From aea6f497411678974083e5a3cc716cb9303de068 Mon Sep 17 00:00:00 2001
From: Paolo Matarazzo <74918781+paolomatarazzo@users.noreply.github.com>
Date: Mon, 7 Oct 2024 07:58:37 -0400
Subject: [PATCH] moving passwordless content
---
windows/security/book/features-index.md | 2 +-
...otection-advanced-credential-protection.md | 11 ---------
...dentity-protection-passwordless-sign-in.md | 23 +++++++++++++-----
.../security/book/images/chip-to-cloud.png | Bin 1424377 -> 1424051 bytes
.../book/images/identity-protection.png | Bin 410562 -> 410682 bytes
5 files changed, 18 insertions(+), 18 deletions(-)
diff --git a/windows/security/book/features-index.md b/windows/security/book/features-index.md
index 9d4f7eecad..1974b7c24b 100644
--- a/windows/security/book/features-index.md
+++ b/windows/security/book/features-index.md
@@ -7,6 +7,6 @@ ms.date: 09/06/2024
# Features index
-[5G and eSIM](operating-system-security-network-security.md#5g-and-esim)
[Access management and control](identity-protection-advanced-credential-protection.md#access-management-and-control)
[Account lockout policies](identity-protection-advanced-credential-protection.md#account-lockout-policies)
[App containers](application-security-application-isolation.md#app-containers)
[App Control for Business](application-security-application-and-driver-control.md#app-control-for-business)
[Attack surface reduction](operating-system-security-virus-and-threat-protection.md#attack-surface-reduction)
[BitLocker To Go](operating-system-security-encryption-and-data-protection.md#bitlocker-to-go)
[BitLocker](operating-system-security-encryption-and-data-protection.md#bitlocker)
[Bluetooth protection](operating-system-security-network-security.md#bluetooth-protection)
[Certificates](operating-system-security-system-security.md#certificates)
[Cloud-native management](cloud-services-protect-your-work-information.md#cloud-native-management)
[Code signing and integrity](operating-system-security-system-security.md#code-signing-and-integrity)
[Common Criteria (CC)](security-foundation-certification.md#common-criteria-cc)
[Config Refresh](operating-system-security-system-security.md#config-refresh)
[Controlled folder access](operating-system-security-virus-and-threat-protection.md#controlled-folder-access)
[Credential Guard](identity-protection-advanced-credential-protection.md#credential-guard)
[Cryptography](operating-system-security-system-security.md#cryptography)
[Device Encryption](operating-system-security-encryption-and-data-protection.md#device-encryption)
[Device health attestation](operating-system-security-system-security.md#device-health-attestation)
[Domain Name System (DNS) security](operating-system-security-network-security.md#domain-name-system-dns-security)
[Email encryption](operating-system-security-encryption-and-data-protection.md#email-encryption)
[Encrypted hard drive](operating-system-security-encryption-and-data-protection.md#encrypted-hard-drive)
[Enhanced phishing protection with Microsoft Defender SmartScreen](identity-protection-advanced-credential-protection.md#enhanced-phishing-protection-with-microsoft-defender-smartscreen)
[Enhanced Sign-in Security (ESS)](identity-protection-passwordless-sign-in.md#enhanced-sign-in-security-ess)
[Enterprise State Roaming with Azure](cloud-services-protect-your-work-information.md#enterprise-state-roaming-with-azure)
[Exploit protection](operating-system-security-virus-and-threat-protection.md#exploit-protection)
[Federal Information Processing Standard (FIPS)](security-foundation-certification.md#federal-information-processing-standard-fips)
[Federated sign-in](identity-protection-passwordless-sign-in.md#federated-sign-in)
[FIDO2 support](identity-protection-passwordless-sign-in.md#fido2-support)
[Find my device](cloud-services-protect-your-personal-information.md#find-my-device)
[Hardware-enforced stack protection](hardware-security-silicon-assisted-security.md#hardware-enforced-stack-protection)
[Kernel Direct Memory Access (DMA) protection](hardware-security-silicon-assisted-security.md#kernel-direct-memory-access-dma-protection)
[Kiosk mode](operating-system-security-system-security.md#kiosk-mode)
[Local Security Authority (LSA) protection](identity-protection-advanced-credential-protection.md#local-security-authority-lsa-protection)
[MDM enrollment certificate attestation](cloud-services-protect-your-work-information.md#mdm-enrollment-certificate-attestation)
[MDM security baseline](cloud-services-protect-your-work-information.md#mdm-security-baseline)
[Microsoft Account](cloud-services-protect-your-personal-information.md#microsoft-account)
[Microsoft Authenticator](identity-protection-passwordless-sign-in.md#microsoft-authenticator)
[Microsoft Azure Attestation Service](cloud-services-protect-your-work-information.md#microsoft-azure-attestation-service)
[Microsoft Defender Antivirus](operating-system-security-virus-and-threat-protection.md#microsoft-defender-antivirus)
[Microsoft Defender for Endpoint](operating-system-security-virus-and-threat-protection.md#microsoft-defender-for-endpoint)
[Microsoft Defender SmartScreen](operating-system-security-virus-and-threat-protection.md#microsoft-defender-smartscreen)
[Microsoft Entra ID](cloud-services-protect-your-work-information.md#microsoft-entra-id)
[Microsoft Intune](cloud-services-protect-your-work-information.md#microsoft-intune)
[Microsoft Offensive Research and Security Engineering](security-foundation-offensive-research.md#microsoft-offensive-research-and-security-engineering)
[Microsoft Pluton security processor](hardware-security-hardware-root-of-trust.md#microsoft-pluton-security-processor)
[Microsoft security baselines](cloud-services-protect-your-work-information.md#microsoft-security-baselines)
[Microsoft Security Development Lifecycle (SDL)](security-foundation-offensive-research.md#microsoft-security-development-lifecycle-sdl)
[Microsoft vulnerable driver blocklist](application-security-application-and-driver-control.md#microsoft-vulnerable-driver-blocklist)
[OneDrive for personal](cloud-services-protect-your-personal-information.md#onedrive-for-personal)
[OneDrive for work or school](cloud-services-protect-your-work-information.md#onedrive-for-work-or-school)
[OneDrive Personal Vault](cloud-services-protect-your-personal-information.md#onedrive-personal-vault)
[OneFuzz service](security-foundation-offensive-research.md#onefuzz-service)
[Passkeys](identity-protection-passwordless-sign-in.md#passkeys)
[Personal data encryption (PDE)](operating-system-security-encryption-and-data-protection.md#personal-data-encryption-pde)
[Privacy dashboard and report](privacy-controls.md#privacy-dashboard-and-report)
[Privacy resource usage](privacy-controls.md#privacy-resource-usage)
[Privacy transparency and controls](privacy-controls.md#privacy-transparency-and-controls)
[Remote Credential Guard](identity-protection-advanced-credential-protection.md#remote-credential-guard)
[Remote Wipe](cloud-services-protect-your-work-information.md#remote-wipe)
[Secured kernel](hardware-security-silicon-assisted-security.md#secured-kernel)
[Secured-core PC](hardware-security-silicon-assisted-security.md#secured-core-pc)
[Server Message Block file services](operating-system-security-network-security.md#server-message-block-file-services)
[Smart App Control](application-security-application-and-driver-control.md#smart-app-control)
[Smart cards for Windows service](identity-protection-passwordless-sign-in.md#smart-cards-for-windows-service)
[Software bill of materials (SBOM)](security-foundation-secure-supply-chain.md#software-bill-of-materials-sbom)
[Tamper protection](operating-system-security-virus-and-threat-protection.md#tamper-protection)
[Token protection](identity-protection-advanced-credential-protection.md#token-protection)
[Transport layer security (TLS)](operating-system-security-network-security.md#transport-layer-security-tls)
[Trusted Boot (Secure Boot + Measured Boot)](operating-system-security-system-security.md#trusted-boot-secure-boot--measured-boot)
[Trusted Platform Module (TPM)](hardware-security-hardware-root-of-trust.md#trusted-platform-module-tpm)
[Trusted signing](application-security-application-and-driver-control.md#trusted-signing)
[Universal Print](cloud-services-protect-your-work-information.md#universal-print)
[User Account Control](application-security-application-and-driver-control.md#user-account-control)
[User reauthentication before password disablement](cloud-services-protect-your-personal-information.md#user-reauthentication-before-password-disablement)
[VBS Key Protection](identity-protection-advanced-credential-protection.md#vbs-key-protection)
[Virtual private networks (VPN)](operating-system-security-network-security.md#virtual-private-networks-vpn)
[Virtualization-based security enclave](hardware-security-silicon-assisted-security.md#virtualization-based-security-enclave)
[Wi-Fi connections](operating-system-security-network-security.md#wi-fi-connections)
[Win32 app isolation](application-security-application-isolation.md#win32-app-isolation)
[Windows App software development kit (SDK)](security-foundation-secure-supply-chain.md#windows-app-software-development-kit-sdk)
[Windows Autopatch](cloud-services-protect-your-work-information.md#windows-autopatch)
[Windows Autopilot and zero-touch deployment](cloud-services-protect-your-work-information.md#windows-autopilot-and-zero-touch-deployment)
[Windows diagnostic data processor configuration](privacy-controls.md#windows-diagnostic-data-processor-configuration)
[Windows Firewall](operating-system-security-network-security.md#windows-firewall)
[Windows Hello biometric](identity-protection-passwordless-sign-in.md#windows-hello-biometric)
[Windows Hello for Business multi-factor unlock](identity-protection-passwordless-sign-in.md#windows-hello-for-business-multi-factor-unlock)
[Windows Hello for Business](identity-protection-passwordless-sign-in.md#windows-hello-for-business)
[Windows Hello PIN](identity-protection-passwordless-sign-in.md#windows-hello-pin)
[Windows Hello](identity-protection-passwordless-sign-in.md#windows-hello)
[Windows Insider and Bug Bounty program](security-foundation-offensive-research.md#windows-insider-and-bug-bounty-program)
[Windows passwordless experience](identity-protection-passwordless-sign-in.md#windows-passwordless-experience)
[Windows presence sensing](identity-protection-passwordless-sign-in.md#windows-presence-sensing)
[Windows Sandbox](application-security-application-isolation.md#windows-sandbox)
[Windows security policy settings and auditing](operating-system-security-system-security.md#windows-security-policy-settings-and-auditing)
[Windows security settings](operating-system-security-system-security.md#windows-security-settings)
[Windows Subsystem for Linux (WSL)](application-security-application-isolation.md#windows-subsystem-for-linux-wsl)
[Windows Update for Business deployment service](cloud-services-protect-your-work-information.md#windows-update-for-business-deployment-service)
+[5G and eSIM](operating-system-security-network-security.md#5g-and-esim)
[Access management and control](identity-protection-advanced-credential-protection.md#access-management-and-control)
[Account lockout policies](identity-protection-advanced-credential-protection.md#account-lockout-policies)
[App containers](application-security-application-isolation.md#app-containers)
[App Control for Business](application-security-application-and-driver-control.md#app-control-for-business)
[Attack surface reduction](operating-system-security-virus-and-threat-protection.md#attack-surface-reduction)
[BitLocker To Go](operating-system-security-encryption-and-data-protection.md#bitlocker-to-go)
[BitLocker](operating-system-security-encryption-and-data-protection.md#bitlocker)
[Bluetooth protection](operating-system-security-network-security.md#bluetooth-protection)
[Certificates](operating-system-security-system-security.md#certificates)
[Cloud-native management](cloud-services-protect-your-work-information.md#cloud-native-management)
[Code signing and integrity](operating-system-security-system-security.md#code-signing-and-integrity)
[Common Criteria (CC)](security-foundation-certification.md#common-criteria-cc)
[Config Refresh](operating-system-security-system-security.md#config-refresh)
[Controlled folder access](operating-system-security-virus-and-threat-protection.md#controlled-folder-access)
[Credential Guard](identity-protection-advanced-credential-protection.md#credential-guard)
[Cryptography](operating-system-security-system-security.md#cryptography)
[Device Encryption](operating-system-security-encryption-and-data-protection.md#device-encryption)
[Device health attestation](operating-system-security-system-security.md#device-health-attestation)
[Domain Name System (DNS) security](operating-system-security-network-security.md#domain-name-system-dns-security)
[Email encryption](operating-system-security-encryption-and-data-protection.md#email-encryption)
[Encrypted hard drive](operating-system-security-encryption-and-data-protection.md#encrypted-hard-drive)
[Enhanced phishing protection with Microsoft Defender SmartScreen](identity-protection-advanced-credential-protection.md#enhanced-phishing-protection-with-microsoft-defender-smartscreen)
[Enhanced Sign-in Security (ESS)](identity-protection-passwordless-sign-in.md#enhanced-sign-in-security-ess)
[Enterprise State Roaming with Azure](cloud-services-protect-your-work-information.md#enterprise-state-roaming-with-azure)
[Exploit protection](operating-system-security-virus-and-threat-protection.md#exploit-protection)
[Federal Information Processing Standard (FIPS)](security-foundation-certification.md#federal-information-processing-standard-fips)
[Federated sign-in](identity-protection-passwordless-sign-in.md#federated-sign-in)
[FIDO2 support](identity-protection-passwordless-sign-in.md#fido2-support)
[Find my device](cloud-services-protect-your-personal-information.md#find-my-device)
[Hardware-enforced stack protection](hardware-security-silicon-assisted-security.md#hardware-enforced-stack-protection)
[Kernel Direct Memory Access (DMA) protection](hardware-security-silicon-assisted-security.md#kernel-direct-memory-access-dma-protection)
[Kiosk mode](operating-system-security-system-security.md#kiosk-mode)
[Local Security Authority (LSA) protection](identity-protection-advanced-credential-protection.md#local-security-authority-lsa-protection)
[MDM enrollment certificate attestation](cloud-services-protect-your-work-information.md#mdm-enrollment-certificate-attestation)
[MDM security baseline](cloud-services-protect-your-work-information.md#mdm-security-baseline)
[Microsoft Account](cloud-services-protect-your-personal-information.md#microsoft-account)
[Microsoft Authenticator](identity-protection-passwordless-sign-in.md#microsoft-authenticator)
[Microsoft Azure Attestation Service](cloud-services-protect-your-work-information.md#microsoft-azure-attestation-service)
[Microsoft Defender Antivirus](operating-system-security-virus-and-threat-protection.md#microsoft-defender-antivirus)
[Microsoft Defender for Endpoint](operating-system-security-virus-and-threat-protection.md#microsoft-defender-for-endpoint)
[Microsoft Defender SmartScreen](operating-system-security-virus-and-threat-protection.md#microsoft-defender-smartscreen)
[Microsoft Entra ID](cloud-services-protect-your-work-information.md#microsoft-entra-id)
[Microsoft Intune](cloud-services-protect-your-work-information.md#microsoft-intune)
[Microsoft Offensive Research and Security Engineering](security-foundation-offensive-research.md#microsoft-offensive-research-and-security-engineering)
[Microsoft Pluton security processor](hardware-security-hardware-root-of-trust.md#microsoft-pluton-security-processor)
[Microsoft security baselines](cloud-services-protect-your-work-information.md#microsoft-security-baselines)
[Microsoft Security Development Lifecycle (SDL)](security-foundation-offensive-research.md#microsoft-security-development-lifecycle-sdl)
[Microsoft vulnerable driver blocklist](application-security-application-and-driver-control.md#microsoft-vulnerable-driver-blocklist)
[Multi-factor unlock](identity-protection-passwordless-sign-in.md#multi-factor-unlock)
[OneDrive for personal](cloud-services-protect-your-personal-information.md#onedrive-for-personal)
[OneDrive for work or school](cloud-services-protect-your-work-information.md#onedrive-for-work-or-school)
[OneDrive Personal Vault](cloud-services-protect-your-personal-information.md#onedrive-personal-vault)
[OneFuzz service](security-foundation-offensive-research.md#onefuzz-service)
[Passkeys](identity-protection-passwordless-sign-in.md#passkeys)
[Personal data encryption (PDE)](operating-system-security-encryption-and-data-protection.md#personal-data-encryption-pde)
[Privacy dashboard and report](privacy-controls.md#privacy-dashboard-and-report)
[Privacy resource usage](privacy-controls.md#privacy-resource-usage)
[Privacy transparency and controls](privacy-controls.md#privacy-transparency-and-controls)
[Remote Credential Guard](identity-protection-advanced-credential-protection.md#remote-credential-guard)
[Remote Wipe](cloud-services-protect-your-work-information.md#remote-wipe)
[Secured kernel](hardware-security-silicon-assisted-security.md#secured-kernel)
[Secured-core PC](hardware-security-silicon-assisted-security.md#secured-core-pc)
[Server Message Block file services](operating-system-security-network-security.md#server-message-block-file-services)
[Smart App Control](application-security-application-and-driver-control.md#smart-app-control)
[Smart cards](identity-protection-passwordless-sign-in.md#smart-cards-for-windows-service)
[Software bill of materials (SBOM)](security-foundation-secure-supply-chain.md#software-bill-of-materials-sbom)
[Tamper protection](operating-system-security-virus-and-threat-protection.md#tamper-protection)
[Token protection](identity-protection-advanced-credential-protection.md#token-protection)
[Transport layer security (TLS)](operating-system-security-network-security.md#transport-layer-security-tls)
[Trusted Boot (Secure Boot + Measured Boot)](operating-system-security-system-security.md#trusted-boot-secure-boot--measured-boot)
[Trusted Platform Module (TPM)](hardware-security-hardware-root-of-trust.md#trusted-platform-module-tpm)
[Trusted signing](application-security-application-and-driver-control.md#trusted-signing)
[Universal Print](cloud-services-protect-your-work-information.md#universal-print)
[User Account Control](application-security-application-and-driver-control.md#user-account-control)
[User reauthentication before password disablement](cloud-services-protect-your-personal-information.md#user-reauthentication-before-password-disablement)
[VBS Key Protection](identity-protection-advanced-credential-protection.md#vbs-key-protection)
[Virtual private networks (VPN)](operating-system-security-network-security.md#virtual-private-networks-vpn)
[Virtualization-based security enclave](hardware-security-silicon-assisted-security.md#virtualization-based-security-enclave)
[Wi-Fi connections](operating-system-security-network-security.md#wi-fi-connections)
[Win32 app isolation](application-security-application-isolation.md#win32-app-isolation)
[Windows App software development kit (SDK)](security-foundation-secure-supply-chain.md#windows-app-software-development-kit-sdk)
[Windows Autopatch](cloud-services-protect-your-work-information.md#windows-autopatch)
[Windows Autopilot and zero-touch deployment](cloud-services-protect-your-work-information.md#windows-autopilot-and-zero-touch-deployment)
[Windows diagnostic data processor configuration](privacy-controls.md#windows-diagnostic-data-processor-configuration)
[Windows Firewall](operating-system-security-network-security.md#windows-firewall)
[Windows Hello biometric](identity-protection-passwordless-sign-in.md#windows-hello-biometric)
[Windows Hello for Business](identity-protection-passwordless-sign-in.md#windows-hello-for-business)
[Windows Hello PIN](identity-protection-passwordless-sign-in.md#windows-hello-pin)
[Windows Hello](identity-protection-passwordless-sign-in.md#windows-hello)
[Windows Insider and Bug Bounty program](security-foundation-offensive-research.md#windows-insider-and-bug-bounty-program)
[Windows passwordless experience](identity-protection-passwordless-sign-in.md#windows-passwordless-experience)
[Windows presence sensing](identity-protection-passwordless-sign-in.md#windows-presence-sensing)
[Windows Sandbox](application-security-application-isolation.md#windows-sandbox)
[Windows security policy settings and auditing](operating-system-security-system-security.md#windows-security-policy-settings-and-auditing)
[Windows security settings](operating-system-security-system-security.md#windows-security-settings)
[Windows Subsystem for Linux (WSL)](application-security-application-isolation.md#windows-subsystem-for-linux-wsl)
[Windows Update for Business deployment service](cloud-services-protect-your-work-information.md#windows-update-for-business-deployment-service)
diff --git a/windows/security/book/identity-protection-advanced-credential-protection.md b/windows/security/book/identity-protection-advanced-credential-protection.md
index 205f06da53..232354f877 100644
--- a/windows/security/book/identity-protection-advanced-credential-protection.md
+++ b/windows/security/book/identity-protection-advanced-credential-protection.md
@@ -11,16 +11,6 @@ ms.date: 09/06/2024
In addition to adopting passwordless sign-in, organizations can strengthen security for user and domain credentials in Windows 11 with Credential Guard and Remote Credential Guard.
-## Enhanced phishing protection with Microsoft Defender SmartScreen
-
-As malware protection and other safeguards evolve, cybercriminals look for new ways to circumvent security measures. Phishing is a leading threat, with apps and websites designed to steal credentials by tricking people into voluntarily entering passwords. As a result, many organizations are transitioning to the ease and security of passwordless sign-in with Windows Hello or Windows Hello for Business.
-
-However, people who are still using passwords can also benefit from powerful credential protection in Windows 11. Microsoft Defender SmartScreen now includes enhanced phishing protection to automatically detect when a user's Microsoft password is entered into any app or website. Windows then identifies if the app or site is securely authenticating to Microsoft and warns if the credentials are at risk. Because the user is alerted at the moment of potential credential theft, they can take preemptive action before the password is used against them or their organization.
-
-:::image type="icon" source="images/learn-more.svg" border="false"::: **Learn more:**
-
-- [Enhanced phishing protection in Microsoft Defender SmartScreen][LINK-1]
-
## Local Security Authority (LSA) protection
Windows has several critical processes to verify a user's identity. Verification processes include Local Security Authority (LSA), which is responsible for authenticating users and verifying Windows sign-ins. LSA handles tokens and credentials that are used for single sign-on to a Microsoft account and Azure services.
@@ -101,7 +91,6 @@ IT administrators can refine the application and management of access to:
-[LINK-1]: /windows/security/operating-system-security/virus-and-threat-protection/microsoft-defender-smartscreen/enhanced-phishing-protection
[LINK-2]: /windows-server/security/credentials-protection-and-management/configuring-additional-lsa-protection
[LINK-3]: /windows/security/identity-protection/credential-guard
[LINK-4]: /windows/security/identity-protection/remote-credential-guard
diff --git a/windows/security/book/identity-protection-passwordless-sign-in.md b/windows/security/book/identity-protection-passwordless-sign-in.md
index 647f0a6aee..584d8e27c6 100644
--- a/windows/security/book/identity-protection-passwordless-sign-in.md
+++ b/windows/security/book/identity-protection-passwordless-sign-in.md
@@ -91,9 +91,9 @@ Users can initiate a PIN reset from the Windows lock screen or from the sign-in
- [PIN reset][LINK-15]
-### Windows Hello for Business multi-factor unlock
+### Multi-factor unlock
-For organizations that need an extra layer of sign-in security, multi-factor unlock enables IT admins to configure Windows by requiring a combination of two unique trusted signals to sign in. Trusted signal examples include a PIN or biometric data (face or fingerprint) combined with either a PIN, Bluetooth, IP configuration, or Wi-Fi.
+For organizations that need an extra layer of sign-in security, multi-factor unlock enables IT admins to configure Windows to require a combination of two unique trusted signals to sign in. Trusted signal examples include a PIN or biometric data (face or fingerprint) combined with either a PIN, Bluetooth, IP configuration, or Wi-Fi.
Multi-factor unlock is useful for organizations who need to prevent information workers from sharing credentials or need to comply with regulatory requirements for a two-factor authentication policy.
@@ -103,9 +103,9 @@ Multi-factor unlock is useful for organizations who need to prevent information
### Windows passwordless experience
-Windows 11 devices with Windows Hello for Business can protect user identities by removing the need to use passwords from day one.
+**Windows Hello for Business now support a fully passwordless experience.**
-IT can configure a policy setting for Microsoft Entra ID joined machines so users no longer see the option to enter a password when accessing company resources[\[12\]](conclusion.md#footnote12). Once the policy is configured, passwords are removed from the Windows user experience, both for device unlock and in-session authentication scenarios. However, passwords aren't eliminated from the identity directory yet. Users are expected to navigate through their core authentication scenarios using strong, phish-resistant, possession-based credentials like Windows Hello for Business and FIDO2 security keys. If necessary, users can use passwordless recovery mechanisms such as Microsoft PIN reset service or web sign-in.
+IT admins can configure a policy on Microsoft Entra ID joined machines so users no longer see the option to enter a password when accessing company resources[\[12\]](conclusion.md#footnote12). Once the policy is configured, passwords are removed from the Windows user experience, both for device unlock and in-session authentication scenarios. However, passwords aren't eliminated from the identity directory yet. Users are expected to navigate through their core authentication scenarios using strong, phish-resistant, possession-based credentials like Windows Hello for Business and FIDO2 security keys. If necessary, users can use passwordless recovery mechanisms such as Microsoft PIN reset service or web sign-in.
Users authenticate directly with Microsoft Entra ID, helping speed access to on-premises applications and other resources.
@@ -115,7 +115,7 @@ Users authenticate directly with Microsoft Entra ID, helping speed access to on-
## Enhanced Sign-in Security (ESS)
-Windows Hello biometrics also supports Enhanced Sign-in Security, which uses specialized hardware and software components to raise the security bar even higher for biometric sign-in.
+Windows Hello supports Enhanced Sign-in Security, which uses specialized hardware and software components to raise the security bar even higher for biometric sign-in.
Enhanced Sign-in Security biometrics uses Virtualization-based security (VBS) and the TPM to isolate user authentication processes and data and secure the pathway by which the information is communicated.
@@ -176,7 +176,7 @@ Windows 11 supports federated sign-in with external education identity managemen
- [Configure federated sign-in for Windows devices][LINK-14]
-## Smart cards for Windows service
+## Smart cards
Organizations can also opt for smart cards, an authentication method that existed before biometric authentication. These tamper-resistant, portable storage devices enhance Windows security by authenticating users, signing code, securing e-mails, and signing in with Windows domain accounts.
@@ -194,6 +194,16 @@ When a password is used to sign in to a domain account, Windows uses the Kerbero
- [Smart Card technical reference][LINK-12]
+## Enhanced phishing protection with Microsoft Defender SmartScreen
+
+As malware protection and other safeguards evolve, cybercriminals look for new ways to circumvent security measures. Phishing is a leading threat, with apps and websites designed to steal credentials by tricking people into voluntarily entering passwords. As a result, many organizations are transitioning to the ease and security of passwordless sign-in with Windows Hello or Windows Hello for Business.
+
+We know that people are in different parts of their passwordless journey. To help on that journey for people still using passwords, Windows 11 offers powerful credential protection. Microsoft Defender SmartScreen now includes enhanced phishing protection to automatically detect when a user's Microsoft password is entered into any app or website. Windows then identifies if the app or site is securely authenticating to Microsoft and warns if the credentials are at risk. Because the user is alerted at the moment of potential credential theft, they can take preemptive action before the password is used against them or their organization.
+
+:::image type="icon" source="images/learn-more.svg" border="false"::: **Learn more:**
+
+- [Enhanced phishing protection in Microsoft Defender SmartScreen][LINK-16]
+
[LINK-1]: https://support.microsoft.com/topic/dae28983-8242-bb2a-d3d1-87c9d265a5f0
@@ -211,3 +221,4 @@ When a password is used to sign in to a domain account, Windows uses the Kerbero
[LINK-13]: /windows/security/identity-protection/web-sign-in
[LINK-14]: /education/windows/federated-sign-in
[LINK-15]: /windows/security/identity-protection/hello-for-business/pin-reset
+[LINK-16]: /windows/security/operating-system-security/virus-and-threat-protection/microsoft-defender-smartscreen/enhanced-phishing-protection
diff --git a/windows/security/book/images/chip-to-cloud.png b/windows/security/book/images/chip-to-cloud.png
index fb71b00ba25f2b5b482c865528276515063adb31..d4d3ae3b85fe0d9d8066e5c2eaca06a6bc5533fe 100644
GIT binary patch
delta 1283892
zcmV)LK)Jv9_g1s@R*+Q!x=68C>9c=-kN&JE4#m-`S@|R3F`Q*s>nIL6>#is&xNa1V
z!l1?|7$9mAUPH`@@;3PiM3~_uyyT@kJP`&3Od=0?S
zp!~vlc1}{}^4f?G8`mHjpV5CLc_}C8lm~yJ0L?*oDm`_ttS{uDb)?OYbO?F?7wtfY
zKI1^Zatq@C
z9Ov46&>7kz*rDj5;|L*r<{;QNkR-n#om;Vg%;f?d{XU48k11ihYS@~$-4@2ywth%(rzD;v$f6gcPLd1Wv_$Gq2g?Rd*azSB|b=?z2}
z)ug!D|9JM<7&Ol~9LZ8pmHt`}(XDzmy*2vJfhk#o`vh2V9rA%Y-8bo(rYL`z+U738|26|VA>}mhdh6T&6oduxTKC$%`QIS!WP7o~VKp~E
zEiqfZ$8(jR*lCRZ^=yd?dKH##V%rW_{41$YQ@FY>-=u#+VhTGQQf7k%5~en)K;p0L&u_~?0+fHaNnR8tV>yW&(}EF#~pv&S*Xqe<+0H}qQOD<
z!)n<=O;jy<^l2(OjWX!f8`FxMSr>Y~8fWm-kYToeQ4HtQ^~==bfm|^Xd1+BhR#&h5
zrnEiQzAheNPDja8AbSk1TkS(hP-nYJiT&Zf)0ImzG>_Oc^xh?d{P-W#?_&HI-kRNP
zI&Q_GHKW)Tzz%*1UAYTwIxO9+Rj^lz}4sm!qrTk3JYgM;(zp`M~yl1TcyRd}y|G0MEUH|Xku>9ofC9VHMjFUmyjS3ueFYEtfESQ(A
zA+7JP8kv8`gfA+18W+?t@lZ1_^Qv+}OKQ1uEKJ6@L|>t4;FctS68|%wU>35{6L&|B
zD<1y~PW&$@IVJfjIn?X_pw|Bpb)a}E{%1jyZ|Zy>e|F88A3>OpV6TGNqY4E>BdEGT
z1lC18rXv9x*AY!hLow$iUR0Z$@-4{0b?fJ+<9~l(>>p>?e{1G0#-Gam(XszJ_C~Sv
zA*LQukb`JG6`q8go)wt@_L1T0x@Yj4u{2qMFE09cPI9)TCLE^aMl^3>Y8q-I{Qvm#R#>pF5;iB4IM
z-p?4!4_u
zTivISf?vpHx2AKT(|OmrJ`#Tl7E^RN>^0GaKDFuLCg@A7lgIl2-8o_dvz*$N_~e*yTF=JR{bpbGoDi&=#@Jo8WO4aC=OW{FMv`r|u+vfcgP|(^`KxOg$;Q
zigu%HEMm(A@q-l)XmIJ5F?sIe-0M
zuA>J?S}<$K{XYPYH}dpZvk`LSA3=Z1+xnLYv%|y;n@r&gz#fgB@Pm>m
z$lXw~jUo;fWOq6Po~Z
z0^G7pN9yuL02`>UT)Cvlw783*<4jsF02mo&9JZ_z-?O-Fen@%JIaRhM`Z~6jExm33
z-s}O5{p&QotL?wwu=dX-QY?Md@b~|V0rq|N*@q(TU_cFl@+R;rYlxNcmPR??&2H?>
zr-5T^hzL@$atBbm&Z~bq06F-mg6XLPs&7eHN0Tpw@&tWcL$FhdaU@`mt$0etZVY*J
z*KrhLx3xE@6g~t`tWdP;S{f$@)WpClgUc0d0LSST
znMkD$k{`2?)H{FEhQv?F;Q_V;k<;KS
z`fD7kgF6T*p@~R(>j^^ki>+?U$Vq`Ck95Nx#X25F+8i3t{PK07QCef2oeiXC{={J8
z_>8zqAnBX7PL*ifE>lDa@-#9Iw`<^
zdf9GKc=SE(2R46g(s)CDF%ry}Bg%{tdJKd_2g^zIGjua^oe^L&Qz
zgXkwOEJuSv-q${F(c|s67T7t5nfy31unV1addNZd^o*MG0gEYS^0WNmWI?DE*#YST
zLTmD{ROsOlyh}OTJc}ohAWY+s2t3S?U0z2O0t9sd(C72&jXKLp^8$m{<}F8%d?!I5)~I(V$(
ze<5$=OXX5f4r*Bh6FbbzhyWnBqXeq6&N_c`<*1E1*|(`L%*K{2fqC=vPPLh@nTC)V
zx1WcO%tNSy@R>Gbo2%rWH$+03q>TLN*2=qtGNidQ>YPL+aZ>nXd*(9UK*%M6WB+5h
z%Kit~VTT>yg%@7nc9tFNoM{ME3KH!hojG2Nl9fjCIm$^+Qm`^qP%Add$d&Ozep`P9
z#3N#m#s$U8=KIWad8z#sg{XX2W^TmUikn}^egLDDDA_>DGj`OB9y=@
zr)-LC3G~AQ_wA}dYU$xFVCGx5g7^EENdzwyDCR<~ip?1!+YT9pH{nQ5xj9&YcFcO9
zfHVlEI@}@*qM4(7JQg*Zj0qHxcsphPsMF-4ob7|9na*~Ap8Yde%j=J@p~9{2
zx3&Gx1%7H_e~{*QAlE=7FIHu|N8j1d8)qgHTf|I1VW&>+#(EXX{ySb`n~r-ed2rG*
z+Pnz{rrN5#IXXqq`E_(VE7pXJCS{Mxglro;7lEP$_2|^2H3f?*;7osT#w|r|jzMCt
zoYS8(kXE*r9|<7`*C$E0v4irHa^jtAW+lMGvi*bW7J`|`_@$Y9-Nk7e^DgI)xx_fSVZMf%U&gJT
zof3UJZ?bKY_G8-_AT5961Va&1v5;*#D0~*bmnX}BmIXj#LNV7%cHvQ%t8)pJnRX`X+S`M<>!*Z&KX619Y$3d%AFU?u?2
z^Q$eWmNVw6@V4pB8DRaDCm4C{{jLNoVRo?a`hRoXobhnsiUxlOVTko#cl{qx2PV;7
z|JT*PZ(qJ{uKx$ykg9#6vx*l_zfRlA21|hEaq-qt{9rwZ&1rf4-;5whSiIr13be~c
zaIheVFDPpk89wwxwamxD~|0^3T
zReg>{pb4(W_+Ni@G(5{z>w&zsd}v;^a}j}e3t1*6IPY$76g(RHXI!CU|Bzz`g5hcg
zQ2M|2COVjo#{LDDRV{}pQHta*%QyU3hE?q>o|Z7GFvi_Nd99`x!>G+6ix0}1Oc0>S
zgr3I+8wkw!a=8?>=ShN9X%STmf^p`xCk)xpT&}zkl4*Y^B@!ds%;_lmB@i^LDK6$L
zetSbGl=h9v*(+5REmd-=XNWDsOz&=}CkaL;@j(l+?~@e~wM+|wV0klxD!&nDkBmF$Hj1cBec*oCvV~BhN8Xxxz)E
zuLmzK$MPr=NM*6JdWRO%bU}Y4m;sBF4vp(xISbe+*EIfAwsb&tiBO3#n8FgL5f>s<
zYc~9A#VChV8SjzLev3(dxqvhC=W;cLZ$Zc|Z3cf{HG47X-pYm7$J_yE@;J>Ii(Y)t
z7#?!o$}_(;?7s(ckg0ZLh&G~WZ<_Flyu~G={0m}LziiQbM4=AW{Wm(EWfSoe+m$+U1OpbM2cho3+r@E
zDW`uo<_~qGZA@4_+I<*c*a7&q|P89P`V#QM9F!
zbwhtu+a10DU|RNdK0hnDsIyc{eO_tnJWawh-~wfr2q@a>nZGA03kw_aG*bVmzC08y
znY8DD(8-_k41{g$p7~n~=-I^917k;N5h#CWInAE?IEdKjS2K>HYeSAjqWeij_BA&
zPxfsmPA7=?A4_I*
zaP!yy^(nbF#(*Y>4A9)E?a`2;W}1})F!8ZiG+oQx@3wB3pv!G=pA?+y93(P%l}tKx
z6;9TP20xir8N;ppkEzeXNTZ3)prt6m7fauHH3;2?N;+C#NsSGb2#K5)7m&GR+ZX(;6=^)Tf7F}PlyecS?>?$ELx*`THM)Aq3c
zUK!oeew!+7&GrwK0}Y*e)!?7~0uLjQ)h>??ASY3lOSc?5m;nG1)Q^wjqmS2fydbqKk
zNFb3@O;1Q
z+LZsPbAt8F;1842EO|c6%bFtTxwgT8O61^fx|3h8X^Od};fGB?<
zdpOJ~D}1F+pR&(fdE(xwBV{f8Oc!TVqAA=^@TM~Qssy@2;Ir)HFo{q@Z^6kzb||JKL7;5MT*UU478^Z
z7ka_>Fg}2fxa5LJ`E5Q#ijfGz#00<&cbJxV1GmSC)iLuWG^*oij_i~JKtW5O3kLlH
z@xPu
z$Ix{aA?QPw1yc0S@)NkMtk^~U$FDIXimlv3a<|6*z~f@{;s$J_gv4zQ4ZfuDi3-%LV}ft&`f!9SJiBtwD2XTD7f`%_;#blPk>`
z0UxtP%}oITt&@|^$q^?%`3dtj?qJ_@&pq+!r=PZyZO`WcACpzkC;@hpe$W~bh2k#=
zdY){Dx6ug&m9~7?T9c{JDlFn~1WN;N{9hCS_OlBSEVgc)?kxK^>D$1@u{mN{u)ehx
zEGlc6YyZn@&O5+-z|M7>w`pAIKH5sCm1+^R
zvuO1pFG>j8ot*!}EX;KhqW*1;-7p)9pOV^*vrx3Gb7i1`b>@E~Ba5cDJcoed5tBEK
zEljq;x|n`9q>b8*=a+rd9Ag@H-=|`~4oaFbzjg1;Ym5&w>2gL8T6lB&4S(t$CwQ94
z_hkRI(&uW37;8d{)KuTr(rWXg$6q_en4JCxeQ$rgI^|yXp|f@hdM
zvcP@Sp8um~Hwb@V765C=zAn`1Q`2fJd6?;y^sw+ew2i+B%cZd}%=MWB-YD*k=u2tD
z9Q$6lfMR6j*Z-4xq`=)o9d$25JeEh#n=zdkV0JM;>`3q(tF$LNK#o#TWyfqVX%jk}5oCvmNt(L~_SZBs5%1T`0
zrSN#5hPv#Cg%hikEu+uqYNuH)g+w%r#?gA*swa`r_+_857+W>d+hHKe2T`v|2h)y5
z8PxVTeWn
zwgwZB(N9?|J0GFb5<)$J(dEXT5d&iRS3dIiT#aL)(oeR>@orTrAoRU<^a#~D&6X|2
zkt5bm24=tmQ6}SMDO-^us<}j{*@B8ieP53)haC8;@Y>hBvd|DUC~yBa?j5i9f8*=n
z#3n>%2`DJMWN1pv@47IuI6OJUt_{|2l(bo@K&(05wf
zRS;S_(lI43kMJBk$ZYk_JH`9GUh|4Xf8=BBAj7Q>IFVkfv7gqevrOm;+oL131GS}i
zD$X>fSVqvEbOoEZQc%BpBN_JkY5B0yVz7T=Zj~8(Sa*h9G}Tiu4fVjQ(a`o(u;cFkMchl?&j&qtQ)T?XBzdOQv-0zI+4cHo2Bw)<``jeXMt>N889
z>Qnkr)SqvEGprf#Fima$iB`%llgOF&KfCW8c`8xP9YnlzCyk$`GH%-*tR_Nee19>Q
zbcHRN2(I^)^$<;2(B*iQpt4V_+ckd)h94AlQ_=;ezZcFs{r4Oil=pjZ)^cg>xMS$*Tk!T=jJU1ij0o@&HZ7&|N1IeIou5LQMHd7P1oi0#x;LqUlGVF
zV&Z;@1cLHn<8`%$Q`OPG+XS*b*WkUwCKnF(~>M&{{dSSTIazOP9R
zJNG!FPOpBiEOyEl55{Tw+Sp(Ax!~x4po5l%$v5LkUa9j8xY@C-HqMbH)V!+s;5?m~
zF4yiOuco_-II*_i<+t)iH>H2)L3QO^TK&$I$P_Gl`rk;O=FjSe=0q(2DSsZ?3xKYA
z=hqT=UNW&nBGnI}-QP=sZ8|6{3ZZe$_j3Gi!E&@REHhtt%f{f9;y)|6{x4UX?K-Yu
z&B3?z*8fG^#l*356)@}n+6v@4c|{H!S%DahPzt7iQZTWe?lKw#^7()9KM_;F@{~ic
zD&+-rL{Fhz8i6@!jQ?%PGVRCzQv12g*vhj0AFA*V7#X+=fM^2oVk}|Z0Vl{T>a%X-
zTho8;l+|?rRi8D0V<0*XrTMaa((&zzV9-NAR?^@u0V;GM_#WMl|5XL$u%l$oX~CKE
z7X56`0DSvz&y+2Vxn%^Ne){Q?)7MG|Z}lQl%_irQB-o*U!n03>3(q=L5-52?`ca4d
zM!bIfi66uL5B;Mt{gmV4b+4Rf8FC@&#P=PQUsyQ!fVW2Z?f&wY
z#lO=}IRPGjy6^TFq}X~;4~uF%%D(~pApv3Wo?QXx2E~k9We;Gzx*CooZg>#`Hd5sR
z8AE$$RO3eDdJZfiDx8rYptft@{`py?#aB@Er!?G~jBwh8Xa3>fPwL6he*Y=_hpn1!Cz11M;1R9QbDV#yy{f)jRD}7|Y}gKQ2y@J(>rjTuRVUr;MB10U2EaG&)hcz+F!5Qruo`Yr88~2
z>wQfBMOYNPdi(9O2kf5H67MTAUovyHIgs6Fy(-5xZ#BJ*Xo-yoi`Oe!gcbFv7lXEc
z9%wE!$oap?Q9j7Qnx3QT0J)D#nY`f0;^>RL?OV_-hcKgX;TfSce4!3%`9@Qw`3&CE
zXz81s`q<~A^e_r<=vJ=Nn=cVqTORx9rbxP#=9UXC2{ZlAHo|Fk
zbyUTHQKxx$Rh`6&7xx*;E!4jq5A2{?GZSf}X*N?Wn-_
z)?EJ=rJ9=}GttKSzte$Oml;ujTEz|Is-uXeg6{ucrV*$ol2i84NkdQ4CJr*2>gVwR-q$wt14ZloSeN0ej1>A5Jh
zxJL0JwroLqG-Wrl9f0gdS*MZi*0=njlwG00o`
zdkg}nJSu$zXUBIo;^G(zE_RrqdSQb5k;(Dc!eW3HgILU!hob=#j$L2TN(2$};0@;J
ze>u8TBMl~P3GrkI&Q^9RCby}%HP7SF!RYyox@tneycHhpBTy=rI~TF_fS>z=Ejv_w
zWSuK|IIw<8Yqb9@>^NC}bKGfXjdKu47l8DU%iLg
zc|W$es2%Zi*;Ut#wvb(O*7wL$ri&xb`|rE=5WK%WKM>RJ&O<!lo4zl-bPug-YBd>CM;Je8c02ZzXp}~h8
zLU_30B9=|tgqCH7M*21dzs0NN}+usZiJX8m{
zX=iT>9|s(ZKYD4r=6mA%@z32giSw?neyz%vcwYOeSEzt(rcc4%An3n5)q6JiL!`0e
z5IF7ZOLe`SM!9Z&@?Rm%9*bLmFKe!m>jaC*Rgfx4gfemT`tVZdt1*W
z7j2Lp(JSBctd4W*mKpyEHeHleWCQl`DROB54j?+t<7b48fBrc*?e`Cb2i|{4&ZGN{
zpZYxPyZ5VO(%OAq4eQ_k+i>LjKN``Vclvu^{~;)UPl0#R;q@0>54ZgJAHn9Q{w)T+
zH=KVRJoEg2z-8whn_KeoA*j6W_x}W*7|PIb@B8obs+dmrj{5zN#bER`ANznP|B@m7
zvPl1yKR-PNs_*~eC2;rOeix1$g69Nl|Ldz@-TN<#bS13W?HA!Sd+ZJ;oc^b9*I#~U
z2x`B73LgCSV>$1#^UBLA4?ngUF1YNLxFi0A-#q{x`N89`=c{%f@LnEi%d*slqkjML
zNbj=qkA?@o^%&gxr3Yf3yr=7Do_iq%(s$o&*LY3!&f9P#9Q4*-iGOr_{kkDd`sC$<
zoQTbUY@)%aF4bMY;)oVE*4L3VlVflZfx
zD_7!Cr1U612ZOMSP|C=JmGD8!#nG!jL$alQjtwF>QKF*5dHF9?F0aHNv`=Z3$+~P!
zqxU-j(l2^1Va$d(5B)0&(q`qa%nOZtbn>+H7KM{kg8qV=Q2(}#Uc(1C^z^vkk!lBpdoMH+g7bbEXbC`_(g-X~-
z??HA3hk}J(kB+br_h7Q_(efq`-AcFMl~d^=&QjvBP_^IF&5r%Enid)fe-EsGoDea~
z6vsbn|6D#8{MfMnal}Y=kg3Ue#w3>myzs&cbQ(PTm;dr#;M?E+b_}owy08ra@pcI_
z!@<1D;7Vy7$?CJ#VP1aKu5*X
zuJFTtZ!GiSvrdKm_uCsD-~43U)%L+NJ_2{#eD!eu6ufq?J>Y|X{NWgMp;9)9QWacBMh
z``!_GqM#SnlcR)w>|tul=_emI2LA^dd%gOVaO?-pi2Qx}>Pur#|C@hvJDfVSg=o={
z?yr5#9z&4l@8Pa{|88i@hhpHK>V4{lO>pf^w?OrrF##m&AAIY7ZWZ8P9OT1Dn8?RQ
znshtfgV3_ns|}u!RL0}+BkJclhN;47Q%wgS_4b8eep_X{h7`aF3=-4U0=b;WDLsnT
zg!BS+-BPb>0UUJ*HGXU%8sLgc&V*m0mw|>L-=44jWjOAnbKv3c|1joVaONrTB_#4Q
z|33J&)6Tji9tFRDOMID#%D)2Map>{Q03`$MUMC!vee%(H+8>#w{h
z2Hh!eP5$Wq6o9|&#w!Nj^RF?D0^ir%bZgutP5ct=b1%6P?jC~CM-9Qv{oeSxfxk=R
zQSosnHIB!IXC9v){PIO-#K1M-ryb{nhh%Z*z5ft{$rqe|bxNfBrlHM;9sNN#eZWP5
z+r3`%O1S36TO&StQGj;B6W)(q{b{&$!1vI-n_@lsB_1izyZ!^m#vSO??wyBvn}%|?
ze*Vru7O#(ZsT+vqsb^gZpq~&F(8~kVehT1H+nDybms|yR-}kk6>^SY5rgWln#4)GF
zF@$8tX{QcMxQZ1(Pp4Uo=oqH1xI`Ho|j*9O-3)Yi_(P29fs~bd6pfAo)=Gk2e1p
zPCNUf6_zI-`5V}6&$m_gS6uwZgKoYKere51;d_sN{tFy;$~mem?QW;j2v}aXeD1D6
z|89(V-?-;9QEy03_KbRUTMUX@IB}?d_|d1q6wpf#q@Ty1@*()j9oIxT(QbOrl4<-S
zJ*OO!3r}e_eU9|w?#RdWpSTb%H)6~S%?N7Id7eKPW5+m?o?mBf9@<$wzg?Ni2M+^Q
z_wEyaxXX)^ht~V*>3P6%UE{@yCxsI`bX&ZkSFW!Az_%ZT%Xd35y$tfg5cquyJn*gW
z$Kd&X<5V=wddA7~x_7?`cG+nMIOuoJ%b1w^%|o3H=U*So-}2}G9lkOI!>{|yy)o~+
z4euEO*zXvE*_+~V@2`E^2Nh@MZ8$0h!RZKpc!DF|z5fuXJ|+g)*A0KS{MiQB|2NNy
zd30p`etYi$8!osJJXo6p>KFs^YxmhB2iQ-0|GN@j_vP{wbU*$*2gIPd4A#e>dF1I!
ziKn$Oje_MyKrRg3VDqql
z`}d15FWS6l)duh*Y>_}&9o?F9uW4w_|L24EtgDvQ8a`DH?OD{J+1)PWRV#5<(E)$}
zbuiv77|}38Wx|-25T+`2?nAp?WoLa&R!L26CS^W!TVMDDDqMk$>
zT=gt`Oiw!=GCu*z^T1-d)+_5h%fd2$eb$`H^O3g#>%DTBlZHLy7RzP_>1)b~#Hi$=
zb-AzG6YYZKLCY%U;tj1QKDl^?CCC^!Pb}yu!Xr|sraG*%XzmSJuG?(`I`nM2mMd6E
zYo%~a67nE)@}N^k{;pIbru=u+B}zM1di@`SHVNKXIm@hCt^ccWHM@Z2um5X8{_I9b
zY&;m1_#XyM+O;fAeE2_YC`BkEAa6e9igs{Outkj4YMopJdrJIo44k*)e@UQj{7(oP
z0!+vM^r6`bSB{f|>3j>0Q(y9um%vYc@)MH^>MR0V#*;YevVZ=Ez5~0jIVbNtr`_w6
z_V^S2jz7w$K)?aN`Mzp4^!Src!3WR$NW7+i`(5|`{SZhPgD!L&{fS2(1?OFIMcm2#
z(mmFyXO9cd{@}0}{~h>~Ph1!8k2>s~@w@L7WIuceqEnFl4R1Rv<~{QL$A$p-K0{#t
z!`a73QBe?_=zkMD{ODst5atu{nvRP<{Jj?qL5!y&55&)@1HXs;-pTOskDeWWNxDZJ
z`mz|1Kj62H8G*d&gJm8O+mQ^sQb{C(SNx;t=JkMwW`pw!S#M=w%Z^c
zWKg+exx3wIJx@Djk{~75GnHOI$s3PDM>za_e;CWq%QX~mf5)N6#egpD0H)w{X<~rO
zuet%gHv}ySE=b=?=iSyVIO@=YhXC`PF%bK}L;pDL$WFVBDY$<45X|O4>+LswT-BvO
zJO%bC?|=K>`0@~tzGU#FSH+{|H=J~A43t`NQ#Z#>{Ac=FM|i@yX!kAmy(IP8R6kG@ZSciKTu
zyua}szf(>H7-w4LI>Goo_Jd=Po3aUCr2U51MSt29U?Vo&9~|;OHq>SM6a=TBJ@d^xP{5tq#Q|tKBK?9h
z>Jv)VzTsD5`QwJ*GXe8R0sg~}IW5b80_GGHzs3o4dvNMmAB}iG~;JrLzz19A2{FNwI0_q3a#Xbhu
zWhor^`pEeh9F?8P=bFZQOYsGS`LkBi{8UxZ+cP1#-U2zZA^oR?@C_+L@lF&_h7`o*_tn
zdJM4N{deDmO@Dqm-1^1);kGY75cBukWA}lNdoz0!1V4ZMI%w-d3or)J*Pnl5+<)~>
zJl*o=>vNEtc8_lu@+45&SN`sws-5r@m_Ok!|5WhwPXkX!!W_6Q?QAEY7Xo%M$Ig$e
zihkh%b=mVLZ~UJq7TWVZ&myHs7gRHYdienkYLj2a1WLZRf`Ys4I}Pp4{}q1bgzP<>8rfx+pjrqGhN_C8ao^MRl&A1p
zrIYu}V3P;$Hh(u~j*_Rj4R=@NOZHUv={0S%{TPI9Gr|>w#l44yMJ%jNPwi|k|EWAT
z5N7Qk0KE18ru&4M?dST-6<7;qx}U8FOC@OSYEe91V|xM!d2Kbv7J?Y8*z;}0_5ZTQ
z9_I#M{7-WkgwE)4!S^W+`0+n+jJrb3n-BF6n#NRJ5O}OWlx>K*9~FD7|~92aY)v-;m?$YbYZL
zatmX6E}vrvFvik@y^cHLvl3;8)?QW!1-PudPwm!DJ6%W|nm5s=oCMX5U$IG+aUlrD
zm5Vh1*&!Q;xTF_M=P?P1XgYGaD^!GC&M;00lY%&fRkipzpAydZIog99p>
zjx#``Pxi^60;>_|{0g~-+E{9o-nALDC!pQpfBlue&n>0kJnfi7&<;YlvaDiuoTHtm
zr=EFH4EEDbN@kJ*pMv&RTyoA3gg6IwS-ms#
zhpIk2^X$AM=BL4`5<+N|2SivT*ETFlP0=2?z3p>mz
zwLHKMZ7brC|1BM%wG~yW4X(>_&A~sBzy?FownP4>ROYGa!3Vr0?yBYt+C@&grGM9~
zd07k+Q}B2k2?{4txzS32yn^o%xmm`s&;8Fuv?V*A(QX0Co>HeZJtLdPg00aBTYp
zXPi{%8+)W(|M9r;BscQC6sYC$6n~7>!F5pAv?KkYdp`@O4}o&psZKk{BkiG2HePf_
zlt1GldD1-v+&OqnL0-D2bdoujqrf`BYlndPWmnx01LkyU0UskzyV36y$LJHEv`d_U
z@QwjzjCEz%hrj&Pc!P}{?E7!MZ<|NXmBj!Ij
z@z=P}Bw?FoAqv@vLE-^*xqs+8(+WYMjfO|8d2!mM_;fw-ROev3ewynOxm&*UH8}EJ
zZ-!rg+upI%=BJ*9B2``Qx##|4m_P2|aE9?H^ooA+kF=wkj*X|J4d;IvuDIq)@rd_L
zf3{)FA8^X=tkd;sFDNZ>a|3ceVEo4U>YaW8)(=7U%g;X=&fl;Oo_`(aQaV9}6Z`lz
zPcOh$1D=BMuS{PS!U-6cvbtEjdpqwCp*-lbWhM!8h%OA+xtmjCr2re(i`MOzD#7&9
zJ90@vF4qJz&97XTssq`Dh!uzQFLpSRbImpcQNAQB;?v|kLf@z&YIFTSpaAfB(QcCChDL`TWaH5blN@)MXV@n<$v}6CKHKKOR`f|U9a5w
z|Cq$V^~v@Baj7~Ri(3CrBbucLLT;gdo#lc~T@a=<@+C$?%)H9}8ikV{z-F0+jM3$5
zOvl^v`hSV(d2^5Cn`gxTK=xrk;iS-aSi!o$kR869W98%91Ir2PV0%*>T-P>k+=&e$
zmJw7P8-%XImw#4W6dx{4re*5nY(M@tiX?<;RY|t5YNsJY&
z*V_I$4?Ffh?U?d6*wZob!Z?G2u11)Gh?px`>qu!>Ca&?CgMZ_(69HC}bnW^ZyoX>~c>jw^0tp+`507r))+mJ@WjyeU|IoKY{lgL7FkBZOE
zoAbx^3)}VIbTaw!DE({)&6iHB(awQQclNKGeB+A(knGlDumKb-px_T5J-u{L{tMbq
zZdS!TmEWEqJtKg4#Se5qvjMGXS1aws*8B*CDRzGChD|RUFU9`nLU8CX?T1H
z%5HvQ`upDW&2!^drCGI{4SL6P<#`>kd66{vC02IxZP?
z&&cD?uekWk=<6^4^p{GDH^&h4EXy`jCL&w2$@R@*)z<(wM&7
zYwNT_pKOLs4dC2o(n|!qi=B?s=Wnoc-6)p>e>d)SKkCq5k9|YC@mW8jtY`adY^P7+
zzy;I6%of{&kR7R|AJkRRtv`8$QZS(UlyLH?_p2{Ep
zp0~$c?R2#J1K)mZ;A?H!VIDAkhyA$s91wT8k3saYB9%Svci%qnbX&x8+<$xCHt;#x
z6$ReuXnBTs4E?trgQWuxnCgLQ>jO^Yb;kcvBt4kTodwBN8}06w1@^gjysqa-0QKBu
zYt7%<;5B?cN47sIY*_B{<9`5NBFk~+?(`qq-BbKqX!57qGXZMeWP1&&wVE~(+q12r
zQn_t;sh{jWgUeSgukrzSpMM?u#A@9cjd5kV5^XSf0orZE?6uKrrz^mgoO<$eoI<6t
zEpIV_Z=pO5y?4U-dBn@}aL8vEmzCJv@_9-rFUY>IT2)Gngml0}?M~b-Fs%)vPRi|v
zr63wSMv!^&#t>{cviNCaEZ@ElnRcnCc<@X_raLf4&Xc}pzM3u*Y=6TTj8?66JB(!^VmB0Q!>bZ*Nl{Aj_pn)A7I3L9zfife!A>68{@NKMgUU5Jdb>o!FeeyFNeu
z7k!e*Pcx^yQ$NM`#DAIc#?8q%S?&`NpQzk^pYLW6jHC`
z(1bV{|0~15=;i~8VF5?}YknmjDQ|h7u0itCDgetsG{0BuU)NzAh6mdQam`1>U=5akp4sc22ctx=Ei?*NggMF@u10Q
zf?>uQRgRAJonXzXbl|E9svXf;Z2_%?sa)!6R8>t{1=YYa_E4Ugu%itiUrQMS?+TA;
za}rVSZ7Z-@TefVenr_$xPZ1>^`W6b07~oC<5^`t2WPT;j9fih(Jx}NIuNs^KY}sP5
z7TlaDXjJktWrD%hnWcY>T5R#ecEUKYrpct>7u>;2A|J~Zx~t-_gx;X8CM&?fc%jdE
zAeYV0E~3215fsG&Y8QK(-Gn&xahy(!xgiOH9paWP<9&MgR|5d2gAgT}pgK0*3~K{7
zztTreuWEEm$|Xu^&kVtA3bNBT(`l!94=4zK@PWVDr9m9r|BZj|3;~;Wjyw&2haB*$
z@VyjRrd{g~4EYpjf9;;HjA^uE{ryL;<3_~bJMmOww;dPsb+$Ngp(UPOL?FV-iFU6O
zzyFU%eyDcjVcUgNKu0Oxe)H9E?nNJmaHMou5k8H7j${VeqHIpLm%Zz
zH*;m7WtD#0r<#8<^;kJ4ZK{l&9R`yYDxN|$-RdofrfI8A3O+xTCA91xJ%2gg(~fny
zYnV>XcqRqcX~#JQWAn;J7nJWZ;gCM*))IX-XD*_KO{R!I=Bs%!*Z-TmU#VUyQd6!-tkIsKQ?a-zmGy}beLA$>#&`TIpj-+8
z96tQ$zr=rlKIc*Y60Z-ZPa8-MTR=SW?*EWmsmEbTA^Dwq$<=Vg(Wk|u{Es+#eGH~=
zIO*uh&I1@ffe=3%aM@Ki=92;_U+$jo1J;*Omlhcp7f4Sl2xS5wrm5M_pdvrE7omhY
zutN*MH&~O7ZO<&{CYb8E!F6s&Zi=OaK3(~zXls9dFg~^`W(p3=OR7OfxYG{w7&r$z
zSuS_iefHjn=j(szCQjPIRxi7Uh^eyuz?4@^H|)GzUj}`k2}&+8M>z9
z-XDJ)^0TrJzqfwrLD*}LH8Fp~g*Og-y(`wGza!qYA3XT&9}WTc2jR~DdG^59AHbb|
zd3LP0@l#(;Je@X_Jq-^2wb!Mi<}rT5or3vPp8g(xQXenhf?L1%0Gv7m`!751=zhV8
zIrTIwv7*$kS>u1bXF{Qaxpc+v)RSWu4JLoSApfGd-}Y0~-u!>Igu1otv;!RoJ-FU?z%K&-DrHF1(0m2ZEr
zmzRt{6s}kGCA!|a(OkfpY0JS|W}m`ggogb$m;XYI)RS#c1k=J_@-`x!>je9TD?$!4O+BPdCj=?&c6vN=PX|_Lt32bxhBy<)4
zZI5xg9HxV&W8;72dfY_XdXf;SPQaY`QQf^e#tsO~BdF;|onrBfc;QoqGR
zzhl5#%TmY-ygCLF>sj=e+NFQ{Q=zWrmsuVXuc;S(ujSbewlWQ|97%#8-%1+M5}xrM
z&^Qkz2a}AFSEr1v(lUNAJFV$)|25>82NAXvwv!-7mxO5Uqi;on5dfrbkL34o1Hap&
zOIlnox-*G6GzYe+ihT!26C;w!3hrw+k$`ffVmPGn9Bag)$>ims%`u+4LKN^G3+>Q_a@rMP*0<;5s!zstZ^;cgS>69aE$MJ0cH|`A&
z-B-RPd+bSP#w>r?owAX&@k@sr*E_$eBfJSS(%66vKWDm-KQ4?
zD39cH>KPZs@7pgAWbg64`~@ekmDbjkg+Y(q1)5KUwjJQ>u1!3^(wfw$0eUqF5wiljp
z3fy+%6>+Ebn)praaVIx@VuE&^f8~yAV~~?}tkZYBDacMos}s@hJ^C-u0}2$++dHUUp1W!*Z9!5MbslMHAzws{bAN=-XaL9kV2%1nnCN&t*HR2GZ_aGnDKicz&{e|tW9rJmHSYrO4L3>1;luKj
z_)yPyt+GMA5P`scU$4Rgh?i_<`Hr4J3jTjgl7eNcwY8TT_&LK)LA<5zR-VM;)nQS@
zXDW4S3mR@~*~t`x&d^^>Sgqb!2~Xm8qZBas{0Jedd&{kLiBa}(r)Z6I3Owh&1h?AK
zi)Fz|;IChzy2S#^ZI|DFr_$?SpN^{H&-uG
zh=T~ehg>C8-W(V4Bk1rurs=*35OBi$MaKfjNH@5IO`Ic?6Qgypw!(@~A!?Vf1_3mG
zlTS_7@=~V(S9J_Xrvf9L;K@OVRyrpw4~bXTgZwBfc@CYI4Gh24i39Sueeb0R-~Lg#
zs=5r;8e2h0d*Ou_XtO$fa(&E6e-vo{`QdM;KYM!1laz7czWb;*gKRKRDrcV5Ir+A(
zed{DEJi5L>f$L~ZFr5uK$nvR@#6>rMTS9l|YY>{2ogJas5*=r1U(%>#C@D#i;WDP1
z5X6fd4f;mR{I9MOOaMI3{!DsB%rSyohWn{8C{?)V(v%HCCZ=JNCl08Ans(ZkK(#AR
z(^hnaYWeGx@p!cI(g9nZZ|ccH2}37aYS@XrmyWPF5_AWeDh=|nOU=HAYOJt-Ic0Jn
zubGN;D$+qITE?N9cJWc~Rhbqv9IfrgtasW0*L^AVO2Ro`|C+i#Z|(ld?7ZnsE4>9?
zd0I4Iy~|FpdGk|Mo@8?OH7^@?gAPF)*@Kk+??d`?CY=J^w43us174Ka3=>pt_39l5
z`acG_BUZWQBn0naRi^Rv?lG``^^{v~_0A(-Hoxr>w-vN)F
z&>Y)EyUCw4?OLL3@{VjPcTavct(yO5P#To#?igPJBcDHIr*n0|mSd{D`dp@`A5tdP
zCb%BsZ>a)+Z&P&20)03Bw6pC?24g8J&(`!PtB^x%P1>!_?caFOAHlUZ-=TKf*W8+<
z$^onp!)5utwCt)h3D+56Wlqvl*h{tV08Pw9zT!@Z;1y=PNg>`;Q!S
zv??b#tSzvFM{5i7`dd!%0s8ZWrRFWAT!Kp3!HhWuZO>PG23rxc{wvI>I0HI(79z1A
zA975YKvCET&7_O1f(IW|_a9!n-$+@kNApI&
zm0th1`2r<}$|#GJ3Mc5gTDP?Ie}BEsuh##;tpA&!Bly}3Y3F9T9y8I01t?&v<9NERZ3VkIl=B}7-Wu8T
zgWUFzGU{$HQnqq5c%FS57mcgXnGhpX_gA{~_Q+%zvjLgHC|m
zpC$C|U*qF@DtrDnzZ1)@|D~N?J_Olm$Kd~G`1}9M{?yry}>K-*!|vtEGq}0
z#7n5?K+>KvxEQC401an^wbQR?i(kcK_SK?K_$?W&mudi(FDi)n>Szmq?H3vJHRKgn
zk5{ja)_-aB9&v_h4pJUfq&}9sEMxR)NjCB%x|B%+QPCgqVARqL<$sLX;hTKxCdDy8
z<=+}_^|_eN1Z0#R7XlE9Cn_%jUioL9doKP-@J5x#MF3vrQ;;C}B$ZBqc={{L$Rnn)
zY$-`Q$;Y6*SWrnGj!n^O0L$Ndc%@$or1(SGNRNV0wtm&%?FOFf3yt*c4dTHHv0n_J
zF(`>VPrq^?c9ppXnd-e}`IA|Z=iZjy0kdzDXXCbpqrgY(}
zN4hB^2ihABAO`pb8}|ZGGWf@^(!0z(8cT*SaWB&1OG9XR8U1U9GJ6?i_54po9;$Lt
zE_wZ+)2=1jW=lpMosu@+-nbOKJTQK*94G6|)dgEF%&5<0dVl&M)2;nKXX;5C)}yQs
z_op5HbPB-thJd$xNnx~qbk+_Q7z)3gXtF+#oh5Ei;d92C8bP
zd}NIiYv<)&%X>80XwZqT+@h3q=UeO8qGjk-;y`Hg*}C^>)U%U@EV3WxWk0Y&@9^uD
zo13?svZ6eXGk;#5xpdQ{eoqeAXexP@x9F%Zz`Q`U7;m!+X+XoXC(2-b8T%u0F{%22RUZJQEP}&*UDe4fp+~L$3bKKCb(F;_o@QSU;j7E6>nax|JS}`<=6kWWZJu1!$hG3^J{wIf3yzb2=6{R%`7l{#P%Y+lC8%65^0IqH>u~
zT8b@Qn~wjPH83nE{Ca_PUC$(>()3MeM3AA_z<+~w75^(6i3lzjVFEaqsd90+Cnk4p~0bv07_T;eExgPpgvGtjr5XFXWi*PNv=(`-`*1GU}=
z_LrXz0T%*W@|U;|0m*+8yipY!`MF%Dv$#`2qb}EHT`8TAejK&)9#F@!TIRN@s?)SQ
zXfwJjkiF=o%U=NBt=k^yNp(Rs7KJQq%Xb2+6F9-s+_Kvk^r97mHP^b|=8Abvxs|kk
z>|8VFdVjACn>h9eZRlu7DHDoT2P4|XLxNg#EzC_h09caAY*&AnQV^+j^4{i&nO>HW
z_i}>71tM+5W#;+4@_^c&|9c~pz8*2n?d*P;rMk;)Y5(eZqLEhA1L3l(Z_L*q(#Odq
z(vpAqHr?ULD}&R6G*;5FQ|=LhsjE<9Pj)afZ;p;|xurOLQx9j>U({J(
zua0NIOPv7($OaC2j;%;^`LUH|@RBF%(3t>e7M2Gc3|19pwb|FzGDdOmtLDNJ@3w>1
zILY@ieR-VuPbzw#C?iS@b4*LF)r_dx^Mlc^FW9C~p~-(kQHgQLg4norkaX)h<5b_*^ik24lmuOeKOb)|AI36h?!i{w8kQy7YjVVJ;7y|$yfj4r
zSCXujvqkgR&&VD&(U@t;A}($lD+n#k)*70gK&SjdKkT2+)Mih=ubl&
zaZZ}RBISQpV)$PYR8Iil3u3uUg~s)CMHAmq$2Z4yeh@mg%=P~SYW6U$|9dBr2Bm%5
zW&J;Kz`=G*RrC5kG*62SVot-1H!X=Q&E}^xnaFgqJj6PV3IN3Q|9NxE(usC4C?jsq
zE_D2_yrRURl79RT6`q`*4zOJ{{MR~NPtF(P`hR~2JZvTzrTCwSy`-S}{P3V&>I#Nh=BS6@jtdd?VPmz>$-?)hkQ~Oxt5suQ@;&0eCEBglNz)`jk3vkjZmVCp5
z$*O-KuxD4{)eHLVjbv;n9n>oB`BJ6nZGxX>93FyP;s|C)7kQ(CV-vM)N>b)JWF_BM
zpnuYL%4PXNAI;NR68F$aAraXJJN@z7u5DQpX2^@S)&V_@qid3Q}*$*Bq
zk6q@E>w%i~6$5Os&U6`9L6m}-IQmh|PeOmsGDPs-kTdn<;8GO@W}{^BAu5H#zK+j=
zzBBZzU^OJ8w9WC`8bLGf;KuwU1Sy3)RxIABiw|le~}u
zOK<@2;)5Pfi#TF=Z3W)y^x)_)cc@oy#UM0(J(#u#^}yS#HwU-QS!(lF!v3*SrY^7B
zUyradKUBGlfgjmIO`taF-UI+F0?~ge^|S-YUU3GZRv9M^OM0QK%aw=h7A?u2Ou_~~
z;ySev^9)$yOVexc+oJWk$jp}auDvqYNH46G)dar}lq9o$psF7<+A^1`FlnsNpw`cu
z0^2Wh0O!}6gR(W{n{ohML`wy>xzHX9QuaKUSx~Mi&F~ksmZHj=AO^FFctd~BWK~&s
z{NwqdL@CLDso~{$_bUgXLy`Z~(-15L{Bg?qw?b#R)BnnE3qQ;G^B(M^zlP#trOF1c
zj;-JGNmySZfT!u@5=C~aZ_rIEx>)!s|F&2(0&I>eqP(CpPitCQ-;*_A$JP{}-N{)D`FDRAj!E>ZO6xq_
zLCO|EJbqk}@xN806At|a2Oa-YpP;Ghpr_5ld{hspR~;v-L$in@FD
z4-TK>=u_fIj4dep2Zw)cN~QoieEZwqjtTOJ_?Q3zW(C|lK^o;@VaQ75-?1egtstVu
zQ-%sQ*cd%fs6Ix`1;B3xd(yBa@IkBqq5o{g&MnuazvS5!gYkhd(Plpq^zP-OJfbP`nJKS)FbBYzAv`2NDt`{H=(yPXAzH5F3
zJF8$-X|uQ(J#kSEuX9Fioi*U1b2nlChAF6ze=qfN-}UWZnCa-a%cGZT?iDY^{#OdH
zk%pao=;R9rSCxNN`64gK+@O4k!5!4EMb5*Es+09v|JsLHPm45fTN`?mtZKQ|0PWt~
z){uBfvqHs6r2wX5R36MDwVk0ITu0D-*B+wX8IXgmm%kK{9I~I)wvA8?{!nbR=BfLP
zF=79Z>_1%wi(CF8$e)~%M+{@=l>-oUS_91XhLtj1DP(`;N>WCdo#olwm@RBL4^`mH
zYCE`@P&F!mKYGovE)Bh!i(#4vD{22$0#Z6GwPM5Nk8_G`mx)qk|JM8x0W}k{-7y=m
zc1SoE$<&MmOy^qPWa>8`>xAsY6LL)i{B*Q}DK9r5R!ll{O&Ojv8=P5|@*2@^hvW?l
zPJVm}SxL16Y8S_f9In~ltL1+gJv8&klRq^g#}Y(`j>mJ0zFcCo
z;~fA@`u{m#+8dnfR{5FTEtrSazBTl+%1<_i8-zHcPlw6
zGyYl2f1Zv7=Uy!uM~g5k>h`VW84Qsn32oam&44NwKpFVMHP|
z#n6#9tw;N$yFK^ZGup%pFT4PC<8w&2IAViu4`*sEtt7(3au88d6oPJ
zk;;`AVEeBJf{sP0d;P=G%Widr1%)X{;dpTREA=y%dJU2Lfkp{8(X@
z`oZ@+m+`=j(dL1wq=iuDV^fv47T}D0*$ch82wRiW#X$0sMk1caaexjdcx``LF!)Vh
zd9zpnkc^orhXZq(u+q&Gy`<8DN(;G1wY`=*XNXWR&;EV>EN>7jeOtg_bRB@Hvpvjb
zuK7z?iUOedWjrj*{DbA!42;$FHkMWYxz%c{o|b6{b_&vjo(ozk;0$`OKpAgbmeR2H
zE$3MJr59}wR&uWWtNFikEg6591kn;nERPj)jKwR5HE!ljC5+c{T8nl<=+eOsFZ!Bg
z&uv0gy~rF>ARDpOyI5qx@QccxZq7j)dWlo~pnomJKQR`ve)4~Or4RGQ0D*WK
zLjDI_9kz2`<6G!g=)<^3`*S
z&#|NhX?nTB^jm8anWKLIZXn)!bg5hkG{)kT$9-7jo+KZNomp2qr}c9nG_IM}RGnVA
zF%$j89rw)y5kqU4M=r{;34JC#C*Byhd&?fPmiD&)0MLLbUm%5o&|U$MoiNqdg@iG&
z{_jlnMcoErHPi&L{$B!=Dqybg==FcDTjE74v;GhB*Z;?sdT)OMR-KE!H5Og3
z1C1Jep%rr3lGpzs*m7vvE&`gmEh18zIaBe!@`RO{spBziEvwe_SqWgl_@82}t<v~d`>fbMIQB1R2O!aR?7!Tn7<#s=7+`Y&u`1ONy
zoai}G4z#mZvV)d05b&>+dlr$b4<3&pRF1goh!Ur^yv2VZ_>ukV(lNd_8hxtI^IZhp
zC_zsTntW~jxA6CNP^=o~v|ky$4fFz72dmx5sHf21m;&8C3Wl4ql06lDf%sOOteU>@
zBEI{QS|#r!j7O#LfLc9as&NU&X@o8zIZtvE&QCdGQC8@#s)NSC3S1mvbc7JX!uG#4
z06X_+?yY~ZH;v!HQ+~(X0AZRb_B*f`cv_pMwjE@P(pe0;a|?jVbU~C4Gs|ud2;whw
zm>5;+;-RjNP-}XxiCfhomIJyW;YHCu1w75-Ur(eZy>5?m`4acE{p<2B$iS|$|DJc6
zK)$_oX0G{f4O*U)SM&Ck9JjXq`t-f2ge-@y=6Zkn(9w}?0CS|b2zRY97iVI&c7$p~
z_A#hgyLs#j-lK3AI{l#tEulW3`YFj+{v;0m5p+WfU&bNvx4hhVogRV=ZhpE46$rwn
zUqdsNqD!l8J2uLogHwpc*iz9ik1o_{?u5CkSv8Jsxv6xUKUL1w*~Z|JT$0P(O1v*B
z!aRTfnFFDXLelo~CaNt=b56F)i*Ssnk;run`H(KFTb>t@-nId6gqdTv(-`GFn(=5%
zA9Gq$Id6)i(ks7T5v?$^pT=8b7S1g1_4Y(Q_HbF+4cuma7fczwCo=~=az`ad%SumOmZF|73b0QjGJTFM
z_a4%hC#*%*|It*;>7Dg|U~edJ%J7ij0r^_5|Kkd;|A)Y2Oupq4#C_4!h64zV1pt31
zJ;3y20c;E;-EcrY2j;mPi_g$XpJ;|4+EN-7?8_9jcMX!E$@pI$S5QK{j_!*sxLDT+Wrv1zJH}dnpv44MPfOnF*o>7eXLD+wdEu9KK2G|Lne)?%pJJ`jF
zu3g+MWKExo8Hb|~v1Lgc@;B98rI!s%WtzspxGKgPA~ZaO)VQc5}YNZ+%tvW1=Sn@kJH@
z@ra}yhpNg!+>|(6Ikzaj=m)ZNH)=O$T5IY#YO#2iro2(MibD7i@nHp6c2<`K12aKudLO*S=}_gdb@&#%Wc#llSZAt7&2vVe$}C6Mu)al`UTEmGGjy<^
z_`wc6G&n|~@B&>hv}?Ku{&W}dz`m1r
z==NpTD+5bNUlgodw-bLX;sCm^l*)E~X|j6gak;!mFSH;kEH(RcmL8IcVl9)i#MqwX
z`~;I7rMU@0=iwjfcD#6CLSiv_Sk1CgOik?;Z=VK>RP{UGa!w{U7UoPUFMa
zCY1W_4`PT~)*(Q13hl&7WUq(x?Q~g>ahf`8YdYQ3S3G~#@jw2Sxxy*pe>DyOUmiM=
ztJ_(|*{x~+MZ~0a*{l@*dInH*Etoc-v45S;@RFCjBpwk@unJlrp8i9_5Loepjq>Gv
z<|q|w-gGIwMUo8^C#Hs0J0MRg^^#H!NLHP!X1th^LQNtrd8}#}x-->C#w5M)I1mYO
z*}UYS>M4JQ9TO5?Ht?RsA$=0dQab*Y0}}Q5x(tk|Uqg!US{&xyI-RVXq8v8r#ss!n
z1T~n!Ua#2$ZoT@8OXHh}+LFfl-1vk=}
zBW9h4aM>m2z%4gj4eL)nJ`F~Cz>qTRz6Xwa5wCx=1JN^CTbp&)8|242W1&#IQ$Z$z
z;$l!La%xK^>3eqOb~59Y2iB6LmrDOZw4HU?q_=cK63A5MKyb?AL|!oYe2pei;z94p
z60*=zxlx$oaO1g{Hpquk)(DyAm1WZQUjA-Bz)reU1?ir*5z|tzEd#Nm;UWT+%}JwE
zl?Q(lY1JpNZ7F$m(iUeGBtu)(ZUlQic^_OFT=
zCOB!Cw6-9T9)HopkA~Wj^-s@zkxWujtn+o+@QwMkQuK
zK5lH$H}ufb>+mFQgGn2Ge4!!DeSF^H2gj*Cno1k#{`y<@h9lqgru?_&Wxoh}?y);;
z`m@ukvR-|ezTe(^z`5(!HOegli}!rV-K?b;sq}vU
zPL^~W7W}96HomIdgb(**A|?x5yILCosRdJlonR3fh?O66DutRhLYteVXzhy&IzFwN
zKaEj(aP{&}qmEQtnPZmK+H`rL0DGKa#hNpoap>gHrmZfLCEXrwp(
z#kqE?J>>JX(wG-Zd
zTSOj~L9WG+D=v?f}#Ci&Sa_*Z)Hu1P6~~Dy!Rf}HT#0IJvgRdE82__{}ZhSkx|y%gVofg
zVB+GvSpQE=Z2AuAWXq<*6#v7j?Ho;4=~%o>t`{^*W6>f0*9cVC(W`pW&4Fke+You4
z!G*DoHityh2Hr*d4p0ZiZTx@Fe+UuvP5iHHbmY3h+pMg4tn5$L2W9_VTr=$-0=FGN
zA6pN#tmQNf>R)2Jb0>
z{1u8JJAb_2vSmwC1RP8h15U;*<=YUSN*v3NzFzgADPy`7J^X9;-3QJ;Ydu_d_5a9$
z^6NkOC%EC16JftM?w#Lkl8#V1nAJP)9C6U!>Roo0FAy-HmjCt!bT3UFQBe){p2>|w
z6A$@?k|HNnBkP>i@zH+)?Z5BdL)-R-H7|b|2wX~+RsR9@$1X=ISl5G=%P8#t@bgFg
zPeWD6jmf;`K}9+@rQ2rEsdl#8`Io5I-+T49OONod06ac|$Ygu0oI=gaJgDqd5ViW}BY^(28J!7=){Sv31l5GFO&7&DhCV$-%+>>@
zn7HN#Q0`OtGK3lLC0_`2zAY=-iXJ{FWya}0Kphg2HiX5Mpm<(lnYp}p(30Kwd;W&s
zi2-#AtkW*v>YaChXP^HM_{!gY7uxvSGz8sY0XhNMm#r)Tp#dwGPb~r1f3Cak3P1hnPklulLth~qfyygSTp_(W!aPU>7NNaY
zEK4IakbBG+Z01v@$u}+R8xqO*f`dK?;paCxl%hAqYlmibOlWqjS0khHCn?u)>|h2G
zC=NiqnbZ1?h^u&}uB5{pfndFMil7Z480VT^0tg2k@Ye8+zxe{({uh6Sel^*XxG>JLNt2H($U#U;RpO228gNcKqV@CpD40DZYX;$V>U=zW4iE6Geej
z%%?rMLLRWN;>i-p1IWZG1uAtbr1I`%jnz4kLO!BYJOs%8+S*Z>4hOj+jsBqDx<}_J
z51sZ3oea86sO?`*kZeDce=HPSH+{2Vt^vEh{AKXfFWeYUS=ju((d%H%ZZC`1&prP8;F0hD5FU8wA7Sa>^#Z3MY*+Bz4d_v*e^odA_7u!%A_d7d
zoN^p&e<;S-%7xh$)P}jWLz9O-$W~abns5KXNrTqYgt7m+p7&IcDOtohNQ{j-1ui`E
z6u97wQ#7#z7Yun6peES-gbG%JgB0>1Ar@W#K!#J5A=oxH{g`5=#MKyJ!CLrBC~>JAWwh8V-3k#
z@XOe=?jujCQ!U5gm?mF9s&&6CkYShqUT&j~lh$*ai&2pCe`m2r2Jq0@gcNj8KMK94
za_;y8dbo4?rs)Eu+Rhw~f;;}hiwIf*@I8PJVFvClWCZ^D|G4^>;zR7@F_o{rr>ugo
z8h>LMWA6HYQNVGn-ps0&v;KcC>Vptmcm1FFD?TNr(^2t(C0U*n8*U@>nAyk~o)b(d
zPMZQWIy{8-6d-U=++5q>ITPRnLm)_D*8Q)alCq-(m>K^Io%o*|6aW<-5b-}9kZu`<
zp7^r6D#2pu*{tr>$ec;D2_y^Gs~UqL%y$5$uAq~>tzuP{33*Tm0+)ZZe^Bb3nBxykg>2HgzAN__c|v$=;1wJ=U&;}8)1A)L(;4eKKZC5=1)
z&om<1^l}GCT~3p~8nWVwc)q8WF-bcZ#
zv3ho{%R707W%Nc;RO(q~ziQgim@*c7P_hcF&=7GnSNho+uf7}lTAMjSV^WJ}m_y7LP
z^Ki|Lw-nx$7L_yt3d%q8>~k?FFUwZthBnj72Og}6@^~%>^jom$bALUnF14E)>f=LE
zZVX&KJIF`ldQO$=@z=_0rLW#;$B3J0W(Yy>^Hb|~D|~-zhJX|WFRfy#a%Os$`yiBi
zI%(lD*xq30sLK3d&JqPe-$s`Ui{RGW+65OmgEa14G{V~dIDm~8o>MhlohvD6vQ9A{
zJmbj~QO+=-YLEl8Q~iO5zMJzY`1`o9^T(g~F+BdcyHp+0bNY+=Ytp5?kdCvTnp@wd
z?;>#yJidSSRjrJ~D$5TL`C6p2T)`lf(VySnjfOkIpQ2kpk1V{MmYVcnIE8Ny4$=f*axZ_q=`Zw>!Yghx|i+@8WpOJMBcj;PP9?
zdISDz{^a-JkpFhE#U0iaWTAnZck6F~SBJbfp*aTH7G}xOI$4lP6Cq(xx1$o`*-xlKL>UNXLV$u(PP4&bhy#Y=G9})j^O#A7lpRNjtnEI$^
zqv3;|MHCKYaJDe(f4^OMG2tO=CQLwCl=VDUfZ~a(=I9HhG)d2^9qWI_5d@UVsgW>!
zQD$^4d0H0I8;+RYbjl93@HPh96~CxwB-rm;0LNh(e^=UV9G`4j-EU(u)J|EA=GIYd
zy!2dLci0$Qr(n{xH+&X8b;D;U_)`MhR8lI2kdcuE@K+DHc1rUQ_2vDnKjZ@~?qfq>@u4O~=MJ~vCRkV!}mWQ{I
z*I<5S>q34sHOc@WM;5GHDinu{SUYg2!8*g%K#vATE?dvV#(tGSc$qH>rY2@CM*Cki
z(AwgTyKwyhJf@YZ4gd*3TWQ&$&bc>H^DQ{JO_WLo^cU8`}}io`%PEF
z2haFO4o=;1^C#hBS6u@SeB&SC-~-7xY0we#o9_5BTz1vh`1-&HiSUX`&K`n0{|L7X!S35{x+)vU!;ky`&b{Ol>H(F0UpoYU
zK7I8^;r?&_W89S}b%*XhJ;)>S^XgZ^$F96C?ohwy^Ebe&-*8YaN4y;V-jgGr#0$|U
zzwzl$UK;CCK>eD*zufiJe;DL+>UexU%lFKSs$e#?fzp3=U-Pno?jBJNbRxib|H=W^
zEm2++e7@q+vAxvKEXTD&`iF=9h<$~04EElUKkA>O4m~7(B7m+5_qi8c5&2@eM1$b*
z%}>Q^sz*TmoB4kB`Pc^}#HYUhwLuTAALRJTQASr?2k$?6T?|}Oe;)q6Q{r`$<<*xA
z{rAt2Z+d@0g8qmfI#!?BC+pD5O*ee*b&#j%|)4zR8PCrd7F!BEW<7p)sQ
zc?EcGfpWeNcJVo;2kheyeSTaH5yqz^iBL`pvJgU^{m(!i;j*hg4I5567LIu6gE?)(
z$;S>h`e}7U{OLp5;YW{UE;#e#sGpk$UHtb!&rg3l>k_!_#w((3l8&Ex<|T3br(@;Q
za2#I7F?!0tofmF(=eQ_g{V?znDzf#93t3j`0{``O$NMB~)6M*p*Ju(8vIYi{qlfd<_l
zH3Wa^j~xEU_9!5J-lbQ;`VS2J?>ow7=bd(fBaS)M4LDPf|KT6}a}2P56mGw9
zW0KEj2LF9^%-eYJAICORTdp1GUvu;AW4V8!&36pHci#JTxc27T;t}!tzT-V(zklH9
zVGJp_X?HsX;Mcz4SBCySCi*lIGrcr$+F3Ln=u-`zefFo3UU?}Xi#qOZzy7KZ$M(>%
z@z)Og+&bWtOYc{!#4|6kqoT8#9i}&O15>yf+O2@q^y_e~0Tndmr5Y
zg%9Td`)Mb>6R!Kr-&D9LsDJqo_`dB+4@4fRJ{!wiWU9bY5SeTcMVw;k*|O5S(4n`KIhBh_@)m3cNuFw#A)HiE$
zeFq?Lf-fj%x|Fr2kAunC@lY(;KDQ6le`D~!R(gbRcL27P1%2;2coqldpO8GkZ^hSQSH
z!?r5OL7x@h7OI_)DqqTs{#N=gzR7RX6d8dG%*tza+%Otp6q&d##I<}4Ym)t9&oKCU-miO%d6MgNTuZ+P`Zv+bFnu6=J
z)BTnqpiB23KKoQS@tAdR*$`OHOgZ%^_CDI%^&!nVl*IShL$GJvKxzU$t2FhfKG`tIaR;8
zq;SjWc;G6#x1N)KA5NN*Q;xl9L{qXmFaKQKRA@F)s
z%zI?;7yAuCbEXAKm>~w#sSN}aye1na+yr#YJjo^=(LR*B<#TsNpQrE`pch}>ao7oe
zSw6e3q2T|iW4nf6Ii*ps+LP7gpS&T~i~ev35>rt6+#wjeItA=`2RWa7aoN?QZ@vD?
zkHF!_oR(j_`O59r#DMf62fi7OJ>^4bUNveD1*9Lm=QBA_KJt5Fq)T||*merAA3g+}
z9~#OXHsIZy@G>0r+XoH4>CN!#L%ooHa8PiYR2Abx3AJNZ5Ob~^>&Dez8ZNlp~xX9ZqA1m*9(
zk96zy(nmwt6W)8opqJyzom7TCBS8FMyK6J3Su}w)UVf~Wc}s!Hxy(g|(|OpJEJXn*
zf9hUr(F2$lTwiJ*I`tAg3My0Jn}7n|@q6Z?_!B?=x13MMsjq+kyCXjOcKdao`D!lr
zz_%ZZL2M7`*m=gW`KhPj!J#bg0;g-H{qSR(V^EvY)(*cLhhVvF$6kB99F9uC^-_QA
zt3;9!U#PWLs=aSeIn_RF_m|7JbUzqMdD&Ybe;+YQ
zJY_M$HU}$i{c8z=V>>^t%E+XY78-fM&i!SGmUrIqU}y1oyiTQ!G%FoP?gN-^Q#V~?
zgO$$$^{aAA!(*pGHdt=i^MdK_vl6Bzruy7#)pHwnzsmRZ0G*aGi8+!A6Zeb4bPqY!
zpVchomAF}6tP8F%Lz`GKyS%|qe;x;A*gz&J`xZNRTUpB$-ircy0`NSs^@~dvLTmls
zuC3=-1%~eAhfmK1)0lBLd;pI|VMSG$SpTngV>e?~&eXz$shasRi)B^CQOb^16n>_?
z{vYJ}KcLuI7CRRuAH{v;pcH}*wvX%o)wf9O9ZK0TiACanC
z78#%ZoY(*Tz%VpoTCu!RMRwkx{Z5u)9URVmV&Wi5Rw*D1>}`cG
z4HkE3z5u}^ey-1_G9wFB)XQZ|dzd|&2B|Il0)gFKuH;e&-+kcS^I#5T5WC?k8iEzj
zJWKm8G((v-R`$<>RXhI2f3HelB?}6!(-H9$Q_n}lgX4TGSY*<3SZB(U1PuP$0O~%B
z!M!xuQ`2GPuni75RHOt1$F{VxaIH*3zQvPAp5TvG%2}B@1`40SnZY8U*e#DniBsej
z^YI9fD-X$67rQbpU+~)4vCd^OB^(EAbaa`^fMfr@GmWp8
zq(Q-xrMVC6IAhx|f4A2AA=_pcugdmKs(jH@zvXh;MT{7Aj+@Cf1o-AA&xrqol$hOtDJ!F
z(aui_uygWK*4UpOS=yxP%xfk
z!90~6^L5YMa>rjMo}L@|iZ2jg3gV<)<^$hEpYYo6Ak$|qIOzYqM}9a2y5ExV9d+0t
zarZj$N$n({fA(CQ_s32
ze)@u5R=MqlkB_^@lYFRc6#S-kR*ut=6$Qt6M>U-uLG?FYbjFBlu=CZccdF{dUD-p~
zA8r0|f85bcL1GH{-d}yo-VzMachL^=^&dF8l)}+J-}1S;;r1c$O#yw{g-$PA*LjD#!_4RmUJjQDZj#GgBpab6&UpT-_e`y4wz1yB|SC)Fvfp3m_bp9D1h-uXB
zU6SvV_Ex0aFpE~9h5Rgbl7-dJ!im#)orWaOQAjr{)Sl48SK-f7X{M)nvK|vW-g$h-
zMj0V1ZV$9@Dm1p&>j}SkgaQpXaov(5^wU{r*sk}$cYY89;8mY_Eb>D;(C0LM!95aQ
zf6;XjwRxtU;YYr6ZLIsiw|If~!L(|T99y+rQUZI*W^tLHh!VeCSB`ygI;Kq0R@zr@xF13s*jf4f*5
zhtWlj(x8cAC}B!HF8Vpv35tob=|z()muAhN<+@~%o_hXFgJb_yp7q4R+{?5DsXOcc
zDLuy$I0lg^BFHn{8AmX9K;X%n3vDpp6rH*LPoEVn0X)6_U&pKj9;N}Jt*wEzx~G>1
z-1UFPgNYU(nzbPo7w6%)p2MGfe+^Rj9M@{?Sm!d#9EyN_3$VIL3sv?-1%8z9;(u9K
zSmJ*uuZ1vD%p+!QfjYPj()XgzyITKu@(OLpZ$*_lx&so|o^e?adQ%UsIhJK(Kq8$st1)Yidi0H=+hzF%IosTCh^+7bk9C~YdV>R67ne=zo6e`HqdU&U?;
z$wVtOHg*d7C87q!SB+(Q_8)?tJLCs3c;ST?A`|L}c#gIU-L3-WUSoNd7BtrwY<&PZ
z;D)N3Or7}4c(FbXB%=ahJeE!=H1aCmwh?3jg8SJDIi(Gr1qtUQrxwQdwmk3aW6_^q)1j0=$hY!pCKh7y`iEjLLF?2$(b_|cAAf-yMt7zLPe+wGfi
zo`_xFz>ZHvMzk&$OqlZ%Kk=GgKA_{Up$^IiiFTCq(08yUd7>0Je-{r1V012Yrjzti
z%Q&c}w{cV*EV^uDEeCHVAf(2@bs1QfT)2}F=`ho8U7NgE#kZCbWH(Z`lX%j
zmtTDy>^}sb>6mv36bu=I$8}qYpSuUX7$~r#LH2te=;Qzb+C5Hkxc3X6p00ED2P1z}
zhv4>`ugrO|zms98z}j$6JMjzOsCVo)W5A%EVtp4-xZ>M^?Q
z&E(`n&9&K)76c0b1w`p6b@CC^hPb=A5n$(C(H=bG9Fxuy!QMvfA^lVA_|oAvK+Y%Ct*f@=WRcz4Pm?{0N-?(W}N|%xB0-@3mJ~t{DRB)DGG~9(Qb~o$3R?
z(g4w<7Yt4u+DE(iJwWH~@hAUv!26Y)N;+h_H<D3F_?B7)R6wu#1
z1kCr_=aoa*@qb0aBj3Fr-1@~a0RF&`M&l&sNoMG{dBRQKXSXi~l-={MRCOQx&SP-e
zKJSdX^A&`~^#Wl1SdDN2#NITB4P;3{cIcP)oSNgXJ)ft!L6fr#zzVreHwmp7q%E1t
zEF!{{f)>rNggPq%XoxIMtjuTmTGw|U{#6}4HDmuAuYXZI!lT5TO6BK&cTgKsLQA>5
zwwjqqo{(FkXvmAlui)dAG71$v%MI4_)U#l(ucSq4dgE{soT?7JIiUQ~QeY0vN$kk*tT!kIo@j(dfLLB9+DV+?
z)hm?{!G2#|wnu(59b71~!SW)2l>wUd{~+=e@3~?@9&w9JmnL8yl&lj5**qE8cV*y|
z#eXy(LVrvMp=174pLjdigQ1Ky3GS3U9T|DDL3St(Q6^Yt7ed*dZ5$DD0eP?L57(<#
zuSN<|9(3TZjo-|D&8y-9AMe&9c=(aWkQV43e)KVX;2Yl_0vCTPlsap1R$g<@t!x2G
zXC%gr=(tv4EIN|7{
zluj_jBk4bJ4cz*o()U+XO{mCZ~KWOs3kDu^N6K7AzO&81lS^4P
z6KyF9HUL*DVLaOXW^P?Z8P^bO+8>A3V5{2tOD
z`Th^%J^lU2^}-rZAL3gh&$}*81r9x`Adhz
z%yF^u{-NCzNTcJ)sSE`+C|Dz7cCjsMUKV#U^6|dZMheW6&5XgFkmbR_H-8GwP?-zP
z{9rux+ycp!=+O%+w4=N9#Xk=I=MXsW;*V#1OhZiVvgGt{4e@*IH*Si&((&wlz$D|>
z!(s0|CAOV*zcWzZQ{G+oj^AUaqup~}dVztDrl#?X0z4YM?HGN{GR)smpQ+KiGy
zhp<5YlFhG61)cmUt`-61lz$-mX)w=S;4Q`!e)6+Icjr17tgUMvvBjuXuxOVLuFGGr
z8%R&-sPv5&pBcZW-h+o9{bxAnfH&u(!&^XhaO9x}4`cLr3^>){7kS90DWCqn|IoN=
z@y@UQLq0;DfCAK;(h=fSd-QBd%t|1BGyPoJCC_z-{1cBpGVZ3PZ-1rJH_RzG&UQ-G
z$iL7x&l%|3=q;djQ(&9E#m;T3in1YdoHYalo5k4m|MCKSkd7NcZ}9cF6Sk%3449A>#A#
z^!;_hL1W^N(r)dim?39R1f7a+^k*g~mqi3C-czLWmzzxFFJSnlz>{(_s}+K>G{JUj%-
z>D%tK)16_%g*Od6ojUl1ap(JULm>Tx|NiIkn!fS=z56bML;l;v4t;>rFT5ExiMqrG
z9Vt&c-tYgyM}Oi@_Pt)UJFGwdrWkm4AygMlXo;tl+65_ZJ7z6}Z^81|s22L!0846R
zAH3>+-)UE06>uDVWlVneE&#bfcw
zfPEUO9H)pq`;S1MS^xQ;|9O-<*fWtAUU;FZP&@-_Mb&hRXR{7WIM7w-959~Bu%YGT
zbT9F+r`msi-~Wn79{w&ocnGX}fl~>4?K$pRUc2u;aKbU~q217U*FAp=mtFa(@Wc~O
zAv+UxOyVA#cCz-3-%}s&^~@@XA-#7{p$H{_nSBN%$0}r}t5j2oOe_yzTviMe*(hWn
z-sIW-f|4$A3FbLUt89zK2b
zrSV(s*QW1`Gtf%}H+=Gvf!B}cG&=5l%0?O0^y}^nSc6|mu9?FZ`0?#JlKEQ
zE8;iR=_vaB_kDf*&N`i3F%7kn(hc<||`xNjeXbDSa26
zPSl{&IXI9+b?GGq`Zn`J_uV@1{oR4@*TJzTomFUhPyUAdsb^k1^u?8V=R3*hxRcL>
z-g6SYyg_5>^;cao1QtJ$ebY*UU37o*O315T$wgr$aMkwja~VKRlhEV^HI$%9vy+d>
z!5_4LkM{^AUJPJfk4qk1IBYSm5$Oi`OrV|7w4;0~a8BheJmVDj#=V=OZj%jgP+S59
z>gh;$3V4s~;b0Hr=M(Pv+;y=ojh}oh{I$dH^;caKkB;Z^A3W0p`;#obHw1s3*PnE3
zEKj@P$KdUFq6ED}^RZ9fsN}L~2=Y^aosL02{p4fP5$Ypf6znD*DD9p*t{sm?cXmEA
z#BaL4;dSthdp;Xqsv(@mopMgR9$7@#?+w2adD?7two@C|4}8$^=XBKj#*6hxW7=8b~yOoRBo{>l%>7Yptma9uD2s1JJk
zn^J(f0Qs~}59O%M{9SqidYNIbSO4`k;L0o6~PwFp9&JYE4qfB(16s!G$b?CbvEvRIA+
z$?N{$@|>6NaV)q0Z=DTmUiOP|M|j>9E}I^>+&LM?tzUc~{&Au4xb{+M&2BG&>ppWI
zw19Tb@Bf=0igfi6^5eJOIgi`If+YTa=?xzMIdE+lg7tj=_>)f$b
z)R*A;fuEgsfBXg5{NsOv9>`&GymwE`O4M6(j?m3*7H>`f7MxImdjy0@O7t_&|0X{0*k~zZFS0W^
z7-QG}1+S7%)z5&Uyrcgz{wD&#bwPauyvopVe~}XZ1GPh2RRQhsN=p(B6oF+CD9(m0
z1Mw!$#%mJZAmV?8wpn@>ww5P_IWq;_L6iYO!_)vqg``5qry2OFx
zBSA2wKuJT!|0sse$HX&X+-IMCer|}k|NIbr-|6xnJ^v(Se0bmgniN$wOgbX)-tfst
ze{H0f88MDa9WgHr!vp%J_vIfwF9yq30&cnei$h@bQ!$tjpagvbSf^HhyCSs{Z9VKv
z=gLlEYXVT2k9>F+*FmIdIVKY9Z|IkfAmO*mSk$6hWO+*+Y7s!QT~#xOvge<@9!@;^
zcVYs4d!0@Xuz)rH4o~$lFZ;c5?{M2+fBb2@KkbYQ;a2foW-3d1LiuafjDd6t@Lzt_
zwK15LWCuqM!AlBgbFlsLE3XYhkX<$W$V1;1Hh%O&@tSt9KmNp%?v`@${kPrxr+Eka
z+P5F7_@O!*FZmE0dDuH++THj5-9Ya;wc~bOf1ci%cpQRBUNDtj42XOUyqkfw39A#n$2-Bnp?6D1E%
z`5d4+kFQ{GeLARK*VtMh+}FZ&dUbt=Q@5kFbG=JgTnCeFX+rRmVf1PP3
zRx!%1bf#zTTRgR7&!>#^%CvAYS3Bo+)!%mS*_0G7e_LI@U@-abqsJjg#jePHvtg
zx_F#xl=mhdYx+S{!pyVRMl`=3PLD23+zY<>IbG>Yj~9Tm@4QCkTy)6$JN0_$i-)B}&6qojNauG2B@8!ouH3Z5?y+9TsgzKpvih*e7WyzcmbG*Y@v{IddlhCbaM
zirmaacv&Lf?j(cf4xrGQDX5{iRJknxHUh#=%hujP&DoSL%!by$HkT%30b_ri#&>I*
zslJz{UsQ%9(lWOAT=^Rv>S;yUQ98#>%uU}OFuH_MScb33
zOZ-`f)}Uht@7Dbkz7Z~X@IiI|;kEnON>kQWt~ekoGeU(qNtmoUfvN12}g&F{qYKiGeD)o#NNeXEe(
zNdLcnPL$L;*jum3qz2@-QAA`blS|$$)d0~j^*!}`o$^qq!h->B30uq#@*o{@
zmI;@K;*Vs<)A!T!ku87h%3~X#^dD`0Dh2*E;b)(Hc3AX(R(X1c=LWpbM%?UC
z#GBCwC8!Pn^1Xj3+o2THf6fGcSpsrLdp)FpJGFZ@@zsN=GRq0>j&)h}LW7>y8}sG_
zbK2+Cu|UBg3ZU~Y%nQ%@!?@dB@%{Ys@h`In9kaFUr)xePL5w$(@c0VvTo09HNJjMh
z-j=e^%AcxNcv&1mgO0T8;_${h`IJ-^RIrJ=_;KmQ&6N+Olk`44QJ5TMAZlz}mA<-4dM|1RwkYwOyPnd7x~|TkyPs9|S!~ux^ZW5SH?_5U+{1$oT7(|&GH_qM
z-OKc`p>yWCo*u%qB3PaP%3+OI7Y#5W^Eve9q%T@Vl*8#F;;Aj&8wZ(g=_vN~C%zNT
zzx>uE2iHA6GN#L&aY3ZnSC&F0-C(Z4x%cRMi!^^N{ydJS>V>JQd2$Z*L}a=$ECi-n
z4iKT{S6Zx`38~6k8?d(9vJxdWREbAnxhcU^9l=ieT4n6DSI=Gp)DMz2&!*WXTBp`?
zU14T9XyjELAGFMQQP|cs-#$lh%83%CD*N-`s=CA_>*i-_;g3Rvy--odn|F=L