From 4cd6d950d32998eaf5a251085bf86b075b652a1b Mon Sep 17 00:00:00 2001 From: jcaparas Date: Wed, 5 Apr 2017 14:15:01 -0700 Subject: [PATCH 1/9] add informational email --- ...-notifications-windows-defender-advanced-threat-protection.md | 1 + 1 file changed, 1 insertion(+) diff --git a/windows/keep-secure/configure-email-notifications-windows-defender-advanced-threat-protection.md b/windows/keep-secure/configure-email-notifications-windows-defender-advanced-threat-protection.md index 37f79222e6..8084bd32aa 100644 --- a/windows/keep-secure/configure-email-notifications-windows-defender-advanced-threat-protection.md +++ b/windows/keep-secure/configure-email-notifications-windows-defender-advanced-threat-protection.md @@ -41,6 +41,7 @@ The email notifications feature is turned off by default. Turn it on to start re - **High** – Select this level to send notifications for high-severity alerts. - **Medium** – Select this level to send notifications for medium-severity alerts. - **Low** - Select this level to send notifications for low-severity alerts. + - **Informational** - Select this level to send notification for alerts that might not be considered harmful but good to keep track of. 4. In **Email recipients to notify on new alerts**, type the email address then select the + sign. 5. Click **Save preferences** when you’ve completed adding all the recipients. From 635d231d3eaa9ad376831757cbaa328cf7ae0dcd Mon Sep 17 00:00:00 2001 From: jcaparas Date: Wed, 5 Apr 2017 14:19:40 -0700 Subject: [PATCH 2/9] Update email notification content --- .../images/atp-example-email-notification.png | Bin 77772 -> 99054 bytes 1 file changed, 0 insertions(+), 0 deletions(-) diff --git a/windows/keep-secure/images/atp-example-email-notification.png b/windows/keep-secure/images/atp-example-email-notification.png index e11de0cba9083882a757065dbe25e36fc4c0c15f..c46cc214d7e6d665e1dafc170e626a001ac063e7 100644 GIT binary patch literal 99054 zcmc$F^+Qxo*zcjcYo!$s1O!B4X^`%2kZvgjq&uVq3F!uD=?>`z3F%HjLXfUI-}m14 zZ@53GIGjB@J3I57Pd(u(O42x(mtR3G&#T6qmUo}d#Ita_P=SM|2M2{^4`J5!3yf6 z*a-t;X#e;1uJ6q(p!3I|ga5ru+|l0N!odZ)7)j~?W2paKreWjq&I0;&G|31-w2-WX zn1*}$AH$E{8od`H4eyRy<`Wc;qv`2`C*F`COB6&1k|2vo{P~pqY%X)ziVTY>LWV#E zU-GjhGV;@W{5PJ*_Fk*{zJAy(Y%lQfX>NRP?@!R01U?R>@O`jUYJm+`uLa==U;X!& zf%a!eMN8|~&!5h1UK{^!^pWN%G3IMdP8n!#Zx1Hy4UgIUb>|(L`~6_~HI4Vl4>TI@ zt5sAi|1bF*LK!AsSAB1BChlPnEcD0WMOG+Y!~Efu>tXKydxyL6AcVCKO*PHUIsuT- z)5ohg3uoc1lR>lpy;EcW!kV|Rdy|tPtM{v{iUn}@|K8$(rBP?+hOPVm&hyIYe*H`T z|CgV|-nI{j5OF~`{*QRECncST6HwHxGNOMY^>Q`@gDCx>E30h<=>tq8+D99q$1f+? z=^qqX{yBfc6Lvol8Nk}hi$DDebJj@6D=j^^Tzxb;OiPB4L_g;X3ctlCk64F8UrS3y zNJv<_4K9}L7I8YJHN<2-l~?`L(UTL%c+AF7qh|@}R zUG@#41s*k{Jh3{I>>4 z496x|Fq8!e`22+J8y?d$D_*|5rx6^#fUrbQu2nBr(yq3?)E5>CnV4V?Ul>H}wJ*{b zLvO0!M?a;_jyjC|F8(On*qn@O^Kd{Kj^nSOjmH4PiJFgw{XaZ=)QutdVVFAR@<-akwzOh*Np4uCIjqD-SiWA8TanIWnTOmDTRx7v$tp za`THLmX_g++`P)NLZq$*F*XA0a73S;<1XW*3Q`4zvG&j z=J0#drhxPf6T?3P`+|@dpnL0L%D!3H0&b@$^CBvgD0>EM2J>4z5kY-7Y7Ou z4?DfPgF4mJ%~;v3D!t<-cqndnk3K!peurQ&n{S>%6G~Q4! zSooh4d(SS>ATPU89`;y^uMW#9&lw}ZmPsx>Ygjd~JX=+vHwqB!li_^-a5oo5jp(1N zSt|F|C-E;i2TmtZWKG9oCRmc@=8K|2y|lD8v=KESO09Ze_y!(%*whoW%y-hm)YXnzMaa z8tMrJpBlF}{QJB6U*%1BBCMFWNzWNvGXy=T{-IgF)w$>p6vOss7V?=(dYStP9kLei zzPfBV=Hcaei-001^!OOs{v-mW)1!5dL4JeAt4xGDvE%-tX*bi%rnwUH5%+}Y>}JzU z4B=aU)RT5syYVaoPoKlSXa*Wz>lf^gENn5EULKYF!**D)nECqp#G?P&F8kQ^QQ^Mc zJ0lB1UX6av%FO{N#t`RFsGE!tHeHUCm1i?W z9(gq!&Ku-mkbMKM@2&lGS4gnR9OlqaRe!*sU_dhQ_ur>7GH|!6qhtgKH0}o!8#9=uq~ErH^V{UdWwu_tFi2#+ zSP!$Xv1y7VI~W?SEXOv6B*>!$U*haKxrBu5G&grB(Z7Z!2V`{B2&M21J02bE?amw` zi?rxM&|Z)lRT3phTQI~#$mz5%)jH)URx)}LXP0SR9ea-aqtT{~eF7PpX&|^u5N0Y17Uxk)Jwf!0*QzHnX$q` zmgNy0$VJaIU8$49Jo@4G=#w7~+`FBX0fliev|K;2J2bqj8>ugPii|{+XYsK$2*4#Qup5vM^rDud(v5t-JX5ySrfplZ>4wPA&XCdixa)t+FCjm5+clTcu9R z#TF8t!9&+BDQaCBPlo3@3ZW<~ap;n>^mMDoejMGsbZm@K{hxo;7G*P@IAMxN$Sdw< zzd~`K&zBS8z2LDpYp7u3Ke6Z_?{&xx!G%9qo;R#|E_5OA$52Z)n|_e&bv>Ik(S?lD zmC}c2mflAixw&n&`-rM8W8T?oays?;YH-=ZKPrKxMaNDkDBO>X5H#zSRih+Af>;&J zke^~>{Ae=hTNmwk=GwsZiU2CZ!Rb4FPuaOL@A2>9R&^<|Q@*xkiP|J;asA*8k&n*r z77{ZA_ais2u1$#@A;uMMue%aYep7c1@nsF2<-6%tmfv;Z@(YOFhm_z+u7lkM5g z&}drs#j&#At-Y+b_tjF<&D~wiamV;^8e&__0D`D~`JVQWt?M(4L+(y_?Z7ov9p_di zkDNsxcUcahh$_fuIoflwT>B$ztMO+!Uh)hJC-jteg-Kc7%;x6L{!B4@2P-CCY`RE? z$*r4@re@_s_%i=gjc+U#Mp6Hq7qj3K-t!xAa|vZs|E8}fp4)So5=XLJ%6@C{y`D+t z2Pj3Cv>tgw>d=(%c%!VCj-hzJw?di21+={zYEZ0e=-FPl#gZGY0S zwX#@wDG2@h%1(YhWm{0DrN)#WB^7JGnpSx`sNR;;v&`@UVubALIN8X?)*G==i&~fo z{gIhg8>`$mrJ%KzCsRnx4FPLHOuwm+ey=BFCNvRqU_-S{O_TZb6$aED-X6P-9lCW3 z59m$9Y}Cog2UV95%{{nl%{ol~(7+*k1ts^Yoy}W`ePR5tb$TUDBh=>pN?g@Cj3MMr zyOj9iAt*0mM2wh0K{IB3wSQKRJ(6kgY0)telj^3Yvln^7#_?$Q6X?FoFD|wyr9&>! zNpj+S(I4Dg>nMeoHJC||&>klpcfC?qDw) z8?}(PpNRN)PsE)=I|r0N?0(%)6G~h!{j~Kzx)CN$P<+37K_O;fkfBr_8}F`JoLICADxSQ8gtV{Z+|~(ciiZE ziXp~m9Gz#kvIu}tldB$RyYCalL(v=F

CW>QQ6Z4-RUoWGqpp#G$DvKF%jf@txIC!xnZ9zqWVP zS>>B$Uq(kI6cutRSuL)2!^83@1-~Z9a8O#k82b4$XL$HSlfg>*CL;dr^`N@CY!%EY zy@07mY4-gc+`j4`w}7vWP2iew`f#sPx@(hxWepqqxFv_Xdk_LTj6Z<}Hs`hm=D`e* zc{sApF9Tg0X7(b(igsKfF42L1zwi7Zc|)r2W$Q~#YsKol&dy!mIm9(J8@jNe!S!#G zQ`ZjgUe5LCD`3PHAXJ zRixzMwU8IB|4mDthzP8Z6h5n>`tvV2jdKe>*I&pYeTGxR!8cw^kBnF=lg^)UH1Z^D z^q1n*I;E0|<#X-g9yq13ZkW=pwf%i0WhE>*5=Et_H=K?RBLLD#a)YySb1zhL#)S5(Ec-Wnuo;+xx?;&&iy#lSALkOxuBN=Q*Mgb7E1^7t>ciHgizk+1pO;?oN>n z^JQu<%PVew>V@f@4Vs>pm%wgW=0bVV8{2r4Q9M)3NZ(f_SvhiqWtR3AOk`mEH zMA5qo)|S6gVzl5nI6XVGe9ixDFgG_)U43SLejr?d`<+hhPZ>lGx0Z_R&V_}DEv96! z)eHVk+k&s2Bg(nSz_ab*pH0j1k^Mz3f=s*yHjH+{+KG*<&bqjqJ0YPF(ij{JoYS$e zd_L)qy5xi;Lr)J`RPBwWSJ~8+G{SA(AVMygf;M)Jm!AhvXfZJ3`}&FAJRMtyLcyHO z8YtxDUyhDalTcx0Q*+6{$ZadWaS)RYZ*KJb{P~Tdw%Y{!UsGHB@#uAPtKg71X5%{Q z_{OjBQzFxH#;HHp$&HUm5|Jfuo5$;bJ^A>jQ$=_We_lgOe!Cf~G+x-nc1%#m))v8H!`a^MIf?sb^wZ6LZTsa24fNcT zlVAq<+~bzmQWf{NuQauOIn1dvnFJLVNK#V^Uwu)|M?%fcLeJrNsOtZGptzD3o9T6F zi0ea


KI!VR@&Uv8BS-Jvwi3xo{vZ(S4T6tJo(WJpY=iy1Q?vE9a1?b=d1a3bD$V09)BGgMVU6OBGCZKb6Si}m06KIDgogN5BcJ)`n$yG#sZ{31D$L2I^6=ieicYQeH}v9|b6#>XfI2G(Iy*mF!w%rw5&zSr*^jc~lI ztj_ysX6@%Us$!q5lhv5ZcAaihvj|vl*4_Ohx}O~|Q)9x;fWP`%Tr{00?L}R`yOr*7 zWwJb96P#xMCDY@%`~GxNo7X{u!|2_WS#3JM@BR7i&pZq$igrs?^=BlRG`sG`=vC;( zMoFx&?bU;qoj6iVeR6ho@b)m>&iL+&#Fb_1@xd3KH@`1deeKf@kbL-c#ABJD1 z>N|)%vg@@qudP0|Kg;0gThD%(X#q5U0ht<`GS3HMTRx&U4OTU@VQ#hs@ zR0U#n#>pV|M@Q;5a~a>cj~}5yF)=Zz?Cnes<9_e#?O8?VGCmfzo&@gB0wR{1%qsTy zXg`*|Z@&nGa-@iAoJ^(zQE~@llx2(F8vR}I+CG?Fq###03I&#Z4Y%*5VXxP*Yo>5?YqpJlPf;dj249WI?FCp6}F#7fZA$r^P9oVki64zt#eMA8Y7LbX7T9b zLoXSH+i_u;7G?M3TOUpCcQE^gV|gVW4Q-;M?}1xZS(0vZ>R6=HzW3al@1OP&hlN=k zFAc^Gr(OQx^VrRp=1%VSXN`e7*jwWxqhP!d2ZW%mjs$8nb>2H{K=QAvQuVtiE2!5> zN@tDuBPPTp1G(9qPOp@mo)t0z*# zl$2Z^?*X^|^)^vZ>MZ}|OZ(*xBO&lCC?G^eqbtazXJWb^a=+Xfg0;00{wz zbqZJd;NiY-K`)A4)5a!ZWaMAN%Ek-g-4)Nsp9cs4g;<9LIm6W+?;T?d92^~f?d-h2 zze@;04Sz}psDG%2H~l)^7EfX^9B|vqd{h};W@P$#DuvcBO^C=XPHl>U|~dn zb791a#Kh&V|Cz5?GFVv0M@B}DqM^AQpo$T!R5(S69>%=MfNA~^w z#|kwYI|s|+x8kA*FS|a?*A&RgvMSCxESS$6*n74$RjZ|bh4Fj2U3(qtwr#yK*7-A8 z5Uwnu7}0xC&tvGow$`|Mvi?dwnI8ug+us6a{_t+D-H;n7T7)RdX_kV1D>hYYM^nyQ zch~tk3IdeTtG)--^SNX%M#+>eK?VQCSbmsi8{?rJ-f;-7<9>8IH7yFEJarFZ1dQ_WmDwAs@uNPKSf5#za_ZF34R>y;ZiJr? z#66+$rj3anHEN1?g)>25;O}q}f`3!>q>fe}JY(Y%x`$`;99w zUi}Ljd*yn|agT|~X#mozzzH&9n4PT?l&oY`T+#(KGHVV^DfbJWK#)rYJcor1H8n{> z5{NX6mAZ7{;A7Q~OfEzqIc=ZzSPXAuxg#>7TWKd>j67Me)x;&w9~&c;mezM{Z`vLp zcndHTk5+0z@VYygBmg{sxi8q-IrJe|w`AlnrPB)yhA=^{o}N4XG%PjMP^W>a3F}J~ z>@P+6=-u7j$Bp8tU)^^eZUvUEQ$KSnzOq&sht%aN5Jd zvKSofno!A+GP8HEgrIJfce!;{KWj`pR10pA-q7MpO4Nea%oJs59WE7ric-+6d2YHQ z2p|inUiI5sv}z^Q)r6UznE$CCC@fkDj?2s&e+e_)-+Y)-v<^GP&pIdtm zu70zVhNIt*TBj$ep#g3nwd9&iOHY5(ev552uI2YAWM4I>uZR5O2aq<~75ZS<*#5Lk z=r36z6?4l_g>;=39|2U_1iAbEC1$^QkdxrMvGfVu8tc+JhqImB-OMRo?kdRF**R#%hu3;C z|D@$;AMRFW+aD9So7I3|E_7`UP}&5k{9k!?%|9!n2(%C!nV`v7Y+`FLVcy{EdRLOY z-Fp9zIRfJ3BnBX1wnjjT98-T0MS#TwNZ`%S1(|7T|H&QHY|~ z$D@Sbj=VlBQhGXUxA0-S_oaT}*w_V)(8BcG-b-f&XJ>$5hwAKDgzr=+NkY~e)r$_~ zllKtOVIrBODqvGG)jUxQZvV#Qv>}nH_mYC6Q$@YIdA#0NJWPt+P%fgkerM;5yt3&ixkaM5`qRY?sH;JpI%=kN z?~wm{Dvw%aH7OLvnDy_w9pys_adE1Vq`g9?=-N4-^cp8>-xo}k_w{o`CCDLU+l*(X zj*C<-*2z;-Wwcr0<4f)i2tslMJJ-!`iTH6wx-X` zi_z+##>NCPqaHp=Y3oePxkTv{KJ6p;;txGy z>D^x5B=2hNo(q@%GkWuZX4il(&jAT*x(=gB#iOQ&%DB0sSADDm{o3yb;*!L}00l}& z*wQTRvK-g4vHg~qsp zZ4Z1N8#RDu5k(KiMRtYnoUC-8;L>U_zh3bb0ILt!g3Ur(i}xZAA+7gD&o{|PCs4IX zG}|xVo|75DUod<3MIn@Gz2M|DfAM0s4&hD5!jBXVD)~kI!gt@d|MtHuFV7_FRaG6U zsOVd6kzaMs%d6!A?=E)S&JrGr_Z6;+PiVTQd_;>)7u>sOW1>f*Da6*& zc2ru)RFkrHhQz4Yg^q}{c6*B@{^m1jmkAe-&n1<->Ycy;Cyz4@2)kQ?fWV+2zJ75L zmug>GoK>;m?%z~#2$tQ)qb-CzJKKm~WmOFgNYK!h|A-_Y(`GQK6a|LLR<$3 z9P{D+xHXK1Co$Q})(k?%lpGjI$yeFqf{k@tnGP=0;g%<18JAVCx!?S*Zdft3(Ss2Z z3c50*8ar59FV$f|Tfcwjs29?HVFxxHGHNc&FFL-G` zhM}K(=(eS^&XsnS<*{=oaD10yjW$v)2tmfWB@|vj{~xvZ#eD=M44G^AcA)K`Zi|YPG#~TK>?fnELHX5ZU37Ect&Rf zwJU@w8G{;qxAbAOKlThEDlyT+?pL~Q{m8<^nh+Nzt@{F(vqBU&817qfH|j+?muEHX ztrKxykRX!}J2K+pZKKC*LF;$J?8&|-2;J3vCCuWIl1BTiq@n~wK?yT;6uf$=sVeO? z|LqbI5(vM|JY1&Saw!DRF%o2yDs1%&;GP`($_Znzo84LYn8n6^j7Y$NjpUT75V~Os z;rI7^GBb6;78k-x;ZY=}8s${zPI}1}iGpUmRI_`PE7>7(p))g8-qG{B7m)?vrDuRb*l?<9*)3Lfa6+ehd%=vE5WTBbIp={3B#P+5 z#j_*w0Jm?5d`5@Fs3c)9;e7Ki?#b&h!83*X9PvH#Sq%-Bhk|4SDZ0>2gAhc5Ff7rC zUK#DEmirp`{UX~o5?bHbR{}mWsU;-5sH;CUjndQzkhrR9H=YOwnZ791;h|)yR$`eE z9t5nmiaT#qQEu->BR3vs+J3?1rno3dQ}Y>A^wa&Q8!s};Ypi$*!QXa{BU~=z&s4t3 zr{^K~m_ql+P>f7IHD5eSGEgVS1y4lvb)PIm{?j|WPB!|ryNeV$sHS$MR*WSo>_j_0 z9_tJrTJxbGI8>Yh=>r8@HyUn1&=6b!uQJQ z!7P@WS~$v}dmnJ)`%a|hsUieg^L-6jg{TI!C!0B9^4Ac~?Ij>c5{rlM zux^6L+ig57f0M6G<>eO#l`m>i=)Oq4)a%*&>v_IJfQtN0IvSDE@oFdSZhP3CIHa(# zE<1axZWb)3QF#&`r3`*B@C6JEaiGa7_ZW#T#5Fke?Eu|fHm!^H&h0H)6peB`Jr*q{ z7Ex$0NdyRM=JWM*(&>6H zmCJXSh~fUlZEYrt^#G>q-rn9?SS8!9uqMe&oAqT^wJ1CXD+%XRqfK7?=lO<-7!|FC z)vlt{_*YS=pNop}SXzdy6Ra#y zoZ!}vrjR)X#(#xO<9#dZv$lyRqQD2Qo>jA~vE7oPmi1(g>*;HD;Rk-0DP|ScOEX9X z;KYR?xvfn_#99(k+YcW!#lzkw%Be9IARvB;Hy<2?CT`BgcS@LJyxguJO@WW03Mqt5 z#sO9a1_2P&>qC2cUpnd2u5JQtV~8zP>LqYeuEoUODMlBaEi5eour>EkVE0MCS|TY` zPM39b)z7hd@uzP7_EOW>X1_&vI6!!qh)9Z~qt<^AqfzMqAJRU%Ty3#V-J~wOSmHAj z3wVEG9IJ_kWDWL7CxzqI^|jrHufo|)=!bgIdwRm;A1b#q+PIM@*XEOuH??w7 zLXRqQoFYNDbJv%`p@aSKyQr~_fAIx%iT^&osr=~Tf-e3BAIlip*t7N(1yn5^zP`8r z#^=p6)AbsXgj0pYv#3uHwBUf3&Jo~tjLQmXvs(UfgVxZHzq1Y#V5;(y181Tajb`nw zpsAg$t$?>qN{Ywmc2!eJ$=3O-4Lh%>l{T40jWc~bR=+g+*P)>ykt_dQ-G~7!*=NAy zfQB~=90sC!dWVPJY@cPon&-;|JHxq#nF)zh=?A!Fx2X9) zSniFaWQy3NDW;`)9bNBI;8ATDrmNRjthR>=d0ib1h?Dv=5nrYkC%A$%5Q{HlCMq=I-%iJs&{2E zR1b1EDIAhBbFL~8lgJr%-9tu5FOc#-le1VEGFVvaMu6|Rw@wtT${fO9Ic_Da1fBwXqGk z&D|p`Tp+-|e=8=AUYZ#N@{&f|c5+uHl!~|RXi=d6=3Q=NU0Ykm`=-{gXe4NuKUykN zFB%z-Gi)w3E#&D_AfU#`&__pNr3q0${IN8=+FH-cbaG&D4yUbwP$aZ18ym8O89qL1 z<)0)Znm%{VfGmUHzzm%Tu~TJ2(`o<%f*Q;#WR`~)>)Kqd~o;0h2H z4%_vvmDTsdv+bgC^m}s@K+4)&=XZyd-!TzZFNGQ|7;-Na#FU`xYU3RnQ5vV)a0CB)cLqp*CmjKQJ}#3jV%3c&x} zGGmH~MDo8#r|kPJVXq1yq@;ke8andzX-wq7+wopcW9)97B-bV?Vm3i~bQfGvR(}NK zWf!7T1}W;z6~pt!9;6sLp16YisJr#Bx4(lZb%89vK$VeE5qV8aCwu&&B@}3iLyEar z_D$+a7cPS?Pq26D>m7FWDESns-T?;{K+wwt%v_-8IW+}zhuJwaF_`~iRkhxu>5sHa zrtQ+vD`98r1J>aC6b0~TxGC2^ud5Rx>R!;-x7RA&oe)F%*453fqi<*Tl8o`P6G4HB z>Un~V1e-M5rB46~zNF;SSV6Fr?Erg1mMT;_CkAH{N0D5rv?_qu(7vmD8{~c6Ju| zRiI(NX8iN;x8mkh3m7Gz`NLHnGmAWobSF8{qNI%2mW#D}@52X#?i-uH{nv*6i^UX- zvN1Bq6C!WBoR0+*jeyAK46JIy#UDX&XS=|T2tvgxEY}i~LEm(#KUyqeXN@vyPp2WK zmzU!t1y;ygY-nMsDDCoC+NFVuJHzWj*Gw|x@tbPNkD!9VL8Q0tPeHCNe%7e+`o`|2 zQ-0P2APH+P#>?)doeZv2~d zQC476Na>?m)EIht>Oj86wDGS%4&Z*iCSi0(@mZ3EDxBz)^6zx$y1QS69k%EI4lgYg zq+CvYmG$^fkJbBV>E>|pkeeI16NL&}QQVP6X%7`q^y5t}GfU+0aU~_!z{T0PNsSc% zg}R}|cPHXr+GP9=XxL9Uw<6i;F))DA$j+OPFhLw*_Vw}WtEEUEAEA?r@-}qVNd7*} zVyK@zPL`tF#s#IJq0YwdF{24y%${4mzQjig(aCaQJ&@uKH^Zq0u)e800@lNN`F5HUNM$!Atp@tpmw{3q6oj(f{lTi}o83*4=fcfDr! zVcT3WI{07^H9Yf}7|vvL0YW82jG-%TY2b4Jr63Med2$elLtzK>iO!;CovdMu6FcG% zB)hOXHMA@pZ3#m{!gF(>{%*_B4Lh!=<(2PdXq)c`rzYKfeTT$?uy@Dl)H5zdQdrcq zx@QK>QVRuq?`KvfpJ8L2WpU&PF-qgZ_BhEY>K(1D$&sAq-zm1ZF$mprNk5PLD$?OG zP939Q2?E!1O=o)7LB1t^0>{XaBm#J;0uRitx} z$Xr482W8sgcm=?`|6rq1syP#Lm(!BdgZFS{$0-9L*jOSQD#TPTqdtLSUBzWz@-173 z)R_uljf-4SVG@EcmztW+PxXS7WpYZA zFnr4Vl!F1K)7@j*47#c2l(s8{b55!l+}++?H^;=%(f?K+UA<#RbcMr^Ft)6?G}wjcxuj*0TU?2=dTEA^^~Xm$P0Fgv$;QAAhwCbduP zSx-24oPr!oUB#Hw5v827zlqL%X=Uy)iI&f)>{O=EOFlkg2$$pco~o zV$y2j5Re5)DN8dDmxZAN4n1Vcz(8o|`v8d0*Ojq6vI;R+=mr&>5Mykc^DUpKPJ}5N zS&v7XzrmeOlKouOX3zdi+sXz;1Ec*Nk@5*5A_#rV0N!;q%6rJbz~%p(!D2dA1XEo6 z)_QHIo;7g%5^iNczyaA=71h;irNsS+8lJSsYn;BF%2o6JQ$j(2$ zx`(`Ya)VcErr|iZ#%mfZn)l@7PfdM2&&|dNPfQGMLg)TcD)&ndk2c&dPK>BOI7XZ< z$~ajfi!_*DzeaLsMA&swsH+1~O0!}bu=SO*f6|v3fJ`0J>S~sAlWm2HE{=9lv?z{_ ztsR1BQUWo^o1RM8U$3M6Y7+;^3RYKFf0O-JW}iu?^^8`pZ;$U^QC||(&O|H)_Ec3p zbca6e#>QHE^9uFtUpE+J!KJtK%iTjEYB$o0i7^t+lT@jN${^9pS1#Y|xg}O0DDS&jR`J zjuS)(JupbKJJc`^F7|5P4a#{#z-fl6U2OiM(AxGR$eGql#2 z!74canoZFjyHig)tTp&Q`Ek%($1&01g%cz$iL$Rhk?fs|n1e-TJpu?YLSDB;MqNleq8ePJ)?oew{vO7EeOmK5Q73@X|v6>gqE3 zW0Cv;%}YwyvWY|aj`U4k?el>J2=}>q1c$X`VN1R`@->AruCGD<9YW7~&FIt#^(m4b zdq_v-Y%cNn_zFWZ8=D@!zDk!Xdx&ch5>I)TfRk#~TxZeXwXlC)8;AflolP1}x3jAo zPgwU~*w_n*EsH%ox)(jLYVo&Ss%WhhFS+jx#xlaPfCH4Cemy4O`{W7CAIYDN zSPGEO%ad++td+gB_1!w!l3_<(PR`+)7=W>TC84+$Px^kYj3IE;)n-Sw3vzSc#Rvd< z<;cKJ374>wvI=fJ{q0klV^V*gDM)*=$wsukmosp)W>sv7l0t*{2S5~#%d8*Q^EX32 z>=^D@dp+^A)&OLo7VxN%{XZ`{Pyh|*^vb=b0o$KTP|&3-ctGEg#LK;y7ay``RC1vf zK!pfCu4de9eTm<*M(vC_B8rR4A!3wT@~)A|Ys$?)msWVI0zn%C1D|cCBz%2wp$e66 zPXyfd7U}?2YjN$?(CVAyGAhT-;$?Tga>DM!HAY(-G*4B{%e5MBpA-h|2J5daX)Rnw zwT<|&Q3KMpCq$@4H!oMySXh7}v%rgtVTcAziftm!T2R${Q7{0=~Z z){-+aYQ3AL+x(wEx(W(cio798=}iAFJ4B5FAqZGQ8-EQxp+7u;+|Riwr?D>A@MJJ@ zRTd2rEe6&mOX4hirL^DakD_A2Oav!KSS(P$G2=$3MCj;l9&QW5!vV6n*^Iqu=I>fo z=6Z4Z&xI`(4VwIf9w0HPsXGt)As||1`N*b6UspYHXb!;udIn7KS7y1EV+j%x*$3?J zk2jc!0g<^W%FiCK0TY~jJ#K!yur1<{ey~xW5QO#xf{V$}J(D?Zgen7SDf!KrS&;le z(1$3A4a7BCASMX7sguJ_Rwn;zkm&KILN~rmnw(n_pK_SpToHdAl?0UU+9FC() zN+pLTfGG{~0o5l?WDusddQV@dVk)uo*(hb)z=!caclRId%;+E{kOvJ2C>z!UDhN}n z&c_{WaiH5nAg>p?nRMgXc*@cyYX6c`E=8Ig$jNVn*uwHGR)s%U6u_T9cbd!>J8si%a?XQu zaQq!)1n1|7yo$qD=S?)MFqdbLE5=O4q;ab|%td|l;ApEg{mgy6CKJq%0 zU0>*LxrsqvQ&Y*^{-C$qyG3>WUU)*>b$xt$OPw!!}xCNAhR`+(FUF)GjocP;fs%Ks|g zy!eHm8&yzVZrP36VbYEK^eL!3u#IVMPGO;Mf6Vv!8X()DDrXF77Tb2*5z>8{L!$wrhiJ+uwxmZxB&-f- zczI;(Neql(V1m#dCYJr^XqmnuBC8$TON)?*PEqDl)8j+MRM9I+yi9&>aP}cc^7W-bET#W7F=vJua1w)xvo~ zSZ5vgOsLIam{i`3?#H(6b7kCguJBToEs;|hP}J4AmfcRWFQ#8uXeEJsOpx%+H_)sI zCzS1qAOYYZdCBN6GOB;u3q1Gg6A6j#p?87MErJISB4*5OG(kbPtP7; zVIqr(fkcXV>uCfVJG=4SRbPfcDUW0ONZ~c3!32hX{bv6`!@F=Gu>dz(($aDi*zH+- zbXa(?jR$NAe5HU&{K}ISy0GbP`mhs$dEFTh_hDDfvu(;)1?P!cm0S7s$$EXBbPyIM zF)#pF4flD?We#VJ($dnJ-sAu#mHI**1Vuo2aY0%5DMBh9+JD)Gux|CZU@8D>U@1vemS#a@VsZ<8lbydc1?R<5IP(^xHSj z`dN4(;=PBQVmnq8%)J) z1}hZ!AQcxEkZwjvMb)=qYK~+(*Yq0nD|y&*zaXwA)_gply;nxs_@RjkG%HvPcs3=b zq(Gf;N}N^i?#6K{7$m7m)$t%V|BezD4Wi7*I2ZV6N|r^&LAg7y?Nmj_aEiDlQ?Pu9 z2@Cz^5m3m4omWucv^})NZ3iT?y~tolRDhD($a~$|QCX)daC3}y00FcsrUS3%-^bN+ zidSzkQ<;?&&!_F}-<7S_76TI0#%o9VA7sr9g#b_e)%cM;l|&uChjgIpK@KqL9 z9V&{x82Df0Nh^!|oAB2xy$i*=q~RT-VXzk^QPUWHxNrWji+<_E=8dn&^shbI86g$G zFRwpUTa1}1mKG?AnNela=uzE2TfG``S}C76UANh6b8oh_jCJ`1bE{>+TC89r&Pb@gk|H+9{C<1{g=e4CVGC_??G00JxiHif% z3}g_2)FGddQ9d>%6{3H6-0*8wdc}(!$Sb+*<4D{M!0PH;aQS0PV??b(}qM}=YC|wg1z*K&= zGb+vi@&T3C8(0g!dl1T^qeED<=mj6#JEM7-QE}9;$^S`5V^6tm1Xp~=*GYn$Qbr}m z1;4afMjN@+Uv^S-+-n)BaIA%p3F_LgV`2CI%$%80B!~Ph5UwLy=C5PPFc2|($CY6* zUcy@oHP0!t&$b2wL4T~*pI0-VpDvSf{1-psH?JsXKmbnLu2$vF5J-GQfo$k`!Yg7D zf;TyE{)N1{=TH8I&_IA#1cn1h@GHM z@8NtFBS+=61*UR=ocl&N@?|C4mts1`-K9wO{h?uk+c+qrsR?Y~xVt|!1|iP~7-+c2 z?RXq|5K?0(1Ny1uJuY;?9mgvGJPY;EZ(L@^GPq->O`}-H0{XgWFazE!p zT&_x!!VP_e15Bbm1~Y&@h-t^g=P^;!WF#KcpxNN&rM|)QsgNG5qg}S39EYjrvhT_U z@1LUOlQ>>o=<9#@Fn8E+rokLVZ&Nhobn$M6F$*LlIk=|PVXm@X7k_?BMs^)Fio+x!gZ^ z-6y@=Q^(e}mGtoUlxCJMxu9!FTb-u1&K@Uh0@)eT zi=~>{-IX3mE0R%W41R;%|0E)}T+2&d{$RcP=FVIBlgBWg$Xr?)h;5*f@3cAZeOiV!Zuag5Y+u_ndUp{gtNxvs94i+=z)&e-1?J|F+ z!Po@X*fzf_|41n+^bIsy0B?ZLszmr^z@o}s$%a+*Y`r_Cq5?EU5`~6t2vQ%s*QKBU zXiqmaVT;%0TTXtk)Z1;=(&6FK`+b&Q+qp}>f3s`6Q9akM|CE;t5`IwvV^jGN`2{w-V8?N+$^TjIzUbPET^)B7SFl@5I~dodA`-?@eL32UNN3Uu6xRoKBx`)SZI8k7BcJ|*h%x-;Ef1{Y)N$b)^`y9<3YXXpN(c|vxZ z(BAMc7PVK|K@SG#Bzh5-?brtzxT?y^Ocr_6_4OMRL3qxxZ(Rk4BJ=~CRq+55>-_q9 zAZ7(*OOl3$PW#~PCNnB9s{ObiG>v*ge}zD3=qB}rGVm#*^8 z#M<@b*AGkHHWt;-_bwY~iX#kDlMVY)WHKo+UZeKO;e%pMoTCn&2bioT&kh0uOjVcma>$DfAJl$x< zr?>G=7K$smy0;(T{mJjx-RW_dZqDKHoag5(jR$obYQGqTy5CTw1_!IT>tCoWD^I$= z$m)?L{pXBlV^TM-$E!K2u@?U_jc{|}lD*`&7D+}s+|Af$m@Tv10^QXg=5>Fq+10-K zCaj<9=6n_D^WM>~C29S~eB62J%M}(TI7aQtG_FkUXO{gJI1}C8mGL2(&t1JHfg_u* z;}ah<>#durdnUF1gzd@gwVDXLS$y52`&DH0qxaHv`iyZL6?59}b+V&PMy+`yF4Nkv zOk6JXCsXm7q$=~a&o&>2W~BG_*l4@yj`3oX?8_5fUd}muML%wCXLs)nU$KhkU?8Fu zh2O;8q2H*P>7DxN@C-Z*ktcQXT`= zIiY(Si<>QKWlkb1-F25m=91o?AardP_W$ppCR0DPKX3$l{WmIQ>gP)J|Nj3Q!DX|1 z(tiEfSnBTOE^JQIO}Wb&Pq{OUA*jr{P17j-l&}rM+2riw53^m2H73eL-W`#p+x8+= zj_-io&yN1}^;21k$F0^ZBjvv@i%SOAfA5ay79KcZ-dJTQDXAHJih+v4Z+Xd3;*%ji z1J%f&-#mj~l_CGjVCoKI{O14qk17TR*(qkJ{oIF}VuH@T#ii`YI*h+=(hK@F)zoB~ zUJjE}bDeluo=$aH0AG04cb;K3>u&14>rdwkUY->6wVfTgp;IW}Cf*Rr(Nl4UIqEy* zgYC|D^}H?QW-B;0?U!V5HwL@ER%~ZFKQv-?V1Es5AW7^J&g5LEigK*~F?&+`WN7Uh z`I!dA4I@g5>NITlW&oqaDcD8t73Dw`3=3_Pm#+4snmla{=*xrf5cAx953Ku^R4Wc zFq+iATjiSVu^4p0Z=<3`oy5^K>zhdBg~472;T@A*2AeQ|SX+MsWxbFvdh z`P9A_U0eTAwMtcWQta?0-p&ID!e5;=Zyw)qm&VOq;h@m3GotV3{`_o933Y9b|2kYR zUlzSo8QDZA@^+?OqJE;A+3=0G%yYRhiZ+%+R9HA#!u=ij-N@SD`p}TEjW34TloVuy z>$h*5(+{F|QOss-$1NFFg7u1NOe0erpAVMIFXSr!# z9Es-9tAi{)Lp{CW`o(I|&rOchof}nEA;d4$zH5luA-q~s?qw=3Kb2ZQMO>7Z??}B) z9(djP_a1d4s*wzs=-OpglD?IN{cauy>%Zh^WGy^;GIB=D-E&%|y}zXA*RRFAfE+@_ zIX#V%pde<$xhzOn4gPYFBx{_AAm|B#zq4)X@L~DDn&j39K*(2%O;;(R8m@AF4%kU? z-uC9rf8}0tyS4JFlVZY5Rek z$(O8h)wF<(SiT%sP^j)p%3l%b?DLn#T8RIpk088plfnX2E$0qOR))v%tx193VqE_9 zbz?+H_`m+s2lz7Gs3l~rV{YHM(-O;CpeW1FaK6*(G~>|}&YYvOKpM_{&&+}*pR70VRF=boM! z>&~{KBHfg>G-Vcw2iMl8Zn!xLOpirgBZU9`o0)P5)BHL#P525#z|nC~rDm}9l~}^A z*RS>57utr0N& z2r_Wl^*Q`)eQ+$iUh3j?<>)4g>XL)jq?KjHmo{HAtg2^>{nO|#2`_QGwGejlZTDlg zqK!_2lKIg$bzitBcT6*gsr~u4hj?2xWizaR4~*Yg$k5ix<*K-?l%?+Tr(TwzAsW>) zo&I)*PEOc#<{S@g6lw1uB?9Z6$6ITCK2gaV8unjQ;M4n}U-)l1?xG+u@F}soBcmgR z?arMeJ9b!{wH;HN59Od!x+Q%y_zu~6;+6d#9-R$IOLL>?Le@L4#K_(vv)EHAvX#-+Ij!8Cdk(Ku?s{CcR#xf$cv<8;sp#!LmA9M(>GqErl#~00CtW#lDY(G) zyY3k)weA<(?L|eCt{w8kqFsNaO&9(!{Uj%+xZ_8a>or4;dL=I5{`ZCV?8yG(w2Z+4 zRp$v!L8i#WGqm!4-MN;Lykg#c>FT+rIbV7US!!x-nhFG0`JGXaX*^kzV7ECh z*r8XV{#K3DckFjeyq{cz z3QS z>R2>r9&>7WZDzdF{>n?jS^f5oU+r_`N@T<~)_1wH(V|!1szs`$_9;cd?A;?mK9D%r zv?hM{C7HkUn8w3H1g5r$%@yxmW2x^fc1l3s|yE%f#EgSFOasZX=7H)k8)Z&9TPA8$+9*ZArF%8P1C zBAizbe?@wJWuja8_N46Xi{$73z2M%qeUFM+ZdYTlsqwYWUyl-#IqJicYCnx}b6fhR zKBfv_b0c(#yLIFQdrag0z#@xAdkG;EE}1bWf)G@C#zt0I=HqiGDoW zEc&S2+mpO!e3%KgswyhsgT#A6x9Cv&gQ}knZsOKnn!1^*m3I#Le^AkmT$%6OR%k~; zkX4dT*;L=hs*w${t}jb*TO=M5{4vn`b8lde+yrnI6<(^OlMP5XIYQQ zL@4qt{4Ei=AvKzzgw_mKPBn@2E*)^ znAhg;)W5T2mhRCZ$#sCdH&>Ys@$BB6KTfT6O_7oHTwFgj~^SfUVb7?N|5{QEp-~r+AqDP`jhj`v*Yxe-4tblgl#sf zeI$Jby&NqAm6}fGYduU~vzG{{8!p!gwj_RCmn3yroYE`t7GfbN9#p&BBq4Iub=H?o zwLQ}(^_}fFHn3wGD-Gquxn**Khbf4iJ8;P~nmxB@cg?8;>;T6{to4UdU zBlMZYOp=qAWSAm18Ve<4WGWc+H+{&O&XJS){vP^x%ZZ%0c74Cn)$=qKQ&y>|Tylze z3_)3)VevQ>^LcJUZ)J{)<)Wo!Rh3`X>fdZiqXgWL05mV&h87e?m^ zL)8?!AVy>FsKGtIUThCBpfgAkASapxzg#lVbT#f1b?xmwQgP^f$Vvz;BXOCP#>3re zW@aO5nEL={md7V=5IRI+PfzMu7jX(I!yV+F97)9~mIQt1iBtm?Lheno%GK#7>42U4 zwqU0rCs7-AG9ieGFY)<5oUwXWP@pA`w|-7NwRt;XM9T z_E=PddO|{7^@pV^SE9>2ezS;4mxh>(z1U3etUn6nX_w6x3u(y$N`i{y1v5jmfNx{vN9F+4!~fu3?>!1zRN zx2BdQ!B6UNoVNBM<>uaFQr>INCWpw0Gvl3|;_lMKQ~Jx_7yg>PesY3FFd#VVoFSnc z$4|;Y;_6tWQ*wK^Y|zY~jv&L_jN>hI+XyLY>N~3Pq+R~^9Au7Ov$g$RU@Itdb7NV(k1;+6V^{F}#qOe34^+|BCf^jy$_AOLpqnwP>0QrCTsAllbg zIh(d=>7>f?VS208J;Rcmfr;O<%+A-=L8 zLzZ&DV=;AHbbLuhARyIk?laIJ8bS9V+YChgb}q^q~h&Tjrvkkr{7?6Zdl zjS&KfqsonyU0ubi@@3_iuJ@}oY1VtCj;V$*W9PXifv3~d<}U@)cclG3W%0B&_Cm)S zl&2$hUFRbeKU;L`>O|!`CM0`%WoKnsH%4blc#u{GuCFqZU(n*AHg6PGzkZ@(C17%5 zV!2(z`Er)La$|pvf1)Kj(6Ul+&~fMD6`T@!{c0?jIjDu<%a`cMu4jc_XJc8fym-+F zDOzSGsfdW$@yoU+8>{X}jr0jH68xfvoaj-mc{VZ^NdJM8IuXjykM zT~95PY@qTz;IZ)1%1V>;PWjt=N;Ii$ZM8RVe)fNR{iU!sxZ$kp}24m~6DH ztWPop@ro=CKRae|;yDGUoMPMXuvVV7vD>os-NzpVa5SLD=$Ww9$DwK8cq&s<`^3DC zAojY)ljVaw-R=F#5e;vzm~(P-pYbUlso6EccOZSle=ccZLDEmLOBE z?6uHneWy{{!FDbIr4X6ljn!}Ea}t%FO^xr`6{!50G}4SrYnPtY*6ROfV{Ded*1}=rv0f8l9sz97NBz zhGDLnynJ_i+I8ia4UNYnd2VjXVSFNKYVC{v_Bt<&2L=d)^A4X8OFb>{{dB+qirK|` zv6f~iGzy9M3ELa&93r2_WewQgnk1&<5ob26Ooi){!DX!p7dU98}0 z{t^{^UjMT3$v_HzlFBq46%mQ$g50Hi*FbyqXz%@eA=8NwA{4VC_ep;!u$ArHDR<{b zM~2R`XU|+cA1`mOcCTQJ?qqWLl;x4_8q@bZsfn8Q{=g5_YVFWP<>eg(@-S3HSKF8SGJGA_DbDc!$;f&!C-`&?JH@ikRd0Kr7X2m#lrA2Hr5qttb4_BHFPi}*GcNzbL#T&Oy}eemCf zVK;Npqn%j>73Pi1epOSefg1<5qRw`Q>0dRNx4!$Ju$sEMwo9s7>I-fS*-MwqO-$B$ z?j&7#tzG8seB;JX168HZU%o_&yUqNl^4m_$TKDq$cpdn}C{{nz(~%s;V>X8V0+W#a(}Wd{k&ZKtZsFMudkKx=#P<>{%Qe z8*7LXvF|UQU$?%lsrlZjJ@xr>x&sFe#HqOcX^NBZSa@Gj5~Y~9Z5KU{?t7J_)-oSE zA5q-+p;Ja5@c`df#%F&wq6l`!0xW+0`?LB%nnsql&)#jmA3uJ?zusK>Q_JEb?movk z)*Dw65fQO$z5RQs+pV7;{FS4{FZf`R++Qq(X7Ipnv?*9Ht(=3FmiE`LUoEYz8E3Qf z%ZhEfbMD={mzS4ka8`wlw$4OAcr}ai1a!jUHeK&#W*l9%eilvZ!(NLyk4^GBcb`eEXo^LR&nINv^U5<-_(gFRF}p~c|r)HEg$sHbzD zJSpST)3x67QbOKhYufK_AIY4y5MnpqU+|r zzB79sv}WiOX6lvXXz~yUFjo2QH39p}%geFU0#OaPDZ8fFD)SgG3Szt?W*io3|!FxH+1N0gzF zR#9o18*L?tO;5MM)q|LX#9XIXqZadv8A03v1udjr^dNqMH8yvhCGW6`&rKYJo zy^`C+6rKzh$nKsPX^3(eZINN6c_r!P{`u(<^gM35xD*x^W@%)7k2q~!>@<4Uk(-xS zzsS+l%#8g4&BX_M(6?*!^72}o9N>GQVBhzC@BaNlW?x?(gzi_bB&^0r2$K!^-rt0? zM@V?wzI}TkQpg&%%mo+!~|Nrnu?@2A&sa?ww~nFOjRr3e`fRL4OL(Ai)70$3&Y1wTVxh!NooY4_cqDz) zU+QWhwfmMM{Qd@)%D6fB39EAM)`%h`1sA2Ha&mKn51na=ySN>HOdn`a>Y9zs`S9Tb zA}GcwIedD|c=VYZ8|~q9h&9uL?q%MHz*nzc?XU@EmMHdGy&YOdcktjrtnbZV(vmUC zSKA6P7428eE(3#stcs1EZ{PM1AnFQjdxc*p9H)I`WNZwN_Q`*-%(6wl`4Dt6MMXu+ z%gg=cUT69Es0r_l<=>AVQ~CJ#_)A>~VIxrBuYZj=t&pIaq0XoKo<>Rh=traJgv;T` zh#Wz(p)X$K8&=&_iW0UI#O%N?`?=L&Oh^{BwY8mXZ5XP2?9!8T{W9&OR=B`P-S-X% z7CiLzRaHkYQSigP9sBq1S4fzFnd5=^czFxxpFtuU87XG^g^ukL(Uhbdlc*F$Pe+G5 zEc2!r*Go@N$0Ekn&6aJ|&S!-=I4-5AW$F~#Rr-=xc+8Krb6j}^=*h=7Su$C!^WGs& zg|pNJ;}E9@2Y>zgXmnFS;fu?F*8?-tB&8?{LLoum%o(?;yW50>got;@bg-*k{!$65 zMJ9D2{Ut6sJYkO?KR$D71d$T4;9qZHR$?N>Bf$?g!uH=wm*IW9yu4<)ZX0XMT3T9c z@*8ul%FUquii&XD_n@$ioSa;&Wh7gjR<7Cb@84(7oWVwx#>bQHwxDq@+xYzK7(Ood znB;t%%3~&>0JgfIgCa0G^%S+9?(PizGIu-=5v!hNY;1f0&;_Y4CnpEjN=QoT?dd@p z6OQ^jI%;WeZ*c8euEWm{pd1mFMMMgb!zasE{~?AbB!tutfBN(Z$)1K7Qzwg4O>uN| z?Cb9*iA_x%8>$P9i;Ke@RMys-V+C>7h^zZ3$qClbI)JlCB^>U`%*=Gw5bLrjC@U*F z&q}k?KRP;^_7NKghj~Z37LbBE*9&|Op11Pz0n2lR<9=0|xn@d6Mn{8d5&xygTr@N^ z5WQiich3L#_wNeL$71+Gx)vEh%`EF?J|QTsAHa~E@)@7)9D;C!KgR3E3Jsjgmt1-Kl}d*a2H$jC^< z?%2$(`SDH;V7(G9F%@hXJQ9~ zKyV?pa3A)lzs%zR0RWMMbbwUHt&#aPQiz*_qqem*w02OQjTT9Jg_G;WSWmt+R#QSk zf}K6_U(Rzy_G_GUa1oeMcXvdM5n?c&%2JRCh~|14X51Bp#wX*c6kqbk<>jfRsOck% z!2W!?TiOTqiA#Q3JB1_$*I-77hwo#v9zA;GDOmxxv9z>IK62a1N%x)Mo$zoC{1bqK zS;C!;k#Pq?0U(0%x%D|KU@Z%>9M-1{@q5YGuD0W6+jM zP+iu}M`(KrylK|Jgn!Nq*VCWWekJbaIQ03MYRdB(qnb~jC@3ht!}ss^Xu>;C)G{Kow2%bUn^eC10ozj-W# z7g!6WL*Dljp>^u%nmA4eWIjA{wF%sCg}2WSGT?Ow*5 zpZXBN5JnFFwMKLyz^(rp9IOpGSZkC`PI>{hM$fCegd_`CG*IT@0{GG0-3`EwdnNVl z>(h->VPIf*NN?B7Q;_K4VQtaggRjdXzZNLw{CG%*@nOYhPDS&l84Izp#2d^t&Wz%`sCPh_pSe6W>n4dhFO> zlzq8nZ^23VkQlFp?v3?TI0;S&86+hoQ8VxxPW`Ad%RPhRx+VgM@)-pMx2x~(mRm*o z(N4|_G~TDHfrt>Y?XaCq z`P+Pv7Ie!!L4lc28hk<=8?35AX#@9~F)|8Cv&JG4VVr z18kZj#`Eq@F|QRTMa8c#PZ@uUIXCd;Qt%Fp7p?3ox`i}1w*InVB$PvW&q3h{gjiUv zh5G&4!3?e3#D7boJUl!{kCJB096e1cSiJ^N_3qs}cBM#QjDQ*=W#vZo3~l&%2H@ka z1H9zEStF6lC4hvc|0b4Zp(Gq#c7l7lZPv1gr{^Q-=(SfMl@ajx! zclViN$BrSfEKU71$JFuUUCIrXNJxLTAbF!_s=63T~BLAX>0M(4~4T*q+oZkvo+GHySqE~EH@_y zHU}8>LLmV;R4UFexBHmv9u zqJo75XX@j$H0w}yCDm)!w(mLg*^nRSoSL6UYVz#awd-Q;0PUl<>FJ6|t$WE)u)8n* z+nuHExjHvWMyRH=*$BTGi<580J*21egx1{~xfh{mh7h30zAwDq+1Ys;@uvA@XefF_ zv8|(`hpqqs;psFAn}MFO*?2e2My`1y4}GA1mIwot#nGP5&I6{uMn{+7b7lHIi~sbH zM$FC42@C9w8kg5>`Z$+hJRU43r$uZLA!l=|z^A8=Y%n``FbZ*ujvyz!^ZNB`^)#Uf zoYu}~lMi7-sdyrQcBlUlyjG_RL3C<)t=wxhK6HH|x3MErZhs=>k!1#moK*pWte{);~v-|eIPevHmRviW9&q7yH#kNNxnd?CJ#zR?NjH@Rp7Ez zheS~qo0^zt<~JB+BYzN07J?LhBoe|Des@?Y=>uh2olp;GYBG%V=36w!+hwe+ueV#x zzq?UQMN!>&ZgT=zT{vnhpuKw4hir*(4kwNWA|Run>dLq71YE+N_u~IeOxWNZ6mRAC z%{hU`7=a5gGBP5Pz>a7ip(!PF&T)vc_-s{G6)?`9{a`chpmx;G=&%rElRp}miwYR| zGBq{z$i@5co4heF7 zbvYdI+j$&wx-?i=SeSz~7XJ!GHDEi9vX|gI$Xl=_>Dfl`G1Mp)Z{Nl;M@xDYYiBG> zPd}?4#`5;O@9gM^-_0Ic_j^`CT-?*s6Xhi8Bt|+qlan7hJHxAgiUV!utNT^|e9C6o zkBx{>WdDNlBQ7j3KDoFzIqt%!5YuiVw&P22kj)z`UHS4zRDAqV+z|{^ILfwNrY$+{ zV=|2SIQl%N7e~Hi*O_R8qe6rhmyjSMBh%suo8S4e!3@jRDrhA_;@e;rD19_<-ArAV zx3i()Bp+YazaI<_uKf=+qqxPeAW)B_B7$9v2SjHg7jJGfY z?EmuWYQ_9Va6_+OA7+vQas<>gD7kG5!2YK*oX-GE7^V_3OW>&WxhoL@rbyKt#zC^i zN=iYxyjf}Ko{}+*zu#mMYpRz~pt)rB zeRznP9{9=@w)E}Q8L7CYo;b^vw{-}22uhwmKWq!EL8V;2Hgnm8*Bh{eg(U`=&P3{} zuCC|Cnp=YEC~WQDKW{)qs22%Q)XR>J0+HeimqeWt^ux5+dWf8@k~*5nYs(ialrKk{THuHr!YIhp1vLUCjsmmk-3Y zTOpp$yL+8K@0*s!Egu4M=-0HXdzpTMY8;6I0A;3rnV4avZ%7F33k82VnWWb18X7w0 zE?dM$fvpZ+qxkvr=cOfAlxTvCy`Vh+Z+9OSQ)3TJc>7jVObm1!sH*GNO>I3xVfn^l$78t{v|$Swszq_ne}lxhH)$o-rwrEeW1BcffE91 zM21Rhw_;0kFDpleuv5O<`1^8#YMx=8AwNiIK^QNZ1N%6x5WY1=mYtdX$mm<|@SB|l zWN8Eq7GeUvsA6NqI!N}KuI^gT;%U{CJRnni1jG=lwv$SVTJnq{doJP|wh~bNJW!Um zw`8Q`si=nb_Vzz}WkL_hU9*f-Piwa*0sKbDo`e^xsL(_jhr#Ze?-OK3kJl zzqBjm8V5Qd0GaUf7QywYpVg?Wj&gHbH$)2IYX1KI@CTF#5ru^=0I0~rx8YYNPei=e zT-ig&TGRDv}Ed^b!EGVQ|A^W7?{!N5ktgt|?IBg)aaj0RcN7N&f<2 zkBSKE@8;^dw7eWwVpet^L~vKpEptoD(YxDrfw7qX3t)!3&+-!J1X%W$I%V6Fx96~! z^rcHtitItMe$m%6)YH_r+~@bV*C=+^kc;9qTDrU4THeaT5-06!H){B?a+@I4u%#h) z_v?IPvI?qP8;jSYJOM>T9fvVp8}-f9zJ|XxpU{Q z+2w!#{sF?FQHd(tQ}P@uE9=ptACQV!S-}>u4#sX#r5HeWx*re;sR7`~-X3#Tx=>A? zJ9o}s>gVuqJ60SedUm%B?p#?}Su$qw#}9sl0)%+5n)Smom6etFK0$@23JJhaP)TsT z=)o)Cii;_>ZPV&xC#h_27ZMN%VWoV&RS4pKcKXN5hqB|Xm?k->o6t9lvzIu0=nxRp z`uh5rL*H}?Ym9Ch8X9V9zEt6)qa;T&f(oTW^)nPod3_JR>L4Dhf&#^zA>Z8+J%sQR zc2dXP)fFX;hsUZ}L*(+(lIWQ;aX%lHm92k#v=3IreCUwP`jzK(Cc;*2a-4MFe^8|D zJ|xO7E{;Mu_DNt?7GG!`eh)5-goMN>n?X6<77r=}bb68)v(@cz4<{z*yZ z4i4`?ny9JKjfqdYmSWwqHG%M6C=4fGebdDCMviSKa0V2F-qa0dxp+e!;$Hd67`Kxl zn4{*4kgKpTF^Qp}gMz`@dbQg;rW>dLoPBREURkxevH}<}(OcLE>U1T6Mob7PYiNiK zFYzHGTVGpi8srGA)8q+@iHSiG71gk3=T0UuCkw=gXDRQpvg}=5-mgbLf9G($g*RCCp7#$o;9a=XxJG+X~y96wLxl6odPgPYM z2z)r8nLq?eOVl(V*ugo&4q=2mJc>u3J(P}z*<>5n#+OXub>sesMg;V)%iV1RI{qtlD-YrM&yXSs!ii}UmI=-T1V z+miRjG`cuCuFTZ)HLsfL-Ml0!DoVb6JDQaG*y+x9h);5D$7x}MN-DNM??BV|ZVQWK z><@?uy!9eM^+b66{K5h%RuE|&;t8rLcv1mB`>uC!_#?h(L zp0k_cAU%@hQS#K#r*N|4m0%mwWwprXd3}jhU(6eKPMVdzzvZ+iu+Dt%5|ZsMSBk=3-P}-Tmv1H~G2|x;FLRx4TKTs?C!<$3 z@3bD4TRBXS1;51MGXU_jqN3@#MJ>fPYmz_!$JyE8d*}#lx;aDsY4rUfw51dz0(-+7 zhi65pD2{|Z5{#S3%ifSb0+oWsc zj#y5GjE)209qHZ9MII$I!hwv7{oYMuWgpfV$Zr%p-Fdbymbszuu$;D_v4rSZXPf@1 z`tK)c8~YL(*!Z)dIM^HqI2)oL@uLacQUq+A9)lJ^+S`6Igu;-Y^3lsivr}3;?3dUD z+ShkmFo(An$oN$!g-!X3^HHxdIiI}ay(LwEY9Zj9O~HdI*Ls%#auTy$%Q@07W|qz< zwbb%`Z{$vn;+?2*EOu z2My1=DBl`g(7M{*xBn7_)2?&3Z!|aO22w}s^Lu)V5U&0CloWn$WRZ!=uf^v7qAiqM z)M}lqmU`k^VqdA-Y;bBeo3mb0n3gloF(salJndh z=044F@LA7)QYzu?98==GB0%cPma-PU-)CghP?8jl5mAo?kVJHWHUFtX97JD%?1df= z7B=Q2HWXqBzJ+t48klGwE$z(gEJ-ZD!5i7277Ia08uW^tvLhGLHM6C7=&6|mAF@6K z5eh;9o!ibd4Qc`j{&`f?S%)9zfl;?)6J;KS1vp+U5DnOmk_Y;Y&p#c2#6b;3HK4r# z;%Vz|LPJ}B$M|@IzXt|-!X&hFn1UGa*(^iY05>`3z7DE-*DhG6u4bqG06u|^SQFS8 zNw1Z*-G0-OO@d{h4T1L1Me?!Wza5!~>aGaPwLJ)eMRLbZt9+(HP&%Czp zW|~tUcwm;hjP?{Yi{#^oS~}MMqXh^G^4b&+k{v`m#sYx0U6vdLMTAS63Ur4XcrR}x zti9f17(vL_$gT_ zGZJriF6^otB!bE4%G}m131ZJK*H`_$e5Ap*aHM8xT?9UZU zf%&0~LDB^)nTD$K%^yn8cPLvvg0XtaVmb6_2IU_p*W1p{GCl7A+V7li%Cl?*L@p{R z(U})TKlIzTOrOmS-YzM#Lk{x{9-hTAG_5 zprK)TVuGjnR%+Qp{zcyUwhIfdXN z-AvGvC(|iM250V!*OKy5ZVXmaN2vSFweM?WJ+JH)!jbbw$-h>FZ)pYa%<1V9 z2>4zrbBq%1f<4Mt)f^lg6cwo)uLLfQCdKUBwF?OU;i1*Iu1^H(3xy0jI+DsypJaLH z(NM`yuQ$qmTCsZNwHW%iJIG1FphS9L{jma|95kt=uefY=+MyHytFKcgIlb)pHp^3z z#Z5Vn8FlGBsUsI?v@_H(a-N+0)tOs~NU@yslZcHLkqc8(h5`{;+aj8*@{xwPxwz0G z1FxS=;S==ek=x4Li3imYAZ}r!Dr_ZN{mRJ!A25cTrFK`Z?hUMA5-^cNtw3V9xv>s# z?YS~%DI-$@xP*r`-~COlbq)=)YuBz7>DoCtIe~xXGVOYI1Azz)F)=YFf4Z%L3}nlR zfSKuOEi|p>-QzXI00tzXXOy|Rckf;l<$sc38HXj@pR+!!tUOQGNl(Bu3oybjgzbfb zsi&tn(O2SP4{ZP-5Rk}$N76Aq8*XsuG5wu>Rqya&gqgq^Bk)RUM~Of4?sN^&4Q4)Q zgyYNg(I7)n3APvKp1#M+1dg^QZGq`mqS+9tu+eVe+tDC}gvit8SHNU~*+ESLam%-8 z2^~zGz!j7wmrW4O5)u;NA01ZtswqzB_5ex~Q;0?Om|v6DuE0hc!Ztu?)d8~Tivb<_1=Wb2gWVDC%>1WjYucsHB-m2k6rOSz6;&&d~Lkv;~+FV zD1A|)14h!))89tp;#$&`c{G?%AZ+O!K&QfEd$4>ci~$tEXa-2fgBHVB3-Efl79RO| zSlEoKcw3RQ?E5Vh97H#W56$C#%bGu2G5VK+?r6MSB?}!>a%Q_1v^uJ)EeJm8SzhS$ z0rp*eSycRn(b`Fh!tbh{o`hu!TL>GtC~H9`gTO1Z9ipe1f++lTl64|B7wJ^|YacWE zec*rd8gbsPE%_M;6d}9V7f6lhIVC42Lk@=E02L5fCGL3-vp547zMl@>OFy?4>Hhom z3vTmN!(`8c)2QOH?r2}4V%cgCVMp2I_0iY@WrPQ}Z+ZI&jnMwPAm|!n&au$ZIbj{) zm4BSXLhA(4!vYhBkcDf!e=mv^#}lJ6x_|$^tc(m|S8^s@oalQf8Z4lX1Ko(O8tQmk zfe7@?w)*`j7N0(SiaHtU!|yi2kdNHN7X$XAm_y?!C^$HYa|};{oQZ;)ikg~_iz^^7 z5OSSNj}z$epoqVJm+mi)%qCj$hJz&m1BcUP)5*!4sLLSmV>^C4j#Czdmw-S^V`J94 zcMdRRI6_cB0Bv9me8YWt#?;Mi8Aisd``&jgXmhHX8srIpH1t*i0<_yMMWVrv4i(BK zzp9sKZkfr;%OeKBb`ZHyHlkbvQDpsHYG!5z-wrh(+81?$(_444Frh`^cN2^q?gafg z)TCR{5-{I6moA@Q5|kFX*nTr9tP*3DLy_$8#+~)v}@J-8+6sNpB=L08ks@v%CJ%bb9@h@n7)?XRQh4k4mAT)D)o8{A6SQkEtIQK#d~5xQcHz>9O-@kulKIn`LWaM*(E| z(2k;$VwIF+4w_9@p{w~li>4S7oH=AkP#}UA!z07U)bbuYsD+UAu`Et>H(hu z-6sN!a=QWYBE+1zh^_V)$S4GF@OL}+?1?^QOrfwP#X!12)JJWfrJcW%fF>i1N9%6b zj<>3#P;s3?n-wJb;&|sIVj-G9f6nJ?BO2TJOHG5JCvetCK~4?=P$**MwC__fN?ldM z4g)LaLtF|GEl?bmhNKdr1GvF0wjXPix9E@j(ZbgQc_h_#qB|* zMn(Kd2AtFfEr?)n=gyrijewYw97ZoVJ4=8oL)RK&1{AvhJqCda5n*9l7y#e`>_j@M zJc9~vgg@x6B$Qe~W&nE4&ddlzC|Z0CFuO*17v0alKsb$PGh<=?Q^0%y_Tpe;d;a3Z zYjL+0RPeyceiXZ*%u_`&LX_8TM$KaJWIF*yEGP)041Jz(+51=jZm2&3;$fYKSy&(j1igtjEnr8G@sWX1N-lcX z(DD0FLJRLh&n6##GY(BCFrad5E#vcS^5sImiXlF|@vJEZ`l=2Uu(?`VXTV@Vk&XBB zNr=7vCMKQ8`2`(!M7G+&<&~9kVJB~H&JgSVJ$HmM&mv1^bdF=}SCL`WX12?~jjOuW zWR(LadUx@Z9oWDBsip-<483>`2|Q43=yYbLpbBy0Or#w zYn+$dIZhqQ4NlHKK-27@C(xNrO|`1@C1JP^5Pp@;G+Ptj#B$DC98%>cgD`C*DgWWH zb}MIS(}~KO8krQe4*k15hWwDG!%5jc)T89df;?@B6t-pyfq3N|vi}i>)Yd+@!SK_X z)r6Om6Xh{vKvn$diHV8G@9*BJXx>f%QXyhhQ&u3r>Ks>M4|OiZFPaSbc{JY>8=BV)MP6A33xJp7|;xAD*KnS&+*CdlG<%l)s(yY z!YlA)f~>4WHGhiQ*w3FALQJr(xS+H1JShh&u zyXYQo?okn!{Z1d52y;iKwmp1~K1{m=KnQ}B@sC&DG>ba@X#()v#RuGAFA$OLW2%Kl z>_WfGfL@{9Yjg@AGM}eGS2OEO?Il)4(yaAXXv83~rn%{F+5+BuD~_Qzi`d|T;00sK z=RU@H;zYzLlKcMQ}qQeyu4%N07{YWlbcqbK?>?MQt@&%d?23ldzO)v!| ze!C<31n3Dg^oNxk(0?~xqU{r**a4sdGe)-*8SGH)xy`j%(1HjJpz5OmpFU7N1T^JXQykd^8Y!??{$jhvw_N0gu*csIP`o)O>io4n zjIY3EfhGJUDv4;0SaF)_TFGw%E(ly&nwnHzC_opjrltmV)xSgk^{sC?>CSu*d4<+} zsIDG%JR={1h6U2b2Znbv8v4;n_iwzEilcdQC4{Y-|3lpY$;0DZJ#;cZMfF!tejc7d z@d%X~a8!AGd^~h^Qa*n3A$Jok(QT)>=Ww0FDFprbaiLcZ7p|GR8IC_V`c_9dP>$^= z<%ibRTy)G1)y|{5M6GX?udVr~NBa~SkYEaI`it|CD?nWo<9F2O)(nNC{I^wrP<|Jm zJLQ(m!~Kees@f{%`i*Tyudld3&jwVW)43=;wkx3avyPhinx>{PCN7(yE|Q9}2b#dc z!`s;EdX#u06UPN_kQk!ng!GEQoCCkv_)+e-wzSAq&HuPbV(YvHvLG4!bUT!zcm4b@ zo5=fyKRX0pwiOW7M*UpN4o89Qi?K3$NJm%XttRqgrf`=tbR!ioPoZcxPq?8zO)^UwBV319=(o3 zfcx+jIVgE}c}Gydf|bMhTcMCaM;~H^=KvTsijQqfOgjy0HNS4hBNRyAS_%TJr{L0_ z33QipwTm&)(OU^oT!$9^{TfEp#;}9>w{Lah;L|&Ib?LT5XW#h}V8q>PG>;xW1bR$tg7^Ur zjGv3`%Extd;#)326_BMI7y#KqXkEE!VR5hjT-{Tk*;pT&k3DAGe%H&`0e2FbF#-LI z2PYrmiA7I&C?=tG0#+mAV$0{i^04s&QJA>oi_!)~ycB8yRJ%kD=_!qt5B;EMGIu{D;EccTbAAS2xWAj||Ev094;*XYnk9lqQ88f-(x)YrC{} zEiF_#*X%1vio4n&+^i=LA3m3GLR$ps3NU$UtB)=&RNySCoYmipsO^yx0$C={XvBT& z960>8AKtjfbMwa@`h5gQ*75%M`T0G;y9^B-K6uc`PS@Yh4TUx)&-FYFiD>>pTD<5TApV65vG=_;<0hFSi{WM#pXg zAH;u&aTZXMhPwDNF~w3(QK$Ze+}OjW@RDIo67LU+WppA-i;JzVUz22=j8Une zP=9=*EFcDN7oZAG{B-zq)N)iJwR^>*CV#_ob0akLgtSjs`}?HsAks#Aq-=;>9xlw1 zb2M-7Z81A_$^%;oXi}3&)x3)eeN(06z7~asu^ciw43kjsVZA`XACi!e(0u;T<*%pF z_=Y}90ayRJ)Ct39XaB~6{<)o)_);QDg6RQvu@}y=M`O5v=f99}0!Rcc`+q^p=y7nN zqr$_nrm2d8GiP>a$3sZSEKkCVx4wBpZ593o7-UTXi-V5TZ}}Tk&)9__U;hB??BQvu zz!ckVm=y;+4JS_H@yFjxh>ySScn!@6V{Q&@Zif%hJsf&y#of4i^Yu7qLR7Jy1a#Xr z2I1;%jt$e&(^K;Pp5dlbS6fTZ#GR3x?2Shn-w%*xG{mL*(d`>Ij?RiVVwIz+V%wr& zU|@jD1!mK2x7SD`jn#q5;>1&sxwKrME}K_3@upfO-a;-(R#%7a_mc_A!sYLS0Nz0A z`~RHU^D+wzE6_MBT0Cq`PO^;N*&Bj1bEi9UZ{XQ|Zn*-w|EFIalxz(RfhhcD>7@x% zo;9e$z!1WP0qhH8dSr8aMh5xH6~ZmR6Ioe!LVn4Q38Pa&(QJx+2>Y1eJ(ymAoF(2B zLTiiFy2ahJpd0_LMBj~O`vtESj!W2m(Bkf7W8L91ht0n_mU$M6StF+k|5$?XYT><_4DUXeD}zR<&02(rl#hV zE43(`%F4i&6`{PtR*v!v0?ttTE%KQdi5m$K7`Wi}wzfLAQ8k#AT0=g)J{M%u4@)MP zY_{0A;a>vtB-J$|9%$BrIaA*CzXpLa*PyKLQf7nX*v)S z^S(<>;RS9z9raaA(h1K^zxaV|D|oKYae+dNoqX?~*6)Y7b|LnMB6k8^PlIEt^6Lod z&v|XOpvavr`t9XLv#s5lyfb1G(W^(M_2R7kiBs&ShnH0FhKGMCa!V1{7e@;WOrv|e z)v_Kv+Uzn+q`tvh4ULQMBdzX~#5sx*aiX5$64Xfei?_MPG8G{BfBpbG5fuDjhLh|6 zxg4su{@nO1`Tw{Et}L;>gse?jo7QH#^1NDB&E)B+-?6&8&P(x&?;Wz`y+*Czn}6CV z$6_`mY!qU&Byerg++z1d`3l4MoT!3=KYWlo#VsDsQ9pB6NN*&Cd^F;9?0qI3x%r9P zRYjFW*|a2jGUJa&njW(TZB2~Rmpu-D9Mtu%`bgn6{xNoNtntG9l9&AI;-|H`0YYoH zb4){B&!Gj^KI{O%Y^mO9V`Do#=;t#etu^r{Sl!F=p)i|Zk*%&?i5WxX3|QF^YNeh> zxWfy-7C7cpCTS@0H)Jx|`~STf%qVQ&UpaW`taNpQ7MV6|qtsG)hf{u*t?Wrlt1OpO z>=I^#>tE)|G7=}I&$V@R4(`gYJ^57r%g-l!Z(8QtoSeU9;avOa+jA`%4Q0_?{ykxp z?_Fmu@CF*fQ40_pE;ld8#2r6_2V?@~0?Fyyw{Lre)y0y5v)$sqX=Qxj!Z_M;z~5#C z2k>AFw>pw1Ue2FSt-7clq$^^vGOOxgzjQl2bxZa298$^Y)ussd;I%A8rh{`zS+cGL z3CUxxY~r2;)cH;I$>f>N&wtyqjiWnp;h6dt9_g*NXSnY9`9DTh)f zf3xc;y%AaB{FO1+S)ySd`mWjHU-zdRa%)>=-+iO|UwY>*_*eDmrEzW`WYvouo7{G+ zRmiyHyW9xLvd>Ie>GjO0oERV9U7(Yak|k(v)v%U#LRkT!F6qnk`z8q8%K>X8*@RrX z22aV<^z>!|xU}I?8^$IHh#A;4w$lY$8LO#X)5+Vib?YEde)K7VdTCwQL{KiEoTP%G zC|sp3zWcebfM&M!-8*g&H>i{0N;m;iG-@pLt`5>^ehNGBSO>mwERS`Ml04CnRlP4E z;-GjeUFwR}=a6)x4~Zhvzs|*Qyszu_mb_odUG>wY;Z~@}jW>CpWA;QVlRj+ovB*n| z;{Nciy9Jt4uU~1gw5y+t3KiT()E6GlEB*bsElFGBh+jpFU(u-(_T5RlFFJbWcN}@) zf7v16*U;GR8&8bwzI^H~*E2hQQAzl(rQI|4+-I~JANxf#w{ANnoM%_rJG_;D2uT{+ zPO6_wBnYcuctYm0WSBe2OJ;ub!7fhvUk)C#w>0Kz+Hs%-kH163-D6ej_Y1b|j=DKm{8v#=D&!BHHOW@u zq_BPUsl)$%kH-~g>^tMPA@5*H8PAv9G0*ICQuiM`pwCsG=Ci-7bU^OTQOAdMe#Ubn zn^HBDU6eM+#c)sp4?>*?Mgfc)kW9KD^f9nqKZRBtT8LdSJjz2@&+s)jEWT3!j&NL8 zmn{g zSq)c_8~6jyPeOeCUWOM9agJUtCN>&vu?k~MYtlBKHVx9I`LNwK%sl4zUgpy|f$eRP z-xc{-^?_gaz=Gj{Ba0$74<~9uhj$aCN?F z^ED6*PyZU?NE^C_?OKu0O2c$>=l6a27c|SAKe0M(Pxx;wz+OJfww_Mgh<7dfhim8f zj!0=nJb7?H!d8Ap`{9sE^sb(v6S+0M%J&~Vu6a=Y#;%epqAoSbqH#WBNPWk6(mX*f zCXQ~~`Gwn0W!<@$=v*E@==c6++UvHyG2u^tzlh6VAT3Kr;0hP-`ewy;r~-k7@W{DY zqJD+p2XzTdE0exC4QagLK)>-+SlA89%gLd=OKr17oy2nUI?GD3CZAkPle>BN)Qi*N zdv-TT-U!Ij!%bk&sT9aXreA2kSHxjKIs0 zJ28b+fiziXKd8pDCJ)7IAV5g5ajA^oH3-!5K+B=6PBm+0UjxHM)Q_qE9F zp#FxWj1Ic3wblQSPjCOL_q`ibZ>_5pNo6x0Z=_}=SltjtF zBEhTP{|3?)C)Z@A>S9RrCrh;W*l7qqf~@h_#)oSJS<&x3bH+MD=E>wxn^X|L&Kt)7 z1%ES*baXG5Sbix_qo)Su*%2uFU4ijOt$&dTPp_uPp9 zcazHoQsN2ymnK!Yi!*fhY<2izBXQEZ^HMX*iO78J7%!1D+p(g1*W$L!F}u0U37&hr zwqtPmXY!-2t55wtKXzAIAC8)yo|eyi0!n8~=;xLMK>#N>^3c%3lmcJ}@&X{f8-oDu z!1S48)DHj`y)!sW7|F5hrS+boO}pO-6a*7PhO0e}^0RE3v>4=TB=nAE%7<`{u5Tu{3J3^js;k#pDAJ?$ z3)v;dO(0NIg|Gez+O~Hi`ImHTI3blzf{?VSZZiWH+lTvspM4}!vWMe>tyYKGRug!X^Wx4l-Tcf5b1#~XQ^s%yeoPvu037xUl0JUxCWB<|6i2({cj zrRd5dMRc_yHNMX+VkQt886woEUBS3Gig;_%29j{LjXQn5Nhi_Axg`+;)vF==sJAw=!9>JTq z<%fWs`8dgkp*#(TzH?+wT~_S}lwaAf8gH}zis&7xQ*O^90rzDzU>G5)Wf zM#SOL@XY^u%~9V}kyyl^Q z5w8pMn;xtxs!vf$WQ%LO)Hsh*-W~reJ}+5q`8B97(_=I3rZnH0znw&`E{owc-}8k( zlTZ1qg{sH+2kdT~7iSCa%0{yb5SyC10Q?BWM=X!>lR1t$TD?x3&8S~`65)L+x9j)} z0>$;TzM&z;v&BN5{o@k)qPA=hAOW4Ga1Yf1wsd71Ja+6Df=N_6f2MOII<}z@=P$9~ zbSv`c0)CEobvE=VSq+4>8}e`uDc?Kt@fDs!Yr1W6+py#D#oJ9ybmdpahVy58*?DkT z_LV8Nn|5<;BGJojBhd#b&3+2lBUsDqn4ND;=wozt?Gj!)$h>ps!SgQ}0t43}dcha2 zC#vu=^8VG^>zM(G1Je!3ld*OBEfuViM8KVN^H(%FP>can1Dy6xLqnq|(EQDR=Qt4>IyR%iBY`1(@_DwlsZf3_&)jcjWvB4NL%I1+yf5`|4JsZfOr&YN$>{y%Y8{Vm;>8WUAVEC z!5GG=mo#;}k~Vn#yQS>H@@_?+_s^eOfwvkO8Y29Fg{+i(j9DGj8+0R~l?#c&rvMfb z3DmRe(W5u--s$VOYEQa7{fLsa` zmaYK)y&(uWGT8vd0m`an$vO`}<^t;=LB-SaCjcBmBfJ4Xxu9RbA(eK(MhCw^09l2p zGhionq)TBjpwL7QP6dd+cG*L!0aZ?EMTH)yNs-&AYT!bmLVan2c;H~rgCF~Et1^;~ zhH854c*-)2_v}(2zc_D|R#<-g;L228)yLB>cb3ejoKmw^HWw3h^?pd% zoe{Y=d?m1}t<`<*R|j7_N#XLp+py?sL(%m?E2nYsxP*kgo`#IiNd%Y{q4}rM)+pED7C}iu&5=Q!ag`tnEDFpuGi_5zbOTxqoE&OJt(cvGeCxEoTR6(PsJg@$#K8{0FDK^ zk*kopQVAY}sQ{1r@-DN$K!}BvmAW^BA3*01Ce`*WDJ>su3pG#!pgvXRsF_>h#ma*! zc56}hx#;cJ%W`W>UCBjVN?QX+^g5}jwni>7oKlX9Z3XtdE*CwxILGHwv(6?OJ(fB3 z^Y*=?Oy4hj9C-bYv-;{Y;bq$oxvd93=m|W!Ncpm*qSpOLvZFUQB}=E@L%PN8F87fC z=aD-uLw*0wDQ8w?t^Dv=osI0}4l7^YFyhYD`dZjGaNzhs*9+!aSA6zN=QLzuR-q{#9c4ksaN9h#~1w6JUev_4Qdu3CBCl*CuH6Lj4e+9&(rS%%S1w1HkZOaUrkW>NPOf}qW(ENaw5D^k$ z-U4Y`nu50rSX)8e6c{zJZedNs_X4Kx2k8fF7%roDe&4M7LT^BK=r>5VmI9%l*~D{& zxAqt6)cg1DAwD3UA9*VvT0rZ|fCvD>jGEKe&kv8Ufj~m&jT;B;KV0W!fW7U?$`9;i zNTv`0Mg%<@%*#;8;)^N>0z>@VQiY20{;C~Xk!uFgT>u1TBF$5^cpAwka5XFfV%{m zEv=`kNf}$RCIQ#|hjvumOJP`Om;^)=Y)1UD`$mz_MEq-S zK9v-iwo8qdw!N#|6qxqesfb(2v9rA0duA)!vZvn;dV(U8WqxT^;uP^qg;{%4TJ`jx z_RO_ESC(6n{f(101X=7hGaqOuz8v)H15dyh@ym^VjV+<~G+3GLn3RP7oG(6js$Am6 zMvCOEaKeU|(K3%#Px{4`xXh2zzXCFhG*8(@*efllk8alw-(`ntLoNSX}gYQa4!(A*d# z{`g?p4vj5zj6Gdl#=~+HcU;Z$C4KTuwNMv9;MPnV^uxk9X~&o3=ViWT73sA-$QjPS zx@@_?@{TGjG8dz`ueR$29$_Az`&KbPQKTpfKM*SFYRh_mtS~7-aqhcqgX_PGl4W zqFb%aQoD;L}k zf6&7@r}W0P<7FoAkE@g?A(zFRw~-v7LA4;M4Y+8~TS+BwNlMW9G9^X6z@E`L#=zx9;S?C?97iPf_%P_kw{r@%^#&=bL!6@;=}OLs@ZvxCqe?Qg{-RlL7B}VsFMCN^AnZ zB<(zKI=7>k>?pb`>#Y2U+;@bVP(4&3%xj^Zd(3dtCoWM_prSQ%vA=pw8Q`a%5!uls zahYQR9pO{|y5HUBPo8ro$=VMl?HF_6`kP^Ge2qVTZX)B@l^;cyDGeD){7Y{SY>Gb6 zpw)VS%enI9+1jUWI_rau$~B2U-G2Vuy7&G+PoJ?avC*~0Mf!w^k6Q)D#0DF#>>a}( z_^F=)#HKAekLaV!G7~I*to@8`Se5%7@ZuoL!<7?;9h7t5UP+AjT4w)yeJ%U}`EgW# zvV^VHvu~eD8I!-~TCRFC@7U4o{)t*fpdujrSXiK%7qPrioK&FFgyR}XO~}v#cQ48N zsalg+t<%7+y1v$V@Ij_YpRGwxbF&Q&ZX6&Mr5A2SM@JVH7FN(X9(_{WCh-=^9Y{T; zpc_T7fZcmuu*g}HAYR?Lcn-RlgBraRh-^!Ud_l{=O?5ejfxxegy5hir1Es*BMQ%UB zh6Y8mv>w9ezyojHb>JS3H@>*nNU-}<)zRDx%T+#_3@Rz0{Q>@B0fARTL-i2nnI2Gd zWM-x707Sm;SQ1X3qbcW*!}R0g&N~oR;RM4$Hi@&0<_;X_I8j+^K6Nl3xV9Sm+$Rgh z$xBGL(FnP?LUcCS8h&oay+ho_J%gPcEf&#MjqX=eODZ2fHWf);@srot$H&+`quRlc=KKpPs&H zPL-$uimP7U_h;R#7o%r>%liVE!9tK=_&PE&GCCSOR@Lu>2Y!26JhZ>;E?vT+qB2PT z788TIs=U1G!T}&aW=})YV_?gI^|{NTqTfl3OnzK9J2eH>3iJpN64|9yR#a>xAT_tz zTuk@%B`+@l?b7mc(8EZGDKUQB?EqCTDa;;b8K7;sxqJ0GaiT!-Am5voKMkzBs=E3F z8~R#m&{&*Sl%}<|_DyIZBo1fZzJ2D@Dd?p`Ly(xV`Pn3h;pAk-BMm*(JwTz6U-IHs zB|04f&}$@J;2gcJ)4X^E#mj#(e+WOuTUc?J5_cf47Uv)ISdQcR$B!d(iGXlEF(TC~ z4(9_b$qD0}hZoq<9q&rAK}HO6#Vr2vNX5`-vMUOUzQ)vrMgjxv%X|G=N>#r|J_KUc z;o&2?3yRs976hQo+gP?+uI6@qx)@6{sw%+ICElf3DCfU#)DsDZc=Km~kUiRoI(g!P zTeeTcKIOz@CDGB_9|7X289Z(q9Q=1X4=2r@Z<`giaH90D__gDvI>In$2@o5%k#WHu zUbqH1;fn$!IpV8F8*~@Ti{jg-MJkeltWuViB?v#3mn-WZXNuXOD$GQ(X1e^+QReZ6 z!E|$TYXZxOL3P?qspEMWeVsq-uL}Dw$8U)$i_!|(Phh3QL)n9*G6`o0qXn(e{?YMJu*s<%< zwZ=nP;zeDz*$nGzvTL_Vn&fv!uV3J7D<)ECf_oy>sd(4UF3JdN7)|@+Wa7BlMf=f} z{iZ_=W#Z0Omr5fD7Tv~2sd&`7{*v@Ax~8=&(*L}dHK>2mu&--45>FWqXj|c4l$HxdK6|)Z`OlZ>u9~(_sH|rqOa0le&yDyh%BH0jKRYyIw*My`Kc~mt++1vVc6IZHl`+AC^8_*@iT-8!^($GMlKks; zHqjE8OL<|a zI#M-cXG{9N#7ILJfvO?TRG(RnGEZzBC27XXwO*2L(s{|3X8V(V%aG!my@8Dw6Bu+_ zWMBBsC*5FgU<-MNO<6--9d@=bD~4+Z1>K}D8bbS`UtLzd{Wae4OTL*Yb!d*kbObDQ z8zIuUXJ(1q%0dVD+PY2UL}G^>2oJtEA+~m-8`9}*(t52EmvRn3W_{tnydo2U6c)#i z{HfC-&GS3!8=>2_F+tX?!l08Z6n3|D0_W0H?sslpGJ1Hr!ux^=QglIMC$tnBojtXn z=qim-He$()yB@pV;McA&{r9E`#deYnKoJ?ti-@?(aP1Z{)jYOjhwBOyoZX)_sVBgy z9gl*qMxjXplvI9x*q9vZ>T8yyd@mWf7}Shke7Py^@OB7_6#}5OF6!01XRlz^e7h;~ zWIOrU^2~kkF~{U<`&vwnn1)EU(zFrqKic*U8VUo#tjppnRxNgxhwk+6Two|1l2n^WGMlH6^Wn1{ozP`Vy=Xk18PH$@Vq*$sFoe-l0`F*?BMPtiqBev!S zPxJA8nz@qjV?n+JhPC19U$4vtU^#|426XiF-yy-ltpuAaYFdsAL7pZF0@Z1AUY!exq?YHG(mSCK)_$&GAJ)CU5?%n zm?@!ALKo)?e3#HP0woB&OD$FaI=#P`CT(AeJo!RHMmV(>TUBMOm1FM*m<=5IEIznJ(bF$@8MxL^wgLmOon=8t zVU5>p4YIP)d~`0MUZpbA0Ntnv*S0})@_^8AWny+oY04c!lxe~($fcGc@-ihS8P)H_ z23k&KTEn$ov~?_hsiO=It$Q`D$jHzy7LJ|M<>_UmNLZT0sb6p`s`M^DW6u_3B^Pr@ zq0gtf-@j(ykopXRb}b#;1_Jb$f?io*X%WdjlE;joU9 zW)|oX)<1F)qrpi5kB*HET>tkANjGR;nFuKFc0n0(<;p6sRsb8maD>j(qZE7x;ia70 zozo&pka9v90W^|Is^T|@R3)S+2d+UcfMCa+JUp>heaJXN|AAr@dOs&>T*@(2I|g0h z+xLP-=EhIL7b|Pi;uUrE>xHw68yf)Y59J(vJgI=P5wHsIV8YvOoj>8?E8Ka6i;@X- zbbh`7?7>KV^fJF_QVCbf^2d&8Pn27zgd31KhU)|+uqb;gOmz52$lBG+?Wn?2ErT%j zzT!PVV$kM5Rb2E>5(fg$JiYa$#Ly=XK1{MF1_yIUId(qW?QwM5w!Z-slQ`Xl>7T(o z+nkSgkeiBmL_f{*+Pey;8s1(Dmv+CuA8feZRKZsptTkg@o_yw9e4^2y;T zww{-RCb?1u*@52Uy<@!$F*Ab)FDx!-g*=ZMU3s_HDEX?#t=o5kCu?3oOb^EgywS_( zn=Z@SLOLSM9tmR=4FQf_#AEYoQ^9WFYUoD^#qg#@Yi=MQ4a^t`bhENE*qkuoBVF2_ zkL4!h)E6BcBgcI3xACANu=7yNGvui%%++?noJJtQJ%y?e0)ODc&(Ql)2LkZ(8;?QB zg4o~}%P2b$SOvASE1oWuDl$pQ zue_*e4q~ETc&gBZVOi{Fi@+~7($T>Ou_5UFSuU_bSUBhqk+iGwAk4Ion%J%SymS9M zRPG?`5#tS&=*&!dN{ZdqA=)r2YS=Bjk7zBCk*uF0fvg$=PIWYR9MNA83bA?Hwj`XQ zGBQ+|FI6EwH+=3s3?^TrD6DjQSZ->?dxCTzU`s_n6aw)kCN>hFX~k;485M>1DoB8; z1Abs5vE+u9ozzltI6ah|mZHJ3Jv_YjMMP)v_d^2@p~M@>Din;GDi7$bKFssPFY(OJ z*%zbTGOygTokSl#s7}ln`W15KzW89a^26iFZtGJT3Y+wekKI}sn#*n8GOcj+qvp0q z$u5zGDnjL_74B}^{Sv(ogrEwr_6&<2pr`l(z z2_esdCK8|y9A`NI;Xo#KAASOjHO__baB8lczJAPmj#m;Yl|ih3VfE1i|rTU2x{Tn1z=9KnH8LgqfapqarAICrlGK6-cqv{Q;unw9Zw zHQ9ScGnWco=3IMq7T*}TD$P!geUg1(rFyeRO$ySMANQ`0{SF^_73(s*V=C72G%Ms^Fn?=<3u_Oe>Niq}f z_Jm&7i*4u1$5b^taw*N;JYU3(tE6OdN4_^*i7sT38|oa)vZ_{UI4d=8V3?C|ta;RV z)q=FH>EQd@TNxs2m=r%i-The0j_8+Xly_$!2~7&-f_>R4JuAf zPT&^-s5v|x7mARF#RtEJR_q}Xl4Hs$-3!Z_t|zNq_wSEYUNgqP87OfE5*pS^y4mp+XR4fBcIAWfWE4P z=I=k|9xK1Z!ope9oA4tex{wN;qa5o^RrLY}2WJ-|3PB!$Y53k>b~NSaEBB1kBG}Hv zDefrWBsroH5^aaHG0j}x35}aeo^`eV4n*9&aKHq*{&ij^$R6sIFEeds;-W-qtGV7| zp!M)7wjY@$J++n%wo(kUFW9O`fk7|~RaS5~Tf%i6VaKmd={`P^mMQAGUv}DS$Gf?g z3kw(J=&?7JJc<{&V|UQ?D14h-nS_HoqC^0v~BC$zn`nz#HP1w)*p5`*KzF%lSv~BWOl^x`f$JGqy2VzYi-6i=N*!* zlm#wvmIV5QW;@NY(&0wviD$okL%POeoIEygu>m~8*~88eh!Pt~7|2+}5nxh!0S<*0 z&Q^JsPk>FNrq7ar3>^AD5F4QVZ^qmXvI@1 zqf5Pg0e@!?Mr*R}*wKwUk0=RvXdEYSSnW?}0d#~!e8hS~0^DK8CSdBph4YY;n>zrY zBM>hvW01(&{P9K>RzDQaP4cwztbRmx3yi%|Qm06sD$L`ezGXgd-MO5tf^0LmP7e+o zY~BC(9$B~AFgw#s*7Akv*@|F_dxY&<8BHUmO|%r>tW9B%^tnn8>$h^s{yrLGYfOj? zKG`Sorh?v#^U$6hC7L=e_g@OpL*6y!%WW4nAxGe4_+)qI15a|f>zLq))`xF6;=+G; zmhJC7oar7iM!H28MiacAT3KKG%*}j8HU_GEmAvon7ADm_67HkR&wgdQ$!SWF^~!h? z)^2Y2$I1-JbIOu_3a%m?^)OI5?v&Oz0h?MkXkJX7VCClCM&P2L>)eE?LL_8OLcNO^ z1Lj@35PeMz(}3n3UsmVJ`fFhV$BUpEWOTN}b%n79_7`~8Xd2$@NvfxCdS~ zbf|={z-WRMczthu6n{(dFQjC=5Ixz$HsgE(#3Y`T7tR{wRv0<3-%5kWyLayb2HFq| zPM&-r0esjRW$|}t1`ecR5kW52aslxfwC#(CAw?PzZWwZCaUg)NhEkb8KxvtS+8*WW z(^uAT;DCUH1|OPLG{(J1;r@r67~GdT*Uqntupu`58uG_83}kXQHs_WLeuuad`0cH& z@oeoi*ZiTFot5>Z!|uoM@11N&T{7o387r|ULSD{`ij7#x!mi9sFZn)b?(=ppU9$gN zvRrmzOZCqinQ#}>0EX?-F=@5UBDR;2BO$tMDt`Q2tNKvCe6<4MhqkbZ{<28S*sicK z-$sVolLhOuPC8|pE~k{IhH69GlU!fvMSXM0F$sygA3mJS`AvfF3@s7@YA|aAVgXp@+rKiGuZTUvf2ZRJqR zM?`+Asy;{SaSjS=9S9fzKH4lk7}dNnLT>j@ z$038E56?g%fdE0w^(PD>l9&GjI>>eY?{(gFt)h>IZAq1P2i_miu;YvF0hmQ9$h@a)<#hIGZr5ZS5VRYYWUr~sNF-OtM$k0EdtN?$5M7nzX2{Y z5xgmATp{+T{-61go8#ZNuVt(M$~^RhGFDrfa&}Thms{EUZyimJpx4#frN({E6(!~c zn^LDNbb6j8^!}@{_ft2wzShX}YRLHCn54h=Cg6&IdeK8~7i%kDX-SbSNv-n(4k5;5TB5ayg_(1s1fk;Fo94efq5~zr&&AFC z+)Pi5h$yIE9i8g;@K%k=+Oc#EB_Z@(q-f2wd`v3pfm$ANdoiRC;~bLbh8cAXL-~*w zgZqMLr;N$p;0yzn`!AvxfbPMx##30Y6P!O}&K#=DczCJtm+w!~1;IClVgTF#b_RIZ@WVxflHhrZ9+T7Sgh{wqUq09V51B;M;Gzw`1Gp7ad z3eigb+@`6v8QG7_AO7b3@~gI}TwNn6?!EiUwY9xyaV@0Rwl5XACm-7t+ZCmbF~4*y zs-sqMfkzrtd6{=NLhz%ljbbA9Ih}cKQl*UWIT2Y>n28P@zqXrJhE4EutqPg_G{GCV zHjrD#+#i##%f-+TblEyTJ)$N2@Z~DGbu|9^$-+(tBA?{2+RGaQ_R=3jogE0qapB@D zKis%Fr=w?`9aLCo4o7_1j(8m6QhWHP`Lj`DDgTXI;Vble^SXD@w8r!AVV~C%FfBM35voYspmTehpj%wf zCW$*=eIEC0NTZ>1xhT3vo0gE2Z<1$vzc+nNOyE+11La+H>&4jBCRSuvm=+3Xv!JB7 zE5{Xs!HEE<@9U z{EJcJ#f1YHOBUmcd#KJA>|$2MX3Wo`nsaUAi@LlKfm6uSz_0~7=||lTCB~m5tKJel z*VCTnU)w%NZdEhOZW?_rt=B2dCW6%Z1F1ms6-{ys8mmMQUAwck9^Mu!Qi*ZYSXGA| zC_uHGV(X0~ysv6YjLgh9qdo~Ryg-g2IfC5kAk9H+k`K#y-aUj>WLIF z_q51H+ULkGGc9DVWQiF=QLtNvv*#3<-P^MRhj*3!z-r1`u@NtG_&b%(pAZUCaVisq zSQ`_K$c3GMjXVP0L|V~jmZ%m6jyC)>4dH&Y_vQw!UZDz(=HtsVi>apHCe?`>xM&G? zI!T^7yBh%wHkJl$3_8*{_T^7yO#iO5GnEh96zpfD{dPB9+iBiI(oCJI6xhe>R>dT% z(GkJEuTesU<&oD`a(0f%nP>Dt=isa4b!#lv`!aK$z)aV;F5s{#I8{}%^Aci~F|h~< zP(6b2{0iS2tiswS8!Q_K>#u%%_fAYg;=NOeyIe-{myHDQcrgk`>&sObl3Qik#k}*m zUNi2G;oYqf$KNuX79G~?^|-O<2CX=GJoH#epx)8+k5PwI9$R01i;2!$l)!>P`GG0% zA0PbI3=8;}!vl8)zM6aUdp03w;9tP!V-3plGcS|bHwKs$FLt+OQ!E3Q9uilLdNn++K>}2W+`ncE)JGAVX*SD|j@YwQO zZ9BuuVdnCsy|lrYe0G-UgEi9sRd{Q-?@_3808~7cv|_hYe>LTIi+eAgK-!KaUL{S8 zd!oBLqv{uhZ(>mIU5s3!(C2O@>5d!^s9>H~j(o1(nfWJCiTYA&8Ua1l#0^hkdbWuD zY8DmT9%!b17JEUe;akpOQA}RK(ca zD&v@ECGTgM|E;KR)VqQDqQ8Ed#8&u;c>a{vDEs=Wo-=sGtRsJ*^z!oE)TWvmZoJR= zhIa9LPtWFcmOFM#MlrYB_mZMc8yWrQEwQhv`5oe?k)w;4R8zch?05$4Mem;~r#F4PE(T&cyrGr3G5p0mB?k%2frII9Fy~0N^(~ash^aQcZ@3RcTm5-R2rR(1>tEj-xhV_YK z2W4eh==R*!ap$T|V`g~Spgw8AM{eBwwz+Ajv%P=d9m^_zG90jl%~=8O^j*A2VZraN zaJ;d+bh*4f@JsGlp5vPc1dwDA(xamjQ#|7$Z1ZamIaOD$_Cvc1Y60eL1p$m%sW!JT zG0{E|IKZ0QJA(wBnXg~%($@Y-0bl$(PvOC6%=P|btJ}z}hVa?%*zu25<|r?7;92?m z6oEGbCp{Ic&UDPSKMnjT5Ih!SOVD6ksZFtA-QtSe*@Ass@dW9u#_UtkDi`Ve_TCBb zOTG*(6xSx&!^!+NCvVcTN^~T#-(8A4H`w5Ad#gz5j{Tj3w0k#tYTl8eT@>7UC-<-K z-D%|y+~Ezp|A}%)7#Gh_!okM__YUyx9b1~SMG9+b{zQt`Pa$g!80e{U=hkl|%W^~q z*1T$9)awL|go<#r>_2bXUVggBb~D$`%~d+l^+qZ84H{4F(haip;ktBTo%yz=`1S>N zA|Z{2^o3_!leuch(!uVegD1U;6oJ4KxKk{-Yg%td-eodll;#$SWsHCO00AJ!RPOdemb!Q&gAD*-_MrR9StdyXy{tj-K%4n^;*X^8w<=M+OJG$~}9u zV^)|tySiSMK7MX#@DK_#L$Lmk${-Bq%^Mwogc7ounVI9oi-K%hXfV_f>3`6xRX%-c zP0H`EL(~f>{*sc1MMV%pV^kGJn|yV2bllH|gewPESEj)ih_$b;2Q!+gOW!`e_#5Yl zxmYs4HqpFR*m6b`<$i*3IW`w0lWqrK` zFSE3)>`68oYwNuUE#sG}TQ0=wof;uEzx%b=dz+5g*`NGX@Mwz9u^Ffds%>$x8Md^oVIw%$a0WaYzg)>6iTD9wcI`%R%C$5s?e zE6ys|zLMSD_L7{*yz5K<)%Ok!2C*}g!$M*O-X+NkD;W!4zw{1$%yl@k6!Al0<+s9> zZO_L%3cd~qG(0UR(F+ksUsq<{z56W8=g!WV+1aiL&;K)1r0lzZp^0bt;;7{T)H#q; ze+65B3RRQ&C2knvtuT>i8Q2UIX^X#CfzSe*gFp?<{Dq4b@qAE;Z*Z=z_V&M5#$usx z*?g_Itn6di#p5uyvu&Xc-UIlB0f$K7r(!8=TXu!@V^pkZ;gbgs5c}9TQ`GQo;?l*o zH0a+DI2!}92XjqOmgJr6fB&9J)FQ!)mChX<6Y>#5p1+5%3L*H2SGZLD3CWMdCZzp5 zI{DDTuMA`HB4T1*NxXgW;%;5t;P5aH#U1m@LCI3J=Y+2_Gsv2ja2rt}G(rK6v{f{+ zrlzLoo{*HZh$aB49bn1X@|Tf?SDlk%g-jFV<2AW|!l+er4J|G9pf|v-9maGLpovu| zrqFUisr2X1A86A8paaK@Nb9RWL8yia%#!W&Jb(T!CJR7O3uwzE$%gcbLYV}kiv(M| zG&&O^lI#u8V!?Wkd^U4L9FQ$eRr6KjmsNc zj}K4GMJFBl_$?yUMIw!sFKJtLN!#;x=hr98!2MTBmGy+L%fS_hyrlZT^~2inXifmY zyuuUlU%&}sXAtd!oEMCIcv<=lb^+=zwojihLX3I=(Fnk2?WrpQHg@)HyAF(_hk`;KG3+g^ts4l? zdWSqG5G+Yw&}>1T-~RS3HDDA@cFbc#7!tajzppr5+1S{wU?eemCf^?;G=v~%GvqRc zSp*9W5m~K(8-Vt{&>Ry=Pk&wV!Tl>B8etPrzRUF((%5ztJ{eO`tw0mc;| zQ;=(dE2TOks2P7JPRs+;C?$h>A~7>lgHJH~;>?-LU*7IQrq+Sfa#K+PR0SB~6Q`A! zkx`440#sn9`4n0{q!=NrnZ~IF*Vgd#Y0N!!1hxg6127M4m2eaTCc*h6mJGMV4|Hp= zV&c&GhD#3|+RcsnM|uL%G}l!;B?HxBwP}qUiODYa{A>CK`b_2ekDdLNH(8`ClV-=& zRK-=Ab7Fq&&)6HU=!W}vXP+14XtxJ;jkt(J2mHRjS#QZ%@|l>}?Ny`t&#X`LU$8P2rjncjA!P)bM?-?;-Z86uN5i> z+rylamZsBLj{AlIyXoni8YgfUzbKp!w9ZJ5k3We!jGu>O4BhO*N_>1U03xscQx(8a zhN+(jMJUwb_gfg>+$4b+>kxlHfed;BP9%ic=L1eQFu0{FuwPgh%Rke5h&sp{Zx$24 zwc~Mm3MAa5D!vE=ViOXTK{#OM6#()1->V=tJ#6l%I@#FBAPvCLaRzY~xQLUJlbFf} z6xNWJ8IXf+mf|60WuBO0@cQ&VHoAh%q~IPpmmMcEy-qA(sPN%F?V{+Kj-9X zSO^3OvS``2;Vy>ozzqh3V>9;jydDVQmX#Hfic#!H z635)+3}%6?U#hm9fHo@M-ZaO6IzSsdom>Vu<#Xv@NMX;HuglEI83eH|Qo)_z#!sH8 zr}*L+^0E1R`}WwdU{_dh|L7D=67ZKM31U+@>e`+abQi0=E3AIRfJ-KmJ9_mwK1RNr z$MBA+CC!yTmL@%vrhr#3AIN-sw_7Q_G_dpSTHTecew}5tZ-lM)a%DPwee?Bq4~xPk z;V>&QBd#%tp0HAQs3695AJLM?=;=4sCfF?XWp1OyGF=nl#!B?3@O9bu#H*vEwPT&q z+3m3r5r2SVqv!_lgs79>f2$>ktdV$x#GfF2Jm6nVdiqC*OE9sgwG_YMZq$;9<9hMp+T91JsR%0m{?F8M z+%8=LFh4MWf#OUK&L|o^Jj(9h7mTHZBvgGlKPvec5tfJ+06&EG9jp!?164k+nLFS6 zl;H6^Fo*x3jLfvBJkqqm7UKxPZxK4M^mgpNIYWakq z7@#_`ok4x)2a`b5ZnTGu_{Sfe9@u;Fr1|bbU&V#8I-@9vRDSrF$5Y1W{>XhG9y{Tw zo-!G}_MH8Ey~V{UcjaEodn{hrE=;1T@4#2Lt;eY0j!X^(vqK%D> zd$oC{{-)bucZEnA#Ma=*IC;bN3kPtCBJM(+17^w}T{+4cd|?bSekuVI-f(n4s02d_ ztU0KqrS<0eO7=qW4(c4zbrgT7ZH{3C+s&K5(SboN7&AuoI{_F3ZG(V65Hep-4;T7E z(q_TDQP91O;`WAppdM5=)E+K&c0t}WMsC2`Pb6X_NbDZe$+Z;lw8b#hIaK%o+cX#R z2D%9oCXUNq3{#nzoZQL6Qi>t~x0`yn0~;)=TTWBqg)dD)fxMmvfZ#6UbjH;vD}ji2 z`%x#kN^v~+Yp>D5w8)u$o2|`_WMJ6+QlflFWl*<8uO_=}p{|2XBl(QXt|+#5d%kkA zb(pm~naCUppnU4_YWvGWaV!s8jUQO}%5LmrWpY(7Q-{kA-s}^>|{y&PX)$vv$&=~!D z;AZ^a!~}fGt88t%U(O$etg5UO1#@|A?c$AU?Genva>kP9tuYDYeL;@R1b zmL7Q1ftVNO*H%@{54i}ne!+r+@A@gA&~}3H4)!1@Lx>5myh3Hp8y+LX3c@AT((SkV{u7oj*4nEc86>fHy|4gvGxgdk)saba>URV_s7j5F z&QA1m&=4PgsA|Tn+@uDTgWa<6*GA5)Qj4DTv;R`>ie;J2_<}DzqnZEyy%*CQKC#HB z50g|iJ^JkXc4e6CJWhCsQoxSdX)h)<&DP0UsV(q}bxt-IcB<#18G$S8<$C_97`aVD zIH%~Aj?L4v(oM6IGn*#&STya$pzhyK%TjL#?R?pIFL809{i@7q)4`>?_c)zljBHPB z(*2-QW6?`Nt{_NExPD?!JHhkHB%q9j52g-s*J6y%+%B3sYpK8G(|I|y0C^joha?Jt z62(u|x!s>~V^PG@5}!ZY#V-`JKitsmDsP+NHGS5sJ=|)uqccy(#Vp)$as8)+9_M^& z%HNKU7<<~*Drr~P(V<%_w7Xt)|K723=Cdo$D7Ce ze+Th9uFx$d?4j91)64Ecm;Y>9oO3UGWc2ybiwh!i(BR^>H7k=<3rC3c_4DiHCXgHQ z?Wmum;o}}={|J>0Um8B{rP;6fQS`J=+A=?VEQ9(KYL*}O%i~E7>L)aA5LXhrD}Qdf zAX|TFMTlQP`#hbVQf3C#U;3_YuiUL6c1m(gRBD^8;mcLaZw3cmkIjs~Vbkc{YBod= z)2C2K9^}Y^V(E@W31#9G!)aq~W@|l|bM?*1Q_}^Xe7!#);WArPMh^|lZLdu3cECph zw22ASgLTdEM|?*phnm1uqDC?fT0e7wuvM&i)MFXjSaxkN>+^OWQ} zj~~a~N*dC!>wVvLy^sgPPQ_n!Ehtd!A+DCK4m@h&DXC+%=Fq0$@2_pL5(K2)ec!V~ zXPRnUQG}r2@Bux6;gK+I8Q%`Q>~dNt#aF1<}K|xN8zfeY+Z{t>a)_)7WFs5b~ z_0P~Fzegfgw?JktSPaHKuza(!vKBOt+7(3c20;S3WN)AGzZ;@+oHX^ln(>`R_;tX8 zQQmLUZ{OYl;TI;lt#{+YQBfbhn91${^1plcF5D=O+8xJPxO&PQlGYd@fp3eQDTOJ* zX-i3lXVF@{i`fb&Fiq~s*lI}Wm@f(Z(AngrxXXvpey1Y#4*o)Z+G{A7rgHKLKI(@r z2m~Y-8yg$lNHq?}rAv4&h)nfn&di+#6iat})HudMwT?lhzds@$^NftdI&E18*NcKX zn3gtEa1M4Blr6HepuE1mzM?`*fEnSmX~|cw_7T|OC@CY8UDbr%F`0N+0Q#SOrKJNZ z2Ol#Ijf^b)_|Y`vB0^5os{!_G8PIZGy?RK=1Y(PY8_;JjAkh>z2;I{ZCaqA6UgK+-Se$M8iXGP|S~mw9FsZNUY2G+F!Zf zj}da}+n@hHC+k?C&rq4WI>vn7?^KYH`C>k-gun4`On92^`!YOHYXp?HY{(u>-%8H;~GJjgt3&|5&qIr*(;z##COBQ8`|{b%Y+I1<9$bv?`7#lk#O zmvs$g`9?ah=;oXrZ1e0wGXeWflpuQu5b~|2wt*`GJo!7pIu0XN4k0DZ@8H84f^s;@ zc!9!)ojB2%8-or*>f#f2@vgW8R$!wHZcQP^3s<0pS%eRP<|MvOs(?n?Z-b zMkS(w3gE%3R>5&XK^;32>6sqXkU<49o>MJ&Qv&Ahp6eG_Mp( z)z=?Bq(j37uVs;wauh5RU4>$};n-o1xbC;`lFF1RR3IXYtTPc2pzpYSu@==sU~zLD zS_^?JDZ>(iZ4FHm^gp2A8iXU~%*o~Z(Jf|BuquvDL}Xr*t4{YU(+i$)v-ioQHaap7Tr~>*v8PGaF0B zy2Zb7YxMGJ-sfItI^*G%O#zOzTU0k+`n0R4r*Ct+vqIRQ+A8Z+#dD{rnv^px)QJoJ zu+V!`^@NO{&wkd-H~41oC3)ZdO>gG9YhMh_Xnr|uSBhZcdH)4*Zz8+(e{`mHEZuh?Z>tqEIC#=>QTL|_P3TL!!z=&9E)c?J~?NgRpiZcw{BdGoi}0d?q2sQv>hi7 z*eZ}&Bemtyz!S%3elPyGe-oT2@Kby#a_8?boFI2NK--Aa_xy{G|pV9 zx@w)26x&i6In?RQRn@Dv-T%F(Yqdi5N9~67Q^Tbe)@<4~NkgdKup!>&(}vP%N_Q__ zIDhZn7vEPqkJ%%gM$^nT3K)i_rfhB^jR-voz&|oLCGXxjY}~j)wxzjx1?GhiwP2sA z3yWYzeE9IRs)?1~bI5dy65L-}FV^9?>XMR@43ipmN(!{MeLb3E_YFRc1ck+eE9IK+qPjR zgUOnko4R)nRY7%&mwvPXtMUSbz9*`x;@Cxf;9s|g^TsX`sw-24q2b}*Xy7p#t8imE zY50f{mZx}a7|m?3ymRs50mXw1*h2GPGYV?EaoHL0C%E9tZ&8m4DPBwf4k{PG(lsOv zSJ!%Ewfp+d{%dUy<-_R=a02Qd?Ccemprwxq1cbx<4P$zXcUO-c!&*vVl+2;INQPLe zrJ%dNVXFUu1M0#RD_34x6$e*SOaRQ$uU|jlJXSg|5CSJxlxePg*Ce@9T=Ts^K<}P- zpZbKWDa^I7w8ZXje{KZ|Pj-O}BxjvXPRj9`K(PTws{1b#Vo zSK>s*NH5vrqljvGv&NMbKVM|E7$Y4D4mLoy1~-J^M0dUh51x)dER?{Uqs+yAHy16% z;LrICQ-PhF9%5{sQ3X$(Uy;dxOzWd(?%D9;$JyP#$@(ObkpEH%kO5<6waQ7#$2CbC z@_D%&8|pl7#2K%e-(#&3jGos5)Vh-_!=D^IbVy8amnKPPt3=n6r&*!_95g(pV`l~d zy<5eL+(Yney+v>$wrL}Q3WW^N&#MXq+^Z&@hmXY?UJtAw&W_m1yGsl#)a)nlWU)>Z zq%Gb9N1^JEd!^xj+s>Rh!#dBD6ANe!RVhrV&^yuZJHRnTdzJqwz@hN_t^R|wnew5fmJtv%$V1(R;e zmfnq?vrO~)B$IN(r~kN`FSfj8Q2GAy%(qKNbUc?ntCZF&bwRec-+?8O9z58|%= zGt>Kf*R@^iJ3Fm^F50B!tL^;hvBHjHQWR?Sp~?Ez+a44z@o+5b@R$LwU+TyvbKRKe z%dQd9S>hwCM4m#y9bHS~bpKD!qs@BcA zv`}l4TXUkxpUmH#KR$f2((hXvxg}~tSVl*k%VB^4r&~Ss!;;(go497Yaeec1fAOV$ zhS_^es(sz>TDuUhm?M)uiCLVp=}60=DG01QgQ`JOlZA@$Q>H9EZ${(5cHmBW0S1CN zPbJ>EwV6DorY6!Vgri8QkDe1FG-rEz4Son?VhrZ6EO7#Cpss0X`OW?;SG)*|#n@Pp z>I=a2x|^PWQ?w%hiZB~-l}b#);Kv-oKkQ8NZQGheM|$d1h-n2$+&e~tixw=<#$Vpa z=^GXbNRXiq_a8MCbYMmbhaRpI=9-?>)_~-Uh8E0!2)-v5-sUi401&@wjkUFRR&LU@S^DDsxLX6@L%{dM(rk_i>XpYr|v zv2*dL{SOf|7BVmu56(mU>%KdF2qWLvDh-?{dl*HNr|1#lPsBK#-h%c>S67$2Hgjf# zeK?3Dm0A^%4tV%u=AJaf`nGO;kAJFVu;nS}tQG)NN2j^DyXzpf_0oyRk;)8NvvSo9 zYaJpQ&NY}b4$X5%@Jn5eH_1WJ@2H&?^U}%H)fdZ5r;)>j0iQo3GKGYf`hQp1=|e^t zU3wA6R&A|R!VwXn)u6K>m*nRr&#o9*vdp{bn1$*`zL&`5y=RXo2aX&`?&E+_!?G1} zUV&zBqk{u{+P;G0k&*F5Sggl$1fVIPNW-#%?XE8;MZ-vujWBdm_$L*K)s)phz??b0 z=*i2r1+Uj4z`{)?$U&}AJjk)+#PUR8>_koy=9iU8@W$ak|o9RLE zAZ+JnEr=@?7eJrwKZxRksXd{VQxKSoW3e;Jpzt=NXJ+?JI00wmNp5bBpkjf5>HoKn z8EFv_YxsRtW%JhD*$jd9@6arK5L?kKHg_W288jS6!!jr&e9=Md(98-_m?b5EOr^DX z0zH~NaIm<5X?G0mtM^wl_Sr4<0DNd`^W1j9P!Zn6VVi_*T7sDdNBy=x*YdZQeP;gV zPC(mClPwRn#Y$hh;aV{1Mx#fln9%dyf9@uqI{UwvaQKnC@Qs3m}=HsS~cd; zT+0I0)lFOSN{=t<-*A*;uZj8HD>y zj~+e5u=^3qO(d3}*0Tp#i-M@1w6qV<62;7!u&}DSx~?B7Wj{UBY4^~q>|}1i1OfC9 zLY_S>qsT6gqecG4=!x8}y5>$Tw^4krKxN6gb?bb5x(@UiM2u61U85hJ#VQhiQM3YJ zr`}mPs#|XAhR3vGVge=;GkrR>H5CC@M9&YssBOuRo~T_AgBm!z&MiEFokDq2_EAV1 z6@&Zi%T^b9jfJRz(!(b$s;0j86D_T&k*{j}3GNxLh zph-tT5Pima4u#)f-5#`-xQ50JIgSoJY$Y4HlZ;31`izy7Xk||bW!lEdls&d>!iuZ zNwnKR$G}YiqoMaM%#sqA>1=Urg=ffmXsOE`<9Nd@%^*oriDl!pL0A5&(FJeJy|qkxE>(A1q0il z1xnC!zPEj&Q=%l|!yh~32ui!KlYmi?({1OhXBL{2H@NV-MLM{CqV!1y2I3qo`eob(+ACnd3{R%^V>g@jC;T6sZ=RNxS;esg~eC!!59D zD9@1#Fe*CmqAHpoMN#6Fp&){TeJLNg3fVVyU}+7gELZ=YhE+Zf!MM<~XNB{V=!Q8E zrd?J%!y)8`Ex8Z4(F-t`!Fcad=$6Y;t$asj8QYeqs5%gC73IY?K}`AoocrX4mJ zUj6|A(Ej4guZdzC5ZUwRb*!O~)%MrtK-3vMCqU1q6E;Hz*#(;E5|Jg5JzedRMRCu^2b&x`E*x#K)A`|mUg2RWK?=*xpWmyIS z)C7CMR|IMpBIOUQj&cH`1(!;EFV8f&@Y{Bl zhU*Xf1Nx%B7~Qs=JCV|n4$j-=;gN|yBRq~(as42^fk9j~r{@;+t;`8<2qM@~GJ$Qs zycq>_z_A4xyM61{b~m^Gk{pgeF=6{Iu-}NDC+%KeS;kdjEn}mc@t70Bk-D!bCvu^H zog*x#rKUD|>YZM^ie%xcWME($ze>c!OU#P5OjafsXlM+0Z_j5boygkQ@I^Za1!<%zj5K-*%w!#WBm{m0LEuq<8v0Zf*~0*2XvmTZsikr~_d$3N z6QJ#TlfMKK`<#YdQ}bVYIh2)F#leg{6&2-E^?W3>3C>nT*;^_|SnEx{enn}!ubW>z zeZ5cVG~u={PX>!-qq9=(+@aH<5CmTT!}}r0q@n9a?t`+%qa`mLkBZ79l(Ghyeb|VT zxtit(S{Gx4!xv`HnbX}E>`M*XAION43lAG@ToSn&_-dBV9#S_Ov=7$Z%(3&ND&^;h z9L}Pm6ljP+d6zH8O~IYR&-NN+Ez~r3dU@LIskS&$eh2u3DYAcxSkpfh?6GazvBQ7t zWf(R!Ex*Z5lD&FiwLbLzl1$WD`1(&|(v7kv)jkhtiOAtLD>>v7XN>BCmdeV}@oU1C zI)l%b29~rxFj!eT>XlCWXt#J{-wLna<@#a-5|1}SY#$-WJNTt$Ms4YdoUZ4RKXp$z zHUB2zVK&kxLuz{O2mqp#UQ@>>7E%z7W?7XTE?yvay z`0e}_`ND#fdFMYi&s%O}KV8wi!Mkz5qGh+zl79rWtgsv+KP&9F$zpHAQN9DBFHe&b z>no66thwca6FXEHA0&c$4D2O`{?*<}AuYC~SIow9HCiQ(yHoS6-oJKvK4WQeL3g$1 zB>BKE2EMH~Rmh=pN1HL;c7A`*V+T8V_6ku#uaWr23C^ z3fjqX0TWL?VHm^OKTXz1ovj;?@kEB@4l*k`M@%oLadFJeWzWu+Cvnr$x}g}syhfBv z?^P=p_y|WXl$Y-HTflisOWU1SIR8xSv(O`sbKZFmopLnH@|6E{t?q1kh!LYk*;-kh ziH=76XZ@Bf@n#dSZ`U=ReYN;IbpyE3{VNw}N-^O3_)*$txb_?|zp#KWxxY2Fv_>3z z#G$dt^giuisUJN`L4nqWAAG8&?=z-d7zi$39%7*ybnqb7<)~hV0I3BA_A-)j+^bR6 zciu8Rh2U6cPn|QdyYv)^dwji_}XW8h!Tib^XFbYdtzyym!Ch8hMOLrkp{;e z`(rno$>elUDTKO!3TL{N`@J(q;@2wvPGt;owU>)duei(7KmiEfkN;NMb?*({?_il> zQ}*UfPXWaB3<`e+akm^wN=hh3y+1wZ)2mnD*RPI<34L8##FlIuO(6IK-1jL9>n;)GpmT{XRB%tJ zfoGrJN=iC>@ZjCutv5_B59%!eT`+q++Yo#ruU?5Sy6e@li5Ui0@O%$~!yd%%6ViV^ z;r1a-3KBLMTmc9-`Rz!7`nIo&Rr&gofwEBsA_W^$R@mY;{@bkRxrbLBUGB zYg=B1e+Dhe}@)rWcj^>Svb`0yU z(Aq~)-LTwnjG43WOYt+*<w5dqUx)r%yxuKU-P2`Fgp<`}t%dOi{Id5x zSHH5;uvIZ-bkUtJVXu{=4}LxVz|}-KKrFz1f`9fxiLR^eMYhsc9+(Y$`ec65tzD5QFM}HwZhHFs`I}9*8}eqLo<%Ol z0Co%V=p1tfwNLW%Pvmc4gvaCEn(9qQ@byFsiuxikTMiF8Gnh>RbJOg1Qq_&@F?`%W z6Gz8b2FXnu-G0Tz$M<`4@%r_}F)zc%wO@*{QVWAq*M5O33og(~sO`Pa?^i}l%z9H( z>8F#z3aEwIj0btfW*Up4r(a&beVf%hP*35-_1_H6z4d*0T_ZP&wRr8BKh9CkSS^er zz+B%w^#h4dBt+wXAB+}rS?taqzJ05uqH;L5BKzx}iq!D#hwj#6PJmvdTG!Rotf50F zEEEhqh4@nL%=_xsK~(PD^UB#LNzx&~9}5bC8z!f_-3hsP>@>kubQ*B%?INu~J|utX zQD>p@#Vj%Y`gOYnrYi# zXsRu*vz6xwjo^k&#&6KFk@1W5qw7C?n(FZ6UyQT2>5SYs_&-qB%9kaf0xhL}!)8oT`J)3E|M zRW7pbRdZrI1I_;HW$D3Lueo^>>A7*e#c!nVn{@r$Gb>BWR6@xq2l}dw3b`a7dN^fe zWh#qA8q37~J8RxdCcdybPMl>7&3Ps6fiEeUC?K;HziMf?y4aifmy6JEr>hf*+|bdh zocs>_kM@P{RR!OsXIfdN2PR4CcKsFz+#J74u2>^-r2jR0%-Js$Fr=#t+9o=6zkMj> zKU@&E%J+Y|HQaJ7OH};cW?!V_S)O?V{jnyMuW<9n|wzH0#z3pp9 zp5Fy`X`_L6<8N>H>?boxE$_`subS@@s}e5P&)lA|)BIdY+UAxLUp-^Q>#xz z*0wLC4j(88zB6~}yL&FbTXySAQ#KwPrsci!Yv!@Yll~Tp2bP&Def)UA=eW(!##gJu zRK36WSe=MBzpiCgy8lDZdB0owwEBeGh`-fZG}l`pOfz_}y70I}#Rk{u?i+%y30A+K zTj8x1Hs_#(UUs5e;sHeKlok7ZbD-#ur<)|`K4)0-YM@Xm#t70kB^_s z775Y|*4FarkpRzkRl@QrQKDlvPGpq|!x`y?QX;xYyB$VnfW6Dd^i-fB_LE=|RKocH z%oWKqV0zBK5CoBEx6bIXKYFIZ2w_iwpS9X}ldX&Z6NmZFKF{h1P^*zq4$riFQpAM` zRD{c~B0xf3j|>m*y4|}P7`t_VcMZx`r$it8iu7kawW&kOt-%J7_ z5Cb1GoykcWP6Fyzx#sS>m^_~8l9ZHjfy2_>F8w~1R5e=G6jPq)LBsC2eQ`V!=g0gREsDlfq|1wK7q6% zVsJoDWncj%o-nBX%^rk?A(7MO&FNk(Do0ZY_Xg>a6nQ+lE!5>6*Pv2SA~x5TiH7G< zA|$ct+GAEG#w#mF>FpZWv#EPDymp>BmL-Kwn&b*(-+E(~0>OULq}>p?|K}!s4~%EP z0I|0-FI~LIJV`_n0gd8~qY|v6V|i&gw-p;$NG27d3mz)+pvr}@}GSOpaQlAD7 z`KgN9V_r8IFRc6U#a2vT>)Pf1b~zzC^5A=ly}k14lH;kC>Wb12u}>ym`P!iUu`cPo z@x$UZr`^sc{x|zurM+*BkIC(q%P`;%g?=Q!B$#(aZcp&C> zNcKAd~uO>ycDOGhHyLE$x z%YFKyQZV^O{?oX7K9lBrSKQ&AWa?vae2tmp0`WvY#Xd7f^qoJmz@}6$pt)adNy(@l z7Q0p!b>D3LxOdq~=gRIa+b)M~m>Oy_wc39>aZF77K+r3RhnW-Z)qTJ5`-acjovo#k zsx>cuS{XjPEif7@E`I*N5OLw&;|~s)zuN5@y10H@{hvRLcazgS)|S?0M!hf)hR$q_ z+E%AiRoyCmboh}euP4swvG4Warb|mEPyXYx*C%K1;YEYvOHsY4*gH9Lj(@cEwdzr} zGp4-z?w~Ts%E0$pzORII>(9Z{l8Z9`RLmvnsGQscOe?$Be&HHoxP|9JZIc7=fNvIiouoIOac?(_{5hpVjTdLagcK ze=rfdvw2u>-aoFcFeR|~khqxauwjGJxN#IbAR<(;kW}IU+o*ME=KQ{L&2`9un4-kR zff>8;GVK<({`$p=62)#G3Gpkh7cNij}g3%#HK&4;?weuVcBw znb|pVqV>qIkfs9cVR7vS?gP_?`O(LJc3SDjl9Gs!kg2=n$5H@GM35nb`{! zSmu~v1_lNJ_KL0sRDfhiP+}k$pCnSLuR3zJGc*S z14TNT&|7s(LZ+TpH8AK7%j&!|<%o=Rj@x|3;;>hCCHgQfh1a)i`Etyg(@~}N)Th@J zt)nnbqQUX`Q)3JL1-Wwq-AVg!>T8PLn(g=ajB!^%^oR*Ml|ECEWn)h0b$2!$|8D)a z#c;z}szXV}NTxiSU1+EE>oFNIkgnVN;K5wv1vVlMPzs8;@X|f+_Nf-H+~WE8p^Q*s zpkok;JQC-K`TDcx&$~+NeK2oe-WU}Ywv!^pf3}F=lIWlz-2Y&`(<7SPri*2Lxnsx_A7&BJ{yE&*?5d2l~%__F#6_)?m&e6wpG9O&&PlMp*BL*87>zx z8mm@)r2u~swTJh1Wp3cDlRS6G5sOVtXHVYk>DflS;0LZ+b*jFPx^164cZxm6$JqaX zaWJpDQ?TFP(ZEGc%QrN;!Bb<({s9lFmZojcdD_yt(O6t~Bz2aY$NnSXvFh@9=|UW1 z_3KB4oOI9#8(MinZr(ciz|;)6fIU9%U%aSo?@X{Q?wq1f-|;cmPT0|2JaJ&mf}>y5 zQ+kbU@YQo4q;_n*oQa)Mduvsoog6BrL4BN_7TCGe4^5EX(|S8vQNLBM%u_G;cizU3 zZ0o2Oc~2@I>Iol>)%fW9y2(&^azaK|Vf~CL9TT66xCt~cKIl$s#X9-)pmgcZ9o3ac zq>Fy3?hl4CiB1Oar)&0%iJvaV-nijHy7z4_u!S1hI%w@DiqUku-01IoFEovnv1Qd5 zvH>;0o~3J!UFZrsIL77p1A&Qm;|Li$*+VBDbWg=xb5Mi+QaACNd&cs@J^y6GQ2 zUcdYJE-jlg*;y0r7-Th<1-B=ejdyj52%ggXry#Ggt^4=nuAMvfR_fR52Xv3`Q(3=w z&z@NlPqT-9FZkNBCsQM(ptYSrC6OiC`{$umaV?V5vyT7pt~8;7j^v8q5h{$bJh*4# z^!Ga(w7lC-mU%lAWPKQ5Tc9Dt0DP!P2=fGgxstbQKRpWdE-m-|(w_CUrgfRbY|GDB#)`i9otx3TH z3?^kp?CB)?hy=zuqDE|;goM;i)zg=q&nV^B`*bdq(!RBp|5BzbV<2_>K<##2-wV!o z#%@TSbA9;UwyFVA{(#{P6Cx5m2foki{UFSfqu{#OW}awyr+;~OdGf!1^@Q4jd*uI5 zYbaJh>35}e_}gVd;Onpit>Fu(_P*%=|7Fok(DuHCXnCc9Pgxl zh;lU$iqv?zHM?apWDk`kdB+wzWi>8YcrbeUkondZ9j}cL{jovcuF=7g-aiYUmzmnH z5N-VIZF{%x)Bi+{7SCGnKW!t87R6nEC5;}u-v9Z3DnBdwhy4Hho6H)P&Y9E0Bt*5q zbjv^gd+F_lG6$Ca^ic~&O3+O{`kpe-2n$?Ih!XBogx~6<8NO7ZjN(Cdo`w*O4D&nE zqNi{$T1-1AROyhtT&_CR1>e&nBO^nYt2k%a|NdAysB%FFh6KG%2s@|jS}Y@x=l*{` zn#Q6WcX`iit`c8X|CNFI|J9>bV6Qrk3R$>uww8s3;I1Oq#ky3BXA{&T2Y8~Ga<3Hy{1-|Xgc?VuM`7?W?;-II{e zJ)orL%tJ-h+tW%5^@1udF2DM=W{0+Xcc=GPZMf)v=GU8di$6v}K(zjQ+iIWUQRB+6 zvii9p7fW5rm^;&`)4RY1FlIk={`|ilkidtVXN;QV^{@J4-IT}&FGWJJ^T4Z2_;Pzcu2&~T?c2F!zB z$$n3G7+P<*Td)WWVqUg7@SO9#Z@qPER3zWu~ z{M?;CqHKBhz0ei1)AjVc0WsdZS#`{q`MGcNkFU0Zph{#7MH5z`5QC%c-)b@v729=p z=tdgHoOk{`X}m#DC5V2WdwBl2`ylyLb=uk%Yu2!vBQNLP!R_56W2Yvnz7ofg# z?gtT%f`M0Eopj&69bz;4EGdEu#c*QXO$$YtPK!;0^4!J6*<)uOLi7s2TB2ulT6IRO0$@S)^dvwU< zxhK3W!J1WF-OSSRbVNjrM;do;)pd&#;o%F4no&#V$8X<$i#AWnU$wwWb%-4De%Wp7 z+wrtzH@HZgMAs^VZ+Caz69x&)Xj! zyEAOGU;XgdZ=@(IwcE?-AGoZjq}&tG{ki>x#Wjx0g#5%wCEQiuQMB)k7Pr(0y{c7l9Q4kn_V%2vndq$=rEL19R5iD*0i0IaINCT(PdUw%qXHDkOk)8p4sP11X3- z(wIigTc%`kuhb>3_(@fh{rq2^dNU%9#X8GHLloiUF>g<`HVsh{vbiM@(ccuESQfe# zD<26C);hgdE}*g9n+v#1_R17tF5(9vO6-Td+ibV>gwi_zcRf9M9KB8~IBUvonEFaq zol~t7&A|O%*zl*g!p(1UkClE(Ci@h#!vw3bvn*U7%(b&Xl6td+d|uAe zibhYl0MX*S?Dl6aDM#jF{iq>Kez%z+y^_h1ho2ffU0%ywTt4xsOOx7}_t@Z{I-E$H8*BF?URk`qP@0Gta(${Ad%J|L>_&jwvO5_QBIn zoNe!ts9KX|YkGOb1lfIoCKF^)@(QpwY~a13^%XiSR_bh-WAZXtbfWCu=c-{l4|`Jk zd4-$0kW5f+OsN}~D;B!fUhc?4@v+q03^}iG~Kfi+eV2k3PFuqT$D`i|8Ucd z%v|}Xs;SRDzaE}?3LliyN~O~@wi{h8lI+h= z+~B#|NAYN+53@-?d5>F_?NYuqwblcNf>`I_kBVwq21;nKaw01$QMUj6#@kj|iJyGF zdZ+3A^2%U)o~u^_ho$yr9)Q=DloAnAX=_^svZbJq$uNgaOxErZQ$bBhN@5=rwK#K? zQx5ZujcGUG>fW;2LhHlQA#`Urme*I+K-NBMy3q^dvAT%yX=!osrQ%Iswr80^%!t6K zCinjR=TWm3g=~Pv#E6T*3X<&$L_W>O4j+bE4R$;&;u%aO^bFR?Inqi46An2tZq}?w z#e?bTdI@huXa&5Gw{I^mzlx4HLM!}IM|C;P;Y%Sbg0>Y|V(?m-F*YGHj*{ zJmj@|xBVcFcq9;{q2jmNS|V(=yB>|LqT;!$S54wqy+9xdFp%E_Z41Pcokw!PxZdkt zUck0>9b_z2DRgvpA@zm$_XTGHhPEiLU9C>={Zj)%K?=*y4i~Q<9#bq574drf;X%?Y(qshBx&U0kbu%K8laqCV@URdy z^fYs9WMG<*G_@mCGa$5Ig> zm~j&y&(ft!cka}hw+yx;4+LqdEFv^=cJr1o{iOpWn$a7r_{)3aDeL~gix+pI|IPFa8nLw+ zZ@jv`9&W*mh-Zu(Hf)e^EM*}Q02u6w+Je~~%s)OrmyDJ-tjb<4IwZ2gm7OxaISHcy!DkwP(YOh&i)oyJWV1C0{}90zfTsNqhF<#f$3gPXlV&SEII?;SU|Nd(Z3FOR~ zCrPYJI0M8uc``1(T(maJXRXRfwKaDZD-A?hZ>kVMM3DEXnwl&SBm>X~<}O>cs%Hjp zJrNpg+kAp7VF))SOnP|CsElzu#FpJ;v}k5V1bJUl0{fi_WJE*++Gfh3`TYMcTXzA^ zy>xou?hUI0b{V5$#7%G=gSqXJ0?!2f8EzT(KCP7D%c;=N^_s&u$_&5}l;(3_(8Ws8 z`T6kKxtRz`Gl8IANKT#xhDd5*sx21)*v8IuktWWmqHUjnhnR8!AM&>OKXL(xr!ey& zVRODyN`63+kTAmEj#bta80Poxflj!B@U!%7w3 z^R007Uc*F248&b#>L*T|U;xY#8|#8BtAO7_!(dk>C&vg&1o%?>6bYsOXb$Ik7V6IP3^|DYYQjHlK&2Bm22C8 zKRuoH0^fFGf`g+YBK*UI0h~cZ_)!u#6N}8Fgm?}xB$T6IdkeN^IKyleva!#2hr`a` zox^8t{u&Pt#`EJ&FZO`c#7YSzQaYY=$Z~3Gg3tM7;_l)yBLXfNTwT#@f{c``8i6dt zh!GTi1xcH&tv`U$@IWRWrXBfSTdTMG*Y&I{U#JcN_G)31xbHeTsaLKzaav#$a04`# z0Md=r_ts{r&cuscMK0QrCJGdEJ3BwPvun)d4h{-JKd7Rqy}a3U(W06kKPFF{D3Yv< zxp0AV#CZho#(UQEGC5Z|Fb0Oq`0;4Y$_^dMMOU-B<;2K^l|X{fx$V34qWBm=Xy}Df zOY5?;vo}WVQbz7SF0Q~%eKSKEmz37#W|0;j)Cg)=*YrkX0y0ZLbQ6dlf&9XGPXFhv zT3j*Om4-J!gP|8IDJw%xXz%D?T~uVs2cv{sx+-pmr>BL=$)KZ0*$P5&befRW>C=$B z$W;6!aI9q2xVJUrAncKimYK8BO!T{Au9DLhPBdz3Ltb0Yw@dG=h;72*j|vZ`kEKAj z>%;lxps^J~8~{@z$V?SZV|lK$bmXW}ON(yh*vUa896o%Li;EB3{J;91BK3LlJDKwF zXTYZxFJ_GnQ{PdDWS3{Vf3Q>cZmS4fepPf{FJG>LgY;L97vf3_YWYAu3omV5 zw{DE8>Sm0uS-t1`wFF`etPQJtr5}h zNJyj+{^{f6Lry1wP{d$=H*4N9)L(DEwdoNr(m%ib9v%eJdZy9(Yp6jDjSE&(f*71wJeE!VPkwnUIn7rmr_Q=}$`tiN*|M0*s!`{x$jyo=z3&5?} zxbZUM5erpLc{PDh}qpbTQ=UpiuP7Wkn8o1DWO{}a*Vxsm;P0fW7 zuv;G11uHNxqkJsS-pj8gjk2A4EI1gI338C=@Uqd*Euy09D2ncCX4Q;^E0j8M%X0s~ zDHg4378aVFav&~>2y4fT>8Q1Jb?>oaG1S&uLs8LC1j=)zuIP3yMI? zMM5@t8&v_}{=x++b#gKC%7N^{p+dsVf;l9gM-jlq_N1EAT(Tzq4Oyi3G&scBSD5}M zs&$g7{`|p->DS}2!AFCFFustGkm&6{TRso!ah;nsqb7hwiUdZ#MpghSR4D*Ymt$k0 zfY0m#C2XYL!~0=Y4_RQemB(le@i1G zsFG1U)sth)OVLM-1Vu+(8Vj6$Z$)A&Xp3C9@QI6PNs44`%xnUAZaAWYMBn&$c2qzH z_J`w$6RDR)8W=@dL{T_O$Fx2smi*vtB`!U7^yt$Ft^VG39Fuo3 z!xPQ+N=2MH?hQfM?g)2xJzA_XrY?b z_HYVgIs9azJwF}dl2L1Ni6*bT_wR)(M2PpBXMk9goHbOuf`dHOqr+nguQ-_k7U+6V0rkKZy3PB47khofM zr?@;HDP+kvEM`64kc92ftfr^am>j)pYtuH8A)s;DXhf7lXEkK^Ag8i}8Tp)h3>lv6 zPJ9_=3R%M1fA)#U$P7kQ^hal6Iqe^dikboqIx85`eSt1QQy055+EnHNw-n+<{Hi$I z#p+V4_U+$4@$mcfUE7eMcw3VJ=mHH6;o(1d23?KNy?{g(UYZJ1odY(m_x;L7l1Rf} z*S>I#vC7H;m3O&9X0k1K#4!-&P~~r)k*wNrzwZ>3Ejgv&K=$+#Ac|D|L{Lt9X3dQ> zGC2bl=D)?8TKKqG`k6eWZ=O3WGsb}lSFU(+^V!(+0@8!GOiFw6mOc4AaG*J+r}H<6 zr#ut&X!HVk`rjIn7Zp#Hk4Q#>c9K!@)WQlpp_<=jb+zow>R3zRO)(*| zT^~CZ@GTMjJE&HfGcOmV61B;CIDZJXes)gW@JMr#>jA>PMu&Y!Zly0{s6H;GL^Mn1iCi(i#_WyjgtYp{?L|u@j5wN%IXQ?N ztdG9ke>nVjhJ9qAk(xdyPk;TRqr6#G%eU{`DKa7B6ChvRy475lR^Ri|XV5Tq^f=^j z@pwBU=bk_!mA(-k=?+3OJW{rauR-xe7YP<7>$??hsuqcKC%g_gya+rczvJ0Uh#QgL z%+1X?n6$Wbn0(|Jj?adtmDW{NtHRs8ICqkrSz+1fTro8U<1u-xEUKwa;G@>}bXUMRZHGfQN z-xiB@t9E!$<)%{cCttWQhBr53#v8|E?%x0jqmYY~dBDe5e*{%BoF)pP9YuW3`t!qe z3+Kr(jkX1ZK-9yj%c-rsCp%z3j=MGNHdHGSzw*kU@ZkP1V`YX-!_Uv>h{5EfHrPK- zI7lH~fA)E^n3q5z_;~r+*_Fe9f|WZp;+b0wN5r7BVa}0493c##yjdTpHQKv zkib)7Po4#AZSA&{tUp_PeDw3&$<+GZZ3HvOZj>*q^+DD5GlX+rg$FeY-4~Zvk8n-b z(AR&Sw3!NNu0~h!h59nTQ3DOSrplIFC%R5%HUw#NUQVubZ9)sB+C1z2oOEE z&UoHDT=ytyI6x^SqZgpmtT^Ki^guL-=!U3mXm`3qSAYVP3ZBA~M9juikJBkK!K84A z1S|xg=QbvRJWkWX#92O1L)c@$iqL#05V&PNcp!1$v}N#1Ke)6~*YdY%GNx$s8ndf#^EX#WWBk2&%Rso#F5ok!j$zl5DuJI52H7>Y=vGa= z-;Ce>qZxki>GRQ}>Rw-4+ljgHWLc@v7cal9$$9(TBaPOY4;*Arv+~i*F((&}9;TwN zuaG`R##KTXXKWDjYMnu1^nXD;<&*st=+6Cv~>w#>G;Vgf{=$&-;5bFKtSGrx<-BF|h#>s^*e8f`R)Y6Qw4I@Wb+@9A>w)QuUt_MunO`Jkmxl zTc$K{iK*%R1XgZ5RfJ=e4AFlB?(6FqGRLc`-=MxA9H=9%rve>d6A$*vZLd9-*;;Km9VFSM~q0r?jWvs zxU4LZZIrycHG7o<2SV3hxn@n@n#&{%v<)UqSfCt=st?k!Y>>QOv2^c!kxCf_G|a0< zj~+2Igu-(-49vbRF1Lajk9)zLVRfdw1qAn0$&a2L`7SBUCr&wxUMiJd1K6>3>r~o) zC8f_4yM$8_cXxF3eLHnNM9v^Zp8R6Nl#(r)!}*^~m{ZanXJ-1q ziDFUxyUe*~Km@C&imerxFi9QV@u+(H>@!CfC=Evlsi1)3>?~$m0P@>)OGWl$g@x*1 zAhceH(v;a)+S+0-Xts9kv!u-!8_u5}Sn85u6@NT`9rvN>6ZUTauB;X2sULk&g*;07 z@9%LlA|`8U-a;&%zW}yIts>2E%gxX++FWIev-7(w-|im$^<-pa|79_ebVTRn4y-O0 zFmL|+lv}q9WBZ7P)KpXyI4qmej5Oq|lQS-AhVHvWc?FRWY$Z4k2cE6Ek;H0|NUyJN z7DKRu2a$klWYYk4l@ztQN7~x>RSZu6(jrZ@^!26pF+X0ldi9HNjXCGd3_Vtoi$y6J{w{iw zU}eXT%Mj4a%n%-Me0~-ndFis(h#8?t)DK&l!a`9gm*}_W_o$2I8F(~vg2?oE%Gv$3 z&w!}F8<~>cFx$%NJ?IQWos}xZtf5iF{O;(;$#vEoE>f}FyH^Zx?9msIp?e3DURU>h zWg`nFb5)1Hcr=t;50Q=NDl=qA&qK$`<3YN?YRuz`VNagBZk_H)@U*8TS1n+PRJ3Td z#i+@XuCiaxTn0(>K)di7?QW0mhK$0EJZFN8GYSPry0}tYIys5%i^$b$Mu+*J!iZgZ zQKpwWzQqJ1qy-elBEt0tsFf(sesh&5llFGr!Pz=(WUl)0BUbSqtX<0IK}IA4 zPS@1b>!?kZNk7Wg-i;d`sn&29HcT~|F=Rsnk7gFO>NHFQMF^$TS>T6!@aIzRo32YK zVax#R#!KU6b7tX_87^|umPgI$mW3)nKihhef$=s8QzlL%S#M9ZHjWw4^En~rZc;mcD`e+kyVV6jb}>5Qq6BOs2RTsW_&`P;V%;pykT*vWaot{3ef z2oDHZqWbXmZP=MJOhIxA4LoYY3%=k-giIL{X~2CV*`LXiB|}ks63*BL7ER3DYgkxZ z%oCFxIdTt8GxN&$RfxsZj?Ua7Hr0lOX;u)68n>)m_kXwmuU;t*ZJU4GxjWx`weR%B z;v|XT*g}sS8E>wlAw0s+oG&SeaF?dAF(s~(7{o>E(D#pm}M{&ikuFzWGrCn>3z7I zzi%>QysD?C*Wa|*Fm>4H#WcQ)ubRV_-LZM|;`mjU(Q7+!fLGj0LV`{XI^wgaSsfGu z7zAwqrUC;Q8>|P(^8*Ta>guTCWbA5kRR2wN&QRsQ|H2n2@rnbL8o0No9D?O_XdS6I zPSQPX*QJ7c<`{QfWWCOZ0oQ>cFilOl>%l{Z_I4VFD3NaXo`sjB`uE>x$)3wA)DT}; zLajHHw7k8kn45H{(vwLR`x3}vQjLrsKc3OS{oLF>`;f~}3;PG?5wHVgq8XCv;&9IAsc4z5rCf77w46i5#M2|t`WPrc_-sIup$3dl_BT(M> z&wlLx4!1HE)oAk3R^+nQO3UZ5LjpJkko`2;VAQ5E@C$jwKda5Jnu}ls^qJ<3Sq7$s zxI2q}eGAR=&bTGMrURqQ%h+#08EdQkascZxVS4C@tY|S2uk!>2n1i8prWX#IA)Ca)16@jl!+z{ zYSfk+DX+DIfLoC-P#!l9w7uomuWRPl0Qslt>-!*B%ajIUHCXiVX2dIn-I3EavU(5j z(Fls>>8V}Yw&}L6ii*_oe@EAhnKWsUS{TL1Hu+x54$;eV1UTR1@=3CXySjY#8mdz= zFX*c!C!~QB^?WR`fO!(o3%*#TxU6+?xnZsnpOCOKt(0Aj1xuFrOZXfV&))EVRd*(C zHSYbtHzZ5Kl8_`t5<-%M3`Hq~%tAz>B$c6}fl7!&vQN3vl~`x-S_wYem|f0^bue~<(0a4omx`zdo8`cRSWZe-x3wN ztpOql(9u3B;+L;pkspKXn=^5?`6d0xPD!1ccW~q}{xjJ=a?Y^3uD=uYBao%Q?ru@fd!lWeqd~D8mD!eQrC+BOqe?KjL3v`=RNlm!mwO{uBvG zXB;WO-uwuqJNFb(!9AXEpcXT=rWTN_Ug_2}JUfB$w*)ApU^dF?g|!*SibL#^gI=5%?fvj4JVi(E>Da@WP~QuhYyE|e&Fbi7xeh%D(=>x`kjm5gOtljtJ44od6* zfzp{-L8=+;8Q*K)w<)ck-15bJ%HyIK+@9X0zuGtN_|@tI{ylTvQBqO2%kF_1cIA}^ zAI{o$UL+A}x_C0`nN?~3Od~a8OSg9m56`=Q&0_Vdf`U3=Arf2Cp>JRVJ{~#J^tGQF+wEi4{P?^cXuA5t?HGw1iVS!C!# zghN}3E-7uA{Bl~>mGgt_3*EW}+V8AjwD5-`Bg5G+_ObNQI9OVsk_wt z^Gp0=tks&Bn0Nf?r#L6@l*K3B?@1w;BLb)FfB_%ZEKZ*{;Hs=U*JjP$SCN=L5!^O%)h`sc?NPs`d)yy^9`v$g<9uYt4%W#YeC z()C5^D0a%qz3Sxe^i}gcSmAlnaZ_4wK}!x2uQB@##)?JYWbg~o*#FW8NKZ=M{7+9Z zCW@htX+ebd4YLWIIc?;~?ou7F1ayD&H!Uq?9qx{fGLo;8hW~z*kl@%u=I4fUKU^x^ z;&=Z$c*oWGsSXEbxk`P$a=t~pv7u<1n@c+*;uov6f5~VcGi=yMw4Q-R5+iIh`dg@Ncr$xpcJQJZHPzKkz-Nd?SM8lVZl`F#toBh~;~18Ea^Q!e zmU#m#q_XaG`Vwd%cjj`sRfp?-gT8d1`)qMVkbjpRryH(M?h)x{yoS;=4;lgh?gp28 z;`O*7zwnT8o-bGc1KLfmdAPnX_FU-hakFqq7X7)-cq+6C{iTTalDt}-peya2PmtTY z7ccZpUkVxp+QJ{@)65^OT-~ztYL~+cJWdbpJow9juHD&j8kPpsHg$PXshqTx!f)o2 zn^9Xs6y@ahC)Nlp*gRj4B>;`!T;Pjj7`5k5>w$W5$Br`cbnqfkKSULOaZng({9=O! z2q~Q)AX@9bQ(s`p;XavZ%WxaFDHc^J+0_kzN!gY4Y$JMm+7J7+PHBi39pLt4(x<$| zwlj+S{`BdjAbEUa!&2GOogN%;I0sp$%&iMDgR}ivHwp`m$}X&cEL?W*W)pZr|{4TT4mU z;0m4IB?~(~6pnMNzB{3xxW1s_JF{YD&Z*ArtIDc} zwzaNLe&w|6etC^}ruC-wN&BPaT556|_jNv!GV_~gw%wC}5v3WG{pt1U^zzGGFC=VF z_p+G#=imp%|1=*^L~A&y&3(OBcUYze?Srbe^lzT-I$Ohyekx~3b_sn zjCff#diUM6!X%WIA!YqLcH1k=H9bLEk+W{cWOLO33xurtk;ii@&*p#h_;|8hAs4e1 zd6j}9d_^3=xj`!1wcloZT=z*KmlMOeb4yd&uw08SimLD3+NZ@G-RUwxAy=n&zaRFU z``o-cC23%bMO(Sfg3+1QGT9nWt8%_7`d3}|C``&m8u%cozV-)yk4QhD>9{zYw{wD2 z{42H3)$*(vFIa$f_hZ9v3bGu4 zOSxBES#|xGy^VoF?fCm+$34q#ot?Q;PBq4%OE#bO_oa)s4<8Dau-e%nx`Y_&@c8dx zA135FP{NH*`?&;MfVo%xmAH02YA&7z#x*{>z_3tDPb_mp!glkyd{Qwrq>8k z71tSLjUo({l_L3Il{%7GK^E>d-BCy3uLzrIunwVbYwws{`^QYDkB8 zZSR`Kgj(w@%Q$kw`TESUGCq%t6ptL)8XBW9YUt@76Z&}78-=P)P{>y6l5PJqdxQ4m z+)MV#eX=!hNsae zDVMiV-6w2YgHCEmt5LZA{(cgMyC^O0vk@!>1ASD5ME z>Wn>|6wB>5R`GTEOY&``KN~DvT8PcFj57D1f5eK4y@%4WO}72F++GL74=@E_NrUc| zST!N-;Put#TcHoP+(35o&)LbNXleYhbJ$GPa5 z|J9Jg9t*Nzg$bYbL$ql)}92)@}e*h!hi^%c`A4~UB$44P9Xc-8ffoPy1Jp2$w2V5 z8ek`MpNvsKrR}Zq7>}-(%459na69~cJc81_dt(7RmRm_*D_{}&{WZ^G4*Q9d-#ozy zQ4P?9uF#Yj8KLcBT0&G*l(gh*KHXxqr}_CNM*?C*#afeoS8tB$o#xcizdBvs=|s@w zuT6%3`t`6$OwL|9?ZMN4D9K|B8ss+Za?G|mwc+lC4K~Y%t$R~B%BCr~G<1o+%H_vj z?PDE+e%of=R0~=7>iEEE)2#-kYzo`8Lbkwav!br$G_x;e)55}sJo^%2Id+fs3KN_D zAGV$T>ZRH^aFFMezRO$^oJyWr&HdrH$$9SElH$3k>W9YqSGm2ao3!Tcp^s77?sQ zmj#8pP&j?~aN#v-%Y4+$z_Qgk!W0c55rVA}%?+kzs5Tf9A*uA_NrS>&78a3=$u_$N z4H>N_1TfIzz>XlT@Mw8kW~q7BJVEf=kn4B2GMQFW-jA5lTn8VE%udq*<$x$zkM@ue zh@`lqiHVvAX4!*^l6*_5q_*}Q$R|jO+h*%XSLoNT5Vyz_9J-eLUBhVbXF|6A5{G?k zQRlxxZU{6b$XN*SWTny}@*qNIOvO{XXHO%G40;oz>FQG^#>P_!jD;!fX_(4xCrAwj z4A@h=&Z)1&0gHb@1CSLD9Ba00&6+X6k3reNgnyx5K#l{k3=&M=IhF~&z<3~r)TC&N zv44T&k2_uWHYq?!1oVbvjde-e$gcpH+0v(fsP|(oriS$2of}8ce}S=(3anue0{)j{ z?SD`xunjVWj8r)3U)1bkts)H`eG;mK_L3iDq9C!;w46A3^Fg`%9>M}JngNpLQXzvs zKS9X;`>!(x0~-KhH%w3Og)CaM-4eT6tWXKkB~2u{SF#H|i{SkiF?d)P1X@tgMTY!BWcRufL?dD9}*Y zlbEyJX=jhoi4G_3zO3pIcy!^Nvmq7|32?v@^k-wI*rdKojwz=ZAA0P-SM9~z4w~8CE-A%eQIjK;K8#_ z?cO^_Uw5HFs7?KxM~9>RzKI99oPV}_^4I($ABODsv2d!6LavHysKo@?%fd!K^#hVS zFa<^r>xm7c11poqe~nZcg2WRA6RF!S|KXv5Mh`TOt%xK1DWSNZgr4{TxbPjMz(;eI zn3?^-x`||ptUBG9Gd)l^QuH&wOEvh)vRLR~G6T8rK%6_E`q@IyfR~XHoU#VlquY-p{cnI88bifRv*tm^Y zw(vXzR5}A`7zY7r6B5u4!p~Fp+V)v~{yO$uYdqx|5Ef?=!s_KhCsQ*CYOE$gMcxw&(5Gc)%uR+A|Dz_YaGuH%SL1HjoZ z-gBKe6lXlAmEB3>%i~G*2wLGm(m3l_#K^0d%D@@Ikp?d7;nBfz#4d+I&g>dU7DtEr zs8K|+uR_B?@@8(O;5(=3`|@QQ>de;qTsSMzm$l@3HFu)*AAULy{D&K><{PE<89|TR z=PQ?ZbUrx##_f=qyWuvdTIrv-^=+StvqD;_CJW&yJU-;Iv(upLoHXed*^|*k3|2b4 z3b;OEUHG#JG0BA!#~eF-KIZe>RFAbPAp^5g{;j&}b}zI1gHG>l3Y%9vEWB%)YTk9) z){Td*l^i}eqQ}?qM-2k1MTPp8-}hb=b86+xuj?lGg%5l@amsa#ZheOhS5+u^Y?XAb z;>5=LXeZ$ysRU zf4C&E^mNMfj>!<6329Tq%kcm$wgFJ8oEn znUeGg@xl)YJO~{U5_*rS96gnE{0IMMz>EL2kU`5AU(l5*%y3O6s+0tH3Ran99e*~c z3p%ci4Glee^-6o53S@+Gf+9qI$dFR+lJ5d5S}>Yb3-JduLw7FMWha5h#p<)V3)P8ATaLn zS&0w9RfuuTz?AMH4P3B1iK0ne{V9U{4I4Ur_(lceUVn5wZ~#iCdC||&Zz8K9RWl58 z)5BBETH2>JSG*%B3IU>qoXE4hp`)Ymo35_!=yh_L4_3EL4brS`NaZg_M+<IWHAnxVa^MLYIPjQ#TgCi`< z_FapO{~TKv5dGWn?A?gIr=J!zHFaO)1XH*x>0`c2flJwY+Jk}yx0V}|dKp+QJNxY2 zw4g&g$stso@Iu+w3Dl+7W%r`a$5XI7=bH_O7LaYt({j4Y<5rKWjUv2{9 zDa*$ipfkt+6KFI?)`0Gebp1-pQT_`E;#jXC$BaEBizTF*>nK>Q)|QpRoMVXECO)ON zvWiH5(V{-#p>E%^y8qR@ZPogNCK-?9n>W}}7~4$I)JxJ!N!0Ntp@Uh?#sB=XKl>s4 z3bFqJrkq@A7f~=W?}t!xh$J8@CYfy8zCEY&aCyJazep0NgeQXP1&KyBMX?MAMso}{ z9~dYk^hR{FRx`)?QGPzTfptxlwN@hKAQeQ8C?5f|Nc^}sVbepP){L@**jN=~o#hCF zIccbSU|9tXbgJoHW+(`Lg`^!FIpf_c>~#ob8E`KD)$`|l2M#2B=_khzvS-@|hx>{m zXDQj2?k-OI`9i1zeWOI4;@*d#RnV_mhxi*tPYsKQhN|mbs8tJZRiT5$hX8TZyRF64 zK$ymCZpX&@PEP#Y)(-Ru$=TEMyxKfqe^@roGG@QK8!a!|f+Upog<&}NkZg-QkE_&h zKW0*(QD0#d(eXb=mg1O%)I@mj|A17WQ9AR~Nyn5#T_Ww5O}hTTt^d7IuaB*NxhL%O zzHTN<7B4W+GyT&4rR&IFFO)0p40BIDYIb+M-)JK%(=DsQCY_k(Z16k(P~g`^7uU>7 zHdXvn5&LLJ&RPqZv7_YY_N|NXf3-HK$4Q-6u?xN@I_%x(jv{J>{6UNGn zFpPPzqiEhb&jE#tXT6YE9c{ep0zroB*RFb&TYo|N#-L8$Ykz-son%!{lR}6vC@^rSs899IYsU@LKfHN0yW+`{xToRkUc7tfFP^tx z!By&%%`Q0D(W&6xGNC+iai=UtF3E#MpZwsh*T@BD%6Co08+%9$-rD`E) zcvp?gU*{iU473Bh*GTJo>FJ6dcbrF+*6eyy+n7GJj>?@^u-9=#IbyGakN*TiFJHc# zW4eq_fO!*<2-@Wf#=+>A@uuu1a#v4GodRb?w617`iV9AvkJZ(c_1(R)Xe$vcn#y8P z`>uEcrIWvZ@71T~650tR$2YfXg`7Eq_-*;}G>)x=jP|`Ih2IP5k0BAzDCbt*cw2j8 z)qxaTvq8l~X74GZMd#-&-FoTl0?oh?b}^a8chz5Bja>Ut{3cUrijTCq zgPY{el|3RRd;8AmdnM}2i$T6hvE$X6PSp1wbSy@B_*|_&MgG_41*;Vpk5{YiDP!Gl zk^Gd68&&gOT%H`|H*b^OQ>&$wmvx3rc`(PnNz>O?KkDIxImVj78!t))Usjn|bK7)y zknM!2>i=5{V4V{9)M0UkTIGmtzkDWji%gV#xP3&=;7{s<`(GM)bltANqsCgnJ@(!| zH>+OS(_Xq$vXw_fg6j8sHJER>N8FV5+K#4z4?6x)YIWdLJQmFmf zyY^|nBXg)Zwom`#8zP~X`S!FJuBk%vLi(XOrVk93x>aW_wFzxiG1gRIo7t{;)+mVP zOV%K~nnqCWBZ)?989gDGExvxW)e{5Vu21V1-tGO~k)eAY&R!yW&_Yf(XtCOZhE_Tt ziQfjd!9uW5h-Ukxes*e8h_+SG>4lo`$zL{>=Se zv+U3H^;EKNlgmpKDX&#H_$AE#?4Z0v3BB^5(Q91~reD3TFS^0VfU7FT$wpTaoB;d?7Tv)R=@JjKZ~Xr3=6c^vDK0%-yz02`GVBSs7kNh(r=awobF=KS0wAF z>@A+F9Ih;}dg&y~4LwX>ZIst^@K)O9d2E3~R-s7wf{mJ*wY0&fLEa*jInOWoNxd^W zskq2+lhN!)nPOcpk++t2mna|c{VN~O_^7=xAqTLPnoEjLJZHZEe*`YEma zMBaFqzv_Kczl)-fITe?!K8Squjb`gij<+#dtkre?<rH|joh zEbWxpN5T9PK^@pmHr~KjL|(w3Z6D(5{nB3zSo!P2{fzV*>2``yYK`j+Xb`@oxE0NI ztL}3sJNd)Fj?cNd<6m%LN zC5E0jp+&eNi=fqzMbMEQfA8p}Ga_Y$puD_1VhiXY)bpBa=SG_bsnpL8RvDG2=`K=! znbCPr@3YCb-qbanK6Q#v>V7l(diXdyyAAEqo>aH z__u9laNJb)pB+#BNdD6?s(E}+`z|Hku`Ay? zFIY6Us$;U8L9nd1_=R}%!kD=(pAH|3@@+KGyB>99UPqR@LwMYrO=h=t>}p%6=x-y6 zTqXT@LhaGwKXuXiA_L1_%5#)tkGR**HZ~Mhv=udvXNYz49_d}~tpz&%l%*e*RE;p5C9+*bxqqse8yj})jT`L^n$fn z;VtyYCX$iX@+O4?jvAb*+MwZF6s?}esp!2J9$eBZHr743_|KsP(gK0&wZ_TJqK*D`ZEAMc;J;hWY|)7+pXVK%5NHPPj_eJHnX$2Brzc zga_8+f+B%Iq2+Z9YTcTZvJ4awOX!)NQ1jK;C)ugf_aTE8r<)aO z#T5x*><*O=3F0)BMapxAECmp}aVwpilGO7kED`LX>qDIp7a!mIpg#2tG7Xa8ltmjE z*Z?_-R&gLfdx1egKX!C9?x5gZm1H->IEW#Qn@}6G*LR21`du9%2!8Rz3bq>bZW3MC zhLv+20Dx8Wjf8m(#0&tk8;CLc=FohB1);(uxe#kP`36GXEodgF@ek@su-`SaGDJLZTg0eR?D5lNP% zw*fi}BSld8?oA6cvIL1kd+8emovlg{gaQVjk-uMx^8r&0i4;_cFxA09cC?c*$MCzr z6DM%J4!s7VNP`d?%OH$AOsrT*oxt-o9s8m1!O+7&t)J)$b~fIN>H)_sG9Gqy^S09Ng~9)RYuvOpzB?Gcj}ax6d?F9KnAGk zjDv6=@hrriP}dXRSoIZE7F`FpDk~rv$x^;m@aET5j(sH%^XnCA6*OeDl-8+Ih&Ht# z+vq?vN|rQmmm7jzevA8(wShU{^MbT2?t|(P8iEZ-FwyhKjq+WxcrjFn9YH8yO+^2@ z;l~PzfgE726=_ZC%F3M+euXpl32zOLrs5=ukWuXRxviDLHZ@HYVKm)utTwS2WZeCgFcY)7v=GZowOfE&x z`3)utS1a)WAmz(~E`XZD{x-Gr)lXE9pxfDa11*_Bw5flk;Px+TZ%ooY$GqZ%;uLy! z`u)2wBczvKy3MB&NM5%u7gul^bZRX6ZS!=i)?VFkLA`SIsztUBt;WB$+64AE-hEM6 zNWZ;q-03Ja?Q_@8pU2y_>ke-=k|L%psC zsobWrh*2T_Fq*0!%093&5A;iDu+*N^?zwdFBG%pTYVu#y)Nl+l_0H<%6lLYeTen`; z?jdpl!ksYC)2AmB%1snEdSKF^KmFQ^6S3ZT>)!JoS;8gg2+k;2*)Jrf79%!~g_g;B zJiG&rwq-j%O;o2yj}a-$`Wd=}uaxaJGR|SU%(D%1hxI+R*+KD4r4Gx%Iz-L)`PP@V z+WjPyjb*~6fbd$6tNE(uHHID9{MtyxvtKa-`4kTI47Hyr4vBHF2*TW>^j&w6FzCHu zJ>fE}A~q0iUTXc5ty)WDFRIPckh`GfTm5^MQfA`S$CmdE)+R^c03GA&S@@=E{wXsZ@-_)@2V3B#C8#98_{5kd5k z*;eWUvU}J_j|?>qS|)q3LnB_k{~yPqyB+=NGnzSqJAGf*tZd0#)Xl5!T)r&YaY*rN zg>Y@xzb!tT>*lh_q)Wst`By2iG)Xw&DLe>nOHXV*q++~$ zIkv*=k>So=k}iMHiD#q_kd#0MhBN;e3+Mab^$pznHg;0?_J)X#Vvn}duWcXtO`PH% zN3b7XQII-lxtam0E#N&HHAp#=7tCBNLf@$P-~EMxv+n->_Y?l6fwl#7GzXBY3xUP$ z)T?95P}uyDi8-q48sj84ToWPS%rF!CvviD6HCY zC>3ID?CfTsLuXOI%nXp0B&uuA^5x*)e}W@gCF(35cAJlgIhCuk|H2ce_oo|R>ROl6c2mL4|E4C`t><3 zfe;LM?}&mVOph2+2w10RCEg_x0sG~vR}qA;g9w4Y7_F&#u%IHbMeDYA?>+TAR=^nj ztvs^8Nce$T1*0VOj1aF+ZNkoS-AkU2-BcI1#XEU3?y0wIt=;snhb693r(oqnb9DSc z;8$YjL~J}KN2*0OP|;+HF8tBphk3DbKF0Ir@k~PAVi~$}WfWzT=?VUf2SgB3Z9yV{ z-IscUP-$WQ?Z{^<*So>izO=eY;L;lIKXKcc+&vCSckCdDqj|sNJ3^zTL`JeXavCy_ ziQ)kJ#n7SS^AZbd)ae4aFzN%~nc4BsLcF3_{0ol*WuoAr>;Ptsy>f-ShRu+~m8`Ap>#J?$mVWc$STw1(pmEfX-keI)rlDPHwqWO!+8G<8ken!ee5aG#V%K{pz6S)5WI0FVq8pA)s+<*1Ew(46l%)gEhg64r zidJ~QmM1ZPca+yF6NbjcK5-}^iQ#b5%8Am2Z{O}?S`8MRl9btOkYy3!;lk1SlO?2L zOefl-pK7`5Z6W2b{O%4%$3!Lw6`vJL91v39Qn|aO3=QR7GXmtmEOHGMDq))k9hpOl z6uV!YM@I{4IxN?_reZ1~#|G0BFr%TLJaya%k*9e=T}_P(IwPUVG>tYKETs)MUyD2msPR@YW(}DxpEP4ecubAG&R2V#_|FnuxI?ZxB;RC^^1y)5 zqft7RkB%ea5GtO!B6;Iv8w`>hK7c=wzjeh zUMd8YLeW|LCI9JD;2i1fnmXbFXb_{Fi5GD&f_r z_1+bX$oqjYolA2vIM{3CPd-#8xi2j%qutwPefK`2B*NF6ml&niEU7PYI`z=S%9|i{ zH@_=W{Ih!&telh%)hL}!PG(8YR9UHtiItUrL7bz%mNm;S)h(#Jy#>9UG0C(|4_L?WA4z!zZq}Bi{uw&%_Irj) zB;@)P~K)%8n5?|9h4KpxBqBm64SZ3jw%At*6-Pd0Ztafp&nzMX4 zU;+rh>D3Pg?pY>lAZy@b@kg^Za`9oI@89ysVN<_Tn*rjZ?8*_ zEQVzCnY;hqoVr(N@1RYLf^HFY$Kk}#pdB<7$T*0BVfW%p1xhP!Y~-`H>hw}mjEmjN zp2LUXOjxDf$T^8>Ak7>s12ctzse~R%&=Olm{$BF!Nj`6VpmG)N6VU5EApO4gV@qNd zlDACK6H|Fx-86`P&PFYA8x%0g7cD$ZG7~EM9Mn%pYZO$1c3Se3?1C%@Jc4W>9GWg@ zsz5%QN2%vwW@Q&>K_19ZAojNuj%nmrcF7e!tJLpc?cy`1@dI>$5FY?Quq)FTJVv90 zXRFn{gU1I@DYx=9S}f2i@a)xhA|oy6Yo)WVt21Sx3Z0yAK2aG3tD1}+KOPArIugzm z?rR6p7Ji16leUOhhOMGrYU}-OKH%^~Wh|t(l`;QFPb`R$?Mk+4pYveYgPgPvs;9N6 zK_*OizVQYf2jewq;!qfqlGb+RQaD%{p(P0};gIPra8yJ=(DCwDi0S~~MI<8BE9U0u zR45cmqkK2sHfyo^*Ej0l+D3LTs%kX6+FDx3BvBGFJRq;aUhwL?eCeHCLDeHPpByYI zBG0JHurkI$iU9PS)MXv*O-nB=y#2P84}eiqP8zWxxp*BPCug{@xG12&h9)?Ec$BNS zZ$Z!n&f7jiXSgEGA+W_PWzX1!iz^>S;EYZhmo?CZ`Ma}4$iPHRtv_1Yn)^}hQ4w%D z=j?kXJkJSQ|9lxsZS!ne9Y@@DRtm4TQg$=6YWUn6$045~qCkBB5pU>L(Ng}#n@=Z+Ef|g&h1WET``%nW+9I)U&PI$~g||ShgmlIY z8W)J;Q&B156yrqVb$Ql%AA+KOn3Ge{a}meTc2qs+9PnU0ef+q>rJd6>QJr?LBRj`Y zPt0jA)C;sO3@Ld-UyP~y)~ymc2DIu(g}hEo;sPBQ{K4^bmCg%P4O zPNK;8`1r;~Dqqx7P6+deM9lbpzb6Cobi=Waf?6>iXg6^Z9n>_t%QFSZK4&b5U>ys; z&-9-F!1z!-J_OE1@;21D`~aXFhZzE(m9zq8w3q3_y8Ut7^KI8uWJA5lxI(A5c5N%m zePI9oOwo?Mc5OQ-C3pT!iqj5=eRd7XUrdeUnDQ9}Xbgat=>q(-+sR4jd?<{m{P7OB zrQA~Ul_&8ZVgBlsE0b8y^cCnFDQVOBUBqGI+0MsoRW%NZvG!Dw^XY3aVbrLa_3c&b z#ri;K)G`bv=B`!fjFUOS?WnxB<+3&BjfS{u$k57|b^jx8BpZcQgu{^6Mov|C?@K&x zsAXb|AyKihQEJYmm~g;H+MK z$~r{*T)uNcV%CPtu9<^u0Tfuhbnh$%Zs6f49oJ_2jIyC%A?!(`md31gD&5Vt^6;ih zc=e?PXR!x#xm1YZoOm!aJOhwWnwz`RO7Lj@`LlQVa!}TReui8|)RnjR;WTp(Iz;xi z6(}kJM0xt09glfA389H=)+mXaxgGVd?0`@R_~j!C%N)rir4Y%uYqr|z=4-{3mfXEVNW&HxSBWe25 zRg%qE?~4igee;Gmcmq>uNiP<{qi4^Ao4x4)Ip-qGsc;GjHZAMnnp=glAz zi-Ma@nMtfcD)=u7zWgHB%aOU&S|-AoAY?Uji-8G<(qq%0EfgH#2Bxp#*X={}LFkEb z5OhD|xhImAW!rqm`t~&@CWa0Atvx&HS*rd3bK+1bIJpBg~k1x40+anwzD< z>t1Mu5$%f1<=naXrmPrqW8))5HjJO)OjF2Z`@gY@?r`2bsdViVQEF%ySTN(pj3El1 z2<` zfT^kpSo}vTEGP)Er`hV&HG5K+)EyH$+Q5`B3Z@ZOIqIbgEo@mzV|$TvSpW4W@B_{Z z@{Zg8&uKTUUXoqS$NA-Kq!DNwBDjRch`MBJs2IN=J<2uBfbQW^Va0s;2Hl}Y=GgD+ z<*78sG}XRBUrm;a)|Sic110gNZ7IsW!wMRbPfvQ+2u?}08D{+bxaI1HV`uy^mroj# z<<#Gxhoo0>Y;s*1SViitAxCrUyKdJdz2&<_qI!2PJ^xC3!*!-7cw2?H)bpJ6pE@XH zYa|bBa%#KC-EA(b8rqo9E?*qn96mvMwyEr`lS19vwZSA|Wc~E)qffl1OL4ZBx7how z8_U7f>HAnuXQAkno^e=L^~~r_ojQ*)o};%+X!$bBz5e&N{y+NH=$5kQS|G8WN|M{O zgip~YJjPnZ<(F%7MouMtPMw3U@YR5U2BvLw?tKFs&VSUg6B|nK#nx57sxDZ2i}Mnx z$OgZx=S!VtE^(f>U~7n~ZCzA zDlPV*VuI)h_yA)e`c?G9hw2#Q7b95UGopixw)2M%sJ;KaJ`URdG5zr2y--#{^qa?b zNER#@djV?@&7B@+b#1Mj7u((4J-ksy-jNAAg`yvGb&WUxR`w@4QG6_n`?KHu{^EBQ ze>ge0E#b~dbhnKOZ~N>wbGQ35Mtf|eV6j|f@DDsNWNWKhI#-zv8>#=GYbsyb4m>to zs#(eF;R0C<>?8m;W8)^i`+v z7h4;G9v4@8qaxs!i><3vHe4OX2=#COGsIL4SInmJJDdI9iNP=9JR^hu&qO9T(!tPN za9Q4e|8~KYcS_KA!|JhGt$ld8ci|Mtc~Gu}#340&u%C1v+?#PsZ{d5> zP}|cEa@`AQ_>x1&O$?5H?w9w2E5GhR+r$Z@-U|5~U(H~ojO)E;zZISh%1_Kfwd86= zS$iW>d_yfRN15UwZpz43-H}n+wW z4-I*exFJY;4!7d{TDe9&W%3!xP>tAhzZt&my{o;^lV;?q$6A*$tRCF+P89|4_GdbY zj1=F-Roi)%Y2jLo{kD1wLG!CXzYv%75^q@$J*3dNoNO!)&J{a-Ium%Ols?4oK5h5r zF&(~QamQe4Iff{l@@Q0k&!QUc6c%Aej6+NJxDnpw^5#zN1Yeo@Jl*8Dt-o0WYp{e7 zJwmFCIA1PrPaK?M)l|0EHW6MYxm}E|Op)50uc(mkawbnFnd^FT((m@VD)g3alOB$@^`ifvP7Kt9`-Nj^X0bw(+*m?oA*YCpI_@cLM~6TL?qqX zGw$PAYnIvQ4+d4!ui@BrCpmS&ZG^R^mn)4iKRkU8q9+^dcp2{3*4)+09$2oC)?(=soSPg_H8-duF(|+rO$Of>^JNQlulAF&H!=n8w|}=u&9}1AnT@dKyd$ecTV2P2 z6=ZbxOOEGC&ELm61mN~7yt4w9^fCSu>H~&h6 zon`S|@88}S!Wi@U#2`Bzj&w37hMZ@Kt+4sMQ!o=N${?)*IA;G|i@>Id{tCT>LR46^vA`QbO8vq^=0)tBoyXUG?5 zF~SSosDefsaa$;cS`PoziidP~J>AS*AG9*4i*>&pcanX=X?P?Rr1P0zTvPqsCDuyo zNJm!VVIbt)05TbP@7XRS6b6B$8gN*;d_G%!+?{8_gavk;Rx;hxpbC4$uEbnB&e?2QCG^TM_L8mjW5V&k@f?MMevaMB;=|C@>_W)^a2Wg!5PGLl?vs^U!vRZLC4nGNT4M3}9p)NyrNWOaFSn}%15Z0V2yO~m>;pk$mk zHQP-jSTyvr54NC@{4sc6t?UHx`mG<%^Vn}f(>+o?g-bd;9pun|49ViUo^resPMI7U zoWP)5U#<)LTgj|*b8%&c>OiDVA<1rWq1cXjEVP0CRs;oGRCF%W}>l@P2x8A`dY z-sjP4vae9_#`B1W+=$CCAlKbA&7BQ|5#i2FW9<_Qm7I-UW zwa_{3Dy^tO63O6+P8TojPhV)o^l80r<6G`DDt{Q@iu+YLnz%WcI-jk+zqS09NprMDyT~_jQDA5}S{i6QD@#fH@$<&hsy^7psUebP}ZWnXcdKK&o?9b7Z zmv--`n|K6_v0-V8a)nrtrcA^y?SWnVwPk*iDC8>1%!AmYAB!n&erx}3=lvrp$a$p? zRzOTNsf<}nVMLP*O52Iiufn`VhvW4`%D*F7#pfVxwd3%pM>aiSzt zDVs>c!Jz+xmI7Cjh(cv#4)W^2Q$nc!>_o9|D{Wv=5S2d zXcduvyR#jOWQ1aQ?Wh#$@=<#A3ut8!vUthuot5W1jE~Nnwa&CNkx-H!J<&*K$Wf)j zsfz;ilJ3&OLQ|u73n=6Jb1A%Yr(+IG@;g|K?lelS2=*2#mr}I~jbVJMX{=Pew)PTe zB?c0Qi#lsC%;>U|SkpQU8Au}i3mOucnt1HFYJf$;<_ z=R$#uDB2EDlSHUU^`h0uK=|jz-BIbNJ9A3xi2MOE)s#PWOy5HLBIYeZP{Cs#=YNbP z+W|;x+TQz%dLB|y8K=Z7s|kP==oq6g`dDn;KC#Y0A>WRyXh{srdRupW zc)GqlSwL-P5@SkiSbF*uYUH^$G8VE|Z9*vjbZZkBQ{G70h{HUl4wsJV_$Pgfo8Wu> zmo++}-k{=?RBtVtMZNkj&Pw}ZIiBLdIvF%5Ym%)pgAx6LDn%>R(q6-5!6vF2eNi@y z{&GpmJ1nE&*xp~G)3#<6$@i(cAE@If(smfca1I={8gS?gSJUd;AoF>WR*!t{a{DA?anXQzMyM z6;++W?VAMsrGK2CFE8lyc!;GQqjql9!WRa;+S_={{k=)Wo-lw(ag;uqW`DJ0fgU8V zm>TxLN1|7&37=F-y|_A38@bP9mxL5pB{E9p+TMI$Z*v*Vww^Oxr4K2wysHXj6Yu$D zMw>WC%T+@^MT>0=mZ`CxlXu>iX>xTtR4zeA#+S=avzj5WX>-~Gkeuus#jNqz)^>lC zae4m0#}i}qo}fR&7vw}$?aoQzyoH?BJU8Xf988kk-%uI#df>Kpt^o*Tvm+H)u-?YE z_-BgZqzBs*m()3OY2Zw=B)$yQ+G0tyXbA_uhPY6U4=jNdSe;;0^ZudW+hDXP4ts}< zLEZ(hDPf+I`y=VkvNzV-A-t-W+f_zrvz1EQy%D%aAajzzf4|yxe~CE#czud{7@Lf_ zrI9RGjNk3J&+nLohK>qI-|7jOmNXR z2tU%cr9BS-?tsUh z`RQOFiX(*x3)OGCBnItB6PJZ1)gcTMwwP=4P(=l2mCrYm+K6C>te`U_2E*$Y-)^f7 zE|QXu&;3F zpQF4S-#bnNK6~5@wz%pN&_<8xTkj^im{=VB^OrN5Mkev{B(_?ar#4q`{ux=AD#$m> za887*_$1MLWoJtzgn}Gg+(i&c5!?(@Msr*U7>c zT+Af*AhZ=fKQ_Ym*@sRi$(Le^!gsc7ap8=eLB^tGFFmyYjg(>KeS9vtdV0J@PM}%S zYdo8az`bBwpPDAb5n>>WB)hKLYy!Cf!)uEsUjCwmnJPfK(E!{&MOwIlg7GLt(c{y z!HvR@z1rckpJD*XiE-+>^C^>08C~1e=l1 zsNIbE0*}ury1rdLPtqi!cmv`t+?D7+%I8#)fF=L)i)l7Yn2+o6Z}9_0i}~Ag79N_f ztm=yIFV|O%YZPwG5rp?z2NUjVtG03)4?QUAr4wkR*=hFjPYf59^2I5hDET?*#c z`04d&90qSYXdzL-kDi|0P;I@E_6L|n-}PG(QP8@d(nTRYsOdX3Ue00DZz$I zT(SL7>uB09R)c;#bdCDLCo=-E_9nk1y=2qWmhlZijf<#f`kty{IhI<}TO*cw$p{_2 z^jv_eY$!Rbfp>AYgTiU0o+ptRKVNW#oXR#nkWx30p(aM|p8_qHU=?pp-JUE?u3igxDCeP+EhkbAiZQtN zxB*z&>+%o-B?V=Bs@}$h9i?vH_j-4}9EJ5zH_yz1EhIy+qr(_>B3!|WKj%W8zi(9u zA8OKShFKxwS5ZOL`KZOWNT}Xl{d@6{NOq}ptyT>JI%K4f&6z7U4pBiwZWM(U3m-aY z%YN09jQ0VFa9kx42W7H`?vDztg5-j%I)h!+7{eA=OfOu@QSx5gLAOCV#JpJM3_GgWG!1&DhO|K+055Sg#Cef z&*tjK`BIAzV*rux566Q_S**U~qQ*@K%G&CgErG;BDhl+po0MNPA${uo?Y`8tQ9el)v-C@NMxc_Dp55UwkvsH8QoqCnsv`<35FBgixaafci)S(+ z$A*h6bTn~byxH(?#uL~OrF3yY@u(tku=9BOJy`SO*Uk6~HeGlSb!)OMd-2o#L88t- z#IZrD3fVN(JAO#<93#pkK1Wp)wnLjP&p{}LO1{WaR_JPwJ4QIy9Vdffwb=%k@^zS? zdqZTpwWu{QDaadm9lB0HClE@i}Y$uZpUm&SB8F;$3Y8X%JCBO_fNrx zqm|`be5EBlUnCE+L?VUO>8b0|G>fiKjN6`uEZLW-`B&-kr(gno`^23h#Y-d52Ad1( zqm`!%Bwke0oztnyk<8*kF`#_nQP{(>qwr{&88ZuFyBbguw}a(ghU} z@vr_N5q=#cW%Knt{HK7c7={-b8_J@MhgU^ox12%99Xm0-tXW%>YgIi~rKNaxB%b$r zZDOsBPBV6t<4ZyO#3$_gQp4+55PQ2+Bg>2W5xx5#Gy<5>2jOrf(T=cK`q8gIA`E)!d^;2x2P|nrrOs{0k=f-lMFPJe5U9P)7qRCWHxB)fo@g?;OU2I?=3PEUPFM645N;IhZuUWM*K2})! z&8>~Cx%#vzs%h0(Q!}yE(lno~7SfV_d&}ysz+wU7GoEYpe4l2%@af5RB{V4^B?+jl ztxsH%vE7bZ&X858ORVc1-5>;!9`unLffU+}iPtqNY2Q7O$;R7$|It~4`ZM268^WAQ zXjF{fdlp|+&#>$dBzB_)En#udIaDxXvxAZm4#Y@%D`r}9QK@fiMDj5#1`S7*1zDP# znfv4A^DwGzntQxq$lN@dQv8pBnG1w6xxBz`iqxB!2Ru=q7RX4qg~X@~r0FE_veE111v*6UCI~xFamQxy zA^F9M;dKWj=5Aw-G=;z@>0yGTESH1n)nv#!_-4z}#_)Q%Yl4vaUy`#>7vkkdclrhF zZyE4EHJg3iYVCZE#@Xm#EhH=S%v}w^%6=NqR*24@2_@?ojj=P5Ct1L% z?vSCSV>yjR1gTIFKO;>AEAU;}eO+uL7l*sP#h=Fgg~|jOU2ox*M3Ni$B%4bPPrywj z&>yZW8QY^}QjWe`&8*+IB{^>~!FccF0A;9l?qr&bc5pM;l1)`m@nl*Oq~gtvkANH#!OEni;AD0`W$LogUz4>wgX4n*!#=`wExr@ znxJmLOS5ueA5C@9O7jRve72ZKUH_1NSnJvnLv%z0dYK-I^C`PN?r3e5f4EQ}{5yb& zs+{o9`@ku2_^-??08w%2`J%Ld2uUK%D8AD5dH0en0v9Ub;N&niZg}#nn|ktSMpi-r z^vh%7ACvf7axYTi1D$!TYQe116HK7d@0$3SV{g3BG_4O)8QUH zcI!;Rw8%e~?%vhLHCv0qnO-Ts4X-Ze3gz83DpAv#dw$yo7PtQRu_Bk$1J}2^Qw##_ z#`|}%1{GD$Qz3uE?~j*xr28#Z_aVh0?6!l#&6e4S);pkSh&Q?@OX^)B%*pZi+jN@Y zL-#-05rn#t*`z4kPE&w%OH@$kp%=Kz-5;NdlcSFsk5XCGXks-_@XfPO+S(CP|GRjP zm_qcBs*(?F=Jsg2Hlm>v62UH6E|&~xsE7X!0?TZf(yBb*5z>Ww$|H?n_ursjt!uZ` zQNiIX%SY9~dcM91)JCuyk#5nq2?=VdLS0vjuAB|%i_a637cnU3tHK3*m~7&^f4ZG; z+QZQy_Q@zdJfJ1SK=z+7+LF&<9gozVH|kZLNH-ncJ%eIw5cG06n(PvLqTMu^J=4)g z-Igp;F+0B>6|BYc}BcHxn!*m62@N;Z{V91O*BwQ ze!`9KGP^Pz_~j5nJ${5`fBrnr8XfHxhL80%HHHm(%qm_spbQImwB)3&jV^GcdWddAqU9%P zU*{6lyWq^jHC;V1%P@#3+nJ_rhE(ez&J6cHTQ|RJ~Wrw>lz0nfnnb|qu+9Jj_Jl4SfR zd!?5A_A({p>o##OQik(BCu8*lsi)3xPvEzLe01h1q(>a&7q~4G%%zMV59aY~CQ?tT z%k*0#JpJ}BqEItp;Q^wEfek5)RyKygNLM8=Gep6P9FD)~CexY9_JvwV zM{Z6R`}u-jcrz-k`0%y=vX?IXwxTq?VneZju4f5nHtWDA+&)=gT(>hDNyYNeU8<25 zaQ8K@@3xsB!k7NC{c}$tsB7di7fu936PHF2o9oS&lT_eme?O=zbdWZ&Xd4cz~69@?*LCjn-^w|96F$bK?5I#)-Os!drs!}W_@RsSv!OVylfIw z$OMpj206cG6NJ*J*Uk+^AvI8@gktpL!RI>c59ff11h|Wv)~@tEa8y}~rm{Bl+YAo6 zq$_aWV^EI0#nIPQDiYrjF~`|x&;G$4dZV{9jiG?_VR}xW5RM3-Fp_TlOYnK_@O{hd z$jc9SDPqOo6#huc5=C%Zk=tq*3b zv}`B+CQWY2_L$l=>np0-R6K`ofxNEWAs9Joo9z82E#MN{qClSidJq$}K9Qvhr+KCd zgXl)L#E8DN!!R+Skn8SR(#|U#PL<;`cw*emFazDS21<<%&&{|K#`H^lB(FmhobFfI&52Y6D zo_Ms9NdfInqxCj9sh7`76!-+p`tN2)|Mr4hIWnQVb{c3-b{itmxJFpKCt7sv ztHbQ6%{Ll5l4}1<41*aSEXXHwA6kcQ6QSTE`u*Xg&G_C#BSURMl#b&8tPtK-(^a#cR zy=JFId(V##G8x=?^do?YqT1wJ_lJD?36`l(NJZ?Lftx#Rp43P|F~t0#awwn%?r!f< zoJ5u1FpsvMD)5m#Q`@(w(9bQb=ZRLh5Fy$8DlEc;03k)q>v+H^Byu1@p^3?cC5IF#9IEFAtXx z0Y-SJf0A20#OAmj7e8fd0Ifnr#DRv)!$#enBvW9pfXmB!iG7JPaM$D-r=@ON2?TPF zMwCjk_=Unzv|XxszHL&&k+9d!YJPRQHyQ}h)nM>6`qA8d=zg);IXLL|3PNXp8y*}@ zHWCJ^?G^%(IUmA~+3IhoN`sm9^YpGV+U-@lCWq)V|H@3g*cWR;9nRSSgKr zpTCFLZ*tr^Nd7%B216&hs4t?i!PY3>$hYfv>lclJV1(dJXZ*^>cHi+oLkXHs*k5b% z$%0?7KvFXo8f6(xfES`5bwr9%`_wH**qqyTBuO4>zH~I1?;o@#kLd*C6l*?(T8LgG z=^cmF1S+ZTZ&Bz9OrbKxlxSCq>t5$47d_!#7SG44u~_muXH*m3J(k^FKF=C0RBA~1 z_q9yxJ26*awNXp}evFaz(^i{>7TYDQO!%;vauA4<@AMRBlgym&e0#@4za7v>8v|K=P>cl8l6e(_m> zXxk=N*@MUpEy@qNDdhrj^qP8lra0{$4-Of(Cj@lL>%RiK`UL4imYYpiHyUbb{tG@H)ik4K@;0oPr`hMXr^^R|z66yR- z>p+&=LdUBF4!D8M+wGae+>$Q5Q*|HyvifE5<4%ulqdiSPz@?S!2?`-tqk1>tn(gRi zO}nFQ^=zQsJg~45^0?>`X~q>u&3M9AB@;y_5Q5|iAnUC){k;+WMqdvY&0og|V+A-A zCOi4~_vbSz-d{9*frSTi4f;r$A6O)4-Gi_cdfwbRO8rKFH99Q2{>RvOxEASMJfv!j z6E(|kXi!4l7~00_WJU9QsAsWKF@4qz`StYL#0`GcNcAim)c(cQI2o4|BzG_Roi> zA1peFYBRQ|5IYfG6cFi5I5oh5>ESs%u+B{TLrO*gaWsrLpM`HSuDVj>vj1|mk$kq`eHq$Y1(QJsyEZ$ddqR9X zeV8FRM7K`F08)@VSE9DF77w8K^;jAirg#iW`qd?!nl>0z6^zju5eY2f{V!P!15f3m znd}^P1-cDo+PHqr*bk3vC~>;+dODUq(e(9%@EDZK$%_fJsOQc;Iv|`CJPjOdK_uB~ zpDl$9pv*D^8vvB(`V||pguhyliR=~&c_G+_P&eE(2udqeFNw{JCAj!P?Cs8+D$jrkbE{6>>m2_A~aYkJqWD>-t!C#46xZn%X8 zJK2vCR5q%G#^Jx4>m7`)-T&;qS|_GR#P|Yqy)2dTVk`%3e+?cWZP0*IUY9-O^SoS- zKC(?dkilR-yzqVh%#_r~Iow~C)G&HQld1D`hm|RxFSTa=TElurshDzVgMry#(3=)(}CLRA8&WM0k-trfLh=>Z@@U9_~o|dhc#r4Gi@B9-N1#a97IG0fgn+0G;H)ut2*TydzStPMrr20QMX6 zacyH%I5@?hLeq3KJ5sI=`yLZ9XSQAbv;&+}WFPYA2B5~(=ULvD^-D0J?H2KAA|KW9 z9^h@aZ-nb@Co=ADSUQIe!B>+4ui~KnFDExGT&mr&{9J}z$BkI2on^#_{(K6Ebqkv& zHVmnJ5oH^kBHPm*mx^cv5(lwo=%f)jUe2dF<}8IZI4C)A~ofXbm)}TF;a1 z(yl8E%>h6VCF}Yjgy@y36}dcb!Cz8d_Gr?4mD`9X!2~m=0Avcq#yiUZ2h&#&x0Cky z*i?wLPQ6YNBfiwMRt<;$(#YbgmV~98N+`G|KtHil8QSLSF+a}_BB3sc_^sA`)f_J6lXsiYM$ezLEc{8Lzon+evyF?Z0jQ}wSItU zW**okslXyK+jE(A7N{a>4*s;25Sh z6(@f{;T$xXrNhT{%(O2vU;&T)teA`sCZWWrqS>OdUDR!4*4;I+N$qiopUQP0BxTWW zIbJisAPZn0#WTZ;j#^(g$4HaWT=yN0X6wrpuT+SanCHG&t37ZSP4)=6N`q>kH5ZUy z-Zh~&m7V=_HAOGl6^6CHqNV4G`dRKw+<4$9$8TM|di!i7X>Y;&Q=2cb1o&mU|M_uI z85Q@;^7*c2^j~4h{)CWn<@)e?``$c$Ei61j{ahHcs1|8KNxKO3OgoQ z0$3$8L~iic$V8UB$UzOGy^>o)N<)KJV?A5_U=W_3g++NKeAZXDKYXNwn@2#REo&C zK^-o`aWN+gDTJSa|3yoic?tPC#3gMv#eDKR22aIJj9y+{Lc3Sk0@R^;LJWp^L@a~a z-c$Hzyy0D=dlP|pGs_N%0Cwc1hk2P&P5A89CjSUBNeuWA5ZaJToArB14jC+^FbZk@ zKsbBIKaV?&Ke3!j*sK`hX4kN2f=ZvWlJOVA#Zo zTqWz}H_e_1bQzMY1tZ#QIYT|(D`?N>p@WwrLuSvuEv)FMe`Hpndc$53{b z*boKJOc&74oigP*cya^;H=eYf7dY@Ih$gbovWvR2<%V7H4cJ~&3Yi*-VU=VkW(%EV z^VL3{(y~1;od0HrVK~KOs50ydr;^=e$RVSBPN{_i?_=?g##X~}*jo_@)PtqENP-w~ zi!Z42p69-#^FtXeB+A1nN$5BKQm6xlX*Bt4Yq68rrL6+d z>FUzADqNbe?q4X92l|r*5|K=2r}t)J@0k0`$a~_ADY(p>JW5zi^d5PH&U-a1IZ~n| zcUvFvFYo9EfA4PhFJ1P%z9N6`G+!|5m-SQKjCR^HG!BVEzN20=JTJtVJv`>MAj{(CwuFkhY_s8$QVg+(&lv0R@v&3=>WIPR4IP5MKvLT{f=jfIjS z7k0I?=V^}LY4|%`kjrK2QfPALt8$>{=b~8J)SnNoKEFPx!loS3y`Ul95nc2=eXSln zJ@cgm{PkS-bQ{D18d}1-W^_SFW={$br@PL(2WIkx;w_W>;H_R#>t$?QLL=5b4K-0~ z3VrO0Wr&}z3ihJf#3%e7buo3-COPPfJz0Nmt>mJPTq0W3XVer2+wqoNL%^7)kUo07 z?>GmLnY<=eiF6*SdA1D*U!yPM)}HQZQ+K}fka+!oXc@DVNCGUJ*+Uq&#I?iq{#|Vl zisH26C(XsRezB0MU*i!pn_eq_@r1LPST2@1f}xI3=93bwkUWKGl|TaE2hxFMNtB1mis2Iyc%?ki<^d2M!;ONOVOqp3ZFkq9+~SGL~}pO;2BSUFE* z9?&XEc>1liF#G?|h=^_CSE0Dy>QxaCFb;ay#G|~o>c{j7JZk*nxE%$!a#GoY|GDiM z2z!Z=e`1S68KGm0z!~5AQtTqY&~w<;ACX4bBn<=#=Ih1bqm|w+pzU%Qv}gcleBPEr z;A^9`8k7(jGLpf}8wmmRd8zh{$rv6pd7>Y1*t*VFF5nQu5Yyl#EM-1MA_ThrH4ttP zwq}#x@eogDRN%7}iF(|euO#i2`14hhwUP+ODOQZ!w3*cklbYy!3Cri1k*HP}6YMrfRRD##Z&d(M|#0fH|cnF}@a zfUHM;%=v__>YKJ6e7QUFgH5thyUP{e92$dKQUH`Pg%-L+4wrt@}$yoP8onvl5It+e~=#O48% zOQ+Kgbj7tRk_k!jLkt2ROrkd0R-VEud~%ct92+3E-<=QGnQh}!`_{!M#KugH8A75T?JJl2I8GCg9hTY4U5{e=8k$ z3k(=MoMM1}J%lApuYMlSj)Lkr&R5lu4pB?gPX8A4n%4lpk);&$16CtEGFgjCkN0^h zF_oNOF_MSMQW%I%8b&BbdFZ<^T%RG8@pRfmjBH8J3;mmEpUK(BR22=)!s|70h@aDp zSj-DU#j*a(j-ACWfKp0KCaT;KoB#BHQt16MgodQZQGMvR;T3Ta70Jy@p;O2PI!jg6 z3QDQj92()55EGC7fv2`AeT-v`xsP8*_G2#>IEQn^d1+wd)Zj-ko|EA^!eN+W8K-fg zzjD=Pb_L70d7EJ%Int%I5V?$TFU!ZK`=3&=Pz<7uoMTQ&ug_gik9EPqO~{1bOt*$( zIJ{j(7Q(g=?3Illuo7_fOng@_%CzLpnlD4-Kpd)Y<$Y z8el7L_?6M+58F`7E<8RpwL`U@6CL-^a-kM8->jw1Z6oosFV{>@m->+U@DHS7R3WSI zk|X7mB@R&y3@yv$;@$rZf_+YkLI3|d6ZZchWQI3tn0-rI?$Q9{&A`k+*zD0SMG|Ke z2;$r=l)5*mmwxtpUE=yLsOI+-h^KWp89~WIB48dzZRh|;io9={pKct5AB^h5eLv^o z_uY_{_1hgsgUn4h*@%7kmV&&icX}Y-W>8yoR0-HmMP8qzm+M4%Q3Z2k`TjLs&a5=1 zJpyXj3j_=y;=g(0ckSC0E_6MCMj?Qd=y`svG1Yn~tdtuF_OUQHU4A~9TLIXwUiHsO z?@IsOYI^YEiN|ENf|dVsD29B#q;u*t94U|O!|VcXF#5Jhn0p}BvT-CJ8&AHx_8Y>t zd0cD)zzMJfxQ5|f<}fN$9~fK+QXv#EhmfVtplH{$`QC<0>8A-B@Zf*`92EQ;Ty`~w zgzYicA58yxyu{)5F1=7;HXPRU!l?gbfBHyk4AVW8 zPinimSZ}vtCmFtI5D>$&H$*;uxzv%R;U}T{?OO-?e-CUOT+&MI_x4OeQfbi9R_}S8 zpxYSPtl!K|W!L$fkK+Vp{4CU<;qzm)2_R$I{6rn+c1_MtSF*%|pVkNrDimT34c1yL zetq&hJ{Y9daj8)vMS52z$bSJWju7KP}E**4p-BM>|And28uZhD{(}=^N zK`rCp+Y^MGKuc;py-P^|CknN)SZT8hCZzC#tlHbg@oHCH{Nc@E#Fw6`p zm0kXsoX8sNe1DSxCh9bP#}V?14HB&uy{h(1`a7wVDFcoSIH<|q#3$3R*H!RbB>`7c8yaPJOk7B!{4R@{ z#S_c3CB!m{k-1V{la@};cYuVws@@^UU%(Q9f9J+xrTTKggI6?<|pPexn4@&t<0G$acr{#x!orrg=b=}6ZausN`k{@Pm z9u2c1yzA}H+se6g)<7Q{qT5)+)PQX7=)Bef!~zlOBeD<@JqO3fi;VgK+W??@@JmOv z0D%i#RkE%dm#e2p{Jop$)#hoKH~tWm)>_*o8~KzG{U2Blq(Ds3mPuo*z*KHgrG_d6 zNGsOX>NOMEEQA+rW{1F+%cZb1OmL^;GO{=AXiFroj}OLZ9Y11RI^xZf4(9e zzL6^)WJyEJ-V1$QEtJ(8eJ~i~PRM&P_AeLmR`6dDV#QX)rMP^0yD?zZ~@@6Xo4!=q|NNqEZbk##ZuWP#^kJc3}Gh#vFDxV%ji3n{3r z!}_zzv)u_Q)P*LHA@O#DEXrT+w}W3&vGw4;h)tjpk2w4rKAA2Al4V_m5gZnBJXh|{ z*@9@y-|LbuX@F!v3?f#Q#uL#dwJp7>1b+}FLVzsz@*+2K4RGfR`aX{X;$i7oMhGs; z4;GEF-1~3e-bQ;|)Pb6~95n8uz1q~#>duii`EoTntyP^m0NDg^Q9P8r9fRubE4YnQ z>eKMsztI!JK)8Rkf^Vxp!VFVjozE8xoG?AXJ%dzGe*+)rjl>5c(TfF{enmC8xb-27 zJT@H+-XY0TNHo=Zav&+M$$ZWGTj_G@Xsh=!6kLWJbMZzY_Dm}zQD?i_$eI4lup2!tXfLa@QURUOV zvmgdP2lM9MAB0BCuxIS z04u`g+eUf1Zs#kG#=yc>{QdqoFV0Qi@Ze^DApEC~a5F7Q!wG~V8Xk&iVs6jtYATN` z$jG8V!M4HTc3*Hi4V5$K^r)s+BH{fhVScrKJQpk(N|quO!|a^Vi3@g8vIA@H>t--f1kE66o|FL-^vHlVR0DZ!YN{E9>rhixN#@krPAz zk6J9~ghAu?#nn{)o)Buy1V~X%({An6AcL$r+^S3zax77 zhYT&|JieI}j^Hs#Zsyf%0%Q)y+qs!yi;z!Se}@MX{i=+_9T5t4fdIc;$WHx#HA=Kc zOc~fje}hiF^&4zI4#sdKoM(Z2j*D~jT3z_elPI(JABlNI_^Y!XMNQ2;3_%^{K9cfh zaUIARPWyESI~KmaCs6H$)CE_FkEv=vZ$PCL6b?jihpm2=G8CVG`IwmRv-ge45M^9lo#W|A)4> zjH)~NwncH*4Z+MkG%U z>}_}KzKHb?n>}}~c4STjjNY*^4D1nT18KKP-uw4eohElz&KIY9m7p=nnUc%c?C#34 zo9m^>#pNU6RXW@|dgVLNkc)qqC)mj9<+5F6bd)W`jO3x5LlRPN0{wn}Riw)CsVymP zy)VhVB-g_`FOUC(Bea!mTPltsIpDJgOkRB4yWUt|&sB+{i_254W8fN0eB3axKf3?B zmv!U6x~`P<1f8k={kG<8e4h$tKu1|q965SIdUuHrX}^Z3==GuEKMQQU8I~4D*%QH2 z*4P675eEaJC~`r>X9rB)M+T~TzSy8s?86r%EFZIb{&;{I*l}r^LeRJEG1I82qtmwA zvEcGD=i@&Rt#-82oadiyvMsWm#L`A4k_kN{*R;h>V7i7#embXtk$E^E> zCfGS%A-h8_*&LSuF}(F7@SV9fYls&_nDXm8d!v~u+e0iLMfS#a-%aWh&{?9!shz4o zCaDmCg8^7=+szJ;2q2U|wWH8t5|tI%;s{gQjkWKn_l;tvGBml^Pe!7|Bk1tFzu7F3 z@wWK^`esI_240sc>Cp78m^{~CTxgn{y~!{ctYNi&6Xe&dymsZ#`;D2cP#m& z&)@UijILn0WD;iNQQ^0xU`|7>1_W49+N*r8<3#yWz5_)7Ydp?sE(|1mSlC1Sp&i+S zAHxirZLZJLj%|Ng3`?WF`39 zgPa%4x^9Ld?~_V%^RX2l``1NSDR;pA~UA<~S51VfH=4n6o!f~UI&(Xd% zK3puhZVDBw_RGxyBfrYjV2A$zcEXPP2W!pUR5--gI$JBhb?9t?WKK^QF9ympYd}Yh zmm38CJsx`2Q#DgP7$nvvsE{Ty_5Cj(<#T#Mi=@xxl09;erWEIFX7G6b6iyVlC$lo= z4&6I%Uuc##fLxfVDDZr(uV^~9&Z@RlPk@Q6W+9$_xYS~NqWAACVD}RT64Z1v_)kFk zH`I=ZZ`|c01+uM>?i2%U~W#|0%s%QLcaKAU)hU9^h^y-Ni_`Q0w2K;&t~Hw|bnT zlmd2ft;L&<9j*;waqep7#+NF>xiqWv53#^Ai-D0_c=&rEC_Qs&nFAlnbpZ=%S zapQh1+oLZ<8kVRgFPq=AvvQ?=IjtW0O^wqzshpGExw0Qmt+2$M8l3NDx4^F^_^V{P z`*`*8X9e3Nh3;LRpvPBLWZk+Z=d}>aIe2cj+tu(-%RZ87Z>X2kuEAuD>l({invhbI zP4vD@DhHPde52+r=y*A$FIF@NJIi_<50=natfNr1zC-5 zvRp0S&f9L^YuM6x?@N}aL}kn>_Ef4#rkA!1r7`jcGiuVy_uN0F&v}@%pm=_&4w0Lrz$DVexOi@q`XQuvdUQ<`gXK@Lt{W2sD|f z@;K-GS$@>|U2&Xxg;_WVTLVr}El>}O$?R;-56msV3q9DLvJ=vr8>PKCPQ2;1uX%yc* zt&HKN>Ci7ke89%+zh0khF%Br*)vJjPmYsic+yX^r>KLduC7+s z371W6?B!-A5?f2a8%)|n=hP4W`vw4Yp@uO%ed22r$!jfoA~4?R=`S(B!!wLHtp?+) zLO8){22l?|pFXks|Lz~i4xF7tJ$v3CP3(Ly$2;G=Hkvh@#sQjd#~&UZ8qWL!ZZD6p zDMjuE5@;(8IvVJGMaYCa947L`+uPe4oS#z&du^<(al8I`Gw*qfgM-8Ad*fnZVKIL# z+H<(rqT6VhksQodf#-6>ZiT8HJXJA zp$qs9cgA&FbS|03u79}DY@&ckF(X2BQt&jE=kHJ|K89j8KbP0}&f(!9_?7JMThm4T zA2fkOm6=we+L%Z=5@VuVw=t8~Mp}M*EC-v6Uu>w&`|{@EAWPWWE&M(wY$Tn_z{>RyMmGPM0~xvLr_oFp^vNKlshk4k(stvd%|D-91o;dNUgJ+T%kH@FK!~VQ*BXookQzI=I$3wjH)H3@xTnn{TXmftGi6*&rljU{g==Ce=bFi=L@J<@)xavjSS zh@%j;7Q~k097lh~(%Ud*hyL~Vg5HA$m5*F1YergH+QA*=3izrS+-8}4_PM@1+WV^d zryGObfB(D|{ZXck*8nEJlpHu6!`QqM5SUdC3J1)BIx~C1!9rBZ^LL+B@*WnNoyl%* zZyT+qLAzlcx7f4inq-`YFg}q`)goz3b+GX?YfJ~9zpKb^^?!W8Am%R9K1*As>_KFG z`|VA$)28iqS10%eXB&f(goDgTFYFeyVhP#xBBrG&hjuNxmfF0H#9ImGuMJ>T7?ra< zW~z+9;=#AYY*)MNs?U3J2DtNs)EJSsZaZ58nxf>UPP~amN3-~btqfNtdZV7%fQRQa z)bzq?N-Fjl);}i;AuCSMWe28>UM|tJHv;!*)#e)QRgAyADcKs!dCpAs1Dpe^>CdXX z8nO6S{O*SfRaZ0BCcn#dWzeW`p`?6vbz2@ho~Nc-Nx`%-v8w2^fba9}7Ezy(i!?_u zW{MZfjxJVZezpHiL`38l+=JBLKRA%|3v>H&}6RRgF>>3+KdWQ57%n@@p3RS_6o$Q-fmIn zDkUKCmzq7JHuzBtKq|Z`}G#7v+CX5-DjmN2J^d%d3&wbR$Kg2 zF)#9{sS^CmpMUW=t>KmVNKpR1&Fj3ivXUcPJWj1By-VwS?{{3GESLQq7}z19a^7)& zp&L7!s2YLC7~9+@ImJnX#4ji)>UAE0@5K-JB1n>_mlxQmxvLF-NDMX44;Qm4f(v)( zlP8I}O$UnQlB!IHl9_kJ?8%%{Qk~?_FBaXGCrPhQH%-bSx2xh&YD}Q9SuZ~nBJ5gs zI;_`Epe8dgGbrc0dd<_^+o|8?m4d$j*Da&|)n@XkC$2J`FDjMCKh+gMbiMudN z(&Q!D$}iPS{$7MGm$Z;>utyEso12?g$+_99xUHkHrX$4}6WppZEwK!13JlrCkr))a zf)K$n53Nio3YE*JuuLj|>2zHf3*u+hp{1pzWj3}TjHS{&bo?6u!}P%xR0s3-tbcw( zJ*nyjvkJ%j68P-jyIHH7kLT()g85oj9=N%w*I>q5rm1e3e#^@@(6PP;S)pF8Hwg?% znP3WHt!FiQm0Uv3L85A8dA6^>`&JJo$-sTAea+WV_yssFGrXK~mbzjg2`{YFZL4xR z5J{O<@mroX4~$)ii%GxwU}OP(Gga~lEa#7IF7}QIQg6NUoyl21x*g@x%3!^85p%9F zAJqXzcfQeH14Wn9N3kLrwAE!Tw|NtC_dI~$)gxJ~0q4^9r|4&K5BvS?rA3wrEglcT z1ZkENh~tr#yT}snwPGR&Y}Wf@6vib7t7siD!U{$-2O2(d-(v)JSu;>d+S=y7q5i_a zgsI7}*2|(3XhR>}*KS*_#k38j^el%6litT3cvA|oFOK(wOm_1PXHzk^|p zQZCY$fT=Yfby``s`CY+fL}zOpT%l9X@*!D49PTuq=45gBCkR0hQOY=tllke@tCw5!ISR?B|I7I$Wru`(0!PV?8Dt34}+c8VEtftI4c_<&)6F!R&Qya@s^o=}sUDo7H%*$1s=~vgZ9u2aFBu?cnQn*pE@OLyEVer4(3r$Q@m;Iec-!ZVqER_z+#f-C3o)fUsjfCaxdY4;TfmEMO&EMKB^f917AQbNn?bSC$c;!Yh?rp^!Me(3u%e`kbp2UwM9y;Z!#8 ztHCgn7Ckt!+K#H_*|BA~tU>xq_yT19tb^d3LXd{jsVhr6M{VWy-N|Y%tCPB|r7|3X z7g&l1je5f9^|sPSNstnu=3D(rCbPpc_X6fn(?>`UD-cLX2^=v3$!{lXEyiW(UWQ6- zR+I&7%9)Jf>nIJ*z!(Aatw~136lfQCN=<=ZT>7p;Pp-}X?j(E=%Cw?e_3qU|7(HAM z=Y^&~sHGJm@(h`Plj((TEUMNno)CPj5eLz4)%u%P=WP80%;bH_Y}m{*mNO9? zc+Qqg`^6B%LyShL&a0d<{H?4XV=RWzvKCl8_balRIHrmQT$^RhF;K}e^mAe}qJ-*r zmpQDB^!I&4p9!AhlBW_yN*(i4j-XBAiiP7)BV)YsVP!|8Rpv{~>DKt7%%)`iea)1} zv&>!aSmTquI~b7@q2R2@xi=7jP4~s4tqBFPv+gia{UYhDip-!AqNXK?TO(t49YLqn z@|+uzS45&|_p!XJmr1Lf1fu9Eyv#lrgG!k%P;a{4GNyy}=Wgi!ilT&D%wmf>9)C?` z^|%uT53bR0j&3uuf{$1r0C*PuMve5*w2M_MqofzyFA>v`$c@q62qf^D5ws2*%I}p~ zI-gKi7T?g!7)tsK4K>?-a(SLqREnUj6wkf^nFbXd+rETeceSmj7MLQGP^-TtY^YM9 z*F4i|y1d#1a%+wD^eeH0fXy2*`b{nrl}7A;B(@bj4JlOLF=NcF%;NC%uR*x_lX9$ za7C{sNx|kwE~Ay=ejJ8$;u-s{7E=hiv6}Qp10=u6@-bH8_}y1T@~hnFGV)&xcv@kk zqA&&%4}QFcD?6Uwc7BzUDp4&!2lEk5cx7TpQW%s-?uc$+v$U&RXm^jfdZ-nmFVriq zG2RDYM=3D!ASbiDje5qy0Tq8dJ~^0goPDlUi$VNz(zQ%GHE!q8;Gg^lB8_4^tU?UA zAc0KNhxrDaKLDy@QHm&Lv-pgh60jK0;%Unl9-jcPsQtCfjX>14tD!mCL}9@V zrmb3A%!ICHa}c?DL*(1;+_acHfk-N{{r=SiTlq>lX4)?>Fn7mxXkTzfvU*<-vNDBA z#C%IzZwT|Lnz9;O-Y~>{trL1osr#~p6Bk2QXz~n{J`N-+Cea0ZGtWytSxy$>1KKDV z`?=upNfM*VvB${7uaMrREe){-zg9FP{EAN*6GV}{Ll^|>a9v`LA<>1=SY;EX?>GeX zYt1qB*#s;3jikcKkYnR^>A&h+r5_gZ&D3uu!gIoiBzdziPzlKQb5!T(=83FW%c`PR zg%BIJx7T@`tO1RR8y@w6Q{>7AV=>Cf5EKxV4y)ZBu604_DYzD=@yf{D>If}A`Vh=b zGmfLVnH9}_@Ub>x(G9J{K7op8Qq>QP}+|kWg^?25Va)qb(TDA?O%^x3UJ05OIn<0;tIEg;l zg(dWICJND+saJo=IZAxApVEM}fvV#cT}<(*&B=iGM5^&>%aYvjHxYUH`k7 zl~YG%4wp`y<&+j|vZN3rU(#+izvJ43ci?sUhfLwj4+#W=7K*baY7DP0RAEo_LQrt& zzJd-$+Y^LKBC!`7k;Gc}6P}F18V`Y?m+ilH>Bn&dU>}+lV&|$6Uz|z~p z)z({AX3!x51=kWck;*8-`rL_LDf11`mJcTce5A*-d@!mOS`9t~aixf5 zn9#h*7P#Gp!cfL4o8)q0rdKG+Zeb^bF&bA|snnRDHv7bzRPD0_&=#Sv$>XnQ zU4tEA1GDYgU*m~Mky~1AgAkDSHEeZl`BGjefY!%`>+AD7;_59-4ltCpMP2o_d&K}dG}tefQ69>lSG;NvJmJnUM(4Hb3QYl$9I(d(wY*ZAK&UK^qgotHHc0N8n`JPYf z$ySoDQsW~!P@Fa3o(D~uR=`Ok&}L*ewJH+%!~#Z#rwwpaBlz9!)Phtr7G=yyauOLt zgURL(1J9Q)It_X~x;0{vvB(Cv%s;xL$nnseHghi^raFI;Pf1@=WH~#7UQG{zsb!bl z2=L(?-RgaD#XQA&U_alX{LJNf?;U&c(gyF5T!ov4md6Mxvnak`LS~*SiEWYk?;8v?NqR?KS{Jy>i>vxJA+N@v}t z!bkMPx$A=6|I)1s^FT{rp};RMv`YIBK1U8|L(DO1jnYN|$69Mi<4LGIqQr+#edwPuHM`C#CPiu}veACX{o# zFkXNY2wSv5e>-jE!FEMgv zB{N0eYVxqcv+AmSc8>~@BxZ7TxN?#7*_h}Bj}cSg6sOkGfke1;iNBwI#N!mrz~yYZc5oY zWGp<95FfNVz)6y2+2Og2iG8#g{sclbw{W`Oi1X*Vru4c5E2`N8acm8a^@tKyCTqf2 zi*L>>JlTcE@V$m;X?!mqmY?=lv12mE2QO^b2hY22cos2g#N3Wbj|mF8e{*umeI8SN z%?Zmz_|oCuoaV)%JZ;qa1LGj*cZNB8LP7hX^Vb6&Z!sOASOn5#0iTl%0-ex$P^qyA9J z#l!c$;~5T{v#vs+G{F}n=BNv=>pwrg?(TI^w(bmJin3!8wG_%Haana7!1KA^ni)l7 zeCQur*xB=cgs!r$n}2BEb#8PEA4H7|w!@rLnBAEAB zQz5A#m_qDJIvw|>Uz10p39HD5-d$ry{TDGWLQHwP>^WmHu;$S$DA^yb;uWeg4Uum+ zIf1!q+P+7Q(_ds~GjR9lQEp7*Fd%>B#|4Ibr_uZum49{a<8$1!U4TbOe#QT`I`_ey zqHMvZY4_R`2-o zG7nI!`(mQopEy?!4i-E7{cn$6s`;?{@KZ9{Kp4!! z=(pAEbBroFyAX-trH)IIE%oZYO0L=l`w3T_UrzTiQxHDu2{WC_Rra><796=W+kAt$ zznikhR~~Ph(Q6kjnLLgy*{ntZOE0BWN@0WyN` z-Bop5oXXKso0&9PKk&E#1jq=82_R+cOcb!`)WzFVz<@H1T)?T=XBlOd^o6Brxejks zVIincv57bXOfW0~)nBet&wn^mO{+T&sDA=>y{kVzOO>)-{ymug&59XK!W+e%C+hD9 zKE)4=;++gs7?529W#cFZBdW;C4**7cfFZlzt4@t3_x))^t+EZxI5~+N@ds2v@#TYJaq($3PZ4u+yG->ON%$q z8bn>F@Tmi_w@nf}{zh|L;=JS)Nn4nKoE==g>6zfNCV@0ooO~y+E*`c>>nJg6p);tk zO8tCFnYMCr0un2=EKL=_l_{V^Gnv6hvzo2h~E+^w)bQ$3m&2oK(}P_gL|Q0+vD{otd9 z8y!(kx5rgzE(RKr{h6$Pl|^=47}$_0c0vIOuAIV>a__F=i*T$Dp_9eA(uGK(V7LIS zVQl7}qyj!77t~vJf~XV@HgokhP{k*uWru4EhSm-&VHbcU z*01rbnE>akXOI4&mXIfZQcn(AZLqA^88L-^|W4E#n;O)>Q zE!t2jo5G5Mkh~U5hBzZW{qm{|-RKGP9ySR9o6e8BIa6<(Oi9#>ojk`qE;vc)S`$^luA5C<>(gG3Oxapy*S1o@Z%EGrXsq@+i^&vKqbs36yt5AB6_R@ zo>9b@T<<&CWG37tq*W43pNsvBj8d<^e@sH_L8Ko(hm}IsawN- z?BZOnVu}NV%3KV9-08uD;ltfEI6m~%GI115go!99myscWb(UBqlD29<|8;~RlP7hS z76+?oL>jr(sHV>0_Y9Y12n-~5zY>QNa|H|g*=?UXI@r!E0^EP0NWBq6uCJ$Oi5o5P zh$oiBZ`_OG0v`W#lcNdqZ1f`>92}80WVaL){_Cq;AC6OH6DqYYE-s|=G)^-qrGWn< ziq06RKV1}b-tZ+@MZ#SSyes1&I|pNu?@`;WoW^s74>~S!MGco)J@t&Y9OP$4BL?1? zbHfuGmnh^Ss`5W9L-s0_7FyinU{jW(mRj67njH|-Qt@HwCkW8&r;1T8W|s90nj8u+ z2r8(*lqDq6D@aE|=$*Gl^jqBe{`MMPAG)9&feLxV!n|8W^j-=LTE@y1hm}yt-{!ja z3+S3emft@C%>jeva9?$AJj&4d_TpglXyDD=@IQhQ$aCHv9>pqoxjEf#cK6THKxsDX zPt6uc;>d!(dF(p0Pq@Dl($H|mXV0QpHXs5=S!+>^TkA;3td1ZN%DZ`qpd?~WnZSBs zD5#J~7wIEj9YAzxf1Mr*<6a}UJ(vW&%Ulb?ByD)oqzWX!E^unHU-<57lN}76XLV)u z<)FJZ-eh+^5vp&^Ulky00-f+hfkB6#6ExQ@@W?9Rt`iBP*Sh$tYyyoMRtryoXlv-_ zW5;MPcQjtP$Q!7^Dl1qelB77#M&ujCgy$Z<#69)aYJgW zlls@%L8QP{4i$bM}__FMG5O(pGjrPmt+!Hu1{6J#D(l@OgM|0}RK}5qB z3!Ib#VI17ou|cRxWVuVGV>E2IX(EkgW46D891FC-k6+#vNFas<7aA&!nEzPek*)&e zpQSOjMr^^VmLF57vWd&cQ6&-(`HElTN5F?G$RH107II!z#V}xy@yGuSk_5pL@g|U< ztMZ44^OhohZX^JQ z_OFnm$)^Lb(k#TH{3(H#qAT9NA9{@GNIlQDF~soNHc%Pp^s@%GB=)eBwTbq3ivfphvLRk%>f@v_9)Y5(}LIgrW z$QG6XKO(Ng`2KI3@{X@@9T1N9LJ{%N=086YuoX)GF&mC0V9WGe@1iiJuEEcR0ku^( zV?Z%#5NbCa?nUSuA0Hng-tX@qvt>pavYCI3`=gmv@-L5;<4Us1J09q$2u!P1NCoIq zKgH}nxS){Hb~MQ8QXws%#1_zBzcv-)glZ{-i+#o6X>&i{Q43S?-bJQR= z-(*vUO(4w7$c{!RNEQRn{Pg@hWN^o`^gAZlzEI91y4DP{7))hl> zoeP!cdiwf~SsTCUkTHl{%kQPHTuQEsIF$}kOgd>bI6zHas%!ZN!9|RuO<3xA- zx7eT;0sJTW4s(XS<|Mun#ltJy>?2~6MpK{=OQohlu<(`hh#6&y$2GeXV$!s;U%6LZ zUx&t7A=-s6WEyK~pqoHn3}^5#1~#=0iN#7I%l93&;*7*a^@F5p@Q)S~ z7>hs($Ra|NX^m;s>^8dnFe3JVFyM!H9ki?S%Zv<#;*p(QbanM2&}b5 zlU4g&H-Zww8XXS4FUgv^HU z*>MAB*|nC*X^laL&A)SexP6~tN{gnqx~MhdsJb-HH~qN z_UhL7heUfGH(po$T3lS*Fj>I&NG@Da@Ji%QAM3sC3dS`XihTC`SH5`gMAxlRKC?fF zvErU`S48<3jg#JFJn$Le>6p!H zoZ@wbJitc+RJU|K9RwG+AE6?%8J`qWK>9=b9RzOoo60+;nTFpoiI6k>Hl1`jJ?0=( zXD!->IHHmoE!0KNVIqGQ^Ssk`HJzeor9|TkMB0R{yk|ZhItUXBrTc6Kz=Z$9wFO3g zb@q_1H_$s@{6_pB4t$!p$6R(e8v0YKCaDnVnuufgToGTE-G76$%KaS?jV_)$!`}b3Sv?oolXM7~)R6Dn#nc;vR5i zN8h~Rea1Ywpj#)@X&UreYW`4YVpStah=QjC$vR^tPSg4B{&E?w*eSZ}n5%^}@&~Wm zzE+d`;U=1Rg+T|!P4exy?Q9j+D@(WCDSCdN=uOU1P*FrOZ>9>)b7eF7uu@@t1Vc!D z8=x3+U>1;-$KSX?1p zkRFgILKZ(Okv7wHns@v9pvPv2y6~H+pDu%8p^v~mGKlW~kt6iE80n@+FCeFk|9RBqT1<+>qmfdA|8C;tHoxH%>?w z0*o>}!Bg}jCD6^KgP>LA;L76CDdh^yrk;&v0smRerLfOcJR1i9lIvv62s`~eA9#J|RFWBtT3l*o)>5@qY4U&UW?es5hI6LF+tXrM8vDBz;3VVoF1G&if-JB@1 zP$&ok^>C!Y$=G!`-<38eVGr5}axcMpL_#AR2e&{b*5Mb{lUTyvOK-2Y=f?ws6A%r$ z-bZtE(VwZhL`-IoUR;*KViNN^bs^gDoeo@Z(n#0~_+y4KSV%@iOzkaSG}zSaVmM`vV7GFIJu z11=FAjF_hNzdhfTyZ}a-waxTgrdKY4Sd_82^gPecp~a$v|9C1Xf!GXgzpErrhE(~2 zBWuBPh@IVizZS`bv+^p6u8z^FD7M+CbQj}mM(=r>A#rbdIIK%dbad2Rx`g}86*;(kASoA^EO9Ra){$X0iOf(p z`-K%Gv`n`Vi*}QlV>GaoDSJS&TeI6houB^nGjf$)rpo&>_%}1s)FEG-Sj32(XqHl3 zVo%Rh&V6;0t)cbrM=*BbQRQqmY))VX_LmL8&>mUAU|Hgg&$`-_yJl% z6AGJ%FPo_vr+3Oid@rUz|GU-m%(N_nqRFlp2MzC00AV6P!XaHXfL4tvG^#2)k`B#< zTr+{`3qv|lFVu-oODv`?0wjP8o&fg5i?t9gi{esh2_!X|ciyUS!py$iL`K2aM4|A+ zN&%I$kym6yDvbj|7EWvHL*KeaH;E8S3t@HmK-#M@$ql*1AVZg-IEVQTN4uE}myvWq zd9Hq!^>1MX2)*YHRNvhWbjq~2lH8v~si6F8n>F%X<^&gBV%di?t^20f z5bU4Rtp7#-T&xsrTtb5gjfv5LSQS4sZ!T}HgM$kc zH9vqB097qfa3$J_eCn9kZ=}({Z*R&Oh^?EF{f8KlehF*$(#-|n3YQSrJzB>&X!bqQt zp8QX|)Gj#wb@Xk7Aj2`M7eD!aL443@u$={H7Z{pnE11ER!tbK6S52Nrrdsp=`J?n$ z&BIr}!@D;T`B5}hkAxlQJ!^o+_G-w_fLGhnLgR{PXzwd&ceD-Z(But~YL+J$r1+xT z>ry`Sf+VM7jw3a_o;&pcwsh_?%OX-AsuNUiN^959KY>a@^o8Xy=*f}l`p2|dD?2;; zrR|KNg4dZj_@aQMpdpW{2j3I~m(g6|+qJ%rpsH^J{24qlmXO!^fSVH7L+$E-fMB#D z6ZtTlpz(Vd%LB$nr@bVn-E>(m#Sbl|$?@t3+h?{J$CdQ$hoan$(OEd{{^3Q>zRxDS zb4nrKip*_q&#qFEwm#I-S>p>x?!DEGrQ|=9^H{V=M<*lWc(*<1Z@bOHby*W5GyH-= z*lz1{J8i1w2Z4uVXg#33J@wn#tcR;9WjJ!U{ad<*PWBj?kM9@EZoRPGtNTW=+`joZ zp}wSa2TUt?9Dp?d{@?(%-O(&SK5m0vaKOa^DkdR$Fo}_n1>BtnWF6oyeG37$+8f!hnve0;VuRnjpeYAZXF zMS%O&E!AX;1%6u!92`Tor*q#9aWx3)p`&-Tl8B0wD=U+-09_L+P?bZISWek z6Mba1)=lq5pQ6b@G}rBw>$9{m8|=4V`GN+n8XoU+kcHK^_U3?o09DBy)oa~r@#@)g z%RJpVncfmM2M;O*C_ZVG?=f?m<|2ku;vNyfV)euVmggHl6`^R)l=DQChQN)spa`D> z)&wDNgGf{HNVWhEFi-`vXepKV(=a(?EyqznDF+Pka(ZwL?`17NA@5I@S+fGkV>nj8T z%pi9MjmyeeFUt+Pf&h&}{|TgM92Quv6X4LY1?1j`(wi*6#TR()PJP0qm45R6?YIHz z8Em!ibOCnV2HRjH%=A>z$2;e02T2fv8Nd3R*(JHTunv>rM{bqkMqdsZ%a zb${iuTYU4{d-jUoPJeC18=Hc3JPz+gM0WM4y>sKCYg;^(!EX(U-xxR8k&P{HgOagV z*WnP+JUl<)@au+}$rhq`+$hr9EK{ei*yPXGPF;P_XKAeM&DI50iUwe7pm823VBw z9KrDJ*;)&50Gl0FC1M{_<08Mw#FEJsc69isvT6e|s^`hE#e4x&l+AyR5Q+~KP;{(Y zUvIuyhO~XAmn)i8xXeB~Rn~94yjEDsa?h*y>8D<=xjy`oBB$ka9JEcXZS8M3p8Sdp zKKwGSpVwkrNpBPk_tU@G`ADr}a=5hdq1?Lku7JH?|p>uJaC5U*Id6rwYC9#dcn?Q$cRJ6a zQ2Z?wB_+B;4GbWC|IU|h|1K$x!{AJ}adBmR#LN$zfXM*I=Nl=uFQ~5=Rq|SLzvFXw z%d~0VAIVi+KN;kt+H!Mqfpxm7&zP9Y7$M2}$ycjhdF6fwpDeM=#o%0k;LA7@Ln->eppqs@R zgVJIk-Ux(lGSI%%M;Hh;TCq|$y}f!#UnT4%1-Zzs>;8F4mWVsrPa=qj+`9c4W)n8xL;6p+7e+EcT&(n=&=WX_P6=bv2_E+g*%^>Sq-dtVb z1mQ_LM{{R(Pyc66z#qM1v{FpgtGk%6{=o3&gK*bXvcug?|D^@Jb#mj-c<~#XGt#uv zx8(RNuX$cbezDaoT#CqkhD<^{nA?Ply!?wa5DTsz?^Igxca&32$`Qw=4mcC_b2@Brfm-pE=+tA4CXQiN3_rYkrVi`@yTOu7$V$ ztDc_b!eF6`Ic;RWxYsW$2fisAe~5aCw|1b!xB5=$2dDC{3!WVJJeLjvj_{?j2X}zV zo|@mH;v^@0$ari7*W1{3jyq^i{(NGa+-`V;Uzg)KXFaJN>Y$zc7MD@-pH8`m{Og&k z8@59Ay)>iycXaRDRGBl)pD&AQ7aU689pKA~({Iq}eM*@ArOO!o4`fCF2pnKKkcig2 zriOnWO!>%a2pwt>Q4E{2ae?t8qYm)g8~eKddh-~0FmYt#O|QYrais`!bZj^2*vRp}FkW{&d`Ihuvh#E*cU}%S>NNjdN$_aBC0_K}H7^nuG8!qc< z_5buKN`O8^gElYU{d2SRG&~irlCMNg=iTM=?&beaqvA|v1z3Bu(6wbr9G|G|M@gIBCfeyl3V(k=YW=@+i`8WHua(bb##cE$hH zF!v&9eoJzj9EExA>Q8_0f3Lp!9~ESj!_fZmwU-TYH4L%ulvW{`SdlCS+5gpM2?`Uf z0j=01#~VBOhTm_loiH42CZt4X1?#gNjMs z_?QbwNr37{&Rbkv2liDkp5p$gz@Y<~s&5Vc8f2=k#Ph5=zQ?IYixBXPIp!;^_f9N? z?frD^LsH^M!{v?M29x0NMkiK}j`X$o-XF>+{?3g40?1Z?7b=$PDuy*mEvv`RTK$PJk~0 z$aY;ix>H$v0KwL1v4SK_@6tez2oEAtrTV8RQ!CJ58iqlv3ED4ujNIq^Ku}VH_n&9S z_q*OCWMpK#)q}fjCCmCk2FzBB;z0;=u^l-;ox4UpOAVl%&>V1D2v) zg^QSs0;Tw)1kWquG%_EJ{yhB#qjaG4k7Q=t)P@!wn)o37Pox= zPQa>F1=@Vl9d{qvm`*{q= zC0q{x5|M$HP9!tK{&orq3edUQtI_px3hX-1qa|TmT2o+U5sH;~+Qe;b%*_C53pi~s zsTZT5nU-l)7vh7ITM8g_(o?6i5APL@i1HM_&z~*PXuUrN-W-mBcB#F;kb8~|_UF{5 z8Z-Ib_b%=&oPGI@TejBk;3yjQc?6wj{n%}=7tfnDzHY^1gnoyPFPi1;g%*8b-)1>8 ziD|&IM;7`z?dTMwm(zG8*s}cB=lZjW@^^zapG6MeRSMKIms!^xvXPv|k+^z6<%^D6 zhlOZNu9~{Mwq8z`ZP-h_<%^O9>%04Kl?Sc%aY(KC=P6O71@Agg&#YH8ojS?_n^Afv z)*qUI+MJHiv^2tA_&qUKP#J(emXg|9o?Y;pV{oV?z(bMac>4{17d)+1euH+OV@%Vn zt*um`<^dy1OHCEJ#LT0qPw2_5UVp7oNbP9>3aW#P6?NMu`T{ubUReU>eBGUK;2F6G zB{(ph_5BXSUSCJq)rrY#yUzYy9>Qu_L-Fy| z={h1F=c3S&utO>9oH9Di%1n4^+Q#56DIURj~LjXc<127;sjf4cRX1@F|q!{eGngUK` z(o(rD-+($wVm?k{@O(Z!zZD?A>AK}WL!A@GE@+B%>x+6u=I!MrU)*Fm2uVlH+yJqA zs5cpS00Jd|aPNJ9dAB!bo__Y8w~S*pJBQ@rbMP zA->S5bQ029Ayu|Z2vGrn3^O@V#5ti(DN!V;*n*wa34(=At4J|(e=N{udr0qc#y^e@nI72c~Kl`{%Ui9L~5GFM0*M!rCGi@OE z+RLZOT?@PbibKB%E^$QLcTgV)DDCA*hn{;`Fg)^s5e2Oac2@A_CrC2Y!M^l|u2tmS zp4fCp)I+c+vS<|1Y01!(V5xNM&O&aT0fOX^z2iW1OM(XmMh0m?)TfZDDxp^5-<%FE z(2~Fs{`kf>eR0bre45r99J*_S%4GC%H|oLa+ZObXW*Mx9G+`t%dUxuHBEhkDuc77T z-vIaGH|^pskLm>zK0_WV*=&uDH9b4i878s+dRC@q=M*I9&Axoss(W9BCv+#?`j1VD z?^BttKc2_0-RE6L&M$a8mi9q2x))r#?wNEn)X}OrJzJ3ZT79O!U3;0aP6$tE?~+#f z7;U&?Ur8+`RAul$77K-knDpFgnw@#XlUy5m_V3HiwkNm6Wg6)Wb-Lxf)>dT6MA2rS&<-Vk{&q_1&T z$OK-+Zvq)Z&!4B7O}ec+S?k^SUB70Fv*owMTS_lF+3>bT7Y>6ae;Djs+}zCn zb5r6#GT??Jejj&b|0o3O2N|#aN6F*LM>>uL9*dbAODnmpjTxrH>oGn`Ng_!_dT!-B zk4E?77FRv%T*jyM3Hz0_zKupvT&OHq^Qn(zQb}nT49Kb#g+igvD|h3?+%tRMaQDV^ zGphgzmZ=+s9Uo(RC{x0 ze-yZozi|W9O!Xc~*bG7BoHO9L?UuaG!AY=zZ^T0>5rsj*(U8!9FQ z7#O;vAH~_&`{CZ7GMzT$>P`@fku1kAqGOvQ{|QS9B$oC7G=j5Iw?Gdqz`O1$L&Yy} z0aOXlg-j^%cn71|P@hmv)_Ect*q*1LN2N&EOadwaT2A$c@`n*>MZ$nI z&dz`T$VM1an@;|4+(Ce$0SmppoEV??HzBh73nwj5(=MK#o*k{b5AJ{MiQ{9B;cw9h zAY)IwTGU9c7B!8CKe7}i%%huInEAUg)go+ThZ(<>jhcO91br|>ST@YuBufL#h( zG(yZ6VsJ@?CH}LzDK-#9{qKze)+@xC`zc#;f!|^mpoxF$90JBLqmpi>{D3d-3%R>? zl@h%qVAF5>dq?`_n7iaL{^i1W#*C4bG)mZW{)6bOA!~qc-CN7q*hxSw%wsYR1+V5+ zfRs6cvI^*f@V2GK6BEYjsb>Oa`@@0E2fwK`AfZ#npiacOxfNWlUL_Mm2qIR~ zc%xX29G}mGk)O+;^3~mE=VAuwT%rsQ`$cp%x|NN8%qggluE*w9+d7XNE!oUGrJO4< zrsGsh=LIjn{qon%Hq+H&kI^de;=(f2W~X||Z;Wq56o}OD9cnkP`#X`a;`OR!@mAa{u#qfu}V7e&+pq=zhBisr10ZnU_6+Riq(4gfoq$S z7i^31+1EqZwaS0dM+RgiqX-4&)jMwhod%eCcWdjx)=gt47Mg^e`6uP?6+cVj()rji zJz4WpDfF(KBW#^(zSc2EKKuN$-1|SVDc6?6z0Qg0AE^Ra&V!5(4SUlPY(87V(v+E~ z5K$0iC>x+V8I2)rCr@)?xAI0rYNr1uooRo{zfJtCZ8L|?ud>*Vb&jVKJHgU-el|rO zyy8xtvowp8HKo+d#*Qg+Ez>0(->cEAOy2J@Bc2QIV2lA->Pk99p(6uBMFZ%#CvfF- zvo?EGK#Dos-Kt)89B>X@b!EJ6PGfp|{#W?7Ck@rwW$Qx4n@c_gEzWPvZ79S4tAOZJ zPiw3HKCV3|Y4A9)yZNAL{619rl5cLasxU}*<<$2}+;!&mGW5%4NqY5P3hB1SG5LpZ zA|4Ja+n_efb-lp3^KYyy2*&@FLV$F`j@191aQHu}LBjYNnrdWah~j)T^Asdj$vnY# zzS}A?K)oenP@{LXZreFxnVdIV6*3w8J9a!U{%@KD0}1SAmqL=zKkJ)6ehkf}Uw)Ks z>0!B|K4`r0(Gi+`AojvFJafA$cM@?8`@R+`yXzqPx}Xa5)w`pe>Sv4W=vNg{GZC~) zi>(BGWkpR{mS^S3fmnojf8mb)Z&KykvAXDH+74N7j}WMa|9=-eeF~kKZ3<=$n80eq zRl83Yt12pM*t&NpSH$4i-pnbUl8KKBOOgMmP|O_v5%2NZr3#V&!95Cw;nf4yHn8;q>6i_3>hb9*l!zR{_+l6J5yB912729z zoQ6+<0fBi_zL3fP>-tv`h@#wq$2lR(QuY;W=-vhjhWsRtf1$9B~Uh)2? z*fP{)$c+twhqxtlmKL%jP3ZythzHc={$Uesf5HqBRx(%y?fW)V)K?t`4uQtW<~tXd zs9toa z5K;lo``+o%6`wHI76!v9fFf3{a%FNWki&qYq2UC=24*0W))=j83(%$Y6sQV)AB|#T zqpq(cKcTZKU#I4^Kj{IaFf^bcN|s&u+b@vIWzy7F%>JgydZA;!iN4_?0+QN~55TJ1 zWCE4$;o)INqD-tB^H7Zqum*7O;gV)yDKo91bx__UTXLHetZhgj6^MiMuTtM4YA{?g zLrqQOGSG5zCy;|yf6@Y~RlxN$8T%LCpGg@2-T^7jVy6VNvJxV@JjWo6hKmQowkr>z zh~)!e1$&5qhzq!Im(o3KlL-ccD^X&4)zT;y2@7yCAaXUlRG2Oy`z-*2F_)l2H~eMv z^xz_asUuYc;$wlHUU+k}-gjmemuFU;J?9rvWw9N4l#4cNQ_1osv5q|ch^MH_g+HBs zQT6~QIH87?;L%Ak(c{h+rAhgh=fPD<&0WLH1}mh0D4w$yI>KXMS@>8uCPx;~q*Vwqw)F`phJ*n9r4U)C30pBIreT|mQwL^T zr4-L9XD@eH<#XJ926Ho>N7B-3lJzoSEEkBYdt^Ze>@-fEOM_`*^*}em7<==+9Zn&* z>%3*14!1 z(H!EqO%(0)hago$M-b>W2PrN%6mwGSbvTCq7y6C8t*ti5+JI19U0v;qhuD~#b2vM) z?fuYLPE7k0r#g7`Uw%XbOL1s1GrGz4Rz{{ zKngVP*^L_;A}9NYT`fwoEk9x_IzwBPbRm&?XANm|QQEg?jqhdn>mrrx)@A9to-li2 zpDtBRg=<{wy{6dFXiMRH4OB?iN7I`S zKphg*KZw2(>g~p@`!@PM{|F8R_&WbL!7UVcqk(eb48>ZOj~nBj!iL*<)s4hOfB4D8AuGgx+kbg*=2X)}{Wn zvzY%hdp&yxNr{K5S>AqV5*Z3{q!i%((kQplpEeZt)VlI{*r0&t_D4-O_^4kedv-0j z2Q9U6@`zF^fyXplVs!Zj_$y}9Eheh(*69NYPAC2gLZodGjCj+Jr7&evKT}KGQd3hC zzfzHJ`Gp32ltRN^M>tk?|#1g(d@*ioThoZCkHf1bshgO6cFne<>TCd3;+bsV=eF zCX_t$HF3TW<<3Jb^S5JK3DtSWY#N?Tg!wu-l=nm9_eR|2P!_ABs@}< zGPaFgG3w{iBD5O8lt`oT!ag;Q{c}`&#!gSI$6-e2q+;-DX%fG~825{_Tefx%BbA$- z^|NHO&DoogRnSb8p=K#y6`)+<5tGU1zWMjZTTBW?LR2 zKr~_r*e__6yoKIKtnvz|!h^QV@VG)Knu%|~=QM2b-j#p#{uwpnu5a-as3MYn09XLQ zp>6XB7eb7;0t!g42Z6Wii6X>_5Oi=HwNP|F6DJohlkZ6o&Tl#` zpIFjpgK#wmyTNLGBjaK&mYUU3J%9}-XUD1%t5exoTzi9ABR09t*UQiLfY3e!v)Xhw z0Q34*2!@A5SFCTcRka%gXohCZ&MlR{9eBc|a^wQ;i8dkmEYce-xnjp3k6g|}BC2rT zsi(Z8?Vl+B-NnT6VgN`k0u$?@WnT|~l1U<-9}aEmf1mC+iX!Sx&s$iFn^cgv_dXn# z!v+coFE3lm#aCP#KyB2bj^&?vvtTTPTco8{=?|t7hmfrGXek_QND`nRb?4U`?-Bga z>N3Z>Z5@_gQnnWUfLwh~R5VPAhW)rnwVn`xIw71q( zt#J*pIVCjRtV|H_be~l$1N2UWo`iH30iMVhQkA@lq{J(7wslV)+1ZxcZMBlGniXg{yegHTYnI z0@RyEgQ2=%8fSgu3Fg6JFty$hVZ(zn`hp7xS$T6`D>MdAB<5^qOztJezdGkd?hi|Mr3#V&`E=l<4@h{S4!VG|qFSV}^*zyhvg?*)>^kuw&Arq8A3|-f zFEJI_W!!AztE#8;B$!XEuOqFrh@K{901ZT$hAVo*M}6)3Mqzi$((6aI&>p zi;oYtXPmoQeH43hWDjH2tdG>ti4<2000~{0~X`0eVxeA&RRL5W-tj8;F zKKzA%Vh&L7;zitehv7+-O2cU66bdj;cH*w2w+7%sL?2nigZyPq~8pOa` z`r-F9NrUvx73gJ|A&iuuKBIpPyW9^~w_&ORvgQzo=|R#TdN;nKcRs+r4X^X@?27Gw zuI|OPZ$M?c0?h&b4u!EYP{CHH?lRMaxr9a2r2U`}2D#6OfXGsi8C?=CK6FD?Px*aX zKmjw_&1Y=7wZgrkXVOx8n5;4+22|e9Gz)^?M)6)(Qc_x~u$^t`AE?fejncVGgID-$D@pad-97Q?9GN>Y~Ich*9Cr|_>H;LD+e&3tB5ravC@!}J8Uhho$nAB~zX8Cd z+#W|D9rC59``;x}pXWIP+7j&8)319qN>09kH`ql$h<$SIUEkuyck{C3#S-}lXaq;lo@Z84y1 ziw{DK=3LgvKf>^W&{YUEfvKzwk*)7EClOXu&ygMK?=p?i{}`WcrYMo}=B-2!#yqC0Y#LKYuGH}T zRO|EWpUVf|aZ;!RXYG49KETfc3xF%i&K-uQ;#?I<;S37r}>wJcA-Gc3C2dxeq{8*ms)yRDvbh~#>B&<&h) z9b6g4=bwnZnn-?8y&`B$li~R!u9u#njuYXK#Srrmt*PTccZ~!eU(E5v*M9nMg~U=d zFo!{0^4W(u`tdbl^)wv=-frbjjc0`CuU2mrNef)gR~%1{q<%f>&A9sR_o?>8;lXreBmnISY$6Lxg0K$52PO6fyCZWjDrej<~s`)cyHrU4W6FB~Z?k0eo z4`sE>@iVD;rRhmsPcoUS>`)TvlPyk){L67a4>Y`&FD+&~FWXgSV?JJy+XUj^Mzl>i z(@ssZBA}O`0Fr#>-=$^V#acD|&E5~Z7G{6Mj;PNJa(j3wOWh23X|(q#_`kh>e^5E# z>N^fvT1@y4&isEAi~1kg_WrMeS0F3!YY@$roe?r`UoJ}hS4<1h-P->39^J~z$uMc6 z$6SOJZ<3CvWC!UiR!9S|Q3w#F{2b&OZh^;~RW|O7UVEOqgRG$y4Gj&*D_9+3*Uxml zLqkK8k|trMv{;1evi$*`Z^c0#hYsVcg+trj17g|3QBdNx*8%!JBj zz@-2>60{2ITaAW$1w$x93m76GCUS^0{|YGsq6WXgEdEfp=uMqE4|ia`!3E^*Jr6Ts zP$Pt&8hl~W683CAZ4Qb7sET{#D})NnnWu2~+!ZpP-6dnkOWMOqN~dRj`h}vdmVk3N zMy1^&d_yQ-#3H^W*Su*ElcJ@2*fe@~!}7FyA@8i1UY2&2F#7XNPK9ua z@zN$e={Xj}BV7!{;ZiRxxR-!ADM-+S@+NJtrvce9Uh6&@O)RVhF$$oJ!BzH9CA|~4 zdCSaAF_@l#={+_*{?a@Ip$iD;c>K8f6Xcrwc5H8CXeC&?+&-FgUvk=bUDCOZlc(@! zDlX@~Vp5f2%BfErL0>6P8<(u1!Puwoo-!IGCQyd6cXDCRLdSkD`fg7qa&x?jQE<-7uH2iU zo{8DJ*v`V&7obv_Op2@K5vb=dpF+o2I=bRj$P`s=HC_o3nM5#4d%aGP53m&w3uXnq z{0;S6hUV9u6j+jel6ZKb@DtArAkYTvLL~U+fOpmlr5m|1%7hhhqzR-mFi)6>KDI(E z3dx8-j`vxZPQ9&C59R^E54o-mKI%ntxUbgk@0Ip>6*z{Mk{Q!P-^56RW$~m8~bJN#9dAYI*!u6kQy}iqs;|fOvf;4S?I+;IiTV#7% zNWW2w#B;_0%+Ew7`A=m=xwIO5rOfWsIP4$z$RQ!>v`U|C8{)Cb=yH%#BEMTRVVTZJxO@KC)@0@3r&gc1 zn7r}yvoEouKC(j`x=~MF&e=}i3aG+M3ibPWQXp`Z${PdR2Jvek_c;M(!mUKXX&?#r z9KSCE$UHcA-gJF+1gf?n5<+g^&S&!O1yl+bL&6l|4NTCY{@fID90J`Dj6L9G=-u1h zHJ_{%VFrSh4MYiOUy<=v`wBb_G_k_8qMG}fr1BomTgZl9^E7PoFMQie;~FhLjsEqs z0z|5yvr3}yO~7651*jPKvh`;O91_#x@P=^U1@OL#cH3mPQ^0l!cR6l&DAd6}>*HWH z>5ivVZU(sofkc7JPrBpwP=WiY(>?5hEVxO4^oiyLGiMcu4FGZ$)xE6wztpDibbiy6 zX)1u}IXp}bsKyz>#3w)^8a4+?odE6GghK>qHI+{}6^jykBuMl9U1AxUaqNV?lqAm! zpieqqe&~V*OQ6be>qT1U#!D?JqDBH$AVJDD#01J6b?<;?Xk+TCQ#{>VaCq{5w**z5 zRSfTjozSw!W_WM({MhgPDoX^}?xPEXh+_z;)u4 zmmZ?dEhhg|ViCOy+UmNsOZna{IN8T+hE0`UKrt_nCiCt5Hx(BUjWW0@L@vbl5c?{1SpiR z$|QbVUyuWpDOf7W>8hv1KNg>Ku$AILAU%uE&FSY^zR9Mv%|#4_Xl3tTDI>IHl?T9dbZwo@ovnlw{pdOw9RCJ-k6)ohaYgeI&A z&2OO2I-?--+1&Pb!#QRgrsC;YobMi6b*Fj&38JmdzO#%3y>;0^jAm}E+^LI-3pHjP zOH~f8A3aEDCgHG(Gxw*wa%x;@d83uWo8IR7S^~zY)=(k*2}4yP#e6X5L$Kag*ck19 z!szFn+*CzLbY1*|9ge2M=0t)(JLeo)Asj?`&(7x+HAj(HrQKnitNb+ZI^B`X5t2RN zcxS-!P7`Rk@u2$Y?GXkRpJiD{gEDzPi}mj1;ETr+s;q!LGJFmqYEncS7K)*~o$XSiND`w-BKgV!dzrU~cIrh)JDh?g$;3N*Z1B{mf z*tB7!nCgb*f3YJ9n^(K&4JIoarTimkFQ6}9R2P%#%TUT#Ux+Xkv;@!Q4_T}XFv0(l z*xBFr37s}x<};fnXZIrnDOq+=Y+~>_q^9cbL{Hz|-ToPO0Y-6|SLL^J1Rz5T%O@3b zI_iP-KO+jQp7=Tf2BYFF)7Oe$%c6#2rUuxj>IK+0$u&kpLFp~WzGKT^Wr2Fd@>F4Z zRw^6s^~^u;X{`44#lXb3@~hRund(z~=>%aJTVc^Z)yaU}()9CEKKk2Z?k*cMk0h$A z7xVeQp(u+WGKs?-i^A#c;QVlZn@O@^5bvRUf?$+Q1yqCC;Hf>AfHOL|zP1u$JR;at z&3r)*Gz)r>WDnGO&ahbAX|>TyQOnnXe+)a!p1zvDff$T4bVIVe%K5UzSSsiu#US?co&9#F~? zc^}V_-~2*25A}F`PiOwsx}OqSj_z{qDdEdU!|@|Ceb56o@#7a(^dnBTF4v>2WJnQH zT(=4gCmumUX$)ljo)d?0CSs9d-R_ffxpD2E-vkjh348#dp>wmQ*v_D1Nu}jSvw9Ev+A%C8@_?s*7M`sF z=p%2uQsSDW?4N5${>ajZtS29Dp~ooS*Dv(*yG?m3 zK_a{9s@O75EkCh(7`;nO*oIu5cAN9L^=A~0ZpW%(Q)?O#0;uhKxY06#95%!t+nUtk zND+ZXiebqt0G(Fh*k0ZXn1i;oFuMnKHJFtX;Af15Fd%tTUHQqa(jTSS!zmNq}YE3nyqJ^{dz zcI{mi99T1?gp#LISa-lMM7!PCwY7aX>6w3Jv3!c+KuG-Xt_DpLFDYHBd7;HpE9M-f%UzN>QQ)M&GPns}z`EKn-GhWioVUQwX#N)=TqEwC5ph}(Lvm|3 z4awa2oSO6ev7Uvor1&$vilmXcDWxnK_|1Vh2ZKog9Y^(K<8N394;n@ESY7+&?uNxg zjvkKG*xUjt>2TP@V>j+<6OG*!S=83T%Zc>Z7B(2m>3jCrwErZR?9{`iNos#E=k)sR z+1c}+93k_G9cSsewRdOt%bj|Ql(x1D=~q4XyUHvpaT{BuwfD9H2a=rJ*OlB7TozY1 z72_kTel#`X#V~2qH5uK(6<(bJ7X3v~ zz;-@ER_C&sTgGL-^HBRnLCk>^nYQ=e7jaCi&C<4*8$gA-fMvpI#54me``_YW7u$e? zrrtqky4et*4ut#O^LQTp26TIHPy`tDS$io7E~jZ)*F;gC1^*+Gf++A@6OmG9dwU`2 zbXLn4ipfcq=?63nBF14@+RP%L23KNP3NC^?$|!~EwG2fh-*#(4ZgV@6mKvZtDdZr9yWdFS91KI!bjKQ9baj3zD1#-m4^ z#~sPcWGBUgj$Fi-T76;#JkQO+X>&)}$Slsvpfp&xU=|V?1f^Nq-b9N0i}Ch=c|K<2 zh`nBxGu9G6vhNY`dtjTT1_+pkexQS88J@=7eLt#qGB=a5Isx!xxettuAUuw!HyCf@ zo1BoTmv_+~V*>s;n+am4L(52fw*sv(I5xWY6>6|AimbS=WM+iFdL^*(BegT?Hr=hC zCGt|0?{A7c<9~DGz$f%4R1~I*m~>PA{ToOO4|vVr$%m%F!p6X4p&T)= zD*Fi#?b+^|Au!lorR5y%rL&WtrQL{aQ*Y20`1)tJ<6(YDiW98y_@#5cKVa@PXS{Rc z!>^vuM{~1hcr9IL1Z?XcA71{Oypa6&^xT8x>*Z;|isxqM=4Es8fQO^{ekX#k9ieh$ zS*oybC{)LOImPlr`(ylGyNukdFDbvH1!dz&*H_QbWF)jK`FKRTXXu;N6RTog$kAe4+ojy+fYN;eu#I~_y_ z+S-&do+~H>=ltkIoU|b_85KCwx84Vj3@ep#BS)8uhf&o6GIdz%prF*-KfuR8FAWc! z-Ay_;mOU;9EEuEnZW#)Mu@Y~55PN`+qD<;KIZH!P>IUAr{^3_T1~R0_80GN-iHrWf zf9Vwp|5s0l_J|)Dw~hH9-&+4PHG5>y!g$1g^#Sl>226Ue=KlaM1cWcMZ>{E}i1wsxm)A01U~UU1n@?2Kv1*_*HjDWSNM z?gstKIi;D@zxqD~+FOm6iRKxEWn`!B6`hwa`H|b($Lo$t&Q$T699LIji0w!p2@keV z;JQlfl;?Z$q@y+U%7LJ(Mc_ff{q05+Pr0|e&}*L!)3tW z_N$Jw$yg7#DW05$D%dW%ZBv?u0)YB7n^5(+WWZuAS;_NW-{DK$h-d1lv zTt<<*GnSACmnt+sd6Gp5IQcN@kZI6CfpQS`E6%2mh^rfoR1P8UURnIDuy7-9`$6+Eja zzjZHO{MpaHgUbPH@zshyRe=vndNB+=d64Iua?Rd?rj2f3QD9oR+4JGoL4EYrc74>< z!`rGmu~q(?;%w$m)|Z94OXc;U@cq!b6n$S)+^oHz8C5*t(+QP4tFzw{+3U71){FD3 zootUY*s}K=+BIKOsqBQ|7$*OsTf`d(DKD6a{T_EWNf3{}*y^6EVk~2K#kQ?w(kz>G zd1KgPMfQQY20JC4cfb2i4h7aX>K;b3FMhV)==qdCwh|urDl;j$W$&O>^tS57!1O?9 z<@7r*|wQ)#XhCha7(Vgt|#mrcf0U%O8N@Rk~9|r zit{|z%B26vyB$xMd>o_ep|LfS(ZZO7 z;sV!Ye%(do)N#g*c{oW)%GKogpZ(B6P-S*|L@z^xHiqKsrEsaUfh3f^@7VuTCx!!c zv;|42I*2RZ?7778{&oPXKC$p3Eh8grBi*iB^|yZxH@&Yv*6V@bsUl+*I2GC;Vq<%$ zrt2Oh%6wz^m)mAd%q`EoUg>w$3H-Jx(t!|&W4&`DW(HpOA24HYi}%|6b{37q{HJml z@930SB`hxw0Nzt!Y+i~G%nYl33v6J?-&s{&-RWPjmG{ZA=Drw&gB~3cG-7wiX^S;w zutvp!8v9Gy`D`JDgnl1lRw-NeW0CHa-C(kl9pvlSdLzIVQ)6D$EIYvS<^IxwO`i;} zJ|C#Ao1!<{VR+BT9Vc;^Z+v8*%2)Yzj}p4XpGsf3M(+h``)qn~Hr=axKK(?5khcT- zd#S~eqNSpfc~sZJ?D@kDyRrM8U-?ZYW>o8tGq2=}PXm5t^ypOXMD*Yy7i$epqt!4D zThl{`q&a>A8=tkut*TnuCosix)t1cm(S6o za8fIV`J}I`&oq#8<#hbFj>h+a7>e48%K+p}6zbQbI+2r7T#-rL^1X;uHdi`s<0LFU z?X9VY=dGh{PZouhxAw1@$||OZ*B+Oc$FaUXkuCctO{Bi{_B)TqWJC8?EX>Xn%jBZA$>Bxp^215z<-Y4#E7r+cyiDeX5^FzG%7m&y{ zYYr#a)a!$i?pfFD4?=LLHn@2V&nwredb39hD zyvEj<`;@N)uE1QZNg}h$g$c}kw=X7`8doQ3PGuPr=-6m)cw7O(q%WaDo7E~?32?@4 z=8Nwkz~s<|@Hf2HxU!B~f^dr~xb%(Z=zENg_{2ms;E!3f+my&yfb}1Tn zz9$al>xw2Ut(VV+i~>-4VFE^%Fw#1+vGVO+X+*9c-W3<6)vb5t&?`l@T;j9aErds~ zB46OFpA5NcI2-fu2+nCs0+4@9qeLeyD)h$nd^sa&Lf`K`xr$Zfy9;K>ogVy=z`J^f z#Y8u@J1QCR?~_5>s)erv%lq5Y&gOt8D*K_4N%YwYsUPIgBE4u zPP4a$vjeT@i4>!~EvD;7ilXJ%YhGrITXtKH5F(L3{^nmOuh+KfXw)3+HnO{5Y_Gl3 z%8fEdo_fMCAX$ahhAE=dt?6Ab5Td%_*;^3wP*~OCFwRNf-~f-IQ={tQcPhKxk|9P;ph zjH1@Hz;&`yFS1(6=VN!R^;!Qh0>z&(6!LG=b3ufA@ljG_)t0lL8sB>^vMA3NVYx2j ztC3YQ65m_32dBIr-b+*~J#IFNi^=LWp4szB*K$(Xon^OvpXJP-^0Ynhk-K6|I%jF= z35n`!+3Oo_XKtvm(or{i(j4KP89#0mN_k!v;jubRhKxKGe3yjf7XMOnS!?F+NsOwg z`|}FML!nu!z|2iDR*i`1+536pnN90tV`DS#i&uc_-N`$EQvia}y6oX5&jbcpp* zDlbp?wdMz!4BjEfXUCZx5BAkLNjSG4Wu4IgE!uar##0+aa)0RXg(F8MI>tyMH@=KD z+@$SVCs{ZcGQ?ApYsf|?C@$JF9(NEJ?=10liyKts8;YS4-EB3-=z0An@cO|QwgTyC zw}0Bs>wmuoDSYoAWx-;%?;~gC&C+8dT4tCrX`0tH{N4NK+Bac!?NLdzn8bJLJu<2x z+A3e(OmoEv2P`8{TOWSj!XbYk4|m15#(4yN^X*dlK5;r1qxav~#TK#KB2}22gZ zw$*qq3ANLHyqMI}^GGrRo)nt4G}r5^a5!=$;OvpTF&JlwnqMm>9zq+fIW5&WtRNlo zM-=$U-c$Skbe&Q0bD^GRvrlEI?=ua8wbyGAC4)e?tra!}?WxV!D-Qm?*F=RUv{nGk z>-_v$;kDOnz6xH=-BrI@!*LYD2@d(n@6)wC$4cByCRE^iT?PK+C6+Kg+O$vlu=`6> zxz53Y8JEjEU(R%AQcgleiL_g$NyY?gV`11N>5=Y}*kSwQ46&95f)KK>oJ2uz^C*MU zIL@jvK*W;Hapargi5!S!gydxrz#SN*B#QAu1LMQ zlAUk$H!YxX92d1#Z0$3dWcROQAPG5cy2Xx{_hP2#WL0#u05xCf{8XOZNpF5!soK8& z@8d^;IA;U;1KZnKN=OO6*er+qxI^Un21&N)ePNbEvgYgyyU9Q`H8K`x~cyqNisM(M1JJre`fr)?Jn7-M$_qp7#dE?uw?nu0ItCI?vmikMevUnzSm| zS#TXWk%8K_-;7bmxf`XqR+q=>W^$?|I>}+YQ{5i1@JO>TZ}LyO8>Ra4TsA_x+(Ds= zs?mAq*mtq=j^^dC+CNpdbg`+r-zLS!= z!z6EdM53leE!ZZqUxk;xR??@~BXSsDKyNb!WRI1XqO*HxfXCIB6&$)W&8i6a=9!fIP(j}ri4o;Sf%rcsa>o)O9fd&Oh_N zm-{yNH+!9y-s4_{r_a+h_tff6NSvPk#S-35c^^ccK0E$r!VWu7Ysy!^C(^Py~sl6(Gr4ZD^2twZU;P1V~xz$;?ZBf9IDxB!2YR`1AZcu?~X5h zhb*cylmFVRrq`=?bd)RHZuMC4Ds@y7zaRAxjLKbLc}Asjfb_Fo(mp48bVFZ;*yZKD z2r*0aDW1o34{^(&@{oCVs)oW{h=p74#ZzOV>BQtFopUboQAtBn@`B=zw1XNp7Tu;% zbfm6n7U87_KJS^0f4}&_!-uV99{R&;v^Z2-Gvty(4SYg8Yrpq+)L9lz__a=(bILVV zjIjfrTPP$vqc^A4YfUgVs_$0Rb=TcGPsN{5s4a5k35H9He%~#rpLEf&*wzmNj>? zgzL!CSIDs0*&gI&<&HZ$>FDwaww2k33r(kcB?O2%QL9&llaXBCCGro+*iPs07Dd$y zH?U<6Q|uo7nYh32rsqI%KtMLAS#EJBm!*GMY{ZIj%ybziX4B5FaJ(Z?r_%IPXY;ZL zk+o@ecAuAj?&FxjrTzNC);9Ix*kwk5{iLhsyFy(p)sxc2FWcX15yTIjmV~RO3-a)P$(0{fd^ekEYHbLln7{ruRdxMkA$_^% zhAT@t=(8;SSSO*P7v&tuhL zt9YGB$)n9CZ&~FAz`5!1J;EjNbk8H&and5oxz7@~vJ_!)6uwhN)KS5Lt|x1HQOYSg+;TRm)Q z6QJPRA;QBkd%UQEOs;N+3SrY67FRo+l=>j{TK^it3$WJBxU{3_DsPnXNb!UW0I4MHELwl6{ML!Xf+%nVi+J(p*p8bw&s;kz~;>HcU; zS?Ftz3S_CQzdZeLn@TJtg`(k`Xh>@piaR_^F)vk>QbhviS5BqYS`4P2SF;a-`MOP`c2 z4o;n-9p11;P<w4lCym^p95L73R1VB`@eSf09av3#RE_Gl2>Y?2pBh zx9HUy*#26_EVTp!|EXYE>w&iOh>Kx^UWK!Oj@BneGbVyHb{Doq24ZJca~GTiBezab}C-T=id%| znxJ!6K)|_|{Zjdk#!PYps`@a~nby#U7PB=vr|xL>r}N{D@2_4}bbr0HUC=eXf7FP| z89HCdwoY2-DzR8UP)8YbH>9$?(NpQX(%Ec{ zo2a#R$VWDMo=zCUt6sep!K>{@*DX7FI%t@~t7$erG;Vww|`@>nqdGk|n!?(#cq+mzNUa; zr3tbM2&Lb_;6Jt80#v8uk3C%D<{V{Y;2^eZ=QQ0pPdpgR7j%=5o=#>xiq=1#0YLQ` z$Q5El)1$AKu|?|lB2^R#EHwfet{ZXP%#z5)_}c_b%qV#>kze~^Zrs~%99ywWPrbb0mud( z8nVpo*js{c@ENVldFgGqL)N*;c4(_@Y;maWD;($&zNZ4HoK5hfyYWSuDTtWTjJe(y zJT3Z}aS64&xjJs^k6(s;S2A{mDSEA0W3|i{W&IJNr_Y~Zt+Gz#YLIE!pm}gLySCr! zbKoGH%*dA)qvVsPO6{^&|0pNK97?IarQn*jGK{vZPEmH#Bnx3~z+nCTx^PFm5iM6z zm?`JYB>g;vV}5r>9Ldb&goM<+B{Tdu^*h*q0R;wjSJ9NwnZ(09Totvw%Q59dt^ z6=+F^R5CnB-Cc`@$cphJ@(L=g8!u$ zG0SzicQUoPyS@2)9VXJ{;^-Ms)L_9toG$8Ep@vbnDrwKd&WABv{h3p zkdgQik2GqX?7AD05p%}q8=i8;1!$))`M1{G2uv1)7RP*Ecn`AUG9Og^mDbj>-tda5 znWT!L9uct?k1vUmp!BGR2PntGek-jrX7u#s(BYojt%iRLt zW23hU$-}J5DMiQ4D49_~xy(6rKnVC8t7CAphJDtfvq{_RI^!`1G-=V79()ufT6!(7 zY>3+UJNv2_d2`FW=Vx!_=lZV@oFGT!&vPZ zk?9{*B`epgzc4N289YGaImeaPr*JNXiS!k?P@l$gN2^gk=bPnPF(=Yv{&+}$HN$Nhd%8JQBxdkz4wEz z(Yum7u}og=GHdU@Zz)U;t&;DdE|ERu+D%~6NsflXj6aSI>L2?X<{2r=?h;pFw#Oy-ID_Oe zzbt54T0Ho$dVr_VrR0zZZEN}`!fWKGd^kTs=GBIo`0%q3!AT>8EV=d`RQ(N*ft;xi z{!ZX$B8waCyi*H{L%^WlrEl5c7XMfhn?4&Ofy-5lwl=wbDU%`i4UvFRjZw4eC2Q9( z>xuQnLP8;p*Ylt&-}3n=nzk9=xBt62(Wqw4l;LhtXBZfm&M&|*C{yz`bfmtsdCf^X zVo%_4vxFDV=>@2d@zuKCPYhETeAb;c>QY)a^+D2OUd9=^)iw{_H+#BX+POOOBfdM~ zVhVbyaqZr^{0{$)4LrABK6E^)cDOudsk`pKb2kJ*z>AQ>ULVbema5UOzLyJ6qmP94 z3j8$QAALm(OPCA5l@%k_#TE<7)q7hI&2N zH)Z?ww&FgC-KlwxXu;GR@f%$9TaGtvR2noVJbipzB3|m~FA~^o7E-}wv--nan)qb; z3tQ?=oB}Bp%SJ2w8XiiN4fg6G97Pq01JwZ& z#Gf!^A>IV$A|97$Cr1JL#F;=L{3nd+{`gd*PS`u*;r>mCRfELqqb21}*&kz&ey>BC zc2XYeRpVW-AW^W>a2umT{d5u-yBTj*k|`BP;|0Wcq~Tm;nwxAEsk^~Ur#mq(FYp*J8(#gQqMVd+ zKi^)JdCUOq-InyK0+f=p+e;Vejryx|ZW_+y7)a@+RN$eJQW=YrV&cY;fj;G^%iqj44>P%-dE({{0m?eHvRfFT*rMUA+Vhtm*0b3&TOf!tWGl}9cOuZ zT23$nLYCpNR_x)B*L&mGrir7frt4)tw!P7q(xh6A|DSx~u@}MG>*P#7ETL$#0-7O_ z&VkZe(3$gnIkoYQsO>hE=5+$crs+LBKh-(T2SMmK`Y)Jxa%;jEK{I9NA9>(x zTB&0g6|ij3E%O}d-}lEnAr40w4!@cM4%#tT1x)9rUY><(U$|=)(NEZP7fZEYc6^Cc z5ou^+ECr@yw3kY)Uo2_szBrf6`>fvFOsbuPAEkOfon+w&E+La)EtQQ#iml!*Hlqvb zG(JyU5nf}}lMJL>C7NP&^?R;*JvgWM&f5V>AP(i6QbW~pq5mSg>0Iof`;V{_O_mp_ zk*Q@IJ2bkMf|C920@(v;8 zuAdCL=bdr?igqs+$lqjAroe{m{&;#wEh#a*oDkD!(>eYN?e(wOkoBc?x-iREr9@%e zvbd(Ls!OSF!oBB@dT*GvdYkO7uI!xk11n?wb^Y42E%6eN;oV zjsga_ST;C0rj~OdAVQ)9zywXa^x@f7utkzUd4~;Gy|sQMeVNm=opp&v3yEK91&1bl z8e@m^RnIeZB)kn}ybpF4mC|D|`MyDY(|M}*d(6?Q%i+cN;Y<{8>rmEE8B0ks5rU@e z5-?JEv)0i&IA2Twi|W3Su&-q|)spLH$Z;O_#N^S3r%AXhr@2M^AnEi`^TyzqMS8tz znCjSYTI(U1jWF!MmCO0@9!q!RL+1p5LEI_BSMcSbL=uL;ljOIKU~`0Nvd?t-oQD)& z16{xzYZ*fvL8jW3_s)o_Mkd@WAUjTFf$a$?&9j++75Ry4Fe0vxg-Po9GO0cOqM~eP zsy7M#4^xuVqj5*q%s%_;V0UagN5Ml+$!he{s-r(suAR1v=dJ%th7G80h{g{15<5N;$L2EPY(x$wbS)t>A_1^6gFEru=Hq3sw7mF0fwjO62bwt0WSp7CutnpCj!Js#=@RM>d{}S>f$3^PIOOzcOvs z9Nm^q&oKWX{GMqSoGZQ8yJ|x(@L{Jh-QXoF(3LM2sazSx5UC^$}M@!l*eRTod=Xx$%)h?ZoDj8%Y7g0 zB4fTsrSP2%MxF^Q=o2epJdQep?L(K28cJ86DHLo1M+zpt6?pl+Bv+9^kkSq)nTY8MkOtXSDp6ZfRi{2r1`eD=*Z+9;!Uf7iUn z_U(sg46stgOmeuVZsv^p*o9&(`f|gDoWiL)+`(glG&f~HYg-&b`D?kiVxQIno0LY# z=bAugdm@bAgi5QQaJ|3SeS^7zt12QQBKDiXs$h=WA(y*NdlspD^POor5|ZX{gFY1~rDnDrkS>%%^YaR-(hV$f zl0j>noM#3!Ejui7>_m8D)O(OmF{+4|dIpLb3`#>IQ z+-K#yUsd70u{I_&HQ{7{jzjfFmWR?P3rVOec+uF_oZ-@56gOpVDyqw!b^UpyagL+jSh}lXMcv0jdDN6L~TS~BU*%+)ebUjk=SrX}ya;rDN`jzFU z(NL{o{92h@^69)1?9OmqH5XYjg({KSJjm+upDs)Yf{Yy=`bv&f>U!F^cj%-UmvzO6 z7S5gtb@0Qo*C4Q00IXLSlfIgtN%+6nDJ`PS#>tI?mZtfKtn7=TIo5v=ckjXd^0;vw zg22`uKgvWpEmm7>dUkoQiPWp7)x=w=f z=lPEYaO146xnLgNKO5G8vc2UjYg5lE-7mK6TsIg#%lp*_ch?e6c&#h@EK6}b)hAYR zpG|*Wq-4s77RYrjMI;V$K38`5K8^2QRBCLWcwGje*N*`RO+LS_-g&~ink>oRDde7ClST1eCL2bA))gs_@9f#< z*b%-n_W>snLHVK4JWtXQ--+DmmxGQC>nhE8o8`L-o{FeQd#or1IY$W_9KdE>dvMt%>{I84cUJ3#@z?aksIty)#S^3tnk=(rKndc)Q>haZ_izUpx?Jck_p>sp}rxo1?E=u>M zaYS*KssrA^PwQ0QI&K2mamPvjbGa>Ku6=z6jAL*9?>gK5PkyccD?8j4aH{=4e0c<( zP>jcwn_d?tyjN>mFQe@$$raVmt0%7_;~diK-_6IDvmo9@9o5spVOoBI*DuOXYh}6f ze8H;%ZZ+6{HU9?(9Lax1Jcw^OV(0d+o<9hYsQ=t}uux%y|2f!DU@`drv*Zz@P_3YxJ z#0Q;ceTqR%n!o;8Ux0=pTC85#=l2gm*Q7~bxz z9F?Wv{lPyEGagP1rPACZG-=$0_{|G^b<^L@w_ANoW~bL>X$T84t>2QooW>j$Li2JB zG3**%7=sl*V4f5K>llcr6S;54fb`|f$#eZ#fc~wAxyDQWm`2K;h?7pmi)dT2@nclYx*3w+q7U0+YeimT=mY224Q=~^% zbbX(0kO+9p@?z4Ed7=PXxN$Gj(Cfs1mEoPtv25O*JCs?hw|Mz4U*HLE z@dg!kX^K^uU&w)DuneLanUL=eNWaTX;+tp@_}rHfA6JvXypRY}PxO{(9ZivCbqSQo zRx*}khRn2id&0kno3ZlW_X(jzV+QSTLIvCd*1VX z-UEgvV2*$M-F({gYL7M-0G(d!j^HQJ27FDj#!rBIJ712eU+uW!LQ$JD@v}g5s+&2A zW<|>IAN}&#KlV?NqRJa$C&%KM+YBiW_eV5^>5A1RGKi^aKhPh|u~pdco6TZ^LgyqQ zS}DSy_yJXX5qNX}`{ZXFd$~Ip-`AX`WxVz~-w|z#=A{@kiCA-T3`nO&N6#un1)W$z znrHbu(7blMdI7^6DsxJo{F1D$*F`V*C|AdLKbK2HE!vhzK6)7cjz1LR2~^~D2qW{8 zn^$-!b~`nhGjqWa#;N51kEigluT+s#XDP7?e%oTFJLd5E(6>ykVdKL0bVK->|_Y1?Dutbyxpb7 z@RcypdM#sJdpiu>4=K2}X7F%?(>nX<&X~--no(FoW2ExFxY8;fsg}v2Xs0m*id6d& zR6A4(2S(Kh2kcyB`ATW{;u)eEUCdF79yK!3QM-zi*5n6?fJEe*nu&D-t8;HI&6@pn z(R|DI`6?@c9oQ?MfWM7zcd4Ocpoi6Dku~LeT7E`d^q9gxVl8M?Rqf247OIQJ$hMeT z$aR@wHjj0QfpMFGft+&K_63`6g8`6G{MClG(-2%6t5&I9;c<|k*eZRpE;*`mgBx#l4~U${ zFt|#9zX3+O%HRHqvL}4;d1{~K00<|8QGpWZlAk*dla&yIxx-yGHlK5&1P&E47^H{0 z>{@V@H~xTT5h1Q`7d#OM3)NKb&`{kR!ClepeAMS`GMajGw-x2Nlq-g8n^B@ij!S6Y zg9?US|F;g6i42YFU5gs6N0^+zGGRCxXmtkW;2~4`r zz;0lSvhbc?7pzDGhT6?7t0jeblvF}N()QLtH*66DCPS>SDYZAdz_{e_qTDcwNDQM#$HFpQZxE~x zzO?SOaSe#(LnKa zs+nkSrBL0$E9&&Fuv%(8gyOe_-ASd!WPIN|D+Iagj`wQ`DjD#`t&>GC?9?JVI5TR= z&gblvVkzrHRd~=XF$=qM#q~(Vc3~Cir3B5B= zYVBPn#*r|_1_yt#0so7;#&g2Z02P}%@A%&^WT(^R6x=CYsbA+HZi)J?-(Z%)HA77LUY`16*mW3b+jO z{W5tyT^{RBbF?v7O0FT7ldr+;ycl)n?v)_H^hH!h97< zRt<`^wHEt2c4Sn-T@-(6dDhDQ?|wJUiNR+|v|fl^2dTgFXmhn>ngyYC&E3aXtQ1U4 za(!@K2}_Q)#Z^XtDpQ-0+scIi@w;&sH{<;nYZ7@-v5hXB5QjbAgNdg8A?A0?5b(npU)V z4y1v5{sm-v{v!L{1;7J;{Ww-qMpJ|1AVrcE&{oa-e6#Gj;D+Sq2PycDE4sJ+A|?NI zJp^4~zRd^NfPMnkbWCWBq_7`9P`_%~LzB>~xn9@-!T)%xup+0^6;nsG1-M^DyuL~6 zHyxEX7ylgR+6o7jlMGOKpXlP*h#=rHXl_Q<1r^%>{x`}XI4jT^X@Pq<{L^tLRi+w% z`?u}u5O|$;;*X($ySG8j1a2Ni_tI7>ZHLF*8TeooV%rmGRp2|Dm0j{W4`PDJCtZra z{+5jZ>e&gfCv9{-XbZ&zu2oYhAxxjHW_q5wgNGig0#MJSov6blvh|D@G^+{Ha;ovV zkjlT43FkOfBq{H+g>2)nv2;P7|La6AXzB`99ODWC*ZTjX;0UT374k z5asM}0sRJUz<^tsoSYy0IsJpoekgX2Dv4+}rwC$qa%61cF0G5jaKURT&Oh=5gGon= z3f=rl@pm56j0+E6+!+fjqIxC-O~SR3UKLY;o^^qt>E5e^)qc16BQl_?rB|+e;Avoc z)8P&!yUB+5 zP$_1R&IdKR5U8;rm$r@aGkqBKh|y8wZ6`}3gt9@t5#63_CE#BXb0fyTD2( z!YoT)uK@#h?TTb1`6jPAcZ5&j;7JD3njR5!zGZKqvUzDwoO=u+D|B%D2UdaLJWlI{ zXb6)^&Lm(r;T58;A20vI+AXaq12pEj%XB9|3K(Mmq%ggGaZoo{Xn@8+g6-@)&Z3jj5+Y;V5xC zq(rdyc7`UV?=_O1Nu#=V%x$vjmj`zY7~zNS@qblpl`ce=4Qz}buUkwflEJxR*o9J$ z@M}?Y1}n7!UwXI+ZJ{`@47PdI3=ENr2Tpeu?Je*eaMI7y z=IeG!sbWq_o)Q-u78|Wir@3T$ws1Z*Ao2W39$d$%9ni(*GoG63R`PYkhYW9F&r?6ck2TQ3Rp{0ijrCoHg>DahM z@_jB^0bqO!3p&Nj4TZim%TTQmQ_w8)vmbP&3lSkFzp`z!6uXx8Dvf0MVKko^GmV2v zT^{;@-fI5XPyup4Uv7RWHz*{VE1QA9E}T&8Q`>%D7h_t*z}RVHAp3V_rEMZGR#1%E z=Lz?J8abW3XU+bTksP}?^}&M&m##pUl$ljwJDZv^CkWPTSZkml9132%Odjb+9Y3n_`pTMr!c=U^$# zjXyf?P~AZ+|5zFp-JaRm=)vVn3^_iVfT^Af{@Ij0Bwl4An}bCGFQx1$ zLv7KwKBuaH18Q|hG9I#}`-h|7aC;245 z6tM<<=N3cfb}aMU4vk>+N>9MAudYBaF;Wb+9RBWUOqPgcdi~>gBocRpBRH)q5~DMe zZs5fIi)p>>Zs8zUmA#J zI^E-JH<2EF;FfCD$A6==(&vsHZCOdBXwNVv32Y%R`_)ckV!;pC8@Zfhm;K3;KyO~(P)?9mi;1eVa}YwyYwyZF zDGccFDvO8IJ}Cnv>=Q~)N;fPs-OhhJ?*Dh&J${1DA;ni|9VzHN}V4w5NHVUJrMBmh0%}>yv2i=&I-KtG{D>*`u}VvS;QAm6R(#;)V++d@oA|sj5VkcW{R#d2#PQq$^5isvdoWKuMtu! z8gfv@J-LiRfOBdT6&>1M=s0kCYqzI=6GIGjh~|^EN7GB9xEKAUgR#pU7#=75j(X}F zDBsoU!u0l2R$(G)li-sHV#>ET=!@_FsU#zGU{FY93A|5U^UP~clOTFhHn2mIL2u~_ z#eqWngRm9iL8(Z2!9wZ;PsxM(h^AQSU*V5hCRHjgqFiinfkQ$l;_m50k>0js+%mlN zz*4LI1J($hLbj(dI-oWE!_JBwE^EUZk{Su((xd%eNg-;#^Y;Y|84L_FP1~EWWJ^i- z%PJUEMH^iBC^Gm9pdzag@zB|Y6u~eoxqyHdFZO?*`qv8OBl(=f%=Vcjx|`p_95hcO6zY*BQ#0} z^1&X@KzDWDj+=10vLy@S@ha=ZsyYnWQ=dW;>q$hS%R25XW#{lG%Bnby)E_Pv)WuJb z`byH7or5@WRO{li)t{pHj+26;#~}%HAB>?=EM(qUV@}4|Feb^;@xcDL?4T!llz97h zz~Ox_7mQiM7bMxm4b`UNQ=|_vURH@R>ad>`HHrI-j{kuXhrH_D2N|AC*nQvysg-H# znRY9^@bdG*+SQOAP5NcsGVO#?Cn4u$#azb48K>b-xtoJ;n?XZH2x?%o>Mg%J|4>Hd{u$Ixs|fDXIrOnkDzl@yxbD_Su1#2+bYeRE0opI0 z=2yd9hI&^%q9&qW`RFhj+8w#k`otzpjA~E)Rtg~*%@vCHjj$h@*~nT@S#G)I5KH;} z;KN&`yNNSOaX%>5`Vj9w5x<8u;f!z~@xzAA$*zrbH2Y8rszcMZII99aQBK%-^Qb9s zp=97Jv~54yAn=R8zxx?Bb>@ftjgl4eqL-q+JeOU^jCqxrM)?70p$v=bJFNvo%n>&ZlpmI9h&BnBos>Kh;rwbkcgihJR5!}n5{Rp^IKh|YO-9usB{NLJFx9GHY7*%YJyUiGM4<(H5?kLCywjd{HCpeE|k?tj+DZg5BhIq--JT0QG-BO($>i*5M7zMeun*jukaPa_N5>5Yv;9&FhZXQm{5R8{#J=H-_63)<=&hErsHLC& zpy9$acI40L+S;6EIduD=m_Q_(^>ElcJ6hZ1VZD!wbERVg^r8~CeBhw0Mu?y9pVs>w zfh4IbuhFcl6lvS-H%8LyE8RJ1H%Osl=9fL#-IffZ4^+W&C=`3nd_kd>P-X;EE1H60g|2Ib!c*e6 zvJ_UWx54zhH%}vtf#IjyNeQ_&S&FBBvu(?y(`9D7K-Lj<2BjDuB-J{;SZs0PeU2WH z3i)(EkB{g$DIbsOu}qqHJy%qMup<0HIJrW}fT6JST{7%S7+JY7Yw0I?rQ0~j3P?-& z1Xl89?RcjKgUZes6MmuZcwLj>Vvg1e;&`aKuuj*r(n(lhFz9&P?E9Y| z)J$VxL8TjZ2f0(2u`OtzqK9gqOHq$>NFi)%`wwfvHLv&5hT&>ec&M}_2C;0^cZ7m+ z7y-TL>jC70^_Zhe#5$QyOG9mW&w;{q&q^)LI@JbIffM%XkYvfRO)(x&E-8x>X) zXm#rq_&B<(8K#SYmSaIqb_?zTM4U;T)Avm+Am3pCg;<{X%#VtUA)&asjyd0}Le9(; zTuHWP>G}^{%TYl18#p741D`|AkvKp~cId zUfLa(%&ty3Vn`G|DTiXi_4FisBww4J>`y^fKfd?GodZt65z+zG)?^gNxU_;1Gccz| zth{`gwC^R*xS<9Q%0%K`CZml$bUW;7C?IdBmtEuOVFtvFnUiC~Nod*^+mX?vdy|KG z5DxC?7b!*gWI!nrGl-S23$(JbG8F6Q$ez@c`%F~@R6odPb}E@_jLA(SiZ=%sDLTfX zz~_lMu2_()Vs2hn>DjJG2*uW!J7?s@m`A-g<}NP4RC==Z%c4)z?k&mtnb9Owo@3Ua z-wo6KUcBq`lGYYn;roDS+XSz&m*+KJ3I&OX@c!+r+}f$7V+;+r(VSS36Dg|upaq|e z3!c_4&7yS7&lLzSKVb${CAz64C|D7L$osLo0%5FTYA$KHqu#zxs|~OJlq%aTZB(BJ z2S=Wk%;CU#2MTB`!qZ`dlcBF!SP`YB2PIfrNk1bM?@HClK(@%3>Pst*jI(FDPaEQ< zq%-s5>LrR1f0M+@Z&%0Q{F56aZ5jZhx#$Erg<*SeP*(SLu|XzJ)v_w#BAP&2pmIU1 z1TRaQ+FT@?;@a~Xe##^t15NCUF*&&|ws9y? z68t<=#!e6BeuVJTVo`77H<}z!jf47+XNMOhc~c^TFa{n-6pE~|5@NgZaL!a%b744~ zER1HK$KM8U#RDTY>31?^3BL0VNHkIR^zU>8rtAHkHWncOpHy(2pZ&KmpgCUAp>RtU z>)M7$4Ph8Qr0X3M!~P1C4ab^1qxeWnC2pXBrqgU7@`V}iia*8~JfRQ9ZOH95kzjyz zJ#75o;2>%SFmc?FnO5H0H4MpwYJ=ykg2?ByTc}eUP#PooTo}{i2jmy!Vr7Z^kd#=% za}@Vj$*&^f_w1Lti0LPRA9UmcEis&|F#%1kL`P0n7xNmX4(FxZEB!jrm&Qr4OXZyO zJXi1IWL)FFWx{^Rg66}zm-jZpZ4v*b_u)jt4z$3r{3T5YH)bgH#CnMV!Z_BzBHO>* z8YZQP^3i<&yEK`$+Sg*K)Miu8r6S02;~xJwOOl#aK0Jsu%6f*Gu5g|E9G%2{vYqIE z*3jp^aR0wqQU9-{`BG0m0JZ9Z#1(*r*2HDY3EY3#1FKrF)s5-1;(!HxB9jj{M__BJ zJ#lk}oMu48`yfWSBAwg@TBZ8la+*>{S+zwNd?doEN^iC54KtzF{5RPY^`TTZ=AK?V z{y^es_yd#L{wA*W zFF$#2`6@aAsp1b<0%}dvs(ktm>=Q=mAZp5Cv&=& z-esh0isbLTt10S_yAMqN2s}e~3|1=iZSMCwNmMea+hr{KMDNJWB}y-7WuKrd3Vryabrce6!k2H3lu#x7 zZ}+l%%b$SQ0+!GI5b82c{_lx-lLQL#-kS4fPiuCU4nwSJXe?=YP*P00p@qM8jDcej zISZ&Bn6NcU&1{pMfGpaSj-rh9Yc%G3sE++c-6y!89RP~y+{d{0z^XiT!M^&r6jgCD zoynP>L|uuB+oNV$hfip+K-O}Smd*Of1Mw-yJWW>IqnE`7{FvVnx^>V!7(qkqOoQ}K zLJ-A39v)m?nbw2C*1XB7{oidV4Qav44H`_I?XhIGmuXCdkEJ?XcFW7bI+-jci!I}- zCfG=HxlJ60EB_35CRh8V;D>Y*oHmtJIB-Rq#Q&YJIF6ffwi^97z+Bo9_&ZkmY`ABz zv#fpb^rYEg8}QK5b=wF8GWu6j;P$n<1*KV;UY8P4I;ck~V2cNI{Z;Ud zkOlvpgY}#Ur}NPq|GFO}WAkwpNP@_)e-tqX8^vlcU4+Eqewpkk0a&ZSYe33XkHl4@ zZS87SDv&OUK~^CM!sc=MrE=Q#cuCOB-K+el8s|S!9tNC(*Q+@pD0~5>ZbS`^Rl@kS<3qYxR z4aow}3da#J8xe3?{Q(OWF(2UnI0H+Nw~#RMzd^E^y)g4)5ikZ)@;b3&F)`-po-o(dnkPVz6MY`U)am8_26w zkY!-kUu!d4)xVnTe!Dd-Dx30mb3(nJBUPh)T>99}GpU8@arF3h^_cSaxYgg&uy+}$=ZQ|T-Lr4kNde%phY4L6hHi!0^6BiC|||_dJ1)PavW@pLK|C~fbDrGiOKh*c3uat zQ@9TD;$)k^)-EP1`%3+YA>%qJ*Bj_yft{cPvfd^zhfZJpw`P-Pi8dKCGGGqte?lKnuY$$sVHO4Edrp%JBwia}4 z`z%Lg68ZkK_X;=jyx!LbfLp;q7&|x>`z0Vyc>&+^WcoH(5T~Mw*Qw9a!hxdmuf&^% zIaUi{yRkH=_b0Z#mLl+enZW6{GzM&cIg=p8$ZpF6ZzSQ8-Ke5AqL;pB4SJvzS>OZj zu}9Maqf(3k6gWgnqaz3dkKHW#mCeYia9AUgy8jvwJ6S>HyXZmhDYnsd-@(M=14x-A zfD7a$NDrNfBUS6_Qx~2y&<$Fc2iNi5%t-GJ8qxxGz^ftU75%q0fpt+G&^iz&{kr}s z8~8o)+udSa3;;eW7^!+X^?kgvWNm#hQD>8h6H_gv-k4EQS&)O@ty z>3MbVaphy6k(SSSYYIz7&`8ty;DHM7HsO+)#pCDdh~=Bp!Fj&4>Tz!+BN%1=^EMi% zj%BG=Q(ecLLE4>KM=usc>#rwpZP5<%h3(4m-^BBb$SwQ*c`YoNVy5d;Q8yqEp&~hC zv(nF_mHE_90U!*k;8#i#VrcxYutw!rHcNmYgIHwt=R{Og3_3hGW1xB{3IDjkhIpHN zxgLN_iWhH^01QUBOpqPIrWwwvK`;Q91{jXS=;JZB;F|oYSz5q2(_sNh{@h-k{!Wr_ zSbWC(Nvcv*sMf=;7WO$0dH`)npBPO(p5fQa%#W}!@LXk)-84+;2d50Fh73iR`^q5J zq*q_eQO}T%qMCcem3W0c*^@HQ%l){os)Q78a(rM}iG|#4zyCEi;J>ioD_tKiD0Ov) z4`BWTppxtDI5`t9(-{zYUJ}c%ONrCi4!eX)9Q(Brwoy3;U9%56N?f_3^yLsg12vxB9pGThQ-(DPq}x)>kpO+t*Ls9c8Y?$&hX@yDY@PHq|9EO(Wo z^f6)665fly#&R-(+dqpMP>9+;+MnvqF)4rY^s>BOmLzagnLSdaPyQ%)W$f_6;yCc- zms|_?w9p=VmdU@IKq7aq?Ed%U7DL{xm*uu;ypE@0d$q|rP0q4U0&FhjY>nds+-`r1 zeAtM*t#{udOXF}DuLdxUb3I-hh|OhrSalb1=ngHNJ=1&@WFvU1J8#lt@Q`ZiFkv?< z+c+&0Z4c89Gy_e%jX10UG&gxnuoFkb5ljtj9PzG1}VX@d{W!!f`t zHMv(??;`>QWu5r1h*WM6;r+b11(^TY?#i?eWM9cHD$OFf9UL7m%6X83H@+IM5E;0E zXVc)vNj+)1Ud*q*0>JTWk3pwXPMiQT-|6#bY202)>102Gi28EQNRrPmdI1*lPHuM_ z!RV1TPhYm*=S0%06l0M1cqk{+Qk)P}k~pK=b8r2!v0n276OMrm2dRmH!It$Lvol}w zPe!bBrA|pXoFI7K3zo5JU4#u;cbGs>n-&mDAhv1vw7(n~Zo~+lau+OHX08WQB7iN$ zUf3OeNz%(NDOzrtZV!`^otWUhu1tSKY$Sqlo@jI*Y=9e64VT7CAc3q=tNth%s=R3^ z$!fT17_3;L$}pGs>Q@x^&O_iF&?Kje7fUg#x)WAnG-r9rBxEZXOJ93xd#c1dQ6PLVgG;+GBzO<5uV`_q?l&FkLcKuq3k)sy(b zK9T$$hv}#!`a6@+u6Cc+KlJ&x3YDZi~_2GM2faUI8idqPx&oD-fU~p z(}!)D?rggw?YAlEiz}BQtp(1queRPlqE_fcbZ1{IC~N`WN5lduG)`XV_VEy$JhaI5U+|M`1*O_>pUTcn;tF14|f$>`qwJ z1ypgaA1P*aY}68%W`cvo3&K-xfJa&>${?2=l`Y094?N^>bbcZ(1o)JcFxmS8133#8 zR^{h^R3aVjA6J~v>s0HC%Vd7yIS9=TDU~{cQDsT$K^AX=#4!3@b`!7>&YW5)Wke*D z{n}3OH~Y842Wh=EB|03%*V6?4J?@8w*Wnxhf6$ugk zk`Mfv1#BwPM6F(sh z`p|h;vS{*1G@$4${vJ%50x~cR?CC)02sq2S<+FBE5Gs`BFg!Igzt{JoAHabv~@98fpV^$8854~zO;E}mXX zts-LB9)_3VTPZr}n3`B+4-&iz#!>zpq8~$?GYy=U?`z{?K@q2jxKS|^e~wG+V5N5i zpc#>sfzIt=A#o+$DH-=6B=H}TBmS)Y5qSNv`_V-i;^1H%{ZXLKRdj!~wK-_(TxoPj zHPPpG!PHzNRf(An=W}ci()%L?q#BRZL+qwqX}*URM$L11|XdxF+~blT_Yokz5J~KZMy{Ff6+d19i(a zxL90$3Q1CYJ9@`4vXx9mbgTBsL=LxG?tP!EV*GEOGuaMr2SBk(Ai`=EJ2KPiEVu1t z`2AUUnr6%D%*SW;{)!tqtmxZ^tlgQD6xXlwEn*KNS~cgnA_xK=4=3v2@+4P9lW&&N z0iQR!Bah;};eJ`*Jbi<_%kJger>%V%p2B-Zrd)PT@X?#_M*e65dC$eymUEB*X0+`w zzoofpXEZhK{+;nzcviE=f`1a`_0}Fz8rSawJhrsLf1kf5s{d6k z?;k^0DRTHXWa_(5Z@TRJcoUo=^pP&2qE_IPiqJuolC^LvL6Z8pmaD&QnI_wC;d3Z` z0=%}0DZjW>Ykp$!3_#A<-TNavJ5uJ<43ZPE|4M>UqeJY72c$s78&VR_%EU&Pb*YnM zvgl|ZXv<`6HxA1=`h0RBW2LQ|YQMMaB-|YG#Be?y&69^Ng%PuMX~i|biWWqHM@jZ+ z4pvn+L{VOKK3&G?#=N#6qz{V*CpS0puM^EX9f3oV zy}u+=1)y7Bp4BSJub^)jtl8GCZHC{GQ8Jd!asM_5j#zsxB`R?pAmH_0RlITgZzOs~ zzGSgh`6V8|3$3k*By`?%$%t7B{we>io1?i-Eg|I;$tmlYtKTr1>W%DIg`87aGk1bl z>eo;05Ln>VYC_pRzu^Aw>YZ)y{}RpqKbG{ z@uHXVZ=I)Zpkct#EVK&9I-0aU*TU~+Y5r|vIuVdd%!q*YSMOuA(ydceLlL!sf#zwFEOXWoab%$%qM+vK2 zPzqks0+5AEU?iObKLt>50XR`}nug*NZO2u^7JIqior9(yMtXEtTtkLW`4aD}C1ZfYm z9at-KIslSc2RJxi(Z7HgENC`CyvzsgV94^u-BbWb2dYc+>$VouD_y_pBs>XqV7FAN z4zg$={Q$K(O{;^tsRCML0bt%0m{v1DLIAvvC7_{zuRG4<_uRYzy$S5*Q$5M!m*2$f z^DuAXX;mb(Wo1D(0mdmM`0u>-ObO>Uud3M=5!0hOnJ3n(a@&WFk^k&~~Lkd@iw zaPc^xVh8YL8^J(Zaszy@-ai%xl;rsHUwa;*fOq{TD8Rq~B?;{Ougp}4+}AJ^aYgMP z4}rcPpxvYKwCRYkVI2aK_K*imJz(nE1qWU*?_ji&%!Bh6hU`ae4ccOuLNe?@J&tB z@O7XvP6L&(YYJd)bMw@Ty`C`GT!CK<1nFvMbYY0dapx9WQAU+N9YzHJng`=2uEC(Re1m zW=2`DXap>#3fKbxT0Bri92^`h03raCk$}tdy|K-oinrdyd2pZ+*alqUw93Eq-mGS@ z7{aLbJz(rFRPV9$;|D~&N;zqYzo*4w%Gz{WJ)FT~W41X&b+Dwt7iiYiUS6Ptqt13M z6T(D&;0}m%3Q@6OBo^HONgag$!SHhebpgAcM390BR|$pASEZa9D_?&T1aRKn=(sEx zi{lc2!iA!3P^EJNr~oa8#U6V=4c7@Y_axq5u)-PH;Q@nYlig2JJcJ z@{te!1q+uV!IBIb0c#}fBakdtJ;7CLGL{}n9FypwjL8d5=GO5+6`nVTfwRo%vRY>F z=8K0jfbFc?n39%e*#VeX!MKCu6LjRoGn}z%-(|+=ezz!sCc})r{eEAN%wR!_2QM?v z4SerdVWLCzr&p-BE!OGGZzJ6nHx@+AT8sSM+mLzVH(WPcQG%K5=4ce=mq4;n^Z~aZ z?xCkpNKTz{2fcexI%M95!>vlgev9p$ok`jhivMDfW!MLHZ=hJ=uP22ok+*piTP>`RFp zMb@O4G)(he&-DHa@8|ROlTW|Q%=3J|_jTRNb={KMQ_dA+k@)U9pv>YoR!zb`Xc6T) z4Ck=|TDH8T{;SBOC*Pcr?dEyWIjLx5C@ad9@t&pq^XG2&uI4>f9lPU!Rdj^+gX@?{ zCam->NdL4*o{m{gF*yc~QeL^|cI}h7`8`8;Ro~&9C70aR= z^p={bzs&hIXu3G_CGr0&f4*bwk+`zSR;0LI?h>)a;lPNi&|qsbqLNc`Eb7dAU8<`x zzh9w-(o({;E^-|8mVb}Ux@1CSitaL3%$GoScL-nHXDK9xT+ z2QP4erw91}F}$CQxp~Oyw2*aP;c;PcZczZ1!2!3oO7urO1BL}$?AD~TU)yF>3@idDTISS?txRd36Z=a zJERS}*@DicZ)J-i(e(h#0H84T7v-a2MbsLN`(imLS*=!lv3Vc*+ox~30;lOS2s3k) zbxdz;E7CdyZ3>p7^y5(k%ndW~#r2vTxCX4H_>9kN^55N99<|t)9oIPZyr}G4I;npF z4UF#?%O_d~uVDoI{gZ0^$Nqb7MNX%6<{y;^e5wKDd*j>uJ9DvLyj^p8k2Z96UbpY; z9$$#9R@tNXgHH?!A^9@&ht3k`-3NTcg6JuA48voNg`%6*uUw zoEfZ`g+qA|F4o=Iw6rwj+Jo<4vaWyl!9y+;GNN4=JjuM~-vCBZFxKy3ZJ9c@ z!C1&QAc~#<==T;4^du4h^!n|}xZ3r%gHUzE;J8r#9fCGbHUMxo3`Nz-8B4!Txs-v| zk{yv7G!khUY0i&6gS3S}DMljYegOZPhwXy2j;(}U zk^MZ{TvY%FvxCD0OuWGUD>`L+EO+;y9?wA0UwbUk>Q}ccrIW1_W#@=ei7ctarG|m# z(%70LV(3?}?b6WHdtJsvHk62WpJHE9`3@HAMin|&sL{lz&~E)XImQRbwGK}$*wr*9 zWt>=mRv1KNy}_UxR@XHg&|-oR|5DdSw`sAA=NEsC+&D+JNakK4Fr> z*bD(c!;aXM+Q1_Z_UQ{R$|ZHhc?A0nI!hz4LNkaW_knFC-`d1O8bfRdMQ6i!5KuQ7 z+)Ev`X@?G{fc`s7V>c?l-e>8w{m>*S ze0M4Nm^*pQp~eiHLY8-;4J?-GFA+4cUHdh7Q>DXXs`oS5VO25K5Da%j&$upnLVHN5 z=I+B$;hQ9lf%0azG?kIy@#C_!C*RlZF z#R|`9C{mT7uQGE|t=V=csT6qEp|{Th6#Qz2lya~`|_owas^QhiTB8< z^F3ZVNI=7y3TgDh1n!6N?_~bYpB6bR_~g}3Ijbji!;IZuGSpdfhveH?uA)v2Zts(4 z?H=UGXqG>SzfjV~Iy*2m6jHdBC1S&vOYaKfro7LO5ZoTq?yAAbY|QgcAO|syrp7-+ z($liaT<4p|v&zJVTj5?m5aTFWR)QtLIbPvgeqTwd4g zy$%88y5Wt&PA{A7k9+`yIR9Uc1QcOn1-yXj=IEuZr9F*N0@J-TwO~57GzC@ud_4@M zRO}$`H#eCe@(HjJHM9-!!UHC|#$dJgEDTVkJcB@x4)P7GA-Z{z-Ga2Og$ckq+)~iW29G z8sr%}b6oA}FrI<_lHhhhg=vs87{3=^t*39rccR+Jy1(QmP~XjpEF~d*E_h|WnOMz6 z?2dpG5KR8I@@ex571Q4QR-jK^V+io&^UDb#TdLbU7&@ zuuT)fK@dAbljXuU+f+O|FnjU}!D2yJjcCy0!jO?%Xf8&J?Wd!5ydMdYpPyg1V3%p! z0j+QE6F?=7JoX%H1a}`rlszzu%@b;NQ-s+(0Y0ccKKoO+xdRcoxv+{3CEp|bJnsNZ z4p`@UFa+)_^b-|4pXzyoB61KijICk^U_1EB9dEN#v-}zXOFQ zf!U`qWdO*$d+a=_n1r6V>k}Mu(zOEbhi{q9qG9$$MzicQu<_bAq6xg9QiL25&fhi` zQ+5w-=e}3nXtkpPhU0`Acwk^4nrar|8KB)kMLdG_6A0i+UC!1q(Q+O^7!zrE5>iEn z!^)%Cib41Vq$F+|xgdD|}09 z99$PGzYEEj1R6)eSg@J!D1b&YBEHNLjvDi_4NV8`)zC#hAAacRGc!;|b>R!?1Am0l zbVHOV(HbQ{0c8rypxY&$bWeMH6U%oX-f^|2<|fi&rI}A|EtNHkTlM2meMRza8)x;@ zd2OZh6DNOKfz6K8g1oSIF>1GefbHiLF8j7}v5l`-Vk#&hT$ovM-K$W|M&+ z^dtZo=%L8gBQw{0vD(;=(1(KgMr_wDFQRHPkI_+?5Z5@r^SnOIUSYBnLuytEOxR3> z^Pn%Uy?F5&w~*ldzAhtey|Y1}ltSHkOW#0`3;v)~x4uCkrd4{z($}Y&qkjY~W0`rI zmFur)VBVu{jix#`#FRYNbM^dUM(xZx9EpT67+jb4Zl;}tZJp!iO|XBpI}V>Qp{B=+THpD^M~dEI)JG{(I-e%pv6 zw`?n6BZS+~+5I?vmD2L!^yyY;>0S_yHSm>Lc_c&c&I5>9orb&-Ji;b zCZQ4MzkN}x--z@x1Ey6S?6cwF)C*>n7Dd#l1!?@_!2@{-{ z-KaZB08D)z_@{Y&fTscH7nx1)qeXIprxHv{SG(}&#( zN|ZXU>WtyMx|G}k8?_JeE~^d|#aEojQOsL1x?jnVI}&@d2Xtd{9`b=f^+#f<%oE@!Ou z6y7)f4#9kHoi6)H*0--)S-z-qN8v#){smt2K^M*8M@C5PO?{{wX2p#cB@ From d3f8bf8a154148106bb18b4787e313bba6d15fc4 Mon Sep 17 00:00:00 2001 From: Jan Backstrom Date: Mon, 10 Apr 2017 11:12:32 -0700 Subject: [PATCH 3/9] Surface LTSB compatibility new content --- ...vice-compatibility-with-windows-10-ltsb.md | 58 +++++++++++++++++++ 1 file changed, 58 insertions(+) create mode 100644 devices/surface/surface-device-compatibility-with-windows-10-ltsb.md diff --git a/devices/surface/surface-device-compatibility-with-windows-10-ltsb.md b/devices/surface/surface-device-compatibility-with-windows-10-ltsb.md new file mode 100644 index 0000000000..e551df091c --- /dev/null +++ b/devices/surface/surface-device-compatibility-with-windows-10-ltsb.md @@ -0,0 +1,58 @@ +--- +title: Surface device compatibility with Windows 10 Long-Term Servicing Branch (Surface) +description: Find out about compatibility and limitations of Surface devices running Windows 10 Enterprise LTSB edition. +keywords: ltsb, update, surface servicing options +ms.prod: w10 +ms.mktglfcycl: manage +ms.pagetype: surface, devices +ms.sitesec: library +author: jdeckerMS +--- + +# Surface device compatibility with Windows 10 Long-Term Servicing Branch (LTSB) + +Surface devices are designed to provide best-in-class experiences in productivity and general-purpose scenarios. Regular updates enable Surface devices to bring to life new innovations and to evolve with the new capabilities delivered by Windows 10 Feature Updates. Feature Updates are available only in Windows 10 Pro or Windows 10 Enterprise editions that receive continuous updates through the Current Branch (CB) or Current Branch for Business (CBB) servicing options. + +In contrast to the CB and CBB servicing options, the Long-Term Servicing Branch (LTSB) cannot be selected in Windows 10 settings. To use the LTSB servicing option, you must install a separate edition of Windows 10 Enterprise, known as *Windows 10 Enterprise LTSB*. In addition to providing an extended servicing model, the Windows 10 Enterprise LTSB edition also provides an environment with several Windows components removed. The core Surface experiences that are impacted by LTSB include: + +* Windows Feature Updates, including enhancements such as: + + * Improvements to Direct Ink and palm rejection provided in Windows 10, version 1607 (also referred to as the Anniversary Update) + * Improved support for high DPI applications provided in Windows 10, version 1703 (also referred to as the Creators Update) + +* Pressure sensitivity settings provided by the Surface app + +* The Windows Ink Workspace + +* Key touch-optimized in-box applications including Microsoft Edge, OneNote, Calendar, and Camera + +The use of the Windows 10 Enterprise LTSB environment on Surface devices results in sub-optimal end-user experiences and you should avoid using it in environments where users want and expect a premium, up-to-date user experience. + +The LTSB servicing option is designed for device types and scenarios where the key attribute is for features or functionality to never change. Examples include systems that power manufacturing or medical equipment, or embedded systems in kiosks, such as ATMs or airport ticketing systems. + +>[!NOTE] +>For general information about Windows servicing branches, including LTSB, see [Overview of Windows as a service](https://technet.microsoft.com/itpro/windows/update/waas-overview#long-term-servicing-branch). + +>[!NOTE] +>As a general guideline, devices that fulfill the following criteria are considered general-purpose devices and should be paired with Windows 10 Pro or Windows 10 Enterprise using the CB or CBB servicing options: + +* Devices that run productivity software such as Microsoft Office + +* Devices that use Windows Store applications + +* Devices that are used for general Internet browsing (for example, research or access to social media) + +Before you choose to use Windows 10 Enterprise LTSB edition on Surface devices, consider the following limitations: + +* Drivers and firmware for Surface devices are tested against the most recent version of Windows 10 CB and the last two versions of CBB. Drivers and firmware are not explicitly tested against releases of Windows 10 Enterprise LTSB. + +* If you encounter problems, Microsoft Support will provide troubleshooting assistance. However, due to the servicing nature of the Windows LTSB, issue resolution may require that devices be upgraded to a more recent version of Windows 10 Enterprise LTSB, or to Windows 10 Pro or Enterprise with the CB or CBB servicing options. + +* Surface device replacements, for example devices replaced under warranty, may contain subtle variations in hardware components that require updated device drivers and firmware. Compatibility with these updates may require the installation of a more recent version of Windows 10 Enterprise LTSB or Windows 10 Pro or Enterprise with the CB or CBB servicing options. + +>[!NOTE] +>Organizations that standardize on a specific version of Windows 10 Enterprise LTSB may be unable to adopt new generations of Surface hardware without also updating to a later version of Windows 10 Enterprise LTSB or Windows 10 Pro or Enterprise. For more information, see the **How will Windows 10 LTSBs be supported?** topic in the **Supporting the latest processor and chipsets on Windows** section of [Lifecycle Policy FAQ—Windows products](https://support.microsoft.com/help/18581/lifecycle-policy-faq-windows-products#b4). + +Surface devices running Windows 10 Enterprise LTSB edition will not receive new features. In many cases these features are requested by customers to improve the usability and capabilities of Surface hardware. For example, new improvements for High DPI applications in Windows 10, version 1703. Customers that use Surface devices in the LTSB configuration will not see the improvements until they either update to a new Windows 10 Enterprise LTSB release or upgrade to a version of Windows 10 with support for the CB and CBB servicing options. + +Devices can be changed from Windows 10 Enterprise LTSB to a more recent version of Windows 10 Enterprise, with support for the CB and CBB servicing options, without the loss of user data by performing an upgrade installation. You can also perform an upgrade installation on multiple devices by leveraging the Upgrade Task Sequence Templates available in the Microsoft Deployment Toolkit (MDT) and System Center Configuration Manager. For more information, see [Upgrade Surface devices to Windows 10 with Microsoft Deployment Toolkit](https://technet.microsoft.com/itpro/surface/upgrade-surface-devices-to-windows-10-with-mdt). From 9ac83b39feb90af16bc7759c86054a607b9aabdd Mon Sep 17 00:00:00 2001 From: Jan Backstrom Date: Mon, 10 Apr 2017 12:18:56 -0700 Subject: [PATCH 4/9] edits --- .../surface-device-compatibility-with-windows-10-ltsb.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/devices/surface/surface-device-compatibility-with-windows-10-ltsb.md b/devices/surface/surface-device-compatibility-with-windows-10-ltsb.md index e551df091c..189e013e77 100644 --- a/devices/surface/surface-device-compatibility-with-windows-10-ltsb.md +++ b/devices/surface/surface-device-compatibility-with-windows-10-ltsb.md @@ -13,7 +13,7 @@ author: jdeckerMS Surface devices are designed to provide best-in-class experiences in productivity and general-purpose scenarios. Regular updates enable Surface devices to bring to life new innovations and to evolve with the new capabilities delivered by Windows 10 Feature Updates. Feature Updates are available only in Windows 10 Pro or Windows 10 Enterprise editions that receive continuous updates through the Current Branch (CB) or Current Branch for Business (CBB) servicing options. -In contrast to the CB and CBB servicing options, the Long-Term Servicing Branch (LTSB) cannot be selected in Windows 10 settings. To use the LTSB servicing option, you must install a separate edition of Windows 10 Enterprise, known as *Windows 10 Enterprise LTSB*. In addition to providing an extended servicing model, the Windows 10 Enterprise LTSB edition also provides an environment with several Windows components removed. The core Surface experiences that are impacted by LTSB include: +In contrast to the CB and CBB servicing options, you cannot select the Long-Term Servicing Branch (LTSB) option in Windows 10 settings. To use the LTSB servicing option, you must install a separate edition of Windows 10 Enterprise, known as *Windows 10 Enterprise LTSB*. In addition to providing an extended servicing model, the Windows 10 Enterprise LTSB edition also provides an environment with several Windows components removed. The core Surface experiences that are impacted by LTSB include: * Windows Feature Updates, including enhancements such as: @@ -34,7 +34,7 @@ The LTSB servicing option is designed for device types and scenarios where the k >For general information about Windows servicing branches, including LTSB, see [Overview of Windows as a service](https://technet.microsoft.com/itpro/windows/update/waas-overview#long-term-servicing-branch). >[!NOTE] ->As a general guideline, devices that fulfill the following criteria are considered general-purpose devices and should be paired with Windows 10 Pro or Windows 10 Enterprise using the CB or CBB servicing options: +>As a general guideline, devices that fulfill the following criteria are considered general-purpose devices and should be paired with Windows 10 Pro or Windows 10 Enterprise using the CB or CBB servicing option: * Devices that run productivity software such as Microsoft Office @@ -46,9 +46,9 @@ Before you choose to use Windows 10 Enterprise LTSB edition on Surface devices, * Drivers and firmware for Surface devices are tested against the most recent version of Windows 10 CB and the last two versions of CBB. Drivers and firmware are not explicitly tested against releases of Windows 10 Enterprise LTSB. -* If you encounter problems, Microsoft Support will provide troubleshooting assistance. However, due to the servicing nature of the Windows LTSB, issue resolution may require that devices be upgraded to a more recent version of Windows 10 Enterprise LTSB, or to Windows 10 Pro or Enterprise with the CB or CBB servicing options. +* If you encounter problems, Microsoft Support will provide troubleshooting assistance. However, due to the servicing nature of the Windows LTSB, issue resolution may require that devices be upgraded to a more recent version of Windows 10 Enterprise LTSB, or to Windows 10 Pro or Enterprise with the CB or CBB servicing option. -* Surface device replacements, for example devices replaced under warranty, may contain subtle variations in hardware components that require updated device drivers and firmware. Compatibility with these updates may require the installation of a more recent version of Windows 10 Enterprise LTSB or Windows 10 Pro or Enterprise with the CB or CBB servicing options. +* Surface device replacements (for example, devices replaced under warranty) may contain subtle variations in hardware components that require updated device drivers and firmware. Compatibility with these updates may require the installation of a more recent version of Windows 10 Enterprise LTSB or Windows 10 Pro or Enterprise with the CB or CBB servicing option. >[!NOTE] >Organizations that standardize on a specific version of Windows 10 Enterprise LTSB may be unable to adopt new generations of Surface hardware without also updating to a later version of Windows 10 Enterprise LTSB or Windows 10 Pro or Enterprise. For more information, see the **How will Windows 10 LTSBs be supported?** topic in the **Supporting the latest processor and chipsets on Windows** section of [Lifecycle Policy FAQ—Windows products](https://support.microsoft.com/help/18581/lifecycle-policy-faq-windows-products#b4). From 0a00f43b798e4e6d189eea57f3d0c0ed57eecacb Mon Sep 17 00:00:00 2001 From: Justinha Date: Mon, 10 Apr 2017 12:20:33 -0700 Subject: [PATCH 5/9] added feedback from Kartikay --- windows/keep-secure/bitlocker-recovery-guide-plan.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/keep-secure/bitlocker-recovery-guide-plan.md b/windows/keep-secure/bitlocker-recovery-guide-plan.md index 14168b1e36..788b6165ea 100644 --- a/windows/keep-secure/bitlocker-recovery-guide-plan.md +++ b/windows/keep-secure/bitlocker-recovery-guide-plan.md @@ -45,7 +45,7 @@ BitLocker recovery is the process by which you can restore access to a BitLocker The following list provides examples of specific events that will cause BitLocker to enter recovery mode when attempting to start the operating system drive: - On PCs that use either BitLocker or Device Encryption, when an attack is detected, the device will immediately reboot and enter into BitLocker recovery mode. To take advantage of this functionality Administrators can set the **Interactive logon: Machine account lockout threshold** Group Policy setting located in **\\Computer Configuration\\Windows Settings\\Security Settings\\Local Policies\\Security Options** in the Local Group Policy Editor, or use the **MaxFailedPasswordAttempts** policy of [Exchange ActiveSync](http://technet.microsoft.com/library/aa998357.aspx) (also configurable through [Windows Intune](http://technet.microsoft.com/library/jj733621.aspx)), to limit the number of failed password attempts before the device goes into Device Lockout. -- With TPM 1.2, changing the boot order to boot another drive before the hard drive. TPM 2.0 does not consider change of boot order a security threat because the OS Boot Loader is not compromised. +- On devices with TPM 1.2, changing the BIOS or firmware boot device order causes BitLocker recovery. However, devices with TPM 2.0 do not consider a firmware change of boot order as a security threat because the OS Boot Loader is not compromised. - Having the CD or DVD drive before the hard drive in the BIOS boot order and then inserting or removing a CD or DVD. - Failing to boot from a network drive before booting from the hard drive. - Docking or undocking a portable computer. In some instances (depending on the computer manufacturer and the BIOS), the docking condition of the portable computer is part of the system measurement and must be consistent to validate the system status and unlock BitLocker. This means that if a portable computer is connected to its docking station when BitLocker is turned on, then it might also need to be connected to the docking station when it is unlocked. Conversely, if a portable computer is not connected to its docking station when BitLocker is turned on, then it might need to be disconnected from the docking station when it is unlocked. From d81a3bbaa1e83cf1a9f44bfaed881a11e92d910c Mon Sep 17 00:00:00 2001 From: Justinha Date: Mon, 10 Apr 2017 12:29:24 -0700 Subject: [PATCH 6/9] revised per Kartikay --- windows/keep-secure/bitlocker-recovery-guide-plan.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/keep-secure/bitlocker-recovery-guide-plan.md b/windows/keep-secure/bitlocker-recovery-guide-plan.md index 788b6165ea..557719c15c 100644 --- a/windows/keep-secure/bitlocker-recovery-guide-plan.md +++ b/windows/keep-secure/bitlocker-recovery-guide-plan.md @@ -45,7 +45,7 @@ BitLocker recovery is the process by which you can restore access to a BitLocker The following list provides examples of specific events that will cause BitLocker to enter recovery mode when attempting to start the operating system drive: - On PCs that use either BitLocker or Device Encryption, when an attack is detected, the device will immediately reboot and enter into BitLocker recovery mode. To take advantage of this functionality Administrators can set the **Interactive logon: Machine account lockout threshold** Group Policy setting located in **\\Computer Configuration\\Windows Settings\\Security Settings\\Local Policies\\Security Options** in the Local Group Policy Editor, or use the **MaxFailedPasswordAttempts** policy of [Exchange ActiveSync](http://technet.microsoft.com/library/aa998357.aspx) (also configurable through [Windows Intune](http://technet.microsoft.com/library/jj733621.aspx)), to limit the number of failed password attempts before the device goes into Device Lockout. -- On devices with TPM 1.2, changing the BIOS or firmware boot device order causes BitLocker recovery. However, devices with TPM 2.0 do not consider a firmware change of boot order as a security threat because the OS Boot Loader is not compromised. +- On devices with TPM 1.2, changing the BIOS or firmware boot device order causes BitLocker recovery. However, devices with TPM 2.0 do not start BitLocker recovery in this case. TPM 2.0 does not consider a firmware change of boot device order as a security threat because the OS Boot Loader is not compromised. - Having the CD or DVD drive before the hard drive in the BIOS boot order and then inserting or removing a CD or DVD. - Failing to boot from a network drive before booting from the hard drive. - Docking or undocking a portable computer. In some instances (depending on the computer manufacturer and the BIOS), the docking condition of the portable computer is part of the system measurement and must be consistent to validate the system status and unlock BitLocker. This means that if a portable computer is connected to its docking station when BitLocker is turned on, then it might also need to be connected to the docking station when it is unlocked. Conversely, if a portable computer is not connected to its docking station when BitLocker is turned on, then it might need to be disconnected from the docking station when it is unlocked. From 11530f7fe5eafcfd3f102cc4ef32c7ffa5cce101 Mon Sep 17 00:00:00 2001 From: jdeckerMS Date: Mon, 10 Apr 2017 12:53:02 -0700 Subject: [PATCH 7/9] alt test --- .../set-up-a-kiosk-for-windows-10-for-mobile-edition.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/configure/set-up-a-kiosk-for-windows-10-for-mobile-edition.md b/windows/configure/set-up-a-kiosk-for-windows-10-for-mobile-edition.md index 3ef7f7e374..9cb47b71cd 100644 --- a/windows/configure/set-up-a-kiosk-for-windows-10-for-mobile-edition.md +++ b/windows/configure/set-up-a-kiosk-for-windows-10-for-mobile-edition.md @@ -165,7 +165,7 @@ Apps Corner lets you set up a custom Start screen on your Windows 10 Mobile or 1. On Start ![start](images/starticon.png), swipe over to the App list, then tap **Settings** ![settings](images/settingsicon.png) > **Accounts** > **Apps Corner**. -2. Tap **Apps**, tap to select the app that you want people to use in the kiosk mode, and then tap done ![](images/doneicon.png) +2. Tap **Apps**, tap to select the app that you want people to use in the kiosk mode, and then tap done ![done icon](images/doneicon.png). 3. If your phone doesn't already have a lock screen password, you can set one now to ensure that people can't get to your Start screen from Apps Corner. Tap **Protect my phone with a password**, click **Add**, type a PIN in the **New PIN** box, type it again in the **Confirm PIN** box, and then tap **OK**. Press **Back** ![back](images/backicon.png) to the Apps Corner settings. From 95281d44fe587418aa33c9d3f5d591aa80bc1901 Mon Sep 17 00:00:00 2001 From: Jan Backstrom Date: Mon, 10 Apr 2017 13:18:23 -0700 Subject: [PATCH 8/9] edits add to toc, deploy, change history --- devices/surface/TOC.md | 1 + devices/surface/change-history-for-surface.md | 8 ++++++++ devices/surface/deploy.md | 1 + 3 files changed, 10 insertions(+) diff --git a/devices/surface/TOC.md b/devices/surface/TOC.md index 0ce34a2dfe..cf63a82e5e 100644 --- a/devices/surface/TOC.md +++ b/devices/surface/TOC.md @@ -1,6 +1,7 @@ # [Surface](index.md) ## [Deploy Surface devices](deploy.md) ### [Long-Term Servicing Branch for Surface devices](ltsb-for-surface.md) +### [Surface device compatibility with Windows 10 Long-Term Servicing Branch](surface-device-compatibility-with-windows-10-ltsb.md) ### [Deploy Windows 10 to Surface devices with MDT](deploy-windows-10-to-surface-devices-with-mdt.md) ### [Upgrade Surface devices to Windows 10 with MDT](upgrade-surface-devices-to-windows-10-with-mdt.md) ### [Customize the OOBE for Surface deployments](customize-the-oobe-for-surface-deployments.md) diff --git a/devices/surface/change-history-for-surface.md b/devices/surface/change-history-for-surface.md index a6195be9e0..d8b3de070f 100644 --- a/devices/surface/change-history-for-surface.md +++ b/devices/surface/change-history-for-surface.md @@ -11,6 +11,14 @@ author: jdeckerMS This topic lists new and updated topics in the Surface documentation library. + +## April 2017 + +|New or changed topic | Description | +| --- | --- | +|[Surface device compatibility with Windows 10 Long-Term Servicing Branch](surface-device-compatibility-with-windows-10-ltsb.md) | New | + + ## January 2017 |New or changed topic | Description | diff --git a/devices/surface/deploy.md b/devices/surface/deploy.md index 03cdc49f49..bacdc0c007 100644 --- a/devices/surface/deploy.md +++ b/devices/surface/deploy.md @@ -17,6 +17,7 @@ Get deployment guidance for your Surface devices including information about MDT | Topic | Description | | --- | --- | | [Long-Term Servicing Branch for Surface devices](ltsb-for-surface.md) | Explains that LTSB is not supported for general-purpose Surface devices and should be used for specialized devices only. | +| [Surface device compatibility with Windows 10 Long-Term Servicing Branch](surface-device-compatibility-with-windows-10-ltsb.md) | Find out about compatibility and limitations of Surface devices running Windows 10 Enterprise LTSB edition. | | [Deploy Windows 10 to Surface devices with MDT](deploy-windows-10-to-surface-devices-with-mdt.md) | Walk through the recommended process of how to deploy Windows 10 to your Surface devices with the Microsoft Deployment Toolkit.| | [Upgrade Surface devices to Windows 10 with MDT](upgrade-surface-devices-to-windows-10-with-mdt.md)| Find out how to perform a Windows 10 upgrade deployment to your Surface devices. | | [Customize the OOBE for Surface deployments](customize-the-oobe-for-surface-deployments.md)| Walk through the process of customizing the Surface out-of-box experience for end users in your organization.| From 1b50b54df076ecc04a43420e1d24985eafeecc9d Mon Sep 17 00:00:00 2001 From: John Tobin Date: Mon, 10 Apr 2017 15:39:04 -0700 Subject: [PATCH 9/9] Move duplicate content --- windows/keep-secure/additional-mitigations.md | 477 ++++++++++++++ .../credential-guard-protection-limits.md | 596 ------------------ 2 files changed, 477 insertions(+), 596 deletions(-) diff --git a/windows/keep-secure/additional-mitigations.md b/windows/keep-secure/additional-mitigations.md index ba119db5fa..706bdef10b 100644 --- a/windows/keep-secure/additional-mitigations.md +++ b/windows/keep-secure/additional-mitigations.md @@ -128,6 +128,483 @@ To make tracking authentication failures due to authentication policies easier, To learn more about authentication policy events, see [Authentication Policies and Authentication Policy Silos](https://technet.microsoft.com/en-us/library/dn486813(v=ws.11).aspx). +### Appendix: Scripts + +Here is a list of scripts mentioned in this topic. + +#### Get the available issuance policies on the certificate authority + +Save this script file as get-IssuancePolicy.ps1. + +``` syntax +####################################### +## Parameters to be defined ## +## by the user ## +####################################### +Param ( +$Identity, +$LinkedToGroup +) +####################################### +## Strings definitions ## +####################################### +Data getIP_strings { +# culture="en-US" +ConvertFrom-StringData -stringdata @' +help1 = This command can be used to retrieve all available Issuance Policies in a forest. The forest of the currently logged on user is targeted. +help2 = Usage: +help3 = The following parameter is mandatory: +help4 = -LinkedToGroup: +help5 = "yes" will return only Issuance Policies that are linked to groups. Checks that the linked Issuance Policies are linked to valid groups. +help6 = "no" will return only Issuance Policies that are not currently linked to any group. +help7 = "all" will return all Issuance Policies defined in the forest. Checks that the linked Issuance policies are linked to valid groups. +help8 = The following parameter is optional: +help9 = -Identity:. If you specify an identity, the option specified in the "-LinkedToGroup" parameter is ignored. +help10 = Output: This script returns the Issuance Policy objects meeting the criteria defined by the above parameters. +help11 = Examples: +errorIPNotFound = Error: no Issuance Policy could be found with Identity "{0}" +ErrorNotSecurity = Error: Issuance Policy "{0}" is linked to group "{1}" which is not of type "Security". +ErrorNotUniversal = Error: Issuance Policy "{0}" is linked to group "{1}" whose scope is not "Universal". +ErrorHasMembers = Error: Issuance Policy "{0}" is linked to group "{1}" which has a non-empty membership. The group has the following members: +LinkedIPs = The following Issuance Policies are linked to groups: +displayName = displayName : {0} +Name = Name : {0} +dn = distinguishedName : {0} + InfoName = Linked Group Name: {0} + InfoDN = Linked Group DN: {0} +NonLinkedIPs = The following Issuance Policies are NOT linked to groups: +'@ +} +##Import-LocalizedData getIP_strings +import-module ActiveDirectory +####################################### +## Help ## +####################################### +function Display-Help { + "" + $getIP_strings.help1 + "" +$getIP_strings.help2 +"" +$getIP_strings.help3 +" " + $getIP_strings.help4 +" " + $getIP_strings.help5 + " " + $getIP_strings.help6 + " " + $getIP_strings.help7 +"" +$getIP_strings.help8 + " " + $getIP_strings.help9 + "" + $getIP_strings.help10 +"" +"" +$getIP_strings.help11 + " " + '$' + "myIPs = .\get-IssuancePolicy.ps1 -LinkedToGroup:All" + " " + '$' + "myLinkedIPs = .\get-IssuancePolicy.ps1 -LinkedToGroup:yes" + " " + '$' + "myIP = .\get-IssuancePolicy.ps1 -Identity:""Medium Assurance""" +"" +} +$root = get-adrootdse +$domain = get-addomain -current loggedonuser +$configNCDN = [String]$root.configurationNamingContext +if ( !($Identity) -and !($LinkedToGroup) ) { +display-Help +break +} +if ($Identity) { + $OIDs = get-adobject -Filter {(objectclass -eq "msPKI-Enterprise-Oid") -and ((name -eq $Identity) -or (displayname -eq $Identity) -or (distinguishedName -like $Identity)) } -searchBase $configNCDN -properties * + if ($OIDs -eq $null) { +$errormsg = $getIP_strings.ErrorIPNotFound -f $Identity +write-host $errormsg -ForegroundColor Red + } + foreach ($OID in $OIDs) { + if ($OID."msDS-OIDToGroupLink") { +# In case the Issuance Policy is linked to a group, it is good to check whether there is any problem with the mapping. + $groupDN = $OID."msDS-OIDToGroupLink" + $group = get-adgroup -Identity $groupDN + $groupName = $group.Name +# Analyze the group + if ($group.groupCategory -ne "Security") { +$errormsg = $getIP_strings.ErrorNotSecurity -f $Identity, $groupName + write-host $errormsg -ForegroundColor Red + } + if ($group.groupScope -ne "Universal") { + $errormsg = $getIP_strings.ErrorNotUniversal -f $Identity, $groupName +write-host $errormsg -ForegroundColor Red + } + $members = Get-ADGroupMember -Identity $group + if ($members) { + $errormsg = $getIP_strings.ErrorHasMembers -f $Identity, $groupName +write-host $errormsg -ForegroundColor Red + foreach ($member in $members) { + write-host " " $member -ForeGroundColor Red + } + } + } + } + return $OIDs + break +} +if (($LinkedToGroup -eq "yes") -or ($LinkedToGroup -eq "all")) { + $LDAPFilter = "(&(objectClass=msPKI-Enterprise-Oid)(msDS-OIDToGroupLink=*)(flags=2))" + $LinkedOIDs = get-adobject -searchBase $configNCDN -LDAPFilter $LDAPFilter -properties * + write-host "" + write-host "*****************************************************" + write-host $getIP_strings.LinkedIPs + write-host "*****************************************************" + write-host "" + if ($LinkedOIDs -ne $null){ + foreach ($OID in $LinkedOIDs) { +# Display basic information about the Issuance Policies + "" + $getIP_strings.displayName -f $OID.displayName + $getIP_strings.Name -f $OID.Name + $getIP_strings.dn -f $OID.distinguishedName +# Get the linked group. + $groupDN = $OID."msDS-OIDToGroupLink" + $group = get-adgroup -Identity $groupDN + $getIP_strings.InfoName -f $group.Name + $getIP_strings.InfoDN -f $groupDN +# Analyze the group + $OIDName = $OID.displayName + $groupName = $group.Name + if ($group.groupCategory -ne "Security") { + $errormsg = $getIP_strings.ErrorNotSecurity -f $OIDName, $groupName + write-host $errormsg -ForegroundColor Red + } + if ($group.groupScope -ne "Universal") { + $errormsg = $getIP_strings.ErrorNotUniversal -f $OIDName, $groupName + write-host $errormsg -ForegroundColor Red + } + $members = Get-ADGroupMember -Identity $group + if ($members) { + $errormsg = $getIP_strings.ErrorHasMembers -f $OIDName, $groupName + write-host $errormsg -ForegroundColor Red + foreach ($member in $members) { + write-host " " $member -ForeGroundColor Red + } + } + write-host "" + } + }else{ +write-host "There are no issuance policies that are mapped to a group" + } + if ($LinkedToGroup -eq "yes") { + return $LinkedOIDs + break + } +} +if (($LinkedToGroup -eq "no") -or ($LinkedToGroup -eq "all")) { + $LDAPFilter = "(&(objectClass=msPKI-Enterprise-Oid)(!(msDS-OIDToGroupLink=*))(flags=2))" + $NonLinkedOIDs = get-adobject -searchBase $configNCDN -LDAPFilter $LDAPFilter -properties * + write-host "" + write-host "*********************************************************" + write-host $getIP_strings.NonLinkedIPs + write-host "*********************************************************" + write-host "" + if ($NonLinkedOIDs -ne $null) { + foreach ($OID in $NonLinkedOIDs) { +# Display basic information about the Issuance Policies +write-host "" +$getIP_strings.displayName -f $OID.displayName +$getIP_strings.Name -f $OID.Name +$getIP_strings.dn -f $OID.distinguishedName +write-host "" + } + }else{ +write-host "There are no issuance policies which are not mapped to groups" + } + if ($LinkedToGroup -eq "no") { + return $NonLinkedOIDs + break + } +} +``` +> [!NOTE] +> If you're having trouble running this script, try replacing the single quote after the ConvertFrom-StringData parameter. +  +#### Link an issuance policy to a group + +Save the script file as set-IssuancePolicyToGroupLink.ps1. + +``` syntax +####################################### +## Parameters to be defined ## +## by the user ## +####################################### +Param ( +$IssuancePolicyName, +$groupOU, +$groupName +) +####################################### +## Strings definitions ## +####################################### +Data ErrorMsg { +# culture="en-US" +ConvertFrom-StringData -stringdata @' +help1 = This command can be used to set the link between a certificate issuance policy and a universal security group. +help2 = Usage: +help3 = The following parameters are required: +help4 = -IssuancePolicyName: +help5 = -groupName:. If no name is specified, any existing link to a group is removed from the Issuance Policy. +help6 = The following parameter is optional: +help7 = -groupOU:. If this parameter is not specified, the group is looked for or created in the Users container. +help8 = Examples: +help9 = This command will link the issuance policy whose display name is "High Assurance" to the group "HighAssuranceGroup" in the Organizational Unit "OU_FOR_IPol_linked_groups". If the group or the Organizational Unit do not exist, you will be prompted to create them. +help10 = This command will unlink the issuance policy whose name is "402.164959C40F4A5C12C6302E31D5476062" from any group. +MultipleIPs = Error: Multiple Issuance Policies with name or display name "{0}" were found in the subtree of "{1}" +NoIP = Error: no issuance policy with name or display name "{0}" could be found in the subtree of "{1}". +IPFound = An Issuance Policy with name or display name "{0}" was successfully found: {1} +MultipleOUs = Error: more than 1 Organizational Unit with name "{0}" could be found in the subtree of "{1}". +confirmOUcreation = Warning: The Organizational Unit that you specified does not exist. Do you want to create it? +OUCreationSuccess = Organizational Unit "{0}" successfully created. +OUcreationError = Error: Organizational Unit "{0}" could not be created. +OUFoundSuccess = Organizational Unit "{0}" was successfully found. +multipleGroups = Error: More than one group with name "{0}" was found in Organizational Unit "{1}". +confirmGroupCreation = Warning: The group that you specified does not exist. Do you want to create it? +groupCreationSuccess = Univeral Security group "{0}" successfully created. +groupCreationError = Error: Univeral Security group "{0}" could not be created. +GroupFound = Group "{0}" was successfully found. +confirmLinkDeletion = Warning: The Issuance Policy "{0}" is currently linked to group "{1}". Do you really want to remove the link? +UnlinkSuccess = Certificate issuance policy successfully unlinked from any group. +UnlinkError = Removing the link failed. +UnlinkExit = Exiting without removing the link from the issuance policy to the group. +IPNotLinked = The Certificate issuance policy is not currently linked to any group. If you want to link it to a group, you should specify the -groupName option when starting this script. +ErrorNotSecurity = Error: You cannot link issuance Policy "{0}" to group "{1}" because this group is not of type "Security". +ErrorNotUniversal = Error: You cannot link issuance Policy "{0}" to group "{1}" because the scope of this group is not "Universal". +ErrorHasMembers = Error: You cannot link issuance Policy "{0}" to group "{1}" because it has a non-empty membership. The group has the following members: +ConfirmLinkReplacement = Warning: The Issuance Policy "{0}" is currently linked to group "{1}". Do you really want to update the link to point to group "{2}"? +LinkSuccess = The certificate issuance policy was successfully linked to the specified group. +LinkError = The certificate issuance policy could not be linked to the specified group. +ExitNoLinkReplacement = Exiting without setting the new link. +'@ +} +# import-localizeddata ErrorMsg +function Display-Help { +"" +write-host $ErrorMsg.help1 +"" +write-host $ErrorMsg.help2 +"" +write-host $ErrorMsg.help3 +write-host "`t" $ErrorMsg.help4 +write-host "`t" $ErrorMsg.help5 +"" +write-host $ErrorMsg.help6 +write-host "`t" $ErrorMsg.help7 +"" +"" +write-host $ErrorMsg.help8 +"" +write-host $ErrorMsg.help9 +".\Set-IssuancePolicyToGroupMapping.ps1 -IssuancePolicyName ""High Assurance"" -groupOU ""OU_FOR_IPol_linked_groups"" -groupName ""HighAssuranceGroup"" " +"" +write-host $ErrorMsg.help10 +'.\Set-IssuancePolicyToGroupMapping.ps1 -IssuancePolicyName "402.164959C40F4A5C12C6302E31D5476062" -groupName $null ' +"" +} +# Assumption: The group to which the Issuance Policy is going +# to be linked is (or is going to be created) in +# the domain the user running this script is a member of. +import-module ActiveDirectory +$root = get-adrootdse +$domain = get-addomain -current loggedonuser +if ( !($IssuancePolicyName) ) { +display-Help +break +} +####################################### +## Find the OID object ## +## (aka Issuance Policy) ## +####################################### +$searchBase = [String]$root.configurationnamingcontext +$OID = get-adobject -searchBase $searchBase -Filter { ((displayname -eq $IssuancePolicyName) -or (name -eq $IssuancePolicyName)) -and (objectClass -eq "msPKI-Enterprise-Oid")} -properties * +if ($OID -eq $null) { +$tmp = $ErrorMsg.NoIP -f $IssuancePolicyName, $searchBase +write-host $tmp -ForeGroundColor Red +break; +} +elseif ($OID.GetType().IsArray) { +$tmp = $ErrorMsg.MultipleIPs -f $IssuancePolicyName, $searchBase +write-host $tmp -ForeGroundColor Red +break; +} +else { +$tmp = $ErrorMsg.IPFound -f $IssuancePolicyName, $OID.distinguishedName +write-host $tmp -ForeGroundColor Green +} +####################################### +## Find the container of the group ## +####################################### +if ($groupOU -eq $null) { +# default to the Users container +$groupContainer = $domain.UsersContainer +} +else { +$searchBase = [string]$domain.DistinguishedName +$groupContainer = get-adobject -searchBase $searchBase -Filter { (Name -eq $groupOU) -and (objectClass -eq "organizationalUnit")} +if ($groupContainer.count -gt 1) { +$tmp = $ErrorMsg.MultipleOUs -f $groupOU, $searchBase +write-host $tmp -ForegroundColor Red +break; +} +elseif ($groupContainer -eq $null) { +$tmp = $ErrorMsg.confirmOUcreation +write-host $tmp " ( (y)es / (n)o )" -ForegroundColor Yellow -nonewline +$userChoice = read-host +if ( ($userChoice -eq "y") -or ($userChoice -eq "yes") ) { +new-adobject -Name $groupOU -displayName $groupOU -Type "organizationalUnit" -ProtectedFromAccidentalDeletion $true -path $domain.distinguishedName +if ($?){ +$tmp = $ErrorMsg.OUCreationSuccess -f $groupOU +write-host $tmp -ForegroundColor Green +} +else{ +$tmp = $ErrorMsg.OUCreationError -f $groupOU +write-host $tmp -ForeGroundColor Red +break; +} +$groupContainer = get-adobject -searchBase $searchBase -Filter { (Name -eq $groupOU) -and (objectClass -eq "organizationalUnit")} +} +else { +break; +} +} +else { +$tmp = $ErrorMsg.OUFoundSuccess -f $groupContainer.name +write-host $tmp -ForegroundColor Green +} +} +####################################### +## Find the group ## +####################################### +if (($groupName -ne $null) -and ($groupName -ne "")){ +##$searchBase = [String]$groupContainer.DistinguishedName +$searchBase = $groupContainer +$group = get-adgroup -Filter { (Name -eq $groupName) -and (objectClass -eq "group") } -searchBase $searchBase +if ($group -ne $null -and $group.gettype().isarray) { +$tmp = $ErrorMsg.multipleGroups -f $groupName, $searchBase +write-host $tmp -ForeGroundColor Red +break; +} +elseif ($group -eq $null) { +$tmp = $ErrorMsg.confirmGroupCreation +write-host $tmp " ( (y)es / (n)o )" -ForegroundColor Yellow -nonewline +$userChoice = read-host +if ( ($userChoice -eq "y") -or ($userChoice -eq "yes") ) { +new-adgroup -samAccountName $groupName -path $groupContainer.distinguishedName -GroupScope "Universal" -GroupCategory "Security" +if ($?){ +$tmp = $ErrorMsg.GroupCreationSuccess -f $groupName +write-host $tmp -ForegroundColor Green +}else{ +$tmp = $ErrorMsg.groupCreationError -f $groupName +write-host $tmp -ForeGroundColor Red +break +} +$group = get-adgroup -Filter { (Name -eq $groupName) -and (objectClass -eq "group") } -searchBase $searchBase +} +else { +break; +} +} +else { +$tmp = $ErrorMsg.GroupFound -f $group.Name +write-host $tmp -ForegroundColor Green +} +} +else { +##### +## If the group is not specified, we should remove the link if any exists +##### +if ($OID."msDS-OIDToGroupLink" -ne $null) { +$tmp = $ErrorMsg.confirmLinkDeletion -f $IssuancePolicyName, $OID."msDS-OIDToGroupLink" +write-host $tmp " ( (y)es / (n)o )" -ForegroundColor Yellow -nonewline +$userChoice = read-host +if ( ($userChoice -eq "y") -or ($userChoice -eq "yes") ) { +set-adobject -Identity $OID -Clear "msDS-OIDToGroupLink" +if ($?) { +$tmp = $ErrorMsg.UnlinkSuccess +write-host $tmp -ForeGroundColor Green +}else{ +$tmp = $ErrorMsg.UnlinkError +write-host $tmp -ForeGroundColor Red +} +} +else { +$tmp = $ErrorMsg.UnlinkExit +write-host $tmp +break +} +} +else { +$tmp = $ErrorMsg.IPNotLinked +write-host $tmp -ForeGroundColor Yellow +} +break; +} +####################################### +## Verify that the group is ## +## Universal, Security, and ## +## has no members ## +####################################### +if ($group.GroupScope -ne "Universal") { +$tmp = $ErrorMsg.ErrorNotUniversal -f $IssuancePolicyName, $groupName +write-host $tmp -ForeGroundColor Red +break; +} +if ($group.GroupCategory -ne "Security") { +$tmp = $ErrorMsg.ErrorNotSecurity -f $IssuancePolicyName, $groupName +write-host $tmp -ForeGroundColor Red +break; +} +$members = Get-ADGroupMember -Identity $group +if ($members -ne $null) { +$tmp = $ErrorMsg.ErrorHasMembers -f $IssuancePolicyName, $groupName +write-host $tmp -ForeGroundColor Red +foreach ($member in $members) {write-host " $member.name" -ForeGroundColor Red} +break; +} +####################################### +## We have verified everything. We ## +## can create the link from the ## +## Issuance Policy to the group. ## +####################################### +if ($OID."msDS-OIDToGroupLink" -ne $null) { +$tmp = $ErrorMsg.ConfirmLinkReplacement -f $IssuancePolicyName, $OID."msDS-OIDToGroupLink", $group.distinguishedName +write-host $tmp "( (y)es / (n)o )" -ForegroundColor Yellow -nonewline +$userChoice = read-host +if ( ($userChoice -eq "y") -or ($userChoice -eq "yes") ) { +$tmp = @{'msDS-OIDToGroupLink'= $group.DistinguishedName} +set-adobject -Identity $OID -Replace $tmp +if ($?) { +$tmp = $Errormsg.LinkSuccess +write-host $tmp -Foreground Green +}else{ +$tmp = $ErrorMsg.LinkError +write-host $tmp -Foreground Red +} +} else { +$tmp = $Errormsg.ExitNoLinkReplacement +write-host $tmp +break +} +} +else { +$tmp = @{'msDS-OIDToGroupLink'= $group.DistinguishedName} +set-adobject -Identity $OID -Add $tmp +if ($?) { +$tmp = $Errormsg.LinkSuccess +write-host $tmp -Foreground Green +}else{ +$tmp = $ErrorMsg.LinkError +write-host $tmp -Foreground Red +} +} +``` + +> [!NOTE] +> If you're having trouble running this script, try replacing the single quote after the ConvertFrom-StringData parameter. + ## See also **Deep Dive into Credential Guard: Related videos** diff --git a/windows/keep-secure/credential-guard-protection-limits.md b/windows/keep-secure/credential-guard-protection-limits.md index d76a71f4d1..f159c931c3 100644 --- a/windows/keep-secure/credential-guard-protection-limits.md +++ b/windows/keep-secure/credential-guard-protection-limits.md @@ -34,602 +34,6 @@ Some ways to store credentials are not protected by Credential Guard, including: - Windows logon cached password verifiers (commonly called "cached credentials") do not qualify as credentials because they cannot be presented to another computer for authentication, and can only be used locally to verify credentials. They are stored in the registry on the local computer and provide validation for credentials when a domain-joined computer cannot connect to AD DS during user logon. These “cached logons”, or more specifically, cached domain account information, can be managed using the security policy setting **Interactive logon: Number of previous logons to cache** if a domain controller is not available. -## Additional mitigations - -Credential Guard can provide mitigations against attacks on derived credentials and prevent the use of stolen credentials elsewhere. However, PCs can still be vulnerable to certain attacks, even if the derived credentials are protected by Credential Guard. These attacks can include abusing privileges and use of derived credentials directly from a compromised device, reusing previously stolen credentials prior to Device Guard, and abuse of management tools and weak application configurations. Because of this, additional mitigations also must be deployed to make the domain environment more robust. - -### Restricting domain users to specific domain-joined devices - -Credential theft attacks allow the attacker to steal secrets from one device and use them from another device. If a user can sign on to multiple devices then any device could be used to steal credentials. How do you ensure that users only sign on using devices that have Credential Guard enabled? By deploying authentication policies that restrict them to specific domain-joined devices that have been configured with Credential Guard. For the domain controller to know what device a user is signing on from, Kerberos armoring must be used. - -#### Kerberos armoring - -Kerberos armoring is part of RFC 6113. When a device supports Kerberos armoring, its TGT is used to protect the user's proof of possession which can mitigate offline dictionary attacks. Kerberos armoring also provides the additional benefit of signed KDC errors this mitigates tampering which can result in things such as downgrade attacks. - -**To enable Kerberos armoring for restricting domain users to specific domain-joined devices** - -- Users need to be in domains that are running Windows Server 2012 R2 or higher -- All the domain controllers in these domains must be configured to support Kerberos armoring. Set the **KDC support for claims, compound authentication, and Kerberos armoring** Group Policy setting to either **Supported** or **Always provide claims**. -- All the devices with Credential Guard that the users will be restricted to must be configured to support Kerberos armoring. Enable the **Kerberos client support for claims, compound authentication and Kerberos armoring** Group Policy settings under **Computer Configuration** -> **Administrative Templates** -> **System** -> **Kerberos**. - -#### Protecting domain-joined device secrets - -Since domain-joined devices also use shared secrets for authentication, attackers can steal those secrets as well. By deploying device certificates with Credential Guard, the private key can be protected. Then authentication policies can require that users sign on devices that authenticate using those certificates. This prevents shared secrets stolen from the device to be used with stolen user credentials to sign on as the user. - -Domain-joined device certificate authentication has the following requirements: -- Devices' accounts are in Windows Server 2012 domain functional level or higher. -- All domain controllers in those domains have KDC certificates which satisfy strict KDC validation certificate requirements: - - KDC EKU present - - DNS domain name matches the DNSName field of the SubjectAltName (SAN) extension -- Windows 10 devices have the CA issuing the domain controller certificates in the enterprise store. -- A process is established to ensure the identity and trustworthiness of the device in a similar manner as you would establish the identity and trustworthiness of a user before issuing them a smartcard. - -##### Deploying domain-joined device certificates - -To guarantee that certificates with the required issuance policy are only installed on the devices these users must use, they must be deployed manually on each device. The same security procedures used for issuing smart cards to users should be applied to device certificates. - -For example, let's say you wanted to use the High Assurance policy only on these devices. Using a Windows Server Enterprise certificate authority, you would create a new template. - -**Creating a new certificate template** - -1. From the Certificate Manager console, right-click **Certificate Templates**, and then click **Manage.** -2. Right-click **Workstation Authentication**, and then click **Duplicate Template**. -3. Right-click the new template, and then click **Properties**. -4. On the **Extensions** tab, click **Application Policies**, and then click **Edit**. -5. Click **Client Authentication**, and then click **Remove**. -6. Add the ID-PKInit-KPClientAuth EKU. Click **Add**, click **New**, and then specify the following values: - - Name: Kerberos Client Auth - - Object Identifier: 1.3.6.1.5.2.3.4 -7. On the **Extensions** tab, click **Issuance Policies**, and then click **Edit**. -8. Under **Issuance Policies**, click**High Assurance**. -9. On the **Subject name** tab, clear the **DNS name** check box, and then select the **User Principal Name (UPN)** check box. - -Then on the devices that are running Credential Guard, enroll the devices using the certificate you just created. - -**Enrolling devices in a certificate** - -Run the following command: -``` syntax -CertReq -EnrollCredGuardCert MachineAuthentication -``` - -> [!NOTE] -> You must restart the device after enrolling the machine authentication certificate. -  -##### How a certificate issuance policy can be used for access control - -Beginning with the Windows Server 2008 R2 domain functional level, domain controllers support for authentication mechanism assurance provides a way to map certificate issuance policy OIDs to universal security groups. Windows Server 2012 domain controllers with claim support can map them to claims. To learn more about authentication mechanism assurance, see [Authentication Mechanism Assurance for AD DS in Windows Server 2008 R2 Step-by-Step Guide](https://technet.microsoft.com/en-us/library/dd378897(v=ws.10).aspx) on TechNet. - -**To see the issuance policies available** - -- The [get-IssuancePolicy.ps1](#bkmk-getscript) shows all of the issuance policies that are available on the certificate authority. - From a Windows PowerShell command prompt, run the following command: - - ``` syntax - .\get-IssuancePolicy.ps1 –LinkedToGroup:All - ``` - -**To link an issuance policy to a universal security group** - -- The [set-IssuancePolicyToGroupLink.ps1](#bkmk-setscript) creates a Universal security group, creates an organizational unit, and links the issuance policy to that Universal security group. - From a Windows PowerShell command prompt, run the following command: - - ``` syntax - .\set-IssuancePolicyToGroupLink.ps1 –IssuancePolicyName:"" –groupOU:"" –groupName:”" - ``` - -#### Restricting user sign on - -So we now have completed the following: - -- Created a special certificate issuance policy to identify devices that meet the deployment criteria required for the user to be able to sign on -- Mapped that policy to a universal security group or claim -- Provided a way for domain controllers to get the device authorization data during user sign on using Kerberos armoring. Now what is left to do is to configure the access check on the domain controllers. This is done using authentication policies. - -Authentication policies have the following requirements: -- User accounts are in a Windows Server 2012 domain functional level or higher domain. - -**Creating an authentication policy restricting users to the specific universal security group** - -1. Open Active Directory Administrative Center. -2. Click **Authentication**, click **New**, and then click **Authentication Policy**. -3. In the **Display name** box, enter a name for this authentication policy. -4. Under the **Accounts** heading, click **Add**. -5. In the **Select Users, Computers, or Service Accounts** dialog box, type the name of the user account you wish to restrict, and then click **OK**. -6. Under the **User Sign On** heading, click the **Edit** button. -7. Click **Add a condition**. -8. In the **Edit Access Control Conditions** box, ensure that it reads **User** > **Group** > **Member of each** > **Value**, and then click **Add items**. -9. In the **Select Users, Computers, or Service Accounts** dialog box, type the name of the universal security group that you created with the set-IssuancePolicyToGroupLink script, and then click **OK**. -10. Click **OK** to close the **Edit Access Control Conditions** box. -11. Click **OK** to create the authentication policy. -12. Close Active Directory Administrative Center. - -> [!NOTE] -> When the authentication policy enforces policy restrictions, users will not be able to sign on using devices that do not have a certificate with the appropriate issuance policy deployed. This applies to both local and remote sign on scenarios. Therefore, it is strongly recommended to first only audit policy restrictions to ensure you don't have unexpected failures. - -##### Discovering authentication failures due to authentication policies - -To make tracking authentication failures due to authentication policies easier, an operational log exists with just those events. To enable the logs on the domain controllers, in Event Viewer, navigate to **Applications and Services Logs\\Microsoft\\Windows\\Authentication, right-click AuthenticationPolicyFailures-DomainController**, and then click **Enable Log**. - -To learn more about authentication policy events, see [Authentication Policies and Authentication Policy Silos](https://technet.microsoft.com/en-us/library/dn486813(v=ws.11).aspx). - -### Appendix: Scripts - -Here is a list of scripts mentioned in this topic. - -#### Get the available issuance policies on the certificate authority - -Save this script file as get-IssuancePolicy.ps1. - -``` syntax -####################################### -## Parameters to be defined ## -## by the user ## -####################################### -Param ( -$Identity, -$LinkedToGroup -) -####################################### -## Strings definitions ## -####################################### -Data getIP_strings { -# culture="en-US" -ConvertFrom-StringData -stringdata @' -help1 = This command can be used to retrieve all available Issuance Policies in a forest. The forest of the currently logged on user is targeted. -help2 = Usage: -help3 = The following parameter is mandatory: -help4 = -LinkedToGroup: -help5 = "yes" will return only Issuance Policies that are linked to groups. Checks that the linked Issuance Policies are linked to valid groups. -help6 = "no" will return only Issuance Policies that are not currently linked to any group. -help7 = "all" will return all Issuance Policies defined in the forest. Checks that the linked Issuance policies are linked to valid groups. -help8 = The following parameter is optional: -help9 = -Identity:. If you specify an identity, the option specified in the "-LinkedToGroup" parameter is ignored. -help10 = Output: This script returns the Issuance Policy objects meeting the criteria defined by the above parameters. -help11 = Examples: -errorIPNotFound = Error: no Issuance Policy could be found with Identity "{0}" -ErrorNotSecurity = Error: Issuance Policy "{0}" is linked to group "{1}" which is not of type "Security". -ErrorNotUniversal = Error: Issuance Policy "{0}" is linked to group "{1}" whose scope is not "Universal". -ErrorHasMembers = Error: Issuance Policy "{0}" is linked to group "{1}" which has a non-empty membership. The group has the following members: -LinkedIPs = The following Issuance Policies are linked to groups: -displayName = displayName : {0} -Name = Name : {0} -dn = distinguishedName : {0} - InfoName = Linked Group Name: {0} - InfoDN = Linked Group DN: {0} -NonLinkedIPs = The following Issuance Policies are NOT linked to groups: -'@ -} -##Import-LocalizedData getIP_strings -import-module ActiveDirectory -####################################### -## Help ## -####################################### -function Display-Help { - "" - $getIP_strings.help1 - "" -$getIP_strings.help2 -"" -$getIP_strings.help3 -" " + $getIP_strings.help4 -" " + $getIP_strings.help5 - " " + $getIP_strings.help6 - " " + $getIP_strings.help7 -"" -$getIP_strings.help8 - " " + $getIP_strings.help9 - "" - $getIP_strings.help10 -"" -"" -$getIP_strings.help11 - " " + '$' + "myIPs = .\get-IssuancePolicy.ps1 -LinkedToGroup:All" - " " + '$' + "myLinkedIPs = .\get-IssuancePolicy.ps1 -LinkedToGroup:yes" - " " + '$' + "myIP = .\get-IssuancePolicy.ps1 -Identity:""Medium Assurance""" -"" -} -$root = get-adrootdse -$domain = get-addomain -current loggedonuser -$configNCDN = [String]$root.configurationNamingContext -if ( !($Identity) -and !($LinkedToGroup) ) { -display-Help -break -} -if ($Identity) { - $OIDs = get-adobject -Filter {(objectclass -eq "msPKI-Enterprise-Oid") -and ((name -eq $Identity) -or (displayname -eq $Identity) -or (distinguishedName -like $Identity)) } -searchBase $configNCDN -properties * - if ($OIDs -eq $null) { -$errormsg = $getIP_strings.ErrorIPNotFound -f $Identity -write-host $errormsg -ForegroundColor Red - } - foreach ($OID in $OIDs) { - if ($OID."msDS-OIDToGroupLink") { -# In case the Issuance Policy is linked to a group, it is good to check whether there is any problem with the mapping. - $groupDN = $OID."msDS-OIDToGroupLink" - $group = get-adgroup -Identity $groupDN - $groupName = $group.Name -# Analyze the group - if ($group.groupCategory -ne "Security") { -$errormsg = $getIP_strings.ErrorNotSecurity -f $Identity, $groupName - write-host $errormsg -ForegroundColor Red - } - if ($group.groupScope -ne "Universal") { - $errormsg = $getIP_strings.ErrorNotUniversal -f $Identity, $groupName -write-host $errormsg -ForegroundColor Red - } - $members = Get-ADGroupMember -Identity $group - if ($members) { - $errormsg = $getIP_strings.ErrorHasMembers -f $Identity, $groupName -write-host $errormsg -ForegroundColor Red - foreach ($member in $members) { - write-host " " $member -ForeGroundColor Red - } - } - } - } - return $OIDs - break -} -if (($LinkedToGroup -eq "yes") -or ($LinkedToGroup -eq "all")) { - $LDAPFilter = "(&(objectClass=msPKI-Enterprise-Oid)(msDS-OIDToGroupLink=*)(flags=2))" - $LinkedOIDs = get-adobject -searchBase $configNCDN -LDAPFilter $LDAPFilter -properties * - write-host "" - write-host "*****************************************************" - write-host $getIP_strings.LinkedIPs - write-host "*****************************************************" - write-host "" - if ($LinkedOIDs -ne $null){ - foreach ($OID in $LinkedOIDs) { -# Display basic information about the Issuance Policies - "" - $getIP_strings.displayName -f $OID.displayName - $getIP_strings.Name -f $OID.Name - $getIP_strings.dn -f $OID.distinguishedName -# Get the linked group. - $groupDN = $OID."msDS-OIDToGroupLink" - $group = get-adgroup -Identity $groupDN - $getIP_strings.InfoName -f $group.Name - $getIP_strings.InfoDN -f $groupDN -# Analyze the group - $OIDName = $OID.displayName - $groupName = $group.Name - if ($group.groupCategory -ne "Security") { - $errormsg = $getIP_strings.ErrorNotSecurity -f $OIDName, $groupName - write-host $errormsg -ForegroundColor Red - } - if ($group.groupScope -ne "Universal") { - $errormsg = $getIP_strings.ErrorNotUniversal -f $OIDName, $groupName - write-host $errormsg -ForegroundColor Red - } - $members = Get-ADGroupMember -Identity $group - if ($members) { - $errormsg = $getIP_strings.ErrorHasMembers -f $OIDName, $groupName - write-host $errormsg -ForegroundColor Red - foreach ($member in $members) { - write-host " " $member -ForeGroundColor Red - } - } - write-host "" - } - }else{ -write-host "There are no issuance policies that are mapped to a group" - } - if ($LinkedToGroup -eq "yes") { - return $LinkedOIDs - break - } -} -if (($LinkedToGroup -eq "no") -or ($LinkedToGroup -eq "all")) { - $LDAPFilter = "(&(objectClass=msPKI-Enterprise-Oid)(!(msDS-OIDToGroupLink=*))(flags=2))" - $NonLinkedOIDs = get-adobject -searchBase $configNCDN -LDAPFilter $LDAPFilter -properties * - write-host "" - write-host "*********************************************************" - write-host $getIP_strings.NonLinkedIPs - write-host "*********************************************************" - write-host "" - if ($NonLinkedOIDs -ne $null) { - foreach ($OID in $NonLinkedOIDs) { -# Display basic information about the Issuance Policies -write-host "" -$getIP_strings.displayName -f $OID.displayName -$getIP_strings.Name -f $OID.Name -$getIP_strings.dn -f $OID.distinguishedName -write-host "" - } - }else{ -write-host "There are no issuance policies which are not mapped to groups" - } - if ($LinkedToGroup -eq "no") { - return $NonLinkedOIDs - break - } -} -``` -> [!NOTE] -> If you're having trouble running this script, try replacing the single quote after the ConvertFrom-StringData parameter. -  -#### Link an issuance policy to a group - -Save the script file as set-IssuancePolicyToGroupLink.ps1. - -``` syntax -####################################### -## Parameters to be defined ## -## by the user ## -####################################### -Param ( -$IssuancePolicyName, -$groupOU, -$groupName -) -####################################### -## Strings definitions ## -####################################### -Data ErrorMsg { -# culture="en-US" -ConvertFrom-StringData -stringdata @' -help1 = This command can be used to set the link between a certificate issuance policy and a universal security group. -help2 = Usage: -help3 = The following parameters are required: -help4 = -IssuancePolicyName: -help5 = -groupName:. If no name is specified, any existing link to a group is removed from the Issuance Policy. -help6 = The following parameter is optional: -help7 = -groupOU:. If this parameter is not specified, the group is looked for or created in the Users container. -help8 = Examples: -help9 = This command will link the issuance policy whose display name is "High Assurance" to the group "HighAssuranceGroup" in the Organizational Unit "OU_FOR_IPol_linked_groups". If the group or the Organizational Unit do not exist, you will be prompted to create them. -help10 = This command will unlink the issuance policy whose name is "402.164959C40F4A5C12C6302E31D5476062" from any group. -MultipleIPs = Error: Multiple Issuance Policies with name or display name "{0}" were found in the subtree of "{1}" -NoIP = Error: no issuance policy with name or display name "{0}" could be found in the subtree of "{1}". -IPFound = An Issuance Policy with name or display name "{0}" was successfully found: {1} -MultipleOUs = Error: more than 1 Organizational Unit with name "{0}" could be found in the subtree of "{1}". -confirmOUcreation = Warning: The Organizational Unit that you specified does not exist. Do you want to create it? -OUCreationSuccess = Organizational Unit "{0}" successfully created. -OUcreationError = Error: Organizational Unit "{0}" could not be created. -OUFoundSuccess = Organizational Unit "{0}" was successfully found. -multipleGroups = Error: More than one group with name "{0}" was found in Organizational Unit "{1}". -confirmGroupCreation = Warning: The group that you specified does not exist. Do you want to create it? -groupCreationSuccess = Univeral Security group "{0}" successfully created. -groupCreationError = Error: Univeral Security group "{0}" could not be created. -GroupFound = Group "{0}" was successfully found. -confirmLinkDeletion = Warning: The Issuance Policy "{0}" is currently linked to group "{1}". Do you really want to remove the link? -UnlinkSuccess = Certificate issuance policy successfully unlinked from any group. -UnlinkError = Removing the link failed. -UnlinkExit = Exiting without removing the link from the issuance policy to the group. -IPNotLinked = The Certificate issuance policy is not currently linked to any group. If you want to link it to a group, you should specify the -groupName option when starting this script. -ErrorNotSecurity = Error: You cannot link issuance Policy "{0}" to group "{1}" because this group is not of type "Security". -ErrorNotUniversal = Error: You cannot link issuance Policy "{0}" to group "{1}" because the scope of this group is not "Universal". -ErrorHasMembers = Error: You cannot link issuance Policy "{0}" to group "{1}" because it has a non-empty membership. The group has the following members: -ConfirmLinkReplacement = Warning: The Issuance Policy "{0}" is currently linked to group "{1}". Do you really want to update the link to point to group "{2}"? -LinkSuccess = The certificate issuance policy was successfully linked to the specified group. -LinkError = The certificate issuance policy could not be linked to the specified group. -ExitNoLinkReplacement = Exiting without setting the new link. -'@ -} -# import-localizeddata ErrorMsg -function Display-Help { -"" -write-host $ErrorMsg.help1 -"" -write-host $ErrorMsg.help2 -"" -write-host $ErrorMsg.help3 -write-host "`t" $ErrorMsg.help4 -write-host "`t" $ErrorMsg.help5 -"" -write-host $ErrorMsg.help6 -write-host "`t" $ErrorMsg.help7 -"" -"" -write-host $ErrorMsg.help8 -"" -write-host $ErrorMsg.help9 -".\Set-IssuancePolicyToGroupMapping.ps1 -IssuancePolicyName ""High Assurance"" -groupOU ""OU_FOR_IPol_linked_groups"" -groupName ""HighAssuranceGroup"" " -"" -write-host $ErrorMsg.help10 -'.\Set-IssuancePolicyToGroupMapping.ps1 -IssuancePolicyName "402.164959C40F4A5C12C6302E31D5476062" -groupName $null ' -"" -} -# Assumption: The group to which the Issuance Policy is going -# to be linked is (or is going to be created) in -# the domain the user running this script is a member of. -import-module ActiveDirectory -$root = get-adrootdse -$domain = get-addomain -current loggedonuser -if ( !($IssuancePolicyName) ) { -display-Help -break -} -####################################### -## Find the OID object ## -## (aka Issuance Policy) ## -####################################### -$searchBase = [String]$root.configurationnamingcontext -$OID = get-adobject -searchBase $searchBase -Filter { ((displayname -eq $IssuancePolicyName) -or (name -eq $IssuancePolicyName)) -and (objectClass -eq "msPKI-Enterprise-Oid")} -properties * -if ($OID -eq $null) { -$tmp = $ErrorMsg.NoIP -f $IssuancePolicyName, $searchBase -write-host $tmp -ForeGroundColor Red -break; -} -elseif ($OID.GetType().IsArray) { -$tmp = $ErrorMsg.MultipleIPs -f $IssuancePolicyName, $searchBase -write-host $tmp -ForeGroundColor Red -break; -} -else { -$tmp = $ErrorMsg.IPFound -f $IssuancePolicyName, $OID.distinguishedName -write-host $tmp -ForeGroundColor Green -} -####################################### -## Find the container of the group ## -####################################### -if ($groupOU -eq $null) { -# default to the Users container -$groupContainer = $domain.UsersContainer -} -else { -$searchBase = [string]$domain.DistinguishedName -$groupContainer = get-adobject -searchBase $searchBase -Filter { (Name -eq $groupOU) -and (objectClass -eq "organizationalUnit")} -if ($groupContainer.count -gt 1) { -$tmp = $ErrorMsg.MultipleOUs -f $groupOU, $searchBase -write-host $tmp -ForegroundColor Red -break; -} -elseif ($groupContainer -eq $null) { -$tmp = $ErrorMsg.confirmOUcreation -write-host $tmp " ( (y)es / (n)o )" -ForegroundColor Yellow -nonewline -$userChoice = read-host -if ( ($userChoice -eq "y") -or ($userChoice -eq "yes") ) { -new-adobject -Name $groupOU -displayName $groupOU -Type "organizationalUnit" -ProtectedFromAccidentalDeletion $true -path $domain.distinguishedName -if ($?){ -$tmp = $ErrorMsg.OUCreationSuccess -f $groupOU -write-host $tmp -ForegroundColor Green -} -else{ -$tmp = $ErrorMsg.OUCreationError -f $groupOU -write-host $tmp -ForeGroundColor Red -break; -} -$groupContainer = get-adobject -searchBase $searchBase -Filter { (Name -eq $groupOU) -and (objectClass -eq "organizationalUnit")} -} -else { -break; -} -} -else { -$tmp = $ErrorMsg.OUFoundSuccess -f $groupContainer.name -write-host $tmp -ForegroundColor Green -} -} -####################################### -## Find the group ## -####################################### -if (($groupName -ne $null) -and ($groupName -ne "")){ -##$searchBase = [String]$groupContainer.DistinguishedName -$searchBase = $groupContainer -$group = get-adgroup -Filter { (Name -eq $groupName) -and (objectClass -eq "group") } -searchBase $searchBase -if ($group -ne $null -and $group.gettype().isarray) { -$tmp = $ErrorMsg.multipleGroups -f $groupName, $searchBase -write-host $tmp -ForeGroundColor Red -break; -} -elseif ($group -eq $null) { -$tmp = $ErrorMsg.confirmGroupCreation -write-host $tmp " ( (y)es / (n)o )" -ForegroundColor Yellow -nonewline -$userChoice = read-host -if ( ($userChoice -eq "y") -or ($userChoice -eq "yes") ) { -new-adgroup -samAccountName $groupName -path $groupContainer.distinguishedName -GroupScope "Universal" -GroupCategory "Security" -if ($?){ -$tmp = $ErrorMsg.GroupCreationSuccess -f $groupName -write-host $tmp -ForegroundColor Green -}else{ -$tmp = $ErrorMsg.groupCreationError -f $groupName -write-host $tmp -ForeGroundColor Red -break -} -$group = get-adgroup -Filter { (Name -eq $groupName) -and (objectClass -eq "group") } -searchBase $searchBase -} -else { -break; -} -} -else { -$tmp = $ErrorMsg.GroupFound -f $group.Name -write-host $tmp -ForegroundColor Green -} -} -else { -##### -## If the group is not specified, we should remove the link if any exists -##### -if ($OID."msDS-OIDToGroupLink" -ne $null) { -$tmp = $ErrorMsg.confirmLinkDeletion -f $IssuancePolicyName, $OID."msDS-OIDToGroupLink" -write-host $tmp " ( (y)es / (n)o )" -ForegroundColor Yellow -nonewline -$userChoice = read-host -if ( ($userChoice -eq "y") -or ($userChoice -eq "yes") ) { -set-adobject -Identity $OID -Clear "msDS-OIDToGroupLink" -if ($?) { -$tmp = $ErrorMsg.UnlinkSuccess -write-host $tmp -ForeGroundColor Green -}else{ -$tmp = $ErrorMsg.UnlinkError -write-host $tmp -ForeGroundColor Red -} -} -else { -$tmp = $ErrorMsg.UnlinkExit -write-host $tmp -break -} -} -else { -$tmp = $ErrorMsg.IPNotLinked -write-host $tmp -ForeGroundColor Yellow -} -break; -} -####################################### -## Verify that the group is ## -## Universal, Security, and ## -## has no members ## -####################################### -if ($group.GroupScope -ne "Universal") { -$tmp = $ErrorMsg.ErrorNotUniversal -f $IssuancePolicyName, $groupName -write-host $tmp -ForeGroundColor Red -break; -} -if ($group.GroupCategory -ne "Security") { -$tmp = $ErrorMsg.ErrorNotSecurity -f $IssuancePolicyName, $groupName -write-host $tmp -ForeGroundColor Red -break; -} -$members = Get-ADGroupMember -Identity $group -if ($members -ne $null) { -$tmp = $ErrorMsg.ErrorHasMembers -f $IssuancePolicyName, $groupName -write-host $tmp -ForeGroundColor Red -foreach ($member in $members) {write-host " $member.name" -ForeGroundColor Red} -break; -} -####################################### -## We have verified everything. We ## -## can create the link from the ## -## Issuance Policy to the group. ## -####################################### -if ($OID."msDS-OIDToGroupLink" -ne $null) { -$tmp = $ErrorMsg.ConfirmLinkReplacement -f $IssuancePolicyName, $OID."msDS-OIDToGroupLink", $group.distinguishedName -write-host $tmp "( (y)es / (n)o )" -ForegroundColor Yellow -nonewline -$userChoice = read-host -if ( ($userChoice -eq "y") -or ($userChoice -eq "yes") ) { -$tmp = @{'msDS-OIDToGroupLink'= $group.DistinguishedName} -set-adobject -Identity $OID -Replace $tmp -if ($?) { -$tmp = $Errormsg.LinkSuccess -write-host $tmp -Foreground Green -}else{ -$tmp = $ErrorMsg.LinkError -write-host $tmp -Foreground Red -} -} else { -$tmp = $Errormsg.ExitNoLinkReplacement -write-host $tmp -break -} -} -else { -$tmp = @{'msDS-OIDToGroupLink'= $group.DistinguishedName} -set-adobject -Identity $OID -Add $tmp -if ($?) { -$tmp = $Errormsg.LinkSuccess -write-host $tmp -Foreground Green -}else{ -$tmp = $ErrorMsg.LinkError -write-host $tmp -Foreground Red -} -} -``` - -> [!NOTE] -> If you're having trouble running this script, try replacing the single quote after the ConvertFrom-StringData parameter. - ## See also **Deep Dive into Credential Guard: Related videos**