3-O?#Q@^Od9PbhG@AfTom|=}iQ+MXf zwSUn7I3(ec1e7ZX^U6gT?st4H`G0xj&%oBso#@r;-^(qV3uH&h_ak|?P#}xnyM$cq zel2uOeF3A(r_MjtSGnR3T;uq7W=$~21f2f#cP8(0h&4}KpJKDsO8YS-)-?k+G;_?E^JzhH4lhW`4u$*^uTJ9()V^q_Hu9ojG$AwqIZc>?0Jj>mUr9O)@TOC+G@-2rQt`M7^nIu0 zIti;Wt4{G@Yu9P{hn8$6<3j4S^VTQ~R|dneBKF=%%w8SyQqN6IrvV73w#J% z94d2=?)ve9QzYYGQ3QTVAV-YL)yC`((=i|Z3KY(6i+4hGyytcBQ4s^Ufa!0Lo2ID+ z#dEi{Xo{Kdii*@)$2cl{C+tebX=*0S?DMgx$eUcj5910s&TGSPd6c3=Uo}OXhnHN# z*Adr-8)!Op&s1@>ls;_;(w7a>x_Xq>9EHujU*&O zXF4lC9TK0Z(ba^Awa;OizLn@UINUs0!Lh^gS&JpqMc!ExUh$G z@tU4hGk~?&hlNe^Wh6A2ZYQTc7bjDwA2Y$uYu+QxcRmDYVd0=nv>`^SURWL!K1%gD zmS{2XuaDe`VTOY%EE4ybar8yFPO`WO zVKBnlkW>KmuX7gh_VUb0!qYCXIChoa&!nE{r)U}bI-fMFl7`!liKFQGmw|UevdZ2( zm1CFoGJLK~hy`}}_0T4tC0Cp7xG-zCRH z4Xtdx9|=w`^&{PJxSr_^BFmGWTGd74vf3q5b0Dbm2lPy_?vNe5pT|NX*HoCDi-Tx* z@-gj4li%Xys1c1!E!R5qlBi&dY>ROx&2KTn?2=JpRq+O$D`3U8hfs|)D*KXdLvSff zouWDcBNqJqg5(Wr>eOIqu)JXa?yH))`_#}wo6(!Im(|||mu~~)PBVAymR2$4B)9qf zEC)WZGAD6lYl&7&RyI-@sa_q*8sMj4T@!e(*La74qxlv;l_cr0Z`7(@Oo&5l9!8_8 z2*8qA$V~h(2(4WdwMFM>tf>HU-oqsg~@tyF9Nkv= z6MoF?ot0njd3eh3HLv;ke1Ff>qhe5`a)8|NH8J{jEi$Lrdiqz8a1A?2!0+bx_{;B0 z<$N9#mr0C}vKLN=dV=64m)`IL_%`K#zdXy>hD^9^|HOW^QTN|QuDJ}@(BCS z&Y53mp(M&AEA`gz+dCBSf^jhy*_Pfq(fB5T1-sdY-b{u_r^MWOP%b#}k`al|$PqXm{%z8kjH)D2bi>6q|U)rf_1_ zkWAH__Jx-(%V7hw#3*5e4*%=*wywB=K_C7$BkOabE=Rdv^Rqzi@{30$?E`YS`I4_p zcyPMZ0A?$+3^b-!;U!zukMbQ2;f*TOMFwa2LsWOT)M&Abn%o`1X%SM}X%1(T0k ze^jY!L-E|ujvizVEgn}J_&2?;*Yjxge#q|7A8z~)8<{e2*BK22d_`w05g&WKMm564 zAtdSfQSJ8#;XjlQ2u8&73uisw6y$#k$_iqFN(xkk*cQ;NB}{U42Xrh*n7{6MCU-WT zwO(^*50z`DCQl@}M^SdjYzdeY(_PGbRkS}utaDnbt~clo!jPy^kompzfVsQojP^8J z+0O@%yeQWdf^@?-N0(w=HpqM+IN-OxE+M>^9%iB$q^XSi#fda}N>(kRXBiXabT$i$ zk8Spp`yWwp)Sl8_w+RI^ppPE9Zv(F>7eab8qbMssE6f{~3y`6pUZ|_$PU*TW$m5tr zIo6rU*p*mHtdUj1k6~hty&-n{6%jLp`CQR}=eq$WSWKmBc~rDFe=jsjz_R};17Xpr zZvvaE^f`oH!Zz1~lYl=P*#F(Tewd(KDL6gTBU4T~VyD&HT+#)MKb7%xm5j9hgauu) z`19-a8+=JMQfGWT##?&o`Gt*`hYW`KX8Nll;^H^$@UH+q6#>`rz2}Fr{8Yp;KT9DY zpW#cl((n__q0tsyn4K%_P2TkKdQH#H(hi;%lCqRFBWGUZohvEwqO97IDrud)v`O9S z;y6OY_Fi%4e0NteBuROdoX*9UuD-=SQ59Yc0^7VSA|!xfR!nC%W7{#8F5qUy7KIaBjy{Vq*S6~2iESKxToSR<|$I8`UO+BOi%@%Qgzjv=_> zN5=)Gi9AtM`COk)`}l>s-b()A;k_INjnSP-P_~=}e=|%X639~7JZ*f#QHj+m?PyLd zCtb>Wf>U$}*r#ePY_imjSMB3+*y7#D{s*vO z^5}37IdLfg>uppfbz;p*QE$Ug6NRP7?Pj@})EOVvOg)X@{LFe^?6aDw^x)nq$y6~W zv@Xw?1cr^=w0HK9T~60)(ZW3>^Y5O4VX%}>x-|Z5`B0@IEIAkH_kW)(!Pg6+MCDhpn4- zin8P>!n16Re9a^Z;g1W_%%)kB&b(q#py&+xXWGx-A5iK z!WY+*X;(u-$ugevh*M!t0rr~9<RIBb zdgzbpeXp#m+xUw z&&1ChoC!-{`6He8i0VruA!h?l^;(+)e-{&$RYaG*;+FY+lS5AW4C2=a0;w3N`j5j|*P?OvomG6>WF~@70z??uD2RSTAvjbeW7tv|+ zyk2gv{}YascBfM3qD1eq5FU83i*Zp0u?_^I5WD!a)PfNjG;!SzIUd%d8mU>-FsO+`@R~H9eQivt-g}lv8CLWd`b^%moxOL_{pY;y!vxi7 z?uBIo>(n;1$GAj0DfqSiEOwZfd^$UE8V_U^*^Fka8|2o zTL582(>FOnEX~jSPAh7{74WQ7yGP9IR=@$y>KzV7P#5sA3@!})=0znVB?adp|2yht zo8-eceBoa&vosXkEW|2E%7tr*(y1>S*#)?~dn8l{;+FUyH{ovK4>+BJ5;pDyheyEp z%E~pL34W_2AvxlSiw~h-az!fNSr`er=e>tmA`RzT^%Y2d%9J}uh18&tB<^FL&APyT zZvkP6jszhBX!Pc+$gh89AHvTGtvP%>S&wJAM+;5azp-ECb3FL!^EXY(?aqn?|2GRT zHtxaXc{SMwox|^ndPZz0KZu}4M8TWZXFo+0Ogw#D`^&l4r>%S4WTk}aD(>;4z_t5l zfd;R-;OfbEnn8%E!~t<>Yg*Q@hlqTn9JmU$+?QwdL)WB7GU zc>X!z@nD0X?CzwgL31B-m6T9vC$DmUps-?kO!;Nn8!x82;cfK^ef`&+$-r`F;&P>W z=!rsd%QW4I@mZ%_4j0j6~XW@LsFW!MVA zLD%M*a!cJLiEudDhSY$11*n&-7{V*>WdIL%aXv?7jHHfFw9m>XTLgxs^*Xs+5#BX_ z?X#fYl24Iir*Gf?v<$zSxm6Ha!6X8uR%Fo z*CSnlzq%Ca+HIFRq174IOh%`@5IYGHfd%U%x&&+V0sWT1m;-Anl=96_q|NVe#eNc` zKtM?+$Pfi~^zJisHo>eLosYv4Ryj9wF-_{GIz%Lpq;ZmHzQ%`e<5E?l4&t_mzh#Jz zay=|?WtwQLC5giFIEi_!!Seq=syM=MZT!*u4YvFwm)e=3{KBYv8mNVuxZr6ty-p_8 z)CXUM!W>MhA(Z$LpHNF_czyyx8IUlr`|gXf4N`qjv@S_}yY~f-_Q)O_?eaZM1wla4 zoK@E{zNioxR4{IM$(dhcwGqvDU(Vx5j{bCfy$~C*aa&2zON5=%Y&I7=su8ZHoR}t{ zx0lCFwdQu?-B_sav8yVBM&1{#gI;}*?*l9FEj`ZuocYy2HFI^fisPX@`uRJdNpCLy ztpmo2q5N&=wvV5+F^75l>2>e&+}yvwDh}wv^x|R5Gk3Oeifp=lm99}!d1MXCx7K_#n=MO9PyGUz~ z7bNX2D?^6aFtuTt6ND>%$o#^3<@xgX^FrnYDOAT#&6k1GN1(C>y|=!81z9(dl8%Lk z`#81hr6^T%`UB6TrvTW+U&`#7QPZnLhCgUwuWq`M>`?z1SelBgjOKYQm5~UV2c;P!N7&dJFMS#gIBGO1ii<< zVwO!D)l~%Y{L+n8ilKJ&M8cMu;+zFk{%~?7e{gES8dP!K9ga#Y6O|>f!k`e2Tr8?GEL}SjL_+gk4?%?;7L98Y^@aSk(7w~g^vn2w4*%7QFQxp9{G5ad z4zu{bZhjFUhQ5Bja62yEZPhj!B|K)YA=%?E1^c7>pF2`W0a2Sw5GD!flq^7j>yE(s zEPQM=WTyg7@F+2y?e)c3AHqba+-I0dh)}XWqE(s2KthsmG0VlSK?7{+_Z!W05SRz- zqU0=k96}j1LPI#R`_P@PW8m8kLcdS1s>0wE!aNvPrJ)eAcUcQXqSoAnTzD*nQ5ffQ zsEvga&Oh1_GvJhwc4aWI)>t-`KSp@5V9s{gQ&|qly>k<^9WHvYKwpeVZ`I$mC72h5D zA&hw0IZs0k;?3D8=dg;Qcn8eth9%gPkzp&JJWn*8gtk-?SK!nL9z`*8MhL@C7S;t^ zd}Akp5p;@feWE=+W5FgaotRPNxz&A8wY1AYG_Duq1^_2w4fz&@<)SjMyf{Kbwj3S? zyNpq7P|o?;VBE8^31DfvZ+@twuHg*>;@oNkLf3d9eYmua0|93F+0D=S9pWOj19gmz zf`%Nw%S58&tdJw)V*+FD;!94+iDn16*SRLvZ=&U`$N0u+sLuz=y6F7QkR6rf(mt{s zG@%o{sVpMaU0=7(zgG67Yz(O;)f8Sv`0mD+sHw7Q*ylQvy|Nu$mATxS>aKO|)ER^` zbzp>T^=^2pBlJ6Or+z8~mz{Vub?Q?(u6h;K#Wc6(_z6h`Shr8I+(>YgImO&jEhPJ$ zzY$?ctTqQ|=`Qmg)-|t>FOh)iUFo$g3qI^Fj@1LHO#N72{-Sw4f>yUwXiPbBWKjPW zg17Egj!C4qcoy>9@g(hJ%9Q={;o&DELFiJ4@Swv)NGD$+mPgFvQ?J?mh=HVJM$1P% z36|ngLZ2nW6xUiOHRm~AD*YL3iWNlZUPKYn%C$m$T1B zDK+>G0P-rRrL+%C^k&-MN7IUiBu*!~0#hOl809Q=G(m<6-JHABC0;;m+-6O*tlXL^ zS%@F;buEgV?-F9S`kz?X|F4kVa9?3k_7rN7D!f{gr{3 zCZ#%Pxo00nJG?cyQeancXm{&1a87E}g_Ftl0WSDKSo7f-JlmMe!bF^MT02JPPDUI^ zAL1{t$pN}PGnCr41e1oN>uBuWMaN1NO)N#UnYtfN1k%($_(grC5-9S7b?>w0`k-6W z;mK|yS`rV!jwtBtk>fd9J#fjCbo#*L;;L$hC3(qZIvUcDd5}uh$;3{2q+>;AI zka-wZe@67EjVt`wY;9d_gK1v_KQve*=|dMyF~!BoUt{j4B$#-(&@3VSr5sE#Tnnlc z?8qX-tRB=jvSpm)B&F1jNiT!-q8y|Urb9Rb@+R64W?6j+O(K^6!)ju^lnpNx4 zOV7XWCz?*)2hWuIX>=}pnYhta9LO5%IHzaU`o(gTSphN#-=yr<@0?hh&<+O*Lw;hf zQN5Q9koV=fj{Dp#$^2p8{5@1_Yfw%OnkFMyPw<->W4#LTpb~RGVZB=s$U+N zsS#Qc0NLC$MnIzA%Noai(rW04%&u@nLxf|$4TbzKf5k*v2CJu^5b#CEHqkR?o^BJ| z81!)*hPPaa5)Xdg^qrmit+xr(d)LG!pDBsRA zCqZJy+3Su17|Q~81Y9c?A}b0A69A(}`8Y}lyD1@bQwL%@3W<^?1^wG!6HT9}&?5!U zqg?rSLJvU3pOS-YVx$T6fs}?mU#K+*Pp~m&^hg@b7X`$S;6fi@`xL65pi!MoZ>!21 za3_D~s<%jw-k?G}2Qvw1MMm#dv#9+VRFiRvB^_8?g}jm#kt@&UNw z5H7C?y6$+fSg&xQ9N$rT`Mt1N%l2k8PT~;H;Py-Hrtpas{b0#(7F-&yxtg;i=r=LT zNUEnR&~o8wmNCJ)?tENXp{dHD5wK^+z$`J9d?#MkNHvm+&=H}~Qa*6K=tUAGJH`I3 z4C}4U+?|i#Ak+o$m2fn{HLog)a~vZ+-n~Iec+A)1BcxVISHhfan*~`xl1YJdhgPZe zvYn(J@#!w&tA@_J>G2I+Pr)6B_b=Dct7WcycYfIDVqU(+&ub=V1vNXIAD)|ZX~kw-H|Wj{T&Yi~-xe3KJ{hmZ@mBG^u}?9EUFJMXE63KhSDGg+Vfj7k zaPoAShlv-4NH49D2{ZNL4JS0_dRxD46bWMB3peV){o*GehJ^#Qe>O!}@X?Bvck`r5 zrON+7K|X0idZ&iRHs^@c;ue1+nIMVsx#dg7q#BBG@Uo7`U9U z(%#_emLlJC!+%Z*Dvi&thJAr>K>nmA9^KITr;^F_Q@tmhMa7ExC|WYIzd>?xc1IGL zYN-VA}ZS$>xx@I$8+YopPUfoI|&-K}f6m z=HG|DdQm*Z@>&KYJ_+@ts^+fSe&U@Io1<}zo=tKG2-O55P#qB9*s7b(D+#k>4Qtwa zm;2a(vhEjpwYQKHGhALMRX&`75OCW37(IfMpf$?Qgm| zA|9+oHC`~YSQnTm z&A+zR2+~>@nrr#yI^wJ_8$dJ4wE{Tn}h8ZK_kP6Q2l1>lcX z%fn>!-@y}lE7<$P<2h74R*Ei1J{_=T;hFhysHrNx{Cymx{S_)mZjDNh2=1#Mk^T0t z$8+R({4sq{e;Fl54HExJPM0g}v-#bg^!2I_mND=4sx%(;`zbh!ik_+ul=;B|6y#0+%^y>vw z=D~Hkt?SH`@b&8%yV@WRUMABe(-2vox5PTx|%7fer@A4f_1mxkI z!U*eqAw&Iz{+G6c?V7XIz&wMkpXC)^bgf?7)n}Tu~Jv=lp>1oX`jxFOKJU=p= z)a_*y$kUSa)&2==R&hU|2Dv_*Rg7n$OQFmkgk1b4xa?U`&?&@5UKX@HZ65tf;7|I6 z>RQadIiPqBO)+WVR752mcoSqMV5ul$zmUhT#U}M4Ko!g+O?~G8hDqz~wOkPpm<_|h z44C89bD|Wa!@Q|e$872>-FB?vm_5+B%7%Nbc*)scI2DAwbT<6_B^V(<%p1`^t1fo= z;=K%*F{?mjfocpOI#!+?m(N!tkdt?l4uZ?}L$F|5bIqno^wi&q0?Q}B17xU`>)XRv z5?8wer<0{k3Oe9}bJ}q6ufw0^+}cZjuM*$mDlSM3JDPr%Ug34C$@IR`7CoN8>s|*b z9!p|9pmFp%7S(P+F1ivnid>}$Bgf0e;sd(}DZE+NmNVgW8DpN*T&`(9Z0)U99~0|W zISn6{&8H-TABnT+M>DfXR^lY%6je%5wtExXr-is=2cD{|z(>@_e{>wq7VYHga;6u$%ftiTp_p4PC-0xd)XXMP*| z(S#IjjGd?ubb2f8`{j7v{o>}~OBUMdvC9YYSnI@>8XRtw)eu<{Aug{akP zD@}Y`ZdiN)chsg-mJX%HM^4yqU)w^p2cg} z%VLO>MPF*_kVFvz0xCT(LdyZA$BBuA8|{#))Xq1)JsLU$b!2DK(HSEysRgA;hOBPv zfQ`IOaY&usKOZQEYUc2BTn#k|76Yvqg*FjWqjb1{g>5&dr}xY7ThV;&%^eu>d#tCj z`r#VqdENV}^~K;T%S~sbiSanmQEc6xjWVw@-Dj%nU^~iQ!ayjK>X>*^Mrh8eeJObp zBzh|iM5$3h{8<|`SBo*%hiv7D+MD&F|5I(4Yc>pPL=S{idex&k1ZyJc4_Bni1uA%J z46k90MF_~eK>xgkka|sMiYS~bnn6Ry2RjMay^u&y8gT_j14^_I#b}HNyft-h!I5`@ z%6;VOCB=ojmB<-GM<;z?8rIQ^5osXp0&D26gmE=t?e_Gw{V|=>@6E`i0}aT!_+O@U zOKIph6kf<@k*PF03Nepx z&_XIxTc-3a(`b6nUW=WbOX93F@5D6s>IBI zeC>NV+W%8hzX6alzcBYZZM-Pl9)l*5mwX@lwL-Hgu#)cXtds=L@2tA1$e=U}z#Cp2&Q2Jw1T`;p_CLkq2n0ZELE^}oLPqw&Rw#Y7Y3NpmQE1N0RQT&P6(#) zVmMD7U^MyJK9I_))D_>q&Y4xzY}34yZq;Kgdr^3HAF2I@#blpC*KolVlp>Z|qCU3t zNf)9T1|PF7OLNqm{jI+4#y6dE6w4uq*>k?W?tyB#c-Q0rRz(JCW%J~8U#b2Z=BAed zCx^o=6XM7H7V#|dO1V1;?f_O7?4m8`tP}u26YVejH4!6Yeha3 zvrR|Jqh${2EyScK!Lm^yBwg8De}=Qiky-}`;3Ewr%=G_sq8ZSrNA6#JNpb7PCg0kW{mtSodgIgp)#0 z9}8-E<9C=&xs+52Dr>>E(FqIV1zZ&SukJ0p73u{sa&^f~syq)+3 z_qP57jYJy0g{|sFZ)?Q?)AlMq^!SZf=^Iq_*GutUZ!6lcURY%I<<*2(JHNXiig#mP zpl5T-%>A~`$p7hONpFP)E@}UR_n%P4!uuQ%8>eEqQ<|em7c6+uI+HGX$ZlR5fn_hF~dF?@s4s4jvfS`;JGiD zAt-Uni&(5Hu$^bK(O*+N@3;LjfogQ zc*}~D(A^itVHz0N;z=UYC=FV|Q0NFB05u5LOHyZbuxE97yw7cA=f=|n{3{h*2FXF& zYrXpC581*{awH7kM>OrzYxsM|jY+=M=??Rz0I=?~1wNk~vFCVJVBNrN7UycFddAkA zANJz0ec=qx{ZD>35MaBD$7rX?4~Vq6)ZA?Cb5QKMx;Jlo@%gHwY9dwqbSEmG#k}t6 z(*OF2eswI^RDQ(`OnN%9FSqh&*uF3Pu>D$`wX7E~KY^`etA?)}&9%jf{c1U8oroRR zOk>cFx^hS%M0}T+hiSjRx6RbLr$s(k{57J@c%uSlRS8GpiYA-1!jk5OhrH6#+;EuX zvlFWGN&D3ElknOUZnqkl@me_zO>$&bNB^I$;Y1&!EP!ASF7)IeQR~nKcEOBXt4c&7 zV?K?hkPDF;i&*TSH1hlB2>HhgSU09gt^qH(c+m@>Y1xMEZlEY|n`&aG3sbjndNfP= z9lfdF*ehqhEF#H?$BG->n$o(yO-{N)tfLM;J*K}4&0CW+nAQ^VkqQBnEc{5RgX%<( zq}GLZ0>P7A?{&p>8i|pdR6+`cSSfk1dpL+49t>3l1fxB1FOe+KX+d0k9_oUd_8f$b z1skmPw3U+C`n|zPvt*ivxfGDYq;$z(uqzPbR5eDixmhNvj|fz+4dGpMgWdmKmRcxYl`D+CudAC(Xg~l^G)R9*4AN=M| z$6G&5J2wvOhOsbfT1^qh`Au9%oFlo5#A53s;N#PUo$8mY)zqn)a`p00nud+##oe}S z1I&Q%wBjaww~8t=u;qy>wT~rAwtAE4cipQfCSr_9HtJI|6Xd)(hyH&hQ3eK4O5$-w zjEv&_O3DSoibSp-Mh9*;Gq1#5GcETqCY>(sW~TWi(1@0IrEgulgFh`XG<2)>w|Cc9 zjh}sF{55byaoa_S<5LNTcCS@I89M4uz!rKI*!3eLo#?z3OLrgBK*&qke>qWZ(_`AI z;jy@SS%~%7BN8*L8s3@3c>hJtnE2-{8^&W)QK#|v?K zfx^UMza}-K#3)Dy&I_@JaT%_kSTwuf?3T)r&(n7N6`q!~^fqkGZ2KqaxKg9yd?m3F z+At1p(Ki0obd5eGrk}&wkA=@W)`GhR4@>2L!u>C4s6N*O=XhVfP8HjJ`guuup8{sq z@$vb+zKga*JBu4rOjhP5$RU(JLkmA~+$} zlL^63Y(8a>en9z<*5%%nYl|xI!Uxj%5v|(9cLAGpeMH7@MWQ3v+Vr<=As4(s6otZT zJzpV&3pKQ-?kpa=G$A9m{BfyI#*Pk@Cyl=h;R6rVHfMoYo>mUE=R#8of2UW12Q{nK zxH?ns8f=OWO-fumzJV3*2^h>sCnu3NjTQ2glFH1;Q2Pf_4p#|+U-u{ucD95Z1r=S$z4&3L5NYlCb|xO|*dC#bd0W_`E&GlfJk+(h zC{ecH^52_vHp_Ziqrc>YIOI(L{YtPF;N0zW3bC`K==3_%+xT*>D&$NxW^Nzne)vB! zl7p=4HME{Dg;JrkIZAeRQ#CQBRxm6I-K^TqE1fdM=13zZ2$&<%{5hevo?oxP)E=(} z2ZIa@C?6QpsHX_;%>qm2P3~kt2d*)fIn<E5C<%ZG_xkVbU3;QrXB>ak&ZhTstd?K1?mr+D zaq^Mw*BSPkZGS!SA;!1j!Vsgi^h^p11#Y{WkVc~R#i66yO{&!Vwgf+Y06*Gq@`kR4 z!cXE2`VR)&9@1Afdei*@H(VFV@#gFCqON_#;sP%1J#Ra$Zu2Jh3#os;rlPOX$^|Gx z`Oo3FzaO6^k5$N7dv}A|T+7jkm8&CbS2OP`-9zttWPvh8VmwT-stg|rek>Rxe(JR% z^`y|vXhlNuwkA$mWVOjG{I@QKT;k|52)arcCbwy}S#*8nH;KEv4Uux=OJ&Zg9vL6)t^OSLSaO$3u)8x$C3 zMp&L>hA9MndyXdKTICIxY|!wT{vQC1KytrT`gB|pkrSz@WNmwy#7ghbf~>pT^Cidd zUah=Rs)nvpvgMjKIksnw)^535W@>hV5M-pWu}QrXe|NcaJ5ZJGParQ|=Cp&3O)4vo zJJdpwP;6Oh5-eo#7Lp2~%6#btc9x0ck)hzqbu3hXto0ug$RgoD zq<EcH^c!}UsNAwpZg*6 zF#U(S8xt9zXJTsrs(4mWgp?V#OaYeS9sr2hGZxou%7 znhBnqXa^&~k>=3QfRPGzC0rfk-pigC@qXf_h=l?)!sCvK^3m#)7Kt_Ho%jM*hjc&C z9wwPH*ZYG-T-D5MxHQIlQ1TEn`-EoVuieZo=NM(XX>0AlFMYB7L1$E-ucSiExhvM6LtR7 z7u&Dj@JM^_qpj`PIn!SIQ|GofoWCQkZM4P>-QybdzKJrv-p>7nueVD_-O18*>c+U^ z#Z~p1? z+N<}BxFa2<>p{c-P17Xm9#p^bc*_eOi0p zo6l>fB#jQ-`q_5bpFGk&95lM(pFg9$<0YrYm2{PR#hL9TcYM8Fd)Hc<-4p$C~c`+4V|(cUok_4fL2;2wE)yX~E~x62LN;Pw#5id@6ub@Gf-! z?Vo>6yX3oqFR;ko9k<+lPuqFZJ?-iZ?u$jEv)ii<+~0on)|Du`p3jx*sO|oGyZ-;U zv;D#I_qMa3w4|{&-)VBYo;PZ>( z`OD|q$NxiE>TU^Mi0SUai_dO<{!@F}(BV;IZpolfX7uZ?-`lQHU!2+A_w(my zysmcZep}~2V?QRR7Fb}=-1-sije#Z06!d-W?U;EQE$PuK_^SFlFup8Sz}l~ZIP1N&jNN=Y+0y$OnFmsXVu5=wUkQA@m_wW zI(9$oy-zImp<;9fTs;TI2<4tq$w@|FA1;RiEQY+cyx@)Kc@ysP^HbRHc%E46h^daR zEONN&1rSqfBC{{FWL+i^2DFf3G_D`n8fAIoD}&PRAHQ|NYr91dePk42affUr(4?$k zQ028>Z7I?i{8;E-CvxXYJArbY09D|~LX4&9t{%w)X+qQGo`|aWh!E%4EvF>(PQ?B? zrouZP*Wa>4q!2;CH-gGcYG@ItmFbH8Wun1lsp_yq5v8kaS&a~)cqge8*{>yhIQ0%6 z35cK6yEsN%gffpsowz67hdB_TMq2J*JYCZuFgPvR);>2Ap*^Nfwgw_FdC>H>tEg8B zmpY$Js;*K$Wto%>-3I4i4&A3CjAkKlBbYJ=(7#>w!(=v(VKbSJu3ruAdd{b;nde-0 z6o{_JHh(?~><-DpJ=9789xH+Qr7T;n2e{wvRpt-+p1+|LK#>hzU+9u8eoX8c0Ugnz2yMO z3-s;6!Eon{{slBgEYw@#E?Rd# z)Nb4TkJ?Ayytn<<*~{&hum6g`*oM#X%8odRx8FS1-g3?J+Gl=huI>Ne-R;*t<#(&j ze|)e#?eg>5J#UNnnwPA#>)!eK_V&9ar5y8f;g3GAy$=(}Q%-At^S0-;cfJS^Hu#+S zwD!(_by~YLPF?jg&x`WU?c=!aexUuwt>2q%TWN3lzwTMw_pCv``dvF_O^Te z-SgY~Ua-_&^E-F6kB6{&{Ib{DZSTLmz4*UOx3~P-1?~PfpV@Zba!-5BUwsp1Y5PC+ zndpzhZQqZc+wP>T7ld`REA(Ky?n^t{JFf}Bc3*4P|JmIFUG=%~zXXkb;yLXTSDo7S z?SG*C+W+@;Us8SVZ67*gcl&72;La;gX@~#%p7zh*A5!b+XD#~tt^35;_xud!rrJCHRlMi*PwU(8{zSX&%a64CxHsJC048UB=3(>0frIU)<(c-Xt9u*)Dtka(n4(pA+wRPJ8G18{Yx%9hEOn-`n2&^2zq$4}3Lve7W87!2p;6 zfUmk}e)GDW01dAHuS@OntoMVr2GIXB%CoPww_o?o_Lb-EY4^k&^r`&vz+)*OzPjy{zZC zkA0r(?#5nE%xvs?#r{ns*dpCP1V3b%u8Z8;5#v+f*D{FQ&XOqctE5J)f&8G|imYMTYE;? zHUo~b07fdaKokMx64ZU1Cd-&W6$Foab&TgS;7$IPbf5^9F+Q0{L7*lPvo;5d`xJoA zyJ-vUBFIe|ZxhCv2J0>gBuR)9KpKE0WpBysh`etd7&1dSi%FKtAn{o7dyG{^PUwoS zcgMl~>u#^|`ttjN`*MoMir>0pwRdA0l{Qf#?T>&*ub9LRjhOfWBo*5q3OW@VYC+pEbG>y#E`XYx<1&-D$Dq&a9_|MOX_3fl)14sd`aQi#$l$~wc{Ct}Yz%&<@ukAZ`w4J+7 zX*+lBYCCq=<+T9gRDdazLCl+d#?)_@M?=H^iI7k(-rcU)8}-k z`0Ux!u6WjIZC6<2c0J!9qE4Qz;8$Nyi@d+|B z-%i1B6n$_?l)Wp{=ynf=Rc+UHFRioDH@hMsNZ;Pm+M9pijJ|D;hL8|#yYJKAXzvao z{^x#pca%5R&bxS5yL35XcqEw*KAV<(pndpbYwglY_Jn06cqW9^SG}OM58wVk2ADBQGVm|XYx_Q~vpc`Hy*%jFA}P&6jPBVury^oJ z?uznA{Ic2Sq955CyuV9*dc_Y14ex!V-2(VKPP_L#BltcP3SW%j^Uys9+k+SH2taqJ z?SIg}KfZTI+ZVA)C&C+-|I?>+i6Rz|tg+6 z7sazt(t(39UyXbgU|QaBFz7h7BS28}?S{LK#g`Lp&ksMfy(IwX+yCqf?Yf&L+B<$C z;}JKh+lkQNiXT2#{8jbd|6njz2;y+;gAYgYA;!+Lp53l^#%M)Pa6UNEd1-St+2ky) zasj3Up7IEILeAIG=R0r}Xh**}FHj{lv+hSqq1ypw`VA1{?^t7aekGnOFb2qi`}Mru zmETwcwf_}fB-BUO_#HykKrufW;+wznVx-8PdA+>4JOSK0h|>yh$bZ4nnJnx!hM7L zldT-#P8x&5bxn&))_!D5XbLxh!kL-6#}qBNU3R+4T>4oKE0>yLSY@gF=U;N^+5_OH@=v+v~w$ZQ{KIp(X$0MV17 zEow)?wQWnp&WWc`cEmj~IckCz0J6(r=X#jGd8t5-Cq6N`fRrqn{#$RafulJJ?G|&E zwRG?n*R_;r3|4*Z{zrDsM-Lqg@WX--RmXA~K$E?&(9q4Iw3**2(8Q9pycA$Cz$4lH z=I3U^$~4=yMdFEV0kG!dtE4NLc*g19que-B=0X5BT>F-BBV<070?KI-YkvIp+4hlk z$6X=x-DS6^{xfSu@S`En|K+{yhR-aw0}rpXTjCT#TK5UyVHdo?CxqDb=ayO+N7{v> zNd}Hrc1+Mg=KMsDbn><9eCcI72k)6{yT7Zo+ahz+(jeK*Aj@z|uBxW$%aaOpb-Es5X?GJ7` z*zR~>rG5P2C}i(Ra=?&AgTIg0?zU$~#PA#l&>Xb<++w@*;&a-0fA{%z^M6}xyT7#9 zUV452-KfefC%_x048Y@_AAEXy-#uS$Z@l*QcFp#wcGb@v#bx#=%^a4+EjQi|ki`wO z|I9u=ESj(QO#9hC`C_J_=$j zemluC&)qCc9+f`Q{YG3*Nd)v9cc<(xw!wQI8C^;`}8+P}r z1ZgFo+6_-BzjgHTNv1y~TtfEY2x!r|%9`th?5td@X;NMSVzjneMy`EV?eEam5tD|2nr*}TmAdEaDMmn^qYA7`uWG7d`c%m+YJsi@T2D@&Iu=JgY$Zz?ar zAuI8lO^{au#Lxz1AJ-ZziG(MN8DtH!0md1j(=Zf957u8%Jb8sGkY!NGqwp}pb&!xF z88>1*kKY1+Y7JNj!$--R)e-ccvas7A++|A@u2||&?M-81aU3SFpv(eEFoxqGaGT+I zZ$wtv0n62g>(;8oOBoxw_Bs5WIt?tc4&)d0P7rx>5iWfkTiZ ztt0Um(u`w_jECIW*-pKgdZG=mMNp`m|1l`g*z0*T;;uIdJ)~tO9Wz@0>Rajx2P>At zu^nPQNr_Hb?Li{K^+%sjJNhA1AjkF907*ch{w$!Z`Z5BuV>`jRchBpFU-?Eh-(M!tbTJ1$|Aj4eLPNbz<0nV@63q+&{f(gUrEa> zycPEVER?}c^Fx*8xrC4UQo_I6W>Ce3eFcUc6RB~{cnMI27%XdId>60;1yCV5i6?^q zRa3+d&Djl?0N6}q0^nOcvZ&ljfmysEV9;h;jF-jGZUz)_22YixmuNh7e3Nx{GXk_L zxYhh4E0z|X9EXg}=r6MSJ@C*&ay_6Qz0K!A6i)wvS`!aDZBek$B~8UvH9$1 zPutttzP%9(5-|+xKi_QE|J%FTADq3ry(eN}_H6%}Q&>MHFFuj70nhO=vC(on9Khl% z@$Y;)@0`}I`AS$cLr^q$JKPR@En+XuA3!;b+4(u}z+*nHPqe z>jUk>fAXbv*>!iei~iknHnAX`WINa0KGXKS@`Cm^uLv;z!7sEI|NFbzMdw}6E_Gm@ zKgZ*e7(73F&NJH|y=|ra&fQ;buey1Cq~4zhnthY_XHew<(QTp4-`R0VQqgTFD!V@uA&2|9 zK1I1WBJYYgXnB619d zg}5b7$fY7)zZ~^kiUngSCVck7f_AgvrhwZ4?gP>ps!k-#@T6~kvkR)`F&3j(2-d=X z`$zyrzH3`&LUTFoFX!XCH8$7+Oil#QLQAQ=)DnoFG@mZ6wud6l#NWdKUU#*Zgj?Qi z5kGV7XTGWP_kH#5_TF2GjtR>{fRsRt0a^(9{$~5oNx$%D51dHZ2ixyQtjv9nMoiWR zztXPx+C;nZg@C?Y?WNy0)6R-`u4|)C59#_>+jWam?O%qQQ$)D6J!E!^>+k()w8#S% zRsaAX07*naROjwH!h*4$uV*3&LyK#-eFGY7Qpa#N;Y~N+bs(%T$G3W&_1tjri+Wu1 zzQ1kzp>4#W-T43RcYMw0XG7U%wU@qRqFw(NceeLNoCkfd{|jGiH-;51#QJv0_fNEs zf9US)pKrEX-k)(>-$q}Y_59P@Yo`vkYyK?u@}bXzM%R68t-bmOceg#Gwo!Ohuho# zJgg2Eo_2K58Gd>D0+4p3b^ht?r2vcLwLAFm!t*EFjh}e1-SmuI?fF5AJx`x& z2X2ZaAP>&Bi;|Eh#T)V3+dg=E)Fd6Ec3TlZaq&w2#i{r?~IfxHXiIU?=u!oQZ@L)3KZHH0yW(vF)*bZ;$!l6ylZVXX6_&%iCw$ z&iH$q>JVTlsy;y`;P3(wHL$2jk&hxXVz>!6$WVpy2CIAyK+T8%D#Dt)qIvOB3d{WTV*_C`g|I5iH{^p7_WeWINAkU550&FhFP$CCzpeeY zrKt9>@!yvI#VRQ+Ix}Ip?e$>B$e50C3&bc0UfC#bs^^K{|y0#$C3xn5cCvya^LoSEO1oanSYFerFE9ALAk{~ zn;kXGCG@(l0H=zZN{du7sogFSv`G(5#zzU=Bp)Dvk-<{mVJuW?Y25Rg1ai7M;o~q4 zt7qtAwP^Ee#|1JSfGHs3WA)y#K-JN~kq3(1oY6G(M`g^}?3VPYrHv5eu3IX_?xmn8?=c4Y+9cbK` zKWK-n(FNiul(~r%=;7PFB{X!g*;Rn508Y5}ZH;)T09jKrkyUWpyg(I;CVu$eGN8Ko z-uBdAxjnz1Ykv{$YG=LV{Px#Bw6%TckMGd=m%ZbG_Q0t~qPyGWKOS)_xBgu__f4N~ z?_Qm2FFpC;ag--cr0n_j!`ts|uZ(xU_#;Q!xzP7F?rI-ih?t0`@!}jQLmr;z*>9ex;?`pA;u5viXI@oQA-aFeHKd{nX`>H(wj_2DYuh`Z0eC|Md+pPw!8|rqFH0Y`x!urC^``ZP- z_^Ed0Z+^WUe$m@jWP}AIy@WfY}m`vN`5D~&+CKS5Vb+Bj}^aEzw3E}x0JJKs@(Kq z`HAwTu>Qn%20(>kEkMX@$gm_$BGJ;eI8Qt<#~lJzk(_BZViseq-4$Ty)L4&qZi`r` z09=ZLif1ZM!d!T3Yzr57T;GW;22@eYBLRYxxGCV{Ot|}VeohuF6rzASyglNXc*k6P zXK?vb*hsV}Dvcb?(SDSqV`pE;Sf}Glf-Jev7cN5nCRtvT&u7aIy!f9S`Tl?M!cH^n zv;1d^NeNDLc*O~oASK!f#H8gRf0uwa!Dd+LDzniVVJ7Q^L4;lZ7V4J8f!~f>FbH<1 zSyS6T@0cr#ZA#17fwcAY>ezaNB6k%CCM2i_q2W^C|0J-0osg~bNz zP{bv{TLiQ+AQr+s@S#T{8{|S{2V~I+AcFd9A*@FWi?|6awZnX4hP;3nqU8lJMKMy*sqAa^Z_bCcXs2N=X78qyDm3#UdcOGV#Zv zg6rST2$G+Vga?zcJ;2tvQ`%%$p>VT+5ZY1!*X@}6%T-%rG0u^s<^KEbk9I7y7k%H0 zPMYJ!4~!}B_*39uq?-?b6M*EN*CjZKm+t?_-?Zo6yt92K(sS>5{3~$+Zx~IzeFBe+ zZy8e{De&p9e679m&Hs0sIOS}46NEP10Ldyfdt)&3mjX?Ti{-;qcW+8dDLiE*N_h!c zjCDur6rmDcpwfJyHAAJc9LnXbmj_EOl-!dt=1^YI+8y_^LZM8={elg8@!XgNOkttQ z7$rlrR2p{cKJSZtCAkm716lM?o>QMFhiBzof^30nAo6*D7tYT`3iRoT)p!pvP$Z0t zwO+=Fs1F7Rd389fV1+D!5mUSvYx)W_Ea1u=!aH80p)ZCJD8l+IIV5EqWK6R6q983f z#2Ll$5NqutANvp~ISLe|oTLsd_di>PytyqP!R{@9778yS7rJo}xI3$a>0*YI&~=S- zm0+TNO91YCJ?-B(WF!l2?(|`q=CvMRfh_HBnqVx2dmBN^-08moZdK0?Pzj`vEzdhp zbG=-Pi0SHL%_uj0r+e%Hb4axyI?0EXJ_X_7>q_SVfM_egPi96TDbcj(hJa>S4>K@) zls>3{Eb2w4v*R@n;A51+yxK^o$0-EnwTQit*(>+$krz=7md!vBldQb(Yzb^saQx1JxF)A7hs;y1no-T$~5{<3=h;rtUx~C9& zcTe5B{#bazx2IK+A2UU78LrCf8F^WP^tfl2GTlI`RM}7q^PkJUjPjK8@I7pA0KVv%LL4P zgzcX($Gpz9IKl;6rJV2_p=^Wf4HbncF=kHIXsEW#0;FO}jCYd6WG*yYOQF?T2-ksw zSnSZeQ4YJg>)BNFFixxO%z-(|%!Sq{+8r|IKIR9_6rQl1_CF`)v^dvx37Y1`Shi|0 z2eKLPp+%HFWG=$@Fk--P?heaTP6{!un(hC-&6% zt}z9UPl1QuwWq!N4oe}UP zXZx4}aS1anE9KlynU?Z=$)zR3_?YrCYpg(vmF|WVDJSP@Ar-#BmzCF+^U4T-fgn68 zwA49vOA2oQ339Updg7f76s>4Q4z}AKYdS^*XLv%NN%#uuB=-{QM7RuISbh$#5?uRN zk@r)6P&kY{!BT!^osGYdr=1?&vDRcVC~q)8nB)>93*-V>xY*y8xMq8uX*(3^iU1P7 zF=7x0P3GX06?>B5K|+6s3j{2L=KI5j8TQf{)Ys7RZ9|fH{tXa{>~Uqy-cN5~A@gwr8^BMrm&IehE4Jmr}6m zofamURWmqEvJmHKPinMF5Z5~dvam3jUJ~J4b-iCa&+`HY@tbiV;TyDVRO&#&Uf@zZ z2!dO-U&4>*T6&2L=9lo6!ZFXQ91ynSEo8e)AKNN_CDiKbH;qNt!?IuwPSI-pkgLI5 z)`nt}eo*n6^ig z()N^d@$nyDcgGMIoy?=7py>F3$~<-~K;`S@QaD#7!`)NjyCB5dBO7=tl;74y4j^h|&H?ZNu@7mylbuz3vzIRN4V^H9mZTIru zwb%XT?b?WzO_s0tne*CJ&$pZ9EjNT)*(Y(k3^&8rr-;v!gCD=Tu1!ylI*l3a?+XQ3 zx1@|@sx|^ibv(ydDN624`A_Q`_vb=uP^A?+zTJZ8H5icK<-)o=Ku+GrZ%#QEU`n$r z2qlLmXzDz%a{bD;l$0w_r1}^LXid}_7;C1iQUHxOp*Z6NS_XxTyu=7MI+gqg&%E3st?>-40Bkff#Po`Suo z=N>WOGEyrdQilR1mToP`mWv<9PT}lJU3scvC)}E_x}5*FYn$uh>LgN55YlBSLAVmQ z(}TVrOAx|6Vv9P_AWFzOg|EEZZB3y}_X(i*xeibz7fD<~_(>3``V(Ca8s>d41a&4G zpI?xEmIj_e^2x?BT_(LO|0h^VMpr#(i!5XvVX}UdY|XfZN^Y>SzrlBIxTeYnPa@=3J68rB#gEe8;s^tx}ZMCUAlWMF>(V+I#WN59EN1pQig(WIn`a=7} z*`+O!dR%URv4=$LGqE)?GYSOohLfYIs z$x0bTavAR_h2;xg=o9{zG9{O&Ott~2T8Rf&SGR^MUQGCG>7p1(_RvdSWbugkg#|@h zIfO=zII^|aAXxiiu%AY_?~x(HV=$IttZaZoX_%;$+XZdiZ_v4BspE0_`1+Uvk2eKk zf3lzV9%Y+-F8nbztbM%e@U4{ply=p-*!g$-8B^d}q<}@?jM29-fK6sKb$i0Ljy@N1 zZJev~y@!e99eFG{`y7j7DVAjjVpZUN>v`~k!f+rPxd+tlTmxAL zwG>)@R5tAJ>~canTiU1-%312Xj7+{p2E%NJo~K|dQEj2(3pmJ!-5F?L)4ZqDjByj7 zM2{JKC>^)7o+(NRwB&u#09&9Is`FC`0)m*hqa~=~89410+fR8p@)Rapg*rj z!YDa|wB0i9?X(`b+kZ@dDKH|J-}68q)TGo zTAg%1YVhNx<#$`~6GJE!sFQx!*rr4Y?l#fK*3X=DG?{p?>zs~#S9t)tP14keXZcY; zB=0@}K~rxK{S1*iaOGa=-n|a2twRn2+Gd@~_LwY^eF3P37u`3$W;$t*LkoZll!RY( z*}U8Jr>WsFsOJoa;Rp38k7(9)Vf>|S5;PIItWq*qp+Y8{1W~$D_2GHLY}X5ZsWJdk zHrd!|^;U+9_!BXJ^WNIXaZJe5PC`a9HWF8ai+hx*ROwO9p^&c^NG`?t zU&39KGaE|NZLt9%u~w{m%W=;UygE`g2K3E@(vhT6+WSh|84-7t38nyTSl8r6Q#9~e zy%363tXxasIkHN{p%1#(+6&Tsk`kJrs8z;&tdNB@3DN4rUPutZ1uNY#y+EE?@+{ji z1RH%aEfA+AC$S3BSSP58W3prOFPH>D2ax4JI^QoQDq*@LPL-|)JIPwwcQrQ!L4g85 zk|<{jPTpU_xi(vq@NCB(F<}a~XsErn6TnguQe4Lt6v)^+Q%Sn2Op3{+IUIV#-?{Up zL|xVg(IOeTQk7E|wkJd5;QhLsRYi`QdY-m1NG&WEh~&A@e-~9c@Y3%gW#P1h*L6oM zjuI5Jf3z=F5!cUkW4-=R9g;Vy4>WmHztV=>W30NUEL{n#EL2EN5`MZS{?_mfX9eN;4ui=;O^Ifs(fkOWb9(zV8?S_Q!$Yq;^uDn8UC*H{H2wmb-YVjpsb^h z1^QeMTc^y6eGC;dN1o%n-q&l{`to?z?#FV8O_1h(@i;f&u=`+Fep;DS=k&jxB4bb7 z52#{sVvKm(f&go=0kEvr04x+X$|M>fgTG_3SXc~z#aA;h8z=yjZ`ZjB?_%2nJGs9Q`W(`)RN z5gI!!whp*eTo;Q{XzOUKsZ8m1Nx-7T;#F>l;j()+Mtx&F!JTg^)}Yx~KWF0Nj!678KjS?VrQnqD!TUm%MN6ta)?aF; zBXWGmui=VE>=nib+skYzVu>T^)NCkMcSJV7?E!%1@D5oyEbp-JFLAsS2`a))MA&8tN44bkhc*w1AU4tz>B9+XNYYZ{CnBpfXd?RFiu5J13$@ zI3~?48t|%w&s+5HZ4M4gO90Fui-}|s%Zic=eY?&l6S9}>%nYSK=o69!rhR4 zQbKV7X=%-?t5OITK**6UD@xv=_hr_<0>7?9uc=WV3q2x?cZ@tz8v}=;bn$xuk~Ib3 z9sSd{+aRdghu~U#Tm4nnhcw<;8T!f`VNm0G*RcS@@LknnPV4S8(Tp z5j@7Ui#?X+ur%?kf@DJ_7Wq?E4DVPB@W(Fl@Zbbit4y(OD9GM+9g7J7ZU}VV$RXo1 zV+xEZFs8tm0*^NZQvPD?NJkWbC&_tICVKAH(okYB>jE=-tl=r=Th7%j+-${N$>p`= zO5UvYpllOZD*4HBd#ZLNLSVmTltfQ>?+7K5@5bGFi<(%a4fH#0AS<(QKVTu5i$os@zYiv}HSIH!s-P5uyWZ4au z{s2xGGNvN)?RGZ3kEBvqw3MJqaZXse0w4w0VoyuLtZI7_kjCuvOt{P|FQ3+3JsXQ9 zTOP6Hj_NDraqR&Kz@zRVV^FVnYL&e%X=_rJv{)9r*P$R9=k9Q`5F!$uaWfEX&S-iRw>vx+-7>Q~lH+9|f9JdfH5(Zt=a8SLw;S zcMjg)O~RYD#h|FNX3FBkWRjo`7glS|n4Icu6vRx03+#YGgFiLI5`Y=hWS>%J0adrJ zw?-8;6a446Va^%e}l<0O`dq!fUvn3aN#0a7yr7jbXH(V~pBz(QOo1^4#uWIDP(W*4%+sCXl*v8jYCx4eyL#n( zt$|XCAtedyl-z5%T=I)Nmv~UphgO;XnDUJT6c&ei-tsPWVTI6B@w-y2W0?`)Ady47 z9}ABS6pBWQEk?p#6kkdE-St>zrPz$}!l&Ia`vzQAvhsc)2r?*gkP|^|4VOB~Sy3k5 zNOvA6W;I;$kE}$}rRi{WkNesC37m)9AsYqHhoW;^e0d+`*mcm`tH@9!IX9&+*59}X zmp)_&x$Pl~MuEsX>|x11mF#0l6Yce41u4rn_h1DB_pPYN00oO8PXGWQ07*naRGC6? zndMI@cL$$Z>`P2F;l>@DV~*J1Y^2hy|7qg%1Mq9qj>=wYvN|o9PAP3ha8T);LRw9s@Tq1vgD$0vJ1x6k8bSeEA;(`6Ji)t*$t^E$`OOdZQJG{6+e8jdi5 z%TGLPJb)?a81Y6c^aK1883ETKrYWG4c1T|cFtrp51z&Fx9GWZ=W~_1@%N2`+T9B40 zDAijpO&fEKvxpY8XjDJeJbnk)@|SyyXFXw4hrm>Fi8y?CAr>6cw=QaOpPXK9vy5xz zq{zE5!M-N(3_QwnEEMdiMS_hX`0rjj{$osmF$KmH7*pUoLjl$_t!s|uk+MGL`cBEs za;!Pr0;JdZG;(NVvGUpSY>KU^)Uz1e%f%&rm+aSxb4E|H>>wWs?Bx3_jae$v793iS zyw52L?`4b)A*U^^g}eMJF7pmQDVc)!D*2s-B?qvB1&BCh;T+0VTrqBUtfK*_;?yLm z(BpnQK&T7*N3AW#1F_C+oey`snb;_pH9nrDEcR;D#=&gTi+4sOdE$BJF|egd@)cn# zkP&4uflsjtu7pyuLTSkK%hHKA$O_r}0CcI?#9*R~fuvNIOdr3om=V*QatVDPmp_8O z?4rhE?Dbee{E)4xH`H0R%)7J11RZF~-+5bsucP2hsIrkJB_;&tZ{dDx8Mmb!D(EAyGw8g z?(PsEXkKo;ch5UN_m5q>R@K^7v&NWXe5Y6ZXUkp?>*{q>yP-Kj4v9xpw#IMzIg}yE zh4Ks$0Rb$vu0``uwnpi%+0;X;jksnjPsPA+M&o-U$bOG9G`e0@CUw1bNQAf^6XOe!MxTs(geT$E-)x2&Jx=|A+9sn)L{)e;#}h9{1AN~0 zpR}r(Vo-RVG?ly37m=Ld=aKY*sh$FY7+Gmuw?Ax~uw8W=%->G>!y8Q##r`v^sG`EL z3^K|=4yV&C4jQcw%rDv9eal&XU=<(W>mV$X9MJ2~Zk#mZHx-uvnhc|8r3eQrE^tX> z=bltykQHd9T=1WeXiJ5GcEf_hM^RJzo+~DJKs_oZ2L(x^)Sa(fe|HnYCwDUSbg>W* zjtKq^Sg7j5;3ZN2KsQV znt%y8vB-K@&C=@Yp(qu#JM8UnChih8!?MeW?XHH-Z7>n4U?e|=xD-UVbs#-ggIboM ztt8n_F%53c?D?T7O`PStjM9QFxsY=1@5f!>acC0H(DXPFS|d^A)0zHkxr^XG+`JJL7k zZ`6f&bdfj;9k}c>JJYIek3dxhk68Rpm z5zl03z=KcEW7R)ncx1J%^&86xTU`NK+@?MOk2T*gmd4f!W3(ljBB*)VX}#xJoT7m2 zzh;y^%07F|Dx}UQI}zfjf`c_PqTXfH049gxJ|T@pM11;C2s+EdIp#5r;^B+tUQ8)< z#>ko;R57h1RB|fO1Ae0h%Rb->LQEef5q+~$6FqS*#3diH0{EnJvCcqinOrYCEp1pX zp=0?|F_L}4gn2<7v3RNlT7pwM1w@w2Cuigy!bE3m{{1tRB#Y)pqtmp+ZW;$xl;h;;^YY=*Enr^ ztNmK);IB|!)(7#!4oNv)Y~CZ7V+Gg z>nmw>Bv0op!4r^~UYPc?86*sxA!OgV)K>)Tb_B=xf4(N7{ zK8`TL5#oqlRyq^nr^=c#;w(WCo(GpC^t$rbgXd}yhBV2L90vifUVTznQZkzi-%ZK} zm!Z^L(Z%udqC78W2Z|nN2fs)&9{TZL_YjN(C;m?-<^PmZ3UA?#(M@ro#cAa+&R{P; zX?$)}p{%Q?r}DPigB!1I+tzpTYPFuUDOGAIrK7X3ecB_-LJ!E>s9q|6T1*`W^igF| z;q74?6r<~-{tacf&HU@Rjwo~e;1@k zr2(}dnjWTCWi?5eAWRo&^TtYp z@>gS-W3`5|rez~vV~1=qHC6E+smo>T&!od-7>l(yxS#1##GqLwn%0O8reX*-iHz%V zal>y`wNjYo(8F6XRH{)b+V8A|13`Ya5EK@OC}AumUY+Gz(`1q%ojo8A_V`YW4k0n9 zhmc*bDUcxtW|26ci3?176}BJer+TvJxnj+lE4Q+W-IDZCpPK}xa&S;p2(W@$1Q`yg z#Wf26T5lpskCe*%c}(;TYWho$6hXR=MhG2M!HYe(nD*}K7$yw00?XEj5zFt&>-XI` z`V~p=LnXdULGyhi93d}rgxfRLqaehV8@+H%0FMsK3!T17c(+9b@%Ppvfn-ePNLyB_ z0_ZVI=@2R$OiU>x=&JH*1mn>!m~p@}t{K!nQXygKOIcP6A=GP$OVr3P)~kms@wFcj z-20?C?Hb!|{=duI%DnYm66f7Ew6`@WoXolA9VE!+hZ}5wCf?=V$~b7cUDuLI0ya@r z05xU%FJ(}udi;ONUq=3N?WB&wd=zCN{tlS_3V$Kx(%s)trLr~V>-m|9AwX_f_da1X zWsTmLY2wRNwzp-NO zXze+<472E0ASC=|REjacXU5UbSuD2wYMOvS7nDRF2a8N)jnaQOqD@&fNuHX?g5YlL z{yTzqq=Q9*pH;jkebYGAT@`*JOI%fNk5M_)-S~)WB5n38 zPTpqfnAXVZLK`~Klal_t=J?Ln+PcUN`VlwAdT6^-9YoyH_bu#n7N{LuN8sYFcW)%7 z^Qrz5tonCAbHPOn&{0vD5J}lx?uPi=Y;lASd|C|?@l>(5K{+fTaFFb)e`vG&U^w~) z`-i-@aDFVY4YLkZXb5Sb6@Q=8$zZVW4Eg=GMy52kmd=-kR%BL7_Dsm?xTeZnUPm6Dgt zwp9`8m{H8?neTP~yT1yN0Qgb$Nm)5DA0}?}nKdvAcsWi;Jl-oL5#~F*{|UkPP74~| z&?>(CptX{tfr}ATAv#T z_I8(nuHJ(#&3VYJMl!Np+TZlh)my#c{+!siGhQ#xdHidS(BEfjy4*aBa3aJQ>$;uv z^JC|K3+V#L9Pi(w(vG3ejlz&}#LWXG+JUZJ%OLzTTquFdLxUZV+;UF(cUPIzfa(@L zT|4DhL}ZidT*gXT)W6HAtfB0mhYjc@$l1RMV1^gb@%Kd@Sa%8i%LhCu@PXKAw)THr z#Hj)g`JMiCPj{}hMzU~`keuy}L?0rl5=GDIHPk8vr6ib(VyjWI-+I1v4|)ncw-GR1 zJVqx_9@@lGm&+4@1tWGqweyfocZqg_}mJ0zj zz-v{#u}*5GjkR$FrNc>c>Kbg+RC69Ku$rYJMXyE!!F&OiE)fm^w0AH2`)TcAVI$xI_~%&{4mt!fZ9g~&Y6cWGF0hd zJpcYJZn)woNp%A!RIz z=mEr3BF8+`q<^ihxG=|}I!K-5`K2OVvTUo!Tf(K>`H|MtAP#Lo=)1oL=91}<7V50& zz^!9mUrm0RmSMs{&r$w|Nr26?VV5&@UrMw7N~Q&3b{?EWcsC^fj0|ZSbqmjEaDX;3 z#J;*rOy)ZP9^6pOKc=)$`az#r+4z1yYXH?YQQ27HIer&C(00N^dBoX4E?}rXAdMI@ zD71Wenx08nj;-vH{JSyC)c)H<10lkf!=s)-ulAy=NQY*0xVAIU!;cza5f_6M3?%Xr z%pJb(H+GJDHq81H4{nMMNIR=B2@)QnZ*T=EVPY)$A%#q@+EPzW7A87{zj8qL63wd1 zKVnpY!-!B|jjIUG_Gl{ydMLt+GQxl9d}MmhMx@z55RvHzpKH`I)89*9@X6UJp*UFE z9J^fQF6-n~W0?=S%EpjIUT$DhQipK_;a0;TvyC@|W~A%nSYQb~8hmLQfDxTx7mKq$ z^PeJZ97$+Jh)$LLyR1obNJND7ZfUct0Yk@dQeRn_<`r&9c0C zjm|zJUY%t%3p-wY)t8})###CKMdMUr&9r#Z!{dFHEecm-oix&FK?m43b(6R zG)oNIabSLv7Vf^qfC~g(0@K*^i>~;<+ME2{@Bk5#rzyC?H9n~gtsz4u6% zN}WSVj`yS?6#db!w*pkIxhMZv5z(+(O08V@!2YNevjYnKf`QU}JzF#ER{Pld$?Dy_ zVxRkvFhI%}0af%|&`aODWxwpK&OsAgg}K(aTc~EH;IG*7V0_`g)%YqR^uq-jZ+8<)=#g|*91!GuqXjFh`y(ER+^a3e` zmHzNg-eOhic>IUQ7t~f|OdOi18qK6F^6kX6=LKm(UXs3*LIcZ-vk)QBp6=u^qDuc$vXAEqH>I5-PlRX!u zP23^J(6@>|HF*nu-@8Ne-wy$i%Xf;H!oso+zO%)ffd?6GT-u(H)Zoa_BwNI1ZG26nFRl$$<%l)Os?Xjxoz8`U^JJ-rx5eX7^-07Q%qRdApPC?{emh>X z`@sMMA0+~7nVw+sH--6-tr909%)xg3Xn=%4{M*;v;`l+=WHh~C0)l^saZqj~1dSc` zk&bPnKTrzC7E5|HF(*Nh1tY1oFXA#vd!XckQ&P(ep~3W;?J4>&`Kf;7$PQQq)DEd@ z0VpZ9s}o$P-=?4ffUojkB4%h4Q&3nd?}wr81%m!c)6>Q-2ro-G9iR}MZP^d%lyos6u?Df^$6c#?PF|(=eD0Wd>TQM=`ou} z7S}@3^tfqmKK|J2w6(naMF}sFL0uN5Gd525>mEI^2&&@jiZoZ|Uvf#!`m4m2aR|-B z8NB3Gt!Ke^{Ynid9w^Z6YQVn4^7X2gCvO2$86(lA>EJOfttJdwCU(!H`Jr(gm`^om z;R6I<;k(WhzoJD!f^r*BU+1$oYQb$p-pKH*f*83jT6tI7p%Z_{EtrS*jeyx-cjMl zs%R_1+EF2v*r2~iK_U=c=pR_{IaM^@`L_jBAu6s?FRW`-%qLTUo~X=*-RFF!tj8A& z;qu68miS_l%aV7M9Vk@8*uXsbIlJjJvBN8VZVP)o0YqReDhi&fLO`BlGQW_?xacrV zAk&8%$x<~jrnVyg{0g)mqiW-(Alp5BA{l$|6xfoEmI4{2%C_{Go<*%uFXd3RHoGJ; zQHI)WaPJX;ko3QXa&ctTU|(%0w?c+(>LZ8>g<1RrRNXYv?(sg83`Wf#-_u ztH5DuG>dFwy)77@Uh#8VY4os-?!Rk(>(2&-hizoE^rFhebl?V~B)m{eR)lDjXpP9S zlWh@^f+v}k7^(Q%!%LhlLrv-*efRe1cB|fH`X?OJ_w+Vvpp!mmz#jr?)s4OP;x_#O)PHMW$y3o& zj>noyIV$+<$cwHWKU7xDGaeIR1D9$WzY0c{?rXl0zb2MhI)_s98#kyf3Wgt>`A`LM zd(u(3JaWL$bIDZE0c+^?*+rjBFrO7hUvmib0>W1BIxufH0~mpXfLorVpcU9 z_+|$=aVz8HvvbVa*+Qsxrx}gJ6Fc3-EAU*eX9sk9{pC-bKL0%>sy)%Zbj^4N!1`2C zn`JBSU_wr9=kROfGtR^;!E^8UMoS2HQnD7NP^F>RFl{#D?sz0kS(DpVEp_hTyy{qt zj<)Jeevo!{ctSUJRG**y$R6ss0Y3kpF)CmMWe2|&#l=U7D7_R6tW{{@^{EwCZ&Aj< z+RSXGc7+aF+Z8$`RPf7;103|(5+)mA9WLd611q+Z0xBFEe@`s?K{+H za!#@plO5bV)>)>N`6Lc$jb(=y*SanuSHL;?>SWe0WGypuq7&l&rIXBp&up+-rj+XC?OtG|%|y(Tu^E8#=df z^_@uhl94`TgSl$E6bg~DHfn}u<(Q1xeds6+zl{pwiddzOTQHgk!IPTY5u*Qd>`Cj| ze{1Z7a6ExcANsHlE1De;@ysRog7mLIulz$LH;yfp`Qu?U7OW1A^vUi?M>`#SDMHR3_F_gW=G#8 zY6Yzd>8AZ|6Q7byEv~XLc+`=32j@MXI5S@=98A0LX=H6D`XNz-dXo=IRsTz?baB<` zuKpv;Mu-UKYF6cY1_T>Fb4 zo-hSNsXW!{D^9zvc1Ux6EA0*UeZy%#K=Z9;gn_a0XKFH~VBB|@qX-3!dR<)_*h6Pf zgSPx7p8|JT)xR5Q@;i3AJBA`=;9x6!l8_VK70ygfvh<_Do(pj+lXGQ(PQcwP*155u zB!Z#UUBqQn69+Zl6#WCQoA#!9Q!lTc%ZI_%kv<#R&rNsn(O`=+$y`n0V#4>8oGH zvj0$0vIy+AfT zY|u?m6Q8$e{GnDFse`Y0-_mM3raRt@Q5Qk4h|j}`Svb!rkDiW zZ_h$KV3q)vj$1OzT}VAyF;Y{DQ|?(ZElYCyY+{ns&PY#o6v}!#rcvUVK`ic0zYPlp zjyI*Av3Hb6GMyWwbCFn8t&&`i!2M#JE zcqn#$SKapATk@IrRtVvnjlMZEo-bSj8=$N?&Tx6`#U}LWE}LnnrXHO0=hQ8aSukr! z0VK}C51nfcO?NBJl4F(#Fe<8$j%wXY&d5UxV#Vml!zQC!2gjfaLQ%pWYN#HNB_I^R zf>-3p2j^w(n3&>I-se%|^3B{Lhw?}0%Kvv4fQ%zmgGz3=(>3F|D}WL_wuod%Z4!5U zOdAYULhD|9(84h{ylePu5Q3~m?^p*1UyiO44+mTBVG^-!;FV0QPc3N>rv!!KlVN2f z-rm8(%FBdg;G-x}Par%EbvQsvF@90#wvvX&c;(9XiDzhW1qoe;8$l#Y(Xp9HxdoV_ zQMRU4$aKlerLzbC57opxDmeGUnUh8!#@Lv-!)&dM#Nzu#GFfeSf)f(Vw+&5}_)i6I z1I+&2+hFOx8quXm|ClVD&2Ng73Pc8SJ87_nOQJ9zkZ&gY?a*suRV=J{7QmN?h6W!2 z$d=``ls)_Ac3`562^aA*ljFi zj%k=O*b29}tNno*4;KCLbIGaIkg(j9Po>|QBiobQ3M_N=xHY4&or*ce9ayrHFpiv| zaL-Zg;q4CxAX(5Q z1EWr&Q|k9kIv}UKZ`zv6@=&|WU>^i96$%aesL*7uUaw29RQ|9YH3rLoUa@j~gKhT~ zQQ|ruH!CyFF0Nk2Vl6~W;fkX--LQ8PB@gZ!FG+hA@5bvz*;Hjclryc7n`}*;3MeC_ z3g0c~%gHf8tjg(1Fp4H^6CL?FX6T~S%2wpJC4VkRxAYm|gh zw{ci2$?i8Il%k#`Nl8a~B|FQ<0y9-2oNqa~aCLg(_z}1i6Ala^^j7XNbjO}<2Ni|8 zlmbom$otyYEI;~m3BIS5>;!UHAn|(LnqN~q##DYIzp!yChv=M!ErCrG``1xbMYvCb z*Pib)TtX~5-jM!;{K{CHd-bQX!^(r&W*Ld3O!QxfB)$ggwcE^ z6v$`SUDe7sXqA+>>ndO+yX{=Gfj?1HT?p+4NOD+Ac6v}To>#h7HwJs$rrZR~2~Wq> zk_2YIPSM?v0Zjk&jPxbzNMQ<3IKzSfHw_j-E%&hRs7h?eMV#CFs6S7myw z%%E9Ym-prvq1d>tZpi?Sk04n5Sx8%iX}X(eZo+K<=Wel(C` zG1s*$qx?3=b#Lrfu+}Jg*>!9srcT*VP$LKA{1E)VcGJHgZJVaJ{l`wuq+QR-Q5=9@ zY1cp&=OVo>+;ZNDbEiz}tG8GY}qxjT>i1clb{C3yC?9+Wkem5w9$kYGFO z4U+W^#JgcXWK~Y{qWi!B%v8#Yqja_a>I`t*z>* zv07So$}+ccKZV zBeax~SoQTZ7uoR}67}fFN;nh_4~XeNr);(vO(^zaz*FO49{dU>T_`#@&4x&E%%`0# z967k@XkPfLSW0+*KmGw3WO}+qRJhEb<`8LZ=2+6T1pZ0p`eQWHNJ%dAA=P+KK?E*U zDvh;gVj`nSl`}*W|DohY>1*z3WF_t55H_lcc-V#k)U0CEh89-%NqZ57$BQhzUFinBT>VQT6fd+C zOylb?p?Lrj$7*CMR*mSQ*4%)Is>u0q9c0Axex@;(g;wB?R@uFp5dj*>AF?VhoqU=YIA4qy>UhaaF z$%B_PJQ2(4fZDKLuyH>BV)2YM%kb=P*Dg(bXu!z=8dE>fnyu(;Ka2fx zDfu5eP)M4+$#t=oDMB`)UKZD_G{^F|`89Yna zMuG*)jB_f)=rA?&Tv}mCR81IgqkhInb99)mEsHIC30gdyl5ksP@4_VisGUHCB}!N>+vJWWpy@^hy%GMKEG+Tp17yCHcyEdhgkd z%g-bsb%M!a3+v?`0{wycO}&+G>FQH6Os)?7@3@3wsin_v-$giF>W15$MgG=@ zFm+O_-Yxzm_ug{hXFNv}?5I=d&G$M-Jk7UZ4;p`J32ydw?tEBQ{lOlvivnD5EP;GH zvk^u5^IY8qZoVb+;G@lh(|dOVr)7ZbL}nH;Bi8@PT9A7q|K>VSYdu}jpLxDZo}bsS zw;m|T9c8!IOV(Y*lbl9rZwlE5Q`SHpeyGD>XQN8kiWIgrI?@4-e^}tH3qw+6EXmq`>`e6-5CP`5GJD5ey2X1pD5Xhk7Bc2T%!u z!e5N)Jh=}UnH-ClFLn8D0oo=ia21P3=^2a08<240K};`jXXsAoBM39iMQT@Q1gxLB zXpb(dN+pd%M%$ooQvveU2f+g}g^aAEgGme0Bq;$DwfwI6-4+{!1%t=xfRb8oY**_! zjlj5P_%LaNMoL^xilzLNP)pY}rQ5chxYr1j^8=enN~gU zs&mz6Yr3omx=15xy3-f5N1in&;;T0oA^64RHcrqT5j#|bT9b0HduAeXW6ST0ooP`& zyP_41!9lKJa7z8~21spt&>9XpfG$P3YlV(VIsvBX5l~%v}IFS-;t~}#FF1dj#W0m3`F3zLe?o*xuKXm#`J}61ef)EVr z1`51?jso@%`9|--DUg>84o9`aI-lwj{XoUfXc6}k3}w`2f$S91FAZ5PVgYVra#B!T zTOeycJN62!EsN}!Q+Z+4Wpbt<%lABdW!P_al1e|8s3^3Ikt6WBtG57U4aboPkr})t zTq}f%*`7L}X)#7#VQah_{5<=SMPYvr%)!9s`{#dD*q&$_?eohY!F+v7!H%DM?rSe9 zv)kk*&tBcRiC6yRer*%J{MXtcEu0@Ec(p1$0>YJ<&E->?)@gTih4%p!p@OdXPBQk- z88n>`uQGb{V0(JK=!!_5w2bW^9B_m8tZ#rZwZfF)MXlx1qI2Y&@Dv||9YI_^OJy!* z=}VK6-iztX!!C+UkbLa*i7HXQh;Q?{N%oA!nf>(OUzk3q*{1a!73^8t(Z6@jYuu05)VeTf0&wg!(?BPmDI6BGAR?1 z$}CP?HnFzNs*o%?L{rkQ`(K!*q6!^K=okH` zwVb3Prcq(Lr=GRC2~NvEKJ1t8>nFT5`ch^+BxV>l74s;wqjnR+)L!H-*T zYj;g7_iq|sHJ^-tNNOQk&6OciRF0fB#q@C1Xne$ex;-bH3!KmKlSd8#Z` zmJ}*%bT&3Ut^Qqq>fXNe-CAFnG%x;Q_>_JyhNGlU*lzO93>|c-s15?8aEv7Rq2I%J z-oqA`z&~eSeShB;@vT3c#$P!@c-O0X(ILS&dN4AbaN|iO>%8)v|FM*=9{Ppb`HE(M zbY(?aAUT$CQl8DRpUFOBnCdkVkA7(G^s~WPx@3BI(IIt^at`#mW8XTF&)eL3hM=am z=IDQHyqJb->t#b9ngwfx{Y_!#o)#JhngmVhpAkd6q8p6UYL1eNzTF6nmA8%L8)v%H zKJU>PjW}$izCGec#4?evHFo<6sMp__8z4X~-yIPxQ2p#2k0%Tjud`(Kt4UiLz41WW zbqJ{L1R_4OW+EpTINx`v&+)XUiL&#AEV=$2jHsX`3WsgzX$-<*r+Z%Hs(ScJ2pnZW zaUQSOZ&?imYO{r?82tLfx;*e4Ddjk-I>0S4<!u+A+X-se(&c4>JzdYBhjjquD5k*JFvF zq&tZHDIdf>vptl977=$2TRTF?sU4(#z~5@WbZANZBvkHnWaZskoH1YTAW6Nw$wg3p zA=4xKV{{8!!13@r)aP15ccpD}V<3=3yP$R-Zs=TCp(8E$Z#M;oUr*x@;ekKQC&O`I zsBFe6KG4}n_sJVl@I;)pEHkd~YkZyl8}%-|nUQs5SUUH-@F65$uOkU%%J&eyLa zyfPJS)^zs$e#(YgZeQ%qiD~pmO7$m{libfHKP3N>)XX{|h>;9v*{+BjufFRH2~P;L z&6KIhRVLC{ysT?P*e{eRU*5SO9K5%WlBX$B9-P&Qy{`Di4Li0{=y_U&!1As^s*j0%LPxg=uG-O zMNoD-a4%N=7Pm9Q)HNYNsY7>B`3WUHH|SUZg(!F>@bQuxu;YA10PEg{(YfmWF_QQX z4fX1ld+sCpRAeL^{(8d?-sjJk3#`!1V1VQSae_6s9gAcV2i%>lafEaEEGOLvo4;9uf7+1WT@TAA0M(f+wf{toj?9aKee1%)ukHc$? z|K2yKVr`%CAo<;x)1$f#zl6|+;A}ZcvPwm;mf9mh5+0f%87o2t+r9#^99irWD){|LD zB-d)P8!v4IMyP_HGH#M34U-wc2DcGudv977_Px4~DFcq|uBv98)T)RkY)`hddr$jA zZo}6o$%Y5CRAA>xIDW*8CyvVS36g?BgICriJT1h(QV}`NR~b}NP9dHPZXykEF*?aM z95jHW{UDWt9a@5*q^wP>P`?PmSR5NDq`{EtYXR&9C}a*YgL9!aKC=y_`5lq4`EI(< z%9c3`Yf|Hj6A^T~eSWSKTta+#)#~i4aucV|8ngzG){y=2m?fX7hr&7B-gNvXfFIrb zu+bH53aLeq)tE*sZ`-kDR9&ie=;gB>tn7|*LQD-NqTx`y9?uzVF`v~l35hT4y!J>> zpbBL}DnFgdWshiAcm|(C;&F{MN)gYp9wc`YYiEMqr8>I1vkS`ztIVwdVoh**61(z? z^%DwNI8rKGh%J<`V>cu7g1BB&Zw7A_0|op;>t4*P98LOgua5o(peES#(5R~`XzqUdi%B=PIRL}Cc&zP(Mm7e>&6qM zBbMVW2U}kd%Edf4OoO|EuYUhIU9WTgoLE$Hz&v1ZV8J(sVX?sHlZcdP9ir9+{6M4D zX3K45TTN`U{23WHLuBm}6S!^@ro=5r{Z9XMrl^XevvY3zuE#7e5yR%U*|0Tl+Nv&pod1pB=&% zE^&JAKRF(biY}vX1$D+QUpyqFh8W-C|4@^VKj_d+^J%|rcxixNE1%{T`?wwi?kyf7 zAwJl8>_Mj1R8#Pzd?sDr-hPrHYa%|wpgc3UWn6_&o4%P=V>;cebs%~RQ+58nz+#QR zHqH4{u5}>DuDSL6tIS&TF>HM?O8aY=v{T%?JS@VMrtDIJ1BjGB~Lpv3hMMS`(DT z3{6zVfbxV{TqLS$7!EonBO$qVSU+Y;DI%fPcEZrWk?D~)ILd)ptQ z>k(QsH$7~4jf`6}18F%*>Qp)o5k8j!M@P=;G5HGMY~F(x7jz^zT^s^a^R5KIs=m*~ z7ug?!MYq3ZD%X;8M-N#P#4Mx5Iuy-PQL%afRD%OakZNX#J}(SaIu{5{ULN-TrrJ6h zw@6NeZ;FoF9H_@1>WkyQO8(v5c*TNJQf7awcqSA*K8KrklgnNhMq>k^s!7&!8fmCjv{TjGxJk1aEL| zxZATlz8Ahca;Wg0exU^$2sSSMIeDG&=&T|EQ)n|Ey!-P{YNTRP3K4+W8pm6b8OHEF zX1jbJq&Mdqw3B^7u*|PJxAI@&st47LM7f)e>f4*-)BH!&KHk88ro)Wiv|%h`2Ngd{ ze=3L|RnXxLF2mOhck_*~8xDMWo}-F>rgUc%r$ijp!081L$rgypQgYloPH~S)_2}_= zvWR}6!!*KL&faG{B!pq9*L>RbPP#`;g~@ZFkmp2BX}i8{V?grKF{Lv_vk1m~VHhpD z8swblzpq3%B>HK5A*zjWHQ27l$#j0YW!)j1{HQrzJFzhCl+4^HC90jD*3wV?q|TjR zjF!2Ssm|Uav7HHFDz}4KLt)lxg}(HXG;}Md$E?Jd{aVGU=oLt!)ypi%Uap#ZA-Z(c zeIaR8rAsy`#O%9d{{Ho2pgoYHruE|WT46+@rT?tna?XUAJYW`ooTx~sX7x7yuO&PD zq2W>%d%~!F+;a96(Ru+`f8tM(kyh?fU8j7nKOMqWW8{~o=c(QYq6l$a!Jk!+sl)|` zuYzWz$EDi>uMp(V7Ibc`xd$wHS3}H7^%Dl#?Rd>8b;~O|_>6z{y1s{26X1stnwiG< z7aLM#5j%zIz{*y_Y};%rJ%$c-;6}x0V`lsK&oKEv<^HQpdRo&U#IQ_p^t~ZXg;Jhv zw5lw8+)5dn)Ehr<-!Hd;>iItOlP>o~F=z_}x{7mM6R(Iv^?kCeRkfsxPiVL1U8-2B zdpGil`-0JzlY?So;12u+PchC7do<~%H3|zAZ$0SbcnaWoc%AxPYp}7dU-#z-Hx}^Z zQ5ewrX$XA9JRYKCXlWU(N|@ZW~qsOd{$m^RH%#u-z~;l z6}Buk69~}9>|e&kJxt46eW!k%o&8wdas#J%c{XGJW(!`(Y!MBb;B@-_)O3)`wdX2x z6Gt1<$I;8IB_hI)bj(J`B(yoROsjW4&qCtbJ(ta_RVcaiI?9ZwGjFvjx8UnYhyr3hZ4%I{@&pge=>gA=X?S)pfm!6gcArwLp z<2A}xnU=#=@7_-1o6jGLw*IPuTGkB0-LyN}OFPEM`9r}^VgHLhr-*?XTnaUJu#NDhe;HNv!rI6^Bd zI>VNT_Fvl>Cv1%-@oDL$(}z-mRqq@Nd!_S7BYhJm`2t-SX;>;+>wPj^38@b`Zy1YM zf@ISVKlMKj$jqXK?XiUm@bo#4;7sfUD?P&3^wNeo+X+{8L{&yT8~$IW+iv6J{~rM*DrS!j?`P|Imy6F-h1~bvV{n zEY$9I>a^O3gL(?inQY)>m0ThD1k_c*@@Ql6Z_o4bqSqt@JLkMcRYUkEkCElX|vdE*7*3ni)jZh0X$215Y<*p67u#@3ijKfW3l3kNa0{WPwSZmjjH zPNnp87mIs(RIy+EckA6Kb7=VGQKPr?a@>6vyG{nFO6RV$E~`!33bg2jB2iXPK4rp< zG(~&!{IySC4@cj>;cVJuMjYw4LI<)lar|v+Aj67Z5DAhtkgp~4n_4W#!=#eRb>xrS ze?Br47F$K4YrN&*R>6Sjt+epZRHapNGyDUO-H&Q)u@l!=MFD=ULTl=Zo`4Z@E!cdC znB+lUa}jk^9F_#@5$EI*#&4*SRf!GLSi8T(Bm8@0~;~FMeT45MRjhNA7x%$UC zgtz0?GIVG_HuMp(Xe_zw9@FRB`WgA?AZ_%ivVjN0$To$T=g`$W80_c9e{#!F%H>9vO6|r``v9w&^!Q zZy3?Lhv;QYZeyP zwhb`!AE^_mD~XN=g8j4?mbyxt!0^Yz9)AC6T8^|n0u{ia+2C5Cp!4I)D{Uw>ACKs_ zI&5V|#eyRj2(6A<=F&umipq_U7RZ6Qx?$6&mx-cg2y_~m(o3};6mB%xg}Xi9c+NIr zNObod6Ia*_LXMw)pa8T_=Sh`>gw?OoX5LP( z?G$xZn#3XS4dQsw8FKwt5jprE7;T79Z|t80-pRnW+K0B|HcBZAd|4m$G^IX_gEFM6 zUFgX*{iHuA`#r^7slFeR>z~h!1I?IdJ<;ZIu5}d& zIHY=-qEKX4Kyof@fZ_Lm&%B5vNDP#F>gi1^=HMcYRkucU&i&5jg-uVmvN-9C_*F!S z31!r;LEI_S_758%Ei=>OKEY7%TPd7r!&oJ(!oLK?a`??KVg`=9v|N~gIAce5n%$t< z{{ezPeZPx&OrRi{&`AZ5EhAj|Z1GELA2Ly=^v1a*Yuzj5D6&zT0BhtDGsk_a5n$dt z+ZzQ}Kx0p$xNI7XTMGS)E4>_O(5H;bDn*@1jma+AB%#2~&+pu`DdpIM;F3oVxclGg z_ud__N;IvppSFmsV4!8}TpcTtQh(Py$`Zw=`lhUUw#L-nV$~0Le%~jm@9VmpDF@4q zq%|rwG|uvGmm&Kb13xt-eO)WrLf>zSC@7&qG-zeP>y;bTfBOxAC*-9`PrXR}ydR%+ zZBMdFZXSb^gsLa2)7SQWo@Y#q;cQ6H7ig0hb7Nd!DIjz_$>k);90~C>8L#Y!xF<+X zic1U^VvT{(LRId51mr@ZJ#CzXNS!z+&gd`w-hGSR*lprAD_JkQ0C~-_En3UI@$AHz z1ZEOAnFJK;#~NQ52xsE@dnEy_v4xomH|f)Fk*xTHK*;^Cu(0NAlMa!wcw_k?UJ3YM zRG!!8{VTQ#BZxe(gX+NQ_2nfN09w%ek&1UA`lxgaUp#}QH` zMLfJu5lBu%k!4d%6lH>$iLAwag?IVgE{RH3q5Y|1-4~gP?+U$fy}V?NUQ*s@*yPQy zVPJH_n#dKx)3TCzyOi1>M%l{Q()s+fGF2SyK0tILf>&AOiK*+FW1cKs3~R<#R`^p9E5B!>WChuJTf*=3*xk9 z&0G+w*pncvQv2hP;Y=Ds?R84t|t z^R^VrRF0o&d=SIudb9u7n8mSVHITO)o0U+Zce^b)mJIvJxvXapi=$-UQE^6qo~=2S zH~YH?XKq4lLgo3RC#XGPE5P3?Uu4#2&xxFOYR^0+wowH&&)HAgj@$ativYo`9|{PzqH(@$pV?ZOwPtlEa)(&+!3Unx|i0 z{Aw0i^pquk?5&3VNxs{-c%0r{^XyF9EpYdwZZNxOCV`m*o|FWHIuq1BsT<5L`eK)W z*IC1Hdma^5N}QDBz&4b!Okp3gB}dR-7+LTl??Et7;mRabv2J4_(m9Zqgc|xxk0I7& zHm6r=a%ERex{w}E6+%KegqB(NWUcbDE5)KPlSx%!8gGpgzu?XXZsQy*L6Eno7nY>H z9Nr z#yu5lrOz@b+4ymmQm~K2OxPDL6!#GF#%-kpV}gZA0;EPEO=|dEU>g>igSbqHSXaOr!pY8AK-(M(mLJE(PV31OECTpQk`P)Vktvc@0G88oA|jF`t;$)* zLsW%ls{yeZRV+-_DPwgkI~v+LzzT66ERJ$!U(}J`8A;%KcU2H^&|0e6+^dIl;u3 zBsKXxpQXFz{4-emn9xHG8V8)PBGLs9?rrYldY1Z;3De5eb2(=?>kj0H$#{Yw<}+*D z_XMs|pw~UMX>Z(zagLmE?>icDUI-V2<3YMx_;VB3x)75-Sv57MYhJN#P8Q@G|NgzO z(P+)inoybKJ&TjA@w~}zax+#&Bl=H{x14;`*F^g5y2^`qFMP>u8DHwIQ@_tZ-7*C= zJ8dR`Gb@3Wu_u*csMuF)_Ik!iz*8{mnAfrjwy27Ny%bUd#!WI|PblX0nD4R7h!72n zi;+*b!LNz+Q`^vxtU-jSs9GGu6H1s{tU%8P3*jag!54CCTh00lR%08ZSW8yUff;j~ zqIle~SdWirV|(zr*P4jrLppoH&KO>`dDASd30mX90Yq2Df zUP9hrvHUv}gk)u4Mkg&>9pw*}q4kaP3Lgpg#2aiPr8COVB!}R8?z}+UGvP_ebBuu~ z*UH#BFtWiKISN}Cm)K&*HaJC~Dnv$YmkX+>mMsa^hFBN?#P|#W^BAzV9v7$aki=hZ zcaaH0Foa}qOI8my%rqb~C_{^keK3I=4IiMIS6KomL#0Ajz*>UWVI&EcxDkbu1(^N# z`gE2Nm1g)SA`m}|#EJ9)hAVL2&liK{GXbf78>~@w0~6WeotB2mKqc$L60c&o1^#<7 zYWa*YAiYI}PEmX16yYhiBNKwGw`7~lJHeCzo_{kz12~Uu*N4cAgu$e_H29E2)ennQ zd>24e->`*5Itrby9+GYC_VJ68((>4o8hl{kSt24%LZOtF3~1yX$JBYVJ(3N%57nKs z^Y-%UkBfjzwQp|;>0QVww#mm$s0BhZYhxw+5GgCLnv>i>0PxA>9l*cuCsIaex-zlF zjg>)MWK~((q$N;i&Z>GGs&Al#K(Qbm<#D7z%sYN#emQ|DG+Ss}LoPu3=-o@@v>rQj$gO0FVOjMG#eSh;}4ir=#8@i*CV z2Fn%aCg8{Vb5@Wg?KhXohQ81C8z&E%B*q6FURJx&b-1r%Z3HBu=2g|x zV^r3=v?Th;m8GaQ(C*7|iiffZDPuy5%fpVt zY(U|*NlatCRxCKm)M{dLUmZQSCLvcM-VsN?RH1uDs-m*A#K&S&=r~J)!`p zNKuj`0gZS<{avnJ)8I=TA;CDnvG#p2aWPQm1u-bl<75p6jwTjqO%Yh_%9Hoy`o%!r zbbp=z)_JfdA^}fzLLcbefN1FgbOUfiKx*{T`un=FAl0+_n3KiIQ-H1RKb~WDp^Gm5s0WqC5p%nV^Sqh?zaFonj;;MT{^BeS;y*SLJ@;r z8kW$w;D1azI*E;~$LhnDXN@(xV2Z+u!~2%36fIE7D27Za#aX7RBSSK_VIx5kKO(NIa5W1C=aAY4s^q zly`w~xY$@->}l+s12M&Ia%v7(ZaHV?%_K0B!0AhXxDZW3V5P)Rr+=5(6<^E}5FQdS z@tWwkB?DA>_~>`7V7BP!)4z?I@@Av}BuWZR-04iHlp7%1vH zkfZE%14vK)1+$~Ud;@5|AXwjyFf9e`hQfAk(n zWocmWm{75ARAzNc5-8#+20vy~EGty)>g+~0f%5s8)I!5DEhhDwEQ+J6o^GA(I`L@= zF!3sxo~$jh*k=C1$!X1yMj=7H%9R$FgnFt|7jM#&&0gM%$zC{mPzrc08dHzEFZg9* zIrKLQm{v#zk2mARTI+R9gOKx)S(H~3VOlYdW0%g&cgMcwdrPJa>=;A5nJaj<2CtBG zx`aZ+azYc?P+Pc<2%Kw-OOh(nT&SUN6D%TB98_t)bKfn&`Z(ukxES{Jo+eb)Ppg4@ zGBpxTOzYO{tiolJNsD)qsfwA?gfGh#?y_N;hivAAtacEgVuD5+Wp@TQNA}HZA6eV< znmzp!hoMyYOJ{j?vGz4D|dm-N4Zc)KM`dZ?S~oe4;&4=#`*P;_v& zk?NGza<#7;Pwj36gZsevvIgyRUgvFE?@UJWskMa)w>~lv&SSlVgvSw*Y|Li{B&^p* z7w9+3d=i_9)V>F2=G z0%=GOAsow%r%bd&njjK!9r+Wqj}w+0;S(n(6LwIpgrlJlHL0=1C*1Mk{J9_z;Zf(c z3Vf(umkM|-ZC-=HK&&YNPaQ54r(w}z?NfYpR>9A=yWFa9lgE7!#jwMFB7Qzd9c6_y zCB5*)C}81!aEHJ@tMOin=Tc^6@JsS(7eo|^QBu;qb3E>O%s!AJKkN@h(d0#j_ed&p zz3yw#)~j&775xqk!aE4}NWy&-Qa~6J&jO?31*7&zT#}#iCn`W9zyW{}^F%TQA`F6h z;9TE%a1VA%o2_hnfKFA;u?|I!`q&qrH-cO>m;ioRJzU`)+>aKS6USJuO&=@k^CUzG zIL&`aDkM+=-ch(!j(TKzl369C-FXLNEZn`GR zd=%eS$tB*>M)QX%sg6I8DOsrO@}qYSh;kpS*b)9N06AS&_lF{ABZ*!PsZA)G6GK`g zDQ1#3Sv0l3Pgn)i*{PG$SK8v1`k9X8jf7<}iCZSpJ|xJ*ZH#VKZ8&+Av+@xKWuP1+ zO4%E6;Ug}}pk7_0CO26laxg)%<<7=jkk4e|p$ukr!+6qMneL4m{L)Ot_`!=zv!lnE zfIAY0OyRznlS6L4;J84Bwa)c8@f>VRNuT9!F-wf+?9oD1W4QmVCmLfs6q7WBiqEt@ z4HmrA_~fLE#coBsSFVa!INTP|9I3t;Gns^nK5GJKk}5Hah%jy0N^}-(09oGZqgAiz zGLNLlcXJ<|RQ%M~?v+Es_*TrG<>`An>5Rx>Ox9k|-1g%Jh{>I3>tT-W$WihrmyJKv z%ZF~ruXVr0d-RFFa?QCBcUVbJL=xjS+Wv3=utSHuR~GeOi2gAjzd@$tM!XOf*yS=R z(xo#lLcucwb<1s?*?BVwJaq|>;ZLvJMD?lPadw98Lk1cf_3<={RBBDQkji>Fs#DGTQ9sq#4L{#6R9RcuZI)*<%fx zi@1JrCn%{ETjLmq2$AJ_E579B(n~IXWjzvLj30`Wl-rfu06Dt@wFR$U|qN=SW$ud zUs|mWFSG*@=srJ>OY1UCR3t^=H3N0aY?#?;GYOm-2^@_Kn@XEbrp?*w87P6y`efLk z^{zY_jGO$Y6E4)sk!z-ay+B`r9-psxTA*YcW7?J{NvvriCTYczg(@vYkQ8lGqofqv z&%}emfYU^rln{+|1aF7iE#yblwd)f zw|qY{)7uo5sk-*=eO2zB44!P1_aIOGJc-DdeJyg`6Ysz#qS2|QfnQmXdJC1^1MLb} z!)qY5?kgfn$jtFmX_?ATCq!^rMq-y5{48J9skcB?@`=8Et4=4AK|W37!-GH1re8#v zoUt$3WZtBS6FjKsB(_p5+NM->iu{i4;%tm%nRCCls}}vctcKOU`J3!5SX7QNc;uqx z8LrZtbFO0L=zG#`WWpAaR!6SUV{6S1zcQiImgYI&R z&}%Yhs!4QSAYCg>p_CJ($BlMd8^>sq!$G1@+Az)ztT-Go zRtxe!U$%v6<3^FGW3#<*PSGm6+O3zpr9Jo~A8!BZ>o>RgPv6___^)f)rLW!5wk)$f zPkGw>BkkVbxwozP+N;}+=bZBFr`-v=e*LocmcP8QefXv;+U6%&`llxMJ?+jLuWC1a z*)O&~_|EN5vIJ-Dva?Ewk?uuHqn)0$?iENbdIw>O!t3Ai!cew&;<6SIRK!aG1z(!JJ+k4~K zu~5K;Tu)7q#B=DEGATmdFqPQXEClLZD1?%i?9 z63)|0<1XJw0@tGKMbdbN0aCL61UU9L9R;bn4WM+iD)mFF*V>N_Kh|%tVOW}Q%LQ#Q z8QC(vMZ}1thofu@1ee9IzaBtTgu&)c?yx!B9jgHNf|X}{!aYJUyh%sQ7us-A7vKAVGylTx-B1^#9hM@-XQgJ#cj zvIyEzoiO)Rqe}EAveC)i&Xz-Gj7ck*N=f#alxL>Lmn#_qHolNVfQf=i4C5-EgJ#B7 zN!u1R4yayQf$O{bm`QoH1#(czbjXBd`epY|?Zms?Jd6Vjq zQ1uFes+W2^eKO~_i6k)eUCN7=N>)Xee;mtea66o&2kUjO`nNLO^OsNG?h8@zG#`gH`4{Lz6pD*^Az?UIpqjzMdka z`_o(7W#4;C+kDN>wBP*aJ6fc>$k*8{Z|ML4AOJ~3K~y9eSys88>`A+CYu8@;p0@j2 zexiNkhc0bF7e6nr`A^^1-v1xx+Lmt!LiHpc^2l8`x0^q)qrKy8J54a=A8PmAdRv=& z-m8O9J;|G%w6^=&!}r|YZu_l|wm*8{;kGB9x^>6bv@8GF_3ia9`FuR@%!~d^$odD=a%$ka!;`20>El=)=v#Y+45)e^h1?7{aK+YQ`RfXwLUaS+uLg5)fO7np)9>hV@Ts6nTCv#T+Y5vRk4Mfj^c2LBnK6hD&5 zEvS@1awKdJnZ{xUu*R}g1)pkD_2HCK?-FVajLDXE4-Z*0@v!%ST>hvt_m`Vo?sF#F zczkCfiMS*t6kVs;(iKDlB8#FX4wtGF2!0%Wz@OF6_<`{|PG}tS{rd4RdB0A0S@$B& z6E1%tAG;6GK1p<`j}mv_&S>+v+!_^wMjgFccwetkiP4F8`076HKSyiTm^7sxT}SCR7GGGek_vGQ<|NL%o!9~u9& z3Kfw~!s)_l>%sAv~Rz6f10ieq?1k=fW-Rg6C~)d-v>V zf4k?=+$=h+r%9%HHUxbx%0W9W>%|^8v^jzCX9(2o`QW?SEwA{^cKs_xO0}%AJmr(- z+XHufuxUGxSUFS((8_>!k~@5dg#z1_R7vy^PSwB7LG zOP|_Jm%KWxUq5|Qd)r-e?aDV@*M8*tE^6n`Kh_@lv%A}_$0CmIY4SP~a{pqfDw#Dk zA!dfneqH)vDdVghPfY^a?=azw-RTqGuwJXdooGVG;w3>=UYLCPavW$&W}5B#W}JF>qXqcZF+eg}Ks|r&4=gtUt9%OTnIaRoS|= zm^!&cA|{0oU{KKZM{(FZ#bp(Th;=r?#oC&+4)a*MZf$&DYvT_06W2kg&aCNuP~%S? zt(bf;tdoi9v?_TPQtii$*M*r2EvEyp3?2krI)*7QhnQ7?WYWnvy#W|VKKDey1SqCi z=0AgvX^nSpb?HfiGh~@@8f1-s*Z2Oj&*G-D^SL5GS)WSi&;!r{qV-v2=m8}FvD_fb zZE-PT)yu8!=U{MKrg{q$pzrYf;Rqf-+z#gZ(Bb*`4fj8eEezlJ8~;@pJgJdMfsB=e zgej0G1q|x%=aT4iWSZN2v{ zV*dlI7~VXUfX9O&1K!AjzZZz}qHgg<=U;Cn*I+O+2RPnRbJG2^MRak*WCEf!3 z+9wM0E!H6Kr63s*%aw0&wJAYZG2nmNk0C#`IUU4b?ssTgh}j{FO=vzs`*9>bj~qVK z<_{li^M?+$!w2@aL-9Vif1f@N>2qH@5TA$l?Q08h&avnZx}N*Ul8NhDXmPN5L75>f zvJMHuC&#q)69Q4&6;vNBf-zV{vk&(Dzb96c@lrOym&F=Iizc2GVR;Htu{yH$;9tBt zO!8~yn3UGV9I~OUTN|0@;y2tUv6h6lvOZ_Q5$9%qUY4U{kMPqbxx;}2aejPO z=0Ex@F-WV|tcp#kBcg z=SHgYXI-$lZF%;EdOzoa^V_pGZ;sCk+NMpXX9dvi?$Q4!|6_msS8d&fP3_q)xTwA8 zWv^&kFaGj&-i6P09|=N^>>*K*DS~aWG%oAaW%+x`7Aie(XM59kzO>!;i|=o{PPSj^ zXYX$B`Qg{K%PzaDz3zwK)9!p2Q2$7~j+wVLa7tFWa|JTj!ZEwCx^}OoMH?`Y$ zyXn4@uogdrN+M{>2cgFWy|FoX9&(~kWJ+EqSd`HPicgXtO-EM!^8(p6p zZ*RMokomqpysf?ax6W^G|K*=)Z-4F1wqx7Yw)G`D+RoSB(5}Bc9q_O)UiQv*=c7|H zp={J<_Z{u#clcSCUG>Ix({JsL8u~?jF1zv8cDrPo_xS9+*~U@!cirB0{oN8h^3!*; zw_bK_yKQLpurkIoZuyfuKgxC0W$$SZ#KR`#erg%a@4mg=B>6|1{K7}uL*+?dMTs)r zn)18snzytc|KP5+k7K7%re%$@MNT@FL@Fj5PxiCdGgbn4Q-~e_*s;2xTos*R-S^sW zm86MOC11c8qj&r!?*rWEAWMN+*9N)ay+*F#&bFsbdo#8fFA{m2Bt}{xWg$vtl%yFu z6l*tDq$7cK4n?~3L-S$riFJ{LY4Rp3fG#443%|EW(VDOQJi%rTqkyPr%bwx8&z}#x zIv@8U*~Ou7QQsfy_Y?c}w!e!#5ceNE(Dv@%AMd^GKzs)?6JO=JKp5?=NFCR**)POS zzsDxL{2tF<7rbUI_$Ait705P9I2ZL^8*B8sAXMwuuaEC*LoR`D64wa(#CNAq$Mp}{ zjBgaj@?0Uab7D(6CpEVlPWmrSkSQ1;ks1}VBxYkboB@<|U}qpDbPN`9StLwu`q$($ z##o*K+zmu(QYSO5Ri6fcwnUgU_bz?Yn)ykKnCn6j>zV?RWw`@{6!5R#`e#qbLm+2N zTV24f&KXFiwAwV5ttZqJfF#nD?q4Dl2^?_~5`dD`0vA3z6v?Gau4cAy=pK-dBvm3r zYKs$ho+;@LpV_X1e7H8P25R~4cpvZ8ljP~|GDC~i7s(y{Yh~4-{*fSmtx{yw{^>n+Hi`HmO9IcjPIWs|o+|}&bWfQyI*y`mCapOpC6qD& z*geVE<&w!%mK&+uvX6ITr1pVuJCAdW<`W1NKGR(vpsc0PsQOQmtHntZaw*bO-)j%K zUQyD|SEU50ROHrvjX|~4+mkYca&6lX#AMn6-*kPu@%gv5pZfQ^2EaXW z$>aC7o4@C$+GCghX#2?Tf294JuYIK5^aJk?z`Uis=#p)1_pXP+9SuHhWc#;&r2WMI5??NVd;5)#e5AdjNKN;E-5>hlcI_|k zZI|B^_x#8&wd=oZSIFr-?cT@7lkWcA2iunK`K9)2@4KO094>@E|FP*BbMBsY|6RAY zJ=a{_Ui}nev-a)X)Gm3;&$i$E=xARBahyUPTwJRdH##qrQ3G5T@RbMJ@RMww#PyVaqpk`=8yd4 z{cX>;>}VG+Venj12GP&n^S|BP9{JjLv=4pceeH%Fd)ou|bY)OKd|SJB%k}M-q76QL z(>Jxlx4otPFogaomT5TyU72thbF&Pa%MsVp@|?0Td5Oe(C)asxJPTPWd}89{-%OxP zrtH4$OnRyKkKeTEZ5*%E=*l82%#xl}IBke^7e(d6GrzbpHK(bnPjCE5-U&sUB}8uQ{E)7ir>j16B7-8OOR+Zl>vtdBnefxVI2uAisK0JHx7$q z96K~0Kz}~0CktUwS;+5UnL3KrB?#1Uh*W$(62$BXqzJb)jVA~uRvUss3Cax87H?U> zx`YjU$68TV8ChOBt4p6weK9iCld9_TCs>*BHO{tyWb&OXiK~KG>380t)sgJw@@G?; z3As)GN3pu8?Ea))SW&$B1od^DRd3Zj6$xo!tFctB$z_SFY?&fUQFmNBO)@>V4J0$O zYW5brX#(k(De8gyBtF-cEyTD;nC1w4&|~6W16hJl1)16u%*!AvDy%0ep3+8^EPd2&pLl|JOA8s6~*%CE2N9NXSb5W3x55l+WY_H zL~GKX2kvaQx7W6-zj<5RIJdEF{o0*v=bk&-uD@(;+l#~H?XCygLvh)@hj+KV-}>72 z>fH~v&ji-y?+0GBy}f8rL*Jfu@5k)@^K?=ngBfbZ!heOy7BTyY~aT+K%tO&gI>>rCs`lH?^zx z+}`fnB^!!fJHPeHc4@?0ZQl0Ew)0i3J@7Y=EmFkC+QXlSbN|7XA+AjpB`i(6Z@kk4 z_7tzpJ9f59qkePi=GxX*M4JUQBEo2~n(x@wcKz=CQM0F3rc=q1mq%Qh!p49&CTa#q6hFRB#N}*SeZf!@+ctWpw>?jl}g&=Y<&_-eS1)Y~&6z**8Wx_Vpa^QI@IP zZy;lch7Ie|D(JeUg)n1I$_mh14i-xWvM7PJJ#6SdV}EtYdaFiV?{i3~08zC}h7{=8 z_LV$9Eynp~2?L0g3!(Zf6xS9(5pG!$EAff7OUm9S@)kOwAQ?=43bxE?MM*6f$B|u* zV+?kzPqNs^Y6Cgp32EKylp&(wNthudl)?R_;$}QqO!VEXZ{N?W&(&{AE0LDE+H}`) zmif$9MJvMG|25ij9H;fwu8bMilyQFcop%4KaZ)aisy9|Uh-JJWLDO!@c6}QOlY?r# z@t)f!6F+3R)Y;VDqZ=aE_~(k_8pk~Ks*SdlVJJwo{HF)Pi0dlWALd(YuAI#Xw*mXF zYd?QW|$3NZv;ivOD8pQsX<~#SbJ)irV_N*6tsVs$VmmF9*mlAl3 zr7BV{w!PtIx~x|aND(TC)tP)f|H^j5+wN(v`-R)ur8n=GxbtToz7wNKd&_0FO#FT^ z%8M`C-mY%%4svx}Yk&Ol_R5{V*0z57sGni?^P5aL)sG1lhW?J^0y(SBgXs ztzEo4DL?v9doX0QeQTFPaO0+Seq8-v0GK7~@bDuc+U-*^3NjI)TDN=}vgP|>A^XU; zJ=Q+{V{dFfzPu7en?2C(xb4n%=l}DW_Sj!M&`zk$#?TJuz4knUm2rE!==t5vPZHL5 z(TlHc?I(7%hrc^W;XOePe|2lS;_6-Pp&vTG?fUH?~<>yTMHjic>> z;(0rN9^CwNEb+GYlS&sst+LJ=AfgqYPD){~E0QL$ei7Tva%FeB3=z@q#^?@ZAYp{v z><`6U3)$Kq$s-_0kMBJg)+a(ROs3Qug*Ux!mf?h-&kAy-?L49|!iyOjzCvD8Buc8# z55kKwE~+x|$}7%gMH1_S{IEt6^Ch=FT2XBuPb%}?m%o*pU$_bOjU8DTOq&X2r@g(ym<8Jox5)1CZl>vxu z%0q~4$OfYzBoz zgvzJVU{VrJ0cU5GO*LKn^ekVW*vi*bFLrk^$xJ||;Jj{1b3ZvT(0zJ1LjtDd19($P zZ@v430=~M4)p)N2NBM)&Ph>;8?Ooaxu(XUl(-rx@9;YcQnfu7eUnxTk_-sSdBSvKs zj*gi2Zc@Xeb+&zWr9GiTi&R+?qnDcAXAwGi0_+X5=p;n--2>w zBuOMIVc#`=(;isr6V@W}2@%DDWLMElG7`rs^JtM-kAtc$HSl7?-Wn?-rMT`0vuBdU7g>Y+N7xmh2PyId0C5u(|Q~P(LNU%@0f`LiTkBb7Ni;_q)=mZ)hEIHj5 zmMMJixxbRo#NVI$>qpv_AXSz3+Xm4?Dp0>qTw*tM;_J|MKqEe(%+7`*%k?+RJvd_y50l zx2=D=tzCNg;z`PP|4}4(_{JOChra*PwkdD9_rCYE*Zthb+XJuN)^-%AJ}Uc=Uh@a` z#{a{5)HltkjxSQ_&Cj|he!agv^ywff9f6pC;Fk7XZ+*DE`F%gq-W-;l`Fq~ku6oz0 zq?X4oyr^9q9OC{U2kk4e&JlMYN_5WY#o|GtF5VF>aO<7z-f!F9E+tV%SjaYpJt!2y zC%!7qD4%CxJ>w?7Y3{LydN-mZ%zEIVHD{`TM>Zf(1^UD{sR6SHNCaO1OH+S;!?WSQxj zX#1`V&)s@OYwvxqJu-jAK&l?w^O@FOafyiQ=c7!0(T6!f8u3XCu*@pXPJ0?ips<=C zxt1rl^$>m#-z#=XE`l86ZP=Vi97e1n@+Af3h(SDcC;n#chgikMxZxd@FJ5|tC{!R^ z^>FnIe6jEFQCXU>P!UIUjO|Z^i;W^!Zw2L4F!p^SkAiMLSjXxIx$m(?uL|@L^DS#E zu8K!v{j<9xL@O*vu|}>7PY#l1;O)VlS!5#A_9cqJcU`eE*^8vGVR9ER5T!h}Hat~q zd6G3R?oq@C*LOT?NTfA{3UOcRDCGsI;`4r@ujVPDwW*9oqO~Lz_8j)1D#m54xPh3G zOk_p5xH8fe_!3}J!(}E7|7k5RGSltcrI)(?RtPws3mrL9Mr9_ZcB>PQTeO1>&xmY}yz|?** zab*hj>aWrmK@=j};le!o9oTvWA#o6BmTDkGsgaTUZJNzRe(bhrlAxz20b;UArGdsP zwX(IW=!Uo-;|&?dvumu&q@8hpm{=9ZgHj*}jp6|{yK>W%pXc;=Ui@~#?^BZyS7M+Vv;WS=gDv}0Lg<*G_u^6l6`lUBtYYA&HX%omRDBB@BI z-9kPwZ_pnUyo+x)?t)Hnu7og2)O0%TqHMIRex5MN8fj^T5DIxp`A&j#7JMNs>*+M^JvtzVj5*KIM%*lpcgnNRsVVy7fB z#(&L9r@U&JCv0g~zV+?xo@;)*-4<8u%&RuPEZoK3_4DnPe|K@a;akH+F|y6w|B27E zmwv;gVOiPSw!dOWyD8lF_Fn$_c6BVw8@Ii@J@&3!+N}q!Y&V|Bz~ZjE+x@@0yX}0# z%jMctuZ=;(cJBH4cK@z7w;gFDyZb-g(e8cOHSMMCQ|*KAy{&DI^y)9~j31{uzG%e* z@L%_mTiPu@e`|a04_+NMsE67||L-;Jl@XnVD;)`6+P>ZGkM8?a{54vr)~t`p{PBbB z&-Yv!W!TuIndd1%9=~IIyX9AJX?MK%``RnF9B!Zb_mTABCD*n0z3lW{N4eY9Z@j); zchA3QZ~NZI+VyX_x^3SQwDYk)Z@Yp7wjwLf+7fMaOS}DdA80TCwk_??|HEzV<8e4> zNtAzYd&HHAaz?U@`|b@1p2XgUrE&AE?SmhV!duY9cii}&8z4u8XqixBTqcfl>&b_9{Xx!wBfFK;(|+eK~P zUAMMd$Rd(`X!DLMqKt2AxBU8!cHia2yw1u^tU8X{J`%?cgzMiEL8$h}va}G%sE%r1t6BrB zxTRcR0zO@C15qc|pdh}Vy}XVEIf}J0NEGhxxWTWAEX%4@thKDan>KD}=bdwQxXZ5- ziBd{;5vt7i9Oaa9Rrv+L384gGT_x6AigGMSiM8VKc!QLA#D*Ybjq*O-4uw-V-=QI_ zmdI2_B-Mp$s4Jm001HyL*UKgbWGk^4_gdI;Q$oWIs0CC2PSaYToBFKbpM)k*=`_i; zA+YwZDlKigzJQr~A5edHEDai50S>gnNvHq`FxS;VaOPs;tu>)0TN{jZ4ezzVUc-ly zj9TmB?cXCfEza{!&wdsS=ll74Ww&yMD`zT`1w@(399U1f#}%+x+f4Pz-y$zeY>+fS znp6YvAIAmqdy-}W8?<;|qRL=4f<_Mrk$D16csnwX@?oxcN5Rs&<1B}uMVdu)=fgKGFe6zx;3#8>gvc$M>aa8`X)stS_oN}%5pen*_)5Jro)l3?{H-7 zbGEnx5gQOOI>bCFXwsS&S&`}u`62rsCiVIa`QwfTKqs~-EFBABRXT8Rf7>4!|Mnl; z7a1Sp-aJd00S`p>zjzMuRENR`IkN05Z-XQ*`7TMa}eNHXso44>|3 z3o-(cDU;tJU6d1|f%QfqZqXH3JR+5Z76}4v7lPQ$E8upezAqeG6~|V`Ie2QvViR>B zxb_gqL?mPC??BuI+E7XfEOMckSI}*|W8onqAfuP`w7B%m$?YK(2PG?IKTsEn~HIVsyA{b`5 zgo&SgLZm)aIYuanBe|Nj@-~~gB%$A6w+V+VD+NO$| z32^@EPe0Ng3CqP|4s-Jl1Q6aGZecH;atjk6-qUXVy-1djMcw(2FKQ3}%dbHlA+n~AugORi}*eEmc1mN&kp zUHj9YYMZu;nhdXPm%q7Pd2S@exau|S-FKZB#kB2p|EB%o>({jZ9GlU;<~85j-t)-L z_KQFMrnc?$`BYe>wzoI^)UUOl`L^@h1MhuTd&{-gwzvG)ZSA3L*9Dn?$j0l!o$dN} zUfK5kr^wWI-OX+HS6&^FZu#1LX}jhJuV@eb@*CT0uKTI>0Czx$zo~P!n`kZdiWKnI z|JxhdMSt@1?b@rZZ8!hf%TE$R#Z8=$y{6M>X<>l@5J)t`%%J{Q4w(WoUp7y=b53joMo_7BC|7?55tEwM; z9?H~}QDlnoDsVS@J>w)GEGZx<9EJOum6G5aZ|hQq2H|qyW-H-AEW%lds~moSgsd#Y z^}NU8!+qj7xPvUp`@{0IcmLt`IPU}V@s4;Y*49uk9%e0x<>)}HZ+sphJ94a{M-HnD+&du<5*TV?HO8U}wjB)B24OBNg#cV7b6=vXBvr9kJ;P z5t~jtHlU-}3d3g=2`j=ykSu<4B%~mDR^Y#txC_P_4VFb2E-DD#mKO~4))@*`2AEkD z7&vMkpMXo&=rnAkVM4~7Gzy&cjjw*?@vr;3S4nd^thro}i*Cg(&{TbFPq|;=%UH1( zrD3nX<(nw$OfqgJ22BnL#7!%*(@ahoa$gg;pL}trvLcm>P<_IZ=`7L&1OAiPK>8@B zTowUZ<*Fx5cUmffz{x5n*BQI=ah+1h>)IqQ7KA4`3I{$(&2nGYs&jo7P_Go~(s%>% z0Hj0whb<9+)Y6X2N{0+JR!l;);aQY>A`yrVTUtXLTPJ(Fm&qYgpYoS2*G`=mrBU0Y zwJJM{#yii7fuyeFi%nS=%yc}-!d57es{BnIjarJ>LbgoQHPB^Ea-4}}*|&wwxR9s8 z?Qd`sw8lV0CM`RvRa#-(FKMqx-JPc3-V#+A;>x;NGAk=0R*;;ThQ2%PvMEs+T|FCsiS%B;!pn3dwA%l5Z1T!CoyQULUEL{3WK#X)2@hpxw*wO`JHnCZ|{ zE7rSeRy*i?wQ(qDBRE?YCM6Pazb!Y{mCBS!7qVi*B-^AI*9Uq%E)6Ipj>SgO+|LP0 zw3=CQBzFSh=N$8des4aKhHxKc%@kQ-Y}$pn+(o5eNyUaXijMaMXGegnls#+J1{Ig; z?Y@WL0iFW>$ZDYa97y#IZ_E``iG5-QSTG`1oM#f2BP7ryu< zoz~Dw7M^$Tz`^!6pLTNN437S2Aq{kIQ&s2x>&)-&;Ss?CK@ zb^MtqlUbeqM@ryD?|N6e@b`be9e>{Q+JXD;Z^t9O^X&D^k-%SsN%tK;_nYnPXFXq; zaZwmU0_0*Zle+bttDJ=aJR~5dc#KDYC(gD+1>V zZ$gq#0>`H*0uRPk6do2>u>yM?2nFZgMf?;=DMH`rH4{t_?=|tPwXt6ECN=r$*h`bR zEqPsGC;*4W`U#!_`;jaHj3`Ar)+R89*7qYpz`~t8j*-TEb0lZl97GBN1P36-OPErR zPEVZNPUZ1Pt9~ey&nT$9uCl4H6HYk6N2Q7{;{9a&D*}{bD-2scJ zm;ku(b@w88NnEO41&~jSBO6IhPc|i6Kw8{DdmtrXQ^q-gPlDjlwqs?mDVMk0<3xN7 z?)r4o({iV5MXZK$Y~BaxWGg9rNvL8iie*M#5ap3&SY*S%DzexG^I8j@O%=LB z3o^tYl#*DKu(Ysmsr*;uGoQu|W#EG(;7#IfS6D#h4}|p$Wv#3>$J>Tjch1?ku5Ab+ zG^cV!CO&1oW#f2TR~1tgy%*Ozyq%<6k7M-bqwLoi>whJ1(zYY9W+`C=oPhG<9U(0~ z>vrN(mBsZf%z+_A@=8U0#c*3OkHv1>kJgBmFb#8^{*4?8Hw#xJH!)-F02UHYJZeLY zmAFbu;edY?S%9oaNP(?-An_QboiD(-lr=<6?3+%$s02^Siu8r&ME`AT#{lR>Xpn&c zU!Ucx2$wBi`I*Olz_h?x-yN`Q|)q?^{T#D1PUTXp9VD!gTm~=nucVAqh%z8fM8{2 z<53=*yp)b4SuNMD7%Yl*t8+iij%{0kNkx&5{M+4^GSJ@H!R_sAiS>h7U_Sa)^at)! zDN0Ae>oOgs&m!>}Bf5==lg-d{F1Hh(m3GyNg3{uc5cGfB%8dFNh;&CF^M1o*5HVk{4>sNuHCU-}0)8pKjG?itKzR5x~ zHTh|L$~ukPt|x7o@nxa%XHG9_S1WvUlH{z6TADMFn+aZxU$t=7naaybm!uw&LUu?r zZ@6$OMlw!DZtC$luIMY2S#AaDTj}zPrBj`GoIA2dp7bNUK9%wDX!s411<8AEaL?GA zCtRT}df}JWlxb2$Tgt*+R>WmIWd`b&A*9(UGYOn|39Jm4Z@K-EX>;~^MoM6?grpTo zoA`p9gk6}c(<>?F^i^R6B8*~n{Ek(Kr7&DOtcAuBB1>@{ zZvMRNf#nQ_$U~lN+$+~G9Tye_vt*)|!cB>#xeqwJ_=GSN;>mj$9u^KwL<%NUnS=Bi z+$E5%mdUPL8v3#{4PdV8+Wl`mK;?T+cIpy?DF<;C;OwufiVTmSLc9S>35fBD6o1dZ zO@@fiF<>m0G9OPeBaOPBYxAF(vNCby{#D3HcLR#v2*3pOLWKnsGhK;9l(@ldOTJ_ZP6MSO2QPIZYI*{eW=vJ=2{s zqb4Crknc44mYZDm%7U0gL)v}*u_sen^dy(OtL_cK=-QWf96Dy2M?7#7G%LNe>Noka zwa6BQN~xVXn*@n2BgCbMKe1H?(+vG0;TjDCnJUuaert=5Bwu7FG%bFPfv`SB4iXq= zO@+hbxCs@BNgyXquup5Y$;2Khv#_F_G3oTYZP79_6AgV}fMD zS~Bb0c~iTj?!hD(b;iQCz#d+>zEQupPSa=&nY5UpSXc-$M7$DlRLG$Er7TL+kvcJd zs=vf>;s;?Bw;h8KXbEHM4t*bLmjfJKDB!w+;X-8wP5M>VxpL9e<`#${8 zU$rm!vWo_HT<-69xzWPBtjFw)On0Bp7^-Cz;tO$7#1Q?#ADrYtr#k+HDC6uIf1f0P zRaihWGi*+;k$<0L@l33%)}W{uxZiuAf<0NkIx7|4Iq@4g1z3lf;~`7legjuKZ{S<& zJYE$1jhh{7mScEhO^@@Bu83@U;r6a`c^3|4{ldcpOcuYh#u8(NbxP?3C>L6~=!-mW zQ*2Uy;kmIzL%bnVXT?67AacI1kNgJfB1US!)U0c99h=V!(Sp;J)GD483-(bm)W)@5 z2Z@`vw+3q!=a+#(8TZWmhRP}tMO-}xo=}1&lP9jVCC$0H(-lW42V?})7q9sVR1>FZ zRZl3J$2y+jbvvKmbx3=+xO__C2&>b=(2 z8e@|nCqr;7j^BW#Aw|0CWPqav8tQHUgkL7RE)Qko9+`;G_s{s9bPc5OxzMp)DKH^n z-``*dFl+WJK&#Hku>kJ^)($qWY%8J&0J_q8X9I`}C7Cd3vEYHvE23j6?gvAxm_(9B z^#Nw^Y3yul9UppnY4_cQ0>aU5s51;rL0Ern~RlkOB_-AXoWJP7$zYg0rKowJS+H)0bKIr1R777z0UUJUlEj4fOb3r^U~>hH)PE z!ak^er8p#SsEn4Y>YYPo7%!!u@OY^1=&|5^C|oBiXk71-SM{~(LklrkAIe?Vks}Ef z&@;&*>*{MFg`*J(3@7ik6E>7P6Q9K#B#YQ>`*` zszry0JmgRR+^e3k& zSwx4chjfp6PPthb^tsUumi%@wJlbqG6aXRwEHq<~BPX&1dj>;!eFhB}BpIAL&%fP% z%KBAcr>{~0%xMc8=K!aaXhPN$1NWX>qKRMZUdf3J$|yzDMZ}KsW}}|9f@=$ayFFyx zlWYdmKLPyty(d&X@ueJ+BcJL7CMVg;;u~&Eu2lg^C&BO;3^-%-BHVTDApX2p0&c@% z$6ayfw7gWxZl`)?;=qlLelNyq(=xGQQAVc)r48M|O-xb)VT9|BA~KB2R{%dqf!W1i z9xf{^*UB8tr6L>So8OL-jxND+S&Zu18f*o+YiDhqPx?>wZDhsuX}z+m9^-4$ovY3f z{nGf7pkyZZK=uER2dRWDoh8eeZ1i?p^R(w{xXg{|);wsjYjAz_ zF6y2Pk%hX7V()@bMXZp0lxZJZ-fE9AZCOD5C7l#N_B+?n7OzTTq48F2PVI4rgp8p` zpnNGCW&0EvvLZrbhv!H$;|bJb#r@OSPMsY>N*66qo|~+UaSHY-nysFp(FzOGA^h6o zS~3Wp&WjZ7s$7(xHI$5jlvZRpe*Vl~?`ePa$fNDt^ES0FdH!?Th0i+QZpP_KysT$2 zRwyfVt2t*`7tT(aNnj>{ry>C|Ys%%1&!=*u*|lGs641KkHM_7c-UWrGSR;fB6+>>N zC`X05%Y2AvQl(D>D6Q{jF)+mZ6p5Hi#1TNZ<;)>K9lx#@71FwPe{29JMB5 z(bt59lz1)3RP2u;@}%8A;%{xbOA-rt(xCJVtV0dR4Ir10C@0C?B0dVN!rCpjePJ`O zkx5=`h$7{rAxB~$EOJWVG{!~=^$1VI>2VwvI}qav_UkNs8Mm^68@EHd_Mtd7?s4c! zAuPTrb2^IF#3-c*Elyz7bG3_C{l#9$ZZtz#iX`ZVNge0ncnI zWJDR%D52n9>CR>%ld)7h56!tcTnL~Te-ejkoGC8Xq+gPbb2tvT#0A51!inJ`iO}kj}?i^J|VoH$U~E2p%6_a8q~u?t{y`N(H(IDh0E!uY_la|CO-_RtDq+>NDbla&PXM!T;Hhj!cq zPv>=X{(xL~SFBzi{emqOY%SG(A?(p{d|vLPPwaoRJ@oKr+u4zU@OjUBPTLrM?>THw z{W#(`=zB9zcWPP9&X`Hy3`zjSYAz;c@UF94eX&SDYY7V+D-UfgaFnr3TFksBqT{BV zMGsP=I3_Grgsa3_q-}=cHzhOEJra|p%5TW#%=#beuJ^OF(%VYRVqGi4Yb0W(SkI(6 zw*p)EJuuk1h;NFN6A^2?5F{!M8en?d_Kp)jOeWu0t9erv?H7d?$jY`c{$_h3idF^@ zS&eY=XU|8nD~AjeR-n)Vp}^cLp*tqu9bVkSTRyHvrb4 z6+;^CI5`?euu!BXJDBCK&SI_exQCAb3dBaZ)AHorl8+@WNn77-jXi^bMkY|aHca#N zcFj6UM~UaN50I~??ruU6l@6fw-C!{}*Kubi@$*d(-J$A}Z|Z7vGIhM{)Vd0HK$9R0 zIf*`1ud-sQbOW$W*Sn-sjt%o5#ag1OApfW|@gUOX%jRdziJO)agorh{2$W*I;%Zqa z{Tmi3X+-2VW@1*PM%mrWTq1-zA_$#}TF@f|1w4N_; zO&Jr=7eTj`LRelTRWD>7lT&j4boF%GTeV_a4E;eauuP~-DoQLEBQfLlEouaWANeN0XSgUv}H%xDw%@y=8d~%@g;`{wYa9LS!{`pVhufv?T;0I!Gx1JfNs z#5KoN&9=5$QyBGXcV-pF&X;QESZM58nlWX}Uy#j^5p#@`C8`hOm-_k^wV}1_ZfQZ4 zuecT+C;T{_*BZuylp1ISP3o9DA)G9XhmNy2s_1INgP(h%J@V+|LGBK>7rpRHmiH(a zTawY`T`)UqCV`m*&V&Sxl4=^o?K5_(f-@ndr};g=A-OVI;a50?IA>yVY=yyEG#7uf z$t`4x7^*q8`2fVHC5pvbnO@V~PRdKxPL=@HBG%@Z&-ce3jyO)m5**7MRw;hR17tq( zpAdEumZ5Ox0|~N5FD&efet0DIfm-V=LE;!;0^E=N8c7%>Vkl=U$6hOYuQuLgZ3`s5 z@=#d0#xNYbIaX`mt*F1?Ue+62C{pRST@I~W9`KS%X5y*Md}F`b)Yhi)!3t1e*#fu1 ziGvwI-=EB@%5cK9B2ZBtJ|_s1R^Z9kG@v{B31_5sr%P0MzUpcW2)unD`p4xyf{#yAF6MH+YIm1T?Vqi z9hKcL-Lur55UTiH8Q4NYA@FHylifFMEyIH9RO#u8m30{04*~pgL9*G*03ZNKL_t)<$CjtbHtPF&$+fIrbx-a?asbszu89TyQ}aX}J3`f8Z<%?Z zO9`R0rFM05wm46>dTUPbM4@)j*l`alD{#rDwheHwE7m=iOFNrm1(iGUc&)*>CmmT` zax$w4U%lUqBC4NQ(yGg=%a_@f5b#N9jga{o+OReXmM3y3N%@4GA!cZ z`^eWi+fg?#eKE7!k1-EVPVWo((e*qRpp+9+4D?r6rWOi689x+tpuDEm>m z=xMSOUu@2JNZFgbh}adxZVqy_#Kj`|rHES`qg?04buWn6s%5=mLq*JB$HMJn_L@mx zCV?-U1jst7SI#4gK(jAgVP;P{;}T$<^8T+TRrUhW7vV5{f_vgCYY!`(l0+Cb3gcQa zT?$2~5r@>2JHBvioTs&w^;QWdVy(fVBn4=!*KAJDn$0>AIA(Pa6qLF=6KmEH(woP= zjE6%>w~_d%$ndwYCiXN;w?N1pv0O?VAu?qmMa-2#RH8)S*uo-w&aJU;7BN?(fww!O zfUVwmHPxE0b(FGzJ97=S;?N;6@`M2whG1BSh3}H!RHIq(Zt?a8htqA;B@;&_mI^{; zjeB~(bPT|cD$rGgqJHyrnLHs&HGsC%lozNgGG!3v4j}ASATP<{V5NdtlP@l*B~DmnT%uAdCN>OQ%|3G)aBh9>CKEf~x_+VdNNa|y zfl1i3Ct7CZI}|(oIYVY@j_}8h=QAPG&bX}|ikPRvk-@J#R)+d&OqxXVTr7o^c}^Sm zrhGJhtKVpxjoPGXxt7&%E_Q&&Lda%`PEg}HleDz>pC3Es zvUs16OMTb?i2S|!JJt4iRY_4 z87IkoRUYQHOh0|XeNZ@19)JM%iD#)iSuYl7mA$_YWhG$;iiiFCT~?lfwwCfxXXZj& zXz+?4Q(N7qWJg)+KFA zL)kyM4`roZ^x^(KOSM7CuG#>3)O{#V%5vxv+=tOK-ImjBkk7C3NS4!WIo$@?C+Jtm zjJB-ns!vp#RR3KOWkqJ{ca)trSnNK%>`vAO$gXco`UK@!tSxB++LpPJK9SF_I-mWi zPkGJCv9Y`XJ3H&?BmtT?9dAr1gv~9-ziv(JdlexATEDfpYb|srhEPR29?!tTh3~AvQglZ76?UNT2C!2p z?7=iB$X5i3qu#8a+z625kRe&Hgum?xqTm@}922X2@X!^e;qkyN&Om38AxYI%mOpEL zO{%gWQx7TfR0N2_J)z?JKorVMmwu4F3l!JMq9u^S_XOc0JFcR^?P#jxHv^>vRcL_Y zZ((i~#B!Fb6G*E=B{-86M#7F{76GWN4M<{_z*n7AtiIwyTo(Rc2?(^HcYrT3@BqB4 zoCCm4@Gcj!ETDWp%QY)bWOFnpeNf@u`EyVx#WHQ8GCH=)7A3%N3=kH9wAL7?^&0%K zyG#Sn>g+0BRU%=wiUBD}*GB_k3S_rO^>+rTNR0u$+r|T_2GbzCv@%MIqVrPr`UdI~ zI}q_Y9;A^|tkJMlVL^K+rKLmG0Rz{wf@yIsZPv$1DOGq{HquMfMajM;*Sjq9(BCkL zC+MzmAWKea7Mw(QYFtTDg9TD$)1(U@7&_`O-g@#h_QR5) zpTfq0w5^=*!ooWj{R20N4eRIH#!VX{z3aNjQWSe%#OK`V*#9DA=LHCD-h4Y4t`P?g z9cc5Ukd;dW2{ewief#!H+b3<9tfr|U!x9$HoMU6fHS61kNH4oSHY!{bz)n^|$`oT& z?sx&@7LGV8<(k;qo-s!{+S7SG?@L~wBr1pY?``|{?QMVe_!DjKzJ2XrkSi8P7Mf7O zgzx)Yd)3abZae%agT1^{wUfiPLGz>Ha(22Geah-S3{N>}sBV!3)N*wCs^PJMoKN0^lw1 z40t24XyItB>kyXcV{6!3HP#ew=u2Ak!nelIN&uxLJd?+1r73da^_&dUtYOMT9k>B} zBv(IiHoT0|Ye*q8L8by@Y6=H)#&4^_YK2z|Lx3k9B&Igjp4AXE?iZJl>PsFHZ~!nm zI1yq+{Rp!l7A$VEHrBhfLBv!?I3G%d!s6Bj8qean66KP0uEHA18U@KDJ2BNxd?#!u z?B+c{`$S*~SAE|^Ay1}%Ok1~%f=5)NEPwUV9!I&>P5h2_Cc*mvFcVl7VG_G6;*h0R z8z+d>cY)4Y7fj+*lmzZ|j&e`P+EB%vta{$Y_%$mdXB;W@4ct{u8c6^NAyWWDIf35^ z@(6O3lbFgYk@FKSK-`NW3V0g`$|#nkq8|)Z%26h6;Qq}ygA5fXROPgOqSBHpeRO6F zl$-#$@NvW(pfG%dWPuslt|z4>^P!`S^6SCAz1vJD`KqjSLi0&H0@RD_)Alm2QgOSs zk*!5mhLrUHaPy9Xo&=45N2rDd>-xx82jpQZBU#D-@JD3?_lqH6I>eMgDDd$~MjVY7i=9#C5CB+Ef=1UF2)BO-CY7?c4X*K{jcfmDH>L z*#?TCO9HA`CE7ntd?R@%Qc2l78I_f>GXCVW=&=YXLnh9LFibGDX&{yu(r8!WjDE5) zNpPRU7kVCR4XMs^->73~&M@^8Xc~P0jT!EMxcYG(zS`qlp#aZMP$s_g>)eDmf^2S2PK3UY;DchaeeIcIr*xx?h_U{kNP>`3ykS#im-1Uyd=7vYx zx*$`V!y0tndFP2xY2T{2Z%=G{nJe*1^ucpBg?rs;yjF%*d-d_v?fj_E!vD|So5os} zm1mkO;>Nuzv4w=iIaRUVE)?t+m(te$%??Ok2NYBkFXaT?mWG#%5T5V!Ype$4|Dm|Lohf znIr9hP+iY!_dV}vOMm^>?dSs!#EKb9Ccv07(jpYB)2nP+BeV%A-}x=A8akIr$=?tR z%ApL(>dWCFjfTI@ot6{CS7hy4SNsE+@ zRXGR~8B{rx$$k5Bs?B|U_>Jpm^E}y64sw{+=IVp0&q00A*XJ;OP;K6?59qII2W_D4 z++*682lW9mo0c;j6P(lcLDgs42We5fW*<-=uBD#)jfv{Z8ZQU+<+Km_F;U~E9~0Dn z-aI&HK4IOw?Y6f4Z~l$P=;HPFPXZl2R7Sse9ALr0Eg#ZxJbqXU4+@e%C@F>3eQzL} zI^O{YSHKFYNZ>6QYgxYBil9E=|NB(7m4DUB30Ryls`kDqCyNZ zw-T0~O)B}J(dMYf!9Xm_N+;8<5+yim3jO3X;+C_L2$a7mm#bXbFcJdEQ=M(OOAr#R zd&t%iyPC<(EYGz_-3v}mkXF1Tz>X1t0AfGLL9Q-HP^vo^klPxQjnp~rTf^xZ1OAQw zL((*<(W(S-!vGx=N>;h$xG8RsOjxQ#+!t?Ti0NCF0|-exIF?Z9$ewPCsFR5x3%iq+ z7Ndx=Dlo+0m&{DEl%`wasm`i4@u1*Akiu0TLx8hixi6=ROwmBkEB@0XOk>IPvn)Dt zos=Sftb;Et>z!qVR!Q+^oF_|Y5q@vz=Pe5CT4=3+My>lj?#K0zRW{7^UQf8O#lumq zZ=UmIp~6)FtH=3`*g-wO=Pt2SagUXF*fYi{ma(c#KWsKDGH3$pm?-M!J2Pf0wn=hG zE1QXo#}dbR=*KePdX%^=-Qj<_Pm!%`np`B}nlq4^8&0+}H{2j=(ebdu@dH4e&ILvCNK|`+-bwRfK$Rgn#?W zvDJ3w=2Pv|O}B_3F9&#g?X5o{B4wFZzaLcU-eXv(Ha_(!5srLBdGzQxnsZit>$zUX z`oH`0z3*LjZgpjrc~CjJTi*ATD#tS;ACuQ;*Hj*dZgVfYl-Y}t-78VfA=>kRv4P+VPJ%C zA4ivul}RyEvJx2^3e}}j6iXDCNaz-j$J!~J2>BurRrpN^Tf_=Kc#uT;+B`q4K7&Ay`~H@L5j)EU=p3rU1E9eH#WtOz13uRh@v9$Y8(Hms=>VsDYw` z&PVG&SqaiQA#fisDqLsCv7k0Adx+g9*unPQD$9iL~L~N9crK13zTzEWS1XEd@ z1Yk$vXm`O}Hfd9~#2w^;BI_5PLLQs;?L=mY`mPMAkdYT47XpB}lYtlm8>?8}ySM&n zAVeA3J4j?EL6H_wgA(d7X4gZu$dcb&Qe~Wl<))Q=js$bCY8;tvN+66CH2BsmI95!+BgZH*=WoTYq*YQH75Vepm5K~-OHsyl zD7crRj#y^cw+Htve2b5XOi;HPS4>F8c-)6n-nrj_ZmG5;!AcS%a!7sS^LS*QQL+&J zMeTsAswY4M8*-tu8)5ydZ*?O|qGqW1(PvI8bBjV%8%0pcSi`i(duKulfMQwU5 zO-}ehYp&Roe|m*dB;y-R67!!8Y_-3HGW{W!oE#~4)fy7T_|-cz z70K#Yk1TEVCz&rT`-w9UGFh*jxMGR@qSD%o^@#CwEaIZpV&97!ZaLFlbJGp&=9_N{ zl5;{X2a-8~zVUsD3`apEsl2sk>C*tI3(J;Mw{wBVehdvQJj#L;maVnpC)*9D&$ky| zI2-R5f>?!nUAQxxI>qm&lDOG=rx_e=xg6TKjSc35hJjvE2n5lpH16Y(gTFBch=sWv z#Om@u0*|)WoIWA)__DlsSnwt$rz>#3@16mBU-jGc*!7fi*mDoM$FzPgwyrN%IoGOd zf1j5kyO*n+MIX$L?Ze8Wu6i-^;ANS|i$Y#?5~w8ryo7az^>8KDrcn zE`18~i8XGMu!;4}RGh~3ah$dS1O%0p=nQ4JEmoCI9xE1Wrf{Oxm{g7%_9Vy!mKfU! z)q}&Oh%i=`_n9!4m4RglnDrv#+5-56oeQ%eEDxhHLP$@ovP>=qJ92HDJGlA?AlY)^ z62?Z@f?_sUS<$ou3VX?@A#SCJP+=*GkcB|9l?#n5FD_UwxfROI2vSCe88}T{<|^4m z|GO9~*Q79Ujj}5Ekq1)0{bL`R7<)x=$MeT-*Sm7QYo3aIRe!w zv%$kD0d~?OooAavc5;4)<&@PV9S{e=ud-$7OIa2($u?G7=V_#60nmoVBbux8ESGXK zv&`(B>+CX_hfXyuqksvF%Rapka(CEQ$P}V> zHRN!G4Vh!1x#9F$yCLGk7O#Z_77|!UU?G85y97d!h`YJsqawSW-rjR6RAv6IHPH#W zaKEc8f9!<_Bv4|fSd*O|J-uI8_hS)5vB^45(uoZeqj>PddD|I2G3EpS@AzsNfzmqQ zHPOdxYO*5mSYWjk_Q49=;*{=A$t#^*SZ9VTIccBSRsi5HDO)3}hi3XH&1pfQYr zjO0>SUdr;s3L{vQE2eK$m9Kzy;|zdXx*{O}DW-9OGVq2}S&OT?0soR6x;|rvBp}i? zCIf&BZFZ?fX2s>kWky-)3GD`COGO3BR~qO(uB(z0jQ4b>4nj-;)%_f!VOJyz+rU)y zmLz?B9jQT5AW_zuByX|^74xJqS(Ic8v7>b42~aco*8M~j@?W)Aoyoa*np&Xp83Z{X z1j<~~lJjV(8qeX_G>JlOUTlCq0zAHt$t}EjtRzq%FeNk#3Vpq&an;5BJ|uNuQU>50 z0jmjB#fp{8p>D{0uogzSV`7LT_Jd_9Q*(y)<}wo*ODcZ3Ir8;j5K%y2?k8LMtN^e= zfVSnXS1C&fyb^KhAu?Jji_Fy690rQyW1_^k_NL2nbh9#mvM7_Wmdb;&M(Qd(1ex%m z{g<2TFaU>JaNY1iuBsb1#y1&jRmnFV%1TEXzQ&Md>O}Ux?BjB|!wStY$ix!FKqS}m z8cQD5GWLj4&?@99zB}D&Je)Zm=S5B`jdywl#fY-*@D~Y0WaWkAm?{o#ifU=OD)3PD zK5Q#&FsucDj6c?f$z8y@4G}wAX}zzQt;&ATQv)*k&~8~WGYFgw2u}v7Sq*nRepfOH zGHFSEmLa1;?y7N3{yC0YGb)RnUFg#Vfzd*G^2$a;AIKUPZ`#e6J9)yfS#tHI?~_pR z$(X7*rk-HwK5_0gCfGy1kiyPZ#Nb5R&)oc)c2iiTrkk=KvZ%#r3kfVFu#mt)0)Oig z@V-)zlUN3oc;a|?-S9W2iRHircJ;$Dlkrt@_Y)Abi~g|RljGST3feLw-dnMjL!>ss zONCFuCzL=U4JC>hW);<%YrNy|h2$Gr7+LGV8g{_v-eEvfd>08bsK55YQs@N=`*KC} z+AlaC|2rOT?x#+kjP-F%>y+Z7QOd?SE8z_yPq@VReS*8*FktKi@UZul35iKnd1Hx+ zBrZ4n2jc^s9TuYBQn6|X4BqBTc^$dQ#T~ep@F3^~VkU2*!n{J5hVwv%SmW*TH&nOr?wOg4Wqp`m*q}{T#;iY6^k|p;nIzSqCv%do7 zMVxvGFNvxc|j)y=Gnxv-Buwt;>C7JS@kL=FsGGeNxwqwV(d7*ITo#W zEGEfwl9GJJF)dIAU5=QiAekhlICu7JyAW|yJCU3M5iiGrSPRC^&Q`{z;Z}%nSO_7Z zxKNTMskAV-xP}$$ItUf=UJdg6+SlDW#7X67U3@Ggu#mt)0t*Se$|b;BiFIc!*1(f% zEA3<`;!ec+0ja_ob)3z6m7u~#1u2f@d1A%fc4Vz~JQaBi(rYQKP?zKTR;(=~i9&J5 zb~}n=4zNmkb)zBUBf$b$z7luow-J8}%5x^`B=J*Px1)}+?y|8wq^gohXbT|9;SLlW zsO)N_Xy^FpaDzXwhAaB2?hG!r_lLc_3ilS)ug}WVS8KZz_$r$hEij)znJdfM;Js4E z3%487D>^%|?#QrcB$(1lcXJq7Ox%pbM*u>_?&eGR0whbzh`MQG-*T(#(?Zv8oL(^| zU;@C60KV$rO+5!f#l0xcy#V?!OVvJ0uCyu&c>w&RtDJCI)>DKr$w)8cvQqWzwHLlJ zX+>R3e9TI#6Kc0;5300|DXyjfaS=rW#nS4#+uXV#O?aNM6q;+1I{HDOL3Ff1xCRL< zSOwr;%Ahkab9@W#Pk5YaryN`R1g<>52jHH6qa~*d_R(^GVgcZ6cW6Jzs?F8uJ;N_D zpjwGMIS!@vo9YLxN0R}w%E$>f3?`4X0gOXt4D@YHthddpcIVUmH3d{@wPl9Dm%NL( zW;qZQC!@g>HAN4@a7e5Gb zk@Eux;-H7D5}yR=Az6g>e}cf77Ls5B>m3OrAX+?JOEFPaUDYigv+2pI2ZWM?#3!Mj zyR!H>@q{!zl7)E!<3w8uO7r6}E&}yNDV>r-9kg2uU!vd|<$!4T^@iKuboi4OXD%eLkibF$ z3kkexB)}5C8td2TAX7KqaH`#S>O`!OL7X5su_lm)+*$pMtI!eR+C6xLkiuMhO0j1X zidP#Z6eAt$CuzrpMB85;yEcd?GZ<%1=jcx`GF7fPZ>ZYXIzr_zx^a9k(PE zOo~udyp|@p8doluBdBEm1Npad-yGP8&tn;Fzhz=VgG*JBT92QlNYo%pRkqvg$|R04 z;k|`C=2fl;Up-t*7zS+!m#Pvx4>XEZ4)^sZ!JfwRHHl|FeV3H3&Cl>vkrK@ezWccT zU-MSPF6U+xu1r6;1Tfx}Xu|CQsFUiHS3P`qcp+y3MtQ&-U4od95C!^UB2U(xVLl9` ziA@6o{6i9P^P_!w1~|5eidW`4$#0muu6OoU^t&IbXxLadR&i&*#g7LtZUbRqA%*#g zAXICy1G`#|Y;ik`Yj@&W;)J&1<`B>;p}DwnC1SvkIfN?OhDB*L5-@N*+4JZxkr)Vy z=6`0%6iLp-K-Npoab-GUj?-Rc+#`tx7PH*2H;$2*0~z5i%3=noL;DA@A zsiYJrC&60Y+0lL%#v81E!UTn}`7IRrpl*5Ul*d!5xq;0Gly{6KkZxp86!_sopI^LFH*M?(|V(wfF~qL6OWl8^42jP}z$U zWSMR!cpj*d%mchF{Ek;sxeVG%OYVUk#^9z3OUO-yxqlk8R2Mw!#D?O$!9rD)HrTYw zmy$o|)DeWHamw9*=`qbq5E8#21PM%Gxm>GVkkve&kwm2gHV`7R3|5dj14?)t%ZCMM zO?_E%qMm@Yt6W1U0U#CCJ;=n`>$122hLrIH5R_I009j@E;|5CPtm>spml%!9QX5=x z3l6g)76z;nxN4;Vu8uKq)JA}03@llkM8Hf=YEWDb^Q?%R29^mMOjzIw5aq| zvWX~iUXghdd0{S%)D#3J{qe<_|Xpxm_Bvi_5sAJiO z$WoKi090d5RGou+9Z;9`W23Qc+qQ138#cPJ)7WZ^8{4+gIE~%dPSe;%zs@tyyffeb zaL(C#pSAY-l}r%89pU9H3z8zuGXf%We4~sdbnIP;11BRm>6BxGbG^u7u!A6slZg`~ zUQs<+u7XX@a^8j^etf?XFZ=iT6-z04NtSGCP|3wlRINf zE%A~zDHY;$4VepWj0VUGQfVDYuc8sBskfG0vsOKt8B|XQY?SAagZVG&ZT9@WoR8u9 zQNtE|`@!5E($3_fE>cazQBzWmIKibJKms$}=~i-eVDeZUA3Ym+yRHQraULYCu+Epb z;AU@O7Gq|U+fd`^VaiK*^`hFu^63W2MqGi8WeyER1=gh2lsE0+LEM<-CFkMQC~=cb zs>T)K0@5Dc>g^Thr@jKDu}PLZVnpQ`~LD+ zqnge>WhJ5TK$`s*E55ZBmT5r^AqH}d0@kxO#vzhob*KkLMCqo}Auv#l4UXz7XMMv? zYAiQPf$juTNbqX}2zeMFqYQ~A1AD@J!<`1yYqmzN7NOr;U^A1L66=Q*kGjno72$D5 zSrS__?VDBN!{@(fAbeMp>2(H@(_&waQMx!Kr1z&Td%t$DtGgnyN0=wM49te9EQ(B2 z4Y`k)jhOEiRG(L-T1<7!%aZBC!yVB|N(|!bq#;j^pT#ow&%hU8CR^R73F}orsI{8f z1Yc3I%Y}UW>l?tdxj&Vio9Dl0Uf>{|)=vtAyVMXOl|{@65`t_jg((C(4l*!@ zuSS;+ZPB|k@F4m51TP-hj5AY*FQ()yLNH+XEaf$ocAIuy<5(JAe;Ka*S2>c^eqcgF z4l0(8KJ|*WNA8)SUQQAyf%byBK;ZFph&fdyuY*Y7jUt90z0c-~i0={0of(-HbWm3& zr=L-&@y=>?%{Bd_+=3ohbAK-HfOlK!1R`zUxOVJNlV|&xAul;fw=VutGI=ql zqf)aSor|UZ(+775851YCAK0X}IffG?GsE0N5@R299$(==d=L0ZCpu=wg2aVBsrx&D z5UU<=5~J~-n}U`EVNJ<<9NB{`g`;G6F*3XgMY}w7lMSurIG;FF&H$>k*y-jcAXRE{SbELu3F0#t88{4Sk;tB8?>pI_Q-YemOXzC zlISlKh?(-m2rJ-U5*{j0{v zAO+|J7<9LHJ;qT@0i!2|V%0tQZoe?T>q+e2VPk6|n8XywsoPLKutmZsaC4_(Fm=(i zxQB3y=n-!BC^0-M-^9T`zn9RmxH7;zr}--5q=eax5wUq>(JG63K~bAo<}|Xv;PuO< z!3A@!pi$EE^|{(94(bNAA*5ys#(4^7OeIyt45S&|OxVqa$>TzCpSolMxg9WrM#~p1 zkZM~#-Z1Y^KiNSrdxs>E@{N}$@z~85cD;cYD?Ao7DKhK}d`hfTFBopJqOPih!5^_Q zYTDz$r35_2^`96w3d)_mR)I7WjJrGOHl8wA`I$gI*2^6M2#e!i5P;k0ls{4!bdv_t zs-5&%a)) z9G;5g5EAJd1acRQ`t`l4r@ne{Z?9;0TA^BW?LwU`rw0ZdUlqXxs#|M10<)&G?dk!f zWQ3}MqsO;^V70vx`Z&$^c&2_8VHb+~>@PCd7{oCHl@Tnr7&ob!K}Q3A3oNxKH?n~i zOp5uodU%aV!;NY_^f4Hh-r(Sb0-ZWANTYXKz{4%RLIgOHF?;Iip0iHHArWwN`Gsg- z)<32}C)$;?$v}cs30&k(mCxszm6$0o8kENXq8OIMQPQ9nvW@jke_3Z2jI^>IvQGtg z+AN`aTguI0F`Fp-u!tI#A-EuxRv8!B#2qJ4Hu9632_&k2kS`k;8H!o?@1E)3w^D)} zlnFR_uPT6Xn{IH+iKS^PH}a|`&NVqfRag+X0gUmy9vLi#FEzD@85}?4>>wYTWb~q0 zrimrZ20EBIV1kikPAtDPIJB+G=TOqLKgB6bVlm;x6tZy9m!{H7?r{V2udyX$M{vW4 zc5!HvD2^C>v76$F0`a-mvn(f5;t=Bn&^hsun8&h4~M@Z;#vS5^P zuvxn#-?>>mrUqgH<-+CTh}EEJqYf6lY)`b3NsWu22R$#eW+cWOas8EKnDioiP=v2)Y>lf_5iz4kA~Gs-C>f+P1dWsX3xf2Kd1c=u zucfny#h=L^j4UOB8#mbBVy9}>de>2Oq0w|yjI=CsRPQ?KiFHst2mss$4_JXr3*}qC zWC`%Uba}Ted!Kti=!2${YV)4Gq~rV#3pqbU^c4*MiSiaNtz4cT4kp=c(htq!7|AGh z5_%|ypP9Ifj#nusq}R7r(;T7h^3*tUnGjp%Y|Q}MAUcVHT%WF2*C^tVywO4pMU)RK zJf6>yRC|FIWYIJRNuEn(VfJ?4Kb*Za!vybsJdg*qH3F4;1e^THVQ5?huk*LHuhY%a z0$eIH#`zbqJc-zlfyu(8VTta3DdUReUW};@obx|jZ2TJPswS1Em>wgarEt= zN+veQpZ83W>sZg?oOZsB> zbv}N2YTA*!2k>=;&B#9Ca~J+1vpjFv*y8^`{xx7L%J0trdv6!Plvp}S39L8n#*2u@ zyd+M1zn_B`b^$}g5g&}4dSrG6a)Uj7li3fBdwJ+}NHXO3NwM9}q5YZS$3h(!$;}c- zv;1^3E046Ygv=@=Xr7!*H1U{uTpk+!&ifEj!BQ!PNbg~0i?}Riap?`aVVn!A1YaoJ zg0BlB(SgG8PhpB)ULjy4D@?no>g#uuyy=H|;@G($>uP2S9qCYO7}OXBSv04T{kS-=w&VW_ z@Rsxv@#DEb8sqFGgP5X1Ak1vxA?nwKc_Dx7Q%ED^WCv6bfugKCJQuBi#2*T(Fs(4P`D^pXt+z=@q~vU69jPmO9)kGPE= z!tp5cj52-*L-S5{u-u5WVTxPDWd+*!Q6s`$d_P{jIe)OlAf#*%f7tVj^%A!*1l1#^ z;2O_hf?Fr?{E?bS2LFC5s*RNTE%pHYL^wS-!)_&M%2dKqjA{Lt%tL(1HHp(H6fk2k zZvo?CM#zREyMpi(d?YOYtbM*C&udpRHXRp{F;b|&oAw3P>DD)?a0%XePvR=y|RBWd%8=1a+K6Xu~^zu5i-m)NNM9V4V&F-J9N)twD( z60csDTi2WwW_ejI>tATRHv79B1-oB(wY8Gx`>GJPbTRGzGRbEA9|1v(6tN&jj07=L zC13b5+m&4po=`A4VsbeRr21vC^lt<%sw)OG3 z#~iw;SieO7TE$!B$3zI$O?-lLPmH)>cD#R7Y}8h$`|KQ6a3ZFU6?`~9iDLr&lXAau z@YYW^H3cuBGPLNBAs4}qCH7)X>h4Fbu(nejt(6yMo4nHBp;ckc6C7Q$l zIj}eIvrDeaZa~HhGKkL+9idRfqJKQMhxD#dbP%R^gW8n9j6BerzLGL}HV$BN!!;j; z28#!!#D$gWUOe+$0otHJHqx*MD9r>DKl@?`14)U}KmcvY*Wno^H^el^F{#pqLr(+# z4%A$F>+BL$cTC8!5@c;~O1`MGXOc{R5U}+UL5oai*?`aXJjMR)>@@2Ws4A-+Uu8(0 zXiKE{~_GRo-FQS_q3LbiS>8Xh2lXosb< zbs@alnl!LcK;;Za4t*3+swDtnWW-=XPdbf7{$YgeU(N`I(RsbkvEs_APU+f`GHRxL z8k3Or_0@tvb*(WCnmP-n9u5LHnnmgskwzCPYRC}k>-lN~H)~&*qMf{$in-ng2-i$1 zj+I|li-tF}KJKEEI{rQG`}=f(_jgUqLF}$ApCB(^yY}oO?3?IqXvF$Ybm4+wNjLh} zqy6C+ho~^Z|NFwrKn+o0$oWy`4f{3KlV@)>(VmYGMiYr1!hcYgfS9nsXE$%9&QC(^ zy<0QJu^CklwQZy~KccNhK3JnP!njbgVcAHmu#A_<&95gHEFzZ`k_33bJDZ&^`WC`Ed92YfGl1atG6(A+2U#7n za8~IlUmw#qsuqbim*IbhgLnoUUbUGIcP6LP0sqWZLl^IO`y zO7(+7o;h;{!pBeC(fA~Uiw54&{A%-15q};u1tz(G3$D1*Wv|$&TvdgPy5^I?{QLlT(z1Z{G`mWi$B|=4$`#0G%B_dr@?C4`D$%R z8VwvwS;;BhFFiV{E@KbBwk$VG$9&3q24F6ka{WinE1FSDL;@%G6FCpA26E>Pmpw3( z^*kd-cg4rZsh~y;&u$8a$Zc!@={p3OOa4cmHI1VBG%p5s$S(>X;6uvME{oD*Fk(k7 z5Ag2!UUrCDuV18Y{ZF0y$6N38Z;QTWvJ^Vq2X{Tk6#qo{7>kRPoo=OGYITD3lmpe7 z>}A=Ze^owu3Uz8w4j+qNsJr;bLcQ3c$p->%|*~_v-#^lEu{mn@Z1M3>EA0;?E$9@=$2Ew6g5~P*zj&%HDrD;p!PG;9IiFx;4NQZiJKKwIx4P*?i2{xsbpf=6DEWW@L4&jR*UO_}x!WGWcpn=q1uJLkV^y-RiY7PVZN zm-#T;+of$?Tp*@puyGVQ?*=6xPw`7}^j&>NnRJsoa~)B|LCaeiFTf2)uiWyu+Sv}# z`Um{>LJyk|cUt`YIAssh2p6+FOC$loeE6E|B?TSg2(3_9h$~N1A^dQ)mJvqoi;&hj z$E&>D3&0F)QioRA^sDNmGM!`;SfUDQ!m5x+XH0W{dH{j;u{c|cp0T$rhynA|j3cEs zz1Z^HCd{?%_&)mWhfDA#`+4jZ^J-;8;KKQQa(MJ2%#x(7@F_tJ0aT$e<7rvA4~xdgO@jL&$I=+YXZ*H`|M-4! zT#Wyh^MX#urk;A#tdE zaPjYP6FjAPih)t+v~SzJy7N4fL4{auQUn)CY78Sx`5i-?oPjuE6)yu)5y-WLm|IDz z+&2o5VZEg)Cs1^OmdS#Cjot`sGRwu)9hla{>M3M-N0y@<_kP#i`=t@CkHGD}2f5o7L(PkX&!2(TP9K%|ww|B+Y;9atGg_Kx?|zq^#~XNk*ZCXG zv!YZ4;wE;1Uq;}g1j)7dXqwtWv}iLgxZXF+tNUu$2N%g0`;?v2bk0Hm--B3 zuQ^CKg(NO4(6O@3(dNP7Qk{IuiqSjoW9+*s3#kz=RALd)i{OO!xOymETa`iRtINvhFi(k#DdCi|*RqP! zRbUQ**V2DNC`a>5!qNxHpAScg_>X}`@JHz2JByGH4!y#zu?`Ki(5c;>aS`THdAy6E zCx%kJG+ggYWsA1>vUHB54nwA}6mp%iTq@?g{wak>$5oN1_B<}@jyfVY#QR#_fUCvvT>q0h3jGkQ((ki9)XwaPFoqi~A-2)JW_wxLiyQD+- z4|qi2gVMlG^)>!X-USu-Tfb9yM63lNixA2u5&f!Cvp>tfqXj2RG&$$XGr}Lx?ufKm z5GMl9Kw>y85bD5HU?GD`Z5bx^)nV@mc>r#sIU?x0^LRD0B%)WN&mYn@Ld=2_1>2;9 zcJs8cvJviNSc-AM3PU0pvbfGf9aN0z7UGj?i_6BEmQsa0;%MubP;r6Vh2+soGv1AOJQ*cCt=?7ur5ksRhC zVjgnuPdY@%Ru_~f9`GkV*=3H9K`F1zE&`>bsJKSIf&1~pZ1G^fTp-6q&;lQmE2@~% zjdo&;SDU@pDP?^1wwc0jXuJ*UM$Ba)_dVsF1Mex}_e;+!r>C92;&0)B&*&RspQC?!o_e$H^uK;}3j7G~i@NJO z9tIGKBcz6cSP*c7oQV*pf7@cNbcVA882*4(PICTR1u2tZRRUkWm1iX?D4QIN^$moh%a z1S40Q8G<3{W;DypQh%_@{>jy3z0ZkAs043oO2ADQm{^vvQTy7IrTJiGl%3t=sbi5(+0 z(<;B&A1C8WjQ#>vM)X#QDT+${+R|0>T1%U>rf^ZUTJsHdUw*{J*ABoCxF~ZDSRR*K z24g|4L{nfgq36%h$1G<1d5-X+bMqLX7E7^+P@k4SS}#D}cq9mhAQQOn^Ig`kG}eask#aBYCC|<+TRk=?-*Xg8|`h)IECbF=VDwW1Fqr$8Id9E6{j z2uME4?NG=DKX}B%UjRz2oACTwT)&1WSiq%f^iPsUsM=k%v6T|K1gx#F5K)rcmdV(b z{xN>{cQSo8hIb7fYoXdq$7T*=HEsKsQS(uYm+P?^sGbyD9uG^#0m5ShyDw8!Z{xS= zI`xXh0pTJQi2$~h%NNarl)Ya?63JJDVm^K{e?cFaSYO{~zuJE7donPseYLtc4*Wd+ z{#k_f^>bon9k0(TVH4Hns_yjin3^E=`zRwaqHi2HhuWy>iNr7l`ac7CeFlu$d7jaZ zjcWb|0%sEz(nr5TV;yTT3Yye#I50bJW7UDpa6Rs$oE$&Ca|i6I{mD7VBYZkg$K=A1 zr$fJg_(Bb0va840`(evq7HCl!B2BP?kBlv;5^iCFcR))88K0CB*E+!(@Ca2|8(qN2~qGh@y`o_fts4gJs! zS5&yr<{rfhg~~APnv)YV>w3=a@owE(1G_1TkPNR-Tbws`ydqHo#S-UmYAsC2YTjXL z>yr>oxD7+wQHn)E8r`of*P{DP@ zqn}Ec?(`ZzF3p^Dx;vFOvYzMpelG5goZ{-+V^mQSv$!5psr28Zj@4KODP&*x95GuI zI?cK`6`Y=1UOK5VfFp=&5;;3{qn*E$`~gx9lS+PzPt=Yj1=7KJgo;-n2(o-T&r+A5`+3zY9{}l*C7s#G-(?7kc!q4J1a3MNzwL8NhNCPWjz9zp7eOWf$y-iTd z_Zx)lG+H9wr@{57snBh`PbDrsj(?waJsGuZUG;CAK;V5odDJ!Ix=8xc69Dx3vV=kT zyieils>~QJ<1Fb4hf$k`$MC!#O?sO9wma^x;4*>@~bV{Oq%(P2= zY0W#{fj467YNfc1Su{Yno2ldXDGqjEbd#`1*je!8Gx*)=-`v-kf`-;x3tw_}#bF}Q z`L##SxGmV@27ea*SePdC&1_a296rWf&0?ka&BJT;_xpaP&M3|CjE43TD?@Uw zLa{AcC1drkR)pp5V;M2gyx8Zezi;TD@(zr8mvo_diP<@vsyzhz`>p>m0UdxLkPez9 zG6vy=z3xgU8oQ{%&{$4K@# zPDc!LS(mrF$hwN^`Nj;;!MBvOeiJW83T9p>ADrM!PL@!%RQpMONIRSoO$yqZ-&p7j zU{+3I&kWMD<)v#4!p9WlO-pt=Vy!jYFbBn57XZVabe(ldlqJpDK6=;tuz=KK7p3Nq zqkK}(1t4k$-GXzW?4SSp;CHt-^cJ;UFi&Vc&dfN#pJj% zlE>4ED#eiE+s2f?mPi`yB@6ew6`Fu4apu@~Bxa@WD7#5RQV!oUpz8Ogz!&n>#UOW%$Z6G6a#BI?8q%8ybU%ta^*ojhy z!rQ9$^48a%`j}XBov>x+)Y<$6kq!L4m=al_y@Pe|dm^wnw%gpJBPn7_tJ0339PFMm z+CL5~GL2>LrO|EQleeg9KB6%niq?`P@y5S5uf2NPCTTyz_Xn-qOeku?)I`cTnX(3> z9Vqc$`VmrtU1T(uv$)gjKWs7o2<#uXkclSga8$kbY(AuXG+l<~ByT>ynAB>uE|p9) zC56%tg-6i4F(THC#vbeU$a3;BktD;@MCU41aL*@M-}JQ4X<9}4#Z{h$dY9CWWY}Uq z;1wo4pJsB*lvB#M+mjAd>D)ifHd*URZ)+1P zxI!IZe5%@|J~o6EC@cUryQefftdc|cMH2e`^`~MRueBDob6*r&n?79)g}r9*)y_D1 zzV8NW>iz6w@XBzIyiS{6w@`NOlhLeV6iCbJrN;p1Du(Rw-3Z*uh50OQU-e zi++g}7ebWQD~>Lei1uOUhem;YJ0Y8ZiYmPEK&>6;-7Z>4$&o0aAZU#D{?$jSv4jQX z`K6r%QX%#D+ZtRGEq^h=Hwd=Kx=lz(R?0NEBIqwL&o;a9noaPUG8K;tg0psC(JS80 zWW_Dj?2H95yNm=gG7@3Fan4l){2rjKB^1dFZe&(p?(f}pCrmPbhEF!3WKrmqi4$4Bk{kA#rFP(lHzSDcpZ2NaSBkC0m2yP{cU4)% z$M_XU(8k1O+>>{J)gE^{<%jv3Ec-ImGM}G@ELuc=DChkHW+oRrdj?+mcLtCm|CT0r zDr@3=k)P2WP0XA^FOkml$B(H@ab`&>S+m+W-~{QS2cYwc@Ytdwj^pZvPy;oKesv8i z*8&)8vol0a&S!I-0Qw{;<>l_m0~YA4L&Tmo+h|hJBDTqplQTen<2yYu3m_BSyET;IkYYw(tZGm)MV1 zBZiI9wvIfk8)!YDG!@i-lg0B&S#Be4G^T^Y?YtJPm4s{6xk1cSzyGRhRdymeBd(mFy5#FkW`+_r3%94;|7Vb6xoEbLq+udR;|Evr)1vIw8Z##WcxjmH zm)4pv<@ZH?{GsLCbw;#FNe$9V~GXjx`WHkU2zsPi~~nu6K&8uj*v;^Kkkwo`dz2=NWGfN8&i_ zmlblhbg{`DXjhogMdT#g5Wzv;Et-HtwyTn@Jf(xHhaP!oIZOXQE+cPRRj@WWd|s_D zZy_EBW?XislMMy&HwMYFCSg`2=c`M>Ula0WB4Q#hlOdI0UPCvTF#33R+$vi~)v9Cn zp0X%r;Zpx9U!aiI$_A3gvgOWBJ*Bd*(iNh1oE^A@-`$4cv84dpra-G@3rafLweI&v z>tA(GzR_&GWx^;Qd;>W1T<$?Y!G7FYKD;Gc!l!^{iN*Cnp3Thj)X5PegS;J|(5w#> zRd~#L`g-%Fz~RT(@5$Oc_=RE-jQ!rMWC5}A<42@Sn;zdmqfzHQP3>lpk2@EyGK&Os z^I|uF+>MOkg#SA$0h#3YTbW>+ITCczfTSdOriSnWH=+gGXHics`=#>YkcChNOicLX zU!W*19>=g;h0vUFj_R1}O9u54)!1n2kvMU_QOASJvfoAmGCMFCQ3d(q7}r@8&J_Iw zTd3-OIn`xTEqt8nPUyE!hHsCCs8wx&t~dwQBU`#kV&H2q@46a0aT+ba5-Vk8{r?Ox zP4GEQ3Znvvbi;o_Ns6)*_0@qT#0i+?UKh&DTC18IUv++DH&TykuweCJE}Nyzx6V9= zw=S^;QY{de7r2pVgMo_5XGtw%ggk#MWMMF?P1>Nig0t@Smk zhe6O=2B!a7=YjR3LMX}Og-zhG)bNJ*vgt*`O(a6{D`>7jF_{KNLp%WH^QS26J=tIG zXF%0q`h<9CFEDEk>W|QcGA50A41BZs#O=Fnu|YQGBTNg(m3l_=2JcI4V?jovbwtyY z2`pv^3o^Pxi+85DvO$#}neq*BcJ$#8XIhv`4zUHT)+?geW@6lki84K4TE=3+Cnn$d zoi}69D4&uhNxTgmYUuFkcRj6??N^mqZ``P)(d`>YzR3xwRVGr)5qG)U-{WnE>txyb z+SS5zzn#}V3you?LqwvWs|ObK3T#QEEslS#uA~t))T-C@{plLj)Ejmcet5`kYyJK4 zt%jf6qsE>=*7h<@rgq};*g)0eHQ*$l#eIUn`ZZ%0piRa_a zxn}ZtiU2_?P2FLUIhC2qx`V0LRs1HWR3e`vm(-if{XlV=ndW2UYhzw+?lXWztrqBU=lin<1 zZo}5Vy`uL;h(HuB{a}S2rPq@+do#^vxYh}#+uFcKV&k7k38w9YUSYJOz(?d0t5M%u zYw7f-8I(D`fa9#&xJr_E*LQRruaj27ti4A z9Ax%R??zo;9mOH4=TauT|U4RO}G&gR3g-DROy3bads_}Jo5k% z8Wj!w!DgDbJ5yM)(>SWr2tFA(Kmxwyhy!B+`$p9~|Du^JX4Kh}yl+AO+mMtd_XY|X z(aJ%aC+A6be0PFn{xdgZeBgb+d}_|@vr7}Bf^xZjTu!Hd7pe92xOWPw_CbIqsX0jh z`&^Q}mhc&ifOy2x)aq;|Td8zKa?3Q$Ab_oyl^~NbwkUa?(J37^UGAVw~TE;sDxm9!fD& z?jh@rTo*0UCR2L_3l1rc+#tXn6(*wRrW&Ma=~Sw542id*GYEHjB4K&!x<#Pm zTV0CZl&KKjs1h6b_1kHI<5vQSp4Yr24-J0vac52CQc>SZ3O;t>>7=@m;`UEr*Jcn! zDf*oNxq@x*bve;bp*P*ZHa`IK-Chd1@MI&iP1T3mRxindhe|5xKemclZh1lGguhRM z_Xp=k?Pu?DtGn@z)!T#WU*arLB_A_gon;#mek=00mwvK*s)v%DdYYJ>|JCsr5E}?X z{GD@uiUIzivfvXrd$H(fG)i}J=}j4~qnj{C^(T19#o~jb8mPVNr|AV!M%I7lkFfeu^^P||4tJ3pG zJ}2TSaE2-D5zM<~kwJ`Oe`SLep0I3tXy_ti_1)Fh%ibqu_D*CnE3v2??4pUv-T)a6 z{Fu#avH);1gwx0IOTX2Rw2qLs@gm~U)p2+L%!vAs#gyV_2q+B81!Ive_K77b&eQcW z=Ah^c()lZRlX+4X#(yaINnN`)uQzCND7i3ZN3ZFtUy3+7b;j7Z@Ez)ca(90%2i<-@ z8COC*uN=wPLB?hh@BK^*npdPK#JO=3bh@%Sv`eMrfMqmAdvLvYCW=uiVIO~VBf*U1 zwLp7?V(OXHUeeQ;{-vF-DXG2k@UY`cf_YoF5IXL9&bcJW@9$CZWQF-_H}YB2Pu4#n z_+}w@JUMB9Uv3DUj!(TF4#9LRVm+*In`iF>@obPhI+6Z z@`0EQC`+S)1(q}*q#mm;^Sv#-6}lLqalUFNuUII2)Qq3?c-uqF!u@eNr)|qx5>B+| zUK{%|1|2h!$(*sfhH@2=CM5a61R-S09xZ$gp^?S|YSN^OE$Jm=e(_iI_|CBi=DS== z5J-^1+dU3KJVkg^YGgnDPFOCINdQtuw;V?$kk5-9K94!A_6fK@lHdLC=Ms?9FWN+} z`&Mass;=db`PJaBU@?&3Q-$K(Z7+b;6aH%|v~4~o56hi5ugHdO8s?Bh`N6muvxVg^>DK-1=i>qtOiNpPH}UQNpBtfS+m8;AkH;N8e~GGz9=2Q)-2 zq<;-L%pBe-?+cVMN=tQuoD0RA&6vnzVvhJ##-x51eKzr+mqS0XfyB@7B%JHSY>wBP zOYYA9OOFG=vJU{zn;5}(PfK;S15=suTrtD|bVDeT);46J#|Rw3+x@F{#VqdnM3egI z6ZavNl3q8Xr?!r4)ZNHvtep^`VpUo4q*kmiQ@vwIK393v>cjg;L$r4s1=ZiCJ&uEe zzUUTT38pn-Y$C~K2Pp(lmww~zaNQyr_gpe2#2ynVX#{L4=u8|anM*bX(@yg^ca1^S2IphBE~$t~=O$9AW`WrXRDy#{H}=hA2S(bYdAO{a=n!VC%*LS> z45?BKCP5JBS2EAcp<-RczrElg#zuWJRt&jKs^)2xx;^}7ro?H8aJl4cehuc&adQS+ zz%v%U27l8v*yXz+jSOQdB{4vk@S%v?BnhTQf&W#x?@%L&XhoyLpYbkEjN0;t$uO-B z?*dLrJ&*|I;KB?uOrg~YuV^26K|)0N`@l^lZQ!o8 zzvEDf3v8xR57mN2Vsa;y1)n0P=c+vwNePajP=o2gc=8Gn=2n{b`(1& zutz@SL3Nq>3*h$pC`r`F2gh%0D?)KaLYZnL7L&-MvW5oF!VS?+5jlZ2L%NwkNfE0M zdBCepgvId_c}d8^LH!g8QbRVsG=Aee1vF?iMYkl2Ad+I#rg#Z0Yp~%B0I=GQL_9sI zM#F{lT{5?gMJ}|V{{pVhFiI_bJ;iuY?XU_NR^o)E8<#bv1-Tk*0mkRL42{5jfzEYd z=i;No3`V^?KJG4ibWZmEUHgzD;ZeL3YZVMNi!7)0Rdjx=In zb3@{xTceRrv9!g0m&s3HZ=*_}T^CSn4tYt+jnE{h@2>czC*Q-LTm+H+Nk3fJ`MW11 zKk8gd$9R)zP-d&MK{KFn`J0|$^hdj5GaDB5t^wyw&6&jHbq@m06OnAJLDU}^MUdtF zQ!jD4U|Mz{C=@eRKZlFW2J>4C<17ILC<^me1MDPqwIM$^6uwv3t2zJ0G%+ybZXRK5 zei#}83U&_8+3tKDv``lUcy)n4UyC*q(0oO9*cXz&U9ne)k<4 zuQDihPXq6R_75AyLLWfPkl^5{rC|K9#zzXk>1LXvePcyhRYFrr+<~8kRwcV>iitYa zE6^*@ZUIZsoVtvQe}zL$$o->#;(=`j#UX)3%QslCMBPTd>jIIRRA!kxu(;HYT<4)= z=C&+tvoXH;!18qkB}!L}T7XF-#jV8>8292GX1h7Zw~=u-duOtKsgAosDe9m5=7tfx z<&W-okjH!X)7{uj#FHPTGAk*6&BHr(y7$paPAVUOaQ?99z1=A?u=@-}T%JPO)#Z=L zIeg}M>G%XwsIOM#0weMet{M%vdEK?TLNxo4IHQys6La?0QL#T#{KqLu9LE5Dw>I$S zK8jO65t4zt)^7Y#zc`abp8Qm)mn%cBz#9Ij_|7r`!txToC*SsD7g!x#I6JDng_jzx zHJSkLbE+nLRc2c^=a8Sol$A94p#MY^=8zN^YkP;9R2gW#a3E|R1B{Q7qGA~^ zmCBfnp&_R@if@t!x=ion*?I>4Flkf`&<;IliEfe7 z9|zzXyj}YTt_D1yu3(RxBRX|7_q^%qzojs1dG`JoTXdh;6Ep~@SaABFyK=ljQlvp% zVq+OwEDUSoKe;N0+1Eo;*U-Op{-6?So==hDZGppJ4I&~yWQ>oLuZ61wrYik|w_>5j$uN8d8*Ci0Oet^2^3CT@{$#;zD{Tlc+RWRtVL_ z;zQI}e6^)Z(^XE{|Fn0b{>p;=cI!;YwQ5Xplg|0&*1%!fjQv6y2c*W(LO5LRj?5=H z?CX29)Wz<$=YMhs`yLCzbP#k9eEAJoww?==9t#@j=gb76+U#lQ0zlC)yMYKwG$zw0 z6|h=I`{_fB11$yWm@EQ`;RVEK7U|RjD!+7sDuWBeu>vP~*glsZ;EpG7={e0j2fvXc zH=#xH+N*7%Tugb9jN%fQFySIVRrblnJtjU15wtr`2hAWI;X^HYkRb^IDPO!=q{))|qDCwcdpJoRncAGZ8+ z+&JLKK3fePS7bAl5p`lI9R}R)w2c9ZBb&b(gc+2KN9bNUj!Y*p16R@8rM{v3R%EFE)1!>I2*@#bDl-+SE44W z(m_ZNQ7mw{hx9A`++WOTxu|+nG@I(0X~Q+;^b~;hDi;HpD&h%b-W#RYR1nf0!OIj^ zII|mkS;zr`o%!j+jxY1q6^Kg~=qlICa&{jM=zW>w1hPwG$X zrCiMmvXWJjvyD9&yRwC5DaI||br_m@!g^7$RMZ!ISN9m}7gAbt(DcNyGTkKJh9J(i zfoYX{y^bB=%EK!%ulrc4d_yQO0&B-TviUgI)$VO6!PvU*m9joyn6*nqpxf-h>t}tN zSod{R@(k1Rrpy2`;yE28MH>)GKDgJ_qS|P!1HaCDW02urj+Aw^U3m&&&RyDmd#ijT zM5aCgLaK)Kza=IpOr6jaqqr|YR{75ozVB~47zzU3r{5pfS9*JMJ5SO)>_IHo)+L1S zVk2e%=0$Mi!hD)GzAU-YdVcFyhwhcdHp3^$6ILdi{KgySlCLYa@k*v%YpZWjlWSTl zt8ypY_r+MbHV$Sak|!+nt&ylP9vHHXu}OJMlC<`=-Iy8Az-IwlhlRGr8NZGsMB4a~ zyo_l2n750ekAaYl4QdNJ2Rq+t2bnfxZ=zrun7C1ASQ^YTc9%i^JyhR?SlUbqqDJ|+ zDS1b^?i(G()V2_mKC*CjaW1>xta~_ci$YoHj#kJ9~NDbX=s`V>fU!)-6T(F?^@^v3>yzJ zzE&r62-^=S5^d1i^$J$GHY5JX%t7UU&JC0a-^VI_x#IBw9G8YaoVW02_R1*^$?4VD z@WyX1_X?CV`t9IgTu(_<1ogSdvl9Kbafet$=N}^rG_kf&gQU;LnSU0fOs*il0yncBOry4{mxmC)Qn+%iawCc_+ z1{H7N*5H>IHjJEW!V+d!gj;_LYxRD*NK%=!zpHmEd8r<_V>h!2UDuF3JuP6jn@!< zsw!q*zOlOot3>=&e7y1{M&L!4vHD$e=xk-M>`bVF{8rbn&Z9 z=V8lN&KYk-x~Al@5!IVdPdAY*bf%P!KrVYygoEx%euQ_)n$CeZJD#YYpi`y_9{GkVREiuP6KU{2}%Z zTkkyY7ZQE@Yh|0cUmIKcZ`DsR-o}yest@}`|7l-$dm*7Ht37x|<#AzT>c3<>_v5dd zoo9IFTG(fr*?Vqf0WBN8C0kAx0Kf<{J9ti0vl-_y+JwG-pW>^4+^n;3Zy_>a#zeyB>-jQ!|`t|1CPYE^e5s zv7v!lr;@i23}LD@~i?bUHZbr5X_9Op^Wx z54e)qIREWCTUI(xX$J4LzSn~Ifo`A9q3i@g3~r?&`}w=ImXwH8lTh|RDvfqLkY1bv z93&xH^u1kEBrV6sxDG_(pE-1ULa$A5Xi*oFBvh}DTTnwlef7bK|WnO<{vIR%aeIwh4^%0HRP za&l(k*Q~{ijI5JlNP!j{ua%jA0)uiqb9iPd;5v&rftKQ7khy`}KUQpZmSuTme1jfYjIXC*ys2=xz` zP2GDI87uFVC{zIBU&##zyHZc+eVW$0k+wP~SI;!|c5V~Flk}Tk@PGHD+}<9}_C7oH z*FD+L3%+oBW^&x*-?yj_x(Tf1;Y4M8DL6%veoUn~0Lr~z=*gef1O&C%bfb85F>74K zjT`UVV!A%n-k0^(OZRRYt9Rb#sYf$Swk2QpWbDanXIB|mn%-rJyvt`k3QioS ze7}omH7jJ+*PG*aN&p;X)w)|HpLM11&Tkd`p^l8)ddJU8k$7j37eD*YWMq9#4#W(z zPr)Y}fjciso^N~a>-X|Jv-s`b7XWMD`&7Vv?x)QA9maPB@8hcQ-c{>D%7&{!Hld^- zWsKe$thK}kp5rxpj+R}exa<0J&tvk_8vm!s`$%f_+k<@=fagwo>(=8* zuBCqW35@OM$6B9STimF`KZ&&Bde$N$yp)2W(;1L|1B>N2WiiqN=gx&V~#uUq)*0rcmxug&{@`Mhj!w2)Q^WCu|_` zIpTu|6)9w}YfO-Tg@x&yf=%0sZNTkF2Ie)yF-%c6yVsoR(ux3!&msE%wO0PM^(U5q zoJ38ns0jWuANnS@^sMzgXU!x(wxZJ5&*_^=OEJTva@YI|A2z!I(FC=FM1#@GmVHXbC~2Xhu|!$#KDJg5n}YpQQBoE<1SvN3H$V4 zgf)W3!X)U#$g;`Z(2GyphIeJ?WtG{t^-2LkHEcwCwovKH0Ca0+-E|aS;hYwsJpn#> zPqf&(tI=y8^a`r+beT}lZ(8dk{F0*EwV9=Op0brt&fRd1>ub=Nvxye)@gj>H>un1n z+$|zrU!C4F?-J6|T7BQZ`^Y zj1k)?1m592aB50S7aaJ#c%d2&>mKOr8kT!y8{@?LMm331{xQeHyRQ4b+ujbr=RtjA zlP4s*b8Bx@JoR^7?JiETC;|M^2ELGOYluKsk(h_`3}KOP{BWTX2Nk@RK9r)sNRpC4E6 zC6XBf+5LzN@#3a2_Op(+-lv84ajbRYw)mgIDTH8K*IEnRFuqJ{SIw4}ReASUO7l|& zj`~L6^G+>hcI&32CnZ}|b%llVhZ1aNQYlnlS@JPslxt$G#eH+yn54~A6u**a1G$|* zMcuZXtD;)rTN3!x#AE%M6Iv7yztby9n=7qM@a+hk+*6)QaUks*z%_E>SKY6td)cDm$|+&5J3w3hrsxV(A(�awgJ%J%iRBL`YxVwVD; zf?Xgk1s!Gc*Mu_y(YVVVxh>lqdOxFQdF!uEBL)cTeB;IsSJ#wvdRUK@Ods=7E7!ph zkoM?DvJWM<184TPcczqzIvw4VT3UPU!k5M8six3-8l0JGvCecLib3K(Ole=?FEK4Z zzN<@Vv|xni?zjh83)Z8;_fB0~4o;%$QOUDIRbo@i<4c8rk%iHXfBCxYuTvR4&hWjp zA;%%(!$SkmuF3LCB>1#%8@bKQoQcY3JNMPb4fq4e0YQeq!(5&9YixAYqbFh-1uve3 z)uTHX7l!E(2cp;$M(PKiBi_|X(8^5rN(3A4H^HA_(@9aNeOJ09rOsV$bD3(b_JwSm zDJ2vV4fsm8ezF4__Zb}}wFf*G%J$tEdde$Lz1N?79phJS_<(freLbtzuFVyK#p%E+ z)@B9Ea*4^q$nt~JtLK`hD_;=rw&tzZS_mA~woici`L6&l9SaP1-zU&PNrI0Z8`F*x zVUl#>;g0FZXWicH(ywW5ij)fLrR{o|&+dxN_OlJNjfE}xOFM#|Sgt8a8DK@l&nqio zX};TW*JoU5^yaRUMp2YXnHo5z2ZSg4L1lt(*-|}%^SPbtK)|!9X(ZcMCqij3!`KkP z=0eWf%QXd6wC5)`f$mb(0-Qp_pZ2;PI%qFdTKp$ zejV!}+8BD$n^r1dh7s>)pW@Hm&gYh9pmX!wzg4`Cg#=C7c3fLunYrImLS};uaiW6?2Y% zE}F1e7`>1?um&;(dkuhX6`VRQV}mXmqxe~=i|R{vMh;X@5^J%JgYax)UZ@2BPMo4& z?ELYRr8D?pDw;J3Rd50n+#^^9mwcin=>Do)EsYcI^d&B}QUOc+s18Uj`yp1^ClQ*Y zG#ToWd=c)FdiiU8T+GrbL^9+`e<^^6hokQ!6ryh#)lKYp`?* zldCnY-7jqO)OX2^&peJ9{I#P`On36Ed=o+cY4L_1)?zO*4sQ=Iy%f>fOTAg1jjVd_ zu3XK{`kas1dY_!%Jy*oHxy`!XgP&Uv#L0QO`EDgVNp;4q=+rxb#(P%)>W?wLxwBGnWU86%C_@%Qc66Qnb2(6*`FLoPUE;YQLFN6JpbWH&1nbuJP z?>t?uXBCZ91u=W@=`L(3K%aH~R0t#(}v}5ysyiz8!9 z^lgZ)j*J-(1(ZWo(6|Vh>+ZGYN(q%lrSn3&6dsq_%x;bTA&sH`C`*_b8%JJW9LO$cSpFKUH^ELq|{*lZep-1uLj-&t9{=D^G$Ibm{bN82>r*lrnGnNJpqI9X4~kc?%=naaQRy4P8>(oY$Gzg`>TIrfF(LZl5%+ZXXY55JxU!)n)| zg`BTmx1OdBQrFuta-wDYMmOZLP_jq}r8M$El&gadn9Nb&y3P^gbVkeHnbC1VIHGhd_^85*DpDN`iN|Gn7= zxFz7*%z>F)QSbR+XR`9T*WR)DzW4k}eHz)YOKnZw&vF0}^!T(dF_D)YD?A-^NO;Bd5^}aWFD^eBp&k{;k|%!Vy0x;H#v~Egf1hJC)-v zf232#qE)Cu@s&EZ(KiMp23Et;|B+!+S0bj`v*~5kxQLIsMqEG+^McWTfD3p|%=J#^ zRfu1m*PUiqXB0w4PX|qeN2kIrtv>Ug`JuqwGI7+&gv+#xKYUMYk}-%wi`7su&|}*W z6E9Gl2#~j}`*>69XU@T!W(2)1`HzOfj(*WtF}4^ajcbIwQ+S)Gdi!Dsjzq9SmARo9 zV32gtxQT3n8g^)Ovlv+FmXx46s^39Jn8F^5M93rOC}eDn5ciA6hz=JQS3S23EK5{n zqK{%qtB7z1UrG)fDpcxR7v_7EJLb2c#Ou(;xaw9jYV6}PVMNIN(=vMR0Q~wm8T|C9 zzFR#4y+IE6xd$QcRQ4C20WS+(O zM~Za!{n=L@stv#EyXR?2S-vIu5eD$lUTPY>21lP&{ZFF2<_1DYdSG36zokzmm00&B zc@>p?ey_P0GPn)7##vj6MT{ZAUwLRBQmziU|<9ixk7hv10ZO4I6wPvq&7f}q^ z+zxnR4*|FA=6yZ2GWqQ#5zZLK*ozHj{rO6UiBc znS4FQHu5V$DQK96Cr(Ds=o21SHUX+DJ%{I8=>6xg#B$Glwtdr5B2pwl(Ov#E|4&}n z4|lz|*tWDhF5**3U}=D;3G&=4Vd|w)q2h@$q1+?KgsM{_3qiwA-7DaT2qoE; zasWoX$%D52C;Zs=;gpz^PbL$!hfJ0$*~fiIR1MqGl(b}2>zW?1wna-N{A&Ul>~Z}Z zM9X+89Los7Yyz3_BPDO#YYxmL*#zRXh6B#j0A)9;8RFq8$kVus$p;2V;@vb{@0pbYDM#znh|s!V^63KjizAA>4%Q7Q4FWkT(4m!jbiy5@#1b)poo?Z+7lJ{hVsq=c@obAt& zbnfPE7b5_XK9w%Esa5B=jh-$dLUQs#rL;-W@%!Jbi_On6Lil(C$~q*(n;H-8OE+6Q zNs2WI`O#mQT{tG`kwAZ$Sg+jY?Fm}Xp}&AT-t9OpnF*gv$~n1^8nYg{|=6-qY+HFXTsXpR>+M+qwD%!S}8CI*Os@U-JFn=^W4eY#1TO+j);b z?*wb4Tpusl^1;*r=;pusCSLk5mo6ey(<^~G*^wHh&KS!iORs9A`5LJ-yRVTL8?WxJ zg-vF*FG?DoS8tKui}FX%T$i?1MG`)9^ z_mlkB&Qmh|mq+Kz2SW1I=h)L)*`uq;leTTG$JWJ$w(qg|K*XO!A>ptM;+D^e<5$TrR2Qh>$?9J~1UPk_)v*QPJ4%_4$ zj52>rh0*9rqQDmky}y5@|8SZC6foF*iMHBM%r{T%*1n5b+*TvOxLO~?+MV9Ha$lputz zcp3it*3F3ow-!SK)n92)e9moaL|wZ(Vs`T-dJk%Q1ds3ga4W+U;3n^;5 zvm$nvna%Ojv8$CDoMXLR1@xzE-L9{mH{7n8(>?~WBivpIF=qa}!&Hu2;sNxGr>3~K z383%?j0UkL&e^L);=r|?62QCyvixJ{GY;H2^t?AR(RPYq1JA6)m4e&DsrFGvfj9~B zF9eCh`EA^Kiu&vHd1>lLw+GPpQANh@WH9>oSPn-B;`6U}(D#~XcWyO?vOZ&cN%lrP zX%4n}oH(YuYf5idEH1KMO15PcG(Ua3oq8p8wjLMF9Iu2xYSo|+X`1VO^upnT8YBpj zz;-PtbBTy!`R*jNz0G9X!i(VC&m_hp+0_tybriOg5r(MRINXA}bku7&nXm*<(kp+9 z49#(}r3L5ld;gYumshu<*x-L8+FSEGj%uTU`dYnKAgk!ay!3l6=Rx|-? z6@eJc6GAd?TBGZ(+savwb{Ysqh?3`B(~ktWFk~3;YUy&XZQq2jhy1xT8S>VJ4))YI zrqe}y-5d5%9}O7$JPnO)w*RRx0R*3gIQyH*f^vfwbQ9X}1yD~tsEq2?d+Y8`n`>d+ zZo_~8N8$u|Z6|-cj-vSFYl1h7$aO%^gbKorLQ%#JAVARW z1}q3EhWp-~UbPE_4@_Kf)Ea;`Yk#K5b)0l*ATd%eyZu&^QkK>*e!A9#7d-lai&yv; z*_$I)-zgLE5bh~ouQ#qMO9h0pN^iRm2}0~>RY^y6c>IGU>*UcxsHCvuG4$5rm!yjv zC0A~u7GSUL!Y)$!wq8Je)Dfe0mP`Gl1mS@zb{97}g(RAJI75jES|Yfo(y?awo}7)Ox?r^gzbYl~hq>;-OPf(l1^N{kzSqUMh8 zo=4uFq28O1FTUy4+Eq@fYxbpguD6L9e??$MPwV9c>Y|}Mh47aDS@&~lD2mrq2{%E4 zkBF!5L2IDG9Kuk$_bGhm7l05Bse$-#P8Gp*t#CT5@%y4gDExq%nLX!|gg{B4KegQ0Z)JuKlkq zFr{2QVP$O~<{luDm9bGGMGe1P2&YQ0zDcb!&b5ZMa>$rB#U{z%5{`9i#f6GHP2WAO zCE_vdq48`u++9QgROcr)hs8gL;dahv<)Fu(;$Q4-P!ro(ZQXKSa;Bu z7KWurk!prIfE$`0%a9mFY*>zoz(g^H$5IxbcMO3SNGmUP95bXtRwm6HXgw81M{-Jx z>zmNow?OAW8daEmF-4qnN|d$hf+943*86sL-ZOLGv!mW@{ajNa2ZXmrv+4S0X?y3Z z$L;#OOP+V;y-SwPc1yb&$aC=J^n}VIQa|_f+I1n`Lmoo4`F)%ZAxT$GR&FeTj6VLk z*LTn>73~QI3G#o!9iHT-_IpSE2+zJ#$XSd0^aEy^od4rX(>WRT-y*AKV8GNHgKXfM zWuPpFKc=*t1>|i)<8;z64957&OHh_y{_w)6+`tw>JMCq6V-sE}9H-Mu)0fTYj&B>a zG48R8?rW9HAZ38*@2O5d@!1w2y73pc04AaR0LiYgE+%j?oXl%3E$Q!ncBReucX!DC zn&k9bKy+9sPJZJVf@=`c&d_n#PW%9Z;M*7Z3)oc>I}bJ>2+Mx2T-TE+oko|ZKv9oi zZxLX~(UHB6C^vLE9ZG3^2pEqj&xg}6TpXNas;T>8dR}e4*9!GP$qpRBvpDsvch9@? zl@Gq-2*>6YOR+m$-8*^yw|t(DSz(42KN+Om)5{$Xsw`!Uv2c_^YTqKq(Mi20rq|r> zdkiNwjY|H{1y!df&fZE+j#~xvDXfbXi{J8W5dtyr5n!cwK$YJ!7~j*F)Ww~7>`g(K z{`7_MsgrlF*Q_WnY;C!(S}^#=-wKWGspE$QXC?>s$|u{=8Ga52a4O(fKtFIYjP>-# zwnX5B29xa6jU7Kf=h#M>?!UsmJ6KeJ9omqLAWNYSG zQ3F8(ZPkKw5xJA2Fa6Xrpail2wB#%T`-1u0RQww7ZSNu~{^20PMhw#<)!Myuj-!rp5s|PT<(-C? zrB|A6+UsdP+0NG@ItV$$BX+Nt>%+1TqHq6tuV%rjM6V_}Phx;7iadBTSN5kur{{Iq zzj?kq9)ZZiZ^IguTs^Fm8pMD~U+=a~s15TS$$$4qTMMYZ>%6t|WxBtm@oq3C#5`N4 zd;WW<6}zK)#IOC#mH;Vw%fK1<+CEoTn;AtONFxIIPuzzAeQ&E9pfg6&4@2o_OzJMv z#{wc>P^0iyVOj!tW5HOJtXf9qF^T{#I^_O--=~M{XNMkzg(wV_WfC=w!k*s8_Z~pN zi8GclLz~IoNwXHIR})+iwv)|I*&ZwcC^AH5kRle#0t%oh;rb4sd}U6NBH=#%Gc9bS z%DW5_QE@~ltcm`Ih>rkc3ROw9oPPmp`BdrUyAQcU#}`1#6T-7Az(DnI02_-ML;d9i z%qgty_$kAf$XxIMhA2jOKeiYy=9+Sxi-TUXUJiGKal+|8$d87i0i0F7!x1ZE1EMgd z?uY7k_oMJ*iQhOj7|WT19O9wAWa2sQIvs?mAKgc_B3D1u&o%32zaF(3b7~;slPNa2 zON>gkiE84*M zq=?`ua*7-VO(%nKnfXF!r%lX}Y0QiM4T`}GjMPIKWHkX(*yMF0tKH<1flUo-V>r)0 zd|)6sPmbd`$EbE(=UL)}M|xSR82mkA6|(}x?8FR+#pP++r^g@1e$md2%DS!z?n#sXL2Nh6r0?mQ&Q)eD6@IJD0G zfGcVnzkGulv+=q5BF21TS3Z22Z+>UJ_&~z(0(#_G`qW)ubt_J|lI+$pSx>my;9^jf zHULcTHe2W9v6;~6&|-VbVS_^a62jKGJQf(dV*KVnQ!AcptDaT|Jszit4rt(@v@lDW zv$<*!dCyusDR^RrrY^i*dvqZP6T>+2aOZ_DxrBjYhPG-Et(2W>Kqr+%l%T#{Gkfb8p}o1|~fWARAkn z0HT}H?d+V5!pM{KOxfRILWZnL%mDXO3Iw;AGJte1DYXW&3S2i!z0wSR(>G&dPGe4B#BAbPt9XX_(wck*# zKfHWk-HcJ0G&f5byS=DE(}g@pC$`)Q*pU-TIGT8BY!xNxQ^;J?I;8C%qJ&{jQ(!6S zU0?4<cnZbsjQu9LxO>D@u@rTQO;E~I+4-KaHu)t%32>1mPQOO?%`0LC$p zPS3k}-+qFz>n@k@fU^2}$2#8wCtRlfbS9vS#WEg`!?2I{n>wC9512A^BZNpgwCTf> zvwa*OUW*;G6tglGj%t4xNraY&+3e5-R2$2&0@q|RX|lgd)*76M=Pc}MS%qZ~aTSzY zs-Qd`-@Rqe*JL#VFJqqM0`%TWF%n0q${KxSL_jjUjN#AuBotJu{rjhzDBaxJCL3Wv z&%V>AlTJ*P8Nsb|;+aTw{6UF)SeHnbDVo9H+1gqKS}``?yV5sX;X5)%M*MPr!EA0B zWc{08o>*_jrc?}NWBt1u4+PuACR4K64p+z7p2OWL^gFs1nEUhaRF3Z$pP^&R1ui4x zyt#}??IU|ff>LKMba=XChw1d| z|8FucB>=W%fGO9Imrs4@Q_J$Wbd;D8NG#K-PJEOD=aRXP^f}a7{R<4w6!$&n;O|!m z>nEre)GW5(Ks_ns%AP2cs5|x$p0DGYA-C1#FSP&ee z07)QXd7ya3eLfqbDX;b+F8Ztk+C{;mPA=2K9bdBdo@cyIqnw&K%P8NG1il>2m{^|b zJU~<<`sAeVHQHSQnR&VOeZjE#*y~Ad>>n2zbPgz#$nV?F>q&W^I}`@}LJk5TtS`xI zKSqde?_$;;$nDDEA(W=;@g!84g!!IPoGX|gF-Vax1QnfJ3OV>9BomlUU4w{>7apWi zJ1)c(q4bdx>yEM%91*d8JoZqX?+YAh`$HE07JL0fLS9NZaFfYaBjLo71zY?GoWW&; zKU~Zhj*u=#(+O(1wE52j$r0AHedkYpO6@4|jmg;fRMfwlEOyCqoi+UI zQ>6_OIvpVv@8cO_`j?2m;vd}S%>hHkS?lqIyY+WfXFHux-`LMS_nrF=$H?u`FCSNf z2!eAlgvw@Smy>sgSKN#phBZ%@wx-AueVJ2Mg94k~%##)x0O!56wla zZu0n8%Pkf_PECwX=x_yW-Y@N|^*3wW&oxL|RsLtI4x`cwhUtUN1B74JbKJy2bI z2lw3^uclu044t|VdscPhGOFD}F>{$omIjCiEm_wp(OBFtc>0OiAaK<+M2Sz<@R8dT2>m;|f#%GxN03zw z-KuIDcVzf$i$fef+SAjs@rj7xPn(~*>7K(KN2c6dy%bCH> z65ZHAM@IvY3dbPGqW)ZStjF&!$4s>-{|@)4N-Kucl~zMun_nuEra&c-sJi$vI8Mha zct9R0aBZ8ROcDtM@mV=)H}t-*lSd8w?K1b@1biQev}fXo!Vj|nj$-v3G}5z4ZEkx; z9u}BS_YMp^@XIv4h@Z_q=HW~(z7GA?@fRh)Iv5ssYq12c6dtGV?}tOT2OKL^4=yJ_ zPt?#Ai}~2rmlIY6W$hJWfzyN{0n3PJebAYY;f#d&a8;1z4?C`@sMZA_brqa7lO2$D zkU=*IjQM3NTF0%*O*v} zGnuX2*wYsj_t~-K(zc2vcgJ9D&Cxcg!Xcm zVfP1|<;m1T8q3ev#RXZ3`QZYrFvw-g)P5TRuLWu~v;^L(?Rs71mN~G4HcmgIF!d(u zkGLo%3#y??yy)k<^!xO@$8F@zlTN6M&|V(=Y}FQsdwy1Io8O;1tMQt4MhPq?$tle< z!m$qoeT$j8GX`mc)7elD6y)0rXM{2q2+Y))z~$T|(0cFqcPB*8`NIIsVtRh2D3F0) zCv?g2whg~frL#&7nMR8W@ISdRd1yw;`|-3 zK3Yfd6HDh#taoF79h&oV6NbX$E2RojKj4SH?{K`S-C~>e^&yd-V>CDdw3GOUDauo~Iqj&e40*uB6>|CR<(aaL23 z&!2jq3FS}y7VCyy#4W4HbS52{v#-_m&dddSC_sslE-UE0fV*Bs_ud*!y3dQmq}rva zaZiNR;bORM4#gAxdD8zIday_a+f8*CycyG{;M_?oMd^0V2Pg+6q(CT4(OmgVX#7AF zCT@^zr(-K{D;+AHVkHe_j7~xjPsIfqVd-x}q=)vTLM*;);ug+vYzP*rc!u&%;Q?-- zCP6MuA>m-UFOWVj;2kO18q>8EBwW0pB1IY`!3XP$n(GllFRc9ks3oTAQh#@2LMD_= zF$O12RG-sT#$%{t)pvz5@hgur!n@j4tcK~zRF4eh7(^Knu(tGFpdEiMFeEIz<+`#~ za=4#j7>v(bnd*^h46a*dj4;L3Lyb}Oi)62@P}F*Ef!|Friy!%Z?jzRpV>S4GlQ<#A z_*SuIn(3mm)kML0wd2jWlX;j93rteWE1s)|5VJNzQA}4s#l;34 zhAE3=kc!wbL44TP!YXrOw`Z-I!=(6bj~K0Y^>KUkNXB(If|SgQIPtkhvxhf0AHJa% z(l8Da_`lIdCGJ(*-wd#S^DYOMR z>ZV4q zgyd`|Q}zg$u?k>`Hzx{&GE|+m^}LG2>;T9f;Y7$vkA`He>R4h6sctWKF9%{9_*x0L z!~~B91&W#04>ri7Tjx-Rs#p7mXm8By#~l^qKg}W`tl2z^0*}cb&G#D5x1y zApn7Dl5||we^{U!K+~PEh^PyQq?o7hftci`2{WAxVx1kQy84k7dW)TXnEzOMkyQiK z3%UGQrpSbM2SbM3{qrKu+3ug6zrg794`I*NX5sH)$Xg!d2nATw1&x=KXiXLAfm1y} zyi|c)%+846#G(u$uR?Qd_BJ(@5h)F|9)}ZQCFaO>w?3CWK|eNNX%zLv=4vT7DS&3rk^_-pt3&(xMX|fwHEFvJ8I{e2o{O_gp>L1iZT%i->N5AwIA%cmTPnp@wK|R&28Z7+hl= z62(mcIA@S^9ewEViz5>?80Zy@%W;<+xEO;-HX*aeE^-}9nd-Tmv^m8^{OQXtC_)o& ztHY2JE4*J0f?|>FRKW?FLGtId0y+ls+_p4BGCQb$ zxe8g*nQ23oPizFHI86FzllxncAS>>3kvRDL4IhRN<4{5J7FNWpl7%m6?unHepEYa9hzIpaFQOUMpa55d;WpuAq9R?WX^xDUO0IV%)nh)_sbw89_S?9Dcf9N z)gJ&a){;}QjlDS0eQH0#y)s6nVh3eo6;Pcy)x@p5p}*VIAdh_83{`5qs{U&*h5!@W zZ2a*LrJD_%B>t#YW7}qYuN%?-{|yXpFexj~7%jZR<)rRn$qPylLu~m{+ce6)t6CHR zab-s)*>l|J6=2x38np2)pfVTN0)P5Lhpm@%u1e*8R5)6V1(A@@0~DD$aTP~s-fZYZ z4tdFb1b@*OCB8+g`d_qy(MN8_Mb#p~0ods0`M|#uL>d zDS;rWc&#B~%_>&eq>5%9kpze|R636}EZdST=bYrR>65Rp}kf5;dPUPq~S_N!JfS`R*;rZ zkPd9E%4K)a1DsUkk?#tT*jQ%0<*C*FS;#Nx1URv^8tfNF_!*mn3;)W>xOEL;)W@@#F;RYv6ChOz4 zht-H^yb4#l073^W08xP{G2}2j=4z!?DuM~dJylgmUT``1NZmK|fumLVKb>;o&a4wN zN!!d{L_z#sa3KXsr|bAUlTT*S>cnHRzcei7ZMfkH_0gv4DrJGo21l#Y#8ZKe2@)ML zg?5}&=#juJiVg#R0u0e4ami6?ivwd!t@(S!-8NJs6vf$?WjQs=g8_qSK`2m_x~Sb# z>oea&O(%|ETg{qFE4Ijyr8jY@gJS@xMMqZvgMg~&or|)Z=43|9`4blAht00)rk`Bp zO~-?q)r=$P7m9iSkUVPqXs1az{fhsnK0X^{m4{1xTG9EXVFRQ1qh<>(4h{6>`jRs0 zVG~wDSAmpZyWa^+Jk~@+6^{;MvdpBAc?V?F+eUvKzua0K{QUu5L)x$Iov3uL$^~c| zFTgH#sEOIdnV3z}HEnY_*BJ6fn*9sOeAI&WRsR1ARUt6iW+`F4k)DcR;{G@%dTNq` z!tQKVmbh$xQLOABS$Cp9A4Ly?Ocr?2Y6MA`ALA>n42Z}?pA9_nvdd{*o~=#`7h4_FikQ`I~!4=|QA~Hi5HS$}+0E z>e%TO620p*WrqwkDAjfApl4AcIa`|Xev%ZpYVwi93T0w z=)UQ3r2NL9eD`1L7axqsg1udXKt2rhXE?sG1V1y~<{RyN0c zpWNlZtmQJqVIrhJ18^ml4m0g*a*raeNuNsQY-lUVDVr`}Mjgg63udL?2{CatI%qTG zfk;daK{aNt1t6=z{_T`MFyuFkNPCc7=4LRrfrZUQHaYT6?CEHRDJ4Vd0^mY}zK*K5 zkXshO2Z$o5RV8mHb}Z26>qbK3rza}9guAs6rOy@p(pm|QuINM)Lh2@&QQT_giCzhO zVRU4+c+a?ZSx&4`BLWh)t*fpM%qIFY&%oJ8$tsU|xLJydH#pP!o=Ru2E!EA;=1=~X z@;R&$>Yy#psbQ2$*$Tzgr<7-1zvSVzXsO@ILFnV_ZqtMoF(q@Cp3ok19Pl@;U%#;9 zIO9CmIz}*c)s!?0C-uB8)Y}ZkMMG8Hsas1q%o=qyVBcnKge2Q>HLdY{x_N<&*Hd>U zMT}+|{1%_=ko|Mxy66q8Z}hx^WAr*Q28{3O^mx_E-Q(_$_03QBL_KE4rK?U(-5ud+ z9>>M8P&mQowi-sqNWb7lTpYc7sLE3y_q8?6%#5=xII*XOH`&jzP^nMF*5Zac{7vv)fY`wuTq~02iIw%u@;xKqEUiD-926 z;e3zgVzu`yulg3%Af7NIj1j-dAE*BQ18vnwfYeg<**+rRwjV-jwB_G4pi3wz=FbNr z=L$CGIC7QMq(s>F=kXYqkvl14YB{bOjd1ceY2Y(1Kez1Z&S;!uQ>j|0Tr=*IhE=y^ zsyW^wB%$c}@$PBU4>I@%K$1Qgy~i<7s5L0rSdKRl%t-Sf^xjOdd8q8|%2_AV29|+% z*~ufjG0Qcvm^$?l_aB*z#@f4Bt}#`)6b~2>>1R?++7Wj4Da-Dv?&RFGdr`^<&U}+- zO%~jn>&txG*L;iD0Kl{Nk!=~`)~W%ww5D!}$40|tO0gQpuvqE{>-UoJYQ02e_K{nf z@o8wCQ_R$jx0n?2;zIIxK#J+)f7U7Q0`atA>63`a5Q1S>9QTx^@Yz(9WWJFZo+D!= z0VGJKQ%+SIzMzH|VFKWKv@_hql$MIs_-aY**9DQh$Z_PO2PB^3?6lT9io4PJP^7f*7Mj84OvY^e9^zPvnczoO z7~Yh>fduLba2KWW4DHf;5$;5=e#wVR_&eUHpRKDfS(dna`h6Sku=eupHo=zA(l5eF zwldukbk3uy<6E&O_<`7g6yg*MA5s;HBTv3bDHI;lUW!eJI0V6#veoBbhH~nuT*)BO zs2?OC?YNnfF~M2(38iP*-VdobtxM_*NE7s`(A`wfPFK%xV7Ym0WL<~7d~FI%zUL<# zcg&zrPFg3h)8x!x+l$OS6Yzj6w)53KATZfJt5l%Xn}6M8X1uHDNE71WPF8J>JTNG) zBpLMB56@B-A`3unhddgXM`k7!1iS}3Kl}Rn{s}EHM>#j|puLWA`(!wvB1J|Ta+!te z=Dnkc`){4Klpt_Q#$z}Q{buyh?vchL(>$d2UwX@H;ah9YNsz|iPY}}{Z4xP5Xh|1! z)R&gYDhsq9cLg_X#b4JwIM4=nMdqBEWRy(xMv9?s!g6a8u<2TOH}z0T;mV7kfKX@Y+3#4zarvUW8FS;HUt#%4Xq#CzLg>QSmCVbK6C9uhlAg<7Qi0H1ag z7bPSJ545XBSPgudflW3*5UWUS0;o*Qj;A3_dBlq`#Vn+xU0wa4=er!PA6`A7%;^5r zm^_Q?%qa$04TF*8(3FfG@pj@|=(r!){yKnH-Zs1NJlL)3AM50-GBDnI85D zzU(7ix@yAFv5KqwVV`vJ=yjD_H6Y~s7q_LAZ2wr7A}zo%jaZUF;%4fE7{PsrCfmwl z<<|O20|mi-m{xS5`BTE$R7)&)c%rM3`+e8F?b7Y0wMD!t!Q;;x=ikoRRu5mCZ|D$c z9$7u!9!lHdyXHXPm0P2TFCw|w{|?9@iGsIvJ-7Qe=q&boPM0hJa8h`quyp-Jfxrs zFQd})$bc@JPMPGi^<-14lYDOTlEk5I;!a=VqWHzDJ(chqj-V+L5IYb#pn3mfREpWO z1pUkn(ttQ*F9NGb11*Q~R>A4Mn)Cnqz;5K zkHZR0R0|<)YM{GGS3Cn}mLWtl@?94E)Oc83clIAQsWx|WLVNPoyDUTd(Ba@8d>0Cj z7c#p}>pMS3Nn5(CI*tOj4Bpu^RE&Ilf0E*?!OJuDyY5)kzf9+igz~Pj1|zlc5H(yJ@U-0Kh$cpz3sK9wy0xLA zeu`&mLL&^fa|6#xp$>buJpIDpckXK<`b%zVQ|JR3)#n{jcB>BCabXIeUeMkbpltix zF6p4W#=J4$bJy9d-RU`ZQ-7SsGcm-wPM78@zq5BvoFK8WO5YK1XW8<~1aF5Txne)87Lsff=M+n8dQC;UKn7t#xGY`qgH|ytp>lOi?HMJ z>EMPds!PD4o-Gjbsu}5dL(YC1!Y1H2V7GtZ9?<#VsPEiId1xeMEYiI@+?x6Ql{^S=>vzV~Z~dd&u{O*VO==*}T{HjXWUB z2^(g-SdN&%2gX2{6=t4 zSwk44==*H1Y9Q+PqgO6waayv;^dA^!*?DWHPpb!(>#=r8K=bs`eQFd?JQsd1*dPtN zIu4}K?l;VZAz4=xX>{Vyd+r+}AY-0|n1&i8#f$#+#EOKuVIx8hhaC9TiOQBHd4`Z2 zh8~8g3qz-6;l8!=Gj#Z~w}QPoxs;ex@Gzv^7)58ia1TDZVv@tHvxij92a24*Zl7S47JpDsv`h2bZj#kH8<3B^MT77s9J6)_o_&jbwu`USG6cYhpX|?-qPZ!RPnYbmBAdzAv0U7MrR1 zkW(g~;`3)W=ias_i*sIh?o@=%wvVC4e`#8tdfzAd2s3j^ZZ5n7`oraXNv-5G3`DJg zxwX;iK>%tJLHE@W--F~tBM_fKC-&RP8ex(*c z1xl`%Z$HUwo4mte7&;bEvnN;RF~A@Kz{N6AWn{q)@gb>jAvYkOvY=3Y;e-0ZLVVQK zrJ$t@1Yv;#e9@c(wD&%$O0j7csPF`Aw0-^nYB3T$pCUduo)e3iUuld{{6PR1mwDC) zAz-Q;c1zrw3j=nV4=t342H&YxdHyX_K2BL-c#&@+A`gr2oLWgzOdF^|`NRAZ_7cT3 zUou*WDT?w(FXwj_1=gVjDMFq`rf4`%HdBq@_o>5tQ`%w>|3*LFUp(xA*V|SZ5N5qt z$t7}gg-O?0pTN3p7ZcVKW!ktB-`es)w=F5N+*49`mT14er)E|w;6=M;~i4`-L zw4?gj?WxgpBIhGcCWx2DG=Ck49B~)c3%nXt99~sM(7bB$=b1;@GRvbmQae+Zz|4kC zjE^t;HM(mZIaPr5MN`?p*xY2*tjph|;CVc5(Bh=`Bjk?dbL#usbw+elvXsJ&A4rZAfmi%Z+B}Bt z-+j*^&BGuQ2>4~&P3_0Ev)8fJ@t3f+PEkrb(Z99N_IH9ieO5K8Ip{pt=QLq2X>r3; z({y;u$642}+g+ZLJ0t$Odnm0FMznY)HG^?9J&i-Z-ONQ;5dtX|o?q*24Rtm+NTj66 zQ|#Shr_AHbH>#Yyn7p>^w1&~}P7|K6sezlXCN(D=2Lc41Xksf#VNPpWBNY=jE(VMr zjo)+d!2mZ7YKh^me_XW}&%rSZ-zpi_z-iP#>5nAsbY&<+$M9=pI`oQZ;(zK|C|bJhD{ zpo2SntItY5(Hv2w@z^>{W{gkic9RwL&cPQ!B|nnuF|3ojUlpS9*k03lFiN=j<1$R+ zXk}LqDoY(aP2!jHY0ZT(0_u&imx{rJA8TnN#+`Cd;|6do(vwp+T`+OS&NKeHh<;a* zA;A;VuTvR-A12kQVW{*;T#r;!Mx7J$j0~ z0J#Q9^EX&3-{e5o-cY_FSpF`|J+az1`bIi0IT&HW~HQGL;HmwQN;d9TDyE?=}vzIN_0dRq=QU&_GxN-eCS+I!0M z6e;U+<+}8g)rUmH6&rnzKUTarUu=V>&*$%B|JF;V9(D22 zH(9=@oP}i5?^ql%Eet(sPoVV;p}UVxB*a{8h}P?+V*Y~iFWm>`I3tO#Jv~)yS3ij^ z$cfhdBC3IzX_WAnk0<{K8K01-FVXZ>ZEHLBB)AnSrp&r^FrW=(xzvtUmAWk;a~)lH`(`TvVG^#*C5i*+2<~_z{(!FZ(Kw zU#o3ky0nWBU}f=k{Kk|IXX!q%r2;^bK5jwmcDkU{p^OjjcA#Ub1Cji^x+F3_d|#5@ zTxp=~pWYSBIvhMOmR=}0X1Z)2$;SZFW5DcAq?v=@qVFF8w7$Q9ab7|h6sNtC(&4Z; zlQJG+<;Xak>~*y14cYqNl~XsjkpMV=cpiZJY4WUx`00!n{*yKVgZUo*2|HXq0$aw2 z*nBtzE%3FZXQX%tQ}wp=n)Yc&;d1ePdlf9oh6Up4DrIq*rKK;1My$+IV|F8k*$ zEwfmFlCi`zYud+2y07Y;fUU%3bJI8k?2nMO(({C1vQ_Fd<`u^Mju*?8%MSVV_73@teus^qPA87@i!vBSh5a@GVT`HzzVOLnb6w&pWz-w; zr)On12c#V?^bBp6@W`@lMV>7TllkYRsbPn)h?7-Js4DPeMghP`Wh-o1y`t7?=j;^x z$||=D%&vPEKyDQ|fNQg^6pHLuu2M4#e|+wW`%Bpw5WZ^e9Rt$ z`@~JaHj)n?QIi&!JCgoU(86Oa$7{Gy#2S8^s7>mW!Vm374dh%tw#*m^1n&eRua7YY z9r4_zm1oSW2FVPBGpGHAfwQzIU!=38t+>%R!bZH1-Apc)gFU_iA}X#)KjhvNn2})r zHb*|5$j`&o71MxK&v7q!pD#ViQ+!C>zeD1^lE-ucnh49PX!_@AEsBW&tO_loxDW-~nGBJ6HB_j+NZ`@ukP z$NV$K;om+94)|f&Pb;Viy1@uX;SOzgR?dIwCWnuLvvxi?E=7r^b~;xLy+~Yn!iJ&7 ziA}iclEHdUo{1-gH&=_2SGfPxIRmCgItkD9?2r9kWDD^gzUm$@XHB`T##p+piPH{T zI=I-T^ursfZ@}od7s$#E#-eIl2n!*9#fK?u{u{F}>{jupVxE%JsTn{U0AKqw)Pr&8 z(+`(^tP4+yeRi#Bm4aP2;n4Gb3bgOnN$V(S+lqjjwS*jE3$8DbrxMrV)g#&C+1RV?e4X_ zM>hlSjT@zr6!2rsU$C7dbs-@K5>gR)y;x)X<2doTsIkRg1r$f^tl`jkPzS&x$eN>p zo<{PB!^9a=7oS&y|JMruC$5dF4?YVu1o%G7c@=3TsP2Wi%rsDd_F|>Im&s7|l?n`pX&!e~hEtcpt@*mN>{erUg&yAhM zO|T#YMG{5HT#kIjo|=07og2dzROr^aG1iyV#P3Ji{~==Ld6WDn^EcgV@_OzqcZ2inOc zR^F%WYM&$r-;YoJo_K$jmN3;@e>Wj$u^>eR!PyN|K1(=GtBGf^Et|4e=-X#GE@L_j;%AE-KZlq((JKx!GTC7#v*IQ)3v9UwHL{H*LsE#2d-3 z1kY_G_51s*6CU6~yu~9cGy{F3l3I!I?kGMO1~zssYZDf1f&`)T;xEEE^`54rNCFwS zwUPj!x{0DStT?$?vmko;h>3E^s7clA{7Ri16tNM7&M{wo6SW&VgUD@P0u6IF00&AT zu%KALYJ)j|sa__RNg4k^7|X{1ht_ng+eiyXuP}+>!?qEd5gfjTLabsz6H@)@H%!|W zM`l!}5|scAlNa1EYFgFc{(Y`N`VY-~UlwR-2ma6nl+p+V;^n!h1Ec{UDm3{Edf^={ z@t0H{q=84qXTQv+`jXMimx)c`SEcz#OI(_PK&@j}bXa_IISfUn+4c`r({t&DR z21)LTG+q@7hrW{!TitCp4J%R9yv8>MIGQ{R+~Ic&sx2&9gWC`0Wb|h;B#>mc$lzi= zDov?Q2L;gu>eSILZT&c8^vjCRlJ*Duo$Ci&+jemSrBgmrekWdvxEX(VX$X(+pI|@B zv0pB5wsvhyI+W~ium@C2cYnjtQOpeRWcjCtfx``S(H>oHwvRvV`mQJ9VS_gRr{m@N z>Q`OdNSK2Gg?>*Ea|hy$Ql9Rd$t4QpcM@45Q>pmW4n!|U5{fqI_`rm8k z$-B*nI}t>?fuHk3?I%VuV_MX_H$1ae+t8faEL-dY8J?Gk$W$^4MD%jDwS9K{&Q}0< zAMh6ZJcb7r)Id7#DNYRCvV5OD2C(RhxVL0qe>N#LYS3H1EdD$?p5|;k#QFC(DM8@a z)lZjqH=0DdpF6MFbx%*uo;Kb(Xe-Yod+#-V=f%N?m>ADCyhUM>R4mGitZ;yuLQ;qB zs~n2cMjO)Cw`<{mn}J0!JnM9qyI4=kyNj}T&@zQv#6+RixhW`cgbRuwzocXN!F>Q4 z{Mn&m0ILx+2(`$(7s;~|DXaFJKW9YH5VM58m$WoVoeC`Ja_uTHh!d+ujF-$WP876a zEMJ{6e>yMfaKPLZ%9pa!PlxMpxNfFqe-0Q_* zb6q}<%*VKGjdlo&&@Jc>Ye74(%Z}L5R z*MkroXfVVD$lAi3!$`dR8f=0aLY$2cyu$aXA`5OaMkoqkl%l@hx>|2M5}h=<3gy)R zN~$GoxI6oCU3aXO0uv*pSg`b3%p^@M!e}cL{eHe^S~;6XUr| zUhijvD&K`jJGb+_`}4#exxA+9BhvpnCx^k?9`hg^rnYE*IB#JO%7|?C^|;YXf3?uf zLUR+_rj|%p$*uYhVr)j*`SKiA~hHTEaKWx4ntj097tND5F z;$W(9#Dv+nQ>c&m?TdfbChxnzzc-7@JE=F?$k}~Wq{xZQsE-8fOxZAguBd1pgFwWA z-zRC}6CSr8C*!{yoN|roDb#9Ll9=UI1uP&{>db(Wka*gPVU>>q07XMusz0@1$vGJE z65w1H3bA;3>xG7X6l0YEX=2V`lRq-40n6phSt%B#X{NyxQ!cW@d}lUG9snk@ z!~(6Ape=R?vI?cw$ULPzofusS<5}J8Qq^dQ!`QK^X`(^0r&f?p8J69??5PAp$cKr1 z5=XIb(&<3@jv!~P&mc9h%$isEM1D_oITyN6P5&NHjJ1GY`=m4+nh}K1#q} zFRgNTCFbE8Pry#%8|0izTY^ojO(GEfX_abXmTlAb-bFhQ>H&`M<4a7>_AVKpuP|() zjMnpwnR;l1(G&@t9NeEB5^nQK0%!^u&26*@2{X39SKy$`MRr`VvQ7?W_WoZy^I!h) z_aTUE8;rpT8GCp;I`Q-5frM(5f!#0}qCH^o!Nu81p_@PH_40#JdBI5&ev=Dw#!^a3msDKzdMxJiC)CIM#V zh87ytcrP8AiKlTYWwlYR88>UKEEyssO(0rhT9i1 zYd-hlr2*&1sepEUJ&?lf7vI9|xBk=D;rc}wx#;;OvcY<4@gN%~f+qOe{c6(Qls!vK z_q^`{*8c^<|BZ#e$>@wM9E_GkN_c|lu-<8_Kk}EUwX)^JY5DdYUb^@A)D|qx6V-_{hVUhZ*n#8vdM!38!u3w4W_`mu3y9g=K=RHP3i zzisVcXIc+rsXv{%IGu z%!&MyoLNI1T;enL6L~??l=EbGKOI>&{qo{*x zu8Wu^me?HfGdGOlIAG7^`#hV{f7wF2Q7B-JaKb`-LvQ`dTRE6q=dZ9N>oDG*fXRD; zg*^#lonS^AV5#YrD*RnfSZ7C zA4B1t3IssQD8}>&KR_Ja!pR>;CZoT>a& z4#P+s^`Hr8oXrDp8`%&m&xG5IX=l(c#{?tUX_tf*Gh1TzB&JdZNhtpu{+2XSkHK6I zUoNB-KT8cQYrU9qg!v%!yz>M%>w(j4!LEf9Ed!M5G&m=DMa&8S@LYxw+C76x;o*1e0ZZ%`$jJ zO|#^b+Y2K5Y|-PC3~|;dLEx2RPM_18>t%(ZTxO64;tYldRUDj8q2nD6QXlFPqt1dT zKYw5s6`Mm<=wFydF3LV53w>bwph{3Wp=-W)A6+$I--t`XFV5)IYKJoT<=@clzuYeE zDpcLR@&t^tTnPn~-IpyiGhAPE7E3{vNG(DJ4**nJ)%UK%3Yt$rl@_YXDMw<##;0qr zZ+87O#J|od|^f&yz=@}XBIt3`zBKp0=5~yy?6unO~wc+ zlKPQmKTj3MUnwMsU!8D=%1^OKh^zcgI?r4&yeV=2ql~S=up&82n6RuHYZ%O)YkPI>Lh6nLrou5iTjR?|01m&2X~~i~~taM8jko2d^>s z8T%+g{Z>2MQwQiVY4p+WhJypiIVM&`0w5F!(8U4q6fH{d}BDokGK+yd%vko@5 zpGmzeow%CPgpZi9yslso7{E^WUW43+ii5r9M9>4%?9&sEG4xbcD zezG*Oi>)PEm@cuz(-MSpg}6zzlB!og3=DCOOW7)?Z8$3_di`Nlh{HHUw(5sJ=qg21 z!XGjK#Dl~yoT$@P$fWQjc);@loVOvA)_o6rtZOgR0C8I%S$K41K|w(`Dldurl!6C@ z9B`lj()v*Mt}{P(7rAu~e%@>%)d2GsKO_KBd09=ixbMewL84LZ#prbWuxW{-zZWWE za7~J7_C%-n{D4DVJE4*r1tAr>o!hB*OR!Z!rCQe(6kKgm2;=2LS&BdK`P}}JqwI;)+h4SX%^o?ayX%jtDM>#7>uqOqXr!5T2J{9!-a7|1EHli#=>=6AAs!v*}d z(Q-SJZS))rx~u>XJ}^#>v20OKo4x)%{YQQIe+$nX_I2e^)Ct}mfTb`J!IAt;WdVUZ zQ`SvG46}Bf9>p;sw1aQ;p(Oqn$T3?oaU+&g7S`M*2$_)i$9jz|c0oO_VpB01bINXu zmO!sX{3>XP_&cA~Ym{MQ7tXb|z$(MGL@>%IQ&mQ70&C{^b-?PvZVR&SeV!R_y z{WtTjN^qre*U3I6&W@83fQC71`YrAQPSz$YG~pEw#gcB9`q8jh5O4+vPH2q^j_I4=_#-_c!P>!AHE zyhWQnqX-BeTWShVf^BsvXb7U)gw?UABKmYz2Zqsx``MR=ihamTTGV3_eUc`m<#T+Q)59#|ciuPKkq^ikqyWAnI1D>Y3btT_cWq4I}%{#^Finb<0--zG#~8(4iq zCsv736&~vJs;Jt@{>$5WVHN|pHl}^ee0~drc}ZXX^U-#+Lybi0Fc3o$_xndZQOOMI%1FdxPtOZ@_{^IDl!3kOE0733=6T#7%M2nSRz_@`G z`oM=Z+=(0uMEZyx;w^lAZakQpKF7D0AVZR@PT;Bux zq^}553cFrWgZoIfP`ICUo6!dn{NWH(Rvkf_gdZxEGvz;cq-h^qJR0joS>yKlZ~`%9 zFK&+f;oFmI9QnD&X&N7Dz8c7kTa!~k<&pvhy)_9+GKup3s?5#3(3?4KM)#W8d5G<4 zh=h>-YD_H}7dHU2Ew)z-`m}NmjLg~gp=$IOdz5nQKb)<|TJj;Z+c2-eDH5-a3i_cQ z1&w-oaS4{-9T&ro($(b6P z?b*@GIoodL>Cvi``4^&9OVtcb8pTre!Fyo*G^G$roj}D&Wqs#(=0-@V3p^?HXZf-$ z#_pIne99a~(59FyV*hV!0FF4`4OE>i8$XX&Tgw)?QU%_*cRiQbA{go!&){w;c=;Ck zRpht`O;;eA(YG2Zz!Z)RyGdh{ChDdxj*o`ZWo@NX`l%D-9>`EBoHTrNIddSl`()$P zX^>Tox4)Zd6Cw_~5PDNShG||tn$Ou=F{d(z2sZpthsP!Dx;eb|^m?;+c7{)C6&-e? zG#?l(-P6k{M4BzxBgR=<$ebY&F&mOAU!~@{TC#7=;ef5cE!d2pa-*Q8R+O71O0D{9 z*50TTv&ND$DsG#giP16lBT$4F1+DP^JIhQc0rL`B%k}8k1|XdVP>DrqEas5c41i*W zE#d$Q1RaN@|JZNS`Pl!m87t!tSE*=PPfizWo+lMw8dygG+RmC$6B%MZER!J(zFpt5 zOjCVwtd~J90mu&-70=E7y!sTxG`?bZrUWmQL9?*5079?vzLH+zH0tQf&MfB|y0lC- z4Ne9FAkJT5=Ob>9ETV^K-O90y1=b>R)eN1T>zS!!l!vCQ01ns`k<3OGb`zEq3x!eS zwpq&n%h^w+xC&W&xykRHV_;)F!J9mA+sHikioFa8d!#2RQsnv!SU+H5DN2M zMq|*3{~=xO3RQ(+P1{2pRpatE%P)ODp2Ti3P7`bd8~+V~P=?<{-0los(oUnd0`T~ganU?Gp6ig`kR=~jJs7L_F>86Q z;X_WJ4KxtG2ZunNfvgA5uAYysmje}5jyQ_sW3d2(Rmh*XX?Ymauf&Nls~yN?8fT>* zpVZW{0cDgPKVazKGz6MN?x6A>E|{Vu!ilbfG)`6ccz^vH`qn@__g+Hzw($6bfuZ;8 zxfz!fvM}!nBU=Po_D{}#e#>qUh{L_Mffsl%wXnw`1Ih?nEpVe^|HnCT@iSHocc`>V zEQ2ITYP2dnUwH=ggAaK@GbY5Yu?O_d%wljkU;5UoYCZ;nKo@wP7J1dzmylg!68`CaVEppJpZ3anWo@@w!ZbQ4x^@x_I7h~|FhW+(UrX<&JDrXCr=2!*>u_Roq2?4#!9wrI(e_PP5|&f8;r1R+#8U?NuMVzfkwPP*@p}}- z4PT>+)w0;-H_}HNw2-^QP_a)Zk;;6-DE)Hm(P+H5hPsJne)TC9Dn&xAGBE{+WzzP6nHTCyP1IkKn#8% zCju4{AeSSSrZyA)@h#x&WQ+nVmIy~Y>c$oeYtcugo2#$O1fvygTrdo;AnZuYTd#S9 zApZQ*PTWMUHvGWptU=5#8mXsfOF7+DgMhKZWvjp_f4|6guJx;TeDR!SvL`=J#fVZ1 zCHKd@jwl0RbxyLD+-9d)f|e+P7XsyzeUGOmc(?HZIkTBR-(fHI_t%h%#y!@r*J?1R zc*sgBaW3p`{VUA(1^@p4M=**o40V=HuQ?``Z#Fv+1ld8Hg|6A9Pc71;IZ`uDbQ0eJVVP&5!h}Am>#8$;QiltpnL5G!oR# z%e6eOFeE8-4z8=PdFB&O@k=)Bl>y9A9eMRiB^~*I4bhl;KUb4@c3k_jfQ~zl&Hypj z>Ep2=UC<&CnPBXL0>cl<2<$yh8ny#kb82j!vm6nLCuwQ?_n9#TjUz`xved$mr< zkSR!di|vay3tW(AH9X$^uwUuY;3%htrH`z|k+>!r>}63k&p11KyZrpe5fB1|?jnkZ zmTGK^#PqAOpC^G46%<2pNO%RyZ@hsORWchRij$qxzCZ5H#fAp&&l3&1sy_>(jqCbL zYe2~D<+cn#)je7058}EhvRL|Xy8+*am*>eJTs1s&h2DjJEqhNg6{tTViaB#!vAZr zXHM=?2=*PUg)Su@cLaHslu3wXOJxoWXAwE<{@19D#l@oNJjp5?R%c~Ae6se^@9M;O z_8L~&O1OW1Q3v%+H14=)O-iXqjLD|jHjy}Z;};OYY4mS#0SMD+vN_S&21(U)t9s0o zSsNFtx?ys~P%jHj5i+WN&hnk?s`A21SC=A`V4d(vHGr1~wzHE3F^g=+@opESRc+@3 z{k7GT2m?5bC7b&x{f?|=Is7lT`r|p=M`k94Kr_+X%llC)T#NOL`Q>Y?+@XyAz1qbV zBSHj`Cf!0hTV|&%{J}a{>xBEe-(#HQ^!^Ar(b8o0(RFw*l8tCFD;n_Ni_%T|Fwy4pMV@1T9X!g@MATyh$?E*CLfSY zVncC~;TfSY_<+Uf&>xxRSn&ysW@n1;;P)WEVW^*R2y#VYy(s|6n8z7hs@f6=tpLW$ z-QK63T6M3=dsz|S=RD~$@w2%MLgik_cz$?=}u3Z6PK4sgR z)8N~9p#iHS3?QSd<7PSan-jmTl^(#gA9-|{4mP&YOKMyV*&MyY+^DJshQt$W#CJZSSAd%EmNbwYhP=# znvc%#xSH>ZSHE`Xeaf;okuUrzO6iwPxgP~e5!egkjY@hxMB9nnCVYuzr2>C=zKn^+ z$;=rf^ATWH!(q60Q4=Uk$pKEbVz}!P+@6zk2 zQCzH&40zs81j)g`2KEHsbWoC0Hw-M(2>ex4Qf0M{3FfC8ffM|-sazPUH={0#>F!@ze>zpRry z853}TU6O&{HYvg76E0bjU*0ms6Dd*7;MDcvZd%*UQ7-AypS62WiTdq0@0~=!&^`7c zA$PCp{k5&+u=5S-w3-#esFj2Gljl(s2>*QR^Hv39B{*i=qjXB!T6#e&C(AML#6VVqx;~^m8G?M2q>U^U`hEhN(tqXRSD^hq$Q4F)p%FwU+1NZFBEbj4TjCR2g}>nSt86nJjSdG{)OJ! z5nTG(QH$I$3qlStwI9Q~eJRC489{qA!9NSI({cTOD?%mUBW!qjWb0IF_d4F@^~)Ao zEbEQ#k$wprVyyP^6~(Lo5UjZC>uAq!Fe%hJ7DeL1sh0P^ihCth3qC^8b2R>O3N?sB zkV65M%Cp=&X|7-=Mom=yp>hx_XS^wi0HcYYkFc8;g6_j-T2#>p^3!5M!z)z^E} zPM>5S{NlZWdQ`P6Z}Jl`+pPoH^p$1ul1FO@XQ^bbMbCM#yd;e)Ho(Y_yAtC*;FJ)V zKo3^|E;8dcDpeLTp|^Rl89|*BdtZgwp2%kg*R|~V6lRbIA~A=NbZRPq8@|q)0vB7z zbG|)<61pHV_}s7hn6+;n0csO0KNe&MJ$9{eF-@jTTm(=5zXwjGBWmAa*gL7*o~@|z zi<;X(Y^u5@?W}eaUc&tqaB-z~*6p~wr87i4#5ixYi5!j3vKY0z|5pqiOn3r`ev~cafR`GN4 zZm7wP$)aD-LmI%;eHxQCbowo8cjXO4={P@4d2i(QLYzNJffDDCWVi7^)p9=};k;wq zJlg#WzQt@MKQQg5|C0Oo_p8E`yd()3f7+GzFW>AvXHGfz5SF4x`~juBU1yj}S8IgU z{Ld-JyNSv;JFNji)M2EZnyIfBdM)lxuZ(P4EgO%<0pz11&hH0ADP?Zg7y}MiuLIB5 z>HN-H^+^Yw$sUK`I2s>5IX|KAeJJlWZZm8mwssvxcE0ehJa=Q-S$;3M={w`b9cMV> zDa`Akgij+WM%8VRYmb@pFckVm*_}(6h*O4}qG3SnPffJc0C*&9+13brUjv%zzLFhFm#^O3F#g8rxbK>IJ}XRI5)Y_B z*W>`GJQHG`02Y}DiL1<^rHRfnL#FwmWa$dO65>h-_;}!Iliqx_phXz+W57xZoJ5K( zLWPv$7k*a|>Tb8K%_p3#<%oTLVi}V!v0dq+yigW^c!~id);#<>_$BJwVmF^mT0($& zGX2j7(Ehh>arV;hb~Id4TJRXqNU^j5Jmj)HpU>Ljnjr;|WcnSjN+qR%allIHN)6(6 z&rQrUz*TnDj+fjMbzuFy-PHEi>xkgSgI4`IjTnG>#X_OUu!!%?^l;Ig@TMGLR&uoi z<0zN(p+>XiW}GG7>QAbF#`|!@fp_+)RPx$w?wc~sAyOr8K;sOilk1v{7>ID-N50mCT z8`E9gJ?+R~NOJ#qS>teB@@_fujaDC2F?cWdI(&`@?eX$+F12qlYcZEX=JA z1N$1f``U>)ybS5_*EB0X{tNu5Ie8U-&Ws+})NUU6rPw?YlXfe2KB_f}c5X;TwQ@I1 z)y?`JSc=%AciPC2#|F8bbklGr*#LArDfnvlWz^zjzj-wChzmSQwXwwXLbgbMJaL}X z`Q~>V$M-qF+Q8}+HTfk{t7&v|*k*BEe$D1z^XJwS91n9@cU95`DeR1WFun%2Ag`|U zB;b$U_Bp({)J83~eF*(>!D6fe%pl_*`aCl3Hm%hqb#|mRco(Gt%%{BXfGOiP5{C7( zwO66`(UusETl3zex8BqH8iy1&GFwV?f;S%I!C&@aC0y&NHp>}%Y9$2Y6>u%F?ZHCc z&RV$w0zd$F@THA1*vCl+q23Cc=pgYEL;fIUAQ1sQq2xQhOa7h|0$zO8pJ92%Yiake zv;Ykf5&*-e6B=%m?Fb&-#jO6xc4mWLEFJ%ct9J~qGwQlV_l|8FO=H`(Z6}Rw?=+3= zG`4NC4IA5OoE;G9$ zaQTJcRLNGDj&pn{j$=2U--c=d4gmS3MhgSA~wlhS!jn$8sq@r_|v9D z$^p?l#870=QbIPn&rw;1Ga2f&&R6m{)nUq4V(_G}R{99fNE{BV8c;`0H4-fAyga^n z6v>nSWYk;4HHk5O;sh9DN7$BUy5S;Jo&|NzI{gx^G>LMfq8tl=t9Ca7TRUYcd~|WK z?b)@)iyD>mZJf6D1x*sEK3-uJf4Pi?olDxjfaL;9G?^*}=Re$KMcy%I74L zPdvW#o}jwEOW*v8N-9W)8sr~&W~4cNakk1&ryX#Y5Oc0a9}vGq>*RN7+HrdsKRWxD zbmE8^x*@s#tYErVlj-RZUKg_Ua5NEizjgT)?q;3BuWCodVp= zGQq8P<4^C@Dc#y>U>(bCS0&z3)fZq6(VFG-?-Sxw8MN4?GXdkitvuRoARO1Hbb@wbF& z;)Nqg`-qYPV3$UHMm)6+!nC&=xqq&{9++Q8+>Sv{6g~`@uD(UqG+sG5rBzMYyXV!W z#6CEt-+kCbio~b~d}5)S70&o&8-Kk)a&ib{N|7e0wbXgT_zfwT7)6+`D1TrV6@u*% z@aaJbY#5X9w;p_vo#pTxg}*d zT_G-l&WbsZi`AqiF_rmac~d-4nytd2dG|x1;P>3Ygjp(wmKcqK5KQAQa3D1(-!<{* zF(Fq|N$-^5S(zb#qPDgi4&!*RjhQhu2t)3;U!@_K`NhcvX^8=Q;8tNkvJODT$;FEj zx!VrW%XKDxNI$v849G-DJx(lWioMjNnN~;jUUK9;61Dn1z}tY&@@WfAAWOn7n)OS& z2uRTJBx|*p*7@XolBe#Cng+&UG?Rds@50}!u=>q}mYJ*={>Y>DYouL^?&1T~GJW^^ z3t5Tc)Kun0M!wg>F{+W4gu48g<>F8ll@Vu)Atdx|5UJ|?Cx}yLQ$UF6;suq}H`fs| zKuvKp{P5Vh-p=Al{`D;(z+WqHSAWH*G@qDz~;5*b3gSd zeRBwPH#=*U?H8*jb?&f!qoy!mX`VY54RX*mUR-)}%fF%TU7v;T=PkVm=M_PYM&6b= z_P1B^aC0V||I)t{;j;@1a?$i%{jG)GX+)`(hjR(`TMRhkl)NUH9SH>gt6lecBqaC` z_!^8Axe(rDXxqGvFbJBs_yyH*Img-foEl&~m63e2<&3QpOa3|(>Fs_uPVud`f~dCx z%KR^;4{7BVP}dD}-xu{mLsZ`MBj3O0{~aU?tS3Z+SNLOmyVq{Sdl`%8Ws!cSY~o?T zI_#tEK;+||cP8T6caJPD`3^lzYDmf5?bmWk9(*#yqdjJXPgEJ480=wZS(03etwM%8 zi$s*mLis1?;AMHtV3w?Z$m)KgpRtWje_p=zD1>|B86Cujio!ac>19k^WxRyQ1$*>^ z!R0Cz?HM)%UZHedBTI1E>8%?%YnS=GD&3ky@W_J;^Vh8m2QHy0z2v>Gp3k^!{=r z6G$JDn-jL{bqw3=Z;1eHKv-!)SuRx9?d_K~U7v52io<25)LUsoem3^REH)yL`hY^0 z+YpL!G3ew*dclNwMm|I&)a>^-2r@xI)fDP@I}>3pY!F&q2<7<CaC(0=IqDQ-jyrk!BxL>mO0)KjCz~{$ z6O3#7I8>`kx0VQr>=I%%p8W# z4%VfV6+C(fXz#!HYej$|`pJ_4w3?%hiZSxA{aUb=G3BK4MLV?N57z)Mi>e5V3`^~P z=T!1j`a#BoJC&WPdZ|%*be_1yxQBJCuO{n8DWRJQXr-)Qi^Dib6<9ANvpI0NX@T~9dT>F!%}%yj#?nClb*v0qOf4WPFHW+$eFlw zf`^xzKQT3sfzMt#f4wvLrXe++M{jB{{hjkg#SQN6xh?wA2_iOicy<$dHqXr{`j?V; zA!soQdgy;3V<<^*Hqz^&VdKAW($pFg-9r{G%8Hv#+myAxa# z|4P5qki`qM%kNLa?weV>hMSs^QR*MKX5u;fVUIwQv9_(P6lufM-tI-51zkn6T_0U0 zELxdI7{6jkpC_Ig9}J_{zM2kxDc_5i-WCwAR_>+o7uV zi$2koHeL$=TES$|7Vx>KdxQsIN)-D*lv3;7f}c&K!CL~P^NKNF>o2}uatVrlbX_EM zy-$>%flhv%ZuLs1^|%S%8-ERmelrEs2EnIQ)@i31`4(-!)ptL@iZ61;3$<%*Auav8 z(kD%F3iP(bULk%ThVePt5>BoQ^hNfrn)l~0{14ZTUba!9Cc>dWi|^;@NA$4YabKA8 zC&({=qJ&+`QO2fsbv0ANuV8(3$)x!M!2qvQiq9Lx>=hQDn?gA>axnJSoXyo;Lu!Ql zCFGw3-y%G&;KI`kMhwRwqAbdDN8iy*I_pnUuON{vtZ!j;l+;rCh@An_=xSNb(hLenR{RsvCwW_9(AN;J1mr@gS z`)#$$zGtK5l;r7Xpo_wTyGA=VNU( zn8Dzpbv%~`f$v420}y^Gj0e;&8VMDcYy4d{Ro@(?woT6jm|0qB3Q`Bg~V!N;Ja+WWq35Uro2HZ zJaor%J9< z*p4rRaMk@w#Hr@uLT^=(*ECwX=|2qp#=C{j>2o%7M}vYT@|jw%0GD3oaqPAJgu%^u zZQ7>q%Yrh{fJ__LTL#W|vC#CQI@`OHVOqfOb9H1{US^_IoLHq-Ba#%1&zS(7SD2|FTH(E!ilBneFDUM%5a)!jvCH2 zkK7KH2G1UnLv}G8*ODf>0lIz0DOoK0W7Vf6us?&jY$XLx>4!VY0-xWefA8d!qCnVA zIH#sbuJaj|4h6IL!ZV{@K{|kgnp_rYhC_C@Ia|O;)ZDE7LUBOV8RBeCmW%VN$zZ07 z5riNYX0B+qn*r*QytDNBJqJJ&1?$s(&POh}?`L0|P2~oCs|7qZqco{8-{S;IW#-VD zsxYTPoDPS}zJnt|X{Zmp=^@}?Df}UfpydPv5DMJ|U@H$%jC!{9 z67f0H6V*E;JL-VqSz&?|^tpC$c*Oe2zg}s+A0Z!P26Y@g6WkTgZktcHw6px>{5)ws z!$&$@f0Z@`cHIFPR&9DfaB-C?^lA+gxWZ_>KIqe%(jT+}x6kx~hlcdUySpV*A{sflPhZw2E*1hcB7@SIsZLG1}}lE zHInJ*zXJV6*V8W5%VF6e2bVX__yG;G^x>zg-gV1U;(*3~auE9L)jGF{@nar!AYPa{ zYHrSx<77^+LG*-LkYm;2W`NOBHnE|xt3_6AmCae^NY$bT(q%YYwj315sX49!PF6pZ z0VOF2=gxfwK`=|3TG%4qM7X?JY!}669pcM-kIw?N=y;pAD0OQ}_H0%dQjPw#K-eKR zKn=>g64jg+IrlSsL+h`<5rYOmZsiodQRF)@9#?bOz!E^^K<7we7{){FNr32~^SblE zbX0`@R!Q!FML87!Q9MIc4|S5u^<+6s$0u!aV`u(BJw=)NeHEsai$xkrBjql2W~3s* z$v{e3A>R?P^{W4ifgALhI`GacJ8$e)KYItvpgZ|K>pYLBWo9SMAIU~{{^ft;07Lu1 z30_v>65;@UKjVQ8r@vx&<|0;Gvf_vyuu$q!w4|*J;BFjuD+~1dF%x4W1RMY@p|qWc z1Hmw_a_~lGF_~)3g0A*rr~|NittCY%6$@c;jx9Av(p+qPwO9l%|lOzR23rO7V4)0;~gvknCn9gM3MEe z;0=(uZ>vcSA?;I{>bMoZ9^H*T*d1MevvW-Ii0)(3W)_y_@~4-*l3Ly7!{2Jtwm285 zF*-SGxqceRD!E)IwD`??G|F4GMeRqOCXo^AEyLROKRbiO*}82~$6@Xg^=Y&EJlkIX z{#`$C$Qa_S3o(31tRBBfBI(#FJo9-t-LGz%N}4c54?GQM8_$GdtNM7`PJwm&GnW2w z>dJeRJz+V4sXYd{y~6NT^KZds1M#i#AL&J6FtrdJZf=u7ZBJ0->!g=s@}g#ip~L7F z_ZG~US>0JD%uT0#G*K@Y`1BQzJb=N7u`R%@>o)K%r?H#wC>Ea6Y)qXfG;8lgi#+V8 zI-&11ZPX)VJ7u!2X3cmsQ+b=d&GS6b4*du_3w4w<@MQhEVdAlOk?#C$hl(d{r0cxt zTR^UPfT2b7(&i+6w&L=lfT!Y~2Z1&n5eCH!4a9l#5e$D)=x^Q1|zbgZi|N793L1FO{3GFI!+SO zB6^io6I`<})|3Ra3?Plz`bxNdHh3>S#tBhZK6z~cJZTGH#x;~mGt08iKp@dDiXlMT zom>G@$NJ-|WyK#0rGjuS$l;EZ_y)Inxo|05i?pbf$83eH zj0f;`CIAiF4rFS*g{ZOsWRV<#e^yB-8HZGu3r=7lW`#Um9Zz9qQ{%wspGE-GbFw%l zJO27c?jB^d<4be#*d+Y4w~ELd>X9f!#9w0aOZMnWfu8}B7X0zYesEszOw7J-acj9u z&&qrWyM?djDWKh7jPyJR+p;>dQG3gic`&mBzLR%p)@2d?X|19dpYCebWNC$Gdhj17 z&LXETPn`YKI>G}>t!HUmCaCL(!hjQ~Ae%W*NB!SCEzlD18y-i` z1&b;;VQOEAX;ao~Zu7+b;Y27s;9~pZA!upsW%F{?FYf|I;_qfoa=_HqrDe^L;bm9u zhwuCJM^T*UA>DKeFNt{?{0>sxMJ&<4O zOLGbQGk(Q7I(qx6pgNS+XFhnf$AcQb=>U^lBWO^&AypQ9?U2J}nZY2>J z1$q>+q+OUq2_b=2;yUXOYpLp}w&FbW*|}C)y%x8ZAE`$(Px@c^C`B3ykKPKQaP$B; z#CED2ot%=sQmIxy9)~KgBbGv~r`D-N@^9i1EY383*{Pj_=)(OvinA#Xkw8ccf)XSE z3_=*Y^5y~rFB9KL{X&W!;Np=}LW z9)*(++Rx8sD4xPrr2x&Sy<=h=4DD;ng3J_m?9?>G5YWUSjddbk%hagtuuLS%BSj)# z9~{5(ZSC z+9Z&luq&E!u#;7>5XU>|GIoY05at{`hb?Y z;vU9$S!SE7wVE*v2IL2tD z)@d%_YCAQu^uyP>gS3T-?g3)IZPinlf4plDg7x48%M^8dGr+rv0IN$kB8M?@vUQ6r5joYY`Ku-k%=T7Coro%-=rvFQZRBBC2fmdZ(o zR|Hcn3sVanlI~Lh))NWP`>9;Z9%|8f&=@{8s|F>9o;nukVDopun$P!9hp%L#3g1?c zR(m{=92OPLUxn2e@Do6QP79ipxz`?=ovvomxNipX>P|#x!P(c)b;2y7?ue3L-xVyW zq&V*@VDU+Y4MX*+Ea?CB^FTUq4Pk?Txes54&ezaKIFB|ROF=xIHO7Jk+Ezhiu6!4u z$7RjeOcE>C|a&3Xu>v(fd0EmwItU2(z$5ujo78?r1;Tv$QIA$T;>oFhz=SmP7i0TiFQ5EKSkfLy!TS;`Bi?LC0hc*63j<0Xrc@rH@S7htStVpgC@ z1M-rA1<#ZUg-_u0dHHXY^&Iy+*p+()k=dX2>z64G{kntRWiFdpivRzU6o&(%XrqwZ zs)Qovf-29SA%AA!qzX4i$Eu3OoTdHk286suwn{nuQMi>s^dfs;I++k&!jhUF#)V6k z=oQZcP0PK1uTGXhhJ6Lg3ga53<=$wcx{8x(yjZAGUubELQLCdhNdp!FGE~!}IW~x5 zsN(f6u#h)oC+}|1E`NtcjFA-SZwKx6*+PO8^u>F`$sih##27)zra4X-uS~#F6AQ~l zkse6zYL@bMWZDsUPEiWg`fI5L;g=eT?i5IDO%2}KRv=-*H;HwRILlyi0N&AWCM_i* zk~T#fN-p;W<@H8pxrqHbbYlI)MhU}yVXn}GynysN(H z_fT}ZdKOaxRL-x1mElW<-OxhsX6Myva`@jT>c2JG(O-io%K4=C4ah! zU{Znea?nI)1(H(mvsboBb5v9P{I{BHU5k)UtB6SUrJ9m1Zz~ZAmK=^lR}jsZG>Qlp zrn%%Y|G^=_j!N${5Q;ISf7Dbg(1b{jyd7d1n~V}+J3$4G&Ud2r)Y&QQW@X0;}u+y;oUt&@*hCt!hZREyV%Owg)rBm zAG^g+aA?sH+XR6Jp(d<(~tI;09tMtP6*8&8>Mg4# zsgM1!)n@aN<-Yszw%d@F6NCS|K3AXB!Uu+7-b|G4oX=b)M{y|14>-ylhZE(chWg0I zCf{(x=zJF$zzDSwCGjP12A~lxa{+L{Nny)@N#iQ#1E93g^Fj#ei9UQqiTpt+AK-5MW5l2X%TVzYf#8QApnH$HP}z( za~-F`bXBvY85BeVF=jb|XrWmV#V$eyrno3+AeaD2Q?$(6YKx-i)@G9kDlg3=f0HRr_nD_db-(m_!o=z z!}@Zb(pJ-fkZA5Ys+)#z79l83%yMU~PPj)@)1WNqk2Z6{k}9=DjJ360w!rl<<;lVJ zOTb5lqTSTufAPV8kRS)nqm_AZOKNiIj)OYIg5#nz#gR;c=qSWdTsIAnR8r{MH_uL$ z%fXGpB5?^50G~v2IrG7DdHEhZPcxQ}Zd!;kNkWm3M5;;vj?BQRv7Vm%{2D2ED-#51 zhEy~@GKfvJ7LvtJp~6}V#rT6lhbH_37LHtvD{41S1ihJWYiR77_;o2jXFm`K!aDfd zjPHyLPm>q|T}}Y21J8ls5mKnLKQr0gL`pke1VDMG+8LjvC8!gkphI`P8nRiO{bKzc zM0zLP7msl_{{+k%ZBb805Rv?WY$^PiABjWb#thk+;5kCNo$v_51}>*02?W#p1E5;14MS+iL^o zv>?!Xunzh9X#mP~<_ksoIXBW@DlT4^2c!*;3$>>-fQVs69n)FyU7VE__XQvp>GEcJ z77s}HRA8O$`r6S4-=Rv*#k>_-J_2Fr+C+}=vl(Q$(sKEv=l|B>e}P+nTMl&ozM^7P zT4Lbv{wV6i$u^ml+-!p85k#mA0k42bp_)i~L~JO@X!^Bp0GtrkW=I4oId<)bylBEG zsz)k>dxiaQ;vR$z-CWh0+Jal5_2ou|PwJet?5OD&)*!1YnBqKqZt!?Z@)<>l1c)CEk|0-k z+Uw#33SXzdC6Q4nYuMy;e|3Pw6EAVn-6f1mANwj_X%(9JHzEoW(v>I8&M0yFw^k$V zcVhIFnQaIM%p}9Mjn}9sOw3R`I7b*Nce8h9tBQ+wJ#}x$~f#<&$ykw~4y#$Sg|E{~K7xLib8C)cdvhpGqQ( z(ZyR?4$NjcBWqI2?U=%g!m6&I)%M$zg<)Xv{8rAEKm~{zPM_dJ{H1+>A9Ks_0_C$_ z`vR!z5Av^gk8E`N;aOTOKHMI7lheMCsuJcOOip3+6w)v~sl%z{N0db*tpU&DyD4^L zfgTdR3|i+8gYVa{o}EA+mDgb^mf$m4=5*%(L0Ps^@KuSz3^A(rAM!3PQFtrL1Pi4Kr6elFkLF$EDQcuaw3 z%L{Ql*iVCK7G&)|I&bAk_+&P8E8byfo>Vzfx`r`{wi>!-@V7304p)hQS2+}887S%D zsLQFQ3X9j%zhGjkhmGbQ5>iPc{%t=LHE%$T<%#WWDhCCGzQYWOmg3|HijIvN`=^*7cgZez{{D$I~JEZhVG$ zf9Eu-R5mJ#dj{(EzxAGAhHMAJUMMtN=9lX|aDGy_@+ej8uG_MCT(8iEvHbbzytm(F z-IZ6&wcV9fhLfcK_euLCx=vn*B9@eEO<_)D8)QU}tP=Q*?GRY4ro37-9^x&8INlHn zH8oPiC91(GtdcrmjM_|NF443W2_XB9P%5ZD`MvNA$Q@}IPx9j>7(COzm8i@g1awYoni`q zNcYNedL^-GR3Gxs=j?Qew!p+@qvn>@FXTHF^Fyt~QGy8GF*CL+RdUJ<8bc7x;}4s& zHFPrL0oHpxcqzY^Hqm7AhEylXn2pnjHtAw7Kss8{MDs)R(kEPW4EC~5pPrhebM zkc?MFSs_HB!Il6Y5`Y)`e0p{I0fcLxiuyPv+#A)v+(6%6Hu_LceAGr%myH zFyJ~w)&6$AK=?d!LQ?@8_AFi@@q&n$vzb_jLh>{DIK&P{QEaLmvjHY6K8_%2z8Jdx zFZ7)!@@_y2vI!TR2}f~`-bA#G!Kl4nAtuj94GzXB1Pz8A*)Dq%GI^AXDiBvA2tiNZ zH4dj)j3)eX5mbpBT#8ms_8qfBK}?o>5EK-p1C>ZZ<2Qq0%2bgE+$I1G!Dh91VN8+sI&AhT?=Q^3g=`%tNfqpmyB|p{HX2a2nBrqFrDFyFH1nD zR6L1t42VL7XegN-uW$u^2N(DFSDIkj5H>*3pi*)nwQJy2@Tp~uq-`978MZ_?ce9{~ zi(bE{Di?eHnnGx_jOM2_6?wF6yHZY?-w?kE!*AsyK64V4?OpIE)oaEjheBtn85_Ee zx;)CoQPhr* zj6X^zxCh!DSMJaTsSQr?p)A=|JZG_Lsr8u^frl}1xiTlfZ}~-Kjg{;dze)SEuXa(l z)m+)TIjG1R`7p-V#rT)wxu+(MWF@Tqw)#1$vhwja^`gq7Gp|~V4#vHXQ!>^qMVFbb zkg?`1M9HTz29`&Xy?7n;JzrPUE4D6>-5>F<(mp+2B-`EW6mQ(9?*BTp^{!Tr<|56h z=epC7%B;T4`5fhBefv_;wZQlDUhsLb`Qu+WJEQ1^yP}?Bx}~Q%+r2IEv|Q<#0Lco> z)5Zi-AI00S^!rszoq3b^e*v%mIZgzb0?);_NT325ux%~px=MkW(zej5RRxt-gXYf1 zQ95F94R-&6OlTlbE74ga;%#}S2wng$!y?a0;X4{8CMEix!njDW{_=|r2YQULd4XU0Kl5ZyRhNVZR{-@5Be&GG(*A5)U$M9^5%hNfPeZY9_a zA^M$QLbS1Ev_nf&%Hp}1rXSoT%B#OZe`Jx}+A^PM~YU~&gp*S3k9Sua|mUchgTV(QV5IqquQHCt))^B!WVF3rVX+(Q0 zx9tK6!h~9an6db+Vr~IH-p6Np3>L>5|QF85CU#I%P_^GRmYIc__pJ8HYzlDb`)(W5~T- z*7*Eh)=BD;el=XV0xlZ#!Ssb>G8dXD@d+cEE>cu)nLo+-U`9%HC=n$K_Q!F3zO&}_ z`urD!^m7kEC;$c8#zq=2r@MEo-1i^q$*d~#wip!>MO9PDf3pWDPW$dJ_&lg@zSBTE zNDj=y)`t~)lR(=-yMCogpUTDnMMYp%GXWtdmCHGkv)pY(Z9#=lagJF?xboYIaq~>J zW)0;Cb0)o*WJ%6Lo&A%1l>s2kLY-!j8_ax1iE|^XhE2qaM6-|;$XoI0M7I95wZ=8E zUMx^_xgnsEBHrjwbAM~n-=ZeLplnwdy+N!uCrF_U3?(v&_$u?uZbUXj_D~+!QH=+8 zD1q!eI(H@tTio6locC^|wXU*XT6h1CttVlWU||S3Qb)zlP8XeyECYbe7QRW}Zzuu^ zK@UCto4vwY4vM^@jT(YVIwyrUSrdOU#3L9fi`pF5C>WahC%ATwAdy8oqa|2mc8Ym)(E- zk<|fD181c><*`{Fr-Ba;onHw64h|k@PMc4J*Fs&c$rP;v9LQXKWvtPhx8#sY+J3Y5 z69dXC_e|#TMqy~_g%|zIcXUW+Hsj{E>wdoplXhPvdiC8*L;{#6ss%ak%FTYvub3y9nlAqAEj%fn2F6|Pwr*B<#Dc%a33 z)X!&tuA@8quQ_GQC@j1Z*7^(MFLa8zZ~2hETZR2hip9hXJdJ3w`?Xj!-?lIW)l`{^ z|Ncbkk%Et)Bt_IHp4RCi5{*^XSC_z3MRt?Rz$~Cp^T#WIKgd_ji!!f04ImzeX$0?^ zoRIOiD&qeEs_`-{$i$iRl>)GT>S(?1k=hmQCy65d`e4j22m5eeqe`0?f%pE9D?1_n_V;U1rPO!0}(P3hg;h$hm;>3;N1!2B*?=Q(-X z%{El6>DFy7`QWVhUcm?AqGFqHyVpDM(r0^&L)df)!H{b4mH&~))zX1r;(OP1Tc4+> z1e=gMyMhOZf|&(YnKv#!Jp<|PtKi~WhfWUgtPsm9%@1Rq>tbQ0%X@Lgjg9PS&Fe?L z%igWdpZEodaMFC&wo<$&XzRg=8Z>(PnI7&@#<&=o``F_ivaL(%9E%J}`Wo~5cW4F& zjah_41!19P54^)r@$4Lwv<7%Az*rGB*PmgMgg-OwFs?*avwK;r5RsD&|8cD5__92j z*EI&9P+bX3`3^=)tcRzeVLx>{Ll%Jq;s5LQ(-q5ymrKMIGE&SVKc2z3034OytYrW%Fm=iZT2229 z)5)n%ypMCJ10b7?C{NK@;Xo*H#NrUP8X1H&lBiq>(9E10q@bmfDZ-=;k!ue-M}m+1 z48X&mCDGltn4P=zgQTHFYOKVkFEYx{R=HSsd@MdyMMh=JuvvgEkHTC!u&57$8}>V1 z5MA8)hedt)06t>SDpKzuuAV}V78jyf(`?;}O7bW@7f9YifzTi-!(}Nyba05`a&V!< zRne@~Jt7Jz49ht-8VwsZY8XKN4jYqY%x$oK-(d5i+4I#f z|JN*s=Y{=dtLpk{>^)9~C!cw~?J1)|`^l+jzRir6CDH={WOgxqcqNVlzrM&~3yo_S zF|oIjOYZdH;;GODwDY((@j@8*NfjFWup6vv^f`QMD}5c}*T4jym0luP5_)E`wpvL&*#XT4|Y8X5P0 zB=Cc=ECsTnSI_4E+qp8%f{yulMkc8gH^{+sAW<#V%da6w^qQoF*~>&0B`L7wQ%gyi zdjk6N>9!ebXyeJCv6JY3B&2nHYjRF3t9G{7w zl-~9Gre$c%4NM#j)h;HY#6$&e{iXNi4Spko(#{$S{p&afZTXmyXr9pmFc*~qvd}UJ zq{q+*idEuh6Zl$s<>vP)A2>M+I`!4*m;@aEa@cB4PDj(xUctgyB)Vwy+G4~`yPoo0 z!Ubjh#k)DJk3+p8*6RD3y2r)dBpzLu84s-%xz^$DimpU6rEn+cog_+b%2o?mS&7-@ z)3Pkhw?@T3xntHLQ1t@}2TjSDMPWN0l7} zSOYhng%gnF-yi?(sgNQ@dc1$PWc&I7c_oDg1aZdz86L_IwP)(9$d6bkF?mh7!?&8< zsBiIb%j~s<>Uy>N2yeS!QJOR6VBAk{tUMxJWAq(Jx6>W`dLHg?u_oA($RoV=S~NwQa*!|>&M2k8G*`s$zV^gO@i3+0Ywl!qJy9_`;eKURkARvlFb zZk;}!`&F?GpE@u-4CbG50x<7Nj?zwfj&pglUTmuT0?^uTdS+meq_5`H_}^VXq2Wya z_F*dTS<{_?84TVshezT)0fx)?B<*dnq$r(JI@CdtpQ`L}!I9h5*XrJ}P?rEil6N`J zoa|8uwA~WsKc8KoUg3a~IOgIqsB$GDehQaJ^^{87;R@--~UJ5~~+&w^w`gP70g1f>>-^NK8YkYTyV(u>I(paNcik76w=*?RsQTP{ z<4?P^4Jt2N%WywNv*sBeG#;`Q{XR|!=O2tK1DN05-OpbfmESU5ANQQDSX)1S)z}2} zbkwZRD-xN%5YCOD45!P-`!n@?cnPPIY!o_KS&gu7pI%Wr$t?#uQ}pajz|IA?!DOs` zjJ1{6ZC{_bKmI{oKAZi#?EATAAqu!~?~+XPVi3r7tl0Csd;jdfeI)W?fCeB61I7f5 z8%gsZlLVF%)2p`4dy)Cj5N#%+hRH;LG{7HjgMzcI%4c zq|MAtz*gnRQ@%dI1aTH>tzbESapt5G3B`l)q)z(H1*o8Hv3ZHHeq7jeCBZ>wD%4QZ z(~vP{&!;HjVc&!gl*ywr>8My zSSIYM%gO}5@OBSA%3q|!)!b17sn?ln1PWR5L#?QCOS;^~j&YywP5A2+rs=>Hc zf^pRRfc+?U3uQ>pAf2rvGFYKM%Rt{A z3h|Iyd3@YOuWfQGUZcv{&S#$x;f)uesCvK4w58yUpD|4Xt^79;ZVifey_G>)Z(Z+1 z@ISAoGOF)un9D8FyLU$(H{JjE*L>zgsj;ZlAAEIo;MK|l*yt|09c5IyXoWRJJk0Ue%mP=^d;anscRngW3%PNc+=md^I^GGA^9ZNeckH5IPWc_ zPo8wshi3DB-AT#G|LtYo@}Za7uwwsYi1g#(B=y6FE#S5Zb}qF>xx_f&Exv@?$lK}p zmojn$ZNNp^ZG~U0GIwwD{L*UQt4^oS^uftB0^6$39qb&XcHUUd4f2*JHrZ3-?I7-% z!tdvB(q5`fu9qmMtH`V&?oZ|7>aG=ZFm-okv^YfY29@3^a?Ys^D9EUZ*d2aV{!z*> zKC+J%{f=G`B?24RZOn(~QQ`gb8pdSq63Q<-?)3LxG&+ho4mo7ifcS;y?=;Rv?F&ch z5TXo!$axcO(2ahX8;KP->6wIdjJXvRs$-5L8)17)S9I(3>ti~^7xrTf=3tEm-*Zbf z$66IWAXBdlU(^Th#9PCHo$2eXI@!_J%D>&c8n37xG$}EOtga$^^!BJ=@ zhoq>xaAfXpKTz~wMN(ymN9d}U4%Y4nNEhwY`bzI;4t~beJ@eE^iC4|GJ>#8le)Hwu zhX!Ql&UY^Q^rCM+5Qacw-4prYTL&?o)85yt`OLf-6e?7groyS+^?c||HOX53F7T~+ zz9SdWpn+7RE4~b`n3|Ns#)Pz$#(K*#VVjeHoD@<1CY{%N)z((Vy#0iF@)!1!yPaU} z%Ydg+uZQV{rh{Rh`hKre$X#G*20xQf1lz+pLL zwTfkuUh?C*{F;}nE4Ws0_a!TkrJ*qsFZJ+kZ&9xOA;gu|FFtOy@A1z41+|ag@Z&q? z$^2z!D>1h35iYaLa^I=PN$&PJDQ(AYO;Cno_j6;j)lshdlk$7kE#Geq5QaXEIkajnI?|Pv;C^a)_MLxj^7#e%vWu$c#+WwB^KFDe z@Aj9&$zfiF#J-TXG?ikp&@9lf{lWBjw zzRi@{U4K&Hv*}vjI-%!%LgJ^rro;cp?ES*1h$`D-xfzhM&v~mjCgCb6d%8v-jT6;> z6W;f@1O_t)d?_L#68kveCP}9p1K#zOCN!%+p|8ch95vY$4(s0yfn5WV0g@k-*T1@9 z`%PMHP$y z9CBe)Q&Lp0LCI$Eh~v{zSxMK6&K%~3a^VK?ODo!LH%iQ$}$HLyYIjfg!QD=z!tkHaQV$sQ&q2d zx<+vrdjGLOkK6?DE25hNnWp5Xtp)>%o?(v_Wii}3dGwkNadRfI()>@<3sL&}*^`}= z`zWlGORhW0hbkn2qMhuGAs4>8gsJWxqEmaLkV4sjK6agW7015EZLQg#y}_lfUfTTX z6eCjaZ^njGbXlUYb6IXUf8ne;$^M=-&WWjQ=W8#*cv!U?d<4EYS%w7e6~P5(D|La< zD_#H0^LlOm3Yl7d@P2ce;5xXpA3o4RuM~YaI=Ss3FpVmh6Kw1hsT6x}2)JtTbJ%W+ zht}SQ(|i*+=)F@7h$F%`+fX|&l#>;ZEI{e63Iz8L-0ow(%*h+S7P@bBbWO5bwVX!S ziV6B}Z{0o)p~{Is2(^A?lups%MRfGA3lu8HDStUJ(!u^6->1mxUc&`Sy1%K+%T;_{ zG5`Fzs_+^z;b@{Y1t2WHkQS{-2gIvLn~8|v{?cL{XyqvQRVb;1w`4V;kWdJjyL#%} zc^;i!avI23vcB!1`Mh&1J(qX(Cehj6!oAsR?3vj?VfbxB7V;$i;$_}l_c{Ew0+xSaNO_wpOXy=vdd>-r&-cFdww1JlYx7M#PbN?J zD#XTBII*c}?o|4nE8rcMSzF^=dp`bc3;G201N_tduH$9?=-tG4hV*0i|6%H^!r}_M zWZk$0_u%gC?!n!ILvZ)t4Z)q@1ZfEF?iSpg;K6C!8rQ==^UR#N-`9J6Yt>s-jz{Gu z=PFC@QHP+K45eq$$BHAm>c9Ynp!-LUT{coVlU2yY{0Ej(I3<(`iqfcJmOv`JbjnUHV^2Aa{6|iK zW~7D^GOvF8BQ~yyXaAWp8j56!r-mC0VwOWh$)W_$`{;lW8Ii-c21B`5lvQ=naN7FQ z{HAZq5AjpJh$AB=3RFDkamMSDQ~+~2XXI||J@g<&t08i5J{nf8-_Nyvu|P-z23b*{ z)ij?7)$>MrJ||0VULu+@!sdbS`-;D6cR(o_Mp)ivo@f#H0_RM%JwxE^vlOAijez9} zER1%PgZZdK$``nkf$@$?J0x`bu@MhIxCKF*^5%Sgd(Yl|QXJ3F^$b=uZ5v(@;3{Fu z>q(=Om|E%}@AM9{K$|Fkc9#hc_^%^*d8SlZm)G^>h!>>&yQ_-N^fQT8{+wosN|A`) zT_Flz+fY05dD54t5*$UX;t0%xhg|+1u~% z%&R~|947CozmmS@n-)j^{LbZN(Zq6S;Y`zVy^|QwJG|xh!3(ZP%EG@>{*@+i$x;k)+hUv|8r);5b+uW@uW5>C5gV_**Pk% zoiCdVS$BSR;LTH95%uTCPR%hA`jnm=+k35LC*9`;u8#7_zyHzW{oR>+xd_I{Vn5iT zY%b7}K9%0vf?1cbfoU)@6@U z3^seg6n4yJa>0`_J)7;XV~#Mvt#;`&9pW?nU(_TKGD10u5X3bpB-j*wme66$-Y<`G z6D!OQ6l|g*B7{B$BRLh0YHw*gV$fKlOPq@df5DtWcQoIiDYdstKG?S}F@JeSu)xr~ zy8t%4&jNh&H1cYMrkuAN37_+hI<VNLpwB{7z!DZp)HDM*nqOJ8r=xv1b*+#C8Jq zM@we4InrK6%r5`}keV307BIJb_bVLbwnrBJvX=uqYS$C8TP0)OhAE2=cGulGT-Nd0 zt=o4$0kbpS-Se9$U&sBys0FIP9$={<(|JMN8NId&77nAi-2hI2}7o6cSV{YS<%#(-mw)w%INYay@b zs;N7LyADbk%H@mJA5Q}8Zi3|Z2TB0#o)1zQ9LyhLm31-6Ri_E1`6HKtbZsTl)hUe$ zC)MrWTq*y)`%w}CncTbI#l{igXf|Z43xe{_B;s)q`@zZ|?SPHwKmQo2rPQ0>AHa$q2@g8Mm*TdLYv< zVWp>?p=&$bV1AG7)$vIaDuxwt{{9vpNXppRjr3);3U#J?uUv%^=bgErT)W3ZJ@FckyD|-3QGEc1ro%g_z4Xg=k3vDyEeK83(cFv+?T% z*(y~?csfFU-3N<5=(LhB$Rlfr;WNe$X!i;IPE4&JM9rnbef$t5Kq7@n4E(jfF`9{d zOp@YONVQCwMb3GI7+HgPGusX1qBMv+XPBa4r!j?pLK3!^Ey@nrlaauq{3tfXK^txw ziS%ldz@0#I09|1IBImTUbw5z~A*NE^peYoyZsjOkJUGGt)vi7{-5*`eg7lIt++-T$ zrLW%RxnEoN5b1)@TTN3=e)9!}3BYRl>9PWDiUx|&A({kGEJ23T5sFfrlWLKJdmDQr z35_`>|Cr;=WV?@|6GT>sh=(=?%KLXOJKAxSj=#IBLoc{7W%gUjG~&1p z-4SJg1Wh+!v%ZgrGj40$u)p%v>Gb53--sTyx3{nEX)+7y9WWOAQOG<0h}S%)2mGhi=2Vvd65C@)K-40#=LF!7V6 z$I)sP?YA!7wQ3uw@y1q%5^m+e`T$QuMG~#oYvuz0!k%KY+Aqf=2+4`{|jp?C% zCSP^n!R|MhbPB@_uZrEJ9=6#EiF;kKjx>v=HTkvch(Mh^Yq^^HI}roQCCsOIqRQ*} z?j9z9DCK3Q`xF6}2xY8Bh?RiC=8+S=T8QA`tx(sn>I><8(-HCzi4UC!+W}am7=f&n zZ{v2bM^zS0G+!=>7W0gYWvsVc>p5Nw;^C{s-ShfPdPNPC7HBF?!#7y<{#y~k<(rrs zBr}EcsOmDSXeP5{>rRc-4y(@C1oyAgEk8{=(HjoQ(@q_Vz6$U20(34Jt9j&8-d)2S zmL@@7K31u`g+fKhn!nQ_CB4{{08^ktKjmuX7dAE(e75o$p&)jn*W!et`=G5m4}wqB z647fH(d#+=&nkuEY$qf+lHYf3`PP%G-0pZm4UDo`pGQ+f15Ap$Tt}pyan619 zXP#g;KUSfWd7_Ip!Pn7rF$#8Vfw!>qqVy=9@555hYfCRPnoqC8i+@?1qGL<~0@~k_ z$rM`x_vVid#+~JADiF19R&PVVQ3?;4UACLHpwSo;myKdabP}D8z;6kW@tv$HOP%-F zNB^uz<;fmrBj(nO-_0<|_|_;G-nM<;JJiZ4qEH z-B9JBrbJ_gGafZ}sgh-jGv(|@QCmwwvh&U+2> z)V*BAKQE9Mtpbzf!dQNWvU2{CERh<(CweRT$oxt0_w%waMj&y_Zo7?cS_5;EkTau} zkcjAhsGAxW((zv74dVa0>FJK)0sxEFFx?8^uZg?u* z@g*glO2mJvJnVa!s)!Hy#%pTFJo;-dZnVl|G24gNH|E@%({Wz8k$H7cC9Q|%q#a0P^ zRQMVPg0qHo1=meS*YduU%KYneu((=XvIKOfA(Z;^R6Q`{~ca6S=3G zIKQ*|A;H*QMPdz#;7*h2WPQJkV4rS{A;0dWCQL)bgH`((ZxX#sw|9Ev^A5T_ zyq=J^gW@J+C%sUp`(~fp?tIOIb8OSvACOr#1eFR#+R&wlUJlW%{8=C#4^daLg*_H%xsFS8y+Zm~{XC%8vX zK^rHve)B9n9-6DKWbeGMjg+jy*e{=PJsqu7+pmY6<@~CjUE23O*_6b(WEq3r@2ifG zW$KhpI>2c+OcxtD|E|2na#)i*q*gr5tx9O`$LAM&JY?FB?nP5XU;8iQYZAvcBSih_ zH!ipBIb8^62Hk6vY69ko=9+ra=5B*LOcepm;D~qScBg5gIpvFP;n%64R$3!=KfiXz zyr(rOIG5>)YDK=&j|KE*twy2eeLP9(Hviq9-pJd1hWh@khp$NL<0NeKm_6F~{9@FW zG>FDmbl-D)KW~up@!?H=|5DNBqx#+PYZk^nXMmY=`|~9av~m3?q4A;>~(<)4Y#jK2!60(<)*k513!_F~u z1s-fAptvB3ru0O2|2NkTTt3crEAYtGUhMdp68c2R4%;iPCkdeqbCH!DL5I&~e=qk+ zhRqCbG+lTx?owCr5`@Z0m^f;GD zKr_xVS+T3}lAJ9FDRIxq%vmH8H&=xCDMB88zFgxrrAFeJBEy-gR`9E7KVjGQIU)YN zm7dhmj;MX|CX6LPuaYi4P2ZMx^yNTCj-%^7m4!OyTNr2bJGCbZ->iSu#+qf0QhP27 zi9+VCyN_ z|EbV{y+OuedNeB&D*t>W8>9QrO+2);R@q7@;ueERyap@^B885^y=~qrv_lAts@Ack zb5pt>CuW9~8w2ldDx(_2aZmb*D@oqhu6Hh@E3$v{2qV(D3ywW6V;-|?=@q5-hS^@= ziXf`j(aE1u@1u(ILNxa-8wR4z3LujLxC>=09}JOm$5f+Dh;GT;TIvtaN4B@XrvZvt zaQ6k}j}D@slj->mlK{b;PeO2e|8npAzj*YJiNu|;`8z(1Sc_!^zP^9#BiD0$#UcgA z8xJPcm5rs>Cv8iGo2F~tNFK)2GJSK^WC?Qf)tUWAy2kE-?ROl5<<;F30eh;OlvoAE z_5FG8Z#5sa+|T76v#$}i8*xW`V$bI{t6A)_w}t6FI!im~fiy;bM-g+LEec+udB45; zvs8)xUCyK*bM-2feZFoCUt}|AD){mU6ZD(;=F)lHuL*2UnsSFYFr?r5F2g;JG}Ku zGpE)*_l!hzh-XhFJsk*ZLGQeU z=n@&m zEq!WD;&U>B99eLZ1Tc8VoqqzZp#5C=EuRD^SK~CnQYiGk9dkt1eF;Z%gdL2XF$XZB z_)APhV|3StU##1G{eh&!uz3|u<^9M*2JL%K(au$!kbV=_4j@apXwnWXU!C^l9u@U& zUOKoCTYrS+Oe1z$`?E5p{HEZtgwt@ta^^Fv zXKpA#>%0 z)A^;Cj}nt;S?dJ{@wk&DK!6y;?SEMS>a{Dnt8swVORuHWo*BH$fbee=z;C2Y4~d(e z-Qk0Ir>0x~(IRZKuV1scen%Kq!cC2?cF{ia$oQEm1AzSSKs$}uTzTBhB2wHNi6!lY zfl#gIEb--0f!TH3D9W1H!CuF;VI$b@T08haF|2w#Je@}I8aPG&FM9Y{C!qO@)u#Cy zFTkE)0XDMSggr-|a^Tsk#Yg=T~frZzb;2nY{C; zUP!MIU6PAG)6`Z9@N`@~MvJo4Ikq5Ex~8G)tdsA*@q0umwY1yS?#Bey{UEc`=-$PteX)z)@LAt`33gzuCCovI)MX__74#mQ3Gj0UP_<5oBrDUV-h0k6dWK zurw^S{Wmoc=0&_O{==XAlt-7Se8bgJl{arpMpgpxX0y&lkR~D?tRXbp=e=o261!k# z*18C04+!t!HKJQ3GO=uTJeYyo8h!Qp-pcn0>DNI20!Q_jpW`E*Ihlxh{ra zS4Uri?$}Hysmco)`-@~MpRUyC(xO1j;#BF;bpxKxFJQ z!@hy?bgY3&8Zq6mHdJ>jZ#9=W9F28KbB#MSy1jwU-3Z>DLNP5Z5HxlEg#TY3)-ZJIm+Kc{K5-OlsHp^BuuxTI z7J~bq?nH=u-mT$o;pdt$JU#QS{#5o3@!A11|| z_Z=&@H#3VGx~ojDO3bb)Qh*hEzQFWYgVg*OigA4&{w$~c{HiKNd#IZ)!!70?q)Bg_ zGt2WoHS_Coq8a%yG`BcNTm)KLO739T-Z6n83Z1$-G#L^E=2cm=I*1DAB~&`O`3SSu zaY|`obTq|rXwaubL&FrM_J!!LV=-9p?x9He46f)^=B>&}{4QDhYr5`8*ax;vnc0js z2_-6Jn!a%{Z!N5~vH{h&P{Xb{k&3f(o9@sdDl2M!oclGqUl%20A3OHAZoiscl*)wF z%OOlWtm^vzDUVr+a@unN5*Zf>p|+zS2>36SVh@+Ti(Iy*vI(J;6Irzk@kB46BKu)7 z2vS}GQ?ARB8@vh#UK}*za%&4rU6QEO8(&AbWap&NMKio|yp31OBJuJ>0xrvLwqEZU zz{m1Nt!XGluK$w9`hB0af^X{6yQv-VZ_zB zc*IrtOS3aNJMQ!wS6wB~I^Vnf=98cA?Dt<%+~t;Gnz-mRj@g{(DfLlMP#8m>^n7Py zjK3jy%F05TD8CRCPVfiL;0e{(QG3ob5#Jbf{nf%vwCINh3g@C^A3#`U#ZL{-Vb)?1 zvVy-18|QEkiZE>sf@g2BDq{dn&fu2Zo>tH2KE`~DrFR|zy?c1g{gJMCyI$Q>!NY;q zEUmiNVnl7rylNS|wI+8KAyB1A<8@P1Uoe2=+|dnid#H+1a8k`UH!wy~5nfRsL;yN; z4t)|1K7!e^B0O10-|;>S5Jt$j%z)9+UkwpAW%vuoHf%wX>1cM$bLDwb7XcYfBo!YC zxp4?gu@8^W>VxMo|1k1_;CODjoPA5)v&`kf9y7v5P-7Gzxf$OBEz5MRm}%qxOWXfY z5Qm^QiBS?SqD=-UoiZx`0%!hL8c`dMJxN3~;opnve}7g)OT4bxqXzNIX2u~M28=Cj zkf$#VZd$0Ax&6YR3h@DaC62BwzJ_YyZegLfo5w=T6qI#O8cg7>k+2?j=L?2%iv~4K zGy1{<24o472?jDgC!~?9vmd$;?FkFe5wPP7MnREH*zRJ5BhpceuOK!GI3f+^mJ%ja zXOsXEp_PGRfc&6{0y58hfL!8WrrBPLnrGx0btEGooO=?nJxl-lil zY~+t|Hv%3NZwn~8ZE-LAh37cPvWlf<^|2tY zxLCCW>g!_vgcCI&^_2Z*Nz#P)FGy-Kq9vt)14D^a}0VUiV&TosLSo6u3pc*vy)luJc!sEjHu z;i5GA+m2)V@6Rco3b=QMI~j6HN}YKCz45`cN63Lug5qDW)zAm zpG=qDQQ-lu`PstqM^%*@O|De_)c6t}$Y80ny%qGRZ|dkk{EWn{tgI-bUVx4GL+v5M z``KpZsK}wzkP)uMgAp0qeJZ0zWNnGT&8Qa{A!hlTAGFobRIZ>CU~~pveY-H#JAvmX zh);Qa<&vN46MfB=ERhPIq;_*v^$b2u_aFO5>3 zX0v={olqR1jRNk3OmpRVBGqcU`^MBHM4*tlgS{ zV{x+lTQsFSsc7yXMES|cwj2GnQ(VMss8cc}XX}{1l61P61i&k3A<&HS(_vX;s9kk2 zUeq!hPq}In#)tS;bM}VSps@(w=FTzm^*V4f-4B$G3KMhluK?%n#PPXi@CTc>ISHp{ z-e?u$cZRh_fzvwcJngB4{-X-?e+WUnOeREFF;Rvy^f%)^ z^fM=dgbP1^inQXbQJZwof7rqGTH}VLcYlwt39(BwHoEln`+QBZ62}E0Kz$bL$jB}Q zOFZY_?pq@$Te->PruBW&;h0D!m}MA3*cyMvVYpc*{X(XoQtW6AaHJ_KXSV4fDthev zpB%mJU_8?#<+duUbaAqH%0^l!tfR!_1dO?B7bZtJWa9S6@&m?!_)c+j)G42%3UhG@ z)X)QxEd;XUs2R{;E1kbrj3J^&C8hrtobodZyG_DL?Q524^;;LW?62$<)Srilqe6W% z#kiYno#vDZ1%{L8WKs-67^XG7STTMeUU%R#MxD}o><)T_zyX=?cP7i%fw*|Q3~wCMVT|JJX{<27 zwNX)x9$Jz!f_&fKyV=fG+nBl@XxPj|D8;dRVfQLcavCHG@^wa`jPCpz$~bgg99;ns zljv2eb&XAvZ9IT2cvN<5_2H4V+Aasi(?aBB?BpZc(L%Cxsxbk*GiP<{Xwlj^v>Zlo z$fXE*46C^TrCZR|%5-r$l9ti+%SCi2SB;lTLx0Vneid_tuK%@@uPz2;EQYAaBxR6x z6hvOD#ed>xnyRl2hv7-mYG0|Xk}>?PZD{eiRN=7#8uY}wA$#(o-9uL~eCXMEY%V9D z@X95YQV%hDG7NXQsJ-#Z)IWRn!O*^0D`i5h6w3r7s}bE8-Ev#T{!PeCmvoyl zfp2ZPq#CW(Vcd}z2`J4=9@F=K>cv)a_7y)Nj2sZW&m5v9cD!E^LHZWkj&%bM#Ks<3 zpR0tF7pH{s@N(|^VKKt5pYQ||6&mVOBb5vLf6o<(b>H~qYy34yuD626Z>;=>%kp-2 z!twYSSGkDfppVFecBk?EQp)gI>G`WCOZubNWO}4E6OJ@K`j>1f)k-D3is(p=D4zdo zMeS`oC)V0pQHC8=K+V!E-kV8gvW(6?h!Vgpu)HEogK@`r)KTf^&0H!VhL9=LPOzNp zz)>RBQK*@}!{pIU8%@ZJM}OmpN@`I>h9C4RDQP}3GF8CL(xl6CY^c2KKc%CZ5%2Cf zR+3O3COgP@7^b5clK#MS3&cCWK%fN~zoXFaw;At*&*?RiS;p-J)n~LSizivkAHeOe z&GW^Jh_GNp0K*T|^@wR^f+OcMdX-}a8`NQ2%N_6%-CnX`d} zUV1oTZIVJg?F6?bDe9hELU%menF{`0ZSj3+&Yy+uZia|Fp+Z=gMF6fr+bY2Xn(3nB z!nDnbF>9mvCJy5$L66Udp3NaD*n_cE(IGdrNn}Z~VSuomk{OMZ*@M&*7@7!Tdf>bS z6j11*Q)&lARsWB(x&q}{h{K~tk%%Yx()c6y61KQJ^>loIG#h0(e&jz>-JcA@@l*P> z=1b=rM+Fz{(l07u0!_F-FlTl~67Hm!sVJ?enW4j}QlfSd#ffz4$pH!4p9&mbrn(yw zehpY3WbMnT$Ns=b>m~dhhiGe>XZw*YBa|R#y7SO5JTRzzqYN%m)=r#SF8gv(SzPKa z?n$jMh$58R0~T;fSR-X#auVsQ?v?W%`2D24Ra70f_9Iwzsm{~&_>p!KMtDN-rk)tJ zjJQ~A=CE7fSiEFiF~BK5m@K`{n56#|_^Zaq*nt4nYiGNCMbzM)jk2kW(qPfA;aBt6Gm9~=UG&l z(DBh`0R@tqHc4PyRE#05+fV-&Q zJp0)L)Qt*xN&>)dpADu;W>&T;gWISmQ^{eXr9z(k)Ow2YK@?cutNsL|0wbJv%TzW{ zTo1fGd4-Q{(ItWv@CEzd~-Su#o zvc}W6ORmhXh`-1{X((P3#%=3OXc9qba%q(AXR}0cF(bKTm=y^`JYw7pxlI-2*NTK4 zmTio5+E1%M{{1X)kvgV=knytPB^iaA4%=flh-bu1_98BVk%G%OCc~z4wO|tl@0pu% zvW)c!L_7FS%zxH;ji5WcAOW!?UF+f2s!P!berZ^{Y4ncSEjH>Wi379eo*1ms=;w+<90A+^nEThgDP)j z*B*6~OuA$wq|ZHY|EKLrT5(qTL)hd{fm57BElg_eS-XH0PqjnQ0MXIak{SW-&E$=QPhWlqd_*lSVsOw!)JhujRs~Gj}A=zS@~=OG^LGm z6u?V%>C}9vJXE)ns@)1aT!CM=7n?i;67k=&mGML?RP284U}5->Sf^ksP*>w6WXU2m zD8yE9jm*TqCI{)u%zN3Ga;Y_ikV}(!dgD0Jq$qJmEuvxVdVX5_N=IJblpl!Y$$7Ro zTgbC7AyS>Ci9SkO0{fyz6Jhb$G&>vZ36=jkPAA*Mh5MW=z5tfFn{iR9+3)ebOE_Q& zl6RrF`|8iq5v+NidiH7*LH^g8IAz9&^m(?jHeENMT)nPZ>XVIPk81>*vz^X+umIx7 zLa?d>5oVK{s*e&O_2Q;qKrTsPpZZAF~}vGDsja|U|9j# z&-3`v|o}Ot$M4(wTCIRuVuz7X@{D8zSKuix92G(d6HxJEbf~P@f?>W2ej`{lt1DF^7XCEN`Q3k|jc-oGiiBGkzC4H&)RqftK5;4<44xna!@ z*DSu8Vk73Q(8HQf#(&em|E1e9;2~P}WFLnl(2uQ@;|+a@*pJE57@{)lZonUtv`uTH z#=Da0A@4;ckJZ9~jRc?rDeVOQjF`jE6T^jGt;0d+Uq%`Bk?H_qr{-7CpR(>xD~85O z0u*We*;u0)>I|;;CKO|^?6Y#U9JORpbQ)*C#PpMVfB_Dz>jgACG$}Ra(!+&3H>a+z zoKuqIDP95pus~mNO3gl4$$>JX^zjn3W~^t_lV$Y^oFVLzPoF_hxq-4N7VEF*oFIvx zrYK`=d-8GHdE=mgAZ|}au#ZAuyW@bBK8u^@ad%qiiqzfgM;aj4PRByE7!gO-7D*Csa+JzW~=T5x^;-i^4pUf43qr zuKp7>n0DsZJ|0OGq*5s&WaFn~a`6*}9rZPrq$?LrQ$2yK zs3-2>m3os2iJ(REZ=$@QYfl>?H$heyN688(>G?acIdq|$z@HgZ9aEg)c(CcO~9a|>>pI?euKmxHkkFzM#&qK)*& z*T@7clL52x5Z31NLt|>Psrn$ct%m&ZbiwT#1mLv8%=;rl?;kk}tz+zhS~5yU^$zg?tW z?1Z0vBT9SrtnkVhcjz@audBK{Y!n?bp;OR0{TWB*{1{|8p>ua`8}1f6mj#_YR;3jW zF5DoP2(%KAJc`tAdpExdarINMLrGib8+|3+??A4 z1K_jjBC%r#)%ik8wVB!LKzqn1{?k6hm@(Ez(E?Yq#80%ttK+NQGDs6l z#q;F@A+*Y3iV(;`ZRRMvzTWqL$SGH7&beT5m=gF6{YmftKJq>ceFdzNPTSaQ;&^Tn&c!r&2d-PV~Vu;o22)GB4 zss&lQ#I;>rp3raKKDc~EXt^tBdJ<6&dJ&iDF6Jvi%!^Sv>RR$)#~aKEmxj9z2E<=b4sO?UP3AuQ#rM|la=W83`R@SOg)j7eI(UKD(+G8U+)QAbi+<;&-u!1t=JXAw0e?>_UYu!28+v=p)acCbA167J zdfC+Cic-_YH?iuTJp7zPEkf+GXR3tG_$tPvNmA64Xtn)809kTG!y9h2dDQ9Pj^t?F z?$_Z%YRZmM1TV#Dn742%lrYx6RC-(%VQgE}eK`FKxifb-ca~UNW+LC>1-{}@qse|_ zq*d0zrcyA{LHJDoDkh+BT>wcw(&L}dj^eIL$TRXjSV;0{v*EGeVCxPLY<;ONvO&CD z5crZ?s9202ARhm>#nPDA{igiFi05$1w%h)HQod^<;3O^aOhcjb6s`~rm7ugb6Y=um zB>9q^8_BmMsl&nim}KAzKXvW_Ozt20Z8b%M%`(A^9I#S->%;hJ*uTsqQU0>WHao5r zJt{xSt~x~-(oB*u70hDp6B5N_(;cX$U)Mg!lj9s2SbL(zHK&C_#IFFCVOIfR(1=C-DIw4Sp@C?bAMTpdyn?_9QQffidXPM+9qoD}< zp8qxEMRvq!>8+I+)=YFz&pXSArY95_n%9g5BDGctm}I~yQEKhw*q&QaEHLxMlkxOo z6oTSze#8Qx(JeF}QiV$nY^w~wzjI@ij^)j&^r~6*&F$^v22?V6P}=#uxUM1f*N!)1 zJTPJ429ulBrRllf+d|L~D(r+)EkzF$9DEp{3{4%8;{a#(-QT4=d=QDz%& zU=WYfCG50Gq7ozh>&tue7E(Qoss~6VYZYE5k%)$FFWw!B9l~Dp2?a2c-uX{J=90|c zQ^G>0Aa#fvE=qgOx=KFbUw)zR+mRIj^PzDb4FW|I6)f3@k#lrNiuAbqqKPUZSCKJe zaUGpK=?h(}N(r&eFFOcZlbF6-VTFGOw*~O3&ROOCxA6W!w|r&Z0>K87yC?c{g~qwe zWWs>LAOmF3!du(mFw2GgX6Mc7qu_R>J?=1%hkAOyLZBX+(FELdT`~4g;Q`5CFZ%RH zh?IXg=P5~nvGjNj2&E^)31Jd=51>n*T;M^t9q52sPY%1_Twl}F$CwgNXfCUFrr^br z(rjij(|jQ`vVg;a0x_xNA4P%l*ir#ID<~4Kn=-!fk8tV|5lmK>0^eBU!h4>nmq0grn0 z&nH*~m=GoRI%~o(ddRUip&p5~(sPGduosCJcU+kJjNT`L3a~NaRJ>g3u{KctBjq!q zaxI@xn#g(9c$>ws;YTh>&{J?mABp$BBgDzMke~Al@o-%Rsj6$N7;$rA1!6RIU>nl- zWGOnc0Y=mM)Ej*svdYz=c8H#MA&Eb6V|4%dp_vW^cPe5St6HrN^#R;DsrGXo$O;HA zy^f<8-)i)IHteWv^UCnm(B>(-2DdjnVE>bb)-P7&J-$`Cx zE`&m8CI|?49n(32Whd7z?U#KQa%(t6cCtFcPmHWyj_ZqL4iu-e&$#<>yMxY{zv(Tk z?7>}2>J?jMFUHy+B3NF9YQvh{A@AADDZLn$wuqdzKBt-*EK5T7KJ+6S^tEB9@ptVK=46hL00C?Q>nEqEQ8*Axx1 zC4x+DoMf~L&~t$8NNr7ac}@PO<)fEx0Q#ZdYkS`K5}cj0WN_o5iZR z^FU-e0E_aykIaxR!diK(cI4NtyR8AG6tNF3k1*SS%+%t@Nd0dPi+FzuJ-jfF%)CpE z{K(zsEUfA?D1n$UcS>YjX6mwA2F?a*8gNvd`}}hJnfX`du^{`SmkCFS^oBziP1Zrr zsIO%~A1@dH|A8hR=8Bgxd19w2laP=Nj=9}L(D)b&DM`F!mp|+XQ=h_Lf|-{u3l9FV z+2+T3QIe6Dp`||buM(VQepZrf;ybE8yb(3%y~`IS1{0#SsEda$aYqD-t0F~|5n9-; zYjFM;q;&mJP#pjEmFVs%3l>xlLyRU?{p6Z*Od91KXMYV-Y0L`GtvZ|$dRk39S^1Z!k3*NpMX1+_MXtc zNA_mb<4-owN14sfMk z-_LB$P6e9Lix?Tl-evnvnyCT}lzi5UpITsZ7U%A*%%`#2<|;mSu$c81dn~ZxXRmaT zi{X-m{_!_e;X64&|I1O2ZsY^w@7rNV0{Ex$LSAPIn-su4FIhC<%x>TJS6l5_a)x>X zxjwhq=z$G3-`~2IwjID#FI+Fbe}n0T>79FnM{Ury)T?Yq?Zg-~*XJGQDhPSNbFi9a zsFq_l2FS(iTSSb-zG&fu)JHzH0}9U;|7x?kU+^x8|8C+&nd<%VWvAR4NF@hQG zACz*|acNYBbOYkQ(@UrP#hua%rrOpv3!sfio)%43naoksGpX>}QPfMr%d&zu)*;;S z7GaXrubXp^(`LUy;6|8HRF<59`(BU_4GT1flEy}HlvY`^;1_E(`uAtp>RRKCV%CpI zcwbw-3^`wznnV}UE2{=$D6?vmWLNm2wF3G7q$pbH^>&B+_>`4u2nf6tK2RBVPc_<+Qd~p%sKzx zwsqZByl!Jw`#3iJX>e8WPsWM38iMf zWA6?zCUfAhw?T$16DZZoK}sg8vp~Hho?Z1?sO>g6tASHEMNE~Q{Oy{uptu7Us!+2* z(fG3egeqW2lv}i5fa|gxY4ejUtKnTp@pTXqw3@#zOC7avO#I9Ii~Rf1k0r^o;epO+ zu`xu{q%|dVGo~a>R=EP(83IhF@yH~&Y1G-gubUqj*_T<%Vb#jsgB?b)E~Afdq5wWpi6I(Mblk#h=_S z^##V$0oOt)OO5m8z~`cnR_D#`#(Ftid#5kN!@v|M`a|!=7!|@xf>^L2>05I@%U1DQ z9kOIJVtFvpSAh&Mo{GM5biKZ7IJVXaw_~aHKk18KND-xv0iVuXdnZ$Jf`;8+yuGf^ zti3zd9G6qhaO15V@G<+!-E-LtMHSe3_lM($b5U!L=3pg-~LAnx9dg zDWVckDbxRtsdHegENs^7iEVbwj@7a4j@hwo+jcta*tTukw(Xoaxw+rWow+}vcD=i5 z)p{(0`BI5MEywSUsp8=4V9I40$WsOwD z>!7dxUFMz(%ap-1;@`A1kku4+(2;mCiW>;B*u|)PW|)Er=>3{jC_&8G+pDvOREFKH zRB0-mOPg41AVp1JE3f0|G%n=+&gbX{snvx1TjdwSW_DNRef)OjV(nbNHZ!a*Ks3j| zt&dMMXv-mJwy+x|e5)@o%fY?PA-&d1O$}h0cj)^;j$(uTNg)fLhY!j7$@X^|#EZ{d zmRp3eY7Y-U4%26E)ymX`8ov4WKbY zYW1!_KJ#&EbVV$@24&&mo_9~=kv0e~r)7A=Ih-{8AK3FIx~T{C%xH5aB?yfB6US?o9GxUVq}^27EgD}?0)U8?pi1zEa+jPwVsD$kZ&1I1 zj-9^VJJS?}i}bKRL0TKelaZDh>Q0rS?F0wJ3XaqRgh$767QPr2DQHavjy*$qUxnme z@GoW)bd+#qNZ^F(MHFtm1|+A#`D3;?>08M|#o#6jSbm!mF+aSwemSG$MzJbClT`_R z{X2(lMh?%bVTi%E;pQ(d&*hT!&B3MTG7uY(;VZoeCzPy0*S60Q7#4a4eceZH9r_nN zxW^0vf_ZT|kIFK5am;L3Cn0%YBh?^;DJVCIRE#!&hH}B{=MM9E*iZiuPo19Jb=?5yGQ2J6rN^9I6MZ!G;=sJUKR}&-G>P z&WxFfH-nB9I@o#`^5?g^(kO^V;S$cDF{*W18udcHJ~lPqT4I~(5fg`VzpkT11v2bcS#-OCT5j$Iff!$ElVY-Hi!I7tbjWUgGd7O-O9&? z3jVQ+xW1c{@w6wu0&A*X+Jsy8G>%@wJ)k?Y#iCkhI*RdRqPc5yE2-z*U+??n5e8|d z)Mux<1CGZ85_{5Xdq^&cB6#d9306fH9P-HCSk^L)T*vq!&o3{W>O|)>-|_zfDbfu< z{7^Y%MU28kDq+wo;zRxK8E~?CgYQgpDQT%6`uA{3B^Ocyvcv_oL?|ZI#s-b4oTO<5 z{}JV#qPTBehDa$Z97gbS*QtOBLUCV63!e0h=&NR9@mkfDK11=vIbp|!BA ztqkW_q)_UDvxY*Od=RZVHxd(!g%}8O!d-_@H_@AzNVwOh`fptd^6*v-cZ~(DjC{A6 z@5?=)(}U!&CaN7?=xMGa$9n2Xj^o(U+{U{{+8Vt-@(ZjV9nDuMKC}aX!Q?=x2YS^ne2^ZTm>(hc*gGU!FH~u0F5=XFWoLem zj#UwkOAx8l!<2w353Bi}x`Z{LES!@WH}`I(VqBC^)-%@%xemSux>Ko84RruIeNl+$ zWkV2ieXjowxWJp{px}@t8EU*5x`)$WI)lUZr<6?^AZMQf2$@Q|a%_(e85S3zY#`dP zrQ~%i^)Jx|^H5bNyM;I_6HRXGRfP&nLi!kj;TVIiU1V-^hQJz7KMpa$f)u#Eg~41cKe^gOMGU9CEGQ>YASH&UFu!6GG5(65i#_r!3yql!19bY9>6p{ zE~MU|#H(8l8UiVWV~}5Lk%GNq2dZrpyQC5pT~-?98R8@~Uo%jqh> zv4}0wR-_g(GY}cAHj$&m;V-RaqqV@-vMCAysK?`;Y!rKKr}16z&_wgj-{s+nJhf10 z;4O!~k)MT#Y;wU;C3`aF9g^WlOYxSIan2=CAWkt0>0p%G(&r;9qD3KP32QNlPdea& ztlxS?xb%jHUIFy>w+L9K-qspk{v*%*&)$_DlPGvV2t6^?VJ6@o1O@NAe1+y?bT0;d{LudXf)2tG}B~_yalQ|R+6(86|lo11{9FL*&#xN zIpA#s4Y#AE|5&Ov0g&=w@tDVscxZWyA|7VTK_q75Gl$_L(6mg|oWVL@Ba_;5l6r3_ zhq*cnT*iV8+jY{Plo18ivW-h~wVa1`wGw65V$K~9jW9QT8E{PoyRi~WRgOz!U6^oD z3-U(#v%isfK)u`^T@6+KUQc+y9?{Zd6i`{x2b}rmV>8_luoS-_?5kuans$h%D@wcuwjgH z2Mep(gV0Rr`B9QeHC6cKI&_uYqp;LY$!!vs2Xvu=lycpWdnjbwbBJ@SkarKQm*ZpG zx&RB}N?;AvKq3x4ZaBeM{!GS2_DR*cM3z9uplypjOvRuqm5Mxj)q)UmJgGw>FYE*F zU1J;`KkM*MVZWBDzqj@S6ns{MIa=HqY}Fo?5CMyKpwRI`v1cZ`8@KLMHWSwzZiPSp zSz5(s$D2!cdBLw`c&n+-obRNvC7$FZP2=^h;SEyGmdmT{oAivriPwwp*;CqM7mG$y z%aZC_*l?s7NGL<`G!kw#@E42_ zjpsS&Zo>Y&K3H_T5(Qb8!?fDmZGPxr_>xiKE5R4P=QTmasY<5n72lKQ_Ci}juw6cM z92g`@gpep|Pq;OCQmrT_lk!+XTxnb!4sOYBJf0sEcZ9+czf3aVx_*m>7vt?oxjy*{hcRO}ncV4)5 zzioQ*TJoO%kw1i9t)|tEdBwQ1ias~Rm2Kvc#}6CxJnotVE;=H6J=;MpwBU%CfJI@& zaSGVOaogtn+TrP$$DXG3)|j>B=NC(qIE%Qh8ijP%#6nfWb;JBQdWwGI_*p*d?APw2 zydux$HkQ>5zX#tJQmu~!@2R%})=%KZ9oAdhO4k zU`YqfQX@oX{ZU<)-1t8Z_VO^~1>s6#%^KF6P9-Vv0EGg2zyq7gNQ$$&QxH0u6ow$2 z)~$y4thTySI`r{f8iX zl@X@jTt0bO3qI8VO~JHXR~orOrcSki3S0Q=B3K7_X{U8M!dXOJ)qpgKH#pKn$0*7l z2sl6H_CL}65|`1NY{mE=ey|TdrZalUUovZlK&zCIm<&)?anNe~1<0(AW`Df)JdAX9 zO(2o(@d4{0i@JAGvaI7wxS$5WbUmIh6Ul*|e0XcDs(& zJh?s_ey-C41@2Z-0#?sBz@8eY5MIU$f2?Atm`}L)OAZbV89213E zN)o;l`sxO_lt2&>Bd9|DNbJ_sN&uuqHFN~ZoYbxA1b4we?VsY(Bo-3AJm-)w1Pd3A zx^P%xJxE8GJzPCwsa$HmfAh7ekP00*$N5N1{m`w5sVrEb?#Z3J(@&!Md|7&7-Y#m40T* z9vZGlrCq&S>~Bw?lHN7*KgRW`UTPrXUaueBLCX13*Sur8K(^SApk@;ow`v$*_E%5j zY_0wjK%@eYMtHM$@1qdhJ+0xExX0qHUC?21q7!@M=Y{AZ^>^;U!&sUVkco+BmFFXb z$zQL3JT%?jxBntJ?|kiXYKu`#bR`p9zUp$!E+)ngKfXGl=Mw2Vx2ndVl0G%Gn*%Y3dBP90}8wSdZ35cB;5rEEoQRmqc|sfq`R)_PyIdl!~n4KCVN} zsx2G&E@`FXyhB?htetg2B-~~?>(G>dBC80ovht8(-OL7t%b%1H>=!9nsM!dx7BFah zPA>_mX^lYRr%FmBOO-y9`I4!$xIquxrIAE%!luFs=}8)+8+bqD)tXHK8;l*ub`28D zu%1%w0%BwYVVul5k(KKG18?gv)!tc*ACIA-J6zhoL;c-TF&*sN-Q&Qr(+ApL}&`^&c4VErf+T4g}$b4EjzIM4V! zZV{G{L22YFhZ>9Ue)|kSb#uKR_}eAYLwQL*~M7CBqoKeO?nbln==-XF?oh* zTi=H3c0MP1FA<7O@=+AIk|04E6yRER~vCKv9J?|##h6525*dO@HRId`?d6OCO4Sq zIV&y#ndk6wK>GtLfuw#r;Yy?+-7Fh0)v4Sg`xsC;5JeU?|sfD3Nrx5yP^IujMm*Y!Y4WaQUWQ)Gp+Dt>%W5uWfGGgJ|HV`aD= zOdd-*JSHo53L0d@( zTHQ|DRB8A%Kra+D|Az&b=glvDLz>)W?i+0RI8msg#2iI_}H30ls+_7)CvmwRTw&_ayqC=!Ku6!0c-aydh1P> zh!6UY{`irum0=O$5iBtfhGf}PLU8zzm*_gYd$<(*Fu$`<@9-M17m54`o%opArn-}~ zBEHb%EEwkYh9d*!vu(-7=@&JPdTF!fW9^DQY4U)IleU{ z#urB$B0t*geqlU<=ht0!U&5n5*s|^yU9(H3x@BRX5qtH8M$FN^%W@$XLqPIL4 zz;;UMHw8I@rA!~h!^*ihmC3tKpfIrC_j0fA;7E$W<*YsjFmJdSnWMaw0`==y5)4f^VitMpIrE$J6K{t!xS_bL zdL1B*s~1#}g3XC;j?xMi#0nugCSE%r>y8pi`m1{w#&K3~?FOL1DiDyN;>BdFdZ&%y zzZnw`vV;PdSTR+3;WIhBx;u$L-Y!f;7CG;}x4K+FsvH5q2*M+0v!f=l&92UgF4rhG zk>nrop;?owAmkUD_*OBh3tB`2NnEG>f9F?bYMP=KcD3W=w7t4Au>n2)cr+69(6B+L z;dy7-7iacR$No_~S9WaPiF9#TXzF^pCH<=;8zh*04O#`G1+=0W9zV8H+)vZ$lKxf$ zmfQ=f@Mp7bzm|KL_BJCmre0-Cc5X z#BHs6&W9Wa`>!-`Cp2#fGpy7UkN+$N4CU=pmitc&Y_gz+F{fp`NU_?SzwWI<&tg$R zV;Jvwk|^C?3@(AS(FI^A{9dV?VbYr5I{pW0O>6RyaGt21K@#$3uI2J#_oa{{@0g(q zq-PW@Uv$;!05sea>1en3e^t(fKU|9F%RFiWeNRnGB4>BnHHetT85vO#rw(x}%AFmfnAyxs)sVNtOD%ZFW97ty(lq`O61A`2`3u9pT}BxUbj~^C9pv_mk`6 z8b@Q)m+%V4M&Cp+kdF(d0v+RV7d4Pt=vh z^l?-gV5#oS@f}s21ccdFUk>>G0c|{$h%j)v9s$sNVJ2ZGi2w{isH#~|xgxI~7yam{ z5eyPcmmX@^UZ&YQ!%YGVj;J>6cy_UE)vDCFvN`NV6fVXoSUt|%)vYZ?A1J-D5h-IK zj6ri`I!a_cN6QrUc79nJhuP`Uweh$Lwj|rxSaXe->vk@ zpm~Y`wCXjUUw2*0Ot2-7`7}wUpp$i7)tBC1^F8JEs88f;qM79oqCa01m+YZP+ROk+ zu7e85{F79k-NP+a_rq281?3N3HkdhI?fjnN?M)F~U!uRi+-U zgksA}^?S}c)YSl@_YAJbN#M)0Zx_CT&J4 zgwqGlzF{ZK?ep%|{`q=-SSfS@E+G1=>Zha(ozKF^up54J}7 zyJVp`9+Dz3C?&rh2MuI|*fseBwILVzC$~=p^*YDU360L3nB~ZQwNnuBI`6E4w6p;qO7L_1)tl753x;E3X%irgd9vvs2*bl z0`SAJJPwM2N_qG1&2fyAo6tB!52i&L$P={F*Vy31M%slRhzfYg^`c#@G582)rM3Da zFkEKEyi~71cSZl(YSC8I&+h0?4ve^$RIKoH{)a}4I<9Gh4Ombb1fhsZ0ZZ(OXMP?r zXoJMH9$kLPby3x}fsBW1II`$fQIVK38Fol0IvmQTL1*w1eGk|sQjR%v4(4j@$s;ai zXaue$LIVj23RgyP16r_90eWYM5Xyoe42ND|p20}$8e0OQ#*)$Ns&Rr7-qRm|pGFPT zbtcxfA2s|kks`z-T^>W=R~`!SKCVpciTH8I;DZEdwhSD)dow{C4e8MAkC?y8HJfi2 zY!Txv^>tx_A|j;`ZJ`E)>=zrY_o$pL$a+HSoYea#h<;#TFbjC$M^2QA=9i5q}~)5$s$l-*^PKkz5uC3_VedoWp5pCZNSvJss5aqcSE%=(pmkcVX5zQ zw-KE3fGa`$N61whqRZutppTj@NQtmY82IWi z`R$iy_gg!`aIDwi(|T^}s>|nu`7v^QvjpG5-uobMCeW0%RMvg_^xr?1b;8z4@9FH< zEa2aij)6v6Rh1~P=`H9jc6?9ChF~~U4u8;49xi1eOrk*IY0cmID76lWlvM6TAD{uL zV1L;!Eg|6x;oXBiOYK1*hzn*{DKZe!!WwH3954fa>M?5iWqYc8TrlD958XsOCL+pe zFmMZH5(UUsSNHxaW=1#)lY$WaXX+splY1%SjzpId$6fh11=5je<1%3Z(?I-UPZ*uSZXI>g;F(=649mt%=~nhh~SGKV=8*d^irQZ&`GhI zi!tAVDyWGeda87bS>p1ig^~H)b8(x7)H3EQ>I){zmQ!>5DopSu5kX)LT|zW@#Tx$@ z)hP1y&!i+!KvZPYMNok$Pu9fVO#88IWKGQGmv6$HP!>bpj}_t-uLh;;=lUm!V=&>xgfpdEP zJEE+jOi@7qer;vyFGTK&?~b0;v`XJk4^>cE##qT%+u@Ext3nnS`_@pt$;tg;CaLSv zPD0&IrRgpA!nLIiRtD-~o^g_q0G|vFT9rw*AMKb>1389Qdz&ucf8KO* z$_MrEL;GOiA_HN}=b%W=x16sYWYNQ5(*i;~AQ8uqQWX#DGA zK2OhMcB%AfXBPIN@T~imA@afpB~y6YP#aRw&8oVrkSU*6yP!4y*&@{FJ0GPU4pu0L z)V69DjGhxCA_-E^zk;61-lV2n$XF(^*{U&YBuBn=7(M8d?O1`uYwx(Ow>KPVPnp^` z@$XsEsly3CKIkm_5`#V>hhd4M)Vr@Ic0}T<9lzf&`xU*!5`tMn4h7xdPj}GoPA|gg2W$7T=T5%=9W=1*k%!OiAOVmri<4T>&c$y1DFgdF z2^R!X0yv_?&xJP15tjoAklDYV*AobY3XC|-m-wJnF2p%~RTnt0V;z#U`V8!gin#d?3l>mA7lqraKP{8Tm?&K*R;GE&q8TZ) z|4K+kyP%QXk>3jbvWH)v=n|j|29{KH zAx_9c;`+yf?JmJYRj=%8i(l+VxwkNVR4q7*U$l-GtoBc{Z0( zLaTD|>=^ie;+weSmf0Jky(i&BfBmAAl*b95QK8EKbrm>T8I zilARh3dtq5U;qt)>bNT|vli98vy)(ySsyzw%Eksmd87$q-IS*(GTFdTV zSX+*7rsu*ioauyu*KprjGTvV9TDQ;Ou;oN<8|kmd`&9uf z&vxv#B_*`Y&O{gh^4oc%q0|uEETG7cJ2#N=sAajCgYN|SP&`rUwu7jA-G90TlwZC# zecMgv=?9bQ-Y{;gFS%mik!I67IZUS+0D;0-^6p9yjM-CaaG|EI za=ho=$WkIjA@s~y#GH^*1r;Y^ECJ_=Nr7rh<(d){c+V0_@!$NLoRR=VR`y4v5Eub7 z;aMK>xQaG>%b$BF>Mx1H{}SutJ189*wM@W~OCFO;u!9gB5BgxSqN$wE-sfJAUeVfTl2?)$6OJ3^%Q02 z8P2ST9-<-wdZsdDj-4f_*`TkZAMD0OQYLE2!DpQhgy$dfZ$p%*cHy>z=Zo^ht&Nd@ z9(Xp~F>H4DupFT$tPKK_QU{fk+Ack>{m;O$N0Z(HW`m z8DD~W-g{_A^EN0Lj4RIEygd8(i$X2#ohL&uy(spy;ln_1=G~3g;2kT2EycYr9~ccf zbLpyOV-QgADdydi`qZ}{=`-dErYyr~?{8miutXnqt`l`k?AZc2rm$c8BVTIY zMO#n50H2fP9Ohx}1;V}XX#K)DREZZ_MDPbdR2#fzq&&UbDR(j)G0b&R8G;VowChFL z^9)z6fi#w9LzWureB_&;QR{k7x+LGW*P5*`rXfY?EXAWPLDQ1u)KgCdeOQF=8<825 zmsug5IuHDX#ZTN$ASbX;5xM7s3C>hW|9x%YIF534QhkzsB6e)1P>CM`sth`f_U>03 z=Q9aiKLxj_XQeD9t&y8}W&#+>Xhw+D-sJoa*WGYY1}haxjl_9c62jaO%j!3c&C)Se zM(qAyE1ns!8b(YOIk1R0l2B`=y?62x-;tR85;bIj^E7L92Iv(xluQRY>V@;1Od9mS zRbh9*0NP*15H<%Bq)9vzLrych<;qjZR%I}it!SdQ_YPIjP7%^rqiV%7b_wc3ChZj` z$iUUHwv07v#q)>6U`hZ#$4v?uPUFwR9+Yr)WR(D^>k_#mruL9h4sUtr+{^lgwI5+3 zZ32k!3C6S6s$@T=|B4>Kuz&|1%)KA71uGKoVMOrsj^ZX%Myd~1n8lY{MkafQ>hM$5 z!d&1Ste_m#Xd}ta@^P4;lsJ6;YZ6@JbtnMn>DSwqe4$k2Auct<*qg=V4H925!7wPP zH4p{&+E*4HgiZdIjuIYTQEy*aQhvblJIA9=6p^o_TxWI&2359?V`KxPMCfQT*ILs% z+JCOX@`pxabOz43DXHH9FskZXv8ybja}WrV1{nHnb|K_4gJO5x@&4N!JG z;z`b^C~#bkhY7#s3ON_B?_epqA;V*2V5!=Or_#2~Ty{3BcxFAhKg+k)?OqFthy7Bq z9!l_6Fb9-nE8fDAO3xPkh8`#p+H!!mKn~j+^*l%ru?Fa1x5TiVa?caE$NkuO=$wk& z3#a*WzMK03M4s8k{`;UbcS{{HBFs_*a(0reATYxOV(xal3(jnYK*T&d?2Jl8Wxh_u zD*=Z^&joe0vzw3ddZ=&QwA1CtHzZzjWf0|pLcMK-+rjkt%5UEYVGcFJMyd+I=mLmt zgA07}la9|=+02*9fJ=2zv2)ZrryjC~8gt3ULY^$Z=-4|3QbP%f7#P4KZoTEyc|_8+ zU{x9BI=+_Oy};LCXybZMc*E-{mL-P?TUmr`EpY_p^OS-5kU2mes*VSoKx}ioL<1j2 zhtnNo*7KUu=NU9D;qs8eY%iG#kN-?xLAEO3WRLW5WlKj+tw}8~8RF#%*?&$@fmPWb zs(W9Kvp1)7J&@;NYb8Gkh(i3Bm%1U}hCv2Tnwdu9lp{;2i`ymJZA(mSuS&y^XJ~2I zsT(If;lg?lBuhY#$*&>%v)=>l(?tAPOF1UuDQ)6C4PAoyFrpW3f!U2wB^fn`NG-I6e-Sdm_?1gs}bV zyUxpw?o?Jw=M9jflt!T6aOFj8_>@^MNI&{AWb}1UEP!vT8$_TYZ6e130~muih})>d-g`(kuX zC7Wd~196Rdk#7jJ!DL`z_Mycu4e(+TG=MP?vKMXqA*J@6SrW-Q$P9#IM%TvmFV56bGxWpAwBMLlfhxqAo5FzPzFQPsu;Ae{WZG&Sv zH6jSr`vu6)gGti^cz@eafkAj&9-X`>^x5*zV{Rrlj8OGa-R`mWnmNT_k5uyn%{x*e ziVDm04u}2jJ(mPyF9k+hGEde(@#Ysjc->ptg20^!uy%8`tm>vnzU{9!-q>T_y&;#= zn2+Kjmg| zvv|DAyw4K4H@j}1(X3SnYMnboHH=Ki(z}jE2_kevJ9zyJYV}bUuESDNqfhQ3&7guR zU_`w4&vmU$<@gUjE`#fC;PhxohO}^X8USj$cwu74^=a`ppxc}GrQzVOB8M`yY9ghS zQ<}!;241Z<#AtHUAo9~*Se1LA@9M)$U>y)LBqqWc$o9iB>obkjCG=1hg$fL0loJiM zLQ^qRbS_XxQ?Ir$dlru`6}r}1m%KLg-(i5c+qTyp9gXciCqQ8Bb+^s135~8tP3O_p zpv&vh`Fj4fuV}mEc9zG5!Q0Jo)4DdOa`QDi_7^h0@6IxTt?%1|)mtOd#?loJb(e&u z)zepd=(?QE)(YQkzh_`(5(R-J|J(IcQ!G#2V%7`+1tR`;UO;SD`KCR>CEv%t;WZ@R zU4ggOY_D&kOlE%Bsmqe%qS-BhVm;L7!N^k&$?s)*?PJ}2H}KZYI26w+`#Jd9#`Yca zY2n7MpWs;)2;dZ1UuTXXS;fVRtSB;}CABI9kb7N1!}XA_N^|VkU8M8wdXuE~cG!d# zL)7ZY+W+P}JjlR{r|a+*5RiDQ#gv);9VzRpZV7!pBDC_?C1y|As53ZF!iPbufNTx} z#sDF6s;^_ga-futP7Eey7(p_T+jq?UN~iFG(Fw6>nXa<5!d7P=+^2+_JZ-xvquiw` z0m}*!t$|-|m{j!h2l0gFkyB$o7w)NEIC)!N-c6EPm1y)lclB9{u!np|`kvNJ7QDEj! z!wSi1v{7@l`MA^~i6Yxl%Jvlmdx{q)NP>EY`C&nP-vW#6mo<_j%o?l!XD4MhQ+&kv zZZ2%3XCfw~i)~cSRn!|SD6g=*H#Y9K4Tt^mA{p44|3;pA_7qB3ul>>E-sgtrhuK6k z-AoG8D(5yJ*^>~FR;JlL&1r&Tm1KAbYAf>m3uyo*Zj-5%FrItgU;1m0Y6KXPiy2~5 zKrGgmvtH`U9o%hIFXLj(f}9uDW%uzj=5(VG;L$Y=oDonW1BKijFB=yhkG zUkKsn7HgkCN<~r4s8sDWSkDMhLg|DVD`zl2ZvU#VZ#_55!keGj-v9ks#l1s7cgq<~ zu-|D3;9g4YK&^1@v7avAXM}&|$zrfscE03Ma!m|FGzF)I(oID5qsLX-&yo{RnTA)& z43=;}Ez%L83YdzVlB5cpFP7szE(UnrCN=Z?gj`nN*=&F!Ve`YDUp4ss+7wu9N6CmO zLZPncX`-@WD3w*=EVIXRuOo1iyCX8fbZwe?9Bi8Ib9&1(K8iA31pW)$f~N}RQPY6! zq?}xiz){KLBCI9N0NGKM_ep^Wk714IX{B8+#_+j7 z2O6BRUd)$IdED6bej?X+-Dcb*N_+8V%C&O%LwN0~yYa30z7DC0&}-UqUGnFvqg)f= z8~;@E`q!D|`de3IB(5QB{SYOP$w zaX}2$BLsSflul?j|Az%2sT*JdQAseIk3pxSoe-DT^Zdxg7J`pR`e5wPAGp zK4n1c52^&HU)z2LTTfeaQDZhw8Pl0NNE~p=zX5WA;N+N5_1=EF5Bz(Io4aAFBK%9u`>6z_D=whF|G)6=V^R z`2rXzkC3Oa5!CV{i2`*PmP@T;_&PTLLkxKv0Nzn~Du8<#)v=A_{nAT$6scc@+gcbC zW1vfxCK{dG661fXsTX@r+bHOB9Vms%F8@9C0_B-*)y|KwlN2kCG%3 zI+mR!kDd^o@svBxdh{H!0MQ5@bVC%Lj7;FvasIdG&X9rtn?LSv)V*C&YgvdRu?KFX zFvPr%If26KPImtbfQ-KqnEYUMlG30#oX8_!5iw5rZNTkD{T!eYPRKe2KuTX?zcjU%z%RbiIZ8IB`nOpY!Jl53psT?eEaeYV;q@?Xr&Z}`5 zqt%rLG%=@Z4Y@e-ZOrZ40%I5Fd(4R7xVI!{~$m!+_E#e!VT7z!sg<1)VdmENZr-GI`LYkx+;3nEekl z$!mnY_*w)lr`g7(sV24elU0{#Pu)cw;5F&q5&{1zqW5b7pQn=N7vZJ$wNm8e*5fTOGGe6j z7LqU9+V$(^wiog(%l22*$GlbBR@b#S|N52Ba5%7On!onmi{C-}?V-DM<;vqL^Rlyf zE@s=-_H(AtWjS_p^~$}G{sHOJ(sOXyros0`PG@-#ZDujsOj8`GTql5Jy6 z(eUTtz8C0Aplw6=y5|o>;=2g}0!NG2JHOrwPNS`DIy$ebH@3Fk&H|@hTwT3Pv*kYp$4{2C+iN=yck6A&7hpu6gFLQ?^jsU?p3jjQ zyMgKFm-+|?&D}5LmxRlm*BTro#}c6Xi`bz`V~YGdDYt{!pvdyR-YVajqa@&l3Kxalx#LeRK_#RG*k_5qpxqiiygD0KKK zOUdK|IV?#2=+{-wpisDb@bij~nza&OmPo@94kW6XldM4{6PW1kp!j*owk4|QFTbl6 zVG$J0*&>z=_vUNa3UxP!>o|AzgXnCB+b<24nD25QHiTl2@hrfc>%+)%<+)2)0~!&y z4YV({Fx-Cd`fYGERuo*cca>OX%TIr2y?C^fc{mA7^*C;9izf%t+kXMd%PK4gXe0ggiU|RuK{ypcP zXtDFSdTz13vW{<#<5%(l`L)Qidr?nlTp6UcZKQlRV7KQU7LqlQm+wY>4`^i_~RPeG;g`y-9GA z+P-er*qwh#x^=Aa6zhnbMK6f@JS*kFEZ6p?-Ej)`scFIgGXHU9eJC5KN!OMo6=R7T zychve4Go<;CJciklS0i;;N>bCRMRF04jb$(M2Y?u=fGpyDB7d5AM98u+f^;RrQr!}Unct#^I0LML`=$Yy9 zoEd;MU7dfBg=g3m9%lZYDiw7sy}nng=_vcJY1xrUYD$?4Z!dmT^0u;--r@6X)uF$W zE|PQ_E3y}FXg9b2k_&^8&*h;6_J_3o>5O2w-Gq8$oM<5MrecP@!T*GSpuX&K==fcy zVW>*it!r+ze!HXV`j}aKUE8(E<@!UesZUnU%f5@(?)dTY5)%KdBiVT5^I;UYJJ}xr zq^!H?4u=dIjH{0Iv2O6bG2KFU7mI-Zxb%H?dW$}fZI*j~u>Af>;+{+PJvMrS>!u!W z3O{?4{*`Q6Wt;s>QEhAL^Zx3R5L>@U@Vp4Mp6=_NzxmOn)|kNW?fJGNowDBkc`JO` z^%7>{_50GMS!?J|9E!b z{y6Kubk<7$h)mO|BnHFP64%OZB>6!-N}V zwr{%ER`-%}hdYEXosGa4LQj>qOn&yQtGCO9O9aBMjjh+KH!_YnBm80PNizih@AHP>a}vEz8c)K7$-Y!!i%$}FYG{kflw5}xK?l)Lsk)y79dkp?MP8f% zNEs*?j)kWw6Gla_wKV1ep}}n`s8gi-uxO+;t<8Np=_p|vP2|ZKgonutnn84J0XlTN~BE_#^^U);b|VkYbyKzd^lXxJj9| z>Kyzkjiar9vTfTE z{>s~ZMhVpgzW4TdHnugkbrr-U;?S%a4Q=l#KL}&FTH?`S_uPk)=2q2fSBhbIo|PXi4MM(B?t^ADok|#X=leQ0U?)h49tR|cb7hbT_Q=&DcFYosaVJwQ!ZS48r{V4 zPk>Pg-_2a*o(kFbG$%%YQl@N~D<5Jns0C8Sh7^F9JHAbFj@7jVLG>1k5mAneW+GEv zs1kal7n*@Hq>>YH)?awxN#3a!?P1qo@y+5podkIiRx;b{uKo@~MDE{wxmxU|PRhR7 z1k|{sO}m(Fspc&wPVWO%A(z)E_t`BL;XjjtpIa*$j{O6NR-Y;RcYsKpzrLbBG0Htr z^jtK9*9UL-o2XZ`pknsqCF-0j(dx4gJ zBSM);6IqS)t$Msa{D0)WgO$fuoWx3C=X+;D;YbpzU@r*MfIs)Xp+*9FtdyeQk#fFB z%lwGKp*+W~8-+;=?ifw7*k^~F40mQPE+?-!aS{rX6%vVMqP5~I?1~x;t)D5UHKaAG z#=l0Ov@(oG9wZT+2*;cf6{JgTjR{Ovitu4+A|vIIK`s_hi4`4j#a4RRX3qE(RGn`( z$Z+JfEJ_mTod?xkY*_vbQPuplFD|_v-FJXxe^`hIh0{wO0@re^SiX=HSY|IJ&QW1`s z__`0-+#KG&=MvknzNFBtD*GMx-S;p(-}HI(lyCTEnX8X%JorR`ZcjE{gj-~k!n2Pu z?LE2=ukSs2-0P}*rgXd?udD7acobXEd=%TP#xH+9It5D1pmbeEV1ct2dY25AE*2lq z!Uwjx?0IK5udO|7ZH$E0gngVk-#}!%GxodB(C(M-+H`9rq-{mQ{(j=bFB?5`xqgis zYsn4&EI+$mJs%ar);4b=WmN5UY%X4q~Q0nZ2x;4aID!gb4|W) z&8ldJLudEK?|1LV-9+xR^P8N#%WryI>z^?~fuF`|*3MKM>vV!gfAYV)Bw0-t1t6Wl zaAl0I;G(*X{~b&u<2SCm2gH)g+Wnb+7?1sAU{gqWY4P@3!{aM}-$y3Q45-LJp9$zX}dmk1kNx zixel(c*2&esH_V1gs#7}DaVo&SZq{E0y$)=xuDK>VyxiHBkdwvnG;Ylzfxe!BdP@Tv3m!V35eU`1q%SlvY1ST;RU}>TG=9> zc4!BkLIEL@m-uh?Cb5T%GY&`HA-+K~q25|sGV)oKiO3WHv%x!gaEagO**~`j4$8wZ z;Gq9IokwK~@f|7aPG~hDx;x2QN3}w2uh2n78A4;mAkUX>QueOMKMvX0HZW9LfKpWD zJ!p5tqnf7o=@C`59E#sm@*m4cSRqt5D+IqP8fW@`pli@~$kh6++ntKz^cVU8O_*3X zjPc`44$Kog0PB*p#_xHIFD}a8`%Es`2%$6_6637YGxko zJ0&G*@cldBJTDV#h+klZLw|Q&-uUg8Z1z+azI?V2Di{Y;Z^BA3>hn`vwkofpAV*KU zNDHm%>;>0CsNWKS{R~Dn-fS><>1l@MlxyJQt6DrZZddNBH@Q8+K2E*5?mPUuwSSU! zUkc@JIIRo75?{&`ANMFR+$`F+o%+5$O8fVaJX<-G=+$&xFFC)3(X@5Ga5YtAd#oq> z)*PZ~Fg_6YzeJxMEvyV=zjqu%Jh`lvvb7i693d%My^i61mikzzRky&CeG^)w=1(2b zcmffI^}7~z#3N#y28_r2qQ!yfi_{?!{{tDH>~+<=p+gjp28Ua>neR72NO&Y{+(C5o z`(3Q4@07qKsX(%}5uZ!hSHI$)YMPuoeSkIJP0|mt?TE8o{(}x{s=4LV8%tSKUtKTd zId!#vDXq|V*mWlWL8eIC1T*)-EJm!zauaFMDo{*FLyFr+ybiIvJn)3t^EVdrU-=A` zfYG$Sx+rYwTRPjT%|dBRfbuOo8qdHRErpg1oCO9}#~vYD?IR0724=7-O#KM`pJRE+Y|%+oz?Z~1keY^^H%QEI>>48* z2^5Q$OfxyQr7z$M*g!LL`X*(q^UVYvbbg(Kb%;Wa(>t;xQBYWoQ*;@WcXO`%qn9)* zdyd@j9s{6;??5CDUVI3Ps)Z5CqUqdj0V#&rn!t z7&a;nbk(Wj`aTaXsTV4zqsupXqnJBSzvszNUdQY$Gwq{G>5=ho+wghK+!b{Nd~fQe z*wV4TZA@Xr-rUz^rjmeH2WdsLapba` z)biLSW#m%9oN5_$LRZ zVh82MYyUlfx?%oZJm#a>&*l?SBs>KaV!faNy|&f}CY3T)Wmre98bvqo!(!dl6Em}? zu}OV(sBH+$nylHncE^Z_)R#aIc5FIb$8j2kcylRdb8w^K;l50L4?kfT=F6=<;fs8t z!KGh18hl8#3wI%PKwAT&Gn zd|9b}SE$Qi2IUPcU_=tx+mXGNVSz~xwtcoGN>2x{HwcXwHMy>dwSz(!E%`j=GYQma-CC5 z|DaN%^6~9>nMP{AvOjve*oxR|*S_?kX&tf>trFpc2_7zrFy0x`$QGOGlKnW6V;u@uQI)0U)s+U77->nWT$?o3 zFVlb}zV93C9Y|p(sr2rZ70%Q6=_`E<9+i{I^A>X34mR=t8SE~n1;Ot_`R8Nv%#(ep zRq~vvT4CkkBw-UmRc?`aQoP`nRWS(ca~I;$Y3QRPyz}|6ZXSji_(cQ525UN3&+{de z6lAA7pt%Y_!$iW`Ux#@7lMpnC57wU*FvX%eRX^XUYBshOuD_C*c94^G(lgX{?ya54 z6A6XxGF*n%8yllM+BLiUyd(M8X#!+;|BI;RBj+w)0_&ir&SHNsk=Jh zMKvvQUZYw8BJ>6sO>i)OeIc&?UmS=X6(y7`ntu9+r#{sKgjrT*_;u`#)9a%XLx92> zeZ$UfE{7*%;3aIhFQ|MPsAfNgZ>a6e90?vC^yD+=;xWd|!?v^L`3wpRH=y1~O zWvFg;E&+(`L?Ec5knV@)JmtgsJkgc@!0+FeyY9BkN$FHrgVnO7+N0fSF?i)=49w&{ z@reC%g!5%D`xd>}#Co_a(Y4oB9e8&tU`bDdf7a4e;O|45SGWgfT){mU+>)0FWAt)b zsJ73yg=&o)i{BV761xqpR15tE5ej+ER`M%EBiUoPI3p7ldRwc6Y}qmYTy1Ycxc<{f;xeD|;A!L$8O?pq%o#T(xH zd8LlpQdGO0Y9O=Ims4?XQS5jo!#JPcT}N9Yn-~6SBkH6VzCG^6Z{<>p*>vIhK2eh% z3Vc6!DqH+t$`0g>P))7#(6>T1(gKYZ~K3?un(&Zrk2%gkSx@-G@-fJjC|_ z-U0tGOBic$f7lsUOGQHvjW9J7TP+SVKu`q$lS?6u6Of?S!WMWd;TDx%Em;tX_QYz| zsC{WByfz(k1lo(ZQYhPz#?9JYBZ$j!*1SJ6YM{7|YGT?!R|{$m_Ak~Ot%S0EbBzUx zE|H8RLZ#p2%;{oDvTegYC%r=He=GT_s+l8e381~_Y(k|y@UR&txcCe$lAWo&Np#LF zjBa%Y1nKyz;fYUBpn&W^yMlDS88ACO8{}M#>l1?o8Th)5jjX9_I~&1G^?Q>qD-013 z{bxArRM_8(!8zY?@UPGqu8{jr<*D+(LEcAXmx^waXT_*-_5yhSdOXrs=Zq2L%86G zl06(Uz>2sG(VW@87)^nKLy=a>II!pD1`YY7PczL!0Q10%42pq&?F$mr-&{-ShnF$f zLRil`2?L|-eCOZe_>AO)c1R(DIir)|oRS=ZyHIf+r9mt31NMt)_%_`x8;W6ETC;v| z3fDN1DeF)tUfe~33*JD(`^~YPnou6y9m*Y0!{6NBfg)(a6jUL3wN9|g zau_?ph;CBO9q5>4n0K3nY651{0DH-;Du{4rXuN<$<(v}p&&k}%m&Io*>Alpj??V=YL=sf*OZ*N~zm7co(tUp;{D+$RvV=S!@*%pOQlr8)9T z5Rm!v7XSP#uQPDBni0OLNfEfkQkFk(sO)+Ov$uKZ zgduNOiOmsM@!R(IT6N36_&MPQHWR_02^848FTanNkfx!$egO-WzHapCKZyUg7r?#M zcb5(bx6VV!y|#H%LWAsd8FGJ^+d6&ml&SXgr<06K#V+gTv4ZzfP3}#by$JWp=7ZVR z!lp0fMPJLI52Q+scV*WR4_c!~w;&})OOH>x(Dm5C{ie3o@bvZPb(?QZ_<>2eN!w?~ z)%!Az_=f|{h;@$ux0k&4$Cj=g-p9ep{lMwjTqN?A+sO6(t#;c0*~h}j>WF_6cR0V2 zfZ@xAi10^dCipTE_34)~V;HLB@TK;}OhasOneXKu(bje3{U7${D}^Eo2WH-+n zm8tAPYIG@#Eff;C2)D&?$E#SGS$!`lYlOgf2B8O_lkJOjLf>o#CfHHeOO2CL7flm+ z>8t3>v?3IAD|JY=d*WPY4JUYvSV;fANhE&T*pR%KeL4>OHwW>Rzd+l+HB!bbb5HM(X=}W$|vx9^L zIG}cTzyI-5$aaZf;BE&liZ&^k6{Usi=LU|cdgc3`B zCa0oA1mTw6ymN=cCS-2pB{vfwtW}Wa9FJGw=jR1V66eujETW(_CHNg`GLP@2J@!jc zd8ugXKk%1DxJlI%1QcJh2e{75T_HhnYnWQKVBH`fSfa|8g^5K#PFGtEI;f#!LE7V*eJDSs5(qloO;e9I8v5O&@8N_Cfh zN=b<$)!@|^%PX18v3W+oKDPFD@aQ1*1zVw&^3aM0jWu(#gUYbuOhjCCN-IXZ~@plf&-JR~N z4ArTec)6ff!ExO$_NPhfgi@Jv^S~}ioOn|0BDCj#5W{%qrGD{zdjXmGSQ^FR+f~#u zO;)9L(@1RPGf(Lv=C5O%bm-`}7Ss>F`un~-Y=?ht7jRs7fk;#4&OYd>M_$oGac6Nq zDgI%ZK`i`Pc8~}n#anBO!dp!+3tLO3b;G46rk;yjC$}V;-^e51>jwTv2ys)r-TY(k zFYzMa|B-8CmyX=?>45$(;FW_q+AH{D$M~ffe|#y5)I*04=(0ObGXGL}^P;uys;`5c zjzME*DsJLB@rD#7*V40fI~WFIMZH`wjxB3agmZ;nEqO9P%gG#Q?^3SL@R+JE3dVJ)v(=G zQ*e>3IYZ+@*p?kB>xXZHV{ieFOs3gnQlU8k zhIO7*nt#U4`%|H>_kZypBur=cXt8i4K-3XX3B(H8T0Chj2Di45sCMjW6k*-*1W#8(Es3u z;a+xEAl0U%+rR6DGAH{UT{x+#zqHa|xmL({>V48LNpx*u{D9IAfdVJ0xg>Zc45xF} zQq_Ddz=r@-lgmkeSJ%t#O3+Y%Dvt*8l?V#KnT^WQHPxY&Kl{#U!&k!N*p(fpQz^vC z!Ps#|vy&F91S0@`c^T}pkHu4ajQj38&I3B9Mes9K(!_=Nry*5>Wj^~UaQI9`kcCBw zHn3J0UD-=X<0J0y-xQ$B3>Ru}>yBq&`C4pZY1nR|l%dtaCbSbeFo&Imd&1f^~^c$`#Zv&Ah;3g$B^{9z%>c|*n`eAq>Huj7>QX0JmTJFkJD-|=) zm_RB)1p7&ho+y7-8l9i=OBUHQrZ^749kdFK=;hvkl2uUI>|}7>izc>bv?XY4u8FDs zF+X6v6&J=Co?uZ-5j8Ai3AsKjDk_q~W8|Y=Jr(I%ru(RCR2&DBru9_N_<| zY2n;aC#?>>MFIEecC^cIx5Yx8Tbjgw4xdgtravCIb;5eif0D;cT+ zH9TiT=HzVn$W>b1Gt}tvC;#|W&aE{Im}c+8$x$b8IQLroCKfM38WJzC?kh)Vjv=uB zxh0;*SV5I}gC`|}&wb}DY4O}9=^a@1Uc161_aCVu2yyTloF@12Xw*(IPWX6#ikJ{+ zG6m7^`R&Z;qg~~c6RcVDT!`!Fb68fg>ftlu(Rh~3GgQZ7zV=||!-On)|d^&(5hXH2krMR+zJdb@rx<;=PgT@3uyxv*$<2#$X zN47)mJyaj`V`AFn_*s@@fXGCI@j@16IZD0Tlk5wDnVl&YR3kl5Uq>bg0Feg0{fC@u zKRt|mDWd^)*F)PnFv8Yx?`)Cql39!ZPjHV}=>e$wwm}T4t$Jfi=+D+uw8%)8^KEBh zR+dfo6@KyA&)$`^0bg@lfc4!5XC!*=lCOj#<#Dr>+USvl>vA?m% zA1qYkkJyo@R77tQatJIlCtfBH8z|t@@HshIMq5>< z!cK|6n%iqLhbHXdCz~FrK@4No04cV@4ZU;rI{$^?CFafQ4#J-17X4uIPk@O$!hw_3 zZeiqKpqlbZxM`Gpw_^T|PN_JofUbGux*vO+&Y~8j(|Dq5blY=PY_s9oy76CssZVRK zJlgWsQ4h(;G!~8_b>R+Qyek< zcfL{#Sc;D%3tahaA4ALpDWB3-xYYk>DtAd08)Z$c8&__*wrsz)nQB9FA4Uck1@|`) z`dddGToc!&vdNh(HR)IXX40J8bv|ojp=7@6BF?Eqe=TL=p_{v+tIt7X6?thfD$WZu zMa&oCByPTfc|_ZM)tNW+IyQWLO$ukp=T?z`HMM28WEA+4=6b(RMfTHlmLZ`jI(F8y zbS^eOoLBttjUdNYU{cB?K%nQDJQD3?CMO;oi$byzPoa*Hhp0-ZlK;BkWi$X_K()$| z%#xK|df&WkuJJiwvNOM~k4}uapT_H%H~e^BYTjSX zuLwy0Dth{B+;LCP{4e+dv^pH(n_&7^KW4Ie5|u?%Q}*Ib_|O8YjNvMJ2#Q9cwI-?B6RZ<~ve8afmrM3U z3?-PQx`#9+2ajTmGa{US16NwNZV_YxMAwqLW38D$3@?`G|2+{NEJkq$dK5(dLvWy& zuy#OC{*S>|d6pLKy1bKNbb%~g6eCs|>*Rh^+C{OTHpFa^eWQlnB_wfnFE_pP!ncfb z7=Gm}Mc_Q#5vP+-5Qn`uX?28Gu6BCk<6kH>_DN14)8z7q$HvZHS~&S4Mxn?V&a%?S z;y^|oN3Nqo#|z=v<-2!uKwrX+;Yj{7XMmH13h7(4qFA~g?|+8ndm6S90P+1-s=JFG>p>V@%{d~*On zEDkrlB0Qrep+;x)pMsJMf3{>F`RFZhBO-m2j}?h}rhU1ESOvq}@@pO<%oqkQ1u)7g2Ic8 zN5)o7tK7lXtsQKjF|>D^Vz2yL;dINJj4ww_8>0^y_ma{EGD3v&QS@? zl>K@yKVyE(5Y2PEOoj$525dui5Cev4OY&WcZ%`FNJWi9^E=fbuG9^GLJ8YJ9+~{6t zpsyTh=y*?Z5dk2bpij8TT0< zj|fOA%#%j;Mvv?M35m-g?za;>Ej5U?UnY&}uO&nFpg5@6!liIviwxBz%T-|OcGILt zvBh6XAkbCrT)&`Fv?obU$bwL@WA-1@c{A4mR&ql_u7?=;%9Mim+N&8pXls(EJ@LL; zt+U(WWG3V|G^5R$`Yk9@QqO-;IK9ojpm~{DM8bz64aSEZD$ATH2aWHa;tcjUtb7Rh!~ zl?Tss$)cu2pWt_@z(sHeSCL7P`z*`Kcd37mJqy479fsrP-o?tGJ(TYRZh_U5^}TxB zGg^ZB`0f4zuCa$pc?r3;Q^gD^rUQ8W@c#uH?gS27r*rFZLl2a}H(Q`$i?;GBK!IVw z!oK3msCWSToR`MW*d z+zx$GEA85xvR{K8y;HKFw6)0(_xetTHVMTLNNFzBm{AGf*Nl)*1Tx_}#(7b2LoA&< zjD1E;YubE?anLPs{%t&~WEXM{AEkyu`$_I?vy$z?(_z}7V&Ix-0WcAFNM1Rtudvtx zcavQt)7oORYSu1)l-K_$=qA3EgJ$EDkoF(4oX{d^^A{lzz|Y|me&_PtUe1+5^8J@` z_b_VoYf^Qsz1s9ta&0uqMuK*qIM7l2E&(n5|SCj4%&1Dxw+aHVkMVSFRVoBEiKpKAX8`#os8`9FZtno2nNUc zQMZ3swDeqsfo-*WN69UyD!PT-DVt+dzv3qZYwo-?xwjgL{j%H$UbK3lKBMapJHjh% zywG(uFj>VIt)j$?1>Xt_=M(z7#qbeFTJB+7j){TY;r%P_Fgp2`dAogVqPEUS>db4& z?G?-uI!^ndMy<8BZMUi`h?Xo>%`SMVb>3k+}3mf9INuSjmDhczj3F__C9p=mN9ANR2Erap^qK|^jY!b zs(%rOpte{f`eqz zh(BuH0~F3D4+5y($9w5W;YEy_d;<|b;d=+dweziO1VeddY%l@43xRc~tiwqj6IP{S zDxEi~XR+s{vBEXyh2dPaCi`%A>`JesN5p_C>%zFsvkqvnwlS7Y4NEziwoQtTvu(Vb zo8#4un%3bBBWMi)^12B2;VgGxDKwj1G%JF-va_czvFSnw3}-xD?qUIX9|CUj-zWCV zU$@@Kp>l?vHEM_J58Q%&$y-sQD#@h1x4=4yrS;oR+=S9dqnl~s+92~q#@l~*OQ3oT zgc1PFj$gJ2B`{n&*#*gC4EOG$lvaU-qL&?Q2WVK`Qb;tyTh{#i_3t?^BR*Z519Hvs zq^i;C+0k&2M7B%$As(d`07(25xjiv5Y@F@FOLxTB$>~eW|7ImclLkx#fKS{u+>Lp` z-@azG=ds$tEiW4TjxMBx%jvH5-6K-KtZ_~+{#yz@-rI9#fm8|N3N#anoS~XzqpUrU zh~1$sfgJjtiHS})<6e5Ds60i`Y75V14Cfq5Q37TuU@+oORFn(cOK4U6 zQRZ!6WsoJN2=hhv00jMOX3W&r*EuyPk+sT(9idXDCM=bq_w1Q%vpKKkHfAUAT0i+8 zYHnK?4av!@cMH7*#U^C#myAPDZNIJn9ebo2)BtD9AXUiFW40aQx+_=?-D-`uCL(p= za+9vmMHR>_2wl9yTT}7OylOOT9r&lc`+W-_Itxu1s+kzJTHW#k)d$mCMakvmDndTv;+7fq~{IVANziPc{if6CV+h#2Yq z7}HUialY0{f$vL1;#@_Q1z!eP z=R5khfZxcmqu{6uxWxqamH_fQGh^N(tz*aE27k`7U2Z4sfZ|LhXDL_g~bpI@ja*hC_J#-xyy{lnbuX3OKJ{p?{}-H^w!=^yT?G zgLd-xzn;nal{etj>%c#=G&tdcY?Z@!1sF5q8o7p0BXSP^T}e5N#s=~{x-NaGtGUjZ z8Vb>cJ#sTFJ0u)(O@SdOxE%a(lG*YLGr{wwf#VdHmb*lw5K^Bd!wLPBEM5CCXG%eFEYo{4lWEUzUv_MF?M6&#?sGrYt% zM5d2MF@z}}N3S@RAb2zhz-!_9tk;ux+G9(vFgshNgkVD%IFClPqL~gCGk8nZG9}az z=$pyw*7$dlhhiRx%l7522T~)y9@CB)R0BZYrcR!PeKW4{s+l_e6MiU3(a?IIP2QJ> z3BsC^yI6Ced*}nOu%>zSVl&gpNogc%AH)Y!5Sy(frf>j|x_MW&)=uR~k%g?xG=^|X z{SMCwDn{x=1P!E-JHG(%CHOku*NqAcG*{v^xceTd+`VVJ}Xw689uEbeNdm03q9az%%pAn)brLc zWye$YpU{9FhR^pXQuA7Qgxf#M4tK}dNFf9YIv^arOc80!0MH?f8PnJ)>vy_tg3G-X z#7`qFB9cB}60UL=cNv`O6Y4qzC>SdBR5maHwMl#(IQCza;Fua|(rz zOVhcZ2HkA3Q}P)J9l>;Gcx0EPD>3wNT5w`&%Z|*`o9ruu7pq7XCd?nC(;Q0Fe~~0+ zwW7!pDh_}D-|R3sG!;R2pj(Qq3uNh64=kbU{vk{XJvjE@`g|z}1t9O}#t^P-=By3m zUs!=iJ}m&=5#kzON!;~=*dHo>YH9OC3Iz~omYXKRg+3gZXr)jJjY;3&dP`#cQiFvQV-N zwlS$5%)Pk5no)LfXxY^sZj)O^fT@H-t^gQQRs+E-`?GDgcGt6={5m{L3B|WAY`;zf zi8QVSSfg|Ou*>{ddjk`M*;ezYPcEa&7wQx)<+Z&6@rfMUf0z?%QiqG3FFth6m@~JD z{aClOq(=FIT*W~Q`h`2J@$u8gh-0eCB1p`Y&70@p%zv_OR0zaz0*5{YH=FtI3kX&h z+sh0;6_AM7V=Z!1$jGRLQLSQ3fGzulP}TS16&;isEtdeiB(4Hv`)rNrP+d?c3!vfN zxr8g_*_^ygL79{r;;m)V70DR+pV>s#M`HWpIC+SsW&tI6&j-}$3DvD#5Y<#sCBuR}`+g+Gl)2%S z3>Uup%0t{K{y4d}ulo-$)~705@INm}VLlOD=T5D7|5SN_8UW=xLJP?$YCIQt(%+sJ z4IaqN2idcON(LyjE_AUsS>JhuaC5?0E@M4!zXf{7TD3Ef|9POyWm1p3Hk8a!t=dyxU%)u7=fLC@HML08t>-SQNZbx=xyq+bfX4GY&(8S$^*dD5D)cA0xr=iXEWd z@}BIV_kw)l)z;@J&> z$oqfq9@r@&jsRTAN}HW|q>+X~<;ZT{UTlU(3oH`!Qqv9R%@*$A<_F!K%N6cfM)9>M zNyrYq0s{(-z*9r)ssqlsqv$PhSYo*jFi)UB&DTo4NIAv4IzQ323tdZG)*35C3^xbo z=83; zK{8?`<)eE#83raspe#A>6ZWD9$XR&;`t7hE=Z7`r?#Y7#v&%y}zDE>l!k0jlH^xv} z!!5XT_M-o82*;L%381+7B{A1~0$hh8K@y8r{d{vpw@3AwuH6V#FZ)jt5Uy-}|72BR zQvT_CJ)J_{L?w5oz={)GYy?eC@QQMaMnS zXuDW#Kp3=gQv;PjxE+AZ+ADVP4XheaD74 zh@afp5!iyCuTK0m$Ka`n&c*VH$`>JQl%+8z>UL_<>Xrw%3>BWxQLL&o_Uyd@>Jp|@W zFs(Q&7$J2+t7(2=(W?ie9&leEJLf7ve{bC1ZlW|M{96dAnx8uAiy*Lu5ex|fFnsU| zb!_;iEOhtX`|1x`%z+Q;7%{k8z}dSF@llcW zo7%&thl<(Nm;r|RFq(K9q;bwfhDfmv&REeSUfSI5TX9Ptqo;I$D>(sZND+sT)1DX@NFF%iE7YAsjLj-|d z;Y>|AuV6X zvD(zlInFctb8LRLu{k_d5Ts#{YKs3u-jv4#0kd zpi3qfbG`fS)X9M-lXhPqs(?bXAzslt?=nv{1mx@3lDf!8hQ(it7` zJla2OQQgnT3O!o!Zq9CnzXOys-lPsX13_KwmB;nDA6JY+zNodtQ-!!hg03)ZU!OFg z86%a@D6??Bu#~`>G4^&3^PA;59ed-u&dSE9OZTTo5oefIN0#10M@m6TdS;>bi*l!0 zexFNOq7sP$&ZplunyDG>)D#L^k7x)(HHP&FpnVt4yi<6%bc`@-t*v=BO(L7>eG)us zF!*YQosC|(Q{X8jq`bn1h2=ZX{>{V0g>gJd;6(QuKuew6XjBycLg4>%U5nrrvBl~n z0ln-}3Cv^96mKq)$h`9@!UgPWssSI6(%q(_*gj zFMv>ES}!nT6hv>H3?^4GYWNCgxvpm6vJ0$~3OtNsYDyZlXj2om3ZZ59yD9W(=J_`o z1{fJthP|W`0nk6VhfyMa3*V7HP6WUx-=?B-4cpKk4(0!uW_2`IXNw7bu13D*wV>~u zks}`EPGw_f>z|L1=fE6h3)08n>zrNxe#6cdDPAJdmT3)rbBL>}VyQ@Oe2Z?hG;dX6O(aMC8D_E()9bYZ#H zo|*tsx_N%WdCGyDYe3l;IxPF?Vt=Sn6sOawhKSFO_y0!yxHUNm>Khh3LDqi2NUQAE`N+~lNWJ7wXP zto=t~Eld@h)YE2LY`{GMT`WrU=3KNk=V>jJCFViL1{~?5ha+xJs;H|^2t?_ zuag9dr@}E+hL1KpS6g0#NA?jfN~ffS5Uv|{JYM>m;6}*blagvY0w(h_lsRXBD-{QV zskc}9RgEcwTrDCJEDgP3vKf!>(*qcQrU0J`fO7yYu{(fY0Pf$bw==U!C9SGvw$(!A zp^WoCi+pS=W^vyu$h0TFM=JfT2=>d-Q*y?xGQ*%)&xf z`C(vi%ZC!@!}b}zwiq78_6PrgRr@6D`56{BvgK=pCt9fB8$R+9ked7tdOybqtrqng zvslMKdbk?{@`oxP*%9jGH~65}4><(*Rl_2s+H5M(&yPuS5y?(6!a*N;ws`a?O_ZZW zlAgKbhNF@mb&w#Fq!qeI;p63TF(t5k1^Ufijn5E+AnNWfDqq@1{1+L3LG z;GArT0#T;0yT~P>QOX=W2!5p$Kt}E)4;b6QhtV3q!x!YK%Z`)Jtg<8ucfc$=3z03T4`?0o25@ilDo$<01+I~5(L9q{Yn(7 zWvnImtv0*q%)%v(HxE@fj9rOiQ1kp#w;7xD#(Um(!z=FtM-kY8Gek4C1Rtw29wNQh8gL3W;&3<=Mt!~&^{Z31`&YPt4ZFWuMWqGen+|Cu-nCnKH7|zO z{1$+SR;7#77|qGcEKJMNwm4d9p0RgoY-f@@`?)mFWLF`X=_R+c9r*Ba8T=Rbc^Xm2 zpfeSz;14}g0_$^Vp|JwI=%HwPCkK+>)J8+30c^qHaB{0tQSqfz2l|YzIdQ6o=Oi8>d4<+-oWY`%i5@? zDX(aVV@6{T|u=B3NbX4-DU(9!{a-Z=16~&;8{)7X6NH-~^j?W#nF%ZRwdH zAV)}Ro~%0Xv+zTdDK{TeV#i_lASJ=*@HhR;Ha(y3*)i|`1Cc;(zY{7RKMu{`JhMcZ zlWIpB{oDpO-Ku*A)^Xn$n*bBvrx8S3i0)6TCI_{s81pP5dUkSg+dbcvQ>6ba*KQ0E}Outi~2H0xXp^dP09%*X2A3mbi@FR5pfe>q9~#0e)JX25sqVOhCv)t zYmV<1es_mQ81}%h2ZlW`?1AUl11<;Sb%h@+&q!DBdP823N{WDY*06PVs6iz;kjNIS zFnd6#*)af#aO@V}o@~ zQ4N?K+lYZtco>=+2qjq(@XE$%2buE_AU41#67%XOf-q3|U8~D$Z@h5gI-;hUT>)G}fMP^zKemB2B5?E~WO9Z}cT(@d;Hq2?-%JKPK*5ou===g-7-Kh%oFB3$TZs=YqDvgLU*O z3ZFvFtNbYv3b_{ZTQgUrA93tJoTae=yAd@af{AgBfeiOF2zDt2jrt#VEdU{5*!I+c+Pz4w=81ciIV8-8v8e-Hca;BHthN?}p zKP_p$XQYXvdXO=ha6x$nkELj9?Hm0uh|+dIsuQMQ^Pn@zvc()@FsZzqgGa7whxN0*a4yw*0wjl1p!zbNXGR^*I1#E*Ksiy; z-gsu~dR8iWRnfiJjsm}t56JN;tX-Z!o(0A=&%N)QPVNa+&2h~u{XL=R7PJKb%8Dp| z26qBfP@t!BL7=eUH1t7d4pSv~FlY1?EPZ7KnA73V-A0e+C{dA>&Eg*Sp3|7PBj?Zx zsLT<$8WVK`P`Tcp_JQgbH8uvhqBhaC36um^@cFzkV6>jBNz*pcJ} z+1{maElxbC3>)NgMrELpY2;<8*3c^FiW(JU_ri@(^z?Dph2QZfk*wjpdCJ7$%M;u@V50ii~ zRWSppF-$^?r>HSxDuAJUiyg^AmSoGaZf>_)YW2PQ-1oWX`905Cd+%;_x74yN+tl9j z@j1Qsx4&sy!idEe)KUgbJ*E_N)y1wwHsEpXflJu%2z9+He?@Ao;n-^l8xtn?cf z=Z!nt$hMYkoQ#i78YqF%ky>AoTGf#!j=1xz{J~>|GNzk!BAoxr3uCL*Tf!h|Q6xu@ zx}m^I7u2m z&vL)?8||*wX?=HL+b(>bEho+qHU=`kYb2ocMH2Ee3EO=cqE08Q zAd`GXk%DnWK5S#M(A4LbeyNe3jEZ{dfT>>pHA-TDRSfflfP27-=vvO<&%1r^-t2zQ zPqiA)-F|5g^}^r2$2#8YUv9InA9&RORHkn2ny(9xx>O^-%J&)j_K1v^={<8&`rA`Z za$k6Zh!PpZ^B_$o@VK>C$^T-G;VcQDx^SE|AZ4&)?@^8k#WfUGd$16^aDEgXs)$m! zb`x^|=Lmi4FJ#`*y$!q(d4+c2(gGFyb)8NO-!^_(2PFsZ%I`X^iNUmpZFB7ON97Ha z)V?w2k>#N}QtZi_0pRt7xq?%Hh@3av%o#qTZGc9;j>Ck%*}VXW8yh4D6F~<|rd}0Z z&kF5nEUhkXcueT7;C@Z_MJc z4FmksA^@uU~l?H%ntzKx!QBAN#q0(y$8YI^f}y zAn&RMB``$BWVa)pF{1iWt==Psa z9Ras8GA&ldsMsTwfdczVZEv+s>BkB62mjuJxq=9X9rn7mWa9}exNlYLm+K)&wJX4; z%OxM1fQo60YLEIi`)eHM22_q(^bLgSC{80o^vb8zc(BJA(7{jL*!_7uNo3OFu{WM> zmcEtx@?L{I)rRN;Uh%=xzFh%5@q=PiVgxA~w$fQuRpq6CBR#xWGojPDZj3#(X-G5b zn;{c~Uk&Q&6>bWB00#^wYvdd8+p2S9q!})jZ}#=LWCo2RJ2j%z3@3L*Z3EXtj@(Iw z7-TgPmgoiP_jsmzz~Sl9s7iI~KA#xh4V3w@bdC2sq=;jXkQmA5ey={^Pz*?-LwF=8 z>c-a_$TGmFfTG=p?-9?5-e`gV4V<>~_X|`suxcQx`<`&I-9B1XALXz0T?z>&+8DLB zYUBp`B|$&yho6b*i#6mrtti2ZU;N^-cYeN{Q=J|7#}tEYuZ*=AtGzIV%>xxEbl_C=<8 z$M=AL-$}pvKQ95+`Y`GxuW`{Rl^rh{J1j)ht*G;qlZ+FB*O<&qz!8!E^1RYN{9?RW zxz1F+%x|vcdTIJMP6UH@B1HX>oxZgoU@MO!o-f9Io$uP9GM1B<$+1LXH&l0m=#Q@p z&|&ek@*jXJih7QsQAC(I4n11HrJvr{)}c1m8_;6R1BQqwjU%{H@2PceoD6ly(B>LZ zW9;+2B}M7iR10Kfi8>vTa!o!~{>Gyhpr6EJJZg+{Hs5T&thdb~fW zW4HA_K@Y4c1RYHO1M6t7B6kQ~B{OTx^kRQZ8Vz(rA~)n#C4xi1Vb%Kv*Pl?aUSYwo zIi%Kydf?0?^gSBKrlmcTTrg;jva!abB>)JF*$m#maq3Of%6u!-v=R`*dAda;N=~I!-&LE!PFw5(N4a9J7*HXa5Xuc3F8>Qn z&4#ESpdOe}ppM}r{w`p{;XOZcmCw8H#U8a; zw4)E;PpMA~}MpB|`c(Ic+W|2coRI!XWx8}-~H56!ih zBAC#?L!too(Xh)&08FNiGd`rmM$1s?za+mw>=6}@wZnkUtet)i2Yw!8LeG}CK z-!m+GMrQiaa*y0k?ehjIr>AF}N79ihAC%2W8HYspc-}4Y(`t(ue712>pI;NVXmaW8 z8dFmdHfjI1=iLTsRRyffH;hgehjyPfG8yhrMct}u=&=kRncF!If1~9o#jwknI zW@aXefjd%uWUN-saTgmH{N&sQK>j&DO67&6eXoI_YJvMa23@{z&-iViitpk?@b`LS zIgzf*y((y^hXgJ^{dL}Z^`^c)biYftmFry&RMlI5`Uz@#@rF51$n%ScOT;N0xkUOK z>{OFolfPLv0_L~=)eqv^c<-mmb{!uH8JSiZwa`Q@6O9d!U})1`J79<`X#r>K^3`$G zpkj`!btE+|;8F=0{tN&&CXZYkF;Ea0<7^T&nybWJdl9>1tmlwvYM@-dwYB9qk(U@} zMqbeW+Hs-XMloqa*F{ltX-R?;`n@Sygmwfg6Gp9wwOjJ8h;PV|fm$Kw1soE&+JsYI z3n^cASbhyY>>NE*KKR+;^2Q%LSPu4lMqh(74^A=Yfk6)pdf;2T2ijf){_tLh*n$l6 zj%qydv%L+84)&Aw7C?sfn(Pp=j?ALKs03aO;9T&ObJ08b-IIojP_)#r)8xs4bD-lxg+(!M94gxcV!LSfvK_c@^t z(nG8mt;5NYS{9&$wumC%?4B7#?3PoTOUIC7H9U^(slL^|X~kPqd_fx3W@rxV^qT}S za7yw$ZO9YKRYq8&F-hPV}f6?QvEFbOsnzk4#Mtn-W>kw(8W;VIDP7bB^3c} z3ClUV$G~e$pv%WQ8Wh7Rh7ErOgmgXFHA2-q-09DNDboir@bRc)i21=LX9{YP=}8!b z&C0FcJrB%*1u%e!*UDIGZ6P{jZ#>Z|!iN6D4Glo3K%_qcbRCh!NY+U zyM-qMT+*g^@N<1=a`17tWNfX~ghl#4IT<~X3=Bwky1nKm_p1Rl7xAtA-9TK6S{a=C z0f)+D5530$26eps$<6CgM^nU?Ng^OU4p>W6l)f8Q_%%s_E`R4|wXkqb;qgv4{Oh8u zJv5cJ`6vIMJg6A=jzYQ-p%kXbbNz;&dCgbpE@ymK-j-%G^FCnUqF|~mfw_K`u(aWF zuRw?jV7Q#W*-u@hokXZEdz$Cz!!{9GzqQ`(ju!Xv5D{wAOnK(anmseKGnKNfpsa_j}J{u$Ar_Z{PcCVeRFDM+=V&)ah zcwN+I$ldk>(PuYE7Rn#J_lxE2hw9OCXx;wmtIIF{mp7H0dm^#toofB)LV54UN_olm z2~f>GyQ_RXj_MqKti11!Pn8coyi*SA0te@=Du3`VzP-GvBskV-*XOQuucR)yM?=wyQ*6WtDSt52sKh}U{-b?=QF;V0eY)1-=BVB8)MK zyV=krmoBEC-r83lb07Pi$5V|yKA3hFwN_SdCw+t+dHF_p@8U24ilo2SAIT8VV zpbcAoHv_%p8d)b_9s_QP5U3@^^`LD0)pJ+DFiW(dWEl(ajqHym@kM1|3!mO>gyeP#wZ3WySN6zG~c{%Rq z^mWBW?zluJXkWjz+l+sr4|zZNRvA4pf*W{h04ks4kRA%k5>(IK_lW@%!-L*P%eIg=ctk=qp5`>W#FbapMi{YeYHZDAqC>!a%CrA#)%ZS5?-L*bb zD@i@W=(xy$$y>J_C`W$i+H&s56Xkusf2zFc_eRUzKljoye~~ZD-};*J$gP(=)ARGe z;-T`-|MiJ-?<=k@zxzusEH{^>^6^hC)oX8+!;h|)yI%Axo1*pQPJyylzwucf|9l;4DV8T7!nU=OTP-a`8iTM>bf5&faSl!~#Fw}Y+2Dvh1X-w7&^1tV<`e}5oHCwniqtWxa_p?sR$+jZW_3lkkG=A1Tc2A-`eRYxpKAzvok6c5P5R;$xZEX zo3iuANF37s)*CRbJ>B;oyu_tiG=0$Ws~K&cruqS{qa=Y{HDqgXoLT6oy_}dZa&kOMjc0X8yE`$t4UhnXOFo$+(9jiT4ZCKYH%k`0uC*KReg+mmn zbsVud2X$^o6%m^(z+(fdu?e{k@vz!_i?JAPV!Yxuj%;ONFvZZZcmOC9RBLWyH6l^{ z^Cx)#ZoIyaQPSvQyzht)MYb?xF`R6WCJJPrgusN5JJ$kt49nnn>dTLmFMsjAGC~nD z9=t)6JiPM6j)S~G${IA5jMM{#_6BkuRx&(K2b!Q6M+RXvBFA`f&O{ zGUB?CtGs85T8)4;;~8)i`!=;{;#rUZsLrPS45BSSgPwjo?Tr=$w>5pkf= zzGTiV1>X!NXn!^R4MOtMXiKfwZ>vq!qGFEnaeX~U3{eQ8eioHtXnl5Hu!Jc-r$`AQ;*HA#EmcdZ4m{>Q4m*`uBtqYwfYqq6yn!OuGwo z0;_ID^vGivsve~kaP~|LPn2<-Li&v2ySuK^o>0B>Ijc9$H*MY_k?ho-AQI(gr*&mZ z8_||{?Q? zh$ji!3zIe#NB^G7OLau%Rp(>=mYd7F-*Qj+z`s3P?p%IpxqbbS@}uuQRSy2ZRpsy} z&X$kd_M-C0{$u5)4^5Vj{`O1Dx%b~+et75la^#&i27Ij_F7NuMN6W&0{i^a?FF#%0 z`}DurAvC;CL-&!bde&=oFj$1PR zkALj$a?^jDE}#4t-%(!OKP8@ADIeGzE5G{>Z!X_;9Y@ZTH~;W{{qBpn9Xe9xK5?YH z`<<^VcU=GY#oKZ=_xBNf^CR#3OnFb)qx<^K@?DA!ec*pPQr`QR9+GOH{QN(@xxDig zd)%hG{_r#9`;RCZcFS^k&tGhob8;H|`W?5FgLghqep3H_NXEy%ddDlvPu~~@Lpk`B>j*}Js2XrEZ$RPHUJ61EV+jKEIZ z6u=r8)815_+q*(&qon3Q3Doy?Bov`t%@q3)+0Cms{D@8w0n#;Qw4aTt9i8P>?X6Pb zo1N9M*sP?-q+su+_MeXSs1Csbfhsn7K+KA2OYKoX;ZbxCkS0eYN&t=%llnrzUGC46 zb8J$xl}cICy-c}IBKESJ{Mho^$H>#N`Yr`|Dcb9GUFv~E(2P&$BFVVpFqAO>7}{1l zH#*qQQWfO9H_W=!NoQ?E_oaTI{*`b5=QsCEhaw6xDM`X*oRYdiN71Vtq}xqWlam!g zLs2#RY1QCafhTNxf($$ZthDK=v2q&ACp0CDOuU`&HTl6?tPR^n0QFG-J~7=)(5p0^ zmUl#S1Bw`e4j3TVB+#KYblkcI#Jb+w6p}+X9>qZZ#=}feur+;eO=x>XiC-%+Se9i7 zt&*s%hC^{#lUJ5--|3Sl%fk;nR2I&hb@F!%M!;AM1Hybk#(0B4v$`j%gN1g}6-rQB zHx!ZKekKjX61}2>qE{d3@F>a!xU_#e$EbRqxn=`1Z3Z@gfmgUGgC()NS>I_(qBs?( z`tuZbv+OYjl;KV7YffH|PYy{E&K*6eAeD9iYIqKz(?tvdgVZ@HRe^-4&z5tT0GcSh zgpOq860TRHZ=iB}$m{u=*P!)915T}9TU5#*SwFnrQ6CdVwYQ;4dIDOVBU48b0MN#y z0V;w8RpQ<@dS4HC$N}C%D{OMtZioKO`4<-!$``)y1@|Qew!y!FaKO7kbE7+6fHe&J z+aszypWaU!8V$A;t_JyfeAM49YIoU{*j|Ew4+BY~ja;<*cRQy3ZtthK@dZEi93GaeZevPU@C3MtN;Bjg|U4G-URTpKH-{yBr((t=p#7e>-*RogVTl0L)njI zcxtu`jZdrI1?od8P&+f7xH)SKfU-JO4Ak_usj1o^sEa`@3>IAIy{KpA_$c+Y>+;;~ z9MQT$QNC#+u{cPGjyocmC^McdyiP85tM;*ZrLZtm=1?cB45(|e(2p3zL@f_+(rRF( z#z&|PQ3IsIY9yOzKIhgNw!E_DC==c{+B`1qI1x730d_hdio<%Tb&xzMi(+UKqd@N| z)md9q0qf+1MH!Geo-zh?Jk_yfe!M<6Wl?jHmJl(g$~!f)CTkyFcDz1|4^c|G@b#fD zkCb2j_1Bff|DvBlH&brARlwlE1%a=8qw~Po^1d=ve&n??a>?$NeQ&&}eCmIBZ8`GO zGv)Z*0u7&C$#D;UvHZ~c7s}e}4wldV+N;V(->UQM+h2a_Kq()%?`XaJLixmJH_IEo z_xkg}6raBA>hkWro8=dO^WO4DhjPxm_LLud$BpH;XeLoNo%@|P>+ego<*JvI_y6}- zmpAK>JAUF-I{v2eT{~*$uN*EPx^{p0)NkBcKJ`PRKKtgnu19mB9Fiy1 z_B$8bC2}M?VpS0`iXekO5xpYvhZ-P49iwBDa?ESr&^|w`pJ|UHQ`8*M`=X_PY;&b=%no$b64=o_fCa{Tp~;Q{MCU!k@Zu)UnlnkNtnQ zF?Zf?L!(^R5XRT-LMYF@2FqHTyk%&fZsFyTlV*<$(5v>nKwh9py(dLRdFr=VBP`H9xQ(Iaqk%w?VGHuSS9;C1%QxpMAYeomb_RnD9~Eoy}Frig;+-Z!@pnLvpM$=1}S ziqtL9D`ae`NU!S>eQrE(%|Y_ba3b01@YTE)kChMpr6g)^nJ>5XWqviNLi{(D0}`PuZ@qy%v0RqU}mdaC^9xv}yy zZ#r1^X_MV|+qG)@mhN$(*NzunUEX%9?rr}|%UfQ{+k48}{{H^5@0$JPjsJ-*esr@O z*Sp8>JzYMa&wfUq&5uo$n_o9y-n^+CFQcuz-uCxzDzCmqecFk>BZXh)jZe1 zcLzN%=z-^@2iTXIqm*@-wL7YPtTV9?#5U2p5g0PA7ITwyr-4m7d*=pb5+=Xo1v((y;)u03p~ye9qt1dB^wIqiwgw zUWGM5V{GTL-^m_l4|F{z?9FPQx^7jiUy7r1LTjfP{`SWv@`N3LJwPxEC!-ludavDIBEf@8a~=S?ToMkyz-uN)xaJi2yl)Y#cv zH&{UJlEZTx#c0tB*H;nfC}nQX-ZD2guYQ~|&>R=gWKYJC%J)@P1*3?kMFZMtQ{LbQk4K5NvYD()hJ|eyI?N& z$N+8q#go9R&=)D|wIvfHV5&(&W7s7sX0XNcL)1eDIC2Cy#fwdNxq_$hKH296lstL5 z1#ff3cCVb50o7himTs|P9#KuuPaA6FOxI@-N&Z>xKi-TQ7b1$l@wyL;MIK$AXYRwf zaf}ke!J7Q^$(hqq>USAm?)yrR0xQ8mq^l*O5H;IB5KT=K-qRWcSCB6BZ19 zXJ~a_7B#3#UH{m4#=p6^o6~JX-+B65bK#i+W-zWZs&gObu@>vs+nMt_`GdaqXJ}kM zkPoJ<{nOX1T)lRtkErzDdbCYY)&TkqRUT3FuDb4qvj0UdE61KVr11PXQRxH>YD5$; z<4C6GeXQmL+3Td&oD{5SqN+WrS5wgHx*1ds-xrZDosr(T(9%u&5Q3S04l;M zqKTqLBzmAX3LF)zd4NY2ORYtW?RBkr&><`cfrH2nrFhafenbhz-YmUW>HIV|dz(4t zQFGEiVKlRmxY#vvv2j)byw>FXix>uAZPSh(HWWY{f-~^EkUWo=SSCV z(NpSuOfXOUTv|ly8As>S4-hpDdK|BPGVcH6r_Rrx+G~Vzk(YqY?YAB+KX~ua^6pm* zl~3Fwfbiot6g>^?d?(6B{-2}eL!aL)#}>EBU3v?^04?vnhxPYc=5k!$>!85c+y3}W zAxQO-BccNym@9X{c-ZYx@f)x`5LFuD%WnSds7d{qOk9c^7(hd~$wG zR)=H0Qk4blxV(|~w@9r|Lf6wiwxPY4oFzmqWX0P4vXy|d)3yh! zDefoHFmm{z1{zT6JTTLioR<85U{Y&QX=5iwW@ zBCW2-u?q8~Gb910PFcBbv&`vUaE3Y%A-W>zH{&|rq=G8sl}!kYjfpC`EASK>20%4s zN%sv!zQ|QuU0zpYYg&rZvyL2sMaIYFR3uLgn*|$z`y_Vckv9!GLqUJ~Fa7$le zdv|oG7umogysSdI4IFhr64W*99gNsmViinr(ionhGc{ANXWH2)Ae!P3B@NM!F5f}5 z4hjz#3l$K1y@A>o<3dMc&MdTRd{0%4hsc!cwh^{RBDLqVX-a;y&AC%aK6G21!^qW%BI*sM zA!CjC&u?{4=tB4yYCVCO42pgU}lUlS9%~%)Dn@E=nZ0mX~`ras^9_pR|gA>{`#uZVK z&%^x<4U+keA`{oQ^TduC@-^YpQ_MF75XV*B9hq24K|uX`POmCTL1y&)rNGlgPdrv` z6TNTW|Grf2zpa!HDjM_eUIq9%Q$F~=K30C`!2a?FcMyd-S>F4zM-q8bzSB!Y$$QUN z7M1XO)%n0=ZhyJ`mJ{W7?tP-{KeS%n_I)>(gO|M__0@GRF7N#L-E#Q9J6is)dl$;> zufOmMmut(@Prh#-P-$3-fv+uZz8E;Wf(|~oUwt8?H$ZN zv@Wx^S?It{MI4EdG9PANn z0GQai{EZWj)EheswOg4IuX6x`a0I$d+9O6srG{tWCun&BC#%YpT9NY*yA2@aloGy= z5S#Wf?F$BNayD*?!Nwj(z=FMpYb9GJ(KFYb0u(yeSJx!^q;^o+V~x}w0hw8HvgiZb zrwB(8Lm@~oTozXpIg%~N-6vOm(!k6NIXTo3Zdwx9S{Czd1~p#nV>|STsKuTnmznTQ z)C*;Y>bev&HUo!!SaiY33DFx@!8)CCS}8|+W~b~FweA9aTpgEwItEFq-Ltv5qy{X> zz+Dg}PCsks#P>f_IxA;oKu9K7g|7J7RwuQeEp_VFmS}(VXG>xcp`h8;2+)EqMv}IB zQa_cpMeiDWV-R8VRNiKbL|`AqfME^|mFup%zU;fY8ua<(P9^#c7)%8)~C%TXT z0hBE_DG7>6*p8?KNsv{=P47iaB;FgSp@6ARf9jLv!7qGX<5n5$8jqUWe#RBn2M92z zT9nG*AclOa{nMUj1HfG%{PhA=4rN^FPtP&YA`a*Oj$P`8KV%HvFbb{=Cl@mM`-LpBR@#BF*MHF4<0u-*ArT#c@K&n z=UCVGqj;xz;-p#84SAm&Cd~&Z$crnhs&}XL4zTWZh8_g$$3y1Y6-33gespvkd7c0v zfS0{s&@`Ys001rVN`XVDf^3{Pb+qu)>;5d!Hu%{(!k#^VKjYri1pCW)WmB}*QGGM5 z#MrsH8U5BhYx9dRN6%|G1_h94o27^>3uJ)HT!4p8RO>mtnkdB;fvH?+@|L~jZKCo0 z+P_~Z`~S|h<-2@iit?P)FSSV!yBxmzO!>2J!{*EDZxfYHIaUAsW5>$z<%ROlXC5kl zZh$dUZvURC^6`6~Dj#@YqTK!pX1>B7rn=sHTXD(V?*W2qPc=T;ZthL(*gVEO&Bn#V*yX#`=;fvm1~Ed! zARuT6KmCUN<-iMGP|hBIT%XmtRyN?OLLkPvzT-?Uwb7Iwa*-4sG*yv%lF>9I3!CF? zxD%04M~wp#l)z>sI)j(Ax4&jpzj56r;>F%;hF{A$x)6Z0@ALpw&PM)FKx7^cuLdsM zrg~9F#eCP973Q4QWAO&0?Exqm%+0G$B&T-0pHU(Y{ZX?-h!Ta2;TmcnFP?9!In{t( z`;70!s09Fp^3(FP_%?h~M-Me1w=A1Z6>wC@bbdXIaf9Jtoc{Jx%-Q)OHRmhfFFlcK zhj?p4Su&aD&Xn?*PkqV}gYS96_iD_%K$Az+tyz?GIAFYnTiPQu*r?Wf9fK_*u&HZpZq~5BJbs>iY(5%4o63>$hNMQaz5&o^OPnA*isJdskm?O{{t{w8h)^Wo z%WEh(S=tD#Sfn-*b@V#ogyBTGShy#&R&ibW#-#)F*_PTlA;-h6)CB=0fHAMhY@}6f z&|*8L0^^L>aIr!>jL-XP;)e42*FIU^d*^WZ<^SsXdU=U8{G(Il&Odyz+;sQx^3H#> zx4c21>!JGTzSqC9{OQg^1;wwM) zq`=#7dD{;hEVnxHT2-tQ0+!+w(mtNme;ykd-c zQTRGlB79SOHsAnzDfIOzIo0O0?5m{Ex#MA8u|L#lBOjIk03ZNKL_t)1_UsWD^vOkb z(7<~$+a%zMW2@t`rNhX6!`@n1*%UZg7wu2q*PgMqtDId#FckTTV1@P=$1?z5SXfE- zVP9Dhs99M-M0{7pb>sA2Ux)p~j{q1965F21_qz7#y~=}HkSJXz_BT5?`BPRDM0|<8 zHQEWgE;W?==2b<@I`AB|Z?cart*=TPV#5;eR`!)1GD1WrgU;VM~{oA{5 z|FvIr5iNJO0YwiO@m`B?@C6G(R71cCaZSaeMkks8f+JM`l$y_zmL|7~bG9V7L@lsT zQVH51NQWSny#=t4+Msg;MB)0&kNo@c;JtU2-Oj3RShZ`2aZ=OB9^S~Nuc@QfWb`0B z!JvWSXL)0Js%KR_*@}y9mqp|qTE(DQ)u33>fFaxn7{G`D95jG*F+;b3rG8-5r9Cp% zsBXT?AvY`({FehzxLJz8MA2%u^gAk{rM z7tFjMF(%a)M2qN;8A8E;qM^G=EtK$mL_qugHVMc}?vV;IPE2vGK4Lv>8V#S(te& zEtd)qM$`xDD`SSVRu?%0v_q%U9|V>7-EmzGMPN04@l>rWFDmbEN9UfB_m2=p06cSp z+7^rf6o?paL|Uy-Y2X%TOKDvCuE9;B^ou4{5KWOSrn8#!3CWmV3j8@}yt zmH*+_{@_Z7&NtWb>yMZB{4;@%AHTJ{`!$!y-TLNg@t`$>9vJk%pa~rE)D`puC{nA=dF}F?dRO>Zye&_zi8yUMl6f>t_sLCghxZ!2#u=$|?Ee z(LMizvuT%m?g0$uz+KZeRt2SoOuFhtBUN%nk!3-+vUtzY%%C^sv#;6GXe{{`5YN(jYJ`}KtOwHsf&uPiK{Dd3&gnpKU?#NQmwrO{fIDJSw1fKfqFwIZz!!p7gN z#YC_Q3s;_CKL}7|bskq_>W=|aHBu5P8bTNPz|o}SVUfdSBUT22z0~R?yshL0a9%vh z1`oEVX)aMSiipNbTb;=^bhb$5<}l}I?y5jigH;o6C;A_MPX}lFNZ6_j3h} z{Y|jv$Zv!mnJaseW}N63Id8j)NKGr_zH|0;`OGK&ynN~YyH%fJs=WNB8_Nq1Twjh$ zjACu^w4+tz8UcdZB@^Z0M2SATUIdY9M@}PTL*%7Bz&LvXbn}X{#=xGam1&_7KXKk9 z{A?|%h0a0KY3EuTEI7ctZiR!MG0S&F zv-R_-Ls$2~#@x|n!q1hw=6?2kv4ku6?$`R*#oxY7PL^}!6CZl2ymw~4eA2mCN}T>C zYU9`Xp0DJ5|HseVT;B9*70({L20bw7fp6L#fNK;M0>KCUEg-|5;e2A-ad-_A#evd> zK-Y+(Jl=P;9}+ZJ6c8!9s?CV?%CU+ZO^NNm9)kwLrXoTdZ{Z4oEtuXWK~)@?F&P#*i!5clOTB8cgkMt(wjUqpX!ha_vR$ zZ>d*H;A}_xq-|ZXPliNET$25H{Pa1c8^GEoc%l*}2u&yeWnnYtn4!C%{t`xj_DB@X zrG)^Cm?NCmMzyqORa)cJ@S@oyQ0{rTW+na1KS=(vAr3VT!@O?5wyB)RmSpFMR`e)w z-nZ)mcLCc<&TL9w79`*l7`g^KJ*rtERN46HMGF>4b;L9kB4B!`Bf3F`80TGw#)sFo zhBW~KPChd_)+oWCr&GB(ZmbTPMvIEqHZqPjOqz;Zjks;#y#|)m+@wZVY#_5=I-PS} zE^^gBgBzG>zb^)qlK5VYQa~os$7Jd0#r<`;rS-Z!x?qeagAQ_xOwr8Cz^p#2mhZ&u zOny?runj!9c$&W-;fdD9?Hct95KN@9ebzko{O+&Q)xc#p=SAp#4JAkx5A$GCBa5~$ z2zfQ*zC}VY3^4{bbR1DT3~6@}W5(Yk(m=!kPYT>%Kp93T!&CR633KMe@$$g^_m=(p z_m`J{#~w}i6tW{h(zvJs`2cGsR-6P~98m{%`m<91f_C%Wyxn`%In)2_pYd;oe;3+c zIY>(@t`JbwIeTIA``hZa56E19a$Kc$}KY8|y1Yh1&HDj+8@Ry0<*} z*cYTsJzP$H<%`by0oZhw&Y2bn-PlEN@jB^QXT4~(){+566ozNLEBfH3IMaz}XZ-qk zd)$L?(i+$Eps+LfPx|c|Q>-Z(zeJ#2VIFlPdH4{6;1$P35`qCQ8dB+lBxh0Jqrl*{)<8R_MCG&3 z%+WX01<8lZn6preuE(0p^`N*mQg9z3)BVUA5Sn(@5l-NGb+xA3Gmg=Ez~XPe?%5vt z^*>I9Zhuk~yZco9_QU`5+q<==zNy;y_3wqj6$U*p=z(wH9&izMi#EuPZK~E{d5~}G zm{4^zk~f7y@o8JZS2>#MW0(#-)?(C^qA*$%Dm#4czDWOYJX+aT(EvLL!n$!)anGeUL#_a$N{-23G^LA=meY)pmNHJ?srqc9J9Q1-`Eyr!^n1> zR$*ZF{9S=wf)UG#`kgx`r>p`4b8})e>AKU3?AaD(Ji3^rU9NqAsv40zN4)y3BwbrDPyPT zUe&5!J%V0eLR#u?ZoYhKsK4{<;DNtKvCh=i1Ah!P%rs6$YR&lE$+5&^0WZ=RK4ulm zrU{KXKyt9cPVQXgjSFwguB}vx$nYP@*6GFknaz+^t&9eYXD{=!YpTpImLbcuw3YwR zAL@Z6@5fKe%IwK%b9Fmo90I~hab;k0-#uqQ1m#GPYN|0Kgr#7);8PY9jVaRNV-%b_y;zq3VKx)-B9qr z8I<)@dyoi}D$0prkGa^oVYt$=aN0zZhstCUQVk#4wVv}i+o(HXim5Ch`6AxP4jYa~ z*iJi1X$Fng7dfJ=)oYvjwr2PvLD{0S-mFGf1x~Y>)vlFdY34^HI~pu%t|n?@p2No> z*2rP6)`&yIO|7ed>f#IjpL#nYM5sehgQ-kp65Pkl+D`}xAL*{@*7EmWyRCcrm3zU$ z|IWk(e@ufd(qDI}2f|MJPn}M_b_Mh9{nk1SJ(VAY_V|i6kNzsvL9!$%5))`L;6EMi zZK@))hj?R7C-kFE6R`c^VikNr%nDn#)kD;W9L|y{)HOFJk~Z86yAbUS8v*3};Q({j zr?8ZG&+esi-b%w)s@>-iJv^9#jEP+Cz#O6iYOM33+Kz(IFVxHwlyy0;|GmXlqkD)_ zGMwx-$Hi`Vq@EGA#lI7>%+XeQZGuS`50SaWm@<~j2AcvZ3MmOoz2TPxjmVy- z@724>O5Fa-Y(QCn0@ec|aw$SFylriFpckOc>MQP6v+6Z+PFcVX<&VP0vdAhD8}5P| zv{X30r9Q3faL5LUijTod4K0L0VU1{}QJFETMzIJ&7)X3rf^{X9@8B*RLN#`scf8-_ zdIY(Fu-?(0&d;p{`?8>)Q98qLIFUY)cVWy&cvLy)*t^1g~|u9+VV0*6Y4V8u*7Tk(EQ zpBmU9;|3~&g{+4XQ$gbC!4@d9BeA4oNy?6sgg8W*Z^2o)wou^_k49cm{=qhG>RbXC zDg%qe0Hy6rT8r}WHs0~(**@DmmmH32fNoEr>7+2MxFbUYi#5bRMuT|kX$s{I8Z5aa z)L5_8<1?X${Z?+f$Y~c9Kqw_i)L)v-vwTK=Ej^b*l~%JYgb2r3ad%ZCrxFR>loEon zibYSiom;|<&$fBO%hNINNCpTc_#+y3@4-mmg`d{e&S-=d$-b; zjX2z)J(th($n9|8Q^cxUT@-b`i*V%O-`lx3ge@g1UtO*^IxVWVMjXU+eFtYIjPTvR zW=M+RNTT3GyY9oBhBvWz{NzYD5(at}9kf=h`Nr3awb#hWH+A`TV7pkMB~hOK(%|6( zbRJSI#x00W6zH4EHNtS;UZ9_Jc$T4R!_VJHfD!~R-X3J+Hb`s3d*pfy+wapix^XhYagOX z>|hczwz(Bw<>#2cLU=w=Kww4bO1MoWqb2Y+_^$FE>aF{1=CmktElgF!{~H1j-Quf2 zl`oHokeDlL5bP7*?`%~>rwE3k9ny)T7G5nc!XT$`yOH!H1B2>MYqJz{o36bYW>5Qr z8j_1Z&&#uxli8d3U;f|=$Ww$k1yr~?LClxyaZQaM!(Lxr1^KhOb^U4y7G2e$G8i;F zzCf3|l8YKV77Za!Y~JCGzym5F(}e09Q-lp4Pj3FVcSPX8f2BaV$sG(j@56rWan+H$ zV-^eefE8n%=Lfc<@!0)Js^V8dP|OhGlSpS*fH3`}^{>3q|H>fE17!gZj?XD~tzAa& z;M(*;(v3h80#&BWlM&;~KtT01t5*d=>BUFYW?a@o01$)oTni1IC$eO*4KpwQ(-+JL zt2U*+IzcIuZggnV`AHcY%iHSeVe z`^~2MAJp|+W*p8U2O}5uQ@a~tHfW7Mu45<4lw*nVe2Tw*zqq*va0O7*1^`b1>V~o7=veL7sm`*#`IPopPW1v ze4shYoVs0zHmMPgWy>#qzr-^plj?iOO!=su`g~)0g-d*5Ww?kSwvm`bEH)Ie1;FlP zfoEZ>7XFLtTZ;jcLWIHm0CZ#aAfs59z`p>f&k?u$`*3`Xq%GVRHGyWW=7YZQTh8!L zt^gmJyFZt}m=+dRUSOqh@ByFBpr_BFp+)Oq&zxBSAH0IcDbjG>C*(FGV(>jnBtM)Z zEcBYkAgDR`z*WIuTW zF@RN;u@^)*n(MXeForjknCW@)|7YD@c#-Hq&qb+BmzfN4Z4%>5aDgv7k}&1-ygcvF z5Qen%=0Y$(60Mcr80CZ)Kd29wy!hE#PFA#*mkfW~(}BQe2O_0RLg3dZ4%Hs~)ow(m zE?`kRe56{k6f{jnyYP=^&p(dO&S#*IAz zZq>w)>x#d~?fW{|S#YO~)^x^O`%6XS}_7lIiC128NoMwk7>E)LL^SXuPvMHQdu zmQDS6H~vjaak*gJw3)7uC0MFcr!tFfxZdMGv9=nv9krflrpgOeXZwH_I+F!(D8dmA zJ(6Qad!;ENVi~02HN=3)m%Q(&nx#H1PSsZq8rpPV9b@>EiB;_h5E;RfA~_8h*zBMc zIsb#E3a(O)o>`vay_*uNz45Qwv%)doUcP=ZC~THsmv$ayrX9>UvBSo~y3Vo|{z2@@ zojoqd?3ewtBLS|aUKR;r&o&!~3=sgOfVKXQ%6S4a5Og&md=4O%DTW~7Vl4qugMb9M z6PzULxwD&Ze%0@UMhv7Q06{sHb(_1w0NG>6Ff58A{t3x0Hs7Dx%T-+T zqVPqN25NhT1waNw=#aoOA31Fwh?|b1wZraOVR1VTPBX97JGC>7JL8i;-4qO2IRE4a zi?O~#m;`IdSEx|vwAG)Z+xbgD7|ibOou?Ml#Yz_oe&pY0B4-m~f&s;EAeZpA>!Em% zfnyT=lS`>wiGhZ$zqXL`_J)#h>8kiALo#kRqsN89#k+!2Ec@gc-th55*x16^m`V*~ z+iK=ZN5;ev@1FVHkJZ0(#rmdMk7klM=|asSO2<>1^}|R*W#W$daCOF)=-!@k3l3K- zvzZ;YTtiM<^q)3XbmGoOju(W!rS!w^--~9eG0a8z3zT^zbv97)xZSjVR%_#n7rC;N zsB#y0BBN37r~lMXEgJ9F5#vn&3Pf@-`8pF=akR=MqSJZ|p6oaEvNGat$=@#^vUr#sp(3!}w>y=M`sHrP74bz zB`+bU${r)_aW5i9(utq&kSHu5_h(6i+)X3?md%lNsd#qkJdz!nN@0_l1QTt|dZL2e zZFv2`$IAzv3soANtt@Qn>QiHCkBNaHVjlN1j~%un-pOj~e|NSPg1>t?9o_&{bltwk z;z>i!?OORvUaJ&zSJ)vQB0pQU@(&#(L;4eBL)YyQ3amIUxO%E{I50rg0)|iIEdhJx z8S4pFQ~ACt@#?-XScK~ruG&m9gGN*L1HuwN4h~~0sk^W(+n+n z*j*iA!Fe;eLf|P|kGYoIKNsq?k}6fA=z@EZ5$LEB;CX9SECBj+llGP2s2&NzPa3oM z715gnk}x2w>7jWbBtPt9{#}F1VOPgPsv-h+KKdL!`33tNp*n0rHXVJzwd0hA8lsx3 zzzi23iaEy9pGD?UaV6Ed;6k|myDFKPjTch||LT>zM-#2Y|C);B?uo!)i!dleJPqew zXuuRosyIr*ySIn3jUyt-$F)E!(IwH7O5?d&cvid2u!?^07()nqme2eQQ}}B-aH6nr z9TNo|WlsR)ek$Bk7HhXofEP1!PjoHQx{Zi}C{-z|0t!TUBEoWhgM`eIOhQF%3fc##a8m*fJ(x>>5b_oiQsltY$K^K!bm@zp z!~kwM$gLzw%iCrk&&bjA6F$ixV1AA4I$GIA<4O9005deOE{HP6)cTIi!h$ zEs*p~I@0tiYL#kbD%q*@H+jFcqr%SlXL|wGdzi|ZGpn3u;Y!j8t-dh_)MEeR|kkdhA zK5=@%Lcb0aY1b9U?RA{2Wp%Ew_2DM($Zl)2z;x{7zRcjcto|_nr9#khKNIoSns-OT z%+iaDv|>!+=aqJBXGdEtaA%0%?*|P~)2i@;vD5Nn;J+!V{nb+g2_I9Z*V7HT{#Wqi zHObMyTY^~N0Rj;}2TXMIX1o?gQ62Vg&^02fIsVpS2(y*$H|GZS?x!#Nyd5nZF3wh) z{=;5T4j5Xv%OOVrj#gx9gB&@3ta&=E;DG00PWCKepcKpmZL4xG4uOo~uH=100U z?r)4;S9CGbWLxnWUd2Ysg%wcxHIjPiCke}_^Smu^D1eC%LgY2r#g?B>=16YTJaRiM z?*oHj3VD^hzEXlHTk0hrrIK}w^gAw3YaI{Q%`_DVqsw1M5?*ca(mm3H>RF&w$_M9H z5<%4fMe`t;0W-Cg78y1h%*5=D-KHKI37aR}8o?7{s)UQssxH}{d(o*4N7O@pGLDT- za(FRP`~H)ZbvrneYFgGi65Ji+f1G}A9orCGKrX)WTR~R$B0S`28ETR!PxmF6lNDO@ zd1&95Wj0$HQ4$3ewU+rC^)$A%QC9sWaBI?D&Tm0dhCKB{S=GN;9x5 znS{ustUAoO8puxoz|BI;{O8ULggD^g0>00SI0k;o>YvU&3+Y=G{D>ww1})*{$njb2 zqs=*y0fN!u-nSB}z{4EGs8|thPe?ieL`fuKE?FzgI^O6LAS6IJ@5@|N2X!F#VQ#>;*`>Vx_9wl@Xayd)PSRE-|i$`e0_yGmt zLDAd#kzMvzepR0QI%}%k+Ej{1BvK#>kUh4e$9i!=Pn%#)kaZi#myCxcD77a$Iq=Gx zQ!)}n(!TkAiKPl}*>YE|k^CMEj7uvO@n!6yoXiiwW+qE^H97P@*6-3Cr*yyUxGJ;$ zesJJXK_PZ1xO7!hGk#5eHH_;#38nBm#aW)mmD#py#nF*ghHhIIQ%ofMR2@*Ta;~t5YVE+vzK|^aDn}?==K5Rm zMM@G4h{nhA;|J*n7LF5=DB~wcr(5Gd4QDj1+UDbib>+RH*f3344{_q-lJ6?NapuSU zj~Adkq^$S{~*AYCAg!1l62B+vC5>m zE0JP}MXDU>==B=1%Mz6J3yEePz-5tp!CwM&JW-)D#~?q!AY=gla`M?kwj(M1JgG`EX|7k}sM=2pH~TyR)$`v+|!AlXDYtFvOYo2b3$ecNKa0!^qfvBz)I zSf9L(m5v$40lV{Sjv_0nd?c7N#74X^{hdJxlHH+a76Sswpuw1jY+Cqr=^M%@UBrHx*h%|8{}X@`n*YSGqeui*vOw`FG_942qR=06 z?PCU4?JCZ*og2Ve^@T+up)<5Fd(WBJgqqy10Ab^3vALM<=MlY>6Z{+n)@&{F;-zp! z5}N(WG>RD)>J|i5{To7Okl8f>>K|YuK`Iog$VbaZlqGLM6`^~4OZ0(kKKtJ&&cviQ zB%r)ijJ55+f-JV25`ELc@3RY8>lX(aIVtm#zPe%*RmvM_PYC8k(5}~laWEY*W&WW;KB5!CLkT8JCo$;0=$-& zm_}*|bXk=^$xPX+Q_r#fEgQW1>usY}0`HP#k{Ffk1vV2hPVvwDt+J^GA4{-u{5f#$ z-+W6%5soCkwH&{5TVJ2I8%qQV4JKkf$T`aRspu+fHU~sfX8}Iq0__G*&7Q?EXJZ6v zvE4<}U>C)I>8FM$L1nJpsN938KLerI@Yg zyYPM0;quvo@Oeyj;SKn>V-=o8TU+(Ti(hZCEkitZ`~coVF_2l95~aHu*Jc4m6q8x| zAa%%0sT5Ych?o=A0@+PUe^T$Z|4LE^Z)Vj`M-6Tkkt`ETxe(NakXhw2TP-NtY0z8g zSeB8ktj5MYUBs0e)Xbo-c{kMBF%nO$(8yOT3BKK+oO;deIv2XK8kM_NgU~l~)85PV zV0drwU*$KINHC%CS7RO&-a8F#_M5X<<+2|`+5J~_`mfdCn-I6#lakf4=(Z-j`DX0Z zhN#+@T~%aF;|5BAm)IH1h9?N+45GvWYc!oA0B;c0rp!bbMNO0^aN|V07^b!CIsgMb zRUqM zb%H1&D}8jIP0(nTYaTCa(j#*5zwO@>U8}AX^M0ZE8X zAWQiaDO5yO?dP^~#d~-@{;4MXC#|Z~%Rn2kV4gY!D z>NQGV^Kt3;;O}v#D;x+*Wy_NGM1!7!aRS6XspXAkx*hvM9AK13iu+uLS7B6sG`pWp zpMw3H;=o%qaFf%1N#o{w%Q%Xv?^AS6H7*OnwBE*zJ2z{PbM|F3*x4LM-)j3;xJ%3y0L1ob9DZ-sA zF;qfo&Rf9-=C*}%xq=8*a|-D$kJ{K5%F`r>8;lQ?NQ4!3-DR!vO{z5~*ZXU@{azvQ zCezZf_cihlP3gYR&59<`Yy#?zxoJFPqhctXT*ABdMARuB$q$q9jy*g{5++6nla9U< z$UTJ{CfTe8qiz4L*mL%hBtHv|eCWHzwE8JVUrIwn&z$Cg*@g##4|_>~-88E3?1EQ( z?-@s`_87-nv7cRS$je&Y6KLDL*8hnXednL^pt_KG4eF6IN2ID29tRox^!3f>XtJ6A;F*q zF_bQ3O>x_?PxW1{y}rmIR~r#lLQ#;G6-}sPxC;a%vV^x%_qj-v+2iYd9pu4jv)Ba^ zqjr{k75`v(PfZ$J%A*OVv9(=7D$<-IWkWmAKtUOqY0X<<9`HVzPKqW;62>hCXqxS? zk~pey&wun2^mmnSPgu<~R6c@e0A%8O;wOKk1&bDTrgY*{USoKJNa*U&W-D^VEV!u~ zx;ehZDCE2DgpO7!S=?h1m@*Z`J9us$s`5+{0gOilM6xeK8uvfV2}%(BoIzA=!KMZV zVLhZzb;=|%K~?2wpdc#obqzuB&!Dl(bRiEgLUOsWNhdsDv_1cR`yWu5iX|p~Zr3TI zPNR+zf|cVmJ@~A38~+=^f=!dE^Wayo(6cP`rIYIU@v#6Q;*La;EU7&KHvp|V{8!Xc z>k@4ce<_3(Hcv>2H&{5Fk34nQ&BzbkA2241f=Dqkvt1jZV1PxEYSSM*1g!w={0l5} z#M)8@Hv`Bqzly>Zo{w?e>-X!!WG*IfZCe;hc}VN8NG{h7Atp>-#FO-?;Qe%nAB0X?wz+$>tCH!S?KaF{*3GTIdP+#Bc(ZX zl=3-LPB+k*6$Ws>^Z}UEv#-M9=H`ygt{E6^{5m zdb1qoD+0huf>PYOp~5J|VQMBqFf}H_lsu$2$(oD!lbuZ#9lvilYdj| z#jIPLBMQ1y%K2aJ>T|$6Z*rk zLFF)ZT%9;MT>p={ zd{hqA=7scT{-|k3;iAtZ9no2e^UAQ%%lD73m{&Cm9Mgt!3F?S4DoOD|S9$aUU-S}h zIWYdmbR6m|Kx8O^k7b1;zEZ|S`VH(2;mtsXvsliC#ysa$ZEn@>;R^CE z=T?G^(`ie!)HMh|)Ooy|bJO>^+tr%)Fl5*2+nWEzad7Oi$?IBX6M6%aMp|$`#?D^W zKw?@cp*UEv@@i60G^uxmeC)%bCKZ zs)GHzn#YZ_O_JaCtZ)hGx%Ywe?>C`ecc^97;-NBZ%}Q;TUS`DS%y)88!%!)DaKQB( zrZSe$u#AZ-k4EZPw3M96i&0F8qu8{GLX45mS*j)=_&s8qFxW081)u94WqjZ0%k#6u zT7YfWNg%p&M8pj1U?Y4wst8bD?FX9iob$a_iGc#vTl}kzDR2s#Dak;bwoME)7m4#* z_{kbr=1`^HYw(KA5#ZzfNR6XOgv=9B0gDZY^aUm3b@pVXkXL)+jV}?=!Q)lV4AWuz z=KHe;j&>c%uYF{@%m4m-1-7D#XV56H;ML4T?YoFFG*D;0V4uAE=%Y>;k57@l=v=15 zj^ij;BGWdPHwC|Q?N^=9dPzA?77sWfX1f&z-kU;5YpMWH*x1j)s*L3ke$8kvtZgBw zm&1i6f1ta3JDW-=jP-4`aY^~GJIb((uT2$++zYyN zGj?hHeRB7N18(cAHi{Y{#rxcYNv2`1_Ed!fi_`qHb$9aZA@bFg%i&XAOhFHxDPXO5 z8Y=b?ukFyKX55u^EGh;84hCMz#}0LOGCcG8VW8}5q1?=>)S?^)qT?(KA{4M|Is5@q zRqP-U2`*VW840t_BY3rFSZZDa@Hiokl`y2Dp~Zb}^(rM(CMb+E&p_hL9>-6g8V*#3 z&}Qmii)ytXm|Z%|Y$figvYh;K2HD~4qp6SwGICOET9#=?>rSqgt-Y477&HhcaFj3nvhY zf)R!G@ikuoqHdK-YZy1OK@QhA|7nf?b@&{0L)jD5rN&=b5AYrJt3O6pA^(Zw)M2j4 z>g(03!uJ$ba?Q+)*i6eVGImH4^sZ-#G4A6eRRuREl@qfGc~JcTl#Fx2!VSnZYj8OD zR3hxX5;T?+tkaoy^$euggve_AsG~L%Q^*}r@o4~9R6gqa;TTL24X~BlpT@(wKwZ7rjH)_IH-(PX8`#n6nn+N?;q{MAfm(Gb2RA$o!n=M| zk!F;n+En0(mWP<2DsLmw0B-|tWpAD{^L2XTKC;k*xzp)E@P5Ek2CV?vo-1*)Z-wE@ zcAx*Ef0SkGe0~2RQ9u2D{Gz2DrZcv}mYekknr1s(_{gjWnZ+eRkh0-9YEA}l_lR+6m2x#%0 z%S~VrD$UR``J^Q(hA}-}C!@96&cHaBre!UqYD_aSw?ZPT!C1a`1umamcQhRIiB;7gV-=2GPLFHHqBc;HHuFkJX4uSFxCDVvaZ0>J+@8aehD;%R{B zo27b55ArYuu=NpEEPmFba>D74pwnDjkm-?F)PDD86OC*=qU_we!HD4$FjRu|MFmy$ zqfTY)*-?t^_gX?0bySQW`E{?cWd2Suq<{-Zo}|6DbXmsBzU2)?98(is1Nsh+I3-VycaX-MZm4#7F>l#~iB5pz4u7DZfj){hhI|J6zC<#J%p>camR%;e`In|1I zV=l;85Wa6%4BrQ8Tzqy_jwDu=r2kj|gCcY?`d<}jC-Z|7UxZCnGg33v!N*kn@~wvE zyw68KC0fUnC8fx!vnk`lV$QnNF+evLxs*$D_?_OK7}sLng+sAsM7-F#xPo-XDXTcjdtO>G9vUmgqI&#B}tpR6jX%8+$Yo>ztjYavHX`AY47BW#jDc`6akAV97h!Uhh5D8 ztrcbi5ZXcnK|`ZpHcJCGlKeN<$!|;`Xn8qWo9t}~MMzQD;J-K>iX_p?aQ`!tH!Blj zs8|kuQ9;#Y&8Ns6DdF9TDX085Y#l74=>hoDcbkJob(5(a2<1iv1(0*aHv!bC#otkt z3hU6mR(%#S+sMohaZRK{Rb8Qt!4AhJeO+Gpxh+$W?w-yRvQ`OLXDmm}ciP9|jphzJ zIvnx?erma`_IQmh&iz&HOdqkOT?fADiyFL8RrJwDqWneG=ugV3a4wnn)Q2kqO*94k z6~?^0=VIbTo4)Ee5-`Jm6Kz9w>VI11-Co>oDnX z9tYSU3}Wcmg5e=v*oy7(Z$7)jhBJ?d*w4&-*N_(|pi3It%{c+{ZY5(CfT1R#2S8S% za%p1N3Adt1{;f_p5^}`Ty9j5mvmAb@sEM#*EOp!OM_<4~ZQakdGc^qWR8+;-u>KnB46jL@0HXSWB@ z<1F<7Q59pp3%VGU-Ilj|F{S|TO9cG-;VlUrS|0%1PVoL|GMyxoMYGuIDp$eER2OXx{JGk%Eicr z$o4K5Cx&C@WafNkl$xo84>X6L+|zRbqLkTad)PqZ?CgNu1m&w!d$O;~l?r za~b3b_)O&AlZw)9AC1w58cI&MxEL(A3a#!$|}o; zLt#Zg?yUdwI6gNTcl9j$6Pnc4F)84t-+Rf660}G8SBQDLUc1^G$J3M-!uXBMu{i}L zu>qy4rw!$MWbNj)3PIb%_Pb#cltk*2P&RuwWq^6f0N53bpF0#Y^utaPybcDa<8Bru z)N&VR)@b{JpDe(a$X0CUl0)mh;EP`%Ft>^n_#6cO5x^x$=IS^&l-WM zx(XBjIwD57FkrB}!7F@Bj1iJ^3Cp5$UsT(5z)P3R;8B|cVMBW;EC#4M^@BuBIu#-P z#n^{+q<}!t`gv@hEX)yEGwDlfSP)gZb#s5wa!v3NS)s3tTF^qD_xsncnqG8U306)< zWsDQ$0(Grr>_EkB6J|5vxn0e2FxzNBqQF&005iWppwWTXBNyf~1JRIoKBgROV6zkp zJbJtf6HRo%#Lrw)fGvbosvJ{gfyRBUL#AM@2DIN`fQam6Q?V`F6IWG!zSyPO=- zryWn5|Gm#c*b{Jsd;e1t&$UI16~P-ozeHV!tExlwmIx|TxLW8CwiZ)4>TD*$x(NLU zVk&H)i}X7VAxLwlGn03{HaaIdOxH+|Z5boEc8^=ZSQ%1zzNros=fy#jK-&t;1}hQK zp<*#3%dbN*4b}0|^J(TMiuB=x$m*)dA&z}Y$Zk9bLc~4Px_Z7VvYXg!XtCGzdJF=Fj&P_(1G{Ud&~hQEQ^#y#t3RvcbJq$vT3Z^E(hgBJ zS$;Vg7sdCd+0f%~M04x0U*@9n5%#$EI!wm?$s4S96%sc){<^6YX8?I7I&aBf|Jo|& z7+RR@h^PSOhKR#{xj=p6RlJJwSom@@=OX7@d*MSFu>MD<(ivoCi#Jp6j-COFbCre@ zrl>-R9fA%vszUl2K?yz@^M~Rig0EYD0SPe~C6k8ORNQg+D=%8cL^(rAU>5vmf3Re#KOMsl(GLRfMXCL}N(|O3Pb8A|MOKuZp zFm@G4kFydJq<}$o{I{c{2$rMA_MTa@ zU;zJVJL)W;P7I&RKMzHQ$*};+Ddasn=dixU`5HeOBoF&QvK+5Yy+P%iMq=p)Ayz*^ zj}MU{_o-1&E$|VCjM;)dp-C6bd8MO?K*=MtX(V@O38Qlq{BY18b~8^@@Q!#RMZ(Y< zWFTXEArc5jhBJBzMn@4O(m;OP=d7i9wFEKJ@?WI^gWSPh*ki(I=P98PUT#&Ck&^o* z7b--QqgR6F0BGtcM)|BlAGWEm?r;g@38NhOy&b1op@n=TXv5l}vqR9yoXDtBPEG)E z`rNJA!cDqFxu2YFXhx7Vzb@xX@F}Ds>)QM9y$m?;;h?VE-KTLl>oUG+*6dee8U1~9 zly8jrrD>;aJoTz*Lxei2=MB!p@@*SSiC5M|g|(j5AH9<|w~rn3(I>*zCZOYxtm)QV zSBKK&YkmL0b@PUX&%T(*TkgPFFJn^clgsE;*U{oF=@KwlF2m~%VeP`q1C1D&BcVb|@sj?YHar4ziJ@&83CV)F;lg zKxNL1LNq)y?y+rXSM4kvFA{&%1($;#I#+XEQ2Dj*dxcG8@y3GoudOLF6s*m#g`5(k zsAL_Z5P{ic8bxtOi%j&{?D3VDo9G|&xsl`fM;DCSiT86x%lNKUCpunEPK7&I6^07#ds+Mu49R*DKeLA;hF0Y~?HeK{V zPEkZI%)!fw7vNaUqYHbLv*pr^%G^^cMsHS{zu)Td==&C(_PtF1*nDnR1h2~Sp9wUq z2@R926Aef=Ft=hbY}kW|-2o^V60Hcs=c@4&b-?BkvzIpitZ=xn3M_FAsWUbK96 z5FNp)0%n1;A1^;3lV7`fB`%=0egsC{o!V8RaC^>x<WTcEssWYw8WjP*HvrE4m?UP==X%;pr3_syKVqwT6~%|){{4N+ zlS0Wa?GNuQ(WkQ+Yrg!~#>RfVAO<%LjgGF?VXy@u#Z6CgX;p6)54wLXpYY!jqSgP8 z7hrHo$8Ua5=VDn$k1Ez1Ihk*y$Xd{efPl!~zQZb>xeG)|q(p-bJ}FB@^NgX0pd=iwHh8RN8j%xzzqDscWnryOf0RLM;)%L^m$d zr;(L^8?OPU5s(92m0FLIeHcoK6hTBIF<(9E3A!x6knJEfPtni`NO&}wg#gsBI4&Rlal@$w2=z*N&KEym}6@{bUEu@ zo^ozywmv5#y{DfxrCOi%;11-QFu}{JeM5|MCx+yco<7gxZ*yGBfN6GbIhf!0-zj~K z!?`N;NA6dRm*6dJs+uo5J?+ik!P^(lLzfI3-WK)ipCy^2pP2KSV?VZW+$WN7(ub&kN2v zLi1x0%2E+r=~A_t`p04XgJP(j&+rA{y$U2Y`%#$sBqN+Ow|d0>H5C((c~y^jE~`l} z#0Sp+p#Qc2ECN7j3s4xWa&>iQy7FyZuJ9i8iwC1Jax7l8MT(ZK8@;Q~UNNkgOly@f zik<#8pt*FdXeM6?R_G8Rm!w&%cuf7W(J6OWWt;0OyFC z@pwDb`cnSqKcYzH)b{55LkVSg&B-&QgwB5+NLVZ-)5s~wy(fLefcaN_mX0^xG2RG8 zw61l6d}GSVBcq%!1f{xLv*vHDxe>V7pW}CZ$v2Mr;RSjUrTvvOiHIUmu0T{HWS-2M7sf>?u7DmObpv zXT=m&5Rajq9nq%Pj-#F#DSau8VeZHkDq3uUOoC|G)TVCQe6zvARh!UV&L+xs{5A`(w!-NT{?c(j7Zf5|qo|%l&Qu0Tu@0?E`DusQ zo@sU6FYAIA?hF>221p0JD^R94e8dUM8GfkTmn+@_sI8j{$Do7Dd(?xY&x3TwJNb@^ z_xI+ziJ6}@U)^VQl&xLw_cg~y>5R^z;vFya94Sw}QzBfC#iR$i-M&Tdaj)lvU-n<< z+5J$Af0BRTZBRGszHqc}J>T*FXNy@z<=7e`5L3kMhJF3LWNnnx?v)0I?fLXSQu(#) z8d!{2Eu$7Ebf(B#*m;H`SY(lk&DfzVzJ?HqA?-JuPj7(FT#IwSC4a46{Uq~Teji}y z3MjLowTxv|T^ESvZC^R7wOmO6@H4viA{?Br4Aj}X3TjJJy}-d$);TOfm@E&8Dx-x3 z6ep;J`|&Q*&F)HDk>2wiAj6HXY+`H&3Q3^BV_?)2x&L$60_Rx18#II->EiS@ z6I_ytSq!;t2@9&_@0-m){y-9UhVt_NKnizTfq<5mDd#ss6ChrKqr9)))Yev|>0$aN z0)Q-Vg{jTJMtUD}*+@(v5yRs;HKo#IMt7zf1QUWF^Pbc7D1%ay87*T^{lY5jL|>`M zUbhQd(}?Z0DeP^9V_sbq+vrJ%M)WKP{exA{%=8v}Lb$V0ropz{K7-@J)abG(f>0nl zVhPgXSN1KBDWf5k-IE(ld%)bJsjez9T!24Fn zOV9Xv$PyzRHU-Y_2wyoCB=&vk)JAX`^YC`Rkbh;XPL-XIs!UMXLDGxE;?cIwj}87o zrGj7(8c1GM$gI6JuN;jS3{h7UoRpJPm=Uaf|8vX4w_qeYwtKBhHB5mQTsHktB5p2~ zi}b<5oHv`P*;Zn<^ewB9$&KMO%e_NOZ{h9*pKTrb(_`pdYQ392^S-*UqK_CFl~ol- zrQ0kpR)B8~_Gspc@}sVA=Oq~zZ#pwUnTsZLM_OJLj-5E7cWV~6tIFV)T6(e}qRmG_ z(k)`gezECmMI{8ZStTeb@z!P0@uTb)*3p%801cSF7#*_uL+_vz*W+{H!MJklSZ2Wu zJrqdVZ|OXU1>hIbOwi&`mh(R4pzpRK1}H5Ad&jW33xg;29*-8Ca$b6CcGt#yL2GNe zg#4i&aq!d>u-Ah{h};GHn(lQzo74^VSZwx$fV{lU{qomXWf6(5`^GeG0kq4YcmX4q zUBN$R5?sFqEbl1mkrxjkQ*tGAoYJ*9ju21-GSnZPf|8}x6CoVuU*=aEf%LqUEZxmh zCr($Fa~lb9@Bv~5nmTkNiZGUGSZSOZkM4L>vHtE9#$~Vs?Yn-oEE*1jI-deyd!YJO zaSo%;3D~K+rekCb%1N}$O|JyYnV^19`^9@1J}n?BwPV*5)0weR3vK@c!d_ zQM9+r`MR@5{m1M=l)yN@Qg0hGHaBoVsL4F>*twxkZM2Bi;OR;BdgMu(-DdagncS4| zFDSm1&F9Yv*U+fo=8t{!i-)P;-PEvI`WjEYw+-KhWt4@PH~x;f&AZQwN2>zP)NCu? zS3fU&5gKxe>Xo> zR&g;M|KzrHd=!<3bmBAe&BkoFR&2OSpbZdi+N5rlnHclxy&c9jE$KP7dTb2hRDJho5O#T=|TlUvOXcj0w`9&H}C4lvZ-q!oCRTP5p zJ>dP&pz*k^5C=F%_GOlrZXnZ~cweckEcU+LleA%PQeS(DlS=xiEbV;3Od3$gnv{NT(Mw! zkmybtAMZN5AaX_!(u7yPA}ZHvYdY;D!~-XnbR}`4>i(8uEzD#$i2L7@E|w}}PI<&F zYtZHr0+|uqWwXeD4niil(ocMT2ZNHr$0am%0&Sz;j#3!l1T{tp0)_!Jq~J@BZ=HMHUqpo7IYwg%Aqw!REP+! zh^mIPDXXQ``2d@Cf+VExI#RlpO;HeB1iD9sUD#Uh4=Hz|c~ZE$&#jVIUtL{ok36E9 zT)M}Md&Y197*sXa{JIu?Z$1H>gQ)j8j)6p_>j{Xee7?%p;(98g>SL5MWMtf?o)z~I zhd>konP+TBh+eRU4K^=(^`IF*^C;!PICAX#z>%Q-Ay;Z~@vu4T(-b`hfa0yRS93^r zJa={fJN$L`srCnx&uD-4mP^_%K6R(P@qfFk-SQO=x881^eOCL_uR)31Yq$LIo$VF3 z>}%Iw|Gf5zpS!rt9*>ga6MY=kc+6w1ot`<;-u81>wFiFX()Q*Hw%gDC`nm0R->p0C z^QstKJZa@3)9%v`8zNDS__utdrd(~EZ z?JwWaK9n@N@nhTr;~w~X+5<2u;(+(&6#Ek!hy0%I^kYS@(jpeEz?Ri}*sweeq71U4 z@H{W)?<}gycE)!$3pS=Hc}ed8WI-1!kiy>Xay#lL^4E`w6?WkT=eG;aKd+s4^oW(R zCnm)FnVtix=)3?mOdA*?Fi7@9r`wPuyCPXS_N>~lAi5vIU0@e%ZK7$Y5*FPV=(JgMLS_fE=Dpj6A}o7<1jz!HqVe zckKfBuQJ9-WQQ}_Z_8PvGM$4&p|eJt0=23*Z_8)8v|r8mhcs(I?j(P^X0sCqo`@zYekGTr#``o)J-c zaV}VrIZ32cs7GEC-j`aO+O#I)cwNsq-2f}3IqF4+B`Qe-kVS=P&4c&f-@b6--uOv$ z4~eqThdjP0<-Py+FFs&d^Y47lb9HW_dxXC++L;eo3^``Vm_4-Zfu4v5|Ck3ZcC02& z%4na~F=llB`yV)|QUPCNFnFfeNG5rdY#9bNfmsjsY1(}<*3=2FHgd2kH1ZP5pibWJ@roD|59Lbt;!1r-_)>oYMh>ayFMY7Ky5jjXDozo)p4Jb^!ZL2=L_-9;5_zMa zqo$WAQ|e2(r`?C8&{tl+5(3%Ox>C7*aSmiG#F4;hG&j_aM4Nl$&SOFA7L)}bYk_>m zr@n75ANL;zh^`ljSb7Pk#gt@QH#hZ{D2}uZTBK><@(_}5>byBNLGj-?HDbKPLlevV z8b2;L+TQYg=bHlf@)z9Oe)c9gf_m`w%g;2Yyr-l6<&*7CKe*Rk@&nIqufBwDFSb|z z-~;V-?@li0SAS?NfADyF&j)wfmDe0?S910ja||9c?FU|PPir@6!yGxtOTPD_cFlo) z{i>6;xRBpbkyZY6YtKF0UOn~2_OZ{cN)ThN-E!M%YuA29yY{OEedaE1*Zlw z`2BGYjC1Vs+kPV-n0)E|qOI=}T@9N3hL!L_A9t=U z^{HTBEXdZw?A39x<;+UJ9>jhVsMw|4hdwtHPqM`TRn5-{*&;KlH#ILn1gHTxVN;T? zyt*d2bS?h&H#+Dr^%;UJT%oFIlU@28z~d8RK#k6=7C=l zDJ++pfkx=u8<(ju6O9;#_Ex%lQx{hD8+P$7wYIRc)F+6iSpd)gE4BbXIe*z`;Q=~u z<#WWi?vIM1*zg@O2=a9vp#z0AXuqoeKOh`+Z)=qj&T%*oIX4_de{}@yuXP}WVT?Ug z4Fv(ie{(Py4rpxsOc#3l)J6!++B=GRLCr2sP8d2F~V%X5N(u5Us@W0uvQA;SxdvV$j5}N}_)i0>f6Sd^4oSi+Y$##C|25s@A*D zDx!d4L|$02w2-OfZ@v@*P-YOC{rqF#Lnj0*N{@dZVj7lCW-#g6iDpP-z@c0e+ZYKL zw4EvxaFj5yqcq${NBsb#$%|qlaj&NOz$t+e1}K1zTg2zm2Z(CKAdiWr(xFobH}5ljcl6>k-(jNZ9wRZ@8CIn2 zx6`71ol(uJr+mjVoC8RRJhgu?LNliMJlFU6&woyzJri)^RlCU2S3UNCt+EYjF}CkN)(eb2JHCKOoiZH@z?8XhMG8C?(USy@>bQ2rHQg7D12zCl*&}zWbrIDf3K(-c@@ zIF0F-zV4&v9OlZeLjdye+d2NkxCh2P@PvDSJrt*+ix;JhT_i2q+WnRup&KVWkurW}G*iSyzWNNWGGKXEOE~n zv_cp(V6HtCIo_6y1lBV)vH69aha;2d8qR)f8}hs5yh90^K1Ds;IXn@h!a>O{;(!UR zXqa~vd?Sc}P30TspSZMRTpQpJg5(AO3h3+@#Tc~S;Q2{s>ZhYwJz5l?m6MrcXwPgn z?m9s7py&~byy*{QAla(pnImy7A_}LJM7~M_9AP#mkHh)IkSCXl0g{j(7w0@3Y}#&o zr0tRD#;c97GD3CTQ|}O-Ws(7MJqOCzueZ-sNDy*>K?VWAgcS8M1nAf9 zTd2=&QTvG3d(@($amgo%!8>Z4as7@iaC0029iHDkjPYd8b-e8u^5g|gAW?1V*D&|X zxgYvGq6tvG9M*M2rr#q#5k{(u|H`9H5mNQXDhY==8TlnKz&g#WUz6!Z7Afe_9`zgH zW>n`5O0+;!O(Ez?PTuc^e_iX)=nN}tgvVX~9voSU5c|sA$35!FfToY!p8@KI z4fK=84f$*;?y5zIkn^Oj$x#z6D9k$6E@*U!0MPbLNu+=J)|*prik|H>Gt&q=SlW<5 z{x_fagc2qnZZG}8f84Hm!L?f04(OPXKldbKkus1-sCd$m&Hzu0Yznn9A2wCgc}4P} zU%Kb6cK7FQZ=e3uC#5R*pg>C^efzbr0Y*Ho2a~%;glo>^bbVAOBGT!;p1;(x-~+B3 z<@uh^WGpgfqB804IZ+n80&Omee*l)M#gxwWthJ#ZXG%Z0e#2=&#FAvxDJrWIX>wnt z^g`Whi?e8a6Z&`FWM8auo>19n-@1}mcXnCK1tzp0+e73?)_yI}^IGV&kZOERDEA97 z1|QSW+uSb_V2ftJ@yMq_oPyU}8;S_F+Tb~Ww~BsZF{e(2@%vB!h4XWcDg<14nMH@C zSBipHj*C!Mvnf()fVCo}5F!UyYbyCwUR#KE5<%pid+p8qN8yllk-0?wWCV|i@c{OR_+@7WS{@VnaoeDT4y@t2=ezSiR&>QNt?olZzmsA z6zTa-L=b(UJ@ev6e?JF5c9Gg8Z}NZoh3B;^&xwjX*=rtue%u4&9{5J~0PDOJT)SNi z_0Gz!wntI%MXVzBxM_K?La<2?u^`HXjffN6EG*e*da{jLkis@B@tW8hVTi?subf>| z01c*MQ$+$@PDk>Tu-ROAH#zHTYltf$`nIP%u(cyc=Gs9~{V7KiO@c6Px(m1O^SG9d>qqL`^LLKaNBi-%Ah#3J>l?!Bm!Uqa`0j)aVGTqOEnaE0k z%H)(;9Z-GA^)VSdVE{-v4s8qQigI3PhXHYpaTviza&yxIEZ%Geb>*74NeobqMU+T? zW7H+W79)>=LH|{z*Bt$xYMZ+QaB23~)VA5q-6bP9j7!m`s zCh=&W7U&*Cqk4apum)`}`=E^Q0!)r%_3Nb5vmOmCM8>FPL)B)&*o2#RG%hfveOwi- z+fh9y8ffo_UYk+$WuH7ecinkMJ8{qFWt58V%TYZp5<%qt(7*H*i`^IQxx3x`S05M8 z_-K3TC6YYbe;`ppj!7f%cHqhIBG(JKYQ_ORXT%vib?UT$l#cP2A8aS?y1kuIy|rDP z*O5z|8>(F9Ot`^@u#9c4pT(}z7Xz?kxSMi_zsf~?L+#7jSoNrB001BWNklRv++4FftBd~0Ah)RxQ0xG+#6%+TO)=UmNC6xH zT;2#eD6R1aU}FpwK2=&Y@~& za`{qgs?J~Ym*W?G1oB z7olw?L07a&MdFdI^(}{D$vnkF$Gq1uW+w&YM4@0^m{gzbS5zIE2Q-iw=8oGd&}Djd zoFp^T6Xv0ZXO345Kt+{zBDhZkAk-cCI{%zF(yslU6YZV<=iTiOFPUi9%}Fl&_eHZq zaq_D@EJ|^1UelSSt#-e@L*KNe2ipJj*W^q-4roy>;FXGF-~72V?K+9qEE4LKy!*er z;Ir+<|DDj;)1Nq4nLF0r{F+mu{w=#5SGxU+?Iqtk(=PmvC)+!(I4E_*$#&0&?``ke zoNB*xZI@bqtTqg;T_qc?ooW~U{>k>HXU&KSR0qU6-}%E*Hh`ria=M@BKpi zr5`%49o886&@HR&+V4B|81=xu&i8SA_;C-6d*BK8K%8m`CA)~cY+bA0VVw8<-h1pI z;DL!wL@5Pqal%36PXd9WPKZ?iZtRr9PGiHzQO9SnA+l$it}pS6IP2JMup7Fg8io@& z&Foz|KH!GjZ3i#3A0ax$zH&s0L`N4@nqz09ZK$5)s?_xM6k$Rx-O(HDi2*A{jz9@X zuy^4!+^>CqQ;trqeOh4V;K74(a<24zXxSOoIG|sYwj&JSobYZ8?pCx)?3i3t7$vle z༜^EzjDgue727)LjcJN5^rqn-MJ-|ZHV}ExlV+ZW4g+W#pCH8n!j+4(-Ir~+H zCOL1h)#KK)%3n6!IGc+S6#9}qriOb3GPudT)B5l+7Sdzz-EJ_@EvfgCoU4EfdLbae zltQp9+j%8de2UKZ*D55vv!Q$&MMyE$D}4~}K2a`< zV2FMO-Hb7C+bw_Narc6MxYC~ftmn1GBj-8#1kkkPyZVK(NI+~`xm}yOuUjj-?E#4% z-2R!{+if?0vVG~UJ0S7K5uh1q`X`gq1~O}F=83&47~0U%5+GL*?BoR)|UmiNoe(e3W({P z$#{9RPhxnPUa0& ziq`|QGrs(L5U4>3z>M)l&L11eqUwp!X69BYNcxL#707yb_8-4R;mxn3{uR1*Ds zr)2#LR5B;4KzK!ieck%Lof*v4?uD%Ha&z!};Sh18Sb*OunXEOvZ@7<+Kv{5u`4s1r zX?^x2Lf24xpn(cZvw<*P08V)A9Hlb#nW;mRzF=ux{WtUHLc8wAC1mky$J@`V-ql+# zI@o^o2N&8qfA5LpP@UWE3twsO+3--`ZYr+wiQ5*FL|!fBla3 z#+&YFPeQZA2_e0vm=4-j7o| z%fL={2Kn!{EwryE1wrmE9UD-yEOwA>ci9Ac6yRkqhAqXuh#kZ0Y^7X_O&6kB3DnGs z#!ZgY0p*a*$vm2cUWiRSp|)zjo1s3YUf)C@N_Gta0&>?NHqcfFDaz5wo@+4D`>caa zi#=iYIwB{hbM>S9G%F$TV|Zh%bm|`mG#ZYPlaL{X4hCEj6cr0&pI&D!J1Q30W**aBRcuR!HAd#Fk{xE1;7+t6UU?;X zD`K&<1l9gyFh)%U?@5eB0TqD@I?O<11WXMg0iF6}pgRKMOvwUJ(VzjKQUpZD zacv}d7r5USp7xCI zY{#DUoObD@m$j!q5c;dc7;DgAuJ`BBi|P_aCD?-wMzfJa^Z zs(ZL0P#c9x<-+KmVZ5*D9PW1pCWW0YIsx7>WVumL1OQ;f7l^J1=Y}F~ zk$F#{YQBg1CSEN5hJJVEjC7!xXMGG*BsM}P+fo}k>Y8*0Z_I7a!5aVDjyjPyM12lK zQfNP_n9Pw`%c2L^F@N~IYBmk}Ouz6N#|c%B{S7BVXop0RPy#HPU^yge&J^Iv`-ntD z>9432+eC7850Rj?Vx?|I>B%4kJd&$Ga+2$C6Ma;;t4FhdX z>af@!>~BkFRvdxCj#v;NW43OUSAFYmV7?tG}-`@m*9be{50)wf#$h}gX3kYP(N%n67g zGayTEUD(3Gnk@_*0tV_2oV)bDOpb$xl=p=lt3CPf;X}q1C;@Xompu6guOWvDrA=eMDwGVPGH3naIkQ4cGH|3g3{Umuz!w8Q%6(m+~u-tO6)}%VAufTcF4_phCN0v@zalVM5=$^}Oj+rfpow#?ucpvqXx zINn%WYIooHnYJx8I3(w$NaF0ufd~mix-(&OE9Q9)C@B(EIDv*QeD>4r!F%s*$8Y~s zJMX+BHpq$iEia$3H-3eitW*!4!SUI6*Db;p}*1xToCXL@;PWv;>LH zt?mJ)a8_h|5#C26#^MmV4}2HzlJkA^K0*U|dR~eK78ISw(RG^s!i10bkD-eYYs56=5=1 z=DassGl{Ki#AyRuGWT~9zk}A1jdj4cAi#uCKyC9U#8+2b4?IB#~?Tq zT^C{`(q_~eWNZ10vHy_NnR$Pjxm7nl7D{^k3&CwuIRy& z`0BURN0%hy&W3;g@q5}^-@ns-@}FO9F!il={g+?7(Ejr0ulSbg`*CB(J@D<+128%! zw!-W|oQfqsQWA-T#Fnw)r@xa2loB+t>-dgykzo$upp>C+N4oyrB0tJjLq$5mWMJRe zl)bXgIm5kxu!AMBEwHs=QjrG0?+91mU}w+5PGuj7O(`1%$M(8P?rg8O(_-D6R^i-j z*%Q+OQ->B)fEcGRfd}eEiE!inhhPc$>)6jkoz@YvvRbkNBNB%*R}T9GhcAD@Hq%~j z14xc&Tj|(f+M~f;uupgkKuJ`NzQXy9*@+#-R)>loDL^=goj)be6yXf)Y+e_;W=m8= z1IwauA2`xn7 zd?sRVW#GkI3LvR4UM?Etk4{_Rh5oQ{=<^OkWgXM_fEat2bQ|ldHnspllYljlrEc!3 z1_Yr#8xI{cIH!T{L0Q9FE~PQl$7J4lU@;hoQWc*x^^CY4P^g{;0x_^Fx1y+Lb&fKq zV!$SnxzaO|@Oy2SH@5;ig7;%hj)mJm>@F9e!lXAX_rN2j_FWtzu5lqyh-*ZO{z_JF0 zy?`npo3Z3hMV?zf1ZYmHmed``A8yAkeSTXwL;}3t6F>OjhaXTe-_IFb5q>sc@?sSF zS8|vb8o53tm_q5Gz&=?{*$3Nn%4pw+<)yc>%~Aho}{`8aCBNa+wf2w|m6Eh8t~pQIv-mJFI(C z`xQ0ygv&Uk-HbyQ62wV?f~78k2y5~l`^M83+lpu=QkGQM%t02^b=h3#z|gOIzGruK(D%vnlF$wHN3`%mYn@O&)IoU&Cn@gR>wTCC+G&}r?RG%% z^tfRo0VqE?KxLruZSwf|O`mKp{pdt{<@aAAmA~X@eLG$Mx5;fDU*@<6zNtNcAs?qD zls~V2kr^*O6Y|>ETY|~z80|94rzVD}O0c>mDg0-+G z3L&;95h_SoP}0q!s2pry6N-4KX|uP=_TLiVSydvvO)6rC!nIl zF$GC?M9-VlO$|LJsL{%C3=ws%y|1Wekt5IzOTd&3Oots&M4=tj+DYzH%+t`_xLh0l zc&xi}2OkgpXBZtRBdUxnQ*HElN6;|xv3}KW+|Y{nJosT%tX@2LDD*;I`GA& zM7l^aUj9yF